Dashboard

Editing: error_log

[Sat Aug 29 05:05:05.482813 2026] [lsapi:notice] [pid 935608:tid 935608] mod_lsapi:  version 1.1-92
[Sat Aug 29 05:05:05.495618 2026] [:notice] [pid 1017433:tid 1017433] [host root@host2038.hostmonster.com] mod_lsapi:  Selfstarter 1017433 started
[Sat Aug 29 05:05:05.532227 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: hybridlynx.alphaprocure.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:05.545666 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: alphaprocure.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:05.546799 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: winegoddess.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:05.588405 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: theadvocatesorg.org:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:05.597200 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: mail.bhindi.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:05.597911 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: bhindi.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:05.653795 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: ccinva.org:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:05.658586 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: softcomsolution.rushpcb.com.pk:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:05.663627 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: ehfields.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:05.666904 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: argusproduction.centerfornewcinema.net:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:05.692849 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: ericamontgomeryphotography.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:05.695158 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: luminousvertex.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:05.701148 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: powerofcoins.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:05.708748 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: webmail.jarrelljohnson.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:05.715571 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: anthonyeverettdevelopment.anthonyeverettrealestate.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:05.739856 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: garrettzander.zanderenterprises.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:05.745151 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: productosdeortodoncia1.xbdorthodontics.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:05.753997 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: imagesalonus.webonlineincome.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:05.754675 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: imageartisticsalon.webonlineincome.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:05.789848 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: tpsnj.vincenzosilvano.net:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:05.790770 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: gavirestaurant.vincenzosilvano.net:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:05.791684 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: vincenzosilvano.vincenzosilvano.net:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:05.792563 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: website-f892ec95.vincenzosilvano.net:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:05.793320 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: nutritionclinicny.vincenzosilvano.net:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:05.794372 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: digitalsolutionservice.vincenzosilvano.net:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:05.797972 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: eeorep.training-center.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:05.798756 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: eeorepresentative.training-center.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:05.815226 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: ppptampa.thesign8studio.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:05.815993 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: carlosmua.thesign8studio.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:05.816692 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: davaoestates.thesign8studio.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:05.817505 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: patthegutterrat.thesign8studio.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:05.818222 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: davaocityestates.thesign8studio.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:05.819006 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: mizpah-ministries.thesign8studio.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:05.834170 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: termoenvases-do.termoenvases.net:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.046274 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: debbieandgraham.strangeworx.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.142722 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: cityinnsuites.saurabiacontractors.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.143641 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: amialalkhaleej.saurabiacontractors.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.147473 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: fox-mart.rushpcb.com.pk:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.148334 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: lapoutine-co-uk.rushpcb.com.pk:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.149382 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: pcbcompany-co-uk.rushpcb.com.pk:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.150254 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: eurolecltd-co-uk.rushpcb.com.pk:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.151129 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: grab-a-bite-co-uk.rushpcb.com.pk:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.152086 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: misselliesltd-co-uk.rushpcb.com.pk:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.152955 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: morethanjustsubs-co-uk.rushpcb.com.pk:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.166041 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: spiritofamericatour.rosenthalfoundation.org:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.205804 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: efremdryer.beraluz.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.206749 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: beraluz-org.beraluz.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.208444 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: beraluzgroup.beraluz.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.223005 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: xyzece.protypegraphics.net:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.223791 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: capturephoto.protypegraphics.net:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.224632 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: capturedgems.protypegraphics.net:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.225329 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: printingbyjoe.protypegraphics.net:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.226061 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: capturedart-net.protypegraphics.net:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.226990 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: photosbykara-net.protypegraphics.net:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.227710 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: mcdcomputers-net.protypegraphics.net:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.228489 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: dienbergprinting.protypegraphics.net:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.229200 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: simplybelladesign.protypegraphics.net:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.229983 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: capturedancephoto-net.protypegraphics.net:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.230728 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: capturedance-photography.protypegraphics.net:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.231502 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: marykarpusfosterscholarship.protypegraphics.net:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.232278 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: capturedancephotography-net.protypegraphics.net:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.245152 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: portiktravel.portiktours.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.308030 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: diagecu.obdtoolz.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.308740 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: obd2toolz.obdtoolz.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.309628 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: diagecu2021.obdtoolz.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.324834 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: realguineapigvideos.netgurunews.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.370766 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: midaytax.millionairebuildersclub.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.371462 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: midayins.millionairebuildersclub.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.376586 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: lumbeesolar.millionairebuildersclub.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.377992 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: buymyinfo-biz.millionairebuildersclub.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.380344 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: midayinsurance.millionairebuildersclub.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.382129 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: lumbeesolar-org.millionairebuildersclub.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.387234 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: lumbeeriversolar.millionairebuildersclub.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.388019 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: clickforinfo-biz.millionairebuildersclub.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.402520 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: methmobalarms.methmob.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.403229 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: allianceinvestmentsllc.methmob.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.441716 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: burtonpixels.luminousvertex.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.442605 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: burtondigital.luminousvertex.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.443373 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: considerthefuture.luminousvertex.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.447257 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: workbase-site.lsihop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.448314 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: eastendhardware.lsihop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.449421 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: blackolivedesign.lsihop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.451274 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: eastend-equipment.lsihop.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.474973 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: remote.lockstockbarrel.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.518264 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: yamikin-portal.lifes-finance.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.566975 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: simijohn.jaysonjohn.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.570505 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: glamrus-rocks.hairaokerocks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.571206 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: website-ec1e123c.hairaokerocks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.579830 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: jhalb.iosephos.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.580792 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: homsips.iosephos.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.581693 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: blitz-ad.iosephos.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.582695 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: snackgaro.iosephos.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.583614 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: maanandjana.iosephos.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.584536 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: jha-digital.iosephos.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.585524 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: hoodride-lb.iosephos.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.586495 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: delements-me.iosephos.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.587475 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: firascoequipment.iosephos.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.588429 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: haddadenterprises.iosephos.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.589436 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: brotherscustomshop.iosephos.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.605744 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: tk3-mx.inetsystem.com.mx:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.607964 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: fivecorp-mx.inetsystem.com.mx:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.612158 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: website-4743079c.inetsystem.com.mx:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.613003 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: website-10d7448c.inetsystem.com.mx:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.629247 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: codyshilohbrown.hearod.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.749417 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: form8.formlabsnyc.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.750206 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: iempsg.formlabsnyc.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.758285 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: egelmail3.excellentpublicity.org:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.759038 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: excellentbasket1.excellentpublicity.org:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.759894 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: sonylivadvertising.excellentpublicity.org:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.760586 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: hotstaradvertising.excellentpublicity.org:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.761292 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: excellentpublicity1.excellentpublicity.org:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.761992 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: excellentpublicitycompany.excellentpublicity.org:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.762763 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: excellentpublicitymail-co-in.excellentpublicity.org:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.764146 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: excellentpublicityemail-co-in.excellentpublicity.org:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.764877 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: malibuvetclinic.evelienphotography.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.765749 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: rentevate.etherealpartners.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.766637 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: rinuenergy.etherealpartners.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.767644 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: vate-agency.etherealpartners.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.768622 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: vatecreative.etherealpartners.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.769532 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: nathanslafter-info.etherealpartners.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.770324 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: elevatebarcatering.etherealpartners.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.772149 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: secondwives-org.encoreboutiquenightclub.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.773032 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: philadelphialawworks-org.encoreboutiquenightclub.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.785472 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: fields.ehfields.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.786346 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: tiaandephraim.ehfields.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.787191 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: fieldsstudios.ehfields.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.801200 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: alqilaaturizm.duviatourism.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.858818 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: optimus-freight.com.ztxcloud.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.894111 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: smartamericangrowth.davidseaver.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.896314 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: tesla-referral-tesla.davidseaver.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.944414 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: twrebar.cortneywalker.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.945266 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: wishbone-city.cortneywalker.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:06.946196 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: triplewdetailing.cortneywalker.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.006131 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: yustorres.centerfornewcinema.net:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.007010 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: towerbomb.centerfornewcinema.net:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.007876 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: sipandbites.centerfornewcinema.net:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.009130 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: manilameals.centerfornewcinema.net:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.010113 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: tonetbombase.centerfornewcinema.net:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.011001 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: adcore-advertising.centerfornewcinema.net:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.011936 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: lejardinrosellatagaytay.centerfornewcinema.net:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.049445 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: cijeep.blaketaylorconsulting.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.051327 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: julienorthern.blaketaylorconsulting.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.052231 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: homevieweronline.blaketaylorconsulting.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.069092 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: ocprop-org.asymmetricstudios.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.069824 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: jordan-d-us.asymmetricstudios.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.175632 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: sris.irisphotocontest.org:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.176417 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: ukiahgardenclub.irisphotocontest.org:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.177118 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: website-8468b543.irisphotocontest.org:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.190308 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: remote.theenprogroup.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.268689 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: zanderenterprises.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.365319 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: wirearte.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.402633 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: vincenzosilvano.net:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.461070 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: twlcpa.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.462587 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: raithelcattle.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.501118 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: thefanon.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.532254 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: stellarstaffingca.info:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.557415 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: skycoating.net:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.564800 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: shopatburlington.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.568588 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: sevenstarmantis.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.572375 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: sdul.org:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.578363 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: scottaronow.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.608504 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: ronsseptic.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.615026 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: rm64.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.863539 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: mamiawamura.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.864270 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: malibuhotel.com.mx:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.865033 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: themainepointacupuncture.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.881263 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: lockstockbarrel.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.887602 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: liznichols.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.888435 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: lizgoodwintherapy.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.890867 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: linear-active.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.892565 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: lilypad-online.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.936229 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: kriveloff-associates.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.958187 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: kcactf4.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.960636 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: karinehnyc.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.993227 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: hairaokerocks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.994829 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: jaimiegellerjewelry.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:07.995711 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: jacintoastiazaran.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:08.004271 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: it-computes.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:08.017954 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: inetsystem.com.mx:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:08.045224 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: hyannisportclub.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:08.058365 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: hrtgatlanta.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:08.087123 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: harnessre.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:08.103530 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: greenokie.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:08.132392 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: giantsfans.net:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:08.197203 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: fernandinafol.org:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:08.305261 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: davidluning.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:08.332496 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: cortneywalker.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:08.346269 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: cloverleafsystems.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:08.360975 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: cgarnerphoto.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:08.365633 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: centerfornewcinema.net:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:08.373623 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: cambridgeclassical.org:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:08.378589 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: burodesign.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:08.386912 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: bridgewaycrc.org:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:08.391562 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: boydscleaning.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:08.394704 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: boldfacemarketing.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:08.415578 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: battlecreekhunt.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:08.430615 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: attorneylang.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:08.443184 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: angelicoviolins.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:08.455626 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: irisphotocontest.org:443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:08.478768 2026] [ssl:warn] [pid 935608:tid 935608] AH01909: localhost:8443:0 server certificate does NOT include an ID which matches the server name
[Sat Aug 29 05:05:08.514118 2026] [qos:notice] [pid 935608:tid 935608] mod_qos(007): calculated MaxClients/MaxRequestWorkers (max connections): 6144, applied limit: 2048 (QS_MaxClients)
[Sat Aug 29 05:05:09.084402 2026] [http2:info] [pid 935608:tid 935608] AH03090: mod_http2 (v2.0.42, feats=CHPRIO+SHA256+INVHD+DWINS, nghttp2 1.70.0), initializing...
[Sat Aug 29 05:05:09.098830 2026] [mpm_event:notice] [pid 935608:tid 935608] AH00489: Apache/2.4.68 (cPanel) OpenSSL/3.5.5 Apache mod_qos/11.76 mod_bwlimited/1.4 mod_fcgid/2.3.9 mod_rbld2.0 configured -- resuming normal operations
[Sat Aug 29 05:05:09.098843 2026] [core:notice] [pid 935608:tid 935608] AH00094: Command line: '/usr/sbin/httpd'
[Sat Aug 29 05:05:10.215137 2026] [http2:info] [pid 1017536:tid 1017536] h2_workers: created with min=128 max=192 idle_ms=600000
[Sat Aug 29 05:05:10.249687 2026] [security2:error] [pid 1017536:tid 1017677] [client 20.104.18.15:46997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/indo.php"] [unique_id "apK85iJcY4fy7tP-rU3ZHwAAAh8"]
[Sat Aug 29 05:05:10.250081 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.104.18.15:13192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK85iJcY4fy7tP-rU3ZIQAAAh0"]
[Sat Aug 29 05:05:10.250606 2026] [security2:error] [pid 1017536:tid 1017666] [client 4.205.62.107:61841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/test.php"] [unique_id "apK85iJcY4fy7tP-rU3ZHAAAAhQ"]
[Sat Aug 29 05:05:10.250681 2026] [security2:error] [pid 1017536:tid 1017668] [client 20.48.250.41:49817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jarritosmexico.com"] [uri "/wp-blogs.php"] [unique_id "apK85iJcY4fy7tP-rU3ZGwAAAhY"]
[Sat Aug 29 05:05:10.251649 2026] [security2:error] [pid 1017536:tid 1017683] [client 20.104.18.15:36820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/82.php"] [unique_id "apK85iJcY4fy7tP-rU3ZIwAAAiU"]
[Sat Aug 29 05:05:10.253122 2026] [security2:error] [pid 1017536:tid 1017746] [client 93.123.109.228:50748] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.edwardjindovina.com"] [uri "/___proxy_subdomain_cpcontacts/current/.env"] [unique_id "apK85iJcY4fy7tP-rU3ZJAAAAmQ"]
[Sat Aug 29 05:05:10.254840 2026] [security2:error] [pid 1017536:tid 1017689] [client 20.104.18.15:23503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/ap.php"] [unique_id "apK85iJcY4fy7tP-rU3ZJwAAAis"]
[Sat Aug 29 05:05:10.255669 2026] [security2:error] [pid 1017536:tid 1017773] [client 4.205.62.107:22507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/xp.php"] [unique_id "apK85iJcY4fy7tP-rU3ZKAAAAn8"]
[Sat Aug 29 05:05:10.258575 2026] [security2:error] [pid 1017536:tid 1017698] [client 20.48.160.90:45874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/Q3.php"] [unique_id "apK85iJcY4fy7tP-rU3ZKgAAAjQ"]
[Sat Aug 29 05:05:10.260797 2026] [security2:error] [pid 1017536:tid 1017700] [client 20.48.250.41:64204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/06.php"] [unique_id "apK85iJcY4fy7tP-rU3ZLgAAAjY"]
[Sat Aug 29 05:05:10.264530 2026] [security2:error] [pid 1017536:tid 1017711] [client 68.155.159.216:40325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.gavirestaurant.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK85iJcY4fy7tP-rU3ZMQAAAkE"]
[Sat Aug 29 05:05:10.266164 2026] [security2:error] [pid 1017536:tid 1017710] [client 20.48.250.41:12368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "employedlawyer.com"] [uri "/h2a2ck.php"] [unique_id "apK85iJcY4fy7tP-rU3ZMgAAAkA"]
[Sat Aug 29 05:05:10.268049 2026] [security2:error] [pid 1017536:tid 1017717] [client 168.107.94.195:55747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK85iJcY4fy7tP-rU3ZNQAAAkc"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:10.269119 2026] [security2:error] [pid 1017536:tid 1017716] [client 20.104.49.130:57676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/ohct.php"] [unique_id "apK85iJcY4fy7tP-rU3ZNgAAAkY"]
[Sat Aug 29 05:05:10.269308 2026] [security2:error] [pid 1017536:tid 1017720] [client 68.155.159.216:16235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.showerdoorsdubuque.com"] [uri "/images/index.php"] [unique_id "apK85iJcY4fy7tP-rU3ZNwAAAko"]
[Sat Aug 29 05:05:10.272955 2026] [security2:error] [pid 1017536:tid 1017723] [client 93.123.109.228:50756] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.edwardjindovina.com"] [uri "/___proxy_subdomain_cpcontacts/cron/.env"] [unique_id "apK85iJcY4fy7tP-rU3ZOAAAAk0"]
[Sat Aug 29 05:05:10.273632 2026] [security2:error] [pid 1017536:tid 1017726] [client 93.123.109.228:50752] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.edwardjindovina.com"] [uri "/___proxy_subdomain_cpcontacts/crm/.env"] [unique_id "apK85iJcY4fy7tP-rU3ZOQAAAlA"]
[Sat Aug 29 05:05:10.273802 2026] [security2:error] [pid 1017536:tid 1017729] [client 20.104.49.130:53684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/well.php"] [unique_id "apK85iJcY4fy7tP-rU3ZOgAAAlM"]
[Sat Aug 29 05:05:10.275208 2026] [security2:error] [pid 1017536:tid 1017732] [client 158.23.147.79:23470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ridetimewinnipegservicetiresrims.ca"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK85iJcY4fy7tP-rU3ZOwAAAlY"]
[Sat Aug 29 05:05:10.276166 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.104.104.62:13648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahrice-co-uk.glowt-shirt.com"] [uri "/ahy66.php"] [unique_id "apK85iJcY4fy7tP-rU3ZPAAAAlY"]
[Sat Aug 29 05:05:10.282062 2026] [security2:error] [pid 1017536:tid 1017742] [client 93.123.109.228:50806] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.edwardjindovina.com"] [uri "/___proxy_subdomain_cpcontacts/develop/.env"] [unique_id "apK85iJcY4fy7tP-rU3ZQQAAAmA"]
[Sat Aug 29 05:05:10.282831 2026] [security2:error] [pid 1017536:tid 1017742] [client 114.119.159.226:60083] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.classiclightingusa.com"] [uri "/catalog/product_info.php/products_id/1133/action/notify/osCsid/5a931bdbc52488e3634cc6521c7fe050"] [unique_id "apK85iJcY4fy7tP-rU3ZQgAAAmA"], referer: http://www.classiclightingusa.com/catalog/product_info.php/products_id/1133/osCsid/5a931bdbc52488e3634cc6521c7fe050
[Sat Aug 29 05:05:10.282831 2026] [security2:error] [pid 1017536:tid 1017740] [client 93.123.109.228:50770] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.edwardjindovina.com"] [uri "/___proxy_subdomain_cpcontacts/development/.env"] [unique_id "apK85iJcY4fy7tP-rU3ZQAAAAl4"]
[Sat Aug 29 05:05:10.285278 2026] [security2:error] [pid 1017536:tid 1017743] [client 20.104.49.130:51345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/load.php"] [unique_id "apK85iJcY4fy7tP-rU3ZRAAAAmE"]
[Sat Aug 29 05:05:10.288295 2026] [security2:error] [pid 1017536:tid 1017750] [client 93.123.109.228:50822] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.edwardjindovina.com"] [uri "/___proxy_subdomain_cpcontacts/dev/.env"] [unique_id "apK85iJcY4fy7tP-rU3ZRQAAAmg"]
[Sat Aug 29 05:05:10.289296 2026] [security2:error] [pid 1017536:tid 1017750] [client 20.104.104.62:48493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK85iJcY4fy7tP-rU3ZRwAAAmg"]
[Sat Aug 29 05:05:10.289932 2026] [security2:error] [pid 1017536:tid 1017752] [client 93.123.109.228:50854] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.edwardjindovina.com"] [uri "/___proxy_subdomain_cpcontacts/developer/.env"] [unique_id "apK85iJcY4fy7tP-rU3ZRgAAAmo"]
[Sat Aug 29 05:05:10.291639 2026] [security2:error] [pid 1017536:tid 1017750] [client 20.104.104.62:14383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.vistacounselingcolorado.com"] [uri "/Contrller.php"] [unique_id "apK85iJcY4fy7tP-rU3ZSgAAAmg"]
[Sat Aug 29 05:05:10.292398 2026] [security2:error] [pid 1017536:tid 1017756] [client 158.23.147.79:24476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/lv.php"] [unique_id "apK85iJcY4fy7tP-rU3ZSwAAAm4"]
[Sat Aug 29 05:05:10.293601 2026] [security2:error] [pid 1017536:tid 1017756] [client 20.104.49.130:57672] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/1.php"] [unique_id "apK85iJcY4fy7tP-rU3ZTAAAAm4"]
[Sat Aug 29 05:05:10.293663 2026] [security2:error] [pid 1017536:tid 1017756] [client 20.104.49.130:57672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/1.php"] [unique_id "apK85iJcY4fy7tP-rU3ZTAAAAm4"]
[Sat Aug 29 05:05:10.295177 2026] [security2:error] [pid 1017536:tid 1017756] [client 195.178.110.247:10794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ladiesandbabies.com"] [uri "/index.php"] [unique_id "apK85iJcY4fy7tP-rU3ZTgAAAm4"]
[Sat Aug 29 05:05:10.295187 2026] [security2:error] [pid 1017536:tid 1017762] [client 68.155.159.216:12176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/login.php"] [unique_id "apK85iJcY4fy7tP-rU3ZTQAAAnQ"]
[Sat Aug 29 05:05:10.295933 2026] [security2:error] [pid 1017536:tid 1017764] [client 158.23.147.79:58933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK85iJcY4fy7tP-rU3ZTwAAAnY"]
[Sat Aug 29 05:05:10.299678 2026] [security2:error] [pid 1017536:tid 1017770] [client 4.205.62.107:57766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "troop264olney.net"] [uri "/services.php"] [unique_id "apK85iJcY4fy7tP-rU3ZUgAAAnw"]
[Sat Aug 29 05:05:10.300614 2026] [security2:error] [pid 1017536:tid 1017693] [client 20.48.251.3:57834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/aws_config.php"] [unique_id "apK85iJcY4fy7tP-rU3ZUwAAAi8"]
[Sat Aug 29 05:05:10.300978 2026] [security2:error] [pid 1017536:tid 1017775] [client 68.155.159.216:58363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/cgi-bin/index.php"] [unique_id "apK85iJcY4fy7tP-rU3ZVQAAAoE"]
[Sat Aug 29 05:05:10.301940 2026] [security2:error] [pid 1017536:tid 1017777] [client 4.205.62.107:53385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/fff.php"] [unique_id "apK85iJcY4fy7tP-rU3ZVwAAAoM"]
[Sat Aug 29 05:05:10.303323 2026] [security2:error] [pid 1017536:tid 1017779] [client 68.155.159.216:50249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-includes/css/index.php"] [unique_id "apK85iJcY4fy7tP-rU3ZWAAAAoU"]
[Sat Aug 29 05:05:10.303788 2026] [security2:error] [pid 1017536:tid 1017781] [client 68.155.159.216:51246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK85iJcY4fy7tP-rU3ZWQAAAoc"]
[Sat Aug 29 05:05:10.304959 2026] [security2:error] [pid 1017536:tid 1017783] [client 4.205.62.107:22319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/xa.php"] [unique_id "apK85iJcY4fy7tP-rU3ZWgAAAok"]
[Sat Aug 29 05:05:10.306305 2026] [security2:error] [pid 1017536:tid 1017785] [client 68.155.159.216:51400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK85iJcY4fy7tP-rU3ZWwAAAos"]
[Sat Aug 29 05:05:10.307650 2026] [security2:error] [pid 1017536:tid 1017787] [client 20.104.49.130:57695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/berlin.php"] [unique_id "apK85iJcY4fy7tP-rU3ZXAAAAo0"]
[Sat Aug 29 05:05:10.309042 2026] [security2:error] [pid 1017536:tid 1017789] [client 68.155.159.216:18342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.baxterevents.com"] [uri "/wp-l0gin.php"] [unique_id "apK85iJcY4fy7tP-rU3ZXQAAAo8"]
[Sat Aug 29 05:05:10.309593 2026] [security2:error] [pid 1017536:tid 1017791] [client 4.205.62.107:2892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/kedi.php"] [unique_id "apK85iJcY4fy7tP-rU3ZXgAAApE"]
[Sat Aug 29 05:05:10.310917 2026] [security2:error] [pid 1017536:tid 1017793] [client 158.23.147.79:30710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK85iJcY4fy7tP-rU3ZXwAAApM"]
[Sat Aug 29 05:05:10.311147 2026] [security2:error] [pid 1017536:tid 1017669] [client 20.104.18.15:7125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK85iJcY4fy7tP-rU3ZYAAAAhc"]
[Sat Aug 29 05:05:10.311972 2026] [security2:error] [pid 1017536:tid 1017667] [client 20.104.49.130:52480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.carlosmua.com"] [uri "/dragonshell.php"] [unique_id "apK85iJcY4fy7tP-rU3ZYQAAAhU"]
[Sat Aug 29 05:05:10.313609 2026] [security2:error] [pid 1017536:tid 1017675] [client 158.23.147.79:50143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK85iJcY4fy7tP-rU3ZYwAAAh0"]
[Sat Aug 29 05:05:10.317500 2026] [security2:error] [pid 1017536:tid 1017698] [client 20.48.250.41:19393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "liatbehr.com"] [uri "/0byte.php"] [unique_id "apK85iJcY4fy7tP-rU3ZaAAAAjQ"]
[Sat Aug 29 05:05:10.318839 2026] [security2:error] [pid 1017536:tid 1017704] [client 20.48.250.41:58533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/ww.php"] [unique_id "apK85iJcY4fy7tP-rU3ZawAAAjo"]
[Sat Aug 29 05:05:10.319593 2026] [security2:error] [pid 1017536:tid 1017711] [client 158.23.147.79:63816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-content/radio.php"] [unique_id "apK85iJcY4fy7tP-rU3ZbAAAAkE"]
[Sat Aug 29 05:05:10.319805 2026] [security2:error] [pid 1017536:tid 1017714] [client 68.155.159.216:16330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/file5.php"] [unique_id "apK85iJcY4fy7tP-rU3ZbgAAAkQ"]
[Sat Aug 29 05:05:10.321855 2026] [security2:error] [pid 1017536:tid 1017710] [client 20.48.160.90:62594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK85iJcY4fy7tP-rU3ZcAAAAkA"]
[Sat Aug 29 05:05:10.322743 2026] [security2:error] [pid 1017536:tid 1017716] [client 20.104.49.130:53839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.scubaetcfl.com"] [uri "/wp-good.php"] [unique_id "apK85iJcY4fy7tP-rU3ZcQAAAkY"]
[Sat Aug 29 05:05:10.323094 2026] [security2:error] [pid 1017536:tid 1017720] [client 158.23.147.79:48349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abmacgroupcom.ab-mac.com"] [uri "/first.php"] [unique_id "apK85iJcY4fy7tP-rU3ZcgAAAko"]
[Sat Aug 29 05:05:10.323864 2026] [security2:error] [pid 1017536:tid 1017722] [client 145.239.10.137:51300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.10.239.145.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "knowledgeofwater.com"] [uri "/ultra.php"] [unique_id "apK85iJcY4fy7tP-rU3ZcwAAAkw"], referer: http://knowledgeofwater.com/ultra.php
[Sat Aug 29 05:05:10.324133 2026] [security2:error] [pid 1017536:tid 1017726] [client 20.104.104.62:56573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.bv-place.com"] [uri "/msy.php"] [unique_id "apK85iJcY4fy7tP-rU3ZdAAAAlA"]
[Sat Aug 29 05:05:10.325937 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.104.104.62:20651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/koe.php"] [unique_id "apK85iJcY4fy7tP-rU3ZdgAAAlY"]
[Sat Aug 29 05:05:10.328265 2026] [security2:error] [pid 1017536:tid 1017744] [client 93.123.109.228:50838] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.edwardjindovina.com"] [uri "/___proxy_subdomain_cpcontacts/demo/.env"] [unique_id "apK85iJcY4fy7tP-rU3ZeAAAAmI"]
[Sat Aug 29 05:05:10.328890 2026] [security2:error] [pid 1017536:tid 1017750] [client 20.104.104.62:44589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK85iJcY4fy7tP-rU3ZfAAAAmg"]
[Sat Aug 29 05:05:10.332448 2026] [security2:error] [pid 1017536:tid 1017768] [client 74.7.228.11:33642] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "ministeriosemanuel.org"] [uri "/robots.txt"] [unique_id "apK85iJcY4fy7tP-rU3ZgAAAAno"]
[Sat Aug 29 05:05:10.333263 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.48.250.41:23501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK85iJcY4fy7tP-rU3ZggAAAnk"]
[Sat Aug 29 05:05:10.334596 2026] [security2:error] [pid 1017536:tid 1017770] [client 20.104.49.130:43029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/wpxml.php"] [unique_id "apK85iJcY4fy7tP-rU3ZgwAAAnw"]
[Sat Aug 29 05:05:10.343599 2026] [security2:error] [pid 1017536:tid 1017704] [client 20.104.49.130:36040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.danesquality.com"] [uri "/jp.php"] [unique_id "apK85iJcY4fy7tP-rU3ZigAAAjo"]
[Sat Aug 29 05:05:10.343914 2026] [security2:error] [pid 1017536:tid 1017715] [client 52.139.37.240:65308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "skyyentertainment.skyytalent.com"] [uri "/about.php7"] [unique_id "apK85iJcY4fy7tP-rU3ZhQAAAkU"]
[Sat Aug 29 05:05:10.377345 2026] [core:error] [pid 1017536:tid 1017738] [client 57.141.14.6:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:10.377373 2026] [core:error] [pid 1017536:tid 1017738] [client 57.141.14.6:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:10.381978 2026] [autoindex:error] [pid 1017536:tid 1017686] [client 136.108.73.139:34350] AH01276: Cannot serve directory /home3/fdrjvmmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:05:10.398897 2026] [security2:error] [pid 1017536:tid 1017712] [client 20.63.219.114:9359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "compropolis.mx"] [uri "/disagraeed.php"] [unique_id "apK85iJcY4fy7tP-rU3ZnAAAAkI"]
[Sat Aug 29 05:05:10.400958 2026] [security2:error] [pid 1017536:tid 1017712] [client 20.48.250.41:49917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jarritosmexico.com"] [uri "/mini.php"] [unique_id "apK85iJcY4fy7tP-rU3ZnwAAAkI"]
[Sat Aug 29 05:05:10.401452 2026] [security2:error] [pid 1017536:tid 1017748] [client 20.48.160.90:45947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/Q1.php"] [unique_id "apK85iJcY4fy7tP-rU3ZoAAAAmY"]
[Sat Aug 29 05:05:10.401480 2026] [security2:error] [pid 1017536:tid 1017756] [client 20.48.250.41:62277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/class.php"] [unique_id "apK85iJcY4fy7tP-rU3ZoQAAAm4"]
[Sat Aug 29 05:05:10.403023 2026] [security2:error] [pid 1017536:tid 1017712] [client 20.48.250.41:12335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "employedlawyer.com"] [uri "/error_log.php"] [unique_id "apK85iJcY4fy7tP-rU3ZogAAAkI"]
[Sat Aug 29 05:05:10.404651 2026] [security2:error] [pid 1017536:tid 1017712] [client 20.104.18.15:23449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/media.php"] [unique_id "apK85iJcY4fy7tP-rU3ZowAAAkI"]
[Sat Aug 29 05:05:10.413558 2026] [security2:error] [pid 1017536:tid 1017694] [client 20.203.141.11:29722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "germanmorenoperez.com"] [uri "/f.php"] [unique_id "apK85iJcY4fy7tP-rU3ZpwAAAjA"]
[Sat Aug 29 05:05:10.414048 2026] [security2:error] [pid 1017536:tid 1017760] [client 20.104.18.15:13271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK85iJcY4fy7tP-rU3ZqAAAAnI"]
[Sat Aug 29 05:05:10.424888 2026] [security2:error] [pid 1017536:tid 1017685] [client 20.196.209.81:4833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/wp-admin/class-db.php"] [unique_id "apK85iJcY4fy7tP-rU3ZqwAAAic"]
[Sat Aug 29 05:05:10.426888 2026] [security2:error] [pid 1017536:tid 1017685] [client 68.155.159.216:24545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK85iJcY4fy7tP-rU3ZrAAAAic"]
[Sat Aug 29 05:05:10.428662 2026] [security2:error] [pid 1017536:tid 1017685] [client 20.104.18.15:36837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/dex.php"] [unique_id "apK85iJcY4fy7tP-rU3ZrQAAAic"]
[Sat Aug 29 05:05:10.431407 2026] [security2:error] [pid 1017536:tid 1017793] [client 20.104.104.62:13609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahrice-co-uk.glowt-shirt.com"] [uri "/gaje.php"] [unique_id "apK85iJcY4fy7tP-rU3ZrgAAApM"]
[Sat Aug 29 05:05:10.435057 2026] [security2:error] [pid 1017536:tid 1017706] [client 65.111.10.219:27679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.10.111.65.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK85iJcY4fy7tP-rU3ZpgAAAjw"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:10.436802 2026] [security2:error] [pid 1017536:tid 1017674] [client 52.139.37.240:25043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/ahax.php"] [unique_id "apK85iJcY4fy7tP-rU3ZsAAAAhw"]
[Sat Aug 29 05:05:10.437717 2026] [security2:error] [pid 1017536:tid 1017793] [client 20.104.18.15:46993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/sign.php"] [unique_id "apK85iJcY4fy7tP-rU3ZsQAAApM"]
[Sat Aug 29 05:05:10.438614 2026] [security2:error] [pid 1017536:tid 1017674] [client 20.104.104.62:14359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.vistacounselingcolorado.com"] [uri "/Zeiss.php"] [unique_id "apK85iJcY4fy7tP-rU3ZsgAAAhw"]
[Sat Aug 29 05:05:10.440260 2026] [security2:error] [pid 1017536:tid 1017709] [client 74.248.24.12:3455] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.realestatetrifecta.com"] [uri "/1.php7"] [unique_id "apK85iJcY4fy7tP-rU3ZswAAAj8"]
[Sat Aug 29 05:05:10.440352 2026] [security2:error] [pid 1017536:tid 1017709] [client 74.248.24.12:3455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/1.php7"] [unique_id "apK85iJcY4fy7tP-rU3ZswAAAj8"]
[Sat Aug 29 05:05:10.445611 2026] [security2:error] [pid 1017536:tid 1017727] [client 4.232.148.111:18743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/bthil.php"] [unique_id "apK85iJcY4fy7tP-rU3ZtAAAAlE"]
[Sat Aug 29 05:05:10.447028 2026] [security2:error] [pid 1017536:tid 1017690] [client 20.104.18.15:7154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK85iJcY4fy7tP-rU3ZtQAAAiw"]
[Sat Aug 29 05:05:10.455458 2026] [security2:error] [pid 1017536:tid 1017709] [client 20.48.250.41:61783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/w1px.php"] [unique_id "apK85iJcY4fy7tP-rU3ZuAAAAj8"]
[Sat Aug 29 05:05:10.459092 2026] [core:error] [pid 1017536:tid 1017739] [client 74.248.24.12:24693] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:10.459109 2026] [core:error] [pid 1017536:tid 1017739] [client 74.248.24.12:24693] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:10.461587 2026] [security2:error] [pid 1017536:tid 1017762] [client 20.104.104.62:56514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.bv-place.com"] [uri "/siln.php"] [unique_id "apK85iJcY4fy7tP-rU3ZugAAAnQ"]
[Sat Aug 29 05:05:10.466697 2026] [security2:error] [pid 1017536:tid 1017762] [client 20.48.251.3:57863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/dialog.php"] [unique_id "apK85iJcY4fy7tP-rU3ZvAAAAnQ"]
[Sat Aug 29 05:05:10.490882 2026] [security2:error] [pid 1017536:tid 1017670] [client 34.7.216.49:48866] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "webdisk.bridgewaycentretrust.org"] [uri "/@fs/var/www/html/wp-config.php"] [unique_id "apK85iJcY4fy7tP-rU3ZvwAAAhg"]
[Sat Aug 29 05:05:10.491907 2026] [security2:error] [pid 1017536:tid 1017718] [client 40.83.93.50:9610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.superugly.com"] [uri "/wp-content/admin-header.php"] [unique_id "apK85iJcY4fy7tP-rU3ZwQAAAkg"]
[Sat Aug 29 05:05:10.493468 2026] [security2:error] [pid 1017536:tid 1017709] [client 20.48.250.41:19452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "liatbehr.com"] [uri "/xr.php"] [unique_id "apK85iJcY4fy7tP-rU3ZwwAAAj8"]
[Sat Aug 29 05:05:10.494297 2026] [security2:error] [pid 1017536:tid 1017670] [client 20.104.104.62:10432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK85iJcY4fy7tP-rU3ZxgAAAhg"]
[Sat Aug 29 05:05:10.496862 2026] [core:error] [pid 1017536:tid 1017693] [client 34.7.216.49:48942] AH10244: invalid URI path (/@fs/../../../../../root/.env?raw??)
[Sat Aug 29 05:05:10.497751 2026] [core:error] [pid 1017536:tid 1017683] [client 34.7.216.49:48930] AH10244: invalid URI path (/@fs/../../../../../app/.env?raw??)
[Sat Aug 29 05:05:10.498154 2026] [security2:error] [pid 1017536:tid 1017775] [client 34.7.216.49:48908] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "webdisk.bridgewaycentretrust.org"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2fproc/self/environ"] [unique_id "apK85iJcY4fy7tP-rU3ZzgAAAoE"]
[Sat Aug 29 05:05:10.499460 2026] [security2:error] [pid 1017536:tid 1017744] [client 34.7.216.49:48938] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "webdisk.bridgewaycentretrust.org"] [uri "/@fs/../../../../../proc/self/environ"] [unique_id "apK85iJcY4fy7tP-rU3Z1AAAAmI"]
[Sat Aug 29 05:05:10.503069 2026] [security2:error] [pid 1017536:tid 1017703] [client 4.232.148.111:21780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tiaandephraim.com"] [uri "/files/index.php"] [unique_id "apK85iJcY4fy7tP-rU3Z2gAAAjk"]
[Sat Aug 29 05:05:10.505198 2026] [security2:error] [pid 1017536:tid 1017743] [client 20.48.250.41:23441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK85iJcY4fy7tP-rU3Z3gAAAmE"]
[Sat Aug 29 05:05:10.511535 2026] [security2:error] [pid 1017536:tid 1017724] [client 20.48.160.90:64701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK85iJcY4fy7tP-rU3Z6QAAAk4"]
[Sat Aug 29 05:05:10.519340 2026] [security2:error] [pid 1017536:tid 1017741] [client 20.197.61.180:16278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eeeaudio.com"] [uri "/wp-content/languages/chosen.php"] [unique_id "apK85iJcY4fy7tP-rU3Z7AAAAl8"]
[Sat Aug 29 05:05:10.539081 2026] [security2:error] [pid 1017536:tid 1017705] [client 20.48.160.90:23234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/nz.php"] [unique_id "apK85iJcY4fy7tP-rU3Z_gAAAjs"]
[Sat Aug 29 05:05:10.539308 2026] [security2:error] [pid 1017536:tid 1017678] [client 20.48.250.41:64584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jarritosmexico.com"] [uri "/amp.php"] [unique_id "apK85iJcY4fy7tP-rU3Z_wAAAiA"]
[Sat Aug 29 05:05:10.549088 2026] [core:error] [pid 1017536:tid 1017791] [client 34.143.179.161:57024] AH10244: invalid URI path (/@fs/../../../../../app/.env?raw??)
[Sat Aug 29 05:05:10.551230 2026] [security2:error] [pid 1017536:tid 1017719] [client 62.60.130.128:59000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.130.60.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gjn.ukm.mybluehost.me"] [uri "/wp-admin/admin-ajax.php"] [unique_id "apK85iJcY4fy7tP-rU3aBwAAAkk"]
[Sat Aug 29 05:05:10.554129 2026] [security2:error] [pid 1017536:tid 1017738] [client 34.143.179.161:57016] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cpcontacts.harnessenergyusa.com"] [uri "/@fs/var/run/secrets/kubernetes.io/serviceaccount/token"] [unique_id "apK85iJcY4fy7tP-rU3aCQAAAlw"]
[Sat Aug 29 05:05:10.554446 2026] [security2:error] [pid 1017536:tid 1017709] [client 20.104.18.15:23508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/adminfuns.php"] [unique_id "apK85iJcY4fy7tP-rU3aCgAAAj8"]
[Sat Aug 29 05:05:10.554949 2026] [security2:error] [pid 1017536:tid 1017719] [client 20.104.18.15:13293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/ap.php"] [unique_id "apK85iJcY4fy7tP-rU3aCwAAAkk"]
[Sat Aug 29 05:05:10.555008 2026] [security2:error] [pid 1017536:tid 1017792] [client 143.14.151.241:41350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.151.14.143.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/cron.php"] [unique_id "apK85iJcY4fy7tP-rU3aAgAAApI"], referer: https://abantiquo.aldergate.net/
[Sat Aug 29 05:05:10.557267 2026] [security2:error] [pid 1017536:tid 1017709] [client 93.152.221.156:53529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.nme.cle.mybluehost.me"] [uri "/admin/phpinfo.php"] [unique_id "apK85iJcY4fy7tP-rU3aDAAAAj8"]
[Sat Aug 29 05:05:10.559184 2026] [security2:error] [pid 1017536:tid 1017758] [client 34.143.179.161:57010] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.harnessenergyusa.com"] [uri "/@fs/var/www/html/wp-config.php"] [unique_id "apK85iJcY4fy7tP-rU3aEAAAAnA"]
[Sat Aug 29 05:05:10.565135 2026] [security2:error] [pid 1017536:tid 1017672] [client 34.143.179.161:57036] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "401"] [hostname "cpcontacts.harnessenergyusa.com"] [uri "/___proxy_subdomain_cpcontacts/cgi-sys/404.html"] [unique_id "apK85iJcY4fy7tP-rU3aAwAAAho"]
[Sat Aug 29 05:05:10.567225 2026] [security2:error] [pid 1017536:tid 1017672] [client 20.104.104.62:13600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahrice-co-uk.glowt-shirt.com"] [uri "/wp-admin/zwso.php"] [unique_id "apK85iJcY4fy7tP-rU3aGQAAAho"]
[Sat Aug 29 05:05:10.579665 2026] [security2:error] [pid 1017536:tid 1017756] [client 34.143.179.161:57102] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "cpcontacts.harnessenergyusa.com"] [uri "/@fs/../../../../../proc/self/environ"] [unique_id "apK85iJcY4fy7tP-rU3aHQAAAm4"]
[Sat Aug 29 05:05:10.585041 2026] [security2:error] [pid 1017536:tid 1017683] [client 20.48.250.41:65408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/8.php"] [unique_id "apK85iJcY4fy7tP-rU3aIQAAAiU"]
[Sat Aug 29 05:05:10.586772 2026] [security2:error] [pid 1017536:tid 1017683] [client 20.104.104.62:15303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.vistacounselingcolorado.com"] [uri "/ww2.php"] [unique_id "apK85iJcY4fy7tP-rU3aIgAAAiU"]
[Sat Aug 29 05:05:10.588374 2026] [security2:error] [pid 1017536:tid 1017683] [client 20.104.18.15:47021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/wnnjpsby.php"] [unique_id "apK85iJcY4fy7tP-rU3aIwAAAiU"]
[Sat Aug 29 05:05:10.589825 2026] [security2:error] [pid 1017536:tid 1017683] [client 20.48.250.41:12391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "employedlawyer.com"] [uri "/403.php"] [unique_id "apK85iJcY4fy7tP-rU3aJAAAAiU"]
[Sat Aug 29 05:05:10.591172 2026] [security2:error] [pid 1017536:tid 1017683] [client 20.104.18.15:36826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/inso.php"] [unique_id "apK85iJcY4fy7tP-rU3aJwAAAiU"]
[Sat Aug 29 05:05:10.591443 2026] [core:error] [pid 1017536:tid 1017760] [client 34.143.179.161:57064] AH10244: invalid URI path (/@fs/../../../../../root/.env?raw??)
[Sat Aug 29 05:05:10.592525 2026] [security2:error] [pid 1017536:tid 1017683] [client 20.104.104.62:2467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.bv-place.com"] [uri "/f-401.php"] [unique_id "apK85iJcY4fy7tP-rU3aKQAAAiU"]
[Sat Aug 29 05:05:10.606582 2026] [security2:error] [pid 1017536:tid 1017681] [client 20.48.251.3:57807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/phpinfo01.php"] [unique_id "apK85iJcY4fy7tP-rU3aLgAAAiM"]
[Sat Aug 29 05:05:10.607276 2026] [security2:error] [pid 1017536:tid 1017775] [client 20.104.18.15:7166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/ap.php"] [unique_id "apK85iJcY4fy7tP-rU3aLwAAAoE"]
[Sat Aug 29 05:05:10.614311 2026] [security2:error] [pid 1017536:tid 1017691] [client 20.48.250.41:58567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/to.php"] [unique_id "apK85iJcY4fy7tP-rU3aMgAAAi0"]
[Sat Aug 29 05:05:10.624547 2026] [security2:error] [pid 1017536:tid 1017693] [client 52.139.37.240:64236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jjfreeman.net"] [uri "/aged.php"] [unique_id "apK85iJcY4fy7tP-rU3aOAAAAi8"]
[Sat Aug 29 05:05:10.629730 2026] [security2:error] [pid 1017536:tid 1017690] [client 34.143.179.161:57220] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "cpcontacts.harnessenergyusa.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2fproc/self/environ"] [unique_id "apK85iJcY4fy7tP-rU3aOwAAAiw"]
[Sat Aug 29 05:05:10.648506 2026] [security2:error] [pid 1017536:tid 1017777] [client 20.104.104.62:44577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/baee.php"] [unique_id "apK85iJcY4fy7tP-rU3aQQAAAoM"]
[Sat Aug 29 05:05:10.658564 2026] [security2:error] [pid 1017536:tid 1017786] [client 20.48.250.41:49362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "liatbehr.com"] [uri "/h02ugyh.php"] [unique_id "apK85iJcY4fy7tP-rU3aSAAAAow"]
[Sat Aug 29 05:05:10.667126 2026] [security2:error] [pid 1017536:tid 1017787] [client 20.48.250.41:23495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/ff1.php"] [unique_id "apK85iJcY4fy7tP-rU3aSgAAAo0"]
[Sat Aug 29 05:05:10.668307 2026] [security2:error] [pid 1017536:tid 1017563] [remote 74.7.227.189:43878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 189.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pinnacleforms.com"] [uri "/m_AR223.php"] [unique_id "apK85iJcY4fy7tP-rU3aSwACgBo"], referer: https://mail.pinnacleforms.com/
[Sat Aug 29 05:05:10.669304 2026] [security2:error] [pid 1017536:tid 1017787] [client 20.104.104.62:48591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/baee.php"] [unique_id "apK85iJcY4fy7tP-rU3aTAAAAo0"]
[Sat Aug 29 05:05:10.676030 2026] [security2:error] [pid 1017536:tid 1017775] [client 20.48.160.90:45859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/sg.php"] [unique_id "apK85iJcY4fy7tP-rU3aUAAAAoE"]
[Sat Aug 29 05:05:10.676379 2026] [security2:error] [pid 1017536:tid 1017776] [client 20.48.250.41:64537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jarritosmexico.com"] [uri "/cc13.php"] [unique_id "apK85iJcY4fy7tP-rU3aUQAAAoI"]
[Sat Aug 29 05:05:10.693654 2026] [security2:error] [pid 1017536:tid 1017763] [client 168.107.94.195:64211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK85iJcY4fy7tP-rU3aWAAAAnU"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:10.694642 2026] [security2:error] [pid 1017536:tid 1017774] [client 20.104.18.15:13253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/media.php"] [unique_id "apK85iJcY4fy7tP-rU3aWQAAAoA"]
[Sat Aug 29 05:05:10.696703 2026] [security2:error] [pid 1017536:tid 1017763] [client 20.48.160.90:64727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/ser.php"] [unique_id "apK85iJcY4fy7tP-rU3aWgAAAnU"]
[Sat Aug 29 05:05:10.697352 2026] [security2:error] [pid 1017536:tid 1017748] [client 20.104.104.62:20629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/konten.php"] [unique_id "apK85iJcY4fy7tP-rU3aXAAAAmY"]
[Sat Aug 29 05:05:10.699150 2026] [security2:error] [pid 1017536:tid 1017763] [client 20.104.104.62:13754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahrice-co-uk.glowt-shirt.com"] [uri "/Contrller.php"] [unique_id "apK85iJcY4fy7tP-rU3aXQAAAnU"]
[Sat Aug 29 05:05:10.720346 2026] [security2:error] [pid 1017536:tid 1017712] [client 20.104.18.15:23509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/classwithtostring.php"] [unique_id "apK85iJcY4fy7tP-rU3aYAAAAkI"]
[Sat Aug 29 05:05:10.737042 2026] [security2:error] [pid 1017536:tid 1017781] [client 20.104.104.62:14837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.vistacounselingcolorado.com"] [uri "/anz.php"] [unique_id "apK85iJcY4fy7tP-rU3aYwAAAoc"]
[Sat Aug 29 05:05:10.739257 2026] [security2:error] [pid 1017536:tid 1017781] [client 20.104.18.15:36858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/aa.php"] [unique_id "apK85iJcY4fy7tP-rU3aZAAAAoc"]
[Sat Aug 29 05:05:10.741306 2026] [security2:error] [pid 1017536:tid 1017781] [client 20.48.250.41:64945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/0x0x.php"] [unique_id "apK85iJcY4fy7tP-rU3aZgAAAoc"]
[Sat Aug 29 05:05:10.759260 2026] [security2:error] [pid 1017536:tid 1017789] [client 20.104.104.62:62978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.bv-place.com"] [uri "/hq.php"] [unique_id "apK85iJcY4fy7tP-rU3aaAAAAo8"]
[Sat Aug 29 05:05:10.761185 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.48.250.41:61796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/thui.php"] [unique_id "apK85iJcY4fy7tP-rU3aaQAAAnk"]
[Sat Aug 29 05:05:10.773594 2026] [security2:error] [pid 1017536:tid 1017706] [client 20.104.18.15:7117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/media.php"] [unique_id "apK85iJcY4fy7tP-rU3aawAAAjw"]
[Sat Aug 29 05:05:10.776277 2026] [security2:error] [pid 1017536:tid 1017706] [client 20.48.250.41:12349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "employedlawyer.com"] [uri "/cytyr.php"] [unique_id "apK85iJcY4fy7tP-rU3abAAAAjw"]
[Sat Aug 29 05:05:10.790772 2026] [security2:error] [pid 1017536:tid 1017738] [client 60.243.207.176:65131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK85iJcY4fy7tP-rU3abgAAAlw"]
[Sat Aug 29 05:05:10.791013 2026] [security2:error] [pid 1017536:tid 1017738] [client 60.243.207.176:65131] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK85iJcY4fy7tP-rU3abgAAAlw"]
[Sat Aug 29 05:05:10.798513 2026] [security2:error] [pid 1017536:tid 1017727] [client 20.104.18.15:46672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/gigi.php"] [unique_id "apK85iJcY4fy7tP-rU3acAAAAlE"]
[Sat Aug 29 05:05:10.800464 2026] [security2:error] [pid 1017536:tid 1017727] [client 20.104.104.62:44570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/d12.php"] [unique_id "apK85iJcY4fy7tP-rU3acQAAAlE"]
[Sat Aug 29 05:05:10.813236 2026] [security2:error] [pid 1017536:tid 1017779] [client 20.48.251.3:57815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/cxc.php"] [unique_id "apK85iJcY4fy7tP-rU3adAAAAoU"]
[Sat Aug 29 05:05:10.814999 2026] [security2:error] [pid 1017536:tid 1017779] [client 20.48.250.41:23392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/t.php"] [unique_id "apK85iJcY4fy7tP-rU3adQAAAoU"]
[Sat Aug 29 05:05:10.816413 2026] [security2:error] [pid 1017536:tid 1017727] [client 20.48.160.90:45948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/hypo.php"] [unique_id "apK85iJcY4fy7tP-rU3adgAAAlE"]
[Sat Aug 29 05:05:10.818090 2026] [security2:error] [pid 1017536:tid 1017779] [client 20.48.250.41:64615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jarritosmexico.com"] [uri "/aa.php"] [unique_id "apK85iJcY4fy7tP-rU3aeQAAAoU"]
[Sat Aug 29 05:05:10.830250 2026] [security2:error] [pid 1017536:tid 1017674] [client 20.104.104.62:13981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahrice-co-uk.glowt-shirt.com"] [uri "/Zeiss.php"] [unique_id "apK85iJcY4fy7tP-rU3aegAAAhw"]
[Sat Aug 29 05:05:10.833427 2026] [security2:error] [pid 1017536:tid 1017674] [client 93.152.221.156:50055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.nme.cle.mybluehost.me"] [uri "/pinfo.php"] [unique_id "apK85iJcY4fy7tP-rU3afQAAAhw"]
[Sat Aug 29 05:05:10.837397 2026] [security2:error] [pid 1017536:tid 1017674] [client 20.48.160.90:64672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/431.php"] [unique_id "apK85iJcY4fy7tP-rU3afgAAAhw"]
[Sat Aug 29 05:05:10.837801 2026] [security2:error] [pid 1017536:tid 1017690] [client 20.104.18.15:13267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/adminfuns.php"] [unique_id "apK85iJcY4fy7tP-rU3afwAAAiw"]
[Sat Aug 29 05:05:10.842379 2026] [security2:error] [pid 1017536:tid 1017775] [client 195.178.110.247:18690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ladiesandbabies.com"] [uri "/index.php"] [unique_id "apK85iJcY4fy7tP-rU3agAAAAoE"]
[Sat Aug 29 05:05:10.844152 2026] [security2:error] [pid 1017536:tid 1017727] [client 20.48.250.41:49308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "liatbehr.com"] [uri "/xxw.php"] [unique_id "apK85iJcY4fy7tP-rU3agQAAAlE"]
[Sat Aug 29 05:05:10.880502 2026] [security2:error] [pid 1017536:tid 1017715] [client 20.104.18.15:23539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK85iJcY4fy7tP-rU3aiwAAAkU"]
[Sat Aug 29 05:05:10.899196 2026] [security2:error] [pid 1017536:tid 1017754] [client 171.61.160.196:16175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.160.61.171.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK85iJcY4fy7tP-rU3ajgAAAmw"]
[Sat Aug 29 05:05:10.899323 2026] [security2:error] [pid 1017536:tid 1017754] [client 171.61.160.196:16175] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK85iJcY4fy7tP-rU3ajgAAAmw"]
[Sat Aug 29 05:05:10.901582 2026] [security2:error] [pid 1017536:tid 1017769] [client 20.104.104.62:65245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.bv-place.com"] [uri "/mh.php"] [unique_id "apK85iJcY4fy7tP-rU3ajwAAAns"]
[Sat Aug 29 05:05:10.902532 2026] [security2:error] [pid 1017536:tid 1017754] [client 20.104.104.62:48472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/d12.php"] [unique_id "apK85iJcY4fy7tP-rU3akQAAAmw"]
[Sat Aug 29 05:05:10.931247 2026] [security2:error] [pid 1017536:tid 1017774] [client 20.48.250.41:12439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "employedlawyer.com"] [uri "/galer.php"] [unique_id "apK85iJcY4fy7tP-rU3akwAAAoA"]
[Sat Aug 29 05:05:10.931671 2026] [security2:error] [pid 1017536:tid 1017670] [client 20.104.49.130:63440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.danesquality.com"] [uri "/about.php"] [unique_id "apK85iJcY4fy7tP-rU3akgAAAhg"]
[Sat Aug 29 05:05:10.936609 2026] [security2:error] [pid 1017536:tid 1017679] [client 127.0.0.1:28054] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "127.0.0.1"] [uri "/cgi-sys/autoconfig.cgi"] [unique_id "apK85iJcY4fy7tP-rU3aewAAAiE"]
[Sat Aug 29 05:05:10.936730 2026] [security2:error] [pid 1017536:tid 1017704] [client 74.7.241.190:60380] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "autoconfig.fri.dpn.mybluehost.me"] [uri "/robots.txt"] [unique_id "apK85iJcY4fy7tP-rU3adwAAAjo"]
[Sat Aug 29 05:05:10.945893 2026] [security2:error] [pid 1017536:tid 1017737] [client 20.104.104.62:44584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/yyy.php"] [unique_id "apK85iJcY4fy7tP-rU3alQAAAls"]
[Sat Aug 29 05:05:10.948540 2026] [security2:error] [pid 1017536:tid 1017785] [client 20.104.18.15:36749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/img.php"] [unique_id "apK85iJcY4fy7tP-rU3alAAAAos"]
[Sat Aug 29 05:05:10.949319 2026] [security2:error] [pid 1017536:tid 1017774] [client 20.104.18.15:7165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/adminfuns.php"] [unique_id "apK85iJcY4fy7tP-rU3alwAAAoA"]
[Sat Aug 29 05:05:10.949603 2026] [security2:error] [pid 1017536:tid 1017737] [client 20.48.250.41:61721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/Jcrop.php"] [unique_id "apK85iJcY4fy7tP-rU3algAAAls"]
[Sat Aug 29 05:05:10.950884 2026] [security2:error] [pid 1017536:tid 1017679] [client 20.104.104.62:15296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.vistacounselingcolorado.com"] [uri "/bge.php"] [unique_id "apK85iJcY4fy7tP-rU3amAAAAiE"]
[Sat Aug 29 05:05:10.952327 2026] [security2:error] [pid 1017536:tid 1017670] [client 20.48.250.41:64533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jarritosmexico.com"] [uri "/s1.php"] [unique_id "apK85iJcY4fy7tP-rU3amgAAAhg"]
[Sat Aug 29 05:05:10.970952 2026] [security2:error] [pid 1017536:tid 1017703] [client 20.48.160.90:45890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/Hd.php"] [unique_id "apK85iJcY4fy7tP-rU3anAAAAjk"]
[Sat Aug 29 05:05:10.974562 2026] [security2:error] [pid 1017536:tid 1017743] [client 20.104.104.62:13589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahrice-co-uk.glowt-shirt.com"] [uri "/ww2.php"] [unique_id "apK85iJcY4fy7tP-rU3anQAAAmE"]
[Sat Aug 29 05:05:10.977050 2026] [security2:error] [pid 1017536:tid 1017705] [client 20.48.160.90:62692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/rxr.php"] [unique_id "apK85iJcY4fy7tP-rU3anwAAAjs"]
[Sat Aug 29 05:05:10.977050 2026] [security2:error] [pid 1017536:tid 1017766] [client 20.104.104.62:20833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/bekdur.php"] [unique_id "apK85iJcY4fy7tP-rU3angAAAng"]
[Sat Aug 29 05:05:10.987216 2026] [security2:error] [pid 1017536:tid 1017792] [client 20.48.251.3:57872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/oiko6u.php"] [unique_id "apK85iJcY4fy7tP-rU3aoQAAApI"]
[Sat Aug 29 05:05:11.004537 2026] [security2:error] [pid 1017536:tid 1017745] [client 20.48.250.41:49349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "liatbehr.com"] [uri "/bolt.php"] [unique_id "apK85yJcY4fy7tP-rU3aowAAAmM"]
[Sat Aug 29 05:05:11.004619 2026] [security2:error] [pid 1017536:tid 1017792] [client 20.104.18.15:13273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/classwithtostring.php"] [unique_id "apK85yJcY4fy7tP-rU3apAAAApI"]
[Sat Aug 29 05:05:11.007665 2026] [security2:error] [pid 1017536:tid 1017685] [client 20.48.250.41:65507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/166.php"] [unique_id "apK85yJcY4fy7tP-rU3apQAAAic"]
[Sat Aug 29 05:05:11.040324 2026] [security2:error] [pid 1017536:tid 1017673] [client 20.104.18.15:47088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/info.php/new.php"] [unique_id "apK85yJcY4fy7tP-rU3aqQAAAhs"]
[Sat Aug 29 05:05:11.043292 2026] [security2:error] [pid 1017536:tid 1017775] [client 20.104.104.62:2465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.bv-place.com"] [uri "/f2r4.php"] [unique_id "apK85yJcY4fy7tP-rU3aqgAAAoE"]
[Sat Aug 29 05:05:11.048221 2026] [security2:error] [pid 1017536:tid 1017775] [client 20.104.18.15:23424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/5PJcpMFsD8B.php"] [unique_id "apK85yJcY4fy7tP-rU3aqwAAAoE"]
[Sat Aug 29 05:05:11.064574 2026] [security2:error] [pid 1017536:tid 1017754] [client 201.105.19.164:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutihomes.com"] [uri "/boats"] [unique_id "apK85yJcY4fy7tP-rU3arwAAAmw"], referer: https://www.djiboutihomes.com/
[Sat Aug 29 05:05:11.073410 2026] [security2:error] [pid 1017536:tid 1017754] [client 20.48.250.41:23522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/erty.php"] [unique_id "apK85yJcY4fy7tP-rU3asgAAAmw"]
[Sat Aug 29 05:05:11.076337 2026] [security2:error] [pid 1017536:tid 1017733] [client 168.107.94.195:64642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK85yJcY4fy7tP-rU3aswAAAlc"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:11.084556 2026] [security2:error] [pid 1017536:tid 1017677] [client 35.159.236.187:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.jobindjibouti.com"] [uri "/"] [unique_id "apK85yJcY4fy7tP-rU3atAAAAh8"]
[Sat Aug 29 05:05:11.086973 2026] [security2:error] [pid 1017536:tid 1017754] [client 20.48.250.41:12362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "employedlawyer.com"] [uri "/baixy.php"] [unique_id "apK85yJcY4fy7tP-rU3atQAAAmw"]
[Sat Aug 29 05:05:11.110454 2026] [security2:error] [pid 1017536:tid 1017733] [client 20.104.104.62:44599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/bgymj.php"] [unique_id "apK85yJcY4fy7tP-rU3avAAAAlc"]
[Sat Aug 29 05:05:11.110454 2026] [security2:error] [pid 1017536:tid 1017702] [client 20.48.250.41:49910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jarritosmexico.com"] [uri "/0byte.php"] [unique_id "apK85yJcY4fy7tP-rU3auwAAAjg"]
[Sat Aug 29 05:05:11.112231 2026] [security2:error] [pid 1017536:tid 1017679] [client 20.104.104.62:48705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/yyy.php"] [unique_id "apK85yJcY4fy7tP-rU3avQAAAiE"]
[Sat Aug 29 05:05:11.115657 2026] [security2:error] [pid 1017536:tid 1017733] [client 20.48.250.41:61800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/ws58.php"] [unique_id "apK85yJcY4fy7tP-rU3awAAAAlc"]
[Sat Aug 29 05:05:11.126652 2026] [security2:error] [pid 1017536:tid 1017744] [client 61.9.8.5:3002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 5.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK85yJcY4fy7tP-rU3asAAAAmI"]
[Sat Aug 29 05:05:11.126841 2026] [security2:error] [pid 1017536:tid 1017744] [client 61.9.8.5:3002] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK85yJcY4fy7tP-rU3asAAAAmI"]
[Sat Aug 29 05:05:11.129298 2026] [security2:error] [pid 1017536:tid 1017679] [client 20.104.104.62:13666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahrice-co-uk.glowt-shirt.com"] [uri "/anz.php"] [unique_id "apK85yJcY4fy7tP-rU3awgAAAiE"]
[Sat Aug 29 05:05:11.136814 2026] [security2:error] [pid 1017536:tid 1017744] [client 20.104.104.62:14785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.vistacounselingcolorado.com"] [uri "/wp-ana.php"] [unique_id "apK85yJcY4fy7tP-rU3axgAAAmI"]
[Sat Aug 29 05:05:11.138307 2026] [security2:error] [pid 1017536:tid 1017767] [client 149.34.210.141:10448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK85yJcY4fy7tP-rU3axwAAAnk"]
[Sat Aug 29 05:05:11.138380 2026] [security2:error] [pid 1017536:tid 1017670] [client 52.54.254.209:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/2016/08/17/crevettes-sautees-maison/"] [unique_id "apK85yJcY4fy7tP-rU3axQAAAhg"]
[Sat Aug 29 05:05:11.138420 2026] [security2:error] [pid 1017536:tid 1017767] [client 149.34.210.141:10448] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK85yJcY4fy7tP-rU3axwAAAnk"]
[Sat Aug 29 05:05:11.140645 2026] [security2:error] [pid 1017536:tid 1017704] [client 93.152.221.156:64866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.nme.cle.mybluehost.me"] [uri "/php_version.php"] [unique_id "apK85yJcY4fy7tP-rU3ayAAAAjo"]
[Sat Aug 29 05:05:11.142875 2026] [security2:error] [pid 1017536:tid 1017744] [client 195.178.110.247:3716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ladnertesting.com"] [uri "/index.php"] [unique_id "apK85yJcY4fy7tP-rU3ayQAAAmI"]
[Sat Aug 29 05:05:11.144725 2026] [security2:error] [pid 1017536:tid 1017785] [client 20.48.160.90:62679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/csst.php"] [unique_id "apK85yJcY4fy7tP-rU3azAAAAos"]
[Sat Aug 29 05:05:11.145585 2026] [security2:error] [pid 1017536:tid 1017755] [client 197.219.150.206:55222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK85yJcY4fy7tP-rU3axAAAAm0"]
[Sat Aug 29 05:05:11.145708 2026] [security2:error] [pid 1017536:tid 1017755] [client 197.219.150.206:55222] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK85yJcY4fy7tP-rU3axAAAAm0"]
[Sat Aug 29 05:05:11.146080 2026] [security2:error] [pid 1017536:tid 1017765] [client 20.48.160.90:45834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/im.php"] [unique_id "apK85yJcY4fy7tP-rU3azQAAAnc"]
[Sat Aug 29 05:05:11.147343 2026] [security2:error] [pid 1017536:tid 1017737] [client 20.104.18.15:13254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK85yJcY4fy7tP-rU3azgAAAls"]
[Sat Aug 29 05:05:11.147840 2026] [security2:error] [pid 1017536:tid 1017761] [client 20.48.251.3:57881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/fraro.php"] [unique_id "apK85yJcY4fy7tP-rU3azwAAAnM"]
[Sat Aug 29 05:05:11.148551 2026] [security2:error] [pid 1017536:tid 1017765] [client 20.104.18.15:7157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/classwithtostring.php"] [unique_id "apK85yJcY4fy7tP-rU3a0AAAAnc"]
[Sat Aug 29 05:05:11.152784 2026] [security2:error] [pid 1017536:tid 1017700] [client 20.104.18.15:36738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/222.php"] [unique_id "apK85yJcY4fy7tP-rU3a1AAAAjY"]
[Sat Aug 29 05:05:11.155272 2026] [security2:error] [pid 1017536:tid 1017765] [client 20.104.104.62:20610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/webadmin.php"] [unique_id "apK85yJcY4fy7tP-rU3a1gAAAnc"]
[Sat Aug 29 05:05:11.157967 2026] [security2:error] [pid 1017536:tid 1017744] [client 57.141.14.63:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/cart/"] [unique_id "apK85yJcY4fy7tP-rU3a1QAAAmI"]
[Sat Aug 29 05:05:11.169748 2026] [security2:error] [pid 1017536:tid 1017673] [client 20.104.49.130:43584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.scubaetcfl.com"] [uri "/as.php"] [unique_id "apK85yJcY4fy7tP-rU3a3gAAAhs"]
[Sat Aug 29 05:05:11.172658 2026] [security2:error] [pid 1017536:tid 1017784] [client 103.240.76.112:42692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK85yJcY4fy7tP-rU3a3wAAAoo"]
[Sat Aug 29 05:05:11.172766 2026] [security2:error] [pid 1017536:tid 1017784] [client 103.240.76.112:42692] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK85yJcY4fy7tP-rU3a3wAAAoo"]
[Sat Aug 29 05:05:11.173245 2026] [security2:error] [pid 1017536:tid 1017783] [client 20.48.250.41:49397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "liatbehr.com"] [uri "/rtx.php"] [unique_id "apK85yJcY4fy7tP-rU3a4AAAAok"]
[Sat Aug 29 05:05:11.177931 2026] [security2:error] [pid 1017536:tid 1017721] [client 20.104.104.62:56543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.bv-place.com"] [uri "/sadis.php"] [unique_id "apK85yJcY4fy7tP-rU3a4gAAAks"]
[Sat Aug 29 05:05:11.213596 2026] [security2:error] [pid 1017536:tid 1017737] [client 158.23.184.117:56694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.howtostudyexams.com"] [uri "/test.php"] [unique_id "apK85yJcY4fy7tP-rU3a8QAAAls"]
[Sat Aug 29 05:05:11.219574 2026] [security2:error] [pid 1017536:tid 1017737] [client 20.104.18.15:23550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK85yJcY4fy7tP-rU3a8wAAAls"]
[Sat Aug 29 05:05:11.228481 2026] [security2:error] [pid 1017536:tid 1017785] [client 158.23.184.117:22178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/.dj/index.php"] [unique_id "apK85yJcY4fy7tP-rU3a9gAAAos"]
[Sat Aug 29 05:05:11.229641 2026] [security2:error] [pid 1017536:tid 1017673] [client 20.48.250.41:65485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/h2a2ck.php"] [unique_id "apK85yJcY4fy7tP-rU3a9wAAAhs"]
[Sat Aug 29 05:05:11.240935 2026] [security2:error] [pid 1017536:tid 1017744] [client 52.139.37.240:65327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "skyyentertainment.skyytalent.com"] [uri "/cron.php"] [unique_id "apK85yJcY4fy7tP-rU3a-wAAAmI"]
[Sat Aug 29 05:05:11.245185 2026] [security2:error] [pid 1017536:tid 1017737] [client 20.48.250.41:12383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "employedlawyer.com"] [uri "/ava.php"] [unique_id "apK85yJcY4fy7tP-rU3a_AAAAls"]
[Sat Aug 29 05:05:11.246841 2026] [security2:error] [pid 1017536:tid 1017685] [client 20.48.250.41:49838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jarritosmexico.com"] [uri "/xr.php"] [unique_id "apK85yJcY4fy7tP-rU3a_QAAAic"]
[Sat Aug 29 05:05:11.265037 2026] [security2:error] [pid 1017536:tid 1017591] [remote 47.128.60.119:26128] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "bridal.myweddinggownpreservation.com"] [uri "/robots.txt"] [unique_id "apK85yJcY4fy7tP-rU3bAAACJzY"]
[Sat Aug 29 05:05:11.269158 2026] [security2:error] [pid 1017536:tid 1017592] [remote 47.128.60.119:26138] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "myweddinggownpreservation.com"] [uri "/robots.txt"] [unique_id "apK85yJcY4fy7tP-rU3bAgACJzc"]
[Sat Aug 29 05:05:11.273740 2026] [security2:error] [pid 1017536:tid 1017685] [client 20.48.250.41:61718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/xs.php"] [unique_id "apK85yJcY4fy7tP-rU3bAwAAAic"]
[Sat Aug 29 05:05:11.278205 2026] [http2:info] [pid 1018003:tid 1018003] h2_workers: created with min=128 max=192 idle_ms=600000
[Sat Aug 29 05:05:11.289382 2026] [security2:error] [pid 1017536:tid 1017744] [client 20.104.104.62:44566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/fh26.php"] [unique_id "apK85yJcY4fy7tP-rU3bBQAAAmI"]
[Sat Aug 29 05:05:11.295406 2026] [security2:error] [pid 1017536:tid 1017685] [client 20.104.104.62:13668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahrice-co-uk.glowt-shirt.com"] [uri "/bge.php"] [unique_id "apK85yJcY4fy7tP-rU3bBwAAAic"]
[Sat Aug 29 05:05:11.299876 2026] [security2:error] [pid 1017536:tid 1017685] [client 20.48.160.90:40012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/fc.php"] [unique_id "apK85yJcY4fy7tP-rU3bDAAAAic"]
[Sat Aug 29 05:05:11.300974 2026] [security2:error] [pid 1017536:tid 1017753] [client 52.139.37.240:58598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/breads1.php"] [unique_id "apK85yJcY4fy7tP-rU3bDgAAAms"]
[Sat Aug 29 05:05:11.305770 2026] [security2:error] [pid 1017536:tid 1017694] [client 103.171.189.88:50097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK85yJcY4fy7tP-rU3bEQAAAjA"]
[Sat Aug 29 05:05:11.305949 2026] [security2:error] [pid 1017536:tid 1017694] [client 103.171.189.88:50097] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK85yJcY4fy7tP-rU3bEQAAAjA"]
[Sat Aug 29 05:05:11.335488 2026] [security2:error] [pid 1017536:tid 1017713] [client 20.104.18.15:13187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/5PJcpMFsD8B.php"] [unique_id "apK85yJcY4fy7tP-rU3bEgAAAkM"]
[Sat Aug 29 05:05:11.339984 2026] [security2:error] [pid 1018003:tid 1018150] [client 20.48.160.90:62648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/wp-includes/blocks/query-title/footer.php"] [unique_id "apK85zAh5Y1i2tUxg4HadQAABbc"]
[Sat Aug 29 05:05:11.350430 2026] [security2:error] [pid 1018003:tid 1018164] [client 20.48.251.3:57885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/thui.php"] [unique_id "apK85zAh5Y1i2tUxg4HaeAAABcU"]
[Sat Aug 29 05:05:11.354842 2026] [security2:error] [pid 1017536:tid 1017750] [client 213.202.253.4:58662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aantec.com"] [uri "/adminfuns.php"] [unique_id "apK85yJcY4fy7tP-rU3bFAAAAmg"], referer: www.google.com
[Sat Aug 29 05:05:11.355530 2026] [security2:error] [pid 1018003:tid 1018169] [client 20.104.104.62:56566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.bv-place.com"] [uri "/xcre1.php"] [unique_id "apK85zAh5Y1i2tUxg4HaegAABco"]
[Sat Aug 29 05:05:11.366428 2026] [security2:error] [pid 1018003:tid 1018212] [client 20.48.250.41:23509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/0x.php"] [unique_id "apK85zAh5Y1i2tUxg4HafQAABfU"]
[Sat Aug 29 05:05:11.367594 2026] [security2:error] [pid 1017536:tid 1017685] [client 20.104.104.62:14392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.vistacounselingcolorado.com"] [uri "/secret.php"] [unique_id "apK85yJcY4fy7tP-rU3bFwAAAic"]
[Sat Aug 29 05:05:11.367793 2026] [security2:error] [pid 1017536:tid 1017750] [client 20.104.18.15:23442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/wsd.php"] [unique_id "apK85yJcY4fy7tP-rU3bFgAAAmg"]
[Sat Aug 29 05:05:11.377864 2026] [security2:error] [pid 1017536:tid 1017716] [client 20.48.250.41:12342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "employedlawyer.com"] [uri "/gdn.php"] [unique_id "apK85yJcY4fy7tP-rU3bGgAAAkY"]
[Sat Aug 29 05:05:11.383384 2026] [security2:error] [pid 1017536:tid 1017702] [client 4.205.62.107:61875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/cloud.php"] [unique_id "apK85yJcY4fy7tP-rU3bHAAAAjg"]
[Sat Aug 29 05:05:11.395096 2026] [security2:error] [pid 1017536:tid 1017694] [client 20.48.250.41:64903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/error_log.php"] [unique_id "apK85yJcY4fy7tP-rU3bHgAAAjA"]
[Sat Aug 29 05:05:11.395167 2026] [security2:error] [pid 1017536:tid 1017788] [client 20.48.250.41:49871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jarritosmexico.com"] [uri "/h02ugyh.php"] [unique_id "apK85yJcY4fy7tP-rU3bHwAAAo4"]
[Sat Aug 29 05:05:11.397144 2026] [security2:error] [pid 1017536:tid 1017694] [client 20.104.18.15:47052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/w.php"] [unique_id "apK85yJcY4fy7tP-rU3bIgAAAjA"]
[Sat Aug 29 05:05:11.399883 2026] [security2:error] [pid 1017536:tid 1017750] [client 68.155.159.216:64851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.gavirestaurant.com"] [uri "/wp-admin/network/index.php"] [unique_id "apK85yJcY4fy7tP-rU3bJAAAAmg"]
[Sat Aug 29 05:05:11.400712 2026] [security2:error] [pid 1017536:tid 1017719] [client 4.205.62.107:22277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/wp-konfig.backup.php"] [unique_id "apK85yJcY4fy7tP-rU3bJQAAAkk"]
[Sat Aug 29 05:05:11.401485 2026] [security2:error] [pid 1017536:tid 1017739] [client 103.162.125.59:49712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.125.162.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK85yJcY4fy7tP-rU3bJgAAAl0"]
[Sat Aug 29 05:05:11.401592 2026] [security2:error] [pid 1017536:tid 1017739] [client 103.162.125.59:49712] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK85yJcY4fy7tP-rU3bJgAAAl0"]
[Sat Aug 29 05:05:11.403556 2026] [security2:error] [pid 1017536:tid 1017685] [client 74.7.228.11:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "ministeriosemanuel.org"] [uri "/cgi-sys/404.html"] [unique_id "apK85yJcY4fy7tP-rU3bIwAAAic"], referer: http://ministeriosemanuel.org/robots.txt
[Sat Aug 29 05:05:11.408961 2026] [security2:error] [pid 1017536:tid 1017733] [client 20.104.49.130:43645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/ty.php"] [unique_id "apK85yJcY4fy7tP-rU3bKQAAAlc"]
[Sat Aug 29 05:05:11.412591 2026] [security2:error] [pid 1017536:tid 1017704] [client 74.7.228.11:49820] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "ministeriosemanuel.org"] [uri "/robots.txt"] [unique_id "apK85yJcY4fy7tP-rU3a6QACOjQ"], referer: http://ministeriosemanuel.org/robots.txt
[Sat Aug 29 05:05:11.420523 2026] [security2:error] [pid 1017536:tid 1017702] [client 68.155.159.216:18294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.baxterevents.com"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK85yJcY4fy7tP-rU3bLAAAAjg"]
[Sat Aug 29 05:05:11.448341 2026] [security2:error] [pid 1017536:tid 1017675] [client 52.139.37.240:37945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "skyyentertainment.skyytalent.com"] [uri "/wp-2019.php"] [unique_id "apK85yJcY4fy7tP-rU3bMQAAAh0"]
[Sat Aug 29 05:05:11.455602 2026] [security2:error] [pid 1018003:tid 1018219] [client 20.104.104.62:25635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.flicklister.com"] [uri "/wp-content/index.php"] [unique_id "apK85zAh5Y1i2tUxg4HalQAABfw"]
[Sat Aug 29 05:05:11.457937 2026] [security2:error] [pid 1018003:tid 1018202] [client 52.139.37.240:28278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jjfreeman.net"] [uri "/essexec.php"] [unique_id "apK85zAh5Y1i2tUxg4HalgAABes"]
[Sat Aug 29 05:05:11.460919 2026] [security2:error] [pid 1018003:tid 1018258] [client 68.155.159.216:16233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/file88.php"] [unique_id "apK85zAh5Y1i2tUxg4HalwAABiI"]
[Sat Aug 29 05:05:11.471233 2026] [security2:error] [pid 1017536:tid 1017743] [client 158.23.147.79:30604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK85yJcY4fy7tP-rU3bMgAAAmE"]
[Sat Aug 29 05:05:11.474659 2026] [security2:error] [pid 1018003:tid 1018259] [client 20.48.250.41:58608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/zu.php"] [unique_id "apK85zAh5Y1i2tUxg4HamQAABiM"]
[Sat Aug 29 05:05:11.476198 2026] [security2:error] [pid 1017536:tid 1017715] [client 68.155.159.216:50216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK85yJcY4fy7tP-rU3bMwAAAkU"]
[Sat Aug 29 05:05:11.482794 2026] [security2:error] [pid 1017536:tid 1017671] [client 68.155.159.216:16137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.showerdoorsdubuque.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK85yJcY4fy7tP-rU3bNQAAAhk"]
[Sat Aug 29 05:05:11.488156 2026] [security2:error] [pid 1017536:tid 1017709] [client 158.23.147.79:58054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-admin/dropdown.php"] [unique_id "apK85yJcY4fy7tP-rU3bOAAAAj8"]
[Sat Aug 29 05:05:11.495273 2026] [security2:error] [pid 1018003:tid 1018230] [client 158.23.147.79:49841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/themes.php"] [unique_id "apK85zAh5Y1i2tUxg4HanAAABgY"]
[Sat Aug 29 05:05:11.497237 2026] [security2:error] [pid 1017536:tid 1017785] [client 20.104.104.62:13607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahrice-co-uk.glowt-shirt.com"] [uri "/wp-ana.php"] [unique_id "apK85yJcY4fy7tP-rU3bOQAAAos"]
[Sat Aug 29 05:05:11.500043 2026] [security2:error] [pid 1017536:tid 1017788] [client 20.104.104.62:44576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/fgd.php"] [unique_id "apK85yJcY4fy7tP-rU3bOgAAAo4"]
[Sat Aug 29 05:05:11.504592 2026] [security2:error] [pid 1017536:tid 1017695] [client 20.48.160.90:40059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/ke.php"] [unique_id "apK85yJcY4fy7tP-rU3bOwAAAjE"]
[Sat Aug 29 05:05:11.506983 2026] [security2:error] [pid 1017536:tid 1017685] [client 4.205.62.107:22291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/maxro.php"] [unique_id "apK85yJcY4fy7tP-rU3bPAAAAic"]
[Sat Aug 29 05:05:11.510187 2026] [security2:error] [pid 1017536:tid 1017758] [client 4.205.62.107:54435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "troop264olney.net"] [uri "/filesystems.php"] [unique_id "apK85yJcY4fy7tP-rU3bPQAAAnA"]
[Sat Aug 29 05:05:11.512898 2026] [security2:error] [pid 1017536:tid 1017784] [client 168.107.94.195:64922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK85yJcY4fy7tP-rU3bPgAAAoo"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:11.523787 2026] [security2:error] [pid 1018003:tid 1018180] [client 20.196.209.81:12353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-admin/network/xmrlpc.php"] [unique_id "apK85zAh5Y1i2tUxg4HaogAABdU"]
[Sat Aug 29 05:05:11.537199 2026] [security2:error] [pid 1017536:tid 1017695] [client 20.48.250.41:64609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jarritosmexico.com"] [uri "/xxw.php"] [unique_id "apK85yJcY4fy7tP-rU3bPwAAAjE"]
[Sat Aug 29 05:05:11.543485 2026] [security2:error] [pid 1018003:tid 1018173] [client 20.203.141.11:35007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "germanmorenoperez.com"] [uri "/av.php"] [unique_id "apK85zAh5Y1i2tUxg4HapAAABc4"]
[Sat Aug 29 05:05:11.546266 2026] [security2:error] [pid 1017536:tid 1017733] [client 4.205.62.107:53328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/sadd.php"] [unique_id "apK85yJcY4fy7tP-rU3bQQAAAlc"]
[Sat Aug 29 05:05:11.554529 2026] [security2:error] [pid 1018003:tid 1018207] [client 20.196.209.81:15767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/wp-contentt.php"] [unique_id "apK85zAh5Y1i2tUxg4HaqAAABfA"]
[Sat Aug 29 05:05:11.554826 2026] [security2:error] [pid 1017536:tid 1017724] [client 20.48.250.41:64206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/403.php"] [unique_id "apK85yJcY4fy7tP-rU3bQwAAAk4"]
[Sat Aug 29 05:05:11.557222 2026] [security2:error] [pid 1018003:tid 1018276] [client 20.104.18.15:23431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/bulet.php"] [unique_id "apK85zAh5Y1i2tUxg4HaqQAABjQ"]
[Sat Aug 29 05:05:11.561340 2026] [security2:error] [pid 1018003:tid 1018196] [client 4.232.148.111:19950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "strangeworxproductions.strangeworx.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK85zAh5Y1i2tUxg4HaqgAABeU"]
[Sat Aug 29 05:05:11.564523 2026] [security2:error] [pid 1017536:tid 1017766] [client 68.155.159.216:24552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK85yJcY4fy7tP-rU3bRAAAAng"]
[Sat Aug 29 05:05:11.568833 2026] [security2:error] [pid 1017536:tid 1017698] [client 52.139.37.240:58560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/must.php"] [unique_id "apK85yJcY4fy7tP-rU3bRQAAAjQ"]
[Sat Aug 29 05:05:11.570794 2026] [security2:error] [pid 1018003:tid 1018272] [client 20.104.18.15:7114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK85zAh5Y1i2tUxg4HarAAABjA"]
[Sat Aug 29 05:05:11.573375 2026] [security2:error] [pid 1018003:tid 1018193] [client 40.83.93.50:3606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.superugly.com"] [uri "/wp-content/admin.php"] [unique_id "apK85zAh5Y1i2tUxg4HarQAABeI"]
[Sat Aug 29 05:05:11.576727 2026] [security2:error] [pid 1018003:tid 1018190] [client 74.248.24.12:28170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/disagraeosc.php"] [unique_id "apK85zAh5Y1i2tUxg4HargAABd8"]
[Sat Aug 29 05:05:11.577067 2026] [security2:error] [pid 1018003:tid 1018271] [client 20.104.104.62:48583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/bgymj.php"] [unique_id "apK85zAh5Y1i2tUxg4HarwAABi8"]
[Sat Aug 29 05:05:11.581581 2026] [security2:error] [pid 1018003:tid 1018248] [client 158.23.147.79:23451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ridetimewinnipegservicetiresrims.ca"] [uri "/packed.php"] [unique_id "apK85zAh5Y1i2tUxg4HasAAABhg"]
[Sat Aug 29 05:05:11.581893 2026] [security2:error] [pid 1018003:tid 1018229] [client 74.7.230.15:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.ibest.ab-mac.com"] [uri "/cgi-sys/404.html"] [unique_id "apK85zAh5Y1i2tUxg4HaqwAABgU"]
[Sat Aug 29 05:05:11.583958 2026] [security2:error] [pid 1018003:tid 1018159] [client 74.248.24.12:11292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/wp-content/themes/pridmag/il.php"] [unique_id "apK85zAh5Y1i2tUxg4HasgAABcA"]
[Sat Aug 29 05:05:11.591607 2026] [security2:error] [pid 1018003:tid 1018251] [client 158.23.147.79:24516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK85zAh5Y1i2tUxg4HatAAABhs"]
[Sat Aug 29 05:05:11.598150 2026] [security2:error] [pid 1017536:tid 1017793] [client 74.7.230.15:46130] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.ibest.ab-mac.com"] [uri "/robots.txt"] [unique_id "apK85iJcY4fy7tP-rU3afAAAApM"]
[Sat Aug 29 05:05:11.606148 2026] [security2:error] [pid 1018003:tid 1018189] [client 195.178.110.155:17944] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.body.requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1600"] [id "900941"] [msg "Invalid nested WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.body.requests.requests.path=///"] [hostname "greathairkc.com"] [uri "/wordpress/"] [unique_id "apK85zAh5Y1i2tUxg4HaswAABd4"]
[Sat Aug 29 05:05:11.608334 2026] [security2:error] [pid 1018003:tid 1018153] [client 104.167.19.74:40461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.19.167.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK85zAh5Y1i2tUxg4HapQAABbo"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:11.620382 2026] [security2:error] [pid 1018003:tid 1018263] [client 158.23.184.117:22182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/.info.php"] [unique_id "apK85zAh5Y1i2tUxg4HatQAABic"]
[Sat Aug 29 05:05:11.635754 2026] [security2:error] [pid 1018003:tid 1018219] [client 4.205.62.107:2975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/wp-content/maintenance.php"] [unique_id "apK85zAh5Y1i2tUxg4HatwAABfw"]
[Sat Aug 29 05:05:11.636943 2026] [security2:error] [pid 1018003:tid 1018171] [client 162.198.206.205:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutihomes.com"] [uri "/boats"] [unique_id "apK85zAh5Y1i2tUxg4HakgAABcw"], referer: https://www.djiboutihomes.com/
[Sat Aug 29 05:05:11.639921 2026] [security2:error] [pid 1017536:tid 1017735] [client 20.104.104.62:13731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahrice-co-uk.glowt-shirt.com"] [uri "/secret.php"] [unique_id "apK85yJcY4fy7tP-rU3bUQAAAlk"]
[Sat Aug 29 05:05:11.648131 2026] [security2:error] [pid 1017536:tid 1017753] [client 20.104.104.62:44578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/inject.php"] [unique_id "apK85yJcY4fy7tP-rU3bUgAAAms"]
[Sat Aug 29 05:05:11.648566 2026] [security2:error] [pid 1017536:tid 1017720] [client 52.139.37.240:37892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "skyyentertainment.skyytalent.com"] [uri "/gecko-new.php"] [unique_id "apK85yJcY4fy7tP-rU3bUwAAAko"]
[Sat Aug 29 05:05:11.648563 2026] [security2:error] [pid 1018003:tid 1018237] [client 20.104.18.15:13275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK85zAh5Y1i2tUxg4HauAAABg0"]
[Sat Aug 29 05:05:11.651538 2026] [security2:error] [pid 1017536:tid 1017700] [client 57.141.14.54:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/cart/"] [unique_id "apK85yJcY4fy7tP-rU3bTAAAAjY"]
[Sat Aug 29 05:05:11.657805 2026] [security2:error] [pid 1017536:tid 1017694] [client 20.48.250.41:23538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/66.php"] [unique_id "apK85yJcY4fy7tP-rU3bVAAAAjA"]
[Sat Aug 29 05:05:11.659276 2026] [security2:error] [pid 1018003:tid 1018157] [client 20.104.18.15:47028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/x.php"] [unique_id "apK85zAh5Y1i2tUxg4HauwAABb4"]
[Sat Aug 29 05:05:11.661438 2026] [security2:error] [pid 1017536:tid 1017749] [client 20.48.250.41:61763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/lanka.php"] [unique_id "apK85yJcY4fy7tP-rU3bVQAAAmc"]
[Sat Aug 29 05:05:11.664977 2026] [security2:error] [pid 1018003:tid 1018238] [client 20.48.251.3:57902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/lala.php"] [unique_id "apK85zAh5Y1i2tUxg4HavQAABg4"]
[Sat Aug 29 05:05:11.667489 2026] [security2:error] [pid 1018003:tid 1018178] [client 20.197.61.180:19963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eeeaudio.com"] [uri "/wp-content/languages/index.php"] [unique_id "apK85zAh5Y1i2tUxg4HavgAABdM"]
[Sat Aug 29 05:05:11.667527 2026] [security2:error] [pid 1018003:tid 1018231] [client 20.104.104.62:62920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.bv-place.com"] [uri "/motu.php"] [unique_id "apK85zAh5Y1i2tUxg4HavwAABgc"]
[Sat Aug 29 05:05:11.668579 2026] [security2:error] [pid 1018003:tid 1018240] [client 20.104.104.62:64716] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.motherssandals.com"] [uri "/r57.php"] [unique_id "apK85zAh5Y1i2tUxg4HawAAABhA"]
[Sat Aug 29 05:05:11.669631 2026] [security2:error] [pid 1018003:tid 1018220] [client 4.232.148.111:24796] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "tiaandephraim.com"] [uri "/1.php7"] [unique_id "apK85zAh5Y1i2tUxg4HawQAABf0"]
[Sat Aug 29 05:05:11.669892 2026] [security2:error] [pid 1017536:tid 1017715] [client 20.48.160.90:40063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/tf.php"] [unique_id "apK85yJcY4fy7tP-rU3bWAAAAkU"]
[Sat Aug 29 05:05:11.670871 2026] [security2:error] [pid 1018003:tid 1018220] [client 4.232.148.111:24796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tiaandephraim.com"] [uri "/1.php7"] [unique_id "apK85zAh5Y1i2tUxg4HawQAABf0"]
[Sat Aug 29 05:05:11.676308 2026] [cgid:error] [pid 1018003:tid 1018024] [remote 104.196.51.122:58654] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:11.687970 2026] [security2:error] [pid 1017536:tid 1017670] [client 111.235.68.106:57254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK85yJcY4fy7tP-rU3bWgAAAhg"]
[Sat Aug 29 05:05:11.689201 2026] [security2:error] [pid 1017536:tid 1017670] [client 111.235.68.106:57254] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK85yJcY4fy7tP-rU3bWgAAAhg"]
[Sat Aug 29 05:05:11.692777 2026] [security2:error] [pid 1017536:tid 1017724] [client 158.23.184.117:14357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.uscgpipeband.org"] [uri "/update/da222.php"] [unique_id "apK85yJcY4fy7tP-rU3bWQAAAk4"]
[Sat Aug 29 05:05:11.704379 2026] [security2:error] [pid 1018003:tid 1018264] [client 20.104.104.62:14384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.vistacounselingcolorado.com"] [uri "/pro.php"] [unique_id "apK85zAh5Y1i2tUxg4HazQAABig"]
[Sat Aug 29 05:05:11.707924 2026] [security2:error] [pid 1017536:tid 1017717] [client 52.71.203.206:40567] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "vertmulti.com"] [uri "/robots.txt"] [unique_id "apK85yJcY4fy7tP-rU3bXAAAAkc"]
[Sat Aug 29 05:05:11.708247 2026] [security2:error] [pid 1018003:tid 1018270] [client 20.48.160.90:63532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/wp-content/uploads/indoex.php"] [unique_id "apK85zAh5Y1i2tUxg4HaxAAABi4"]
[Sat Aug 29 05:05:11.712650 2026] [security2:error] [pid 1018003:tid 1018206] [client 20.48.250.41:19412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "liatbehr.com"] [uri "/ckk.php"] [unique_id "apK85zAh5Y1i2tUxg4Ha1QAABe8"]
[Sat Aug 29 05:05:11.714464 2026] [security2:error] [pid 1018003:tid 1018031] [remote 104.196.51.122:58654] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/.env"] [unique_id "apK85zAh5Y1i2tUxg4HazAAFzgo"]
[Sat Aug 29 05:05:11.717144 2026] [cgid:error] [pid 1018003:tid 1018028] [remote 104.196.51.122:58654] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:11.717164 2026] [security2:error] [pid 1018003:tid 1018266] [client 158.158.54.35:6039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/.trash7206/index.php"] [unique_id "apK85zAh5Y1i2tUxg4Ha2QAABio"]
[Sat Aug 29 05:05:11.718606 2026] [cgid:error] [pid 1018003:tid 1018026] [remote 104.196.51.122:58654] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:11.722802 2026] [security2:error] [pid 1018003:tid 1018074] [remote 104.196.51.122:58654] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/.env"] [unique_id "apK85zAh5Y1i2tUxg4Ha2wAFzjU"]
[Sat Aug 29 05:05:11.723185 2026] [cgid:error] [pid 1018003:tid 1018032] [remote 104.196.51.122:58654] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:11.724561 2026] [security2:error] [pid 1018003:tid 1018232] [client 20.63.219.114:9171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/post.php"] [unique_id "apK85zAh5Y1i2tUxg4Ha0gAABgg"]
[Sat Aug 29 05:05:11.724782 2026] [security2:error] [pid 1018003:tid 1018267] [client 20.48.250.41:12308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "employedlawyer.com"] [uri "/f2.php"] [unique_id "apK85zAh5Y1i2tUxg4Ha1wAABis"]
[Sat Aug 29 05:05:11.726667 2026] [security2:error] [pid 1017536:tid 1017673] [client 20.104.18.15:23523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/av.php"] [unique_id "apK85yJcY4fy7tP-rU3bXQAAAhs"]
[Sat Aug 29 05:05:11.732105 2026] [cgid:error] [pid 1018003:tid 1018031] [remote 104.196.51.122:58654] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:11.735348 2026] [security2:error] [pid 1018003:tid 1018156] [client 20.63.219.114:9400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "compropolis.mx"] [uri "/add_actualites.php"] [unique_id "apK85zAh5Y1i2tUxg4Ha3wAABb0"]
[Sat Aug 29 05:05:11.741677 2026] [security2:error] [pid 1018003:tid 1018159] [client 4.232.148.111:7639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/cv.php"] [unique_id "apK85zAh5Y1i2tUxg4Ha4QAABcA"]
[Sat Aug 29 05:05:11.757020 2026] [security2:error] [pid 1018003:tid 1018255] [client 68.155.159.216:51461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK85zAh5Y1i2tUxg4Ha5AAABh8"]
[Sat Aug 29 05:05:11.761250 2026] [security2:error] [pid 1017536:tid 1017714] [client 20.104.104.62:25648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.flicklister.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "apK85yJcY4fy7tP-rU3bZAAAAkQ"]
[Sat Aug 29 05:05:11.767782 2026] [security2:error] [pid 1018003:tid 1018257] [client 68.155.159.216:14230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/wp-admin/index.php"] [unique_id "apK85zAh5Y1i2tUxg4Ha5gAABiE"]
[Sat Aug 29 05:05:11.769999 2026] [security2:error] [pid 1018003:tid 1018194] [client 20.104.18.15:7132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/5PJcpMFsD8B.php"] [unique_id "apK85zAh5Y1i2tUxg4Ha5wAABeM"]
[Sat Aug 29 05:05:11.771812 2026] [security2:error] [pid 1018003:tid 1018221] [client 20.48.250.41:49867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jarritosmexico.com"] [uri "/bolt.php"] [unique_id "apK85zAh5Y1i2tUxg4Ha6AAABf4"]
[Sat Aug 29 05:05:11.773133 2026] [security2:error] [pid 1018003:tid 1018029] [remote 104.196.51.122:58654] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/static/.env"] [unique_id "apK85zAh5Y1i2tUxg4HaygAFzgg"]
[Sat Aug 29 05:05:11.773496 2026] [security2:error] [pid 1017536:tid 1017746] [client 52.139.37.240:24629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/up.php"] [unique_id "apK85yJcY4fy7tP-rU3bZgAAAmQ"]
[Sat Aug 29 05:05:11.773707 2026] [security2:error] [pid 1017536:tid 1017687] [client 20.104.104.62:13587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahrice-co-uk.glowt-shirt.com"] [uri "/pro.php"] [unique_id "apK85yJcY4fy7tP-rU3bZwAAAik"]
[Sat Aug 29 05:05:11.777807 2026] [security2:error] [pid 1017536:tid 1017752] [client 20.104.49.130:63565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/mac.php"] [unique_id "apK85yJcY4fy7tP-rU3baAAAAmo"]
[Sat Aug 29 05:05:11.778471 2026] [security2:error] [pid 1017536:tid 1017781] [client 158.23.184.117:22177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/.trash7206/index.php"] [unique_id "apK85yJcY4fy7tP-rU3baQAAAoc"]
[Sat Aug 29 05:05:11.779887 2026] [security2:error] [pid 1018003:tid 1018030] [remote 104.196.51.122:58654] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/static/app/.env"] [unique_id "apK85zAh5Y1i2tUxg4Ha1gAFzgk"]
[Sat Aug 29 05:05:11.782110 2026] [security2:error] [pid 1017536:tid 1017692] [client 143.244.57.82:48292] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "wincosir.enproftp.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "apK85yJcY4fy7tP-rU3bagAAAi4"]
[Sat Aug 29 05:05:11.784073 2026] [security2:error] [pid 1018003:tid 1018028] [remote 104.196.51.122:58654] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/static/home/user/.env"] [unique_id "apK85zAh5Y1i2tUxg4Ha3QAFzgc"]
[Sat Aug 29 05:05:11.786157 2026] [security2:error] [pid 1018003:tid 1018265] [client 158.23.184.117:56651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.howtostudyexams.com"] [uri "/wp-includes/mani.php"] [unique_id "apK85zAh5Y1i2tUxg4Ha6wAABik"]
[Sat Aug 29 05:05:11.789968 2026] [security2:error] [pid 1017536:tid 1017735] [client 93.152.221.156:59790] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.nme.cle.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/.env"] [unique_id "apK85yJcY4fy7tP-rU3bbAAAAlk"]
[Sat Aug 29 05:05:11.791646 2026] [security2:error] [pid 1017536:tid 1017735] [client 20.104.18.15:13199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/wsd.php"] [unique_id "apK85yJcY4fy7tP-rU3bbQAAAlk"]
[Sat Aug 29 05:05:11.794340 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.104.18.15:36807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/key.php"] [unique_id "apK85zAh5Y1i2tUxg4Ha7AAABcI"]
[Sat Aug 29 05:05:11.799526 2026] [security2:error] [pid 1018003:tid 1018157] [client 20.48.251.3:57913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/public/bnn_.php.php"] [unique_id "apK85zAh5Y1i2tUxg4Ha7gAABb4"]
[Sat Aug 29 05:05:11.799727 2026] [security2:error] [pid 1018003:tid 1018249] [client 20.48.250.41:65013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/cytyr.php"] [unique_id "apK85zAh5Y1i2tUxg4Ha7wAABhk"]
[Sat Aug 29 05:05:11.804073 2026] [cgid:error] [pid 1018003:tid 1018032] [remote 104.196.51.122:58654] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:11.804421 2026] [cgid:error] [pid 1018003:tid 1018074] [remote 104.196.51.122:58654] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:11.804998 2026] [security2:error] [pid 1017536:tid 1017766] [client 20.104.104.62:65221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.bv-place.com"] [uri "/wefile.php"] [unique_id "apK85yJcY4fy7tP-rU3bbwAAAng"]
[Sat Aug 29 05:05:11.807063 2026] [security2:error] [pid 1017536:tid 1017713] [client 20.48.160.90:39969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/px.php"] [unique_id "apK85yJcY4fy7tP-rU3bcAAAAkM"]
[Sat Aug 29 05:05:11.808512 2026] [security2:error] [pid 1018003:tid 1018201] [client 195.178.110.247:14244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ladnertesting.com"] [uri "/index.php"] [unique_id "apK85zAh5Y1i2tUxg4Ha9AAABeo"]
[Sat Aug 29 05:05:11.810613 2026] [security2:error] [pid 1018003:tid 1018275] [client 52.139.37.240:28256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jjfreeman.net"] [uri "/fw.php"] [unique_id "apK85zAh5Y1i2tUxg4Ha9QAABjM"]
[Sat Aug 29 05:05:11.824271 2026] [cgid:error] [pid 1018003:tid 1018102] [remote 104.196.51.122:58654] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml, referer: https://www.bigbuttonscarf.com
[Sat Aug 29 05:05:11.825833 2026] [security2:error] [pid 1017536:tid 1017723] [client 20.48.250.41:23537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/f35.php"] [unique_id "apK85yJcY4fy7tP-rU3bdAAAAk0"]
[Sat Aug 29 05:05:11.833136 2026] [cgid:error] [pid 1018003:tid 1018074] [remote 104.196.51.122:58654] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:11.833224 2026] [cgid:error] [pid 1018003:tid 1018100] [remote 104.196.51.122:58654] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:11.835074 2026] [security2:error] [pid 1018003:tid 1018203] [client 20.104.104.62:44587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/mga.php"] [unique_id "apK85zAh5Y1i2tUxg4Ha-gAABew"]
[Sat Aug 29 05:05:11.835511 2026] [cgid:error] [pid 1018003:tid 1018067] [remote 104.196.51.122:58654] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:11.840664 2026] [security2:error] [pid 1017536:tid 1017753] [client 20.104.18.15:47007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/ssla.php"] [unique_id "apK85yJcY4fy7tP-rU3bdwAAAms"]
[Sat Aug 29 05:05:11.849199 2026] [security2:error] [pid 1017536:tid 1017712] [client 20.48.160.90:63516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK85yJcY4fy7tP-rU3beQAAAkI"]
[Sat Aug 29 05:05:11.856448 2026] [security2:error] [pid 1018003:tid 1018231] [client 158.23.184.117:14361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.uscgpipeband.org"] [uri "/xmr.php"] [unique_id "apK85zAh5Y1i2tUxg4Ha-wAABgc"]
[Sat Aug 29 05:05:11.856463 2026] [security2:error] [pid 1017536:tid 1017627] [remote 93.123.109.228:48278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/.env.php"] [unique_id "apK85yJcY4fy7tP-rU3begACbVo"]
[Sat Aug 29 05:05:11.873868 2026] [security2:error] [pid 1018003:tid 1018183] [client 52.139.37.240:65312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "skyyentertainment.skyytalent.com"] [uri "/add_actualites.php"] [unique_id "apK85zAh5Y1i2tUxg4Ha_gAABdg"]
[Sat Aug 29 05:05:11.884270 2026] [security2:error] [pid 1017536:tid 1017738] [client 20.48.250.41:61700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/gettest.php"] [unique_id "apK85yJcY4fy7tP-rU3bfAAAAlw"]
[Sat Aug 29 05:05:11.886263 2026] [security2:error] [pid 1017536:tid 1017741] [client 20.48.250.41:19419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "liatbehr.com"] [uri "/R57.php"] [unique_id "apK85yJcY4fy7tP-rU3bfgAAAl8"]
[Sat Aug 29 05:05:11.889341 2026] [security2:error] [pid 1017536:tid 1017719] [client 20.104.104.62:14386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.vistacounselingcolorado.com"] [uri "/999.php"] [unique_id "apK85yJcY4fy7tP-rU3bfwAAAkk"]
[Sat Aug 29 05:05:11.896692 2026] [security2:error] [pid 1017536:tid 1017759] [client 20.104.18.15:23537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/images.php"] [unique_id "apK85yJcY4fy7tP-rU3bgQAAAnE"]
[Sat Aug 29 05:05:11.907008 2026] [security2:error] [pid 1018003:tid 1018159] [client 20.104.104.62:13634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahrice-co-uk.glowt-shirt.com"] [uri "/999.php"] [unique_id "apK85zAh5Y1i2tUxg4HbBAAABcA"]
[Sat Aug 29 05:05:11.911346 2026] [access_compat:error] [pid 1018003:tid 1018168] [client 67.20.76.220:22970] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:05:11.914063 2026] [security2:error] [pid 1017536:tid 1017668] [client 168.107.94.195:65291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK85yJcY4fy7tP-rU3bhAAAAhY"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:11.927113 2026] [security2:error] [pid 1018003:tid 1018255] [client 20.104.18.15:13295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/bulet.php"] [unique_id "apK85zAh5Y1i2tUxg4HbCQAABh8"]
[Sat Aug 29 05:05:11.927958 2026] [security2:error] [pid 1017536:tid 1017730] [client 20.196.209.81:18239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-admin/options-general.php"] [unique_id "apK85yJcY4fy7tP-rU3bhwAAAlQ"]
[Sat Aug 29 05:05:11.930664 2026] [cgid:error] [pid 1018003:tid 1018036] [remote 104.196.51.122:58654] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:11.930988 2026] [security2:error] [pid 1018003:tid 1018247] [client 20.48.250.41:49844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jarritosmexico.com"] [uri "/rtx.php"] [unique_id "apK85zAh5Y1i2tUxg4HbCgAABhc"]
[Sat Aug 29 05:05:11.932186 2026] [cgid:error] [pid 1018003:tid 1018034] [remote 104.196.51.122:58654] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:11.932573 2026] [cgid:error] [pid 1018003:tid 1018035] [remote 104.196.51.122:58654] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:11.933982 2026] [cgid:error] [pid 1018003:tid 1018025] [remote 104.196.51.122:58654] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:11.936454 2026] [cgid:error] [pid 1018003:tid 1018039] [remote 104.196.51.122:58654] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml, referer: https://www.bigbuttonscarf.com
[Sat Aug 29 05:05:11.937750 2026] [security2:error] [pid 1017536:tid 1017744] [client 158.23.184.117:21856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/.trash7206/min.php"] [unique_id "apK85yJcY4fy7tP-rU3bigAAAmI"]
[Sat Aug 29 05:05:11.944170 2026] [security2:error] [pid 1017536:tid 1017758] [client 20.104.18.15:7140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK85yJcY4fy7tP-rU3bjAAAAnA"]
[Sat Aug 29 05:05:11.953051 2026] [security2:error] [pid 1017536:tid 1017695] [client 158.23.184.117:61573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.howtostudyexams.com"] [uri "/wp-includes/Test.php"] [unique_id "apK85yJcY4fy7tP-rU3bjgAAAjE"]
[Sat Aug 29 05:05:11.980864 2026] [security2:error] [pid 1017536:tid 1017740] [client 20.196.209.81:15134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/theme.php"] [unique_id "apK85yJcY4fy7tP-rU3bkQAAAl4"]
[Sat Aug 29 05:05:12.005019 2026] [security2:error] [pid 1018003:tid 1018221] [client 45.154.98.191:64861] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.acovib.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "apK86DAh5Y1i2tUxg4HbEwAABf4"]
[Sat Aug 29 05:05:12.010101 2026] [security2:error] [pid 1018003:tid 1018273] [client 20.48.250.41:12397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "employedlawyer.com"] [uri "/grsiuk.php"] [unique_id "apK85zAh5Y1i2tUxg4HbFAAABjE"]
[Sat Aug 29 05:05:12.012237 2026] [security2:error] [pid 1017536:tid 1017786] [client 20.203.141.11:29093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "germanmorenoperez.com"] [uri "/file.php"] [unique_id "apK86CJcY4fy7tP-rU3blAAAAow"]
[Sat Aug 29 05:05:12.013480 2026] [security2:error] [pid 1017536:tid 1017695] [client 20.104.18.15:36824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/chosen.php"] [unique_id "apK86CJcY4fy7tP-rU3blQAAAjE"]
[Sat Aug 29 05:05:12.019231 2026] [security2:error] [pid 1017536:tid 1017771] [client 20.104.18.15:47029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "apK86CJcY4fy7tP-rU3bmAAAAn0"]
[Sat Aug 29 05:05:12.024115 2026] [cgid:error] [pid 1018003:tid 1018040] [remote 104.196.51.122:58654] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:12.031007 2026] [security2:error] [pid 1017536:tid 1017734] [client 20.48.251.3:57888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/wsws.php"] [unique_id "apK86CJcY4fy7tP-rU3bmwAAAlg"]
[Sat Aug 29 05:05:12.038290 2026] [security2:error] [pid 1017536:tid 1017761] [client 20.104.104.62:48507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/fh26.php"] [unique_id "apK86CJcY4fy7tP-rU3bnQAAAnM"]
[Sat Aug 29 05:05:12.060872 2026] [security2:error] [pid 1018003:tid 1018271] [client 40.83.93.50:3604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.superugly.com"] [uri "/wp-content/autoload_classmap.php"] [unique_id "apK86DAh5Y1i2tUxg4HbHAAABi8"]
[Sat Aug 29 05:05:12.069776 2026] [security2:error] [pid 1017536:tid 1017726] [client 20.104.104.62:10438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/inwp.php"] [unique_id "apK86CJcY4fy7tP-rU3boQAAAlA"]
[Sat Aug 29 05:05:12.076145 2026] [cgid:error] [pid 1018003:tid 1018041] [remote 104.196.51.122:58654] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:12.079074 2026] [security2:error] [pid 1018003:tid 1018236] [client 20.48.250.41:61725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/35.php"] [unique_id "apK86DAh5Y1i2tUxg4HbIgAABgw"]
[Sat Aug 29 05:05:12.079848 2026] [security2:error] [pid 1017536:tid 1017707] [client 52.139.37.240:65336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "skyyentertainment.skyytalent.com"] [uri "/browse.php"] [unique_id "apK86CJcY4fy7tP-rU3bowAAAj0"]
[Sat Aug 29 05:05:12.079997 2026] [security2:error] [pid 1018003:tid 1018202] [client 158.23.184.117:14384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.uscgpipeband.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK86DAh5Y1i2tUxg4HbIwAABes"]
[Sat Aug 29 05:05:12.093002 2026] [security2:error] [pid 1018003:tid 1018264] [client 20.104.104.62:13693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahrice-co-uk.glowt-shirt.com"] [uri "/sef.php"] [unique_id "apK86DAh5Y1i2tUxg4HbJAAABig"]
[Sat Aug 29 05:05:12.095896 2026] [security2:error] [pid 1017536:tid 1017688] [client 20.104.104.62:56575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.bv-place.com"] [uri "/EM.php"] [unique_id "apK86CJcY4fy7tP-rU3bpAAAAio"]
[Sat Aug 29 05:05:12.097154 2026] [security2:error] [pid 1018003:tid 1018258] [client 52.139.37.240:28286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jjfreeman.net"] [uri "/zwso.php"] [unique_id "apK86DAh5Y1i2tUxg4HbJQAABiI"]
[Sat Aug 29 05:05:12.099426 2026] [security2:error] [pid 1018003:tid 1018229] [client 4.232.148.111:1743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "strangeworxproductions.strangeworx.com"] [uri "/wp-admin.php"] [unique_id "apK86DAh5Y1i2tUxg4HbJgAABgU"]
[Sat Aug 29 05:05:12.103202 2026] [security2:error] [pid 1017536:tid 1017746] [client 20.48.160.90:45925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/jg.php"] [unique_id "apK86CJcY4fy7tP-rU3bpgAAAmQ"]
[Sat Aug 29 05:05:12.111058 2026] [security2:error] [pid 1018003:tid 1018164] [client 74.248.24.12:3355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/wp-logs.php"] [unique_id "apK86DAh5Y1i2tUxg4HbKQAABcU"]
[Sat Aug 29 05:05:12.113648 2026] [security2:error] [pid 1017536:tid 1017772] [client 177.131.19.63:12103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.19.131.177.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK86CJcY4fy7tP-rU3bqAAAAn4"]
[Sat Aug 29 05:05:12.113856 2026] [security2:error] [pid 1017536:tid 1017772] [client 177.131.19.63:12103] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK86CJcY4fy7tP-rU3bqAAAAn4"]
[Sat Aug 29 05:05:12.118667 2026] [security2:error] [pid 1018003:tid 1018240] [client 20.104.104.62:15319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.vistacounselingcolorado.com"] [uri "/sef.php"] [unique_id "apK86DAh5Y1i2tUxg4HbKwAABhA"]
[Sat Aug 29 05:05:12.121410 2026] [security2:error] [pid 1017536:tid 1017637] [remote 104.196.115.188:34074] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/@fs/src/.env"] [unique_id "apK86CJcY4fy7tP-rU3blgACimQ"]
[Sat Aug 29 05:05:12.122178 2026] [security2:error] [pid 1017536:tid 1017766] [client 20.48.160.90:64658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/haxor.php"] [unique_id "apK86CJcY4fy7tP-rU3bqwAAAng"]
[Sat Aug 29 05:05:12.128130 2026] [security2:error] [pid 1017536:tid 1017735] [client 20.48.250.41:64252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/galer.php"] [unique_id "apK86CJcY4fy7tP-rU3brAAAAlk"]
[Sat Aug 29 05:05:12.129801 2026] [security2:error] [pid 1018003:tid 1018167] [client 20.48.250.41:64605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jarritosmexico.com"] [uri "/ckk.php"] [unique_id "apK86DAh5Y1i2tUxg4HbLgAABcg"]
[Sat Aug 29 05:05:12.129898 2026] [cgid:error] [pid 1018003:tid 1018045] [remote 104.196.51.122:58654] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:12.130160 2026] [cgid:error] [pid 1018003:tid 1018047] [remote 104.196.51.122:58654] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:12.131903 2026] [security2:error] [pid 1018003:tid 1018154] [client 20.104.18.15:13309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/av.php"] [unique_id "apK86DAh5Y1i2tUxg4HbMwAABbs"]
[Sat Aug 29 05:05:12.131937 2026] [security2:error] [pid 1018003:tid 1018153] [client 20.48.250.41:23429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/wen.php"] [unique_id "apK86DAh5Y1i2tUxg4HbMgAABbo"]
[Sat Aug 29 05:05:12.133135 2026] [security2:error] [pid 1018003:tid 1018051] [remote 104.196.51.122:58654] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/.env"] [unique_id "apK86DAh5Y1i2tUxg4HbLAAGER4"]
[Sat Aug 29 05:05:12.136070 2026] [security2:error] [pid 1017536:tid 1017783] [client 52.139.37.240:25036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/wp-content/155.php"] [unique_id "apK86CJcY4fy7tP-rU3brgAAAok"]
[Sat Aug 29 05:05:12.136842 2026] [security2:error] [pid 1017536:tid 1017716] [client 20.63.219.114:18707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/flower.php"] [unique_id "apK86CJcY4fy7tP-rU3brQAAAkY"]
[Sat Aug 29 05:05:12.139369 2026] [security2:error] [pid 1017536:tid 1017730] [client 20.48.250.41:12406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "employedlawyer.com"] [uri "/wp-scr1pts.php"] [unique_id "apK86CJcY4fy7tP-rU3brwAAAlQ"]
[Sat Aug 29 05:05:12.141061 2026] [security2:error] [pid 1018003:tid 1018054] [remote 104.196.51.122:58654] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/api/.env/public/.env"] [unique_id "apK86DAh5Y1i2tUxg4HbMAAGESE"]
[Sat Aug 29 05:05:12.141877 2026] [cgid:error] [pid 1018003:tid 1018046] [remote 104.196.51.122:58654] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:12.143537 2026] [cgid:error] [pid 1018003:tid 1018044] [remote 104.196.51.122:58654] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:12.144034 2026] [cgid:error] [pid 1018003:tid 1018040] [remote 104.196.51.122:58654] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:12.145986 2026] [cgid:error] [pid 1018003:tid 1018049] [remote 104.196.51.122:58654] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml, referer: https://www.bigbuttonscarf.com
[Sat Aug 29 05:05:12.149132 2026] [security2:error] [pid 1018003:tid 1018234] [client 158.23.184.117:21862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/.well-known//index.php"] [unique_id "apK86DAh5Y1i2tUxg4HbOAAABgo"]
[Sat Aug 29 05:05:12.151332 2026] [security2:error] [pid 1017536:tid 1017700] [client 20.104.18.15:23545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/ops.php"] [unique_id "apK86CJcY4fy7tP-rU3btAAAAjY"]
[Sat Aug 29 05:05:12.156585 2026] [security2:error] [pid 1017536:tid 1017648] [remote 104.196.115.188:34074] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/@fs/app/.env"] [unique_id "apK86CJcY4fy7tP-rU3buAACh28"]
[Sat Aug 29 05:05:12.162910 2026] [cgid:error] [pid 1018003:tid 1018053] [remote 104.196.51.122:58654] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:12.167204 2026] [security2:error] [pid 1018003:tid 1018180] [client 20.104.18.15:47045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/wp-aothait.php"] [unique_id "apK86DAh5Y1i2tUxg4HbOwAABdU"]
[Sat Aug 29 05:05:12.168070 2026] [security2:error] [pid 1017536:tid 1017738] [client 20.104.104.62:64755] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.motherssandals.com"] [uri "/r57.php"] [unique_id "apK86CJcY4fy7tP-rU3bvwAAAlw"]
[Sat Aug 29 05:05:12.169233 2026] [cgid:error] [pid 1018003:tid 1018043] [remote 104.196.51.122:58654] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:12.170951 2026] [security2:error] [pid 1017536:tid 1017771] [client 20.104.18.15:36819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/file1221.php"] [unique_id "apK86CJcY4fy7tP-rU3bwgAAAn0"]
[Sat Aug 29 05:05:12.188186 2026] [security2:error] [pid 1018003:tid 1018267] [client 20.104.18.15:7147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/wsd.php"] [unique_id "apK86DAh5Y1i2tUxg4HbPgAABis"]
[Sat Aug 29 05:05:12.188593 2026] [security2:error] [pid 1018003:tid 1018207] [client 20.48.251.3:57821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/localconf.php"] [unique_id "apK86DAh5Y1i2tUxg4HbPwAABfA"]
[Sat Aug 29 05:05:12.189099 2026] [security2:error] [pid 1018003:tid 1018162] [client 158.23.184.117:56689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.howtostudyexams.com"] [uri "/wp-includes/pomo.php"] [unique_id "apK86DAh5Y1i2tUxg4HbQAAABcM"]
[Sat Aug 29 05:05:12.194110 2026] [security2:error] [pid 1017536:tid 1017744] [client 74.248.24.12:35474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/assets/images/doc.php"] [unique_id "apK86CJcY4fy7tP-rU3bygAAAmI"]
[Sat Aug 29 05:05:12.200820 2026] [security2:error] [pid 1018003:tid 1018232] [client 195.178.110.155:17944] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.body.requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1600"] [id "900941"] [msg "Invalid nested WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.body.requests.requests.path=///"] [hostname "greathairkc.com"] [uri "/blog/"] [unique_id "apK86DAh5Y1i2tUxg4HbQQAABgg"]
[Sat Aug 29 05:05:12.208863 2026] [security2:error] [pid 1018003:tid 1018183] [client 20.104.104.62:48613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/fgd.php"] [unique_id "apK86DAh5Y1i2tUxg4HbQwAABdg"]
[Sat Aug 29 05:05:12.211102 2026] [autoindex:error] [pid 1017536:tid 1017765] [client 74.7.241.32:0] AH01276: Cannot serve directory /home1/abmaccom/public_html/ibestek/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:05:12.212043 2026] [security2:error] [pid 1017536:tid 1017782] [client 20.63.219.114:19421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "compropolis.mx"] [uri "/alfanew.php7"] [unique_id "apK86CJcY4fy7tP-rU3bzwAAAog"]
[Sat Aug 29 05:05:12.212521 2026] [security2:error] [pid 1018003:tid 1018183] [client 20.104.104.62:25642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.flicklister.com"] [uri "/403.php"] [unique_id "apK86DAh5Y1i2tUxg4HbRAAABdg"]
[Sat Aug 29 05:05:12.221240 2026] [security2:error] [pid 1018003:tid 1018221] [client 158.158.54.35:9949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wk/index.php"] [unique_id "apK86DAh5Y1i2tUxg4HbRQAABf4"]
[Sat Aug 29 05:05:12.222863 2026] [security2:error] [pid 1018003:tid 1018172] [client 4.232.148.111:7621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/wp-content/packed.php"] [unique_id "apK86DAh5Y1i2tUxg4HbRwAABc0"]
[Sat Aug 29 05:05:12.224884 2026] [security2:error] [pid 1018003:tid 1018270] [client 20.104.104.62:13715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahrice-co-uk.glowt-shirt.com"] [uri "/admin123.php"] [unique_id "apK86DAh5Y1i2tUxg4HbSAAABi4"]
[Sat Aug 29 05:05:12.225953 2026] [security2:error] [pid 1017536:tid 1017764] [client 158.23.184.117:14352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.uscgpipeband.org"] [uri "/wp-act.php"] [unique_id "apK86CJcY4fy7tP-rU3b0AAAAnY"]
[Sat Aug 29 05:05:12.226265 2026] [security2:error] [pid 1018003:tid 1018160] [client 20.104.104.62:53865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.bv-place.com"] [uri "/ca4.php"] [unique_id "apK86DAh5Y1i2tUxg4HbSQAABcE"]
[Sat Aug 29 05:05:12.229335 2026] [security2:error] [pid 1017536:tid 1017707] [client 20.104.104.62:10436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/ad1.php"] [unique_id "apK86CJcY4fy7tP-rU3b0QAAAj0"]
[Sat Aug 29 05:05:12.259499 2026] [security2:error] [pid 1018003:tid 1018239] [client 20.48.160.90:45918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/yj.php"] [unique_id "apK86DAh5Y1i2tUxg4HbSwAABg8"]
[Sat Aug 29 05:05:12.260744 2026] [security2:error] [pid 1017536:tid 1017719] [client 20.104.104.62:14795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.vistacounselingcolorado.com"] [uri "/admin123.php"] [unique_id "apK86CJcY4fy7tP-rU3b2AAAAkk"]
[Sat Aug 29 05:05:12.261767 2026] [security2:error] [pid 1018003:tid 1018194] [client 20.48.250.41:49828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.jarritosmexico.com"] [uri "/R57.php"] [unique_id "apK86DAh5Y1i2tUxg4HbTAAABeM"]
[Sat Aug 29 05:05:12.261929 2026] [security2:error] [pid 1017536:tid 1017706] [client 93.152.221.156:59790] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "webdisk.nme.cle.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/.env.backup"] [unique_id "apK86CJcY4fy7tP-rU3b1wAAAjw"]
[Sat Aug 29 05:05:12.264404 2026] [security2:error] [pid 1017536:tid 1017777] [client 216.26.239.122:10311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 122.239.26.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK86CJcY4fy7tP-rU3b1AAAAoM"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:12.273445 2026] [security2:error] [pid 1018003:tid 1018273] [client 20.48.160.90:64677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/google.php"] [unique_id "apK86DAh5Y1i2tUxg4HbTQAABjE"]
[Sat Aug 29 05:05:12.274256 2026] [security2:error] [pid 1018003:tid 1018274] [client 20.48.250.41:12404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "employedlawyer.com"] [uri "/num.php"] [unique_id "apK86DAh5Y1i2tUxg4HbTgAABjI"]
[Sat Aug 29 05:05:12.274363 2026] [security2:error] [pid 1018003:tid 1018196] [client 20.104.18.15:13250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/images.php"] [unique_id "apK86DAh5Y1i2tUxg4HbTwAABeU"]
[Sat Aug 29 05:05:12.297860 2026] [security2:error] [pid 1018003:tid 1018213] [client 52.139.37.240:28267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jjfreeman.net"] [uri "/admin/function.php"] [unique_id "apK86DAh5Y1i2tUxg4HbUQAABfY"]
[Sat Aug 29 05:05:12.298897 2026] [security2:error] [pid 1017536:tid 1017709] [client 20.104.18.15:23532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/coffexium.php"] [unique_id "apK86CJcY4fy7tP-rU3b4gAAAj8"]
[Sat Aug 29 05:05:12.299088 2026] [security2:error] [pid 1018003:tid 1018193] [client 52.139.37.240:65302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "skyyentertainment.skyytalent.com"] [uri "/contentloader1.php"] [unique_id "apK86DAh5Y1i2tUxg4HbUgAABeI"]
[Sat Aug 29 05:05:12.300353 2026] [security2:error] [pid 1018003:tid 1018254] [client 158.23.184.117:22194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/.well-known/about.php"] [unique_id "apK86DAh5Y1i2tUxg4HbUwAABh4"]
[Sat Aug 29 05:05:12.301895 2026] [security2:error] [pid 1018003:tid 1018225] [client 168.107.94.195:49257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK86DAh5Y1i2tUxg4HbVAAABgI"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:12.305632 2026] [security2:error] [pid 1018003:tid 1018251] [client 20.48.250.41:62278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/baixy.php"] [unique_id "apK86DAh5Y1i2tUxg4HbVQAABhs"]
[Sat Aug 29 05:05:12.310383 2026] [security2:error] [pid 1018003:tid 1018174] [client 20.104.18.15:47040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/wp-includes/index.php"] [unique_id "apK86DAh5Y1i2tUxg4HbVwAABc8"]
[Sat Aug 29 05:05:12.314907 2026] [security2:error] [pid 1017536:tid 1017733] [client 20.48.250.41:58604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/maraz.php"] [unique_id "apK86CJcY4fy7tP-rU3b5AAAAlc"]
[Sat Aug 29 05:05:12.331157 2026] [security2:error] [pid 1018003:tid 1018057] [remote 104.196.51.122:58654] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/img../.env"] [unique_id "apK86DAh5Y1i2tUxg4HbWAAGNiQ"]
[Sat Aug 29 05:05:12.333171 2026] [security2:error] [pid 1017536:tid 1017777] [client 52.139.37.240:24822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/wp-update.php"] [unique_id "apK86CJcY4fy7tP-rU3b5gAAAoM"]
[Sat Aug 29 05:05:12.336977 2026] [security2:error] [pid 1017536:tid 1017792] [client 20.48.250.41:23549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/inc.php"] [unique_id "apK86CJcY4fy7tP-rU3b5wAAApI"]
[Sat Aug 29 05:05:12.344023 2026] [security2:error] [pid 1018003:tid 1018245] [client 20.196.209.81:12396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-admin/options.php"] [unique_id "apK86DAh5Y1i2tUxg4HbWgAABhU"]
[Sat Aug 29 05:05:12.347304 2026] [security2:error] [pid 1018003:tid 1018164] [client 20.48.251.3:57801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/bengi.php"] [unique_id "apK86DAh5Y1i2tUxg4HbXAAABcU"]
[Sat Aug 29 05:05:12.350051 2026] [security2:error] [pid 1018003:tid 1018059] [remote 104.196.51.122:58654] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/images../.env"] [unique_id "apK86DAh5Y1i2tUxg4HbWwAGFSY"]
[Sat Aug 29 05:05:12.352269 2026] [core:error] [pid 1018003:tid 1018062] [remote 104.196.51.122:58654] AH10244: invalid URI path (/%2e%2e/.env)
[Sat Aug 29 05:05:12.352766 2026] [security2:error] [pid 1018003:tid 1018061] [remote 104.196.51.122:58654] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/assets../.env"] [unique_id "apK86DAh5Y1i2tUxg4HbXQAGFSg"]
[Sat Aug 29 05:05:12.361570 2026] [security2:error] [pid 1017536:tid 1017741] [client 20.104.104.62:13614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahrice-co-uk.glowt-shirt.com"] [uri "/7h.php"] [unique_id "apK86CJcY4fy7tP-rU3b9AAAAl8"]
[Sat Aug 29 05:05:12.367345 2026] [security2:error] [pid 1018003:tid 1018200] [client 20.104.104.62:53826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.bv-place.com"] [uri "/x0x.php"] [unique_id "apK86DAh5Y1i2tUxg4HbYgAABek"]
[Sat Aug 29 05:05:12.367965 2026] [security2:error] [pid 1018003:tid 1018181] [client 20.104.104.62:44567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/1vbqo.php"] [unique_id "apK86DAh5Y1i2tUxg4HbYwAABdY"]
[Sat Aug 29 05:05:12.370628 2026] [security2:error] [pid 1018003:tid 1018265] [client 20.104.18.15:36754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/nox.php"] [unique_id "apK86DAh5Y1i2tUxg4HbZAAABik"]
[Sat Aug 29 05:05:12.375573 2026] [security2:error] [pid 1017536:tid 1017714] [client 20.197.61.180:16974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eeeaudio.com"] [uri "/wp-content/languages/min.php"] [unique_id "apK86CJcY4fy7tP-rU3b9gAAAkQ"]
[Sat Aug 29 05:05:12.376836 2026] [security2:error] [pid 1017536:tid 1017700] [client 158.23.184.117:14395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.uscgpipeband.org"] [uri "/fff.php"] [unique_id "apK86CJcY4fy7tP-rU3b9wAAAjY"]
[Sat Aug 29 05:05:12.383141 2026] [security2:error] [pid 1017536:tid 1017688] [client 20.196.209.81:15806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/alumni_reg.php"] [unique_id "apK86CJcY4fy7tP-rU3b-QAAAio"]
[Sat Aug 29 05:05:12.395736 2026] [security2:error] [pid 1018003:tid 1018256] [client 20.104.104.62:15261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.vistacounselingcolorado.com"] [uri "/7h.php"] [unique_id "apK86DAh5Y1i2tUxg4HbZgAABiA"]
[Sat Aug 29 05:05:12.398431 2026] [security2:error] [pid 1017536:tid 1017681] [client 20.48.160.90:23242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/zi.php"] [unique_id "apK86CJcY4fy7tP-rU3b_gAAAiM"]
[Sat Aug 29 05:05:12.403008 2026] [security2:error] [pid 1017536:tid 1017779] [client 93.152.221.156:59790] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.nme.cle.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/config/.env"] [unique_id "apK86CJcY4fy7tP-rU3b_QAAAoU"]
[Sat Aug 29 05:05:12.412093 2026] [security2:error] [pid 1017536:tid 1017691] [client 20.104.18.15:7110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/bulet.php"] [unique_id "apK86CJcY4fy7tP-rU3b_wAAAi0"]
[Sat Aug 29 05:05:12.414287 2026] [security2:error] [pid 1018003:tid 1018226] [client 20.104.104.62:25645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.flicklister.com"] [uri "/ava.php"] [unique_id "apK86DAh5Y1i2tUxg4HbZwAABgM"]
[Sat Aug 29 05:05:12.414841 2026] [security2:error] [pid 1018003:tid 1018197] [client 68.155.159.216:58268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK86DAh5Y1i2tUxg4HbaAAABeY"]
[Sat Aug 29 05:05:12.416239 2026] [security2:error] [pid 1017536:tid 1017724] [client 4.232.148.111:21789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tiaandephraim.com"] [uri "/disagraeosc.php"] [unique_id "apK86CJcY4fy7tP-rU3cAQAAAk4"]
[Sat Aug 29 05:05:12.416402 2026] [security2:error] [pid 1017536:tid 1017698] [client 20.104.18.15:13188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/ops.php"] [unique_id "apK86CJcY4fy7tP-rU3cAgAAAjQ"]
[Sat Aug 29 05:05:12.417805 2026] [security2:error] [pid 1017536:tid 1017713] [client 158.23.147.79:63274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK86CJcY4fy7tP-rU3cAwAAAkM"]
[Sat Aug 29 05:05:12.419892 2026] [security2:error] [pid 1017536:tid 1017721] [client 68.155.159.216:12231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/hehehehe.php"] [unique_id "apK86CJcY4fy7tP-rU3cBAAAAks"]
[Sat Aug 29 05:05:12.423462 2026] [security2:error] [pid 1018003:tid 1018171] [client 20.104.49.130:47956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/makeasmtp.php"] [unique_id "apK86DAh5Y1i2tUxg4HbagAABcw"]
[Sat Aug 29 05:05:12.425490 2026] [security2:error] [pid 1017536:tid 1017778] [client 68.155.159.216:51521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apK86CJcY4fy7tP-rU3cBQAAAoQ"]
[Sat Aug 29 05:05:12.434972 2026] [security2:error] [pid 1017536:tid 1017690] [client 143.244.57.82:48296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 82.57.244.143.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "wincosir.enproftp.com"] [uri "/xmlrpc.php"] [unique_id "apK86CJcY4fy7tP-rU3cBwAAAiw"]
[Sat Aug 29 05:05:12.435662 2026] [security2:error] [pid 1018003:tid 1018151] [client 20.48.160.90:62657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "apK86DAh5Y1i2tUxg4HbawAABbg"]
[Sat Aug 29 05:05:12.443078 2026] [security2:error] [pid 1018003:tid 1018158] [client 20.104.18.15:46998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/file31.php"] [unique_id "apK86DAh5Y1i2tUxg4HbbQAABb8"]
[Sat Aug 29 05:05:12.446182 2026] [security2:error] [pid 1018003:tid 1018064] [remote 104.196.51.122:58654] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/uploads../.env"] [unique_id "apK86DAh5Y1i2tUxg4HbbAAF_Ss"]
[Sat Aug 29 05:05:12.448891 2026] [security2:error] [pid 1017536:tid 1017695] [client 20.104.18.15:23529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/BDKR28WP.php"] [unique_id "apK86CJcY4fy7tP-rU3cCQAAAjE"]
[Sat Aug 29 05:05:12.452009 2026] [security2:error] [pid 1017536:tid 1017744] [client 20.48.250.41:61822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/kbfr.php"] [unique_id "apK86CJcY4fy7tP-rU3cCgAAAmI"]
[Sat Aug 29 05:05:12.454872 2026] [security2:error] [pid 1017536:tid 1017745] [client 20.48.250.41:12332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "employedlawyer.com"] [uri "/a4.php"] [unique_id "apK86CJcY4fy7tP-rU3cCwAAAmM"]
[Sat Aug 29 05:05:12.456754 2026] [security2:error] [pid 1018003:tid 1018182] [client 20.48.250.41:64153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/ava.php"] [unique_id "apK86DAh5Y1i2tUxg4HbbgAABdc"]
[Sat Aug 29 05:05:12.476950 2026] [security2:error] [pid 1018003:tid 1018175] [client 20.203.141.11:41365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "germanmorenoperez.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK86DAh5Y1i2tUxg4HbcAAABdA"]
[Sat Aug 29 05:05:12.481296 2026] [security2:error] [pid 1017536:tid 1017727] [client 158.23.184.117:56647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.howtostudyexams.com"] [uri "/wp-admin/link-add.php"] [unique_id "apK86CJcY4fy7tP-rU3cDQAAAlE"]
[Sat Aug 29 05:05:12.484873 2026] [security2:error] [pid 1017536:tid 1017742] [client 20.48.251.3:57905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/i.php"] [unique_id "apK86CJcY4fy7tP-rU3cDgAAAmA"]
[Sat Aug 29 05:05:12.494850 2026] [security2:error] [pid 1017536:tid 1017786] [client 52.139.37.240:64233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jjfreeman.net"] [uri "/zoom1.php"] [unique_id "apK86CJcY4fy7tP-rU3cEwAAAow"]
[Sat Aug 29 05:05:12.498908 2026] [security2:error] [pid 1018003:tid 1018156] [client 20.104.104.62:13758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahrice-co-uk.glowt-shirt.com"] [uri "/wp-gzone.php"] [unique_id "apK86DAh5Y1i2tUxg4HbcwAABb0"]
[Sat Aug 29 05:05:12.499765 2026] [security2:error] [pid 1018003:tid 1018233] [client 52.139.37.240:38087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "skyyentertainment.skyytalent.com"] [uri "/upfile.php"] [unique_id "apK86DAh5Y1i2tUxg4HbdAAABgk"]
[Sat Aug 29 05:05:12.499879 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.104.104.62:20640] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.motherssandals.com"] [uri "/r57.php"] [unique_id "apK86CJcY4fy7tP-rU3cFQAAAlY"]
[Sat Aug 29 05:05:12.501112 2026] [security2:error] [pid 1018003:tid 1018232] [client 20.104.18.15:36685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/akismet.php"] [unique_id "apK86DAh5Y1i2tUxg4HbdQAABgg"]
[Sat Aug 29 05:05:12.501657 2026] [security2:error] [pid 1018003:tid 1018089] [remote 104.196.51.122:58654] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/@fs/var/task/.env"] [unique_id "apK86DAh5Y1i2tUxg4HbcgAF-EQ"]
[Sat Aug 29 05:05:12.502985 2026] [security2:error] [pid 1018003:tid 1018186] [client 20.104.104.62:44595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/h02ugyh.php"] [unique_id "apK86DAh5Y1i2tUxg4HbdgAABds"]
[Sat Aug 29 05:05:12.503025 2026] [security2:error] [pid 1018003:tid 1018206] [client 20.104.104.62:65235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.bv-place.com"] [uri "/fesa.php"] [unique_id "apK86DAh5Y1i2tUxg4HbdwAABe8"]
[Sat Aug 29 05:05:12.505793 2026] [cgid:error] [pid 1018003:tid 1018072] [remote 104.196.51.122:58654] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:12.508704 2026] [cgid:error] [pid 1018003:tid 1018076] [remote 104.196.51.122:58654] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:12.527761 2026] [security2:error] [pid 1017536:tid 1017680] [client 158.23.184.117:14386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.uscgpipeband.org"] [uri "/.tmb/dropdown.php"] [unique_id "apK86CJcY4fy7tP-rU3cGAAAAiI"]
[Sat Aug 29 05:05:12.527931 2026] [security2:error] [pid 1017536:tid 1017705] [client 52.139.37.240:58583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/xmrlpc.php"] [unique_id "apK86CJcY4fy7tP-rU3cGQAAAjs"]
[Sat Aug 29 05:05:12.528028 2026] [security2:error] [pid 1017536:tid 1017719] [client 4.205.62.107:64311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/asdf.php"] [unique_id "apK86CJcY4fy7tP-rU3cGgAAAkk"]
[Sat Aug 29 05:05:12.529482 2026] [cgid:error] [pid 1018003:tid 1018077] [remote 104.196.51.122:58654] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:12.533642 2026] [security2:error] [pid 1017536:tid 1017735] [client 158.23.184.117:22152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK86CJcY4fy7tP-rU3cHAAAAlk"]
[Sat Aug 29 05:05:12.536398 2026] [security2:error] [pid 1017536:tid 1017783] [client 4.205.62.107:21607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK86CJcY4fy7tP-rU3cHwAAAok"]
[Sat Aug 29 05:05:12.541676 2026] [lsapi:warn] [pid 1018003:tid 1018022] [remote 104.28.132.8:16569] [host thegrowingplace.ca] Backend log: PHP Warning:  Trying to access array offset on value of type null in /home1/thegrow2/public_html/w_api/Configuration.php on line 115\n, referer: https://thegrowingplace.ca/index.html
[Sat Aug 29 05:05:12.544329 2026] [security2:error] [pid 1017536:tid 1017694] [client 68.155.159.216:64857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.gavirestaurant.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK86CJcY4fy7tP-rU3cIAAAAjA"]
[Sat Aug 29 05:05:12.545050 2026] [security2:error] [pid 1018003:tid 1018276] [client 20.48.160.90:26747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/ue.php"] [unique_id "apK86DAh5Y1i2tUxg4HbewAABjQ"]
[Sat Aug 29 05:05:12.545070 2026] [security2:error] [pid 1017536:tid 1017678] [client 40.83.93.50:3631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.superugly.com"] [uri "/wp-content/cache/min/1/wp-content/admin.php"] [unique_id "apK86CJcY4fy7tP-rU3cIQAAAiA"]
[Sat Aug 29 05:05:12.545566 2026] [security2:error] [pid 1018003:tid 1018221] [client 20.104.18.15:7136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/av.php"] [unique_id "apK86DAh5Y1i2tUxg4HbfAAABf4"]
[Sat Aug 29 05:05:12.546333 2026] [security2:error] [pid 1018003:tid 1018152] [client 20.63.219.114:18708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/meta.php"] [unique_id "apK86DAh5Y1i2tUxg4HbfQAABbk"]
[Sat Aug 29 05:05:12.548139 2026] [security2:error] [pid 1017536:tid 1017709] [client 20.104.104.62:14792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.vistacounselingcolorado.com"] [uri "/wp-gzone.php"] [unique_id "apK86CJcY4fy7tP-rU3cIgAAAj8"]
[Sat Aug 29 05:05:12.551302 2026] [security2:error] [pid 1018003:tid 1018172] [client 20.104.18.15:13195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/coffexium.php"] [unique_id "apK86DAh5Y1i2tUxg4HbfwAABc0"]
[Sat Aug 29 05:05:12.569366 2026] [security2:error] [pid 1017536:tid 1017754] [client 35.159.236.187:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.jobindjibouti.com"] [uri "/jobs/"] [unique_id "apK86CJcY4fy7tP-rU3cIwAAAmw"]
[Sat Aug 29 05:05:12.571419 2026] [security2:error] [pid 1018003:tid 1018199] [client 45.154.98.191:49233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.98.154.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.acovib.com"] [uri "/xmlrpc.php"] [unique_id "apK86DAh5Y1i2tUxg4HbfgAABeg"]
[Sat Aug 29 05:05:12.574414 2026] [security2:error] [pid 1018003:tid 1018230] [client 20.48.250.41:23519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/6bcwiqwj.php"] [unique_id "apK86DAh5Y1i2tUxg4HbggAABgY"]
[Sat Aug 29 05:05:12.574848 2026] [security2:error] [pid 1018003:tid 1018080] [remote 104.196.51.122:58654] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/@fs/proc/self/cwd/.env"] [unique_id "apK86DAh5Y1i2tUxg4HbgQAGFzs"]
[Sat Aug 29 05:05:12.575547 2026] [security2:error] [pid 1018003:tid 1018257] [client 158.23.147.79:30695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/chosen.php"] [unique_id "apK86DAh5Y1i2tUxg4HbgwAABiE"]
[Sat Aug 29 05:05:12.578151 2026] [security2:error] [pid 1017536:tid 1017767] [client 68.155.159.216:16361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/NewFile.php/"] [unique_id "apK86CJcY4fy7tP-rU3cJwAAAnk"]
[Sat Aug 29 05:05:12.578903 2026] [security2:error] [pid 1017536:tid 1017785] [client 20.48.160.90:28670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/robots.php"] [unique_id "apK86CJcY4fy7tP-rU3cJgAAAos"]
[Sat Aug 29 05:05:12.602230 2026] [security2:error] [pid 1017536:tid 1017747] [client 20.48.250.41:61701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/wp-act.php"] [unique_id "apK86CJcY4fy7tP-rU3cKQAAAmU"]
[Sat Aug 29 05:05:12.606435 2026] [security2:error] [pid 1018003:tid 1018194] [client 68.155.159.216:16299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.showerdoorsdubuque.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK86DAh5Y1i2tUxg4HbhgAABeM"]
[Sat Aug 29 05:05:12.617788 2026] [security2:error] [pid 1017536:tid 1017716] [client 20.104.104.62:25657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.flicklister.com"] [uri "/info.php"] [unique_id "apK86CJcY4fy7tP-rU3cLgAAAkY"]
[Sat Aug 29 05:05:12.619766 2026] [security2:error] [pid 1018003:tid 1018249] [client 74.248.24.12:8446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/wp-admin/css/about.php"] [unique_id "apK86DAh5Y1i2tUxg4HbhwAABhk"]
[Sat Aug 29 05:05:12.623024 2026] [security2:error] [pid 1017536:tid 1017723] [client 20.104.18.15:23506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/sf.php"] [unique_id "apK86CJcY4fy7tP-rU3cNgAAAk0"]
[Sat Aug 29 05:05:12.627712 2026] [security2:error] [pid 1017536:tid 1017726] [client 20.63.219.114:19445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "compropolis.mx"] [uri "/xmlrpc.php0"] [unique_id "apK86CJcY4fy7tP-rU3cKgAAAlA"]
[Sat Aug 29 05:05:12.629196 2026] [security2:error] [pid 1017536:tid 1017708] [client 158.23.184.117:61599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.howtostudyexams.com"] [uri "/wp-includes/Text.php"] [unique_id "apK86CJcY4fy7tP-rU3cNwAAAj4"]
[Sat Aug 29 05:05:12.629505 2026] [security2:error] [pid 1017536:tid 1017700] [client 20.104.18.15:47001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/dk.php"] [unique_id "apK86CJcY4fy7tP-rU3cOAAAAjY"]
[Sat Aug 29 05:05:12.632636 2026] [security2:error] [pid 1018003:tid 1018246] [client 20.104.104.62:13571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahrice-co-uk.glowt-shirt.com"] [uri "/str.php"] [unique_id "apK86DAh5Y1i2tUxg4HbiAAABhY"]
[Sat Aug 29 05:05:12.643187 2026] [security2:error] [pid 1017536:tid 1017672] [client 20.48.251.3:57825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/guk.php"] [unique_id "apK86CJcY4fy7tP-rU3cOgAAAho"]
[Sat Aug 29 05:05:12.646203 2026] [security2:error] [pid 1017536:tid 1017757] [client 20.48.250.41:64998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/gdn.php"] [unique_id "apK86CJcY4fy7tP-rU3cOwAAAm8"]
[Sat Aug 29 05:05:12.647860 2026] [security2:error] [pid 1017536:tid 1017681] [client 4.205.62.107:22334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/phina.php"] [unique_id "apK86CJcY4fy7tP-rU3cPAAAAiM"]
[Sat Aug 29 05:05:12.655765 2026] [security2:error] [pid 1018003:tid 1018213] [client 20.48.250.41:12384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "employedlawyer.com"] [uri "/tfm.php"] [unique_id "apK86DAh5Y1i2tUxg4HbiQAABfY"]
[Sat Aug 29 05:05:12.664947 2026] [security2:error] [pid 1018003:tid 1018082] [remote 104.196.51.122:58654] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "www.bigbuttonscarf.com"] [uri "/api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ"] [unique_id "apK86DAh5Y1i2tUxg4HbiwAGEj0"]
[Sat Aug 29 05:05:12.665847 2026] [security2:error] [pid 1018003:tid 1018084] [remote 104.196.51.122:58654] ModSecurity: Access denied with code 500 (phase 1) (Error: Connection drop requested but failed to close the  socket). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "www.bigbuttonscarf.com"] [uri "/public/plugins/alertlist/../../../../../../../../proc/self/environ"] [unique_id "apK86DAh5Y1i2tUxg4HbjQAGEj8"]
[Sat Aug 29 05:05:12.669954 2026] [security2:error] [pid 1017536:tid 1017772] [client 158.158.54.35:10875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/admin.php"] [unique_id "apK86CJcY4fy7tP-rU3cQwAAAn4"]
[Sat Aug 29 05:05:12.678241 2026] [security2:error] [pid 1017536:tid 1017720] [client 20.104.18.15:36815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/ajax.php"] [unique_id "apK86CJcY4fy7tP-rU3cRAAAAko"]
[Sat Aug 29 05:05:12.678603 2026] [security2:error] [pid 1018003:tid 1018271] [client 20.48.160.90:45915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/nv.php"] [unique_id "apK86DAh5Y1i2tUxg4HbjwAABi8"]
[Sat Aug 29 05:05:12.680866 2026] [security2:error] [pid 1018003:tid 1018155] [client 158.23.184.117:21884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/.well-known/acme-challenge/content.php"] [unique_id "apK86DAh5Y1i2tUxg4HbkAAABbw"]
[Sat Aug 29 05:05:12.681690 2026] [security2:error] [pid 1017536:tid 1017673] [client 20.104.104.62:14365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.vistacounselingcolorado.com"] [uri "/str.php"] [unique_id "apK86CJcY4fy7tP-rU3cRQAAAhs"]
[Sat Aug 29 05:05:12.683266 2026] [security2:error] [pid 1017536:tid 1017689] [client 168.107.94.195:49529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK86CJcY4fy7tP-rU3cRgAAAis"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:12.684755 2026] [security2:error] [pid 1017536:tid 1017691] [client 20.104.49.130:47809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/133.php"] [unique_id "apK86CJcY4fy7tP-rU3cSAAAAi0"]
[Sat Aug 29 05:05:12.686636 2026] [security2:error] [pid 1017536:tid 1017723] [client 158.23.184.117:14347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.uscgpipeband.org"] [uri "/robots.php"] [unique_id "apK86CJcY4fy7tP-rU3cSgAAAk0"]
[Sat Aug 29 05:05:12.686863 2026] [security2:error] [pid 1017536:tid 1017789] [client 20.104.18.15:13272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/BDKR28WP.php"] [unique_id "apK86CJcY4fy7tP-rU3cSwAAAo8"]
[Sat Aug 29 05:05:12.689123 2026] [security2:error] [pid 1018003:tid 1018236] [client 20.104.18.15:7162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/images.php"] [unique_id "apK86DAh5Y1i2tUxg4HbkQAABgw"]
[Sat Aug 29 05:05:12.693676 2026] [security2:error] [pid 1017536:tid 1017771] [client 52.139.37.240:56790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jjfreeman.net"] [uri "/about.php7"] [unique_id "apK86CJcY4fy7tP-rU3cUwAAAn0"]
[Sat Aug 29 05:05:12.696385 2026] [security2:error] [pid 1018003:tid 1018278] [client 20.104.104.62:44598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/shelp.php"] [unique_id "apK86DAh5Y1i2tUxg4HbkgAABjY"]
[Sat Aug 29 05:05:12.698120 2026] [security2:error] [pid 1018003:tid 1018150] [client 52.139.37.240:37951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "skyyentertainment.skyytalent.com"] [uri "/form.php"] [unique_id "apK86DAh5Y1i2tUxg4HbkwAABbc"]
[Sat Aug 29 05:05:12.705053 2026] [security2:error] [pid 1017536:tid 1017751] [client 4.232.148.111:1455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/wp-admin/js/index.php"] [unique_id "apK86CJcY4fy7tP-rU3cVgAAAmk"]
[Sat Aug 29 05:05:12.709491 2026] [security2:error] [pid 1017536:tid 1017774] [client 4.205.62.107:53324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/app_dev.php"] [unique_id "apK86CJcY4fy7tP-rU3cVwAAAoA"]
[Sat Aug 29 05:05:12.720924 2026] [security2:error] [pid 1017536:tid 1017703] [client 158.23.147.79:24505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/content.php"] [unique_id "apK86CJcY4fy7tP-rU3cWAAAAjk"]
[Sat Aug 29 05:05:12.720947 2026] [security2:error] [pid 1017536:tid 1017738] [client 20.48.160.90:63512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/wp-content/plugins/ccx/index.php"] [unique_id "apK86CJcY4fy7tP-rU3cWQAAAlw"]
[Sat Aug 29 05:05:12.730171 2026] [security2:error] [pid 1018003:tid 1018212] [client 185.104.184.230:49402] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.youthspeakoutint.org"] [uri "/autodiscover/autodiscover.xml/wp-includes/wlwmanifest.xml"] [unique_id "apK86DAh5Y1i2tUxg4HblQAABfU"]
[Sat Aug 29 05:05:12.736277 2026] [security2:error] [pid 1017536:tid 1017779] [client 52.139.37.240:24638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/about/function.php"] [unique_id "apK86CJcY4fy7tP-rU3cWwAAAoU"]
[Sat Aug 29 05:05:12.742130 2026] [security2:error] [pid 1018003:tid 1018179] [client 20.196.209.81:17929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-admin/panel.php"] [unique_id "apK86DAh5Y1i2tUxg4HblgAABdQ"]
[Sat Aug 29 05:05:12.757436 2026] [security2:error] [pid 1017536:tid 1017765] [client 158.23.147.79:23453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ridetimewinnipegservicetiresrims.ca"] [uri "/wp-content/packed.php"] [unique_id "apK86CJcY4fy7tP-rU3cXwAAAnc"]
[Sat Aug 29 05:05:12.762249 2026] [security2:error] [pid 1017536:tid 1017670] [client 74.248.24.12:35473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/bgymj.php"] [unique_id "apK86CJcY4fy7tP-rU3cYAAAAhg"]
[Sat Aug 29 05:05:12.771305 2026] [security2:error] [pid 1017536:tid 1017674] [client 20.104.104.62:13744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahrice-co-uk.glowt-shirt.com"] [uri "/mega.php"] [unique_id "apK86CJcY4fy7tP-rU3cYQAAAhw"]
[Sat Aug 29 05:05:12.779616 2026] [security2:error] [pid 1017536:tid 1017728] [client 158.23.184.117:61600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.howtostudyexams.com"] [uri "/wp-trackback.php"] [unique_id "apK86CJcY4fy7tP-rU3cZAAAAlI"]
[Sat Aug 29 05:05:12.781672 2026] [security2:error] [pid 1017536:tid 1017742] [client 4.205.62.107:2901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/upload.form.php"] [unique_id "apK86CJcY4fy7tP-rU3cZQAAAmA"]
[Sat Aug 29 05:05:12.785418 2026] [security2:error] [pid 1017536:tid 1017606] [remote 104.196.115.188:34074] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/static../.env"] [unique_id "apK86CJcY4fy7tP-rU3cZgACf0U"]
[Sat Aug 29 05:05:12.791384 2026] [security2:error] [pid 1018003:tid 1018265] [client 20.104.18.15:23528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/k.php"] [unique_id "apK86DAh5Y1i2tUxg4HbmAAABik"]
[Sat Aug 29 05:05:12.796758 2026] [security2:error] [pid 1018003:tid 1018174] [client 20.196.209.81:15165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/colors.php"] [unique_id "apK86DAh5Y1i2tUxg4HbmQAABc8"]
[Sat Aug 29 05:05:12.801895 2026] [security2:error] [pid 1017536:tid 1017611] [remote 104.196.115.188:34074] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/.env"] [unique_id "apK86CJcY4fy7tP-rU3cagACPUo"]
[Sat Aug 29 05:05:12.806475 2026] [security2:error] [pid 1017536:tid 1017615] [remote 104.196.115.188:34074] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/.env"] [unique_id "apK86CJcY4fy7tP-rU3cbgACPU4"]
[Sat Aug 29 05:05:12.807273 2026] [security2:error] [pid 1017536:tid 1017616] [remote 104.196.115.188:34074] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "infinitidealership.com"] [uri "/@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ"] [unique_id "apK86CJcY4fy7tP-rU3ccAACPU8"]
[Sat Aug 29 05:05:12.807445 2026] [security2:error] [pid 1017536:tid 1017614] [remote 104.196.115.188:34074] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/media../.env"] [unique_id "apK86CJcY4fy7tP-rU3cbwACPU0"]
[Sat Aug 29 05:05:12.807680 2026] [security2:error] [pid 1017536:tid 1017688] [client 104.207.45.88:46959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.45.207.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK86CJcY4fy7tP-rU3cZwAAAio"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:12.810727 2026] [security2:error] [pid 1017536:tid 1017731] [client 20.48.160.90:45835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/jw.php"] [unique_id "apK86CJcY4fy7tP-rU3ccgAAAlU"]
[Sat Aug 29 05:05:12.813069 2026] [security2:error] [pid 1017536:tid 1017717] [client 20.48.250.41:64220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/f2.php"] [unique_id "apK86CJcY4fy7tP-rU3cdAAAAkc"]
[Sat Aug 29 05:05:12.813276 2026] [security2:error] [pid 1017536:tid 1017711] [client 20.104.104.62:25805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.flicklister.com"] [uri "/wp-admin/admin.php"] [unique_id "apK86CJcY4fy7tP-rU3cdQAAAkE"]
[Sat Aug 29 05:05:12.817314 2026] [security2:error] [pid 1018003:tid 1018166] [client 20.104.104.62:14393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.vistacounselingcolorado.com"] [uri "/mega.php"] [unique_id "apK86DAh5Y1i2tUxg4HbmgAABcc"]
[Sat Aug 29 05:05:12.817615 2026] [security2:error] [pid 1018003:tid 1018209] [client 20.48.250.41:23438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/easy.php"] [unique_id "apK86DAh5Y1i2tUxg4HbmwAABfI"]
[Sat Aug 29 05:05:12.818185 2026] [security2:error] [pid 1018003:tid 1018190] [client 20.48.251.3:57903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/config_dev.php"] [unique_id "apK86DAh5Y1i2tUxg4HbnAAABd8"]
[Sat Aug 29 05:05:12.824954 2026] [security2:error] [pid 1018003:tid 1018240] [client 20.104.18.15:13140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/sf.php"] [unique_id "apK86DAh5Y1i2tUxg4HbnQAABhA"]
[Sat Aug 29 05:05:12.830900 2026] [security2:error] [pid 1017536:tid 1017705] [client 20.104.104.62:44560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/13ede.php"] [unique_id "apK86CJcY4fy7tP-rU3ceQAAAjs"]
[Sat Aug 29 05:05:12.833937 2026] [core:error] [pid 1017536:tid 1017710] [client 158.23.184.117:21832] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:12.833954 2026] [core:error] [pid 1017536:tid 1017710] [client 158.23.184.117:21832] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:12.839519 2026] [security2:error] [pid 1017536:tid 1017783] [client 20.104.104.62:64737] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.motherssandals.com"] [uri "/r57.php"] [unique_id "apK86CJcY4fy7tP-rU3cegAAAok"]
[Sat Aug 29 05:05:12.843161 2026] [security2:error] [pid 1017536:tid 1017694] [client 20.104.18.15:7049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/ops.php"] [unique_id "apK86CJcY4fy7tP-rU3cewAAAjA"]
[Sat Aug 29 05:05:12.845722 2026] [security2:error] [pid 1018003:tid 1018237] [client 20.104.18.15:36776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/atomlib.php"] [unique_id "apK86DAh5Y1i2tUxg4HbngAABg0"]
[Sat Aug 29 05:05:12.847340 2026] [security2:error] [pid 1018003:tid 1018264] [client 20.48.250.41:61711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/24.php"] [unique_id "apK86DAh5Y1i2tUxg4HbnwAABig"]
[Sat Aug 29 05:05:12.848056 2026] [security2:error] [pid 1017536:tid 1017666] [client 68.155.159.216:18243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.baxterevents.com"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK86CJcY4fy7tP-rU3cfAAAAhQ"]
[Sat Aug 29 05:05:12.855602 2026] [security2:error] [pid 1017536:tid 1017734] [client 158.23.184.117:14489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.uscgpipeband.org"] [uri "/.well-known/install.php"] [unique_id "apK86CJcY4fy7tP-rU3cfQAAAlg"]
[Sat Aug 29 05:05:12.867884 2026] [security2:error] [pid 1018003:tid 1018260] [client 20.48.250.41:12350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "employedlawyer.com"] [uri "/Geforce.php"] [unique_id "apK86DAh5Y1i2tUxg4HboAAABiQ"]
[Sat Aug 29 05:05:12.870566 2026] [security2:error] [pid 1017536:tid 1017749] [client 68.155.159.216:14169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/wp-content/themes/index.php"] [unique_id "apK86CJcY4fy7tP-rU3cfgAAAmc"]
[Sat Aug 29 05:05:12.871730 2026] [security2:error] [pid 1017536:tid 1017766] [client 68.155.159.216:51235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK86CJcY4fy7tP-rU3cfwAAAng"]
[Sat Aug 29 05:05:12.873326 2026] [security2:error] [pid 1018003:tid 1018219] [client 20.48.160.90:62611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/wp-admin/css/colors/maro.php"] [unique_id "apK86DAh5Y1i2tUxg4HboQAABfw"]
[Sat Aug 29 05:05:12.883638 2026] [security2:error] [pid 1017536:tid 1017777] [client 20.104.18.15:47002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/ta.php"] [unique_id "apK86CJcY4fy7tP-rU3cgAAAAoM"]
[Sat Aug 29 05:05:12.890524 2026] [security2:error] [pid 1017536:tid 1017746] [client 52.139.37.240:27927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jjfreeman.net"] [uri "/cron.php"] [unique_id "apK86CJcY4fy7tP-rU3cgwAAAmQ"]
[Sat Aug 29 05:05:12.894774 2026] [security2:error] [pid 1017536:tid 1017702] [client 20.63.81.20:26519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK86CJcY4fy7tP-rU3chAAAAjg"]
[Sat Aug 29 05:05:12.899888 2026] [security2:error] [pid 1017536:tid 1017784] [client 52.139.37.240:65324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "skyyentertainment.skyytalent.com"] [uri "/wp-sigunq.php"] [unique_id "apK86CJcY4fy7tP-rU3chQAAAoo"]
[Sat Aug 29 05:05:12.900594 2026] [security2:error] [pid 1017536:tid 1017741] [client 216.73.217.8:20691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 8.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo-store.sortthru.com"] [uri "/wp-admin/core.php"] [unique_id "apK86CJcY4fy7tP-rU3chgAAAl8"]
[Sat Aug 29 05:05:12.902016 2026] [security2:error] [pid 1018003:tid 1018275] [client 20.104.104.62:13579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahrice-co-uk.glowt-shirt.com"] [uri "/ww3.php"] [unique_id "apK86DAh5Y1i2tUxg4HbowAABjM"]
[Sat Aug 29 05:05:12.917684 2026] [security2:error] [pid 1017536:tid 1017781] [client 4.232.148.111:8515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tiaandephraim.com"] [uri "/wp-logs.php"] [unique_id "apK86CJcY4fy7tP-rU3cigAAAoc"]
[Sat Aug 29 05:05:12.930051 2026] [security2:error] [pid 1017536:tid 1017758] [client 158.23.184.117:56646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.howtostudyexams.com"] [uri "/wp-admin/maint.php"] [unique_id "apK86CJcY4fy7tP-rU3cjAAAAnA"]
[Sat Aug 29 05:05:12.934186 2026] [access_compat:error] [pid 1017536:tid 1017672] [client 67.20.76.220:23054] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:05:12.943857 2026] [security2:error] [pid 1018003:tid 1018266] [client 20.48.160.90:39953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/or.php"] [unique_id "apK86DAh5Y1i2tUxg4HbqQAABio"]
[Sat Aug 29 05:05:12.948075 2026] [security2:error] [pid 1018003:tid 1018226] [client 52.139.37.240:25045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/an.php"] [unique_id "apK86DAh5Y1i2tUxg4HbrAAABgM"]
[Sat Aug 29 05:05:12.948969 2026] [security2:error] [pid 1018003:tid 1018153] [client 20.203.141.11:31017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "germanmorenoperez.com"] [uri "/gmo.php"] [unique_id "apK86DAh5Y1i2tUxg4HbrQAABbo"]
[Sat Aug 29 05:05:12.950398 2026] [access_compat:error] [pid 1017536:tid 1017739] [client 67.20.76.220:23052] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:05:12.951011 2026] [access_compat:error] [pid 1017536:tid 1017708] [client 67.20.76.220:23062] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:05:12.951836 2026] [access_compat:error] [pid 1018003:tid 1018218] [client 67.20.76.220:23040] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:05:12.959588 2026] [security2:error] [pid 1018003:tid 1018156] [client 20.104.18.15:23549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/82.php"] [unique_id "apK86DAh5Y1i2tUxg4HbrgAABb0"]
[Sat Aug 29 05:05:12.960526 2026] [security2:error] [pid 1018003:tid 1018232] [client 20.104.104.62:14376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.vistacounselingcolorado.com"] [uri "/ww3.php"] [unique_id "apK86DAh5Y1i2tUxg4HbsAAABgg"]
[Sat Aug 29 05:05:12.960557 2026] [security2:error] [pid 1018003:tid 1018233] [client 20.104.104.62:44585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/k8.php"] [unique_id "apK86DAh5Y1i2tUxg4HbrwAABgk"]
[Sat Aug 29 05:05:12.960749 2026] [security2:error] [pid 1017536:tid 1017730] [client 20.63.219.114:9182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/randkeyword.php"] [unique_id "apK86CJcY4fy7tP-rU3cmQAAAlQ"]
[Sat Aug 29 05:05:12.961114 2026] [security2:error] [pid 1017536:tid 1017723] [client 20.104.18.15:13227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/k.php"] [unique_id "apK86CJcY4fy7tP-rU3cmgAAAk0"]
[Sat Aug 29 05:05:12.968499 2026] [security2:error] [pid 1018003:tid 1018186] [client 20.48.251.3:57812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/aws_credentials.php"] [unique_id "apK86DAh5Y1i2tUxg4HbsgAABds"]
[Sat Aug 29 05:05:12.983103 2026] [security2:error] [pid 1017536:tid 1017681] [client 158.23.184.117:21849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK86CJcY4fy7tP-rU3cnQAAAiM"]
[Sat Aug 29 05:05:12.983645 2026] [security2:error] [pid 1017536:tid 1017675] [client 143.244.57.82:48312] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "wincosir.enproftp.com"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "apK86CJcY4fy7tP-rU3cngAAAh0"]
[Sat Aug 29 05:05:12.986010 2026] [security2:error] [pid 1018003:tid 1018248] [client 20.104.18.15:7158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/coffexium.php"] [unique_id "apK86DAh5Y1i2tUxg4HbswAABhg"]
[Sat Aug 29 05:05:13.012508 2026] [security2:error] [pid 1017536:tid 1017776] [client 20.48.250.41:23504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/fresh3.php"] [unique_id "apK86SJcY4fy7tP-rU3cqQAAAoI"]
[Sat Aug 29 05:05:13.013249 2026] [security2:error] [pid 1018003:tid 1018187] [client 40.83.93.50:3594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.superugly.com"] [uri "/wp-content/classwithtostring.php"] [unique_id "apK86TAh5Y1i2tUxg4HbtwAABdw"]
[Sat Aug 29 05:05:13.013560 2026] [security2:error] [pid 1018003:tid 1018169] [client 87.219.197.128:49616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK86TAh5Y1i2tUxg4HbtQAABco"]
[Sat Aug 29 05:05:13.013637 2026] [security2:error] [pid 1018003:tid 1018169] [client 87.219.197.128:49616] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK86TAh5Y1i2tUxg4HbtQAABco"]
[Sat Aug 29 05:05:13.015317 2026] [security2:error] [pid 1017536:tid 1017744] [client 20.48.160.90:64728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/wp-admin/css/colors/coffee/marijuana.php"] [unique_id "apK86SJcY4fy7tP-rU3cqwAAAmI"]
[Sat Aug 29 05:05:13.015638 2026] [security2:error] [pid 1017536:tid 1017745] [client 20.48.250.41:65423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/grsiuk.php"] [unique_id "apK86SJcY4fy7tP-rU3crAAAAmM"]
[Sat Aug 29 05:05:13.020157 2026] [security2:error] [pid 1018003:tid 1018267] [client 20.104.104.62:25646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.flicklister.com"] [uri "/wp-content/plugins/about.php"] [unique_id "apK86TAh5Y1i2tUxg4HbuQAABis"]
[Sat Aug 29 05:05:13.021893 2026] [security2:error] [pid 1017536:tid 1017687] [client 20.63.81.20:26578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK86SJcY4fy7tP-rU3crQAAAik"]
[Sat Aug 29 05:05:13.024290 2026] [security2:error] [pid 1017536:tid 1017684] [client 20.104.18.15:47010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/bo.php"] [unique_id "apK86SJcY4fy7tP-rU3crgAAAiY"]
[Sat Aug 29 05:05:13.025725 2026] [security2:error] [pid 1017536:tid 1017782] [client 20.104.18.15:36755] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "amandaandandrew.strangeworx.com"] [uri "/1.php"] [unique_id "apK86SJcY4fy7tP-rU3crwAAAog"]
[Sat Aug 29 05:05:13.025793 2026] [security2:error] [pid 1017536:tid 1017782] [client 20.104.18.15:36755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/1.php"] [unique_id "apK86SJcY4fy7tP-rU3crwAAAog"]
[Sat Aug 29 05:05:13.026038 2026] [security2:error] [pid 1017536:tid 1017790] [client 20.48.250.41:58578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/155.php"] [unique_id "apK86SJcY4fy7tP-rU3csAAAApA"]
[Sat Aug 29 05:05:13.030939 2026] [security2:error] [pid 1017536:tid 1017727] [client 20.104.104.62:13650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahrice-co-uk.glowt-shirt.com"] [uri "/sko.php"] [unique_id "apK86SJcY4fy7tP-rU3csgAAAlE"]
[Sat Aug 29 05:05:13.049565 2026] [security2:error] [pid 1017536:tid 1017728] [client 158.23.184.117:14358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.uscgpipeband.org"] [uri "/wp-admin/about.php"] [unique_id "apK86SJcY4fy7tP-rU3ctgAAAlI"]
[Sat Aug 29 05:05:13.058073 2026] [security2:error] [pid 1018003:tid 1018257] [client 20.48.250.41:12444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "employedlawyer.com"] [uri "/click.php"] [unique_id "apK86TAh5Y1i2tUxg4HbvAAABiE"]
[Sat Aug 29 05:05:13.063440 2026] [security2:error] [pid 1017536:tid 1017719] [client 168.107.94.195:49832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK86SJcY4fy7tP-rU3cuQAAAkk"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:13.071580 2026] [security2:error] [pid 1017536:tid 1017752] [client 20.63.219.114:15277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "compropolis.mx"] [uri "/content.php"] [unique_id "apK86SJcY4fy7tP-rU3cugAAAmo"]
[Sat Aug 29 05:05:13.074018 2026] [security2:error] [pid 1017536:tid 1017669] [client 47.128.99.16:26934] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "antiquesweeknh.com"] [uri "/robots.txt"] [unique_id "apK86SJcY4fy7tP-rU3cvwAAAhc"]
[Sat Aug 29 05:05:13.074453 2026] [security2:error] [pid 1017536:tid 1017670] [client 158.23.184.117:56699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.howtostudyexams.com"] [uri "/wp-includes/num.php"] [unique_id "apK86SJcY4fy7tP-rU3cvgAAAhg"]
[Sat Aug 29 05:05:13.083188 2026] [security2:error] [pid 1017536:tid 1017763] [client 103.185.242.143:58448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK86SJcY4fy7tP-rU3cwAAAAnU"]
[Sat Aug 29 05:05:13.083309 2026] [security2:error] [pid 1017536:tid 1017763] [client 103.185.242.143:58448] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK86SJcY4fy7tP-rU3cwAAAAnU"]
[Sat Aug 29 05:05:13.086316 2026] [security2:error] [pid 1018003:tid 1018191] [client 52.139.37.240:28236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jjfreeman.net"] [uri "/wp-2019.php"] [unique_id "apK86TAh5Y1i2tUxg4HbvgAABeA"]
[Sat Aug 29 05:05:13.090685 2026] [security2:error] [pid 1018003:tid 1018273] [client 20.104.18.15:13285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/82.php"] [unique_id "apK86TAh5Y1i2tUxg4HbvwAABjE"]
[Sat Aug 29 05:05:13.091014 2026] [security2:error] [pid 1017536:tid 1017783] [client 20.104.104.62:10442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/alog.php"] [unique_id "apK86SJcY4fy7tP-rU3cwgAAAok"]
[Sat Aug 29 05:05:13.094184 2026] [security2:error] [pid 1017536:tid 1017770] [client 20.104.18.15:23527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/dex.php"] [unique_id "apK86SJcY4fy7tP-rU3cwwAAAnw"]
[Sat Aug 29 05:05:13.095380 2026] [security2:error] [pid 1017536:tid 1017671] [client 20.197.61.180:19935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eeeaudio.com"] [uri "/wp-content/languages/pk.php"] [unique_id "apK86SJcY4fy7tP-rU3cxAAAAhk"]
[Sat Aug 29 05:05:13.098369 2026] [security2:error] [pid 1017536:tid 1017674] [client 52.139.37.240:37891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "skyyentertainment.skyytalent.com"] [uri "/07.php"] [unique_id "apK86SJcY4fy7tP-rU3cxQAAAhw"]
[Sat Aug 29 05:05:13.105408 2026] [security2:error] [pid 1018003:tid 1018214] [client 20.104.104.62:15305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.vistacounselingcolorado.com"] [uri "/sko.php"] [unique_id "apK86TAh5Y1i2tUxg4HbwAAABfc"]
[Sat Aug 29 05:05:13.108534 2026] [security2:error] [pid 1017536:tid 1017696] [client 20.48.251.3:57874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/aws-credentials.php"] [unique_id "apK86SJcY4fy7tP-rU3cxgAAAjI"]
[Sat Aug 29 05:05:13.111078 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.48.160.90:40000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/ile56.php"] [unique_id "apK86SJcY4fy7tP-rU3cxwAAAnk"]
[Sat Aug 29 05:05:13.119582 2026] [security2:error] [pid 1017536:tid 1017740] [client 158.158.54.35:6016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/php8.php"] [unique_id "apK86SJcY4fy7tP-rU3cyAAAAl4"]
[Sat Aug 29 05:05:13.123401 2026] [security2:error] [pid 1018003:tid 1018210] [client 74.248.24.12:25724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/system_log.php"] [unique_id "apK86TAh5Y1i2tUxg4HbwgAABfM"]
[Sat Aug 29 05:05:13.129996 2026] [security2:error] [pid 1017536:tid 1017678] [client 158.23.184.117:21834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/.well-known/acme-challenge/sx.php"] [unique_id "apK86SJcY4fy7tP-rU3czAAAAiA"]
[Sat Aug 29 05:05:13.131607 2026] [security2:error] [pid 1018003:tid 1018095] [remote 104.196.51.122:58658] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/@fs/.env"] [unique_id "apK86TAh5Y1i2tUxg4HbxQAGFko"]
[Sat Aug 29 05:05:13.132598 2026] [security2:error] [pid 1018003:tid 1018097] [remote 104.196.51.122:58658] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/@fs/.env"] [unique_id "apK86TAh5Y1i2tUxg4HbxgAGFkw"]
[Sat Aug 29 05:05:13.135381 2026] [security2:error] [pid 1018003:tid 1018098] [remote 104.196.51.122:58658] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/@fs/.env"] [unique_id "apK86TAh5Y1i2tUxg4HbygAGFk0"]
[Sat Aug 29 05:05:13.139180 2026] [security2:error] [pid 1018003:tid 1018193] [client 20.104.18.15:7072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/BDKR28WP.php"] [unique_id "apK86TAh5Y1i2tUxg4HbzAAABeI"]
[Sat Aug 29 05:05:13.140191 2026] [security2:error] [pid 1017536:tid 1017703] [client 20.196.209.81:17927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-admin/pk.php"] [unique_id "apK86SJcY4fy7tP-rU3czgAAAjk"]
[Sat Aug 29 05:05:13.140996 2026] [security2:error] [pid 1018003:tid 1018247] [client 52.139.37.240:20748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/ahax.php"] [unique_id "apK86TAh5Y1i2tUxg4HbzQAABhc"]
[Sat Aug 29 05:05:13.153648 2026] [security2:error] [pid 1018003:tid 1018213] [client 20.104.18.15:36705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/samll.php"] [unique_id "apK86TAh5Y1i2tUxg4HbzgAABfY"]
[Sat Aug 29 05:05:13.154448 2026] [security2:error] [pid 1017536:tid 1017709] [client 52.139.37.240:25057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/asw.php"] [unique_id "apK86SJcY4fy7tP-rU3c0AAAAj8"]
[Sat Aug 29 05:05:13.160830 2026] [security2:error] [pid 1017536:tid 1017716] [client 20.104.104.62:13742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahrice-co-uk.glowt-shirt.com"] [uri "/zoz.php"] [unique_id "apK86SJcY4fy7tP-rU3c0QAAAkY"]
[Sat Aug 29 05:05:13.161042 2026] [security2:error] [pid 1017536:tid 1017714] [client 20.48.160.90:63507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/wp-admin/css/colors/coffee/mari.php"] [unique_id "apK86SJcY4fy7tP-rU3c0gAAAkQ"]
[Sat Aug 29 05:05:13.168574 2026] [security2:error] [pid 1018003:tid 1018099] [remote 104.196.51.122:58658] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "www.bigbuttonscarf.com"] [uri "/wp-config.php.bak"] [unique_id "apK86TAh5Y1i2tUxg4Hb0AAGAU4"]
[Sat Aug 29 05:05:13.168871 2026] [security2:error] [pid 1017536:tid 1017757] [client 20.48.250.41:64166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/wp-scr1pts.php"] [unique_id "apK86SJcY4fy7tP-rU3c1AAAAm8"]
[Sat Aug 29 05:05:13.183739 2026] [security2:error] [pid 1018003:tid 1018255] [client 4.232.148.111:19930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/core.php"] [unique_id "apK86TAh5Y1i2tUxg4Hb0QAABh8"]
[Sat Aug 29 05:05:13.189986 2026] [security2:error] [pid 1017536:tid 1017706] [client 20.48.250.41:23498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/bgymj.php"] [unique_id "apK86SJcY4fy7tP-rU3c1gAAAjw"]
[Sat Aug 29 05:05:13.197563 2026] [security2:error] [pid 1017536:tid 1017702] [client 158.23.184.117:14356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.uscgpipeband.org"] [uri "/wp-content/backup.php"] [unique_id "apK86SJcY4fy7tP-rU3c2AAAAjg"]
[Sat Aug 29 05:05:13.208838 2026] [security2:error] [pid 1018003:tid 1018278] [client 20.63.81.20:26526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/adminfuns.php"] [unique_id "apK86TAh5Y1i2tUxg4Hb0gAABjY"]
[Sat Aug 29 05:05:13.220252 2026] [security2:error] [pid 1017536:tid 1017758] [client 158.23.184.117:56685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.howtostudyexams.com"] [uri "/identity.php"] [unique_id "apK86SJcY4fy7tP-rU3c2gAAAnA"]
[Sat Aug 29 05:05:13.220997 2026] [security2:error] [pid 1018003:tid 1018150] [client 20.48.250.41:58526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/file.php"] [unique_id "apK86TAh5Y1i2tUxg4Hb0wAABbc"]
[Sat Aug 29 05:05:13.223827 2026] [security2:error] [pid 1017536:tid 1017739] [client 20.104.104.62:44575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/adin.php"] [unique_id "apK86SJcY4fy7tP-rU3c3QAAAl0"]
[Sat Aug 29 05:05:13.226669 2026] [security2:error] [pid 1017536:tid 1017775] [client 20.104.104.62:25606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.flicklister.com"] [uri "/wp-content/plugins/plugin/index.php"] [unique_id "apK86SJcY4fy7tP-rU3c3wAAAoE"]
[Sat Aug 29 05:05:13.227393 2026] [security2:error] [pid 1017536:tid 1017694] [client 20.196.209.81:5011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/Js.php"] [unique_id "apK86SJcY4fy7tP-rU3c4AAAAjA"]
[Sat Aug 29 05:05:13.235297 2026] [security2:error] [pid 1017536:tid 1017687] [client 20.104.104.62:14391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.vistacounselingcolorado.com"] [uri "/zoz.php"] [unique_id "apK86SJcY4fy7tP-rU3c4QAAAik"]
[Sat Aug 29 05:05:13.236271 2026] [security2:error] [pid 1017536:tid 1017782] [client 20.104.18.15:47016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/44.php"] [unique_id "apK86SJcY4fy7tP-rU3c4gAAAog"]
[Sat Aug 29 05:05:13.237811 2026] [security2:error] [pid 1017536:tid 1017790] [client 20.104.104.62:64763] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.motherssandals.com"] [uri "/c99.php"] [unique_id "apK86SJcY4fy7tP-rU3c4wAAApA"]
[Sat Aug 29 05:05:13.238458 2026] [security2:error] [pid 1017536:tid 1017780] [client 20.104.18.15:13186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/dex.php"] [unique_id "apK86SJcY4fy7tP-rU3c5AAAAoY"]
[Sat Aug 29 05:05:13.240151 2026] [security2:error] [pid 1017536:tid 1017651] [remote 93.123.109.228:48278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/.wp-config.php.swp"] [unique_id "apK86SJcY4fy7tP-rU3c5QACcnI"]
[Sat Aug 29 05:05:13.244698 2026] [security2:error] [pid 1018003:tid 1018105] [remote 104.196.51.122:58658] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "www.bigbuttonscarf.com"] [uri "/wp-config.php.old"] [unique_id "apK86TAh5Y1i2tUxg4Hb2QAGIlQ"]
[Sat Aug 29 05:05:13.246139 2026] [security2:error] [pid 1018003:tid 1018107] [remote 104.196.51.122:58658] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/laravel/.env"] [unique_id "apK86TAh5Y1i2tUxg4Hb2gAGIlY"]
[Sat Aug 29 05:05:13.248990 2026] [cgid:error] [pid 1018003:tid 1018106] [remote 104.196.51.122:58658] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:13.249624 2026] [security2:error] [pid 1017536:tid 1017761] [client 20.104.18.15:23437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/inso.php"] [unique_id "apK86SJcY4fy7tP-rU3c6AAAAnM"]
[Sat Aug 29 05:05:13.250081 2026] [security2:error] [pid 1017536:tid 1017742] [client 20.48.160.90:45855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/emmh.php"] [unique_id "apK86SJcY4fy7tP-rU3c6QAAAmA"]
[Sat Aug 29 05:05:13.255006 2026] [security2:error] [pid 1018003:tid 1018263] [client 45.154.98.191:49629] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.acovib.com"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "apK86TAh5Y1i2tUxg4Hb2wAABic"]
[Sat Aug 29 05:05:13.255075 2026] [security2:error] [pid 1018003:tid 1018104] [remote 104.196.51.122:58658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 122.51.196.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.bigbuttonscarf.com"] [uri "/config/.env.php"] [unique_id "apK86TAh5Y1i2tUxg4Hb1wAGIlM"]
[Sat Aug 29 05:05:13.255599 2026] [security2:error] [pid 1018003:tid 1018066] [remote 104.196.51.122:58658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 122.51.196.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.bigbuttonscarf.com"] [uri "/.env.php.bak"] [unique_id "apK86TAh5Y1i2tUxg4Hb1gAGIi0"]
[Sat Aug 29 05:05:13.262055 2026] [security2:error] [pid 1018003:tid 1018253] [client 20.48.251.3:57887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/4563.php"] [unique_id "apK86TAh5Y1i2tUxg4Hb3gAABh0"]
[Sat Aug 29 05:05:13.282813 2026] [security2:error] [pid 1017536:tid 1017711] [client 20.48.250.41:12365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "employedlawyer.com"] [uri "/ms.php"] [unique_id "apK86SJcY4fy7tP-rU3c7QAAAkE"]
[Sat Aug 29 05:05:13.282978 2026] [security2:error] [pid 1017536:tid 1017745] [client 158.23.184.117:21876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/.well-known/admin.php"] [unique_id "apK86SJcY4fy7tP-rU3c7AAAAmM"]
[Sat Aug 29 05:05:13.291519 2026] [security2:error] [pid 1018003:tid 1018209] [client 20.48.160.90:63553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/wp-includes/images/crystal/option.php"] [unique_id "apK86TAh5Y1i2tUxg4Hb4AAABfI"]
[Sat Aug 29 05:05:13.291529 2026] [security2:error] [pid 1018003:tid 1018190] [client 20.104.104.62:13592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahrice-co-uk.glowt-shirt.com"] [uri "/mmm.php"] [unique_id "apK86TAh5Y1i2tUxg4Hb4QAABd8"]
[Sat Aug 29 05:05:13.294695 2026] [security2:error] [pid 1017536:tid 1017744] [client 52.139.37.240:28247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jjfreeman.net"] [uri "/gecko-new.php"] [unique_id "apK86SJcY4fy7tP-rU3c7gAAAmI"]
[Sat Aug 29 05:05:13.305109 2026] [security2:error] [pid 1017536:tid 1017705] [client 20.48.250.41:65415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/num.php"] [unique_id "apK86SJcY4fy7tP-rU3c7wAAAjs"]
[Sat Aug 29 05:05:13.308562 2026] [security2:error] [pid 1017536:tid 1017710] [client 20.104.18.15:36706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/she11.php"] [unique_id "apK86SJcY4fy7tP-rU3c8AAAAkA"]
[Sat Aug 29 05:05:13.310188 2026] [security2:error] [pid 1018003:tid 1018196] [client 74.248.24.12:31584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK86TAh5Y1i2tUxg4Hb5AAABeU"]
[Sat Aug 29 05:05:13.314545 2026] [security2:error] [pid 1017536:tid 1017728] [client 52.139.37.240:37920] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "skyyentertainment.skyytalent.com"] [uri "/c99.php"] [unique_id "apK86SJcY4fy7tP-rU3c8QAAAlI"]
[Sat Aug 29 05:05:13.317442 2026] [security2:error] [pid 1017536:tid 1017672] [client 20.63.219.114:2002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/goods.php"] [unique_id "apK86SJcY4fy7tP-rU3c8gAAAho"]
[Sat Aug 29 05:05:13.322555 2026] [security2:error] [pid 1017536:tid 1017712] [client 185.104.184.230:49406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.184.104.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "autodiscover.youthspeakoutint.org"] [uri "/autodiscover/autodiscover.xml/xmlrpc.php"] [unique_id "apK86SJcY4fy7tP-rU3c8wAAAkI"]
[Sat Aug 29 05:05:13.331055 2026] [security2:error] [pid 1017536:tid 1017770] [client 20.48.250.41:23516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/ws69.php"] [unique_id "apK86SJcY4fy7tP-rU3c-gAAAnw"]
[Sat Aug 29 05:05:13.334485 2026] [security2:error] [pid 1018003:tid 1018179] [client 52.139.37.240:21393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/breads1.php"] [unique_id "apK86TAh5Y1i2tUxg4Hb5gAABdQ"]
[Sat Aug 29 05:05:13.343815 2026] [security2:error] [pid 1018003:tid 1018113] [remote 104.196.51.122:58658] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/.env.swp"] [unique_id "apK86TAh5Y1i2tUxg4Hb6AAGIFw"]
[Sat Aug 29 05:05:13.344283 2026] [security2:error] [pid 1018003:tid 1018240] [client 158.23.184.117:14387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.uscgpipeband.org"] [uri "/.well-known/aa.php"] [unique_id "apK86TAh5Y1i2tUxg4Hb6QAABhA"]
[Sat Aug 29 05:05:13.350883 2026] [security2:error] [pid 1017536:tid 1017719] [client 52.139.37.240:24644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/item.php"] [unique_id "apK86SJcY4fy7tP-rU3c_QAAAkk"]
[Sat Aug 29 05:05:13.354805 2026] [security2:error] [pid 1017536:tid 1017777] [client 20.104.104.62:44605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/sf9.php"] [unique_id "apK86SJcY4fy7tP-rU3c_wAAAoM"]
[Sat Aug 29 05:05:13.365608 2026] [security2:error] [pid 1018003:tid 1018168] [client 20.48.250.41:58580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK86TAh5Y1i2tUxg4Hb7AAABck"]
[Sat Aug 29 05:05:13.367616 2026] [security2:error] [pid 1018003:tid 1018114] [remote 104.196.115.188:34080] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/static/.env"] [unique_id "apK86TAh5Y1i2tUxg4Hb7QAGLF0"]
[Sat Aug 29 05:05:13.369907 2026] [security2:error] [pid 1017536:tid 1017741] [client 20.104.104.62:15249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.vistacounselingcolorado.com"] [uri "/mmm.php"] [unique_id "apK86SJcY4fy7tP-rU3dAgAAAl8"]
[Sat Aug 29 05:05:13.371277 2026] [security2:error] [pid 1018003:tid 1018195] [client 20.104.18.15:47064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/h2.php"] [unique_id "apK86TAh5Y1i2tUxg4Hb7gAABeQ"]
[Sat Aug 29 05:05:13.373269 2026] [security2:error] [pid 1018003:tid 1018115] [remote 104.196.51.122:58658] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/core/.env"] [unique_id "apK86TAh5Y1i2tUxg4Hb7wAGCl4"]
[Sat Aug 29 05:05:13.375575 2026] [security2:error] [pid 1018003:tid 1018201] [client 20.63.81.20:26520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/goods.php"] [unique_id "apK86TAh5Y1i2tUxg4Hb8AAABeo"]
[Sat Aug 29 05:05:13.377289 2026] [security2:error] [pid 1017536:tid 1017726] [client 20.104.18.15:7156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/sf.php"] [unique_id "apK86SJcY4fy7tP-rU3dBAAAAlA"]
[Sat Aug 29 05:05:13.378658 2026] [security2:error] [pid 1017536:tid 1017759] [client 20.104.18.15:13261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/inso.php"] [unique_id "apK86SJcY4fy7tP-rU3dBQAAAnE"]
[Sat Aug 29 05:05:13.390450 2026] [security2:error] [pid 1017536:tid 1017729] [client 104.207.55.231:45121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 231.55.207.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK86SJcY4fy7tP-rU3dAwAAAlM"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:13.391037 2026] [security2:error] [pid 1018003:tid 1018275] [client 20.48.160.90:39945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/em.php"] [unique_id "apK86TAh5Y1i2tUxg4Hb8QAABjM"]
[Sat Aug 29 05:05:13.395139 2026] [security2:error] [pid 1018003:tid 1018175] [client 20.104.18.15:23425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/aa.php"] [unique_id "apK86TAh5Y1i2tUxg4Hb8gAABdA"]
[Sat Aug 29 05:05:13.398007 2026] [security2:error] [pid 1018003:tid 1018116] [remote 104.196.115.188:34080] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/files../.env"] [unique_id "apK86TAh5Y1i2tUxg4Hb8wAGKl8"]
[Sat Aug 29 05:05:13.400065 2026] [security2:error] [pid 1018003:tid 1018117] [remote 104.196.115.188:34080] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/static/home/user/.env"] [unique_id "apK86TAh5Y1i2tUxg4Hb9AAGKmA"]
[Sat Aug 29 05:05:13.400294 2026] [security2:error] [pid 1018003:tid 1018068] [remote 104.196.115.188:34080] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/.env"] [unique_id "apK86TAh5Y1i2tUxg4Hb9QAGKi8"]
[Sat Aug 29 05:05:13.401406 2026] [security2:error] [pid 1017536:tid 1017765] [client 4.232.148.111:8526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tiaandephraim.com"] [uri "/wp-admin/css/about.php"] [unique_id "apK86SJcY4fy7tP-rU3dBgAAAnc"]
[Sat Aug 29 05:05:13.413381 2026] [security2:error] [pid 1018003:tid 1018164] [client 20.203.141.11:31001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "germanmorenoperez.com"] [uri "/classwithtostring.php"] [unique_id "apK86TAh5Y1i2tUxg4Hb9wAABcU"]
[Sat Aug 29 05:05:13.423279 2026] [security2:error] [pid 1017536:tid 1017740] [client 20.104.104.62:25808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.flicklister.com"] [uri "/wp-content/uploads/index.php/wp-includes/Text/"] [unique_id "apK86SJcY4fy7tP-rU3dCAAAAl4"]
[Sat Aug 29 05:05:13.424384 2026] [security2:error] [pid 1017536:tid 1017772] [client 158.23.184.117:61572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.howtostudyexams.com"] [uri "/Radio.php"] [unique_id "apK86SJcY4fy7tP-rU3dCQAAAn4"]
[Sat Aug 29 05:05:13.424429 2026] [security2:error] [pid 1017536:tid 1017685] [client 20.48.251.3:57867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/cp2.php"] [unique_id "apK86SJcY4fy7tP-rU3dCgAAAic"]
[Sat Aug 29 05:05:13.425660 2026] [security2:error] [pid 1017536:tid 1017722] [client 158.23.184.117:21927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/.well-known/api.php"] [unique_id "apK86SJcY4fy7tP-rU3dCwAAAkw"]
[Sat Aug 29 05:05:13.430108 2026] [security2:error] [pid 1017536:tid 1017689] [client 20.104.104.62:13583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahrice-co-uk.glowt-shirt.com"] [uri "/advanced.php"] [unique_id "apK86SJcY4fy7tP-rU3dDgAAAis"]
[Sat Aug 29 05:05:13.432742 2026] [security2:error] [pid 1017536:tid 1017679] [client 20.48.160.90:63543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/wp-includes/pomo/xxx.php"] [unique_id "apK86SJcY4fy7tP-rU3dDwAAAiE"]
[Sat Aug 29 05:05:13.443843 2026] [security2:error] [pid 1018003:tid 1018153] [client 168.107.94.195:50152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK86TAh5Y1i2tUxg4Hb-AAABbo"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:13.449455 2026] [security2:error] [pid 1018003:tid 1018158] [client 20.48.250.41:64972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/a4.php"] [unique_id "apK86TAh5Y1i2tUxg4Hb-QAABb8"]
[Sat Aug 29 05:05:13.467590 2026] [security2:error] [pid 1017536:tid 1017551] [remote 35.243.213.218:46954] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mikeycunningham.com"] [uri "/.env"] [unique_id "apK86SJcY4fy7tP-rU3dGwACFQ4"]
[Sat Aug 29 05:05:13.471858 2026] [security2:error] [pid 1017536:tid 1017704] [client 20.104.18.15:36832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/kerang.php"] [unique_id "apK86SJcY4fy7tP-rU3dHgAAAjo"]
[Sat Aug 29 05:05:13.483375 2026] [security2:error] [pid 1017536:tid 1017769] [client 20.63.219.114:11920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "compropolis.mx"] [uri "/wxo.php"] [unique_id "apK86SJcY4fy7tP-rU3dIgAAAns"]
[Sat Aug 29 05:05:13.483768 2026] [security2:error] [pid 1018003:tid 1018121] [remote 104.196.51.122:58658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 122.51.196.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.bigbuttonscarf.com"] [uri "/configuration.php.bak"] [unique_id "apK86TAh5Y1i2tUxg4Hb_AAF-GQ"]
[Sat Aug 29 05:05:13.484171 2026] [security2:error] [pid 1018003:tid 1018119] [remote 104.196.51.122:58658] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/public/.env"] [unique_id "apK86TAh5Y1i2tUxg4Hb-gAF-GI"]
[Sat Aug 29 05:05:13.485229 2026] [security2:error] [pid 1018003:tid 1018122] [remote 104.196.51.122:58658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 122.51.196.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.bigbuttonscarf.com"] [uri "/config.php.bak"] [unique_id "apK86TAh5Y1i2tUxg4Hb_QAF-GU"]
[Sat Aug 29 05:05:13.486713 2026] [lsapi:warn] [pid 1018003:tid 1018111] [remote 104.28.132.8:16569] [host thegrowingplace.ca] Backend log: PHP Warning:  Trying to access array offset on value of type null in /home1/thegrow2/public_html/w_api/Configuration.php on line 115\n, referer: https://thegrowingplace.ca/index.html
[Sat Aug 29 05:05:13.487759 2026] [security2:error] [pid 1017536:tid 1017702] [client 20.48.250.41:23540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/ccs.php"] [unique_id "apK86SJcY4fy7tP-rU3dIwAAAjg"]
[Sat Aug 29 05:05:13.489430 2026] [security2:error] [pid 1017536:tid 1017723] [client 158.23.184.117:14355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.uscgpipeband.org"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "apK86SJcY4fy7tP-rU3dJAAAAk0"]
[Sat Aug 29 05:05:13.491745 2026] [cgid:error] [pid 1018003:tid 1018120] [remote 104.196.51.122:58658] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:13.492526 2026] [security2:error] [pid 1017536:tid 1017690] [client 20.104.104.62:10454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/lte7.php"] [unique_id "apK86SJcY4fy7tP-rU3dJQAAAiw"]
[Sat Aug 29 05:05:13.493084 2026] [security2:error] [pid 1017536:tid 1017736] [client 52.139.37.240:28246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jjfreeman.net"] [uri "/add_actualites.php"] [unique_id "apK86SJcY4fy7tP-rU3dJgAAAlo"]
[Sat Aug 29 05:05:13.496661 2026] [security2:error] [pid 1018003:tid 1018157] [client 20.48.250.41:12361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "employedlawyer.com"] [uri "/zxekqlxb.php"] [unique_id "apK86TAh5Y1i2tUxg4Hb_wAABb4"]
[Sat Aug 29 05:05:13.499092 2026] [cgid:error] [pid 1018003:tid 1018123] [remote 104.196.51.122:58658] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:13.499570 2026] [security2:error] [pid 1018003:tid 1018120] [remote 104.196.115.188:34080] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/.env"] [unique_id "apK86TAh5Y1i2tUxg4HcAAAF02M"]
[Sat Aug 29 05:05:13.499570 2026] [security2:error] [pid 1018003:tid 1018069] [remote 104.196.115.188:34080] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/static/app/.env"] [unique_id "apK86TAh5Y1i2tUxg4HcAQAF0zA"]
[Sat Aug 29 05:05:13.503411 2026] [security2:error] [pid 1017536:tid 1017696] [client 40.83.93.50:1975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.superugly.com"] [uri "/wp-content/config.php"] [unique_id "apK86SJcY4fy7tP-rU3dJwAAAjI"]
[Sat Aug 29 05:05:13.507437 2026] [security2:error] [pid 1017536:tid 1017724] [client 20.104.104.62:15328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.vistacounselingcolorado.com"] [uri "/advanced.php"] [unique_id "apK86SJcY4fy7tP-rU3dKQAAAk4"]
[Sat Aug 29 05:05:13.511233 2026] [security2:error] [pid 1017536:tid 1017738] [client 68.155.159.216:57438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/wp-includes/content.php"] [unique_id "apK86SJcY4fy7tP-rU3dKgAAAlw"]
[Sat Aug 29 05:05:13.514032 2026] [security2:error] [pid 1018003:tid 1018221] [client 20.104.18.15:7116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/k.php"] [unique_id "apK86TAh5Y1i2tUxg4HcAgAABf4"]
[Sat Aug 29 05:05:13.521301 2026] [security2:error] [pid 1018003:tid 1018172] [client 20.48.250.41:58531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/06.php"] [unique_id "apK86TAh5Y1i2tUxg4HcAwAABc0"]
[Sat Aug 29 05:05:13.529453 2026] [security2:error] [pid 1018003:tid 1018169] [client 158.23.147.79:53998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK86TAh5Y1i2tUxg4HcBAAABco"]
[Sat Aug 29 05:05:13.530002 2026] [security2:error] [pid 1018003:tid 1018277] [client 68.155.159.216:12225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK86TAh5Y1i2tUxg4HcBQAABjU"]
[Sat Aug 29 05:05:13.531519 2026] [core:error] [pid 1018003:tid 1018125] [remote 104.196.115.188:34080] AH10244: invalid URI path (/%2e%2e/.env)
[Sat Aug 29 05:05:13.533328 2026] [security2:error] [pid 1017536:tid 1017681] [client 52.139.37.240:65286] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "skyyentertainment.skyytalent.com"] [uri "/c99.php"] [unique_id "apK86SJcY4fy7tP-rU3dLAAAAiM"]
[Sat Aug 29 05:05:13.534303 2026] [security2:error] [pid 1017536:tid 1017675] [client 52.139.37.240:21425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/must.php"] [unique_id "apK86SJcY4fy7tP-rU3dLQAAAh0"]
[Sat Aug 29 05:05:13.536493 2026] [security2:error] [pid 1018003:tid 1018126] [remote 104.196.115.188:34080] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/.env"] [unique_id "apK86TAh5Y1i2tUxg4HcBwAGK2k"]
[Sat Aug 29 05:05:13.540435 2026] [security2:error] [pid 1017536:tid 1017737] [client 20.104.18.15:23530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/img.php"] [unique_id "apK86SJcY4fy7tP-rU3dLgAAAls"]
[Sat Aug 29 05:05:13.540617 2026] [security2:error] [pid 1017536:tid 1017776] [client 20.48.160.90:39973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/dvve.php"] [unique_id "apK86SJcY4fy7tP-rU3dLwAAAoI"]
[Sat Aug 29 05:05:13.542099 2026] [security2:error] [pid 1017536:tid 1017716] [client 20.196.209.81:19349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-admin/plugin-install.php"] [unique_id "apK86SJcY4fy7tP-rU3dMAAAAkY"]
[Sat Aug 29 05:05:13.542435 2026] [security2:error] [pid 1017536:tid 1017737] [client 68.155.159.216:51567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK86SJcY4fy7tP-rU3dMQAAAls"]
[Sat Aug 29 05:05:13.542486 2026] [security2:error] [pid 1017536:tid 1017764] [client 143.244.57.82:48326] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "wincosir.enproftp.com"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "apK86SJcY4fy7tP-rU3dMgAAAnY"]
[Sat Aug 29 05:05:13.544647 2026] [security2:error] [pid 1017536:tid 1017684] [client 20.104.18.15:13249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/aa.php"] [unique_id "apK86SJcY4fy7tP-rU3dMwAAAiY"]
[Sat Aug 29 05:05:13.546525 2026] [security2:error] [pid 1017536:tid 1017683] [client 52.139.37.240:58601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/jga.php"] [unique_id "apK86SJcY4fy7tP-rU3dNAAAAiU"]
[Sat Aug 29 05:05:13.557201 2026] [security2:error] [pid 1017536:tid 1017782] [client 20.48.251.3:57822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/xda.php"] [unique_id "apK86SJcY4fy7tP-rU3dNQAAAog"]
[Sat Aug 29 05:05:13.560571 2026] [security2:error] [pid 1017536:tid 1017788] [client 20.104.104.62:13643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahrice-co-uk.glowt-shirt.com"] [uri "/blox.php"] [unique_id "apK86SJcY4fy7tP-rU3dNgAAAo4"]
[Sat Aug 29 05:05:13.569304 2026] [security2:error] [pid 1018003:tid 1018203] [client 20.63.81.20:26521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/100.php"] [unique_id "apK86TAh5Y1i2tUxg4HcCAAABew"]
[Sat Aug 29 05:05:13.576369 2026] [security2:error] [pid 1017536:tid 1017695] [client 158.23.184.117:21874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/.well-known/chosen.php"] [unique_id "apK86SJcY4fy7tP-rU3dOQAAAjE"]
[Sat Aug 29 05:05:13.591354 2026] [security2:error] [pid 1017536:tid 1017773] [client 20.104.104.62:64739] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.motherssandals.com"] [uri "/c99.php"] [unique_id "apK86SJcY4fy7tP-rU3dPAAAAn8"]
[Sat Aug 29 05:05:13.592979 2026] [security2:error] [pid 1018003:tid 1018184] [client 20.48.160.90:63572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/650.php"] [unique_id "apK86TAh5Y1i2tUxg4HcCwAABdk"]
[Sat Aug 29 05:05:13.607478 2026] [security2:error] [pid 1018003:tid 1018274] [client 20.48.250.41:65471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/tfm.php"] [unique_id "apK86TAh5Y1i2tUxg4HcDAAABjI"]
[Sat Aug 29 05:05:13.607944 2026] [security2:error] [pid 1017536:tid 1017711] [client 20.104.18.15:46926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/wp-content/mod/adminfuns.php"] [unique_id "apK86SJcY4fy7tP-rU3dPwAAAkE"]
[Sat Aug 29 05:05:13.622169 2026] [security2:error] [pid 1017536:tid 1017760] [client 20.104.104.62:10838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/tanjiro.php"] [unique_id "apK86SJcY4fy7tP-rU3dQwAAAnI"]
[Sat Aug 29 05:05:13.629426 2026] [security2:error] [pid 1017536:tid 1017763] [client 158.23.184.117:56691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.howtostudyexams.com"] [uri "/wp-includes/Requests/Exception/file.php"] [unique_id "apK86SJcY4fy7tP-rU3dRQAAAnU"]
[Sat Aug 29 05:05:13.635596 2026] [security2:error] [pid 1017536:tid 1017728] [client 68.155.159.216:50252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-content/cong.php"] [unique_id "apK86SJcY4fy7tP-rU3dRgAAAlI"]
[Sat Aug 29 05:05:13.636164 2026] [security2:error] [pid 1018003:tid 1018157] [client 20.196.209.81:4997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/access.php"] [unique_id "apK86TAh5Y1i2tUxg4HcDgAABb4"]
[Sat Aug 29 05:05:13.637833 2026] [security2:error] [pid 1018003:tid 1018232] [client 74.248.24.12:21325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/24.php"] [unique_id "apK86TAh5Y1i2tUxg4HcDwAABgg"]
[Sat Aug 29 05:05:13.637912 2026] [security2:error] [pid 1018003:tid 1018210] [client 20.104.104.62:14835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.vistacounselingcolorado.com"] [uri "/blox.php"] [unique_id "apK86TAh5Y1i2tUxg4HcEAAABfM"]
[Sat Aug 29 05:05:13.638432 2026] [security2:error] [pid 1018003:tid 1018191] [client 158.23.184.117:14502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.uscgpipeband.org"] [uri "/wp-content/plugins/alfa-rex.php"] [unique_id "apK86TAh5Y1i2tUxg4HcEQAABeA"]
[Sat Aug 29 05:05:13.641469 2026] [security2:error] [pid 1018003:tid 1018249] [client 20.48.250.41:12331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "employedlawyer.com"] [uri "/init.php"] [unique_id "apK86TAh5Y1i2tUxg4HcEgAABhk"]
[Sat Aug 29 05:05:13.641593 2026] [security2:error] [pid 1017536:tid 1017672] [client 158.23.147.79:62694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/login.php"] [unique_id "apK86SJcY4fy7tP-rU3dSQAAAho"]
[Sat Aug 29 05:05:13.647451 2026] [security2:error] [pid 1018003:tid 1018243] [client 158.23.147.79:50160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/wp-mail.php"] [unique_id "apK86TAh5Y1i2tUxg4HcEwAABhM"]
[Sat Aug 29 05:05:13.649730 2026] [security2:error] [pid 1017536:tid 1017712] [client 20.104.104.62:48592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/inject.php"] [unique_id "apK86SJcY4fy7tP-rU3dSgAAAkI"]
[Sat Aug 29 05:05:13.650495 2026] [security2:error] [pid 1017536:tid 1017756] [client 20.104.18.15:36833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/m.php"] [unique_id "apK86SJcY4fy7tP-rU3dSwAAAm4"]
[Sat Aug 29 05:05:13.662560 2026] [security2:error] [pid 1018003:tid 1018178] [client 4.232.148.111:1415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/admin/function.php"] [unique_id "apK86TAh5Y1i2tUxg4HcFAAABdM"]
[Sat Aug 29 05:05:13.668719 2026] [security2:error] [pid 1017536:tid 1017749] [client 4.205.62.107:61871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/app/Helpers/bladeHelpers.php"] [unique_id "apK86SJcY4fy7tP-rU3dTQAAAmc"]
[Sat Aug 29 05:05:13.675672 2026] [security2:error] [pid 1017536:tid 1017770] [client 4.205.62.107:21883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/nlnub.php"] [unique_id "apK86SJcY4fy7tP-rU3dTgAAAnw"]
[Sat Aug 29 05:05:13.679673 2026] [security2:error] [pid 1017536:tid 1017668] [client 20.48.160.90:45824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/doo.php"] [unique_id "apK86SJcY4fy7tP-rU3dTwAAAhY"]
[Sat Aug 29 05:05:13.681629 2026] [security2:error] [pid 1018003:tid 1018213] [client 20.48.250.41:61740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/class.php"] [unique_id "apK86TAh5Y1i2tUxg4HcFQAABfY"]
[Sat Aug 29 05:05:13.681640 2026] [security2:error] [pid 1018003:tid 1018251] [client 20.104.18.15:13283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/img.php"] [unique_id "apK86TAh5Y1i2tUxg4HcFgAABhs"]
[Sat Aug 29 05:05:13.681639 2026] [security2:error] [pid 1017536:tid 1017780] [client 20.63.219.114:2023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/hehe.php"] [unique_id "apK86SJcY4fy7tP-rU3dUAAAAoY"]
[Sat Aug 29 05:05:13.686782 2026] [security2:error] [pid 1017536:tid 1017666] [client 20.104.104.62:13578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahrice-co-uk.glowt-shirt.com"] [uri "/kcs.php"] [unique_id "apK86SJcY4fy7tP-rU3dUQAAAhQ"]
[Sat Aug 29 05:05:13.687927 2026] [security2:error] [pid 1017536:tid 1017747] [client 20.48.251.3:57827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/pinfo.php"] [unique_id "apK86SJcY4fy7tP-rU3dUgAAAmU"]
[Sat Aug 29 05:05:13.689350 2026] [security2:error] [pid 1017536:tid 1017705] [client 52.139.37.240:28284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jjfreeman.net"] [uri "/browse.php"] [unique_id "apK86SJcY4fy7tP-rU3dUwAAAjs"]
[Sat Aug 29 05:05:13.693817 2026] [security2:error] [pid 1017536:tid 1017703] [client 158.23.147.79:30702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/goods.php"] [unique_id "apK86SJcY4fy7tP-rU3dVAAAAjk"]
[Sat Aug 29 05:05:13.700037 2026] [security2:error] [pid 1017536:tid 1017741] [client 20.104.18.15:23535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/222.php"] [unique_id "apK86SJcY4fy7tP-rU3dVgAAAl8"]
[Sat Aug 29 05:05:13.713829 2026] [security2:error] [pid 1018003:tid 1018155] [client 20.48.250.41:23505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/mar.php"] [unique_id "apK86TAh5Y1i2tUxg4HcGAAABbw"]
[Sat Aug 29 05:05:13.721923 2026] [security2:error] [pid 1017536:tid 1017748] [client 68.155.159.216:16300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.showerdoorsdubuque.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK86SJcY4fy7tP-rU3dWQAAAmY"]
[Sat Aug 29 05:05:13.724678 2026] [security2:error] [pid 1018003:tid 1018128] [remote 104.196.51.122:58658] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "www.bigbuttonscarf.com"] [uri "/wp-config.php.swp"] [unique_id "apK86TAh5Y1i2tUxg4HcGwAGH2s"]
[Sat Aug 29 05:05:13.725035 2026] [security2:error] [pid 1018003:tid 1018132] [remote 104.196.51.122:58658] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "www.bigbuttonscarf.com"] [uri "/wp-config.php~"] [unique_id "apK86TAh5Y1i2tUxg4HcHQAGH28"]
[Sat Aug 29 05:05:13.727540 2026] [security2:error] [pid 1017536:tid 1017765] [client 20.104.18.15:7150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/82.php"] [unique_id "apK86SJcY4fy7tP-rU3dXAAAAnc"]
[Sat Aug 29 05:05:13.727591 2026] [security2:error] [pid 1018003:tid 1018131] [remote 104.196.51.122:58658] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/storage/.env"] [unique_id "apK86TAh5Y1i2tUxg4HcHAAGH24"]
[Sat Aug 29 05:05:13.727592 2026] [security2:error] [pid 1018003:tid 1018130] [remote 104.196.51.122:58658] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/web/.env"] [unique_id "apK86TAh5Y1i2tUxg4HcGQAGH20"]
[Sat Aug 29 05:05:13.727819 2026] [security2:error] [pid 1018003:tid 1018133] [remote 104.196.51.122:58658] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/wp/.env"] [unique_id "apK86TAh5Y1i2tUxg4HcHgAGH3A"]
[Sat Aug 29 05:05:13.727876 2026] [security2:error] [pid 1018003:tid 1018225] [client 158.23.184.117:21831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/.well-known/config.php"] [unique_id "apK86TAh5Y1i2tUxg4HcHwAABgI"]
[Sat Aug 29 05:05:13.727951 2026] [security2:error] [pid 1017536:tid 1017734] [client 52.139.37.240:54169] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "skyyentertainment.skyytalent.com"] [uri "/c99.php"] [unique_id "apK86SJcY4fy7tP-rU3dXQAAAlg"]
[Sat Aug 29 05:05:13.728734 2026] [security2:error] [pid 1018003:tid 1018129] [remote 104.196.51.122:58658] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/wp-config.old"] [unique_id "apK86TAh5Y1i2tUxg4HcGgAGH2w"]
[Sat Aug 29 05:05:13.731028 2026] [security2:error] [pid 1017536:tid 1017754] [client 52.139.37.240:21142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/up.php"] [unique_id "apK86SJcY4fy7tP-rU3dXgAAAmw"]
[Sat Aug 29 05:05:13.735242 2026] [security2:error] [pid 1017536:tid 1017700] [client 20.63.81.20:26448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/about.php"] [unique_id "apK86SJcY4fy7tP-rU3dXwAAAjY"]
[Sat Aug 29 05:05:13.751439 2026] [security2:error] [pid 1017536:tid 1017730] [client 158.158.54.35:15886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/install.php"] [unique_id "apK86SJcY4fy7tP-rU3dYAAAAlQ"]
[Sat Aug 29 05:05:13.752265 2026] [security2:error] [pid 1017536:tid 1017679] [client 20.48.160.90:62717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/nakrip.php"] [unique_id "apK86SJcY4fy7tP-rU3dYQAAAiE"]
[Sat Aug 29 05:05:13.758570 2026] [security2:error] [pid 1017536:tid 1017778] [client 68.155.159.216:16278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/dropdown.php"] [unique_id "apK86SJcY4fy7tP-rU3dZAAAAoQ"]
[Sat Aug 29 05:05:13.765505 2026] [security2:error] [pid 1018003:tid 1018137] [remote 104.196.115.188:34080] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/api/.env/public/.env"] [unique_id "apK86TAh5Y1i2tUxg4HcIQAGBHQ"]
[Sat Aug 29 05:05:13.766142 2026] [security2:error] [pid 1017536:tid 1017784] [client 52.139.37.240:24591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/mac.php"] [unique_id "apK86SJcY4fy7tP-rU3dZwAAAoo"]
[Sat Aug 29 05:05:13.769093 2026] [security2:error] [pid 1017536:tid 1017721] [client 20.104.18.15:47074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/sao.php"] [unique_id "apK86SJcY4fy7tP-rU3daQAAAks"]
[Sat Aug 29 05:05:13.787174 2026] [security2:error] [pid 1018003:tid 1018181] [client 20.104.104.62:15332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.vistacounselingcolorado.com"] [uri "/kcs.php"] [unique_id "apK86TAh5Y1i2tUxg4HcJQAABdY"]
[Sat Aug 29 05:05:13.792960 2026] [security2:error] [pid 1017536:tid 1017723] [client 20.48.250.41:12464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "employedlawyer.com"] [uri "/term.php"] [unique_id "apK86SJcY4fy7tP-rU3dagAAAk0"]
[Sat Aug 29 05:05:13.801650 2026] [cgid:error] [pid 1018003:tid 1018140] [remote 104.196.51.122:58658] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:13.803714 2026] [security2:error] [pid 1017536:tid 1017736] [client 20.104.104.62:10440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/Rk41.php"] [unique_id "apK86SJcY4fy7tP-rU3dcAAAAlo"]
[Sat Aug 29 05:05:13.804208 2026] [security2:error] [pid 1017536:tid 1017720] [client 4.205.62.107:21859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/aws_secret_config.php"] [unique_id "apK86SJcY4fy7tP-rU3dcQAAAko"]
[Sat Aug 29 05:05:13.804666 2026] [security2:error] [pid 1018003:tid 1018163] [client 20.197.61.180:17398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eeeaudio.com"] [uri "/wp-content/languages/plugins/about.php"] [unique_id "apK86TAh5Y1i2tUxg4HcKQAABcQ"]
[Sat Aug 29 05:05:13.811586 2026] [security2:error] [pid 1018003:tid 1018166] [client 20.104.18.15:13310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/222.php"] [unique_id "apK86TAh5Y1i2tUxg4HcKwAABcc"]
[Sat Aug 29 05:05:13.815002 2026] [cgid:error] [pid 1018003:tid 1018141] [remote 104.196.51.122:58658] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:13.816117 2026] [security2:error] [pid 1017536:tid 1017775] [client 45.154.98.191:50015] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.acovib.com"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "apK86SJcY4fy7tP-rU3dcwAAAoE"]
[Sat Aug 29 05:05:13.816459 2026] [cgid:error] [pid 1018003:tid 1018142] [remote 104.196.51.122:58658] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:13.816489 2026] [cgid:error] [pid 1018003:tid 1018144] [remote 104.196.51.122:58658] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:13.816649 2026] [cgid:error] [pid 1018003:tid 1018145] [remote 104.196.51.122:58658] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:13.819632 2026] [security2:error] [pid 1017536:tid 1017738] [client 20.48.251.3:57800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/X57.php"] [unique_id "apK86SJcY4fy7tP-rU3ddAAAAlw"]
[Sat Aug 29 05:05:13.820789 2026] [security2:error] [pid 1017536:tid 1017566] [remote 93.123.109.228:48278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK86SJcY4fy7tP-rU3ddQACVx0"]
[Sat Aug 29 05:05:13.821888 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.104.18.15:36679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/fling.php"] [unique_id "apK86SJcY4fy7tP-rU3ddgAAAh0"]
[Sat Aug 29 05:05:13.822831 2026] [security2:error] [pid 1017536:tid 1017776] [client 20.48.250.41:58571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/8.php"] [unique_id "apK86SJcY4fy7tP-rU3ddwAAAoI"]
[Sat Aug 29 05:05:13.823093 2026] [security2:error] [pid 1017536:tid 1017694] [client 168.107.94.195:50443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK86SJcY4fy7tP-rU3deAAAAjA"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:13.826161 2026] [security2:error] [pid 1017536:tid 1017737] [client 158.23.147.79:24408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK86SJcY4fy7tP-rU3degAAAls"]
[Sat Aug 29 05:05:13.826686 2026] [security2:error] [pid 1017536:tid 1017683] [client 20.104.104.62:13712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahrice-co-uk.glowt-shirt.com"] [uri "/wsz.php"] [unique_id "apK86SJcY4fy7tP-rU3dfAAAAiU"]
[Sat Aug 29 05:05:13.833560 2026] [security2:error] [pid 1017536:tid 1017750] [client 20.48.160.90:45910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/adminer-4.6.6.php"] [unique_id "apK86SJcY4fy7tP-rU3dfgAAAmg"]
[Sat Aug 29 05:05:13.839016 2026] [security2:error] [pid 1018003:tid 1018209] [client 158.23.184.117:14487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.uscgpipeband.org"] [uri "/test.php"] [unique_id "apK86TAh5Y1i2tUxg4HcMQAABfI"]
[Sat Aug 29 05:05:13.845505 2026] [security2:error] [pid 1018003:tid 1018264] [client 158.23.184.117:56675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.howtostudyexams.com"] [uri "/wp-admin/add.php"] [unique_id "apK86TAh5Y1i2tUxg4HcMwAABig"]
[Sat Aug 29 05:05:13.847645 2026] [cgid:error] [pid 1018003:tid 1018147] [remote 104.196.51.122:58658] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:13.848524 2026] [security2:error] [pid 1017536:tid 1017727] [client 20.104.104.62:20827] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.motherssandals.com"] [uri "/c99.php"] [unique_id "apK86SJcY4fy7tP-rU3dgAAAAlE"]
[Sat Aug 29 05:05:13.859566 2026] [security2:error] [pid 1018003:tid 1018179] [client 20.104.18.15:23547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/key.php"] [unique_id "apK86TAh5Y1i2tUxg4HcNAAABdQ"]
[Sat Aug 29 05:05:13.860924 2026] [core:error] [pid 1017536:tid 1017777] [client 74.248.24.12:30201] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:13.860944 2026] [core:error] [pid 1017536:tid 1017777] [client 74.248.24.12:30201] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:13.869051 2026] [security2:error] [pid 1017536:tid 1017688] [client 20.104.18.15:7148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/dex.php"] [unique_id "apK86SJcY4fy7tP-rU3dhQAAAio"]
[Sat Aug 29 05:05:13.874472 2026] [security2:error] [pid 1017536:tid 1017758] [client 172.97.247.204:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutihomes.com"] [uri "/boats"] [unique_id "apK86SJcY4fy7tP-rU3dhgAAAnA"], referer: https://www.djiboutihomes.com/
[Sat Aug 29 05:05:13.875257 2026] [security2:error] [pid 1017536:tid 1017781] [client 20.203.141.11:29689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "germanmorenoperez.com"] [uri "/404.php"] [unique_id "apK86SJcY4fy7tP-rU3dhwAAAoc"]
[Sat Aug 29 05:05:13.875496 2026] [security2:error] [pid 1017536:tid 1017776] [client 158.23.184.117:21859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/.well-known/core.php"] [unique_id "apK86SJcY4fy7tP-rU3diAAAAoI"]
[Sat Aug 29 05:05:13.880548 2026] [security2:error] [pid 1017536:tid 1017686] [client 20.104.104.62:48670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/mga.php"] [unique_id "apK86SJcY4fy7tP-rU3diQAAAig"]
[Sat Aug 29 05:05:13.882878 2026] [security2:error] [pid 1018003:tid 1018240] [client 20.48.250.41:23370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/ccu.php"] [unique_id "apK86TAh5Y1i2tUxg4HcNgAABhA"]
[Sat Aug 29 05:05:13.884304 2026] [security2:error] [pid 1017536:tid 1017711] [client 20.48.250.41:64156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/Geforce.php"] [unique_id "apK86SJcY4fy7tP-rU3digAAAkE"]
[Sat Aug 29 05:05:13.885729 2026] [security2:error] [pid 1017536:tid 1017669] [client 20.63.81.20:26507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/about.php"] [unique_id "apK86SJcY4fy7tP-rU3diwAAAhc"]
[Sat Aug 29 05:05:13.887863 2026] [security2:error] [pid 1017536:tid 1017681] [client 52.139.37.240:56785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jjfreeman.net"] [uri "/contentloader1.php"] [unique_id "apK86SJcY4fy7tP-rU3djAAAAiM"]
[Sat Aug 29 05:05:13.894910 2026] [security2:error] [pid 1017536:tid 1017729] [client 4.232.148.111:21028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tiaandephraim.com"] [uri "/system_log.php"] [unique_id "apK86SJcY4fy7tP-rU3djQAAAlM"]
[Sat Aug 29 05:05:13.903960 2026] [security2:error] [pid 1017536:tid 1017735] [client 20.48.160.90:62676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/wp-includes/interactivity-api/flower.php"] [unique_id "apK86SJcY4fy7tP-rU3dkAAAAlk"]
[Sat Aug 29 05:05:13.911841 2026] [security2:error] [pid 1017536:tid 1017670] [client 185.104.184.230:49416] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.youthspeakoutint.org"] [uri "/autodiscover/autodiscover.xml/blog/wp-includes/wlwmanifest.xml"] [unique_id "apK86SJcY4fy7tP-rU3dkwAAAhg"]
[Sat Aug 29 05:05:13.913412 2026] [access_compat:error] [pid 1018003:tid 1018207] [client 67.20.76.220:23066] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:05:13.919406 2026] [security2:error] [pid 1017536:tid 1017691] [client 20.63.219.114:15274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "compropolis.mx"] [uri "/as.php"] [unique_id "apK86SJcY4fy7tP-rU3dlAAAAi0"]
[Sat Aug 29 05:05:13.927314 2026] [security2:error] [pid 1018003:tid 1018260] [client 52.139.37.240:37903] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "skyyentertainment.skyytalent.com"] [uri "/c99.php"] [unique_id "apK86TAh5Y1i2tUxg4HcQgAABiQ"]
[Sat Aug 29 05:05:13.936832 2026] [cgid:error] [pid 1018003:tid 1018021] [remote 104.196.51.122:58658] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:13.939219 2026] [security2:error] [pid 1017536:tid 1017713] [client 20.196.209.81:12368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-admin/plugins/img/themes/plugins/maintenance.php"] [unique_id "apK86SJcY4fy7tP-rU3dlwAAAkM"]
[Sat Aug 29 05:05:13.941879 2026] [access_compat:error] [pid 1018003:tid 1018235] [client 67.20.76.220:23072] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:05:13.953845 2026] [security2:error] [pid 1018003:tid 1018275] [client 20.104.104.62:25627] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.flicklister.com"] [uri "/1.php"] [unique_id "apK86TAh5Y1i2tUxg4HcSAAABjM"]
[Sat Aug 29 05:05:13.954002 2026] [security2:error] [pid 1018003:tid 1018275] [client 20.104.104.62:25627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.flicklister.com"] [uri "/1.php"] [unique_id "apK86TAh5Y1i2tUxg4HcSAAABjM"]
[Sat Aug 29 05:05:13.955753 2026] [security2:error] [pid 1018003:tid 1018269] [client 4.205.62.107:53342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/thui.php"] [unique_id "apK86TAh5Y1i2tUxg4HcSQAABi0"]
[Sat Aug 29 05:05:13.957615 2026] [security2:error] [pid 1018003:tid 1018173] [client 20.48.250.41:12303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "employedlawyer.com"] [uri "/aaa.php"] [unique_id "apK86TAh5Y1i2tUxg4HcSgAABc4"]
[Sat Aug 29 05:05:13.957615 2026] [security2:error] [pid 1017536:tid 1017671] [client 20.104.104.62:15259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.vistacounselingcolorado.com"] [uri "/wsz.php"] [unique_id "apK86SJcY4fy7tP-rU3dnQAAAhk"]
[Sat Aug 29 05:05:13.961445 2026] [security2:error] [pid 1018003:tid 1018026] [remote 104.196.115.188:34080] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/uploads../.env"] [unique_id "apK86TAh5Y1i2tUxg4HcRQAGFAU"]
[Sat Aug 29 05:05:13.963856 2026] [security2:error] [pid 1018003:tid 1018075] [remote 104.196.115.188:34080] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/assets../.env"] [unique_id "apK86TAh5Y1i2tUxg4HcRAAGFDY"]
[Sat Aug 29 05:05:13.965549 2026] [security2:error] [pid 1018003:tid 1018171] [client 52.139.37.240:58572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK86TAh5Y1i2tUxg4HcTAAABcw"]
[Sat Aug 29 05:05:13.967617 2026] [security2:error] [pid 1018003:tid 1018266] [client 20.104.104.62:13960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahrice-co-uk.glowt-shirt.com"] [uri "/msy.php"] [unique_id "apK86TAh5Y1i2tUxg4HcTQAABio"]
[Sat Aug 29 05:05:13.968981 2026] [security2:error] [pid 1017536:tid 1017668] [client 20.104.18.15:13268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/key.php"] [unique_id "apK86SJcY4fy7tP-rU3doQAAAhY"]
[Sat Aug 29 05:05:13.969054 2026] [cgid:error] [pid 1018003:tid 1018024] [remote 104.196.51.122:58658] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:13.969795 2026] [security2:error] [pid 1017536:tid 1017780] [client 20.104.104.62:44562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/7logs.php"] [unique_id "apK86SJcY4fy7tP-rU3dogAAAoY"]
[Sat Aug 29 05:05:13.970591 2026] [access_compat:error] [pid 1017536:tid 1017712] [client 67.20.76.220:12590] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:05:13.971211 2026] [security2:error] [pid 1018003:tid 1018250] [client 158.23.147.79:23329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ridetimewinnipegservicetiresrims.ca"] [uri "/wp-l0gin.php"] [unique_id "apK86TAh5Y1i2tUxg4HcTwAABho"]
[Sat Aug 29 05:05:13.971230 2026] [cgid:error] [pid 1018003:tid 1018033] [remote 104.196.51.122:58658] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:13.972673 2026] [security2:error] [pid 1017536:tid 1017709] [client 20.48.160.90:39938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/gelap1.php"] [unique_id "apK86SJcY4fy7tP-rU3dowAAAj8"]
[Sat Aug 29 05:05:13.972867 2026] [cgid:error] [pid 1018003:tid 1018021] [remote 104.196.51.122:58658] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:13.973201 2026] [security2:error] [pid 1017536:tid 1017558] [remote 35.243.213.218:46954] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "www.mikeycunningham.com"] [uri "/.env.backup"] [unique_id "apK86SJcY4fy7tP-rU3dngACFRU"]
[Sat Aug 29 05:05:13.973581 2026] [cgid:error] [pid 1018003:tid 1018071] [remote 104.196.51.122:58658] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:13.974306 2026] [security2:error] [pid 1017536:tid 1017703] [client 20.48.250.41:58541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/0x0x.php"] [unique_id "apK86SJcY4fy7tP-rU3dpAAAAjk"]
[Sat Aug 29 05:05:13.974443 2026] [security2:error] [pid 1017536:tid 1017674] [client 4.205.62.107:2981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/v3.php"] [unique_id "apK86SJcY4fy7tP-rU3dpQAAAhw"]
[Sat Aug 29 05:05:13.979072 2026] [security2:error] [pid 1017536:tid 1017734] [client 68.155.159.216:14212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/about.php"] [unique_id "apK86SJcY4fy7tP-rU3dqAAAAlg"]
[Sat Aug 29 05:05:13.981642 2026] [security2:error] [pid 1017536:tid 1017754] [client 68.155.159.216:51894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-content/radio.php"] [unique_id "apK86SJcY4fy7tP-rU3dqQAAAmw"]
[Sat Aug 29 05:05:13.989031 2026] [security2:error] [pid 1017536:tid 1017700] [client 20.104.18.15:46954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/dapa.php"] [unique_id "apK86SJcY4fy7tP-rU3dqgAAAjY"]
[Sat Aug 29 05:05:13.990743 2026] [security2:error] [pid 1017536:tid 1017687] [client 40.83.93.50:3618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.superugly.com"] [uri "/wp-content/cong.php"] [unique_id "apK86SJcY4fy7tP-rU3dqwAAAik"]
[Sat Aug 29 05:05:13.990892 2026] [security2:error] [pid 1017536:tid 1017702] [client 151.123.177.79:60177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.177.123.151.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK86SJcY4fy7tP-rU3dpgAAAjg"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:13.998098 2026] [security2:error] [pid 1018003:tid 1018192] [client 20.48.251.3:28425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/register.php"] [unique_id "apK86TAh5Y1i2tUxg4HcSwAABeE"]
[Sat Aug 29 05:05:14.001267 2026] [security2:error] [pid 1017536:tid 1017772] [client 20.104.18.15:23369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/chosen.php"] [unique_id "apK86SJcY4fy7tP-rU3drwAAAn4"]
[Sat Aug 29 05:05:14.015414 2026] [security2:error] [pid 1017536:tid 1017767] [client 158.23.184.117:61568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.howtostudyexams.com"] [uri "/wp-includes/assets/about.php"] [unique_id "apK86iJcY4fy7tP-rU3dtwAAAnk"]
[Sat Aug 29 05:05:14.022917 2026] [security2:error] [pid 1017536:tid 1017705] [client 158.23.184.117:21844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/.well-known/data.php"] [unique_id "apK86iJcY4fy7tP-rU3duAAAAjs"]
[Sat Aug 29 05:05:14.032960 2026] [security2:error] [pid 1017536:tid 1017779] [client 20.104.18.15:36834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/btyuio.php"] [unique_id "apK86iJcY4fy7tP-rU3dugAAAoU"]
[Sat Aug 29 05:05:14.036772 2026] [security2:error] [pid 1018003:tid 1018208] [client 20.63.81.20:26602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/admin.php"] [unique_id "apK86jAh5Y1i2tUxg4HcUwAABfE"]
[Sat Aug 29 05:05:14.037900 2026] [security2:error] [pid 1017536:tid 1017755] [client 52.139.37.240:21414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/wp-content/155.php"] [unique_id "apK86iJcY4fy7tP-rU3duwAAAm0"]
[Sat Aug 29 05:05:14.046029 2026] [security2:error] [pid 1018003:tid 1018183] [client 158.23.147.79:25551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK86jAh5Y1i2tUxg4HcVAAABdg"]
[Sat Aug 29 05:05:14.047698 2026] [security2:error] [pid 1017536:tid 1017775] [client 20.48.160.90:64693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/xcc.php"] [unique_id "apK86iJcY4fy7tP-rU3dvAAAAoE"]
[Sat Aug 29 05:05:14.051277 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.48.250.41:64914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/click.php"] [unique_id "apK86iJcY4fy7tP-rU3dvQAAAh0"]
[Sat Aug 29 05:05:14.056481 2026] [security2:error] [pid 1018003:tid 1018201] [client 20.196.209.81:15161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/classsmtps.php"] [unique_id "apK86jAh5Y1i2tUxg4HcVQAABeo"]
[Sat Aug 29 05:05:14.056746 2026] [security2:error] [pid 1017536:tid 1017737] [client 4.205.62.107:54407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "troop264olney.net"] [uri "/tax.php"] [unique_id "apK86iJcY4fy7tP-rU3dvgAAAls"]
[Sat Aug 29 05:05:14.058139 2026] [security2:error] [pid 1017536:tid 1017679] [client 158.23.184.117:14493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.uscgpipeband.org"] [uri "/wp-includes/mani.php"] [unique_id "apK86iJcY4fy7tP-rU3dvwAAAiE"]
[Sat Aug 29 05:05:14.073684 2026] [security2:error] [pid 1018003:tid 1018218] [client 20.48.250.41:23503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/ak.php"] [unique_id "apK86jAh5Y1i2tUxg4HcWAAABfs"]
[Sat Aug 29 05:05:14.076666 2026] [cgid:error] [pid 1018003:tid 1018030] [remote 104.196.51.122:58658] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:14.087755 2026] [security2:error] [pid 1018003:tid 1018277] [client 20.104.104.62:14828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.vistacounselingcolorado.com"] [uri "/msy.php"] [unique_id "apK86jAh5Y1i2tUxg4HcWQAABjU"]
[Sat Aug 29 05:05:14.087810 2026] [security2:error] [pid 1018003:tid 1018233] [client 52.139.37.240:28229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jjfreeman.net"] [uri "/upfile.php"] [unique_id "apK86jAh5Y1i2tUxg4HcWgAABgk"]
[Sat Aug 29 05:05:14.094612 2026] [cgid:error] [pid 1018003:tid 1018023] [remote 104.196.51.122:58658] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:14.098725 2026] [security2:error] [pid 1017536:tid 1017776] [client 20.104.104.62:13664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahrice-co-uk.glowt-shirt.com"] [uri "/siln.php"] [unique_id "apK86iJcY4fy7tP-rU3dxQAAAoI"]
[Sat Aug 29 05:05:14.099238 2026] [security2:error] [pid 1017536:tid 1017716] [client 143.244.57.82:48328] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "wincosir.enproftp.com"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "apK86iJcY4fy7tP-rU3dxgAAAkY"]
[Sat Aug 29 05:05:14.099666 2026] [security2:error] [pid 1018003:tid 1018187] [client 20.104.104.62:48504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/inwp.php"] [unique_id "apK86jAh5Y1i2tUxg4HcXgAABdw"]
[Sat Aug 29 05:05:14.101809 2026] [cgid:error] [pid 1018003:tid 1018032] [remote 104.196.51.122:58658] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:14.106762 2026] [security2:error] [pid 1017536:tid 1017686] [client 20.104.18.15:13234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/chosen.php"] [unique_id "apK86iJcY4fy7tP-rU3dyAAAAig"]
[Sat Aug 29 05:05:14.110063 2026] [security2:error] [pid 1018003:tid 1018267] [client 20.104.104.62:44565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/sf.php"] [unique_id "apK86jAh5Y1i2tUxg4HcXwAABis"]
[Sat Aug 29 05:05:14.113041 2026] [security2:error] [pid 1018003:tid 1018267] [client 20.48.250.41:12409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "employedlawyer.com"] [uri "/xsox.php"] [unique_id "apK86jAh5Y1i2tUxg4HcYAAABis"]
[Sat Aug 29 05:05:14.113214 2026] [security2:error] [pid 1017536:tid 1017745] [client 20.48.160.90:40031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/rsjlrria.php"] [unique_id "apK86iJcY4fy7tP-rU3dyQAAAmM"]
[Sat Aug 29 05:05:14.120759 2026] [security2:error] [pid 1018003:tid 1018135] [remote 104.196.115.188:34080] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/images../.env"] [unique_id "apK86jAh5Y1i2tUxg4HcYQAF7HI"]
[Sat Aug 29 05:05:14.123331 2026] [security2:error] [pid 1017536:tid 1017550] [remote 93.123.109.228:48278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/admin/phpinfo.php"] [unique_id "apK86iJcY4fy7tP-rU3dygACVw0"]
[Sat Aug 29 05:05:14.130601 2026] [security2:error] [pid 1018003:tid 1018074] [remote 104.196.115.188:34080] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "infinitidealership.com"] [uri "/public/plugins/alertlist/../../../../../../../../proc/self/environ"] [unique_id "apK86jAh5Y1i2tUxg4HcZAAGBjU"]
[Sat Aug 29 05:05:14.133548 2026] [security2:error] [pid 1018003:tid 1018257] [client 20.48.251.3:57890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/xqq.php"] [unique_id "apK86jAh5Y1i2tUxg4HcZgAABiE"]
[Sat Aug 29 05:05:14.134824 2026] [security2:error] [pid 1018003:tid 1018074] [remote 104.196.115.188:34080] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/@fs/proc/self/cwd/.env"] [unique_id "apK86jAh5Y1i2tUxg4HcZQAGBjU"]
[Sat Aug 29 05:05:14.135856 2026] [security2:error] [pid 1018003:tid 1018214] [client 20.48.250.41:61726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/166.php"] [unique_id "apK86jAh5Y1i2tUxg4HcaAAABfc"]
[Sat Aug 29 05:05:14.138325 2026] [security2:error] [pid 1018003:tid 1018274] [client 20.104.18.15:23453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/file1221.php"] [unique_id "apK86jAh5Y1i2tUxg4HcaQAABjI"]
[Sat Aug 29 05:05:14.142484 2026] [security2:error] [pid 1017536:tid 1017757] [client 4.232.148.111:1459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/admin/index.php"] [unique_id "apK86iJcY4fy7tP-rU3dzgAAAm8"]
[Sat Aug 29 05:05:14.148598 2026] [security2:error] [pid 1017536:tid 1017572] [remote 93.123.109.228:48278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/admin_phpinfo.php"] [unique_id "apK86iJcY4fy7tP-rU3dzwACVyM"]
[Sat Aug 29 05:05:14.150105 2026] [security2:error] [pid 1017536:tid 1017706] [client 20.63.219.114:9184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/wp-admin/class-db.php"] [unique_id "apK86iJcY4fy7tP-rU3d0AAAAjw"]
[Sat Aug 29 05:05:14.153183 2026] [security2:error] [pid 1018003:tid 1018172] [client 20.104.104.62:25651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.flicklister.com"] [uri "/admin/function.php"] [unique_id "apK86jAh5Y1i2tUxg4HcagAABc0"]
[Sat Aug 29 05:05:14.160515 2026] [core:error] [pid 1018003:tid 1018220] [client 74.248.24.12:16534] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:14.160538 2026] [core:error] [pid 1018003:tid 1018220] [client 74.248.24.12:16534] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:14.162505 2026] [security2:error] [pid 1017536:tid 1017731] [client 52.139.37.240:24642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK86iJcY4fy7tP-rU3d0QAAAlU"]
[Sat Aug 29 05:05:14.170678 2026] [security2:error] [pid 1018003:tid 1018199] [client 158.23.184.117:21892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/.well-known/db-status.php"] [unique_id "apK86jAh5Y1i2tUxg4HcbAAABeg"]
[Sat Aug 29 05:05:14.172079 2026] [security2:error] [pid 1018003:tid 1018036] [remote 104.196.51.122:58658] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "www.bigbuttonscarf.com"] [uri "/static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ"] [unique_id "apK86jAh5Y1i2tUxg4HcbQAFvg8"]
[Sat Aug 29 05:05:14.178421 2026] [security2:error] [pid 1018003:tid 1018249] [client 20.104.18.15:7059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/inso.php"] [unique_id "apK86jAh5Y1i2tUxg4HcbgAABhk"]
[Sat Aug 29 05:05:14.179474 2026] [security2:error] [pid 1017536:tid 1017763] [client 20.63.81.20:26607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/admin.php"] [unique_id "apK86iJcY4fy7tP-rU3d1AAAAnU"]
[Sat Aug 29 05:05:14.181945 2026] [security2:error] [pid 1018003:tid 1018191] [client 20.104.18.15:47014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/wp-content/l.php"] [unique_id "apK86jAh5Y1i2tUxg4HcbwAABeA"]
[Sat Aug 29 05:05:14.186697 2026] [security2:error] [pid 1017536:tid 1017672] [client 20.48.160.90:63593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/wp-includes/Text/Diff/Engine/aaa.php"] [unique_id "apK86iJcY4fy7tP-rU3d1QAAAho"]
[Sat Aug 29 05:05:14.203643 2026] [security2:error] [pid 1018003:tid 1018262] [client 158.23.184.117:14515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.uscgpipeband.org"] [uri "/wp-includes/Test.php"] [unique_id "apK86jAh5Y1i2tUxg4HccAAABiY"]
[Sat Aug 29 05:05:14.203645 2026] [security2:error] [pid 1017536:tid 1017739] [client 158.158.54.35:9921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/ioxi-o.php"] [unique_id "apK86iJcY4fy7tP-rU3d1gAAAl0"]
[Sat Aug 29 05:05:14.206300 2026] [security2:error] [pid 1017536:tid 1017678] [client 168.107.94.195:50756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK86iJcY4fy7tP-rU3d2AAAAiA"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:14.214088 2026] [security2:error] [pid 1018003:tid 1018178] [client 20.104.18.15:36757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/dehnl.php"] [unique_id "apK86jAh5Y1i2tUxg4HccQAABdM"]
[Sat Aug 29 05:05:14.218189 2026] [security2:error] [pid 1018003:tid 1018242] [client 20.104.104.62:15357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.vistacounselingcolorado.com"] [uri "/siln.php"] [unique_id "apK86jAh5Y1i2tUxg4HccgAABhI"]
[Sat Aug 29 05:05:14.225053 2026] [security2:error] [pid 1018003:tid 1018224] [client 68.155.159.216:18354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.baxterevents.com"] [uri "/ans.php"] [unique_id "apK86jAh5Y1i2tUxg4HccwAABgE"]
[Sat Aug 29 05:05:14.229434 2026] [security2:error] [pid 1017536:tid 1017783] [client 20.104.104.62:64748] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.motherssandals.com"] [uri "/c99.php"] [unique_id "apK86iJcY4fy7tP-rU3d3AAAAok"]
[Sat Aug 29 05:05:14.234178 2026] [security2:error] [pid 1017536:tid 1017726] [client 57.141.14.20:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/"] [unique_id "apK86iJcY4fy7tP-rU3d3QAAAlA"]
[Sat Aug 29 05:05:14.236144 2026] [security2:error] [pid 1018003:tid 1018271] [client 20.104.104.62:13651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahrice-co-uk.glowt-shirt.com"] [uri "/f-401.php"] [unique_id "apK86jAh5Y1i2tUxg4HcdAAABi8"]
[Sat Aug 29 05:05:14.237545 2026] [security2:error] [pid 1018003:tid 1018255] [client 20.104.18.15:13134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/file1221.php"] [unique_id "apK86jAh5Y1i2tUxg4HcdQAABh8"]
[Sat Aug 29 05:05:14.239047 2026] [security2:error] [pid 1017536:tid 1017710] [client 52.139.37.240:20759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/wp-update.php"] [unique_id "apK86iJcY4fy7tP-rU3d3gAAAkA"]
[Sat Aug 29 05:05:14.249635 2026] [security2:error] [pid 1018003:tid 1018263] [client 20.63.219.114:9179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/post.php"] [unique_id "apK86jAh5Y1i2tUxg4HcdgAABic"]
[Sat Aug 29 05:05:14.250426 2026] [security2:error] [pid 1017536:tid 1017695] [client 20.104.104.62:10446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/super.php"] [unique_id "apK86iJcY4fy7tP-rU3d4AAAAjE"]
[Sat Aug 29 05:05:14.255290 2026] [security2:error] [pid 1017536:tid 1017703] [client 20.48.250.41:65439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/ms.php"] [unique_id "apK86iJcY4fy7tP-rU3d4gAAAjk"]
[Sat Aug 29 05:05:14.258605 2026] [security2:error] [pid 1018003:tid 1018247] [client 158.23.184.117:61619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.howtostudyexams.com"] [uri "/wp-content/themes/twentytwentythree.php"] [unique_id "apK86jAh5Y1i2tUxg4HcdwAABhc"]
[Sat Aug 29 05:05:14.264148 2026] [security2:error] [pid 1017536:tid 1017770] [client 20.48.251.3:57837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/a1vx.php"] [unique_id "apK86iJcY4fy7tP-rU3d5AAAAnw"]
[Sat Aug 29 05:05:14.266288 2026] [security2:error] [pid 1018003:tid 1018222] [client 20.48.250.41:61805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/h2a2ck.php"] [unique_id "apK86jAh5Y1i2tUxg4HceAAABf8"]
[Sat Aug 29 05:05:14.285252 2026] [security2:error] [pid 1018003:tid 1018170] [client 52.139.37.240:28285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jjfreeman.net"] [uri "/form.php"] [unique_id "apK86jAh5Y1i2tUxg4HceQAABcs"]
[Sat Aug 29 05:05:14.287898 2026] [security2:error] [pid 1017536:tid 1017700] [client 20.48.160.90:39961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/AxAo.php"] [unique_id "apK86iJcY4fy7tP-rU3d6AAAAjY"]
[Sat Aug 29 05:05:14.297641 2026] [security2:error] [pid 1017536:tid 1017623] [remote 35.243.213.218:46954] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.mikeycunningham.com"] [uri "/.env.bak"] [unique_id "apK86iJcY4fy7tP-rU3d6QACFVY"]
[Sat Aug 29 05:05:14.297742 2026] [security2:error] [pid 1017536:tid 1017715] [client 20.104.18.15:23540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/nox.php"] [unique_id "apK86iJcY4fy7tP-rU3d6gAAAkU"]
[Sat Aug 29 05:05:14.314494 2026] [security2:error] [pid 1017536:tid 1017734] [client 158.23.184.117:21829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/.well-known/f35.php"] [unique_id "apK86iJcY4fy7tP-rU3d8AAAAlg"]
[Sat Aug 29 05:05:14.317059 2026] [security2:error] [pid 1017536:tid 1017698] [client 20.48.160.90:62682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/wp-includes/style-engine/gecko-new.php"] [unique_id "apK86iJcY4fy7tP-rU3d8QAAAjQ"]
[Sat Aug 29 05:05:14.319307 2026] [security2:error] [pid 1017536:tid 1017771] [client 20.104.18.15:7129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/aa.php"] [unique_id "apK86iJcY4fy7tP-rU3d8wAAAn0"]
[Sat Aug 29 05:05:14.319699 2026] [security2:error] [pid 1017536:tid 1017631] [remote 35.243.213.218:46954] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mikeycunningham.com"] [uri "/backend/.env"] [unique_id "apK86iJcY4fy7tP-rU3d8gACFV4"]
[Sat Aug 29 05:05:14.323080 2026] [security2:error] [pid 1017536:tid 1017565] [remote 35.243.213.218:46954] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mikeycunningham.com"] [uri "/api/.env"] [unique_id "apK86iJcY4fy7tP-rU3d9AACFRw"]
[Sat Aug 29 05:05:14.326901 2026] [security2:error] [pid 1017536:tid 1017637] [remote 35.243.213.218:46954] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "www.mikeycunningham.com"] [uri "/.env.old"] [unique_id "apK86iJcY4fy7tP-rU3d9QACFWQ"]
[Sat Aug 29 05:05:14.327587 2026] [security2:error] [pid 1017536:tid 1017730] [client 20.63.81.20:26617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/themes.php"] [unique_id "apK86iJcY4fy7tP-rU3d9gAAAlQ"]
[Sat Aug 29 05:05:14.336443 2026] [security2:error] [pid 1017536:tid 1017747] [client 20.196.209.81:17950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-admin/security.php"] [unique_id "apK86iJcY4fy7tP-rU3d-QAAAmU"]
[Sat Aug 29 05:05:14.339277 2026] [security2:error] [pid 1017536:tid 1017756] [client 20.203.141.11:41382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "germanmorenoperez.com"] [uri "/php.php"] [unique_id "apK86iJcY4fy7tP-rU3d-wAAAm4"]
[Sat Aug 29 05:05:14.341331 2026] [security2:error] [pid 1017536:tid 1017756] [client 20.48.250.41:23513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/lib.php"] [unique_id "apK86iJcY4fy7tP-rU3d_QAAAm4"]
[Sat Aug 29 05:05:14.346801 2026] [security2:error] [pid 1017536:tid 1017749] [client 158.23.184.117:14792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.uscgpipeband.org"] [uri "/wp-includes/pomo.php"] [unique_id "apK86iJcY4fy7tP-rU3d_gAAAmc"]
[Sat Aug 29 05:05:14.354436 2026] [security2:error] [pid 1018003:tid 1018241] [client 20.63.219.114:11904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "compropolis.mx"] [uri "/room.php"] [unique_id "apK86jAh5Y1i2tUxg4HcfgAABhE"]
[Sat Aug 29 05:05:14.358785 2026] [security2:error] [pid 1017536:tid 1017702] [client 52.139.37.240:24613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/zafir1.php"] [unique_id "apK86iJcY4fy7tP-rU3d_wAAAjg"]
[Sat Aug 29 05:05:14.359204 2026] [security2:error] [pid 1018003:tid 1018209] [client 20.104.104.62:14348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.vistacounselingcolorado.com"] [uri "/f-401.php"] [unique_id "apK86jAh5Y1i2tUxg4HcfwAABfI"]
[Sat Aug 29 05:05:14.360095 2026] [security2:error] [pid 1017536:tid 1017687] [client 20.104.104.62:25806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.flicklister.com"] [uri "/autoload_classmap.php"] [unique_id "apK86iJcY4fy7tP-rU3eAQAAAik"]
[Sat Aug 29 05:05:14.366872 2026] [security2:error] [pid 1017536:tid 1017707] [client 45.154.98.191:50269] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.acovib.com"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "apK86iJcY4fy7tP-rU3eAgAAAj0"]
[Sat Aug 29 05:05:14.369776 2026] [security2:error] [pid 1017536:tid 1017633] [remote 93.123.109.228:48278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/api/info.php"] [unique_id "apK86iJcY4fy7tP-rU3eAwACV2A"]
[Sat Aug 29 05:05:14.374250 2026] [security2:error] [pid 1018003:tid 1018182] [client 20.104.18.15:46935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/wp-admin/w.php"] [unique_id "apK86jAh5Y1i2tUxg4HcgAAABdc"]
[Sat Aug 29 05:05:14.380741 2026] [security2:error] [pid 1018003:tid 1018231] [client 4.232.148.111:10353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tiaandephraim.com"] [uri "/24.php"] [unique_id "apK86jAh5Y1i2tUxg4HcgQAABgc"]
[Sat Aug 29 05:05:14.382082 2026] [security2:error] [pid 1017536:tid 1017779] [client 20.104.104.62:10441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/lufix1.php"] [unique_id "apK86iJcY4fy7tP-rU3eBgAAAoU"]
[Sat Aug 29 05:05:14.382564 2026] [security2:error] [pid 1017536:tid 1017751] [client 20.104.104.62:13746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahrice-co-uk.glowt-shirt.com"] [uri "/hq.php"] [unique_id "apK86iJcY4fy7tP-rU3eBwAAAmk"]
[Sat Aug 29 05:05:14.390292 2026] [security2:error] [pid 1018003:tid 1018238] [client 20.104.18.15:13282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/nox.php"] [unique_id "apK86jAh5Y1i2tUxg4HcggAABg4"]
[Sat Aug 29 05:05:14.390296 2026] [security2:error] [pid 1017536:tid 1017693] [client 20.104.18.15:36750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/zoo2.php"] [unique_id "apK86iJcY4fy7tP-rU3eCAAAAi8"]
[Sat Aug 29 05:05:14.406420 2026] [security2:error] [pid 1017536:tid 1017673] [client 20.48.251.3:57909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/public/vx.php"] [unique_id "apK86iJcY4fy7tP-rU3eCwAAAhs"]
[Sat Aug 29 05:05:14.417781 2026] [security2:error] [pid 1017536:tid 1017741] [client 74.248.24.12:9347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/wp-load.php"] [unique_id "apK86iJcY4fy7tP-rU3eDQAAAl8"]
[Sat Aug 29 05:05:14.422825 2026] [cgid:error] [pid 1017536:tid 1017610] [remote 104.196.51.122:56248] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:14.424254 2026] [cgid:error] [pid 1017536:tid 1017648] [remote 104.196.51.122:56248] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:14.424273 2026] [security2:error] [pid 1018003:tid 1018256] [client 20.48.160.90:39972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/class17.php"] [unique_id "apK86jAh5Y1i2tUxg4HchQAABiA"]
[Sat Aug 29 05:05:14.424958 2026] [cgid:error] [pid 1017536:tid 1017632] [remote 104.196.51.122:56248] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:14.425042 2026] [cgid:error] [pid 1017536:tid 1017646] [remote 104.196.51.122:56248] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:14.425291 2026] [cgid:error] [pid 1017536:tid 1017634] [remote 104.196.51.122:56248] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:14.427732 2026] [cgid:error] [pid 1017536:tid 1017555] [remote 104.196.51.122:56248] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:14.429743 2026] [security2:error] [pid 1017536:tid 1017694] [client 20.104.104.62:48477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/ad1.php"] [unique_id "apK86iJcY4fy7tP-rU3eFAAAAjA"]
[Sat Aug 29 05:05:14.429779 2026] [security2:error] [pid 1017536:tid 1017764] [client 20.104.18.15:23551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/akismet.php"] [unique_id "apK86iJcY4fy7tP-rU3eEwAAAnY"]
[Sat Aug 29 05:05:14.432926 2026] [security2:error] [pid 1017536:tid 1017737] [client 20.48.250.41:65519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/zxekqlxb.php"] [unique_id "apK86iJcY4fy7tP-rU3eFQAAAls"]
[Sat Aug 29 05:05:14.436129 2026] [security2:error] [pid 1018003:tid 1018205] [client 52.139.37.240:21396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/xmrlpc.php"] [unique_id "apK86jAh5Y1i2tUxg4HchgAABe4"]
[Sat Aug 29 05:05:14.445239 2026] [security2:error] [pid 1017536:tid 1017750] [client 20.48.250.41:61751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/error_log.php"] [unique_id "apK86iJcY4fy7tP-rU3eGQAAAmg"]
[Sat Aug 29 05:05:14.457752 2026] [security2:error] [pid 1017536:tid 1017782] [client 20.63.81.20:26435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/biufile.php"] [unique_id "apK86iJcY4fy7tP-rU3eGgAAAog"]
[Sat Aug 29 05:05:14.458336 2026] [security2:error] [pid 1017536:tid 1017790] [client 20.104.18.15:7055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/img.php"] [unique_id "apK86iJcY4fy7tP-rU3eGwAAApA"]
[Sat Aug 29 05:05:14.458929 2026] [security2:error] [pid 1018003:tid 1018196] [client 158.23.184.117:21894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK86jAh5Y1i2tUxg4HchwAABeU"]
[Sat Aug 29 05:05:14.459599 2026] [security2:error] [pid 1018003:tid 1018275] [client 158.23.184.117:61588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.howtostudyexams.com"] [uri "/wp-content/languages/themes/num.php"] [unique_id "apK86jAh5Y1i2tUxg4HciAAABjM"]
[Sat Aug 29 05:05:14.459905 2026] [security2:error] [pid 1017536:tid 1017777] [client 20.48.160.90:63610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/wp-settings.php"] [unique_id "apK86iJcY4fy7tP-rU3eHAAAAoM"]
[Sat Aug 29 05:05:14.473019 2026] [security2:error] [pid 1017536:tid 1017649] [remote 93.123.109.228:48278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/api/phpinfo.php"] [unique_id "apK86iJcY4fy7tP-rU3eHQACV3A"]
[Sat Aug 29 05:05:14.477134 2026] [security2:error] [pid 1017536:tid 1017719] [client 40.83.93.50:1934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.superugly.com"] [uri "/wp-content/content.php"] [unique_id "apK86iJcY4fy7tP-rU3eHwAAAkk"]
[Sat Aug 29 05:05:14.483116 2026] [security2:error] [pid 1017536:tid 1017788] [client 52.139.37.240:28248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jjfreeman.net"] [uri "/wp-sigunq.php"] [unique_id "apK86iJcY4fy7tP-rU3eIAAAAo4"]
[Sat Aug 29 05:05:14.491851 2026] [security2:error] [pid 1018003:tid 1018193] [client 185.104.184.230:49428] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.youthspeakoutint.org"] [uri "/autodiscover/autodiscover.xml/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "apK86jAh5Y1i2tUxg4HcigAABeI"]
[Sat Aug 29 05:05:14.499534 2026] [cgid:error] [pid 1017536:tid 1017650] [remote 104.196.51.122:56248] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:14.507742 2026] [security2:error] [pid 1018003:tid 1018179] [client 20.63.219.114:17922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/wp-contentt.php"] [unique_id "apK86jAh5Y1i2tUxg4HciwAABdQ"]
[Sat Aug 29 05:05:14.513985 2026] [security2:error] [pid 1018003:tid 1018151] [client 20.48.250.41:23517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/wp-style.php"] [unique_id "apK86jAh5Y1i2tUxg4HcjAAABbg"]
[Sat Aug 29 05:05:14.519911 2026] [cgid:error] [pid 1017536:tid 1017609] [remote 104.196.51.122:56248] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:14.520278 2026] [cgid:error] [pid 1017536:tid 1017660] [remote 104.196.51.122:56248] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:14.521821 2026] [cgid:error] [pid 1017536:tid 1017641] [remote 104.196.51.122:56248] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:14.522086 2026] [cgid:error] [pid 1017536:tid 1017651] [remote 104.196.51.122:56248] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:14.522318 2026] [cgid:error] [pid 1017536:tid 1017661] [remote 104.196.51.122:56248] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:14.531878 2026] [security2:error] [pid 1017536:tid 1017731] [client 20.104.18.15:13206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/akismet.php"] [unique_id "apK86iJcY4fy7tP-rU3eLwAAAlU"]
[Sat Aug 29 05:05:14.534440 2026] [security2:error] [pid 1017536:tid 1017681] [client 20.104.49.130:50565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.danesquality.com"] [uri "/classwithtostring.php"] [unique_id "apK86iJcY4fy7tP-rU3eMAAAAiM"]
[Sat Aug 29 05:05:14.539466 2026] [security2:error] [pid 1017536:tid 1017728] [client 20.48.251.3:57897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/log.php"] [unique_id "apK86iJcY4fy7tP-rU3eMQAAAlI"]
[Sat Aug 29 05:05:14.541103 2026] [security2:error] [pid 1017536:tid 1017789] [client 45.3.39.168:23931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.39.3.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK86iJcY4fy7tP-rU3eJgAAAo8"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:14.556417 2026] [security2:error] [pid 1018003:tid 1018235] [client 158.23.184.117:25575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/.dj/index.php"] [unique_id "apK86jAh5Y1i2tUxg4HcjQAABgs"]
[Sat Aug 29 05:05:14.563818 2026] [security2:error] [pid 1018003:tid 1018156] [client 20.48.250.41:65410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/init.php"] [unique_id "apK86jAh5Y1i2tUxg4HcjgAABb0"]
[Sat Aug 29 05:05:14.564178 2026] [security2:error] [pid 1018003:tid 1018266] [client 52.139.37.240:25072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/abc.php"] [unique_id "apK86jAh5Y1i2tUxg4HcjwAABio"]
[Sat Aug 29 05:05:14.564685 2026] [security2:error] [pid 1017536:tid 1017713] [client 20.48.160.90:45899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/okxoby.php"] [unique_id "apK86iJcY4fy7tP-rU3eNQAAAkM"]
[Sat Aug 29 05:05:14.566657 2026] [security2:error] [pid 1017536:tid 1017739] [client 20.104.18.15:36859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/zoo1.php"] [unique_id "apK86iJcY4fy7tP-rU3eNgAAAl0"]
[Sat Aug 29 05:05:14.586761 2026] [security2:error] [pid 1018003:tid 1018208] [client 168.107.94.195:51120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK86jAh5Y1i2tUxg4HckAAABfE"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:14.591229 2026] [security2:error] [pid 1017536:tid 1017668] [client 20.48.160.90:62716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/wp-signup.php"] [unique_id "apK86iJcY4fy7tP-rU3eOQAAAhY"]
[Sat Aug 29 05:05:14.598026 2026] [security2:error] [pid 1017536:tid 1017735] [client 158.23.184.117:14492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.uscgpipeband.org"] [uri "/wp-admin/link-add.php"] [unique_id "apK86iJcY4fy7tP-rU3eOwAAAlk"]
[Sat Aug 29 05:05:14.604516 2026] [security2:error] [pid 1018003:tid 1018152] [client 20.63.81.20:26528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/coffexium.php"] [unique_id "apK86jAh5Y1i2tUxg4HckQAABbk"]
[Sat Aug 29 05:05:14.605810 2026] [security2:error] [pid 1018003:tid 1018192] [client 158.23.184.117:21934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/.well-known/home.php"] [unique_id "apK86jAh5Y1i2tUxg4HckgAABeE"]
[Sat Aug 29 05:05:14.607612 2026] [security2:error] [pid 1017536:tid 1017761] [client 4.232.148.111:7661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/storage/rip.php"] [unique_id "apK86iJcY4fy7tP-rU3ePgAAAnM"]
[Sat Aug 29 05:05:14.608284 2026] [security2:error] [pid 1018003:tid 1018175] [client 20.63.219.114:14597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/flower.php"] [unique_id "apK86jAh5Y1i2tUxg4HckwAABdA"]
[Sat Aug 29 05:05:14.614568 2026] [security2:error] [pid 1018003:tid 1018218] [client 20.104.18.15:23451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/ajax.php"] [unique_id "apK86jAh5Y1i2tUxg4HclAAABfs"]
[Sat Aug 29 05:05:14.623845 2026] [core:error] [pid 1017536:tid 1017710] [client 158.23.184.117:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:14.623858 2026] [core:error] [pid 1017536:tid 1017710] [client 158.23.184.117:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:14.632658 2026] [security2:error] [pid 1017536:tid 1017678] [client 158.23.184.117:61597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.howtostudyexams.com"] [uri "/wp.php"] [unique_id "apK86iJcY4fy7tP-rU3eQAAAAiA"]
[Sat Aug 29 05:05:14.635434 2026] [security2:error] [pid 1017536:tid 1017770] [client 158.23.147.79:62736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK86iJcY4fy7tP-rU3eQQAAAnw"]
[Sat Aug 29 05:05:14.651473 2026] [security2:error] [pid 1017536:tid 1017772] [client 20.48.250.41:61696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/403.php"] [unique_id "apK86iJcY4fy7tP-rU3eRAAAAn4"]
[Sat Aug 29 05:05:14.652473 2026] [security2:error] [pid 1017536:tid 1017666] [client 52.139.37.240:20736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/about/function.php"] [unique_id "apK86iJcY4fy7tP-rU3eRgAAAhQ"]
[Sat Aug 29 05:05:14.655518 2026] [security2:error] [pid 1017536:tid 1017734] [client 68.155.159.216:57410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/wp-admin/css/index.php"] [unique_id "apK86iJcY4fy7tP-rU3eRwAAAlg"]
[Sat Aug 29 05:05:14.655792 2026] [security2:error] [pid 1017536:tid 1017698] [client 20.104.18.15:46990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/wp-content/k.php"] [unique_id "apK86iJcY4fy7tP-rU3eSAAAAjQ"]
[Sat Aug 29 05:05:14.656169 2026] [security2:error] [pid 1017536:tid 1017748] [client 68.155.159.216:12179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-content/admin.php"] [unique_id "apK86iJcY4fy7tP-rU3eSQAAAmY"]
[Sat Aug 29 05:05:14.661017 2026] [security2:error] [pid 1017536:tid 1017723] [client 143.244.57.82:49334] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "wincosir.enproftp.com"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "apK86iJcY4fy7tP-rU3eTAAAAk0"]
[Sat Aug 29 05:05:14.664140 2026] [security2:error] [pid 1018003:tid 1018171] [client 74.248.24.12:3861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK86jAh5Y1i2tUxg4HclwAABcw"]
[Sat Aug 29 05:05:14.664968 2026] [security2:error] [pid 1017536:tid 1017747] [client 20.104.18.15:7054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/222.php"] [unique_id "apK86iJcY4fy7tP-rU3eTgAAAmU"]
[Sat Aug 29 05:05:14.665498 2026] [security2:error] [pid 1017536:tid 1017714] [client 20.104.18.15:13264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/ajax.php"] [unique_id "apK86iJcY4fy7tP-rU3eTwAAAkQ"]
[Sat Aug 29 05:05:14.677249 2026] [security2:error] [pid 1017536:tid 1017778] [client 20.48.251.3:57870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/ebahvhhh.php"] [unique_id "apK86iJcY4fy7tP-rU3eUAAAAoQ"]
[Sat Aug 29 05:05:14.679566 2026] [security2:error] [pid 1017536:tid 1017729] [client 52.139.37.240:28242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jjfreeman.net"] [uri "/07.php"] [unique_id "apK86iJcY4fy7tP-rU3eUQAAAlM"]
[Sat Aug 29 05:05:14.682801 2026] [security2:error] [pid 1018003:tid 1018207] [client 20.196.209.81:15748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/contentloader1.php"] [unique_id "apK86jAh5Y1i2tUxg4HcmAAABfA"]
[Sat Aug 29 05:05:14.688648 2026] [security2:error] [pid 1018003:tid 1018248] [client 158.158.54.35:22525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/xmlrpc.php"] [unique_id "apK86jAh5Y1i2tUxg4HclgAABhg"]
[Sat Aug 29 05:05:14.695567 2026] [security2:error] [pid 1017536:tid 1017702] [client 20.104.18.15:36831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/radio.php"] [unique_id "apK86iJcY4fy7tP-rU3eVQAAAjg"]
[Sat Aug 29 05:05:14.699715 2026] [security2:error] [pid 1018003:tid 1018214] [client 20.48.160.90:45872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/esuutzzx.php"] [unique_id "apK86jAh5Y1i2tUxg4HcmQAABfc"]
[Sat Aug 29 05:05:14.701408 2026] [security2:error] [pid 1018003:tid 1018268] [client 158.23.184.117:25116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/.info.php"] [unique_id "apK86jAh5Y1i2tUxg4HcmgAABiw"]
[Sat Aug 29 05:05:14.719994 2026] [security2:error] [pid 1017536:tid 1017708] [client 20.48.160.90:62712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/wp-conffg.php"] [unique_id "apK86iJcY4fy7tP-rU3eVwAAAj4"]
[Sat Aug 29 05:05:14.730007 2026] [security2:error] [pid 1017536:tid 1017726] [client 20.196.209.81:19356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK86iJcY4fy7tP-rU3eWQAAAlA"]
[Sat Aug 29 05:05:14.741132 2026] [security2:error] [pid 1017536:tid 1017779] [client 20.48.250.41:23547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/browse.php"] [unique_id "apK86iJcY4fy7tP-rU3eWgAAAoU"]
[Sat Aug 29 05:05:14.742537 2026] [security2:error] [pid 1017536:tid 1017693] [client 68.155.159.216:50316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK86iJcY4fy7tP-rU3eWwAAAi8"]
[Sat Aug 29 05:05:14.745966 2026] [security2:error] [pid 1018003:tid 1018188] [client 158.23.184.117:14466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.uscgpipeband.org"] [uri "/wp-includes/Text.php"] [unique_id "apK86jAh5Y1i2tUxg4HcmwAABd0"]
[Sat Aug 29 05:05:14.746447 2026] [security2:error] [pid 1017536:tid 1017574] [remote 104.196.115.188:34094] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "infinitidealership.com"] [uri "/icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ"] [unique_id "apK86iJcY4fy7tP-rU3eXgACMiU"]
[Sat Aug 29 05:05:14.748399 2026] [security2:error] [pid 1017536:tid 1017553] [remote 104.196.115.188:34094] ModSecurity: Access denied with code 500 (phase 1) (Error: Connection drop requested but failed to close the  socket). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "infinitidealership.com"] [uri "/api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ"] [unique_id "apK86iJcY4fy7tP-rU3eYQACMhA"]
[Sat Aug 29 05:05:14.748888 2026] [security2:error] [pid 1018003:tid 1018239] [client 158.23.147.79:38721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/hehehehe.php"] [unique_id "apK86jAh5Y1i2tUxg4HcnAAABg8"]
[Sat Aug 29 05:05:14.749580 2026] [security2:error] [pid 1017536:tid 1017546] [remote 104.196.115.188:34094] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/@fs/var/task/.env"] [unique_id "apK86iJcY4fy7tP-rU3eYAACMgk"]
[Sat Aug 29 05:05:14.752569 2026] [security2:error] [pid 1017536:tid 1017692] [client 158.23.184.117:21905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/.well-known/index.php"] [unique_id "apK86iJcY4fy7tP-rU3eYwAAAi4"]
[Sat Aug 29 05:05:14.758221 2026] [security2:error] [pid 1017536:tid 1017712] [client 20.63.81.20:26438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/coffee.php"] [unique_id "apK86iJcY4fy7tP-rU3eZQAAAkI"]
[Sat Aug 29 05:05:14.759529 2026] [security2:error] [pid 1017536:tid 1017736] [client 20.48.250.41:65512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/term.php"] [unique_id "apK86iJcY4fy7tP-rU3eZgAAAlo"]
[Sat Aug 29 05:05:14.765410 2026] [security2:error] [pid 1018003:tid 1018230] [client 52.139.37.240:25068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/c1.php"] [unique_id "apK86jAh5Y1i2tUxg4HcnQAABgY"]
[Sat Aug 29 05:05:14.782378 2026] [security2:error] [pid 1018003:tid 1018273] [client 158.23.184.117:6507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.howtostudyexams.com"] [uri "/xmlrpc.php"] [unique_id "apK86jAh5Y1i2tUxg4HcngAABjE"]
[Sat Aug 29 05:05:14.789680 2026] [security2:error] [pid 1018003:tid 1018157] [client 20.104.18.15:23502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/atomlib.php"] [unique_id "apK86jAh5Y1i2tUxg4HcnwAABb4"]
[Sat Aug 29 05:05:14.793924 2026] [security2:error] [pid 1017536:tid 1017792] [client 20.104.18.15:13194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/atomlib.php"] [unique_id "apK86iJcY4fy7tP-rU3ebQAAApI"]
[Sat Aug 29 05:05:14.799801 2026] [security2:error] [pid 1017536:tid 1017715] [client 20.203.141.11:35594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "germanmorenoperez.com"] [uri "/init.php"] [unique_id "apK86iJcY4fy7tP-rU3ebwAAAkU"]
[Sat Aug 29 05:05:14.800415 2026] [security2:error] [pid 1017536:tid 1017737] [client 20.48.250.41:61778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/cytyr.php"] [unique_id "apK86iJcY4fy7tP-rU3ecAAAAls"]
[Sat Aug 29 05:05:14.800427 2026] [security2:error] [pid 1017536:tid 1017764] [client 4.205.62.107:61858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/hochladen.form.php"] [unique_id "apK86iJcY4fy7tP-rU3ecQAAAnY"]
[Sat Aug 29 05:05:14.805116 2026] [security2:error] [pid 1017536:tid 1017750] [client 20.48.251.3:28420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/asa.php"] [unique_id "apK86iJcY4fy7tP-rU3edAAAAmg"]
[Sat Aug 29 05:05:14.811514 2026] [security2:error] [pid 1018003:tid 1018180] [client 4.205.62.107:21868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/wpver.php"] [unique_id "apK86jAh5Y1i2tUxg4HcoAAABdU"]
[Sat Aug 29 05:05:14.819142 2026] [security2:error] [pid 1017536:tid 1017537] [remote 35.243.213.218:46954] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mikeycunningham.com"] [uri "/config/.env"] [unique_id "apK86iJcY4fy7tP-rU3edwACFQA"]
[Sat Aug 29 05:05:14.819923 2026] [security2:error] [pid 1018003:tid 1018259] [client 158.23.147.79:30661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK86jAh5Y1i2tUxg4HcoQAABiM"]
[Sat Aug 29 05:05:14.839454 2026] [security2:error] [pid 1017536:tid 1017688] [client 20.104.18.15:46925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/os.php"] [unique_id "apK86iJcY4fy7tP-rU3eeQAAAio"]
[Sat Aug 29 05:05:14.841176 2026] [security2:error] [pid 1017536:tid 1017758] [client 20.48.160.90:45917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/replace.php"] [unique_id "apK86iJcY4fy7tP-rU3eegAAAnA"]
[Sat Aug 29 05:05:14.847060 2026] [cgid:error] [pid 1017536:tid 1017538] [remote 104.196.51.122:56248] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:14.847087 2026] [cgid:error] [pid 1017536:tid 1017597] [remote 104.196.51.122:56248] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:14.848092 2026] [security2:error] [pid 1018003:tid 1018249] [client 158.23.184.117:24867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/.trash7206/index.php"] [unique_id "apK86jAh5Y1i2tUxg4HcogAABhk"]
[Sat Aug 29 05:05:14.849647 2026] [security2:error] [pid 1018003:tid 1018199] [client 52.139.37.240:21380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/an.php"] [unique_id "apK86jAh5Y1i2tUxg4HcowAABeg"]
[Sat Aug 29 05:05:14.857044 2026] [security2:error] [pid 1018003:tid 1018225] [client 68.155.159.216:16146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.showerdoorsdubuque.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK86jAh5Y1i2tUxg4HcpAAABgI"]
[Sat Aug 29 05:05:14.859601 2026] [cgid:error] [pid 1017536:tid 1017598] [remote 104.196.51.122:56248] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:14.859715 2026] [cgid:error] [pid 1017536:tid 1017543] [remote 104.196.51.122:56248] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:14.862043 2026] [cgid:error] [pid 1017536:tid 1017588] [remote 104.196.51.122:56248] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:14.862068 2026] [security2:error] [pid 1017536:tid 1017755] [client 20.63.219.114:2006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/theme.php"] [unique_id "apK86iJcY4fy7tP-rU3ehQAAAm0"]
[Sat Aug 29 05:05:14.863335 2026] [security2:error] [pid 1017536:tid 1017686] [client 20.48.160.90:28631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/wp-validate.php"] [unique_id "apK86iJcY4fy7tP-rU3ehgAAAig"]
[Sat Aug 29 05:05:14.865930 2026] [security2:error] [pid 1018003:tid 1018271] [client 20.104.18.15:36782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/one.php"] [unique_id "apK86jAh5Y1i2tUxg4HcpQAABi8"]
[Sat Aug 29 05:05:14.866820 2026] [cgid:error] [pid 1017536:tid 1017664] [remote 104.196.51.122:56248] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:14.876243 2026] [security2:error] [pid 1017536:tid 1017720] [client 20.63.219.114:9349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "compropolis.mx"] [uri "/class-wp-cmd.php"] [unique_id "apK86iJcY4fy7tP-rU3eigAAAko"]
[Sat Aug 29 05:05:14.881509 2026] [security2:error] [pid 1018003:tid 1018227] [client 68.155.159.216:16197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/.well-known/index.php"] [unique_id "apK86jAh5Y1i2tUxg4HcpgAABgQ"]
[Sat Aug 29 05:05:14.891526 2026] [security2:error] [pid 1017536:tid 1017776] [client 158.23.184.117:14478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.uscgpipeband.org"] [uri "/wp-trackback.php"] [unique_id "apK86iJcY4fy7tP-rU3ejQAAAoI"]
[Sat Aug 29 05:05:14.897676 2026] [security2:error] [pid 1018003:tid 1018224] [client 158.23.184.117:21893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/.well-known/login.php"] [unique_id "apK86jAh5Y1i2tUxg4HcqAAABgE"]
[Sat Aug 29 05:05:14.897705 2026] [security2:error] [pid 1018003:tid 1018243] [client 52.139.37.240:64247] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "autodiscover.jjfreeman.net"] [uri "/c99.php"] [unique_id "apK86jAh5Y1i2tUxg4HcpwAABhM"]
[Sat Aug 29 05:05:14.904351 2026] [security2:error] [pid 1017536:tid 1017683] [client 20.48.250.41:23534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/zoo.php"] [unique_id "apK86iJcY4fy7tP-rU3ejgAAAiU"]
[Sat Aug 29 05:05:14.917464 2026] [autoindex:error] [pid 1017536:tid 1017705] [client 4.232.148.111:14415] AH01276: Cannot serve directory /home4/ehfields/public_html/tiaandephraim/wp-admin/maint/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:05:14.922261 2026] [security2:error] [pid 1018003:tid 1018200] [client 20.63.81.20:26604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/classwithtostring.php"] [unique_id "apK86jAh5Y1i2tUxg4HcrAAABek"]
[Sat Aug 29 05:05:14.932175 2026] [security2:error] [pid 1018003:tid 1018159] [client 45.154.98.191:50503] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.acovib.com"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "apK86jAh5Y1i2tUxg4HcrQAABcA"]
[Sat Aug 29 05:05:14.936303 2026] [security2:error] [pid 1018003:tid 1018263] [client 158.23.184.117:6470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.howtostudyexams.com"] [uri "/app.php"] [unique_id "apK86jAh5Y1i2tUxg4HcrgAABic"]
[Sat Aug 29 05:05:14.936758 2026] [security2:error] [pid 1018003:tid 1018167] [client 158.23.147.79:24560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/goat.php"] [unique_id "apK86jAh5Y1i2tUxg4HcrwAABcg"]
[Sat Aug 29 05:05:14.941290 2026] [security2:error] [pid 1018003:tid 1018265] [client 20.48.250.41:64143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/aaa.php"] [unique_id "apK86jAh5Y1i2tUxg4HcsQAABik"]
[Sat Aug 29 05:05:14.947874 2026] [security2:error] [pid 1018003:tid 1018223] [client 20.48.251.3:57793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/radio.php"] [unique_id "apK86jAh5Y1i2tUxg4HcsgAABgA"]
[Sat Aug 29 05:05:14.954126 2026] [security2:error] [pid 1018003:tid 1018263] [client 20.104.18.15:7060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/key.php"] [unique_id "apK86jAh5Y1i2tUxg4HcswAABic"]
[Sat Aug 29 05:05:14.954500 2026] [security2:error] [pid 1017536:tid 1017774] [client 4.205.62.107:22341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/greem_res.php"] [unique_id "apK86iJcY4fy7tP-rU3ekgAAAoA"]
[Sat Aug 29 05:05:14.957442 2026] [security2:error] [pid 1018003:tid 1018163] [client 20.104.18.15:23501] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "louiseandkane.strangeworx.com"] [uri "/1.php"] [unique_id "apK86jAh5Y1i2tUxg4HctAAABcQ"]
[Sat Aug 29 05:05:14.957557 2026] [security2:error] [pid 1018003:tid 1018163] [client 20.104.18.15:23501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/1.php"] [unique_id "apK86jAh5Y1i2tUxg4HctAAABcQ"]
[Sat Aug 29 05:05:14.962618 2026] [security2:error] [pid 1018003:tid 1018270] [client 20.104.18.15:13289] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcontacts.doozytrack.com"] [uri "/1.php"] [unique_id "apK86jAh5Y1i2tUxg4HctQAABi4"]
[Sat Aug 29 05:05:14.963459 2026] [security2:error] [pid 1018003:tid 1018190] [client 20.48.250.41:61794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/galer.php"] [unique_id "apK86jAh5Y1i2tUxg4HctgAABd8"]
[Sat Aug 29 05:05:14.965843 2026] [security2:error] [pid 1018003:tid 1018270] [client 20.104.18.15:13289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/1.php"] [unique_id "apK86jAh5Y1i2tUxg4HctQAABi4"]
[Sat Aug 29 05:05:14.966535 2026] [security2:error] [pid 1018003:tid 1018242] [client 20.63.219.114:1929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/meta.php"] [unique_id "apK86jAh5Y1i2tUxg4HctwAABhI"]
[Sat Aug 29 05:05:14.966854 2026] [security2:error] [pid 1018003:tid 1018222] [client 52.139.37.240:24602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/index.php/feed/atom/"] [unique_id "apK86jAh5Y1i2tUxg4HcuAAABf8"]
[Sat Aug 29 05:05:14.966969 2026] [security2:error] [pid 1017536:tid 1017743] [client 40.83.93.50:3641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.superugly.com"] [uri "/wp-content/core.php"] [unique_id "apK86iJcY4fy7tP-rU3elQAAAmE"]
[Sat Aug 29 05:05:14.970339 2026] [security2:error] [pid 1017536:tid 1017743] [client 168.107.94.195:51656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK86iJcY4fy7tP-rU3elgAAAmE"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:14.980875 2026] [core:error] [pid 1017536:tid 1017775] [client 74.248.24.12:15231] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:14.980898 2026] [core:error] [pid 1017536:tid 1017775] [client 74.248.24.12:15231] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:14.985609 2026] [security2:error] [pid 1017536:tid 1017739] [client 20.48.160.90:26694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/gulu.php"] [unique_id "apK86iJcY4fy7tP-rU3emAAAAl0"]
[Sat Aug 29 05:05:14.996659 2026] [security2:error] [pid 1017536:tid 1017558] [remote 104.196.51.122:56248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/frontend/.env"] [unique_id "apK86iJcY4fy7tP-rU3emQACZBU"]
[Sat Aug 29 05:05:15.000632 2026] [security2:error] [pid 1018003:tid 1018166] [client 158.23.184.117:25549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/.trash7206/min.php"] [unique_id "apK86jAh5Y1i2tUxg4HcuQAABcc"]
[Sat Aug 29 05:05:15.002623 2026] [security2:error] [pid 1018003:tid 1018185] [client 20.104.18.15:47076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/htio.php"] [unique_id "apK86zAh5Y1i2tUxg4HcugAABdo"]
[Sat Aug 29 05:05:15.019154 2026] [security2:error] [pid 1017536:tid 1017589] [remote 104.196.51.122:56248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/server/.env"] [unique_id "apK86yJcY4fy7tP-rU3emgACczQ"]
[Sat Aug 29 05:05:15.019150 2026] [security2:error] [pid 1017536:tid 1017577] [remote 104.196.51.122:56248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/app/.env"] [unique_id "apK86yJcY4fy7tP-rU3enAACcyg"]
[Sat Aug 29 05:05:15.027961 2026] [security2:error] [pid 1017536:tid 1017571] [remote 104.196.51.122:56248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/src/.env"] [unique_id "apK86yJcY4fy7tP-rU3eoAACcyI"]
[Sat Aug 29 05:05:15.031592 2026] [security2:error] [pid 1017536:tid 1017603] [remote 104.196.51.122:56248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/production/.env"] [unique_id "apK86yJcY4fy7tP-rU3engACc0I"]
[Sat Aug 29 05:05:15.031908 2026] [security2:error] [pid 1017536:tid 1017606] [remote 104.196.51.122:56248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/dev/.env"] [unique_id "apK86yJcY4fy7tP-rU3enwACc0U"]
[Sat Aug 29 05:05:15.038017 2026] [security2:error] [pid 1018003:tid 1018240] [client 158.23.184.117:14479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.uscgpipeband.org"] [uri "/wp-admin/maint.php"] [unique_id "apK86zAh5Y1i2tUxg4HcuwAABhA"]
[Sat Aug 29 05:05:15.044289 2026] [security2:error] [pid 1018003:tid 1018201] [client 20.104.18.15:36808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/503.php"] [unique_id "apK86zAh5Y1i2tUxg4HcvAAABeo"]
[Sat Aug 29 05:05:15.044830 2026] [security2:error] [pid 1017536:tid 1017670] [client 52.139.37.240:21427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/asw.php"] [unique_id "apK86yJcY4fy7tP-rU3eoQAAAhg"]
[Sat Aug 29 05:05:15.046853 2026] [security2:error] [pid 1018003:tid 1018219] [client 158.23.184.117:21866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/.well-known/logs233/index.php"] [unique_id "apK86zAh5Y1i2tUxg4HcvQAABfw"]
[Sat Aug 29 05:05:15.056980 2026] [security2:error] [pid 1017536:tid 1017771] [client 20.104.49.130:51117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/txets.php"] [unique_id "apK86yJcY4fy7tP-rU3epAAAAn0"]
[Sat Aug 29 05:05:15.068257 2026] [security2:error] [pid 1017536:tid 1017734] [client 20.63.81.20:26467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/wp-ws68.php"] [unique_id "apK86yJcY4fy7tP-rU3epQAAAlg"]
[Sat Aug 29 05:05:15.072396 2026] [security2:error] [pid 1018003:tid 1018210] [client 185.104.184.230:49440] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.youthspeakoutint.org"] [uri "/autodiscover/autodiscover.xml/wp/wp-includes/wlwmanifest.xml"] [unique_id "apK86zAh5Y1i2tUxg4HcvwAABfM"]
[Sat Aug 29 05:05:15.073887 2026] [security2:error] [pid 1018003:tid 1018169] [client 20.48.250.41:23494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/elp.php"] [unique_id "apK86zAh5Y1i2tUxg4HcwAAABco"]
[Sat Aug 29 05:05:15.075251 2026] [security2:error] [pid 1018003:tid 1018267] [client 20.48.250.41:12392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "employedlawyer.com"] [uri "/lkui.php"] [unique_id "apK86zAh5Y1i2tUxg4HcwQAABis"]
[Sat Aug 29 05:05:15.080617 2026] [security2:error] [pid 1018003:tid 1018261] [client 158.23.147.79:23536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ridetimewinnipegservicetiresrims.ca"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK86zAh5Y1i2tUxg4HcwgAABiU"]
[Sat Aug 29 05:05:15.083427 2026] [security2:error] [pid 1018003:tid 1018252] [client 104.207.38.99:61237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 99.38.207.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK86zAh5Y1i2tUxg4HcvgAABhw"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:15.084323 2026] [security2:error] [pid 1018003:tid 1018152] [client 158.23.184.117:56671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.howtostudyexams.com"] [uri "/aaa.php"] [unique_id "apK86zAh5Y1i2tUxg4HcwwAABbk"]
[Sat Aug 29 05:05:15.087205 2026] [security2:error] [pid 1017536:tid 1017698] [client 20.48.251.3:57901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/xa.php"] [unique_id "apK86yJcY4fy7tP-rU3epgAAAjQ"]
[Sat Aug 29 05:05:15.091609 2026] [security2:error] [pid 1018003:tid 1018236] [client 4.232.148.111:15627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/zoom1.php"] [unique_id "apK86zAh5Y1i2tUxg4HcxAAABgw"]
[Sat Aug 29 05:05:15.091609 2026] [security2:error] [pid 1017536:tid 1017748] [client 68.155.159.216:51396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-admin/dropdown.php"] [unique_id "apK86yJcY4fy7tP-rU3epwAAAmY"]
[Sat Aug 29 05:05:15.094862 2026] [security2:error] [pid 1018003:tid 1018203] [client 20.48.250.41:61705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/baixy.php"] [unique_id "apK86zAh5Y1i2tUxg4HcxQAABew"]
[Sat Aug 29 05:05:15.098914 2026] [security2:error] [pid 1017536:tid 1017747] [client 4.232.148.111:14415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tiaandephraim.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK86yJcY4fy7tP-rU3eqAAAAmU"]
[Sat Aug 29 05:05:15.098940 2026] [security2:error] [pid 1017536:tid 1017765] [client 20.104.18.15:23364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/samll.php"] [unique_id "apK86yJcY4fy7tP-rU3eqQAAAnc"]
[Sat Aug 29 05:05:15.099268 2026] [security2:error] [pid 1017536:tid 1017760] [client 20.196.209.81:9525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/al.php"] [unique_id "apK86yJcY4fy7tP-rU3eqgAAAnI"]
[Sat Aug 29 05:05:15.106782 2026] [security2:error] [pid 1017536:tid 1017604] [remote 104.196.51.122:56248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/docker/.env"] [unique_id "apK86yJcY4fy7tP-rU3eqwACbkM"]
[Sat Aug 29 05:05:15.110929 2026] [security2:error] [pid 1018003:tid 1018214] [client 20.48.160.90:62604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/700.php"] [unique_id "apK86zAh5Y1i2tUxg4HcxgAABfc"]
[Sat Aug 29 05:05:15.112114 2026] [security2:error] [pid 1018003:tid 1018268] [client 20.48.250.41:65011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/xsox.php"] [unique_id "apK86zAh5Y1i2tUxg4HcxwAABiw"]
[Sat Aug 29 05:05:15.119108 2026] [security2:error] [pid 1018003:tid 1018188] [client 4.205.62.107:2934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/sale.php"] [unique_id "apK86zAh5Y1i2tUxg4HcyQAABd0"]
[Sat Aug 29 05:05:15.121925 2026] [security2:error] [pid 1018003:tid 1018175] [client 52.139.37.240:64238] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "autodiscover.jjfreeman.net"] [uri "/c99.php"] [unique_id "apK86zAh5Y1i2tUxg4HcygAABdA"]
[Sat Aug 29 05:05:15.127478 2026] [security2:error] [pid 1018003:tid 1018256] [client 20.196.209.81:19348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-admin/system.php"] [unique_id "apK86zAh5Y1i2tUxg4HczAAABiA"]
[Sat Aug 29 05:05:15.128694 2026] [security2:error] [pid 1017536:tid 1017613] [remote 104.196.51.122:56248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/old/.env"] [unique_id "apK86yJcY4fy7tP-rU3esQACS0w"]
[Sat Aug 29 05:05:15.130787 2026] [security2:error] [pid 1017536:tid 1017707] [client 20.48.160.90:45869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/gtghklk.php"] [unique_id "apK86yJcY4fy7tP-rU3esgAAAj0"]
[Sat Aug 29 05:05:15.134309 2026] [security2:error] [pid 1018003:tid 1018182] [client 158.158.54.35:15881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/filemanager.php"] [unique_id "apK86zAh5Y1i2tUxg4HczQAABdc"]
[Sat Aug 29 05:05:15.135539 2026] [security2:error] [pid 1018003:tid 1018220] [client 20.104.18.15:13210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/samll.php"] [unique_id "apK86zAh5Y1i2tUxg4HczgAABf0"]
[Sat Aug 29 05:05:15.135902 2026] [security2:error] [pid 1017536:tid 1017612] [remote 104.196.51.122:56248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/v2/.env"] [unique_id "apK86yJcY4fy7tP-rU3eswACLEs"]
[Sat Aug 29 05:05:15.146807 2026] [security2:error] [pid 1017536:tid 1017723] [client 158.23.184.117:25561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/.well-known//index.php"] [unique_id "apK86yJcY4fy7tP-rU3etAAAAk0"]
[Sat Aug 29 05:05:15.153124 2026] [security2:error] [pid 1017536:tid 1017550] [remote 104.196.51.122:56248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/v1/.env"] [unique_id "apK86yJcY4fy7tP-rU3etQAChQ0"]
[Sat Aug 29 05:05:15.154585 2026] [security2:error] [pid 1017536:tid 1017580] [remote 104.196.51.122:56248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/staging/.env"] [unique_id "apK86yJcY4fy7tP-rU3etgAChSs"]
[Sat Aug 29 05:05:15.165111 2026] [security2:error] [pid 1018003:tid 1018207] [client 52.139.37.240:58593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/root.php"] [unique_id "apK86zAh5Y1i2tUxg4Hc0gAABfA"]
[Sat Aug 29 05:05:15.167681 2026] [core:error] [pid 1018003:tid 1018198] [client 34.12.38.134:20838] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.167697 2026] [core:error] [pid 1018003:tid 1018198] [client 34.12.38.134:20838] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.172588 2026] [core:error] [pid 1018003:tid 1018260] [client 34.12.38.134:20872] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.172607 2026] [core:error] [pid 1018003:tid 1018260] [client 34.12.38.134:20872] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.173577 2026] [security2:error] [pid 1017536:tid 1017733] [client 20.104.18.15:7120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/chosen.php"] [unique_id "apK86yJcY4fy7tP-rU3euwAAAlc"]
[Sat Aug 29 05:05:15.174429 2026] [core:error] [pid 1018003:tid 1018193] [client 34.12.38.134:20980] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.174450 2026] [core:error] [pid 1018003:tid 1018193] [client 34.12.38.134:20980] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.174876 2026] [core:error] [pid 1017536:tid 1017783] [client 34.12.38.134:20834] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.174889 2026] [core:error] [pid 1017536:tid 1017783] [client 34.12.38.134:20834] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.180542 2026] [core:error] [pid 1018003:tid 1018269] [client 34.12.38.134:21134] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.180546 2026] [core:error] [pid 1018003:tid 1018275] [client 34.12.38.134:20878] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.180560 2026] [core:error] [pid 1018003:tid 1018269] [client 34.12.38.134:21134] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.180561 2026] [core:error] [pid 1018003:tid 1018275] [client 34.12.38.134:20878] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.185406 2026] [core:error] [pid 1018003:tid 1018195] [client 34.12.38.134:20852] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.185426 2026] [core:error] [pid 1018003:tid 1018195] [client 34.12.38.134:20852] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.185601 2026] [security2:error] [pid 1018003:tid 1018195] [client 34.12.38.134:20852] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/___proxy_subdomain_cpcontacts/index.php"] [unique_id "apK86zAh5Y1i2tUxg4Hc2wAABeQ"]
[Sat Aug 29 05:05:15.185800 2026] [core:error] [pid 1018003:tid 1018250] [client 34.12.38.134:20962] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.185807 2026] [core:error] [pid 1018003:tid 1018250] [client 34.12.38.134:20962] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.188688 2026] [core:error] [pid 1017536:tid 1017759] [client 34.12.38.134:20952] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.188721 2026] [core:error] [pid 1017536:tid 1017759] [client 34.12.38.134:20952] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.193733 2026] [security2:error] [pid 1018003:tid 1018162] [client 34.12.38.134:21064] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/___proxy_subdomain_cpcontacts/production/.env"] [unique_id "apK86zAh5Y1i2tUxg4Hc4gAABcM"]
[Sat Aug 29 05:05:15.193746 2026] [security2:error] [pid 1018003:tid 1018150] [client 34.12.38.134:20902] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/.env.vault"] [unique_id "apK86zAh5Y1i2tUxg4Hc4wAABbc"]
[Sat Aug 29 05:05:15.195465 2026] [security2:error] [pid 1017536:tid 1017732] [client 34.12.38.134:21160] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/___proxy_subdomain_cpcontacts/dev/.env"] [unique_id "apK86yJcY4fy7tP-rU3eywAAAlY"]
[Sat Aug 29 05:05:15.195911 2026] [security2:error] [pid 1017536:tid 1017751] [client 158.23.184.117:21873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/.well-known/maintenance.php"] [unique_id "apK86yJcY4fy7tP-rU3e0wAAAmk"]
[Sat Aug 29 05:05:15.197049 2026] [security2:error] [pid 1017536:tid 1017703] [client 4.205.62.107:53430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/session.php"] [unique_id "apK86yJcY4fy7tP-rU3e1AAAAjk"]
[Sat Aug 29 05:05:15.198743 2026] [security2:error] [pid 1017536:tid 1017695] [client 34.12.38.134:21050] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/___proxy_subdomain_cpcontacts/backup/.env"] [unique_id "apK86yJcY4fy7tP-rU3e0gAAAjE"]
[Sat Aug 29 05:05:15.198843 2026] [security2:error] [pid 1017536:tid 1017695] [client 34.12.38.134:21050] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/___proxy_subdomain_cpcontacts/backup/.env"] [unique_id "apK86yJcY4fy7tP-rU3e0gAAAjE"]
[Sat Aug 29 05:05:15.199438 2026] [core:error] [pid 1018003:tid 1018235] [client 34.12.38.134:20856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.199456 2026] [core:error] [pid 1018003:tid 1018235] [client 34.12.38.134:20856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.199496 2026] [core:error] [pid 1018003:tid 1018186] [client 34.12.38.134:20892] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.199506 2026] [core:error] [pid 1018003:tid 1018186] [client 34.12.38.134:20892] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.199758 2026] [core:error] [pid 1018003:tid 1018156] [client 34.12.38.134:20966] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.199774 2026] [core:error] [pid 1018003:tid 1018156] [client 34.12.38.134:20966] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.199840 2026] [core:error] [pid 1017536:tid 1017678] [client 34.12.38.134:21122] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.199859 2026] [core:error] [pid 1017536:tid 1017678] [client 34.12.38.134:21122] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.199951 2026] [security2:error] [pid 1017536:tid 1017770] [client 34.12.38.134:21072] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/___proxy_subdomain_cpcontacts/staging/.env"] [unique_id "apK86yJcY4fy7tP-rU3e1QAAAnw"]
[Sat Aug 29 05:05:15.200487 2026] [security2:error] [pid 1017536:tid 1017770] [client 34.12.38.134:21072] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/___proxy_subdomain_cpcontacts/staging/.env"] [unique_id "apK86yJcY4fy7tP-rU3e1QAAAnw"]
[Sat Aug 29 05:05:15.202883 2026] [security2:error] [pid 1018003:tid 1018266] [client 34.12.38.134:21028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/___proxy_subdomain_cpcontacts/client/.env"] [unique_id "apK86zAh5Y1i2tUxg4Hc6wAABio"]
[Sat Aug 29 05:05:15.203123 2026] [security2:error] [pid 1018003:tid 1018156] [client 34.12.38.134:20966] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/___proxy_subdomain_cpcontacts/index.php"] [unique_id "apK86zAh5Y1i2tUxg4Hc5QAABb0"]
[Sat Aug 29 05:05:15.203751 2026] [core:error] [pid 1018003:tid 1018251] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.203767 2026] [core:error] [pid 1018003:tid 1018251] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.204220 2026] [core:error] [pid 1018003:tid 1018199] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.204228 2026] [core:error] [pid 1018003:tid 1018199] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.204729 2026] [security2:error] [pid 1018003:tid 1018202] [client 20.104.18.15:46957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/dev.php"] [unique_id "apK86zAh5Y1i2tUxg4Hc7wAABes"]
[Sat Aug 29 05:05:15.205712 2026] [core:error] [pid 1018003:tid 1018249] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.205728 2026] [core:error] [pid 1018003:tid 1018249] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.206982 2026] [security2:error] [pid 1017536:tid 1017564] [remote 104.196.51.122:56248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/site/.env"] [unique_id "apK86yJcY4fy7tP-rU3e1wACgxs"]
[Sat Aug 29 05:05:15.207654 2026] [security2:error] [pid 1017536:tid 1017619] [remote 104.196.51.122:56248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/portal/.env"] [unique_id "apK86yJcY4fy7tP-rU3e2AACg1I"]
[Sat Aug 29 05:05:15.211913 2026] [security2:error] [pid 1017536:tid 1017730] [client 20.196.209.81:12092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/post.php"] [unique_id "apK86yJcY4fy7tP-rU3e2gAAAlQ"]
[Sat Aug 29 05:05:15.212904 2026] [core:error] [pid 1018003:tid 1018247] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.212925 2026] [core:error] [pid 1018003:tid 1018247] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.212951 2026] [core:error] [pid 1018003:tid 1018156] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.212961 2026] [core:error] [pid 1018003:tid 1018156] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.213187 2026] [core:error] [pid 1018003:tid 1018255] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.213204 2026] [core:error] [pid 1018003:tid 1018255] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.214602 2026] [core:error] [pid 1017536:tid 1017763] [client 74.248.24.12:15881] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.214623 2026] [core:error] [pid 1017536:tid 1017763] [client 74.248.24.12:15881] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.218975 2026] [security2:error] [pid 1018003:tid 1018234] [client 20.63.81.20:26531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/mgrr.php"] [unique_id "apK86zAh5Y1i2tUxg4Hc9wAABgo"]
[Sat Aug 29 05:05:15.220378 2026] [core:error] [pid 1018003:tid 1018224] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.220407 2026] [core:error] [pid 1018003:tid 1018224] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.226322 2026] [core:error] [pid 1018003:tid 1018159] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.226346 2026] [core:error] [pid 1018003:tid 1018159] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.227548 2026] [core:error] [pid 1018003:tid 1018167] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.227566 2026] [core:error] [pid 1018003:tid 1018167] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.229124 2026] [core:error] [pid 1018003:tid 1018255] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.229150 2026] [core:error] [pid 1018003:tid 1018255] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.229216 2026] [security2:error] [pid 1017536:tid 1017714] [client 20.63.219.114:17954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/alumni_reg.php"] [unique_id "apK86yJcY4fy7tP-rU3e3QAAAkQ"]
[Sat Aug 29 05:05:15.231324 2026] [security2:error] [pid 1018003:tid 1018242] [client 20.104.18.15:36841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/504.php"] [unique_id "apK86zAh5Y1i2tUxg4Hc_AAABhI"]
[Sat Aug 29 05:05:15.239493 2026] [security2:error] [pid 1017536:tid 1017565] [remote 104.196.51.122:56248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/.docker/.env"] [unique_id "apK86yJcY4fy7tP-rU3e3wACaxw"]
[Sat Aug 29 05:05:15.240202 2026] [security2:error] [pid 1017536:tid 1017742] [client 20.104.18.15:23428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/she11.php"] [unique_id "apK86yJcY4fy7tP-rU3e4AAAAmA"]
[Sat Aug 29 05:05:15.240969 2026] [security2:error] [pid 1017536:tid 1017792] [client 52.139.37.240:21407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/item.php"] [unique_id "apK86yJcY4fy7tP-rU3e4gAAApI"]
[Sat Aug 29 05:05:15.241804 2026] [security2:error] [pid 1017536:tid 1017728] [client 143.244.57.82:48358] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "wincosir.enproftp.com"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "apK86yJcY4fy7tP-rU3e4wAAAlI"]
[Sat Aug 29 05:05:15.243089 2026] [core:error] [pid 1018003:tid 1018181] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.243105 2026] [core:error] [pid 1018003:tid 1018181] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.244084 2026] [security2:error] [pid 1017536:tid 1017745] [client 20.48.251.3:57809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/ws61.php"] [unique_id "apK86yJcY4fy7tP-rU3e5AAAAmM"]
[Sat Aug 29 05:05:15.244344 2026] [core:error] [pid 1018003:tid 1018270] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.244369 2026] [core:error] [pid 1018003:tid 1018270] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.244667 2026] [security2:error] [pid 1017536:tid 1017686] [client 20.48.250.41:61818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/ava.php"] [unique_id "apK86yJcY4fy7tP-rU3e5QAAAig"]
[Sat Aug 29 05:05:15.248111 2026] [core:error] [pid 1018003:tid 1018249] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.248129 2026] [core:error] [pid 1018003:tid 1018249] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.249796 2026] [security2:error] [pid 1018003:tid 1018238] [client 20.48.160.90:63513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/c4.php"] [unique_id "apK86zAh5Y1i2tUxg4HdAgAABg4"]
[Sat Aug 29 05:05:15.250448 2026] [security2:error] [pid 1018003:tid 1018248] [client 20.203.141.11:29666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "germanmorenoperez.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "apK86zAh5Y1i2tUxg4HdAwAABhg"]
[Sat Aug 29 05:05:15.259494 2026] [security2:error] [pid 1017536:tid 1017711] [client 20.48.250.41:12514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "employedlawyer.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "apK86yJcY4fy7tP-rU3e6QAAAkE"]
[Sat Aug 29 05:05:15.264697 2026] [security2:error] [pid 1018003:tid 1018192] [client 4.205.62.107:61223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "troop264olney.net"] [uri "/linusadmin-phpinfo.php"] [unique_id "apK86zAh5Y1i2tUxg4HdBAAABeE"]
[Sat Aug 29 05:05:15.268482 2026] [core:error] [pid 1017536:tid 1017776] [client 74.7.230.42:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.268503 2026] [core:error] [pid 1017536:tid 1017776] [client 74.7.230.42:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.268650 2026] [security2:error] [pid 1017536:tid 1017776] [client 74.7.230.42:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "webdisk.steveslivemusic.com"] [uri "/___proxy_subdomain_webdisk/index.php"] [unique_id "apK86yJcY4fy7tP-rU3e6wAAAoI"]
[Sat Aug 29 05:05:15.269867 2026] [security2:error] [pid 1018003:tid 1018212] [client 158.23.184.117:14339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.uscgpipeband.org"] [uri "/wp-includes/num.php"] [unique_id "apK86zAh5Y1i2tUxg4HdBQAABfU"]
[Sat Aug 29 05:05:15.271507 2026] [security2:error] [pid 1017536:tid 1017694] [client 74.7.230.42:35202] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "webdisk.steveslivemusic.com"] [uri "/___proxy_subdomain_webdisk/robots.txt"] [unique_id "apK86yJcY4fy7tP-rU3e2wACMFY"]
[Sat Aug 29 05:05:15.279910 2026] [security2:error] [pid 1017536:tid 1017541] [remote 104.196.115.188:49502] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/@fs/.env"] [unique_id "apK86yJcY4fy7tP-rU3e8AACOwQ"]
[Sat Aug 29 05:05:15.279912 2026] [security2:error] [pid 1017536:tid 1017625] [remote 104.196.115.188:49502] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/@fs/.env"] [unique_id "apK86yJcY4fy7tP-rU3e7gACO1g"]
[Sat Aug 29 05:05:15.282914 2026] [security2:error] [pid 1017536:tid 1017569] [remote 104.196.115.188:49502] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/@fs/.env"] [unique_id "apK86yJcY4fy7tP-rU3e8QACOyA"]
[Sat Aug 29 05:05:15.287440 2026] [security2:error] [pid 1017536:tid 1017648] [remote 104.196.51.122:56248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/apps/.env"] [unique_id "apK86yJcY4fy7tP-rU3e8wACVW8"]
[Sat Aug 29 05:05:15.292206 2026] [security2:error] [pid 1018003:tid 1018243] [client 20.104.18.15:13277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/she11.php"] [unique_id "apK86zAh5Y1i2tUxg4HdBgAABhM"]
[Sat Aug 29 05:05:15.292821 2026] [security2:error] [pid 1017536:tid 1017757] [client 20.48.160.90:45827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/comand.php"] [unique_id "apK86yJcY4fy7tP-rU3e9AAAAm8"]
[Sat Aug 29 05:05:15.294165 2026] [security2:error] [pid 1017536:tid 1017720] [client 158.23.184.117:25564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/.well-known/about.php"] [unique_id "apK86yJcY4fy7tP-rU3e9gAAAko"]
[Sat Aug 29 05:05:15.302050 2026] [security2:error] [pid 1018003:tid 1018218] [client 158.23.184.117:6479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.howtostudyexams.com"] [uri "/hehe.php"] [unique_id "apK86zAh5Y1i2tUxg4HdBwAABfs"]
[Sat Aug 29 05:05:15.305646 2026] [security2:error] [pid 1017536:tid 1017646] [remote 104.196.51.122:56248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/env.old"] [unique_id "apK86yJcY4fy7tP-rU3e9wACI20"]
[Sat Aug 29 05:05:15.306684 2026] [security2:error] [pid 1017536:tid 1017634] [remote 104.196.51.122:56248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/env.bak"] [unique_id "apK86yJcY4fy7tP-rU3e-AACI2E"]
[Sat Aug 29 05:05:15.321653 2026] [security2:error] [pid 1018003:tid 1018165] [client 52.139.37.240:56822] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "autodiscover.jjfreeman.net"] [uri "/c99.php"] [unique_id "apK86zAh5Y1i2tUxg4HdCAAABcY"]
[Sat Aug 29 05:05:15.327082 2026] [security2:error] [pid 1018003:tid 1018037] [remote 74.7.227.154:56576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK86zAh5Y1i2tUxg4HdCgAF2BA"], referer: https://goodtogo.store/sitemap_index.xml
[Sat Aug 29 05:05:15.328432 2026] [security2:error] [pid 1018003:tid 1018152] [client 20.48.250.41:65460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/lkui.php"] [unique_id "apK86zAh5Y1i2tUxg4HdCwAABbk"]
[Sat Aug 29 05:05:15.331880 2026] [security2:error] [pid 1018003:tid 1018203] [client 68.155.159.216:18284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.baxterevents.com"] [uri "/worksec.php"] [unique_id "apK86zAh5Y1i2tUxg4HdDAAABew"]
[Sat Aug 29 05:05:15.342055 2026] [security2:error] [pid 1017536:tid 1017746] [client 158.23.147.79:50087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/cgi-bin/index.php"] [unique_id "apK86yJcY4fy7tP-rU3e_AAAAmQ"]
[Sat Aug 29 05:05:15.345420 2026] [security2:error] [pid 1017536:tid 1017774] [client 158.23.184.117:21919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/.well-known/min.php"] [unique_id "apK86yJcY4fy7tP-rU3e_QAAAoA"]
[Sat Aug 29 05:05:15.346238 2026] [security2:error] [pid 1017536:tid 1017772] [client 20.48.250.41:23518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/666.php"] [unique_id "apK86yJcY4fy7tP-rU3e_gAAAn4"]
[Sat Aug 29 05:05:15.351752 2026] [security2:error] [pid 1018003:tid 1018220] [client 168.107.94.195:51959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK86zAh5Y1i2tUxg4HdDQAABf0"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:15.353666 2026] [security2:error] [pid 1018003:tid 1018241] [client 20.63.219.114:1944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/randkeyword.php"] [unique_id "apK86zAh5Y1i2tUxg4HdDgAABhE"]
[Sat Aug 29 05:05:15.363894 2026] [security2:error] [pid 1018003:tid 1018219] [client 52.139.37.240:25038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/shell.php"] [unique_id "apK86zAh5Y1i2tUxg4HdDwAABfw"]
[Sat Aug 29 05:05:15.387711 2026] [security2:error] [pid 1017536:tid 1017756] [client 20.63.81.20:26573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/55.php"] [unique_id "apK86yJcY4fy7tP-rU3fAgAAAm4"]
[Sat Aug 29 05:05:15.392075 2026] [security2:error] [pid 1018003:tid 1018235] [client 20.48.160.90:63506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/wp-tymanage.php"] [unique_id "apK86zAh5Y1i2tUxg4HdEQAABgs"]
[Sat Aug 29 05:05:15.395220 2026] [security2:error] [pid 1018003:tid 1018186] [client 20.48.250.41:12334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "employedlawyer.com"] [uri "/motu.php"] [unique_id "apK86zAh5Y1i2tUxg4HdEgAABds"]
[Sat Aug 29 05:05:15.416086 2026] [security2:error] [pid 1018003:tid 1018156] [client 68.155.159.216:24532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK86zAh5Y1i2tUxg4HdFAAABb0"]
[Sat Aug 29 05:05:15.419422 2026] [security2:error] [pid 1017536:tid 1017667] [client 158.23.184.117:14484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.uscgpipeband.org"] [uri "/identity.php"] [unique_id "apK86yJcY4fy7tP-rU3fBQAAAhU"]
[Sat Aug 29 05:05:15.420630 2026] [security2:error] [pid 1017536:tid 1017687] [client 20.48.250.41:58497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/gdn.php"] [unique_id "apK86yJcY4fy7tP-rU3fBgAAAik"]
[Sat Aug 29 05:05:15.422419 2026] [security2:error] [pid 1018003:tid 1018196] [client 20.48.251.3:57914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/xza.php"] [unique_id "apK86zAh5Y1i2tUxg4HdFQAABeU"]
[Sat Aug 29 05:05:15.435108 2026] [security2:error] [pid 1017536:tid 1017638] [remote 104.196.51.122:56248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/.env.production.bak"] [unique_id "apK86yJcY4fy7tP-rU3fCAACPWU"]
[Sat Aug 29 05:05:15.438484 2026] [security2:error] [pid 1017536:tid 1017769] [client 20.48.160.90:40026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/wp_motu_myk3v.php"] [unique_id "apK86yJcY4fy7tP-rU3fCgAAAns"]
[Sat Aug 29 05:05:15.438740 2026] [security2:error] [pid 1018003:tid 1018254] [client 52.139.37.240:20755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/jga.php"] [unique_id "apK86zAh5Y1i2tUxg4HdFgAABh4"]
[Sat Aug 29 05:05:15.439478 2026] [security2:error] [pid 1017536:tid 1017706] [client 40.83.93.50:14265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.superugly.com"] [uri "/wp-content/db-status.php"] [unique_id "apK86yJcY4fy7tP-rU3fCwAAAjw"]
[Sat Aug 29 05:05:15.441352 2026] [security2:error] [pid 1017536:tid 1017691] [client 20.63.219.114:9390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "compropolis.mx"] [uri "/disagreed.php"] [unique_id "apK86yJcY4fy7tP-rU3fDAAAAi0"]
[Sat Aug 29 05:05:15.443581 2026] [security2:error] [pid 1017536:tid 1017644] [remote 104.196.115.188:49502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 188.115.196.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "infinitidealership.com"] [uri "/config/.env.php"] [unique_id "apK86yJcY4fy7tP-rU3fDQACPms"]
[Sat Aug 29 05:05:15.446787 2026] [security2:error] [pid 1017536:tid 1017702] [client 158.23.184.117:56667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.howtostudyexams.com"] [uri "/wp-includes/PHPMailer.php"] [unique_id "apK86yJcY4fy7tP-rU3fDgAAAjg"]
[Sat Aug 29 05:05:15.455465 2026] [security2:error] [pid 1017536:tid 1017660] [remote 104.196.51.122:56248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/@fs/.env"] [unique_id "apK86yJcY4fy7tP-rU3fEAACUHs"]
[Sat Aug 29 05:05:15.459447 2026] [security2:error] [pid 1017536:tid 1017656] [remote 104.196.51.122:56248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/@fs/root/.env"] [unique_id "apK86yJcY4fy7tP-rU3fFQACL3c"]
[Sat Aug 29 05:05:15.459741 2026] [security2:error] [pid 1017536:tid 1017661] [remote 104.196.51.122:56248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/.env.prod.bak"] [unique_id "apK86yJcY4fy7tP-rU3fEwACL3w"]
[Sat Aug 29 05:05:15.459741 2026] [security2:error] [pid 1017536:tid 1017651] [remote 104.196.51.122:56248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/api/.env.bak"] [unique_id "apK86yJcY4fy7tP-rU3fEgACL3I"]
[Sat Aug 29 05:05:15.461820 2026] [cgid:error] [pid 1017536:tid 1017592] [remote 104.196.51.122:56248] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:15.462275 2026] [security2:error] [pid 1018003:tid 1018271] [client 45.154.98.191:50742] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.acovib.com"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "apK86zAh5Y1i2tUxg4HdGgAABi8"]
[Sat Aug 29 05:05:15.478129 2026] [security2:error] [pid 1018003:tid 1018179] [client 20.48.250.41:64158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "apK86zAh5Y1i2tUxg4HdGwAABdQ"]
[Sat Aug 29 05:05:15.484170 2026] [security2:error] [pid 1018003:tid 1018224] [client 162.198.206.205:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutihomes.com"] [uri "/boats"] [unique_id "apK86zAh5Y1i2tUxg4HdHAAABgE"], referer: https://www.djiboutihomes.com/
[Sat Aug 29 05:05:15.491376 2026] [security2:error] [pid 1018003:tid 1018164] [client 158.23.184.117:21900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/.well-known/module.php"] [unique_id "apK86zAh5Y1i2tUxg4HdHQAABcU"]
[Sat Aug 29 05:05:15.502981 2026] [security2:error] [pid 1018003:tid 1018226] [client 158.23.184.117:56065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK86zAh5Y1i2tUxg4HdHwAABgM"]
[Sat Aug 29 05:05:15.503425 2026] [security2:error] [pid 1017536:tid 1017609] [remote 35.243.213.218:46954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 218.213.243.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mikeycunningham.com"] [uri "/wp-login.php"] [unique_id "apK86yJcY4fy7tP-rU3fDwACdkg"], referer: https://www.mikeycunningham.com/login
[Sat Aug 29 05:05:15.521197 2026] [security2:error] [pid 1017536:tid 1017778] [client 20.196.209.81:8947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-admin/test.php"] [unique_id "apK86yJcY4fy7tP-rU3fJwAAAoQ"]
[Sat Aug 29 05:05:15.523626 2026] [security2:error] [pid 1018003:tid 1018174] [client 52.139.37.240:28250] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "autodiscover.jjfreeman.net"] [uri "/c99.php"] [unique_id "apK86zAh5Y1i2tUxg4HdIQAABc8"]
[Sat Aug 29 05:05:15.528091 2026] [security2:error] [pid 1018003:tid 1018241] [client 74.248.24.12:17502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/a.php"] [unique_id "apK86zAh5Y1i2tUxg4HdIwAABhE"]
[Sat Aug 29 05:05:15.530808 2026] [security2:error] [pid 1017536:tid 1017673] [client 20.48.250.41:12422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "employedlawyer.com"] [uri "/Ov-Simple1.php"] [unique_id "apK86yJcY4fy7tP-rU3fKQAAAhs"]
[Sat Aug 29 05:05:15.540344 2026] [security2:error] [pid 1018003:tid 1018258] [client 20.48.160.90:62637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/ajfto.php"] [unique_id "apK86zAh5Y1i2tUxg4HdJAAABiI"]
[Sat Aug 29 05:05:15.543701 2026] [security2:error] [pid 1017536:tid 1017773] [client 20.196.209.81:9489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/global.php"] [unique_id "apK86yJcY4fy7tP-rU3fKwAAAn8"]
[Sat Aug 29 05:05:15.550243 2026] [cgid:error] [pid 1017536:tid 1017575] [remote 104.196.51.122:56248] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:15.550950 2026] [cgid:error] [pid 1017536:tid 1017539] [remote 104.196.51.122:56248] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:15.560891 2026] [security2:error] [pid 1018003:tid 1018164] [client 52.139.37.240:24611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK86zAh5Y1i2tUxg4HdJQAABcU"]
[Sat Aug 29 05:05:15.560921 2026] [security2:error] [pid 1018003:tid 1018151] [client 20.63.81.20:26542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/yj09.php"] [unique_id "apK86zAh5Y1i2tUxg4HdJgAABbg"]
[Sat Aug 29 05:05:15.575981 2026] [security2:error] [pid 1018003:tid 1018153] [client 20.48.160.90:26696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/wp_motu_ypdat.php"] [unique_id "apK86zAh5Y1i2tUxg4HdKQAABbo"]
[Sat Aug 29 05:05:15.577634 2026] [security2:error] [pid 1018003:tid 1018163] [client 158.158.54.35:22596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-content/themes/admin.php"] [unique_id "apK86zAh5Y1i2tUxg4HdKgAABcQ"]
[Sat Aug 29 05:05:15.577906 2026] [security2:error] [pid 1018003:tid 1018208] [client 20.48.251.3:57919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/ms-edit.php"] [unique_id "apK86zAh5Y1i2tUxg4HdKwAABfE"]
[Sat Aug 29 05:05:15.590020 2026] [security2:error] [pid 1018003:tid 1018173] [client 4.232.148.111:19911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/txets.php"] [unique_id "apK86zAh5Y1i2tUxg4HdLgAABc4"]
[Sat Aug 29 05:05:15.592719 2026] [security2:error] [pid 1017536:tid 1017719] [client 20.48.250.41:23424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/knmt.php"] [unique_id "apK86yJcY4fy7tP-rU3fMQAAAkk"]
[Sat Aug 29 05:05:15.592737 2026] [security2:error] [pid 1017536:tid 1017730] [client 20.48.250.41:61743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/f2.php"] [unique_id "apK86yJcY4fy7tP-rU3fLwAAAlQ"]
[Sat Aug 29 05:05:15.592816 2026] [security2:error] [pid 1018003:tid 1018178] [client 158.23.184.117:6527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.howtostudyexams.com"] [uri "/wp-content/upgrade/alfanew.php7"] [unique_id "apK86zAh5Y1i2tUxg4HdLwAABdM"]
[Sat Aug 29 05:05:15.596399 2026] [security2:error] [pid 1017536:tid 1017663] [remote 104.196.51.122:56248] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "www.bigbuttonscarf.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK86yJcY4fy7tP-rU3fMgACXn4"]
[Sat Aug 29 05:05:15.609070 2026] [security2:error] [pid 1017536:tid 1017576] [remote 104.196.115.188:49502] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "infinitidealership.com"] [uri "/wp-config.php.bak"] [unique_id "apK86yJcY4fy7tP-rU3fNQACRSc"]
[Sat Aug 29 05:05:15.610123 2026] [security2:error] [pid 1017536:tid 1017544] [remote 104.196.115.188:49502] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/laravel/.env"] [unique_id "apK86yJcY4fy7tP-rU3fNAACRQc"]
[Sat Aug 29 05:05:15.610183 2026] [security2:error] [pid 1017536:tid 1017553] [remote 104.196.115.188:49502] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "infinitidealership.com"] [uri "/wp-config.php.old"] [unique_id "apK86yJcY4fy7tP-rU3fNgACRRA"]
[Sat Aug 29 05:05:15.612717 2026] [security2:error] [pid 1018003:tid 1018245] [client 20.196.209.81:1700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/flower.php"] [unique_id "apK86zAh5Y1i2tUxg4HdMAAABhU"]
[Sat Aug 29 05:05:15.613592 2026] [security2:error] [pid 1017536:tid 1017546] [remote 104.196.115.188:49502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 188.115.196.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "infinitidealership.com"] [uri "/.env.php.bak"] [unique_id "apK86yJcY4fy7tP-rU3fOAACRQk"]
[Sat Aug 29 05:05:15.615979 2026] [security2:error] [pid 1018003:tid 1018209] [client 158.23.184.117:14467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.uscgpipeband.org"] [uri "/Radio.php"] [unique_id "apK86zAh5Y1i2tUxg4HdMQAABfI"]
[Sat Aug 29 05:05:15.640374 2026] [security2:error] [pid 1018003:tid 1018215] [client 158.23.184.117:21860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/.well-known/options.php"] [unique_id "apK86zAh5Y1i2tUxg4HdMgAABfg"]
[Sat Aug 29 05:05:15.641278 2026] [security2:error] [pid 1017536:tid 1017770] [client 20.63.219.114:9161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/colors.php"] [unique_id "apK86yJcY4fy7tP-rU3fOgAAAnw"]
[Sat Aug 29 05:05:15.647630 2026] [security2:error] [pid 1017536:tid 1017678] [client 158.23.147.79:25554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK86yJcY4fy7tP-rU3fOwAAAiA"]
[Sat Aug 29 05:05:15.650908 2026] [security2:error] [pid 1018003:tid 1018192] [client 158.23.184.117:25537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/.well-known/acme-challenge/content.php"] [unique_id "apK86zAh5Y1i2tUxg4HdMwAABeE"]
[Sat Aug 29 05:05:15.662559 2026] [security2:error] [pid 1018003:tid 1018218] [client 20.48.250.41:12363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "employedlawyer.com"] [uri "/wp-blogs.php"] [unique_id "apK86zAh5Y1i2tUxg4HdNAAABfs"]
[Sat Aug 29 05:05:15.672346 2026] [security2:error] [pid 1017536:tid 1017698] [client 185.104.184.230:49454] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.youthspeakoutint.org"] [uri "/autodiscover/autodiscover.xml/news/wp-includes/wlwmanifest.xml"] [unique_id "apK86yJcY4fy7tP-rU3fPQAAAjQ"]
[Sat Aug 29 05:05:15.673247 2026] [security2:error] [pid 1017536:tid 1017710] [client 52.139.37.240:20746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/mac.php"] [unique_id "apK86yJcY4fy7tP-rU3fPgAAAkA"]
[Sat Aug 29 05:05:15.676120 2026] [security2:error] [pid 1018003:tid 1018239] [client 20.48.250.41:65439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/motu.php"] [unique_id "apK86zAh5Y1i2tUxg4HdNQAABg8"]
[Sat Aug 29 05:05:15.682275 2026] [security2:error] [pid 1017536:tid 1017752] [client 20.48.160.90:28580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/wp_KwIW0U5F.php"] [unique_id "apK86yJcY4fy7tP-rU3fQAAAAmo"]
[Sat Aug 29 05:05:15.693954 2026] [security2:error] [pid 1017536:tid 1017594] [remote 104.196.115.188:49502] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/core/.env"] [unique_id "apK86yJcY4fy7tP-rU3fQgACkzk"]
[Sat Aug 29 05:05:15.702300 2026] [security2:error] [pid 1018003:tid 1018261] [client 20.63.81.20:26524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/scxy.php"] [unique_id "apK86zAh5Y1i2tUxg4HdNwAABiU"]
[Sat Aug 29 05:05:15.706523 2026] [security2:error] [pid 1018003:tid 1018236] [client 20.48.160.90:40050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/edit.php"] [unique_id "apK86zAh5Y1i2tUxg4HdOAAABgw"]
[Sat Aug 29 05:05:15.723146 2026] [security2:error] [pid 1018003:tid 1018171] [client 20.48.251.3:57792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/lmfi2.php"] [unique_id "apK86zAh5Y1i2tUxg4HdOQAABcw"]
[Sat Aug 29 05:05:15.723755 2026] [security2:error] [pid 1018003:tid 1018152] [client 20.48.250.41:61749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/grsiuk.php"] [unique_id "apK86zAh5Y1i2tUxg4HdOgAABbk"]
[Sat Aug 29 05:05:15.731745 2026] [security2:error] [pid 1018003:tid 1018268] [client 168.107.94.195:52269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK86zAh5Y1i2tUxg4HdOwAABiw"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:15.740196 2026] [security2:error] [pid 1017536:tid 1017714] [client 20.63.219.114:7916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/goods.php"] [unique_id "apK86yJcY4fy7tP-rU3fSwAAAkQ"]
[Sat Aug 29 05:05:15.740807 2026] [security2:error] [pid 1017536:tid 1017597] [remote 35.243.213.218:46954] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mikeycunningham.com"] [uri "/.github/.env"] [unique_id "apK86yJcY4fy7tP-rU3fSgACdjw"]
[Sat Aug 29 05:05:15.743820 2026] [core:error] [pid 1018003:tid 1018225] [client 74.248.24.12:21351] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.743840 2026] [core:error] [pid 1018003:tid 1018225] [client 74.248.24.12:21351] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:15.744180 2026] [security2:error] [pid 1017536:tid 1017728] [client 158.23.147.79:55904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/nf_tracking.php"] [unique_id "apK86yJcY4fy7tP-rU3fTAAAAlI"]
[Sat Aug 29 05:05:15.766403 2026] [security2:error] [pid 1017536:tid 1017705] [client 20.48.250.41:23462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/sbhu.php"] [unique_id "apK86yJcY4fy7tP-rU3fUgAAAjs"]
[Sat Aug 29 05:05:15.771182 2026] [security2:error] [pid 1017536:tid 1017713] [client 68.155.159.216:57430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK86yJcY4fy7tP-rU3fUwAAAkM"]
[Sat Aug 29 05:05:15.775522 2026] [security2:error] [pid 1018003:tid 1018187] [client 52.139.37.240:25039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/wp-content/plugins/linkpreview/il.php"] [unique_id "apK86zAh5Y1i2tUxg4HdPwAABdw"]
[Sat Aug 29 05:05:15.786427 2026] [security2:error] [pid 1017536:tid 1017775] [client 68.155.159.216:12124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/xmlrpc.php"] [unique_id "apK86yJcY4fy7tP-rU3fVQAAAoE"]
[Sat Aug 29 05:05:15.788266 2026] [security2:error] [pid 1018003:tid 1018188] [client 158.23.184.117:21909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/.well-known/panel.php"] [unique_id "apK86zAh5Y1i2tUxg4HdQAAABd0"]
[Sat Aug 29 05:05:15.793729 2026] [security2:error] [pid 1017536:tid 1017709] [client 20.48.250.41:12360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "employedlawyer.com"] [uri "/mini.php"] [unique_id "apK86yJcY4fy7tP-rU3fVwAAAj8"]
[Sat Aug 29 05:05:15.801904 2026] [security2:error] [pid 1017536:tid 1017724] [client 143.244.57.82:48360] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "wincosir.enproftp.com"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "apK86yJcY4fy7tP-rU3fWwAAAk4"]
[Sat Aug 29 05:05:15.802023 2026] [security2:error] [pid 1017536:tid 1017776] [client 158.23.184.117:6485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.howtostudyexams.com"] [uri "/admin/alfa-rex.php"] [unique_id "apK86yJcY4fy7tP-rU3fWgAAAoI"]
[Sat Aug 29 05:05:15.818858 2026] [security2:error] [pid 1018003:tid 1018246] [client 20.48.250.41:64958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/Ov-Simple1.php"] [unique_id "apK86zAh5Y1i2tUxg4HdQQAABhY"]
[Sat Aug 29 05:05:15.819727 2026] [security2:error] [pid 1017536:tid 1017761] [client 20.48.160.90:62666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/wp_xiPu52Ut.php"] [unique_id "apK86yJcY4fy7tP-rU3fXAAAAnM"]
[Sat Aug 29 05:05:15.820387 2026] [security2:error] [pid 1018003:tid 1018219] [client 158.23.184.117:14350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.uscgpipeband.org"] [uri "/wp-includes/Requests/Exception/file.php"] [unique_id "apK86zAh5Y1i2tUxg4HdQgAABfw"]
[Sat Aug 29 05:05:15.837108 2026] [security2:error] [pid 1018003:tid 1018162] [client 20.48.160.90:45920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/tqkdqbbv.php"] [unique_id "apK86zAh5Y1i2tUxg4HdQwAABcM"]
[Sat Aug 29 05:05:15.847506 2026] [security2:error] [pid 1017536:tid 1017601] [remote 104.196.115.188:49502] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/.env.swp"] [unique_id "apK86yJcY4fy7tP-rU3fXQACJ0A"]
[Sat Aug 29 05:05:15.853368 2026] [security2:error] [pid 1017536:tid 1017725] [client 158.23.184.117:24865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK86yJcY4fy7tP-rU3fXwAAAk8"]
[Sat Aug 29 05:05:15.853372 2026] [security2:error] [pid 1018003:tid 1018235] [client 20.63.81.20:26596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/ws13.php"] [unique_id "apK86zAh5Y1i2tUxg4HdRAAABgs"]
[Sat Aug 29 05:05:15.859714 2026] [security2:error] [pid 1017536:tid 1017748] [client 20.48.251.3:57860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/wpver.php"] [unique_id "apK86yJcY4fy7tP-rU3fYAAAAmY"]
[Sat Aug 29 05:05:15.867700 2026] [security2:error] [pid 1018003:tid 1018260] [client 52.139.37.240:20740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK86zAh5Y1i2tUxg4HdRgAABiQ"]
[Sat Aug 29 05:05:15.888552 2026] [security2:error] [pid 1017536:tid 1017788] [client 20.63.219.114:12723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "compropolis.mx"] [uri "/class_api.php"] [unique_id "apK86yJcY4fy7tP-rU3fZAAAAo4"]
[Sat Aug 29 05:05:15.898189 2026] [security2:error] [pid 1018003:tid 1018156] [client 20.48.250.41:58535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/wp-scr1pts.php"] [unique_id "apK86zAh5Y1i2tUxg4HdSAAABb0"]
[Sat Aug 29 05:05:15.912442 2026] [security2:error] [pid 1018003:tid 1018177] [client 104.207.50.97:58425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 97.50.207.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK86zAh5Y1i2tUxg4HdRwAABdI"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:15.925552 2026] [security2:error] [pid 1018003:tid 1018234] [client 20.48.250.41:12373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "employedlawyer.com"] [uri "/amp.php"] [unique_id "apK86zAh5Y1i2tUxg4HdTAAABgo"]
[Sat Aug 29 05:05:15.926560 2026] [security2:error] [pid 1018003:tid 1018190] [client 20.48.250.41:23457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/a332.php"] [unique_id "apK86zAh5Y1i2tUxg4HdTQAABd8"]
[Sat Aug 29 05:05:15.935167 2026] [security2:error] [pid 1018003:tid 1018273] [client 40.83.93.50:1958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.superugly.com"] [uri "/wp-content/disagrsxr.php"] [unique_id "apK86zAh5Y1i2tUxg4HdTgAABjE"]
[Sat Aug 29 05:05:15.937278 2026] [security2:error] [pid 1017536:tid 1017769] [client 4.205.62.107:64192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/debuggen.php"] [unique_id "apK86yJcY4fy7tP-rU3fbAAAAns"]
[Sat Aug 29 05:05:15.937869 2026] [security2:error] [pid 1018003:tid 1018199] [client 158.23.184.117:21869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/.well-known/pki-validation/mariju.php"] [unique_id "apK86zAh5Y1i2tUxg4HdTwAABeg"]
[Sat Aug 29 05:05:15.942032 2026] [cgid:error] [pid 1018003:tid 1018180] [client 20.196.209.81:17974] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/carolinashooter/404.shtml
[Sat Aug 29 05:05:15.947145 2026] [security2:error] [pid 1018003:tid 1018227] [client 158.23.184.117:6489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.howtostudyexams.com"] [uri "/wp-content/export.php"] [unique_id "apK86zAh5Y1i2tUxg4HdUAAABgQ"]
[Sat Aug 29 05:05:15.951078 2026] [security2:error] [pid 1017536:tid 1017708] [client 4.205.62.107:22469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/autogooey.php"] [unique_id "apK86yJcY4fy7tP-rU3fcQAAAj4"]
[Sat Aug 29 05:05:15.954483 2026] [security2:error] [pid 1018003:tid 1018179] [client 158.23.147.79:30698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK86zAh5Y1i2tUxg4HdUQAABdQ"]
[Sat Aug 29 05:05:15.962155 2026] [security2:error] [pid 1018003:tid 1018269] [client 20.196.209.81:15789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/update.php"] [unique_id "apK86zAh5Y1i2tUxg4HdUwAABi0"]
[Sat Aug 29 05:05:15.983967 2026] [security2:error] [pid 1018003:tid 1018177] [client 52.139.37.240:24824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/wp-header-json.php"] [unique_id "apK86zAh5Y1i2tUxg4HdVgAABdI"]
[Sat Aug 29 05:05:15.984174 2026] [security2:error] [pid 1018003:tid 1018167] [client 20.48.160.90:45939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/kjyehoxl.php"] [unique_id "apK86zAh5Y1i2tUxg4HdVwAABcg"]
[Sat Aug 29 05:05:15.985749 2026] [security2:error] [pid 1018003:tid 1018231] [client 20.48.160.90:63587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/wp_n5VD7XDh.php"] [unique_id "apK86zAh5Y1i2tUxg4HdWAAABgc"]
[Sat Aug 29 05:05:15.985831 2026] [security2:error] [pid 1018003:tid 1018052] [remote 104.196.51.122:56256] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "www.bigbuttonscarf.com"] [uri "/_image"] [unique_id "apK86zAh5Y1i2tUxg4HdWQAF5R8"]
[Sat Aug 29 05:05:15.990276 2026] [security2:error] [pid 1018003:tid 1018224] [client 68.155.159.216:16154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-content/themes/too.php"] [unique_id "apK86zAh5Y1i2tUxg4HdWwAABgE"]
[Sat Aug 29 05:05:15.992758 2026] [security2:error] [pid 1018003:tid 1018207] [client 20.48.251.3:28475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/ah25.php"] [unique_id "apK86zAh5Y1i2tUxg4HdXAAABfA"]
[Sat Aug 29 05:05:16.006656 2026] [security2:error] [pid 1018003:tid 1018151] [client 20.203.141.11:18253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "germanmorenoperez.com"] [uri "/wp-content/admin.php"] [unique_id "apK87DAh5Y1i2tUxg4HdXQAABbg"]
[Sat Aug 29 05:05:16.008410 2026] [security2:error] [pid 1017536:tid 1017549] [remote 104.196.115.188:49502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 188.115.196.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "infinitidealership.com"] [uri "/config.php.bak"] [unique_id "apK87CJcY4fy7tP-rU3feAACUAw"]
[Sat Aug 29 05:05:16.008438 2026] [security2:error] [pid 1017536:tid 1017578] [remote 104.196.115.188:49502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 188.115.196.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "infinitidealership.com"] [uri "/configuration.php.bak"] [unique_id "apK87CJcY4fy7tP-rU3feQACUCk"]
[Sat Aug 29 05:05:16.010660 2026] [security2:error] [pid 1017536:tid 1017747] [client 20.196.209.81:1705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/meta.php"] [unique_id "apK87CJcY4fy7tP-rU3fewAAAmU"]
[Sat Aug 29 05:05:16.015433 2026] [security2:error] [pid 1017536:tid 1017693] [client 20.104.49.130:57671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/wpxml.php"] [unique_id "apK87CJcY4fy7tP-rU3ffAAAAi8"]
[Sat Aug 29 05:05:16.020635 2026] [security2:error] [pid 1017536:tid 1017736] [client 20.48.250.41:64985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/wp-blogs.php"] [unique_id "apK87CJcY4fy7tP-rU3ffQAAAlo"]
[Sat Aug 29 05:05:16.021226 2026] [security2:error] [pid 1018003:tid 1018269] [client 158.23.184.117:25548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/.well-known/acme-challenge/sx.php"] [unique_id "apK87DAh5Y1i2tUxg4HdXwAABi0"]
[Sat Aug 29 05:05:16.023347 2026] [security2:error] [pid 1018003:tid 1018155] [client 158.23.184.117:15020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.uscgpipeband.org"] [uri "/wp-admin/add.php"] [unique_id "apK87DAh5Y1i2tUxg4HdYAAABbw"]
[Sat Aug 29 05:05:16.028908 2026] [security2:error] [pid 1017536:tid 1017696] [client 34.7.216.49:61546] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "webdisk.bridgewaycentretrust.org"] [uri "/@fs/proc/self/environ"] [unique_id "apK87CJcY4fy7tP-rU3ffwAAAjI"]
[Sat Aug 29 05:05:16.029015 2026] [security2:error] [pid 1017536:tid 1017760] [client 158.158.54.35:10825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-admin/css/admin.php"] [unique_id "apK87CJcY4fy7tP-rU3ffgAAAnI"]
[Sat Aug 29 05:05:16.032654 2026] [security2:error] [pid 1018003:tid 1018248] [client 68.155.159.216:16246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.showerdoorsdubuque.com"] [uri "/nf_tracking.php"] [unique_id "apK87DAh5Y1i2tUxg4HdYgAABhg"]
[Sat Aug 29 05:05:16.035733 2026] [security2:error] [pid 1018003:tid 1018160] [client 20.63.219.114:18694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/Js.php"] [unique_id "apK87DAh5Y1i2tUxg4HdZAAABcE"]
[Sat Aug 29 05:05:16.037737 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.63.81.20:26470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/btx25.php"] [unique_id "apK87CJcY4fy7tP-rU3fhAAAAh0"]
[Sat Aug 29 05:05:16.046379 2026] [security2:error] [pid 1017536:tid 1017744] [client 45.154.98.191:50972] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.acovib.com"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "apK87CJcY4fy7tP-rU3fhQAAAmI"]
[Sat Aug 29 05:05:16.052786 2026] [security2:error] [pid 1017536:tid 1017611] [remote 93.123.109.228:48278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/config.php"] [unique_id "apK87CJcY4fy7tP-rU3fhgACkko"]
[Sat Aug 29 05:05:16.058932 2026] [security2:error] [pid 1018003:tid 1018158] [client 158.23.147.79:24479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK87DAh5Y1i2tUxg4HdZgAABb8"]
[Sat Aug 29 05:05:16.066721 2026] [security2:error] [pid 1018003:tid 1018166] [client 52.139.37.240:21412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK87DAh5Y1i2tUxg4HdZwAABcc"]
[Sat Aug 29 05:05:16.067257 2026] [security2:error] [pid 1018003:tid 1018202] [client 74.248.24.12:8176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/u.php"] [unique_id "apK87DAh5Y1i2tUxg4HdaAAABes"]
[Sat Aug 29 05:05:16.073075 2026] [security2:error] [pid 1018003:tid 1018174] [client 20.196.209.81:17974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-admin/user/f35.php"] [unique_id "apK87DAh5Y1i2tUxg4HdaQAABc8"]
[Sat Aug 29 05:05:16.077317 2026] [security2:error] [pid 1018003:tid 1018253] [client 20.48.250.41:12445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "employedlawyer.com"] [uri "/cc13.php"] [unique_id "apK87DAh5Y1i2tUxg4HdagAABh0"]
[Sat Aug 29 05:05:16.082827 2026] [security2:error] [pid 1018003:tid 1018201] [client 145.239.10.137:34756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.10.239.145.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "greenfieldperformanceinc.com"] [uri "/admin.php"] [unique_id "apK87DAh5Y1i2tUxg4HdawAABeo"], referer: http://greenfieldperformanceinc.com/admin.php
[Sat Aug 29 05:05:16.085243 2026] [security2:error] [pid 1017536:tid 1017712] [client 158.23.184.117:21522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/.well-known/pki-validation/pl.php"] [unique_id "apK87CJcY4fy7tP-rU3fiwAAAkI"]
[Sat Aug 29 05:05:16.088268 2026] [security2:error] [pid 1018003:tid 1018218] [client 20.48.250.41:61716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/num.php"] [unique_id "apK87DAh5Y1i2tUxg4HdbAAABfs"]
[Sat Aug 29 05:05:16.090883 2026] [security2:error] [pid 1018003:tid 1018163] [client 158.23.184.117:56673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.howtostudyexams.com"] [uri "/new.php"] [unique_id "apK87DAh5Y1i2tUxg4HdbgAABcQ"]
[Sat Aug 29 05:05:16.096776 2026] [security2:error] [pid 1017536:tid 1017732] [client 4.205.62.107:21947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/app/Helpers/bladeHelpers.php"] [unique_id "apK87CJcY4fy7tP-rU3fjgAAAlY"]
[Sat Aug 29 05:05:16.098789 2026] [security2:error] [pid 1018003:tid 1018277] [client 20.48.250.41:23532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/ws66.php"] [unique_id "apK87DAh5Y1i2tUxg4HdbwAABjU"]
[Sat Aug 29 05:05:16.108305 2026] [security2:error] [pid 1018003:tid 1018264] [client 20.63.219.114:1928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/hehe.php"] [unique_id "apK87DAh5Y1i2tUxg4HdcAAABig"]
[Sat Aug 29 05:05:16.124730 2026] [security2:error] [pid 1018003:tid 1018217] [client 168.107.94.195:52626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK87DAh5Y1i2tUxg4HdcQAABfo"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:16.133196 2026] [security2:error] [pid 1018003:tid 1018267] [client 20.48.160.90:63511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/wp-mini.php"] [unique_id "apK87DAh5Y1i2tUxg4HdcgAABis"]
[Sat Aug 29 05:05:16.135220 2026] [security2:error] [pid 1017536:tid 1017778] [client 68.155.159.216:14213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK87CJcY4fy7tP-rU3fkQAAAoQ"]
[Sat Aug 29 05:05:16.141634 2026] [security2:error] [pid 1017536:tid 1017673] [client 20.48.251.3:57907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/groceries/index.php"] [unique_id "apK87CJcY4fy7tP-rU3fkwAAAhs"]
[Sat Aug 29 05:05:16.146513 2026] [security2:error] [pid 1017536:tid 1017585] [remote 104.196.115.188:49502] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/storage/.env"] [unique_id "apK87CJcY4fy7tP-rU3flQACKjA"]
[Sat Aug 29 05:05:16.149766 2026] [security2:error] [pid 1017536:tid 1017615] [remote 104.196.115.188:49502] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/public/.env"] [unique_id "apK87CJcY4fy7tP-rU3flgACKk4"]
[Sat Aug 29 05:05:16.149811 2026] [security2:error] [pid 1017536:tid 1017773] [client 20.48.160.90:40043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/llyuxaqd.php"] [unique_id "apK87CJcY4fy7tP-rU3flwAAAn8"]
[Sat Aug 29 05:05:16.157244 2026] [security2:error] [pid 1017536:tid 1017564] [remote 104.196.115.188:49502] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/web/.env"] [unique_id "apK87CJcY4fy7tP-rU3fmAACgxs"]
[Sat Aug 29 05:05:16.177595 2026] [security2:error] [pid 1018003:tid 1018256] [client 20.63.81.20:26523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/SDsadqwrf.php"] [unique_id "apK87DAh5Y1i2tUxg4HdcwAABiA"]
[Sat Aug 29 05:05:16.181066 2026] [security2:error] [pid 1018003:tid 1018159] [client 158.23.184.117:25553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/.well-known/admin.php"] [unique_id "apK87DAh5Y1i2tUxg4HddQAABcA"]
[Sat Aug 29 05:05:16.181140 2026] [security2:error] [pid 1018003:tid 1018169] [client 158.23.184.117:14503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.uscgpipeband.org"] [uri "/wp-includes/assets/about.php"] [unique_id "apK87DAh5Y1i2tUxg4HddAAABco"]
[Sat Aug 29 05:05:16.186854 2026] [security2:error] [pid 1017536:tid 1017614] [remote 104.196.115.188:49502] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/wp/.env"] [unique_id "apK87CJcY4fy7tP-rU3fmwACRU0"]
[Sat Aug 29 05:05:16.206187 2026] [security2:error] [pid 1018003:tid 1018261] [client 52.139.37.240:24773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/zup.php"] [unique_id "apK87DAh5Y1i2tUxg4HddgAABiU"]
[Sat Aug 29 05:05:16.230543 2026] [security2:error] [pid 1017536:tid 1017755] [client 20.48.250.41:58615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/a4.php"] [unique_id "apK87CJcY4fy7tP-rU3fpAAAAm0"]
[Sat Aug 29 05:05:16.233464 2026] [security2:error] [pid 1018003:tid 1018154] [client 158.23.184.117:21513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/.well-known/pki-validation/x.php"] [unique_id "apK87DAh5Y1i2tUxg4HddwAABbs"]
[Sat Aug 29 05:05:16.237904 2026] [security2:error] [pid 1017536:tid 1017750] [client 158.23.184.117:61601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.howtostudyexams.com"] [uri "/wp-content/plugins/revslider/admin.php"] [unique_id "apK87CJcY4fy7tP-rU3fpQAAAmg"]
[Sat Aug 29 05:05:16.247277 2026] [security2:error] [pid 1018003:tid 1018192] [client 74.248.24.12:27422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK87DAh5Y1i2tUxg4HdeQAABeE"]
[Sat Aug 29 05:05:16.258891 2026] [security2:error] [pid 1018003:tid 1018197] [client 185.104.184.230:49456] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.youthspeakoutint.org"] [uri "/autodiscover/autodiscover.xml/2018/wp-includes/wlwmanifest.xml"] [unique_id "apK87DAh5Y1i2tUxg4HdegAABeY"]
[Sat Aug 29 05:05:16.260792 2026] [security2:error] [pid 1018003:tid 1018187] [client 4.205.62.107:2556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/wp-content/themes/luJMF.php"] [unique_id "apK87DAh5Y1i2tUxg4HdewAABdw"]
[Sat Aug 29 05:05:16.262381 2026] [security2:error] [pid 1017536:tid 1017716] [client 52.139.37.240:21418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/zafir1.php"] [unique_id "apK87CJcY4fy7tP-rU3fpwAAAkY"]
[Sat Aug 29 05:05:16.282873 2026] [security2:error] [pid 1017536:tid 1017569] [remote 104.196.115.188:49502] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/wp-config.old"] [unique_id "apK87CJcY4fy7tP-rU3fqAACYCA"]
[Sat Aug 29 05:05:16.286343 2026] [security2:error] [pid 1017536:tid 1017738] [client 20.63.219.114:11929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "compropolis.mx"] [uri "/aksinet.php"] [unique_id "apK87CJcY4fy7tP-rU3fqQAAAlw"]
[Sat Aug 29 05:05:16.287989 2026] [security2:error] [pid 1017536:tid 1017610] [remote 104.196.115.188:49502] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "infinitidealership.com"] [uri "/wp-config.php.swp"] [unique_id "apK87CJcY4fy7tP-rU3fqgACakk"]
[Sat Aug 29 05:05:16.290692 2026] [security2:error] [pid 1017536:tid 1017545] [remote 104.196.115.188:49502] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "infinitidealership.com"] [uri "/wp-config.php~"] [unique_id "apK87CJcY4fy7tP-rU3fqwACYwg"]
[Sat Aug 29 05:05:16.292737 2026] [security2:error] [pid 1017536:tid 1017793] [client 45.148.10.59:12534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theverystuff.com"] [uri "/wp/index.php"] [unique_id "apK87CJcY4fy7tP-rU3frAAAApM"]
[Sat Aug 29 05:05:16.294071 2026] [security2:error] [pid 1018003:tid 1018251] [client 20.48.251.3:57857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/konfig.php"] [unique_id "apK87DAh5Y1i2tUxg4HdfQAABhs"]
[Sat Aug 29 05:05:16.294556 2026] [security2:error] [pid 1017536:tid 1017648] [remote 93.123.109.228:48278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/config/aws.php"] [unique_id "apK87CJcY4fy7tP-rU3frQACkm8"]
[Sat Aug 29 05:05:16.299988 2026] [security2:error] [pid 1018003:tid 1018278] [client 20.48.160.90:62694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/xmini4.php"] [unique_id "apK87DAh5Y1i2tUxg4HdfgAABjY"]
[Sat Aug 29 05:05:16.300279 2026] [security2:error] [pid 1017536:tid 1017634] [remote 93.123.109.228:48278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/config/config.inc.php"] [unique_id "apK87CJcY4fy7tP-rU3fsAACkmE"]
[Sat Aug 29 05:05:16.327658 2026] [security2:error] [pid 1018003:tid 1018195] [client 158.23.184.117:25595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/.well-known/api.php"] [unique_id "apK87DAh5Y1i2tUxg4HdfwAABeQ"]
[Sat Aug 29 05:05:16.349965 2026] [security2:error] [pid 1017536:tid 1017608] [remote 93.123.109.228:48278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/config/config.php"] [unique_id "apK87CJcY4fy7tP-rU3ftQACkkc"]
[Sat Aug 29 05:05:16.350301 2026] [security2:error] [pid 1017536:tid 1017689] [client 20.48.160.90:40004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/nbwxolou.php"] [unique_id "apK87CJcY4fy7tP-rU3ftgAAAis"]
[Sat Aug 29 05:05:16.352682 2026] [security2:error] [pid 1018003:tid 1018243] [client 143.244.57.82:48362] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "wincosir.enproftp.com"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "apK87DAh5Y1i2tUxg4HdggAABhM"]
[Sat Aug 29 05:05:16.353869 2026] [security2:error] [pid 1017536:tid 1017713] [client 68.155.159.216:50276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK87CJcY4fy7tP-rU3ftwAAAkM"]
[Sat Aug 29 05:05:16.359592 2026] [security2:error] [pid 1017536:tid 1017775] [client 20.63.81.20:26399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/BDKR28WP.php"] [unique_id "apK87CJcY4fy7tP-rU3fuAAAAoE"]
[Sat Aug 29 05:05:16.364850 2026] [security2:error] [pid 1017536:tid 1017709] [client 4.205.62.107:53426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/saml.php"] [unique_id "apK87CJcY4fy7tP-rU3fuQAAAj8"]
[Sat Aug 29 05:05:16.366536 2026] [security2:error] [pid 1017536:tid 1017717] [client 20.196.209.81:4994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/blog.php"] [unique_id "apK87CJcY4fy7tP-rU3fugAAAkc"]
[Sat Aug 29 05:05:16.376748 2026] [security2:error] [pid 1017536:tid 1017724] [client 158.23.147.79:58107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK87CJcY4fy7tP-rU3fvgAAAk4"]
[Sat Aug 29 05:05:16.381276 2026] [security2:error] [pid 1017536:tid 1017720] [client 158.23.184.117:21898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/.well-known/pki-validation/xmrlpc.php"] [unique_id "apK87CJcY4fy7tP-rU3fvwAAAko"]
[Sat Aug 29 05:05:16.383715 2026] [security2:error] [pid 1017536:tid 1017683] [client 158.23.184.117:14477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.uscgpipeband.org"] [uri "/wp-content/themes/twentytwentythree.php"] [unique_id "apK87CJcY4fy7tP-rU3fwQAAAiU"]
[Sat Aug 29 05:05:16.385651 2026] [security2:error] [pid 1017536:tid 1017705] [client 158.23.184.117:56658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.howtostudyexams.com"] [uri "/wp-content/images/uploads/admin.php"] [unique_id "apK87CJcY4fy7tP-rU3fwgAAAjs"]
[Sat Aug 29 05:05:16.389234 2026] [autoindex:error] [pid 1017536:tid 1017735] [client 4.232.148.111:0] AH01276: Cannot serve directory /home4/ehfields/public_html/tiaandephraim/wp-includes/css/dist/widgets/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:05:16.398112 2026] [security2:error] [pid 1018003:tid 1018259] [client 20.63.219.114:18690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/access.php"] [unique_id "apK87DAh5Y1i2tUxg4HdgwAABiM"]
[Sat Aug 29 05:05:16.399038 2026] [security2:error] [pid 1017536:tid 1017670] [client 4.205.62.107:57783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "troop264olney.net"] [uri "/app/Models/Hrm/Employee.php"] [unique_id "apK87CJcY4fy7tP-rU3fwwAAAhg"]
[Sat Aug 29 05:05:16.403977 2026] [security2:error] [pid 1017536:tid 1017731] [client 52.139.37.240:25061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/a9.php"] [unique_id "apK87CJcY4fy7tP-rU3fxAAAAlU"]
[Sat Aug 29 05:05:16.407846 2026] [security2:error] [pid 1018003:tid 1018275] [client 20.196.209.81:1721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/randkeyword.php"] [unique_id "apK87DAh5Y1i2tUxg4HdhAAABjM"]
[Sat Aug 29 05:05:16.409501 2026] [security2:error] [pid 1018003:tid 1018198] [client 40.83.93.50:1921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.superugly.com"] [uri "/wp-content/f35.php"] [unique_id "apK87DAh5Y1i2tUxg4HdhQAABec"]
[Sat Aug 29 05:05:16.424416 2026] [security2:error] [pid 1017536:tid 1017772] [client 20.48.251.3:57917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/paths.php"] [unique_id "apK87CJcY4fy7tP-rU3fxgAAAn4"]
[Sat Aug 29 05:05:16.435396 2026] [security2:error] [pid 1018003:tid 1018180] [client 4.232.148.111:1433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/wp-content/themes/about.php"] [unique_id "apK87DAh5Y1i2tUxg4HdhgAABdU"]
[Sat Aug 29 05:05:16.444324 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.48.160.90:63505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/reop3.php"] [unique_id "apK87CJcY4fy7tP-rU3fyQAAAnk"]
[Sat Aug 29 05:05:16.447101 2026] [security2:error] [pid 1018003:tid 1018179] [client 158.23.147.79:50053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK87DAh5Y1i2tUxg4HdhwAABdQ"]
[Sat Aug 29 05:05:16.452308 2026] [security2:error] [pid 1017536:tid 1017784] [client 68.155.159.216:18271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.baxterevents.com"] [uri "/x.php"] [unique_id "apK87CJcY4fy7tP-rU3fygAAAoo"]
[Sat Aug 29 05:05:16.453258 2026] [security2:error] [pid 1017536:tid 1017630] [remote 93.123.109.228:48278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/config/env.php"] [unique_id "apK87CJcY4fy7tP-rU3fywACe10"]
[Sat Aug 29 05:05:16.456799 2026] [security2:error] [pid 1017536:tid 1017555] [remote 93.123.109.228:48278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/config/module.config.php"] [unique_id "apK87CJcY4fy7tP-rU3fzgACFRI"]
[Sat Aug 29 05:05:16.460753 2026] [security2:error] [pid 1018003:tid 1018212] [client 213.202.253.4:56035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aantec.com"] [uri "/adminfuns.php"] [unique_id "apK87DAh5Y1i2tUxg4HdiAAABfU"], referer: www.google.com
[Sat Aug 29 05:05:16.460753 2026] [security2:error] [pid 1017536:tid 1017636] [remote 93.123.109.228:48278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/config/nexmo.php"] [unique_id "apK87CJcY4fy7tP-rU3fzwACFWM"]
[Sat Aug 29 05:05:16.460796 2026] [security2:error] [pid 1017536:tid 1017680] [client 52.139.37.240:21379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/abc.php"] [unique_id "apK87CJcY4fy7tP-rU3f0AAAAiI"]
[Sat Aug 29 05:05:16.462582 2026] [security2:error] [pid 1017536:tid 1017789] [client 104.207.40.104:16803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 104.40.207.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK87CJcY4fy7tP-rU3fyAAAAo8"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:16.464532 2026] [security2:error] [pid 1017536:tid 1017672] [client 20.63.219.114:1976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/wp-admin/class-db.php"] [unique_id "apK87CJcY4fy7tP-rU3f0QAAAho"]
[Sat Aug 29 05:05:16.469864 2026] [security2:error] [pid 1018003:tid 1018156] [client 20.196.209.81:12403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-admin/user/min.php"] [unique_id "apK87DAh5Y1i2tUxg4HdiQAABb0"]
[Sat Aug 29 05:05:16.472936 2026] [security2:error] [pid 1017536:tid 1017711] [client 158.158.54.35:6058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/adminfuns.php"] [unique_id "apK87CJcY4fy7tP-rU3f0gAAAkE"]
[Sat Aug 29 05:05:16.473364 2026] [security2:error] [pid 1017536:tid 1017700] [client 20.203.141.11:11980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "germanmorenoperez.com"] [uri "/wp-configs.php"] [unique_id "apK87CJcY4fy7tP-rU3f0wAAAjY"]
[Sat Aug 29 05:05:16.474943 2026] [security2:error] [pid 1017536:tid 1017684] [client 158.23.184.117:25140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/.well-known/chosen.php"] [unique_id "apK87CJcY4fy7tP-rU3f1AAAAiY"]
[Sat Aug 29 05:05:16.475953 2026] [security2:error] [pid 1018003:tid 1018263] [client 20.104.49.130:58212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/static.php"] [unique_id "apK87DAh5Y1i2tUxg4HdigAABic"]
[Sat Aug 29 05:05:16.482573 2026] [security2:error] [pid 1018003:tid 1018230] [client 20.48.160.90:45916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/nsxeubyv.php"] [unique_id "apK87DAh5Y1i2tUxg4HdiwAABgY"]
[Sat Aug 29 05:05:16.507757 2026] [security2:error] [pid 1017536:tid 1017757] [client 168.107.94.195:52972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK87CJcY4fy7tP-rU3f2QAAAm8"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:16.525828 2026] [security2:error] [pid 1017536:tid 1017708] [client 158.23.184.117:21908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/.well-known/security.php"] [unique_id "apK87CJcY4fy7tP-rU3f4AAAAj4"]
[Sat Aug 29 05:05:16.528835 2026] [security2:error] [pid 1017536:tid 1017556] [remote 93.123.109.228:48278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/config/stripe.php"] [unique_id "apK87CJcY4fy7tP-rU3f4gACOBM"]
[Sat Aug 29 05:05:16.536108 2026] [security2:error] [pid 1017536:tid 1017760] [client 68.155.159.216:24529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK87CJcY4fy7tP-rU3f4wAAAnI"]
[Sat Aug 29 05:05:16.537867 2026] [security2:error] [pid 1017536:tid 1017786] [client 158.23.184.117:6515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.howtostudyexams.com"] [uri "/tools.php"] [unique_id "apK87CJcY4fy7tP-rU3f5AAAAow"]
[Sat Aug 29 05:05:16.544940 2026] [security2:error] [pid 1018003:tid 1018224] [client 4.232.148.111:21728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tiaandephraim.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK87DAh5Y1i2tUxg4HdjQAABgE"]
[Sat Aug 29 05:05:16.551287 2026] [security2:error] [pid 1017536:tid 1017744] [client 20.63.81.20:26433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/sky.php"] [unique_id "apK87CJcY4fy7tP-rU3f5gAAAmI"]
[Sat Aug 29 05:05:16.552870 2026] [security2:error] [pid 1017536:tid 1017707] [client 197.219.150.206:55797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK87CJcY4fy7tP-rU3f5wAAAj0"]
[Sat Aug 29 05:05:16.553005 2026] [security2:error] [pid 1017536:tid 1017707] [client 197.219.150.206:55797] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK87CJcY4fy7tP-rU3f5wAAAj0"]
[Sat Aug 29 05:05:16.587116 2026] [security2:error] [pid 1018003:tid 1018207] [client 158.23.184.117:14366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.uscgpipeband.org"] [uri "/wp-content/languages/themes/num.php"] [unique_id "apK87DAh5Y1i2tUxg4HdjgAABfA"]
[Sat Aug 29 05:05:16.594959 2026] [security2:error] [pid 1017536:tid 1017696] [client 20.48.251.3:28449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/olfclass.php"] [unique_id "apK87CJcY4fy7tP-rU3f6AAAAjI"]
[Sat Aug 29 05:05:16.617474 2026] [security2:error] [pid 1017536:tid 1017754] [client 74.248.24.12:35495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/r.php"] [unique_id "apK87CJcY4fy7tP-rU3f7QAAAmw"]
[Sat Aug 29 05:05:16.620770 2026] [security2:error] [pid 1018003:tid 1018151] [client 20.48.160.90:45878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/zfqipfss.php"] [unique_id "apK87DAh5Y1i2tUxg4HdkAAABbg"]
[Sat Aug 29 05:05:16.622418 2026] [security2:error] [pid 1017536:tid 1017780] [client 158.23.184.117:24837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/.well-known/config.php"] [unique_id "apK87CJcY4fy7tP-rU3f7gAAAoY"]
[Sat Aug 29 05:05:16.623567 2026] [security2:error] [pid 1017536:tid 1017739] [client 52.139.37.240:25026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/admin/index.php"] [unique_id "apK87CJcY4fy7tP-rU3f7wAAAl0"]
[Sat Aug 29 05:05:16.640257 2026] [security2:error] [pid 1017536:tid 1017773] [client 68.155.159.216:33486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK87CJcY4fy7tP-rU3f8QAAAn8"]
[Sat Aug 29 05:05:16.654465 2026] [security2:error] [pid 1018003:tid 1018200] [client 45.154.98.191:51297] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.acovib.com"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "apK87DAh5Y1i2tUxg4HdkQAABek"]
[Sat Aug 29 05:05:16.657923 2026] [security2:error] [pid 1018003:tid 1018258] [client 52.139.37.240:21394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/c1.php"] [unique_id "apK87DAh5Y1i2tUxg4HdkgAABiI"]
[Sat Aug 29 05:05:16.669093 2026] [security2:error] [pid 1018003:tid 1018164] [client 158.23.184.117:21906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/.well-known/system.php"] [unique_id "apK87DAh5Y1i2tUxg4HdlAAABcU"]
[Sat Aug 29 05:05:16.685052 2026] [security2:error] [pid 1017536:tid 1017727] [client 158.23.184.117:56664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.howtostudyexams.com"] [uri "/wp-content/uploads/my.php"] [unique_id "apK87CJcY4fy7tP-rU3f9wAAAlE"]
[Sat Aug 29 05:05:16.694185 2026] [security2:error] [pid 1017536:tid 1017691] [client 60.243.207.176:49315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK87CJcY4fy7tP-rU3f-gAAAi0"]
[Sat Aug 29 05:05:16.694893 2026] [security2:error] [pid 1017536:tid 1017691] [client 60.243.207.176:49315] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK87CJcY4fy7tP-rU3f-gAAAi0"]
[Sat Aug 29 05:05:16.696964 2026] [security2:error] [pid 1017536:tid 1017782] [client 20.63.219.114:19407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "compropolis.mx"] [uri "/alfa-rex1.php"] [unique_id "apK87CJcY4fy7tP-rU3f-wAAAog"]
[Sat Aug 29 05:05:16.697509 2026] [security2:error] [pid 1018003:tid 1018178] [client 20.48.160.90:63493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/wp-mail.php"] [unique_id "apK87DAh5Y1i2tUxg4HdlQAABdM"]
[Sat Aug 29 05:05:16.710937 2026] [security2:error] [pid 1018003:tid 1018245] [client 20.63.81.20:26446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/file5.php"] [unique_id "apK87DAh5Y1i2tUxg4HdlgAABhU"]
[Sat Aug 29 05:05:16.725676 2026] [security2:error] [pid 1017536:tid 1017745] [client 20.48.251.3:28419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/gnmlc.php"] [unique_id "apK87CJcY4fy7tP-rU3f_gAAAmM"]
[Sat Aug 29 05:05:16.735194 2026] [security2:error] [pid 1017536:tid 1017755] [client 158.23.184.117:14342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.uscgpipeband.org"] [uri "/wp.php"] [unique_id "apK87CJcY4fy7tP-rU3f_wAAAm0"]
[Sat Aug 29 05:05:16.759227 2026] [security2:error] [pid 1018003:tid 1018201] [client 20.48.160.90:40025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "plumplumscheese.com"] [uri "/zrjuyoos.php"] [unique_id "apK87DAh5Y1i2tUxg4HdlwAABeo"]
[Sat Aug 29 05:05:16.766682 2026] [security2:error] [pid 1018003:tid 1018166] [client 158.23.184.117:24873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/.well-known/core.php"] [unique_id "apK87DAh5Y1i2tUxg4HdmAAABcc"]
[Sat Aug 29 05:05:16.768160 2026] [security2:error] [pid 1018003:tid 1018155] [client 20.196.209.81:15793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/bypass.php"] [unique_id "apK87DAh5Y1i2tUxg4HdmQAABbw"]
[Sat Aug 29 05:05:16.779497 2026] [cgid:error] [pid 1018003:tid 1018054] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:16.779898 2026] [security2:error] [pid 1018003:tid 1018222] [client 74.248.24.12:25703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/num.php"] [unique_id "apK87DAh5Y1i2tUxg4HdngAABf8"]
[Sat Aug 29 05:05:16.780546 2026] [cgid:error] [pid 1018003:tid 1018046] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:16.780916 2026] [cgid:error] [pid 1018003:tid 1018044] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:16.781909 2026] [cgid:error] [pid 1018003:tid 1018040] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:16.784147 2026] [cgid:error] [pid 1018003:tid 1018054] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:16.784518 2026] [cgid:error] [pid 1018003:tid 1018051] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:16.809983 2026] [security2:error] [pid 1018003:tid 1018239] [client 158.23.184.117:21918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/.well-known/users.php"] [unique_id "apK87DAh5Y1i2tUxg4HdoQAABg8"]
[Sat Aug 29 05:05:16.811718 2026] [security2:error] [pid 1018003:tid 1018153] [client 20.196.209.81:16297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/goods.php"] [unique_id "apK87DAh5Y1i2tUxg4HdogAABbo"]
[Sat Aug 29 05:05:16.832279 2026] [security2:error] [pid 1018003:tid 1018215] [client 52.139.37.240:25081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/makeasmtp.php"] [unique_id "apK87DAh5Y1i2tUxg4HdowAABfg"]
[Sat Aug 29 05:05:16.838931 2026] [security2:error] [pid 1017536:tid 1017675] [client 185.104.184.230:49462] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.youthspeakoutint.org"] [uri "/autodiscover/autodiscover.xml/shop/wp-includes/wlwmanifest.xml"] [unique_id "apK87CJcY4fy7tP-rU3gBgAAAh0"]
[Sat Aug 29 05:05:16.841812 2026] [security2:error] [pid 1017536:tid 1017670] [client 20.48.160.90:62599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/wp-conffg.php"] [unique_id "apK87CJcY4fy7tP-rU3gBwAAAhg"]
[Sat Aug 29 05:05:16.850168 2026] [security2:error] [pid 1017536:tid 1017785] [client 158.23.147.79:58886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wzy.php"] [unique_id "apK87CJcY4fy7tP-rU3gCgAAAos"]
[Sat Aug 29 05:05:16.854045 2026] [security2:error] [pid 1017536:tid 1017713] [client 52.139.37.240:21144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/index.php/feed/atom/"] [unique_id "apK87CJcY4fy7tP-rU3gDQAAAkM"]
[Sat Aug 29 05:05:16.858536 2026] [security2:error] [pid 1017536:tid 1017771] [client 20.48.251.3:57853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/koiy.php"] [unique_id "apK87CJcY4fy7tP-rU3gDgAAAn0"]
[Sat Aug 29 05:05:16.863887 2026] [security2:error] [pid 1017536:tid 1017703] [client 20.196.209.81:18217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-admin/users.php"] [unique_id "apK87CJcY4fy7tP-rU3gEAAAAjk"]
[Sat Aug 29 05:05:16.872531 2026] [security2:error] [pid 1017536:tid 1017734] [client 145.239.10.137:55863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.10.239.145.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "greenfieldperformanceparts.com"] [uri "/admin.php"] [unique_id "apK87CJcY4fy7tP-rU3gEgAAAlg"], referer: http://greenfieldperformanceparts.com/admin.php
[Sat Aug 29 05:05:16.874301 2026] [security2:error] [pid 1017536:tid 1017749] [client 20.63.81.20:26447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/xyn.php"] [unique_id "apK87CJcY4fy7tP-rU3gEwAAAmc"]
[Sat Aug 29 05:05:16.876700 2026] [cgid:error] [pid 1018003:tid 1018050] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:16.877318 2026] [cgid:error] [pid 1018003:tid 1018053] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:16.879723 2026] [security2:error] [pid 1017536:tid 1017591] [remote 104.196.115.188:49502] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "infinitidealership.com"] [uri "/static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ"] [unique_id "apK87CJcY4fy7tP-rU3gFQACUzY"]
[Sat Aug 29 05:05:16.881962 2026] [security2:error] [pid 1018003:tid 1018152] [client 158.23.184.117:14519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.uscgpipeband.org"] [uri "/xmlrpc.php"] [unique_id "apK87DAh5Y1i2tUxg4HdqQAABbk"]
[Sat Aug 29 05:05:16.882670 2026] [cgid:error] [pid 1018003:tid 1018043] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:16.883820 2026] [security2:error] [pid 1017536:tid 1017752] [client 40.83.93.50:10840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.superugly.com"] [uri "/wp-content/index.php"] [unique_id "apK87CJcY4fy7tP-rU3gFwAAAmo"]
[Sat Aug 29 05:05:16.887289 2026] [cgid:error] [pid 1018003:tid 1018055] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:16.887301 2026] [cgid:error] [pid 1018003:tid 1018056] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:16.890669 2026] [security2:error] [pid 1017536:tid 1017784] [client 168.107.94.195:53355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK87CJcY4fy7tP-rU3gGQAAAoo"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:16.891070 2026] [security2:error] [pid 1018003:tid 1018274] [client 20.63.219.114:9183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/wp-contentt.php"] [unique_id "apK87DAh5Y1i2tUxg4HdqgAABjI"]
[Sat Aug 29 05:05:16.896163 2026] [security2:error] [pid 1018003:tid 1018269] [client 143.244.57.82:48376] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "wincosir.enproftp.com"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "apK87DAh5Y1i2tUxg4HdqwAABi0"]
[Sat Aug 29 05:05:16.898030 2026] [security2:error] [pid 1018003:tid 1018261] [client 35.198.240.194:3542] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "mail.omni-staffing.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK87DAh5Y1i2tUxg4HdrAAABiU"]
[Sat Aug 29 05:05:16.898826 2026] [security2:error] [pid 1018003:tid 1018261] [client 35.198.240.194:3542] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.omni-staffing.com"] [uri "/cgi-sys/403.html"] [unique_id "apK87DAh5Y1i2tUxg4HdrAAABiU"]
[Sat Aug 29 05:05:16.902961 2026] [security2:error] [pid 1017536:tid 1017789] [client 35.198.240.194:3528] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/@fs/root/.env"] [unique_id "apK87CJcY4fy7tP-rU3gHAAAAo8"]
[Sat Aug 29 05:05:16.909469 2026] [security2:error] [pid 1018003:tid 1018203] [client 35.198.240.194:3586] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2froot/.env"] [unique_id "apK87DAh5Y1i2tUxg4HdrgAABew"]
[Sat Aug 29 05:05:16.915761 2026] [core:error] [pid 1018003:tid 1018208] [client 35.198.240.194:3634] AH10244: invalid URI path (/@fs/../../.env?raw??)
[Sat Aug 29 05:05:16.916145 2026] [security2:error] [pid 1018003:tid 1018218] [client 158.158.54.35:9924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/goods.php"] [unique_id "apK87DAh5Y1i2tUxg4HdsQAABfs"]
[Sat Aug 29 05:05:16.916293 2026] [security2:error] [pid 1018003:tid 1018169] [client 158.23.184.117:24878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/.well-known/data.php"] [unique_id "apK87DAh5Y1i2tUxg4HdswAABco"]
[Sat Aug 29 05:05:16.917475 2026] [security2:error] [pid 1018003:tid 1018221] [client 4.232.148.111:7652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK87DAh5Y1i2tUxg4HdtAAABf4"]
[Sat Aug 29 05:05:16.946023 2026] [security2:error] [pid 1017536:tid 1017767] [client 158.23.184.117:56654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.howtostudyexams.com"] [uri "/wp-includes/themes/uploads/config.php"] [unique_id "apK87CJcY4fy7tP-rU3gIgAAAnk"]
[Sat Aug 29 05:05:16.955280 2026] [security2:error] [pid 1018003:tid 1018184] [client 35.198.240.194:3576] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.omni-staffing.com"] [uri "/@fs/src/.env"] [unique_id "apK87DAh5Y1i2tUxg4HdtQAABdk"]
[Sat Aug 29 05:05:16.963142 2026] [security2:error] [pid 1017536:tid 1017671] [client 20.203.141.11:41360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "germanmorenoperez.com"] [uri "/wp-includes/index.php"] [unique_id "apK87CJcY4fy7tP-rU3gIwAAAhk"]
[Sat Aug 29 05:05:16.968348 2026] [security2:error] [pid 1018003:tid 1018187] [client 158.23.184.117:21536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/.well-known/wp-blog-header.php"] [unique_id "apK87DAh5Y1i2tUxg4HdtgAABdw"]
[Sat Aug 29 05:05:16.982469 2026] [security2:error] [pid 1018003:tid 1018220] [client 35.198.240.194:3558] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/@fs/app/.env"] [unique_id "apK87DAh5Y1i2tUxg4HdrQAABf0"]
[Sat Aug 29 05:05:16.985605 2026] [security2:error] [pid 1017536:tid 1017680] [client 35.198.240.194:3526] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/@fs/.env"] [unique_id "apK87CJcY4fy7tP-rU3gHQAAAiI"]
[Sat Aug 29 05:05:16.992814 2026] [security2:error] [pid 1017536:tid 1017735] [client 104.207.42.220:13631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 220.42.207.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK87CJcY4fy7tP-rU3gJQAAAlk"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:17.000806 2026] [security2:error] [pid 1018003:tid 1018262] [client 35.198.240.194:3686] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.omni-staffing.com"] [uri "/@fs/.env.production"] [unique_id "apK87DAh5Y1i2tUxg4HduAAABiY"]
[Sat Aug 29 05:05:17.006307 2026] [security2:error] [pid 1018003:tid 1018233] [client 35.198.240.194:3600] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "mail.omni-staffing.com"] [uri "/@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ"] [unique_id "apK87TAh5Y1i2tUxg4HduQAABgk"]
[Sat Aug 29 05:05:17.007518 2026] [security2:error] [pid 1018003:tid 1018233] [client 35.198.240.194:3600] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.omni-staffing.com"] [uri "/cgi-sys/403.html"] [unique_id "apK87TAh5Y1i2tUxg4HduQAABgk"]
[Sat Aug 29 05:05:17.018712 2026] [security2:error] [pid 1018003:tid 1018242] [client 20.104.49.130:55153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.danesquality.com"] [uri "/666.php"] [unique_id "apK87TAh5Y1i2tUxg4HduwAABhI"]
[Sat Aug 29 05:05:17.021149 2026] [security2:error] [pid 1017536:tid 1017690] [client 145.239.10.137:43022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.10.239.145.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "greenfieldparts.com"] [uri "/admin.php"] [unique_id "apK87SJcY4fy7tP-rU3gKAAAAiw"], referer: http://greenfieldparts.com/admin.php
[Sat Aug 29 05:05:17.028596 2026] [security2:error] [pid 1018003:tid 1018207] [client 20.63.81.20:26614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/inso.php"] [unique_id "apK87TAh5Y1i2tUxg4HdvgAABfA"]
[Sat Aug 29 05:05:17.038630 2026] [security2:error] [pid 1018003:tid 1018273] [client 158.23.184.117:14520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.uscgpipeband.org"] [uri "/app.php"] [unique_id "apK87TAh5Y1i2tUxg4HdvwAABjE"]
[Sat Aug 29 05:05:17.044342 2026] [security2:error] [pid 1018003:tid 1018249] [client 52.139.37.240:25074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/paku.php"] [unique_id "apK87TAh5Y1i2tUxg4HdwgAABhk"]
[Sat Aug 29 05:05:17.044724 2026] [security2:error] [pid 1018003:tid 1018181] [client 35.198.240.194:3718] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/@fs/root/.aws/credentials.bak"] [unique_id "apK87TAh5Y1i2tUxg4HdwAAABdY"]
[Sat Aug 29 05:05:17.077867 2026] [security2:error] [pid 1017536:tid 1017748] [client 4.232.148.111:32958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tiaandephraim.com"] [uri "/num.php"] [unique_id "apK87SJcY4fy7tP-rU3gMQAAAmY"]
[Sat Aug 29 05:05:17.078295 2026] [security2:error] [pid 1018003:tid 1018177] [client 52.139.37.240:21377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/root.php"] [unique_id "apK87TAh5Y1i2tUxg4HdxwAABdI"]
[Sat Aug 29 05:05:17.079077 2026] [security2:error] [pid 1018003:tid 1018202] [client 4.205.62.107:64206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/pouhg.php"] [unique_id "apK87TAh5Y1i2tUxg4HdywAABes"]
[Sat Aug 29 05:05:17.082291 2026] [security2:error] [pid 1018003:tid 1018278] [client 35.198.240.194:3704] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/@fs/root/.aws/credentials.backup"] [unique_id "apK87TAh5Y1i2tUxg4HdygAABjY"]
[Sat Aug 29 05:05:17.088579 2026] [security2:error] [pid 1017536:tid 1017778] [client 4.205.62.107:22328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/aws_keys.php"] [unique_id "apK87SJcY4fy7tP-rU3gMgAAAoQ"]
[Sat Aug 29 05:05:17.089575 2026] [security2:error] [pid 1017536:tid 1017746] [client 158.23.184.117:24892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/.well-known/db-status.php"] [unique_id "apK87SJcY4fy7tP-rU3gMwAAAmQ"]
[Sat Aug 29 05:05:17.092261 2026] [security2:error] [pid 1018003:tid 1018244] [client 158.23.184.117:6481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.howtostudyexams.com"] [uri "/av.php"] [unique_id "apK87TAh5Y1i2tUxg4HdzwAABhQ"]
[Sat Aug 29 05:05:17.098688 2026] [security2:error] [pid 1018003:tid 1018197] [client 35.198.240.194:3608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/.env"] [unique_id "apK87TAh5Y1i2tUxg4Hd0AAABeY"]
[Sat Aug 29 05:05:17.101214 2026] [security2:error] [pid 1018003:tid 1018231] [client 20.48.251.3:57875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/w.php"] [unique_id "apK87TAh5Y1i2tUxg4Hd0gAABgc"]
[Sat Aug 29 05:05:17.106145 2026] [security2:error] [pid 1017536:tid 1017780] [client 68.155.159.216:16360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/radio.php"] [unique_id "apK87SJcY4fy7tP-rU3gNQAAAoY"]
[Sat Aug 29 05:05:17.116548 2026] [security2:error] [pid 1018003:tid 1018186] [client 35.198.240.194:3702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2fapp/.env"] [unique_id "apK87TAh5Y1i2tUxg4Hd1gAABds"]
[Sat Aug 29 05:05:17.126515 2026] [security2:error] [pid 1018003:tid 1018173] [client 158.23.184.117:21528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/.well-known/wp-links-opml.php"] [unique_id "apK87TAh5Y1i2tUxg4Hd2AAABc4"]
[Sat Aug 29 05:05:17.127885 2026] [security2:error] [pid 1018003:tid 1018258] [client 20.48.160.90:62671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/filefuns.php"] [unique_id "apK87TAh5Y1i2tUxg4Hd2QAABiI"]
[Sat Aug 29 05:05:17.132575 2026] [security2:error] [pid 1018003:tid 1018158] [client 158.23.147.79:30685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/file.php"] [unique_id "apK87TAh5Y1i2tUxg4Hd2wAABb8"]
[Sat Aug 29 05:05:17.139879 2026] [security2:error] [pid 1018003:tid 1018160] [client 162.198.206.205:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutihomes.com"] [uri "/boats"] [unique_id "apK87TAh5Y1i2tUxg4Hd3AAABcE"], referer: https://www.djiboutihomes.com/
[Sat Aug 29 05:05:17.147294 2026] [security2:error] [pid 1018003:tid 1018259] [client 35.198.240.194:3778] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.omni-staffing.com"] [uri "/cgi-sys/404.html"] [unique_id "apK87TAh5Y1i2tUxg4HdxgAABiM"]
[Sat Aug 29 05:05:17.154660 2026] [security2:error] [pid 1017536:tid 1017763] [client 68.155.159.216:16319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.showerdoorsdubuque.com"] [uri "/wzy.php"] [unique_id "apK87SJcY4fy7tP-rU3gOQAAAnU"]
[Sat Aug 29 05:05:17.157601 2026] [security2:error] [pid 1017536:tid 1017760] [client 45.148.10.59:12542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theverystuff.com"] [uri "/wp/index.php"] [unique_id "apK87SJcY4fy7tP-rU3gOwAAAnI"]
[Sat Aug 29 05:05:17.163508 2026] [security2:error] [pid 1018003:tid 1018195] [client 20.63.219.114:2043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/classsmtps.php"] [unique_id "apK87TAh5Y1i2tUxg4Hd4QAABeQ"]
[Sat Aug 29 05:05:17.164837 2026] [cgid:error] [pid 1018003:tid 1018061] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:17.165698 2026] [cgid:error] [pid 1018003:tid 1018062] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:17.165890 2026] [security2:error] [pid 1018003:tid 1018153] [client 158.23.147.79:24459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apK87TAh5Y1i2tUxg4Hd4gAABbo"]
[Sat Aug 29 05:05:17.166455 2026] [cgid:error] [pid 1018003:tid 1018060] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:17.168286 2026] [cgid:error] [pid 1018003:tid 1018059] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:17.169579 2026] [security2:error] [pid 1018003:tid 1018215] [client 35.213.70.61:48734] ModSecurity: Warning. Matched phrase "BuiltWith" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "spellsoupdesign.com"] [uri "/"] [unique_id "apK87TAh5Y1i2tUxg4Hd4wAABfg"]
[Sat Aug 29 05:05:17.188208 2026] [security2:error] [pid 1018003:tid 1018264] [client 158.23.184.117:14483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.uscgpipeband.org"] [uri "/aaa.php"] [unique_id "apK87TAh5Y1i2tUxg4Hd5AAABig"]
[Sat Aug 29 05:05:17.198258 2026] [cgid:error] [pid 1018003:tid 1018027] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:17.199281 2026] [cgid:error] [pid 1018003:tid 1018058] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:17.206565 2026] [security2:error] [pid 1018003:tid 1018154] [client 20.63.81.20:26440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/puc.php"] [unique_id "apK87TAh5Y1i2tUxg4Hd5wAABbs"]
[Sat Aug 29 05:05:17.216836 2026] [security2:error] [pid 1017536:tid 1017753] [client 68.155.159.216:51843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/login.php"] [unique_id "apK87SJcY4fy7tP-rU3gQAAAAms"]
[Sat Aug 29 05:05:17.220144 2026] [security2:error] [pid 1017536:tid 1017696] [client 20.196.209.81:21086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/hehe.php"] [unique_id "apK87SJcY4fy7tP-rU3gQQAAAjI"]
[Sat Aug 29 05:05:17.228664 2026] [security2:error] [pid 1018003:tid 1018218] [client 4.205.62.107:22502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/wp-jufsis.php"] [unique_id "apK87TAh5Y1i2tUxg4Hd6QAABfs"]
[Sat Aug 29 05:05:17.231542 2026] [security2:error] [pid 1017536:tid 1017693] [client 20.63.219.114:12708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "compropolis.mx"] [uri "/headerg.php"] [unique_id "apK87SJcY4fy7tP-rU3gQwAAAi8"]
[Sat Aug 29 05:05:17.237643 2026] [security2:error] [pid 1017536:tid 1017679] [client 158.23.184.117:24863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/.well-known/f35.php"] [unique_id "apK87SJcY4fy7tP-rU3gRAAAAiE"]
[Sat Aug 29 05:05:17.244946 2026] [security2:error] [pid 1017536:tid 1017679] [client 20.48.251.3:57876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/btx25.php"] [unique_id "apK87SJcY4fy7tP-rU3gRQAAAiE"]
[Sat Aug 29 05:05:17.249246 2026] [security2:error] [pid 1018003:tid 1018184] [client 68.155.159.216:14248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/themes.php"] [unique_id "apK87TAh5Y1i2tUxg4Hd6wAABdk"]
[Sat Aug 29 05:05:17.260141 2026] [security2:error] [pid 1018003:tid 1018151] [client 20.196.209.81:15802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/extractable-loader-head.php"] [unique_id "apK87TAh5Y1i2tUxg4Hd7QAABbg"]
[Sat Aug 29 05:05:17.263019 2026] [security2:error] [pid 1017536:tid 1017750] [client 52.139.37.240:24590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/rtx.php"] [unique_id "apK87SJcY4fy7tP-rU3gRgAAAmg"]
[Sat Aug 29 05:05:17.273514 2026] [security2:error] [pid 1017536:tid 1017705] [client 168.107.94.195:53741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK87SJcY4fy7tP-rU3gSAAAAjs"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:17.277769 2026] [security2:error] [pid 1018003:tid 1018165] [client 158.23.184.117:21558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/.well-known/wp-load.php"] [unique_id "apK87TAh5Y1i2tUxg4Hd7wAABcY"]
[Sat Aug 29 05:05:17.278362 2026] [security2:error] [pid 1017536:tid 1017710] [client 52.139.37.240:20743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/shell.php"] [unique_id "apK87SJcY4fy7tP-rU3gSQAAAkA"]
[Sat Aug 29 05:05:17.280100 2026] [cgid:error] [pid 1018003:tid 1018064] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:17.280730 2026] [security2:error] [pid 1018003:tid 1018222] [client 20.196.209.81:12413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-admin/wp-cron.php"] [unique_id "apK87TAh5Y1i2tUxg4Hd8AAABf8"]
[Sat Aug 29 05:05:17.289692 2026] [cgid:error] [pid 1018003:tid 1018063] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:17.289771 2026] [cgid:error] [pid 1018003:tid 1018089] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:17.291182 2026] [cgid:error] [pid 1018003:tid 1018065] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:17.292133 2026] [cgid:error] [pid 1018003:tid 1018072] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:17.292830 2026] [security2:error] [pid 1017536:tid 1017702] [client 74.248.24.12:8131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/wp-blog.php"] [unique_id "apK87SJcY4fy7tP-rU3gSgAAAjg"]
[Sat Aug 29 05:05:17.295804 2026] [security2:error] [pid 1018003:tid 1018174] [client 171.61.160.196:6254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.160.61.171.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK87TAh5Y1i2tUxg4Hd9gAABc8"]
[Sat Aug 29 05:05:17.295880 2026] [security2:error] [pid 1018003:tid 1018257] [client 20.63.219.114:2016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/theme.php"] [unique_id "apK87TAh5Y1i2tUxg4Hd9QAABiE"]
[Sat Aug 29 05:05:17.296529 2026] [security2:error] [pid 1018003:tid 1018207] [client 158.23.184.117:6464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.howtostudyexams.com"] [uri "/wp-includes/ID3/file.php"] [unique_id "apK87TAh5Y1i2tUxg4Hd9wAABfA"]
[Sat Aug 29 05:05:17.296967 2026] [security2:error] [pid 1017536:tid 1017723] [client 45.154.98.191:51567] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.acovib.com"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "apK87SJcY4fy7tP-rU3gSwAAAk0"]
[Sat Aug 29 05:05:17.297230 2026] [security2:error] [pid 1018003:tid 1018174] [client 171.61.160.196:6254] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK87TAh5Y1i2tUxg4Hd9gAABc8"]
[Sat Aug 29 05:05:17.328336 2026] [security2:error] [pid 1018003:tid 1018150] [client 158.23.147.79:25557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK87TAh5Y1i2tUxg4Hd-AAABbc"]
[Sat Aug 29 05:05:17.328828 2026] [core:error] [pid 1017536:tid 1017730] [client 74.248.24.12:28216] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:17.328846 2026] [core:error] [pid 1017536:tid 1017730] [client 74.248.24.12:28216] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:17.339501 2026] [security2:error] [pid 1018003:tid 1018200] [client 20.104.49.130:57617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/log.php"] [unique_id "apK87TAh5Y1i2tUxg4Hd-gAABek"]
[Sat Aug 29 05:05:17.359629 2026] [security2:error] [pid 1018003:tid 1018245] [client 20.63.81.20:26533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/19.php"] [unique_id "apK87TAh5Y1i2tUxg4Hd_AAABhU"]
[Sat Aug 29 05:05:17.365497 2026] [security2:error] [pid 1017536:tid 1017738] [client 158.158.54.35:18408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/css.php"] [unique_id "apK87SJcY4fy7tP-rU3gUwAAAlw"]
[Sat Aug 29 05:05:17.371245 2026] [security2:error] [pid 1017536:tid 1017782] [client 40.83.93.50:10844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.superugly.com"] [uri "/wp-content/install.php"] [unique_id "apK87SJcY4fy7tP-rU3gVwAAAog"]
[Sat Aug 29 05:05:17.378888 2026] [security2:error] [pid 1018003:tid 1018190] [client 20.48.251.3:28471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/app_dev.php"] [unique_id "apK87TAh5Y1i2tUxg4Hd_gAABd8"]
[Sat Aug 29 05:05:17.380524 2026] [authz_core:error] [pid 1017536:tid 1017561] [remote 35.243.213.218:46954] AH01630: client denied by server configuration: /home2/mikeycun/public_html/.htpasswd
[Sat Aug 29 05:05:17.381174 2026] [security2:error] [pid 1017536:tid 1017736] [client 20.48.160.90:64708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/wp-cron.php"] [unique_id "apK87SJcY4fy7tP-rU3gXAAAAlo"]
[Sat Aug 29 05:05:17.382706 2026] [security2:error] [pid 1017536:tid 1017788] [client 158.23.184.117:25554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK87SJcY4fy7tP-rU3gXQAAAo4"]
[Sat Aug 29 05:05:17.390073 2026] [security2:error] [pid 1018003:tid 1018211] [client 158.23.184.117:14351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.uscgpipeband.org"] [uri "/hehe.php"] [unique_id "apK87TAh5Y1i2tUxg4Hd_wAABfQ"]
[Sat Aug 29 05:05:17.396609 2026] [security2:error] [pid 1017536:tid 1017747] [client 4.205.62.107:2645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/packed.php"] [unique_id "apK87SJcY4fy7tP-rU3gYQAAAmU"]
[Sat Aug 29 05:05:17.402544 2026] [security2:error] [pid 1017536:tid 1017694] [client 4.232.148.111:23750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/wp-admin/index.php"] [unique_id "apK87SJcY4fy7tP-rU3gZAAAAjA"]
[Sat Aug 29 05:05:17.414445 2026] [security2:error] [pid 1017536:tid 1017557] [remote 35.243.213.218:46954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 218.213.243.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mikeycunningham.com"] [uri "/wp-login.php"] [unique_id "apK87SJcY4fy7tP-rU3gZgACdhQ"], referer: https://www.mikeycunningham.com/wp-admin/
[Sat Aug 29 05:05:17.415037 2026] [security2:error] [pid 1017536:tid 1017585] [remote 35.243.213.218:46954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 218.213.243.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mikeycunningham.com"] [uri "/wp-login.php"] [unique_id "apK87SJcY4fy7tP-rU3gaAACdjA"], referer: https://www.mikeycunningham.com/wp-admin/
[Sat Aug 29 05:05:17.423243 2026] [security2:error] [pid 1018003:tid 1018258] [client 185.104.184.230:49476] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.youthspeakoutint.org"] [uri "/autodiscover/autodiscover.xml/test/wp-includes/wlwmanifest.xml"] [unique_id "apK87TAh5Y1i2tUxg4HeAgAABiI"]
[Sat Aug 29 05:05:17.429440 2026] [security2:error] [pid 1017536:tid 1017782] [client 158.23.184.117:21888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/.well-known/wp-mail.php"] [unique_id "apK87SJcY4fy7tP-rU3gagAAAog"]
[Sat Aug 29 05:05:17.429934 2026] [security2:error] [pid 1018003:tid 1018262] [client 20.203.141.11:29671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "germanmorenoperez.com"] [uri "/wp-admin/a.php"] [unique_id "apK87TAh5Y1i2tUxg4HeAwAABiY"]
[Sat Aug 29 05:05:17.441500 2026] [security2:error] [pid 1017536:tid 1017744] [client 158.23.184.117:6478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.howtostudyexams.com"] [uri "/wp-admin/css/fff.php"] [unique_id "apK87SJcY4fy7tP-rU3gawAAAmI"]
[Sat Aug 29 05:05:17.445460 2026] [security2:error] [pid 1017536:tid 1017695] [client 143.244.57.82:48386] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "wincosir.enproftp.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "apK87SJcY4fy7tP-rU3gbAAAAjE"]
[Sat Aug 29 05:05:17.462695 2026] [security2:error] [pid 1018003:tid 1018161] [client 68.155.159.216:50231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK87TAh5Y1i2tUxg4HeBQAABcI"]
[Sat Aug 29 05:05:17.472249 2026] [security2:error] [pid 1018003:tid 1018198] [client 52.139.37.240:24784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/update/da222.php"] [unique_id "apK87TAh5Y1i2tUxg4HeBgAABec"]
[Sat Aug 29 05:05:17.474689 2026] [security2:error] [pid 1018003:tid 1018247] [client 52.139.37.240:21410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK87TAh5Y1i2tUxg4HeBwAABhc"]
[Sat Aug 29 05:05:17.490119 2026] [cgid:error] [pid 1018003:tid 1018077] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:17.501629 2026] [cgid:error] [pid 1018003:tid 1018022] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:17.506133 2026] [cgid:error] [pid 1018003:tid 1018148] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:17.513261 2026] [security2:error] [pid 1018003:tid 1018157] [client 4.205.62.107:53405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/aws_settings.php"] [unique_id "apK87TAh5Y1i2tUxg4HeCwAABb4"]
[Sat Aug 29 05:05:17.516305 2026] [security2:error] [pid 1017536:tid 1017772] [client 158.23.147.79:63868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-content/admin.php"] [unique_id "apK87SJcY4fy7tP-rU3gbwAAAn4"]
[Sat Aug 29 05:05:17.520839 2026] [security2:error] [pid 1018003:tid 1018275] [client 20.48.251.3:28458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/php-info.php"] [unique_id "apK87TAh5Y1i2tUxg4HeDAAABjM"]
[Sat Aug 29 05:05:17.531256 2026] [security2:error] [pid 1018003:tid 1018210] [client 20.63.81.20:26434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/133.php"] [unique_id "apK87TAh5Y1i2tUxg4HeDgAABfM"]
[Sat Aug 29 05:05:17.532867 2026] [security2:error] [pid 1018003:tid 1018240] [client 20.63.219.114:2008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/contentloader1.php"] [unique_id "apK87TAh5Y1i2tUxg4HeDwAABhA"]
[Sat Aug 29 05:05:17.532901 2026] [security2:error] [pid 1017536:tid 1017732] [client 158.23.184.117:25572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/.well-known/home.php"] [unique_id "apK87SJcY4fy7tP-rU3gcgAAAlY"]
[Sat Aug 29 05:05:17.552755 2026] [security2:error] [pid 1017536:tid 1017780] [client 158.23.147.79:50077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/wp-includes/content.php"] [unique_id "apK87SJcY4fy7tP-rU3gdQAAAoY"]
[Sat Aug 29 05:05:17.559967 2026] [security2:error] [pid 1018003:tid 1018234] [client 68.155.159.216:18248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.baxterevents.com"] [uri "/wp-content/x.php"] [unique_id "apK87TAh5Y1i2tUxg4HeEgAABgo"]
[Sat Aug 29 05:05:17.561110 2026] [security2:error] [pid 1018003:tid 1018221] [client 35.213.70.61:0] ModSecurity: Warning. Matched phrase "BuiltWith" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "spellsoupdesign.com"] [uri "/"] [unique_id "apK87TAh5Y1i2tUxg4HeEAAABf4"]
[Sat Aug 29 05:05:17.563704 2026] [security2:error] [pid 1018003:tid 1018261] [client 158.23.184.117:14464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.uscgpipeband.org"] [uri "/wp-includes/PHPMailer.php"] [unique_id "apK87TAh5Y1i2tUxg4HeFAAABiU"]
[Sat Aug 29 05:05:17.565001 2026] [security2:error] [pid 1018003:tid 1018220] [client 35.213.70.61:55864] ModSecurity: Warning. Matched phrase "BuiltWith" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "spellsoupdesign.com"] [uri "/"] [unique_id "apK87TAh5Y1i2tUxg4HeDQAF_Tk"]
[Sat Aug 29 05:05:17.565412 2026] [cgid:error] [pid 1018003:tid 1018081] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:17.565690 2026] [cgid:error] [pid 1018003:tid 1018080] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:17.576948 2026] [security2:error] [pid 1018003:tid 1018253] [client 158.23.184.117:21929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/.well-known/wp-settings.php"] [unique_id "apK87TAh5Y1i2tUxg4HeFgAABh0"]
[Sat Aug 29 05:05:17.580384 2026] [security2:error] [pid 1017536:tid 1017777] [client 4.205.62.107:61240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "troop264olney.net"] [uri "/agg.php"] [unique_id "apK87SJcY4fy7tP-rU3gdwAAAoM"]
[Sat Aug 29 05:05:17.588877 2026] [security2:error] [pid 1018003:tid 1018238] [client 20.48.160.90:64731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/lock360.php"] [unique_id "apK87TAh5Y1i2tUxg4HeFwAABg4"]
[Sat Aug 29 05:05:17.620551 2026] [security2:error] [pid 1018003:tid 1018202] [client 216.26.249.248:9065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.249.26.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK87TAh5Y1i2tUxg4HeFQAABes"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:17.630903 2026] [security2:error] [pid 1018003:tid 1018173] [client 20.196.209.81:21071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/wp-admin/class-db.php"] [unique_id "apK87TAh5Y1i2tUxg4HeHQAABc4"]
[Sat Aug 29 05:05:17.636808 2026] [security2:error] [pid 1018003:tid 1018083] [remote 104.196.115.188:49512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/web.config"] [unique_id "apK87TAh5Y1i2tUxg4HeHwAF3j4"]
[Sat Aug 29 05:05:17.642610 2026] [security2:error] [pid 1018003:tid 1018269] [client 68.155.159.216:24481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/simple.php"] [unique_id "apK87TAh5Y1i2tUxg4HeIgAABi0"]
[Sat Aug 29 05:05:17.643183 2026] [security2:error] [pid 1017536:tid 1017778] [client 20.63.219.114:15233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "compropolis.mx"] [uri "/meta.php"] [unique_id "apK87SJcY4fy7tP-rU3gfQAAAoQ"]
[Sat Aug 29 05:05:17.649768 2026] [cgid:error] [pid 1018003:tid 1018086] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:17.650159 2026] [autoindex:error] [pid 1018003:tid 1018186] [client 4.232.148.111:3051] AH01276: Cannot serve directory /home4/ehfields/public_html/tiaandephraim/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:05:17.653140 2026] [security2:error] [pid 1018003:tid 1018169] [client 168.107.94.195:54169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK87TAh5Y1i2tUxg4HeJAAABco"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:17.656326 2026] [security2:error] [pid 1018003:tid 1018235] [client 20.196.209.81:4998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/defaults.php"] [unique_id "apK87TAh5Y1i2tUxg4HeJQAABgs"]
[Sat Aug 29 05:05:17.660842 2026] [security2:error] [pid 1018003:tid 1018199] [client 20.48.251.3:57883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/infos.php"] [unique_id "apK87TAh5Y1i2tUxg4HeJgAABeg"]
[Sat Aug 29 05:05:17.670411 2026] [security2:error] [pid 1018003:tid 1018183] [client 52.139.37.240:20758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/wp-content/plugins/linkpreview/il.php"] [unique_id "apK87TAh5Y1i2tUxg4HeJwAABdg"]
[Sat Aug 29 05:05:17.677716 2026] [security2:error] [pid 1017536:tid 1017737] [client 158.23.184.117:24846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/.well-known/index.php"] [unique_id "apK87SJcY4fy7tP-rU3gfwAAAls"]
[Sat Aug 29 05:05:17.678180 2026] [security2:error] [pid 1017536:tid 1017753] [client 20.63.81.20:26370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/1xmomo.php"] [unique_id "apK87SJcY4fy7tP-rU3ggAAAAms"]
[Sat Aug 29 05:05:17.678405 2026] [security2:error] [pid 1018003:tid 1018243] [client 20.196.209.81:19388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-admin/wp-links-opml.php"] [unique_id "apK87TAh5Y1i2tUxg4HeKgAABhM"]
[Sat Aug 29 05:05:17.683241 2026] [security2:error] [pid 1017536:tid 1017739] [client 20.63.219.114:1513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/alumni_reg.php"] [unique_id "apK87SJcY4fy7tP-rU3gggAAAl0"]
[Sat Aug 29 05:05:17.685253 2026] [cgid:error] [pid 1018003:tid 1018085] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:17.706945 2026] [security2:error] [pid 1017536:tid 1017610] [remote 93.123.109.228:48278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/info.php"] [unique_id "apK87SJcY4fy7tP-rU3giAACREk"]
[Sat Aug 29 05:05:17.712204 2026] [security2:error] [pid 1018003:tid 1018212] [client 158.23.184.117:14794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.uscgpipeband.org"] [uri "/wp-content/upgrade/alfanew.php7"] [unique_id "apK87TAh5Y1i2tUxg4HeLgAABfU"]
[Sat Aug 29 05:05:17.721415 2026] [security2:error] [pid 1017536:tid 1017728] [client 35.213.70.61:0] ModSecurity: Warning. Matched phrase "BuiltWith" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "spellsoupdesign.com"] [uri "/index.html"] [unique_id "apK87SJcY4fy7tP-rU3giQAAAlI"]
[Sat Aug 29 05:05:17.723058 2026] [security2:error] [pid 1018003:tid 1018165] [client 35.213.70.61:55864] ModSecurity: Warning. Matched phrase "BuiltWith" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "spellsoupdesign.com"] [uri "/index.html"] [unique_id "apK87TAh5Y1i2tUxg4HeLAAFxkU"]
[Sat Aug 29 05:05:17.723799 2026] [security2:error] [pid 1018003:tid 1018263] [client 158.23.184.117:21940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/.well-known/wp-signup.php"] [unique_id "apK87TAh5Y1i2tUxg4HeMgAABic"]
[Sat Aug 29 05:05:17.724031 2026] [cgid:error] [pid 1018003:tid 1018091] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:17.724184 2026] [cgid:error] [pid 1018003:tid 1018092] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:17.724985 2026] [cgid:error] [pid 1018003:tid 1018095] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:17.744730 2026] [security2:error] [pid 1017536:tid 1017545] [remote 93.123.109.228:48278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/infophp.php"] [unique_id "apK87SJcY4fy7tP-rU3giwACRAg"]
[Sat Aug 29 05:05:17.744730 2026] [security2:error] [pid 1017536:tid 1017648] [remote 93.123.109.228:48278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/infos.php"] [unique_id "apK87SJcY4fy7tP-rU3gigACRG8"]
[Sat Aug 29 05:05:17.751661 2026] [security2:error] [pid 1018003:tid 1018191] [client 52.139.37.240:25031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/wp-admin/min.php"] [unique_id "apK87TAh5Y1i2tUxg4HeMwAABeA"]
[Sat Aug 29 05:05:17.757336 2026] [cgid:error] [pid 1018003:tid 1018042] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:17.759877 2026] [security2:error] [pid 1018003:tid 1018181] [client 20.48.160.90:63527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/wp-theme.php"] [unique_id "apK87TAh5Y1i2tUxg4HeNQAABdY"]
[Sat Aug 29 05:05:17.788736 2026] [security2:error] [pid 1018003:tid 1018209] [client 216.73.217.8:24665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 8.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo-store.sortthru.com"] [uri "/webapp/wp-admin/customize.php"] [unique_id "apK87TAh5Y1i2tUxg4HeNwAABfI"]
[Sat Aug 29 05:05:17.790843 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.104.49.130:60987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/ccc.php"] [unique_id "apK87SJcY4fy7tP-rU3gjwAAAh0"]
[Sat Aug 29 05:05:17.792448 2026] [security2:error] [pid 1017536:tid 1017670] [client 20.48.251.3:28465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/env.php"] [unique_id "apK87SJcY4fy7tP-rU3gkAAAAhg"]
[Sat Aug 29 05:05:17.809178 2026] [security2:error] [pid 1017536:tid 1017774] [client 35.213.70.61:0] ModSecurity: Warning. Matched phrase "BuiltWith" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "spellsoupdesign.com"] [uri "/"] [unique_id "apK87SJcY4fy7tP-rU3gkQAAAoA"]
[Sat Aug 29 05:05:17.810812 2026] [security2:error] [pid 1018003:tid 1018232] [client 35.213.70.61:55870] ModSecurity: Warning. Matched phrase "BuiltWith" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "spellsoupdesign.com"] [uri "/"] [unique_id "apK87TAh5Y1i2tUxg4HeNgAGCEw"]
[Sat Aug 29 05:05:17.827534 2026] [security2:error] [pid 1017536:tid 1017720] [client 158.23.184.117:24848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/.well-known/login.php"] [unique_id "apK87SJcY4fy7tP-rU3glAAAAko"]
[Sat Aug 29 05:05:17.835613 2026] [cgid:error] [pid 1018003:tid 1018096] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:17.845828 2026] [security2:error] [pid 1017536:tid 1017706] [client 20.63.81.20:26459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/mosty.php"] [unique_id "apK87SJcY4fy7tP-rU3gmAAAAjw"]
[Sat Aug 29 05:05:17.850069 2026] [core:error] [pid 1017536:tid 1017742] [client 74.248.24.12:3137] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:17.850086 2026] [core:error] [pid 1017536:tid 1017742] [client 74.248.24.12:3137] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:17.851254 2026] [cgid:error] [pid 1018003:tid 1018098] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:17.856882 2026] [security2:error] [pid 1017536:tid 1017713] [client 158.23.184.117:14360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.uscgpipeband.org"] [uri "/admin/alfa-rex.php"] [unique_id "apK87SJcY4fy7tP-rU3gmgAAAkM"]
[Sat Aug 29 05:05:17.866815 2026] [security2:error] [pid 1018003:tid 1018226] [client 74.248.24.12:26273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/xxx.php"] [unique_id "apK87TAh5Y1i2tUxg4HePgAABgM"]
[Sat Aug 29 05:05:17.866844 2026] [security2:error] [pid 1018003:tid 1018242] [client 45.148.10.246:30958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eastsidepride.com"] [uri "/blog/index.php"] [unique_id "apK87TAh5Y1i2tUxg4HePQAABhI"]
[Sat Aug 29 05:05:17.868718 2026] [security2:error] [pid 1017536:tid 1017755] [client 4.232.148.111:14806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/radio.php"] [unique_id "apK87SJcY4fy7tP-rU3gmwAAAm0"]
[Sat Aug 29 05:05:17.869806 2026] [security2:error] [pid 1017536:tid 1017785] [client 52.139.37.240:21386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/wp-header-json.php"] [unique_id "apK87SJcY4fy7tP-rU3gnAAAAos"]
[Sat Aug 29 05:05:17.871311 2026] [security2:error] [pid 1017536:tid 1017730] [client 158.23.184.117:21511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/002.php"] [unique_id "apK87SJcY4fy7tP-rU3gnQAAAlQ"]
[Sat Aug 29 05:05:17.881064 2026] [security2:error] [pid 1018003:tid 1018099] [remote 104.196.51.122:56266] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/.env"] [unique_id "apK87TAh5Y1i2tUxg4HeQAAGGE4"]
[Sat Aug 29 05:05:17.884493 2026] [cgid:error] [pid 1018003:tid 1018103] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:17.884761 2026] [cgid:error] [pid 1018003:tid 1018101] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:17.908189 2026] [security2:error] [pid 1018003:tid 1018153] [client 45.154.98.191:51809] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.acovib.com"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "apK87TAh5Y1i2tUxg4HeRAAABbo"]
[Sat Aug 29 05:05:17.911938 2026] [access_compat:error] [pid 1018003:tid 1018179] [client 67.20.76.220:12614] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:05:17.924208 2026] [security2:error] [pid 1017536:tid 1017667] [client 68.155.159.216:57444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/wp-includes/index.php"] [unique_id "apK87SJcY4fy7tP-rU3gqgAAAhU"]
[Sat Aug 29 05:05:17.934921 2026] [security2:error] [pid 1017536:tid 1017667] [client 20.48.251.3:57818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/xve22.php"] [unique_id "apK87SJcY4fy7tP-rU3gqwAAAhU"]
[Sat Aug 29 05:05:17.956414 2026] [security2:error] [pid 1018003:tid 1018157] [client 52.139.37.240:25029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/wp-admin/wp-fileesx-449.php"] [unique_id "apK87TAh5Y1i2tUxg4HeSAAABb4"]
[Sat Aug 29 05:05:17.964894 2026] [security2:error] [pid 1018003:tid 1018219] [client 68.155.159.216:12238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/atomlib.php"] [unique_id "apK87TAh5Y1i2tUxg4HeSQAABfw"]
[Sat Aug 29 05:05:17.972006 2026] [security2:error] [pid 1018003:tid 1018221] [client 20.48.160.90:28641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/2d7433/index.php"] [unique_id "apK87TAh5Y1i2tUxg4HeUAAABf4"]
[Sat Aug 29 05:05:17.999794 2026] [security2:error] [pid 1018003:tid 1018256] [client 20.63.81.20:26536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/blurbs.php"] [unique_id "apK87TAh5Y1i2tUxg4HeUgAABiA"]
[Sat Aug 29 05:05:18.002526 2026] [security2:error] [pid 1018003:tid 1018234] [client 158.23.184.117:24864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/.well-known/logs233/index.php"] [unique_id "apK87jAh5Y1i2tUxg4HeVAAABgo"]
[Sat Aug 29 05:05:18.003653 2026] [security2:error] [pid 1017536:tid 1017689] [client 185.104.184.230:49484] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.youthspeakoutint.org"] [uri "/autodiscover/autodiscover.xml/wp2/wp-includes/wlwmanifest.xml"] [unique_id "apK87iJcY4fy7tP-rU3gsAAAAis"]
[Sat Aug 29 05:05:18.011053 2026] [security2:error] [pid 1017536:tid 1017787] [client 35.213.70.61:0] ModSecurity: Warning. Matched phrase "BuiltWith" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "spellsoupdesign.com"] [uri "/index.html"] [unique_id "apK87iJcY4fy7tP-rU3gsQAAAo0"]
[Sat Aug 29 05:05:18.011521 2026] [security2:error] [pid 1017536:tid 1017750] [client 143.244.57.82:48392] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "wincosir.enproftp.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "apK87iJcY4fy7tP-rU3gsgAAAmg"]
[Sat Aug 29 05:05:18.012712 2026] [security2:error] [pid 1018003:tid 1018193] [client 35.213.70.61:55870] ModSecurity: Warning. Matched phrase "BuiltWith" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "spellsoupdesign.com"] [uri "/index.html"] [unique_id "apK87TAh5Y1i2tUxg4HeRgAF4lQ"]
[Sat Aug 29 05:05:18.017948 2026] [security2:error] [pid 1017536:tid 1017761] [client 20.63.219.114:2027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/al.php"] [unique_id "apK87iJcY4fy7tP-rU3gswAAAnM"]
[Sat Aug 29 05:05:18.023439 2026] [security2:error] [pid 1018003:tid 1018189] [client 40.83.93.50:10817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.superugly.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK87jAh5Y1i2tUxg4HeWAAABd4"]
[Sat Aug 29 05:05:18.024571 2026] [security2:error] [pid 1018003:tid 1018220] [client 158.23.184.117:14796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.uscgpipeband.org"] [uri "/wp-content/export.php"] [unique_id "apK87jAh5Y1i2tUxg4HeWQAABf0"]
[Sat Aug 29 05:05:18.024884 2026] [cgid:error] [pid 1018003:tid 1018093] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:18.030293 2026] [security2:error] [pid 1017536:tid 1017695] [client 158.23.184.117:21947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/0x.php"] [unique_id "apK87iJcY4fy7tP-rU3gtgAAAjE"]
[Sat Aug 29 05:05:18.049142 2026] [security2:error] [pid 1018003:tid 1018182] [client 168.107.94.195:54478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK87jAh5Y1i2tUxg4HeWwAABdc"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:18.052902 2026] [security2:error] [pid 1018003:tid 1018223] [client 20.203.141.11:29191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "germanmorenoperez.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK87jAh5Y1i2tUxg4HeXQAABgA"]
[Sat Aug 29 05:05:18.075916 2026] [security2:error] [pid 1017536:tid 1017689] [client 52.139.37.240:20749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/zup.php"] [unique_id "apK87iJcY4fy7tP-rU3guwAAAis"]
[Sat Aug 29 05:05:18.078103 2026] [security2:error] [pid 1017536:tid 1017668] [client 20.196.209.81:15769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/post.php"] [unique_id "apK87iJcY4fy7tP-rU3gvAAAAhY"]
[Sat Aug 29 05:05:18.085740 2026] [security2:error] [pid 1018003:tid 1018230] [client 20.48.251.3:57808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/06.php"] [unique_id "apK87jAh5Y1i2tUxg4HeYgAABgY"]
[Sat Aug 29 05:05:18.090348 2026] [security2:error] [pid 1017536:tid 1017769] [client 20.63.219.114:1957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/colors.php"] [unique_id "apK87iJcY4fy7tP-rU3gvgAAAns"]
[Sat Aug 29 05:05:18.101336 2026] [security2:error] [pid 1018003:tid 1018276] [client 20.196.209.81:17968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-admin/wp-load.php"] [unique_id "apK87jAh5Y1i2tUxg4HeZgAABjQ"]
[Sat Aug 29 05:05:18.105770 2026] [security2:error] [pid 1018003:tid 1018117] [remote 104.196.51.122:56266] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/.env.old"] [unique_id "apK87jAh5Y1i2tUxg4HeZwAFzGA"]
[Sat Aug 29 05:05:18.106434 2026] [security2:error] [pid 1018003:tid 1018118] [remote 104.196.51.122:56266] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/.env.bak"] [unique_id "apK87jAh5Y1i2tUxg4HeaQAFzGE"]
[Sat Aug 29 05:05:18.106471 2026] [security2:error] [pid 1018003:tid 1018121] [remote 104.196.51.122:56266] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/.env.backup"] [unique_id "apK87jAh5Y1i2tUxg4HeagAFzGQ"]
[Sat Aug 29 05:05:18.107063 2026] [security2:error] [pid 1018003:tid 1018252] [client 20.196.209.81:16300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/wp-contentt.php"] [unique_id "apK87jAh5Y1i2tUxg4HebAAABhw"]
[Sat Aug 29 05:05:18.109775 2026] [cgid:error] [pid 1018003:tid 1018068] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:18.110478 2026] [cgid:error] [pid 1018003:tid 1018119] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:18.114141 2026] [security2:error] [pid 1017536:tid 1017732] [client 35.213.70.61:0] ModSecurity: Warning. Matched phrase "BuiltWith" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "spellsoupdesign.com"] [uri "/robots.txt"] [unique_id "apK87iJcY4fy7tP-rU3gwAAAAlY"]
[Sat Aug 29 05:05:18.116620 2026] [security2:error] [pid 1018003:tid 1018195] [client 35.213.70.61:55878] ModSecurity: Warning. Matched phrase "BuiltWith" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "spellsoupdesign.com"] [uri "/robots.txt"] [unique_id "apK87jAh5Y1i2tUxg4HeZAAF5F4"]
[Sat Aug 29 05:05:18.127119 2026] [security2:error] [pid 1017536:tid 1017684] [client 20.63.219.114:2935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "compropolis.mx"] [uri "/dxc.php"] [unique_id "apK87iJcY4fy7tP-rU3gwQAAAiY"]
[Sat Aug 29 05:05:18.129674 2026] [security2:error] [pid 1017536:tid 1017673] [client 158.158.54.35:22504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/w.php"] [unique_id "apK87iJcY4fy7tP-rU3gwgAAAhs"]
[Sat Aug 29 05:05:18.130202 2026] [security2:error] [pid 1017536:tid 1017746] [client 20.63.81.20:26432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/h.php"] [unique_id "apK87iJcY4fy7tP-rU3gwwAAAmQ"]
[Sat Aug 29 05:05:18.145990 2026] [security2:error] [pid 1018003:tid 1018264] [client 20.48.160.90:62633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/wp-login.php"] [unique_id "apK87jAh5Y1i2tUxg4HebgAABig"]
[Sat Aug 29 05:05:18.148291 2026] [security2:error] [pid 1018003:tid 1018265] [client 34.143.179.161:19506] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cpcontacts.harnessenergyusa.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK87jAh5Y1i2tUxg4HebwAABik"]
[Sat Aug 29 05:05:18.155772 2026] [security2:error] [pid 1017536:tid 1017766] [client 158.23.184.117:24884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/.well-known/maintenance.php"] [unique_id "apK87iJcY4fy7tP-rU3gxgAAAng"]
[Sat Aug 29 05:05:18.163422 2026] [security2:error] [pid 1018003:tid 1018165] [client 34.143.179.161:19396] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cpcontacts.harnessenergyusa.com"] [uri "/@vite/env"] [unique_id "apK87jAh5Y1i2tUxg4HecAAABcY"]
[Sat Aug 29 05:05:18.174416 2026] [security2:error] [pid 1017536:tid 1017721] [client 158.23.184.117:14472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.uscgpipeband.org"] [uri "/new.php"] [unique_id "apK87iJcY4fy7tP-rU3gyQAAAks"]
[Sat Aug 29 05:05:18.177921 2026] [security2:error] [pid 1017536:tid 1017747] [client 52.139.37.240:25064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/wp-content/themes/min.php"] [unique_id "apK87iJcY4fy7tP-rU3gywAAAmU"]
[Sat Aug 29 05:05:18.180342 2026] [security2:error] [pid 1018003:tid 1018151] [client 158.23.184.117:21543] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/1.php"] [unique_id "apK87jAh5Y1i2tUxg4HecQAABbg"]
[Sat Aug 29 05:05:18.180450 2026] [security2:error] [pid 1018003:tid 1018151] [client 158.23.184.117:21543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/1.php"] [unique_id "apK87jAh5Y1i2tUxg4HecQAABbg"]
[Sat Aug 29 05:05:18.185500 2026] [security2:error] [pid 1017536:tid 1017763] [client 20.104.49.130:53644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/new.php"] [unique_id "apK87iJcY4fy7tP-rU3gzAAAAnU"]
[Sat Aug 29 05:05:18.211440 2026] [security2:error] [pid 1017536:tid 1017727] [client 68.155.159.216:16229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK87iJcY4fy7tP-rU3gzwAAAlE"]
[Sat Aug 29 05:05:18.218102 2026] [security2:error] [pid 1018003:tid 1018274] [client 151.123.177.244:23827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 244.177.123.151.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK87jAh5Y1i2tUxg4HecgAABjI"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:18.218696 2026] [security2:error] [pid 1018003:tid 1018174] [client 4.205.62.107:64971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/phpversion.php"] [unique_id "apK87jAh5Y1i2tUxg4HecwAABc8"]
[Sat Aug 29 05:05:18.231350 2026] [security2:error] [pid 1018003:tid 1018191] [client 4.205.62.107:22298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/adminer-4.7.6-en.php"] [unique_id "apK87jAh5Y1i2tUxg4HedAAABeA"]
[Sat Aug 29 05:05:18.249025 2026] [security2:error] [pid 1018003:tid 1018164] [client 20.48.251.3:57871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/xin1.php"] [unique_id "apK87jAh5Y1i2tUxg4HedQAABcU"]
[Sat Aug 29 05:05:18.251039 2026] [security2:error] [pid 1018003:tid 1018164] [client 158.23.147.79:30680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/file17.php"] [unique_id "apK87jAh5Y1i2tUxg4HedgAABcU"]
[Sat Aug 29 05:05:18.258615 2026] [security2:error] [pid 1017536:tid 1017693] [client 68.155.159.216:16219] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.showerdoorsdubuque.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK87iJcY4fy7tP-rU3g1AAAAi8"]
[Sat Aug 29 05:05:18.269525 2026] [security2:error] [pid 1017536:tid 1017781] [client 158.23.147.79:24564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK87iJcY4fy7tP-rU3g1gAAAoc"]
[Sat Aug 29 05:05:18.281158 2026] [security2:error] [pid 1017536:tid 1017775] [client 20.104.49.130:36334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/crgio.php"] [unique_id "apK87iJcY4fy7tP-rU3g1wAAAoE"]
[Sat Aug 29 05:05:18.299740 2026] [security2:error] [pid 1018003:tid 1018241] [client 158.23.184.117:24853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/.well-known/min.php"] [unique_id "apK87jAh5Y1i2tUxg4HeegAABhE"]
[Sat Aug 29 05:05:18.302048 2026] [security2:error] [pid 1017536:tid 1017715] [client 52.139.37.240:21128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/a9.php"] [unique_id "apK87iJcY4fy7tP-rU3g2QAAAkU"]
[Sat Aug 29 05:05:18.313971 2026] [security2:error] [pid 1018003:tid 1018258] [client 68.155.159.216:51556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/hehehehe.php"] [unique_id "apK87jAh5Y1i2tUxg4HefQAABiI"]
[Sat Aug 29 05:05:18.316927 2026] [security2:error] [pid 1017536:tid 1017696] [client 158.23.184.117:14372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.uscgpipeband.org"] [uri "/wp-content/plugins/revslider/admin.php"] [unique_id "apK87iJcY4fy7tP-rU3g3AAAAjI"]
[Sat Aug 29 05:05:18.318053 2026] [security2:error] [pid 1018003:tid 1018120] [remote 104.196.51.122:56266] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/api/.env"] [unique_id "apK87jAh5Y1i2tUxg4HefgAGFmM"]
[Sat Aug 29 05:05:18.326980 2026] [security2:error] [pid 1017536:tid 1017679] [client 158.23.184.117:21889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.angelaandkenny.strangeworx.com"] [uri "/10.php"] [unique_id "apK87iJcY4fy7tP-rU3g3QAAAiE"]
[Sat Aug 29 05:05:18.327045 2026] [security2:error] [pid 1018003:tid 1018208] [client 20.63.81.20:26492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/ano.php"] [unique_id "apK87jAh5Y1i2tUxg4HefwAABfE"]
[Sat Aug 29 05:05:18.330748 2026] [cgid:error] [pid 1018003:tid 1018125] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:18.334899 2026] [security2:error] [pid 1017536:tid 1017731] [client 20.48.160.90:62650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/images.php"] [unique_id "apK87iJcY4fy7tP-rU3g4QAAAlU"]
[Sat Aug 29 05:05:18.346989 2026] [security2:error] [pid 1017536:tid 1017760] [client 4.232.148.111:17518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/item.php"] [unique_id "apK87iJcY4fy7tP-rU3g4wAAAnI"]
[Sat Aug 29 05:05:18.352921 2026] [security2:error] [pid 1018003:tid 1018270] [client 74.248.24.12:22566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "apK87jAh5Y1i2tUxg4HehAAABi4"]
[Sat Aug 29 05:05:18.375906 2026] [security2:error] [pid 1018003:tid 1018232] [client 52.139.37.240:24593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/wp-content/themes/x/bypass.php"] [unique_id "apK87jAh5Y1i2tUxg4HehQAABgg"]
[Sat Aug 29 05:05:18.381988 2026] [security2:error] [pid 1018003:tid 1018196] [client 4.205.62.107:22218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/wp-content/admin.php"] [unique_id "apK87jAh5Y1i2tUxg4HehgAABeU"]
[Sat Aug 29 05:05:18.384419 2026] [security2:error] [pid 1018003:tid 1018158] [client 103.240.76.112:49561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK87jAh5Y1i2tUxg4HehwAABb8"]
[Sat Aug 29 05:05:18.384521 2026] [security2:error] [pid 1018003:tid 1018158] [client 103.240.76.112:49561] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK87jAh5Y1i2tUxg4HehwAABb8"]
[Sat Aug 29 05:05:18.385073 2026] [security2:error] [pid 1017536:tid 1017720] [client 20.48.251.3:28424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/sadd.php"] [unique_id "apK87iJcY4fy7tP-rU3g5wAAAko"]
[Sat Aug 29 05:05:18.407833 2026] [security2:error] [pid 1017536:tid 1017742] [client 68.155.159.216:33722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK87iJcY4fy7tP-rU3g6AAAAmA"]
[Sat Aug 29 05:05:18.425648 2026] [security2:error] [pid 1017536:tid 1017755] [client 158.23.147.79:25473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK87iJcY4fy7tP-rU3g6gAAAm0"]
[Sat Aug 29 05:05:18.434647 2026] [core:error] [pid 1017536:tid 1017728] [client 74.248.24.12:33427] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:18.435330 2026] [core:error] [pid 1017536:tid 1017728] [client 74.248.24.12:33427] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:18.449298 2026] [security2:error] [pid 1017536:tid 1017670] [client 20.63.219.114:18313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/global.php"] [unique_id "apK87iJcY4fy7tP-rU3g7wAAAhg"]
[Sat Aug 29 05:05:18.451268 2026] [security2:error] [pid 1018003:tid 1018267] [client 168.107.94.195:54865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK87jAh5Y1i2tUxg4HejAAABis"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:18.456650 2026] [security2:error] [pid 1017536:tid 1017741] [client 20.63.81.20:26378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/ai.php"] [unique_id "apK87iJcY4fy7tP-rU3g8AAAAl8"]
[Sat Aug 29 05:05:18.456821 2026] [security2:error] [pid 1017536:tid 1017777] [client 45.154.98.191:52067] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.acovib.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "apK87iJcY4fy7tP-rU3g8QAAAoM"]
[Sat Aug 29 05:05:18.460749 2026] [security2:error] [pid 1018003:tid 1018219] [client 158.23.147.79:58919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK87jAh5Y1i2tUxg4HejQAABfw"]
[Sat Aug 29 05:05:18.462794 2026] [security2:error] [pid 1018003:tid 1018271] [client 4.232.148.111:3051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tiaandephraim.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "apK87jAh5Y1i2tUxg4HejgAABi8"]
[Sat Aug 29 05:05:18.479709 2026] [security2:error] [pid 1018003:tid 1018160] [client 20.48.160.90:64719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/ops.php"] [unique_id "apK87jAh5Y1i2tUxg4HejwAABcE"]
[Sat Aug 29 05:05:18.480722 2026] [security2:error] [pid 1017536:tid 1017771] [client 20.196.209.81:9499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/csv.php"] [unique_id "apK87iJcY4fy7tP-rU3g9QAAAn0"]
[Sat Aug 29 05:05:18.490518 2026] [security2:error] [pid 1018003:tid 1018248] [client 20.63.219.114:1964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/Js.php"] [unique_id "apK87jAh5Y1i2tUxg4HekQAABhg"]
[Sat Aug 29 05:05:18.497330 2026] [security2:error] [pid 1018003:tid 1018217] [client 52.139.37.240:21390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/admin/index.php"] [unique_id "apK87jAh5Y1i2tUxg4HekgAABfo"]
[Sat Aug 29 05:05:18.499516 2026] [security2:error] [pid 1017536:tid 1017792] [client 20.196.209.81:18191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-admin/wp-mail.php"] [unique_id "apK87iJcY4fy7tP-rU3g-AAAApI"]
[Sat Aug 29 05:05:18.507558 2026] [security2:error] [pid 1018003:tid 1018132] [remote 2a06:98c0:3600::103:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.jobindjibouti.com"] [uri "/wp-json/wp/v2/job-listings"] [unique_id "apK87jAh5Y1i2tUxg4HekwAF-G8"]
[Sat Aug 29 05:05:18.512021 2026] [security2:error] [pid 1018003:tid 1018172] [client 20.203.141.11:31328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "germanmorenoperez.com"] [uri "/wp-admin.php"] [unique_id "apK87jAh5Y1i2tUxg4HelAAABc0"]
[Sat Aug 29 05:05:18.526230 2026] [security2:error] [pid 1018003:tid 1018250] [client 40.83.93.50:1961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.superugly.com"] [uri "/wp-content/languages/chosen.php"] [unique_id "apK87jAh5Y1i2tUxg4HelQAABho"]
[Sat Aug 29 05:05:18.536472 2026] [security2:error] [pid 1017536:tid 1017576] [remote 93.123.109.228:48278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/php-info.php"] [unique_id "apK87iJcY4fy7tP-rU3g_AACUCc"]
[Sat Aug 29 05:05:18.543287 2026] [security2:error] [pid 1017536:tid 1017744] [client 4.205.62.107:2916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/phpi.php"] [unique_id "apK87iJcY4fy7tP-rU3g_QAAAmI"]
[Sat Aug 29 05:05:18.554099 2026] [security2:error] [pid 1017536:tid 1017736] [client 20.196.209.81:16276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/theme.php"] [unique_id "apK87iJcY4fy7tP-rU3g_wAAAlo"]
[Sat Aug 29 05:05:18.555433 2026] [security2:error] [pid 1017536:tid 1017553] [remote 93.123.109.228:48278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/php_info.php"] [unique_id "apK87iJcY4fy7tP-rU3hAAACUBA"]
[Sat Aug 29 05:05:18.568196 2026] [security2:error] [pid 1017536:tid 1017789] [client 68.155.159.216:50256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-content/radio.php"] [unique_id "apK87iJcY4fy7tP-rU3hBAAAAo8"]
[Sat Aug 29 05:05:18.569438 2026] [security2:error] [pid 1017536:tid 1017738] [client 158.158.54.35:15875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/ahax.php"] [unique_id "apK87iJcY4fy7tP-rU3hBQAAAlw"]
[Sat Aug 29 05:05:18.572598 2026] [security2:error] [pid 1018003:tid 1018175] [client 158.23.147.79:23304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ridetimewinnipegservicetiresrims.ca"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK87jAh5Y1i2tUxg4HemQAABdA"]
[Sat Aug 29 05:05:18.575537 2026] [security2:error] [pid 1018003:tid 1018152] [client 20.48.251.3:28422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/application.config.php"] [unique_id "apK87jAh5Y1i2tUxg4HemgAABbk"]
[Sat Aug 29 05:05:18.585216 2026] [security2:error] [pid 1018003:tid 1018244] [client 143.244.57.82:48402] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "wincosir.enproftp.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "apK87jAh5Y1i2tUxg4HenAAABhQ"]
[Sat Aug 29 05:05:18.585637 2026] [security2:error] [pid 1017536:tid 1017591] [remote 93.123.109.228:48278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/php.php"] [unique_id "apK87iJcY4fy7tP-rU3hBgACUDY"]
[Sat Aug 29 05:05:18.596744 2026] [security2:error] [pid 1017536:tid 1017594] [remote 93.123.109.228:48278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/phpinfo.php"] [unique_id "apK87iJcY4fy7tP-rU3hBwACUDk"]
[Sat Aug 29 05:05:18.604690 2026] [security2:error] [pid 1017536:tid 1017683] [client 185.104.184.230:49490] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.youthspeakoutint.org"] [uri "/autodiscover/autodiscover.xml/site/wp-includes/wlwmanifest.xml"] [unique_id "apK87iJcY4fy7tP-rU3hCAAAAiU"]
[Sat Aug 29 05:05:18.606261 2026] [security2:error] [pid 1018003:tid 1018130] [remote 104.196.115.188:49512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/app/.env"] [unique_id "apK87jAh5Y1i2tUxg4HenQAF720"]
[Sat Aug 29 05:05:18.606305 2026] [security2:error] [pid 1018003:tid 1018133] [remote 104.196.115.188:49512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/frontend/.env"] [unique_id "apK87jAh5Y1i2tUxg4HengAF73A"]
[Sat Aug 29 05:05:18.623932 2026] [security2:error] [pid 1018003:tid 1018154] [client 158.23.147.79:63000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/xmlrpc.php"] [unique_id "apK87jAh5Y1i2tUxg4HenwAABbs"]
[Sat Aug 29 05:05:18.632748 2026] [security2:error] [pid 1017536:tid 1017695] [client 20.48.160.90:62709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK87iJcY4fy7tP-rU3hCQAAAjE"]
[Sat Aug 29 05:05:18.635290 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.63.81.20:26479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/sf.php"] [unique_id "apK87jAh5Y1i2tUxg4HeoAAABcI"]
[Sat Aug 29 05:05:18.647171 2026] [security2:error] [pid 1017536:tid 1017723] [client 20.63.219.114:15284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "compropolis.mx"] [uri "/wp-2019.php"] [unique_id "apK87iJcY4fy7tP-rU3hCgAAAk0"]
[Sat Aug 29 05:05:18.649639 2026] [security2:error] [pid 1018003:tid 1018203] [client 52.139.37.240:24608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK87jAh5Y1i2tUxg4HeoQAABew"]
[Sat Aug 29 05:05:18.667474 2026] [security2:error] [pid 1017536:tid 1017680] [client 4.205.62.107:53357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/aws-credentials.php"] [unique_id "apK87iJcY4fy7tP-rU3hCwAAAiI"]
[Sat Aug 29 05:05:18.674310 2026] [security2:error] [pid 1018003:tid 1018169] [client 68.155.159.216:18279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.baxterevents.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK87jAh5Y1i2tUxg4HeogAABco"]
[Sat Aug 29 05:05:18.692981 2026] [security2:error] [pid 1017536:tid 1017711] [client 52.139.37.240:21391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/makeasmtp.php"] [unique_id "apK87iJcY4fy7tP-rU3hDQAAAkE"]
[Sat Aug 29 05:05:18.711001 2026] [security2:error] [pid 1017536:tid 1017790] [client 20.48.251.3:57849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/xp.php"] [unique_id "apK87iJcY4fy7tP-rU3hDwAAApA"]
[Sat Aug 29 05:05:18.711102 2026] [security2:error] [pid 1018003:tid 1018129] [remote 104.196.115.188:49512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/dev/.env"] [unique_id "apK87jAh5Y1i2tUxg4HeowAF52w"]
[Sat Aug 29 05:05:18.711103 2026] [security2:error] [pid 1018003:tid 1018138] [remote 104.196.115.188:49512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/server/.env"] [unique_id "apK87jAh5Y1i2tUxg4HepAAF53U"]
[Sat Aug 29 05:05:18.711111 2026] [security2:error] [pid 1018003:tid 1018137] [remote 104.196.115.188:49512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/production/.env"] [unique_id "apK87jAh5Y1i2tUxg4HepQAF53Q"]
[Sat Aug 29 05:05:18.723319 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.104.49.130:47974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/wp.php"] [unique_id "apK87iJcY4fy7tP-rU3hEwAAAnk"]
[Sat Aug 29 05:05:18.732083 2026] [security2:error] [pid 1017536:tid 1017668] [client 4.205.62.107:54438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "troop264olney.net"] [uri "/requirements.php"] [unique_id "apK87iJcY4fy7tP-rU3hFAAAAhY"]
[Sat Aug 29 05:05:18.735971 2026] [security2:error] [pid 1018003:tid 1018088] [remote 104.196.115.188:49512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/src/.env"] [unique_id "apK87jAh5Y1i2tUxg4HepgAGBkM"]
[Sat Aug 29 05:05:18.748290 2026] [security2:error] [pid 1017536:tid 1017769] [client 162.198.206.205:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutihomes.com"] [uri "/boats"] [unique_id "apK87iJcY4fy7tP-rU3hFwAAAns"], referer: https://www.bing.com/
[Sat Aug 29 05:05:18.755601 2026] [security2:error] [pid 1017536:tid 1017597] [remote 93.123.109.228:48278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/public/phpinfo.php"] [unique_id "apK87iJcY4fy7tP-rU3hGwACFDw"]
[Sat Aug 29 05:05:18.794038 2026] [security2:error] [pid 1018003:tid 1018239] [client 209.50.160.228:47979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.160.50.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK87jAh5Y1i2tUxg4HepwAABg8"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:18.804653 2026] [security2:error] [pid 1017536:tid 1017703] [client 20.48.160.90:62675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK87iJcY4fy7tP-rU3hIwAAAjk"]
[Sat Aug 29 05:05:18.825991 2026] [security2:error] [pid 1017536:tid 1017757] [client 20.63.81.20:26511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/xx.php"] [unique_id "apK87iJcY4fy7tP-rU3hJAAAAm8"]
[Sat Aug 29 05:05:18.832544 2026] [security2:error] [pid 1017536:tid 1017740] [client 168.107.94.195:55262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK87iJcY4fy7tP-rU3hJQAAAl4"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:18.835683 2026] [security2:error] [pid 1018003:tid 1018223] [client 4.232.148.111:1410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/t.php"] [unique_id "apK87jAh5Y1i2tUxg4HeqQAABgA"]
[Sat Aug 29 05:05:18.843514 2026] [security2:error] [pid 1017536:tid 1017756] [client 20.63.219.114:1489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/update.php"] [unique_id "apK87iJcY4fy7tP-rU3hJwAAAm4"]
[Sat Aug 29 05:05:18.844422 2026] [security2:error] [pid 1017536:tid 1017671] [client 20.48.251.3:57918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/g3.php"] [unique_id "apK87iJcY4fy7tP-rU3hKAAAAhk"]
[Sat Aug 29 05:05:18.849292 2026] [security2:error] [pid 1017536:tid 1017689] [client 20.63.219.114:2045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/access.php"] [unique_id "apK87iJcY4fy7tP-rU3hKQAAAis"]
[Sat Aug 29 05:05:18.854745 2026] [security2:error] [pid 1017536:tid 1017773] [client 52.139.37.240:25059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/wp-info.php"] [unique_id "apK87iJcY4fy7tP-rU3hKwAAAn8"]
[Sat Aug 29 05:05:18.867741 2026] [security2:error] [pid 1017536:tid 1017672] [client 74.248.24.12:8399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "apK87iJcY4fy7tP-rU3hLAAAAho"]
[Sat Aug 29 05:05:18.879153 2026] [security2:error] [pid 1017536:tid 1017772] [client 20.196.209.81:9480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/fox.php"] [unique_id "apK87iJcY4fy7tP-rU3hLQAAAn4"]
[Sat Aug 29 05:05:18.889535 2026] [security2:error] [pid 1017536:tid 1017766] [client 52.139.37.240:21420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/paku.php"] [unique_id "apK87iJcY4fy7tP-rU3hLgAAAng"]
[Sat Aug 29 05:05:18.895079 2026] [security2:error] [pid 1017536:tid 1017758] [client 20.196.209.81:9125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-admin/wp-settings.php"] [unique_id "apK87iJcY4fy7tP-rU3hLwAAAnA"]
[Sat Aug 29 05:05:18.916443 2026] [security2:error] [pid 1018003:tid 1018139] [remote 104.196.115.188:49512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/v2/.env"] [unique_id "apK87jAh5Y1i2tUxg4HeqgAGKnY"]
[Sat Aug 29 05:05:18.919082 2026] [security2:error] [pid 1018003:tid 1018140] [remote 104.196.115.188:49512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/staging/.env"] [unique_id "apK87jAh5Y1i2tUxg4HeqwAGKnc"]
[Sat Aug 29 05:05:18.919081 2026] [security2:error] [pid 1018003:tid 1018141] [remote 104.196.51.122:56266] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/backend/.env"] [unique_id "apK87jAh5Y1i2tUxg4HerAAF_3g"]
[Sat Aug 29 05:05:18.934064 2026] [security2:error] [pid 1018003:tid 1018145] [remote 104.196.115.188:49512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/docker/.env"] [unique_id "apK87jAh5Y1i2tUxg4HerwAGKnw"]
[Sat Aug 29 05:05:18.934976 2026] [cgid:error] [pid 1018003:tid 1018139] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:18.936951 2026] [access_compat:error] [pid 1017536:tid 1017775] [client 67.20.76.220:12638] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:05:18.937149 2026] [access_compat:error] [pid 1017536:tid 1017745] [client 67.20.76.220:12640] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:05:18.944589 2026] [cgid:error] [pid 1018003:tid 1018147] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:18.945516 2026] [cgid:error] [pid 1018003:tid 1018144] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:18.946235 2026] [security2:error] [pid 1018003:tid 1018073] [remote 104.196.51.122:56266] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/config/.env"] [unique_id "apK87jAh5Y1i2tUxg4HesgAF_zQ"]
[Sat Aug 29 05:05:18.950559 2026] [cgid:error] [pid 1018003:tid 1018146] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:18.969950 2026] [security2:error] [pid 1017536:tid 1017731] [client 20.63.81.20:26555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/uwu.php"] [unique_id "apK87iJcY4fy7tP-rU3hNwAAAlU"]
[Sat Aug 29 05:05:18.975947 2026] [security2:error] [pid 1017536:tid 1017691] [client 20.48.251.3:57893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/wp-konfig.php"] [unique_id "apK87iJcY4fy7tP-rU3hOwAAAi0"]
[Sat Aug 29 05:05:18.977653 2026] [security2:error] [pid 1017536:tid 1017601] [remote 35.243.213.218:46954] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "www.mikeycunningham.com"] [uri "/.ssh/id_rsa"] [unique_id "apK87iJcY4fy7tP-rU3hOgACdkA"]
[Sat Aug 29 05:05:18.985337 2026] [security2:error] [pid 1017536:tid 1017763] [client 20.196.209.81:12085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/alumni_reg.php"] [unique_id "apK87iJcY4fy7tP-rU3hPQAAAnU"]
[Sat Aug 29 05:05:18.999270 2026] [security2:error] [pid 1017536:tid 1017705] [client 40.83.93.50:10137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.superugly.com"] [uri "/wp-content/languages/index.php"] [unique_id "apK87iJcY4fy7tP-rU3hPwAAAjs"]
[Sat Aug 29 05:05:19.004785 2026] [core:error] [pid 1017536:tid 1017685] [client 74.248.24.12:41943] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:19.004802 2026] [core:error] [pid 1017536:tid 1017685] [client 74.248.24.12:41943] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:19.013836 2026] [security2:error] [pid 1017536:tid 1017788] [client 20.48.160.90:62698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/about.php"] [unique_id "apK87yJcY4fy7tP-rU3hQgAAAo4"]
[Sat Aug 29 05:05:19.015513 2026] [security2:error] [pid 1017536:tid 1017778] [client 158.158.54.35:19349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/shell.php"] [unique_id "apK87yJcY4fy7tP-rU3hQwAAAoQ"]
[Sat Aug 29 05:05:19.021756 2026] [security2:error] [pid 1017536:tid 1017770] [client 4.232.148.111:24812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tiaandephraim.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "apK87yJcY4fy7tP-rU3hRgAAAnw"]
[Sat Aug 29 05:05:19.030530 2026] [security2:error] [pid 1017536:tid 1017694] [client 68.155.159.216:58258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/mah.php"] [unique_id "apK87yJcY4fy7tP-rU3hTQAAAjA"]
[Sat Aug 29 05:05:19.034885 2026] [cgid:error] [pid 1018003:tid 1018026] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:19.054722 2026] [security2:error] [pid 1018003:tid 1018212] [client 52.139.37.240:58578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/wp-wordfence-waf.php"] [unique_id "apK87zAh5Y1i2tUxg4HetAAABfU"]
[Sat Aug 29 05:05:19.065953 2026] [security2:error] [pid 1018003:tid 1018243] [client 45.154.98.191:52265] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.acovib.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "apK87zAh5Y1i2tUxg4HetgAABhM"]
[Sat Aug 29 05:05:19.070656 2026] [security2:error] [pid 1017536:tid 1017667] [client 68.155.159.216:12273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/lv.php"] [unique_id "apK87yJcY4fy7tP-rU3hVgAAAhU"]
[Sat Aug 29 05:05:19.073561 2026] [security2:error] [pid 1017536:tid 1017717] [client 20.63.219.114:9384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "compropolis.mx"] [uri "/menu.php"] [unique_id "apK87yJcY4fy7tP-rU3hVwAAAkc"]
[Sat Aug 29 05:05:19.115233 2026] [security2:error] [pid 1017536:tid 1017728] [client 52.139.37.240:21417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/rtx.php"] [unique_id "apK87yJcY4fy7tP-rU3hXAAAAlI"]
[Sat Aug 29 05:05:19.118259 2026] [security2:error] [pid 1017536:tid 1017736] [client 20.48.251.3:57804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/25.php"] [unique_id "apK87yJcY4fy7tP-rU3hXgAAAlo"]
[Sat Aug 29 05:05:19.118876 2026] [security2:error] [pid 1017536:tid 1017789] [client 20.63.81.20:26530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/signon.php"] [unique_id "apK87yJcY4fy7tP-rU3hXwAAAo8"]
[Sat Aug 29 05:05:19.135812 2026] [security2:error] [pid 1017536:tid 1017727] [client 143.244.57.82:48408] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "wincosir.enproftp.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "apK87yJcY4fy7tP-rU3hYQAAAlE"]
[Sat Aug 29 05:05:19.159043 2026] [security2:error] [pid 1017536:tid 1017695] [client 20.48.160.90:64743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/admin.php/admin.php"] [unique_id "apK87yJcY4fy7tP-rU3hYgAAAjE"]
[Sat Aug 29 05:05:19.199718 2026] [security2:error] [pid 1017536:tid 1017707] [client 20.63.219.114:9166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/blog.php"] [unique_id "apK87yJcY4fy7tP-rU3hZwAAAj0"]
[Sat Aug 29 05:05:19.209122 2026] [security2:error] [pid 1017536:tid 1017693] [client 185.104.184.230:36420] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.youthspeakoutint.org"] [uri "/autodiscover/autodiscover.xml/cms/wp-includes/wlwmanifest.xml"] [unique_id "apK87yJcY4fy7tP-rU3haQAAAi8"]
[Sat Aug 29 05:05:19.212539 2026] [security2:error] [pid 1018003:tid 1018257] [client 168.107.94.195:55634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK87zAh5Y1i2tUxg4HeuQAABiE"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:19.216035 2026] [cgid:error] [pid 1018003:tid 1018024] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:19.223686 2026] [security2:error] [pid 1017536:tid 1017558] [remote 35.243.213.218:46954] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "www.mikeycunningham.com"] [uri "/.ssh/id_dsa"] [unique_id "apK87yJcY4fy7tP-rU3hbQACdhU"]
[Sat Aug 29 05:05:19.234611 2026] [security2:error] [pid 1017536:tid 1017739] [client 61.9.8.240:164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK87yJcY4fy7tP-rU3hbgAAAl0"]
[Sat Aug 29 05:05:19.234738 2026] [security2:error] [pid 1017536:tid 1017739] [client 61.9.8.240:164] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK87yJcY4fy7tP-rU3hbgAAAl0"]
[Sat Aug 29 05:05:19.252051 2026] [security2:error] [pid 1017536:tid 1017754] [client 20.48.251.3:57891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/nlnub.php"] [unique_id "apK87yJcY4fy7tP-rU3hcAAAAmw"]
[Sat Aug 29 05:05:19.254131 2026] [security2:error] [pid 1017536:tid 1017710] [client 20.63.219.114:1497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/classsmtps.php"] [unique_id "apK87yJcY4fy7tP-rU3hcQAAAkA"]
[Sat Aug 29 05:05:19.254717 2026] [security2:error] [pid 1017536:tid 1017668] [client 52.139.37.240:24684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/ws49.php"] [unique_id "apK87yJcY4fy7tP-rU3hcgAAAhY"]
[Sat Aug 29 05:05:19.263196 2026] [security2:error] [pid 1017536:tid 1017684] [client 68.155.159.216:24536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-admin/about.php"] [unique_id "apK87yJcY4fy7tP-rU3hcwAAAiY"]
[Sat Aug 29 05:05:19.264135 2026] [security2:error] [pid 1017536:tid 1017673] [client 20.63.81.20:26491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/file61.php"] [unique_id "apK87yJcY4fy7tP-rU3hdAAAAhs"]
[Sat Aug 29 05:05:19.266717 2026] [security2:error] [pid 1018003:tid 1018033] [remote 104.196.115.188:49512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/old/.env"] [unique_id "apK87zAh5Y1i2tUxg4HeugAFtww"]
[Sat Aug 29 05:05:19.274312 2026] [security2:error] [pid 1018003:tid 1018021] [remote 104.196.51.122:56266] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/.github/.env"] [unique_id "apK87zAh5Y1i2tUxg4HeuwAF4AA"]
[Sat Aug 29 05:05:19.276157 2026] [security2:error] [pid 1017536:tid 1017765] [client 20.196.209.81:15125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/disagraeosc.php"] [unique_id "apK87yJcY4fy7tP-rU3hdQAAAnc"]
[Sat Aug 29 05:05:19.277848 2026] [cgid:error] [pid 1018003:tid 1018071] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:19.280003 2026] [security2:error] [pid 1017536:tid 1017669] [client 185.104.184.230:45792] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.rtg.paw.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "apK87yJcY4fy7tP-rU3hdgAAAhc"]
[Sat Aug 29 05:05:19.280103 2026] [security2:error] [pid 1018003:tid 1018031] [remote 104.196.115.188:49512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/v1/.env"] [unique_id "apK87zAh5Y1i2tUxg4HevQAGMQo"]
[Sat Aug 29 05:05:19.281942 2026] [security2:error] [pid 1018003:tid 1018202] [client 35.213.70.61:0] ModSecurity: Warning. Matched phrase "BuiltWith" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "spellsoupdesign.com"] [uri "/w_api/Handler.php"] [unique_id "apK87jAh5Y1i2tUxg4HemwAABes"]
[Sat Aug 29 05:05:19.291310 2026] [security2:error] [pid 1017536:tid 1017752] [client 20.196.209.81:19360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-admin/wp-signup.php"] [unique_id "apK87yJcY4fy7tP-rU3heAAAAmo"]
[Sat Aug 29 05:05:19.295648 2026] [security2:error] [pid 1018003:tid 1018143] [remote 104.196.115.188:49512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/apps/.env"] [unique_id "apK87zAh5Y1i2tUxg4HevwAF1no"]
[Sat Aug 29 05:05:19.299462 2026] [cgid:error] [pid 1018003:tid 1018028] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:19.300132 2026] [security2:error] [pid 1018003:tid 1018224] [client 35.213.70.61:55880] ModSecurity: Warning. Matched phrase "BuiltWith" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "spellsoupdesign.com"] [uri "/llms.txt"] [unique_id "apK87jAh5Y1i2tUxg4HelgAGAW4"]
[Sat Aug 29 05:05:19.301553 2026] [cgid:error] [pid 1018003:tid 1018030] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:19.303999 2026] [security2:error] [pid 1017536:tid 1017773] [client 20.48.160.90:64704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/media.php"] [unique_id "apK87yJcY4fy7tP-rU3hewAAAn8"]
[Sat Aug 29 05:05:19.311131 2026] [security2:error] [pid 1018003:tid 1018174] [client 52.139.37.240:21405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/update/da222.php"] [unique_id "apK87zAh5Y1i2tUxg4HewgAABc8"]
[Sat Aug 29 05:05:19.314506 2026] [security2:error] [pid 1017536:tid 1017761] [client 4.232.148.111:35085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/i.php"] [unique_id "apK87yJcY4fy7tP-rU3hfAAAAnM"]
[Sat Aug 29 05:05:19.332023 2026] [security2:error] [pid 1017536:tid 1017723] [client 65.111.7.230:51897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.7.111.65.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK87yJcY4fy7tP-rU3hegAAAk0"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:19.335439 2026] [security2:error] [pid 1017536:tid 1017564] [remote 35.243.213.218:46954] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "www.mikeycunningham.com"] [uri "/id_rsa"] [unique_id "apK87yJcY4fy7tP-rU3hfgACdhs"]
[Sat Aug 29 05:05:19.346849 2026] [security2:error] [pid 1017536:tid 1017725] [client 4.205.62.107:64944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/adminfus.php"] [unique_id "apK87yJcY4fy7tP-rU3hfwAAAk8"]
[Sat Aug 29 05:05:19.352877 2026] [cgid:error] [pid 1018003:tid 1018134] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:19.363441 2026] [security2:error] [pid 1017536:tid 1017696] [client 68.155.159.216:16139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/makeasmtp.php"] [unique_id "apK87yJcY4fy7tP-rU3hgwAAAjI"]
[Sat Aug 29 05:05:19.364870 2026] [security2:error] [pid 1017536:tid 1017679] [client 68.155.159.216:16210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.showerdoorsdubuque.com"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK87yJcY4fy7tP-rU3hhQAAAiE"]
[Sat Aug 29 05:05:19.378757 2026] [security2:error] [pid 1018003:tid 1018188] [client 158.23.147.79:24570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/dropdown.php"] [unique_id "apK87zAh5Y1i2tUxg4HexAAABd0"]
[Sat Aug 29 05:05:19.381107 2026] [security2:error] [pid 1018003:tid 1018023] [remote 104.196.115.188:49512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/site/.env"] [unique_id "apK87zAh5Y1i2tUxg4HexQAGGwI"]
[Sat Aug 29 05:05:19.382789 2026] [security2:error] [pid 1017536:tid 1017751] [client 74.248.24.12:28177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/gifclass.php"] [unique_id "apK87yJcY4fy7tP-rU3hiAAAAmk"]
[Sat Aug 29 05:05:19.387546 2026] [security2:error] [pid 1017536:tid 1017706] [client 4.205.62.107:22289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/api.php"] [unique_id "apK87yJcY4fy7tP-rU3hiQAAAjw"]
[Sat Aug 29 05:05:19.403058 2026] [security2:error] [pid 1017536:tid 1017775] [client 20.48.251.3:57847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/mga.php"] [unique_id "apK87yJcY4fy7tP-rU3hjAAAAoE"]
[Sat Aug 29 05:05:19.428504 2026] [security2:error] [pid 1017536:tid 1017721] [client 20.196.209.81:1690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/colors.php"] [unique_id "apK87yJcY4fy7tP-rU3hkQAAAks"]
[Sat Aug 29 05:05:19.429484 2026] [authz_core:error] [pid 1018003:tid 1018135] [remote 104.196.51.122:56266] AH01630: client denied by server configuration: /home4/tdessixf/public_html/bigbuttonscarf/.htpasswd
[Sat Aug 29 05:05:19.432211 2026] [security2:error] [pid 1018003:tid 1018153] [client 20.63.81.20:26443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/copypaths.php"] [unique_id "apK87zAh5Y1i2tUxg4HeyAAABbo"]
[Sat Aug 29 05:05:19.432583 2026] [cgid:error] [pid 1018003:tid 1018032] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:19.449860 2026] [security2:error] [pid 1017536:tid 1017760] [client 20.63.219.114:11915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "compropolis.mx"] [uri "/alfa.php"] [unique_id "apK87yJcY4fy7tP-rU3hkgAAAnI"]
[Sat Aug 29 05:05:19.450192 2026] [security2:error] [pid 1017536:tid 1017692] [client 20.48.160.90:63548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/mac.php"] [unique_id "apK87yJcY4fy7tP-rU3hkwAAAi4"]
[Sat Aug 29 05:05:19.450434 2026] [security2:error] [pid 1017536:tid 1017678] [client 68.155.159.216:51486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK87yJcY4fy7tP-rU3hlAAAAiA"]
[Sat Aug 29 05:05:19.453686 2026] [cgid:error] [pid 1018003:tid 1018100] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:19.461932 2026] [security2:error] [pid 1017536:tid 1017672] [client 158.158.54.35:9443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/elp.php"] [unique_id "apK87yJcY4fy7tP-rU3hmAAAAho"]
[Sat Aug 29 05:05:19.466573 2026] [security2:error] [pid 1017536:tid 1017742] [client 52.139.37.240:24669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/xxx.php"] [unique_id "apK87yJcY4fy7tP-rU3hmQAAAmA"]
[Sat Aug 29 05:05:19.472323 2026] [cgid:error] [pid 1018003:tid 1018102] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:19.480720 2026] [security2:error] [pid 1017536:tid 1017781] [client 40.83.93.50:10850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.superugly.com"] [uri "/wp-content/languages/min.php"] [unique_id "apK87yJcY4fy7tP-rU3hmwAAAoc"]
[Sat Aug 29 05:05:19.534128 2026] [security2:error] [pid 1017536:tid 1017717] [client 158.23.147.79:25549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/simple.php"] [unique_id "apK87yJcY4fy7tP-rU3hngAAAkc"]
[Sat Aug 29 05:05:19.540503 2026] [security2:error] [pid 1017536:tid 1017713] [client 20.48.251.3:57868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/ccou.php"] [unique_id "apK87yJcY4fy7tP-rU3hnwAAAkM"]
[Sat Aug 29 05:05:19.545586 2026] [security2:error] [pid 1017536:tid 1017731] [client 4.232.148.111:24799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tiaandephraim.com"] [uri "/gifclass.php"] [unique_id "apK87yJcY4fy7tP-rU3hoAAAAlU"]
[Sat Aug 29 05:05:19.561192 2026] [security2:error] [pid 1017536:tid 1017789] [client 20.63.81.20:26516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/bless6.php"] [unique_id "apK87yJcY4fy7tP-rU3hogAAAo8"]
[Sat Aug 29 05:05:19.562547 2026] [security2:error] [pid 1017536:tid 1017726] [client 4.205.62.107:21943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/124.php"] [unique_id "apK87yJcY4fy7tP-rU3howAAAlA"]
[Sat Aug 29 05:05:19.568242 2026] [security2:error] [pid 1018003:tid 1018271] [client 158.23.147.79:55281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK87zAh5Y1i2tUxg4HezAAABi8"]
[Sat Aug 29 05:05:19.586533 2026] [security2:error] [pid 1018003:tid 1018160] [client 68.155.159.216:33620] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-includes/blocks/post-excerpt/alfa-rex.PHP"] [unique_id "apK87zAh5Y1i2tUxg4HezQAABcE"]
[Sat Aug 29 05:05:19.590658 2026] [security2:error] [pid 1018003:tid 1018157] [client 185.104.184.230:45798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.184.104.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "cpcalendars.rtg.paw.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "apK87zAh5Y1i2tUxg4HezgAABb4"]
[Sat Aug 29 05:05:19.592986 2026] [security2:error] [pid 1018003:tid 1018178] [client 74.248.24.12:35460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/tool.php"] [unique_id "apK87zAh5Y1i2tUxg4He0AAABdM"]
[Sat Aug 29 05:05:19.593070 2026] [security2:error] [pid 1018003:tid 1018253] [client 168.107.94.195:55944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK87zAh5Y1i2tUxg4HezwAABh0"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:19.602562 2026] [security2:error] [pid 1018003:tid 1018190] [client 45.154.98.191:52574] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.acovib.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "apK87zAh5Y1i2tUxg4He1AAABd8"]
[Sat Aug 29 05:05:19.607623 2026] [security2:error] [pid 1018003:tid 1018215] [client 52.139.37.240:20793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/wp-admin/min.php"] [unique_id "apK87zAh5Y1i2tUxg4He1gAABfg"]
[Sat Aug 29 05:05:19.634627 2026] [security2:error] [pid 1018003:tid 1018155] [client 20.48.160.90:64690] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "stampstudios.glowt-shirt.com"] [uri "/1.php"] [unique_id "apK87zAh5Y1i2tUxg4He2AAABbw"]
[Sat Aug 29 05:05:19.634754 2026] [security2:error] [pid 1018003:tid 1018155] [client 20.48.160.90:64690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/1.php"] [unique_id "apK87zAh5Y1i2tUxg4He2AAABbw"]
[Sat Aug 29 05:05:19.648015 2026] [security2:error] [pid 1017536:tid 1017669] [client 149.34.210.141:51206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK87yJcY4fy7tP-rU3hqAAAAhc"]
[Sat Aug 29 05:05:19.648146 2026] [security2:error] [pid 1017536:tid 1017669] [client 149.34.210.141:51206] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK87yJcY4fy7tP-rU3hqAAAAhc"]
[Sat Aug 29 05:05:19.660801 2026] [security2:error] [pid 1018003:tid 1018185] [client 52.139.37.240:24882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/0x.php"] [unique_id "apK87zAh5Y1i2tUxg4He2QAABdo"]
[Sat Aug 29 05:05:19.670828 2026] [security2:error] [pid 1017536:tid 1017708] [client 20.196.209.81:15122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/about.php525"] [unique_id "apK87yJcY4fy7tP-rU3hrQAAAj4"]
[Sat Aug 29 05:05:19.671494 2026] [cgid:error] [pid 1018003:tid 1018036] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:19.673717 2026] [cgid:error] [pid 1018003:tid 1018034] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:19.676127 2026] [security2:error] [pid 1018003:tid 1018268] [client 20.48.251.3:57879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/rum.or.php"] [unique_id "apK87zAh5Y1i2tUxg4He3QAABiw"]
[Sat Aug 29 05:05:19.677499 2026] [security2:error] [pid 1017536:tid 1017728] [client 20.63.219.114:1426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/bypass.php"] [unique_id "apK87yJcY4fy7tP-rU3hrwAAAlI"]
[Sat Aug 29 05:05:19.688059 2026] [cgid:error] [pid 1018003:tid 1018035] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:19.688483 2026] [security2:error] [pid 1017536:tid 1017736] [client 20.196.209.81:17941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-blog-header.php"] [unique_id "apK87yJcY4fy7tP-rU3htAAAAlo"]
[Sat Aug 29 05:05:19.688552 2026] [security2:error] [pid 1017536:tid 1017787] [client 103.171.189.88:50724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK87yJcY4fy7tP-rU3htQAAAo0"]
[Sat Aug 29 05:05:19.688655 2026] [security2:error] [pid 1017536:tid 1017787] [client 103.171.189.88:50724] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK87yJcY4fy7tP-rU3htQAAAo0"]
[Sat Aug 29 05:05:19.690456 2026] [security2:error] [pid 1017536:tid 1017769] [client 4.205.62.107:2911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/config_dev.php"] [unique_id "apK87yJcY4fy7tP-rU3htwAAAns"]
[Sat Aug 29 05:05:19.690915 2026] [security2:error] [pid 1017536:tid 1017736] [client 20.63.81.20:26558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/special.php"] [unique_id "apK87yJcY4fy7tP-rU3huAAAAlo"]
[Sat Aug 29 05:05:19.693482 2026] [security2:error] [pid 1018003:tid 1018240] [client 143.244.57.82:56270] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "wincosir.enproftp.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "apK87zAh5Y1i2tUxg4He3wAABhA"]
[Sat Aug 29 05:05:19.720112 2026] [security2:error] [pid 1018003:tid 1018248] [client 20.63.219.114:1510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/contentloader1.php"] [unique_id "apK87zAh5Y1i2tUxg4He4AAABhg"]
[Sat Aug 29 05:05:19.744994 2026] [security2:error] [pid 1018003:tid 1018205] [client 158.23.147.79:38720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/atomlib.php"] [unique_id "apK87zAh5Y1i2tUxg4He4wAABe4"]
[Sat Aug 29 05:05:19.746534 2026] [security2:error] [pid 1018003:tid 1018039] [remote 104.196.51.122:56266] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/static../.env"] [unique_id "apK87zAh5Y1i2tUxg4He5AAFuxI"]
[Sat Aug 29 05:05:19.749697 2026] [cgid:error] [pid 1018003:tid 1018025] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:19.751429 2026] [cgid:error] [pid 1018003:tid 1018037] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:19.770871 2026] [security2:error] [pid 1017536:tid 1017628] [remote 35.243.213.218:46954] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "www.mikeycunningham.com"] [uri "/id_dsa"] [unique_id "apK87yJcY4fy7tP-rU3hwQACdls"]
[Sat Aug 29 05:05:19.780935 2026] [security2:error] [pid 1017536:tid 1017690] [client 68.155.159.216:18260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.baxterevents.com"] [uri "/log-mama/function.php"] [unique_id "apK87yJcY4fy7tP-rU3hxAAAAiw"]
[Sat Aug 29 05:05:19.783005 2026] [security2:error] [pid 1018003:tid 1018182] [client 20.104.49.130:57664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/ty.php"] [unique_id "apK87zAh5Y1i2tUxg4He5wAABdc"]
[Sat Aug 29 05:05:19.784606 2026] [security2:error] [pid 1017536:tid 1017684] [client 20.48.160.90:63590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/classwithtostring.php"] [unique_id "apK87yJcY4fy7tP-rU3hxQAAAiY"]
[Sat Aug 29 05:05:19.798851 2026] [security2:error] [pid 1018003:tid 1018250] [client 4.232.148.111:9045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/deepseek_d.php"] [unique_id "apK87zAh5Y1i2tUxg4He6AAABho"]
[Sat Aug 29 05:05:19.800366 2026] [security2:error] [pid 1018003:tid 1018170] [client 185.104.184.230:36436] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.youthspeakoutint.org"] [uri "/autodiscover/autodiscover.xml/sito/wp-includes/wlwmanifest.xml"] [unique_id "apK87zAh5Y1i2tUxg4He6QAABcs"]
[Sat Aug 29 05:05:19.804196 2026] [security2:error] [pid 1018003:tid 1018038] [remote 104.196.115.188:49512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/portal/.env"] [unique_id "apK87zAh5Y1i2tUxg4He6wAF-xE"]
[Sat Aug 29 05:05:19.804731 2026] [security2:error] [pid 1018003:tid 1018041] [remote 104.196.115.188:49512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/api/.env.bak"] [unique_id "apK87zAh5Y1i2tUxg4He6gAF-xQ"]
[Sat Aug 29 05:05:19.812224 2026] [security2:error] [pid 1018003:tid 1018269] [client 52.139.37.240:20737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/wp-admin/wp-fileesx-449.php"] [unique_id "apK87zAh5Y1i2tUxg4He7AAABi0"]
[Sat Aug 29 05:05:19.813167 2026] [security2:error] [pid 1018003:tid 1018255] [client 20.48.251.3:28459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/xmy.php"] [unique_id "apK87zAh5Y1i2tUxg4He7QAABh8"]
[Sat Aug 29 05:05:19.815217 2026] [security2:error] [pid 1018003:tid 1018198] [client 4.205.62.107:9169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/umgebung.php"] [unique_id "apK87zAh5Y1i2tUxg4He7gAABec"]
[Sat Aug 29 05:05:19.830490 2026] [cgid:error] [pid 1018003:tid 1018045] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:19.831229 2026] [security2:error] [pid 1017536:tid 1017707] [client 20.196.209.81:1689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/Js.php"] [unique_id "apK87yJcY4fy7tP-rU3hxwAAAj0"]
[Sat Aug 29 05:05:19.833267 2026] [cgid:error] [pid 1018003:tid 1018052] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:19.837227 2026] [cgid:error] [pid 1018003:tid 1018047] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:19.842077 2026] [cgid:error] [pid 1018003:tid 1018048] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:19.842903 2026] [security2:error] [pid 1017536:tid 1017689] [client 20.63.81.20:26576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/fz.php"] [unique_id "apK87yJcY4fy7tP-rU3hyQAAAis"]
[Sat Aug 29 05:05:19.843371 2026] [security2:error] [pid 1018003:tid 1018049] [remote 104.196.51.122:56266] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/media../.env"] [unique_id "apK87zAh5Y1i2tUxg4He8wAGAhw"]
[Sat Aug 29 05:05:19.851380 2026] [security2:error] [pid 1017536:tid 1017698] [client 158.23.147.79:23399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ridetimewinnipegservicetiresrims.ca"] [uri "/ans.php"] [unique_id "apK87yJcY4fy7tP-rU3hygAAAjQ"]
[Sat Aug 29 05:05:19.851971 2026] [cgid:error] [pid 1018003:tid 1018044] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:19.869583 2026] [security2:error] [pid 1017536:tid 1017703] [client 52.139.37.240:24694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/CDX1.php"] [unique_id "apK87yJcY4fy7tP-rU3hywAAAjk"]
[Sat Aug 29 05:05:19.878180 2026] [security2:error] [pid 1017536:tid 1017651] [remote 35.243.213.218:46954] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "www.mikeycunningham.com"] [uri "/key.pem"] [unique_id "apK87yJcY4fy7tP-rU3hzQACdnI"]
[Sat Aug 29 05:05:19.881195 2026] [security2:error] [pid 1017536:tid 1017744] [client 185.104.184.230:45802] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.rtg.paw.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "apK87yJcY4fy7tP-rU3hzgAAAmI"]
[Sat Aug 29 05:05:19.903206 2026] [core:error] [pid 1017536:tid 1017739] [client 74.248.24.12:25675] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:19.903227 2026] [core:error] [pid 1017536:tid 1017739] [client 74.248.24.12:25675] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:19.908495 2026] [security2:error] [pid 1017536:tid 1017766] [client 4.205.62.107:61112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "troop264olney.net"] [uri "/var/www/wallet/index.php"] [unique_id "apK87yJcY4fy7tP-rU3h1AAAAng"]
[Sat Aug 29 05:05:19.909799 2026] [security2:error] [pid 1018003:tid 1018040] [remote 104.196.115.188:49512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/.env.prod.bak"] [unique_id "apK87zAh5Y1i2tUxg4He9gAFvRM"]
[Sat Aug 29 05:05:19.917484 2026] [security2:error] [pid 1018003:tid 1018179] [client 158.158.54.35:9462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-content/cong.php"] [unique_id "apK87zAh5Y1i2tUxg4He-AAABdQ"]
[Sat Aug 29 05:05:19.919029 2026] [security2:error] [pid 1018003:tid 1018054] [remote 104.196.115.188:49512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/@fs/.env"] [unique_id "apK87zAh5Y1i2tUxg4He9wAGKCE"]
[Sat Aug 29 05:05:19.924169 2026] [security2:error] [pid 1017536:tid 1017668] [client 20.63.219.114:19403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "compropolis.mx"] [uri "/feed-rss2-queue.php"] [unique_id "apK87yJcY4fy7tP-rU3h1wAAAhY"]
[Sat Aug 29 05:05:19.924918 2026] [security2:error] [pid 1018003:tid 1018051] [remote 104.196.115.188:49512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/env.old"] [unique_id "apK87zAh5Y1i2tUxg4He-QAGKB4"]
[Sat Aug 29 05:05:19.925807 2026] [security2:error] [pid 1018003:tid 1018043] [remote 104.196.115.188:49512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/env.bak"] [unique_id "apK87zAh5Y1i2tUxg4He_AAGKBY"]
[Sat Aug 29 05:05:19.926309 2026] [security2:error] [pid 1018003:tid 1018054] [remote 104.196.115.188:49512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/.docker/.env"] [unique_id "apK87zAh5Y1i2tUxg4He-gAGKCE"]
[Sat Aug 29 05:05:19.927388 2026] [security2:error] [pid 1018003:tid 1018053] [remote 104.196.115.188:49512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/.env.production.bak"] [unique_id "apK87zAh5Y1i2tUxg4He-wAGKCA"]
[Sat Aug 29 05:05:19.946236 2026] [security2:error] [pid 1018003:tid 1018265] [client 20.48.251.3:28421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/ms-edit.php"] [unique_id "apK87zAh5Y1i2tUxg4He_gAABik"]
[Sat Aug 29 05:05:19.948583 2026] [security2:error] [pid 1017536:tid 1017554] [remote 35.243.213.218:46954] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "www.mikeycunningham.com"] [uri "/privatekey.key"] [unique_id "apK87yJcY4fy7tP-rU3h2QACdhE"]
[Sat Aug 29 05:05:19.952751 2026] [security2:error] [pid 1018003:tid 1018186] [client 40.83.93.50:10117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.superugly.com"] [uri "/wp-content/languages/pk.php"] [unique_id "apK87zAh5Y1i2tUxg4He_wAABds"]
[Sat Aug 29 05:05:19.973938 2026] [security2:error] [pid 1018003:tid 1018243] [client 168.107.94.195:56259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK87zAh5Y1i2tUxg4HfAAAABhM"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:19.985054 2026] [security2:error] [pid 1018003:tid 1018152] [client 65.111.26.193:57745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 193.26.111.65.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK87zAh5Y1i2tUxg4He_QAABbk"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:19.991734 2026] [cgid:error] [pid 1018003:tid 1018055] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:19.993405 2026] [security2:error] [pid 1017536:tid 1017696] [client 20.63.81.20:26529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/clque.php"] [unique_id "apK87yJcY4fy7tP-rU3h3gAAAjI"]
[Sat Aug 29 05:05:20.009454 2026] [security2:error] [pid 1017536:tid 1017724] [client 52.139.37.240:21138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/wp-content/themes/min.php"] [unique_id "apK88CJcY4fy7tP-rU3h4AAAAk4"]
[Sat Aug 29 05:05:20.012834 2026] [security2:error] [pid 1018003:tid 1018056] [remote 104.196.51.122:56266] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/.ssh/id_rsa"] [unique_id "apK88DAh5Y1i2tUxg4HfAwAGMiM"]
[Sat Aug 29 05:05:20.014320 2026] [security2:error] [pid 1018003:tid 1018057] [remote 104.196.51.122:56266] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/.ssh/id_dsa"] [unique_id "apK88DAh5Y1i2tUxg4HfBAAGMiQ"]
[Sat Aug 29 05:05:20.016330 2026] [cgid:error] [pid 1018003:tid 1018061] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:20.016958 2026] [cgid:error] [pid 1018003:tid 1018062] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:20.017487 2026] [cgid:error] [pid 1018003:tid 1018060] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:20.043824 2026] [security2:error] [pid 1018003:tid 1018222] [client 20.63.219.114:1488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/extractable-loader-head.php"] [unique_id "apK88DAh5Y1i2tUxg4HfCAAABf8"]
[Sat Aug 29 05:05:20.067263 2026] [security2:error] [pid 1017536:tid 1017749] [client 52.139.37.240:25027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/akcc.php"] [unique_id "apK88CJcY4fy7tP-rU3h8wAAAmc"]
[Sat Aug 29 05:05:20.080432 2026] [security2:error] [pid 1018003:tid 1018150] [client 20.48.160.90:64738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/wp-ws68.php"] [unique_id "apK88DAh5Y1i2tUxg4HfCgAABbc"]
[Sat Aug 29 05:05:20.084683 2026] [security2:error] [pid 1018003:tid 1018202] [client 20.48.251.3:57794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/sys.php"] [unique_id "apK88DAh5Y1i2tUxg4HfCwAABes"]
[Sat Aug 29 05:05:20.085608 2026] [security2:error] [pid 1017536:tid 1017715] [client 20.63.219.114:1431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/al.php"] [unique_id "apK88CJcY4fy7tP-rU3h-AAAAkU"]
[Sat Aug 29 05:05:20.087330 2026] [security2:error] [pid 1018003:tid 1018165] [client 20.196.209.81:17949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-blogs.php"] [unique_id "apK88DAh5Y1i2tUxg4HfDQAABcY"]
[Sat Aug 29 05:05:20.107484 2026] [autoindex:error] [pid 1018003:tid 1018273] [client 4.232.148.111:0] AH01276: Cannot serve directory /home4/ehfields/public_html/tiaandephraim/wp-includes/certificates/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:05:20.129471 2026] [security2:error] [pid 1017536:tid 1017679] [client 20.196.209.81:9533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/backup.php"] [unique_id "apK88CJcY4fy7tP-rU3h-wAAAiE"]
[Sat Aug 29 05:05:20.133984 2026] [security2:error] [pid 1017536:tid 1017742] [client 68.155.159.216:58292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/wp-blog-header.php"] [unique_id "apK88CJcY4fy7tP-rU3h_AAAAmA"]
[Sat Aug 29 05:05:20.140835 2026] [security2:error] [pid 1018003:tid 1018027] [remote 104.196.51.122:56266] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/id_rsa"] [unique_id "apK88DAh5Y1i2tUxg4HfEAAF1QY"]
[Sat Aug 29 05:05:20.146788 2026] [security2:error] [pid 1017536:tid 1017667] [client 20.63.81.20:26549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/nano.php"] [unique_id "apK88CJcY4fy7tP-rU3h_gAAAhU"]
[Sat Aug 29 05:05:20.154572 2026] [cgid:error] [pid 1018003:tid 1018064] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:20.155149 2026] [security2:error] [pid 1018003:tid 1018089] [remote 104.196.51.122:56266] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/id_dsa"] [unique_id "apK88DAh5Y1i2tUxg4HfFAAF1UQ"]
[Sat Aug 29 05:05:20.155388 2026] [cgid:error] [pid 1018003:tid 1018058] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:20.156594 2026] [security2:error] [pid 1018003:tid 1018072] [remote 104.196.115.188:49512] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "infinitidealership.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK88DAh5Y1i2tUxg4HfFwAFujM"]
[Sat Aug 29 05:05:20.158840 2026] [cgid:error] [pid 1018003:tid 1018063] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:20.159697 2026] [cgid:error] [pid 1018003:tid 1018065] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:20.188000 2026] [security2:error] [pid 1017536:tid 1017789] [client 185.104.184.230:45804] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.rtg.paw.mybluehost.me"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "apK88CJcY4fy7tP-rU3iBgAAAo8"]
[Sat Aug 29 05:05:20.197531 2026] [security2:error] [pid 1017536:tid 1017772] [client 45.154.98.191:52843] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.acovib.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "apK88CJcY4fy7tP-rU3iBwAAAn4"]
[Sat Aug 29 05:05:20.208068 2026] [security2:error] [pid 1017536:tid 1017757] [client 52.139.37.240:21381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/wp-content/themes/x/bypass.php"] [unique_id "apK88CJcY4fy7tP-rU3iCgAAAm8"]
[Sat Aug 29 05:05:20.212979 2026] [security2:error] [pid 1017536:tid 1017727] [client 68.155.159.216:12258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-includes/Text/index.php"] [unique_id "apK88CJcY4fy7tP-rU3iCwAAAlE"]
[Sat Aug 29 05:05:20.215861 2026] [security2:error] [pid 1018003:tid 1018167] [client 74.248.24.12:8165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/k.php"] [unique_id "apK88DAh5Y1i2tUxg4HfGQAABcg"]
[Sat Aug 29 05:05:20.222424 2026] [security2:error] [pid 1017536:tid 1017729] [client 20.48.251.3:57826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/phpsysinfo.php"] [unique_id "apK88CJcY4fy7tP-rU3iDgAAAlM"]
[Sat Aug 29 05:05:20.227327 2026] [security2:error] [pid 1018003:tid 1018221] [client 20.48.160.90:64644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/simple.php"] [unique_id "apK88DAh5Y1i2tUxg4HfGgAABf4"]
[Sat Aug 29 05:05:20.230857 2026] [security2:error] [pid 1017536:tid 1017678] [client 20.196.209.81:16258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/access.php"] [unique_id "apK88CJcY4fy7tP-rU3iEAAAAiA"]
[Sat Aug 29 05:05:20.234881 2026] [cgid:error] [pid 1018003:tid 1018022] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:20.239632 2026] [cgid:error] [pid 1018003:tid 1018148] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:20.245103 2026] [security2:error] [pid 1017536:tid 1017691] [client 143.244.57.82:56286] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "wincosir.enproftp.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "apK88CJcY4fy7tP-rU3iEwAAAi0"]
[Sat Aug 29 05:05:20.256278 2026] [cgid:error] [pid 1018003:tid 1018078] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:20.266902 2026] [security2:error] [pid 1017536:tid 1017726] [client 52.139.37.240:25080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK88CJcY4fy7tP-rU3iFQAAAlA"]
[Sat Aug 29 05:05:20.286232 2026] [security2:error] [pid 1018003:tid 1018081] [remote 104.196.51.122:56266] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/key.pem"] [unique_id "apK88DAh5Y1i2tUxg4HfHgAGGTw"]
[Sat Aug 29 05:05:20.286234 2026] [security2:error] [pid 1018003:tid 1018080] [remote 104.196.51.122:56266] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/privatekey.key"] [unique_id "apK88DAh5Y1i2tUxg4HfHwAGGTs"]
[Sat Aug 29 05:05:20.289588 2026] [core:error] [pid 1018003:tid 1018177] [client 34.12.38.134:21234] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:20.289607 2026] [core:error] [pid 1018003:tid 1018177] [client 34.12.38.134:21234] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:20.290451 2026] [core:error] [pid 1017536:tid 1017686] [client 34.12.38.134:21190] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:20.290468 2026] [core:error] [pid 1017536:tid 1017686] [client 34.12.38.134:21190] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:20.290614 2026] [security2:error] [pid 1017536:tid 1017686] [client 34.12.38.134:21190] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/___proxy_subdomain_cpcontacts/index.php"] [unique_id "apK88CJcY4fy7tP-rU3iFwAAAig"]
[Sat Aug 29 05:05:20.291159 2026] [core:error] [pid 1018003:tid 1018174] [client 34.12.38.134:21244] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:20.291172 2026] [core:error] [pid 1018003:tid 1018174] [client 34.12.38.134:21244] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:20.296435 2026] [core:error] [pid 1018003:tid 1018184] [client 34.12.38.134:21168] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:20.296451 2026] [core:error] [pid 1018003:tid 1018184] [client 34.12.38.134:21168] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:20.299728 2026] [core:error] [pid 1018003:tid 1018241] [client 34.12.38.134:21260] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:20.299750 2026] [core:error] [pid 1018003:tid 1018241] [client 34.12.38.134:21260] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:20.304630 2026] [core:error] [pid 1018003:tid 1018209] [client 34.12.38.134:21246] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:20.304650 2026] [core:error] [pid 1018003:tid 1018209] [client 34.12.38.134:21246] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:20.304737 2026] [core:error] [pid 1017536:tid 1017781] [client 34.12.38.134:21264] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:20.304751 2026] [core:error] [pid 1017536:tid 1017781] [client 34.12.38.134:21264] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:20.304931 2026] [core:error] [pid 1017536:tid 1017713] [client 34.12.38.134:21276] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:20.304942 2026] [core:error] [pid 1017536:tid 1017713] [client 34.12.38.134:21276] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:20.305801 2026] [cgid:error] [pid 1018003:tid 1018079] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:20.306400 2026] [core:error] [pid 1018003:tid 1018278] [client 34.12.38.134:21202] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:20.306416 2026] [core:error] [pid 1018003:tid 1018278] [client 34.12.38.134:21202] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:20.306522 2026] [core:error] [pid 1018003:tid 1018258] [client 34.12.38.134:21194] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:20.306529 2026] [core:error] [pid 1018003:tid 1018258] [client 34.12.38.134:21194] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:20.306533 2026] [core:error] [pid 1017536:tid 1017717] [client 34.12.38.134:21174] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:20.306544 2026] [core:error] [pid 1017536:tid 1017717] [client 34.12.38.134:21174] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:20.306668 2026] [security2:error] [pid 1017536:tid 1017717] [client 34.12.38.134:21174] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/___proxy_subdomain_cpcontacts/index.php"] [unique_id "apK88CJcY4fy7tP-rU3iHAAAAkc"]
[Sat Aug 29 05:05:20.307058 2026] [core:error] [pid 1017536:tid 1017734] [client 34.12.38.134:21228] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:20.307068 2026] [core:error] [pid 1017536:tid 1017734] [client 34.12.38.134:21228] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:20.307165 2026] [security2:error] [pid 1017536:tid 1017734] [client 34.12.38.134:21228] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/___proxy_subdomain_cpcontacts/index.php"] [unique_id "apK88CJcY4fy7tP-rU3iGgAAAlg"]
[Sat Aug 29 05:05:20.307832 2026] [core:error] [pid 1018003:tid 1018246] [client 34.12.38.134:21214] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:20.307849 2026] [core:error] [pid 1018003:tid 1018246] [client 34.12.38.134:21214] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:20.309069 2026] [core:error] [pid 1018003:tid 1018187] [client 34.12.38.134:21186] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:20.309082 2026] [core:error] [pid 1018003:tid 1018187] [client 34.12.38.134:21186] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:20.309577 2026] [core:error] [pid 1018003:tid 1018242] [client 34.12.38.134:21284] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:20.309592 2026] [core:error] [pid 1018003:tid 1018242] [client 34.12.38.134:21284] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:20.310296 2026] [core:error] [pid 1018003:tid 1018158] [client 34.12.38.134:21288] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:20.310307 2026] [core:error] [pid 1018003:tid 1018158] [client 34.12.38.134:21288] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:20.311758 2026] [security2:error] [pid 1018003:tid 1018178] [client 20.63.219.114:9403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "compropolis.mx"] [uri "/inputs.php"] [unique_id "apK88DAh5Y1i2tUxg4HfLAAABdM"]
[Sat Aug 29 05:05:20.312653 2026] [security2:error] [pid 1017536:tid 1017700] [client 20.63.81.20:26476] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/\\\\.[a-z0-9]{4}\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "784"] [id "900080"] [msg "PHP Mailer Access Attempt"] [hostname "mail.harnessrenewables.com"] [uri "/.mopj.php"] [unique_id "apK88CJcY4fy7tP-rU3iHwAAAjY"]
[Sat Aug 29 05:05:20.355455 2026] [security2:error] [pid 1017536:tid 1017792] [client 168.107.94.195:56533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK88CJcY4fy7tP-rU3iJAAAApI"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:20.361151 2026] [security2:error] [pid 1017536:tid 1017752] [client 20.48.251.3:57880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/sgd.php"] [unique_id "apK88CJcY4fy7tP-rU3iJQAAAmo"]
[Sat Aug 29 05:05:20.366036 2026] [security2:error] [pid 1017536:tid 1017784] [client 4.232.148.111:19404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tiaandephraim.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK88CJcY4fy7tP-rU3iJwAAAoo"]
[Sat Aug 29 05:05:20.367596 2026] [security2:error] [pid 1018003:tid 1018175] [client 158.23.147.79:30686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/file5.php"] [unique_id "apK88DAh5Y1i2tUxg4HfLQAABdA"]
[Sat Aug 29 05:05:20.378217 2026] [security2:error] [pid 1017536:tid 1017674] [client 158.158.54.35:11050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-admin/images/admin.php"] [unique_id "apK88CJcY4fy7tP-rU3iKQAAAhw"]
[Sat Aug 29 05:05:20.382590 2026] [security2:error] [pid 1018003:tid 1018189] [client 68.155.159.216:24463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK88DAh5Y1i2tUxg4HfLgAABd4"]
[Sat Aug 29 05:05:20.401478 2026] [security2:error] [pid 1018003:tid 1018172] [client 20.63.219.114:2031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/defaults.php"] [unique_id "apK88DAh5Y1i2tUxg4HfLwAABc0"]
[Sat Aug 29 05:05:20.405756 2026] [cgid:error] [pid 1018003:tid 1018082] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:20.406028 2026] [security2:error] [pid 1017536:tid 1017744] [client 20.48.160.90:63537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/aaa.php"] [unique_id "apK88CJcY4fy7tP-rU3iLAAAAmI"]
[Sat Aug 29 05:05:20.420575 2026] [security2:error] [pid 1017536:tid 1017711] [client 74.248.24.12:27435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK88CJcY4fy7tP-rU3iLgAAAkE"]
[Sat Aug 29 05:05:20.423895 2026] [cgid:error] [pid 1018003:tid 1018083] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:20.434845 2026] [security2:error] [pid 1017536:tid 1017728] [client 40.83.93.50:10849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.superugly.com"] [uri "/wp-content/languages/plugins/about.php"] [unique_id "apK88CJcY4fy7tP-rU3iLwAAAlI"]
[Sat Aug 29 05:05:20.460353 2026] [security2:error] [pid 1017536:tid 1017782] [client 4.232.148.111:19961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "apK88CJcY4fy7tP-rU3iMgAAAog"]
[Sat Aug 29 05:05:20.466382 2026] [security2:error] [pid 1018003:tid 1018205] [client 52.139.37.240:25035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/s.php"] [unique_id "apK88DAh5Y1i2tUxg4HfMwAABe4"]
[Sat Aug 29 05:05:20.468009 2026] [security2:error] [pid 1018003:tid 1018234] [client 20.63.219.114:1438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/global.php"] [unique_id "apK88DAh5Y1i2tUxg4HfNAAABgo"]
[Sat Aug 29 05:05:20.472897 2026] [security2:error] [pid 1017536:tid 1017725] [client 68.155.159.216:16256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK88CJcY4fy7tP-rU3iNQAAAk8"]
[Sat Aug 29 05:05:20.474110 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.63.81.20:26534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/bengi.php"] [unique_id "apK88CJcY4fy7tP-rU3iNgAAAh0"]
[Sat Aug 29 05:05:20.474252 2026] [security2:error] [pid 1018003:tid 1018070] [remote 104.196.51.122:56266] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/@fs/app/.env"] [unique_id "apK88DAh5Y1i2tUxg4HfNgAF2DE"]
[Sat Aug 29 05:05:20.476428 2026] [cgid:error] [pid 1018003:tid 1018084] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:20.483274 2026] [cgid:error] [pid 1018003:tid 1018086] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:20.483451 2026] [security2:error] [pid 1018003:tid 1018270] [client 52.139.37.240:20747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK88DAh5Y1i2tUxg4HfOQAABi4"]
[Sat Aug 29 05:05:20.485065 2026] [cgid:error] [pid 1018003:tid 1018087] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:20.485609 2026] [security2:error] [pid 1018003:tid 1018214] [client 185.104.184.230:45818] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.rtg.paw.mybluehost.me"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "apK88DAh5Y1i2tUxg4HfOgAABfc"]
[Sat Aug 29 05:05:20.489237 2026] [security2:error] [pid 1018003:tid 1018076] [remote 104.196.51.122:56266] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/@fs/src/.env"] [unique_id "apK88DAh5Y1i2tUxg4HfOwAF9zc"]
[Sat Aug 29 05:05:20.492517 2026] [security2:error] [pid 1018003:tid 1018225] [client 4.205.62.107:64997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/avim.php"] [unique_id "apK88DAh5Y1i2tUxg4HfPAAABgI"]
[Sat Aug 29 05:05:20.493861 2026] [security2:error] [pid 1018003:tid 1018197] [client 20.48.251.3:57798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/fleen.php"] [unique_id "apK88DAh5Y1i2tUxg4HfPQAABeY"]
[Sat Aug 29 05:05:20.505658 2026] [security2:error] [pid 1018003:tid 1018085] [remote 104.196.51.122:56266] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/.env"] [unique_id "apK88DAh5Y1i2tUxg4HfPgAGHEA"]
[Sat Aug 29 05:05:20.515037 2026] [security2:error] [pid 1018003:tid 1018248] [client 20.196.209.81:17617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-comments-post.php"] [unique_id "apK88DAh5Y1i2tUxg4HfPwAABhg"]
[Sat Aug 29 05:05:20.530255 2026] [security2:error] [pid 1018003:tid 1018244] [client 20.196.209.81:15756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/haiterus.php"] [unique_id "apK88DAh5Y1i2tUxg4HfQAAABhQ"]
[Sat Aug 29 05:05:20.552456 2026] [security2:error] [pid 1017536:tid 1017788] [client 4.205.62.107:22309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/txets.php"] [unique_id "apK88CJcY4fy7tP-rU3iOgAAAo4"]
[Sat Aug 29 05:05:20.554438 2026] [security2:error] [pid 1018003:tid 1018231] [client 68.155.159.216:16251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.showerdoorsdubuque.com"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK88DAh5Y1i2tUxg4HfQgAABgc"]
[Sat Aug 29 05:05:20.581403 2026] [cgid:error] [pid 1018003:tid 1018090] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:20.585926 2026] [security2:error] [pid 1018003:tid 1018257] [client 145.239.10.137:60547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.10.239.145.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theverystuff.com"] [uri "/wp-content/plugins/pwnd/Footer.php"] [unique_id "apK88DAh5Y1i2tUxg4HfRQAABiE"], referer: http://theverystuff.com/wp-content/plugins/pwnd/Footer.php
[Sat Aug 29 05:05:20.597107 2026] [security2:error] [pid 1018003:tid 1018091] [remote 104.196.51.122:56266] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/.env"] [unique_id "apK88DAh5Y1i2tUxg4HfRgAFuEY"]
[Sat Aug 29 05:05:20.612462 2026] [security2:error] [pid 1018003:tid 1018206] [client 209.50.161.180:35235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.161.50.209.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK88DAh5Y1i2tUxg4HfQQAABe8"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:20.620245 2026] [security2:error] [pid 1018003:tid 1018092] [remote 104.196.51.122:56266] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/files../.env"] [unique_id "apK88DAh5Y1i2tUxg4HfRwAFt0c"]
[Sat Aug 29 05:05:20.624612 2026] [security2:error] [pid 1017536:tid 1017625] [remote 93.123.109.228:48278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/test.php"] [unique_id "apK88CJcY4fy7tP-rU3iQwACWVg"]
[Sat Aug 29 05:05:20.631445 2026] [security2:error] [pid 1018003:tid 1018042] [remote 104.196.51.122:56266] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.bigbuttonscarf.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2froot/.env"] [unique_id "apK88DAh5Y1i2tUxg4HfSAAF6xU"]
[Sat Aug 29 05:05:20.635014 2026] [cgid:error] [pid 1018003:tid 1018095] [remote 104.196.51.122:56266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:20.636895 2026] [security2:error] [pid 1018003:tid 1018181] [client 158.23.147.79:25573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-admin/about.php"] [unique_id "apK88DAh5Y1i2tUxg4HfSgAABdY"]
[Sat Aug 29 05:05:20.638101 2026] [security2:error] [pid 1018003:tid 1018273] [client 20.48.251.3:57861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/upload.form.php"] [unique_id "apK88DAh5Y1i2tUxg4HfSwAABjE"]
[Sat Aug 29 05:05:20.649884 2026] [security2:error] [pid 1017536:tid 1017681] [client 20.63.81.20:26368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/file2.php"] [unique_id "apK88CJcY4fy7tP-rU3iRQAAAiM"]
[Sat Aug 29 05:05:20.659996 2026] [security2:error] [pid 1018003:tid 1018171] [client 20.196.209.81:21081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/classsmtps.php"] [unique_id "apK88DAh5Y1i2tUxg4HfTQAABcw"]
[Sat Aug 29 05:05:20.663533 2026] [security2:error] [pid 1018003:tid 1018222] [client 52.139.37.240:58575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/sagax.php"] [unique_id "apK88DAh5Y1i2tUxg4HfTgAABf8"]
[Sat Aug 29 05:05:20.671248 2026] [security2:error] [pid 1018003:tid 1018251] [client 158.23.147.79:60167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK88DAh5Y1i2tUxg4HfTwAABhs"]
[Sat Aug 29 05:05:20.689031 2026] [security2:error] [pid 1017536:tid 1017737] [client 52.139.37.240:21376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/wp-info.php"] [unique_id "apK88CJcY4fy7tP-rU3iSwAAAls"]
[Sat Aug 29 05:05:20.720956 2026] [security2:error] [pid 1018003:tid 1018097] [remote 104.196.51.122:56266] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "www.bigbuttonscarf.com"] [uri "/@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ"] [unique_id "apK88DAh5Y1i2tUxg4HfUQAF9Ew"]
[Sat Aug 29 05:05:20.729374 2026] [security2:error] [pid 1018003:tid 1018160] [client 4.205.62.107:22306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/cu.php"] [unique_id "apK88DAh5Y1i2tUxg4HfUgAABcE"]
[Sat Aug 29 05:05:20.735431 2026] [security2:error] [pid 1018003:tid 1018253] [client 68.155.159.216:50262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-admin/dropdown.php"] [unique_id "apK88DAh5Y1i2tUxg4HfUwAABh0"]
[Sat Aug 29 05:05:20.738210 2026] [security2:error] [pid 1017536:tid 1017716] [client 168.107.94.195:56822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK88CJcY4fy7tP-rU3iUQAAAkY"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:20.758795 2026] [security2:error] [pid 1017536:tid 1017695] [client 158.23.147.79:48193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK88CJcY4fy7tP-rU3iUwAAAjE"]
[Sat Aug 29 05:05:20.766803 2026] [security2:error] [pid 1018003:tid 1018245] [client 20.63.219.114:1514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/post.php"] [unique_id "apK88DAh5Y1i2tUxg4HfVAAABhU"]
[Sat Aug 29 05:05:20.779125 2026] [security2:error] [pid 1018003:tid 1018191] [client 20.63.219.114:11912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "compropolis.mx"] [uri "/class-walker-category-dropdown-class.php"] [unique_id "apK88DAh5Y1i2tUxg4HfVQAABeA"]
[Sat Aug 29 05:05:20.786965 2026] [security2:error] [pid 1017536:tid 1017790] [client 185.104.184.230:45826] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.rtg.paw.mybluehost.me"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "apK88CJcY4fy7tP-rU3iVwAAApA"]
[Sat Aug 29 05:05:20.797275 2026] [security2:error] [pid 1017536:tid 1017753] [client 57.141.14.101:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/cart/"] [unique_id "apK88CJcY4fy7tP-rU3iWAAAAms"]
[Sat Aug 29 05:05:20.804218 2026] [security2:error] [pid 1018003:tid 1018239] [client 45.154.98.191:53122] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.acovib.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "apK88DAh5Y1i2tUxg4HfVgAABg8"]
[Sat Aug 29 05:05:20.804331 2026] [security2:error] [pid 1017536:tid 1017741] [client 20.63.81.20:26540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/gm.php"] [unique_id "apK88CJcY4fy7tP-rU3iWgAAAl8"]
[Sat Aug 29 05:05:20.812042 2026] [security2:error] [pid 1018003:tid 1018179] [client 143.244.57.82:56300] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "wincosir.enproftp.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "apK88DAh5Y1i2tUxg4HfWAAABdQ"]
[Sat Aug 29 05:05:20.826138 2026] [security2:error] [pid 1018003:tid 1018155] [client 4.205.62.107:2643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/oc460l3x.php"] [unique_id "apK88DAh5Y1i2tUxg4HfWQAABbw"]
[Sat Aug 29 05:05:20.836431 2026] [security2:error] [pid 1017536:tid 1017731] [client 158.158.54.35:22225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-mail.php"] [unique_id "apK88CJcY4fy7tP-rU3iXgAAAlU"]
[Sat Aug 29 05:05:20.841632 2026] [security2:error] [pid 1017536:tid 1017776] [client 20.63.219.114:1454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/update.php"] [unique_id "apK88CJcY4fy7tP-rU3iYQAAAoI"]
[Sat Aug 29 05:05:20.862446 2026] [security2:error] [pid 1017536:tid 1017693] [client 68.155.159.216:33658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK88CJcY4fy7tP-rU3iZQAAAi8"]
[Sat Aug 29 05:05:20.863278 2026] [security2:error] [pid 1018003:tid 1018219] [client 4.232.148.111:3031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tiaandephraim.com"] [uri "/css/index.php"] [unique_id "apK88DAh5Y1i2tUxg4HfWgAABfw"]
[Sat Aug 29 05:05:20.866922 2026] [security2:error] [pid 1017536:tid 1017721] [client 158.23.147.79:38762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/lv.php"] [unique_id "apK88CJcY4fy7tP-rU3iZgAAAks"]
[Sat Aug 29 05:05:20.883736 2026] [security2:error] [pid 1018003:tid 1018159] [client 103.162.125.59:50320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.125.162.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK88DAh5Y1i2tUxg4HfXgAABcA"]
[Sat Aug 29 05:05:20.883877 2026] [security2:error] [pid 1018003:tid 1018159] [client 103.162.125.59:50320] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK88DAh5Y1i2tUxg4HfXgAABcA"]
[Sat Aug 29 05:05:20.887274 2026] [security2:error] [pid 1018003:tid 1018226] [client 52.139.37.240:21121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/wp-wordfence-waf.php"] [unique_id "apK88DAh5Y1i2tUxg4HfXwAABgM"]
[Sat Aug 29 05:05:20.891116 2026] [security2:error] [pid 1017536:tid 1017754] [client 74.248.24.12:35463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/root.php"] [unique_id "apK88CJcY4fy7tP-rU3iawAAAmw"]
[Sat Aug 29 05:05:20.915641 2026] [security2:error] [pid 1017536:tid 1017786] [client 20.196.209.81:12358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-config.php"] [unique_id "apK88CJcY4fy7tP-rU3ibgAAAow"]
[Sat Aug 29 05:05:20.935550 2026] [security2:error] [pid 1018003:tid 1018190] [client 74.248.24.12:25698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/css/index.php"] [unique_id "apK88DAh5Y1i2tUxg4HfYgAABd8"]
[Sat Aug 29 05:05:20.946957 2026] [security2:error] [pid 1018003:tid 1018187] [client 52.139.37.240:25044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/wp-content/plugins/ftde.php"] [unique_id "apK88DAh5Y1i2tUxg4HfYwAABdw"]
[Sat Aug 29 05:05:20.948935 2026] [security2:error] [pid 1017536:tid 1017669] [client 20.196.209.81:9504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/go.php"] [unique_id "apK88CJcY4fy7tP-rU3icQAAAhc"]
[Sat Aug 29 05:05:20.970915 2026] [security2:error] [pid 1018003:tid 1018189] [client 20.63.81.20:26489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/ws55.php"] [unique_id "apK88DAh5Y1i2tUxg4HfZQAABd4"]
[Sat Aug 29 05:05:20.980326 2026] [security2:error] [pid 1017536:tid 1017780] [client 172.97.247.204:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutihomes.com"] [uri "/boats"] [unique_id "apK88CJcY4fy7tP-rU3idwAAAoY"], referer: https://www.yahoo.com/
[Sat Aug 29 05:05:21.030706 2026] [cgid:error] [pid 1018003:tid 1018103] [remote 104.196.51.122:56274] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:21.035721 2026] [cgid:error] [pid 1018003:tid 1018101] [remote 104.196.51.122:56274] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:21.039774 2026] [cgid:error] [pid 1018003:tid 1018106] [remote 104.196.51.122:56274] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:21.042448 2026] [cgid:error] [pid 1018003:tid 1018104] [remote 104.196.51.122:56274] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:21.042707 2026] [cgid:error] [pid 1018003:tid 1018066] [remote 104.196.51.122:56274] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:21.045640 2026] [cgid:error] [pid 1018003:tid 1018107] [remote 104.196.51.122:56274] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:21.058644 2026] [security2:error] [pid 1018003:tid 1018169] [client 20.48.160.90:64679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/shiny.php"] [unique_id "apK88TAh5Y1i2tUxg4HfbAAABco"]
[Sat Aug 29 05:05:21.071783 2026] [security2:error] [pid 1017536:tid 1017689] [client 20.48.251.3:28416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/aws_auth.php"] [unique_id "apK88SJcY4fy7tP-rU3ifAAAAis"]
[Sat Aug 29 05:05:21.074266 2026] [security2:error] [pid 1017536:tid 1017545] [remote 35.243.213.218:46954] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mikeycunningham.com"] [uri "/@fs/app/.env"] [unique_id "apK88SJcY4fy7tP-rU3ifQACHAg"]
[Sat Aug 29 05:05:21.088243 2026] [security2:error] [pid 1018003:tid 1018161] [client 52.139.37.240:21433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/ws49.php"] [unique_id "apK88TAh5Y1i2tUxg4HfbQAABcI"]
[Sat Aug 29 05:05:21.091575 2026] [security2:error] [pid 1017536:tid 1017767] [client 4.205.62.107:53330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/wp-content/db-status.php"] [unique_id "apK88SJcY4fy7tP-rU3ifwAAAnk"]
[Sat Aug 29 05:05:21.091951 2026] [security2:error] [pid 1017536:tid 1017580] [remote 35.243.213.218:46954] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mikeycunningham.com"] [uri "/@fs/src/.env"] [unique_id "apK88SJcY4fy7tP-rU3ifgACYis"]
[Sat Aug 29 05:05:21.097530 2026] [security2:error] [pid 1018003:tid 1018218] [client 185.104.184.230:45838] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.rtg.paw.mybluehost.me"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "apK88TAh5Y1i2tUxg4HfbgAABfs"]
[Sat Aug 29 05:05:21.098354 2026] [security2:error] [pid 1017536:tid 1017711] [client 4.205.62.107:22838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "troop264olney.net"] [uri "/124.php"] [unique_id "apK88SJcY4fy7tP-rU3igAAAAkE"]
[Sat Aug 29 05:05:21.104849 2026] [security2:error] [pid 1018003:tid 1018278] [client 20.196.209.81:4488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/contentloader1.php"] [unique_id "apK88TAh5Y1i2tUxg4HfbwAABjY"]
[Sat Aug 29 05:05:21.118035 2026] [security2:error] [pid 1017536:tid 1017728] [client 4.232.148.111:19610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/wp-content/themes/pridmag/il.php"] [unique_id "apK88SJcY4fy7tP-rU3ihgAAAlI"]
[Sat Aug 29 05:05:21.121095 2026] [security2:error] [pid 1018003:tid 1018277] [client 168.107.94.195:57148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK88TAh5Y1i2tUxg4HfcAAABjU"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:21.125326 2026] [security2:error] [pid 1017536:tid 1017608] [remote 35.243.213.218:46954] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mikeycunningham.com"] [uri "/.env"] [unique_id "apK88SJcY4fy7tP-rU3ihwACcEc"]
[Sat Aug 29 05:05:21.134471 2026] [security2:error] [pid 1017536:tid 1017761] [client 20.63.81.20:26310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/m.php"] [unique_id "apK88SJcY4fy7tP-rU3iigAAAnM"]
[Sat Aug 29 05:05:21.143118 2026] [security2:error] [pid 1018003:tid 1018255] [client 52.139.37.240:58604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "apK88TAh5Y1i2tUxg4HfcQAABh8"]
[Sat Aug 29 05:05:21.166862 2026] [security2:error] [pid 1018003:tid 1018217] [client 20.63.219.114:2046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/csv.php"] [unique_id "apK88TAh5Y1i2tUxg4HfcgAABfo"]
[Sat Aug 29 05:05:21.173290 2026] [security2:error] [pid 1018003:tid 1018093] [remote 104.196.115.188:49526] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "infinitidealership.com"] [uri "/_image"] [unique_id "apK88TAh5Y1i2tUxg4HfdgAGAkg"]
[Sat Aug 29 05:05:21.173405 2026] [security2:error] [pid 1018003:tid 1018105] [remote 104.196.115.188:49526] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:href. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "/../,ARGS:href"] [severity "CRITICAL"] [hostname "infinitidealership.com"] [uri "/_image"] [unique_id "apK88TAh5Y1i2tUxg4HfdAAGAlQ"]
[Sat Aug 29 05:05:21.203891 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.48.160.90:63601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/goods.php"] [unique_id "apK88SJcY4fy7tP-rU3ikQAAAh0"]
[Sat Aug 29 05:05:21.206602 2026] [security2:error] [pid 1017536:tid 1017696] [client 20.48.251.3:57805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/hiquido.com/index.php"] [unique_id "apK88SJcY4fy7tP-rU3ikgAAAjI"]
[Sat Aug 29 05:05:21.217475 2026] [security2:error] [pid 1018003:tid 1018269] [client 20.63.219.114:11911] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "compropolis.mx"] [uri "/1.php7"] [unique_id "apK88TAh5Y1i2tUxg4HfegAABi0"]
[Sat Aug 29 05:05:21.217589 2026] [security2:error] [pid 1018003:tid 1018269] [client 20.63.219.114:11911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "compropolis.mx"] [uri "/1.php7"] [unique_id "apK88TAh5Y1i2tUxg4HfegAABi0"]
[Sat Aug 29 05:05:21.235150 2026] [security2:error] [pid 1018003:tid 1018227] [client 216.26.254.241:10961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.254.26.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK88TAh5Y1i2tUxg4HfeQAABgQ"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:21.237806 2026] [security2:error] [pid 1017536:tid 1017766] [client 20.63.219.114:1530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/blog.php"] [unique_id "apK88SJcY4fy7tP-rU3ilQAAAng"]
[Sat Aug 29 05:05:21.279869 2026] [security2:error] [pid 1017536:tid 1017739] [client 68.155.159.216:57429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK88SJcY4fy7tP-rU3imwAAAl0"]
[Sat Aug 29 05:05:21.280919 2026] [security2:error] [pid 1017536:tid 1017745] [client 52.139.37.240:21419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/xxx.php"] [unique_id "apK88SJcY4fy7tP-rU3inAAAAmM"]
[Sat Aug 29 05:05:21.281192 2026] [security2:error] [pid 1017536:tid 1017679] [client 20.63.81.20:26501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/33.php"] [unique_id "apK88SJcY4fy7tP-rU3inQAAAiE"]
[Sat Aug 29 05:05:21.287753 2026] [security2:error] [pid 1017536:tid 1017793] [client 158.158.54.35:26037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-content.php"] [unique_id "apK88SJcY4fy7tP-rU3inwAAApM"]
[Sat Aug 29 05:05:21.335663 2026] [security2:error] [pid 1017536:tid 1017771] [client 68.155.159.216:12189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/content.php"] [unique_id "apK88SJcY4fy7tP-rU3ioQAAAn0"]
[Sat Aug 29 05:05:21.336872 2026] [security2:error] [pid 1017536:tid 1017737] [client 20.48.251.3:57796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/ws79.php"] [unique_id "apK88SJcY4fy7tP-rU3iogAAAls"]
[Sat Aug 29 05:05:21.342482 2026] [security2:error] [pid 1017536:tid 1017725] [client 20.196.209.81:17622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-configs.php"] [unique_id "apK88SJcY4fy7tP-rU3iowAAAk8"]
[Sat Aug 29 05:05:21.371300 2026] [security2:error] [pid 1018003:tid 1018197] [client 4.232.148.111:21051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tiaandephraim.com"] [uri "/wp-cron.php"] [unique_id "apK88TAh5Y1i2tUxg4HfewAABeY"]
[Sat Aug 29 05:05:21.402902 2026] [security2:error] [pid 1017536:tid 1017720] [client 185.104.184.230:45848] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.rtg.paw.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "apK88SJcY4fy7tP-rU3ipQAAAko"]
[Sat Aug 29 05:05:21.407085 2026] [security2:error] [pid 1018003:tid 1018213] [client 45.154.98.191:53325] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.acovib.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "apK88TAh5Y1i2tUxg4HffQAABfY"]
[Sat Aug 29 05:05:21.419385 2026] [security2:error] [pid 1017536:tid 1017778] [client 74.248.24.12:33214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/p.php"] [unique_id "apK88SJcY4fy7tP-rU3ipgAAAoQ"]
[Sat Aug 29 05:05:21.423316 2026] [security2:error] [pid 1017536:tid 1017705] [client 52.139.37.240:58591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/z.php"] [unique_id "apK88SJcY4fy7tP-rU3ipwAAAjs"]
[Sat Aug 29 05:05:21.425009 2026] [security2:error] [pid 1017536:tid 1017788] [client 20.196.209.81:15124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/gecko-new.php"] [unique_id "apK88SJcY4fy7tP-rU3iqAAAAo4"]
[Sat Aug 29 05:05:21.427858 2026] [security2:error] [pid 1017536:tid 1017695] [client 20.63.81.20:26439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/packed.php"] [unique_id "apK88SJcY4fy7tP-rU3iqQAAAjE"]
[Sat Aug 29 05:05:21.443294 2026] [security2:error] [pid 1017536:tid 1017753] [client 20.48.160.90:22107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/000.php/index.php"] [unique_id "apK88SJcY4fy7tP-rU3iqgAAAms"]
[Sat Aug 29 05:05:21.450665 2026] [security2:error] [pid 1018003:tid 1018244] [client 74.248.24.12:4064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/wp-cron.php"] [unique_id "apK88TAh5Y1i2tUxg4HffgAABhQ"]
[Sat Aug 29 05:05:21.470717 2026] [security2:error] [pid 1018003:tid 1018207] [client 20.48.251.3:57795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/public/wp-blog.php"] [unique_id "apK88TAh5Y1i2tUxg4HffwAABfA"]
[Sat Aug 29 05:05:21.478167 2026] [security2:error] [pid 1017536:tid 1017690] [client 111.235.68.106:16775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK88SJcY4fy7tP-rU3irAAAAiw"]
[Sat Aug 29 05:05:21.478329 2026] [security2:error] [pid 1017536:tid 1017690] [client 111.235.68.106:16775] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK88SJcY4fy7tP-rU3irAAAAiw"]
[Sat Aug 29 05:05:21.492933 2026] [security2:error] [pid 1017536:tid 1017751] [client 52.139.37.240:21413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/0x.php"] [unique_id "apK88SJcY4fy7tP-rU3irQAAAmk"]
[Sat Aug 29 05:05:21.502010 2026] [security2:error] [pid 1017536:tid 1017729] [client 168.107.94.195:57480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK88SJcY4fy7tP-rU3irgAAAlM"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:21.502438 2026] [security2:error] [pid 1017536:tid 1017785] [client 20.196.209.81:21077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/al.php"] [unique_id "apK88SJcY4fy7tP-rU3irwAAAos"]
[Sat Aug 29 05:05:21.504510 2026] [security2:error] [pid 1018003:tid 1018274] [client 158.23.147.79:24518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/sad/about.php"] [unique_id "apK88TAh5Y1i2tUxg4HfgAAABjI"]
[Sat Aug 29 05:05:21.508516 2026] [security2:error] [pid 1017536:tid 1017555] [remote 35.243.213.218:46954] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mikeycunningham.com"] [uri "/.env"] [unique_id "apK88SJcY4fy7tP-rU3isAACcBI"]
[Sat Aug 29 05:05:21.533188 2026] [security2:error] [pid 1017536:tid 1017743] [client 20.63.219.114:2037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/fox.php"] [unique_id "apK88SJcY4fy7tP-rU3isgAAAmE"]
[Sat Aug 29 05:05:21.539859 2026] [security2:error] [pid 1017536:tid 1017694] [client 158.23.147.79:30635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/file88.php"] [unique_id "apK88SJcY4fy7tP-rU3itAAAAjA"]
[Sat Aug 29 05:05:21.577202 2026] [security2:error] [pid 1017536:tid 1017713] [client 68.155.159.216:16201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK88SJcY4fy7tP-rU3iuAAAAkM"]
[Sat Aug 29 05:05:21.594668 2026] [cgid:error] [pid 1018003:tid 1018114] [remote 104.196.51.122:56274] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:21.594777 2026] [cgid:error] [pid 1018003:tid 1018113] [remote 104.196.51.122:56274] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:21.598538 2026] [security2:error] [pid 1017536:tid 1017678] [client 4.232.148.111:23787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/assets/images/doc.php"] [unique_id "apK88SJcY4fy7tP-rU3iyAAAAiA"]
[Sat Aug 29 05:05:21.599114 2026] [cgid:error] [pid 1018003:tid 1018116] [remote 104.196.51.122:56274] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:21.601238 2026] [security2:error] [pid 1017536:tid 1017764] [client 20.48.160.90:63529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/Jcrop.php"] [unique_id "apK88SJcY4fy7tP-rU3iyQAAAnY"]
[Sat Aug 29 05:05:21.602060 2026] [security2:error] [pid 1017536:tid 1017708] [client 20.63.219.114:19410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "compropolis.mx"] [uri "/ds.php"] [unique_id "apK88SJcY4fy7tP-rU3iygAAAj4"]
[Sat Aug 29 05:05:21.604514 2026] [security2:error] [pid 1017536:tid 1017752] [client 20.48.251.3:57799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/php-details.php"] [unique_id "apK88SJcY4fy7tP-rU3iywAAAmo"]
[Sat Aug 29 05:05:21.606336 2026] [security2:error] [pid 1017536:tid 1017741] [client 20.63.219.114:9168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/bypass.php"] [unique_id "apK88SJcY4fy7tP-rU3izAAAAl8"]
[Sat Aug 29 05:05:21.613562 2026] [cgid:error] [pid 1018003:tid 1018117] [remote 104.196.51.122:56274] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:21.615204 2026] [cgid:error] [pid 1018003:tid 1018118] [remote 104.196.51.122:56274] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:21.616334 2026] [cgid:error] [pid 1018003:tid 1018121] [remote 104.196.51.122:56274] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:21.616686 2026] [security2:error] [pid 1018003:tid 1018193] [client 52.139.37.240:25051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/f35.php"] [unique_id "apK88TAh5Y1i2tUxg4HfkQAABeI"]
[Sat Aug 29 05:05:21.623401 2026] [security2:error] [pid 1017536:tid 1017784] [client 4.205.62.107:65009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/nw.php"] [unique_id "apK88SJcY4fy7tP-rU3izgAAAoo"]
[Sat Aug 29 05:05:21.660154 2026] [security2:error] [pid 1018003:tid 1018211] [client 68.155.159.216:16284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.showerdoorsdubuque.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK88TAh5Y1i2tUxg4HfkwAABfQ"]
[Sat Aug 29 05:05:21.671588 2026] [autoindex:error] [pid 1018003:tid 1018257] [client 195.178.110.103:14936] AH01276: Cannot serve directory /home3/jiazbwmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:05:21.686695 2026] [security2:error] [pid 1017536:tid 1017645] [remote 35.243.213.218:46954] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mikeycunningham.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2froot/.env"] [unique_id "apK88SJcY4fy7tP-rU3i0wACc2w"]
[Sat Aug 29 05:05:21.687738 2026] [security2:error] [pid 1017536:tid 1017707] [client 52.139.37.240:21431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/CDX1.php"] [unique_id "apK88SJcY4fy7tP-rU3i1AAAAj0"]
[Sat Aug 29 05:05:21.693579 2026] [security2:error] [pid 1017536:tid 1017666] [client 4.205.62.107:21882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/public/mah.php.php"] [unique_id "apK88SJcY4fy7tP-rU3i1QAAAhQ"]
[Sat Aug 29 05:05:21.707968 2026] [security2:error] [pid 1017536:tid 1017696] [client 185.104.184.230:45856] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.rtg.paw.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "apK88SJcY4fy7tP-rU3i1gAAAjI"]
[Sat Aug 29 05:05:21.738713 2026] [security2:error] [pid 1017536:tid 1017706] [client 20.48.251.3:57889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/routes.php"] [unique_id "apK88SJcY4fy7tP-rU3i1wAAAjw"]
[Sat Aug 29 05:05:21.738713 2026] [security2:error] [pid 1018003:tid 1018166] [client 20.196.209.81:17602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-conflg.php"] [unique_id "apK88TAh5Y1i2tUxg4HflQAABcc"]
[Sat Aug 29 05:05:21.740915 2026] [security2:error] [pid 1018003:tid 1018208] [client 158.158.54.35:22270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "apK88TAh5Y1i2tUxg4HflgAABfE"]
[Sat Aug 29 05:05:21.742795 2026] [security2:error] [pid 1018003:tid 1018191] [client 158.23.147.79:25476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK88TAh5Y1i2tUxg4HflwAABeA"]
[Sat Aug 29 05:05:21.766076 2026] [security2:error] [pid 1018003:tid 1018239] [client 20.48.160.90:64680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/35iDq8NAjLu.php"] [unique_id "apK88TAh5Y1i2tUxg4HfmAAABg8"]
[Sat Aug 29 05:05:21.773289 2026] [security2:error] [pid 1017536:tid 1017554] [remote 35.243.213.218:46954] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mikeycunningham.com"] [uri "/static/app/.env"] [unique_id "apK88SJcY4fy7tP-rU3i2AACFRE"]
[Sat Aug 29 05:05:21.773297 2026] [security2:error] [pid 1017536:tid 1017656] [remote 35.243.213.218:46954] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "www.mikeycunningham.com"] [uri "/@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ"] [unique_id "apK88SJcY4fy7tP-rU3i2gACFXc"]
[Sat Aug 29 05:05:21.773638 2026] [security2:error] [pid 1017536:tid 1017620] [remote 35.243.213.218:46954] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mikeycunningham.com"] [uri "/static/.env"] [unique_id "apK88SJcY4fy7tP-rU3i2QACFVM"]
[Sat Aug 29 05:05:21.780731 2026] [security2:error] [pid 1018003:tid 1018157] [client 158.23.147.79:55278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK88TAh5Y1i2tUxg4HfmQAABb4"]
[Sat Aug 29 05:05:21.809596 2026] [security2:error] [pid 1018003:tid 1018167] [client 52.139.37.240:58566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/file61.php"] [unique_id "apK88TAh5Y1i2tUxg4HfnQAABcg"]
[Sat Aug 29 05:05:21.837119 2026] [security2:error] [pid 1018003:tid 1018185] [client 195.178.110.103:14936] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "jia.zbw.mybluehost.me"] [uri "/livewire/update"] [unique_id "apK88TAh5Y1i2tUxg4HfnwAABdo"]
[Sat Aug 29 05:05:21.841081 2026] [security2:error] [pid 1017536:tid 1017685] [client 145.239.10.137:33334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.10.239.145.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "greenfieldstone.com"] [uri "/admin.php"] [unique_id "apK88SJcY4fy7tP-rU3i4AAAAic"], referer: http://greenfieldstone.com/admin.php
[Sat Aug 29 05:05:21.849744 2026] [cgid:error] [pid 1018003:tid 1018068] [remote 104.196.51.122:56274] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:21.851761 2026] [cgid:error] [pid 1018003:tid 1018119] [remote 104.196.51.122:56274] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:21.854316 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.196.209.81:15116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/wp-admin.php"] [unique_id "apK88SJcY4fy7tP-rU3i5AAAAh0"]
[Sat Aug 29 05:05:21.859909 2026] [security2:error] [pid 1018003:tid 1018178] [client 68.155.159.216:50315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/login.php"] [unique_id "apK88TAh5Y1i2tUxg4HfowAABdM"]
[Sat Aug 29 05:05:21.860805 2026] [security2:error] [pid 1017536:tid 1017720] [client 4.205.62.107:22281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/ok.php"] [unique_id "apK88SJcY4fy7tP-rU3i5gAAAko"]
[Sat Aug 29 05:05:21.864204 2026] [security2:error] [pid 1018003:tid 1018187] [client 158.23.147.79:48361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK88TAh5Y1i2tUxg4HfpAAABdw"]
[Sat Aug 29 05:05:21.869639 2026] [cgid:error] [pid 1018003:tid 1018115] [remote 104.196.51.122:56274] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:21.872873 2026] [cgid:error] [pid 1018003:tid 1018122] [remote 104.196.51.122:56274] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:21.873497 2026] [security2:error] [pid 1017536:tid 1017782] [client 4.232.148.111:24801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tiaandephraim.com"] [uri "/wp-block.php"] [unique_id "apK88SJcY4fy7tP-rU3i6AAAAog"]
[Sat Aug 29 05:05:21.881015 2026] [security2:error] [pid 1017536:tid 1017788] [client 20.48.251.3:57856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/aww.php"] [unique_id "apK88SJcY4fy7tP-rU3i6QAAAo4"]
[Sat Aug 29 05:05:21.882838 2026] [security2:error] [pid 1017536:tid 1017725] [client 52.139.37.240:20774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/akcc.php"] [unique_id "apK88SJcY4fy7tP-rU3i6wAAAk8"]
[Sat Aug 29 05:05:21.884787 2026] [security2:error] [pid 1018003:tid 1018258] [client 168.107.94.195:57837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK88TAh5Y1i2tUxg4HfqAAABiI"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:21.923841 2026] [security2:error] [pid 1017536:tid 1017715] [client 20.63.219.114:18958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/disagraeosc.php"] [unique_id "apK88SJcY4fy7tP-rU3i7gAAAkU"]
[Sat Aug 29 05:05:21.924520 2026] [security2:error] [pid 1018003:tid 1018180] [client 65.111.26.173:27205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 173.26.111.65.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK88TAh5Y1i2tUxg4HfogAABdU"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:21.943601 2026] [cgid:error] [pid 1018003:tid 1018111] [remote 104.196.51.122:56274] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:21.961279 2026] [security2:error] [pid 1018003:tid 1018219] [client 74.248.24.12:26132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/wp-block.php"] [unique_id "apK88TAh5Y1i2tUxg4HfrwAABfw"]
[Sat Aug 29 05:05:21.961854 2026] [security2:error] [pid 1018003:tid 1018172] [client 20.63.81.20:26449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/w.php"] [unique_id "apK88TAh5Y1i2tUxg4HfsAAABc0"]
[Sat Aug 29 05:05:21.964024 2026] [security2:error] [pid 1018003:tid 1018190] [client 20.63.219.114:18696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/extractable-loader-head.php"] [unique_id "apK88TAh5Y1i2tUxg4HfsQAABd8"]
[Sat Aug 29 05:05:21.964286 2026] [security2:error] [pid 1018003:tid 1018219] [client 4.205.62.107:2121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/wp-content/plugin-install.php"] [unique_id "apK88TAh5Y1i2tUxg4HfsgAABfw"]
[Sat Aug 29 05:05:21.975252 2026] [security2:error] [pid 1018003:tid 1018199] [client 158.23.147.79:63846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK88TAh5Y1i2tUxg4HftAAABeg"]
[Sat Aug 29 05:05:21.976674 2026] [security2:error] [pid 1018003:tid 1018198] [client 68.155.159.216:33708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK88TAh5Y1i2tUxg4HftQAABec"]
[Sat Aug 29 05:05:21.979067 2026] [security2:error] [pid 1017536:tid 1017760] [client 20.196.209.81:21109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/global.php"] [unique_id "apK88SJcY4fy7tP-rU3i9AAAAnI"]
[Sat Aug 29 05:05:21.990946 2026] [security2:error] [pid 1017536:tid 1017778] [client 20.63.219.114:19439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "compropolis.mx"] [uri "/GOD.php"] [unique_id "apK88SJcY4fy7tP-rU3i9gAAAoQ"]
[Sat Aug 29 05:05:22.016046 2026] [security2:error] [pid 1017536:tid 1017694] [client 185.104.184.230:45858] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.rtg.paw.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "apK88iJcY4fy7tP-rU3i-gAAAjA"]
[Sat Aug 29 05:05:22.016182 2026] [security2:error] [pid 1017536:tid 1017785] [client 52.139.37.240:25025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/mah.php"] [unique_id "apK88iJcY4fy7tP-rU3i-wAAAos"]
[Sat Aug 29 05:05:22.016402 2026] [security2:error] [pid 1018003:tid 1018214] [client 20.48.160.90:62664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/btx25.php"] [unique_id "apK88jAh5Y1i2tUxg4HfuQAABfc"]
[Sat Aug 29 05:05:22.017223 2026] [security2:error] [pid 1017536:tid 1017609] [remote 93.123.109.228:48278] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.elisefairweather.com"] [uri "/wp-config.php.bak"] [unique_id "apK88iJcY4fy7tP-rU3i_AACS0g"]
[Sat Aug 29 05:05:22.017655 2026] [security2:error] [pid 1017536:tid 1017609] [remote 93.123.109.228:48278] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.elisefairweather.com"] [uri "/wp-config.php.new"] [unique_id "apK88iJcY4fy7tP-rU3i_QACS0g"]
[Sat Aug 29 05:05:22.018017 2026] [security2:error] [pid 1017536:tid 1017609] [remote 93.123.109.228:48278] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.elisefairweather.com"] [uri "/wp-config.php.old"] [unique_id "apK88iJcY4fy7tP-rU3i_gACS0g"]
[Sat Aug 29 05:05:22.020807 2026] [security2:error] [pid 1017536:tid 1017713] [client 20.48.251.3:28441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/maxro.php"] [unique_id "apK88iJcY4fy7tP-rU3jAgAAAkM"]
[Sat Aug 29 05:05:22.036901 2026] [security2:error] [pid 1017536:tid 1017635] [remote 93.123.109.228:48278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/wp-config.php"] [unique_id "apK88iJcY4fy7tP-rU3jAwACS2I"]
[Sat Aug 29 05:05:22.044642 2026] [cgid:error] [pid 1018003:tid 1018069] [remote 104.196.51.122:56274] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:22.046614 2026] [cgid:error] [pid 1018003:tid 1018123] [remote 104.196.51.122:56274] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:22.068712 2026] [cgid:error] [pid 1018003:tid 1018120] [remote 104.196.51.122:56274] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:22.075817 2026] [cgid:error] [pid 1018003:tid 1018126] [remote 104.196.51.122:56274] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:22.082635 2026] [security2:error] [pid 1018003:tid 1018182] [client 4.232.148.111:32347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/bgymj.php"] [unique_id "apK88jAh5Y1i2tUxg4HfwQAABdc"]
[Sat Aug 29 05:05:22.083721 2026] [cgid:error] [pid 1018003:tid 1018127] [remote 104.196.51.122:56274] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:22.084227 2026] [security2:error] [pid 1017536:tid 1017754] [client 52.139.37.240:20745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK88iJcY4fy7tP-rU3jBQAAAmw"]
[Sat Aug 29 05:05:22.110327 2026] [security2:error] [pid 1017536:tid 1017784] [client 20.63.81.20:26551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/ccc.php"] [unique_id "apK88iJcY4fy7tP-rU3jCAAAAoo"]
[Sat Aug 29 05:05:22.145988 2026] [security2:error] [pid 1017536:tid 1017693] [client 20.196.209.81:17607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-content.php"] [unique_id "apK88iJcY4fy7tP-rU3jCQAAAi8"]
[Sat Aug 29 05:05:22.152064 2026] [security2:error] [pid 1017536:tid 1017704] [client 20.48.160.90:63589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/radio.php"] [unique_id "apK88iJcY4fy7tP-rU3jCgAAAjo"]
[Sat Aug 29 05:05:22.156197 2026] [security2:error] [pid 1018003:tid 1018223] [client 93.123.109.228:37254] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK88jAh5Y1i2tUxg4HfwgAABgA"]
[Sat Aug 29 05:05:22.162248 2026] [security2:error] [pid 1018003:tid 1018193] [client 93.123.109.228:37252] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK88jAh5Y1i2tUxg4HfwwAABeI"]
[Sat Aug 29 05:05:22.171446 2026] [security2:error] [pid 1018003:tid 1018257] [client 20.48.251.3:57810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/brc.php"] [unique_id "apK88jAh5Y1i2tUxg4HfxQAABiE"]
[Sat Aug 29 05:05:22.189518 2026] [security2:error] [pid 1018003:tid 1018227] [client 158.158.54.35:23960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/css/wp-login.php"] [unique_id "apK88jAh5Y1i2tUxg4HfxgAABgQ"]
[Sat Aug 29 05:05:22.213095 2026] [security2:error] [pid 1017536:tid 1017781] [client 52.139.37.240:24700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/mini.php"] [unique_id "apK88iJcY4fy7tP-rU3jDAAAAoc"]
[Sat Aug 29 05:05:22.216813 2026] [security2:error] [pid 1018003:tid 1018235] [client 74.248.24.12:41938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/a1.php"] [unique_id "apK88jAh5Y1i2tUxg4HfyAAABgs"]
[Sat Aug 29 05:05:22.223967 2026] [autoindex:error] [pid 1018003:tid 1018206] [client 195.178.110.103:14942] AH01276: Cannot serve directory /home3/jiazbwmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:05:22.247033 2026] [security2:error] [pid 1017536:tid 1017685] [client 4.205.62.107:53321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/file59.php"] [unique_id "apK88iJcY4fy7tP-rU3jDQAAAic"]
[Sat Aug 29 05:05:22.252504 2026] [security2:error] [pid 1017536:tid 1017779] [client 20.63.81.20:26483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/file15.php"] [unique_id "apK88iJcY4fy7tP-rU3jDgAAAoU"]
[Sat Aug 29 05:05:22.266084 2026] [security2:error] [pid 1017536:tid 1017782] [client 168.107.94.195:58205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK88iJcY4fy7tP-rU3jGAAAAog"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:22.267063 2026] [security2:error] [pid 1017536:tid 1017707] [client 34.7.216.49:15344] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "webdisk.bridgewaycentretrust.org"] [uri "/env.json"] [unique_id "apK88iJcY4fy7tP-rU3jGQAAAj0"]
[Sat Aug 29 05:05:22.280203 2026] [security2:error] [pid 1017536:tid 1017742] [client 52.139.37.240:21409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/s.php"] [unique_id "apK88iJcY4fy7tP-rU3jJwAAAmA"]
[Sat Aug 29 05:05:22.287955 2026] [security2:error] [pid 1018003:tid 1018259] [client 20.196.209.81:25078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/wp-configs.php"] [unique_id "apK88jAh5Y1i2tUxg4Hf0AAABiM"]
[Sat Aug 29 05:05:22.293551 2026] [cgid:error] [pid 1018003:tid 1018125] [remote 104.196.51.122:56274] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:22.302938 2026] [security2:error] [pid 1018003:tid 1018157] [client 20.48.251.3:57806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/vx.php"] [unique_id "apK88jAh5Y1i2tUxg4Hf0wAABb4"]
[Sat Aug 29 05:05:22.308910 2026] [security2:error] [pid 1017536:tid 1017690] [client 20.48.160.90:63547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/dex.php"] [unique_id "apK88iJcY4fy7tP-rU3jLQAAAiw"]
[Sat Aug 29 05:05:22.313961 2026] [security2:error] [pid 1017536:tid 1017715] [client 185.104.184.230:45866] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.rtg.paw.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "apK88iJcY4fy7tP-rU3jLgAAAkU"]
[Sat Aug 29 05:05:22.325753 2026] [security2:error] [pid 1017536:tid 1017726] [client 4.205.62.107:57847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "troop264olney.net"] [uri "/test1.php"] [unique_id "apK88iJcY4fy7tP-rU3jLwAAAlA"]
[Sat Aug 29 05:05:22.344695 2026] [security2:error] [pid 1017536:tid 1017737] [client 20.63.219.114:1531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/about.php525"] [unique_id "apK88iJcY4fy7tP-rU3jMQAAAls"]
[Sat Aug 29 05:05:22.353565 2026] [security2:error] [pid 1017536:tid 1017683] [client 213.202.253.4:58571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aantec.com"] [uri "/memberfuns.php"] [unique_id "apK88iJcY4fy7tP-rU3jMgAAAiU"], referer: www.google.com
[Sat Aug 29 05:05:22.362342 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.63.219.114:15277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "compropolis.mx"] [uri "/ggfi.php"] [unique_id "apK88iJcY4fy7tP-rU3jMwAAAlY"]
[Sat Aug 29 05:05:22.369282 2026] [security2:error] [pid 1018003:tid 1018224] [client 93.123.109.228:37254] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(\\\\/\\\\*\\\\!? ?(?:select|grant|delete|insert|drop|alter|replace|truncate|update|create|rename|describe|union|concat|group_concat))" at REQUEST_FILENAME. [file "/opt/mod_security/hg_rules.conf"] [line "1019"] [id "9000042"] [rev "2.2.2"] [msg "SQL Comment Sequence Detected."] [data "/*update"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/*update.cgi*"] [unique_id "apK88jAh5Y1i2tUxg4Hf1wAABgE"]
[Sat Aug 29 05:05:22.405590 2026] [security2:error] [pid 1017536:tid 1017716] [client 20.196.209.81:21056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/update.php"] [unique_id "apK88iJcY4fy7tP-rU3jNAAAAkY"]
[Sat Aug 29 05:05:22.422652 2026] [security2:error] [pid 1018003:tid 1018155] [client 20.63.81.20:26454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/jp.php"] [unique_id "apK88jAh5Y1i2tUxg4Hf2wAABbw"]
[Sat Aug 29 05:05:22.422964 2026] [security2:error] [pid 1018003:tid 1018184] [client 52.139.37.240:25071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/v.php"] [unique_id "apK88jAh5Y1i2tUxg4Hf3AAABdk"]
[Sat Aug 29 05:05:22.434310 2026] [security2:error] [pid 1018003:tid 1018242] [client 20.48.251.3:28455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/ty.php"] [unique_id "apK88jAh5Y1i2tUxg4Hf3QAABhI"]
[Sat Aug 29 05:05:22.438413 2026] [security2:error] [pid 1018003:tid 1018166] [client 4.232.148.111:12466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tiaandephraim.com"] [uri "/wp-includes/fonts/admin.php"] [unique_id "apK88jAh5Y1i2tUxg4Hf3wAABcc"]
[Sat Aug 29 05:05:22.438750 2026] [security2:error] [pid 1018003:tid 1018258] [client 68.155.159.216:12242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK88jAh5Y1i2tUxg4Hf4QAABiI"]
[Sat Aug 29 05:05:22.443311 2026] [security2:error] [pid 1017536:tid 1017687] [client 93.123.109.228:37302] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/.env"] [unique_id "apK88iJcY4fy7tP-rU3jNQAAAik"]
[Sat Aug 29 05:05:22.452317 2026] [security2:error] [pid 1017536:tid 1017672] [client 20.48.160.90:62617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/giodywky.php"] [unique_id "apK88iJcY4fy7tP-rU3jOQAAAho"]
[Sat Aug 29 05:05:22.452679 2026] [security2:error] [pid 1017536:tid 1017719] [client 93.123.109.228:37338] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/laravel/app/.env"] [unique_id "apK88iJcY4fy7tP-rU3jOAAAAkk"]
[Sat Aug 29 05:05:22.465598 2026] [security2:error] [pid 1018003:tid 1018159] [client 20.63.219.114:1780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/defaults.php"] [unique_id "apK88jAh5Y1i2tUxg4Hf4gAABcA"]
[Sat Aug 29 05:05:22.474110 2026] [cgid:error] [pid 1018003:tid 1018130] [remote 104.196.51.122:56274] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:22.474465 2026] [cgid:error] [pid 1018003:tid 1018128] [remote 104.196.51.122:56274] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:22.474801 2026] [security2:error] [pid 1018003:tid 1018165] [client 74.248.24.12:16526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/wp-includes/fonts/admin.php"] [unique_id "apK88jAh5Y1i2tUxg4Hf5gAABcY"]
[Sat Aug 29 05:05:22.475149 2026] [cgid:error] [pid 1018003:tid 1018132] [remote 104.196.51.122:56274] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:22.476098 2026] [security2:error] [pid 1018003:tid 1018240] [client 52.139.37.240:21383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/sagax.php"] [unique_id "apK88jAh5Y1i2tUxg4Hf5wAABhA"]
[Sat Aug 29 05:05:22.491202 2026] [cgid:error] [pid 1018003:tid 1018133] [remote 104.196.51.122:56274] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:22.495935 2026] [cgid:error] [pid 1018003:tid 1018129] [remote 104.196.51.122:56274] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:22.504675 2026] [cgid:error] [pid 1018003:tid 1018138] [remote 104.196.51.122:56274] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:22.529173 2026] [security2:error] [pid 1018003:tid 1018190] [client 68.155.159.216:24569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK88jAh5Y1i2tUxg4Hf7AAABd8"]
[Sat Aug 29 05:05:22.568424 2026] [security2:error] [pid 1017536:tid 1017680] [client 93.123.109.228:37236] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK88iJcY4fy7tP-rU3jPQAAAiI"]
[Sat Aug 29 05:05:22.571604 2026] [security2:error] [pid 1017536:tid 1017712] [client 20.48.251.3:57895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/adminer-4.7.6-en.php"] [unique_id "apK88iJcY4fy7tP-rU3jPgAAAkI"]
[Sat Aug 29 05:05:22.575806 2026] [security2:error] [pid 1017536:tid 1017771] [client 20.63.81.20:26383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/f35.php"] [unique_id "apK88iJcY4fy7tP-rU3jQAAAAn0"]
[Sat Aug 29 05:05:22.575841 2026] [security2:error] [pid 1017536:tid 1017709] [client 4.232.148.111:24115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK88iJcY4fy7tP-rU3jPwAAAj8"]
[Sat Aug 29 05:05:22.575854 2026] [cgid:error] [pid 1018003:tid 1018246] [client 20.196.209.81:17924] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/carolinashooter/404.shtml
[Sat Aug 29 05:05:22.580556 2026] [security2:error] [pid 1018003:tid 1018185] [client 65.111.24.216:54843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.24.111.65.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK88jAh5Y1i2tUxg4Hf7QAABdo"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:22.617680 2026] [security2:error] [pid 1018003:tid 1018214] [client 158.23.147.79:24486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/admin.php"] [unique_id "apK88jAh5Y1i2tUxg4Hf8QAABfc"]
[Sat Aug 29 05:05:22.621077 2026] [security2:error] [pid 1018003:tid 1018169] [client 52.139.37.240:24598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK88jAh5Y1i2tUxg4Hf8gAABco"]
[Sat Aug 29 05:05:22.624763 2026] [security2:error] [pid 1018003:tid 1018234] [client 185.104.184.230:45892] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.rtg.paw.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "apK88jAh5Y1i2tUxg4Hf8wAABgo"]
[Sat Aug 29 05:05:22.630327 2026] [security2:error] [pid 1017536:tid 1017688] [client 177.131.19.63:16858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.19.131.177.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK88iJcY4fy7tP-rU3jQgAAAio"]
[Sat Aug 29 05:05:22.630594 2026] [security2:error] [pid 1017536:tid 1017688] [client 177.131.19.63:16858] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK88iJcY4fy7tP-rU3jQgAAAio"]
[Sat Aug 29 05:05:22.636243 2026] [security2:error] [pid 1018003:tid 1018268] [client 158.158.54.35:19376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/images/index.php"] [unique_id "apK88jAh5Y1i2tUxg4Hf9AAABiw"]
[Sat Aug 29 05:05:22.644444 2026] [security2:error] [pid 1017536:tid 1017670] [client 158.23.147.79:30675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/NewFile.php/"] [unique_id "apK88iJcY4fy7tP-rU3jRAAAAhg"]
[Sat Aug 29 05:05:22.646601 2026] [security2:error] [pid 1017536:tid 1017704] [client 168.107.94.195:58528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK88iJcY4fy7tP-rU3jRQAAAjo"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:22.655723 2026] [security2:error] [pid 1018003:tid 1018269] [client 68.155.159.216:64249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.gavirestaurant.com"] [uri "/.well-knownold/index.php"] [unique_id "apK88jAh5Y1i2tUxg4Hf9QAABi0"]
[Sat Aug 29 05:05:22.655723 2026] [security2:error] [pid 1017536:tid 1017746] [client 20.48.160.90:62663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/wp-kz.php"] [unique_id "apK88iJcY4fy7tP-rU3jRgAAAmQ"]
[Sat Aug 29 05:05:22.656139 2026] [security2:error] [pid 1018003:tid 1018195] [client 20.104.49.130:57485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/dk.php"] [unique_id "apK88jAh5Y1i2tUxg4Hf9gAABeQ"]
[Sat Aug 29 05:05:22.684127 2026] [security2:error] [pid 1018003:tid 1018156] [client 68.155.159.216:16315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-content/languages/about.php"] [unique_id "apK88jAh5Y1i2tUxg4Hf9wAABb0"]
[Sat Aug 29 05:05:22.700468 2026] [security2:error] [pid 1017536:tid 1017673] [client 20.63.219.114:2021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/spip.php"] [unique_id "apK88iJcY4fy7tP-rU3jSAAAAhs"]
[Sat Aug 29 05:05:22.712908 2026] [security2:error] [pid 1018003:tid 1018278] [client 20.196.209.81:9514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/essexec.php"] [unique_id "apK88jAh5Y1i2tUxg4Hf-AAABjY"]
[Sat Aug 29 05:05:22.714666 2026] [security2:error] [pid 1018003:tid 1018231] [client 20.196.209.81:17924] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-content/1.php"] [unique_id "apK88jAh5Y1i2tUxg4Hf-QAABgc"]
[Sat Aug 29 05:05:22.714738 2026] [security2:error] [pid 1018003:tid 1018231] [client 20.196.209.81:17924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-content/1.php"] [unique_id "apK88jAh5Y1i2tUxg4Hf-QAABgc"]
[Sat Aug 29 05:05:22.722265 2026] [security2:error] [pid 1018003:tid 1018243] [client 20.63.81.20:26504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/shiny.php"] [unique_id "apK88jAh5Y1i2tUxg4Hf-gAABhM"]
[Sat Aug 29 05:05:22.728291 2026] [security2:error] [pid 1017536:tid 1017738] [client 20.48.251.3:27172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/phpi.php"] [unique_id "apK88iJcY4fy7tP-rU3jSQAAAlw"]
[Sat Aug 29 05:05:22.748313 2026] [security2:error] [pid 1017536:tid 1017745] [client 52.139.37.240:21435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/wp-content/plugins/ftde.php"] [unique_id "apK88iJcY4fy7tP-rU3jSgAAAmM"]
[Sat Aug 29 05:05:22.761589 2026] [security2:error] [pid 1018003:tid 1018171] [client 4.205.62.107:64270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/product.php"] [unique_id "apK88jAh5Y1i2tUxg4Hf_QAABcw"]
[Sat Aug 29 05:05:22.761804 2026] [security2:error] [pid 1018003:tid 1018251] [client 68.155.159.216:16354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.showerdoorsdubuque.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK88jAh5Y1i2tUxg4Hf_gAABhs"]
[Sat Aug 29 05:05:22.765522 2026] [cgid:error] [pid 1018003:tid 1018088] [remote 104.196.51.122:56274] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:22.768034 2026] [cgid:error] [pid 1018003:tid 1018142] [remote 104.196.51.122:56274] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:22.770727 2026] [cgid:error] [pid 1018003:tid 1018140] [remote 104.196.51.122:56274] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:22.782761 2026] [security2:error] [pid 1018003:tid 1018154] [client 93.123.109.228:37364] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/.env.backup"] [unique_id "apK88jAh5Y1i2tUxg4HgAgAABbs"]
[Sat Aug 29 05:05:22.784928 2026] [security2:error] [pid 1017536:tid 1017747] [client 20.63.219.114:11942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "compropolis.mx"] [uri "/alfa-rex.php"] [unique_id "apK88iJcY4fy7tP-rU3jTAAAAmU"]
[Sat Aug 29 05:05:22.790067 2026] [security2:error] [pid 1017536:tid 1017781] [client 20.48.160.90:63615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/wp-includes/ID3/getid.php"] [unique_id "apK88iJcY4fy7tP-rU3jTQAAAoc"]
[Sat Aug 29 05:05:22.791503 2026] [security2:error] [pid 1017536:tid 1017756] [client 216.73.217.8:21807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 8.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo-store.sortthru.com"] [uri "/webapp/wp-admin/post.php"] [unique_id "apK88iJcY4fy7tP-rU3jTgAAAm4"]
[Sat Aug 29 05:05:22.794469 2026] [cgid:error] [pid 1018003:tid 1018141] [remote 104.196.51.122:56274] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:22.794513 2026] [cgid:error] [pid 1018003:tid 1018145] [remote 104.196.51.122:56274] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:22.794815 2026] [cgid:error] [pid 1018003:tid 1018139] [remote 104.196.51.122:56274] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:22.804759 2026] [security2:error] [pid 1017536:tid 1017734] [client 185.104.184.230:45880] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.erv.dib.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "apK88iJcY4fy7tP-rU3jTwAAAlg"]
[Sat Aug 29 05:05:22.824148 2026] [security2:error] [pid 1017536:tid 1017793] [client 52.139.37.240:24678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "apK88iJcY4fy7tP-rU3jUAAAApM"]
[Sat Aug 29 05:05:22.827080 2026] [security2:error] [pid 1017536:tid 1017692] [client 20.63.219.114:11885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/post.php"] [unique_id "apK88iJcY4fy7tP-rU3jUQAAAi4"]
[Sat Aug 29 05:05:22.838134 2026] [security2:error] [pid 1017536:tid 1017739] [client 20.196.209.81:4521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/blog.php"] [unique_id "apK88iJcY4fy7tP-rU3jUgAAAl0"]
[Sat Aug 29 05:05:22.838954 2026] [security2:error] [pid 1018003:tid 1018277] [client 74.248.24.12:8960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK88jAh5Y1i2tUxg4HgBgAABjU"]
[Sat Aug 29 05:05:22.846885 2026] [security2:error] [pid 1018003:tid 1018173] [client 158.23.147.79:25559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK88jAh5Y1i2tUxg4HgBwAABc4"]
[Sat Aug 29 05:05:22.854172 2026] [security2:error] [pid 1018003:tid 1018227] [client 4.205.62.107:22286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/linusadmin-phpinfo.php"] [unique_id "apK88jAh5Y1i2tUxg4HgCAAABgQ"]
[Sat Aug 29 05:05:22.856551 2026] [security2:error] [pid 1018003:tid 1018174] [client 20.63.81.20:26465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/images.php"] [unique_id "apK88jAh5Y1i2tUxg4HgCgAABc8"]
[Sat Aug 29 05:05:22.859167 2026] [security2:error] [pid 1018003:tid 1018233] [client 20.48.251.3:57912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK88jAh5Y1i2tUxg4HgCwAABgk"]
[Sat Aug 29 05:05:22.886090 2026] [security2:error] [pid 1017536:tid 1017772] [client 178.16.55.109:51875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 109.55.16.178.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "autodiscover.burlingtonyaroslavl.com"] [uri "/wp-login.php"] [unique_id "apK88iJcY4fy7tP-rU3jVwAAAn4"], referer: https://www.google.com/
[Sat Aug 29 05:05:22.893829 2026] [security2:error] [pid 1017536:tid 1017765] [client 172.97.247.204:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutihomes.com"] [uri "/boats"] [unique_id "apK88iJcY4fy7tP-rU3jWQAAAnc"], referer: https://www.yahoo.com/
[Sat Aug 29 05:05:22.899122 2026] [security2:error] [pid 1017536:tid 1017674] [client 158.23.147.79:54014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK88iJcY4fy7tP-rU3jWgAAAhw"]
[Sat Aug 29 05:05:22.909600 2026] [security2:error] [pid 1017536:tid 1017742] [client 68.155.159.216:18363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.baxterevents.com"] [uri "/bk/index.php"] [unique_id "apK88iJcY4fy7tP-rU3jXAAAAmA"]
[Sat Aug 29 05:05:22.913887 2026] [cgid:error] [pid 1018003:tid 1018147] [remote 104.196.51.122:56274] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:22.930189 2026] [security2:error] [pid 1017536:tid 1017592] [remote 35.243.213.218:60034] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mikeycunningham.com"] [uri "/.env"] [unique_id "apK88iJcY4fy7tP-rU3jXQACUTc"]
[Sat Aug 29 05:05:22.930954 2026] [access_compat:error] [pid 1017536:tid 1017758] [client 67.20.76.220:12806] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:05:22.931219 2026] [security2:error] [pid 1018003:tid 1018249] [client 4.232.148.111:24824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tiaandephraim.com"] [uri "/m.php"] [unique_id "apK88jAh5Y1i2tUxg4HgEgAABhk"]
[Sat Aug 29 05:05:22.931608 2026] [security2:error] [pid 1017536:tid 1017695] [client 185.104.184.230:45904] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.rtg.paw.mybluehost.me"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "apK88iJcY4fy7tP-rU3jXwAAAjE"]
[Sat Aug 29 05:05:22.942724 2026] [access_compat:error] [pid 1018003:tid 1018215] [client 67.20.76.220:12822] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:05:22.952130 2026] [security2:error] [pid 1018003:tid 1018230] [client 52.139.37.240:21439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "apK88jAh5Y1i2tUxg4HgFgAABgY"]
[Sat Aug 29 05:05:22.952788 2026] [security2:error] [pid 1017536:tid 1017698] [client 93.123.109.228:37302] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/.env.bak"] [unique_id "apK88iJcY4fy7tP-rU3jYwAAAjQ"]
[Sat Aug 29 05:05:22.965571 2026] [security2:error] [pid 1017536:tid 1017777] [client 68.155.159.216:50189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/hehehehe.php"] [unique_id "apK88iJcY4fy7tP-rU3jZAAAAoM"]
[Sat Aug 29 05:05:22.966413 2026] [security2:error] [pid 1017536:tid 1017737] [client 158.23.147.79:23508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ridetimewinnipegservicetiresrims.ca"] [uri "/worksec.php"] [unique_id "apK88iJcY4fy7tP-rU3jZQAAAls"]
[Sat Aug 29 05:05:22.988100 2026] [security2:error] [pid 1018003:tid 1018257] [client 74.248.24.12:28195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/m.php"] [unique_id "apK88jAh5Y1i2tUxg4HgGAAABiE"]
[Sat Aug 29 05:05:22.991347 2026] [security2:error] [pid 1017536:tid 1017716] [client 20.48.251.3:28452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/myfile.php"] [unique_id "apK88iJcY4fy7tP-rU3jawAAAkY"]
[Sat Aug 29 05:05:22.995591 2026] [security2:error] [pid 1018003:tid 1018213] [client 20.48.160.90:28548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/session.php"] [unique_id "apK88jAh5Y1i2tUxg4HgGQAABfY"]
[Sat Aug 29 05:05:23.010852 2026] [security2:error] [pid 1018003:tid 1018207] [client 20.63.81.20:26441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/82.php"] [unique_id "apK88zAh5Y1i2tUxg4HgGwAABfA"]
[Sat Aug 29 05:05:23.019607 2026] [security2:error] [pid 1017536:tid 1017776] [client 4.205.62.107:21875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/test.config.php"] [unique_id "apK88yJcY4fy7tP-rU3jbgAAAoI"]
[Sat Aug 29 05:05:23.024772 2026] [security2:error] [pid 1017536:tid 1017684] [client 52.139.37.240:25065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK88yJcY4fy7tP-rU3jbwAAAiY"]
[Sat Aug 29 05:05:23.026681 2026] [security2:error] [pid 1017536:tid 1017666] [client 168.107.94.195:58851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK88yJcY4fy7tP-rU3jcAAAAhQ"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:23.033266 2026] [security2:error] [pid 1017536:tid 1017717] [client 158.23.147.79:48167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK88yJcY4fy7tP-rU3jcwAAAkc"]
[Sat Aug 29 05:05:23.042227 2026] [security2:error] [pid 1017536:tid 1017785] [client 93.123.109.228:37352] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/.env.old"] [unique_id "apK88yJcY4fy7tP-rU3jdAAAAos"]
[Sat Aug 29 05:05:23.058322 2026] [security2:error] [pid 1017536:tid 1017786] [client 57.141.8.70:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/"] [unique_id "apK88yJcY4fy7tP-rU3jdwAAAow"]
[Sat Aug 29 05:05:23.063079 2026] [security2:error] [pid 1018003:tid 1018187] [client 93.123.109.228:37364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/.env.php"] [unique_id "apK88zAh5Y1i2tUxg4HgHQAABdw"]
[Sat Aug 29 05:05:23.079309 2026] [security2:error] [pid 1018003:tid 1018258] [client 158.23.147.79:38782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/content.php"] [unique_id "apK88zAh5Y1i2tUxg4HgHwAABiI"]
[Sat Aug 29 05:05:23.081527 2026] [core:error] [pid 1017536:tid 1017542] [remote 35.243.213.218:60034] AH10244: invalid URI path (/%2e%2e/.env)
[Sat Aug 29 05:05:23.081589 2026] [security2:error] [pid 1017536:tid 1017787] [client 20.63.219.114:9204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/backup.php"] [unique_id "apK88yJcY4fy7tP-rU3jeQAAAo0"]
[Sat Aug 29 05:05:23.100450 2026] [security2:error] [pid 1018003:tid 1018159] [client 185.104.184.230:45914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.184.104.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "cpcalendars.erv.dib.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "apK88zAh5Y1i2tUxg4HgIAAABcA"]
[Sat Aug 29 05:05:23.103919 2026] [security2:error] [pid 1017536:tid 1017712] [client 4.205.62.107:2925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/paypal.php"] [unique_id "apK88yJcY4fy7tP-rU3jewAAAkI"]
[Sat Aug 29 05:05:23.109649 2026] [security2:error] [pid 1018003:tid 1018165] [client 68.155.159.216:51557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-content/admin.php"] [unique_id "apK88zAh5Y1i2tUxg4HgIQAABcY"]
[Sat Aug 29 05:05:23.111997 2026] [security2:error] [pid 1017536:tid 1017736] [client 20.196.209.81:15796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/hello.php"] [unique_id "apK88yJcY4fy7tP-rU3jfAAAAlo"]
[Sat Aug 29 05:05:23.112536 2026] [security2:error] [pid 1018003:tid 1018263] [client 20.196.209.81:17960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-content/about.php"] [unique_id "apK88zAh5Y1i2tUxg4HgIgAABic"]
[Sat Aug 29 05:05:23.120301 2026] [security2:error] [pid 1017536:tid 1017700] [client 20.48.251.3:28423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/lm15.php"] [unique_id "apK88yJcY4fy7tP-rU3jfQAAAjY"]
[Sat Aug 29 05:05:23.136086 2026] [security2:error] [pid 1017536:tid 1017639] [remote 35.243.213.218:60034] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mikeycunningham.com"] [uri "/api/.env/public/.env"] [unique_id "apK88yJcY4fy7tP-rU3jgQACOGY"]
[Sat Aug 29 05:05:23.136570 2026] [security2:error] [pid 1017536:tid 1017599] [remote 35.243.213.218:60034] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mikeycunningham.com"] [uri "/.env"] [unique_id "apK88yJcY4fy7tP-rU3jhAACOD4"]
[Sat Aug 29 05:05:23.136624 2026] [security2:error] [pid 1017536:tid 1017546] [remote 35.243.213.218:60034] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mikeycunningham.com"] [uri "/static/home/user/.env"] [unique_id "apK88yJcY4fy7tP-rU3jhgACOAk"]
[Sat Aug 29 05:05:23.136690 2026] [security2:error] [pid 1017536:tid 1017613] [remote 35.243.213.218:60034] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mikeycunningham.com"] [uri "/.env"] [unique_id "apK88yJcY4fy7tP-rU3jhQACOEw"]
[Sat Aug 29 05:05:23.138765 2026] [security2:error] [pid 1017536:tid 1017789] [client 35.198.240.194:3870] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/@fs/home/ubuntu/.env"] [unique_id "apK88yJcY4fy7tP-rU3jiAAAAo8"]
[Sat Aug 29 05:05:23.141016 2026] [security2:error] [pid 1017536:tid 1017760] [client 216.26.227.93:25047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.227.26.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK88yJcY4fy7tP-rU3jfgAAAnI"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:23.158933 2026] [security2:error] [pid 1018003:tid 1018180] [client 20.48.160.90:62607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/eagle.php"] [unique_id "apK88zAh5Y1i2tUxg4HgJQAABdU"]
[Sat Aug 29 05:05:23.167956 2026] [security2:error] [pid 1018003:tid 1018203] [client 35.198.240.194:3896] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/@fs/var/www/.env"] [unique_id "apK88zAh5Y1i2tUxg4HgJgAABew"]
[Sat Aug 29 05:05:23.168576 2026] [security2:error] [pid 1017536:tid 1017705] [client 20.63.81.20:26559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/files.php/new.php"] [unique_id "apK88yJcY4fy7tP-rU3jiwAAAjs"]
[Sat Aug 29 05:05:23.169469 2026] [security2:error] [pid 1018003:tid 1018192] [client 20.104.49.130:48529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/sta.php"] [unique_id "apK88zAh5Y1i2tUxg4HgJwAABeE"]
[Sat Aug 29 05:05:23.181998 2026] [security2:error] [pid 1017536:tid 1017721] [client 20.63.219.114:1412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/csv.php"] [unique_id "apK88yJcY4fy7tP-rU3jjgAAAks"]
[Sat Aug 29 05:05:23.183569 2026] [security2:error] [pid 1017536:tid 1017667] [client 35.198.240.194:3912] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/@fs/var/www/html/.env"] [unique_id "apK88yJcY4fy7tP-rU3jjwAAAhU"]
[Sat Aug 29 05:05:23.184642 2026] [security2:error] [pid 1018003:tid 1018273] [client 35.198.240.194:3928] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/@fs/usr/src/app/.env"] [unique_id "apK88zAh5Y1i2tUxg4HgKAAABjE"]
[Sat Aug 29 05:05:23.198643 2026] [cgid:error] [pid 1018003:tid 1018146] [remote 104.196.51.122:56274] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/tdessixf/public_html/bigbuttonscarf/404.shtml
[Sat Aug 29 05:05:23.215409 2026] [security2:error] [pid 1017536:tid 1017775] [client 20.63.219.114:12714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "compropolis.mx"] [uri "/cookie.php"] [unique_id "apK88yJcY4fy7tP-rU3jkAAAAoE"]
[Sat Aug 29 05:05:23.222557 2026] [security2:error] [pid 1017536:tid 1017671] [client 158.158.54.35:26027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/inputs.php"] [unique_id "apK88yJcY4fy7tP-rU3jkQAAAhk"]
[Sat Aug 29 05:05:23.224093 2026] [security2:error] [pid 1017536:tid 1017685] [client 52.139.37.240:21400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/z.php"] [unique_id "apK88yJcY4fy7tP-rU3jkwAAAic"]
[Sat Aug 29 05:05:23.235896 2026] [security2:error] [pid 1018003:tid 1018219] [client 185.104.184.230:45928] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.rtg.paw.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "apK88zAh5Y1i2tUxg4HgLAAABfw"]
[Sat Aug 29 05:05:23.249483 2026] [security2:error] [pid 1017536:tid 1017707] [client 20.48.251.3:27179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/test.config.php"] [unique_id "apK88yJcY4fy7tP-rU3jlAAAAj0"]
[Sat Aug 29 05:05:23.263256 2026] [security2:error] [pid 1017536:tid 1017688] [client 20.196.209.81:21094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/bypass.php"] [unique_id "apK88yJcY4fy7tP-rU3jlQAAAio"]
[Sat Aug 29 05:05:23.271746 2026] [security2:error] [pid 1017536:tid 1017727] [client 35.198.240.194:3978] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.omni-staffing.com"] [uri "/@fs/app/aws-exports.js"] [unique_id "apK88yJcY4fy7tP-rU3jlgAAAlE"]
[Sat Aug 29 05:05:23.292856 2026] [security2:error] [pid 1018003:tid 1018234] [client 52.139.37.240:24778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/wp-index.php"] [unique_id "apK88zAh5Y1i2tUxg4HgMwAABgo"]
[Sat Aug 29 05:05:23.299553 2026] [security2:error] [pid 1017536:tid 1017726] [client 93.123.109.228:37264] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/.env.swp"] [unique_id "apK88yJcY4fy7tP-rU3jmQAAAlA"]
[Sat Aug 29 05:05:23.325422 2026] [security2:error] [pid 1018003:tid 1018195] [client 114.119.148.47:42899] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.classiclightingusa.com"] [uri "/catalog/product_info.php/products_id/1110/action/notify/osCsid/7thp4iock98fr1qadncejc87b5"] [unique_id "apK88zAh5Y1i2tUxg4HgNAAABeQ"], referer: http://www.classiclightingusa.com/catalog/product_info.php/products_id/1110/osCsid/7thp4iock98fr1qadncejc87b5
[Sat Aug 29 05:05:23.333973 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.63.81.20:26444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/mghnhykio.php/new.php"] [unique_id "apK88yJcY4fy7tP-rU3jnQAAAlY"]
[Sat Aug 29 05:05:23.348840 2026] [security2:error] [pid 1017536:tid 1017572] [remote 35.243.213.218:60034] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mikeycunningham.com"] [uri "/images../.env"] [unique_id "apK88yJcY4fy7tP-rU3jngACVSM"]
[Sat Aug 29 05:05:23.349639 2026] [security2:error] [pid 1017536:tid 1017683] [client 20.48.160.90:64647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/up-kon.php"] [unique_id "apK88yJcY4fy7tP-rU3jnwAAAiU"]
[Sat Aug 29 05:05:23.354327 2026] [security2:error] [pid 1017536:tid 1017781] [client 74.248.24.12:5307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/alfa-rex.php7"] [unique_id "apK88yJcY4fy7tP-rU3jowAAAoc"]
[Sat Aug 29 05:05:23.361065 2026] [security2:error] [pid 1017536:tid 1017758] [client 93.123.109.228:37338] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/.env~"] [unique_id "apK88yJcY4fy7tP-rU3jpgAAAnA"]
[Sat Aug 29 05:05:23.379594 2026] [security2:error] [pid 1017536:tid 1017706] [client 20.48.251.3:57830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/gecko-litespeed.php"] [unique_id "apK88yJcY4fy7tP-rU3jpwAAAjw"]
[Sat Aug 29 05:05:23.401182 2026] [security2:error] [pid 1018003:tid 1018244] [client 20.104.49.130:34550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/222.php"] [unique_id "apK88zAh5Y1i2tUxg4HgNwAABhQ"]
[Sat Aug 29 05:05:23.407871 2026] [security2:error] [pid 1017536:tid 1017723] [client 168.107.94.195:59138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK88yJcY4fy7tP-rU3jqQAAAk0"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:23.419397 2026] [security2:error] [pid 1018003:tid 1018264] [client 52.139.37.240:20751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/f35.php"] [unique_id "apK88zAh5Y1i2tUxg4HgOAAABig"]
[Sat Aug 29 05:05:23.422485 2026] [security2:error] [pid 1017536:tid 1017666] [client 68.155.159.216:58262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK88yJcY4fy7tP-rU3jrAAAAhQ"]
[Sat Aug 29 05:05:23.435576 2026] [security2:error] [pid 1017536:tid 1017710] [client 4.232.148.111:32371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/wp-load.php"] [unique_id "apK88yJcY4fy7tP-rU3jrQAAAkA"]
[Sat Aug 29 05:05:23.441940 2026] [security2:error] [pid 1018003:tid 1018269] [client 20.63.219.114:11851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/haiterus.php"] [unique_id "apK88zAh5Y1i2tUxg4HgPAAABi0"]
[Sat Aug 29 05:05:23.480060 2026] [security2:error] [pid 1017536:tid 1017695] [client 4.232.148.111:10321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tiaandephraim.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "apK88yJcY4fy7tP-rU3jrwAAAjE"]
[Sat Aug 29 05:05:23.481590 2026] [security2:error] [pid 1017536:tid 1017662] [remote 35.243.213.218:60034] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mikeycunningham.com"] [uri "/assets../.env"] [unique_id "apK88yJcY4fy7tP-rU3jsgACQ30"]
[Sat Aug 29 05:05:23.486713 2026] [security2:error] [pid 1017536:tid 1017774] [client 20.48.160.90:63496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/tinny.php"] [unique_id "apK88yJcY4fy7tP-rU3jswAAAoA"]
[Sat Aug 29 05:05:23.489422 2026] [security2:error] [pid 1018003:tid 1018171] [client 52.139.37.240:25083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/ww2.php"] [unique_id "apK88zAh5Y1i2tUxg4HgPgAABcw"]
[Sat Aug 29 05:05:23.490930 2026] [security2:error] [pid 1017536:tid 1017786] [client 20.63.81.20:26509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/admin.php/nope.php"] [unique_id "apK88yJcY4fy7tP-rU3jtAAAAow"]
[Sat Aug 29 05:05:23.496529 2026] [security2:error] [pid 1017536:tid 1017602] [remote 35.243.213.218:60034] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mikeycunningham.com"] [uri "/img../.env"] [unique_id "apK88yJcY4fy7tP-rU3jtwACQ0E"]
[Sat Aug 29 05:05:23.496646 2026] [security2:error] [pid 1017536:tid 1017587] [remote 35.243.213.218:60034] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mikeycunningham.com"] [uri "/uploads../.env"] [unique_id "apK88yJcY4fy7tP-rU3juAACQzI"]
[Sat Aug 29 05:05:23.507756 2026] [security2:error] [pid 1018003:tid 1018278] [client 20.196.209.81:12355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-content/admin-header.php"] [unique_id "apK88zAh5Y1i2tUxg4HgQAAABjY"]
[Sat Aug 29 05:05:23.535047 2026] [security2:error] [pid 1017536:tid 1017792] [client 20.104.49.130:53746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/memberfuns.php"] [unique_id "apK88yJcY4fy7tP-rU3jvQAAApI"]
[Sat Aug 29 05:05:23.535447 2026] [security2:error] [pid 1017536:tid 1017769] [client 20.48.251.3:27143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/goods.php"] [unique_id "apK88yJcY4fy7tP-rU3jvgAAAns"]
[Sat Aug 29 05:05:23.537996 2026] [security2:error] [pid 1018003:tid 1018236] [client 4.205.62.107:54443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "troop264olney.net"] [uri "/bigdump.php"] [unique_id "apK88zAh5Y1i2tUxg4HgQQAABgw"]
[Sat Aug 29 05:05:23.546977 2026] [security2:error] [pid 1017536:tid 1017743] [client 20.196.209.81:25038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/fi2.php"] [unique_id "apK88yJcY4fy7tP-rU3jvwAAAmE"]
[Sat Aug 29 05:05:23.547006 2026] [security2:error] [pid 1018003:tid 1018265] [client 74.248.24.12:3425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "apK88zAh5Y1i2tUxg4HgPwAABik"]
[Sat Aug 29 05:05:23.548068 2026] [security2:error] [pid 1018003:tid 1018271] [client 185.104.184.230:45942] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.rtg.paw.mybluehost.me"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "apK88zAh5Y1i2tUxg4HgQgAABi8"]
[Sat Aug 29 05:05:23.562081 2026] [security2:error] [pid 1017536:tid 1017686] [client 185.104.184.230:45940] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.erv.dib.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "apK88yJcY4fy7tP-rU3jwAAAAig"]
[Sat Aug 29 05:05:23.563295 2026] [security2:error] [pid 1017536:tid 1017741] [client 68.155.159.216:12200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/goat.php"] [unique_id "apK88yJcY4fy7tP-rU3jwQAAAl8"]
[Sat Aug 29 05:05:23.575990 2026] [security2:error] [pid 1018003:tid 1018254] [client 87.219.197.128:50200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK88zAh5Y1i2tUxg4HgRQAABh4"]
[Sat Aug 29 05:05:23.576100 2026] [security2:error] [pid 1018003:tid 1018254] [client 87.219.197.128:50200] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK88zAh5Y1i2tUxg4HgRQAABh4"]
[Sat Aug 29 05:05:23.579806 2026] [security2:error] [pid 1018003:tid 1018222] [client 20.63.219.114:19408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "compropolis.mx"] [uri "/NewFile.php"] [unique_id "apK88zAh5Y1i2tUxg4HgRgAABf8"]
[Sat Aug 29 05:05:23.590325 2026] [security2:error] [pid 1018003:tid 1018251] [client 20.63.219.114:9167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/fox.php"] [unique_id "apK88zAh5Y1i2tUxg4HgRwAABhs"]
[Sat Aug 29 05:05:23.615543 2026] [security2:error] [pid 1017536:tid 1017787] [client 52.139.37.240:21378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/file61.php"] [unique_id "apK88yJcY4fy7tP-rU3jwgAAAo0"]
[Sat Aug 29 05:05:23.622758 2026] [security2:error] [pid 1018003:tid 1018218] [client 20.48.160.90:62612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/wp-easy.php"] [unique_id "apK88zAh5Y1i2tUxg4HgSQAABfs"]
[Sat Aug 29 05:05:23.648237 2026] [security2:error] [pid 1018003:tid 1018275] [client 68.155.159.216:24563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/chosen.php"] [unique_id "apK88zAh5Y1i2tUxg4HgSwAABjM"]
[Sat Aug 29 05:05:23.669216 2026] [security2:error] [pid 1018003:tid 1018153] [client 158.158.54.35:10869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/alfa.php"] [unique_id "apK88zAh5Y1i2tUxg4HgTAAABbo"]
[Sat Aug 29 05:05:23.670838 2026] [security2:error] [pid 1017536:tid 1017789] [client 20.63.81.20:26495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/lib.php/new.php"] [unique_id "apK88yJcY4fy7tP-rU3jxAAAAo8"]
[Sat Aug 29 05:05:23.684301 2026] [security2:error] [pid 1017536:tid 1017693] [client 103.185.242.143:59017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK88yJcY4fy7tP-rU3jxQAAAi8"]
[Sat Aug 29 05:05:23.684433 2026] [security2:error] [pid 1017536:tid 1017693] [client 103.185.242.143:59017] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK88yJcY4fy7tP-rU3jxQAAAi8"]
[Sat Aug 29 05:05:23.697973 2026] [security2:error] [pid 1017536:tid 1017670] [client 52.139.37.240:24604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/7logs.php"] [unique_id "apK88yJcY4fy7tP-rU3jxgAAAhg"]
[Sat Aug 29 05:05:23.713754 2026] [security2:error] [pid 1017536:tid 1017738] [client 4.205.62.107:53336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/time.php"] [unique_id "apK88yJcY4fy7tP-rU3jxwAAAlw"]
[Sat Aug 29 05:05:23.717072 2026] [security2:error] [pid 1018003:tid 1018227] [client 20.196.209.81:10732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/extractable-loader-head.php"] [unique_id "apK88zAh5Y1i2tUxg4HgTwAABgQ"]
[Sat Aug 29 05:05:23.717173 2026] [security2:error] [pid 1017536:tid 1017709] [client 20.48.251.3:28486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/loxi-o.php"] [unique_id "apK88yJcY4fy7tP-rU3jyAAAAj8"]
[Sat Aug 29 05:05:23.741195 2026] [security2:error] [pid 1018003:tid 1018179] [client 158.23.147.79:24463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-admin/admin.php"] [unique_id "apK88zAh5Y1i2tUxg4HgUAAABdQ"]
[Sat Aug 29 05:05:23.750752 2026] [security2:error] [pid 1018003:tid 1018266] [client 158.23.147.79:30715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/dropdown.php"] [unique_id "apK88zAh5Y1i2tUxg4HgUQAABio"]
[Sat Aug 29 05:05:23.760662 2026] [security2:error] [pid 1018003:tid 1018193] [client 209.50.184.78:32429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.184.50.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK88zAh5Y1i2tUxg4HgTgAABeI"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:23.768721 2026] [security2:error] [pid 1017536:tid 1017750] [client 68.155.159.216:65486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.gavirestaurant.com"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK88yJcY4fy7tP-rU3jywAAAmg"]
[Sat Aug 29 05:05:23.770771 2026] [security2:error] [pid 1018003:tid 1018257] [client 20.48.160.90:64752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/d7.php"] [unique_id "apK88zAh5Y1i2tUxg4HgUgAABiE"]
[Sat Aug 29 05:05:23.782832 2026] [security2:error] [pid 1017536:tid 1017655] [remote 35.243.213.218:60034] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "www.mikeycunningham.com"] [uri "/public/plugins/alertlist/../../../../../../../../proc/self/environ"] [unique_id "apK88yJcY4fy7tP-rU3jzAACQ3Y"]
[Sat Aug 29 05:05:23.790100 2026] [security2:error] [pid 1018003:tid 1018152] [client 168.107.94.195:59477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK88zAh5Y1i2tUxg4HgUwAABbk"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:23.811467 2026] [security2:error] [pid 1017536:tid 1017667] [client 52.139.37.240:20764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/mah.php"] [unique_id "apK88yJcY4fy7tP-rU3jzgAAAhU"]
[Sat Aug 29 05:05:23.826942 2026] [security2:error] [pid 1017536:tid 1017681] [client 20.63.219.114:1523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/go.php"] [unique_id "apK88yJcY4fy7tP-rU3jzwAAAiM"]
[Sat Aug 29 05:05:23.841909 2026] [security2:error] [pid 1017536:tid 1017775] [client 20.63.81.20:26455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/info.php/new.php"] [unique_id "apK88yJcY4fy7tP-rU3j0AAAAoE"]
[Sat Aug 29 05:05:23.847956 2026] [security2:error] [pid 1017536:tid 1017739] [client 185.104.184.230:45954] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.rtg.paw.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "apK88yJcY4fy7tP-rU3j0QAAAl0"]
[Sat Aug 29 05:05:23.848983 2026] [security2:error] [pid 1018003:tid 1018242] [client 93.123.109.228:37266] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.bak"] [unique_id "apK88zAh5Y1i2tUxg4HgVQAABhI"]
[Sat Aug 29 05:05:23.849938 2026] [security2:error] [pid 1017536:tid 1017779] [client 20.48.251.3:28437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/f35.php"] [unique_id "apK88yJcY4fy7tP-rU3j0gAAAoU"]
[Sat Aug 29 05:05:23.862687 2026] [security2:error] [pid 1018003:tid 1018166] [client 93.123.109.228:37390] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.old"] [unique_id "apK88zAh5Y1i2tUxg4HgVgAABcc"]
[Sat Aug 29 05:05:23.863209 2026] [security2:error] [pid 1018003:tid 1018189] [client 93.123.109.228:37252] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config~"] [unique_id "apK88zAh5Y1i2tUxg4HgVwAABd4"]
[Sat Aug 29 05:05:23.869190 2026] [security2:error] [pid 1017536:tid 1017671] [client 185.104.184.230:45962] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.erv.dib.mybluehost.me"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "apK88yJcY4fy7tP-rU3j0wAAAhk"]
[Sat Aug 29 05:05:23.870312 2026] [security2:error] [pid 1018003:tid 1018155] [client 68.155.159.216:16215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.showerdoorsdubuque.com"] [uri "/packed.php"] [unique_id "apK88zAh5Y1i2tUxg4HgWQAABbw"]
[Sat Aug 29 05:05:23.891902 2026] [security2:error] [pid 1017536:tid 1017705] [client 74.248.24.12:8998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "apK88yJcY4fy7tP-rU3j1AAAAjs"]
[Sat Aug 29 05:05:23.892989 2026] [security2:error] [pid 1017536:tid 1017772] [client 20.104.49.130:43792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/reop3.php"] [unique_id "apK88yJcY4fy7tP-rU3j1QAAAn4"]
[Sat Aug 29 05:05:23.900872 2026] [security2:error] [pid 1018003:tid 1018224] [client 52.139.37.240:24697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/ac.php"] [unique_id "apK88zAh5Y1i2tUxg4HgWgAABgE"]
[Sat Aug 29 05:05:23.901483 2026] [security2:error] [pid 1018003:tid 1018216] [client 4.205.62.107:61762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/fun.php"] [unique_id "apK88zAh5Y1i2tUxg4HgWwAABfk"]
[Sat Aug 29 05:05:23.931325 2026] [security2:error] [pid 1018003:tid 1018213] [client 20.196.209.81:17606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-content/admin.php"] [unique_id "apK88zAh5Y1i2tUxg4HgXAAABfY"]
[Sat Aug 29 05:05:23.933811 2026] [security2:error] [pid 1018003:tid 1018262] [client 20.48.160.90:63533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/v5.php"] [unique_id "apK88zAh5Y1i2tUxg4HgXQAABiY"]
[Sat Aug 29 05:05:23.944905 2026] [security2:error] [pid 1018003:tid 1018267] [client 20.63.219.114:19420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "compropolis.mx"] [uri "/config.php"] [unique_id "apK88zAh5Y1i2tUxg4HgXgAABis"]
[Sat Aug 29 05:05:23.947469 2026] [security2:error] [pid 1018003:tid 1018276] [client 20.196.209.81:14571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/1p.php"] [unique_id "apK88zAh5Y1i2tUxg4HgXwAABjQ"]
[Sat Aug 29 05:05:23.952556 2026] [security2:error] [pid 1018003:tid 1018198] [client 20.63.219.114:14553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/disagraeosc.php"] [unique_id "apK88zAh5Y1i2tUxg4HgYAAABec"]
[Sat Aug 29 05:05:23.963775 2026] [security2:error] [pid 1018003:tid 1018250] [client 4.232.148.111:3010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tiaandephraim.com"] [uri "/222.php"] [unique_id "apK88zAh5Y1i2tUxg4HgYgAABho"]
[Sat Aug 29 05:05:23.996377 2026] [security2:error] [pid 1018003:tid 1018170] [client 20.48.251.3:28426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/api.php"] [unique_id "apK88zAh5Y1i2tUxg4HgZAAABcs"]
[Sat Aug 29 05:05:24.001621 2026] [security2:error] [pid 1017536:tid 1017690] [client 4.205.62.107:22234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/routes.php"] [unique_id "apK88yJcY4fy7tP-rU3j3gAAAiw"]
[Sat Aug 29 05:05:24.006242 2026] [security2:error] [pid 1018003:tid 1018273] [client 20.63.81.20:26482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/db.php/new.php"] [unique_id "apK89DAh5Y1i2tUxg4HgZQAABjE"]
[Sat Aug 29 05:05:24.018055 2026] [security2:error] [pid 1017536:tid 1017767] [client 52.139.37.240:21397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/mini.php"] [unique_id "apK89CJcY4fy7tP-rU3j3wAAAnk"]
[Sat Aug 29 05:05:24.025558 2026] [security2:error] [pid 1017536:tid 1017781] [client 68.155.159.216:18430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.baxterevents.com"] [uri "/first.php"] [unique_id "apK89CJcY4fy7tP-rU3j4AAAAoc"]
[Sat Aug 29 05:05:24.065801 2026] [security2:error] [pid 1018003:tid 1018202] [client 74.248.24.12:28169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/222.php"] [unique_id "apK89DAh5Y1i2tUxg4HgZgAABes"]
[Sat Aug 29 05:05:24.068809 2026] [security2:error] [pid 1017536:tid 1017723] [client 68.155.159.216:50264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK89CJcY4fy7tP-rU3j4QAAAk0"]
[Sat Aug 29 05:05:24.080131 2026] [security2:error] [pid 1017536:tid 1017687] [client 158.23.147.79:23532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ridetimewinnipegservicetiresrims.ca"] [uri "/x.php"] [unique_id "apK89CJcY4fy7tP-rU3j4gAAAik"]
[Sat Aug 29 05:05:24.099473 2026] [security2:error] [pid 1017536:tid 1017758] [client 52.139.37.240:24681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/ctex1.php"] [unique_id "apK89CJcY4fy7tP-rU3j5AAAAnA"]
[Sat Aug 29 05:05:24.109928 2026] [security2:error] [pid 1017536:tid 1017540] [remote 34.138.108.56:57558] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "proppastie.com"] [uri "/assets../.env"] [unique_id "apK89CJcY4fy7tP-rU3j5QACFAM"]
[Sat Aug 29 05:05:24.111885 2026] [security2:error] [pid 1017536:tid 1017710] [client 4.232.148.111:20320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/a.php"] [unique_id "apK89CJcY4fy7tP-rU3j5gAAAkA"]
[Sat Aug 29 05:05:24.113004 2026] [security2:error] [pid 1017536:tid 1017541] [remote 34.138.108.56:57558] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "proppastie.com"] [uri "/images../.env"] [unique_id "apK89CJcY4fy7tP-rU3j5wACggQ"]
[Sat Aug 29 05:05:24.113148 2026] [security2:error] [pid 1017536:tid 1017753] [client 158.158.54.35:11041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/403.php"] [unique_id "apK89CJcY4fy7tP-rU3j6QAAAms"]
[Sat Aug 29 05:05:24.113183 2026] [security2:error] [pid 1017536:tid 1017653] [remote 34.138.108.56:57558] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "proppastie.com"] [uri "/img../.env"] [unique_id "apK89CJcY4fy7tP-rU3j6AACgnQ"]
[Sat Aug 29 05:05:24.121264 2026] [security2:error] [pid 1017536:tid 1017561] [remote 34.138.108.56:57558] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "proppastie.com"] [uri "/uploads../.env"] [unique_id "apK89CJcY4fy7tP-rU3j7AACRxg"]
[Sat Aug 29 05:05:24.129665 2026] [security2:error] [pid 1017536:tid 1017708] [client 20.48.251.3:57823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/temp.php"] [unique_id "apK89CJcY4fy7tP-rU3j7QAAAj4"]
[Sat Aug 29 05:05:24.138243 2026] [security2:error] [pid 1017536:tid 1017737] [client 20.196.209.81:10729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/defaults.php"] [unique_id "apK89CJcY4fy7tP-rU3j7wAAAls"]
[Sat Aug 29 05:05:24.142180 2026] [security2:error] [pid 1018003:tid 1018183] [client 158.23.147.79:48276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-content/plugins/index.php"] [unique_id "apK89DAh5Y1i2tUxg4HgaQAABdg"]
[Sat Aug 29 05:05:24.145589 2026] [security2:error] [pid 1018003:tid 1018169] [client 68.155.159.216:33698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/simple.php"] [unique_id "apK89DAh5Y1i2tUxg4HgagAABco"]
[Sat Aug 29 05:05:24.154318 2026] [security2:error] [pid 1018003:tid 1018234] [client 185.104.184.230:45974] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.rtg.paw.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "apK89DAh5Y1i2tUxg4HgbAAABgo"]
[Sat Aug 29 05:05:24.159195 2026] [security2:error] [pid 1017536:tid 1017786] [client 185.104.184.230:45982] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.erv.dib.mybluehost.me"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "apK89CJcY4fy7tP-rU3j8AAAAow"]
[Sat Aug 29 05:05:24.173246 2026] [security2:error] [pid 1018003:tid 1018195] [client 168.107.94.195:59795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK89DAh5Y1i2tUxg4HgbQAABeQ"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:24.173896 2026] [security2:error] [pid 1017536:tid 1017696] [client 4.205.62.107:21880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/apikeys.php"] [unique_id "apK89CJcY4fy7tP-rU3j8QAAAjI"]
[Sat Aug 29 05:05:24.174980 2026] [security2:error] [pid 1017536:tid 1017720] [client 20.48.160.90:63541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/az.php"] [unique_id "apK89CJcY4fy7tP-rU3j8gAAAko"]
[Sat Aug 29 05:05:24.180350 2026] [security2:error] [pid 1017536:tid 1017778] [client 20.63.81.20:26498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/kuda.php"] [unique_id "apK89CJcY4fy7tP-rU3j8wAAAoQ"]
[Sat Aug 29 05:05:24.180895 2026] [security2:error] [pid 1017536:tid 1017703] [client 20.63.219.114:1516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/gecko-new.php"] [unique_id "apK89CJcY4fy7tP-rU3j9AAAAjk"]
[Sat Aug 29 05:05:24.185576 2026] [security2:error] [pid 1017536:tid 1017724] [client 158.23.147.79:63004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK89CJcY4fy7tP-rU3j9gAAAk4"]
[Sat Aug 29 05:05:24.201750 2026] [security2:error] [pid 1017536:tid 1017729] [client 178.16.55.109:54206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 109.55.16.178.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "autodiscover.burlingtonyaroslavl.com"] [uri "/wp-login.php"] [unique_id "apK89CJcY4fy7tP-rU3j-AAAAlM"]
[Sat Aug 29 05:05:24.207451 2026] [security2:error] [pid 1017536:tid 1017769] [client 68.155.159.216:51513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/xmlrpc.php"] [unique_id "apK89CJcY4fy7tP-rU3j-gAAAns"]
[Sat Aug 29 05:05:24.216240 2026] [security2:error] [pid 1017536:tid 1017774] [client 52.139.37.240:21403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/v.php"] [unique_id "apK89CJcY4fy7tP-rU3j-wAAAoA"]
[Sat Aug 29 05:05:24.239712 2026] [security2:error] [pid 1017536:tid 1017744] [client 4.205.62.107:2894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/chosen.php"] [unique_id "apK89CJcY4fy7tP-rU3j_QAAAmI"]
[Sat Aug 29 05:05:24.261225 2026] [security2:error] [pid 1017536:tid 1017712] [client 20.48.251.3:57841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/fm.php"] [unique_id "apK89CJcY4fy7tP-rU3j_gAAAkI"]
[Sat Aug 29 05:05:24.262758 2026] [security2:error] [pid 1018003:tid 1018238] [client 195.178.110.247:50316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staystrongva.org"] [uri "/index.php"] [unique_id "apK89DAh5Y1i2tUxg4HgcQAABg4"]
[Sat Aug 29 05:05:24.307317 2026] [security2:error] [pid 1017536:tid 1017790] [client 20.63.219.114:1517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/about.php525"] [unique_id "apK89CJcY4fy7tP-rU3kAQAAApA"]
[Sat Aug 29 05:05:24.308729 2026] [security2:error] [pid 1018003:tid 1018214] [client 209.50.162.16:12129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 16.162.50.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK89DAh5Y1i2tUxg4HgcgAABfc"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:24.335282 2026] [security2:error] [pid 1017536:tid 1017670] [client 20.48.160.90:64715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/js.php"] [unique_id "apK89CJcY4fy7tP-rU3kAgAAAhg"]
[Sat Aug 29 05:05:24.356695 2026] [security2:error] [pid 1017536:tid 1017752] [client 20.196.209.81:17649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-content/autoload_classmap.php"] [unique_id "apK89CJcY4fy7tP-rU3kBQAAAmo"]
[Sat Aug 29 05:05:24.360735 2026] [security2:error] [pid 1017536:tid 1017709] [client 20.63.81.20:26376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/sure.php"] [unique_id "apK89CJcY4fy7tP-rU3kBgAAAj8"]
[Sat Aug 29 05:05:24.392341 2026] [security2:error] [pid 1017536:tid 1017557] [remote 34.138.108.56:57558] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "proppastie.com"] [uri "/@fs/var/task/.env"] [unique_id "apK89CJcY4fy7tP-rU3kCAACRxQ"]
[Sat Aug 29 05:05:24.395847 2026] [security2:error] [pid 1017536:tid 1017734] [client 20.48.251.3:28460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/tinyfilemanager.php"] [unique_id "apK89CJcY4fy7tP-rU3kCQAAAlg"]
[Sat Aug 29 05:05:24.435302 2026] [security2:error] [pid 1017536:tid 1017700] [client 195.178.110.247:11604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "staystrongva.org"] [uri "/index.php"] [unique_id "apK89CJcY4fy7tP-rU3kCgAAAjY"]
[Sat Aug 29 05:05:24.438229 2026] [security2:error] [pid 1017536:tid 1017693] [client 20.196.209.81:13830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/Njima.php"] [unique_id "apK89CJcY4fy7tP-rU3kCwAAAi8"]
[Sat Aug 29 05:05:24.440762 2026] [security2:error] [pid 1017536:tid 1017704] [client 4.232.148.111:24787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tiaandephraim.com"] [uri "/mini.php"] [unique_id "apK89CJcY4fy7tP-rU3kDAAAAjo"]
[Sat Aug 29 05:05:24.450457 2026] [security2:error] [pid 1017536:tid 1017681] [client 185.104.184.230:45998] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.erv.dib.mybluehost.me"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "apK89CJcY4fy7tP-rU3kDQAAAiM"]
[Sat Aug 29 05:05:24.474798 2026] [security2:error] [pid 1017536:tid 1017739] [client 20.48.160.90:63515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/hd.php"] [unique_id "apK89CJcY4fy7tP-rU3kDgAAAl0"]
[Sat Aug 29 05:05:24.475911 2026] [security2:error] [pid 1017536:tid 1017702] [client 74.248.24.12:5294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/upload.php"] [unique_id "apK89CJcY4fy7tP-rU3kDwAAAjg"]
[Sat Aug 29 05:05:24.476781 2026] [security2:error] [pid 1017536:tid 1017779] [client 158.23.147.79:25558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/chosen.php"] [unique_id "apK89CJcY4fy7tP-rU3kEAAAAoU"]
[Sat Aug 29 05:05:24.517647 2026] [security2:error] [pid 1018003:tid 1018174] [client 20.63.81.20:26456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/gray.php"] [unique_id "apK89DAh5Y1i2tUxg4HgfwAABc8"]
[Sat Aug 29 05:05:24.518716 2026] [security2:error] [pid 1018003:tid 1018253] [client 162.198.206.205:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutihomes.com"] [uri "/boats"] [unique_id "apK89DAh5Y1i2tUxg4HgfQAABh0"], referer: http://www.baidu.com/
[Sat Aug 29 05:05:24.526877 2026] [security2:error] [pid 1018003:tid 1018243] [client 20.63.219.114:15245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "compropolis.mx"] [uri "/22.php"] [unique_id "apK89DAh5Y1i2tUxg4HggAAABhM"]
[Sat Aug 29 05:05:24.528193 2026] [security2:error] [pid 1018003:tid 1018233] [client 68.155.159.216:57383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/wp-includes/plugins.php"] [unique_id "apK89DAh5Y1i2tUxg4HggQAABgk"]
[Sat Aug 29 05:05:24.538897 2026] [security2:error] [pid 1018003:tid 1018236] [client 20.196.209.81:10702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/post.php"] [unique_id "apK89DAh5Y1i2tUxg4HggwAABgw"]
[Sat Aug 29 05:05:24.544680 2026] [security2:error] [pid 1017536:tid 1017793] [client 20.63.219.114:11846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/wp-admin.php"] [unique_id "apK89CJcY4fy7tP-rU3kFAAAApM"]
[Sat Aug 29 05:05:24.547726 2026] [security2:error] [pid 1017536:tid 1017727] [client 20.48.251.3:57851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/05.php"] [unique_id "apK89CJcY4fy7tP-rU3kFQAAAlE"]
[Sat Aug 29 05:05:24.549714 2026] [security2:error] [pid 1017536:tid 1017750] [client 158.158.54.35:21802] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.santarosairis.org"] [uri "/1.php"] [unique_id "apK89CJcY4fy7tP-rU3kFgAAAmg"]
[Sat Aug 29 05:05:24.549844 2026] [security2:error] [pid 1017536:tid 1017750] [client 158.158.54.35:21802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/1.php"] [unique_id "apK89CJcY4fy7tP-rU3kFgAAAmg"]
[Sat Aug 29 05:05:24.555970 2026] [security2:error] [pid 1018003:tid 1018208] [client 168.107.94.195:60224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK89DAh5Y1i2tUxg4HghAAABfE"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:24.568749 2026] [security2:error] [pid 1017536:tid 1017714] [client 74.248.24.12:4048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/mini.php"] [unique_id "apK89CJcY4fy7tP-rU3kFwAAAkQ"]
[Sat Aug 29 05:05:24.589325 2026] [security2:error] [pid 1017536:tid 1017783] [client 20.104.49.130:51135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/forum.php"] [unique_id "apK89CJcY4fy7tP-rU3kGgAAAok"]
[Sat Aug 29 05:05:24.590499 2026] [security2:error] [pid 1017536:tid 1017667] [client 4.232.148.111:23763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/u.php"] [unique_id "apK89CJcY4fy7tP-rU3kGwAAAhU"]
[Sat Aug 29 05:05:24.617243 2026] [security2:error] [pid 1018003:tid 1018217] [client 20.48.160.90:62593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/xl2023.php"] [unique_id "apK89DAh5Y1i2tUxg4HghwAABfo"]
[Sat Aug 29 05:05:24.659170 2026] [security2:error] [pid 1017536:tid 1017679] [client 20.63.81.20:26452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/puki.php"] [unique_id "apK89CJcY4fy7tP-rU3kIQAAAiE"]
[Sat Aug 29 05:05:24.683043 2026] [security2:error] [pid 1018003:tid 1018259] [client 68.155.159.216:12160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK89DAh5Y1i2tUxg4HgiQAABiM"]
[Sat Aug 29 05:05:24.683602 2026] [security2:error] [pid 1017536:tid 1017668] [client 20.48.251.3:57814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/wp-blog.php"] [unique_id "apK89CJcY4fy7tP-rU3kIwAAAhY"]
[Sat Aug 29 05:05:24.709232 2026] [security2:error] [pid 1017536:tid 1017726] [client 20.63.219.114:1519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/spip.php"] [unique_id "apK89CJcY4fy7tP-rU3kJAAAAlA"]
[Sat Aug 29 05:05:24.746995 2026] [security2:error] [pid 1017536:tid 1017710] [client 4.205.62.107:61061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "troop264olney.net"] [uri "/wdf.php"] [unique_id "apK89CJcY4fy7tP-rU3kJgAAAkA"]
[Sat Aug 29 05:05:24.749184 2026] [security2:error] [pid 1017536:tid 1017558] [remote 34.138.108.56:57558] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "proppastie.com"] [uri "/public/plugins/alertlist/../../../../../../../../proc/self/environ"] [unique_id "apK89CJcY4fy7tP-rU3kJwACRxU"]
[Sat Aug 29 05:05:24.749821 2026] [security2:error] [pid 1017536:tid 1017595] [remote 34.138.108.56:57558] ModSecurity: Access denied with code 500 (phase 1) (Error: Connection drop requested but failed to close the  socket). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "proppastie.com"] [uri "/api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ"] [unique_id "apK89CJcY4fy7tP-rU3kKgACRzo"]
[Sat Aug 29 05:05:24.750884 2026] [security2:error] [pid 1017536:tid 1017567] [remote 34.138.108.56:57558] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "proppastie.com"] [uri "/@fs/proc/self/cwd/.env"] [unique_id "apK89CJcY4fy7tP-rU3kKQACRx4"]
[Sat Aug 29 05:05:24.754954 2026] [security2:error] [pid 1017536:tid 1017753] [client 185.104.184.230:46000] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.erv.dib.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "apK89CJcY4fy7tP-rU3kLAAAAms"]
[Sat Aug 29 05:05:24.779854 2026] [security2:error] [pid 1017536:tid 1017728] [client 20.196.209.81:17948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-content/cache/min/1/wp-content/admin.php"] [unique_id "apK89CJcY4fy7tP-rU3kLQAAAlI"]
[Sat Aug 29 05:05:24.789865 2026] [security2:error] [pid 1017536:tid 1017708] [client 20.48.160.90:64703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/V2.php"] [unique_id "apK89CJcY4fy7tP-rU3kLgAAAj4"]
[Sat Aug 29 05:05:24.791710 2026] [autoindex:error] [pid 1018003:tid 1018270] [client 195.178.110.103:14942] AH01276: Cannot serve directory /home3/jiazbwmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:05:24.802325 2026] [security2:error] [pid 1017536:tid 1017786] [client 20.63.81.20:26461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/sonic.php"] [unique_id "apK89CJcY4fy7tP-rU3kLwAAAow"]
[Sat Aug 29 05:05:24.809590 2026] [security2:error] [pid 1017536:tid 1017672] [client 20.104.49.130:52304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.carlosmua.com"] [uri "/wp-blogs.php"] [unique_id "apK89CJcY4fy7tP-rU3kMAAAAho"]
[Sat Aug 29 05:05:24.823592 2026] [security2:error] [pid 1017536:tid 1017720] [client 20.48.251.3:57911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/erty.php"] [unique_id "apK89CJcY4fy7tP-rU3kMgAAAko"]
[Sat Aug 29 05:05:24.833370 2026] [security2:error] [pid 1017536:tid 1017687] [client 20.196.209.81:25084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/configs.php"] [unique_id "apK89CJcY4fy7tP-rU3kNAAAAik"]
[Sat Aug 29 05:05:24.872217 2026] [security2:error] [pid 1017536:tid 1017686] [client 158.23.147.79:24533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK89CJcY4fy7tP-rU3kNQAAAig"]
[Sat Aug 29 05:05:24.884952 2026] [security2:error] [pid 1018003:tid 1018266] [client 45.3.55.24:55385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 24.55.3.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK89DAh5Y1i2tUxg4HgkAAABio"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:24.914602 2026] [access_compat:error] [pid 1018003:tid 1018184] [client 67.20.76.220:22210] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:05:24.918985 2026] [security2:error] [pid 1018003:tid 1018189] [client 4.205.62.107:53421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/old_phpinfo.php"] [unique_id "apK89DAh5Y1i2tUxg4HgkwAABd4"]
[Sat Aug 29 05:05:24.920402 2026] [security2:error] [pid 1017536:tid 1017764] [client 4.232.148.111:10357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tiaandephraim.com"] [uri "/aa.php"] [unique_id "apK89CJcY4fy7tP-rU3kNwAAAnY"]
[Sat Aug 29 05:05:24.922503 2026] [security2:error] [pid 1017536:tid 1017737] [client 20.63.219.114:1499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/wp-configs.php"] [unique_id "apK89CJcY4fy7tP-rU3kOAAAAls"]
[Sat Aug 29 05:05:24.923509 2026] [security2:error] [pid 1018003:tid 1018187] [client 20.63.219.114:9381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "compropolis.mx"] [uri "/bak.phps"] [unique_id "apK89DAh5Y1i2tUxg4HglAAABdw"]
[Sat Aug 29 05:05:24.931043 2026] [access_compat:error] [pid 1018003:tid 1018189] [client 67.20.76.220:22250] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:05:24.931096 2026] [access_compat:error] [pid 1018003:tid 1018242] [client 67.20.76.220:22226] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:05:24.940091 2026] [security2:error] [pid 1018003:tid 1018159] [client 168.107.94.195:60551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK89DAh5Y1i2tUxg4HgmQAABcA"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:24.940591 2026] [access_compat:error] [pid 1017536:tid 1017770] [client 67.20.76.220:22240] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:05:24.944748 2026] [security2:error] [pid 1017536:tid 1017749] [client 20.196.209.81:21062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/csv.php"] [unique_id "apK89CJcY4fy7tP-rU3kPAAAAmc"]
[Sat Aug 29 05:05:24.947541 2026] [security2:error] [pid 1017536:tid 1017678] [client 20.63.81.20:26453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/pop.php"] [unique_id "apK89CJcY4fy7tP-rU3kPQAAAiA"]
[Sat Aug 29 05:05:24.955491 2026] [security2:error] [pid 1018003:tid 1018263] [client 195.178.110.103:14942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jia.zbw.mybluehost.me"] [uri "/index.php"] [unique_id "apK89DAh5Y1i2tUxg4HgnQAABic"]
[Sat Aug 29 05:05:24.955769 2026] [security2:error] [pid 1017536:tid 1017730] [client 20.48.251.3:28473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/wp-config.backup.php"] [unique_id "apK89CJcY4fy7tP-rU3kPgAAAlQ"]
[Sat Aug 29 05:05:25.000098 2026] [security2:error] [pid 1017536:tid 1017738] [client 68.155.159.216:16349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.showerdoorsdubuque.com"] [uri "/wp-content/packed.php"] [unique_id "apK89CJcY4fy7tP-rU3kRAAAAlw"]
[Sat Aug 29 05:05:25.010561 2026] [security2:error] [pid 1018003:tid 1018240] [client 20.48.160.90:64676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/mad.php"] [unique_id "apK89TAh5Y1i2tUxg4HgoAAABhA"]
[Sat Aug 29 05:05:25.019905 2026] [security2:error] [pid 1017536:tid 1017689] [client 20.104.49.130:43611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/dk.php"] [unique_id "apK89SJcY4fy7tP-rU3kRgAAAis"]
[Sat Aug 29 05:05:25.022773 2026] [security2:error] [pid 1017536:tid 1017721] [client 158.23.147.79:58936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/packed.php"] [unique_id "apK89SJcY4fy7tP-rU3kSAAAAks"]
[Sat Aug 29 05:05:25.022908 2026] [core:error] [pid 1017536:tid 1017724] [client 74.248.24.12:35497] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:25.022918 2026] [core:error] [pid 1017536:tid 1017724] [client 74.248.24.12:35497] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:25.037565 2026] [security2:error] [pid 1017536:tid 1017691] [client 4.205.62.107:64303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/kedi.php"] [unique_id "apK89SJcY4fy7tP-rU3kSQAAAi0"]
[Sat Aug 29 05:05:25.058732 2026] [security2:error] [pid 1017536:tid 1017704] [client 185.104.184.230:46008] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.erv.dib.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "apK89SJcY4fy7tP-rU3kSgAAAjo"]
[Sat Aug 29 05:05:25.083737 2026] [security2:error] [pid 1018003:tid 1018177] [client 4.232.148.111:15459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/r.php"] [unique_id "apK89TAh5Y1i2tUxg4HgowAABdI"]
[Sat Aug 29 05:05:25.084132 2026] [security2:error] [pid 1017536:tid 1017702] [client 20.63.81.20:26385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/503.php"] [unique_id "apK89SJcY4fy7tP-rU3kTAAAAjg"]
[Sat Aug 29 05:05:25.085526 2026] [security2:error] [pid 1017536:tid 1017779] [client 20.48.251.3:27157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/edit.php"] [unique_id "apK89SJcY4fy7tP-rU3kTQAAAoU"]
[Sat Aug 29 05:05:25.086108 2026] [security2:error] [pid 1018003:tid 1018235] [client 74.248.24.12:25717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/aa.php"] [unique_id "apK89TAh5Y1i2tUxg4HgpAAABgs"]
[Sat Aug 29 05:05:25.092469 2026] [security2:error] [pid 1017536:tid 1017752] [client 20.63.219.114:14573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/backup.php"] [unique_id "apK89SJcY4fy7tP-rU3kTwAAAmo"]
[Sat Aug 29 05:05:25.106592 2026] [security2:error] [pid 1017536:tid 1017757] [client 93.123.109.228:37236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/.wp-config.php.swp"] [unique_id "apK89SJcY4fy7tP-rU3kUAAAAm8"]
[Sat Aug 29 05:05:25.147740 2026] [security2:error] [pid 1018003:tid 1018190] [client 93.123.109.228:37266] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/ADMIN/.env"] [unique_id "apK89TAh5Y1i2tUxg4HgpwAABd8"]
[Sat Aug 29 05:05:25.149123 2026] [security2:error] [pid 1017536:tid 1017793] [client 158.158.54.35:19362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/s.php"] [unique_id "apK89SJcY4fy7tP-rU3kUQAAApM"]
[Sat Aug 29 05:05:25.149832 2026] [security2:error] [pid 1017536:tid 1017675] [client 4.205.62.107:21839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/fm.php"] [unique_id "apK89SJcY4fy7tP-rU3kUgAAAh0"]
[Sat Aug 29 05:05:25.175302 2026] [security2:error] [pid 1017536:tid 1017692] [client 20.196.209.81:10649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-content/classwithtostring.php"] [unique_id "apK89SJcY4fy7tP-rU3kUwAAAi4"]
[Sat Aug 29 05:05:25.188985 2026] [security2:error] [pid 1017536:tid 1017783] [client 20.48.160.90:63522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/st.php"] [unique_id "apK89SJcY4fy7tP-rU3kVQAAAok"]
[Sat Aug 29 05:05:25.190513 2026] [security2:error] [pid 1017536:tid 1017667] [client 158.23.147.79:23366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ridetimewinnipegservicetiresrims.ca"] [uri "/wp-content/x.php"] [unique_id "apK89SJcY4fy7tP-rU3kVgAAAhU"]
[Sat Aug 29 05:05:25.190940 2026] [security2:error] [pid 1017536:tid 1017765] [client 68.155.159.216:50223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-content/admin.php"] [unique_id "apK89SJcY4fy7tP-rU3kVwAAAnc"]
[Sat Aug 29 05:05:25.195795 2026] [security2:error] [pid 1017536:tid 1017788] [client 93.123.109.228:37338] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/API/.env"] [unique_id "apK89SJcY4fy7tP-rU3kWAAAAo4"]
[Sat Aug 29 05:05:25.215020 2026] [security2:error] [pid 1017536:tid 1017690] [client 20.48.251.3:28470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/8.php"] [unique_id "apK89SJcY4fy7tP-rU3kWQAAAiw"]
[Sat Aug 29 05:05:25.226881 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.63.81.20:26537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/fxp.php"] [unique_id "apK89SJcY4fy7tP-rU3kWgAAAlY"]
[Sat Aug 29 05:05:25.233962 2026] [security2:error] [pid 1017536:tid 1017669] [client 103.168.67.159:3238] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.body.requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1600"] [id "900941"] [msg "Invalid nested WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.body.requests.requests.path=///"] [hostname "naturalbasstech.com"] [uri "/wp/"] [unique_id "apK89SJcY4fy7tP-rU3kWwAAAhc"]
[Sat Aug 29 05:05:25.234722 2026] [security2:error] [pid 1017536:tid 1017782] [client 20.196.209.81:15121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/disagraeed.php"] [unique_id "apK89SJcY4fy7tP-rU3kXAAAAog"]
[Sat Aug 29 05:05:25.247926 2026] [security2:error] [pid 1017536:tid 1017773] [client 192.145.125.70:35408] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "vickiandgreg.strangeworx.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "apK89SJcY4fy7tP-rU3kXQAAAn8"]
[Sat Aug 29 05:05:25.252946 2026] [security2:error] [pid 1017536:tid 1017679] [client 158.23.147.79:48297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/simple.php"] [unique_id "apK89SJcY4fy7tP-rU3kXgAAAiE"]
[Sat Aug 29 05:05:25.277425 2026] [security2:error] [pid 1017536:tid 1017711] [client 68.155.159.216:24521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/goods.php"] [unique_id "apK89SJcY4fy7tP-rU3kXwAAAkE"]
[Sat Aug 29 05:05:25.290150 2026] [security2:error] [pid 1017536:tid 1017688] [client 20.63.219.114:19448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "compropolis.mx"] [uri "/install.php"] [unique_id "apK89SJcY4fy7tP-rU3kYQAAAio"]
[Sat Aug 29 05:05:25.293204 2026] [security2:error] [pid 1017536:tid 1017674] [client 20.63.219.114:1986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/essexec.php"] [unique_id "apK89SJcY4fy7tP-rU3kYgAAAhw"]
[Sat Aug 29 05:05:25.293814 2026] [security2:error] [pid 1017536:tid 1017668] [client 158.23.147.79:62673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/goat.php"] [unique_id "apK89SJcY4fy7tP-rU3kZAAAAhY"]
[Sat Aug 29 05:05:25.306329 2026] [security2:error] [pid 1018003:tid 1018225] [client 4.205.62.107:21855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/god.php"] [unique_id "apK89TAh5Y1i2tUxg4HgsAAABgI"]
[Sat Aug 29 05:05:25.315282 2026] [security2:error] [pid 1018003:tid 1018194] [client 93.123.109.228:37252] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/APP/.env"] [unique_id "apK89TAh5Y1i2tUxg4HgsQAABeM"]
[Sat Aug 29 05:05:25.320262 2026] [security2:error] [pid 1017536:tid 1017753] [client 68.155.159.216:51257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/atomlib.php"] [unique_id "apK89SJcY4fy7tP-rU3kZgAAAms"]
[Sat Aug 29 05:05:25.320960 2026] [security2:error] [pid 1017536:tid 1017666] [client 168.107.94.195:60969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK89SJcY4fy7tP-rU3kZwAAAhQ"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:25.341234 2026] [security2:error] [pid 1018003:tid 1018252] [client 20.48.160.90:62696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/alfanew.php"] [unique_id "apK89TAh5Y1i2tUxg4HgswAABhw"]
[Sat Aug 29 05:05:25.348902 2026] [security2:error] [pid 1018003:tid 1018195] [client 20.48.251.3:57832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/thui.php"] [unique_id "apK89TAh5Y1i2tUxg4HgtAAABeQ"]
[Sat Aug 29 05:05:25.365806 2026] [security2:error] [pid 1018003:tid 1018156] [client 185.104.184.230:46020] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.erv.dib.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "apK89TAh5Y1i2tUxg4HgtQAABb0"]
[Sat Aug 29 05:05:25.376975 2026] [security2:error] [pid 1018003:tid 1018231] [client 4.205.62.107:2941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/rum.or.php"] [unique_id "apK89TAh5Y1i2tUxg4HgtgAABgc"]
[Sat Aug 29 05:05:25.388667 2026] [security2:error] [pid 1017536:tid 1017786] [client 20.63.81.20:26610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/vv.php"] [unique_id "apK89SJcY4fy7tP-rU3kaAAAAow"]
[Sat Aug 29 05:05:25.397756 2026] [security2:error] [pid 1018003:tid 1018182] [client 93.123.109.228:37266] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/BACK/.env"] [unique_id "apK89TAh5Y1i2tUxg4HgtwAABdc"]
[Sat Aug 29 05:05:25.405942 2026] [security2:error] [pid 1017536:tid 1017778] [client 93.123.109.228:37302] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/BACKEND/.env"] [unique_id "apK89SJcY4fy7tP-rU3kaQAAAoQ"]
[Sat Aug 29 05:05:25.406965 2026] [security2:error] [pid 1017536:tid 1017715] [client 20.196.209.81:21099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/disagraeosc.php"] [unique_id "apK89SJcY4fy7tP-rU3kagAAAkU"]
[Sat Aug 29 05:05:25.410532 2026] [security2:error] [pid 1017536:tid 1017713] [client 4.232.148.111:3046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tiaandephraim.com"] [uri "/c.php"] [unique_id "apK89SJcY4fy7tP-rU3kawAAAkM"]
[Sat Aug 29 05:05:25.419515 2026] [security2:error] [pid 1017536:tid 1017703] [client 93.123.109.228:37312] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/Api/.env"] [unique_id "apK89SJcY4fy7tP-rU3kbAAAAjk"]
[Sat Aug 29 05:05:25.429792 2026] [security2:error] [pid 1018003:tid 1018234] [client 209.50.173.163:61849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.173.50.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK89TAh5Y1i2tUxg4HguAAABgo"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:25.452029 2026] [security2:error] [pid 1017536:tid 1017741] [client 93.123.109.228:37338] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/BE/.env"] [unique_id "apK89SJcY4fy7tP-rU3kbgAAAl8"]
[Sat Aug 29 05:05:25.453236 2026] [security2:error] [pid 1018003:tid 1018188] [client 93.123.109.228:37254] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/Backend/.env"] [unique_id "apK89TAh5Y1i2tUxg4HgugAABd0"]
[Sat Aug 29 05:05:25.457706 2026] [security2:error] [pid 1018003:tid 1018268] [client 20.63.219.114:11869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/haiterus.php"] [unique_id "apK89TAh5Y1i2tUxg4HgvAAABiw"]
[Sat Aug 29 05:05:25.459000 2026] [security2:error] [pid 1017536:tid 1017744] [client 93.123.109.228:37324] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/Be/.env"] [unique_id "apK89SJcY4fy7tP-rU3kbwAAAmI"]
[Sat Aug 29 05:05:25.478597 2026] [security2:error] [pid 1017536:tid 1017740] [client 20.48.160.90:63550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/ioxi.php"] [unique_id "apK89SJcY4fy7tP-rU3kcAAAAl4"]
[Sat Aug 29 05:05:25.479635 2026] [security2:error] [pid 1017536:tid 1017680] [client 20.48.251.3:57900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/file21.php"] [unique_id "apK89SJcY4fy7tP-rU3kcQAAAiI"]
[Sat Aug 29 05:05:25.516660 2026] [security2:error] [pid 1017536:tid 1017771] [client 20.63.81.20:26490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/bossu.php"] [unique_id "apK89SJcY4fy7tP-rU3kcgAAAn0"]
[Sat Aug 29 05:05:25.561045 2026] [security2:error] [pid 1017536:tid 1017720] [client 4.232.148.111:32380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/wp-blog.php"] [unique_id "apK89SJcY4fy7tP-rU3kcwAAAko"]
[Sat Aug 29 05:05:25.566578 2026] [security2:error] [pid 1017536:tid 1017755] [client 103.168.67.159:3238] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.body.requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1600"] [id "900941"] [msg "Invalid nested WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.body.requests.requests.path=///"] [hostname "naturalbasstech.com"] [uri "/wordpress/"] [unique_id "apK89SJcY4fy7tP-rU3kdAAAAm0"]
[Sat Aug 29 05:05:25.569193 2026] [security2:error] [pid 1017536:tid 1017792] [client 20.196.209.81:10638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-content/config.php"] [unique_id "apK89SJcY4fy7tP-rU3kdgAAApI"]
[Sat Aug 29 05:05:25.572124 2026] [security2:error] [pid 1017536:tid 1017615] [remote 34.138.108.56:57572] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "proppastie.com"] [uri "/icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ"] [unique_id "apK89SJcY4fy7tP-rU3keAACZE4"]
[Sat Aug 29 05:05:25.583110 2026] [security2:error] [pid 1018003:tid 1018174] [client 158.23.147.79:25583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/goods.php"] [unique_id "apK89TAh5Y1i2tUxg4HgvwAABc8"]
[Sat Aug 29 05:05:25.589764 2026] [security2:error] [pid 1017536:tid 1017743] [client 158.158.54.35:18407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/test1.php"] [unique_id "apK89SJcY4fy7tP-rU3kewAAAmE"]
[Sat Aug 29 05:05:25.591221 2026] [core:error] [pid 1017536:tid 1017784] [client 74.248.24.12:31596] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:25.591238 2026] [core:error] [pid 1017536:tid 1017784] [client 74.248.24.12:31596] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:25.603062 2026] [security2:error] [pid 1017536:tid 1017769] [client 74.248.24.12:16569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/c.php"] [unique_id "apK89SJcY4fy7tP-rU3kfAAAAns"]
[Sat Aug 29 05:05:25.614198 2026] [security2:error] [pid 1018003:tid 1018211] [client 20.48.251.3:57816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/mcebraed.php"] [unique_id "apK89TAh5Y1i2tUxg4HgwgAABfQ"]
[Sat Aug 29 05:05:25.643145 2026] [security2:error] [pid 1018003:tid 1018233] [client 68.155.159.216:58299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK89TAh5Y1i2tUxg4HgxAAABgk"]
[Sat Aug 29 05:05:25.655668 2026] [security2:error] [pid 1017536:tid 1017760] [client 20.63.81.20:26372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/504.php"] [unique_id "apK89SJcY4fy7tP-rU3kfQAAAnI"]
[Sat Aug 29 05:05:25.683804 2026] [security2:error] [pid 1017536:tid 1017738] [client 185.104.184.230:46026] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.erv.dib.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "apK89SJcY4fy7tP-rU3kfwAAAlw"]
[Sat Aug 29 05:05:25.701949 2026] [security2:error] [pid 1017536:tid 1017693] [client 168.107.94.195:61279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK89SJcY4fy7tP-rU3kggAAAi8"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:25.702079 2026] [security2:error] [pid 1017536:tid 1017790] [client 20.63.219.114:11847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/hello.php"] [unique_id "apK89SJcY4fy7tP-rU3kgwAAApA"]
[Sat Aug 29 05:05:25.705303 2026] [security2:error] [pid 1017536:tid 1017739] [client 20.48.160.90:64763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/TNT.php"] [unique_id "apK89SJcY4fy7tP-rU3khAAAAl0"]
[Sat Aug 29 05:05:25.757618 2026] [security2:error] [pid 1018003:tid 1018256] [client 20.48.251.3:57838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/server-info.php"] [unique_id "apK89TAh5Y1i2tUxg4HgyAAABiA"]
[Sat Aug 29 05:05:25.765304 2026] [security2:error] [pid 1017536:tid 1017787] [client 20.63.219.114:15246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "compropolis.mx"] [uri "/colour.php"] [unique_id "apK89SJcY4fy7tP-rU3khgAAAo0"]
[Sat Aug 29 05:05:25.767313 2026] [security2:error] [pid 1017536:tid 1017757] [client 68.155.159.216:33695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-admin/about.php"] [unique_id "apK89SJcY4fy7tP-rU3khwAAAm8"]
[Sat Aug 29 05:05:25.767335 2026] [security2:error] [pid 1018003:tid 1018277] [client 20.196.209.81:15800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/add_actualites.php"] [unique_id "apK89TAh5Y1i2tUxg4HgyQAABjU"]
[Sat Aug 29 05:05:25.784148 2026] [security2:error] [pid 1017536:tid 1017685] [client 20.63.81.20:26478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/nice.php"] [unique_id "apK89SJcY4fy7tP-rU3kiAAAAic"]
[Sat Aug 29 05:05:25.812578 2026] [security2:error] [pid 1017536:tid 1017765] [client 68.155.159.216:16282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-content/banners/about.php"] [unique_id "apK89SJcY4fy7tP-rU3kiwAAAnc"]
[Sat Aug 29 05:05:25.815172 2026] [security2:error] [pid 1018003:tid 1018230] [client 20.63.219.114:11861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/go.php"] [unique_id "apK89TAh5Y1i2tUxg4HgygAABgY"]
[Sat Aug 29 05:05:25.857564 2026] [security2:error] [pid 1017536:tid 1017749] [client 192.145.125.70:35422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.125.145.192.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "vickiandgreg.strangeworx.com"] [uri "/xmlrpc.php"] [unique_id "apK89SJcY4fy7tP-rU3kjAAAAmc"]
[Sat Aug 29 05:05:25.861641 2026] [security2:error] [pid 1018003:tid 1018166] [client 20.48.160.90:64684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/cd.php"] [unique_id "apK89TAh5Y1i2tUxg4HgzQAABcc"]
[Sat Aug 29 05:05:25.865896 2026] [security2:error] [pid 1017536:tid 1017669] [client 103.168.67.159:3238] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.body.requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1600"] [id "900941"] [msg "Invalid nested WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.body.requests.requests.path=///"] [hostname "naturalbasstech.com"] [uri "/blog/"] [unique_id "apK89SJcY4fy7tP-rU3kjgAAAhc"]
[Sat Aug 29 05:05:25.881875 2026] [security2:error] [pid 1018003:tid 1018154] [client 20.196.209.81:21078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/about.php525"] [unique_id "apK89TAh5Y1i2tUxg4Hg3AAABbs"]
[Sat Aug 29 05:05:25.882981 2026] [security2:error] [pid 1018003:tid 1018257] [client 34.143.179.161:19736] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "cpcontacts.harnessenergyusa.com"] [uri "/admin/.env"] [unique_id "apK89TAh5Y1i2tUxg4Hg3QAABiE"]
[Sat Aug 29 05:05:25.893973 2026] [security2:error] [pid 1017536:tid 1017772] [client 4.232.148.111:32934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tiaandephraim.com"] [uri "/f.php"] [unique_id "apK89SJcY4fy7tP-rU3knAAAAn4"]
[Sat Aug 29 05:05:25.894968 2026] [security2:error] [pid 1018003:tid 1018270] [client 34.143.179.161:19758] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "cpcontacts.harnessenergyusa.com"] [uri "/frontend/.env"] [unique_id "apK89TAh5Y1i2tUxg4Hg4AAABi4"]
[Sat Aug 29 05:05:25.896328 2026] [security2:error] [pid 1017536:tid 1017683] [client 20.48.251.3:57844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/gk.php"] [unique_id "apK89SJcY4fy7tP-rU3knQAAAiU"]
[Sat Aug 29 05:05:25.920044 2026] [security2:error] [pid 1017536:tid 1017767] [client 68.155.159.216:64253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.gavirestaurant.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK89SJcY4fy7tP-rU3kngAAAnk"]
[Sat Aug 29 05:05:25.923712 2026] [security2:error] [pid 1017536:tid 1017711] [client 20.63.81.20:26437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/beence.php"] [unique_id "apK89SJcY4fy7tP-rU3knwAAAkE"]
[Sat Aug 29 05:05:25.940060 2026] [access_compat:error] [pid 1018003:tid 1018189] [client 67.20.76.220:22252] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:05:25.958629 2026] [security2:error] [pid 1017536:tid 1017706] [client 4.205.62.107:57754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "troop264olney.net"] [uri "/bb.php"] [unique_id "apK89SJcY4fy7tP-rU3kogAAAjw"]
[Sat Aug 29 05:05:25.965018 2026] [security2:error] [pid 1017536:tid 1017751] [client 20.196.209.81:10667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-content/cong.php"] [unique_id "apK89SJcY4fy7tP-rU3kpAAAAmk"]
[Sat Aug 29 05:05:25.977568 2026] [security2:error] [pid 1017536:tid 1017714] [client 216.26.226.127:18323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 127.226.26.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK89SJcY4fy7tP-rU3koQAAAkQ"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:26.018979 2026] [security2:error] [pid 1017536:tid 1017740] [client 185.104.184.230:46028] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.erv.dib.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "apK89iJcY4fy7tP-rU3kqAAAAl4"]
[Sat Aug 29 05:05:26.019941 2026] [security2:error] [pid 1018003:tid 1018169] [client 20.48.160.90:62711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/luuf.php"] [unique_id "apK89jAh5Y1i2tUxg4Hg6QAABco"]
[Sat Aug 29 05:05:26.027080 2026] [security2:error] [pid 1018003:tid 1018161] [client 158.23.147.79:24448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/classwithtostring.php"] [unique_id "apK89jAh5Y1i2tUxg4Hg6wAABcI"]
[Sat Aug 29 05:05:26.032203 2026] [security2:error] [pid 1017536:tid 1017671] [client 158.158.54.35:15913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/ws.php"] [unique_id "apK89iJcY4fy7tP-rU3kqQAAAhk"]
[Sat Aug 29 05:05:26.038342 2026] [security2:error] [pid 1017536:tid 1017777] [client 4.232.148.111:15669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/xxx.php"] [unique_id "apK89iJcY4fy7tP-rU3kqgAAAoM"]
[Sat Aug 29 05:05:26.051891 2026] [security2:error] [pid 1017536:tid 1017771] [client 20.48.251.3:27138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/god.php"] [unique_id "apK89iJcY4fy7tP-rU3krQAAAn0"]
[Sat Aug 29 05:05:26.056751 2026] [security2:error] [pid 1017536:tid 1017720] [client 20.63.81.20:26369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/222.php"] [unique_id "apK89iJcY4fy7tP-rU3krgAAAko"]
[Sat Aug 29 05:05:26.061613 2026] [security2:error] [pid 1017536:tid 1017668] [client 20.63.219.114:1937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/fi2.php"] [unique_id "apK89iJcY4fy7tP-rU3ksAAAAhY"]
[Sat Aug 29 05:05:26.081656 2026] [security2:error] [pid 1017536:tid 1017748] [client 57.141.14.53:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/cart/"] [unique_id "apK89iJcY4fy7tP-rU3ksgAAAmY"]
[Sat Aug 29 05:05:26.082973 2026] [security2:error] [pid 1018003:tid 1018183] [client 168.107.94.195:61628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK89jAh5Y1i2tUxg4Hg7gAABdg"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:26.085252 2026] [core:error] [pid 1018003:tid 1018184] [client 34.12.38.134:40406] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.085264 2026] [core:error] [pid 1018003:tid 1018184] [client 34.12.38.134:40406] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.088426 2026] [core:error] [pid 1017536:tid 1017781] [client 34.12.38.134:40420] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.088441 2026] [core:error] [pid 1017536:tid 1017781] [client 34.12.38.134:40420] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.088546 2026] [core:error] [pid 1017536:tid 1017674] [client 34.12.38.134:40452] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.088553 2026] [security2:error] [pid 1017536:tid 1017781] [client 34.12.38.134:40420] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/___proxy_subdomain_cpcontacts/index.php"] [unique_id "apK89iJcY4fy7tP-rU3kswAAAoc"]
[Sat Aug 29 05:05:26.088558 2026] [core:error] [pid 1017536:tid 1017674] [client 34.12.38.134:40452] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.090278 2026] [core:error] [pid 1017536:tid 1017688] [client 34.12.38.134:40414] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.090291 2026] [core:error] [pid 1017536:tid 1017688] [client 34.12.38.134:40414] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.095041 2026] [security2:error] [pid 1017536:tid 1017684] [client 34.12.38.134:40524] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/config/prod.exs"] [unique_id "apK89iJcY4fy7tP-rU3kuAAAAiY"]
[Sat Aug 29 05:05:26.097529 2026] [core:error] [pid 1017536:tid 1017758] [client 34.12.38.134:40432] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.097543 2026] [core:error] [pid 1017536:tid 1017758] [client 34.12.38.134:40432] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.104656 2026] [core:error] [pid 1017536:tid 1017716] [client 34.12.38.134:40434] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.104675 2026] [core:error] [pid 1017536:tid 1017716] [client 34.12.38.134:40434] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.104869 2026] [core:error] [pid 1017536:tid 1017710] [client 34.12.38.134:40464] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.104880 2026] [core:error] [pid 1017536:tid 1017710] [client 34.12.38.134:40464] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.104884 2026] [core:error] [pid 1018003:tid 1018163] [client 34.12.38.134:40482] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.104894 2026] [core:error] [pid 1018003:tid 1018163] [client 34.12.38.134:40482] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.104958 2026] [core:error] [pid 1018003:tid 1018203] [client 34.12.38.134:40488] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.104965 2026] [core:error] [pid 1018003:tid 1018203] [client 34.12.38.134:40488] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.105544 2026] [core:error] [pid 1018003:tid 1018242] [client 34.12.38.134:40462] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.105549 2026] [core:error] [pid 1018003:tid 1018261] [client 34.12.38.134:40442] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.105558 2026] [core:error] [pid 1018003:tid 1018242] [client 34.12.38.134:40462] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.105563 2026] [core:error] [pid 1018003:tid 1018261] [client 34.12.38.134:40442] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.107882 2026] [security2:error] [pid 1018003:tid 1018164] [client 93.123.109.228:37382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK89jAh5Y1i2tUxg4Hg-wAABcU"]
[Sat Aug 29 05:05:26.108651 2026] [security2:error] [pid 1017536:tid 1017716] [client 34.12.38.134:40434] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/___proxy_subdomain_cpcontacts/index.php"] [unique_id "apK89iJcY4fy7tP-rU3kvAAAAkY"]
[Sat Aug 29 05:05:26.108803 2026] [security2:error] [pid 1018003:tid 1018242] [client 34.12.38.134:40462] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/___proxy_subdomain_cpcontacts/index.php"] [unique_id "apK89jAh5Y1i2tUxg4Hg8QAABhI"]
[Sat Aug 29 05:05:26.109140 2026] [core:error] [pid 1017536:tid 1017776] [client 34.12.38.134:40474] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.109151 2026] [core:error] [pid 1017536:tid 1017776] [client 34.12.38.134:40474] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.115134 2026] [security2:error] [pid 1017536:tid 1017696] [client 34.12.38.134:40664] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/instance/config.py"] [unique_id "apK89iJcY4fy7tP-rU3kygAAAjI"]
[Sat Aug 29 05:05:26.121608 2026] [security2:error] [pid 1018003:tid 1018240] [client 74.248.24.12:25688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/f.php"] [unique_id "apK89jAh5Y1i2tUxg4HhBwAABhA"]
[Sat Aug 29 05:05:26.122740 2026] [core:error] [pid 1018003:tid 1018226] [client 34.12.38.134:40648] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.122758 2026] [core:error] [pid 1018003:tid 1018226] [client 34.12.38.134:40648] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.125193 2026] [core:error] [pid 1018003:tid 1018188] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.125207 2026] [core:error] [pid 1018003:tid 1018188] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.126158 2026] [security2:error] [pid 1017536:tid 1017717] [client 158.23.147.79:62761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-content/packed.php"] [unique_id "apK89iJcY4fy7tP-rU3k0QAAAkc"]
[Sat Aug 29 05:05:26.127183 2026] [core:error] [pid 1018003:tid 1018223] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.127197 2026] [core:error] [pid 1018003:tid 1018223] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.128281 2026] [core:error] [pid 1017536:tid 1017739] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.130891 2026] [core:error] [pid 1017536:tid 1017695] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.130904 2026] [core:error] [pid 1017536:tid 1017695] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.130906 2026] [core:error] [pid 1017536:tid 1017739] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.132930 2026] [core:error] [pid 1017536:tid 1017787] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.132949 2026] [core:error] [pid 1017536:tid 1017787] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.133608 2026] [security2:error] [pid 1017536:tid 1017744] [client 20.63.219.114:11949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "compropolis.mx"] [uri "/OK.php"] [unique_id "apK89iJcY4fy7tP-rU3k1AAAAmI"]
[Sat Aug 29 05:05:26.138832 2026] [core:error] [pid 1018003:tid 1018212] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.138846 2026] [core:error] [pid 1018003:tid 1018212] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.143497 2026] [core:error] [pid 1017536:tid 1017692] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.143514 2026] [core:error] [pid 1017536:tid 1017692] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.144790 2026] [core:error] [pid 1018003:tid 1018218] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.144807 2026] [core:error] [pid 1018003:tid 1018218] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.144854 2026] [core:error] [pid 1017536:tid 1017765] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.144865 2026] [core:error] [pid 1017536:tid 1017765] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.145230 2026] [core:error] [pid 1018003:tid 1018211] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.145241 2026] [core:error] [pid 1018003:tid 1018211] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.146003 2026] [security2:error] [pid 1017536:tid 1017698] [client 68.155.159.216:16338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.showerdoorsdubuque.com"] [uri "/wp-l0gin.php"] [unique_id "apK89iJcY4fy7tP-rU3k2AAAAjQ"]
[Sat Aug 29 05:05:26.146137 2026] [core:error] [pid 1018003:tid 1018253] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.146146 2026] [core:error] [pid 1018003:tid 1018253] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.147425 2026] [core:error] [pid 1017536:tid 1017788] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.147437 2026] [core:error] [pid 1017536:tid 1017788] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.147448 2026] [core:error] [pid 1018003:tid 1018233] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.147456 2026] [core:error] [pid 1018003:tid 1018233] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.147483 2026] [core:error] [pid 1018003:tid 1018243] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.147492 2026] [core:error] [pid 1018003:tid 1018243] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.158186 2026] [core:error] [pid 1017536:tid 1017783] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.158200 2026] [core:error] [pid 1017536:tid 1017783] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.158247 2026] [core:error] [pid 1017536:tid 1017745] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.158255 2026] [core:error] [pid 1017536:tid 1017745] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.159089 2026] [security2:error] [pid 1017536:tid 1017745] [client 34.12.38.134:0] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/___proxy_subdomain_cpcontacts/index.php"] [unique_id "apK89iJcY4fy7tP-rU3k2gAAAmM"]
[Sat Aug 29 05:05:26.160100 2026] [security2:error] [pid 1018003:tid 1018225] [client 20.196.209.81:15140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/alfanew.php7"] [unique_id "apK89jAh5Y1i2tUxg4HhEwAABgI"]
[Sat Aug 29 05:05:26.160717 2026] [security2:error] [pid 1018003:tid 1018249] [client 34.12.38.134:40528] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/___proxy_subdomain_cpcontacts/config/storage.yml"] [unique_id "apK89jAh5Y1i2tUxg4Hg-AAABhk"]
[Sat Aug 29 05:05:26.165320 2026] [security2:error] [pid 1018003:tid 1018157] [client 162.198.206.205:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutihomes.com"] [uri "/boats"] [unique_id "apK89jAh5Y1i2tUxg4HhFQAABb4"], referer: http://www.baidu.com/
[Sat Aug 29 05:05:26.166164 2026] [core:error] [pid 1018003:tid 1018274] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.166177 2026] [core:error] [pid 1018003:tid 1018274] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:26.179127 2026] [security2:error] [pid 1017536:tid 1017721] [client 4.205.62.107:64266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/oc460l3x.php"] [unique_id "apK89iJcY4fy7tP-rU3k2wAAAks"]
[Sat Aug 29 05:05:26.181872 2026] [security2:error] [pid 1017536:tid 1017711] [client 20.48.251.3:27139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/fff.php"] [unique_id "apK89iJcY4fy7tP-rU3k3AAAAkE"]
[Sat Aug 29 05:05:26.185445 2026] [security2:error] [pid 1017536:tid 1017734] [client 20.63.81.20:26469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/ops.php"] [unique_id "apK89iJcY4fy7tP-rU3k3QAAAlg"]
[Sat Aug 29 05:05:26.207016 2026] [security2:error] [pid 1017536:tid 1017761] [client 74.248.24.12:25416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/wp-content/file.php"] [unique_id "apK89iJcY4fy7tP-rU3k3gAAAnM"]
[Sat Aug 29 05:05:26.209897 2026] [security2:error] [pid 1017536:tid 1017678] [client 20.63.219.114:1483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/gecko-new.php"] [unique_id "apK89iJcY4fy7tP-rU3k3wAAAiA"]
[Sat Aug 29 05:05:26.220631 2026] [security2:error] [pid 1017536:tid 1017713] [client 4.205.62.107:53377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/paths.php"] [unique_id "apK89iJcY4fy7tP-rU3k4AAAAkM"]
[Sat Aug 29 05:05:26.225071 2026] [security2:error] [pid 1017536:tid 1017703] [client 20.48.160.90:62647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/fex.php"] [unique_id "apK89iJcY4fy7tP-rU3k4QAAAjk"]
[Sat Aug 29 05:05:26.285449 2026] [security2:error] [pid 1017536:tid 1017668] [client 4.205.62.107:22508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/pinfo.php"] [unique_id "apK89iJcY4fy7tP-rU3k4gAAAhY"]
[Sat Aug 29 05:05:26.323884 2026] [security2:error] [pid 1018003:tid 1018216] [client 185.104.184.230:46054] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.erv.dib.mybluehost.me"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "apK89jAh5Y1i2tUxg4HhFwAABfk"]
[Sat Aug 29 05:05:26.328924 2026] [security2:error] [pid 1018003:tid 1018196] [client 20.48.251.3:27175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/autogooey.php"] [unique_id "apK89jAh5Y1i2tUxg4HhGAAABeU"]
[Sat Aug 29 05:05:26.349503 2026] [security2:error] [pid 1017536:tid 1017707] [client 20.63.81.20:26539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK89iJcY4fy7tP-rU3k5QAAAj0"]
[Sat Aug 29 05:05:26.358970 2026] [security2:error] [pid 1017536:tid 1017751] [client 4.232.148.111:19425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tiaandephraim.com"] [uri "/av.php"] [unique_id "apK89iJcY4fy7tP-rU3k5gAAAmk"]
[Sat Aug 29 05:05:26.359068 2026] [security2:error] [pid 1018003:tid 1018197] [client 158.23.147.79:23384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ridetimewinnipegservicetiresrims.ca"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK89jAh5Y1i2tUxg4HhGQAABeY"]
[Sat Aug 29 05:05:26.367302 2026] [security2:error] [pid 1018003:tid 1018181] [client 158.23.147.79:48128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-admin/about.php"] [unique_id "apK89jAh5Y1i2tUxg4HhGgAABdY"]
[Sat Aug 29 05:05:26.378571 2026] [security2:error] [pid 1017536:tid 1017728] [client 20.196.209.81:4536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/spip.php"] [unique_id "apK89iJcY4fy7tP-rU3k5wAAAlI"]
[Sat Aug 29 05:05:26.386439 2026] [security2:error] [pid 1017536:tid 1017741] [client 20.196.209.81:17625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-content/content.php"] [unique_id "apK89iJcY4fy7tP-rU3k6AAAAl8"]
[Sat Aug 29 05:05:26.387374 2026] [security2:error] [pid 1017536:tid 1017695] [client 20.48.160.90:64762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/l.php"] [unique_id "apK89iJcY4fy7tP-rU3k6QAAAjE"]
[Sat Aug 29 05:05:26.391515 2026] [security2:error] [pid 1017536:tid 1017548] [remote 34.138.108.56:57588] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "proppastie.com"] [uri "/wp-config.php.old"] [unique_id "apK89iJcY4fy7tP-rU3k6gACXQs"]
[Sat Aug 29 05:05:26.394042 2026] [security2:error] [pid 1017536:tid 1017664] [remote 34.138.108.56:57588] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "proppastie.com"] [uri "/wp-config.php.bak"] [unique_id "apK89iJcY4fy7tP-rU3k6wACb38"]
[Sat Aug 29 05:05:26.396164 2026] [security2:error] [pid 1017536:tid 1017583] [remote 34.138.108.56:57588] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "proppastie.com"] [uri "/@fs/.env"] [unique_id "apK89iJcY4fy7tP-rU3k7AACby4"]
[Sat Aug 29 05:05:26.396240 2026] [security2:error] [pid 1017536:tid 1017604] [remote 34.138.108.56:57588] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "proppastie.com"] [uri "/@fs/.env"] [unique_id "apK89iJcY4fy7tP-rU3k7gACb0M"]
[Sat Aug 29 05:05:26.396713 2026] [security2:error] [pid 1017536:tid 1017643] [remote 34.138.108.56:57588] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "proppastie.com"] [uri "/@fs/.env"] [unique_id "apK89iJcY4fy7tP-rU3k7wACb2o"]
[Sat Aug 29 05:05:26.413636 2026] [security2:error] [pid 1017536:tid 1017774] [client 93.123.109.228:37312] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/admin-app/.env"] [unique_id "apK89iJcY4fy7tP-rU3k8AAAAoA"]
[Sat Aug 29 05:05:26.431088 2026] [security2:error] [pid 1017536:tid 1017675] [client 158.23.147.79:58055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK89iJcY4fy7tP-rU3k8wAAAh0"]
[Sat Aug 29 05:05:26.440507 2026] [security2:error] [pid 1018003:tid 1018179] [client 68.155.159.216:51853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/lv.php"] [unique_id "apK89jAh5Y1i2tUxg4HhHgAABdQ"]
[Sat Aug 29 05:05:26.448908 2026] [security2:error] [pid 1018003:tid 1018185] [client 68.155.159.216:24530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK89jAh5Y1i2tUxg4HhHwAABdo"]
[Sat Aug 29 05:05:26.459450 2026] [security2:error] [pid 1017536:tid 1017753] [client 4.205.62.107:21920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/fleen.php"] [unique_id "apK89iJcY4fy7tP-rU3k-AAAAms"]
[Sat Aug 29 05:05:26.459474 2026] [security2:error] [pid 1017536:tid 1017785] [client 20.48.251.3:57869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/sdsa.php"] [unique_id "apK89iJcY4fy7tP-rU3k9wAAAos"]
[Sat Aug 29 05:05:26.463778 2026] [security2:error] [pid 1018003:tid 1018247] [client 168.107.94.195:62016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK89jAh5Y1i2tUxg4HhIAAABhc"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:26.464507 2026] [security2:error] [pid 1017536:tid 1017776] [client 158.158.54.35:10851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-themes.php"] [unique_id "apK89iJcY4fy7tP-rU3k-QAAAoI"]
[Sat Aug 29 05:05:26.479972 2026] [security2:error] [pid 1018003:tid 1018245] [client 20.63.81.20:26458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK89jAh5Y1i2tUxg4HhIgAABhU"]
[Sat Aug 29 05:05:26.493570 2026] [security2:error] [pid 1017536:tid 1017726] [client 20.63.219.114:16531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "compropolis.mx"] [uri "/aaa.php"] [unique_id "apK89iJcY4fy7tP-rU3k_QAAAlA"]
[Sat Aug 29 05:05:26.498494 2026] [security2:error] [pid 1018003:tid 1018187] [client 4.205.62.107:65520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK89jAh5Y1i2tUxg4HhJAAABdw"]
[Sat Aug 29 05:05:26.523350 2026] [security2:error] [pid 1018003:tid 1018180] [client 45.3.34.159:22577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 159.34.3.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK89jAh5Y1i2tUxg4HhIwAABdU"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:26.525953 2026] [security2:error] [pid 1017536:tid 1017782] [client 4.205.62.107:2634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/loxi-o.php"] [unique_id "apK89iJcY4fy7tP-rU3lAAAAAog"]
[Sat Aug 29 05:05:26.527477 2026] [security2:error] [pid 1018003:tid 1018215] [client 20.48.160.90:28624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/xr.php"] [unique_id "apK89jAh5Y1i2tUxg4HhJgAABfg"]
[Sat Aug 29 05:05:26.553300 2026] [security2:error] [pid 1017536:tid 1017793] [client 20.196.209.81:9485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/xmlrpc.php0"] [unique_id "apK89iJcY4fy7tP-rU3lAgAAApM"]
[Sat Aug 29 05:05:26.570397 2026] [security2:error] [pid 1017536:tid 1017685] [client 20.63.219.114:14550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/wp-admin.php"] [unique_id "apK89iJcY4fy7tP-rU3lAwAAAic"]
[Sat Aug 29 05:05:26.570672 2026] [security2:error] [pid 1018003:tid 1018220] [client 20.63.219.114:14577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/1p.php"] [unique_id "apK89jAh5Y1i2tUxg4HhKQAABf0"]
[Sat Aug 29 05:05:26.573491 2026] [security2:error] [pid 1018003:tid 1018260] [client 93.123.109.228:37260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/admin/phpinfo.php"] [unique_id "apK89jAh5Y1i2tUxg4HhKgAABiQ"]
[Sat Aug 29 05:05:26.594448 2026] [security2:error] [pid 1018003:tid 1018226] [client 20.48.251.3:28443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/sale.php"] [unique_id "apK89jAh5Y1i2tUxg4HhLAAABgM"]
[Sat Aug 29 05:05:26.608925 2026] [security2:error] [pid 1017536:tid 1017703] [client 20.63.81.20:26388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/f.php"] [unique_id "apK89iJcY4fy7tP-rU3lBgAAAjk"]
[Sat Aug 29 05:05:26.611125 2026] [security2:error] [pid 1017536:tid 1017619] [remote 34.138.108.56:57588] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "proppastie.com"] [uri "/core/.env"] [unique_id "apK89iJcY4fy7tP-rU3lBwACNlI"]
[Sat Aug 29 05:05:26.624119 2026] [security2:error] [pid 1017536:tid 1017714] [client 192.145.125.70:35424] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "vickiandgreg.strangeworx.com"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "apK89iJcY4fy7tP-rU3lCAAAAkQ"]
[Sat Aug 29 05:05:26.635065 2026] [security2:error] [pid 1018003:tid 1018170] [client 74.248.24.12:3407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/av.php"] [unique_id "apK89jAh5Y1i2tUxg4HhLQAABcs"]
[Sat Aug 29 05:05:26.640315 2026] [security2:error] [pid 1017536:tid 1017681] [client 185.104.184.230:46064] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.erv.dib.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "apK89iJcY4fy7tP-rU3lCgAAAiM"]
[Sat Aug 29 05:05:26.646478 2026] [security2:error] [pid 1017536:tid 1017686] [client 93.123.109.228:37264] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/administrator/.env"] [unique_id "apK89iJcY4fy7tP-rU3lDAAAAig"]
[Sat Aug 29 05:05:26.646950 2026] [security2:error] [pid 1018003:tid 1018223] [client 93.123.109.228:37250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/admin_phpinfo.php"] [unique_id "apK89jAh5Y1i2tUxg4HhLgAABgA"]
[Sat Aug 29 05:05:26.678519 2026] [security2:error] [pid 1018003:tid 1018265] [client 93.123.109.228:37254] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/api-backend/.env"] [unique_id "apK89jAh5Y1i2tUxg4HhLwAABik"]
[Sat Aug 29 05:05:26.687006 2026] [security2:error] [pid 1018003:tid 1018250] [client 93.123.109.228:37266] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/api-node/.env"] [unique_id "apK89jAh5Y1i2tUxg4HhMAAABho"]
[Sat Aug 29 05:05:26.688797 2026] [security2:error] [pid 1017536:tid 1017680] [client 158.23.147.79:25560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK89iJcY4fy7tP-rU3lDwAAAiI"]
[Sat Aug 29 05:05:26.710452 2026] [security2:error] [pid 1017536:tid 1017720] [client 93.123.109.228:37338] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/api/.env"] [unique_id "apK89iJcY4fy7tP-rU3lEQAAAko"]
[Sat Aug 29 05:05:26.716710 2026] [security2:error] [pid 1017536:tid 1017755] [client 185.104.184.230:46040] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.mcdcomputers.net"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "apK89iJcY4fy7tP-rU3lEgAAAm0"]
[Sat Aug 29 05:05:26.735794 2026] [security2:error] [pid 1017536:tid 1017778] [client 34.21.253.104:28288] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "cpanel.replenishink.com"] [uri "/@fs/.env.production"] [unique_id "apK89iJcY4fy7tP-rU3lFQAAAoQ"]
[Sat Aug 29 05:05:26.739444 2026] [security2:error] [pid 1017536:tid 1017748] [client 20.48.160.90:64673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/Q3.php"] [unique_id "apK89iJcY4fy7tP-rU3lGAAAAmY"]
[Sat Aug 29 05:05:26.742049 2026] [proxy_http:error] [pid 1018003:tid 1018195] (20014)Internal error (specific information not available): [client 34.21.253.104:28300] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:26.742064 2026] [proxy:error] [pid 1018003:tid 1018195] [client 34.21.253.104:28300] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/@fs/root/.aws/credentials
[Sat Aug 29 05:05:26.742570 2026] [proxy_http:error] [pid 1017536:tid 1017715] (20014)Internal error (specific information not available): [client 34.21.253.104:28158] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:26.742583 2026] [proxy:error] [pid 1017536:tid 1017715] [client 34.21.253.104:28158] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/@fs/root/.env
[Sat Aug 29 05:05:26.742941 2026] [security2:error] [pid 1017536:tid 1017729] [client 34.21.253.104:28182] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "cpanel.replenishink.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK89iJcY4fy7tP-rU3lGwAAAlM"]
[Sat Aug 29 05:05:26.743173 2026] [security2:error] [pid 1017536:tid 1017672] [client 34.21.253.104:28330] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "cpanel.replenishink.com"] [uri "/@fs/home/node/.aws/config"] [unique_id "apK89iJcY4fy7tP-rU3lHAAAAho"]
[Sat Aug 29 05:05:26.747221 2026] [security2:error] [pid 1018003:tid 1018212] [client 20.63.81.20:26498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.harnessrenewables.com"] [uri "/1dfcd2d08f.php"] [unique_id "apK89jAh5Y1i2tUxg4HhNQAABfU"]
[Sat Aug 29 05:05:26.747560 2026] [security2:error] [pid 1017536:tid 1017756] [client 34.21.253.104:28222] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "cpanel.replenishink.com"] [uri "/@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ"] [unique_id "apK89iJcY4fy7tP-rU3lHwAAAm4"]
[Sat Aug 29 05:05:26.748501 2026] [core:error] [pid 1018003:tid 1018255] [client 34.21.253.104:28252] AH10244: invalid URI path (/@fs/../../.env?raw??)
[Sat Aug 29 05:05:26.755804 2026] [proxy_http:error] [pid 1018003:tid 1018255] (20014)Internal error (specific information not available): [client 34.21.253.104:28252] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:26.755818 2026] [proxy:error] [pid 1018003:tid 1018255] [client 34.21.253.104:28252] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/400.shtml
[Sat Aug 29 05:05:26.760924 2026] [proxy_http:error] [pid 1018003:tid 1018164] (20014)Internal error (specific information not available): [client 34.21.253.104:28260] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:26.760935 2026] [proxy:error] [pid 1018003:tid 1018164] [client 34.21.253.104:28260] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/@fs/app/rootkey.csv
[Sat Aug 29 05:05:26.761163 2026] [security2:error] [pid 1017536:tid 1017792] [client 20.48.251.3:57916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/wp-class.php"] [unique_id "apK89iJcY4fy7tP-rU3lKgAAApI"]
[Sat Aug 29 05:05:26.765107 2026] [security2:error] [pid 1017536:tid 1017706] [client 34.21.253.104:28402] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cpanel.replenishink.com"] [uri "/@fs/var/www/.aws/credentials"] [unique_id "apK89iJcY4fy7tP-rU3lLQAAAjw"]
[Sat Aug 29 05:05:26.765950 2026] [proxy_http:error] [pid 1018003:tid 1018261] (20014)Internal error (specific information not available): [client 34.21.253.104:28360] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:26.765959 2026] [proxy:error] [pid 1018003:tid 1018261] [client 34.21.253.104:28360] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/@fs/home/ubuntu/.aws/config
[Sat Aug 29 05:05:26.770522 2026] [security2:error] [pid 1017536:tid 1017585] [remote 34.138.108.56:57588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.108.138.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "proppastie.com"] [uri "/config.php.bak"] [unique_id "apK89iJcY4fy7tP-rU3lJgACZDA"]
[Sat Aug 29 05:05:26.771170 2026] [proxy_http:error] [pid 1018003:tid 1018164] (20014)Internal error (specific information not available): [client 34.21.253.104:28260] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:26.771180 2026] [proxy:error] [pid 1018003:tid 1018164] [client 34.21.253.104:28260] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/502.shtml
[Sat Aug 29 05:05:26.771755 2026] [security2:error] [pid 1017536:tid 1017761] [client 74.248.24.12:33199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/files.php"] [unique_id "apK89iJcY4fy7tP-rU3lLgAAAnM"]
[Sat Aug 29 05:05:26.773519 2026] [security2:error] [pid 1017536:tid 1017674] [client 68.155.159.216:58272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/goat1.php"] [unique_id "apK89iJcY4fy7tP-rU3lLwAAAhw"]
[Sat Aug 29 05:05:26.773543 2026] [security2:error] [pid 1017536:tid 1017600] [remote 34.138.108.56:57588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.108.138.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "proppastie.com"] [uri "/configuration.php.bak"] [unique_id "apK89iJcY4fy7tP-rU3lMAACYT8"]
[Sat Aug 29 05:05:26.779322 2026] [security2:error] [pid 1017536:tid 1017740] [client 20.196.209.81:4694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-content/core.php"] [unique_id "apK89iJcY4fy7tP-rU3lMQAAAl4"]
[Sat Aug 29 05:05:26.781525 2026] [security2:error] [pid 1017536:tid 1017694] [client 20.196.209.81:10727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/backup.php"] [unique_id "apK89iJcY4fy7tP-rU3lMgAAAjA"]
[Sat Aug 29 05:05:26.815133 2026] [security2:error] [pid 1017536:tid 1017707] [client 68.155.159.216:12253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-content/uploads/about.php"] [unique_id "apK89iJcY4fy7tP-rU3lNAAAAj0"]
[Sat Aug 29 05:05:26.823984 2026] [security2:error] [pid 1017536:tid 1017545] [remote 34.138.108.56:57588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.108.138.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "proppastie.com"] [uri "/.env.php.bak"] [unique_id "apK89iJcY4fy7tP-rU3lNgACXwg"]
[Sat Aug 29 05:05:26.835514 2026] [security2:error] [pid 1017536:tid 1017580] [remote 34.138.108.56:57588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.108.138.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "proppastie.com"] [uri "/config/.env.php"] [unique_id "apK89iJcY4fy7tP-rU3lNwACeys"]
[Sat Aug 29 05:05:26.836037 2026] [security2:error] [pid 1017536:tid 1017631] [remote 34.138.108.56:57588] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "proppastie.com"] [uri "/laravel/.env"] [unique_id "apK89iJcY4fy7tP-rU3lOAACe14"]
[Sat Aug 29 05:05:26.843005 2026] [security2:error] [pid 1017536:tid 1017787] [client 168.107.94.195:62328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK89iJcY4fy7tP-rU3lOQAAAo0"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:26.848536 2026] [security2:error] [pid 1017536:tid 1017727] [client 4.232.148.111:24067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/tool.php"] [unique_id "apK89iJcY4fy7tP-rU3lOgAAAlE"]
[Sat Aug 29 05:05:26.857007 2026] [proxy_http:error] [pid 1017536:tid 1017745] (20014)Internal error (specific information not available): [client 34.21.253.104:28310] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:26.857018 2026] [proxy:error] [pid 1017536:tid 1017745] [client 34.21.253.104:28310] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/@fs/root/.aws/config
[Sat Aug 29 05:05:26.862677 2026] [security2:error] [pid 1017536:tid 1017779] [client 4.232.148.111:8560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tiaandephraim.com"] [uri "/file.php"] [unique_id "apK89iJcY4fy7tP-rU3lPAAAAoU"]
[Sat Aug 29 05:05:26.871309 2026] [proxy_http:error] [pid 1017536:tid 1017783] (20014)Internal error (specific information not available): [client 34.21.253.104:28240] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:26.871329 2026] [proxy:error] [pid 1017536:tid 1017783] [client 34.21.253.104:28240] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/.env
[Sat Aug 29 05:05:26.884544 2026] [proxy_http:error] [pid 1017536:tid 1017689] (20014)Internal error (specific information not available): [client 34.21.253.104:28316] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:26.884558 2026] [proxy:error] [pid 1017536:tid 1017689] [client 34.21.253.104:28316] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/@fs/root/.aws/credentials.bak
[Sat Aug 29 05:05:26.890105 2026] [proxy_http:error] [pid 1017536:tid 1017730] (20014)Internal error (specific information not available): [client 34.21.253.104:28352] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:26.890120 2026] [proxy:error] [pid 1017536:tid 1017730] [client 34.21.253.104:28352] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/@fs/home/ec2-user/.aws/credentials
[Sat Aug 29 05:05:26.890330 2026] [security2:error] [pid 1018003:tid 1018177] [client 68.155.159.216:33586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK89jAh5Y1i2tUxg4HhPgAABdI"]
[Sat Aug 29 05:05:26.892711 2026] [security2:error] [pid 1018003:tid 1018239] [client 20.48.251.3:28469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/database.php"] [unique_id "apK89jAh5Y1i2tUxg4HhPwAABg8"]
[Sat Aug 29 05:05:26.896490 2026] [proxy_http:error] [pid 1017536:tid 1017679] (20014)Internal error (specific information not available): [client 34.21.253.104:28362] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:26.896499 2026] [proxy:error] [pid 1017536:tid 1017679] [client 34.21.253.104:28362] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/@fs/home/admin/.aws/credentials
[Sat Aug 29 05:05:26.902544 2026] [proxy_http:error] [pid 1017536:tid 1017711] (20014)Internal error (specific information not available): [client 34.21.253.104:28380] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:26.902554 2026] [proxy:error] [pid 1017536:tid 1017711] [client 34.21.253.104:28380] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/@fs/home/debian/.aws/credentials
[Sat Aug 29 05:05:26.909548 2026] [security2:error] [pid 1017536:tid 1017737] [client 158.158.54.35:10829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-trackback.php"] [unique_id "apK89iJcY4fy7tP-rU3lQAAAAls"]
[Sat Aug 29 05:05:26.911953 2026] [access_compat:error] [pid 1018003:tid 1018200] [client 67.20.76.220:22258] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:05:26.916552 2026] [proxy_http:error] [pid 1017536:tid 1017754] (20014)Internal error (specific information not available): [client 34.21.253.104:28394] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:26.916567 2026] [proxy:error] [pid 1017536:tid 1017754] [client 34.21.253.104:28394] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/@fs/home/www-data/.aws/credentials
[Sat Aug 29 05:05:26.922560 2026] [security2:error] [pid 1018003:tid 1018214] [client 20.48.160.90:62609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/Q1.php"] [unique_id "apK89jAh5Y1i2tUxg4HhQQAABfc"]
[Sat Aug 29 05:05:26.927670 2026] [security2:error] [pid 1017536:tid 1017747] [client 20.63.219.114:11841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/wp-configs.php"] [unique_id "apK89iJcY4fy7tP-rU3lQwAAAmU"]
[Sat Aug 29 05:05:26.935537 2026] [security2:error] [pid 1017536:tid 1017670] [client 20.63.219.114:1443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/Njima.php"] [unique_id "apK89iJcY4fy7tP-rU3lRAAAAhg"]
[Sat Aug 29 05:05:26.948535 2026] [security2:error] [pid 1018003:tid 1018152] [client 68.155.159.216:16371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-includes/Text/about.php"] [unique_id "apK89jAh5Y1i2tUxg4HhQwAABbk"]
[Sat Aug 29 05:05:26.951272 2026] [security2:error] [pid 1018003:tid 1018234] [client 185.104.184.230:46066] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.erv.dib.mybluehost.me"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "apK89jAh5Y1i2tUxg4HhRAAABgo"]
[Sat Aug 29 05:05:26.987852 2026] [security2:error] [pid 1018003:tid 1018274] [client 93.123.109.228:37278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/api/info.php"] [unique_id "apK89jAh5Y1i2tUxg4HhSAAABjI"]
[Sat Aug 29 05:05:27.011593 2026] [security2:error] [pid 1017536:tid 1017703] [client 185.104.184.230:46074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.184.104.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "webmail.mcdcomputers.net"] [uri "/xmlrpc.php"] [unique_id "apK89yJcY4fy7tP-rU3lRwAAAjk"]
[Sat Aug 29 05:05:27.024233 2026] [security2:error] [pid 1017536:tid 1017700] [client 68.155.159.216:62870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.gavirestaurant.com"] [uri "/images/index.php"] [unique_id "apK89yJcY4fy7tP-rU3lSAAAAjY"]
[Sat Aug 29 05:05:27.035711 2026] [security2:error] [pid 1017536:tid 1017714] [client 20.48.251.3:57855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/atex1.php"] [unique_id "apK89yJcY4fy7tP-rU3lSQAAAkQ"]
[Sat Aug 29 05:05:27.048238 2026] [security2:error] [pid 1017536:tid 1017693] [client 20.104.49.130:58190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/f35.update.php"] [unique_id "apK89yJcY4fy7tP-rU3lSwAAAi8"]
[Sat Aug 29 05:05:27.073446 2026] [security2:error] [pid 1018003:tid 1018221] [client 93.123.109.228:37252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/api/phpinfo.php"] [unique_id "apK89zAh5Y1i2tUxg4HhTAAABf4"]
[Sat Aug 29 05:05:27.089382 2026] [security2:error] [pid 1018003:tid 1018172] [client 65.111.14.131:37723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 131.14.111.65.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK89zAh5Y1i2tUxg4HhSgAABc0"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:27.091347 2026] [security2:error] [pid 1017536:tid 1017771] [client 20.48.160.90:63530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/nz.php"] [unique_id "apK89yJcY4fy7tP-rU3lUAAAAn0"]
[Sat Aug 29 05:05:27.137223 2026] [security2:error] [pid 1017536:tid 1017736] [client 158.23.147.79:24495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/install.php"] [unique_id "apK89yJcY4fy7tP-rU3lUgAAAlo"]
[Sat Aug 29 05:05:27.149650 2026] [security2:error] [pid 1017536:tid 1017738] [client 74.248.24.12:21314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/file.php"] [unique_id "apK89yJcY4fy7tP-rU3lUwAAAlw"]
[Sat Aug 29 05:05:27.157233 2026] [security2:error] [pid 1017536:tid 1017757] [client 20.196.209.81:25027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/content.php"] [unique_id "apK89yJcY4fy7tP-rU3lVAAAAm8"]
[Sat Aug 29 05:05:27.171147 2026] [security2:error] [pid 1018003:tid 1018235] [client 20.196.209.81:10625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-content/db-status.php"] [unique_id "apK89zAh5Y1i2tUxg4HhTwAABgs"]
[Sat Aug 29 05:05:27.176805 2026] [security2:error] [pid 1017536:tid 1017688] [client 20.48.251.3:28476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/aws_sdk_settings.php"] [unique_id "apK89yJcY4fy7tP-rU3lVgAAAio"]
[Sat Aug 29 05:05:27.182419 2026] [security2:error] [pid 1017536:tid 1017686] [client 20.196.209.81:4535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/haiterus.php"] [unique_id "apK89yJcY4fy7tP-rU3lVwAAAig"]
[Sat Aug 29 05:05:27.187020 2026] [security2:error] [pid 1018003:tid 1018275] [client 4.205.62.107:61111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "troop264olney.net"] [uri "/file59.php"] [unique_id "apK89zAh5Y1i2tUxg4HhUAAABjM"]
[Sat Aug 29 05:05:27.192042 2026] [security2:error] [pid 1017536:tid 1017611] [remote 74.7.227.189:52570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 189.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pinnacleforms.com"] [uri "/SandBox1.php"] [unique_id "apK89yJcY4fy7tP-rU3lWAACZko"], referer: https://mail.pinnacleforms.com/
[Sat Aug 29 05:05:27.227897 2026] [security2:error] [pid 1017536:tid 1017694] [client 168.107.94.195:62774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK89yJcY4fy7tP-rU3lWQAAAjA"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:27.230054 2026] [security2:error] [pid 1018003:tid 1018257] [client 20.48.160.90:62592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/sg.php"] [unique_id "apK89zAh5Y1i2tUxg4HhUQAABiE"]
[Sat Aug 29 05:05:27.237446 2026] [security2:error] [pid 1017536:tid 1017684] [client 158.23.147.79:55883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-l0gin.php"] [unique_id "apK89yJcY4fy7tP-rU3lWwAAAiY"]
[Sat Aug 29 05:05:27.237487 2026] [security2:error] [pid 1017536:tid 1017732] [client 192.145.125.70:35426] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "vickiandgreg.strangeworx.com"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "apK89yJcY4fy7tP-rU3lWgAAAlY"]
[Sat Aug 29 05:05:27.255442 2026] [security2:error] [pid 1017536:tid 1017752] [client 185.104.184.230:46088] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.erv.dib.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "apK89yJcY4fy7tP-rU3lXgAAAmo"]
[Sat Aug 29 05:05:27.284132 2026] [security2:error] [pid 1017536:tid 1017724] [client 20.63.219.114:11849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/essexec.php"] [unique_id "apK89yJcY4fy7tP-rU3lXwAAAk4"]
[Sat Aug 29 05:05:27.288953 2026] [security2:error] [pid 1017536:tid 1017790] [client 74.248.24.12:31552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/o.php"] [unique_id "apK89yJcY4fy7tP-rU3lYAAAApA"]
[Sat Aug 29 05:05:27.293686 2026] [security2:error] [pid 1018003:tid 1018276] [client 20.104.49.130:51111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/tiny2.php"] [unique_id "apK89zAh5Y1i2tUxg4HhVQAABjQ"]
[Sat Aug 29 05:05:27.294870 2026] [security2:error] [pid 1017536:tid 1017695] [client 20.104.104.62:22671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK89yJcY4fy7tP-rU3lYQAAAjE"]
[Sat Aug 29 05:05:27.314071 2026] [security2:error] [pid 1018003:tid 1018213] [client 20.48.251.3:28466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/setup-config.php"] [unique_id "apK89zAh5Y1i2tUxg4HhVwAABfY"]
[Sat Aug 29 05:05:27.315017 2026] [security2:error] [pid 1018003:tid 1018206] [client 52.139.37.240:24891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/defaults.php"] [unique_id "apK89zAh5Y1i2tUxg4HhWAAABe8"]
[Sat Aug 29 05:05:27.315089 2026] [security2:error] [pid 1018003:tid 1018251] [client 4.205.62.107:64252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/drykl.php"] [unique_id "apK89zAh5Y1i2tUxg4HhWQAABhs"]
[Sat Aug 29 05:05:27.315692 2026] [security2:error] [pid 1017536:tid 1017674] [client 20.63.219.114:7454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/configs.php"] [unique_id "apK89yJcY4fy7tP-rU3lZQAAAhw"]
[Sat Aug 29 05:05:27.325059 2026] [security2:error] [pid 1017536:tid 1017781] [client 4.232.148.111:35077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/k.php"] [unique_id "apK89yJcY4fy7tP-rU3laAAAAoc"]
[Sat Aug 29 05:05:27.327068 2026] [security2:error] [pid 1017536:tid 1017727] [client 68.155.159.216:50242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/xmlrpc.php"] [unique_id "apK89yJcY4fy7tP-rU3laQAAAlE"]
[Sat Aug 29 05:05:27.329151 2026] [security2:error] [pid 1017536:tid 1017634] [remote 34.138.108.56:57588] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "proppastie.com"] [uri "/public/.env"] [unique_id "apK89yJcY4fy7tP-rU3lagACjWE"]
[Sat Aug 29 05:05:27.331246 2026] [security2:error] [pid 1017536:tid 1017646] [remote 34.138.108.56:57588] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "proppastie.com"] [uri "/web/.env"] [unique_id "apK89yJcY4fy7tP-rU3lawACSW0"]
[Sat Aug 29 05:05:27.366995 2026] [security2:error] [pid 1017536:tid 1017667] [client 93.123.109.228:37302] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/apis/.env"] [unique_id "apK89yJcY4fy7tP-rU3lbwAAAhU"]
[Sat Aug 29 05:05:27.385346 2026] [security2:error] [pid 1018003:tid 1018199] [client 20.48.160.90:64659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/hypo.php"] [unique_id "apK89zAh5Y1i2tUxg4HhWwAABeg"]
[Sat Aug 29 05:05:27.392269 2026] [security2:error] [pid 1017536:tid 1017786] [client 60.243.207.176:49892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK89yJcY4fy7tP-rU3lcwAAAow"]
[Sat Aug 29 05:05:27.392365 2026] [security2:error] [pid 1017536:tid 1017786] [client 60.243.207.176:49892] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK89yJcY4fy7tP-rU3lcwAAAow"]
[Sat Aug 29 05:05:27.407308 2026] [security2:error] [pid 1017536:tid 1017735] [client 213.202.253.4:56570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aantec.com"] [uri "/memberfuns.php"] [unique_id "apK89yJcY4fy7tP-rU3ldAAAAlk"], referer: www.google.com
[Sat Aug 29 05:05:27.416119 2026] [security2:error] [pid 1017536:tid 1017577] [remote 34.138.108.56:57588] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "proppastie.com"] [uri "/storage/.env"] [unique_id "apK89yJcY4fy7tP-rU3ldQACSyg"]
[Sat Aug 29 05:05:27.418457 2026] [security2:error] [pid 1017536:tid 1017570] [remote 34.138.108.56:57588] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "proppastie.com"] [uri "/.env.swp"] [unique_id "apK89yJcY4fy7tP-rU3ldgACSyE"]
[Sat Aug 29 05:05:27.425545 2026] [security2:error] [pid 1018003:tid 1018247] [client 4.205.62.107:22362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/admin-ajax.php"] [unique_id "apK89zAh5Y1i2tUxg4HhXgAABhc"]
[Sat Aug 29 05:05:27.429376 2026] [security2:error] [pid 1017536:tid 1017710] [client 197.219.150.206:56345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK89yJcY4fy7tP-rU3ldwAAAkA"]
[Sat Aug 29 05:05:27.429429 2026] [security2:error] [pid 1018003:tid 1018246] [client 20.104.104.62:41604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK89zAh5Y1i2tUxg4HhXwAABhY"]
[Sat Aug 29 05:05:27.429517 2026] [security2:error] [pid 1017536:tid 1017710] [client 197.219.150.206:56345] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK89yJcY4fy7tP-rU3ldwAAAkA"]
[Sat Aug 29 05:05:27.446958 2026] [security2:error] [pid 1018003:tid 1018194] [client 20.48.251.3:28446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/wp-admin/sc.php"] [unique_id "apK89zAh5Y1i2tUxg4HhYgAABeM"]
[Sat Aug 29 05:05:27.447104 2026] [security2:error] [pid 1017536:tid 1017785] [client 52.139.37.240:21434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK89yJcY4fy7tP-rU3leQAAAos"]
[Sat Aug 29 05:05:27.450855 2026] [security2:error] [pid 1017536:tid 1017747] [client 93.123.109.228:37352] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/app/.env"] [unique_id "apK89yJcY4fy7tP-rU3legAAAmU"]
[Sat Aug 29 05:05:27.474563 2026] [security2:error] [pid 1017536:tid 1017689] [client 158.23.147.79:23549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ridetimewinnipegservicetiresrims.ca"] [uri "/log-mama/function.php"] [unique_id "apK89yJcY4fy7tP-rU3lewAAAis"]
[Sat Aug 29 05:05:27.475555 2026] [security2:error] [pid 1017536:tid 1017730] [client 158.23.147.79:48312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-content/uploads/index.php"] [unique_id "apK89yJcY4fy7tP-rU3lfAAAAlQ"]
[Sat Aug 29 05:05:27.489369 2026] [security2:error] [pid 1017536:tid 1017754] [client 4.205.62.107:53371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/css.php"] [unique_id "apK89yJcY4fy7tP-rU3lfQAAAmw"]
[Sat Aug 29 05:05:27.507715 2026] [autoindex:error] [pid 1017536:tid 1017743] [client 91.92.47.191:48204] AH01276: Cannot serve directory /home3/xqqkkxmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://xqq.kkx.mybluehost.me
[Sat Aug 29 05:05:27.511182 2026] [security2:error] [pid 1017536:tid 1017765] [client 158.158.54.35:15906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/222.php"] [unique_id "apK89yJcY4fy7tP-rU3lfwAAAnc"]
[Sat Aug 29 05:05:27.515548 2026] [security2:error] [pid 1017536:tid 1017691] [client 52.139.37.240:24639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/domains.php"] [unique_id "apK89yJcY4fy7tP-rU3lgAAAAi0"]
[Sat Aug 29 05:05:27.523991 2026] [security2:error] [pid 1017536:tid 1017675] [client 4.232.148.111:24810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tiaandephraim.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK89yJcY4fy7tP-rU3lgQAAAh0"]
[Sat Aug 29 05:05:27.550228 2026] [security2:error] [pid 1017536:tid 1017767] [client 34.7.216.49:36876] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "webdisk.bridgewaycentretrust.org"] [uri "/.git/config"] [unique_id "apK89yJcY4fy7tP-rU3lhQAAAnk"]
[Sat Aug 29 05:05:27.553110 2026] [security2:error] [pid 1017536:tid 1017703] [client 185.104.184.230:46094] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.erv.dib.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "apK89yJcY4fy7tP-rU3lhgAAAjk"]
[Sat Aug 29 05:05:27.560658 2026] [security2:error] [pid 1017536:tid 1017714] [client 20.104.104.62:41602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/baee.php"] [unique_id "apK89yJcY4fy7tP-rU3liAAAAkQ"]
[Sat Aug 29 05:05:27.569789 2026] [security2:error] [pid 1018003:tid 1018215] [client 20.196.209.81:10659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-content/disagrsxr.php"] [unique_id "apK89zAh5Y1i2tUxg4HhaAAABfg"]
[Sat Aug 29 05:05:27.570009 2026] [security2:error] [pid 1018003:tid 1018245] [client 34.7.216.49:36920] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "webdisk.bridgewaycentretrust.org"] [uri "/.aws/credentials"] [unique_id "apK89zAh5Y1i2tUxg4HhaQAABhU"]
[Sat Aug 29 05:05:27.575926 2026] [security2:error] [pid 1017536:tid 1017702] [client 20.48.251.3:57873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/debug.php"] [unique_id "apK89yJcY4fy7tP-rU3liwAAAjg"]
[Sat Aug 29 05:05:27.592842 2026] [security2:error] [pid 1017536:tid 1017680] [client 68.155.159.216:51652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK89yJcY4fy7tP-rU3lkAAAAiI"]
[Sat Aug 29 05:05:27.599728 2026] [security2:error] [pid 1017536:tid 1017771] [client 4.205.62.107:21569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/phpinfo01.php"] [unique_id "apK89yJcY4fy7tP-rU3lkwAAAn0"]
[Sat Aug 29 05:05:27.600519 2026] [security2:error] [pid 1017536:tid 1017670] [client 20.196.209.81:4995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/wxo.php"] [unique_id "apK89yJcY4fy7tP-rU3llAAAAhg"]
[Sat Aug 29 05:05:27.608271 2026] [security2:error] [pid 1018003:tid 1018170] [client 168.107.94.195:63294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK89zAh5Y1i2tUxg4HhbAAABcs"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:27.614092 2026] [security2:error] [pid 1018003:tid 1018188] [client 20.104.18.15:8186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK89zAh5Y1i2tUxg4HhbQAABd0"]
[Sat Aug 29 05:05:27.629026 2026] [security2:error] [pid 1017536:tid 1017624] [remote 34.138.108.56:57588] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "proppastie.com"] [uri "/wp-config.php~"] [unique_id "apK89yJcY4fy7tP-rU3lmwACWlc"]
[Sat Aug 29 05:05:27.631796 2026] [security2:error] [pid 1017536:tid 1017672] [client 20.48.160.90:63571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/Hd.php"] [unique_id "apK89yJcY4fy7tP-rU3lnQAAAho"]
[Sat Aug 29 05:05:27.635676 2026] [security2:error] [pid 1017536:tid 1017593] [remote 34.138.108.56:57588] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "proppastie.com"] [uri "/wp-config.php.swp"] [unique_id "apK89yJcY4fy7tP-rU3lnwACFjg"]
[Sat Aug 29 05:05:27.636475 2026] [security2:error] [pid 1017536:tid 1017637] [remote 34.138.108.56:57588] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "proppastie.com"] [uri "/wp/.env"] [unique_id "apK89yJcY4fy7tP-rU3lngACFmQ"]
[Sat Aug 29 05:05:27.644162 2026] [security2:error] [pid 1017536:tid 1017792] [client 4.205.62.107:65420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK89yJcY4fy7tP-rU3loAAAApI"]
[Sat Aug 29 05:05:27.650493 2026] [security2:error] [pid 1017536:tid 1017713] [client 20.63.219.114:14565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/hello.php"] [unique_id "apK89yJcY4fy7tP-rU3logAAAkM"]
[Sat Aug 29 05:05:27.656795 2026] [security2:error] [pid 1017536:tid 1017711] [client 74.248.24.12:8438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK89yJcY4fy7tP-rU3lpAAAAkE"]
[Sat Aug 29 05:05:27.656967 2026] [security2:error] [pid 1017536:tid 1017628] [remote 34.138.108.56:57588] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "proppastie.com"] [uri "/wp-config.old"] [unique_id "apK89yJcY4fy7tP-rU3lowACfFs"]
[Sat Aug 29 05:05:27.664247 2026] [security2:error] [pid 1018003:tid 1018231] [client 4.205.62.107:2501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/luJMF.php"] [unique_id "apK89zAh5Y1i2tUxg4HhcAAABgc"]
[Sat Aug 29 05:05:27.670529 2026] [security2:error] [pid 1018003:tid 1018158] [client 52.139.37.240:20777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "apK89zAh5Y1i2tUxg4HhcQAABb8"]
[Sat Aug 29 05:05:27.675878 2026] [security2:error] [pid 1017536:tid 1017698] [client 20.196.209.81:10726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/go.php"] [unique_id "apK89yJcY4fy7tP-rU3lqAAAAjQ"]
[Sat Aug 29 05:05:27.685426 2026] [security2:error] [pid 1017536:tid 1017783] [client 216.26.243.167:30321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.243.26.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK89yJcY4fy7tP-rU3lpgAAAok"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:27.693944 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.104.104.62:41660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/d12.php"] [unique_id "apK89yJcY4fy7tP-rU3lqgAAAlY"]
[Sat Aug 29 05:05:27.700527 2026] [security2:error] [pid 1018003:tid 1018259] [client 185.104.184.230:46092] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.mcdcomputers.net"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "apK89zAh5Y1i2tUxg4HhcwAABiM"]
[Sat Aug 29 05:05:27.712304 2026] [security2:error] [pid 1017536:tid 1017688] [client 52.139.37.240:24656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/dropdown.php"] [unique_id "apK89yJcY4fy7tP-rU3lrAAAAio"]
[Sat Aug 29 05:05:27.714780 2026] [security2:error] [pid 1017536:tid 1017693] [client 20.63.219.114:11848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/disagraeed.php"] [unique_id "apK89yJcY4fy7tP-rU3lrQAAAi8"]
[Sat Aug 29 05:05:27.740028 2026] [security2:error] [pid 1018003:tid 1018203] [client 20.48.251.3:57852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/nzv.php"] [unique_id "apK89zAh5Y1i2tUxg4HhdAAABew"]
[Sat Aug 29 05:05:27.746339 2026] [security2:error] [pid 1018003:tid 1018164] [client 20.104.18.15:8141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK89zAh5Y1i2tUxg4HhdgAABcU"]
[Sat Aug 29 05:05:27.778835 2026] [security2:error] [pid 1017536:tid 1017666] [client 68.155.159.216:16296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.showerdoorsdubuque.com"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK89yJcY4fy7tP-rU3lswAAAhQ"]
[Sat Aug 29 05:05:27.795531 2026] [security2:error] [pid 1017536:tid 1017777] [client 74.248.24.12:33174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/file2.php"] [unique_id "apK89yJcY4fy7tP-rU3ltAAAAoM"]
[Sat Aug 29 05:05:27.808422 2026] [security2:error] [pid 1017536:tid 1017667] [client 20.48.160.90:28637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/im.php"] [unique_id "apK89yJcY4fy7tP-rU3ltgAAAhU"]
[Sat Aug 29 05:05:27.827149 2026] [security2:error] [pid 1018003:tid 1018254] [client 4.232.148.111:19627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/root.php"] [unique_id "apK89zAh5Y1i2tUxg4HheAAABh4"]
[Sat Aug 29 05:05:27.828411 2026] [security2:error] [pid 1017536:tid 1017705] [client 20.104.104.62:41633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/yyy.php"] [unique_id "apK89yJcY4fy7tP-rU3luAAAAjs"]
[Sat Aug 29 05:05:27.836207 2026] [security2:error] [pid 1017536:tid 1017780] [client 192.145.125.70:35428] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "vickiandgreg.strangeworx.com"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "apK89yJcY4fy7tP-rU3luQAAAoY"]
[Sat Aug 29 05:05:27.864723 2026] [security2:error] [pid 1018003:tid 1018191] [client 52.139.37.240:21422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK89zAh5Y1i2tUxg4HheQAABeA"]
[Sat Aug 29 05:05:27.872754 2026] [security2:error] [pid 1017536:tid 1017679] [client 20.104.49.130:57648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/txets.php"] [unique_id "apK89yJcY4fy7tP-rU3lvwAAAiE"]
[Sat Aug 29 05:05:27.873862 2026] [security2:error] [pid 1017536:tid 1017696] [client 20.48.251.3:28433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/66.php"] [unique_id "apK89yJcY4fy7tP-rU3lwAAAAjI"]
[Sat Aug 29 05:05:27.881282 2026] [security2:error] [pid 1017536:tid 1017793] [client 68.155.159.216:58256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK89yJcY4fy7tP-rU3lwQAAApM"]
[Sat Aug 29 05:05:27.913091 2026] [security2:error] [pid 1017536:tid 1017710] [client 52.139.37.240:24667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/files/index.php"] [unique_id "apK89yJcY4fy7tP-rU3lwgAAAkA"]
[Sat Aug 29 05:05:27.918317 2026] [security2:error] [pid 1017536:tid 1017722] [client 93.123.109.228:37324] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/application/.env"] [unique_id "apK89yJcY4fy7tP-rU3lwwAAAkw"]
[Sat Aug 29 05:05:27.924992 2026] [security2:error] [pid 1017536:tid 1017675] [client 93.123.109.228:37240] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/apps/.env"] [unique_id "apK89yJcY4fy7tP-rU3lxAAAAh0"]
[Sat Aug 29 05:05:27.926789 2026] [security2:error] [pid 1018003:tid 1018177] [client 20.104.18.15:8152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/ap.php"] [unique_id "apK89zAh5Y1i2tUxg4HhegAABdI"]
[Sat Aug 29 05:05:27.931596 2026] [security2:error] [pid 1018003:tid 1018214] [client 68.155.159.216:12234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-admin/maint/index.php"] [unique_id "apK89zAh5Y1i2tUxg4HhfAAABfc"]
[Sat Aug 29 05:05:27.951110 2026] [security2:error] [pid 1017536:tid 1017771] [client 20.48.250.41:26935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK89yJcY4fy7tP-rU3lyQAAAn0"]
[Sat Aug 29 05:05:27.959733 2026] [security2:error] [pid 1018003:tid 1018167] [client 20.104.104.62:22699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/bgymj.php"] [unique_id "apK89zAh5Y1i2tUxg4HhfgAABcg"]
[Sat Aug 29 05:05:27.961195 2026] [security2:error] [pid 1017536:tid 1017779] [client 158.158.54.35:18420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/x.php"] [unique_id "apK89yJcY4fy7tP-rU3lzAAAAoU"]
[Sat Aug 29 05:05:27.965346 2026] [security2:error] [pid 1017536:tid 1017731] [client 20.196.209.81:10647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-content/f35.php"] [unique_id "apK89yJcY4fy7tP-rU3lzQAAAlU"]
[Sat Aug 29 05:05:27.986847 2026] [security2:error] [pid 1017536:tid 1017736] [client 168.107.94.195:63752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK89yJcY4fy7tP-rU3l0AAAAlo"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:27.990801 2026] [security2:error] [pid 1017536:tid 1017745] [client 20.48.160.90:62653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/fc.php"] [unique_id "apK89yJcY4fy7tP-rU3l0gAAAmM"]
[Sat Aug 29 05:05:27.990833 2026] [security2:error] [pid 1017536:tid 1017668] [client 68.155.159.216:33703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK89yJcY4fy7tP-rU3l0QAAAhY"]
[Sat Aug 29 05:05:27.993857 2026] [security2:error] [pid 1017536:tid 1017757] [client 185.104.184.230:46098] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.mcdcomputers.net"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "apK89yJcY4fy7tP-rU3l0wAAAm8"]
[Sat Aug 29 05:05:28.000939 2026] [security2:error] [pid 1017536:tid 1017737] [client 4.232.148.111:32909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tiaandephraim.com"] [uri "/gmo.php"] [unique_id "apK89yJcY4fy7tP-rU3l1AAAAls"]
[Sat Aug 29 05:05:28.005845 2026] [security2:error] [pid 1017536:tid 1017754] [client 20.196.209.81:15163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/as.php"] [unique_id "apK8-CJcY4fy7tP-rU3l1QAAAmw"]
[Sat Aug 29 05:05:28.007430 2026] [security2:error] [pid 1018003:tid 1018200] [client 20.48.251.3:57865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/admin.php"] [unique_id "apK8-DAh5Y1i2tUxg4HhgAAABek"]
[Sat Aug 29 05:05:28.052680 2026] [security2:error] [pid 1018003:tid 1018274] [client 20.104.49.130:57681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/talkxkej.php"] [unique_id "apK8-DAh5Y1i2tUxg4HhggAABjI"]
[Sat Aug 29 05:05:28.065066 2026] [security2:error] [pid 1018003:tid 1018219] [client 68.155.159.216:24464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK8-DAh5Y1i2tUxg4HhgwAABfw"]
[Sat Aug 29 05:05:28.078493 2026] [security2:error] [pid 1018003:tid 1018241] [client 20.63.219.114:7428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/fi2.php"] [unique_id "apK8-DAh5Y1i2tUxg4HhhAAABhE"]
[Sat Aug 29 05:05:28.084342 2026] [security2:error] [pid 1017536:tid 1017788] [client 20.196.209.81:10737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/gecko-new.php"] [unique_id "apK8-CJcY4fy7tP-rU3l2wAAAo4"]
[Sat Aug 29 05:05:28.085239 2026] [security2:error] [pid 1017536:tid 1017746] [client 172.97.247.204:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutihomes.com"] [uri "/boats"] [unique_id "apK8-CJcY4fy7tP-rU3l2gAAAmQ"], referer: https://www.djiboutihomes.com/
[Sat Aug 29 05:05:28.105858 2026] [security2:error] [pid 1018003:tid 1018202] [client 20.104.18.15:8142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/media.php"] [unique_id "apK8-DAh5Y1i2tUxg4HhhwAABes"]
[Sat Aug 29 05:05:28.107476 2026] [security2:error] [pid 1018003:tid 1018221] [client 20.104.104.62:22678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/fh26.php"] [unique_id "apK8-DAh5Y1i2tUxg4HhiAAABf4"]
[Sat Aug 29 05:05:28.109853 2026] [security2:error] [pid 1017536:tid 1017720] [client 20.63.219.114:14568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/add_actualites.php"] [unique_id "apK8-CJcY4fy7tP-rU3l3AAAAko"]
[Sat Aug 29 05:05:28.110855 2026] [security2:error] [pid 1017536:tid 1017749] [client 52.139.37.240:25040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.worldofboardcraft.com"] [uri "/flower.php"] [unique_id "apK8-CJcY4fy7tP-rU3l3QAAAmc"]
[Sat Aug 29 05:05:28.132280 2026] [security2:error] [pid 1018003:tid 1018166] [client 68.155.159.216:62862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.gavirestaurant.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK8-DAh5Y1i2tUxg4HhiQAABcc"]
[Sat Aug 29 05:05:28.148722 2026] [security2:error] [pid 1017536:tid 1017693] [client 20.48.251.3:57803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/png.php"] [unique_id "apK8-CJcY4fy7tP-rU3l5AAAAi8"]
[Sat Aug 29 05:05:28.155418 2026] [security2:error] [pid 1017536:tid 1017724] [client 20.48.160.90:62631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/ke.php"] [unique_id "apK8-CJcY4fy7tP-rU3l5QAAAk4"]
[Sat Aug 29 05:05:28.165387 2026] [security2:error] [pid 1018003:tid 1018154] [client 52.139.37.240:21122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/wp-index.php"] [unique_id "apK8-DAh5Y1i2tUxg4HhigAABbs"]
[Sat Aug 29 05:05:28.171954 2026] [security2:error] [pid 1018003:tid 1018209] [client 74.248.24.12:21777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/gmo.php"] [unique_id "apK8-DAh5Y1i2tUxg4HhiwAABfI"]
[Sat Aug 29 05:05:28.242756 2026] [security2:error] [pid 1017536:tid 1017773] [client 20.104.104.62:45956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/fgd.php"] [unique_id "apK8-CJcY4fy7tP-rU3l7AAAAn8"]
[Sat Aug 29 05:05:28.244896 2026] [security2:error] [pid 1017536:tid 1017686] [client 104.207.37.45:31503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 45.37.207.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK8-CJcY4fy7tP-rU3l6AAAAig"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:28.246816 2026] [security2:error] [pid 1017536:tid 1017705] [client 158.23.147.79:24488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-content/x/index.php"] [unique_id "apK8-CJcY4fy7tP-rU3l7QAAAjs"]
[Sat Aug 29 05:05:28.264622 2026] [security2:error] [pid 1018003:tid 1018216] [client 20.48.250.41:27645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK8-DAh5Y1i2tUxg4HhjwAABfk"]
[Sat Aug 29 05:05:28.276310 2026] [security2:error] [pid 1017536:tid 1017726] [client 20.104.18.15:8131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/adminfuns.php"] [unique_id "apK8-CJcY4fy7tP-rU3l8gAAAlA"]
[Sat Aug 29 05:05:28.301078 2026] [security2:error] [pid 1017536:tid 1017747] [client 185.104.184.230:46100] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.mcdcomputers.net"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "apK8-CJcY4fy7tP-rU3l8wAAAmU"]
[Sat Aug 29 05:05:28.308373 2026] [security2:error] [pid 1018003:tid 1018235] [client 74.248.24.12:25452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK8-DAh5Y1i2tUxg4HhkgAABgs"]
[Sat Aug 29 05:05:28.315979 2026] [security2:error] [pid 1017536:tid 1017679] [client 20.48.251.3:57850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/chosen.php"] [unique_id "apK8-CJcY4fy7tP-rU3l9gAAAiE"]
[Sat Aug 29 05:05:28.320018 2026] [security2:error] [pid 1018003:tid 1018199] [client 20.48.160.90:63591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/tf.php"] [unique_id "apK8-DAh5Y1i2tUxg4HhkwAABeg"]
[Sat Aug 29 05:05:28.331948 2026] [security2:error] [pid 1017536:tid 1017765] [client 4.205.62.107:61190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "troop264olney.net"] [uri "/cli_bootstrap.php"] [unique_id "apK8-CJcY4fy7tP-rU3l-QAAAnc"]
[Sat Aug 29 05:05:28.335940 2026] [security2:error] [pid 1017536:tid 1017769] [client 4.232.148.111:5917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/p.php"] [unique_id "apK8-CJcY4fy7tP-rU3l-gAAAns"]
[Sat Aug 29 05:05:28.340630 2026] [security2:error] [pid 1017536:tid 1017710] [client 158.23.147.79:62722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK8-CJcY4fy7tP-rU3l_AAAAkA"]
[Sat Aug 29 05:05:28.358720 2026] [security2:error] [pid 1017536:tid 1017777] [client 20.196.209.81:10665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-content/index.php"] [unique_id "apK8-CJcY4fy7tP-rU3l_gAAAoM"]
[Sat Aug 29 05:05:28.365578 2026] [security2:error] [pid 1017536:tid 1017685] [client 168.107.94.195:64246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK8-CJcY4fy7tP-rU3l_wAAAic"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:28.381199 2026] [security2:error] [pid 1018003:tid 1018189] [client 20.104.104.62:45968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/inject.php"] [unique_id "apK8-DAh5Y1i2tUxg4HhlQAABd4"]
[Sat Aug 29 05:05:28.386790 2026] [security2:error] [pid 1017536:tid 1017793] [client 52.139.37.240:20773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/ww2.php"] [unique_id "apK8-CJcY4fy7tP-rU3mAgAAApM"]
[Sat Aug 29 05:05:28.400181 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.48.250.41:26924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/ff1.php"] [unique_id "apK8-CJcY4fy7tP-rU3mAwAAAnk"]
[Sat Aug 29 05:05:28.407327 2026] [security2:error] [pid 1017536:tid 1017780] [client 158.158.54.35:23708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/new.php"] [unique_id "apK8-CJcY4fy7tP-rU3mBAAAAoY"]
[Sat Aug 29 05:05:28.412642 2026] [security2:error] [pid 1018003:tid 1018248] [client 93.123.109.228:36612] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/back-api/.env"] [unique_id "apK8-DAh5Y1i2tUxg4HhlgAABhg"]
[Sat Aug 29 05:05:28.426110 2026] [security2:error] [pid 1018003:tid 1018252] [client 66.248.203.2:52422] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cheerfulmonk.com"] [uri "/2017/12/24/the-cultural-war/"] [unique_id "apK8-DAh5Y1i2tUxg4HhlwAABhw"]
[Sat Aug 29 05:05:28.426273 2026] [security2:error] [pid 1017536:tid 1017716] [client 192.145.125.70:35436] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "vickiandgreg.strangeworx.com"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "apK8-CJcY4fy7tP-rU3mBgAAAkY"]
[Sat Aug 29 05:05:28.439983 2026] [security2:error] [pid 1018003:tid 1018220] [client 68.155.159.216:50323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/atomlib.php"] [unique_id "apK8-DAh5Y1i2tUxg4HhmAAABf0"]
[Sat Aug 29 05:05:28.447569 2026] [security2:error] [pid 1017536:tid 1017692] [client 20.48.251.3:28457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/admin-ajax.php"] [unique_id "apK8-CJcY4fy7tP-rU3mBwAAAi4"]
[Sat Aug 29 05:05:28.451573 2026] [security2:error] [pid 1017536:tid 1017766] [client 4.205.62.107:64196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/rpk.php"] [unique_id "apK8-CJcY4fy7tP-rU3mCAAAAng"]
[Sat Aug 29 05:05:28.457295 2026] [security2:error] [pid 1018003:tid 1018169] [client 93.123.109.228:37390] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/back-end/.env"] [unique_id "apK8-DAh5Y1i2tUxg4HhmQAABco"]
[Sat Aug 29 05:05:28.457301 2026] [security2:error] [pid 1017536:tid 1017755] [client 93.123.109.228:37302] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/back/.env"] [unique_id "apK8-CJcY4fy7tP-rU3mCgAAAm0"]
[Sat Aug 29 05:05:28.458580 2026] [security2:error] [pid 1018003:tid 1018215] [client 20.48.251.3:14306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK8-DAh5Y1i2tUxg4HhmwAABfg"]
[Sat Aug 29 05:05:28.465602 2026] [security2:error] [pid 1018003:tid 1018247] [client 20.63.219.114:7479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/1p.php"] [unique_id "apK8-DAh5Y1i2tUxg4HhnAAABhc"]
[Sat Aug 29 05:05:28.467823 2026] [security2:error] [pid 1017536:tid 1017730] [client 4.232.148.111:21788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tiaandephraim.com"] [uri "/classwithtostring.php"] [unique_id "apK8-CJcY4fy7tP-rU3mCwAAAlQ"]
[Sat Aug 29 05:05:28.473451 2026] [security2:error] [pid 1018003:tid 1018226] [client 20.48.160.90:63586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/px.php"] [unique_id "apK8-DAh5Y1i2tUxg4HhnQAABgM"]
[Sat Aug 29 05:05:28.477052 2026] [security2:error] [pid 1018003:tid 1018153] [client 20.196.209.81:25085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/room.php"] [unique_id "apK8-DAh5Y1i2tUxg4HhngAABbo"]
[Sat Aug 29 05:05:28.479595 2026] [security2:error] [pid 1018003:tid 1018238] [client 171.61.160.196:4714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.160.61.171.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK8-DAh5Y1i2tUxg4HhnwAABg4"]
[Sat Aug 29 05:05:28.479663 2026] [security2:error] [pid 1018003:tid 1018238] [client 171.61.160.196:4714] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK8-DAh5Y1i2tUxg4HhnwAABg4"]
[Sat Aug 29 05:05:28.480949 2026] [security2:error] [pid 1017536:tid 1017722] [client 20.196.209.81:10735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/wp-admin.php"] [unique_id "apK8-CJcY4fy7tP-rU3mDAAAAkw"]
[Sat Aug 29 05:05:28.485467 2026] [security2:error] [pid 1018003:tid 1018187] [client 20.104.18.15:8162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/classwithtostring.php"] [unique_id "apK8-DAh5Y1i2tUxg4HhoQAABdw"]
[Sat Aug 29 05:05:28.493194 2026] [security2:error] [pid 1018003:tid 1018159] [client 20.63.219.114:1430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/alfanew.php7"] [unique_id "apK8-DAh5Y1i2tUxg4HhogAABcA"]
[Sat Aug 29 05:05:28.514321 2026] [security2:error] [pid 1017536:tid 1017745] [client 20.104.104.62:41622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/mga.php"] [unique_id "apK8-CJcY4fy7tP-rU3mEAAAAmM"]
[Sat Aug 29 05:05:28.550849 2026] [security2:error] [pid 1017536:tid 1017776] [client 93.123.109.228:37324] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK8-CJcY4fy7tP-rU3mEgAAAoI"]
[Sat Aug 29 05:05:28.555470 2026] [security2:error] [pid 1017536:tid 1017713] [client 93.123.109.228:37312] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/backend-api/.env"] [unique_id "apK8-CJcY4fy7tP-rU3mEwAAAkM"]
[Sat Aug 29 05:05:28.559935 2026] [security2:error] [pid 1017536:tid 1017770] [client 4.205.62.107:22208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/wdf.php"] [unique_id "apK8-CJcY4fy7tP-rU3mFAAAAnw"]
[Sat Aug 29 05:05:28.573841 2026] [security2:error] [pid 1017536:tid 1017746] [client 158.23.147.79:23394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ridetimewinnipegservicetiresrims.ca"] [uri "/bk/index.php"] [unique_id "apK8-CJcY4fy7tP-rU3mFgAAAmQ"]
[Sat Aug 29 05:05:28.584580 2026] [security2:error] [pid 1018003:tid 1018250] [client 20.48.251.3:28427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/ms.php"] [unique_id "apK8-DAh5Y1i2tUxg4HhpQAABho"]
[Sat Aug 29 05:05:28.585281 2026] [security2:error] [pid 1017536:tid 1017789] [client 158.23.147.79:48230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK8-CJcY4fy7tP-rU3mFwAAAo8"]
[Sat Aug 29 05:05:28.585506 2026] [security2:error] [pid 1017536:tid 1017737] [client 52.139.37.240:20799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/7logs.php"] [unique_id "apK8-CJcY4fy7tP-rU3mGAAAAls"]
[Sat Aug 29 05:05:28.590284 2026] [security2:error] [pid 1017536:tid 1017740] [client 20.48.250.41:27604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/t.php"] [unique_id "apK8-CJcY4fy7tP-rU3mGQAAAl4"]
[Sat Aug 29 05:05:28.605950 2026] [security2:error] [pid 1017536:tid 1017728] [client 185.104.184.230:55956] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.mcdcomputers.net"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "apK8-CJcY4fy7tP-rU3mHQAAAlI"]
[Sat Aug 29 05:05:28.608001 2026] [security2:error] [pid 1017536:tid 1017556] [remote 34.138.108.56:57588] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "proppastie.com"] [uri "/static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ"] [unique_id "apK8-CJcY4fy7tP-rU3mHgACLBM"]
[Sat Aug 29 05:05:28.648457 2026] [security2:error] [pid 1017536:tid 1017790] [client 20.104.104.62:41659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/inwp.php"] [unique_id "apK8-CJcY4fy7tP-rU3mIQAAApA"]
[Sat Aug 29 05:05:28.657590 2026] [security2:error] [pid 1017536:tid 1017674] [client 20.104.18.15:8142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK8-CJcY4fy7tP-rU3mIgAAAhw"]
[Sat Aug 29 05:05:28.665376 2026] [security2:error] [pid 1017536:tid 1017781] [client 20.104.49.130:57516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/k.php"] [unique_id "apK8-CJcY4fy7tP-rU3mIwAAAoc"]
[Sat Aug 29 05:05:28.668838 2026] [security2:error] [pid 1017536:tid 1017681] [client 4.205.62.107:53417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/erty.php"] [unique_id "apK8-CJcY4fy7tP-rU3mJQAAAiM"]
[Sat Aug 29 05:05:28.670116 2026] [security2:error] [pid 1017536:tid 1017742] [client 20.48.160.90:63584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/jg.php"] [unique_id "apK8-CJcY4fy7tP-rU3mJgAAAmA"]
[Sat Aug 29 05:05:28.689105 2026] [security2:error] [pid 1017536:tid 1017668] [client 74.248.24.12:28168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/classwithtostring.php"] [unique_id "apK8-CJcY4fy7tP-rU3mKAAAAhY"]
[Sat Aug 29 05:05:28.705343 2026] [security2:error] [pid 1018003:tid 1018261] [client 20.104.49.130:43008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/txets.php"] [unique_id "apK8-DAh5Y1i2tUxg4HhqgAABiU"]
[Sat Aug 29 05:05:28.714765 2026] [security2:error] [pid 1017536:tid 1017753] [client 20.48.251.3:57839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/fucku.php"] [unique_id "apK8-CJcY4fy7tP-rU3mKQAAAms"]
[Sat Aug 29 05:05:28.726990 2026] [security2:error] [pid 1017536:tid 1017773] [client 20.48.250.41:26880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/erty.php"] [unique_id "apK8-CJcY4fy7tP-rU3mKwAAAn8"]
[Sat Aug 29 05:05:28.728707 2026] [security2:error] [pid 1017536:tid 1017726] [client 68.155.159.216:51522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/content.php"] [unique_id "apK8-CJcY4fy7tP-rU3mLQAAAlA"]
[Sat Aug 29 05:05:28.750711 2026] [security2:error] [pid 1018003:tid 1018242] [client 4.205.62.107:22318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/wp-info.php"] [unique_id "apK8-DAh5Y1i2tUxg4HhqwAABhI"]
[Sat Aug 29 05:05:28.775030 2026] [security2:error] [pid 1017536:tid 1017685] [client 4.205.62.107:65486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/cloud.php"] [unique_id "apK8-CJcY4fy7tP-rU3mNQAAAic"]
[Sat Aug 29 05:05:28.775652 2026] [security2:error] [pid 1017536:tid 1017782] [client 104.207.43.100:61151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.43.207.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK8-CJcY4fy7tP-rU3mLwAAAog"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:28.782157 2026] [security2:error] [pid 1017536:tid 1017756] [client 168.107.94.195:64736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK8-CJcY4fy7tP-rU3mNgAAAm4"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:28.783308 2026] [security2:error] [pid 1017536:tid 1017793] [client 20.104.104.62:45966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/ad1.php"] [unique_id "apK8-CJcY4fy7tP-rU3mNwAAApM"]
[Sat Aug 29 05:05:28.784091 2026] [security2:error] [pid 1017536:tid 1017693] [client 20.196.209.81:8999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-content/install.php"] [unique_id "apK8-CJcY4fy7tP-rU3mOQAAAi8"]
[Sat Aug 29 05:05:28.784895 2026] [security2:error] [pid 1017536:tid 1017667] [client 52.139.37.240:20757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/ac.php"] [unique_id "apK8-CJcY4fy7tP-rU3mOAAAAhU"]
[Sat Aug 29 05:05:28.786208 2026] [security2:error] [pid 1017536:tid 1017708] [client 158.23.147.79:38770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apK8-CJcY4fy7tP-rU3mOgAAAj4"]
[Sat Aug 29 05:05:28.812116 2026] [security2:error] [pid 1017536:tid 1017700] [client 20.48.251.3:14309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK8-CJcY4fy7tP-rU3mPQAAAjY"]
[Sat Aug 29 05:05:28.821843 2026] [security2:error] [pid 1017536:tid 1017666] [client 20.63.219.114:11889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/Njima.php"] [unique_id "apK8-CJcY4fy7tP-rU3mPgAAAhQ"]
[Sat Aug 29 05:05:28.825590 2026] [security2:error] [pid 1018003:tid 1018255] [client 4.232.148.111:32376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/a1.php"] [unique_id "apK8-DAh5Y1i2tUxg4HhrQAABh8"]
[Sat Aug 29 05:05:28.828257 2026] [security2:error] [pid 1017536:tid 1017717] [client 4.205.62.107:2511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/drykl.php"] [unique_id "apK8-CJcY4fy7tP-rU3mPwAAAkc"]
[Sat Aug 29 05:05:28.833294 2026] [security2:error] [pid 1017536:tid 1017680] [client 20.48.160.90:64689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/yj.php"] [unique_id "apK8-CJcY4fy7tP-rU3mQAAAAiI"]
[Sat Aug 29 05:05:28.846547 2026] [security2:error] [pid 1018003:tid 1018160] [client 93.123.109.228:37266] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/be/.env"] [unique_id "apK8-DAh5Y1i2tUxg4HhrgAABcE"]
[Sat Aug 29 05:05:28.852443 2026] [security2:error] [pid 1018003:tid 1018254] [client 20.104.18.15:8165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/5PJcpMFsD8B.php"] [unique_id "apK8-DAh5Y1i2tUxg4HhrwAABh4"]
[Sat Aug 29 05:05:28.854530 2026] [security2:error] [pid 1018003:tid 1018203] [client 158.158.54.35:9936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/menu.php"] [unique_id "apK8-DAh5Y1i2tUxg4HhsAAABew"]
[Sat Aug 29 05:05:28.862188 2026] [security2:error] [pid 1017536:tid 1017722] [client 20.48.251.3:57828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/error_log.php"] [unique_id "apK8-CJcY4fy7tP-rU3mQQAAAkw"]
[Sat Aug 29 05:05:28.866816 2026] [security2:error] [pid 1017536:tid 1017751] [client 74.248.24.12:8168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/xda.php"] [unique_id "apK8-CJcY4fy7tP-rU3mQgAAAmk"]
[Sat Aug 29 05:05:28.881163 2026] [security2:error] [pid 1017536:tid 1017760] [client 20.63.219.114:1425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/xmlrpc.php0"] [unique_id "apK8-CJcY4fy7tP-rU3mQwAAAnI"]
[Sat Aug 29 05:05:28.888216 2026] [security2:error] [pid 1017536:tid 1017775] [client 93.123.109.228:37378] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/beta/.env"] [unique_id "apK8-CJcY4fy7tP-rU3mRQAAAoE"]
[Sat Aug 29 05:05:28.909273 2026] [security2:error] [pid 1018003:tid 1018218] [client 20.196.209.81:15770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/class-wp-cmd.php"] [unique_id "apK8-DAh5Y1i2tUxg4HhsgAABfs"]
[Sat Aug 29 05:05:28.919832 2026] [security2:error] [pid 1017536:tid 1017670] [client 185.104.184.230:55964] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.mcdcomputers.net"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "apK8-CJcY4fy7tP-rU3mRwAAAhg"]
[Sat Aug 29 05:05:28.920588 2026] [security2:error] [pid 1017536:tid 1017743] [client 20.196.209.81:12731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/wp-configs.php"] [unique_id "apK8-CJcY4fy7tP-rU3mSAAAAmE"]
[Sat Aug 29 05:05:28.925572 2026] [security2:error] [pid 1017536:tid 1017670] [client 20.104.104.62:45964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/1vbqo.php"] [unique_id "apK8-CJcY4fy7tP-rU3mSQAAAhg"]
[Sat Aug 29 05:05:28.936914 2026] [security2:error] [pid 1018003:tid 1018265] [client 93.123.109.228:37254] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/backup/.env"] [unique_id "apK8-DAh5Y1i2tUxg4HhswAABik"]
[Sat Aug 29 05:05:28.944297 2026] [security2:error] [pid 1017536:tid 1017710] [client 4.232.148.111:19452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tiaandephraim.com"] [uri "/404.php"] [unique_id "apK8-CJcY4fy7tP-rU3mSgAAAkA"]
[Sat Aug 29 05:05:28.947115 2026] [security2:error] [pid 1017536:tid 1017714] [client 103.240.76.112:49643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK8-CJcY4fy7tP-rU3mTQAAAkQ"]
[Sat Aug 29 05:05:28.947221 2026] [security2:error] [pid 1017536:tid 1017714] [client 103.240.76.112:49643] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK8-CJcY4fy7tP-rU3mTQAAAkQ"]
[Sat Aug 29 05:05:28.954715 2026] [security2:error] [pid 1017536:tid 1017770] [client 20.48.251.3:14291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/cloud.php"] [unique_id "apK8-CJcY4fy7tP-rU3mTgAAAnw"]
[Sat Aug 29 05:05:28.962770 2026] [security2:error] [pid 1017536:tid 1017778] [client 20.48.250.41:27619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/0x.php"] [unique_id "apK8-CJcY4fy7tP-rU3mTwAAAoQ"]
[Sat Aug 29 05:05:28.972774 2026] [security2:error] [pid 1017536:tid 1017704] [client 68.155.159.216:16313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.showerdoorsdubuque.com"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK8-CJcY4fy7tP-rU3mUAAAAjo"]
[Sat Aug 29 05:05:28.984662 2026] [security2:error] [pid 1017536:tid 1017673] [client 68.155.159.216:57377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/wp-admin/network/index.php"] [unique_id "apK8-CJcY4fy7tP-rU3mUwAAAhs"]
[Sat Aug 29 05:05:28.989843 2026] [security2:error] [pid 1017536:tid 1017702] [client 52.139.37.240:21145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/ctex1.php"] [unique_id "apK8-CJcY4fy7tP-rU3mVAAAAjg"]
[Sat Aug 29 05:05:28.994382 2026] [security2:error] [pid 1017536:tid 1017787] [client 20.48.251.3:57864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/phina.php"] [unique_id "apK8-CJcY4fy7tP-rU3mVQAAAo0"]
[Sat Aug 29 05:05:29.002454 2026] [security2:error] [pid 1017536:tid 1017728] [client 20.104.18.15:8144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK8-SJcY4fy7tP-rU3mVwAAAlI"]
[Sat Aug 29 05:05:29.019101 2026] [security2:error] [pid 1017536:tid 1017705] [client 192.145.125.70:35448] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "vickiandgreg.strangeworx.com"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "apK8-SJcY4fy7tP-rU3mWgAAAjs"]
[Sat Aug 29 05:05:29.033623 2026] [security2:error] [pid 1017536:tid 1017774] [client 68.155.159.216:12106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/dropdown.php"] [unique_id "apK8-SJcY4fy7tP-rU3mXAAAAoA"]
[Sat Aug 29 05:05:29.054275 2026] [security2:error] [pid 1017536:tid 1017668] [client 20.104.104.62:22668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/h02ugyh.php"] [unique_id "apK8-SJcY4fy7tP-rU3mXgAAAhY"]
[Sat Aug 29 05:05:29.077519 2026] [security2:error] [pid 1018003:tid 1018167] [client 20.48.160.90:28615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/zi.php"] [unique_id "apK8-TAh5Y1i2tUxg4HhtAAABcg"]
[Sat Aug 29 05:05:29.094846 2026] [security2:error] [pid 1018003:tid 1018152] [client 93.123.109.228:37266] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/cms/.env"] [unique_id "apK8-TAh5Y1i2tUxg4HhtgAABbk"]
[Sat Aug 29 05:05:29.096626 2026] [security2:error] [pid 1017536:tid 1017750] [client 20.48.250.41:26903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/66.php"] [unique_id "apK8-SJcY4fy7tP-rU3mXwAAAmg"]
[Sat Aug 29 05:05:29.100060 2026] [security2:error] [pid 1018003:tid 1018234] [client 68.155.159.216:16087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/asd.php"] [unique_id "apK8-TAh5Y1i2tUxg4HhtwAABgo"]
[Sat Aug 29 05:05:29.125097 2026] [security2:error] [pid 1018003:tid 1018225] [client 20.48.251.3:57908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/koiy.php"] [unique_id "apK8-TAh5Y1i2tUxg4HhuQAABgI"]
[Sat Aug 29 05:05:29.141137 2026] [security2:error] [pid 1018003:tid 1018157] [client 20.104.18.15:8188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/wsd.php"] [unique_id "apK8-TAh5Y1i2tUxg4HhugAABb4"]
[Sat Aug 29 05:05:29.153365 2026] [security2:error] [pid 1017536:tid 1017652] [remote 34.138.108.56:53920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "proppastie.com"] [uri "/web.config"] [unique_id "apK8-SJcY4fy7tP-rU3mZAACJ3M"]
[Sat Aug 29 05:05:29.158946 2026] [security2:error] [pid 1017536:tid 1017782] [client 68.155.159.216:33675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/chosen.php"] [unique_id "apK8-SJcY4fy7tP-rU3maAAAAog"]
[Sat Aug 29 05:05:29.162039 2026] [security2:error] [pid 1017536:tid 1017669] [client 168.107.94.195:65166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK8-SJcY4fy7tP-rU3maQAAAhc"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:29.170291 2026] [security2:error] [pid 1018003:tid 1018249] [client 20.48.251.3:14308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/kerang.php"] [unique_id "apK8-TAh5Y1i2tUxg4HhuwAABhk"]
[Sat Aug 29 05:05:29.182285 2026] [security2:error] [pid 1018003:tid 1018186] [client 68.155.159.216:24449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/file.php"] [unique_id "apK8-TAh5Y1i2tUxg4HhvAAABds"]
[Sat Aug 29 05:05:29.182589 2026] [security2:error] [pid 1018003:tid 1018178] [client 52.139.37.240:21436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/defaults.php"] [unique_id "apK8-TAh5Y1i2tUxg4HhvQAABdM"]
[Sat Aug 29 05:05:29.188649 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.104.104.62:41625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/shelp.php"] [unique_id "apK8-SJcY4fy7tP-rU3mawAAAnk"]
[Sat Aug 29 05:05:29.190288 2026] [cgid:error] [pid 1018003:tid 1018273] [client 20.196.209.81:8966] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/carolinashooter/404.shtml
[Sat Aug 29 05:05:29.211466 2026] [security2:error] [pid 1017536:tid 1017724] [client 74.248.24.12:28824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/404.php"] [unique_id "apK8-SJcY4fy7tP-rU3mbAAAAk4"]
[Sat Aug 29 05:05:29.220977 2026] [security2:error] [pid 1018003:tid 1018221] [client 185.104.184.230:55976] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.mcdcomputers.net"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "apK8-TAh5Y1i2tUxg4HhvwAABf4"]
[Sat Aug 29 05:05:29.222648 2026] [security2:error] [pid 1017536:tid 1017726] [client 20.63.219.114:11844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/configs.php"] [unique_id "apK8-SJcY4fy7tP-rU3mbgAAAlA"]
[Sat Aug 29 05:05:29.224930 2026] [security2:error] [pid 1018003:tid 1018172] [client 20.48.160.90:28665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/ue.php"] [unique_id "apK8-TAh5Y1i2tUxg4HhwQAABc0"]
[Sat Aug 29 05:05:29.229389 2026] [security2:error] [pid 1017536:tid 1017716] [client 93.123.109.228:37352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/config.php"] [unique_id "apK8-SJcY4fy7tP-rU3mbwAAAkY"]
[Sat Aug 29 05:05:29.246896 2026] [security2:error] [pid 1018003:tid 1018154] [client 68.155.159.216:62864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.gavirestaurant.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK8-TAh5Y1i2tUxg4HhwgAABbs"]
[Sat Aug 29 05:05:29.253567 2026] [security2:error] [pid 1017536:tid 1017700] [client 93.123.109.228:36610] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/client/.env"] [unique_id "apK8-SJcY4fy7tP-rU3mcQAAAjY"]
[Sat Aug 29 05:05:29.256026 2026] [security2:error] [pid 1018003:tid 1018258] [client 20.48.251.3:57884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/queue.php"] [unique_id "apK8-TAh5Y1i2tUxg4HhwwAABiI"]
[Sat Aug 29 05:05:29.268661 2026] [security2:error] [pid 1018003:tid 1018266] [client 20.63.219.114:14536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/content.php"] [unique_id "apK8-TAh5Y1i2tUxg4HhxAAABio"]
[Sat Aug 29 05:05:29.269260 2026] [security2:error] [pid 1018003:tid 1018277] [client 20.104.18.15:8081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/bulet.php"] [unique_id "apK8-TAh5Y1i2tUxg4HhxQAABjU"]
[Sat Aug 29 05:05:29.292215 2026] [security2:error] [pid 1018003:tid 1018241] [client 158.158.54.35:26001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK8-TAh5Y1i2tUxg4HhxgAABhE"]
[Sat Aug 29 05:05:29.312302 2026] [security2:error] [pid 1017536:tid 1017671] [client 195.178.110.247:50342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.landonrian.com"] [uri "/index.php"] [unique_id "apK8-SJcY4fy7tP-rU3meAAAAhk"]
[Sat Aug 29 05:05:29.315643 2026] [security2:error] [pid 1017536:tid 1017675] [client 209.50.174.88:60835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.174.50.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK8-SJcY4fy7tP-rU3mdQAAAh0"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:29.317896 2026] [security2:error] [pid 1017536:tid 1017756] [client 4.232.148.111:24945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK8-SJcY4fy7tP-rU3meQAAAm4"]
[Sat Aug 29 05:05:29.322191 2026] [security2:error] [pid 1017536:tid 1017680] [client 20.104.104.62:22662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/13ede.php"] [unique_id "apK8-SJcY4fy7tP-rU3megAAAiI"]
[Sat Aug 29 05:05:29.322191 2026] [security2:error] [pid 1018003:tid 1018251] [client 20.196.209.81:8966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK8-TAh5Y1i2tUxg4HhyAAABhs"]
[Sat Aug 29 05:05:29.338234 2026] [security2:error] [pid 1017536:tid 1017708] [client 20.196.209.81:25048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/disagreed.php"] [unique_id "apK8-SJcY4fy7tP-rU3mewAAAj4"]
[Sat Aug 29 05:05:29.357702 2026] [security2:error] [pid 1018003:tid 1018181] [client 20.48.160.90:63502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/nv.php"] [unique_id "apK8-TAh5Y1i2tUxg4HhygAABdY"]
[Sat Aug 29 05:05:29.366917 2026] [security2:error] [pid 1017536:tid 1017691] [client 93.123.109.228:37366] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/config/.env"] [unique_id "apK8-SJcY4fy7tP-rU3mfQAAAi0"]
[Sat Aug 29 05:05:29.367455 2026] [security2:error] [pid 1018003:tid 1018235] [client 20.48.251.3:13954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/rem.php"] [unique_id "apK8-TAh5Y1i2tUxg4HhzAAABgs"]
[Sat Aug 29 05:05:29.369242 2026] [security2:error] [pid 1018003:tid 1018166] [client 20.196.209.81:12680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/essexec.php"] [unique_id "apK8-TAh5Y1i2tUxg4HhzQAABcc"]
[Sat Aug 29 05:05:29.372159 2026] [autoindex:error] [pid 1018003:tid 1018202] [client 45.148.10.62:38648] AH01276: Cannot serve directory /home3/vvrewumy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:05:29.407339 2026] [security2:error] [pid 1018003:tid 1018197] [client 52.139.37.240:20779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/domains.php"] [unique_id "apK8-TAh5Y1i2tUxg4Hh0AAABeY"]
[Sat Aug 29 05:05:29.424946 2026] [security2:error] [pid 1018003:tid 1018209] [client 4.232.148.111:32704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tiaandephraim.com"] [uri "/php.php"] [unique_id "apK8-TAh5Y1i2tUxg4Hh0wAABfI"]
[Sat Aug 29 05:05:29.437374 2026] [security2:error] [pid 1017536:tid 1017703] [client 74.248.24.12:31561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/theme.php"] [unique_id "apK8-SJcY4fy7tP-rU3mhAAAAjk"]
[Sat Aug 29 05:05:29.441886 2026] [security2:error] [pid 1017536:tid 1017738] [client 20.104.18.15:8135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/av.php"] [unique_id "apK8-SJcY4fy7tP-rU3mhQAAAlw"]
[Sat Aug 29 05:05:29.459853 2026] [security2:error] [pid 1018003:tid 1018260] [client 20.104.104.62:45988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/k8.php"] [unique_id "apK8-TAh5Y1i2tUxg4Hh1AAABiQ"]
[Sat Aug 29 05:05:29.465213 2026] [security2:error] [pid 1018003:tid 1018150] [client 93.123.109.228:37254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/config/aws.php"] [unique_id "apK8-TAh5Y1i2tUxg4Hh1QAABbc"]
[Sat Aug 29 05:05:29.473026 2026] [security2:error] [pid 1017536:tid 1017710] [client 20.48.251.3:28444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/doc.php"] [unique_id "apK8-SJcY4fy7tP-rU3migAAAkA"]
[Sat Aug 29 05:05:29.474519 2026] [security2:error] [pid 1017536:tid 1017771] [client 195.178.110.247:11606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.landonrian.com"] [uri "/index.php"] [unique_id "apK8-SJcY4fy7tP-rU3mjAAAAn0"]
[Sat Aug 29 05:05:29.496604 2026] [security2:error] [pid 1017536:tid 1017704] [client 20.48.160.90:63549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/jw.php"] [unique_id "apK8-SJcY4fy7tP-rU3mkAAAAjo"]
[Sat Aug 29 05:05:29.511722 2026] [security2:error] [pid 1018003:tid 1018246] [client 4.205.62.107:57850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "troop264olney.net"] [uri "/dd.php"] [unique_id "apK8-TAh5Y1i2tUxg4Hh2AAABhY"]
[Sat Aug 29 05:05:29.513037 2026] [security2:error] [pid 1018003:tid 1018247] [client 185.104.184.230:55978] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.mcdcomputers.net"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "apK8-TAh5Y1i2tUxg4Hh2QAABhc"]
[Sat Aug 29 05:05:29.517072 2026] [security2:error] [pid 1018003:tid 1018245] [client 20.104.104.62:15320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.vistacounselingcolorado.com"] [uri "/mh.php"] [unique_id "apK8-TAh5Y1i2tUxg4Hh2gAABhU"]
[Sat Aug 29 05:05:29.523032 2026] [security2:error] [pid 1018003:tid 1018179] [client 45.148.10.62:38648] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.vvr.ewu.mybluehost.me"] [uri "/.env"] [unique_id "apK8-TAh5Y1i2tUxg4Hh2wAABdQ"]
[Sat Aug 29 05:05:29.542101 2026] [security2:error] [pid 1018003:tid 1018271] [client 168.107.94.195:65527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK8-TAh5Y1i2tUxg4Hh3AAABi8"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:29.554690 2026] [security2:error] [pid 1018003:tid 1018153] [client 68.155.159.216:50260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/lv.php"] [unique_id "apK8-TAh5Y1i2tUxg4Hh3QAABbo"]
[Sat Aug 29 05:05:29.554690 2026] [security2:error] [pid 1017536:tid 1017740] [client 93.123.109.228:37312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/config/config.inc.php"] [unique_id "apK8-SJcY4fy7tP-rU3mkgAAAl4"]
[Sat Aug 29 05:05:29.563506 2026] [security2:error] [pid 1017536:tid 1017787] [client 20.104.104.62:13701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahrice-co-uk.glowt-shirt.com"] [uri "/f2r4.php"] [unique_id "apK8-SJcY4fy7tP-rU3mkwAAAo0"]
[Sat Aug 29 05:05:29.566734 2026] [security2:error] [pid 1018003:tid 1018238] [client 35.198.240.194:51974] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/@fs/root/.ssh/id_rsa"] [unique_id "apK8-TAh5Y1i2tUxg4Hh3gAABg4"]
[Sat Aug 29 05:05:29.567789 2026] [security2:error] [pid 1017536:tid 1017746] [client 20.104.104.62:10453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/155.php"] [unique_id "apK8-SJcY4fy7tP-rU3mlAAAAmQ"]
[Sat Aug 29 05:05:29.567867 2026] [security2:error] [pid 1017536:tid 1017728] [client 35.198.240.194:51988] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "mail.omni-staffing.com"] [uri "/@fs/var/www/html/wp-config.php"] [unique_id "apK8-SJcY4fy7tP-rU3mlQAAAlI"]
[Sat Aug 29 05:05:29.567972 2026] [security2:error] [pid 1017536:tid 1017728] [client 35.198.240.194:51988] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "mail.omni-staffing.com"] [uri "/@fs/var/www/html/wp-config.php"] [unique_id "apK8-SJcY4fy7tP-rU3mlQAAAlI"]
[Sat Aug 29 05:05:29.569558 2026] [security2:error] [pid 1018003:tid 1018188] [client 35.198.240.194:51982] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.omni-staffing.com"] [uri "/cgi-sys/404.html"] [unique_id "apK8-TAh5Y1i2tUxg4Hh3wAABd0"]
[Sat Aug 29 05:05:29.570667 2026] [security2:error] [pid 1017536:tid 1017707] [client 35.198.240.194:52006] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "mail.omni-staffing.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2fproc/self/environ"] [unique_id "apK8-SJcY4fy7tP-rU3mmAAAAj0"]
[Sat Aug 29 05:05:29.572226 2026] [security2:error] [pid 1017536:tid 1017705] [client 35.198.240.194:52028] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.omni-staffing.com"] [uri "/@fs/../../../../../app/.env"] [unique_id "apK8-SJcY4fy7tP-rU3mmgAAAjs"]
[Sat Aug 29 05:05:29.573841 2026] [core:error] [pid 1018003:tid 1018180] [client 35.198.240.194:52048] AH10244: invalid URI path (/@fs/../../../../../root/.env?raw??)
[Sat Aug 29 05:05:29.574175 2026] [security2:error] [pid 1018003:tid 1018231] [client 35.198.240.194:52098] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.omni-staffing.com"] [uri "/@fs/home/ubuntu/.azure/credentials"] [unique_id "apK8-TAh5Y1i2tUxg4Hh5QAABgc"]
[Sat Aug 29 05:05:29.576269 2026] [security2:error] [pid 1017536:tid 1017695] [client 35.198.240.194:52034] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "mail.omni-staffing.com"] [uri "/@fs/../../../../../proc/self/environ"] [unique_id "apK8-SJcY4fy7tP-rU3mngAAAjE"]
[Sat Aug 29 05:05:29.581543 2026] [security2:error] [pid 1017536:tid 1017757] [client 20.63.219.114:1190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/disagraeed.php"] [unique_id "apK8-SJcY4fy7tP-rU3mpAAAAm8"]
[Sat Aug 29 05:05:29.582190 2026] [security2:error] [pid 1018003:tid 1018259] [client 4.205.62.107:55371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/saml.php"] [unique_id "apK8-TAh5Y1i2tUxg4Hh6wAABiM"]
[Sat Aug 29 05:05:29.586216 2026] [security2:error] [pid 1017536:tid 1017774] [client 20.104.18.15:8083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/images.php"] [unique_id "apK8-SJcY4fy7tP-rU3mqwAAAoA"]
[Sat Aug 29 05:05:29.587537 2026] [security2:error] [pid 1017536:tid 1017781] [client 35.198.240.194:52180] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.omni-staffing.com"] [uri "/cgi-sys/404.html"] [unique_id "apK8-SJcY4fy7tP-rU3mpQAAAoc"]
[Sat Aug 29 05:05:29.593054 2026] [security2:error] [pid 1017536:tid 1017721] [client 93.123.109.228:37324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/config/config.php"] [unique_id "apK8-SJcY4fy7tP-rU3mrQAAAks"]
[Sat Aug 29 05:05:29.603564 2026] [security2:error] [pid 1018003:tid 1018185] [client 52.139.37.240:21153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/dropdown.php"] [unique_id "apK8-TAh5Y1i2tUxg4Hh7QAABdo"]
[Sat Aug 29 05:05:29.608545 2026] [security2:error] [pid 1018003:tid 1018164] [client 20.104.104.62:45991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/alog.php"] [unique_id "apK8-TAh5Y1i2tUxg4Hh7gAABcU"]
[Sat Aug 29 05:05:29.613450 2026] [security2:error] [pid 1018003:tid 1018222] [client 20.48.251.3:28429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/css.php"] [unique_id "apK8-TAh5Y1i2tUxg4Hh7wAABf8"]
[Sat Aug 29 05:05:29.615904 2026] [security2:error] [pid 1017536:tid 1017766] [client 192.145.125.70:35458] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "vickiandgreg.strangeworx.com"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "apK8-SJcY4fy7tP-rU3msQAAAng"]
[Sat Aug 29 05:05:29.617600 2026] [security2:error] [pid 1018003:tid 1018242] [client 20.48.251.3:14296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/min.php"] [unique_id "apK8-TAh5Y1i2tUxg4Hh8AAABhI"]
[Sat Aug 29 05:05:29.629784 2026] [security2:error] [pid 1017536:tid 1017789] [client 20.63.219.114:1535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/wxo.php"] [unique_id "apK8-SJcY4fy7tP-rU3msgAAAo8"]
[Sat Aug 29 05:05:29.634583 2026] [security2:error] [pid 1017536:tid 1017685] [client 20.104.49.130:42233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/zoo2.php"] [unique_id "apK8-SJcY4fy7tP-rU3mswAAAic"]
[Sat Aug 29 05:05:29.648605 2026] [security2:error] [pid 1017536:tid 1017744] [client 20.48.160.90:62622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/or.php"] [unique_id "apK8-SJcY4fy7tP-rU3mtAAAAmI"]
[Sat Aug 29 05:05:29.663165 2026] [security2:error] [pid 1017536:tid 1017769] [client 158.23.147.79:30657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK8-SJcY4fy7tP-rU3mtQAAAns"]
[Sat Aug 29 05:05:29.666037 2026] [security2:error] [pid 1017536:tid 1017726] [client 20.104.104.62:14366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.vistacounselingcolorado.com"] [uri "/f2r4.php"] [unique_id "apK8-SJcY4fy7tP-rU3mtgAAAlA"]
[Sat Aug 29 05:05:29.675157 2026] [security2:error] [pid 1018003:tid 1018173] [client 45.148.10.62:38648] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.vvr.ewu.mybluehost.me"] [uri "/.env"] [unique_id "apK8-TAh5Y1i2tUxg4Hh8gAABc4"]
[Sat Aug 29 05:05:29.693226 2026] [security2:error] [pid 1018003:tid 1018191] [client 93.123.109.228:36624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/config/env.php"] [unique_id "apK8-TAh5Y1i2tUxg4Hh8wAABeA"]
[Sat Aug 29 05:05:29.698607 2026] [security2:error] [pid 1017536:tid 1017780] [client 20.104.104.62:44601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/mcd.php"] [unique_id "apK8-SJcY4fy7tP-rU3mtwAAAoY"]
[Sat Aug 29 05:05:29.700283 2026] [security2:error] [pid 1017536:tid 1017723] [client 68.155.159.216:51524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/dropdown.php"] [unique_id "apK8-SJcY4fy7tP-rU3muAAAAk0"]
[Sat Aug 29 05:05:29.706074 2026] [security2:error] [pid 1017536:tid 1017747] [client 20.104.104.62:13728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahrice-co-uk.glowt-shirt.com"] [uri "/sadis.php"] [unique_id "apK8-SJcY4fy7tP-rU3mugAAAmU"]
[Sat Aug 29 05:05:29.706706 2026] [security2:error] [pid 1018003:tid 1018263] [client 4.205.62.107:22214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/snq.php"] [unique_id "apK8-TAh5Y1i2tUxg4Hh9AAABic"]
[Sat Aug 29 05:05:29.718319 2026] [security2:error] [pid 1017536:tid 1017755] [client 93.123.109.228:37240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/config/nexmo.php"] [unique_id "apK8-SJcY4fy7tP-rU3muwAAAm0"]
[Sat Aug 29 05:05:29.721473 2026] [security2:error] [pid 1018003:tid 1018239] [client 20.104.49.130:52320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/term.php"] [unique_id "apK8-TAh5Y1i2tUxg4Hh9gAABg8"]
[Sat Aug 29 05:05:29.722078 2026] [security2:error] [pid 1017536:tid 1017750] [client 20.196.209.81:9010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-content/languages/chosen.php"] [unique_id "apK8-SJcY4fy7tP-rU3mvAAAAmg"]
[Sat Aug 29 05:05:29.722931 2026] [security2:error] [pid 1017536:tid 1017712] [client 93.123.109.228:36616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/config/module.config.php"] [unique_id "apK8-SJcY4fy7tP-rU3mvQAAAkI"]
[Sat Aug 29 05:05:29.734506 2026] [security2:error] [pid 1017536:tid 1017702] [client 74.248.24.12:21811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/php.php"] [unique_id "apK8-SJcY4fy7tP-rU3mvgAAAjg"]
[Sat Aug 29 05:05:29.737721 2026] [security2:error] [pid 1018003:tid 1018167] [client 158.23.147.79:23267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ridetimewinnipegservicetiresrims.ca"] [uri "/first.php"] [unique_id "apK8-TAh5Y1i2tUxg4Hh9wAABcg"]
[Sat Aug 29 05:05:29.739510 2026] [security2:error] [pid 1018003:tid 1018152] [client 158.23.147.79:48266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/chosen.php"] [unique_id "apK8-TAh5Y1i2tUxg4Hh-AAABbk"]
[Sat Aug 29 05:05:29.740822 2026] [security2:error] [pid 1018003:tid 1018234] [client 20.104.18.15:8147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/ops.php"] [unique_id "apK8-TAh5Y1i2tUxg4Hh-QAABgo"]
[Sat Aug 29 05:05:29.742283 2026] [security2:error] [pid 1018003:tid 1018244] [client 20.104.104.62:20832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/arab.php"] [unique_id "apK8-TAh5Y1i2tUxg4Hh-gAABhQ"]
[Sat Aug 29 05:05:29.759732 2026] [security2:error] [pid 1018003:tid 1018278] [client 20.196.209.81:15805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/class_api.php"] [unique_id "apK8-TAh5Y1i2tUxg4Hh-wAABjY"]
[Sat Aug 29 05:05:29.761123 2026] [security2:error] [pid 1018003:tid 1018219] [client 20.104.104.62:41621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/adin.php"] [unique_id "apK8-TAh5Y1i2tUxg4Hh_QAABfw"]
[Sat Aug 29 05:05:29.765214 2026] [security2:error] [pid 1018003:tid 1018157] [client 20.48.251.3:27142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/php_info.php"] [unique_id "apK8-TAh5Y1i2tUxg4Hh_gAABb4"]
[Sat Aug 29 05:05:29.778501 2026] [security2:error] [pid 1017536:tid 1017703] [client 20.48.160.90:28584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/ile56.php"] [unique_id "apK8-SJcY4fy7tP-rU3mwQAAAjk"]
[Sat Aug 29 05:05:29.779031 2026] [security2:error] [pid 1017536:tid 1017693] [client 20.196.209.81:4503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/hello.php"] [unique_id "apK8-SJcY4fy7tP-rU3mwgAAAi8"]
[Sat Aug 29 05:05:29.794767 2026] [security2:error] [pid 1018003:tid 1018211] [client 4.232.148.111:35107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/alfa-rex.php7"] [unique_id "apK8-TAh5Y1i2tUxg4Hh_wAABfQ"]
[Sat Aug 29 05:05:29.807193 2026] [security2:error] [pid 1017536:tid 1017745] [client 158.23.147.79:25597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK8-SJcY4fy7tP-rU3mxAAAAmM"]
[Sat Aug 29 05:05:29.807698 2026] [security2:error] [pid 1017536:tid 1017743] [client 20.104.104.62:14389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.vistacounselingcolorado.com"] [uri "/sadis.php"] [unique_id "apK8-SJcY4fy7tP-rU3mxQAAAmE"]
[Sat Aug 29 05:05:29.809968 2026] [security2:error] [pid 1017536:tid 1017670] [client 185.104.184.230:55988] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.mcdcomputers.net"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "apK8-SJcY4fy7tP-rU3mxwAAAhg"]
[Sat Aug 29 05:05:29.813943 2026] [security2:error] [pid 1017536:tid 1017714] [client 20.48.251.3:13970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/saiga.php"] [unique_id "apK8-SJcY4fy7tP-rU3myQAAAkQ"]
[Sat Aug 29 05:05:29.816527 2026] [security2:error] [pid 1018003:tid 1018182] [client 107.150.120.129:45044] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "www.development.dubeyko.com"] [uri "/"] [unique_id "apK8-TAh5Y1i2tUxg4HiAAAABdc"]
[Sat Aug 29 05:05:29.817735 2026] [security2:error] [pid 1018003:tid 1018268] [client 4.205.62.107:53364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/ws62.php"] [unique_id "apK8-TAh5Y1i2tUxg4HiAQAABiw"]
[Sat Aug 29 05:05:29.821587 2026] [security2:error] [pid 1017536:tid 1017696] [client 52.139.37.240:21120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/files/index.php"] [unique_id "apK8-SJcY4fy7tP-rU3mywAAAjI"]
[Sat Aug 29 05:05:29.828512 2026] [security2:error] [pid 1017536:tid 1017771] [client 20.104.104.62:44554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/waw.php"] [unique_id "apK8-SJcY4fy7tP-rU3mzAAAAn0"]
[Sat Aug 29 05:05:29.837812 2026] [security2:error] [pid 1017536:tid 1017713] [client 20.104.104.62:13569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahrice-co-uk.glowt-shirt.com"] [uri "/xcre1.php"] [unique_id "apK8-SJcY4fy7tP-rU3mzQAAAkM"]
[Sat Aug 29 05:05:29.849854 2026] [security2:error] [pid 1017536:tid 1017704] [client 68.155.159.216:51206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK8-SJcY4fy7tP-rU3mzgAAAjo"]
[Sat Aug 29 05:05:29.862521 2026] [security2:error] [pid 1017536:tid 1017779] [client 158.23.147.79:24450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK8-SJcY4fy7tP-rU3mzwAAAoU"]
[Sat Aug 29 05:05:29.890631 2026] [security2:error] [pid 1017536:tid 1017720] [client 4.205.62.107:22325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/infos.php"] [unique_id "apK8-SJcY4fy7tP-rU3m0wAAAko"]
[Sat Aug 29 05:05:29.899572 2026] [security2:error] [pid 1017536:tid 1017715] [client 20.48.251.3:57840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/session.php"] [unique_id "apK8-SJcY4fy7tP-rU3m1AAAAkU"]
[Sat Aug 29 05:05:29.911111 2026] [security2:error] [pid 1018003:tid 1018277] [client 20.104.104.62:41606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/sf9.php"] [unique_id "apK8-TAh5Y1i2tUxg4HiBAAABjU"]
[Sat Aug 29 05:05:29.912869 2026] [security2:error] [pid 1018003:tid 1018266] [client 158.23.147.79:38766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK8-TAh5Y1i2tUxg4HiBgAABio"]
[Sat Aug 29 05:05:29.915678 2026] [security2:error] [pid 1018003:tid 1018270] [client 172.97.247.204:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutihomes.com"] [uri "/boats"] [unique_id "apK8-TAh5Y1i2tUxg4HiBQAABi4"], referer: https://www.djiboutihomes.com/
[Sat Aug 29 05:05:29.920685 2026] [security2:error] [pid 1018003:tid 1018241] [client 93.123.109.228:37394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/config/stripe.php"] [unique_id "apK8-TAh5Y1i2tUxg4HiBwAABhE"]
[Sat Aug 29 05:05:29.923492 2026] [security2:error] [pid 1018003:tid 1018213] [client 168.107.94.195:49563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK8-TAh5Y1i2tUxg4HiCAAABfY"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:29.923513 2026] [security2:error] [pid 1018003:tid 1018165] [client 4.205.62.107:65427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/kerang.php"] [unique_id "apK8-TAh5Y1i2tUxg4HiCQAABcY"]
[Sat Aug 29 05:05:29.927480 2026] [security2:error] [pid 1018003:tid 1018216] [client 158.158.54.35:10870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/lite.php"] [unique_id "apK8-TAh5Y1i2tUxg4HiCgAABfk"]
[Sat Aug 29 05:05:29.929955 2026] [security2:error] [pid 1017536:tid 1017742] [client 61.9.8.223:64173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK8-SJcY4fy7tP-rU3m3QAAAmA"]
[Sat Aug 29 05:05:29.930076 2026] [security2:error] [pid 1017536:tid 1017742] [client 61.9.8.223:64173] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK8-SJcY4fy7tP-rU3m3QAAAmA"]
[Sat Aug 29 05:05:29.936319 2026] [security2:error] [pid 1017536:tid 1017781] [client 20.48.160.90:63531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/emmh.php"] [unique_id "apK8-SJcY4fy7tP-rU3m3gAAAoc"]
[Sat Aug 29 05:05:29.937275 2026] [security2:error] [pid 1017536:tid 1017760] [client 4.232.148.111:11014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tiaandephraim.com"] [uri "/init.php"] [unique_id "apK8-SJcY4fy7tP-rU3m3wAAAnI"]
[Sat Aug 29 05:05:29.941078 2026] [security2:error] [pid 1018003:tid 1018265] [client 209.50.181.31:13101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 31.181.50.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK8-TAh5Y1i2tUxg4HiAwAABik"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:29.941669 2026] [security2:error] [pid 1017536:tid 1017786] [client 20.104.18.15:8187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/coffexium.php"] [unique_id "apK8-SJcY4fy7tP-rU3m4QAAAow"]
[Sat Aug 29 05:05:29.945597 2026] [security2:error] [pid 1017536:tid 1017721] [client 20.104.104.62:14798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.vistacounselingcolorado.com"] [uri "/xcre1.php"] [unique_id "apK8-SJcY4fy7tP-rU3m4gAAAks"]
[Sat Aug 29 05:05:29.948085 2026] [security2:error] [pid 1018003:tid 1018155] [client 20.63.219.114:1214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/add_actualites.php"] [unique_id "apK8-TAh5Y1i2tUxg4HiCwAABbw"]
[Sat Aug 29 05:05:29.951802 2026] [security2:error] [pid 1017536:tid 1017790] [client 20.104.49.130:48515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/srontol.php"] [unique_id "apK8-SJcY4fy7tP-rU3m4wAAApA"]
[Sat Aug 29 05:05:29.959417 2026] [security2:error] [pid 1017536:tid 1017689] [client 20.104.104.62:10443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/x23.php"] [unique_id "apK8-SJcY4fy7tP-rU3m5QAAAis"]
[Sat Aug 29 05:05:29.966877 2026] [security2:error] [pid 1017536:tid 1017773] [client 4.205.62.107:2639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/aws.php"] [unique_id "apK8-SJcY4fy7tP-rU3m5wAAAn8"]
[Sat Aug 29 05:05:29.971134 2026] [security2:error] [pid 1017536:tid 1017679] [client 20.104.104.62:13598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahrice-co-uk.glowt-shirt.com"] [uri "/motu.php"] [unique_id "apK8-SJcY4fy7tP-rU3m6AAAAiE"]
[Sat Aug 29 05:05:29.979980 2026] [security2:error] [pid 1018003:tid 1018190] [client 20.48.251.3:13966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/ammika.php"] [unique_id "apK8-TAh5Y1i2tUxg4HiDQAABd8"]
[Sat Aug 29 05:05:29.991106 2026] [autoindex:error] [pid 1018003:tid 1018199] [client 45.148.10.62:38648] AH01276: Cannot serve directory /home3/vvrewumy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:05:30.022619 2026] [security2:error] [pid 1018003:tid 1018181] [client 52.139.37.240:21388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.gp3llc.com"] [uri "/flower.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiEAAABdY"]
[Sat Aug 29 05:05:30.023861 2026] [security2:error] [pid 1017536:tid 1017678] [client 74.248.24.12:35498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/classwithtostring.php"] [unique_id "apK8-iJcY4fy7tP-rU3m7AAAAiA"]
[Sat Aug 29 05:05:30.027763 2026] [security2:error] [pid 1017536:tid 1017698] [client 20.48.251.3:28538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/h.php"] [unique_id "apK8-iJcY4fy7tP-rU3m7QAAAjQ"]
[Sat Aug 29 05:05:30.030924 2026] [security2:error] [pid 1017536:tid 1017749] [client 20.63.219.114:7463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/as.php"] [unique_id "apK8-iJcY4fy7tP-rU3m7gAAAmc"]
[Sat Aug 29 05:05:30.040591 2026] [security2:error] [pid 1017536:tid 1017769] [client 20.104.104.62:41652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/lte7.php"] [unique_id "apK8-iJcY4fy7tP-rU3m8AAAAns"]
[Sat Aug 29 05:05:30.079021 2026] [security2:error] [pid 1017536:tid 1017719] [client 68.155.159.216:16234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.showerdoorsdubuque.com"] [uri "/ans.php"] [unique_id "apK8-iJcY4fy7tP-rU3m8wAAAkk"]
[Sat Aug 29 05:05:30.085636 2026] [security2:error] [pid 1017536:tid 1017700] [client 20.104.18.15:8159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/BDKR28WP.php"] [unique_id "apK8-iJcY4fy7tP-rU3m9AAAAjY"]
[Sat Aug 29 05:05:30.088969 2026] [security2:error] [pid 1017536:tid 1017777] [client 20.104.104.62:14390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.vistacounselingcolorado.com"] [uri "/motu.php"] [unique_id "apK8-iJcY4fy7tP-rU3m9QAAAoM"]
[Sat Aug 29 05:05:30.090066 2026] [security2:error] [pid 1017536:tid 1017780] [client 68.155.159.216:57411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK8-iJcY4fy7tP-rU3m9gAAAoY"]
[Sat Aug 29 05:05:30.109876 2026] [security2:error] [pid 1017536:tid 1017764] [client 20.104.104.62:48690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/shelp.php"] [unique_id "apK8-iJcY4fy7tP-rU3m9wAAAnY"]
[Sat Aug 29 05:05:30.116900 2026] [security2:error] [pid 1018003:tid 1018197] [client 20.196.209.81:10678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-content/languages/index.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiFQAABeY"]
[Sat Aug 29 05:05:30.128897 2026] [security2:error] [pid 1017536:tid 1017712] [client 20.104.104.62:10456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/ws66.php"] [unique_id "apK8-iJcY4fy7tP-rU3m-AAAAkI"]
[Sat Aug 29 05:05:30.131336 2026] [security2:error] [pid 1018003:tid 1018231] [client 20.104.104.62:13568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahrice-co-uk.glowt-shirt.com"] [uri "/wefile.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiGwAABgc"]
[Sat Aug 29 05:05:30.142888 2026] [security2:error] [pid 1017536:tid 1017731] [client 185.104.184.230:55998] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.mcdcomputers.net"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "apK8-iJcY4fy7tP-rU3m-gAAAlU"]
[Sat Aug 29 05:05:30.146154 2026] [security2:error] [pid 1017536:tid 1017691] [client 68.155.159.216:12168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/sad/about.php"] [unique_id "apK8-iJcY4fy7tP-rU3m_AAAAi0"]
[Sat Aug 29 05:05:30.156488 2026] [security2:error] [pid 1018003:tid 1018196] [client 20.48.251.3:28432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/bootstrap.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiHgAABeU"]
[Sat Aug 29 05:05:30.156521 2026] [security2:error] [pid 1018003:tid 1018223] [client 20.48.251.3:13973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/aws_config.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiHwAABgA"]
[Sat Aug 29 05:05:30.166025 2026] [security2:error] [pid 1017536:tid 1017738] [client 20.48.160.90:63540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/em.php"] [unique_id "apK8-iJcY4fy7tP-rU3nAAAAAlw"]
[Sat Aug 29 05:05:30.174113 2026] [security2:error] [pid 1017536:tid 1017726] [client 20.196.209.81:15746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/aksinet.php"] [unique_id "apK8-iJcY4fy7tP-rU3nAQAAAlA"]
[Sat Aug 29 05:05:30.175909 2026] [security2:error] [pid 1017536:tid 1017672] [client 20.104.104.62:41636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/tanjiro.php"] [unique_id "apK8-iJcY4fy7tP-rU3nAgAAAho"]
[Sat Aug 29 05:05:30.184102 2026] [security2:error] [pid 1018003:tid 1018264] [client 149.34.210.141:57410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiIgAABig"]
[Sat Aug 29 05:05:30.184194 2026] [security2:error] [pid 1018003:tid 1018264] [client 149.34.210.141:57410] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiIgAABig"]
[Sat Aug 29 05:05:30.222941 2026] [security2:error] [pid 1017536:tid 1017696] [client 20.104.18.15:8148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/sf.php"] [unique_id "apK8-iJcY4fy7tP-rU3nBQAAAjI"]
[Sat Aug 29 05:05:30.223089 2026] [security2:error] [pid 1017536:tid 1017736] [client 20.104.104.62:14363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.vistacounselingcolorado.com"] [uri "/wefile.php"] [unique_id "apK8-iJcY4fy7tP-rU3nBgAAAlo"]
[Sat Aug 29 05:05:30.224678 2026] [security2:error] [pid 1018003:tid 1018164] [client 68.155.159.216:16249] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "familytrade.ca"] [uri "/1.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiJQAABcU"]
[Sat Aug 29 05:05:30.224720 2026] [security2:error] [pid 1018003:tid 1018251] [client 192.145.125.70:35460] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "vickiandgreg.strangeworx.com"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "apK8-jAh5Y1i2tUxg4HiJgAABhs"]
[Sat Aug 29 05:05:30.224775 2026] [security2:error] [pid 1018003:tid 1018164] [client 68.155.159.216:16249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/1.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiJQAABcU"]
[Sat Aug 29 05:05:30.233609 2026] [security2:error] [pid 1018003:tid 1018254] [client 103.171.189.88:50992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiJwAABh4"]
[Sat Aug 29 05:05:30.233753 2026] [security2:error] [pid 1018003:tid 1018254] [client 103.171.189.88:50992] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiJwAABh4"]
[Sat Aug 29 05:05:30.259486 2026] [security2:error] [pid 1017536:tid 1017732] [client 74.248.24.12:21807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/init.php"] [unique_id "apK8-iJcY4fy7tP-rU3nCQAAAlY"]
[Sat Aug 29 05:05:30.268779 2026] [security2:error] [pid 1018003:tid 1018192] [client 20.104.104.62:13320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahrice-co-uk.glowt-shirt.com"] [uri "/EM.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiKwAABeE"]
[Sat Aug 29 05:05:30.269792 2026] [security2:error] [pid 1018003:tid 1018203] [client 20.104.104.62:44558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/Cok.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiLAAABew"]
[Sat Aug 29 05:05:30.275575 2026] [security2:error] [pid 1018003:tid 1018179] [client 4.232.148.111:24931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiLQAABdQ"]
[Sat Aug 29 05:05:30.278934 2026] [security2:error] [pid 1018003:tid 1018188] [client 20.196.209.81:12720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/fi2.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiLgAABd0"]
[Sat Aug 29 05:05:30.285443 2026] [security2:error] [pid 1018003:tid 1018218] [client 20.48.251.3:27174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/333.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiLwAABfs"]
[Sat Aug 29 05:05:30.297186 2026] [security2:error] [pid 1018003:tid 1018191] [client 20.104.104.62:20807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/bd.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiMQAABeA"]
[Sat Aug 29 05:05:30.298083 2026] [security2:error] [pid 1018003:tid 1018263] [client 45.148.10.62:38648] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.vvr.ewu.mybluehost.me"] [uri "/api/.env"] [unique_id "apK8-jAh5Y1i2tUxg4HiMAAABic"]
[Sat Aug 29 05:05:30.302443 2026] [security2:error] [pid 1018003:tid 1018269] [client 168.107.94.195:49919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiMgAABi0"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:30.315200 2026] [security2:error] [pid 1017536:tid 1017748] [client 20.104.104.62:41655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/Rk41.php"] [unique_id "apK8-iJcY4fy7tP-rU3nCgAAAmY"]
[Sat Aug 29 05:05:30.320728 2026] [security2:error] [pid 1018003:tid 1018239] [client 68.155.159.216:33735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/goods.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiMwAABg8"]
[Sat Aug 29 05:05:30.347450 2026] [security2:error] [pid 1018003:tid 1018152] [client 20.48.160.90:64691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/dvve.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiNQAABbk"]
[Sat Aug 29 05:05:30.357490 2026] [security2:error] [pid 1017536:tid 1017771] [client 20.63.219.114:1422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/alfanew.php7"] [unique_id "apK8-iJcY4fy7tP-rU3nDwAAAn0"]
[Sat Aug 29 05:05:30.360255 2026] [security2:error] [pid 1017536:tid 1017771] [client 20.104.104.62:14396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.vistacounselingcolorado.com"] [uri "/EM.php"] [unique_id "apK8-iJcY4fy7tP-rU3nEAAAAn0"]
[Sat Aug 29 05:05:30.374017 2026] [security2:error] [pid 1017536:tid 1017781] [client 20.104.18.15:47093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/132.php"] [unique_id "apK8-iJcY4fy7tP-rU3nEgAAAoc"]
[Sat Aug 29 05:05:30.375563 2026] [security2:error] [pid 1018003:tid 1018222] [client 158.158.54.35:21809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/term.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiOQAABf8"]
[Sat Aug 29 05:05:30.376905 2026] [security2:error] [pid 1017536:tid 1017721] [client 20.104.18.15:7003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/nox.php"] [unique_id "apK8-iJcY4fy7tP-rU3nFQAAAks"]
[Sat Aug 29 05:05:30.377119 2026] [security2:error] [pid 1017536:tid 1017786] [client 20.104.18.15:8187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/k.php"] [unique_id "apK8-iJcY4fy7tP-rU3nFAAAAow"]
[Sat Aug 29 05:05:30.386980 2026] [security2:error] [pid 1017536:tid 1017788] [client 93.123.109.228:37338] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/cron/.env"] [unique_id "apK8-iJcY4fy7tP-rU3nGwAAAo4"]
[Sat Aug 29 05:05:30.400091 2026] [security2:error] [pid 1017536:tid 1017668] [client 93.123.109.228:37292] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/current/.env"] [unique_id "apK8-iJcY4fy7tP-rU3nHQAAAhY"]
[Sat Aug 29 05:05:30.402481 2026] [security2:error] [pid 1017536:tid 1017668] [client 93.123.109.228:36610] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/crm/.env"] [unique_id "apK8-iJcY4fy7tP-rU3nHgAAAhY"]
[Sat Aug 29 05:05:30.403404 2026] [security2:error] [pid 1018003:tid 1018186] [client 20.104.104.62:44564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/X7T6.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiOwAABds"]
[Sat Aug 29 05:05:30.406640 2026] [security2:error] [pid 1018003:tid 1018178] [client 20.104.104.62:13627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahrice-co-uk.glowt-shirt.com"] [uri "/ca4.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiPAAABdM"]
[Sat Aug 29 05:05:30.417555 2026] [security2:error] [pid 1017536:tid 1017754] [client 20.48.251.3:27167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/G-in.php"] [unique_id "apK8-iJcY4fy7tP-rU3nHwAAAmw"]
[Sat Aug 29 05:05:30.418213 2026] [security2:error] [pid 1018003:tid 1018173] [client 20.63.219.114:1697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/room.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiPgAABc4"]
[Sat Aug 29 05:05:30.419161 2026] [security2:error] [pid 1017536:tid 1017773] [client 93.123.109.228:37264] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/demo/.env"] [unique_id "apK8-iJcY4fy7tP-rU3nIAAAAn8"]
[Sat Aug 29 05:05:30.423560 2026] [security2:error] [pid 1018003:tid 1018255] [client 4.232.148.111:24818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tiaandephraim.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiQQAABh8"]
[Sat Aug 29 05:05:30.424639 2026] [security2:error] [pid 1017536:tid 1017679] [client 93.123.109.228:36644] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/dev/.env"] [unique_id "apK8-iJcY4fy7tP-rU3nIQAAAiE"]
[Sat Aug 29 05:05:30.433889 2026] [security2:error] [pid 1018003:tid 1018163] [client 20.104.18.15:13259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/m.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiQgAABcQ"]
[Sat Aug 29 05:05:30.452369 2026] [security2:error] [pid 1017536:tid 1017793] [client 185.104.184.230:56004] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.mcdcomputers.net"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "apK8-iJcY4fy7tP-rU3nIwAAApM"]
[Sat Aug 29 05:05:30.455263 2026] [security2:error] [pid 1017536:tid 1017685] [client 20.104.104.62:48655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/13ede.php"] [unique_id "apK8-iJcY4fy7tP-rU3nJAAAAic"]
[Sat Aug 29 05:05:30.455960 2026] [security2:error] [pid 1017536:tid 1017686] [client 20.104.104.62:45984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/7logs.php"] [unique_id "apK8-iJcY4fy7tP-rU3nJQAAAig"]
[Sat Aug 29 05:05:30.460016 2026] [security2:error] [pid 1018003:tid 1018198] [client 45.148.10.62:38648] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.vvr.ewu.mybluehost.me"] [uri "/.env.bak"] [unique_id "apK8-jAh5Y1i2tUxg4HiRAAABec"]
[Sat Aug 29 05:05:30.463246 2026] [security2:error] [pid 1018003:tid 1018241] [client 20.104.18.15:23432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/m.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiRQAABhE"]
[Sat Aug 29 05:05:30.489000 2026] [security2:error] [pid 1018003:tid 1018209] [client 20.104.18.15:36698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/ws85.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiRgAABfI"]
[Sat Aug 29 05:05:30.490784 2026] [security2:error] [pid 1018003:tid 1018193] [client 93.123.109.228:36682] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/developer/.env"] [unique_id "apK8-jAh5Y1i2tUxg4HiRwAABeI"]
[Sat Aug 29 05:05:30.491307 2026] [security2:error] [pid 1017536:tid 1017777] [client 20.48.160.90:62719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/doo.php"] [unique_id "apK8-iJcY4fy7tP-rU3nJgAAAoM"]
[Sat Aug 29 05:05:30.493512 2026] [security2:error] [pid 1017536:tid 1017680] [client 20.104.104.62:15298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.vistacounselingcolorado.com"] [uri "/ca4.php"] [unique_id "apK8-iJcY4fy7tP-rU3nKAAAAiI"]
[Sat Aug 29 05:05:30.495140 2026] [security2:error] [pid 1017536:tid 1017780] [client 93.123.109.228:36690] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/develop/.env"] [unique_id "apK8-iJcY4fy7tP-rU3nJwAAAoY"]
[Sat Aug 29 05:05:30.495351 2026] [security2:error] [pid 1017536:tid 1017755] [client 93.123.109.228:37378] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/development/.env"] [unique_id "apK8-iJcY4fy7tP-rU3nKQAAAm0"]
[Sat Aug 29 05:05:30.517747 2026] [security2:error] [pid 1018003:tid 1018211] [client 20.196.209.81:10686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-content/languages/min.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiSAAABfQ"]
[Sat Aug 29 05:05:30.542956 2026] [security2:error] [pid 1018003:tid 1018215] [client 20.104.104.62:10863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/see.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiTAAABfg"]
[Sat Aug 29 05:05:30.543514 2026] [security2:error] [pid 1018003:tid 1018247] [client 20.104.104.62:13645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahrice-co-uk.glowt-shirt.com"] [uri "/x0x.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiTQAABhc"]
[Sat Aug 29 05:05:30.544486 2026] [security2:error] [pid 1018003:tid 1018157] [client 65.111.3.82:51557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 82.3.111.65.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiSQAABb4"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:30.544587 2026] [security2:error] [pid 1018003:tid 1018245] [client 20.48.251.3:13960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/phpinfo01.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiTgAABhU"]
[Sat Aug 29 05:05:30.549166 2026] [security2:error] [pid 1017536:tid 1017731] [client 20.104.18.15:7073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/akismet.php"] [unique_id "apK8-iJcY4fy7tP-rU3nLQAAAlU"]
[Sat Aug 29 05:05:30.550492 2026] [security2:error] [pid 1017536:tid 1017784] [client 20.104.18.15:46940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/v22.php"] [unique_id "apK8-iJcY4fy7tP-rU3nLgAAAoo"]
[Sat Aug 29 05:05:30.551690 2026] [security2:error] [pid 1017536:tid 1017708] [client 20.48.251.3:28477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/apikeys.php"] [unique_id "apK8-iJcY4fy7tP-rU3nMAAAAj4"]
[Sat Aug 29 05:05:30.564605 2026] [security2:error] [pid 1017536:tid 1017730] [client 20.104.18.15:13251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/fling.php"] [unique_id "apK8-iJcY4fy7tP-rU3nMgAAAlQ"]
[Sat Aug 29 05:05:30.584591 2026] [security2:error] [pid 1017536:tid 1017742] [client 74.248.24.12:33172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/news.php"] [unique_id "apK8-iJcY4fy7tP-rU3nNQAAAmA"]
[Sat Aug 29 05:05:30.587037 2026] [security2:error] [pid 1018003:tid 1018197] [client 20.104.104.62:22704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/sf.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiUgAABeY"]
[Sat Aug 29 05:05:30.596085 2026] [security2:error] [pid 1017536:tid 1017669] [client 20.196.209.81:15791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/alfa-rex1.php"] [unique_id "apK8-iJcY4fy7tP-rU3nNgAAAhc"]
[Sat Aug 29 05:05:30.596494 2026] [security2:error] [pid 1017536:tid 1017745] [client 20.104.18.15:8102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/82.php"] [unique_id "apK8-iJcY4fy7tP-rU3nNwAAAmM"]
[Sat Aug 29 05:05:30.598296 2026] [security2:error] [pid 1017536:tid 1017725] [client 20.104.18.15:23490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/fling.php"] [unique_id "apK8-iJcY4fy7tP-rU3nOAAAAk8"]
[Sat Aug 29 05:05:30.624057 2026] [security2:error] [pid 1017536:tid 1017736] [client 20.48.160.90:28618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/adminer-4.6.6.php"] [unique_id "apK8-iJcY4fy7tP-rU3nOQAAAlo"]
[Sat Aug 29 05:05:30.639407 2026] [security2:error] [pid 1017536:tid 1017711] [client 20.104.104.62:40215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/komet.php"] [unique_id "apK8-iJcY4fy7tP-rU3nPQAAAkE"]
[Sat Aug 29 05:05:30.642521 2026] [security2:error] [pid 1017536:tid 1017714] [client 20.104.104.62:15268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.vistacounselingcolorado.com"] [uri "/x0x.php"] [unique_id "apK8-iJcY4fy7tP-rU3nPgAAAkQ"]
[Sat Aug 29 05:05:30.674247 2026] [security2:error] [pid 1017536:tid 1017704] [client 20.104.104.62:10433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/horeg.php"] [unique_id "apK8-iJcY4fy7tP-rU3nQwAAAjo"]
[Sat Aug 29 05:05:30.674677 2026] [security2:error] [pid 1018003:tid 1018251] [client 68.155.159.216:50298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiVQAABhs"]
[Sat Aug 29 05:05:30.680112 2026] [security2:error] [pid 1018003:tid 1018238] [client 20.196.209.81:21092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/1p.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiVgAABg4"]
[Sat Aug 29 05:05:30.680585 2026] [security2:error] [pid 1017536:tid 1017746] [client 20.48.251.3:57843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/motu.php"] [unique_id "apK8-iJcY4fy7tP-rU3nRAAAAmQ"]
[Sat Aug 29 05:05:30.681152 2026] [security2:error] [pid 1018003:tid 1018254] [client 20.104.104.62:13586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahrice-co-uk.glowt-shirt.com"] [uri "/fesa.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiVwAABh4"]
[Sat Aug 29 05:05:30.681157 2026] [security2:error] [pid 1017536:tid 1017728] [client 158.23.147.79:53963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK8-iJcY4fy7tP-rU3nRQAAAlI"]
[Sat Aug 29 05:05:30.685150 2026] [security2:error] [pid 1017536:tid 1017694] [client 168.107.94.195:50259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK8-iJcY4fy7tP-rU3nRgAAAjA"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:30.694092 2026] [security2:error] [pid 1017536:tid 1017715] [client 20.104.18.15:7051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/ajax.php"] [unique_id "apK8-iJcY4fy7tP-rU3nRwAAAkU"]
[Sat Aug 29 05:05:30.709333 2026] [security2:error] [pid 1017536:tid 1017690] [client 4.205.62.107:61208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "troop264olney.net"] [uri "/wp-tem.php"] [unique_id "apK8-iJcY4fy7tP-rU3nSQAAAiw"]
[Sat Aug 29 05:05:30.711523 2026] [security2:error] [pid 1018003:tid 1018233] [client 20.104.18.15:13292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/btyuio.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiWQAABgk"]
[Sat Aug 29 05:05:30.716631 2026] [security2:error] [pid 1018003:tid 1018156] [client 20.104.104.62:22681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/super.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiWwAABb0"]
[Sat Aug 29 05:05:30.717161 2026] [security2:error] [pid 1018003:tid 1018195] [client 93.123.109.228:36714] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/etc/apache2/apache2.conf"] [unique_id "apK8-jAh5Y1i2tUxg4HiWgAABeQ"]
[Sat Aug 29 05:05:30.717575 2026] [security2:error] [pid 1018003:tid 1018253] [client 4.205.62.107:64229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/aws_settings.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiXAAABh0"]
[Sat Aug 29 05:05:30.720233 2026] [security2:error] [pid 1017536:tid 1017772] [client 93.123.109.228:37302] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/etc/boto.cfg"] [unique_id "apK8-iJcY4fy7tP-rU3nSgAAAn4"]
[Sat Aug 29 05:05:30.721450 2026] [security2:error] [pid 1017536:tid 1017753] [client 93.123.109.228:37338] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/erp/.env"] [unique_id "apK8-iJcY4fy7tP-rU3nSwAAAms"]
[Sat Aug 29 05:05:30.725517 2026] [security2:error] [pid 1017536:tid 1017707] [client 93.123.109.228:37292] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/fe/.env"] [unique_id "apK8-iJcY4fy7tP-rU3nTAAAAj0"]
[Sat Aug 29 05:05:30.727284 2026] [security2:error] [pid 1018003:tid 1018159] [client 20.63.219.114:1588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/xmlrpc.php0"] [unique_id "apK8-jAh5Y1i2tUxg4HiXQAABcA"]
[Sat Aug 29 05:05:30.749189 2026] [security2:error] [pid 1018003:tid 1018196] [client 4.232.148.111:24936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/upload.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiXwAABeU"]
[Sat Aug 29 05:05:30.754788 2026] [security2:error] [pid 1018003:tid 1018179] [client 20.104.18.15:36857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/ffs.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiYQAABdQ"]
[Sat Aug 29 05:05:30.759215 2026] [security2:error] [pid 1017536:tid 1017790] [client 185.104.184.230:56016] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.mcdcomputers.net"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "apK8-iJcY4fy7tP-rU3nTwAAApA"]
[Sat Aug 29 05:05:30.759792 2026] [security2:error] [pid 1017536:tid 1017788] [client 20.104.18.15:8090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/dex.php"] [unique_id "apK8-iJcY4fy7tP-rU3nUAAAAo4"]
[Sat Aug 29 05:05:30.761745 2026] [security2:error] [pid 1018003:tid 1018218] [client 20.104.18.15:47005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/wp-activate.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiYwAABfs"]
[Sat Aug 29 05:05:30.763011 2026] [security2:error] [pid 1018003:tid 1018191] [client 93.123.109.228:36682] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/front/.env"] [unique_id "apK8-jAh5Y1i2tUxg4HiZAAABeA"]
[Sat Aug 29 05:05:30.766781 2026] [security2:error] [pid 1018003:tid 1018263] [client 20.48.160.90:64713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/gelap1.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiZQAABic"]
[Sat Aug 29 05:05:30.768585 2026] [security2:error] [pid 1017536:tid 1017689] [client 93.123.109.228:37264] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/frontend/.env"] [unique_id "apK8-iJcY4fy7tP-rU3nUQAAAis"]
[Sat Aug 29 05:05:30.774111 2026] [security2:error] [pid 1018003:tid 1018239] [client 158.23.147.79:30681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiZgAABg8"]
[Sat Aug 29 05:05:30.779376 2026] [security2:error] [pid 1018003:tid 1018214] [client 20.104.104.62:14367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.vistacounselingcolorado.com"] [uri "/fesa.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiZwAABfc"]
[Sat Aug 29 05:05:30.788033 2026] [security2:error] [pid 1017536:tid 1017775] [client 74.248.24.12:28218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "apK8-iJcY4fy7tP-rU3nUgAAAoE"]
[Sat Aug 29 05:05:30.810405 2026] [security2:error] [pid 1018003:tid 1018244] [client 20.104.104.62:44600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/basic.php"] [unique_id "apK8-jAh5Y1i2tUxg4HiagAABhQ"]
[Sat Aug 29 05:05:30.811471 2026] [security2:error] [pid 1018003:tid 1018194] [client 192.145.125.70:35472] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "vickiandgreg.strangeworx.com"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "apK8-jAh5Y1i2tUxg4HibAAABeM"]
[Sat Aug 29 05:05:30.813328 2026] [security2:error] [pid 1018003:tid 1018164] [client 158.158.54.35:15890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/config.php"] [unique_id "apK8-jAh5Y1i2tUxg4HibQAABcU"]
[Sat Aug 29 05:05:30.818206 2026] [security2:error] [pid 1018003:tid 1018278] [client 64.89.161.160:55325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 160.161.89.64.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thedesignfit.com"] [uri "/assets/js/file-uploader/server/php/index.php"] [unique_id "apK8-jAh5Y1i2tUxg4HibwAABjY"]
[Sat Aug 29 05:05:30.819616 2026] [security2:error] [pid 1018003:tid 1018236] [client 20.48.251.3:28430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/public/mah.php.php"] [unique_id "apK8-jAh5Y1i2tUxg4HicAAABgw"]
[Sat Aug 29 05:05:30.820089 2026] [security2:error] [pid 1017536:tid 1017674] [client 20.104.18.15:23512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/btyuio.php"] [unique_id "apK8-iJcY4fy7tP-rU3nVgAAAhw"]
[Sat Aug 29 05:05:30.820609 2026] [security2:error] [pid 1018003:tid 1018207] [client 20.104.104.62:48654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/k8.php"] [unique_id "apK8-jAh5Y1i2tUxg4HicQAABfA"]
[Sat Aug 29 05:05:30.822993 2026] [security2:error] [pid 1017536:tid 1017779] [client 20.63.219.114:10086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/class-wp-cmd.php"] [unique_id "apK8-iJcY4fy7tP-rU3nVwAAAoU"]
[Sat Aug 29 05:05:30.824764 2026] [security2:error] [pid 1017536:tid 1017733] [client 20.104.18.15:7123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/atomlib.php"] [unique_id "apK8-iJcY4fy7tP-rU3nWAAAAlc"]
[Sat Aug 29 05:05:30.838307 2026] [security2:error] [pid 1017536:tid 1017766] [client 4.205.62.107:21927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/aws_credentials.php"] [unique_id "apK8-iJcY4fy7tP-rU3nWgAAAng"]
[Sat Aug 29 05:05:30.844853 2026] [security2:error] [pid 1018003:tid 1018186] [client 20.104.18.15:13276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/dehnl.php"] [unique_id "apK8-jAh5Y1i2tUxg4HicgAABds"]
[Sat Aug 29 05:05:30.845554 2026] [security2:error] [pid 1018003:tid 1018178] [client 68.155.159.216:51482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/sad/about.php"] [unique_id "apK8-jAh5Y1i2tUxg4HicwAABdM"]
[Sat Aug 29 05:05:30.856351 2026] [security2:error] [pid 1018003:tid 1018255] [client 20.104.104.62:22701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/lufix1.php"] [unique_id "apK8-jAh5Y1i2tUxg4HidAAABh8"]
[Sat Aug 29 05:05:30.864810 2026] [security2:error] [pid 1017536:tid 1017687] [client 20.104.104.62:20808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/1337.php"] [unique_id "apK8-iJcY4fy7tP-rU3nWwAAAik"]
[Sat Aug 29 05:05:30.875403 2026] [security2:error] [pid 1017536:tid 1017686] [client 158.23.147.79:48296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/goods.php"] [unique_id "apK8-iJcY4fy7tP-rU3nXgAAAig"]
[Sat Aug 29 05:05:30.877121 2026] [security2:error] [pid 1017536:tid 1017667] [client 93.123.109.228:37338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/info.php"] [unique_id "apK8-iJcY4fy7tP-rU3nYAAAAhU"]
[Sat Aug 29 05:05:30.881385 2026] [security2:error] [pid 1018003:tid 1018257] [client 68.155.159.216:62892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.gavirestaurant.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK8-jAh5Y1i2tUxg4HidwAABiE"]
[Sat Aug 29 05:05:30.892684 2026] [security2:error] [pid 1018003:tid 1018221] [client 93.123.109.228:37390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/infos.php"] [unique_id "apK8-jAh5Y1i2tUxg4HieQAABf4"]
[Sat Aug 29 05:05:30.895033 2026] [security2:error] [pid 1017536:tid 1017749] [client 20.48.251.3:14333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/oiko6u.php"] [unique_id "apK8-iJcY4fy7tP-rU3nYQAAAmc"]
[Sat Aug 29 05:05:30.904880 2026] [security2:error] [pid 1017536:tid 1017769] [client 93.123.109.228:36690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/infophp.php"] [unique_id "apK8-iJcY4fy7tP-rU3nYgAAAns"]
[Sat Aug 29 05:05:30.911592 2026] [security2:error] [pid 1017536:tid 1017681] [client 127.0.0.1:52374] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "127.0.0.1"] [uri "/cgi-sys/autoconfig.cgi"] [unique_id "apK8-iJcY4fy7tP-rU3nVQAAAiM"]
[Sat Aug 29 05:05:30.913000 2026] [security2:error] [pid 1017536:tid 1017777] [client 158.23.147.79:25494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/file.php"] [unique_id "apK8-iJcY4fy7tP-rU3nZQAAAoM"]
[Sat Aug 29 05:05:30.922475 2026] [security2:error] [pid 1018003:tid 1018269] [client 74.7.244.42:58066] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "autoconfig.pee.bbn.mybluehost.me"] [uri "/robots.txt"] [unique_id "apK8-jAh5Y1i2tUxg4HibgAGLU8"]
[Sat Aug 29 05:05:30.923757 2026] [security2:error] [pid 1017536:tid 1017675] [client 93.123.109.228:37264] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/laravel/.env"] [unique_id "apK8-iJcY4fy7tP-rU3nawAAAh0"]
[Sat Aug 29 05:05:30.924426 2026] [security2:error] [pid 1017536:tid 1017735] [client 20.196.209.81:4707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-content/languages/pk.php"] [unique_id "apK8-iJcY4fy7tP-rU3nbAAAAlk"]
[Sat Aug 29 05:05:30.926010 2026] [security2:error] [pid 1018003:tid 1018162] [client 93.123.109.228:36612] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/lms/.env"] [unique_id "apK8-jAh5Y1i2tUxg4HifQAABcM"]
[Sat Aug 29 05:05:30.931012 2026] [security2:error] [pid 1018003:tid 1018241] [client 20.48.160.90:63538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/rsjlrria.php"] [unique_id "apK8-jAh5Y1i2tUxg4HifgAABhE"]
[Sat Aug 29 05:05:30.943044 2026] [security2:error] [pid 1017536:tid 1017764] [client 20.104.104.62:44545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/monso.php"] [unique_id "apK8-iJcY4fy7tP-rU3nbwAAAnY"]
[Sat Aug 29 05:05:30.945890 2026] [security2:error] [pid 1018003:tid 1018213] [client 45.148.10.62:38648] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.vvr.ewu.mybluehost.me"] [uri "/stripe/.env"] [unique_id "apK8-jAh5Y1i2tUxg4HifwAABfY"]
[Sat Aug 29 05:05:30.953045 2026] [security2:error] [pid 1017536:tid 1017680] [client 4.205.62.107:53345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/wp-class.php"] [unique_id "apK8-iJcY4fy7tP-rU3ncAAAAiI"]
[Sat Aug 29 05:05:30.955079 2026] [security2:error] [pid 1018003:tid 1018160] [client 20.104.18.15:23511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/dehnl.php"] [unique_id "apK8-jAh5Y1i2tUxg4HigAAABcE"]
[Sat Aug 29 05:05:30.957077 2026] [security2:error] [pid 1018003:tid 1018265] [client 93.123.109.228:37266] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/local/.env"] [unique_id "apK8-jAh5Y1i2tUxg4HigQAABik"]
[Sat Aug 29 05:05:30.959431 2026] [security2:error] [pid 1017536:tid 1017750] [client 20.104.18.15:46913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/wp-trackback.php"] [unique_id "apK8-iJcY4fy7tP-rU3ncQAAAmg"]
[Sat Aug 29 05:05:30.976179 2026] [security2:error] [pid 1018003:tid 1018202] [client 20.48.251.3:28454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/zaza.php"] [unique_id "apK8-jAh5Y1i2tUxg4HigwAABes"]
[Sat Aug 29 05:05:30.977334 2026] [security2:error] [pid 1018003:tid 1018190] [client 158.23.147.79:24573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK8-jAh5Y1i2tUxg4HihAAABd8"]
[Sat Aug 29 05:05:30.982420 2026] [security2:error] [pid 1018003:tid 1018227] [client 20.104.18.15:8191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/inso.php"] [unique_id "apK8-jAh5Y1i2tUxg4HihQAABgQ"]
[Sat Aug 29 05:05:30.987351 2026] [security2:error] [pid 1018003:tid 1018199] [client 20.104.104.62:41628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/hack.php"] [unique_id "apK8-jAh5Y1i2tUxg4HihgAABeg"]
[Sat Aug 29 05:05:31.001133 2026] [security2:error] [pid 1018003:tid 1018205] [client 20.104.18.15:13212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/zoo2.php"] [unique_id "apK8-zAh5Y1i2tUxg4HihwAABe4"]
[Sat Aug 29 05:05:31.006453 2026] [autoindex:error] [pid 1018003:tid 1018203] [client 4.232.148.111:20997] AH01276: Cannot serve directory /home4/ehfields/public_html/tiaandephraim/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:05:31.021084 2026] [security2:error] [pid 1017536:tid 1017778] [client 20.196.209.81:15783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/headerg.php"] [unique_id "apK8-yJcY4fy7tP-rU3ncwAAAoQ"]
[Sat Aug 29 05:05:31.026215 2026] [security2:error] [pid 1018003:tid 1018206] [client 20.104.18.15:7058] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "moderntechservices.com"] [uri "/1.php"] [unique_id "apK8-zAh5Y1i2tUxg4HiiQAABe8"]
[Sat Aug 29 05:05:31.026310 2026] [security2:error] [pid 1018003:tid 1018206] [client 20.104.18.15:7058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/1.php"] [unique_id "apK8-zAh5Y1i2tUxg4HiiQAABe8"]
[Sat Aug 29 05:05:31.026986 2026] [security2:error] [pid 1018003:tid 1018250] [client 4.205.62.107:22329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/vx.php"] [unique_id "apK8-zAh5Y1i2tUxg4HiigAABho"]
[Sat Aug 29 05:05:31.031965 2026] [security2:error] [pid 1017536:tid 1017784] [client 158.23.147.79:63035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/dropdown.php"] [unique_id "apK8-yJcY4fy7tP-rU3ndAAAAoo"]
[Sat Aug 29 05:05:31.036633 2026] [security2:error] [pid 1018003:tid 1018262] [client 93.123.109.228:36714] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/market/.env"] [unique_id "apK8-zAh5Y1i2tUxg4HiiwAABiY"]
[Sat Aug 29 05:05:31.050010 2026] [security2:error] [pid 1018003:tid 1018240] [client 93.123.109.228:36762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/marketing/.env"] [unique_id "apK8-zAh5Y1i2tUxg4HijAAABhA"]
[Sat Aug 29 05:05:31.055772 2026] [security2:error] [pid 1018003:tid 1018215] [client 4.205.62.107:65409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/rem.php"] [unique_id "apK8-zAh5Y1i2tUxg4HijQAABfg"]
[Sat Aug 29 05:05:31.065294 2026] [security2:error] [pid 1018003:tid 1018247] [client 93.123.109.228:36654] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/media/.env"] [unique_id "apK8-zAh5Y1i2tUxg4HijgAABhc"]
[Sat Aug 29 05:05:31.065987 2026] [security2:error] [pid 1018003:tid 1018245] [client 168.107.94.195:50656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK8-zAh5Y1i2tUxg4HijwAABhU"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:31.066771 2026] [security2:error] [pid 1017536:tid 1017722] [client 20.48.160.90:63526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/AxAo.php"] [unique_id "apK8-yJcY4fy7tP-rU3neAAAAkw"]
[Sat Aug 29 05:05:31.068910 2026] [security2:error] [pid 1017536:tid 1017670] [client 185.104.184.230:56030] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.mcdcomputers.net"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "apK8-yJcY4fy7tP-rU3negAAAhg"]
[Sat Aug 29 05:05:31.075195 2026] [security2:error] [pid 1018003:tid 1018157] [client 93.123.109.228:36754] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/new/.env"] [unique_id "apK8-zAh5Y1i2tUxg4HikAAABb4"]
[Sat Aug 29 05:05:31.077619 2026] [security2:error] [pid 1018003:tid 1018226] [client 93.123.109.228:36612] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/node-api/.env"] [unique_id "apK8-zAh5Y1i2tUxg4HikQAABgM"]
[Sat Aug 29 05:05:31.078410 2026] [security2:error] [pid 1018003:tid 1018153] [client 20.104.104.62:10444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/rce.php"] [unique_id "apK8-zAh5Y1i2tUxg4HikgAABbo"]
[Sat Aug 29 05:05:31.082563 2026] [security2:error] [pid 1017536:tid 1017702] [client 20.63.219.114:18404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/content.php"] [unique_id "apK8-yJcY4fy7tP-rU3nfgAAAjg"]
[Sat Aug 29 05:05:31.086264 2026] [security2:error] [pid 1018003:tid 1018216] [client 20.196.209.81:21084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/Njima.php"] [unique_id "apK8-zAh5Y1i2tUxg4HikwAABfk"]
[Sat Aug 29 05:05:31.096156 2026] [security2:error] [pid 1017536:tid 1017716] [client 104.207.40.179:41041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.40.207.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK8-yJcY4fy7tP-rU3newAAAkY"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:31.097234 2026] [security2:error] [pid 1018003:tid 1018170] [client 20.104.18.15:23435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/zoo2.php"] [unique_id "apK8-zAh5Y1i2tUxg4HilQAABcs"]
[Sat Aug 29 05:05:31.099236 2026] [security2:error] [pid 1018003:tid 1018223] [client 4.205.62.107:2994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/05.php"] [unique_id "apK8-zAh5Y1i2tUxg4HilgAABgA"]
[Sat Aug 29 05:05:31.102644 2026] [security2:error] [pid 1018003:tid 1018276] [client 93.123.109.228:36682] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/node/.env"] [unique_id "apK8-zAh5Y1i2tUxg4HilwAABjQ"]
[Sat Aug 29 05:05:31.103451 2026] [security2:error] [pid 1017536:tid 1017711] [client 20.104.104.62:40206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/backd00r.php"] [unique_id "apK8-yJcY4fy7tP-rU3ngAAAAkE"]
[Sat Aug 29 05:05:31.104182 2026] [security2:error] [pid 1018003:tid 1018264] [client 93.123.109.228:37266] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/node/backend/.env"] [unique_id "apK8-zAh5Y1i2tUxg4HimAAABig"]
[Sat Aug 29 05:05:31.104211 2026] [security2:error] [pid 1017536:tid 1017714] [client 93.123.109.228:36610] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/node/api/.env"] [unique_id "apK8-yJcY4fy7tP-rU3ngQAAAkQ"]
[Sat Aug 29 05:05:31.108139 2026] [security2:error] [pid 1018003:tid 1018174] [client 20.48.251.3:28463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/u88.php"] [unique_id "apK8-zAh5Y1i2tUxg4HimQAABc8"]
[Sat Aug 29 05:05:31.110210 2026] [security2:error] [pid 1017536:tid 1017673] [client 20.104.18.15:47046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/pri.php"] [unique_id "apK8-yJcY4fy7tP-rU3nggAAAhs"]
[Sat Aug 29 05:05:31.111495 2026] [security2:error] [pid 1017536:tid 1017739] [client 20.48.250.41:27601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/f35.php"] [unique_id "apK8-yJcY4fy7tP-rU3ngwAAAl0"]
[Sat Aug 29 05:05:31.113953 2026] [security2:error] [pid 1017536:tid 1017704] [client 20.104.104.62:41617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/155.php"] [unique_id "apK8-yJcY4fy7tP-rU3nhAAAAjo"]
[Sat Aug 29 05:05:31.128834 2026] [security2:error] [pid 1017536:tid 1017671] [client 74.248.24.12:35491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/about/function.php"] [unique_id "apK8-yJcY4fy7tP-rU3nhgAAAhk"]
[Sat Aug 29 05:05:31.132671 2026] [security2:error] [pid 1017536:tid 1017709] [client 20.48.251.3:14297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/fraro.php"] [unique_id "apK8-yJcY4fy7tP-rU3nhwAAAj8"]
[Sat Aug 29 05:05:31.139917 2026] [security2:error] [pid 1017536:tid 1017720] [client 20.104.18.15:8077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/aa.php"] [unique_id "apK8-yJcY4fy7tP-rU3niAAAAko"]
[Sat Aug 29 05:05:31.143623 2026] [security2:error] [pid 1017536:tid 1017715] [client 20.104.18.15:13265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/zoo1.php"] [unique_id "apK8-yJcY4fy7tP-rU3niQAAAkU"]
[Sat Aug 29 05:05:31.152025 2026] [security2:error] [pid 1018003:tid 1018184] [client 93.123.109.228:36660] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/nodeapi/.env"] [unique_id "apK8-zAh5Y1i2tUxg4HimwAABdk"]
[Sat Aug 29 05:05:31.152566 2026] [security2:error] [pid 1017536:tid 1017695] [client 20.104.18.15:36839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/nano.php"] [unique_id "apK8-yJcY4fy7tP-rU3nigAAAjE"]
[Sat Aug 29 05:05:31.159636 2026] [security2:error] [pid 1017536:tid 1017690] [client 20.104.104.62:48746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/alog.php"] [unique_id "apK8-yJcY4fy7tP-rU3niwAAAiw"]
[Sat Aug 29 05:05:31.166566 2026] [security2:error] [pid 1017536:tid 1017707] [client 93.123.109.228:36644] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/nodeweb/.env"] [unique_id "apK8-yJcY4fy7tP-rU3njQAAAj0"]
[Sat Aug 29 05:05:31.175104 2026] [security2:error] [pid 1018003:tid 1018156] [client 20.104.18.15:7146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/samll.php"] [unique_id "apK8-zAh5Y1i2tUxg4HingAABb0"]
[Sat Aug 29 05:05:31.188806 2026] [security2:error] [pid 1018003:tid 1018253] [client 68.155.159.216:16141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.showerdoorsdubuque.com"] [uri "/worksec.php"] [unique_id "apK8-zAh5Y1i2tUxg4HioAAABh0"]
[Sat Aug 29 05:05:31.197262 2026] [security2:error] [pid 1017536:tid 1017693] [client 20.63.219.114:10105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/disagreed.php"] [unique_id "apK8-yJcY4fy7tP-rU3nkAAAAi8"]
[Sat Aug 29 05:05:31.206958 2026] [security2:error] [pid 1017536:tid 1017668] [client 20.104.104.62:10478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/exec.php"] [unique_id "apK8-yJcY4fy7tP-rU3nkwAAAhY"]
[Sat Aug 29 05:05:31.224378 2026] [autoindex:error] [pid 1017536:tid 1017689] [client 4.232.148.111:0] AH01276: Cannot serve directory /home4/ehfields/public_html/tiaandephraim/wp-includes/Requests/library/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:05:31.224762 2026] [security2:error] [pid 1018003:tid 1018196] [client 20.48.160.90:62670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/class17.php"] [unique_id "apK8-zAh5Y1i2tUxg4HiowAABeU"]
[Sat Aug 29 05:05:31.226032 2026] [security2:error] [pid 1018003:tid 1018179] [client 93.123.109.228:36612] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/old/.env"] [unique_id "apK8-zAh5Y1i2tUxg4HipAAABdQ"]
[Sat Aug 29 05:05:31.229428 2026] [security2:error] [pid 1017536:tid 1017733] [client 20.104.18.15:23531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/zoo1.php"] [unique_id "apK8-yJcY4fy7tP-rU3nlgAAAlc"]
[Sat Aug 29 05:05:31.236123 2026] [security2:error] [pid 1017536:tid 1017766] [client 93.123.109.228:36778] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/opt/.env"] [unique_id "apK8-yJcY4fy7tP-rU3nmAAAAng"]
[Sat Aug 29 05:05:31.238708 2026] [security2:error] [pid 1017536:tid 1017687] [client 20.48.251.3:28491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/config/laravolt/css/index.php"] [unique_id "apK8-yJcY4fy7tP-rU3nmgAAAik"]
[Sat Aug 29 05:05:31.246233 2026] [security2:error] [pid 1018003:tid 1018151] [client 20.104.104.62:22676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/mcd.php"] [unique_id "apK8-zAh5Y1i2tUxg4HipgAABbg"]
[Sat Aug 29 05:05:31.266227 2026] [security2:error] [pid 1017536:tid 1017746] [client 158.158.54.35:10827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK8-yJcY4fy7tP-rU3nngAAAmQ"]
[Sat Aug 29 05:05:31.267821 2026] [security2:error] [pid 1017536:tid 1017686] [client 20.48.250.41:23480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/users.php"] [unique_id "apK8-yJcY4fy7tP-rU3nnwAAAig"]
[Sat Aug 29 05:05:31.269743 2026] [security2:error] [pid 1017536:tid 1017667] [client 20.48.250.41:65451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/amp.php"] [unique_id "apK8-yJcY4fy7tP-rU3noAAAAhU"]
[Sat Aug 29 05:05:31.277221 2026] [security2:error] [pid 1017536:tid 1017588] [remote 34.138.108.56:53920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "proppastie.com"] [uri "/app/.env"] [unique_id "apK8-yJcY4fy7tP-rU3npQACcjM"]
[Sat Aug 29 05:05:31.279233 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.104.18.15:13230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/radio.php"] [unique_id "apK8-yJcY4fy7tP-rU3npgAAAnk"]
[Sat Aug 29 05:05:31.280643 2026] [security2:error] [pid 1017536:tid 1017744] [client 20.104.18.15:8185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/img.php"] [unique_id "apK8-yJcY4fy7tP-rU3npwAAAmI"]
[Sat Aug 29 05:05:31.284384 2026] [security2:error] [pid 1018003:tid 1018152] [client 20.104.18.15:46974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/wp_blog_footer.php"] [unique_id "apK8-zAh5Y1i2tUxg4HiqgAABbk"]
[Sat Aug 29 05:05:31.287529 2026] [security2:error] [pid 1017536:tid 1017724] [client 20.48.250.41:12375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "employedlawyer.com"] [uri "/s1.php"] [unique_id "apK8-yJcY4fy7tP-rU3nqgAAAk4"]
[Sat Aug 29 05:05:31.311386 2026] [core:error] [pid 1017536:tid 1017694] [client 74.248.24.12:16573] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:31.311411 2026] [core:error] [pid 1017536:tid 1017694] [client 74.248.24.12:16573] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:31.321677 2026] [security2:error] [pid 1018003:tid 1018242] [client 20.196.209.81:4711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carolinashooter.lowfatdinnermenus.com"] [uri "/wp-content/languages/plugins/about.php"] [unique_id "apK8-zAh5Y1i2tUxg4HirAAABhI"]
[Sat Aug 29 05:05:31.330969 2026] [security2:error] [pid 1018003:tid 1018278] [client 68.155.159.216:16248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/ws.php"] [unique_id "apK8-zAh5Y1i2tUxg4HirgAABjY"]
[Sat Aug 29 05:05:31.335633 2026] [security2:error] [pid 1017536:tid 1017785] [client 20.48.251.3:13969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/thui.php"] [unique_id "apK8-yJcY4fy7tP-rU3nsAAAAos"]
[Sat Aug 29 05:05:31.336640 2026] [security2:error] [pid 1017536:tid 1017776] [client 127.0.0.1:52396] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "127.0.0.1"] [uri "/cgi-sys/autoconfig.cgi"] [unique_id "apK8-yJcY4fy7tP-rU3nnQAAAoI"]
[Sat Aug 29 05:05:31.336724 2026] [security2:error] [pid 1017536:tid 1017793] [client 127.0.0.1:52392] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "autoconfig.macaromedia.com"] [uri "/cgi-sys/autoconfig.cgi"] [unique_id "apK8-yJcY4fy7tP-rU3nnAAAApM"]
[Sat Aug 29 05:05:31.337143 2026] [security2:error] [pid 1017536:tid 1017741] [client 74.7.228.1:44172] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "autoconfig.macaromedia.com"] [uri "/robots.txt"] [unique_id "apK8-yJcY4fy7tP-rU3nmwACXzI"]
[Sat Aug 29 05:05:31.337955 2026] [security2:error] [pid 1017536:tid 1017680] [client 20.104.104.62:48454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/adin.php"] [unique_id "apK8-yJcY4fy7tP-rU3nsQAAAiI"]
[Sat Aug 29 05:05:31.344567 2026] [security2:error] [pid 1017536:tid 1017769] [client 20.104.18.15:7135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/she11.php"] [unique_id "apK8-yJcY4fy7tP-rU3nsgAAAns"]
[Sat Aug 29 05:05:31.345441 2026] [security2:error] [pid 1017536:tid 1017780] [client 20.104.104.62:40231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/backdoor.php"] [unique_id "apK8-yJcY4fy7tP-rU3nswAAAoY"]
[Sat Aug 29 05:05:31.346853 2026] [security2:error] [pid 1018003:tid 1018236] [client 20.104.104.62:10484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/dbc.php"] [unique_id "apK8-zAh5Y1i2tUxg4HirwAABgw"]
[Sat Aug 29 05:05:31.350144 2026] [security2:error] [pid 1017536:tid 1017758] [client 20.104.18.15:36838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/ano.php"] [unique_id "apK8-yJcY4fy7tP-rU3ntQAAAnA"]
[Sat Aug 29 05:05:31.352810 2026] [security2:error] [pid 1017536:tid 1017727] [client 20.48.250.41:27580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/wen.php"] [unique_id "apK8-yJcY4fy7tP-rU3ntgAAAlE"]
[Sat Aug 29 05:05:31.369589 2026] [security2:error] [pid 1017536:tid 1017723] [client 20.48.251.3:27171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/87.php"] [unique_id "apK8-yJcY4fy7tP-rU3ntwAAAk0"]
[Sat Aug 29 05:05:31.373698 2026] [security2:error] [pid 1017536:tid 1017751] [client 20.48.160.90:62598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/okxoby.php"] [unique_id "apK8-yJcY4fy7tP-rU3nuAAAAmk"]
[Sat Aug 29 05:05:31.378461 2026] [security2:error] [pid 1017536:tid 1017708] [client 185.104.184.230:56046] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.mcdcomputers.net"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "apK8-yJcY4fy7tP-rU3nuQAAAj4"]
[Sat Aug 29 05:05:31.383656 2026] [security2:error] [pid 1018003:tid 1018207] [client 4.232.148.111:20997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tiaandephraim.com"] [uri "/wp-content/admin.php"] [unique_id "apK8-zAh5Y1i2tUxg4HisAAABfA"]
[Sat Aug 29 05:05:31.383862 2026] [security2:error] [pid 1017536:tid 1017783] [client 20.104.18.15:23534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/radio.php"] [unique_id "apK8-yJcY4fy7tP-rU3nuwAAAok"]
[Sat Aug 29 05:05:31.385467 2026] [security2:error] [pid 1017536:tid 1017691] [client 20.104.104.62:41624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/waw.php"] [unique_id "apK8-yJcY4fy7tP-rU3nvQAAAi0"]
[Sat Aug 29 05:05:31.387995 2026] [security2:error] [pid 1017536:tid 1017703] [client 20.48.250.41:57683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/Geforce.php"] [unique_id "apK8-yJcY4fy7tP-rU3nvwAAAjk"]
[Sat Aug 29 05:05:31.391910 2026] [security2:error] [pid 1017536:tid 1017601] [remote 34.138.108.56:53920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "proppastie.com"] [uri "/frontend/.env"] [unique_id "apK8-yJcY4fy7tP-rU3nwAACF0A"]
[Sat Aug 29 05:05:31.409137 2026] [security2:error] [pid 1017536:tid 1017787] [client 192.145.125.70:35480] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "vickiandgreg.strangeworx.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "apK8-yJcY4fy7tP-rU3nwgAAAo0"]
[Sat Aug 29 05:05:31.413976 2026] [security2:error] [pid 1017536:tid 1017551] [remote 34.138.108.56:53920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "proppastie.com"] [uri "/server/.env"] [unique_id "apK8-yJcY4fy7tP-rU3nxQACYA4"]
[Sat Aug 29 05:05:31.416240 2026] [security2:error] [pid 1017536:tid 1017717] [client 45.148.10.59:57668] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.body.requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1600"] [id "900941"] [msg "Invalid nested WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.body.requests.requests.path=///"] [hostname "theverystuff.com"] [uri "/wp/"] [unique_id "apK8-yJcY4fy7tP-rU3nxwAAAkc"]
[Sat Aug 29 05:05:31.421511 2026] [security2:error] [pid 1017536:tid 1017745] [client 20.104.18.15:47032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/sushi.php"] [unique_id "apK8-yJcY4fy7tP-rU3nyAAAAmM"]
[Sat Aug 29 05:05:31.422129 2026] [security2:error] [pid 1017536:tid 1017716] [client 20.48.250.41:64239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/cc13.php"] [unique_id "apK8-yJcY4fy7tP-rU3nyQAAAkY"]
[Sat Aug 29 05:05:31.422761 2026] [security2:error] [pid 1017536:tid 1017711] [client 68.155.159.216:33762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK8-yJcY4fy7tP-rU3nygAAAkE"]
[Sat Aug 29 05:05:31.427983 2026] [security2:error] [pid 1018003:tid 1018180] [client 20.104.18.15:13198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/one.php"] [unique_id "apK8-zAh5Y1i2tUxg4HitQAABdU"]
[Sat Aug 29 05:05:31.428840 2026] [security2:error] [pid 1018003:tid 1018173] [client 20.48.250.41:12433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "employedlawyer.com"] [uri "/0byte.php"] [unique_id "apK8-zAh5Y1i2tUxg4HitgAABc4"]
[Sat Aug 29 05:05:31.435536 2026] [security2:error] [pid 1018003:tid 1018187] [client 45.148.10.246:23456] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.body.requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1600"] [id "900941"] [msg "Invalid nested WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.body.requests.requests.path=///"] [hostname "eastsidepride.com"] [uri "/blog/"] [unique_id "apK8-zAh5Y1i2tUxg4HitwAABdw"]
[Sat Aug 29 05:05:31.442041 2026] [security2:error] [pid 1017536:tid 1017756] [client 20.63.219.114:1673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/wxo.php"] [unique_id "apK8-yJcY4fy7tP-rU3nywAAAm4"]
[Sat Aug 29 05:05:31.445504 2026] [security2:error] [pid 1018003:tid 1018257] [client 168.107.94.195:50997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK8-zAh5Y1i2tUxg4HiuQAABiE"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:31.445551 2026] [security2:error] [pid 1018003:tid 1018230] [client 93.123.109.228:36754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/php-info.php"] [unique_id "apK8-zAh5Y1i2tUxg4HiuAAABgY"]
[Sat Aug 29 05:05:31.448309 2026] [security2:error] [pid 1017536:tid 1017678] [client 20.196.209.81:25036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/meta.php"] [unique_id "apK8-yJcY4fy7tP-rU3nzAAAAiA"]
[Sat Aug 29 05:05:31.453969 2026] [security2:error] [pid 1017536:tid 1017671] [client 20.104.18.15:8153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/222.php"] [unique_id "apK8-yJcY4fy7tP-rU3nzQAAAhk"]
[Sat Aug 29 05:05:31.457991 2026] [security2:error] [pid 1018003:tid 1018275] [client 93.123.109.228:37266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/php.php"] [unique_id "apK8-zAh5Y1i2tUxg4HiuwAABjM"]
[Sat Aug 29 05:05:31.459910 2026] [security2:error] [pid 1017536:tid 1017709] [client 93.123.109.228:36610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/php_info.php"] [unique_id "apK8-yJcY4fy7tP-rU3nzgAAAj8"]
[Sat Aug 29 05:05:31.460687 2026] [security2:error] [pid 1018003:tid 1018221] [client 93.123.109.228:36682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/phpinfo.php"] [unique_id "apK8-zAh5Y1i2tUxg4HivAAABf4"]
[Sat Aug 29 05:05:31.474928 2026] [security2:error] [pid 1017536:tid 1017596] [remote 34.138.108.56:53920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "proppastie.com"] [uri "/src/.env"] [unique_id "apK8-yJcY4fy7tP-rU3n0AACSjs"]
[Sat Aug 29 05:05:31.484746 2026] [security2:error] [pid 1017536:tid 1017772] [client 20.48.250.41:27646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/inc.php"] [unique_id "apK8-yJcY4fy7tP-rU3n0QAAAn4"]
[Sat Aug 29 05:05:31.485105 2026] [security2:error] [pid 1017536:tid 1017784] [client 20.196.209.81:12689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/configs.php"] [unique_id "apK8-yJcY4fy7tP-rU3n0gAAAoo"]
[Sat Aug 29 05:05:31.496069 2026] [security2:error] [pid 1017536:tid 1017707] [client 20.48.250.41:23433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/bzjdlofz.php"] [unique_id "apK8-yJcY4fy7tP-rU3n0wAAAj0"]
[Sat Aug 29 05:05:31.498735 2026] [security2:error] [pid 1017536:tid 1017771] [client 20.104.104.62:44594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/wp-wlx.php"] [unique_id "apK8-yJcY4fy7tP-rU3n1AAAAn0"]
[Sat Aug 29 05:05:31.499051 2026] [security2:error] [pid 1017536:tid 1017765] [client 20.48.251.3:27146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/plss3.php"] [unique_id "apK8-yJcY4fy7tP-rU3n1QAAAnc"]
[Sat Aug 29 05:05:31.503323 2026] [security2:error] [pid 1017536:tid 1017693] [client 20.104.18.15:36783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/mgrr.php"] [unique_id "apK8-yJcY4fy7tP-rU3n1wAAAi8"]
[Sat Aug 29 05:05:31.503344 2026] [security2:error] [pid 1018003:tid 1018172] [client 93.123.109.228:36660] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/portal/.env"] [unique_id "apK8-zAh5Y1i2tUxg4HivQAABc0"]
[Sat Aug 29 05:05:31.509546 2026] [security2:error] [pid 1017536:tid 1017668] [client 20.104.18.15:7084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/kerang.php"] [unique_id "apK8-yJcY4fy7tP-rU3n2AAAAhY"]
[Sat Aug 29 05:05:31.514310 2026] [security2:error] [pid 1018003:tid 1018189] [client 103.162.125.59:50869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.125.162.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK8-zAh5Y1i2tUxg4HivgAABd4"]
[Sat Aug 29 05:05:31.514430 2026] [security2:error] [pid 1018003:tid 1018189] [client 103.162.125.59:50869] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK8-zAh5Y1i2tUxg4HivgAABd4"]
[Sat Aug 29 05:05:31.518948 2026] [security2:error] [pid 1018003:tid 1018269] [client 20.104.104.62:22690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/x23.php"] [unique_id "apK8-zAh5Y1i2tUxg4HivwAABi0"]
[Sat Aug 29 05:05:31.519956 2026] [security2:error] [pid 1017536:tid 1017775] [client 20.104.18.15:23513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/one.php"] [unique_id "apK8-yJcY4fy7tP-rU3n2QAAAoE"]
[Sat Aug 29 05:05:31.524037 2026] [security2:error] [pid 1017536:tid 1017754] [client 20.48.160.90:62628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/esuutzzx.php"] [unique_id "apK8-yJcY4fy7tP-rU3n2gAAAmw"]
[Sat Aug 29 05:05:31.555882 2026] [security2:error] [pid 1017536:tid 1017541] [remote 34.138.108.56:53920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "proppastie.com"] [uri "/docker/.env"] [unique_id "apK8-yJcY4fy7tP-rU3n3QACXgQ"]
[Sat Aug 29 05:05:31.556059 2026] [security2:error] [pid 1018003:tid 1018270] [client 20.48.251.3:13957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/lala.php"] [unique_id "apK8-zAh5Y1i2tUxg4HiwQAABi4"]
[Sat Aug 29 05:05:31.559300 2026] [security2:error] [pid 1017536:tid 1017725] [client 93.123.109.228:37366] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/prod/.env"] [unique_id "apK8-yJcY4fy7tP-rU3n3gAAAk8"]
[Sat Aug 29 05:05:31.563536 2026] [security2:error] [pid 1017536:tid 1017683] [client 20.48.250.41:12374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "employedlawyer.com"] [uri "/xr.php"] [unique_id "apK8-yJcY4fy7tP-rU3n3wAAAiU"]
[Sat Aug 29 05:05:31.564234 2026] [security2:error] [pid 1017536:tid 1017761] [client 4.232.148.111:5896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/wp-content/file.php"] [unique_id "apK8-yJcY4fy7tP-rU3n4AAAAnM"]
[Sat Aug 29 05:05:31.564503 2026] [security2:error] [pid 1017536:tid 1017686] [client 20.104.49.130:30239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.carlosmua.com"] [uri "/worksec.php"] [unique_id "apK8-yJcY4fy7tP-rU3n4QAAAig"]
[Sat Aug 29 05:05:31.565288 2026] [security2:error] [pid 1018003:tid 1018255] [client 20.63.219.114:1545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/class_api.php"] [unique_id "apK8-zAh5Y1i2tUxg4HiwgAABh8"]
[Sat Aug 29 05:05:31.566618 2026] [security2:error] [pid 1017536:tid 1017653] [remote 34.138.108.56:53920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "proppastie.com"] [uri "/production/.env"] [unique_id "apK8-yJcY4fy7tP-rU3n4wACeXQ"]
[Sat Aug 29 05:05:31.576224 2026] [security2:error] [pid 1018003:tid 1018198] [client 20.104.18.15:13203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/503.php"] [unique_id "apK8-zAh5Y1i2tUxg4HiwwAABec"]
[Sat Aug 29 05:05:31.578908 2026] [security2:error] [pid 1018003:tid 1018241] [client 93.123.109.228:36654] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/product/.env"] [unique_id "apK8-zAh5Y1i2tUxg4HixAAABhE"]
[Sat Aug 29 05:05:31.582883 2026] [security2:error] [pid 1017536:tid 1017719] [client 20.48.250.41:61582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/aa.php"] [unique_id "apK8-yJcY4fy7tP-rU3n5QAAAkk"]
[Sat Aug 29 05:05:31.588416 2026] [security2:error] [pid 1017536:tid 1017734] [client 93.123.109.228:37378] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/production/.env"] [unique_id "apK8-yJcY4fy7tP-rU3n5gAAAlg"]
[Sat Aug 29 05:05:31.594110 2026] [security2:error] [pid 1017536:tid 1017694] [client 20.48.250.41:61793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/click.php"] [unique_id "apK8-yJcY4fy7tP-rU3n5wAAAjA"]
[Sat Aug 29 05:05:31.597040 2026] [security2:error] [pid 1018003:tid 1018277] [client 20.104.18.15:47050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/manga.php"] [unique_id "apK8-zAh5Y1i2tUxg4HixgAABjU"]
[Sat Aug 29 05:05:31.598489 2026] [security2:error] [pid 1018003:tid 1018160] [client 45.148.10.62:38648] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.vvr.ewu.mybluehost.me"] [uri "/backend/.env"] [unique_id "apK8-zAh5Y1i2tUxg4HixwAABcE"]
[Sat Aug 29 05:05:31.601284 2026] [security2:error] [pid 1017536:tid 1017561] [remote 34.138.108.56:53920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "proppastie.com"] [uri "/staging/.env"] [unique_id "apK8-yJcY4fy7tP-rU3n6AACZRg"]
[Sat Aug 29 05:05:31.606563 2026] [security2:error] [pid 1018003:tid 1018155] [client 20.104.18.15:8073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/key.php"] [unique_id "apK8-zAh5Y1i2tUxg4HiyAAABbw"]
[Sat Aug 29 05:05:31.607594 2026] [security2:error] [pid 1018003:tid 1018224] [client 93.123.109.228:36714] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/project/.env"] [unique_id "apK8-zAh5Y1i2tUxg4HiyQAABgE"]
[Sat Aug 29 05:05:31.613523 2026] [security2:error] [pid 1017536:tid 1017741] [client 20.104.104.62:47595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/andela.php"] [unique_id "apK8-yJcY4fy7tP-rU3n6gAAAl8"]
[Sat Aug 29 05:05:31.623932 2026] [security2:error] [pid 1017536:tid 1017755] [client 20.48.250.41:27519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/6bcwiqwj.php"] [unique_id "apK8-yJcY4fy7tP-rU3n7AAAAm0"]
[Sat Aug 29 05:05:31.626316 2026] [security2:error] [pid 1018003:tid 1018199] [client 93.123.109.228:36728] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/public-api/.env"] [unique_id "apK8-zAh5Y1i2tUxg4HiygAABeg"]
[Sat Aug 29 05:05:31.626780 2026] [security2:error] [pid 1017536:tid 1017666] [client 20.48.251.3:57848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/aws.php"] [unique_id "apK8-yJcY4fy7tP-rU3n7QAAAhQ"]
[Sat Aug 29 05:05:31.630740 2026] [security2:error] [pid 1017536:tid 1017688] [client 93.123.109.228:37302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/public/phpinfo.php"] [unique_id "apK8-yJcY4fy7tP-rU3n7wAAAio"]
[Sat Aug 29 05:05:31.632066 2026] [security2:error] [pid 1017536:tid 1017758] [client 93.123.109.228:36702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/public/.env"] [unique_id "apK8-yJcY4fy7tP-rU3n7gAAAnA"]
[Sat Aug 29 05:05:31.641009 2026] [security2:error] [pid 1017536:tid 1017692] [client 20.104.104.62:10476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/attack.php"] [unique_id "apK8-yJcY4fy7tP-rU3n8AAAAi4"]
[Sat Aug 29 05:05:31.647765 2026] [security2:error] [pid 1018003:tid 1018205] [client 20.104.18.15:7047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/m.php"] [unique_id "apK8-zAh5Y1i2tUxg4HiywAABe4"]
[Sat Aug 29 05:05:31.658522 2026] [security2:error] [pid 1018003:tid 1018248] [client 20.48.160.90:63542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/replace.php"] [unique_id "apK8-zAh5Y1i2tUxg4HizQAABhg"]
[Sat Aug 29 05:05:31.665217 2026] [security2:error] [pid 1017536:tid 1017753] [client 93.123.109.228:37264] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/public_html/.env"] [unique_id "apK8-yJcY4fy7tP-rU3n8QAAAms"]
[Sat Aug 29 05:05:31.669289 2026] [security2:error] [pid 1017536:tid 1017589] [remote 34.138.108.56:53920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "proppastie.com"] [uri "/apps/.env"] [unique_id "apK8-yJcY4fy7tP-rU3n8wACVTQ"]
[Sat Aug 29 05:05:31.671321 2026] [core:error] [pid 1017536:tid 1017774] [client 74.248.24.12:5302] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:31.671333 2026] [core:error] [pid 1017536:tid 1017774] [client 74.248.24.12:5302] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:31.671958 2026] [security2:error] [pid 1018003:tid 1018220] [client 185.104.184.230:56056] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.mcdcomputers.net"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "apK8-zAh5Y1i2tUxg4Hi0AAABf0"]
[Sat Aug 29 05:05:31.679142 2026] [security2:error] [pid 1018003:tid 1018252] [client 45.3.47.190:62731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 190.47.3.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK8-zAh5Y1i2tUxg4HizAAABhw"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:31.683376 2026] [security2:error] [pid 1018003:tid 1018181] [client 20.48.250.41:23425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/selesai.php"] [unique_id "apK8-zAh5Y1i2tUxg4Hi0wAABdY"]
[Sat Aug 29 05:05:31.697745 2026] [security2:error] [pid 1018003:tid 1018260] [client 20.104.18.15:36751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/mac.php"] [unique_id "apK8-zAh5Y1i2tUxg4Hi1AAABiQ"]
[Sat Aug 29 05:05:31.699267 2026] [security2:error] [pid 1017536:tid 1017751] [client 20.104.18.15:23433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/503.php"] [unique_id "apK8-yJcY4fy7tP-rU3n9gAAAmk"]
[Sat Aug 29 05:05:31.699374 2026] [security2:error] [pid 1018003:tid 1018154] [client 158.158.54.35:23950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-good.php"] [unique_id "apK8-zAh5Y1i2tUxg4Hi1QAABbs"]
[Sat Aug 29 05:05:31.700220 2026] [security2:error] [pid 1017536:tid 1017708] [client 93.123.109.228:36644] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/qa/.env"] [unique_id "apK8-yJcY4fy7tP-rU3n9QAAAj4"]
[Sat Aug 29 05:05:31.701063 2026] [security2:error] [pid 1018003:tid 1018217] [client 20.104.104.62:48598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/sf9.php"] [unique_id "apK8-zAh5Y1i2tUxg4Hi1gAABfo"]
[Sat Aug 29 05:05:31.705919 2026] [security2:error] [pid 1017536:tid 1017691] [client 20.104.104.62:54539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/ws66.php"] [unique_id "apK8-yJcY4fy7tP-rU3n9wAAAi0"]
[Sat Aug 29 05:05:31.709495 2026] [security2:error] [pid 1017536:tid 1017669] [client 20.104.18.15:13305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/504.php"] [unique_id "apK8-yJcY4fy7tP-rU3n-AAAAhc"]
[Sat Aug 29 05:05:31.710734 2026] [security2:error] [pid 1017536:tid 1017781] [client 20.48.250.41:12312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "employedlawyer.com"] [uri "/h02ugyh.php"] [unique_id "apK8-yJcY4fy7tP-rU3n-QAAAoc"]
[Sat Aug 29 05:05:31.720852 2026] [security2:error] [pid 1017536:tid 1017773] [client 20.48.250.41:64933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/s1.php"] [unique_id "apK8-yJcY4fy7tP-rU3n-wAAAn8"]
[Sat Aug 29 05:05:31.725297 2026] [security2:error] [pid 1017536:tid 1017742] [client 20.48.250.41:57665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/ms.php"] [unique_id "apK8-yJcY4fy7tP-rU3n_AAAAmA"]
[Sat Aug 29 05:05:31.736987 2026] [security2:error] [pid 1017536:tid 1017737] [client 68.155.159.216:12250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/admin.php"] [unique_id "apK8-yJcY4fy7tP-rU3n_QAAAls"]
[Sat Aug 29 05:05:31.747242 2026] [security2:error] [pid 1018003:tid 1018157] [client 45.148.10.62:38648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vvr.ewu.mybluehost.me"] [uri "/test.php"] [unique_id "apK8-zAh5Y1i2tUxg4Hi2gAABb4"]
[Sat Aug 29 05:05:31.747960 2026] [security2:error] [pid 1017536:tid 1017557] [remote 34.138.108.56:53920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "proppastie.com"] [uri "/v1/.env"] [unique_id "apK8-yJcY4fy7tP-rU3oAQACQRQ"]
[Sat Aug 29 05:05:31.755665 2026] [security2:error] [pid 1018003:tid 1018226] [client 20.48.251.3:27162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/app.default.php"] [unique_id "apK8-zAh5Y1i2tUxg4Hi2wAABgM"]
[Sat Aug 29 05:05:31.759295 2026] [security2:error] [pid 1018003:tid 1018212] [client 20.48.250.41:26884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/easy.php"] [unique_id "apK8-zAh5Y1i2tUxg4Hi3AAABfU"]
[Sat Aug 29 05:05:31.770858 2026] [security2:error] [pid 1018003:tid 1018267] [client 20.104.104.62:10455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/file66.php"] [unique_id "apK8-zAh5Y1i2tUxg4Hi3gAABis"]
[Sat Aug 29 05:05:31.780240 2026] [security2:error] [pid 1017536:tid 1017704] [client 45.148.10.59:57668] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.body.requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1600"] [id "900941"] [msg "Invalid nested WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.body.requests.requests.path=///"] [hostname "theverystuff.com"] [uri "/wordpress/"] [unique_id "apK8-yJcY4fy7tP-rU3oAgAAAjo"]
[Sat Aug 29 05:05:31.784381 2026] [security2:error] [pid 1017536:tid 1017671] [client 68.155.159.216:50206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/content.php"] [unique_id "apK8-yJcY4fy7tP-rU3oBAAAAhk"]
[Sat Aug 29 05:05:31.786091 2026] [security2:error] [pid 1017536:tid 1017715] [client 158.23.147.79:58880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/ans.php"] [unique_id "apK8-yJcY4fy7tP-rU3oBQAAAkU"]
[Sat Aug 29 05:05:31.789200 2026] [security2:error] [pid 1017536:tid 1017695] [client 20.48.160.90:64744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/gulu.php"] [unique_id "apK8-yJcY4fy7tP-rU3oBgAAAjE"]
[Sat Aug 29 05:05:31.792319 2026] [security2:error] [pid 1018003:tid 1018233] [client 20.48.251.3:13985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/wsws.php"] [unique_id "apK8-zAh5Y1i2tUxg4Hi4QAABgk"]
[Sat Aug 29 05:05:31.804074 2026] [security2:error] [pid 1017536:tid 1017771] [client 20.104.18.15:7095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/fling.php"] [unique_id "apK8-yJcY4fy7tP-rU3oCAAAAn0"]
[Sat Aug 29 05:05:31.809809 2026] [security2:error] [pid 1017536:tid 1017562] [remote 34.138.108.56:53920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "proppastie.com"] [uri "/old/.env"] [unique_id "apK8-yJcY4fy7tP-rU3oCgACdxk"]
[Sat Aug 29 05:05:31.814172 2026] [security2:error] [pid 1017536:tid 1017558] [remote 34.138.108.56:53920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "proppastie.com"] [uri "/dev/.env"] [unique_id "apK8-yJcY4fy7tP-rU3oDQACFhU"]
[Sat Aug 29 05:05:31.822088 2026] [security2:error] [pid 1017536:tid 1017721] [client 20.104.18.15:8076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/chosen.php"] [unique_id "apK8-yJcY4fy7tP-rU3oDgAAAks"]
[Sat Aug 29 05:05:31.825171 2026] [security2:error] [pid 1017536:tid 1017786] [client 168.107.94.195:51444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK8-yJcY4fy7tP-rU3oEAAAAow"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:31.825733 2026] [security2:error] [pid 1017536:tid 1017595] [remote 34.138.108.56:53920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "proppastie.com"] [uri "/portal/.env"] [unique_id "apK8-yJcY4fy7tP-rU3oDwACUzo"]
[Sat Aug 29 05:05:31.836916 2026] [core:error] [pid 1018003:tid 1018203] [client 74.248.24.12:21785] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:31.836936 2026] [core:error] [pid 1018003:tid 1018203] [client 74.248.24.12:21785] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:31.840402 2026] [security2:error] [pid 1018003:tid 1018191] [client 20.48.250.41:12431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "employedlawyer.com"] [uri "/xxw.php"] [unique_id "apK8-zAh5Y1i2tUxg4Hi6AAABeA"]
[Sat Aug 29 05:05:31.841402 2026] [security2:error] [pid 1017536:tid 1017567] [remote 34.138.108.56:53920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "proppastie.com"] [uri "/v2/.env"] [unique_id "apK8-yJcY4fy7tP-rU3oEwACVx4"]
[Sat Aug 29 05:05:31.841574 2026] [security2:error] [pid 1017536:tid 1017679] [client 20.104.104.62:22713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/Cok.php"] [unique_id "apK8-yJcY4fy7tP-rU3oFAAAAiE"]
[Sat Aug 29 05:05:31.843187 2026] [security2:error] [pid 1017536:tid 1017687] [client 20.104.18.15:13269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/admin.php"] [unique_id "apK8-yJcY4fy7tP-rU3oFQAAAik"]
[Sat Aug 29 05:05:31.844504 2026] [security2:error] [pid 1017536:tid 1017738] [client 20.63.219.114:1693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/as.php"] [unique_id "apK8-yJcY4fy7tP-rU3oFgAAAlw"]
[Sat Aug 29 05:05:31.846047 2026] [security2:error] [pid 1017536:tid 1017722] [client 20.196.209.81:25058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/dxc.php"] [unique_id "apK8-yJcY4fy7tP-rU3oFwAAAkw"]
[Sat Aug 29 05:05:31.852845 2026] [security2:error] [pid 1018003:tid 1018239] [client 4.205.62.107:64923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/wp-konfig.backup.php"] [unique_id "apK8-zAh5Y1i2tUxg4Hi6QAABg8"]
[Sat Aug 29 05:05:31.867981 2026] [security2:error] [pid 1017536:tid 1017670] [client 34.12.38.134:40670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/___proxy_subdomain_cpcontacts/web.config"] [unique_id "apK8-yJcY4fy7tP-rU3oGgAAAhg"]
[Sat Aug 29 05:05:31.869275 2026] [security2:error] [pid 1018003:tid 1018263] [client 20.104.18.15:47099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/asdfghj.php"] [unique_id "apK8-zAh5Y1i2tUxg4Hi6gAABic"]
[Sat Aug 29 05:05:31.869885 2026] [security2:error] [pid 1018003:tid 1018246] [client 20.104.104.62:20848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/jkt48.php"] [unique_id "apK8-zAh5Y1i2tUxg4Hi6wAABhY"]
[Sat Aug 29 05:05:31.872088 2026] [security2:error] [pid 1017536:tid 1017746] [client 4.205.62.107:54456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "troop264olney.net"] [uri "/txets.php"] [unique_id "apK8-yJcY4fy7tP-rU3oGwAAAmQ"]
[Sat Aug 29 05:05:31.880249 2026] [security2:error] [pid 1017536:tid 1017698] [client 20.48.250.41:23514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/shlo.php"] [unique_id "apK8-yJcY4fy7tP-rU3oIQAAAjQ"]
[Sat Aug 29 05:05:31.884499 2026] [core:error] [pid 1017536:tid 1017787] [client 34.12.38.134:40678] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:31.884514 2026] [core:error] [pid 1017536:tid 1017787] [client 34.12.38.134:40678] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:31.886291 2026] [security2:error] [pid 1017536:tid 1017672] [client 20.196.209.81:21108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/disagraeed.php"] [unique_id "apK8-yJcY4fy7tP-rU3oJAAAAho"]
[Sat Aug 29 05:05:31.892463 2026] [security2:error] [pid 1017536:tid 1017749] [client 20.104.18.15:23517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/504.php"] [unique_id "apK8-yJcY4fy7tP-rU3oJwAAAmc"]
[Sat Aug 29 05:05:31.896028 2026] [security2:error] [pid 1018003:tid 1018194] [client 20.48.251.3:27158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/app_local.php"] [unique_id "apK8-zAh5Y1i2tUxg4Hi8gAABeM"]
[Sat Aug 29 05:05:31.896066 2026] [security2:error] [pid 1018003:tid 1018188] [client 20.104.18.15:36777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/simple.php"] [unique_id "apK8-zAh5Y1i2tUxg4Hi8wAABd0"]
[Sat Aug 29 05:05:31.899161 2026] [security2:error] [pid 1017536:tid 1017685] [client 20.48.250.41:58518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/zxekqlxb.php"] [unique_id "apK8-yJcY4fy7tP-rU3oKgAAAic"]
[Sat Aug 29 05:05:31.900342 2026] [security2:error] [pid 1017536:tid 1017694] [client 20.104.104.62:44607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/zafir1.php"] [unique_id "apK8-yJcY4fy7tP-rU3oLAAAAjA"]
[Sat Aug 29 05:05:31.903670 2026] [security2:error] [pid 1018003:tid 1018164] [client 20.48.250.41:26938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/fresh3.php"] [unique_id "apK8-zAh5Y1i2tUxg4Hi9AAABcU"]
[Sat Aug 29 05:05:31.906722 2026] [core:error] [pid 1017536:tid 1017777] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:31.906747 2026] [core:error] [pid 1017536:tid 1017777] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:31.916424 2026] [security2:error] [pid 1018003:tid 1018170] [client 34.12.38.134:40780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 134.38.12.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/configuration.php.bak"] [unique_id "apK8-zAh5Y1i2tUxg4Hi-gAABcs"]
[Sat Aug 29 05:05:31.917786 2026] [security2:error] [pid 1017536:tid 1017783] [client 4.232.148.111:32737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tiaandephraim.com"] [uri "/wp-configs.php"] [unique_id "apK8-yJcY4fy7tP-rU3oLQAAAok"]
[Sat Aug 29 05:05:31.922400 2026] [core:error] [pid 1018003:tid 1018223] [client 34.12.38.134:40782] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:31.922431 2026] [core:error] [pid 1018003:tid 1018223] [client 34.12.38.134:40782] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:31.922630 2026] [core:error] [pid 1017536:tid 1017777] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:31.922643 2026] [core:error] [pid 1017536:tid 1017777] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:31.922789 2026] [security2:error] [pid 1017536:tid 1017606] [remote 34.138.108.56:53920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "proppastie.com"] [uri "/site/.env"] [unique_id "apK8-yJcY4fy7tP-rU3oLwACbUU"]
[Sat Aug 29 05:05:31.934506 2026] [core:error] [pid 1017536:tid 1017710] [client 34.12.38.134:40788] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:31.934532 2026] [core:error] [pid 1017536:tid 1017710] [client 34.12.38.134:40788] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:31.936108 2026] [security2:error] [pid 1017536:tid 1017681] [client 20.48.250.41:64988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/0byte.php"] [unique_id "apK8-yJcY4fy7tP-rU3oNQAAAiM"]
[Sat Aug 29 05:05:31.939495 2026] [core:error] [pid 1018003:tid 1018222] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:31.939516 2026] [core:error] [pid 1018003:tid 1018222] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:31.950046 2026] [core:error] [pid 1018003:tid 1018197] [client 34.12.38.134:40768] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:31.950071 2026] [core:error] [pid 1018003:tid 1018197] [client 34.12.38.134:40768] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:31.950822 2026] [security2:error] [pid 1017536:tid 1017778] [client 20.48.160.90:63544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/gtghklk.php"] [unique_id "apK8-yJcY4fy7tP-rU3oOAAAAoQ"]
[Sat Aug 29 05:05:31.954338 2026] [security2:error] [pid 1018003:tid 1018186] [client 20.48.251.3:13993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/localconf.php"] [unique_id "apK8-zAh5Y1i2tUxg4Hi_QAABds"]
[Sat Aug 29 05:05:31.954902 2026] [core:error] [pid 1017536:tid 1017769] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:31.954922 2026] [core:error] [pid 1017536:tid 1017769] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:31.957010 2026] [core:error] [pid 1017536:tid 1017772] [client 34.12.38.134:40800] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:31.957026 2026] [core:error] [pid 1017536:tid 1017772] [client 34.12.38.134:40800] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:31.958323 2026] [security2:error] [pid 1017536:tid 1017710] [client 34.12.38.134:40788] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/___proxy_subdomain_cpcontacts/index.php"] [unique_id "apK8-yJcY4fy7tP-rU3oMQAAAkA"]
[Sat Aug 29 05:05:31.962940 2026] [core:error] [pid 1017536:tid 1017739] [client 34.12.38.134:40790] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:31.962961 2026] [core:error] [pid 1017536:tid 1017739] [client 34.12.38.134:40790] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:31.963239 2026] [security2:error] [pid 1017536:tid 1017757] [client 20.63.219.114:1695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/aksinet.php"] [unique_id "apK8-yJcY4fy7tP-rU3oPQAAAm8"]
[Sat Aug 29 05:05:31.964973 2026] [security2:error] [pid 1017536:tid 1017727] [client 20.104.18.15:7161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/btyuio.php"] [unique_id "apK8-yJcY4fy7tP-rU3oPwAAAlE"]
[Sat Aug 29 05:05:31.966951 2026] [core:error] [pid 1017536:tid 1017683] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:31.966968 2026] [core:error] [pid 1017536:tid 1017683] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:31.967061 2026] [core:error] [pid 1017536:tid 1017764] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:31.967073 2026] [core:error] [pid 1017536:tid 1017764] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:31.967191 2026] [security2:error] [pid 1017536:tid 1017764] [client 34.12.38.134:0] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/___proxy_subdomain_cpcontacts/index.php"] [unique_id "apK8-yJcY4fy7tP-rU3oPgAAAnY"]
[Sat Aug 29 05:05:31.970890 2026] [core:error] [pid 1017536:tid 1017731] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:31.970906 2026] [core:error] [pid 1017536:tid 1017731] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:31.972537 2026] [security2:error] [pid 1017536:tid 1017700] [client 20.104.18.15:8173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/file1221.php"] [unique_id "apK8-yJcY4fy7tP-rU3oQQAAAjY"]
[Sat Aug 29 05:05:31.973373 2026] [security2:error] [pid 1017536:tid 1017743] [client 20.104.104.62:41651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/X7T6.php"] [unique_id "apK8-yJcY4fy7tP-rU3oQgAAAmE"]
[Sat Aug 29 05:05:31.973446 2026] [security2:error] [pid 1017536:tid 1017717] [client 34.12.38.134:40724] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/___proxy_subdomain_cpcontacts/ssl/server.key"] [unique_id "apK8-yJcY4fy7tP-rU3oJgAAAkc"]
[Sat Aug 29 05:05:31.973735 2026] [security2:error] [pid 1018003:tid 1018035] [remote 162.55.89.48:36626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 48.89.55.162.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dmisner.net"] [uri "/wp-login.php"] [unique_id "apK8-zAh5Y1i2tUxg4Hi_gAFvQ4"]
[Sat Aug 29 05:05:31.978427 2026] [security2:error] [pid 1017536:tid 1017716] [client 4.205.62.107:21872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/v1.php"] [unique_id "apK8-yJcY4fy7tP-rU3oRQAAAkY"]
[Sat Aug 29 05:05:31.978499 2026] [security2:error] [pid 1017536:tid 1017792] [client 145.239.10.137:47353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.10.239.145.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "woosigns.com"] [uri "/ultra-enc.php"] [unique_id "apK8-yJcY4fy7tP-rU3oRgAAApI"], referer: http://woosigns.com/ultra-enc.php
[Sat Aug 29 05:05:31.982210 2026] [core:error] [pid 1017536:tid 1017737] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:31.982226 2026] [core:error] [pid 1017536:tid 1017737] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:31.986125 2026] [security2:error] [pid 1018003:tid 1018257] [client 158.23.147.79:48172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK8-zAh5Y1i2tUxg4HjAAAABiE"]
[Sat Aug 29 05:05:31.987131 2026] [security2:error] [pid 1017536:tid 1017756] [client 68.155.159.216:62882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.gavirestaurant.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK8-yJcY4fy7tP-rU3oSAAAAm4"]
[Sat Aug 29 05:05:31.988063 2026] [security2:error] [pid 1017536:tid 1017684] [client 20.104.18.15:13299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/ws85.php"] [unique_id "apK8-yJcY4fy7tP-rU3oSQAAAiY"]
[Sat Aug 29 05:05:31.996224 2026] [security2:error] [pid 1017536:tid 1017715] [client 20.48.250.41:12354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "employedlawyer.com"] [uri "/bolt.php"] [unique_id "apK8-yJcY4fy7tP-rU3oSgAAAkU"]
[Sat Aug 29 05:05:31.998988 2026] [security2:error] [pid 1017536:tid 1017703] [client 192.145.125.70:35496] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "vickiandgreg.strangeworx.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "apK8-yJcY4fy7tP-rU3oSwAAAjk"]
[Sat Aug 29 05:05:32.018629 2026] [security2:error] [pid 1017536:tid 1017771] [client 158.23.147.79:25537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/file17.php"] [unique_id "apK8_CJcY4fy7tP-rU3oTgAAAn0"]
[Sat Aug 29 05:05:32.025166 2026] [security2:error] [pid 1017536:tid 1017748] [client 111.235.68.106:53633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK8_CJcY4fy7tP-rU3oTwAAAmY"]
[Sat Aug 29 05:05:32.025291 2026] [security2:error] [pid 1017536:tid 1017748] [client 111.235.68.106:53633] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK8_CJcY4fy7tP-rU3oTwAAAmY"]
[Sat Aug 29 05:05:32.026319 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.48.251.3:27151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/ws62.php"] [unique_id "apK8_CJcY4fy7tP-rU3oUAAAAlY"]
[Sat Aug 29 05:05:32.041794 2026] [security2:error] [pid 1017536:tid 1017693] [client 93.123.109.228:36644] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/s3/.env.bak"] [unique_id "apK8_CJcY4fy7tP-rU3oUQAAAi8"]
[Sat Aug 29 05:05:32.042055 2026] [security2:error] [pid 1017536:tid 1017733] [client 20.104.104.62:44553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/console.php"] [unique_id "apK8_CJcY4fy7tP-rU3oUgAAAlc"]
[Sat Aug 29 05:05:32.043270 2026] [security2:error] [pid 1017536:tid 1017679] [client 20.104.104.62:20702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/gaza.php"] [unique_id "apK8_CJcY4fy7tP-rU3oUwAAAiE"]
[Sat Aug 29 05:05:32.043656 2026] [security2:error] [pid 1018003:tid 1018161] [client 4.232.148.111:32354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/files.php"] [unique_id "apK8_DAh5Y1i2tUxg4HjBQAABcI"]
[Sat Aug 29 05:05:32.048115 2026] [security2:error] [pid 1017536:tid 1017705] [client 20.104.18.15:23476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/admin.php"] [unique_id "apK8_CJcY4fy7tP-rU3oVQAAAjs"]
[Sat Aug 29 05:05:32.059134 2026] [security2:error] [pid 1017536:tid 1017775] [client 20.48.250.41:23364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/asax.php"] [unique_id "apK8_CJcY4fy7tP-rU3oVgAAAoE"]
[Sat Aug 29 05:05:32.066330 2026] [security2:error] [pid 1017536:tid 1017698] [client 20.104.18.15:47022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/dragonshell.php"] [unique_id "apK8_CJcY4fy7tP-rU3oVwAAAjQ"]
[Sat Aug 29 05:05:32.074435 2026] [security2:error] [pid 1017536:tid 1017749] [client 20.48.250.41:27594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/bgymj.php"] [unique_id "apK8_CJcY4fy7tP-rU3oWAAAAmc"]
[Sat Aug 29 05:05:32.087554 2026] [security2:error] [pid 1017536:tid 1017694] [client 158.23.147.79:24547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-login.php"] [unique_id "apK8_CJcY4fy7tP-rU3oWQAAAjA"]
[Sat Aug 29 05:05:32.091086 2026] [security2:error] [pid 1017536:tid 1017793] [client 20.48.251.3:14272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/bengi.php"] [unique_id "apK8_CJcY4fy7tP-rU3oWgAAApM"]
[Sat Aug 29 05:05:32.094228 2026] [security2:error] [pid 1017536:tid 1017783] [client 20.104.18.15:36704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/xty.php"] [unique_id "apK8_CJcY4fy7tP-rU3oWwAAAok"]
[Sat Aug 29 05:05:32.100659 2026] [security2:error] [pid 1018003:tid 1018255] [client 20.48.250.41:58540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/init.php"] [unique_id "apK8_DAh5Y1i2tUxg4HjCAAABh8"]
[Sat Aug 29 05:05:32.101288 2026] [security2:error] [pid 1017536:tid 1017681] [client 20.48.160.90:62636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/comand.php"] [unique_id "apK8_CJcY4fy7tP-rU3oXQAAAiM"]
[Sat Aug 29 05:05:32.102929 2026] [security2:error] [pid 1017536:tid 1017692] [client 20.104.104.62:41637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/see.php"] [unique_id "apK8_CJcY4fy7tP-rU3oXgAAAi4"]
[Sat Aug 29 05:05:32.120024 2026] [security2:error] [pid 1017536:tid 1017723] [client 20.104.18.15:8164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/nox.php"] [unique_id "apK8_CJcY4fy7tP-rU3oYAAAAk0"]
[Sat Aug 29 05:05:32.121059 2026] [security2:error] [pid 1017536:tid 1017751] [client 4.205.62.107:53425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/hosty.php"] [unique_id "apK8_CJcY4fy7tP-rU3oYQAAAmk"]
[Sat Aug 29 05:05:32.127923 2026] [security2:error] [pid 1017536:tid 1017769] [client 20.48.250.41:12423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "employedlawyer.com"] [uri "/rtx.php"] [unique_id "apK8_CJcY4fy7tP-rU3oYgAAAns"]
[Sat Aug 29 05:05:32.132931 2026] [security2:error] [pid 1017536:tid 1017683] [client 20.104.18.15:13209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/ffs.php"] [unique_id "apK8_CJcY4fy7tP-rU3oZAAAAiU"]
[Sat Aug 29 05:05:32.142911 2026] [security2:error] [pid 1017536:tid 1017719] [client 20.104.18.15:7056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/dehnl.php"] [unique_id "apK8_CJcY4fy7tP-rU3oZQAAAkk"]
[Sat Aug 29 05:05:32.146607 2026] [security2:error] [pid 1017536:tid 1017720] [client 158.158.54.35:11043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "apK8_CJcY4fy7tP-rU3oZgAAAko"]
[Sat Aug 29 05:05:32.149141 2026] [security2:error] [pid 1017536:tid 1017758] [client 158.23.147.79:63847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/sad/about.php"] [unique_id "apK8_CJcY4fy7tP-rU3oZwAAAnA"]
[Sat Aug 29 05:05:32.153792 2026] [security2:error] [pid 1017536:tid 1017724] [client 20.48.251.3:28462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/grsiuk.php"] [unique_id "apK8_CJcY4fy7tP-rU3oaAAAAk4"]
[Sat Aug 29 05:05:32.154508 2026] [security2:error] [pid 1017536:tid 1017696] [client 66.248.203.2:52442] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cheerfulmonk.com"] [uri "/2011/07/11/moving-right-along/"] [unique_id "apK8_CJcY4fy7tP-rU3oaQAAAjI"]
[Sat Aug 29 05:05:32.166653 2026] [security2:error] [pid 1017536:tid 1017742] [client 4.205.62.107:21843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/radio.php"] [unique_id "apK8_CJcY4fy7tP-rU3obAAAAmA"]
[Sat Aug 29 05:05:32.167982 2026] [security2:error] [pid 1017536:tid 1017776] [client 93.123.109.228:36702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/server/api/.env"] [unique_id "apK8_CJcY4fy7tP-rU3oawAAAoI"]
[Sat Aug 29 05:05:32.168694 2026] [security2:error] [pid 1018003:tid 1018193] [client 93.123.109.228:36692] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/server/.env"] [unique_id "apK8_DAh5Y1i2tUxg4HjDAAABeI"]
[Sat Aug 29 05:05:32.174152 2026] [security2:error] [pid 1017536:tid 1017737] [client 45.148.10.59:57668] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.body.requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1600"] [id "900941"] [msg "Invalid nested WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.body.requests.requests.path=///"] [hostname "theverystuff.com"] [uri "/blog/"] [unique_id "apK8_CJcY4fy7tP-rU3obQAAAls"]
[Sat Aug 29 05:05:32.179231 2026] [security2:error] [pid 1017536:tid 1017736] [client 20.104.104.62:44551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/blnux.php"] [unique_id "apK8_CJcY4fy7tP-rU3obwAAAlo"]
[Sat Aug 29 05:05:32.185501 2026] [security2:error] [pid 1018003:tid 1018206] [client 20.48.250.41:62218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/xr.php"] [unique_id "apK8_DAh5Y1i2tUxg4HjDwAABe8"]
[Sat Aug 29 05:05:32.192990 2026] [security2:error] [pid 1017536:tid 1017726] [client 74.248.24.12:8966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/wp-includes/admin.php"] [unique_id "apK8_CJcY4fy7tP-rU3ocQAAAlA"]
[Sat Aug 29 05:05:32.197588 2026] [security2:error] [pid 1017536:tid 1017615] [remote 34.138.108.56:53920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "proppastie.com"] [uri "/.docker/.env"] [unique_id "apK8_CJcY4fy7tP-rU3ocgACIE4"]
[Sat Aug 29 05:05:32.201288 2026] [security2:error] [pid 1017536:tid 1017761] [client 20.63.219.114:10055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/room.php"] [unique_id "apK8_CJcY4fy7tP-rU3odQAAAnM"]
[Sat Aug 29 05:05:32.201335 2026] [security2:error] [pid 1017536:tid 1017709] [client 93.123.109.228:37378] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/server/backend/.env"] [unique_id "apK8_CJcY4fy7tP-rU3ocwAAAj8"]
[Sat Aug 29 05:05:32.201695 2026] [security2:error] [pid 1017536:tid 1017715] [client 4.205.62.107:65525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/min.php"] [unique_id "apK8_CJcY4fy7tP-rU3odwAAAkU"]
[Sat Aug 29 05:05:32.203502 2026] [security2:error] [pid 1017536:tid 1017571] [remote 34.138.108.56:53920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "proppastie.com"] [uri "/env.old"] [unique_id "apK8_CJcY4fy7tP-rU3odgACJiI"]
[Sat Aug 29 05:05:32.204628 2026] [security2:error] [pid 1017536:tid 1017564] [remote 34.138.108.56:53920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "proppastie.com"] [uri "/.env.production.bak"] [unique_id "apK8_CJcY4fy7tP-rU3oeAACJhs"]
[Sat Aug 29 05:05:32.207130 2026] [security2:error] [pid 1017536:tid 1017695] [client 20.104.104.62:40215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/injection.php"] [unique_id "apK8_CJcY4fy7tP-rU3oeQAAAjE"]
[Sat Aug 29 05:05:32.207493 2026] [security2:error] [pid 1018003:tid 1018252] [client 168.107.94.195:51833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK8_DAh5Y1i2tUxg4HjEAAABhw"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:32.208254 2026] [security2:error] [pid 1017536:tid 1017548] [remote 34.138.108.56:53920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "proppastie.com"] [uri "/api/.env.bak"] [unique_id "apK8_CJcY4fy7tP-rU3oegACJgs"]
[Sat Aug 29 05:05:32.208990 2026] [security2:error] [pid 1017536:tid 1017664] [remote 34.138.108.56:53920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "proppastie.com"] [uri "/env.bak"] [unique_id "apK8_CJcY4fy7tP-rU3oewACJn8"]
[Sat Aug 29 05:05:32.210503 2026] [security2:error] [pid 1017536:tid 1017703] [client 20.48.250.41:23528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/fetch.php"] [unique_id "apK8_CJcY4fy7tP-rU3ofQAAAjk"]
[Sat Aug 29 05:05:32.223881 2026] [security2:error] [pid 1017536:tid 1017782] [client 20.104.18.15:23441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/ws85.php"] [unique_id "apK8_CJcY4fy7tP-rU3ogAAAAog"]
[Sat Aug 29 05:05:32.228705 2026] [security2:error] [pid 1017536:tid 1017765] [client 20.104.18.15:47015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/wp-safe.php"] [unique_id "apK8_CJcY4fy7tP-rU3ogQAAAnc"]
[Sat Aug 29 05:05:32.234446 2026] [security2:error] [pid 1017536:tid 1017748] [client 20.104.104.62:22659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/horeg.php"] [unique_id "apK8_CJcY4fy7tP-rU3oggAAAmY"]
[Sat Aug 29 05:05:32.236185 2026] [security2:error] [pid 1017536:tid 1017690] [client 4.205.62.107:2510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/xmy.php"] [unique_id "apK8_CJcY4fy7tP-rU3ogwAAAiw"]
[Sat Aug 29 05:05:32.237157 2026] [security2:error] [pid 1017536:tid 1017721] [client 20.48.251.3:14325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/i.php"] [unique_id "apK8_CJcY4fy7tP-rU3ohAAAAks"]
[Sat Aug 29 05:05:32.240363 2026] [security2:error] [pid 1017536:tid 1017790] [client 20.48.160.90:63520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/wp_motu_myk3v.php"] [unique_id "apK8_CJcY4fy7tP-rU3ohQAAApA"]
[Sat Aug 29 05:05:32.240444 2026] [security2:error] [pid 1017536:tid 1017680] [client 20.196.209.81:25075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/wp-2019.php"] [unique_id "apK8_CJcY4fy7tP-rU3ohgAAAiI"]
[Sat Aug 29 05:05:32.240772 2026] [security2:error] [pid 1017536:tid 1017729] [client 20.48.250.41:27596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/ws69.php"] [unique_id "apK8_CJcY4fy7tP-rU3ohwAAAlM"]
[Sat Aug 29 05:05:32.248279 2026] [security2:error] [pid 1017536:tid 1017786] [client 57.141.14.71:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/cart/"] [unique_id "apK8_CJcY4fy7tP-rU3oiAAAAow"]
[Sat Aug 29 05:05:32.252567 2026] [security2:error] [pid 1017536:tid 1017738] [client 20.48.250.41:12468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "employedlawyer.com"] [uri "/ckk.php"] [unique_id "apK8_CJcY4fy7tP-rU3oiwAAAlw"]
[Sat Aug 29 05:05:32.253186 2026] [security2:error] [pid 1017536:tid 1017687] [client 68.155.159.216:57449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/.well-knownold/index.php"] [unique_id "apK8_CJcY4fy7tP-rU3ojAAAAik"]
[Sat Aug 29 05:05:32.256175 2026] [security2:error] [pid 1017536:tid 1017755] [client 45.148.10.62:38658] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.vvr.ewu.mybluehost.me"] [uri "/.env.backup"] [unique_id "apK8_CJcY4fy7tP-rU3ojQAAAm0"]
[Sat Aug 29 05:05:32.258699 2026] [security2:error] [pid 1017536:tid 1017746] [client 45.3.34.110:28763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.34.3.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK8_CJcY4fy7tP-rU3ofAAAAmQ"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:32.264605 2026] [security2:error] [pid 1017536:tid 1017679] [client 20.48.250.41:61753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/term.php"] [unique_id "apK8_CJcY4fy7tP-rU3ojgAAAiE"]
[Sat Aug 29 05:05:32.266175 2026] [security2:error] [pid 1017536:tid 1017679] [client 20.104.18.15:13257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/nano.php"] [unique_id "apK8_CJcY4fy7tP-rU3ojwAAAiE"]
[Sat Aug 29 05:05:32.278626 2026] [security2:error] [pid 1017536:tid 1017672] [client 68.155.159.216:14314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/wp-mail.php"] [unique_id "apK8_CJcY4fy7tP-rU3okQAAAho"]
[Sat Aug 29 05:05:32.285845 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.48.251.3:57854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/paypal.php"] [unique_id "apK8_CJcY4fy7tP-rU3okgAAAnk"]
[Sat Aug 29 05:05:32.287560 2026] [security2:error] [pid 1017536:tid 1017702] [client 20.196.209.81:21115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/add_actualites.php"] [unique_id "apK8_CJcY4fy7tP-rU3okwAAAjg"]
[Sat Aug 29 05:05:32.290619 2026] [security2:error] [pid 1017536:tid 1017734] [client 20.104.18.15:8167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/akismet.php"] [unique_id "apK8_CJcY4fy7tP-rU3olAAAAlg"]
[Sat Aug 29 05:05:32.292007 2026] [security2:error] [pid 1017536:tid 1017780] [client 52.139.37.240:65163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.naturesfragrancelabs.com"] [uri "/aged.php"] [unique_id "apK8_CJcY4fy7tP-rU3olQAAAoY"]
[Sat Aug 29 05:05:32.319236 2026] [security2:error] [pid 1017536:tid 1017666] [client 93.123.109.228:36702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/service/.env"] [unique_id "apK8_CJcY4fy7tP-rU3omAAAAhQ"]
[Sat Aug 29 05:05:32.319548 2026] [security2:error] [pid 1017536:tid 1017689] [client 20.63.219.114:1665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/alfa-rex1.php"] [unique_id "apK8_CJcY4fy7tP-rU3omQAAAis"]
[Sat Aug 29 05:05:32.324146 2026] [security2:error] [pid 1018003:tid 1018271] [client 93.123.109.228:36692] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/services/.env"] [unique_id "apK8_DAh5Y1i2tUxg4HjFwAABi8"]
[Sat Aug 29 05:05:32.329421 2026] [security2:error] [pid 1018003:tid 1018157] [client 20.104.104.62:44580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/pentest.php"] [unique_id "apK8_DAh5Y1i2tUxg4HjGAAABb4"]
[Sat Aug 29 05:05:32.358981 2026] [security2:error] [pid 1017536:tid 1017764] [client 20.104.18.15:7041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/zoo2.php"] [unique_id "apK8_CJcY4fy7tP-rU3omwAAAnY"]
[Sat Aug 29 05:05:32.362404 2026] [security2:error] [pid 1017536:tid 1017704] [client 74.248.24.12:3573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/wp-content/admin.php"] [unique_id "apK8_CJcY4fy7tP-rU3onAAAAjo"]
[Sat Aug 29 05:05:32.365315 2026] [security2:error] [pid 1018003:tid 1018231] [client 20.104.18.15:23498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/ffs.php"] [unique_id "apK8_DAh5Y1i2tUxg4HjGQAABgc"]
[Sat Aug 29 05:05:32.366197 2026] [security2:error] [pid 1018003:tid 1018212] [client 20.104.18.15:46988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/gjewuagf.php"] [unique_id "apK8_DAh5Y1i2tUxg4HjGgAABfU"]
[Sat Aug 29 05:05:32.366807 2026] [security2:error] [pid 1018003:tid 1018200] [client 20.48.250.41:65433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/h02ugyh.php"] [unique_id "apK8_DAh5Y1i2tUxg4HjGwAABek"]
[Sat Aug 29 05:05:32.380401 2026] [security2:error] [pid 1017536:tid 1017781] [client 20.104.104.62:41630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/basic.php"] [unique_id "apK8_CJcY4fy7tP-rU3ongAAAoc"]
[Sat Aug 29 05:05:32.382478 2026] [security2:error] [pid 1018003:tid 1018264] [client 20.48.250.41:12448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "employedlawyer.com"] [uri "/R57.php"] [unique_id "apK8_DAh5Y1i2tUxg4HjHQAABig"]
[Sat Aug 29 05:05:32.394083 2026] [security2:error] [pid 1017536:tid 1017696] [client 20.48.160.90:62616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/wp_motu_ypdat.php"] [unique_id "apK8_CJcY4fy7tP-rU3ooAAAAjI"]
[Sat Aug 29 05:05:32.394572 2026] [security2:error] [pid 1017536:tid 1017700] [client 20.104.18.15:13311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/ano.php"] [unique_id "apK8_CJcY4fy7tP-rU3ooQAAAjY"]
[Sat Aug 29 05:05:32.394949 2026] [security2:error] [pid 1017536:tid 1017732] [client 4.232.148.111:3030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tiaandephraim.com"] [uri "/wp-includes/index.php"] [unique_id "apK8_CJcY4fy7tP-rU3oogAAAlY"]
[Sat Aug 29 05:05:32.406004 2026] [security2:error] [pid 1017536:tid 1017731] [client 20.48.251.3:14330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/guk.php"] [unique_id "apK8_CJcY4fy7tP-rU3opAAAAlU"]
[Sat Aug 29 05:05:32.407084 2026] [security2:error] [pid 1017536:tid 1017792] [client 45.148.10.62:38658] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.vvr.ewu.mybluehost.me"] [uri "/.env.old"] [unique_id "apK8_CJcY4fy7tP-rU3opQAAApI"]
[Sat Aug 29 05:05:32.411909 2026] [security2:error] [pid 1018003:tid 1018183] [client 20.48.250.41:57686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/aaa.php"] [unique_id "apK8_DAh5Y1i2tUxg4HjHgAABdg"]
[Sat Aug 29 05:05:32.413371 2026] [security2:error] [pid 1017536:tid 1017742] [client 20.104.104.62:48475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/lte7.php"] [unique_id "apK8_CJcY4fy7tP-rU3opgAAAmA"]
[Sat Aug 29 05:05:32.415753 2026] [security2:error] [pid 1017536:tid 1017776] [client 20.48.250.41:23530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/vx.php"] [unique_id "apK8_CJcY4fy7tP-rU3opwAAAoI"]
[Sat Aug 29 05:05:32.429308 2026] [security2:error] [pid 1017536:tid 1017673] [client 20.48.251.3:57915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/userfuns.php"] [unique_id "apK8_CJcY4fy7tP-rU3oqAAAAhs"]
[Sat Aug 29 05:05:32.429998 2026] [security2:error] [pid 1018003:tid 1018235] [client 93.123.109.228:36654] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/shared/.env"] [unique_id "apK8_DAh5Y1i2tUxg4HjIAAABgs"]
[Sat Aug 29 05:05:32.436032 2026] [security2:error] [pid 1017536:tid 1017726] [client 93.123.109.228:37292] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/shop/.env"] [unique_id "apK8_CJcY4fy7tP-rU3oqQAAAlA"]
[Sat Aug 29 05:05:32.437066 2026] [security2:error] [pid 1017536:tid 1017678] [client 20.48.250.41:26932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/ccs.php"] [unique_id "apK8_CJcY4fy7tP-rU3oqwAAAiA"]
[Sat Aug 29 05:05:32.451708 2026] [security2:error] [pid 1017536:tid 1017604] [remote 34.138.108.56:53920] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "proppastie.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK8_CJcY4fy7tP-rU3orQACRUM"]
[Sat Aug 29 05:05:32.452768 2026] [security2:error] [pid 1018003:tid 1018253] [client 68.155.159.216:16316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-includes/css/index.php"] [unique_id "apK8_DAh5Y1i2tUxg4HjIQAABh0"]
[Sat Aug 29 05:05:32.462961 2026] [security2:error] [pid 1018003:tid 1018179] [client 20.104.18.15:8092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/ajax.php"] [unique_id "apK8_DAh5Y1i2tUxg4HjIwAABdQ"]
[Sat Aug 29 05:05:32.464385 2026] [security2:error] [pid 1017536:tid 1017684] [client 20.104.104.62:10437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/6y7t.php"] [unique_id "apK8_CJcY4fy7tP-rU3orgAAAiY"]
[Sat Aug 29 05:05:32.475627 2026] [security2:error] [pid 1018003:tid 1018192] [client 68.155.159.216:51515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/admin.php"] [unique_id "apK8_DAh5Y1i2tUxg4HjJAAABeE"]
[Sat Aug 29 05:05:32.479992 2026] [security2:error] [pid 1017536:tid 1017737] [client 52.139.37.240:37934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.naturesfragrancelabs.com"] [uri "/essexec.php"] [unique_id "apK8_CJcY4fy7tP-rU3osQAAAls"]
[Sat Aug 29 05:05:32.502316 2026] [security2:error] [pid 1017536:tid 1017748] [client 20.104.18.15:23379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/nano.php"] [unique_id "apK8_CJcY4fy7tP-rU3otAAAAmY"]
[Sat Aug 29 05:05:32.503228 2026] [security2:error] [pid 1017536:tid 1017690] [client 20.104.104.62:64723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/bejak.php"] [unique_id "apK8_CJcY4fy7tP-rU3otQAAAiw"]
[Sat Aug 29 05:05:32.505023 2026] [security2:error] [pid 1018003:tid 1018191] [client 93.123.109.228:36728] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/src/.env"] [unique_id "apK8_DAh5Y1i2tUxg4HjJgAABeA"]
[Sat Aug 29 05:05:32.517147 2026] [security2:error] [pid 1017536:tid 1017740] [client 20.104.104.62:45998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/monso.php"] [unique_id "apK8_CJcY4fy7tP-rU3ouAAAAl4"]
[Sat Aug 29 05:05:32.530249 2026] [security2:error] [pid 1017536:tid 1017786] [client 20.48.160.90:28671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/edit.php"] [unique_id "apK8_CJcY4fy7tP-rU3ouQAAAow"]
[Sat Aug 29 05:05:32.531284 2026] [security2:error] [pid 1017536:tid 1017784] [client 68.155.159.216:33779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK8_CJcY4fy7tP-rU3ougAAAoo"]
[Sat Aug 29 05:05:32.532653 2026] [security2:error] [pid 1017536:tid 1017786] [client 20.48.250.41:64253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/xxw.php"] [unique_id "apK8_CJcY4fy7tP-rU3ovQAAAow"]
[Sat Aug 29 05:05:32.532695 2026] [security2:error] [pid 1017536:tid 1017719] [client 4.232.148.111:19618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/o.php"] [unique_id "apK8_CJcY4fy7tP-rU3ovAAAAkk"]
[Sat Aug 29 05:05:32.541423 2026] [security2:error] [pid 1017536:tid 1017643] [remote 45.148.10.166:42896] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1584"] [id "900939"] [msg "Invalid WordPress REST batch path"] [data "ARGS:requests.requests.path=///"] [hostname "waysidebaptistmission.lifesosweet.com"] [uri "/wp-json/batch/v1"] [unique_id "apK8_CJcY4fy7tP-rU3ovgACcGo"]
[Sat Aug 29 05:05:32.547008 2026] [security2:error] [pid 1017536:tid 1017722] [client 20.104.104.62:32840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.jen.chow-s.com"] [uri "/new4.php"] [unique_id "apK8_CJcY4fy7tP-rU3owAAAAkw"]
[Sat Aug 29 05:05:32.550521 2026] [security2:error] [pid 1018003:tid 1018152] [client 20.104.18.15:13286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/mgrr.php"] [unique_id "apK8_DAh5Y1i2tUxg4HjKQAABbk"]
[Sat Aug 29 05:05:32.553858 2026] [security2:error] [pid 1017536:tid 1017671] [client 20.63.219.114:10074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/class-wp-cmd.php"] [unique_id "apK8_CJcY4fy7tP-rU3owgAAAhk"]
[Sat Aug 29 05:05:32.556448 2026] [security2:error] [pid 1018003:tid 1018194] [client 20.104.18.15:7131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/zoo1.php"] [unique_id "apK8_DAh5Y1i2tUxg4HjKgAABeM"]
[Sat Aug 29 05:05:32.558606 2026] [security2:error] [pid 1017536:tid 1017698] [client 20.48.250.41:61750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/xsox.php"] [unique_id "apK8_CJcY4fy7tP-rU3oxAAAAjQ"]
[Sat Aug 29 05:05:32.558674 2026] [security2:error] [pid 1017536:tid 1017787] [client 20.48.251.3:27195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/mamzi.php"] [unique_id "apK8_CJcY4fy7tP-rU3oxQAAAo0"]
[Sat Aug 29 05:05:32.570975 2026] [security2:error] [pid 1018003:tid 1018188] [client 158.23.147.79:50062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/wp-admin/css/index.php"] [unique_id "apK8_DAh5Y1i2tUxg4HjKwAABd0"]
[Sat Aug 29 05:05:32.573085 2026] [security2:error] [pid 1017536:tid 1017702] [client 20.104.18.15:36758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/sallu.php"] [unique_id "apK8_CJcY4fy7tP-rU3oxwAAAjg"]
[Sat Aug 29 05:05:32.579389 2026] [security2:error] [pid 1017536:tid 1017734] [client 20.48.251.3:13975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/config_dev.php"] [unique_id "apK8_CJcY4fy7tP-rU3oyAAAAlg"]
[Sat Aug 29 05:05:32.588456 2026] [security2:error] [pid 1018003:tid 1018244] [client 168.107.94.195:52172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK8_DAh5Y1i2tUxg4HjLgAABhQ"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:32.598822 2026] [security2:error] [pid 1017536:tid 1017692] [client 20.104.18.15:46967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/tnglzqmv.php"] [unique_id "apK8_CJcY4fy7tP-rU3oywAAAi4"]
[Sat Aug 29 05:05:32.604345 2026] [security2:error] [pid 1018003:tid 1018170] [client 20.48.250.41:23465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/global.php"] [unique_id "apK8_DAh5Y1i2tUxg4HjLwAABcs"]
[Sat Aug 29 05:05:32.604619 2026] [security2:error] [pid 1018003:tid 1018251] [client 158.158.54.35:10872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/abcd.php"] [unique_id "apK8_DAh5Y1i2tUxg4HjMAAABhs"]
[Sat Aug 29 05:05:32.606048 2026] [security2:error] [pid 1017536:tid 1017753] [client 20.104.104.62:44557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/0xs.php"] [unique_id "apK8_CJcY4fy7tP-rU3ozQAAAms"]
[Sat Aug 29 05:05:32.608351 2026] [security2:error] [pid 1017536:tid 1017710] [client 192.145.125.70:35512] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "vickiandgreg.strangeworx.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "apK8_CJcY4fy7tP-rU3ozgAAAkA"]
[Sat Aug 29 05:05:32.635574 2026] [security2:error] [pid 1017536:tid 1017757] [client 20.48.250.41:26886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/mar.php"] [unique_id "apK8_CJcY4fy7tP-rU3ozwAAAm8"]
[Sat Aug 29 05:05:32.637456 2026] [security2:error] [pid 1017536:tid 1017789] [client 20.104.18.15:8105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/atomlib.php"] [unique_id "apK8_CJcY4fy7tP-rU3o0AAAAo8"]
[Sat Aug 29 05:05:32.638088 2026] [security2:error] [pid 1017536:tid 1017777] [client 20.104.18.15:23468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/ano.php"] [unique_id "apK8_CJcY4fy7tP-rU3o0QAAAoM"]
[Sat Aug 29 05:05:32.666615 2026] [security2:error] [pid 1017536:tid 1017683] [client 20.48.160.90:28547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/tqkdqbbv.php"] [unique_id "apK8_CJcY4fy7tP-rU3o1gAAAiU"]
[Sat Aug 29 05:05:32.673250 2026] [security2:error] [pid 1017536:tid 1017793] [client 52.139.37.240:54170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.naturesfragrancelabs.com"] [uri "/fw.php"] [unique_id "apK8_CJcY4fy7tP-rU3o2AAAApM"]
[Sat Aug 29 05:05:32.675225 2026] [security2:error] [pid 1017536:tid 1017725] [client 20.63.219.114:18478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/headerg.php"] [unique_id "apK8_CJcY4fy7tP-rU3o2QAAAk8"]
[Sat Aug 29 05:05:32.676215 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.48.250.41:64954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/bolt.php"] [unique_id "apK8_CJcY4fy7tP-rU3o2gAAAlY"]
[Sat Aug 29 05:05:32.677114 2026] [security2:error] [pid 1017536:tid 1017720] [client 20.104.104.62:45969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/rce.php"] [unique_id "apK8_CJcY4fy7tP-rU3o2wAAAko"]
[Sat Aug 29 05:05:32.677862 2026] [security2:error] [pid 1017536:tid 1017792] [client 20.104.18.15:13202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/mac.php"] [unique_id "apK8_CJcY4fy7tP-rU3o3AAAApI"]
[Sat Aug 29 05:05:32.677935 2026] [security2:error] [pid 1018003:tid 1018222] [client 93.123.109.228:36714] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/stage/.env"] [unique_id "apK8_DAh5Y1i2tUxg4HjMQAABf8"]
[Sat Aug 29 05:05:32.682309 2026] [security2:error] [pid 1017536:tid 1017742] [client 93.123.109.228:36702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/staging/.env"] [unique_id "apK8_CJcY4fy7tP-rU3o3QAAAmA"]
[Sat Aug 29 05:05:32.683652 2026] [security2:error] [pid 1017536:tid 1017693] [client 20.196.209.81:4509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/alfanew.php7"] [unique_id "apK8_CJcY4fy7tP-rU3o3gAAAi8"]
[Sat Aug 29 05:05:32.684833 2026] [security2:error] [pid 1017536:tid 1017714] [client 20.48.250.41:61729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/lkui.php"] [unique_id "apK8_CJcY4fy7tP-rU3o4AAAAkQ"]
[Sat Aug 29 05:05:32.690155 2026] [security2:error] [pid 1018003:tid 1018197] [client 20.48.251.3:27155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/public/rip.php.php"] [unique_id "apK8_DAh5Y1i2tUxg4HjNwAABeY"]
[Sat Aug 29 05:05:32.694507 2026] [security2:error] [pid 1017536:tid 1017726] [client 93.123.109.228:36742] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/srv/.env"] [unique_id "apK8_CJcY4fy7tP-rU3o5AAAAlA"]
[Sat Aug 29 05:05:32.695938 2026] [security2:error] [pid 1017536:tid 1017678] [client 20.104.18.15:7111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/radio.php"] [unique_id "apK8_CJcY4fy7tP-rU3o5QAAAiA"]
[Sat Aug 29 05:05:32.709446 2026] [security2:error] [pid 1017536:tid 1017684] [client 45.148.10.62:38658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vvr.ewu.mybluehost.me"] [uri "/.env.php.bak"] [unique_id "apK8_CJcY4fy7tP-rU3o5wAAAiY"]
[Sat Aug 29 05:05:32.710589 2026] [security2:error] [pid 1017536:tid 1017745] [client 93.123.109.228:36632] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/stg/.env"] [unique_id "apK8_CJcY4fy7tP-rU3o6AAAAmM"]
[Sat Aug 29 05:05:32.720234 2026] [security2:error] [pid 1017536:tid 1017737] [client 20.104.18.15:36697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/codex.php"] [unique_id "apK8_CJcY4fy7tP-rU3o6gAAAls"]
[Sat Aug 29 05:05:32.727145 2026] [security2:error] [pid 1017536:tid 1017716] [client 20.104.18.15:47082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/wefile.php"] [unique_id "apK8_CJcY4fy7tP-rU3o6wAAAkY"]
[Sat Aug 29 05:05:32.728404 2026] [security2:error] [pid 1017536:tid 1017707] [client 20.48.251.3:14295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/aws_credentials.php"] [unique_id "apK8_CJcY4fy7tP-rU3o7AAAAj0"]
[Sat Aug 29 05:05:32.740263 2026] [security2:error] [pid 1017536:tid 1017721] [client 20.104.104.62:10471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/waf.php"] [unique_id "apK8_CJcY4fy7tP-rU3o7gAAAks"]
[Sat Aug 29 05:05:32.743025 2026] [security2:error] [pid 1017536:tid 1017731] [client 20.104.104.62:33287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.jen.chow-s.com"] [uri "/pouhg.php"] [unique_id "apK8_CJcY4fy7tP-rU3o7wAAAlU"]
[Sat Aug 29 05:05:32.745130 2026] [security2:error] [pid 1017536:tid 1017712] [client 20.196.209.81:25025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/menu.php"] [unique_id "apK8_CJcY4fy7tP-rU3o8AAAAkI"]
[Sat Aug 29 05:05:32.757780 2026] [security2:error] [pid 1017536:tid 1017738] [client 93.123.109.228:37292] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/stripe/.env"] [unique_id "apK8_CJcY4fy7tP-rU3o8wAAAlw"]
[Sat Aug 29 05:05:32.760929 2026] [security2:error] [pid 1018003:tid 1018225] [client 20.104.104.62:20803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/idca_shell.php"] [unique_id "apK8_DAh5Y1i2tUxg4HjPAAABgI"]
[Sat Aug 29 05:05:32.769990 2026] [core:error] [pid 1017536:tid 1017679] [client 74.248.24.12:33215] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:32.770007 2026] [core:error] [pid 1017536:tid 1017679] [client 74.248.24.12:33215] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:32.780042 2026] [security2:error] [pid 1017536:tid 1017784] [client 20.104.18.15:23458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/mgrr.php"] [unique_id "apK8_CJcY4fy7tP-rU3o9QAAAoo"]
[Sat Aug 29 05:05:32.797877 2026] [security2:error] [pid 1017536:tid 1017755] [client 20.48.160.90:62640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/kjyehoxl.php"] [unique_id "apK8_CJcY4fy7tP-rU3o-gAAAm0"]
[Sat Aug 29 05:05:32.812217 2026] [security2:error] [pid 1017536:tid 1017686] [client 20.104.104.62:22659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/exec.php"] [unique_id "apK8_CJcY4fy7tP-rU3o-wAAAig"]
[Sat Aug 29 05:05:32.813993 2026] [security2:error] [pid 1017536:tid 1017713] [client 209.50.167.72:53829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.167.50.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK8_CJcY4fy7tP-rU3o9gAAAkM"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:32.825184 2026] [security2:error] [pid 1017536:tid 1017667] [client 213.202.253.4:53584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aantec.com"] [uri "/delpaths.php"] [unique_id "apK8_CJcY4fy7tP-rU3o_QAAAhU"], referer: www.google.com
[Sat Aug 29 05:05:32.830464 2026] [security2:error] [pid 1017536:tid 1017702] [client 20.104.18.15:6977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/one.php"] [unique_id "apK8_CJcY4fy7tP-rU3o_gAAAjg"]
[Sat Aug 29 05:05:32.833592 2026] [security2:error] [pid 1017536:tid 1017685] [client 20.48.250.41:64942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/rtx.php"] [unique_id "apK8_CJcY4fy7tP-rU3o_wAAAic"]
[Sat Aug 29 05:05:32.844029 2026] [security2:error] [pid 1017536:tid 1017735] [client 20.48.250.41:23539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/fs.php"] [unique_id "apK8_CJcY4fy7tP-rU3pAgAAAlk"]
[Sat Aug 29 05:05:32.845646 2026] [security2:error] [pid 1017536:tid 1017747] [client 68.155.159.216:12226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-admin/admin.php"] [unique_id "apK8_CJcY4fy7tP-rU3pAwAAAmU"]
[Sat Aug 29 05:05:32.849551 2026] [security2:error] [pid 1017536:tid 1017694] [client 20.104.18.15:13154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/simple.php"] [unique_id "apK8_CJcY4fy7tP-rU3pBAAAAjA"]
[Sat Aug 29 05:05:32.851864 2026] [security2:error] [pid 1017536:tid 1017681] [client 20.48.250.41:26930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/ccu.php"] [unique_id "apK8_CJcY4fy7tP-rU3pBQAAAiM"]
[Sat Aug 29 05:05:32.852886 2026] [security2:error] [pid 1017536:tid 1017778] [client 20.48.251.3:27188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/environment.php"] [unique_id "apK8_CJcY4fy7tP-rU3pBwAAAoQ"]
[Sat Aug 29 05:05:32.864658 2026] [security2:error] [pid 1017536:tid 1017710] [client 20.104.18.15:8143] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "canistermachine.com"] [uri "/1.php"] [unique_id "apK8_CJcY4fy7tP-rU3pCQAAAkA"]
[Sat Aug 29 05:05:32.864762 2026] [security2:error] [pid 1017536:tid 1017710] [client 20.104.18.15:8143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/1.php"] [unique_id "apK8_CJcY4fy7tP-rU3pCQAAAkA"]
[Sat Aug 29 05:05:32.867714 2026] [security2:error] [pid 1018003:tid 1018257] [client 93.123.109.228:36692] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/terraform.tfstate.backup"] [unique_id "apK8_DAh5Y1i2tUxg4HjQgAABiE"]
[Sat Aug 29 05:05:32.868639 2026] [security2:error] [pid 1017536:tid 1017698] [client 52.139.37.240:37919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.naturesfragrancelabs.com"] [uri "/zwso.php"] [unique_id "apK8_CJcY4fy7tP-rU3pCgAAAjQ"]
[Sat Aug 29 05:05:32.874983 2026] [security2:error] [pid 1017536:tid 1017689] [client 20.104.104.62:10447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/bnnof6.php"] [unique_id "apK8_CJcY4fy7tP-rU3pCwAAAis"]
[Sat Aug 29 05:05:32.881005 2026] [security2:error] [pid 1017536:tid 1017675] [client 74.248.24.12:31723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/wp-configs.php"] [unique_id "apK8_CJcY4fy7tP-rU3pDQAAAh0"]
[Sat Aug 29 05:05:32.886020 2026] [security2:error] [pid 1018003:tid 1018226] [client 93.123.109.228:36660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/test.php"] [unique_id "apK8_DAh5Y1i2tUxg4HjQwAABgM"]
[Sat Aug 29 05:05:32.889124 2026] [security2:error] [pid 1017536:tid 1017723] [client 20.48.250.41:58563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "apK8_CJcY4fy7tP-rU3pDwAAAk0"]
[Sat Aug 29 05:05:32.889827 2026] [security2:error] [pid 1018003:tid 1018221] [client 93.123.109.228:36612] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/test/.env"] [unique_id "apK8_DAh5Y1i2tUxg4HjRAAABf4"]
[Sat Aug 29 05:05:32.894416 2026] [security2:error] [pid 1018003:tid 1018274] [client 4.232.148.111:14462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tiaandephraim.com"] [uri "/wp-admin/a.php"] [unique_id "apK8_DAh5Y1i2tUxg4HjRQAABjI"]
[Sat Aug 29 05:05:32.894477 2026] [security2:error] [pid 1017536:tid 1017708] [client 20.104.18.15:36678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/5656.php"] [unique_id "apK8_CJcY4fy7tP-rU3pEAAAAj4"]
[Sat Aug 29 05:05:32.896647 2026] [security2:error] [pid 1018003:tid 1018163] [client 20.104.18.15:47077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/blog.php"] [unique_id "apK8_DAh5Y1i2tUxg4HjRgAABcQ"]
[Sat Aug 29 05:05:32.911204 2026] [security2:error] [pid 1017536:tid 1017703] [client 68.155.159.216:50239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK8_CJcY4fy7tP-rU3pFAAAAjk"]
[Sat Aug 29 05:05:32.914067 2026] [security2:error] [pid 1017536:tid 1017752] [client 20.48.251.3:14292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/aws-credentials.php"] [unique_id "apK8_CJcY4fy7tP-rU3pFQAAAmo"]
[Sat Aug 29 05:05:32.915381 2026] [access_compat:error] [pid 1017536:tid 1017688] [client 67.20.76.220:22342] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:05:32.920157 2026] [security2:error] [pid 1018003:tid 1018208] [client 93.123.109.228:36762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/user/.env"] [unique_id "apK8_DAh5Y1i2tUxg4HjSAAABfE"]
[Sat Aug 29 05:05:32.921628 2026] [security2:error] [pid 1017536:tid 1017671] [client 20.63.219.114:1727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/disagreed.php"] [unique_id "apK8_CJcY4fy7tP-rU3pFgAAAhk"]
[Sat Aug 29 05:05:32.944962 2026] [security2:error] [pid 1018003:tid 1018190] [client 20.48.160.90:62673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/llyuxaqd.php"] [unique_id "apK8_DAh5Y1i2tUxg4HjSQAABd8"]
[Sat Aug 29 05:05:32.954273 2026] [security2:error] [pid 1017536:tid 1017773] [client 20.104.104.62:22710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/dbc.php"] [unique_id "apK8_CJcY4fy7tP-rU3pGAAAAn8"]
[Sat Aug 29 05:05:32.957173 2026] [security2:error] [pid 1017536:tid 1017756] [client 20.104.18.15:23504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/mac.php"] [unique_id "apK8_CJcY4fy7tP-rU3pGQAAAm4"]
[Sat Aug 29 05:05:32.966859 2026] [security2:error] [pid 1017536:tid 1017717] [client 20.104.18.15:7044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/503.php"] [unique_id "apK8_CJcY4fy7tP-rU3pGwAAAkc"]
[Sat Aug 29 05:05:32.968621 2026] [security2:error] [pid 1018003:tid 1018189] [client 168.107.94.195:52530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK8_DAh5Y1i2tUxg4HjSgAABd4"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:32.986270 2026] [security2:error] [pid 1017536:tid 1017711] [client 20.48.250.41:23489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/ioxi.php"] [unique_id "apK8_CJcY4fy7tP-rU3pHAAAAkE"]
[Sat Aug 29 05:05:32.990706 2026] [security2:error] [pid 1017536:tid 1017716] [client 4.205.62.107:64240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/packed.php"] [unique_id "apK8_CJcY4fy7tP-rU3pHQAAAkY"]
[Sat Aug 29 05:05:32.996909 2026] [security2:error] [pid 1017536:tid 1017765] [client 20.48.250.41:27394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/ak.php"] [unique_id "apK8_CJcY4fy7tP-rU3pHgAAAnc"]
[Sat Aug 29 05:05:33.003735 2026] [security2:error] [pid 1018003:tid 1018162] [client 20.48.251.3:57813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/aws_secret_config.php"] [unique_id "apK8_TAh5Y1i2tUxg4HjSwAABcM"]
[Sat Aug 29 05:05:33.007633 2026] [security2:error] [pid 1018003:tid 1018269] [client 20.48.250.41:64199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/ckk.php"] [unique_id "apK8_TAh5Y1i2tUxg4HjTAAABi0"]
[Sat Aug 29 05:05:33.013174 2026] [security2:error] [pid 1018003:tid 1018198] [client 20.104.104.62:10626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/ah24.php"] [unique_id "apK8_TAh5Y1i2tUxg4HjTQAABec"]
[Sat Aug 29 05:05:33.018948 2026] [security2:error] [pid 1017536:tid 1017783] [client 4.232.148.111:24122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/file2.php"] [unique_id "apK8_SJcY4fy7tP-rU3pHwAAAok"]
[Sat Aug 29 05:05:33.020170 2026] [security2:error] [pid 1018003:tid 1018241] [client 20.48.250.41:61748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/motu.php"] [unique_id "apK8_TAh5Y1i2tUxg4HjTgAABhE"]
[Sat Aug 29 05:05:33.020300 2026] [security2:error] [pid 1017536:tid 1017690] [client 20.104.18.15:8097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/samll.php"] [unique_id "apK8_SJcY4fy7tP-rU3pIQAAAiw"]
[Sat Aug 29 05:05:33.020690 2026] [security2:error] [pid 1017536:tid 1017721] [client 20.104.18.15:13248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/xty.php"] [unique_id "apK8_SJcY4fy7tP-rU3pIgAAAks"]
[Sat Aug 29 05:05:33.021851 2026] [security2:error] [pid 1018003:tid 1018213] [client 93.123.109.228:36714] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/v2/.env"] [unique_id "apK8_TAh5Y1i2tUxg4HjTwAABfY"]
[Sat Aug 29 05:05:33.023691 2026] [security2:error] [pid 1017536:tid 1017761] [client 20.104.104.62:33434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.jen.chow-s.com"] [uri "/sbhu.php"] [unique_id "apK8_SJcY4fy7tP-rU3pJAAAAnM"]
[Sat Aug 29 05:05:33.031414 2026] [security2:error] [pid 1018003:tid 1018277] [client 93.123.109.228:36728] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/v3/.env"] [unique_id "apK8_TAh5Y1i2tUxg4HjUAAABjU"]
[Sat Aug 29 05:05:33.038044 2026] [security2:error] [pid 1017536:tid 1017746] [client 93.123.109.228:37366] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/v1/.env"] [unique_id "apK8_SJcY4fy7tP-rU3pJgAAAmQ"]
[Sat Aug 29 05:05:33.041028 2026] [security2:error] [pid 1017536:tid 1017687] [client 4.205.62.107:57849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "troop264olney.net"] [uri "/time.php"] [unique_id "apK8_SJcY4fy7tP-rU3pJwAAAik"]
[Sat Aug 29 05:05:33.045474 2026] [security2:error] [pid 1017536:tid 1017780] [client 20.104.18.15:46943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/wp-admin/js/wp-load.php"] [unique_id "apK8_SJcY4fy7tP-rU3pKQAAAoY"]
[Sat Aug 29 05:05:33.063345 2026] [security2:error] [pid 1017536:tid 1017741] [client 52.139.37.240:65330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.naturesfragrancelabs.com"] [uri "/admin/function.php"] [unique_id "apK8_SJcY4fy7tP-rU3pLAAAAl8"]
[Sat Aug 29 05:05:33.064978 2026] [security2:error] [pid 1017536:tid 1017720] [client 20.63.219.114:10050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/meta.php"] [unique_id "apK8_SJcY4fy7tP-rU3pLQAAAko"]
[Sat Aug 29 05:05:33.067072 2026] [security2:error] [pid 1017536:tid 1017727] [client 20.104.18.15:36846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/w3lls.php"] [unique_id "apK8_SJcY4fy7tP-rU3pLgAAAlE"]
[Sat Aug 29 05:05:33.083948 2026] [security2:error] [pid 1017536:tid 1017670] [client 20.104.104.62:41626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/wp-wlx.php"] [unique_id "apK8_SJcY4fy7tP-rU3pMgAAAhg"]
[Sat Aug 29 05:05:33.084182 2026] [security2:error] [pid 1017536:tid 1017781] [client 158.158.54.35:9471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-access.php"] [unique_id "apK8_SJcY4fy7tP-rU3pMQAAAoc"]
[Sat Aug 29 05:05:33.090594 2026] [security2:error] [pid 1018003:tid 1018205] [client 158.23.147.79:30600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK8_TAh5Y1i2tUxg4HjVQAABe4"]
[Sat Aug 29 05:05:33.090627 2026] [security2:error] [pid 1018003:tid 1018193] [client 20.48.160.90:62704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/nbwxolou.php"] [unique_id "apK8_TAh5Y1i2tUxg4HjVgAABeI"]
[Sat Aug 29 05:05:33.112053 2026] [security2:error] [pid 1017536:tid 1017739] [client 20.104.18.15:7061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/504.php"] [unique_id "apK8_SJcY4fy7tP-rU3pNAAAAl0"]
[Sat Aug 29 05:05:33.115575 2026] [security2:error] [pid 1017536:tid 1017702] [client 4.205.62.107:22313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/olfclass.php"] [unique_id "apK8_SJcY4fy7tP-rU3pNgAAAjg"]
[Sat Aug 29 05:05:33.121504 2026] [security2:error] [pid 1018003:tid 1018206] [client 20.104.18.15:23456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/simple.php"] [unique_id "apK8_TAh5Y1i2tUxg4HjWAAABe8"]
[Sat Aug 29 05:05:33.123334 2026] [security2:error] [pid 1017536:tid 1017747] [client 158.23.147.79:25593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/file5.php"] [unique_id "apK8_SJcY4fy7tP-rU3pOQAAAmU"]
[Sat Aug 29 05:05:33.128867 2026] [proxy_http:error] [pid 1018003:tid 1018275] (20014)Internal error (specific information not available): [client 34.21.253.104:28416] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:33.128886 2026] [proxy:error] [pid 1018003:tid 1018275] [client 34.21.253.104:28416] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/@fs/root/.aws/sso/cache/
[Sat Aug 29 05:05:33.130074 2026] [security2:error] [pid 1017536:tid 1017673] [client 34.21.253.104:28478] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "cpanel.replenishink.com"] [uri "/@fs/app/terraform.tfstate"] [unique_id "apK8_SJcY4fy7tP-rU3pPwAAAhs"]
[Sat Aug 29 05:05:33.134967 2026] [security2:error] [pid 1018003:tid 1018252] [client 20.104.104.62:64742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/idca.php"] [unique_id "apK8_TAh5Y1i2tUxg4HjWgAABhw"]
[Sat Aug 29 05:05:33.138282 2026] [proxy_http:error] [pid 1017536:tid 1017725] (20014)Internal error (specific information not available): [client 34.21.253.104:28482] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:33.138296 2026] [proxy:error] [pid 1017536:tid 1017725] [client 34.21.253.104:28482] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/@fs/root/terraform.tfstate
[Sat Aug 29 05:05:33.139997 2026] [security2:error] [pid 1017536:tid 1017750] [client 20.48.251.3:28494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/snq.php"] [unique_id "apK8_SJcY4fy7tP-rU3pQQAAAmg"]
[Sat Aug 29 05:05:33.140111 2026] [security2:error] [pid 1017536:tid 1017668] [client 20.196.209.81:9506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/alfa.php"] [unique_id "apK8_SJcY4fy7tP-rU3pQgAAAhY"]
[Sat Aug 29 05:05:33.146134 2026] [security2:error] [pid 1018003:tid 1018025] [remote 45.148.10.166:42904] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1609"] [id "900942"] [msg "Invalid WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.path=///"] [hostname "waysidebaptistmission.lifesosweet.com"] [uri "/"] [unique_id "apK8_TAh5Y1i2tUxg4HjWwAGLgQ"]
[Sat Aug 29 05:05:33.146853 2026] [security2:error] [pid 1018003:tid 1018215] [client 20.104.104.62:10460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/ztv.php"] [unique_id "apK8_TAh5Y1i2tUxg4HjXQAABfg"]
[Sat Aug 29 05:05:33.149925 2026] [security2:error] [pid 1017536:tid 1017789] [client 20.48.250.41:23507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/bootstrap.php"] [unique_id "apK8_SJcY4fy7tP-rU3pQwAAAo8"]
[Sat Aug 29 05:05:33.150308 2026] [proxy_http:error] [pid 1017536:tid 1017714] (20014)Internal error (specific information not available): [client 34.21.253.104:28464] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:33.150317 2026] [proxy:error] [pid 1017536:tid 1017714] [client 34.21.253.104:28464] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/@fs/var/www/.env
[Sat Aug 29 05:05:33.155040 2026] [security2:error] [pid 1017536:tid 1017700] [client 20.104.18.15:13301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/sallu.php"] [unique_id "apK8_SJcY4fy7tP-rU3pRAAAAjY"]
[Sat Aug 29 05:05:33.161405 2026] [security2:error] [pid 1017536:tid 1017740] [client 20.196.209.81:21058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/xmlrpc.php0"] [unique_id "apK8_SJcY4fy7tP-rU3pRwAAAl4"]
[Sat Aug 29 05:05:33.165841 2026] [proxy_http:error] [pid 1017536:tid 1017707] (20014)Internal error (specific information not available): [client 34.21.253.104:28522] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:33.165854 2026] [proxy:error] [pid 1017536:tid 1017707] [client 34.21.253.104:28522] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/@fs/app/aws-exports.js
[Sat Aug 29 05:05:33.192132 2026] [security2:error] [pid 1017536:tid 1017679] [client 45.148.10.62:38662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vvr.ewu.mybluehost.me"] [uri "/.env.php"] [unique_id "apK8_SJcY4fy7tP-rU3pTgAAAiE"]
[Sat Aug 29 05:05:33.196421 2026] [security2:error] [pid 1017536:tid 1017684] [client 20.48.250.41:27593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/lib.php"] [unique_id "apK8_SJcY4fy7tP-rU3pUQAAAiY"]
[Sat Aug 29 05:05:33.201582 2026] [security2:error] [pid 1018003:tid 1018216] [client 93.123.109.228:36692] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/var/www/.env"] [unique_id "apK8_TAh5Y1i2tUxg4HjYAAABfk"]
[Sat Aug 29 05:05:33.201899 2026] [security2:error] [pid 1018003:tid 1018231] [client 20.104.104.62:48685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/tanjiro.php"] [unique_id "apK8_TAh5Y1i2tUxg4HjYQAABgc"]
[Sat Aug 29 05:05:33.211081 2026] [security2:error] [pid 1018003:tid 1018212] [client 93.123.109.228:36612] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/var/www/html/.env"] [unique_id "apK8_TAh5Y1i2tUxg4HjYgAABfU"]
[Sat Aug 29 05:05:33.219040 2026] [security2:error] [pid 1018003:tid 1018150] [client 20.104.104.62:33336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.jen.chow-s.com"] [uri "/sf.php"] [unique_id "apK8_TAh5Y1i2tUxg4HjYwAABbc"]
[Sat Aug 29 05:05:33.221027 2026] [security2:error] [pid 1018003:tid 1018195] [client 192.145.125.70:35516] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "vickiandgreg.strangeworx.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "apK8_TAh5Y1i2tUxg4HjZQAABeQ"]
[Sat Aug 29 05:05:33.221103 2026] [security2:error] [pid 1018003:tid 1018267] [client 20.104.104.62:22683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/attack.php"] [unique_id "apK8_TAh5Y1i2tUxg4HjZAAABis"]
[Sat Aug 29 05:05:33.230405 2026] [security2:error] [pid 1017536:tid 1017783] [client 93.123.109.228:36632] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/web/.env"] [unique_id "apK8_SJcY4fy7tP-rU3pVQAAAok"]
[Sat Aug 29 05:05:33.230919 2026] [security2:error] [pid 1017536:tid 1017690] [client 20.48.160.90:63575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/nsxeubyv.php"] [unique_id "apK8_SJcY4fy7tP-rU3pVgAAAiw"]
[Sat Aug 29 05:05:33.231337 2026] [security2:error] [pid 1017536:tid 1017712] [client 158.23.147.79:48268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK8_SJcY4fy7tP-rU3pVwAAAkI"]
[Sat Aug 29 05:05:33.254869 2026] [security2:error] [pid 1017536:tid 1017738] [client 20.48.250.41:61757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/Ov-Simple1.php"] [unique_id "apK8_SJcY4fy7tP-rU3pWQAAAlw"]
[Sat Aug 29 05:05:33.257034 2026] [security2:error] [pid 1018003:tid 1018153] [client 52.139.37.240:37924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.naturesfragrancelabs.com"] [uri "/zoom1.php"] [unique_id "apK8_TAh5Y1i2tUxg4HjZwAABbo"]
[Sat Aug 29 05:05:33.258981 2026] [security2:error] [pid 1017536:tid 1017731] [client 4.205.62.107:53343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/temp.php"] [unique_id "apK8_SJcY4fy7tP-rU3pWgAAAlU"]
[Sat Aug 29 05:05:33.261132 2026] [security2:error] [pid 1018003:tid 1018174] [client 20.48.250.41:65419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sistamp.com"] [uri "/R57.php"] [unique_id "apK8_TAh5Y1i2tUxg4HjaAAABc8"]
[Sat Aug 29 05:05:33.268725 2026] [security2:error] [pid 1017536:tid 1017695] [client 20.48.251.3:27194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/wp-access.php"] [unique_id "apK8_SJcY4fy7tP-rU3pXAAAAjE"]
[Sat Aug 29 05:05:33.276368 2026] [security2:error] [pid 1017536:tid 1017770] [client 20.63.219.114:18395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/class_api.php"] [unique_id "apK8_SJcY4fy7tP-rU3pXgAAAnw"]
[Sat Aug 29 05:05:33.282034 2026] [security2:error] [pid 1017536:tid 1017672] [client 34.7.216.49:37064] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "webdisk.bridgewaycentretrust.org"] [uri "/config.js"] [unique_id "apK8_SJcY4fy7tP-rU3pYgAAAho"]
[Sat Aug 29 05:05:33.283300 2026] [security2:error] [pid 1017536:tid 1017774] [client 34.7.216.49:37108] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "webdisk.bridgewaycentretrust.org"] [uri "/app-config.json"] [unique_id "apK8_SJcY4fy7tP-rU3pZQAAAoA"]
[Sat Aug 29 05:05:33.285223 2026] [security2:error] [pid 1018003:tid 1018217] [client 34.7.216.49:37232] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "webdisk.bridgewaycentretrust.org"] [uri "/__/firebase/init.json"] [unique_id "apK8_TAh5Y1i2tUxg4HjcAAABfo"]
[Sat Aug 29 05:05:33.286775 2026] [security2:error] [pid 1017536:tid 1017758] [client 20.104.104.62:10449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/kure.php"] [unique_id "apK8_SJcY4fy7tP-rU3pZwAAAnA"]
[Sat Aug 29 05:05:33.296742 2026] [security2:error] [pid 1017536:tid 1017764] [client 34.7.216.49:37302] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "webdisk.bridgewaycentretrust.org"] [uri "/.ssh/id_ed25519"] [unique_id "apK8_SJcY4fy7tP-rU3pdQAAAnY"]
[Sat Aug 29 05:05:33.303559 2026] [security2:error] [pid 1017536:tid 1017719] [client 4.205.62.107:22314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/BDKR28WP.php"] [unique_id "apK8_SJcY4fy7tP-rU3peQAAAkk"]
[Sat Aug 29 05:05:33.316378 2026] [security2:error] [pid 1018003:tid 1018253] [client 20.48.250.41:23426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/export.php"] [unique_id "apK8_TAh5Y1i2tUxg4HjcwAABh0"]
[Sat Aug 29 05:05:33.316662 2026] [security2:error] [pid 1017536:tid 1017667] [client 74.248.24.12:35485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/lock360.php"] [unique_id "apK8_SJcY4fy7tP-rU3pegAAAhU"]
[Sat Aug 29 05:05:33.334610 2026] [security2:error] [pid 1018003:tid 1018157] [client 104.207.42.91:35089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 91.42.207.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK8_TAh5Y1i2tUxg4HjdAAABb4"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:33.339962 2026] [security2:error] [pid 1018003:tid 1018218] [client 4.205.62.107:65434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/saiga.php"] [unique_id "apK8_TAh5Y1i2tUxg4HjdgAABfs"]
[Sat Aug 29 05:05:33.345694 2026] [security2:error] [pid 1018003:tid 1018196] [client 68.155.159.216:16323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.showerdoorsdubuque.com"] [uri "/x.php"] [unique_id "apK8_TAh5Y1i2tUxg4HjdwAABeU"]
[Sat Aug 29 05:05:33.348996 2026] [security2:error] [pid 1018003:tid 1018203] [client 68.155.159.216:58260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK8_TAh5Y1i2tUxg4HjeQAABew"]
[Sat Aug 29 05:05:33.349758 2026] [security2:error] [pid 1018003:tid 1018151] [client 168.107.94.195:52875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK8_TAh5Y1i2tUxg4HjegAABbg"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:33.356584 2026] [security2:error] [pid 1018003:tid 1018152] [client 20.104.104.62:54985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/file66.php"] [unique_id "apK8_TAh5Y1i2tUxg4HjfAAABbk"]
[Sat Aug 29 05:05:33.373617 2026] [security2:error] [pid 1017536:tid 1017735] [client 20.48.250.41:27595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/wp-style.php"] [unique_id "apK8_SJcY4fy7tP-rU3pfwAAAlk"]
[Sat Aug 29 05:05:33.376007 2026] [security2:error] [pid 1017536:tid 1017747] [client 4.205.62.107:2902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/wp-blog.php"] [unique_id "apK8_SJcY4fy7tP-rU3pgAAAAmU"]
[Sat Aug 29 05:05:33.378063 2026] [security2:error] [pid 1018003:tid 1018188] [client 20.48.160.90:63613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/zfqipfss.php"] [unique_id "apK8_TAh5Y1i2tUxg4HjgAAABd0"]
[Sat Aug 29 05:05:33.384862 2026] [security2:error] [pid 1017536:tid 1017694] [client 93.123.109.228:36632] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/website/.env"] [unique_id "apK8_SJcY4fy7tP-rU3pggAAAjA"]
[Sat Aug 29 05:05:33.395783 2026] [security2:error] [pid 1017536:tid 1017748] [client 74.248.24.12:21789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/wp-includes/index.php"] [unique_id "apK8_SJcY4fy7tP-rU3phQAAAmY"]
[Sat Aug 29 05:05:33.396606 2026] [security2:error] [pid 1017536:tid 1017734] [client 93.123.109.228:36702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elisefairweather.com"] [uri "/wp-config.php"] [unique_id "apK8_SJcY4fy7tP-rU3phAAAAlg"]
[Sat Aug 29 05:05:33.398113 2026] [security2:error] [pid 1018003:tid 1018219] [client 20.48.251.3:57836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/otuz1.php"] [unique_id "apK8_TAh5Y1i2tUxg4HjgQAABfw"]
[Sat Aug 29 05:05:33.401893 2026] [security2:error] [pid 1018003:tid 1018236] [client 20.104.104.62:64733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/indoxploit_shell.php"] [unique_id "apK8_TAh5Y1i2tUxg4HjggAABgw"]
[Sat Aug 29 05:05:33.402462 2026] [security2:error] [pid 1017536:tid 1017685] [client 93.123.109.228:36674] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.elisefairweather.com"] [uri "/wp-config.php.bak"] [unique_id "apK8_SJcY4fy7tP-rU3phgAAAic"]
[Sat Aug 29 05:05:33.405045 2026] [security2:error] [pid 1018003:tid 1018222] [client 93.123.109.228:36762] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.elisefairweather.com"] [uri "/wp-config.php.new"] [unique_id "apK8_TAh5Y1i2tUxg4HjgwAABf8"]
[Sat Aug 29 05:05:33.417263 2026] [security2:error] [pid 1017536:tid 1017750] [client 93.123.109.228:37378] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.elisefairweather.com"] [uri "/wp-config.php.old"] [unique_id "apK8_SJcY4fy7tP-rU3phwAAAmg"]
[Sat Aug 29 05:05:33.421238 2026] [security2:error] [pid 1017536:tid 1017784] [client 20.63.219.114:18372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/dxc.php"] [unique_id "apK8_SJcY4fy7tP-rU3piAAAAoo"]
[Sat Aug 29 05:05:33.427244 2026] [security2:error] [pid 1017536:tid 1017610] [remote 34.138.108.56:53934] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "proppastie.com"] [uri "/_image"] [unique_id "apK8_SJcY4fy7tP-rU3pjAACVkk"]
[Sat Aug 29 05:05:33.429756 2026] [security2:error] [pid 1017536:tid 1017724] [client 20.104.104.62:44546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/cafe.php"] [unique_id "apK8_SJcY4fy7tP-rU3pjQAAAk4"]
[Sat Aug 29 05:05:33.448219 2026] [security2:error] [pid 1017536:tid 1017766] [client 20.48.250.41:23511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/gk.php"] [unique_id "apK8_SJcY4fy7tP-rU3pkgAAAng"]
[Sat Aug 29 05:05:33.450331 2026] [security2:error] [pid 1018003:tid 1018214] [client 93.123.109.228:36654] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "cpcontacts.elisefairweather.com"] [uri "/___proxy_subdomain_cpcontacts/wp-content/mysql.sql"] [unique_id "apK8_TAh5Y1i2tUxg4HjhQAABfc"]
[Sat Aug 29 05:05:33.452254 2026] [security2:error] [pid 1018003:tid 1018251] [client 52.139.37.240:54178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.naturesfragrancelabs.com"] [uri "/about.php7"] [unique_id "apK8_TAh5Y1i2tUxg4HjhgAABhs"]
[Sat Aug 29 05:05:33.484467 2026] [autoindex:error] [pid 1017536:tid 1017726] [client 4.232.148.111:0] AH01276: Cannot serve directory /home4/ehfields/public_html/tiaandephraim/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:05:33.497873 2026] [security2:error] [pid 1018003:tid 1018192] [client 4.232.148.111:19634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK8_TAh5Y1i2tUxg4HjiQAABeE"]
[Sat Aug 29 05:05:33.506334 2026] [security2:error] [pid 1017536:tid 1017679] [client 20.104.104.62:22685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/zafir1.php"] [unique_id "apK8_SJcY4fy7tP-rU3plwAAAiE"]
[Sat Aug 29 05:05:33.509903 2026] [security2:error] [pid 1017536:tid 1017684] [client 20.48.160.90:62701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stampstudios.glowt-shirt.com"] [uri "/zrjuyoos.php"] [unique_id "apK8_SJcY4fy7tP-rU3pmAAAAiY"]
[Sat Aug 29 05:05:33.511821 2026] [security2:error] [pid 1017536:tid 1017760] [client 20.48.250.41:27642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/browse.php"] [unique_id "apK8_SJcY4fy7tP-rU3pmQAAAnI"]
[Sat Aug 29 05:05:33.513878 2026] [security2:error] [pid 1017536:tid 1017674] [client 20.48.251.3:14290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/xda.php"] [unique_id "apK8_SJcY4fy7tP-rU3pmgAAAhw"]
[Sat Aug 29 05:05:33.523508 2026] [security2:error] [pid 1017536:tid 1017715] [client 20.48.250.41:58623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/wp-blogs.php"] [unique_id "apK8_SJcY4fy7tP-rU3pnQAAAkU"]
[Sat Aug 29 05:05:33.529124 2026] [security2:error] [pid 1017536:tid 1017765] [client 20.48.251.3:28565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/update.php"] [unique_id "apK8_SJcY4fy7tP-rU3pngAAAnc"]
[Sat Aug 29 05:05:33.544269 2026] [security2:error] [pid 1017536:tid 1017776] [client 20.196.209.81:15762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/feed-rss2-queue.php"] [unique_id "apK8_SJcY4fy7tP-rU3pnwAAAoI"]
[Sat Aug 29 05:05:33.550234 2026] [security2:error] [pid 1017536:tid 1017721] [client 20.104.104.62:48476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/Rk41.php"] [unique_id "apK8_SJcY4fy7tP-rU3poAAAAks"]
[Sat Aug 29 05:05:33.551121 2026] [security2:error] [pid 1018003:tid 1018242] [client 20.104.104.62:32874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.jen.chow-s.com"] [uri "/wp-content/plugins/cp-pro/js.php"] [unique_id "apK8_TAh5Y1i2tUxg4HjjAAABhI"]
[Sat Aug 29 05:05:33.561925 2026] [security2:error] [pid 1018003:tid 1018158] [client 68.155.159.216:16266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK8_TAh5Y1i2tUxg4HjjQAABb8"]
[Sat Aug 29 05:05:33.566086 2026] [security2:error] [pid 1018003:tid 1018180] [client 20.104.104.62:10451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/eval.php"] [unique_id "apK8_TAh5Y1i2tUxg4HjjgAABdU"]
[Sat Aug 29 05:05:33.582316 2026] [security2:error] [pid 1018003:tid 1018175] [client 158.158.54.35:35961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-content/uploads/min.php"] [unique_id "apK8_TAh5Y1i2tUxg4HjjwAABdA"]
[Sat Aug 29 05:05:33.584955 2026] [security2:error] [pid 1018003:tid 1018182] [client 20.48.250.41:23440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/logs1.php"] [unique_id "apK8_TAh5Y1i2tUxg4HjkAAABdc"]
[Sat Aug 29 05:05:33.637722 2026] [security2:error] [pid 1017536:tid 1017770] [client 68.155.159.216:33739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/file.php"] [unique_id "apK8_SJcY4fy7tP-rU3powAAAnw"]
[Sat Aug 29 05:05:33.642470 2026] [security2:error] [pid 1017536:tid 1017756] [client 20.196.209.81:21070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/content.php"] [unique_id "apK8_SJcY4fy7tP-rU3ppAAAAm4"]
[Sat Aug 29 05:05:33.646878 2026] [security2:error] [pid 1017536:tid 1017716] [client 52.139.37.240:54168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.naturesfragrancelabs.com"] [uri "/cron.php"] [unique_id "apK8_SJcY4fy7tP-rU3ppQAAAkY"]
[Sat Aug 29 05:05:33.649981 2026] [security2:error] [pid 1018003:tid 1018274] [client 20.104.104.62:45987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/console.php"] [unique_id "apK8_TAh5Y1i2tUxg4HjkQAABjI"]
[Sat Aug 29 05:05:33.651046 2026] [security2:error] [pid 1017536:tid 1017687] [client 4.232.148.111:18134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tiaandephraim.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK8_SJcY4fy7tP-rU3ppgAAAik"]
[Sat Aug 29 05:05:33.654890 2026] [security2:error] [pid 1017536:tid 1017774] [client 20.104.104.62:64754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/sbh.php"] [unique_id "apK8_SJcY4fy7tP-rU3ppwAAAoA"]
[Sat Aug 29 05:05:33.657218 2026] [security2:error] [pid 1018003:tid 1018268] [client 20.63.219.114:10110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/aksinet.php"] [unique_id "apK8_TAh5Y1i2tUxg4HjkgAABiw"]
[Sat Aug 29 05:05:33.659180 2026] [security2:error] [pid 1018003:tid 1018208] [client 20.48.251.3:28453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/channels.php"] [unique_id "apK8_TAh5Y1i2tUxg4HjkwAABfE"]
[Sat Aug 29 05:05:33.663105 2026] [security2:error] [pid 1017536:tid 1017753] [client 68.155.159.216:51821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-admin/admin.php"] [unique_id "apK8_SJcY4fy7tP-rU3pqAAAAms"]
[Sat Aug 29 05:05:33.676231 2026] [security2:error] [pid 1017536:tid 1017764] [client 158.23.147.79:50066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK8_SJcY4fy7tP-rU3pqQAAAnY"]
[Sat Aug 29 05:05:33.677305 2026] [security2:error] [pid 1017536:tid 1017730] [client 20.48.250.41:26942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/zoo.php"] [unique_id "apK8_SJcY4fy7tP-rU3pqgAAAlQ"]
[Sat Aug 29 05:05:33.700159 2026] [security2:error] [pid 1017536:tid 1017727] [client 20.104.104.62:10468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/sao.php"] [unique_id "apK8_SJcY4fy7tP-rU3pqwAAAlE"]
[Sat Aug 29 05:05:33.713942 2026] [security2:error] [pid 1017536:tid 1017710] [client 20.48.250.41:61765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/mini.php"] [unique_id "apK8_SJcY4fy7tP-rU3prAAAAkA"]
[Sat Aug 29 05:05:33.729000 2026] [security2:error] [pid 1018003:tid 1018213] [client 168.107.94.195:53150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK8_TAh5Y1i2tUxg4HjlAAABfY"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:33.732872 2026] [security2:error] [pid 1017536:tid 1017755] [client 20.48.250.41:23470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/inege.php"] [unique_id "apK8_SJcY4fy7tP-rU3prQAAAm0"]
[Sat Aug 29 05:05:33.744773 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.104.104.62:33316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.jen.chow-s.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK8_TAh5Y1i2tUxg4HjlQAABcI"]
[Sat Aug 29 05:05:33.776268 2026] [security2:error] [pid 1017536:tid 1017758] [client 20.63.219.114:1551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/wp-2019.php"] [unique_id "apK8_SJcY4fy7tP-rU3psAAAAnA"]
[Sat Aug 29 05:05:33.782896 2026] [security2:error] [pid 1018003:tid 1018224] [client 158.23.147.79:62995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/admin.php"] [unique_id "apK8_TAh5Y1i2tUxg4HjlgAABgE"]
[Sat Aug 29 05:05:33.788587 2026] [security2:error] [pid 1017536:tid 1017778] [client 20.48.251.3:27185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/zz.php"] [unique_id "apK8_SJcY4fy7tP-rU3psgAAAoQ"]
[Sat Aug 29 05:05:33.796765 2026] [security2:error] [pid 1017536:tid 1017673] [client 20.104.104.62:45960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/blnux.php"] [unique_id "apK8_SJcY4fy7tP-rU3pswAAAhs"]
[Sat Aug 29 05:05:33.826982 2026] [security2:error] [pid 1017536:tid 1017723] [client 20.104.49.130:53859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/kj.php"] [unique_id "apK8_SJcY4fy7tP-rU3ptQAAAk0"]
[Sat Aug 29 05:05:33.833172 2026] [security2:error] [pid 1018003:tid 1018225] [client 192.145.125.70:35532] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "vickiandgreg.strangeworx.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "apK8_TAh5Y1i2tUxg4HjlwAABgI"]
[Sat Aug 29 05:05:33.847518 2026] [security2:error] [pid 1018003:tid 1018166] [client 20.48.250.41:27618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/elp.php"] [unique_id "apK8_TAh5Y1i2tUxg4HjmAAABcc"]
[Sat Aug 29 05:05:33.854869 2026] [security2:error] [pid 1017536:tid 1017751] [client 52.139.37.240:65297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.naturesfragrancelabs.com"] [uri "/wp-2019.php"] [unique_id "apK8_SJcY4fy7tP-rU3ptwAAAmk"]
[Sat Aug 29 05:05:33.869239 2026] [security2:error] [pid 1017536:tid 1017720] [client 65.111.4.250:21523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 250.4.111.65.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK8_SJcY4fy7tP-rU3ptgAAAko"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:33.884679 2026] [security2:error] [pid 1018003:tid 1018255] [client 74.248.24.12:23825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/wp-conflg.php"] [unique_id "apK8_TAh5Y1i2tUxg4HjmQAABh8"]
[Sat Aug 29 05:05:33.888910 2026] [security2:error] [pid 1017536:tid 1017611] [remote 34.148.90.28:42974] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/.env"] [unique_id "apK8_SJcY4fy7tP-rU3puAACk0o"]
[Sat Aug 29 05:05:33.889116 2026] [security2:error] [pid 1017536:tid 1017565] [remote 34.148.90.28:42974] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/.env"] [unique_id "apK8_SJcY4fy7tP-rU3puwACkxw"]
[Sat Aug 29 05:05:33.891099 2026] [security2:error] [pid 1017536:tid 1017646] [remote 34.148.90.28:42974] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/.env"] [unique_id "apK8_SJcY4fy7tP-rU3pvQACk20"]
[Sat Aug 29 05:05:33.891506 2026] [security2:error] [pid 1017536:tid 1017634] [remote 34.148.90.28:42974] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/api/.env/public/.env"] [unique_id "apK8_SJcY4fy7tP-rU3pvAACk2E"]
[Sat Aug 29 05:05:33.891570 2026] [security2:error] [pid 1018003:tid 1018199] [client 20.48.250.41:58507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/amp.php"] [unique_id "apK8_TAh5Y1i2tUxg4HjmgAABeg"]
[Sat Aug 29 05:05:33.913167 2026] [security2:error] [pid 1018003:tid 1018230] [client 20.48.250.41:23433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/wp-link10.php"] [unique_id "apK8_TAh5Y1i2tUxg4HjmwAABgY"]
[Sat Aug 29 05:05:33.919950 2026] [security2:error] [pid 1018003:tid 1018275] [client 158.23.147.79:58935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/worksec.php"] [unique_id "apK8_TAh5Y1i2tUxg4HjnAAABjM"]
[Sat Aug 29 05:05:33.926683 2026] [security2:error] [pid 1017536:tid 1017739] [client 74.248.24.12:21327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/wp-admin/a.php"] [unique_id "apK8_SJcY4fy7tP-rU3pwAAAAl0"]
[Sat Aug 29 05:05:33.952187 2026] [security2:error] [pid 1017536:tid 1017704] [client 20.48.251.3:27136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/test.php"] [unique_id "apK8_SJcY4fy7tP-rU3pxgAAAjo"]
[Sat Aug 29 05:05:33.980715 2026] [security2:error] [pid 1017536:tid 1017707] [client 20.48.250.41:27459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/666.php"] [unique_id "apK8_SJcY4fy7tP-rU3pygAAAj0"]
[Sat Aug 29 05:05:33.981824 2026] [security2:error] [pid 1017536:tid 1017691] [client 20.104.49.130:57522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/kj.php"] [unique_id "apK8_SJcY4fy7tP-rU3pywAAAi0"]
[Sat Aug 29 05:05:34.004596 2026] [security2:error] [pid 1017536:tid 1017784] [client 4.232.148.111:19603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/xda.php"] [unique_id "apK8_iJcY4fy7tP-rU3pzAAAAoo"]
[Sat Aug 29 05:05:34.018293 2026] [security2:error] [pid 1018003:tid 1018206] [client 20.63.219.114:1724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/alfa-rex1.php"] [unique_id "apK8_jAh5Y1i2tUxg4HjnQAABe8"]
[Sat Aug 29 05:05:34.023993 2026] [security2:error] [pid 1018003:tid 1018212] [client 20.104.49.130:51109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/sxxb.php"] [unique_id "apK8_jAh5Y1i2tUxg4HjngAABfU"]
[Sat Aug 29 05:05:34.026107 2026] [security2:error] [pid 1017536:tid 1017779] [client 20.48.251.3:14276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/pinfo.php"] [unique_id "apK8_iJcY4fy7tP-rU3pzQAAAoU"]
[Sat Aug 29 05:05:34.029092 2026] [security2:error] [pid 1017536:tid 1017746] [client 68.155.159.216:50183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/goat.php"] [unique_id "apK8_iJcY4fy7tP-rU3pzgAAAmQ"]
[Sat Aug 29 05:05:34.030264 2026] [security2:error] [pid 1018003:tid 1018205] [client 158.158.54.35:9457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK8_jAh5Y1i2tUxg4HjnwAABe4"]
[Sat Aug 29 05:05:34.042012 2026] [security2:error] [pid 1018003:tid 1018248] [client 20.196.209.81:21100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/wxo.php"] [unique_id "apK8_jAh5Y1i2tUxg4HjoAAABhg"]
[Sat Aug 29 05:05:34.052940 2026] [security2:error] [pid 1017536:tid 1017709] [client 52.139.37.240:65306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.naturesfragrancelabs.com"] [uri "/gecko-new.php"] [unique_id "apK8_iJcY4fy7tP-rU3p0AAAAj8"]
[Sat Aug 29 05:05:34.065173 2026] [security2:error] [pid 1017536:tid 1017593] [remote 103.74.116.219:42506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.116.74.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ujwonline.org"] [uri "/wp-login.php"] [unique_id "apK8_iJcY4fy7tP-rU3pzwACiTg"]
[Sat Aug 29 05:05:34.074912 2026] [security2:error] [pid 1018003:tid 1018215] [client 20.196.209.81:15787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/inputs.php"] [unique_id "apK8_jAh5Y1i2tUxg4HjoQAABfg"]
[Sat Aug 29 05:05:34.080181 2026] [security2:error] [pid 1017536:tid 1017696] [client 20.48.250.41:61779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/cc13.php"] [unique_id "apK8_iJcY4fy7tP-rU3p0gAAAjI"]
[Sat Aug 29 05:05:34.082794 2026] [security2:error] [pid 1018003:tid 1018153] [client 20.48.251.3:27199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/cloud.php"] [unique_id "apK8_jAh5Y1i2tUxg4HjogAABbo"]
[Sat Aug 29 05:05:34.091514 2026] [security2:error] [pid 1017536:tid 1017725] [client 87.219.197.128:50784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK8_iJcY4fy7tP-rU3p0wAAAk8"]
[Sat Aug 29 05:05:34.091616 2026] [security2:error] [pid 1017536:tid 1017725] [client 87.219.197.128:50784] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK8_iJcY4fy7tP-rU3p0wAAAk8"]
[Sat Aug 29 05:05:34.108448 2026] [security2:error] [pid 1018003:tid 1018185] [client 168.107.94.195:53504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK8_jAh5Y1i2tUxg4HjowAABdo"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:34.110768 2026] [security2:error] [pid 1017536:tid 1017690] [client 20.48.250.41:23377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/ww.php"] [unique_id "apK8_iJcY4fy7tP-rU3p1QAAAiw"]
[Sat Aug 29 05:05:34.126764 2026] [security2:error] [pid 1017536:tid 1017706] [client 4.205.62.107:55372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/wp-info.php"] [unique_id "apK8_iJcY4fy7tP-rU3p2AAAAjw"]
[Sat Aug 29 05:05:34.142629 2026] [security2:error] [pid 1017536:tid 1017761] [client 20.48.250.41:27528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/knmt.php"] [unique_id "apK8_iJcY4fy7tP-rU3p2gAAAnM"]
[Sat Aug 29 05:05:34.142890 2026] [security2:error] [pid 1017536:tid 1017740] [client 20.63.219.114:1685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/menu.php"] [unique_id "apK8_iJcY4fy7tP-rU3p2wAAAl4"]
[Sat Aug 29 05:05:34.142967 2026] [security2:error] [pid 1017536:tid 1017692] [client 4.232.148.111:32901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tiaandephraim.com"] [uri "/wp-admin.php"] [unique_id "apK8_iJcY4fy7tP-rU3p3AAAAi4"]
[Sat Aug 29 05:05:34.208458 2026] [security2:error] [pid 1017536:tid 1017753] [client 158.23.147.79:30597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK8_iJcY4fy7tP-rU3p3gAAAms"]
[Sat Aug 29 05:05:34.212034 2026] [security2:error] [pid 1018003:tid 1018221] [client 103.185.242.143:59587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK8_jAh5Y1i2tUxg4HjpQAABf4"]
[Sat Aug 29 05:05:34.212559 2026] [security2:error] [pid 1018003:tid 1018221] [client 103.185.242.143:59587] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK8_jAh5Y1i2tUxg4HjpQAABf4"]
[Sat Aug 29 05:05:34.214366 2026] [security2:error] [pid 1017536:tid 1017741] [client 20.48.251.3:27140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/asdf.php"] [unique_id "apK8_iJcY4fy7tP-rU3p4AAAAl8"]
[Sat Aug 29 05:05:34.219682 2026] [security2:error] [pid 1018003:tid 1018262] [client 20.48.250.41:58606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/aa.php"] [unique_id "apK8_jAh5Y1i2tUxg4HjpgAABiY"]
[Sat Aug 29 05:05:34.229191 2026] [security2:error] [pid 1017536:tid 1017666] [client 4.205.62.107:61092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "troop264olney.net"] [uri "/doc.php"] [unique_id "apK8_iJcY4fy7tP-rU3p4wAAAhQ"]
[Sat Aug 29 05:05:34.234986 2026] [security2:error] [pid 1018003:tid 1018243] [client 158.23.147.79:25589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/file88.php"] [unique_id "apK8_jAh5Y1i2tUxg4HjpwAABhM"]
[Sat Aug 29 05:05:34.238242 2026] [security2:error] [pid 1017536:tid 1017785] [client 20.48.250.41:23430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/w1px.php"] [unique_id "apK8_iJcY4fy7tP-rU3p5gAAAos"]
[Sat Aug 29 05:05:34.245512 2026] [security2:error] [pid 1018003:tid 1018038] [remote 34.138.108.56:53938] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:href. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "/../,ARGS:href"] [severity "CRITICAL"] [hostname "proppastie.com"] [uri "/_image"] [unique_id "apK8_jAh5Y1i2tUxg4HjqAAGHhE"]
[Sat Aug 29 05:05:34.245649 2026] [security2:error] [pid 1017536:tid 1017781] [client 158.23.147.79:24490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK8_iJcY4fy7tP-rU3p7QAAAoc"]
[Sat Aug 29 05:05:34.248587 2026] [security2:error] [pid 1017536:tid 1017716] [client 52.139.37.240:65300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.naturesfragrancelabs.com"] [uri "/add_actualites.php"] [unique_id "apK8_iJcY4fy7tP-rU3p7gAAAkY"]
[Sat Aug 29 05:05:34.249295 2026] [security2:error] [pid 1017536:tid 1017710] [client 20.48.251.3:14322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/X57.php"] [unique_id "apK8_iJcY4fy7tP-rU3p7wAAAkA"]
[Sat Aug 29 05:05:34.250009 2026] [security2:error] [pid 1018003:tid 1018157] [client 20.104.49.130:45745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.carlosmua.com"] [uri "/browse.php"] [unique_id "apK8_jAh5Y1i2tUxg4HjrgAABb4"]
[Sat Aug 29 05:05:34.274383 2026] [security2:error] [pid 1017536:tid 1017754] [client 20.48.250.41:26907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/sbhu.php"] [unique_id "apK8_iJcY4fy7tP-rU3p9AAAAmw"]
[Sat Aug 29 05:05:34.326902 2026] [security2:error] [pid 1017536:tid 1017742] [client 4.205.62.107:22359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/abcd.php"] [unique_id "apK8_iJcY4fy7tP-rU3p-QAAAmA"]
[Sat Aug 29 05:05:34.350022 2026] [security2:error] [pid 1018003:tid 1018191] [client 20.48.251.3:27154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/app/Helpers/bladeHelpers.php"] [unique_id "apK8_jAh5Y1i2tUxg4HjsAAABeA"]
[Sat Aug 29 05:05:34.370351 2026] [security2:error] [pid 1018003:tid 1018260] [client 20.48.250.41:58605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/s1.php"] [unique_id "apK8_jAh5Y1i2tUxg4HjsQAABiQ"]
[Sat Aug 29 05:05:34.397305 2026] [security2:error] [pid 1018003:tid 1018170] [client 20.48.251.3:14284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/register.php"] [unique_id "apK8_jAh5Y1i2tUxg4HjsgAABcs"]
[Sat Aug 29 05:05:34.399332 2026] [security2:error] [pid 1018003:tid 1018232] [client 158.23.147.79:48279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/file.php"] [unique_id "apK8_jAh5Y1i2tUxg4HjswAABgg"]
[Sat Aug 29 05:05:34.403545 2026] [security2:error] [pid 1017536:tid 1017719] [client 74.248.24.12:32584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/123.php"] [unique_id "apK8_iJcY4fy7tP-rU3p-wAAAkk"]
[Sat Aug 29 05:05:34.403583 2026] [security2:error] [pid 1017536:tid 1017771] [client 20.63.219.114:9229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/headerg.php"] [unique_id "apK8_iJcY4fy7tP-rU3p_AAAAn0"]
[Sat Aug 29 05:05:34.406423 2026] [security2:error] [pid 1017536:tid 1017700] [client 4.205.62.107:9000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/php-details.php"] [unique_id "apK8_iJcY4fy7tP-rU3p_QAAAjY"]
[Sat Aug 29 05:05:34.419278 2026] [security2:error] [pid 1018003:tid 1018217] [client 192.145.125.70:39858] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "vickiandgreg.strangeworx.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "apK8_jAh5Y1i2tUxg4HjtAAABfo"]
[Sat Aug 29 05:05:34.438694 2026] [autoindex:error] [pid 1017536:tid 1017694] [client 45.148.10.62:50722] AH01276: Cannot serve directory /home3/vzofmemy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:05:34.441280 2026] [security2:error] [pid 1018003:tid 1018222] [client 4.205.62.107:21876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/_js.jpg..bk.php"] [unique_id "apK8_jAh5Y1i2tUxg4HjtQAABf8"]
[Sat Aug 29 05:05:34.443067 2026] [security2:error] [pid 1018003:tid 1018188] [client 52.139.37.240:65280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.naturesfragrancelabs.com"] [uri "/browse.php"] [unique_id "apK8_jAh5Y1i2tUxg4HjtgAABd0"]
[Sat Aug 29 05:05:34.448347 2026] [core:error] [pid 1017536:tid 1017713] [client 74.248.24.12:25706] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:34.448372 2026] [core:error] [pid 1017536:tid 1017713] [client 74.248.24.12:25706] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:34.452414 2026] [security2:error] [pid 1017536:tid 1017673] [client 20.196.209.81:10718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/as.php"] [unique_id "apK8_iJcY4fy7tP-rU3qAgAAAhs"]
[Sat Aug 29 05:05:34.455336 2026] [security2:error] [pid 1017536:tid 1017678] [client 20.48.250.41:23444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/to.php"] [unique_id "apK8_iJcY4fy7tP-rU3qAwAAAiA"]
[Sat Aug 29 05:05:34.461535 2026] [security2:error] [pid 1017536:tid 1017554] [remote 34.148.90.28:42974] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/images../.env"] [unique_id "apK8_iJcY4fy7tP-rU3qBAACZBE"]
[Sat Aug 29 05:05:34.462779 2026] [security2:error] [pid 1017536:tid 1017675] [client 216.73.216.199:4845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 199.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "origeneshechoamano.sortthru.com"] [uri "/webapp/wp-admin/admin-ajax.php"] [unique_id "apK8_iJcY4fy7tP-rU3qBgAAAh0"]
[Sat Aug 29 05:05:34.470961 2026] [security2:error] [pid 1017536:tid 1017723] [client 4.232.148.111:24079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/theme.php"] [unique_id "apK8_iJcY4fy7tP-rU3qBwAAAk0"]
[Sat Aug 29 05:05:34.475803 2026] [security2:error] [pid 1017536:tid 1017708] [client 4.205.62.107:65508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/ammika.php"] [unique_id "apK8_iJcY4fy7tP-rU3qCAAAAj4"]
[Sat Aug 29 05:05:34.482648 2026] [security2:error] [pid 1018003:tid 1018154] [client 158.158.54.35:22481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/bthil.php"] [unique_id "apK8_jAh5Y1i2tUxg4HjvAAABbs"]
[Sat Aug 29 05:05:34.484203 2026] [security2:error] [pid 1017536:tid 1017684] [client 20.48.251.3:27153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/hochladen.form.php"] [unique_id "apK8_iJcY4fy7tP-rU3qCgAAAiY"]
[Sat Aug 29 05:05:34.485447 2026] [security2:error] [pid 1018003:tid 1018152] [client 20.196.209.81:9505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/class-walker-category-dropdown-class.php"] [unique_id "apK8_jAh5Y1i2tUxg4HjvQAABbk"]
[Sat Aug 29 05:05:34.487624 2026] [security2:error] [pid 1018003:tid 1018234] [client 168.107.94.195:53914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK8_jAh5Y1i2tUxg4HjvgAABgo"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:34.489647 2026] [security2:error] [pid 1017536:tid 1017743] [client 20.48.250.41:27539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/a332.php"] [unique_id "apK8_iJcY4fy7tP-rU3qCwAAAmE"]
[Sat Aug 29 05:05:34.499318 2026] [security2:error] [pid 1017536:tid 1017755] [client 104.207.51.70:27249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.51.207.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK8_iJcY4fy7tP-rU3qAAAAAm0"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:34.511602 2026] [security2:error] [pid 1017536:tid 1017688] [client 4.205.62.107:2946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/update.php"] [unique_id "apK8_iJcY4fy7tP-rU3qDAAAAio"]
[Sat Aug 29 05:05:34.546788 2026] [security2:error] [pid 1017536:tid 1017721] [client 20.48.251.3:13961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/xqq.php"] [unique_id "apK8_iJcY4fy7tP-rU3qDQAAAks"]
[Sat Aug 29 05:05:34.548051 2026] [security2:error] [pid 1018003:tid 1018186] [client 20.48.250.41:58603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/0byte.php"] [unique_id "apK8_jAh5Y1i2tUxg4HjvwAABds"]
[Sat Aug 29 05:05:34.573675 2026] [security2:error] [pid 1017536:tid 1017744] [client 68.155.159.216:14149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/cgi-bin/index.php"] [unique_id "apK8_iJcY4fy7tP-rU3qDwAAAmI"]
[Sat Aug 29 05:05:34.574208 2026] [security2:error] [pid 1017536:tid 1017645] [remote 103.74.116.219:42506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.116.74.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ujwonline.org"] [uri "/wp-login.php"] [unique_id "apK8_iJcY4fy7tP-rU3qDgACPGw"], referer: https://ujwonline.org/wp-login.php
[Sat Aug 29 05:05:34.575409 2026] [security2:error] [pid 1017536:tid 1017717] [client 20.63.219.114:18380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/alfa.php"] [unique_id "apK8_iJcY4fy7tP-rU3qEAAAAkc"]
[Sat Aug 29 05:05:34.575986 2026] [security2:error] [pid 1017536:tid 1017680] [client 45.148.10.62:38672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vvr.ewu.mybluehost.me"] [uri "/wp-config.php"] [unique_id "apK8_iJcY4fy7tP-rU3qEQAAAiI"]
[Sat Aug 29 05:05:34.582000 2026] [core:error] [pid 1017536:tid 1017654] [remote 34.148.90.28:42974] AH10244: invalid URI path (/%2e%2e/.env)
[Sat Aug 29 05:05:34.582963 2026] [security2:error] [pid 1017536:tid 1017547] [remote 34.148.90.28:42974] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/assets../.env"] [unique_id "apK8_iJcY4fy7tP-rU3qFQACZwo"]
[Sat Aug 29 05:05:34.585336 2026] [security2:error] [pid 1017536:tid 1017695] [client 45.148.10.62:50722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.vzo.fme.mybluehost.me"] [uri "/.env"] [unique_id "apK8_iJcY4fy7tP-rU3qFwAAAjE"]
[Sat Aug 29 05:05:34.601819 2026] [security2:error] [pid 1017536:tid 1017740] [client 20.48.250.41:23458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/thui.php"] [unique_id "apK8_iJcY4fy7tP-rU3qGAAAAl4"]
[Sat Aug 29 05:05:34.623192 2026] [security2:error] [pid 1017536:tid 1017770] [client 20.48.250.41:26920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/ws66.php"] [unique_id "apK8_iJcY4fy7tP-rU3qGgAAAnw"]
[Sat Aug 29 05:05:34.627067 2026] [security2:error] [pid 1018003:tid 1018187] [client 20.48.251.3:28417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/debuggen.php"] [unique_id "apK8_jAh5Y1i2tUxg4HjxgAABdw"]
[Sat Aug 29 05:05:34.660077 2026] [security2:error] [pid 1017536:tid 1017738] [client 52.139.37.240:54197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.naturesfragrancelabs.com"] [uri "/contentloader1.php"] [unique_id "apK8_iJcY4fy7tP-rU3qGwAAAlw"]
[Sat Aug 29 05:05:34.667085 2026] [security2:error] [pid 1018003:tid 1018180] [client 68.155.159.216:16231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-content/cong.php"] [unique_id "apK8_jAh5Y1i2tUxg4HjxwAABdU"]
[Sat Aug 29 05:05:34.676064 2026] [security2:error] [pid 1017536:tid 1017640] [remote 34.148.90.28:42974] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/uploads../.env"] [unique_id "apK8_iJcY4fy7tP-rU3qHAACa2c"]
[Sat Aug 29 05:05:34.734742 2026] [security2:error] [pid 1017536:tid 1017667] [client 45.148.10.62:50722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.vzo.fme.mybluehost.me"] [uri "/.env"] [unique_id "apK8_iJcY4fy7tP-rU3qHgAAAhU"]
[Sat Aug 29 05:05:34.743005 2026] [security2:error] [pid 1018003:tid 1018257] [client 68.155.159.216:33757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/file17.php"] [unique_id "apK8_jAh5Y1i2tUxg4HjyAAABiE"]
[Sat Aug 29 05:05:34.752149 2026] [security2:error] [pid 1017536:tid 1017716] [client 20.48.250.41:27614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/ws68.php"] [unique_id "apK8_iJcY4fy7tP-rU3qHwAAAkY"]
[Sat Aug 29 05:05:34.756692 2026] [security2:error] [pid 1018003:tid 1018226] [client 20.48.251.3:27163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/pouhg.php"] [unique_id "apK8_jAh5Y1i2tUxg4HjyQAABgM"]
[Sat Aug 29 05:05:34.761751 2026] [security2:error] [pid 1018003:tid 1018158] [client 20.63.219.114:18382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/meta.php"] [unique_id "apK8_jAh5Y1i2tUxg4HjzgAABb8"]
[Sat Aug 29 05:05:34.764649 2026] [security2:error] [pid 1018003:tid 1018163] [client 20.48.250.41:23520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/Jcrop.php"] [unique_id "apK8_jAh5Y1i2tUxg4HjzwAABcQ"]
[Sat Aug 29 05:05:34.774859 2026] [security2:error] [pid 1018003:tid 1018268] [client 20.48.250.41:61773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/xr.php"] [unique_id "apK8_jAh5Y1i2tUxg4Hj0AAABiw"]
[Sat Aug 29 05:05:34.801628 2026] [security2:error] [pid 1017536:tid 1017727] [client 68.155.159.216:51797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK8_iJcY4fy7tP-rU3qIAAAAlE"]
[Sat Aug 29 05:05:34.802276 2026] [security2:error] [pid 1017536:tid 1017778] [client 158.23.147.79:50076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/wp-includes/index.php"] [unique_id "apK8_iJcY4fy7tP-rU3qIQAAAoQ"]
[Sat Aug 29 05:05:34.853803 2026] [security2:error] [pid 1018003:tid 1018269] [client 20.104.49.130:54890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/abcd.php"] [unique_id "apK8_jAh5Y1i2tUxg4Hj1gAABi0"]
[Sat Aug 29 05:05:34.854106 2026] [security2:error] [pid 1017536:tid 1017702] [client 52.139.37.240:38122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.naturesfragrancelabs.com"] [uri "/upfile.php"] [unique_id "apK8_iJcY4fy7tP-rU3qIgAAAjg"]
[Sat Aug 29 05:05:34.867061 2026] [security2:error] [pid 1017536:tid 1017668] [client 168.107.94.195:54263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK8_iJcY4fy7tP-rU3qIwAAAhY"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:34.872759 2026] [security2:error] [pid 1017536:tid 1017785] [client 20.196.209.81:12726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/room.php"] [unique_id "apK8_iJcY4fy7tP-rU3qJAAAAos"]
[Sat Aug 29 05:05:34.892578 2026] [security2:error] [pid 1017536:tid 1017752] [client 20.48.250.41:23541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/ws58.php"] [unique_id "apK8_iJcY4fy7tP-rU3qJgAAAmo"]
[Sat Aug 29 05:05:34.897247 2026] [security2:error] [pid 1017536:tid 1017724] [client 20.48.250.41:26922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/users.php"] [unique_id "apK8_iJcY4fy7tP-rU3qJwAAAk4"]
[Sat Aug 29 05:05:34.901239 2026] [security2:error] [pid 1017536:tid 1017732] [client 158.23.147.79:63838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-admin/admin.php"] [unique_id "apK8_iJcY4fy7tP-rU3qKAAAAlY"]
[Sat Aug 29 05:05:34.902097 2026] [security2:error] [pid 1018003:tid 1018213] [client 20.48.251.3:33307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/public/vx.php"] [unique_id "apK8_jAh5Y1i2tUxg4Hj1wAABfY"]
[Sat Aug 29 05:05:34.903021 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.48.250.41:58618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/h02ugyh.php"] [unique_id "apK8_jAh5Y1i2tUxg4Hj2AAABcI"]
[Sat Aug 29 05:05:34.904279 2026] [security2:error] [pid 1017536:tid 1017719] [client 20.48.251.3:27147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/phpversion.php"] [unique_id "apK8_iJcY4fy7tP-rU3qKQAAAkk"]
[Sat Aug 29 05:05:34.906573 2026] [security2:error] [pid 1018003:tid 1018249] [client 20.196.209.81:25080] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.firstcutfilm.com"] [uri "/1.php7"] [unique_id "apK8_jAh5Y1i2tUxg4Hj2QAABhk"]
[Sat Aug 29 05:05:34.906674 2026] [security2:error] [pid 1018003:tid 1018249] [client 20.196.209.81:25080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/1.php7"] [unique_id "apK8_jAh5Y1i2tUxg4Hj2QAABhk"]
[Sat Aug 29 05:05:34.931821 2026] [security2:error] [pid 1018003:tid 1018274] [client 74.248.24.12:33212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/yanz.php"] [unique_id "apK8_jAh5Y1i2tUxg4Hj2gAABjI"]
[Sat Aug 29 05:05:34.949436 2026] [security2:error] [pid 1017536:tid 1017714] [client 68.155.159.216:12210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK8_iJcY4fy7tP-rU3qKwAAAkQ"]
[Sat Aug 29 05:05:34.950237 2026] [security2:error] [pid 1017536:tid 1017775] [client 4.232.148.111:18051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/classwithtostring.php"] [unique_id "apK8_iJcY4fy7tP-rU3qLAAAAoE"]
[Sat Aug 29 05:05:34.951217 2026] [security2:error] [pid 1017536:tid 1017777] [client 20.63.219.114:7481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/feed-rss2-queue.php"] [unique_id "apK8_iJcY4fy7tP-rU3qLQAAAoM"]
[Sat Aug 29 05:05:34.965703 2026] [security2:error] [pid 1017536:tid 1017704] [client 35.198.240.194:52344] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.omni-staffing.com"] [uri "/@fs/var/task/.env"] [unique_id "apK8_iJcY4fy7tP-rU3qMQAAAjo"]
[Sat Aug 29 05:05:34.968338 2026] [security2:error] [pid 1017536:tid 1017726] [client 35.198.240.194:52364] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "mail.omni-staffing.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK8_iJcY4fy7tP-rU3qNAAAAlA"]
[Sat Aug 29 05:05:34.968631 2026] [security2:error] [pid 1017536:tid 1017726] [client 35.198.240.194:52364] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.omni-staffing.com"] [uri "/cgi-sys/403.html"] [unique_id "apK8_iJcY4fy7tP-rU3qNAAAAlA"]
[Sat Aug 29 05:05:34.970123 2026] [security2:error] [pid 1017536:tid 1017767] [client 35.198.240.194:52350] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/@fs/proc/self/cwd/.env"] [unique_id "apK8_iJcY4fy7tP-rU3qNQAAAnk"]
[Sat Aug 29 05:05:34.970197 2026] [security2:error] [pid 1017536:tid 1017767] [client 35.198.240.194:52350] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "mail.omni-staffing.com"] [uri "/@fs/proc/self/cwd/.env"] [unique_id "apK8_iJcY4fy7tP-rU3qNQAAAnk"]
[Sat Aug 29 05:05:34.970302 2026] [security2:error] [pid 1018003:tid 1018265] [client 35.198.240.194:52294] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.omni-staffing.com"] [uri "/cgi-sys/404.html"] [unique_id "apK8_jAh5Y1i2tUxg4Hj3QAABik"]
[Sat Aug 29 05:05:34.970881 2026] [security2:error] [pid 1017536:tid 1017754] [client 74.248.24.12:3520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK8_iJcY4fy7tP-rU3qOQAAAmw"]
[Sat Aug 29 05:05:35.020733 2026] [security2:error] [pid 1017536:tid 1017670] [client 192.145.125.70:39872] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "vickiandgreg.strangeworx.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "apK8_yJcY4fy7tP-rU3qOgAAAhg"]
[Sat Aug 29 05:05:35.028034 2026] [security2:error] [pid 1018003:tid 1018255] [client 158.23.147.79:60215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/x.php"] [unique_id "apK8_zAh5Y1i2tUxg4Hj4QAABh8"]
[Sat Aug 29 05:05:35.040204 2026] [security2:error] [pid 1017536:tid 1017779] [client 20.48.251.3:28435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/adminfus.php"] [unique_id "apK8_yJcY4fy7tP-rU3qPAAAAoU"]
[Sat Aug 29 05:05:35.046410 2026] [autoindex:error] [pid 1017536:tid 1017673] [client 45.148.10.62:50722] AH01276: Cannot serve directory /home3/vzofmemy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:05:35.048806 2026] [security2:error] [pid 1017536:tid 1017674] [client 52.139.37.240:54176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.naturesfragrancelabs.com"] [uri "/form.php"] [unique_id "apK8_yJcY4fy7tP-rU3qPQAAAhw"]
[Sat Aug 29 05:05:35.057910 2026] [security2:error] [pid 1017536:tid 1017678] [client 20.48.250.41:23499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/xs.php"] [unique_id "apK8_yJcY4fy7tP-rU3qPgAAAiA"]
[Sat Aug 29 05:05:35.074831 2026] [security2:error] [pid 1017536:tid 1017746] [client 158.158.54.35:35939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/cv.php"] [unique_id "apK8_yJcY4fy7tP-rU3qQAAAAmQ"]
[Sat Aug 29 05:05:35.075239 2026] [security2:error] [pid 1017536:tid 1017700] [client 45.148.10.62:50738] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "mail.vvr.ewu.mybluehost.me"] [uri "/wp-config.php.old"] [unique_id "apK8_yJcY4fy7tP-rU3qQQAAAjY"]
[Sat Aug 29 05:05:35.078572 2026] [security2:error] [pid 1017536:tid 1017723] [client 20.48.250.41:61814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/xxw.php"] [unique_id "apK8_yJcY4fy7tP-rU3qQgAAAk0"]
[Sat Aug 29 05:05:35.097190 2026] [security2:error] [pid 1017536:tid 1017684] [client 20.48.250.41:26890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/bzjdlofz.php"] [unique_id "apK8_yJcY4fy7tP-rU3qRAAAAiY"]
[Sat Aug 29 05:05:35.100211 2026] [security2:error] [pid 1017536:tid 1017693] [client 209.50.182.59:50717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.182.50.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK8_yJcY4fy7tP-rU3qPwAAAi8"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:35.100617 2026] [security2:error] [pid 1017536:tid 1017743] [client 68.155.159.216:64866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.gavirestaurant.com"] [uri "/nf_tracking.php"] [unique_id "apK8_yJcY4fy7tP-rU3qRQAAAmE"]
[Sat Aug 29 05:05:35.115953 2026] [security2:error] [pid 1017536:tid 1017703] [client 20.63.219.114:18421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/dxc.php"] [unique_id "apK8_yJcY4fy7tP-rU3qRgAAAjk"]
[Sat Aug 29 05:05:35.134071 2026] [security2:error] [pid 1017536:tid 1017696] [client 68.155.159.216:50227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK8_yJcY4fy7tP-rU3qSAAAAjI"]
[Sat Aug 29 05:05:35.136695 2026] [security2:error] [pid 1017536:tid 1017652] [remote 162.55.89.48:58074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 48.89.55.162.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/wp-login.php"] [unique_id "apK8_yJcY4fy7tP-rU3qSQACJXM"]
[Sat Aug 29 05:05:35.167419 2026] [security2:error] [pid 1017536:tid 1017745] [client 20.48.251.3:28439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/avim.php"] [unique_id "apK8_yJcY4fy7tP-rU3qSwAAAmM"]
[Sat Aug 29 05:05:35.181878 2026] [security2:error] [pid 1018003:tid 1018266] [client 20.104.49.130:53706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/az.php"] [unique_id "apK8_zAh5Y1i2tUxg4Hj5AAABio"]
[Sat Aug 29 05:05:35.188510 2026] [security2:error] [pid 1017536:tid 1017680] [client 20.48.250.41:23531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/zu.php"] [unique_id "apK8_yJcY4fy7tP-rU3qTQAAAiI"]
[Sat Aug 29 05:05:35.213699 2026] [security2:error] [pid 1017536:tid 1017740] [client 20.48.250.41:61797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/bolt.php"] [unique_id "apK8_yJcY4fy7tP-rU3qUAAAAl4"]
[Sat Aug 29 05:05:35.218839 2026] [security2:error] [pid 1017536:tid 1017641] [remote 34.148.90.28:42974] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/img../.env"] [unique_id "apK8_yJcY4fy7tP-rU3qUQACkmg"]
[Sat Aug 29 05:05:35.220782 2026] [security2:error] [pid 1017536:tid 1017780] [client 20.104.49.130:52536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/sd.php"] [unique_id "apK8_yJcY4fy7tP-rU3qUgAAAoY"]
[Sat Aug 29 05:05:35.245887 2026] [security2:error] [pid 1017536:tid 1017735] [client 52.139.37.240:54171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.naturesfragrancelabs.com"] [uri "/wp-sigunq.php"] [unique_id "apK8_yJcY4fy7tP-rU3qVAAAAlk"]
[Sat Aug 29 05:05:35.268564 2026] [security2:error] [pid 1017536:tid 1017764] [client 4.205.62.107:61876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/fns.php"] [unique_id "apK8_yJcY4fy7tP-rU3qVgAAAnY"]
[Sat Aug 29 05:05:35.269652 2026] [security2:error] [pid 1017536:tid 1017730] [client 168.107.94.195:54614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK8_yJcY4fy7tP-rU3qVwAAAlQ"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:35.287698 2026] [security2:error] [pid 1017536:tid 1017781] [client 20.48.250.41:27634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/selesai.php"] [unique_id "apK8_yJcY4fy7tP-rU3qWAAAAoc"]
[Sat Aug 29 05:05:35.299496 2026] [security2:error] [pid 1017536:tid 1017786] [client 20.48.251.3:27150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/nw.php"] [unique_id "apK8_yJcY4fy7tP-rU3qWQAAAow"]
[Sat Aug 29 05:05:35.307063 2026] [security2:error] [pid 1017536:tid 1017717] [client 20.63.219.114:18429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/inputs.php"] [unique_id "apK8_yJcY4fy7tP-rU3qWgAAAkc"]
[Sat Aug 29 05:05:35.325380 2026] [security2:error] [pid 1017536:tid 1017776] [client 158.23.147.79:30713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/simple.php"] [unique_id "apK8_yJcY4fy7tP-rU3qWwAAAoI"]
[Sat Aug 29 05:05:35.345220 2026] [security2:error] [pid 1018003:tid 1018231] [client 20.104.49.130:57720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/memberfuns.php"] [unique_id "apK8_zAh5Y1i2tUxg4Hj6wAABgc"]
[Sat Aug 29 05:05:35.345765 2026] [security2:error] [pid 1017536:tid 1017731] [client 20.196.209.81:15745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/ds.php"] [unique_id "apK8_yJcY4fy7tP-rU3qXgAAAlU"]
[Sat Aug 29 05:05:35.351066 2026] [security2:error] [pid 1017536:tid 1017751] [client 158.23.147.79:25565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/NewFile.php/"] [unique_id "apK8_yJcY4fy7tP-rU3qXwAAAmk"]
[Sat Aug 29 05:05:35.351742 2026] [security2:error] [pid 1017536:tid 1017742] [client 45.148.10.62:50722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.vzo.fme.mybluehost.me"] [uri "/api/.env"] [unique_id "apK8_yJcY4fy7tP-rU3qYAAAAmA"]
[Sat Aug 29 05:05:35.364389 2026] [security2:error] [pid 1018003:tid 1018247] [client 20.48.250.41:23427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/lanka.php"] [unique_id "apK8_zAh5Y1i2tUxg4Hj7AAABhc"]
[Sat Aug 29 05:05:35.405834 2026] [security2:error] [pid 1017536:tid 1017753] [client 20.196.209.81:12708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/class-wp-cmd.php"] [unique_id "apK8_yJcY4fy7tP-rU3qYQAAAms"]
[Sat Aug 29 05:05:35.424169 2026] [security2:error] [pid 1017536:tid 1017790] [client 4.232.148.111:18062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/news.php"] [unique_id "apK8_yJcY4fy7tP-rU3qYgAAApA"]
[Sat Aug 29 05:05:35.434122 2026] [security2:error] [pid 1017536:tid 1017705] [client 20.48.251.3:57820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/product.php"] [unique_id "apK8_yJcY4fy7tP-rU3qZAAAAjs"]
[Sat Aug 29 05:05:35.442225 2026] [security2:error] [pid 1017536:tid 1017733] [client 52.139.37.240:38089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.naturesfragrancelabs.com"] [uri "/07.php"] [unique_id "apK8_yJcY4fy7tP-rU3qZQAAAlc"]
[Sat Aug 29 05:05:35.445346 2026] [security2:error] [pid 1018003:tid 1018216] [client 74.248.24.12:41265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/autoload_classmap.php"] [unique_id "apK8_zAh5Y1i2tUxg4Hj7QAABfk"]
[Sat Aug 29 05:05:35.449715 2026] [security2:error] [pid 1017536:tid 1017714] [client 68.155.159.216:56909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK8_yJcY4fy7tP-rU3qZwAAAkQ"]
[Sat Aug 29 05:05:35.452129 2026] [security2:error] [pid 1018003:tid 1018206] [client 20.48.251.3:13990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/ebahvhhh.php"] [unique_id "apK8_zAh5Y1i2tUxg4Hj7gAABe8"]
[Sat Aug 29 05:05:35.455415 2026] [security2:error] [pid 1017536:tid 1017647] [remote 34.148.90.28:42974] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/@fs/var/task/.env"] [unique_id "apK8_yJcY4fy7tP-rU3qaAACgW4"]
[Sat Aug 29 05:05:35.456373 2026] [security2:error] [pid 1017536:tid 1017777] [client 68.155.159.216:16214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.showerdoorsdubuque.com"] [uri "/wp-content/x.php"] [unique_id "apK8_yJcY4fy7tP-rU3qaQAAAoM"]
[Sat Aug 29 05:05:35.472225 2026] [security2:error] [pid 1017536:tid 1017689] [client 74.248.24.12:4068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/wp-admin.php"] [unique_id "apK8_yJcY4fy7tP-rU3qbAAAAis"]
[Sat Aug 29 05:05:35.487320 2026] [security2:error] [pid 1017536:tid 1017729] [client 4.205.62.107:22517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/userfuns.php"] [unique_id "apK8_yJcY4fy7tP-rU3qbQAAAlM"]
[Sat Aug 29 05:05:35.492052 2026] [security2:error] [pid 1017536:tid 1017722] [client 20.48.250.41:58498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/rtx.php"] [unique_id "apK8_yJcY4fy7tP-rU3qbgAAAkw"]
[Sat Aug 29 05:05:35.494279 2026] [security2:error] [pid 1017536:tid 1017767] [client 4.205.62.107:61109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "troop264olney.net"] [uri "/classsmtps.php"] [unique_id "apK8_yJcY4fy7tP-rU3qcAAAAnk"]
[Sat Aug 29 05:05:35.498942 2026] [security2:error] [pid 1017536:tid 1017691] [client 45.148.10.62:50722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.vzo.fme.mybluehost.me"] [uri "/.env.bak"] [unique_id "apK8_yJcY4fy7tP-rU3qcQAAAi0"]
[Sat Aug 29 05:05:35.503298 2026] [security2:error] [pid 1017536:tid 1017635] [remote 34.148.90.28:42974] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/@fs/proc/self/cwd/.env"] [unique_id "apK8_yJcY4fy7tP-rU3qcgACWmI"]
[Sat Aug 29 05:05:35.506881 2026] [security2:error] [pid 1017536:tid 1017765] [client 158.23.147.79:48247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/file17.php"] [unique_id "apK8_yJcY4fy7tP-rU3qcwAAAnc"]
[Sat Aug 29 05:05:35.509466 2026] [security2:error] [pid 1017536:tid 1017553] [remote 34.148.90.28:42974] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "hitechgs.com"] [uri "/api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ"] [unique_id "apK8_yJcY4fy7tP-rU3qdAAChRA"]
[Sat Aug 29 05:05:35.531315 2026] [security2:error] [pid 1017536:tid 1017785] [client 158.158.54.35:9964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-content/packed.php"] [unique_id "apK8_yJcY4fy7tP-rU3qdQAAAos"]
[Sat Aug 29 05:05:35.537648 2026] [security2:error] [pid 1018003:tid 1018200] [client 45.148.10.62:50746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vvr.ewu.mybluehost.me"] [uri "/config.php"] [unique_id "apK8_zAh5Y1i2tUxg4Hj7wAABek"]
[Sat Aug 29 05:05:35.543771 2026] [security2:error] [pid 1017536:tid 1017752] [client 20.63.219.114:1675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/wp-2019.php"] [unique_id "apK8_yJcY4fy7tP-rU3qdgAAAmo"]
[Sat Aug 29 05:05:35.560073 2026] [security2:error] [pid 1017536:tid 1017746] [client 20.48.250.41:23544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/gettest.php"] [unique_id "apK8_yJcY4fy7tP-rU3qeAAAAmQ"]
[Sat Aug 29 05:05:35.580541 2026] [security2:error] [pid 1017536:tid 1017708] [client 4.205.62.107:22223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/setup-config.php"] [unique_id "apK8_yJcY4fy7tP-rU3qeQAAAj4"]
[Sat Aug 29 05:05:35.581985 2026] [security2:error] [pid 1017536:tid 1017723] [client 20.48.251.3:28464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/fun.php"] [unique_id "apK8_yJcY4fy7tP-rU3qegAAAk0"]
[Sat Aug 29 05:05:35.597279 2026] [security2:error] [pid 1017536:tid 1017684] [client 4.205.62.107:53337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/ms-edit.php"] [unique_id "apK8_yJcY4fy7tP-rU3qewAAAiY"]
[Sat Aug 29 05:05:35.608555 2026] [security2:error] [pid 1017536:tid 1017693] [client 4.205.62.107:65503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/broadcasting.php"] [unique_id "apK8_yJcY4fy7tP-rU3qfAAAAi8"]
[Sat Aug 29 05:05:35.629094 2026] [security2:error] [pid 1018003:tid 1018185] [client 20.48.250.41:58600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/ckk.php"] [unique_id "apK8_zAh5Y1i2tUxg4Hj9gAABdo"]
[Sat Aug 29 05:05:35.648188 2026] [security2:error] [pid 1017536:tid 1017783] [client 4.205.62.107:2632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/fns.php"] [unique_id "apK8_yJcY4fy7tP-rU3qfgAAAok"]
[Sat Aug 29 05:05:35.652387 2026] [security2:error] [pid 1018003:tid 1018276] [client 168.107.94.195:54951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK8_zAh5Y1i2tUxg4Hj9wAABjQ"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:35.656199 2026] [security2:error] [pid 1017536:tid 1017709] [client 52.139.37.240:65323] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "autodiscover.naturesfragrancelabs.com"] [uri "/c99.php"] [unique_id "apK8_yJcY4fy7tP-rU3qgAAAAj8"]
[Sat Aug 29 05:05:35.678271 2026] [security2:error] [pid 1018003:tid 1018195] [client 20.63.219.114:18389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/class-walker-category-dropdown-class.php"] [unique_id "apK8_zAh5Y1i2tUxg4Hj-QAABeQ"]
[Sat Aug 29 05:05:35.679985 2026] [security2:error] [pid 1017536:tid 1017784] [client 65.111.20.229:40409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 229.20.111.65.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK8_yJcY4fy7tP-rU3qfwAAAoo"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:35.713118 2026] [security2:error] [pid 1017536:tid 1017745] [client 20.48.250.41:27612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/shlo.php"] [unique_id "apK8_yJcY4fy7tP-rU3qgQAAAmM"]
[Sat Aug 29 05:05:35.715663 2026] [security2:error] [pid 1018003:tid 1018253] [client 20.48.251.3:57882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/kedi.php"] [unique_id "apK8_zAh5Y1i2tUxg4Hj-gAABh0"]
[Sat Aug 29 05:05:35.715851 2026] [security2:error] [pid 1017536:tid 1017744] [client 20.48.250.41:23512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/35.php"] [unique_id "apK8_yJcY4fy7tP-rU3qggAAAmI"]
[Sat Aug 29 05:05:35.721517 2026] [security2:error] [pid 1018003:tid 1018159] [client 68.155.159.216:14304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK8_zAh5Y1i2tUxg4Hj-wAABcA"]
[Sat Aug 29 05:05:35.751943 2026] [security2:error] [pid 1018003:tid 1018174] [client 20.196.209.81:25055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/GOD.php"] [unique_id "apK8_zAh5Y1i2tUxg4Hj_AAABc8"]
[Sat Aug 29 05:05:35.789943 2026] [security2:error] [pid 1018003:tid 1018218] [client 68.155.159.216:16374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK8_zAh5Y1i2tUxg4Hj_QAABfs"]
[Sat Aug 29 05:05:35.817964 2026] [security2:error] [pid 1017536:tid 1017715] [client 20.196.209.81:4520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/disagreed.php"] [unique_id "apK8_yJcY4fy7tP-rU3qhQAAAkU"]
[Sat Aug 29 05:05:35.845853 2026] [security2:error] [pid 1018003:tid 1018170] [client 20.48.251.3:28481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/oc460l3x.php"] [unique_id "apK8_zAh5Y1i2tUxg4Hj_gAABcs"]
[Sat Aug 29 05:05:35.849750 2026] [security2:error] [pid 1018003:tid 1018232] [client 68.155.159.216:33717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/file5.php"] [unique_id "apK8_zAh5Y1i2tUxg4Hj_wAABgg"]
[Sat Aug 29 05:05:35.855996 2026] [security2:error] [pid 1018003:tid 1018196] [client 52.139.37.240:37897] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "autodiscover.naturesfragrancelabs.com"] [uri "/c99.php"] [unique_id "apK8_zAh5Y1i2tUxg4HkAAAABeU"]
[Sat Aug 29 05:05:35.871440 2026] [security2:error] [pid 1018003:tid 1018209] [client 20.48.250.41:61817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stephanieandstephen.strangeworx.com"] [uri "/R57.php"] [unique_id "apK8_zAh5Y1i2tUxg4HkAgAABfI"]
[Sat Aug 29 05:05:35.874122 2026] [security2:error] [pid 1017536:tid 1017692] [client 20.48.250.41:27602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/asax.php"] [unique_id "apK8_yJcY4fy7tP-rU3qhgAAAi4"]
[Sat Aug 29 05:05:35.892686 2026] [security2:error] [pid 1018003:tid 1018207] [client 20.48.250.41:23548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/maraz.php"] [unique_id "apK8_zAh5Y1i2tUxg4HkAwAABfA"]
[Sat Aug 29 05:05:35.924102 2026] [security2:error] [pid 1017536:tid 1017792] [client 68.155.159.216:51291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/classwithtostring.php"] [unique_id "apK8_yJcY4fy7tP-rU3qhwAAApI"]
[Sat Aug 29 05:05:35.929339 2026] [security2:error] [pid 1017536:tid 1017728] [client 4.232.148.111:20649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/about/function.php"] [unique_id "apK8_yJcY4fy7tP-rU3qiAAAAlI"]
[Sat Aug 29 05:05:35.948600 2026] [security2:error] [pid 1017536:tid 1017770] [client 45.148.10.62:50722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.vzo.fme.mybluehost.me"] [uri "/stripe/.env"] [unique_id "apK8_yJcY4fy7tP-rU3qiQAAAnw"]
[Sat Aug 29 05:05:35.949978 2026] [security2:error] [pid 1018003:tid 1018191] [client 20.63.219.114:9237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/menu.php"] [unique_id "apK8_zAh5Y1i2tUxg4HkCAAABeA"]
[Sat Aug 29 05:05:35.967747 2026] [security2:error] [pid 1018003:tid 1018260] [client 158.158.54.35:23988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-admin/js/index.php"] [unique_id "apK8_zAh5Y1i2tUxg4HkCQAABiQ"]
[Sat Aug 29 05:05:35.977890 2026] [security2:error] [pid 1018003:tid 1018243] [client 74.248.24.12:33409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/bi.php"] [unique_id "apK8_zAh5Y1i2tUxg4HkCgAABhM"]
[Sat Aug 29 05:05:35.987722 2026] [security2:error] [pid 1018003:tid 1018234] [client 20.104.49.130:30040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/100.php"] [unique_id "apK8_zAh5Y1i2tUxg4HkCwAABgo"]
[Sat Aug 29 05:05:35.994192 2026] [security2:error] [pid 1018003:tid 1018214] [client 20.48.251.3:27166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/drykl.php"] [unique_id "apK8_zAh5Y1i2tUxg4HkDAAABfc"]
[Sat Aug 29 05:05:35.995037 2026] [security2:error] [pid 1018003:tid 1018251] [client 158.23.147.79:50069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/mah.php"] [unique_id "apK8_zAh5Y1i2tUxg4HkDQAABhs"]
[Sat Aug 29 05:05:36.009674 2026] [security2:error] [pid 1018003:tid 1018223] [client 20.48.250.41:26927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/fetch.php"] [unique_id "apK9ADAh5Y1i2tUxg4HkDgAABgA"]
[Sat Aug 29 05:05:36.010792 2026] [security2:error] [pid 1018003:tid 1018164] [client 45.148.10.62:50756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vvr.ewu.mybluehost.me"] [uri "/config.php.bak"] [unique_id "apK9ADAh5Y1i2tUxg4HkDwAABcU"]
[Sat Aug 29 05:05:36.013094 2026] [security2:error] [pid 1018003:tid 1018239] [client 158.23.147.79:38771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK9ADAh5Y1i2tUxg4HkEAAABg8"]
[Sat Aug 29 05:05:36.028611 2026] [security2:error] [pid 1018003:tid 1018186] [client 20.48.251.3:14331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/asa.php"] [unique_id "apK9ADAh5Y1i2tUxg4HkEQAABds"]
[Sat Aug 29 05:05:36.032189 2026] [security2:error] [pid 1018003:tid 1018192] [client 168.107.94.195:55331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9ADAh5Y1i2tUxg4HkEgAABeE"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:36.035235 2026] [security2:error] [pid 1018003:tid 1018273] [client 20.48.250.41:23490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/kbfr.php"] [unique_id "apK9ADAh5Y1i2tUxg4HkEwAABjE"]
[Sat Aug 29 05:05:36.043966 2026] [security2:error] [pid 1018003:tid 1018222] [client 20.63.219.114:18385] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/1.php7"] [unique_id "apK9ADAh5Y1i2tUxg4HkFAAABf8"]
[Sat Aug 29 05:05:36.044022 2026] [security2:error] [pid 1018003:tid 1018222] [client 20.63.219.114:18385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/1.php7"] [unique_id "apK9ADAh5Y1i2tUxg4HkFAAABf8"]
[Sat Aug 29 05:05:36.050866 2026] [security2:error] [pid 1018003:tid 1018152] [client 52.139.37.240:65296] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "autodiscover.naturesfragrancelabs.com"] [uri "/c99.php"] [unique_id "apK9ADAh5Y1i2tUxg4HkFQAABbk"]
[Sat Aug 29 05:05:36.133476 2026] [security2:error] [pid 1018003:tid 1018190] [client 158.23.147.79:63234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-content/x.php"] [unique_id "apK9ADAh5Y1i2tUxg4HkGQAABd8"]
[Sat Aug 29 05:05:36.135107 2026] [security2:error] [pid 1017536:tid 1017698] [client 68.155.159.216:52840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9ACJcY4fy7tP-rU3qjgAAAjQ"]
[Sat Aug 29 05:05:36.147427 2026] [security2:error] [pid 1017536:tid 1017717] [client 20.48.251.3:27176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/rpk.php"] [unique_id "apK9ACJcY4fy7tP-rU3qjwAAAkc"]
[Sat Aug 29 05:05:36.151216 2026] [security2:error] [pid 1017536:tid 1017669] [client 20.196.209.81:15750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/ggfi.php"] [unique_id "apK9ACJcY4fy7tP-rU3qkAAAAhc"]
[Sat Aug 29 05:05:36.152002 2026] [security2:error] [pid 1018003:tid 1018090] [remote 34.138.108.56:53938] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "proppastie.com"] [uri "/.github/.env"] [unique_id "apK9ADAh5Y1i2tUxg4HkGgAFw0U"]
[Sat Aug 29 05:05:36.165239 2026] [security2:error] [pid 1018003:tid 1018213] [client 20.48.250.41:23432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/wp-act.php"] [unique_id "apK9ADAh5Y1i2tUxg4HkIAAABfY"]
[Sat Aug 29 05:05:36.216282 2026] [security2:error] [pid 1018003:tid 1018227] [client 20.48.251.3:14273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/radio.php"] [unique_id "apK9ADAh5Y1i2tUxg4HkJgAABgQ"]
[Sat Aug 29 05:05:36.224582 2026] [security2:error] [pid 1017536:tid 1017781] [client 20.196.209.81:21085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/class_api.php"] [unique_id "apK9ACJcY4fy7tP-rU3qkwAAAoc"]
[Sat Aug 29 05:05:36.227460 2026] [security2:error] [pid 1018003:tid 1018256] [client 65.111.10.164:33791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 164.10.111.65.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK9ADAh5Y1i2tUxg4HkIgAABiA"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:36.241075 2026] [security2:error] [pid 1017536:tid 1017750] [client 68.155.159.216:50368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apK9ACJcY4fy7tP-rU3qlQAAAmg"]
[Sat Aug 29 05:05:36.251425 2026] [security2:error] [pid 1018003:tid 1018199] [client 20.48.250.41:27639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/vx.php"] [unique_id "apK9ADAh5Y1i2tUxg4HkKQAABeg"]
[Sat Aug 29 05:05:36.274622 2026] [security2:error] [pid 1018003:tid 1018252] [client 158.23.184.117:27711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/.dj/index.php"] [unique_id "apK9ADAh5Y1i2tUxg4HkKgAABhw"]
[Sat Aug 29 05:05:36.276184 2026] [security2:error] [pid 1017536:tid 1017720] [client 20.48.251.3:57846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/saml.php"] [unique_id "apK9ACJcY4fy7tP-rU3qlwAAAko"]
[Sat Aug 29 05:05:36.314951 2026] [security2:error] [pid 1018003:tid 1018225] [client 20.63.219.114:9272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/alfa.php"] [unique_id "apK9ADAh5Y1i2tUxg4HkKwAABgI"]
[Sat Aug 29 05:05:36.339582 2026] [security2:error] [pid 1018003:tid 1018275] [client 20.48.250.41:23437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/24.php"] [unique_id "apK9ADAh5Y1i2tUxg4HkLAAABjM"]
[Sat Aug 29 05:05:36.380659 2026] [security2:error] [pid 1017536:tid 1017775] [client 20.48.251.3:13984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/ws61.php"] [unique_id "apK9ACJcY4fy7tP-rU3qmAAAAoE"]
[Sat Aug 29 05:05:36.399367 2026] [security2:error] [pid 1018003:tid 1018254] [client 66.248.203.2:49290] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cheerfulmonk.com"] [uri "/2021/03/15/"] [unique_id "apK9ADAh5Y1i2tUxg4HkLgAABh4"]
[Sat Aug 29 05:05:36.406819 2026] [security2:error] [pid 1018003:tid 1018231] [client 20.48.251.3:57829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/aws_settings.php"] [unique_id "apK9ADAh5Y1i2tUxg4HkLwAABgc"]
[Sat Aug 29 05:05:36.410066 2026] [security2:error] [pid 1017536:tid 1017726] [client 4.205.62.107:61785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/params.php"] [unique_id "apK9ACJcY4fy7tP-rU3qmgAAAlA"]
[Sat Aug 29 05:05:36.410443 2026] [security2:error] [pid 1017536:tid 1017742] [client 158.158.54.35:35931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/core.php"] [unique_id "apK9ACJcY4fy7tP-rU3qmwAAAmA"]
[Sat Aug 29 05:05:36.411348 2026] [security2:error] [pid 1017536:tid 1017753] [client 20.63.219.114:14010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/ds.php"] [unique_id "apK9ACJcY4fy7tP-rU3qnAAAAms"]
[Sat Aug 29 05:05:36.413195 2026] [security2:error] [pid 1018003:tid 1018193] [client 168.107.94.195:55641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9ADAh5Y1i2tUxg4HkMAAABeI"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:36.419295 2026] [security2:error] [pid 1017536:tid 1017714] [client 158.23.184.117:27703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/.info.php"] [unique_id "apK9ACJcY4fy7tP-rU3qnQAAAkQ"]
[Sat Aug 29 05:05:36.429322 2026] [security2:error] [pid 1018003:tid 1018206] [client 158.23.147.79:30689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-admin/about.php"] [unique_id "apK9ADAh5Y1i2tUxg4HkMQAABe8"]
[Sat Aug 29 05:05:36.531248 2026] [security2:error] [pid 1017536:tid 1017707] [client 20.48.250.41:23535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/155.php"] [unique_id "apK9ACJcY4fy7tP-rU3qoAAAAj0"]
[Sat Aug 29 05:05:36.536110 2026] [security2:error] [pid 1018003:tid 1018276] [client 20.48.250.41:27635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/global.php"] [unique_id "apK9ADAh5Y1i2tUxg4HkMwAABjQ"]
[Sat Aug 29 05:05:36.540842 2026] [security2:error] [pid 1017536:tid 1017694] [client 45.148.10.62:50722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.vzo.fme.mybluehost.me"] [uri "/backend/.env"] [unique_id "apK9ACJcY4fy7tP-rU3qogAAAjA"]
[Sat Aug 29 05:05:36.548694 2026] [security2:error] [pid 1017536:tid 1017729] [client 20.196.209.81:15779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/alfa-rex.php"] [unique_id "apK9ACJcY4fy7tP-rU3qowAAAlM"]
[Sat Aug 29 05:05:36.559333 2026] [security2:error] [pid 1017536:tid 1017765] [client 68.155.159.216:12224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/classwithtostring.php"] [unique_id "apK9ACJcY4fy7tP-rU3qpAAAAnc"]
[Sat Aug 29 05:05:36.563077 2026] [security2:error] [pid 1018003:tid 1018153] [client 158.23.184.117:27668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/.trash7206/index.php"] [unique_id "apK9ADAh5Y1i2tUxg4HkNQAABbo"]
[Sat Aug 29 05:05:36.563589 2026] [security2:error] [pid 1017536:tid 1017785] [client 68.155.159.216:16193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.showerdoorsdubuque.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK9ACJcY4fy7tP-rU3qpQAAAos"]
[Sat Aug 29 05:05:36.564225 2026] [security2:error] [pid 1017536:tid 1017739] [client 74.248.24.12:15176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/cc.php"] [unique_id "apK9ACJcY4fy7tP-rU3qpgAAAl0"]
[Sat Aug 29 05:05:36.568314 2026] [security2:error] [pid 1017536:tid 1017674] [client 20.48.251.3:28562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/wp-konfig.backup.php"] [unique_id "apK9ACJcY4fy7tP-rU3qqQAAAhw"]
[Sat Aug 29 05:05:36.592068 2026] [security2:error] [pid 1017536:tid 1017700] [client 4.232.148.111:5911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/wp-includes/admin.php"] [unique_id "apK9ACJcY4fy7tP-rU3qrQAAAjY"]
[Sat Aug 29 05:05:36.620716 2026] [security2:error] [pid 1018003:tid 1018220] [client 158.23.147.79:48240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/file5.php"] [unique_id "apK9ADAh5Y1i2tUxg4HkOAAABf0"]
[Sat Aug 29 05:05:36.633086 2026] [security2:error] [pid 1017536:tid 1017787] [client 20.196.209.81:21080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/aksinet.php"] [unique_id "apK9ACJcY4fy7tP-rU3qrgAAAo0"]
[Sat Aug 29 05:05:36.646656 2026] [security2:error] [pid 1017536:tid 1017688] [client 4.205.62.107:61241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "troop264olney.net"] [uri "/cache-compat.php"] [unique_id "apK9ACJcY4fy7tP-rU3qsAAAAio"]
[Sat Aug 29 05:05:36.648312 2026] [security2:error] [pid 1017536:tid 1017703] [client 20.48.251.3:14318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/ms-edit.php"] [unique_id "apK9ACJcY4fy7tP-rU3qsQAAAjk"]
[Sat Aug 29 05:05:36.677848 2026] [security2:error] [pid 1017536:tid 1017696] [client 20.104.49.130:57622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/xa.php"] [unique_id "apK9ACJcY4fy7tP-rU3qsgAAAjI"]
[Sat Aug 29 05:05:36.683137 2026] [security2:error] [pid 1017536:tid 1017783] [client 4.205.62.107:22303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/register.php"] [unique_id "apK9ACJcY4fy7tP-rU3qrwAAAok"]
[Sat Aug 29 05:05:36.691746 2026] [security2:error] [pid 1017536:tid 1017721] [client 45.148.10.62:50722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vzo.fme.mybluehost.me"] [uri "/test.php"] [unique_id "apK9ACJcY4fy7tP-rU3qtAAAAks"]
[Sat Aug 29 05:05:36.692516 2026] [security2:error] [pid 1017536:tid 1017670] [client 20.63.219.114:11586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/feed-rss2-queue.php"] [unique_id "apK9ACJcY4fy7tP-rU3qtQAAAhg"]
[Sat Aug 29 05:05:36.698893 2026] [security2:error] [pid 1017536:tid 1017690] [client 20.48.251.3:57910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/packed.php"] [unique_id "apK9ACJcY4fy7tP-rU3qtgAAAiw"]
[Sat Aug 29 05:05:36.705378 2026] [security2:error] [pid 1017536:tid 1017773] [client 158.23.184.117:27671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/.trash7206/min.php"] [unique_id "apK9ACJcY4fy7tP-rU3qtwAAAn8"]
[Sat Aug 29 05:05:36.718522 2026] [security2:error] [pid 1018003:tid 1018238] [client 4.205.62.107:22227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/phpversion.php"] [unique_id "apK9ADAh5Y1i2tUxg4HkOgAABg4"]
[Sat Aug 29 05:05:36.724233 2026] [security2:error] [pid 1017536:tid 1017745] [client 20.48.250.41:23543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/file.php"] [unique_id "apK9ACJcY4fy7tP-rU3quAAAAmM"]
[Sat Aug 29 05:05:36.749495 2026] [security2:error] [pid 1017536:tid 1017695] [client 4.205.62.107:65416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/aws_config.php"] [unique_id "apK9ACJcY4fy7tP-rU3qugAAAjE"]
[Sat Aug 29 05:05:36.758131 2026] [security2:error] [pid 1017536:tid 1017692] [client 20.48.250.41:27563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/fs.php"] [unique_id "apK9ACJcY4fy7tP-rU3quwAAAi4"]
[Sat Aug 29 05:05:36.759608 2026] [security2:error] [pid 1017536:tid 1017754] [client 102.208.164.205:29547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 205.164.208.102.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mikelait.com"] [uri "/xmlrpc.php"] [unique_id "apK9ACJcY4fy7tP-rU3quQAAAmw"]
[Sat Aug 29 05:05:36.759728 2026] [security2:error] [pid 1017536:tid 1017754] [client 102.208.164.205:29547] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mikelait.com"] [uri "/xmlrpc.php"] [unique_id "apK9ACJcY4fy7tP-rU3quQAAAmw"]
[Sat Aug 29 05:05:36.768979 2026] [security2:error] [pid 1017536:tid 1017728] [client 4.205.62.107:9174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/requirements.php"] [unique_id "apK9ACJcY4fy7tP-rU3qvAAAAlI"]
[Sat Aug 29 05:05:36.773583 2026] [security2:error] [pid 1017536:tid 1017760] [client 20.63.219.114:1514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/GOD.php"] [unique_id "apK9ACJcY4fy7tP-rU3qvQAAAnI"]
[Sat Aug 29 05:05:36.789065 2026] [security2:error] [pid 1018003:tid 1018262] [client 4.205.62.107:2884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/25.php"] [unique_id "apK9ADAh5Y1i2tUxg4HkOwAABiY"]
[Sat Aug 29 05:05:36.792578 2026] [security2:error] [pid 1018003:tid 1018157] [client 168.107.94.195:55993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9ADAh5Y1i2tUxg4HkPAAABb4"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:36.794848 2026] [security2:error] [pid 1017536:tid 1017659] [remote 34.148.90.28:50012] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "hitechgs.com"] [uri "/icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ"] [unique_id "apK9ACJcY4fy7tP-rU3qvwACGno"]
[Sat Aug 29 05:05:36.801151 2026] [security2:error] [pid 1017536:tid 1017756] [client 20.48.251.3:13968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/lmfi2.php"] [unique_id "apK9ACJcY4fy7tP-rU3qxAAAAm4"]
[Sat Aug 29 05:05:36.807308 2026] [security2:error] [pid 1017536:tid 1017708] [client 151.123.177.58:26891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 58.177.123.151.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK9ACJcY4fy7tP-rU3qvgAAAj4"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:36.826311 2026] [security2:error] [pid 1017536:tid 1017786] [client 20.48.251.3:27149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/wp-info.php"] [unique_id "apK9ACJcY4fy7tP-rU3qxgAAAow"]
[Sat Aug 29 05:05:36.837528 2026] [security2:error] [pid 1017536:tid 1017669] [client 68.155.159.216:14234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/wp-includes/content.php"] [unique_id "apK9ACJcY4fy7tP-rU3qxwAAAhc"]
[Sat Aug 29 05:05:36.848534 2026] [security2:error] [pid 1017536:tid 1017712] [client 158.158.54.35:4377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/admin/function.php"] [unique_id "apK9ACJcY4fy7tP-rU3qyQAAAkI"]
[Sat Aug 29 05:05:36.850155 2026] [security2:error] [pid 1017536:tid 1017774] [client 158.23.184.117:52482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/.well-known//index.php"] [unique_id "apK9ACJcY4fy7tP-rU3qygAAAoA"]
[Sat Aug 29 05:05:36.856070 2026] [security2:error] [pid 1018003:tid 1018203] [client 20.48.250.41:23469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK9ADAh5Y1i2tUxg4HkPQAABew"]
[Sat Aug 29 05:05:36.948470 2026] [security2:error] [pid 1017536:tid 1017716] [client 20.196.209.81:9498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/cookie.php"] [unique_id "apK9ACJcY4fy7tP-rU3qywAAAkY"]
[Sat Aug 29 05:05:36.950475 2026] [security2:error] [pid 1018003:tid 1018232] [client 158.23.147.79:25546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/dropdown.php"] [unique_id "apK9ADAh5Y1i2tUxg4HkPgAABgg"]
[Sat Aug 29 05:05:36.958341 2026] [security2:error] [pid 1018003:tid 1018217] [client 20.104.49.130:52325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/wp-blog-header.php"] [unique_id "apK9ADAh5Y1i2tUxg4HkPwAABfo"]
[Sat Aug 29 05:05:36.968800 2026] [security2:error] [pid 1018003:tid 1018236] [client 20.48.251.3:28418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/fns.php"] [unique_id "apK9ADAh5Y1i2tUxg4HkQQAABgw"]
[Sat Aug 29 05:05:36.976078 2026] [security2:error] [pid 1017536:tid 1017732] [client 158.23.147.79:24526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-admin/images/about.php"] [unique_id "apK9ACJcY4fy7tP-rU3qzQAAAlY"]
[Sat Aug 29 05:05:36.993774 2026] [security2:error] [pid 1017536:tid 1017733] [client 20.48.250.41:26887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/ioxi.php"] [unique_id "apK9ACJcY4fy7tP-rU3qzwAAAlc"]
[Sat Aug 29 05:05:36.994990 2026] [security2:error] [pid 1017536:tid 1017790] [client 57.141.14.32:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/page/3/"] [unique_id "apK9ACJcY4fy7tP-rU3qzgAAApA"]
[Sat Aug 29 05:05:36.997774 2026] [security2:error] [pid 1017536:tid 1017702] [client 158.23.184.117:52491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/.well-known/about.php"] [unique_id "apK9ACJcY4fy7tP-rU3q0AAAAjg"]
[Sat Aug 29 05:05:37.001194 2026] [security2:error] [pid 1017536:tid 1017777] [client 45.148.10.62:50768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vvr.ewu.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "apK9ASJcY4fy7tP-rU3q0QAAAoM"]
[Sat Aug 29 05:05:37.008804 2026] [security2:error] [pid 1017536:tid 1017775] [client 20.104.49.130:46566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/load.php"] [unique_id "apK9ASJcY4fy7tP-rU3q0gAAAoE"]
[Sat Aug 29 05:05:37.021882 2026] [security2:error] [pid 1017536:tid 1017742] [client 20.48.250.41:23527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/06.php"] [unique_id "apK9ASJcY4fy7tP-rU3q0wAAAmA"]
[Sat Aug 29 05:05:37.033520 2026] [security2:error] [pid 1018003:tid 1018263] [client 20.104.49.130:53713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/3.php"] [unique_id "apK9ATAh5Y1i2tUxg4HkQgAABic"]
[Sat Aug 29 05:05:37.052988 2026] [security2:error] [pid 1017536:tid 1017705] [client 20.48.251.3:14329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/wpver.php"] [unique_id "apK9ASJcY4fy7tP-rU3q1AAAAjs"]
[Sat Aug 29 05:05:37.077842 2026] [security2:error] [pid 1017536:tid 1017683] [client 68.155.159.216:57350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/images/index.php"] [unique_id "apK9ASJcY4fy7tP-rU3q1wAAAiU"]
[Sat Aug 29 05:05:37.082042 2026] [security2:error] [pid 1017536:tid 1017670] [client 68.155.159.216:51855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/install.php"] [unique_id "apK9ASJcY4fy7tP-rU3q2QAAAhg"]
[Sat Aug 29 05:05:37.090279 2026] [security2:error] [pid 1017536:tid 1017720] [client 74.248.24.12:23853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/files/index.php"] [unique_id "apK9ASJcY4fy7tP-rU3q2gAAAko"]
[Sat Aug 29 05:05:37.098252 2026] [security2:error] [pid 1017536:tid 1017745] [client 20.48.251.3:27159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/params.php"] [unique_id "apK9ASJcY4fy7tP-rU3q2wAAAmM"]
[Sat Aug 29 05:05:37.104913 2026] [security2:error] [pid 1018003:tid 1018278] [client 20.196.209.81:12721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/alfa-rex1.php"] [unique_id "apK9ATAh5Y1i2tUxg4HkQwAABjY"]
[Sat Aug 29 05:05:37.106162 2026] [security2:error] [pid 1017536:tid 1017744] [client 158.23.147.79:49823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/wp-blog-header.php"] [unique_id "apK9ASJcY4fy7tP-rU3q3AAAAmI"]
[Sat Aug 29 05:05:37.112501 2026] [security2:error] [pid 1017536:tid 1017680] [client 20.104.49.130:57689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/static.php"] [unique_id "apK9ASJcY4fy7tP-rU3q3QAAAiI"]
[Sat Aug 29 05:05:37.128662 2026] [security2:error] [pid 1017536:tid 1017761] [client 20.48.250.41:26929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/bootstrap.php"] [unique_id "apK9ASJcY4fy7tP-rU3q3gAAAnM"]
[Sat Aug 29 05:05:37.132423 2026] [security2:error] [pid 1017536:tid 1017695] [client 158.23.147.79:63023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/classwithtostring.php"] [unique_id "apK9ASJcY4fy7tP-rU3q3wAAAjE"]
[Sat Aug 29 05:05:37.173135 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.63.219.114:18845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/ggfi.php"] [unique_id "apK9ASJcY4fy7tP-rU3q4QAAAnk"]
[Sat Aug 29 05:05:37.176009 2026] [security2:error] [pid 1017536:tid 1017754] [client 168.107.94.195:56259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9ASJcY4fy7tP-rU3q4gAAAmw"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:37.190268 2026] [security2:error] [pid 1018003:tid 1018188] [client 45.148.10.62:50780] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.vzo.fme.mybluehost.me"] [uri "/.env.backup"] [unique_id "apK9ATAh5Y1i2tUxg4HkRwAABd0"]
[Sat Aug 29 05:05:37.201298 2026] [security2:error] [pid 1017536:tid 1017721] [client 20.63.219.114:1858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/inputs.php"] [unique_id "apK9ASJcY4fy7tP-rU3q5AAAAks"]
[Sat Aug 29 05:05:37.203423 2026] [core:error] [pid 1017536:tid 1017788] [client 34.12.38.134:16260] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.203441 2026] [core:error] [pid 1017536:tid 1017788] [client 34.12.38.134:16260] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.204913 2026] [core:error] [pid 1017536:tid 1017691] [client 34.12.38.134:16268] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.204927 2026] [core:error] [pid 1017536:tid 1017691] [client 34.12.38.134:16268] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.207569 2026] [core:error] [pid 1017536:tid 1017734] [client 34.12.38.134:16318] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.207582 2026] [core:error] [pid 1017536:tid 1017734] [client 34.12.38.134:16318] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.208175 2026] [security2:error] [pid 1018003:tid 1018222] [client 20.48.250.41:23521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/class.php"] [unique_id "apK9ATAh5Y1i2tUxg4HkSQAABf8"]
[Sat Aug 29 05:05:37.208555 2026] [security2:error] [pid 1017536:tid 1017779] [client 34.12.38.134:16332] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/bootstrap.properties"] [unique_id "apK9ASJcY4fy7tP-rU3q6AAAAoU"]
[Sat Aug 29 05:05:37.208970 2026] [core:error] [pid 1017536:tid 1017707] [client 34.12.38.134:16322] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.208978 2026] [core:error] [pid 1017536:tid 1017707] [client 34.12.38.134:16322] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.209914 2026] [core:error] [pid 1018003:tid 1018179] [client 34.12.38.134:16312] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.209925 2026] [core:error] [pid 1018003:tid 1018179] [client 34.12.38.134:16312] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.215053 2026] [core:error] [pid 1017536:tid 1017785] [client 34.12.38.134:16300] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.215069 2026] [core:error] [pid 1017536:tid 1017785] [client 34.12.38.134:16300] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.219861 2026] [core:error] [pid 1017536:tid 1017674] [client 34.12.38.134:16270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.219873 2026] [core:error] [pid 1017536:tid 1017674] [client 34.12.38.134:16270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.221182 2026] [core:error] [pid 1017536:tid 1017673] [client 34.12.38.134:16286] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.221196 2026] [core:error] [pid 1017536:tid 1017673] [client 34.12.38.134:16286] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.222150 2026] [core:error] [pid 1017536:tid 1017700] [client 34.12.38.134:16330] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.222170 2026] [core:error] [pid 1017536:tid 1017700] [client 34.12.38.134:16330] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.222582 2026] [security2:error] [pid 1017536:tid 1017678] [client 34.12.38.134:16376] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/telescope/requests"] [unique_id "apK9ASJcY4fy7tP-rU3q9QAAAiA"]
[Sat Aug 29 05:05:37.226384 2026] [security2:error] [pid 1017536:tid 1017738] [client 158.23.184.117:27662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK9ASJcY4fy7tP-rU3q-gAAAlw"]
[Sat Aug 29 05:05:37.226838 2026] [core:error] [pid 1018003:tid 1018223] [client 34.12.38.134:16406] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.226847 2026] [core:error] [pid 1018003:tid 1018223] [client 34.12.38.134:16406] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.226930 2026] [security2:error] [pid 1018003:tid 1018186] [client 34.12.38.134:16498] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/___proxy_subdomain_cpcontacts/.aws/credentials.bak"] [unique_id "apK9ATAh5Y1i2tUxg4HkTwAABds"]
[Sat Aug 29 05:05:37.228313 2026] [security2:error] [pid 1017536:tid 1017786] [client 20.48.251.3:27192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/gjm.php"] [unique_id "apK9ASJcY4fy7tP-rU3q_AAAAow"]
[Sat Aug 29 05:05:37.228569 2026] [security2:error] [pid 1017536:tid 1017688] [client 34.12.38.134:16412] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/.aider.conf.yml"] [unique_id "apK9ASJcY4fy7tP-rU3q_QAAAio"]
[Sat Aug 29 05:05:37.229057 2026] [core:error] [pid 1018003:tid 1018164] [client 34.12.38.134:16388] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.229065 2026] [core:error] [pid 1018003:tid 1018164] [client 34.12.38.134:16388] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.229903 2026] [core:error] [pid 1018003:tid 1018239] [client 34.12.38.134:16424] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.229914 2026] [core:error] [pid 1018003:tid 1018239] [client 34.12.38.134:16424] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.230079 2026] [security2:error] [pid 1017536:tid 1017696] [client 34.12.38.134:16452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 134.38.12.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/config/aws.php"] [unique_id "apK9ASJcY4fy7tP-rU3q_gAAAjI"]
[Sat Aug 29 05:05:37.232903 2026] [security2:error] [pid 1017536:tid 1017725] [client 34.12.38.134:16480] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/___proxy_subdomain_cpcontacts/aws/.env"] [unique_id "apK9ASJcY4fy7tP-rU3rAQAAAk8"]
[Sat Aug 29 05:05:37.235518 2026] [security2:error] [pid 1017536:tid 1017712] [client 68.155.159.216:52807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9ASJcY4fy7tP-rU3rBgAAAkI"]
[Sat Aug 29 05:05:37.236650 2026] [security2:error] [pid 1017536:tid 1017778] [client 4.232.148.111:18071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/lock360.php"] [unique_id "apK9ASJcY4fy7tP-rU3rCgAAAoQ"]
[Sat Aug 29 05:05:37.237327 2026] [security2:error] [pid 1017536:tid 1017690] [client 34.12.38.134:16496] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/___proxy_subdomain_cpcontacts/.aws/credentials.old"] [unique_id "apK9ASJcY4fy7tP-rU3rBQAAAiw"]
[Sat Aug 29 05:05:37.238294 2026] [core:error] [pid 1017536:tid 1017686] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.238306 2026] [core:error] [pid 1017536:tid 1017686] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.241583 2026] [security2:error] [pid 1017536:tid 1017731] [client 158.23.147.79:55284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK9ASJcY4fy7tP-rU3rDQAAAlU"]
[Sat Aug 29 05:05:37.241898 2026] [core:error] [pid 1017536:tid 1017757] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.241907 2026] [core:error] [pid 1017536:tid 1017757] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.242118 2026] [security2:error] [pid 1017536:tid 1017757] [client 34.12.38.134:0] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/___proxy_subdomain_cpcontacts/index.php"] [unique_id "apK9ASJcY4fy7tP-rU3rDAAAAm8"]
[Sat Aug 29 05:05:37.244153 2026] [security2:error] [pid 1017536:tid 1017679] [client 34.12.38.134:16392] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/___proxy_subdomain_cpcontacts/_ignition/health-check"] [unique_id "apK9ASJcY4fy7tP-rU3q6gAAAiE"]
[Sat Aug 29 05:05:37.244524 2026] [core:error] [pid 1017536:tid 1017781] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.244538 2026] [core:error] [pid 1017536:tid 1017781] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.244903 2026] [core:error] [pid 1017536:tid 1017776] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.244912 2026] [core:error] [pid 1017536:tid 1017776] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.247647 2026] [core:error] [pid 1018003:tid 1018215] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.247661 2026] [core:error] [pid 1018003:tid 1018215] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.248161 2026] [security2:error] [pid 1018003:tid 1018215] [client 34.12.38.134:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/___proxy_subdomain_cpcontacts/index.php"] [unique_id "apK9ATAh5Y1i2tUxg4HkVQAABfg"]
[Sat Aug 29 05:05:37.248447 2026] [core:error] [pid 1017536:tid 1017675] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.248458 2026] [core:error] [pid 1017536:tid 1017675] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.249444 2026] [security2:error] [pid 1017536:tid 1017684] [client 34.12.38.134:16366] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/___proxy_subdomain_cpcontacts/api/v2/config"] [unique_id "apK9ASJcY4fy7tP-rU3q8AAAAiY"]
[Sat Aug 29 05:05:37.251486 2026] [core:error] [pid 1017536:tid 1017668] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.251497 2026] [core:error] [pid 1017536:tid 1017668] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.252112 2026] [core:error] [pid 1018003:tid 1018258] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.252120 2026] [core:error] [pid 1018003:tid 1018258] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.252377 2026] [core:error] [pid 1018003:tid 1018197] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.252393 2026] [core:error] [pid 1018003:tid 1018197] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.253378 2026] [security2:error] [pid 1018003:tid 1018241] [client 68.155.159.216:65504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.gavirestaurant.com"] [uri "/wzy.php"] [unique_id "apK9ATAh5Y1i2tUxg4HkWgAABhE"]
[Sat Aug 29 05:05:37.254593 2026] [core:error] [pid 1018003:tid 1018189] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.254602 2026] [core:error] [pid 1018003:tid 1018189] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.254657 2026] [core:error] [pid 1017536:tid 1017689] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.254665 2026] [core:error] [pid 1017536:tid 1017689] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.256010 2026] [core:error] [pid 1017536:tid 1017714] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.256021 2026] [core:error] [pid 1017536:tid 1017714] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.258980 2026] [core:error] [pid 1017536:tid 1017742] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.258991 2026] [core:error] [pid 1017536:tid 1017742] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.259065 2026] [security2:error] [pid 1017536:tid 1017742] [client 34.12.38.134:0] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/___proxy_subdomain_cpcontacts/index.php"] [unique_id "apK9ASJcY4fy7tP-rU3rFAAAAmA"]
[Sat Aug 29 05:05:37.268836 2026] [security2:error] [pid 1017536:tid 1017773] [client 34.12.38.134:16486] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/___proxy_subdomain_cpcontacts/aws/.env.production"] [unique_id "apK9ASJcY4fy7tP-rU3rCAAAAn8"]
[Sat Aug 29 05:05:37.303089 2026] [security2:error] [pid 1017536:tid 1017745] [client 20.48.251.3:33296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/ah25.php"] [unique_id "apK9ASJcY4fy7tP-rU3rFQAAAmM"]
[Sat Aug 29 05:05:37.304040 2026] [security2:error] [pid 1017536:tid 1017715] [client 158.158.54.35:6040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/admin/index.php"] [unique_id "apK9ASJcY4fy7tP-rU3rFgAAAkU"]
[Sat Aug 29 05:05:37.314223 2026] [security2:error] [pid 1017536:tid 1017744] [client 20.48.250.41:27521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/export.php"] [unique_id "apK9ASJcY4fy7tP-rU3rFwAAAmI"]
[Sat Aug 29 05:05:37.335305 2026] [security2:error] [pid 1017536:tid 1017770] [client 65.111.14.131:43865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 131.14.111.65.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK9ASJcY4fy7tP-rU3rGAAAAnw"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:37.342821 2026] [security2:error] [pid 1018003:tid 1018199] [client 45.148.10.62:50780] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.vzo.fme.mybluehost.me"] [uri "/.env.old"] [unique_id "apK9ATAh5Y1i2tUxg4HkXQAABeg"]
[Sat Aug 29 05:05:37.348651 2026] [security2:error] [pid 1018003:tid 1018252] [client 68.155.159.216:50281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK9ATAh5Y1i2tUxg4HkXgAABhw"]
[Sat Aug 29 05:05:37.358644 2026] [security2:error] [pid 1017536:tid 1017692] [client 20.48.251.3:28478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/configuration.php"] [unique_id "apK9ASJcY4fy7tP-rU3rGQAAAi4"]
[Sat Aug 29 05:05:37.363346 2026] [security2:error] [pid 1017536:tid 1017698] [client 20.196.209.81:15788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/NewFile.php"] [unique_id "apK9ASJcY4fy7tP-rU3rGgAAAjQ"]
[Sat Aug 29 05:05:37.370830 2026] [security2:error] [pid 1018003:tid 1018256] [client 158.23.184.117:27704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/.well-known/acme-challenge/content.php"] [unique_id "apK9ATAh5Y1i2tUxg4HkXwAABiA"]
[Sat Aug 29 05:05:37.373417 2026] [security2:error] [pid 1018003:tid 1018211] [client 20.48.250.41:23551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/8.php"] [unique_id "apK9ATAh5Y1i2tUxg4HkYAAABfQ"]
[Sat Aug 29 05:05:37.388250 2026] [security2:error] [pid 1017536:tid 1017687] [client 213.202.253.4:53924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aantec.com"] [uri "/delpaths.php"] [unique_id "apK9ASJcY4fy7tP-rU3rGwAAAik"], referer: www.google.com
[Sat Aug 29 05:05:37.486549 2026] [security2:error] [pid 1017536:tid 1017727] [client 20.48.251.3:28490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/server_info.php"] [unique_id "apK9ASJcY4fy7tP-rU3rHgAAAlE"]
[Sat Aug 29 05:05:37.499568 2026] [security2:error] [pid 1017536:tid 1017708] [client 20.48.250.41:27533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/gk.php"] [unique_id "apK9ASJcY4fy7tP-rU3rIAAAAj4"]
[Sat Aug 29 05:05:37.513468 2026] [security2:error] [pid 1018003:tid 1018248] [client 20.48.250.41:23493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/0x0x.php"] [unique_id "apK9ATAh5Y1i2tUxg4HkYgAABhg"]
[Sat Aug 29 05:05:37.540289 2026] [security2:error] [pid 1017536:tid 1017712] [client 20.196.209.81:4490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/headerg.php"] [unique_id "apK9ASJcY4fy7tP-rU3rIwAAAkI"]
[Sat Aug 29 05:05:37.543531 2026] [security2:error] [pid 1017536:tid 1017733] [client 4.205.62.107:64319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/gjm.php"] [unique_id "apK9ASJcY4fy7tP-rU3rJAAAAlc"]
[Sat Aug 29 05:05:37.554247 2026] [security2:error] [pid 1017536:tid 1017781] [client 20.63.219.114:13996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/class-walker-category-dropdown-class.php"] [unique_id "apK9ASJcY4fy7tP-rU3rJQAAAoc"]
[Sat Aug 29 05:05:37.556030 2026] [security2:error] [pid 1017536:tid 1017693] [client 168.107.94.195:56680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9ASJcY4fy7tP-rU3rJgAAAi8"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:37.559959 2026] [security2:error] [pid 1018003:tid 1018264] [client 20.63.219.114:14001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/alfa-rex.php"] [unique_id "apK9ATAh5Y1i2tUxg4HkZQAABig"]
[Sat Aug 29 05:05:37.565574 2026] [autoindex:error] [pid 1018003:tid 1018106] [remote 45.148.10.62:50782] AH01276: Cannot serve directory /home3/vvrewumy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:05:37.567027 2026] [security2:error] [pid 1017536:tid 1017764] [client 158.23.147.79:30691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK9ASJcY4fy7tP-rU3rJwAAAnY"]
[Sat Aug 29 05:05:37.567857 2026] [security2:error] [pid 1018003:tid 1018195] [client 20.48.251.3:13956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/groceries/index.php"] [unique_id "apK9ATAh5Y1i2tUxg4HkZgAABeQ"]
[Sat Aug 29 05:05:37.600922 2026] [security2:error] [pid 1017536:tid 1017684] [client 158.23.184.117:27681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK9ASJcY4fy7tP-rU3rKAAAAiY"]
[Sat Aug 29 05:05:37.619511 2026] [security2:error] [pid 1017536:tid 1017751] [client 20.48.251.3:57833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/hosty.php"] [unique_id "apK9ASJcY4fy7tP-rU3rKgAAAmk"]
[Sat Aug 29 05:05:37.625664 2026] [security2:error] [pid 1018003:tid 1018206] [client 74.248.24.12:8975] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/1.php7"] [unique_id "apK9ATAh5Y1i2tUxg4HkaQAABe8"]
[Sat Aug 29 05:05:37.625737 2026] [security2:error] [pid 1018003:tid 1018206] [client 74.248.24.12:8975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/1.php7"] [unique_id "apK9ATAh5Y1i2tUxg4HkaQAABe8"]
[Sat Aug 29 05:05:37.639426 2026] [security2:error] [pid 1018003:tid 1018277] [client 45.148.10.62:50780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vzo.fme.mybluehost.me"] [uri "/.env.php.bak"] [unique_id "apK9ATAh5Y1i2tUxg4HkagAABjU"]
[Sat Aug 29 05:05:37.655439 2026] [security2:error] [pid 1017536:tid 1017743] [client 20.48.250.41:23443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/166.php"] [unique_id "apK9ASJcY4fy7tP-rU3rLAAAAmE"]
[Sat Aug 29 05:05:37.663649 2026] [security2:error] [pid 1018003:tid 1018267] [client 68.155.159.216:12183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/install.php"] [unique_id "apK9ATAh5Y1i2tUxg4HkawAABis"]
[Sat Aug 29 05:05:37.666993 2026] [security2:error] [pid 1017536:tid 1017730] [client 20.104.49.130:29972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/82.php"] [unique_id "apK9ASJcY4fy7tP-rU3rLQAAAlQ"]
[Sat Aug 29 05:05:37.680002 2026] [security2:error] [pid 1017536:tid 1017669] [client 20.48.250.41:27557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/logs1.php"] [unique_id "apK9ASJcY4fy7tP-rU3rLgAAAhc"]
[Sat Aug 29 05:05:37.685222 2026] [security2:error] [pid 1017536:tid 1017724] [client 68.155.159.216:16370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.showerdoorsdubuque.com"] [uri "/log-mama/function.php"] [unique_id "apK9ASJcY4fy7tP-rU3rLwAAAk4"]
[Sat Aug 29 05:05:37.716630 2026] [security2:error] [pid 1017536:tid 1017723] [client 4.232.148.111:20656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/wp-conflg.php"] [unique_id "apK9ASJcY4fy7tP-rU3rMAAAAk0"]
[Sat Aug 29 05:05:37.746918 2026] [security2:error] [pid 1017536:tid 1017714] [client 158.23.184.117:52484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/.well-known/acme-challenge/sx.php"] [unique_id "apK9ASJcY4fy7tP-rU3rMQAAAkQ"]
[Sat Aug 29 05:05:37.749906 2026] [security2:error] [pid 1017536:tid 1017784] [client 20.48.251.3:57878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/pass4.php"] [unique_id "apK9ASJcY4fy7tP-rU3rMgAAAoo"]
[Sat Aug 29 05:05:37.751044 2026] [security2:error] [pid 1017536:tid 1017775] [client 158.158.54.35:6037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/storage/rip.php"] [unique_id "apK9ASJcY4fy7tP-rU3rMwAAAoE"]
[Sat Aug 29 05:05:37.769182 2026] [security2:error] [pid 1017536:tid 1017683] [client 158.23.147.79:48322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/file88.php"] [unique_id "apK9ASJcY4fy7tP-rU3rNAAAAiU"]
[Sat Aug 29 05:05:37.803557 2026] [security2:error] [pid 1017536:tid 1017689] [client 20.196.209.81:9502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/config.php"] [unique_id "apK9ASJcY4fy7tP-rU3rNgAAAis"]
[Sat Aug 29 05:05:37.823157 2026] [security2:error] [pid 1017536:tid 1017704] [client 4.205.62.107:22238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/php-info.php"] [unique_id "apK9ASJcY4fy7tP-rU3rOAAAAjo"]
[Sat Aug 29 05:05:37.838329 2026] [security2:error] [pid 1017536:tid 1017772] [client 20.48.250.41:23399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/h2a2ck.php"] [unique_id "apK9ASJcY4fy7tP-rU3rOgAAAn4"]
[Sat Aug 29 05:05:37.838938 2026] [security2:error] [pid 1017536:tid 1017749] [client 20.48.250.41:27600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/inege.php"] [unique_id "apK9ASJcY4fy7tP-rU3rOwAAAmc"]
[Sat Aug 29 05:05:37.843489 2026] [security2:error] [pid 1017536:tid 1017695] [client 4.205.62.107:61095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "troop264olney.net"] [uri "/aws_keys.php"] [unique_id "apK9ASJcY4fy7tP-rU3rPQAAAjE"]
[Sat Aug 29 05:05:37.856322 2026] [security2:error] [pid 1018003:tid 1018244] [client 4.205.62.107:22216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/hiquido.com/index.php"] [unique_id "apK9ATAh5Y1i2tUxg4HkbwAABhQ"]
[Sat Aug 29 05:05:37.876665 2026] [security2:error] [pid 1018003:tid 1018268] [client 197.219.150.206:56895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK9ATAh5Y1i2tUxg4HkcQAABiw"]
[Sat Aug 29 05:05:37.876751 2026] [security2:error] [pid 1018003:tid 1018268] [client 197.219.150.206:56895] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK9ATAh5Y1i2tUxg4HkcQAABiw"]
[Sat Aug 29 05:05:37.876870 2026] [security2:error] [pid 1017536:tid 1017754] [client 20.48.251.3:57862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/cu.php"] [unique_id "apK9ASJcY4fy7tP-rU3rQgAAAmw"]
[Sat Aug 29 05:05:37.888502 2026] [security2:error] [pid 1017536:tid 1017761] [client 158.23.184.117:52519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/.well-known/admin.php"] [unique_id "apK9ASJcY4fy7tP-rU3rQwAAAnM"]
[Sat Aug 29 05:05:37.902990 2026] [security2:error] [pid 1017536:tid 1017691] [client 4.205.62.107:65527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/dialog.php"] [unique_id "apK9ASJcY4fy7tP-rU3rSAAAAi0"]
[Sat Aug 29 05:05:37.913697 2026] [security2:error] [pid 1017536:tid 1017685] [client 20.63.219.114:15754] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webmail.coveryourauto.com"] [uri "/1.php7"] [unique_id "apK9ASJcY4fy7tP-rU3rSgAAAic"]
[Sat Aug 29 05:05:37.913819 2026] [security2:error] [pid 1017536:tid 1017685] [client 20.63.219.114:15754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/1.php7"] [unique_id "apK9ASJcY4fy7tP-rU3rSgAAAic"]
[Sat Aug 29 05:05:37.915321 2026] [security2:error] [pid 1017536:tid 1017745] [client 20.63.219.114:15565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/cookie.php"] [unique_id "apK9ASJcY4fy7tP-rU3rSwAAAmM"]
[Sat Aug 29 05:05:37.938276 2026] [security2:error] [pid 1017536:tid 1017785] [client 4.205.62.107:2895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/public/vx.php"] [unique_id "apK9ASJcY4fy7tP-rU3rTAAAAos"]
[Sat Aug 29 05:05:37.938559 2026] [security2:error] [pid 1018003:tid 1018236] [client 168.107.94.195:56999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9ATAh5Y1i2tUxg4HkcwAABgw"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:37.952687 2026] [security2:error] [pid 1017536:tid 1017747] [client 20.196.209.81:4532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/meta.php"] [unique_id "apK9ASJcY4fy7tP-rU3rTQAAAmU"]
[Sat Aug 29 05:05:37.958792 2026] [security2:error] [pid 1017536:tid 1017783] [client 216.26.253.154:43233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.253.26.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK9ASJcY4fy7tP-rU3rRgAAAok"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:37.961050 2026] [security2:error] [pid 1017536:tid 1017678] [client 4.205.62.107:53379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/hochladen.form.php"] [unique_id "apK9ASJcY4fy7tP-rU3rTwAAAiA"]
[Sat Aug 29 05:05:37.970290 2026] [security2:error] [pid 1018003:tid 1018207] [client 158.23.184.117:53521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cairnquartet.strangeworx.com"] [uri "/update/da222.php"] [unique_id "apK9ATAh5Y1i2tUxg4HkdAAABfA"]
[Sat Aug 29 05:05:37.976919 2026] [security2:error] [pid 1017536:tid 1017725] [client 20.48.250.41:23523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/error_log.php"] [unique_id "apK9ASJcY4fy7tP-rU3rUgAAAk8"]
[Sat Aug 29 05:05:37.990967 2026] [core:error] [pid 1017536:tid 1017778] [client 32.198.11.44:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:37.990985 2026] [core:error] [pid 1017536:tid 1017778] [client 32.198.11.44:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:38.012015 2026] [security2:error] [pid 1017536:tid 1017757] [client 20.48.251.3:28544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/services.php"] [unique_id "apK9AiJcY4fy7tP-rU3rVAAAAm8"]
[Sat Aug 29 05:05:38.028109 2026] [security2:error] [pid 1018003:tid 1018107] [remote 45.148.10.62:50782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vvr.ewu.mybluehost.me"] [uri "/wp-login.php"] [unique_id "apK9AjAh5Y1i2tUxg4HkdQAGJ1Y"]
[Sat Aug 29 05:05:38.035147 2026] [security2:error] [pid 1017536:tid 1017690] [client 158.23.184.117:27649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/.well-known/api.php"] [unique_id "apK9AiJcY4fy7tP-rU3rVQAAAiw"]
[Sat Aug 29 05:05:38.040599 2026] [security2:error] [pid 1018003:tid 1018194] [client 20.48.250.41:27568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/wp-link10.php"] [unique_id "apK9AjAh5Y1i2tUxg4HkdgAABeM"]
[Sat Aug 29 05:05:38.085468 2026] [security2:error] [pid 1017536:tid 1017667] [client 158.23.147.79:24549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK9AiJcY4fy7tP-rU3rWAAAAhU"]
[Sat Aug 29 05:05:38.092588 2026] [core:error] [pid 1017536:tid 1017684] [client 32.198.11.44:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:38.092605 2026] [core:error] [pid 1017536:tid 1017684] [client 32.198.11.44:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:38.115179 2026] [security2:error] [pid 1018003:tid 1018177] [client 158.23.184.117:7293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cairnquartet.strangeworx.com"] [uri "/xmr.php"] [unique_id "apK9AjAh5Y1i2tUxg4HkdwAABdI"]
[Sat Aug 29 05:05:38.121068 2026] [security2:error] [pid 1017536:tid 1017728] [client 60.243.207.176:59516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK9AiJcY4fy7tP-rU3rWgAAAlI"]
[Sat Aug 29 05:05:38.121151 2026] [security2:error] [pid 1017536:tid 1017728] [client 60.243.207.176:59516] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK9AiJcY4fy7tP-rU3rWgAAAlI"]
[Sat Aug 29 05:05:38.141710 2026] [security2:error] [pid 1017536:tid 1017688] [client 74.248.24.12:41595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/disagraeosc.php"] [unique_id "apK9AiJcY4fy7tP-rU3rWwAAAio"]
[Sat Aug 29 05:05:38.149205 2026] [security2:error] [pid 1017536:tid 1017724] [client 20.48.251.3:27141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/filesystems.php"] [unique_id "apK9AiJcY4fy7tP-rU3rXAAAAk4"]
[Sat Aug 29 05:05:38.154502 2026] [core:error] [pid 1017536:tid 1017597] [remote 32.198.11.44:33434] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:38.154517 2026] [core:error] [pid 1017536:tid 1017597] [remote 32.198.11.44:33434] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:38.162552 2026] [security2:error] [pid 1018003:tid 1018167] [client 45.148.10.62:50786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vzo.fme.mybluehost.me"] [uri "/.env.php"] [unique_id "apK9AjAh5Y1i2tUxg4HkeAAABcg"]
[Sat Aug 29 05:05:38.173841 2026] [security2:error] [pid 1017536:tid 1017765] [client 20.104.49.130:47830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/read.php"] [unique_id "apK9AiJcY4fy7tP-rU3rXgAAAnc"]
[Sat Aug 29 05:05:38.182036 2026] [security2:error] [pid 1017536:tid 1017729] [client 158.23.184.117:27663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/.well-known/chosen.php"] [unique_id "apK9AiJcY4fy7tP-rU3rXwAAAlM"]
[Sat Aug 29 05:05:38.184143 2026] [security2:error] [pid 1017536:tid 1017737] [client 20.48.250.41:23510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/403.php"] [unique_id "apK9AiJcY4fy7tP-rU3rYAAAAls"]
[Sat Aug 29 05:05:38.185426 2026] [security2:error] [pid 1017536:tid 1017774] [client 68.155.159.216:57361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK9AiJcY4fy7tP-rU3rYQAAAoA"]
[Sat Aug 29 05:05:38.191302 2026] [security2:error] [pid 1017536:tid 1017679] [client 4.232.148.111:8433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/123.php"] [unique_id "apK9AiJcY4fy7tP-rU3rYgAAAiE"]
[Sat Aug 29 05:05:38.198048 2026] [security2:error] [pid 1018003:tid 1018209] [client 158.158.54.35:16682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/zoom1.php"] [unique_id "apK9AjAh5Y1i2tUxg4HkeQAABfI"]
[Sat Aug 29 05:05:38.230318 2026] [security2:error] [pid 1017536:tid 1017703] [client 68.155.159.216:51443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-content/x/index.php"] [unique_id "apK9AiJcY4fy7tP-rU3rYwAAAjk"]
[Sat Aug 29 05:05:38.240390 2026] [security2:error] [pid 1017536:tid 1017714] [client 158.23.147.79:62993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/install.php"] [unique_id "apK9AiJcY4fy7tP-rU3rZAAAAkQ"]
[Sat Aug 29 05:05:38.254774 2026] [security2:error] [pid 1018003:tid 1018098] [remote 34.148.90.28:50028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/@fs/.env"] [unique_id "apK9AjAh5Y1i2tUxg4HkegAGMU0"]
[Sat Aug 29 05:05:38.259514 2026] [security2:error] [pid 1017536:tid 1017769] [client 158.23.184.117:7290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cairnquartet.strangeworx.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK9AiJcY4fy7tP-rU3rZQAAAns"]
[Sat Aug 29 05:05:38.269000 2026] [security2:error] [pid 1017536:tid 1017764] [client 20.196.209.81:25070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/22.php"] [unique_id "apK9AiJcY4fy7tP-rU3rZgAAAnY"]
[Sat Aug 29 05:05:38.280146 2026] [security2:error] [pid 1017536:tid 1017742] [client 20.63.219.114:18839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/NewFile.php"] [unique_id "apK9AiJcY4fy7tP-rU3rZwAAAmA"]
[Sat Aug 29 05:05:38.287686 2026] [security2:error] [pid 1017536:tid 1017680] [client 158.23.147.79:49839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK9AiJcY4fy7tP-rU3raAAAAiI"]
[Sat Aug 29 05:05:38.318557 2026] [security2:error] [pid 1017536:tid 1017695] [client 168.107.94.195:57315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9AiJcY4fy7tP-rU3raQAAAjE"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:38.318581 2026] [security2:error] [pid 1017536:tid 1017749] [client 20.48.251.3:13999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/gnmlc.php"] [unique_id "apK9AiJcY4fy7tP-rU3ragAAAmc"]
[Sat Aug 29 05:05:38.321138 2026] [security2:error] [pid 1017536:tid 1017770] [client 20.48.250.41:27495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/ww.php"] [unique_id "apK9AiJcY4fy7tP-rU3rawAAAnw"]
[Sat Aug 29 05:05:38.321606 2026] [security2:error] [pid 1017536:tid 1017752] [client 20.63.219.114:18824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/ds.php"] [unique_id "apK9AiJcY4fy7tP-rU3rbAAAAmo"]
[Sat Aug 29 05:05:38.327406 2026] [security2:error] [pid 1017536:tid 1017715] [client 158.23.184.117:52500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/.well-known/config.php"] [unique_id "apK9AiJcY4fy7tP-rU3rbQAAAkU"]
[Sat Aug 29 05:05:38.348688 2026] [security2:error] [pid 1017536:tid 1017672] [client 158.23.147.79:55893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/log-mama/function.php"] [unique_id "apK9AiJcY4fy7tP-rU3rbgAAAho"]
[Sat Aug 29 05:05:38.356992 2026] [security2:error] [pid 1017536:tid 1017691] [client 68.155.159.216:62854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.gavirestaurant.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK9AiJcY4fy7tP-rU3rbwAAAi0"]
[Sat Aug 29 05:05:38.371772 2026] [security2:error] [pid 1018003:tid 1018239] [client 20.48.251.3:27170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/tax.php"] [unique_id "apK9AjAh5Y1i2tUxg4HkfAAABg8"]
[Sat Aug 29 05:05:38.377935 2026] [security2:error] [pid 1017536:tid 1017784] [client 20.196.209.81:4481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/dxc.php"] [unique_id "apK9AiJcY4fy7tP-rU3rcQAAAoo"]
[Sat Aug 29 05:05:38.379639 2026] [security2:error] [pid 1017536:tid 1017745] [client 20.104.49.130:57643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/m.php"] [unique_id "apK9AiJcY4fy7tP-rU3rcgAAAmM"]
[Sat Aug 29 05:05:38.395515 2026] [security2:error] [pid 1017536:tid 1017673] [client 20.48.250.41:23524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/cytyr.php"] [unique_id "apK9AiJcY4fy7tP-rU3rcwAAAhs"]
[Sat Aug 29 05:05:38.396086 2026] [security2:error] [pid 1018003:tid 1018105] [remote 34.148.90.28:50028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/@fs/.env"] [unique_id "apK9AjAh5Y1i2tUxg4HkfQAFvVQ"]
[Sat Aug 29 05:05:38.403981 2026] [security2:error] [pid 1017536:tid 1017788] [client 158.23.184.117:8066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cairnquartet.strangeworx.com"] [uri "/wp-act.php"] [unique_id "apK9AiJcY4fy7tP-rU3rdAAAAo4"]
[Sat Aug 29 05:05:38.415348 2026] [security2:error] [pid 1018003:tid 1018094] [remote 34.148.90.28:50028] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "hitechgs.com"] [uri "/wp-config.php.old"] [unique_id "apK9AjAh5Y1i2tUxg4HkfwAFxEk"]
[Sat Aug 29 05:05:38.415808 2026] [security2:error] [pid 1018003:tid 1018112] [remote 34.148.90.28:50028] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "hitechgs.com"] [uri "/wp-config.php.bak"] [unique_id "apK9AjAh5Y1i2tUxg4HkgAAFxFs"]
[Sat Aug 29 05:05:38.433984 2026] [security2:error] [pid 1017536:tid 1017778] [client 68.155.159.216:52857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK9AiJcY4fy7tP-rU3reQAAAoQ"]
[Sat Aug 29 05:05:38.475849 2026] [security2:error] [pid 1017536:tid 1017738] [client 158.23.184.117:52486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/.well-known/core.php"] [unique_id "apK9AiJcY4fy7tP-rU3rgQAAAlw"]
[Sat Aug 29 05:05:38.475881 2026] [security2:error] [pid 1017536:tid 1017744] [client 68.155.159.216:14229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/wp-admin/css/index.php"] [unique_id "apK9AiJcY4fy7tP-rU3rgAAAAmI"]
[Sat Aug 29 05:05:38.502616 2026] [security2:error] [pid 1018003:tid 1018198] [client 20.48.251.3:27152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/linusadmin-phpinfo.php"] [unique_id "apK9AjAh5Y1i2tUxg4HkhQAABec"]
[Sat Aug 29 05:05:38.511031 2026] [security2:error] [pid 1018003:tid 1018114] [remote 34.148.90.28:50028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/@fs/.env"] [unique_id "apK9AjAh5Y1i2tUxg4HkhgAGIl0"]
[Sat Aug 29 05:05:38.520962 2026] [security2:error] [pid 1018003:tid 1018186] [client 209.50.169.121:19235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 121.169.50.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK9AjAh5Y1i2tUxg4HkgwAABds"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:38.553218 2026] [security2:error] [pid 1017536:tid 1017687] [client 158.23.184.117:7270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cairnquartet.strangeworx.com"] [uri "/fff.php"] [unique_id "apK9AiJcY4fy7tP-rU3rhAAAAik"]
[Sat Aug 29 05:05:38.585012 2026] [security2:error] [pid 1017536:tid 1017726] [client 20.48.250.41:23454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/galer.php"] [unique_id "apK9AiJcY4fy7tP-rU3rhQAAAlA"]
[Sat Aug 29 05:05:38.591153 2026] [security2:error] [pid 1017536:tid 1017793] [client 158.23.147.79:25478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/.well-known/index.php"] [unique_id "apK9AiJcY4fy7tP-rU3rhgAAApM"]
[Sat Aug 29 05:05:38.612526 2026] [security2:error] [pid 1018003:tid 1018116] [remote 34.148.90.28:50028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 28.90.148.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hitechgs.com"] [uri "/config.php.bak"] [unique_id "apK9AjAh5Y1i2tUxg4HkiAAF918"]
[Sat Aug 29 05:05:38.621891 2026] [security2:error] [pid 1017536:tid 1017777] [client 158.23.184.117:27692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/.well-known/data.php"] [unique_id "apK9AiJcY4fy7tP-rU3rhwAAAoM"]
[Sat Aug 29 05:05:38.629935 2026] [security2:error] [pid 1018003:tid 1018117] [remote 34.148.90.28:50028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 28.90.148.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hitechgs.com"] [uri "/config/.env.php"] [unique_id "apK9AjAh5Y1i2tUxg4HkiQAGIWA"]
[Sat Aug 29 05:05:38.634155 2026] [security2:error] [pid 1017536:tid 1017694] [client 20.48.251.3:27183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/app/Models/Hrm/Employee.php"] [unique_id "apK9AiJcY4fy7tP-rU3riAAAAjA"]
[Sat Aug 29 05:05:38.644789 2026] [security2:error] [pid 1018003:tid 1018118] [remote 34.148.90.28:50028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 28.90.148.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hitechgs.com"] [uri "/.env.php.bak"] [unique_id "apK9AjAh5Y1i2tUxg4HkigAGAWE"]
[Sat Aug 29 05:05:38.646425 2026] [security2:error] [pid 1018003:tid 1018121] [remote 34.148.90.28:50028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/core/.env"] [unique_id "apK9AjAh5Y1i2tUxg4HkiwAGAWQ"]
[Sat Aug 29 05:05:38.665164 2026] [security2:error] [pid 1018003:tid 1018241] [client 20.63.219.114:15770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/config.php"] [unique_id "apK9AjAh5Y1i2tUxg4HkjAAABhE"]
[Sat Aug 29 05:05:38.669121 2026] [security2:error] [pid 1017536:tid 1017702] [client 4.232.148.111:8445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/yanz.php"] [unique_id "apK9AiJcY4fy7tP-rU3riQAAAjg"]
[Sat Aug 29 05:05:38.673851 2026] [security2:error] [pid 1017536:tid 1017723] [client 158.23.147.79:30704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK9AiJcY4fy7tP-rU3rigAAAk0"]
[Sat Aug 29 05:05:38.680021 2026] [security2:error] [pid 1018003:tid 1018227] [client 4.205.62.107:64241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/configuration.php"] [unique_id "apK9AjAh5Y1i2tUxg4HkjQAABgQ"]
[Sat Aug 29 05:05:38.680044 2026] [security2:error] [pid 1018003:tid 1018197] [client 158.158.54.35:26010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/txets.php"] [unique_id "apK9AjAh5Y1i2tUxg4HkjgAABeY"]
[Sat Aug 29 05:05:38.682478 2026] [security2:error] [pid 1017536:tid 1017790] [client 74.248.24.12:8972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/wp-logs.php"] [unique_id "apK9AiJcY4fy7tP-rU3riwAAApA"]
[Sat Aug 29 05:05:38.690897 2026] [security2:error] [pid 1018003:tid 1018029] [remote 34.148.90.28:50028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/laravel/.env"] [unique_id "apK9AjAh5Y1i2tUxg4HkjwAFwQg"]
[Sat Aug 29 05:05:38.698510 2026] [security2:error] [pid 1017536:tid 1017737] [client 168.107.94.195:57672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9AiJcY4fy7tP-rU3rjQAAAls"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:38.702845 2026] [security2:error] [pid 1017536:tid 1017748] [client 20.48.250.41:27399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/w1px.php"] [unique_id "apK9AiJcY4fy7tP-rU3rjgAAAmY"]
[Sat Aug 29 05:05:38.709041 2026] [security2:error] [pid 1018003:tid 1018249] [client 20.63.219.114:12404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/GOD.php"] [unique_id "apK9AjAh5Y1i2tUxg4HkkAAABhk"]
[Sat Aug 29 05:05:38.718807 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.196.209.81:15763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/bak.phps"] [unique_id "apK9AiJcY4fy7tP-rU3rjwAAAnk"]
[Sat Aug 29 05:05:38.739179 2026] [security2:error] [pid 1017536:tid 1017765] [client 158.23.184.117:7232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cairnquartet.strangeworx.com"] [uri "/.tmb/dropdown.php"] [unique_id "apK9AiJcY4fy7tP-rU3rkAAAAnc"]
[Sat Aug 29 05:05:38.752582 2026] [security2:error] [pid 1018003:tid 1018199] [client 158.23.147.79:30665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/chosen.php"] [unique_id "apK9AjAh5Y1i2tUxg4HkkQAABeg"]
[Sat Aug 29 05:05:38.767152 2026] [security2:error] [pid 1017536:tid 1017773] [client 158.23.184.117:52498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/.well-known/db-status.php"] [unique_id "apK9AiJcY4fy7tP-rU3rkQAAAn8"]
[Sat Aug 29 05:05:38.779625 2026] [security2:error] [pid 1017536:tid 1017764] [client 20.48.251.3:28450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/agg.php"] [unique_id "apK9AiJcY4fy7tP-rU3rkwAAAnY"]
[Sat Aug 29 05:05:38.784193 2026] [security2:error] [pid 1017536:tid 1017689] [client 20.48.250.41:23546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/baixy.php"] [unique_id "apK9AiJcY4fy7tP-rU3rlAAAAis"]
[Sat Aug 29 05:05:38.798603 2026] [security2:error] [pid 1017536:tid 1017704] [client 68.155.159.216:12203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-content/x/index.php"] [unique_id "apK9AiJcY4fy7tP-rU3rlQAAAjo"]
[Sat Aug 29 05:05:38.829084 2026] [security2:error] [pid 1017536:tid 1017752] [client 20.48.251.3:33286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/koiy.php"] [unique_id "apK9AiJcY4fy7tP-rU3rlwAAAmo"]
[Sat Aug 29 05:05:38.871908 2026] [security2:error] [pid 1017536:tid 1017672] [client 20.48.250.41:27331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/to.php"] [unique_id "apK9AiJcY4fy7tP-rU3rmAAAAho"]
[Sat Aug 29 05:05:38.873955 2026] [security2:error] [pid 1017536:tid 1017685] [client 20.104.49.130:46570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/gecko-new.php"] [unique_id "apK9AiJcY4fy7tP-rU3rmQAAAic"]
[Sat Aug 29 05:05:38.873985 2026] [security2:error] [pid 1017536:tid 1017707] [client 158.23.147.79:48222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/NewFile.php/"] [unique_id "apK9AiJcY4fy7tP-rU3rmgAAAj0"]
[Sat Aug 29 05:05:38.886623 2026] [security2:error] [pid 1018003:tid 1018211] [client 158.23.184.117:53513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cairnquartet.strangeworx.com"] [uri "/robots.php"] [unique_id "apK9AjAh5Y1i2tUxg4HklQAABfQ"]
[Sat Aug 29 05:05:38.890657 2026] [security2:error] [pid 1018003:tid 1018068] [remote 34.148.90.28:50028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 28.90.148.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hitechgs.com"] [uri "/configuration.php.bak"] [unique_id "apK9AjAh5Y1i2tUxg4HklgAFzS8"]
[Sat Aug 29 05:05:38.901294 2026] [security2:error] [pid 1017536:tid 1017785] [client 68.155.159.216:16217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK9AiJcY4fy7tP-rU3rnAAAAos"]
[Sat Aug 29 05:05:38.911804 2026] [security2:error] [pid 1018003:tid 1018231] [client 20.48.251.3:28513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/requirements.php"] [unique_id "apK9AjAh5Y1i2tUxg4HkmAAABgc"]
[Sat Aug 29 05:05:38.915158 2026] [security2:error] [pid 1018003:tid 1018275] [client 158.23.184.117:27660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/.well-known/f35.php"] [unique_id "apK9AjAh5Y1i2tUxg4HkmQAABjM"]
[Sat Aug 29 05:05:38.924504 2026] [security2:error] [pid 1017536:tid 1017768] [client 20.196.209.81:4502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/wp-2019.php"] [unique_id "apK9AiJcY4fy7tP-rU3rnQAAAno"]
[Sat Aug 29 05:05:38.934596 2026] [security2:error] [pid 1018003:tid 1018193] [client 20.104.49.130:63611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/wp.php"] [unique_id "apK9AjAh5Y1i2tUxg4HkmgAABeI"]
[Sat Aug 29 05:05:38.950339 2026] [security2:error] [pid 1018003:tid 1018115] [remote 34.148.90.28:50028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/storage/.env"] [unique_id "apK9AjAh5Y1i2tUxg4HkmwAFt14"]
[Sat Aug 29 05:05:38.964053 2026] [security2:error] [pid 1018003:tid 1018154] [client 4.205.62.107:22287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/xin1.php"] [unique_id "apK9AjAh5Y1i2tUxg4HknQAABbs"]
[Sat Aug 29 05:05:38.965310 2026] [security2:error] [pid 1018003:tid 1018122] [remote 34.148.90.28:50028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/.env.swp"] [unique_id "apK9AjAh5Y1i2tUxg4HknAAGGGU"]
[Sat Aug 29 05:05:38.965349 2026] [security2:error] [pid 1018003:tid 1018153] [client 68.155.159.216:33656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/file88.php"] [unique_id "apK9AjAh5Y1i2tUxg4HkngAABbo"]
[Sat Aug 29 05:05:38.974767 2026] [security2:error] [pid 1017536:tid 1017775] [client 20.48.250.41:23435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/ava.php"] [unique_id "apK9AiJcY4fy7tP-rU3rngAAAoE"]
[Sat Aug 29 05:05:38.982829 2026] [security2:error] [pid 1018003:tid 1018235] [client 20.104.49.130:48773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/df.php"] [unique_id "apK9AjAh5Y1i2tUxg4HknwAABgs"]
[Sat Aug 29 05:05:38.991018 2026] [security2:error] [pid 1017536:tid 1017700] [client 4.205.62.107:21866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/app_local.php"] [unique_id "apK9AiJcY4fy7tP-rU3rnwAAAjY"]
[Sat Aug 29 05:05:39.026918 2026] [security2:error] [pid 1017536:tid 1017779] [client 20.63.219.114:1869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/22.php"] [unique_id "apK9AyJcY4fy7tP-rU3roAAAAoU"]
[Sat Aug 29 05:05:39.032193 2026] [security2:error] [pid 1017536:tid 1017778] [client 158.23.184.117:7278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cairnquartet.strangeworx.com"] [uri "/.well-known/install.php"] [unique_id "apK9AyJcY4fy7tP-rU3roQAAAoQ"]
[Sat Aug 29 05:05:39.034935 2026] [security2:error] [pid 1018003:tid 1018159] [client 4.205.62.107:65516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/phpinfo01.php"] [unique_id "apK9AzAh5Y1i2tUxg4HkoAAABcA"]
[Sat Aug 29 05:05:39.042007 2026] [security2:error] [pid 1017536:tid 1017740] [client 20.48.251.3:27180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/var/www/wallet/index.php"] [unique_id "apK9AyJcY4fy7tP-rU3rogAAAl4"]
[Sat Aug 29 05:05:39.061810 2026] [security2:error] [pid 1018003:tid 1018267] [client 158.23.184.117:52539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK9AzAh5Y1i2tUxg4HkogAABis"]
[Sat Aug 29 05:05:39.076661 2026] [security2:error] [pid 1017536:tid 1017738] [client 4.205.62.107:61074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "troop264olney.net"] [uri "/umgebung.php"] [unique_id "apK9AyJcY4fy7tP-rU3rpAAAAlw"]
[Sat Aug 29 05:05:39.076894 2026] [security2:error] [pid 1017536:tid 1017713] [client 168.107.94.195:58037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9AyJcY4fy7tP-rU3rpQAAAkM"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:39.078880 2026] [security2:error] [pid 1017536:tid 1017719] [client 4.205.62.107:2502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/333.php"] [unique_id "apK9AyJcY4fy7tP-rU3rpgAAAkk"]
[Sat Aug 29 05:05:39.085320 2026] [security2:error] [pid 1017536:tid 1017717] [client 20.63.219.114:15597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/ggfi.php"] [unique_id "apK9AyJcY4fy7tP-rU3rpwAAAkc"]
[Sat Aug 29 05:05:39.086456 2026] [security2:error] [pid 1018003:tid 1018169] [client 40.83.93.50:14431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/post.php"] [unique_id "apK9AzAh5Y1i2tUxg4HkowAABco"]
[Sat Aug 29 05:05:39.110198 2026] [security2:error] [pid 1018003:tid 1018181] [client 4.205.62.107:53435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/asdf.php"] [unique_id "apK9AzAh5Y1i2tUxg4HkpwAABdY"]
[Sat Aug 29 05:05:39.112742 2026] [security2:error] [pid 1018003:tid 1018218] [client 20.48.250.41:27479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/thui.php"] [unique_id "apK9AzAh5Y1i2tUxg4HkqQAABfs"]
[Sat Aug 29 05:05:39.126364 2026] [security2:error] [pid 1018003:tid 1018190] [client 216.26.243.244:40391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 244.243.26.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK9AzAh5Y1i2tUxg4HkpAAABd8"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:39.126613 2026] [security2:error] [pid 1018003:tid 1018185] [client 20.48.250.41:23383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/gdn.php"] [unique_id "apK9AzAh5Y1i2tUxg4HkqwAABdo"]
[Sat Aug 29 05:05:39.135979 2026] [security2:error] [pid 1018003:tid 1018233] [client 4.232.148.111:20639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/autoload_classmap.php"] [unique_id "apK9AzAh5Y1i2tUxg4HkrAAABgk"]
[Sat Aug 29 05:05:39.150534 2026] [security2:error] [pid 1018003:tid 1018277] [client 20.196.209.81:4369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/install.php"] [unique_id "apK9AzAh5Y1i2tUxg4HkrgAABjU"]
[Sat Aug 29 05:05:39.187492 2026] [core:error] [pid 1018003:tid 1018244] [client 158.23.184.117:7295] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:39.187511 2026] [core:error] [pid 1018003:tid 1018244] [client 158.23.184.117:7295] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:39.190153 2026] [security2:error] [pid 1017536:tid 1017725] [client 20.48.251.3:28532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/124.php"] [unique_id "apK9AyJcY4fy7tP-rU3rqQAAAk8"]
[Sat Aug 29 05:05:39.206292 2026] [security2:error] [pid 1017536:tid 1017675] [client 158.23.184.117:28409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/.well-known/home.php"] [unique_id "apK9AyJcY4fy7tP-rU3rqwAAAh0"]
[Sat Aug 29 05:05:39.224264 2026] [security2:error] [pid 1017536:tid 1017776] [client 74.248.24.12:31587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/wp-admin/css/about.php"] [unique_id "apK9AyJcY4fy7tP-rU3rrAAAAoI"]
[Sat Aug 29 05:05:39.242072 2026] [security2:error] [pid 1017536:tid 1017751] [client 20.48.250.41:26933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/Jcrop.php"] [unique_id "apK9AyJcY4fy7tP-rU3rrQAAAmk"]
[Sat Aug 29 05:05:39.242537 2026] [security2:error] [pid 1018003:tid 1018177] [client 45.148.10.62:50790] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.wagnerfarmscbd.com"] [uri "/.env"] [unique_id "apK9AzAh5Y1i2tUxg4HksQAABdI"]
[Sat Aug 29 05:05:39.290148 2026] [security2:error] [pid 1018003:tid 1018223] [client 20.48.250.41:23434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/f2.php"] [unique_id "apK9AzAh5Y1i2tUxg4HksgAABgA"]
[Sat Aug 29 05:05:39.290821 2026] [security2:error] [pid 1018003:tid 1018164] [client 68.155.159.216:57436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK9AzAh5Y1i2tUxg4HkswAABcU"]
[Sat Aug 29 05:05:39.314272 2026] [security2:error] [pid 1017536:tid 1017683] [client 216.73.216.199:63580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 199.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "origeneshechoamano.sortthru.com"] [uri "/webapp/wp-cron.php"] [unique_id "apK9AyJcY4fy7tP-rU3rswAAAiU"]
[Sat Aug 29 05:05:39.323280 2026] [security2:error] [pid 1017536:tid 1017716] [client 20.196.209.81:21072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/menu.php"] [unique_id "apK9AyJcY4fy7tP-rU3rtAAAAkY"]
[Sat Aug 29 05:05:39.323523 2026] [security2:error] [pid 1017536:tid 1017687] [client 34.7.216.49:46216] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "webdisk.bridgewaycentretrust.org"] [uri "/wp-config.php.bak"] [unique_id "apK9AyJcY4fy7tP-rU3rtQAAAik"]
[Sat Aug 29 05:05:39.327917 2026] [security2:error] [pid 1017536:tid 1017720] [client 20.48.251.3:13955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/php-info.php"] [unique_id "apK9AyJcY4fy7tP-rU3rtwAAAko"]
[Sat Aug 29 05:05:39.328749 2026] [security2:error] [pid 1017536:tid 1017726] [client 34.7.216.49:46228] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "webdisk.bridgewaycentretrust.org"] [uri "/wp-config.php.old"] [unique_id "apK9AyJcY4fy7tP-rU3ruAAAAlA"]
[Sat Aug 29 05:05:39.335072 2026] [security2:error] [pid 1018003:tid 1018215] [client 68.155.159.216:51244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK9AzAh5Y1i2tUxg4HkugAABfg"]
[Sat Aug 29 05:05:39.336549 2026] [security2:error] [pid 1017536:tid 1017693] [client 158.23.184.117:53529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cairnquartet.strangeworx.com"] [uri "/wp-admin/about.php"] [unique_id "apK9AyJcY4fy7tP-rU3ruwAAAi8"]
[Sat Aug 29 05:05:39.336595 2026] [security2:error] [pid 1017536:tid 1017764] [client 20.48.251.3:57866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/test1.php"] [unique_id "apK9AyJcY4fy7tP-rU3rugAAAnY"]
[Sat Aug 29 05:05:39.341270 2026] [security2:error] [pid 1017536:tid 1017793] [client 34.7.216.49:46206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.216.7.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bridgewaycentretrust.org"] [uri "/wp-config.php"] [unique_id "apK9AyJcY4fy7tP-rU3ruQAAApM"]
[Sat Aug 29 05:05:39.343748 2026] [security2:error] [pid 1018003:tid 1018191] [client 34.7.216.49:46232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.216.7.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bridgewaycentretrust.org"] [uri "/config.php"] [unique_id "apK9AzAh5Y1i2tUxg4HkuQAABeA"]
[Sat Aug 29 05:05:39.347794 2026] [security2:error] [pid 1018003:tid 1018198] [client 158.23.147.79:63843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-content/x/index.php"] [unique_id "apK9AzAh5Y1i2tUxg4HkvAAABec"]
[Sat Aug 29 05:05:39.351268 2026] [security2:error] [pid 1017536:tid 1017736] [client 158.23.184.117:28372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/.well-known/index.php"] [unique_id "apK9AyJcY4fy7tP-rU3rvAAAAlo"]
[Sat Aug 29 05:05:39.356310 2026] [security2:error] [pid 1017536:tid 1017668] [client 34.7.216.49:46234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.216.7.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bridgewaycentretrust.org"] [uri "/config.php.bak"] [unique_id "apK9AyJcY4fy7tP-rU3rvgAAAhY"]
[Sat Aug 29 05:05:39.395337 2026] [security2:error] [pid 1018003:tid 1018175] [client 45.148.10.62:50790] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.wagnerfarmscbd.com"] [uri "/.env"] [unique_id "apK9AzAh5Y1i2tUxg4HkwAAABdA"]
[Sat Aug 29 05:05:39.420666 2026] [security2:error] [pid 1017536:tid 1017752] [client 20.48.250.41:26881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/ws58.php"] [unique_id "apK9AyJcY4fy7tP-rU3rvwAAAmo"]
[Sat Aug 29 05:05:39.421343 2026] [security2:error] [pid 1017536:tid 1017730] [client 20.63.219.114:15611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/bak.phps"] [unique_id "apK9AyJcY4fy7tP-rU3rwAAAAlQ"]
[Sat Aug 29 05:05:39.426591 2026] [security2:error] [pid 1017536:tid 1017754] [client 20.48.250.41:23442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/grsiuk.php"] [unique_id "apK9AyJcY4fy7tP-rU3rwQAAAmw"]
[Sat Aug 29 05:05:39.438915 2026] [security2:error] [pid 1017536:tid 1017761] [client 158.158.54.35:16674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-content/themes/about.php"] [unique_id "apK9AyJcY4fy7tP-rU3rwwAAAnM"]
[Sat Aug 29 05:05:39.441267 2026] [security2:error] [pid 1018003:tid 1018069] [remote 34.148.90.28:50028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/public/.env"] [unique_id "apK9AzAh5Y1i2tUxg4HkwQAFwjA"]
[Sat Aug 29 05:05:39.457918 2026] [security2:error] [pid 1018003:tid 1018214] [client 168.107.94.195:58309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9AzAh5Y1i2tUxg4HkxAAABfc"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:39.464595 2026] [security2:error] [pid 1017536:tid 1017749] [client 68.155.159.216:61645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.gavirestaurant.com"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK9AyJcY4fy7tP-rU3rzQAAAmc"]
[Sat Aug 29 05:05:39.468066 2026] [security2:error] [pid 1017536:tid 1017735] [client 20.48.251.3:57845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/bigdump.php"] [unique_id "apK9AyJcY4fy7tP-rU3r0gAAAlk"]
[Sat Aug 29 05:05:39.468346 2026] [security2:error] [pid 1017536:tid 1017698] [client 34.143.179.161:39756] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "cpcontacts.harnessenergyusa.com"] [uri "/api/v1/env"] [unique_id "apK9AyJcY4fy7tP-rU3r0wAAAjQ"]
[Sat Aug 29 05:05:39.470295 2026] [security2:error] [pid 1018003:tid 1018123] [remote 34.148.90.28:50028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/web/.env"] [unique_id "apK9AzAh5Y1i2tUxg4HkyAAGLWY"]
[Sat Aug 29 05:05:39.473873 2026] [security2:error] [pid 1018003:tid 1018120] [remote 34.148.90.28:50028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/wp/.env"] [unique_id "apK9AzAh5Y1i2tUxg4HkyQAGIWM"]
[Sat Aug 29 05:05:39.481425 2026] [security2:error] [pid 1018003:tid 1018126] [remote 34.148.90.28:50028] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "hitechgs.com"] [uri "/wp-config.php~"] [unique_id "apK9AzAh5Y1i2tUxg4HkywAGAWk"]
[Sat Aug 29 05:05:39.482458 2026] [security2:error] [pid 1017536:tid 1017692] [client 158.23.184.117:53519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cairnquartet.strangeworx.com"] [uri "/wp-content/backup.php"] [unique_id "apK9AyJcY4fy7tP-rU3r2AAAAi4"]
[Sat Aug 29 05:05:39.489709 2026] [security2:error] [pid 1018003:tid 1018127] [remote 34.148.90.28:50028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/wp-config.old"] [unique_id "apK9AzAh5Y1i2tUxg4HkzgAGBGo"]
[Sat Aug 29 05:05:39.489701 2026] [security2:error] [pid 1018003:tid 1018124] [remote 34.148.90.28:50028] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "hitechgs.com"] [uri "/wp-config.php.swp"] [unique_id "apK9AzAh5Y1i2tUxg4HkzwAGBGc"]
[Sat Aug 29 05:05:39.498047 2026] [security2:error] [pid 1017536:tid 1017691] [client 158.23.184.117:28367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/.well-known/login.php"] [unique_id "apK9AyJcY4fy7tP-rU3r2wAAAi0"]
[Sat Aug 29 05:05:39.507045 2026] [security2:error] [pid 1017536:tid 1017721] [client 45.148.10.62:50788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vzo.fme.mybluehost.me"] [uri "/wp-config.php"] [unique_id "apK9AyJcY4fy7tP-rU3r3QAAAks"]
[Sat Aug 29 05:05:39.544247 2026] [security2:error] [pid 1018003:tid 1018249] [client 158.23.147.79:50148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK9AzAh5Y1i2tUxg4Hk0gAABhk"]
[Sat Aug 29 05:05:39.545785 2026] [security2:error] [pid 1017536:tid 1017731] [client 68.155.159.216:52795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-content/plugins/index.php"] [unique_id "apK9AyJcY4fy7tP-rU3r3wAAAlU"]
[Sat Aug 29 05:05:39.555145 2026] [security2:error] [pid 1017536:tid 1017780] [client 20.196.209.81:9523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/colour.php"] [unique_id "apK9AyJcY4fy7tP-rU3r4AAAAoY"]
[Sat Aug 29 05:05:39.570352 2026] [security2:error] [pid 1017536:tid 1017742] [client 20.63.219.114:15761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/alfa-rex.php"] [unique_id "apK9AyJcY4fy7tP-rU3r4QAAAmA"]
[Sat Aug 29 05:05:39.581804 2026] [security2:error] [pid 1018003:tid 1018255] [client 20.48.250.41:23467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/wp-scr1pts.php"] [unique_id "apK9AzAh5Y1i2tUxg4Hk1AAABh8"]
[Sat Aug 29 05:05:39.586418 2026] [security2:error] [pid 1017536:tid 1017709] [client 87.250.224.229:63602] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Mozilla\\\\/5\\\\.0 \\\$compatible; YandexBot\\\\/3\\\\.0; \\\\+http:\\\\/\\\\/yandex\\\\.com\\\\/bots\\\$" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/othercrawler.conf"] [line "3"] [id "901008"] [msg "Yandex Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "tntslotcarracing.com"] [uri "/robots.txt"] [unique_id "apK9AyJcY4fy7tP-rU3r4gAAAj8"]
[Sat Aug 29 05:05:39.598340 2026] [security2:error] [pid 1017536:tid 1017740] [client 68.155.159.216:14331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/wp-admin/images/index.php"] [unique_id "apK9AyJcY4fy7tP-rU3r4wAAAl4"]
[Sat Aug 29 05:05:39.605077 2026] [security2:error] [pid 1017536:tid 1017715] [client 40.83.93.50:14805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/flower.php"] [unique_id "apK9AyJcY4fy7tP-rU3r5AAAAkU"]
[Sat Aug 29 05:05:39.620518 2026] [security2:error] [pid 1017536:tid 1017784] [client 4.232.148.111:15435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/bi.php"] [unique_id "apK9AyJcY4fy7tP-rU3r5QAAAoo"]
[Sat Aug 29 05:05:39.630622 2026] [security2:error] [pid 1017536:tid 1017778] [client 158.23.184.117:53549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cairnquartet.strangeworx.com"] [uri "/.well-known/aa.php"] [unique_id "apK9AyJcY4fy7tP-rU3r5gAAAoQ"]
[Sat Aug 29 05:05:39.646576 2026] [security2:error] [pid 1018003:tid 1018252] [client 158.23.184.117:52481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/.well-known/logs233/index.php"] [unique_id "apK9AzAh5Y1i2tUxg4Hk1QAABhw"]
[Sat Aug 29 05:05:39.670818 2026] [security2:error] [pid 1017536:tid 1017768] [client 209.50.172.92:18963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 92.172.50.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK9AyJcY4fy7tP-rU3r5wAAAno"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:39.678122 2026] [security2:error] [pid 1018003:tid 1018211] [client 20.48.250.41:27525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/xs.php"] [unique_id "apK9AzAh5Y1i2tUxg4Hk1gAABfQ"]
[Sat Aug 29 05:05:39.681840 2026] [security2:error] [pid 1017536:tid 1017782] [client 20.104.49.130:30038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/dehnl.php"] [unique_id "apK9AyJcY4fy7tP-rU3r6AAAAog"]
[Sat Aug 29 05:05:39.731126 2026] [security2:error] [pid 1018003:tid 1018230] [client 20.196.209.81:10731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/alfa.php"] [unique_id "apK9AzAh5Y1i2tUxg4Hk2QAABgY"]
[Sat Aug 29 05:05:39.771219 2026] [security2:error] [pid 1017536:tid 1017706] [client 74.248.24.12:33152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/system_log.php"] [unique_id "apK9AyJcY4fy7tP-rU3r8QAAAjw"]
[Sat Aug 29 05:05:39.775732 2026] [security2:error] [pid 1017536:tid 1017757] [client 74.7.175.187:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "cpcontacts.aantec.com"] [uri "/___proxy_subdomain_cpcontacts/cgi-sys/404.html"] [unique_id "apK9AyJcY4fy7tP-rU3r8AAAAm8"]
[Sat Aug 29 05:05:39.777425 2026] [security2:error] [pid 1017536:tid 1017783] [client 74.7.175.187:53388] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "cpcontacts.aantec.com"] [uri "/___proxy_subdomain_cpcontacts/robots.txt"] [unique_id "apK9AyJcY4fy7tP-rU3r6wACiUY"]
[Sat Aug 29 05:05:39.781646 2026] [security2:error] [pid 1017536:tid 1017695] [client 158.23.147.79:30610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/goods.php"] [unique_id "apK9AyJcY4fy7tP-rU3r8gAAAjE"]
[Sat Aug 29 05:05:39.793024 2026] [security2:error] [pid 1018003:tid 1018259] [client 158.23.184.117:53505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cairnquartet.strangeworx.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "apK9AzAh5Y1i2tUxg4Hk3AAABiM"]
[Sat Aug 29 05:05:39.793618 2026] [security2:error] [pid 1017536:tid 1017693] [client 158.23.184.117:27688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/.well-known/maintenance.php"] [unique_id "apK9AyJcY4fy7tP-rU3r8wAAAi8"]
[Sat Aug 29 05:05:39.820929 2026] [security2:error] [pid 1018003:tid 1018195] [client 68.155.159.216:16326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.showerdoorsdubuque.com"] [uri "/bk/index.php"] [unique_id "apK9AzAh5Y1i2tUxg4Hk3QAABeQ"]
[Sat Aug 29 05:05:39.826006 2026] [security2:error] [pid 1017536:tid 1017754] [client 4.205.62.107:61776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/server_info.php"] [unique_id "apK9AyJcY4fy7tP-rU3r9AAAAmw"]
[Sat Aug 29 05:05:39.837626 2026] [security2:error] [pid 1017536:tid 1017743] [client 168.107.94.195:58644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9AyJcY4fy7tP-rU3r9QAAAmE"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:39.860732 2026] [security2:error] [pid 1017536:tid 1017712] [client 158.23.147.79:30602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK9AyJcY4fy7tP-rU3r9wAAAkI"]
[Sat Aug 29 05:05:39.881835 2026] [security2:error] [pid 1017536:tid 1017764] [client 158.158.54.35:15920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-includes/assets/index.php"] [unique_id "apK9AyJcY4fy7tP-rU3r-QAAAnY"]
[Sat Aug 29 05:05:39.883803 2026] [security2:error] [pid 1017536:tid 1017753] [client 20.63.219.114:12386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/install.php"] [unique_id "apK9AyJcY4fy7tP-rU3r-gAAAms"]
[Sat Aug 29 05:05:39.888310 2026] [proxy_http:error] [pid 1018003:tid 1018254] (20014)Internal error (specific information not available): [client 34.21.253.104:11540] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:39.888329 2026] [proxy:error] [pid 1018003:tid 1018254] [client 34.21.253.104:11540] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/@fs/home/ec2-user/.aws/config
[Sat Aug 29 05:05:39.891308 2026] [security2:error] [pid 1017536:tid 1017684] [client 34.21.253.104:11416] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "cpanel.replenishink.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2fproc/self/environ"] [unique_id "apK9AyJcY4fy7tP-rU3r_QAAAiY"]
[Sat Aug 29 05:05:39.892744 2026] [core:error] [pid 1017536:tid 1017751] [client 34.21.253.104:11430] AH10244: invalid URI path (/@fs/../../../../../app/.env?raw??)
[Sat Aug 29 05:05:39.893539 2026] [proxy_http:error] [pid 1017536:tid 1017787] (20014)Internal error (specific information not available): [client 34.21.253.104:11344] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:39.893554 2026] [proxy:error] [pid 1017536:tid 1017787] [client 34.21.253.104:11344] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/@fs/root/.ssh/id_rsa
[Sat Aug 29 05:05:39.893965 2026] [security2:error] [pid 1018003:tid 1018275] [client 34.21.253.104:11458] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "cpanel.replenishink.com"] [uri "/@fs/app/credentials.json"] [unique_id "apK9AzAh5Y1i2tUxg4Hk5AAABjM"]
[Sat Aug 29 05:05:39.895497 2026] [core:error] [pid 1017536:tid 1017705] [client 34.21.253.104:11446] AH10244: invalid URI path (/@fs/../../../../../root/.env?raw??)
[Sat Aug 29 05:05:39.899336 2026] [security2:error] [pid 1017536:tid 1017774] [client 34.21.253.104:11374] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpanel.replenishink.com"] [uri "/@fs/var/www/html/wp-config.php"] [unique_id "apK9AyJcY4fy7tP-rU3sBgAAAoA"]
[Sat Aug 29 05:05:39.899847 2026] [proxy_http:error] [pid 1017536:tid 1017751] (20014)Internal error (specific information not available): [client 34.21.253.104:11430] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:39.899858 2026] [proxy:error] [pid 1017536:tid 1017751] [client 34.21.253.104:11430] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/400.shtml
[Sat Aug 29 05:05:39.900162 2026] [security2:error] [pid 1017536:tid 1017789] [client 34.21.253.104:11360] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "cpanel.replenishink.com"] [uri "/@fs/etc/nginx/nginx.conf"] [unique_id "apK9AyJcY4fy7tP-rU3sCAAAAo8"]
[Sat Aug 29 05:05:39.901881 2026] [security2:error] [pid 1017536:tid 1017716] [client 34.21.253.104:11600] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cpanel.replenishink.com"] [uri "/@fs/home/ubuntu/.ovh.conf"] [unique_id "apK9AyJcY4fy7tP-rU3sCgAAAkY"]
[Sat Aug 29 05:05:39.902054 2026] [security2:error] [pid 1017536:tid 1017781] [client 34.21.253.104:11438] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "cpanel.replenishink.com"] [uri "/@fs/../../../../../proc/self/environ"] [unique_id "apK9AyJcY4fy7tP-rU3sCwAAAoc"]
[Sat Aug 29 05:05:39.905780 2026] [proxy_http:error] [pid 1018003:tid 1018231] (20014)Internal error (specific information not available): [client 34.21.253.104:11406] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:39.905815 2026] [proxy:error] [pid 1018003:tid 1018231] [client 34.21.253.104:11406] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/cgi-sys/404.html
[Sat Aug 29 05:05:39.908110 2026] [security2:error] [pid 1017536:tid 1017773] [client 34.21.253.104:11552] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cpanel.replenishink.com"] [uri "/@fs/root/.config/gcloud/credentials.db"] [unique_id "apK9AyJcY4fy7tP-rU3sEAAAAn8"]
[Sat Aug 29 05:05:39.930687 2026] [proxy_http:error] [pid 1018003:tid 1018212] (20014)Internal error (specific information not available): [client 34.21.253.104:11518] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:39.930704 2026] [proxy:error] [pid 1018003:tid 1018212] [client 34.21.253.104:11518] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/@fs/root/.azure/credentials
[Sat Aug 29 05:05:39.937380 2026] [security2:error] [pid 1017536:tid 1017747] [client 68.155.159.216:12265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK9AyJcY4fy7tP-rU3sEQAAAmU"]
[Sat Aug 29 05:05:39.939183 2026] [proxy_http:error] [pid 1017536:tid 1017776] (20014)Internal error (specific information not available): [client 34.21.253.104:11436] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:39.939203 2026] [proxy:error] [pid 1017536:tid 1017776] [client 34.21.253.104:11436] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/cgi-sys/404.html
[Sat Aug 29 05:05:39.943871 2026] [security2:error] [pid 1018003:tid 1018159] [client 158.23.184.117:27669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/.well-known/min.php"] [unique_id "apK9AzAh5Y1i2tUxg4Hk6wAABcA"]
[Sat Aug 29 05:05:39.944116 2026] [security2:error] [pid 1017536:tid 1017692] [client 158.23.184.117:7242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cairnquartet.strangeworx.com"] [uri "/wp-content/plugins/alfa-rex.php"] [unique_id "apK9AyJcY4fy7tP-rU3sEgAAAi4"]
[Sat Aug 29 05:05:39.952122 2026] [proxy_http:error] [pid 1017536:tid 1017683] (20014)Internal error (specific information not available): [client 34.21.253.104:11572] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:39.952136 2026] [proxy:error] [pid 1017536:tid 1017683] [client 34.21.253.104:11572] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/@fs/root/.config/hcloud/cli.toml
[Sat Aug 29 05:05:39.957280 2026] [proxy_http:error] [pid 1017536:tid 1017765] (20014)Internal error (specific information not available): [client 34.21.253.104:11390] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:39.957296 2026] [proxy:error] [pid 1017536:tid 1017765] [client 34.21.253.104:11390] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/@fs/proc/self/cmdline
[Sat Aug 29 05:05:39.958424 2026] [security2:error] [pid 1017536:tid 1017745] [client 20.63.219.114:15599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/cookie.php"] [unique_id "apK9AyJcY4fy7tP-rU3sEwAAAmM"]
[Sat Aug 29 05:05:39.962203 2026] [proxy_http:error] [pid 1017536:tid 1017687] (20014)Internal error (specific information not available): [client 34.21.253.104:11574] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:39.962216 2026] [proxy:error] [pid 1017536:tid 1017687] [client 34.21.253.104:11574] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/@fs/root/.config/linode-cli
[Sat Aug 29 05:05:39.967199 2026] [proxy_http:error] [pid 1017536:tid 1017726] (20014)Internal error (specific information not available): [client 34.21.253.104:11534] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:39.967209 2026] [proxy:error] [pid 1017536:tid 1017726] [client 34.21.253.104:11534] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/@fs/root/.oci/config
[Sat Aug 29 05:05:39.972130 2026] [proxy_http:error] [pid 1017536:tid 1017683] (20014)Internal error (specific information not available): [client 34.21.253.104:11572] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:39.972143 2026] [proxy:error] [pid 1017536:tid 1017683] [client 34.21.253.104:11572] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/502.shtml
[Sat Aug 29 05:05:39.976580 2026] [security2:error] [pid 1017536:tid 1017755] [client 158.23.147.79:60160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/bk/index.php"] [unique_id "apK9AyJcY4fy7tP-rU3sFAAAAm0"]
[Sat Aug 29 05:05:39.980926 2026] [security2:error] [pid 1017536:tid 1017724] [client 158.23.147.79:48308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/dropdown.php"] [unique_id "apK9AyJcY4fy7tP-rU3sFQAAAk4"]
[Sat Aug 29 05:05:39.985554 2026] [security2:error] [pid 1017536:tid 1017707] [client 45.148.10.62:50800] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "mail.vzo.fme.mybluehost.me"] [uri "/wp-config.php.old"] [unique_id "apK9AyJcY4fy7tP-rU3sFgAAAj0"]
[Sat Aug 29 05:05:40.040242 2026] [security2:error] [pid 1017536:tid 1017709] [client 68.155.159.216:16304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK9BCJcY4fy7tP-rU3sGAAAAj8"]
[Sat Aug 29 05:05:40.061933 2026] [security2:error] [pid 1018003:tid 1018157] [client 45.148.10.62:50790] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.wagnerfarmscbd.com"] [uri "/api/.env"] [unique_id "apK9BDAh5Y1i2tUxg4Hk7QAABb4"]
[Sat Aug 29 05:05:40.075322 2026] [security2:error] [pid 1018003:tid 1018233] [client 68.155.159.216:33747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/NewFile.php/"] [unique_id "apK9BDAh5Y1i2tUxg4Hk7wAABgk"]
[Sat Aug 29 05:05:40.090658 2026] [security2:error] [pid 1018003:tid 1018221] [client 158.23.184.117:28362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/.well-known/module.php"] [unique_id "apK9BDAh5Y1i2tUxg4Hk8QAABf4"]
[Sat Aug 29 05:05:40.097039 2026] [core:error] [pid 1017536:tid 1017672] [client 158.23.184.117:7254] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:40.097055 2026] [core:error] [pid 1017536:tid 1017672] [client 158.23.184.117:7254] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:40.098991 2026] [security2:error] [pid 1017536:tid 1017691] [client 4.232.148.111:24899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/cc.php"] [unique_id "apK9BCJcY4fy7tP-rU3sHQAAAi0"]
[Sat Aug 29 05:05:40.102638 2026] [security2:error] [pid 1017536:tid 1017696] [client 4.205.62.107:21595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/adminfus.php"] [unique_id "apK9BCJcY4fy7tP-rU3sHgAAAjI"]
[Sat Aug 29 05:05:40.118824 2026] [security2:error] [pid 1018003:tid 1018183] [client 40.83.93.50:9773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/meta.php"] [unique_id "apK9BDAh5Y1i2tUxg4Hk8gAABdg"]
[Sat Aug 29 05:05:40.131070 2026] [security2:error] [pid 1017536:tid 1017700] [client 20.196.209.81:4366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/OK.php"] [unique_id "apK9BCJcY4fy7tP-rU3sHwAAAjY"]
[Sat Aug 29 05:05:40.131678 2026] [security2:error] [pid 1017536:tid 1017750] [client 4.205.62.107:21862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/xqq.php"] [unique_id "apK9BCJcY4fy7tP-rU3sIAAAAmg"]
[Sat Aug 29 05:05:40.191097 2026] [security2:error] [pid 1017536:tid 1017772] [client 4.205.62.107:65492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/cxc.php"] [unique_id "apK9BCJcY4fy7tP-rU3sIgAAAn4"]
[Sat Aug 29 05:05:40.211377 2026] [security2:error] [pid 1018003:tid 1018277] [client 20.196.209.81:21061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/feed-rss2-queue.php"] [unique_id "apK9BDAh5Y1i2tUxg4Hk-QAABjU"]
[Sat Aug 29 05:05:40.218104 2026] [security2:error] [pid 1017536:tid 1017752] [client 4.205.62.107:2513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/a1vx.php"] [unique_id "apK9BCJcY4fy7tP-rU3sJQAAAmo"]
[Sat Aug 29 05:05:40.219742 2026] [security2:error] [pid 1017536:tid 1017740] [client 209.50.163.36:45977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 36.163.50.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK9BCJcY4fy7tP-rU3sIwAAAl4"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:40.220117 2026] [security2:error] [pid 1018003:tid 1018239] [client 168.107.94.195:58965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9BDAh5Y1i2tUxg4Hk-gAABg8"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:40.237836 2026] [security2:error] [pid 1018003:tid 1018188] [client 158.23.184.117:27683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/.well-known/options.php"] [unique_id "apK9BDAh5Y1i2tUxg4Hk_AAABd0"]
[Sat Aug 29 05:05:40.243747 2026] [security2:error] [pid 1017536:tid 1017783] [client 158.23.184.117:7236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cairnquartet.strangeworx.com"] [uri "/test.php"] [unique_id "apK9BCJcY4fy7tP-rU3sJwAAAok"]
[Sat Aug 29 05:05:40.245793 2026] [security2:error] [pid 1017536:tid 1017760] [client 20.63.219.114:15603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/colour.php"] [unique_id "apK9BCJcY4fy7tP-rU3sKAAAAnI"]
[Sat Aug 29 05:05:40.255214 2026] [security2:error] [pid 1018003:tid 1018268] [client 20.104.49.130:46558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/yawa.php"] [unique_id "apK9BDAh5Y1i2tUxg4Hk_gAABiw"]
[Sat Aug 29 05:05:40.256803 2026] [security2:error] [pid 1017536:tid 1017754] [client 158.23.147.79:24412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-admin.php"] [unique_id "apK9BCJcY4fy7tP-rU3sKQAAAmw"]
[Sat Aug 29 05:05:40.259209 2026] [security2:error] [pid 1018003:tid 1018268] [client 45.148.10.62:50790] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.wagnerfarmscbd.com"] [uri "/.env.bak"] [unique_id "apK9BDAh5Y1i2tUxg4Hk_wAABiw"]
[Sat Aug 29 05:05:40.269047 2026] [security2:error] [pid 1017536:tid 1017736] [client 4.205.62.107:53398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/zz.php"] [unique_id "apK9BCJcY4fy7tP-rU3sLQAAAlo"]
[Sat Aug 29 05:05:40.273796 2026] [security2:error] [pid 1018003:tid 1018203] [client 74.248.24.12:8187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/24.php"] [unique_id "apK9BDAh5Y1i2tUxg4HlAQAABew"]
[Sat Aug 29 05:05:40.303276 2026] [security2:error] [pid 1018003:tid 1018186] [client 4.205.62.107:54439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "troop264olney.net"] [uri "/old_phpinfo.php"] [unique_id "apK9BDAh5Y1i2tUxg4HlBQAABds"]
[Sat Aug 29 05:05:40.319188 2026] [security2:error] [pid 1017536:tid 1017695] [client 20.63.219.114:15775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/NewFile.php"] [unique_id "apK9BCJcY4fy7tP-rU3sLgAAAjE"]
[Sat Aug 29 05:05:40.325526 2026] [security2:error] [pid 1018003:tid 1018238] [client 158.158.54.35:16646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-admin/index.php"] [unique_id "apK9BDAh5Y1i2tUxg4HlBwAABg4"]
[Sat Aug 29 05:05:40.329440 2026] [security2:error] [pid 1018003:tid 1018151] [client 66.248.203.2:49310] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cheerfulmonk.com"] [uri "/2014/08/30/"] [unique_id "apK9BDAh5Y1i2tUxg4HlCAAABbg"]
[Sat Aug 29 05:05:40.335372 2026] [lsapi:warn] [pid 1017536:tid 1017674] [client 168.90.151.133:0] [host midayins.com] Backend log: PHP Warning:  PHP Request Startup: Invalid date.timezone value 'America/New York', using 'America/Boise' instead in Unknown on line 0\n
[Sat Aug 29 05:05:40.386612 2026] [security2:error] [pid 1018003:tid 1018175] [client 158.23.184.117:28396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/.well-known/panel.php"] [unique_id "apK9BDAh5Y1i2tUxg4HlCQAABdA"]
[Sat Aug 29 05:05:40.394068 2026] [security2:error] [pid 1017536:tid 1017774] [client 158.23.184.117:53560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cairnquartet.strangeworx.com"] [uri "/wp-includes/mani.php"] [unique_id "apK9BCJcY4fy7tP-rU3sMAAAAoA"]
[Sat Aug 29 05:05:40.395277 2026] [security2:error] [pid 1017536:tid 1017698] [client 103.240.76.112:42648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK9BCJcY4fy7tP-rU3sMQAAAjQ"]
[Sat Aug 29 05:05:40.395383 2026] [security2:error] [pid 1017536:tid 1017698] [client 103.240.76.112:42648] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK9BCJcY4fy7tP-rU3sMQAAAjQ"]
[Sat Aug 29 05:05:40.419753 2026] [security2:error] [pid 1018003:tid 1018166] [client 158.23.184.117:57614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.supermachines.com"] [uri "/.dj/index.php"] [unique_id "apK9BDAh5Y1i2tUxg4HlCwAABcc"]
[Sat Aug 29 05:05:40.444146 2026] [security2:error] [pid 1017536:tid 1017675] [client 68.155.159.216:51549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK9BCJcY4fy7tP-rU3sMgAAAh0"]
[Sat Aug 29 05:05:40.448106 2026] [security2:error] [pid 1018003:tid 1018156] [client 158.23.147.79:59234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK9BDAh5Y1i2tUxg4HlDQAABb0"]
[Sat Aug 29 05:05:40.501173 2026] [security2:error] [pid 1018003:tid 1018213] [client 45.148.10.62:50808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vzo.fme.mybluehost.me"] [uri "/config.php"] [unique_id "apK9BDAh5Y1i2tUxg4HlDgAABfY"]
[Sat Aug 29 05:05:40.515850 2026] [security2:error] [pid 1018003:tid 1018211] [client 20.48.251.3:14323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/infos.php"] [unique_id "apK9BDAh5Y1i2tUxg4HlEQAABfQ"]
[Sat Aug 29 05:05:40.532885 2026] [security2:error] [pid 1018003:tid 1018250] [client 158.23.184.117:28366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/.well-known/pki-validation/mariju.php"] [unique_id "apK9BDAh5Y1i2tUxg4HlEgAABho"]
[Sat Aug 29 05:05:40.534042 2026] [security2:error] [pid 1018003:tid 1018147] [remote 34.148.90.28:50028] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "hitechgs.com"] [uri "/static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ"] [unique_id "apK9BDAh5Y1i2tUxg4HlFAAFu34"]
[Sat Aug 29 05:05:40.540027 2026] [security2:error] [pid 1018003:tid 1018252] [client 158.23.184.117:7235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cairnquartet.strangeworx.com"] [uri "/wp-includes/Test.php"] [unique_id "apK9BDAh5Y1i2tUxg4HlFQAABhw"]
[Sat Aug 29 05:05:40.543061 2026] [security2:error] [pid 1017536:tid 1017721] [client 68.155.159.216:50326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/dropdown.php"] [unique_id "apK9BCJcY4fy7tP-rU3sMwAAAks"]
[Sat Aug 29 05:05:40.564253 2026] [security2:error] [pid 1018003:tid 1018222] [client 61.9.8.52:8153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 52.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK9BDAh5Y1i2tUxg4HlFgAABf8"]
[Sat Aug 29 05:05:40.564345 2026] [security2:error] [pid 1018003:tid 1018222] [client 61.9.8.52:8153] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK9BDAh5Y1i2tUxg4HlFgAABf8"]
[Sat Aug 29 05:05:40.566759 2026] [security2:error] [pid 1018003:tid 1018264] [client 158.23.184.117:20263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.supermachines.com"] [uri "/.info.php"] [unique_id "apK9BDAh5Y1i2tUxg4HlGAAABig"]
[Sat Aug 29 05:05:40.570609 2026] [security2:error] [pid 1017536:tid 1017765] [client 68.155.159.216:61625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.gavirestaurant.com"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK9BCJcY4fy7tP-rU3sNAAAAnc"]
[Sat Aug 29 05:05:40.576683 2026] [security2:error] [pid 1018003:tid 1018257] [client 4.232.148.111:5901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/files/index.php"] [unique_id "apK9BDAh5Y1i2tUxg4HlGgAABiE"]
[Sat Aug 29 05:05:40.581625 2026] [security2:error] [pid 1018003:tid 1018220] [client 20.104.49.130:29954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/dex.php"] [unique_id "apK9BDAh5Y1i2tUxg4HlHAAABf0"]
[Sat Aug 29 05:05:40.598559 2026] [security2:error] [pid 1017536:tid 1017688] [client 20.48.251.3:28484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/wdf.php"] [unique_id "apK9BCJcY4fy7tP-rU3sNQAAAio"]
[Sat Aug 29 05:05:40.600000 2026] [security2:error] [pid 1018003:tid 1018273] [client 40.83.93.50:8025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/randkeyword.php"] [unique_id "apK9BDAh5Y1i2tUxg4HlHgAABjE"]
[Sat Aug 29 05:05:40.600031 2026] [security2:error] [pid 1018003:tid 1018245] [client 168.107.94.195:59313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9BDAh5Y1i2tUxg4HlHQAABhU"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:40.602372 2026] [security2:error] [pid 1018003:tid 1018202] [client 20.63.219.114:11484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/OK.php"] [unique_id "apK9BDAh5Y1i2tUxg4HlHwAABes"]
[Sat Aug 29 05:05:40.606618 2026] [security2:error] [pid 1018003:tid 1018224] [client 20.196.209.81:9534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.firstcutfilm.com"] [uri "/aaa.php"] [unique_id "apK9BDAh5Y1i2tUxg4HlIAAABgE"]
[Sat Aug 29 05:05:40.623003 2026] [security2:error] [pid 1018003:tid 1018199] [client 20.196.209.81:12699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/inputs.php"] [unique_id "apK9BDAh5Y1i2tUxg4HlIgAABeg"]
[Sat Aug 29 05:05:40.662129 2026] [security2:error] [pid 1018003:tid 1018153] [client 158.23.147.79:49993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/wp-includes/plugins.php"] [unique_id "apK9BDAh5Y1i2tUxg4HlJAAABbo"]
[Sat Aug 29 05:05:40.669605 2026] [security2:error] [pid 1018003:tid 1018177] [client 103.171.189.88:52029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9BDAh5Y1i2tUxg4HlJQAABdI"]
[Sat Aug 29 05:05:40.669742 2026] [security2:error] [pid 1018003:tid 1018177] [client 103.171.189.88:52029] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9BDAh5Y1i2tUxg4HlJQAABdI"]
[Sat Aug 29 05:05:40.672976 2026] [security2:error] [pid 1018003:tid 1018259] [client 20.63.219.114:15758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/config.php"] [unique_id "apK9BDAh5Y1i2tUxg4HlJwAABiM"]
[Sat Aug 29 05:05:40.679712 2026] [security2:error] [pid 1018003:tid 1018159] [client 158.23.184.117:28359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/.well-known/pki-validation/pl.php"] [unique_id "apK9BDAh5Y1i2tUxg4HlKAAABcA"]
[Sat Aug 29 05:05:40.687236 2026] [security2:error] [pid 1018003:tid 1018267] [client 158.23.184.117:53548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cairnquartet.strangeworx.com"] [uri "/wp-includes/pomo.php"] [unique_id "apK9BDAh5Y1i2tUxg4HlKQAABis"]
[Sat Aug 29 05:05:40.704989 2026] [security2:error] [pid 1018003:tid 1018218] [client 158.23.147.79:25488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-content/themes/too.php"] [unique_id "apK9BDAh5Y1i2tUxg4HlKgAABfs"]
[Sat Aug 29 05:05:40.714639 2026] [security2:error] [pid 1018003:tid 1018157] [client 158.23.184.117:20274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.supermachines.com"] [uri "/.trash7206/index.php"] [unique_id "apK9BDAh5Y1i2tUxg4HlKwAABb4"]
[Sat Aug 29 05:05:40.720542 2026] [security2:error] [pid 1018003:tid 1018236] [client 68.155.159.216:14307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/wp-includes/index.php"] [unique_id "apK9BDAh5Y1i2tUxg4HlLAAABgw"]
[Sat Aug 29 05:05:40.726973 2026] [security2:error] [pid 1018003:tid 1018221] [client 20.48.251.3:28467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/bb.php"] [unique_id "apK9BDAh5Y1i2tUxg4HlLQAABf4"]
[Sat Aug 29 05:05:40.729826 2026] [security2:error] [pid 1017536:tid 1017716] [client 149.34.210.141:59289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9BCJcY4fy7tP-rU3sOAAAAkY"]
[Sat Aug 29 05:05:40.729960 2026] [security2:error] [pid 1017536:tid 1017716] [client 149.34.210.141:59289] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9BCJcY4fy7tP-rU3sOAAAAkY"]
[Sat Aug 29 05:05:40.754213 2026] [security2:error] [pid 1018003:tid 1018253] [client 209.50.167.148:61597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 148.167.50.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK9BDAh5Y1i2tUxg4HlLgAABh0"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:40.773470 2026] [security2:error] [pid 1018003:tid 1018200] [client 158.158.54.35:14048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/radio.php"] [unique_id "apK9BDAh5Y1i2tUxg4HlMQAABek"]
[Sat Aug 29 05:05:40.775100 2026] [security2:error] [pid 1018003:tid 1018162] [client 45.148.10.62:50790] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.wagnerfarmscbd.com"] [uri "/stripe/.env"] [unique_id "apK9BDAh5Y1i2tUxg4HlMgAABcM"]
[Sat Aug 29 05:05:40.827139 2026] [security2:error] [pid 1017536:tid 1017778] [client 158.23.184.117:27672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/.well-known/pki-validation/x.php"] [unique_id "apK9BCJcY4fy7tP-rU3sOgAAAoQ"]
[Sat Aug 29 05:05:40.858005 2026] [security2:error] [pid 1018003:tid 1018196] [client 20.48.251.3:57835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/file59.php"] [unique_id "apK9BDAh5Y1i2tUxg4HlMwAABeU"]
[Sat Aug 29 05:05:40.861577 2026] [security2:error] [pid 1018003:tid 1018263] [client 158.23.184.117:20275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.supermachines.com"] [uri "/.trash7206/min.php"] [unique_id "apK9BDAh5Y1i2tUxg4HlNAAABic"]
[Sat Aug 29 05:05:40.867547 2026] [core:error] [pid 1017536:tid 1017689] [client 74.248.24.12:23829] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:40.867566 2026] [core:error] [pid 1017536:tid 1017689] [client 74.248.24.12:23829] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:40.887880 2026] [security2:error] [pid 1017536:tid 1017717] [client 158.23.147.79:30663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK9BCJcY4fy7tP-rU3sPQAAAkc"]
[Sat Aug 29 05:05:40.917042 2026] [core:error] [pid 1017536:tid 1017672] [client 158.23.184.117:7250] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:40.917065 2026] [core:error] [pid 1017536:tid 1017672] [client 158.23.184.117:7250] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:40.955258 2026] [security2:error] [pid 1017536:tid 1017711] [client 68.155.159.216:16171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.showerdoorsdubuque.com"] [uri "/first.php"] [unique_id "apK9BCJcY4fy7tP-rU3sPwAAAkE"]
[Sat Aug 29 05:05:40.958498 2026] [security2:error] [pid 1017536:tid 1017700] [client 4.205.62.107:64985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/hosty.php"] [unique_id "apK9BCJcY4fy7tP-rU3sQAAAAjY"]
[Sat Aug 29 05:05:40.965007 2026] [security2:error] [pid 1017536:tid 1017706] [client 158.23.147.79:30692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/file.php"] [unique_id "apK9BCJcY4fy7tP-rU3sQQAAAjw"]
[Sat Aug 29 05:05:40.970124 2026] [security2:error] [pid 1018003:tid 1018194] [client 45.148.10.62:50824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vzo.fme.mybluehost.me"] [uri "/config.php.bak"] [unique_id "apK9BDAh5Y1i2tUxg4HlNgAABeM"]
[Sat Aug 29 05:05:40.979528 2026] [security2:error] [pid 1017536:tid 1017782] [client 158.23.184.117:28353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/.well-known/pki-validation/xmrlpc.php"] [unique_id "apK9BCJcY4fy7tP-rU3sQgAAAog"]
[Sat Aug 29 05:05:40.985774 2026] [security2:error] [pid 1018003:tid 1018197] [client 20.48.251.3:27182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/cli_bootstrap.php"] [unique_id "apK9BDAh5Y1i2tUxg4HlNwAABeY"]
[Sat Aug 29 05:05:40.998931 2026] [security2:error] [pid 1018003:tid 1018265] [client 168.107.94.195:59617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9BDAh5Y1i2tUxg4HlOAAABik"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:41.008162 2026] [security2:error] [pid 1018003:tid 1018166] [client 158.23.184.117:20236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.supermachines.com"] [uri "/.well-known//index.php"] [unique_id "apK9BTAh5Y1i2tUxg4HlOQAABcc"]
[Sat Aug 29 05:05:41.032108 2026] [security2:error] [pid 1017536:tid 1017793] [client 68.155.159.216:12286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-admin/includes/index.php"] [unique_id "apK9BSJcY4fy7tP-rU3sQwAAApM"]
[Sat Aug 29 05:05:41.043821 2026] [security2:error] [pid 1017536:tid 1017693] [client 20.48.251.3:14335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/xve22.php"] [unique_id "apK9BSJcY4fy7tP-rU3sRQAAAi8"]
[Sat Aug 29 05:05:41.047310 2026] [security2:error] [pid 1017536:tid 1017691] [client 20.196.209.81:21105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/class-walker-category-dropdown-class.php"] [unique_id "apK9BSJcY4fy7tP-rU3sRgAAAi0"]
[Sat Aug 29 05:05:41.048427 2026] [security2:error] [pid 1017536:tid 1017670] [client 4.232.148.111:8447] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.easyarranger.com"] [uri "/1.php7"] [unique_id "apK9BSJcY4fy7tP-rU3sRwAAAhg"]
[Sat Aug 29 05:05:41.048506 2026] [security2:error] [pid 1017536:tid 1017670] [client 4.232.148.111:8447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/1.php7"] [unique_id "apK9BSJcY4fy7tP-rU3sRwAAAhg"]
[Sat Aug 29 05:05:41.048530 2026] [security2:error] [pid 1018003:tid 1018189] [client 20.63.219.114:15751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "travelprep-tv.wanderlustpictures.com"] [uri "/aaa.php"] [unique_id "apK9BTAh5Y1i2tUxg4HlOgAABd4"]
[Sat Aug 29 05:05:41.066940 2026] [security2:error] [pid 1018003:tid 1018021] [remote 34.148.90.28:50036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/web.config"] [unique_id "apK9BTAh5Y1i2tUxg4HlPgAGGQA"]
[Sat Aug 29 05:05:41.081246 2026] [security2:error] [pid 1018003:tid 1018173] [client 158.23.147.79:62788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/first.php"] [unique_id "apK9BTAh5Y1i2tUxg4HlQQAABc4"]
[Sat Aug 29 05:05:41.086047 2026] [security2:error] [pid 1018003:tid 1018234] [client 158.23.147.79:48215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/.well-known/index.php"] [unique_id "apK9BTAh5Y1i2tUxg4HlQgAABgo"]
[Sat Aug 29 05:05:41.090443 2026] [security2:error] [pid 1018003:tid 1018227] [client 20.63.219.114:15759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/22.php"] [unique_id "apK9BTAh5Y1i2tUxg4HlQwAABgQ"]
[Sat Aug 29 05:05:41.104072 2026] [security2:error] [pid 1018003:tid 1018269] [client 40.83.93.50:14402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/goods.php"] [unique_id "apK9BTAh5Y1i2tUxg4HlRQAABi0"]
[Sat Aug 29 05:05:41.128071 2026] [security2:error] [pid 1018003:tid 1018163] [client 158.23.184.117:28395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/.well-known/security.php"] [unique_id "apK9BTAh5Y1i2tUxg4HlRwAABcQ"]
[Sat Aug 29 05:05:41.129575 2026] [security2:error] [pid 1017536:tid 1017785] [client 20.48.251.3:28495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/dd.php"] [unique_id "apK9BSJcY4fy7tP-rU3sSgAAAos"]
[Sat Aug 29 05:05:41.146059 2026] [security2:error] [pid 1018003:tid 1018213] [client 158.23.184.117:7337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cairnquartet.strangeworx.com"] [uri "/wp-admin/link-add.php"] [unique_id "apK9BTAh5Y1i2tUxg4HlSAAABfY"]
[Sat Aug 29 05:05:41.149729 2026] [security2:error] [pid 1017536:tid 1017730] [client 68.155.159.216:16380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-content/radio.php"] [unique_id "apK9BSJcY4fy7tP-rU3sSwAAAlQ"]
[Sat Aug 29 05:05:41.155819 2026] [security2:error] [pid 1017536:tid 1017736] [client 158.23.184.117:57617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.supermachines.com"] [uri "/.well-known/about.php"] [unique_id "apK9BSJcY4fy7tP-rU3sTAAAAlo"]
[Sat Aug 29 05:05:41.189570 2026] [security2:error] [pid 1017536:tid 1017748] [client 20.48.251.3:14002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/xin1.php"] [unique_id "apK9BSJcY4fy7tP-rU3sTQAAAmY"]
[Sat Aug 29 05:05:41.221592 2026] [security2:error] [pid 1017536:tid 1017761] [client 158.158.54.35:14071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/item.php"] [unique_id "apK9BSJcY4fy7tP-rU3sTgAAAnM"]
[Sat Aug 29 05:05:41.241829 2026] [security2:error] [pid 1017536:tid 1017789] [client 68.155.159.216:33743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/dropdown.php"] [unique_id "apK9BSJcY4fy7tP-rU3sTwAAAo8"]
[Sat Aug 29 05:05:41.242934 2026] [security2:error] [pid 1018003:tid 1018195] [client 4.205.62.107:21846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/env.php"] [unique_id "apK9BTAh5Y1i2tUxg4HlSwAABeQ"]
[Sat Aug 29 05:05:41.259686 2026] [security2:error] [pid 1017536:tid 1017678] [client 20.48.251.3:28558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/wp-tem.php"] [unique_id "apK9BSJcY4fy7tP-rU3sUAAAAiA"]
[Sat Aug 29 05:05:41.272078 2026] [security2:error] [pid 1017536:tid 1017751] [client 158.23.184.117:28354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/.well-known/system.php"] [unique_id "apK9BSJcY4fy7tP-rU3sUwAAAmk"]
[Sat Aug 29 05:05:41.272661 2026] [security2:error] [pid 1017536:tid 1017705] [client 4.205.62.107:22285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/or.php"] [unique_id "apK9BSJcY4fy7tP-rU3sVAAAAjs"]
[Sat Aug 29 05:05:41.273473 2026] [security2:error] [pid 1018003:tid 1018257] [client 35.198.240.194:62692] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/.env"] [unique_id "apK9BTAh5Y1i2tUxg4HlTgAABiE"]
[Sat Aug 29 05:05:41.274266 2026] [security2:error] [pid 1017536:tid 1017747] [client 35.198.240.194:62704] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/uploads../.env"] [unique_id "apK9BSJcY4fy7tP-rU3sUgAAAmU"]
[Sat Aug 29 05:05:41.276442 2026] [security2:error] [pid 1017536:tid 1017675] [client 35.198.240.194:62716] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/assets../.env"] [unique_id "apK9BSJcY4fy7tP-rU3sVQAAAh0"]
[Sat Aug 29 05:05:41.276892 2026] [security2:error] [pid 1017536:tid 1017675] [client 35.198.240.194:62716] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "mail.omni-staffing.com"] [uri "/assets../.env"] [unique_id "apK9BSJcY4fy7tP-rU3sVQAAAh0"]
[Sat Aug 29 05:05:41.278133 2026] [security2:error] [pid 1017536:tid 1017673] [client 35.198.240.194:62762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/v2/.env"] [unique_id "apK9BSJcY4fy7tP-rU3sVwAAAhs"]
[Sat Aug 29 05:05:41.278193 2026] [security2:error] [pid 1018003:tid 1018165] [client 35.198.240.194:62720] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/img../.env"] [unique_id "apK9BTAh5Y1i2tUxg4HlUAAABcY"]
[Sat Aug 29 05:05:41.278751 2026] [security2:error] [pid 1018003:tid 1018220] [client 35.198.240.194:62832] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/.env.old"] [unique_id "apK9BTAh5Y1i2tUxg4HlUQAABf0"]
[Sat Aug 29 05:05:41.279303 2026] [security2:error] [pid 1017536:tid 1017728] [client 35.198.240.194:62808] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/.env.bak"] [unique_id "apK9BSJcY4fy7tP-rU3sXgAAAlI"]
[Sat Aug 29 05:05:41.279575 2026] [security2:error] [pid 1017536:tid 1017733] [client 35.198.240.194:62736] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/images../.env"] [unique_id "apK9BSJcY4fy7tP-rU3sWgAAAlc"]
[Sat Aug 29 05:05:41.279826 2026] [security2:error] [pid 1017536:tid 1017687] [client 35.198.240.194:62924] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.omni-staffing.com"] [uri "/config/.env"] [unique_id "apK9BSJcY4fy7tP-rU3sYAAAAik"]
[Sat Aug 29 05:05:41.279974 2026] [security2:error] [pid 1017536:tid 1017692] [client 35.198.240.194:62742] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/.docker/.env"] [unique_id "apK9BSJcY4fy7tP-rU3sWAAAAi4"]
[Sat Aug 29 05:05:41.280299 2026] [security2:error] [pid 1017536:tid 1017732] [client 35.198.240.194:62774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/.env"] [unique_id "apK9BSJcY4fy7tP-rU3sWwAAAlY"]
[Sat Aug 29 05:05:41.280514 2026] [security2:error] [pid 1017536:tid 1017776] [client 35.198.240.194:62746] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/v1/.env"] [unique_id "apK9BSJcY4fy7tP-rU3sVgAAAoI"]
[Sat Aug 29 05:05:41.282307 2026] [security2:error] [pid 1017536:tid 1017781] [client 35.198.240.194:62834] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/.env.backup"] [unique_id "apK9BSJcY4fy7tP-rU3sXAAAAoc"]
[Sat Aug 29 05:05:41.282591 2026] [security2:error] [pid 1017536:tid 1017765] [client 35.198.240.194:62862] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/.env.swp"] [unique_id "apK9BSJcY4fy7tP-rU3sXQAAAnc"]
[Sat Aug 29 05:05:41.282800 2026] [security2:error] [pid 1017536:tid 1017721] [client 35.198.240.194:62882] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/api/.env"] [unique_id "apK9BSJcY4fy7tP-rU3sXwAAAks"]
[Sat Aug 29 05:05:41.283258 2026] [security2:error] [pid 1018003:tid 1018240] [client 35.198.240.194:62932] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.omni-staffing.com"] [uri "/backend/.env"] [unique_id "apK9BTAh5Y1i2tUxg4HlVgAABhA"]
[Sat Aug 29 05:05:41.283341 2026] [security2:error] [pid 1018003:tid 1018275] [client 35.198.240.194:62952] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/core/.env"] [unique_id "apK9BTAh5Y1i2tUxg4HlVAAABjM"]
[Sat Aug 29 05:05:41.283348 2026] [security2:error] [pid 1017536:tid 1017683] [client 35.198.240.194:62900] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/app/.env"] [unique_id "apK9BSJcY4fy7tP-rU3sYQAAAiU"]
[Sat Aug 29 05:05:41.283975 2026] [security2:error] [pid 1017536:tid 1017667] [client 35.198.240.194:62942] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/laravel/.env"] [unique_id "apK9BSJcY4fy7tP-rU3sZwAAAhU"]
[Sat Aug 29 05:05:41.284282 2026] [security2:error] [pid 1018003:tid 1018235] [client 35.198.240.194:62966] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/frontend/.env"] [unique_id "apK9BTAh5Y1i2tUxg4HlVQAABgs"]
[Sat Aug 29 05:05:41.284328 2026] [security2:error] [pid 1017536:tid 1017688] [client 35.198.240.194:62946] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/docker/.env"] [unique_id "apK9BSJcY4fy7tP-rU3saAAAAio"]
[Sat Aug 29 05:05:41.285097 2026] [security2:error] [pid 1017536:tid 1017755] [client 35.198.240.194:62886] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.omni-staffing.com"] [uri "/cgi-sys/404.html"] [unique_id "apK9BSJcY4fy7tP-rU3sYgAAAm0"]
[Sat Aug 29 05:05:41.285101 2026] [security2:error] [pid 1017536:tid 1017688] [client 35.198.240.194:62946] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "mail.omni-staffing.com"] [uri "/docker/.env"] [unique_id "apK9BSJcY4fy7tP-rU3saAAAAio"]
[Sat Aug 29 05:05:41.285668 2026] [security2:error] [pid 1017536:tid 1017726] [client 35.198.240.194:62996] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/web/.env"] [unique_id "apK9BSJcY4fy7tP-rU3saQAAAlA"]
[Sat Aug 29 05:05:41.285794 2026] [security2:error] [pid 1018003:tid 1018182] [client 35.198.240.194:62986] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/server/.env"] [unique_id "apK9BTAh5Y1i2tUxg4HlVwAABdc"]
[Sat Aug 29 05:05:41.287121 2026] [security2:error] [pid 1018003:tid 1018152] [client 35.198.240.194:62982] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/src/.env"] [unique_id "apK9BTAh5Y1i2tUxg4HlWAAABbk"]
[Sat Aug 29 05:05:41.292284 2026] [security2:error] [pid 1017536:tid 1017774] [client 158.23.184.117:7246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cairnquartet.strangeworx.com"] [uri "/wp-includes/Text.php"] [unique_id "apK9BSJcY4fy7tP-rU3sagAAAoA"]
[Sat Aug 29 05:05:41.328786 2026] [security2:error] [pid 1018003:tid 1018245] [client 4.205.62.107:65512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/oiko6u.php"] [unique_id "apK9BTAh5Y1i2tUxg4HlWQAABhU"]
[Sat Aug 29 05:05:41.345786 2026] [security2:error] [pid 1017536:tid 1017764] [client 45.3.47.251:11285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 251.47.3.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK9BSJcY4fy7tP-rU3sbAAAAnY"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:41.354400 2026] [security2:error] [pid 1018003:tid 1018246] [client 4.205.62.107:2685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/phpsysinfo.php"] [unique_id "apK9BTAh5Y1i2tUxg4HlWgAABhY"]
[Sat Aug 29 05:05:41.354412 2026] [security2:error] [pid 1017536:tid 1017737] [client 158.23.184.117:20278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.supermachines.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK9BSJcY4fy7tP-rU3sbgAAAls"]
[Sat Aug 29 05:05:41.355431 2026] [security2:error] [pid 1018003:tid 1018223] [client 20.48.251.3:13953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/sadd.php"] [unique_id "apK9BTAh5Y1i2tUxg4HlWwAABgA"]
[Sat Aug 29 05:05:41.367778 2026] [security2:error] [pid 1017536:tid 1017668] [client 158.23.147.79:24406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK9BSJcY4fy7tP-rU3sbwAAAhY"]
[Sat Aug 29 05:05:41.376675 2026] [security2:error] [pid 1018003:tid 1018150] [client 168.107.94.195:59897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9BTAh5Y1i2tUxg4HlXAAABbc"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:41.391379 2026] [security2:error] [pid 1017536:tid 1017679] [client 20.48.251.3:28474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/txets.php"] [unique_id "apK9BSJcY4fy7tP-rU3scAAAAiE"]
[Sat Aug 29 05:05:41.416462 2026] [security2:error] [pid 1018003:tid 1018222] [client 74.248.24.12:33213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK9BTAh5Y1i2tUxg4HlXQAABf8"]
[Sat Aug 29 05:05:41.417077 2026] [security2:error] [pid 1017536:tid 1017709] [client 158.23.184.117:28380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/.well-known/users.php"] [unique_id "apK9BSJcY4fy7tP-rU3scQAAAj8"]
[Sat Aug 29 05:05:41.420954 2026] [security2:error] [pid 1018003:tid 1018174] [client 45.148.10.62:50790] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.wagnerfarmscbd.com"] [uri "/backend/.env"] [unique_id "apK9BTAh5Y1i2tUxg4HlYAAABc8"]
[Sat Aug 29 05:05:41.440388 2026] [security2:error] [pid 1017536:tid 1017727] [client 158.23.184.117:53561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cairnquartet.strangeworx.com"] [uri "/wp-trackback.php"] [unique_id "apK9BSJcY4fy7tP-rU3scgAAAlE"]
[Sat Aug 29 05:05:41.455476 2026] [security2:error] [pid 1018003:tid 1018273] [client 20.63.219.114:12355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/bak.phps"] [unique_id "apK9BTAh5Y1i2tUxg4HlZQAABjE"]
[Sat Aug 29 05:05:41.456238 2026] [security2:error] [pid 1017536:tid 1017786] [client 20.196.209.81:21096] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/1.php7"] [unique_id "apK9BSJcY4fy7tP-rU3sdAAAAow"]
[Sat Aug 29 05:05:41.456309 2026] [security2:error] [pid 1017536:tid 1017786] [client 20.196.209.81:21096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/1.php7"] [unique_id "apK9BSJcY4fy7tP-rU3sdAAAAow"]
[Sat Aug 29 05:05:41.463174 2026] [security2:error] [pid 1017536:tid 1017738] [client 20.104.49.130:57699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/tiny2.php"] [unique_id "apK9BSJcY4fy7tP-rU3sdQAAAlw"]
[Sat Aug 29 05:05:41.463860 2026] [security2:error] [pid 1017536:tid 1017778] [client 20.104.49.130:47834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/css.php"] [unique_id "apK9BSJcY4fy7tP-rU3sdgAAAoQ"]
[Sat Aug 29 05:05:41.500763 2026] [security2:error] [pid 1017536:tid 1017784] [client 158.23.184.117:20232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.supermachines.com"] [uri "/.well-known/acme-challenge/content.php"] [unique_id "apK9BSJcY4fy7tP-rU3segAAAoo"]
[Sat Aug 29 05:05:41.507828 2026] [security2:error] [pid 1017536:tid 1017792] [client 20.48.251.3:33314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/application.config.php"] [unique_id "apK9BSJcY4fy7tP-rU3sewAAApI"]
[Sat Aug 29 05:05:41.508303 2026] [security2:error] [pid 1017536:tid 1017768] [client 4.205.62.107:54461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "troop264olney.net"] [uri "/wp-act.php"] [unique_id "apK9BSJcY4fy7tP-rU3sfAAAAno"]
[Sat Aug 29 05:05:41.521768 2026] [security2:error] [pid 1018003:tid 1018231] [client 4.232.148.111:24104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/disagraeosc.php"] [unique_id "apK9BTAh5Y1i2tUxg4HlZwAABgc"]
[Sat Aug 29 05:05:41.562061 2026] [security2:error] [pid 1018003:tid 1018267] [client 158.23.184.117:27685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/.well-known/wp-blog-header.php"] [unique_id "apK9BTAh5Y1i2tUxg4HlaQAABis"]
[Sat Aug 29 05:05:41.572342 2026] [security2:error] [pid 1018003:tid 1018190] [client 4.205.62.107:53393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/wp-konfig.php"] [unique_id "apK9BTAh5Y1i2tUxg4HlagAABd8"]
[Sat Aug 29 05:05:41.577299 2026] [security2:error] [pid 1018003:tid 1018236] [client 45.148.10.62:50790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wagnerfarmscbd.com"] [uri "/test.php"] [unique_id "apK9BTAh5Y1i2tUxg4HlawAABgw"]
[Sat Aug 29 05:05:41.599854 2026] [security2:error] [pid 1018003:tid 1018177] [client 40.83.93.50:7799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/hehe.php"] [unique_id "apK9BTAh5Y1i2tUxg4HlbAAABdI"]
[Sat Aug 29 05:05:41.613835 2026] [security2:error] [pid 1018003:tid 1018218] [client 158.23.184.117:53553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cairnquartet.strangeworx.com"] [uri "/wp-admin/maint.php"] [unique_id "apK9BTAh5Y1i2tUxg4HlbQAABfs"]
[Sat Aug 29 05:05:41.654711 2026] [security2:error] [pid 1017536:tid 1017696] [client 158.158.54.35:14078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/t.php"] [unique_id "apK9BSJcY4fy7tP-rU3sgwAAAjI"]
[Sat Aug 29 05:05:41.675946 2026] [security2:error] [pid 1017536:tid 1017783] [client 68.155.159.216:64246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.gavirestaurant.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK9BSJcY4fy7tP-rU3shgAAAok"]
[Sat Aug 29 05:05:41.702333 2026] [security2:error] [pid 1017536:tid 1017712] [client 158.23.184.117:20269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.supermachines.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK9BSJcY4fy7tP-rU3shwAAAkI"]
[Sat Aug 29 05:05:41.707767 2026] [security2:error] [pid 1017536:tid 1017752] [client 158.23.184.117:28402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/.well-known/wp-links-opml.php"] [unique_id "apK9BSJcY4fy7tP-rU3siAAAAmo"]
[Sat Aug 29 05:05:41.755735 2026] [security2:error] [pid 1017536:tid 1017695] [client 168.107.94.195:60267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9BSJcY4fy7tP-rU3siwAAAjE"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:41.759797 2026] [security2:error] [pid 1017536:tid 1017749] [client 158.23.184.117:53535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cairnquartet.strangeworx.com"] [uri "/wp-includes/num.php"] [unique_id "apK9BSJcY4fy7tP-rU3sjAAAAmc"]
[Sat Aug 29 05:05:41.772867 2026] [security2:error] [pid 1017536:tid 1017674] [client 158.23.147.79:49992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK9BSJcY4fy7tP-rU3sjQAAAhw"]
[Sat Aug 29 05:05:41.793616 2026] [security2:error] [pid 1017536:tid 1017743] [client 195.178.110.247:59784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lancastaluminum.com"] [uri "/index.php"] [unique_id "apK9BSJcY4fy7tP-rU3sjgAAAmE"]
[Sat Aug 29 05:05:41.808552 2026] [security2:error] [pid 1018003:tid 1018188] [client 20.63.219.114:12364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/install.php"] [unique_id "apK9BTAh5Y1i2tUxg4HldQAABd0"]
[Sat Aug 29 05:05:41.843862 2026] [security2:error] [pid 1017536:tid 1017687] [client 68.155.159.216:14147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/mah.php"] [unique_id "apK9BSJcY4fy7tP-rU3skAAAAik"]
[Sat Aug 29 05:05:41.847549 2026] [security2:error] [pid 1017536:tid 1017673] [client 158.23.147.79:25590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/radio.php"] [unique_id "apK9BSJcY4fy7tP-rU3skQAAAhs"]
[Sat Aug 29 05:05:41.850235 2026] [security2:error] [pid 1017536:tid 1017773] [client 158.23.184.117:20237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.supermachines.com"] [uri "/.well-known/acme-challenge/sx.php"] [unique_id "apK9BSJcY4fy7tP-rU3skgAAAn8"]
[Sat Aug 29 05:05:41.850264 2026] [security2:error] [pid 1017536:tid 1017728] [client 20.104.49.130:52300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.carlosmua.com"] [uri "/002.php"] [unique_id "apK9BSJcY4fy7tP-rU3skwAAAlI"]
[Sat Aug 29 05:05:41.852775 2026] [security2:error] [pid 1017536:tid 1017787] [client 158.23.184.117:28364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/.well-known/wp-load.php"] [unique_id "apK9BSJcY4fy7tP-rU3slAAAAo0"]
[Sat Aug 29 05:05:41.884825 2026] [security2:error] [pid 1017536:tid 1017736] [client 20.196.209.81:4493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/ds.php"] [unique_id "apK9BSJcY4fy7tP-rU3slgAAAlo"]
[Sat Aug 29 05:05:41.904801 2026] [security2:error] [pid 1017536:tid 1017733] [client 158.23.184.117:53547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cairnquartet.strangeworx.com"] [uri "/identity.php"] [unique_id "apK9BSJcY4fy7tP-rU3slwAAAlc"]
[Sat Aug 29 05:05:41.955251 2026] [security2:error] [pid 1017536:tid 1017774] [client 74.7.228.40:40854] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "strangeworx.com"] [uri "/robots.txt"] [unique_id "apK9BSJcY4fy7tP-rU3smAAAAoA"]
[Sat Aug 29 05:05:41.957175 2026] [security2:error] [pid 1017536:tid 1017754] [client 195.178.110.247:54712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lancastaluminum.com"] [uri "/index.php"] [unique_id "apK9BSJcY4fy7tP-rU3smQAAAmw"]
[Sat Aug 29 05:05:41.963185 2026] [core:error] [pid 1017536:tid 1017761] [client 74.248.24.12:33179] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:41.963200 2026] [core:error] [pid 1017536:tid 1017761] [client 74.248.24.12:33179] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:41.981815 2026] [security2:error] [pid 1017536:tid 1017742] [client 45.148.10.62:50828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vzo.fme.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "apK9BSJcY4fy7tP-rU3sngAAAmA"]
[Sat Aug 29 05:05:41.984805 2026] [security2:error] [pid 1017536:tid 1017675] [client 4.232.148.111:18079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/wp-logs.php"] [unique_id "apK9BSJcY4fy7tP-rU3snwAAAh0"]
[Sat Aug 29 05:05:41.995910 2026] [security2:error] [pid 1017536:tid 1017688] [client 158.23.184.117:57649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.supermachines.com"] [uri "/.well-known/admin.php"] [unique_id "apK9BSJcY4fy7tP-rU3soAAAAio"]
[Sat Aug 29 05:05:41.998015 2026] [security2:error] [pid 1017536:tid 1017724] [client 158.23.184.117:28394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/.well-known/wp-mail.php"] [unique_id "apK9BSJcY4fy7tP-rU3soQAAAk4"]
[Sat Aug 29 05:05:42.000423 2026] [security2:error] [pid 1017536:tid 1017764] [client 158.23.147.79:30608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/file17.php"] [unique_id "apK9BSJcY4fy7tP-rU3sogAAAnY"]
[Sat Aug 29 05:05:42.005819 2026] [security2:error] [pid 1018003:tid 1018198] [client 57.141.14.2:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/cart/"] [unique_id "apK9BjAh5Y1i2tUxg4HleAAABec"]
[Sat Aug 29 05:05:42.072964 2026] [security2:error] [pid 1018003:tid 1018025] [remote 34.148.90.28:50036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/app/.env"] [unique_id "apK9BjAh5Y1i2tUxg4HlewAF5QQ"]
[Sat Aug 29 05:05:42.073545 2026] [security2:error] [pid 1017536:tid 1017790] [client 158.23.147.79:30593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/file5.php"] [unique_id "apK9BiJcY4fy7tP-rU3sqQAAApA"]
[Sat Aug 29 05:05:42.074596 2026] [core:error] [pid 1018003:tid 1018186] [client 158.23.184.117:53555] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:42.074612 2026] [core:error] [pid 1018003:tid 1018186] [client 158.23.184.117:53555] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:42.077286 2026] [security2:error] [pid 1017536:tid 1017686] [client 40.83.93.50:7795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/wp-admin/class-db.php"] [unique_id "apK9BiJcY4fy7tP-rU3sqgAAAig"]
[Sat Aug 29 05:05:42.093899 2026] [security2:error] [pid 1017536:tid 1017775] [client 4.205.62.107:61863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/pass4.php"] [unique_id "apK9BiJcY4fy7tP-rU3srQAAAoE"]
[Sat Aug 29 05:05:42.097386 2026] [security2:error] [pid 1017536:tid 1017755] [client 158.158.54.35:9411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/i.php"] [unique_id "apK9BiJcY4fy7tP-rU3srgAAAm0"]
[Sat Aug 29 05:05:42.100228 2026] [security2:error] [pid 1018003:tid 1018038] [remote 34.148.90.28:50036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/src/.env"] [unique_id "apK9BjAh5Y1i2tUxg4HlfgAGMhE"]
[Sat Aug 29 05:05:42.100233 2026] [security2:error] [pid 1018003:tid 1018037] [remote 34.148.90.28:50036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/frontend/.env"] [unique_id "apK9BjAh5Y1i2tUxg4HlfQAGMhA"]
[Sat Aug 29 05:05:42.101011 2026] [security2:error] [pid 1018003:tid 1018074] [remote 34.148.90.28:50036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/server/.env"] [unique_id "apK9BjAh5Y1i2tUxg4HlfwAGMjU"]
[Sat Aug 29 05:05:42.102086 2026] [security2:error] [pid 1018003:tid 1018052] [remote 34.148.90.28:50036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/dev/.env"] [unique_id "apK9BjAh5Y1i2tUxg4HlgQAGMh8"]
[Sat Aug 29 05:05:42.103763 2026] [security2:error] [pid 1017536:tid 1017668] [client 74.7.228.40:56160] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "strangeworx.com"] [uri "/robots.txt"] [unique_id "apK9BiJcY4fy7tP-rU3sqwACFjM"], referer: http://strangeworx.com/robots.txt
[Sat Aug 29 05:05:42.136255 2026] [security2:error] [pid 1018003:tid 1018214] [client 168.107.94.195:60673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9BjAh5Y1i2tUxg4HlggAABfc"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:42.142943 2026] [security2:error] [pid 1017536:tid 1017714] [client 158.23.184.117:57621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.supermachines.com"] [uri "/.well-known/api.php"] [unique_id "apK9BiJcY4fy7tP-rU3srwAAAkQ"]
[Sat Aug 29 05:05:42.144798 2026] [security2:error] [pid 1018003:tid 1018263] [client 158.23.184.117:28374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/.well-known/wp-settings.php"] [unique_id "apK9BjAh5Y1i2tUxg4HlgwAABic"]
[Sat Aug 29 05:05:42.155127 2026] [security2:error] [pid 1017536:tid 1017711] [client 68.155.159.216:50300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/sad/about.php"] [unique_id "apK9BiJcY4fy7tP-rU3ssQAAAkE"]
[Sat Aug 29 05:05:42.168991 2026] [security2:error] [pid 1018003:tid 1018183] [client 103.162.125.59:51412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.125.162.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK9BjAh5Y1i2tUxg4HlhAAABdg"]
[Sat Aug 29 05:05:42.169117 2026] [security2:error] [pid 1018003:tid 1018183] [client 103.162.125.59:51412] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK9BjAh5Y1i2tUxg4HlhAAABdg"]
[Sat Aug 29 05:05:42.169892 2026] [security2:error] [pid 1017536:tid 1017706] [client 68.155.159.216:12202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-login.php"] [unique_id "apK9BiJcY4fy7tP-rU3ssgAAAjw"]
[Sat Aug 29 05:05:42.186710 2026] [security2:error] [pid 1017536:tid 1017679] [client 20.63.219.114:14404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/colour.php"] [unique_id "apK9BiJcY4fy7tP-rU3sswAAAiE"]
[Sat Aug 29 05:05:42.201100 2026] [security2:error] [pid 1017536:tid 1017704] [client 20.196.209.81:17049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-admin/network/xmrlpc.php"] [unique_id "apK9BiJcY4fy7tP-rU3stAAAAjo"]
[Sat Aug 29 05:05:42.289235 2026] [security2:error] [pid 1018003:tid 1018171] [client 20.196.209.81:12681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/GOD.php"] [unique_id "apK9BjAh5Y1i2tUxg4HlhgAABcw"]
[Sat Aug 29 05:05:42.289565 2026] [security2:error] [pid 1017536:tid 1017719] [client 158.23.184.117:27676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/.well-known/wp-signup.php"] [unique_id "apK9BiJcY4fy7tP-rU3stwAAAkk"]
[Sat Aug 29 05:05:42.290305 2026] [security2:error] [pid 1017536:tid 1017783] [client 158.23.184.117:57629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.supermachines.com"] [uri "/.well-known/chosen.php"] [unique_id "apK9BiJcY4fy7tP-rU3suAAAAok"]
[Sat Aug 29 05:05:42.298706 2026] [security2:error] [pid 1017536:tid 1017689] [client 45.148.10.62:50838] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.wagnerfarmscbd.com"] [uri "/.env.backup"] [unique_id "apK9BiJcY4fy7tP-rU3suQAAAis"]
[Sat Aug 29 05:05:42.309425 2026] [security2:error] [pid 1017536:tid 1017749] [client 158.23.184.117:8071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cairnquartet.strangeworx.com"] [uri "/Radio.php"] [unique_id "apK9BiJcY4fy7tP-rU3suwAAAmc"]
[Sat Aug 29 05:05:42.392382 2026] [cgid:error] [pid 1017536:tid 1017573] [remote 216.41.232.163:31657] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/flowerfh/public_html/404.shtml, referer: https://www.flowerfh.com/obituaries.php
[Sat Aug 29 05:05:42.395782 2026] [security2:error] [pid 1017536:tid 1017776] [client 4.205.62.107:22246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/ms-edit.php"] [unique_id "apK9BiJcY4fy7tP-rU3swgAAAoI"]
[Sat Aug 29 05:05:42.405718 2026] [security2:error] [pid 1018003:tid 1018227] [client 68.155.159.216:57364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK9BjAh5Y1i2tUxg4HlhwAABgQ"]
[Sat Aug 29 05:05:42.424215 2026] [security2:error] [pid 1017536:tid 1017733] [client 4.205.62.107:22271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/i.php"] [unique_id "apK9BiJcY4fy7tP-rU3swwAAAlc"]
[Sat Aug 29 05:05:42.434791 2026] [security2:error] [pid 1018003:tid 1018234] [client 158.23.184.117:28390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/002.php"] [unique_id "apK9BjAh5Y1i2tUxg4HliAAABgo"]
[Sat Aug 29 05:05:42.449593 2026] [security2:error] [pid 1017536:tid 1017745] [client 45.148.10.62:50838] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.wagnerfarmscbd.com"] [uri "/.env.old"] [unique_id "apK9BiJcY4fy7tP-rU3sxAAAAmM"]
[Sat Aug 29 05:05:42.452854 2026] [security2:error] [pid 1017536:tid 1017781] [client 158.23.184.117:20243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.supermachines.com"] [uri "/.well-known/config.php"] [unique_id "apK9BiJcY4fy7tP-rU3sxgAAAoc"]
[Sat Aug 29 05:05:42.457175 2026] [core:error] [pid 1017536:tid 1017765] [client 158.23.184.117:7255] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:42.457190 2026] [core:error] [pid 1017536:tid 1017765] [client 158.23.184.117:7255] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:42.460937 2026] [autoindex:error] [pid 1017536:tid 1017587] [remote 45.148.10.62:50840] AH01276: Cannot serve directory /home3/vzofmemy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:05:42.464753 2026] [security2:error] [pid 1017536:tid 1017694] [client 4.205.62.107:65433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/fraro.php"] [unique_id "apK9BiJcY4fy7tP-rU3s3gAAAjA"]
[Sat Aug 29 05:05:42.467026 2026] [security2:error] [pid 1017536:tid 1017747] [client 4.232.148.111:34890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/wp-admin/css/about.php"] [unique_id "apK9BiJcY4fy7tP-rU3s3wAAAmU"]
[Sat Aug 29 05:05:42.489159 2026] [security2:error] [pid 1017536:tid 1017754] [client 158.23.147.79:24507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/lock.php"] [unique_id "apK9BiJcY4fy7tP-rU3s4AAAAmw"]
[Sat Aug 29 05:05:42.501939 2026] [security2:error] [pid 1017536:tid 1017669] [client 111.235.68.106:56102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK9BiJcY4fy7tP-rU3s4QAAAhc"]
[Sat Aug 29 05:05:42.502034 2026] [security2:error] [pid 1017536:tid 1017669] [client 111.235.68.106:56102] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK9BiJcY4fy7tP-rU3s4QAAAhc"]
[Sat Aug 29 05:05:42.509617 2026] [security2:error] [pid 1017536:tid 1017724] [client 4.205.62.107:2644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/koiy.php"] [unique_id "apK9BiJcY4fy7tP-rU3s4gAAAk4"]
[Sat Aug 29 05:05:42.513998 2026] [security2:error] [pid 1017536:tid 1017548] [remote 52.167.144.172:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantsfans.net"] [uri "/message_board/index.php"] [unique_id "apK9BiJcY4fy7tP-rU3s4wACSgs"]
[Sat Aug 29 05:05:42.515391 2026] [security2:error] [pid 1017536:tid 1017764] [client 168.107.94.195:61046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9BiJcY4fy7tP-rU3s5AAAAnY"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:42.527955 2026] [security2:error] [pid 1018003:tid 1018266] [client 20.48.251.3:28509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/time.php"] [unique_id "apK9BjAh5Y1i2tUxg4HliQAABio"]
[Sat Aug 29 05:05:42.541386 2026] [security2:error] [pid 1017536:tid 1017670] [client 158.158.54.35:10838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/deepseek_d.php"] [unique_id "apK9BiJcY4fy7tP-rU3s5gAAAhg"]
[Sat Aug 29 05:05:42.542018 2026] [core:error] [pid 1018003:tid 1018187] [client 74.248.24.12:34180] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:42.542028 2026] [core:error] [pid 1018003:tid 1018187] [client 74.248.24.12:34180] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:42.579868 2026] [security2:error] [pid 1017536:tid 1017737] [client 158.23.184.117:28387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/0x.php"] [unique_id "apK9BiJcY4fy7tP-rU3s5wAAAls"]
[Sat Aug 29 05:05:42.593597 2026] [security2:error] [pid 1017536:tid 1017774] [client 20.196.209.81:18734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-admin/options-general.php"] [unique_id "apK9BiJcY4fy7tP-rU3s6AAAAoA"]
[Sat Aug 29 05:05:42.600378 2026] [security2:error] [pid 1018003:tid 1018172] [client 158.23.184.117:20256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.supermachines.com"] [uri "/.well-known/core.php"] [unique_id "apK9BjAh5Y1i2tUxg4HliwAABc0"]
[Sat Aug 29 05:05:42.602438 2026] [security2:error] [pid 1017536:tid 1017755] [client 158.23.184.117:7240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cairnquartet.strangeworx.com"] [uri "/wp-includes/Requests/Exception/file.php"] [unique_id "apK9BiJcY4fy7tP-rU3s6QAAAm0"]
[Sat Aug 29 05:05:42.618339 2026] [security2:error] [pid 1017536:tid 1017721] [client 40.83.93.50:7794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/wp-contentt.php"] [unique_id "apK9BiJcY4fy7tP-rU3s7AAAAks"]
[Sat Aug 29 05:05:42.640343 2026] [security2:error] [pid 1017536:tid 1017768] [client 68.155.159.216:51418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-login.php"] [unique_id "apK9BiJcY4fy7tP-rU3s7wAAAno"]
[Sat Aug 29 05:05:42.659460 2026] [security2:error] [pid 1018003:tid 1018241] [client 20.48.251.3:28506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/doc.php"] [unique_id "apK9BjAh5Y1i2tUxg4HljAAABhE"]
[Sat Aug 29 05:05:42.661530 2026] [security2:error] [pid 1018003:tid 1018211] [client 20.63.219.114:15556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/OK.php"] [unique_id "apK9BjAh5Y1i2tUxg4HljQAABfQ"]
[Sat Aug 29 05:05:42.710126 2026] [security2:error] [pid 1017536:tid 1017680] [client 20.48.251.3:14285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/xp.php"] [unique_id "apK9BiJcY4fy7tP-rU3s8wAAAiI"]
[Sat Aug 29 05:05:42.713303 2026] [security2:error] [pid 1018003:tid 1018213] [client 20.196.209.81:12684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/ggfi.php"] [unique_id "apK9BjAh5Y1i2tUxg4HljwAABfY"]
[Sat Aug 29 05:05:42.725603 2026] [security2:error] [pid 1017536:tid 1017782] [client 158.23.184.117:27656] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.kozo.com.mx"] [uri "/1.php"] [unique_id "apK9BiJcY4fy7tP-rU3s9QAAAog"]
[Sat Aug 29 05:05:42.725689 2026] [security2:error] [pid 1017536:tid 1017782] [client 158.23.184.117:27656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/1.php"] [unique_id "apK9BiJcY4fy7tP-rU3s9QAAAog"]
[Sat Aug 29 05:05:42.729291 2026] [security2:error] [pid 1018003:tid 1018195] [client 4.205.62.107:53365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/brc.php"] [unique_id "apK9BjAh5Y1i2tUxg4HlkAAABeQ"]
[Sat Aug 29 05:05:42.748921 2026] [core:error] [pid 1017536:tid 1017793] [client 158.23.184.117:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:42.748934 2026] [core:error] [pid 1017536:tid 1017793] [client 158.23.184.117:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:42.750533 2026] [core:error] [pid 1018003:tid 1018154] [client 158.23.184.117:7170] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:42.750548 2026] [core:error] [pid 1018003:tid 1018154] [client 158.23.184.117:7170] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:42.754230 2026] [security2:error] [pid 1017536:tid 1017779] [client 158.23.184.117:57632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.supermachines.com"] [uri "/.well-known/data.php"] [unique_id "apK9BiJcY4fy7tP-rU3s-AAAAoU"]
[Sat Aug 29 05:05:42.754260 2026] [security2:error] [pid 1017536:tid 1017696] [client 45.148.10.62:50838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wagnerfarmscbd.com"] [uri "/.env.php.bak"] [unique_id "apK9BiJcY4fy7tP-rU3s9wAAAjI"]
[Sat Aug 29 05:05:42.790930 2026] [security2:error] [pid 1017536:tid 1017769] [client 20.48.251.3:28496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/classsmtps.php"] [unique_id "apK9BiJcY4fy7tP-rU3s-gAAAns"]
[Sat Aug 29 05:05:42.792123 2026] [security2:error] [pid 1018003:tid 1018184] [client 68.155.159.216:40352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.gavirestaurant.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK9BjAh5Y1i2tUxg4HlkgAABdk"]
[Sat Aug 29 05:05:42.834002 2026] [security2:error] [pid 1018003:tid 1018048] [remote 34.148.90.28:50036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/staging/.env"] [unique_id "apK9BjAh5Y1i2tUxg4HllAAGMxs"]
[Sat Aug 29 05:05:42.834026 2026] [security2:error] [pid 1018003:tid 1018044] [remote 34.148.90.28:50036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/docker/.env"] [unique_id "apK9BjAh5Y1i2tUxg4HllgAGMxc"]
[Sat Aug 29 05:05:42.834026 2026] [security2:error] [pid 1018003:tid 1018049] [remote 34.148.90.28:50036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/apps/.env"] [unique_id "apK9BjAh5Y1i2tUxg4HlkwAGMxw"]
[Sat Aug 29 05:05:42.834086 2026] [security2:error] [pid 1018003:tid 1018047] [remote 34.148.90.28:50036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/v2/.env"] [unique_id "apK9BjAh5Y1i2tUxg4HllQAGMxo"]
[Sat Aug 29 05:05:42.834792 2026] [security2:error] [pid 1018003:tid 1018049] [remote 34.148.90.28:50036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/v1/.env"] [unique_id "apK9BjAh5Y1i2tUxg4HllwAGMxw"]
[Sat Aug 29 05:05:42.835540 2026] [security2:error] [pid 1018003:tid 1018040] [remote 34.148.90.28:50036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/production/.env"] [unique_id "apK9BjAh5Y1i2tUxg4HlmAAGMxM"]
[Sat Aug 29 05:05:42.868230 2026] [security2:error] [pid 1017536:tid 1017695] [client 158.23.184.117:28371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/10.php"] [unique_id "apK9BiJcY4fy7tP-rU3s_AAAAjE"]
[Sat Aug 29 05:05:42.894632 2026] [security2:error] [pid 1017536:tid 1017693] [client 158.23.184.117:7237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cairnquartet.strangeworx.com"] [uri "/wp-admin/add.php"] [unique_id "apK9BiJcY4fy7tP-rU3s_gAAAi8"]
[Sat Aug 29 05:05:42.895649 2026] [security2:error] [pid 1018003:tid 1018245] [client 168.107.94.195:61437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9BjAh5Y1i2tUxg4HlmgAABhU"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:42.903422 2026] [security2:error] [pid 1018003:tid 1018152] [client 158.23.184.117:57609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.supermachines.com"] [uri "/.well-known/db-status.php"] [unique_id "apK9BjAh5Y1i2tUxg4HlnAAABbk"]
[Sat Aug 29 05:05:42.916616 2026] [security2:error] [pid 1017536:tid 1017604] [remote 45.148.10.62:50840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vzo.fme.mybluehost.me"] [uri "/wp-login.php"] [unique_id "apK9BiJcY4fy7tP-rU3tAQACUkM"]
[Sat Aug 29 05:05:42.930498 2026] [security2:error] [pid 1018003:tid 1018174] [client 20.48.251.3:28468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/cache-compat.php"] [unique_id "apK9BjAh5Y1i2tUxg4HlngAABc8"]
[Sat Aug 29 05:05:42.935302 2026] [security2:error] [pid 1018003:tid 1018169] [client 114.119.148.56:48933] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.classiclightingusa.com"] [uri "/catalog/product_info.php/cPath/8/products_id/1004/osCsid/hebmei56nknjf1vva0bovlcne6"] [unique_id "apK9BjAh5Y1i2tUxg4HloAAABco"], referer: http://www.classiclightingusa.com/catalog/index.php/cPath/8/osCsid/hebmei56nknjf1vva0bovlcne6
[Sat Aug 29 05:05:42.941697 2026] [security2:error] [pid 1017536:tid 1017730] [client 4.232.148.111:36550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/system_log.php"] [unique_id "apK9BiJcY4fy7tP-rU3tAgAAAlQ"]
[Sat Aug 29 05:05:42.990469 2026] [security2:error] [pid 1017536:tid 1017753] [client 20.196.209.81:17092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-admin/options.php"] [unique_id "apK9BiJcY4fy7tP-rU3tAwAAAms"]
[Sat Aug 29 05:05:43.009303 2026] [security2:error] [pid 1017536:tid 1017736] [client 158.23.147.79:50149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/goat1.php"] [unique_id "apK9ByJcY4fy7tP-rU3tBAAAAlo"]
[Sat Aug 29 05:05:43.013199 2026] [security2:error] [pid 1018003:tid 1018236] [client 158.23.184.117:27687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/100.php"] [unique_id "apK9BzAh5Y1i2tUxg4HlogAABgw"]
[Sat Aug 29 05:05:43.025188 2026] [security2:error] [pid 1017536:tid 1017719] [client 20.63.219.114:1221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.coveryourauto.com"] [uri "/aaa.php"] [unique_id "apK9ByJcY4fy7tP-rU3tBQAAAkk"]
[Sat Aug 29 05:05:43.039786 2026] [security2:error] [pid 1018003:tid 1018262] [client 158.23.184.117:7310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cairnquartet.strangeworx.com"] [uri "/wp-includes/assets/about.php"] [unique_id "apK9BzAh5Y1i2tUxg4HlowAABiY"]
[Sat Aug 29 05:05:43.055315 2026] [security2:error] [pid 1018003:tid 1018050] [remote 34.148.90.28:50036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/env.bak"] [unique_id "apK9BzAh5Y1i2tUxg4HlpAAF_h0"]
[Sat Aug 29 05:05:43.059692 2026] [security2:error] [pid 1018003:tid 1018205] [client 158.23.184.117:20042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.supermachines.com"] [uri "/.well-known/f35.php"] [unique_id "apK9BzAh5Y1i2tUxg4HlpQAABe4"]
[Sat Aug 29 05:05:43.061847 2026] [security2:error] [pid 1018003:tid 1018170] [client 20.48.251.3:28461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/aws_keys.php"] [unique_id "apK9BzAh5Y1i2tUxg4HlpwAABcs"]
[Sat Aug 29 05:05:43.073963 2026] [security2:error] [pid 1018003:tid 1018150] [client 34.12.38.134:16536] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/terraform.tfstate"] [unique_id "apK9BzAh5Y1i2tUxg4HlrAAABbc"]
[Sat Aug 29 05:05:43.074600 2026] [core:error] [pid 1017536:tid 1017667] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:43.074615 2026] [core:error] [pid 1017536:tid 1017667] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:43.076583 2026] [security2:error] [pid 1018003:tid 1018051] [remote 34.148.90.28:50036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/site/.env"] [unique_id "apK9BzAh5Y1i2tUxg4HlrQAGEh4"]
[Sat Aug 29 05:05:43.078510 2026] [security2:error] [pid 1018003:tid 1018277] [client 20.104.49.130:57472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/crgio.php"] [unique_id "apK9BzAh5Y1i2tUxg4HlrgAABjU"]
[Sat Aug 29 05:05:43.090239 2026] [core:error] [pid 1018003:tid 1018193] [client 34.12.38.134:16616] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:43.090254 2026] [core:error] [pid 1018003:tid 1018193] [client 34.12.38.134:16616] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:43.096530 2026] [security2:error] [pid 1018003:tid 1018267] [client 34.12.38.134:16646] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/___proxy_subdomain_cpcontacts/stripe/.env"] [unique_id "apK9BzAh5Y1i2tUxg4HlsQAABis"]
[Sat Aug 29 05:05:43.099925 2026] [core:error] [pid 1017536:tid 1017761] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:43.099938 2026] [core:error] [pid 1017536:tid 1017761] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:43.104730 2026] [security2:error] [pid 1017536:tid 1017742] [client 158.23.147.79:30683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/file88.php"] [unique_id "apK9ByJcY4fy7tP-rU3tDwAAAmA"]
[Sat Aug 29 05:05:43.105366 2026] [security2:error] [pid 1018003:tid 1018261] [client 74.248.24.12:5254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK9BzAh5Y1i2tUxg4HltAAABiU"]
[Sat Aug 29 05:05:43.105694 2026] [core:error] [pid 1018003:tid 1018203] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:43.105702 2026] [core:error] [pid 1018003:tid 1018203] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:43.106870 2026] [core:error] [pid 1018003:tid 1018215] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:43.106881 2026] [core:error] [pid 1018003:tid 1018215] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:43.109061 2026] [security2:error] [pid 1018003:tid 1018043] [remote 34.148.90.28:50036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/old/.env"] [unique_id "apK9BzAh5Y1i2tUxg4HltQAGJBY"]
[Sat Aug 29 05:05:43.109072 2026] [security2:error] [pid 1018003:tid 1018199] [client 34.12.38.134:16562] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/___proxy_subdomain_cpcontacts/var/www/html/.env"] [unique_id "apK9BzAh5Y1i2tUxg4HltgAABeg"]
[Sat Aug 29 05:05:43.111025 2026] [security2:error] [pid 1018003:tid 1018054] [remote 34.148.90.28:50036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/.docker/.env"] [unique_id "apK9BzAh5Y1i2tUxg4HltwAGIiE"]
[Sat Aug 29 05:05:43.111064 2026] [security2:error] [pid 1018003:tid 1018222] [client 34.12.38.134:16556] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/___proxy_subdomain_cpcontacts/var/www/.env"] [unique_id "apK9BzAh5Y1i2tUxg4HluAAABf8"]
[Sat Aug 29 05:05:43.111811 2026] [security2:error] [pid 1018003:tid 1018053] [remote 34.148.90.28:50036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/env.old"] [unique_id "apK9BzAh5Y1i2tUxg4HluQAGIiA"]
[Sat Aug 29 05:05:43.114276 2026] [security2:error] [pid 1018003:tid 1018231] [client 34.12.38.134:16610] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/___proxy_subdomain_cpcontacts/email/.env"] [unique_id "apK9BzAh5Y1i2tUxg4HlugAABgc"]
[Sat Aug 29 05:05:43.117189 2026] [core:error] [pid 1017536:tid 1017688] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:43.117202 2026] [core:error] [pid 1017536:tid 1017688] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:43.117738 2026] [security2:error] [pid 1018003:tid 1018055] [remote 34.148.90.28:50036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/portal/.env"] [unique_id "apK9BzAh5Y1i2tUxg4HluwAF5SI"]
[Sat Aug 29 05:05:43.123203 2026] [core:error] [pid 1018003:tid 1018161] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:43.123216 2026] [core:error] [pid 1018003:tid 1018161] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:43.123347 2026] [security2:error] [pid 1018003:tid 1018274] [client 158.158.54.35:9423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "apK9BzAh5Y1i2tUxg4HlvwAABjI"]
[Sat Aug 29 05:05:43.132074 2026] [security2:error] [pid 1018003:tid 1018159] [client 34.12.38.134:16606] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/mail/.env"] [unique_id "apK9BzAh5Y1i2tUxg4HlwAAABcA"]
[Sat Aug 29 05:05:43.132430 2026] [security2:error] [pid 1018003:tid 1018244] [client 20.196.209.81:10694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/alfa-rex.php"] [unique_id "apK9BzAh5Y1i2tUxg4HlwQAABhQ"]
[Sat Aug 29 05:05:43.135561 2026] [security2:error] [pid 1018003:tid 1018185] [client 34.12.38.134:16588] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.skarchfrutale.com"] [uri "/___proxy_subdomain_cpcontacts/sendgrid/.env"] [unique_id "apK9BzAh5Y1i2tUxg4HlwgAABdo"]
[Sat Aug 29 05:05:43.138647 2026] [core:error] [pid 1018003:tid 1018192] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:43.138657 2026] [core:error] [pid 1018003:tid 1018192] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:43.157339 2026] [security2:error] [pid 1017536:tid 1017675] [client 158.23.184.117:28403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/2.php"] [unique_id "apK9ByJcY4fy7tP-rU3tEgAAAh0"]
[Sat Aug 29 05:05:43.162271 2026] [core:error] [pid 1017536:tid 1017715] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:43.162289 2026] [core:error] [pid 1017536:tid 1017715] [client 34.12.38.134:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:43.166382 2026] [security2:error] [pid 1018003:tid 1018056] [remote 34.148.90.28:50036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/api/.env.bak"] [unique_id "apK9BzAh5Y1i2tUxg4HlxQAF8iM"]
[Sat Aug 29 05:05:43.179593 2026] [security2:error] [pid 1018003:tid 1018278] [client 158.23.147.79:30611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/NewFile.php/"] [unique_id "apK9BzAh5Y1i2tUxg4HlxwAABjY"]
[Sat Aug 29 05:05:43.185494 2026] [security2:error] [pid 1018003:tid 1018151] [client 158.23.184.117:7358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cairnquartet.strangeworx.com"] [uri "/wp-content/themes/twentytwentythree.php"] [unique_id "apK9BzAh5Y1i2tUxg4HlyAAABbg"]
[Sat Aug 29 05:05:43.192432 2026] [security2:error] [pid 1018003:tid 1018189] [client 20.48.251.3:27177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/umgebung.php"] [unique_id "apK9BzAh5Y1i2tUxg4HlyQAABd4"]
[Sat Aug 29 05:05:43.205472 2026] [security2:error] [pid 1017536:tid 1017710] [client 158.23.184.117:20277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.supermachines.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK9ByJcY4fy7tP-rU3tFAAAAkA"]
[Sat Aug 29 05:05:43.213673 2026] [security2:error] [pid 1017536:tid 1017776] [client 40.83.93.50:3197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/theme.php"] [unique_id "apK9ByJcY4fy7tP-rU3tFQAAAoI"]
[Sat Aug 29 05:05:43.235518 2026] [security2:error] [pid 1018003:tid 1018173] [client 4.205.62.107:61774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/cu.php"] [unique_id "apK9BzAh5Y1i2tUxg4HlywAABc4"]
[Sat Aug 29 05:05:43.254292 2026] [security2:error] [pid 1018003:tid 1018256] [client 158.23.184.117:7299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "expressexecs.mikeycunningham.com"] [uri "/update/da222.php"] [unique_id "apK9BzAh5Y1i2tUxg4HlzgAABiA"]
[Sat Aug 29 05:05:43.260150 2026] [security2:error] [pid 1017536:tid 1017775] [client 68.155.159.216:50304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/admin.php"] [unique_id "apK9ByJcY4fy7tP-rU3tFwAAAoE"]
[Sat Aug 29 05:05:43.274056 2026] [security2:error] [pid 1018003:tid 1018172] [client 168.107.94.195:61770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9BzAh5Y1i2tUxg4HlzwAABc0"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:43.279926 2026] [security2:error] [pid 1018003:tid 1018241] [client 68.155.159.216:12243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK9BzAh5Y1i2tUxg4Hl0AAABhE"]
[Sat Aug 29 05:05:43.288609 2026] [security2:error] [pid 1018003:tid 1018251] [client 45.148.10.62:50842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wagnerfarmscbd.com"] [uri "/.env.php"] [unique_id "apK9BzAh5Y1i2tUxg4Hl0QAABhs"]
[Sat Aug 29 05:05:43.298924 2026] [security2:error] [pid 1017536:tid 1017713] [client 158.23.184.117:28386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/222.php"] [unique_id "apK9ByJcY4fy7tP-rU3tGgAAAkM"]
[Sat Aug 29 05:05:43.320810 2026] [security2:error] [pid 1018003:tid 1018062] [remote 34.148.90.28:50036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/.env.production.bak"] [unique_id "apK9BzAh5Y1i2tUxg4Hl0wAGKCk"]
[Sat Aug 29 05:05:43.321226 2026] [security2:error] [pid 1017536:tid 1017738] [client 20.48.251.3:28436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/old_phpinfo.php"] [unique_id "apK9ByJcY4fy7tP-rU3tGwAAAlw"]
[Sat Aug 29 05:05:43.350839 2026] [security2:error] [pid 1017536:tid 1017684] [client 158.23.184.117:20273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.supermachines.com"] [uri "/.well-known/home.php"] [unique_id "apK9ByJcY4fy7tP-rU3tHQAAAiY"]
[Sat Aug 29 05:05:43.364234 2026] [security2:error] [pid 1018003:tid 1018220] [client 20.48.251.3:14314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/g3.php"] [unique_id "apK9BzAh5Y1i2tUxg4Hl1gAABf0"]
[Sat Aug 29 05:05:43.369939 2026] [core:error] [pid 1017536:tid 1017698] [client 158.23.184.117:7336] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:43.369953 2026] [core:error] [pid 1017536:tid 1017698] [client 158.23.184.117:7336] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:43.384185 2026] [security2:error] [pid 1018003:tid 1018234] [client 20.196.209.81:17046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-admin/panel.php"] [unique_id "apK9BzAh5Y1i2tUxg4Hl2AAABgo"]
[Sat Aug 29 05:05:43.403899 2026] [security2:error] [pid 1018003:tid 1018225] [client 4.232.148.111:8427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/24.php"] [unique_id "apK9BzAh5Y1i2tUxg4Hl3AAABgI"]
[Sat Aug 29 05:05:43.411914 2026] [security2:error] [pid 1018003:tid 1018165] [client 158.23.184.117:53558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "expressexecs.mikeycunningham.com"] [uri "/xmr.php"] [unique_id "apK9BzAh5Y1i2tUxg4Hl3QAABcY"]
[Sat Aug 29 05:05:43.442010 2026] [security2:error] [pid 1017536:tid 1017784] [client 158.23.184.117:51983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/24.php"] [unique_id "apK9ByJcY4fy7tP-rU3tIQAAAoo"]
[Sat Aug 29 05:05:43.450566 2026] [security2:error] [pid 1018003:tid 1018233] [client 20.48.251.3:57896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.fasthavoc.net"] [uri "/wp-act.php"] [unique_id "apK9BzAh5Y1i2tUxg4Hl3wAABgk"]
[Sat Aug 29 05:05:43.461019 2026] [security2:error] [pid 1018003:tid 1018190] [client 158.23.147.79:25586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK9BzAh5Y1i2tUxg4Hl4AAABd8"]
[Sat Aug 29 05:05:43.482869 2026] [security2:error] [pid 1018003:tid 1018202] [client 68.155.159.216:14205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/wp-blog-header.php"] [unique_id "apK9BzAh5Y1i2tUxg4Hl4gAABes"]
[Sat Aug 29 05:05:43.497892 2026] [security2:error] [pid 1018003:tid 1018212] [client 158.23.184.117:20227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.supermachines.com"] [uri "/.well-known/index.php"] [unique_id "apK9BzAh5Y1i2tUxg4Hl4wAABfU"]
[Sat Aug 29 05:05:43.511809 2026] [security2:error] [pid 1017536:tid 1017782] [client 68.155.159.216:57432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK9ByJcY4fy7tP-rU3tIgAAAog"]
[Sat Aug 29 05:05:43.517608 2026] [security2:error] [pid 1017536:tid 1017700] [client 158.23.184.117:53530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cairnquartet.strangeworx.com"] [uri "/wp-content/languages/themes/num.php"] [unique_id "apK9ByJcY4fy7tP-rU3tIwAAAjY"]
[Sat Aug 29 05:05:43.529196 2026] [security2:error] [pid 1018003:tid 1018205] [client 20.104.49.130:51129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/xmini4.php"] [unique_id "apK9BzAh5Y1i2tUxg4Hl5AAABe4"]
[Sat Aug 29 05:05:43.531591 2026] [security2:error] [pid 1017536:tid 1017708] [client 20.196.209.81:12710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/cookie.php"] [unique_id "apK9ByJcY4fy7tP-rU3tJAAAAj4"]
[Sat Aug 29 05:05:43.534424 2026] [security2:error] [pid 1017536:tid 1017793] [client 4.205.62.107:21885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/avim.php"] [unique_id "apK9ByJcY4fy7tP-rU3tJQAAApM"]
[Sat Aug 29 05:05:43.558490 2026] [security2:error] [pid 1018003:tid 1018262] [client 158.23.184.117:53546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "expressexecs.mikeycunningham.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK9BzAh5Y1i2tUxg4Hl5QAABiY"]
[Sat Aug 29 05:05:43.579164 2026] [security2:error] [pid 1017536:tid 1017685] [client 4.205.62.107:21601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/aww.php"] [unique_id "apK9ByJcY4fy7tP-rU3tJwAAAic"]
[Sat Aug 29 05:05:43.587439 2026] [security2:error] [pid 1017536:tid 1017779] [client 158.23.184.117:28393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/3pjcpmfsd8b.php"] [unique_id "apK9ByJcY4fy7tP-rU3tKAAAAoU"]
[Sat Aug 29 05:05:43.598524 2026] [security2:error] [pid 1017536:tid 1017752] [client 4.205.62.107:65511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/thui.php"] [unique_id "apK9ByJcY4fy7tP-rU3tKQAAAmo"]
[Sat Aug 29 05:05:43.603495 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.48.251.3:14310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/wp-konfig.php"] [unique_id "apK9ByJcY4fy7tP-rU3tKwAAAnk"]
[Sat Aug 29 05:05:43.612747 2026] [security2:error] [pid 1017536:tid 1017785] [client 158.23.147.79:24472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/index/function.php"] [unique_id "apK9ByJcY4fy7tP-rU3tLAAAAos"]
[Sat Aug 29 05:05:43.630495 2026] [security2:error] [pid 1018003:tid 1018089] [remote 34.148.90.28:50036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/@fs/root/.env"] [unique_id "apK9BzAh5Y1i2tUxg4Hl5wAF1UQ"]
[Sat Aug 29 05:05:43.633012 2026] [security2:error] [pid 1018003:tid 1018065] [remote 34.148.90.28:50036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/.env.prod.bak"] [unique_id "apK9BzAh5Y1i2tUxg4Hl6AAGKyw"]
[Sat Aug 29 05:05:43.638012 2026] [security2:error] [pid 1018003:tid 1018022] [remote 34.148.90.28:50036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/@fs/.env"] [unique_id "apK9BzAh5Y1i2tUxg4Hl6QAGJQE"]
[Sat Aug 29 05:05:43.643428 2026] [security2:error] [pid 1017536:tid 1017550] [remote 173.252.82.19:60270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.82.252.173.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "villagebooksandbears.com"] [uri "/market/index.php"] [unique_id "apK9ByJcY4fy7tP-rU3tKgACMg0"]
[Sat Aug 29 05:05:43.643589 2026] [security2:error] [pid 1018003:tid 1018246] [client 158.23.184.117:20277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.supermachines.com"] [uri "/.well-known/login.php"] [unique_id "apK9BzAh5Y1i2tUxg4Hl6gAABhY"]
[Sat Aug 29 05:05:43.649679 2026] [security2:error] [pid 1017536:tid 1017725] [client 4.205.62.107:2926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/test1.php"] [unique_id "apK9ByJcY4fy7tP-rU3tLQAAAk8"]
[Sat Aug 29 05:05:43.653322 2026] [security2:error] [pid 1017536:tid 1017750] [client 168.107.94.195:62046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9ByJcY4fy7tP-rU3tLgAAAmg"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:43.679039 2026] [security2:error] [pid 1017536:tid 1017703] [client 158.23.184.117:53543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cairnquartet.strangeworx.com"] [uri "/wp.php"] [unique_id "apK9ByJcY4fy7tP-rU3tLwAAAjk"]
[Sat Aug 29 05:05:43.700063 2026] [security2:error] [pid 1017536:tid 1017680] [client 74.248.24.12:23856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/num.php"] [unique_id "apK9ByJcY4fy7tP-rU3tMAAAAiI"]
[Sat Aug 29 05:05:43.703716 2026] [security2:error] [pid 1017536:tid 1017705] [client 158.158.54.35:6956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-content/themes/pridmag/il.php"] [unique_id "apK9ByJcY4fy7tP-rU3tMQAAAjs"]
[Sat Aug 29 05:05:43.703763 2026] [security2:error] [pid 1017536:tid 1017717] [client 158.23.184.117:53534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "expressexecs.mikeycunningham.com"] [uri "/wp-act.php"] [unique_id "apK9ByJcY4fy7tP-rU3tMgAAAkc"]
[Sat Aug 29 05:05:43.722739 2026] [security2:error] [pid 1018003:tid 1018243] [client 40.83.93.50:7787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/alumni_reg.php"] [unique_id "apK9BzAh5Y1i2tUxg4Hl7AAABhM"]
[Sat Aug 29 05:05:43.734369 2026] [security2:error] [pid 1018003:tid 1018164] [client 158.23.184.117:28397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kozo.com.mx"] [uri "/403.php"] [unique_id "apK9BzAh5Y1i2tUxg4Hl7QAABcU"]
[Sat Aug 29 05:05:43.781270 2026] [security2:error] [pid 1017536:tid 1017674] [client 20.196.209.81:17102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-admin/pk.php"] [unique_id "apK9ByJcY4fy7tP-rU3tNAAAAhw"]
[Sat Aug 29 05:05:43.788462 2026] [security2:error] [pid 1018003:tid 1018198] [client 158.23.184.117:20224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.supermachines.com"] [uri "/.well-known/logs233/index.php"] [unique_id "apK9BzAh5Y1i2tUxg4Hl7gAABec"]
[Sat Aug 29 05:05:43.808616 2026] [security2:error] [pid 1018003:tid 1018224] [client 20.48.251.3:14305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/25.php"] [unique_id "apK9BzAh5Y1i2tUxg4Hl7wAABgE"]
[Sat Aug 29 05:05:43.822883 2026] [security2:error] [pid 1017536:tid 1017707] [client 158.23.184.117:7291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cairnquartet.strangeworx.com"] [uri "/xmlrpc.php"] [unique_id "apK9ByJcY4fy7tP-rU3tNgAAAj0"]
[Sat Aug 29 05:05:43.855681 2026] [security2:error] [pid 1018003:tid 1018181] [client 158.23.184.117:53512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "expressexecs.mikeycunningham.com"] [uri "/fff.php"] [unique_id "apK9BzAh5Y1i2tUxg4Hl8wAABdY"]
[Sat Aug 29 05:05:43.919836 2026] [security2:error] [pid 1018003:tid 1018183] [client 20.104.49.130:57719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/33.php"] [unique_id "apK9BzAh5Y1i2tUxg4Hl9wAABdg"]
[Sat Aug 29 05:05:43.929574 2026] [security2:error] [pid 1018003:tid 1018244] [client 68.155.159.216:64876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.gavirestaurant.com"] [uri "/packed.php"] [unique_id "apK9BzAh5Y1i2tUxg4Hl-AAABhQ"]
[Sat Aug 29 05:05:43.932001 2026] [security2:error] [pid 1017536:tid 1017753] [client 20.196.209.81:21091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/NewFile.php"] [unique_id "apK9ByJcY4fy7tP-rU3tOAAAAms"]
[Sat Aug 29 05:05:43.937728 2026] [security2:error] [pid 1018003:tid 1018161] [client 158.23.184.117:57613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.supermachines.com"] [uri "/.well-known/maintenance.php"] [unique_id "apK9BzAh5Y1i2tUxg4Hl-QAABcI"]
[Sat Aug 29 05:05:43.939585 2026] [security2:error] [pid 1018003:tid 1018185] [client 20.48.251.3:33343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/nlnub.php"] [unique_id "apK9BzAh5Y1i2tUxg4Hl-gAABdo"]
[Sat Aug 29 05:05:43.943976 2026] [security2:error] [pid 1018003:tid 1018186] [client 4.205.62.107:53392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/4563.php"] [unique_id "apK9BzAh5Y1i2tUxg4Hl-wAABds"]
[Sat Aug 29 05:05:43.970756 2026] [security2:error] [pid 1018003:tid 1018159] [client 158.23.184.117:53528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cairnquartet.strangeworx.com"] [uri "/app.php"] [unique_id "apK9BzAh5Y1i2tUxg4Hl_AAABcA"]
[Sat Aug 29 05:05:44.004487 2026] [security2:error] [pid 1018003:tid 1018197] [client 158.23.184.117:7284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "expressexecs.mikeycunningham.com"] [uri "/.tmb/dropdown.php"] [unique_id "apK9CDAh5Y1i2tUxg4Hl_QAABeY"]
[Sat Aug 29 05:05:44.033638 2026] [security2:error] [pid 1017536:tid 1017688] [client 168.107.94.195:62303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9CCJcY4fy7tP-rU3tOgAAAio"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:44.044459 2026] [security2:error] [pid 1018003:tid 1018249] [client 4.232.148.111:27502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK9CDAh5Y1i2tUxg4Hl_gAABhk"]
[Sat Aug 29 05:05:44.057485 2026] [security2:error] [pid 1018003:tid 1018045] [remote 34.148.90.28:50036] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "hitechgs.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK9CDAh5Y1i2tUxg4HmAgAGBBg"]
[Sat Aug 29 05:05:44.080339 2026] [security2:error] [pid 1017536:tid 1017783] [client 158.23.184.117:20287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.supermachines.com"] [uri "/.well-known/min.php"] [unique_id "apK9CCJcY4fy7tP-rU3tOwAAAok"]
[Sat Aug 29 05:05:44.115586 2026] [security2:error] [pid 1017536:tid 1017694] [client 158.23.184.117:7289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cairnquartet.strangeworx.com"] [uri "/aaa.php"] [unique_id "apK9CCJcY4fy7tP-rU3tPQAAAjA"]
[Sat Aug 29 05:05:44.145244 2026] [security2:error] [pid 1017536:tid 1017720] [client 158.158.54.35:15933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/assets/images/doc.php"] [unique_id "apK9CCJcY4fy7tP-rU3tPwAAAko"]
[Sat Aug 29 05:05:44.149868 2026] [security2:error] [pid 1017536:tid 1017723] [client 158.23.184.117:7353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "expressexecs.mikeycunningham.com"] [uri "/robots.php"] [unique_id "apK9CCJcY4fy7tP-rU3tQAAAAk0"]
[Sat Aug 29 05:05:44.176449 2026] [security2:error] [pid 1018003:tid 1018173] [client 20.196.209.81:18736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-admin/plugin-install.php"] [unique_id "apK9CDAh5Y1i2tUxg4HmBAAABc4"]
[Sat Aug 29 05:05:44.176863 2026] [security2:error] [pid 1018003:tid 1018255] [client 20.48.251.3:14327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/mga.php"] [unique_id "apK9CDAh5Y1i2tUxg4HmBQAABh8"]
[Sat Aug 29 05:05:44.200876 2026] [security2:error] [pid 1018003:tid 1018195] [client 158.23.147.79:48243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-content/themes/too.php"] [unique_id "apK9CDAh5Y1i2tUxg4HmBwAABeQ"]
[Sat Aug 29 05:05:44.205249 2026] [security2:error] [pid 1017536:tid 1017684] [client 158.23.147.79:30636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/dropdown.php"] [unique_id "apK9CCJcY4fy7tP-rU3tQgAAAiY"]
[Sat Aug 29 05:05:44.223836 2026] [security2:error] [pid 1018003:tid 1018220] [client 158.23.147.79:50065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK9CDAh5Y1i2tUxg4HmCAAABf0"]
[Sat Aug 29 05:05:44.226346 2026] [security2:error] [pid 1018003:tid 1018213] [client 158.23.184.117:20282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.supermachines.com"] [uri "/.well-known/module.php"] [unique_id "apK9CDAh5Y1i2tUxg4HmCQAABfY"]
[Sat Aug 29 05:05:44.272173 2026] [core:error] [pid 1017536:tid 1017698] [client 158.23.184.117:53518] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:44.272192 2026] [core:error] [pid 1017536:tid 1017698] [client 158.23.184.117:53518] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:44.294257 2026] [security2:error] [pid 1018003:tid 1018245] [client 20.104.49.130:57627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/az.php"] [unique_id "apK9CDAh5Y1i2tUxg4HmCgAABhU"]
[Sat Aug 29 05:05:44.300074 2026] [security2:error] [pid 1018003:tid 1018160] [client 158.23.184.117:53515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "expressexecs.mikeycunningham.com"] [uri "/.well-known/install.php"] [unique_id "apK9CDAh5Y1i2tUxg4HmCwAABcE"]
[Sat Aug 29 05:05:44.312185 2026] [security2:error] [pid 1018003:tid 1018157] [client 158.23.147.79:30565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/.well-known/index.php"] [unique_id "apK9CDAh5Y1i2tUxg4HmEgAABb4"]
[Sat Aug 29 05:05:44.326115 2026] [security2:error] [pid 1018003:tid 1018187] [client 40.83.93.50:3163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/colors.php"] [unique_id "apK9CDAh5Y1i2tUxg4HmFAAABdw"]
[Sat Aug 29 05:05:44.348871 2026] [security2:error] [pid 1018003:tid 1018174] [client 66.248.203.2:49312] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cheerfulmonk.com"] [uri "/2020/02/15/"] [unique_id "apK9CDAh5Y1i2tUxg4HmFgAABc8"]
[Sat Aug 29 05:05:44.358888 2026] [security2:error] [pid 1018003:tid 1018154] [client 20.196.209.81:12729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/config.php"] [unique_id "apK9CDAh5Y1i2tUxg4HmFwAABbs"]
[Sat Aug 29 05:05:44.367194 2026] [security2:error] [pid 1017536:tid 1017679] [client 68.155.159.216:50212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-admin/admin.php"] [unique_id "apK9CCJcY4fy7tP-rU3tRQAAAiE"]
[Sat Aug 29 05:05:44.369094 2026] [security2:error] [pid 1018003:tid 1018271] [client 4.205.62.107:64237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/services.php"] [unique_id "apK9CDAh5Y1i2tUxg4HmGAAABi8"]
[Sat Aug 29 05:05:44.374822 2026] [security2:error] [pid 1017536:tid 1017672] [client 158.23.184.117:20251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.supermachines.com"] [uri "/.well-known/options.php"] [unique_id "apK9CCJcY4fy7tP-rU3tRgAAAho"]
[Sat Aug 29 05:05:44.387297 2026] [security2:error] [pid 1017536:tid 1017704] [client 68.155.159.216:12138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-admin/images/about.php"] [unique_id "apK9CCJcY4fy7tP-rU3tRwAAAjo"]
[Sat Aug 29 05:05:44.401261 2026] [core:error] [pid 1018003:tid 1018217] [client 74.248.24.12:31575] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:44.401277 2026] [core:error] [pid 1018003:tid 1018217] [client 74.248.24.12:31575] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:44.413978 2026] [security2:error] [pid 1018003:tid 1018170] [client 168.107.94.195:62732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9CDAh5Y1i2tUxg4HmGgAABcs"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:44.418574 2026] [security2:error] [pid 1018003:tid 1018177] [client 158.23.184.117:7308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cairnquartet.strangeworx.com"] [uri "/hehe.php"] [unique_id "apK9CDAh5Y1i2tUxg4HmGwAABdI"]
[Sat Aug 29 05:05:44.445776 2026] [core:error] [pid 1018003:tid 1018205] [client 158.23.184.117:8111] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:44.445793 2026] [core:error] [pid 1018003:tid 1018205] [client 158.23.184.117:8111] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:44.489110 2026] [security2:error] [pid 1017536:tid 1017610] [remote 34.148.90.28:50048] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "hitechgs.com"] [uri "/_image"] [unique_id "apK9CCJcY4fy7tP-rU3tSwACJ0k"]
[Sat Aug 29 05:05:44.490269 2026] [security2:error] [pid 1017536:tid 1017600] [remote 34.148.90.28:50048] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:href. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "/../,ARGS:href"] [severity "CRITICAL"] [hostname "hitechgs.com"] [uri "/_image"] [unique_id "apK9CCJcY4fy7tP-rU3tTAACJz8"]
[Sat Aug 29 05:05:44.519158 2026] [security2:error] [pid 1018003:tid 1018091] [remote 216.73.216.199:53508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 199.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sortthru.com"] [uri "/public_html/Luna-Conference-2013-old/wp-content/mu-plugins/prime-sentinel-tag.php"] [unique_id "apK9CDAh5Y1i2tUxg4HmLAAGNUY"]
[Sat Aug 29 05:05:44.553829 2026] [security2:error] [pid 1017536:tid 1017752] [client 158.23.184.117:20248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.supermachines.com"] [uri "/.well-known/panel.php"] [unique_id "apK9CCJcY4fy7tP-rU3tTgAAAmo"]
[Sat Aug 29 05:05:44.569159 2026] [security2:error] [pid 1017536:tid 1017714] [client 20.196.209.81:17028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-admin/plugins/img/themes/plugins/maintenance.php"] [unique_id "apK9CCJcY4fy7tP-rU3tTwAAAkQ"]
[Sat Aug 29 05:05:44.573860 2026] [security2:error] [pid 1018003:tid 1018261] [client 158.23.147.79:25475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/makeasmtp.php"] [unique_id "apK9CDAh5Y1i2tUxg4HmLgAABiU"]
[Sat Aug 29 05:05:44.591450 2026] [security2:error] [pid 1018003:tid 1018242] [client 158.158.54.35:9410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/bgymj.php"] [unique_id "apK9CDAh5Y1i2tUxg4HmLwAABhI"]
[Sat Aug 29 05:05:44.592324 2026] [security2:error] [pid 1018003:tid 1018180] [client 158.23.184.117:7256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "expressexecs.mikeycunningham.com"] [uri "/wp-admin/about.php"] [unique_id "apK9CDAh5Y1i2tUxg4HmMAAABdU"]
[Sat Aug 29 05:05:44.595296 2026] [security2:error] [pid 1017536:tid 1017712] [client 45.148.10.62:50856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wagnerfarmscbd.com"] [uri "/wp-config.php"] [unique_id "apK9CCJcY4fy7tP-rU3tUAAAAkI"]
[Sat Aug 29 05:05:44.620177 2026] [security2:error] [pid 1017536:tid 1017769] [client 68.155.159.216:57359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/nf_tracking.php"] [unique_id "apK9CCJcY4fy7tP-rU3tUQAAAns"]
[Sat Aug 29 05:05:44.631017 2026] [security2:error] [pid 1017536:tid 1017748] [client 68.155.159.216:14241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK9CCJcY4fy7tP-rU3tUgAAAmY"]
[Sat Aug 29 05:05:44.648346 2026] [security2:error] [pid 1018003:tid 1018203] [client 158.23.184.117:7262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cairnquartet.strangeworx.com"] [uri "/wp-includes/PHPMailer.php"] [unique_id "apK9CDAh5Y1i2tUxg4HmNgAABew"]
[Sat Aug 29 05:05:44.669440 2026] [security2:error] [pid 1018003:tid 1018198] [client 4.205.62.107:21623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/file21.php"] [unique_id "apK9CDAh5Y1i2tUxg4HmOQAABec"]
[Sat Aug 29 05:05:44.677673 2026] [security2:error] [pid 1017536:tid 1017706] [client 87.219.197.128:51366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK9CCJcY4fy7tP-rU3tUwAAAjw"]
[Sat Aug 29 05:05:44.677826 2026] [security2:error] [pid 1017536:tid 1017706] [client 87.219.197.128:51366] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK9CCJcY4fy7tP-rU3tUwAAAjw"]
[Sat Aug 29 05:05:44.701464 2026] [security2:error] [pid 1018003:tid 1018203] [client 158.23.184.117:20285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.supermachines.com"] [uri "/.well-known/pki-validation/mariju.php"] [unique_id "apK9CDAh5Y1i2tUxg4HmOwAABew"]
[Sat Aug 29 05:05:44.716204 2026] [security2:error] [pid 1017536:tid 1017674] [client 4.205.62.107:22233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/sgd.php"] [unique_id "apK9CCJcY4fy7tP-rU3tVQAAAhw"]
[Sat Aug 29 05:05:44.731115 2026] [security2:error] [pid 1017536:tid 1017707] [client 158.23.147.79:24561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/.well-known/content.php"] [unique_id "apK9CCJcY4fy7tP-rU3tVwAAAj0"]
[Sat Aug 29 05:05:44.732562 2026] [security2:error] [pid 1017536:tid 1017719] [client 4.205.62.107:65415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/lala.php"] [unique_id "apK9CCJcY4fy7tP-rU3tWAAAAkk"]
[Sat Aug 29 05:05:44.740056 2026] [security2:error] [pid 1018003:tid 1018244] [client 158.23.184.117:7267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "expressexecs.mikeycunningham.com"] [uri "/wp-content/backup.php"] [unique_id "apK9CDAh5Y1i2tUxg4HmQAAABhQ"]
[Sat Aug 29 05:05:44.741935 2026] [security2:error] [pid 1017536:tid 1017667] [client 68.155.159.216:51248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK9CCJcY4fy7tP-rU3tWQAAAhU"]
[Sat Aug 29 05:05:44.776726 2026] [security2:error] [pid 1018003:tid 1018234] [client 103.185.242.143:60158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK9CDAh5Y1i2tUxg4HmRwAABgo"]
[Sat Aug 29 05:05:44.776843 2026] [security2:error] [pid 1018003:tid 1018234] [client 103.185.242.143:60158] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK9CDAh5Y1i2tUxg4HmRwAABgo"]
[Sat Aug 29 05:05:44.785509 2026] [security2:error] [pid 1018003:tid 1018121] [remote 93.123.109.228:53320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/.env.php"] [unique_id "apK9CDAh5Y1i2tUxg4HmSAAF4WQ"]
[Sat Aug 29 05:05:44.786836 2026] [security2:error] [pid 1017536:tid 1017742] [client 4.205.62.107:3003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/lmfi2.php"] [unique_id "apK9CCJcY4fy7tP-rU3tWwAAAmA"]
[Sat Aug 29 05:05:44.788174 2026] [security2:error] [pid 1018003:tid 1018200] [client 20.196.209.81:12724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/22.php"] [unique_id "apK9CDAh5Y1i2tUxg4HmSQAABek"]
[Sat Aug 29 05:05:44.795020 2026] [security2:error] [pid 1017536:tid 1017726] [client 158.23.184.117:7258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cairnquartet.strangeworx.com"] [uri "/wp-content/upgrade/alfanew.php7"] [unique_id "apK9CCJcY4fy7tP-rU3tXAAAAlA"]
[Sat Aug 29 05:05:44.795443 2026] [security2:error] [pid 1017536:tid 1017733] [client 168.107.94.195:63240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9CCJcY4fy7tP-rU3tXQAAAlc"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:44.803469 2026] [security2:error] [pid 1017536:tid 1017711] [client 34.7.216.49:46352] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "webdisk.bridgewaycentretrust.org"] [uri "/api/graphql"] [unique_id "apK9CCJcY4fy7tP-rU3tXwAAAkE"]
[Sat Aug 29 05:05:44.814737 2026] [security2:error] [pid 1017536:tid 1017789] [client 34.7.216.49:46424] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "webdisk.bridgewaycentretrust.org"] [uri "/.hermes/config.yaml"] [unique_id "apK9CCJcY4fy7tP-rU3tYgAAAo8"]
[Sat Aug 29 05:05:44.819641 2026] [security2:error] [pid 1017536:tid 1017680] [client 34.7.216.49:46476] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "webdisk.bridgewaycentretrust.org"] [uri "/awsConfig.js"] [unique_id "apK9CCJcY4fy7tP-rU3taQAAAiI"]
[Sat Aug 29 05:05:44.850718 2026] [security2:error] [pid 1018003:tid 1018222] [client 4.232.148.111:32292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK9CDAh5Y1i2tUxg4HmXwAABf8"]
[Sat Aug 29 05:05:44.850748 2026] [security2:error] [pid 1018003:tid 1018153] [client 158.23.184.117:20226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.supermachines.com"] [uri "/.well-known/pki-validation/pl.php"] [unique_id "apK9CDAh5Y1i2tUxg4HmXgAABbo"]
[Sat Aug 29 05:05:44.885190 2026] [security2:error] [pid 1018003:tid 1018231] [client 158.23.184.117:7287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "expressexecs.mikeycunningham.com"] [uri "/.well-known/aa.php"] [unique_id "apK9CDAh5Y1i2tUxg4HmYAAABgc"]
[Sat Aug 29 05:05:44.895886 2026] [security2:error] [pid 1017536:tid 1017788] [client 68.155.159.216:51847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/goat.php"] [unique_id "apK9CCJcY4fy7tP-rU3tbwAAAo4"]
[Sat Aug 29 05:05:44.930410 2026] [core:error] [pid 1017536:tid 1017751] [client 74.248.24.12:30412] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:44.930438 2026] [core:error] [pid 1017536:tid 1017751] [client 74.248.24.12:30412] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:44.943714 2026] [security2:error] [pid 1018003:tid 1018223] [client 158.23.184.117:7268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cairnquartet.strangeworx.com"] [uri "/admin/alfa-rex.php"] [unique_id "apK9CDAh5Y1i2tUxg4HmZwAABgA"]
[Sat Aug 29 05:05:44.946120 2026] [security2:error] [pid 1017536:tid 1017745] [client 40.83.93.50:8062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/Js.php"] [unique_id "apK9CCJcY4fy7tP-rU3tcQAAAmM"]
[Sat Aug 29 05:05:44.962665 2026] [security2:error] [pid 1017536:tid 1017716] [client 20.196.209.81:17134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-admin/security.php"] [unique_id "apK9CCJcY4fy7tP-rU3tcgAAAkY"]
[Sat Aug 29 05:05:44.997489 2026] [security2:error] [pid 1018003:tid 1018156] [client 158.23.184.117:57616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.supermachines.com"] [uri "/.well-known/pki-validation/x.php"] [unique_id "apK9CDAh5Y1i2tUxg4HmbAAABb0"]
[Sat Aug 29 05:05:45.025257 2026] [security2:error] [pid 1017536:tid 1017731] [client 158.158.54.35:16694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK9CSJcY4fy7tP-rU3tcwAAAlU"]
[Sat Aug 29 05:05:45.032433 2026] [security2:error] [pid 1018003:tid 1018171] [client 158.23.184.117:53524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "expressexecs.mikeycunningham.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "apK9CTAh5Y1i2tUxg4HmcQAABcw"]
[Sat Aug 29 05:05:45.045291 2026] [security2:error] [pid 1017536:tid 1017710] [client 68.155.159.216:61686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.gavirestaurant.com"] [uri "/wp-content/packed.php"] [unique_id "apK9CSJcY4fy7tP-rU3tdAAAAkA"]
[Sat Aug 29 05:05:45.075207 2026] [security2:error] [pid 1018003:tid 1018151] [client 45.148.10.62:38180] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "mail.wagnerfarmscbd.com"] [uri "/wp-config.php.old"] [unique_id "apK9CTAh5Y1i2tUxg4HmdQAABbg"]
[Sat Aug 29 05:05:45.092840 2026] [security2:error] [pid 1018003:tid 1018269] [client 158.23.184.117:8105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cairnquartet.strangeworx.com"] [uri "/wp-content/export.php"] [unique_id "apK9CTAh5Y1i2tUxg4HmdwAABi0"]
[Sat Aug 29 05:05:45.110710 2026] [security2:error] [pid 1018003:tid 1018251] [client 4.205.62.107:53350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/lala.php"] [unique_id "apK9CTAh5Y1i2tUxg4HmeQAABhs"]
[Sat Aug 29 05:05:45.123532 2026] [security2:error] [pid 1017536:tid 1017780] [client 20.48.251.3:13996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/xmy.php"] [unique_id "apK9CSJcY4fy7tP-rU3tdgAAAoY"]
[Sat Aug 29 05:05:45.143647 2026] [security2:error] [pid 1018003:tid 1018250] [client 158.23.184.117:57611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.supermachines.com"] [uri "/.well-known/pki-validation/xmrlpc.php"] [unique_id "apK9CTAh5Y1i2tUxg4HmfQAABho"]
[Sat Aug 29 05:05:45.150177 2026] [security2:error] [pid 1018003:tid 1018195] [client 20.104.49.130:43622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/new.php"] [unique_id "apK9CTAh5Y1i2tUxg4HmfgAABeQ"]
[Sat Aug 29 05:05:45.176697 2026] [security2:error] [pid 1017536:tid 1017672] [client 168.107.94.195:63635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9CSJcY4fy7tP-rU3teAAAAho"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:45.179028 2026] [security2:error] [pid 1017536:tid 1017713] [client 158.23.184.117:7239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "expressexecs.mikeycunningham.com"] [uri "/wp-content/plugins/alfa-rex.php"] [unique_id "apK9CSJcY4fy7tP-rU3teQAAAkM"]
[Sat Aug 29 05:05:45.215761 2026] [security2:error] [pid 1018003:tid 1018214] [client 20.196.209.81:4494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/bak.phps"] [unique_id "apK9CTAh5Y1i2tUxg4HmhgAABfc"]
[Sat Aug 29 05:05:45.241212 2026] [security2:error] [pid 1017536:tid 1017772] [client 158.23.184.117:53559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cairnquartet.strangeworx.com"] [uri "/new.php"] [unique_id "apK9CSJcY4fy7tP-rU3tegAAAn4"]
[Sat Aug 29 05:05:45.290665 2026] [security2:error] [pid 1017536:tid 1017770] [client 158.23.184.117:57652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.supermachines.com"] [uri "/.well-known/security.php"] [unique_id "apK9CSJcY4fy7tP-rU3tfQAAAnw"]
[Sat Aug 29 05:05:45.308675 2026] [security2:error] [pid 1018003:tid 1018233] [client 158.23.147.79:48239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/radio.php"] [unique_id "apK9CTAh5Y1i2tUxg4HmkAAABgk"]
[Sat Aug 29 05:05:45.311914 2026] [security2:error] [pid 1017536:tid 1017781] [client 68.155.159.216:24452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/file5.php"] [unique_id "apK9CSJcY4fy7tP-rU3tfwAAAoc"]
[Sat Aug 29 05:05:45.313092 2026] [security2:error] [pid 1017536:tid 1017737] [client 4.232.148.111:18098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/num.php"] [unique_id "apK9CSJcY4fy7tP-rU3tgAAAAls"]
[Sat Aug 29 05:05:45.315417 2026] [security2:error] [pid 1017536:tid 1017748] [client 158.23.147.79:30596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-content/themes/too.php"] [unique_id "apK9CSJcY4fy7tP-rU3tgQAAAmY"]
[Sat Aug 29 05:05:45.326092 2026] [core:error] [pid 1018003:tid 1018245] [client 158.23.184.117:53538] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:45.326119 2026] [core:error] [pid 1018003:tid 1018245] [client 158.23.184.117:53538] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:45.360432 2026] [security2:error] [pid 1018003:tid 1018207] [client 158.23.147.79:50128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/wp-admin/network/index.php"] [unique_id "apK9CTAh5Y1i2tUxg4HmmAAABfA"]
[Sat Aug 29 05:05:45.366027 2026] [security2:error] [pid 1017536:tid 1017793] [client 20.196.209.81:17032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK9CSJcY4fy7tP-rU3tiAAAApM"]
[Sat Aug 29 05:05:45.409934 2026] [security2:error] [pid 1017536:tid 1017761] [client 158.23.147.79:30605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/radio.php"] [unique_id "apK9CSJcY4fy7tP-rU3tiwAAAnM"]
[Sat Aug 29 05:05:45.435897 2026] [security2:error] [pid 1017536:tid 1017764] [client 192.145.125.70:51600] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.xqk.etg.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "apK9CSJcY4fy7tP-rU3tjgAAAnY"]
[Sat Aug 29 05:05:45.477807 2026] [security2:error] [pid 1017536:tid 1017694] [client 68.155.159.216:50257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK9CSJcY4fy7tP-rU3tkwAAAjA"]
[Sat Aug 29 05:05:45.482690 2026] [security2:error] [pid 1017536:tid 1017769] [client 40.83.93.50:7775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/access.php"] [unique_id "apK9CSJcY4fy7tP-rU3tlAAAAns"]
[Sat Aug 29 05:05:45.489958 2026] [security2:error] [pid 1018003:tid 1018160] [client 74.248.24.12:27946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "apK9CTAh5Y1i2tUxg4HmpAAABcE"]
[Sat Aug 29 05:05:45.503685 2026] [security2:error] [pid 1017536:tid 1017720] [client 68.155.159.216:12209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK9CSJcY4fy7tP-rU3tlQAAAko"]
[Sat Aug 29 05:05:45.510256 2026] [security2:error] [pid 1018003:tid 1018218] [client 4.205.62.107:64288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/filesystems.php"] [unique_id "apK9CTAh5Y1i2tUxg4HmqAAABfs"]
[Sat Aug 29 05:05:45.557783 2026] [security2:error] [pid 1018003:tid 1018170] [client 168.107.94.195:63994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9CTAh5Y1i2tUxg4HmrAAABcs"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:45.562751 2026] [security2:error] [pid 1018003:tid 1018206] [client 45.148.10.62:38188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wagnerfarmscbd.com"] [uri "/config.php"] [unique_id "apK9CTAh5Y1i2tUxg4HmrQAABe8"]
[Sat Aug 29 05:05:45.617712 2026] [security2:error] [pid 1017536:tid 1017750] [client 20.196.209.81:21098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/install.php"] [unique_id "apK9CSJcY4fy7tP-rU3tlgAAAmg"]
[Sat Aug 29 05:05:45.618799 2026] [security2:error] [pid 1017536:tid 1017703] [client 158.158.54.35:18407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-load.php"] [unique_id "apK9CSJcY4fy7tP-rU3tlwAAAjk"]
[Sat Aug 29 05:05:45.667133 2026] [security2:error] [pid 1017536:tid 1017716] [client 68.155.159.216:18347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9CSJcY4fy7tP-rU3tmAAAAkY"]
[Sat Aug 29 05:05:45.675697 2026] [security2:error] [pid 1018003:tid 1018246] [client 158.23.147.79:25482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK9CTAh5Y1i2tUxg4HmugAABhY"]
[Sat Aug 29 05:05:45.742939 2026] [security2:error] [pid 1017536:tid 1017710] [client 192.145.125.70:51616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.125.145.192.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "cpcalendars.xqk.etg.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "apK9CSJcY4fy7tP-rU3tmQAAAkA"]
[Sat Aug 29 05:05:45.756673 2026] [security2:error] [pid 1017536:tid 1017679] [client 68.155.159.216:58323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/wzy.php"] [unique_id "apK9CSJcY4fy7tP-rU3tmwAAAiE"]
[Sat Aug 29 05:05:45.762405 2026] [security2:error] [pid 1018003:tid 1018058] [remote 93.123.109.228:53320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/.wp-config.php.swp"] [unique_id "apK9CTAh5Y1i2tUxg4HmxQAF4SU"]
[Sat Aug 29 05:05:45.762886 2026] [security2:error] [pid 1017536:tid 1017672] [client 68.155.159.216:14104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/wp-admin/user/index.php"] [unique_id "apK9CSJcY4fy7tP-rU3tnAAAAho"]
[Sat Aug 29 05:05:45.770760 2026] [security2:error] [pid 1017536:tid 1017792] [client 20.196.209.81:17048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-admin/system.php"] [unique_id "apK9CSJcY4fy7tP-rU3tngAAApI"]
[Sat Aug 29 05:05:45.783525 2026] [security2:error] [pid 1018003:tid 1018200] [client 20.48.251.3:14315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/ms-edit.php"] [unique_id "apK9CTAh5Y1i2tUxg4HmyAAABek"]
[Sat Aug 29 05:05:45.820615 2026] [security2:error] [pid 1018003:tid 1018254] [client 4.205.62.107:21592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/wsws.php"] [unique_id "apK9CTAh5Y1i2tUxg4HmzQAABh4"]
[Sat Aug 29 05:05:45.842922 2026] [security2:error] [pid 1018003:tid 1018222] [client 158.23.147.79:24568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/cong.php"] [unique_id "apK9CTAh5Y1i2tUxg4HmzwAABf8"]
[Sat Aug 29 05:05:45.848224 2026] [security2:error] [pid 1018003:tid 1018164] [client 68.155.159.216:51465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-admin/images/about.php"] [unique_id "apK9CTAh5Y1i2tUxg4Hm0QAABcU"]
[Sat Aug 29 05:05:45.853736 2026] [security2:error] [pid 1017536:tid 1017772] [client 4.205.62.107:22338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/gecko-litespeed.php"] [unique_id "apK9CSJcY4fy7tP-rU3toQAAAn4"]
[Sat Aug 29 05:05:45.868994 2026] [security2:error] [pid 1017536:tid 1017681] [client 4.205.62.107:65408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/public/bnn_.php.php"] [unique_id "apK9CSJcY4fy7tP-rU3togAAAiM"]
[Sat Aug 29 05:05:45.919471 2026] [security2:error] [pid 1018003:tid 1018183] [client 34.21.253.104:54310] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "cpanel.replenishink.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK9CTAh5Y1i2tUxg4Hm2gAABdg"]
[Sat Aug 29 05:05:45.934185 2026] [security2:error] [pid 1018003:tid 1018262] [client 34.21.253.104:54236] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cpanel.replenishink.com"] [uri "/@fs/home/ubuntu/.anthropic/config.json"] [unique_id "apK9CTAh5Y1i2tUxg4Hm3gAABiY"]
[Sat Aug 29 05:05:45.941631 2026] [security2:error] [pid 1018003:tid 1018197] [client 4.205.62.107:2524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/aws_sdk_settings.php"] [unique_id "apK9CTAh5Y1i2tUxg4Hm2wAABeY"]
[Sat Aug 29 05:05:45.947447 2026] [security2:error] [pid 1017536:tid 1017667] [client 168.107.94.195:64331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9CSJcY4fy7tP-rU3tqgAAAhU"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:45.953611 2026] [proxy_http:error] [pid 1018003:tid 1018265] (20014)Internal error (specific information not available): [client 34.21.253.104:54326] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:45.954472 2026] [proxy:error] [pid 1018003:tid 1018265] [client 34.21.253.104:54326] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/@vite/env
[Sat Aug 29 05:05:45.960585 2026] [security2:error] [pid 1017536:tid 1017608] [remote 104.219.248.116:33788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 116.248.219.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fellowsofmythgar.com"] [uri "/wp-login.php"] [unique_id "apK9CSJcY4fy7tP-rU3trAACf0c"]
[Sat Aug 29 05:05:45.961579 2026] [security2:error] [pid 1018003:tid 1018090] [remote 104.219.248.116:33798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 116.248.219.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fellowsofmythgar.com"] [uri "/wp-login.php"] [unique_id "apK9CTAh5Y1i2tUxg4Hm4wAGIkU"]
[Sat Aug 29 05:05:45.964013 2026] [proxy_http:error] [pid 1017536:tid 1017780] (20014)Internal error (specific information not available): [client 34.21.253.104:54276] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:45.964024 2026] [proxy:error] [pid 1017536:tid 1017780] [client 34.21.253.104:54276] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/@fs/home/ubuntu/.openai/config.json
[Sat Aug 29 05:05:45.966205 2026] [security2:error] [pid 1018003:tid 1018095] [remote 104.219.248.116:33792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 116.248.219.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fellowsofmythgar.com"] [uri "/wp-login.php"] [unique_id "apK9CTAh5Y1i2tUxg4Hm5QAGAEo"]
[Sat Aug 29 05:05:45.966403 2026] [security2:error] [pid 1018003:tid 1018085] [remote 104.219.248.116:33800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 116.248.219.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fellowsofmythgar.com"] [uri "/wp-login.php"] [unique_id "apK9CTAh5Y1i2tUxg4Hm5AAFx0A"]
[Sat Aug 29 05:05:45.969730 2026] [security2:error] [pid 1017536:tid 1017646] [remote 104.219.248.116:33802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 116.248.219.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fellowsofmythgar.com"] [uri "/wp-login.php"] [unique_id "apK9CSJcY4fy7tP-rU3trgACPW0"]
[Sat Aug 29 05:05:45.975908 2026] [proxy_http:error] [pid 1018003:tid 1018265] (20014)Internal error (specific information not available): [client 34.21.253.104:54326] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:45.975923 2026] [proxy:error] [pid 1018003:tid 1018265] [client 34.21.253.104:54326] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/502.shtml
[Sat Aug 29 05:05:46.018537 2026] [security2:error] [pid 1018003:tid 1018162] [client 20.196.209.81:11429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/colour.php"] [unique_id "apK9CjAh5Y1i2tUxg4Hm8gAABcM"]
[Sat Aug 29 05:05:46.042242 2026] [security2:error] [pid 1017536:tid 1017626] [remote 104.219.248.116:33814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 116.248.219.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fellowsofmythgar.com"] [uri "/wp-login.php"] [unique_id "apK9CiJcY4fy7tP-rU3tsgACe1k"]
[Sat Aug 29 05:05:46.042245 2026] [security2:error] [pid 1017536:tid 1017577] [remote 104.219.248.116:33828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 116.248.219.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fellowsofmythgar.com"] [uri "/wp-login.php"] [unique_id "apK9CiJcY4fy7tP-rU3tswACRSg"]
[Sat Aug 29 05:05:46.042452 2026] [security2:error] [pid 1018003:tid 1018042] [remote 104.219.248.116:33844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 116.248.219.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fellowsofmythgar.com"] [uri "/wp-login.php"] [unique_id "apK9CjAh5Y1i2tUxg4Hm9AAGBBU"]
[Sat Aug 29 05:05:46.057726 2026] [security2:error] [pid 1017536:tid 1017785] [client 45.148.10.62:38200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wagnerfarmscbd.com"] [uri "/config.php.bak"] [unique_id "apK9CiJcY4fy7tP-rU3ttQAAAos"]
[Sat Aug 29 05:05:46.080336 2026] [security2:error] [pid 1018003:tid 1018181] [client 74.248.24.12:23808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "apK9CjAh5Y1i2tUxg4Hm-AAABdY"]
[Sat Aug 29 05:05:46.107239 2026] [security2:error] [pid 1017536:tid 1017747] [client 40.83.93.50:7766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/classsmtps.php"] [unique_id "apK9CiJcY4fy7tP-rU3ttgAAAmU"]
[Sat Aug 29 05:05:46.108302 2026] [security2:error] [pid 1017536:tid 1017703] [client 4.232.148.111:24958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "apK9CiJcY4fy7tP-rU3ttwAAAjk"]
[Sat Aug 29 05:05:46.134009 2026] [security2:error] [pid 1017536:tid 1017716] [client 20.48.251.3:13992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/sys.php"] [unique_id "apK9CiJcY4fy7tP-rU3tuQAAAkY"]
[Sat Aug 29 05:05:46.171784 2026] [security2:error] [pid 1017536:tid 1017760] [client 20.196.209.81:18751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-admin/test.php"] [unique_id "apK9CiJcY4fy7tP-rU3tuwAAAnI"]
[Sat Aug 29 05:05:46.201437 2026] [security2:error] [pid 1018003:tid 1018179] [client 158.158.54.35:15927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/a.php"] [unique_id "apK9CjAh5Y1i2tUxg4HnAQAABdQ"]
[Sat Aug 29 05:05:46.206339 2026] [security2:error] [pid 1017536:tid 1017719] [client 192.145.125.70:51622] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.xqk.etg.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "apK9CiJcY4fy7tP-rU3tvAAAAkk"]
[Sat Aug 29 05:05:46.215215 2026] [security2:error] [pid 1018003:tid 1018269] [client 129.121.86.192:43172] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "roycehomesales.com"] [uri "/.env"] [unique_id "apK9CjAh5Y1i2tUxg4HnBAAABi0"]
[Sat Aug 29 05:05:46.271008 2026] [security2:error] [pid 1018003:tid 1018264] [client 4.205.62.107:55953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9CjAh5Y1i2tUxg4HnDQAABig"]
[Sat Aug 29 05:05:46.274765 2026] [security2:error] [pid 1017536:tid 1017746] [client 4.205.62.107:8987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/sdsa.php"] [unique_id "apK9CiJcY4fy7tP-rU3txAAAAmQ"]
[Sat Aug 29 05:05:46.275915 2026] [security2:error] [pid 1017536:tid 1017689] [client 34.143.179.161:39968] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.harnessenergyusa.com"] [uri "/wp-config.php.bak"] [unique_id "apK9CiJcY4fy7tP-rU3txQAAAis"]
[Sat Aug 29 05:05:46.278551 2026] [security2:error] [pid 1017536:tid 1017750] [client 34.143.179.161:39984] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.harnessenergyusa.com"] [uri "/wp-config.php.old"] [unique_id "apK9CiJcY4fy7tP-rU3tyQAAAmg"]
[Sat Aug 29 05:05:46.288458 2026] [security2:error] [pid 1017536:tid 1017704] [client 128.140.106.114:56692] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.wticalumni.com"] [uri "/"] [unique_id "apK9CiJcY4fy7tP-rU3tygAAAjo"], referer: http://www.wticalumni.com
[Sat Aug 29 05:05:46.289940 2026] [security2:error] [pid 1017536:tid 1017788] [client 34.143.179.161:39964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 161.179.143.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harnessenergyusa.com"] [uri "/wp-config.php"] [unique_id "apK9CiJcY4fy7tP-rU3tyAAAAo4"]
[Sat Aug 29 05:05:46.290077 2026] [security2:error] [pid 1017536:tid 1017788] [client 34.143.179.161:39964] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "409"] [hostname "cpcontacts.harnessenergyusa.com"] [uri "/wp-config.php"] [unique_id "apK9CiJcY4fy7tP-rU3tyAAAAo4"]
[Sat Aug 29 05:05:46.297815 2026] [security2:error] [pid 1017536:tid 1017792] [client 20.48.251.3:33290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/phpsysinfo.php"] [unique_id "apK9CiJcY4fy7tP-rU3tzAAAApI"]
[Sat Aug 29 05:05:46.301175 2026] [security2:error] [pid 1017536:tid 1017705] [client 34.143.179.161:40000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 161.179.143.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harnessenergyusa.com"] [uri "/config.php.bak"] [unique_id "apK9CiJcY4fy7tP-rU3tzQAAAjs"]
[Sat Aug 29 05:05:46.303466 2026] [security2:error] [pid 1017536:tid 1017745] [client 34.143.179.161:39994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 161.179.143.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harnessenergyusa.com"] [uri "/config.php"] [unique_id "apK9CiJcY4fy7tP-rU3tywAAAmM"]
[Sat Aug 29 05:05:46.321450 2026] [security2:error] [pid 1018003:tid 1018115] [remote 93.123.109.228:53320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK9CjAh5Y1i2tUxg4HnEAAGNl4"]
[Sat Aug 29 05:05:46.327252 2026] [security2:error] [pid 1018003:tid 1018213] [client 168.107.94.195:64762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9CjAh5Y1i2tUxg4HnEgAABfY"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:46.368477 2026] [security2:error] [pid 1017536:tid 1017757] [client 34.143.179.161:40022] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "cpcontacts.harnessenergyusa.com"] [uri "/config/secrets.yml"] [unique_id "apK9CiJcY4fy7tP-rU3tzwAAAm8"]
[Sat Aug 29 05:05:46.405205 2026] [security2:error] [pid 1017536:tid 1017712] [client 20.104.49.130:57661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/v2.php"] [unique_id "apK9CiJcY4fy7tP-rU3t0AAAAkI"]
[Sat Aug 29 05:05:46.412827 2026] [security2:error] [pid 1018003:tid 1018182] [client 68.155.159.216:24519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/file88.php"] [unique_id "apK9CjAh5Y1i2tUxg4HnGwAABdc"]
[Sat Aug 29 05:05:46.414023 2026] [security2:error] [pid 1017536:tid 1017770] [client 158.23.147.79:48260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK9CiJcY4fy7tP-rU3t0QAAAnw"]
[Sat Aug 29 05:05:46.434080 2026] [security2:error] [pid 1017536:tid 1017744] [client 20.196.209.81:4483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/OK.php"] [unique_id "apK9CiJcY4fy7tP-rU3t0gAAAmI"]
[Sat Aug 29 05:05:46.453155 2026] [security2:error] [pid 1017536:tid 1017777] [client 158.23.147.79:30601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK9CiJcY4fy7tP-rU3t0wAAAoM"]
[Sat Aug 29 05:05:46.482567 2026] [security2:error] [pid 1017536:tid 1017669] [client 158.23.147.79:50157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK9CiJcY4fy7tP-rU3t1AAAAhc"]
[Sat Aug 29 05:05:46.524871 2026] [security2:error] [pid 1018003:tid 1018152] [client 158.23.147.79:30700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/makeasmtp.php"] [unique_id "apK9CjAh5Y1i2tUxg4HnJgAABbk"]
[Sat Aug 29 05:05:46.524928 2026] [security2:error] [pid 1018003:tid 1018140] [remote 93.123.109.228:53320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/admin/phpinfo.php"] [unique_id "apK9CjAh5Y1i2tUxg4HnJwAGNnc"]
[Sat Aug 29 05:05:46.541863 2026] [security2:error] [pid 1018003:tid 1018245] [client 192.145.125.70:51624] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.xqk.etg.mybluehost.me"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "apK9CjAh5Y1i2tUxg4HnKQAABhU"]
[Sat Aug 29 05:05:46.557894 2026] [security2:error] [pid 1018003:tid 1018141] [remote 93.123.109.228:53320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/admin_phpinfo.php"] [unique_id "apK9CjAh5Y1i2tUxg4HnKwAF33g"]
[Sat Aug 29 05:05:46.580828 2026] [security2:error] [pid 1018003:tid 1018252] [client 68.155.159.216:50234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/classwithtostring.php"] [unique_id "apK9CjAh5Y1i2tUxg4HnLwAABhw"]
[Sat Aug 29 05:05:46.593778 2026] [security2:error] [pid 1018003:tid 1018173] [client 4.232.148.111:18063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "apK9CjAh5Y1i2tUxg4HnMAAABc4"]
[Sat Aug 29 05:05:46.595335 2026] [security2:error] [pid 1018003:tid 1018225] [client 40.83.93.50:8033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/contentloader1.php"] [unique_id "apK9CjAh5Y1i2tUxg4HnMQAABgI"]
[Sat Aug 29 05:05:46.631160 2026] [security2:error] [pid 1017536:tid 1017761] [client 74.248.24.12:5274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/gifclass.php"] [unique_id "apK9CiJcY4fy7tP-rU3t1gAAAnM"]
[Sat Aug 29 05:05:46.645211 2026] [security2:error] [pid 1017536:tid 1017780] [client 158.158.54.35:9460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/u.php"] [unique_id "apK9CiJcY4fy7tP-rU3t1wAAAoY"]
[Sat Aug 29 05:05:46.674724 2026] [security2:error] [pid 1017536:tid 1017765] [client 20.104.49.130:43026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.scubaetcfl.com"] [uri "/press.php"] [unique_id "apK9CiJcY4fy7tP-rU3t2AAAAnc"]
[Sat Aug 29 05:05:46.707063 2026] [security2:error] [pid 1017536:tid 1017709] [client 168.107.94.195:65136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9CiJcY4fy7tP-rU3t2wAAAj8"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:46.708830 2026] [security2:error] [pid 1017536:tid 1017720] [client 20.196.209.81:17136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-admin/user/f35.php"] [unique_id "apK9CiJcY4fy7tP-rU3t3AAAAko"]
[Sat Aug 29 05:05:46.714106 2026] [security2:error] [pid 1017536:tid 1017674] [client 20.48.251.3:14023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/fleen.php"] [unique_id "apK9CiJcY4fy7tP-rU3t3wAAAhw"]
[Sat Aug 29 05:05:46.720716 2026] [security2:error] [pid 1018003:tid 1018170] [client 4.205.62.107:64279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/tax.php"] [unique_id "apK9CjAh5Y1i2tUxg4HnRwAABcs"]
[Sat Aug 29 05:05:46.728163 2026] [security2:error] [pid 1018003:tid 1018135] [remote 93.123.109.228:53320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/api/info.php"] [unique_id "apK9CjAh5Y1i2tUxg4HnSAAF33I"]
[Sat Aug 29 05:05:46.755258 2026] [security2:error] [pid 1018003:tid 1018174] [client 128.140.106.114:17932] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.wticalumni.com"] [uri "/index.htm"] [unique_id "apK9CjAh5Y1i2tUxg4HnSQAABc8"], referer: http://www.wticalumni.com
[Sat Aug 29 05:05:46.756103 2026] [security2:error] [pid 1017536:tid 1017711] [client 68.155.159.216:12171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-admin.php"] [unique_id "apK9CiJcY4fy7tP-rU3t5gAAAkE"]
[Sat Aug 29 05:05:46.769614 2026] [security2:error] [pid 1017536:tid 1017693] [client 20.48.250.41:23476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/num.php"] [unique_id "apK9CiJcY4fy7tP-rU3t6AAAAi8"]
[Sat Aug 29 05:05:46.780464 2026] [security2:error] [pid 1017536:tid 1017690] [client 158.23.147.79:25571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK9CiJcY4fy7tP-rU3t6QAAAiw"]
[Sat Aug 29 05:05:46.813593 2026] [security2:error] [pid 1018003:tid 1018036] [remote 93.123.109.228:53320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/api/phpinfo.php"] [unique_id "apK9CjAh5Y1i2tUxg4HnTwAF4g8"]
[Sat Aug 29 05:05:46.842689 2026] [security2:error] [pid 1017536:tid 1017719] [client 192.145.125.70:51630] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.xqk.etg.mybluehost.me"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "apK9CiJcY4fy7tP-rU3t7gAAAkk"]
[Sat Aug 29 05:05:46.842875 2026] [security2:error] [pid 1017536:tid 1017785] [client 20.196.209.81:11436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dickieberrycoaching.glowt-shirt.com"] [uri "/aaa.php"] [unique_id "apK9CiJcY4fy7tP-rU3t7wAAAos"]
[Sat Aug 29 05:05:46.847423 2026] [security2:error] [pid 1018003:tid 1018242] [client 68.155.159.216:18237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9CjAh5Y1i2tUxg4HnVQAABhI"]
[Sat Aug 29 05:05:46.858086 2026] [security2:error] [pid 1018003:tid 1018248] [client 20.48.250.41:26917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/zu.php"] [unique_id "apK9CjAh5Y1i2tUxg4HnVwAABhg"]
[Sat Aug 29 05:05:46.870248 2026] [security2:error] [pid 1018003:tid 1018203] [client 68.155.159.216:14140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/wp-includes/plugins.php"] [unique_id "apK9CjAh5Y1i2tUxg4HnWgAABew"]
[Sat Aug 29 05:05:46.874903 2026] [security2:error] [pid 1018003:tid 1018185] [client 68.155.159.216:58282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK9CjAh5Y1i2tUxg4HnWwAABdo"]
[Sat Aug 29 05:05:46.919167 2026] [security2:error] [pid 1017536:tid 1017726] [client 20.104.49.130:60934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/222.php"] [unique_id "apK9CiJcY4fy7tP-rU3t-wAAAlA"]
[Sat Aug 29 05:05:46.926339 2026] [security2:error] [pid 1017536:tid 1017743] [client 20.48.251.3:14008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/upload.form.php"] [unique_id "apK9CiJcY4fy7tP-rU3t_AAAAmE"]
[Sat Aug 29 05:05:46.927155 2026] [security2:error] [pid 1017536:tid 1017708] [client 20.48.250.41:23477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/a4.php"] [unique_id "apK9CiJcY4fy7tP-rU3t_QAAAj4"]
[Sat Aug 29 05:05:46.961684 2026] [security2:error] [pid 1017536:tid 1017772] [client 4.205.62.107:22333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/ebahvhhh.php"] [unique_id "apK9CiJcY4fy7tP-rU3t_gAAAn4"]
[Sat Aug 29 05:05:46.965994 2026] [security2:error] [pid 1017536:tid 1017782] [client 158.23.147.79:24436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-includes/js/index.php"] [unique_id "apK9CiJcY4fy7tP-rU3t_wAAAog"]
[Sat Aug 29 05:05:46.998085 2026] [security2:error] [pid 1017536:tid 1017722] [client 4.205.62.107:21917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/motu.php"] [unique_id "apK9CiJcY4fy7tP-rU3uAAAAAkw"]
[Sat Aug 29 05:05:47.001688 2026] [security2:error] [pid 1018003:tid 1018240] [client 4.205.62.107:65418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/wsws.php"] [unique_id "apK9CjAh5Y1i2tUxg4HnagAABhA"]
[Sat Aug 29 05:05:47.005487 2026] [security2:error] [pid 1017536:tid 1017667] [client 20.48.250.41:27538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/lanka.php"] [unique_id "apK9CyJcY4fy7tP-rU3uAQAAAhU"]
[Sat Aug 29 05:05:47.040228 2026] [security2:error] [pid 1017536:tid 1017707] [client 68.155.159.216:51845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK9CyJcY4fy7tP-rU3uBAAAAj0"]
[Sat Aug 29 05:05:47.057823 2026] [security2:error] [pid 1017536:tid 1017754] [client 4.232.148.111:24944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/gifclass.php"] [unique_id "apK9CyJcY4fy7tP-rU3uBgAAAmw"]
[Sat Aug 29 05:05:47.078945 2026] [security2:error] [pid 1018003:tid 1018183] [client 4.205.62.107:2505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/mga.php"] [unique_id "apK9CzAh5Y1i2tUxg4HncQAABdg"]
[Sat Aug 29 05:05:47.093963 2026] [security2:error] [pid 1017536:tid 1017670] [client 158.158.54.35:22941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/r.php"] [unique_id "apK9CyJcY4fy7tP-rU3uBwAAAhg"]
[Sat Aug 29 05:05:47.103135 2026] [security2:error] [pid 1017536:tid 1017681] [client 20.196.209.81:18717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-admin/user/min.php"] [unique_id "apK9CyJcY4fy7tP-rU3uCAAAAiM"]
[Sat Aug 29 05:05:47.106016 2026] [security2:error] [pid 1017536:tid 1017688] [client 168.107.94.195:65519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9CyJcY4fy7tP-rU3uCQAAAio"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:47.108073 2026] [security2:error] [pid 1018003:tid 1018162] [client 20.48.250.41:23525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/tfm.php"] [unique_id "apK9CzAh5Y1i2tUxg4HncwAABcM"]
[Sat Aug 29 05:05:47.141969 2026] [security2:error] [pid 1017536:tid 1017770] [client 40.83.93.50:3166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/al.php"] [unique_id "apK9CyJcY4fy7tP-rU3uCwAAAnw"]
[Sat Aug 29 05:05:47.142862 2026] [security2:error] [pid 1018003:tid 1018209] [client 20.48.250.41:27402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/gettest.php"] [unique_id "apK9CzAh5Y1i2tUxg4HndgAABfI"]
[Sat Aug 29 05:05:47.147451 2026] [security2:error] [pid 1017536:tid 1017764] [client 68.155.159.216:64204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.gavirestaurant.com"] [uri "/wp-l0gin.php"] [unique_id "apK9CyJcY4fy7tP-rU3uDAAAAnY"]
[Sat Aug 29 05:05:47.149323 2026] [security2:error] [pid 1017536:tid 1017711] [client 192.145.125.70:51642] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.xqk.etg.mybluehost.me"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "apK9CyJcY4fy7tP-rU3uDQAAAkE"]
[Sat Aug 29 05:05:47.179639 2026] [core:error] [pid 1018003:tid 1018164] [client 74.248.24.12:31601] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:47.179656 2026] [core:error] [pid 1018003:tid 1018164] [client 74.248.24.12:31601] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:47.192031 2026] [security2:error] [pid 1018003:tid 1018273] [client 45.148.10.62:38204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wagnerfarmscbd.com"] [uri "/phpinfo.php"] [unique_id "apK9CzAh5Y1i2tUxg4HnfAAABjE"]
[Sat Aug 29 05:05:47.202588 2026] [security2:error] [pid 1018003:tid 1018181] [client 20.48.251.3:33338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/aws_auth.php"] [unique_id "apK9CzAh5Y1i2tUxg4HnfQAABdY"]
[Sat Aug 29 05:05:47.219129 2026] [security2:error] [pid 1018003:tid 1018224] [client 34.7.40.70:37158] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK9CzAh5Y1i2tUxg4HnfwAABgE"]
[Sat Aug 29 05:05:47.220596 2026] [security2:error] [pid 1018003:tid 1018192] [client 34.7.40.70:37116] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/@fs/.env"] [unique_id "apK9CzAh5Y1i2tUxg4HngAAABeE"]
[Sat Aug 29 05:05:47.221669 2026] [security2:error] [pid 1018003:tid 1018198] [client 34.7.40.70:37180] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2fapp/.env"] [unique_id "apK9CzAh5Y1i2tUxg4HngQAABec"]
[Sat Aug 29 05:05:47.221754 2026] [security2:error] [pid 1018003:tid 1018198] [client 34.7.40.70:37180] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2fapp/.env"] [unique_id "apK9CzAh5Y1i2tUxg4HngQAABec"]
[Sat Aug 29 05:05:47.223902 2026] [security2:error] [pid 1017536:tid 1017692] [client 34.7.40.70:37148] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/@fs/app/.env"] [unique_id "apK9CyJcY4fy7tP-rU3uDwAAAi4"]
[Sat Aug 29 05:05:47.224583 2026] [cgid:error] [pid 1017536:tid 1017685] [client 34.7.40.70:37170] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:47.226888 2026] [cgid:error] [pid 1017536:tid 1017753] [client 34.7.40.70:37278] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:47.227476 2026] [security2:error] [pid 1018003:tid 1018258] [client 34.7.40.70:37200] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ"] [unique_id "apK9CzAh5Y1i2tUxg4HngwAABiI"]
[Sat Aug 29 05:05:47.228304 2026] [security2:error] [pid 1017536:tid 1017716] [client 20.104.49.130:57532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/reop3.php"] [unique_id "apK9CyJcY4fy7tP-rU3uFAAAAkY"]
[Sat Aug 29 05:05:47.228842 2026] [security2:error] [pid 1018003:tid 1018262] [client 34.7.40.70:37132] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/@fs/root/.env"] [unique_id "apK9CzAh5Y1i2tUxg4HnhgAABiY"]
[Sat Aug 29 05:05:47.231212 2026] [cgid:error] [pid 1018003:tid 1018155] [client 34.7.40.70:37344] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:47.231221 2026] [security2:error] [pid 1018003:tid 1018166] [client 34.7.40.70:37182] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/.env"] [unique_id "apK9CzAh5Y1i2tUxg4HnjQAABcc"]
[Sat Aug 29 05:05:47.231248 2026] [cgid:error] [pid 1017536:tid 1017793] [client 34.7.40.70:37254] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:47.231292 2026] [cgid:error] [pid 1018003:tid 1018244] [client 34.7.40.70:37364] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:47.231321 2026] [security2:error] [pid 1018003:tid 1018166] [client 34.7.40.70:37182] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/.env"] [unique_id "apK9CzAh5Y1i2tUxg4HnjQAABcc"]
[Sat Aug 29 05:05:47.231681 2026] [security2:error] [pid 1018003:tid 1018186] [client 34.7.40.70:37130] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/@fs/src/.env"] [unique_id "apK9CzAh5Y1i2tUxg4HnjAAABds"]
[Sat Aug 29 05:05:47.231831 2026] [security2:error] [pid 1017536:tid 1017780] [client 34.7.40.70:37282] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/@fs/root/.aws/credentials.backup"] [unique_id "apK9CyJcY4fy7tP-rU3uFQAAAoY"]
[Sat Aug 29 05:05:47.231851 2026] [cgid:error] [pid 1017536:tid 1017790] [client 34.7.40.70:37292] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:47.232013 2026] [security2:error] [pid 1017536:tid 1017709] [client 34.7.40.70:37306] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/@fs/root/.aws/credentials.bak"] [unique_id "apK9CyJcY4fy7tP-rU3uFgAAAj8"]
[Sat Aug 29 05:05:47.232099 2026] [security2:error] [pid 1017536:tid 1017709] [client 34.7.40.70:37306] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/@fs/root/.aws/credentials.bak"] [unique_id "apK9CyJcY4fy7tP-rU3uFgAAAj8"]
[Sat Aug 29 05:05:47.233414 2026] [cgid:error] [pid 1017536:tid 1017725] [client 34.7.40.70:37324] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:47.234026 2026] [cgid:error] [pid 1017536:tid 1017761] [client 34.7.40.70:37212] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:47.234042 2026] [cgid:error] [pid 1018003:tid 1018223] [client 34.7.40.70:37242] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:47.234092 2026] [cgid:error] [pid 1018003:tid 1018234] [client 34.7.40.70:37392] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:47.234095 2026] [cgid:error] [pid 1017536:tid 1017720] [client 34.7.40.70:37378] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:47.234419 2026] [security2:error] [pid 1017536:tid 1017720] [client 34.7.40.70:37378] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/404.shtml"] [unique_id "apK9CyJcY4fy7tP-rU3uGAAAAko"]
[Sat Aug 29 05:05:47.234438 2026] [cgid:error] [pid 1018003:tid 1018196] [client 34.7.40.70:37322] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:47.234527 2026] [cgid:error] [pid 1018003:tid 1018161] [client 34.7.40.70:37252] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:47.234538 2026] [security2:error] [pid 1018003:tid 1018196] [client 34.7.40.70:37322] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/404.shtml"] [unique_id "apK9CzAh5Y1i2tUxg4HnjgAABeU"]
[Sat Aug 29 05:05:47.234716 2026] [cgid:error] [pid 1017536:tid 1017674] [client 34.7.40.70:37312] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:47.234783 2026] [security2:error] [pid 1017536:tid 1017674] [client 34.7.40.70:37312] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/404.shtml"] [unique_id "apK9CyJcY4fy7tP-rU3uGQAAAhw"]
[Sat Aug 29 05:05:47.235522 2026] [core:error] [pid 1018003:tid 1018239] [client 34.7.40.70:37194] AH10244: invalid URI path (/@fs/../../.env?raw??)
[Sat Aug 29 05:05:47.235729 2026] [security2:error] [pid 1018003:tid 1018197] [client 34.7.40.70:37202] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2froot/.env"] [unique_id "apK9CzAh5Y1i2tUxg4HnkwAABeY"]
[Sat Aug 29 05:05:47.235915 2026] [cgid:error] [pid 1018003:tid 1018194] [client 34.7.40.70:37340] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:47.236785 2026] [security2:error] [pid 1018003:tid 1018239] [client 34.7.40.70:37194] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/400.shtml"] [unique_id "apK9CzAh5Y1i2tUxg4HnlAAABg8"]
[Sat Aug 29 05:05:47.237152 2026] [cgid:error] [pid 1018003:tid 1018265] [client 34.7.40.70:37320] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:47.237695 2026] [cgid:error] [pid 1018003:tid 1018274] [client 34.7.40.70:37228] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:47.238667 2026] [cgid:error] [pid 1018003:tid 1018156] [client 34.7.40.70:37348] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:47.238667 2026] [cgid:error] [pid 1018003:tid 1018226] [client 34.7.40.70:37206] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:47.239160 2026] [cgid:error] [pid 1018003:tid 1018175] [client 34.7.40.70:37386] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:47.255488 2026] [security2:error] [pid 1017536:tid 1017783] [client 20.48.250.41:23396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/Geforce.php"] [unique_id "apK9CyJcY4fy7tP-rU3uGgAAAok"]
[Sat Aug 29 05:05:47.272023 2026] [security2:error] [pid 1018003:tid 1018269] [client 20.48.250.41:26937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/35.php"] [unique_id "apK9CzAh5Y1i2tUxg4HnmAAABi0"]
[Sat Aug 29 05:05:47.406128 2026] [security2:error] [pid 1017536:tid 1017704] [client 20.48.250.41:23529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/click.php"] [unique_id "apK9CyJcY4fy7tP-rU3uGwAAAjo"]
[Sat Aug 29 05:05:47.406747 2026] [security2:error] [pid 1017536:tid 1017726] [client 4.205.62.107:55952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9CyJcY4fy7tP-rU3uHAAAAlA"]
[Sat Aug 29 05:05:47.425186 2026] [security2:error] [pid 1017536:tid 1017743] [client 4.205.62.107:53355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/bengi.php"] [unique_id "apK9CyJcY4fy7tP-rU3uHQAAAmE"]
[Sat Aug 29 05:05:47.446251 2026] [security2:error] [pid 1017536:tid 1017708] [client 192.145.125.70:51658] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.xqk.etg.mybluehost.me"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "apK9CyJcY4fy7tP-rU3uHgAAAj4"]
[Sat Aug 29 05:05:47.485256 2026] [security2:error] [pid 1017536:tid 1017757] [client 168.107.94.195:49472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9CyJcY4fy7tP-rU3uIgAAAm8"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:47.516094 2026] [security2:error] [pid 1017536:tid 1017746] [client 20.196.209.81:17033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-admin/users.php"] [unique_id "apK9CyJcY4fy7tP-rU3uIwAAAmQ"]
[Sat Aug 29 05:05:47.518353 2026] [security2:error] [pid 1017536:tid 1017694] [client 20.104.104.62:39068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goll.net"] [uri "/term.php"] [unique_id "apK9CyJcY4fy7tP-rU3uJAAAAjA"]
[Sat Aug 29 05:05:47.519443 2026] [security2:error] [pid 1018003:tid 1018182] [client 68.155.159.216:24566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/NewFile.php/"] [unique_id "apK9CzAh5Y1i2tUxg4HnsgAABdc"]
[Sat Aug 29 05:05:47.535117 2026] [security2:error] [pid 1017536:tid 1017755] [client 35.198.240.194:31122] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/public/.env"] [unique_id "apK9CyJcY4fy7tP-rU3uJQAAAm0"]
[Sat Aug 29 05:05:47.537857 2026] [security2:error] [pid 1017536:tid 1017745] [client 158.158.54.35:16653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-blog.php"] [unique_id "apK9CyJcY4fy7tP-rU3uKQAAAmM"]
[Sat Aug 29 05:05:47.538583 2026] [security2:error] [pid 1017536:tid 1017781] [client 158.23.147.79:48300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/makeasmtp.php"] [unique_id "apK9CyJcY4fy7tP-rU3uKgAAAoc"]
[Sat Aug 29 05:05:47.544066 2026] [security2:error] [pid 1018003:tid 1018216] [client 216.73.161.161:25999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 161.161.73.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.darwinsfox.com"] [uri "/wp-login.php"] [unique_id "apK9CzAh5Y1i2tUxg4HnsQAABfk"]
[Sat Aug 29 05:05:47.546857 2026] [security2:error] [pid 1017536:tid 1017781] [client 35.198.240.194:31162] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/.github/.env"] [unique_id "apK9CyJcY4fy7tP-rU3uLAAAAoc"]
[Sat Aug 29 05:05:47.548167 2026] [security2:error] [pid 1017536:tid 1017722] [client 35.198.240.194:31250] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.omni-staffing.com"] [uri "/cgi-sys/404.html"] [unique_id "apK9CyJcY4fy7tP-rU3uLwAAAkw"]
[Sat Aug 29 05:05:47.571182 2026] [security2:error] [pid 1018003:tid 1018233] [client 20.48.250.41:26941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/maraz.php"] [unique_id "apK9CzAh5Y1i2tUxg4HnvwAABgk"]
[Sat Aug 29 05:05:47.575350 2026] [security2:error] [pid 1018003:tid 1018252] [client 158.23.147.79:30717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK9CzAh5Y1i2tUxg4HnwAAABhw"]
[Sat Aug 29 05:05:47.603863 2026] [security2:error] [pid 1018003:tid 1018225] [client 20.48.251.3:33292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/php-details.php"] [unique_id "apK9CzAh5Y1i2tUxg4HnwQAABgI"]
[Sat Aug 29 05:05:47.618788 2026] [security2:error] [pid 1018003:tid 1018199] [client 20.48.250.41:23447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/ms.php"] [unique_id "apK9CzAh5Y1i2tUxg4HnwgAABeg"]
[Sat Aug 29 05:05:47.633047 2026] [security2:error] [pid 1017536:tid 1017788] [client 40.83.93.50:3146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/global.php"] [unique_id "apK9CyJcY4fy7tP-rU3uMgAAAo4"]
[Sat Aug 29 05:05:47.637503 2026] [security2:error] [pid 1017536:tid 1017776] [client 158.23.147.79:30712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK9CyJcY4fy7tP-rU3uMwAAAoI"]
[Sat Aug 29 05:05:47.649107 2026] [security2:error] [pid 1018003:tid 1018217] [client 158.23.147.79:50082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/.well-knownold/index.php"] [unique_id "apK9CzAh5Y1i2tUxg4HnxQAABfo"]
[Sat Aug 29 05:05:47.685984 2026] [security2:error] [pid 1018003:tid 1018271] [client 4.232.148.111:32294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK9CzAh5Y1i2tUxg4HnygAABi8"]
[Sat Aug 29 05:05:47.713406 2026] [security2:error] [pid 1018003:tid 1018276] [client 20.104.104.62:39102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goll.net"] [uri "/ms-edit.php"] [unique_id "apK9CzAh5Y1i2tUxg4HnzQAABjQ"]
[Sat Aug 29 05:05:47.718352 2026] [security2:error] [pid 1017536:tid 1017714] [client 74.248.24.12:8999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK9CyJcY4fy7tP-rU3uNAAAAkQ"]
[Sat Aug 29 05:05:47.720634 2026] [security2:error] [pid 1018003:tid 1018150] [client 20.48.250.41:27573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/kbfr.php"] [unique_id "apK9CzAh5Y1i2tUxg4HnzwAABbc"]
[Sat Aug 29 05:05:47.742417 2026] [security2:error] [pid 1018003:tid 1018205] [client 192.145.125.70:51672] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.xqk.etg.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "apK9CzAh5Y1i2tUxg4Hn1wAABe4"]
[Sat Aug 29 05:05:47.772048 2026] [security2:error] [pid 1018003:tid 1018174] [client 20.48.250.41:23459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/zxekqlxb.php"] [unique_id "apK9CzAh5Y1i2tUxg4Hn2gAABc8"]
[Sat Aug 29 05:05:47.802770 2026] [security2:error] [pid 1017536:tid 1017769] [client 20.104.49.130:60956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/k.php"] [unique_id "apK9CyJcY4fy7tP-rU3uNwAAAns"]
[Sat Aug 29 05:05:47.854267 2026] [security2:error] [pid 1017536:tid 1017680] [client 20.48.250.41:26928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/wp-act.php"] [unique_id "apK9CyJcY4fy7tP-rU3uOAAAAiI"]
[Sat Aug 29 05:05:47.861866 2026] [security2:error] [pid 1018003:tid 1018215] [client 68.155.159.216:12239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-includes/assets/index.php"] [unique_id "apK9CzAh5Y1i2tUxg4Hn4wAABfg"]
[Sat Aug 29 05:05:47.864337 2026] [security2:error] [pid 1018003:tid 1018267] [client 4.205.62.107:65016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/linusadmin-phpinfo.php"] [unique_id "apK9CzAh5Y1i2tUxg4Hn5AAABis"]
[Sat Aug 29 05:05:47.864779 2026] [security2:error] [pid 1018003:tid 1018257] [client 168.107.94.195:49838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9CzAh5Y1i2tUxg4Hn5QAABiE"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:47.888544 2026] [security2:error] [pid 1018003:tid 1018188] [client 158.23.147.79:25585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK9CzAh5Y1i2tUxg4Hn6AAABd0"]
[Sat Aug 29 05:05:47.902634 2026] [security2:error] [pid 1018003:tid 1018243] [client 20.48.250.41:23526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/init.php"] [unique_id "apK9CzAh5Y1i2tUxg4Hn6gAABhM"]
[Sat Aug 29 05:05:47.908035 2026] [security2:error] [pid 1017536:tid 1017733] [client 20.104.104.62:39078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goll.net"] [uri "/admin.php"] [unique_id "apK9CyJcY4fy7tP-rU3uOQAAAlc"]
[Sat Aug 29 05:05:47.921781 2026] [security2:error] [pid 1018003:tid 1018190] [client 20.196.209.81:18739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-admin/wp-cron.php"] [unique_id "apK9CzAh5Y1i2tUxg4Hn7AAABd8"]
[Sat Aug 29 05:05:47.947532 2026] [security2:error] [pid 1018003:tid 1018171] [client 45.148.10.62:38224] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.wanderlustpictures.com"] [uri "/.env"] [unique_id "apK9CzAh5Y1i2tUxg4Hn8QAABcw"]
[Sat Aug 29 05:05:47.984983 2026] [security2:error] [pid 1017536:tid 1017753] [client 68.155.159.216:56907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK9CyJcY4fy7tP-rU3uPgAAAms"]
[Sat Aug 29 05:05:47.990946 2026] [security2:error] [pid 1018003:tid 1018246] [client 158.158.54.35:16649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/xxx.php"] [unique_id "apK9CzAh5Y1i2tUxg4Hn9gAABhY"]
[Sat Aug 29 05:05:48.032940 2026] [security2:error] [pid 1017536:tid 1017780] [client 20.48.250.41:23482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/term.php"] [unique_id "apK9DCJcY4fy7tP-rU3uPwAAAoY"]
[Sat Aug 29 05:05:48.036155 2026] [security2:error] [pid 1017536:tid 1017691] [client 192.145.125.70:51682] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.xqk.etg.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "apK9DCJcY4fy7tP-rU3uQAAAAi0"]
[Sat Aug 29 05:05:48.041268 2026] [security2:error] [pid 1017536:tid 1017790] [client 57.141.14.105:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/page/46/"] [unique_id "apK9DCJcY4fy7tP-rU3uQQAAApA"]
[Sat Aug 29 05:05:48.069203 2026] [security2:error] [pid 1017536:tid 1017784] [client 20.48.250.41:27460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/24.php"] [unique_id "apK9DCJcY4fy7tP-rU3uQgAAAoo"]
[Sat Aug 29 05:05:48.070504 2026] [security2:error] [pid 1018003:tid 1018186] [client 158.23.147.79:24571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-content/index.php"] [unique_id "apK9DDAh5Y1i2tUxg4Hn_wAABds"]
[Sat Aug 29 05:05:48.083667 2026] [security2:error] [pid 1017536:tid 1017749] [client 74.7.244.46:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "windowrepairdubuque.com"] [uri "/index.php"] [unique_id "apK9CSJcY4fy7tP-rU3thQAAAmc"]
[Sat Aug 29 05:05:48.085070 2026] [security2:error] [pid 1017536:tid 1017778] [client 74.7.244.46:59528] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "windowrepairdubuque.com"] [uri "/robots.txt"] [unique_id "apK9CSJcY4fy7tP-rU3tggAChCA"]
[Sat Aug 29 05:05:48.087744 2026] [security2:error] [pid 1018003:tid 1018224] [client 66.248.203.2:17846] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cheerfulmonk.com"] [uri "/"] [unique_id "apK9DDAh5Y1i2tUxg4HoAAAABgE"]
[Sat Aug 29 05:05:48.102174 2026] [security2:error] [pid 1017536:tid 1017709] [client 20.104.104.62:39086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goll.net"] [uri "/index.php"] [unique_id "apK9DCJcY4fy7tP-rU3uQwAAAj8"]
[Sat Aug 29 05:05:48.102591 2026] [cgid:error] [pid 1018003:tid 1018197] [client 45.148.10.62:38224] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/404.shtml
[Sat Aug 29 05:05:48.127471 2026] [security2:error] [pid 1017536:tid 1017750] [client 4.205.62.107:22302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/bthil.php"] [unique_id "apK9DCJcY4fy7tP-rU3uRAAAAmg"]
[Sat Aug 29 05:05:48.142588 2026] [security2:error] [pid 1017536:tid 1017726] [client 68.155.159.216:51462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apK9DCJcY4fy7tP-rU3uRQAAAlA"]
[Sat Aug 29 05:05:48.142614 2026] [security2:error] [pid 1017536:tid 1017727] [client 4.205.62.107:22307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/rpk.php"] [unique_id "apK9DCJcY4fy7tP-rU3uRgAAAlE"]
[Sat Aug 29 05:05:48.145542 2026] [security2:error] [pid 1017536:tid 1017743] [client 4.205.62.107:65428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/localconf.php"] [unique_id "apK9DCJcY4fy7tP-rU3uSAAAAmE"]
[Sat Aug 29 05:05:48.146006 2026] [security2:error] [pid 1017536:tid 1017734] [client 40.83.93.50:3193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/update.php"] [unique_id "apK9DCJcY4fy7tP-rU3uRwAAAlg"]
[Sat Aug 29 05:05:48.159967 2026] [security2:error] [pid 1017536:tid 1017710] [client 4.232.148.111:20634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/css/index.php"] [unique_id "apK9DCJcY4fy7tP-rU3uSQAAAkA"]
[Sat Aug 29 05:05:48.160781 2026] [security2:error] [pid 1018003:tid 1018133] [remote 93.123.109.228:53320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/config.php"] [unique_id "apK9DDAh5Y1i2tUxg4HoCAAF0HA"]
[Sat Aug 29 05:05:48.179910 2026] [security2:error] [pid 1017536:tid 1017668] [client 20.104.49.130:63606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/media.php"] [unique_id "apK9DCJcY4fy7tP-rU3uSgAAAhY"]
[Sat Aug 29 05:05:48.189575 2026] [security2:error] [pid 1018003:tid 1018264] [client 20.48.250.41:23468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/aaa.php"] [unique_id "apK9DDAh5Y1i2tUxg4HoDAAABig"]
[Sat Aug 29 05:05:48.192872 2026] [security2:error] [pid 1018003:tid 1018151] [client 20.104.18.15:8071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/kerang.php"] [unique_id "apK9DDAh5Y1i2tUxg4HoDQAABbg"]
[Sat Aug 29 05:05:48.198829 2026] [security2:error] [pid 1017536:tid 1017782] [client 20.48.251.3:33312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/aww.php"] [unique_id "apK9DCJcY4fy7tP-rU3uTAAAAog"]
[Sat Aug 29 05:05:48.215538 2026] [security2:error] [pid 1018003:tid 1018184] [client 4.205.62.107:2949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/konfig.php"] [unique_id "apK9DDAh5Y1i2tUxg4HoDwAABdk"]
[Sat Aug 29 05:05:48.224076 2026] [security2:error] [pid 1017536:tid 1017744] [client 20.48.250.41:27457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/155.php"] [unique_id "apK9DCJcY4fy7tP-rU3uTwAAAmI"]
[Sat Aug 29 05:05:48.246299 2026] [security2:error] [pid 1018003:tid 1018238] [client 168.107.94.195:50204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9DDAh5Y1i2tUxg4HoEgAABg4"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:48.262395 2026] [security2:error] [pid 1018003:tid 1018030] [remote 45.148.10.62:38220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wagnerfarmscbd.com"] [uri "/wp-login.php"] [unique_id "apK9DDAh5Y1i2tUxg4HoFwAF5Ak"]
[Sat Aug 29 05:05:48.281998 2026] [security2:error] [pid 1017536:tid 1017737] [client 20.104.18.15:36690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/domvf.php"] [unique_id "apK9DCJcY4fy7tP-rU3uUwAAAls"]
[Sat Aug 29 05:05:48.283474 2026] [security2:error] [pid 1017536:tid 1017742] [client 20.104.18.15:7046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/ws85.php"] [unique_id "apK9DCJcY4fy7tP-rU3uVQAAAmA"]
[Sat Aug 29 05:05:48.284221 2026] [security2:error] [pid 1017536:tid 1017760] [client 45.148.10.62:38250] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.wanderlustpictures.com"] [uri "/.env"] [unique_id "apK9DCJcY4fy7tP-rU3uVAAAAnI"]
[Sat Aug 29 05:05:48.291826 2026] [security2:error] [pid 1018003:tid 1018157] [client 20.104.18.15:23436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/sallu.php"] [unique_id "apK9DDAh5Y1i2tUxg4HoGQAABb4"]
[Sat Aug 29 05:05:48.295953 2026] [security2:error] [pid 1017536:tid 1017721] [client 20.104.104.62:39059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goll.net"] [uri "/about.php"] [unique_id "apK9DCJcY4fy7tP-rU3uVgAAAks"]
[Sat Aug 29 05:05:48.299144 2026] [security2:error] [pid 1018003:tid 1018134] [remote 93.123.109.228:53320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/config/aws.php"] [unique_id "apK9DDAh5Y1i2tUxg4HoGgAF0HE"]
[Sat Aug 29 05:05:48.303257 2026] [security2:error] [pid 1018003:tid 1018234] [client 74.248.24.12:8974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/css/index.php"] [unique_id "apK9DDAh5Y1i2tUxg4HoGwAABgo"]
[Sat Aug 29 05:05:48.315940 2026] [security2:error] [pid 1017536:tid 1017667] [client 20.104.18.15:13189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/5656.php"] [unique_id "apK9DCJcY4fy7tP-rU3uVwAAAhU"]
[Sat Aug 29 05:05:48.316773 2026] [security2:error] [pid 1018003:tid 1018269] [client 20.196.209.81:17108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-admin/wp-links-opml.php"] [unique_id "apK9DDAh5Y1i2tUxg4HoHgAABi0"]
[Sat Aug 29 05:05:48.317408 2026] [security2:error] [pid 1018003:tid 1018023] [remote 93.123.109.228:53320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/config/config.inc.php"] [unique_id "apK9DDAh5Y1i2tUxg4HoHwAF0AI"]
[Sat Aug 29 05:05:48.335207 2026] [security2:error] [pid 1018003:tid 1018152] [client 20.104.18.15:46948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/revo.php"] [unique_id "apK9DDAh5Y1i2tUxg4HoIgAABbk"]
[Sat Aug 29 05:05:48.339814 2026] [security2:error] [pid 1018003:tid 1018278] [client 192.145.125.70:51694] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.xqk.etg.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "apK9DDAh5Y1i2tUxg4HoIwAABjY"]
[Sat Aug 29 05:05:48.344954 2026] [security2:error] [pid 1017536:tid 1017788] [client 20.48.250.41:23515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/xsox.php"] [unique_id "apK9DCJcY4fy7tP-rU3uWAAAAo4"]
[Sat Aug 29 05:05:48.344970 2026] [security2:error] [pid 1018003:tid 1018136] [remote 93.123.109.228:53320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/config/config.php"] [unique_id "apK9DDAh5Y1i2tUxg4HoJAAF0HM"]
[Sat Aug 29 05:05:48.350416 2026] [security2:error] [pid 1018003:tid 1018187] [client 20.104.18.15:8114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/m.php"] [unique_id "apK9DDAh5Y1i2tUxg4HoJQAABdw"]
[Sat Aug 29 05:05:48.403688 2026] [security2:error] [pid 1018003:tid 1018038] [remote 93.123.109.228:53320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/config/env.php"] [unique_id "apK9DDAh5Y1i2tUxg4HoKwAGHBE"]
[Sat Aug 29 05:05:48.429179 2026] [security2:error] [pid 1017536:tid 1017715] [client 20.48.250.41:27629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/file.php"] [unique_id "apK9DCJcY4fy7tP-rU3uWwAAAkU"]
[Sat Aug 29 05:05:48.430297 2026] [security2:error] [pid 1017536:tid 1017684] [client 20.104.18.15:36804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/biufile.php"] [unique_id "apK9DCJcY4fy7tP-rU3uXAAAAiY"]
[Sat Aug 29 05:05:48.435605 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.104.18.15:23426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/codex.php"] [unique_id "apK9DCJcY4fy7tP-rU3uXwAAAh0"]
[Sat Aug 29 05:05:48.455676 2026] [security2:error] [pid 1017536:tid 1017698] [client 20.104.18.15:13304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/w3lls.php"] [unique_id "apK9DCJcY4fy7tP-rU3uYQAAAjQ"]
[Sat Aug 29 05:05:48.482844 2026] [security2:error] [pid 1018003:tid 1018218] [client 20.48.250.41:23360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/lkui.php"] [unique_id "apK9DDAh5Y1i2tUxg4HoLwAABfs"]
[Sat Aug 29 05:05:48.485772 2026] [security2:error] [pid 1017536:tid 1017773] [client 20.104.18.15:8082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/fling.php"] [unique_id "apK9DCJcY4fy7tP-rU3uYgAAAn8"]
[Sat Aug 29 05:05:48.489600 2026] [security2:error] [pid 1018003:tid 1018217] [client 20.104.104.62:38927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goll.net"] [uri "/vx.php"] [unique_id "apK9DDAh5Y1i2tUxg4HoMgAABfo"]
[Sat Aug 29 05:05:48.498913 2026] [security2:error] [pid 1018003:tid 1018046] [remote 93.123.109.228:53320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/config/module.config.php"] [unique_id "apK9DDAh5Y1i2tUxg4HoNAAFyhk"]
[Sat Aug 29 05:05:48.498936 2026] [security2:error] [pid 1018003:tid 1018047] [remote 93.123.109.228:53320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/config/nexmo.php"] [unique_id "apK9DDAh5Y1i2tUxg4HoNQAFyho"]
[Sat Aug 29 05:05:48.503141 2026] [security2:error] [pid 1017536:tid 1017692] [client 20.104.18.15:7128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/ffs.php"] [unique_id "apK9DCJcY4fy7tP-rU3uYwAAAi4"]
[Sat Aug 29 05:05:48.506284 2026] [security2:error] [pid 1017536:tid 1017753] [client 20.48.251.3:33323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/maxro.php"] [unique_id "apK9DCJcY4fy7tP-rU3uZAAAAms"]
[Sat Aug 29 05:05:48.507884 2026] [cgid:error] [pid 1018003:tid 1018051] [remote 181.215.86.234:47268] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/flowerfh/public_html/404.shtml, referer: https://www.flowerfh.com/obituaries.php
[Sat Aug 29 05:05:48.508141 2026] [security2:error] [pid 1018003:tid 1018044] [remote 93.123.109.228:53320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/config/stripe.php"] [unique_id "apK9DDAh5Y1i2tUxg4HoQgAFyhc"]
[Sat Aug 29 05:05:48.529810 2026] [security2:error] [pid 1017536:tid 1017711] [client 197.219.150.206:57461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK9DCJcY4fy7tP-rU3uZQAAAkE"]
[Sat Aug 29 05:05:48.529917 2026] [security2:error] [pid 1017536:tid 1017711] [client 197.219.150.206:57461] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK9DCJcY4fy7tP-rU3uZQAAAkE"]
[Sat Aug 29 05:05:48.544940 2026] [security2:error] [pid 1017536:tid 1017691] [client 4.205.62.107:56006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/cloud.php"] [unique_id "apK9DCJcY4fy7tP-rU3uZgAAAi0"]
[Sat Aug 29 05:05:48.563647 2026] [security2:error] [pid 1017536:tid 1017725] [client 20.104.18.15:46966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/birrs.php"] [unique_id "apK9DCJcY4fy7tP-rU3uZwAAAk8"]
[Sat Aug 29 05:05:48.567450 2026] [security2:error] [pid 1017536:tid 1017685] [client 20.104.18.15:23480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/5656.php"] [unique_id "apK9DCJcY4fy7tP-rU3uaAAAAic"]
[Sat Aug 29 05:05:48.570171 2026] [security2:error] [pid 1017536:tid 1017786] [client 4.205.62.107:53432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/groceries/index.php"] [unique_id "apK9DCJcY4fy7tP-rU3uaQAAAow"]
[Sat Aug 29 05:05:48.591641 2026] [security2:error] [pid 1017536:tid 1017674] [client 20.104.18.15:13211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/fpwch.php"] [unique_id "apK9DCJcY4fy7tP-rU3ubAAAAhw"]
[Sat Aug 29 05:05:48.599589 2026] [security2:error] [pid 1017536:tid 1017784] [client 20.104.18.15:36739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/blacks.php"] [unique_id "apK9DCJcY4fy7tP-rU3ubQAAAoo"]
[Sat Aug 29 05:05:48.600796 2026] [security2:error] [pid 1017536:tid 1017736] [client 20.48.250.41:27628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK9DCJcY4fy7tP-rU3ubgAAAlo"]
[Sat Aug 29 05:05:48.625341 2026] [security2:error] [pid 1017536:tid 1017689] [client 20.104.18.15:8145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/btyuio.php"] [unique_id "apK9DCJcY4fy7tP-rU3ubwAAAis"]
[Sat Aug 29 05:05:48.626749 2026] [security2:error] [pid 1018003:tid 1018212] [client 68.155.159.216:24460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/dropdown.php"] [unique_id "apK9DDAh5Y1i2tUxg4HoSgAABfU"]
[Sat Aug 29 05:05:48.627950 2026] [security2:error] [pid 1017536:tid 1017749] [client 168.107.94.195:50644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9DCJcY4fy7tP-rU3ucAAAAmc"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:48.632840 2026] [security2:error] [pid 1018003:tid 1018174] [client 4.232.148.111:27506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/wp-cron.php"] [unique_id "apK9DDAh5Y1i2tUxg4HoSwAABc8"]
[Sat Aug 29 05:05:48.635423 2026] [security2:error] [pid 1017536:tid 1017785] [client 192.145.125.70:51698] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.xqk.etg.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "apK9DCJcY4fy7tP-rU3ucQAAAos"]
[Sat Aug 29 05:05:48.637461 2026] [security2:error] [pid 1017536:tid 1017750] [client 20.48.250.41:23506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "apK9DCJcY4fy7tP-rU3ucgAAAmg"]
[Sat Aug 29 05:05:48.637721 2026] [security2:error] [pid 1017536:tid 1017709] [client 158.23.147.79:48328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK9DCJcY4fy7tP-rU3ucwAAAj8"]
[Sat Aug 29 05:05:48.653509 2026] [security2:error] [pid 1017536:tid 1017726] [client 20.104.18.15:7118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/nano.php"] [unique_id "apK9DCJcY4fy7tP-rU3udAAAAlA"]
[Sat Aug 29 05:05:48.685394 2026] [security2:error] [pid 1017536:tid 1017730] [client 20.104.104.62:38929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goll.net"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK9DCJcY4fy7tP-rU3udgAAAlQ"]
[Sat Aug 29 05:05:48.705623 2026] [core:error] [pid 1017536:tid 1017668] [client 20.197.61.180:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:48.705639 2026] [core:error] [pid 1017536:tid 1017668] [client 20.197.61.180:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:48.710503 2026] [security2:error] [pid 1017536:tid 1017761] [client 20.196.209.81:17101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-admin/wp-load.php"] [unique_id "apK9DCJcY4fy7tP-rU3ueAAAAnM"]
[Sat Aug 29 05:05:48.713970 2026] [security2:error] [pid 1018003:tid 1018267] [client 158.158.54.35:14028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/tool.php"] [unique_id "apK9DDAh5Y1i2tUxg4HoWgAABis"]
[Sat Aug 29 05:05:48.714849 2026] [security2:error] [pid 1017536:tid 1017745] [client 158.23.147.79:30708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK9DCJcY4fy7tP-rU3ueQAAAmM"]
[Sat Aug 29 05:05:48.722000 2026] [security2:error] [pid 1017536:tid 1017722] [client 20.104.18.15:23515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/w3lls.php"] [unique_id "apK9DCJcY4fy7tP-rU3uegAAAkw"]
[Sat Aug 29 05:05:48.743775 2026] [security2:error] [pid 1017536:tid 1017742] [client 20.104.18.15:13218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/domvf.php"] [unique_id "apK9DCJcY4fy7tP-rU3ufAAAAmA"]
[Sat Aug 29 05:05:48.747085 2026] [cgid:error] [pid 1017536:tid 1017760] [client 45.148.10.62:38250] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/404.shtml
[Sat Aug 29 05:05:48.759078 2026] [security2:error] [pid 1017536:tid 1017775] [client 68.155.159.216:61678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.gavirestaurant.com"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK9DCJcY4fy7tP-rU3ufgAAAoE"]
[Sat Aug 29 05:05:48.759965 2026] [security2:error] [pid 1017536:tid 1017754] [client 158.23.147.79:30671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/makeasmtp.php"] [unique_id "apK9DCJcY4fy7tP-rU3ufwAAAmw"]
[Sat Aug 29 05:05:48.775449 2026] [security2:error] [pid 1017536:tid 1017765] [client 20.104.18.15:46937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/sss.php"] [unique_id "apK9DCJcY4fy7tP-rU3ugQAAAnc"]
[Sat Aug 29 05:05:48.785102 2026] [security2:error] [pid 1017536:tid 1017748] [client 68.155.159.216:50388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/install.php"] [unique_id "apK9DCJcY4fy7tP-rU3uggAAAmY"]
[Sat Aug 29 05:05:48.790639 2026] [security2:error] [pid 1017536:tid 1017694] [client 20.48.251.3:13979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/brc.php"] [unique_id "apK9DCJcY4fy7tP-rU3uhAAAAjA"]
[Sat Aug 29 05:05:48.797131 2026] [security2:error] [pid 1018003:tid 1018270] [client 20.104.18.15:7069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/ano.php"] [unique_id "apK9DDAh5Y1i2tUxg4HobwAABi4"]
[Sat Aug 29 05:05:48.805268 2026] [security2:error] [pid 1017536:tid 1017704] [client 40.83.93.50:8052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/blog.php"] [unique_id "apK9DCJcY4fy7tP-rU3uhwAAAjo"]
[Sat Aug 29 05:05:48.811148 2026] [security2:error] [pid 1018003:tid 1018248] [client 20.104.18.15:36628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/beck.php"] [unique_id "apK9DDAh5Y1i2tUxg4HocgAABhg"]
[Sat Aug 29 05:05:48.815390 2026] [security2:error] [pid 1017536:tid 1017714] [client 20.48.250.41:27608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/06.php"] [unique_id "apK9DCJcY4fy7tP-rU3uiAAAAkQ"]
[Sat Aug 29 05:05:48.816088 2026] [security2:error] [pid 1017536:tid 1017705] [client 20.48.250.41:23475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/motu.php"] [unique_id "apK9DCJcY4fy7tP-rU3uigAAAjs"]
[Sat Aug 29 05:05:48.829483 2026] [security2:error] [pid 1018003:tid 1018203] [client 20.104.18.15:8087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/dehnl.php"] [unique_id "apK9DDAh5Y1i2tUxg4HocwAABew"]
[Sat Aug 29 05:05:48.859687 2026] [security2:error] [pid 1017536:tid 1017680] [client 173.239.211.120:33977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 120.211.239.173.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.darwinsfox.com"] [uri "/wp-login.php"] [unique_id "apK9DCJcY4fy7tP-rU3uiwAAAiI"], referer: https://duckduckgo.com/
[Sat Aug 29 05:05:48.862998 2026] [security2:error] [pid 1018003:tid 1018200] [client 20.104.18.15:23378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/fpwch.php"] [unique_id "apK9DDAh5Y1i2tUxg4HodAAABek"]
[Sat Aug 29 05:05:48.880526 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.104.104.62:10865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/private.php"] [unique_id "apK9DCJcY4fy7tP-rU3ujAAAAh0"]
[Sat Aug 29 05:05:48.880672 2026] [security2:error] [pid 1017536:tid 1017678] [client 20.104.18.15:13225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/biufile.php"] [unique_id "apK9DCJcY4fy7tP-rU3ujQAAAiA"]
[Sat Aug 29 05:05:48.880740 2026] [security2:error] [pid 1018003:tid 1018233] [client 171.61.160.196:16819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.160.61.171.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK9DDAh5Y1i2tUxg4HoeAAABgk"]
[Sat Aug 29 05:05:48.880808 2026] [security2:error] [pid 1018003:tid 1018233] [client 171.61.160.196:16819] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK9DDAh5Y1i2tUxg4HoeAAABgk"]
[Sat Aug 29 05:05:48.897188 2026] [security2:error] [pid 1018003:tid 1018188] [client 20.104.104.62:39061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goll.net"] [uri "/goods.php"] [unique_id "apK9DDAh5Y1i2tUxg4HoeQAABd0"]
[Sat Aug 29 05:05:48.901159 2026] [security2:error] [pid 1017536:tid 1017732] [client 45.148.10.62:38250] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.wanderlustpictures.com"] [uri "/api/.env"] [unique_id "apK9DCJcY4fy7tP-rU3ujgAAAlY"]
[Sat Aug 29 05:05:48.918406 2026] [security2:error] [pid 1018003:tid 1018191] [client 20.104.104.62:64738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/sh3ll.php"] [unique_id "apK9DDAh5Y1i2tUxg4HogAAABeA"]
[Sat Aug 29 05:05:48.923696 2026] [security2:error] [pid 1018003:tid 1018240] [client 20.104.104.62:48580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/sf.php"] [unique_id "apK9DDAh5Y1i2tUxg4HogQAABhA"]
[Sat Aug 29 05:05:48.932082 2026] [security2:error] [pid 1018003:tid 1018183] [client 20.104.18.15:6993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/mgrr.php"] [unique_id "apK9DDAh5Y1i2tUxg4HogwAABdg"]
[Sat Aug 29 05:05:48.938945 2026] [security2:error] [pid 1018003:tid 1018277] [client 192.145.125.70:51702] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.xqk.etg.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "apK9DDAh5Y1i2tUxg4HohgAABjU"]
[Sat Aug 29 05:05:48.975127 2026] [security2:error] [pid 1017536:tid 1017776] [client 74.248.24.12:41579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/wp-cron.php"] [unique_id "apK9DCJcY4fy7tP-rU3ujwAAAoI"]
[Sat Aug 29 05:05:48.981095 2026] [security2:error] [pid 1017536:tid 1017773] [client 20.48.250.41:23459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/Ov-Simple1.php"] [unique_id "apK9DCJcY4fy7tP-rU3ukAAAAn8"]
[Sat Aug 29 05:05:48.992261 2026] [security2:error] [pid 1018003:tid 1018219] [client 20.104.18.15:8183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/zoo2.php"] [unique_id "apK9DDAh5Y1i2tUxg4HoigAABfw"]
[Sat Aug 29 05:05:48.995081 2026] [security2:error] [pid 1017536:tid 1017692] [client 20.104.104.62:41603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/6y7t.php"] [unique_id "apK9DCJcY4fy7tP-rU3ukQAAAi4"]
[Sat Aug 29 05:05:48.995621 2026] [security2:error] [pid 1017536:tid 1017667] [client 60.243.207.176:60090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK9DCJcY4fy7tP-rU3ukgAAAhU"]
[Sat Aug 29 05:05:48.996038 2026] [security2:error] [pid 1017536:tid 1017667] [client 60.243.207.176:60090] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK9DCJcY4fy7tP-rU3ukgAAAhU"]
[Sat Aug 29 05:05:48.996466 2026] [security2:error] [pid 1017536:tid 1017753] [client 20.104.18.15:23466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/domvf.php"] [unique_id "apK9DCJcY4fy7tP-rU3ukwAAAms"]
[Sat Aug 29 05:05:49.001201 2026] [security2:error] [pid 1017536:tid 1017793] [client 4.205.62.107:64941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/app/Models/Hrm/Employee.php"] [unique_id "apK9DSJcY4fy7tP-rU3ulAAAApM"]
[Sat Aug 29 05:05:49.007460 2026] [security2:error] [pid 1018003:tid 1018167] [client 20.104.18.15:46915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/wp-includes/ID3/moon.php"] [unique_id "apK9DTAh5Y1i2tUxg4HoiwAABcg"]
[Sat Aug 29 05:05:49.008431 2026] [security2:error] [pid 1017536:tid 1017711] [client 158.23.147.79:25487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-content/banners/about.php"] [unique_id "apK9DSJcY4fy7tP-rU3ulQAAAkE"]
[Sat Aug 29 05:05:49.009039 2026] [security2:error] [pid 1017536:tid 1017691] [client 168.107.94.195:51083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9DSJcY4fy7tP-rU3ulgAAAi0"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:49.013613 2026] [security2:error] [pid 1018003:tid 1018181] [client 20.104.104.62:10457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/lfi.php"] [unique_id "apK9DTAh5Y1i2tUxg4HojAAABdY"]
[Sat Aug 29 05:05:49.021936 2026] [security2:error] [pid 1017536:tid 1017725] [client 68.155.159.216:14308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK9DSJcY4fy7tP-rU3umQAAAk8"]
[Sat Aug 29 05:05:49.039308 2026] [security2:error] [pid 1017536:tid 1017685] [client 20.104.18.15:36863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/t3.php"] [unique_id "apK9DSJcY4fy7tP-rU3umgAAAic"]
[Sat Aug 29 05:05:49.044953 2026] [security2:error] [pid 1017536:tid 1017786] [client 20.48.250.41:27510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/class.php"] [unique_id "apK9DSJcY4fy7tP-rU3umwAAAow"]
[Sat Aug 29 05:05:49.045308 2026] [security2:error] [pid 1017536:tid 1017719] [client 20.104.18.15:13280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/blacks.php"] [unique_id "apK9DSJcY4fy7tP-rU3unAAAAkk"]
[Sat Aug 29 05:05:49.063237 2026] [security2:error] [pid 1017536:tid 1017783] [client 45.148.10.62:38250] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.wanderlustpictures.com"] [uri "/.env.bak"] [unique_id "apK9DSJcY4fy7tP-rU3ungAAAok"]
[Sat Aug 29 05:05:49.065462 2026] [security2:error] [pid 1017536:tid 1017689] [client 20.48.251.3:13991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/vx.php"] [unique_id "apK9DSJcY4fy7tP-rU3unwAAAis"]
[Sat Aug 29 05:05:49.081200 2026] [security2:error] [pid 1018003:tid 1018192] [client 20.104.49.130:53682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/v2.php"] [unique_id "apK9DTAh5Y1i2tUxg4HokQAABeE"]
[Sat Aug 29 05:05:49.092868 2026] [security2:error] [pid 1018003:tid 1018256] [client 20.104.104.62:38940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goll.net"] [uri "/wp-access.php"] [unique_id "apK9DTAh5Y1i2tUxg4HokgAABiA"]
[Sat Aug 29 05:05:49.098375 2026] [security2:error] [pid 1018003:tid 1018162] [client 4.232.148.111:32313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/wp-block.php"] [unique_id "apK9DTAh5Y1i2tUxg4HolAAABcM"]
[Sat Aug 29 05:05:49.115286 2026] [security2:error] [pid 1017536:tid 1017785] [client 20.104.18.15:7127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/mac.php"] [unique_id "apK9DSJcY4fy7tP-rU3uoAAAAos"]
[Sat Aug 29 05:05:49.132985 2026] [security2:error] [pid 1017536:tid 1017723] [client 20.104.104.62:20853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/shell.php"] [unique_id "apK9DSJcY4fy7tP-rU3uoQAAAk0"]
[Sat Aug 29 05:05:49.135518 2026] [security2:error] [pid 1018003:tid 1018171] [client 20.196.209.81:18740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-admin/wp-mail.php"] [unique_id "apK9DTAh5Y1i2tUxg4HolgAABcw"]
[Sat Aug 29 05:05:49.136775 2026] [security2:error] [pid 1017536:tid 1017743] [client 20.104.18.15:23473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/biufile.php"] [unique_id "apK9DSJcY4fy7tP-rU3uogAAAmE"]
[Sat Aug 29 05:05:49.140586 2026] [security2:error] [pid 1018003:tid 1018223] [client 20.104.104.62:48485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/super.php"] [unique_id "apK9DTAh5Y1i2tUxg4HolwAABgA"]
[Sat Aug 29 05:05:49.150036 2026] [security2:error] [pid 1018003:tid 1018224] [client 20.104.104.62:46011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/0xs.php"] [unique_id "apK9DTAh5Y1i2tUxg4HomAAABgE"]
[Sat Aug 29 05:05:49.157941 2026] [security2:error] [pid 1017536:tid 1017780] [client 158.158.54.35:14050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/k.php"] [unique_id "apK9DSJcY4fy7tP-rU3uowAAAoY"]
[Sat Aug 29 05:05:49.158900 2026] [security2:error] [pid 1018003:tid 1018197] [client 20.104.104.62:10448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/quoys.php"] [unique_id "apK9DTAh5Y1i2tUxg4HomwAABeY"]
[Sat Aug 29 05:05:49.159976 2026] [security2:error] [pid 1018003:tid 1018239] [client 20.48.250.41:23439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/wp-blogs.php"] [unique_id "apK9DTAh5Y1i2tUxg4HonAAABg8"]
[Sat Aug 29 05:05:49.180389 2026] [security2:error] [pid 1017536:tid 1017668] [client 158.23.147.79:24477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/about/function.php"] [unique_id "apK9DSJcY4fy7tP-rU3upAAAAhY"]
[Sat Aug 29 05:05:49.183305 2026] [security2:error] [pid 1017536:tid 1017746] [client 20.104.18.15:13190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/beck.php"] [unique_id "apK9DSJcY4fy7tP-rU3upQAAAmQ"]
[Sat Aug 29 05:05:49.192167 2026] [security2:error] [pid 1018003:tid 1018226] [client 20.104.18.15:47035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/xmini4.php"] [unique_id "apK9DTAh5Y1i2tUxg4HoogAABgM"]
[Sat Aug 29 05:05:49.195829 2026] [security2:error] [pid 1017536:tid 1017782] [client 20.48.250.41:27511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/8.php"] [unique_id "apK9DSJcY4fy7tP-rU3upwAAAog"]
[Sat Aug 29 05:05:49.214059 2026] [security2:error] [pid 1017536:tid 1017761] [client 20.104.18.15:36852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/wp.php"] [unique_id "apK9DSJcY4fy7tP-rU3uqAAAAnM"]
[Sat Aug 29 05:05:49.215264 2026] [security2:error] [pid 1017536:tid 1017745] [client 20.104.49.130:34520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/f35.update.php"] [unique_id "apK9DSJcY4fy7tP-rU3uqQAAAmM"]
[Sat Aug 29 05:05:49.217095 2026] [security2:error] [pid 1017536:tid 1017781] [client 20.104.18.15:8181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/zoo1.php"] [unique_id "apK9DSJcY4fy7tP-rU3uqgAAAoc"]
[Sat Aug 29 05:05:49.231803 2026] [cgid:error] [pid 1017536:tid 1017760] [client 45.148.10.62:38250] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/404.shtml
[Sat Aug 29 05:05:49.244403 2026] [security2:error] [pid 1017536:tid 1017788] [client 192.145.125.70:51704] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.xqk.etg.mybluehost.me"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "apK9DSJcY4fy7tP-rU3urQAAAo4"]
[Sat Aug 29 05:05:49.244489 2026] [security2:error] [pid 1017536:tid 1017789] [client 20.104.18.15:7112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/simple.php"] [unique_id "apK9DSJcY4fy7tP-rU3urgAAAo8"]
[Sat Aug 29 05:05:49.268180 2026] [security2:error] [pid 1018003:tid 1018195] [client 4.205.62.107:22308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/aws_auth.php"] [unique_id "apK9DTAh5Y1i2tUxg4HopwAABeQ"]
[Sat Aug 29 05:05:49.273726 2026] [security2:error] [pid 1018003:tid 1018182] [client 20.104.18.15:23366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/blacks.php"] [unique_id "apK9DTAh5Y1i2tUxg4HorQAABdc"]
[Sat Aug 29 05:05:49.278771 2026] [security2:error] [pid 1017536:tid 1017767] [client 4.205.62.107:65440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/bengi.php"] [unique_id "apK9DSJcY4fy7tP-rU3urwAAAnk"]
[Sat Aug 29 05:05:49.284856 2026] [security2:error] [pid 1017536:tid 1017731] [client 40.83.93.50:7748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/bypass.php"] [unique_id "apK9DSJcY4fy7tP-rU3usQAAAlU"]
[Sat Aug 29 05:05:49.287211 2026] [security2:error] [pid 1018003:tid 1018221] [client 20.104.104.62:39079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goll.net"] [uri "/autoload_classmap/function.php"] [unique_id "apK9DTAh5Y1i2tUxg4HorgAABf4"]
[Sat Aug 29 05:05:49.291633 2026] [security2:error] [pid 1018003:tid 1018175] [client 20.104.104.62:22703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/waf.php"] [unique_id "apK9DTAh5Y1i2tUxg4HorwAABdA"]
[Sat Aug 29 05:05:49.294257 2026] [security2:error] [pid 1018003:tid 1018179] [client 20.104.104.62:10826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/vbbn.php"] [unique_id "apK9DTAh5Y1i2tUxg4HosAAABdQ"]
[Sat Aug 29 05:05:49.295131 2026] [security2:error] [pid 1017536:tid 1017681] [client 4.205.62.107:21831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/ms.php"] [unique_id "apK9DSJcY4fy7tP-rU3uswAAAiM"]
[Sat Aug 29 05:05:49.301157 2026] [security2:error] [pid 1017536:tid 1017670] [client 20.104.49.130:29968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/wp-css.php"] [unique_id "apK9DSJcY4fy7tP-rU3utAAAAhg"]
[Sat Aug 29 05:05:49.316828 2026] [security2:error] [pid 1018003:tid 1018251] [client 20.104.104.62:48689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/lufix1.php"] [unique_id "apK9DTAh5Y1i2tUxg4HotgAABhs"]
[Sat Aug 29 05:05:49.325817 2026] [security2:error] [pid 1018003:tid 1018252] [client 158.23.147.79:50084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK9DTAh5Y1i2tUxg4HotwAABhw"]
[Sat Aug 29 05:05:49.334783 2026] [security2:error] [pid 1018003:tid 1018214] [client 20.104.18.15:13258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/t3.php"] [unique_id "apK9DTAh5Y1i2tUxg4HouQAABfc"]
[Sat Aug 29 05:05:49.340867 2026] [security2:error] [pid 1017536:tid 1017770] [client 20.104.18.15:47067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/gulu.php"] [unique_id "apK9DSJcY4fy7tP-rU3utgAAAnw"]
[Sat Aug 29 05:05:49.349903 2026] [security2:error] [pid 1018003:tid 1018170] [client 20.48.250.41:27591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/0x0x.php"] [unique_id "apK9DTAh5Y1i2tUxg4HougAABcs"]
[Sat Aug 29 05:05:49.353168 2026] [security2:error] [pid 1018003:tid 1018150] [client 4.205.62.107:2938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/nw.php"] [unique_id "apK9DTAh5Y1i2tUxg4HouwAABbc"]
[Sat Aug 29 05:05:49.359229 2026] [security2:error] [pid 1017536:tid 1017733] [client 20.48.250.41:23389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/mini.php"] [unique_id "apK9DSJcY4fy7tP-rU3utwAAAlc"]
[Sat Aug 29 05:05:49.376802 2026] [security2:error] [pid 1018003:tid 1018173] [client 20.104.18.15:8166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/radio.php"] [unique_id "apK9DTAh5Y1i2tUxg4HovwAABc4"]
[Sat Aug 29 05:05:49.378675 2026] [security2:error] [pid 1018003:tid 1018268] [client 20.104.18.15:36772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/abcd.php"] [unique_id "apK9DTAh5Y1i2tUxg4HowAAABiw"]
[Sat Aug 29 05:05:49.382197 2026] [security2:error] [pid 1018003:tid 1018133] [remote 93.123.109.228:53320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/info.php"] [unique_id "apK9DTAh5Y1i2tUxg4HowgAF4nA"]
[Sat Aug 29 05:05:49.390817 2026] [security2:error] [pid 1017536:tid 1017693] [client 168.107.94.195:51486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9DSJcY4fy7tP-rU3uuAAAAi8"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:49.391901 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.104.18.15:7130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/xty.php"] [unique_id "apK9DSJcY4fy7tP-rU3uuQAAAh0"]
[Sat Aug 29 05:05:49.422335 2026] [security2:error] [pid 1017536:tid 1017772] [client 20.104.104.62:22670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/bnnof6.php"] [unique_id "apK9DSJcY4fy7tP-rU3uugAAAn4"]
[Sat Aug 29 05:05:49.424532 2026] [security2:error] [pid 1018003:tid 1018157] [client 34.7.216.49:21954] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "webdisk.bridgewaycentretrust.org"] [uri "/Dockerfile"] [unique_id "apK9DTAh5Y1i2tUxg4HoxAAABb4"]
[Sat Aug 29 05:05:49.425188 2026] [security2:error] [pid 1017536:tid 1017696] [client 20.104.104.62:10434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/rfi.php"] [unique_id "apK9DSJcY4fy7tP-rU3uuwAAAjI"]
[Sat Aug 29 05:05:49.425928 2026] [security2:error] [pid 1017536:tid 1017694] [client 34.7.216.49:21960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.216.7.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bridgewaycentretrust.org"] [uri "/i.php"] [unique_id "apK9DSJcY4fy7tP-rU3uvAAAAjA"]
[Sat Aug 29 05:05:49.430870 2026] [security2:error] [pid 1018003:tid 1018278] [client 34.7.216.49:21966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.216.7.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bridgewaycentretrust.org"] [uri "/pi.php"] [unique_id "apK9DTAh5Y1i2tUxg4HoyQAABjY"]
[Sat Aug 29 05:05:49.434234 2026] [cgid:error] [pid 1017536:tid 1017717] [client 45.148.10.62:38250] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/404.shtml
[Sat Aug 29 05:05:49.434558 2026] [security2:error] [pid 1017536:tid 1017773] [client 20.104.18.15:23430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/beck.php"] [unique_id "apK9DSJcY4fy7tP-rU3uwAAAAn8"]
[Sat Aug 29 05:05:49.436988 2026] [security2:error] [pid 1018003:tid 1018206] [client 20.104.104.62:64767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/indonesia.php"] [unique_id "apK9DTAh5Y1i2tUxg4HoywAABe8"]
[Sat Aug 29 05:05:49.462298 2026] [security2:error] [pid 1018003:tid 1018146] [remote 93.123.109.228:53320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/infophp.php"] [unique_id "apK9DTAh5Y1i2tUxg4HozQAGGH0"]
[Sat Aug 29 05:05:49.463090 2026] [security2:error] [pid 1018003:tid 1018021] [remote 93.123.109.228:53320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/infos.php"] [unique_id "apK9DTAh5Y1i2tUxg4HozgAGGAA"]
[Sat Aug 29 05:05:49.471408 2026] [security2:error] [pid 1017536:tid 1017667] [client 20.104.18.15:46661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/replace.php"] [unique_id "apK9DSJcY4fy7tP-rU3uwwAAAhU"]
[Sat Aug 29 05:05:49.480861 2026] [security2:error] [pid 1018003:tid 1018174] [client 20.104.104.62:38913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goll.net"] [uri "/ms.php"] [unique_id "apK9DTAh5Y1i2tUxg4HozwAABc8"]
[Sat Aug 29 05:05:49.491641 2026] [security2:error] [pid 1018003:tid 1018203] [client 20.48.250.41:23402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/amp.php"] [unique_id "apK9DTAh5Y1i2tUxg4Ho0QAABew"]
[Sat Aug 29 05:05:49.495008 2026] [security2:error] [pid 1017536:tid 1017685] [client 20.104.18.15:13281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/wp.php"] [unique_id "apK9DSJcY4fy7tP-rU3uxQAAAic"]
[Sat Aug 29 05:05:49.499162 2026] [security2:error] [pid 1017536:tid 1017786] [client 20.48.250.41:27412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/166.php"] [unique_id "apK9DSJcY4fy7tP-rU3uxgAAAow"]
[Sat Aug 29 05:05:49.508321 2026] [security2:error] [pid 1018003:tid 1018185] [client 20.104.104.62:48489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/hack.php"] [unique_id "apK9DTAh5Y1i2tUxg4Ho1AAABdo"]
[Sat Aug 29 05:05:49.535611 2026] [security2:error] [pid 1017536:tid 1017720] [client 20.104.18.15:7082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/sallu.php"] [unique_id "apK9DSJcY4fy7tP-rU3uyAAAAko"]
[Sat Aug 29 05:05:49.536018 2026] [security2:error] [pid 1017536:tid 1017674] [client 20.104.18.15:8006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/one.php"] [unique_id "apK9DSJcY4fy7tP-rU3uyQAAAhw"]
[Sat Aug 29 05:05:49.544252 2026] [security2:error] [pid 1018003:tid 1018241] [client 74.248.24.12:30589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/wp-block.php"] [unique_id "apK9DTAh5Y1i2tUxg4Ho2QAABhE"]
[Sat Aug 29 05:05:49.545565 2026] [security2:error] [pid 1018003:tid 1018200] [client 192.145.125.70:51712] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.xqk.etg.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "apK9DTAh5Y1i2tUxg4Ho2gAABek"]
[Sat Aug 29 05:05:49.547225 2026] [security2:error] [pid 1018003:tid 1018188] [client 158.23.147.79:58104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK9DTAh5Y1i2tUxg4Ho2wAABd0"]
[Sat Aug 29 05:05:49.553178 2026] [security2:error] [pid 1018003:tid 1018254] [client 20.104.18.15:36825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/nofile.php"] [unique_id "apK9DTAh5Y1i2tUxg4Ho3AAABh4"]
[Sat Aug 29 05:05:49.557278 2026] [security2:error] [pid 1018003:tid 1018190] [client 20.104.104.62:46010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/ah24.php"] [unique_id "apK9DTAh5Y1i2tUxg4Ho3QAABd8"]
[Sat Aug 29 05:05:49.559585 2026] [security2:error] [pid 1017536:tid 1017698] [client 20.196.209.81:18707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-admin/wp-settings.php"] [unique_id "apK9DSJcY4fy7tP-rU3uygAAAjQ"]
[Sat Aug 29 05:05:49.562312 2026] [security2:error] [pid 1017536:tid 1017783] [client 20.104.104.62:10879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/tajj.php"] [unique_id "apK9DSJcY4fy7tP-rU3uywAAAok"]
[Sat Aug 29 05:05:49.569044 2026] [security2:error] [pid 1017536:tid 1017778] [client 20.104.18.15:23472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/t3.php"] [unique_id "apK9DSJcY4fy7tP-rU3uzAAAAoQ"]
[Sat Aug 29 05:05:49.574060 2026] [security2:error] [pid 1017536:tid 1017732] [client 4.232.148.111:18106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/wp-includes/fonts/admin.php"] [unique_id "apK9DSJcY4fy7tP-rU3uzQAAAlY"]
[Sat Aug 29 05:05:49.589050 2026] [security2:error] [pid 1017536:tid 1017750] [client 45.148.10.62:38250] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.wanderlustpictures.com"] [uri "/stripe/.env"] [unique_id "apK9DSJcY4fy7tP-rU3uzgAAAmg"]
[Sat Aug 29 05:05:49.599761 2026] [security2:error] [pid 1018003:tid 1018277] [client 20.104.49.130:63593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/zoo2.php"] [unique_id "apK9DTAh5Y1i2tUxg4Ho3gAABjU"]
[Sat Aug 29 05:05:49.605189 2026] [security2:error] [pid 1017536:tid 1017737] [client 158.158.54.35:22070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/root.php"] [unique_id "apK9DSJcY4fy7tP-rU3uzwAAAls"]
[Sat Aug 29 05:05:49.615599 2026] [security2:error] [pid 1017536:tid 1017743] [client 20.104.18.15:46969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/c4.php"] [unique_id "apK9DSJcY4fy7tP-rU3u0AAAAmE"]
[Sat Aug 29 05:05:49.628194 2026] [security2:error] [pid 1017536:tid 1017730] [client 20.104.18.15:13300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/abcd.php"] [unique_id "apK9DSJcY4fy7tP-rU3u0gAAAlQ"]
[Sat Aug 29 05:05:49.636773 2026] [security2:error] [pid 1018003:tid 1018164] [client 20.48.250.41:27551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/h2a2ck.php"] [unique_id "apK9DTAh5Y1i2tUxg4Ho5AAABcU"]
[Sat Aug 29 05:05:49.662568 2026] [security2:error] [pid 1018003:tid 1018167] [client 68.155.159.216:52784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/simple.php"] [unique_id "apK9DTAh5Y1i2tUxg4Ho6gAABcg"]
[Sat Aug 29 05:05:49.677217 2026] [security2:error] [pid 1018003:tid 1018181] [client 20.104.18.15:7069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/codex.php"] [unique_id "apK9DTAh5Y1i2tUxg4Ho7AAABdY"]
[Sat Aug 29 05:05:49.683667 2026] [security2:error] [pid 1018003:tid 1018230] [client 20.104.18.15:8084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/503.php"] [unique_id "apK9DTAh5Y1i2tUxg4Ho7QAABgY"]
[Sat Aug 29 05:05:49.688850 2026] [security2:error] [pid 1018003:tid 1018246] [client 20.104.104.62:45986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/ztv.php"] [unique_id "apK9DTAh5Y1i2tUxg4Ho7gAABhY"]
[Sat Aug 29 05:05:49.692680 2026] [security2:error] [pid 1018003:tid 1018192] [client 4.205.62.107:56000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/kerang.php"] [unique_id "apK9DTAh5Y1i2tUxg4Ho8AAABeE"]
[Sat Aug 29 05:05:49.694992 2026] [security2:error] [pid 1018003:tid 1018198] [client 20.104.18.15:36775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/run.php"] [unique_id "apK9DTAh5Y1i2tUxg4Ho8QAABec"]
[Sat Aug 29 05:05:49.694992 2026] [security2:error] [pid 1017536:tid 1017668] [client 20.104.49.130:43017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.scubaetcfl.com"] [uri "/edit.php"] [unique_id "apK9DSJcY4fy7tP-rU3u1AAAAhY"]
[Sat Aug 29 05:05:49.697143 2026] [security2:error] [pid 1017536:tid 1017746] [client 20.48.250.41:23452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/cc13.php"] [unique_id "apK9DSJcY4fy7tP-rU3u1QAAAmQ"]
[Sat Aug 29 05:05:49.710105 2026] [security2:error] [pid 1018003:tid 1018155] [client 20.104.104.62:10847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/grsiuk.php"] [unique_id "apK9DTAh5Y1i2tUxg4Ho8wAABbw"]
[Sat Aug 29 05:05:49.714387 2026] [security2:error] [pid 1018003:tid 1018244] [client 4.205.62.107:53382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/server-info.php"] [unique_id "apK9DTAh5Y1i2tUxg4Ho9QAABhQ"]
[Sat Aug 29 05:05:49.722855 2026] [security2:error] [pid 1017536:tid 1017761] [client 20.104.104.62:48466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/155.php"] [unique_id "apK9DSJcY4fy7tP-rU3u2AAAAnM"]
[Sat Aug 29 05:05:49.726560 2026] [security2:error] [pid 1018003:tid 1018171] [client 68.155.159.216:24537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/.well-known/index.php"] [unique_id "apK9DTAh5Y1i2tUxg4Ho9gAABcw"]
[Sat Aug 29 05:05:49.728697 2026] [security2:error] [pid 1017536:tid 1017745] [client 20.104.18.15:23538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/wp.php"] [unique_id "apK9DSJcY4fy7tP-rU3u2QAAAmM"]
[Sat Aug 29 05:05:49.742042 2026] [cgid:error] [pid 1017536:tid 1017742] [client 45.148.10.62:38250] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/404.shtml
[Sat Aug 29 05:05:49.742619 2026] [security2:error] [pid 1017536:tid 1017760] [client 20.104.104.62:38968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goll.net"] [uri "/adminfuns.php"] [unique_id "apK9DSJcY4fy7tP-rU3u3AAAAnI"]
[Sat Aug 29 05:05:49.750940 2026] [security2:error] [pid 1017536:tid 1017721] [client 158.23.147.79:48306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK9DSJcY4fy7tP-rU3u3QAAAks"]
[Sat Aug 29 05:05:49.754523 2026] [security2:error] [pid 1017536:tid 1017788] [client 68.155.159.216:51480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK9DSJcY4fy7tP-rU3u3gAAAo4"]
[Sat Aug 29 05:05:49.764686 2026] [security2:error] [pid 1017536:tid 1017723] [client 40.83.93.50:7759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/extractable-loader-head.php"] [unique_id "apK9DSJcY4fy7tP-rU3u3wAAAk0"]
[Sat Aug 29 05:05:49.769792 2026] [security2:error] [pid 1017536:tid 1017765] [client 168.107.94.195:51857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9DSJcY4fy7tP-rU3u4AAAAnc"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:49.771404 2026] [security2:error] [pid 1017536:tid 1017748] [client 20.104.18.15:13284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/nofile.php"] [unique_id "apK9DSJcY4fy7tP-rU3u4QAAAmY"]
[Sat Aug 29 05:05:49.778451 2026] [security2:error] [pid 1017536:tid 1017706] [client 20.48.250.41:27587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/error_log.php"] [unique_id "apK9DSJcY4fy7tP-rU3u4gAAAjw"]
[Sat Aug 29 05:05:49.818586 2026] [security2:error] [pid 1017536:tid 1017704] [client 20.104.104.62:45978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/kure.php"] [unique_id "apK9DSJcY4fy7tP-rU3u4wAAAjo"]
[Sat Aug 29 05:05:49.820006 2026] [security2:error] [pid 1017536:tid 1017714] [client 158.23.147.79:30674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK9DSJcY4fy7tP-rU3u5AAAAkQ"]
[Sat Aug 29 05:05:49.832623 2026] [security2:error] [pid 1018003:tid 1018025] [remote 209.42.29.39:52516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 39.29.42.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.interfaith.thewaltongroupinc.com"] [uri "/wp-login.php"] [unique_id "apK9DTAh5Y1i2tUxg4Ho_gAF5gQ"]
[Sat Aug 29 05:05:49.834600 2026] [security2:error] [pid 1018003:tid 1018034] [remote 209.42.29.39:52514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 39.29.42.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.interfaith.thewaltongroupinc.com"] [uri "/wp-login.php"] [unique_id "apK9DTAh5Y1i2tUxg4Ho_QAGAQ0"]
[Sat Aug 29 05:05:49.844620 2026] [security2:error] [pid 1018003:tid 1018264] [client 20.104.18.15:7155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/5656.php"] [unique_id "apK9DTAh5Y1i2tUxg4Ho_wAABig"]
[Sat Aug 29 05:05:49.847171 2026] [security2:error] [pid 1017536:tid 1017672] [client 192.145.125.70:51728] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.xqk.etg.mybluehost.me"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "apK9DSJcY4fy7tP-rU3u5QAAAho"]
[Sat Aug 29 05:05:49.847231 2026] [security2:error] [pid 1017536:tid 1017747] [client 20.104.18.15:8180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/504.php"] [unique_id "apK9DSJcY4fy7tP-rU3u5gAAAmU"]
[Sat Aug 29 05:05:49.851264 2026] [security2:error] [pid 1017536:tid 1017768] [client 20.104.18.15:46938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/rxr.php"] [unique_id "apK9DSJcY4fy7tP-rU3u5wAAAno"]
[Sat Aug 29 05:05:49.860067 2026] [security2:error] [pid 1017536:tid 1017770] [client 20.48.250.41:23320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/aa.php"] [unique_id "apK9DSJcY4fy7tP-rU3u6AAAAnw"]
[Sat Aug 29 05:05:49.866773 2026] [security2:error] [pid 1017536:tid 1017715] [client 158.23.147.79:30550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-content/banners/about.php"] [unique_id "apK9DSJcY4fy7tP-rU3u6gAAAkU"]
[Sat Aug 29 05:05:49.868073 2026] [security2:error] [pid 1017536:tid 1017716] [client 20.104.104.62:44602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/ahy66.php"] [unique_id "apK9DSJcY4fy7tP-rU3u6wAAAkY"]
[Sat Aug 29 05:05:49.874136 2026] [security2:error] [pid 1018003:tid 1018184] [client 20.104.18.15:23427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/abcd.php"] [unique_id "apK9DTAh5Y1i2tUxg4HpAQAABdk"]
[Sat Aug 29 05:05:49.879047 2026] [security2:error] [pid 1017536:tid 1017707] [client 68.155.159.216:18181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK9DSJcY4fy7tP-rU3u7AAAAj0"]
[Sat Aug 29 05:05:49.884975 2026] [security2:error] [pid 1018003:tid 1018195] [client 20.104.104.62:20861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/1n73ction.php"] [unique_id "apK9DTAh5Y1i2tUxg4HpAwAABeQ"]
[Sat Aug 29 05:05:49.901108 2026] [cgid:error] [pid 1017536:tid 1017675] [client 45.148.10.62:38250] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/404.shtml
[Sat Aug 29 05:05:49.920762 2026] [security2:error] [pid 1018003:tid 1018220] [client 20.104.18.15:36803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/new.php"] [unique_id "apK9DTAh5Y1i2tUxg4HpDQAABf0"]
[Sat Aug 29 05:05:49.930047 2026] [security2:error] [pid 1018003:tid 1018186] [client 20.104.18.15:13214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/run.php"] [unique_id "apK9DTAh5Y1i2tUxg4HpEQAABds"]
[Sat Aug 29 05:05:49.930094 2026] [security2:error] [pid 1018003:tid 1018199] [client 20.104.104.62:48656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/mcd.php"] [unique_id "apK9DTAh5Y1i2tUxg4HpEAAABeg"]
[Sat Aug 29 05:05:49.930326 2026] [security2:error] [pid 1018003:tid 1018236] [client 20.48.250.41:27586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/403.php"] [unique_id "apK9DTAh5Y1i2tUxg4HpEgAABgw"]
[Sat Aug 29 05:05:49.932847 2026] [security2:error] [pid 1017536:tid 1017696] [client 68.155.159.216:64252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.gavirestaurant.com"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK9DSJcY4fy7tP-rU3u8AAAAjI"]
[Sat Aug 29 05:05:49.938681 2026] [security2:error] [pid 1017536:tid 1017680] [client 20.104.104.62:38918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goll.net"] [uri "/wp-content/about.php"] [unique_id "apK9DSJcY4fy7tP-rU3u8QAAAiI"]
[Sat Aug 29 05:05:49.953613 2026] [security2:error] [pid 1018003:tid 1018177] [client 20.104.104.62:54529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/cafe.php"] [unique_id "apK9DTAh5Y1i2tUxg4HpFQAABdI"]
[Sat Aug 29 05:05:49.983102 2026] [security2:error] [pid 1017536:tid 1017722] [client 20.196.209.81:17055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-admin/wp-signup.php"] [unique_id "apK9DSJcY4fy7tP-rU3u8gAAAkw"]
[Sat Aug 29 05:05:49.988837 2026] [security2:error] [pid 1017536:tid 1017703] [client 20.104.18.15:8121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/admin.php"] [unique_id "apK9DSJcY4fy7tP-rU3u8wAAAjk"]
[Sat Aug 29 05:05:49.991674 2026] [security2:error] [pid 1017536:tid 1017712] [client 20.48.250.41:23367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/s1.php"] [unique_id "apK9DSJcY4fy7tP-rU3u9AAAAkI"]
[Sat Aug 29 05:05:49.997920 2026] [security2:error] [pid 1017536:tid 1017692] [client 20.104.104.62:10823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/gaje.php"] [unique_id "apK9DSJcY4fy7tP-rU3u9QAAAi4"]
[Sat Aug 29 05:05:50.017852 2026] [security2:error] [pid 1018003:tid 1018268] [client 158.23.147.79:32732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpGwAABiw"]
[Sat Aug 29 05:05:50.021365 2026] [security2:error] [pid 1018003:tid 1018261] [client 20.104.18.15:46971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.familiebon.com"] [uri "/reviall.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpHAAABiU"]
[Sat Aug 29 05:05:50.025026 2026] [security2:error] [pid 1017536:tid 1017667] [client 20.48.251.3:14004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/adminer-4.7.6-en.php"] [unique_id "apK9DiJcY4fy7tP-rU3u9gAAAhU"]
[Sat Aug 29 05:05:50.027905 2026] [security2:error] [pid 1017536:tid 1017793] [client 20.104.18.15:7090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/w3lls.php"] [unique_id "apK9DiJcY4fy7tP-rU3u9wAAApM"]
[Sat Aug 29 05:05:50.047361 2026] [security2:error] [pid 1017536:tid 1017678] [client 4.232.148.111:8400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/m.php"] [unique_id "apK9DiJcY4fy7tP-rU3u-AAAAiA"]
[Sat Aug 29 05:05:50.047752 2026] [security2:error] [pid 1018003:tid 1018050] [remote 47.128.24.73:49988] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "fivetownselc.org"] [uri "/robots.txt"] [unique_id "apK9DjAh5Y1i2tUxg4HpHwAFyh0"]
[Sat Aug 29 05:05:50.048268 2026] [security2:error] [pid 1017536:tid 1017691] [client 68.155.159.216:51517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK9DiJcY4fy7tP-rU3u-QAAAi0"]
[Sat Aug 29 05:05:50.051094 2026] [security2:error] [pid 1018003:tid 1018207] [client 158.158.54.35:22950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/p.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpIAAABfA"]
[Sat Aug 29 05:05:50.056659 2026] [security2:error] [pid 1017536:tid 1017685] [client 20.104.18.15:23471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/nofile.php"] [unique_id "apK9DiJcY4fy7tP-rU3u-wAAAic"]
[Sat Aug 29 05:05:50.057171 2026] [cgid:error] [pid 1017536:tid 1017725] [client 45.148.10.62:38250] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/404.shtml
[Sat Aug 29 05:05:50.063407 2026] [security2:error] [pid 1018003:tid 1018278] [client 20.48.250.41:27621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/cytyr.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpIQAABjY"]
[Sat Aug 29 05:05:50.064705 2026] [security2:error] [pid 1017536:tid 1017674] [client 68.155.159.216:12163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/lock.php"] [unique_id "apK9DiJcY4fy7tP-rU3u_AAAAhw"]
[Sat Aug 29 05:05:50.068091 2026] [security2:error] [pid 1017536:tid 1017740] [client 20.104.18.15:13215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/new.php"] [unique_id "apK9DiJcY4fy7tP-rU3u_QAAAl4"]
[Sat Aug 29 05:05:50.085014 2026] [security2:error] [pid 1017536:tid 1017698] [client 20.104.104.62:22665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/eval.php"] [unique_id "apK9DiJcY4fy7tP-rU3u_gAAAjQ"]
[Sat Aug 29 05:05:50.096094 2026] [security2:error] [pid 1018003:tid 1018252] [client 74.248.24.12:30414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/wp-includes/fonts/admin.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpIwAABhw"]
[Sat Aug 29 05:05:50.111039 2026] [security2:error] [pid 1018003:tid 1018152] [client 20.104.18.15:36844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/inx.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpJAAABbk"]
[Sat Aug 29 05:05:50.112481 2026] [security2:error] [pid 1017536:tid 1017683] [client 158.23.147.79:25581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK9DiJcY4fy7tP-rU3u_wAAAiU"]
[Sat Aug 29 05:05:50.115431 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.104.104.62:48456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/waw.php"] [unique_id "apK9DiJcY4fy7tP-rU3vAAAAAlY"]
[Sat Aug 29 05:05:50.126739 2026] [security2:error] [pid 1017536:tid 1017727] [client 68.155.159.216:14100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/goat1.php"] [unique_id "apK9DiJcY4fy7tP-rU3vAQAAAlE"]
[Sat Aug 29 05:05:50.133151 2026] [security2:error] [pid 1017536:tid 1017736] [client 20.104.104.62:39103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goll.net"] [uri "/66.php"] [unique_id "apK9DiJcY4fy7tP-rU3vAgAAAlo"]
[Sat Aug 29 05:05:50.135591 2026] [security2:error] [pid 1017536:tid 1017726] [client 20.104.104.62:10819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/wp-admin/zwso.php"] [unique_id "apK9DiJcY4fy7tP-rU3vAwAAAlA"]
[Sat Aug 29 05:05:50.140665 2026] [security2:error] [pid 1017536:tid 1017710] [client 4.205.62.107:64926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/agg.php"] [unique_id "apK9DiJcY4fy7tP-rU3vBQAAAkA"]
[Sat Aug 29 05:05:50.142275 2026] [security2:error] [pid 1017536:tid 1017730] [client 20.48.250.41:23385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/0byte.php"] [unique_id "apK9DiJcY4fy7tP-rU3vBgAAAlQ"]
[Sat Aug 29 05:05:50.145210 2026] [security2:error] [pid 1017536:tid 1017753] [client 20.104.104.62:64740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/374k.php"] [unique_id "apK9DiJcY4fy7tP-rU3vBwAAAms"]
[Sat Aug 29 05:05:50.148040 2026] [security2:error] [pid 1017536:tid 1017713] [client 168.107.94.195:52210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9DiJcY4fy7tP-rU3vCAAAAkM"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:50.153964 2026] [security2:error] [pid 1017536:tid 1017757] [client 192.145.125.70:51732] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.xqk.etg.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "apK9DiJcY4fy7tP-rU3vCQAAAm8"]
[Sat Aug 29 05:05:50.167198 2026] [security2:error] [pid 1017536:tid 1017782] [client 20.104.18.15:7010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/fpwch.php"] [unique_id "apK9DiJcY4fy7tP-rU3vCgAAAog"]
[Sat Aug 29 05:05:50.188766 2026] [security2:error] [pid 1018003:tid 1018089] [remote 93.123.109.228:53320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/php_info.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpKwAF4kQ"]
[Sat Aug 29 05:05:50.211766 2026] [security2:error] [pid 1017536:tid 1017789] [client 45.148.10.62:38250] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.wanderlustpictures.com"] [uri "/backend/.env"] [unique_id "apK9DiJcY4fy7tP-rU3vDQAAAo8"]
[Sat Aug 29 05:05:50.213547 2026] [security2:error] [pid 1018003:tid 1018174] [client 20.104.18.15:13244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/inx.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpLgAABc8"]
[Sat Aug 29 05:05:50.215571 2026] [security2:error] [pid 1018003:tid 1018187] [client 20.104.104.62:22656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/sao.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpLwAABdw"]
[Sat Aug 29 05:05:50.228853 2026] [security2:error] [pid 1018003:tid 1018070] [remote 93.123.109.228:53320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/phpinfo.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpMQAF7DE"]
[Sat Aug 29 05:05:50.228865 2026] [security2:error] [pid 1018003:tid 1018221] [client 20.104.18.15:23493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/run.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpMwAABf4"]
[Sat Aug 29 05:05:50.253397 2026] [security2:error] [pid 1018003:tid 1018232] [client 20.104.18.15:8189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/ws85.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpNQAABgg"]
[Sat Aug 29 05:05:50.268753 2026] [security2:error] [pid 1018003:tid 1018087] [remote 93.123.109.228:53320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/php.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpNwAGEUI"]
[Sat Aug 29 05:05:50.268786 2026] [security2:error] [pid 1018003:tid 1018076] [remote 93.123.109.228:53320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/php-info.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpOAAGETc"]
[Sat Aug 29 05:05:50.269879 2026] [security2:error] [pid 1017536:tid 1017679] [client 20.48.250.41:27626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/galer.php"] [unique_id "apK9DiJcY4fy7tP-rU3vDwAAAiE"]
[Sat Aug 29 05:05:50.273470 2026] [security2:error] [pid 1017536:tid 1017686] [client 20.104.104.62:10831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/Contrller.php"] [unique_id "apK9DiJcY4fy7tP-rU3vEAAAAig"]
[Sat Aug 29 05:05:50.278365 2026] [security2:error] [pid 1017536:tid 1017731] [client 20.48.250.41:23481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/xr.php"] [unique_id "apK9DiJcY4fy7tP-rU3vEQAAAlU"]
[Sat Aug 29 05:05:50.281986 2026] [security2:error] [pid 1017536:tid 1017681] [client 20.104.104.62:48699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/x23.php"] [unique_id "apK9DiJcY4fy7tP-rU3vEgAAAiM"]
[Sat Aug 29 05:05:50.288384 2026] [security2:error] [pid 1017536:tid 1017785] [client 40.83.93.50:3159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/defaults.php"] [unique_id "apK9DiJcY4fy7tP-rU3vEwAAAos"]
[Sat Aug 29 05:05:50.317799 2026] [security2:error] [pid 1018003:tid 1018183] [client 20.104.18.15:7101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/domvf.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpPgAABdg"]
[Sat Aug 29 05:05:50.318715 2026] [security2:error] [pid 1018003:tid 1018240] [client 20.104.18.15:36689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/vpn.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpPwAABhA"]
[Sat Aug 29 05:05:50.328998 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.104.104.62:38942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goll.net"] [uri "/elp.php"] [unique_id "apK9DiJcY4fy7tP-rU3vFAAAAnk"]
[Sat Aug 29 05:05:50.345731 2026] [security2:error] [pid 1017536:tid 1017684] [client 20.104.104.62:22670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/uuu.php"] [unique_id "apK9DiJcY4fy7tP-rU3vFQAAAiY"]
[Sat Aug 29 05:05:50.366823 2026] [security2:error] [pid 1017536:tid 1017693] [client 45.148.10.62:38250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wanderlustpictures.com"] [uri "/test.php"] [unique_id "apK9DiJcY4fy7tP-rU3vFgAAAi8"]
[Sat Aug 29 05:05:50.373939 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.104.49.130:47851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/ab.php"] [unique_id "apK9DiJcY4fy7tP-rU3vFwAAAh0"]
[Sat Aug 29 05:05:50.379908 2026] [security2:error] [pid 1018003:tid 1018217] [client 20.196.209.81:17098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-blog-header.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpRAAABfo"]
[Sat Aug 29 05:05:50.385247 2026] [security2:error] [pid 1018003:tid 1018246] [client 20.104.18.15:8190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/ffs.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpRQAABhY"]
[Sat Aug 29 05:05:50.394239 2026] [security2:error] [pid 1017536:tid 1017751] [client 20.104.18.15:23524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/new.php"] [unique_id "apK9DiJcY4fy7tP-rU3vGAAAAmk"]
[Sat Aug 29 05:05:50.394621 2026] [security2:error] [pid 1018003:tid 1018159] [client 20.104.18.15:13141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/vpn.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpRgAABcA"]
[Sat Aug 29 05:05:50.412136 2026] [security2:error] [pid 1018003:tid 1018198] [client 4.205.62.107:22222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/queue.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpSAAABec"]
[Sat Aug 29 05:05:50.416689 2026] [security2:error] [pid 1018003:tid 1018258] [client 4.205.62.107:65518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/i.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpSQAABiI"]
[Sat Aug 29 05:05:50.418005 2026] [security2:error] [pid 1018003:tid 1018063] [remote 93.123.109.228:53320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/public/phpinfo.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpSwAF4So"]
[Sat Aug 29 05:05:50.422185 2026] [security2:error] [pid 1018003:tid 1018256] [client 20.104.49.130:63570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/read.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpTAAABiA"]
[Sat Aug 29 05:05:50.429182 2026] [security2:error] [pid 1018003:tid 1018155] [client 20.104.104.62:10465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/Zeiss.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpTQAABbw"]
[Sat Aug 29 05:05:50.438714 2026] [security2:error] [pid 1017536:tid 1017694] [client 4.205.62.107:22369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/ccou.php"] [unique_id "apK9DiJcY4fy7tP-rU3vGQAAAjA"]
[Sat Aug 29 05:05:50.440519 2026] [security2:error] [pid 1018003:tid 1018171] [client 20.48.250.41:23491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/h02ugyh.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpUAAABcw"]
[Sat Aug 29 05:05:50.450206 2026] [security2:error] [pid 1018003:tid 1018196] [client 20.104.18.15:7126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/biufile.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpUQAABeU"]
[Sat Aug 29 05:05:50.454321 2026] [security2:error] [pid 1017536:tid 1017754] [client 20.104.49.130:57702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/wsd.php"] [unique_id "apK9DiJcY4fy7tP-rU3vGgAAAmw"]
[Sat Aug 29 05:05:50.466795 2026] [security2:error] [pid 1017536:tid 1017722] [client 192.145.125.70:51746] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.xqk.etg.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "apK9DiJcY4fy7tP-rU3vGwAAAkw"]
[Sat Aug 29 05:05:50.467844 2026] [security2:error] [pid 1017536:tid 1017673] [client 20.104.18.15:36693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/shiny.php"] [unique_id "apK9DiJcY4fy7tP-rU3vHAAAAhs"]
[Sat Aug 29 05:05:50.482844 2026] [security2:error] [pid 1017536:tid 1017792] [client 20.104.104.62:22687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/private.php"] [unique_id "apK9DiJcY4fy7tP-rU3vHQAAApI"]
[Sat Aug 29 05:05:50.487200 2026] [security2:error] [pid 1017536:tid 1017672] [client 158.158.54.35:6963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/a1.php"] [unique_id "apK9DiJcY4fy7tP-rU3vHgAAAho"]
[Sat Aug 29 05:05:50.494108 2026] [security2:error] [pid 1017536:tid 1017752] [client 4.205.62.107:2972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/myfile.php"] [unique_id "apK9DiJcY4fy7tP-rU3vHwAAAmo"]
[Sat Aug 29 05:05:50.494451 2026] [security2:error] [pid 1017536:tid 1017692] [client 20.48.250.41:27643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/baixy.php"] [unique_id "apK9DiJcY4fy7tP-rU3vIAAAAi4"]
[Sat Aug 29 05:05:50.509688 2026] [security2:error] [pid 1018003:tid 1018167] [client 4.232.148.111:8421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpWQAABcg"]
[Sat Aug 29 05:05:50.513155 2026] [security2:error] [pid 1018003:tid 1018264] [client 20.104.104.62:48684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/ws66.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpWgAABig"]
[Sat Aug 29 05:05:50.516941 2026] [security2:error] [pid 1017536:tid 1017667] [client 20.104.18.15:8184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/nano.php"] [unique_id "apK9DiJcY4fy7tP-rU3vIgAAAhU"]
[Sat Aug 29 05:05:50.524338 2026] [security2:error] [pid 1017536:tid 1017729] [client 20.104.104.62:39052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goll.net"] [uri "/ioxi-o.php"] [unique_id "apK9DiJcY4fy7tP-rU3vJAAAAlM"]
[Sat Aug 29 05:05:50.525176 2026] [security2:error] [pid 1018003:tid 1018245] [client 45.148.10.62:38264] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.wanderlustpictures.com"] [uri "/.env.backup"] [unique_id "apK9DjAh5Y1i2tUxg4HpXwAABhU"]
[Sat Aug 29 05:05:50.528780 2026] [security2:error] [pid 1018003:tid 1018202] [client 168.107.94.195:52514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpYgAABes"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:50.533396 2026] [security2:error] [pid 1018003:tid 1018195] [client 20.104.104.62:64744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/cmd.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpZQAABeQ"]
[Sat Aug 29 05:05:50.534679 2026] [security2:error] [pid 1018003:tid 1018216] [client 20.104.18.15:23450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/inx.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpZgAABfk"]
[Sat Aug 29 05:05:50.537442 2026] [security2:error] [pid 1018003:tid 1018175] [client 20.104.18.15:13294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/shiny.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpZwAABdA"]
[Sat Aug 29 05:05:50.564301 2026] [security2:error] [pid 1017536:tid 1017719] [client 20.104.104.62:44592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/ww2.php"] [unique_id "apK9DiJcY4fy7tP-rU3vJwAAAkk"]
[Sat Aug 29 05:05:50.591331 2026] [security2:error] [pid 1018003:tid 1018220] [client 20.48.250.41:23448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/xxw.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpbAAABf0"]
[Sat Aug 29 05:05:50.604155 2026] [security2:error] [pid 1018003:tid 1018199] [client 158.23.147.79:50050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpbQAABeg"]
[Sat Aug 29 05:05:50.615119 2026] [security2:error] [pid 1017536:tid 1017783] [client 20.104.104.62:45967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/lfi.php"] [unique_id "apK9DiJcY4fy7tP-rU3vKQAAAok"]
[Sat Aug 29 05:05:50.652074 2026] [security2:error] [pid 1018003:tid 1018170] [client 20.104.18.15:8000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/ano.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpcwAABcs"]
[Sat Aug 29 05:05:50.654017 2026] [security2:error] [pid 1017536:tid 1017736] [client 20.48.250.41:27492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/ava.php"] [unique_id "apK9DiJcY4fy7tP-rU3vKwAAAlo"]
[Sat Aug 29 05:05:50.659027 2026] [security2:error] [pid 1017536:tid 1017696] [client 74.248.24.12:29562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/m.php"] [unique_id "apK9DiJcY4fy7tP-rU3vLQAAAjI"]
[Sat Aug 29 05:05:50.666865 2026] [security2:error] [pid 1017536:tid 1017743] [client 20.104.18.15:7104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/blacks.php"] [unique_id "apK9DiJcY4fy7tP-rU3vLgAAAmE"]
[Sat Aug 29 05:05:50.674171 2026] [security2:error] [pid 1018003:tid 1018275] [client 45.148.10.62:38264] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.wanderlustpictures.com"] [uri "/.env.old"] [unique_id "apK9DjAh5Y1i2tUxg4HpdQAABjM"]
[Sat Aug 29 05:05:50.682782 2026] [security2:error] [pid 1018003:tid 1018179] [client 20.104.18.15:36802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/goods.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpdgAABdQ"]
[Sat Aug 29 05:05:50.686610 2026] [security2:error] [pid 1018003:tid 1018268] [client 20.104.18.15:13201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/goods.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpdwAABiw"]
[Sat Aug 29 05:05:50.710886 2026] [security2:error] [pid 1018003:tid 1018169] [client 20.104.104.62:10843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/anz.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpeQAABco"]
[Sat Aug 29 05:05:50.731683 2026] [security2:error] [pid 1018003:tid 1018242] [client 20.104.104.62:48753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/Cok.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpfAAABhI"]
[Sat Aug 29 05:05:50.747367 2026] [access_compat:error] [pid 1018003:tid 1018029] [remote 52.167.144.65:0] AH01797: client denied by server configuration: /home1/giantsfa/public_html/robots.txt
[Sat Aug 29 05:05:50.755934 2026] [security2:error] [pid 1017536:tid 1017780] [client 20.104.104.62:55017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/quoys.php"] [unique_id "apK9DiJcY4fy7tP-rU3vMAAAAoY"]
[Sat Aug 29 05:05:50.759924 2026] [security2:error] [pid 1017536:tid 1017734] [client 20.104.18.15:23499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/vpn.php"] [unique_id "apK9DiJcY4fy7tP-rU3vMQAAAlg"]
[Sat Aug 29 05:05:50.775700 2026] [security2:error] [pid 1017536:tid 1017727] [client 20.196.209.81:17026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-blogs.php"] [unique_id "apK9DiJcY4fy7tP-rU3vMgAAAlE"]
[Sat Aug 29 05:05:50.778270 2026] [security2:error] [pid 1017536:tid 1017713] [client 20.48.250.41:23301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/bolt.php"] [unique_id "apK9DiJcY4fy7tP-rU3vMwAAAkM"]
[Sat Aug 29 05:05:50.794285 2026] [security2:error] [pid 1017536:tid 1017757] [client 20.104.104.62:38926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goll.net"] [uri "/wp-links-opml.php"] [unique_id "apK9DiJcY4fy7tP-rU3vNAAAAm8"]
[Sat Aug 29 05:05:50.797433 2026] [security2:error] [pid 1017536:tid 1017668] [client 68.155.159.216:52823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-admin/about.php"] [unique_id "apK9DiJcY4fy7tP-rU3vNQAAAhY"]
[Sat Aug 29 05:05:50.799321 2026] [security2:error] [pid 1017536:tid 1017732] [client 40.83.93.50:14442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/post.php"] [unique_id "apK9DiJcY4fy7tP-rU3vNgAAAlY"]
[Sat Aug 29 05:05:50.801076 2026] [security2:error] [pid 1017536:tid 1017746] [client 20.48.250.41:27581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/gdn.php"] [unique_id "apK9DiJcY4fy7tP-rU3vNwAAAmQ"]
[Sat Aug 29 05:05:50.808183 2026] [security2:error] [pid 1018003:tid 1018243] [client 20.104.18.15:7048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/beck.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpiQAABhM"]
[Sat Aug 29 05:05:50.819651 2026] [security2:error] [pid 1017536:tid 1017761] [client 20.104.18.15:13152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/alfa.php"] [unique_id "apK9DiJcY4fy7tP-rU3vOAAAAnM"]
[Sat Aug 29 05:05:50.821063 2026] [security2:error] [pid 1018003:tid 1018257] [client 20.104.18.15:8169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/mgrr.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpigAABiE"]
[Sat Aug 29 05:05:50.822650 2026] [security2:error] [pid 1017536:tid 1017742] [client 68.155.159.216:24557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-content/themes/too.php"] [unique_id "apK9DiJcY4fy7tP-rU3vOQAAAmA"]
[Sat Aug 29 05:05:50.831801 2026] [security2:error] [pid 1017536:tid 1017723] [client 4.205.62.107:55943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/rem.php"] [unique_id "apK9DiJcY4fy7tP-rU3vOgAAAk0"]
[Sat Aug 29 05:05:50.841617 2026] [cgid:error] [pid 1018003:tid 1018193] [client 45.148.10.62:38264] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/404.shtml
[Sat Aug 29 05:05:50.859386 2026] [security2:error] [pid 1018003:tid 1018234] [client 20.104.104.62:10474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/bge.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpjQAABgo"]
[Sat Aug 29 05:05:50.859902 2026] [security2:error] [pid 1018003:tid 1018248] [client 68.155.159.216:51539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/dropdown.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpjgAABhg"]
[Sat Aug 29 05:05:50.860487 2026] [security2:error] [pid 1017536:tid 1017785] [client 20.104.18.15:36840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/alfa.php"] [unique_id "apK9DiJcY4fy7tP-rU3vPQAAAos"]
[Sat Aug 29 05:05:50.862914 2026] [security2:error] [pid 1017536:tid 1017704] [client 20.48.251.3:14321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/phpi.php"] [unique_id "apK9DiJcY4fy7tP-rU3vPgAAAjo"]
[Sat Aug 29 05:05:50.863691 2026] [security2:error] [pid 1017536:tid 1017714] [client 20.104.104.62:64765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/jkt48_1.php"] [unique_id "apK9DiJcY4fy7tP-rU3vPwAAAkQ"]
[Sat Aug 29 05:05:50.891813 2026] [security2:error] [pid 1018003:tid 1018233] [client 20.104.104.62:22712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/vbbn.php"] [unique_id "apK9DjAh5Y1i2tUxg4HplQAABgk"]
[Sat Aug 29 05:05:50.893279 2026] [security2:error] [pid 1018003:tid 1018215] [client 20.104.18.15:23507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/shiny.php"] [unique_id "apK9DjAh5Y1i2tUxg4HplgAABfg"]
[Sat Aug 29 05:05:50.908206 2026] [security2:error] [pid 1017536:tid 1017776] [client 20.48.250.41:23497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/rtx.php"] [unique_id "apK9DiJcY4fy7tP-rU3vSAAAAoI"]
[Sat Aug 29 05:05:50.911799 2026] [security2:error] [pid 1017536:tid 1017773] [client 168.107.94.195:52850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9DiJcY4fy7tP-rU3vSQAAAn8"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:50.914747 2026] [security2:error] [pid 1017536:tid 1017694] [client 20.104.68.135:16060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kevinpascoe.com"] [uri "/sm.php"] [unique_id "apK9DiJcY4fy7tP-rU3vSgAAAjA"]
[Sat Aug 29 05:05:50.915813 2026] [security2:error] [pid 1017536:tid 1017717] [client 20.104.104.62:48497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/X7T6.php"] [unique_id "apK9DiJcY4fy7tP-rU3vSwAAAkc"]
[Sat Aug 29 05:05:50.935176 2026] [security2:error] [pid 1017536:tid 1017722] [client 158.23.147.79:30664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK9DiJcY4fy7tP-rU3vTAAAAkw"]
[Sat Aug 29 05:05:50.937672 2026] [security2:error] [pid 1018003:tid 1018267] [client 158.158.54.35:21810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpmQAABis"]
[Sat Aug 29 05:05:50.938137 2026] [security2:error] [pid 1018003:tid 1018254] [client 4.205.62.107:53318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/xve22.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpmgAABh4"]
[Sat Aug 29 05:05:50.943807 2026] [security2:error] [pid 1017536:tid 1017792] [client 68.155.159.216:50267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-content/x/index.php"] [unique_id "apK9DiJcY4fy7tP-rU3vTQAAApI"]
[Sat Aug 29 05:05:50.947487 2026] [security2:error] [pid 1017536:tid 1017672] [client 20.104.18.15:7137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/t3.php"] [unique_id "apK9DiJcY4fy7tP-rU3vTgAAAho"]
[Sat Aug 29 05:05:50.954000 2026] [security2:error] [pid 1018003:tid 1018191] [client 20.104.18.15:8161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/mac.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpnAAABeA"]
[Sat Aug 29 05:05:50.980340 2026] [security2:error] [pid 1017536:tid 1017770] [client 158.23.147.79:30609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK9DiJcY4fy7tP-rU3vTwAAAnw"]
[Sat Aug 29 05:05:50.984828 2026] [security2:error] [pid 1017536:tid 1017729] [client 68.155.159.216:18306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK9DiJcY4fy7tP-rU3vUAAAAlM"]
[Sat Aug 29 05:05:50.987114 2026] [security2:error] [pid 1017536:tid 1017707] [client 20.104.104.62:44548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/wp-ana.php"] [unique_id "apK9DiJcY4fy7tP-rU3vUQAAAj0"]
[Sat Aug 29 05:05:50.988504 2026] [security2:error] [pid 1018003:tid 1018271] [client 20.104.104.62:39096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goll.net"] [uri "/feokc.php"] [unique_id "apK9DjAh5Y1i2tUxg4HpngAABi8"]
[Sat Aug 29 05:05:50.989128 2026] [security2:error] [pid 1017536:tid 1017721] [client 4.232.148.111:33813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/222.php"] [unique_id "apK9DiJcY4fy7tP-rU3vUgAAAks"]
[Sat Aug 29 05:05:50.989651 2026] [security2:error] [pid 1018003:tid 1018240] [client 45.148.10.62:38264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wanderlustpictures.com"] [uri "/.env.php.bak"] [unique_id "apK9DjAh5Y1i2tUxg4HpnwAABhA"]
[Sat Aug 29 05:05:50.995665 2026] [security2:error] [pid 1017536:tid 1017790] [client 20.104.18.15:13287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/33.php"] [unique_id "apK9DiJcY4fy7tP-rU3vUwAAApA"]
[Sat Aug 29 05:05:51.012315 2026] [security2:error] [pid 1017536:tid 1017687] [client 20.104.49.130:60770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/btyuio.php"] [unique_id "apK9DyJcY4fy7tP-rU3vVQAAAik"]
[Sat Aug 29 05:05:51.021091 2026] [security2:error] [pid 1017536:tid 1017744] [client 20.104.104.62:22707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/rfi.php"] [unique_id "apK9DyJcY4fy7tP-rU3vVgAAAmI"]
[Sat Aug 29 05:05:51.023686 2026] [security2:error] [pid 1017536:tid 1017719] [client 20.104.18.15:36703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/33.php"] [unique_id "apK9DyJcY4fy7tP-rU3vVwAAAkk"]
[Sat Aug 29 05:05:51.026303 2026] [security2:error] [pid 1017536:tid 1017786] [client 20.104.18.15:23463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/goods.php"] [unique_id "apK9DyJcY4fy7tP-rU3vWAAAAow"]
[Sat Aug 29 05:05:51.036556 2026] [security2:error] [pid 1017536:tid 1017698] [client 20.48.250.41:23473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/ckk.php"] [unique_id "apK9DyJcY4fy7tP-rU3vWQAAAjQ"]
[Sat Aug 29 05:05:51.051643 2026] [security2:error] [pid 1017536:tid 1017778] [client 68.155.159.216:61685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.gavirestaurant.com"] [uri "/ans.php"] [unique_id "apK9DyJcY4fy7tP-rU3vXAAAAoQ"]
[Sat Aug 29 05:05:51.056885 2026] [security2:error] [pid 1017536:tid 1017709] [client 20.48.250.41:27606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/f2.php"] [unique_id "apK9DyJcY4fy7tP-rU3vXwAAAj8"]
[Sat Aug 29 05:05:51.076723 2026] [security2:error] [pid 1017536:tid 1017710] [client 20.104.18.15:7091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/wp.php"] [unique_id "apK9DyJcY4fy7tP-rU3vYQAAAkA"]
[Sat Aug 29 05:05:51.101424 2026] [security2:error] [pid 1018003:tid 1018190] [client 68.155.159.216:58275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK9DzAh5Y1i2tUxg4HpowAABd8"]
[Sat Aug 29 05:05:51.128189 2026] [security2:error] [pid 1018003:tid 1018198] [client 20.104.18.15:13219] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/133.php"] [unique_id "apK9DzAh5Y1i2tUxg4HppgAABec"]
[Sat Aug 29 05:05:51.131499 2026] [security2:error] [pid 1017536:tid 1017746] [client 20.104.18.15:8160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/simple.php"] [unique_id "apK9DyJcY4fy7tP-rU3vYwAAAmQ"]
[Sat Aug 29 05:05:51.135470 2026] [security2:error] [pid 1017536:tid 1017708] [client 20.104.104.62:44563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/secret.php"] [unique_id "apK9DyJcY4fy7tP-rU3vZAAAAj4"]
[Sat Aug 29 05:05:51.144706 2026] [security2:error] [pid 1018003:tid 1018258] [client 45.148.10.62:38224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wanderlustpictures.com"] [uri "/.env.php"] [unique_id "apK9DzAh5Y1i2tUxg4HpqAAABiI"]
[Sat Aug 29 05:05:51.147842 2026] [security2:error] [pid 1017536:tid 1017761] [client 20.104.104.62:20648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/adminer.php"] [unique_id "apK9DyJcY4fy7tP-rU3vZQAAAnM"]
[Sat Aug 29 05:05:51.155013 2026] [security2:error] [pid 1017536:tid 1017674] [client 103.171.189.88:52600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9DyJcY4fy7tP-rU3vZgAAAhw"]
[Sat Aug 29 05:05:51.155123 2026] [security2:error] [pid 1017536:tid 1017674] [client 103.171.189.88:52600] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9DyJcY4fy7tP-rU3vZgAAAhw"]
[Sat Aug 29 05:05:51.155327 2026] [security2:error] [pid 1018003:tid 1018192] [client 158.23.147.79:32756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9DzAh5Y1i2tUxg4HpqQAABeE"]
[Sat Aug 29 05:05:51.156188 2026] [security2:error] [pid 1018003:tid 1018171] [client 20.104.104.62:22714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/tajj.php"] [unique_id "apK9DzAh5Y1i2tUxg4HpqgAABcw"]
[Sat Aug 29 05:05:51.174531 2026] [security2:error] [pid 1017536:tid 1017781] [client 20.104.104.62:48452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/see.php"] [unique_id "apK9DyJcY4fy7tP-rU3vaQAAAoc"]
[Sat Aug 29 05:05:51.176703 2026] [security2:error] [pid 1017536:tid 1017706] [client 20.196.209.81:17065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-comments-post.php"] [unique_id "apK9DyJcY4fy7tP-rU3vagAAAjw"]
[Sat Aug 29 05:05:51.180345 2026] [security2:error] [pid 1017536:tid 1017757] [client 20.104.104.62:39074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goll.net"] [uri "/k.php"] [unique_id "apK9DyJcY4fy7tP-rU3vawAAAm8"]
[Sat Aug 29 05:05:51.181963 2026] [security2:error] [pid 1017536:tid 1017760] [client 158.23.147.79:63808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-login.php"] [unique_id "apK9DyJcY4fy7tP-rU3vbAAAAnI"]
[Sat Aug 29 05:05:51.183155 2026] [security2:error] [pid 1017536:tid 1017775] [client 20.104.18.15:23373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/alfa.php"] [unique_id "apK9DyJcY4fy7tP-rU3vbQAAAoE"]
[Sat Aug 29 05:05:51.183169 2026] [security2:error] [pid 1018003:tid 1018172] [client 68.155.159.216:12227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/index/function.php"] [unique_id "apK9DzAh5Y1i2tUxg4HpsgAABc0"]
[Sat Aug 29 05:05:51.185583 2026] [security2:error] [pid 1017536:tid 1017788] [client 20.104.68.135:18478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kevinpascoe.com"] [uri "/shell.php"] [unique_id "apK9DyJcY4fy7tP-rU3vbwAAAo4"]
[Sat Aug 29 05:05:51.209734 2026] [security2:error] [pid 1017536:tid 1017765] [client 20.48.250.41:27535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/grsiuk.php"] [unique_id "apK9DyJcY4fy7tP-rU3vcAAAAnc"]
[Sat Aug 29 05:05:51.212605 2026] [security2:error] [pid 1017536:tid 1017765] [client 20.104.18.15:7081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/abcd.php"] [unique_id "apK9DyJcY4fy7tP-rU3vcQAAAnc"]
[Sat Aug 29 05:05:51.213849 2026] [security2:error] [pid 1017536:tid 1017695] [client 74.248.24.12:41009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "apK9DyJcY4fy7tP-rU3vcgAAAjE"]
[Sat Aug 29 05:05:51.222259 2026] [security2:error] [pid 1017536:tid 1017785] [client 158.23.147.79:25544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/asd.php"] [unique_id "apK9DyJcY4fy7tP-rU3vcwAAAos"]
[Sat Aug 29 05:05:51.223518 2026] [security2:error] [pid 1018003:tid 1018194] [client 20.48.250.41:23376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gocreativesolar.hawesinc.com"] [uri "/R57.php"] [unique_id "apK9DzAh5Y1i2tUxg4HptAAABeM"]
[Sat Aug 29 05:05:51.253618 2026] [security2:error] [pid 1017536:tid 1017693] [client 61.9.8.240:1749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK9DyJcY4fy7tP-rU3vdAAAAi8"]
[Sat Aug 29 05:05:51.253748 2026] [security2:error] [pid 1017536:tid 1017693] [client 61.9.8.240:1749] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK9DyJcY4fy7tP-rU3vdAAAAi8"]
[Sat Aug 29 05:05:51.262911 2026] [security2:error] [pid 1017536:tid 1017777] [client 68.155.159.216:14227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK9DyJcY4fy7tP-rU3vdQAAAoM"]
[Sat Aug 29 05:05:51.264032 2026] [security2:error] [pid 1017536:tid 1017751] [client 20.104.18.15:8066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/xty.php"] [unique_id "apK9DyJcY4fy7tP-rU3vdgAAAmk"]
[Sat Aug 29 05:05:51.271922 2026] [security2:error] [pid 1017536:tid 1017680] [client 20.104.104.62:44604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/pro.php"] [unique_id "apK9DyJcY4fy7tP-rU3vdwAAAiI"]
[Sat Aug 29 05:05:51.279489 2026] [security2:error] [pid 1017536:tid 1017768] [client 4.205.62.107:64195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/requirements.php"] [unique_id "apK9DyJcY4fy7tP-rU3veQAAAno"]
[Sat Aug 29 05:05:51.291514 2026] [security2:error] [pid 1017536:tid 1017792] [client 168.107.94.195:53222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9DyJcY4fy7tP-rU3vfAAAApI"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:51.298643 2026] [security2:error] [pid 1017536:tid 1017752] [client 20.104.104.62:54550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/grsiuk.php"] [unique_id "apK9DyJcY4fy7tP-rU3vfwAAAmo"]
[Sat Aug 29 05:05:51.298874 2026] [cgid:error] [pid 1017536:tid 1017724] [client 45.148.10.62:38238] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/404.shtml
[Sat Aug 29 05:05:51.302454 2026] [security2:error] [pid 1017536:tid 1017669] [client 149.34.210.141:15458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9DyJcY4fy7tP-rU3vgQAAAhc"]
[Sat Aug 29 05:05:51.302543 2026] [security2:error] [pid 1017536:tid 1017669] [client 149.34.210.141:15458] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9DyJcY4fy7tP-rU3vgQAAAhc"]
[Sat Aug 29 05:05:51.308491 2026] [security2:error] [pid 1017536:tid 1017667] [client 20.104.18.15:13302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/sym.php"] [unique_id "apK9DyJcY4fy7tP-rU3vgwAAAhU"]
[Sat Aug 29 05:05:51.327525 2026] [security2:error] [pid 1018003:tid 1018255] [client 158.23.147.79:24419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK9DzAh5Y1i2tUxg4HpuwAABh8"]
[Sat Aug 29 05:05:51.333204 2026] [security2:error] [pid 1017536:tid 1017685] [client 20.104.18.15:23522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/33.php"] [unique_id "apK9DyJcY4fy7tP-rU3vhAAAAic"]
[Sat Aug 29 05:05:51.358171 2026] [security2:error] [pid 1017536:tid 1017744] [client 20.104.18.15:7002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/nofile.php"] [unique_id "apK9DyJcY4fy7tP-rU3vhwAAAmI"]
[Sat Aug 29 05:05:51.374317 2026] [security2:error] [pid 1017536:tid 1017786] [client 20.104.104.62:48515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/horeg.php"] [unique_id "apK9DyJcY4fy7tP-rU3viQAAAow"]
[Sat Aug 29 05:05:51.374517 2026] [security2:error] [pid 1017536:tid 1017789] [client 40.83.93.50:3178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/csv.php"] [unique_id "apK9DyJcY4fy7tP-rU3viAAAAo8"]
[Sat Aug 29 05:05:51.374816 2026] [security2:error] [pid 1017536:tid 1017764] [client 20.104.104.62:38932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goll.net"] [uri "/tx78.php"] [unique_id "apK9DyJcY4fy7tP-rU3vigAAAnY"]
[Sat Aug 29 05:05:51.375762 2026] [security2:error] [pid 1017536:tid 1017714] [client 158.158.54.35:6919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/alfa-rex.php7"] [unique_id "apK9DyJcY4fy7tP-rU3viwAAAkQ"]
[Sat Aug 29 05:05:51.376730 2026] [security2:error] [pid 1017536:tid 1017690] [client 158.23.147.79:48284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-content/languages/about.php"] [unique_id "apK9DyJcY4fy7tP-rU3vjAAAAiw"]
[Sat Aug 29 05:05:51.380531 2026] [security2:error] [pid 1017536:tid 1017678] [client 20.104.68.135:16001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kevinpascoe.com"] [uri "/simple.php"] [unique_id "apK9DyJcY4fy7tP-rU3vjQAAAiA"]
[Sat Aug 29 05:05:51.401024 2026] [security2:error] [pid 1017536:tid 1017731] [client 20.104.18.15:8129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/sallu.php"] [unique_id "apK9DyJcY4fy7tP-rU3vjwAAAlU"]
[Sat Aug 29 05:05:51.409513 2026] [security2:error] [pid 1018003:tid 1018167] [client 20.104.104.62:10445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/999.php"] [unique_id "apK9DzAh5Y1i2tUxg4HpwQAABcg"]
[Sat Aug 29 05:05:51.434094 2026] [security2:error] [pid 1018003:tid 1018264] [client 20.104.104.62:22715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/ahy66.php"] [unique_id "apK9DzAh5Y1i2tUxg4HpwwAABig"]
[Sat Aug 29 05:05:51.450957 2026] [cgid:error] [pid 1017536:tid 1017713] [client 45.148.10.62:38238] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/404.shtml
[Sat Aug 29 05:05:51.455682 2026] [security2:error] [pid 1017536:tid 1017668] [client 20.104.18.15:13224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/8.php"] [unique_id "apK9DyJcY4fy7tP-rU3vkQAAAhY"]
[Sat Aug 29 05:05:51.458781 2026] [security2:error] [pid 1017536:tid 1017783] [client 20.48.250.41:26918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/wp-scr1pts.php"] [unique_id "apK9DyJcY4fy7tP-rU3vkgAAAok"]
[Sat Aug 29 05:05:51.463517 2026] [security2:error] [pid 1018003:tid 1018262] [client 20.104.104.62:40203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/rootx.php"] [unique_id "apK9DzAh5Y1i2tUxg4HpxwAABiY"]
[Sat Aug 29 05:05:51.464924 2026] [security2:error] [pid 1017536:tid 1017692] [client 4.232.148.111:34943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/mini.php"] [unique_id "apK9DyJcY4fy7tP-rU3vlAAAAi4"]
[Sat Aug 29 05:05:51.479997 2026] [security2:error] [pid 1018003:tid 1018263] [client 20.104.18.15:36851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/133.php"] [unique_id "apK9DzAh5Y1i2tUxg4HpzAAABic"]
[Sat Aug 29 05:05:51.503701 2026] [security2:error] [pid 1018003:tid 1018219] [client 20.48.251.3:13965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK9DzAh5Y1i2tUxg4HpzQAABfw"]
[Sat Aug 29 05:05:51.508747 2026] [security2:error] [pid 1017536:tid 1017706] [client 20.104.18.15:23518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/133.php"] [unique_id "apK9DyJcY4fy7tP-rU3vlQAAAjw"]
[Sat Aug 29 05:05:51.517070 2026] [security2:error] [pid 1018003:tid 1018202] [client 20.104.18.15:7089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/run.php"] [unique_id "apK9DzAh5Y1i2tUxg4HpzgAABes"]
[Sat Aug 29 05:05:51.540792 2026] [security2:error] [pid 1017536:tid 1017670] [client 20.104.104.62:44559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/sef.php"] [unique_id "apK9DyJcY4fy7tP-rU3vlgAAAhg"]
[Sat Aug 29 05:05:51.543476 2026] [security2:error] [pid 1018003:tid 1018184] [client 4.205.62.107:22317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/plss3.php"] [unique_id "apK9DzAh5Y1i2tUxg4HpzwAABdk"]
[Sat Aug 29 05:05:51.555844 2026] [security2:error] [pid 1018003:tid 1018164] [client 4.205.62.107:65521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/guk.php"] [unique_id "apK9DzAh5Y1i2tUxg4Hp0QAABcU"]
[Sat Aug 29 05:05:51.564991 2026] [security2:error] [pid 1018003:tid 1018175] [client 20.104.18.15:8091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/codex.php"] [unique_id "apK9DzAh5Y1i2tUxg4Hp0gAABdA"]
[Sat Aug 29 05:05:51.567330 2026] [security2:error] [pid 1017536:tid 1017681] [client 20.104.104.62:45970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/gaje.php"] [unique_id "apK9DyJcY4fy7tP-rU3vmQAAAiM"]
[Sat Aug 29 05:05:51.568160 2026] [security2:error] [pid 1017536:tid 1017781] [client 20.104.104.62:39075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goll.net"] [uri "/wp-content/themes/admin.php"] [unique_id "apK9DyJcY4fy7tP-rU3vmgAAAoc"]
[Sat Aug 29 05:05:51.575947 2026] [security2:error] [pid 1017536:tid 1017695] [client 4.205.62.107:22210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/66.php"] [unique_id "apK9DyJcY4fy7tP-rU3vmwAAAjE"]
[Sat Aug 29 05:05:51.577182 2026] [security2:error] [pid 1017536:tid 1017757] [client 20.104.68.135:16026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kevinpascoe.com"] [uri "/wp-admin.php"] [unique_id "apK9DyJcY4fy7tP-rU3vnAAAAm8"]
[Sat Aug 29 05:05:51.579582 2026] [security2:error] [pid 1018003:tid 1018227] [client 20.196.209.81:17081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-config.php"] [unique_id "apK9DzAh5Y1i2tUxg4Hp0wAABgQ"]
[Sat Aug 29 05:05:51.584403 2026] [security2:error] [pid 1018003:tid 1018265] [client 20.104.104.62:48587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/basic.php"] [unique_id "apK9DzAh5Y1i2tUxg4Hp1gAABik"]
[Sat Aug 29 05:05:51.600958 2026] [cgid:error] [pid 1017536:tid 1017705] [client 45.148.10.62:38238] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/404.shtml
[Sat Aug 29 05:05:51.614614 2026] [security2:error] [pid 1018003:tid 1018186] [client 20.104.18.15:13308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/goods.php"] [unique_id "apK9DzAh5Y1i2tUxg4Hp2gAABds"]
[Sat Aug 29 05:05:51.629487 2026] [security2:error] [pid 1018003:tid 1018251] [client 20.48.250.41:27474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/num.php"] [unique_id "apK9DzAh5Y1i2tUxg4Hp3gAABhs"]
[Sat Aug 29 05:05:51.631040 2026] [security2:error] [pid 1018003:tid 1018160] [client 4.205.62.107:3005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/thui.php"] [unique_id "apK9DzAh5Y1i2tUxg4Hp3wAABcE"]
[Sat Aug 29 05:05:51.649890 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.104.18.15:36811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/sym.php"] [unique_id "apK9DyJcY4fy7tP-rU3vngAAAh0"]
[Sat Aug 29 05:05:51.657958 2026] [security2:error] [pid 1017536:tid 1017691] [client 20.104.18.15:23375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/sym.php"] [unique_id "apK9DyJcY4fy7tP-rU3vnwAAAi0"]
[Sat Aug 29 05:05:51.663675 2026] [security2:error] [pid 1018003:tid 1018205] [client 20.104.18.15:6980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/new.php"] [unique_id "apK9DzAh5Y1i2tUxg4Hp4AAABe4"]
[Sat Aug 29 05:05:51.668784 2026] [security2:error] [pid 1018003:tid 1018218] [client 20.104.104.62:10491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/admin123.php"] [unique_id "apK9DzAh5Y1i2tUxg4Hp4QAABfs"]
[Sat Aug 29 05:05:51.671964 2026] [security2:error] [pid 1018003:tid 1018151] [client 168.107.94.195:53601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9DzAh5Y1i2tUxg4Hp4gAABbg"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:51.701022 2026] [security2:error] [pid 1017536:tid 1017751] [client 20.104.104.62:54540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/wp-admin/zwso.php"] [unique_id "apK9DyJcY4fy7tP-rU3voAAAAmk"]
[Sat Aug 29 05:05:51.721715 2026] [security2:error] [pid 1017536:tid 1017773] [client 20.104.18.15:8093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/5656.php"] [unique_id "apK9DyJcY4fy7tP-rU3voQAAAn8"]
[Sat Aug 29 05:05:51.725720 2026] [security2:error] [pid 1017536:tid 1017717] [client 20.104.49.130:60943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/xa.php"] [unique_id "apK9DyJcY4fy7tP-rU3vogAAAkc"]
[Sat Aug 29 05:05:51.731218 2026] [security2:error] [pid 1017536:tid 1017748] [client 20.104.104.62:20837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/ls.php"] [unique_id "apK9DyJcY4fy7tP-rU3vowAAAmY"]
[Sat Aug 29 05:05:51.757868 2026] [security2:error] [pid 1017536:tid 1017792] [client 20.104.18.15:13153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/ah.php"] [unique_id "apK9DyJcY4fy7tP-rU3vpQAAApI"]
[Sat Aug 29 05:05:51.759447 2026] [cgid:error] [pid 1017536:tid 1017673] [client 45.148.10.62:38238] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/404.shtml
[Sat Aug 29 05:05:51.760939 2026] [security2:error] [pid 1017536:tid 1017724] [client 20.104.104.62:48527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/monso.php"] [unique_id "apK9DyJcY4fy7tP-rU3vpgAAAk4"]
[Sat Aug 29 05:05:51.762078 2026] [security2:error] [pid 1018003:tid 1018212] [client 20.104.104.62:39088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goll.net"] [uri "/wp-content/sallu.php"] [unique_id "apK9DzAh5Y1i2tUxg4Hp6QAABfU"]
[Sat Aug 29 05:05:51.774268 2026] [security2:error] [pid 1017536:tid 1017776] [client 20.104.68.135:38419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kevinpascoe.com"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "apK9DyJcY4fy7tP-rU3vpwAAAoI"]
[Sat Aug 29 05:05:51.799610 2026] [security2:error] [pid 1017536:tid 1017687] [client 20.104.104.62:10464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/7h.php"] [unique_id "apK9DyJcY4fy7tP-rU3vqAAAAik"]
[Sat Aug 29 05:05:51.801329 2026] [security2:error] [pid 1017536:tid 1017786] [client 20.104.18.15:7057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/inx.php"] [unique_id "apK9DyJcY4fy7tP-rU3vqQAAAow"]
[Sat Aug 29 05:05:51.809707 2026] [security2:error] [pid 1017536:tid 1017714] [client 20.48.250.41:27470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/a4.php"] [unique_id "apK9DyJcY4fy7tP-rU3vqgAAAkQ"]
[Sat Aug 29 05:05:51.820431 2026] [security2:error] [pid 1018003:tid 1018177] [client 74.248.24.12:40944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/222.php"] [unique_id "apK9DzAh5Y1i2tUxg4Hp7QAABdI"]
[Sat Aug 29 05:05:51.830444 2026] [security2:error] [pid 1017536:tid 1017678] [client 20.104.18.15:23496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/8.php"] [unique_id "apK9DyJcY4fy7tP-rU3vqwAAAiA"]
[Sat Aug 29 05:05:51.835659 2026] [security2:error] [pid 1017536:tid 1017689] [client 20.104.18.15:36682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/8.php"] [unique_id "apK9DyJcY4fy7tP-rU3vrAAAAis"]
[Sat Aug 29 05:05:51.838866 2026] [security2:error] [pid 1017536:tid 1017736] [client 20.104.104.62:22711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/Contrller.php"] [unique_id "apK9DyJcY4fy7tP-rU3vrQAAAlo"]
[Sat Aug 29 05:05:51.844332 2026] [security2:error] [pid 1017536:tid 1017777] [client 158.158.54.35:22027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-includes/fonts/index.php"] [unique_id "apK9DyJcY4fy7tP-rU3vrgAAAoM"]
[Sat Aug 29 05:05:51.862679 2026] [security2:error] [pid 1018003:tid 1018154] [client 40.83.93.50:7762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/fox.php"] [unique_id "apK9DzAh5Y1i2tUxg4Hp7gAABbs"]
[Sat Aug 29 05:05:51.909914 2026] [security2:error] [pid 1018003:tid 1018241] [client 20.104.18.15:7953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/w3lls.php"] [unique_id "apK9DzAh5Y1i2tUxg4Hp7wAABhE"]
[Sat Aug 29 05:05:51.916601 2026] [cgid:error] [pid 1017536:tid 1017732] [client 45.148.10.62:38238] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/404.shtml
[Sat Aug 29 05:05:51.919681 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.104.18.15:13288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/ws55.php"] [unique_id "apK9DyJcY4fy7tP-rU3vsQAAAlY"]
[Sat Aug 29 05:05:51.932660 2026] [security2:error] [pid 1018003:tid 1018152] [client 4.232.148.111:8384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/aa.php"] [unique_id "apK9DzAh5Y1i2tUxg4Hp8AAABbk"]
[Sat Aug 29 05:05:51.933766 2026] [security2:error] [pid 1017536:tid 1017681] [client 20.104.104.62:44582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/wp-gzone.php"] [unique_id "apK9DyJcY4fy7tP-rU3vsgAAAiM"]
[Sat Aug 29 05:05:51.934050 2026] [security2:error] [pid 1018003:tid 1018254] [client 20.197.61.180:13006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-admin/network/xmrlpc.php"] [unique_id "apK9DzAh5Y1i2tUxg4Hp8QAABh4"]
[Sat Aug 29 05:05:51.938304 2026] [security2:error] [pid 1018003:tid 1018203] [client 20.104.18.15:7134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/vpn.php"] [unique_id "apK9DzAh5Y1i2tUxg4Hp8wAABew"]
[Sat Aug 29 05:05:51.946351 2026] [security2:error] [pid 1017536:tid 1017695] [client 68.155.159.216:24459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/radio.php"] [unique_id "apK9DyJcY4fy7tP-rU3vswAAAjE"]
[Sat Aug 29 05:05:51.966906 2026] [security2:error] [pid 1018003:tid 1018188] [client 20.104.104.62:39058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goll.net"] [uri "/0.php"] [unique_id "apK9DzAh5Y1i2tUxg4Hp9AAABd0"]
[Sat Aug 29 05:05:51.967262 2026] [security2:error] [pid 1017536:tid 1017704] [client 68.155.159.216:51409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/sad/about.php"] [unique_id "apK9DyJcY4fy7tP-rU3vtAAAAjo"]
[Sat Aug 29 05:05:51.970750 2026] [security2:error] [pid 1017536:tid 1017703] [client 20.104.104.62:22673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/Zeiss.php"] [unique_id "apK9DyJcY4fy7tP-rU3vtQAAAjk"]
[Sat Aug 29 05:05:51.972230 2026] [security2:error] [pid 1017536:tid 1017754] [client 4.205.62.107:55960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/min.php"] [unique_id "apK9DyJcY4fy7tP-rU3vtgAAAmw"]
[Sat Aug 29 05:05:51.974243 2026] [security2:error] [pid 1017536:tid 1017775] [client 20.104.68.135:23814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kevinpascoe.com"] [uri "/wp-admin/includes/about.php"] [unique_id "apK9DyJcY4fy7tP-rU3vtwAAAoE"]
[Sat Aug 29 05:05:51.978738 2026] [security2:error] [pid 1018003:tid 1018187] [client 20.196.209.81:17415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-configs.php"] [unique_id "apK9DzAh5Y1i2tUxg4Hp-gAABdw"]
[Sat Aug 29 05:05:51.979545 2026] [security2:error] [pid 1018003:tid 1018271] [client 20.104.104.62:48648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/rce.php"] [unique_id "apK9DzAh5Y1i2tUxg4Hp-wAABi8"]
[Sat Aug 29 05:05:51.986054 2026] [security2:error] [pid 1018003:tid 1018240] [client 20.104.18.15:23525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/goods.php"] [unique_id "apK9DzAh5Y1i2tUxg4Hp_AAABhA"]
[Sat Aug 29 05:05:52.005828 2026] [cgid:error] [pid 1017536:tid 1017734] [client 34.7.40.70:4418] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:52.020849 2026] [security2:error] [pid 1018003:tid 1018185] [client 34.7.40.70:4482] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/@fs/var/www/html/.env"] [unique_id "apK9EDAh5Y1i2tUxg4Hp_wAABdo"]
[Sat Aug 29 05:05:52.023759 2026] [cgid:error] [pid 1017536:tid 1017746] [client 34.7.40.70:4448] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:52.024646 2026] [cgid:error] [pid 1017536:tid 1017708] [client 34.7.40.70:4542] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:52.025635 2026] [security2:error] [pid 1017536:tid 1017721] [client 34.7.40.70:4470] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/@fs/var/www/.env"] [unique_id "apK9ECJcY4fy7tP-rU3vvAAAAks"]
[Sat Aug 29 05:05:52.033262 2026] [cgid:error] [pid 1017536:tid 1017692] [client 34.7.40.70:4508] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:52.034279 2026] [cgid:error] [pid 1017536:tid 1017772] [client 34.7.40.70:4502] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:52.035046 2026] [cgid:error] [pid 1018003:tid 1018232] [client 34.7.40.70:4496] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:52.035471 2026] [security2:error] [pid 1018003:tid 1018235] [client 34.7.40.70:4490] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/@fs/usr/src/app/.env"] [unique_id "apK9EDAh5Y1i2tUxg4HqAQAABgs"]
[Sat Aug 29 05:05:52.047567 2026] [cgid:error] [pid 1018003:tid 1018215] [client 34.7.40.70:4518] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:52.048800 2026] [cgid:error] [pid 1018003:tid 1018200] [client 34.7.40.70:4484] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:52.049147 2026] [security2:error] [pid 1018003:tid 1018200] [client 34.7.40.70:4484] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/404.shtml"] [unique_id "apK9EDAh5Y1i2tUxg4HqAwAABek"]
[Sat Aug 29 05:05:52.049146 2026] [security2:error] [pid 1018003:tid 1018215] [client 34.7.40.70:4518] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/404.shtml"] [unique_id "apK9EDAh5Y1i2tUxg4HqAgAABfg"]
[Sat Aug 29 05:05:52.049612 2026] [cgid:error] [pid 1018003:tid 1018274] [client 34.7.40.70:4454] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:52.049716 2026] [security2:error] [pid 1018003:tid 1018274] [client 34.7.40.70:4454] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/404.shtml"] [unique_id "apK9EDAh5Y1i2tUxg4HqBAAABjI"]
[Sat Aug 29 05:05:52.050201 2026] [security2:error] [pid 1017536:tid 1017773] [client 158.23.147.79:30688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK9ECJcY4fy7tP-rU3vwQAAAn8"]
[Sat Aug 29 05:05:52.051071 2026] [cgid:error] [pid 1017536:tid 1017674] [client 34.7.40.70:4420] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:52.051501 2026] [security2:error] [pid 1018003:tid 1018198] [client 168.107.94.195:53978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9EDAh5Y1i2tUxg4HqBQAABec"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:52.052771 2026] [cgid:error] [pid 1017536:tid 1017743] [client 34.7.40.70:4528] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:52.057347 2026] [security2:error] [pid 1017536:tid 1017761] [client 34.7.40.70:4432] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/@fs/home/ubuntu/.env"] [unique_id "apK9ECJcY4fy7tP-rU3vwgAAAnM"]
[Sat Aug 29 05:05:52.059930 2026] [cgid:error] [pid 1017536:tid 1017712] [client 34.7.40.70:4556] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:52.063553 2026] [security2:error] [pid 1017536:tid 1017717] [client 20.104.18.15:13204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/drykl.php"] [unique_id "apK9ECJcY4fy7tP-rU3vxAAAAkc"]
[Sat Aug 29 05:05:52.066106 2026] [security2:error] [pid 1018003:tid 1018159] [client 20.104.104.62:10480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/str.php"] [unique_id "apK9EDAh5Y1i2tUxg4HqBgAABcA"]
[Sat Aug 29 05:05:52.066286 2026] [security2:error] [pid 1017536:tid 1017748] [client 45.148.10.62:38238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wanderlustpictures.com"] [uri "/wp-config.php"] [unique_id "apK9ECJcY4fy7tP-rU3vxQAAAmY"]
[Sat Aug 29 05:05:52.072952 2026] [security2:error] [pid 1018003:tid 1018162] [client 20.104.18.15:8171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/fpwch.php"] [unique_id "apK9EDAh5Y1i2tUxg4HqBwAABcM"]
[Sat Aug 29 05:05:52.078630 2026] [security2:error] [pid 1017536:tid 1017722] [client 20.48.250.41:27504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/tfm.php"] [unique_id "apK9ECJcY4fy7tP-rU3vxgAAAkw"]
[Sat Aug 29 05:05:52.079105 2026] [security2:error] [pid 1017536:tid 1017768] [client 158.23.147.79:30614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/asd.php"] [unique_id "apK9ECJcY4fy7tP-rU3vxwAAAno"]
[Sat Aug 29 05:05:52.085830 2026] [security2:error] [pid 1018003:tid 1018258] [client 4.205.62.107:8972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/privacy.php"] [unique_id "apK9EDAh5Y1i2tUxg4HqCAAABiI"]
[Sat Aug 29 05:05:52.114847 2026] [security2:error] [pid 1018003:tid 1018172] [client 20.104.104.62:22657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/ww2.php"] [unique_id "apK9EDAh5Y1i2tUxg4HqCwAABc0"]
[Sat Aug 29 05:05:52.136657 2026] [security2:error] [pid 1017536:tid 1017793] [client 20.104.104.62:48683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/exec.php"] [unique_id "apK9ECJcY4fy7tP-rU3vygAAApM"]
[Sat Aug 29 05:05:52.139154 2026] [security2:error] [pid 1018003:tid 1018189] [client 20.104.49.130:57518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/js.php"] [unique_id "apK9EDAh5Y1i2tUxg4HqDQAABd4"]
[Sat Aug 29 05:05:52.157110 2026] [security2:error] [pid 1017536:tid 1017770] [client 68.155.159.216:51501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-admin.php"] [unique_id "apK9ECJcY4fy7tP-rU3vywAAAnw"]
[Sat Aug 29 05:05:52.162495 2026] [security2:error] [pid 1017536:tid 1017752] [client 20.104.104.62:39077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goll.net"] [uri "/aa.php"] [unique_id "apK9ECJcY4fy7tP-rU3vzQAAAmo"]
[Sat Aug 29 05:05:52.167636 2026] [security2:error] [pid 1017536:tid 1017669] [client 20.104.68.135:18450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kevinpascoe.com"] [uri "/wp-admin/js/index.php"] [unique_id "apK9ECJcY4fy7tP-rU3vzgAAAhc"]
[Sat Aug 29 05:05:52.197587 2026] [security2:error] [pid 1017536:tid 1017720] [client 20.104.104.62:10857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/mega.php"] [unique_id "apK9ECJcY4fy7tP-rU3vzwAAAko"]
[Sat Aug 29 05:05:52.213991 2026] [security2:error] [pid 1017536:tid 1017777] [client 20.104.104.62:20859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/sym2019.php"] [unique_id "apK9ECJcY4fy7tP-rU3v0AAAAoM"]
[Sat Aug 29 05:05:52.214375 2026] [security2:error] [pid 1017536:tid 1017730] [client 68.155.159.216:58313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK9ECJcY4fy7tP-rU3v0QAAAlQ"]
[Sat Aug 29 05:05:52.226061 2026] [security2:error] [pid 1017536:tid 1017783] [client 20.104.104.62:52063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9ECJcY4fy7tP-rU3v0gAAAok"]
[Sat Aug 29 05:05:52.258720 2026] [security2:error] [pid 1018003:tid 1018170] [client 74.7.228.11:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "ministeriosemanuel.org"] [uri "/cgi-sys/404.html"] [unique_id "apK9EDAh5Y1i2tUxg4HqHAAABcs"]
[Sat Aug 29 05:05:52.269056 2026] [security2:error] [pid 1017536:tid 1017695] [client 20.48.250.41:27632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/Geforce.php"] [unique_id "apK9ECJcY4fy7tP-rU3v1QAAAjE"]
[Sat Aug 29 05:05:52.274499 2026] [security2:error] [pid 1017536:tid 1017685] [client 74.7.228.11:48684] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "ministeriosemanuel.org"] [uri "/robots.txt"] [unique_id "apK9ECJcY4fy7tP-rU3v0wACJ3I"]
[Sat Aug 29 05:05:52.277502 2026] [security2:error] [pid 1017536:tid 1017785] [client 20.104.104.62:22696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/anz.php"] [unique_id "apK9ECJcY4fy7tP-rU3v1wAAAos"]
[Sat Aug 29 05:05:52.280636 2026] [security2:error] [pid 1017536:tid 1017760] [client 66.248.203.2:17862] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cheerfulmonk.com"] [uri "/2014/04/07/underpaid-really/"] [unique_id "apK9ECJcY4fy7tP-rU3v2AAAAnI"]
[Sat Aug 29 05:05:52.286935 2026] [security2:error] [pid 1018003:tid 1018205] [client 158.23.147.79:62697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK9EDAh5Y1i2tUxg4HqHwAABe4"]
[Sat Aug 29 05:05:52.293239 2026] [security2:error] [pid 1018003:tid 1018226] [client 158.158.54.35:22973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/upload.php"] [unique_id "apK9EDAh5Y1i2tUxg4HqIAAABgM"]
[Sat Aug 29 05:05:52.322023 2026] [security2:error] [pid 1018003:tid 1018218] [client 20.104.49.130:60981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/m.php"] [unique_id "apK9EDAh5Y1i2tUxg4HqIwAABfs"]
[Sat Aug 29 05:05:52.328527 2026] [security2:error] [pid 1017536:tid 1017688] [client 158.23.147.79:25575] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/1.php"] [unique_id "apK9ECJcY4fy7tP-rU3v2QAAAio"]
[Sat Aug 29 05:05:52.328619 2026] [security2:error] [pid 1017536:tid 1017688] [client 158.23.147.79:25575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/1.php"] [unique_id "apK9ECJcY4fy7tP-rU3v2QAAAio"]
[Sat Aug 29 05:05:52.347576 2026] [security2:error] [pid 1018003:tid 1018268] [client 20.104.104.62:10435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/ww3.php"] [unique_id "apK9EDAh5Y1i2tUxg4HqJgAABiw"]
[Sat Aug 29 05:05:52.354375 2026] [security2:error] [pid 1018003:tid 1018261] [client 20.104.49.130:30054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/well.php"] [unique_id "apK9EDAh5Y1i2tUxg4HqJwAABiU"]
[Sat Aug 29 05:05:52.357304 2026] [security2:error] [pid 1017536:tid 1017744] [client 40.83.93.50:7801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/disagraeosc.php"] [unique_id "apK9ECJcY4fy7tP-rU3v2gAAAmI"]
[Sat Aug 29 05:05:52.364619 2026] [security2:error] [pid 1018003:tid 1018092] [remote 93.123.109.228:53320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/test.php"] [unique_id "apK9EDAh5Y1i2tUxg4HqKQAGM0c"]
[Sat Aug 29 05:05:52.369810 2026] [security2:error] [pid 1018003:tid 1018169] [client 68.155.159.216:14335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/wp-admin/network/index.php"] [unique_id "apK9EDAh5Y1i2tUxg4HqKgAABco"]
[Sat Aug 29 05:05:52.371471 2026] [cgid:error] [pid 1017536:tid 1017704] [client 20.104.104.62:39055] AH01265: stderr from /home2/gollnet/public_html/cgi-bin/: attempt to invoke directory as script
[Sat Aug 29 05:05:52.372052 2026] [security2:error] [pid 1018003:tid 1018236] [client 20.196.209.81:17118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-conflg.php"] [unique_id "apK9EDAh5Y1i2tUxg4HqKwAABgw"]
[Sat Aug 29 05:05:52.378210 2026] [security2:error] [pid 1018003:tid 1018194] [client 20.197.61.180:6060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-admin/options-general.php"] [unique_id "apK9EDAh5Y1i2tUxg4HqLQAABeM"]
[Sat Aug 29 05:05:52.378906 2026] [proxy_http:error] [pid 1017536:tid 1017786] (20014)Internal error (specific information not available): [client 34.21.253.104:54408] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:52.379139 2026] [proxy:error] [pid 1017536:tid 1017786] [client 34.21.253.104:54408] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/v2/.env
[Sat Aug 29 05:05:52.380791 2026] [security2:error] [pid 1017536:tid 1017714] [client 34.21.253.104:54414] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cpanel.replenishink.com"] [uri "/v1/.env"] [unique_id "apK9ECJcY4fy7tP-rU3v4QAAAkQ"]
[Sat Aug 29 05:05:52.381677 2026] [security2:error] [pid 1017536:tid 1017740] [client 34.21.253.104:54494] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cpanel.replenishink.com"] [uri "/env.json"] [unique_id "apK9ECJcY4fy7tP-rU3v4gAAAl4"]
[Sat Aug 29 05:05:52.382259 2026] [proxy_http:error] [pid 1018003:tid 1018263] (20014)Internal error (specific information not available): [client 34.21.253.104:54504] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:52.382267 2026] [proxy:error] [pid 1018003:tid 1018263] [client 34.21.253.104:54504] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/env.js
[Sat Aug 29 05:05:52.382826 2026] [security2:error] [pid 1017536:tid 1017784] [client 34.21.253.104:54334] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cpanel.replenishink.com"] [uri "/_nuxt/../.env"] [unique_id "apK9ECJcY4fy7tP-rU3v4wAAAoo"]
[Sat Aug 29 05:05:52.383763 2026] [security2:error] [pid 1017536:tid 1017790] [client 34.21.253.104:54480] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "cpanel.replenishink.com"] [uri "/app/.env"] [unique_id "apK9ECJcY4fy7tP-rU3v5gAAApA"]
[Sat Aug 29 05:05:52.385691 2026] [proxy_http:error] [pid 1017536:tid 1017786] (20014)Internal error (specific information not available): [client 34.21.253.104:54408] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:52.385702 2026] [proxy:error] [pid 1017536:tid 1017786] [client 34.21.253.104:54408] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/502.shtml
[Sat Aug 29 05:05:52.387815 2026] [security2:error] [pid 1018003:tid 1018164] [client 34.21.253.104:54526] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cpanel.replenishink.com"] [uri "/admin/.env"] [unique_id "apK9EDAh5Y1i2tUxg4HqNgAABcU"]
[Sat Aug 29 05:05:52.387837 2026] [proxy_http:error] [pid 1018003:tid 1018263] (20014)Internal error (specific information not available): [client 34.21.253.104:54504] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:52.387847 2026] [proxy:error] [pid 1018003:tid 1018263] [client 34.21.253.104:54504] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/502.shtml
[Sat Aug 29 05:05:52.391493 2026] [proxy_http:error] [pid 1017536:tid 1017710] (20014)Internal error (specific information not available): [client 34.21.253.104:54564] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:52.391505 2026] [proxy:error] [pid 1017536:tid 1017710] [client 34.21.253.104:54564] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/core/.env
[Sat Aug 29 05:05:52.392038 2026] [security2:error] [pid 1017536:tid 1017753] [client 74.248.24.12:30553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/mini.php"] [unique_id "apK9ECJcY4fy7tP-rU3v6wAAAms"]
[Sat Aug 29 05:05:52.393762 2026] [proxy_http:error] [pid 1018003:tid 1018213] (20014)Internal error (specific information not available): [client 34.21.253.104:54432] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:52.393777 2026] [proxy:error] [pid 1018003:tid 1018213] [client 34.21.253.104:54432] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/.env.production
[Sat Aug 29 05:05:52.396293 2026] [proxy_http:error] [pid 1017536:tid 1017683] (20014)Internal error (specific information not available): [client 34.21.253.104:54598] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:52.396304 2026] [proxy:error] [pid 1017536:tid 1017683] [client 34.21.253.104:54598] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/web/.env
[Sat Aug 29 05:05:52.398909 2026] [proxy_http:error] [pid 1018003:tid 1018202] (20014)Internal error (specific information not available): [client 34.21.253.104:54460] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:52.398919 2026] [proxy:error] [pid 1018003:tid 1018202] [client 34.21.253.104:54460] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/.env.old
[Sat Aug 29 05:05:52.401226 2026] [proxy_http:error] [pid 1017536:tid 1017736] (20014)Internal error (specific information not available): [client 34.21.253.104:54574] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:52.401237 2026] [proxy:error] [pid 1017536:tid 1017736] [client 34.21.253.104:54574] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/src/.env
[Sat Aug 29 05:05:52.403762 2026] [proxy_http:error] [pid 1018003:tid 1018195] (20014)Internal error (specific information not available): [client 34.21.253.104:54506] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:52.403774 2026] [proxy:error] [pid 1018003:tid 1018195] [client 34.21.253.104:54506] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/backend/.env
[Sat Aug 29 05:05:52.408647 2026] [proxy_http:error] [pid 1018003:tid 1018273] (20014)Internal error (specific information not available): [client 34.21.253.104:54544] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:52.408661 2026] [proxy:error] [pid 1018003:tid 1018273] [client 34.21.253.104:54544] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/laravel/.env
[Sat Aug 29 05:05:52.415091 2026] [security2:error] [pid 1017536:tid 1017780] [client 4.232.148.111:27457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/c.php"] [unique_id "apK9ECJcY4fy7tP-rU3v7AAAAoY"]
[Sat Aug 29 05:05:52.415091 2026] [security2:error] [pid 1018003:tid 1018242] [client 20.104.104.62:22679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/bge.php"] [unique_id "apK9EDAh5Y1i2tUxg4HqQAAABhI"]
[Sat Aug 29 05:05:52.417994 2026] [security2:error] [pid 1017536:tid 1017733] [client 20.48.250.41:27561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/click.php"] [unique_id "apK9ECJcY4fy7tP-rU3v7QAAAlc"]
[Sat Aug 29 05:05:52.418067 2026] [proxy_http:error] [pid 1018003:tid 1018265] (20014)Internal error (specific information not available): [client 34.21.253.104:54594] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:52.418078 2026] [proxy:error] [pid 1018003:tid 1018265] [client 34.21.253.104:54594] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/frontend/.env
[Sat Aug 29 05:05:52.418884 2026] [security2:error] [pid 1018003:tid 1018173] [client 4.205.62.107:64296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/var/www/wallet/index.php"] [unique_id "apK9EDAh5Y1i2tUxg4HqQQAABc4"]
[Sat Aug 29 05:05:52.419290 2026] [security2:error] [pid 1017536:tid 1017715] [client 20.104.104.62:48649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/dbc.php"] [unique_id "apK9ECJcY4fy7tP-rU3v7gAAAkU"]
[Sat Aug 29 05:05:52.422870 2026] [proxy_http:error] [pid 1018003:tid 1018216] (20014)Internal error (specific information not available): [client 34.21.253.104:54444] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:52.422883 2026] [proxy:error] [pid 1018003:tid 1018216] [client 34.21.253.104:54444] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/.env.staging
[Sat Aug 29 05:05:52.427344 2026] [proxy_http:error] [pid 1018003:tid 1018269] (20014)Internal error (specific information not available): [client 34.21.253.104:54582] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:52.427363 2026] [proxy:error] [pid 1018003:tid 1018269] [client 34.21.253.104:54582] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/server/.env
[Sat Aug 29 05:05:52.429541 2026] [security2:error] [pid 1017536:tid 1017746] [client 20.104.104.62:36980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9ECJcY4fy7tP-rU3v7wAAAmQ"]
[Sat Aug 29 05:05:52.430906 2026] [security2:error] [pid 1017536:tid 1017708] [client 168.107.94.195:54407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9ECJcY4fy7tP-rU3v8AAAAj4"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:52.434843 2026] [security2:error] [pid 1017536:tid 1017721] [client 20.104.68.135:12435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kevinpascoe.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK9ECJcY4fy7tP-rU3v8QAAAks"]
[Sat Aug 29 05:05:52.435132 2026] [security2:error] [pid 1017536:tid 1017692] [client 20.104.104.62:39055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goll.net"] [uri "/file.php"] [unique_id "apK9ECJcY4fy7tP-rU3v8gAAAi4"]
[Sat Aug 29 05:05:52.449997 2026] [security2:error] [pid 1017536:tid 1017716] [client 158.23.147.79:24492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-admin/index.php"] [unique_id "apK9ECJcY4fy7tP-rU3v8wAAAkY"]
[Sat Aug 29 05:05:52.452339 2026] [security2:error] [pid 1017536:tid 1017772] [client 20.104.49.130:51098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/js.php"] [unique_id "apK9ECJcY4fy7tP-rU3v9AAAAn4"]
[Sat Aug 29 05:05:52.478958 2026] [security2:error] [pid 1017536:tid 1017675] [client 158.23.147.79:48311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-content/banners/about.php"] [unique_id "apK9ECJcY4fy7tP-rU3v-AAAAh0"]
[Sat Aug 29 05:05:52.480352 2026] [security2:error] [pid 1017536:tid 1017691] [client 20.104.104.62:10459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/sko.php"] [unique_id "apK9ECJcY4fy7tP-rU3v-QAAAi0"]
[Sat Aug 29 05:05:52.492990 2026] [security2:error] [pid 1017536:tid 1017773] [client 20.48.251.3:13976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/myfile.php"] [unique_id "apK9ECJcY4fy7tP-rU3v-wAAAn8"]
[Sat Aug 29 05:05:52.543005 2026] [security2:error] [pid 1017536:tid 1017707] [client 68.155.159.216:50220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK9ECJcY4fy7tP-rU3wAAAAAj0"]
[Sat Aug 29 05:05:52.545442 2026] [security2:error] [pid 1018003:tid 1018243] [client 20.104.104.62:41645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/wp-ana.php"] [unique_id "apK9EDAh5Y1i2tUxg4HqSQAABhM"]
[Sat Aug 29 05:05:52.548176 2026] [security2:error] [pid 1017536:tid 1017644] [remote 52.167.144.172:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantsfans.net"] [uri "/message_board/index.php"] [unique_id "apK9ECJcY4fy7tP-rU3wAQACW2s"]
[Sat Aug 29 05:05:52.562888 2026] [security2:error] [pid 1017536:tid 1017782] [client 20.48.250.41:27574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/ms.php"] [unique_id "apK9ECJcY4fy7tP-rU3wAwAAAog"]
[Sat Aug 29 05:05:52.601512 2026] [security2:error] [pid 1017536:tid 1017765] [client 20.104.104.62:20710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/cc.php"] [unique_id "apK9ECJcY4fy7tP-rU3wBQAAAnc"]
[Sat Aug 29 05:05:52.619182 2026] [security2:error] [pid 1017536:tid 1017685] [client 20.104.104.62:48585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/wp-wlx.php"] [unique_id "apK9ECJcY4fy7tP-rU3wBgAAAic"]
[Sat Aug 29 05:05:52.620935 2026] [security2:error] [pid 1017536:tid 1017785] [client 20.104.104.62:10820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/zoz.php"] [unique_id "apK9ECJcY4fy7tP-rU3wBwAAAos"]
[Sat Aug 29 05:05:52.628231 2026] [security2:error] [pid 1017536:tid 1017782] [client 20.104.104.62:38928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goll.net"] [uri "/sc.php"] [unique_id "apK9ECJcY4fy7tP-rU3wCAAAAog"]
[Sat Aug 29 05:05:52.630680 2026] [security2:error] [pid 1018003:tid 1018177] [client 20.104.68.135:23842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kevinpascoe.com"] [uri "/wp-admin/network/admin.php"] [unique_id "apK9EDAh5Y1i2tUxg4HqVAAABdI"]
[Sat Aug 29 05:05:52.642840 2026] [security2:error] [pid 1017536:tid 1017686] [client 45.148.10.62:38302] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "mail.wanderlustpictures.com"] [uri "/wp-config.php.old"] [unique_id "apK9ECJcY4fy7tP-rU3wCQAAAig"]
[Sat Aug 29 05:05:52.645985 2026] [security2:error] [pid 1017536:tid 1017750] [client 20.104.49.130:63577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/gecko-new.php"] [unique_id "apK9ECJcY4fy7tP-rU3wCgAAAmg"]
[Sat Aug 29 05:05:52.683539 2026] [security2:error] [pid 1018003:tid 1018277] [client 4.205.62.107:22267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/configuration.php"] [unique_id "apK9EDAh5Y1i2tUxg4HqWAAABjU"]
[Sat Aug 29 05:05:52.687435 2026] [security2:error] [pid 1018003:tid 1018249] [client 4.205.62.107:65446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/config_dev.php"] [unique_id "apK9EDAh5Y1i2tUxg4HqWQAABhk"]
[Sat Aug 29 05:05:52.690464 2026] [security2:error] [pid 1017536:tid 1017683] [client 20.104.104.62:45990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/secret.php"] [unique_id "apK9ECJcY4fy7tP-rU3wCwAAAiU"]
[Sat Aug 29 05:05:52.730311 2026] [security2:error] [pid 1017536:tid 1017721] [client 4.205.62.107:21903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/wp-act.php"] [unique_id "apK9ECJcY4fy7tP-rU3wDgAAAks"]
[Sat Aug 29 05:05:52.741431 2026] [security2:error] [pid 1017536:tid 1017716] [client 158.23.147.79:50158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/images/index.php"] [unique_id "apK9ECJcY4fy7tP-rU3wEAAAAkY"]
[Sat Aug 29 05:05:52.754498 2026] [security2:error] [pid 1018003:tid 1018200] [client 20.104.104.62:10630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/mmm.php"] [unique_id "apK9EDAh5Y1i2tUxg4HqXgAABek"]
[Sat Aug 29 05:05:52.758715 2026] [security2:error] [pid 1017536:tid 1017788] [client 103.162.125.59:51948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.125.162.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK9ECJcY4fy7tP-rU3wEwAAAo4"]
[Sat Aug 29 05:05:52.758835 2026] [security2:error] [pid 1017536:tid 1017788] [client 103.162.125.59:51948] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK9ECJcY4fy7tP-rU3wEwAAAo4"]
[Sat Aug 29 05:05:52.763345 2026] [security2:error] [pid 1018003:tid 1018274] [client 20.104.104.62:23407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/baee.php"] [unique_id "apK9EDAh5Y1i2tUxg4HqXwAABjI"]
[Sat Aug 29 05:05:52.765298 2026] [security2:error] [pid 1017536:tid 1017691] [client 4.205.62.107:2974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/public/bnn_.php.php"] [unique_id "apK9ECJcY4fy7tP-rU3wFAAAAi0"]
[Sat Aug 29 05:05:52.774747 2026] [security2:error] [pid 1017536:tid 1017775] [client 20.196.209.81:18705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-content.php"] [unique_id "apK9ECJcY4fy7tP-rU3wFQAAAoE"]
[Sat Aug 29 05:05:52.787851 2026] [security2:error] [pid 1017536:tid 1017674] [client 20.48.250.41:27427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/zxekqlxb.php"] [unique_id "apK9ECJcY4fy7tP-rU3wFgAAAhw"]
[Sat Aug 29 05:05:52.797661 2026] [security2:error] [pid 1018003:tid 1018233] [client 34.143.179.161:62138] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cpcontacts.harnessenergyusa.com"] [uri "/docker-compose.yml"] [unique_id "apK9EDAh5Y1i2tUxg4HqYAAABgk"]
[Sat Aug 29 05:05:52.803727 2026] [security2:error] [pid 1017536:tid 1017792] [client 20.104.104.62:48455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/attack.php"] [unique_id "apK9ECJcY4fy7tP-rU3wFwAAApI"]
[Sat Aug 29 05:05:52.810479 2026] [security2:error] [pid 1017536:tid 1017680] [client 168.107.94.195:54824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9ECJcY4fy7tP-rU3wGAAAAiI"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:52.814042 2026] [security2:error] [pid 1017536:tid 1017747] [client 34.143.179.161:62204] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "cpcontacts.harnessenergyusa.com"] [uri "/v1/graphql"] [unique_id "apK9ECJcY4fy7tP-rU3wGwAAAmU"]
[Sat Aug 29 05:05:52.823557 2026] [security2:error] [pid 1018003:tid 1018267] [client 34.143.179.161:62226] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "cpcontacts.harnessenergyusa.com"] [uri "/.openai/config.json"] [unique_id "apK9EDAh5Y1i2tUxg4HqZQAABis"]
[Sat Aug 29 05:05:52.824076 2026] [security2:error] [pid 1018003:tid 1018258] [client 20.104.104.62:22717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/pro.php"] [unique_id "apK9EDAh5Y1i2tUxg4HqZwAABiI"]
[Sat Aug 29 05:05:52.824111 2026] [security2:error] [pid 1017536:tid 1017742] [client 20.104.104.62:39100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goll.net"] [uri "/tinyfilemanager.php"] [unique_id "apK9ECJcY4fy7tP-rU3wIQAAAmA"]
[Sat Aug 29 05:05:52.824129 2026] [security2:error] [pid 1018003:tid 1018215] [client 20.104.68.135:23825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kevinpascoe.com"] [uri "/wp-conflg/function.php"] [unique_id "apK9EDAh5Y1i2tUxg4HqZgAABfg"]
[Sat Aug 29 05:05:52.826491 2026] [security2:error] [pid 1017536:tid 1017703] [client 34.143.179.161:62306] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cpcontacts.harnessenergyusa.com"] [uri "/.openclaw/.env"] [unique_id "apK9ECJcY4fy7tP-rU3wIgAAAjk"]
[Sat Aug 29 05:05:52.832105 2026] [security2:error] [pid 1018003:tid 1018231] [client 34.143.179.161:62366] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "cpcontacts.harnessenergyusa.com"] [uri "/.claude/settings.json"] [unique_id "apK9EDAh5Y1i2tUxg4HqbQAABgc"]
[Sat Aug 29 05:05:52.865665 2026] [security2:error] [pid 1017536:tid 1017769] [client 20.104.104.62:64715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/45.php"] [unique_id "apK9ECJcY4fy7tP-rU3wMAAAAns"]
[Sat Aug 29 05:05:52.880606 2026] [security2:error] [pid 1017536:tid 1017729] [client 216.73.161.177:23789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 177.161.73.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.darwinsfox.com"] [uri "/wp-login.php"] [unique_id "apK9ECJcY4fy7tP-rU3wLwAAAlM"], referer: https://t.co/
[Sat Aug 29 05:05:52.886345 2026] [security2:error] [pid 1018003:tid 1018256] [client 20.104.104.62:10829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/advanced.php"] [unique_id "apK9EDAh5Y1i2tUxg4HqeQAABiA"]
[Sat Aug 29 05:05:52.913558 2026] [security2:error] [pid 1017536:tid 1017692] [client 74.248.24.12:40939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/aa.php"] [unique_id "apK9ECJcY4fy7tP-rU3wMgAAAi4"]
[Sat Aug 29 05:05:52.915260 2026] [security2:error] [pid 1017536:tid 1017696] [client 40.83.93.50:3147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/about.php525"] [unique_id "apK9ECJcY4fy7tP-rU3wMwAAAjI"]
[Sat Aug 29 05:05:52.939293 2026] [security2:error] [pid 1018003:tid 1018198] [client 4.232.148.111:8387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/f.php"] [unique_id "apK9EDAh5Y1i2tUxg4HqfAAABec"]
[Sat Aug 29 05:05:52.956750 2026] [security2:error] [pid 1017536:tid 1017668] [client 20.104.104.62:23390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/d12.php"] [unique_id "apK9ECJcY4fy7tP-rU3wNAAAAhY"]
[Sat Aug 29 05:05:52.957922 2026] [security2:error] [pid 1017536:tid 1017730] [client 20.104.49.130:50566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.danesquality.com"] [uri "/echkm.php"] [unique_id "apK9ECJcY4fy7tP-rU3wNQAAAlQ"]
[Sat Aug 29 05:05:52.959872 2026] [security2:error] [pid 1017536:tid 1017713] [client 20.104.104.62:55037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/999.php"] [unique_id "apK9ECJcY4fy7tP-rU3wNgAAAkM"]
[Sat Aug 29 05:05:53.015548 2026] [security2:error] [pid 1018003:tid 1018197] [client 20.104.104.62:48676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/file66.php"] [unique_id "apK9ETAh5Y1i2tUxg4HqhAAABeY"]
[Sat Aug 29 05:05:53.019311 2026] [security2:error] [pid 1018003:tid 1018230] [client 20.104.68.135:12456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kevinpascoe.com"] [uri "/wp-content/classwithtostring.php"] [unique_id "apK9ETAh5Y1i2tUxg4HqhQAABgY"]
[Sat Aug 29 05:05:53.025172 2026] [security2:error] [pid 1017536:tid 1017783] [client 20.48.250.41:27469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/init.php"] [unique_id "apK9ESJcY4fy7tP-rU3wPAAAAok"]
[Sat Aug 29 05:05:53.028045 2026] [security2:error] [pid 1017536:tid 1017687] [client 20.104.104.62:10835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/blox.php"] [unique_id "apK9ESJcY4fy7tP-rU3wPQAAAik"]
[Sat Aug 29 05:05:53.038681 2026] [security2:error] [pid 1017536:tid 1017727] [client 20.104.104.62:39051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goll.net"] [uri "/upload.php"] [unique_id "apK9ESJcY4fy7tP-rU3wPwAAAlE"]
[Sat Aug 29 05:05:53.042236 2026] [security2:error] [pid 1017536:tid 1017753] [client 158.158.54.35:5004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-content/file.php"] [unique_id "apK9ESJcY4fy7tP-rU3wQAAAAms"]
[Sat Aug 29 05:05:53.047470 2026] [security2:error] [pid 1017536:tid 1017712] [client 111.235.68.106:44942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK9ESJcY4fy7tP-rU3wPgAAAkI"]
[Sat Aug 29 05:05:53.047596 2026] [security2:error] [pid 1017536:tid 1017712] [client 111.235.68.106:44942] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK9ESJcY4fy7tP-rU3wPgAAAkI"]
[Sat Aug 29 05:05:53.089644 2026] [security2:error] [pid 1017536:tid 1017721] [client 68.155.159.216:51252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/admin.php"] [unique_id "apK9ESJcY4fy7tP-rU3wQQAAAks"]
[Sat Aug 29 05:05:53.090150 2026] [security2:error] [pid 1017536:tid 1017716] [client 20.104.104.62:54982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/sef.php"] [unique_id "apK9ESJcY4fy7tP-rU3wQgAAAkY"]
[Sat Aug 29 05:05:53.091832 2026] [security2:error] [pid 1017536:tid 1017707] [client 20.197.61.180:13055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-admin/options.php"] [unique_id "apK9ESJcY4fy7tP-rU3wQwAAAj0"]
[Sat Aug 29 05:05:53.111815 2026] [security2:error] [pid 1017536:tid 1017775] [client 4.205.62.107:56041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/saiga.php"] [unique_id "apK9ESJcY4fy7tP-rU3wRAAAAoE"]
[Sat Aug 29 05:05:53.124741 2026] [security2:error] [pid 1018003:tid 1018226] [client 20.104.104.62:20819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/1945.php"] [unique_id "apK9ETAh5Y1i2tUxg4HqigAABgM"]
[Sat Aug 29 05:05:53.149229 2026] [security2:error] [pid 1017536:tid 1017745] [client 45.148.10.62:38316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wanderlustpictures.com"] [uri "/config.php"] [unique_id "apK9ESJcY4fy7tP-rU3wRQAAAmM"]
[Sat Aug 29 05:05:53.156908 2026] [security2:error] [pid 1018003:tid 1018069] [remote 93.123.109.228:53320] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/wp-config.php.bak"] [unique_id "apK9ETAh5Y1i2tUxg4HqiwAF5TA"]
[Sat Aug 29 05:05:53.157430 2026] [security2:error] [pid 1018003:tid 1018111] [remote 93.123.109.228:53320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/wp-config.php"] [unique_id "apK9ETAh5Y1i2tUxg4HqjAAF5Vo"]
[Sat Aug 29 05:05:53.157851 2026] [security2:error] [pid 1017536:tid 1017708] [client 20.48.250.41:27487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/term.php"] [unique_id "apK9ESJcY4fy7tP-rU3wRgAAAj4"]
[Sat Aug 29 05:05:53.168960 2026] [security2:error] [pid 1018003:tid 1018236] [client 20.104.104.62:44568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/kcs.php"] [unique_id "apK9ETAh5Y1i2tUxg4HqkwAABgw"]
[Sat Aug 29 05:05:53.189042 2026] [security2:error] [pid 1018003:tid 1018194] [client 158.23.147.79:30719] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/1.php"] [unique_id "apK9ETAh5Y1i2tUxg4HqlAAABeM"]
[Sat Aug 29 05:05:53.189173 2026] [security2:error] [pid 1018003:tid 1018194] [client 158.23.147.79:30719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/1.php"] [unique_id "apK9ETAh5Y1i2tUxg4HqlAAABeM"]
[Sat Aug 29 05:05:53.192005 2026] [security2:error] [pid 1017536:tid 1017703] [client 168.107.94.195:55271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9ESJcY4fy7tP-rU3wRwAAAjk"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:53.218528 2026] [security2:error] [pid 1017536:tid 1017754] [client 20.104.104.62:48474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/zafir1.php"] [unique_id "apK9ESJcY4fy7tP-rU3wSAAAAmw"]
[Sat Aug 29 05:05:53.224690 2026] [security2:error] [pid 1017536:tid 1017694] [client 20.104.104.62:41629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/admin123.php"] [unique_id "apK9ESJcY4fy7tP-rU3wSQAAAjA"]
[Sat Aug 29 05:05:53.226380 2026] [security2:error] [pid 1017536:tid 1017688] [client 4.205.62.107:53319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/zaza.php"] [unique_id "apK9ESJcY4fy7tP-rU3wSgAAAio"]
[Sat Aug 29 05:05:53.232917 2026] [security2:error] [pid 1017536:tid 1017747] [client 20.104.104.62:39094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goll.net"] [uri "/wp-act.php"] [unique_id "apK9ESJcY4fy7tP-rU3wTAAAAmU"]
[Sat Aug 29 05:05:53.271430 2026] [security2:error] [pid 1017536:tid 1017705] [client 68.155.159.216:51228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK9ESJcY4fy7tP-rU3wTgAAAjs"]
[Sat Aug 29 05:05:53.284038 2026] [security2:error] [pid 1017536:tid 1017725] [client 20.104.104.62:64718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wos.php"] [unique_id "apK9ESJcY4fy7tP-rU3wTwAAAk8"]
[Sat Aug 29 05:05:53.286455 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.104.104.62:23388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/yyy.php"] [unique_id "apK9ESJcY4fy7tP-rU3wUAAAAnk"]
[Sat Aug 29 05:05:53.289658 2026] [security2:error] [pid 1018003:tid 1018207] [client 20.104.68.135:38412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kevinpascoe.com"] [uri "/wp-content/themes/fitnessbase/404.php"] [unique_id "apK9ETAh5Y1i2tUxg4HqmAAABfA"]
[Sat Aug 29 05:05:53.316510 2026] [security2:error] [pid 1017536:tid 1017704] [client 68.155.159.216:12147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/.well-known/content.php"] [unique_id "apK9ESJcY4fy7tP-rU3wUQAAAjo"]
[Sat Aug 29 05:05:53.331099 2026] [security2:error] [pid 1018003:tid 1018245] [client 68.155.159.216:58325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK9ETAh5Y1i2tUxg4HqmQAABhU"]
[Sat Aug 29 05:05:53.343835 2026] [security2:error] [pid 1018003:tid 1018184] [client 20.196.209.81:17071] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.hellospringford.com"] [uri "/wp-content/1.php"] [unique_id "apK9ETAh5Y1i2tUxg4HqmgAABdk"]
[Sat Aug 29 05:05:53.343941 2026] [security2:error] [pid 1018003:tid 1018184] [client 20.196.209.81:17071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-content/1.php"] [unique_id "apK9ETAh5Y1i2tUxg4HqmgAABdk"]
[Sat Aug 29 05:05:53.385518 2026] [security2:error] [pid 1017536:tid 1017789] [client 158.23.147.79:58051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-admin/images/about.php"] [unique_id "apK9ESJcY4fy7tP-rU3wUgAAAo8"]
[Sat Aug 29 05:05:53.401039 2026] [security2:error] [pid 1018003:tid 1018182] [client 20.104.49.130:30057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/forum.php"] [unique_id "apK9ETAh5Y1i2tUxg4HqnQAABdc"]
[Sat Aug 29 05:05:53.406055 2026] [security2:error] [pid 1018003:tid 1018128] [remote 93.123.109.228:53320] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/wp-config.php.old"] [unique_id "apK9ETAh5Y1i2tUxg4HqoQAF-Ws"]
[Sat Aug 29 05:05:53.406055 2026] [security2:error] [pid 1018003:tid 1018127] [remote 93.123.109.228:53320] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/wp-config.php.new"] [unique_id "apK9ETAh5Y1i2tUxg4HqngAF-Wo"]
[Sat Aug 29 05:05:53.423342 2026] [security2:error] [pid 1017536:tid 1017765] [client 20.48.251.3:13987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/lm15.php"] [unique_id "apK9ESJcY4fy7tP-rU3wUwAAAnc"]
[Sat Aug 29 05:05:53.424630 2026] [security2:error] [pid 1017536:tid 1017685] [client 20.48.250.41:27465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/aaa.php"] [unique_id "apK9ESJcY4fy7tP-rU3wVAAAAic"]
[Sat Aug 29 05:05:53.424735 2026] [security2:error] [pid 1017536:tid 1017711] [client 40.83.93.50:13838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/spip.php"] [unique_id "apK9ESJcY4fy7tP-rU3wVQAAAkE"]
[Sat Aug 29 05:05:53.436625 2026] [security2:error] [pid 1017536:tid 1017669] [client 74.248.24.12:29537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/c.php"] [unique_id "apK9ESJcY4fy7tP-rU3wVgAAAhc"]
[Sat Aug 29 05:05:53.440713 2026] [security2:error] [pid 1017536:tid 1017782] [client 158.23.147.79:25479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/ws.php"] [unique_id "apK9ESJcY4fy7tP-rU3wWAAAAog"]
[Sat Aug 29 05:05:53.456391 2026] [security2:error] [pid 1017536:tid 1017737] [client 4.232.148.111:33799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/av.php"] [unique_id "apK9ESJcY4fy7tP-rU3wWgAAAls"]
[Sat Aug 29 05:05:53.476703 2026] [security2:error] [pid 1018003:tid 1018239] [client 57.141.14.83:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/cart/"] [unique_id "apK9ETAh5Y1i2tUxg4HqpQAABg8"]
[Sat Aug 29 05:05:53.486419 2026] [security2:error] [pid 1018003:tid 1018225] [client 20.104.68.135:5313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kevinpascoe.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK9ETAh5Y1i2tUxg4HqpgAABgI"]
[Sat Aug 29 05:05:53.493511 2026] [security2:error] [pid 1018003:tid 1018157] [client 158.158.54.35:6099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/files.php"] [unique_id "apK9ETAh5Y1i2tUxg4HqpwAABb4"]
[Sat Aug 29 05:05:53.507645 2026] [security2:error] [pid 1017536:tid 1017783] [client 93.123.109.228:41102] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK9ESJcY4fy7tP-rU3wXAAAAok"]
[Sat Aug 29 05:05:53.517528 2026] [security2:error] [pid 1017536:tid 1017690] [client 68.155.159.216:14296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK9ESJcY4fy7tP-rU3wXgAAAiw"]
[Sat Aug 29 05:05:53.533613 2026] [security2:error] [pid 1017536:tid 1017772] [client 35.198.240.194:31322] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.omni-staffing.com"] [uri "/app-config.json"] [unique_id "apK9ESJcY4fy7tP-rU3wZwAAAn4"]
[Sat Aug 29 05:05:53.536485 2026] [security2:error] [pid 1018003:tid 1018181] [client 35.198.240.194:31272] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.omni-staffing.com"] [uri "/cgi-sys/404.html"] [unique_id "apK9ETAh5Y1i2tUxg4HqqQAABdY"]
[Sat Aug 29 05:05:53.539494 2026] [security2:error] [pid 1018003:tid 1018155] [client 93.123.109.228:41122] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK9ETAh5Y1i2tUxg4HqtgAABbw"]
[Sat Aug 29 05:05:53.540848 2026] [security2:error] [pid 1018003:tid 1018241] [client 35.198.240.194:31442] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.omni-staffing.com"] [uri "/gcp-key.json"] [unique_id "apK9ETAh5Y1i2tUxg4HquQAABhE"]
[Sat Aug 29 05:05:53.542688 2026] [security2:error] [pid 1017536:tid 1017727] [client 35.198.240.194:31326] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.omni-staffing.com"] [uri "/cgi-sys/404.html"] [unique_id "apK9ESJcY4fy7tP-rU3wYwAAAlE"]
[Sat Aug 29 05:05:53.543817 2026] [security2:error] [pid 1017536:tid 1017716] [client 35.198.240.194:31476] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/.ssh/id_rsa"] [unique_id "apK9ESJcY4fy7tP-rU3wbwAAAkY"]
[Sat Aug 29 05:05:53.544046 2026] [security2:error] [pid 1017536:tid 1017712] [client 35.198.240.194:31324] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.omni-staffing.com"] [uri "/cgi-sys/404.html"] [unique_id "apK9ESJcY4fy7tP-rU3wZgAAAkI"]
[Sat Aug 29 05:05:53.545594 2026] [security2:error] [pid 1017536:tid 1017715] [client 35.198.240.194:31492] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/.ssh/id_dsa"] [unique_id "apK9ESJcY4fy7tP-rU3wbgAAAkU"]
[Sat Aug 29 05:05:53.566522 2026] [security2:error] [pid 1017536:tid 1017691] [client 4.205.62.107:64276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/124.php"] [unique_id "apK9ESJcY4fy7tP-rU3wcQAAAi0"]
[Sat Aug 29 05:05:53.573432 2026] [security2:error] [pid 1018003:tid 1018191] [client 168.107.94.195:55689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9ETAh5Y1i2tUxg4HqvQAABeA"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:53.659636 2026] [security2:error] [pid 1017536:tid 1017667] [client 93.123.109.228:41102] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(\\\\/\\\\*\\\\!? ?(?:select|grant|delete|insert|drop|alter|replace|truncate|update|create|rename|describe|union|concat|group_concat))" at REQUEST_FILENAME. [file "/opt/mod_security/hg_rules.conf"] [line "1019"] [id "9000042"] [rev "2.2.2"] [msg "SQL Comment Sequence Detected."] [data "/*update"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/*update.cgi*"] [unique_id "apK9ESJcY4fy7tP-rU3weQAAAhU"]
[Sat Aug 29 05:05:53.685277 2026] [security2:error] [pid 1018003:tid 1018244] [client 20.104.68.135:18457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kevinpascoe.com"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "apK9ETAh5Y1i2tUxg4HqxgAABhQ"]
[Sat Aug 29 05:05:53.715023 2026] [security2:error] [pid 1017536:tid 1017767] [client 93.123.109.228:41180] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/.env"] [unique_id "apK9ESJcY4fy7tP-rU3wfwAAAnk"]
[Sat Aug 29 05:05:53.728475 2026] [security2:error] [pid 1017536:tid 1017719] [client 20.48.250.41:27529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/xsox.php"] [unique_id "apK9ESJcY4fy7tP-rU3wgQAAAkk"]
[Sat Aug 29 05:05:53.732786 2026] [security2:error] [pid 1017536:tid 1017781] [client 45.148.10.62:38328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wanderlustpictures.com"] [uri "/config.php.bak"] [unique_id "apK9ESJcY4fy7tP-rU3wggAAAoc"]
[Sat Aug 29 05:05:53.735167 2026] [security2:error] [pid 1017536:tid 1017749] [client 93.123.109.228:41206] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/laravel/app/.env"] [unique_id "apK9ESJcY4fy7tP-rU3wgwAAAmc"]
[Sat Aug 29 05:05:53.767764 2026] [security2:error] [pid 1018003:tid 1018222] [client 20.196.209.81:17151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-content/about.php"] [unique_id "apK9ETAh5Y1i2tUxg4HqyQAABf8"]
[Sat Aug 29 05:05:53.782346 2026] [security2:error] [pid 1017536:tid 1017726] [client 158.23.147.79:32709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK9ESJcY4fy7tP-rU3whgAAAlA"]
[Sat Aug 29 05:05:53.802864 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.197.61.180:17018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-admin/panel.php"] [unique_id "apK9ESJcY4fy7tP-rU3whwAAAh0"]
[Sat Aug 29 05:05:53.809091 2026] [security2:error] [pid 1017536:tid 1017790] [client 93.123.109.228:41212] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK9ESJcY4fy7tP-rU3wiAAAApA"]
[Sat Aug 29 05:05:53.822823 2026] [security2:error] [pid 1018003:tid 1018189] [client 4.205.62.107:22239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/public/rip.php.php"] [unique_id "apK9ETAh5Y1i2tUxg4HqywAABd4"]
[Sat Aug 29 05:05:53.844020 2026] [security2:error] [pid 1018003:tid 1018251] [client 4.205.62.107:65473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/aws-credentials.php"] [unique_id "apK9ETAh5Y1i2tUxg4Hq0AAABhs"]
[Sat Aug 29 05:05:53.844471 2026] [security2:error] [pid 1018003:tid 1018261] [client 93.123.109.228:41122] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/.env.backup"] [unique_id "apK9ETAh5Y1i2tUxg4HqzwAABiU"]
[Sat Aug 29 05:05:53.855086 2026] [security2:error] [pid 1018003:tid 1018262] [client 93.123.109.228:41130] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/.env.bak"] [unique_id "apK9ETAh5Y1i2tUxg4Hq0QAABiY"]
[Sat Aug 29 05:05:53.861559 2026] [security2:error] [pid 1018003:tid 1018209] [client 20.48.250.41:27494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/lkui.php"] [unique_id "apK9ETAh5Y1i2tUxg4Hq0wAABfI"]
[Sat Aug 29 05:05:53.868633 2026] [security2:error] [pid 1017536:tid 1017770] [client 4.205.62.107:21850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/samll.php"] [unique_id "apK9ESJcY4fy7tP-rU3wjAAAAnw"]
[Sat Aug 29 05:05:53.884586 2026] [security2:error] [pid 1017536:tid 1017706] [client 20.104.68.135:38439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kevinpascoe.com"] [uri "/wp-content/uploads/de_fb_uploads/b.php"] [unique_id "apK9ESJcY4fy7tP-rU3wjwAAAjw"]
[Sat Aug 29 05:05:53.904921 2026] [security2:error] [pid 1018003:tid 1018219] [client 4.205.62.107:2649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/php_info.php"] [unique_id "apK9ETAh5Y1i2tUxg4Hq1gAABfw"]
[Sat Aug 29 05:05:53.919956 2026] [security2:error] [pid 1017536:tid 1017731] [client 40.83.93.50:8024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/backup.php"] [unique_id "apK9ESJcY4fy7tP-rU3wlAAAAlU"]
[Sat Aug 29 05:05:53.924739 2026] [security2:error] [pid 1017536:tid 1017679] [client 158.158.54.35:6106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/o.php"] [unique_id "apK9ESJcY4fy7tP-rU3wlQAAAiE"]
[Sat Aug 29 05:05:53.934711 2026] [security2:error] [pid 1017536:tid 1017777] [client 4.232.148.111:20632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/file.php"] [unique_id "apK9ESJcY4fy7tP-rU3wlgAAAoM"]
[Sat Aug 29 05:05:53.935472 2026] [security2:error] [pid 1018003:tid 1018184] [client 20.104.49.130:60739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/dehnl.php"] [unique_id "apK9ETAh5Y1i2tUxg4Hq1wAABdk"]
[Sat Aug 29 05:05:53.947145 2026] [security2:error] [pid 1018003:tid 1018156] [client 68.155.159.216:9308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-content/uploads/index.php"] [unique_id "apK9ETAh5Y1i2tUxg4Hq2AAABb0"]
[Sat Aug 29 05:05:53.954613 2026] [security2:error] [pid 1017536:tid 1017727] [client 168.107.94.195:56000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9ESJcY4fy7tP-rU3wmAAAAlE"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:53.975070 2026] [security2:error] [pid 1018003:tid 1018195] [client 93.123.109.228:41222] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/.env.old"] [unique_id "apK9ETAh5Y1i2tUxg4Hq2wAABeQ"]
[Sat Aug 29 05:05:53.992625 2026] [security2:error] [pid 1017536:tid 1017733] [client 93.123.109.228:41102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/.env.php"] [unique_id "apK9ESJcY4fy7tP-rU3wnAAAAlc"]
[Sat Aug 29 05:05:53.992953 2026] [security2:error] [pid 1017536:tid 1017723] [client 74.248.24.12:41010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/f.php"] [unique_id "apK9ESJcY4fy7tP-rU3wnQAAAk0"]
[Sat Aug 29 05:05:54.016092 2026] [security2:error] [pid 1018003:tid 1018252] [client 20.48.250.41:27631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "apK9EjAh5Y1i2tUxg4Hq3wAABhw"]
[Sat Aug 29 05:05:54.047008 2026] [security2:error] [pid 1018003:tid 1018257] [client 93.123.109.228:41284] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/.env.swp"] [unique_id "apK9EjAh5Y1i2tUxg4Hq4gAABiE"]
[Sat Aug 29 05:05:54.086260 2026] [security2:error] [pid 1017536:tid 1017715] [client 20.104.68.135:12466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kevinpascoe.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK9EiJcY4fy7tP-rU3wowAAAkU"]
[Sat Aug 29 05:05:54.106061 2026] [security2:error] [pid 1017536:tid 1017754] [client 68.155.159.216:18397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/simple.php"] [unique_id "apK9EiJcY4fy7tP-rU3wpgAAAmw"]
[Sat Aug 29 05:05:54.138465 2026] [security2:error] [pid 1018003:tid 1018270] [client 68.155.159.216:50347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK9EjAh5Y1i2tUxg4Hq6AAABi4"]
[Sat Aug 29 05:05:54.144396 2026] [security2:error] [pid 1017536:tid 1017694] [client 93.123.109.228:41138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/.env~"] [unique_id "apK9EiJcY4fy7tP-rU3wpwAAAjA"]
[Sat Aug 29 05:05:54.154239 2026] [security2:error] [pid 1017536:tid 1017747] [client 20.48.250.41:27584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/motu.php"] [unique_id "apK9EiJcY4fy7tP-rU3wqQAAAmU"]
[Sat Aug 29 05:05:54.166525 2026] [security2:error] [pid 1018003:tid 1018243] [client 20.196.209.81:18697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-content/admin-header.php"] [unique_id "apK9EjAh5Y1i2tUxg4Hq6QAABhM"]
[Sat Aug 29 05:05:54.180963 2026] [security2:error] [pid 1017536:tid 1017781] [client 68.155.159.216:64200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.gavirestaurant.com"] [uri "/worksec.php"] [unique_id "apK9EiJcY4fy7tP-rU3wrAAAAoc"]
[Sat Aug 29 05:05:54.192287 2026] [security2:error] [pid 1018003:tid 1018225] [client 20.104.49.130:34507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/term.php"] [unique_id "apK9EjAh5Y1i2tUxg4Hq7wAABgI"]
[Sat Aug 29 05:05:54.211366 2026] [security2:error] [pid 1018003:tid 1018246] [client 93.123.109.228:41284] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.bak"] [unique_id "apK9EjAh5Y1i2tUxg4Hq8wAABhY"]
[Sat Aug 29 05:05:54.212457 2026] [security2:error] [pid 1018003:tid 1018181] [client 93.123.109.228:41290] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.old"] [unique_id "apK9EjAh5Y1i2tUxg4Hq9AAABdY"]
[Sat Aug 29 05:05:54.237997 2026] [security2:error] [pid 1017536:tid 1017714] [client 93.123.109.228:41180] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config~"] [unique_id "apK9EiJcY4fy7tP-rU3wswAAAkQ"]
[Sat Aug 29 05:05:54.243763 2026] [security2:error] [pid 1017536:tid 1017713] [client 158.23.147.79:49835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK9EiJcY4fy7tP-rU3wtAAAAkM"]
[Sat Aug 29 05:05:54.265642 2026] [security2:error] [pid 1018003:tid 1018190] [client 4.205.62.107:56040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/ammika.php"] [unique_id "apK9EjAh5Y1i2tUxg4Hq9wAABd8"]
[Sat Aug 29 05:05:54.267262 2026] [cgid:error] [pid 1017536:tid 1017703] [client 45.148.10.62:50908] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/404.shtml
[Sat Aug 29 05:05:54.285733 2026] [security2:error] [pid 1018003:tid 1018155] [client 20.104.68.135:5330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kevinpascoe.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK9EjAh5Y1i2tUxg4Hq-QAABbw"]
[Sat Aug 29 05:05:54.334722 2026] [security2:error] [pid 1018003:tid 1018183] [client 168.107.94.195:56259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9EjAh5Y1i2tUxg4Hq_gAABdg"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:54.350993 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.48.250.41:27571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/Ov-Simple1.php"] [unique_id "apK9EiJcY4fy7tP-rU3wuQAAAlY"]
[Sat Aug 29 05:05:54.372232 2026] [security2:error] [pid 1017536:tid 1017668] [client 158.158.54.35:4279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/file2.php"] [unique_id "apK9EiJcY4fy7tP-rU3wvAAAAhY"]
[Sat Aug 29 05:05:54.394936 2026] [security2:error] [pid 1018003:tid 1018189] [client 159.203.140.4:61001] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:alter|drop)\\\\b [a-z0-9]+ \\\\b(?:column|database|procedure|table)\\\\b|delete[[:space:]] .{1,100}+ update [a-z0-9]+ set .{1,100}+=|union all select |\\\\bunion\\\\b.{1,100}?\\\\bselect\\\\b.{0,200}[a-z0-9]+ from |select (?:load_file|char ?\\\\()|(?:insert|r ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "314"] [id "340144"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL injection protection 2"] [data "878"] [severity "CRITICAL"] [tag "SQLi"] [hostname "www.thesmartpm.com"] [uri "/wp-json/batch/v1"] [unique_id "apK9EjAh5Y1i2tUxg4HrBAAABd4"]
[Sat Aug 29 05:05:54.398876 2026] [security2:error] [pid 1017536:tid 1017731] [client 4.205.62.107:53391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/wp-config.backup.php"] [unique_id "apK9EiJcY4fy7tP-rU3wwAAAAlU"]
[Sat Aug 29 05:05:54.418277 2026] [cgid:error] [pid 1017536:tid 1017753] [client 45.148.10.62:50908] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/404.shtml
[Sat Aug 29 05:05:54.427927 2026] [security2:error] [pid 1017536:tid 1017681] [client 68.155.159.216:12161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/cong.php"] [unique_id "apK9EiJcY4fy7tP-rU3wyQAAAiM"]
[Sat Aug 29 05:05:54.428218 2026] [security2:error] [pid 1018003:tid 1018200] [client 40.83.93.50:7765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/haiterus.php"] [unique_id "apK9EjAh5Y1i2tUxg4HrCgAABek"]
[Sat Aug 29 05:05:54.428312 2026] [security2:error] [pid 1018003:tid 1018274] [client 4.232.148.111:33861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK9EjAh5Y1i2tUxg4HrDQAABjI"]
[Sat Aug 29 05:05:54.435667 2026] [security2:error] [pid 1017536:tid 1017687] [client 68.155.159.216:57408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/packed.php"] [unique_id "apK9EiJcY4fy7tP-rU3wygAAAik"]
[Sat Aug 29 05:05:54.438741 2026] [security2:error] [pid 1017536:tid 1017710] [client 68.155.159.216:51509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/lock.php"] [unique_id "apK9EiJcY4fy7tP-rU3wywAAAkA"]
[Sat Aug 29 05:05:54.483614 2026] [security2:error] [pid 1017536:tid 1017751] [client 20.104.68.135:16006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kevinpascoe.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "apK9EiJcY4fy7tP-rU3wzQAAAmk"]
[Sat Aug 29 05:05:54.491259 2026] [security2:error] [pid 1017536:tid 1017688] [client 20.48.250.41:27620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/wp-blogs.php"] [unique_id "apK9EiJcY4fy7tP-rU3wzgAAAio"]
[Sat Aug 29 05:05:54.494237 2026] [security2:error] [pid 1017536:tid 1017694] [client 158.23.147.79:58064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK9EiJcY4fy7tP-rU3wzwAAAjA"]
[Sat Aug 29 05:05:54.525945 2026] [security2:error] [pid 1017536:tid 1017790] [client 20.197.61.180:5871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-admin/pk.php"] [unique_id "apK9EiJcY4fy7tP-rU3w0QAAApA"]
[Sat Aug 29 05:05:54.533085 2026] [security2:error] [pid 1018003:tid 1018205] [client 34.7.216.49:22366] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "webdisk.bridgewaycentretrust.org"] [uri "/.azure/accessTokens.json"] [unique_id "apK9EjAh5Y1i2tUxg4HrFQAABe4"]
[Sat Aug 29 05:05:54.539284 2026] [security2:error] [pid 1018003:tid 1018151] [client 34.7.216.49:22346] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "webdisk.bridgewaycentretrust.org"] [uri "/.azure/azureProfile.json"] [unique_id "apK9EjAh5Y1i2tUxg4HrHwAABbg"]
[Sat Aug 29 05:05:54.557994 2026] [security2:error] [pid 1017536:tid 1017705] [client 20.104.49.130:48588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/33.php"] [unique_id "apK9EiJcY4fy7tP-rU3w3AAAAjs"]
[Sat Aug 29 05:05:54.563580 2026] [security2:error] [pid 1018003:tid 1018219] [client 20.196.209.81:17042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-content/admin.php"] [unique_id "apK9EjAh5Y1i2tUxg4HrJwAABfw"]
[Sat Aug 29 05:05:54.570916 2026] [cgid:error] [pid 1017536:tid 1017678] [client 45.148.10.62:50908] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/404.shtml
[Sat Aug 29 05:05:54.581492 2026] [security2:error] [pid 1018003:tid 1018236] [client 74.248.24.12:30409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/av.php"] [unique_id "apK9EjAh5Y1i2tUxg4HrKAAABgw"]
[Sat Aug 29 05:05:54.638035 2026] [security2:error] [pid 1017536:tid 1017784] [client 20.48.251.3:33282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/test.config.php"] [unique_id "apK9EiJcY4fy7tP-rU3w5AAAAoo"]
[Sat Aug 29 05:05:54.655910 2026] [security2:error] [pid 1018003:tid 1018278] [client 158.23.147.79:48295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-includes/Text/about.php"] [unique_id "apK9EjAh5Y1i2tUxg4HrLgAABjY"]
[Sat Aug 29 05:05:54.672598 2026] [security2:error] [pid 1018003:tid 1018181] [client 20.48.250.41:27616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/mini.php"] [unique_id "apK9EjAh5Y1i2tUxg4HrMAAABdY"]
[Sat Aug 29 05:05:54.709053 2026] [security2:error] [pid 1017536:tid 1017711] [client 4.205.62.107:64919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/test1.php"] [unique_id "apK9EiJcY4fy7tP-rU3w6gAAAkE"]
[Sat Aug 29 05:05:54.715113 2026] [security2:error] [pid 1017536:tid 1017785] [client 168.107.94.195:56611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9EiJcY4fy7tP-rU3w6wAAAos"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:54.723268 2026] [security2:error] [pid 1017536:tid 1017732] [client 45.148.10.62:50908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wanderlustpictures.com"] [uri "/phpinfo.php"] [unique_id "apK9EiJcY4fy7tP-rU3w7QAAAlY"]
[Sat Aug 29 05:05:54.733331 2026] [security2:error] [pid 1017536:tid 1017686] [client 68.155.159.216:14249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/.well-knownold/index.php"] [unique_id "apK9EiJcY4fy7tP-rU3w7gAAAig"]
[Sat Aug 29 05:05:54.747394 2026] [security2:error] [pid 1017536:tid 1017693] [client 20.151.200.44:64936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9EiJcY4fy7tP-rU3w7wAAAi8"]
[Sat Aug 29 05:05:54.751882 2026] [security2:error] [pid 1017536:tid 1017668] [client 20.104.68.135:38411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kevinpascoe.com"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "apK9EiJcY4fy7tP-rU3w8AAAAhY"]
[Sat Aug 29 05:05:54.818915 2026] [security2:error] [pid 1017536:tid 1017692] [client 158.158.54.35:22972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK9EiJcY4fy7tP-rU3w-AAAAi4"]
[Sat Aug 29 05:05:54.886265 2026] [security2:error] [pid 1017536:tid 1017698] [client 158.23.147.79:32644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK9EiJcY4fy7tP-rU3w_wAAAjQ"]
[Sat Aug 29 05:05:54.887872 2026] [security2:error] [pid 1018003:tid 1018256] [client 20.48.250.41:27489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/amp.php"] [unique_id "apK9EjAh5Y1i2tUxg4HrOwAABiA"]
[Sat Aug 29 05:05:54.912594 2026] [security2:error] [pid 1017536:tid 1017770] [client 40.83.93.50:3196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/go.php"] [unique_id "apK9EiJcY4fy7tP-rU3xAAAAAnw"]
[Sat Aug 29 05:05:54.914660 2026] [security2:error] [pid 1017536:tid 1017719] [client 4.232.148.111:19088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/gmo.php"] [unique_id "apK9EiJcY4fy7tP-rU3xAQAAAkk"]
[Sat Aug 29 05:05:54.948268 2026] [security2:error] [pid 1017536:tid 1017775] [client 20.104.68.135:38461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kevinpascoe.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9EiJcY4fy7tP-rU3xBAAAAoE"]
[Sat Aug 29 05:05:54.952602 2026] [security2:error] [pid 1017536:tid 1017715] [client 93.123.109.228:41180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/.wp-config.php.swp"] [unique_id "apK9EiJcY4fy7tP-rU3xBQAAAkU"]
[Sat Aug 29 05:05:54.961413 2026] [security2:error] [pid 1018003:tid 1018174] [client 4.205.62.107:22349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/h.php"] [unique_id "apK9EjAh5Y1i2tUxg4HrPgAABc8"]
[Sat Aug 29 05:05:54.963235 2026] [security2:error] [pid 1017536:tid 1017772] [client 93.123.109.228:41212] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/ADMIN/.env"] [unique_id "apK9EiJcY4fy7tP-rU3xBwAAAn4"]
[Sat Aug 29 05:05:54.978787 2026] [security2:error] [pid 1018003:tid 1018217] [client 93.123.109.228:41130] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/API/.env"] [unique_id "apK9EjAh5Y1i2tUxg4HrQgAABfo"]
[Sat Aug 29 05:05:54.989506 2026] [security2:error] [pid 1017536:tid 1017780] [client 20.196.209.81:17063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-content/autoload_classmap.php"] [unique_id "apK9EiJcY4fy7tP-rU3xCgAAAoY"]
[Sat Aug 29 05:05:54.999043 2026] [security2:error] [pid 1017536:tid 1017747] [client 4.205.62.107:65430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/4563.php"] [unique_id "apK9EiJcY4fy7tP-rU3xDAAAAmU"]
[Sat Aug 29 05:05:55.004569 2026] [security2:error] [pid 1017536:tid 1017769] [client 4.205.62.107:22331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/pass4.php"] [unique_id "apK9EyJcY4fy7tP-rU3xDwAAAns"]
[Sat Aug 29 05:05:55.012260 2026] [security2:error] [pid 1017536:tid 1017622] [remote 74.7.227.154:41716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK9EyJcY4fy7tP-rU3xEwACW1U"], referer: https://goodtogo.store/sitemap_index.xml
[Sat Aug 29 05:05:55.013801 2026] [security2:error] [pid 1017536:tid 1017746] [client 20.151.200.44:64918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9EyJcY4fy7tP-rU3xFAAAAmQ"]
[Sat Aug 29 05:05:55.035493 2026] [security2:error] [pid 1017536:tid 1017678] [client 20.104.49.130:46588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/sxxb.php"] [unique_id "apK9EyJcY4fy7tP-rU3xFQAAAiA"]
[Sat Aug 29 05:05:55.041080 2026] [security2:error] [pid 1017536:tid 1017748] [client 158.23.147.79:25474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-includes/css/index.php"] [unique_id "apK9EyJcY4fy7tP-rU3xFgAAAmY"]
[Sat Aug 29 05:05:55.042608 2026] [security2:error] [pid 1017536:tid 1017752] [client 4.205.62.107:2952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/broadcasting.php"] [unique_id "apK9EyJcY4fy7tP-rU3xFwAAAmo"]
[Sat Aug 29 05:05:55.050169 2026] [security2:error] [pid 1017536:tid 1017743] [client 93.123.109.228:41154] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/APP/.env"] [unique_id "apK9EyJcY4fy7tP-rU3xGAAAAmE"]
[Sat Aug 29 05:05:55.053917 2026] [security2:error] [pid 1017536:tid 1017767] [client 93.123.109.228:41116] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/Api/.env"] [unique_id "apK9EyJcY4fy7tP-rU3xGQAAAnk"]
[Sat Aug 29 05:05:55.062320 2026] [security2:error] [pid 1018003:tid 1018200] [client 93.123.109.228:41290] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/BACK/.env"] [unique_id "apK9EzAh5Y1i2tUxg4HrRQAABek"]
[Sat Aug 29 05:05:55.111390 2026] [security2:error] [pid 1017536:tid 1017670] [client 138.199.19.170:54402] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.dgdevelco.com"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "apK9EyJcY4fy7tP-rU3xGgAAAhg"]
[Sat Aug 29 05:05:55.113792 2026] [security2:error] [pid 1018003:tid 1018274] [client 93.123.109.228:41244] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/BACKEND/.env"] [unique_id "apK9EzAh5Y1i2tUxg4HrRgAABjI"]
[Sat Aug 29 05:05:55.114582 2026] [security2:error] [pid 1017536:tid 1017714] [client 93.123.109.228:41212] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/BE/.env"] [unique_id "apK9EyJcY4fy7tP-rU3xGwAAAkQ"]
[Sat Aug 29 05:05:55.120738 2026] [security2:error] [pid 1017536:tid 1017684] [client 168.107.94.195:56950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9EyJcY4fy7tP-rU3xHQAAAiY"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:55.139129 2026] [security2:error] [pid 1017536:tid 1017754] [client 74.248.24.12:31601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/file.php"] [unique_id "apK9EyJcY4fy7tP-rU3xIAAAAmw"]
[Sat Aug 29 05:05:55.142468 2026] [security2:error] [pid 1017536:tid 1017686] [client 20.104.49.130:63598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/yawa.php"] [unique_id "apK9EyJcY4fy7tP-rU3xIQAAAig"]
[Sat Aug 29 05:05:55.143330 2026] [security2:error] [pid 1018003:tid 1018180] [client 93.123.109.228:41284] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/Backend/.env"] [unique_id "apK9EzAh5Y1i2tUxg4HrSAAABdU"]
[Sat Aug 29 05:05:55.147396 2026] [security2:error] [pid 1017536:tid 1017668] [client 158.23.147.79:30682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-content/banners/about.php"] [unique_id "apK9EyJcY4fy7tP-rU3xIwAAAhY"]
[Sat Aug 29 05:05:55.153150 2026] [security2:error] [pid 1017536:tid 1017721] [client 93.123.109.228:41194] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/Be/.env"] [unique_id "apK9EyJcY4fy7tP-rU3xJQAAAks"]
[Sat Aug 29 05:05:55.174386 2026] [security2:error] [pid 1017536:tid 1017681] [client 20.48.250.41:27636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/cc13.php"] [unique_id "apK9EyJcY4fy7tP-rU3xJwAAAiM"]
[Sat Aug 29 05:05:55.217670 2026] [security2:error] [pid 1017536:tid 1017786] [client 20.104.68.135:38407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kevinpascoe.com"] [uri "/wp-includes/blocks/buttons/index.php"] [unique_id "apK9EyJcY4fy7tP-rU3xLQAAAow"]
[Sat Aug 29 05:05:55.219592 2026] [security2:error] [pid 1017536:tid 1017691] [client 68.155.159.216:18247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-admin/about.php"] [unique_id "apK9EyJcY4fy7tP-rU3xLgAAAi0"]
[Sat Aug 29 05:05:55.224274 2026] [security2:error] [pid 1017536:tid 1017745] [client 20.151.200.44:65519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/baee.php"] [unique_id "apK9EyJcY4fy7tP-rU3xLwAAAmM"]
[Sat Aug 29 05:05:55.237250 2026] [security2:error] [pid 1017536:tid 1017704] [client 87.219.197.128:51953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK9EyJcY4fy7tP-rU3xMAAAAjo"]
[Sat Aug 29 05:05:55.237346 2026] [security2:error] [pid 1017536:tid 1017704] [client 87.219.197.128:51953] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK9EyJcY4fy7tP-rU3xMAAAAjo"]
[Sat Aug 29 05:05:55.253348 2026] [security2:error] [pid 1017536:tid 1017781] [client 20.197.61.180:6021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-admin/plugin-install.php"] [unique_id "apK9EyJcY4fy7tP-rU3xMQAAAoc"]
[Sat Aug 29 05:05:55.271346 2026] [security2:error] [pid 1017536:tid 1017685] [client 158.158.54.35:10731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/xda.php"] [unique_id "apK9EyJcY4fy7tP-rU3xMgAAAic"]
[Sat Aug 29 05:05:55.286853 2026] [security2:error] [pid 1018003:tid 1018273] [client 68.155.159.216:50241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-login.php"] [unique_id "apK9EzAh5Y1i2tUxg4HrUQAABjE"]
[Sat Aug 29 05:05:55.324545 2026] [security2:error] [pid 1018003:tid 1018195] [client 47.128.17.208:20702] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.yemisys.com"] [uri "/robots.txt"] [unique_id "apK9EzAh5Y1i2tUxg4HrVQAABeQ"]
[Sat Aug 29 05:05:55.326567 2026] [security2:error] [pid 1017536:tid 1017695] [client 20.48.250.41:27531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/aa.php"] [unique_id "apK9EyJcY4fy7tP-rU3xOgAAAjE"]
[Sat Aug 29 05:05:55.339077 2026] [security2:error] [pid 1017536:tid 1017678] [client 159.203.140.4:61082] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:alter|drop)\\\\b [a-z0-9]+ \\\\b(?:column|database|procedure|table)\\\\b|delete[[:space:]] .{1,100}+ update [a-z0-9]+ set .{1,100}+=|union all select |\\\\bunion\\\\b.{1,100}?\\\\bselect\\\\b.{0,200}[a-z0-9]+ from |select (?:load_file|char ?\\\\()|(?:insert|r ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "314"] [id "340144"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL injection protection 2"] [data "878"] [severity "CRITICAL"] [tag "SQLi"] [hostname "www.thesmartpm.sortthru.com"] [uri "/wp-json/batch/v1"] [unique_id "apK9EyJcY4fy7tP-rU3xOwAAAiA"]
[Sat Aug 29 05:05:55.344120 2026] [security2:error] [pid 1017536:tid 1017706] [client 20.104.49.130:30012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/3.php"] [unique_id "apK9EyJcY4fy7tP-rU3xPAAAAjw"]
[Sat Aug 29 05:05:55.362204 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.151.200.44:64863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/d12.php"] [unique_id "apK9EyJcY4fy7tP-rU3xPwAAAnk"]
[Sat Aug 29 05:05:55.382135 2026] [security2:error] [pid 1017536:tid 1017715] [client 20.196.209.81:18718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-content/cache/min/1/wp-content/admin.php"] [unique_id "apK9EyJcY4fy7tP-rU3xQgAAAkU"]
[Sat Aug 29 05:05:55.398844 2026] [security2:error] [pid 1017536:tid 1017722] [client 4.232.148.111:34886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/classwithtostring.php"] [unique_id "apK9EyJcY4fy7tP-rU3xRAAAAkw"]
[Sat Aug 29 05:05:55.413323 2026] [security2:error] [pid 1017536:tid 1017752] [client 52.139.37.240:8595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mykaratetutor.com"] [uri "/aged.php"] [unique_id "apK9EyJcY4fy7tP-rU3xRgAAAmo"]
[Sat Aug 29 05:05:55.416298 2026] [security2:error] [pid 1017536:tid 1017760] [client 20.104.68.135:38413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kevinpascoe.com"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "apK9EyJcY4fy7tP-rU3xRwAAAnI"]
[Sat Aug 29 05:05:55.419191 2026] [security2:error] [pid 1017536:tid 1017703] [client 4.205.62.107:55938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/broadcasting.php"] [unique_id "apK9EyJcY4fy7tP-rU3xSAAAAjk"]
[Sat Aug 29 05:05:55.429812 2026] [security2:error] [pid 1017536:tid 1017772] [client 40.83.93.50:8014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/gecko-new.php"] [unique_id "apK9EyJcY4fy7tP-rU3xSgAAAn4"]
[Sat Aug 29 05:05:55.429818 2026] [security2:error] [pid 1017536:tid 1017788] [client 138.199.19.170:54410] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.dgdevelco.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "apK9EyJcY4fy7tP-rU3xSQAAAo4"]
[Sat Aug 29 05:05:55.447839 2026] [security2:error] [pid 1018003:tid 1018197] [client 93.123.109.228:41222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK9EzAh5Y1i2tUxg4HrXQAABeY"]
[Sat Aug 29 05:05:55.469055 2026] [cgid:error] [pid 1017536:tid 1017617] [remote 45.148.10.62:50914] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/404.shtml
[Sat Aug 29 05:05:55.482944 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.48.250.41:27475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/s1.php"] [unique_id "apK9EyJcY4fy7tP-rU3xUQAAAlY"]
[Sat Aug 29 05:05:55.501798 2026] [security2:error] [pid 1017536:tid 1017724] [client 168.107.94.195:57320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9EyJcY4fy7tP-rU3xVQAAAk4"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:55.526004 2026] [security2:error] [pid 1017536:tid 1017667] [client 103.185.242.143:60738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK9EyJcY4fy7tP-rU3xWAAAAhU"]
[Sat Aug 29 05:05:55.526090 2026] [security2:error] [pid 1017536:tid 1017667] [client 103.185.242.143:60738] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK9EyJcY4fy7tP-rU3xWAAAAhU"]
[Sat Aug 29 05:05:55.526417 2026] [security2:error] [pid 1017536:tid 1017663] [remote 74.7.227.154:41716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK9EyJcY4fy7tP-rU3xVwACU34"], referer: https://goodtogo.store/sitemap_index.xml
[Sat Aug 29 05:05:55.537999 2026] [security2:error] [pid 1018003:tid 1018170] [client 4.205.62.107:53372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/X57.php"] [unique_id "apK9EzAh5Y1i2tUxg4HrYgAABcs"]
[Sat Aug 29 05:05:55.542966 2026] [security2:error] [pid 1017536:tid 1017710] [client 68.155.159.216:57435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/wp-content/packed.php"] [unique_id "apK9EyJcY4fy7tP-rU3xWgAAAkA"]
[Sat Aug 29 05:05:55.549102 2026] [security2:error] [pid 1017536:tid 1017691] [client 20.151.200.44:65489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/yyy.php"] [unique_id "apK9EyJcY4fy7tP-rU3xWwAAAi0"]
[Sat Aug 29 05:05:55.598108 2026] [security2:error] [pid 1017536:tid 1017698] [client 68.155.159.216:51238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/index/function.php"] [unique_id "apK9EyJcY4fy7tP-rU3xXAAAAjQ"]
[Sat Aug 29 05:05:55.608480 2026] [security2:error] [pid 1018003:tid 1018181] [client 52.139.37.240:8605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mykaratetutor.com"] [uri "/essexec.php"] [unique_id "apK9EzAh5Y1i2tUxg4HrZQAABdY"]
[Sat Aug 29 05:05:55.608485 2026] [security2:error] [pid 1017536:tid 1017719] [client 158.23.147.79:24402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK9EyJcY4fy7tP-rU3xXQAAAkk"]
[Sat Aug 29 05:05:55.610534 2026] [security2:error] [pid 1017536:tid 1017773] [client 93.123.109.228:41164] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/admin-app/.env"] [unique_id "apK9EyJcY4fy7tP-rU3xXgAAAn8"]
[Sat Aug 29 05:05:55.620865 2026] [cgid:error] [pid 1017536:tid 1017539] [remote 45.148.10.62:50914] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/404.shtml
[Sat Aug 29 05:05:55.621123 2026] [security2:error] [pid 1017536:tid 1017775] [client 68.155.159.216:12181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-includes/js/index.php"] [unique_id "apK9EyJcY4fy7tP-rU3xYwAAAoE"]
[Sat Aug 29 05:05:55.645421 2026] [security2:error] [pid 1018003:tid 1018155] [client 158.23.147.79:63007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-admin.php"] [unique_id "apK9EzAh5Y1i2tUxg4HraQAABbw"]
[Sat Aug 29 05:05:55.653373 2026] [security2:error] [pid 1017536:tid 1017781] [client 93.123.109.228:41138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/admin/phpinfo.php"] [unique_id "apK9EyJcY4fy7tP-rU3xZgAAAoc"]
[Sat Aug 29 05:05:55.660006 2026] [security2:error] [pid 1018003:tid 1018230] [client 74.248.24.12:41020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK9EzAh5Y1i2tUxg4HrawAABgY"]
[Sat Aug 29 05:05:55.682338 2026] [security2:error] [pid 1017536:tid 1017720] [client 20.104.68.135:12446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kevinpascoe.com"] [uri "/wp-includes/index.php"] [unique_id "apK9EyJcY4fy7tP-rU3xagAAAko"]
[Sat Aug 29 05:05:55.688581 2026] [security2:error] [pid 1017536:tid 1017749] [client 20.48.250.41:27430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/0byte.php"] [unique_id "apK9EyJcY4fy7tP-rU3xawAAAmc"]
[Sat Aug 29 05:05:55.688609 2026] [security2:error] [pid 1017536:tid 1017793] [client 93.123.109.228:41212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/admin_phpinfo.php"] [unique_id "apK9EyJcY4fy7tP-rU3xbAAAApM"]
[Sat Aug 29 05:05:55.702579 2026] [core:error] [pid 1017536:tid 1017790] [client 158.23.184.117:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:55.702601 2026] [core:error] [pid 1017536:tid 1017790] [client 158.23.184.117:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:55.719220 2026] [security2:error] [pid 1018003:tid 1018223] [client 158.158.54.35:6110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/theme.php"] [unique_id "apK9EzAh5Y1i2tUxg4HrbgAABgA"]
[Sat Aug 29 05:05:55.730043 2026] [security2:error] [pid 1017536:tid 1017713] [client 20.104.49.130:57639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/red.php"] [unique_id "apK9EyJcY4fy7tP-rU3xbgAAAkM"]
[Sat Aug 29 05:05:55.735231 2026] [security2:error] [pid 1018003:tid 1018254] [client 138.199.19.170:54414] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.dgdevelco.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "apK9EzAh5Y1i2tUxg4HrbwAABh4"]
[Sat Aug 29 05:05:55.737718 2026] [security2:error] [pid 1018003:tid 1018172] [client 20.104.49.130:39068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/memberfuns.php"] [unique_id "apK9EzAh5Y1i2tUxg4HrcAAABc0"]
[Sat Aug 29 05:05:55.744847 2026] [security2:error] [pid 1018003:tid 1018231] [client 93.123.109.228:41290] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/administrator/.env"] [unique_id "apK9EzAh5Y1i2tUxg4HrcQAABgc"]
[Sat Aug 29 05:05:55.774649 2026] [security2:error] [pid 1017536:tid 1017576] [remote 45.148.10.62:50914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wanderlustpictures.com"] [uri "/wp-login.php"] [unique_id "apK9EyJcY4fy7tP-rU3xcAACHSc"]
[Sat Aug 29 05:05:55.778507 2026] [security2:error] [pid 1017536:tid 1017703] [client 20.104.49.130:47818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/df.php"] [unique_id "apK9EyJcY4fy7tP-rU3xcQAAAjk"]
[Sat Aug 29 05:05:55.780289 2026] [security2:error] [pid 1017536:tid 1017757] [client 93.123.109.228:41116] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/api-backend/.env"] [unique_id "apK9EyJcY4fy7tP-rU3xcgAAAm8"]
[Sat Aug 29 05:05:55.785916 2026] [security2:error] [pid 1018003:tid 1018191] [client 93.123.109.228:41280] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/api-node/.env"] [unique_id "apK9EzAh5Y1i2tUxg4HrcwAABeA"]
[Sat Aug 29 05:05:55.788911 2026] [security2:error] [pid 1018003:tid 1018239] [client 158.23.147.79:48305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/asd.php"] [unique_id "apK9EzAh5Y1i2tUxg4HrdAAABg8"]
[Sat Aug 29 05:05:55.792164 2026] [security2:error] [pid 1017536:tid 1017788] [client 20.151.200.44:64933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9EyJcY4fy7tP-rU3xcwAAAo4"]
[Sat Aug 29 05:05:55.799459 2026] [security2:error] [pid 1018003:tid 1018174] [client 93.123.109.228:41108] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/api/.env"] [unique_id "apK9EzAh5Y1i2tUxg4HrdgAABc8"]
[Sat Aug 29 05:05:55.803368 2026] [security2:error] [pid 1017536:tid 1017707] [client 52.139.37.240:8584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mykaratetutor.com"] [uri "/fw.php"] [unique_id "apK9EyJcY4fy7tP-rU3xdQAAAj0"]
[Sat Aug 29 05:05:55.808623 2026] [security2:error] [pid 1018003:tid 1018215] [client 20.196.209.81:17080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-content/classwithtostring.php"] [unique_id "apK9EzAh5Y1i2tUxg4HrdwAABfg"]
[Sat Aug 29 05:05:55.830368 2026] [security2:error] [pid 1017536:tid 1017683] [client 20.151.200.44:65524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/bgymj.php"] [unique_id "apK9EyJcY4fy7tP-rU3xeAAAAiU"]
[Sat Aug 29 05:05:55.863237 2026] [security2:error] [pid 1018003:tid 1018274] [client 4.205.62.107:61768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/bigdump.php"] [unique_id "apK9EzAh5Y1i2tUxg4HrewAABjI"]
[Sat Aug 29 05:05:55.865027 2026] [security2:error] [pid 1017536:tid 1017715] [client 4.232.148.111:8392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/404.php"] [unique_id "apK9EyJcY4fy7tP-rU3xewAAAkU"]
[Sat Aug 29 05:05:55.867411 2026] [security2:error] [pid 1017536:tid 1017776] [client 68.155.159.216:14194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK9EyJcY4fy7tP-rU3xfAAAAoI"]
[Sat Aug 29 05:05:55.881048 2026] [security2:error] [pid 1017536:tid 1017729] [client 168.107.94.195:57581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9EyJcY4fy7tP-rU3xfQAAAlM"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:55.884386 2026] [security2:error] [pid 1018003:tid 1018209] [client 20.104.68.135:38456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kevinpascoe.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK9EzAh5Y1i2tUxg4HrfQAABfI"]
[Sat Aug 29 05:05:55.940604 2026] [security2:error] [pid 1017536:tid 1017726] [client 40.83.93.50:7782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/wp-admin.php"] [unique_id "apK9EyJcY4fy7tP-rU3xgQAAAlA"]
[Sat Aug 29 05:05:55.944088 2026] [security2:error] [pid 1017536:tid 1017710] [client 93.123.109.228:41262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/api/info.php"] [unique_id "apK9EyJcY4fy7tP-rU3xggAAAkA"]
[Sat Aug 29 05:05:55.960431 2026] [security2:error] [pid 1017536:tid 1017722] [client 20.197.61.180:17014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-admin/plugins/img/themes/plugins/maintenance.php"] [unique_id "apK9EyJcY4fy7tP-rU3xhAAAAkw"]
[Sat Aug 29 05:05:55.982472 2026] [security2:error] [pid 1017536:tid 1017792] [client 93.123.109.228:41206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/api/phpinfo.php"] [unique_id "apK9EyJcY4fy7tP-rU3xiAAAApI"]
[Sat Aug 29 05:05:55.999880 2026] [security2:error] [pid 1017536:tid 1017733] [client 52.139.37.240:8623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mykaratetutor.com"] [uri "/zwso.php"] [unique_id "apK9EyJcY4fy7tP-rU3xigAAAlc"]
[Sat Aug 29 05:05:56.009930 2026] [security2:error] [pid 1018003:tid 1018207] [client 158.23.147.79:32657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/simple.php"] [unique_id "apK9FDAh5Y1i2tUxg4HrhQAABfA"]
[Sat Aug 29 05:05:56.026158 2026] [security2:error] [pid 1018003:tid 1018244] [client 20.48.250.41:26904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/xr.php"] [unique_id "apK9FDAh5Y1i2tUxg4HrhwAABhQ"]
[Sat Aug 29 05:05:56.048496 2026] [security2:error] [pid 1017536:tid 1017775] [client 138.199.19.170:54424] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.dgdevelco.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "apK9FCJcY4fy7tP-rU3xjwAAAoE"]
[Sat Aug 29 05:05:56.080802 2026] [security2:error] [pid 1017536:tid 1017698] [client 20.104.68.135:5372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kevinpascoe.com"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "apK9FCJcY4fy7tP-rU3xkAAAAjQ"]
[Sat Aug 29 05:05:56.098942 2026] [security2:error] [pid 1018003:tid 1018269] [client 4.205.62.107:22345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/mamzi.php"] [unique_id "apK9FDAh5Y1i2tUxg4HriwAABi0"]
[Sat Aug 29 05:05:56.129795 2026] [security2:error] [pid 1018003:tid 1018167] [client 93.123.109.228:41230] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/apis/.env"] [unique_id "apK9FDAh5Y1i2tUxg4HrjgAABcg"]
[Sat Aug 29 05:05:56.131708 2026] [security2:error] [pid 1018003:tid 1018197] [client 20.48.251.3:33280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/loxi-o.php"] [unique_id "apK9FDAh5Y1i2tUxg4HrjwAABeY"]
[Sat Aug 29 05:05:56.141028 2026] [security2:error] [pid 1018003:tid 1018193] [client 4.205.62.107:65494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/cp2.php"] [unique_id "apK9FDAh5Y1i2tUxg4HrkQAABeI"]
[Sat Aug 29 05:05:56.144341 2026] [security2:error] [pid 1018003:tid 1018177] [client 158.23.147.79:25568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK9FDAh5Y1i2tUxg4HrkgAABdI"]
[Sat Aug 29 05:05:56.150422 2026] [security2:error] [pid 1018003:tid 1018159] [client 4.205.62.107:22489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/dd.php"] [unique_id "apK9FDAh5Y1i2tUxg4HrlAAABcA"]
[Sat Aug 29 05:05:56.156194 2026] [security2:error] [pid 1017536:tid 1017709] [client 20.48.250.41:27542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/h02ugyh.php"] [unique_id "apK9FCJcY4fy7tP-rU3xlQAAAj8"]
[Sat Aug 29 05:05:56.169181 2026] [security2:error] [pid 1017536:tid 1017719] [client 158.158.54.35:4246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/classwithtostring.php"] [unique_id "apK9FCJcY4fy7tP-rU3xlgAAAkk"]
[Sat Aug 29 05:05:56.171639 2026] [security2:error] [pid 1017536:tid 1017747] [client 93.123.109.228:41278] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/app/.env"] [unique_id "apK9FCJcY4fy7tP-rU3xlwAAAmU"]
[Sat Aug 29 05:05:56.179081 2026] [security2:error] [pid 1018003:tid 1018250] [client 4.205.62.107:2955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/v4.php"] [unique_id "apK9FDAh5Y1i2tUxg4HrlwAABho"]
[Sat Aug 29 05:05:56.192871 2026] [security2:error] [pid 1018003:tid 1018277] [client 52.139.37.240:8604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mykaratetutor.com"] [uri "/admin/function.php"] [unique_id "apK9FDAh5Y1i2tUxg4HrmAAABjU"]
[Sat Aug 29 05:05:56.193030 2026] [security2:error] [pid 1017536:tid 1017790] [client 68.155.159.216:16305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-admin/dropdown.php"] [unique_id "apK9FCJcY4fy7tP-rU3xmQAAApA"]
[Sat Aug 29 05:05:56.199978 2026] [security2:error] [pid 1017536:tid 1017744] [client 20.151.200.44:65475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/fh26.php"] [unique_id "apK9FCJcY4fy7tP-rU3xmgAAAmI"]
[Sat Aug 29 05:05:56.203187 2026] [security2:error] [pid 1017536:tid 1017767] [client 68.155.159.216:51826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-admin/admin.php"] [unique_id "apK9FCJcY4fy7tP-rU3xmwAAAnk"]
[Sat Aug 29 05:05:56.212187 2026] [security2:error] [pid 1018003:tid 1018151] [client 20.196.209.81:17132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-content/config.php"] [unique_id "apK9FDAh5Y1i2tUxg4HrmQAABbg"]
[Sat Aug 29 05:05:56.216972 2026] [security2:error] [pid 1017536:tid 1017723] [client 68.155.159.216:33729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/.well-known/index.php"] [unique_id "apK9FCJcY4fy7tP-rU3xnAAAAk0"]
[Sat Aug 29 05:05:56.262370 2026] [security2:error] [pid 1018003:tid 1018267] [client 168.107.94.195:57940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9FDAh5Y1i2tUxg4HrnQAABis"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:56.269122 2026] [security2:error] [pid 1017536:tid 1017715] [client 158.23.147.79:30632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK9FCJcY4fy7tP-rU3xnwAAAkU"]
[Sat Aug 29 05:05:56.292929 2026] [security2:error] [pid 1018003:tid 1018232] [client 20.48.250.41:26888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/xxw.php"] [unique_id "apK9FDAh5Y1i2tUxg4HroQAABgg"]
[Sat Aug 29 05:05:56.299811 2026] [security2:error] [pid 1018003:tid 1018154] [client 158.23.147.79:30650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/ws.php"] [unique_id "apK9FDAh5Y1i2tUxg4HrpAAABbs"]
[Sat Aug 29 05:05:56.312269 2026] [security2:error] [pid 1017536:tid 1017732] [client 66.248.203.2:61870] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cheerfulmonk.com"] [uri "/2015/12/15/fear-and-hate/"] [unique_id "apK9FCJcY4fy7tP-rU3xpQAAAlY"]
[Sat Aug 29 05:05:56.319377 2026] [security2:error] [pid 1018003:tid 1018224] [client 68.155.159.216:40345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.gavirestaurant.com"] [uri "/x.php"] [unique_id "apK9FDAh5Y1i2tUxg4HrpgAABgE"]
[Sat Aug 29 05:05:56.334147 2026] [security2:error] [pid 1017536:tid 1017724] [client 20.151.200.44:65509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/fgd.php"] [unique_id "apK9FCJcY4fy7tP-rU3xqQAAAk4"]
[Sat Aug 29 05:05:56.347959 2026] [security2:error] [pid 1017536:tid 1017743] [client 20.104.68.135:24170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kevinpascoe.com"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "apK9FCJcY4fy7tP-rU3xrQAAAmE"]
[Sat Aug 29 05:05:56.347999 2026] [security2:error] [pid 1017536:tid 1017748] [client 4.232.148.111:8424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/php.php"] [unique_id "apK9FCJcY4fy7tP-rU3xrAAAAmY"]
[Sat Aug 29 05:05:56.349590 2026] [security2:error] [pid 1017536:tid 1017710] [client 68.155.159.216:18285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK9FCJcY4fy7tP-rU3xrgAAAkA"]
[Sat Aug 29 05:05:56.359132 2026] [security2:error] [pid 1018003:tid 1018236] [client 74.248.24.12:33441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/gmo.php"] [unique_id "apK9FDAh5Y1i2tUxg4HrrgAABgw"]
[Sat Aug 29 05:05:56.375910 2026] [core:error] [pid 1017536:tid 1017690] [client 34.7.40.70:4630] AH10244: invalid URI path (/@fs/../../../../../app/.env?raw??)
[Sat Aug 29 05:05:56.379620 2026] [core:error] [pid 1017536:tid 1017752] [client 34.7.40.70:4672] AH10244: invalid URI path (/@fs/../../../../../root/.env?raw??)
[Sat Aug 29 05:05:56.380203 2026] [cgid:error] [pid 1017536:tid 1017713] [client 34.7.40.70:4574] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:56.380469 2026] [security2:error] [pid 1017536:tid 1017752] [client 34.7.40.70:4672] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/400.shtml"] [unique_id "apK9FCJcY4fy7tP-rU3xtgAAAmo"]
[Sat Aug 29 05:05:56.380731 2026] [security2:error] [pid 1018003:tid 1018189] [client 34.7.40.70:4644] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/cgi-sys/404.html"] [unique_id "apK9FDAh5Y1i2tUxg4HrsQAABd4"]
[Sat Aug 29 05:05:56.380765 2026] [cgid:error] [pid 1018003:tid 1018170] [client 34.7.40.70:4722] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:56.380923 2026] [security2:error] [pid 1017536:tid 1017760] [client 34.7.40.70:4562] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/@fs/root/.ssh/id_rsa"] [unique_id "apK9FCJcY4fy7tP-rU3xtQAAAnI"]
[Sat Aug 29 05:05:56.381077 2026] [cgid:error] [pid 1018003:tid 1018163] [client 34.7.40.70:4738] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:56.381077 2026] [security2:error] [pid 1017536:tid 1017765] [client 34.7.40.70:4660] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/@fs/../../../../../proc/self/environ"] [unique_id "apK9FCJcY4fy7tP-rU3xtwAAAnc"]
[Sat Aug 29 05:05:56.381655 2026] [cgid:error] [pid 1017536:tid 1017764] [client 34.7.40.70:4628] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:56.381908 2026] [cgid:error] [pid 1017536:tid 1017675] [client 34.7.40.70:4800] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:56.383087 2026] [security2:error] [pid 1018003:tid 1018226] [client 34.7.40.70:4590] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/@fs/var/www/html/wp-config.php"] [unique_id "apK9FDAh5Y1i2tUxg4HrtQAABgM"]
[Sat Aug 29 05:05:56.383484 2026] [security2:error] [pid 1017536:tid 1017757] [client 34.7.40.70:4618] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2fproc/self/environ"] [unique_id "apK9FCJcY4fy7tP-rU3xuwAAAm8"]
[Sat Aug 29 05:05:56.383771 2026] [security2:error] [pid 1017536:tid 1017757] [client 34.7.40.70:4618] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/cgi-sys/403.html"] [unique_id "apK9FCJcY4fy7tP-rU3xuwAAAm8"]
[Sat Aug 29 05:05:56.384645 2026] [cgid:error] [pid 1018003:tid 1018157] [client 34.7.40.70:4782] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:56.384722 2026] [cgid:error] [pid 1018003:tid 1018181] [client 34.7.40.70:4568] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:56.385005 2026] [cgid:error] [pid 1017536:tid 1017788] [client 34.7.40.70:4688] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:56.385745 2026] [security2:error] [pid 1018003:tid 1018223] [client 52.139.37.240:8577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mykaratetutor.com"] [uri "/zoom1.php"] [unique_id "apK9FDAh5Y1i2tUxg4HruAAABgA"]
[Sat Aug 29 05:05:56.386051 2026] [cgid:error] [pid 1017536:tid 1017740] [client 34.7.40.70:4772] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:56.386267 2026] [cgid:error] [pid 1018003:tid 1018235] [client 34.7.40.70:4748] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:56.386836 2026] [cgid:error] [pid 1017536:tid 1017777] [client 34.7.40.70:4686] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:56.387521 2026] [cgid:error] [pid 1018003:tid 1018190] [client 34.7.40.70:4746] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:56.387765 2026] [cgid:error] [pid 1017536:tid 1017703] [client 34.7.40.70:4742] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:56.387856 2026] [security2:error] [pid 1017536:tid 1017703] [client 34.7.40.70:4742] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/404.shtml"] [unique_id "apK9FCJcY4fy7tP-rU3xuAAAAjk"]
[Sat Aug 29 05:05:56.388234 2026] [cgid:error] [pid 1018003:tid 1018241] [client 34.7.40.70:4762] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:56.389245 2026] [cgid:error] [pid 1017536:tid 1017768] [client 34.7.40.70:4826] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:56.389566 2026] [cgid:error] [pid 1017536:tid 1017789] [client 34.7.40.70:4674] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:56.390001 2026] [cgid:error] [pid 1018003:tid 1018230] [client 34.7.40.70:4814] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:56.390752 2026] [security2:error] [pid 1017536:tid 1017717] [client 138.199.19.170:54440] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.dgdevelco.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "apK9FCJcY4fy7tP-rU3xxAAAAkc"]
[Sat Aug 29 05:05:56.390971 2026] [cgid:error] [pid 1018003:tid 1018264] [client 34.7.40.70:4696] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:56.391623 2026] [cgid:error] [pid 1017536:tid 1017707] [client 34.7.40.70:4676] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:56.392244 2026] [cgid:error] [pid 1018003:tid 1018258] [client 34.7.40.70:4576] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:56.392946 2026] [cgid:error] [pid 1018003:tid 1018188] [client 34.7.40.70:4818] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:56.393305 2026] [cgid:error] [pid 1017536:tid 1017711] [client 34.7.40.70:4596] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:56.393386 2026] [cgid:error] [pid 1018003:tid 1018185] [client 34.7.40.70:4708] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:56.393695 2026] [cgid:error] [pid 1017536:tid 1017784] [client 34.7.40.70:4788] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:05:56.395524 2026] [security2:error] [pid 1018003:tid 1018185] [client 68.155.159.216:50204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK9FDAh5Y1i2tUxg4HrvwAABdo"]
[Sat Aug 29 05:05:56.396989 2026] [security2:error] [pid 1018003:tid 1018183] [client 93.123.109.228:41284] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/application/.env"] [unique_id "apK9FDAh5Y1i2tUxg4HrwAAABdg"]
[Sat Aug 29 05:05:56.420970 2026] [security2:error] [pid 1018003:tid 1018261] [client 93.123.109.228:41244] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/apps/.env"] [unique_id "apK9FDAh5Y1i2tUxg4HrwQAABiU"]
[Sat Aug 29 05:05:56.424143 2026] [security2:error] [pid 1017536:tid 1017704] [client 216.244.66.243:45084] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "scottportfolio.com"] [uri "/userfiles/uroki-uvelichil-chlen-5655.xml"] [unique_id "apK9FCJcY4fy7tP-rU3xxwAAAjo"]
[Sat Aug 29 05:05:56.424213 2026] [security2:error] [pid 1017536:tid 1017704] [client 216.244.66.243:45084] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "scottportfolio.com"] [uri "/userfiles/uroki-uvelichil-chlen-5655.xml"] [unique_id "apK9FCJcY4fy7tP-rU3xxwAAAjo"]
[Sat Aug 29 05:05:56.440619 2026] [security2:error] [pid 1017536:tid 1017780] [client 20.48.250.41:27570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/bolt.php"] [unique_id "apK9FCJcY4fy7tP-rU3xygAAAoY"]
[Sat Aug 29 05:05:56.465434 2026] [security2:error] [pid 1017536:tid 1017684] [client 40.83.93.50:3145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/wp-configs.php"] [unique_id "apK9FCJcY4fy7tP-rU3xywAAAiY"]
[Sat Aug 29 05:05:56.479917 2026] [security2:error] [pid 1018003:tid 1018254] [client 51.68.107.149:16389] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "swiapr.com"] [uri "/robots.txt"] [unique_id "apK9FDAh5Y1i2tUxg4HrxAAABh4"]
[Sat Aug 29 05:05:56.480057 2026] [security2:error] [pid 1018003:tid 1018254] [client 51.68.107.149:16389] ModSecurity: Warning. Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "swiapr.com"] [uri "/robots.txt"] [unique_id "apK9FDAh5Y1i2tUxg4HrxAAABh4"]
[Sat Aug 29 05:05:56.555565 2026] [security2:error] [pid 1017536:tid 1017749] [client 4.205.62.107:55955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/aws_config.php"] [unique_id "apK9FCJcY4fy7tP-rU3x0gAAAmc"]
[Sat Aug 29 05:05:56.571594 2026] [security2:error] [pid 1018003:tid 1018194] [client 20.48.250.41:27499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/rtx.php"] [unique_id "apK9FDAh5Y1i2tUxg4HrywAABeM"]
[Sat Aug 29 05:05:56.591496 2026] [security2:error] [pid 1017536:tid 1017723] [client 20.104.49.130:53763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/tiny2.php"] [unique_id "apK9FCJcY4fy7tP-rU3x1AAAAk0"]
[Sat Aug 29 05:05:56.593794 2026] [security2:error] [pid 1017536:tid 1017734] [client 52.139.37.240:8455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mykaratetutor.com"] [uri "/about.php7"] [unique_id "apK9FCJcY4fy7tP-rU3x1QAAAlg"]
[Sat Aug 29 05:05:56.609581 2026] [security2:error] [pid 1018003:tid 1018184] [client 20.196.209.81:17418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-content/cong.php"] [unique_id "apK9FDAh5Y1i2tUxg4HrzQAABdk"]
[Sat Aug 29 05:05:56.612261 2026] [security2:error] [pid 1018003:tid 1018198] [client 20.104.49.130:34530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/one.php"] [unique_id "apK9FDAh5Y1i2tUxg4HrzgAABec"]
[Sat Aug 29 05:05:56.625351 2026] [security2:error] [pid 1017536:tid 1017672] [client 158.158.54.35:12232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/news.php"] [unique_id "apK9FCJcY4fy7tP-rU3x2QAAAho"]
[Sat Aug 29 05:05:56.665058 2026] [security2:error] [pid 1017536:tid 1017681] [client 168.107.94.195:58264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9FCJcY4fy7tP-rU3x3AAAAiM"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:56.687738 2026] [security2:error] [pid 1017536:tid 1017698] [client 20.197.61.180:5826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-admin/security.php"] [unique_id "apK9FCJcY4fy7tP-rU3x3wAAAjQ"]
[Sat Aug 29 05:05:56.694456 2026] [security2:error] [pid 1017536:tid 1017667] [client 20.104.68.135:24157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kevinpascoe.com"] [uri "/wp-links-opml.php"] [unique_id "apK9FCJcY4fy7tP-rU3x4AAAAhU"]
[Sat Aug 29 05:05:56.718839 2026] [security2:error] [pid 1018003:tid 1018259] [client 158.23.147.79:24485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/about.php"] [unique_id "apK9FDAh5Y1i2tUxg4Hr1AAABiM"]
[Sat Aug 29 05:05:56.724702 2026] [security2:error] [pid 1018003:tid 1018242] [client 68.155.159.216:51263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/.well-known/content.php"] [unique_id "apK9FDAh5Y1i2tUxg4Hr1QAABhI"]
[Sat Aug 29 05:05:56.729498 2026] [security2:error] [pid 1017536:tid 1017710] [client 68.155.159.216:12201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-content/index.php"] [unique_id "apK9FCJcY4fy7tP-rU3x5gAAAkA"]
[Sat Aug 29 05:05:56.731378 2026] [security2:error] [pid 1018003:tid 1018167] [client 4.205.62.107:53373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/fucku.php"] [unique_id "apK9FDAh5Y1i2tUxg4Hr1wAABcg"]
[Sat Aug 29 05:05:56.748964 2026] [security2:error] [pid 1018003:tid 1018275] [client 93.123.109.228:41130] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/back/.env"] [unique_id "apK9FDAh5Y1i2tUxg4Hr2QAABjM"]
[Sat Aug 29 05:05:56.749034 2026] [security2:error] [pid 1018003:tid 1018227] [client 93.123.109.228:41256] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/back-api/.env"] [unique_id "apK9FDAh5Y1i2tUxg4Hr2gAABgQ"]
[Sat Aug 29 05:05:56.749228 2026] [security2:error] [pid 1017536:tid 1017786] [client 93.123.109.228:41154] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/back-end/.env"] [unique_id "apK9FCJcY4fy7tP-rU3x5wAAAow"]
[Sat Aug 29 05:05:56.753649 2026] [security2:error] [pid 1017536:tid 1017792] [client 158.23.147.79:62692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK9FCJcY4fy7tP-rU3x6AAAApI"]
[Sat Aug 29 05:05:56.753854 2026] [security2:error] [pid 1017536:tid 1017785] [client 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK9EyJcY4fy7tP-rU3xOQACi0g"]
[Sat Aug 29 05:05:56.758424 2026] [security2:error] [pid 1017536:tid 1017716] [client 20.48.250.41:27416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/ckk.php"] [unique_id "apK9FCJcY4fy7tP-rU3x6QAAAkY"]
[Sat Aug 29 05:05:56.788416 2026] [security2:error] [pid 1018003:tid 1018221] [client 93.123.109.228:41230] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/backend-api/.env"] [unique_id "apK9FDAh5Y1i2tUxg4Hr3AAABf4"]
[Sat Aug 29 05:05:56.792493 2026] [security2:error] [pid 1018003:tid 1018225] [client 93.123.109.228:41244] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK9FDAh5Y1i2tUxg4Hr3QAABgI"]
[Sat Aug 29 05:05:56.800637 2026] [security2:error] [pid 1018003:tid 1018197] [client 52.139.37.240:8475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mykaratetutor.com"] [uri "/cron.php"] [unique_id "apK9FDAh5Y1i2tUxg4Hr3gAABeY"]
[Sat Aug 29 05:05:56.827624 2026] [security2:error] [pid 1018003:tid 1018244] [client 4.232.148.111:32318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/init.php"] [unique_id "apK9FDAh5Y1i2tUxg4Hr4AAABhQ"]
[Sat Aug 29 05:05:56.890137 2026] [security2:error] [pid 1017536:tid 1017711] [client 20.48.250.41:26893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.unitymarriageministry.org"] [uri "/R57.php"] [unique_id "apK9FCJcY4fy7tP-rU3x8QAAAkE"]
[Sat Aug 29 05:05:56.890593 2026] [security2:error] [pid 1017536:tid 1017784] [client 20.151.200.44:64899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/inject.php"] [unique_id "apK9FCJcY4fy7tP-rU3x8gAAAoo"]
[Sat Aug 29 05:05:56.891697 2026] [security2:error] [pid 1017536:tid 1017740] [client 20.104.68.135:16031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kevinpascoe.com"] [uri "/wp-signup.php"] [unique_id "apK9FCJcY4fy7tP-rU3x8wAAAl4"]
[Sat Aug 29 05:05:56.894470 2026] [security2:error] [pid 1017536:tid 1017688] [client 158.23.147.79:48344] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.lapoutine.co.uk"] [uri "/1.php"] [unique_id "apK9FCJcY4fy7tP-rU3x9AAAAio"]
[Sat Aug 29 05:05:56.894567 2026] [security2:error] [pid 1017536:tid 1017688] [client 158.23.147.79:48344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/1.php"] [unique_id "apK9FCJcY4fy7tP-rU3x9AAAAio"]
[Sat Aug 29 05:05:56.921033 2026] [security2:error] [pid 1018003:tid 1018218] [client 93.123.109.228:41108] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/backup/.env"] [unique_id "apK9FDAh5Y1i2tUxg4Hr6AAABfs"]
[Sat Aug 29 05:05:56.925819 2026] [security2:error] [pid 1018003:tid 1018263] [client 138.199.19.170:54450] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mail.dgdevelco.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "apK9FDAh5Y1i2tUxg4Hr6gAABic"]
[Sat Aug 29 05:05:56.926563 2026] [security2:error] [pid 1017536:tid 1017704] [client 93.123.109.228:41096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/be/.env"] [unique_id "apK9FCJcY4fy7tP-rU3x-AAAAjo"]
[Sat Aug 29 05:05:56.933652 2026] [security2:error] [pid 1018003:tid 1018267] [client 93.123.109.228:41256] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/beta/.env"] [unique_id "apK9FDAh5Y1i2tUxg4Hr6QAABis"]
[Sat Aug 29 05:05:56.950703 2026] [security2:error] [pid 1017536:tid 1017765] [client 40.83.93.50:7802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/essexec.php"] [unique_id "apK9FCJcY4fy7tP-rU3x-QAAAnc"]
[Sat Aug 29 05:05:56.960951 2026] [security2:error] [pid 1018003:tid 1018240] [client 74.248.24.12:40897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/classwithtostring.php"] [unique_id "apK9FDAh5Y1i2tUxg4Hr7QAABhA"]
[Sat Aug 29 05:05:56.990069 2026] [security2:error] [pid 1017536:tid 1017679] [client 65.111.23.104:31249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 104.23.111.65.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK9FCJcY4fy7tP-rU3x-gAAAiE"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:57.000298 2026] [security2:error] [pid 1018003:tid 1018232] [client 52.139.37.240:8460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mykaratetutor.com"] [uri "/wp-2019.php"] [unique_id "apK9FDAh5Y1i2tUxg4Hr7gAABgg"]
[Sat Aug 29 05:05:57.003094 2026] [security2:error] [pid 1017536:tid 1017736] [client 4.205.62.107:61829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/wdf.php"] [unique_id "apK9FSJcY4fy7tP-rU3x_AAAAlo"]
[Sat Aug 29 05:05:57.025273 2026] [security2:error] [pid 1017536:tid 1017737] [client 20.151.200.44:64860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/mga.php"] [unique_id "apK9FSJcY4fy7tP-rU3x_gAAAls"]
[Sat Aug 29 05:05:57.028492 2026] [security2:error] [pid 1018003:tid 1018226] [client 20.48.251.3:13982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/api.php"] [unique_id "apK9FTAh5Y1i2tUxg4Hr8QAABgM"]
[Sat Aug 29 05:05:57.035564 2026] [security2:error] [pid 1017536:tid 1017745] [client 20.196.209.81:17024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-content/content.php"] [unique_id "apK9FSJcY4fy7tP-rU3yAAAAAmM"]
[Sat Aug 29 05:05:57.039759 2026] [security2:error] [pid 1017536:tid 1017734] [client 20.48.250.41:60673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9FSJcY4fy7tP-rU3yAQAAAlg"]
[Sat Aug 29 05:05:57.044448 2026] [security2:error] [pid 1017536:tid 1017674] [client 168.107.94.195:58659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9FSJcY4fy7tP-rU3yAgAAAhw"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:57.054617 2026] [security2:error] [pid 1018003:tid 1018181] [client 93.123.109.228:41290] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/client/.env"] [unique_id "apK9FTAh5Y1i2tUxg4Hr8gAABdY"]
[Sat Aug 29 05:05:57.078551 2026] [security2:error] [pid 1017536:tid 1017721] [client 158.158.54.35:6123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/about/function.php"] [unique_id "apK9FSJcY4fy7tP-rU3yBgAAAks"]
[Sat Aug 29 05:05:57.078608 2026] [security2:error] [pid 1017536:tid 1017672] [client 93.123.109.228:41096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/cms/.env"] [unique_id "apK9FSJcY4fy7tP-rU3yBQAAAho"]
[Sat Aug 29 05:05:57.105759 2026] [security2:error] [pid 1017536:tid 1017720] [client 20.104.68.135:51399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kevinpascoe.com"] [uri "/xmlrpc.php"] [unique_id "apK9FSJcY4fy7tP-rU3yBwAAAko"]
[Sat Aug 29 05:05:57.113389 2026] [security2:error] [pid 1018003:tid 1018215] [client 158.23.147.79:32727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-admin/about.php"] [unique_id "apK9FTAh5Y1i2tUxg4Hr-QAABfg"]
[Sat Aug 29 05:05:57.135752 2026] [security2:error] [pid 1018003:tid 1018164] [client 93.123.109.228:41244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/config.php"] [unique_id "apK9FTAh5Y1i2tUxg4Hr-wAABcU"]
[Sat Aug 29 05:05:57.156908 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.151.200.44:65487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/inwp.php"] [unique_id "apK9FSJcY4fy7tP-rU3yDQAAAlY"]
[Sat Aug 29 05:05:57.200389 2026] [security2:error] [pid 1018003:tid 1018183] [client 52.139.37.240:8589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mykaratetutor.com"] [uri "/gecko-new.php"] [unique_id "apK9FTAh5Y1i2tUxg4Hr_wAABdg"]
[Sat Aug 29 05:05:57.207641 2026] [security2:error] [pid 1018003:tid 1018173] [client 93.123.109.228:41290] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/config/.env"] [unique_id "apK9FTAh5Y1i2tUxg4HsAAAABc4"]
[Sat Aug 29 05:05:57.219208 2026] [security2:error] [pid 1018003:tid 1018245] [client 20.48.250.41:60790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9FTAh5Y1i2tUxg4HsAQAABhU"]
[Sat Aug 29 05:05:57.235910 2026] [security2:error] [pid 1018003:tid 1018192] [client 4.205.62.107:22323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/admin.php"] [unique_id "apK9FTAh5Y1i2tUxg4HsAwAABeE"]
[Sat Aug 29 05:05:57.246490 2026] [security2:error] [pid 1017536:tid 1017743] [client 158.23.147.79:25511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-content/cong.php"] [unique_id "apK9FSJcY4fy7tP-rU3yEgAAAmE"]
[Sat Aug 29 05:05:57.249004 2026] [security2:error] [pid 1017536:tid 1017792] [client 93.123.109.228:41154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/config/aws.php"] [unique_id "apK9FSJcY4fy7tP-rU3yEwAAApI"]
[Sat Aug 29 05:05:57.265976 2026] [security2:error] [pid 1018003:tid 1018180] [client 93.123.109.228:41130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/config/config.inc.php"] [unique_id "apK9FTAh5Y1i2tUxg4HsBgAABdU"]
[Sat Aug 29 05:05:57.277717 2026] [security2:error] [pid 1017536:tid 1017716] [client 4.205.62.107:65498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/xda.php"] [unique_id "apK9FSJcY4fy7tP-rU3yFQAAAkY"]
[Sat Aug 29 05:05:57.298753 2026] [security2:error] [pid 1017536:tid 1017764] [client 4.205.62.107:22252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/doc.php"] [unique_id "apK9FSJcY4fy7tP-rU3yGAAAAnY"]
[Sat Aug 29 05:05:57.298753 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.151.200.44:64888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/ad1.php"] [unique_id "apK9FSJcY4fy7tP-rU3yFwAAAh0"]
[Sat Aug 29 05:05:57.303776 2026] [security2:error] [pid 1017536:tid 1017681] [client 4.232.148.111:36582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "apK9FSJcY4fy7tP-rU3yGQAAAiM"]
[Sat Aug 29 05:05:57.305010 2026] [security2:error] [pid 1017536:tid 1017786] [client 20.104.68.135:24191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kevinpascoe.com"] [uri "/yas.php"] [unique_id "apK9FSJcY4fy7tP-rU3yGgAAAow"]
[Sat Aug 29 05:05:57.310564 2026] [security2:error] [pid 1017536:tid 1017783] [client 68.155.159.216:51550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK9FSJcY4fy7tP-rU3yGwAAAok"]
[Sat Aug 29 05:05:57.317767 2026] [security2:error] [pid 1018003:tid 1018184] [client 4.205.62.107:2676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/debuggen.php"] [unique_id "apK9FTAh5Y1i2tUxg4HsCQAABdk"]
[Sat Aug 29 05:05:57.335186 2026] [security2:error] [pid 1017536:tid 1017711] [client 93.123.109.228:41278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/config/config.php"] [unique_id "apK9FSJcY4fy7tP-rU3yHAAAAkE"]
[Sat Aug 29 05:05:57.335453 2026] [security2:error] [pid 1017536:tid 1017768] [client 68.155.159.216:33611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-content/themes/too.php"] [unique_id "apK9FSJcY4fy7tP-rU3yHQAAAno"]
[Sat Aug 29 05:05:57.346424 2026] [security2:error] [pid 1018003:tid 1018150] [client 68.155.159.216:16168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/login.php"] [unique_id "apK9FTAh5Y1i2tUxg4HsDAAABbc"]
[Sat Aug 29 05:05:57.370020 2026] [security2:error] [pid 1018003:tid 1018195] [client 20.48.250.41:62495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/ff1.php"] [unique_id "apK9FTAh5Y1i2tUxg4HsDwAABeQ"]
[Sat Aug 29 05:05:57.370744 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.48.251.3:13989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/temp.php"] [unique_id "apK9FTAh5Y1i2tUxg4HsEAAABcI"]
[Sat Aug 29 05:05:57.375907 2026] [security2:error] [pid 1018003:tid 1018259] [client 158.23.147.79:30619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/css/index.php"] [unique_id "apK9FTAh5Y1i2tUxg4HsEQAABiM"]
[Sat Aug 29 05:05:57.395869 2026] [security2:error] [pid 1017536:tid 1017704] [client 93.123.109.228:41094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/config/env.php"] [unique_id "apK9FSJcY4fy7tP-rU3yHwAAAjo"]
[Sat Aug 29 05:05:57.397953 2026] [security2:error] [pid 1018003:tid 1018198] [client 52.139.37.240:8481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mykaratetutor.com"] [uri "/add_actualites.php"] [unique_id "apK9FTAh5Y1i2tUxg4HsEgAABec"]
[Sat Aug 29 05:05:57.412580 2026] [security2:error] [pid 1017536:tid 1017781] [client 20.48.251.3:61650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9FSJcY4fy7tP-rU3yIQAAAoc"]
[Sat Aug 29 05:05:57.417331 2026] [security2:error] [pid 1018003:tid 1018219] [client 93.123.109.228:41284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/config/module.config.php"] [unique_id "apK9FTAh5Y1i2tUxg4HsFAAABfw"]
[Sat Aug 29 05:05:57.422677 2026] [security2:error] [pid 1017536:tid 1017684] [client 93.123.109.228:41164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/config/nexmo.php"] [unique_id "apK9FSJcY4fy7tP-rU3yIwAAAiY"]
[Sat Aug 29 05:05:57.423747 2026] [security2:error] [pid 1018003:tid 1018153] [client 20.197.61.180:16971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK9FTAh5Y1i2tUxg4HsFQAABbo"]
[Sat Aug 29 05:05:57.427858 2026] [security2:error] [pid 1018003:tid 1018227] [client 185.104.184.230:38814] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.nhu.jca.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "apK9FTAh5Y1i2tUxg4HsFgAABgQ"]
[Sat Aug 29 05:05:57.439863 2026] [security2:error] [pid 1018003:tid 1018179] [client 20.196.209.81:18690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-content/core.php"] [unique_id "apK9FTAh5Y1i2tUxg4HsFwAABdQ"]
[Sat Aug 29 05:05:57.440818 2026] [security2:error] [pid 1017536:tid 1017669] [client 68.155.159.216:60288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.gavirestaurant.com"] [uri "/wp-content/x.php"] [unique_id "apK9FSJcY4fy7tP-rU3yJQAAAhc"]
[Sat Aug 29 05:05:57.446516 2026] [security2:error] [pid 1018003:tid 1018202] [client 40.83.93.50:8009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/hello.php"] [unique_id "apK9FTAh5Y1i2tUxg4HsGQAABes"]
[Sat Aug 29 05:05:57.446933 2026] [security2:error] [pid 1017536:tid 1017712] [client 168.107.94.195:59061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9FSJcY4fy7tP-rU3yJgAAAkI"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:57.457547 2026] [security2:error] [pid 1017536:tid 1017679] [client 93.123.109.228:41194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/config/stripe.php"] [unique_id "apK9FSJcY4fy7tP-rU3yKAAAAiE"]
[Sat Aug 29 05:05:57.504800 2026] [security2:error] [pid 1017536:tid 1017691] [client 68.155.159.216:50343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-admin/images/about.php"] [unique_id "apK9FSJcY4fy7tP-rU3yLAAAAi0"]
[Sat Aug 29 05:05:57.507294 2026] [security2:error] [pid 1017536:tid 1017773] [client 20.151.200.44:64897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/1vbqo.php"] [unique_id "apK9FSJcY4fy7tP-rU3yLQAAAn8"]
[Sat Aug 29 05:05:57.530585 2026] [security2:error] [pid 1017536:tid 1017706] [client 20.48.250.41:62510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/t.php"] [unique_id "apK9FSJcY4fy7tP-rU3yLgAAAjw"]
[Sat Aug 29 05:05:57.532859 2026] [security2:error] [pid 1017536:tid 1017717] [client 74.248.24.12:40935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/404.php"] [unique_id "apK9FSJcY4fy7tP-rU3yLwAAAkc"]
[Sat Aug 29 05:05:57.540476 2026] [security2:error] [pid 1018003:tid 1018278] [client 20.48.251.3:61673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9FTAh5Y1i2tUxg4HsHgAABjY"]
[Sat Aug 29 05:05:57.560196 2026] [security2:error] [pid 1017536:tid 1017737] [client 20.104.49.130:47824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/xmini4.php"] [unique_id "apK9FSJcY4fy7tP-rU3yMAAAAls"]
[Sat Aug 29 05:05:57.588372 2026] [security2:error] [pid 1018003:tid 1018244] [client 52.139.37.240:8450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mykaratetutor.com"] [uri "/browse.php"] [unique_id "apK9FTAh5Y1i2tUxg4HsIwAABhQ"]
[Sat Aug 29 05:05:57.649179 2026] [security2:error] [pid 1018003:tid 1018171] [client 20.151.200.44:64889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/h02ugyh.php"] [unique_id "apK9FTAh5Y1i2tUxg4HsJgAABcw"]
[Sat Aug 29 05:05:57.649742 2026] [security2:error] [pid 1017536:tid 1017720] [client 20.104.49.130:51349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/wsd.php"] [unique_id "apK9FSJcY4fy7tP-rU3yOwAAAko"]
[Sat Aug 29 05:05:57.653441 2026] [security2:error] [pid 1017536:tid 1017727] [client 65.111.23.85:26287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 85.23.111.65.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK9FSJcY4fy7tP-rU3yOgAAAlE"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:05:57.669699 2026] [security2:error] [pid 1017536:tid 1017698] [client 20.48.251.3:61670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/cloud.php"] [unique_id "apK9FSJcY4fy7tP-rU3yPwAAAjQ"]
[Sat Aug 29 05:05:57.680375 2026] [security2:error] [pid 1017536:tid 1017753] [client 20.48.250.41:60767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/erty.php"] [unique_id "apK9FSJcY4fy7tP-rU3yQAAAAms"]
[Sat Aug 29 05:05:57.686146 2026] [security2:error] [pid 1017536:tid 1017725] [client 68.155.159.216:58361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/wp-l0gin.php"] [unique_id "apK9FSJcY4fy7tP-rU3yQgAAAk8"]
[Sat Aug 29 05:05:57.693280 2026] [security2:error] [pid 1017536:tid 1017724] [client 4.205.62.107:56003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/dialog.php"] [unique_id "apK9FSJcY4fy7tP-rU3yQwAAAk4"]
[Sat Aug 29 05:05:57.703051 2026] [security2:error] [pid 1018003:tid 1018239] [client 93.123.109.228:41122] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/crm/.env"] [unique_id "apK9FTAh5Y1i2tUxg4HsKAAABg8"]
[Sat Aug 29 05:05:57.710989 2026] [security2:error] [pid 1018003:tid 1018203] [client 93.123.109.228:41290] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/cron/.env"] [unique_id "apK9FTAh5Y1i2tUxg4HsKQAABew"]
[Sat Aug 29 05:05:57.721564 2026] [security2:error] [pid 1017536:tid 1017748] [client 158.158.54.35:19504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-includes/admin.php"] [unique_id "apK9FSJcY4fy7tP-rU3yRAAAAmY"]
[Sat Aug 29 05:05:57.733400 2026] [security2:error] [pid 1017536:tid 1017743] [client 93.123.109.228:41096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/current/.env"] [unique_id "apK9FSJcY4fy7tP-rU3yRQAAAmE"]
[Sat Aug 29 05:05:57.736937 2026] [security2:error] [pid 1017536:tid 1017785] [client 185.104.184.230:38822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.184.104.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "webdisk.nhu.jca.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "apK9FSJcY4fy7tP-rU3yRwAAAos"]
[Sat Aug 29 05:05:57.741762 2026] [security2:error] [pid 1017536:tid 1017716] [client 93.123.109.228:41328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/demo/.env"] [unique_id "apK9FSJcY4fy7tP-rU3ySAAAAkY"]
[Sat Aug 29 05:05:57.755531 2026] [security2:error] [pid 1018003:tid 1018232] [client 93.123.109.228:41330] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/dev/.env"] [unique_id "apK9FTAh5Y1i2tUxg4HsLAAABgg"]
[Sat Aug 29 05:05:57.758381 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.48.251.3:33326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/fm.php"] [unique_id "apK9FSJcY4fy7tP-rU3ySgAAAh0"]
[Sat Aug 29 05:05:57.770979 2026] [security2:error] [pid 1017536:tid 1017764] [client 93.123.109.228:41298] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/develop/.env"] [unique_id "apK9FSJcY4fy7tP-rU3ySwAAAnY"]
[Sat Aug 29 05:05:57.773257 2026] [security2:error] [pid 1018003:tid 1018231] [client 52.139.37.240:8628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mykaratetutor.com"] [uri "/contentloader1.php"] [unique_id "apK9FTAh5Y1i2tUxg4HsLQAABgc"]
[Sat Aug 29 05:05:57.782899 2026] [security2:error] [pid 1017536:tid 1017757] [client 93.123.109.228:41332] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/developer/.env"] [unique_id "apK9FSJcY4fy7tP-rU3yTAAAAm8"]
[Sat Aug 29 05:05:57.792197 2026] [security2:error] [pid 1017536:tid 1017786] [client 93.123.109.228:41314] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/development/.env"] [unique_id "apK9FSJcY4fy7tP-rU3yTgAAAow"]
[Sat Aug 29 05:05:57.793162 2026] [security2:error] [pid 1017536:tid 1017783] [client 20.151.200.44:64885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/shelp.php"] [unique_id "apK9FSJcY4fy7tP-rU3yTwAAAok"]
[Sat Aug 29 05:05:57.800458 2026] [security2:error] [pid 1017536:tid 1017788] [client 20.48.251.3:62139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/kerang.php"] [unique_id "apK9FSJcY4fy7tP-rU3yUAAAAo4"]
[Sat Aug 29 05:05:57.812163 2026] [security2:error] [pid 1017536:tid 1017777] [client 20.48.250.41:62525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/0x.php"] [unique_id "apK9FSJcY4fy7tP-rU3yUQAAAoM"]
[Sat Aug 29 05:05:57.825417 2026] [security2:error] [pid 1017536:tid 1017784] [client 158.23.147.79:24514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK9FSJcY4fy7tP-rU3yUwAAAoo"]
[Sat Aug 29 05:05:57.828611 2026] [security2:error] [pid 1018003:tid 1018170] [client 168.107.94.195:59437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9FTAh5Y1i2tUxg4HsLwAABcs"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:57.833288 2026] [security2:error] [pid 1018003:tid 1018256] [client 20.196.209.81:18725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-content/db-status.php"] [unique_id "apK9FTAh5Y1i2tUxg4HsMAAABiA"]
[Sat Aug 29 05:05:57.835547 2026] [security2:error] [pid 1017536:tid 1017688] [client 68.155.159.216:12035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/about/function.php"] [unique_id "apK9FSJcY4fy7tP-rU3yVAAAAio"]
[Sat Aug 29 05:05:57.847206 2026] [security2:error] [pid 1017536:tid 1017707] [client 68.155.159.216:51249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/cong.php"] [unique_id "apK9FSJcY4fy7tP-rU3yVQAAAj0"]
[Sat Aug 29 05:05:57.858015 2026] [security2:error] [pid 1017536:tid 1017775] [client 158.23.147.79:62981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/lock.php"] [unique_id "apK9FSJcY4fy7tP-rU3yVwAAAoE"]
[Sat Aug 29 05:05:57.870477 2026] [security2:error] [pid 1017536:tid 1017669] [client 4.205.62.107:53378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/aws_config.php"] [unique_id "apK9FSJcY4fy7tP-rU3yWQAAAhc"]
[Sat Aug 29 05:05:57.892080 2026] [security2:error] [pid 1017536:tid 1017709] [client 20.104.49.130:48514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/x1da.php"] [unique_id "apK9FSJcY4fy7tP-rU3yXQAAAj8"]
[Sat Aug 29 05:05:57.914055 2026] [security2:error] [pid 1017536:tid 1017691] [client 20.104.49.130:63609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/dex.php"] [unique_id "apK9FSJcY4fy7tP-rU3yXgAAAi0"]
[Sat Aug 29 05:05:57.917431 2026] [security2:error] [pid 1017536:tid 1017706] [client 40.83.93.50:23514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-admin/network/xmrlpc.php"] [unique_id "apK9FSJcY4fy7tP-rU3yYAAAAjw"]
[Sat Aug 29 05:05:57.931167 2026] [security2:error] [pid 1017536:tid 1017749] [client 20.48.251.3:62109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/rem.php"] [unique_id "apK9FSJcY4fy7tP-rU3yYgAAAmc"]
[Sat Aug 29 05:05:57.934510 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.151.200.44:64840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/13ede.php"] [unique_id "apK9FSJcY4fy7tP-rU3yZAAAAnk"]
[Sat Aug 29 05:05:57.938567 2026] [security2:error] [pid 1018003:tid 1018191] [client 40.83.93.50:3142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/fi2.php"] [unique_id "apK9FTAh5Y1i2tUxg4HsOQAABeA"]
[Sat Aug 29 05:05:57.963232 2026] [security2:error] [pid 1018003:tid 1018190] [client 93.123.109.228:41230] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/erp/.env"] [unique_id "apK9FTAh5Y1i2tUxg4HsOgAABd8"]
[Sat Aug 29 05:05:57.964469 2026] [security2:error] [pid 1017536:tid 1017793] [client 52.139.37.240:9095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mykaratetutor.com"] [uri "/upfile.php"] [unique_id "apK9FSJcY4fy7tP-rU3yaQAAApM"]
[Sat Aug 29 05:05:57.980982 2026] [security2:error] [pid 1017536:tid 1017723] [client 20.104.49.130:20651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.danesquality.com"] [uri "/amax.php"] [unique_id "apK9FSJcY4fy7tP-rU3yagAAAk0"]
[Sat Aug 29 05:05:57.981708 2026] [security2:error] [pid 1018003:tid 1018230] [client 20.48.250.41:60677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/66.php"] [unique_id "apK9FTAh5Y1i2tUxg4HsPAAABgY"]
[Sat Aug 29 05:05:57.983791 2026] [security2:error] [pid 1017536:tid 1017696] [client 68.155.159.216:18405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK9FSJcY4fy7tP-rU3yawAAAjI"]
[Sat Aug 29 05:05:58.009269 2026] [security2:error] [pid 1018003:tid 1018241] [client 158.23.147.79:48313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/ws.php"] [unique_id "apK9FjAh5Y1i2tUxg4HsPQAABhE"]
[Sat Aug 29 05:05:58.020312 2026] [security2:error] [pid 1018003:tid 1018188] [client 93.123.109.228:41256] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/etc/apache2/apache2.conf"] [unique_id "apK9FjAh5Y1i2tUxg4HsPwAABd0"]
[Sat Aug 29 05:05:58.022856 2026] [security2:error] [pid 1017536:tid 1017720] [client 93.123.109.228:41322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/etc/boto.cfg"] [unique_id "apK9FiJcY4fy7tP-rU3ybgAAAko"]
[Sat Aug 29 05:05:58.030956 2026] [security2:error] [pid 1018003:tid 1018185] [client 93.123.109.228:41280] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/fe/.env"] [unique_id "apK9FjAh5Y1i2tUxg4HsQAAABdo"]
[Sat Aug 29 05:05:58.046575 2026] [security2:error] [pid 1017536:tid 1017693] [client 68.155.159.216:14231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK9FiJcY4fy7tP-rU3ycgAAAi8"]
[Sat Aug 29 05:05:58.052844 2026] [security2:error] [pid 1017536:tid 1017769] [client 74.248.24.12:33436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/php.php"] [unique_id "apK9FiJcY4fy7tP-rU3ydQAAAns"]
[Sat Aug 29 05:05:58.059392 2026] [security2:error] [pid 1018003:tid 1018245] [client 20.48.251.3:61651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/min.php"] [unique_id "apK9FjAh5Y1i2tUxg4HsRAAABhU"]
[Sat Aug 29 05:05:58.091963 2026] [security2:error] [pid 1018003:tid 1018254] [client 93.123.109.228:41348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/front/.env"] [unique_id "apK9FjAh5Y1i2tUxg4HsRgAABh4"]
[Sat Aug 29 05:05:58.099810 2026] [security2:error] [pid 1017536:tid 1017724] [client 93.123.109.228:41328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/frontend/.env"] [unique_id "apK9FiJcY4fy7tP-rU3yegAAAk4"]
[Sat Aug 29 05:05:58.115545 2026] [security2:error] [pid 1017536:tid 1017748] [client 20.48.251.3:14035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/wp-blog.php"] [unique_id "apK9FiJcY4fy7tP-rU3yewAAAmY"]
[Sat Aug 29 05:05:58.116527 2026] [security2:error] [pid 1017536:tid 1017792] [client 4.232.148.111:33863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/wp-content/admin.php"] [unique_id "apK9FiJcY4fy7tP-rU3yfAAAApI"]
[Sat Aug 29 05:05:58.142325 2026] [security2:error] [pid 1017536:tid 1017731] [client 4.205.62.107:64959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/bb.php"] [unique_id "apK9FiJcY4fy7tP-rU3ygAAAAlU"]
[Sat Aug 29 05:05:58.154837 2026] [security2:error] [pid 1017536:tid 1017713] [client 20.48.250.41:60782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/f35.php"] [unique_id "apK9FiJcY4fy7tP-rU3yggAAAkM"]
[Sat Aug 29 05:05:58.164164 2026] [security2:error] [pid 1017536:tid 1017773] [client 20.197.61.180:5845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-admin/system.php"] [unique_id "apK9FiJcY4fy7tP-rU3ygwAAAn8"]
[Sat Aug 29 05:05:58.171343 2026] [security2:error] [pid 1017536:tid 1017722] [client 52.139.37.240:8464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mykaratetutor.com"] [uri "/form.php"] [unique_id "apK9FiJcY4fy7tP-rU3yhQAAAkw"]
[Sat Aug 29 05:05:58.173363 2026] [security2:error] [pid 1017536:tid 1017752] [client 93.123.109.228:41322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/info.php"] [unique_id "apK9FiJcY4fy7tP-rU3yhgAAAmo"]
[Sat Aug 29 05:05:58.183812 2026] [security2:error] [pid 1017536:tid 1017760] [client 93.123.109.228:41316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/infos.php"] [unique_id "apK9FiJcY4fy7tP-rU3yhwAAAnI"]
[Sat Aug 29 05:05:58.187482 2026] [security2:error] [pid 1018003:tid 1018273] [client 93.123.109.228:41280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/infophp.php"] [unique_id "apK9FjAh5Y1i2tUxg4HsSwAABjE"]
[Sat Aug 29 05:05:58.188282 2026] [security2:error] [pid 1018003:tid 1018252] [client 20.48.251.3:62129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/saiga.php"] [unique_id "apK9FjAh5Y1i2tUxg4HsTAAABhw"]
[Sat Aug 29 05:05:58.195184 2026] [security2:error] [pid 1018003:tid 1018194] [client 185.104.184.230:38832] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.nhu.jca.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "apK9FjAh5Y1i2tUxg4HsTQAABeM"]
[Sat Aug 29 05:05:58.208303 2026] [security2:error] [pid 1017536:tid 1017750] [client 168.107.94.195:59970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9FiJcY4fy7tP-rU3yiAAAAmg"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:58.223048 2026] [security2:error] [pid 1018003:tid 1018150] [client 93.123.109.228:41122] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/laravel/.env"] [unique_id "apK9FjAh5Y1i2tUxg4HsTwAABbc"]
[Sat Aug 29 05:05:58.254574 2026] [security2:error] [pid 1018003:tid 1018195] [client 93.123.109.228:41108] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/lms/.env"] [unique_id "apK9FjAh5Y1i2tUxg4HsUAAABeQ"]
[Sat Aug 29 05:05:58.258111 2026] [security2:error] [pid 1018003:tid 1018175] [client 158.23.147.79:32726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK9FjAh5Y1i2tUxg4HsUQAABdA"]
[Sat Aug 29 05:05:58.258543 2026] [security2:error] [pid 1018003:tid 1018213] [client 20.196.209.81:17079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-content/disagrsxr.php"] [unique_id "apK9FjAh5Y1i2tUxg4HsUgAABfY"]
[Sat Aug 29 05:05:58.276174 2026] [security2:error] [pid 1017536:tid 1017742] [client 20.151.200.44:64909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/k8.php"] [unique_id "apK9FiJcY4fy7tP-rU3yjAAAAmA"]
[Sat Aug 29 05:05:58.283665 2026] [autoindex:error] [pid 1017536:tid 1017785] [client 45.148.10.166:49904] AH01276: Cannot serve directory /home3/uochiamy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:05:58.283919 2026] [security2:error] [pid 1018003:tid 1018156] [client 93.123.109.228:41230] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/local/.env"] [unique_id "apK9FjAh5Y1i2tUxg4HsUwAABb0"]
[Sat Aug 29 05:05:58.305039 2026] [security2:error] [pid 1017536:tid 1017775] [client 20.48.250.41:60789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/wen.php"] [unique_id "apK9FiJcY4fy7tP-rU3yjwAAAoE"]
[Sat Aug 29 05:05:58.313763 2026] [security2:error] [pid 1018003:tid 1018257] [client 93.123.109.228:41348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/market/.env"] [unique_id "apK9FjAh5Y1i2tUxg4HsVQAABiE"]
[Sat Aug 29 05:05:58.316548 2026] [security2:error] [pid 1018003:tid 1018259] [client 20.48.251.3:62094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/ammika.php"] [unique_id "apK9FjAh5Y1i2tUxg4HsVgAABiM"]
[Sat Aug 29 05:05:58.317243 2026] [security2:error] [pid 1017536:tid 1017704] [client 158.158.54.35:12268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/lock360.php"] [unique_id "apK9FiJcY4fy7tP-rU3ykAAAAjo"]
[Sat Aug 29 05:05:58.325123 2026] [security2:error] [pid 1017536:tid 1017780] [client 93.123.109.228:41332] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/marketing/.env"] [unique_id "apK9FiJcY4fy7tP-rU3ykQAAAoY"]
[Sat Aug 29 05:05:58.335749 2026] [security2:error] [pid 1017536:tid 1017746] [client 20.48.251.3:14013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/erty.php"] [unique_id "apK9FiJcY4fy7tP-rU3ykgAAAmQ"]
[Sat Aug 29 05:05:58.347659 2026] [security2:error] [pid 1018003:tid 1018275] [client 93.123.109.228:41256] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/media/.env"] [unique_id "apK9FjAh5Y1i2tUxg4HsVwAABjM"]
[Sat Aug 29 05:05:58.353017 2026] [security2:error] [pid 1018003:tid 1018153] [client 158.23.147.79:25541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK9FjAh5Y1i2tUxg4HsWAAABbo"]
[Sat Aug 29 05:05:58.373022 2026] [security2:error] [pid 1017536:tid 1017761] [client 52.139.37.240:8465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mykaratetutor.com"] [uri "/wp-sigunq.php"] [unique_id "apK9FiJcY4fy7tP-rU3ylQAAAnM"]
[Sat Aug 29 05:05:58.382742 2026] [security2:error] [pid 1017536:tid 1017717] [client 4.205.62.107:22248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/g3.php"] [unique_id "apK9FiJcY4fy7tP-rU3ylgAAAkc"]
[Sat Aug 29 05:05:58.389079 2026] [security2:error] [pid 1017536:tid 1017788] [client 40.83.93.50:5893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-admin/options-general.php"] [unique_id "apK9FiJcY4fy7tP-rU3ymAAAAo4"]
[Sat Aug 29 05:05:58.389808 2026] [security2:error] [pid 1018003:tid 1018250] [client 93.123.109.228:41290] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/node-api/.env"] [unique_id "apK9FjAh5Y1i2tUxg4HsXAAABho"]
[Sat Aug 29 05:05:58.412556 2026] [security2:error] [pid 1017536:tid 1017703] [client 93.123.109.228:41096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/new/.env"] [unique_id "apK9FiJcY4fy7tP-rU3ymgAAAjk"]
[Sat Aug 29 05:05:58.419238 2026] [security2:error] [pid 1017536:tid 1017672] [client 68.155.159.216:51838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/classwithtostring.php"] [unique_id "apK9FiJcY4fy7tP-rU3ymwAAAho"]
[Sat Aug 29 05:05:58.419927 2026] [security2:error] [pid 1017536:tid 1017734] [client 20.151.200.44:64944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/alog.php"] [unique_id "apK9FiJcY4fy7tP-rU3ynAAAAlg"]
[Sat Aug 29 05:05:58.422582 2026] [security2:error] [pid 1018003:tid 1018268] [client 93.123.109.228:41108] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/node/.env"] [unique_id "apK9FjAh5Y1i2tUxg4HsXQAABiw"]
[Sat Aug 29 05:05:58.424560 2026] [security2:error] [pid 1017536:tid 1017670] [client 4.205.62.107:65410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/pinfo.php"] [unique_id "apK9FiJcY4fy7tP-rU3ynQAAAhg"]
[Sat Aug 29 05:05:58.426544 2026] [security2:error] [pid 1017536:tid 1017688] [client 40.83.93.50:14429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/1p.php"] [unique_id "apK9FiJcY4fy7tP-rU3yngAAAio"]
[Sat Aug 29 05:05:58.428726 2026] [security2:error] [pid 1018003:tid 1018225] [client 93.123.109.228:41354] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/node/api/.env"] [unique_id "apK9FjAh5Y1i2tUxg4HsXgAABgI"]
[Sat Aug 29 05:05:58.428862 2026] [security2:error] [pid 1017536:tid 1017730] [client 93.123.109.228:41328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/node/backend/.env"] [unique_id "apK9FiJcY4fy7tP-rU3ynwAAAlQ"]
[Sat Aug 29 05:05:58.435232 2026] [security2:error] [pid 1017536:tid 1017754] [client 4.205.62.107:22472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/fun.php"] [unique_id "apK9FiJcY4fy7tP-rU3yoAAAAmw"]
[Sat Aug 29 05:05:58.439150 2026] [security2:error] [pid 1017536:tid 1017715] [client 68.155.159.216:33750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/radio.php"] [unique_id "apK9FiJcY4fy7tP-rU3yoQAAAkU"]
[Sat Aug 29 05:05:58.442333 2026] [security2:error] [pid 1017536:tid 1017678] [client 20.48.251.3:62114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/broadcasting.php"] [unique_id "apK9FiJcY4fy7tP-rU3yogAAAiA"]
[Sat Aug 29 05:05:58.453110 2026] [security2:error] [pid 1018003:tid 1018212] [client 93.123.109.228:41230] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/nodeapi/.env"] [unique_id "apK9FjAh5Y1i2tUxg4HsXwAABfU"]
[Sat Aug 29 05:05:58.455408 2026] [security2:error] [pid 1017536:tid 1017753] [client 68.155.159.216:16147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/hehehehe.php"] [unique_id "apK9FiJcY4fy7tP-rU3ypgAAAms"]
[Sat Aug 29 05:05:58.455440 2026] [security2:error] [pid 1017536:tid 1017767] [client 4.205.62.107:2927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/wp-admin/sc.php"] [unique_id "apK9FiJcY4fy7tP-rU3ypQAAAnk"]
[Sat Aug 29 05:05:58.455497 2026] [security2:error] [pid 1017536:tid 1017724] [client 93.123.109.228:41116] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/nodeweb/.env"] [unique_id "apK9FiJcY4fy7tP-rU3ypAAAAk4"]
[Sat Aug 29 05:05:58.481602 2026] [security2:error] [pid 1017536:tid 1017792] [client 93.123.109.228:41332] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/old/.env"] [unique_id "apK9FiJcY4fy7tP-rU3yqgAAApI"]
[Sat Aug 29 05:05:58.501810 2026] [security2:error] [pid 1018003:tid 1018276] [client 185.104.184.230:38848] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.nhu.jca.mybluehost.me"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "apK9FjAh5Y1i2tUxg4HsZAAABjQ"]
[Sat Aug 29 05:05:58.502018 2026] [security2:error] [pid 1017536:tid 1017722] [client 93.123.109.228:41314] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/opt/.env"] [unique_id "apK9FiJcY4fy7tP-rU3yrwAAAkw"]
[Sat Aug 29 05:05:58.503750 2026] [security2:error] [pid 1017536:tid 1017683] [client 158.23.147.79:30603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK9FiJcY4fy7tP-rU3ysAAAAiU"]
[Sat Aug 29 05:05:58.513169 2026] [security2:error] [pid 1017536:tid 1017726] [client 34.21.253.104:1272] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cpanel.replenishink.com"] [uri "/.git/HEAD"] [unique_id "apK9FiJcY4fy7tP-rU3yuAAAAlA"]
[Sat Aug 29 05:05:58.516001 2026] [proxy_http:error] [pid 1017536:tid 1017736] (20014)Internal error (specific information not available): [client 34.21.253.104:1406] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:58.516017 2026] [proxy:error] [pid 1017536:tid 1017736] [client 34.21.253.104:1406] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/.gcloud/credentials
[Sat Aug 29 05:05:58.519292 2026] [proxy_http:error] [pid 1018003:tid 1018205] (20014)Internal error (specific information not available): [client 34.21.253.104:1248] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:58.519312 2026] [proxy:error] [pid 1018003:tid 1018205] [client 34.21.253.104:1248] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/public/.env
[Sat Aug 29 05:05:58.519697 2026] [security2:error] [pid 1018003:tid 1018249] [client 20.48.250.41:62589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/inc.php"] [unique_id "apK9FjAh5Y1i2tUxg4HsagAABhk"]
[Sat Aug 29 05:05:58.522945 2026] [proxy_http:error] [pid 1017536:tid 1017705] (20014)Internal error (specific information not available): [client 34.21.253.104:1370] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:58.522964 2026] [proxy:error] [pid 1017536:tid 1017705] [client 34.21.253.104:1370] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/aws_credentials
[Sat Aug 29 05:05:58.526634 2026] [proxy_http:error] [pid 1018003:tid 1018219] (20014)Internal error (specific information not available): [client 34.21.253.104:1356] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:58.526648 2026] [proxy:error] [pid 1018003:tid 1018219] [client 34.21.253.104:1356] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/aws.json
[Sat Aug 29 05:05:58.528042 2026] [proxy_http:error] [pid 1017536:tid 1017749] (20014)Internal error (specific information not available): [client 34.21.253.104:1394] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:58.528051 2026] [proxy:error] [pid 1017536:tid 1017749] [client 34.21.253.104:1394] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/.gcloud/credentials.json
[Sat Aug 29 05:05:58.533877 2026] [proxy_http:error] [pid 1017536:tid 1017709] (20014)Internal error (specific information not available): [client 34.21.253.104:1344] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:05:58.533893 2026] [proxy:error] [pid 1017536:tid 1017709] [client 34.21.253.104:1344] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/aws.env
[Sat Aug 29 05:05:58.561620 2026] [security2:error] [pid 1017536:tid 1017786] [client 68.155.159.216:61634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.gavirestaurant.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK9FiJcY4fy7tP-rU3yuwAAAow"]
[Sat Aug 29 05:05:58.561815 2026] [security2:error] [pid 1017536:tid 1017719] [client 74.248.24.12:41023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/init.php"] [unique_id "apK9FiJcY4fy7tP-rU3yvAAAAkk"]
[Sat Aug 29 05:05:58.569554 2026] [security2:error] [pid 1017536:tid 1017752] [client 52.139.37.240:8578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mykaratetutor.com"] [uri "/07.php"] [unique_id "apK9FiJcY4fy7tP-rU3yvgAAAmo"]
[Sat Aug 29 05:05:58.569593 2026] [security2:error] [pid 1017536:tid 1017777] [client 20.48.251.3:62137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/aws_config.php"] [unique_id "apK9FiJcY4fy7tP-rU3yvwAAAoM"]
[Sat Aug 29 05:05:58.590758 2026] [security2:error] [pid 1017536:tid 1017689] [client 20.151.200.44:64902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/adin.php"] [unique_id "apK9FiJcY4fy7tP-rU3ywQAAAis"]
[Sat Aug 29 05:05:58.591505 2026] [security2:error] [pid 1017536:tid 1017720] [client 4.232.148.111:34891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/wp-configs.php"] [unique_id "apK9FiJcY4fy7tP-rU3ywwAAAko"]
[Sat Aug 29 05:05:58.600879 2026] [security2:error] [pid 1018003:tid 1018154] [client 20.48.251.3:13988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/wp-config.backup.php"] [unique_id "apK9FjAh5Y1i2tUxg4HscwAABbs"]
[Sat Aug 29 05:05:58.611026 2026] [security2:error] [pid 1018003:tid 1018224] [client 68.155.159.216:50251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK9FjAh5Y1i2tUxg4HsdAAABgE"]
[Sat Aug 29 05:05:58.627882 2026] [security2:error] [pid 1017536:tid 1017707] [client 158.23.147.79:35818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9FiJcY4fy7tP-rU3yyQAAAj0"]
[Sat Aug 29 05:05:58.641870 2026] [security2:error] [pid 1017536:tid 1017784] [client 168.107.94.195:60465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9FiJcY4fy7tP-rU3ywgAAAoo"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:58.649633 2026] [security2:error] [pid 1017536:tid 1017761] [client 20.48.250.41:62464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/6bcwiqwj.php"] [unique_id "apK9FiJcY4fy7tP-rU3yzQAAAnM"]
[Sat Aug 29 05:05:58.656012 2026] [security2:error] [pid 1018003:tid 1018218] [client 20.196.209.81:17076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-content/f35.php"] [unique_id "apK9FjAh5Y1i2tUxg4HseAAABfs"]
[Sat Aug 29 05:05:58.698875 2026] [security2:error] [pid 1017536:tid 1017674] [client 20.48.251.3:61196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/dialog.php"] [unique_id "apK9FiJcY4fy7tP-rU3y0wAAAhw"]
[Sat Aug 29 05:05:58.715917 2026] [security2:error] [pid 1017536:tid 1017715] [client 173.239.198.74:0] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "sungrove.org"] [uri "/.env"] [unique_id "apK9FiJcY4fy7tP-rU3y1QAAAkU"]
[Sat Aug 29 05:05:58.717734 2026] [security2:error] [pid 1018003:tid 1018170] [client 93.123.109.228:41358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/php-info.php"] [unique_id "apK9FjAh5Y1i2tUxg4HsfgAABcs"]
[Sat Aug 29 05:05:58.728660 2026] [security2:error] [pid 1018003:tid 1018163] [client 93.123.109.228:41290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/php.php"] [unique_id "apK9FjAh5Y1i2tUxg4HsfwAABcQ"]
[Sat Aug 29 05:05:58.730635 2026] [security2:error] [pid 1017536:tid 1017698] [client 93.123.109.228:41096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/php_info.php"] [unique_id "apK9FiJcY4fy7tP-rU3y2AAAAjQ"]
[Sat Aug 29 05:05:58.732264 2026] [security2:error] [pid 1017536:tid 1017753] [client 159.69.158.189:64508] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "drjrae.com"] [uri "/"] [unique_id "apK9FiJcY4fy7tP-rU3y2QAAAms"], referer: http://drjrae.com
[Sat Aug 29 05:05:58.736311 2026] [security2:error] [pid 1017536:tid 1017776] [client 4.205.62.107:21886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9FiJcY4fy7tP-rU3y2gAAAoI"]
[Sat Aug 29 05:05:58.751006 2026] [security2:error] [pid 1017536:tid 1017767] [client 57.141.14.102:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/page/44/"] [unique_id "apK9FiJcY4fy7tP-rU3y2wAAAnk"]
[Sat Aug 29 05:05:58.754987 2026] [security2:error] [pid 1018003:tid 1018255] [client 93.123.109.228:41354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/phpinfo.php"] [unique_id "apK9FjAh5Y1i2tUxg4HsgQAABh8"]
[Sat Aug 29 05:05:58.756407 2026] [security2:error] [pid 1018003:tid 1018226] [client 20.151.200.44:64879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/sf9.php"] [unique_id "apK9FjAh5Y1i2tUxg4HsggAABgM"]
[Sat Aug 29 05:05:58.759045 2026] [security2:error] [pid 1018003:tid 1018181] [client 20.48.251.3:14027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/server-info.php"] [unique_id "apK9FjAh5Y1i2tUxg4HsgwAABdY"]
[Sat Aug 29 05:05:58.763384 2026] [security2:error] [pid 1017536:tid 1017730] [client 52.139.37.240:8454] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "mail.mykaratetutor.com"] [uri "/c99.php"] [unique_id "apK9FiJcY4fy7tP-rU3y3QAAAlQ"]
[Sat Aug 29 05:05:58.774584 2026] [security2:error] [pid 1017536:tid 1017742] [client 158.158.54.35:10699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-conflg.php"] [unique_id "apK9FiJcY4fy7tP-rU3y3wAAAmA"]
[Sat Aug 29 05:05:58.784047 2026] [security2:error] [pid 1017536:tid 1017669] [client 93.123.109.228:41116] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/portal/.env"] [unique_id "apK9FiJcY4fy7tP-rU3y4AAAAhc"]
[Sat Aug 29 05:05:58.802400 2026] [security2:error] [pid 1018003:tid 1018223] [client 185.104.184.230:44884] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.nhu.jca.mybluehost.me"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "apK9FjAh5Y1i2tUxg4HshQAABgA"]
[Sat Aug 29 05:05:58.807063 2026] [security2:error] [pid 1017536:tid 1017760] [client 20.48.250.41:62524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/easy.php"] [unique_id "apK9FiJcY4fy7tP-rU3y4QAAAnI"]
[Sat Aug 29 05:05:58.815008 2026] [security2:error] [pid 1017536:tid 1017679] [client 68.155.159.216:57467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK9FiJcY4fy7tP-rU3y4wAAAiE"]
[Sat Aug 29 05:05:58.831998 2026] [security2:error] [pid 1018003:tid 1018243] [client 20.48.251.3:62140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/phpinfo01.php"] [unique_id "apK9FjAh5Y1i2tUxg4HshgAABhM"]
[Sat Aug 29 05:05:58.832662 2026] [security2:error] [pid 1018003:tid 1018264] [client 4.205.62.107:55976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/phpinfo01.php"] [unique_id "apK9FjAh5Y1i2tUxg4HshwAABig"]
[Sat Aug 29 05:05:58.835545 2026] [security2:error] [pid 1018003:tid 1018266] [client 93.123.109.228:41256] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/prod/.env"] [unique_id "apK9FjAh5Y1i2tUxg4HsiAAABio"]
[Sat Aug 29 05:05:58.845843 2026] [security2:error] [pid 1017536:tid 1017736] [client 93.123.109.228:41328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/production/.env"] [unique_id "apK9FiJcY4fy7tP-rU3y5gAAAlo"]
[Sat Aug 29 05:05:58.845845 2026] [security2:error] [pid 1017536:tid 1017691] [client 93.123.109.228:41314] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/product/.env"] [unique_id "apK9FiJcY4fy7tP-rU3y5wAAAi0"]
[Sat Aug 29 05:05:58.861693 2026] [security2:error] [pid 1018003:tid 1018258] [client 93.123.109.228:41122] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/project/.env"] [unique_id "apK9FjAh5Y1i2tUxg4HsjAAABiI"]
[Sat Aug 29 05:05:58.877620 2026] [security2:error] [pid 1017536:tid 1017693] [client 40.83.93.50:23506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-admin/options.php"] [unique_id "apK9FiJcY4fy7tP-rU3y6gAAAi8"]
[Sat Aug 29 05:05:58.878292 2026] [security2:error] [pid 1017536:tid 1017780] [client 20.197.61.180:16963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-admin/test.php"] [unique_id "apK9FiJcY4fy7tP-rU3y6wAAAoY"]
[Sat Aug 29 05:05:58.896448 2026] [security2:error] [pid 1017536:tid 1017719] [client 20.48.251.3:14056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/gk.php"] [unique_id "apK9FiJcY4fy7tP-rU3y7AAAAkk"]
[Sat Aug 29 05:05:58.896461 2026] [security2:error] [pid 1017536:tid 1017777] [client 20.151.200.44:64952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/lte7.php"] [unique_id "apK9FiJcY4fy7tP-rU3y7QAAAoM"]
[Sat Aug 29 05:05:58.917199 2026] [security2:error] [pid 1018003:tid 1018173] [client 93.123.109.228:41108] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/public/.env"] [unique_id "apK9FjAh5Y1i2tUxg4HsjgAABc4"]
[Sat Aug 29 05:05:58.934700 2026] [security2:error] [pid 1018003:tid 1018192] [client 158.23.147.79:24562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/themes.php"] [unique_id "apK9FjAh5Y1i2tUxg4HsjwAABeE"]
[Sat Aug 29 05:05:58.939851 2026] [security2:error] [pid 1017536:tid 1017792] [client 40.83.93.50:3162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/Njima.php"] [unique_id "apK9FiJcY4fy7tP-rU3y7wAAApI"]
[Sat Aug 29 05:05:58.943101 2026] [security2:error] [pid 1018003:tid 1018187] [client 20.48.250.41:62539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/fresh3.php"] [unique_id "apK9FjAh5Y1i2tUxg4HskAAABdw"]
[Sat Aug 29 05:05:58.944701 2026] [security2:error] [pid 1018003:tid 1018254] [client 68.155.159.216:12287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-includes/customize/index.php"] [unique_id "apK9FjAh5Y1i2tUxg4HskQAABh4"]
[Sat Aug 29 05:05:58.952560 2026] [security2:error] [pid 1018003:tid 1018265] [client 93.123.109.228:41230] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/public-api/.env"] [unique_id "apK9FjAh5Y1i2tUxg4HskwAABik"]
[Sat Aug 29 05:05:58.954187 2026] [security2:error] [pid 1018003:tid 1018233] [client 52.139.37.240:8461] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "mail.mykaratetutor.com"] [uri "/c99.php"] [unique_id "apK9FjAh5Y1i2tUxg4HslAAABgk"]
[Sat Aug 29 05:05:58.960048 2026] [security2:error] [pid 1017536:tid 1017783] [client 20.48.251.3:61679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/cxc.php"] [unique_id "apK9FiJcY4fy7tP-rU3y9AAAAok"]
[Sat Aug 29 05:05:58.988708 2026] [security2:error] [pid 1017536:tid 1017714] [client 158.23.147.79:63830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/index/function.php"] [unique_id "apK9FiJcY4fy7tP-rU3y9gAAAkQ"]
[Sat Aug 29 05:05:58.989880 2026] [security2:error] [pid 1017536:tid 1017773] [client 93.123.109.228:41332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/public/phpinfo.php"] [unique_id "apK9FiJcY4fy7tP-rU3y9wAAAn8"]
[Sat Aug 29 05:05:58.995116 2026] [security2:error] [pid 1017536:tid 1017784] [client 93.123.109.228:41328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/public_html/.env"] [unique_id "apK9FiJcY4fy7tP-rU3y-QAAAoo"]
[Sat Aug 29 05:05:58.998835 2026] [security2:error] [pid 1018003:tid 1018182] [client 93.123.109.228:41256] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/qa/.env"] [unique_id "apK9FjAh5Y1i2tUxg4HslQAABdc"]
[Sat Aug 29 05:05:59.045566 2026] [security2:error] [pid 1017536:tid 1017723] [client 168.107.94.195:60936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9FyJcY4fy7tP-rU3y_wAAAk0"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:59.053276 2026] [security2:error] [pid 1017536:tid 1017768] [client 20.196.209.81:18689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-content/index.php"] [unique_id "apK9FyJcY4fy7tP-rU3zAAAAAno"]
[Sat Aug 29 05:05:59.065896 2026] [security2:error] [pid 1018003:tid 1018277] [client 197.219.150.206:58018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK9FzAh5Y1i2tUxg4HsmwAABjU"]
[Sat Aug 29 05:05:59.066027 2026] [security2:error] [pid 1018003:tid 1018277] [client 197.219.150.206:58018] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK9FzAh5Y1i2tUxg4HsmwAABjU"]
[Sat Aug 29 05:05:59.072255 2026] [security2:error] [pid 1017536:tid 1017782] [client 4.232.148.111:8425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/wp-includes/index.php"] [unique_id "apK9FyJcY4fy7tP-rU3zAQAAAog"]
[Sat Aug 29 05:05:59.089609 2026] [security2:error] [pid 1017536:tid 1017690] [client 20.48.251.3:62096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/oiko6u.php"] [unique_id "apK9FyJcY4fy7tP-rU3zBAAAAiw"]
[Sat Aug 29 05:05:59.099312 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.48.251.3:14328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/fff.php"] [unique_id "apK9FyJcY4fy7tP-rU3zCAAAAlY"]
[Sat Aug 29 05:05:59.100865 2026] [security2:error] [pid 1018003:tid 1018259] [client 20.151.200.44:65492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/tanjiro.php"] [unique_id "apK9FzAh5Y1i2tUxg4HsnwAABiM"]
[Sat Aug 29 05:05:59.104768 2026] [security2:error] [pid 1018003:tid 1018164] [client 74.248.24.12:30411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "apK9FzAh5Y1i2tUxg4HsoQAABcU"]
[Sat Aug 29 05:05:59.106971 2026] [security2:error] [pid 1018003:tid 1018251] [client 158.23.147.79:48353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-includes/css/index.php"] [unique_id "apK9FzAh5Y1i2tUxg4HsogAABhs"]
[Sat Aug 29 05:05:59.109164 2026] [security2:error] [pid 1017536:tid 1017713] [client 20.48.250.41:62519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/bgymj.php"] [unique_id "apK9FyJcY4fy7tP-rU3zCwAAAkM"]
[Sat Aug 29 05:05:59.110428 2026] [security2:error] [pid 1017536:tid 1017730] [client 185.104.184.230:44890] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.nhu.jca.mybluehost.me"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "apK9FyJcY4fy7tP-rU3zDAAAAlQ"]
[Sat Aug 29 05:05:59.134528 2026] [security2:error] [pid 1017536:tid 1017780] [client 20.104.49.130:60785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/133.php"] [unique_id "apK9FyJcY4fy7tP-rU3zDQAAAoY"]
[Sat Aug 29 05:05:59.141071 2026] [security2:error] [pid 1018003:tid 1018220] [client 20.104.49.130:56192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.danesquality.com"] [uri "/init.php"] [unique_id "apK9FzAh5Y1i2tUxg4HspAAABf0"]
[Sat Aug 29 05:05:59.144719 2026] [security2:error] [pid 1018003:tid 1018250] [client 4.205.62.107:8965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/fraro.php"] [unique_id "apK9FzAh5Y1i2tUxg4HspQAABho"]
[Sat Aug 29 05:05:59.161857 2026] [security2:error] [pid 1017536:tid 1017776] [client 52.139.37.240:8637] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "mail.mykaratetutor.com"] [uri "/c99.php"] [unique_id "apK9FyJcY4fy7tP-rU3zEQAAAoI"]
[Sat Aug 29 05:05:59.168162 2026] [security2:error] [pid 1017536:tid 1017755] [client 34.7.216.49:49246] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "webdisk.bridgewaycentretrust.org"] [uri "/secret.json"] [unique_id "apK9FyJcY4fy7tP-rU3zEwAAAm0"]
[Sat Aug 29 05:05:59.192432 2026] [security2:error] [pid 1017536:tid 1017785] [client 159.69.158.189:61306] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "drjrae.com"] [uri "/"] [unique_id "apK9FyJcY4fy7tP-rU3zGQAAAos"], referer: http://drjrae.com
[Sat Aug 29 05:05:59.198063 2026] [security2:error] [pid 1018003:tid 1018199] [client 34.7.216.49:49310] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "webdisk.bridgewaycentretrust.org"] [uri "/service_account.json"] [unique_id "apK9FzAh5Y1i2tUxg4HsqAAABeg"]
[Sat Aug 29 05:05:59.211338 2026] [security2:error] [pid 1018003:tid 1018270] [client 158.158.54.35:12242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/123.php"] [unique_id "apK9FzAh5Y1i2tUxg4HsrAAABi4"]
[Sat Aug 29 05:05:59.219823 2026] [security2:error] [pid 1017536:tid 1017729] [client 20.48.251.3:62136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/fraro.php"] [unique_id "apK9FyJcY4fy7tP-rU3zIAAAAlM"]
[Sat Aug 29 05:05:59.278955 2026] [core:error] [pid 1017536:tid 1017684] [client 34.97.179.136:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:59.278974 2026] [core:error] [pid 1017536:tid 1017684] [client 34.97.179.136:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:59.279470 2026] [core:error] [pid 1018003:tid 1018244] [client 34.97.179.136:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:59.279485 2026] [core:error] [pid 1018003:tid 1018244] [client 34.97.179.136:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:59.279538 2026] [core:error] [pid 1018003:tid 1018267] [client 34.97.179.136:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:59.279541 2026] [core:error] [pid 1017536:tid 1017784] [client 34.97.179.136:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:59.279548 2026] [core:error] [pid 1018003:tid 1018267] [client 34.97.179.136:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:59.279555 2026] [core:error] [pid 1017536:tid 1017784] [client 34.97.179.136:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:59.280067 2026] [core:error] [pid 1017536:tid 1017789] [client 34.97.179.136:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:59.280074 2026] [core:error] [pid 1017536:tid 1017789] [client 34.97.179.136:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:59.280217 2026] [core:error] [pid 1018003:tid 1018166] [client 34.97.179.136:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:59.280232 2026] [core:error] [pid 1018003:tid 1018166] [client 34.97.179.136:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:59.282214 2026] [core:error] [pid 1018003:tid 1018155] [client 34.97.179.136:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:59.282229 2026] [core:error] [pid 1018003:tid 1018155] [client 34.97.179.136:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:59.282410 2026] [core:error] [pid 1018003:tid 1018263] [client 34.97.179.136:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:59.282428 2026] [core:error] [pid 1018003:tid 1018263] [client 34.97.179.136:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:59.283033 2026] [core:error] [pid 1018003:tid 1018222] [client 34.97.179.136:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:59.283041 2026] [core:error] [pid 1018003:tid 1018222] [client 34.97.179.136:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:59.284340 2026] [core:error] [pid 1018003:tid 1018278] [client 34.97.179.136:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:59.284366 2026] [core:error] [pid 1018003:tid 1018278] [client 34.97.179.136:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:59.285471 2026] [core:error] [pid 1017536:tid 1017790] [client 34.97.179.136:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:59.285488 2026] [core:error] [pid 1017536:tid 1017790] [client 34.97.179.136:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:59.288789 2026] [core:error] [pid 1017536:tid 1017717] [client 34.97.179.136:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:59.288802 2026] [core:error] [pid 1017536:tid 1017717] [client 34.97.179.136:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:59.294983 2026] [security2:error] [pid 1017536:tid 1017732] [client 4.205.62.107:64976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/file59.php"] [unique_id "apK9FyJcY4fy7tP-rU3zOQAAAlY"]
[Sat Aug 29 05:05:59.301331 2026] [security2:error] [pid 1017536:tid 1017743] [client 20.48.250.41:60674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/ws69.php"] [unique_id "apK9FyJcY4fy7tP-rU3zOgAAAmE"]
[Sat Aug 29 05:05:59.349629 2026] [security2:error] [pid 1017536:tid 1017669] [client 20.48.251.3:62113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/thui.php"] [unique_id "apK9FyJcY4fy7tP-rU3zPQAAAhc"]
[Sat Aug 29 05:05:59.355095 2026] [security2:error] [pid 1018003:tid 1018181] [client 20.48.251.3:33322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/autogooey.php"] [unique_id "apK9FzAh5Y1i2tUxg4HswwAABdY"]
[Sat Aug 29 05:05:59.355093 2026] [security2:error] [pid 1018003:tid 1018177] [client 40.83.93.50:5914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-admin/panel.php"] [unique_id "apK9FzAh5Y1i2tUxg4HswgAABdI"]
[Sat Aug 29 05:05:59.381927 2026] [security2:error] [pid 1017536:tid 1017786] [client 158.23.147.79:50113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK9FyJcY4fy7tP-rU3zPwAAAow"]
[Sat Aug 29 05:05:59.382733 2026] [security2:error] [pid 1017536:tid 1017681] [client 20.104.49.130:57626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/1xmomo.php"] [unique_id "apK9FyJcY4fy7tP-rU3zQAAAAiM"]
[Sat Aug 29 05:05:59.395879 2026] [security2:error] [pid 1017536:tid 1017746] [client 158.23.147.79:32723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK9FyJcY4fy7tP-rU3zQgAAAmQ"]
[Sat Aug 29 05:05:59.411485 2026] [security2:error] [pid 1018003:tid 1018235] [client 93.123.109.228:41348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/s3/.env.bak"] [unique_id "apK9FzAh5Y1i2tUxg4HsxwAABgs"]
[Sat Aug 29 05:05:59.416211 2026] [security2:error] [pid 1017536:tid 1017772] [client 158.23.147.79:30672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-content/cong.php"] [unique_id "apK9FyJcY4fy7tP-rU3zRAAAAn4"]
[Sat Aug 29 05:05:59.417850 2026] [security2:error] [pid 1017536:tid 1017727] [client 185.104.184.230:44898] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.nhu.jca.mybluehost.me"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "apK9FyJcY4fy7tP-rU3zRQAAAlE"]
[Sat Aug 29 05:05:59.426366 2026] [security2:error] [pid 1018003:tid 1018262] [client 168.107.94.195:61318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9FzAh5Y1i2tUxg4HsyAAABiY"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:59.435643 2026] [security2:error] [pid 1018003:tid 1018183] [client 20.48.250.41:62558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/ccs.php"] [unique_id "apK9FzAh5Y1i2tUxg4HsygAABdg"]
[Sat Aug 29 05:05:59.443762 2026] [security2:error] [pid 1018003:tid 1018196] [client 40.83.93.50:7780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/configs.php"] [unique_id "apK9FzAh5Y1i2tUxg4HsywAABeU"]
[Sat Aug 29 05:05:59.445494 2026] [security2:error] [pid 1018003:tid 1018192] [client 20.104.49.130:30045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/xwpg.php"] [unique_id "apK9FzAh5Y1i2tUxg4HszQAABeE"]
[Sat Aug 29 05:05:59.452832 2026] [security2:error] [pid 1018003:tid 1018187] [client 20.151.200.44:64937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/Rk41.php"] [unique_id "apK9FzAh5Y1i2tUxg4HszwAABdw"]
[Sat Aug 29 05:05:59.455656 2026] [security2:error] [pid 1017536:tid 1017784] [client 158.23.147.79:25567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK9FyJcY4fy7tP-rU3zRgAAAoo"]
[Sat Aug 29 05:05:59.464994 2026] [security2:error] [pid 1017536:tid 1017707] [client 35.198.240.194:16816] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/id_rsa"] [unique_id "apK9FyJcY4fy7tP-rU3zSwAAAj0"]
[Sat Aug 29 05:05:59.467922 2026] [security2:error] [pid 1017536:tid 1017707] [client 35.198.240.194:16816] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "mail.omni-staffing.com"] [uri "/id_rsa"] [unique_id "apK9FyJcY4fy7tP-rU3zSwAAAj0"]
[Sat Aug 29 05:05:59.470104 2026] [security2:error] [pid 1017536:tid 1017679] [client 35.198.240.194:16860] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/key.pem"] [unique_id "apK9FyJcY4fy7tP-rU3zTQAAAiE"]
[Sat Aug 29 05:05:59.472283 2026] [security2:error] [pid 1018003:tid 1018233] [client 35.198.240.194:16912] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "mail.omni-staffing.com"] [uri "/wp-config.php.old"] [unique_id "apK9FzAh5Y1i2tUxg4Hs1AAABgk"]
[Sat Aug 29 05:05:59.472733 2026] [security2:error] [pid 1017536:tid 1017672] [client 35.198.240.194:16846] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/id_dsa"] [unique_id "apK9FyJcY4fy7tP-rU3zTwAAAho"]
[Sat Aug 29 05:05:59.472926 2026] [security2:error] [pid 1018003:tid 1018209] [client 35.198.240.194:16906] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "mail.omni-staffing.com"] [uri "/wp-config.php.bak"] [unique_id "apK9FzAh5Y1i2tUxg4Hs1gAABfI"]
[Sat Aug 29 05:05:59.475910 2026] [security2:error] [pid 1018003:tid 1018254] [client 35.198.240.194:16876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/privatekey.key"] [unique_id "apK9FzAh5Y1i2tUxg4Hs0AAABh4"]
[Sat Aug 29 05:05:59.478919 2026] [security2:error] [pid 1017536:tid 1017737] [client 20.48.251.3:61636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/lala.php"] [unique_id "apK9FyJcY4fy7tP-rU3zUwAAAls"]
[Sat Aug 29 05:05:59.479183 2026] [security2:error] [pid 1018003:tid 1018182] [client 35.198.240.194:16914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 194.240.198.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.omni-staffing.com"] [uri "/config.php"] [unique_id "apK9FzAh5Y1i2tUxg4Hs2QAABdc"]
[Sat Aug 29 05:05:59.480922 2026] [security2:error] [pid 1017536:tid 1017753] [client 20.196.209.81:17457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-content/install.php"] [unique_id "apK9FyJcY4fy7tP-rU3zVAAAAms"]
[Sat Aug 29 05:05:59.482467 2026] [security2:error] [pid 1018003:tid 1018274] [client 35.198.240.194:16902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 194.240.198.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.omni-staffing.com"] [uri "/wp-config.php"] [unique_id "apK9FzAh5Y1i2tUxg4Hs0QAABjI"]
[Sat Aug 29 05:05:59.487230 2026] [security2:error] [pid 1018003:tid 1018169] [client 35.198.240.194:16920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 194.240.198.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.omni-staffing.com"] [uri "/config.php.bak"] [unique_id "apK9FzAh5Y1i2tUxg4Hs2gAABco"]
[Sat Aug 29 05:05:59.518743 2026] [security2:error] [pid 1018003:tid 1018277] [client 68.155.159.216:51447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/install.php"] [unique_id "apK9FzAh5Y1i2tUxg4Hs3AAABjU"]
[Sat Aug 29 05:05:59.528417 2026] [security2:error] [pid 1017536:tid 1017726] [client 4.205.62.107:22292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/cloud.php"] [unique_id "apK9FyJcY4fy7tP-rU3zVQAAAlA"]
[Sat Aug 29 05:05:59.530738 2026] [security2:error] [pid 1018003:tid 1018207] [client 93.123.109.228:41108] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/server/api/.env"] [unique_id "apK9FzAh5Y1i2tUxg4Hs4AAABfA"]
[Sat Aug 29 05:05:59.548870 2026] [security2:error] [pid 1017536:tid 1017678] [client 68.155.159.216:33661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK9FyJcY4fy7tP-rU3zYQAAAiA"]
[Sat Aug 29 05:05:59.550899 2026] [security2:error] [pid 1017536:tid 1017690] [client 93.123.109.228:41364] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/server/.env"] [unique_id "apK9FyJcY4fy7tP-rU3zYgAAAiw"]
[Sat Aug 29 05:05:59.554839 2026] [security2:error] [pid 1018003:tid 1018220] [client 93.123.109.228:41122] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/server/backend/.env"] [unique_id "apK9FzAh5Y1i2tUxg4Hs5AAABf0"]
[Sat Aug 29 05:05:59.554964 2026] [security2:error] [pid 1017536:tid 1017776] [client 4.232.148.111:33863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/wp-admin/a.php"] [unique_id "apK9FyJcY4fy7tP-rU3zYwAAAoI"]
[Sat Aug 29 05:05:59.570526 2026] [security2:error] [pid 1017536:tid 1017705] [client 4.205.62.107:65506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/X57.php"] [unique_id "apK9FyJcY4fy7tP-rU3zZgAAAjs"]
[Sat Aug 29 05:05:59.573860 2026] [security2:error] [pid 1018003:tid 1018221] [client 20.48.250.41:59385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/mar.php"] [unique_id "apK9FzAh5Y1i2tUxg4Hs5QAABf4"]
[Sat Aug 29 05:05:59.574524 2026] [security2:error] [pid 1018003:tid 1018159] [client 4.205.62.107:22209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/bb.php"] [unique_id "apK9FzAh5Y1i2tUxg4Hs5gAABcA"]
[Sat Aug 29 05:05:59.578125 2026] [security2:error] [pid 1017536:tid 1017713] [client 68.155.159.216:16206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK9FyJcY4fy7tP-rU3zZwAAAkM"]
[Sat Aug 29 05:05:59.593948 2026] [security2:error] [pid 1017536:tid 1017742] [client 4.205.62.107:2887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/application.config.php"] [unique_id "apK9FyJcY4fy7tP-rU3zaQAAAmA"]
[Sat Aug 29 05:05:59.598081 2026] [security2:error] [pid 1017536:tid 1017544] [remote 34.138.144.127:57736] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "old.theenprogroup.com"] [uri "/wp-config.old"] [unique_id "apK9FyJcY4fy7tP-rU3zagACVAc"]
[Sat Aug 29 05:05:59.605702 2026] [security2:error] [pid 1018003:tid 1018246] [client 20.48.251.3:62102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/public/bnn_.php.php"] [unique_id "apK9FzAh5Y1i2tUxg4Hs6QAABhY"]
[Sat Aug 29 05:05:59.622549 2026] [security2:error] [pid 1018003:tid 1018264] [client 60.243.207.176:60663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK9FzAh5Y1i2tUxg4Hs7QAABig"]
[Sat Aug 29 05:05:59.622652 2026] [security2:error] [pid 1018003:tid 1018264] [client 60.243.207.176:60663] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK9FzAh5Y1i2tUxg4Hs7QAABig"]
[Sat Aug 29 05:05:59.635898 2026] [core:error] [pid 1017536:tid 1017781] [client 74.248.24.12:15220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:59.635916 2026] [core:error] [pid 1017536:tid 1017781] [client 74.248.24.12:15220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:05:59.635996 2026] [security2:error] [pid 1017536:tid 1017764] [client 158.23.147.79:30690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK9FyJcY4fy7tP-rU3zbgAAAnY"]
[Sat Aug 29 05:05:59.648566 2026] [security2:error] [pid 1018003:tid 1018150] [client 159.69.158.189:61316] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "drjrae.com"] [uri "/index.html"] [unique_id "apK9FzAh5Y1i2tUxg4Hs7wAABbc"], referer: http://drjrae.com
[Sat Aug 29 05:05:59.653734 2026] [security2:error] [pid 1017536:tid 1017650] [remote 34.138.144.127:57736] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "old.theenprogroup.com"] [uri "/wp-config.php.swp"] [unique_id "apK9FyJcY4fy7tP-rU3zcgACbXE"]
[Sat Aug 29 05:05:59.654467 2026] [security2:error] [pid 1017536:tid 1017662] [remote 34.138.144.127:57736] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "old.theenprogroup.com"] [uri "/wp-config.php~"] [unique_id "apK9FyJcY4fy7tP-rU3zcwACbX0"]
[Sat Aug 29 05:05:59.667114 2026] [security2:error] [pid 1017536:tid 1017670] [client 68.155.159.216:64254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.gavirestaurant.com"] [uri "/log-mama/function.php"] [unique_id "apK9FyJcY4fy7tP-rU3zeAAAAhg"]
[Sat Aug 29 05:05:59.667590 2026] [security2:error] [pid 1018003:tid 1018215] [client 158.158.54.35:6138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/yanz.php"] [unique_id "apK9FzAh5Y1i2tUxg4Hs8AAABfg"]
[Sat Aug 29 05:05:59.680156 2026] [security2:error] [pid 1018003:tid 1018244] [client 93.123.109.228:41108] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/service/.env"] [unique_id "apK9FzAh5Y1i2tUxg4Hs8QAABhQ"]
[Sat Aug 29 05:05:59.684089 2026] [security2:error] [pid 1017536:tid 1017761] [client 20.151.200.44:65476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9FyJcY4fy7tP-rU3zfAAAAnM"]
[Sat Aug 29 05:05:59.694743 2026] [security2:error] [pid 1017536:tid 1017777] [client 93.123.109.228:41504] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/services/.env"] [unique_id "apK9FyJcY4fy7tP-rU3zfQAAAoM"]
[Sat Aug 29 05:05:59.705511 2026] [security2:error] [pid 1017536:tid 1017683] [client 20.48.250.41:62469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/ccu.php"] [unique_id "apK9FyJcY4fy7tP-rU3zgAAAAiU"]
[Sat Aug 29 05:05:59.712561 2026] [security2:error] [pid 1017536:tid 1017686] [client 68.155.159.216:50268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-admin.php"] [unique_id "apK9FyJcY4fy7tP-rU3zgQAAAig"]
[Sat Aug 29 05:05:59.713955 2026] [security2:error] [pid 1018003:tid 1018263] [client 185.104.184.230:44904] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.nhu.jca.mybluehost.me"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "apK9FzAh5Y1i2tUxg4Hs9AAABic"]
[Sat Aug 29 05:05:59.731159 2026] [security2:error] [pid 1017536:tid 1017721] [client 20.48.251.3:62143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/wsws.php"] [unique_id "apK9FyJcY4fy7tP-rU3zhAAAAks"]
[Sat Aug 29 05:05:59.732047 2026] [security2:error] [pid 1017536:tid 1017773] [client 158.23.147.79:35790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9FyJcY4fy7tP-rU3zhQAAAn8"]
[Sat Aug 29 05:05:59.789565 2026] [security2:error] [pid 1017536:tid 1017723] [client 20.52.41.200:1746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/.trash7206/index.php"] [unique_id "apK9FyJcY4fy7tP-rU3zhwAAAk0"]
[Sat Aug 29 05:05:59.806968 2026] [security2:error] [pid 1017536:tid 1017706] [client 168.107.94.195:61667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9FyJcY4fy7tP-rU3ziQAAAjw"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:05:59.821231 2026] [security2:error] [pid 1018003:tid 1018205] [client 93.123.109.228:41374] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/shop/.env"] [unique_id "apK9FzAh5Y1i2tUxg4Hs-AAABe4"]
[Sat Aug 29 05:05:59.822897 2026] [security2:error] [pid 1017536:tid 1017698] [client 40.83.93.50:5942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-admin/pk.php"] [unique_id "apK9FyJcY4fy7tP-rU3ziwAAAjQ"]
[Sat Aug 29 05:05:59.822951 2026] [security2:error] [pid 1017536:tid 1017708] [client 93.123.109.228:41328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/shared/.env"] [unique_id "apK9FyJcY4fy7tP-rU3zigAAAj4"]
[Sat Aug 29 05:05:59.826818 2026] [security2:error] [pid 1017536:tid 1017737] [client 20.151.200.44:64930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/7logs.php"] [unique_id "apK9FyJcY4fy7tP-rU3zjAAAAls"]
[Sat Aug 29 05:05:59.843763 2026] [security2:error] [pid 1018003:tid 1018239] [client 20.197.61.180:5858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-admin/user/f35.php"] [unique_id "apK9FzAh5Y1i2tUxg4Hs-gAABg8"]
[Sat Aug 29 05:05:59.850882 2026] [security2:error] [pid 1017536:tid 1017745] [client 20.48.250.41:60745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/ak.php"] [unique_id "apK9FyJcY4fy7tP-rU3zjgAAAmM"]
[Sat Aug 29 05:05:59.855379 2026] [security2:error] [pid 1017536:tid 1017775] [client 20.48.251.3:13971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/wp-class.php"] [unique_id "apK9FyJcY4fy7tP-rU3zjwAAAoE"]
[Sat Aug 29 05:05:59.859138 2026] [security2:error] [pid 1017536:tid 1017792] [client 34.143.179.161:45076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 161.179.143.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harnessenergyusa.com"] [uri "/pi.php"] [unique_id "apK9FyJcY4fy7tP-rU3zkQAAApI"]
[Sat Aug 29 05:05:59.861113 2026] [security2:error] [pid 1017536:tid 1017715] [client 20.48.251.3:61658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/localconf.php"] [unique_id "apK9FyJcY4fy7tP-rU3zkgAAAkU"]
[Sat Aug 29 05:05:59.870757 2026] [security2:error] [pid 1017536:tid 1017729] [client 34.143.179.161:45060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 161.179.143.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harnessenergyusa.com"] [uri "/i.php"] [unique_id "apK9FyJcY4fy7tP-rU3zlgAAAlM"]
[Sat Aug 29 05:05:59.877881 2026] [security2:error] [pid 1017536:tid 1017734] [client 93.123.109.228:41298] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/src/.env"] [unique_id "apK9FyJcY4fy7tP-rU3zmQAAAlg"]
[Sat Aug 29 05:05:59.890251 2026] [security2:error] [pid 1017536:tid 1017760] [client 4.205.62.107:21864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9FyJcY4fy7tP-rU3zoQAAAnI"]
[Sat Aug 29 05:05:59.900689 2026] [security2:error] [pid 1018003:tid 1018153] [client 34.143.179.161:45164] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cpcontacts.harnessenergyusa.com"] [uri "/.bash_history"] [unique_id "apK9FzAh5Y1i2tUxg4HtAgAABbo"]
[Sat Aug 29 05:05:59.926131 2026] [security2:error] [pid 1017536:tid 1017685] [client 40.83.93.50:8013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/disagraeed.php"] [unique_id "apK9FyJcY4fy7tP-rU3zpQAAAic"]
[Sat Aug 29 05:05:59.970959 2026] [security2:error] [pid 1017536:tid 1017750] [client 4.205.62.107:55982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/cxc.php"] [unique_id "apK9FyJcY4fy7tP-rU3zqQAAAmg"]
[Sat Aug 29 05:05:59.982876 2026] [security2:error] [pid 1017536:tid 1017724] [client 68.155.159.216:51485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-includes/js/index.php"] [unique_id "apK9FyJcY4fy7tP-rU3zqwAAAk4"]
[Sat Aug 29 05:05:59.991560 2026] [security2:error] [pid 1018003:tid 1018191] [client 20.48.251.3:61659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/bengi.php"] [unique_id "apK9FzAh5Y1i2tUxg4HtCwAABeA"]
[Sat Aug 29 05:05:59.999795 2026] [security2:error] [pid 1018003:tid 1018216] [client 84.75.155.103:41866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.155.75.84.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/wordpress/index.php"] [unique_id "apK9FzAh5Y1i2tUxg4HtDQAABfk"]
[Sat Aug 29 05:06:00.008045 2026] [security2:error] [pid 1017536:tid 1017780] [client 68.155.159.216:56944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK9GCJcY4fy7tP-rU3zrAAAAoY"]
[Sat Aug 29 05:06:00.015948 2026] [security2:error] [pid 1017536:tid 1017748] [client 20.196.209.81:18694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK9GCJcY4fy7tP-rU3zrQAAAmY"]
[Sat Aug 29 05:06:00.016978 2026] [security2:error] [pid 1017536:tid 1017781] [client 20.48.250.41:60746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/lib.php"] [unique_id "apK9GCJcY4fy7tP-rU3zrgAAAoc"]
[Sat Aug 29 05:06:00.020688 2026] [security2:error] [pid 1017536:tid 1017691] [client 185.104.184.230:44920] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.nhu.jca.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "apK9GCJcY4fy7tP-rU3zrwAAAi0"]
[Sat Aug 29 05:06:00.041210 2026] [security2:error] [pid 1017536:tid 1017670] [client 158.23.147.79:24520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-mail.php"] [unique_id "apK9GCJcY4fy7tP-rU3zsAAAAhg"]
[Sat Aug 29 05:06:00.043212 2026] [security2:error] [pid 1017536:tid 1017744] [client 93.123.109.228:41380] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/srv/.env"] [unique_id "apK9GCJcY4fy7tP-rU3zsQAAAmI"]
[Sat Aug 29 05:06:00.045641 2026] [security2:error] [pid 1018003:tid 1018167] [client 93.123.109.228:41108] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/stage/.env"] [unique_id "apK9GDAh5Y1i2tUxg4HtDgAABcg"]
[Sat Aug 29 05:06:00.055271 2026] [security2:error] [pid 1017536:tid 1017683] [client 93.123.109.228:41116] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/staging/.env"] [unique_id "apK9GCJcY4fy7tP-rU3ztAAAAiU"]
[Sat Aug 29 05:06:00.121889 2026] [security2:error] [pid 1017536:tid 1017669] [client 20.48.251.3:62133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/i.php"] [unique_id "apK9GCJcY4fy7tP-rU3zuwAAAhc"]
[Sat Aug 29 05:06:00.124300 2026] [security2:error] [pid 1017536:tid 1017696] [client 158.158.54.35:12227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/autoload_classmap.php"] [unique_id "apK9GCJcY4fy7tP-rU3zvAAAAjI"]
[Sat Aug 29 05:06:00.158334 2026] [security2:error] [pid 1017536:tid 1017708] [client 68.155.159.216:18292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/chosen.php"] [unique_id "apK9GCJcY4fy7tP-rU3zwQAAAj4"]
[Sat Aug 29 05:06:00.165512 2026] [security2:error] [pid 1018003:tid 1018192] [client 68.155.159.216:14305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/images/index.php"] [unique_id "apK9GDAh5Y1i2tUxg4HtFgAABeE"]
[Sat Aug 29 05:06:00.169234 2026] [security2:error] [pid 1017536:tid 1017698] [client 20.104.49.130:30022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/kerang.php"] [unique_id "apK9GCJcY4fy7tP-rU3zwgAAAjQ"]
[Sat Aug 29 05:06:00.174776 2026] [security2:error] [pid 1018003:tid 1018187] [client 93.123.109.228:41374] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/stripe/.env"] [unique_id "apK9GDAh5Y1i2tUxg4HtFwAABdw"]
[Sat Aug 29 05:06:00.179625 2026] [security2:error] [pid 1018003:tid 1018233] [client 93.123.109.228:41478] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/stg/.env"] [unique_id "apK9GDAh5Y1i2tUxg4HtGQAABgk"]
[Sat Aug 29 05:06:00.191048 2026] [core:error] [pid 1017536:tid 1017789] [client 74.248.24.12:41008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:00.191294 2026] [core:error] [pid 1017536:tid 1017789] [client 74.248.24.12:41008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:00.195744 2026] [security2:error] [pid 1017536:tid 1017760] [client 168.107.94.195:61994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9GCJcY4fy7tP-rU3zxwAAAnI"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:00.206768 2026] [security2:error] [pid 1017536:tid 1017678] [client 20.48.250.41:60681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/wp-style.php"] [unique_id "apK9GCJcY4fy7tP-rU3zyAAAAiA"]
[Sat Aug 29 05:06:00.213974 2026] [security2:error] [pid 1018003:tid 1018165] [client 158.23.147.79:48299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK9GDAh5Y1i2tUxg4HtGwAABcY"]
[Sat Aug 29 05:06:00.219120 2026] [security2:error] [pid 1017536:tid 1017775] [client 66.248.203.2:61872] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cheerfulmonk.com"] [uri "/2023/07/13/"] [unique_id "apK9GCJcY4fy7tP-rU3zywAAAoE"]
[Sat Aug 29 05:06:00.220632 2026] [security2:error] [pid 1017536:tid 1017772] [client 4.232.148.111:34909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK9GCJcY4fy7tP-rU3zzQAAAn4"]
[Sat Aug 29 05:06:00.221741 2026] [security2:error] [pid 1017536:tid 1017747] [client 20.151.200.44:64843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/sf.php"] [unique_id "apK9GCJcY4fy7tP-rU3zzgAAAmU"]
[Sat Aug 29 05:06:00.252639 2026] [security2:error] [pid 1018003:tid 1018172] [client 20.48.251.3:61687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/guk.php"] [unique_id "apK9GDAh5Y1i2tUxg4HtHQAABc0"]
[Sat Aug 29 05:06:00.282964 2026] [security2:error] [pid 1018003:tid 1018195] [client 4.205.62.107:53325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/lm15.php"] [unique_id "apK9GDAh5Y1i2tUxg4HtIAAABeQ"]
[Sat Aug 29 05:06:00.287894 2026] [security2:error] [pid 1017536:tid 1017707] [client 40.83.93.50:24065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-admin/plugin-install.php"] [unique_id "apK9GCJcY4fy7tP-rU3z0gAAAj0"]
[Sat Aug 29 05:06:00.293094 2026] [security2:error] [pid 1017536:tid 1017754] [client 20.52.41.200:1221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wk/index.php"] [unique_id "apK9GCJcY4fy7tP-rU3z0wAAAmw"]
[Sat Aug 29 05:06:00.297781 2026] [security2:error] [pid 1018003:tid 1018277] [client 114.119.136.113:29789] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.classiclightingusa.com"] [uri "/catalog/product_info.php/cPath/41/products_id/1020/osCsid/b0156b149dcbdab5f810a839c8938f61"] [unique_id "apK9GDAh5Y1i2tUxg4HtIQAABjU"], referer: http://www.classiclightingusa.com/catalog/index.php/cPath/41/osCsid/b0156b149dcbdab5f810a839c8938f61
[Sat Aug 29 05:06:00.308348 2026] [security2:error] [pid 1017536:tid 1017716] [client 93.123.109.228:41298] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/terraform.tfstate.backup"] [unique_id "apK9GCJcY4fy7tP-rU3z1QAAAkY"]
[Sat Aug 29 05:06:00.314782 2026] [security2:error] [pid 1017536:tid 1017730] [client 185.104.184.230:44932] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.nhu.jca.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "apK9GCJcY4fy7tP-rU3z1gAAAlQ"]
[Sat Aug 29 05:06:00.316659 2026] [security2:error] [pid 1018003:tid 1018259] [client 20.48.250.41:65094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9GDAh5Y1i2tUxg4HtIgAABiM"]
[Sat Aug 29 05:06:00.320132 2026] [security2:error] [pid 1017536:tid 1017750] [client 93.123.109.228:41314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/test.php"] [unique_id "apK9GCJcY4fy7tP-rU3z1wAAAmg"]
[Sat Aug 29 05:06:00.324345 2026] [security2:error] [pid 1018003:tid 1018220] [client 93.123.109.228:41230] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/test/.env"] [unique_id "apK9GDAh5Y1i2tUxg4HtJAAABf0"]
[Sat Aug 29 05:06:00.331565 2026] [security2:error] [pid 1017536:tid 1017724] [client 20.48.251.3:14324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/database.php"] [unique_id "apK9GCJcY4fy7tP-rU3z2QAAAk4"]
[Sat Aug 29 05:06:00.344415 2026] [security2:error] [pid 1017536:tid 1017783] [client 103.240.76.112:42816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK9GCJcY4fy7tP-rU3z2gAAAok"]
[Sat Aug 29 05:06:00.344574 2026] [security2:error] [pid 1017536:tid 1017783] [client 103.240.76.112:42816] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK9GCJcY4fy7tP-rU3z2gAAAok"]
[Sat Aug 29 05:06:00.351591 2026] [security2:error] [pid 1018003:tid 1018275] [client 93.123.109.228:41330] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/user/.env"] [unique_id "apK9GDAh5Y1i2tUxg4HtKQAABjM"]
[Sat Aug 29 05:06:00.378080 2026] [security2:error] [pid 1018003:tid 1018256] [client 93.123.109.228:41108] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/v1/.env"] [unique_id "apK9GDAh5Y1i2tUxg4HtKgAABiA"]
[Sat Aug 29 05:06:00.384105 2026] [security2:error] [pid 1017536:tid 1017765] [client 20.48.251.3:62091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/config_dev.php"] [unique_id "apK9GCJcY4fy7tP-rU3z3QAAAnc"]
[Sat Aug 29 05:06:00.406687 2026] [security2:error] [pid 1018003:tid 1018227] [client 20.48.250.41:62538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/browse.php"] [unique_id "apK9GDAh5Y1i2tUxg4HtKwAABgQ"]
[Sat Aug 29 05:06:00.413371 2026] [security2:error] [pid 1017536:tid 1017776] [client 20.196.209.81:25020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-content/languages/chosen.php"] [unique_id "apK9GCJcY4fy7tP-rU3z3wAAAoI"]
[Sat Aug 29 05:06:00.417095 2026] [security2:error] [pid 1017536:tid 1017681] [client 93.123.109.228:41116] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/v2/.env"] [unique_id "apK9GCJcY4fy7tP-rU3z4wAAAiM"]
[Sat Aug 29 05:06:00.430465 2026] [security2:error] [pid 1018003:tid 1018175] [client 93.123.109.228:41122] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/v3/.env"] [unique_id "apK9GDAh5Y1i2tUxg4HtLAAABdA"]
[Sat Aug 29 05:06:00.430934 2026] [security2:error] [pid 1018003:tid 1018264] [client 4.205.62.107:64307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/cli_bootstrap.php"] [unique_id "apK9GDAh5Y1i2tUxg4HtLQAABig"]
[Sat Aug 29 05:06:00.457886 2026] [security2:error] [pid 1017536:tid 1017746] [client 20.48.250.41:65095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9GCJcY4fy7tP-rU3z5gAAAmQ"]
[Sat Aug 29 05:06:00.484600 2026] [security2:error] [pid 1017536:tid 1017686] [client 20.151.200.44:65488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/baee.php"] [unique_id "apK9GCJcY4fy7tP-rU3z6wAAAig"]
[Sat Aug 29 05:06:00.487322 2026] [security2:error] [pid 1017536:tid 1017712] [client 40.83.93.50:8021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/add_actualites.php"] [unique_id "apK9GCJcY4fy7tP-rU3z7AAAAkI"]
[Sat Aug 29 05:06:00.492297 2026] [security2:error] [pid 1017536:tid 1017721] [client 158.23.147.79:50054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK9GCJcY4fy7tP-rU3z7QAAAks"]
[Sat Aug 29 05:06:00.514594 2026] [security2:error] [pid 1018003:tid 1018270] [client 20.48.251.3:61634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/aws_credentials.php"] [unique_id "apK9GDAh5Y1i2tUxg4HtLwAABi4"]
[Sat Aug 29 05:06:00.542277 2026] [security2:error] [pid 1017536:tid 1017672] [client 158.23.147.79:30648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK9GCJcY4fy7tP-rU3z8gAAAho"]
[Sat Aug 29 05:06:00.554069 2026] [security2:error] [pid 1017536:tid 1017668] [client 20.197.61.180:13029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-admin/user/min.php"] [unique_id "apK9GCJcY4fy7tP-rU3z8wAAAhY"]
[Sat Aug 29 05:06:00.565702 2026] [core:error] [pid 1018003:tid 1018224] [client 45.148.10.166:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:00.565721 2026] [core:error] [pid 1018003:tid 1018224] [client 45.148.10.166:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:00.568213 2026] [security2:error] [pid 1017536:tid 1017786] [client 158.23.147.79:25518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK9GCJcY4fy7tP-rU3z9gAAAow"]
[Sat Aug 29 05:06:00.576409 2026] [security2:error] [pid 1017536:tid 1017720] [client 158.158.54.35:5033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/bi.php"] [unique_id "apK9GCJcY4fy7tP-rU3z-QAAAko"]
[Sat Aug 29 05:06:00.577625 2026] [security2:error] [pid 1017536:tid 1017715] [client 168.107.94.195:62407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9GCJcY4fy7tP-rU3z-gAAAkU"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:00.591719 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.48.250.41:62547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/zoo.php"] [unique_id "apK9GCJcY4fy7tP-rU3z-wAAAh0"]
[Sat Aug 29 05:06:00.615227 2026] [security2:error] [pid 1018003:tid 1018198] [client 20.48.250.41:65117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/ff1.php"] [unique_id "apK9GDAh5Y1i2tUxg4HtOgAABec"]
[Sat Aug 29 05:06:00.626052 2026] [security2:error] [pid 1017536:tid 1017678] [client 185.104.184.230:44948] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.nhu.jca.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "apK9GCJcY4fy7tP-rU3z_QAAAiA"]
[Sat Aug 29 05:06:00.644181 2026] [security2:error] [pid 1018003:tid 1018218] [client 68.155.159.216:51413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-content/x/index.php"] [unique_id "apK9GDAh5Y1i2tUxg4HtPAAABfs"]
[Sat Aug 29 05:06:00.655673 2026] [security2:error] [pid 1017536:tid 1017725] [client 20.48.251.3:61222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/aws-credentials.php"] [unique_id "apK9GCJcY4fy7tP-rU3z_gAAAk8"]
[Sat Aug 29 05:06:00.665025 2026] [security2:error] [pid 1017536:tid 1017674] [client 4.205.62.107:22237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/f35.php"] [unique_id "apK9GCJcY4fy7tP-rU3z_wAAAhw"]
[Sat Aug 29 05:06:00.668050 2026] [security2:error] [pid 1017536:tid 1017793] [client 93.123.109.228:41364] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/var/www/html/.env"] [unique_id "apK9GCJcY4fy7tP-rU30AAAAApM"]
[Sat Aug 29 05:06:00.683629 2026] [security2:error] [pid 1017536:tid 1017692] [client 68.155.159.216:16236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-content/admin.php"] [unique_id "apK9GCJcY4fy7tP-rU30AwAAAi4"]
[Sat Aug 29 05:06:00.687330 2026] [security2:error] [pid 1017536:tid 1017696] [client 4.232.148.111:8401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.easyarranger.com"] [uri "/wp-admin.php"] [unique_id "apK9GCJcY4fy7tP-rU30BQAAAjI"]
[Sat Aug 29 05:06:00.687506 2026] [security2:error] [pid 1017536:tid 1017705] [client 93.123.109.228:41360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/var/www/.env"] [unique_id "apK9GCJcY4fy7tP-rU30BAAAAjs"]
[Sat Aug 29 05:06:00.701367 2026] [security2:error] [pid 1018003:tid 1018217] [client 93.123.109.228:41478] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/web/.env"] [unique_id "apK9GDAh5Y1i2tUxg4HtPwAABfo"]
[Sat Aug 29 05:06:00.705721 2026] [security2:error] [pid 1017536:tid 1017707] [client 4.205.62.107:65449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/register.php"] [unique_id "apK9GCJcY4fy7tP-rU30BwAAAj0"]
[Sat Aug 29 05:06:00.711044 2026] [security2:error] [pid 1017536:tid 1017754] [client 4.205.62.107:21877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/06.php"] [unique_id "apK9GCJcY4fy7tP-rU30CgAAAmw"]
[Sat Aug 29 05:06:00.730276 2026] [security2:error] [pid 1018003:tid 1018155] [client 4.205.62.107:2520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/v2.php"] [unique_id "apK9GDAh5Y1i2tUxg4HtQwAABbw"]
[Sat Aug 29 05:06:00.730786 2026] [security2:error] [pid 1018003:tid 1018170] [client 20.48.250.41:62586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/elp.php"] [unique_id "apK9GDAh5Y1i2tUxg4HtRAAABcs"]
[Sat Aug 29 05:06:00.734041 2026] [security2:error] [pid 1018003:tid 1018231] [client 158.23.147.79:30618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK9GDAh5Y1i2tUxg4HtRQAABgc"]
[Sat Aug 29 05:06:00.752624 2026] [security2:error] [pid 1018003:tid 1018222] [client 20.52.41.200:1735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/admin.php"] [unique_id "apK9GDAh5Y1i2tUxg4HtRwAABf8"]
[Sat Aug 29 05:06:00.755937 2026] [security2:error] [pid 1018003:tid 1018232] [client 20.151.200.44:64853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/super.php"] [unique_id "apK9GDAh5Y1i2tUxg4HtSgAABgg"]
[Sat Aug 29 05:06:00.756762 2026] [security2:error] [pid 1018003:tid 1018271] [client 40.83.93.50:12424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-admin/plugins/img/themes/plugins/maintenance.php"] [unique_id "apK9GDAh5Y1i2tUxg4HtSwAABi8"]
[Sat Aug 29 05:06:00.764658 2026] [security2:error] [pid 1017536:tid 1017781] [client 20.48.250.41:65050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/t.php"] [unique_id "apK9GCJcY4fy7tP-rU30EQAAAoc"]
[Sat Aug 29 05:06:00.772211 2026] [security2:error] [pid 1017536:tid 1017757] [client 68.155.159.216:40264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.gavirestaurant.com"] [uri "/bk/index.php"] [unique_id "apK9GCJcY4fy7tP-rU30EgAAAm8"]
[Sat Aug 29 05:06:00.785863 2026] [security2:error] [pid 1017536:tid 1017689] [client 20.48.251.3:61642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/4563.php"] [unique_id "apK9GCJcY4fy7tP-rU30FAAAAis"]
[Sat Aug 29 05:06:00.808818 2026] [security2:error] [pid 1017536:tid 1017687] [client 20.196.209.81:17106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-content/languages/index.php"] [unique_id "apK9GCJcY4fy7tP-rU30FgAAAik"]
[Sat Aug 29 05:06:00.810469 2026] [security2:error] [pid 1018003:tid 1018219] [client 68.155.159.216:50209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK9GDAh5Y1i2tUxg4HtUgAABfw"]
[Sat Aug 29 05:06:00.816184 2026] [security2:error] [pid 1017536:tid 1017714] [client 20.104.49.130:46585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/berlin.php"] [unique_id "apK9GCJcY4fy7tP-rU30FwAAAkQ"]
[Sat Aug 29 05:06:00.856669 2026] [security2:error] [pid 1018003:tid 1018200] [client 93.123.109.228:41478] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/website/.env"] [unique_id "apK9GDAh5Y1i2tUxg4HtVAAABek"]
[Sat Aug 29 05:06:00.868037 2026] [security2:error] [pid 1017536:tid 1017706] [client 93.123.109.228:41380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/wp-config.php"] [unique_id "apK9GCJcY4fy7tP-rU30IQAAAjw"]
[Sat Aug 29 05:06:00.875329 2026] [security2:error] [pid 1018003:tid 1018187] [client 93.123.109.228:41230] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/wp-config.php.bak"] [unique_id "apK9GDAh5Y1i2tUxg4HtVQAABdw"]
[Sat Aug 29 05:06:00.883106 2026] [security2:error] [pid 1017536:tid 1017708] [client 20.48.250.41:62528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/666.php"] [unique_id "apK9GCJcY4fy7tP-rU30IgAAAj4"]
[Sat Aug 29 05:06:00.886064 2026] [security2:error] [pid 1017536:tid 1017732] [client 93.123.109.228:41298] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/wp-config.php.new"] [unique_id "apK9GCJcY4fy7tP-rU30IwAAAlY"]
[Sat Aug 29 05:06:00.888409 2026] [security2:error] [pid 1017536:tid 1017782] [client 158.23.147.79:35785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK9GCJcY4fy7tP-rU30JAAAAog"]
[Sat Aug 29 05:06:00.892454 2026] [security2:error] [pid 1018003:tid 1018233] [client 93.123.109.228:41108] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/wp-config.php.old"] [unique_id "apK9GDAh5Y1i2tUxg4HtVgAABgk"]
[Sat Aug 29 05:06:00.896730 2026] [security2:error] [pid 1017536:tid 1017775] [client 74.248.24.12:41002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/wp-content/admin.php"] [unique_id "apK9GCJcY4fy7tP-rU30JQAAAoE"]
[Sat Aug 29 05:06:00.914373 2026] [security2:error] [pid 1018003:tid 1018245] [client 93.123.109.228:41348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "cpcontacts.ericamontgomeryphotography.com"] [uri "/___proxy_subdomain_cpcontacts/wp-content/mysql.sql"] [unique_id "apK9GDAh5Y1i2tUxg4HtVwAABhU"]
[Sat Aug 29 05:06:00.916112 2026] [security2:error] [pid 1018003:tid 1018209] [client 20.48.251.3:61672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/cp2.php"] [unique_id "apK9GDAh5Y1i2tUxg4HtWAAABfI"]
[Sat Aug 29 05:06:00.940027 2026] [security2:error] [pid 1018003:tid 1018180] [client 20.48.251.3:33300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/aws_sdk_settings.php"] [unique_id "apK9GDAh5Y1i2tUxg4HtWgAABdU"]
[Sat Aug 29 05:06:00.941644 2026] [security2:error] [pid 1017536:tid 1017730] [client 185.104.184.230:44962] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.nhu.jca.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "apK9GCJcY4fy7tP-rU30KwAAAlQ"]
[Sat Aug 29 05:06:00.958220 2026] [security2:error] [pid 1018003:tid 1018169] [client 168.107.94.195:62776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9GDAh5Y1i2tUxg4HtWwAABco"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:00.972172 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.48.250.41:65052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/erty.php"] [unique_id "apK9GDAh5Y1i2tUxg4HtXAAABcI"]
[Sat Aug 29 05:06:00.975682 2026] [security2:error] [pid 1018003:tid 1018188] [client 40.83.93.50:7793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/alfanew.php7"] [unique_id "apK9GDAh5Y1i2tUxg4HtXQAABd0"]
[Sat Aug 29 05:06:01.011942 2026] [security2:error] [pid 1017536:tid 1017672] [client 158.158.54.35:6100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/cc.php"] [unique_id "apK9GSJcY4fy7tP-rU30LgAAAho"]
[Sat Aug 29 05:06:01.028776 2026] [security2:error] [pid 1018003:tid 1018164] [client 4.205.62.107:21879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/cloud.php"] [unique_id "apK9GTAh5Y1i2tUxg4HtYAAABcU"]
[Sat Aug 29 05:06:01.032042 2026] [security2:error] [pid 1018003:tid 1018159] [client 20.48.250.41:62555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/knmt.php"] [unique_id "apK9GTAh5Y1i2tUxg4HtYQAABcA"]
[Sat Aug 29 05:06:01.043655 2026] [security2:error] [pid 1018003:tid 1018206] [client 20.48.251.3:62118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/xda.php"] [unique_id "apK9GTAh5Y1i2tUxg4HtYgAABe8"]
[Sat Aug 29 05:06:01.095744 2026] [security2:error] [pid 1017536:tid 1017692] [client 68.155.159.216:51264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-content/index.php"] [unique_id "apK9GSJcY4fy7tP-rU30MQAAAi4"]
[Sat Aug 29 05:06:01.111235 2026] [security2:error] [pid 1018003:tid 1018227] [client 4.205.62.107:55973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/oiko6u.php"] [unique_id "apK9GTAh5Y1i2tUxg4HtZgAABgQ"]
[Sat Aug 29 05:06:01.111452 2026] [security2:error] [pid 1017536:tid 1017696] [client 20.151.200.44:64241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/lufix1.php"] [unique_id "apK9GSJcY4fy7tP-rU30MgAAAjI"]
[Sat Aug 29 05:06:01.115086 2026] [security2:error] [pid 1017536:tid 1017705] [client 20.48.250.41:64321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/0x.php"] [unique_id "apK9GSJcY4fy7tP-rU30MwAAAjs"]
[Sat Aug 29 05:06:01.117003 2026] [security2:error] [pid 1017536:tid 1017773] [client 68.155.159.216:57352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/ans.php"] [unique_id "apK9GSJcY4fy7tP-rU30NAAAAn8"]
[Sat Aug 29 05:06:01.119379 2026] [security2:error] [pid 1018003:tid 1018175] [client 158.23.147.79:62676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/.well-known/content.php"] [unique_id "apK9GTAh5Y1i2tUxg4HtZwAABdA"]
[Sat Aug 29 05:06:01.162105 2026] [security2:error] [pid 1018003:tid 1018179] [client 158.23.147.79:24501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/cgi-bin/index.php"] [unique_id "apK9GTAh5Y1i2tUxg4HtaQAABdQ"]
[Sat Aug 29 05:06:01.173648 2026] [security2:error] [pid 1018003:tid 1018249] [client 20.48.251.3:62087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/pinfo.php"] [unique_id "apK9GTAh5Y1i2tUxg4HtawAABhk"]
[Sat Aug 29 05:06:01.203673 2026] [security2:error] [pid 1018003:tid 1018221] [client 20.52.41.200:1762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/php8.php"] [unique_id "apK9GTAh5Y1i2tUxg4HtbQAABf4"]
[Sat Aug 29 05:06:01.203673 2026] [security2:error] [pid 1017536:tid 1017727] [client 20.48.250.41:62466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/sbhu.php"] [unique_id "apK9GSJcY4fy7tP-rU30OwAAAlE"]
[Sat Aug 29 05:06:01.216709 2026] [security2:error] [pid 1018003:tid 1018267] [client 20.48.251.3:13824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/wp-admin/sc.php"] [unique_id "apK9GTAh5Y1i2tUxg4HtbgAABis"]
[Sat Aug 29 05:06:01.230244 2026] [security2:error] [pid 1017536:tid 1017792] [client 20.196.209.81:24998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-content/languages/min.php"] [unique_id "apK9GSJcY4fy7tP-rU30PgAAApI"]
[Sat Aug 29 05:06:01.231113 2026] [security2:error] [pid 1017536:tid 1017674] [client 40.83.93.50:5891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-admin/security.php"] [unique_id "apK9GSJcY4fy7tP-rU30PwAAAhw"]
[Sat Aug 29 05:06:01.262377 2026] [security2:error] [pid 1017536:tid 1017748] [client 185.104.184.230:44974] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.nhu.jca.mybluehost.me"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "apK9GSJcY4fy7tP-rU30QAAAAmY"]
[Sat Aug 29 05:06:01.265826 2026] [security2:error] [pid 1018003:tid 1018242] [client 68.155.159.216:18311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/goods.php"] [unique_id "apK9GTAh5Y1i2tUxg4HtbwAABhI"]
[Sat Aug 29 05:06:01.272464 2026] [security2:error] [pid 1017536:tid 1017781] [client 68.155.159.216:14301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK9GSJcY4fy7tP-rU30QQAAAoc"]
[Sat Aug 29 05:06:01.275535 2026] [security2:error] [pid 1018003:tid 1018250] [client 20.197.61.180:16989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-admin/users.php"] [unique_id "apK9GTAh5Y1i2tUxg4HtcAAABho"]
[Sat Aug 29 05:06:01.283606 2026] [security2:error] [pid 1017536:tid 1017757] [client 20.48.250.41:64323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/66.php"] [unique_id "apK9GSJcY4fy7tP-rU30QgAAAm8"]
[Sat Aug 29 05:06:01.304040 2026] [security2:error] [pid 1017536:tid 1017746] [client 20.48.251.3:61678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/X57.php"] [unique_id "apK9GSJcY4fy7tP-rU30QwAAAmQ"]
[Sat Aug 29 05:06:01.322021 2026] [security2:error] [pid 1018003:tid 1018248] [client 158.23.147.79:48221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-content/cong.php"] [unique_id "apK9GTAh5Y1i2tUxg4HtcwAABhg"]
[Sat Aug 29 05:06:01.336688 2026] [security2:error] [pid 1018003:tid 1018156] [client 168.107.94.195:63177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9GTAh5Y1i2tUxg4HtdQAABb0"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:01.346776 2026] [security2:error] [pid 1017536:tid 1017714] [client 20.48.250.41:62583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/a332.php"] [unique_id "apK9GSJcY4fy7tP-rU30RgAAAkQ"]
[Sat Aug 29 05:06:01.372326 2026] [security2:error] [pid 1017536:tid 1017723] [client 20.151.200.44:64905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/hack.php"] [unique_id "apK9GSJcY4fy7tP-rU30TAAAAk0"]
[Sat Aug 29 05:06:01.417625 2026] [security2:error] [pid 1017536:tid 1017782] [client 20.48.250.41:64327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/f35.php"] [unique_id "apK9GSJcY4fy7tP-rU30TgAAAog"]
[Sat Aug 29 05:06:01.433448 2026] [security2:error] [pid 1017536:tid 1017750] [client 20.48.251.3:62124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/register.php"] [unique_id "apK9GSJcY4fy7tP-rU30UAAAAmg"]
[Sat Aug 29 05:06:01.435057 2026] [security2:error] [pid 1017536:tid 1017786] [client 20.48.251.3:33305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/debug.php"] [unique_id "apK9GSJcY4fy7tP-rU30UQAAAow"]
[Sat Aug 29 05:06:01.456599 2026] [security2:error] [pid 1017536:tid 1017667] [client 158.158.54.35:8902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/files/index.php"] [unique_id "apK9GSJcY4fy7tP-rU30UgAAAhU"]
[Sat Aug 29 05:06:01.479171 2026] [security2:error] [pid 1018003:tid 1018166] [client 74.248.24.12:30404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/wp-configs.php"] [unique_id "apK9GTAh5Y1i2tUxg4HtdwAABcc"]
[Sat Aug 29 05:06:01.483778 2026] [security2:error] [pid 1017536:tid 1017720] [client 20.48.250.41:60769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/ws66.php"] [unique_id "apK9GSJcY4fy7tP-rU30VAAAAko"]
[Sat Aug 29 05:06:01.511019 2026] [security2:error] [pid 1017536:tid 1017672] [client 20.151.200.44:64832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/155.php"] [unique_id "apK9GSJcY4fy7tP-rU30VQAAAho"]
[Sat Aug 29 05:06:01.520392 2026] [security2:error] [pid 1017536:tid 1017717] [client 40.83.93.50:7790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/xmlrpc.php0"] [unique_id "apK9GSJcY4fy7tP-rU30UwAAAkc"]
[Sat Aug 29 05:06:01.528145 2026] [security2:error] [pid 1017536:tid 1017778] [client 20.104.49.130:30030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/makeasmtp.php"] [unique_id "apK9GSJcY4fy7tP-rU30WAAAAoQ"]
[Sat Aug 29 05:06:01.543228 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.48.250.41:65084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/wen.php"] [unique_id "apK9GSJcY4fy7tP-rU30WgAAAnk"]
[Sat Aug 29 05:06:01.562806 2026] [security2:error] [pid 1018003:tid 1018231] [client 20.48.251.3:61667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/xqq.php"] [unique_id "apK9GTAh5Y1i2tUxg4HteAAABgc"]
[Sat Aug 29 05:06:01.566291 2026] [security2:error] [pid 1018003:tid 1018174] [client 20.48.251.3:14282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/66.php"] [unique_id "apK9GTAh5Y1i2tUxg4HteQAABc8"]
[Sat Aug 29 05:06:01.570248 2026] [security2:error] [pid 1018003:tid 1018232] [client 4.205.62.107:64304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/dd.php"] [unique_id "apK9GTAh5Y1i2tUxg4HtegAABgg"]
[Sat Aug 29 05:06:01.571158 2026] [security2:error] [pid 1017536:tid 1017773] [client 185.104.184.230:44988] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.nhu.jca.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "apK9GSJcY4fy7tP-rU30XwAAAn8"]
[Sat Aug 29 05:06:01.594063 2026] [security2:error] [pid 1017536:tid 1017740] [client 4.205.62.107:53407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/nzv.php"] [unique_id "apK9GSJcY4fy7tP-rU30YgAAAl4"]
[Sat Aug 29 05:06:01.605541 2026] [security2:error] [pid 1017536:tid 1017585] [remote 34.138.144.127:57736] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "old.theenprogroup.com"] [uri "/static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ"] [unique_id "apK9GSJcY4fy7tP-rU30YwACkjA"]
[Sat Aug 29 05:06:01.613767 2026] [security2:error] [pid 1017536:tid 1017674] [client 20.48.250.41:60778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/ws68.php"] [unique_id "apK9GSJcY4fy7tP-rU30ZAAAAhw"]
[Sat Aug 29 05:06:01.631539 2026] [security2:error] [pid 1017536:tid 1017744] [client 20.196.209.81:17115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-content/languages/pk.php"] [unique_id "apK9GSJcY4fy7tP-rU30ZgAAAmI"]
[Sat Aug 29 05:06:01.642362 2026] [security2:error] [pid 1017536:tid 1017793] [client 103.171.189.88:53210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9GSJcY4fy7tP-rU30ZwAAApM"]
[Sat Aug 29 05:06:01.642472 2026] [security2:error] [pid 1017536:tid 1017793] [client 103.171.189.88:53210] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9GSJcY4fy7tP-rU30ZwAAApM"]
[Sat Aug 29 05:06:01.645733 2026] [security2:error] [pid 1017536:tid 1017781] [client 158.23.147.79:30684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-content/radio.php"] [unique_id "apK9GSJcY4fy7tP-rU30aQAAAoc"]
[Sat Aug 29 05:06:01.671884 2026] [security2:error] [pid 1017536:tid 1017691] [client 158.23.147.79:25484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-content/radio.php"] [unique_id "apK9GSJcY4fy7tP-rU30bAAAAi0"]
[Sat Aug 29 05:06:01.676330 2026] [security2:error] [pid 1017536:tid 1017757] [client 20.48.250.41:65047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/inc.php"] [unique_id "apK9GSJcY4fy7tP-rU30bQAAAm8"]
[Sat Aug 29 05:06:01.681153 2026] [security2:error] [pid 1017536:tid 1017769] [client 20.151.200.44:65502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/mcd.php"] [unique_id "apK9GSJcY4fy7tP-rU30bgAAAns"]
[Sat Aug 29 05:06:01.693789 2026] [security2:error] [pid 1017536:tid 1017776] [client 20.48.251.3:62092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/a1vx.php"] [unique_id "apK9GSJcY4fy7tP-rU30bwAAAoI"]
[Sat Aug 29 05:06:01.712346 2026] [cgid:error] [pid 1018003:tid 1018222] [client 34.7.40.70:14714] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:01.712830 2026] [cgid:error] [pid 1018003:tid 1018162] [client 34.7.40.70:14674] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:01.715513 2026] [cgid:error] [pid 1017536:tid 1017705] [client 34.7.40.70:14724] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:01.716365 2026] [security2:error] [pid 1017536:tid 1017790] [client 40.83.93.50:5906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-admin/setup-config.php"] [unique_id "apK9GSJcY4fy7tP-rU30eAAAApA"]
[Sat Aug 29 05:06:01.716439 2026] [security2:error] [pid 1017536:tid 1017716] [client 34.7.40.70:14722] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/@fs/root/.openai/config.json"] [unique_id "apK9GSJcY4fy7tP-rU30eQAAAkY"]
[Sat Aug 29 05:06:01.716642 2026] [security2:error] [pid 1018003:tid 1018243] [client 168.107.94.195:63454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9GTAh5Y1i2tUxg4HtfgAABhM"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:01.716807 2026] [cgid:error] [pid 1017536:tid 1017707] [client 34.7.40.70:14752] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:01.719724 2026] [security2:error] [pid 1017536:tid 1017695] [client 34.7.40.70:14774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/@fs/proc/self/cwd/.env"] [unique_id "apK9GSJcY4fy7tP-rU30fQAAAjE"]
[Sat Aug 29 05:06:01.719860 2026] [security2:error] [pid 1017536:tid 1017695] [client 34.7.40.70:14774] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/@fs/proc/self/cwd/.env"] [unique_id "apK9GSJcY4fy7tP-rU30fQAAAjE"]
[Sat Aug 29 05:06:01.720091 2026] [cgid:error] [pid 1017536:tid 1017683] [client 34.7.40.70:14806] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:01.720246 2026] [cgid:error] [pid 1017536:tid 1017678] [client 34.7.40.70:14690] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:01.720438 2026] [cgid:error] [pid 1017536:tid 1017703] [client 34.7.40.70:14738] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:01.720489 2026] [cgid:error] [pid 1018003:tid 1018262] [client 34.7.40.70:14698] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:01.720529 2026] [cgid:error] [pid 1017536:tid 1017713] [client 34.7.40.70:14680] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:01.721221 2026] [cgid:error] [pid 1017536:tid 1017731] [client 34.7.40.70:14700] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:01.725237 2026] [security2:error] [pid 1017536:tid 1017670] [client 34.7.40.70:14792] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK9GSJcY4fy7tP-rU30ggAAAhg"]
[Sat Aug 29 05:06:01.725781 2026] [cgid:error] [pid 1017536:tid 1017726] [client 34.7.40.70:14818] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:01.726095 2026] [security2:error] [pid 1017536:tid 1017749] [client 34.7.40.70:14764] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/@fs/var/task/.env"] [unique_id "apK9GSJcY4fy7tP-rU30gQAAAmc"]
[Sat Aug 29 05:06:01.728246 2026] [cgid:error] [pid 1017536:tid 1017669] [client 34.7.40.70:14786] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:01.729385 2026] [security2:error] [pid 1017536:tid 1017749] [client 20.48.251.3:33319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/admin.php"] [unique_id "apK9GSJcY4fy7tP-rU30hAAAAmc"]
[Sat Aug 29 05:06:01.748331 2026] [security2:error] [pid 1017536:tid 1017777] [client 20.48.250.41:60740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/users.php"] [unique_id "apK9GSJcY4fy7tP-rU30hQAAAoM"]
[Sat Aug 29 05:06:01.762729 2026] [security2:error] [pid 1017536:tid 1017708] [client 35.159.194.1:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.jobindjibouti.com"] [uri "/"] [unique_id "apK9GSJcY4fy7tP-rU30hgAAAj4"]
[Sat Aug 29 05:06:01.770043 2026] [security2:error] [pid 1018003:tid 1018276] [client 171.61.160.196:14935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.160.61.171.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK9GTAh5Y1i2tUxg4HtgAAABjQ"]
[Sat Aug 29 05:06:01.770196 2026] [security2:error] [pid 1018003:tid 1018276] [client 171.61.160.196:14935] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK9GTAh5Y1i2tUxg4HtgAAABjQ"]
[Sat Aug 29 05:06:01.803393 2026] [security2:error] [pid 1018003:tid 1018258] [client 4.205.62.107:22326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/params.php"] [unique_id "apK9GTAh5Y1i2tUxg4HtgQAABiI"]
[Sat Aug 29 05:06:01.810606 2026] [security2:error] [pid 1018003:tid 1018153] [client 20.48.250.41:65054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/6bcwiqwj.php"] [unique_id "apK9GTAh5Y1i2tUxg4HtggAABbo"]
[Sat Aug 29 05:06:01.822577 2026] [security2:error] [pid 1018003:tid 1018163] [client 20.48.251.3:61665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/public/vx.php"] [unique_id "apK9GTAh5Y1i2tUxg4HtgwAABcQ"]
[Sat Aug 29 05:06:01.828120 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.52.41.200:1223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/install.php"] [unique_id "apK9GSJcY4fy7tP-rU30iAAAAh0"]
[Sat Aug 29 05:06:01.841996 2026] [security2:error] [pid 1017536:tid 1017784] [client 149.34.210.141:22729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9GSJcY4fy7tP-rU30igAAAoo"]
[Sat Aug 29 05:06:01.842077 2026] [security2:error] [pid 1017536:tid 1017784] [client 149.34.210.141:22729] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9GSJcY4fy7tP-rU30igAAAoo"]
[Sat Aug 29 05:06:01.850679 2026] [security2:error] [pid 1018003:tid 1018183] [client 4.205.62.107:22477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/otuz1.php"] [unique_id "apK9GTAh5Y1i2tUxg4HthQAABdg"]
[Sat Aug 29 05:06:01.855731 2026] [security2:error] [pid 1017536:tid 1017685] [client 158.23.147.79:30707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-admin/dropdown.php"] [unique_id "apK9GSJcY4fy7tP-rU30jQAAAic"]
[Sat Aug 29 05:06:01.856010 2026] [security2:error] [pid 1017536:tid 1017608] [remote 66.29.146.59:54574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.146.29.66.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "raffajapan-org.juntoohki.com"] [uri "/wp-login.php"] [unique_id "apK9GSJcY4fy7tP-rU30iQACckc"]
[Sat Aug 29 05:06:01.857373 2026] [security2:error] [pid 1017536:tid 1017672] [client 4.205.62.107:65475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/xqq.php"] [unique_id "apK9GSJcY4fy7tP-rU30jgAAAho"]
[Sat Aug 29 05:06:01.863481 2026] [security2:error] [pid 1017536:tid 1017755] [client 185.104.184.230:45004] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.nhu.jca.mybluehost.me"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "apK9GSJcY4fy7tP-rU30jwAAAm0"]
[Sat Aug 29 05:06:01.865433 2026] [security2:error] [pid 1017536:tid 1017646] [remote 66.29.146.59:54566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.146.29.66.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "raffajapan-org.juntoohki.com"] [uri "/wp-login.php"] [unique_id "apK9GSJcY4fy7tP-rU30jAACQW0"]
[Sat Aug 29 05:06:01.868156 2026] [security2:error] [pid 1017536:tid 1017717] [client 4.205.62.107:2881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/cli_bootstrap.php"] [unique_id "apK9GSJcY4fy7tP-rU30kAAAAkc"]
[Sat Aug 29 05:06:01.870101 2026] [security2:error] [pid 1017536:tid 1017772] [client 61.9.8.151:57271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK9GSJcY4fy7tP-rU30iwAAAn4"]
[Sat Aug 29 05:06:01.870176 2026] [security2:error] [pid 1017536:tid 1017772] [client 61.9.8.151:57271] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK9GSJcY4fy7tP-rU30iwAAAn4"]
[Sat Aug 29 05:06:01.877520 2026] [security2:error] [pid 1017536:tid 1017692] [client 68.155.159.216:61647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.gavirestaurant.com"] [uri "/first.php"] [unique_id "apK9GSJcY4fy7tP-rU30kQAAAi4"]
[Sat Aug 29 05:06:01.879398 2026] [security2:error] [pid 1018003:tid 1018236] [client 20.48.250.41:62479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/bzjdlofz.php"] [unique_id "apK9GTAh5Y1i2tUxg4HthgAABgw"]
[Sat Aug 29 05:06:01.884029 2026] [security2:error] [pid 1017536:tid 1017733] [client 20.104.49.130:29958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/wpxml.php"] [unique_id "apK9GSJcY4fy7tP-rU30kgAAAlc"]
[Sat Aug 29 05:06:01.903857 2026] [security2:error] [pid 1018003:tid 1018266] [client 158.158.54.35:12240] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.santarosairis.org"] [uri "/1.php7"] [unique_id "apK9GTAh5Y1i2tUxg4HthwAABio"]
[Sat Aug 29 05:06:01.903969 2026] [security2:error] [pid 1018003:tid 1018266] [client 158.158.54.35:12240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/1.php7"] [unique_id "apK9GTAh5Y1i2tUxg4HthwAABio"]
[Sat Aug 29 05:06:01.914014 2026] [security2:error] [pid 1018003:tid 1018230] [client 20.151.200.44:65472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/waw.php"] [unique_id "apK9GTAh5Y1i2tUxg4HtiAAABgY"]
[Sat Aug 29 05:06:01.919551 2026] [security2:error] [pid 1017536:tid 1017740] [client 68.155.159.216:50217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/lock.php"] [unique_id "apK9GSJcY4fy7tP-rU30kwAAAl4"]
[Sat Aug 29 05:06:01.952903 2026] [security2:error] [pid 1017536:tid 1017748] [client 20.48.251.3:62135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/log.php"] [unique_id "apK9GSJcY4fy7tP-rU30lAAAAmY"]
[Sat Aug 29 05:06:01.971976 2026] [security2:error] [pid 1017536:tid 1017723] [client 20.197.61.180:17017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-admin/wp-cron.php"] [unique_id "apK9GSJcY4fy7tP-rU30lQAAAk0"]
[Sat Aug 29 05:06:02.000726 2026] [security2:error] [pid 1018003:tid 1018188] [client 20.48.250.41:65131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/easy.php"] [unique_id "apK9GTAh5Y1i2tUxg4HtiwAABd0"]
[Sat Aug 29 05:06:02.004881 2026] [security2:error] [pid 1017536:tid 1017752] [client 20.48.250.41:62534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/selesai.php"] [unique_id "apK9GiJcY4fy7tP-rU30lwAAAmo"]
[Sat Aug 29 05:06:02.013867 2026] [security2:error] [pid 1017536:tid 1017720] [client 40.83.93.50:8058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/content.php"] [unique_id "apK9GiJcY4fy7tP-rU30mAAAAko"]
[Sat Aug 29 05:06:02.017487 2026] [security2:error] [pid 1017536:tid 1017730] [client 74.248.24.12:25457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/wp-includes/index.php"] [unique_id "apK9GiJcY4fy7tP-rU30mQAAAlQ"]
[Sat Aug 29 05:06:02.022559 2026] [security2:error] [pid 1017536:tid 1017693] [client 158.23.147.79:35777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK9GiJcY4fy7tP-rU30mgAAAi8"]
[Sat Aug 29 05:06:02.023869 2026] [security2:error] [pid 1017536:tid 1017769] [client 20.48.251.3:14287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/chosen.php"] [unique_id "apK9GiJcY4fy7tP-rU30mwAAAns"]
[Sat Aug 29 05:06:02.024866 2026] [security2:error] [pid 1018003:tid 1018245] [client 20.196.209.81:7754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.hellospringford.com"] [uri "/wp-content/languages/plugins/about.php"] [unique_id "apK9GjAh5Y1i2tUxg4HtjAAABhU"]
[Sat Aug 29 05:06:02.056803 2026] [security2:error] [pid 1018003:tid 1018277] [client 20.104.49.130:58077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.carlosmua.com"] [uri "/about.php"] [unique_id "apK9GjAh5Y1i2tUxg4HtjQAABjU"]
[Sat Aug 29 05:06:02.068152 2026] [security2:error] [pid 1017536:tid 1017679] [client 20.151.200.44:64906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/x23.php"] [unique_id "apK9GiJcY4fy7tP-rU30nwAAAiE"]
[Sat Aug 29 05:06:02.082035 2026] [security2:error] [pid 1017536:tid 1017716] [client 20.48.251.3:61655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/ebahvhhh.php"] [unique_id "apK9GiJcY4fy7tP-rU30ogAAAkY"]
[Sat Aug 29 05:06:02.095795 2026] [security2:error] [pid 1017536:tid 1017683] [client 168.107.94.195:63837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9GiJcY4fy7tP-rU30owAAAiU"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:02.109845 2026] [security2:error] [pid 1017536:tid 1017678] [client 35.159.194.1:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.jobindjibouti.com"] [uri "/jobs/"] [unique_id "apK9GiJcY4fy7tP-rU30pAAAAiA"]
[Sat Aug 29 05:06:02.141939 2026] [security2:error] [pid 1018003:tid 1018207] [client 20.48.250.41:59329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/shlo.php"] [unique_id "apK9GjAh5Y1i2tUxg4HtjgAABfA"]
[Sat Aug 29 05:06:02.165852 2026] [security2:error] [pid 1018003:tid 1018220] [client 4.205.62.107:22367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/kerang.php"] [unique_id "apK9GjAh5Y1i2tUxg4HtkAAABf0"]
[Sat Aug 29 05:06:02.166479 2026] [security2:error] [pid 1018003:tid 1018164] [client 20.48.250.41:65099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/fresh3.php"] [unique_id "apK9GjAh5Y1i2tUxg4HtkQAABcU"]
[Sat Aug 29 05:06:02.170489 2026] [security2:error] [pid 1017536:tid 1017708] [client 185.104.184.230:45018] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.nhu.jca.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "apK9GiJcY4fy7tP-rU30rgAAAj4"]
[Sat Aug 29 05:06:02.197290 2026] [security2:error] [pid 1017536:tid 1017681] [client 40.83.93.50:5913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-admin/system.php"] [unique_id "apK9GiJcY4fy7tP-rU30sgAAAiM"]
[Sat Aug 29 05:06:02.207579 2026] [security2:error] [pid 1018003:tid 1018275] [client 20.48.251.3:62095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/asa.php"] [unique_id "apK9GjAh5Y1i2tUxg4HtkgAABjM"]
[Sat Aug 29 05:06:02.222117 2026] [security2:error] [pid 1017536:tid 1017764] [client 158.23.147.79:38731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/cong.php"] [unique_id "apK9GiJcY4fy7tP-rU30swAAAnY"]
[Sat Aug 29 05:06:02.226483 2026] [security2:error] [pid 1017536:tid 1017712] [client 20.48.251.3:33293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/admin-ajax.php"] [unique_id "apK9GiJcY4fy7tP-rU30tQAAAkI"]
[Sat Aug 29 05:06:02.227349 2026] [security2:error] [pid 1017536:tid 1017675] [client 68.155.159.216:57441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/worksec.php"] [unique_id "apK9GiJcY4fy7tP-rU30tgAAAh0"]
[Sat Aug 29 05:06:02.259608 2026] [security2:error] [pid 1018003:tid 1018199] [client 20.151.200.44:64310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/ws66.php"] [unique_id "apK9GjAh5Y1i2tUxg4HtkwAABeg"]
[Sat Aug 29 05:06:02.263576 2026] [security2:error] [pid 1017536:tid 1017724] [client 4.205.62.107:55948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/fraro.php"] [unique_id "apK9GiJcY4fy7tP-rU30twAAAk4"]
[Sat Aug 29 05:06:02.265931 2026] [security2:error] [pid 1017536:tid 1017785] [client 158.23.147.79:24484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK9GiJcY4fy7tP-rU30uAAAAos"]
[Sat Aug 29 05:06:02.280001 2026] [security2:error] [pid 1017536:tid 1017669] [client 20.52.41.200:1760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/ioxi-o.php"] [unique_id "apK9GiJcY4fy7tP-rU30uQAAAhc"]
[Sat Aug 29 05:06:02.297888 2026] [security2:error] [pid 1017536:tid 1017717] [client 20.48.250.41:65069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/bgymj.php"] [unique_id "apK9GiJcY4fy7tP-rU30ugAAAkc"]
[Sat Aug 29 05:06:02.327628 2026] [security2:error] [pid 1017536:tid 1017747] [client 20.48.250.41:60779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/asax.php"] [unique_id "apK9GiJcY4fy7tP-rU30vgAAAmU"]
[Sat Aug 29 05:06:02.330188 2026] [security2:error] [pid 1018003:tid 1018252] [client 20.48.251.3:61637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/radio.php"] [unique_id "apK9GjAh5Y1i2tUxg4HtlAAABhw"]
[Sat Aug 29 05:06:02.330886 2026] [security2:error] [pid 1017536:tid 1017696] [client 68.155.159.216:49167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9GiJcY4fy7tP-rU30wAAAAjI"]
[Sat Aug 29 05:06:02.346336 2026] [security2:error] [pid 1017536:tid 1017698] [client 158.158.54.35:5008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/disagraeosc.php"] [unique_id "apK9GiJcY4fy7tP-rU30wgAAAjQ"]
[Sat Aug 29 05:06:02.349801 2026] [security2:error] [pid 1017536:tid 1017754] [client 68.155.159.216:51877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/about/function.php"] [unique_id "apK9GiJcY4fy7tP-rU30wwAAAmw"]
[Sat Aug 29 05:06:02.360510 2026] [security2:error] [pid 1017536:tid 1017792] [client 20.151.200.44:64890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/d12.php"] [unique_id "apK9GiJcY4fy7tP-rU30xAAAApI"]
[Sat Aug 29 05:06:02.375671 2026] [security2:error] [pid 1017536:tid 1017748] [client 68.155.159.216:14289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK9GiJcY4fy7tP-rU30yAAAAmY"]
[Sat Aug 29 05:06:02.383469 2026] [security2:error] [pid 1017536:tid 1017723] [client 68.155.159.216:18303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK9GiJcY4fy7tP-rU30yQAAAk0"]
[Sat Aug 29 05:06:02.393824 2026] [security2:error] [pid 1017536:tid 1017720] [client 20.151.200.44:64874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/Cok.php"] [unique_id "apK9GiJcY4fy7tP-rU30zAAAAko"]
[Sat Aug 29 05:06:02.427574 2026] [security2:error] [pid 1017536:tid 1017707] [client 158.23.147.79:48223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK9GiJcY4fy7tP-rU30zQAAAj0"]
[Sat Aug 29 05:06:02.456838 2026] [security2:error] [pid 1018003:tid 1018179] [client 20.48.251.3:62134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/xa.php"] [unique_id "apK9GjAh5Y1i2tUxg4HtlwAABdQ"]
[Sat Aug 29 05:06:02.457368 2026] [security2:error] [pid 1017536:tid 1017683] [client 20.48.250.41:62566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/fetch.php"] [unique_id "apK9GiJcY4fy7tP-rU30zgAAAiU"]
[Sat Aug 29 05:06:02.464700 2026] [security2:error] [pid 1018003:tid 1018270] [client 185.104.184.230:45034] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.nhu.jca.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "apK9GjAh5Y1i2tUxg4HtmAAABi4"]
[Sat Aug 29 05:06:02.465725 2026] [security2:error] [pid 1018003:tid 1018259] [client 20.48.250.41:65128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/ws69.php"] [unique_id "apK9GjAh5Y1i2tUxg4HtmQAABiM"]
[Sat Aug 29 05:06:02.475704 2026] [security2:error] [pid 1017536:tid 1017731] [client 168.107.94.195:64183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9GiJcY4fy7tP-rU30zwAAAlU"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:02.500909 2026] [security2:error] [pid 1017536:tid 1017773] [client 40.83.93.50:7754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/wxo.php"] [unique_id "apK9GiJcY4fy7tP-rU300wAAAn8"]
[Sat Aug 29 05:06:02.505214 2026] [security2:error] [pid 1018003:tid 1018249] [client 158.23.147.79:32761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/chosen.php"] [unique_id "apK9GjAh5Y1i2tUxg4HtmgAABhk"]
[Sat Aug 29 05:06:02.529514 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.48.251.3:14009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/ms.php"] [unique_id "apK9GiJcY4fy7tP-rU301AAAAlY"]
[Sat Aug 29 05:06:02.548236 2026] [security2:error] [pid 1017536:tid 1017708] [client 20.151.200.44:64847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/X7T6.php"] [unique_id "apK9GiJcY4fy7tP-rU301QAAAj4"]
[Sat Aug 29 05:06:02.564028 2026] [security2:error] [pid 1017536:tid 1017737] [client 20.104.49.130:46536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/ty.php"] [unique_id "apK9GiJcY4fy7tP-rU301wAAAls"]
[Sat Aug 29 05:06:02.576398 2026] [security2:error] [pid 1017536:tid 1017727] [client 74.248.24.12:8982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/wp-admin/a.php"] [unique_id "apK9GiJcY4fy7tP-rU302AAAAlE"]
[Sat Aug 29 05:06:02.586582 2026] [security2:error] [pid 1017536:tid 1017719] [client 20.48.251.3:61660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/ws61.php"] [unique_id "apK9GiJcY4fy7tP-rU302QAAAkk"]
[Sat Aug 29 05:06:02.598797 2026] [security2:error] [pid 1017536:tid 1017788] [client 20.48.250.41:62526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/vx.php"] [unique_id "apK9GiJcY4fy7tP-rU302gAAAo4"]
[Sat Aug 29 05:06:02.636629 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.48.250.41:65133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/ccs.php"] [unique_id "apK9GiJcY4fy7tP-rU302wAAAh0"]
[Sat Aug 29 05:06:02.671924 2026] [security2:error] [pid 1017536:tid 1017761] [client 40.83.93.50:12458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-admin/test.php"] [unique_id "apK9GiJcY4fy7tP-rU303AAAAnM"]
[Sat Aug 29 05:06:02.680203 2026] [security2:error] [pid 1017536:tid 1017714] [client 20.197.61.180:16331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-admin/wp-links-opml.php"] [unique_id "apK9GiJcY4fy7tP-rU303QAAAkQ"]
[Sat Aug 29 05:06:02.683659 2026] [security2:error] [pid 1017536:tid 1017755] [client 158.23.147.79:49801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK9GiJcY4fy7tP-rU303gAAAm0"]
[Sat Aug 29 05:06:02.710351 2026] [security2:error] [pid 1018003:tid 1018250] [client 4.205.62.107:64961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/wp-tem.php"] [unique_id "apK9GjAh5Y1i2tUxg4HtnQAABho"]
[Sat Aug 29 05:06:02.721902 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.48.251.3:61633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/xza.php"] [unique_id "apK9GiJcY4fy7tP-rU304QAAAnk"]
[Sat Aug 29 05:06:02.722094 2026] [security2:error] [pid 1017536:tid 1017692] [client 20.48.251.3:14288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/fucku.php"] [unique_id "apK9GiJcY4fy7tP-rU304gAAAi4"]
[Sat Aug 29 05:06:02.752710 2026] [security2:error] [pid 1017536:tid 1017709] [client 20.48.250.41:59343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/global.php"] [unique_id "apK9GiJcY4fy7tP-rU305AAAAj8"]
[Sat Aug 29 05:06:02.753820 2026] [security2:error] [pid 1018003:tid 1018213] [client 158.23.147.79:30643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/login.php"] [unique_id "apK9GjAh5Y1i2tUxg4HtnwAABfY"]
[Sat Aug 29 05:06:02.754018 2026] [security2:error] [pid 1018003:tid 1018244] [client 20.52.41.200:1769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/xmlrpc.php"] [unique_id "apK9GjAh5Y1i2tUxg4HtngAABhQ"]
[Sat Aug 29 05:06:02.763506 2026] [security2:error] [pid 1018003:tid 1018240] [client 20.151.200.44:64201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/see.php"] [unique_id "apK9GjAh5Y1i2tUxg4HtoAAABhA"]
[Sat Aug 29 05:06:02.774332 2026] [security2:error] [pid 1017536:tid 1017696] [client 68.155.159.216:51426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK9GiJcY4fy7tP-rU305QAAAjI"]
[Sat Aug 29 05:06:02.776507 2026] [security2:error] [pid 1017536:tid 1017698] [client 158.23.147.79:25491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-admin/dropdown.php"] [unique_id "apK9GiJcY4fy7tP-rU305gAAAjQ"]
[Sat Aug 29 05:06:02.815594 2026] [security2:error] [pid 1017536:tid 1017785] [client 158.158.54.35:10700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-logs.php"] [unique_id "apK9GiJcY4fy7tP-rU306AAAAos"]
[Sat Aug 29 05:06:02.823460 2026] [security2:error] [pid 1017536:tid 1017753] [client 4.205.62.107:53423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/pouhg.php"] [unique_id "apK9GiJcY4fy7tP-rU306QAAAms"]
[Sat Aug 29 05:06:02.827102 2026] [security2:error] [pid 1017536:tid 1017642] [remote 34.138.144.127:57742] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "old.theenprogroup.com"] [uri "/web.config"] [unique_id "apK9GiJcY4fy7tP-rU307AACZmk"]
[Sat Aug 29 05:06:02.828677 2026] [security2:error] [pid 1017536:tid 1017793] [client 20.48.250.41:65067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/mar.php"] [unique_id "apK9GiJcY4fy7tP-rU307gAAApM"]
[Sat Aug 29 05:06:02.855276 2026] [security2:error] [pid 1017536:tid 1017757] [client 168.107.94.195:64551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9GiJcY4fy7tP-rU308wAAAm8"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:02.861203 2026] [security2:error] [pid 1018003:tid 1018274] [client 20.48.251.3:61677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/ms-edit.php"] [unique_id "apK9GjAh5Y1i2tUxg4HtoQAABjI"]
[Sat Aug 29 05:06:02.897676 2026] [security2:error] [pid 1017536:tid 1017730] [client 20.48.250.41:62537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/fs.php"] [unique_id "apK9GiJcY4fy7tP-rU309QAAAlQ"]
[Sat Aug 29 05:06:02.936986 2026] [security2:error] [pid 1017536:tid 1017776] [client 20.48.251.3:13978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/error_log.php"] [unique_id "apK9GiJcY4fy7tP-rU309wAAAoI"]
[Sat Aug 29 05:06:02.939778 2026] [security2:error] [pid 1017536:tid 1017776] [client 4.205.62.107:22515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/debug.php"] [unique_id "apK9GiJcY4fy7tP-rU30-AAAAoI"]
[Sat Aug 29 05:06:02.952716 2026] [security2:error] [pid 1017536:tid 1017742] [client 20.151.200.44:64938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/horeg.php"] [unique_id "apK9GiJcY4fy7tP-rU30-gAAAmA"]
[Sat Aug 29 05:06:02.971695 2026] [security2:error] [pid 1018003:tid 1018166] [client 20.48.250.41:65150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/ccu.php"] [unique_id "apK9GjAh5Y1i2tUxg4HtpAAABcc"]
[Sat Aug 29 05:06:02.975213 2026] [security2:error] [pid 1017536:tid 1017707] [client 158.23.147.79:30697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/hehehehe.php"] [unique_id "apK9GiJcY4fy7tP-rU30_QAAAj0"]
[Sat Aug 29 05:06:02.986695 2026] [security2:error] [pid 1017536:tid 1017689] [client 20.48.251.3:61653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/lmfi2.php"] [unique_id "apK9GiJcY4fy7tP-rU30_gAAAis"]
[Sat Aug 29 05:06:02.988509 2026] [security2:error] [pid 1017536:tid 1017684] [client 4.205.62.107:22255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/filesystems.php"] [unique_id "apK9GiJcY4fy7tP-rU30_wAAAiY"]
[Sat Aug 29 05:06:02.992255 2026] [security2:error] [pid 1017536:tid 1017713] [client 4.205.62.107:65515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/a1vx.php"] [unique_id "apK9GiJcY4fy7tP-rU31AAAAAkM"]
[Sat Aug 29 05:06:02.997610 2026] [security2:error] [pid 1017536:tid 1017720] [client 40.83.93.50:8003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/as.php"] [unique_id "apK9GiJcY4fy7tP-rU31BQAAAko"]
[Sat Aug 29 05:06:03.004777 2026] [security2:error] [pid 1018003:tid 1018152] [client 68.155.159.216:52838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK9GzAh5Y1i2tUxg4HtpQAABbk"]
[Sat Aug 29 05:06:03.005809 2026] [security2:error] [pid 1017536:tid 1017731] [client 4.205.62.107:2305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/wander.php"] [unique_id "apK9GyJcY4fy7tP-rU31BgAAAlU"]
[Sat Aug 29 05:06:03.022720 2026] [security2:error] [pid 1018003:tid 1018203] [client 68.155.159.216:50196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/index/function.php"] [unique_id "apK9GzAh5Y1i2tUxg4HtpgAABew"]
[Sat Aug 29 05:06:03.042265 2026] [security2:error] [pid 1018003:tid 1018170] [client 20.48.250.41:62484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/ioxi.php"] [unique_id "apK9GzAh5Y1i2tUxg4HtpwAABcs"]
[Sat Aug 29 05:06:03.107493 2026] [security2:error] [pid 1017536:tid 1017703] [client 20.151.200.44:65500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/yyy.php"] [unique_id "apK9GyJcY4fy7tP-rU31DQAAAjk"]
[Sat Aug 29 05:06:03.112753 2026] [security2:error] [pid 1017536:tid 1017694] [client 20.151.200.44:65485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/basic.php"] [unique_id "apK9GyJcY4fy7tP-rU31DgAAAjA"]
[Sat Aug 29 05:06:03.112980 2026] [security2:error] [pid 1017536:tid 1017719] [client 20.151.200.44:47301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9GyJcY4fy7tP-rU31DwAAAkk"]
[Sat Aug 29 05:06:03.114139 2026] [security2:error] [pid 1018003:tid 1018189] [client 20.48.250.41:65116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/ak.php"] [unique_id "apK9GzAh5Y1i2tUxg4HtqgAABd4"]
[Sat Aug 29 05:06:03.116465 2026] [security2:error] [pid 1017536:tid 1017681] [client 20.48.251.3:62131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/wpver.php"] [unique_id "apK9GyJcY4fy7tP-rU31EAAAAiM"]
[Sat Aug 29 05:06:03.125251 2026] [core:error] [pid 1018003:tid 1018264] [client 74.248.24.12:30544] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:03.125266 2026] [core:error] [pid 1018003:tid 1018264] [client 74.248.24.12:30544] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:03.172183 2026] [security2:error] [pid 1017536:tid 1017749] [client 20.104.49.130:51130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/kerang.php"] [unique_id "apK9GyJcY4fy7tP-rU31EgAAAmc"]
[Sat Aug 29 05:06:03.176112 2026] [security2:error] [pid 1017536:tid 1017712] [client 158.23.147.79:35727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/simple.php"] [unique_id "apK9GyJcY4fy7tP-rU31FwAAAkI"]
[Sat Aug 29 05:06:03.204778 2026] [security2:error] [pid 1017536:tid 1017711] [client 20.104.49.130:53882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/az.php"] [unique_id "apK9GyJcY4fy7tP-rU31GwAAAkE"]
[Sat Aug 29 05:06:03.208169 2026] [security2:error] [pid 1017536:tid 1017722] [client 20.52.41.200:1731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/filemanager.php"] [unique_id "apK9GyJcY4fy7tP-rU31HAAAAkw"]
[Sat Aug 29 05:06:03.209930 2026] [security2:error] [pid 1017536:tid 1017775] [client 20.48.250.41:60753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/bootstrap.php"] [unique_id "apK9GyJcY4fy7tP-rU31HQAAAoE"]
[Sat Aug 29 05:06:03.235378 2026] [security2:error] [pid 1017536:tid 1017733] [client 168.107.94.195:64887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9GyJcY4fy7tP-rU31HwAAAlc"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:03.246181 2026] [security2:error] [pid 1017536:tid 1017747] [client 20.48.251.3:62081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/ah25.php"] [unique_id "apK9GyJcY4fy7tP-rU31IgAAAmU"]
[Sat Aug 29 05:06:03.281756 2026] [security2:error] [pid 1017536:tid 1017788] [client 158.158.54.35:22916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-admin/css/about.php"] [unique_id "apK9GyJcY4fy7tP-rU31IwAAAo4"]
[Sat Aug 29 05:06:03.287394 2026] [security2:error] [pid 1017536:tid 1017740] [client 20.48.250.41:64338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/lib.php"] [unique_id "apK9GyJcY4fy7tP-rU31JAAAAl4"]
[Sat Aug 29 05:06:03.303770 2026] [security2:error] [pid 1017536:tid 1017687] [client 4.205.62.107:22230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/rem.php"] [unique_id "apK9GyJcY4fy7tP-rU31JQAAAik"]
[Sat Aug 29 05:06:03.306779 2026] [security2:error] [pid 1017536:tid 1017785] [client 20.151.200.44:46544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9GyJcY4fy7tP-rU31JgAAAos"]
[Sat Aug 29 05:06:03.321992 2026] [security2:error] [pid 1017536:tid 1017685] [client 20.151.200.44:64864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/monso.php"] [unique_id "apK9GyJcY4fy7tP-rU31JwAAAic"]
[Sat Aug 29 05:06:03.335119 2026] [security2:error] [pid 1017536:tid 1017753] [client 68.155.159.216:56838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/x.php"] [unique_id "apK9GyJcY4fy7tP-rU31KAAAAms"]
[Sat Aug 29 05:06:03.346297 2026] [security2:error] [pid 1017536:tid 1017744] [client 158.23.147.79:58078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-includes/js/index.php"] [unique_id "apK9GyJcY4fy7tP-rU31LAAAAmI"]
[Sat Aug 29 05:06:03.369059 2026] [security2:error] [pid 1017536:tid 1017751] [client 20.48.250.41:59372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/export.php"] [unique_id "apK9GyJcY4fy7tP-rU31LgAAAmk"]
[Sat Aug 29 05:06:03.370159 2026] [security2:error] [pid 1018003:tid 1018262] [client 20.48.251.3:13994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/doc.php"] [unique_id "apK9GzAh5Y1i2tUxg4HtsQAABiY"]
[Sat Aug 29 05:06:03.371832 2026] [security2:error] [pid 1018003:tid 1018190] [client 20.48.251.3:61185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/groceries/index.php"] [unique_id "apK9GzAh5Y1i2tUxg4HtsgAABd8"]
[Sat Aug 29 05:06:03.373612 2026] [security2:error] [pid 1017536:tid 1017743] [client 158.23.147.79:24411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-includes/content.php"] [unique_id "apK9GyJcY4fy7tP-rU31LwAAAmE"]
[Sat Aug 29 05:06:03.389836 2026] [security2:error] [pid 1018003:tid 1018276] [client 40.83.93.50:12470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-admin/user/f35.php"] [unique_id "apK9GzAh5Y1i2tUxg4HtswAABjQ"]
[Sat Aug 29 05:06:03.396901 2026] [security2:error] [pid 1017536:tid 1017679] [client 4.205.62.107:56047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/thui.php"] [unique_id "apK9GyJcY4fy7tP-rU31MwAAAiE"]
[Sat Aug 29 05:06:03.405317 2026] [security2:error] [pid 1018003:tid 1018225] [client 20.197.61.180:13016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-admin/wp-load.php"] [unique_id "apK9GzAh5Y1i2tUxg4HttAAABgI"]
[Sat Aug 29 05:06:03.428009 2026] [security2:error] [pid 1018003:tid 1018258] [client 20.48.250.41:65061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/wp-style.php"] [unique_id "apK9GzAh5Y1i2tUxg4HttQAABiI"]
[Sat Aug 29 05:06:03.435634 2026] [security2:error] [pid 1018003:tid 1018163] [client 68.155.159.216:49190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9GzAh5Y1i2tUxg4HttgAABcQ"]
[Sat Aug 29 05:06:03.458694 2026] [security2:error] [pid 1017536:tid 1017731] [client 20.151.200.44:64941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/bgymj.php"] [unique_id "apK9GyJcY4fy7tP-rU31NgAAAlU"]
[Sat Aug 29 05:06:03.459457 2026] [security2:error] [pid 1017536:tid 1017760] [client 20.151.200.44:65504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/rce.php"] [unique_id "apK9GyJcY4fy7tP-rU31NwAAAnI"]
[Sat Aug 29 05:06:03.487834 2026] [security2:error] [pid 1017536:tid 1017789] [client 68.155.159.216:18307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK9GyJcY4fy7tP-rU31OAAAAo8"]
[Sat Aug 29 05:06:03.488666 2026] [security2:error] [pid 1017536:tid 1017668] [client 68.155.159.216:14177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK9GyJcY4fy7tP-rU31OQAAAhY"]
[Sat Aug 29 05:06:03.498679 2026] [security2:error] [pid 1017536:tid 1017781] [client 20.48.251.3:61648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/konfig.php"] [unique_id "apK9GyJcY4fy7tP-rU31OgAAAoc"]
[Sat Aug 29 05:06:03.503005 2026] [security2:error] [pid 1018003:tid 1018261] [client 20.48.250.41:62582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/gk.php"] [unique_id "apK9GzAh5Y1i2tUxg4HttwAABiU"]
[Sat Aug 29 05:06:03.516178 2026] [security2:error] [pid 1017536:tid 1017724] [client 40.83.93.50:3165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/room.php"] [unique_id "apK9GyJcY4fy7tP-rU31OwAAAk4"]
[Sat Aug 29 05:06:03.516319 2026] [security2:error] [pid 1017536:tid 1017683] [client 103.162.125.59:52495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.125.162.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK9GyJcY4fy7tP-rU31PAAAAiU"]
[Sat Aug 29 05:06:03.516400 2026] [security2:error] [pid 1017536:tid 1017683] [client 103.162.125.59:52495] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK9GyJcY4fy7tP-rU31PAAAAiU"]
[Sat Aug 29 05:06:03.530204 2026] [security2:error] [pid 1017536:tid 1017710] [client 20.151.200.44:46594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/baee.php"] [unique_id "apK9GyJcY4fy7tP-rU31PQAAAkA"]
[Sat Aug 29 05:06:03.551085 2026] [security2:error] [pid 1017536:tid 1017670] [client 111.235.68.106:11202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK9GyJcY4fy7tP-rU31QAAAAhg"]
[Sat Aug 29 05:06:03.551173 2026] [security2:error] [pid 1017536:tid 1017670] [client 111.235.68.106:11202] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK9GyJcY4fy7tP-rU31QAAAAhg"]
[Sat Aug 29 05:06:03.552560 2026] [security2:error] [pid 1017536:tid 1017673] [client 158.23.147.79:48142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK9GyJcY4fy7tP-rU31QQAAAhs"]
[Sat Aug 29 05:06:03.590520 2026] [security2:error] [pid 1018003:tid 1018233] [client 20.48.250.41:65066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/browse.php"] [unique_id "apK9GzAh5Y1i2tUxg4HtuAAABgk"]
[Sat Aug 29 05:06:03.601206 2026] [security2:error] [pid 1017536:tid 1017734] [client 20.151.200.44:64928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/exec.php"] [unique_id "apK9GyJcY4fy7tP-rU31SwAAAlg"]
[Sat Aug 29 05:06:03.611907 2026] [security2:error] [pid 1017536:tid 1017749] [client 158.23.147.79:32719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/goods.php"] [unique_id "apK9GyJcY4fy7tP-rU31TgAAAmc"]
[Sat Aug 29 05:06:03.614189 2026] [security2:error] [pid 1017536:tid 1017675] [client 168.107.94.195:65368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9GyJcY4fy7tP-rU31TwAAAh0"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:03.628804 2026] [security2:error] [pid 1017536:tid 1017704] [client 20.151.200.44:64942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/fh26.php"] [unique_id "apK9GyJcY4fy7tP-rU31UwAAAjo"]
[Sat Aug 29 05:06:03.629189 2026] [security2:error] [pid 1017536:tid 1017725] [client 20.48.251.3:61644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/paths.php"] [unique_id "apK9GyJcY4fy7tP-rU31VAAAAk8"]
[Sat Aug 29 05:06:03.633230 2026] [security2:error] [pid 1017536:tid 1017711] [client 20.48.250.41:62577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/logs1.php"] [unique_id "apK9GyJcY4fy7tP-rU31VQAAAkE"]
[Sat Aug 29 05:06:03.661499 2026] [security2:error] [pid 1017536:tid 1017772] [client 20.52.41.200:1742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-content/themes/admin.php"] [unique_id "apK9GyJcY4fy7tP-rU31VwAAAn4"]
[Sat Aug 29 05:06:03.686018 2026] [security2:error] [pid 1018003:tid 1018202] [client 20.48.251.3:14047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/css.php"] [unique_id "apK9GzAh5Y1i2tUxg4HtvAAABes"]
[Sat Aug 29 05:06:03.699196 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.151.200.44:46545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/d12.php"] [unique_id "apK9GzAh5Y1i2tUxg4HtvQAABcI"]
[Sat Aug 29 05:06:03.713290 2026] [security2:error] [pid 1017536:tid 1017784] [client 158.158.54.35:19508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/system_log.php"] [unique_id "apK9GyJcY4fy7tP-rU31WQAAAoo"]
[Sat Aug 29 05:06:03.713290 2026] [security2:error] [pid 1018003:tid 1018200] [client 74.248.24.12:29533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK9GzAh5Y1i2tUxg4HtvgAABek"]
[Sat Aug 29 05:06:03.754209 2026] [security2:error] [pid 1018003:tid 1018184] [client 20.48.250.41:65032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/zoo.php"] [unique_id "apK9GzAh5Y1i2tUxg4HtwQAABdk"]
[Sat Aug 29 05:06:03.760782 2026] [security2:error] [pid 1017536:tid 1017686] [client 20.48.251.3:62098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/olfclass.php"] [unique_id "apK9GyJcY4fy7tP-rU31WwAAAig"]
[Sat Aug 29 05:06:03.791685 2026] [security2:error] [pid 1017536:tid 1017730] [client 20.151.200.44:64259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/dbc.php"] [unique_id "apK9GyJcY4fy7tP-rU31YAAAAlQ"]
[Sat Aug 29 05:06:03.797580 2026] [security2:error] [pid 1017536:tid 1017743] [client 20.48.250.41:62581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/inege.php"] [unique_id "apK9GyJcY4fy7tP-rU31YgAAAmE"]
[Sat Aug 29 05:06:03.800457 2026] [security2:error] [pid 1017536:tid 1017721] [client 68.155.159.216:16143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/xmlrpc.php"] [unique_id "apK9GyJcY4fy7tP-rU31YwAAAks"]
[Sat Aug 29 05:06:03.831720 2026] [security2:error] [pid 1017536:tid 1017717] [client 20.151.200.44:47351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/yyy.php"] [unique_id "apK9GyJcY4fy7tP-rU31ZAAAAkc"]
[Sat Aug 29 05:06:03.836785 2026] [security2:error] [pid 1017536:tid 1017689] [client 158.23.147.79:50057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/nf_tracking.php"] [unique_id "apK9GyJcY4fy7tP-rU31ZQAAAis"]
[Sat Aug 29 05:06:03.844545 2026] [security2:error] [pid 1018003:tid 1018164] [client 4.205.62.107:61855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/txets.php"] [unique_id "apK9GzAh5Y1i2tUxg4HtwwAABcU"]
[Sat Aug 29 05:06:03.859833 2026] [security2:error] [pid 1018003:tid 1018206] [client 158.23.147.79:30670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK9GzAh5Y1i2tUxg4HtxQAABe8"]
[Sat Aug 29 05:06:03.870329 2026] [security2:error] [pid 1017536:tid 1017785] [client 40.83.93.50:22228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-admin/user/min.php"] [unique_id "apK9GyJcY4fy7tP-rU31ZgAAAos"]
[Sat Aug 29 05:06:03.871788 2026] [security2:error] [pid 1018003:tid 1018194] [client 20.104.49.130:30056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/dk.php"] [unique_id "apK9GzAh5Y1i2tUxg4HtxgAABeM"]
[Sat Aug 29 05:06:03.882767 2026] [security2:error] [pid 1018003:tid 1018268] [client 158.23.147.79:25553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/login.php"] [unique_id "apK9GzAh5Y1i2tUxg4HtxwAABiw"]
[Sat Aug 29 05:06:03.884945 2026] [security2:error] [pid 1018003:tid 1018235] [client 68.155.159.216:51251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK9GzAh5Y1i2tUxg4HtyAAABgs"]
[Sat Aug 29 05:06:03.889397 2026] [security2:error] [pid 1018003:tid 1018151] [client 20.48.251.3:61692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/gnmlc.php"] [unique_id "apK9GzAh5Y1i2tUxg4HtyQAABbg"]
[Sat Aug 29 05:06:03.899381 2026] [security2:error] [pid 1018003:tid 1018252] [client 20.48.250.41:65070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/elp.php"] [unique_id "apK9GzAh5Y1i2tUxg4HtygAABhw"]
[Sat Aug 29 05:06:03.929217 2026] [security2:error] [pid 1018003:tid 1018257] [client 20.48.250.41:62500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/wp-link10.php"] [unique_id "apK9GzAh5Y1i2tUxg4HtywAABiE"]
[Sat Aug 29 05:06:03.994133 2026] [security2:error] [pid 1017536:tid 1017789] [client 168.107.94.195:49343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9GyJcY4fy7tP-rU31ZwAAAo8"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:04.011579 2026] [security2:error] [pid 1018003:tid 1018220] [client 40.83.93.50:3150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/class-wp-cmd.php"] [unique_id "apK9HDAh5Y1i2tUxg4HtzAAABf0"]
[Sat Aug 29 05:06:04.012898 2026] [security2:error] [pid 1017536:tid 1017786] [client 20.151.200.44:46646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/bgymj.php"] [unique_id "apK9HCJcY4fy7tP-rU31aAAAAow"]
[Sat Aug 29 05:06:04.017688 2026] [security2:error] [pid 1017536:tid 1017765] [client 20.48.251.3:62120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/koiy.php"] [unique_id "apK9HCJcY4fy7tP-rU31bAAAAnc"]
[Sat Aug 29 05:06:04.069275 2026] [security2:error] [pid 1017536:tid 1017708] [client 20.48.250.41:65060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/666.php"] [unique_id "apK9HCJcY4fy7tP-rU31bQAAAj4"]
[Sat Aug 29 05:06:04.078493 2026] [security2:error] [pid 1017536:tid 1017748] [client 4.205.62.107:21848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/dialog.php"] [unique_id "apK9HCJcY4fy7tP-rU31bgAAAmY"]
[Sat Aug 29 05:06:04.078602 2026] [security2:error] [pid 1017536:tid 1017670] [client 158.23.147.79:30530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-content/admin.php"] [unique_id "apK9HCJcY4fy7tP-rU31bwAAAhg"]
[Sat Aug 29 05:06:04.082040 2026] [security2:error] [pid 1017536:tid 1017680] [client 4.205.62.107:53431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/environment.php"] [unique_id "apK9HCJcY4fy7tP-rU31cAAAAiI"]
[Sat Aug 29 05:06:04.095274 2026] [security2:error] [pid 1017536:tid 1017770] [client 20.151.200.44:64949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/wp-wlx.php"] [unique_id "apK9HCJcY4fy7tP-rU31cQAAAnw"]
[Sat Aug 29 05:06:04.105810 2026] [security2:error] [pid 1017536:tid 1017706] [client 20.52.41.200:1764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-admin/css/admin.php"] [unique_id "apK9HCJcY4fy7tP-rU31dAAAAjw"]
[Sat Aug 29 05:06:04.111246 2026] [security2:error] [pid 1018003:tid 1018173] [client 20.197.61.180:5851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-admin/wp-mail.php"] [unique_id "apK9HDAh5Y1i2tUxg4HtzwAABc4"]
[Sat Aug 29 05:06:04.118793 2026] [security2:error] [pid 1018003:tid 1018263] [client 20.151.200.44:64931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/fgd.php"] [unique_id "apK9HDAh5Y1i2tUxg4Ht0AAABic"]
[Sat Aug 29 05:06:04.126216 2026] [security2:error] [pid 1017536:tid 1017675] [client 4.205.62.107:22243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/server_info.php"] [unique_id "apK9HCJcY4fy7tP-rU31dQAAAh0"]
[Sat Aug 29 05:06:04.126633 2026] [security2:error] [pid 1017536:tid 1017715] [client 68.155.159.216:50279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/.well-known/content.php"] [unique_id "apK9HCJcY4fy7tP-rU31dgAAAkU"]
[Sat Aug 29 05:06:04.136608 2026] [security2:error] [pid 1017536:tid 1017704] [client 4.205.62.107:26682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/public/vx.php"] [unique_id "apK9HCJcY4fy7tP-rU31eAAAAjo"]
[Sat Aug 29 05:06:04.142520 2026] [security2:error] [pid 1017536:tid 1017711] [client 20.48.251.3:61646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/w.php"] [unique_id "apK9HCJcY4fy7tP-rU31eQAAAkE"]
[Sat Aug 29 05:06:04.142724 2026] [security2:error] [pid 1017536:tid 1017681] [client 66.248.203.2:61874] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cheerfulmonk.com"] [uri "/2007/11/11/what-i-learned-from-being-downsized/"] [unique_id "apK9HCJcY4fy7tP-rU31egAAAiM"]
[Sat Aug 29 05:06:04.144414 2026] [security2:error] [pid 1017536:tid 1017775] [client 68.155.159.216:52859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/chosen.php"] [unique_id "apK9HCJcY4fy7tP-rU31ewAAAoE"]
[Sat Aug 29 05:06:04.145933 2026] [security2:error] [pid 1017536:tid 1017755] [client 20.151.200.44:47311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/fh26.php"] [unique_id "apK9HCJcY4fy7tP-rU31fAAAAm0"]
[Sat Aug 29 05:06:04.155106 2026] [security2:error] [pid 1017536:tid 1017668] [client 158.158.54.35:16007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/24.php"] [unique_id "apK9HCJcY4fy7tP-rU31fQAAAhY"]
[Sat Aug 29 05:06:04.156319 2026] [security2:error] [pid 1017536:tid 1017696] [client 20.48.250.41:59277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/ww.php"] [unique_id "apK9HCJcY4fy7tP-rU31fgAAAjI"]
[Sat Aug 29 05:06:04.160922 2026] [security2:error] [pid 1017536:tid 1017698] [client 4.205.62.107:2309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.mcdcomputers.net"] [uri "/ah25.php"] [unique_id "apK9HCJcY4fy7tP-rU31fwAAAjQ"]
[Sat Aug 29 05:06:04.223811 2026] [security2:error] [pid 1018003:tid 1018160] [client 20.48.250.41:65124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/knmt.php"] [unique_id "apK9HDAh5Y1i2tUxg4Ht0wAABcE"]
[Sat Aug 29 05:06:04.268441 2026] [security2:error] [pid 1017536:tid 1017686] [client 20.48.251.3:61639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/btx25.php"] [unique_id "apK9HCJcY4fy7tP-rU31iwAAAig"]
[Sat Aug 29 05:06:04.280343 2026] [security2:error] [pid 1017536:tid 1017722] [client 20.48.251.3:14332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/php_info.php"] [unique_id "apK9HCJcY4fy7tP-rU31jAAAAkw"]
[Sat Aug 29 05:06:04.329985 2026] [security2:error] [pid 1018003:tid 1018218] [client 158.23.147.79:35800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-admin/about.php"] [unique_id "apK9HDAh5Y1i2tUxg4Ht2AAABfs"]
[Sat Aug 29 05:06:04.330789 2026] [security2:error] [pid 1017536:tid 1017777] [client 74.248.24.12:31563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "falloutgroup.johnharveymusic.com"] [uri "/wp-admin.php"] [unique_id "apK9HCJcY4fy7tP-rU31jQAAAoM"]
[Sat Aug 29 05:06:04.332769 2026] [security2:error] [pid 1017536:tid 1017776] [client 20.48.250.41:62575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/w1px.php"] [unique_id "apK9HCJcY4fy7tP-rU31jgAAAoI"]
[Sat Aug 29 05:06:04.333908 2026] [security2:error] [pid 1017536:tid 1017782] [client 20.151.200.44:47360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/fgd.php"] [unique_id "apK9HCJcY4fy7tP-rU31jwAAAog"]
[Sat Aug 29 05:06:04.336679 2026] [security2:error] [pid 1017536:tid 1017740] [client 40.83.93.50:5949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-admin/users.php"] [unique_id "apK9HCJcY4fy7tP-rU31kAAAAl4"]
[Sat Aug 29 05:06:04.355010 2026] [security2:error] [pid 1017536:tid 1017705] [client 20.48.250.41:65105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/sbhu.php"] [unique_id "apK9HCJcY4fy7tP-rU31kQAAAjs"]
[Sat Aug 29 05:06:04.372814 2026] [security2:error] [pid 1017536:tid 1017679] [client 168.107.94.195:49644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9HCJcY4fy7tP-rU31kgAAAiE"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:04.393899 2026] [security2:error] [pid 1017536:tid 1017689] [client 20.48.251.3:61674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/app_dev.php"] [unique_id "apK9HCJcY4fy7tP-rU31lAAAAis"]
[Sat Aug 29 05:06:04.428714 2026] [security2:error] [pid 1018003:tid 1018152] [client 20.151.200.44:65497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/attack.php"] [unique_id "apK9HDAh5Y1i2tUxg4Ht2gAABbk"]
[Sat Aug 29 05:06:04.441965 2026] [security2:error] [pid 1017536:tid 1017760] [client 4.205.62.107:22212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/min.php"] [unique_id "apK9HCJcY4fy7tP-rU31lgAAAnI"]
[Sat Aug 29 05:06:04.448722 2026] [security2:error] [pid 1017536:tid 1017729] [client 68.155.159.216:58322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/wp-content/x.php"] [unique_id "apK9HCJcY4fy7tP-rU31lwAAAlM"]
[Sat Aug 29 05:06:04.481551 2026] [security2:error] [pid 1017536:tid 1017789] [client 158.23.147.79:24457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-admin/css/index.php"] [unique_id "apK9HCJcY4fy7tP-rU31mgAAAo8"]
[Sat Aug 29 05:06:04.489598 2026] [security2:error] [pid 1017536:tid 1017743] [client 40.83.93.50:8032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/disagreed.php"] [unique_id "apK9HCJcY4fy7tP-rU31mwAAAmE"]
[Sat Aug 29 05:06:04.507379 2026] [security2:error] [pid 1017536:tid 1017765] [client 158.23.147.79:63012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-content/index.php"] [unique_id "apK9HCJcY4fy7tP-rU31nAAAAnc"]
[Sat Aug 29 05:06:04.517826 2026] [security2:error] [pid 1017536:tid 1017688] [client 20.48.250.41:64264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/a332.php"] [unique_id "apK9HCJcY4fy7tP-rU31nQAAAio"]
[Sat Aug 29 05:06:04.521257 2026] [security2:error] [pid 1018003:tid 1018170] [client 20.48.251.3:62107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/php-info.php"] [unique_id "apK9HDAh5Y1i2tUxg4Ht2wAABcs"]
[Sat Aug 29 05:06:04.531137 2026] [security2:error] [pid 1018003:tid 1018246] [client 20.48.250.41:60795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/to.php"] [unique_id "apK9HDAh5Y1i2tUxg4Ht3AAABhY"]
[Sat Aug 29 05:06:04.534794 2026] [security2:error] [pid 1017536:tid 1017708] [client 4.205.62.107:56035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/lala.php"] [unique_id "apK9HCJcY4fy7tP-rU31ngAAAj4"]
[Sat Aug 29 05:06:04.535890 2026] [security2:error] [pid 1018003:tid 1018231] [client 20.151.200.44:47407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/inject.php"] [unique_id "apK9HDAh5Y1i2tUxg4Ht3QAABgc"]
[Sat Aug 29 05:06:04.553524 2026] [security2:error] [pid 1018003:tid 1018189] [client 20.104.49.130:60950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/css.php"] [unique_id "apK9HDAh5Y1i2tUxg4Ht3gAABd4"]
[Sat Aug 29 05:06:04.560498 2026] [security2:error] [pid 1017536:tid 1017684] [client 20.52.41.200:1738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/adminfuns.php"] [unique_id "apK9HCJcY4fy7tP-rU31oAAAAiY"]
[Sat Aug 29 05:06:04.589112 2026] [security2:error] [pid 1017536:tid 1017772] [client 68.155.159.216:14291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK9HCJcY4fy7tP-rU31owAAAn4"]
[Sat Aug 29 05:06:04.601394 2026] [security2:error] [pid 1017536:tid 1017784] [client 68.155.159.216:49154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK9HCJcY4fy7tP-rU31pQAAAoo"]
[Sat Aug 29 05:06:04.605897 2026] [security2:error] [pid 1017536:tid 1017737] [client 20.151.200.44:64312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/inject.php"] [unique_id "apK9HCJcY4fy7tP-rU31pgAAAls"]
[Sat Aug 29 05:06:04.642970 2026] [security2:error] [pid 1017536:tid 1017792] [client 20.48.250.41:65138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/ws66.php"] [unique_id "apK9HCJcY4fy7tP-rU31pwAAApI"]
[Sat Aug 29 05:06:04.649766 2026] [security2:error] [pid 1017536:tid 1017746] [client 20.48.251.3:61184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/infos.php"] [unique_id "apK9HCJcY4fy7tP-rU31qQAAAmQ"]
[Sat Aug 29 05:06:04.665926 2026] [security2:error] [pid 1018003:tid 1018172] [client 20.48.250.41:62468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/thui.php"] [unique_id "apK9HDAh5Y1i2tUxg4Ht4QAABc0"]
[Sat Aug 29 05:06:04.666968 2026] [security2:error] [pid 1018003:tid 1018184] [client 158.23.147.79:48236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK9HDAh5Y1i2tUxg4Ht4gAABdk"]
[Sat Aug 29 05:06:04.698174 2026] [security2:error] [pid 1017536:tid 1017691] [client 20.151.200.44:65505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/file66.php"] [unique_id "apK9HCJcY4fy7tP-rU31rQAAAi0"]
[Sat Aug 29 05:06:04.709991 2026] [security2:error] [pid 1017536:tid 1017667] [client 34.7.216.49:49406] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "webdisk.bridgewaycentretrust.org"] [uri "/app/config.json"] [unique_id "apK9HCJcY4fy7tP-rU31sQAAAhU"]
[Sat Aug 29 05:06:04.711101 2026] [security2:error] [pid 1017536:tid 1017783] [client 34.7.216.49:49422] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "webdisk.bridgewaycentretrust.org"] [uri "/backend/config.json"] [unique_id "apK9HCJcY4fy7tP-rU31sgAAAok"]
[Sat Aug 29 05:06:04.713160 2026] [security2:error] [pid 1018003:tid 1018217] [client 34.7.216.49:49510] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "webdisk.bridgewaycentretrust.org"] [uri "/config/application.yml"] [unique_id "apK9HDAh5Y1i2tUxg4Ht6AAABfo"]
[Sat Aug 29 05:06:04.714618 2026] [security2:error] [pid 1017536:tid 1017764] [client 34.7.216.49:49550] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "webdisk.bridgewaycentretrust.org"] [uri "/secrets/aws.json"] [unique_id "apK9HCJcY4fy7tP-rU31tgAAAnY"]
[Sat Aug 29 05:06:04.720351 2026] [security2:error] [pid 1018003:tid 1018225] [client 34.7.216.49:49612] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "webdisk.bridgewaycentretrust.org"] [uri "/secrets.yaml"] [unique_id "apK9HDAh5Y1i2tUxg4Ht8AAABgI"]
[Sat Aug 29 05:06:04.722501 2026] [security2:error] [pid 1017536:tid 1017711] [client 34.7.216.49:49648] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "webdisk.bridgewaycentretrust.org"] [uri "/app/settings.py"] [unique_id "apK9HCJcY4fy7tP-rU31vwAAAkE"]
[Sat Aug 29 05:06:04.726491 2026] [security2:error] [pid 1018003:tid 1018194] [client 158.23.147.79:32749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK9HDAh5Y1i2tUxg4Ht9QAABeM"]
[Sat Aug 29 05:06:04.729306 2026] [security2:error] [pid 1017536:tid 1017789] [client 20.151.200.44:46549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/mga.php"] [unique_id "apK9HCJcY4fy7tP-rU31wQAAAo8"]
[Sat Aug 29 05:06:04.747394 2026] [security2:error] [pid 1018003:tid 1018268] [client 158.158.54.35:5022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-content/plugins/index.php"] [unique_id "apK9HDAh5Y1i2tUxg4Ht9wAABiw"]
[Sat Aug 29 05:06:04.753863 2026] [security2:error] [pid 1018003:tid 1018235] [client 168.107.94.195:49988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9HDAh5Y1i2tUxg4Ht-AAABgs"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:04.759665 2026] [security2:error] [pid 1017536:tid 1017693] [client 57.141.14.77:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/"] [unique_id "apK9HCJcY4fy7tP-rU31xAAAAi8"]
[Sat Aug 29 05:06:04.771014 2026] [security2:error] [pid 1017536:tid 1017586] [remote 34.138.144.127:57742] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "old.theenprogroup.com"] [uri "/src/.env"] [unique_id "apK9HCJcY4fy7tP-rU31xgACTTE"]
[Sat Aug 29 05:06:04.780052 2026] [proxy_http:error] [pid 1017536:tid 1017754] (20014)Internal error (specific information not available): [client 34.21.253.104:29574] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:04.780067 2026] [proxy:error] [pid 1017536:tid 1017754] [client 34.21.253.104:29574] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/config.js
[Sat Aug 29 05:06:04.781228 2026] [security2:error] [pid 1017536:tid 1017688] [client 20.48.251.3:61666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/env.php"] [unique_id "apK9HCJcY4fy7tP-rU31zAAAAio"]
[Sat Aug 29 05:06:04.782267 2026] [security2:error] [pid 1018003:tid 1018238] [client 20.48.250.41:65108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/ws68.php"] [unique_id "apK9HDAh5Y1i2tUxg4Ht_gAABg4"]
[Sat Aug 29 05:06:04.783290 2026] [proxy_http:error] [pid 1018003:tid 1018187] (20014)Internal error (specific information not available): [client 34.21.253.104:29560] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:04.783304 2026] [proxy:error] [pid 1018003:tid 1018187] [client 34.21.253.104:29560] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/secrets.json
[Sat Aug 29 05:06:04.787585 2026] [proxy_http:error] [pid 1017536:tid 1017685] (20014)Internal error (specific information not available): [client 34.21.253.104:29564] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:04.787595 2026] [proxy:error] [pid 1017536:tid 1017685] [client 34.21.253.104:29564] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/config.json
[Sat Aug 29 05:06:04.787677 2026] [security2:error] [pid 1018003:tid 1018165] [client 34.21.253.104:29766] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cpanel.replenishink.com"] [uri "/.ssh/id_ecdsa"] [unique_id "apK9HDAh5Y1i2tUxg4HuAQAABcY"]
[Sat Aug 29 05:06:04.790614 2026] [security2:error] [pid 1018003:tid 1018182] [client 34.21.253.104:29702] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cpanel.replenishink.com"] [uri "/__/firebase/init.json"] [unique_id "apK9HDAh5Y1i2tUxg4HuBQAABdc"]
[Sat Aug 29 05:06:04.791703 2026] [security2:error] [pid 1017536:tid 1017745] [client 34.21.253.104:29728] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "cpanel.replenishink.com"] [uri "/gcp-key.json"] [unique_id "apK9HCJcY4fy7tP-rU312AAAAmM"]
[Sat Aug 29 05:06:04.794915 2026] [proxy_http:error] [pid 1017536:tid 1017761] (20014)Internal error (specific information not available): [client 34.21.253.104:29626] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:04.794930 2026] [proxy:error] [pid 1017536:tid 1017761] [client 34.21.253.104:29626] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/api/env
[Sat Aug 29 05:06:04.799176 2026] [proxy_http:error] [pid 1018003:tid 1018187] (20014)Internal error (specific information not available): [client 34.21.253.104:29560] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:04.799186 2026] [proxy:error] [pid 1018003:tid 1018187] [client 34.21.253.104:29560] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/502.shtml
[Sat Aug 29 05:06:04.801366 2026] [proxy_http:error] [pid 1017536:tid 1017753] (20014)Internal error (specific information not available): [client 34.21.253.104:29604] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:04.801378 2026] [proxy:error] [pid 1017536:tid 1017753] [client 34.21.253.104:29604] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/runtime-config.js
[Sat Aug 29 05:06:04.806670 2026] [proxy_http:error] [pid 1018003:tid 1018265] (20014)Internal error (specific information not available): [client 34.21.253.104:29638] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:04.806681 2026] [proxy:error] [pid 1018003:tid 1018265] [client 34.21.253.104:29638] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/api/v1/config
[Sat Aug 29 05:06:04.808317 2026] [proxy_http:error] [pid 1017536:tid 1017781] (20014)Internal error (specific information not available): [client 34.21.253.104:29678] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:04.808325 2026] [proxy:error] [pid 1017536:tid 1017781] [client 34.21.253.104:29678] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/firebase-adminsdk.json
[Sat Aug 29 05:06:04.809205 2026] [security2:error] [pid 1018003:tid 1018212] [client 20.48.250.41:62546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/Jcrop.php"] [unique_id "apK9HDAh5Y1i2tUxg4HuCgAABfU"]
[Sat Aug 29 05:06:04.812625 2026] [proxy_http:error] [pid 1018003:tid 1018230] (20014)Internal error (specific information not available): [client 34.21.253.104:29788] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:04.812636 2026] [proxy:error] [pid 1018003:tid 1018230] [client 34.21.253.104:29788] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/.ssh/config
[Sat Aug 29 05:06:04.814779 2026] [proxy_http:error] [pid 1017536:tid 1017724] (20014)Internal error (specific information not available): [client 34.21.253.104:29688] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:04.814789 2026] [proxy:error] [pid 1017536:tid 1017724] [client 34.21.253.104:29688] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/firebase-config.json
[Sat Aug 29 05:06:04.818682 2026] [proxy_http:error] [pid 1018003:tid 1018192] (20014)Internal error (specific information not available): [client 34.21.253.104:29752] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:04.818696 2026] [proxy:error] [pid 1018003:tid 1018192] [client 34.21.253.104:29752] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/.ssh/id_rsa
[Sat Aug 29 05:06:04.820544 2026] [proxy_http:error] [pid 1017536:tid 1017752] (20014)Internal error (specific information not available): [client 34.21.253.104:29724] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:04.820560 2026] [proxy:error] [pid 1017536:tid 1017752] [client 34.21.253.104:29724] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/google-credentials.json
[Sat Aug 29 05:06:04.825059 2026] [proxy_http:error] [pid 1018003:tid 1018161] (20014)Internal error (specific information not available): [client 34.21.253.104:29746] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:04.825071 2026] [proxy:error] [pid 1018003:tid 1018161] [client 34.21.253.104:29746] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/keys/service-account.json
[Sat Aug 29 05:06:04.830683 2026] [security2:error] [pid 1018003:tid 1018222] [client 20.197.61.180:16351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-admin/wp-settings.php"] [unique_id "apK9HDAh5Y1i2tUxg4HuDQAABf8"]
[Sat Aug 29 05:06:04.830850 2026] [security2:error] [pid 1017536:tid 1017740] [client 40.83.93.50:12464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-admin/wp-cron.php"] [unique_id "apK9HCJcY4fy7tP-rU312QAAAl4"]
[Sat Aug 29 05:06:04.884850 2026] [security2:error] [pid 1017536:tid 1017737] [client 20.151.200.44:46565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/inwp.php"] [unique_id "apK9HCJcY4fy7tP-rU312gAAAls"]
[Sat Aug 29 05:06:04.905707 2026] [security2:error] [pid 1017536:tid 1017722] [client 68.155.159.216:16289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/atomlib.php"] [unique_id "apK9HCJcY4fy7tP-rU313QAAAkw"]
[Sat Aug 29 05:06:04.911319 2026] [security2:error] [pid 1017536:tid 1017751] [client 20.48.251.3:61641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/xve22.php"] [unique_id "apK9HCJcY4fy7tP-rU313gAAAmk"]
[Sat Aug 29 05:06:04.929257 2026] [security2:error] [pid 1017536:tid 1017650] [remote 34.138.144.127:57742] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "old.theenprogroup.com"] [uri "/frontend/.env"] [unique_id "apK9HCJcY4fy7tP-rU313wACZHE"]
[Sat Aug 29 05:06:04.942674 2026] [security2:error] [pid 1017536:tid 1017777] [client 20.48.250.41:62514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/ws58.php"] [unique_id "apK9HCJcY4fy7tP-rU314AAAAoM"]
[Sat Aug 29 05:06:04.947242 2026] [security2:error] [pid 1017536:tid 1017662] [remote 34.138.144.127:57742] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "old.theenprogroup.com"] [uri "/app/.env"] [unique_id "apK9HCJcY4fy7tP-rU314QACgn0"]
[Sat Aug 29 05:06:04.950992 2026] [security2:error] [pid 1017536:tid 1017679] [client 20.48.250.41:65104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/users.php"] [unique_id "apK9HCJcY4fy7tP-rU314gAAAiE"]
[Sat Aug 29 05:06:04.952935 2026] [security2:error] [pid 1017536:tid 1017736] [client 20.104.49.130:34508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/abcd.php"] [unique_id "apK9HCJcY4fy7tP-rU314wAAAlo"]
[Sat Aug 29 05:06:04.968053 2026] [security2:error] [pid 1018003:tid 1018213] [client 158.23.147.79:30625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/xmlrpc.php"] [unique_id "apK9HDAh5Y1i2tUxg4HuDwAABfY"]
[Sat Aug 29 05:06:04.974381 2026] [security2:error] [pid 1017536:tid 1017783] [client 4.205.62.107:64258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/time.php"] [unique_id "apK9HCJcY4fy7tP-rU315gAAAok"]
[Sat Aug 29 05:06:04.989697 2026] [security2:error] [pid 1017536:tid 1017673] [client 158.23.147.79:25552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/hehehehe.php"] [unique_id "apK9HCJcY4fy7tP-rU316AAAAhs"]
[Sat Aug 29 05:06:05.015158 2026] [security2:error] [pid 1018003:tid 1018227] [client 20.52.41.200:1782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/goods.php"] [unique_id "apK9HTAh5Y1i2tUxg4HuEAAABgQ"]
[Sat Aug 29 05:06:05.040242 2026] [security2:error] [pid 1018003:tid 1018267] [client 20.48.251.3:61669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/06.php"] [unique_id "apK9HTAh5Y1i2tUxg4HuEwAABis"]
[Sat Aug 29 05:06:05.044766 2026] [security2:error] [pid 1017536:tid 1017683] [client 68.155.159.216:51250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-login.php"] [unique_id "apK9HSJcY4fy7tP-rU317QAAAiU"]
[Sat Aug 29 05:06:05.076452 2026] [security2:error] [pid 1017536:tid 1017707] [client 20.48.250.41:60682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/xs.php"] [unique_id "apK9HSJcY4fy7tP-rU317wAAAj0"]
[Sat Aug 29 05:06:05.089848 2026] [security2:error] [pid 1017536:tid 1017721] [client 40.83.93.50:3138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/class_api.php"] [unique_id "apK9HSJcY4fy7tP-rU318QAAAks"]
[Sat Aug 29 05:06:05.092080 2026] [security2:error] [pid 1018003:tid 1018218] [client 20.48.250.41:64334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/bzjdlofz.php"] [unique_id "apK9HTAh5Y1i2tUxg4HuFAAABfs"]
[Sat Aug 29 05:06:05.094701 2026] [security2:error] [pid 1017536:tid 1017698] [client 20.151.200.44:45972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/ad1.php"] [unique_id "apK9HSJcY4fy7tP-rU318gAAAjQ"]
[Sat Aug 29 05:06:05.133707 2026] [security2:error] [pid 1018003:tid 1018246] [client 168.107.94.195:50384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9HTAh5Y1i2tUxg4HuFQAABhY"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:05.145508 2026] [security2:error] [pid 1017536:tid 1017581] [remote 34.138.144.127:57742] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "old.theenprogroup.com"] [uri "/server/.env"] [unique_id "apK9HSJcY4fy7tP-rU318wACRiw"]
[Sat Aug 29 05:06:05.152162 2026] [security2:error] [pid 1017536:tid 1017616] [remote 34.138.144.127:57742] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "old.theenprogroup.com"] [uri "/production/.env"] [unique_id "apK9HSJcY4fy7tP-rU319AACRU8"]
[Sat Aug 29 05:06:05.161000 2026] [security2:error] [pid 1018003:tid 1018262] [client 20.196.209.81:5541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-admin/network/xmrlpc.php"] [unique_id "apK9HTAh5Y1i2tUxg4HuGAAABiY"]
[Sat Aug 29 05:06:05.169124 2026] [security2:error] [pid 1017536:tid 1017669] [client 20.48.251.3:61645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/xin1.php"] [unique_id "apK9HSJcY4fy7tP-rU319QAAAhc"]
[Sat Aug 29 05:06:05.204958 2026] [security2:error] [pid 1017536:tid 1017754] [client 20.48.250.41:60741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/zu.php"] [unique_id "apK9HSJcY4fy7tP-rU31-gAAAmw"]
[Sat Aug 29 05:06:05.217029 2026] [security2:error] [pid 1017536:tid 1017695] [client 4.205.62.107:22363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/doc.php"] [unique_id "apK9HSJcY4fy7tP-rU31-wAAAjE"]
[Sat Aug 29 05:06:05.226519 2026] [security2:error] [pid 1018003:tid 1018203] [client 4.205.62.107:53419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/koiy.php"] [unique_id "apK9HTAh5Y1i2tUxg4HuGwAABew"]
[Sat Aug 29 05:06:05.234622 2026] [security2:error] [pid 1017536:tid 1017753] [client 68.155.159.216:50222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/cong.php"] [unique_id "apK9HSJcY4fy7tP-rU31_QAAAms"]
[Sat Aug 29 05:06:05.249013 2026] [security2:error] [pid 1018003:tid 1018200] [client 158.23.147.79:30693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/atomlib.php"] [unique_id "apK9HTAh5Y1i2tUxg4HuHQAABek"]
[Sat Aug 29 05:06:05.259199 2026] [security2:error] [pid 1017536:tid 1017724] [client 20.151.200.44:46534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/1vbqo.php"] [unique_id "apK9HSJcY4fy7tP-rU32AAAAAk4"]
[Sat Aug 29 05:06:05.262605 2026] [security2:error] [pid 1017536:tid 1017725] [client 20.48.250.41:64337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/selesai.php"] [unique_id "apK9HSJcY4fy7tP-rU32AgAAAk8"]
[Sat Aug 29 05:06:05.264732 2026] [security2:error] [pid 1017536:tid 1017752] [client 4.205.62.107:21576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/87.php"] [unique_id "apK9HSJcY4fy7tP-rU32AwAAAmo"]
[Sat Aug 29 05:06:05.293111 2026] [security2:error] [pid 1017536:tid 1017668] [client 20.220.204.93:65016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9HSJcY4fy7tP-rU32BgAAAhY"]
[Sat Aug 29 05:06:05.297628 2026] [security2:error] [pid 1017536:tid 1017784] [client 20.48.251.3:61075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/sadd.php"] [unique_id "apK9HSJcY4fy7tP-rU32BwAAAoo"]
[Sat Aug 29 05:06:05.302181 2026] [security2:error] [pid 1017536:tid 1017775] [client 4.205.62.107:65443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/log.php"] [unique_id "apK9HSJcY4fy7tP-rU32CAAAAoE"]
[Sat Aug 29 05:06:05.306781 2026] [security2:error] [pid 1017536:tid 1017788] [client 20.151.200.44:64887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/mga.php"] [unique_id "apK9HSJcY4fy7tP-rU32CgAAAo4"]
[Sat Aug 29 05:06:05.309303 2026] [security2:error] [pid 1018003:tid 1018254] [client 20.151.200.44:64842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/zafir1.php"] [unique_id "apK9HTAh5Y1i2tUxg4HuIQAABh4"]
[Sat Aug 29 05:06:05.312620 2026] [security2:error] [pid 1017536:tid 1017660] [remote 34.138.144.127:57742] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "old.theenprogroup.com"] [uri "/docker/.env"] [unique_id "apK9HSJcY4fy7tP-rU32CwACSXs"]
[Sat Aug 29 05:06:05.313891 2026] [security2:error] [pid 1017536:tid 1017573] [remote 34.138.144.127:57742] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "old.theenprogroup.com"] [uri "/dev/.env"] [unique_id "apK9HSJcY4fy7tP-rU32DAACSSQ"]
[Sat Aug 29 05:06:05.315091 2026] [security2:error] [pid 1017536:tid 1017564] [remote 34.138.144.127:57742] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "old.theenprogroup.com"] [uri "/apps/.env"] [unique_id "apK9HSJcY4fy7tP-rU32DgACSRs"]
[Sat Aug 29 05:06:05.315512 2026] [security2:error] [pid 1017536:tid 1017602] [remote 34.138.144.127:57742] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "old.theenprogroup.com"] [uri "/staging/.env"] [unique_id "apK9HSJcY4fy7tP-rU32DQACSUE"]
[Sat Aug 29 05:06:05.317483 2026] [security2:error] [pid 1017536:tid 1017744] [client 40.83.93.50:12420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-admin/wp-links-opml.php"] [unique_id "apK9HSJcY4fy7tP-rU32DwAAAmI"]
[Sat Aug 29 05:06:05.367414 2026] [security2:error] [pid 1017536:tid 1017751] [client 195.178.110.247:46420] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1609"] [id "900942"] [msg "Invalid WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.path=http:///x"] [hostname "go.gracelife.org"] [uri "/index.php"] [unique_id "apK9HSJcY4fy7tP-rU32EAAAAmk"]
[Sat Aug 29 05:06:05.375508 2026] [security2:error] [pid 1017536:tid 1017655] [remote 34.138.144.127:57742] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "old.theenprogroup.com"] [uri "/v1/.env"] [unique_id "apK9HSJcY4fy7tP-rU32EgACO3Y"]
[Sat Aug 29 05:06:05.382430 2026] [security2:error] [pid 1017536:tid 1017589] [remote 34.138.144.127:57742] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "old.theenprogroup.com"] [uri "/v2/.env"] [unique_id "apK9HSJcY4fy7tP-rU32EwACgjQ"]
[Sat Aug 29 05:06:05.404469 2026] [security2:error] [pid 1018003:tid 1018275] [client 20.151.200.44:45464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/h02ugyh.php"] [unique_id "apK9HTAh5Y1i2tUxg4HuJwAABjM"]
[Sat Aug 29 05:06:05.423575 2026] [security2:error] [pid 1017536:tid 1017691] [client 20.48.251.3:61214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/application.config.php"] [unique_id "apK9HSJcY4fy7tP-rU32FQAAAi0"]
[Sat Aug 29 05:06:05.424183 2026] [security2:error] [pid 1018003:tid 1018191] [client 20.48.250.41:65036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/shlo.php"] [unique_id "apK9HTAh5Y1i2tUxg4HuKAAABeA"]
[Sat Aug 29 05:06:05.443761 2026] [security2:error] [pid 1018003:tid 1018226] [client 20.48.250.41:62504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/lanka.php"] [unique_id "apK9HTAh5Y1i2tUxg4HuKQAABgM"]
[Sat Aug 29 05:06:05.450114 2026] [security2:error] [pid 1018003:tid 1018264] [client 158.23.147.79:35720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK9HTAh5Y1i2tUxg4HuKgAABig"]
[Sat Aug 29 05:06:05.455859 2026] [security2:error] [pid 1018003:tid 1018195] [client 20.52.41.200:1770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/css.php"] [unique_id "apK9HTAh5Y1i2tUxg4HuKwAABeQ"]
[Sat Aug 29 05:06:05.458218 2026] [security2:error] [pid 1017536:tid 1017667] [client 68.155.159.216:51805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK9HSJcY4fy7tP-rU32FgAAAhU"]
[Sat Aug 29 05:06:05.475038 2026] [security2:error] [pid 1018003:tid 1018180] [client 20.220.204.93:64379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9HTAh5Y1i2tUxg4HuLgAABdU"]
[Sat Aug 29 05:06:05.514925 2026] [security2:error] [pid 1018003:tid 1018151] [client 158.158.54.35:19505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-admin/images/index.php"] [unique_id "apK9HTAh5Y1i2tUxg4HuLwAABbg"]
[Sat Aug 29 05:06:05.515448 2026] [security2:error] [pid 1017536:tid 1017711] [client 168.107.94.195:50788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9HSJcY4fy7tP-rU32FwAAAkE"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:05.528683 2026] [security2:error] [pid 1018003:tid 1018255] [client 195.178.110.247:52064] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1609"] [id "900942"] [msg "Invalid WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.path=http:///x"] [hostname "go.gracelife.org"] [uri "/index.php"] [unique_id "apK9HTAh5Y1i2tUxg4HuMAAABh8"]
[Sat Aug 29 05:06:05.528731 2026] [security2:error] [pid 1017536:tid 1017704] [client 20.197.61.180:17008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-admin/wp-signup.php"] [unique_id "apK9HSJcY4fy7tP-rU32GAAAAjo"]
[Sat Aug 29 05:06:05.548367 2026] [security2:error] [pid 1017536:tid 1017706] [client 20.48.251.3:61657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/xp.php"] [unique_id "apK9HSJcY4fy7tP-rU32GgAAAjw"]
[Sat Aug 29 05:06:05.556588 2026] [security2:error] [pid 1018003:tid 1018194] [client 20.196.209.81:5532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-admin/options-general.php"] [unique_id "apK9HTAh5Y1i2tUxg4HuMQAABeM"]
[Sat Aug 29 05:06:05.562659 2026] [security2:error] [pid 1017536:tid 1017736] [client 40.83.93.50:8055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/aksinet.php"] [unique_id "apK9HSJcY4fy7tP-rU32GwAAAlo"]
[Sat Aug 29 05:06:05.563097 2026] [security2:error] [pid 1018003:tid 1018182] [client 20.48.250.41:65087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/asax.php"] [unique_id "apK9HTAh5Y1i2tUxg4HuMgAABdc"]
[Sat Aug 29 05:06:05.565622 2026] [security2:error] [pid 1018003:tid 1018236] [client 20.151.200.44:64851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/console.php"] [unique_id "apK9HTAh5Y1i2tUxg4HuMwAABgw"]
[Sat Aug 29 05:06:05.572366 2026] [security2:error] [pid 1018003:tid 1018169] [client 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK9HTAh5Y1i2tUxg4HuLQAFyiw"]
[Sat Aug 29 05:06:05.581787 2026] [security2:error] [pid 1017536:tid 1017726] [client 4.205.62.107:22491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/saiga.php"] [unique_id "apK9HSJcY4fy7tP-rU32IAAAAlA"]
[Sat Aug 29 05:06:05.583201 2026] [security2:error] [pid 1017536:tid 1017755] [client 35.198.240.194:10424] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/.hermes/.env"] [unique_id "apK9HSJcY4fy7tP-rU32IQAAAm0"]
[Sat Aug 29 05:06:05.583637 2026] [security2:error] [pid 1017536:tid 1017717] [client 35.198.240.194:10490] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.omni-staffing.com"] [uri "/.config/anthropic/credentials/default.json"] [unique_id "apK9HSJcY4fy7tP-rU32JQAAAkc"]
[Sat Aug 29 05:06:05.584603 2026] [security2:error] [pid 1018003:tid 1018219] [client 35.198.240.194:10438] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/.openclaw/.env"] [unique_id "apK9HTAh5Y1i2tUxg4HuOQAABfw"]
[Sat Aug 29 05:06:05.587252 2026] [security2:error] [pid 1018003:tid 1018175] [client 158.23.147.79:24460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK9HTAh5Y1i2tUxg4HuPAAABdA"]
[Sat Aug 29 05:06:05.616555 2026] [security2:error] [pid 1017536:tid 1017687] [client 20.48.250.41:60799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/gettest.php"] [unique_id "apK9HSJcY4fy7tP-rU32KwAAAik"]
[Sat Aug 29 05:06:05.651813 2026] [security2:error] [pid 1017536:tid 1017748] [client 20.151.200.44:47397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/shelp.php"] [unique_id "apK9HSJcY4fy7tP-rU32LgAAAmY"]
[Sat Aug 29 05:06:05.660824 2026] [security2:error] [pid 1017536:tid 1017754] [client 20.220.204.93:64260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/ff1.php"] [unique_id "apK9HSJcY4fy7tP-rU32LwAAAmw"]
[Sat Aug 29 05:06:05.662839 2026] [security2:error] [pid 1018003:tid 1018249] [client 158.23.147.79:63011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/about/function.php"] [unique_id "apK9HTAh5Y1i2tUxg4HuQAAABhk"]
[Sat Aug 29 05:06:05.669340 2026] [security2:error] [pid 1017536:tid 1017732] [client 35.198.240.194:10570] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.omni-staffing.com"] [uri "/cgi-sys/404.html"] [unique_id "apK9HSJcY4fy7tP-rU32MgAAAlY"]
[Sat Aug 29 05:06:05.669863 2026] [security2:error] [pid 1017536:tid 1017781] [client 20.48.251.3:61640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/g3.php"] [unique_id "apK9HSJcY4fy7tP-rU32NAAAAoc"]
[Sat Aug 29 05:06:05.670390 2026] [security2:error] [pid 1018003:tid 1018224] [client 35.198.240.194:10544] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.omni-staffing.com"] [uri "/cgi-sys/404.html"] [unique_id "apK9HTAh5Y1i2tUxg4HuQgAABgE"]
[Sat Aug 29 05:06:05.672754 2026] [security2:error] [pid 1017536:tid 1017734] [client 68.155.159.216:18305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/file.php"] [unique_id "apK9HSJcY4fy7tP-rU32NQAAAlg"]
[Sat Aug 29 05:06:05.676230 2026] [security2:error] [pid 1017536:tid 1017724] [client 4.205.62.107:55954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/public/bnn_.php.php"] [unique_id "apK9HSJcY4fy7tP-rU32NgAAAk4"]
[Sat Aug 29 05:06:05.690798 2026] [security2:error] [pid 1017536:tid 1017601] [remote 34.138.144.127:57742] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "old.theenprogroup.com"] [uri "/site/.env"] [unique_id "apK9HSJcY4fy7tP-rU32NwACTUA"]
[Sat Aug 29 05:06:05.690966 2026] [security2:error] [pid 1017536:tid 1017653] [remote 34.138.144.127:57742] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "old.theenprogroup.com"] [uri "/old/.env"] [unique_id "apK9HSJcY4fy7tP-rU32OAACTXQ"]
[Sat Aug 29 05:06:05.692072 2026] [security2:error] [pid 1017536:tid 1017567] [remote 34.138.144.127:57742] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "old.theenprogroup.com"] [uri "/env.old"] [unique_id "apK9HSJcY4fy7tP-rU32OQACTR4"]
[Sat Aug 29 05:06:05.706434 2026] [security2:error] [pid 1017536:tid 1017557] [remote 34.138.144.127:57742] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "old.theenprogroup.com"] [uri "/.docker/.env"] [unique_id "apK9HSJcY4fy7tP-rU32OgACfhQ"]
[Sat Aug 29 05:06:05.707997 2026] [security2:error] [pid 1018003:tid 1018227] [client 20.48.250.41:65121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/fetch.php"] [unique_id "apK9HTAh5Y1i2tUxg4HuQwAABgQ"]
[Sat Aug 29 05:06:05.711205 2026] [security2:error] [pid 1017536:tid 1017788] [client 20.48.251.3:14302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/h.php"] [unique_id "apK9HSJcY4fy7tP-rU32PAAAAo4"]
[Sat Aug 29 05:06:05.752057 2026] [security2:error] [pid 1017536:tid 1017683] [client 87.219.197.128:52542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK9HSJcY4fy7tP-rU32QAAAAiU"]
[Sat Aug 29 05:06:05.752154 2026] [security2:error] [pid 1017536:tid 1017683] [client 87.219.197.128:52542] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK9HSJcY4fy7tP-rU32QAAAAiU"]
[Sat Aug 29 05:06:05.754318 2026] [security2:error] [pid 1017536:tid 1017705] [client 20.48.250.41:60714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/35.php"] [unique_id "apK9HSJcY4fy7tP-rU32QQAAAjs"]
[Sat Aug 29 05:06:05.771656 2026] [security2:error] [pid 1017536:tid 1017691] [client 68.155.159.216:52837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/goods.php"] [unique_id "apK9HSJcY4fy7tP-rU32QgAAAi0"]
[Sat Aug 29 05:06:05.778643 2026] [security2:error] [pid 1017536:tid 1017780] [client 158.23.147.79:48147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-content/radio.php"] [unique_id "apK9HSJcY4fy7tP-rU32QwAAAoY"]
[Sat Aug 29 05:06:05.787136 2026] [security2:error] [pid 1018003:tid 1018248] [client 20.151.200.44:64911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/blnux.php"] [unique_id "apK9HTAh5Y1i2tUxg4HuRAAABhg"]
[Sat Aug 29 05:06:05.795271 2026] [security2:error] [pid 1018003:tid 1018261] [client 20.48.251.3:62080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/wp-konfig.php"] [unique_id "apK9HTAh5Y1i2tUxg4HuRQAABiU"]
[Sat Aug 29 05:06:05.799858 2026] [security2:error] [pid 1017536:tid 1017708] [client 40.83.93.50:22223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-admin/wp-load.php"] [unique_id "apK9HSJcY4fy7tP-rU32RAAAAj4"]
[Sat Aug 29 05:06:05.841110 2026] [security2:error] [pid 1018003:tid 1018251] [client 158.23.147.79:32746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK9HTAh5Y1i2tUxg4HuRwAABhs"]
[Sat Aug 29 05:06:05.861545 2026] [security2:error] [pid 1018003:tid 1018209] [client 20.151.200.44:46570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/13ede.php"] [unique_id "apK9HTAh5Y1i2tUxg4HuSAAABfI"]
[Sat Aug 29 05:06:05.871133 2026] [security2:error] [pid 1017536:tid 1017707] [client 20.48.250.41:65112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/vx.php"] [unique_id "apK9HSJcY4fy7tP-rU32RQAAAj0"]
[Sat Aug 29 05:06:05.883844 2026] [security2:error] [pid 1017536:tid 1017687] [client 20.220.204.93:63851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/t.php"] [unique_id "apK9HSJcY4fy7tP-rU32RwAAAik"]
[Sat Aug 29 05:06:05.888971 2026] [security2:error] [pid 1017536:tid 1017768] [client 20.48.250.41:62471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/maraz.php"] [unique_id "apK9HSJcY4fy7tP-rU32SAAAAno"]
[Sat Aug 29 05:06:05.898221 2026] [security2:error] [pid 1017536:tid 1017743] [client 168.107.94.195:51144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9HSJcY4fy7tP-rU32SQAAAmE"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:05.919883 2026] [cgid:error] [pid 1018003:tid 1018218] [client 20.52.41.200:1739] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/cpslggc/404.shtml
[Sat Aug 29 05:06:05.925137 2026] [security2:error] [pid 1017536:tid 1017709] [client 20.48.251.3:61218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/25.php"] [unique_id "apK9HSJcY4fy7tP-rU32SgAAAj8"]
[Sat Aug 29 05:06:05.951151 2026] [security2:error] [pid 1017536:tid 1017704] [client 20.196.209.81:23626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-admin/options.php"] [unique_id "apK9HSJcY4fy7tP-rU32SwAAAjo"]
[Sat Aug 29 05:06:05.957616 2026] [security2:error] [pid 1017536:tid 1017680] [client 158.158.54.35:8666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/num.php"] [unique_id "apK9HSJcY4fy7tP-rU32TAAAAiI"]
[Sat Aug 29 05:06:05.992370 2026] [security2:error] [pid 1017536:tid 1017681] [client 20.151.200.44:64833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/pentest.php"] [unique_id "apK9HSJcY4fy7tP-rU32TwAAAiM"]
[Sat Aug 29 05:06:06.002643 2026] [security2:error] [pid 1018003:tid 1018182] [client 20.151.200.44:47416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/k8.php"] [unique_id "apK9HjAh5Y1i2tUxg4HuTQAABdc"]
[Sat Aug 29 05:06:06.003559 2026] [security2:error] [pid 1017536:tid 1017668] [client 20.48.250.41:64324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/global.php"] [unique_id "apK9HiJcY4fy7tP-rU32UAAAAhY"]
[Sat Aug 29 05:06:06.007945 2026] [security2:error] [pid 1017536:tid 1017784] [client 68.155.159.216:16379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/lv.php"] [unique_id "apK9HiJcY4fy7tP-rU32UgAAAoo"]
[Sat Aug 29 05:06:06.019283 2026] [security2:error] [pid 1017536:tid 1017790] [client 20.104.49.130:52521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.carlosmua.com"] [uri "/classwithtostring.php"] [unique_id "apK9HiJcY4fy7tP-rU32VAAAApA"]
[Sat Aug 29 05:06:06.020526 2026] [security2:error] [pid 1017536:tid 1017582] [remote 34.138.144.127:57742] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "old.theenprogroup.com"] [uri "/api/.env.bak"] [unique_id "apK9HiJcY4fy7tP-rU32UwACKi0"]
[Sat Aug 29 05:06:06.021343 2026] [security2:error] [pid 1017536:tid 1017596] [remote 34.138.144.127:57742] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "old.theenprogroup.com"] [uri "/.env.production.bak"] [unique_id "apK9HiJcY4fy7tP-rU32VQACKjs"]
[Sat Aug 29 05:06:06.023368 2026] [security2:error] [pid 1017536:tid 1017612] [remote 34.138.144.127:57742] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "old.theenprogroup.com"] [uri "/.env.prod.bak"] [unique_id "apK9HiJcY4fy7tP-rU32VwACKks"]
[Sat Aug 29 05:06:06.032634 2026] [security2:error] [pid 1018003:tid 1018269] [client 20.48.250.41:62570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/kbfr.php"] [unique_id "apK9HjAh5Y1i2tUxg4HuTwAABi0"]
[Sat Aug 29 05:06:06.039333 2026] [security2:error] [pid 1017536:tid 1017755] [client 34.143.179.161:45338] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "cpcontacts.harnessenergyusa.com"] [uri "/config.env"] [unique_id "apK9HiJcY4fy7tP-rU32WgAAAm0"]
[Sat Aug 29 05:06:06.053776 2026] [security2:error] [pid 1018003:tid 1018243] [client 20.48.251.3:61661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/nlnub.php"] [unique_id "apK9HjAh5Y1i2tUxg4HuWAAABhM"]
[Sat Aug 29 05:06:06.054847 2026] [security2:error] [pid 1018003:tid 1018175] [client 158.23.147.79:50144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/wzy.php"] [unique_id "apK9HjAh5Y1i2tUxg4HuWgAABdA"]
[Sat Aug 29 05:06:06.061653 2026] [security2:error] [pid 1018003:tid 1018195] [client 34.143.179.161:45322] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cpcontacts.harnessenergyusa.com"] [uri "/config/anthropic.json"] [unique_id "apK9HjAh5Y1i2tUxg4HuYQAABeQ"]
[Sat Aug 29 05:06:06.072857 2026] [security2:error] [pid 1018003:tid 1018167] [client 40.83.93.50:8011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/alfa-rex1.php"] [unique_id "apK9HjAh5Y1i2tUxg4HuZAAABcg"]
[Sat Aug 29 05:06:06.073515 2026] [cgid:error] [pid 1018003:tid 1018276] [client 20.52.41.200:1739] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/cpslggc/404.shtml
[Sat Aug 29 05:06:06.086810 2026] [security2:error] [pid 1018003:tid 1018222] [client 158.23.147.79:30557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/lv.php"] [unique_id "apK9HjAh5Y1i2tUxg4HuZgAABf8"]
[Sat Aug 29 05:06:06.108391 2026] [security2:error] [pid 1018003:tid 1018230] [client 4.205.62.107:64963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/doc.php"] [unique_id "apK9HjAh5Y1i2tUxg4HuagAABgY"]
[Sat Aug 29 05:06:06.144202 2026] [security2:error] [pid 1018003:tid 1018259] [client 20.151.200.44:65510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/6y7t.php"] [unique_id "apK9HjAh5Y1i2tUxg4HuawAABiM"]
[Sat Aug 29 05:06:06.144229 2026] [security2:error] [pid 1018003:tid 1018159] [client 20.151.200.44:64922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/inwp.php"] [unique_id "apK9HjAh5Y1i2tUxg4HubAAABcA"]
[Sat Aug 29 05:06:06.153664 2026] [security2:error] [pid 1017536:tid 1017731] [client 20.48.250.41:64335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/fs.php"] [unique_id "apK9HiJcY4fy7tP-rU32bQAAAlU"]
[Sat Aug 29 05:06:06.156942 2026] [security2:error] [pid 1018003:tid 1018165] [client 103.185.242.143:61299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK9HjAh5Y1i2tUxg4HubQAABcY"]
[Sat Aug 29 05:06:06.157049 2026] [security2:error] [pid 1018003:tid 1018165] [client 103.185.242.143:61299] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK9HjAh5Y1i2tUxg4HubQAABcY"]
[Sat Aug 29 05:06:06.179213 2026] [security2:error] [pid 1017536:tid 1017711] [client 20.48.250.41:60675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/wp-act.php"] [unique_id "apK9HiJcY4fy7tP-rU32bwAAAkE"]
[Sat Aug 29 05:06:06.180920 2026] [security2:error] [pid 1018003:tid 1018153] [client 20.151.200.44:47330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/alog.php"] [unique_id "apK9HjAh5Y1i2tUxg4HubgAABbo"]
[Sat Aug 29 05:06:06.181728 2026] [security2:error] [pid 1017536:tid 1017708] [client 20.48.251.3:61654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/mga.php"] [unique_id "apK9HiJcY4fy7tP-rU32cgAAAj4"]
[Sat Aug 29 05:06:06.189643 2026] [security2:error] [pid 1017536:tid 1017789] [client 20.220.204.93:64959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/erty.php"] [unique_id "apK9HiJcY4fy7tP-rU32cwAAAo8"]
[Sat Aug 29 05:06:06.223744 2026] [security2:error] [pid 1018003:tid 1018173] [client 20.52.41.200:1739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/w.php"] [unique_id "apK9HjAh5Y1i2tUxg4HubwAABc4"]
[Sat Aug 29 05:06:06.240631 2026] [security2:error] [pid 1017536:tid 1017669] [client 20.104.49.130:30018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/txets.php"] [unique_id "apK9HiJcY4fy7tP-rU32dwAAAhc"]
[Sat Aug 29 05:06:06.247656 2026] [security2:error] [pid 1017536:tid 1017788] [client 20.197.61.180:17395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-blog-header.php"] [unique_id "apK9HiJcY4fy7tP-rU32eQAAAo4"]
[Sat Aug 29 05:06:06.271594 2026] [security2:error] [pid 1017536:tid 1017770] [client 40.83.93.50:12428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-admin/wp-mail.php"] [unique_id "apK9HiJcY4fy7tP-rU32egAAAnw"]
[Sat Aug 29 05:06:06.278525 2026] [security2:error] [pid 1017536:tid 1017685] [client 168.107.94.195:51447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9HiJcY4fy7tP-rU32ewAAAic"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:06.290002 2026] [security2:error] [pid 1018003:tid 1018150] [client 20.151.200.44:64209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/0xs.php"] [unique_id "apK9HjAh5Y1i2tUxg4HucAAABbc"]
[Sat Aug 29 05:06:06.309795 2026] [security2:error] [pid 1018003:tid 1018277] [client 20.48.251.3:62141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/ccou.php"] [unique_id "apK9HjAh5Y1i2tUxg4HucQAABjU"]
[Sat Aug 29 05:06:06.319514 2026] [security2:error] [pid 1017536:tid 1017781] [client 20.48.250.41:65040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/ioxi.php"] [unique_id "apK9HiJcY4fy7tP-rU32fAAAAoc"]
[Sat Aug 29 05:06:06.335853 2026] [security2:error] [pid 1018003:tid 1018207] [client 20.48.250.41:59332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/24.php"] [unique_id "apK9HjAh5Y1i2tUxg4HucgAABfA"]
[Sat Aug 29 05:06:06.341932 2026] [security2:error] [pid 1017536:tid 1017670] [client 68.155.159.216:50244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-includes/js/index.php"] [unique_id "apK9HiJcY4fy7tP-rU32fwAAAhg"]
[Sat Aug 29 05:06:06.347477 2026] [security2:error] [pid 1018003:tid 1018156] [client 20.151.200.44:46537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/adin.php"] [unique_id "apK9HjAh5Y1i2tUxg4HucwAABb0"]
[Sat Aug 29 05:06:06.354734 2026] [security2:error] [pid 1017536:tid 1017734] [client 4.205.62.107:22365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/atex1.php"] [unique_id "apK9HiJcY4fy7tP-rU32gAAAAlg"]
[Sat Aug 29 05:06:06.356057 2026] [security2:error] [pid 1017536:tid 1017696] [client 20.196.209.81:5565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-admin/panel.php"] [unique_id "apK9HiJcY4fy7tP-rU32gQAAAjI"]
[Sat Aug 29 05:06:06.387657 2026] [security2:error] [pid 1018003:tid 1018170] [client 4.205.62.107:53312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/gk.php"] [unique_id "apK9HjAh5Y1i2tUxg4HudgAABcs"]
[Sat Aug 29 05:06:06.418521 2026] [security2:error] [pid 1017536:tid 1017755] [client 4.205.62.107:21938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/kedi.php"] [unique_id "apK9HiJcY4fy7tP-rU32iAAAAm0"]
[Sat Aug 29 05:06:06.438722 2026] [security2:error] [pid 1017536:tid 1017741] [client 20.48.251.3:61225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/rum.or.php"] [unique_id "apK9HiJcY4fy7tP-rU32igAAAl8"]
[Sat Aug 29 05:06:06.441948 2026] [security2:error] [pid 1017536:tid 1017717] [client 4.205.62.107:65502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/ebahvhhh.php"] [unique_id "apK9HiJcY4fy7tP-rU32iwAAAkc"]
[Sat Aug 29 05:06:06.468749 2026] [security2:error] [pid 1018003:tid 1018234] [client 20.48.250.41:64288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/bootstrap.php"] [unique_id "apK9HjAh5Y1i2tUxg4HueQAABgo"]
[Sat Aug 29 05:06:06.478567 2026] [security2:error] [pid 1018003:tid 1018186] [client 17.166.234.215:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/2016/08/08/chou-blanc-braise-en-cocotte/"] [unique_id "apK9HjAh5Y1i2tUxg4HuewAABds"]
[Sat Aug 29 05:06:06.505262 2026] [security2:error] [pid 1018003:tid 1018269] [client 20.151.200.44:47421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/sf9.php"] [unique_id "apK9HjAh5Y1i2tUxg4HufQAABi0"]
[Sat Aug 29 05:06:06.511159 2026] [security2:error] [pid 1018003:tid 1018169] [client 20.48.250.41:62480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/155.php"] [unique_id "apK9HjAh5Y1i2tUxg4HufgAABco"]
[Sat Aug 29 05:06:06.521747 2026] [security2:error] [pid 1018003:tid 1018212] [client 20.151.200.44:64876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/waf.php"] [unique_id "apK9HjAh5Y1i2tUxg4HufwAABfU"]
[Sat Aug 29 05:06:06.557289 2026] [security2:error] [pid 1017536:tid 1017606] [remote 34.138.144.127:57742] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "old.theenprogroup.com"] [uri "/portal/.env"] [unique_id "apK9HiJcY4fy7tP-rU32kgACPUU"]
[Sat Aug 29 05:06:06.558022 2026] [security2:error] [pid 1017536:tid 1017603] [remote 34.138.144.127:57742] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "old.theenprogroup.com"] [uri "/env.bak"] [unique_id "apK9HiJcY4fy7tP-rU32kQACPUI"]
[Sat Aug 29 05:06:06.558740 2026] [security2:error] [pid 1018003:tid 1018155] [client 68.155.159.216:51858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-admin/index.php"] [unique_id "apK9HjAh5Y1i2tUxg4HugQAABbw"]
[Sat Aug 29 05:06:06.560044 2026] [security2:error] [pid 1018003:tid 1018222] [client 20.104.49.130:29964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/kj.php"] [unique_id "apK9HjAh5Y1i2tUxg4HugwAABf8"]
[Sat Aug 29 05:06:06.567310 2026] [security2:error] [pid 1018003:tid 1018270] [client 20.48.251.3:62128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/xmy.php"] [unique_id "apK9HjAh5Y1i2tUxg4HujAAABi4"]
[Sat Aug 29 05:06:06.568320 2026] [security2:error] [pid 1017536:tid 1017595] [remote 34.138.144.127:57742] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "old.theenprogroup.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK9HiJcY4fy7tP-rU32oAACazo"]
[Sat Aug 29 05:06:06.575117 2026] [security2:error] [pid 1018003:tid 1018157] [client 40.83.93.50:8059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/headerg.php"] [unique_id "apK9HjAh5Y1i2tUxg4HujQAABb4"]
[Sat Aug 29 05:06:06.576964 2026] [security2:error] [pid 1017536:tid 1017767] [client 34.7.40.70:14848] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/img../.env"] [unique_id "apK9HiJcY4fy7tP-rU32oQAAAnk"]
[Sat Aug 29 05:06:06.577412 2026] [security2:error] [pid 1017536:tid 1017765] [client 34.7.40.70:14862] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/assets../.env"] [unique_id "apK9HiJcY4fy7tP-rU32ogAAAnc"]
[Sat Aug 29 05:06:06.579764 2026] [security2:error] [pid 1017536:tid 1017722] [client 34.7.40.70:14868] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/images../.env"] [unique_id "apK9HiJcY4fy7tP-rU32owAAAkw"]
[Sat Aug 29 05:06:06.579815 2026] [security2:error] [pid 1018003:tid 1018231] [client 34.7.40.70:14882] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/v2/.env"] [unique_id "apK9HjAh5Y1i2tUxg4HujgAABgc"]
[Sat Aug 29 05:06:06.579886 2026] [security2:error] [pid 1018003:tid 1018174] [client 34.7.40.70:14846] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/uploads../.env"] [unique_id "apK9HjAh5Y1i2tUxg4HujwAABc8"]
[Sat Aug 29 05:06:06.580736 2026] [security2:error] [pid 1018003:tid 1018261] [client 34.7.40.70:14832] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/.env"] [unique_id "apK9HjAh5Y1i2tUxg4HukAAABiU"]
[Sat Aug 29 05:06:06.581159 2026] [security2:error] [pid 1017536:tid 1017685] [client 20.220.204.93:64945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/0x.php"] [unique_id "apK9HiJcY4fy7tP-rU32pAAAAic"]
[Sat Aug 29 05:06:06.581188 2026] [security2:error] [pid 1017536:tid 1017777] [client 34.7.40.70:14870] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/.docker/.env"] [unique_id "apK9HiJcY4fy7tP-rU32pQAAAoM"]
[Sat Aug 29 05:06:06.581779 2026] [security2:error] [pid 1017536:tid 1017746] [client 34.7.40.70:14872] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/v1/.env"] [unique_id "apK9HiJcY4fy7tP-rU32pgAAAmQ"]
[Sat Aug 29 05:06:06.582723 2026] [security2:error] [pid 1017536:tid 1017672] [client 34.7.40.70:14888] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/.env"] [unique_id "apK9HiJcY4fy7tP-rU32qAAAAho"]
[Sat Aug 29 05:06:06.582897 2026] [cgid:error] [pid 1018003:tid 1018203] [client 34.7.40.70:14914] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:06.583466 2026] [cgid:error] [pid 1017536:tid 1017712] [client 34.7.40.70:14904] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:06.584592 2026] [security2:error] [pid 1017536:tid 1017751] [client 34.7.40.70:14944] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/.env.old"] [unique_id "apK9HiJcY4fy7tP-rU32qQAAAmk"]
[Sat Aug 29 05:06:06.586091 2026] [cgid:error] [pid 1018003:tid 1018189] [client 34.7.40.70:14918] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:06.587698 2026] [security2:error] [pid 1017536:tid 1017683] [client 34.7.40.70:14942] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/.env.bak"] [unique_id "apK9HiJcY4fy7tP-rU32qwAAAiU"]
[Sat Aug 29 05:06:06.588015 2026] [cgid:error] [pid 1017536:tid 1017782] [client 34.7.40.70:14934] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:06.590180 2026] [cgid:error] [pid 1017536:tid 1017776] [client 34.7.40.70:14982] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:06.590688 2026] [security2:error] [pid 1018003:tid 1018251] [client 34.7.40.70:15032] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/config/.env"] [unique_id "apK9HjAh5Y1i2tUxg4HukwAABhs"]
[Sat Aug 29 05:06:06.591127 2026] [security2:error] [pid 1017536:tid 1017705] [client 34.7.40.70:14952] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/.env.backup"] [unique_id "apK9HiJcY4fy7tP-rU32rQAAAjs"]
[Sat Aug 29 05:06:06.591908 2026] [security2:error] [pid 1017536:tid 1017745] [client 34.7.40.70:15004] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/api/.env"] [unique_id "apK9HiJcY4fy7tP-rU32sQAAAmM"]
[Sat Aug 29 05:06:06.592190 2026] [security2:error] [pid 1017536:tid 1017769] [client 34.7.40.70:15000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/app/.env"] [unique_id "apK9HiJcY4fy7tP-rU32sAAAAns"]
[Sat Aug 29 05:06:06.592239 2026] [security2:error] [pid 1017536:tid 1017698] [client 34.7.40.70:15062] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/src/.env"] [unique_id "apK9HiJcY4fy7tP-rU32rgAAAjQ"]
[Sat Aug 29 05:06:06.592770 2026] [security2:error] [pid 1017536:tid 1017733] [client 34.7.40.70:15038] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/laravel/.env"] [unique_id "apK9HiJcY4fy7tP-rU32sgAAAlc"]
[Sat Aug 29 05:06:06.593034 2026] [security2:error] [pid 1018003:tid 1018200] [client 34.7.40.70:14980] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/.env.swp"] [unique_id "apK9HjAh5Y1i2tUxg4HulAAABek"]
[Sat Aug 29 05:06:06.593597 2026] [cgid:error] [pid 1017536:tid 1017726] [client 34.7.40.70:14968] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:06.593870 2026] [security2:error] [pid 1018003:tid 1018209] [client 34.7.40.70:15068] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/frontend/.env"] [unique_id "apK9HjAh5Y1i2tUxg4HulQAABfI"]
[Sat Aug 29 05:06:06.594499 2026] [security2:error] [pid 1017536:tid 1017691] [client 34.7.40.70:15042] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/docker/.env"] [unique_id "apK9HiJcY4fy7tP-rU32swAAAi0"]
[Sat Aug 29 05:06:06.595794 2026] [security2:error] [pid 1018003:tid 1018185] [client 34.7.40.70:15052] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/core/.env"] [unique_id "apK9HjAh5Y1i2tUxg4HulgAABdo"]
[Sat Aug 29 05:06:06.595866 2026] [security2:error] [pid 1017536:tid 1017725] [client 34.7.40.70:15020] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/backend/.env"] [unique_id "apK9HiJcY4fy7tP-rU32tQAAAk8"]
[Sat Aug 29 05:06:06.597660 2026] [cgid:error] [pid 1017536:tid 1017678] [client 34.7.40.70:14994] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:06.598797 2026] [security2:error] [pid 1017536:tid 1017678] [client 34.7.40.70:14994] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/404.shtml"] [unique_id "apK9HiJcY4fy7tP-rU32tAAAAiA"]
[Sat Aug 29 05:06:06.599013 2026] [security2:error] [pid 1018003:tid 1018255] [client 34.7.40.70:15082] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/web/.env"] [unique_id "apK9HjAh5Y1i2tUxg4HumQAABh8"]
[Sat Aug 29 05:06:06.599039 2026] [security2:error] [pid 1018003:tid 1018218] [client 34.7.40.70:15066] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/server/.env"] [unique_id "apK9HjAh5Y1i2tUxg4HulwAABfs"]
[Sat Aug 29 05:06:06.601037 2026] [cgid:error] [pid 1018003:tid 1018183] [client 34.7.40.70:15030] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:06.629601 2026] [security2:error] [pid 1017536:tid 1017670] [client 20.48.250.41:65049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/export.php"] [unique_id "apK9HiJcY4fy7tP-rU32tgAAAhg"]
[Sat Aug 29 05:06:06.653826 2026] [security2:error] [pid 1017536:tid 1017696] [client 20.151.200.44:47318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/lte7.php"] [unique_id "apK9HiJcY4fy7tP-rU32uAAAAjI"]
[Sat Aug 29 05:06:06.662224 2026] [security2:error] [pid 1017536:tid 1017750] [client 168.107.94.195:51917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9HiJcY4fy7tP-rU32uQAAAmg"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:06.670138 2026] [security2:error] [pid 1017536:tid 1017714] [client 20.48.250.41:60772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/file.php"] [unique_id "apK9HiJcY4fy7tP-rU32uwAAAkQ"]
[Sat Aug 29 05:06:06.679933 2026] [security2:error] [pid 1018003:tid 1018243] [client 20.52.41.200:1230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/ahax.php"] [unique_id "apK9HjAh5Y1i2tUxg4HumwAABhM"]
[Sat Aug 29 05:06:06.687014 2026] [security2:error] [pid 1017536:tid 1017784] [client 158.23.147.79:24332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-includes/index.php"] [unique_id "apK9HiJcY4fy7tP-rU32vQAAAoo"]
[Sat Aug 29 05:06:06.694955 2026] [security2:error] [pid 1017536:tid 1017742] [client 20.48.251.3:61662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/ms-edit.php"] [unique_id "apK9HiJcY4fy7tP-rU32vgAAAmA"]
[Sat Aug 29 05:06:06.701350 2026] [security2:error] [pid 1017536:tid 1017729] [client 20.151.200.44:65494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/ad1.php"] [unique_id "apK9HiJcY4fy7tP-rU32vwAAAlM"]
[Sat Aug 29 05:06:06.704389 2026] [security2:error] [pid 1017536:tid 1017749] [client 158.158.54.35:16019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-content/upgrade/index.php"] [unique_id "apK9HiJcY4fy7tP-rU32wAAAAmc"]
[Sat Aug 29 05:06:06.717717 2026] [security2:error] [pid 1017536:tid 1017679] [client 4.205.62.107:22494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/ammika.php"] [unique_id "apK9HiJcY4fy7tP-rU32wgAAAiE"]
[Sat Aug 29 05:06:06.750809 2026] [security2:error] [pid 1018003:tid 1018250] [client 68.155.159.216:49165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK9HjAh5Y1i2tUxg4HunQAABho"]
[Sat Aug 29 05:06:06.754252 2026] [security2:error] [pid 1018003:tid 1018259] [client 20.196.209.81:20392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-admin/pk.php"] [unique_id "apK9HjAh5Y1i2tUxg4HungAABiM"]
[Sat Aug 29 05:06:06.755103 2026] [security2:error] [pid 1018003:tid 1018173] [client 68.155.159.216:14318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/nf_tracking.php"] [unique_id "apK9HjAh5Y1i2tUxg4HunwAABc4"]
[Sat Aug 29 05:06:06.762584 2026] [security2:error] [pid 1017536:tid 1017704] [client 40.83.93.50:22261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-admin/wp-settings.php"] [unique_id "apK9HiJcY4fy7tP-rU32xAAAAjo"]
[Sat Aug 29 05:06:06.768122 2026] [security2:error] [pid 1017536:tid 1017789] [client 20.48.250.41:65063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/gk.php"] [unique_id "apK9HiJcY4fy7tP-rU32xQAAAo8"]
[Sat Aug 29 05:06:06.771686 2026] [security2:error] [pid 1017536:tid 1017760] [client 20.220.204.93:64362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/66.php"] [unique_id "apK9HiJcY4fy7tP-rU32xgAAAnI"]
[Sat Aug 29 05:06:06.794407 2026] [security2:error] [pid 1017536:tid 1017768] [client 20.151.200.44:64856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/bnnof6.php"] [unique_id "apK9HiJcY4fy7tP-rU32yAAAAno"]
[Sat Aug 29 05:06:06.813955 2026] [security2:error] [pid 1018003:tid 1018156] [client 20.151.200.44:46614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/tanjiro.php"] [unique_id "apK9HjAh5Y1i2tUxg4HuowAABb0"]
[Sat Aug 29 05:06:06.817053 2026] [security2:error] [pid 1017536:tid 1017765] [client 20.48.250.41:60758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK9HiJcY4fy7tP-rU32ywAAAnc"]
[Sat Aug 29 05:06:06.823393 2026] [security2:error] [pid 1018003:tid 1018249] [client 20.48.251.3:61227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/sys.php"] [unique_id "apK9HjAh5Y1i2tUxg4HupAAABhk"]
[Sat Aug 29 05:06:06.829485 2026] [security2:error] [pid 1017536:tid 1017746] [client 4.205.62.107:55980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wsws.php"] [unique_id "apK9HiJcY4fy7tP-rU32zAAAAmQ"]
[Sat Aug 29 05:06:06.839169 2026] [security2:error] [pid 1017536:tid 1017745] [client 158.23.147.79:63839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK9HiJcY4fy7tP-rU32zgAAAmM"]
[Sat Aug 29 05:06:06.860244 2026] [security2:error] [pid 1017536:tid 1017691] [client 68.155.159.216:18207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/file17.php"] [unique_id "apK9HiJcY4fy7tP-rU320AAAAi0"]
[Sat Aug 29 05:06:06.878778 2026] [security2:error] [pid 1017536:tid 1017761] [client 68.155.159.216:52762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK9HiJcY4fy7tP-rU320QAAAnM"]
[Sat Aug 29 05:06:06.880498 2026] [security2:error] [pid 1018003:tid 1018246] [client 158.23.147.79:48229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-admin/dropdown.php"] [unique_id "apK9HjAh5Y1i2tUxg4HuqAAABhY"]
[Sat Aug 29 05:06:06.891446 2026] [security2:error] [pid 1017536:tid 1017790] [client 158.23.147.79:30599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9HiJcY4fy7tP-rU320gAAApA"]
[Sat Aug 29 05:06:06.900783 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.48.250.41:65107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/logs1.php"] [unique_id "apK9HiJcY4fy7tP-rU321AAAAlY"]
[Sat Aug 29 05:06:06.945151 2026] [security2:error] [pid 1017536:tid 1017749] [client 158.23.147.79:32642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/file.php"] [unique_id "apK9HiJcY4fy7tP-rU321gAAAmc"]
[Sat Aug 29 05:06:06.947849 2026] [security2:error] [pid 1017536:tid 1017703] [client 20.151.200.44:64846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/1vbqo.php"] [unique_id "apK9HiJcY4fy7tP-rU321wAAAjk"]
[Sat Aug 29 05:06:06.952819 2026] [security2:error] [pid 1017536:tid 1017737] [client 68.155.159.216:24550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK9HiJcY4fy7tP-rU322QAAAls"]
[Sat Aug 29 05:06:06.954420 2026] [security2:error] [pid 1018003:tid 1018187] [client 20.48.251.3:62125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/phpsysinfo.php"] [unique_id "apK9HjAh5Y1i2tUxg4HuqQAABdw"]
[Sat Aug 29 05:06:06.960256 2026] [security2:error] [pid 1018003:tid 1018224] [client 20.197.61.180:5848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-blogs.php"] [unique_id "apK9HjAh5Y1i2tUxg4HuqgAABgE"]
[Sat Aug 29 05:06:06.962557 2026] [security2:error] [pid 1017536:tid 1017708] [client 20.48.250.41:60729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/06.php"] [unique_id "apK9HiJcY4fy7tP-rU322gAAAj4"]
[Sat Aug 29 05:06:06.973509 2026] [security2:error] [pid 1017536:tid 1017724] [client 20.151.200.44:47329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/Rk41.php"] [unique_id "apK9HiJcY4fy7tP-rU323QAAAk4"]
[Sat Aug 29 05:06:07.001753 2026] [security2:error] [pid 1017536:tid 1017786] [client 20.220.204.93:64926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/f35.php"] [unique_id "apK9HyJcY4fy7tP-rU324AAAAow"]
[Sat Aug 29 05:06:07.022403 2026] [security2:error] [pid 1017536:tid 1017793] [client 20.151.200.44:64873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/ah24.php"] [unique_id "apK9HyJcY4fy7tP-rU325AAAApM"]
[Sat Aug 29 05:06:07.043242 2026] [security2:error] [pid 1017536:tid 1017685] [client 168.107.94.195:52286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9HyJcY4fy7tP-rU326AAAAic"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:07.054973 2026] [security2:error] [pid 1017536:tid 1017670] [client 40.83.93.50:8051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/meta.php"] [unique_id "apK9HyJcY4fy7tP-rU327AAAAhg"]
[Sat Aug 29 05:06:07.085783 2026] [security2:error] [pid 1017536:tid 1017683] [client 20.48.251.3:61194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/sgd.php"] [unique_id "apK9HyJcY4fy7tP-rU328AAAAiU"]
[Sat Aug 29 05:06:07.092685 2026] [security2:error] [pid 1018003:tid 1018167] [client 20.48.251.3:33342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/bootstrap.php"] [unique_id "apK9HzAh5Y1i2tUxg4HurQAABcg"]
[Sat Aug 29 05:06:07.100335 2026] [security2:error] [pid 1018003:tid 1018278] [client 20.48.250.41:65126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/inege.php"] [unique_id "apK9HzAh5Y1i2tUxg4HurgAABjY"]
[Sat Aug 29 05:06:07.109098 2026] [security2:error] [pid 1018003:tid 1018276] [client 20.151.200.44:47386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/7logs.php"] [unique_id "apK9HzAh5Y1i2tUxg4HurwAABjQ"]
[Sat Aug 29 05:06:07.120146 2026] [security2:error] [pid 1017536:tid 1017733] [client 20.48.250.41:60727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/class.php"] [unique_id "apK9HyJcY4fy7tP-rU329QAAAlc"]
[Sat Aug 29 05:06:07.120580 2026] [security2:error] [pid 1017536:tid 1017726] [client 68.155.159.216:16368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9HyJcY4fy7tP-rU329gAAAlA"]
[Sat Aug 29 05:06:07.122684 2026] [security2:error] [pid 1017536:tid 1017691] [client 20.104.18.15:7012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/goods.php"] [unique_id "apK9HyJcY4fy7tP-rU32-AAAAi0"]
[Sat Aug 29 05:06:07.137072 2026] [security2:error] [pid 1017536:tid 1017704] [client 20.52.41.200:1784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/shell.php"] [unique_id "apK9HyJcY4fy7tP-rU32-wAAAjo"]
[Sat Aug 29 05:06:07.146738 2026] [security2:error] [pid 1017536:tid 1017681] [client 158.158.54.35:8959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "apK9HyJcY4fy7tP-rU32_gAAAiM"]
[Sat Aug 29 05:06:07.150250 2026] [security2:error] [pid 1017536:tid 1017707] [client 20.196.209.81:15091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-admin/plugin-install.php"] [unique_id "apK9HyJcY4fy7tP-rU32_wAAAj0"]
[Sat Aug 29 05:06:07.154134 2026] [security2:error] [pid 1018003:tid 1018192] [client 20.151.200.44:65474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/ztv.php"] [unique_id "apK9HzAh5Y1i2tUxg4HusQAABeE"]
[Sat Aug 29 05:06:07.157481 2026] [security2:error] [pid 1018003:tid 1018078] [remote 74.7.227.189:45882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 189.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pinnacleforms.com"] [uri "/OeCustInfo.php"] [unique_id "apK9HzAh5Y1i2tUxg4HusgAGAjk"], referer: https://mail.pinnacleforms.com/
[Sat Aug 29 05:06:07.158027 2026] [security2:error] [pid 1018003:tid 1018152] [client 20.104.18.15:23360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/ws55.php"] [unique_id "apK9HzAh5Y1i2tUxg4HuswAABbk"]
[Sat Aug 29 05:06:07.170715 2026] [security2:error] [pid 1018003:tid 1018231] [client 20.151.200.44:64875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/h02ugyh.php"] [unique_id "apK9HzAh5Y1i2tUxg4HutQAABgc"]
[Sat Aug 29 05:06:07.172096 2026] [security2:error] [pid 1018003:tid 1018174] [client 158.23.147.79:50074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK9HzAh5Y1i2tUxg4HutwAABc8"]
[Sat Aug 29 05:06:07.180710 2026] [security2:error] [pid 1018003:tid 1018189] [client 20.220.204.93:64326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/wen.php"] [unique_id "apK9HzAh5Y1i2tUxg4HuuAAABd4"]
[Sat Aug 29 05:06:07.195316 2026] [security2:error] [pid 1017536:tid 1017734] [client 158.23.147.79:30645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/content.php"] [unique_id "apK9HyJcY4fy7tP-rU33AQAAAlg"]
[Sat Aug 29 05:06:07.215763 2026] [security2:error] [pid 1017536:tid 1017790] [client 20.104.18.15:13151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/indo.php"] [unique_id "apK9HyJcY4fy7tP-rU33BAAAApA"]
[Sat Aug 29 05:06:07.218497 2026] [security2:error] [pid 1017536:tid 1017750] [client 20.48.251.3:61649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/fleen.php"] [unique_id "apK9HyJcY4fy7tP-rU33BQAAAmg"]
[Sat Aug 29 05:06:07.247642 2026] [security2:error] [pid 1017536:tid 1017721] [client 4.205.62.107:61787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/classsmtps.php"] [unique_id "apK9HyJcY4fy7tP-rU33CQAAAks"]
[Sat Aug 29 05:06:07.251267 2026] [security2:error] [pid 1018003:tid 1018202] [client 40.83.93.50:12426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-admin/wp-signup.php"] [unique_id "apK9HzAh5Y1i2tUxg4HuuwAABes"]
[Sat Aug 29 05:06:07.261612 2026] [security2:error] [pid 1017536:tid 1017708] [client 20.48.250.41:65034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/wp-link10.php"] [unique_id "apK9HyJcY4fy7tP-rU33CwAAAj4"]
[Sat Aug 29 05:06:07.285568 2026] [security2:error] [pid 1018003:tid 1018164] [client 20.151.200.44:47340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/sf.php"] [unique_id "apK9HzAh5Y1i2tUxg4HuvAAABcU"]
[Sat Aug 29 05:06:07.289641 2026] [security2:error] [pid 1017536:tid 1017793] [client 20.48.250.41:62569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/8.php"] [unique_id "apK9HyJcY4fy7tP-rU33DQAAApM"]
[Sat Aug 29 05:06:07.291070 2026] [security2:error] [pid 1017536:tid 1017689] [client 20.104.18.15:23516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/drykl.php"] [unique_id "apK9HyJcY4fy7tP-rU33DgAAAis"]
[Sat Aug 29 05:06:07.315190 2026] [security2:error] [pid 1017536:tid 1017744] [client 20.104.18.15:8136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/biufile.php"] [unique_id "apK9HyJcY4fy7tP-rU33EAAAAmI"]
[Sat Aug 29 05:06:07.315607 2026] [security2:error] [pid 1017536:tid 1017703] [client 52.139.37.240:17445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carlpipescustomhomes.com"] [uri "/aged.php"] [unique_id "apK9HyJcY4fy7tP-rU33EQAAAjk"]
[Sat Aug 29 05:06:07.347436 2026] [security2:error] [pid 1017536:tid 1017705] [client 20.104.18.15:7143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/alfa.php"] [unique_id "apK9HyJcY4fy7tP-rU33EgAAAjs"]
[Sat Aug 29 05:06:07.348582 2026] [security2:error] [pid 1017536:tid 1017680] [client 20.48.251.3:62104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/upload.form.php"] [unique_id "apK9HyJcY4fy7tP-rU33EwAAAiI"]
[Sat Aug 29 05:06:07.354918 2026] [security2:error] [pid 1017536:tid 1017733] [client 20.104.18.15:13137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/sign.php"] [unique_id "apK9HyJcY4fy7tP-rU33FAAAAlc"]
[Sat Aug 29 05:06:07.378111 2026] [security2:error] [pid 1018003:tid 1018188] [client 20.220.204.93:64957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/inc.php"] [unique_id "apK9HzAh5Y1i2tUxg4HuvQAABd0"]
[Sat Aug 29 05:06:07.381753 2026] [security2:error] [pid 1017536:tid 1017760] [client 20.104.18.15:36797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/ah.php"] [unique_id "apK9HyJcY4fy7tP-rU33FgAAAnI"]
[Sat Aug 29 05:06:07.392129 2026] [security2:error] [pid 1017536:tid 1017792] [client 20.151.200.44:65506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/kure.php"] [unique_id "apK9HyJcY4fy7tP-rU33FwAAApI"]
[Sat Aug 29 05:06:07.422891 2026] [security2:error] [pid 1017536:tid 1017679] [client 20.151.200.44:45997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/super.php"] [unique_id "apK9HyJcY4fy7tP-rU33GAAAAiE"]
[Sat Aug 29 05:06:07.422911 2026] [security2:error] [pid 1017536:tid 1017737] [client 168.107.94.195:52631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9HyJcY4fy7tP-rU33GQAAAls"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:07.430105 2026] [security2:error] [pid 1017536:tid 1017748] [client 20.48.250.41:65110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/ww.php"] [unique_id "apK9HyJcY4fy7tP-rU33GgAAAmY"]
[Sat Aug 29 05:06:07.431859 2026] [security2:error] [pid 1017536:tid 1017687] [client 20.48.250.41:62533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/0x0x.php"] [unique_id "apK9HyJcY4fy7tP-rU33GwAAAik"]
[Sat Aug 29 05:06:07.454397 2026] [security2:error] [pid 1017536:tid 1017709] [client 20.104.49.130:51341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/wp-css.php"] [unique_id "apK9HyJcY4fy7tP-rU33HAAAAj8"]
[Sat Aug 29 05:06:07.477174 2026] [security2:error] [pid 1018003:tid 1018259] [client 20.48.251.3:62082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/aws_auth.php"] [unique_id "apK9HzAh5Y1i2tUxg4HuwAAABiM"]
[Sat Aug 29 05:06:07.482300 2026] [security2:error] [pid 1018003:tid 1018163] [client 20.104.18.15:7070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/33.php"] [unique_id "apK9HzAh5Y1i2tUxg4HuwQAABcQ"]
[Sat Aug 29 05:06:07.485991 2026] [security2:error] [pid 1017536:tid 1017793] [client 20.104.18.15:13240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/wnnjpsby.php"] [unique_id "apK9HyJcY4fy7tP-rU33HQAAApM"]
[Sat Aug 29 05:06:07.491701 2026] [security2:error] [pid 1017536:tid 1017770] [client 4.205.62.107:22486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/product.php"] [unique_id "apK9HyJcY4fy7tP-rU33HgAAAnw"]
[Sat Aug 29 05:06:07.514515 2026] [security2:error] [pid 1017536:tid 1017768] [client 52.139.37.240:17441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carlpipescustomhomes.com"] [uri "/essexec.php"] [unique_id "apK9HyJcY4fy7tP-rU33IAAAAno"]
[Sat Aug 29 05:06:07.518550 2026] [security2:error] [pid 1017536:tid 1017673] [client 20.104.18.15:23448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/backup.php"] [unique_id "apK9HyJcY4fy7tP-rU33IQAAAhs"]
[Sat Aug 29 05:06:07.519598 2026] [security2:error] [pid 1017536:tid 1017686] [client 20.151.200.44:64943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/shelp.php"] [unique_id "apK9HyJcY4fy7tP-rU33IgAAAig"]
[Sat Aug 29 05:06:07.522304 2026] [security2:error] [pid 1017536:tid 1017769] [client 20.220.204.93:64946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/6bcwiqwj.php"] [unique_id "apK9HyJcY4fy7tP-rU33IwAAAns"]
[Sat Aug 29 05:06:07.524730 2026] [security2:error] [pid 1018003:tid 1018173] [client 20.104.18.15:8067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/blacks.php"] [unique_id "apK9HzAh5Y1i2tUxg4HuwgAABc4"]
[Sat Aug 29 05:06:07.531709 2026] [security2:error] [pid 1017536:tid 1017722] [client 20.104.18.15:36762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/ws55.php"] [unique_id "apK9HyJcY4fy7tP-rU33JAAAAkw"]
[Sat Aug 29 05:06:07.536450 2026] [security2:error] [pid 1017536:tid 1017744] [client 20.104.49.130:39050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/v2.php"] [unique_id "apK9HyJcY4fy7tP-rU33JQAAAmI"]
[Sat Aug 29 05:06:07.550092 2026] [security2:error] [pid 1017536:tid 1017720] [client 20.196.209.81:5535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-admin/plugins/img/themes/plugins/maintenance.php"] [unique_id "apK9HyJcY4fy7tP-rU33JgAAAko"]
[Sat Aug 29 05:06:07.551170 2026] [security2:error] [pid 1017536:tid 1017548] [remote 34.138.144.127:57754] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "old.theenprogroup.com"] [uri "/@fs/root/.env"] [unique_id "apK9HyJcY4fy7tP-rU33KgACOQs"]
[Sat Aug 29 05:06:07.559677 2026] [security2:error] [pid 1017536:tid 1017736] [client 4.205.62.107:21620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/wp-content/maintenance.php"] [unique_id "apK9HyJcY4fy7tP-rU33LQAAAlo"]
[Sat Aug 29 05:06:07.567660 2026] [security2:error] [pid 1017536:tid 1017746] [client 20.48.250.41:64349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/w1px.php"] [unique_id "apK9HyJcY4fy7tP-rU33LgAAAmQ"]
[Sat Aug 29 05:06:07.568527 2026] [security2:error] [pid 1017536:tid 1017712] [client 20.151.200.44:47414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/lufix1.php"] [unique_id "apK9HyJcY4fy7tP-rU33LwAAAkI"]
[Sat Aug 29 05:06:07.578695 2026] [security2:error] [pid 1017536:tid 1017683] [client 4.205.62.107:9165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/services.php"] [unique_id "apK9HyJcY4fy7tP-rU33MAAAAiU"]
[Sat Aug 29 05:06:07.580805 2026] [security2:error] [pid 1018003:tid 1018257] [client 4.205.62.107:26629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/asa.php"] [unique_id "apK9HzAh5Y1i2tUxg4HuwwAABiE"]
[Sat Aug 29 05:06:07.584622 2026] [security2:error] [pid 1017536:tid 1017785] [client 20.52.41.200:1757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/elp.php"] [unique_id "apK9HyJcY4fy7tP-rU33MQAAAos"]
[Sat Aug 29 05:06:07.587488 2026] [security2:error] [pid 1017536:tid 1017695] [client 158.158.54.35:16062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/gifclass.php"] [unique_id "apK9HyJcY4fy7tP-rU33MgAAAjE"]
[Sat Aug 29 05:06:07.589589 2026] [security2:error] [pid 1017536:tid 1017733] [client 20.48.250.41:62496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/166.php"] [unique_id "apK9HyJcY4fy7tP-rU33MwAAAlc"]
[Sat Aug 29 05:06:07.607432 2026] [security2:error] [pid 1017536:tid 1017778] [client 20.48.251.3:61676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/hiquido.com/index.php"] [unique_id "apK9HyJcY4fy7tP-rU33NAAAAoQ"]
[Sat Aug 29 05:06:07.616209 2026] [security2:error] [pid 1017536:tid 1017761] [client 20.151.200.44:65499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/cafe.php"] [unique_id "apK9HyJcY4fy7tP-rU33NQAAAnM"]
[Sat Aug 29 05:06:07.628462 2026] [security2:error] [pid 1017536:tid 1017764] [client 40.83.93.50:7752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/dxc.php"] [unique_id "apK9HyJcY4fy7tP-rU33NwAAAnY"]
[Sat Aug 29 05:06:07.632618 2026] [security2:error] [pid 1017536:tid 1017788] [client 20.104.18.15:7031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/133.php"] [unique_id "apK9HyJcY4fy7tP-rU33OAAAAo4"]
[Sat Aug 29 05:06:07.634845 2026] [security2:error] [pid 1017536:tid 1017783] [client 20.104.18.15:13129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/gigi.php"] [unique_id "apK9HyJcY4fy7tP-rU33OQAAAok"]
[Sat Aug 29 05:06:07.670815 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.220.204.93:64370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/easy.php"] [unique_id "apK9HyJcY4fy7tP-rU33OgAAAlY"]
[Sat Aug 29 05:06:07.671763 2026] [security2:error] [pid 1017536:tid 1017789] [client 20.197.61.180:5857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-comments-post.php"] [unique_id "apK9HyJcY4fy7tP-rU33OwAAAo8"]
[Sat Aug 29 05:06:07.672800 2026] [security2:error] [pid 1017536:tid 1017715] [client 20.151.200.44:65526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/13ede.php"] [unique_id "apK9HyJcY4fy7tP-rU33PAAAAkU"]
[Sat Aug 29 05:06:07.681546 2026] [security2:error] [pid 1017536:tid 1017719] [client 20.104.18.15:8068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/beck.php"] [unique_id "apK9HyJcY4fy7tP-rU33PgAAAkk"]
[Sat Aug 29 05:06:07.687060 2026] [security2:error] [pid 1017536:tid 1017745] [client 20.104.18.15:23443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/indo.php"] [unique_id "apK9HyJcY4fy7tP-rU33PwAAAmM"]
[Sat Aug 29 05:06:07.700730 2026] [security2:error] [pid 1018003:tid 1018267] [client 20.104.18.15:36823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/drykl.php"] [unique_id "apK9HzAh5Y1i2tUxg4HuxgAABis"]
[Sat Aug 29 05:06:07.703772 2026] [security2:error] [pid 1018003:tid 1018277] [client 20.48.250.41:65038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/to.php"] [unique_id "apK9HzAh5Y1i2tUxg4HuxwAABjU"]
[Sat Aug 29 05:06:07.704674 2026] [security2:error] [pid 1017536:tid 1017717] [client 52.139.37.240:63367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carlpipescustomhomes.com"] [uri "/fw.php"] [unique_id "apK9HyJcY4fy7tP-rU33QQAAAkc"]
[Sat Aug 29 05:06:07.720112 2026] [security2:error] [pid 1018003:tid 1018263] [client 40.83.93.50:22224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-blog-header.php"] [unique_id "apK9HzAh5Y1i2tUxg4HuyQAABic"]
[Sat Aug 29 05:06:07.732856 2026] [security2:error] [pid 1017536:tid 1017710] [client 20.48.250.41:60793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/h2a2ck.php"] [unique_id "apK9HyJcY4fy7tP-rU33RwAAAkA"]
[Sat Aug 29 05:06:07.734329 2026] [security2:error] [pid 1017536:tid 1017688] [client 20.48.251.3:62106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/ws79.php"] [unique_id "apK9HyJcY4fy7tP-rU33SAAAAio"]
[Sat Aug 29 05:06:07.744070 2026] [security2:error] [pid 1017536:tid 1017687] [client 68.155.159.216:51442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK9HyJcY4fy7tP-rU33SQAAAik"]
[Sat Aug 29 05:06:07.747395 2026] [security2:error] [pid 1017536:tid 1017724] [client 20.104.49.130:53657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/berlin.php"] [unique_id "apK9HyJcY4fy7tP-rU33SgAAAk4"]
[Sat Aug 29 05:06:07.773802 2026] [security2:error] [pid 1018003:tid 1018166] [client 20.104.18.15:7167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/sym.php"] [unique_id "apK9HzAh5Y1i2tUxg4HuzAAABcc"]
[Sat Aug 29 05:06:07.775786 2026] [security2:error] [pid 1017536:tid 1017775] [client 20.151.200.44:46645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/hack.php"] [unique_id "apK9HyJcY4fy7tP-rU33TAAAAoE"]
[Sat Aug 29 05:06:07.804224 2026] [security2:error] [pid 1017536:tid 1017693] [client 168.107.94.195:52904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9HyJcY4fy7tP-rU33TgAAAi8"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:07.809254 2026] [security2:error] [pid 1018003:tid 1018249] [client 20.220.204.93:64917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/fresh3.php"] [unique_id "apK9HzAh5Y1i2tUxg4HuzQAABhk"]
[Sat Aug 29 05:06:07.817079 2026] [security2:error] [pid 1017536:tid 1017793] [client 20.104.18.15:13136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/info.php/new.php"] [unique_id "apK9HyJcY4fy7tP-rU33TwAAApM"]
[Sat Aug 29 05:06:07.818042 2026] [security2:error] [pid 1018003:tid 1018199] [client 20.151.200.44:64929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/k8.php"] [unique_id "apK9HzAh5Y1i2tUxg4HuzgAABeg"]
[Sat Aug 29 05:06:07.821325 2026] [security2:error] [pid 1018003:tid 1018170] [client 20.104.18.15:23370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/sign.php"] [unique_id "apK9HzAh5Y1i2tUxg4HuzwAABcs"]
[Sat Aug 29 05:06:07.833762 2026] [security2:error] [pid 1017536:tid 1017754] [client 20.104.18.15:8014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/t3.php"] [unique_id "apK9HyJcY4fy7tP-rU33UAAAAmw"]
[Sat Aug 29 05:06:07.857042 2026] [security2:error] [pid 1017536:tid 1017643] [remote 34.138.144.127:57754] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "old.theenprogroup.com"] [uri "/_image"] [unique_id "apK9HyJcY4fy7tP-rU33UQACOWo"]
[Sat Aug 29 05:06:07.857174 2026] [security2:error] [pid 1018003:tid 1018205] [client 20.104.18.15:36798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/backup.php"] [unique_id "apK9HzAh5Y1i2tUxg4Hu0AAABe4"]
[Sat Aug 29 05:06:07.858150 2026] [security2:error] [pid 1017536:tid 1017678] [client 4.205.62.107:21856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/broadcasting.php"] [unique_id "apK9HyJcY4fy7tP-rU33UgAAAiA"]
[Sat Aug 29 05:06:07.861981 2026] [security2:error] [pid 1018003:tid 1018180] [client 20.48.250.41:64328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/thui.php"] [unique_id "apK9HzAh5Y1i2tUxg4Hu0QAABdU"]
[Sat Aug 29 05:06:07.862138 2026] [security2:error] [pid 1017536:tid 1017686] [client 20.48.251.3:61195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/public/wp-blog.php"] [unique_id "apK9HyJcY4fy7tP-rU33UwAAAig"]
[Sat Aug 29 05:06:07.863342 2026] [security2:error] [pid 1017536:tid 1017769] [client 68.155.159.216:14287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/wzy.php"] [unique_id "apK9HyJcY4fy7tP-rU33VAAAAns"]
[Sat Aug 29 05:06:07.873175 2026] [security2:error] [pid 1018003:tid 1018252] [client 20.48.250.41:62477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/error_log.php"] [unique_id "apK9HzAh5Y1i2tUxg4Hu0gAABhw"]
[Sat Aug 29 05:06:07.898089 2026] [security2:error] [pid 1017536:tid 1017767] [client 52.139.37.240:17456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carlpipescustomhomes.com"] [uri "/zwso.php"] [unique_id "apK9HyJcY4fy7tP-rU33VgAAAnk"]
[Sat Aug 29 05:06:07.936675 2026] [security2:error] [pid 1017536:tid 1017695] [client 20.151.200.44:47373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/155.php"] [unique_id "apK9HyJcY4fy7tP-rU33WAAAAjE"]
[Sat Aug 29 05:06:07.943721 2026] [security2:error] [pid 1017536:tid 1017731] [client 20.196.209.81:5534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-admin/security.php"] [unique_id "apK9HyJcY4fy7tP-rU33WQAAAlU"]
[Sat Aug 29 05:06:07.963222 2026] [security2:error] [pid 1017536:tid 1017681] [client 20.104.18.15:6996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/8.php"] [unique_id "apK9HyJcY4fy7tP-rU33WwAAAiM"]
[Sat Aug 29 05:06:07.966011 2026] [security2:error] [pid 1017536:tid 1017681] [client 4.205.62.107:56023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/localconf.php"] [unique_id "apK9HyJcY4fy7tP-rU33XQAAAiM"]
[Sat Aug 29 05:06:07.966571 2026] [security2:error] [pid 1017536:tid 1017757] [client 68.155.159.216:18379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/file5.php"] [unique_id "apK9HyJcY4fy7tP-rU33XgAAAm8"]
[Sat Aug 29 05:06:07.976547 2026] [security2:error] [pid 1017536:tid 1017764] [client 20.151.200.44:64848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/eval.php"] [unique_id "apK9HyJcY4fy7tP-rU33YAAAAnY"]
[Sat Aug 29 05:06:07.979077 2026] [security2:error] [pid 1017536:tid 1017788] [client 158.23.147.79:63001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-admin/index.php"] [unique_id "apK9HyJcY4fy7tP-rU33YQAAAo4"]
[Sat Aug 29 05:06:07.984978 2026] [security2:error] [pid 1017536:tid 1017783] [client 68.155.159.216:52766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK9HyJcY4fy7tP-rU33YgAAAok"]
[Sat Aug 29 05:06:07.988403 2026] [security2:error] [pid 1017536:tid 1017750] [client 20.104.18.15:8018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/wp.php"] [unique_id "apK9HyJcY4fy7tP-rU33YwAAAmg"]
[Sat Aug 29 05:06:07.990116 2026] [security2:error] [pid 1017536:tid 1017765] [client 20.48.251.3:61682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/php-details.php"] [unique_id "apK9HyJcY4fy7tP-rU33ZAAAAnc"]
[Sat Aug 29 05:06:07.999836 2026] [security2:error] [pid 1017536:tid 1017716] [client 20.104.18.15:36860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/indo.php"] [unique_id "apK9HyJcY4fy7tP-rU33ZQAAAkY"]
[Sat Aug 29 05:06:08.003624 2026] [security2:error] [pid 1017536:tid 1017732] [client 158.23.147.79:30594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK9ICJcY4fy7tP-rU33ZgAAAlY"]
[Sat Aug 29 05:06:08.014029 2026] [security2:error] [pid 1018003:tid 1018224] [client 20.104.18.15:23465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/wnnjpsby.php"] [unique_id "apK9IDAh5Y1i2tUxg4Hu0wAABgE"]
[Sat Aug 29 05:06:08.015059 2026] [security2:error] [pid 1017536:tid 1017715] [client 20.151.200.44:64239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/alog.php"] [unique_id "apK9ICJcY4fy7tP-rU33aAAAAkU"]
[Sat Aug 29 05:06:08.024933 2026] [security2:error] [pid 1017536:tid 1017685] [client 20.52.41.200:1737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-content/cong.php"] [unique_id "apK9ICJcY4fy7tP-rU33agAAAic"]
[Sat Aug 29 05:06:08.043860 2026] [security2:error] [pid 1017536:tid 1017753] [client 20.104.18.15:13279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/w.php"] [unique_id "apK9ICJcY4fy7tP-rU33bQAAAms"]
[Sat Aug 29 05:06:08.044542 2026] [security2:error] [pid 1017536:tid 1017706] [client 20.48.250.41:64348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/Jcrop.php"] [unique_id "apK9ICJcY4fy7tP-rU33bgAAAjw"]
[Sat Aug 29 05:06:08.046640 2026] [security2:error] [pid 1018003:tid 1018169] [client 20.48.250.41:62551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/403.php"] [unique_id "apK9IDAh5Y1i2tUxg4Hu1QAABco"]
[Sat Aug 29 05:06:08.053078 2026] [security2:error] [pid 1017536:tid 1017743] [client 68.155.159.216:24575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/makeasmtp.php"] [unique_id "apK9ICJcY4fy7tP-rU33bwAAAmE"]
[Sat Aug 29 05:06:08.053837 2026] [security2:error] [pid 1017536:tid 1017724] [client 158.23.147.79:32704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/file17.php"] [unique_id "apK9ICJcY4fy7tP-rU33cAAAAk4"]
[Sat Aug 29 05:06:08.069400 2026] [security2:error] [pid 1018003:tid 1018167] [client 20.151.200.44:46624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/mcd.php"] [unique_id "apK9IDAh5Y1i2tUxg4Hu2QAABcg"]
[Sat Aug 29 05:06:08.093963 2026] [security2:error] [pid 1018003:tid 1018269] [client 52.139.37.240:17408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carlpipescustomhomes.com"] [uri "/admin/function.php"] [unique_id "apK9IDAh5Y1i2tUxg4Hu2gAABi0"]
[Sat Aug 29 05:06:08.094493 2026] [security2:error] [pid 1017536:tid 1017709] [client 20.220.204.93:63830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/bgymj.php"] [unique_id "apK9ICJcY4fy7tP-rU33cwAAAj8"]
[Sat Aug 29 05:06:08.103756 2026] [security2:error] [pid 1018003:tid 1018222] [client 158.23.147.79:25566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK9IDAh5Y1i2tUxg4Hu2wAABf8"]
[Sat Aug 29 05:06:08.109900 2026] [security2:error] [pid 1018003:tid 1018236] [client 40.83.93.50:16615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/wp-2019.php"] [unique_id "apK9IDAh5Y1i2tUxg4Hu3AAABgw"]
[Sat Aug 29 05:06:08.118225 2026] [security2:error] [pid 1017536:tid 1017754] [client 20.48.251.3:62119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/routes.php"] [unique_id "apK9ICJcY4fy7tP-rU33dAAAAmw"]
[Sat Aug 29 05:06:08.120929 2026] [security2:error] [pid 1017536:tid 1017678] [client 68.155.159.216:51424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK9ICJcY4fy7tP-rU33dQAAAiA"]
[Sat Aug 29 05:06:08.125887 2026] [security2:error] [pid 1018003:tid 1018225] [client 20.104.18.15:7141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/goods.php"] [unique_id "apK9IDAh5Y1i2tUxg4Hu3QAABgI"]
[Sat Aug 29 05:06:08.151102 2026] [security2:error] [pid 1017536:tid 1017770] [client 66.248.203.2:54442] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cheerfulmonk.com"] [uri "/page/17/"] [unique_id "apK9ICJcY4fy7tP-rU33eQAAAnw"]
[Sat Aug 29 05:06:08.153415 2026] [security2:error] [pid 1017536:tid 1017720] [client 20.104.18.15:36759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/sign.php"] [unique_id "apK9ICJcY4fy7tP-rU33egAAAko"]
[Sat Aug 29 05:06:08.159505 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.104.18.15:23398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/gigi.php"] [unique_id "apK9ICJcY4fy7tP-rU33ewAAAnk"]
[Sat Aug 29 05:06:08.170514 2026] [security2:error] [pid 1017536:tid 1017705] [client 158.23.147.79:35834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK9ICJcY4fy7tP-rU33fQAAAjs"]
[Sat Aug 29 05:06:08.178060 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.104.18.15:8101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/abcd.php"] [unique_id "apK9ICJcY4fy7tP-rU33fgAAAh0"]
[Sat Aug 29 05:06:08.179882 2026] [security2:error] [pid 1017536:tid 1017785] [client 158.158.54.35:10742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK9ICJcY4fy7tP-rU33fwAAAos"]
[Sat Aug 29 05:06:08.185807 2026] [security2:error] [pid 1017536:tid 1017747] [client 168.107.94.195:53162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9ICJcY4fy7tP-rU33gAAAAmU"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:08.189144 2026] [security2:error] [pid 1017536:tid 1017695] [client 20.104.18.15:13290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/x.php"] [unique_id "apK9ICJcY4fy7tP-rU33gQAAAjE"]
[Sat Aug 29 05:06:08.195827 2026] [security2:error] [pid 1017536:tid 1017717] [client 40.83.93.50:5915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-blogs.php"] [unique_id "apK9ICJcY4fy7tP-rU33ggAAAkc"]
[Sat Aug 29 05:06:08.243086 2026] [security2:error] [pid 1018003:tid 1018264] [client 20.48.251.3:61668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/aww.php"] [unique_id "apK9IDAh5Y1i2tUxg4Hu4wAABig"]
[Sat Aug 29 05:06:08.243403 2026] [security2:error] [pid 1017536:tid 1017783] [client 68.155.159.216:16152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/content.php"] [unique_id "apK9ICJcY4fy7tP-rU33hgAAAok"]
[Sat Aug 29 05:06:08.245423 2026] [security2:error] [pid 1017536:tid 1017750] [client 20.48.250.41:65030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/ws58.php"] [unique_id "apK9ICJcY4fy7tP-rU33iQAAAmg"]
[Sat Aug 29 05:06:08.253318 2026] [security2:error] [pid 1018003:tid 1018200] [client 20.151.200.44:46615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/waw.php"] [unique_id "apK9IDAh5Y1i2tUxg4Hu5AAABek"]
[Sat Aug 29 05:06:08.254694 2026] [security2:error] [pid 1017536:tid 1017784] [client 20.48.250.41:62556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/cytyr.php"] [unique_id "apK9ICJcY4fy7tP-rU33iwAAAoo"]
[Sat Aug 29 05:06:08.257320 2026] [security2:error] [pid 1017536:tid 1017696] [client 20.104.18.15:7133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/ah.php"] [unique_id "apK9ICJcY4fy7tP-rU33jAAAAjI"]
[Sat Aug 29 05:06:08.260828 2026] [security2:error] [pid 1018003:tid 1018268] [client 20.151.200.44:64859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/sao.php"] [unique_id "apK9IDAh5Y1i2tUxg4Hu5QAABiw"]
[Sat Aug 29 05:06:08.287210 2026] [security2:error] [pid 1017536:tid 1017715] [client 158.23.147.79:50104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK9ICJcY4fy7tP-rU33jQAAAkU"]
[Sat Aug 29 05:06:08.290927 2026] [security2:error] [pid 1018003:tid 1018219] [client 20.104.18.15:23510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/info.php/new.php"] [unique_id "apK9IDAh5Y1i2tUxg4Hu5wAABfw"]
[Sat Aug 29 05:06:08.301951 2026] [security2:error] [pid 1017536:tid 1017685] [client 158.23.147.79:30678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/goat.php"] [unique_id "apK9ICJcY4fy7tP-rU33jgAAAic"]
[Sat Aug 29 05:06:08.302089 2026] [security2:error] [pid 1018003:tid 1018251] [client 52.139.37.240:17412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carlpipescustomhomes.com"] [uri "/zoom1.php"] [unique_id "apK9IDAh5Y1i2tUxg4Hu6AAABhs"]
[Sat Aug 29 05:06:08.302643 2026] [security2:error] [pid 1018003:tid 1018255] [client 20.104.104.62:43039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9IDAh5Y1i2tUxg4Hu6QAABh8"]
[Sat Aug 29 05:06:08.315113 2026] [security2:error] [pid 1017536:tid 1017749] [client 20.104.49.130:57481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/100.php"] [unique_id "apK9ICJcY4fy7tP-rU33kgAAAmc"]
[Sat Aug 29 05:06:08.318475 2026] [security2:error] [pid 1018003:tid 1018155] [client 20.104.18.15:13231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/ssla.php"] [unique_id "apK9IDAh5Y1i2tUxg4Hu6gAABbw"]
[Sat Aug 29 05:06:08.332677 2026] [security2:error] [pid 1017536:tid 1017706] [client 20.104.18.15:8075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/nofile.php"] [unique_id "apK9ICJcY4fy7tP-rU33kwAAAjw"]
[Sat Aug 29 05:06:08.333149 2026] [security2:error] [pid 1018003:tid 1018164] [client 20.220.204.93:64263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/ws69.php"] [unique_id "apK9IDAh5Y1i2tUxg4Hu6wAABcU"]
[Sat Aug 29 05:06:08.334605 2026] [security2:error] [pid 1017536:tid 1017710] [client 20.151.200.44:64927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/adin.php"] [unique_id "apK9ICJcY4fy7tP-rU33lQAAAkA"]
[Sat Aug 29 05:06:08.336778 2026] [security2:error] [pid 1017536:tid 1017761] [client 20.196.209.81:5559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK9ICJcY4fy7tP-rU33lgAAAnM"]
[Sat Aug 29 05:06:08.337222 2026] [security2:error] [pid 1017536:tid 1017688] [client 20.104.104.62:10485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/msy.php"] [unique_id "apK9ICJcY4fy7tP-rU33lwAAAio"]
[Sat Aug 29 05:06:08.338145 2026] [cgid:error] [pid 1017536:tid 1017619] [remote 74.7.241.131:46466] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/scottewe/public_html/404.shtml
[Sat Aug 29 05:06:08.338231 2026] [security2:error] [pid 1017536:tid 1017674] [client 74.7.241.131:46466] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "jof.tvy.mybluehost.me"] [uri "/404.shtml"] [unique_id "apK9ICJcY4fy7tP-rU33lAACHFI"]
[Sat Aug 29 05:06:08.367365 2026] [security2:error] [pid 1017536:tid 1017729] [client 20.48.251.3:61235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/maxro.php"] [unique_id "apK9ICJcY4fy7tP-rU33mwAAAlM"]
[Sat Aug 29 05:06:08.381007 2026] [security2:error] [pid 1017536:tid 1017709] [client 4.205.62.107:64295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/cache-compat.php"] [unique_id "apK9ICJcY4fy7tP-rU33nAAAAj8"]
[Sat Aug 29 05:06:08.381215 2026] [security2:error] [pid 1017536:tid 1017698] [client 20.197.61.180:5846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-config.php"] [unique_id "apK9ICJcY4fy7tP-rU33nQAAAjQ"]
[Sat Aug 29 05:06:08.381728 2026] [security2:error] [pid 1017536:tid 1017689] [client 45.205.1.124:50751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 124.1.205.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "votespring-ford.com"] [uri "/assets/plugins/file-uploader/server/php/index.php"] [unique_id "apK9ICJcY4fy7tP-rU33ngAAAis"]
[Sat Aug 29 05:06:08.388928 2026] [security2:error] [pid 1018003:tid 1018243] [client 20.104.18.15:5365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thaipavilionskokie.com"] [uri "/robot.php"] [unique_id "apK9IDAh5Y1i2tUxg4Hu7gAABhM"]
[Sat Aug 29 05:06:08.390168 2026] [security2:error] [pid 1017536:tid 1017754] [client 20.104.104.62:41610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/wp-gzone.php"] [unique_id "apK9ICJcY4fy7tP-rU33oAAAAmw"]
[Sat Aug 29 05:06:08.393917 2026] [security2:error] [pid 1017536:tid 1017694] [client 20.48.250.41:65122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/xs.php"] [unique_id "apK9ICJcY4fy7tP-rU33oQAAAjA"]
[Sat Aug 29 05:06:08.409428 2026] [security2:error] [pid 1018003:tid 1018215] [client 20.104.18.15:7080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/ws55.php"] [unique_id "apK9IDAh5Y1i2tUxg4Hu7wAABfg"]
[Sat Aug 29 05:06:08.420081 2026] [security2:error] [pid 1017536:tid 1017712] [client 20.48.250.41:60678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/galer.php"] [unique_id "apK9ICJcY4fy7tP-rU33ogAAAkI"]
[Sat Aug 29 05:06:08.421388 2026] [security2:error] [pid 1017536:tid 1017680] [client 20.104.104.62:48483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/blnux.php"] [unique_id "apK9ICJcY4fy7tP-rU33owAAAiI"]
[Sat Aug 29 05:06:08.431234 2026] [security2:error] [pid 1017536:tid 1017720] [client 20.104.18.15:36862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/wnnjpsby.php"] [unique_id "apK9ICJcY4fy7tP-rU33pgAAAko"]
[Sat Aug 29 05:06:08.436679 2026] [security2:error] [pid 1018003:tid 1018226] [client 20.104.104.62:64662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9IDAh5Y1i2tUxg4Hu8QAABgM"]
[Sat Aug 29 05:06:08.439187 2026] [security2:error] [pid 1017536:tid 1017705] [client 20.151.200.44:64877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/uuu.php"] [unique_id "apK9ICJcY4fy7tP-rU33pwAAAjs"]
[Sat Aug 29 05:06:08.452742 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.104.18.15:13128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "apK9ICJcY4fy7tP-rU33qAAAAh0"]
[Sat Aug 29 05:06:08.461074 2026] [security2:error] [pid 1017536:tid 1017695] [client 68.155.159.216:50345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-content/index.php"] [unique_id "apK9ICJcY4fy7tP-rU33qQAAAjE"]
[Sat Aug 29 05:06:08.469352 2026] [security2:error] [pid 1018003:tid 1018216] [client 20.52.41.200:1235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-admin/images/admin.php"] [unique_id "apK9IDAh5Y1i2tUxg4Hu8gAABfk"]
[Sat Aug 29 05:06:08.470542 2026] [security2:error] [pid 1017536:tid 1017717] [client 20.104.104.62:44544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/siln.php"] [unique_id "apK9ICJcY4fy7tP-rU33qgAAAkc"]
[Sat Aug 29 05:06:08.476387 2026] [security2:error] [pid 1018003:tid 1018250] [client 20.104.104.62:20812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/1945.php"] [unique_id "apK9IDAh5Y1i2tUxg4Hu9AAABho"]
[Sat Aug 29 05:06:08.493975 2026] [security2:error] [pid 1017536:tid 1017757] [client 20.48.251.3:62085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/brc.php"] [unique_id "apK9ICJcY4fy7tP-rU33rgAAAm8"]
[Sat Aug 29 05:06:08.497320 2026] [security2:error] [pid 1017536:tid 1017683] [client 52.139.37.240:17465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carlpipescustomhomes.com"] [uri "/about.php7"] [unique_id "apK9ICJcY4fy7tP-rU33rwAAAiU"]
[Sat Aug 29 05:06:08.527836 2026] [security2:error] [pid 1017536:tid 1017750] [client 20.104.104.62:54549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/str.php"] [unique_id "apK9ICJcY4fy7tP-rU33sQAAAmg"]
[Sat Aug 29 05:06:08.532073 2026] [security2:error] [pid 1017536:tid 1017672] [client 20.48.250.41:65088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/zu.php"] [unique_id "apK9ICJcY4fy7tP-rU33sgAAAho"]
[Sat Aug 29 05:06:08.543281 2026] [security2:error] [pid 1017536:tid 1017696] [client 20.104.18.15:8025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/run.php"] [unique_id "apK9ICJcY4fy7tP-rU33swAAAjI"]
[Sat Aug 29 05:06:08.543737 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.104.18.15:7145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/drykl.php"] [unique_id "apK9ICJcY4fy7tP-rU33tAAAAlY"]
[Sat Aug 29 05:06:08.565855 2026] [security2:error] [pid 1017536:tid 1017719] [client 168.107.94.195:53426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9ICJcY4fy7tP-rU33tQAAAkk"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:08.568439 2026] [security2:error] [pid 1017536:tid 1017752] [client 20.151.200.44:46623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/x23.php"] [unique_id "apK9ICJcY4fy7tP-rU33tgAAAmo"]
[Sat Aug 29 05:06:08.568772 2026] [security2:error] [pid 1017536:tid 1017670] [client 20.104.104.62:23403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/fh26.php"] [unique_id "apK9ICJcY4fy7tP-rU33uAAAAhg"]
[Sat Aug 29 05:06:08.573668 2026] [security2:error] [pid 1017536:tid 1017745] [client 20.220.204.93:65000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/ccs.php"] [unique_id "apK9ICJcY4fy7tP-rU33uQAAAmM"]
[Sat Aug 29 05:06:08.584057 2026] [security2:error] [pid 1018003:tid 1018271] [client 20.104.18.15:13132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/wp-aothait.php"] [unique_id "apK9IDAh5Y1i2tUxg4Hu9gAABi8"]
[Sat Aug 29 05:06:08.590962 2026] [security2:error] [pid 1017536:tid 1017721] [client 20.104.18.15:36700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/gigi.php"] [unique_id "apK9ICJcY4fy7tP-rU33ugAAAks"]
[Sat Aug 29 05:06:08.601500 2026] [security2:error] [pid 1017536:tid 1017710] [client 20.104.18.15:56363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thaipavilionskokie.com"] [uri "/revo.php"] [unique_id "apK9ICJcY4fy7tP-rU33uwAAAkA"]
[Sat Aug 29 05:06:08.601837 2026] [security2:error] [pid 1017536:tid 1017761] [client 20.104.104.62:10481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/f-401.php"] [unique_id "apK9ICJcY4fy7tP-rU33vAAAAnM"]
[Sat Aug 29 05:06:08.605331 2026] [security2:error] [pid 1017536:tid 1017713] [client 20.151.200.44:64258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/private.php"] [unique_id "apK9ICJcY4fy7tP-rU33vQAAAkM"]
[Sat Aug 29 05:06:08.621429 2026] [security2:error] [pid 1018003:tid 1018160] [client 20.48.250.41:62487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/baixy.php"] [unique_id "apK9IDAh5Y1i2tUxg4Hu9wAABcE"]
[Sat Aug 29 05:06:08.621497 2026] [security2:error] [pid 1017536:tid 1017687] [client 20.48.251.3:62111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/vx.php"] [unique_id "apK9ICJcY4fy7tP-rU33vgAAAik"]
[Sat Aug 29 05:06:08.625312 2026] [security2:error] [pid 1017536:tid 1017704] [client 158.158.54.35:19490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/css/index.php"] [unique_id "apK9ICJcY4fy7tP-rU33vwAAAjo"]
[Sat Aug 29 05:06:08.626236 2026] [security2:error] [pid 1017536:tid 1017767] [client 40.83.93.50:14438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/menu.php"] [unique_id "apK9ICJcY4fy7tP-rU33wAAAAnk"]
[Sat Aug 29 05:06:08.628886 2026] [security2:error] [pid 1018003:tid 1018196] [client 4.205.62.107:22259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/public/wp-blog.php"] [unique_id "apK9IDAh5Y1i2tUxg4Hu-AAABeU"]
[Sat Aug 29 05:06:08.636091 2026] [security2:error] [pid 1018003:tid 1018267] [client 20.104.104.62:43030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/baee.php"] [unique_id "apK9IDAh5Y1i2tUxg4Hu-QAABis"]
[Sat Aug 29 05:06:08.663172 2026] [core:error] [pid 1017536:tid 1017792] [client 20.104.18.15:23507] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:08.663187 2026] [core:error] [pid 1017536:tid 1017792] [client 20.104.18.15:23507] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:08.667679 2026] [security2:error] [pid 1017536:tid 1017668] [client 20.104.104.62:45961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/mega.php"] [unique_id "apK9ICJcY4fy7tP-rU33wgAAAhY"]
[Sat Aug 29 05:06:08.672714 2026] [security2:error] [pid 1018003:tid 1018263] [client 20.104.18.15:7068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/backup.php"] [unique_id "apK9IDAh5Y1i2tUxg4Hu-gAABic"]
[Sat Aug 29 05:06:08.689444 2026] [security2:error] [pid 1018003:tid 1018257] [client 52.139.37.240:17459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carlpipescustomhomes.com"] [uri "/cron.php"] [unique_id "apK9IDAh5Y1i2tUxg4Hu_QAABiE"]
[Sat Aug 29 05:06:08.697796 2026] [security2:error] [pid 1017536:tid 1017698] [client 20.48.250.41:64293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/lanka.php"] [unique_id "apK9ICJcY4fy7tP-rU33wwAAAjQ"]
[Sat Aug 29 05:06:08.709219 2026] [security2:error] [pid 1017536:tid 1017784] [client 40.83.93.50:12431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-comments-post.php"] [unique_id "apK9ICJcY4fy7tP-rU33xAAAAoo"]
[Sat Aug 29 05:06:08.709910 2026] [security2:error] [pid 1017536:tid 1017689] [client 4.205.62.107:22493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/upload.form.php"] [unique_id "apK9ICJcY4fy7tP-rU33xQAAAis"]
[Sat Aug 29 05:06:08.713654 2026] [security2:error] [pid 1017536:tid 1017754] [client 20.220.204.93:63853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/mar.php"] [unique_id "apK9ICJcY4fy7tP-rU33xgAAAmw"]
[Sat Aug 29 05:06:08.719516 2026] [security2:error] [pid 1018003:tid 1018252] [client 4.205.62.107:26632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/radio.php"] [unique_id "apK9IDAh5Y1i2tUxg4Hu_gAABhw"]
[Sat Aug 29 05:06:08.719840 2026] [security2:error] [pid 1017536:tid 1017678] [client 4.205.62.107:53404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/log.php"] [unique_id "apK9ICJcY4fy7tP-rU33yAAAAiA"]
[Sat Aug 29 05:06:08.720144 2026] [security2:error] [pid 1017536:tid 1017773] [client 20.104.18.15:13147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/wp-includes/index.php"] [unique_id "apK9ICJcY4fy7tP-rU33yQAAAn8"]
[Sat Aug 29 05:06:08.720863 2026] [security2:error] [pid 1018003:tid 1018246] [client 20.104.49.130:52340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.carlosmua.com"] [uri "/666.php"] [unique_id "apK9IDAh5Y1i2tUxg4Hu_wAABhY"]
[Sat Aug 29 05:06:08.727453 2026] [security2:error] [pid 1017536:tid 1017712] [client 20.104.104.62:64731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wos.php"] [unique_id "apK9ICJcY4fy7tP-rU33zAAAAkI"]
[Sat Aug 29 05:06:08.733131 2026] [security2:error] [pid 1017536:tid 1017720] [client 20.104.18.15:8064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/new.php"] [unique_id "apK9ICJcY4fy7tP-rU33zQAAAko"]
[Sat Aug 29 05:06:08.733310 2026] [security2:error] [pid 1017536:tid 1017744] [client 20.196.209.81:5197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-admin/system.php"] [unique_id "apK9ICJcY4fy7tP-rU33zgAAAmI"]
[Sat Aug 29 05:06:08.733467 2026] [security2:error] [pid 1017536:tid 1017746] [client 20.104.104.62:10439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/hq.php"] [unique_id "apK9ICJcY4fy7tP-rU33zwAAAmQ"]
[Sat Aug 29 05:06:08.733668 2026] [security2:error] [pid 1017536:tid 1017705] [client 20.104.18.15:36769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/info.php/new.php"] [unique_id "apK9ICJcY4fy7tP-rU330AAAAjs"]
[Sat Aug 29 05:06:08.736920 2026] [security2:error] [pid 1017536:tid 1017790] [client 20.48.251.3:14045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/G-in.php"] [unique_id "apK9ICJcY4fy7tP-rU330QAAApA"]
[Sat Aug 29 05:06:08.748263 2026] [security2:error] [pid 1017536:tid 1017708] [client 20.48.251.3:62138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/ty.php"] [unique_id "apK9ICJcY4fy7tP-rU330gAAAj4"]
[Sat Aug 29 05:06:08.763198 2026] [security2:error] [pid 1017536:tid 1017741] [client 20.104.18.15:23514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/w.php"] [unique_id "apK9ICJcY4fy7tP-rU330wAAAl8"]
[Sat Aug 29 05:06:08.770956 2026] [security2:error] [pid 1017536:tid 1017717] [client 20.104.18.15:53596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thaipavilionskokie.com"] [uri "/birrs.php"] [unique_id "apK9ICJcY4fy7tP-rU331AAAAkc"]
[Sat Aug 29 05:06:08.780400 2026] [security2:error] [pid 1017536:tid 1017683] [client 20.104.104.62:4818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/d12.php"] [unique_id "apK9ICJcY4fy7tP-rU333AAAAiU"]
[Sat Aug 29 05:06:08.805206 2026] [security2:error] [pid 1017536:tid 1017672] [client 20.48.250.41:59269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/ava.php"] [unique_id "apK9ICJcY4fy7tP-rU333QAAAho"]
[Sat Aug 29 05:06:08.811452 2026] [security2:error] [pid 1017536:tid 1017765] [client 20.151.200.44:47333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/ws66.php"] [unique_id "apK9ICJcY4fy7tP-rU334AAAAnc"]
[Sat Aug 29 05:06:08.822222 2026] [security2:error] [pid 1017536:tid 1017781] [client 20.104.104.62:45957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/ww3.php"] [unique_id "apK9ICJcY4fy7tP-rU334QAAAoc"]
[Sat Aug 29 05:06:08.826720 2026] [security2:error] [pid 1017536:tid 1017740] [client 20.104.104.62:52041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/fgd.php"] [unique_id "apK9ICJcY4fy7tP-rU334gAAAl4"]
[Sat Aug 29 05:06:08.852139 2026] [security2:error] [pid 1017536:tid 1017719] [client 20.151.200.44:64222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/sf9.php"] [unique_id "apK9ICJcY4fy7tP-rU335QAAAkk"]
[Sat Aug 29 05:06:08.866464 2026] [security2:error] [pid 1017536:tid 1017731] [client 20.104.104.62:10830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/mh.php"] [unique_id "apK9ICJcY4fy7tP-rU336AAAAlU"]
[Sat Aug 29 05:06:08.868340 2026] [security2:error] [pid 1018003:tid 1018207] [client 20.104.18.15:7071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/indo.php"] [unique_id "apK9IDAh5Y1i2tUxg4HvAgAABfA"]
[Sat Aug 29 05:06:08.869760 2026] [security2:error] [pid 1017536:tid 1017749] [client 20.220.204.93:64936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/ccu.php"] [unique_id "apK9ICJcY4fy7tP-rU336QAAAmc"]
[Sat Aug 29 05:06:08.870124 2026] [security2:error] [pid 1017536:tid 1017736] [client 158.23.147.79:24491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/mah.php"] [unique_id "apK9ICJcY4fy7tP-rU336gAAAlo"]
[Sat Aug 29 05:06:08.871729 2026] [security2:error] [pid 1017536:tid 1017721] [client 20.104.18.15:8137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/inx.php"] [unique_id "apK9ICJcY4fy7tP-rU336wAAAks"]
[Sat Aug 29 05:06:08.874930 2026] [security2:error] [pid 1017536:tid 1017710] [client 20.48.251.3:61224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/adminer-4.7.6-en.php"] [unique_id "apK9ICJcY4fy7tP-rU337AAAAkA"]
[Sat Aug 29 05:06:08.881017 2026] [security2:error] [pid 1017536:tid 1017770] [client 20.48.250.41:65120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/gettest.php"] [unique_id "apK9ICJcY4fy7tP-rU337QAAAnw"]
[Sat Aug 29 05:06:08.890452 2026] [security2:error] [pid 1018003:tid 1018177] [client 52.139.37.240:17435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carlpipescustomhomes.com"] [uri "/wp-2019.php"] [unique_id "apK9IDAh5Y1i2tUxg4HvBAAABdI"]
[Sat Aug 29 05:06:08.895902 2026] [security2:error] [pid 1017536:tid 1017704] [client 20.151.200.44:65501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/lfi.php"] [unique_id "apK9ICJcY4fy7tP-rU337gAAAjo"]
[Sat Aug 29 05:06:08.915447 2026] [security2:error] [pid 1018003:tid 1018238] [client 20.52.41.200:1750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-mail.php"] [unique_id "apK9IDAh5Y1i2tUxg4HvBQAABg4"]
[Sat Aug 29 05:06:08.941254 2026] [security2:error] [pid 1017536:tid 1017703] [client 20.104.18.15:13194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/file31.php"] [unique_id "apK9ICJcY4fy7tP-rU338QAAAjk"]
[Sat Aug 29 05:06:08.946284 2026] [security2:error] [pid 1017536:tid 1017689] [client 168.107.94.195:53830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9ICJcY4fy7tP-rU338gAAAis"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:08.946853 2026] [security2:error] [pid 1017536:tid 1017793] [client 20.104.104.62:43046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/yyy.php"] [unique_id "apK9ICJcY4fy7tP-rU338wAAApM"]
[Sat Aug 29 05:06:08.946928 2026] [security2:error] [pid 1017536:tid 1017754] [client 20.104.104.62:40216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wso-2.5.php"] [unique_id "apK9ICJcY4fy7tP-rU339AAAAmw"]
[Sat Aug 29 05:06:08.953289 2026] [security2:error] [pid 1017536:tid 1017694] [client 20.104.18.15:23454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/x.php"] [unique_id "apK9ICJcY4fy7tP-rU339QAAAjA"]
[Sat Aug 29 05:06:08.957067 2026] [security2:error] [pid 1018003:tid 1018236] [client 20.104.49.130:47831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/new.php"] [unique_id "apK9IDAh5Y1i2tUxg4HvBwAABgw"]
[Sat Aug 29 05:06:08.971349 2026] [security2:error] [pid 1018003:tid 1018150] [client 20.104.104.62:22692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/sko.php"] [unique_id "apK9IDAh5Y1i2tUxg4HvCAAABbc"]
[Sat Aug 29 05:06:08.979420 2026] [security2:error] [pid 1018003:tid 1018192] [client 20.104.18.15:5950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thaipavilionskokie.com"] [uri "/sss.php"] [unique_id "apK9IDAh5Y1i2tUxg4HvCQAABeE"]
[Sat Aug 29 05:06:08.985587 2026] [security2:error] [pid 1017536:tid 1017744] [client 20.151.200.44:45988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/Cok.php"] [unique_id "apK9ICJcY4fy7tP-rU33-AAAAmI"]
[Sat Aug 29 05:06:08.994373 2026] [core:error] [pid 1017536:tid 1017733] [client 74.7.244.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:08.994386 2026] [core:error] [pid 1017536:tid 1017733] [client 74.7.244.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:08.994496 2026] [security2:error] [pid 1017536:tid 1017733] [client 74.7.244.18:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/___proxy_subdomain_cpcontacts/index.php"] [unique_id "apK9ICJcY4fy7tP-rU33-QAAAlc"]
[Sat Aug 29 05:06:08.994683 2026] [security2:error] [pid 1017536:tid 1017746] [client 20.104.104.62:44579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/f2r4.php"] [unique_id "apK9ICJcY4fy7tP-rU33-gAAAmQ"]
[Sat Aug 29 05:06:08.999173 2026] [security2:error] [pid 1018003:tid 1018227] [client 68.155.159.216:14235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/wp-admin/setup-config.php"] [unique_id "apK9IDAh5Y1i2tUxg4HvCwAABgQ"]
[Sat Aug 29 05:06:08.999606 2026] [security2:error] [pid 1017536:tid 1017785] [client 20.104.18.15:7031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/sign.php"] [unique_id "apK9ICJcY4fy7tP-rU33-wAAAos"]
[Sat Aug 29 05:06:09.001423 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.48.251.3:62088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/phpi.php"] [unique_id "apK9ISJcY4fy7tP-rU33_AAAAh0"]
[Sat Aug 29 05:06:09.005782 2026] [security2:error] [pid 1017536:tid 1017722] [client 20.104.18.15:8170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/vpn.php"] [unique_id "apK9ISJcY4fy7tP-rU33_QAAAkw"]
[Sat Aug 29 05:06:09.006739 2026] [security2:error] [pid 1017536:tid 1017747] [client 4.205.62.107:22217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/aws_config.php"] [unique_id "apK9ISJcY4fy7tP-rU33_gAAAmU"]
[Sat Aug 29 05:06:09.008690 2026] [security2:error] [pid 1017536:tid 1017695] [client 20.48.250.41:60786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/gdn.php"] [unique_id "apK9ISJcY4fy7tP-rU33_wAAAjE"]
[Sat Aug 29 05:06:09.018537 2026] [security2:error] [pid 1017536:tid 1017777] [client 74.7.244.18:49062] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/___proxy_subdomain_cpcontacts/robots.txt"] [unique_id "apK9ICJcY4fy7tP-rU333gACgyE"]
[Sat Aug 29 05:06:09.019623 2026] [security2:error] [pid 1017536:tid 1017683] [client 20.220.204.93:64955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/ak.php"] [unique_id "apK9ISJcY4fy7tP-rU34AwAAAiU"]
[Sat Aug 29 05:06:09.020695 2026] [security2:error] [pid 1017536:tid 1017788] [client 20.104.104.62:42732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/inject.php"] [unique_id "apK9ISJcY4fy7tP-rU34BAAAAo4"]
[Sat Aug 29 05:06:09.036177 2026] [security2:error] [pid 1018003:tid 1018225] [client 20.151.200.44:64854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/quoys.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvDAAABgI"]
[Sat Aug 29 05:06:09.054047 2026] [security2:error] [pid 1017536:tid 1017696] [client 158.23.147.79:48176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/login.php"] [unique_id "apK9ISJcY4fy7tP-rU34BQAAAjI"]
[Sat Aug 29 05:06:09.068069 2026] [security2:error] [pid 1017536:tid 1017679] [client 158.23.147.79:37806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9ISJcY4fy7tP-rU34BgAAAiE"]
[Sat Aug 29 05:06:09.068827 2026] [security2:error] [pid 1018003:tid 1018197] [client 158.158.54.35:12811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-cron.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvDQAABeY"]
[Sat Aug 29 05:06:09.073042 2026] [security2:error] [pid 1017536:tid 1017715] [client 68.155.159.216:18177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/file88.php"] [unique_id "apK9ISJcY4fy7tP-rU34CAAAAkU"]
[Sat Aug 29 05:06:09.077597 2026] [security2:error] [pid 1018003:tid 1018273] [client 20.197.61.180:16342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-configs.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvDgAABjE"]
[Sat Aug 29 05:06:09.080347 2026] [security2:error] [pid 1017536:tid 1017685] [client 20.104.104.62:56331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/bgymj.php"] [unique_id "apK9ISJcY4fy7tP-rU34CgAAAic"]
[Sat Aug 29 05:06:09.083236 2026] [security2:error] [pid 1018003:tid 1018187] [client 158.23.147.79:58060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvDwAABdw"]
[Sat Aug 29 05:06:09.085769 2026] [security2:error] [pid 1017536:tid 1017768] [client 52.139.37.240:17409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carlpipescustomhomes.com"] [uri "/gecko-new.php"] [unique_id "apK9ISJcY4fy7tP-rU34CwAAAno"]
[Sat Aug 29 05:06:09.089136 2026] [security2:error] [pid 1017536:tid 1017670] [client 20.104.18.15:13221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/dk.php"] [unique_id "apK9ISJcY4fy7tP-rU34DAAAAhg"]
[Sat Aug 29 05:06:09.100028 2026] [security2:error] [pid 1017536:tid 1017731] [client 20.48.250.41:65093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/35.php"] [unique_id "apK9ISJcY4fy7tP-rU34DQAAAlU"]
[Sat Aug 29 05:06:09.102832 2026] [security2:error] [pid 1017536:tid 1017736] [client 4.205.62.107:55946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/bengi.php"] [unique_id "apK9ISJcY4fy7tP-rU34DwAAAlo"]
[Sat Aug 29 05:06:09.111513 2026] [security2:error] [pid 1017536:tid 1017706] [client 20.104.104.62:46007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/zoz.php"] [unique_id "apK9ISJcY4fy7tP-rU34EAAAAjw"]
[Sat Aug 29 05:06:09.112210 2026] [security2:error] [pid 1017536:tid 1017761] [client 20.104.18.15:23415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/ssla.php"] [unique_id "apK9ISJcY4fy7tP-rU34EQAAAnM"]
[Sat Aug 29 05:06:09.118519 2026] [security2:error] [pid 1018003:tid 1018264] [client 158.23.147.79:30703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvEAAABig"]
[Sat Aug 29 05:06:09.125311 2026] [security2:error] [pid 1017536:tid 1017712] [client 40.83.93.50:8019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/alfa.php"] [unique_id "apK9ISJcY4fy7tP-rU34EgAAAkI"]
[Sat Aug 29 05:06:09.127148 2026] [security2:error] [pid 1018003:tid 1018200] [client 20.48.251.3:61694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvEQAABek"]
[Sat Aug 29 05:06:09.128583 2026] [security2:error] [pid 1017536:tid 1017705] [client 20.196.209.81:23673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-admin/test.php"] [unique_id "apK9ISJcY4fy7tP-rU34FAAAAjs"]
[Sat Aug 29 05:06:09.133194 2026] [security2:error] [pid 1017536:tid 1017704] [client 20.104.104.62:10472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/sadis.php"] [unique_id "apK9ISJcY4fy7tP-rU34FQAAAjo"]
[Sat Aug 29 05:06:09.161317 2026] [security2:error] [pid 1018003:tid 1018185] [client 68.155.159.216:24458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvEwAABdo"]
[Sat Aug 29 05:06:09.173394 2026] [security2:error] [pid 1017536:tid 1017754] [client 20.104.18.15:7009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/wnnjpsby.php"] [unique_id "apK9ISJcY4fy7tP-rU34GgAAAmw"]
[Sat Aug 29 05:06:09.176847 2026] [security2:error] [pid 1018003:tid 1018251] [client 158.23.147.79:32705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/file5.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvFAAABhs"]
[Sat Aug 29 05:06:09.177712 2026] [security2:error] [pid 1017536:tid 1017707] [client 40.83.93.50:12471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-config.php"] [unique_id "apK9ISJcY4fy7tP-rU34HAAAAj0"]
[Sat Aug 29 05:06:09.179703 2026] [core:error] [pid 1017536:tid 1017750] [client 20.104.18.15:36751] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:09.179715 2026] [core:error] [pid 1017536:tid 1017750] [client 20.104.18.15:36751] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:09.203849 2026] [security2:error] [pid 1017536:tid 1017720] [client 20.104.18.15:57176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thaipavilionskokie.com"] [uri "/wp-includes/ID3/moon.php"] [unique_id "apK9ISJcY4fy7tP-rU34HgAAAko"]
[Sat Aug 29 05:06:09.208548 2026] [security2:error] [pid 1018003:tid 1018159] [client 20.104.18.15:8158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/shiny.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvFQAABcA"]
[Sat Aug 29 05:06:09.210556 2026] [security2:error] [pid 1017536:tid 1017744] [client 158.23.147.79:25514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-content/admin.php"] [unique_id "apK9ISJcY4fy7tP-rU34HwAAAmI"]
[Sat Aug 29 05:06:09.212448 2026] [security2:error] [pid 1017536:tid 1017785] [client 20.151.200.44:64239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/lte7.php"] [unique_id "apK9ISJcY4fy7tP-rU34IAAAAos"]
[Sat Aug 29 05:06:09.213690 2026] [security2:error] [pid 1018003:tid 1018164] [client 20.104.104.62:4851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/fh26.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvFgAABcU"]
[Sat Aug 29 05:06:09.223521 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.151.200.44:64313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/vbbn.php"] [unique_id "apK9ISJcY4fy7tP-rU34IgAAAh0"]
[Sat Aug 29 05:06:09.228813 2026] [security2:error] [pid 1017536:tid 1017708] [client 68.155.159.216:51537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-admin/images/about.php"] [unique_id "apK9ISJcY4fy7tP-rU34IwAAAj4"]
[Sat Aug 29 05:06:09.229648 2026] [security2:error] [pid 1017536:tid 1017722] [client 20.104.18.15:13247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/ta.php"] [unique_id "apK9ISJcY4fy7tP-rU34JAAAAkw"]
[Sat Aug 29 05:06:09.234304 2026] [security2:error] [pid 1017536:tid 1017747] [client 20.220.204.93:64343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/lib.php"] [unique_id "apK9ISJcY4fy7tP-rU34KAAAAmU"]
[Sat Aug 29 05:06:09.238640 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.48.250.41:60786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/f2.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvFwAABcI"]
[Sat Aug 29 05:06:09.243414 2026] [security2:error] [pid 1017536:tid 1017760] [client 20.104.18.15:23446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "apK9ISJcY4fy7tP-rU34KwAAAnI"]
[Sat Aug 29 05:06:09.247074 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.104.18.15:36842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/w.php"] [unique_id "apK9ISJcY4fy7tP-rU34LAAAAlY"]
[Sat Aug 29 05:06:09.248002 2026] [security2:error] [pid 1017536:tid 1017764] [client 20.151.200.44:47305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/X7T6.php"] [unique_id "apK9ISJcY4fy7tP-rU34LQAAAnY"]
[Sat Aug 29 05:06:09.254530 2026] [security2:error] [pid 1017536:tid 1017777] [client 20.104.104.62:45963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/mmm.php"] [unique_id "apK9ISJcY4fy7tP-rU34LgAAAoM"]
[Sat Aug 29 05:06:09.255373 2026] [security2:error] [pid 1018003:tid 1018245] [client 20.48.251.3:61059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/myfile.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvGQAABhU"]
[Sat Aug 29 05:06:09.266242 2026] [security2:error] [pid 1017536:tid 1017696] [client 20.104.104.62:64706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/ngacir88.php"] [unique_id "apK9ISJcY4fy7tP-rU34LwAAAjI"]
[Sat Aug 29 05:06:09.267768 2026] [security2:error] [pid 1017536:tid 1017672] [client 20.104.104.62:44588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/xcre1.php"] [unique_id "apK9ISJcY4fy7tP-rU34MAAAAho"]
[Sat Aug 29 05:06:09.276165 2026] [security2:error] [pid 1017536:tid 1017733] [client 52.139.37.240:17447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carlpipescustomhomes.com"] [uri "/add_actualites.php"] [unique_id "apK9ISJcY4fy7tP-rU34MQAAAlc"]
[Sat Aug 29 05:06:09.277780 2026] [security2:error] [pid 1017536:tid 1017751] [client 158.23.147.79:35779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/chosen.php"] [unique_id "apK9ISJcY4fy7tP-rU34MgAAAmk"]
[Sat Aug 29 05:06:09.321312 2026] [security2:error] [pid 1017536:tid 1017731] [client 20.104.18.15:6978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/gigi.php"] [unique_id "apK9ISJcY4fy7tP-rU34NAAAAlU"]
[Sat Aug 29 05:06:09.326037 2026] [security2:error] [pid 1017536:tid 1017736] [client 168.107.94.195:54313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9ISJcY4fy7tP-rU34NQAAAlo"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:09.346392 2026] [security2:error] [pid 1017536:tid 1017705] [client 20.104.104.62:36949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/mga.php"] [unique_id "apK9ISJcY4fy7tP-rU34NwAAAjs"]
[Sat Aug 29 05:06:09.350005 2026] [security2:error] [pid 1017536:tid 1017704] [client 20.48.251.3:13959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/apikeys.php"] [unique_id "apK9ISJcY4fy7tP-rU34OAAAAjo"]
[Sat Aug 29 05:06:09.352172 2026] [security2:error] [pid 1017536:tid 1017704] [client 20.104.104.62:4815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/fgd.php"] [unique_id "apK9ISJcY4fy7tP-rU34OQAAAjo"]
[Sat Aug 29 05:06:09.360404 2026] [security2:error] [pid 1017536:tid 1017792] [client 20.104.104.62:48669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/pentest.php"] [unique_id "apK9ISJcY4fy7tP-rU34OwAAApI"]
[Sat Aug 29 05:06:09.371685 2026] [security2:error] [pid 1017536:tid 1017668] [client 20.104.18.15:23388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/wp-aothait.php"] [unique_id "apK9ISJcY4fy7tP-rU34PAAAAhY"]
[Sat Aug 29 05:06:09.378819 2026] [security2:error] [pid 1018003:tid 1018266] [client 20.52.41.200:1728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-content.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvHAAABio"]
[Sat Aug 29 05:06:09.381082 2026] [security2:error] [pid 1018003:tid 1018153] [client 20.151.200.44:64261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/rfi.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvHQAABbo"]
[Sat Aug 29 05:06:09.381760 2026] [security2:error] [pid 1017536:tid 1017709] [client 20.104.18.15:8080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/goods.php"] [unique_id "apK9ISJcY4fy7tP-rU34QAAAAj8"]
[Sat Aug 29 05:06:09.383594 2026] [security2:error] [pid 1017536:tid 1017729] [client 20.48.251.3:62112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/lm15.php"] [unique_id "apK9ISJcY4fy7tP-rU34QQAAAlM"]
[Sat Aug 29 05:06:09.388349 2026] [security2:error] [pid 1018003:tid 1018188] [client 20.151.200.44:47347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/see.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvHwAABd0"]
[Sat Aug 29 05:06:09.391798 2026] [security2:error] [pid 1018003:tid 1018261] [client 20.104.18.15:13252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/bo.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvIAAABiU"]
[Sat Aug 29 05:06:09.396164 2026] [security2:error] [pid 1018003:tid 1018151] [client 158.23.147.79:50136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvIQAABbg"]
[Sat Aug 29 05:06:09.399798 2026] [security2:error] [pid 1017536:tid 1017711] [client 20.104.104.62:22677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/advanced.php"] [unique_id "apK9ISJcY4fy7tP-rU34QwAAAkE"]
[Sat Aug 29 05:06:09.409691 2026] [security2:error] [pid 1018003:tid 1018242] [client 20.104.18.15:36822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/x.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvIgAABhI"]
[Sat Aug 29 05:06:09.412246 2026] [security2:error] [pid 1017536:tid 1017793] [client 20.104.104.62:44550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/motu.php"] [unique_id "apK9ISJcY4fy7tP-rU34RQAAApM"]
[Sat Aug 29 05:06:09.413907 2026] [security2:error] [pid 1017536:tid 1017678] [client 20.104.49.130:30059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/memberfuns.php"] [unique_id "apK9ISJcY4fy7tP-rU34RgAAAiA"]
[Sat Aug 29 05:06:09.432366 2026] [security2:error] [pid 1018003:tid 1018209] [client 158.23.147.79:30718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvIwAABfI"]
[Sat Aug 29 05:06:09.433565 2026] [security2:error] [pid 1017536:tid 1017723] [client 20.220.204.93:64934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/wp-style.php"] [unique_id "apK9ISJcY4fy7tP-rU34RwAAAk0"]
[Sat Aug 29 05:06:09.456436 2026] [security2:error] [pid 1017536:tid 1017708] [client 20.104.18.15:5402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thaipavilionskokie.com"] [uri "/xmini4.php"] [unique_id "apK9ISJcY4fy7tP-rU34SAAAAj4"]
[Sat Aug 29 05:06:09.470835 2026] [security2:error] [pid 1018003:tid 1018216] [client 52.139.37.240:17422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carlpipescustomhomes.com"] [uri "/browse.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvJAAABfk"]
[Sat Aug 29 05:06:09.472958 2026] [security2:error] [pid 1018003:tid 1018213] [client 20.104.18.15:7006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/info.php/new.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvJQAABfY"]
[Sat Aug 29 05:06:09.485248 2026] [security2:error] [pid 1017536:tid 1017777] [client 20.104.104.62:40234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/&heker!.php"] [unique_id "apK9ISJcY4fy7tP-rU34SgAAAoM"]
[Sat Aug 29 05:06:09.489074 2026] [security2:error] [pid 1018003:tid 1018259] [client 20.104.104.62:52041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/inwp.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvJgAABiM"]
[Sat Aug 29 05:06:09.493392 2026] [security2:error] [pid 1018003:tid 1018190] [client 20.104.49.130:46081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/red.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvJwAABd8"]
[Sat Aug 29 05:06:09.504602 2026] [security2:error] [pid 1017536:tid 1017683] [client 20.104.104.62:4104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/inject.php"] [unique_id "apK9ISJcY4fy7tP-rU34SwAAAiU"]
[Sat Aug 29 05:06:09.510729 2026] [security2:error] [pid 1017536:tid 1017788] [client 20.48.251.3:61238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/test.config.php"] [unique_id "apK9ISJcY4fy7tP-rU34TAAAAo4"]
[Sat Aug 29 05:06:09.513332 2026] [security2:error] [pid 1017536:tid 1017742] [client 158.158.54.35:10702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-block.php"] [unique_id "apK9ISJcY4fy7tP-rU34TQAAAmA"]
[Sat Aug 29 05:06:09.518948 2026] [security2:error] [pid 1018003:tid 1018267] [client 20.104.18.15:8048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/alfa.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvKAAABis"]
[Sat Aug 29 05:06:09.519524 2026] [security2:error] [pid 1018003:tid 1018277] [client 4.205.62.107:64233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/aws_keys.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvKQAABjU"]
[Sat Aug 29 05:06:09.538397 2026] [security2:error] [pid 1018003:tid 1018156] [client 20.104.18.15:13255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/44.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvKwAABb0"]
[Sat Aug 29 05:06:09.539236 2026] [security2:error] [pid 1018003:tid 1018256] [client 20.104.104.62:22686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/blox.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvLAAABiA"]
[Sat Aug 29 05:06:09.544104 2026] [security2:error] [pid 1018003:tid 1018166] [client 20.151.200.44:46638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/horeg.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvLQAABcc"]
[Sat Aug 29 05:06:09.544647 2026] [security2:error] [pid 1018003:tid 1018249] [client 20.104.104.62:10493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/wefile.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvLgAABhk"]
[Sat Aug 29 05:06:09.556938 2026] [security2:error] [pid 1018003:tid 1018205] [client 20.104.18.15:36744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/ssla.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvLwAABe4"]
[Sat Aug 29 05:06:09.564475 2026] [security2:error] [pid 1018003:tid 1018180] [client 20.151.200.44:64276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/tanjiro.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvMAAABdU"]
[Sat Aug 29 05:06:09.564877 2026] [security2:error] [pid 1018003:tid 1018252] [client 68.155.159.216:50201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/about/function.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvMQAABhw"]
[Sat Aug 29 05:06:09.575151 2026] [security2:error] [pid 1018003:tid 1018274] [client 20.104.18.15:23500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/wp-includes/index.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvMgAABjI"]
[Sat Aug 29 05:06:09.582260 2026] [security2:error] [pid 1018003:tid 1018186] [client 20.151.200.44:64908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/tajj.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvMwAABds"]
[Sat Aug 29 05:06:09.601473 2026] [security2:error] [pid 1017536:tid 1017744] [client 40.83.93.50:16618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/feed-rss2-queue.php"] [unique_id "apK9ISJcY4fy7tP-rU34UQAAAmI"]
[Sat Aug 29 05:06:09.614375 2026] [security2:error] [pid 1017536:tid 1017669] [client 20.104.18.15:5329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thaipavilionskokie.com"] [uri "/gulu.php"] [unique_id "apK9ISJcY4fy7tP-rU34UgAAAhc"]
[Sat Aug 29 05:06:09.622293 2026] [security2:error] [pid 1017536:tid 1017674] [client 57.141.14.28:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/"] [unique_id "apK9ISJcY4fy7tP-rU34VAAAAhw"]
[Sat Aug 29 05:06:09.632696 2026] [security2:error] [pid 1018003:tid 1018222] [client 20.220.204.93:65010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/browse.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvOQAABf8"]
[Sat Aug 29 05:06:09.637278 2026] [security2:error] [pid 1017536:tid 1017684] [client 20.48.251.3:62084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/gecko-litespeed.php"] [unique_id "apK9ISJcY4fy7tP-rU34VgAAAiY"]
[Sat Aug 29 05:06:09.648782 2026] [security2:error] [pid 1018003:tid 1018173] [client 40.83.93.50:12473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-configs.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvOgAABc4"]
[Sat Aug 29 05:06:09.654432 2026] [security2:error] [pid 1018003:tid 1018227] [client 20.104.18.15:8116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/33.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvOwAABgQ"]
[Sat Aug 29 05:06:09.658606 2026] [security2:error] [pid 1018003:tid 1018152] [client 20.196.209.81:5238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-admin/user/f35.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvPAAABbk"]
[Sat Aug 29 05:06:09.674190 2026] [security2:error] [pid 1017536:tid 1017670] [client 20.151.200.44:45990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/basic.php"] [unique_id "apK9ISJcY4fy7tP-rU34WAAAAhg"]
[Sat Aug 29 05:06:09.674536 2026] [security2:error] [pid 1018003:tid 1018203] [client 20.104.104.62:41650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/kcs.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvPQAABew"]
[Sat Aug 29 05:06:09.677254 2026] [security2:error] [pid 1017536:tid 1017713] [client 52.139.37.240:18127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carlpipescustomhomes.com"] [uri "/contentloader1.php"] [unique_id "apK9ISJcY4fy7tP-rU34WQAAAkM"]
[Sat Aug 29 05:06:09.678098 2026] [security2:error] [pid 1018003:tid 1018197] [client 20.104.104.62:44590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/EM.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvPgAABeY"]
[Sat Aug 29 05:06:09.683658 2026] [security2:error] [pid 1018003:tid 1018224] [client 20.104.18.15:13120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/h2.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvPwAABgE"]
[Sat Aug 29 05:06:09.686058 2026] [security2:error] [pid 1018003:tid 1018273] [client 20.104.104.62:43053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/mga.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvQAAABjE"]
[Sat Aug 29 05:06:09.704729 2026] [security2:error] [pid 1017536:tid 1017731] [client 168.107.94.195:54677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9ISJcY4fy7tP-rU34XAAAAlU"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:09.706939 2026] [security2:error] [pid 1018003:tid 1018264] [client 20.104.18.15:23541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/file31.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvQQAABig"]
[Sat Aug 29 05:06:09.711000 2026] [security2:error] [pid 1018003:tid 1018200] [client 20.104.104.62:23395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/ad1.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvQgAABek"]
[Sat Aug 29 05:06:09.711484 2026] [security2:error] [pid 1017536:tid 1017753] [client 20.151.200.44:65481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/grsiuk.php"] [unique_id "apK9ISJcY4fy7tP-rU34XgAAAms"]
[Sat Aug 29 05:06:09.720974 2026] [security2:error] [pid 1017536:tid 1017687] [client 20.104.104.62:47611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/shellv3.php"] [unique_id "apK9ISJcY4fy7tP-rU34YQAAAik"]
[Sat Aug 29 05:06:09.730280 2026] [security2:error] [pid 1017536:tid 1017706] [client 20.104.18.15:36821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "apK9ISJcY4fy7tP-rU34YgAAAjw"]
[Sat Aug 29 05:06:09.764746 2026] [security2:error] [pid 1017536:tid 1017769] [client 20.48.251.3:61664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/goods.php"] [unique_id "apK9ISJcY4fy7tP-rU34ZQAAAns"]
[Sat Aug 29 05:06:09.769055 2026] [security2:error] [pid 1017536:tid 1017704] [client 4.205.62.107:22344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/test.php"] [unique_id "apK9ISJcY4fy7tP-rU34ZgAAAjo"]
[Sat Aug 29 05:06:09.786197 2026] [security2:error] [pid 1018003:tid 1018262] [client 20.104.18.15:5319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thaipavilionskokie.com"] [uri "/replace.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvRwAABiY"]
[Sat Aug 29 05:06:09.796629 2026] [security2:error] [pid 1018003:tid 1018248] [client 20.197.61.180:16995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-conflg.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvSAAABhg"]
[Sat Aug 29 05:06:09.798772 2026] [security2:error] [pid 1017536:tid 1017668] [client 20.104.18.15:8070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/133.php"] [unique_id "apK9ISJcY4fy7tP-rU34agAAAhY"]
[Sat Aug 29 05:06:09.802262 2026] [security2:error] [pid 1017536:tid 1017729] [client 20.151.200.44:47325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/monso.php"] [unique_id "apK9ISJcY4fy7tP-rU34awAAAlM"]
[Sat Aug 29 05:06:09.808418 2026] [security2:error] [pid 1017536:tid 1017775] [client 20.104.104.62:10487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/ca4.php"] [unique_id "apK9ISJcY4fy7tP-rU34bAAAAoE"]
[Sat Aug 29 05:06:09.816349 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.104.18.15:13149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/wp-content/mod/adminfuns.php"] [unique_id "apK9ISJcY4fy7tP-rU34bQAAAnk"]
[Sat Aug 29 05:06:09.818919 2026] [security2:error] [pid 1017536:tid 1017711] [client 20.104.104.62:43016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/inwp.php"] [unique_id "apK9ISJcY4fy7tP-rU34bgAAAkE"]
[Sat Aug 29 05:06:09.820336 2026] [security2:error] [pid 1017536:tid 1017703] [client 20.104.104.62:22661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/wsz.php"] [unique_id "apK9ISJcY4fy7tP-rU34bwAAAjk"]
[Sat Aug 29 05:06:09.833109 2026] [security2:error] [pid 1017536:tid 1017780] [client 20.52.41.200:1765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "apK9ISJcY4fy7tP-rU34cAAAAoY"]
[Sat Aug 29 05:06:09.838506 2026] [security2:error] [pid 1017536:tid 1017689] [client 20.104.18.15:23444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/dk.php"] [unique_id "apK9ISJcY4fy7tP-rU34cQAAAis"]
[Sat Aug 29 05:06:09.847236 2026] [security2:error] [pid 1017536:tid 1017754] [client 4.205.62.107:22245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/v3.php"] [unique_id "apK9ISJcY4fy7tP-rU34cgAAAmw"]
[Sat Aug 29 05:06:09.856659 2026] [security2:error] [pid 1018003:tid 1018266] [client 4.205.62.107:65517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/xa.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvSwAABio"]
[Sat Aug 29 05:06:09.857071 2026] [security2:error] [pid 1018003:tid 1018153] [client 20.151.200.44:64926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/Rk41.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvTAAABbo"]
[Sat Aug 29 05:06:09.863633 2026] [security2:error] [pid 1018003:tid 1018278] [client 20.151.200.44:64891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/ahy66.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvTgAABjY"]
[Sat Aug 29 05:06:09.868698 2026] [security2:error] [pid 1017536:tid 1017694] [client 4.205.62.107:53347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/btx25.php"] [unique_id "apK9ISJcY4fy7tP-rU34cwAAAjA"]
[Sat Aug 29 05:06:09.871993 2026] [security2:error] [pid 1017536:tid 1017734] [client 52.139.37.240:63363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carlpipescustomhomes.com"] [uri "/upfile.php"] [unique_id "apK9ISJcY4fy7tP-rU34dAAAAlg"]
[Sat Aug 29 05:06:09.877231 2026] [security2:error] [pid 1018003:tid 1018226] [client 68.155.159.216:16322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvTwAABgM"]
[Sat Aug 29 05:06:09.893096 2026] [security2:error] [pid 1018003:tid 1018188] [client 20.48.251.3:62086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/loxi-o.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvUAAABd0"]
[Sat Aug 29 05:06:09.901079 2026] [security2:error] [pid 1018003:tid 1018261] [client 20.104.18.15:36718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/wp-aothait.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvUQAABiU"]
[Sat Aug 29 05:06:09.909886 2026] [security2:error] [pid 1018003:tid 1018151] [client 20.104.18.15:6994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/w.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvUgAABbg"]
[Sat Aug 29 05:06:09.912862 2026] [security2:error] [pid 1017536:tid 1017723] [client 20.104.104.62:60452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/1vbqo.php"] [unique_id "apK9ISJcY4fy7tP-rU34dQAAAk0"]
[Sat Aug 29 05:06:09.914729 2026] [security2:error] [pid 1018003:tid 1018242] [client 20.220.204.93:64341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/zoo.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvUwAABhI"]
[Sat Aug 29 05:06:09.929466 2026] [security2:error] [pid 1017536:tid 1017708] [client 20.104.18.15:5344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thaipavilionskokie.com"] [uri "/c4.php"] [unique_id "apK9ISJcY4fy7tP-rU34dgAAAj4"]
[Sat Aug 29 05:06:09.936779 2026] [security2:error] [pid 1018003:tid 1018183] [client 20.104.104.62:10866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/x0x.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvVwAABdg"]
[Sat Aug 29 05:06:09.941500 2026] [security2:error] [pid 1018003:tid 1018190] [client 20.104.18.15:8069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/sym.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvWAAABd8"]
[Sat Aug 29 05:06:09.944432 2026] [security2:error] [pid 1017536:tid 1017747] [client 20.104.104.62:48691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/6y7t.php"] [unique_id "apK9ISJcY4fy7tP-rU34dwAAAmU"]
[Sat Aug 29 05:06:09.955126 2026] [security2:error] [pid 1018003:tid 1018196] [client 20.104.104.62:45962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/msy.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvWQAABeU"]
[Sat Aug 29 05:06:09.959640 2026] [security2:error] [pid 1017536:tid 1017784] [client 158.158.54.35:8936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-includes/fonts/admin.php"] [unique_id "apK9ISJcY4fy7tP-rU34eAAAAoo"]
[Sat Aug 29 05:06:09.960784 2026] [security2:error] [pid 1017536:tid 1017760] [client 20.104.104.62:64661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/ad1.php"] [unique_id "apK9ISJcY4fy7tP-rU34eQAAAnI"]
[Sat Aug 29 05:06:09.963926 2026] [security2:error] [pid 1017536:tid 1017764] [client 20.151.200.44:47309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/rce.php"] [unique_id "apK9ISJcY4fy7tP-rU34egAAAnY"]
[Sat Aug 29 05:06:09.972340 2026] [security2:error] [pid 1017536:tid 1017683] [client 20.104.18.15:23486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/ta.php"] [unique_id "apK9ISJcY4fy7tP-rU34fAAAAiU"]
[Sat Aug 29 05:06:09.987164 2026] [security2:error] [pid 1017536:tid 1017737] [client 197.219.150.206:58600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK9ISJcY4fy7tP-rU34fgAAAls"]
[Sat Aug 29 05:06:09.987270 2026] [security2:error] [pid 1017536:tid 1017737] [client 197.219.150.206:58600] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK9ISJcY4fy7tP-rU34fgAAAls"]
[Sat Aug 29 05:06:09.989387 2026] [security2:error] [pid 1018003:tid 1018179] [client 158.23.147.79:24481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-blog-header.php"] [unique_id "apK9ITAh5Y1i2tUxg4HvXAAABdQ"]
[Sat Aug 29 05:06:10.016403 2026] [security2:error] [pid 1018003:tid 1018256] [client 20.104.18.15:13306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/sao.php"] [unique_id "apK9IjAh5Y1i2tUxg4HvXgAABiA"]
[Sat Aug 29 05:06:10.020824 2026] [security2:error] [pid 1017536:tid 1017733] [client 20.48.251.3:61247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/f35.php"] [unique_id "apK9IiJcY4fy7tP-rU34gAAAAlc"]
[Sat Aug 29 05:06:10.049670 2026] [security2:error] [pid 1017536:tid 1017790] [client 20.104.18.15:36790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/wp-includes/index.php"] [unique_id "apK9IiJcY4fy7tP-rU34gwAAApA"]
[Sat Aug 29 05:06:10.053024 2026] [security2:error] [pid 1018003:tid 1018250] [client 20.196.209.81:23643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-admin/user/min.php"] [unique_id "apK9IjAh5Y1i2tUxg4HvYAAABho"]
[Sat Aug 29 05:06:10.066642 2026] [security2:error] [pid 1017536:tid 1017748] [client 52.139.37.240:18117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carlpipescustomhomes.com"] [uri "/form.php"] [unique_id "apK9IiJcY4fy7tP-rU34hAAAAmY"]
[Sat Aug 29 05:06:10.069439 2026] [security2:error] [pid 1018003:tid 1018252] [client 20.104.104.62:10450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.americanvarietyradio.net"] [uri "/fesa.php"] [unique_id "apK9IjAh5Y1i2tUxg4HvYQAABhw"]
[Sat Aug 29 05:06:10.078602 2026] [security2:error] [pid 1018003:tid 1018274] [client 20.151.200.44:64257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/gaje.php"] [unique_id "apK9IjAh5Y1i2tUxg4HvYgAABjI"]
[Sat Aug 29 05:06:10.084311 2026] [security2:error] [pid 1018003:tid 1018186] [client 20.104.18.15:64511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thaipavilionskokie.com"] [uri "/rxr.php"] [unique_id "apK9IjAh5Y1i2tUxg4HvYwAABds"]
[Sat Aug 29 05:06:10.085974 2026] [security2:error] [pid 1017536:tid 1017669] [client 20.104.104.62:22719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/siln.php"] [unique_id "apK9IiJcY4fy7tP-rU34hQAAAhc"]
[Sat Aug 29 05:06:10.088959 2026] [security2:error] [pid 1017536:tid 1017715] [client 20.104.18.15:7025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/x.php"] [unique_id "apK9IiJcY4fy7tP-rU34hgAAAkU"]
[Sat Aug 29 05:06:10.095878 2026] [security2:error] [pid 1018003:tid 1018271] [client 40.83.93.50:16612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/inputs.php"] [unique_id "apK9IjAh5Y1i2tUxg4HvZAAABi8"]
[Sat Aug 29 05:06:10.097148 2026] [security2:error] [pid 1017536:tid 1017684] [client 20.104.104.62:42688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/h02ugyh.php"] [unique_id "apK9IiJcY4fy7tP-rU34hwAAAiY"]
[Sat Aug 29 05:06:10.103796 2026] [security2:error] [pid 1017536:tid 1017724] [client 20.104.104.62:56343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/1vbqo.php"] [unique_id "apK9IiJcY4fy7tP-rU34igAAAk4"]
[Sat Aug 29 05:06:10.104953 2026] [security2:error] [pid 1018003:tid 1018207] [client 168.107.94.195:55037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9IjAh5Y1i2tUxg4HvZQAABfA"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:10.105498 2026] [security2:error] [pid 1017536:tid 1017768] [client 20.104.18.15:8176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/8.php"] [unique_id "apK9IiJcY4fy7tP-rU34iwAAAno"]
[Sat Aug 29 05:06:10.109843 2026] [security2:error] [pid 1017536:tid 1017713] [client 20.151.200.44:45975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/exec.php"] [unique_id "apK9IiJcY4fy7tP-rU34jAAAAkM"]
[Sat Aug 29 05:06:10.116943 2026] [security2:error] [pid 1017536:tid 1017732] [client 40.83.93.50:22249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-conflg.php"] [unique_id "apK9IiJcY4fy7tP-rU34jQAAAlY"]
[Sat Aug 29 05:06:10.143431 2026] [security2:error] [pid 1018003:tid 1018221] [client 68.155.159.216:52765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/file.php"] [unique_id "apK9IjAh5Y1i2tUxg4HvZwAABf4"]
[Sat Aug 29 05:06:10.144317 2026] [security2:error] [pid 1018003:tid 1018212] [client 68.155.159.216:14239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK9IjAh5Y1i2tUxg4HvaAAABfU"]
[Sat Aug 29 05:06:10.150509 2026] [security2:error] [pid 1017536:tid 1017706] [client 20.48.251.3:61233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/api.php"] [unique_id "apK9IiJcY4fy7tP-rU34jwAAAjw"]
[Sat Aug 29 05:06:10.154638 2026] [security2:error] [pid 1017536:tid 1017705] [client 20.104.18.15:13138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/dapa.php"] [unique_id "apK9IiJcY4fy7tP-rU34kQAAAjs"]
[Sat Aug 29 05:06:10.160110 2026] [security2:error] [pid 1017536:tid 1017769] [client 4.205.62.107:22256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/dialog.php"] [unique_id "apK9IiJcY4fy7tP-rU34kgAAAns"]
[Sat Aug 29 05:06:10.160917 2026] [security2:error] [pid 1017536:tid 1017704] [client 158.23.147.79:48242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/hehehehe.php"] [unique_id "apK9IiJcY4fy7tP-rU34kwAAAjo"]
[Sat Aug 29 05:06:10.162833 2026] [security2:error] [pid 1017536:tid 1017681] [client 20.63.81.20:60536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9IiJcY4fy7tP-rU34lAAAAiM"]
[Sat Aug 29 05:06:10.165497 2026] [security2:error] [pid 1017536:tid 1017668] [client 20.151.200.44:64913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/7logs.php"] [unique_id "apK9IiJcY4fy7tP-rU34lQAAAhY"]
[Sat Aug 29 05:06:10.179741 2026] [security2:error] [pid 1017536:tid 1017673] [client 68.155.159.216:18429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/NewFile.php/"] [unique_id "apK9IiJcY4fy7tP-rU34lwAAAhs"]
[Sat Aug 29 05:06:10.198418 2026] [security2:error] [pid 1017536:tid 1017698] [client 20.104.18.15:23402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/bo.php"] [unique_id "apK9IiJcY4fy7tP-rU34mwAAAjQ"]
[Sat Aug 29 05:06:10.217345 2026] [security2:error] [pid 1017536:tid 1017736] [client 158.23.147.79:59898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9IiJcY4fy7tP-rU34nQAAAlo"]
[Sat Aug 29 05:06:10.218857 2026] [security2:error] [pid 1017536:tid 1017778] [client 20.104.104.62:41634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/f-401.php"] [unique_id "apK9IiJcY4fy7tP-rU34ngAAAoQ"]
[Sat Aug 29 05:06:10.223780 2026] [security2:error] [pid 1018003:tid 1018192] [client 20.104.18.15:56351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thaipavilionskokie.com"] [uri "/reviall.php"] [unique_id "apK9IjAh5Y1i2tUxg4HvawAABeE"]
[Sat Aug 29 05:06:10.225344 2026] [security2:error] [pid 1017536:tid 1017686] [client 158.23.147.79:63016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/about.php"] [unique_id "apK9IiJcY4fy7tP-rU34oAAAAig"]
[Sat Aug 29 05:06:10.227436 2026] [security2:error] [pid 1017536:tid 1017691] [client 158.23.147.79:30631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK9IiJcY4fy7tP-rU34oQAAAi0"]
[Sat Aug 29 05:06:10.228495 2026] [security2:error] [pid 1017536:tid 1017742] [client 60.243.207.176:61240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK9IiJcY4fy7tP-rU34ogAAAmA"]
[Sat Aug 29 05:06:10.228596 2026] [security2:error] [pid 1017536:tid 1017742] [client 60.243.207.176:61240] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK9IiJcY4fy7tP-rU34ogAAAmA"]
[Sat Aug 29 05:06:10.231211 2026] [security2:error] [pid 1017536:tid 1017720] [client 20.104.104.62:48469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/0xs.php"] [unique_id "apK9IiJcY4fy7tP-rU34owAAAko"]
[Sat Aug 29 05:06:10.234784 2026] [security2:error] [pid 1017536:tid 1017695] [client 20.104.18.15:36763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/file31.php"] [unique_id "apK9IiJcY4fy7tP-rU34pAAAAjE"]
[Sat Aug 29 05:06:10.239163 2026] [security2:error] [pid 1017536:tid 1017785] [client 20.104.104.62:4101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/h02ugyh.php"] [unique_id "apK9IiJcY4fy7tP-rU34pQAAAos"]
[Sat Aug 29 05:06:10.241919 2026] [security2:error] [pid 1017536:tid 1017723] [client 4.205.62.107:55978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/i.php"] [unique_id "apK9IiJcY4fy7tP-rU34pgAAAk0"]
[Sat Aug 29 05:06:10.248807 2026] [security2:error] [pid 1017536:tid 1017708] [client 20.104.18.15:8019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/goods.php"] [unique_id "apK9IiJcY4fy7tP-rU34pwAAAj4"]
[Sat Aug 29 05:06:10.257292 2026] [security2:error] [pid 1017536:tid 1017747] [client 20.220.204.93:63230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/elp.php"] [unique_id "apK9IiJcY4fy7tP-rU34qAAAAmU"]
[Sat Aug 29 05:06:10.257292 2026] [security2:error] [pid 1018003:tid 1018203] [client 20.151.200.44:46603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/dbc.php"] [unique_id "apK9IjAh5Y1i2tUxg4HvbAAABew"]
[Sat Aug 29 05:06:10.258507 2026] [security2:error] [pid 1018003:tid 1018197] [client 20.104.18.15:7040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/ssla.php"] [unique_id "apK9IjAh5Y1i2tUxg4HvbQAABeY"]
[Sat Aug 29 05:06:10.259689 2026] [security2:error] [pid 1017536:tid 1017757] [client 52.139.37.240:18113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carlpipescustomhomes.com"] [uri "/wp-sigunq.php"] [unique_id "apK9IiJcY4fy7tP-rU34qQAAAm8"]
[Sat Aug 29 05:06:10.266812 2026] [security2:error] [pid 1017536:tid 1017743] [client 68.155.159.216:24565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK9IiJcY4fy7tP-rU34qgAAAmE"]
[Sat Aug 29 05:06:10.271009 2026] [security2:error] [pid 1017536:tid 1017737] [client 20.48.250.41:65085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/maraz.php"] [unique_id "apK9IiJcY4fy7tP-rU34qwAAAls"]
[Sat Aug 29 05:06:10.279552 2026] [security2:error] [pid 1017536:tid 1017716] [client 20.48.251.3:61680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/temp.php"] [unique_id "apK9IiJcY4fy7tP-rU34rgAAAkY"]
[Sat Aug 29 05:06:10.281522 2026] [security2:error] [pid 1017536:tid 1017740] [client 158.23.147.79:32654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/file88.php"] [unique_id "apK9IiJcY4fy7tP-rU34rwAAAl4"]
[Sat Aug 29 05:06:10.283241 2026] [security2:error] [pid 1017536:tid 1017710] [client 20.104.18.15:13127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/wp-content/l.php"] [unique_id "apK9IiJcY4fy7tP-rU34sAAAAkA"]
[Sat Aug 29 05:06:10.288503 2026] [security2:error] [pid 1017536:tid 1017748] [client 20.151.200.44:64834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/wp-admin/zwso.php"] [unique_id "apK9IiJcY4fy7tP-rU34sQAAAmY"]
[Sat Aug 29 05:06:10.293480 2026] [security2:error] [pid 1017536:tid 1017753] [client 20.52.41.200:1225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/css/wp-login.php"] [unique_id "apK9IiJcY4fy7tP-rU34sgAAAms"]
[Sat Aug 29 05:06:10.298085 2026] [security2:error] [pid 1017536:tid 1017672] [client 20.63.81.20:60524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9IiJcY4fy7tP-rU34swAAAho"]
[Sat Aug 29 05:06:10.329642 2026] [security2:error] [pid 1017536:tid 1017731] [client 20.104.18.15:23452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/44.php"] [unique_id "apK9IiJcY4fy7tP-rU34tgAAAlU"]
[Sat Aug 29 05:06:10.334623 2026] [security2:error] [pid 1017536:tid 1017761] [client 68.155.159.216:51778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK9IiJcY4fy7tP-rU34twAAAnM"]
[Sat Aug 29 05:06:10.335289 2026] [security2:error] [pid 1017536:tid 1017687] [client 158.23.147.79:25507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/xmlrpc.php"] [unique_id "apK9IiJcY4fy7tP-rU34uAAAAik"]
[Sat Aug 29 05:06:10.363000 2026] [security2:error] [pid 1017536:tid 1017668] [client 68.155.159.216:24466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK9IiJcY4fy7tP-rU34uQAAAhY"]
[Sat Aug 29 05:06:10.367342 2026] [security2:error] [pid 1017536:tid 1017709] [client 20.104.104.62:64685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/shelp.php"] [unique_id "apK9IiJcY4fy7tP-rU34ugAAAj8"]
[Sat Aug 29 05:06:10.368869 2026] [security2:error] [pid 1017536:tid 1017792] [client 20.104.104.62:54530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/hq.php"] [unique_id "apK9IiJcY4fy7tP-rU34uwAAApI"]
[Sat Aug 29 05:06:10.378607 2026] [security2:error] [pid 1017536:tid 1017729] [client 20.104.18.15:36785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/dk.php"] [unique_id "apK9IiJcY4fy7tP-rU34vAAAAlM"]
[Sat Aug 29 05:06:10.383696 2026] [security2:error] [pid 1017536:tid 1017745] [client 20.104.18.15:8115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/ah.php"] [unique_id "apK9IiJcY4fy7tP-rU34vQAAAmM"]
[Sat Aug 29 05:06:10.390135 2026] [security2:error] [pid 1018003:tid 1018276] [client 20.151.200.44:64849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/sf.php"] [unique_id "apK9IjAh5Y1i2tUxg4HvbgAABjQ"]
[Sat Aug 29 05:06:10.391803 2026] [security2:error] [pid 1017536:tid 1017675] [client 158.158.54.35:33001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/m.php"] [unique_id "apK9IiJcY4fy7tP-rU34wAAAAh0"]
[Sat Aug 29 05:06:10.399993 2026] [security2:error] [pid 1017536:tid 1017760] [client 34.7.216.49:43430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.216.7.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bridgewaycentretrust.org"] [uri "/configuration.php.bak"] [unique_id "apK9IiJcY4fy7tP-rU34wwAAAnI"]
[Sat Aug 29 05:06:10.401462 2026] [security2:error] [pid 1018003:tid 1018185] [client 20.220.204.93:63811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/666.php"] [unique_id "apK9IjAh5Y1i2tUxg4HvdAAABdo"]
[Sat Aug 29 05:06:10.406118 2026] [security2:error] [pid 1018003:tid 1018244] [client 20.104.49.130:46573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/tiny2.php"] [unique_id "apK9IjAh5Y1i2tUxg4HvdwAABhQ"]
[Sat Aug 29 05:06:10.409903 2026] [security2:error] [pid 1017536:tid 1017707] [client 20.48.251.3:61663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/fm.php"] [unique_id "apK9IiJcY4fy7tP-rU34ygAAAj0"]
[Sat Aug 29 05:06:10.425878 2026] [security2:error] [pid 1017536:tid 1017734] [client 20.104.49.130:34899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/js.php"] [unique_id "apK9IiJcY4fy7tP-rU34zgAAAlg"]
[Sat Aug 29 05:06:10.425913 2026] [security2:error] [pid 1017536:tid 1017778] [client 20.151.200.44:64253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/Contrller.php"] [unique_id "apK9IiJcY4fy7tP-rU34zQAAAoQ"]
[Sat Aug 29 05:06:10.431582 2026] [security2:error] [pid 1017536:tid 1017686] [client 20.104.18.15:7152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "apK9IiJcY4fy7tP-rU34zwAAAig"]
[Sat Aug 29 05:06:10.431586 2026] [security2:error] [pid 1018003:tid 1018155] [client 20.48.250.41:65026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/kbfr.php"] [unique_id "apK9IjAh5Y1i2tUxg4HvegAABbw"]
[Sat Aug 29 05:06:10.449271 2026] [security2:error] [pid 1017536:tid 1017670] [client 20.196.209.81:5890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-admin/users.php"] [unique_id "apK9IiJcY4fy7tP-rU340AAAAhg"]
[Sat Aug 29 05:06:10.450948 2026] [security2:error] [pid 1018003:tid 1018275] [client 20.63.81.20:60461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/ser.php"] [unique_id "apK9IjAh5Y1i2tUxg4HvewAABjM"]
[Sat Aug 29 05:06:10.451412 2026] [security2:error] [pid 1018003:tid 1018184] [client 20.104.18.15:13297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/wp-admin/w.php"] [unique_id "apK9IjAh5Y1i2tUxg4HvfAAABdk"]
[Sat Aug 29 05:06:10.452668 2026] [security2:error] [pid 1017536:tid 1017703] [client 52.139.37.240:63360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carlpipescustomhomes.com"] [uri "/07.php"] [unique_id "apK9IiJcY4fy7tP-rU340QAAAjk"]
[Sat Aug 29 05:06:10.461260 2026] [security2:error] [pid 1017536:tid 1017780] [client 52.139.37.240:12543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/ahax.php"] [unique_id "apK9IiJcY4fy7tP-rU340gAAAoY"]
[Sat Aug 29 05:06:10.465146 2026] [security2:error] [pid 1017536:tid 1017708] [client 20.196.209.81:16204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/post.php"] [unique_id "apK9IiJcY4fy7tP-rU340wAAAj4"]
[Sat Aug 29 05:06:10.476584 2026] [security2:error] [pid 1018003:tid 1018248] [client 20.104.104.62:64709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/UnknownSec.php"] [unique_id "apK9IjAh5Y1i2tUxg4HvfwAABhg"]
[Sat Aug 29 05:06:10.486023 2026] [security2:error] [pid 1017536:tid 1017788] [client 168.107.94.195:55425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9IiJcY4fy7tP-rU341AAAAo4"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:10.501526 2026] [security2:error] [pid 1018003:tid 1018243] [client 20.104.18.15:23311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/h2.php"] [unique_id "apK9IjAh5Y1i2tUxg4HvgAAABhM"]
[Sat Aug 29 05:06:10.507790 2026] [security2:error] [pid 1017536:tid 1017751] [client 20.104.104.62:22706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/mh.php"] [unique_id "apK9IiJcY4fy7tP-rU341QAAAmk"]
[Sat Aug 29 05:06:10.513441 2026] [security2:error] [pid 1017536:tid 1017733] [client 20.104.104.62:52059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/shelp.php"] [unique_id "apK9IiJcY4fy7tP-rU341gAAAlc"]
[Sat Aug 29 05:06:10.524230 2026] [security2:error] [pid 1017536:tid 1017790] [client 20.197.61.180:13028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-content.php"] [unique_id "apK9IiJcY4fy7tP-rU341wAAApA"]
[Sat Aug 29 05:06:10.531261 2026] [security2:error] [pid 1017536:tid 1017748] [client 20.104.18.15:36829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/ta.php"] [unique_id "apK9IiJcY4fy7tP-rU342AAAAmY"]
[Sat Aug 29 05:06:10.537274 2026] [security2:error] [pid 1017536:tid 1017753] [client 20.104.18.15:8132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/ws55.php"] [unique_id "apK9IiJcY4fy7tP-rU342QAAAms"]
[Sat Aug 29 05:06:10.538988 2026] [security2:error] [pid 1017536:tid 1017744] [client 20.48.251.3:62121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/tinyfilemanager.php"] [unique_id "apK9IiJcY4fy7tP-rU342gAAAmI"]
[Sat Aug 29 05:06:10.544927 2026] [security2:error] [pid 1017536:tid 1017685] [client 20.151.200.44:46576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/wp-wlx.php"] [unique_id "apK9IiJcY4fy7tP-rU342wAAAic"]
[Sat Aug 29 05:06:10.545141 2026] [security2:error] [pid 1017536:tid 1017719] [client 20.151.200.44:64884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/super.php"] [unique_id "apK9IiJcY4fy7tP-rU343AAAAkk"]
[Sat Aug 29 05:06:10.547274 2026] [security2:error] [pid 1017536:tid 1017768] [client 20.104.104.62:64671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/13ede.php"] [unique_id "apK9IiJcY4fy7tP-rU343QAAAno"]
[Sat Aug 29 05:06:10.547350 2026] [security2:error] [pid 1018003:tid 1018278] [client 158.23.147.79:30699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/dropdown.php"] [unique_id "apK9IjAh5Y1i2tUxg4HvggAABjY"]
[Sat Aug 29 05:06:10.564867 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.151.200.44:64841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/Zeiss.php"] [unique_id "apK9IiJcY4fy7tP-rU343gAAAlY"]
[Sat Aug 29 05:06:10.575997 2026] [security2:error] [pid 1017536:tid 1017711] [client 158.23.147.79:50173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK9IiJcY4fy7tP-rU344AAAAkE"]
[Sat Aug 29 05:06:10.580765 2026] [security2:error] [pid 1018003:tid 1018151] [client 20.104.104.62:48593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/waf.php"] [unique_id "apK9IjAh5Y1i2tUxg4HvhQAABbg"]
[Sat Aug 29 05:06:10.583425 2026] [security2:error] [pid 1017536:tid 1017725] [client 20.63.81.20:56900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/431.php"] [unique_id "apK9IiJcY4fy7tP-rU344QAAAk8"]
[Sat Aug 29 05:06:10.586915 2026] [security2:error] [pid 1018003:tid 1018255] [client 40.83.93.50:7753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/class-walker-category-dropdown-class.php"] [unique_id "apK9IjAh5Y1i2tUxg4HvhgAABh8"]
[Sat Aug 29 05:06:10.591221 2026] [security2:error] [pid 1018003:tid 1018218] [client 20.104.104.62:25620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "meterphoneusa.horseweblog.com"] [uri "/wp-content/index.php"] [unique_id "apK9IjAh5Y1i2tUxg4HvhwAABfs"]
[Sat Aug 29 05:06:10.609156 2026] [security2:error] [pid 1017536:tid 1017745] [client 20.104.18.15:13193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/wp-content/k.php"] [unique_id "apK9IiJcY4fy7tP-rU344gAAAmM"]
[Sat Aug 29 05:06:10.612015 2026] [security2:error] [pid 1017536:tid 1017760] [client 20.104.18.15:7075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/wp-aothait.php"] [unique_id "apK9IiJcY4fy7tP-rU344wAAAnI"]
[Sat Aug 29 05:06:10.614601 2026] [security2:error] [pid 1017536:tid 1017695] [client 40.83.93.50:22213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-content.php"] [unique_id "apK9IiJcY4fy7tP-rU345AAAAjE"]
[Sat Aug 29 05:06:10.632319 2026] [security2:error] [pid 1018003:tid 1018220] [client 20.104.18.15:23406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/wp-content/mod/adminfuns.php"] [unique_id "apK9IjAh5Y1i2tUxg4HviAAABf0"]
[Sat Aug 29 05:06:10.648827 2026] [security2:error] [pid 1017536:tid 1017681] [client 52.139.37.240:63353] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "carlpipescustomhomes.com"] [uri "/c99.php"] [unique_id "apK9IiJcY4fy7tP-rU345gAAAiM"]
[Sat Aug 29 05:06:10.659128 2026] [security2:error] [pid 1017536:tid 1017783] [client 4.205.62.107:64909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/umgebung.php"] [unique_id "apK9IiJcY4fy7tP-rU345wAAAok"]
[Sat Aug 29 05:06:10.666572 2026] [security2:error] [pid 1017536:tid 1017720] [client 20.48.251.3:62123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/05.php"] [unique_id "apK9IiJcY4fy7tP-rU346AAAAko"]
[Sat Aug 29 05:06:10.667172 2026] [security2:error] [pid 1017536:tid 1017785] [client 20.104.104.62:45979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/f2r4.php"] [unique_id "apK9IiJcY4fy7tP-rU346QAAAos"]
[Sat Aug 29 05:06:10.672693 2026] [security2:error] [pid 1017536:tid 1017703] [client 20.104.18.15:8072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/drykl.php"] [unique_id "apK9IiJcY4fy7tP-rU347gAAAjk"]
[Sat Aug 29 05:06:10.674702 2026] [security2:error] [pid 1017536:tid 1017723] [client 68.155.159.216:50186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK9IiJcY4fy7tP-rU347wAAAk0"]
[Sat Aug 29 05:06:10.676268 2026] [security2:error] [pid 1018003:tid 1018196] [client 20.104.104.62:20802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/cilik.php"] [unique_id "apK9IjAh5Y1i2tUxg4HviQAABeU"]
[Sat Aug 29 05:06:10.677062 2026] [security2:error] [pid 1018003:tid 1018159] [client 20.104.18.15:36861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/bo.php"] [unique_id "apK9IjAh5Y1i2tUxg4HvigAABcA"]
[Sat Aug 29 05:06:10.679921 2026] [security2:error] [pid 1017536:tid 1017747] [client 20.220.204.93:64299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/knmt.php"] [unique_id "apK9IiJcY4fy7tP-rU348AAAAmU"]
[Sat Aug 29 05:06:10.697867 2026] [security2:error] [pid 1017536:tid 1017683] [client 20.104.104.62:43025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/k8.php"] [unique_id "apK9IiJcY4fy7tP-rU348gAAAiU"]
[Sat Aug 29 05:06:10.707576 2026] [security2:error] [pid 1017536:tid 1017773] [client 52.139.37.240:12879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/breads1.php"] [unique_id "apK9IiJcY4fy7tP-rU349QAAAn8"]
[Sat Aug 29 05:06:10.713120 2026] [security2:error] [pid 1017536:tid 1017770] [client 20.63.81.20:60495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/rxr.php"] [unique_id "apK9IiJcY4fy7tP-rU349gAAAnw"]
[Sat Aug 29 05:06:10.725988 2026] [security2:error] [pid 1017536:tid 1017765] [client 20.48.251.3:14005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/zaza.php"] [unique_id "apK9IiJcY4fy7tP-rU349wAAAnc"]
[Sat Aug 29 05:06:10.738563 2026] [security2:error] [pid 1017536:tid 1017709] [client 20.52.41.200:1744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/images/index.php"] [unique_id "apK9IiJcY4fy7tP-rU34-QAAAj8"]
[Sat Aug 29 05:06:10.748034 2026] [security2:error] [pid 1017536:tid 1017744] [client 20.104.18.15:7045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/wp-includes/index.php"] [unique_id "apK9IiJcY4fy7tP-rU34_QAAAmI"]
[Sat Aug 29 05:06:10.751078 2026] [security2:error] [pid 1017536:tid 1017752] [client 20.104.18.15:13296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/os.php"] [unique_id "apK9IiJcY4fy7tP-rU34_gAAAmo"]
[Sat Aug 29 05:06:10.756014 2026] [security2:error] [pid 1017536:tid 1017678] [client 20.151.200.44:64872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/ww2.php"] [unique_id "apK9IiJcY4fy7tP-rU34_wAAAiA"]
[Sat Aug 29 05:06:10.765649 2026] [security2:error] [pid 1018003:tid 1018256] [client 20.104.18.15:23385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/sao.php"] [unique_id "apK9IjAh5Y1i2tUxg4HvjAAABiA"]
[Sat Aug 29 05:06:10.769369 2026] [security2:error] [pid 1018003:tid 1018166] [client 20.151.200.44:46542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/attack.php"] [unique_id "apK9IjAh5Y1i2tUxg4HvjQAABcc"]
[Sat Aug 29 05:06:10.784756 2026] [security2:error] [pid 1017536:tid 1017731] [client 20.104.104.62:48596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/bnnof6.php"] [unique_id "apK9IiJcY4fy7tP-rU35AQAAAlU"]
[Sat Aug 29 05:06:10.800316 2026] [security2:error] [pid 1017536:tid 1017706] [client 20.48.251.3:3363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/wp-blog.php"] [unique_id "apK9IiJcY4fy7tP-rU35AgAAAjw"]
[Sat Aug 29 05:06:10.801273 2026] [security2:error] [pid 1018003:tid 1018164] [client 20.104.104.62:45992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/sadis.php"] [unique_id "apK9IjAh5Y1i2tUxg4HvjwAABcU"]
[Sat Aug 29 05:06:10.822115 2026] [security2:error] [pid 1017536:tid 1017684] [client 103.240.76.112:43460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK9IiJcY4fy7tP-rU35BAAAAiY"]
[Sat Aug 29 05:06:10.822259 2026] [security2:error] [pid 1017536:tid 1017684] [client 103.240.76.112:43460] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK9IiJcY4fy7tP-rU35BAAAAiY"]
[Sat Aug 29 05:06:10.828224 2026] [security2:error] [pid 1017536:tid 1017757] [client 158.158.54.35:8691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-admin/css/wp-login.php"] [unique_id "apK9IiJcY4fy7tP-rU35BQAAAm8"]
[Sat Aug 29 05:06:10.832734 2026] [security2:error] [pid 1017536:tid 1017669] [client 20.220.204.93:64924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/sbhu.php"] [unique_id "apK9IiJcY4fy7tP-rU35BgAAAhc"]
[Sat Aug 29 05:06:10.835253 2026] [security2:error] [pid 1017536:tid 1017792] [client 20.104.18.15:36713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/44.php"] [unique_id "apK9IiJcY4fy7tP-rU35BwAAApI"]
[Sat Aug 29 05:06:10.838634 2026] [security2:error] [pid 1018003:tid 1018186] [client 20.104.18.15:8031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/backup.php"] [unique_id "apK9IjAh5Y1i2tUxg4HvkAAABds"]
[Sat Aug 29 05:06:10.839914 2026] [security2:error] [pid 1018003:tid 1018235] [client 216.244.66.243:51840] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "scottportfolio.com"] [uri "/userfiles/figurka-labubu.xml"] [unique_id "apK9IjAh5Y1i2tUxg4HvkQAABgs"]
[Sat Aug 29 05:06:10.840010 2026] [security2:error] [pid 1018003:tid 1018235] [client 216.244.66.243:51840] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "scottportfolio.com"] [uri "/userfiles/figurka-labubu.xml"] [unique_id "apK9IjAh5Y1i2tUxg4HvkQAABgs"]
[Sat Aug 29 05:06:10.841327 2026] [security2:error] [pid 1017536:tid 1017729] [client 20.104.104.62:4853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/alog.php"] [unique_id "apK9IiJcY4fy7tP-rU35CAAAAlM"]
[Sat Aug 29 05:06:10.842752 2026] [security2:error] [pid 1018003:tid 1018170] [client 52.139.37.240:17453] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "carlpipescustomhomes.com"] [uri "/c99.php"] [unique_id "apK9IjAh5Y1i2tUxg4HvkgAABcs"]
[Sat Aug 29 05:06:10.846757 2026] [security2:error] [pid 1017536:tid 1017788] [client 20.196.209.81:15057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-admin/wp-cron.php"] [unique_id "apK9IiJcY4fy7tP-rU35CQAAAo4"]
[Sat Aug 29 05:06:10.849947 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.63.81.20:60452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/csst.php"] [unique_id "apK9IiJcY4fy7tP-rU35CgAAAnk"]
[Sat Aug 29 05:06:10.866858 2026] [security2:error] [pid 1017536:tid 1017745] [client 168.107.94.195:55801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9IiJcY4fy7tP-rU35CwAAAmM"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:10.868762 2026] [security2:error] [pid 1017536:tid 1017698] [client 20.104.104.62:36953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/13ede.php"] [unique_id "apK9IiJcY4fy7tP-rU35DAAAAjQ"]
[Sat Aug 29 05:06:10.877929 2026] [security2:error] [pid 1017536:tid 1017750] [client 20.104.104.62:25600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "meterphoneusa.horseweblog.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "apK9IiJcY4fy7tP-rU35DQAAAmg"]
[Sat Aug 29 05:06:10.891257 2026] [security2:error] [pid 1017536:tid 1017679] [client 20.104.104.62:64760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/zxcok.php"] [unique_id "apK9IiJcY4fy7tP-rU35EAAAAiE"]
[Sat Aug 29 05:06:10.894245 2026] [security2:error] [pid 1017536:tid 1017736] [client 20.151.200.44:64305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/anz.php"] [unique_id "apK9IiJcY4fy7tP-rU35EQAAAlo"]
[Sat Aug 29 05:06:10.901188 2026] [security2:error] [pid 1018003:tid 1018271] [client 20.104.18.15:23312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/dapa.php"] [unique_id "apK9IjAh5Y1i2tUxg4HvkwAABi8"]
[Sat Aug 29 05:06:10.904483 2026] [security2:error] [pid 1018003:tid 1018182] [client 52.139.37.240:12533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/must.php"] [unique_id "apK9IjAh5Y1i2tUxg4HvlAAABdc"]
[Sat Aug 29 05:06:10.905052 2026] [security2:error] [pid 1018003:tid 1018234] [client 4.205.62.107:22389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/txets.php"] [unique_id "apK9IjAh5Y1i2tUxg4HvlQAABgo"]
[Sat Aug 29 05:06:10.914385 2026] [security2:error] [pid 1018003:tid 1018238] [client 20.104.18.15:7164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/file31.php"] [unique_id "apK9IjAh5Y1i2tUxg4HvlgAABg4"]
[Sat Aug 29 05:06:10.915848 2026] [security2:error] [pid 1017536:tid 1017717] [client 20.104.18.15:13303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/htio.php"] [unique_id "apK9IiJcY4fy7tP-rU35EwAAAkc"]
[Sat Aug 29 05:06:10.921607 2026] [security2:error] [pid 1017536:tid 1017733] [client 20.196.209.81:4424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/flower.php"] [unique_id "apK9IiJcY4fy7tP-rU35FAAAAlc"]
[Sat Aug 29 05:06:10.939167 2026] [security2:error] [pid 1018003:tid 1018221] [client 20.104.104.62:45981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/xcre1.php"] [unique_id "apK9IjAh5Y1i2tUxg4HvlwAABf4"]
[Sat Aug 29 05:06:10.943750 2026] [security2:error] [pid 1018003:tid 1018222] [client 20.151.200.44:47405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/file66.php"] [unique_id "apK9IjAh5Y1i2tUxg4HvmAAABf8"]
[Sat Aug 29 05:06:10.946805 2026] [security2:error] [pid 1017536:tid 1017670] [client 20.48.251.3:61056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/erty.php"] [unique_id "apK9IiJcY4fy7tP-rU35FQAAAhg"]
[Sat Aug 29 05:06:10.977617 2026] [security2:error] [pid 1017536:tid 1017712] [client 20.104.18.15:8104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/indo.php"] [unique_id "apK9IiJcY4fy7tP-rU35GAAAAkI"]
[Sat Aug 29 05:06:10.978696 2026] [security2:error] [pid 1017536:tid 1017715] [client 20.104.104.62:43017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/adin.php"] [unique_id "apK9IiJcY4fy7tP-rU35GQAAAkU"]
[Sat Aug 29 05:06:10.979051 2026] [security2:error] [pid 1017536:tid 1017714] [client 20.63.81.20:60523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/wp-includes/blocks/query-title/footer.php"] [unique_id "apK9IiJcY4fy7tP-rU35GgAAAkQ"]
[Sat Aug 29 05:06:10.983242 2026] [security2:error] [pid 1017536:tid 1017691] [client 171.61.160.196:5924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.160.61.171.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK9IiJcY4fy7tP-rU35GwAAAi0"]
[Sat Aug 29 05:06:10.983388 2026] [security2:error] [pid 1017536:tid 1017691] [client 171.61.160.196:5924] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK9IiJcY4fy7tP-rU35GwAAAi0"]
[Sat Aug 29 05:06:10.985996 2026] [security2:error] [pid 1018003:tid 1018192] [client 4.205.62.107:22261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/sale.php"] [unique_id "apK9IjAh5Y1i2tUxg4HvmwAABeE"]
[Sat Aug 29 05:06:10.991457 2026] [security2:error] [pid 1018003:tid 1018193] [client 4.205.62.107:65422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/ws61.php"] [unique_id "apK9IjAh5Y1i2tUxg4HvnAAABeI"]
[Sat Aug 29 05:06:11.007200 2026] [security2:error] [pid 1017536:tid 1017765] [client 20.104.104.62:48644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/ah24.php"] [unique_id "apK9IyJcY4fy7tP-rU35HAAAAnc"]
[Sat Aug 29 05:06:11.032187 2026] [security2:error] [pid 1018003:tid 1018173] [client 195.178.110.247:4612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lawrencevillecosmeticdentists.com"] [uri "/index.php"] [unique_id "apK9IzAh5Y1i2tUxg4HvoQAABc4"]
[Sat Aug 29 05:06:11.036508 2026] [security2:error] [pid 1017536:tid 1017683] [client 52.139.37.240:17436] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "carlpipescustomhomes.com"] [uri "/c99.php"] [unique_id "apK9IyJcY4fy7tP-rU35HgAAAiU"]
[Sat Aug 29 05:06:11.042142 2026] [security2:error] [pid 1017536:tid 1017753] [client 4.205.62.107:53424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/guk.php"] [unique_id "apK9IyJcY4fy7tP-rU35HwAAAms"]
[Sat Aug 29 05:06:11.074740 2026] [security2:error] [pid 1017536:tid 1017778] [client 40.83.93.50:7796] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/1.php7"] [unique_id "apK9IyJcY4fy7tP-rU35IAAAAoQ"]
[Sat Aug 29 05:06:11.074823 2026] [security2:error] [pid 1017536:tid 1017778] [client 40.83.93.50:7796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/1.php7"] [unique_id "apK9IyJcY4fy7tP-rU35IAAAAoQ"]
[Sat Aug 29 05:06:11.074827 2026] [security2:error] [pid 1018003:tid 1018152] [client 20.151.200.44:64883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/bge.php"] [unique_id "apK9IzAh5Y1i2tUxg4HvogAABbk"]
[Sat Aug 29 05:06:11.074984 2026] [security2:error] [pid 1018003:tid 1018275] [client 20.151.200.44:46616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/zafir1.php"] [unique_id "apK9IzAh5Y1i2tUxg4HvowAABjM"]
[Sat Aug 29 05:06:11.075064 2026] [security2:error] [pid 1018003:tid 1018262] [client 20.48.251.3:62093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/wp-config.backup.php"] [unique_id "apK9IzAh5Y1i2tUxg4HvpAAABiY"]
[Sat Aug 29 05:06:11.080450 2026] [security2:error] [pid 1018003:tid 1018184] [client 20.104.104.62:22693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/motu.php"] [unique_id "apK9IzAh5Y1i2tUxg4HvpQAABdk"]
[Sat Aug 29 05:06:11.082124 2026] [security2:error] [pid 1017536:tid 1017719] [client 20.104.104.62:20800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-supports.php"] [unique_id "apK9IyJcY4fy7tP-rU35IgAAAkk"]
[Sat Aug 29 05:06:11.086970 2026] [security2:error] [pid 1017536:tid 1017680] [client 20.220.204.93:64344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/a332.php"] [unique_id "apK9IyJcY4fy7tP-rU35IwAAAiI"]
[Sat Aug 29 05:06:11.088636 2026] [security2:error] [pid 1017536:tid 1017768] [client 158.23.147.79:24387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK9IyJcY4fy7tP-rU35JAAAAno"]
[Sat Aug 29 05:06:11.100121 2026] [security2:error] [pid 1018003:tid 1018155] [client 52.139.37.240:12878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/up.php"] [unique_id "apK9IzAh5Y1i2tUxg4HvpgAABbw"]
[Sat Aug 29 05:06:11.115691 2026] [security2:error] [pid 1017536:tid 1017721] [client 20.63.81.20:56896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/wp-content/uploads/indoex.php"] [unique_id "apK9IyJcY4fy7tP-rU35JQAAAks"]
[Sat Aug 29 05:06:11.130686 2026] [security2:error] [pid 1018003:tid 1018248] [client 20.104.104.62:43066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/sf9.php"] [unique_id "apK9IzAh5Y1i2tUxg4HvpwAABhg"]
[Sat Aug 29 05:06:11.177921 2026] [security2:error] [pid 1017536:tid 1017725] [client 20.104.104.62:52057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/k8.php"] [unique_id "apK9IyJcY4fy7tP-rU35KAAAAk8"]
[Sat Aug 29 05:06:11.181059 2026] [cgid:error] [pid 1017536:tid 1017740] [client 20.52.41.200:1249] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/cpslggc/404.shtml
[Sat Aug 29 05:06:11.188899 2026] [security2:error] [pid 1018003:tid 1018153] [client 158.23.147.79:26371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9IzAh5Y1i2tUxg4HvqAAABbo"]
[Sat Aug 29 05:06:11.196755 2026] [security2:error] [pid 1018003:tid 1018225] [client 195.178.110.247:45520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lawrencevillecosmeticdentists.com"] [uri "/index.php"] [unique_id "apK9IzAh5Y1i2tUxg4HvqQAABgI"]
[Sat Aug 29 05:06:11.197644 2026] [security2:error] [pid 1017536:tid 1017729] [client 20.104.104.62:48576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/ztv.php"] [unique_id "apK9IyJcY4fy7tP-rU35KgAAAlM"]
[Sat Aug 29 05:06:11.204598 2026] [security2:error] [pid 1017536:tid 1017788] [client 20.48.251.3:62090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/edit.php"] [unique_id "apK9IyJcY4fy7tP-rU35KwAAAo4"]
[Sat Aug 29 05:06:11.208610 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.104.104.62:25851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "meterphoneusa.horseweblog.com"] [uri "/403.php"] [unique_id "apK9IyJcY4fy7tP-rU35LAAAAnk"]
[Sat Aug 29 05:06:11.214312 2026] [security2:error] [pid 1017536:tid 1017745] [client 20.104.104.62:45953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/wefile.php"] [unique_id "apK9IyJcY4fy7tP-rU35LgAAAmM"]
[Sat Aug 29 05:06:11.244861 2026] [security2:error] [pid 1017536:tid 1017741] [client 20.220.204.93:64981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/ws66.php"] [unique_id "apK9IyJcY4fy7tP-rU35MgAAAl8"]
[Sat Aug 29 05:06:11.245285 2026] [security2:error] [pid 1017536:tid 1017679] [client 20.63.81.20:60430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK9IyJcY4fy7tP-rU35MwAAAiE"]
[Sat Aug 29 05:06:11.247056 2026] [security2:error] [pid 1018003:tid 1018205] [client 168.107.94.195:56067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9IzAh5Y1i2tUxg4HvqwAABe4"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:11.270370 2026] [security2:error] [pid 1017536:tid 1017731] [client 20.196.209.81:5911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-admin/wp-links-opml.php"] [unique_id "apK9IyJcY4fy7tP-rU35NAAAAlU"]
[Sat Aug 29 05:06:11.275502 2026] [security2:error] [pid 1017536:tid 1017732] [client 158.158.54.35:8679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/222.php"] [unique_id "apK9IyJcY4fy7tP-rU35NQAAAlY"]
[Sat Aug 29 05:06:11.280869 2026] [security2:error] [pid 1017536:tid 1017717] [client 158.23.147.79:48350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK9IyJcY4fy7tP-rU35NwAAAkc"]
[Sat Aug 29 05:06:11.284466 2026] [security2:error] [pid 1018003:tid 1018190] [client 20.104.104.62:64699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/lte7.php"] [unique_id "apK9IzAh5Y1i2tUxg4HvrwAABd8"]
[Sat Aug 29 05:06:11.285269 2026] [security2:error] [pid 1017536:tid 1017783] [client 20.151.200.44:47404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/console.php"] [unique_id "apK9IyJcY4fy7tP-rU35OAAAAok"]
[Sat Aug 29 05:06:11.293121 2026] [security2:error] [pid 1017536:tid 1017733] [client 40.83.93.50:5916] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "termoenvases.net"] [uri "/wp-content/1.php"] [unique_id "apK9IyJcY4fy7tP-rU35OQAAAlc"]
[Sat Aug 29 05:06:11.293215 2026] [security2:error] [pid 1017536:tid 1017733] [client 40.83.93.50:5916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-content/1.php"] [unique_id "apK9IyJcY4fy7tP-rU35OQAAAlc"]
[Sat Aug 29 05:06:11.299706 2026] [security2:error] [pid 1018003:tid 1018267] [client 4.205.62.107:22478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/phpinfo01.php"] [unique_id "apK9IzAh5Y1i2tUxg4HvsAAABis"]
[Sat Aug 29 05:06:11.308116 2026] [security2:error] [pid 1017536:tid 1017764] [client 68.155.159.216:18413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/dropdown.php"] [unique_id "apK9IyJcY4fy7tP-rU35OwAAAnY"]
[Sat Aug 29 05:06:11.313750 2026] [security2:error] [pid 1017536:tid 1017703] [client 20.151.200.44:64932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/wp-ana.php"] [unique_id "apK9IyJcY4fy7tP-rU35PQAAAjk"]
[Sat Aug 29 05:06:11.320980 2026] [security2:error] [pid 1017536:tid 1017684] [client 20.196.209.81:11531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/meta.php"] [unique_id "apK9IyJcY4fy7tP-rU35PwAAAiY"]
[Sat Aug 29 05:06:11.326579 2026] [security2:error] [pid 1017536:tid 1017780] [client 20.52.41.200:1249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/inputs.php"] [unique_id "apK9IyJcY4fy7tP-rU35QAAAAoY"]
[Sat Aug 29 05:06:11.329716 2026] [security2:error] [pid 1017536:tid 1017708] [client 20.104.104.62:20863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/bkv74.php"] [unique_id "apK9IyJcY4fy7tP-rU35QQAAAj4"]
[Sat Aug 29 05:06:11.330220 2026] [security2:error] [pid 1017536:tid 1017773] [client 158.23.147.79:62670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK9IyJcY4fy7tP-rU35QgAAAn8"]
[Sat Aug 29 05:06:11.346502 2026] [security2:error] [pid 1018003:tid 1018159] [client 20.48.251.3:61632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/8.php"] [unique_id "apK9IzAh5Y1i2tUxg4HvswAABcA"]
[Sat Aug 29 05:06:11.350286 2026] [security2:error] [pid 1017536:tid 1017714] [client 20.104.104.62:22695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/EM.php"] [unique_id "apK9IyJcY4fy7tP-rU35RAAAAkQ"]
[Sat Aug 29 05:06:11.351898 2026] [security2:error] [pid 1017536:tid 1017770] [client 20.104.104.62:23380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/alog.php"] [unique_id "apK9IyJcY4fy7tP-rU35RQAAAnw"]
[Sat Aug 29 05:06:11.360235 2026] [security2:error] [pid 1017536:tid 1017691] [client 158.23.147.79:30623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/sad/about.php"] [unique_id "apK9IyJcY4fy7tP-rU35RwAAAi0"]
[Sat Aug 29 05:06:11.372643 2026] [security2:error] [pid 1017536:tid 1017765] [client 20.63.81.20:60515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/haxor.php"] [unique_id "apK9IyJcY4fy7tP-rU35SAAAAnc"]
[Sat Aug 29 05:06:11.373457 2026] [security2:error] [pid 1017536:tid 1017784] [client 20.104.49.130:58049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.carlosmua.com"] [uri "/users.php"] [unique_id "apK9IyJcY4fy7tP-rU35SQAAAoo"]
[Sat Aug 29 05:06:11.376349 2026] [security2:error] [pid 1018003:tid 1018215] [client 20.220.204.93:64926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/ws68.php"] [unique_id "apK9IzAh5Y1i2tUxg4HvtAAABfg"]
[Sat Aug 29 05:06:11.383251 2026] [security2:error] [pid 1017536:tid 1017751] [client 52.139.37.240:12905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/wp-content/155.php"] [unique_id "apK9IyJcY4fy7tP-rU35SgAAAmk"]
[Sat Aug 29 05:06:11.387554 2026] [security2:error] [pid 1018003:tid 1018156] [client 4.205.62.107:55939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/guk.php"] [unique_id "apK9IzAh5Y1i2tUxg4HvtQAABb0"]
[Sat Aug 29 05:06:11.404456 2026] [security2:error] [pid 1017536:tid 1017715] [client 20.104.104.62:25641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "meterphoneusa.horseweblog.com"] [uri "/ava.php"] [unique_id "apK9IyJcY4fy7tP-rU35TAAAAkU"]
[Sat Aug 29 05:06:11.418911 2026] [security2:error] [pid 1017536:tid 1017753] [client 20.104.104.62:48762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/kure.php"] [unique_id "apK9IyJcY4fy7tP-rU35TQAAAms"]
[Sat Aug 29 05:06:11.420725 2026] [security2:error] [pid 1017536:tid 1017752] [client 20.104.104.62:56339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/tanjiro.php"] [unique_id "apK9IyJcY4fy7tP-rU35TgAAAmo"]
[Sat Aug 29 05:06:11.441965 2026] [security2:error] [pid 1017536:tid 1017777] [client 68.155.159.216:51868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-admin.php"] [unique_id "apK9IyJcY4fy7tP-rU35TwAAAoM"]
[Sat Aug 29 05:06:11.453437 2026] [security2:error] [pid 1018003:tid 1018194] [client 158.23.147.79:32652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/NewFile.php/"] [unique_id "apK9IzAh5Y1i2tUxg4HvtgAABeM"]
[Sat Aug 29 05:06:11.453705 2026] [security2:error] [pid 1018003:tid 1018169] [client 158.23.147.79:25578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/atomlib.php"] [unique_id "apK9IzAh5Y1i2tUxg4HvtwAABco"]
[Sat Aug 29 05:06:11.467997 2026] [security2:error] [pid 1018003:tid 1018163] [client 68.155.159.216:24469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-content/banners/about.php"] [unique_id "apK9IzAh5Y1i2tUxg4HvuAAABcQ"]
[Sat Aug 29 05:06:11.473295 2026] [security2:error] [pid 1018003:tid 1018182] [client 20.48.251.3:61693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/thui.php"] [unique_id "apK9IzAh5Y1i2tUxg4HvuQAABdc"]
[Sat Aug 29 05:06:11.479705 2026] [security2:error] [pid 1018003:tid 1018234] [client 20.104.104.62:20826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/css/java.php"] [unique_id "apK9IzAh5Y1i2tUxg4HvugAABgo"]
[Sat Aug 29 05:06:11.489226 2026] [security2:error] [pid 1018003:tid 1018207] [client 20.151.200.44:47344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/blnux.php"] [unique_id "apK9IzAh5Y1i2tUxg4HvuwAABfA"]
[Sat Aug 29 05:06:11.490192 2026] [security2:error] [pid 1018003:tid 1018238] [client 20.197.61.180:16272] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-content/1.php"] [unique_id "apK9IzAh5Y1i2tUxg4HvvAAABg4"]
[Sat Aug 29 05:06:11.490199 2026] [security2:error] [pid 1018003:tid 1018177] [client 20.104.104.62:41608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/ca4.php"] [unique_id "apK9IzAh5Y1i2tUxg4HvvQAABdI"]
[Sat Aug 29 05:06:11.490268 2026] [security2:error] [pid 1018003:tid 1018238] [client 20.197.61.180:16272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-content/1.php"] [unique_id "apK9IzAh5Y1i2tUxg4HvvAAABg4"]
[Sat Aug 29 05:06:11.501379 2026] [security2:error] [pid 1017536:tid 1017705] [client 20.63.81.20:60440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/google.php"] [unique_id "apK9IyJcY4fy7tP-rU35UAAAAjs"]
[Sat Aug 29 05:06:11.518046 2026] [security2:error] [pid 1017536:tid 1017668] [client 20.151.200.44:65496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/secret.php"] [unique_id "apK9IyJcY4fy7tP-rU35UQAAAhY"]
[Sat Aug 29 05:06:11.520519 2026] [security2:error] [pid 1017536:tid 1017740] [client 20.220.204.93:64932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/users.php"] [unique_id "apK9IyJcY4fy7tP-rU35UgAAAl4"]
[Sat Aug 29 05:06:11.543292 2026] [security2:error] [pid 1018003:tid 1018192] [client 20.104.104.62:36948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/adin.php"] [unique_id "apK9IzAh5Y1i2tUxg4HvwAAABeE"]
[Sat Aug 29 05:06:11.563582 2026] [security2:error] [pid 1017536:tid 1017729] [client 138.199.19.170:39492] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.sankomold.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "apK9IyJcY4fy7tP-rU35VQAAAlM"]
[Sat Aug 29 05:06:11.566033 2026] [security2:error] [pid 1018003:tid 1018256] [client 40.83.93.50:9554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/ds.php"] [unique_id "apK9IzAh5Y1i2tUxg4HvwgAABiA"]
[Sat Aug 29 05:06:11.566090 2026] [security2:error] [pid 1018003:tid 1018264] [client 20.48.250.41:64342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/wp-act.php"] [unique_id "apK9IzAh5Y1i2tUxg4HvwwAABig"]
[Sat Aug 29 05:06:11.569607 2026] [security2:error] [pid 1018003:tid 1018200] [client 20.48.251.3:33340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/u88.php"] [unique_id "apK9IzAh5Y1i2tUxg4HvxAAABek"]
[Sat Aug 29 05:06:11.579848 2026] [security2:error] [pid 1017536:tid 1017745] [client 20.104.104.62:64662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/Rk41.php"] [unique_id "apK9IyJcY4fy7tP-rU35VgAAAmM"]
[Sat Aug 29 05:06:11.592331 2026] [security2:error] [pid 1018003:tid 1018276] [client 20.104.104.62:48679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/cafe.php"] [unique_id "apK9IzAh5Y1i2tUxg4HvxQAABjQ"]
[Sat Aug 29 05:06:11.599972 2026] [security2:error] [pid 1017536:tid 1017695] [client 20.48.251.3:61198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/file21.php"] [unique_id "apK9IyJcY4fy7tP-rU35WAAAAjE"]
[Sat Aug 29 05:06:11.602084 2026] [security2:error] [pid 1018003:tid 1018150] [client 20.104.104.62:25810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "meterphoneusa.horseweblog.com"] [uri "/info.php"] [unique_id "apK9IzAh5Y1i2tUxg4HvxgAABbc"]
[Sat Aug 29 05:06:11.606512 2026] [security2:error] [pid 1017536:tid 1017757] [client 52.139.37.240:12507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/wp-update.php"] [unique_id "apK9IyJcY4fy7tP-rU35WQAAAm8"]
[Sat Aug 29 05:06:11.611678 2026] [security2:error] [pid 1017536:tid 1017778] [client 34.21.253.104:29884] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpanel.replenishink.com"] [uri "/wp-config.php.bak"] [unique_id "apK9IyJcY4fy7tP-rU35WwAAAoQ"]
[Sat Aug 29 05:06:11.611714 2026] [security2:error] [pid 1017536:tid 1017678] [client 34.21.253.104:29848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 104.253.21.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.replenishink.com"] [uri "/wp-config.php"] [unique_id "apK9IyJcY4fy7tP-rU35WgAAAiA"]
[Sat Aug 29 05:06:11.624821 2026] [security2:error] [pid 1017536:tid 1017719] [client 34.21.253.104:29878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 104.253.21.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.replenishink.com"] [uri "/config.php.bak"] [unique_id "apK9IyJcY4fy7tP-rU35XwAAAkk"]
[Sat Aug 29 05:06:11.625128 2026] [security2:error] [pid 1018003:tid 1018252] [client 34.21.253.104:29864] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "cpanel.replenishink.com"] [uri "/config/database.yml"] [unique_id "apK9IzAh5Y1i2tUxg4HvygAABhw"]
[Sat Aug 29 05:06:11.625235 2026] [security2:error] [pid 1018003:tid 1018180] [client 34.21.253.104:29852] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpanel.replenishink.com"] [uri "/wp-config.php.old"] [unique_id "apK9IzAh5Y1i2tUxg4HvywAABdU"]
[Sat Aug 29 05:06:11.627643 2026] [security2:error] [pid 1017536:tid 1017736] [client 20.104.104.62:45989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/x0x.php"] [unique_id "apK9IyJcY4fy7tP-rU35YAAAAlo"]
[Sat Aug 29 05:06:11.629125 2026] [security2:error] [pid 1018003:tid 1018186] [client 34.21.253.104:29856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 104.253.21.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.replenishink.com"] [uri "/config.php"] [unique_id "apK9IzAh5Y1i2tUxg4HvzAAABds"]
[Sat Aug 29 05:06:11.629215 2026] [security2:error] [pid 1018003:tid 1018186] [client 34.21.253.104:29856] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "409"] [hostname "cpanel.replenishink.com"] [uri "/config.php"] [unique_id "apK9IzAh5Y1i2tUxg4HvzAAABds"]
[Sat Aug 29 05:06:11.629302 2026] [security2:error] [pid 1017536:tid 1017722] [client 168.107.94.195:56403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9IyJcY4fy7tP-rU35YgAAAkw"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:11.630623 2026] [proxy_http:error] [pid 1017536:tid 1017789] (20014)Internal error (specific information not available): [client 34.21.253.104:29790] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:11.630636 2026] [proxy:error] [pid 1017536:tid 1017789] [client 34.21.253.104:29790] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/id_rsa
[Sat Aug 29 05:06:11.631273 2026] [proxy_http:error] [pid 1018003:tid 1018164] (20014)Internal error (specific information not available): [client 34.21.253.104:29822] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:11.631280 2026] [proxy:error] [pid 1018003:tid 1018164] [client 34.21.253.104:29822] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/key.pem
[Sat Aug 29 05:06:11.634715 2026] [security2:error] [pid 1018003:tid 1018157] [client 20.63.81.20:60424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "apK9IzAh5Y1i2tUxg4HvzgAABb4"]
[Sat Aug 29 05:06:11.637163 2026] [proxy_http:error] [pid 1017536:tid 1017789] (20014)Internal error (specific information not available): [client 34.21.253.104:29790] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:11.637172 2026] [proxy:error] [pid 1017536:tid 1017789] [client 34.21.253.104:29790] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/502.shtml
[Sat Aug 29 05:06:11.638423 2026] [proxy_http:error] [pid 1018003:tid 1018274] (20014)Internal error (specific information not available): [client 34.21.253.104:29824] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:11.638436 2026] [proxy:error] [pid 1018003:tid 1018274] [client 34.21.253.104:29824] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/server.key
[Sat Aug 29 05:06:11.644757 2026] [security2:error] [pid 1018003:tid 1018262] [client 158.23.147.79:37794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK9IzAh5Y1i2tUxg4Hv0AAABiY"]
[Sat Aug 29 05:06:11.661814 2026] [security2:error] [pid 1018003:tid 1018184] [client 20.151.200.44:65516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/pro.php"] [unique_id "apK9IzAh5Y1i2tUxg4Hv0gAABdk"]
[Sat Aug 29 05:06:11.665995 2026] [security2:error] [pid 1018003:tid 1018199] [client 20.196.209.81:5513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-admin/wp-load.php"] [unique_id "apK9IzAh5Y1i2tUxg4Hv0wAABeg"]
[Sat Aug 29 05:06:11.680936 2026] [security2:error] [pid 1018003:tid 1018189] [client 20.104.49.130:30003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/az.php"] [unique_id "apK9IzAh5Y1i2tUxg4Hv1AAABd4"]
[Sat Aug 29 05:06:11.697070 2026] [security2:error] [pid 1017536:tid 1017733] [client 20.104.104.62:20813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/edit-video.php"] [unique_id "apK9IyJcY4fy7tP-rU35ZQAAAlc"]
[Sat Aug 29 05:06:11.709108 2026] [security2:error] [pid 1018003:tid 1018165] [client 20.220.204.93:64967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/bzjdlofz.php"] [unique_id "apK9IzAh5Y1i2tUxg4Hv1gAABcY"]
[Sat Aug 29 05:06:11.710007 2026] [security2:error] [pid 1017536:tid 1017720] [client 20.104.104.62:56334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/7logs.php"] [unique_id "apK9IyJcY4fy7tP-rU35ZgAAAko"]
[Sat Aug 29 05:06:11.713317 2026] [security2:error] [pid 1017536:tid 1017785] [client 20.48.250.41:65082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/24.php"] [unique_id "apK9IyJcY4fy7tP-rU35ZwAAAos"]
[Sat Aug 29 05:06:11.718615 2026] [security2:error] [pid 1017536:tid 1017673] [client 158.158.54.35:8938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/mini.php"] [unique_id "apK9IyJcY4fy7tP-rU35aAAAAhs"]
[Sat Aug 29 05:06:11.729263 2026] [security2:error] [pid 1017536:tid 1017693] [client 20.48.251.3:61212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/mcebraed.php"] [unique_id "apK9IyJcY4fy7tP-rU35aQAAAi8"]
[Sat Aug 29 05:06:11.746557 2026] [security2:error] [pid 1017536:tid 1017704] [client 20.196.209.81:4465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/randkeyword.php"] [unique_id "apK9IyJcY4fy7tP-rU35bQAAAjo"]
[Sat Aug 29 05:06:11.762634 2026] [security2:error] [pid 1018003:tid 1018278] [client 68.155.159.216:9323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/file17.php"] [unique_id "apK9IzAh5Y1i2tUxg4Hv2wAABjY"]
[Sat Aug 29 05:06:11.762731 2026] [security2:error] [pid 1017536:tid 1017781] [client 40.83.93.50:12441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-content/about.php"] [unique_id "apK9IyJcY4fy7tP-rU35bgAAAoc"]
[Sat Aug 29 05:06:11.764334 2026] [security2:error] [pid 1017536:tid 1017691] [client 20.63.81.20:60440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/robots.php"] [unique_id "apK9IyJcY4fy7tP-rU35bwAAAi0"]
[Sat Aug 29 05:06:11.765296 2026] [security2:error] [pid 1017536:tid 1017754] [client 68.155.159.216:14229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK9IyJcY4fy7tP-rU35cAAAAmw"]
[Sat Aug 29 05:06:11.768573 2026] [security2:error] [pid 1017536:tid 1017765] [client 20.104.104.62:55005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hannahstamp.com"] [uri "/fesa.php"] [unique_id "apK9IyJcY4fy7tP-rU35cQAAAnc"]
[Sat Aug 29 05:06:11.772485 2026] [security2:error] [pid 1017536:tid 1017679] [client 20.52.41.200:1263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/alfa.php"] [unique_id "apK9IyJcY4fy7tP-rU35cgAAAiE"]
[Sat Aug 29 05:06:11.787412 2026] [security2:error] [pid 1018003:tid 1018218] [client 20.151.200.44:47369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/pentest.php"] [unique_id "apK9IzAh5Y1i2tUxg4Hv3QAABfs"]
[Sat Aug 29 05:06:11.797807 2026] [security2:error] [pid 1017536:tid 1017777] [client 20.104.104.62:48758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/eval.php"] [unique_id "apK9IyJcY4fy7tP-rU35dAAAAoM"]
[Sat Aug 29 05:06:11.798836 2026] [security2:error] [pid 1018003:tid 1018174] [client 20.151.200.44:61981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/999.php"] [unique_id "apK9IzAh5Y1i2tUxg4Hv3gAABc8"]
[Sat Aug 29 05:06:11.800436 2026] [security2:error] [pid 1017536:tid 1017685] [client 4.205.62.107:65005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/old_phpinfo.php"] [unique_id "apK9IyJcY4fy7tP-rU35dQAAAic"]
[Sat Aug 29 05:06:11.804338 2026] [security2:error] [pid 1017536:tid 1017747] [client 52.139.37.240:12531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/xmrlpc.php"] [unique_id "apK9IyJcY4fy7tP-rU35dgAAAmU"]
[Sat Aug 29 05:06:11.810319 2026] [security2:error] [pid 1017536:tid 1017721] [client 68.155.159.216:50255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-admin/index.php"] [unique_id "apK9IyJcY4fy7tP-rU35dwAAAks"]
[Sat Aug 29 05:06:11.812753 2026] [security2:error] [pid 1017536:tid 1017761] [client 20.104.104.62:60457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/sf9.php"] [unique_id "apK9IyJcY4fy7tP-rU35eAAAAnM"]
[Sat Aug 29 05:06:11.816169 2026] [security2:error] [pid 1018003:tid 1018277] [client 20.151.200.44:64226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/lufix1.php"] [unique_id "apK9IzAh5Y1i2tUxg4Hv4AAABjU"]
[Sat Aug 29 05:06:11.816720 2026] [security2:error] [pid 1018003:tid 1018269] [client 20.104.104.62:25652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "meterphoneusa.horseweblog.com"] [uri "/wp-admin/admin.php"] [unique_id "apK9IzAh5Y1i2tUxg4Hv4QAABi0"]
[Sat Aug 29 05:06:11.858842 2026] [security2:error] [pid 1017536:tid 1017705] [client 20.104.104.62:4111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/sf.php"] [unique_id "apK9IyJcY4fy7tP-rU35ewAAAjs"]
[Sat Aug 29 05:06:11.858923 2026] [security2:error] [pid 1017536:tid 1017769] [client 20.48.251.3:61217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/server-info.php"] [unique_id "apK9IyJcY4fy7tP-rU35egAAAns"]
[Sat Aug 29 05:06:11.893971 2026] [security2:error] [pid 1018003:tid 1018172] [client 20.63.81.20:60496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/wp-content/plugins/ccx/index.php"] [unique_id "apK9IzAh5Y1i2tUxg4Hv5QAABc0"]
[Sat Aug 29 05:06:11.895669 2026] [security2:error] [pid 1018003:tid 1018166] [client 138.199.19.170:39498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 170.19.199.138.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "cpcalendars.sankomold.com"] [uri "/xmlrpc.php"] [unique_id "apK9IzAh5Y1i2tUxg4Hv5AAABcc"]
[Sat Aug 29 05:06:11.915963 2026] [security2:error] [pid 1018003:tid 1018163] [client 20.48.250.41:65115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/155.php"] [unique_id "apK9IzAh5Y1i2tUxg4Hv5gAABcQ"]
[Sat Aug 29 05:06:11.917978 2026] [security2:error] [pid 1018003:tid 1018207] [client 35.198.240.194:10680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 194.240.198.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.omni-staffing.com"] [uri "/pi.php"] [unique_id "apK9IzAh5Y1i2tUxg4Hv6gAABfA"]
[Sat Aug 29 05:06:11.919741 2026] [security2:error] [pid 1017536:tid 1017708] [client 34.7.40.70:7618] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/public/.env"] [unique_id "apK9IyJcY4fy7tP-rU35fQAAAj4"]
[Sat Aug 29 05:06:11.922495 2026] [cgid:error] [pid 1017536:tid 1017784] [client 34.7.40.70:7650] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:11.922911 2026] [cgid:error] [pid 1017536:tid 1017696] [client 34.7.40.70:7696] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:11.923177 2026] [security2:error] [pid 1018003:tid 1018221] [client 35.198.240.194:10670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 194.240.198.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.omni-staffing.com"] [uri "/i.php"] [unique_id "apK9IzAh5Y1i2tUxg4Hv7AAABf4"]
[Sat Aug 29 05:06:11.924552 2026] [cgid:error] [pid 1017536:tid 1017743] [client 34.7.40.70:7628] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:11.930906 2026] [security2:error] [pid 1018003:tid 1018222] [client 20.151.200.44:46644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/6y7t.php"] [unique_id "apK9IzAh5Y1i2tUxg4Hv8AAABf8"]
[Sat Aug 29 05:06:11.931179 2026] [security2:error] [pid 1017536:tid 1017715] [client 34.7.40.70:7726] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/root/.aws/config"] [unique_id "apK9IyJcY4fy7tP-rU35iQAAAkU"]
[Sat Aug 29 05:06:11.931753 2026] [authz_core:error] [pid 1018003:tid 1018175] [client 35.198.240.194:10664] AH01630: client denied by server configuration: /home4/stellar2/public_html/omnistaffing/.htpasswd
[Sat Aug 29 05:06:11.934011 2026] [cgid:error] [pid 1017536:tid 1017672] [client 34.7.40.70:7756] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:11.934743 2026] [cgid:error] [pid 1018003:tid 1018225] [client 34.7.40.70:7642] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:11.934951 2026] [cgid:error] [pid 1017536:tid 1017753] [client 34.7.40.70:7710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:11.935267 2026] [security2:error] [pid 1018003:tid 1018175] [client 35.198.240.194:10664] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.omni-staffing.com"] [uri "/cgi-sys/403.html"] [unique_id "apK9IzAh5Y1i2tUxg4Hv6wAABdA"]
[Sat Aug 29 05:06:11.935722 2026] [security2:error] [pid 1017536:tid 1017741] [client 20.104.104.62:20858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/.well-known/up.php"] [unique_id "apK9IyJcY4fy7tP-rU35iwAAAl8"]
[Sat Aug 29 05:06:11.938581 2026] [cgid:error] [pid 1017536:tid 1017687] [client 34.7.40.70:7680] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:11.940775 2026] [cgid:error] [pid 1018003:tid 1018151] [client 34.7.40.70:7750] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:11.942903 2026] [security2:error] [pid 1017536:tid 1017751] [client 34.7.40.70:7666] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/.github/.env"] [unique_id "apK9IyJcY4fy7tP-rU35hwAAAmk"]
[Sat Aug 29 05:06:11.943622 2026] [cgid:error] [pid 1017536:tid 1017688] [client 34.7.40.70:7742] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:11.943716 2026] [cgid:error] [pid 1018003:tid 1018242] [client 34.7.40.70:7782] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:11.948499 2026] [security2:error] [pid 1018003:tid 1018242] [client 34.7.40.70:7782] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/404.shtml"] [unique_id "apK9IzAh5Y1i2tUxg4Hv7wAABhI"]
[Sat Aug 29 05:06:11.949030 2026] [security2:error] [pid 1017536:tid 1017715] [client 35.198.240.194:10702] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.omni-staffing.com"] [uri "/gradle.properties"] [unique_id "apK9IyJcY4fy7tP-rU35jQAAAkU"]
[Sat Aug 29 05:06:11.950249 2026] [cgid:error] [pid 1017536:tid 1017748] [client 34.7.40.70:7768] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:11.954010 2026] [security2:error] [pid 1017536:tid 1017678] [client 35.198.240.194:10688] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.omni-staffing.com"] [uri "/cgi-sys/404.html"] [unique_id "apK9IyJcY4fy7tP-rU35gQAAAiA"]
[Sat Aug 29 05:06:11.955769 2026] [cgid:error] [pid 1017536:tid 1017744] [client 34.7.40.70:7798] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:11.955870 2026] [cgid:error] [pid 1017536:tid 1017683] [client 34.7.40.70:7734] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:11.955893 2026] [security2:error] [pid 1017536:tid 1017744] [client 34.7.40.70:7798] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/404.shtml"] [unique_id "apK9IyJcY4fy7tP-rU35igAAAmI"]
[Sat Aug 29 05:06:11.965403 2026] [security2:error] [pid 1018003:tid 1018249] [client 158.23.147.79:30662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/admin.php"] [unique_id "apK9IzAh5Y1i2tUxg4Hv8gAABhk"]
[Sat Aug 29 05:06:11.976838 2026] [security2:error] [pid 1017536:tid 1017789] [client 20.151.200.44:64865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/sef.php"] [unique_id "apK9IyJcY4fy7tP-rU35jwAAAo8"]
[Sat Aug 29 05:06:11.977680 2026] [security2:error] [pid 1017536:tid 1017731] [client 35.198.240.194:10740] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.omni-staffing.com"] [uri "/_next/../.env"] [unique_id "apK9IyJcY4fy7tP-rU35kAAAAlU"]
[Sat Aug 29 05:06:11.979488 2026] [security2:error] [pid 1018003:tid 1018233] [client 35.198.240.194:10730] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/.env~"] [unique_id "apK9IzAh5Y1i2tUxg4Hv8wAABgk"]
[Sat Aug 29 05:06:11.988149 2026] [security2:error] [pid 1017536:tid 1017742] [client 20.220.204.93:64350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/selesai.php"] [unique_id "apK9IyJcY4fy7tP-rU35kgAAAmA"]
[Sat Aug 29 05:06:11.993875 2026] [security2:error] [pid 1017536:tid 1017681] [client 195.178.110.247:4630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lbttech.com"] [uri "/index.php"] [unique_id "apK9IyJcY4fy7tP-rU35kwAAAiM"]
[Sat Aug 29 05:06:11.994386 2026] [security2:error] [pid 1017536:tid 1017749] [client 20.48.251.3:62108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/gk.php"] [unique_id "apK9IyJcY4fy7tP-rU35lAAAAmc"]
[Sat Aug 29 05:06:11.997597 2026] [security2:error] [pid 1018003:tid 1018252] [client 35.198.240.194:10752] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/_next/.env"] [unique_id "apK9IzAh5Y1i2tUxg4Hv9QAABhw"]
[Sat Aug 29 05:06:11.997650 2026] [security2:error] [pid 1018003:tid 1018180] [client 35.198.240.194:10768] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.bash_history"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/.bash_history"] [unique_id "apK9IzAh5Y1i2tUxg4Hv9gAABdU"]
[Sat Aug 29 05:06:11.997670 2026] [security2:error] [pid 1018003:tid 1018252] [client 35.198.240.194:10752] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "mail.omni-staffing.com"] [uri "/_next/.env"] [unique_id "apK9IzAh5Y1i2tUxg4Hv9QAABhw"]
[Sat Aug 29 05:06:11.997710 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.104.104.62:48478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/sao.php"] [unique_id "apK9IyJcY4fy7tP-rU35lQAAAlY"]
[Sat Aug 29 05:06:11.997741 2026] [security2:error] [pid 1018003:tid 1018180] [client 35.198.240.194:10768] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "mail.omni-staffing.com"] [uri "/.bash_history"] [unique_id "apK9IzAh5Y1i2tUxg4Hv9gAABdU"]
[Sat Aug 29 05:06:12.009834 2026] [security2:error] [pid 1017536:tid 1017720] [client 20.104.104.62:4106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/super.php"] [unique_id "apK9JCJcY4fy7tP-rU35lwAAAko"]
[Sat Aug 29 05:06:12.009856 2026] [security2:error] [pid 1017536:tid 1017785] [client 168.107.94.195:56772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9JCJcY4fy7tP-rU35lgAAAos"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:12.019706 2026] [security2:error] [pid 1017536:tid 1017741] [client 52.139.37.240:12916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/about/function.php"] [unique_id "apK9JCJcY4fy7tP-rU35mQAAAl8"]
[Sat Aug 29 05:06:12.020694 2026] [security2:error] [pid 1017536:tid 1017707] [client 20.104.104.62:25662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "meterphoneusa.horseweblog.com"] [uri "/wp-content/plugins/about.php"] [unique_id "apK9JCJcY4fy7tP-rU35mgAAAj0"]
[Sat Aug 29 05:06:12.024963 2026] [security2:error] [pid 1017536:tid 1017693] [client 20.63.81.20:60509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/wp-admin/css/colors/maro.php"] [unique_id "apK9JCJcY4fy7tP-rU35mwAAAi8"]
[Sat Aug 29 05:06:12.031014 2026] [security2:error] [pid 1017536:tid 1017780] [client 20.104.104.62:52074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/lte7.php"] [unique_id "apK9JCJcY4fy7tP-rU35nQAAAoY"]
[Sat Aug 29 05:06:12.036233 2026] [security2:error] [pid 1017536:tid 1017745] [client 40.83.93.50:9551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/GOD.php"] [unique_id "apK9JCJcY4fy7tP-rU35ngAAAmM"]
[Sat Aug 29 05:06:12.042549 2026] [security2:error] [pid 1017536:tid 1017704] [client 4.205.62.107:22244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/cxc.php"] [unique_id "apK9JCJcY4fy7tP-rU35nwAAAjo"]
[Sat Aug 29 05:06:12.063546 2026] [security2:error] [pid 1017536:tid 1017770] [client 20.104.49.130:60929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/ab.php"] [unique_id "apK9JCJcY4fy7tP-rU35oAAAAnw"]
[Sat Aug 29 05:06:12.069188 2026] [security2:error] [pid 1017536:tid 1017691] [client 20.151.200.44:47298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/0xs.php"] [unique_id "apK9JCJcY4fy7tP-rU35oQAAAi0"]
[Sat Aug 29 05:06:12.084507 2026] [security2:error] [pid 1017536:tid 1017670] [client 20.196.209.81:15061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-admin/wp-mail.php"] [unique_id "apK9JCJcY4fy7tP-rU35owAAAhg"]
[Sat Aug 29 05:06:12.084525 2026] [security2:error] [pid 1017536:tid 1017674] [client 20.48.250.41:64319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/file.php"] [unique_id "apK9JCJcY4fy7tP-rU35pAAAAhw"]
[Sat Aug 29 05:06:12.092731 2026] [security2:error] [pid 1018003:tid 1018257] [client 34.143.179.161:9166] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "cpcontacts.harnessenergyusa.com"] [uri "/client_secret.json"] [unique_id "apK9JDAh5Y1i2tUxg4Hv-wAABiE"]
[Sat Aug 29 05:06:12.109470 2026] [security2:error] [pid 1018003:tid 1018155] [client 20.104.104.62:40199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/.well-known/shell.php"] [unique_id "apK9JDAh5Y1i2tUxg4HwAQAABbw"]
[Sat Aug 29 05:06:12.110185 2026] [security2:error] [pid 1018003:tid 1018189] [client 20.151.200.44:64207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/admin123.php"] [unique_id "apK9JDAh5Y1i2tUxg4HwAgAABd4"]
[Sat Aug 29 05:06:12.120938 2026] [security2:error] [pid 1017536:tid 1017706] [client 20.48.251.3:61201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/god.php"] [unique_id "apK9JCJcY4fy7tP-rU35pgAAAjw"]
[Sat Aug 29 05:06:12.122491 2026] [security2:error] [pid 1017536:tid 1017705] [client 4.205.62.107:22356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/wp-content/themes/luJMF.php"] [unique_id "apK9JCJcY4fy7tP-rU35pwAAAjs"]
[Sat Aug 29 05:06:12.127840 2026] [security2:error] [pid 1017536:tid 1017736] [client 34.143.179.161:9182] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cpcontacts.harnessenergyusa.com"] [uri "/google-service-account.json"] [unique_id "apK9JCJcY4fy7tP-rU35qQAAAlo"]
[Sat Aug 29 05:06:12.131631 2026] [core:error] [pid 1017536:tid 1017725] [client 57.141.14.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:12.131647 2026] [core:error] [pid 1017536:tid 1017725] [client 57.141.14.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:12.133967 2026] [security2:error] [pid 1018003:tid 1018273] [client 4.205.62.107:65523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/xza.php"] [unique_id "apK9JDAh5Y1i2tUxg4HwBQAABjE"]
[Sat Aug 29 05:06:12.142118 2026] [security2:error] [pid 1018003:tid 1018186] [client 20.196.209.81:16728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/goods.php"] [unique_id "apK9JDAh5Y1i2tUxg4HwBgAABds"]
[Sat Aug 29 05:06:12.153564 2026] [security2:error] [pid 1018003:tid 1018240] [client 20.104.104.62:43028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/lufix1.php"] [unique_id "apK9JDAh5Y1i2tUxg4HwCAAABhA"]
[Sat Aug 29 05:06:12.155530 2026] [security2:error] [pid 1018003:tid 1018246] [client 20.63.81.20:60503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/wp-admin/css/colors/coffee/marijuana.php"] [unique_id "apK9JDAh5Y1i2tUxg4HwCQAABhY"]
[Sat Aug 29 05:06:12.168900 2026] [security2:error] [pid 1017536:tid 1017783] [client 195.178.110.247:45530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lbttech.com"] [uri "/index.php"] [unique_id "apK9JCJcY4fy7tP-rU35rgAAAok"]
[Sat Aug 29 05:06:12.172937 2026] [security2:error] [pid 1018003:tid 1018270] [client 103.171.189.88:53831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9JDAh5Y1i2tUxg4HwCwAABi4"]
[Sat Aug 29 05:06:12.173042 2026] [security2:error] [pid 1018003:tid 1018270] [client 103.171.189.88:53831] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9JDAh5Y1i2tUxg4HwCwAABi4"]
[Sat Aug 29 05:06:12.176919 2026] [security2:error] [pid 1018003:tid 1018275] [client 158.158.54.35:22295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/aa.php"] [unique_id "apK9JDAh5Y1i2tUxg4HwDAAABjM"]
[Sat Aug 29 05:06:12.182815 2026] [security2:error] [pid 1017536:tid 1017760] [client 4.205.62.107:53313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/7.php"] [unique_id "apK9JCJcY4fy7tP-rU35sAAAAnI"]
[Sat Aug 29 05:06:12.213167 2026] [security2:error] [pid 1018003:tid 1018231] [client 20.104.104.62:48464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/uuu.php"] [unique_id "apK9JDAh5Y1i2tUxg4HwDQAABgc"]
[Sat Aug 29 05:06:12.216943 2026] [security2:error] [pid 1018003:tid 1018206] [client 52.139.37.240:12516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/an.php"] [unique_id "apK9JDAh5Y1i2tUxg4HwDgAABe8"]
[Sat Aug 29 05:06:12.217337 2026] [security2:error] [pid 1018003:tid 1018165] [client 20.104.104.62:25658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "meterphoneusa.horseweblog.com"] [uri "/wp-content/plugins/plugin/index.php"] [unique_id "apK9JDAh5Y1i2tUxg4HwDwAABcY"]
[Sat Aug 29 05:06:12.218764 2026] [security2:error] [pid 1017536:tid 1017680] [client 20.197.61.180:17015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-content/about.php"] [unique_id "apK9JCJcY4fy7tP-rU35sQAAAiI"]
[Sat Aug 29 05:06:12.225144 2026] [security2:error] [pid 1018003:tid 1018205] [client 20.220.204.93:64267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/shlo.php"] [unique_id "apK9JDAh5Y1i2tUxg4HwEQAABe4"]
[Sat Aug 29 05:06:12.227129 2026] [security2:error] [pid 1017536:tid 1017712] [client 20.151.200.44:46572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/waf.php"] [unique_id "apK9JCJcY4fy7tP-rU35sgAAAkI"]
[Sat Aug 29 05:06:12.235752 2026] [security2:error] [pid 1017536:tid 1017776] [client 40.83.93.50:22245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-content/admin-header.php"] [unique_id "apK9JCJcY4fy7tP-rU35swAAAoI"]
[Sat Aug 29 05:06:12.236150 2026] [security2:error] [pid 1017536:tid 1017724] [client 20.48.250.41:65101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK9JCJcY4fy7tP-rU35tAAAAk4"]
[Sat Aug 29 05:06:12.238678 2026] [security2:error] [pid 1017536:tid 1017747] [client 20.52.41.200:1780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/403.php"] [unique_id "apK9JCJcY4fy7tP-rU35tQAAAmU"]
[Sat Aug 29 05:06:12.248335 2026] [security2:error] [pid 1018003:tid 1018277] [client 20.48.251.3:61213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/fff.php"] [unique_id "apK9JDAh5Y1i2tUxg4HwEwAABjU"]
[Sat Aug 29 05:06:12.251541 2026] [security2:error] [pid 1017536:tid 1017688] [client 20.104.104.62:36957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/tanjiro.php"] [unique_id "apK9JCJcY4fy7tP-rU35uAAAAio"]
[Sat Aug 29 05:06:12.277749 2026] [security2:error] [pid 1018003:tid 1018190] [client 66.248.203.2:54444] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cheerfulmonk.com"] [uri "/2017/04/01/the-universe-is-speaking/"] [unique_id "apK9JDAh5Y1i2tUxg4HwFQAABd8"]
[Sat Aug 29 05:06:12.284102 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.63.81.20:56951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/wp-admin/css/colors/coffee/mari.php"] [unique_id "apK9JDAh5Y1i2tUxg4HwFgAABcI"]
[Sat Aug 29 05:06:12.287795 2026] [security2:error] [pid 1017536:tid 1017678] [client 20.104.104.62:56354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/hack.php"] [unique_id "apK9JCJcY4fy7tP-rU35ugAAAiA"]
[Sat Aug 29 05:06:12.294724 2026] [security2:error] [pid 1017536:tid 1017722] [client 158.23.184.117:1058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/update/da222.php"] [unique_id "apK9JCJcY4fy7tP-rU35uwAAAkw"]
[Sat Aug 29 05:06:12.295098 2026] [security2:error] [pid 1018003:tid 1018230] [client 20.151.200.44:64939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/7h.php"] [unique_id "apK9JDAh5Y1i2tUxg4HwFwAABgY"]
[Sat Aug 29 05:06:12.296998 2026] [security2:error] [pid 1017536:tid 1017789] [client 158.23.147.79:26547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9JCJcY4fy7tP-rU35vAAAAo8"]
[Sat Aug 29 05:06:12.353605 2026] [security2:error] [pid 1017536:tid 1017673] [client 20.104.104.62:48680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/private.php"] [unique_id "apK9JCJcY4fy7tP-rU35vQAAAhs"]
[Sat Aug 29 05:06:12.353916 2026] [security2:error] [pid 1018003:tid 1018195] [client 149.34.210.141:21996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9JDAh5Y1i2tUxg4HwGAAABeQ"]
[Sat Aug 29 05:06:12.353991 2026] [security2:error] [pid 1018003:tid 1018195] [client 149.34.210.141:21996] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9JDAh5Y1i2tUxg4HwGAAABeQ"]
[Sat Aug 29 05:06:12.358904 2026] [security2:error] [pid 1017536:tid 1017764] [client 20.151.200.44:46602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/bnnof6.php"] [unique_id "apK9JCJcY4fy7tP-rU35vgAAAnY"]
[Sat Aug 29 05:06:12.378230 2026] [security2:error] [pid 1017536:tid 1017693] [client 20.48.251.3:61691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/autogooey.php"] [unique_id "apK9JCJcY4fy7tP-rU35vwAAAi8"]
[Sat Aug 29 05:06:12.389956 2026] [security2:error] [pid 1017536:tid 1017780] [client 168.107.94.195:57118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9JCJcY4fy7tP-rU35wAAAAoY"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:12.391182 2026] [security2:error] [pid 1018003:tid 1018236] [client 138.199.19.170:39510] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.sankomold.com"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "apK9JDAh5Y1i2tUxg4HwGQAABgw"]
[Sat Aug 29 05:06:12.395722 2026] [security2:error] [pid 1018003:tid 1018167] [client 20.104.104.62:64713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/.well-known/.dha.php"] [unique_id "apK9JDAh5Y1i2tUxg4HwGgAABcg"]
[Sat Aug 29 05:06:12.395867 2026] [security2:error] [pid 1018003:tid 1018162] [client 158.23.147.79:48270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-content/admin.php"] [unique_id "apK9JDAh5Y1i2tUxg4HwGwAABcM"]
[Sat Aug 29 05:06:12.405566 2026] [security2:error] [pid 1018003:tid 1018163] [client 52.139.37.240:12436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/asw.php"] [unique_id "apK9JDAh5Y1i2tUxg4HwHAAABcQ"]
[Sat Aug 29 05:06:12.411817 2026] [security2:error] [pid 1017536:tid 1017792] [client 158.23.147.79:35799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/goods.php"] [unique_id "apK9JCJcY4fy7tP-rU35wQAAApI"]
[Sat Aug 29 05:06:12.412919 2026] [security2:error] [pid 1017536:tid 1017741] [client 20.104.104.62:25812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "meterphoneusa.horseweblog.com"] [uri "/wp-content/uploads/index.php/wp-includes/Text/"] [unique_id "apK9JCJcY4fy7tP-rU35wgAAAl8"]
[Sat Aug 29 05:06:12.415602 2026] [security2:error] [pid 1017536:tid 1017704] [client 20.63.81.20:60489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/wp-includes/images/crystal/option.php"] [unique_id "apK9JCJcY4fy7tP-rU35wwAAAjo"]
[Sat Aug 29 05:06:12.432820 2026] [security2:error] [pid 1018003:tid 1018182] [client 68.155.159.216:18308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/.well-known/index.php"] [unique_id "apK9JDAh5Y1i2tUxg4HwHQAABdc"]
[Sat Aug 29 05:06:12.437571 2026] [security2:error] [pid 1018003:tid 1018221] [client 20.48.250.41:64331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/06.php"] [unique_id "apK9JDAh5Y1i2tUxg4HwHgAABf4"]
[Sat Aug 29 05:06:12.437803 2026] [security2:error] [pid 1017536:tid 1017691] [client 158.23.147.79:62619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/themes.php"] [unique_id "apK9JCJcY4fy7tP-rU35xAAAAi0"]
[Sat Aug 29 05:06:12.438023 2026] [security2:error] [pid 1017536:tid 1017765] [client 4.205.62.107:22368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/cxc.php"] [unique_id "apK9JCJcY4fy7tP-rU35xQAAAnc"]
[Sat Aug 29 05:06:12.438315 2026] [security2:error] [pid 1017536:tid 1017703] [client 158.23.184.117:1035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/xmr.php"] [unique_id "apK9JCJcY4fy7tP-rU35xgAAAjk"]
[Sat Aug 29 05:06:12.475815 2026] [security2:error] [pid 1017536:tid 1017777] [client 158.23.147.79:30569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-admin/admin.php"] [unique_id "apK9JCJcY4fy7tP-rU35xwAAAoM"]
[Sat Aug 29 05:06:12.483973 2026] [security2:error] [pid 1017536:tid 1017707] [client 20.196.209.81:5211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-admin/wp-signup.php"] [unique_id "apK9JCJcY4fy7tP-rU35yAAAAj0"]
[Sat Aug 29 05:06:12.502638 2026] [security2:error] [pid 1017536:tid 1017746] [client 20.48.250.41:62502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/grsiuk.php"] [unique_id "apK9JCJcY4fy7tP-rU35ygAAAmQ"]
[Sat Aug 29 05:06:12.508672 2026] [security2:error] [pid 1017536:tid 1017737] [client 20.48.251.3:61072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/sdsa.php"] [unique_id "apK9JCJcY4fy7tP-rU35ywAAAls"]
[Sat Aug 29 05:06:12.524516 2026] [security2:error] [pid 1017536:tid 1017773] [client 61.9.8.35:7285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK9JCJcY4fy7tP-rU35yQAAAn8"]
[Sat Aug 29 05:06:12.524660 2026] [security2:error] [pid 1017536:tid 1017773] [client 61.9.8.35:7285] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK9JCJcY4fy7tP-rU35yQAAAn8"]
[Sat Aug 29 05:06:12.528458 2026] [security2:error] [pid 1017536:tid 1017723] [client 4.205.62.107:56034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/config_dev.php"] [unique_id "apK9JCJcY4fy7tP-rU35zAAAAk0"]
[Sat Aug 29 05:06:12.543748 2026] [security2:error] [pid 1018003:tid 1018200] [client 20.220.204.93:64938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/asax.php"] [unique_id "apK9JDAh5Y1i2tUxg4HwHwAABek"]
[Sat Aug 29 05:06:12.548067 2026] [security2:error] [pid 1018003:tid 1018150] [client 68.155.159.216:51567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK9JDAh5Y1i2tUxg4HwIAAABbc"]
[Sat Aug 29 05:06:12.553910 2026] [security2:error] [pid 1018003:tid 1018207] [client 40.83.93.50:9556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/ggfi.php"] [unique_id "apK9JDAh5Y1i2tUxg4HwIQAABfA"]
[Sat Aug 29 05:06:12.554111 2026] [security2:error] [pid 1018003:tid 1018243] [client 20.63.81.20:60467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/wp-includes/pomo/xxx.php"] [unique_id "apK9JDAh5Y1i2tUxg4HwIgAABhM"]
[Sat Aug 29 05:06:12.565139 2026] [security2:error] [pid 1017536:tid 1017770] [client 20.196.209.81:16230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/hehe.php"] [unique_id "apK9JCJcY4fy7tP-rU35zQAAAnw"]
[Sat Aug 29 05:06:12.565683 2026] [security2:error] [pid 1018003:tid 1018252] [client 158.23.147.79:32738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/dropdown.php"] [unique_id "apK9JDAh5Y1i2tUxg4HwIwAABhw"]
[Sat Aug 29 05:06:12.577011 2026] [security2:error] [pid 1018003:tid 1018180] [client 158.23.147.79:25584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/lv.php"] [unique_id "apK9JDAh5Y1i2tUxg4HwJAAABdU"]
[Sat Aug 29 05:06:12.584120 2026] [security2:error] [pid 1018003:tid 1018173] [client 68.155.159.216:24528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK9JDAh5Y1i2tUxg4HwJQAABc4"]
[Sat Aug 29 05:06:12.586425 2026] [security2:error] [pid 1017536:tid 1017761] [client 158.23.184.117:1046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK9JCJcY4fy7tP-rU35zgAAAnM"]
[Sat Aug 29 05:06:12.603869 2026] [security2:error] [pid 1018003:tid 1018157] [client 20.48.250.41:65031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/class.php"] [unique_id "apK9JDAh5Y1i2tUxg4HwJgAABb4"]
[Sat Aug 29 05:06:12.611008 2026] [security2:error] [pid 1018003:tid 1018233] [client 52.139.37.240:12431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/item.php"] [unique_id "apK9JDAh5Y1i2tUxg4HwJwAABgk"]
[Sat Aug 29 05:06:12.621200 2026] [security2:error] [pid 1017536:tid 1017684] [client 158.158.54.35:8952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/c.php"] [unique_id "apK9JCJcY4fy7tP-rU35zwAAAiY"]
[Sat Aug 29 05:06:12.624991 2026] [security2:error] [pid 1018003:tid 1018171] [client 20.48.251.3:14065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/config/laravolt/css/index.php"] [unique_id "apK9JDAh5Y1i2tUxg4HwKAAABcw"]
[Sat Aug 29 05:06:12.640412 2026] [security2:error] [pid 1017536:tid 1017775] [client 20.48.251.3:62099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/sale.php"] [unique_id "apK9JCJcY4fy7tP-rU350AAAAoE"]
[Sat Aug 29 05:06:12.658918 2026] [security2:error] [pid 1018003:tid 1018251] [client 20.48.250.41:62568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/wp-scr1pts.php"] [unique_id "apK9JDAh5Y1i2tUxg4HwKQAABhs"]
[Sat Aug 29 05:06:12.683835 2026] [security2:error] [pid 1017536:tid 1017760] [client 20.63.81.20:60462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/650.php"] [unique_id "apK9JCJcY4fy7tP-rU350QAAAnI"]
[Sat Aug 29 05:06:12.693526 2026] [security2:error] [pid 1017536:tid 1017711] [client 20.52.41.200:1218] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpsl-ggc.org"] [uri "/1.php"] [unique_id "apK9JCJcY4fy7tP-rU350gAAAkE"]
[Sat Aug 29 05:06:12.693609 2026] [security2:error] [pid 1017536:tid 1017711] [client 20.52.41.200:1218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/1.php"] [unique_id "apK9JCJcY4fy7tP-rU350gAAAkE"]
[Sat Aug 29 05:06:12.702442 2026] [security2:error] [pid 1018003:tid 1018179] [client 20.220.204.93:64909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/fetch.php"] [unique_id "apK9JDAh5Y1i2tUxg4HwLwAABdQ"]
[Sat Aug 29 05:06:12.732162 2026] [security2:error] [pid 1018003:tid 1018240] [client 138.199.19.170:39520] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.sankomold.com"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "apK9JDAh5Y1i2tUxg4HwMAAABhA"]
[Sat Aug 29 05:06:12.736472 2026] [security2:error] [pid 1018003:tid 1018170] [client 158.23.184.117:1413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/wp-act.php"] [unique_id "apK9JDAh5Y1i2tUxg4HwMQAABcs"]
[Sat Aug 29 05:06:12.744347 2026] [security2:error] [pid 1018003:tid 1018203] [client 40.83.93.50:12479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-content/admin.php"] [unique_id "apK9JDAh5Y1i2tUxg4HwMgAABew"]
[Sat Aug 29 05:06:12.746472 2026] [security2:error] [pid 1017536:tid 1017751] [client 158.23.147.79:50139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK9JCJcY4fy7tP-rU351gAAAmk"]
[Sat Aug 29 05:06:12.769321 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.48.251.3:61232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/wp-class.php"] [unique_id "apK9JCJcY4fy7tP-rU352QAAAnk"]
[Sat Aug 29 05:06:12.771810 2026] [security2:error] [pid 1017536:tid 1017719] [client 168.107.94.195:57453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9JCJcY4fy7tP-rU352gAAAkk"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:12.782419 2026] [security2:error] [pid 1017536:tid 1017742] [client 20.48.250.41:64325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/8.php"] [unique_id "apK9JCJcY4fy7tP-rU352wAAAmA"]
[Sat Aug 29 05:06:12.809972 2026] [security2:error] [pid 1017536:tid 1017733] [client 20.63.81.20:60420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/nakrip.php"] [unique_id "apK9JCJcY4fy7tP-rU353AAAAlc"]
[Sat Aug 29 05:06:12.815596 2026] [security2:error] [pid 1017536:tid 1017748] [client 52.139.37.240:12532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/jga.php"] [unique_id "apK9JCJcY4fy7tP-rU353QAAAmY"]
[Sat Aug 29 05:06:12.854624 2026] [security2:error] [pid 1017536:tid 1017741] [client 20.220.204.93:64974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/vx.php"] [unique_id "apK9JCJcY4fy7tP-rU353gAAAl8"]
[Sat Aug 29 05:06:12.863927 2026] [security2:error] [pid 1017536:tid 1017704] [client 68.155.159.216:51479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/about.php"] [unique_id "apK9JCJcY4fy7tP-rU353wAAAjo"]
[Sat Aug 29 05:06:12.873401 2026] [security2:error] [pid 1018003:tid 1018231] [client 68.155.159.216:14315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK9JDAh5Y1i2tUxg4HwMwAABgc"]
[Sat Aug 29 05:06:12.879996 2026] [security2:error] [pid 1017536:tid 1017743] [client 20.196.209.81:5199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-blog-header.php"] [unique_id "apK9JCJcY4fy7tP-rU354QAAAmE"]
[Sat Aug 29 05:06:12.881520 2026] [security2:error] [pid 1017536:tid 1017790] [client 158.23.184.117:1026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/fff.php"] [unique_id "apK9JCJcY4fy7tP-rU354gAAApA"]
[Sat Aug 29 05:06:12.882563 2026] [security2:error] [pid 1017536:tid 1017703] [client 68.155.159.216:9217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/file5.php"] [unique_id "apK9JCJcY4fy7tP-rU354wAAAjk"]
[Sat Aug 29 05:06:12.898103 2026] [security2:error] [pid 1017536:tid 1017754] [client 20.48.251.3:61210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/database.php"] [unique_id "apK9JCJcY4fy7tP-rU355AAAAmw"]
[Sat Aug 29 05:06:12.919918 2026] [security2:error] [pid 1018003:tid 1018196] [client 68.155.159.216:50210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK9JDAh5Y1i2tUxg4HwNQAABeU"]
[Sat Aug 29 05:06:12.935776 2026] [security2:error] [pid 1017536:tid 1017685] [client 4.205.62.107:64998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aquaink.net"] [uri "/wp-act.php"] [unique_id "apK9JCJcY4fy7tP-rU355QAAAic"]
[Sat Aug 29 05:06:12.939118 2026] [security2:error] [pid 1017536:tid 1017716] [client 20.63.81.20:60504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/wp-includes/interactivity-api/flower.php"] [unique_id "apK9JCJcY4fy7tP-rU355gAAAkY"]
[Sat Aug 29 05:06:12.945849 2026] [security2:error] [pid 1017536:tid 1017695] [client 20.197.61.180:16993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-content/admin-header.php"] [unique_id "apK9JCJcY4fy7tP-rU355wAAAjE"]
[Sat Aug 29 05:06:12.968886 2026] [security2:error] [pid 1018003:tid 1018248] [client 20.196.209.81:11571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/wp-admin/class-db.php"] [unique_id "apK9JDAh5Y1i2tUxg4HwNgAABhg"]
[Sat Aug 29 05:06:13.010437 2026] [security2:error] [pid 1017536:tid 1017753] [client 20.220.204.93:64318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/global.php"] [unique_id "apK9JSJcY4fy7tP-rU356QAAAms"]
[Sat Aug 29 05:06:13.014791 2026] [security2:error] [pid 1017536:tid 1017746] [client 52.139.37.240:12500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/mac.php"] [unique_id "apK9JSJcY4fy7tP-rU356gAAAmQ"]
[Sat Aug 29 05:06:13.026122 2026] [security2:error] [pid 1017536:tid 1017723] [client 158.23.184.117:1079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/.tmb/dropdown.php"] [unique_id "apK9JSJcY4fy7tP-rU356wAAAk0"]
[Sat Aug 29 05:06:13.028035 2026] [security2:error] [pid 1017536:tid 1017706] [client 20.48.251.3:61068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/atex1.php"] [unique_id "apK9JSJcY4fy7tP-rU357AAAAjw"]
[Sat Aug 29 05:06:13.062676 2026] [security2:error] [pid 1017536:tid 1017705] [client 138.199.19.170:39528] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.sankomold.com"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "apK9JSJcY4fy7tP-rU357gAAAjs"]
[Sat Aug 29 05:06:13.062774 2026] [security2:error] [pid 1017536:tid 1017709] [client 40.83.93.50:16634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/alfa-rex.php"] [unique_id "apK9JSJcY4fy7tP-rU357QAAAj8"]
[Sat Aug 29 05:06:13.066229 2026] [security2:error] [pid 1018003:tid 1018269] [client 158.158.54.35:7908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/f.php"] [unique_id "apK9JTAh5Y1i2tUxg4HwNwAABi0"]
[Sat Aug 29 05:06:13.070442 2026] [security2:error] [pid 1017536:tid 1017736] [client 20.63.81.20:56858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/xcc.php"] [unique_id "apK9JSJcY4fy7tP-rU357wAAAlo"]
[Sat Aug 29 05:06:13.072991 2026] [security2:error] [pid 1017536:tid 1017725] [client 158.23.147.79:30687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK9JSJcY4fy7tP-rU358AAAAk8"]
[Sat Aug 29 05:06:13.152125 2026] [cgid:error] [pid 1018003:tid 1018166] [client 20.52.41.200:1234] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/cpslggc/404.shtml
[Sat Aug 29 05:06:13.155443 2026] [security2:error] [pid 1017536:tid 1017757] [client 20.48.251.3:61193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/aws_sdk_settings.php"] [unique_id "apK9JSJcY4fy7tP-rU358QAAAm8"]
[Sat Aug 29 05:06:13.170017 2026] [security2:error] [pid 1017536:tid 1017708] [client 158.23.184.117:1085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/robots.php"] [unique_id "apK9JSJcY4fy7tP-rU358gAAAj4"]
[Sat Aug 29 05:06:13.175474 2026] [security2:error] [pid 1018003:tid 1018195] [client 168.107.94.195:57921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9JTAh5Y1i2tUxg4HwOQAABeQ"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:13.184052 2026] [security2:error] [pid 1017536:tid 1017696] [client 4.205.62.107:21825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/gjm.php"] [unique_id "apK9JSJcY4fy7tP-rU358wAAAjI"]
[Sat Aug 29 05:06:13.204412 2026] [security2:error] [pid 1018003:tid 1018255] [client 20.63.81.20:56919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/wp-includes/Text/Diff/Engine/aaa.php"] [unique_id "apK9JTAh5Y1i2tUxg4HwOgAABh8"]
[Sat Aug 29 05:06:13.217477 2026] [security2:error] [pid 1017536:tid 1017769] [client 40.83.93.50:22253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-content/autoload_classmap.php"] [unique_id "apK9JSJcY4fy7tP-rU359AAAAns"]
[Sat Aug 29 05:06:13.218629 2026] [security2:error] [pid 1017536:tid 1017776] [client 20.220.204.93:64912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/fs.php"] [unique_id "apK9JSJcY4fy7tP-rU359QAAAoI"]
[Sat Aug 29 05:06:13.218932 2026] [security2:error] [pid 1017536:tid 1017711] [client 52.139.37.240:12417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK9JSJcY4fy7tP-rU359gAAAkE"]
[Sat Aug 29 05:06:13.260977 2026] [security2:error] [pid 1018003:tid 1018167] [client 4.205.62.107:22260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/packed.php"] [unique_id "apK9JTAh5Y1i2tUxg4HwOwAABcg"]
[Sat Aug 29 05:06:13.274973 2026] [security2:error] [pid 1017536:tid 1017784] [client 20.196.209.81:5247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-blogs.php"] [unique_id "apK9JSJcY4fy7tP-rU35-gAAAoo"]
[Sat Aug 29 05:06:13.281342 2026] [security2:error] [pid 1018003:tid 1018163] [client 4.205.62.107:65500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/ms-edit.php"] [unique_id "apK9JTAh5Y1i2tUxg4HwPAAABcQ"]
[Sat Aug 29 05:06:13.284436 2026] [security2:error] [pid 1017536:tid 1017742] [client 20.48.251.3:61647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/setup-config.php"] [unique_id "apK9JSJcY4fy7tP-rU35-wAAAmA"]
[Sat Aug 29 05:06:13.302146 2026] [security2:error] [pid 1018003:tid 1018182] [client 20.52.41.200:1234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/s.php"] [unique_id "apK9JTAh5Y1i2tUxg4HwPQAABdc"]
[Sat Aug 29 05:06:13.313382 2026] [security2:error] [pid 1017536:tid 1017731] [client 158.23.184.117:1029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/.well-known/install.php"] [unique_id "apK9JSJcY4fy7tP-rU35_QAAAlU"]
[Sat Aug 29 05:06:13.320814 2026] [security2:error] [pid 1017536:tid 1017788] [client 65.111.27.152:45969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.27.111.65.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK9JSJcY4fy7tP-rU35_AAAAo4"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:06:13.335666 2026] [security2:error] [pid 1017536:tid 1017732] [client 4.205.62.107:53397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "apK9JSJcY4fy7tP-rU36AAAAAlY"]
[Sat Aug 29 05:06:13.345320 2026] [security2:error] [pid 1017536:tid 1017717] [client 20.63.81.20:60419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/wp-includes/style-engine/gecko-new.php"] [unique_id "apK9JSJcY4fy7tP-rU36AQAAAkc"]
[Sat Aug 29 05:06:13.360373 2026] [security2:error] [pid 1017536:tid 1017748] [client 20.48.251.3:14062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/87.php"] [unique_id "apK9JSJcY4fy7tP-rU36BAAAAmY"]
[Sat Aug 29 05:06:13.363629 2026] [security2:error] [pid 1017536:tid 1017751] [client 20.196.209.81:4450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/wp-contentt.php"] [unique_id "apK9JSJcY4fy7tP-rU36BQAAAmk"]
[Sat Aug 29 05:06:13.401341 2026] [security2:error] [pid 1017536:tid 1017741] [client 138.199.19.170:39544] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.sankomold.com"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "apK9JSJcY4fy7tP-rU36BgAAAl8"]
[Sat Aug 29 05:06:13.414691 2026] [security2:error] [pid 1017536:tid 1017781] [client 20.48.251.3:61203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/wp-admin/sc.php"] [unique_id "apK9JSJcY4fy7tP-rU36BwAAAoc"]
[Sat Aug 29 05:06:13.420317 2026] [security2:error] [pid 1017536:tid 1017720] [client 52.139.37.240:12522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK9JSJcY4fy7tP-rU36CAAAAko"]
[Sat Aug 29 05:06:13.473965 2026] [security2:error] [pid 1017536:tid 1017754] [client 20.63.81.20:56897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/wp-settings.php"] [unique_id "apK9JSJcY4fy7tP-rU36CgAAAmw"]
[Sat Aug 29 05:06:13.477709 2026] [security2:error] [pid 1017536:tid 1017710] [client 20.220.204.93:64965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/ioxi.php"] [unique_id "apK9JSJcY4fy7tP-rU36DAAAAkA"]
[Sat Aug 29 05:06:13.504702 2026] [security2:error] [pid 1017536:tid 1017737] [client 158.23.184.117:1418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/wp-admin/about.php"] [unique_id "apK9JSJcY4fy7tP-rU36DgAAAls"]
[Sat Aug 29 05:06:13.522732 2026] [security2:error] [pid 1017536:tid 1017780] [client 158.158.54.35:16029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/av.php"] [unique_id "apK9JSJcY4fy7tP-rU36EAAAAoY"]
[Sat Aug 29 05:06:13.533572 2026] [security2:error] [pid 1017536:tid 1017687] [client 158.23.147.79:35804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK9JSJcY4fy7tP-rU36EQAAAik"]
[Sat Aug 29 05:06:13.542581 2026] [security2:error] [pid 1017536:tid 1017723] [client 20.48.251.3:61685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/debug.php"] [unique_id "apK9JSJcY4fy7tP-rU36EgAAAk0"]
[Sat Aug 29 05:06:13.544922 2026] [security2:error] [pid 1017536:tid 1017706] [client 68.155.159.216:18277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-content/themes/too.php"] [unique_id "apK9JSJcY4fy7tP-rU36EwAAAjw"]
[Sat Aug 29 05:06:13.549247 2026] [security2:error] [pid 1018003:tid 1018225] [client 40.83.93.50:7747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/cookie.php"] [unique_id "apK9JTAh5Y1i2tUxg4HwQQAABgI"]
[Sat Aug 29 05:06:13.556739 2026] [security2:error] [pid 1017536:tid 1017668] [client 158.23.147.79:62978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-mail.php"] [unique_id "apK9JSJcY4fy7tP-rU36FQAAAhY"]
[Sat Aug 29 05:06:13.566828 2026] [security2:error] [pid 1017536:tid 1017747] [client 168.107.94.195:58364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9JSJcY4fy7tP-rU36FgAAAmU"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:13.573981 2026] [security2:error] [pid 1018003:tid 1018243] [client 158.23.184.117:1064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/update/da222.php"] [unique_id "apK9JTAh5Y1i2tUxg4HwRAAABhM"]
[Sat Aug 29 05:06:13.580126 2026] [security2:error] [pid 1017536:tid 1017729] [client 4.205.62.107:22332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/oiko6u.php"] [unique_id "apK9JSJcY4fy7tP-rU36FwAAAlM"]
[Sat Aug 29 05:06:13.580292 2026] [security2:error] [pid 1018003:tid 1018252] [client 158.23.147.79:30556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/classwithtostring.php"] [unique_id "apK9JTAh5Y1i2tUxg4HwRQAABhw"]
[Sat Aug 29 05:06:13.612312 2026] [security2:error] [pid 1017536:tid 1017783] [client 20.63.81.20:60416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/wp-signup.php"] [unique_id "apK9JSJcY4fy7tP-rU36GAAAAok"]
[Sat Aug 29 05:06:13.616901 2026] [security2:error] [pid 1017536:tid 1017761] [client 52.139.37.240:12872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/zafir1.php"] [unique_id "apK9JSJcY4fy7tP-rU36GQAAAnM"]
[Sat Aug 29 05:06:13.648991 2026] [security2:error] [pid 1017536:tid 1017698] [client 158.23.184.117:1087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/wp-content/backup.php"] [unique_id "apK9JSJcY4fy7tP-rU36GgAAAjQ"]
[Sat Aug 29 05:06:13.663237 2026] [security2:error] [pid 1017536:tid 1017757] [client 158.23.147.79:32653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/.well-known/index.php"] [unique_id "apK9JSJcY4fy7tP-rU36GwAAAm8"]
[Sat Aug 29 05:06:13.670303 2026] [security2:error] [pid 1017536:tid 1017696] [client 20.220.204.93:64335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/bootstrap.php"] [unique_id "apK9JSJcY4fy7tP-rU36HAAAAjI"]
[Sat Aug 29 05:06:13.670336 2026] [security2:error] [pid 1017536:tid 1017770] [client 20.196.209.81:5507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-comments-post.php"] [unique_id "apK9JSJcY4fy7tP-rU36HQAAAnw"]
[Sat Aug 29 05:06:13.671032 2026] [security2:error] [pid 1017536:tid 1017672] [client 4.205.62.107:56031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/aws_credentials.php"] [unique_id "apK9JSJcY4fy7tP-rU36HgAAAho"]
[Sat Aug 29 05:06:13.671369 2026] [security2:error] [pid 1017536:tid 1017680] [client 20.48.251.3:61095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/nzv.php"] [unique_id "apK9JSJcY4fy7tP-rU36HwAAAiI"]
[Sat Aug 29 05:06:13.671845 2026] [security2:error] [pid 1017536:tid 1017743] [client 20.197.61.180:13032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-content/admin.php"] [unique_id "apK9JSJcY4fy7tP-rU36IAAAAmE"]
[Sat Aug 29 05:06:13.680050 2026] [security2:error] [pid 1017536:tid 1017776] [client 20.48.251.3:13995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/plss3.php"] [unique_id "apK9JSJcY4fy7tP-rU36IQAAAoI"]
[Sat Aug 29 05:06:13.683471 2026] [security2:error] [pid 1017536:tid 1017688] [client 158.23.147.79:25545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9JSJcY4fy7tP-rU36IgAAAio"]
[Sat Aug 29 05:06:13.687678 2026] [security2:error] [pid 1017536:tid 1017694] [client 68.155.159.216:24514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/asd.php"] [unique_id "apK9JSJcY4fy7tP-rU36IwAAAjA"]
[Sat Aug 29 05:06:13.703076 2026] [security2:error] [pid 1017536:tid 1017746] [client 40.83.93.50:12440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-content/cache/min/1/wp-content/admin.php"] [unique_id "apK9JSJcY4fy7tP-rU36JAAAAmQ"]
[Sat Aug 29 05:06:13.721562 2026] [security2:error] [pid 1017536:tid 1017712] [client 158.23.184.117:1080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/xmr.php"] [unique_id "apK9JSJcY4fy7tP-rU36JQAAAkI"]
[Sat Aug 29 05:06:13.740274 2026] [security2:error] [pid 1018003:tid 1018226] [client 192.145.125.70:52260] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "nicolaandstevenlochrane.strangeworx.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "apK9JTAh5Y1i2tUxg4HwSAAABgM"]
[Sat Aug 29 05:06:13.742220 2026] [security2:error] [pid 1017536:tid 1017785] [client 20.63.81.20:56917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/wp-conffg.php"] [unique_id "apK9JSJcY4fy7tP-rU36JgAAAos"]
[Sat Aug 29 05:06:13.746734 2026] [security2:error] [pid 1017536:tid 1017689] [client 138.199.19.170:39546] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.sankomold.com"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "apK9JSJcY4fy7tP-rU36JwAAAis"]
[Sat Aug 29 05:06:13.757995 2026] [security2:error] [pid 1017536:tid 1017686] [client 20.52.41.200:1162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/test1.php"] [unique_id "apK9JSJcY4fy7tP-rU36KAAAAig"]
[Sat Aug 29 05:06:13.794647 2026] [security2:error] [pid 1017536:tid 1017673] [client 158.23.184.117:1068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/.well-known/aa.php"] [unique_id "apK9JSJcY4fy7tP-rU36KwAAAhs"]
[Sat Aug 29 05:06:13.799519 2026] [security2:error] [pid 1017536:tid 1017704] [client 20.48.251.3:3328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/66.php"] [unique_id "apK9JSJcY4fy7tP-rU36LAAAAjo"]
[Sat Aug 29 05:06:13.806863 2026] [security2:error] [pid 1017536:tid 1017708] [client 20.196.209.81:16202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/theme.php"] [unique_id "apK9JSJcY4fy7tP-rU36LQAAAj4"]
[Sat Aug 29 05:06:13.813170 2026] [security2:error] [pid 1017536:tid 1017691] [client 20.48.250.41:59391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/num.php"] [unique_id "apK9JSJcY4fy7tP-rU36LgAAAi0"]
[Sat Aug 29 05:06:13.814783 2026] [security2:error] [pid 1017536:tid 1017764] [client 52.139.37.240:12870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/abc.php"] [unique_id "apK9JSJcY4fy7tP-rU36LwAAAnY"]
[Sat Aug 29 05:06:13.861789 2026] [security2:error] [pid 1018003:tid 1018153] [client 158.23.147.79:49817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/packed.php"] [unique_id "apK9JTAh5Y1i2tUxg4HwSQAABbo"]
[Sat Aug 29 05:06:13.866599 2026] [security2:error] [pid 1017536:tid 1017740] [client 158.23.184.117:1043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK9JSJcY4fy7tP-rU36MQAAAl4"]
[Sat Aug 29 05:06:13.877215 2026] [security2:error] [pid 1018003:tid 1018171] [client 20.63.81.20:56922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/wp-validate.php"] [unique_id "apK9JTAh5Y1i2tUxg4HwSgAABcw"]
[Sat Aug 29 05:06:13.886132 2026] [security2:error] [pid 1017536:tid 1017670] [client 20.48.251.3:14289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/aws.php"] [unique_id "apK9JSJcY4fy7tP-rU36NAAAAhg"]
[Sat Aug 29 05:06:13.900999 2026] [security2:error] [pid 1017536:tid 1017734] [client 209.50.170.5:28169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 5.170.50.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK9JSJcY4fy7tP-rU36MgAAAlg"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:06:13.918396 2026] [security2:error] [pid 1018003:tid 1018257] [client 20.48.250.41:65027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/0x0x.php"] [unique_id "apK9JTAh5Y1i2tUxg4HwSwAABiE"]
[Sat Aug 29 05:06:13.931617 2026] [security2:error] [pid 1018003:tid 1018234] [client 20.48.251.3:61690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/admin.php"] [unique_id "apK9JTAh5Y1i2tUxg4HwTAAABgo"]
[Sat Aug 29 05:06:13.938462 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.220.204.93:64960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/export.php"] [unique_id "apK9JSJcY4fy7tP-rU36NQAAAnk"]
[Sat Aug 29 05:06:13.947353 2026] [security2:error] [pid 1017536:tid 1017723] [client 168.107.94.195:58668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9JSJcY4fy7tP-rU36NgAAAk0"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:13.956843 2026] [security2:error] [pid 1017536:tid 1017749] [client 158.158.54.35:16060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/file.php"] [unique_id "apK9JSJcY4fy7tP-rU36NwAAAmc"]
[Sat Aug 29 05:06:13.968581 2026] [security2:error] [pid 1017536:tid 1017721] [client 158.23.184.117:1467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "apK9JSJcY4fy7tP-rU36OAAAAks"]
[Sat Aug 29 05:06:13.972333 2026] [security2:error] [pid 1017536:tid 1017668] [client 68.155.159.216:12176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-admin/index.php"] [unique_id "apK9JSJcY4fy7tP-rU36OQAAAhY"]
[Sat Aug 29 05:06:13.974809 2026] [security2:error] [pid 1017536:tid 1017725] [client 68.155.159.216:14248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK9JSJcY4fy7tP-rU36OgAAAk8"]
[Sat Aug 29 05:06:13.979473 2026] [security2:error] [pid 1017536:tid 1017747] [client 20.48.250.41:62543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/a4.php"] [unique_id "apK9JSJcY4fy7tP-rU36OwAAAmU"]
[Sat Aug 29 05:06:13.981108 2026] [security2:error] [pid 1017536:tid 1017729] [client 68.155.159.216:51210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK9JSJcY4fy7tP-rU36PAAAAlM"]
[Sat Aug 29 05:06:14.011485 2026] [security2:error] [pid 1017536:tid 1017687] [client 52.139.37.240:12902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/c1.php"] [unique_id "apK9JiJcY4fy7tP-rU36PwAAAik"]
[Sat Aug 29 05:06:14.012515 2026] [security2:error] [pid 1017536:tid 1017684] [client 20.63.81.20:60463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/700.php"] [unique_id "apK9JiJcY4fy7tP-rU36QAAAAiY"]
[Sat Aug 29 05:06:14.018210 2026] [security2:error] [pid 1017536:tid 1017736] [client 158.23.184.117:1372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/wp-act.php"] [unique_id "apK9JiJcY4fy7tP-rU36QQAAAlo"]
[Sat Aug 29 05:06:14.024921 2026] [security2:error] [pid 1017536:tid 1017775] [client 68.155.159.216:50317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/about.php"] [unique_id "apK9JiJcY4fy7tP-rU36QgAAAoE"]
[Sat Aug 29 05:06:14.047834 2026] [security2:error] [pid 1017536:tid 1017696] [client 158.23.147.79:54378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK9JiJcY4fy7tP-rU36QwAAAjI"]
[Sat Aug 29 05:06:14.061960 2026] [security2:error] [pid 1017536:tid 1017672] [client 20.48.251.3:61241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/png.php"] [unique_id "apK9JiJcY4fy7tP-rU36RAAAAho"]
[Sat Aug 29 05:06:14.065775 2026] [security2:error] [pid 1018003:tid 1018273] [client 20.196.209.81:5185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-config.php"] [unique_id "apK9JjAh5Y1i2tUxg4HwTgAABjE"]
[Sat Aug 29 05:06:14.068120 2026] [security2:error] [pid 1017536:tid 1017743] [client 20.48.250.41:65149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/166.php"] [unique_id "apK9JiJcY4fy7tP-rU36RQAAAmE"]
[Sat Aug 29 05:06:14.076272 2026] [security2:error] [pid 1017536:tid 1017711] [client 20.48.251.3:13980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/app.default.php"] [unique_id "apK9JiJcY4fy7tP-rU36RgAAAkE"]
[Sat Aug 29 05:06:14.099388 2026] [security2:error] [pid 1018003:tid 1018150] [client 111.235.68.106:1395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK9JjAh5Y1i2tUxg4HwUAAABbc"]
[Sat Aug 29 05:06:14.099501 2026] [security2:error] [pid 1018003:tid 1018150] [client 111.235.68.106:1395] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK9JjAh5Y1i2tUxg4HwUAAABbc"]
[Sat Aug 29 05:06:14.101617 2026] [security2:error] [pid 1018003:tid 1018189] [client 138.199.19.170:47900] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.sankomold.com"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "apK9JjAh5Y1i2tUxg4HwUQAABd4"]
[Sat Aug 29 05:06:14.102001 2026] [security2:error] [pid 1018003:tid 1018216] [client 40.83.93.50:9562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/NewFile.php"] [unique_id "apK9JjAh5Y1i2tUxg4HwUgAABfk"]
[Sat Aug 29 05:06:14.113064 2026] [security2:error] [pid 1018003:tid 1018240] [client 158.23.184.117:1431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/wp-content/plugins/alfa-rex.php"] [unique_id "apK9JjAh5Y1i2tUxg4HwUwAABhA"]
[Sat Aug 29 05:06:14.115192 2026] [security2:error] [pid 1017536:tid 1017742] [client 20.48.250.41:62522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/tfm.php"] [unique_id "apK9JiJcY4fy7tP-rU36RwAAAmA"]
[Sat Aug 29 05:06:14.134707 2026] [security2:error] [pid 1017536:tid 1017717] [client 20.220.204.93:63829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/gk.php"] [unique_id "apK9JiJcY4fy7tP-rU36SAAAAkc"]
[Sat Aug 29 05:06:14.143594 2026] [security2:error] [pid 1017536:tid 1017748] [client 20.63.81.20:56937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/c4.php"] [unique_id "apK9JiJcY4fy7tP-rU36SgAAAmY"]
[Sat Aug 29 05:06:14.150660 2026] [security2:error] [pid 1017536:tid 1017773] [client 103.162.125.59:53036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.125.162.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK9JiJcY4fy7tP-rU36SQAAAn8"]
[Sat Aug 29 05:06:14.150739 2026] [security2:error] [pid 1017536:tid 1017773] [client 103.162.125.59:53036] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK9JiJcY4fy7tP-rU36SQAAAn8"]
[Sat Aug 29 05:06:14.159686 2026] [security2:error] [pid 1018003:tid 1018170] [client 68.155.159.216:51541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/lock.php"] [unique_id "apK9JjAh5Y1i2tUxg4HwVAAABcs"]
[Sat Aug 29 05:06:14.161770 2026] [security2:error] [pid 1018003:tid 1018212] [client 158.23.184.117:1354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/fff.php"] [unique_id "apK9JjAh5Y1i2tUxg4HwVQAABfU"]
[Sat Aug 29 05:06:14.181424 2026] [security2:error] [pid 1018003:tid 1018270] [client 158.23.147.79:30677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/install.php"] [unique_id "apK9JjAh5Y1i2tUxg4HwVgAABi4"]
[Sat Aug 29 05:06:14.189386 2026] [security2:error] [pid 1017536:tid 1017760] [client 40.83.93.50:5899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-content/classwithtostring.php"] [unique_id "apK9JiJcY4fy7tP-rU36SwAAAnI"]
[Sat Aug 29 05:06:14.190710 2026] [security2:error] [pid 1017536:tid 1017764] [client 20.48.251.3:61223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/chosen.php"] [unique_id "apK9JiJcY4fy7tP-rU36TAAAAnY"]
[Sat Aug 29 05:06:14.200369 2026] [security2:error] [pid 1017536:tid 1017769] [client 20.196.209.81:16767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/alumni_reg.php"] [unique_id "apK9JiJcY4fy7tP-rU36TQAAAns"]
[Sat Aug 29 05:06:14.206009 2026] [security2:error] [pid 1017536:tid 1017686] [client 52.139.37.240:12514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/index.php/feed/atom/"] [unique_id "apK9JiJcY4fy7tP-rU36TgAAAig"]
[Sat Aug 29 05:06:14.206427 2026] [security2:error] [pid 1017536:tid 1017710] [client 158.23.147.79:24513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK9JiJcY4fy7tP-rU36TwAAAkA"]
[Sat Aug 29 05:06:14.207650 2026] [security2:error] [pid 1018003:tid 1018106] [remote 162.241.144.20:34468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.144.241.162.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.sitestage.biz"] [uri "/wp-login.php"] [unique_id "apK9JjAh5Y1i2tUxg4HwVwAGIlU"]
[Sat Aug 29 05:06:14.209978 2026] [http2:warn] [pid 1017536:tid 1017791] [client 57.141.14.6:58642] h2_stream(1017536-30-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:06:14.213279 2026] [security2:error] [pid 1018003:tid 1018246] [client 20.52.41.200:1233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/ws.php"] [unique_id "apK9JjAh5Y1i2tUxg4HwWAAABhY"]
[Sat Aug 29 05:06:14.262805 2026] [core:error] [pid 1017536:tid 1017681] [client 193.189.100.204:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:14.262824 2026] [core:error] [pid 1017536:tid 1017681] [client 193.189.100.204:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:14.272482 2026] [security2:error] [pid 1018003:tid 1018198] [client 20.63.81.20:56841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/wp-tymanage.php"] [unique_id "apK9JjAh5Y1i2tUxg4HwXAAABec"]
[Sat Aug 29 05:06:14.294929 2026] [security2:error] [pid 1018003:tid 1018199] [client 20.220.204.93:64288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/logs1.php"] [unique_id "apK9JjAh5Y1i2tUxg4HwXgAABeg"]
[Sat Aug 29 05:06:14.305225 2026] [security2:error] [pid 1018003:tid 1018218] [client 158.23.184.117:1412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/test.php"] [unique_id "apK9JjAh5Y1i2tUxg4HwXwAABfs"]
[Sat Aug 29 05:06:14.305635 2026] [security2:error] [pid 1017536:tid 1017707] [client 158.23.184.117:1429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/.tmb/dropdown.php"] [unique_id "apK9JiJcY4fy7tP-rU36VQAAAj0"]
[Sat Aug 29 05:06:14.324713 2026] [security2:error] [pid 1018003:tid 1018196] [client 20.48.251.3:61062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/admin-ajax.php"] [unique_id "apK9JjAh5Y1i2tUxg4HwYgAABeU"]
[Sat Aug 29 05:06:14.328598 2026] [security2:error] [pid 1018003:tid 1018239] [client 168.107.94.195:59076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9JjAh5Y1i2tUxg4HwZAAABg8"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:14.335370 2026] [security2:error] [pid 1017536:tid 1017789] [client 4.205.62.107:22264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/app/Models/Hrm/Employee.php"] [unique_id "apK9JiJcY4fy7tP-rU36VwAAAo8"]
[Sat Aug 29 05:06:14.337913 2026] [security2:error] [pid 1017536:tid 1017750] [client 20.48.251.3:13982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/app_local.php"] [unique_id "apK9JiJcY4fy7tP-rU36WAAAAmg"]
[Sat Aug 29 05:06:14.351863 2026] [security2:error] [pid 1017536:tid 1017770] [client 192.145.125.70:48028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.125.145.192.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nicolaandstevenlochrane.strangeworx.com"] [uri "/xmlrpc.php"] [unique_id "apK9JiJcY4fy7tP-rU36WgAAAnw"]
[Sat Aug 29 05:06:14.396418 2026] [security2:error] [pid 1018003:tid 1018155] [client 20.197.61.180:6054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-content/autoload_classmap.php"] [unique_id "apK9JjAh5Y1i2tUxg4HwZgAABbw"]
[Sat Aug 29 05:06:14.398289 2026] [security2:error] [pid 1017536:tid 1017705] [client 4.205.62.107:22342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/phpi.php"] [unique_id "apK9JiJcY4fy7tP-rU36WwAAAjs"]
[Sat Aug 29 05:06:14.404637 2026] [security2:error] [pid 1017536:tid 1017668] [client 20.63.81.20:60490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/ajfto.php"] [unique_id "apK9JiJcY4fy7tP-rU36XAAAAhY"]
[Sat Aug 29 05:06:14.406287 2026] [security2:error] [pid 1017536:tid 1017786] [client 158.158.54.35:8652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-includes/customize/index.php"] [unique_id "apK9JiJcY4fy7tP-rU36XQAAAow"]
[Sat Aug 29 05:06:14.409119 2026] [security2:error] [pid 1017536:tid 1017729] [client 4.205.62.107:65444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/lmfi2.php"] [unique_id "apK9JiJcY4fy7tP-rU36XgAAAlM"]
[Sat Aug 29 05:06:14.410264 2026] [security2:error] [pid 1018003:tid 1018217] [client 52.139.37.240:12429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/root.php"] [unique_id "apK9JjAh5Y1i2tUxg4HwZwAABfo"]
[Sat Aug 29 05:06:14.440722 2026] [security2:error] [pid 1018003:tid 1018197] [client 138.199.19.170:47912] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.sankomold.com"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "apK9JjAh5Y1i2tUxg4HwaAAABeY"]
[Sat Aug 29 05:06:14.451718 2026] [security2:error] [pid 1017536:tid 1017721] [client 158.23.184.117:1466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/wp-includes/mani.php"] [unique_id "apK9JiJcY4fy7tP-rU36YQAAAks"]
[Sat Aug 29 05:06:14.453770 2026] [security2:error] [pid 1017536:tid 1017725] [client 158.23.184.117:1427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/robots.php"] [unique_id "apK9JiJcY4fy7tP-rU36YgAAAk8"]
[Sat Aug 29 05:06:14.453795 2026] [security2:error] [pid 1017536:tid 1017783] [client 20.48.251.3:61088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/ms.php"] [unique_id "apK9JiJcY4fy7tP-rU36YwAAAok"]
[Sat Aug 29 05:06:14.475362 2026] [security2:error] [pid 1017536:tid 1017757] [client 4.205.62.107:53402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/app.default.php"] [unique_id "apK9JiJcY4fy7tP-rU36ZAAAAm8"]
[Sat Aug 29 05:06:14.489997 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.196.209.81:15040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-configs.php"] [unique_id "apK9JjAh5Y1i2tUxg4HwaQAABcI"]
[Sat Aug 29 05:06:14.509174 2026] [security2:error] [pid 1017536:tid 1017752] [client 158.23.147.79:48298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/xmlrpc.php"] [unique_id "apK9JiJcY4fy7tP-rU36ZQAAAmo"]
[Sat Aug 29 05:06:14.531476 2026] [security2:error] [pid 1018003:tid 1018174] [client 65.111.24.162:32625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 162.24.111.65.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK9JjAh5Y1i2tUxg4HwawAABc8"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:06:14.535364 2026] [security2:error] [pid 1017536:tid 1017694] [client 20.63.81.20:60435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/wp_KwIW0U5F.php"] [unique_id "apK9JiJcY4fy7tP-rU36ZgAAAjA"]
[Sat Aug 29 05:06:14.559266 2026] [security2:error] [pid 1018003:tid 1018242] [client 158.23.147.79:26526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK9JjAh5Y1i2tUxg4HwbAAABhI"]
[Sat Aug 29 05:06:14.579860 2026] [security2:error] [pid 1017536:tid 1017745] [client 20.48.251.3:62105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/fucku.php"] [unique_id "apK9JiJcY4fy7tP-rU36ZwAAAmM"]
[Sat Aug 29 05:06:14.580661 2026] [security2:error] [pid 1017536:tid 1017687] [client 40.83.93.50:7781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/config.php"] [unique_id "apK9JiJcY4fy7tP-rU36aAAAAik"]
[Sat Aug 29 05:06:14.582950 2026] [security2:error] [pid 1017536:tid 1017678] [client 68.155.159.216:33692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/makeasmtp.php"] [unique_id "apK9JiJcY4fy7tP-rU36aQAAAiA"]
[Sat Aug 29 05:06:14.593676 2026] [security2:error] [pid 1017536:tid 1017713] [client 20.220.204.93:63819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/inege.php"] [unique_id "apK9JiJcY4fy7tP-rU36agAAAkM"]
[Sat Aug 29 05:06:14.595190 2026] [security2:error] [pid 1017536:tid 1017683] [client 158.23.184.117:1405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/wp-includes/Test.php"] [unique_id "apK9JiJcY4fy7tP-rU36awAAAiU"]
[Sat Aug 29 05:06:14.595241 2026] [security2:error] [pid 1018003:tid 1018167] [client 20.196.209.81:16744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/colors.php"] [unique_id "apK9JjAh5Y1i2tUxg4HwbQAABcg"]
[Sat Aug 29 05:06:14.599753 2026] [security2:error] [pid 1017536:tid 1017742] [client 20.104.49.130:63578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/abcd.php"] [unique_id "apK9JiJcY4fy7tP-rU36bAAAAmA"]
[Sat Aug 29 05:06:14.601507 2026] [security2:error] [pid 1017536:tid 1017669] [client 158.23.184.117:1417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/.well-known/install.php"] [unique_id "apK9JiJcY4fy7tP-rU36bQAAAhc"]
[Sat Aug 29 05:06:14.603352 2026] [security2:error] [pid 1017536:tid 1017790] [client 52.139.37.240:12496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/shell.php"] [unique_id "apK9JiJcY4fy7tP-rU36bgAAApA"]
[Sat Aug 29 05:06:14.658078 2026] [security2:error] [pid 1018003:tid 1018221] [client 20.52.41.200:1164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-themes.php"] [unique_id "apK9JjAh5Y1i2tUxg4HwbgAABf4"]
[Sat Aug 29 05:06:14.658157 2026] [security2:error] [pid 1018003:tid 1018182] [client 40.83.93.50:5929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-content/config.php"] [unique_id "apK9JjAh5Y1i2tUxg4HwbwAABdc"]
[Sat Aug 29 05:06:14.669368 2026] [security2:error] [pid 1018003:tid 1018066] [remote 52.167.144.136:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantsfans.net"] [uri "/message_board/index.php"] [unique_id "apK9JjAh5Y1i2tUxg4HwcAAGHC0"]
[Sat Aug 29 05:06:14.676153 2026] [security2:error] [pid 1017536:tid 1017781] [client 20.63.81.20:60441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/wp_xiPu52Ut.php"] [unique_id "apK9JiJcY4fy7tP-rU36cAAAAoc"]
[Sat Aug 29 05:06:14.693601 2026] [security2:error] [pid 1018003:tid 1018173] [client 158.23.147.79:30647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-content/x/index.php"] [unique_id "apK9JjAh5Y1i2tUxg4HwcgAABc4"]
[Sat Aug 29 05:06:14.703399 2026] [security2:error] [pid 1017536:tid 1017760] [client 20.48.251.3:62097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/error_log.php"] [unique_id "apK9JiJcY4fy7tP-rU36cQAAAnI"]
[Sat Aug 29 05:06:14.708079 2026] [security2:error] [pid 1017536:tid 1017764] [client 168.107.94.195:59406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9JiJcY4fy7tP-rU36cgAAAnY"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:14.715682 2026] [security2:error] [pid 1017536:tid 1017754] [client 158.23.147.79:35836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK9JiJcY4fy7tP-rU36cwAAAmw"]
[Sat Aug 29 05:06:14.717333 2026] [security2:error] [pid 1017536:tid 1017777] [client 4.205.62.107:22322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/fraro.php"] [unique_id "apK9JiJcY4fy7tP-rU36dAAAAoM"]
[Sat Aug 29 05:06:14.742646 2026] [security2:error] [pid 1017536:tid 1017691] [client 158.23.184.117:1351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/wp-includes/pomo.php"] [unique_id "apK9JiJcY4fy7tP-rU36dgAAAi0"]
[Sat Aug 29 05:06:14.749787 2026] [security2:error] [pid 1018003:tid 1018226] [client 158.23.147.79:63039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/cgi-bin/index.php"] [unique_id "apK9JjAh5Y1i2tUxg4HwdAAABgM"]
[Sat Aug 29 05:06:14.772675 2026] [security2:error] [pid 1017536:tid 1017720] [client 158.23.147.79:32737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-content/themes/too.php"] [unique_id "apK9JiJcY4fy7tP-rU36eAAAAko"]
[Sat Aug 29 05:06:14.791693 2026] [security2:error] [pid 1017536:tid 1017767] [client 138.199.19.170:47914] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.sankomold.com"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "apK9JiJcY4fy7tP-rU36ewAAAnk"]
[Sat Aug 29 05:06:14.793184 2026] [security2:error] [pid 1018003:tid 1018262] [client 158.23.147.79:25519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/content.php"] [unique_id "apK9JjAh5Y1i2tUxg4HwdQAABiY"]
[Sat Aug 29 05:06:14.795726 2026] [security2:error] [pid 1018003:tid 1018274] [client 158.23.184.117:1409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/wp-admin/about.php"] [unique_id "apK9JjAh5Y1i2tUxg4HwdwAABjI"]
[Sat Aug 29 05:06:14.808991 2026] [security2:error] [pid 1018003:tid 1018251] [client 4.205.62.107:55983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/aws-credentials.php"] [unique_id "apK9JjAh5Y1i2tUxg4HweAAABhs"]
[Sat Aug 29 05:06:14.811397 2026] [security2:error] [pid 1017536:tid 1017723] [client 20.63.81.20:60421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/wp_n5VD7XDh.php"] [unique_id "apK9JiJcY4fy7tP-rU36fQAAAk0"]
[Sat Aug 29 05:06:14.813391 2026] [security2:error] [pid 1017536:tid 1017670] [client 52.139.37.240:12883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK9JiJcY4fy7tP-rU36fwAAAhg"]
[Sat Aug 29 05:06:14.827165 2026] [security2:error] [pid 1017536:tid 1017706] [client 20.48.251.3:61675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/phina.php"] [unique_id "apK9JiJcY4fy7tP-rU36gQAAAjw"]
[Sat Aug 29 05:06:14.838428 2026] [security2:error] [pid 1017536:tid 1017749] [client 20.220.204.93:65020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/wp-link10.php"] [unique_id "apK9JiJcY4fy7tP-rU36ggAAAmc"]
[Sat Aug 29 05:06:14.846694 2026] [security2:error] [pid 1018003:tid 1018179] [client 20.48.251.3:14003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/ws62.php"] [unique_id "apK9JjAh5Y1i2tUxg4HweQAABdQ"]
[Sat Aug 29 05:06:14.859315 2026] [security2:error] [pid 1017536:tid 1017769] [client 158.158.54.35:22301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/gmo.php"] [unique_id "apK9JiJcY4fy7tP-rU36gwAAAns"]
[Sat Aug 29 05:06:14.883598 2026] [security2:error] [pid 1017536:tid 1017681] [client 20.196.209.81:5598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-conflg.php"] [unique_id "apK9JiJcY4fy7tP-rU36hgAAAiM"]
[Sat Aug 29 05:06:14.945788 2026] [security2:error] [pid 1018003:tid 1018268] [client 158.23.184.117:1363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/wp-content/backup.php"] [unique_id "apK9JjAh5Y1i2tUxg4HwewAABiw"]
[Sat Aug 29 05:06:14.947308 2026] [security2:error] [pid 1018003:tid 1018200] [client 192.145.125.70:48040] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "nicolaandstevenlochrane.strangeworx.com"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "apK9JjAh5Y1i2tUxg4HwfAAABek"]
[Sat Aug 29 05:06:14.954998 2026] [security2:error] [pid 1017536:tid 1017725] [client 20.48.251.3:61070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/koiy.php"] [unique_id "apK9JiJcY4fy7tP-rU36igAAAk8"]
[Sat Aug 29 05:06:14.957197 2026] [security2:error] [pid 1017536:tid 1017761] [client 20.63.81.20:60525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/wp-mini.php"] [unique_id "apK9JiJcY4fy7tP-rU36iwAAAnM"]
[Sat Aug 29 05:06:14.992226 2026] [security2:error] [pid 1017536:tid 1017696] [client 20.104.49.130:51339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/100.php"] [unique_id "apK9JiJcY4fy7tP-rU36jAAAAjI"]
[Sat Aug 29 05:06:14.994527 2026] [security2:error] [pid 1017536:tid 1017672] [client 20.220.204.93:64319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/ww.php"] [unique_id "apK9JiJcY4fy7tP-rU36jQAAAho"]
[Sat Aug 29 05:06:14.999813 2026] [security2:error] [pid 1017536:tid 1017743] [client 158.23.184.117:1666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/wp-admin/link-add.php"] [unique_id "apK9JiJcY4fy7tP-rU36jwAAAmE"]
[Sat Aug 29 05:06:15.004237 2026] [security2:error] [pid 1017536:tid 1017731] [client 213.202.253.4:51133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aantec.com"] [uri "/schallfuns.php"] [unique_id "apK9JyJcY4fy7tP-rU36kAAAAlU"], referer: www.google.com
[Sat Aug 29 05:06:15.007701 2026] [security2:error] [pid 1017536:tid 1017722] [client 20.104.49.130:53853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/red.php"] [unique_id "apK9JyJcY4fy7tP-rU36kQAAAkw"]
[Sat Aug 29 05:06:15.019747 2026] [security2:error] [pid 1017536:tid 1017711] [client 68.155.159.216:16332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/goat.php"] [unique_id "apK9JyJcY4fy7tP-rU36kgAAAkE"]
[Sat Aug 29 05:06:15.019826 2026] [security2:error] [pid 1018003:tid 1018224] [client 20.196.209.81:16761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/Js.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwfQAABgE"]
[Sat Aug 29 05:06:15.026826 2026] [security2:error] [pid 1017536:tid 1017775] [client 52.139.37.240:12494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/wp-content/plugins/linkpreview/il.php"] [unique_id "apK9JyJcY4fy7tP-rU36kwAAAoE"]
[Sat Aug 29 05:06:15.057165 2026] [security2:error] [pid 1018003:tid 1018192] [client 40.83.93.50:9577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/22.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwfgAABeE"]
[Sat Aug 29 05:06:15.077263 2026] [security2:error] [pid 1017536:tid 1017732] [client 68.155.159.216:51457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/themes.php"] [unique_id "apK9JyJcY4fy7tP-rU36lAAAAlY"]
[Sat Aug 29 05:06:15.083545 2026] [security2:error] [pid 1018003:tid 1018189] [client 20.48.251.3:62122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/queue.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwfwAABd4"]
[Sat Aug 29 05:06:15.084888 2026] [security2:error] [pid 1018003:tid 1018216] [client 68.155.159.216:12197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-content/themes/index.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwgAAABfk"]
[Sat Aug 29 05:06:15.087981 2026] [security2:error] [pid 1018003:tid 1018240] [client 168.107.94.195:59743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwggAABhA"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:15.090436 2026] [security2:error] [pid 1017536:tid 1017689] [client 20.63.81.20:60528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/xmini4.php"] [unique_id "apK9JyJcY4fy7tP-rU36lQAAAis"]
[Sat Aug 29 05:06:15.090752 2026] [security2:error] [pid 1017536:tid 1017785] [client 68.155.159.216:14264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/packed.php"] [unique_id "apK9JyJcY4fy7tP-rU36lgAAAos"]
[Sat Aug 29 05:06:15.096139 2026] [security2:error] [pid 1017536:tid 1017678] [client 158.23.184.117:1694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/.well-known/aa.php"] [unique_id "apK9JyJcY4fy7tP-rU36lwAAAiA"]
[Sat Aug 29 05:06:15.112208 2026] [security2:error] [pid 1018003:tid 1018212] [client 158.23.147.79:50078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/wp-content/packed.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwgwAABfU"]
[Sat Aug 29 05:06:15.113222 2026] [security2:error] [pid 1017536:tid 1017698] [client 20.52.41.200:1761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-trackback.php"] [unique_id "apK9JyJcY4fy7tP-rU36mAAAAjQ"]
[Sat Aug 29 05:06:15.121401 2026] [security2:error] [pid 1017536:tid 1017786] [client 20.197.61.180:16992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-content/cache/min/1/wp-content/admin.php"] [unique_id "apK9JyJcY4fy7tP-rU36mQAAAow"]
[Sat Aug 29 05:06:15.121450 2026] [security2:error] [pid 1017536:tid 1017714] [client 138.199.19.170:47920] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.sankomold.com"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "apK9JyJcY4fy7tP-rU36mgAAAkQ"]
[Sat Aug 29 05:06:15.126962 2026] [security2:error] [pid 1017536:tid 1017765] [client 20.220.204.93:64381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/w1px.php"] [unique_id "apK9JyJcY4fy7tP-rU36mwAAAnc"]
[Sat Aug 29 05:06:15.128834 2026] [security2:error] [pid 1018003:tid 1018152] [client 209.50.174.211:36639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 211.174.50.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwgQAABbk"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:06:15.131732 2026] [security2:error] [pid 1017536:tid 1017760] [client 68.155.159.216:50176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK9JyJcY4fy7tP-rU36nAAAAnI"]
[Sat Aug 29 05:06:15.146218 2026] [security2:error] [pid 1017536:tid 1017757] [client 40.83.93.50:24088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-content/cong.php"] [unique_id "apK9JyJcY4fy7tP-rU36ngAAAm8"]
[Sat Aug 29 05:06:15.154022 2026] [security2:error] [pid 1017536:tid 1017773] [client 158.23.184.117:1677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/wp-includes/Text.php"] [unique_id "apK9JyJcY4fy7tP-rU36nwAAAn8"]
[Sat Aug 29 05:06:15.167277 2026] [security2:error] [pid 1018003:tid 1018246] [client 158.23.147.79:54347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/simple.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwhgAABhY"]
[Sat Aug 29 05:06:15.206307 2026] [security2:error] [pid 1017536:tid 1017695] [client 20.48.251.3:33316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/paypal.php"] [unique_id "apK9JyJcY4fy7tP-rU36oQAAAjE"]
[Sat Aug 29 05:06:15.215793 2026] [security2:error] [pid 1017536:tid 1017789] [client 20.63.81.20:56942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/reop3.php"] [unique_id "apK9JyJcY4fy7tP-rU36pAAAAo8"]
[Sat Aug 29 05:06:15.220990 2026] [security2:error] [pid 1017536:tid 1017691] [client 52.139.37.240:12523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/wp-header-json.php"] [unique_id "apK9JyJcY4fy7tP-rU36pQAAAi0"]
[Sat Aug 29 05:06:15.243677 2026] [security2:error] [pid 1018003:tid 1018278] [client 158.23.184.117:1360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwiAAABjY"]
[Sat Aug 29 05:06:15.262585 2026] [security2:error] [pid 1017536:tid 1017723] [client 20.48.250.41:59353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/Geforce.php"] [unique_id "apK9JyJcY4fy7tP-rU36pgAAAk0"]
[Sat Aug 29 05:06:15.267757 2026] [security2:error] [pid 1017536:tid 1017706] [client 68.155.159.216:51859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/index/function.php"] [unique_id "apK9JyJcY4fy7tP-rU36pwAAAjw"]
[Sat Aug 29 05:06:15.268662 2026] [security2:error] [pid 1017536:tid 1017749] [client 20.220.204.93:63837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/to.php"] [unique_id "apK9JyJcY4fy7tP-rU36qAAAAmc"]
[Sat Aug 29 05:06:15.276099 2026] [security2:error] [pid 1018003:tid 1018203] [client 20.196.209.81:5515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-content.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwiQAABew"]
[Sat Aug 29 05:06:15.299369 2026] [security2:error] [pid 1018003:tid 1018202] [client 158.158.54.35:32964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/classwithtostring.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwiwAABes"]
[Sat Aug 29 05:06:15.299949 2026] [security2:error] [pid 1017536:tid 1017767] [client 158.23.184.117:1364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/wp-trackback.php"] [unique_id "apK9JyJcY4fy7tP-rU36rQAAAnk"]
[Sat Aug 29 05:06:15.304213 2026] [security2:error] [pid 1017536:tid 1017783] [client 20.48.250.41:64266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/h2a2ck.php"] [unique_id "apK9JyJcY4fy7tP-rU36rgAAAok"]
[Sat Aug 29 05:06:15.326789 2026] [security2:error] [pid 1018003:tid 1018269] [client 158.23.184.117:4523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/update/da222.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwjQAABi0"]
[Sat Aug 29 05:06:15.352343 2026] [security2:error] [pid 1017536:tid 1017680] [client 20.63.81.20:56916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/wp-mail.php"] [unique_id "apK9JyJcY4fy7tP-rU36sAAAAiI"]
[Sat Aug 29 05:06:15.368303 2026] [security2:error] [pid 1017536:tid 1017688] [client 158.23.147.79:24399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-includes/plugins.php"] [unique_id "apK9JyJcY4fy7tP-rU36sgAAAio"]
[Sat Aug 29 05:06:15.390023 2026] [security2:error] [pid 1017536:tid 1017731] [client 158.23.184.117:1406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/wp-content/plugins/alfa-rex.php"] [unique_id "apK9JyJcY4fy7tP-rU36tQAAAlU"]
[Sat Aug 29 05:06:15.391322 2026] [security2:error] [pid 1017536:tid 1017711] [client 57.141.14.83:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/"] [unique_id "apK9JyJcY4fy7tP-rU36tAAAAkE"]
[Sat Aug 29 05:06:15.399450 2026] [security2:error] [pid 1017536:tid 1017792] [client 20.48.250.41:62578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/click.php"] [unique_id "apK9JyJcY4fy7tP-rU36tgAAApI"]
[Sat Aug 29 05:06:15.405615 2026] [security2:error] [pid 1018003:tid 1018177] [client 20.220.204.93:65021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/thui.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwjgAABdI"]
[Sat Aug 29 05:06:15.418161 2026] [security2:error] [pid 1018003:tid 1018248] [client 20.196.209.81:4440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/access.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwkAAABhg"]
[Sat Aug 29 05:06:15.426016 2026] [security2:error] [pid 1017536:tid 1017687] [client 87.199.194.213:60378] ModSecurity: Access denied with code 406 (phase 1). IPmatchFromFile: "87.199.194.213" matched at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1090"] [id "999022"] [msg "Blacklisted IP Address for POST data StopForumSpam List"] [hostname "www.vineyardroots.com"] [uri "/wp-comments-post.php"] [unique_id "apK9JyJcY4fy7tP-rU36twAAAik"], referer: http://www.vineyardroots.com/2017/08/08/the-world-has-too-much-busyness/
[Sat Aug 29 05:06:15.426078 2026] [security2:error] [pid 1017536:tid 1017687] [client 87.199.194.213:60378] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "406"] [hostname "www.vineyardroots.com"] [uri "/wp-comments-post.php"] [unique_id "apK9JyJcY4fy7tP-rU36twAAAik"], referer: http://www.vineyardroots.com/2017/08/08/the-world-has-too-much-busyness/
[Sat Aug 29 05:06:15.428377 2026] [security2:error] [pid 1017536:tid 1017776] [client 52.139.37.240:12495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/zup.php"] [unique_id "apK9JyJcY4fy7tP-rU36uAAAAoI"]
[Sat Aug 29 05:06:15.442282 2026] [security2:error] [pid 1017536:tid 1017683] [client 138.199.19.170:47924] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.sankomold.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "apK9JyJcY4fy7tP-rU36uQAAAiU"]
[Sat Aug 29 05:06:15.450043 2026] [security2:error] [pid 1017536:tid 1017775] [client 158.23.184.117:1674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/wp-admin/maint.php"] [unique_id "apK9JyJcY4fy7tP-rU36ugAAAoE"]
[Sat Aug 29 05:06:15.468263 2026] [security2:error] [pid 1018003:tid 1018255] [client 168.107.94.195:60140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwkQAABh8"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:15.470193 2026] [security2:error] [pid 1017536:tid 1017770] [client 158.23.184.117:4821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/xmr.php"] [unique_id "apK9JyJcY4fy7tP-rU36uwAAAnw"]
[Sat Aug 29 05:06:15.472525 2026] [security2:error] [pid 1018003:tid 1018236] [client 20.48.251.3:14026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/userfuns.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwkgAABgw"]
[Sat Aug 29 05:06:15.474195 2026] [security2:error] [pid 1018003:tid 1018197] [client 20.48.250.41:64367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/error_log.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwkwAABeY"]
[Sat Aug 29 05:06:15.483211 2026] [security2:error] [pid 1018003:tid 1018161] [client 4.205.62.107:22220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/bigdump.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwlQAABcI"]
[Sat Aug 29 05:06:15.488022 2026] [security2:error] [pid 1018003:tid 1018163] [client 20.63.81.20:60540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/wp-conffg.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwlgAABcQ"]
[Sat Aug 29 05:06:15.506722 2026] [security2:error] [pid 1018003:tid 1018267] [client 20.151.200.44:64318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/wp-gzone.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwlwAABis"]
[Sat Aug 29 05:06:15.534127 2026] [security2:error] [pid 1018003:tid 1018180] [client 4.205.62.107:22393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/config_dev.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwmgAABdU"]
[Sat Aug 29 05:06:15.547691 2026] [security2:error] [pid 1018003:tid 1018250] [client 4.205.62.107:26646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/wpver.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwmwAABho"]
[Sat Aug 29 05:06:15.561509 2026] [security2:error] [pid 1017536:tid 1017740] [client 192.145.125.70:48046] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "nicolaandstevenlochrane.strangeworx.com"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "apK9JyJcY4fy7tP-rU36wgAAAl4"]
[Sat Aug 29 05:06:15.564889 2026] [security2:error] [pid 1017536:tid 1017707] [client 20.48.251.3:3336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/doc.php"] [unique_id "apK9JyJcY4fy7tP-rU36wwAAAj0"]
[Sat Aug 29 05:06:15.574115 2026] [cgid:error] [pid 1017536:tid 1017745] [client 20.52.41.200:1236] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/cpslggc/404.shtml
[Sat Aug 29 05:06:15.584546 2026] [security2:error] [pid 1017536:tid 1017789] [client 158.23.184.117:1375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/test.php"] [unique_id "apK9JyJcY4fy7tP-rU36xQAAAo8"]
[Sat Aug 29 05:06:15.595986 2026] [security2:error] [pid 1018003:tid 1018219] [client 158.23.184.117:1352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/wp-includes/num.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwnQAABfw"]
[Sat Aug 29 05:06:15.596965 2026] [security2:error] [pid 1018003:tid 1018274] [client 20.48.250.41:60687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/ms.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwngAABjI"]
[Sat Aug 29 05:06:15.609134 2026] [security2:error] [pid 1018003:tid 1018235] [client 20.151.200.44:47377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/ah24.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwnwAABgs"]
[Sat Aug 29 05:06:15.613910 2026] [security2:error] [pid 1018003:tid 1018234] [client 158.23.147.79:48316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/atomlib.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwoAAABgo"]
[Sat Aug 29 05:06:15.614946 2026] [security2:error] [pid 1017536:tid 1017742] [client 40.83.93.50:16635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/bak.phps"] [unique_id "apK9JyJcY4fy7tP-rU36xwAAAmA"]
[Sat Aug 29 05:06:15.615351 2026] [security2:error] [pid 1018003:tid 1018226] [client 158.23.184.117:4802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwoQAABgM"]
[Sat Aug 29 05:06:15.619225 2026] [security2:error] [pid 1018003:tid 1018183] [client 20.63.81.20:60474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/filefuns.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwogAABdg"]
[Sat Aug 29 05:06:15.622570 2026] [security2:error] [pid 1017536:tid 1017669] [client 40.83.93.50:22216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-content/content.php"] [unique_id "apK9JyJcY4fy7tP-rU36yAAAAhc"]
[Sat Aug 29 05:06:15.635679 2026] [security2:error] [pid 1018003:tid 1018265] [client 52.139.37.240:12428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/a9.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwowAABik"]
[Sat Aug 29 05:06:15.643315 2026] [security2:error] [pid 1017536:tid 1017721] [client 20.48.250.41:65083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/403.php"] [unique_id "apK9JyJcY4fy7tP-rU36ygAAAks"]
[Sat Aug 29 05:06:15.644441 2026] [security2:error] [pid 1017536:tid 1017720] [client 4.205.62.107:53401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/8.php"] [unique_id "apK9JyJcY4fy7tP-rU36ywAAAko"]
[Sat Aug 29 05:06:15.654908 2026] [security2:error] [pid 1018003:tid 1018268] [client 20.151.200.44:64265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/str.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwpQAABiw"]
[Sat Aug 29 05:06:15.664920 2026] [security2:error] [pid 1018003:tid 1018187] [client 34.7.216.49:43596] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "webdisk.bridgewaycentretrust.org"] [uri "/api/v2/config"] [unique_id "apK9JzAh5Y1i2tUxg4HwqQAABdw"]
[Sat Aug 29 05:06:15.665133 2026] [security2:error] [pid 1018003:tid 1018175] [client 45.3.36.65:49269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.36.3.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwpAAABdA"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:06:15.666722 2026] [security2:error] [pid 1018003:tid 1018213] [client 34.7.216.49:43516] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "webdisk.bridgewaycentretrust.org"] [uri "/build/manifest.json"] [unique_id "apK9JzAh5Y1i2tUxg4HwrQAABfY"]
[Sat Aug 29 05:06:15.671745 2026] [security2:error] [pid 1018003:tid 1018252] [client 34.7.216.49:43710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.216.7.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.bridgewaycentretrust.org"] [uri "/config/aws.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwswAABhw"]
[Sat Aug 29 05:06:15.683694 2026] [security2:error] [pid 1017536:tid 1017790] [client 195.178.110.105:42128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 105.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "landonrian.com"] [uri "/wp/index.php"] [unique_id "apK9JyJcY4fy7tP-rU36zAAAApA"]
[Sat Aug 29 05:06:15.694146 2026] [security2:error] [pid 1018003:tid 1018240] [client 87.199.194.213:60399] ModSecurity: Access denied with code 406 (phase 1). IPmatchFromFile: "87.199.194.213" matched at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1090"] [id "999022"] [msg "Blacklisted IP Address for POST data StopForumSpam List"] [hostname "www.vineyardroots.com"] [uri "/wp-comments-post.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwtAAABhA"], referer: http://www.vineyardroots.com/2017/08/08/the-world-has-too-much-busyness/
[Sat Aug 29 05:06:15.694232 2026] [security2:error] [pid 1018003:tid 1018240] [client 87.199.194.213:60399] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "406"] [hostname "www.vineyardroots.com"] [uri "/wp-comments-post.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwtAAABhA"], referer: http://www.vineyardroots.com/2017/08/08/the-world-has-too-much-busyness/
[Sat Aug 29 05:06:15.694834 2026] [security2:error] [pid 1018003:tid 1018222] [client 20.48.251.3:62101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/css.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwtQAABf8"]
[Sat Aug 29 05:06:15.721136 2026] [security2:error] [pid 1017536:tid 1017783] [client 20.52.41.200:1236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/222.php"] [unique_id "apK9JyJcY4fy7tP-rU364AAAAok"]
[Sat Aug 29 05:06:15.730290 2026] [security2:error] [pid 1018003:tid 1018192] [client 158.23.184.117:1357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/wp-includes/mani.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwtgAABeE"]
[Sat Aug 29 05:06:15.731388 2026] [security2:error] [pid 1018003:tid 1018276] [client 20.48.250.41:60743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/zxekqlxb.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwtwAABjQ"]
[Sat Aug 29 05:06:15.742570 2026] [security2:error] [pid 1018003:tid 1018170] [client 158.23.184.117:1689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/identity.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwuAAABcs"]
[Sat Aug 29 05:06:15.743926 2026] [security2:error] [pid 1018003:tid 1018193] [client 20.151.200.44:64935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/hack.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwuQAABeI"]
[Sat Aug 29 05:06:15.759348 2026] [security2:error] [pid 1018003:tid 1018153] [client 158.158.54.35:6243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/404.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwugAABbo"]
[Sat Aug 29 05:06:15.759423 2026] [security2:error] [pid 1018003:tid 1018152] [client 158.23.184.117:4829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/wp-act.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwuwAABbk"]
[Sat Aug 29 05:06:15.761717 2026] [security2:error] [pid 1018003:tid 1018188] [client 20.63.81.20:60537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/wp-cron.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwvAAABd0"]
[Sat Aug 29 05:06:15.787283 2026] [security2:error] [pid 1017536:tid 1017743] [client 20.48.251.3:13952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/mamzi.php"] [unique_id "apK9JyJcY4fy7tP-rU364wAAAmE"]
[Sat Aug 29 05:06:15.791290 2026] [security2:error] [pid 1018003:tid 1018278] [client 138.199.19.170:47928] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.sankomold.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "apK9JzAh5Y1i2tUxg4HwvgAABjY"]
[Sat Aug 29 05:06:15.811253 2026] [security2:error] [pid 1018003:tid 1018185] [client 158.23.147.79:30627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwwQAABdo"]
[Sat Aug 29 05:06:15.812972 2026] [security2:error] [pid 1017536:tid 1017694] [client 20.196.209.81:12974] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.voicexnet.com"] [uri "/wp-content/1.php"] [unique_id "apK9JyJcY4fy7tP-rU365AAAAjA"]
[Sat Aug 29 05:06:15.813051 2026] [security2:error] [pid 1017536:tid 1017694] [client 20.196.209.81:12974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-content/1.php"] [unique_id "apK9JyJcY4fy7tP-rU365AAAAjA"]
[Sat Aug 29 05:06:15.819931 2026] [security2:error] [pid 1017536:tid 1017731] [client 20.220.204.93:63814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/Jcrop.php"] [unique_id "apK9JyJcY4fy7tP-rU365QAAAlU"]
[Sat Aug 29 05:06:15.822619 2026] [security2:error] [pid 1018003:tid 1018269] [client 158.23.147.79:35814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/file.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwwgAABi0"]
[Sat Aug 29 05:06:15.826530 2026] [security2:error] [pid 1018003:tid 1018189] [client 20.196.209.81:11520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/classsmtps.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwwwAABd4"]
[Sat Aug 29 05:06:15.829856 2026] [security2:error] [pid 1017536:tid 1017711] [client 20.48.251.3:3346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/php_info.php"] [unique_id "apK9JyJcY4fy7tP-rU365gAAAkE"]
[Sat Aug 29 05:06:15.843186 2026] [security2:error] [pid 1017536:tid 1017749] [client 20.197.61.180:16984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-content/classwithtostring.php"] [unique_id "apK9JyJcY4fy7tP-rU365wAAAmc"]
[Sat Aug 29 05:06:15.847516 2026] [security2:error] [pid 1018003:tid 1018242] [client 195.178.110.105:42142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 105.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "landonrian.com"] [uri "/wp/index.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwxAAABhI"]
[Sat Aug 29 05:06:15.848162 2026] [security2:error] [pid 1018003:tid 1018215] [client 168.107.94.195:60577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwxQAABfg"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:15.849337 2026] [security2:error] [pid 1018003:tid 1018218] [client 52.139.37.240:12432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/admin/index.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwxgAABfs"]
[Sat Aug 29 05:06:15.850724 2026] [security2:error] [pid 1018003:tid 1018194] [client 158.23.147.79:26596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-content/plugins/index.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwxwAABeM"]
[Sat Aug 29 05:06:15.870844 2026] [security2:error] [pid 1018003:tid 1018217] [client 20.48.250.41:64347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/cytyr.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwyAAABfo"]
[Sat Aug 29 05:06:15.871169 2026] [security2:error] [pid 1018003:tid 1018197] [client 4.205.62.107:22305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/thui.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwyQAABeY"]
[Sat Aug 29 05:06:15.871474 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.48.250.41:62572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/init.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwygAABcI"]
[Sat Aug 29 05:06:15.872803 2026] [security2:error] [pid 1018003:tid 1018169] [client 158.23.184.117:1417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/wp-includes/Test.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwywAABco"]
[Sat Aug 29 05:06:15.878443 2026] [security2:error] [pid 1018003:tid 1018267] [client 158.23.147.79:32748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/radio.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwzAAABis"]
[Sat Aug 29 05:06:15.890252 2026] [security2:error] [pid 1018003:tid 1018177] [client 158.23.184.117:1394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/Radio.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwzQAABdI"]
[Sat Aug 29 05:06:15.894738 2026] [security2:error] [pid 1018003:tid 1018180] [client 20.63.81.20:60427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/lock360.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwzgAABdU"]
[Sat Aug 29 05:06:15.903091 2026] [security2:error] [pid 1018003:tid 1018248] [client 158.23.184.117:4801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/fff.php"] [unique_id "apK9JzAh5Y1i2tUxg4HwzwAABhg"]
[Sat Aug 29 05:06:15.949032 2026] [security2:error] [pid 1017536:tid 1017775] [client 4.205.62.107:55984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/4563.php"] [unique_id "apK9JyJcY4fy7tP-rU366wAAAoE"]
[Sat Aug 29 05:06:15.960532 2026] [security2:error] [pid 1018003:tid 1018235] [client 20.48.251.3:62130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/session.php"] [unique_id "apK9JzAh5Y1i2tUxg4Hw0AAABgs"]
[Sat Aug 29 05:06:16.008932 2026] [security2:error] [pid 1018003:tid 1018265] [client 20.48.250.41:62521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/term.php"] [unique_id "apK9KDAh5Y1i2tUxg4Hw0QAABik"]
[Sat Aug 29 05:06:16.015002 2026] [security2:error] [pid 1017536:tid 1017695] [client 20.48.251.3:14046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/public/rip.php.php"] [unique_id "apK9KCJcY4fy7tP-rU367AAAAjE"]
[Sat Aug 29 05:06:16.016366 2026] [security2:error] [pid 1018003:tid 1018257] [client 158.23.184.117:1355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/wp-includes/pomo.php"] [unique_id "apK9KDAh5Y1i2tUxg4Hw0gAABiE"]
[Sat Aug 29 05:06:16.028316 2026] [security2:error] [pid 1018003:tid 1018268] [client 20.63.81.20:60520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/wp-theme.php"] [unique_id "apK9KDAh5Y1i2tUxg4Hw0wAABiw"]
[Sat Aug 29 05:06:16.046007 2026] [security2:error] [pid 1017536:tid 1017689] [client 52.139.37.240:12537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/makeasmtp.php"] [unique_id "apK9KCJcY4fy7tP-rU367QAAAis"]
[Sat Aug 29 05:06:16.063911 2026] [security2:error] [pid 1017536:tid 1017672] [client 158.23.184.117:4842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/.tmb/dropdown.php"] [unique_id "apK9KCJcY4fy7tP-rU367gAAAho"]
[Sat Aug 29 05:06:16.085864 2026] [security2:error] [pid 1018003:tid 1018175] [client 158.23.184.117:1711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/wp-includes/Requests/Exception/file.php"] [unique_id "apK9KDAh5Y1i2tUxg4Hw1QAABdA"]
[Sat Aug 29 05:06:16.089990 2026] [security2:error] [pid 1018003:tid 1018252] [client 20.220.204.93:64355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/ws58.php"] [unique_id "apK9KDAh5Y1i2tUxg4Hw1gAABhw"]
[Sat Aug 29 05:06:16.091963 2026] [security2:error] [pid 1018003:tid 1018167] [client 20.48.251.3:61671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/h.php"] [unique_id "apK9KDAh5Y1i2tUxg4Hw1wAABcg"]
[Sat Aug 29 05:06:16.094446 2026] [security2:error] [pid 1017536:tid 1017681] [client 20.104.49.130:53704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/x1da.php"] [unique_id "apK9KCJcY4fy7tP-rU367wAAAiM"]
[Sat Aug 29 05:06:16.113277 2026] [security2:error] [pid 1017536:tid 1017683] [client 40.83.93.50:9593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/install.php"] [unique_id "apK9KCJcY4fy7tP-rU368AAAAiU"]
[Sat Aug 29 05:06:16.115013 2026] [security2:error] [pid 1018003:tid 1018212] [client 20.48.250.41:64301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/galer.php"] [unique_id "apK9KDAh5Y1i2tUxg4Hw2AAABfU"]
[Sat Aug 29 05:06:16.116033 2026] [security2:error] [pid 1017536:tid 1017729] [client 138.199.19.170:47936] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.sankomold.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "apK9KCJcY4fy7tP-rU368QAAAlM"]
[Sat Aug 29 05:06:16.126687 2026] [security2:error] [pid 1018003:tid 1018159] [client 68.155.159.216:16347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK9KDAh5Y1i2tUxg4Hw2QAABcA"]
[Sat Aug 29 05:06:16.143016 2026] [security2:error] [pid 1018003:tid 1018234] [client 40.83.93.50:24097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-content/core.php"] [unique_id "apK9KDAh5Y1i2tUxg4Hw2gAABgo"]
[Sat Aug 29 05:06:16.161535 2026] [security2:error] [pid 1018003:tid 1018255] [client 192.145.125.70:48060] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "nicolaandstevenlochrane.strangeworx.com"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "apK9KDAh5Y1i2tUxg4Hw3AAABh8"]
[Sat Aug 29 05:06:16.162683 2026] [security2:error] [pid 1018003:tid 1018246] [client 20.63.81.20:60501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/2d7433/index.php"] [unique_id "apK9KDAh5Y1i2tUxg4Hw3QAABhY"]
[Sat Aug 29 05:06:16.170515 2026] [security2:error] [pid 1018003:tid 1018170] [client 20.104.49.130:60928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/load.php"] [unique_id "apK9KDAh5Y1i2tUxg4Hw3gAABcs"]
[Sat Aug 29 05:06:16.171096 2026] [security2:error] [pid 1018003:tid 1018186] [client 20.52.41.200:1240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/x.php"] [unique_id "apK9KDAh5Y1i2tUxg4Hw3wAABds"]
[Sat Aug 29 05:06:16.174930 2026] [security2:error] [pid 1017536:tid 1017707] [client 104.207.42.91:16613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 91.42.207.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK9KCJcY4fy7tP-rU369QAAAj0"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:06:16.183353 2026] [security2:error] [pid 1017536:tid 1017698] [client 20.48.250.41:62472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/aaa.php"] [unique_id "apK9KCJcY4fy7tP-rU369wAAAjQ"]
[Sat Aug 29 05:06:16.193184 2026] [security2:error] [pid 1017536:tid 1017714] [client 20.48.251.3:13977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/environment.php"] [unique_id "apK9KCJcY4fy7tP-rU36-QAAAkQ"]
[Sat Aug 29 05:06:16.220430 2026] [security2:error] [pid 1018003:tid 1018153] [client 20.48.251.3:61186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/bootstrap.php"] [unique_id "apK9KDAh5Y1i2tUxg4Hw4QAABbo"]
[Sat Aug 29 05:06:16.220506 2026] [security2:error] [pid 1018003:tid 1018224] [client 158.158.54.35:8927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/php.php"] [unique_id "apK9KDAh5Y1i2tUxg4Hw4gAABgE"]
[Sat Aug 29 05:06:16.222350 2026] [security2:error] [pid 1017536:tid 1017706] [client 20.196.209.81:16704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/contentloader1.php"] [unique_id "apK9KCJcY4fy7tP-rU36_AAAAjw"]
[Sat Aug 29 05:06:16.229270 2026] [security2:error] [pid 1017536:tid 1017737] [client 168.107.94.195:60983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9KCJcY4fy7tP-rU36_QAAAls"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:16.231650 2026] [security2:error] [pid 1017536:tid 1017770] [client 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK9KCJcY4fy7tP-rU368gACfCM"]
[Sat Aug 29 05:06:16.235897 2026] [security2:error] [pid 1018003:tid 1018193] [client 52.139.37.240:12491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/paku.php"] [unique_id "apK9KDAh5Y1i2tUxg4Hw5AAABeI"]
[Sat Aug 29 05:06:16.236787 2026] [core:error] [pid 1017536:tid 1017783] [client 20.197.61.180:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:16.236803 2026] [core:error] [pid 1017536:tid 1017783] [client 20.197.61.180:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:16.237811 2026] [security2:error] [pid 1017536:tid 1017696] [client 68.155.159.216:50327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/themes.php"] [unique_id "apK9KCJcY4fy7tP-rU37AAAAAjI"]
[Sat Aug 29 05:06:16.238195 2026] [security2:error] [pid 1017536:tid 1017709] [client 66.248.203.2:3430] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cheerfulmonk.com"] [uri "/2012/06/03/college/"] [unique_id "apK9KCJcY4fy7tP-rU37AQAAAj8"]
[Sat Aug 29 05:06:16.248252 2026] [security2:error] [pid 1018003:tid 1018222] [client 20.196.209.81:12983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-content/about.php"] [unique_id "apK9KDAh5Y1i2tUxg4Hw5QAABf8"]
[Sat Aug 29 05:06:16.249419 2026] [security2:error] [pid 1017536:tid 1017786] [client 158.23.184.117:4521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/robots.php"] [unique_id "apK9KCJcY4fy7tP-rU37AwAAAow"]
[Sat Aug 29 05:06:16.250724 2026] [security2:error] [pid 1017536:tid 1017679] [client 20.220.204.93:64316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/xs.php"] [unique_id "apK9KCJcY4fy7tP-rU37BAAAAiE"]
[Sat Aug 29 05:06:16.271210 2026] [security2:error] [pid 1018003:tid 1018238] [client 158.23.184.117:1389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/wp-admin/link-add.php"] [unique_id "apK9KDAh5Y1i2tUxg4Hw5gAABg4"]
[Sat Aug 29 05:06:16.279779 2026] [security2:error] [pid 1018003:tid 1018261] [client 158.23.184.117:1383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/wp-admin/add.php"] [unique_id "apK9KDAh5Y1i2tUxg4Hw5wAABiU"]
[Sat Aug 29 05:06:16.309955 2026] [security2:error] [pid 1017536:tid 1017710] [client 20.48.250.41:63827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/baixy.php"] [unique_id "apK9KCJcY4fy7tP-rU37BwAAAkA"]
[Sat Aug 29 05:06:16.314439 2026] [security2:error] [pid 1018003:tid 1018262] [client 158.23.147.79:37797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-admin/about.php"] [unique_id "apK9KDAh5Y1i2tUxg4Hw6QAABiY"]
[Sat Aug 29 05:06:16.328986 2026] [security2:error] [pid 1017536:tid 1017773] [client 20.63.81.20:60508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/wp-login.php"] [unique_id "apK9KCJcY4fy7tP-rU37BgAAAn8"]
[Sat Aug 29 05:06:16.335788 2026] [security2:error] [pid 1018003:tid 1018202] [client 20.48.250.41:60739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/xsox.php"] [unique_id "apK9KDAh5Y1i2tUxg4Hw6gAABes"]
[Sat Aug 29 05:06:16.336486 2026] [security2:error] [pid 1018003:tid 1018182] [client 87.219.197.128:53126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK9KDAh5Y1i2tUxg4Hw6wAABdc"]
[Sat Aug 29 05:06:16.336559 2026] [security2:error] [pid 1018003:tid 1018182] [client 87.219.197.128:53126] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK9KDAh5Y1i2tUxg4Hw6wAABdc"]
[Sat Aug 29 05:06:16.350628 2026] [security2:error] [pid 1018003:tid 1018269] [client 20.48.251.3:61686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/333.php"] [unique_id "apK9KDAh5Y1i2tUxg4Hw7QAABi0"]
[Sat Aug 29 05:06:16.352068 2026] [security2:error] [pid 1017536:tid 1017749] [client 158.23.147.79:30532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK9KCJcY4fy7tP-rU37CAAAAmc"]
[Sat Aug 29 05:06:16.371314 2026] [security2:error] [pid 1017536:tid 1017750] [client 20.48.251.3:14316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/aws_secret_config.php"] [unique_id "apK9KCJcY4fy7tP-rU37CgAAAmg"]
[Sat Aug 29 05:06:16.371757 2026] [security2:error] [pid 1017536:tid 1017724] [client 158.23.147.79:62606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK9KCJcY4fy7tP-rU37CwAAAk4"]
[Sat Aug 29 05:06:16.372636 2026] [security2:error] [pid 1017536:tid 1017751] [client 68.155.159.216:51872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/.well-known/content.php"] [unique_id "apK9KCJcY4fy7tP-rU37DAAAAmk"]
[Sat Aug 29 05:06:16.399719 2026] [security2:error] [pid 1017536:tid 1017675] [client 158.23.184.117:4814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/.well-known/install.php"] [unique_id "apK9KCJcY4fy7tP-rU37DgAAAh0"]
[Sat Aug 29 05:06:16.422887 2026] [security2:error] [pid 1017536:tid 1017780] [client 158.23.184.117:1392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/wp-includes/Text.php"] [unique_id "apK9KCJcY4fy7tP-rU37EAAAAoY"]
[Sat Aug 29 05:06:16.428973 2026] [security2:error] [pid 1017536:tid 1017705] [client 52.139.37.240:12493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/rtx.php"] [unique_id "apK9KCJcY4fy7tP-rU37EQAAAjs"]
[Sat Aug 29 05:06:16.437206 2026] [security2:error] [pid 1017536:tid 1017712] [client 158.23.184.117:1374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/wp-includes/assets/about.php"] [unique_id "apK9KCJcY4fy7tP-rU37EgAAAkI"]
[Sat Aug 29 05:06:16.449618 2026] [security2:error] [pid 1017536:tid 1017733] [client 138.199.19.170:47938] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.sankomold.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "apK9KCJcY4fy7tP-rU37EwAAAlc"]
[Sat Aug 29 05:06:16.465831 2026] [security2:error] [pid 1018003:tid 1018163] [client 20.63.81.20:56902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/images.php"] [unique_id "apK9KDAh5Y1i2tUxg4Hw8QAABcQ"]
[Sat Aug 29 05:06:16.478333 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.48.251.3:61695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/G-in.php"] [unique_id "apK9KDAh5Y1i2tUxg4Hw8gAABcI"]
[Sat Aug 29 05:06:16.479743 2026] [security2:error] [pid 1017536:tid 1017741] [client 158.23.147.79:24391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK9KCJcY4fy7tP-rU37FAAAAl8"]
[Sat Aug 29 05:06:16.480833 2026] [security2:error] [pid 1018003:tid 1018169] [client 20.48.250.41:65098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/ava.php"] [unique_id "apK9KDAh5Y1i2tUxg4Hw8wAABco"]
[Sat Aug 29 05:06:16.483073 2026] [security2:error] [pid 1018003:tid 1018267] [client 158.23.147.79:49811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/wp-l0gin.php"] [unique_id "apK9KDAh5Y1i2tUxg4Hw9AAABis"]
[Sat Aug 29 05:06:16.503063 2026] [security2:error] [pid 1018003:tid 1018173] [client 20.48.251.3:14028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/snq.php"] [unique_id "apK9KDAh5Y1i2tUxg4Hw9QAABc4"]
[Sat Aug 29 05:06:16.520363 2026] [security2:error] [pid 1018003:tid 1018266] [client 20.220.204.93:64308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/zu.php"] [unique_id "apK9KDAh5Y1i2tUxg4Hw9gAABio"]
[Sat Aug 29 05:06:16.539733 2026] [security2:error] [pid 1017536:tid 1017742] [client 20.48.250.41:59265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/lkui.php"] [unique_id "apK9KCJcY4fy7tP-rU37FQAAAmA"]
[Sat Aug 29 05:06:16.552130 2026] [security2:error] [pid 1018003:tid 1018259] [client 20.197.61.180:16983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-content/config.php"] [unique_id "apK9KDAh5Y1i2tUxg4Hw-QAABiM"]
[Sat Aug 29 05:06:16.574751 2026] [security2:error] [pid 1018003:tid 1018219] [client 158.23.184.117:1346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/wp-trackback.php"] [unique_id "apK9KDAh5Y1i2tUxg4Hw_AAABfw"]
[Sat Aug 29 05:06:16.587240 2026] [security2:error] [pid 1018003:tid 1018274] [client 158.23.184.117:1700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/wp-content/themes/twentytwentythree.php"] [unique_id "apK9KDAh5Y1i2tUxg4Hw_wAABjI"]
[Sat Aug 29 05:06:16.588505 2026] [security2:error] [pid 1017536:tid 1017737] [client 20.63.81.20:60527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/ops.php"] [unique_id "apK9KCJcY4fy7tP-rU37GgAAAls"]
[Sat Aug 29 05:06:16.592947 2026] [security2:error] [pid 1018003:tid 1018277] [client 158.23.184.117:4508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/wp-admin/about.php"] [unique_id "apK9KDAh5Y1i2tUxg4HxAAAABjU"]
[Sat Aug 29 05:06:16.603691 2026] [security2:error] [pid 1017536:tid 1017770] [client 20.48.251.3:61089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/apikeys.php"] [unique_id "apK9KCJcY4fy7tP-rU37GwAAAnw"]
[Sat Aug 29 05:06:16.610497 2026] [security2:error] [pid 1018003:tid 1018167] [client 20.48.250.41:64263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/gdn.php"] [unique_id "apK9KDAh5Y1i2tUxg4HxAQAABcg"]
[Sat Aug 29 05:06:16.610785 2026] [security2:error] [pid 1018003:tid 1018264] [client 168.107.94.195:61306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9KDAh5Y1i2tUxg4HxAgAABig"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:16.614902 2026] [security2:error] [pid 1018003:tid 1018217] [client 20.52.41.200:1228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/new.php"] [unique_id "apK9KDAh5Y1i2tUxg4HxAwAABfo"]
[Sat Aug 29 05:06:16.617757 2026] [security2:error] [pid 1018003:tid 1018236] [client 40.83.93.50:5926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-content/db-status.php"] [unique_id "apK9KDAh5Y1i2tUxg4HxBAAABgw"]
[Sat Aug 29 05:06:16.625086 2026] [security2:error] [pid 1017536:tid 1017679] [client 4.205.62.107:22253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/channels.php"] [unique_id "apK9KCJcY4fy7tP-rU37HQAAAiE"]
[Sat Aug 29 05:06:16.625168 2026] [security2:error] [pid 1018003:tid 1018180] [client 20.196.209.81:16722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/al.php"] [unique_id "apK9KDAh5Y1i2tUxg4HxBgAABdU"]
[Sat Aug 29 05:06:16.640671 2026] [security2:error] [pid 1018003:tid 1018268] [client 52.139.37.240:12481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/update/da222.php"] [unique_id "apK9KDAh5Y1i2tUxg4HxBwAABiw"]
[Sat Aug 29 05:06:16.643503 2026] [security2:error] [pid 1018003:tid 1018250] [client 20.196.209.81:5568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-content/admin-header.php"] [unique_id "apK9KDAh5Y1i2tUxg4HxCAAABho"]
[Sat Aug 29 05:06:16.667509 2026] [security2:error] [pid 1018003:tid 1018256] [client 158.158.54.35:32982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/init.php"] [unique_id "apK9KDAh5Y1i2tUxg4HxCQAABiA"]
[Sat Aug 29 05:06:16.673301 2026] [security2:error] [pid 1017536:tid 1017764] [client 4.205.62.107:22378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/oc460l3x.php"] [unique_id "apK9KCJcY4fy7tP-rU37HgAAAnY"]
[Sat Aug 29 05:06:16.683378 2026] [security2:error] [pid 1017536:tid 1017723] [client 20.48.250.41:60758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "apK9KCJcY4fy7tP-rU37HwAAAk0"]
[Sat Aug 29 05:06:16.684674 2026] [security2:error] [pid 1017536:tid 1017753] [client 4.205.62.107:65483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/ah25.php"] [unique_id "apK9KCJcY4fy7tP-rU37IAAAAms"]
[Sat Aug 29 05:06:16.685630 2026] [security2:error] [pid 1017536:tid 1017715] [client 103.185.242.143:61869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK9KCJcY4fy7tP-rU37IQAAAkU"]
[Sat Aug 29 05:06:16.685722 2026] [security2:error] [pid 1017536:tid 1017715] [client 103.185.242.143:61869] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK9KCJcY4fy7tP-rU37IQAAAkU"]
[Sat Aug 29 05:06:16.714156 2026] [security2:error] [pid 1017536:tid 1017773] [client 20.63.81.20:60535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK9KCJcY4fy7tP-rU37IwAAAn8"]
[Sat Aug 29 05:06:16.716503 2026] [security2:error] [pid 1017536:tid 1017683] [client 45.3.35.186:51657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.35.3.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK9KCJcY4fy7tP-rU37IgAAAiU"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:06:16.716913 2026] [security2:error] [pid 1017536:tid 1017716] [client 158.23.147.79:48360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/lv.php"] [unique_id "apK9KCJcY4fy7tP-rU37JAAAAkY"]
[Sat Aug 29 05:06:16.717933 2026] [security2:error] [pid 1017536:tid 1017680] [client 158.23.184.117:1378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/wp-admin/maint.php"] [unique_id "apK9KCJcY4fy7tP-rU37JQAAAiI"]
[Sat Aug 29 05:06:16.728488 2026] [security2:error] [pid 1017536:tid 1017751] [client 20.48.251.3:61643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/motu.php"] [unique_id "apK9KCJcY4fy7tP-rU37JgAAAmk"]
[Sat Aug 29 05:06:16.733140 2026] [security2:error] [pid 1017536:tid 1017704] [client 20.48.251.3:14020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/wp-access.php"] [unique_id "apK9KCJcY4fy7tP-rU37JwAAAjo"]
[Sat Aug 29 05:06:16.737167 2026] [security2:error] [pid 1017536:tid 1017694] [client 158.23.184.117:4826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/wp-content/backup.php"] [unique_id "apK9KCJcY4fy7tP-rU37KgAAAjA"]
[Sat Aug 29 05:06:16.740832 2026] [security2:error] [pid 1017536:tid 1017793] [client 68.155.159.216:33639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK9KCJcY4fy7tP-rU37KwAAApM"]
[Sat Aug 29 05:06:16.741845 2026] [security2:error] [pid 1017536:tid 1017668] [client 20.220.204.93:64357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/lanka.php"] [unique_id "apK9KCJcY4fy7tP-rU37LAAAAhY"]
[Sat Aug 29 05:06:16.744929 2026] [security2:error] [pid 1018003:tid 1018155] [client 192.145.125.70:48070] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "nicolaandstevenlochrane.strangeworx.com"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "apK9KDAh5Y1i2tUxg4HxCgAABbw"]
[Sat Aug 29 05:06:16.748101 2026] [security2:error] [pid 1017536:tid 1017695] [client 40.83.93.50:7746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/colour.php"] [unique_id "apK9KCJcY4fy7tP-rU37LgAAAjE"]
[Sat Aug 29 05:06:16.768672 2026] [security2:error] [pid 1017536:tid 1017775] [client 20.48.250.41:65033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/f2.php"] [unique_id "apK9KCJcY4fy7tP-rU37MAAAAoE"]
[Sat Aug 29 05:06:16.784288 2026] [security2:error] [pid 1017536:tid 1017705] [client 158.23.184.117:1345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/wp-content/languages/themes/num.php"] [unique_id "apK9KCJcY4fy7tP-rU37MQAAAjs"]
[Sat Aug 29 05:06:16.796634 2026] [security2:error] [pid 1017536:tid 1017740] [client 138.199.19.170:47942] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.sankomold.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "apK9KCJcY4fy7tP-rU37MgAAAl4"]
[Sat Aug 29 05:06:16.811797 2026] [security2:error] [pid 1017536:tid 1017745] [client 68.155.159.216:24489] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "drjrae.managemymood.com"] [uri "/1.php"] [unique_id "apK9KCJcY4fy7tP-rU37MwAAAmM"]
[Sat Aug 29 05:06:16.811870 2026] [security2:error] [pid 1017536:tid 1017745] [client 68.155.159.216:24489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/1.php"] [unique_id "apK9KCJcY4fy7tP-rU37MwAAAmM"]
[Sat Aug 29 05:06:16.824413 2026] [security2:error] [pid 1017536:tid 1017736] [client 20.48.250.41:60748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/motu.php"] [unique_id "apK9KCJcY4fy7tP-rU37NAAAAlo"]
[Sat Aug 29 05:06:16.859801 2026] [security2:error] [pid 1018003:tid 1018225] [client 20.48.251.3:61221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/public/mah.php.php"] [unique_id "apK9KDAh5Y1i2tUxg4HxDQAABgI"]
[Sat Aug 29 05:06:16.866940 2026] [security2:error] [pid 1017536:tid 1017741] [client 158.23.184.117:1368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/wp-includes/num.php"] [unique_id "apK9KCJcY4fy7tP-rU37NwAAAl8"]
[Sat Aug 29 05:06:16.874618 2026] [security2:error] [pid 1017536:tid 1017769] [client 68.155.159.216:49178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/simple.php"] [unique_id "apK9KCJcY4fy7tP-rU37OAAAAns"]
[Sat Aug 29 05:06:16.877835 2026] [security2:error] [pid 1017536:tid 1017687] [client 4.205.62.107:8991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/agg.php"] [unique_id "apK9KCJcY4fy7tP-rU37OgAAAik"]
[Sat Aug 29 05:06:16.879481 2026] [security2:error] [pid 1017536:tid 1017747] [client 20.63.81.20:60425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK9KCJcY4fy7tP-rU37OwAAAmU"]
[Sat Aug 29 05:06:16.887814 2026] [security2:error] [pid 1017536:tid 1017691] [client 158.23.184.117:4811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/.well-known/aa.php"] [unique_id "apK9KCJcY4fy7tP-rU37PAAAAi0"]
[Sat Aug 29 05:06:16.898920 2026] [security2:error] [pid 1017536:tid 1017743] [client 195.178.110.247:4632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lbustersdrivingschool.com"] [uri "/index.php"] [unique_id "apK9KCJcY4fy7tP-rU37PgAAAmE"]
[Sat Aug 29 05:06:16.901535 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.48.250.41:65080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/grsiuk.php"] [unique_id "apK9KCJcY4fy7tP-rU37PwAAAnk"]
[Sat Aug 29 05:06:16.915983 2026] [security2:error] [pid 1017536:tid 1017711] [client 52.139.37.240:12519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/wp-admin/min.php"] [unique_id "apK9KCJcY4fy7tP-rU37QQAAAkE"]
[Sat Aug 29 05:06:16.917110 2026] [security2:error] [pid 1017536:tid 1017749] [client 158.23.147.79:30563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-login.php"] [unique_id "apK9KCJcY4fy7tP-rU37QwAAAmc"]
[Sat Aug 29 05:06:16.931008 2026] [security2:error] [pid 1018003:tid 1018166] [client 20.48.251.3:14054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/otuz1.php"] [unique_id "apK9KDAh5Y1i2tUxg4HxDgAABcc"]
[Sat Aug 29 05:06:16.933259 2026] [security2:error] [pid 1017536:tid 1017678] [client 158.23.184.117:60890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/wp.php"] [unique_id "apK9KCJcY4fy7tP-rU37RAAAAiA"]
[Sat Aug 29 05:06:16.934138 2026] [security2:error] [pid 1018003:tid 1018189] [client 158.23.147.79:25550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK9KDAh5Y1i2tUxg4HxDwAABd4"]
[Sat Aug 29 05:06:16.934152 2026] [security2:error] [pid 1018003:tid 1018165] [client 158.23.147.79:35741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/file17.php"] [unique_id "apK9KDAh5Y1i2tUxg4HxEAAABcY"]
[Sat Aug 29 05:06:16.985997 2026] [security2:error] [pid 1017536:tid 1017673] [client 158.23.147.79:32650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK9KCJcY4fy7tP-rU37SAAAAhs"]
[Sat Aug 29 05:06:16.986307 2026] [security2:error] [pid 1017536:tid 1017775] [client 20.48.251.3:61239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/zaza.php"] [unique_id "apK9KCJcY4fy7tP-rU37SQAAAoE"]
[Sat Aug 29 05:06:16.991854 2026] [security2:error] [pid 1017536:tid 1017748] [client 168.107.94.195:61635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9KCJcY4fy7tP-rU37SwAAAmY"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:17.006849 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.48.250.41:62549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/Ov-Simple1.php"] [unique_id "apK9KTAh5Y1i2tUxg4HxEgAABcI"]
[Sat Aug 29 05:06:17.006967 2026] [security2:error] [pid 1017536:tid 1017705] [client 4.205.62.107:22283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/lala.php"] [unique_id "apK9KSJcY4fy7tP-rU37TAAAAjs"]
[Sat Aug 29 05:06:17.014365 2026] [security2:error] [pid 1017536:tid 1017719] [client 158.23.184.117:1378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/identity.php"] [unique_id "apK9KSJcY4fy7tP-rU37TgAAAkk"]
[Sat Aug 29 05:06:17.029190 2026] [security2:error] [pid 1018003:tid 1018196] [client 34.7.40.70:7824] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/secrets.json"] [unique_id "apK9KTAh5Y1i2tUxg4HxEwAABeU"]
[Sat Aug 29 05:06:17.031058 2026] [security2:error] [pid 1017536:tid 1017672] [client 20.48.250.41:64320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/wp-scr1pts.php"] [unique_id "apK9KSJcY4fy7tP-rU37TwAAAho"]
[Sat Aug 29 05:06:17.031788 2026] [security2:error] [pid 1017536:tid 1017714] [client 34.7.40.70:7854] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/settings.json"] [unique_id "apK9KSJcY4fy7tP-rU37UAAAAkQ"]
[Sat Aug 29 05:06:17.032310 2026] [security2:error] [pid 1017536:tid 1017675] [client 158.23.184.117:4803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "apK9KSJcY4fy7tP-rU37UQAAAh0"]
[Sat Aug 29 05:06:17.033954 2026] [cgid:error] [pid 1018003:tid 1018203] [client 34.7.40.70:7860] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:17.034377 2026] [cgid:error] [pid 1018003:tid 1018239] [client 34.7.40.70:7874] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:17.035059 2026] [cgid:error] [pid 1017536:tid 1017790] [client 34.7.40.70:7816] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:17.035247 2026] [cgid:error] [pid 1018003:tid 1018258] [client 34.7.40.70:7832] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:17.035434 2026] [security2:error] [pid 1018003:tid 1018258] [client 34.7.40.70:7832] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/404.shtml"] [unique_id "apK9KTAh5Y1i2tUxg4HxFgAABiI"]
[Sat Aug 29 05:06:17.036713 2026] [security2:error] [pid 1017536:tid 1017736] [client 20.63.81.20:60532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/about.php"] [unique_id "apK9KSJcY4fy7tP-rU37WAAAAlo"]
[Sat Aug 29 05:06:17.036759 2026] [cgid:error] [pid 1018003:tid 1018198] [client 34.7.40.70:7840] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:17.036840 2026] [security2:error] [pid 1017536:tid 1017709] [client 34.7.40.70:7952] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/firebase-adminsdk.json"] [unique_id "apK9KSJcY4fy7tP-rU37WQAAAj8"]
[Sat Aug 29 05:06:17.036923 2026] [cgid:error] [pid 1017536:tid 1017706] [client 34.7.40.70:7918] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:17.037520 2026] [cgid:error] [pid 1017536:tid 1017669] [client 34.7.40.70:7884] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:17.037825 2026] [cgid:error] [pid 1018003:tid 1018185] [client 34.7.40.70:7976] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:17.038165 2026] [cgid:error] [pid 1017536:tid 1017698] [client 34.7.40.70:7808] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:17.038380 2026] [cgid:error] [pid 1018003:tid 1018263] [client 34.7.40.70:7906] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:17.038384 2026] [cgid:error] [pid 1018003:tid 1018230] [client 34.7.40.70:7894] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:17.038387 2026] [cgid:error] [pid 1017536:tid 1017737] [client 34.7.40.70:7936] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:17.038524 2026] [cgid:error] [pid 1018003:tid 1018251] [client 34.7.40.70:7940] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:17.038669 2026] [cgid:error] [pid 1017536:tid 1017707] [client 34.7.40.70:7834] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:17.039285 2026] [security2:error] [pid 1017536:tid 1017764] [client 20.196.209.81:19439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/global.php"] [unique_id "apK9KSJcY4fy7tP-rU37WwAAAnY"]
[Sat Aug 29 05:06:17.039422 2026] [cgid:error] [pid 1017536:tid 1017765] [client 34.7.40.70:7912] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:17.041218 2026] [cgid:error] [pid 1017536:tid 1017786] [client 34.7.40.70:7978] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:17.042228 2026] [cgid:error] [pid 1017536:tid 1017754] [client 34.7.40.70:7982] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:17.042666 2026] [cgid:error] [pid 1017536:tid 1017744] [client 34.7.40.70:7942] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:17.042858 2026] [cgid:error] [pid 1018003:tid 1018202] [client 34.7.40.70:7968] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:17.043327 2026] [security2:error] [pid 1017536:tid 1017713] [client 34.7.40.70:8016] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/.ssh/id_rsa"] [unique_id "apK9KSJcY4fy7tP-rU37YQAAAkM"]
[Sat Aug 29 05:06:17.043514 2026] [cgid:error] [pid 1017536:tid 1017777] [client 34.7.40.70:7922] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:17.044908 2026] [cgid:error] [pid 1017536:tid 1017722] [client 34.7.40.70:8006] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:17.045038 2026] [cgid:error] [pid 1018003:tid 1018182] [client 34.7.40.70:7998] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:17.045134 2026] [security2:error] [pid 1018003:tid 1018182] [client 34.7.40.70:7998] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/404.shtml"] [unique_id "apK9KTAh5Y1i2tUxg4HxHQAABdc"]
[Sat Aug 29 05:06:17.045875 2026] [cgid:error] [pid 1017536:tid 1017686] [client 34.7.40.70:8030] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:17.046077 2026] [cgid:error] [pid 1017536:tid 1017757] [client 34.7.40.70:8004] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:17.054927 2026] [cgid:error] [pid 1017536:tid 1017688] [client 34.7.40.70:8038] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:17.055254 2026] [security2:error] [pid 1018003:tid 1018191] [client 34.7.40.70:8048] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/.ssh/id_dsa"] [unique_id "apK9KTAh5Y1i2tUxg4HxHgAABeA"]
[Sat Aug 29 05:06:17.056506 2026] [security2:error] [pid 1017536:tid 1017731] [client 20.196.209.81:5612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-content/admin.php"] [unique_id "apK9KSJcY4fy7tP-rU37ZgAAAlU"]
[Sat Aug 29 05:06:17.057181 2026] [cgid:error] [pid 1017536:tid 1017753] [client 34.7.40.70:8050] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:17.060348 2026] [cgid:error] [pid 1017536:tid 1017715] [client 34.7.40.70:8062] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:17.067706 2026] [security2:error] [pid 1017536:tid 1017723] [client 195.178.110.247:45550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lbustersdrivingschool.com"] [uri "/index.php"] [unique_id "apK9KSJcY4fy7tP-rU37aAAAAk0"]
[Sat Aug 29 05:06:17.072764 2026] [security2:error] [pid 1017536:tid 1017773] [client 20.52.41.200:1259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/menu.php"] [unique_id "apK9KSJcY4fy7tP-rU37aQAAAn8"]
[Sat Aug 29 05:06:17.099990 2026] [security2:error] [pid 1017536:tid 1017747] [client 4.205.62.107:56037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/cp2.php"] [unique_id "apK9KSJcY4fy7tP-rU37agAAAmU"]
[Sat Aug 29 05:06:17.101636 2026] [security2:error] [pid 1017536:tid 1017691] [client 20.48.251.3:14057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/channels.php"] [unique_id "apK9KSJcY4fy7tP-rU37awAAAi0"]
[Sat Aug 29 05:06:17.109662 2026] [security2:error] [pid 1017536:tid 1017789] [client 52.139.37.240:12867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/wp-admin/wp-fileesx-449.php"] [unique_id "apK9KSJcY4fy7tP-rU37bAAAAo8"]
[Sat Aug 29 05:06:17.113233 2026] [security2:error] [pid 1017536:tid 1017729] [client 20.48.251.3:61066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/u88.php"] [unique_id "apK9KSJcY4fy7tP-rU37bQAAAlM"]
[Sat Aug 29 05:06:17.113775 2026] [security2:error] [pid 1018003:tid 1018194] [client 40.83.93.50:23494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-content/disagrsxr.php"] [unique_id "apK9KTAh5Y1i2tUxg4HxIAAABeM"]
[Sat Aug 29 05:06:17.125212 2026] [security2:error] [pid 1018003:tid 1018267] [client 158.23.184.117:1404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/xmlrpc.php"] [unique_id "apK9KTAh5Y1i2tUxg4HxHwAABis"]
[Sat Aug 29 05:06:17.139292 2026] [security2:error] [pid 1017536:tid 1017749] [client 20.220.204.93:63850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/gettest.php"] [unique_id "apK9KSJcY4fy7tP-rU37bgAAAmc"]
[Sat Aug 29 05:06:17.143095 2026] [security2:error] [pid 1017536:tid 1017761] [client 138.199.19.170:47958] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.sankomold.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "apK9KSJcY4fy7tP-rU37bwAAAnM"]
[Sat Aug 29 05:06:17.144271 2026] [security2:error] [pid 1018003:tid 1018233] [client 20.48.250.41:62527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/wp-blogs.php"] [unique_id "apK9KTAh5Y1i2tUxg4HxIQAABgk"]
[Sat Aug 29 05:06:17.147993 2026] [security2:error] [pid 1017536:tid 1017780] [client 158.158.54.35:22306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "apK9KSJcY4fy7tP-rU37cAAAAoY"]
[Sat Aug 29 05:06:17.157594 2026] [security2:error] [pid 1018003:tid 1018114] [remote 162.241.144.20:34468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.144.241.162.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.sitestage.biz"] [uri "/wp-login.php"] [unique_id "apK9KTAh5Y1i2tUxg4HxIgAGKl0"], referer: https://mail.sitestage.biz/wp-login.php
[Sat Aug 29 05:06:17.169209 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.63.81.20:60482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/admin.php/admin.php"] [unique_id "apK9KSJcY4fy7tP-rU37cgAAAlY"]
[Sat Aug 29 05:06:17.176152 2026] [security2:error] [pid 1017536:tid 1017711] [client 158.23.184.117:4852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/wp-content/plugins/alfa-rex.php"] [unique_id "apK9KSJcY4fy7tP-rU37cwAAAkE"]
[Sat Aug 29 05:06:17.190856 2026] [security2:error] [pid 1017536:tid 1017734] [client 20.48.250.41:64269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/num.php"] [unique_id "apK9KSJcY4fy7tP-rU37dAAAAlg"]
[Sat Aug 29 05:06:17.206851 2026] [security2:error] [pid 1017536:tid 1017775] [client 158.23.184.117:1388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/Radio.php"] [unique_id "apK9KSJcY4fy7tP-rU37dQAAAoE"]
[Sat Aug 29 05:06:17.236143 2026] [security2:error] [pid 1017536:tid 1017733] [client 68.155.159.216:16070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-content/uploads/about.php"] [unique_id "apK9KSJcY4fy7tP-rU37dgAAAlc"]
[Sat Aug 29 05:06:17.239216 2026] [security2:error] [pid 1017536:tid 1017672] [client 20.48.251.3:61657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/config/laravolt/css/index.php"] [unique_id "apK9KSJcY4fy7tP-rU37dwAAAho"]
[Sat Aug 29 05:06:17.244220 2026] [security2:error] [pid 1018003:tid 1018173] [client 40.83.93.50:9538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/OK.php"] [unique_id "apK9KTAh5Y1i2tUxg4HxJAAABc4"]
[Sat Aug 29 05:06:17.244276 2026] [security2:error] [pid 1017536:tid 1017745] [client 68.155.159.216:14154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/wp-content/packed.php"] [unique_id "apK9KSJcY4fy7tP-rU37eQAAAmM"]
[Sat Aug 29 05:06:17.249298 2026] [security2:error] [pid 1018003:tid 1018218] [client 68.155.159.216:51234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-mail.php"] [unique_id "apK9KTAh5Y1i2tUxg4HxJQAABfs"]
[Sat Aug 29 05:06:17.251813 2026] [security2:error] [pid 1018003:tid 1018207] [client 104.207.34.219:59029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.34.207.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK9KTAh5Y1i2tUxg4HxIwAABfA"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:06:17.262165 2026] [security2:error] [pid 1018003:tid 1018169] [client 20.197.61.180:17011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-content/cong.php"] [unique_id "apK9KTAh5Y1i2tUxg4HxJgAABco"]
[Sat Aug 29 05:06:17.267749 2026] [security2:error] [pid 1018003:tid 1018265] [client 158.23.184.117:1673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/app.php"] [unique_id "apK9KTAh5Y1i2tUxg4HxJwAABik"]
[Sat Aug 29 05:06:17.273551 2026] [security2:error] [pid 1017536:tid 1017737] [client 68.155.159.216:12263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/about.php"] [unique_id "apK9KSJcY4fy7tP-rU37fAAAAls"]
[Sat Aug 29 05:06:17.277872 2026] [security2:error] [pid 1017536:tid 1017707] [client 20.48.250.41:62486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/mini.php"] [unique_id "apK9KSJcY4fy7tP-rU37fQAAAj0"]
[Sat Aug 29 05:06:17.285591 2026] [security2:error] [pid 1017536:tid 1017786] [client 20.48.251.3:33332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/asdf.php"] [unique_id "apK9KSJcY4fy7tP-rU37fgAAAow"]
[Sat Aug 29 05:06:17.286746 2026] [security2:error] [pid 1018003:tid 1018273] [client 20.220.204.93:64348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/35.php"] [unique_id "apK9KTAh5Y1i2tUxg4HxKAAABjE"]
[Sat Aug 29 05:06:17.302613 2026] [security2:error] [pid 1018003:tid 1018219] [client 20.63.81.20:60460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/media.php"] [unique_id "apK9KTAh5Y1i2tUxg4HxKQAABfw"]
[Sat Aug 29 05:06:17.318133 2026] [security2:error] [pid 1017536:tid 1017686] [client 20.104.49.130:60986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/well.php"] [unique_id "apK9KSJcY4fy7tP-rU37gQAAAig"]
[Sat Aug 29 05:06:17.322126 2026] [security2:error] [pid 1017536:tid 1017709] [client 52.139.37.240:12534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/wp-content/themes/min.php"] [unique_id "apK9KSJcY4fy7tP-rU37ggAAAj8"]
[Sat Aug 29 05:06:17.328315 2026] [security2:error] [pid 1018003:tid 1018198] [client 192.145.125.70:48074] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "nicolaandstevenlochrane.strangeworx.com"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "apK9KTAh5Y1i2tUxg4HxKgAABec"]
[Sat Aug 29 05:06:17.344735 2026] [security2:error] [pid 1017536:tid 1017688] [client 68.155.159.216:50192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-mail.php"] [unique_id "apK9KSJcY4fy7tP-rU37gwAAAio"]
[Sat Aug 29 05:06:17.364816 2026] [security2:error] [pid 1018003:tid 1018213] [client 20.48.251.3:61219] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/87.php"] [unique_id "apK9KTAh5Y1i2tUxg4HxLQAABfY"]
[Sat Aug 29 05:06:17.371405 2026] [security2:error] [pid 1017536:tid 1017715] [client 168.107.94.195:62030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9KSJcY4fy7tP-rU37hQAAAkU"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:17.407293 2026] [security2:error] [pid 1017536:tid 1017773] [client 20.48.250.41:65045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/a4.php"] [unique_id "apK9KSJcY4fy7tP-rU37iAAAAn8"]
[Sat Aug 29 05:06:17.419205 2026] [security2:error] [pid 1017536:tid 1017760] [client 158.23.184.117:1676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/wp-includes/Requests/Exception/file.php"] [unique_id "apK9KSJcY4fy7tP-rU37iQAAAnI"]
[Sat Aug 29 05:06:17.422931 2026] [security2:error] [pid 1018003:tid 1018199] [client 158.23.184.117:1395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/aaa.php"] [unique_id "apK9KTAh5Y1i2tUxg4HxLgAABeg"]
[Sat Aug 29 05:06:17.432138 2026] [security2:error] [pid 1018003:tid 1018172] [client 20.63.81.20:60469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/mac.php"] [unique_id "apK9KTAh5Y1i2tUxg4HxLwAABc0"]
[Sat Aug 29 05:06:17.441754 2026] [security2:error] [pid 1017536:tid 1017681] [client 158.23.184.117:4836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/test.php"] [unique_id "apK9KSJcY4fy7tP-rU37igAAAiM"]
[Sat Aug 29 05:06:17.448022 2026] [security2:error] [pid 1018003:tid 1018167] [client 20.220.204.93:64973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/maraz.php"] [unique_id "apK9KTAh5Y1i2tUxg4HxMAAABcg"]
[Sat Aug 29 05:06:17.448441 2026] [security2:error] [pid 1018003:tid 1018264] [client 158.23.147.79:61610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK9KTAh5Y1i2tUxg4HxMQAABig"]
[Sat Aug 29 05:06:17.452198 2026] [security2:error] [pid 1018003:tid 1018174] [client 20.196.209.81:15076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-content/autoload_classmap.php"] [unique_id "apK9KTAh5Y1i2tUxg4HxMgAABc8"]
[Sat Aug 29 05:06:17.478793 2026] [security2:error] [pid 1017536:tid 1017687] [client 68.155.159.216:51416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/cong.php"] [unique_id "apK9KSJcY4fy7tP-rU37jAAAAik"]
[Sat Aug 29 05:06:17.479609 2026] [security2:error] [pid 1017536:tid 1017770] [client 20.48.250.41:60680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/amp.php"] [unique_id "apK9KSJcY4fy7tP-rU37jQAAAnw"]
[Sat Aug 29 05:06:17.483130 2026] [security2:error] [pid 1017536:tid 1017743] [client 138.199.19.170:47964] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpcalendars.sankomold.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "apK9KSJcY4fy7tP-rU37jwAAAmE"]
[Sat Aug 29 05:06:17.491683 2026] [security2:error] [pid 1017536:tid 1017789] [client 20.48.251.3:61200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/plss3.php"] [unique_id "apK9KSJcY4fy7tP-rU37kAAAAo8"]
[Sat Aug 29 05:06:17.499700 2026] [security2:error] [pid 1018003:tid 1018276] [client 158.23.147.79:58067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-includes/content.php"] [unique_id "apK9KTAh5Y1i2tUxg4HxNAAABjQ"]
[Sat Aug 29 05:06:17.514269 2026] [security2:error] [pid 1017536:tid 1017741] [client 52.139.37.240:12877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/wp-content/themes/x/bypass.php"] [unique_id "apK9KSJcY4fy7tP-rU37kQAAAl8"]
[Sat Aug 29 05:06:17.516858 2026] [security2:error] [pid 1017536:tid 1017778] [client 20.52.41.200:1268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK9KSJcY4fy7tP-rU37kgAAAoQ"]
[Sat Aug 29 05:06:17.532042 2026] [security2:error] [pid 1018003:tid 1018184] [client 20.196.209.81:16739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/update.php"] [unique_id "apK9KTAh5Y1i2tUxg4HxNQAABdk"]
[Sat Aug 29 05:06:17.532488 2026] [security2:error] [pid 1018003:tid 1018252] [client 195.178.110.155:40816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 155.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "new.greathairkc.com"] [uri "/index.php"] [unique_id "apK9KTAh5Y1i2tUxg4HxNgAABhw"]
[Sat Aug 29 05:06:17.543278 2026] [security2:error] [pid 1017536:tid 1017780] [client 20.48.250.41:64317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/tfm.php"] [unique_id "apK9KSJcY4fy7tP-rU37kwAAAoY"]
[Sat Aug 29 05:06:17.565618 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.63.81.20:56870] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/1.php"] [unique_id "apK9KSJcY4fy7tP-rU37lAAAAnk"]
[Sat Aug 29 05:06:17.565682 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.63.81.20:56870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/1.php"] [unique_id "apK9KSJcY4fy7tP-rU37lAAAAnk"]
[Sat Aug 29 05:06:17.581348 2026] [security2:error] [pid 1017536:tid 1017785] [client 40.83.93.50:22244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-content/f35.php"] [unique_id "apK9KSJcY4fy7tP-rU37lQAAAos"]
[Sat Aug 29 05:06:17.586902 2026] [security2:error] [pid 1017536:tid 1017761] [client 158.23.184.117:4488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/wp-includes/mani.php"] [unique_id "apK9KSJcY4fy7tP-rU37lgAAAnM"]
[Sat Aug 29 05:06:17.602104 2026] [security2:error] [pid 1018003:tid 1018255] [client 158.23.147.79:24473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/goat1.php"] [unique_id "apK9KTAh5Y1i2tUxg4HxNwAABh8"]
[Sat Aug 29 05:06:17.616022 2026] [security2:error] [pid 1017536:tid 1017683] [client 20.48.251.3:61085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/aws.php"] [unique_id "apK9KSJcY4fy7tP-rU37lwAAAiU"]
[Sat Aug 29 05:06:17.626776 2026] [security2:error] [pid 1017536:tid 1017694] [client 20.48.250.41:60684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/cc13.php"] [unique_id "apK9KSJcY4fy7tP-rU37mAAAAjA"]
[Sat Aug 29 05:06:17.648682 2026] [security2:error] [pid 1018003:tid 1018186] [client 20.48.251.3:13997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/hochladen.form.php"] [unique_id "apK9KTAh5Y1i2tUxg4HxOQAABds"]
[Sat Aug 29 05:06:17.676854 2026] [security2:error] [pid 1017536:tid 1017721] [client 158.23.184.117:1669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/hehe.php"] [unique_id "apK9KSJcY4fy7tP-rU37mwAAAks"]
[Sat Aug 29 05:06:17.681180 2026] [security2:error] [pid 1017536:tid 1017748] [client 158.23.184.117:60888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/wp-admin/add.php"] [unique_id "apK9KSJcY4fy7tP-rU37nAAAAmY"]
[Sat Aug 29 05:06:17.688384 2026] [security2:error] [pid 1017536:tid 1017719] [client 20.48.250.41:65139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/Geforce.php"] [unique_id "apK9KSJcY4fy7tP-rU37nQAAAkk"]
[Sat Aug 29 05:06:17.692469 2026] [security2:error] [pid 1017536:tid 1017689] [client 20.63.81.20:60473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/classwithtostring.php"] [unique_id "apK9KSJcY4fy7tP-rU37ngAAAis"]
[Sat Aug 29 05:06:17.730005 2026] [security2:error] [pid 1017536:tid 1017705] [client 158.23.184.117:4825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/wp-includes/Test.php"] [unique_id "apK9KSJcY4fy7tP-rU37oAAAAjs"]
[Sat Aug 29 05:06:17.734697 2026] [security2:error] [pid 1018003:tid 1018269] [client 158.23.147.79:50056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK9KTAh5Y1i2tUxg4HxOgAABi0"]
[Sat Aug 29 05:06:17.740975 2026] [security2:error] [pid 1018003:tid 1018189] [client 20.48.251.3:3359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/app.default.php"] [unique_id "apK9KTAh5Y1i2tUxg4HxOwAABd4"]
[Sat Aug 29 05:06:17.749939 2026] [security2:error] [pid 1018003:tid 1018161] [client 168.107.94.195:62513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9KTAh5Y1i2tUxg4HxPAAABcI"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:17.761684 2026] [security2:error] [pid 1017536:tid 1017790] [client 20.48.250.41:60706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/aa.php"] [unique_id "apK9KSJcY4fy7tP-rU37ogAAApA"]
[Sat Aug 29 05:06:17.766445 2026] [security2:error] [pid 1018003:tid 1018203] [client 4.205.62.107:22407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/ws79.php"] [unique_id "apK9KTAh5Y1i2tUxg4HxPwAABew"]
[Sat Aug 29 05:06:17.775736 2026] [security2:error] [pid 1017536:tid 1017760] [client 52.139.37.240:12876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK9KSJcY4fy7tP-rU37owAAAnI"]
[Sat Aug 29 05:06:17.788520 2026] [security2:error] [pid 1017536:tid 1017704] [client 40.83.93.50:8000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonandgerry.strangeworx.com"] [uri "/aaa.php"] [unique_id "apK9KSJcY4fy7tP-rU37pQAAAjo"]
[Sat Aug 29 05:06:17.813462 2026] [security2:error] [pid 1017536:tid 1017691] [client 4.205.62.107:22270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/wp-content/plugin-install.php"] [unique_id "apK9KSJcY4fy7tP-rU37pgAAAi0"]
[Sat Aug 29 05:06:17.819157 2026] [security2:error] [pid 1018003:tid 1018271] [client 65.111.20.69:40203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.20.111.65.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK9KTAh5Y1i2tUxg4HxQAAABi8"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:06:17.824028 2026] [security2:error] [pid 1017536:tid 1017769] [client 158.23.147.79:48395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9KSJcY4fy7tP-rU37pwAAAns"]
[Sat Aug 29 05:06:17.824885 2026] [security2:error] [pid 1018003:tid 1018230] [client 20.48.251.3:13832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/pouhg.php"] [unique_id "apK9KTAh5Y1i2tUxg4HxQQAABgY"]
[Sat Aug 29 05:06:17.827933 2026] [security2:error] [pid 1017536:tid 1017741] [client 4.205.62.107:26624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/groceries/index.php"] [unique_id "apK9KSJcY4fy7tP-rU37qAAAAl8"]
[Sat Aug 29 05:06:17.829543 2026] [security2:error] [pid 1017536:tid 1017780] [client 20.63.81.20:60422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/wp-ws68.php"] [unique_id "apK9KSJcY4fy7tP-rU37qQAAAoY"]
[Sat Aug 29 05:06:17.829560 2026] [security2:error] [pid 1017536:tid 1017687] [client 158.23.184.117:1399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/wp-content/upgrade/alfanew.php7"] [unique_id "apK9KSJcY4fy7tP-rU37qgAAAik"]
[Sat Aug 29 05:06:17.832070 2026] [security2:error] [pid 1017536:tid 1017696] [client 158.23.184.117:60867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/wp-includes/assets/about.php"] [unique_id "apK9KSJcY4fy7tP-rU37qwAAAjI"]
[Sat Aug 29 05:06:17.840517 2026] [security2:error] [pid 1017536:tid 1017694] [client 20.48.250.41:65129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/click.php"] [unique_id "apK9KSJcY4fy7tP-rU37rAAAAjA"]
[Sat Aug 29 05:06:17.844423 2026] [security2:error] [pid 1018003:tid 1018193] [client 20.196.209.81:5593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-content/cache/min/1/wp-content/admin.php"] [unique_id "apK9KTAh5Y1i2tUxg4HxQgAABeI"]
[Sat Aug 29 05:06:17.864225 2026] [security2:error] [pid 1017536:tid 1017775] [client 20.220.204.93:65012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/kbfr.php"] [unique_id "apK9KSJcY4fy7tP-rU37rQAAAoE"]
[Sat Aug 29 05:06:17.868405 2026] [security2:error] [pid 1017536:tid 1017721] [client 20.48.251.3:62089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/app_local.php"] [unique_id "apK9KSJcY4fy7tP-rU37rgAAAks"]
[Sat Aug 29 05:06:17.876827 2026] [security2:error] [pid 1017536:tid 1017749] [client 158.23.184.117:4835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/wp-includes/pomo.php"] [unique_id "apK9KSJcY4fy7tP-rU37rwAAAmc"]
[Sat Aug 29 05:06:17.902399 2026] [security2:error] [pid 1018003:tid 1018171] [client 158.158.54.35:18672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-content/admin.php"] [unique_id "apK9KTAh5Y1i2tUxg4HxQwAABcw"]
[Sat Aug 29 05:06:17.912452 2026] [security2:error] [pid 1018003:tid 1018235] [client 192.145.125.70:48088] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "nicolaandstevenlochrane.strangeworx.com"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "apK9KTAh5Y1i2tUxg4HxRAAABgs"]
[Sat Aug 29 05:06:17.921779 2026] [security2:error] [pid 1017536:tid 1017737] [client 68.155.159.216:24574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/ws.php"] [unique_id "apK9KSJcY4fy7tP-rU37sAAAAls"]
[Sat Aug 29 05:06:17.934955 2026] [security2:error] [pid 1017536:tid 1017713] [client 20.104.49.130:51131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/1xmomo.php"] [unique_id "apK9KSJcY4fy7tP-rU37sQAAAkM"]
[Sat Aug 29 05:06:17.936862 2026] [security2:error] [pid 1017536:tid 1017786] [client 20.48.250.41:62561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/s1.php"] [unique_id "apK9KSJcY4fy7tP-rU37sgAAAow"]
[Sat Aug 29 05:06:17.952592 2026] [security2:error] [pid 1017536:tid 1017686] [client 158.23.147.79:30595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK9KSJcY4fy7tP-rU37swAAAig"]
[Sat Aug 29 05:06:17.965953 2026] [security2:error] [pid 1017536:tid 1017668] [client 20.196.209.81:19400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/blog.php"] [unique_id "apK9KSJcY4fy7tP-rU37tAAAAhY"]
[Sat Aug 29 05:06:17.976210 2026] [security2:error] [pid 1017536:tid 1017688] [client 20.63.81.20:60465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/simple.php"] [unique_id "apK9KSJcY4fy7tP-rU37tQAAAio"]
[Sat Aug 29 05:06:17.978952 2026] [security2:error] [pid 1017536:tid 1017765] [client 158.23.184.117:1722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/wp-content/themes/twentytwentythree.php"] [unique_id "apK9KSJcY4fy7tP-rU37twAAAnc"]
[Sat Aug 29 05:06:17.980822 2026] [security2:error] [pid 1017536:tid 1017753] [client 68.155.159.216:49161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-admin/about.php"] [unique_id "apK9KSJcY4fy7tP-rU37uAAAAms"]
[Sat Aug 29 05:06:17.982699 2026] [cgid:error] [pid 1017536:tid 1017789] [client 20.52.41.200:1217] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/cpslggc/404.shtml
[Sat Aug 29 05:06:17.983443 2026] [security2:error] [pid 1018003:tid 1018226] [client 52.139.37.240:12538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/wp-info.php"] [unique_id "apK9KTAh5Y1i2tUxg4HxRQAABgM"]
[Sat Aug 29 05:06:17.984741 2026] [security2:error] [pid 1018003:tid 1018188] [client 87.199.194.213:60580] ModSecurity: Access denied with code 406 (phase 1). IPmatchFromFile: "87.199.194.213" matched at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1090"] [id "999022"] [msg "Blacklisted IP Address for POST data StopForumSpam List"] [hostname "www.theverystuff.com"] [uri "/wp-comments-post.php"] [unique_id "apK9KTAh5Y1i2tUxg4HxRgAABd0"], referer: https://www.theverystuff.com/the-clarity-of-love/
[Sat Aug 29 05:06:17.984811 2026] [security2:error] [pid 1018003:tid 1018188] [client 87.199.194.213:60580] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "406"] [hostname "www.theverystuff.com"] [uri "/wp-comments-post.php"] [unique_id "apK9KTAh5Y1i2tUxg4HxRgAABd0"], referer: https://www.theverystuff.com/the-clarity-of-love/
[Sat Aug 29 05:06:17.985684 2026] [security2:error] [pid 1017536:tid 1017707] [client 158.23.184.117:1721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/admin/alfa-rex.php"] [unique_id "apK9KSJcY4fy7tP-rU37uQAAAj0"]
[Sat Aug 29 05:06:17.990209 2026] [security2:error] [pid 1017536:tid 1017788] [client 20.197.61.180:5831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-content/content.php"] [unique_id "apK9KSJcY4fy7tP-rU37ugAAAo4"]
[Sat Aug 29 05:06:17.997028 2026] [security2:error] [pid 1018003:tid 1018263] [client 34.21.253.104:16988] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "cpanel.replenishink.com"] [uri "/v1/graphql"] [unique_id "apK9KTAh5Y1i2tUxg4HxRwAABic"]
[Sat Aug 29 05:06:17.998039 2026] [security2:error] [pid 1017536:tid 1017746] [client 20.48.251.3:61191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/ws62.php"] [unique_id "apK9KSJcY4fy7tP-rU37vQAAAmQ"]
[Sat Aug 29 05:06:17.999586 2026] [security2:error] [pid 1018003:tid 1018169] [client 20.220.204.93:64968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/wp-act.php"] [unique_id "apK9KTAh5Y1i2tUxg4HxSAAABco"]
[Sat Aug 29 05:06:18.005055 2026] [proxy_http:error] [pid 1017536:tid 1017729] (20014)Internal error (specific information not available): [client 34.21.253.104:17028] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:18.005067 2026] [proxy:error] [pid 1017536:tid 1017729] [client 34.21.253.104:17028] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/.hermes/.env
[Sat Aug 29 05:06:18.011086 2026] [proxy_http:error] [pid 1017536:tid 1017712] (20014)Internal error (specific information not available): [client 34.21.253.104:17018] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:18.011123 2026] [proxy:error] [pid 1017536:tid 1017712] [client 34.21.253.104:17018] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/.anthropic/config.json
[Sat Aug 29 05:06:18.011301 2026] [security2:error] [pid 1018003:tid 1018259] [client 20.48.251.3:14049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/product.php"] [unique_id "apK9KjAh5Y1i2tUxg4HxTgAABiM"]
[Sat Aug 29 05:06:18.012073 2026] [proxy_http:error] [pid 1018003:tid 1018164] (20014)Internal error (specific information not available): [client 34.21.253.104:16976] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:18.012085 2026] [proxy:error] [pid 1018003:tid 1018164] [client 34.21.253.104:16976] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/actuator/mappings
[Sat Aug 29 05:06:18.013697 2026] [security2:error] [pid 1017536:tid 1017706] [client 20.48.250.41:64287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/ms.php"] [unique_id "apK9KiJcY4fy7tP-rU37zAAAAjw"]
[Sat Aug 29 05:06:18.015787 2026] [security2:error] [pid 1018003:tid 1018265] [client 68.155.159.216:9343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/file88.php"] [unique_id "apK9KjAh5Y1i2tUxg4HxVAAABik"]
[Sat Aug 29 05:06:18.018165 2026] [security2:error] [pid 1017536:tid 1017790] [client 4.205.62.107:8973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/cp2.php"] [unique_id "apK9KiJcY4fy7tP-rU370AAAApA"]
[Sat Aug 29 05:06:18.019496 2026] [proxy_http:error] [pid 1018003:tid 1018170] (20014)Internal error (specific information not available): [client 34.21.253.104:16962] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:18.019514 2026] [proxy:error] [pid 1018003:tid 1018170] [client 34.21.253.104:16962] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/graphql
[Sat Aug 29 05:06:18.025808 2026] [proxy_http:error] [pid 1018003:tid 1018164] (20014)Internal error (specific information not available): [client 34.21.253.104:16976] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:18.025820 2026] [proxy:error] [pid 1018003:tid 1018164] [client 34.21.253.104:16976] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/502.shtml
[Sat Aug 29 05:06:18.026883 2026] [security2:error] [pid 1017536:tid 1017695] [client 195.178.110.155:40818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 155.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "new.greathairkc.com"] [uri "/index.php"] [unique_id "apK9KiJcY4fy7tP-rU370wAAAjE"]
[Sat Aug 29 05:06:18.030014 2026] [security2:error] [pid 1017536:tid 1017674] [client 158.23.147.79:25569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/goat.php"] [unique_id "apK9KiJcY4fy7tP-rU371AAAAhw"]
[Sat Aug 29 05:06:18.031970 2026] [proxy_http:error] [pid 1018003:tid 1018233] (20014)Internal error (specific information not available): [client 34.21.253.104:17098] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:18.031988 2026] [proxy:error] [pid 1018003:tid 1018233] [client 34.21.253.104:17098] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/.claude/settings.json
[Sat Aug 29 05:06:18.032602 2026] [proxy_http:error] [pid 1017536:tid 1017675] (20014)Internal error (specific information not available): [client 34.21.253.104:16910] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:18.032615 2026] [proxy:error] [pid 1017536:tid 1017675] [client 34.21.253.104:16910] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/docker-compose.yaml
[Sat Aug 29 05:06:18.038427 2026] [proxy_http:error] [pid 1018003:tid 1018266] (20014)Internal error (specific information not available): [client 34.21.253.104:17126] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:18.038439 2026] [proxy:error] [pid 1018003:tid 1018266] [client 34.21.253.104:17126] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/__env.js
[Sat Aug 29 05:06:18.039830 2026] [proxy_http:error] [pid 1017536:tid 1017717] (20014)Internal error (specific information not available): [client 34.21.253.104:17046] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:18.039845 2026] [proxy:error] [pid 1017536:tid 1017717] [client 34.21.253.104:17046] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/.hermes/auth.json
[Sat Aug 29 05:06:18.043807 2026] [proxy_http:error] [pid 1018003:tid 1018170] (20014)Internal error (specific information not available): [client 34.21.253.104:16962] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:18.043819 2026] [proxy:error] [pid 1018003:tid 1018170] [client 34.21.253.104:16962] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/502.shtml
[Sat Aug 29 05:06:18.046026 2026] [proxy_http:error] [pid 1017536:tid 1017751] (20014)Internal error (specific information not available): [client 34.21.253.104:17194] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:18.046040 2026] [proxy:error] [pid 1017536:tid 1017751] [client 34.21.253.104:17194] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/.vite/manifest.json
[Sat Aug 29 05:06:18.058006 2026] [proxy_http:error] [pid 1017536:tid 1017785] (20014)Internal error (specific information not available): [client 34.21.253.104:17086] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:18.058021 2026] [proxy:error] [pid 1017536:tid 1017785] [client 34.21.253.104:17086] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/.openclaw/openclaw.json
[Sat Aug 29 05:06:18.059707 2026] [security2:error] [pid 1018003:tid 1018198] [client 158.23.147.79:35716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/file5.php"] [unique_id "apK9KjAh5Y1i2tUxg4HxVwAABec"]
[Sat Aug 29 05:06:18.062989 2026] [proxy_http:error] [pid 1017536:tid 1017793] (20014)Internal error (specific information not available): [client 34.21.253.104:17186] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:18.063000 2026] [proxy:error] [pid 1017536:tid 1017793] [client 34.21.253.104:17186] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/.env.js
[Sat Aug 29 05:06:18.063508 2026] [security2:error] [pid 1017536:tid 1017736] [client 40.83.93.50:5925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-content/index.php"] [unique_id "apK9KiJcY4fy7tP-rU371QAAAlo"]
[Sat Aug 29 05:06:18.083554 2026] [security2:error] [pid 1017536:tid 1017687] [client 20.48.250.41:60762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/0byte.php"] [unique_id "apK9KiJcY4fy7tP-rU371wAAAik"]
[Sat Aug 29 05:06:18.085420 2026] [security2:error] [pid 1017536:tid 1017696] [client 158.23.147.79:30716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-admin/images/about.php"] [unique_id "apK9KiJcY4fy7tP-rU372AAAAjI"]
[Sat Aug 29 05:06:18.094557 2026] [security2:error] [pid 1017536:tid 1017673] [client 158.23.147.79:32711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/makeasmtp.php"] [unique_id "apK9KiJcY4fy7tP-rU372QAAAhs"]
[Sat Aug 29 05:06:18.118347 2026] [security2:error] [pid 1017536:tid 1017776] [client 20.63.81.20:60449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/aaa.php"] [unique_id "apK9KiJcY4fy7tP-rU372gAAAoI"]
[Sat Aug 29 05:06:18.126628 2026] [security2:error] [pid 1017536:tid 1017705] [client 20.48.251.3:61231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/grsiuk.php"] [unique_id "apK9KiJcY4fy7tP-rU373AAAAjs"]
[Sat Aug 29 05:06:18.130438 2026] [security2:error] [pid 1017536:tid 1017737] [client 168.107.94.195:63076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9KiJcY4fy7tP-rU373gAAAls"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:18.133805 2026] [security2:error] [pid 1017536:tid 1017777] [client 20.52.41.200:1217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/lite.php"] [unique_id "apK9KiJcY4fy7tP-rU374AAAAoM"]
[Sat Aug 29 05:06:18.139779 2026] [security2:error] [pid 1018003:tid 1018270] [client 158.23.184.117:4843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/wp-admin/link-add.php"] [unique_id "apK9KjAh5Y1i2tUxg4HxXQAABi4"]
[Sat Aug 29 05:06:18.143176 2026] [security2:error] [pid 1017536:tid 1017686] [client 4.205.62.107:22316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/public/bnn_.php.php"] [unique_id "apK9KiJcY4fy7tP-rU374QAAAig"]
[Sat Aug 29 05:06:18.151887 2026] [security2:error] [pid 1017536:tid 1017721] [client 158.23.184.117:1698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/wp-content/export.php"] [unique_id "apK9KiJcY4fy7tP-rU374gAAAks"]
[Sat Aug 29 05:06:18.155913 2026] [security2:error] [pid 1017536:tid 1017792] [client 158.23.147.79:26603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/simple.php"] [unique_id "apK9KiJcY4fy7tP-rU375AAAApI"]
[Sat Aug 29 05:06:18.159864 2026] [security2:error] [pid 1018003:tid 1018192] [client 20.48.250.41:64343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/zxekqlxb.php"] [unique_id "apK9KjAh5Y1i2tUxg4HxXwAABeE"]
[Sat Aug 29 05:06:18.166487 2026] [security2:error] [pid 1017536:tid 1017746] [client 35.198.240.194:14848] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.omni-staffing.com"] [uri "/cgi-sys/404.html"] [unique_id "apK9KiJcY4fy7tP-rU376wAAAmQ"]
[Sat Aug 29 05:06:18.166683 2026] [security2:error] [pid 1017536:tid 1017723] [client 35.198.240.194:14864] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.omni-staffing.com"] [uri "/cgi-sys/404.html"] [unique_id "apK9KiJcY4fy7tP-rU377gAAAk0"]
[Sat Aug 29 05:06:18.166850 2026] [security2:error] [pid 1017536:tid 1017752] [client 35.198.240.194:14896] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.omni-staffing.com"] [uri "/cgi-sys/404.html"] [unique_id "apK9KiJcY4fy7tP-rU377wAAAmo"]
[Sat Aug 29 05:06:18.171242 2026] [security2:error] [pid 1017536:tid 1017778] [client 20.220.204.93:64371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/24.php"] [unique_id "apK9KiJcY4fy7tP-rU378AAAAoQ"]
[Sat Aug 29 05:06:18.174019 2026] [security2:error] [pid 1018003:tid 1018256] [client 158.23.184.117:60886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/wp-content/languages/themes/num.php"] [unique_id "apK9KjAh5Y1i2tUxg4HxZAAABiA"]
[Sat Aug 29 05:06:18.176240 2026] [security2:error] [pid 1018003:tid 1018236] [client 52.139.37.240:12889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/wp-wordfence-waf.php"] [unique_id "apK9KjAh5Y1i2tUxg4HxZQAABgw"]
[Sat Aug 29 05:06:18.178976 2026] [security2:error] [pid 1018003:tid 1018255] [client 20.48.251.3:13831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/fun.php"] [unique_id "apK9KjAh5Y1i2tUxg4HxZwAABh8"]
[Sat Aug 29 05:06:18.184145 2026] [proxy_http:error] [pid 1017536:tid 1017710] (20014)Internal error (specific information not available): [client 34.21.253.104:16896] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:18.184159 2026] [proxy:error] [pid 1017536:tid 1017710] [client 34.21.253.104:16896] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/docker-compose.yml
[Sat Aug 29 05:06:18.201317 2026] [security2:error] [pid 1017536:tid 1017714] [client 35.198.240.194:15004] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/client/.env"] [unique_id "apK9KiJcY4fy7tP-rU379QAAAkQ"]
[Sat Aug 29 05:06:18.206428 2026] [security2:error] [pid 1017536:tid 1017678] [client 35.198.240.194:15038] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/staging/.env"] [unique_id "apK9KiJcY4fy7tP-rU37-AAAAiA"]
[Sat Aug 29 05:06:18.208114 2026] [security2:error] [pid 1017536:tid 1017704] [client 35.198.240.194:15070] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.omni-staffing.com"] [uri "/cgi-sys/404.html"] [unique_id "apK9KiJcY4fy7tP-rU379wAAAjo"]
[Sat Aug 29 05:06:18.208218 2026] [security2:error] [pid 1017536:tid 1017743] [client 35.198.240.194:15060] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.omni-staffing.com"] [uri "/.github/workflows/deploy.yml"] [unique_id "apK9KiJcY4fy7tP-rU37-gAAAmE"]
[Sat Aug 29 05:06:18.209826 2026] [security2:error] [pid 1017536:tid 1017724] [client 35.198.240.194:15086] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.omni-staffing.com"] [uri "/cgi-sys/404.html"] [unique_id "apK9KiJcY4fy7tP-rU37-QAAAk4"]
[Sat Aug 29 05:06:18.211219 2026] [security2:error] [pid 1017536:tid 1017747] [client 35.198.240.194:15022] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/production/.env"] [unique_id "apK9KiJcY4fy7tP-rU37_AAAAmU"]
[Sat Aug 29 05:06:18.211583 2026] [security2:error] [pid 1017536:tid 1017769] [client 35.198.240.194:15008] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/backup/.env"] [unique_id "apK9KiJcY4fy7tP-rU37_QAAAns"]
[Sat Aug 29 05:06:18.212035 2026] [security2:error] [pid 1017536:tid 1017773] [client 35.198.240.194:15032] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/dev/.env"] [unique_id "apK9KiJcY4fy7tP-rU37_gAAAn8"]
[Sat Aug 29 05:06:18.236315 2026] [security2:error] [pid 1017536:tid 1017705] [client 4.205.62.107:55971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/xda.php"] [unique_id "apK9KiJcY4fy7tP-rU38AwAAAjs"]
[Sat Aug 29 05:06:18.245103 2026] [security2:error] [pid 1018003:tid 1018174] [client 20.196.209.81:5631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-content/classwithtostring.php"] [unique_id "apK9KjAh5Y1i2tUxg4HxbQAABc8"]
[Sat Aug 29 05:06:18.253117 2026] [security2:error] [pid 1017536:tid 1017757] [client 20.48.250.41:62561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/xr.php"] [unique_id "apK9KiJcY4fy7tP-rU38BgAAAm8"]
[Sat Aug 29 05:06:18.256802 2026] [security2:error] [pid 1018003:tid 1018249] [client 20.48.251.3:61105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/paypal.php"] [unique_id "apK9KjAh5Y1i2tUxg4HxbgAABhk"]
[Sat Aug 29 05:06:18.284845 2026] [security2:error] [pid 1017536:tid 1017698] [client 158.23.184.117:4483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/wp-includes/Text.php"] [unique_id "apK9KiJcY4fy7tP-rU38CAAAAjQ"]
[Sat Aug 29 05:06:18.286323 2026] [core:error] [pid 1017536:tid 1017765] [client 45.148.10.166:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:18.286338 2026] [core:error] [pid 1017536:tid 1017765] [client 45.148.10.166:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:18.295773 2026] [security2:error] [pid 1017536:tid 1017786] [client 158.23.184.117:60908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/new.php"] [unique_id "apK9KiJcY4fy7tP-rU38CQAAAow"]
[Sat Aug 29 05:06:18.317339 2026] [security2:error] [pid 1017536:tid 1017731] [client 20.48.250.41:65100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/init.php"] [unique_id "apK9KiJcY4fy7tP-rU38CgAAAlU"]
[Sat Aug 29 05:06:18.319250 2026] [security2:error] [pid 1017536:tid 1017792] [client 158.23.184.117:1703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/wp.php"] [unique_id "apK9KiJcY4fy7tP-rU38DAAAApI"]
[Sat Aug 29 05:06:18.351367 2026] [security2:error] [pid 1017536:tid 1017770] [client 104.207.44.232:24045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.44.207.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK9KiJcY4fy7tP-rU38EAAAAnw"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:06:18.354213 2026] [security2:error] [pid 1017536:tid 1017760] [client 68.155.159.216:16335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-admin/maint/index.php"] [unique_id "apK9KiJcY4fy7tP-rU38FAAAAnI"]
[Sat Aug 29 05:06:18.363204 2026] [security2:error] [pid 1017536:tid 1017722] [client 52.139.37.240:12868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/ws49.php"] [unique_id "apK9KiJcY4fy7tP-rU38FQAAAkw"]
[Sat Aug 29 05:06:18.374403 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.48.251.3:14280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/kedi.php"] [unique_id "apK9KiJcY4fy7tP-rU38GAAAAh0"]
[Sat Aug 29 05:06:18.377166 2026] [security2:error] [pid 1017536:tid 1017777] [client 20.196.209.81:19410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/bypass.php"] [unique_id "apK9KiJcY4fy7tP-rU38GgAAAoM"]
[Sat Aug 29 05:06:18.380428 2026] [security2:error] [pid 1017536:tid 1017748] [client 158.158.54.35:6227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-configs.php"] [unique_id "apK9KiJcY4fy7tP-rU38GwAAAmY"]
[Sat Aug 29 05:06:18.381318 2026] [security2:error] [pid 1017536:tid 1017785] [client 20.48.251.3:61207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/userfuns.php"] [unique_id "apK9KiJcY4fy7tP-rU38HAAAAos"]
[Sat Aug 29 05:06:18.383825 2026] [security2:error] [pid 1017536:tid 1017793] [client 20.220.204.93:64940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/155.php"] [unique_id "apK9KiJcY4fy7tP-rU38HQAAApM"]
[Sat Aug 29 05:06:18.386255 2026] [security2:error] [pid 1018003:tid 1018269] [client 68.155.159.216:12180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK9KjAh5Y1i2tUxg4HxcwAABi0"]
[Sat Aug 29 05:06:18.405783 2026] [security2:error] [pid 1017536:tid 1017680] [client 20.63.81.20:56898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/shiny.php"] [unique_id "apK9KiJcY4fy7tP-rU38HwAAAiI"]
[Sat Aug 29 05:06:18.408816 2026] [security2:error] [pid 1017536:tid 1017704] [client 20.48.250.41:60688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/h02ugyh.php"] [unique_id "apK9KiJcY4fy7tP-rU38IAAAAjo"]
[Sat Aug 29 05:06:18.412821 2026] [security2:error] [pid 1017536:tid 1017724] [client 20.104.49.130:63431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.danesquality.com"] [uri "/Jcrop.php"] [unique_id "apK9KiJcY4fy7tP-rU38IQAAAk4"]
[Sat Aug 29 05:06:18.457815 2026] [security2:error] [pid 1017536:tid 1017712] [client 158.23.184.117:1717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/wp-content/plugins/revslider/admin.php"] [unique_id "apK9KiJcY4fy7tP-rU38JAAAAkI"]
[Sat Aug 29 05:06:18.462931 2026] [security2:error] [pid 1017536:tid 1017747] [client 158.23.184.117:60871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/xmlrpc.php"] [unique_id "apK9KiJcY4fy7tP-rU38JQAAAmU"]
[Sat Aug 29 05:06:18.480946 2026] [security2:error] [pid 1017536:tid 1017775] [client 20.48.250.41:64279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/term.php"] [unique_id "apK9KiJcY4fy7tP-rU38JgAAAoE"]
[Sat Aug 29 05:06:18.504343 2026] [security2:error] [pid 1017536:tid 1017736] [client 192.145.125.70:48102] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "nicolaandstevenlochrane.strangeworx.com"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "apK9KiJcY4fy7tP-rU38KAAAAlo"]
[Sat Aug 29 05:06:18.506456 2026] [security2:error] [pid 1017536:tid 1017707] [client 20.48.251.3:61098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/mamzi.php"] [unique_id "apK9KiJcY4fy7tP-rU38KQAAAj0"]
[Sat Aug 29 05:06:18.510384 2026] [security2:error] [pid 1017536:tid 1017721] [client 168.107.94.195:63475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9KiJcY4fy7tP-rU38KgAAAks"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:18.523785 2026] [security2:error] [pid 1017536:tid 1017709] [client 20.48.251.3:14011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/oc460l3x.php"] [unique_id "apK9KiJcY4fy7tP-rU38LAAAAj8"]
[Sat Aug 29 05:06:18.531698 2026] [security2:error] [pid 1017536:tid 1017751] [client 158.23.184.117:4487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/wp-trackback.php"] [unique_id "apK9KiJcY4fy7tP-rU38LQAAAmk"]
[Sat Aug 29 05:06:18.532290 2026] [security2:error] [pid 1018003:tid 1018156] [client 40.83.93.50:5895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-content/install.php"] [unique_id "apK9KjAh5Y1i2tUxg4HxdgAABb0"]
[Sat Aug 29 05:06:18.539738 2026] [security2:error] [pid 1017536:tid 1017698] [client 20.63.81.20:56950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/goods.php"] [unique_id "apK9KiJcY4fy7tP-rU38LgAAAjQ"]
[Sat Aug 29 05:06:18.552417 2026] [security2:error] [pid 1017536:tid 1017786] [client 158.23.147.79:54351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK9KiJcY4fy7tP-rU38LwAAAow"]
[Sat Aug 29 05:06:18.553447 2026] [security2:error] [pid 1017536:tid 1017744] [client 52.139.37.240:12502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/xxx.php"] [unique_id "apK9KiJcY4fy7tP-rU38MAAAAmI"]
[Sat Aug 29 05:06:18.577433 2026] [security2:error] [pid 1017536:tid 1017773] [client 20.52.41.200:1220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/term.php"] [unique_id "apK9KiJcY4fy7tP-rU38MQAAAn8"]
[Sat Aug 29 05:06:18.600422 2026] [security2:error] [pid 1017536:tid 1017731] [client 114.119.135.182:54131] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.classiclightingusa.com"] [uri "/catalog/product_info.php/cPath/4/products_id/948/action/notify/osCsid/f6d9065f9a23bae493264dcebafa97ba"] [unique_id "apK9KiJcY4fy7tP-rU38NAAAAlU"], referer: http://www.classiclightingusa.com/catalog/product_info.php/cPath/4/products_id/948/osCsid/f6d9065f9a23bae493264dcebafa97ba
[Sat Aug 29 05:06:18.602629 2026] [security2:error] [pid 1017536:tid 1017792] [client 20.48.250.41:62511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/xxw.php"] [unique_id "apK9KiJcY4fy7tP-rU38NQAAApI"]
[Sat Aug 29 05:06:18.603626 2026] [security2:error] [pid 1017536:tid 1017746] [client 158.23.184.117:1688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/wp-content/images/uploads/admin.php"] [unique_id "apK9KiJcY4fy7tP-rU38NgAAAmQ"]
[Sat Aug 29 05:06:18.610183 2026] [security2:error] [pid 1018003:tid 1018225] [client 87.199.194.213:60625] ModSecurity: Access denied with code 406 (phase 1). IPmatchFromFile: "87.199.194.213" matched at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1090"] [id "999022"] [msg "Blacklisted IP Address for POST data StopForumSpam List"] [hostname "www.theverystuff.com"] [uri "/wp-comments-post.php"] [unique_id "apK9KjAh5Y1i2tUxg4HxdwAABgI"], referer: https://www.theverystuff.com/the-clarity-of-love/
[Sat Aug 29 05:06:18.610261 2026] [security2:error] [pid 1018003:tid 1018225] [client 87.199.194.213:60625] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "406"] [hostname "www.theverystuff.com"] [uri "/wp-comments-post.php"] [unique_id "apK9KjAh5Y1i2tUxg4HxdwAABgI"], referer: https://www.theverystuff.com/the-clarity-of-love/
[Sat Aug 29 05:06:18.615928 2026] [security2:error] [pid 1017536:tid 1017745] [client 20.48.250.41:65064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/aaa.php"] [unique_id "apK9KiJcY4fy7tP-rU38OAAAAmM"]
[Sat Aug 29 05:06:18.618336 2026] [security2:error] [pid 1018003:tid 1018197] [client 158.23.147.79:62718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-admin/css/index.php"] [unique_id "apK9KjAh5Y1i2tUxg4HxeAAABeY"]
[Sat Aug 29 05:06:18.620169 2026] [security2:error] [pid 1017536:tid 1017790] [client 158.23.184.117:60875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/app.php"] [unique_id "apK9KiJcY4fy7tP-rU38OQAAApA"]
[Sat Aug 29 05:06:18.640139 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.48.251.3:3331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/public/rip.php.php"] [unique_id "apK9KjAh5Y1i2tUxg4HxeQAABcI"]
[Sat Aug 29 05:06:18.653658 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.104.49.130:60969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/forum.php"] [unique_id "apK9KiJcY4fy7tP-rU38PAAAAh0"]
[Sat Aug 29 05:06:18.666470 2026] [security2:error] [pid 1017536:tid 1017688] [client 20.196.209.81:5621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-content/config.php"] [unique_id "apK9KiJcY4fy7tP-rU38PgAAAio"]
[Sat Aug 29 05:06:18.670739 2026] [security2:error] [pid 1017536:tid 1017748] [client 20.63.81.20:60521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/000.php/index.php"] [unique_id "apK9KiJcY4fy7tP-rU38PwAAAmY"]
[Sat Aug 29 05:06:18.676959 2026] [security2:error] [pid 1017536:tid 1017691] [client 158.23.184.117:4647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/wp-admin/maint.php"] [unique_id "apK9KiJcY4fy7tP-rU38QAAAAi0"]
[Sat Aug 29 05:06:18.712583 2026] [security2:error] [pid 1017536:tid 1017694] [client 20.197.61.180:5870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-content/core.php"] [unique_id "apK9KiJcY4fy7tP-rU38QQAAAjA"]
[Sat Aug 29 05:06:18.722690 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.48.251.3:14069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/wp-info.php"] [unique_id "apK9KiJcY4fy7tP-rU38QgAAAnk"]
[Sat Aug 29 05:06:18.734069 2026] [security2:error] [pid 1017536:tid 1017706] [client 158.23.147.79:24502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK9KiJcY4fy7tP-rU38QwAAAjw"]
[Sat Aug 29 05:06:18.745879 2026] [security2:error] [pid 1017536:tid 1017686] [client 20.48.250.41:64373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/xsox.php"] [unique_id "apK9KiJcY4fy7tP-rU38RAAAAig"]
[Sat Aug 29 05:06:18.753309 2026] [security2:error] [pid 1017536:tid 1017714] [client 158.23.184.117:1699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/tools.php"] [unique_id "apK9KiJcY4fy7tP-rU38RQAAAkQ"]
[Sat Aug 29 05:06:18.768584 2026] [security2:error] [pid 1017536:tid 1017749] [client 20.48.251.3:62104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/environment.php"] [unique_id "apK9KiJcY4fy7tP-rU38RgAAAmc"]
[Sat Aug 29 05:06:18.768668 2026] [security2:error] [pid 1018003:tid 1018258] [client 52.139.37.240:12887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/0x.php"] [unique_id "apK9KjAh5Y1i2tUxg4HxegAABiI"]
[Sat Aug 29 05:06:18.787945 2026] [security2:error] [pid 1017536:tid 1017687] [client 158.23.184.117:1706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/aaa.php"] [unique_id "apK9KiJcY4fy7tP-rU38RwAAAik"]
[Sat Aug 29 05:06:18.800763 2026] [security2:error] [pid 1017536:tid 1017709] [client 20.63.81.20:56899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/Jcrop.php"] [unique_id "apK9KiJcY4fy7tP-rU38SgAAAj8"]
[Sat Aug 29 05:06:18.823417 2026] [security2:error] [pid 1017536:tid 1017757] [client 158.23.184.117:4496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/wp-includes/num.php"] [unique_id "apK9KiJcY4fy7tP-rU38TwAAAm8"]
[Sat Aug 29 05:06:18.863245 2026] [security2:error] [pid 1017536:tid 1017770] [client 20.196.209.81:4463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/extractable-loader-head.php"] [unique_id "apK9KiJcY4fy7tP-rU38UQAAAnw"]
[Sat Aug 29 05:06:18.864303 2026] [security2:error] [pid 1017536:tid 1017740] [client 158.158.54.35:29419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-includes/index.php"] [unique_id "apK9KiJcY4fy7tP-rU38UgAAAl4"]
[Sat Aug 29 05:06:18.866787 2026] [security2:error] [pid 1017536:tid 1017753] [client 20.48.251.3:33308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/fns.php"] [unique_id "apK9KiJcY4fy7tP-rU38UwAAAms"]
[Sat Aug 29 05:06:18.867970 2026] [security2:error] [pid 1017536:tid 1017781] [client 68.155.159.216:33789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK9KiJcY4fy7tP-rU38VAAAAoc"]
[Sat Aug 29 05:06:18.867994 2026] [security2:error] [pid 1017536:tid 1017731] [client 20.48.250.41:59337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/bolt.php"] [unique_id "apK9KiJcY4fy7tP-rU38VQAAAlU"]
[Sat Aug 29 05:06:18.868462 2026] [security2:error] [pid 1017536:tid 1017680] [client 104.207.44.219:19717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.44.207.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK9KiJcY4fy7tP-rU38UAAAAiI"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:06:18.871248 2026] [security2:error] [pid 1017536:tid 1017734] [client 68.155.159.216:51561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/cgi-bin/index.php"] [unique_id "apK9KiJcY4fy7tP-rU38VgAAAlg"]
[Sat Aug 29 05:06:18.895070 2026] [security2:error] [pid 1018003:tid 1018173] [client 168.107.94.195:63959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9KjAh5Y1i2tUxg4HxfQAABc4"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:18.897072 2026] [security2:error] [pid 1017536:tid 1017711] [client 20.48.251.3:62103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/aws_secret_config.php"] [unique_id "apK9KiJcY4fy7tP-rU38VwAAAkE"]
[Sat Aug 29 05:06:18.897436 2026] [security2:error] [pid 1017536:tid 1017752] [client 158.23.184.117:1691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/wp-content/uploads/my.php"] [unique_id "apK9KiJcY4fy7tP-rU38WAAAAmo"]
[Sat Aug 29 05:06:18.899057 2026] [security2:error] [pid 1017536:tid 1017776] [client 68.155.159.216:14190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/wp-l0gin.php"] [unique_id "apK9KiJcY4fy7tP-rU38WQAAAoI"]
[Sat Aug 29 05:06:18.903352 2026] [security2:error] [pid 1017536:tid 1017745] [client 4.205.62.107:22353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/sys.php"] [unique_id "apK9KiJcY4fy7tP-rU38WgAAAmM"]
[Sat Aug 29 05:06:18.926723 2026] [security2:error] [pid 1018003:tid 1018265] [client 20.48.250.41:64380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/lkui.php"] [unique_id "apK9KjAh5Y1i2tUxg4HxfgAABik"]
[Sat Aug 29 05:06:18.932507 2026] [security2:error] [pid 1017536:tid 1017785] [client 158.23.147.79:48326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/content.php"] [unique_id "apK9KiJcY4fy7tP-rU38WwAAAos"]
[Sat Aug 29 05:06:18.943943 2026] [security2:error] [pid 1018003:tid 1018267] [client 20.63.81.20:60510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/35iDq8NAjLu.php"] [unique_id "apK9KjAh5Y1i2tUxg4HxgAAABis"]
[Sat Aug 29 05:06:18.945637 2026] [security2:error] [pid 1018003:tid 1018194] [client 20.151.200.44:46639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/ztv.php"] [unique_id "apK9KjAh5Y1i2tUxg4HxgQAABeM"]
[Sat Aug 29 05:06:18.950308 2026] [security2:error] [pid 1018003:tid 1018160] [client 4.205.62.107:22263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/paypal.php"] [unique_id "apK9KjAh5Y1i2tUxg4HxggAABcE"]
[Sat Aug 29 05:06:18.952038 2026] [security2:error] [pid 1018003:tid 1018170] [client 20.104.49.130:46565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/v2.php"] [unique_id "apK9KjAh5Y1i2tUxg4HxgwAABcs"]
[Sat Aug 29 05:06:18.956461 2026] [security2:error] [pid 1018003:tid 1018233] [client 68.155.159.216:50306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/cgi-bin/index.php"] [unique_id "apK9KjAh5Y1i2tUxg4HxhAAABgk"]
[Sat Aug 29 05:06:18.962555 2026] [security2:error] [pid 1018003:tid 1018266] [client 158.23.147.79:49846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK9KjAh5Y1i2tUxg4HxhQAABio"]
[Sat Aug 29 05:06:18.962556 2026] [security2:error] [pid 1017536:tid 1017737] [client 52.139.37.240:12539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/CDX1.php"] [unique_id "apK9KiJcY4fy7tP-rU38XQAAAls"]
[Sat Aug 29 05:06:18.962984 2026] [security2:error] [pid 1017536:tid 1017769] [client 4.205.62.107:26626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/konfig.php"] [unique_id "apK9KiJcY4fy7tP-rU38XgAAAns"]
[Sat Aug 29 05:06:18.971784 2026] [security2:error] [pid 1018003:tid 1018259] [client 158.23.184.117:4823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/identity.php"] [unique_id "apK9KjAh5Y1i2tUxg4HxhgAABiM"]
[Sat Aug 29 05:06:18.987327 2026] [security2:error] [pid 1018003:tid 1018190] [client 158.23.184.117:1686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/hehe.php"] [unique_id "apK9KjAh5Y1i2tUxg4HxhwAABd8"]
[Sat Aug 29 05:06:19.021110 2026] [security2:error] [pid 1017536:tid 1017707] [client 20.48.250.41:60716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/rtx.php"] [unique_id "apK9KyJcY4fy7tP-rU38YAAAAj0"]
[Sat Aug 29 05:06:19.025056 2026] [security2:error] [pid 1018003:tid 1018184] [client 68.155.159.216:24539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-includes/css/index.php"] [unique_id "apK9KzAh5Y1i2tUxg4HxiAAABdk"]
[Sat Aug 29 05:06:19.026274 2026] [security2:error] [pid 1017536:tid 1017751] [client 20.48.251.3:61684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/snq.php"] [unique_id "apK9KyJcY4fy7tP-rU38YQAAAmk"]
[Sat Aug 29 05:06:19.030467 2026] [security2:error] [pid 1017536:tid 1017770] [client 20.48.251.3:14277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/gjm.php"] [unique_id "apK9KyJcY4fy7tP-rU38YwAAAnw"]
[Sat Aug 29 05:06:19.030682 2026] [security2:error] [pid 1017536:tid 1017672] [client 20.52.41.200:1219] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/config.php"] [unique_id "apK9KyJcY4fy7tP-rU38ZAAAAho"]
[Sat Aug 29 05:06:19.040515 2026] [autoindex:error] [pid 1017536:tid 1017761] [client 40.83.93.50:12445] AH01276: Cannot serve directory /home1/termoenv/public_html/wp-content/languages/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:06:19.043280 2026] [security2:error] [pid 1017536:tid 1017713] [client 158.23.184.117:60870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/wp-includes/themes/uploads/config.php"] [unique_id "apK9KyJcY4fy7tP-rU38ZQAAAkM"]
[Sat Aug 29 05:06:19.058289 2026] [security2:error] [pid 1017536:tid 1017688] [client 20.48.250.41:65037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "apK9KyJcY4fy7tP-rU38ZgAAAio"]
[Sat Aug 29 05:06:19.060494 2026] [security2:error] [pid 1017536:tid 1017695] [client 20.196.209.81:23620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-content/cong.php"] [unique_id "apK9KyJcY4fy7tP-rU38ZwAAAjE"]
[Sat Aug 29 05:06:19.066927 2026] [security2:error] [pid 1018003:tid 1018236] [client 158.23.147.79:30587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK9KzAh5Y1i2tUxg4HxiQAABgw"]
[Sat Aug 29 05:06:19.077519 2026] [security2:error] [pid 1017536:tid 1017777] [client 20.63.81.20:56905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/btx25.php"] [unique_id "apK9KyJcY4fy7tP-rU38aAAAAoM"]
[Sat Aug 29 05:06:19.104687 2026] [security2:error] [pid 1018003:tid 1018193] [client 192.145.125.70:48112] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "nicolaandstevenlochrane.strangeworx.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "apK9KzAh5Y1i2tUxg4HxigAABeI"]
[Sat Aug 29 05:06:19.133345 2026] [security2:error] [pid 1017536:tid 1017717] [client 158.23.184.117:55509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/wp-includes/PHPMailer.php"] [unique_id "apK9KyJcY4fy7tP-rU38agAAAkc"]
[Sat Aug 29 05:06:19.140626 2026] [security2:error] [pid 1018003:tid 1018169] [client 62.60.130.128:59489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.130.60.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "xyzece.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "apK9KzAh5Y1i2tUxg4HxjAAABco"]
[Sat Aug 29 05:06:19.144790 2026] [security2:error] [pid 1018003:tid 1018155] [client 68.155.159.216:52756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/NewFile.php/"] [unique_id "apK9KzAh5Y1i2tUxg4HxjQAABbw"]
[Sat Aug 29 05:06:19.151144 2026] [security2:error] [pid 1017536:tid 1017714] [client 158.23.147.79:25536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK9KyJcY4fy7tP-rU38bAAAAkQ"]
[Sat Aug 29 05:06:19.155295 2026] [security2:error] [pid 1017536:tid 1017747] [client 20.48.251.3:62142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/wp-access.php"] [unique_id "apK9KyJcY4fy7tP-rU38bQAAAmU"]
[Sat Aug 29 05:06:19.165594 2026] [security2:error] [pid 1017536:tid 1017775] [client 158.23.147.79:35803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/file88.php"] [unique_id "apK9KyJcY4fy7tP-rU38cAAAAoE"]
[Sat Aug 29 05:06:19.168277 2026] [security2:error] [pid 1017536:tid 1017743] [client 158.23.184.117:4519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/Radio.php"] [unique_id "apK9KyJcY4fy7tP-rU38cwAAAmE"]
[Sat Aug 29 05:06:19.170734 2026] [security2:error] [pid 1017536:tid 1017732] [client 4.205.62.107:8992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/error_log.php"] [unique_id "apK9KyJcY4fy7tP-rU38dAAAAlY"]
[Sat Aug 29 05:06:19.175008 2026] [security2:error] [pid 1017536:tid 1017673] [client 20.48.250.41:62488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/ckk.php"] [unique_id "apK9KyJcY4fy7tP-rU38dQAAAhs"]
[Sat Aug 29 05:06:19.180994 2026] [security2:error] [pid 1017536:tid 1017767] [client 52.139.37.240:12873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/akcc.php"] [unique_id "apK9KyJcY4fy7tP-rU38dgAAAnk"]
[Sat Aug 29 05:06:19.183685 2026] [security2:error] [pid 1017536:tid 1017706] [client 158.23.184.117:55511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/av.php"] [unique_id "apK9KyJcY4fy7tP-rU38dwAAAjw"]
[Sat Aug 29 05:06:19.187113 2026] [security2:error] [pid 1018003:tid 1018167] [client 20.151.200.44:46654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/kure.php"] [unique_id "apK9KzAh5Y1i2tUxg4HxjgAABcg"]
[Sat Aug 29 05:06:19.199953 2026] [security2:error] [pid 1018003:tid 1018206] [client 20.48.251.3:14001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/configuration.php"] [unique_id "apK9KzAh5Y1i2tUxg4HxjwAABe8"]
[Sat Aug 29 05:06:19.203553 2026] [security2:error] [pid 1017536:tid 1017757] [client 40.83.93.50:12445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-content/languages/about.php"] [unique_id "apK9KyJcY4fy7tP-rU38eQAAAm8"]
[Sat Aug 29 05:06:19.221785 2026] [security2:error] [pid 1018003:tid 1018174] [client 20.48.250.41:64318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/motu.php"] [unique_id "apK9KzAh5Y1i2tUxg4HxkQAABc8"]
[Sat Aug 29 05:06:19.222345 2026] [security2:error] [pid 1017536:tid 1017740] [client 20.63.81.20:56895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/radio.php"] [unique_id "apK9KyJcY4fy7tP-rU38ewAAAl4"]
[Sat Aug 29 05:06:19.274845 2026] [security2:error] [pid 1017536:tid 1017729] [client 168.107.94.195:64330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9KyJcY4fy7tP-rU38fgAAAlM"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:19.279662 2026] [security2:error] [pid 1017536:tid 1017781] [client 158.23.184.117:60896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/wp-content/upgrade/alfanew.php7"] [unique_id "apK9KyJcY4fy7tP-rU38fwAAAoc"]
[Sat Aug 29 05:06:19.282569 2026] [security2:error] [pid 1017536:tid 1017790] [client 20.48.251.3:62110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/otuz1.php"] [unique_id "apK9KyJcY4fy7tP-rU38gAAAApA"]
[Sat Aug 29 05:06:19.282867 2026] [security2:error] [pid 1017536:tid 1017760] [client 4.205.62.107:22487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/wsws.php"] [unique_id "apK9KyJcY4fy7tP-rU38gQAAAnI"]
[Sat Aug 29 05:06:19.308546 2026] [security2:error] [pid 1017536:tid 1017749] [client 158.158.54.35:33022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-admin/a.php"] [unique_id "apK9KyJcY4fy7tP-rU38gwAAAmc"]
[Sat Aug 29 05:06:19.328029 2026] [security2:error] [pid 1017536:tid 1017789] [client 20.196.209.81:4439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/defaults.php"] [unique_id "apK9KyJcY4fy7tP-rU38hQAAAo8"]
[Sat Aug 29 05:06:19.361123 2026] [security2:error] [pid 1018003:tid 1018156] [client 20.48.250.41:59351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.harnessmeasurement.com"] [uri "/R57.php"] [unique_id "apK9KzAh5Y1i2tUxg4HxlQAABb0"]
[Sat Aug 29 05:06:19.364406 2026] [security2:error] [pid 1017536:tid 1017674] [client 20.63.81.20:60522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/dex.php"] [unique_id "apK9KyJcY4fy7tP-rU38hgAAAhw"]
[Sat Aug 29 05:06:19.366644 2026] [security2:error] [pid 1018003:tid 1018225] [client 158.23.184.117:4845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/wp-includes/Requests/Exception/file.php"] [unique_id "apK9KzAh5Y1i2tUxg4HxlgAABgI"]
[Sat Aug 29 05:06:19.383178 2026] [security2:error] [pid 1017536:tid 1017704] [client 4.205.62.107:53273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/pinfo.php"] [unique_id "apK9KyJcY4fy7tP-rU38hwAAAjo"]
[Sat Aug 29 05:06:19.390828 2026] [security2:error] [pid 1017536:tid 1017785] [client 52.139.37.240:12875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK9KyJcY4fy7tP-rU38iAAAAos"]
[Sat Aug 29 05:06:19.399219 2026] [security2:error] [pid 1018003:tid 1018245] [client 158.23.184.117:55501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/wp-includes/ID3/file.php"] [unique_id "apK9KzAh5Y1i2tUxg4HxlwAABhU"]
[Sat Aug 29 05:06:19.402529 2026] [security2:error] [pid 1017536:tid 1017721] [client 20.48.250.41:65062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/Ov-Simple1.php"] [unique_id "apK9KyJcY4fy7tP-rU38jwAAAks"]
[Sat Aug 29 05:06:19.410050 2026] [security2:error] [pid 1017536:tid 1017681] [client 20.48.251.3:61102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/update.php"] [unique_id "apK9KyJcY4fy7tP-rU38lAAAAiM"]
[Sat Aug 29 05:06:19.416231 2026] [security2:error] [pid 1018003:tid 1018152] [client 20.197.61.180:5339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-content/db-status.php"] [unique_id "apK9KzAh5Y1i2tUxg4HxmwAABbk"]
[Sat Aug 29 05:06:19.424963 2026] [security2:error] [pid 1017536:tid 1017668] [client 158.23.184.117:60901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/admin/alfa-rex.php"] [unique_id "apK9KyJcY4fy7tP-rU38lgAAAhY"]
[Sat Aug 29 05:06:19.428180 2026] [security2:error] [pid 1017536:tid 1017686] [client 20.48.251.3:13973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/cu.php"] [unique_id "apK9KyJcY4fy7tP-rU38mAAAAig"]
[Sat Aug 29 05:06:19.429573 2026] [security2:error] [pid 1018003:tid 1018261] [client 216.26.251.131:17561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 131.251.26.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK9KzAh5Y1i2tUxg4HxmgAABiU"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:06:19.430474 2026] [core:error] [pid 1017536:tid 1017712] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.430489 2026] [core:error] [pid 1017536:tid 1017712] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.434398 2026] [security2:error] [pid 1017536:tid 1017587] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK9KyJcY4fy7tP-rU38mwACfzI"]
[Sat Aug 29 05:06:19.434795 2026] [core:error] [pid 1017536:tid 1017775] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.434804 2026] [core:error] [pid 1017536:tid 1017775] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.434838 2026] [core:error] [pid 1017536:tid 1017743] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.434846 2026] [core:error] [pid 1017536:tid 1017743] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.438106 2026] [core:error] [pid 1017536:tid 1017732] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.438121 2026] [core:error] [pid 1017536:tid 1017732] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.447895 2026] [security2:error] [pid 1018003:tid 1018239] [client 68.155.159.216:16329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/dropdown.php"] [unique_id "apK9KzAh5Y1i2tUxg4HxnAAABg8"]
[Sat Aug 29 05:06:19.460053 2026] [core:error] [pid 1018003:tid 1018230] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.460068 2026] [core:error] [pid 1018003:tid 1018230] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.462224 2026] [security2:error] [pid 1017536:tid 1017736] [client 68.155.159.216:56887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK9KyJcY4fy7tP-rU38oAAAAlo"]
[Sat Aug 29 05:06:19.470199 2026] [security2:error] [pid 1018003:tid 1018189] [client 20.52.41.200:1409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK9KzAh5Y1i2tUxg4HxngAABd4"]
[Sat Aug 29 05:06:19.479732 2026] [security2:error] [pid 1017536:tid 1017780] [client 20.220.204.93:64363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/file.php"] [unique_id "apK9KyJcY4fy7tP-rU38oQAAAoY"]
[Sat Aug 29 05:06:19.483249 2026] [security2:error] [pid 1018003:tid 1018242] [client 20.196.209.81:5196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-content/content.php"] [unique_id "apK9KzAh5Y1i2tUxg4HxoAAABhI"]
[Sat Aug 29 05:06:19.486787 2026] [security2:error] [pid 1017536:tid 1017745] [client 68.155.159.216:12131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/themes.php"] [unique_id "apK9KyJcY4fy7tP-rU38owAAAmM"]
[Sat Aug 29 05:06:19.488291 2026] [core:error] [pid 1017536:tid 1017746] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.488302 2026] [core:error] [pid 1017536:tid 1017746] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.498084 2026] [security2:error] [pid 1017536:tid 1017790] [client 20.151.200.44:45995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/cafe.php"] [unique_id "apK9KyJcY4fy7tP-rU38pgAAApA"]
[Sat Aug 29 05:06:19.498283 2026] [core:error] [pid 1017536:tid 1017713] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.498292 2026] [core:error] [pid 1017536:tid 1017713] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.501717 2026] [security2:error] [pid 1017536:tid 1017722] [client 20.63.81.20:60439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/giodywky.php"] [unique_id "apK9KyJcY4fy7tP-rU38pwAAAkw"]
[Sat Aug 29 05:06:19.514767 2026] [security2:error] [pid 1018003:tid 1018231] [client 20.63.81.20:46876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9KzAh5Y1i2tUxg4HxogAABgc"]
[Sat Aug 29 05:06:19.525966 2026] [security2:error] [pid 1017536:tid 1017710] [client 20.151.200.44:64920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/mega.php"] [unique_id "apK9KyJcY4fy7tP-rU38qQAAAkA"]
[Sat Aug 29 05:06:19.538638 2026] [security2:error] [pid 1017536:tid 1017694] [client 20.48.251.3:61236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/channels.php"] [unique_id "apK9KyJcY4fy7tP-rU38qgAAAjA"]
[Sat Aug 29 05:06:19.542546 2026] [security2:error] [pid 1017536:tid 1017729] [client 158.23.184.117:60893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "acrylic-alchemy.allgooddays.org"] [uri "/wp-admin/css/fff.php"] [unique_id "apK9KyJcY4fy7tP-rU38qwAAAlM"]
[Sat Aug 29 05:06:19.550634 2026] [security2:error] [pid 1017536:tid 1017664] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK9KyJcY4fy7tP-rU38swACX38"]
[Sat Aug 29 05:06:19.552902 2026] [core:error] [pid 1017536:tid 1017606] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.552925 2026] [core:error] [pid 1017536:tid 1017606] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.557538 2026] [security2:error] [pid 1017536:tid 1017737] [client 158.23.184.117:4831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/wp-admin/add.php"] [unique_id "apK9KyJcY4fy7tP-rU38uAAAAls"]
[Sat Aug 29 05:06:19.560714 2026] [security2:error] [pid 1017536:tid 1017757] [client 158.23.147.79:26458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-admin/about.php"] [unique_id "apK9KyJcY4fy7tP-rU38uQAAAm8"]
[Sat Aug 29 05:06:19.568919 2026] [security2:error] [pid 1017536:tid 1017691] [client 158.23.184.117:55513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/wp-content/export.php"] [unique_id "apK9KyJcY4fy7tP-rU38ugAAAi0"]
[Sat Aug 29 05:06:19.570765 2026] [security2:error] [pid 1017536:tid 1017751] [client 20.48.250.41:65059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/wp-blogs.php"] [unique_id "apK9KyJcY4fy7tP-rU38uwAAAmk"]
[Sat Aug 29 05:06:19.573699 2026] [core:error] [pid 1017536:tid 1017723] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.573714 2026] [core:error] [pid 1017536:tid 1017723] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.576944 2026] [core:error] [pid 1017536:tid 1017770] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.576959 2026] [core:error] [pid 1017536:tid 1017770] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.579781 2026] [core:error] [pid 1017536:tid 1017672] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.579794 2026] [core:error] [pid 1017536:tid 1017672] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.580774 2026] [core:error] [pid 1018003:tid 1018160] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.580796 2026] [core:error] [pid 1018003:tid 1018160] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.583733 2026] [core:error] [pid 1018003:tid 1018233] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.583745 2026] [core:error] [pid 1018003:tid 1018233] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.586772 2026] [security2:error] [pid 1017536:tid 1017793] [client 52.139.37.240:12880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/s.php"] [unique_id "apK9KyJcY4fy7tP-rU38wAAAApM"]
[Sat Aug 29 05:06:19.589223 2026] [security2:error] [pid 1017536:tid 1017541] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/.docker/.env"] [unique_id "apK9KyJcY4fy7tP-rU38wQACXwQ"]
[Sat Aug 29 05:06:19.601995 2026] [security2:error] [pid 1017536:tid 1017563] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/.docker/laravel/app/.env"] [unique_id "apK9KyJcY4fy7tP-rU38xQACXxo"]
[Sat Aug 29 05:06:19.603323 2026] [core:error] [pid 1017536:tid 1017604] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.603336 2026] [core:error] [pid 1017536:tid 1017604] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.613915 2026] [security2:error] [pid 1017536:tid 1017722] [client 68.155.159.216:51494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-includes/js/index.php"] [unique_id "apK9KyJcY4fy7tP-rU38xgAAAkw"]
[Sat Aug 29 05:06:19.621785 2026] [core:error] [pid 1017536:tid 1017724] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.621799 2026] [core:error] [pid 1017536:tid 1017724] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.633860 2026] [core:error] [pid 1017536:tid 1017550] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.633872 2026] [core:error] [pid 1017536:tid 1017550] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.639542 2026] [security2:error] [pid 1018003:tid 1018240] [client 20.63.81.20:60433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/wp-kz.php"] [unique_id "apK9KzAh5Y1i2tUxg4HxrAAABhA"]
[Sat Aug 29 05:06:19.641577 2026] [security2:error] [pid 1017536:tid 1017694] [client 20.63.81.20:46962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9KyJcY4fy7tP-rU38zQAAAjA"]
[Sat Aug 29 05:06:19.653218 2026] [core:error] [pid 1017536:tid 1017729] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.653229 2026] [core:error] [pid 1017536:tid 1017729] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.654727 2026] [security2:error] [pid 1017536:tid 1017696] [client 168.107.94.195:64669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9KyJcY4fy7tP-rU380AAAAjI"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:19.668830 2026] [security2:error] [pid 1018003:tid 1018180] [client 20.48.251.3:61188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/zz.php"] [unique_id "apK9KzAh5Y1i2tUxg4HxrgAABdU"]
[Sat Aug 29 05:06:19.673945 2026] [security2:error] [pid 1018003:tid 1018200] [client 40.83.93.50:22220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-content/languages/chosen.php"] [unique_id "apK9KzAh5Y1i2tUxg4HxrwAABek"]
[Sat Aug 29 05:06:19.675395 2026] [security2:error] [pid 1017536:tid 1017757] [client 158.23.147.79:53762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/chosen.php"] [unique_id "apK9KyJcY4fy7tP-rU380QAAAm8"]
[Sat Aug 29 05:06:19.700762 2026] [security2:error] [pid 1017536:tid 1017748] [client 192.145.125.70:48118] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "nicolaandstevenlochrane.strangeworx.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "apK9KyJcY4fy7tP-rU380gAAAmY"]
[Sat Aug 29 05:06:19.715590 2026] [security2:error] [pid 1017536:tid 1017583] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK9KyJcY4fy7tP-rU381AACKi4"]
[Sat Aug 29 05:06:19.716164 2026] [security2:error] [pid 1018003:tid 1018268] [client 20.48.250.41:64351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/mini.php"] [unique_id "apK9KzAh5Y1i2tUxg4HxtwAABiw"]
[Sat Aug 29 05:06:19.717291 2026] [security2:error] [pid 1018003:tid 1018179] [client 158.23.184.117:60914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/new.php"] [unique_id "apK9KzAh5Y1i2tUxg4HxuAAABdQ"]
[Sat Aug 29 05:06:19.725988 2026] [security2:error] [pid 1017536:tid 1017778] [client 20.196.209.81:4434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/post.php"] [unique_id "apK9KyJcY4fy7tP-rU382gAAAoQ"]
[Sat Aug 29 05:06:19.727052 2026] [security2:error] [pid 1017536:tid 1017552] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/.env.backup"] [unique_id "apK9KyJcY4fy7tP-rU382wACKg8"]
[Sat Aug 29 05:06:19.730427 2026] [security2:error] [pid 1018003:tid 1018216] [client 158.23.184.117:4512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/wp-includes/assets/about.php"] [unique_id "apK9KzAh5Y1i2tUxg4HxuwAABfk"]
[Sat Aug 29 05:06:19.732992 2026] [security2:error] [pid 1017536:tid 1017600] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/.env.bak"] [unique_id "apK9KyJcY4fy7tP-rU383AACKj8"]
[Sat Aug 29 05:06:19.742707 2026] [security2:error] [pid 1018003:tid 1018255] [client 158.23.147.79:63009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK9KzAh5Y1i2tUxg4HxvQAABh8"]
[Sat Aug 29 05:06:19.747073 2026] [core:error] [pid 1018003:tid 1018183] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.747093 2026] [core:error] [pid 1018003:tid 1018183] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.766197 2026] [security2:error] [pid 1018003:tid 1018244] [client 20.63.81.20:56911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/wp-includes/ID3/getid.php"] [unique_id "apK9KzAh5Y1i2tUxg4HxvwAABhQ"]
[Sat Aug 29 05:06:19.770606 2026] [core:error] [pid 1017536:tid 1017789] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.770623 2026] [core:error] [pid 1017536:tid 1017789] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.783673 2026] [core:error] [pid 1018003:tid 1018221] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.783689 2026] [core:error] [pid 1018003:tid 1018221] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.787055 2026] [core:error] [pid 1017536:tid 1017675] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.787069 2026] [core:error] [pid 1017536:tid 1017675] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.787717 2026] [core:error] [pid 1018003:tid 1018273] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.787730 2026] [core:error] [pid 1018003:tid 1018273] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.790009 2026] [security2:error] [pid 1017536:tid 1017694] [client 20.63.81.20:44481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/ap.php"] [unique_id "apK9KyJcY4fy7tP-rU387wAAAjA"]
[Sat Aug 29 05:06:19.791619 2026] [core:error] [pid 1017536:tid 1017689] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.791632 2026] [core:error] [pid 1017536:tid 1017689] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.794223 2026] [security2:error] [pid 1018003:tid 1018276] [client 52.139.37.240:12874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/sagax.php"] [unique_id "apK9KzAh5Y1i2tUxg4HxxQAABjQ"]
[Sat Aug 29 05:06:19.817100 2026] [core:error] [pid 1017536:tid 1017769] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.817115 2026] [core:error] [pid 1017536:tid 1017769] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.817536 2026] [core:error] [pid 1017536:tid 1017696] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.817551 2026] [core:error] [pid 1017536:tid 1017696] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.818398 2026] [core:error] [pid 1017536:tid 1017720] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.818414 2026] [core:error] [pid 1017536:tid 1017720] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.830870 2026] [core:error] [pid 1017536:tid 1017751] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.830885 2026] [core:error] [pid 1017536:tid 1017751] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.843006 2026] [core:error] [pid 1018003:tid 1018261] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.843021 2026] [core:error] [pid 1018003:tid 1018261] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.849154 2026] [security2:error] [pid 1017536:tid 1017770] [client 158.23.147.79:24467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-admin/network/index.php"] [unique_id "apK9KyJcY4fy7tP-rU38-AAAAnw"]
[Sat Aug 29 05:06:19.864500 2026] [security2:error] [pid 1017536:tid 1017714] [client 20.48.250.41:64361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/amp.php"] [unique_id "apK9KyJcY4fy7tP-rU38-QAAAkQ"]
[Sat Aug 29 05:06:19.873281 2026] [security2:error] [pid 1017536:tid 1017698] [client 158.23.184.117:4841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/wp-content/themes/twentytwentythree.php"] [unique_id "apK9KyJcY4fy7tP-rU38-wAAAjQ"]
[Sat Aug 29 05:06:19.877813 2026] [security2:error] [pid 1018003:tid 1018212] [client 20.196.209.81:5625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-content/core.php"] [unique_id "apK9KzAh5Y1i2tUxg4Hx0gAABfU"]
[Sat Aug 29 05:06:19.902984 2026] [core:error] [pid 1017536:tid 1017767] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.903000 2026] [core:error] [pid 1017536:tid 1017767] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.903994 2026] [security2:error] [pid 1017536:tid 1017680] [client 20.63.81.20:60487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/session.php"] [unique_id "apK9KyJcY4fy7tP-rU38_QAAAiI"]
[Sat Aug 29 05:06:19.918204 2026] [security2:error] [pid 1017536:tid 1017709] [client 158.158.54.35:22317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-includes/Text/about.php"] [unique_id "apK9KyJcY4fy7tP-rU38_gAAAj8"]
[Sat Aug 29 05:06:19.931997 2026] [security2:error] [pid 1017536:tid 1017740] [client 20.52.41.200:1768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-good.php"] [unique_id "apK9KyJcY4fy7tP-rU38_wAAAl4"]
[Sat Aug 29 05:06:19.932301 2026] [security2:error] [pid 1018003:tid 1018251] [client 158.23.184.117:55498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/wp-content/plugins/revslider/admin.php"] [unique_id "apK9KzAh5Y1i2tUxg4Hx1gAABhs"]
[Sat Aug 29 05:06:19.939774 2026] [security2:error] [pid 1017536:tid 1017593] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/.env.php"] [unique_id "apK9KyJcY4fy7tP-rU39AgACQjg"]
[Sat Aug 29 05:06:19.941452 2026] [security2:error] [pid 1017536:tid 1017570] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/.env.old"] [unique_id "apK9KyJcY4fy7tP-rU39AQACQiE"]
[Sat Aug 29 05:06:19.953146 2026] [security2:error] [pid 1017536:tid 1017746] [client 20.63.81.20:46924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/media.php"] [unique_id "apK9KyJcY4fy7tP-rU39BgAAAmQ"]
[Sat Aug 29 05:06:19.966525 2026] [security2:error] [pid 1017536:tid 1017705] [client 20.220.204.93:59101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9KyJcY4fy7tP-rU39CQAAAjs"]
[Sat Aug 29 05:06:19.970727 2026] [core:error] [pid 1018003:tid 1018258] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.970746 2026] [core:error] [pid 1018003:tid 1018258] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.973586 2026] [security2:error] [pid 1017536:tid 1017749] [client 68.155.159.216:33743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK9KyJcY4fy7tP-rU39CgAAAmc"]
[Sat Aug 29 05:06:19.976883 2026] [security2:error] [pid 1017536:tid 1017781] [client 68.155.159.216:51446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK9KyJcY4fy7tP-rU39CwAAAoc"]
[Sat Aug 29 05:06:19.984244 2026] [core:error] [pid 1017536:tid 1017781] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:19.984261 2026] [core:error] [pid 1017536:tid 1017781] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.004550 2026] [core:error] [pid 1018003:tid 1018231] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.004565 2026] [core:error] [pid 1018003:tid 1018231] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.014264 2026] [security2:error] [pid 1017536:tid 1017545] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/.env.swp"] [unique_id "apK9LCJcY4fy7tP-rU39EQACQgg"]
[Sat Aug 29 05:06:20.014776 2026] [security2:error] [pid 1018003:tid 1018164] [client 20.48.250.41:64353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/cc13.php"] [unique_id "apK9LDAh5Y1i2tUxg4Hx3wAABcU"]
[Sat Aug 29 05:06:20.019127 2026] [security2:error] [pid 1017536:tid 1017648] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/.env~"] [unique_id "apK9LCJcY4fy7tP-rU39FwACQm8"]
[Sat Aug 29 05:06:20.030072 2026] [security2:error] [pid 1018003:tid 1018152] [client 216.26.244.202:16359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 202.244.26.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK9LDAh5Y1i2tUxg4Hx2wAABbk"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:06:20.035464 2026] [security2:error] [pid 1017536:tid 1017761] [client 168.107.94.195:65077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9LCJcY4fy7tP-rU39HAAAAnM"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:20.036106 2026] [security2:error] [pid 1017536:tid 1017793] [client 158.23.147.79:48371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK9LCJcY4fy7tP-rU39HQAAApM"]
[Sat Aug 29 05:06:20.040760 2026] [security2:error] [pid 1017536:tid 1017769] [client 20.63.81.20:60514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/eagle.php"] [unique_id "apK9LCJcY4fy7tP-rU39HgAAAns"]
[Sat Aug 29 05:06:20.042885 2026] [security2:error] [pid 1017536:tid 1017696] [client 4.205.62.107:22312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/dragonshell.php"] [unique_id "apK9LCJcY4fy7tP-rU39IQAAAjI"]
[Sat Aug 29 05:06:20.043383 2026] [core:error] [pid 1017536:tid 1017757] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.043397 2026] [core:error] [pid 1017536:tid 1017757] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.043401 2026] [core:error] [pid 1017536:tid 1017719] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.043417 2026] [core:error] [pid 1017536:tid 1017719] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.043457 2026] [core:error] [pid 1018003:tid 1018175] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.043472 2026] [core:error] [pid 1018003:tid 1018175] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.047249 2026] [core:error] [pid 1017536:tid 1017674] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.047260 2026] [core:error] [pid 1017536:tid 1017674] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.049636 2026] [core:error] [pid 1018003:tid 1018234] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.049650 2026] [core:error] [pid 1018003:tid 1018234] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.050349 2026] [core:error] [pid 1018003:tid 1018199] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.050372 2026] [core:error] [pid 1018003:tid 1018199] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.056828 2026] [core:error] [pid 1018003:tid 1018159] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.056840 2026] [core:error] [pid 1018003:tid 1018159] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.061703 2026] [security2:error] [pid 1017536:tid 1017751] [client 52.139.37.240:12484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/wp-content/plugins/ftde.php"] [unique_id "apK9LCJcY4fy7tP-rU39IwAAAmk"]
[Sat Aug 29 05:06:20.062424 2026] [security2:error] [pid 1017536:tid 1017721] [client 68.155.159.216:50286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK9LCJcY4fy7tP-rU39JAAAAks"]
[Sat Aug 29 05:06:20.065547 2026] [security2:error] [pid 1017536:tid 1017748] [client 158.23.184.117:4526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/wp-content/languages/themes/num.php"] [unique_id "apK9LCJcY4fy7tP-rU39JQAAAmY"]
[Sat Aug 29 05:06:20.077320 2026] [security2:error] [pid 1017536:tid 1017695] [client 158.23.184.117:60889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/wp-content/images/uploads/admin.php"] [unique_id "apK9LCJcY4fy7tP-rU39JwAAAjE"]
[Sat Aug 29 05:06:20.085844 2026] [security2:error] [pid 1018003:tid 1018188] [client 20.63.81.20:44500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/adminfuns.php"] [unique_id "apK9LDAh5Y1i2tUxg4Hx6wAABd0"]
[Sat Aug 29 05:06:20.088491 2026] [security2:error] [pid 1017536:tid 1017732] [client 4.205.62.107:22311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/chosen.php"] [unique_id "apK9LCJcY4fy7tP-rU39KQAAAlY"]
[Sat Aug 29 05:06:20.093884 2026] [security2:error] [pid 1017536:tid 1017770] [client 158.23.147.79:50142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/ans.php"] [unique_id "apK9LCJcY4fy7tP-rU39KgAAAnw"]
[Sat Aug 29 05:06:20.096896 2026] [security2:error] [pid 1018003:tid 1018226] [client 20.220.204.93:59108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9LDAh5Y1i2tUxg4Hx7QAABgM"]
[Sat Aug 29 05:06:20.102489 2026] [security2:error] [pid 1017536:tid 1017731] [client 57.141.14.95:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/page/2/"] [unique_id "apK9LCJcY4fy7tP-rU39KwAAAlU"]
[Sat Aug 29 05:06:20.112759 2026] [autoindex:error] [pid 1017536:tid 1017605] [remote 87.58.197.202:64340] AH01276: Cannot serve directory /home3/zjtdvzmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:06:20.114503 2026] [security2:error] [pid 1017536:tid 1017668] [client 4.205.62.107:65455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/paths.php"] [unique_id "apK9LCJcY4fy7tP-rU39LgAAAhY"]
[Sat Aug 29 05:06:20.126459 2026] [security2:error] [pid 1018003:tid 1018153] [client 68.155.159.216:49209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK9LDAh5Y1i2tUxg4Hx8AAABbo"]
[Sat Aug 29 05:06:20.129619 2026] [security2:error] [pid 1017536:tid 1017713] [client 68.155.159.216:24491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK9LCJcY4fy7tP-rU39NAAAAkM"]
[Sat Aug 29 05:06:20.137208 2026] [security2:error] [pid 1018003:tid 1018242] [client 20.197.61.180:16965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-content/disagrsxr.php"] [unique_id "apK9LDAh5Y1i2tUxg4Hx8wAABhI"]
[Sat Aug 29 05:06:20.142392 2026] [security2:error] [pid 1018003:tid 1018165] [client 40.83.93.50:22240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-content/languages/index.php"] [unique_id "apK9LDAh5Y1i2tUxg4Hx9AAABcY"]
[Sat Aug 29 05:06:20.143243 2026] [security2:error] [pid 1018003:tid 1018157] [client 20.151.200.44:65483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/155.php"] [unique_id "apK9LDAh5Y1i2tUxg4Hx9QAABb4"]
[Sat Aug 29 05:06:20.143882 2026] [security2:error] [pid 1018003:tid 1018227] [client 20.196.209.81:16751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/csv.php"] [unique_id "apK9LDAh5Y1i2tUxg4Hx9gAABgQ"]
[Sat Aug 29 05:06:20.147091 2026] [core:error] [pid 1017536:tid 1017689] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.147106 2026] [core:error] [pid 1017536:tid 1017689] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.156617 2026] [core:error] [pid 1017536:tid 1017793] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.156631 2026] [core:error] [pid 1017536:tid 1017793] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.159059 2026] [core:error] [pid 1017536:tid 1017769] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.159079 2026] [core:error] [pid 1017536:tid 1017769] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.181915 2026] [security2:error] [pid 1018003:tid 1018246] [client 20.63.81.20:56936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/up-kon.php"] [unique_id "apK9LDAh5Y1i2tUxg4Hx-gAABhY"]
[Sat Aug 29 05:06:20.197094 2026] [core:error] [pid 1018003:tid 1018213] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.197110 2026] [core:error] [pid 1018003:tid 1018213] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.198294 2026] [security2:error] [pid 1017536:tid 1017691] [client 20.220.204.93:64292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK9LCJcY4fy7tP-rU39RAAAAi0"]
[Sat Aug 29 05:06:20.198540 2026] [security2:error] [pid 1018003:tid 1018131] [remote 93.123.109.228:34972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/.env.php"] [unique_id "apK9LDAh5Y1i2tUxg4HyAAAGD24"]
[Sat Aug 29 05:06:20.205433 2026] [security2:error] [pid 1017536:tid 1017645] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/.git/config.bak"] [unique_id "apK9LCJcY4fy7tP-rU39RwACTmw"]
[Sat Aug 29 05:06:20.207842 2026] [security2:error] [pid 1017536:tid 1017614] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/.git/config~"] [unique_id "apK9LCJcY4fy7tP-rU39SgACTk0"]
[Sat Aug 29 05:06:20.207920 2026] [security2:error] [pid 1017536:tid 1017623] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/.git/config.old"] [unique_id "apK9LCJcY4fy7tP-rU39SQACTlY"]
[Sat Aug 29 05:06:20.211701 2026] [security2:error] [pid 1018003:tid 1018179] [client 158.23.184.117:4518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/wp.php"] [unique_id "apK9LDAh5Y1i2tUxg4HyAwAABdQ"]
[Sat Aug 29 05:06:20.211868 2026] [security2:error] [pid 1018003:tid 1018222] [client 20.48.250.41:64299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/aa.php"] [unique_id "apK9LDAh5Y1i2tUxg4HyBAAABf8"]
[Sat Aug 29 05:06:20.230004 2026] [core:error] [pid 1017536:tid 1017712] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.230021 2026] [core:error] [pid 1017536:tid 1017712] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.230902 2026] [security2:error] [pid 1017536:tid 1017770] [client 20.63.81.20:46855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/classwithtostring.php"] [unique_id "apK9LCJcY4fy7tP-rU39UwAAAnw"]
[Sat Aug 29 05:06:20.231196 2026] [core:error] [pid 1017536:tid 1017748] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.231209 2026] [core:error] [pid 1017536:tid 1017748] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.231856 2026] [core:error] [pid 1017536:tid 1017695] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.231868 2026] [core:error] [pid 1017536:tid 1017695] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.233399 2026] [security2:error] [pid 1018003:tid 1018191] [client 158.23.147.79:30617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-admin.php"] [unique_id "apK9LDAh5Y1i2tUxg4HyCQAABeA"]
[Sat Aug 29 05:06:20.233825 2026] [core:error] [pid 1017536:tid 1017732] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.233834 2026] [core:error] [pid 1017536:tid 1017732] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.236270 2026] [core:error] [pid 1017536:tid 1017747] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.236287 2026] [core:error] [pid 1017536:tid 1017747] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.239374 2026] [security2:error] [pid 1018003:tid 1018255] [client 158.23.184.117:55526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/tools.php"] [unique_id "apK9LDAh5Y1i2tUxg4HyCwAABh8"]
[Sat Aug 29 05:06:20.241164 2026] [core:error] [pid 1017536:tid 1017731] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.241182 2026] [core:error] [pid 1017536:tid 1017731] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.245247 2026] [core:error] [pid 1017536:tid 1017746] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.245263 2026] [core:error] [pid 1017536:tid 1017746] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.255563 2026] [security2:error] [pid 1017536:tid 1017683] [client 158.23.147.79:30539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-content/radio.php"] [unique_id "apK9LCJcY4fy7tP-rU39WgAAAiU"]
[Sat Aug 29 05:06:20.258247 2026] [security2:error] [pid 1018003:tid 1018183] [client 52.139.37.240:12892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "apK9LDAh5Y1i2tUxg4HyDgAABdg"]
[Sat Aug 29 05:06:20.271799 2026] [security2:error] [pid 1017536:tid 1017734] [client 20.196.209.81:5608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-content/db-status.php"] [unique_id "apK9LCJcY4fy7tP-rU39XAAAAlg"]
[Sat Aug 29 05:06:20.273331 2026] [core:error] [pid 1018003:tid 1018187] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.273350 2026] [core:error] [pid 1018003:tid 1018187] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.287929 2026] [security2:error] [pid 1017536:tid 1017689] [client 20.104.49.130:58220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.carlosmua.com"] [uri "/amax.php"] [unique_id "apK9LCJcY4fy7tP-rU39XgAAAis"]
[Sat Aug 29 05:06:20.289830 2026] [security2:error] [pid 1017536:tid 1017673] [client 20.220.204.93:59030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/ff1.php"] [unique_id "apK9LCJcY4fy7tP-rU39XwAAAhs"]
[Sat Aug 29 05:06:20.295189 2026] [security2:error] [pid 1018003:tid 1018224] [client 20.151.200.44:47327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/eval.php"] [unique_id "apK9LDAh5Y1i2tUxg4HyEQAABgE"]
[Sat Aug 29 05:06:20.304966 2026] [security2:error] [pid 1018003:tid 1018171] [client 192.145.125.70:48130] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "nicolaandstevenlochrane.strangeworx.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "apK9LDAh5Y1i2tUxg4HyFwAABcw"]
[Sat Aug 29 05:06:20.305024 2026] [security2:error] [pid 1017536:tid 1017737] [client 158.23.147.79:35832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/NewFile.php/"] [unique_id "apK9LCJcY4fy7tP-rU39YQAAAls"]
[Sat Aug 29 05:06:20.306334 2026] [security2:error] [pid 1017536:tid 1017761] [client 4.205.62.107:53332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/config/laravolt/css/index.php"] [unique_id "apK9LCJcY4fy7tP-rU39YgAAAnM"]
[Sat Aug 29 05:06:20.314131 2026] [security2:error] [pid 1018003:tid 1018195] [client 66.248.203.2:3434] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cheerfulmonk.com"] [uri "/2021/01/27/"] [unique_id "apK9LDAh5Y1i2tUxg4HyGQAABeQ"]
[Sat Aug 29 05:06:20.316564 2026] [security2:error] [pid 1018003:tid 1018195] [client 20.63.81.20:56909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/tinny.php"] [unique_id "apK9LDAh5Y1i2tUxg4HyGgAABeQ"]
[Sat Aug 29 05:06:20.328909 2026] [core:error] [pid 1017536:tid 1017709] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.328930 2026] [core:error] [pid 1017536:tid 1017709] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.336947 2026] [security2:error] [pid 1017536:tid 1017720] [client 20.151.200.44:62010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/ww3.php"] [unique_id "apK9LCJcY4fy7tP-rU39aQAAAko"]
[Sat Aug 29 05:06:20.354478 2026] [core:error] [pid 1017536:tid 1017717] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.354499 2026] [core:error] [pid 1017536:tid 1017717] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.355611 2026] [core:error] [pid 1017536:tid 1017733] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.355616 2026] [security2:error] [pid 1018003:tid 1018162] [client 158.23.184.117:4847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/xmlrpc.php"] [unique_id "apK9LDAh5Y1i2tUxg4HyIAAABcM"]
[Sat Aug 29 05:06:20.355627 2026] [core:error] [pid 1017536:tid 1017733] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.363309 2026] [security2:error] [pid 1018003:tid 1018258] [client 20.48.250.41:64333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/s1.php"] [unique_id "apK9LDAh5Y1i2tUxg4HyJAAABiI"]
[Sat Aug 29 05:06:20.364277 2026] [security2:error] [pid 1018003:tid 1018238] [client 158.158.54.35:22277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.santarosairis.org"] [uri "/wp-admin.php"] [unique_id "apK9LDAh5Y1i2tUxg4HyJgAABg4"]
[Sat Aug 29 05:06:20.373407 2026] [security2:error] [pid 1017536:tid 1017770] [client 20.63.81.20:46927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK9LCJcY4fy7tP-rU39cwAAAnw"]
[Sat Aug 29 05:06:20.379136 2026] [core:error] [pid 1018003:tid 1018243] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.379152 2026] [core:error] [pid 1018003:tid 1018243] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.382738 2026] [security2:error] [pid 1017536:tid 1017719] [client 158.23.184.117:55506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/wp-content/uploads/my.php"] [unique_id "apK9LCJcY4fy7tP-rU39dQAAAkk"]
[Sat Aug 29 05:06:20.383184 2026] [security2:error] [pid 1017536:tid 1017695] [client 20.52.41.200:1251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "apK9LCJcY4fy7tP-rU39dgAAAjE"]
[Sat Aug 29 05:06:20.384301 2026] [core:error] [pid 1017536:tid 1017760] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.384317 2026] [core:error] [pid 1017536:tid 1017760] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.386562 2026] [core:error] [pid 1018003:tid 1018277] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.386576 2026] [core:error] [pid 1018003:tid 1018277] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.387139 2026] [core:error] [pid 1018003:tid 1018152] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.387147 2026] [core:error] [pid 1018003:tid 1018152] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.416181 2026] [security2:error] [pid 1017536:tid 1017668] [client 168.107.94.195:65462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9LCJcY4fy7tP-rU39fwAAAhY"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:20.420789 2026] [security2:error] [pid 1017536:tid 1017674] [client 4.205.62.107:21838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/localconf.php"] [unique_id "apK9LCJcY4fy7tP-rU39hAAAAhw"]
[Sat Aug 29 05:06:20.430967 2026] [security2:error] [pid 1017536:tid 1017746] [client 20.220.204.93:59075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/t.php"] [unique_id "apK9LCJcY4fy7tP-rU39hwAAAmQ"]
[Sat Aug 29 05:06:20.464343 2026] [core:error] [pid 1017536:tid 1017734] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.464373 2026] [core:error] [pid 1017536:tid 1017734] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.464748 2026] [core:error] [pid 1017536:tid 1017777] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.464763 2026] [core:error] [pid 1017536:tid 1017777] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.464762 2026] [core:error] [pid 1017536:tid 1017706] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.464777 2026] [core:error] [pid 1017536:tid 1017706] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.465714 2026] [core:error] [pid 1017536:tid 1017724] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.465725 2026] [core:error] [pid 1017536:tid 1017724] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.468036 2026] [core:error] [pid 1018003:tid 1018182] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.468060 2026] [core:error] [pid 1018003:tid 1018182] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.468445 2026] [security2:error] [pid 1018003:tid 1018226] [client 20.63.81.20:60483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/wp-easy.php"] [unique_id "apK9LDAh5Y1i2tUxg4HyNwAABgM"]
[Sat Aug 29 05:06:20.470925 2026] [core:error] [pid 1018003:tid 1018188] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.471057 2026] [core:error] [pid 1017536:tid 1017689] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.471064 2026] [core:error] [pid 1017536:tid 1017689] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.470940 2026] [core:error] [pid 1018003:tid 1018188] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.498662 2026] [core:error] [pid 1017536:tid 1017722] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.498679 2026] [core:error] [pid 1017536:tid 1017722] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.498722 2026] [security2:error] [pid 1018003:tid 1018159] [client 158.23.184.117:4870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/app.php"] [unique_id "apK9LDAh5Y1i2tUxg4HyPAAABcA"]
[Sat Aug 29 05:06:20.504188 2026] [security2:error] [pid 1018003:tid 1018165] [client 20.151.200.44:64839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/sko.php"] [unique_id "apK9LDAh5Y1i2tUxg4HyPQAABcY"]
[Sat Aug 29 05:06:20.526455 2026] [security2:error] [pid 1017536:tid 1017757] [client 20.63.81.20:44483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/5PJcpMFsD8B.php"] [unique_id "apK9LCJcY4fy7tP-rU39lQAAAm8"]
[Sat Aug 29 05:06:20.529621 2026] [security2:error] [pid 1018003:tid 1018153] [client 158.23.184.117:60920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/wp-includes/themes/uploads/config.php"] [unique_id "apK9LDAh5Y1i2tUxg4HyQQAABbo"]
[Sat Aug 29 05:06:20.540958 2026] [core:error] [pid 1017536:tid 1017770] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.540975 2026] [core:error] [pid 1017536:tid 1017770] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.544532 2026] [security2:error] [pid 1017536:tid 1017744] [client 52.139.37.240:12865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/z.php"] [unique_id "apK9LCJcY4fy7tP-rU39nQAAAmI"]
[Sat Aug 29 05:06:20.545884 2026] [security2:error] [pid 1017536:tid 1017788] [client 4.205.62.107:56008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/X57.php"] [unique_id "apK9LCJcY4fy7tP-rU39nwAAAo4"]
[Sat Aug 29 05:06:20.550198 2026] [security2:error] [pid 1017536:tid 1017781] [client 52.139.37.240:30186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thesldiet.com"] [uri "/aged.php"] [unique_id "apK9LCJcY4fy7tP-rU39oAAAAoc"]
[Sat Aug 29 05:06:20.554955 2026] [security2:error] [pid 1018003:tid 1018256] [client 20.48.250.41:65029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/0byte.php"] [unique_id "apK9LDAh5Y1i2tUxg4HyRgAABiA"]
[Sat Aug 29 05:06:20.565777 2026] [security2:error] [pid 1017536:tid 1017785] [client 68.155.159.216:58285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/log-mama/function.php"] [unique_id "apK9LCJcY4fy7tP-rU39oQAAAos"]
[Sat Aug 29 05:06:20.573710 2026] [core:error] [pid 1017536:tid 1017678] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.573727 2026] [core:error] [pid 1017536:tid 1017678] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.576645 2026] [core:error] [pid 1017536:tid 1017792] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.576672 2026] [core:error] [pid 1017536:tid 1017792] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.577440 2026] [security2:error] [pid 1017536:tid 1017745] [client 20.196.209.81:11549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/fox.php"] [unique_id "apK9LCJcY4fy7tP-rU39pQAAAmM"]
[Sat Aug 29 05:06:20.584991 2026] [core:error] [pid 1017536:tid 1017680] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.585007 2026] [core:error] [pid 1017536:tid 1017680] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.590421 2026] [core:error] [pid 1017536:tid 1017778] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.590438 2026] [core:error] [pid 1017536:tid 1017778] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.593813 2026] [core:error] [pid 1018003:tid 1018179] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.593829 2026] [core:error] [pid 1018003:tid 1018179] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.603177 2026] [security2:error] [pid 1017536:tid 1017749] [client 45.3.40.242:22763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 242.40.3.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK9LCJcY4fy7tP-rU39qwAAAmc"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:06:20.609582 2026] [security2:error] [pid 1017536:tid 1017721] [client 40.83.93.50:22264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-content/languages/min.php"] [unique_id "apK9LCJcY4fy7tP-rU39rAAAAks"]
[Sat Aug 29 05:06:20.629028 2026] [security2:error] [pid 1018003:tid 1018186] [client 20.63.81.20:60442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/d7.php"] [unique_id "apK9LDAh5Y1i2tUxg4HyTwAABds"]
[Sat Aug 29 05:06:20.629160 2026] [security2:error] [pid 1018003:tid 1018236] [client 20.220.204.93:59079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/erty.php"] [unique_id "apK9LDAh5Y1i2tUxg4HyUAAABgw"]
[Sat Aug 29 05:06:20.633562 2026] [core:error] [pid 1017536:tid 1017724] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.633578 2026] [core:error] [pid 1017536:tid 1017724] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.643772 2026] [security2:error] [pid 1017536:tid 1017673] [client 158.23.184.117:4761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/aaa.php"] [unique_id "apK9LCJcY4fy7tP-rU39tQAAAhs"]
[Sat Aug 29 05:06:20.655211 2026] [security2:error] [pid 1017536:tid 1017769] [client 68.155.159.216:12173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-mail.php"] [unique_id "apK9LCJcY4fy7tP-rU39twAAAns"]
[Sat Aug 29 05:06:20.660813 2026] [core:error] [pid 1017536:tid 1017686] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.660830 2026] [core:error] [pid 1017536:tid 1017686] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.664248 2026] [core:error] [pid 1017536:tid 1017747] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.664263 2026] [core:error] [pid 1017536:tid 1017747] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.665041 2026] [core:error] [pid 1017536:tid 1017722] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.665055 2026] [core:error] [pid 1017536:tid 1017722] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.665981 2026] [security2:error] [pid 1017536:tid 1017790] [client 20.196.209.81:5242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-content/disagrsxr.php"] [unique_id "apK9LCJcY4fy7tP-rU39vQAAApA"]
[Sat Aug 29 05:06:20.668160 2026] [core:error] [pid 1017536:tid 1017767] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.668173 2026] [core:error] [pid 1017536:tid 1017767] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.675555 2026] [security2:error] [pid 1017536:tid 1017672] [client 158.23.184.117:55500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/av.php"] [unique_id "apK9LCJcY4fy7tP-rU39wAAAAho"]
[Sat Aug 29 05:06:20.681824 2026] [core:error] [pid 1018003:tid 1018215] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.681841 2026] [core:error] [pid 1018003:tid 1018215] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.687203 2026] [security2:error] [pid 1018003:tid 1018224] [client 20.48.250.41:64307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/xr.php"] [unique_id "apK9LDAh5Y1i2tUxg4HyWAAABgE"]
[Sat Aug 29 05:06:20.688749 2026] [security2:error] [pid 1017536:tid 1017744] [client 20.63.81.20:46912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK9LCJcY4fy7tP-rU39wwAAAmI"]
[Sat Aug 29 05:06:20.711206 2026] [core:error] [pid 1018003:tid 1018171] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.711225 2026] [core:error] [pid 1018003:tid 1018171] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.712027 2026] [core:error] [pid 1017536:tid 1017770] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.712041 2026] [core:error] [pid 1017536:tid 1017770] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.722758 2026] [security2:error] [pid 1018003:tid 1018195] [client 68.155.159.216:51430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-content/index.php"] [unique_id "apK9LDAh5Y1i2tUxg4HyXAAABeQ"]
[Sat Aug 29 05:06:20.727240 2026] [security2:error] [pid 1017536:tid 1017542] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(\\\\/\\\\*\\\\!? ?(?:select|grant|delete|insert|drop|alter|replace|truncate|update|create|rename|describe|union|concat|group_concat))" at REQUEST_FILENAME. [file "/opt/mod_security/hg_rules.conf"] [line "1019"] [id "9000042"] [rev "2.2.2"] [msg "SQL Comment Sequence Detected."] [data "/*update"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/*update.cgi*"] [unique_id "apK9LCJcY4fy7tP-rU39xQACMAU"]
[Sat Aug 29 05:06:20.727955 2026] [core:error] [pid 1018003:tid 1018177] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.727967 2026] [core:error] [pid 1018003:tid 1018177] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.739031 2026] [security2:error] [pid 1018003:tid 1018156] [client 52.139.37.240:12536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/f35.php"] [unique_id "apK9LDAh5Y1i2tUxg4HyYgAABb0"]
[Sat Aug 29 05:06:20.743381 2026] [security2:error] [pid 1018003:tid 1018259] [client 52.139.37.240:30009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thesldiet.com"] [uri "/essexec.php"] [unique_id "apK9LDAh5Y1i2tUxg4HyYwAABiM"]
[Sat Aug 29 05:06:20.760585 2026] [security2:error] [pid 1017536:tid 1017745] [client 68.155.159.216:52803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/dropdown.php"] [unique_id "apK9LCJcY4fy7tP-rU39yQAAAmM"]
[Sat Aug 29 05:06:20.762334 2026] [security2:error] [pid 1018003:tid 1018258] [client 20.63.81.20:56875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/v5.php"] [unique_id "apK9LDAh5Y1i2tUxg4HyZgAABiI"]
[Sat Aug 29 05:06:20.776698 2026] [security2:error] [pid 1018003:tid 1018257] [client 20.220.204.93:59088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/0x.php"] [unique_id "apK9LDAh5Y1i2tUxg4HyawAABiE"]
[Sat Aug 29 05:06:20.780922 2026] [security2:error] [pid 1017536:tid 1017695] [client 158.23.147.79:25520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apK9LCJcY4fy7tP-rU39zwAAAjE"]
[Sat Aug 29 05:06:20.789461 2026] [security2:error] [pid 1017536:tid 1017752] [client 158.23.147.79:53817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/goods.php"] [unique_id "apK9LCJcY4fy7tP-rU390wAAAmo"]
[Sat Aug 29 05:06:20.797993 2026] [security2:error] [pid 1017536:tid 1017721] [client 168.107.94.195:49368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9LCJcY4fy7tP-rU391AAAAks"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:20.807490 2026] [security2:error] [pid 1017536:tid 1017761] [client 20.48.251.3:61638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/test.php"] [unique_id "apK9LCJcY4fy7tP-rU391QAAAnM"]
[Sat Aug 29 05:06:20.820503 2026] [core:error] [pid 1017536:tid 1017786] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.820521 2026] [core:error] [pid 1017536:tid 1017786] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.827508 2026] [security2:error] [pid 1017536:tid 1017740] [client 20.48.250.41:65132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/h02ugyh.php"] [unique_id "apK9LCJcY4fy7tP-rU392wAAAl4"]
[Sat Aug 29 05:06:20.829860 2026] [security2:error] [pid 1017536:tid 1017757] [client 20.52.41.200:1779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/abcd.php"] [unique_id "apK9LCJcY4fy7tP-rU393AAAAm8"]
[Sat Aug 29 05:06:20.832443 2026] [security2:error] [pid 1017536:tid 1017751] [client 197.219.150.206:59162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK9LCJcY4fy7tP-rU393QAAAmk"]
[Sat Aug 29 05:06:20.832554 2026] [security2:error] [pid 1017536:tid 1017751] [client 197.219.150.206:59162] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK9LCJcY4fy7tP-rU393QAAAmk"]
[Sat Aug 29 05:06:20.840714 2026] [core:error] [pid 1017536:tid 1017602] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.840734 2026] [core:error] [pid 1017536:tid 1017602] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.844849 2026] [core:error] [pid 1017536:tid 1017686] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.844865 2026] [core:error] [pid 1017536:tid 1017686] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.846723 2026] [security2:error] [pid 1017536:tid 1017717] [client 158.23.147.79:63006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-includes/index.php"] [unique_id "apK9LCJcY4fy7tP-rU396AAAAkc"]
[Sat Aug 29 05:06:20.848559 2026] [security2:error] [pid 1017536:tid 1017717] [client 20.63.81.20:46952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/wsd.php"] [unique_id "apK9LCJcY4fy7tP-rU397wAAAkc"]
[Sat Aug 29 05:06:20.849401 2026] [core:error] [pid 1017536:tid 1017722] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.849426 2026] [core:error] [pid 1017536:tid 1017722] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.849726 2026] [core:error] [pid 1017536:tid 1017765] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.849736 2026] [core:error] [pid 1017536:tid 1017765] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.849800 2026] [core:error] [pid 1017536:tid 1017689] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.849815 2026] [core:error] [pid 1017536:tid 1017691] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.849817 2026] [core:error] [pid 1017536:tid 1017689] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.849834 2026] [core:error] [pid 1017536:tid 1017691] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.853129 2026] [security2:error] [pid 1017536:tid 1017737] [client 20.197.61.180:5839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-content/f35.php"] [unique_id "apK9LCJcY4fy7tP-rU398QAAAls"]
[Sat Aug 29 05:06:20.870770 2026] [security2:error] [pid 1017536:tid 1017788] [client 158.23.184.117:60899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/wp-includes/ID3/file.php"] [unique_id "apK9LCJcY4fy7tP-rU398wAAAo4"]
[Sat Aug 29 05:06:20.875178 2026] [core:error] [pid 1018003:tid 1018264] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.875202 2026] [core:error] [pid 1018003:tid 1018264] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.876684 2026] [core:error] [pid 1018003:tid 1018160] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.876707 2026] [core:error] [pid 1018003:tid 1018160] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.876709 2026] [core:error] [pid 1018003:tid 1018203] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.876715 2026] [core:error] [pid 1018003:tid 1018203] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.877168 2026] [core:error] [pid 1018003:tid 1018230] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.877182 2026] [core:error] [pid 1018003:tid 1018230] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.879703 2026] [core:error] [pid 1018003:tid 1018234] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.879722 2026] [core:error] [pid 1018003:tid 1018234] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.896328 2026] [security2:error] [pid 1017536:tid 1017745] [client 20.63.81.20:56853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/az.php"] [unique_id "apK9LCJcY4fy7tP-rU399wAAAmM"]
[Sat Aug 29 05:06:20.897880 2026] [security2:error] [pid 1017536:tid 1017732] [client 192.145.125.70:48144] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "nicolaandstevenlochrane.strangeworx.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "apK9LCJcY4fy7tP-rU39-AAAAlY"]
[Sat Aug 29 05:06:20.904555 2026] [security2:error] [pid 1017536:tid 1017680] [client 158.23.184.117:4646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/hehe.php"] [unique_id "apK9LCJcY4fy7tP-rU39-gAAAiI"]
[Sat Aug 29 05:06:20.908045 2026] [security2:error] [pid 1018003:tid 1018225] [client 60.243.207.176:59359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK9LDAh5Y1i2tUxg4HyfwAABgI"]
[Sat Aug 29 05:06:20.908160 2026] [security2:error] [pid 1018003:tid 1018225] [client 60.243.207.176:59359] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK9LDAh5Y1i2tUxg4HyfwAABgI"]
[Sat Aug 29 05:06:20.917550 2026] [core:error] [pid 1018003:tid 1018219] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.917571 2026] [core:error] [pid 1018003:tid 1018219] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.927340 2026] [security2:error] [pid 1018003:tid 1018182] [client 20.220.204.93:59046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/66.php"] [unique_id "apK9LDAh5Y1i2tUxg4HyggAABdc"]
[Sat Aug 29 05:06:20.930928 2026] [core:error] [pid 1017536:tid 1017683] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.930958 2026] [core:error] [pid 1017536:tid 1017683] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.931213 2026] [security2:error] [pid 1018003:tid 1018182] [client 20.151.200.44:65495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/zoz.php"] [unique_id "apK9LDAh5Y1i2tUxg4HygwAABdc"]
[Sat Aug 29 05:06:20.932194 2026] [security2:error] [pid 1017536:tid 1017713] [client 20.48.251.3:13825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/tax.php"] [unique_id "apK9LCJcY4fy7tP-rU39_gAAAkM"]
[Sat Aug 29 05:06:20.940029 2026] [security2:error] [pid 1018003:tid 1018192] [client 20.48.251.3:3141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/cloud.php"] [unique_id "apK9LDAh5Y1i2tUxg4HyhQAABeE"]
[Sat Aug 29 05:06:20.949835 2026] [security2:error] [pid 1017536:tid 1017781] [client 52.139.37.240:12882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/file61.php"] [unique_id "apK9LCJcY4fy7tP-rU39_wAAAoc"]
[Sat Aug 29 05:06:20.952262 2026] [security2:error] [pid 1017536:tid 1017712] [client 52.139.37.240:53184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thesldiet.com"] [uri "/fw.php"] [unique_id "apK9LCJcY4fy7tP-rU3-AAAAAkI"]
[Sat Aug 29 05:06:20.966253 2026] [core:error] [pid 1017536:tid 1017681] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.966273 2026] [core:error] [pid 1017536:tid 1017681] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.969145 2026] [core:error] [pid 1018003:tid 1018242] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.969159 2026] [core:error] [pid 1018003:tid 1018242] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:20.972947 2026] [security2:error] [pid 1017536:tid 1017743] [client 20.48.250.41:65091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/xxw.php"] [unique_id "apK9LCJcY4fy7tP-rU3-BgAAAmE"]
[Sat Aug 29 05:06:20.991729 2026] [security2:error] [pid 1017536:tid 1017596] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/.wp-config.php.swp"] [unique_id "apK9LCJcY4fy7tP-rU3-BwACazs"]
[Sat Aug 29 05:06:20.996280 2026] [security2:error] [pid 1017536:tid 1017780] [client 20.63.81.20:46951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/bulet.php"] [unique_id "apK9LCJcY4fy7tP-rU3-CAAAAoY"]
[Sat Aug 29 05:06:21.013498 2026] [security2:error] [pid 1018003:tid 1018199] [client 20.196.209.81:16756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/disagraeosc.php"] [unique_id "apK9LTAh5Y1i2tUxg4HykAAABeg"]
[Sat Aug 29 05:06:21.026473 2026] [security2:error] [pid 1017536:tid 1017612] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/ADMIN/.env"] [unique_id "apK9LSJcY4fy7tP-rU3-DwACQUs"]
[Sat Aug 29 05:06:21.027401 2026] [security2:error] [pid 1017536:tid 1017698] [client 20.63.81.20:56837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/js.php"] [unique_id "apK9LSJcY4fy7tP-rU3-EQAAAjQ"]
[Sat Aug 29 05:06:21.028850 2026] [security2:error] [pid 1017536:tid 1017664] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/API/.env"] [unique_id "apK9LSJcY4fy7tP-rU3-EgACQX8"]
[Sat Aug 29 05:06:21.029418 2026] [security2:error] [pid 1017536:tid 1017769] [client 158.23.184.117:60906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jakeylequack.domusfennii.com"] [uri "/wp-admin/css/fff.php"] [unique_id "apK9LSJcY4fy7tP-rU3-EwAAAns"]
[Sat Aug 29 05:06:21.033036 2026] [core:error] [pid 1017536:tid 1017548] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.033052 2026] [core:error] [pid 1017536:tid 1017548] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.033197 2026] [core:error] [pid 1017536:tid 1017606] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.033207 2026] [core:error] [pid 1017536:tid 1017606] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.033664 2026] [core:error] [pid 1017536:tid 1017603] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.033676 2026] [core:error] [pid 1017536:tid 1017603] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.038390 2026] [core:error] [pid 1017536:tid 1017540] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.038406 2026] [core:error] [pid 1017536:tid 1017540] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.051489 2026] [security2:error] [pid 1017536:tid 1017696] [client 158.23.184.117:4648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/wp-includes/PHPMailer.php"] [unique_id "apK9LSJcY4fy7tP-rU3-GQAAAjI"]
[Sat Aug 29 05:06:21.062314 2026] [security2:error] [pid 1018003:tid 1018207] [client 68.155.159.216:16238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/sad/about.php"] [unique_id "apK9LTAh5Y1i2tUxg4HylQAABfA"]
[Sat Aug 29 05:06:21.063635 2026] [security2:error] [pid 1017536:tid 1017748] [client 20.151.200.44:47409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/sao.php"] [unique_id "apK9LSJcY4fy7tP-rU3-GgAAAmY"]
[Sat Aug 29 05:06:21.070011 2026] [security2:error] [pid 1017536:tid 1017705] [client 20.48.251.3:61190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/asdf.php"] [unique_id "apK9LSJcY4fy7tP-rU3-HAAAAjs"]
[Sat Aug 29 05:06:21.072854 2026] [core:error] [pid 1017536:tid 1017668] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.072872 2026] [core:error] [pid 1017536:tid 1017668] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.076154 2026] [core:error] [pid 1017536:tid 1017541] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.076173 2026] [core:error] [pid 1017536:tid 1017541] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.078716 2026] [core:error] [pid 1017536:tid 1017571] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.078734 2026] [core:error] [pid 1017536:tid 1017571] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.082392 2026] [security2:error] [pid 1018003:tid 1018179] [client 20.220.204.93:59133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/f35.php"] [unique_id "apK9LTAh5Y1i2tUxg4HylwAABdQ"]
[Sat Aug 29 05:06:21.083558 2026] [core:error] [pid 1017536:tid 1017745] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.083570 2026] [core:error] [pid 1017536:tid 1017745] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.087642 2026] [core:error] [pid 1017536:tid 1017731] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.087658 2026] [core:error] [pid 1017536:tid 1017731] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.089143 2026] [security2:error] [pid 1017536:tid 1017678] [client 40.83.93.50:5896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-content/languages/pk.php"] [unique_id "apK9LSJcY4fy7tP-rU3-IwAAAiA"]
[Sat Aug 29 05:06:21.092333 2026] [security2:error] [pid 1017536:tid 1017786] [client 20.196.209.81:5193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-content/f35.php"] [unique_id "apK9LSJcY4fy7tP-rU3-JAAAAow"]
[Sat Aug 29 05:06:21.097478 2026] [security2:error] [pid 1017536:tid 1017563] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/APP/.env"] [unique_id "apK9LSJcY4fy7tP-rU3-JQACXho"]
[Sat Aug 29 05:06:21.100649 2026] [security2:error] [pid 1017536:tid 1017736] [client 68.155.159.216:51499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-includes/content.php"] [unique_id "apK9LSJcY4fy7tP-rU3-JgAAAlo"]
[Sat Aug 29 05:06:21.104113 2026] [security2:error] [pid 1017536:tid 1017792] [client 68.155.159.216:33731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-content/banners/about.php"] [unique_id "apK9LSJcY4fy7tP-rU3-JwAAApI"]
[Sat Aug 29 05:06:21.112943 2026] [security2:error] [pid 1017536:tid 1017604] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/Api/.env"] [unique_id "apK9LSJcY4fy7tP-rU3-KAACPUM"]
[Sat Aug 29 05:06:21.121117 2026] [security2:error] [pid 1017536:tid 1017595] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/BACK/.env"] [unique_id "apK9LSJcY4fy7tP-rU3-KQACajo"]
[Sat Aug 29 05:06:21.121123 2026] [security2:error] [pid 1017536:tid 1017567] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/BACKEND/.env"] [unique_id "apK9LSJcY4fy7tP-rU3-KgACah4"]
[Sat Aug 29 05:06:21.128811 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.63.81.20:46945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/av.php"] [unique_id "apK9LSJcY4fy7tP-rU3-KwAAAh0"]
[Sat Aug 29 05:06:21.141692 2026] [security2:error] [pid 1018003:tid 1018157] [client 104.207.44.196:12131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.44.207.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK9LTAh5Y1i2tUxg4HymgAABb4"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:06:21.143319 2026] [security2:error] [pid 1017536:tid 1017550] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/BE/.env"] [unique_id "apK9LSJcY4fy7tP-rU3-LAACLQ0"]
[Sat Aug 29 05:06:21.144365 2026] [security2:error] [pid 1017536:tid 1017723] [client 158.23.147.79:48285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/goat.php"] [unique_id "apK9LSJcY4fy7tP-rU3-LQAAAk0"]
[Sat Aug 29 05:06:21.147879 2026] [security2:error] [pid 1017536:tid 1017713] [client 52.139.37.240:30187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thesldiet.com"] [uri "/zwso.php"] [unique_id "apK9LSJcY4fy7tP-rU3-LgAAAkM"]
[Sat Aug 29 05:06:21.148128 2026] [security2:error] [pid 1017536:tid 1017687] [client 213.202.253.4:61565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aantec.com"] [uri "/schallfuns.php"] [unique_id "apK9LSJcY4fy7tP-rU3-LwAAAik"], referer: www.google.com
[Sat Aug 29 05:06:21.150285 2026] [security2:error] [pid 1018003:tid 1018093] [remote 93.123.109.228:34972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/.wp-config.php.swp"] [unique_id "apK9LTAh5Y1i2tUxg4HynQAGD0g"]
[Sat Aug 29 05:06:21.157898 2026] [security2:error] [pid 1017536:tid 1017721] [client 52.139.37.240:12896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/mah.php"] [unique_id "apK9LSJcY4fy7tP-rU3-MgAAAks"]
[Sat Aug 29 05:06:21.163915 2026] [security2:error] [pid 1018003:tid 1018255] [client 20.63.81.20:60476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/hd.php"] [unique_id "apK9LTAh5Y1i2tUxg4HyoQAABh8"]
[Sat Aug 29 05:06:21.178119 2026] [security2:error] [pid 1017536:tid 1017709] [client 68.155.159.216:50208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-includes/content.php"] [unique_id "apK9LSJcY4fy7tP-rU3-NAAAAj8"]
[Sat Aug 29 05:06:21.180869 2026] [security2:error] [pid 1017536:tid 1017694] [client 168.107.94.195:49761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9LSJcY4fy7tP-rU3-NQAAAjA"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:21.180874 2026] [security2:error] [pid 1018003:tid 1018236] [client 20.220.204.93:65009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/06.php"] [unique_id "apK9LTAh5Y1i2tUxg4HyowAABgw"]
[Sat Aug 29 05:06:21.188904 2026] [core:error] [pid 1017536:tid 1017625] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.188923 2026] [core:error] [pid 1017536:tid 1017625] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.189885 2026] [security2:error] [pid 1017536:tid 1017643] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/Backend/.env"] [unique_id "apK9LSJcY4fy7tP-rU3-NwACf2o"]
[Sat Aug 29 05:06:21.190914 2026] [security2:error] [pid 1017536:tid 1017583] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/Be/.env"] [unique_id "apK9LSJcY4fy7tP-rU3-OAACfy4"]
[Sat Aug 29 05:06:21.194466 2026] [security2:error] [pid 1017536:tid 1017705] [client 20.48.250.41:64341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/bolt.php"] [unique_id "apK9LSJcY4fy7tP-rU3-OwAAAjs"]
[Sat Aug 29 05:06:21.197893 2026] [security2:error] [pid 1017536:tid 1017668] [client 4.205.62.107:22240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/ws61.php"] [unique_id "apK9LSJcY4fy7tP-rU3-PAAAAhY"]
[Sat Aug 29 05:06:21.199364 2026] [security2:error] [pid 1017536:tid 1017753] [client 158.23.184.117:4525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/wp-content/upgrade/alfanew.php7"] [unique_id "apK9LSJcY4fy7tP-rU3-PQAAAms"]
[Sat Aug 29 05:06:21.199725 2026] [security2:error] [pid 1018003:tid 1018218] [client 20.48.251.3:62094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/app/Helpers/bladeHelpers.php"] [unique_id "apK9LTAh5Y1i2tUxg4HypQAABfs"]
[Sat Aug 29 05:06:21.202304 2026] [security2:error] [pid 1017536:tid 1017777] [client 20.48.251.3:13986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/app/Models/Hrm/Employee.php"] [unique_id "apK9LSJcY4fy7tP-rU3-QAAAAoM"]
[Sat Aug 29 05:06:21.209207 2026] [security2:error] [pid 1017536:tid 1017734] [client 158.23.147.79:32649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK9LSJcY4fy7tP-rU3-RQAAAlg"]
[Sat Aug 29 05:06:21.209368 2026] [http2:warn] [pid 1018003:tid 1018272] [client 57.141.14.67:61602] h2_stream(1018003-14-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:06:21.228967 2026] [security2:error] [pid 1017536:tid 1017785] [client 4.205.62.107:21591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/rum.or.php"] [unique_id "apK9LSJcY4fy7tP-rU3-TAAAAos"]
[Sat Aug 29 05:06:21.236855 2026] [security2:error] [pid 1018003:tid 1018245] [client 68.155.159.216:49200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK9LTAh5Y1i2tUxg4HyrQAABhU"]
[Sat Aug 29 05:06:21.238634 2026] [security2:error] [pid 1017536:tid 1017740] [client 68.155.159.216:24517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-content/cong.php"] [unique_id "apK9LSJcY4fy7tP-rU3-TgAAAl4"]
[Sat Aug 29 05:06:21.242510 2026] [core:error] [pid 1018003:tid 1018269] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.242524 2026] [core:error] [pid 1018003:tid 1018269] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.244249 2026] [core:error] [pid 1018003:tid 1018195] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.244262 2026] [core:error] [pid 1018003:tid 1018195] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.245188 2026] [core:error] [pid 1018003:tid 1018171] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.245203 2026] [core:error] [pid 1018003:tid 1018171] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.255116 2026] [core:error] [pid 1017536:tid 1017717] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.255134 2026] [core:error] [pid 1017536:tid 1017717] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.259605 2026] [security2:error] [pid 1018003:tid 1018249] [client 4.205.62.107:26669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/olfclass.php"] [unique_id "apK9LTAh5Y1i2tUxg4HytgAABhk"]
[Sat Aug 29 05:06:21.262007 2026] [core:error] [pid 1017536:tid 1017722] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.262022 2026] [core:error] [pid 1017536:tid 1017722] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.280052 2026] [security2:error] [pid 1018003:tid 1018174] [client 20.52.41.200:1244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-access.php"] [unique_id "apK9LTAh5Y1i2tUxg4HyuwAABc8"]
[Sat Aug 29 05:06:21.282312 2026] [security2:error] [pid 1018003:tid 1018233] [client 20.63.81.20:46859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/images.php"] [unique_id "apK9LTAh5Y1i2tUxg4HyvQAABgk"]
[Sat Aug 29 05:06:21.282757 2026] [security2:error] [pid 1017536:tid 1017719] [client 103.240.76.112:42690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK9LSJcY4fy7tP-rU3-XQAAAkk"]
[Sat Aug 29 05:06:21.282845 2026] [security2:error] [pid 1017536:tid 1017719] [client 103.240.76.112:42690] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK9LSJcY4fy7tP-rU3-XQAAAkk"]
[Sat Aug 29 05:06:21.294863 2026] [core:error] [pid 1017536:tid 1017694] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.294879 2026] [core:error] [pid 1017536:tid 1017694] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.295901 2026] [core:error] [pid 1018003:tid 1018251] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.295919 2026] [core:error] [pid 1018003:tid 1018251] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.297203 2026] [security2:error] [pid 1017536:tid 1017668] [client 20.220.204.93:59131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/wen.php"] [unique_id "apK9LSJcY4fy7tP-rU3-YgAAAhY"]
[Sat Aug 29 05:06:21.301531 2026] [security2:error] [pid 1017536:tid 1017706] [client 20.63.81.20:60505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/xl2023.php"] [unique_id "apK9LSJcY4fy7tP-rU3-YwAAAjw"]
[Sat Aug 29 05:06:21.301787 2026] [core:error] [pid 1018003:tid 1018231] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.301797 2026] [core:error] [pid 1018003:tid 1018231] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.305332 2026] [core:error] [pid 1018003:tid 1018152] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.305347 2026] [core:error] [pid 1018003:tid 1018152] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.305886 2026] [core:error] [pid 1017536:tid 1017753] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.305902 2026] [core:error] [pid 1017536:tid 1017753] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.306015 2026] [core:error] [pid 1018003:tid 1018180] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.306025 2026] [core:error] [pid 1018003:tid 1018180] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.323814 2026] [core:error] [pid 1017536:tid 1017765] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.323829 2026] [core:error] [pid 1017536:tid 1017765] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.328165 2026] [security2:error] [pid 1018003:tid 1018206] [client 20.48.251.3:61635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/hochladen.form.php"] [unique_id "apK9LTAh5Y1i2tUxg4HyxgAABe8"]
[Sat Aug 29 05:06:21.341170 2026] [security2:error] [pid 1018003:tid 1018219] [client 20.151.200.44:64868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/mmm.php"] [unique_id "apK9LTAh5Y1i2tUxg4HyygAABfw"]
[Sat Aug 29 05:06:21.344585 2026] [security2:error] [pid 1018003:tid 1018226] [client 158.23.147.79:30679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-admin/dropdown.php"] [unique_id "apK9LTAh5Y1i2tUxg4HyywAABgM"]
[Sat Aug 29 05:06:21.345092 2026] [security2:error] [pid 1017536:tid 1017769] [client 52.139.37.240:29997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thesldiet.com"] [uri "/admin/function.php"] [unique_id "apK9LSJcY4fy7tP-rU3-agAAAns"]
[Sat Aug 29 05:06:21.347964 2026] [security2:error] [pid 1017536:tid 1017689] [client 158.23.184.117:4501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/admin/alfa-rex.php"] [unique_id "apK9LSJcY4fy7tP-rU3-awAAAis"]
[Sat Aug 29 05:06:21.348425 2026] [core:error] [pid 1017536:tid 1017789] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.348440 2026] [core:error] [pid 1017536:tid 1017789] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.350756 2026] [security2:error] [pid 1017536:tid 1017704] [client 20.48.251.3:14006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/agg.php"] [unique_id "apK9LSJcY4fy7tP-rU3-bAAAAjo"]
[Sat Aug 29 05:06:21.357391 2026] [security2:error] [pid 1018003:tid 1018261] [client 52.139.37.240:12430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/mini.php"] [unique_id "apK9LTAh5Y1i2tUxg4HyzQAABiU"]
[Sat Aug 29 05:06:21.362432 2026] [security2:error] [pid 1018003:tid 1018248] [client 20.48.250.41:65059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/rtx.php"] [unique_id "apK9LTAh5Y1i2tUxg4Hy0AAABhg"]
[Sat Aug 29 05:06:21.385373 2026] [core:error] [pid 1017536:tid 1017785] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.385392 2026] [core:error] [pid 1017536:tid 1017785] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.407096 2026] [security2:error] [pid 1017536:tid 1017792] [client 158.23.147.79:30549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK9LSJcY4fy7tP-rU3-dQAAApI"]
[Sat Aug 29 05:06:21.416811 2026] [security2:error] [pid 1018003:tid 1018172] [client 20.196.209.81:19413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/about.php525"] [unique_id "apK9LTAh5Y1i2tUxg4Hy1wAABc0"]
[Sat Aug 29 05:06:21.437021 2026] [security2:error] [pid 1018003:tid 1018207] [client 20.220.204.93:59090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/inc.php"] [unique_id "apK9LTAh5Y1i2tUxg4Hy2gAABfA"]
[Sat Aug 29 05:06:21.439728 2026] [security2:error] [pid 1018003:tid 1018179] [client 20.63.81.20:60429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/V2.php"] [unique_id "apK9LTAh5Y1i2tUxg4Hy2wAABdQ"]
[Sat Aug 29 05:06:21.445602 2026] [security2:error] [pid 1018003:tid 1018184] [client 158.23.147.79:24404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK9LTAh5Y1i2tUxg4Hy3gAABdk"]
[Sat Aug 29 05:06:21.446176 2026] [core:error] [pid 1017536:tid 1017569] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.446188 2026] [core:error] [pid 1017536:tid 1017569] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.450174 2026] [security2:error] [pid 1017536:tid 1017691] [client 20.63.81.20:46867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/ops.php"] [unique_id "apK9LSJcY4fy7tP-rU3-fwAAAi0"]
[Sat Aug 29 05:06:21.456947 2026] [core:error] [pid 1017536:tid 1017712] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.456965 2026] [core:error] [pid 1017536:tid 1017712] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.458005 2026] [security2:error] [pid 1017536:tid 1017751] [client 20.48.251.3:61058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/debuggen.php"] [unique_id "apK9LSJcY4fy7tP-rU3-ggAAAmk"]
[Sat Aug 29 05:06:21.459339 2026] [core:error] [pid 1017536:tid 1017723] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.459368 2026] [core:error] [pid 1017536:tid 1017723] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.459727 2026] [core:error] [pid 1018003:tid 1018222] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.459740 2026] [core:error] [pid 1018003:tid 1018222] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.460574 2026] [core:error] [pid 1017536:tid 1017780] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.460590 2026] [core:error] [pid 1017536:tid 1017780] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.460596 2026] [core:error] [pid 1017536:tid 1017624] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.460607 2026] [core:error] [pid 1017536:tid 1017624] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.460618 2026] [core:error] [pid 1017536:tid 1017687] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.460628 2026] [core:error] [pid 1017536:tid 1017687] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.461097 2026] [core:error] [pid 1017536:tid 1017722] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.461109 2026] [core:error] [pid 1017536:tid 1017722] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.461288 2026] [core:error] [pid 1017536:tid 1017626] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.461306 2026] [core:error] [pid 1017536:tid 1017626] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.463270 2026] [security2:error] [pid 1017536:tid 1017773] [client 158.23.147.79:35722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/dropdown.php"] [unique_id "apK9LSJcY4fy7tP-rU3-iAAAAn8"]
[Sat Aug 29 05:06:21.463798 2026] [security2:error] [pid 1017536:tid 1017631] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/_profiler/phpinfo.php"] [unique_id "apK9LSJcY4fy7tP-rU3-igACWl4"]
[Sat Aug 29 05:06:21.481348 2026] [security2:error] [pid 1017536:tid 1017695] [client 20.48.251.3:14300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/124.php"] [unique_id "apK9LSJcY4fy7tP-rU3-jgAAAjE"]
[Sat Aug 29 05:06:21.491195 2026] [security2:error] [pid 1018003:tid 1018235] [client 20.196.209.81:23652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-content/index.php"] [unique_id "apK9LTAh5Y1i2tUxg4Hy5QAABgs"]
[Sat Aug 29 05:06:21.496756 2026] [security2:error] [pid 1017536:tid 1017760] [client 158.23.184.117:4504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/wp-content/export.php"] [unique_id "apK9LSJcY4fy7tP-rU3-kQAAAnI"]
[Sat Aug 29 05:06:21.502304 2026] [security2:error] [pid 1017536:tid 1017761] [client 192.145.125.70:48158] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "nicolaandstevenlochrane.strangeworx.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "apK9LSJcY4fy7tP-rU3-lAAAAnM"]
[Sat Aug 29 05:06:21.510290 2026] [security2:error] [pid 1017536:tid 1017765] [client 4.205.62.107:53315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/database.php"] [unique_id "apK9LSJcY4fy7tP-rU3-lgAAAnc"]
[Sat Aug 29 05:06:21.542398 2026] [security2:error] [pid 1017536:tid 1017753] [client 52.139.37.240:30194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thesldiet.com"] [uri "/zoom1.php"] [unique_id "apK9LSJcY4fy7tP-rU3-lwAAAms"]
[Sat Aug 29 05:06:21.555317 2026] [security2:error] [pid 1017536:tid 1017777] [client 52.139.37.240:12524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/v.php"] [unique_id "apK9LSJcY4fy7tP-rU3-mAAAAoM"]
[Sat Aug 29 05:06:21.557110 2026] [security2:error] [pid 1018003:tid 1018276] [client 20.197.61.180:5859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-content/index.php"] [unique_id "apK9LTAh5Y1i2tUxg4Hy7AAABjQ"]
[Sat Aug 29 05:06:21.558933 2026] [security2:error] [pid 1017536:tid 1017786] [client 40.83.93.50:12452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "termoenvases.net"] [uri "/wp-content/languages/plugins/about.php"] [unique_id "apK9LSJcY4fy7tP-rU3-mQAAAow"]
[Sat Aug 29 05:06:21.559992 2026] [security2:error] [pid 1018003:tid 1018224] [client 4.205.62.107:22279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/bengi.php"] [unique_id "apK9LTAh5Y1i2tUxg4Hy7QAABgE"]
[Sat Aug 29 05:06:21.561351 2026] [security2:error] [pid 1017536:tid 1017788] [client 20.48.250.41:65044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/ckk.php"] [unique_id "apK9LSJcY4fy7tP-rU3-mwAAAo4"]
[Sat Aug 29 05:06:21.561427 2026] [security2:error] [pid 1017536:tid 1017737] [client 168.107.94.195:50173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9LSJcY4fy7tP-rU3-mgAAAls"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:21.565019 2026] [security2:error] [pid 1017536:tid 1017678] [client 20.220.204.93:59077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/6bcwiqwj.php"] [unique_id "apK9LSJcY4fy7tP-rU3-nAAAAiA"]
[Sat Aug 29 05:06:21.565326 2026] [core:error] [pid 1018003:tid 1018196] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.565339 2026] [core:error] [pid 1018003:tid 1018196] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.579397 2026] [security2:error] [pid 1017536:tid 1017672] [client 20.63.81.20:60484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/mad.php"] [unique_id "apK9LSJcY4fy7tP-rU3-oAAAAho"]
[Sat Aug 29 05:06:21.586609 2026] [security2:error] [pid 1018003:tid 1018162] [client 20.63.81.20:46939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/coffexium.php"] [unique_id "apK9LTAh5Y1i2tUxg4Hy8gAABcM"]
[Sat Aug 29 05:06:21.587525 2026] [security2:error] [pid 1018003:tid 1018195] [client 20.48.251.3:62127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/pouhg.php"] [unique_id "apK9LTAh5Y1i2tUxg4Hy8wAABeQ"]
[Sat Aug 29 05:06:21.591397 2026] [security2:error] [pid 1017536:tid 1017792] [client 20.220.204.93:64377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/class.php"] [unique_id "apK9LSJcY4fy7tP-rU3-oQAAApI"]
[Sat Aug 29 05:06:21.594520 2026] [core:error] [pid 1017536:tid 1017740] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.594537 2026] [core:error] [pid 1017536:tid 1017740] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.595739 2026] [security2:error] [pid 1018003:tid 1018212] [client 20.104.49.130:53677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/reviall.php"] [unique_id "apK9LTAh5Y1i2tUxg4Hy9QAABfU"]
[Sat Aug 29 05:06:21.599834 2026] [core:error] [pid 1017536:tid 1017681] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.599847 2026] [core:error] [pid 1017536:tid 1017681] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.600648 2026] [core:error] [pid 1017536:tid 1017686] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.600660 2026] [core:error] [pid 1017536:tid 1017686] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.613326 2026] [security2:error] [pid 1017536:tid 1017577] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/admin-app/.env"] [unique_id "apK9LSJcY4fy7tP-rU3-qwACWig"]
[Sat Aug 29 05:06:21.639659 2026] [security2:error] [pid 1018003:tid 1018171] [client 158.23.184.117:4513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/new.php"] [unique_id "apK9LTAh5Y1i2tUxg4Hy-wAABcw"]
[Sat Aug 29 05:06:21.642524 2026] [core:error] [pid 1017536:tid 1017644] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.642539 2026] [core:error] [pid 1017536:tid 1017644] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.642622 2026] [core:error] [pid 1017536:tid 1017651] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.642634 2026] [core:error] [pid 1017536:tid 1017651] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.642972 2026] [core:error] [pid 1017536:tid 1017554] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.642982 2026] [core:error] [pid 1017536:tid 1017554] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.646875 2026] [core:error] [pid 1018003:tid 1018259] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.646887 2026] [core:error] [pid 1018003:tid 1018259] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.653653 2026] [security2:error] [pid 1018003:tid 1018191] [client 171.61.160.196:22281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.160.61.171.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK9LTAh5Y1i2tUxg4Hy_wAABeA"]
[Sat Aug 29 05:06:21.653756 2026] [security2:error] [pid 1018003:tid 1018191] [client 171.61.160.196:22281] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK9LTAh5Y1i2tUxg4Hy_wAABeA"]
[Sat Aug 29 05:06:21.680822 2026] [security2:error] [pid 1017536:tid 1017773] [client 68.155.159.216:58327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/bk/index.php"] [unique_id "apK9LSJcY4fy7tP-rU3-tgAAAn8"]
[Sat Aug 29 05:06:21.683666 2026] [security2:error] [pid 1017536:tid 1017675] [client 4.205.62.107:55945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/register.php"] [unique_id "apK9LSJcY4fy7tP-rU3-twAAAh0"]
[Sat Aug 29 05:06:21.703132 2026] [security2:error] [pid 1017536:tid 1017760] [client 20.48.251.3:33283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/wdf.php"] [unique_id "apK9LSJcY4fy7tP-rU3-uAAAAnI"]
[Sat Aug 29 05:06:21.705724 2026] [core:error] [pid 1018003:tid 1018173] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.705742 2026] [core:error] [pid 1018003:tid 1018173] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.708969 2026] [core:error] [pid 1017536:tid 1017669] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.708986 2026] [core:error] [pid 1017536:tid 1017669] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.709371 2026] [security2:error] [pid 1017536:tid 1017711] [client 20.63.81.20:60447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/st.php"] [unique_id "apK9LSJcY4fy7tP-rU3-uwAAAkE"]
[Sat Aug 29 05:06:21.710158 2026] [security2:error] [pid 1018003:tid 1018143] [remote 93.123.109.228:34972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK9LTAh5Y1i2tUxg4HzCAAGD3o"]
[Sat Aug 29 05:06:21.710237 2026] [core:error] [pid 1018003:tid 1018230] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.710254 2026] [core:error] [pid 1018003:tid 1018230] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.715965 2026] [core:error] [pid 1017536:tid 1017747] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.715982 2026] [core:error] [pid 1017536:tid 1017747] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.716055 2026] [core:error] [pid 1017536:tid 1017765] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.716067 2026] [core:error] [pid 1017536:tid 1017765] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.716197 2026] [security2:error] [pid 1018003:tid 1018190] [client 20.48.251.3:3329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/phpversion.php"] [unique_id "apK9LTAh5Y1i2tUxg4HzCQAABd8"]
[Sat Aug 29 05:06:21.716235 2026] [core:error] [pid 1017536:tid 1017734] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.716247 2026] [core:error] [pid 1017536:tid 1017734] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.718478 2026] [core:error] [pid 1017536:tid 1017704] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.718490 2026] [core:error] [pid 1017536:tid 1017704] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.721558 2026] [security2:error] [pid 1017536:tid 1017777] [client 20.63.81.20:46954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/BDKR28WP.php"] [unique_id "apK9LSJcY4fy7tP-rU3-wQAAAoM"]
[Sat Aug 29 05:06:21.730651 2026] [security2:error] [pid 1017536:tid 1017710] [client 20.52.41.200:1248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-content/uploads/min.php"] [unique_id "apK9LSJcY4fy7tP-rU3-wgAAAkA"]
[Sat Aug 29 05:06:21.733343 2026] [security2:error] [pid 1017536:tid 1017710] [client 145.239.10.137:50754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.10.239.145.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "greenglobalmall.com"] [uri "/admin.php"] [unique_id "apK9LSJcY4fy7tP-rU3-wwAAAkA"], referer: http://greenglobalmall.com/admin.php
[Sat Aug 29 05:06:21.735099 2026] [security2:error] [pid 1018003:tid 1018231] [client 52.139.37.240:30199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thesldiet.com"] [uri "/about.php7"] [unique_id "apK9LTAh5Y1i2tUxg4HzCwAABgc"]
[Sat Aug 29 05:06:21.735591 2026] [security2:error] [pid 1017536:tid 1017757] [client 20.48.250.41:65096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.dnichols4.com"] [uri "/R57.php"] [unique_id "apK9LSJcY4fy7tP-rU3-xAAAAm8"]
[Sat Aug 29 05:06:21.752965 2026] [security2:error] [pid 1017536:tid 1017680] [client 52.139.37.240:12899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK9LSJcY4fy7tP-rU3-xgAAAiI"]
[Sat Aug 29 05:06:21.760396 2026] [security2:error] [pid 1017536:tid 1017745] [client 20.104.49.130:47850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/js.php"] [unique_id "apK9LSJcY4fy7tP-rU3-xwAAAmM"]
[Sat Aug 29 05:06:21.762011 2026] [security2:error] [pid 1017536:tid 1017689] [client 209.50.183.3:11225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.183.50.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK9LSJcY4fy7tP-rU3-ugAAAis"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:06:21.763016 2026] [security2:error] [pid 1018003:tid 1018240] [client 68.155.159.216:12170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/cgi-bin/index.php"] [unique_id "apK9LTAh5Y1i2tUxg4HzDQAABhA"]
[Sat Aug 29 05:06:21.764031 2026] [security2:error] [pid 1018003:tid 1018225] [client 20.151.200.44:64881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/advanced.php"] [unique_id "apK9LTAh5Y1i2tUxg4HzDgAABgI"]
[Sat Aug 29 05:06:21.765082 2026] [security2:error] [pid 1017536:tid 1017786] [client 74.7.241.152:35450] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.xow.umh.mybluehost.me"] [uri "/robots.txt"] [unique_id "apK9LSJcY4fy7tP-rU3-yAACjGQ"]
[Sat Aug 29 05:06:21.775305 2026] [core:error] [pid 1017536:tid 1017656] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.775323 2026] [core:error] [pid 1017536:tid 1017656] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.777685 2026] [security2:error] [pid 1017536:tid 1017744] [client 20.220.204.93:59018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/easy.php"] [unique_id "apK9LSJcY4fy7tP-rU3-ygAAAmI"]
[Sat Aug 29 05:06:21.787076 2026] [core:error] [pid 1018003:tid 1018226] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.787096 2026] [core:error] [pid 1018003:tid 1018226] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.787813 2026] [security2:error] [pid 1017536:tid 1017672] [client 158.23.184.117:4817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/wp-content/plugins/revslider/admin.php"] [unique_id "apK9LSJcY4fy7tP-rU3-zQAAAho"]
[Sat Aug 29 05:06:21.795189 2026] [security2:error] [pid 1017536:tid 1017556] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/admin/phpinfo.php"] [unique_id "apK9LSJcY4fy7tP-rU3-zwACVhM"]
[Sat Aug 29 05:06:21.795221 2026] [security2:error] [pid 1017536:tid 1017584] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/admin_phpinfo.php"] [unique_id "apK9LSJcY4fy7tP-rU3-0wACVi8"]
[Sat Aug 29 05:06:21.797959 2026] [core:error] [pid 1017536:tid 1017622] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.797989 2026] [core:error] [pid 1017536:tid 1017622] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.798696 2026] [core:error] [pid 1017536:tid 1017641] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.798716 2026] [core:error] [pid 1017536:tid 1017641] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.799184 2026] [core:error] [pid 1017536:tid 1017649] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.799195 2026] [core:error] [pid 1017536:tid 1017649] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.814268 2026] [security2:error] [pid 1017536:tid 1017721] [client 20.220.204.93:63758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/8.php"] [unique_id "apK9LSJcY4fy7tP-rU3-1AAAAks"]
[Sat Aug 29 05:06:21.823021 2026] [security2:error] [pid 1017536:tid 1017773] [client 158.23.184.117:59534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/.dj/index.php"] [unique_id "apK9LSJcY4fy7tP-rU3-1gAAAn8"]
[Sat Aug 29 05:06:21.826015 2026] [security2:error] [pid 1017536:tid 1017695] [client 68.155.159.216:51518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/about/function.php"] [unique_id "apK9LSJcY4fy7tP-rU3-1wAAAjE"]
[Sat Aug 29 05:06:21.826909 2026] [security2:error] [pid 1018003:tid 1018203] [client 20.196.209.81:16710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/spip.php"] [unique_id "apK9LTAh5Y1i2tUxg4HzFQAABew"]
[Sat Aug 29 05:06:21.839586 2026] [security2:error] [pid 1017536:tid 1017617] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/administrator/.env"] [unique_id "apK9LSJcY4fy7tP-rU3-2AACc1A"]
[Sat Aug 29 05:06:21.842053 2026] [security2:error] [pid 1018003:tid 1018246] [client 20.63.81.20:56940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/alfanew.php"] [unique_id "apK9LTAh5Y1i2tUxg4HzGgAABhY"]
[Sat Aug 29 05:06:21.844756 2026] [security2:error] [pid 1017536:tid 1017711] [client 20.48.251.3:61237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/adminfus.php"] [unique_id "apK9LSJcY4fy7tP-rU3-2QAAAkE"]
[Sat Aug 29 05:06:21.859375 2026] [security2:error] [pid 1017536:tid 1017769] [client 20.48.251.3:14311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/bb.php"] [unique_id "apK9LSJcY4fy7tP-rU3-2gAAAns"]
[Sat Aug 29 05:06:21.862425 2026] [security2:error] [pid 1017536:tid 1017654] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/api-backend/.env"] [unique_id "apK9LSJcY4fy7tP-rU3-3AACF3U"]
[Sat Aug 29 05:06:21.864344 2026] [security2:error] [pid 1018003:tid 1018213] [client 20.63.81.20:46926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/sf.php"] [unique_id "apK9LTAh5Y1i2tUxg4HzGwAABfY"]
[Sat Aug 29 05:06:21.864759 2026] [security2:error] [pid 1017536:tid 1017609] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/api-node/.env"] [unique_id "apK9LSJcY4fy7tP-rU3-3gACF0g"]
[Sat Aug 29 05:06:21.865569 2026] [core:error] [pid 1017536:tid 1017663] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.865582 2026] [core:error] [pid 1017536:tid 1017663] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.869264 2026] [security2:error] [pid 1017536:tid 1017647] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/api/.env"] [unique_id "apK9LSJcY4fy7tP-rU3-4AACO24"]
[Sat Aug 29 05:06:21.872833 2026] [core:error] [pid 1017536:tid 1017576] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.872846 2026] [core:error] [pid 1017536:tid 1017576] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.888028 2026] [security2:error] [pid 1017536:tid 1017788] [client 158.23.147.79:25591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK9LSJcY4fy7tP-rU3-5AAAAo4"]
[Sat Aug 29 05:06:21.888811 2026] [security2:error] [pid 1017536:tid 1017712] [client 68.155.159.216:52839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/.well-known/index.php"] [unique_id "apK9LSJcY4fy7tP-rU3-5QAAAkI"]
[Sat Aug 29 05:06:21.892418 2026] [security2:error] [pid 1018003:tid 1018025] [remote 103.171.88.220:32886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 220.88.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "muggoentertainment.com"] [uri "/xmlrpc.php"] [unique_id "apK9LTAh5Y1i2tUxg4HzHwAFxgQ"]
[Sat Aug 29 05:06:21.892614 2026] [security2:error] [pid 1018003:tid 1018165] [client 103.171.88.220:32886] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "muggoentertainment.com"] [uri "/xmlrpc.php"] [unique_id "apK9LTAh5Y1i2tUxg4HzHwAFxgQ"]
[Sat Aug 29 05:06:21.900079 2026] [security2:error] [pid 1018003:tid 1018186] [client 20.196.209.81:5952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-content/install.php"] [unique_id "apK9LTAh5Y1i2tUxg4HzIwAABds"]
[Sat Aug 29 05:06:21.903743 2026] [core:error] [pid 1017536:tid 1017719] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.903761 2026] [core:error] [pid 1017536:tid 1017719] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.904164 2026] [security2:error] [pid 1017536:tid 1017777] [client 158.23.147.79:59896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK9LSJcY4fy7tP-rU3-6QAAAoM"]
[Sat Aug 29 05:06:21.905320 2026] [core:error] [pid 1017536:tid 1017704] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.905336 2026] [core:error] [pid 1017536:tid 1017704] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.917121 2026] [security2:error] [pid 1018003:tid 1018216] [client 34.7.40.70:62612] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/id_rsa"] [unique_id "apK9LTAh5Y1i2tUxg4HzJgAABfk"]
[Sat Aug 29 05:06:21.927159 2026] [security2:error] [pid 1017536:tid 1017723] [client 34.7.40.70:62682] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/wp-config.php.bak"] [unique_id "apK9LSJcY4fy7tP-rU3-8gAAAk0"]
[Sat Aug 29 05:06:21.927684 2026] [cgid:error] [pid 1017536:tid 1017686] [client 34.7.40.70:62674] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:21.927906 2026] [cgid:error] [pid 1017536:tid 1017743] [client 34.7.40.70:62724] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:21.927984 2026] [security2:error] [pid 1018003:tid 1018271] [client 34.7.40.70:62678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.40.7.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/wp-config.php"] [unique_id "apK9LTAh5Y1i2tUxg4HzKQAABi8"]
[Sat Aug 29 05:06:21.928266 2026] [security2:error] [pid 1017536:tid 1017748] [client 34.7.40.70:62696] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/wp-config.php.old"] [unique_id "apK9LSJcY4fy7tP-rU3-9AAAAmY"]
[Sat Aug 29 05:06:21.928677 2026] [security2:error] [pid 1017536:tid 1017751] [client 34.7.40.70:62700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.40.7.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/config.php"] [unique_id "apK9LSJcY4fy7tP-rU3-7AAAAmk"]
[Sat Aug 29 05:06:21.928787 2026] [security2:error] [pid 1017536:tid 1017751] [client 34.7.40.70:62700] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "409"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/config.php"] [unique_id "apK9LSJcY4fy7tP-rU3-7AAAAmk"]
[Sat Aug 29 05:06:21.928873 2026] [security2:error] [pid 1017536:tid 1017681] [client 34.7.40.70:62638] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/key.pem"] [unique_id "apK9LSJcY4fy7tP-rU3-9QAAAiM"]
[Sat Aug 29 05:06:21.932076 2026] [cgid:error] [pid 1017536:tid 1017691] [client 34.7.40.70:62616] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:21.934375 2026] [security2:error] [pid 1018003:tid 1018182] [client 34.7.40.70:62660] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/privatekey.key"] [unique_id "apK9LTAh5Y1i2tUxg4HzJwAABdc"]
[Sat Aug 29 05:06:21.934891 2026] [cgid:error] [pid 1017536:tid 1017722] [client 34.7.40.70:62738] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:21.935546 2026] [security2:error] [pid 1017536:tid 1017724] [client 158.23.184.117:4633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/wp-content/images/uploads/admin.php"] [unique_id "apK9LSJcY4fy7tP-rU3-9wAAAk4"]
[Sat Aug 29 05:06:21.936709 2026] [security2:error] [pid 1017536:tid 1017686] [client 34.7.40.70:62674] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/404.shtml"] [unique_id "apK9LSJcY4fy7tP-rU3-6gAAAig"]
[Sat Aug 29 05:06:21.937883 2026] [security2:error] [pid 1017536:tid 1017687] [client 34.7.40.70:62620] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/id_dsa"] [unique_id "apK9LSJcY4fy7tP-rU3-8QAAAik"]
[Sat Aug 29 05:06:21.938626 2026] [cgid:error] [pid 1017536:tid 1017713] [client 34.7.40.70:62632] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:21.940853 2026] [security2:error] [pid 1018003:tid 1018189] [client 52.139.37.240:30191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thesldiet.com"] [uri "/cron.php"] [unique_id "apK9LTAh5Y1i2tUxg4HzLAAABd4"]
[Sat Aug 29 05:06:21.941457 2026] [cgid:error] [pid 1017536:tid 1017780] [client 34.7.40.70:62736] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:21.941707 2026] [security2:error] [pid 1017536:tid 1017713] [client 20.220.204.93:59013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/fresh3.php"] [unique_id "apK9LSJcY4fy7tP-rU3--AAAAkM"]
[Sat Aug 29 05:06:21.941969 2026] [core:error] [pid 1017536:tid 1017635] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.941985 2026] [core:error] [pid 1017536:tid 1017635] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.945568 2026] [security2:error] [pid 1018003:tid 1018273] [client 20.104.49.130:58223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/wp-blogs.php"] [unique_id "apK9LTAh5Y1i2tUxg4HzLQAABjE"]
[Sat Aug 29 05:06:21.946625 2026] [cgid:error] [pid 1018003:tid 1018261] [client 34.7.40.70:62650] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:21.947231 2026] [security2:error] [pid 1017536:tid 1017734] [client 52.139.37.240:12901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "apK9LSJcY4fy7tP-rU3--gAAAlg"]
[Sat Aug 29 05:06:21.947481 2026] [core:error] [pid 1017536:tid 1017633] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.947500 2026] [core:error] [pid 1017536:tid 1017633] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.948452 2026] [security2:error] [pid 1018003:tid 1018262] [client 168.107.94.195:50490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9LTAh5Y1i2tUxg4HzLgAABiY"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:21.949024 2026] [security2:error] [pid 1018003:tid 1018192] [client 34.7.40.70:62710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.40.7.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/config.php.bak"] [unique_id "apK9LTAh5Y1i2tUxg4HzKAAABeE"]
[Sat Aug 29 05:06:21.949853 2026] [core:error] [pid 1017536:tid 1017659] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.949864 2026] [core:error] [pid 1017536:tid 1017659] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.965328 2026] [core:error] [pid 1017536:tid 1017539] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.965350 2026] [core:error] [pid 1017536:tid 1017539] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.969236 2026] [core:error] [pid 1017536:tid 1017574] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.969254 2026] [core:error] [pid 1017536:tid 1017574] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.969508 2026] [core:error] [pid 1017536:tid 1017592] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.969524 2026] [core:error] [pid 1017536:tid 1017592] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.971582 2026] [security2:error] [pid 1017536:tid 1017710] [client 158.23.184.117:59560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/.info.php"] [unique_id "apK9LSJcY4fy7tP-rU3_AQAAAkA"]
[Sat Aug 29 05:06:21.973377 2026] [security2:error] [pid 1018003:tid 1018277] [client 20.48.251.3:61197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/avim.php"] [unique_id "apK9LTAh5Y1i2tUxg4HzMQAABjU"]
[Sat Aug 29 05:06:21.978322 2026] [cgid:error] [pid 1017536:tid 1017740] [client 62.60.130.128:49162] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/protypeg/public_html/xyzece/404.shtml
[Sat Aug 29 05:06:21.980900 2026] [security2:error] [pid 1018003:tid 1018043] [remote 93.123.109.228:34972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/admin/phpinfo.php"] [unique_id "apK9LTAh5Y1i2tUxg4HzMgAF2RY"]
[Sat Aug 29 05:06:21.983827 2026] [security2:error] [pid 1018003:tid 1018183] [client 20.63.81.20:60458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/ioxi.php"] [unique_id "apK9LTAh5Y1i2tUxg4HzMwAABdg"]
[Sat Aug 29 05:06:21.989893 2026] [security2:error] [pid 1017536:tid 1017591] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/api/info.php"] [unique_id "apK9LSJcY4fy7tP-rU3_AwACKzY"]
[Sat Aug 29 05:06:21.991550 2026] [core:error] [pid 1018003:tid 1018185] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.991567 2026] [core:error] [pid 1018003:tid 1018185] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.992336 2026] [core:error] [pid 1017536:tid 1017672] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.992346 2026] [core:error] [pid 1017536:tid 1017672] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:21.998779 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.63.81.20:44443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/k.php"] [unique_id "apK9LTAh5Y1i2tUxg4HzNgAABcI"]
[Sat Aug 29 05:06:22.017797 2026] [core:error] [pid 1017536:tid 1017579] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.017816 2026] [core:error] [pid 1017536:tid 1017579] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.018662 2026] [security2:error] [pid 1017536:tid 1017709] [client 68.155.159.216:14120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK9LiJcY4fy7tP-rU3_CAAAAj8"]
[Sat Aug 29 05:06:22.023785 2026] [core:error] [pid 1017536:tid 1017640] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.023814 2026] [core:error] [pid 1017536:tid 1017640] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.023909 2026] [autoindex:error] [pid 1018003:tid 1018054] [remote 74.7.243.205:57434] AH01276: Cannot serve directory /home3/xowumhmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:06:22.024984 2026] [core:error] [pid 1017536:tid 1017629] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.025000 2026] [core:error] [pid 1017536:tid 1017629] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.026094 2026] [core:error] [pid 1017536:tid 1017599] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.026108 2026] [core:error] [pid 1017536:tid 1017599] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.033380 2026] [security2:error] [pid 1018003:tid 1018056] [remote 93.123.109.228:34972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/admin_phpinfo.php"] [unique_id "apK9LjAh5Y1i2tUxg4HzOwAGFSM"]
[Sat Aug 29 05:06:22.046161 2026] [security2:error] [pid 1018003:tid 1018195] [client 158.23.147.79:63018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/mah.php"] [unique_id "apK9LjAh5Y1i2tUxg4HzPwAABeQ"]
[Sat Aug 29 05:06:22.046690 2026] [core:error] [pid 1018003:tid 1018162] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.046709 2026] [core:error] [pid 1018003:tid 1018162] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.064578 2026] [security2:error] [pid 1018003:tid 1018167] [client 20.220.204.93:64317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/0x0x.php"] [unique_id "apK9LjAh5Y1i2tUxg4HzQAAABcg"]
[Sat Aug 29 05:06:22.069971 2026] [security2:error] [pid 1017536:tid 1017546] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/api/phpinfo.php"] [unique_id "apK9LiJcY4fy7tP-rU3_DQACOgk"]
[Sat Aug 29 05:06:22.072852 2026] [core:error] [pid 1017536:tid 1017537] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.072869 2026] [core:error] [pid 1017536:tid 1017537] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.087033 2026] [security2:error] [pid 1017536:tid 1017752] [client 192.145.125.70:48166] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "nicolaandstevenlochrane.strangeworx.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "apK9LiJcY4fy7tP-rU3_DgAAAmo"]
[Sat Aug 29 05:06:22.087507 2026] [security2:error] [pid 1017536:tid 1017757] [client 20.220.204.93:59062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/bgymj.php"] [unique_id "apK9LiJcY4fy7tP-rU3_DwAAAm8"]
[Sat Aug 29 05:06:22.119105 2026] [security2:error] [pid 1017536:tid 1017776] [client 158.23.184.117:21541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/.trash7206/index.php"] [unique_id "apK9LiJcY4fy7tP-rU3_EgAAAoI"]
[Sat Aug 29 05:06:22.123191 2026] [security2:error] [pid 1017536:tid 1017777] [client 158.23.184.117:4627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/tools.php"] [unique_id "apK9LiJcY4fy7tP-rU3_FgAAAoM"]
[Sat Aug 29 05:06:22.128094 2026] [security2:error] [pid 1018003:tid 1018166] [client 20.63.81.20:60479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/TNT.php"] [unique_id "apK9LjAh5Y1i2tUxg4HzRwAABcc"]
[Sat Aug 29 05:06:22.133670 2026] [security2:error] [pid 1017536:tid 1017678] [client 52.139.37.240:29965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thesldiet.com"] [uri "/wp-2019.php"] [unique_id "apK9LiJcY4fy7tP-rU3_GwAAAiA"]
[Sat Aug 29 05:06:22.146580 2026] [security2:error] [pid 1018003:tid 1018266] [client 20.63.81.20:44505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/82.php"] [unique_id "apK9LjAh5Y1i2tUxg4HzSgAABio"]
[Sat Aug 29 05:06:22.147630 2026] [core:error] [pid 1017536:tid 1017745] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.147647 2026] [core:error] [pid 1017536:tid 1017745] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.148518 2026] [security2:error] [pid 1017536:tid 1017705] [client 52.139.37.240:12442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9LiJcY4fy7tP-rU3_IgAAAjs"]
[Sat Aug 29 05:06:22.148538 2026] [core:error] [pid 1018003:tid 1018194] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.148547 2026] [core:error] [pid 1018003:tid 1018194] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.149493 2026] [core:error] [pid 1018003:tid 1018191] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.149507 2026] [core:error] [pid 1018003:tid 1018191] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.149587 2026] [core:error] [pid 1018003:tid 1018251] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.149598 2026] [core:error] [pid 1018003:tid 1018251] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.152087 2026] [core:error] [pid 1017536:tid 1017710] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.152100 2026] [core:error] [pid 1017536:tid 1017710] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.161538 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.151.200.44:64254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/blox.php"] [unique_id "apK9LiJcY4fy7tP-rU3_JgAAAlY"]
[Sat Aug 29 05:06:22.164825 2026] [core:error] [pid 1018003:tid 1018150] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.164840 2026] [core:error] [pid 1018003:tid 1018150] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.173541 2026] [security2:error] [pid 1018003:tid 1018190] [client 68.155.159.216:16286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/admin.php"] [unique_id "apK9LjAh5Y1i2tUxg4HzVQAABd8"]
[Sat Aug 29 05:06:22.173718 2026] [security2:error] [pid 1017536:tid 1017650] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/apis/.env"] [unique_id "apK9LiJcY4fy7tP-rU3_KAACTnE"]
[Sat Aug 29 05:06:22.175763 2026] [core:error] [pid 1017536:tid 1017581] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.175778 2026] [core:error] [pid 1017536:tid 1017581] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.175971 2026] [core:error] [pid 1017536:tid 1017639] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.175981 2026] [core:error] [pid 1017536:tid 1017639] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.180644 2026] [core:error] [pid 1018003:tid 1018244] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.180661 2026] [core:error] [pid 1018003:tid 1018244] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.181649 2026] [core:error] [pid 1017536:tid 1017790] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.181677 2026] [core:error] [pid 1017536:tid 1017790] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.183253 2026] [security2:error] [pid 1017536:tid 1017669] [client 20.52.41.200:1777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK9LiJcY4fy7tP-rU3_KwAAAhc"]
[Sat Aug 29 05:06:22.184148 2026] [core:error] [pid 1018003:tid 1018234] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.184160 2026] [core:error] [pid 1018003:tid 1018234] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.202146 2026] [security2:error] [pid 1018003:tid 1018072] [remote 93.123.109.228:34972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/api/info.php"] [unique_id "apK9LjAh5Y1i2tUxg4HzWwAGFTM"]
[Sat Aug 29 05:06:22.202583 2026] [security2:error] [pid 1018003:tid 1018225] [client 20.220.204.93:64963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/166.php"] [unique_id "apK9LjAh5Y1i2tUxg4HzXAAABgI"]
[Sat Aug 29 05:06:22.208776 2026] [security2:error] [pid 1018003:tid 1018226] [client 158.23.147.79:26507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-content/uploads/index.php"] [unique_id "apK9LjAh5Y1i2tUxg4HzXQAABgM"]
[Sat Aug 29 05:06:22.219427 2026] [security2:error] [pid 1018003:tid 1018242] [client 68.155.159.216:33721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK9LjAh5Y1i2tUxg4HzXwAABhI"]
[Sat Aug 29 05:06:22.224644 2026] [security2:error] [pid 1017536:tid 1017683] [client 20.196.209.81:4448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/backup.php"] [unique_id "apK9LiJcY4fy7tP-rU3_MgAAAiU"]
[Sat Aug 29 05:06:22.225425 2026] [security2:error] [pid 1017536:tid 1017573] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/app/.env"] [unique_id "apK9LiJcY4fy7tP-rU3_MwACayQ"]
[Sat Aug 29 05:06:22.248191 2026] [core:error] [pid 1017536:tid 1017770] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.248207 2026] [core:error] [pid 1017536:tid 1017770] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.249747 2026] [security2:error] [pid 1017536:tid 1017698] [client 158.23.147.79:48346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK9LiJcY4fy7tP-rU3_NwAAAjQ"]
[Sat Aug 29 05:06:22.250206 2026] [security2:error] [pid 1017536:tid 1017711] [client 20.197.61.180:17003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-content/install.php"] [unique_id "apK9LiJcY4fy7tP-rU3_OAAAAkE"]
[Sat Aug 29 05:06:22.265439 2026] [security2:error] [pid 1017536:tid 1017695] [client 158.23.184.117:60081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/.trash7206/min.php"] [unique_id "apK9LiJcY4fy7tP-rU3_OgAAAjE"]
[Sat Aug 29 05:06:22.266166 2026] [security2:error] [pid 1018003:tid 1018246] [client 20.63.81.20:60526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/cd.php"] [unique_id "apK9LjAh5Y1i2tUxg4HzZQAABhY"]
[Sat Aug 29 05:06:22.266993 2026] [security2:error] [pid 1018003:tid 1018153] [client 158.23.184.117:4863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/wp-content/uploads/my.php"] [unique_id "apK9LjAh5Y1i2tUxg4HzZgAABbo"]
[Sat Aug 29 05:06:22.270918 2026] [core:error] [pid 1017536:tid 1017748] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.270932 2026] [core:error] [pid 1017536:tid 1017748] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.276314 2026] [core:error] [pid 1018003:tid 1018219] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.276337 2026] [core:error] [pid 1018003:tid 1018219] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.283782 2026] [security2:error] [pid 1018003:tid 1018207] [client 20.63.81.20:46875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/dex.php"] [unique_id "apK9LjAh5Y1i2tUxg4HzaAAABfA"]
[Sat Aug 29 05:06:22.307864 2026] [security2:error] [pid 1018003:tid 1018076] [remote 93.123.109.228:34972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/api/phpinfo.php"] [unique_id "apK9LjAh5Y1i2tUxg4HzawAF-Tc"]
[Sat Aug 29 05:06:22.323770 2026] [security2:error] [pid 1017536:tid 1017740] [client 20.220.204.93:59020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/ws69.php"] [unique_id "apK9LiJcY4fy7tP-rU3_RwAAAl4"]
[Sat Aug 29 05:06:22.326026 2026] [security2:error] [pid 1018003:tid 1018172] [client 52.139.37.240:29967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thesldiet.com"] [uri "/gecko-new.php"] [unique_id "apK9LjAh5Y1i2tUxg4HzbgAABc0"]
[Sat Aug 29 05:06:22.326040 2026] [security2:error] [pid 1018003:tid 1018173] [client 65.111.10.14:46805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.10.111.65.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK9LjAh5Y1i2tUxg4HzaQAABc4"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:06:22.327416 2026] [security2:error] [pid 1017536:tid 1017722] [client 168.107.94.195:50892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9LiJcY4fy7tP-rU3_SgAAAkw"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:22.328584 2026] [security2:error] [pid 1018003:tid 1018271] [client 158.23.147.79:32755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK9LjAh5Y1i2tUxg4HzbwAABi8"]
[Sat Aug 29 05:06:22.332367 2026] [security2:error] [pid 1017536:tid 1017673] [client 4.205.62.107:22299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/w.php"] [unique_id "apK9LiJcY4fy7tP-rU3_UAAAAhs"]
[Sat Aug 29 05:06:22.342178 2026] [security2:error] [pid 1017536:tid 1017720] [client 68.155.159.216:49162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/chosen.php"] [unique_id "apK9LiJcY4fy7tP-rU3_WAAAAko"]
[Sat Aug 29 05:06:22.343735 2026] [core:error] [pid 1017536:tid 1017680] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.343751 2026] [core:error] [pid 1017536:tid 1017680] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.348370 2026] [core:error] [pid 1017536:tid 1017606] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.348388 2026] [core:error] [pid 1017536:tid 1017606] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.353106 2026] [core:error] [pid 1017536:tid 1017672] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.353120 2026] [core:error] [pid 1017536:tid 1017672] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.358744 2026] [core:error] [pid 1017536:tid 1017732] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.358757 2026] [core:error] [pid 1017536:tid 1017732] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.359670 2026] [core:error] [pid 1018003:tid 1018189] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.359682 2026] [core:error] [pid 1018003:tid 1018189] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.363695 2026] [security2:error] [pid 1018003:tid 1018218] [client 4.205.62.107:22250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/loxi-o.php"] [unique_id "apK9LjAh5Y1i2tUxg4HzdAAABfs"]
[Sat Aug 29 05:06:22.364532 2026] [core:error] [pid 1017536:tid 1017721] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.364546 2026] [core:error] [pid 1017536:tid 1017721] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.366311 2026] [core:error] [pid 1017536:tid 1017773] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.366323 2026] [core:error] [pid 1017536:tid 1017773] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.366766 2026] [core:error] [pid 1017536:tid 1017669] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.366781 2026] [core:error] [pid 1017536:tid 1017669] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.367344 2026] [core:error] [pid 1018003:tid 1018188] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.367366 2026] [core:error] [pid 1018003:tid 1018188] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.368144 2026] [core:error] [pid 1017536:tid 1017790] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.368158 2026] [core:error] [pid 1017536:tid 1017790] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.369227 2026] [core:error] [pid 1018003:tid 1018192] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.369241 2026] [core:error] [pid 1018003:tid 1018192] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.369930 2026] [core:error] [pid 1017536:tid 1017724] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.369944 2026] [core:error] [pid 1017536:tid 1017724] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.379677 2026] [security2:error] [pid 1017536:tid 1017778] [client 20.104.49.130:43593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/x1da.php"] [unique_id "apK9LiJcY4fy7tP-rU3_ZgAAAoQ"]
[Sat Aug 29 05:06:22.394964 2026] [security2:error] [pid 1017536:tid 1017719] [client 4.205.62.107:65419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/gnmlc.php"] [unique_id "apK9LiJcY4fy7tP-rU3_ZwAAAkk"]
[Sat Aug 29 05:06:22.399652 2026] [core:error] [pid 1017536:tid 1017753] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.399669 2026] [core:error] [pid 1017536:tid 1017753] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.404429 2026] [security2:error] [pid 1018003:tid 1018269] [client 52.139.37.240:12443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/wp-index.php"] [unique_id "apK9LjAh5Y1i2tUxg4HzewAABi0"]
[Sat Aug 29 05:06:22.406800 2026] [security2:error] [pid 1018003:tid 1018195] [client 20.63.81.20:56915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/luuf.php"] [unique_id "apK9LjAh5Y1i2tUxg4HzfgAABeQ"]
[Sat Aug 29 05:06:22.412218 2026] [security2:error] [pid 1018003:tid 1018277] [client 158.23.184.117:59548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/.well-known//index.php"] [unique_id "apK9LjAh5Y1i2tUxg4HzgAAABjU"]
[Sat Aug 29 05:06:22.414818 2026] [security2:error] [pid 1018003:tid 1018163] [client 158.23.147.79:50170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/worksec.php"] [unique_id "apK9LjAh5Y1i2tUxg4HzgQAABcQ"]
[Sat Aug 29 05:06:22.419979 2026] [core:error] [pid 1017536:tid 1017540] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.419999 2026] [core:error] [pid 1017536:tid 1017540] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.423230 2026] [core:error] [pid 1017536:tid 1017541] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.423244 2026] [core:error] [pid 1017536:tid 1017541] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.430252 2026] [security2:error] [pid 1017536:tid 1017722] [client 20.220.204.93:62587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/h2a2ck.php"] [unique_id "apK9LiJcY4fy7tP-rU3_awAAAkw"]
[Sat Aug 29 05:06:22.431332 2026] [security2:error] [pid 1017536:tid 1017747] [client 158.23.184.117:4540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/wp-includes/themes/uploads/config.php"] [unique_id "apK9LiJcY4fy7tP-rU3_bAAAAmU"]
[Sat Aug 29 05:06:22.446529 2026] [security2:error] [pid 1018003:tid 1018275] [client 20.151.200.44:64958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/kcs.php"] [unique_id "apK9LjAh5Y1i2tUxg4HzggAABjM"]
[Sat Aug 29 05:06:22.466687 2026] [security2:error] [pid 1017536:tid 1017689] [client 20.220.204.93:59080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/ccs.php"] [unique_id "apK9LiJcY4fy7tP-rU3_cQAAAis"]
[Sat Aug 29 05:06:22.476497 2026] [security2:error] [pid 1017536:tid 1017674] [client 20.63.81.20:46862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/inso.php"] [unique_id "apK9LiJcY4fy7tP-rU3_cgAAAhw"]
[Sat Aug 29 05:06:22.481689 2026] [security2:error] [pid 1017536:tid 1017706] [client 20.196.209.81:5991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK9LiJcY4fy7tP-rU3_cwAAAjw"]
[Sat Aug 29 05:06:22.497227 2026] [fcgid:warn] [pid 1018003:tid 1018233] (70014)End of file found: [client 66.132.172.39:31018] mod_fcgid: can't get data from http client
[Sat Aug 29 05:06:22.509555 2026] [core:error] [pid 1017536:tid 1017582] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.509576 2026] [core:error] [pid 1017536:tid 1017582] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.510096 2026] [security2:error] [pid 1017536:tid 1017563] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/application/.env"] [unique_id "apK9LiJcY4fy7tP-rU3_egACGxo"]
[Sat Aug 29 05:06:22.510629 2026] [core:error] [pid 1017536:tid 1017707] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.510643 2026] [core:error] [pid 1017536:tid 1017707] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.513240 2026] [security2:error] [pid 1018003:tid 1018174] [client 158.23.147.79:30612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/login.php"] [unique_id "apK9LjAh5Y1i2tUxg4HzjgAABc8"]
[Sat Aug 29 05:06:22.514992 2026] [security2:error] [pid 1017536:tid 1017604] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/apps/.env"] [unique_id "apK9LiJcY4fy7tP-rU3_ewACG0M"]
[Sat Aug 29 05:06:22.523467 2026] [core:error] [pid 1017536:tid 1017567] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.523481 2026] [core:error] [pid 1017536:tid 1017567] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.523630 2026] [core:error] [pid 1017536:tid 1017550] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.523638 2026] [core:error] [pid 1017536:tid 1017550] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.523760 2026] [core:error] [pid 1017536:tid 1017625] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.523768 2026] [core:error] [pid 1017536:tid 1017625] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.523924 2026] [core:error] [pid 1017536:tid 1017595] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.523932 2026] [core:error] [pid 1017536:tid 1017595] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.525562 2026] [security2:error] [pid 1017536:tid 1017680] [client 52.139.37.240:29958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thesldiet.com"] [uri "/add_actualites.php"] [unique_id "apK9LiJcY4fy7tP-rU3_gAAAAiI"]
[Sat Aug 29 05:06:22.529160 2026] [core:error] [pid 1017536:tid 1017643] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.529171 2026] [core:error] [pid 1017536:tid 1017643] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.529869 2026] [core:error] [pid 1017536:tid 1017583] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.529878 2026] [core:error] [pid 1017536:tid 1017583] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.538441 2026] [core:error] [pid 1017536:tid 1017765] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.538452 2026] [core:error] [pid 1017536:tid 1017765] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.542971 2026] [core:error] [pid 1018003:tid 1018191] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.542983 2026] [core:error] [pid 1018003:tid 1018191] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.543680 2026] [core:error] [pid 1017536:tid 1017572] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.543693 2026] [core:error] [pid 1017536:tid 1017572] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.545582 2026] [security2:error] [pid 1017536:tid 1017712] [client 20.63.81.20:56901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/fex.php"] [unique_id "apK9LiJcY4fy7tP-rU3_hwAAAkI"]
[Sat Aug 29 05:06:22.551693 2026] [security2:error] [pid 1017536:tid 1017724] [client 158.23.147.79:24397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/.well-knownold/index.php"] [unique_id "apK9LiJcY4fy7tP-rU3_iAAAAk4"]
[Sat Aug 29 05:06:22.557548 2026] [security2:error] [pid 1017536:tid 1017773] [client 158.23.184.117:21542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/.well-known/about.php"] [unique_id "apK9LiJcY4fy7tP-rU3_iQAAAn8"]
[Sat Aug 29 05:06:22.572830 2026] [security2:error] [pid 1017536:tid 1017709] [client 158.23.184.117:4622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/av.php"] [unique_id "apK9LiJcY4fy7tP-rU3_jAAAAj8"]
[Sat Aug 29 05:06:22.573440 2026] [security2:error] [pid 1017536:tid 1017785] [client 158.23.147.79:35715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/.well-known/index.php"] [unique_id "apK9LiJcY4fy7tP-rU3_jQAAAos"]
[Sat Aug 29 05:06:22.586444 2026] [security2:error] [pid 1017536:tid 1017698] [client 20.151.200.44:64858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/wsz.php"] [unique_id "apK9LiJcY4fy7tP-rU3_jgAAAjQ"]
[Sat Aug 29 05:06:22.595960 2026] [core:error] [pid 1017536:tid 1017776] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.595977 2026] [core:error] [pid 1017536:tid 1017776] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.598228 2026] [security2:error] [pid 1017536:tid 1017788] [client 52.139.37.240:12422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/ww2.php"] [unique_id "apK9LiJcY4fy7tP-rU3_kgAAAo4"]
[Sat Aug 29 05:06:22.605754 2026] [security2:error] [pid 1017536:tid 1017723] [client 20.63.81.20:46919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/aa.php"] [unique_id "apK9LiJcY4fy7tP-rU3_kwAAAk0"]
[Sat Aug 29 05:06:22.635161 2026] [security2:error] [pid 1018003:tid 1018244] [client 20.220.204.93:59113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/mar.php"] [unique_id "apK9LjAh5Y1i2tUxg4HzngAABhQ"]
[Sat Aug 29 05:06:22.638133 2026] [security2:error] [pid 1018003:tid 1018258] [client 20.220.204.93:63199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/error_log.php"] [unique_id "apK9LjAh5Y1i2tUxg4HznwAABiI"]
[Sat Aug 29 05:06:22.647221 2026] [core:error] [pid 1017536:tid 1017737] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.647238 2026] [core:error] [pid 1017536:tid 1017737] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.648653 2026] [security2:error] [pid 1017536:tid 1017706] [client 4.205.62.107:9175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/png.php"] [unique_id "apK9LiJcY4fy7tP-rU3_mQAAAjw"]
[Sat Aug 29 05:06:22.652459 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.52.41.200:1756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/bthil.php"] [unique_id "apK9LiJcY4fy7tP-rU3_mwAAAnk"]
[Sat Aug 29 05:06:22.654541 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.196.209.81:19436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/haiterus.php"] [unique_id "apK9LiJcY4fy7tP-rU3_nAAAAlY"]
[Sat Aug 29 05:06:22.664472 2026] [core:error] [pid 1017536:tid 1017619] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.664487 2026] [core:error] [pid 1017536:tid 1017619] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.675112 2026] [security2:error] [pid 1017536:tid 1017680] [client 20.63.81.20:60516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/l.php"] [unique_id "apK9LiJcY4fy7tP-rU3_ogAAAiI"]
[Sat Aug 29 05:06:22.678451 2026] [security2:error] [pid 1017536:tid 1017751] [client 192.145.125.70:48168] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "nicolaandstevenlochrane.strangeworx.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "apK9LiJcY4fy7tP-rU3_owAAAmk"]
[Sat Aug 29 05:06:22.693321 2026] [core:error] [pid 1017536:tid 1017611] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.693339 2026] [core:error] [pid 1017536:tid 1017611] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.696227 2026] [core:error] [pid 1018003:tid 1018265] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.696245 2026] [core:error] [pid 1018003:tid 1018265] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.697441 2026] [security2:error] [pid 1017536:tid 1017710] [client 4.205.62.107:22247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/i.php"] [unique_id "apK9LiJcY4fy7tP-rU3_pwAAAkA"]
[Sat Aug 29 05:06:22.698321 2026] [security2:error] [pid 1018003:tid 1018259] [client 103.171.189.88:54502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9LjAh5Y1i2tUxg4HzpAAABiM"]
[Sat Aug 29 05:06:22.698430 2026] [security2:error] [pid 1018003:tid 1018259] [client 103.171.189.88:54502] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9LjAh5Y1i2tUxg4HzpAAABiM"]
[Sat Aug 29 05:06:22.705327 2026] [core:error] [pid 1017536:tid 1017558] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.705348 2026] [core:error] [pid 1017536:tid 1017558] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.708629 2026] [security2:error] [pid 1018003:tid 1018248] [client 168.107.94.195:51352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9LjAh5Y1i2tUxg4HzpwAABhg"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:22.712254 2026] [core:error] [pid 1017536:tid 1017618] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.712269 2026] [core:error] [pid 1017536:tid 1017618] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.726951 2026] [security2:error] [pid 1017536:tid 1017743] [client 52.139.37.240:29994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thesldiet.com"] [uri "/browse.php"] [unique_id "apK9LiJcY4fy7tP-rU3_sQAAAmE"]
[Sat Aug 29 05:06:22.727114 2026] [security2:error] [pid 1017536:tid 1017705] [client 20.151.200.44:64836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/msy.php"] [unique_id "apK9LiJcY4fy7tP-rU3_sgAAAjs"]
[Sat Aug 29 05:06:22.731362 2026] [core:error] [pid 1017536:tid 1017712] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.731379 2026] [core:error] [pid 1017536:tid 1017712] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.732248 2026] [core:error] [pid 1018003:tid 1018213] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.732263 2026] [core:error] [pid 1018003:tid 1018213] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.733797 2026] [core:error] [pid 1018003:tid 1018267] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.733821 2026] [core:error] [pid 1018003:tid 1018267] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.737027 2026] [core:error] [pid 1018003:tid 1018252] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.737032 2026] [core:error] [pid 1018003:tid 1018186] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.737045 2026] [core:error] [pid 1018003:tid 1018252] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.737049 2026] [core:error] [pid 1018003:tid 1018186] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.737054 2026] [core:error] [pid 1017536:tid 1017773] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.737064 2026] [core:error] [pid 1017536:tid 1017773] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.745796 2026] [core:error] [pid 1017536:tid 1017793] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.745814 2026] [core:error] [pid 1017536:tid 1017793] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.754019 2026] [security2:error] [pid 1017536:tid 1017776] [client 158.23.184.117:60041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK9LiJcY4fy7tP-rU3_uAAAAoI"]
[Sat Aug 29 05:06:22.760786 2026] [security2:error] [pid 1017536:tid 1017778] [client 20.63.81.20:44497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/img.php"] [unique_id "apK9LiJcY4fy7tP-rU3_uQAAAoQ"]
[Sat Aug 29 05:06:22.764693 2026] [security2:error] [pid 1018003:tid 1018255] [client 158.23.184.117:4810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/wp-includes/ID3/file.php"] [unique_id "apK9LjAh5Y1i2tUxg4HztgAABh8"]
[Sat Aug 29 05:06:22.778251 2026] [security2:error] [pid 1017536:tid 1017749] [client 68.155.159.216:58305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.heavenonearthgardens.com"] [uri "/first.php"] [unique_id "apK9LiJcY4fy7tP-rU3_vAAAAmc"]
[Sat Aug 29 05:06:22.783697 2026] [security2:error] [pid 1018003:tid 1018246] [client 52.139.37.240:15275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/ahax.php"] [unique_id "apK9LjAh5Y1i2tUxg4HzuwAABhY"]
[Sat Aug 29 05:06:22.791710 2026] [core:error] [pid 1017536:tid 1017729] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.791726 2026] [core:error] [pid 1017536:tid 1017729] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.792845 2026] [security2:error] [pid 1018003:tid 1018165] [client 52.139.37.240:12520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/7logs.php"] [unique_id "apK9LjAh5Y1i2tUxg4HzvAAABcY"]
[Sat Aug 29 05:06:22.808171 2026] [security2:error] [pid 1018003:tid 1018188] [client 20.63.81.20:60513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/xr.php"] [unique_id "apK9LjAh5Y1i2tUxg4HzwgAABd0"]
[Sat Aug 29 05:06:22.809250 2026] [security2:error] [pid 1017536:tid 1017777] [client 119.154.241.240:56523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.241.154.119.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "microprocesos.com"] [uri "/xmlrpc.php"] [unique_id "apK9LiJcY4fy7tP-rU3_vQAAAoM"]
[Sat Aug 29 05:06:22.809343 2026] [security2:error] [pid 1017536:tid 1017777] [client 119.154.241.240:56523] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "microprocesos.com"] [uri "/xmlrpc.php"] [unique_id "apK9LiJcY4fy7tP-rU3_vQAAAoM"]
[Sat Aug 29 05:06:22.811439 2026] [core:error] [pid 1018003:tid 1018159] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.811452 2026] [core:error] [pid 1018003:tid 1018159] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.817392 2026] [security2:error] [pid 1017536:tid 1017674] [client 20.220.204.93:64980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/403.php"] [unique_id "apK9LiJcY4fy7tP-rU3_wQAAAhw"]
[Sat Aug 29 05:06:22.820617 2026] [security2:error] [pid 1017536:tid 1017752] [client 4.205.62.107:55944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/xqq.php"] [unique_id "apK9LiJcY4fy7tP-rU3_wgAAAmo"]
[Sat Aug 29 05:06:22.845558 2026] [core:error] [pid 1017536:tid 1017732] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.845578 2026] [core:error] [pid 1017536:tid 1017732] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.864332 2026] [security2:error] [pid 1018003:tid 1018224] [client 20.220.204.93:59021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/ccu.php"] [unique_id "apK9LjAh5Y1i2tUxg4HzygAABgE"]
[Sat Aug 29 05:06:22.873888 2026] [security2:error] [pid 1017536:tid 1017733] [client 20.151.200.44:61955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/siln.php"] [unique_id "apK9LiJcY4fy7tP-rU3_yAAAAlc"]
[Sat Aug 29 05:06:22.875502 2026] [security2:error] [pid 1017536:tid 1017724] [client 68.155.159.216:12100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK9LiJcY4fy7tP-rU3_ywAAAk4"]
[Sat Aug 29 05:06:22.875910 2026] [security2:error] [pid 1017536:tid 1017713] [client 20.196.209.81:5120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-content/languages/chosen.php"] [unique_id "apK9LiJcY4fy7tP-rU3_zAAAAkM"]
[Sat Aug 29 05:06:22.878880 2026] [security2:error] [pid 1017536:tid 1017631] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/back-api/.env"] [unique_id "apK9LiJcY4fy7tP-rU3_zwACY14"]
[Sat Aug 29 05:06:22.879853 2026] [core:error] [pid 1017536:tid 1017545] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.879868 2026] [core:error] [pid 1017536:tid 1017545] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.882876 2026] [security2:error] [pid 1017536:tid 1017570] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/back-end/.env"] [unique_id "apK9LiJcY4fy7tP-rU3_0gACYyE"]
[Sat Aug 29 05:06:22.888585 2026] [security2:error] [pid 1017536:tid 1017790] [client 209.50.169.117:12427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.169.50.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK9LiJcY4fy7tP-rU3_wwAAApA"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:06:22.890178 2026] [core:error] [pid 1018003:tid 1018199] [client 20.197.61.180:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.890196 2026] [core:error] [pid 1018003:tid 1018199] [client 20.197.61.180:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.899877 2026] [security2:error] [pid 1017536:tid 1017680] [client 158.23.184.117:21524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/.well-known/acme-challenge/content.php"] [unique_id "apK9LiJcY4fy7tP-rU3_0wAAAiI"]
[Sat Aug 29 05:06:22.907707 2026] [core:error] [pid 1018003:tid 1018175] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.907729 2026] [core:error] [pid 1018003:tid 1018175] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.909416 2026] [security2:error] [pid 1017536:tid 1017765] [client 158.23.184.117:4818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.justinfenniman.com"] [uri "/wp-admin/css/fff.php"] [unique_id "apK9LiJcY4fy7tP-rU3_1AAAAnc"]
[Sat Aug 29 05:06:22.913963 2026] [core:error] [pid 1018003:tid 1018236] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.913983 2026] [core:error] [pid 1018003:tid 1018236] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.917206 2026] [security2:error] [pid 1017536:tid 1017593] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/backend-api/.env"] [unique_id "apK9LiJcY4fy7tP-rU3_1QACYzg"]
[Sat Aug 29 05:06:22.917422 2026] [security2:error] [pid 1017536:tid 1017610] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/back/.env"] [unique_id "apK9LiJcY4fy7tP-rU3_1wACY0k"]
[Sat Aug 29 05:06:22.917450 2026] [security2:error] [pid 1018003:tid 1018175] [client 20.63.81.20:44447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/222.php"] [unique_id "apK9LjAh5Y1i2tUxg4Hz1AAABdA"]
[Sat Aug 29 05:06:22.917643 2026] [security2:error] [pid 1017536:tid 1017642] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK9LiJcY4fy7tP-rU3_1gACY2k"]
[Sat Aug 29 05:06:22.920095 2026] [core:error] [pid 1017536:tid 1017577] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.920097 2026] [core:error] [pid 1018003:tid 1018177] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.920113 2026] [core:error] [pid 1017536:tid 1017577] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.920121 2026] [core:error] [pid 1018003:tid 1018177] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.940183 2026] [security2:error] [pid 1017536:tid 1017683] [client 52.139.37.240:30183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thesldiet.com"] [uri "/contentloader1.php"] [unique_id "apK9LiJcY4fy7tP-rU3_2QAAAiU"]
[Sat Aug 29 05:06:22.946074 2026] [security2:error] [pid 1018003:tid 1018156] [client 20.63.81.20:60445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/Q3.php"] [unique_id "apK9LjAh5Y1i2tUxg4Hz2AAABb0"]
[Sat Aug 29 05:06:22.950176 2026] [security2:error] [pid 1018003:tid 1018212] [client 68.155.159.216:51232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK9LjAh5Y1i2tUxg4Hz2QAABfU"]
[Sat Aug 29 05:06:22.964135 2026] [core:error] [pid 1017536:tid 1017630] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.964154 2026] [core:error] [pid 1017536:tid 1017630] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.964621 2026] [core:error] [pid 1017536:tid 1017554] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.964639 2026] [core:error] [pid 1017536:tid 1017554] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.964846 2026] [core:error] [pid 1017536:tid 1017651] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.964854 2026] [core:error] [pid 1017536:tid 1017651] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.964856 2026] [core:error] [pid 1017536:tid 1017644] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.964867 2026] [core:error] [pid 1017536:tid 1017644] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.966933 2026] [core:error] [pid 1017536:tid 1017621] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.966948 2026] [core:error] [pid 1017536:tid 1017621] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:22.984303 2026] [security2:error] [pid 1018003:tid 1018233] [client 20.220.204.93:64333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/cytyr.php"] [unique_id "apK9LjAh5Y1i2tUxg4Hz4AAABgk"]
[Sat Aug 29 05:06:22.985033 2026] [security2:error] [pid 1018003:tid 1018155] [client 20.104.49.130:57619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/load.php"] [unique_id "apK9LjAh5Y1i2tUxg4Hz4QAABbw"]
[Sat Aug 29 05:06:22.988697 2026] [security2:error] [pid 1017536:tid 1017757] [client 149.34.210.141:20301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9LiJcY4fy7tP-rU3_3wAAAm8"]
[Sat Aug 29 05:06:22.988776 2026] [security2:error] [pid 1017536:tid 1017757] [client 149.34.210.141:20301] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9LiJcY4fy7tP-rU3_3wAAAm8"]
[Sat Aug 29 05:06:22.994940 2026] [security2:error] [pid 1018003:tid 1018163] [client 52.139.37.240:15276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/breads1.php"] [unique_id "apK9LjAh5Y1i2tUxg4Hz4gAABcQ"]
[Sat Aug 29 05:06:22.998808 2026] [security2:error] [pid 1018003:tid 1018162] [client 52.139.37.240:12866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/ac.php"] [unique_id "apK9LjAh5Y1i2tUxg4Hz5AAABcM"]
[Sat Aug 29 05:06:23.007833 2026] [security2:error] [pid 1017536:tid 1017719] [client 68.155.159.216:52746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-content/themes/too.php"] [unique_id "apK9LyJcY4fy7tP-rU3_4AAAAkk"]
[Sat Aug 29 05:06:23.010081 2026] [security2:error] [pid 1018003:tid 1018194] [client 158.23.147.79:61618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK9LzAh5Y1i2tUxg4Hz5gAABeM"]
[Sat Aug 29 05:06:23.027492 2026] [security2:error] [pid 1018003:tid 1018160] [client 158.158.54.35:2912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/.trash7206/index.php"] [unique_id "apK9LzAh5Y1i2tUxg4Hz6wAABcE"]
[Sat Aug 29 05:06:23.044552 2026] [security2:error] [pid 1017536:tid 1017723] [client 20.151.200.44:64946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/f-401.php"] [unique_id "apK9LyJcY4fy7tP-rU3_4QAAAk0"]
[Sat Aug 29 05:06:23.054312 2026] [security2:error] [pid 1017536:tid 1017711] [client 20.196.209.81:11525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/go.php"] [unique_id "apK9LyJcY4fy7tP-rU3_4gAAAkE"]
[Sat Aug 29 05:06:23.062671 2026] [security2:error] [pid 1017536:tid 1017704] [client 20.63.81.20:46860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/key.php"] [unique_id "apK9LyJcY4fy7tP-rU3_4wAAAjo"]
[Sat Aug 29 05:06:23.079961 2026] [security2:error] [pid 1017536:tid 1017717] [client 20.48.251.3:14098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/file59.php"] [unique_id "apK9LyJcY4fy7tP-rU3_5AAAAkc"]
[Sat Aug 29 05:06:23.080774 2026] [security2:error] [pid 1018003:tid 1018244] [client 20.63.81.20:56935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/Q1.php"] [unique_id "apK9LzAh5Y1i2tUxg4Hz7wAABhQ"]
[Sat Aug 29 05:06:23.088477 2026] [security2:error] [pid 1017536:tid 1017769] [client 168.107.94.195:51830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9LyJcY4fy7tP-rU3_5gAAAns"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:23.097671 2026] [security2:error] [pid 1017536:tid 1017781] [client 20.220.204.93:52327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/ak.php"] [unique_id "apK9LyJcY4fy7tP-rU3_6gAAAoc"]
[Sat Aug 29 05:06:23.098388 2026] [security2:error] [pid 1017536:tid 1017605] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/backup/.env"] [unique_id "apK9LyJcY4fy7tP-rU3_6AACGkQ"]
[Sat Aug 29 05:06:23.098453 2026] [security2:error] [pid 1017536:tid 1017565] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/beta/.env"] [unique_id "apK9LyJcY4fy7tP-rU3_5wACGhw"]
[Sat Aug 29 05:06:23.101091 2026] [security2:error] [pid 1017536:tid 1017568] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/be/.env"] [unique_id "apK9LyJcY4fy7tP-rU3_7QACGh8"]
[Sat Aug 29 05:06:23.101810 2026] [core:error] [pid 1017536:tid 1017628] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.101827 2026] [core:error] [pid 1017536:tid 1017628] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.110094 2026] [security2:error] [pid 1017536:tid 1017689] [client 20.48.251.3:61060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/nw.php"] [unique_id "apK9LyJcY4fy7tP-rU3_8QAAAis"]
[Sat Aug 29 05:06:23.113406 2026] [core:error] [pid 1017536:tid 1017645] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.113429 2026] [core:error] [pid 1017536:tid 1017645] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.113908 2026] [core:error] [pid 1017536:tid 1017623] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.113930 2026] [core:error] [pid 1017536:tid 1017623] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.116201 2026] [core:error] [pid 1017536:tid 1017637] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.116215 2026] [core:error] [pid 1017536:tid 1017637] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.116649 2026] [core:error] [pid 1017536:tid 1017656] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.116661 2026] [core:error] [pid 1017536:tid 1017656] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.117057 2026] [cgid:error] [pid 1017536:tid 1017793] [client 20.52.41.200:1216] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/cpslggc/404.shtml
[Sat Aug 29 05:06:23.123008 2026] [core:error] [pid 1018003:tid 1018265] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.123027 2026] [core:error] [pid 1018003:tid 1018265] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.131445 2026] [core:error] [pid 1018003:tid 1018259] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.131462 2026] [core:error] [pid 1018003:tid 1018259] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.134578 2026] [security2:error] [pid 1017536:tid 1017678] [client 52.139.37.240:29993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thesldiet.com"] [uri "/upfile.php"] [unique_id "apK9LyJcY4fy7tP-rU0AAwAAAiA"]
[Sat Aug 29 05:06:23.138994 2026] [core:error] [pid 1018003:tid 1018213] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.139013 2026] [core:error] [pid 1018003:tid 1018213] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.142385 2026] [security2:error] [pid 1017536:tid 1017686] [client 61.9.8.172:12029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK9LyJcY4fy7tP-rU0AAAAAAig"]
[Sat Aug 29 05:06:23.142506 2026] [security2:error] [pid 1017536:tid 1017686] [client 61.9.8.172:12029] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK9LyJcY4fy7tP-rU0AAAAAAig"]
[Sat Aug 29 05:06:23.157590 2026] [core:error] [pid 1017536:tid 1017751] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.157610 2026] [core:error] [pid 1017536:tid 1017751] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.162853 2026] [core:error] [pid 1017536:tid 1017712] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.162870 2026] [core:error] [pid 1017536:tid 1017712] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.162890 2026] [core:error] [pid 1017536:tid 1017745] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.162898 2026] [core:error] [pid 1017536:tid 1017745] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.162932 2026] [core:error] [pid 1017536:tid 1017694] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.162941 2026] [core:error] [pid 1017536:tid 1017694] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.169330 2026] [core:error] [pid 1017536:tid 1017780] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.169341 2026] [core:error] [pid 1017536:tid 1017780] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.193842 2026] [security2:error] [pid 1018003:tid 1018276] [client 52.139.37.240:12525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/ctex1.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0AQAABjQ"]
[Sat Aug 29 05:06:23.207290 2026] [security2:error] [pid 1018003:tid 1018221] [client 20.220.204.93:65004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/galer.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0AwAABf4"]
[Sat Aug 29 05:06:23.210405 2026] [security2:error] [pid 1017536:tid 1017713] [client 52.139.37.240:14926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/must.php"] [unique_id "apK9LyJcY4fy7tP-rU0ADQAAAkM"]
[Sat Aug 29 05:06:23.214452 2026] [security2:error] [pid 1018003:tid 1018187] [client 20.197.61.180:16282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0BAAABdw"]
[Sat Aug 29 05:06:23.224731 2026] [security2:error] [pid 1018003:tid 1018189] [client 20.63.81.20:56934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/nz.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0BgAABd4"]
[Sat Aug 29 05:06:23.245459 2026] [security2:error] [pid 1017536:tid 1017710] [client 20.48.251.3:61113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/product.php"] [unique_id "apK9LyJcY4fy7tP-rU0ADgAAAkA"]
[Sat Aug 29 05:06:23.251571 2026] [security2:error] [pid 1018003:tid 1018218] [client 20.63.81.20:46883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/chosen.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0DgAABfs"]
[Sat Aug 29 05:06:23.251814 2026] [security2:error] [pid 1017536:tid 1017641] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/client/.env"] [unique_id "apK9LyJcY4fy7tP-rU0AEgACP2g"]
[Sat Aug 29 05:06:23.252090 2026] [security2:error] [pid 1018003:tid 1018188] [client 114.119.154.87:55539] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.thesldiet.com"] [uri "/product-category/dinner"] [unique_id "apK9LzAh5Y1i2tUxg4H0DwAABd0"], referer: http://www.thesldiet.com/product-category/dinner
[Sat Aug 29 05:06:23.252566 2026] [core:error] [pid 1017536:tid 1017649] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.252579 2026] [core:error] [pid 1017536:tid 1017649] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.262291 2026] [security2:error] [pid 1017536:tid 1017689] [client 68.155.159.216:51455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-admin/css/index.php"] [unique_id "apK9LyJcY4fy7tP-rU0AFQAAAis"]
[Sat Aug 29 05:06:23.267546 2026] [security2:error] [pid 1017536:tid 1017706] [client 20.52.41.200:1216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/cv.php"] [unique_id "apK9LyJcY4fy7tP-rU0AFwAAAjw"]
[Sat Aug 29 05:06:23.271114 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.48.251.3:13981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/cli_bootstrap.php"] [unique_id "apK9LyJcY4fy7tP-rU0AGAAAAlY"]
[Sat Aug 29 05:06:23.273721 2026] [security2:error] [pid 1017536:tid 1017724] [client 68.155.159.216:16173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-admin/admin.php"] [unique_id "apK9LyJcY4fy7tP-rU0AGgAAAk4"]
[Sat Aug 29 05:06:23.277750 2026] [security2:error] [pid 1017536:tid 1017609] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/cms/.env"] [unique_id "apK9LyJcY4fy7tP-rU0AHAACG0g"]
[Sat Aug 29 05:06:23.279168 2026] [security2:error] [pid 1017536:tid 1017785] [client 20.196.209.81:5969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-content/languages/index.php"] [unique_id "apK9LyJcY4fy7tP-rU0AJAAAAos"]
[Sat Aug 29 05:06:23.280616 2026] [core:error] [pid 1017536:tid 1017576] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.280633 2026] [core:error] [pid 1017536:tid 1017576] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.281073 2026] [core:error] [pid 1017536:tid 1017609] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.281083 2026] [core:error] [pid 1017536:tid 1017609] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.282587 2026] [core:error] [pid 1018003:tid 1018186] [client 35.234.155.175:54112] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.282609 2026] [core:error] [pid 1018003:tid 1018186] [client 35.234.155.175:54112] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.282858 2026] [core:error] [pid 1017536:tid 1017705] [client 35.234.155.175:54046] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.282875 2026] [core:error] [pid 1017536:tid 1017705] [client 35.234.155.175:54046] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.285304 2026] [security2:error] [pid 1018003:tid 1018180] [client 20.104.49.130:60788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/sxxb.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0GwAABdU"]
[Sat Aug 29 05:06:23.285649 2026] [core:error] [pid 1017536:tid 1017744] [client 35.234.155.175:54158] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.285675 2026] [core:error] [pid 1017536:tid 1017744] [client 35.234.155.175:54158] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.285919 2026] [core:error] [pid 1018003:tid 1018207] [client 35.234.155.175:54048] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.285930 2026] [core:error] [pid 1018003:tid 1018207] [client 35.234.155.175:54048] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.286186 2026] [core:error] [pid 1017536:tid 1017773] [client 35.234.155.175:54140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.286195 2026] [core:error] [pid 1017536:tid 1017773] [client 35.234.155.175:54140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.286388 2026] [core:error] [pid 1018003:tid 1018245] [client 35.234.155.175:54068] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.286405 2026] [core:error] [pid 1018003:tid 1018245] [client 35.234.155.175:54068] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.286677 2026] [core:error] [pid 1017536:tid 1017790] [client 35.234.155.175:54080] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.286690 2026] [core:error] [pid 1017536:tid 1017790] [client 35.234.155.175:54080] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.286706 2026] [core:error] [pid 1018003:tid 1018179] [client 35.234.155.175:54150] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.286715 2026] [core:error] [pid 1018003:tid 1018179] [client 35.234.155.175:54150] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.287773 2026] [core:error] [pid 1018003:tid 1018206] [client 35.234.155.175:54054] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.287787 2026] [core:error] [pid 1018003:tid 1018206] [client 35.234.155.175:54054] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.288205 2026] [security2:error] [pid 1017536:tid 1017652] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/config.php"] [unique_id "apK9LyJcY4fy7tP-rU0AKQACG3M"]
[Sat Aug 29 05:06:23.288881 2026] [core:error] [pid 1018003:tid 1018270] [client 35.234.155.175:54126] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.288902 2026] [core:error] [pid 1018003:tid 1018270] [client 35.234.155.175:54126] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.289229 2026] [core:error] [pid 1018003:tid 1018216] [client 35.234.155.175:54096] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.289241 2026] [core:error] [pid 1018003:tid 1018216] [client 35.234.155.175:54096] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.289468 2026] [core:error] [pid 1017536:tid 1017747] [client 35.234.155.175:54098] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.289481 2026] [core:error] [pid 1017536:tid 1017747] [client 35.234.155.175:54098] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.299848 2026] [security2:error] [pid 1018003:tid 1018170] [client 20.151.200.44:62001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/hq.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0IAAABcs"]
[Sat Aug 29 05:06:23.315023 2026] [core:error] [pid 1017536:tid 1017695] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.315042 2026] [core:error] [pid 1017536:tid 1017695] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.315320 2026] [core:error] [pid 1018003:tid 1018192] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.315332 2026] [core:error] [pid 1018003:tid 1018192] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.317288 2026] [core:error] [pid 1017536:tid 1017712] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.317302 2026] [core:error] [pid 1017536:tid 1017712] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.318442 2026] [core:error] [pid 1017536:tid 1017788] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.318459 2026] [core:error] [pid 1017536:tid 1017788] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.326972 2026] [security2:error] [pid 1018003:tid 1018215] [client 68.155.159.216:50197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-admin/css/index.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0JQAABfg"]
[Sat Aug 29 05:06:23.328632 2026] [security2:error] [pid 1018003:tid 1018268] [client 52.139.37.240:30202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thesldiet.com"] [uri "/form.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0JwAABiw"]
[Sat Aug 29 05:06:23.345257 2026] [security2:error] [pid 1018003:tid 1018212] [client 68.155.159.216:33685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/asd.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0KwAABfU"]
[Sat Aug 29 05:06:23.347288 2026] [security2:error] [pid 1018003:tid 1018184] [client 20.220.204.93:59063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/lib.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0LAAABdk"]
[Sat Aug 29 05:06:23.357685 2026] [security2:error] [pid 1018003:tid 1018217] [client 20.220.204.93:64283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/baixy.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0LgAABfo"]
[Sat Aug 29 05:06:23.357704 2026] [security2:error] [pid 1018003:tid 1018203] [client 20.63.81.20:60455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/sg.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0LwAABew"]
[Sat Aug 29 05:06:23.360423 2026] [security2:error] [pid 1017536:tid 1017752] [client 68.155.159.216:24456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK9LyJcY4fy7tP-rU0AMgAAAmo"]
[Sat Aug 29 05:06:23.372813 2026] [security2:error] [pid 1017536:tid 1017591] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/config/.env"] [unique_id "apK9LyJcY4fy7tP-rU0AOAACGzY"]
[Sat Aug 29 05:06:23.384722 2026] [core:error] [pid 1018003:tid 1018155] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.384742 2026] [core:error] [pid 1018003:tid 1018155] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.384943 2026] [core:error] [pid 1018003:tid 1018233] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.384955 2026] [core:error] [pid 1018003:tid 1018233] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.387626 2026] [security2:error] [pid 1018003:tid 1018266] [client 20.48.251.3:61199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/fun.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0NAAABio"]
[Sat Aug 29 05:06:23.387686 2026] [security2:error] [pid 1018003:tid 1018163] [client 20.63.81.20:46848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/file1221.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0NQAABcQ"]
[Sat Aug 29 05:06:23.388791 2026] [security2:error] [pid 1018003:tid 1018167] [client 52.139.37.240:12886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/defaults.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0NgAABcg"]
[Sat Aug 29 05:06:23.395760 2026] [core:error] [pid 1018003:tid 1018162] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.395776 2026] [core:error] [pid 1018003:tid 1018162] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.407313 2026] [security2:error] [pid 1018003:tid 1018156] [client 52.139.37.240:14480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/up.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0OgAABb0"]
[Sat Aug 29 05:06:23.410525 2026] [core:error] [pid 1018003:tid 1018198] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.410546 2026] [core:error] [pid 1018003:tid 1018198] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.417446 2026] [core:error] [pid 1017536:tid 1017632] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.417466 2026] [core:error] [pid 1017536:tid 1017632] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.417664 2026] [core:error] [pid 1017536:tid 1017786] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.417675 2026] [core:error] [pid 1017536:tid 1017786] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.435041 2026] [security2:error] [pid 1017536:tid 1017599] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/config/aws.php"] [unique_id "apK9LyJcY4fy7tP-rU0AQQACGz4"]
[Sat Aug 29 05:06:23.437040 2026] [core:error] [pid 1017536:tid 1017629] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.437055 2026] [core:error] [pid 1017536:tid 1017629] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.438892 2026] [security2:error] [pid 1017536:tid 1017747] [client 158.23.147.79:32576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK9LyJcY4fy7tP-rU0AQwAAAmU"]
[Sat Aug 29 05:06:23.444277 2026] [security2:error] [pid 1017536:tid 1017751] [client 68.155.159.216:14282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK9LyJcY4fy7tP-rU0ARAAAAmk"]
[Sat Aug 29 05:06:23.445494 2026] [security2:error] [pid 1017536:tid 1017681] [client 20.48.251.3:14010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/dd.php"] [unique_id "apK9LyJcY4fy7tP-rU0ARQAAAiM"]
[Sat Aug 29 05:06:23.448347 2026] [security2:error] [pid 1017536:tid 1017694] [client 68.155.159.216:49234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/goods.php"] [unique_id "apK9LyJcY4fy7tP-rU0ASAAAAjA"]
[Sat Aug 29 05:06:23.449618 2026] [security2:error] [pid 1017536:tid 1017776] [client 158.23.147.79:26495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK9LyJcY4fy7tP-rU0ASQAAAoI"]
[Sat Aug 29 05:06:23.450722 2026] [core:error] [pid 1017536:tid 1017683] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.452402 2026] [core:error] [pid 1017536:tid 1017683] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.455888 2026] [core:error] [pid 1017536:tid 1017694] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.455903 2026] [core:error] [pid 1017536:tid 1017694] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.468227 2026] [security2:error] [pid 1018003:tid 1018242] [client 168.107.94.195:52251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0PgAABhI"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:23.469603 2026] [core:error] [pid 1017536:tid 1017546] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.469618 2026] [core:error] [pid 1017536:tid 1017546] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.472019 2026] [security2:error] [pid 1018003:tid 1018243] [client 4.205.62.107:22355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/u88.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0PwAABhM"]
[Sat Aug 29 05:06:23.472799 2026] [security2:error] [pid 1017536:tid 1017753] [client 158.23.147.79:63002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-blog-header.php"] [unique_id "apK9LyJcY4fy7tP-rU0ATgAAAms"]
[Sat Aug 29 05:06:23.475578 2026] [security2:error] [pid 1017536:tid 1017537] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/config/config.inc.php"] [unique_id "apK9LyJcY4fy7tP-rU0AUAACFgA"]
[Sat Aug 29 05:06:23.477850 2026] [security2:error] [pid 1017536:tid 1017780] [client 20.220.204.93:59011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/wp-style.php"] [unique_id "apK9LyJcY4fy7tP-rU0AUgAAAoY"]
[Sat Aug 29 05:06:23.478321 2026] [core:error] [pid 1017536:tid 1017620] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.478331 2026] [core:error] [pid 1017536:tid 1017620] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.478832 2026] [security2:error] [pid 1018003:tid 1018187] [client 20.151.200.44:64866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/mcd.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0QQAABdw"]
[Sat Aug 29 05:06:23.485345 2026] [security2:error] [pid 1018003:tid 1018177] [client 20.196.209.81:11577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/gecko-new.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0QgAABdI"]
[Sat Aug 29 05:06:23.494947 2026] [security2:error] [pid 1017536:tid 1017770] [client 20.63.81.20:60418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/hypo.php"] [unique_id "apK9LyJcY4fy7tP-rU0AVAAAAnw"]
[Sat Aug 29 05:06:23.501403 2026] [security2:error] [pid 1018003:tid 1018188] [client 158.23.147.79:30673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/hehehehe.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0RQAABd0"]
[Sat Aug 29 05:06:23.505616 2026] [security2:error] [pid 1017536:tid 1017731] [client 4.205.62.107:22434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/luJMF.php"] [unique_id "apK9LyJcY4fy7tP-rU0AVQAAAlU"]
[Sat Aug 29 05:06:23.506003 2026] [core:error] [pid 1018003:tid 1018218] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.506014 2026] [core:error] [pid 1018003:tid 1018218] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.517825 2026] [security2:error] [pid 1017536:tid 1017722] [client 20.48.251.3:61656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/kedi.php"] [unique_id "apK9LyJcY4fy7tP-rU0AVgAAAkw"]
[Sat Aug 29 05:06:23.524592 2026] [security2:error] [pid 1017536:tid 1017788] [client 52.139.37.240:30206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thesldiet.com"] [uri "/wp-sigunq.php"] [unique_id "apK9LyJcY4fy7tP-rU0AWAAAAo4"]
[Sat Aug 29 05:06:23.524620 2026] [security2:error] [pid 1017536:tid 1017717] [client 20.220.204.93:64266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/ava.php"] [unique_id "apK9LyJcY4fy7tP-rU0AVwAAAkc"]
[Sat Aug 29 05:06:23.529755 2026] [core:error] [pid 1017536:tid 1017658] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.529769 2026] [core:error] [pid 1017536:tid 1017658] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.529896 2026] [security2:error] [pid 1017536:tid 1017749] [client 158.158.54.35:2897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wk/index.php"] [unique_id "apK9LyJcY4fy7tP-rU0AWgAAAmc"]
[Sat Aug 29 05:06:23.532037 2026] [security2:error] [pid 1017536:tid 1017713] [client 4.205.62.107:65426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/koiy.php"] [unique_id "apK9LyJcY4fy7tP-rU0AWwAAAkM"]
[Sat Aug 29 05:06:23.537760 2026] [security2:error] [pid 1018003:tid 1018270] [client 20.63.81.20:46969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/nox.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0TAAABi4"]
[Sat Aug 29 05:06:23.562449 2026] [security2:error] [pid 1017536:tid 1017705] [client 20.151.200.44:65527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/mh.php"] [unique_id "apK9LyJcY4fy7tP-rU0AaAAAAjs"]
[Sat Aug 29 05:06:23.573058 2026] [security2:error] [pid 1017536:tid 1017542] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/config/config.php"] [unique_id "apK9LyJcY4fy7tP-rU0AagACKAU"]
[Sat Aug 29 05:06:23.578030 2026] [core:error] [pid 1017536:tid 1017586] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.578047 2026] [core:error] [pid 1017536:tid 1017586] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.579661 2026] [core:error] [pid 1017536:tid 1017597] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.579678 2026] [core:error] [pid 1017536:tid 1017597] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.582738 2026] [core:error] [pid 1017536:tid 1017607] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.582752 2026] [core:error] [pid 1017536:tid 1017607] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.583194 2026] [security2:error] [pid 1018003:tid 1018222] [client 158.23.147.79:50015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/x.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0VQAABf8"]
[Sat Aug 29 05:06:23.585568 2026] [security2:error] [pid 1017536:tid 1017650] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/config/env.php"] [unique_id "apK9LyJcY4fy7tP-rU0AbwACKHE"]
[Sat Aug 29 05:06:23.586474 2026] [core:error] [pid 1017536:tid 1017544] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.586500 2026] [core:error] [pid 1017536:tid 1017544] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.588226 2026] [core:error] [pid 1017536:tid 1017581] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.588238 2026] [core:error] [pid 1017536:tid 1017581] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.595601 2026] [security2:error] [pid 1017536:tid 1017746] [client 52.139.37.240:12919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/domains.php"] [unique_id "apK9LyJcY4fy7tP-rU0AcQAAAmQ"]
[Sat Aug 29 05:06:23.609397 2026] [security2:error] [pid 1017536:tid 1017662] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/config/module.config.php"] [unique_id "apK9LyJcY4fy7tP-rU0AcgACMH0"]
[Sat Aug 29 05:06:23.610901 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.151.200.44:47422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/uuu.php"] [unique_id "apK9LyJcY4fy7tP-rU0AdAAAAnk"]
[Sat Aug 29 05:06:23.621339 2026] [security2:error] [pid 1017536:tid 1017598] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/config/nexmo.php"] [unique_id "apK9LyJcY4fy7tP-rU0AdwACMD0"]
[Sat Aug 29 05:06:23.624892 2026] [security2:error] [pid 1017536:tid 1017712] [client 20.48.251.3:14286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/wp-tem.php"] [unique_id "apK9LyJcY4fy7tP-rU0AeAAAAkI"]
[Sat Aug 29 05:06:23.629491 2026] [security2:error] [pid 1018003:tid 1018212] [client 158.23.147.79:30620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0WQAABfU"]
[Sat Aug 29 05:06:23.631108 2026] [core:error] [pid 1017536:tid 1017655] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.631129 2026] [core:error] [pid 1017536:tid 1017655] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.634058 2026] [core:error] [pid 1017536:tid 1017613] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.634075 2026] [core:error] [pid 1017536:tid 1017613] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.635324 2026] [security2:error] [pid 1018003:tid 1018184] [client 20.63.81.20:43591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/Hd.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0WwAABdk"]
[Sat Aug 29 05:06:23.638509 2026] [core:error] [pid 1017536:tid 1017733] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.638523 2026] [core:error] [pid 1017536:tid 1017733] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.650702 2026] [security2:error] [pid 1018003:tid 1018256] [client 20.48.251.3:61192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/oc460l3x.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0XAAABiA"]
[Sat Aug 29 05:06:23.657689 2026] [core:error] [pid 1017536:tid 1017752] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.657707 2026] [core:error] [pid 1017536:tid 1017752] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.659514 2026] [core:error] [pid 1017536:tid 1017678] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.659529 2026] [core:error] [pid 1017536:tid 1017678] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.668479 2026] [security2:error] [pid 1017536:tid 1017731] [client 20.220.204.93:59084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/browse.php"] [unique_id "apK9LyJcY4fy7tP-rU0AgQAAAlU"]
[Sat Aug 29 05:06:23.670402 2026] [security2:error] [pid 1018003:tid 1018167] [client 52.139.37.240:15233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/wp-content/155.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0XQAABcg"]
[Sat Aug 29 05:06:23.674263 2026] [security2:error] [pid 1018003:tid 1018163] [client 158.23.147.79:24574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0XwAABcQ"]
[Sat Aug 29 05:06:23.676115 2026] [security2:error] [pid 1018003:tid 1018191] [client 20.63.81.20:44486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/akismet.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0YAAABeA"]
[Sat Aug 29 05:06:23.678936 2026] [security2:error] [pid 1017536:tid 1017616] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/config/stripe.php"] [unique_id "apK9LyJcY4fy7tP-rU0AgwACTE8"]
[Sat Aug 29 05:06:23.684109 2026] [security2:error] [pid 1017536:tid 1017723] [client 20.196.209.81:5977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-content/languages/min.php"] [unique_id "apK9LyJcY4fy7tP-rU0AhQAAAk0"]
[Sat Aug 29 05:06:23.684256 2026] [security2:error] [pid 1018003:tid 1018244] [client 158.23.147.79:35725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-content/themes/too.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0YgAABhQ"]
[Sat Aug 29 05:06:23.701990 2026] [security2:error] [pid 1018003:tid 1018048] [remote 93.123.109.228:34972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/config.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0aAAF4xs"]
[Sat Aug 29 05:06:23.713768 2026] [core:error] [pid 1018003:tid 1018246] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.713789 2026] [core:error] [pid 1018003:tid 1018246] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.721390 2026] [security2:error] [pid 1017536:tid 1017773] [client 20.52.41.200:1791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-content/packed.php"] [unique_id "apK9LyJcY4fy7tP-rU0AiQAAAn8"]
[Sat Aug 29 05:06:23.724725 2026] [security2:error] [pid 1018003:tid 1018155] [client 136.107.231.130:52558] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/@fs/.env"] [unique_id "apK9LzAh5Y1i2tUxg4H0bQAABbw"]
[Sat Aug 29 05:06:23.726469 2026] [security2:error] [pid 1017536:tid 1017761] [client 136.107.231.130:52588] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/@fs/app/.env"] [unique_id "apK9LyJcY4fy7tP-rU0AiwAAAnM"]
[Sat Aug 29 05:06:23.726891 2026] [security2:error] [pid 1018003:tid 1018233] [client 136.107.231.130:52590] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/@fs/src/.env"] [unique_id "apK9LzAh5Y1i2tUxg4H0bgAABgk"]
[Sat Aug 29 05:06:23.729737 2026] [security2:error] [pid 1017536:tid 1017731] [client 136.107.231.130:52572] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/@fs/root/.env"] [unique_id "apK9LyJcY4fy7tP-rU0AjAAAAlU"]
[Sat Aug 29 05:06:23.729771 2026] [security2:error] [pid 1018003:tid 1018162] [client 136.107.231.130:52606] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "alanmossman.mossmanphoto.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK9LzAh5Y1i2tUxg4H0bwAABcM"]
[Sat Aug 29 05:06:23.729884 2026] [security2:error] [pid 1017536:tid 1017687] [client 52.139.37.240:29982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thesldiet.com"] [uri "/07.php"] [unique_id "apK9LyJcY4fy7tP-rU0AjQAAAik"]
[Sat Aug 29 05:06:23.731593 2026] [security2:error] [pid 1018003:tid 1018238] [client 136.107.231.130:52628] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "alanmossman.mossmanphoto.com"] [uri "/@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ"] [unique_id "apK9LzAh5Y1i2tUxg4H0cwAABg4"]
[Sat Aug 29 05:06:23.731688 2026] [security2:error] [pid 1018003:tid 1018174] [client 136.107.231.130:52592] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2froot/.env"] [unique_id "apK9LzAh5Y1i2tUxg4H0cgAABc8"]
[Sat Aug 29 05:06:23.732279 2026] [security2:error] [pid 1018003:tid 1018160] [client 136.107.231.130:52614] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2fapp/.env"] [unique_id "apK9LzAh5Y1i2tUxg4H0cQAABcE"]
[Sat Aug 29 05:06:23.735948 2026] [core:error] [pid 1018003:tid 1018190] [client 136.107.231.130:52646] AH10244: invalid URI path (/@fs/../../.env?raw??)
[Sat Aug 29 05:06:23.736433 2026] [security2:error] [pid 1018003:tid 1018190] [client 136.107.231.130:52646] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "alanmossman.mossmanphoto.com"] [uri "/400.shtml"] [unique_id "apK9LzAh5Y1i2tUxg4H0dAAABd8"]
[Sat Aug 29 05:06:23.737398 2026] [security2:error] [pid 1018003:tid 1018261] [client 136.107.231.130:52640] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/.env"] [unique_id "apK9LzAh5Y1i2tUxg4H0dQAABiU"]
[Sat Aug 29 05:06:23.737510 2026] [security2:error] [pid 1018003:tid 1018261] [client 136.107.231.130:52640] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "alanmossman.mossmanphoto.com"] [uri "/.env"] [unique_id "apK9LzAh5Y1i2tUxg4H0dQAABiU"]
[Sat Aug 29 05:06:23.745445 2026] [security2:error] [pid 1018003:tid 1018234] [client 136.107.231.130:52672] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "alanmossman.mossmanphoto.com"] [uri "/cgi-sys/404.html"] [unique_id "apK9LzAh5Y1i2tUxg4H0egAABgo"]
[Sat Aug 29 05:06:23.746184 2026] [security2:error] [pid 1018003:tid 1018200] [client 136.107.231.130:52686] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "alanmossman.mossmanphoto.com"] [uri "/@fs/root/.aws/credentials.bak"] [unique_id "apK9LzAh5Y1i2tUxg4H0fQAABek"]
[Sat Aug 29 05:06:23.746603 2026] [core:error] [pid 1017536:tid 1017601] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.746618 2026] [core:error] [pid 1017536:tid 1017601] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.746702 2026] [security2:error] [pid 1017536:tid 1017668] [client 136.107.231.130:52696] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/@fs/root/.aws/credentials.backup"] [unique_id "apK9LyJcY4fy7tP-rU0AjwAAAhY"]
[Sat Aug 29 05:06:23.763902 2026] [core:error] [pid 1017536:tid 1017590] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.763919 2026] [core:error] [pid 1017536:tid 1017590] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.766052 2026] [security2:error] [pid 1017536:tid 1017747] [client 20.63.81.20:56926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/im.php"] [unique_id "apK9LyJcY4fy7tP-rU0AmgAAAmU"]
[Sat Aug 29 05:06:23.774197 2026] [core:error] [pid 1017536:tid 1017589] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.774216 2026] [core:error] [pid 1017536:tid 1017589] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.782104 2026] [security2:error] [pid 1017536:tid 1017746] [client 20.48.251.3:3352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/drykl.php"] [unique_id "apK9LyJcY4fy7tP-rU0AnwAAAmQ"]
[Sat Aug 29 05:06:23.785028 2026] [core:error] [pid 1017536:tid 1017561] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.785047 2026] [core:error] [pid 1017536:tid 1017561] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.785109 2026] [core:error] [pid 1017536:tid 1017596] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.785120 2026] [core:error] [pid 1017536:tid 1017596] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.793798 2026] [core:error] [pid 1017536:tid 1017683] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.793815 2026] [core:error] [pid 1017536:tid 1017683] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.796436 2026] [security2:error] [pid 1018003:tid 1018225] [client 52.139.37.240:12906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/dropdown.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0jQAABgI"]
[Sat Aug 29 05:06:23.797634 2026] [core:error] [pid 1017536:tid 1017712] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.797649 2026] [core:error] [pid 1017536:tid 1017712] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.804671 2026] [core:error] [pid 1017536:tid 1017540] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.804690 2026] [core:error] [pid 1017536:tid 1017540] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.805833 2026] [security2:error] [pid 1018003:tid 1018188] [client 20.220.204.93:59117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/zoo.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0jgAABd0"]
[Sat Aug 29 05:06:23.813128 2026] [core:error] [pid 1018003:tid 1018171] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.813151 2026] [core:error] [pid 1018003:tid 1018171] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.816481 2026] [core:error] [pid 1018003:tid 1018189] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.816500 2026] [core:error] [pid 1018003:tid 1018189] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.816505 2026] [core:error] [pid 1018003:tid 1018218] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.816516 2026] [core:error] [pid 1018003:tid 1018218] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.817544 2026] [core:error] [pid 1018003:tid 1018262] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.817553 2026] [core:error] [pid 1018003:tid 1018262] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.824377 2026] [security2:error] [pid 1018003:tid 1018179] [client 20.63.81.20:46943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/ajax.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0lAAABdQ"]
[Sat Aug 29 05:06:23.844840 2026] [security2:error] [pid 1017536:tid 1017770] [client 4.205.62.107:8988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/wp-tem.php"] [unique_id "apK9LyJcY4fy7tP-rU0ArwAAAnw"]
[Sat Aug 29 05:06:23.845135 2026] [security2:error] [pid 1018003:tid 1018270] [client 4.205.62.107:21603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/guk.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0lwAABi4"]
[Sat Aug 29 05:06:23.848200 2026] [security2:error] [pid 1017536:tid 1017792] [client 20.151.200.44:64852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/f2r4.php"] [unique_id "apK9LyJcY4fy7tP-rU0AswAAApI"]
[Sat Aug 29 05:06:23.848898 2026] [security2:error] [pid 1017536:tid 1017734] [client 168.107.94.195:52573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9LyJcY4fy7tP-rU0AtAAAAlg"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:23.851434 2026] [security2:error] [pid 1018003:tid 1018084] [remote 93.123.109.228:34972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/config/aws.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0mAAF4z8"]
[Sat Aug 29 05:06:23.854039 2026] [security2:error] [pid 1018003:tid 1018192] [client 20.48.251.3:33318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/txets.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0nAAABeE"]
[Sat Aug 29 05:06:23.863821 2026] [security2:error] [pid 1017536:tid 1017778] [client 158.23.147.79:48272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-content/uploads/about.php"] [unique_id "apK9LyJcY4fy7tP-rU0AtgAAAoQ"]
[Sat Aug 29 05:06:23.867211 2026] [security2:error] [pid 1017536:tid 1017698] [client 52.139.37.240:14499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/wp-update.php"] [unique_id "apK9LyJcY4fy7tP-rU0AtwAAAjQ"]
[Sat Aug 29 05:06:23.878054 2026] [core:error] [pid 1018003:tid 1018224] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.878347 2026] [core:error] [pid 1018003:tid 1018224] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.878541 2026] [core:error] [pid 1017536:tid 1017689] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.878559 2026] [core:error] [pid 1017536:tid 1017689] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.881489 2026] [core:error] [pid 1018003:tid 1018175] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.881506 2026] [core:error] [pid 1018003:tid 1018175] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.882381 2026] [security2:error] [pid 1017536:tid 1017744] [client 20.196.209.81:16759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/wp-admin.php"] [unique_id "apK9LyJcY4fy7tP-rU0AuwAAAmI"]
[Sat Aug 29 05:06:23.904469 2026] [security2:error] [pid 1017536:tid 1017736] [client 20.63.81.20:60519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/fc.php"] [unique_id "apK9LyJcY4fy7tP-rU0AvQAAAlo"]
[Sat Aug 29 05:06:23.905806 2026] [core:error] [pid 1017536:tid 1017550] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.905824 2026] [core:error] [pid 1017536:tid 1017550] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.911943 2026] [core:error] [pid 1017536:tid 1017687] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.911960 2026] [core:error] [pid 1017536:tid 1017687] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.916330 2026] [security2:error] [pid 1018003:tid 1018159] [client 20.48.251.3:3183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/rpk.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0oAAABcA"]
[Sat Aug 29 05:06:23.924446 2026] [security2:error] [pid 1018003:tid 1018195] [client 52.139.37.240:30162] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.thesldiet.com"] [uri "/c99.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0oQAABeQ"]
[Sat Aug 29 05:06:23.934001 2026] [security2:error] [pid 1018003:tid 1018184] [client 20.220.204.93:64986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/gdn.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0ogAABdk"]
[Sat Aug 29 05:06:23.935279 2026] [security2:error] [pid 1018003:tid 1018259] [client 20.197.61.180:16980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-content/languages/chosen.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0owAABiM"]
[Sat Aug 29 05:06:23.935945 2026] [core:error] [pid 1017536:tid 1017625] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.935972 2026] [core:error] [pid 1017536:tid 1017625] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.941851 2026] [security2:error] [pid 1018003:tid 1018070] [remote 93.123.109.228:34972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/config/config.inc.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0pQAGNTE"]
[Sat Aug 29 05:06:23.947817 2026] [security2:error] [pid 1018003:tid 1018146] [remote 93.123.109.228:34972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/config/config.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0qQAGNX0"]
[Sat Aug 29 05:06:23.949032 2026] [security2:error] [pid 1017536:tid 1017595] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/crm/.env"] [unique_id "apK9LyJcY4fy7tP-rU0AwgACKDo"]
[Sat Aug 29 05:06:23.950018 2026] [security2:error] [pid 1017536:tid 1017562] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/cron/.env"] [unique_id "apK9LyJcY4fy7tP-rU0AwwACKBk"]
[Sat Aug 29 05:06:23.950915 2026] [security2:error] [pid 1017536:tid 1017643] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/current/.env"] [unique_id "apK9LyJcY4fy7tP-rU0AxAACKGo"]
[Sat Aug 29 05:06:23.955611 2026] [security2:error] [pid 1017536:tid 1017776] [client 20.220.204.93:59027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/elp.php"] [unique_id "apK9LyJcY4fy7tP-rU0AxgAAAoI"]
[Sat Aug 29 05:06:23.959567 2026] [security2:error] [pid 1017536:tid 1017572] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/demo/.env"] [unique_id "apK9LyJcY4fy7tP-rU0AxwACKCM"]
[Sat Aug 29 05:06:23.960272 2026] [security2:error] [pid 1017536:tid 1017673] [client 4.205.62.107:56032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/a1vx.php"] [unique_id "apK9LyJcY4fy7tP-rU0AyAAAAhs"]
[Sat Aug 29 05:06:23.972552 2026] [security2:error] [pid 1018003:tid 1018256] [client 20.63.81.20:41929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/atomlib.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0qwAABiA"]
[Sat Aug 29 05:06:23.979819 2026] [security2:error] [pid 1018003:tid 1018161] [client 158.158.54.35:14122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/admin.php"] [unique_id "apK9LzAh5Y1i2tUxg4H0rAAABcI"]
[Sat Aug 29 05:06:23.984108 2026] [security2:error] [pid 1017536:tid 1017712] [client 68.155.159.216:12103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-includes/content.php"] [unique_id "apK9LyJcY4fy7tP-rU0AywAAAkI"]
[Sat Aug 29 05:06:23.990944 2026] [security2:error] [pid 1017536:tid 1017571] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/dev/.env"] [unique_id "apK9LyJcY4fy7tP-rU0AzQACKCI"]
[Sat Aug 29 05:06:23.993392 2026] [core:error] [pid 1017536:tid 1017751] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.993418 2026] [core:error] [pid 1017536:tid 1017751] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.993624 2026] [core:error] [pid 1017536:tid 1017551] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.993639 2026] [core:error] [pid 1017536:tid 1017551] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.994123 2026] [core:error] [pid 1017536:tid 1017743] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.994135 2026] [core:error] [pid 1017536:tid 1017743] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:23.994135 2026] [security2:error] [pid 1017536:tid 1017564] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/develop/.env"] [unique_id "apK9LyJcY4fy7tP-rU0A0AACKBs"]
[Sat Aug 29 05:06:23.999143 2026] [security2:error] [pid 1017536:tid 1017619] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/developer/.env"] [unique_id "apK9LyJcY4fy7tP-rU0A0QACKFI"]
[Sat Aug 29 05:06:24.005465 2026] [security2:error] [pid 1017536:tid 1017668] [client 52.139.37.240:12891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/files/index.php"] [unique_id "apK9MCJcY4fy7tP-rU0A0gAAAhY"]
[Sat Aug 29 05:06:24.021073 2026] [security2:error] [pid 1018003:tid 1018090] [remote 93.123.109.228:34972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/config/env.php"] [unique_id "apK9MDAh5Y1i2tUxg4H0sQAGNUU"]
[Sat Aug 29 05:06:24.021086 2026] [security2:error] [pid 1018003:tid 1018092] [remote 93.123.109.228:34972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/config/module.config.php"] [unique_id "apK9MDAh5Y1i2tUxg4H0swAGNUc"]
[Sat Aug 29 05:06:24.029271 2026] [security2:error] [pid 1017536:tid 1017748] [client 158.23.147.79:25595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/dropdown.php"] [unique_id "apK9MCJcY4fy7tP-rU0A0wAAAmY"]
[Sat Aug 29 05:06:24.031227 2026] [security2:error] [pid 1017536:tid 1017552] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/development/.env"] [unique_id "apK9MCJcY4fy7tP-rU0A1AACUw8"]
[Sat Aug 29 05:06:24.035072 2026] [security2:error] [pid 1017536:tid 1017722] [client 20.63.81.20:60529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/ke.php"] [unique_id "apK9MCJcY4fy7tP-rU0A1gAAAkw"]
[Sat Aug 29 05:06:24.041483 2026] [security2:error] [pid 1017536:tid 1017723] [client 20.151.200.44:65507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/sadis.php"] [unique_id "apK9MCJcY4fy7tP-rU0A2AAAAk0"]
[Sat Aug 29 05:06:24.044901 2026] [security2:error] [pid 1017536:tid 1017778] [client 20.48.251.3:61078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/saml.php"] [unique_id "apK9MCJcY4fy7tP-rU0A2gAAAoQ"]
[Sat Aug 29 05:06:24.057128 2026] [security2:error] [pid 1017536:tid 1017765] [client 20.104.49.130:63437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.danesquality.com"] [uri "/menu.php"] [unique_id "apK9MCJcY4fy7tP-rU0A3AAAAnc"]
[Sat Aug 29 05:06:24.079848 2026] [security2:error] [pid 1018003:tid 1018203] [client 20.196.209.81:5619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-content/languages/pk.php"] [unique_id "apK9MDAh5Y1i2tUxg4H0tgAABew"]
[Sat Aug 29 05:06:24.079898 2026] [security2:error] [pid 1018003:tid 1018153] [client 52.139.37.240:14500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/xmrlpc.php"] [unique_id "apK9MDAh5Y1i2tUxg4H0twAABbo"]
[Sat Aug 29 05:06:24.080016 2026] [core:error] [pid 1017536:tid 1017618] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.080033 2026] [core:error] [pid 1017536:tid 1017618] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.093604 2026] [security2:error] [pid 1018003:tid 1018096] [remote 93.123.109.228:34972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/config/nexmo.php"] [unique_id "apK9MDAh5Y1i2tUxg4H0ugAFxks"]
[Sat Aug 29 05:06:24.104514 2026] [security2:error] [pid 1018003:tid 1018086] [remote 93.123.109.228:34972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/config/stripe.php"] [unique_id "apK9MDAh5Y1i2tUxg4H0vwAFxkE"]
[Sat Aug 29 05:06:24.108455 2026] [security2:error] [pid 1017536:tid 1017687] [client 68.155.159.216:52801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/radio.php"] [unique_id "apK9MCJcY4fy7tP-rU0A5gAAAik"]
[Sat Aug 29 05:06:24.112262 2026] [core:error] [pid 1018003:tid 1018240] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.112278 2026] [core:error] [pid 1018003:tid 1018240] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.112397 2026] [core:error] [pid 1017536:tid 1017731] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.112419 2026] [core:error] [pid 1017536:tid 1017731] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.114466 2026] [core:error] [pid 1017536:tid 1017694] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.114482 2026] [core:error] [pid 1017536:tid 1017694] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.123613 2026] [security2:error] [pid 1017536:tid 1017709] [client 52.139.37.240:30152] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.thesldiet.com"] [uri "/c99.php"] [unique_id "apK9MCJcY4fy7tP-rU0A6QAAAj8"]
[Sat Aug 29 05:06:24.125933 2026] [core:error] [pid 1018003:tid 1018174] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.125953 2026] [core:error] [pid 1018003:tid 1018174] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.126900 2026] [security2:error] [pid 1017536:tid 1017673] [client 20.63.81.20:46968] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/1.php"] [unique_id "apK9MCJcY4fy7tP-rU0A6gAAAhs"]
[Sat Aug 29 05:06:24.126990 2026] [security2:error] [pid 1017536:tid 1017673] [client 20.63.81.20:46968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/1.php"] [unique_id "apK9MCJcY4fy7tP-rU0A6gAAAhs"]
[Sat Aug 29 05:06:24.131258 2026] [core:error] [pid 1017536:tid 1017769] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.131272 2026] [core:error] [pid 1017536:tid 1017769] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.133604 2026] [core:error] [pid 1017536:tid 1017683] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.133619 2026] [core:error] [pid 1017536:tid 1017683] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.139521 2026] [core:error] [pid 1017536:tid 1017753] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.139534 2026] [core:error] [pid 1017536:tid 1017753] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.144531 2026] [security2:error] [pid 1017536:tid 1017733] [client 20.220.204.93:59135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/666.php"] [unique_id "apK9MCJcY4fy7tP-rU0A9AAAAlc"]
[Sat Aug 29 05:06:24.150689 2026] [security2:error] [pid 1018003:tid 1018156] [client 158.23.147.79:37773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/file.php"] [unique_id "apK9MDAh5Y1i2tUxg4H0xQAABb0"]
[Sat Aug 29 05:06:24.153122 2026] [core:error] [pid 1017536:tid 1017538] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.153136 2026] [core:error] [pid 1017536:tid 1017538] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.153184 2026] [core:error] [pid 1017536:tid 1017569] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.153192 2026] [core:error] [pid 1017536:tid 1017569] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.167867 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.63.81.20:60468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/tf.php"] [unique_id "apK9MCJcY4fy7tP-rU0A_QAAAh0"]
[Sat Aug 29 05:06:24.176778 2026] [security2:error] [pid 1017536:tid 1017678] [client 20.52.41.200:1771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-admin/js/index.php"] [unique_id "apK9MCJcY4fy7tP-rU0A_wAAAiA"]
[Sat Aug 29 05:06:24.180735 2026] [security2:error] [pid 1017536:tid 1017695] [client 20.151.200.44:64912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/waw.php"] [unique_id "apK9MCJcY4fy7tP-rU0BAgAAAjE"]
[Sat Aug 29 05:06:24.191877 2026] [core:error] [pid 1017536:tid 1017748] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.191896 2026] [core:error] [pid 1017536:tid 1017748] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.192075 2026] [security2:error] [pid 1017536:tid 1017723] [client 20.151.200.44:64974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9MCJcY4fy7tP-rU0BBgAAAk0"]
[Sat Aug 29 05:06:24.198030 2026] [core:error] [pid 1017536:tid 1017778] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.198050 2026] [core:error] [pid 1017536:tid 1017778] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.202770 2026] [core:error] [pid 1017536:tid 1017704] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.202785 2026] [core:error] [pid 1017536:tid 1017704] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.203202 2026] [core:error] [pid 1017536:tid 1017749] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.203214 2026] [core:error] [pid 1017536:tid 1017749] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.220127 2026] [security2:error] [pid 1017536:tid 1017736] [client 20.220.204.93:63107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/f2.php"] [unique_id "apK9MCJcY4fy7tP-rU0BDAAAAlo"]
[Sat Aug 29 05:06:24.225885 2026] [security2:error] [pid 1017536:tid 1017780] [client 52.139.37.240:12435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ihtpa.tntrental.com"] [uri "/flower.php"] [unique_id "apK9MCJcY4fy7tP-rU0BDQAAAoY"]
[Sat Aug 29 05:06:24.229274 2026] [security2:error] [pid 1018003:tid 1018248] [client 168.107.94.195:52947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9MDAh5Y1i2tUxg4H0zgAABhg"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:24.230943 2026] [security2:error] [pid 1017536:tid 1017570] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/erp/.env"] [unique_id "apK9MCJcY4fy7tP-rU0BDgACfCE"]
[Sat Aug 29 05:06:24.274596 2026] [security2:error] [pid 1017536:tid 1017610] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/etc/apache2/apache2.conf"] [unique_id "apK9MCJcY4fy7tP-rU0BFgACfEk"]
[Sat Aug 29 05:06:24.274957 2026] [security2:error] [pid 1018003:tid 1018213] [client 52.139.37.240:15253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/about/function.php"] [unique_id "apK9MDAh5Y1i2tUxg4H00wAABfY"]
[Sat Aug 29 05:06:24.275394 2026] [security2:error] [pid 1017536:tid 1017577] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/etc/boto.cfg"] [unique_id "apK9MCJcY4fy7tP-rU0BFwACfCg"]
[Sat Aug 29 05:06:24.276308 2026] [security2:error] [pid 1018003:tid 1018255] [client 20.220.204.93:59019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/knmt.php"] [unique_id "apK9MDAh5Y1i2tUxg4H01QAABh8"]
[Sat Aug 29 05:06:24.278938 2026] [security2:error] [pid 1017536:tid 1017580] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/fe/.env"] [unique_id "apK9MCJcY4fy7tP-rU0BGAACfCs"]
[Sat Aug 29 05:06:24.284907 2026] [security2:error] [pid 1018003:tid 1018231] [client 20.151.200.44:64243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/xcre1.php"] [unique_id "apK9MDAh5Y1i2tUxg4H01gAABgc"]
[Sat Aug 29 05:06:24.290009 2026] [security2:error] [pid 1018003:tid 1018243] [client 20.63.81.20:46949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/samll.php"] [unique_id "apK9MDAh5Y1i2tUxg4H01wAABhM"]
[Sat Aug 29 05:06:24.301268 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.63.81.20:60423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/px.php"] [unique_id "apK9MCJcY4fy7tP-rU0BHgAAAlY"]
[Sat Aug 29 05:06:24.304575 2026] [security2:error] [pid 1017536:tid 1017644] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/front/.env"] [unique_id "apK9MCJcY4fy7tP-rU0BHwACfGs"]
[Sat Aug 29 05:06:24.317630 2026] [core:error] [pid 1018003:tid 1018177] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.317647 2026] [core:error] [pid 1018003:tid 1018177] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.319047 2026] [security2:error] [pid 1017536:tid 1017781] [client 52.139.37.240:30180] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.thesldiet.com"] [uri "/c99.php"] [unique_id "apK9MCJcY4fy7tP-rU0BIQAAAoc"]
[Sat Aug 29 05:06:24.320436 2026] [core:error] [pid 1018003:tid 1018187] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.322826 2026] [core:error] [pid 1018003:tid 1018187] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.323957 2026] [security2:error] [pid 1017536:tid 1017673] [client 66.248.203.2:3438] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cheerfulmonk.com"] [uri "/2017/12/28/theyre-on-their-way-2/"] [unique_id "apK9MCJcY4fy7tP-rU0BIgAAAhs"]
[Sat Aug 29 05:06:24.340178 2026] [core:error] [pid 1018003:tid 1018218] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.340196 2026] [core:error] [pid 1018003:tid 1018218] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.356776 2026] [security2:error] [pid 1017536:tid 1017621] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/frontend/.env"] [unique_id "apK9MCJcY4fy7tP-rU0BIwACfFQ"]
[Sat Aug 29 05:06:24.356993 2026] [core:error] [pid 1018003:tid 1018180] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.357008 2026] [core:error] [pid 1018003:tid 1018180] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.365958 2026] [core:error] [pid 1017536:tid 1017767] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.365973 2026] [core:error] [pid 1017536:tid 1017767] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.374117 2026] [security2:error] [pid 1018003:tid 1018202] [client 68.155.159.216:51262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK9MDAh5Y1i2tUxg4H06AAABes"]
[Sat Aug 29 05:06:24.377172 2026] [security2:error] [pid 1017536:tid 1017705] [client 35.198.240.194:15106] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.omni-staffing.com"] [uri "/secret.json"] [unique_id "apK9MCJcY4fy7tP-rU0BKAAAAjs"]
[Sat Aug 29 05:06:24.379626 2026] [security2:error] [pid 1017536:tid 1017680] [client 68.155.159.216:16130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK9MCJcY4fy7tP-rU0BKwAAAiI"]
[Sat Aug 29 05:06:24.380206 2026] [security2:error] [pid 1018003:tid 1018217] [client 20.151.200.44:65035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9MDAh5Y1i2tUxg4H06gAABfo"]
[Sat Aug 29 05:06:24.387840 2026] [security2:error] [pid 1017536:tid 1017698] [client 20.196.209.81:16745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/wp-configs.php"] [unique_id "apK9MCJcY4fy7tP-rU0BLgAAAjQ"]
[Sat Aug 29 05:06:24.423967 2026] [security2:error] [pid 1017536:tid 1017733] [client 20.220.204.93:64302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/grsiuk.php"] [unique_id "apK9MCJcY4fy7tP-rU0BMwAAAlc"]
[Sat Aug 29 05:06:24.424810 2026] [security2:error] [pid 1017536:tid 1017673] [client 20.220.204.93:59109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/sbhu.php"] [unique_id "apK9MCJcY4fy7tP-rU0BNAAAAhs"]
[Sat Aug 29 05:06:24.425475 2026] [security2:error] [pid 1017536:tid 1017683] [client 158.158.54.35:7419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/php8.php"] [unique_id "apK9MCJcY4fy7tP-rU0BNgAAAiU"]
[Sat Aug 29 05:06:24.426094 2026] [security2:error] [pid 1017536:tid 1017691] [client 20.63.81.20:46953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/she11.php"] [unique_id "apK9MCJcY4fy7tP-rU0BNwAAAi0"]
[Sat Aug 29 05:06:24.443034 2026] [security2:error] [pid 1017536:tid 1017675] [client 68.155.159.216:50237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK9MCJcY4fy7tP-rU0BPwAAAh0"]
[Sat Aug 29 05:06:24.443907 2026] [security2:error] [pid 1017536:tid 1017722] [client 20.151.200.44:61954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/motu.php"] [unique_id "apK9MCJcY4fy7tP-rU0BQAAAAkw"]
[Sat Aug 29 05:06:24.444813 2026] [security2:error] [pid 1018003:tid 1018244] [client 20.63.81.20:60493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/jg.php"] [unique_id "apK9MDAh5Y1i2tUxg4H08QAABhQ"]
[Sat Aug 29 05:06:24.451439 2026] [core:error] [pid 1018003:tid 1018236] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.451456 2026] [core:error] [pid 1018003:tid 1018236] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.456047 2026] [security2:error] [pid 1018003:tid 1018236] [client 35.198.240.194:15116] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.omni-staffing.com"] [uri "/cgi-sys/404.html"] [unique_id "apK9MDAh5Y1i2tUxg4H09QAABgw"]
[Sat Aug 29 05:06:24.462490 2026] [security2:error] [pid 1017536:tid 1017793] [client 52.139.37.240:14494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/an.php"] [unique_id "apK9MCJcY4fy7tP-rU0BSAAAApM"]
[Sat Aug 29 05:06:24.465706 2026] [security2:error] [pid 1017536:tid 1017711] [client 68.155.159.216:24470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK9MCJcY4fy7tP-rU0BSwAAAkE"]
[Sat Aug 29 05:06:24.467402 2026] [security2:error] [pid 1017536:tid 1017661] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/info.php"] [unique_id "apK9MCJcY4fy7tP-rU0BTwACfHw"]
[Sat Aug 29 05:06:24.468908 2026] [core:error] [pid 1017536:tid 1017614] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.468925 2026] [core:error] [pid 1017536:tid 1017614] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.471440 2026] [security2:error] [pid 1017536:tid 1017743] [client 35.198.240.194:15210] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.omni-staffing.com"] [uri "/cgi-sys/404.html"] [unique_id "apK9MCJcY4fy7tP-rU0BUQAAAmE"]
[Sat Aug 29 05:06:24.473075 2026] [core:error] [pid 1017536:tid 1017695] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.473090 2026] [core:error] [pid 1017536:tid 1017695] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.473453 2026] [security2:error] [pid 1017536:tid 1017678] [client 20.196.209.81:5778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.voicexnet.com"] [uri "/wp-content/languages/plugins/about.php"] [unique_id "apK9MCJcY4fy7tP-rU0BUwAAAiA"]
[Sat Aug 29 05:06:24.479613 2026] [core:error] [pid 1017536:tid 1017736] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.479629 2026] [core:error] [pid 1017536:tid 1017736] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.480264 2026] [security2:error] [pid 1018003:tid 1018242] [client 20.104.49.130:47832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/red.php"] [unique_id "apK9MDAh5Y1i2tUxg4H0-wAABhI"]
[Sat Aug 29 05:06:24.480825 2026] [core:error] [pid 1017536:tid 1017780] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.480844 2026] [core:error] [pid 1017536:tid 1017780] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.481659 2026] [core:error] [pid 1017536:tid 1017687] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.481676 2026] [core:error] [pid 1017536:tid 1017687] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.482592 2026] [security2:error] [pid 1017536:tid 1017624] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/infophp.php"] [unique_id "apK9MCJcY4fy7tP-rU0BVwACfFc"]
[Sat Aug 29 05:06:24.486428 2026] [core:error] [pid 1017536:tid 1017777] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.486448 2026] [core:error] [pid 1017536:tid 1017777] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.487795 2026] [core:error] [pid 1018003:tid 1018174] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.487811 2026] [core:error] [pid 1018003:tid 1018174] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.514677 2026] [core:error] [pid 1018003:tid 1018190] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.514697 2026] [core:error] [pid 1018003:tid 1018190] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.515882 2026] [security2:error] [pid 1017536:tid 1017638] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/infos.php"] [unique_id "apK9MCJcY4fy7tP-rU0BWwACfGU"]
[Sat Aug 29 05:06:24.520236 2026] [security2:error] [pid 1017536:tid 1017689] [client 52.139.37.240:30015] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.thesldiet.com"] [uri "/c99.php"] [unique_id "apK9MCJcY4fy7tP-rU0BXAAAAis"]
[Sat Aug 29 05:06:24.542939 2026] [security2:error] [pid 1017536:tid 1017680] [client 158.23.147.79:32580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-content/banners/about.php"] [unique_id "apK9MCJcY4fy7tP-rU0BYgAAAiI"]
[Sat Aug 29 05:06:24.547549 2026] [security2:error] [pid 1017536:tid 1017556] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/laravel/.env"] [unique_id "apK9MCJcY4fy7tP-rU0BZAACKRM"]
[Sat Aug 29 05:06:24.560516 2026] [security2:error] [pid 1018003:tid 1018213] [client 20.104.18.15:36816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9MDAh5Y1i2tUxg4H1BAAABfY"]
[Sat Aug 29 05:06:24.563117 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.63.81.20:46850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/kerang.php"] [unique_id "apK9MCJcY4fy7tP-rU0BZwAAAlY"]
[Sat Aug 29 05:06:24.563152 2026] [security2:error] [pid 1017536:tid 1017753] [client 158.23.147.79:26620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/chosen.php"] [unique_id "apK9MCJcY4fy7tP-rU0BZgAAAms"]
[Sat Aug 29 05:06:24.568244 2026] [core:error] [pid 1018003:tid 1018239] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.568264 2026] [core:error] [pid 1018003:tid 1018239] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.574641 2026] [core:error] [pid 1018003:tid 1018231] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.574655 2026] [core:error] [pid 1018003:tid 1018231] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.593457 2026] [security2:error] [pid 1017536:tid 1017788] [client 111.235.68.106:60537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK9MCJcY4fy7tP-rU0BaQAAAo4"]
[Sat Aug 29 05:06:24.593565 2026] [security2:error] [pid 1017536:tid 1017788] [client 111.235.68.106:60537] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK9MCJcY4fy7tP-rU0BaQAAAo4"]
[Sat Aug 29 05:06:24.597304 2026] [security2:error] [pid 1017536:tid 1017622] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/lms/.env"] [unique_id "apK9MCJcY4fy7tP-rU0BagACb1U"]
[Sat Aug 29 05:06:24.597885 2026] [security2:error] [pid 1017536:tid 1017717] [client 20.63.81.20:60456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/yj.php"] [unique_id "apK9MCJcY4fy7tP-rU0BawAAAkc"]
[Sat Aug 29 05:06:24.608072 2026] [security2:error] [pid 1017536:tid 1017761] [client 158.23.147.79:30571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-content/admin.php"] [unique_id "apK9MCJcY4fy7tP-rU0BbAAAAnM"]
[Sat Aug 29 05:06:24.610555 2026] [security2:error] [pid 1018003:tid 1018219] [client 4.205.62.107:22364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/mcebraed.php"] [unique_id "apK9MDAh5Y1i2tUxg4H1DQAABfw"]
[Sat Aug 29 05:06:24.610567 2026] [security2:error] [pid 1018003:tid 1018207] [client 168.107.94.195:53457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9MDAh5Y1i2tUxg4H1DAAABfA"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:24.623594 2026] [security2:error] [pid 1017536:tid 1017749] [client 158.23.147.79:63852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK9MCJcY4fy7tP-rU0BcAAAAmc"]
[Sat Aug 29 05:06:24.625223 2026] [security2:error] [pid 1017536:tid 1017649] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/local/.env"] [unique_id "apK9MCJcY4fy7tP-rU0BbwACY3A"]
[Sat Aug 29 05:06:24.637253 2026] [security2:error] [pid 1018003:tid 1018261] [client 20.52.41.200:1258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/core.php"] [unique_id "apK9MDAh5Y1i2tUxg4H1DwAABiU"]
[Sat Aug 29 05:06:24.643500 2026] [security2:error] [pid 1017536:tid 1017709] [client 20.197.61.180:16270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-content/languages/index.php"] [unique_id "apK9MCJcY4fy7tP-rU0BdQAAAj8"]
[Sat Aug 29 05:06:24.644461 2026] [security2:error] [pid 1018003:tid 1018189] [client 20.220.204.93:59035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/a332.php"] [unique_id "apK9MDAh5Y1i2tUxg4H1EwAABd4"]
[Sat Aug 29 05:06:24.644735 2026] [security2:error] [pid 1017536:tid 1017678] [client 4.205.62.107:22492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/drykl.php"] [unique_id "apK9MCJcY4fy7tP-rU0BdgAAAiA"]
[Sat Aug 29 05:06:24.644982 2026] [security2:error] [pid 1017536:tid 1017785] [client 103.162.125.59:53572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.125.162.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK9MCJcY4fy7tP-rU0BdwAAAos"]
[Sat Aug 29 05:06:24.645069 2026] [security2:error] [pid 1017536:tid 1017785] [client 103.162.125.59:53572] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK9MCJcY4fy7tP-rU0BdwAAAos"]
[Sat Aug 29 05:06:24.647382 2026] [security2:error] [pid 1017536:tid 1017734] [client 20.151.200.44:64275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/wefile.php"] [unique_id "apK9MCJcY4fy7tP-rU0BeQAAAlg"]
[Sat Aug 29 05:06:24.657453 2026] [security2:error] [pid 1017536:tid 1017698] [client 52.139.37.240:14931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/asw.php"] [unique_id "apK9MCJcY4fy7tP-rU0BfAAAAjQ"]
[Sat Aug 29 05:06:24.657890 2026] [core:error] [pid 1018003:tid 1018245] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.657905 2026] [core:error] [pid 1018003:tid 1018245] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.659995 2026] [core:error] [pid 1017536:tid 1017705] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.660009 2026] [core:error] [pid 1017536:tid 1017705] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.660752 2026] [security2:error] [pid 1017536:tid 1017652] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/marketing/.env"] [unique_id "apK9MCJcY4fy7tP-rU0BfwACY3M"]
[Sat Aug 29 05:06:24.660798 2026] [security2:error] [pid 1017536:tid 1017663] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/market/.env"] [unique_id "apK9MCJcY4fy7tP-rU0BgAACY34"]
[Sat Aug 29 05:06:24.664303 2026] [security2:error] [pid 1017536:tid 1017680] [client 20.151.200.44:64995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/baee.php"] [unique_id "apK9MCJcY4fy7tP-rU0BgQAAAiI"]
[Sat Aug 29 05:06:24.681656 2026] [security2:error] [pid 1018003:tid 1018164] [client 34.21.253.104:1054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 104.253.21.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.replenishink.com"] [uri "/pi.php"] [unique_id "apK9MDAh5Y1i2tUxg4H1FgAABcU"]
[Sat Aug 29 05:06:24.682440 2026] [security2:error] [pid 1017536:tid 1017673] [client 34.21.253.104:1038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 104.253.21.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.replenishink.com"] [uri "/i.php"] [unique_id "apK9MCJcY4fy7tP-rU0BhQAAAhs"]
[Sat Aug 29 05:06:24.683620 2026] [security2:error] [pid 1017536:tid 1017747] [client 20.220.204.93:64991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/wp-scr1pts.php"] [unique_id "apK9MCJcY4fy7tP-rU0BhgAAAmU"]
[Sat Aug 29 05:06:24.686541 2026] [core:error] [pid 1018003:tid 1018179] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.686556 2026] [core:error] [pid 1018003:tid 1018179] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.687285 2026] [security2:error] [pid 1017536:tid 1017654] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/media/.env"] [unique_id "apK9MCJcY4fy7tP-rU0BgwACY3U"]
[Sat Aug 29 05:06:24.688748 2026] [security2:error] [pid 1018003:tid 1018192] [client 4.205.62.107:65489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/w.php"] [unique_id "apK9MDAh5Y1i2tUxg4H1HQAABeE"]
[Sat Aug 29 05:06:24.696210 2026] [security2:error] [pid 1017536:tid 1017733] [client 158.23.147.79:49792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/wp-content/x.php"] [unique_id "apK9MCJcY4fy7tP-rU0BkgAAAlc"]
[Sat Aug 29 05:06:24.697631 2026] [core:error] [pid 1018003:tid 1018270] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.697653 2026] [core:error] [pid 1018003:tid 1018270] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.699233 2026] [security2:error] [pid 1017536:tid 1017659] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/new/.env"] [unique_id "apK9MCJcY4fy7tP-rU0BlQACY3o"]
[Sat Aug 29 05:06:24.699844 2026] [proxy_http:error] [pid 1018003:tid 1018165] (20014)Internal error (specific information not available): [client 34.21.253.104:1108] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:24.699856 2026] [proxy:error] [pid 1018003:tid 1018165] [client 34.21.253.104:1108] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/.env~
[Sat Aug 29 05:06:24.705251 2026] [proxy_http:error] [pid 1017536:tid 1017769] (20014)Internal error (specific information not available): [client 34.21.253.104:1088] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:24.705274 2026] [proxy:error] [pid 1017536:tid 1017769] [client 34.21.253.104:1088] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/gradle.properties
[Sat Aug 29 05:06:24.710226 2026] [core:error] [pid 1017536:tid 1017722] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.710245 2026] [core:error] [pid 1017536:tid 1017722] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.712758 2026] [core:error] [pid 1017536:tid 1017746] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.713630 2026] [core:error] [pid 1017536:tid 1017746] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.715082 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.104.18.15:36676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9MCJcY4fy7tP-rU0BmQAAAnk"]
[Sat Aug 29 05:06:24.715396 2026] [proxy_http:error] [pid 1017536:tid 1017707] (20014)Internal error (specific information not available): [client 34.21.253.104:1106] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:24.715418 2026] [proxy:error] [pid 1017536:tid 1017707] [client 34.21.253.104:1106] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/.env.prod
[Sat Aug 29 05:06:24.716378 2026] [security2:error] [pid 1017536:tid 1017717] [client 20.63.81.20:46920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/m.php"] [unique_id "apK9MCJcY4fy7tP-rU0BmgAAAkc"]
[Sat Aug 29 05:06:24.719721 2026] [core:error] [pid 1018003:tid 1018175] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.719738 2026] [core:error] [pid 1018003:tid 1018175] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.724806 2026] [security2:error] [pid 1017536:tid 1017749] [client 20.63.81.20:56959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/zi.php"] [unique_id "apK9MCJcY4fy7tP-rU0BmwAAAmc"]
[Sat Aug 29 05:06:24.728567 2026] [proxy_http:error] [pid 1017536:tid 1017778] (20014)Internal error (specific information not available): [client 34.21.253.104:1130] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:24.728583 2026] [proxy:error] [pid 1017536:tid 1017778] [client 34.21.253.104:1130] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/_next/.env
[Sat Aug 29 05:06:24.730678 2026] [core:error] [pid 1017536:tid 1017711] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.730692 2026] [core:error] [pid 1017536:tid 1017711] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.735404 2026] [security2:error] [pid 1017536:tid 1017539] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/node-api/.env"] [unique_id "apK9MCJcY4fy7tP-rU0BnQACYwI"]
[Sat Aug 29 05:06:24.735406 2026] [security2:error] [pid 1017536:tid 1017592] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/node/.env"] [unique_id "apK9MCJcY4fy7tP-rU0BngACYzc"]
[Sat Aug 29 05:06:24.744140 2026] [security2:error] [pid 1017536:tid 1017678] [client 158.23.147.79:30715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/xmlrpc.php"] [unique_id "apK9MCJcY4fy7tP-rU0BnwAAAiA"]
[Sat Aug 29 05:06:24.747372 2026] [security2:error] [pid 1017536:tid 1017632] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/node/api/.env"] [unique_id "apK9MCJcY4fy7tP-rU0BoAACTl8"]
[Sat Aug 29 05:06:24.779512 2026] [security2:error] [pid 1017536:tid 1017574] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/node/backend/.env"] [unique_id "apK9MCJcY4fy7tP-rU0BoQACMSU"]
[Sat Aug 29 05:06:24.780908 2026] [security2:error] [pid 1017536:tid 1017689] [client 158.23.147.79:24401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK9MCJcY4fy7tP-rU0BogAAAis"]
[Sat Aug 29 05:06:24.791001 2026] [security2:error] [pid 1017536:tid 1017673] [client 158.23.147.79:35765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/radio.php"] [unique_id "apK9MCJcY4fy7tP-rU0BowAAAhs"]
[Sat Aug 29 05:06:24.795341 2026] [security2:error] [pid 1017536:tid 1017694] [client 20.196.209.81:19396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/essexec.php"] [unique_id "apK9MCJcY4fy7tP-rU0BpAAAAjA"]
[Sat Aug 29 05:06:24.799822 2026] [security2:error] [pid 1017536:tid 1017751] [client 20.151.200.44:64290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/EM.php"] [unique_id "apK9MCJcY4fy7tP-rU0BpQAAAmk"]
[Sat Aug 29 05:06:24.807588 2026] [security2:error] [pid 1017536:tid 1017732] [client 68.155.159.216:14084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/ans.php"] [unique_id "apK9MCJcY4fy7tP-rU0BpwAAAlY"]
[Sat Aug 29 05:06:24.821680 2026] [security2:error] [pid 1017536:tid 1017733] [client 20.220.204.93:59114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/ws66.php"] [unique_id "apK9MCJcY4fy7tP-rU0BqAAAAlc"]
[Sat Aug 29 05:06:24.837299 2026] [security2:error] [pid 1017536:tid 1017640] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/nodeweb/.env"] [unique_id "apK9MCJcY4fy7tP-rU0BqwACU2c"]
[Sat Aug 29 05:06:24.846377 2026] [security2:error] [pid 1017536:tid 1017788] [client 20.63.81.20:46934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/fling.php"] [unique_id "apK9MCJcY4fy7tP-rU0BrgAAAo4"]
[Sat Aug 29 05:06:24.848672 2026] [security2:error] [pid 1017536:tid 1017594] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/nodeapi/.env"] [unique_id "apK9MCJcY4fy7tP-rU0BrQACUzk"]
[Sat Aug 29 05:06:24.848685 2026] [security2:error] [pid 1017536:tid 1017793] [client 20.104.18.15:36853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/ap.php"] [unique_id "apK9MCJcY4fy7tP-rU0BrwAAApM"]
[Sat Aug 29 05:06:24.858197 2026] [security2:error] [pid 1018003:tid 1018184] [client 20.63.81.20:56912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/ue.php"] [unique_id "apK9MDAh5Y1i2tUxg4H1MgAABdk"]
[Sat Aug 29 05:06:24.862545 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.104.49.130:34506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/82.php"] [unique_id "apK9MCJcY4fy7tP-rU0BsAAAAnk"]
[Sat Aug 29 05:06:24.870261 2026] [security2:error] [pid 1017536:tid 1017713] [client 52.139.37.240:14912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/item.php"] [unique_id "apK9MCJcY4fy7tP-rU0BtAAAAkM"]
[Sat Aug 29 05:06:24.871097 2026] [core:error] [pid 1017536:tid 1017746] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.871114 2026] [core:error] [pid 1017536:tid 1017746] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.871851 2026] [core:error] [pid 1017536:tid 1017717] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.871863 2026] [core:error] [pid 1017536:tid 1017717] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.878187 2026] [security2:error] [pid 1017536:tid 1017546] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/old/.env"] [unique_id "apK9MCJcY4fy7tP-rU0BtgACZwk"]
[Sat Aug 29 05:06:24.880551 2026] [security2:error] [pid 1017536:tid 1017748] [client 20.151.200.44:65053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/d12.php"] [unique_id "apK9MCJcY4fy7tP-rU0BtwAAAmY"]
[Sat Aug 29 05:06:24.882998 2026] [security2:error] [pid 1017536:tid 1017620] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/opt/.env"] [unique_id "apK9MCJcY4fy7tP-rU0BuQACZ1M"]
[Sat Aug 29 05:06:24.918185 2026] [security2:error] [pid 1018003:tid 1018166] [client 40.83.93.50:1637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-admin/network/xmrlpc.php"] [unique_id "apK9MDAh5Y1i2tUxg4H1OgAABcc"]
[Sat Aug 29 05:06:24.928959 2026] [core:error] [pid 1018003:tid 1018256] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.928984 2026] [core:error] [pid 1018003:tid 1018256] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.943557 2026] [core:error] [pid 1017536:tid 1017724] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.943581 2026] [core:error] [pid 1017536:tid 1017724] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.948257 2026] [security2:error] [pid 1017536:tid 1017778] [client 20.220.204.93:64278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/num.php"] [unique_id "apK9MCJcY4fy7tP-rU0BygAAAoQ"]
[Sat Aug 29 05:06:24.948560 2026] [core:error] [pid 1018003:tid 1018186] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.948573 2026] [core:error] [pid 1018003:tid 1018186] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.952618 2026] [core:error] [pid 1017536:tid 1017736] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.952635 2026] [core:error] [pid 1017536:tid 1017736] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.956446 2026] [core:error] [pid 1017536:tid 1017780] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.956466 2026] [core:error] [pid 1017536:tid 1017780] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.962095 2026] [security2:error] [pid 1017536:tid 1017790] [client 20.151.200.44:64218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/ca4.php"] [unique_id "apK9MCJcY4fy7tP-rU0B1AAAApA"]
[Sat Aug 29 05:06:24.979672 2026] [security2:error] [pid 1017536:tid 1017765] [client 158.23.147.79:48205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-admin/maint/index.php"] [unique_id "apK9MCJcY4fy7tP-rU0B2AAAAnc"]
[Sat Aug 29 05:06:24.985047 2026] [core:error] [pid 1017536:tid 1017687] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.985073 2026] [core:error] [pid 1017536:tid 1017687] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.985348 2026] [core:error] [pid 1018003:tid 1018191] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.985364 2026] [core:error] [pid 1017536:tid 1017788] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.985375 2026] [core:error] [pid 1018003:tid 1018191] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.985377 2026] [core:error] [pid 1017536:tid 1017788] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.986115 2026] [core:error] [pid 1018003:tid 1018196] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.986685 2026] [core:error] [pid 1018003:tid 1018196] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:24.988010 2026] [security2:error] [pid 1017536:tid 1017722] [client 4.205.62.107:22340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/config_dev.php"] [unique_id "apK9MCJcY4fy7tP-rU0B3AAAAkw"]
[Sat Aug 29 05:06:24.991287 2026] [security2:error] [pid 1017536:tid 1017723] [client 20.63.81.20:46917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/btyuio.php"] [unique_id "apK9MCJcY4fy7tP-rU0B3gAAAk0"]
[Sat Aug 29 05:06:24.996765 2026] [security2:error] [pid 1017536:tid 1017777] [client 20.220.204.93:59019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/ws68.php"] [unique_id "apK9MCJcY4fy7tP-rU0B3wAAAoM"]
[Sat Aug 29 05:06:24.999641 2026] [security2:error] [pid 1017536:tid 1017729] [client 20.63.81.20:56913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/nv.php"] [unique_id "apK9MCJcY4fy7tP-rU0B4gAAAlM"]
[Sat Aug 29 05:06:25.002025 2026] [core:error] [pid 1017536:tid 1017752] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.002045 2026] [core:error] [pid 1017536:tid 1017752] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.004736 2026] [security2:error] [pid 1018003:tid 1018236] [client 4.205.62.107:9001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/bootstrap.php"] [unique_id "apK9MTAh5Y1i2tUxg4H1RAAABgw"]
[Sat Aug 29 05:06:25.013760 2026] [security2:error] [pid 1017536:tid 1017710] [client 20.104.18.15:36789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/media.php"] [unique_id "apK9MSJcY4fy7tP-rU0B5QAAAkA"]
[Sat Aug 29 05:06:25.015662 2026] [security2:error] [pid 1018003:tid 1018023] [remote 93.123.109.228:34972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/info.php"] [unique_id "apK9MTAh5Y1i2tUxg4H1SAAF6AI"]
[Sat Aug 29 05:06:25.015699 2026] [security2:error] [pid 1017536:tid 1017724] [client 168.107.94.195:53978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9MSJcY4fy7tP-rU0B5gAAAk4"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:25.031776 2026] [security2:error] [pid 1018003:tid 1018188] [client 20.151.200.44:61961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/x23.php"] [unique_id "apK9MTAh5Y1i2tUxg4H1SQAABd0"]
[Sat Aug 29 05:06:25.037769 2026] [security2:error] [pid 1018003:tid 1018136] [remote 93.123.109.228:34972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/infophp.php"] [unique_id "apK9MTAh5Y1i2tUxg4H1TAAF6HM"]
[Sat Aug 29 05:06:25.038721 2026] [core:error] [pid 1018003:tid 1018246] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.038739 2026] [core:error] [pid 1018003:tid 1018246] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.038896 2026] [security2:error] [pid 1018003:tid 1018131] [remote 93.123.109.228:34972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/infos.php"] [unique_id "apK9MTAh5Y1i2tUxg4H1TQAF6G4"]
[Sat Aug 29 05:06:25.050438 2026] [security2:error] [pid 1018003:tid 1018238] [client 20.151.200.44:65012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/yyy.php"] [unique_id "apK9MTAh5Y1i2tUxg4H1TwAABg4"]
[Sat Aug 29 05:06:25.074876 2026] [security2:error] [pid 1017536:tid 1017709] [client 52.139.37.240:15260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/jga.php"] [unique_id "apK9MSJcY4fy7tP-rU0B8wAAAj8"]
[Sat Aug 29 05:06:25.091494 2026] [core:error] [pid 1018003:tid 1018225] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.091511 2026] [core:error] [pid 1018003:tid 1018225] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.091904 2026] [security2:error] [pid 1018003:tid 1018174] [client 20.220.204.93:64337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/a4.php"] [unique_id "apK9MTAh5Y1i2tUxg4H1VAAABc8"]
[Sat Aug 29 05:06:25.096463 2026] [core:error] [pid 1017536:tid 1017790] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.096477 2026] [core:error] [pid 1017536:tid 1017790] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.103731 2026] [security2:error] [pid 1017536:tid 1017719] [client 20.52.41.200:1786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/admin/function.php"] [unique_id "apK9MSJcY4fy7tP-rU0B-AAAAkk"]
[Sat Aug 29 05:06:25.105395 2026] [core:error] [pid 1018003:tid 1018258] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.105421 2026] [core:error] [pid 1018003:tid 1018258] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.105703 2026] [core:error] [pid 1017536:tid 1017606] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.105712 2026] [core:error] [pid 1017536:tid 1017606] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.105915 2026] [core:error] [pid 1018003:tid 1018155] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.105929 2026] [core:error] [pid 1018003:tid 1018155] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.112577 2026] [core:error] [pid 1017536:tid 1017683] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.112595 2026] [core:error] [pid 1017536:tid 1017683] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.118338 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.151.200.44:64950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/x0x.php"] [unique_id "apK9MSJcY4fy7tP-rU0B_AAAAh0"]
[Sat Aug 29 05:06:25.119321 2026] [security2:error] [pid 1017536:tid 1017713] [client 158.158.54.35:35235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/install.php"] [unique_id "apK9MSJcY4fy7tP-rU0B_QAAAkM"]
[Sat Aug 29 05:06:25.119955 2026] [security2:error] [pid 1018003:tid 1018230] [client 20.48.251.3:14334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/time.php"] [unique_id "apK9MTAh5Y1i2tUxg4H1WAAABgY"]
[Sat Aug 29 05:06:25.121230 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.63.81.20:44496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/dehnl.php"] [unique_id "apK9MSJcY4fy7tP-rU0B_gAAAnk"]
[Sat Aug 29 05:06:25.121949 2026] [security2:error] [pid 1017536:tid 1017712] [client 4.205.62.107:56058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/public/vx.php"] [unique_id "apK9MSJcY4fy7tP-rU0B_wAAAkI"]
[Sat Aug 29 05:06:25.127457 2026] [security2:error] [pid 1018003:tid 1018198] [client 158.23.147.79:25437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/sad/about.php"] [unique_id "apK9MTAh5Y1i2tUxg4H1WQAABec"]
[Sat Aug 29 05:06:25.132566 2026] [core:error] [pid 1018003:tid 1018248] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.132589 2026] [core:error] [pid 1018003:tid 1018248] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.133994 2026] [security2:error] [pid 1017536:tid 1017717] [client 20.63.81.20:60446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/jw.php"] [unique_id "apK9MSJcY4fy7tP-rU0CAgAAAkc"]
[Sat Aug 29 05:06:25.136012 2026] [core:error] [pid 1017536:tid 1017786] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.136030 2026] [core:error] [pid 1017536:tid 1017786] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.152256 2026] [security2:error] [pid 1017536:tid 1017590] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/php-info.php"] [unique_id "apK9MSJcY4fy7tP-rU0CBQACMjU"]
[Sat Aug 29 05:06:25.152455 2026] [core:error] [pid 1017536:tid 1017749] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.152473 2026] [core:error] [pid 1017536:tid 1017749] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.152949 2026] [security2:error] [pid 1017536:tid 1017589] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/php.php"] [unique_id "apK9MSJcY4fy7tP-rU0CBgACMjQ"]
[Sat Aug 29 05:06:25.155043 2026] [security2:error] [pid 1017536:tid 1017561] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/php_info.php"] [unique_id "apK9MSJcY4fy7tP-rU0CBwACMhg"]
[Sat Aug 29 05:06:25.155224 2026] [security2:error] [pid 1017536:tid 1017653] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/phpinfo.php"] [unique_id "apK9MSJcY4fy7tP-rU0CCAACMnQ"]
[Sat Aug 29 05:06:25.177450 2026] [security2:error] [pid 1018003:tid 1018187] [client 20.220.204.93:59083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/users.php"] [unique_id "apK9MTAh5Y1i2tUxg4H1ZAAABdw"]
[Sat Aug 29 05:06:25.184208 2026] [security2:error] [pid 1017536:tid 1017734] [client 20.48.251.3:3344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/aws_settings.php"] [unique_id "apK9MSJcY4fy7tP-rU0CDQAAAlg"]
[Sat Aug 29 05:06:25.188446 2026] [security2:error] [pid 1018003:tid 1018207] [client 20.104.18.15:36677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/adminfuns.php"] [unique_id "apK9MTAh5Y1i2tUxg4H1ZgAABfA"]
[Sat Aug 29 05:06:25.190911 2026] [security2:error] [pid 1017536:tid 1017540] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/portal/.env"] [unique_id "apK9MSJcY4fy7tP-rU0CDwACMgM"]
[Sat Aug 29 05:06:25.192213 2026] [core:error] [pid 1017536:tid 1017588] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.192229 2026] [core:error] [pid 1017536:tid 1017588] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.194555 2026] [core:error] [pid 1018003:tid 1018219] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.194568 2026] [core:error] [pid 1018003:tid 1018219] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.194606 2026] [security2:error] [pid 1017536:tid 1017785] [client 20.196.209.81:11522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/hello.php"] [unique_id "apK9MSJcY4fy7tP-rU0CEAAAAos"]
[Sat Aug 29 05:06:25.204381 2026] [security2:error] [pid 1017536:tid 1017669] [client 20.151.200.44:65064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/bgymj.php"] [unique_id "apK9MSJcY4fy7tP-rU0CEQAAAhc"]
[Sat Aug 29 05:06:25.229122 2026] [security2:error] [pid 1017536:tid 1017732] [client 68.155.159.216:52814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK9MSJcY4fy7tP-rU0CEgAAAlY"]
[Sat Aug 29 05:06:25.243522 2026] [security2:error] [pid 1018003:tid 1018245] [client 20.151.200.44:47419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/private.php"] [unique_id "apK9MTAh5Y1i2tUxg4H1bAAABhU"]
[Sat Aug 29 05:06:25.254791 2026] [security2:error] [pid 1017536:tid 1017788] [client 20.48.251.3:13972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/doc.php"] [unique_id "apK9MSJcY4fy7tP-rU0CEwAAAo4"]
[Sat Aug 29 05:06:25.256156 2026] [security2:error] [pid 1017536:tid 1017683] [client 20.63.81.20:44493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/zoo2.php"] [unique_id "apK9MSJcY4fy7tP-rU0CFAAAAiU"]
[Sat Aug 29 05:06:25.261352 2026] [security2:error] [pid 1017536:tid 1017713] [client 20.151.200.44:64264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familytrade.ca"] [uri "/fesa.php"] [unique_id "apK9MSJcY4fy7tP-rU0CFQAAAkM"]
[Sat Aug 29 05:06:25.270164 2026] [security2:error] [pid 1017536:tid 1017694] [client 52.139.37.240:15244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/mac.php"] [unique_id "apK9MSJcY4fy7tP-rU0CFgAAAjA"]
[Sat Aug 29 05:06:25.275892 2026] [security2:error] [pid 1017536:tid 1017548] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/prod/.env"] [unique_id "apK9MSJcY4fy7tP-rU0CGQACVQs"]
[Sat Aug 29 05:06:25.277625 2026] [security2:error] [pid 1017536:tid 1017582] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/product/.env"] [unique_id "apK9MSJcY4fy7tP-rU0CGwACVS0"]
[Sat Aug 29 05:06:25.279888 2026] [core:error] [pid 1017536:tid 1017603] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.279906 2026] [core:error] [pid 1017536:tid 1017603] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.300730 2026] [security2:error] [pid 1017536:tid 1017541] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/production/.env"] [unique_id "apK9MSJcY4fy7tP-rU0CIAACVQQ"]
[Sat Aug 29 05:06:25.304139 2026] [security2:error] [pid 1017536:tid 1017567] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/project/.env"] [unique_id "apK9MSJcY4fy7tP-rU0CIgACVR4"]
[Sat Aug 29 05:06:25.308407 2026] [security2:error] [pid 1017536:tid 1017562] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/public/.env"] [unique_id "apK9MSJcY4fy7tP-rU0CJwACVRk"]
[Sat Aug 29 05:06:25.308420 2026] [security2:error] [pid 1017536:tid 1017595] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/public-api/.env"] [unique_id "apK9MSJcY4fy7tP-rU0CJgACVTo"]
[Sat Aug 29 05:06:25.313111 2026] [security2:error] [pid 1017536:tid 1017723] [client 20.48.251.3:61202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/wp-konfig.backup.php"] [unique_id "apK9MSJcY4fy7tP-rU0CKgAAAk0"]
[Sat Aug 29 05:06:25.314223 2026] [core:error] [pid 1017536:tid 1017689] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.314240 2026] [core:error] [pid 1017536:tid 1017689] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.321567 2026] [security2:error] [pid 1018003:tid 1018271] [client 20.220.204.93:59028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/bzjdlofz.php"] [unique_id "apK9MTAh5Y1i2tUxg4H1dAAABi8"]
[Sat Aug 29 05:06:25.323146 2026] [core:error] [pid 1017536:tid 1017691] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.323162 2026] [core:error] [pid 1017536:tid 1017691] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.342862 2026] [security2:error] [pid 1017536:tid 1017710] [client 20.104.18.15:36686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/classwithtostring.php"] [unique_id "apK9MSJcY4fy7tP-rU0CMQAAAkA"]
[Sat Aug 29 05:06:25.344497 2026] [core:error] [pid 1017536:tid 1017672] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.344512 2026] [core:error] [pid 1017536:tid 1017672] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.347215 2026] [core:error] [pid 1017536:tid 1017770] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.347232 2026] [core:error] [pid 1017536:tid 1017770] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.347832 2026] [security2:error] [pid 1017536:tid 1017698] [client 103.168.67.159:57718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 159.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "naturalkneads.com"] [uri "/wp/index.php"] [unique_id "apK9MSJcY4fy7tP-rU0CNQAAAjQ"], referer: https://naturalkneads.com/wp/wp-admin/
[Sat Aug 29 05:06:25.347965 2026] [core:error] [pid 1018003:tid 1018170] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.347977 2026] [core:error] [pid 1018003:tid 1018170] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.367334 2026] [security2:error] [pid 1017536:tid 1017746] [client 20.197.61.180:16279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-content/languages/min.php"] [unique_id "apK9MSJcY4fy7tP-rU0COAAAAmQ"]
[Sat Aug 29 05:06:25.384708 2026] [security2:error] [pid 1017536:tid 1017551] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/public_html/.env"] [unique_id "apK9MSJcY4fy7tP-rU0CPAACMg4"]
[Sat Aug 29 05:06:25.385853 2026] [security2:error] [pid 1017536:tid 1017587] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/public/phpinfo.php"] [unique_id "apK9MSJcY4fy7tP-rU0CPgACMjI"]
[Sat Aug 29 05:06:25.386616 2026] [core:error] [pid 1017536:tid 1017571] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.386634 2026] [core:error] [pid 1017536:tid 1017571] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.395245 2026] [security2:error] [pid 1018003:tid 1018216] [client 168.107.94.195:54314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9MTAh5Y1i2tUxg4H1fwAABfk"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:25.400644 2026] [security2:error] [pid 1017536:tid 1017719] [client 40.83.93.50:1624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-admin/options-general.php"] [unique_id "apK9MSJcY4fy7tP-rU0CQQAAAkk"]
[Sat Aug 29 05:06:25.401689 2026] [security2:error] [pid 1017536:tid 1017686] [client 20.48.251.3:14301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/classsmtps.php"] [unique_id "apK9MSJcY4fy7tP-rU0CQgAAAig"]
[Sat Aug 29 05:06:25.417248 2026] [core:error] [pid 1018003:tid 1018193] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.417270 2026] [core:error] [pid 1018003:tid 1018193] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.446001 2026] [security2:error] [pid 1017536:tid 1017765] [client 68.155.159.216:33682] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/1.php"] [unique_id "apK9MSJcY4fy7tP-rU0CRgAAAnc"]
[Sat Aug 29 05:06:25.446115 2026] [security2:error] [pid 1017536:tid 1017765] [client 68.155.159.216:33682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/1.php"] [unique_id "apK9MSJcY4fy7tP-rU0CRgAAAnc"]
[Sat Aug 29 05:06:25.449160 2026] [security2:error] [pid 1017536:tid 1017552] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/qa/.env"] [unique_id "apK9MSJcY4fy7tP-rU0CRwACTQ8"]
[Sat Aug 29 05:06:25.453666 2026] [security2:error] [pid 1017536:tid 1017689] [client 20.48.251.3:61211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/packed.php"] [unique_id "apK9MSJcY4fy7tP-rU0CSgAAAis"]
[Sat Aug 29 05:06:25.456203 2026] [security2:error] [pid 1017536:tid 1017777] [client 20.151.200.44:64970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/fh26.php"] [unique_id "apK9MSJcY4fy7tP-rU0CSwAAAoM"]
[Sat Aug 29 05:06:25.471365 2026] [security2:error] [pid 1017536:tid 1017753] [client 52.139.37.240:14933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK9MSJcY4fy7tP-rU0CTwAAAms"]
[Sat Aug 29 05:06:25.486181 2026] [security2:error] [pid 1017536:tid 1017769] [client 68.155.159.216:16312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/classwithtostring.php"] [unique_id "apK9MSJcY4fy7tP-rU0CVwAAAns"]
[Sat Aug 29 05:06:25.491836 2026] [core:error] [pid 1017536:tid 1017724] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.491858 2026] [core:error] [pid 1017536:tid 1017724] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.493835 2026] [security2:error] [pid 1017536:tid 1017770] [client 20.104.18.15:36764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK9MSJcY4fy7tP-rU0CWgAAAnw"]
[Sat Aug 29 05:06:25.496046 2026] [core:error] [pid 1017536:tid 1017672] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.496062 2026] [core:error] [pid 1017536:tid 1017672] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.501877 2026] [security2:error] [pid 1018003:tid 1018171] [client 20.151.200.44:64923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/ws66.php"] [unique_id "apK9MTAh5Y1i2tUxg4H1igAABcw"]
[Sat Aug 29 05:06:25.514103 2026] [security2:error] [pid 1018003:tid 1018180] [client 20.220.204.93:59044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/selesai.php"] [unique_id "apK9MTAh5Y1i2tUxg4H1jgAABdU"]
[Sat Aug 29 05:06:25.516477 2026] [core:error] [pid 1017536:tid 1017785] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.516498 2026] [core:error] [pid 1017536:tid 1017785] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.519213 2026] [core:error] [pid 1017536:tid 1017673] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.519234 2026] [core:error] [pid 1017536:tid 1017673] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.519236 2026] [core:error] [pid 1017536:tid 1017746] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.519248 2026] [core:error] [pid 1017536:tid 1017746] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.519537 2026] [core:error] [pid 1017536:tid 1017751] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.519547 2026] [core:error] [pid 1017536:tid 1017751] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.522218 2026] [core:error] [pid 1017536:tid 1017732] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.522232 2026] [core:error] [pid 1017536:tid 1017732] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.529722 2026] [core:error] [pid 1017536:tid 1017749] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.529737 2026] [core:error] [pid 1017536:tid 1017749] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.531813 2026] [security2:error] [pid 1018003:tid 1018163] [client 20.220.204.93:63822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/tfm.php"] [unique_id "apK9MTAh5Y1i2tUxg4H1kwAABcQ"]
[Sat Aug 29 05:06:25.534846 2026] [security2:error] [pid 1018003:tid 1018186] [client 20.48.251.3:13963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/cache-compat.php"] [unique_id "apK9MTAh5Y1i2tUxg4H1lAAABds"]
[Sat Aug 29 05:06:25.535966 2026] [core:error] [pid 1017536:tid 1017705] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.535978 2026] [core:error] [pid 1017536:tid 1017705] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.548494 2026] [core:error] [pid 1017536:tid 1017792] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.548514 2026] [core:error] [pid 1017536:tid 1017792] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.551421 2026] [core:error] [pid 1017536:tid 1017698] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.551436 2026] [core:error] [pid 1017536:tid 1017698] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.564656 2026] [security2:error] [pid 1017536:tid 1017706] [client 20.52.41.200:1227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/admin/index.php"] [unique_id "apK9MSJcY4fy7tP-rU0CcAAAAjw"]
[Sat Aug 29 05:06:25.567641 2026] [security2:error] [pid 1017536:tid 1017780] [client 158.158.54.35:11340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/ioxi-o.php"] [unique_id "apK9MSJcY4fy7tP-rU0CcQAAAoY"]
[Sat Aug 29 05:06:25.569750 2026] [security2:error] [pid 1018003:tid 1018153] [client 68.155.159.216:24450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK9MTAh5Y1i2tUxg4H1mQAABbo"]
[Sat Aug 29 05:06:25.577293 2026] [core:error] [pid 1018003:tid 1018277] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.577310 2026] [core:error] [pid 1018003:tid 1018277] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.582347 2026] [security2:error] [pid 1017536:tid 1017711] [client 20.48.251.3:3345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/wp-info.php"] [unique_id "apK9MSJcY4fy7tP-rU0CdAAAAkE"]
[Sat Aug 29 05:06:25.594938 2026] [core:error] [pid 1018003:tid 1018160] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.594959 2026] [core:error] [pid 1018003:tid 1018160] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.595263 2026] [core:error] [pid 1018003:tid 1018246] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.595274 2026] [core:error] [pid 1018003:tid 1018246] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.603375 2026] [security2:error] [pid 1017536:tid 1017781] [client 20.196.209.81:19443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/fi2.php"] [unique_id "apK9MSJcY4fy7tP-rU0CdQAAAoc"]
[Sat Aug 29 05:06:25.617698 2026] [core:error] [pid 1017536:tid 1017687] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.617717 2026] [core:error] [pid 1017536:tid 1017687] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.649595 2026] [security2:error] [pid 1017536:tid 1017737] [client 158.23.147.79:32661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK9MSJcY4fy7tP-rU0CegAAAls"]
[Sat Aug 29 05:06:25.652617 2026] [security2:error] [pid 1017536:tid 1017683] [client 20.104.18.15:36792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/5PJcpMFsD8B.php"] [unique_id "apK9MSJcY4fy7tP-rU0CfAAAAiU"]
[Sat Aug 29 05:06:25.669900 2026] [security2:error] [pid 1017536:tid 1017686] [client 52.139.37.240:14918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK9MSJcY4fy7tP-rU0CfwAAAig"]
[Sat Aug 29 05:06:25.676727 2026] [security2:error] [pid 1017536:tid 1017765] [client 20.48.251.3:14064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/aws_keys.php"] [unique_id "apK9MSJcY4fy7tP-rU0ChgAAAnc"]
[Sat Aug 29 05:06:25.682518 2026] [security2:error] [pid 1017536:tid 1017776] [client 20.220.204.93:59123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/shlo.php"] [unique_id "apK9MSJcY4fy7tP-rU0CigAAAoI"]
[Sat Aug 29 05:06:25.683388 2026] [security2:error] [pid 1018003:tid 1018198] [client 68.155.159.216:51206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-includes/index.php"] [unique_id "apK9MTAh5Y1i2tUxg4H1owAABec"]
[Sat Aug 29 05:06:25.690926 2026] [security2:error] [pid 1017536:tid 1017752] [client 20.151.200.44:64401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/fgd.php"] [unique_id "apK9MSJcY4fy7tP-rU0CjwAAAmo"]
[Sat Aug 29 05:06:25.710012 2026] [core:error] [pid 1017536:tid 1017753] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.710030 2026] [core:error] [pid 1017536:tid 1017753] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.712396 2026] [security2:error] [pid 1017536:tid 1017719] [client 20.48.251.3:61226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/fns.php"] [unique_id "apK9MSJcY4fy7tP-rU0ClQAAAkk"]
[Sat Aug 29 05:06:25.724130 2026] [core:error] [pid 1018003:tid 1018213] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.724335 2026] [core:error] [pid 1018003:tid 1018213] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.726234 2026] [core:error] [pid 1017536:tid 1017672] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.726246 2026] [core:error] [pid 1017536:tid 1017672] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.731999 2026] [core:error] [pid 1017536:tid 1017706] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.732031 2026] [core:error] [pid 1017536:tid 1017706] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.738471 2026] [security2:error] [pid 1017536:tid 1017786] [client 158.23.147.79:30468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/atomlib.php"] [unique_id "apK9MSJcY4fy7tP-rU0CnAAAAow"]
[Sat Aug 29 05:06:25.742570 2026] [core:error] [pid 1018003:tid 1018152] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.742590 2026] [core:error] [pid 1018003:tid 1018152] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.742772 2026] [core:error] [pid 1017536:tid 1017778] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.742785 2026] [core:error] [pid 1017536:tid 1017778] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.743632 2026] [core:error] [pid 1017536:tid 1017733] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.743644 2026] [core:error] [pid 1017536:tid 1017733] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.743795 2026] [core:error] [pid 1017536:tid 1017674] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.743806 2026] [core:error] [pid 1017536:tid 1017674] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.749553 2026] [security2:error] [pid 1017536:tid 1017793] [client 4.205.62.107:22249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/verox.php"] [unique_id "apK9MSJcY4fy7tP-rU0CoQAAApM"]
[Sat Aug 29 05:06:25.757361 2026] [security2:error] [pid 1018003:tid 1018187] [client 158.23.147.79:26565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/goods.php"] [unique_id "apK9MTAh5Y1i2tUxg4H1rgAABdw"]
[Sat Aug 29 05:06:25.764993 2026] [core:error] [pid 1018003:tid 1018261] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.765011 2026] [core:error] [pid 1018003:tid 1018261] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.765712 2026] [core:error] [pid 1018003:tid 1018200] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.765723 2026] [core:error] [pid 1018003:tid 1018200] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.766038 2026] [security2:error] [pid 1018003:tid 1018134] [remote 93.123.109.228:34972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/php-info.php"] [unique_id "apK9MTAh5Y1i2tUxg4H1tAAGHHE"]
[Sat Aug 29 05:06:25.766072 2026] [core:error] [pid 1018003:tid 1018262] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.766080 2026] [core:error] [pid 1018003:tid 1018262] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.768252 2026] [core:error] [pid 1017536:tid 1017686] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.768264 2026] [core:error] [pid 1017536:tid 1017686] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.773840 2026] [security2:error] [pid 1018003:tid 1018077] [remote 93.123.109.228:34972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/php.php"] [unique_id "apK9MTAh5Y1i2tUxg4H1tQAGHDg"]
[Sat Aug 29 05:06:25.776346 2026] [security2:error] [pid 1018003:tid 1018266] [client 168.107.94.195:54560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9MTAh5Y1i2tUxg4H1tgAABio"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:25.787522 2026] [security2:error] [pid 1018003:tid 1018234] [client 158.23.147.79:63854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK9MTAh5Y1i2tUxg4H1twAABgo"]
[Sat Aug 29 05:06:25.792144 2026] [core:error] [pid 1018003:tid 1018249] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.792161 2026] [core:error] [pid 1018003:tid 1018249] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.792282 2026] [core:error] [pid 1018003:tid 1018224] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.792291 2026] [core:error] [pid 1018003:tid 1018224] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.792420 2026] [core:error] [pid 1018003:tid 1018203] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.792433 2026] [core:error] [pid 1018003:tid 1018203] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.792739 2026] [security2:error] [pid 1018003:tid 1018081] [remote 93.123.109.228:34972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/php_info.php"] [unique_id "apK9MTAh5Y1i2tUxg4H1uwAGHDw"]
[Sat Aug 29 05:06:25.796134 2026] [security2:error] [pid 1017536:tid 1017792] [client 20.151.200.44:64205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/Cok.php"] [unique_id "apK9MSJcY4fy7tP-rU0CpwAAApI"]
[Sat Aug 29 05:06:25.799047 2026] [core:error] [pid 1018003:tid 1018224] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.799062 2026] [core:error] [pid 1018003:tid 1018224] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.801659 2026] [security2:error] [pid 1018003:tid 1018172] [client 20.151.200.44:46605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/lfi.php"] [unique_id "apK9MTAh5Y1i2tUxg4H1vgAABc0"]
[Sat Aug 29 05:06:25.808487 2026] [security2:error] [pid 1018003:tid 1018063] [remote 93.123.109.228:34972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/phpinfo.php"] [unique_id "apK9MTAh5Y1i2tUxg4H1wAAGHCo"]
[Sat Aug 29 05:06:25.812042 2026] [security2:error] [pid 1018003:tid 1018212] [client 4.205.62.107:22215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/aws.php"] [unique_id "apK9MTAh5Y1i2tUxg4H1wQAABfU"]
[Sat Aug 29 05:06:25.820242 2026] [security2:error] [pid 1017536:tid 1017773] [client 20.48.251.3:14304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/umgebung.php"] [unique_id "apK9MSJcY4fy7tP-rU0CqgAAAn8"]
[Sat Aug 29 05:06:25.821540 2026] [security2:error] [pid 1017536:tid 1017672] [client 20.104.18.15:36850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK9MSJcY4fy7tP-rU0CqwAAAho"]
[Sat Aug 29 05:06:25.835643 2026] [security2:error] [pid 1018003:tid 1018171] [client 158.23.147.79:37764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/file17.php"] [unique_id "apK9MTAh5Y1i2tUxg4H1xwAABcw"]
[Sat Aug 29 05:06:25.841868 2026] [security2:error] [pid 1018003:tid 1018271] [client 4.205.62.107:65438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/btx25.php"] [unique_id "apK9MTAh5Y1i2tUxg4H1yAAABi8"]
[Sat Aug 29 05:06:25.850460 2026] [security2:error] [pid 1018003:tid 1018180] [client 20.48.251.3:61246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/params.php"] [unique_id "apK9MTAh5Y1i2tUxg4H1ygAABdU"]
[Sat Aug 29 05:06:25.871995 2026] [security2:error] [pid 1017536:tid 1017724] [client 40.83.93.50:1612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-admin/options.php"] [unique_id "apK9MSJcY4fy7tP-rU0CrQAAAk4"]
[Sat Aug 29 05:06:25.875043 2026] [security2:error] [pid 1017536:tid 1017628] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/s3/.env.bak"] [unique_id "apK9MSJcY4fy7tP-rU0CrgACXls"]
[Sat Aug 29 05:06:25.876714 2026] [security2:error] [pid 1018003:tid 1018275] [client 52.139.37.240:14945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/zafir1.php"] [unique_id "apK9MTAh5Y1i2tUxg4H1zgAABjM"]
[Sat Aug 29 05:06:25.892799 2026] [security2:error] [pid 1017536:tid 1017675] [client 158.23.147.79:35819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK9MSJcY4fy7tP-rU0CsAAAAh0"]
[Sat Aug 29 05:06:25.917780 2026] [security2:error] [pid 1017536:tid 1017793] [client 158.23.147.79:50140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK9MSJcY4fy7tP-rU0CtgAAApM"]
[Sat Aug 29 05:06:25.923674 2026] [security2:error] [pid 1017536:tid 1017687] [client 20.220.204.93:59049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/asax.php"] [unique_id "apK9MSJcY4fy7tP-rU0CtwAAAik"]
[Sat Aug 29 05:06:25.942562 2026] [security2:error] [pid 1017536:tid 1017712] [client 20.220.204.93:64279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/Geforce.php"] [unique_id "apK9MSJcY4fy7tP-rU0CvQAAAkI"]
[Sat Aug 29 05:06:25.944175 2026] [security2:error] [pid 1017536:tid 1017673] [client 68.155.159.216:14144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/worksec.php"] [unique_id "apK9MSJcY4fy7tP-rU0CvAAAAhs"]
[Sat Aug 29 05:06:25.953610 2026] [security2:error] [pid 1018003:tid 1018112] [remote 93.123.109.228:34972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/public/phpinfo.php"] [unique_id "apK9MTAh5Y1i2tUxg4H13gAF-ls"]
[Sat Aug 29 05:06:25.955191 2026] [security2:error] [pid 1017536:tid 1017713] [client 20.48.250.41:25573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9MSJcY4fy7tP-rU0CwwAAAkM"]
[Sat Aug 29 05:06:25.956284 2026] [core:error] [pid 1017536:tid 1017547] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.956300 2026] [core:error] [pid 1017536:tid 1017547] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.958185 2026] [security2:error] [pid 1017536:tid 1017584] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/server/.env"] [unique_id "apK9MSJcY4fy7tP-rU0CxQACVy8"]
[Sat Aug 29 05:06:25.969876 2026] [core:error] [pid 1017536:tid 1017622] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.969890 2026] [core:error] [pid 1017536:tid 1017622] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.973128 2026] [security2:error] [pid 1017536:tid 1017649] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/server/backend/.env"] [unique_id "apK9MSJcY4fy7tP-rU0CxwACV3A"]
[Sat Aug 29 05:06:25.973141 2026] [security2:error] [pid 1017536:tid 1017663] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/server/api/.env"] [unique_id "apK9MSJcY4fy7tP-rU0CyAACV34"]
[Sat Aug 29 05:06:25.975855 2026] [security2:error] [pid 1018003:tid 1018162] [client 158.23.147.79:30538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/lv.php"] [unique_id "apK9MTAh5Y1i2tUxg4H14AAABcM"]
[Sat Aug 29 05:06:25.978176 2026] [core:error] [pid 1017536:tid 1017652] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.978193 2026] [core:error] [pid 1017536:tid 1017652] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.978810 2026] [core:error] [pid 1017536:tid 1017757] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.978824 2026] [core:error] [pid 1017536:tid 1017757] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.979118 2026] [core:error] [pid 1018003:tid 1018240] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.979129 2026] [core:error] [pid 1018003:tid 1018240] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.980697 2026] [security2:error] [pid 1018003:tid 1018240] [client 20.48.251.3:61240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/gjm.php"] [unique_id "apK9MTAh5Y1i2tUxg4H15AAABhA"]
[Sat Aug 29 05:06:25.980719 2026] [core:error] [pid 1017536:tid 1017689] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.980730 2026] [core:error] [pid 1017536:tid 1017689] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.980934 2026] [core:error] [pid 1017536:tid 1017747] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.980945 2026] [core:error] [pid 1017536:tid 1017747] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.981753 2026] [core:error] [pid 1018003:tid 1018238] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.981766 2026] [core:error] [pid 1018003:tid 1018238] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.982371 2026] [core:error] [pid 1017536:tid 1017745] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.982385 2026] [core:error] [pid 1017536:tid 1017745] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.983506 2026] [core:error] [pid 1018003:tid 1018233] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.983521 2026] [core:error] [pid 1018003:tid 1018233] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.983591 2026] [core:error] [pid 1017536:tid 1017737] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.983600 2026] [core:error] [pid 1017536:tid 1017737] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.984937 2026] [core:error] [pid 1017536:tid 1017553] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.984946 2026] [core:error] [pid 1017536:tid 1017553] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:25.986947 2026] [security2:error] [pid 1018003:tid 1018246] [client 20.104.18.15:36684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/wsd.php"] [unique_id "apK9MTAh5Y1i2tUxg4H15QAABhY"]
[Sat Aug 29 05:06:26.008141 2026] [security2:error] [pid 1017536:tid 1017790] [client 20.52.41.200:1226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/storage/rip.php"] [unique_id "apK9MiJcY4fy7tP-rU0C0AAAApA"]
[Sat Aug 29 05:06:26.017424 2026] [security2:error] [pid 1017536:tid 1017786] [client 158.158.54.35:35252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/xmlrpc.php"] [unique_id "apK9MiJcY4fy7tP-rU0C0QAAAow"]
[Sat Aug 29 05:06:26.036289 2026] [core:error] [pid 1017536:tid 1017641] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.036313 2026] [core:error] [pid 1017536:tid 1017641] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.037169 2026] [security2:error] [pid 1017536:tid 1017778] [client 20.196.209.81:11537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/1p.php"] [unique_id "apK9MiJcY4fy7tP-rU0C0wAAAoQ"]
[Sat Aug 29 05:06:26.055552 2026] [security2:error] [pid 1017536:tid 1017736] [client 20.104.18.15:36847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/wp-content/mod/adminfuns.php"] [unique_id "apK9MiJcY4fy7tP-rU0C1AAAAlo"]
[Sat Aug 29 05:06:26.065704 2026] [security2:error] [pid 1018003:tid 1018226] [client 20.151.200.44:64400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/inject.php"] [unique_id "apK9MjAh5Y1i2tUxg4H16gAABgM"]
[Sat Aug 29 05:06:26.070378 2026] [security2:error] [pid 1017536:tid 1017770] [client 20.104.18.15:23397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/wp-admin/w.php"] [unique_id "apK9MiJcY4fy7tP-rU0C1QAAAnw"]
[Sat Aug 29 05:06:26.079304 2026] [security2:error] [pid 1017536:tid 1017743] [client 158.23.147.79:48342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/dropdown.php"] [unique_id "apK9MiJcY4fy7tP-rU0C1gAAAmE"]
[Sat Aug 29 05:06:26.080230 2026] [security2:error] [pid 1018003:tid 1018194] [client 20.197.61.180:5702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-content/languages/pk.php"] [unique_id "apK9MjAh5Y1i2tUxg4H16wAABeM"]
[Sat Aug 29 05:06:26.080325 2026] [security2:error] [pid 1017536:tid 1017761] [client 20.104.49.130:55133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.danesquality.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK9MiJcY4fy7tP-rU0C1wAAAnM"]
[Sat Aug 29 05:06:26.087174 2026] [security2:error] [pid 1017536:tid 1017752] [client 52.139.37.240:15285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/abc.php"] [unique_id "apK9MiJcY4fy7tP-rU0C2AAAAmo"]
[Sat Aug 29 05:06:26.090233 2026] [security2:error] [pid 1017536:tid 1017773] [client 20.104.18.15:13213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/gos.php"] [unique_id "apK9MiJcY4fy7tP-rU0C2gAAAn8"]
[Sat Aug 29 05:06:26.106582 2026] [security2:error] [pid 1018003:tid 1018230] [client 20.104.18.15:7098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/ta.php"] [unique_id "apK9MjAh5Y1i2tUxg4H18AAABgY"]
[Sat Aug 29 05:06:26.112955 2026] [core:error] [pid 1017536:tid 1017654] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.112972 2026] [core:error] [pid 1017536:tid 1017654] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.118778 2026] [security2:error] [pid 1018003:tid 1018213] [client 20.220.204.93:64939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/click.php"] [unique_id "apK9MjAh5Y1i2tUxg4H18QAABfY"]
[Sat Aug 29 05:06:26.122585 2026] [core:error] [pid 1017536:tid 1017636] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.122604 2026] [core:error] [pid 1017536:tid 1017636] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.129970 2026] [security2:error] [pid 1017536:tid 1017734] [client 4.205.62.107:22346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/aws_credentials.php"] [unique_id "apK9MiJcY4fy7tP-rU0C4AAAAlg"]
[Sat Aug 29 05:06:26.136970 2026] [security2:error] [pid 1017536:tid 1017673] [client 20.104.18.15:36610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/bulet.php"] [unique_id "apK9MiJcY4fy7tP-rU0C5wAAAhs"]
[Sat Aug 29 05:06:26.137002 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.48.250.41:25418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9MiJcY4fy7tP-rU0C5gAAAnk"]
[Sat Aug 29 05:06:26.138998 2026] [core:error] [pid 1017536:tid 1017576] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.139014 2026] [core:error] [pid 1017536:tid 1017576] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.141269 2026] [security2:error] [pid 1017536:tid 1017617] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/service/.env"] [unique_id "apK9MiJcY4fy7tP-rU0C6AACQlA"]
[Sat Aug 29 05:06:26.142864 2026] [security2:error] [pid 1017536:tid 1017749] [client 68.155.159.216:12216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-admin/css/index.php"] [unique_id "apK9MiJcY4fy7tP-rU0C7AAAAmc"]
[Sat Aug 29 05:06:26.144708 2026] [security2:error] [pid 1017536:tid 1017539] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/services/.env"] [unique_id "apK9MiJcY4fy7tP-rU0C6gACQgI"]
[Sat Aug 29 05:06:26.148082 2026] [security2:error] [pid 1018003:tid 1018177] [client 20.220.204.93:59132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/fetch.php"] [unique_id "apK9MjAh5Y1i2tUxg4H19QAABdI"]
[Sat Aug 29 05:06:26.148858 2026] [core:error] [pid 1017536:tid 1017632] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.148873 2026] [core:error] [pid 1017536:tid 1017632] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.151844 2026] [security2:error] [pid 1018003:tid 1018187] [client 4.205.62.107:53359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/wo.php"] [unique_id "apK9MjAh5Y1i2tUxg4H19gAABdw"]
[Sat Aug 29 05:06:26.156647 2026] [security2:error] [pid 1017536:tid 1017710] [client 20.104.18.15:8012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/wnnjpsby.php"] [unique_id "apK9MiJcY4fy7tP-rU0C9wAAAkA"]
[Sat Aug 29 05:06:26.157231 2026] [security2:error] [pid 1018003:tid 1018200] [client 168.107.94.195:54898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9MjAh5Y1i2tUxg4H1-AAABek"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:26.177432 2026] [core:error] [pid 1017536:tid 1017691] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.177448 2026] [core:error] [pid 1017536:tid 1017691] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.181795 2026] [core:error] [pid 1018003:tid 1018262] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.181811 2026] [core:error] [pid 1018003:tid 1018262] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.188283 2026] [core:error] [pid 1017536:tid 1017686] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.188304 2026] [core:error] [pid 1017536:tid 1017686] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.188964 2026] [security2:error] [pid 1017536:tid 1017594] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/shared/.env"] [unique_id "apK9MiJcY4fy7tP-rU0C-gACQjk"]
[Sat Aug 29 05:06:26.189642 2026] [security2:error] [pid 1017536:tid 1017751] [client 20.104.49.130:43603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/1xmomo.php"] [unique_id "apK9MiJcY4fy7tP-rU0C-wAAAmk"]
[Sat Aug 29 05:06:26.206677 2026] [core:error] [pid 1018003:tid 1018189] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.206699 2026] [core:error] [pid 1018003:tid 1018189] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.207898 2026] [core:error] [pid 1017536:tid 1017731] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.207918 2026] [core:error] [pid 1017536:tid 1017731] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.208556 2026] [core:error] [pid 1017536:tid 1017733] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.208573 2026] [core:error] [pid 1017536:tid 1017733] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.209693 2026] [core:error] [pid 1017536:tid 1017709] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.209709 2026] [core:error] [pid 1017536:tid 1017709] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.210474 2026] [core:error] [pid 1017536:tid 1017705] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.210489 2026] [core:error] [pid 1017536:tid 1017705] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.211057 2026] [security2:error] [pid 1018003:tid 1018266] [client 20.104.18.15:23445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/wp-content/k.php"] [unique_id "apK9MjAh5Y1i2tUxg4H1_wAABio"]
[Sat Aug 29 05:06:26.212193 2026] [core:error] [pid 1018003:tid 1018250] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.212205 2026] [core:error] [pid 1018003:tid 1018250] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.228920 2026] [security2:error] [pid 1017536:tid 1017748] [client 20.151.200.44:64199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/X7T6.php"] [unique_id "apK9MiJcY4fy7tP-rU0DAAAAAmY"]
[Sat Aug 29 05:06:26.233305 2026] [security2:error] [pid 1017536:tid 1017743] [client 20.104.18.15:13146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/132.php"] [unique_id "apK9MiJcY4fy7tP-rU0DAQAAAmE"]
[Sat Aug 29 05:06:26.235058 2026] [security2:error] [pid 1018003:tid 1018157] [client 158.23.147.79:25481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/admin.php"] [unique_id "apK9MjAh5Y1i2tUxg4H2BQAABb4"]
[Sat Aug 29 05:06:26.235494 2026] [security2:error] [pid 1018003:tid 1018192] [client 20.104.18.15:36745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/sao.php"] [unique_id "apK9MjAh5Y1i2tUxg4H2BgAABeE"]
[Sat Aug 29 05:06:26.235953 2026] [security2:error] [pid 1018003:tid 1018270] [client 20.104.18.15:7149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/bo.php"] [unique_id "apK9MjAh5Y1i2tUxg4H2BwAABi4"]
[Sat Aug 29 05:06:26.264314 2026] [security2:error] [pid 1017536:tid 1017629] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/shop/.env"] [unique_id "apK9MiJcY4fy7tP-rU0DAgACf1w"]
[Sat Aug 29 05:06:26.276509 2026] [security2:error] [pid 1018003:tid 1018231] [client 4.205.62.107:56063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/log.php"] [unique_id "apK9MjAh5Y1i2tUxg4H2CQAABgc"]
[Sat Aug 29 05:06:26.277523 2026] [security2:error] [pid 1017536:tid 1017781] [client 20.63.81.20:60428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/or.php"] [unique_id "apK9MiJcY4fy7tP-rU0DBgAAAoc"]
[Sat Aug 29 05:06:26.282576 2026] [security2:error] [pid 1018003:tid 1018216] [client 20.220.204.93:59105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/vx.php"] [unique_id "apK9MjAh5Y1i2tUxg4H2CwAABfk"]
[Sat Aug 29 05:06:26.284245 2026] [security2:error] [pid 1017536:tid 1017734] [client 20.104.18.15:8172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/gigi.php"] [unique_id "apK9MiJcY4fy7tP-rU0DCAAAAlg"]
[Sat Aug 29 05:06:26.284276 2026] [security2:error] [pid 1017536:tid 1017778] [client 52.139.37.240:14932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/c1.php"] [unique_id "apK9MiJcY4fy7tP-rU0DBwAAAoQ"]
[Sat Aug 29 05:06:26.284974 2026] [security2:error] [pid 1017536:tid 1017793] [client 20.151.200.44:47319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/quoys.php"] [unique_id "apK9MiJcY4fy7tP-rU0DCQAAApM"]
[Sat Aug 29 05:06:26.306962 2026] [core:error] [pid 1018003:tid 1018252] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.306984 2026] [core:error] [pid 1018003:tid 1018252] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.309088 2026] [security2:error] [pid 1018003:tid 1018271] [client 20.104.18.15:36768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/av.php"] [unique_id "apK9MjAh5Y1i2tUxg4H2EAAABi8"]
[Sat Aug 29 05:06:26.318273 2026] [core:error] [pid 1018003:tid 1018222] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.318290 2026] [core:error] [pid 1018003:tid 1018222] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.320590 2026] [core:error] [pid 1018003:tid 1018268] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.320607 2026] [core:error] [pid 1018003:tid 1018268] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.324881 2026] [core:error] [pid 1017536:tid 1017717] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.324897 2026] [core:error] [pid 1017536:tid 1017717] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.343924 2026] [security2:error] [pid 1018003:tid 1018162] [client 20.48.250.41:25346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/ff1.php"] [unique_id "apK9MjAh5Y1i2tUxg4H2FgAABcM"]
[Sat Aug 29 05:06:26.347567 2026] [security2:error] [pid 1018003:tid 1018206] [client 20.104.18.15:23519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/os.php"] [unique_id "apK9MjAh5Y1i2tUxg4H2FwAABe8"]
[Sat Aug 29 05:06:26.361274 2026] [security2:error] [pid 1018003:tid 1018218] [client 40.83.93.50:1605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-admin/panel.php"] [unique_id "apK9MjAh5Y1i2tUxg4H2GgAABfs"]
[Sat Aug 29 05:06:26.366063 2026] [core:error] [pid 1018003:tid 1018174] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.366084 2026] [core:error] [pid 1018003:tid 1018174] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.367827 2026] [security2:error] [pid 1017536:tid 1017780] [client 20.104.18.15:6999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/44.php"] [unique_id "apK9MiJcY4fy7tP-rU0DGAAAAoY"]
[Sat Aug 29 05:06:26.375879 2026] [security2:error] [pid 1017536:tid 1017704] [client 68.155.159.216:9243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/makeasmtp.php"] [unique_id "apK9MiJcY4fy7tP-rU0DGQAAAjo"]
[Sat Aug 29 05:06:26.377328 2026] [security2:error] [pid 1017536:tid 1017674] [client 136.107.231.130:5866] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/@fs/home/ubuntu/.env"] [unique_id "apK9MiJcY4fy7tP-rU0DGgAAAhw"]
[Sat Aug 29 05:06:26.380718 2026] [security2:error] [pid 1017536:tid 1017696] [client 20.104.18.15:13256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/v22.php"] [unique_id "apK9MiJcY4fy7tP-rU0DGwAAAjI"]
[Sat Aug 29 05:06:26.384005 2026] [security2:error] [pid 1017536:tid 1017542] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/src/.env"] [unique_id "apK9MiJcY4fy7tP-rU0DHAACHQU"]
[Sat Aug 29 05:06:26.384694 2026] [security2:error] [pid 1017536:tid 1017709] [client 20.104.49.130:52513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/worksec.php"] [unique_id "apK9MiJcY4fy7tP-rU0DHgAAAj8"]
[Sat Aug 29 05:06:26.385544 2026] [core:error] [pid 1017536:tid 1017544] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.385554 2026] [core:error] [pid 1017536:tid 1017544] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.388950 2026] [core:error] [pid 1017536:tid 1017607] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.388963 2026] [core:error] [pid 1017536:tid 1017607] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.394536 2026] [core:error] [pid 1017536:tid 1017579] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.394550 2026] [core:error] [pid 1017536:tid 1017579] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.396287 2026] [core:error] [pid 1017536:tid 1017662] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.396298 2026] [core:error] [pid 1017536:tid 1017662] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.396465 2026] [core:error] [pid 1017536:tid 1017650] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.396479 2026] [core:error] [pid 1017536:tid 1017650] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.397125 2026] [core:error] [pid 1017536:tid 1017581] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.397135 2026] [core:error] [pid 1017536:tid 1017581] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.406312 2026] [security2:error] [pid 1017536:tid 1017705] [client 20.104.18.15:36748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/dapa.php"] [unique_id "apK9MiJcY4fy7tP-rU0DJQAAAjs"]
[Sat Aug 29 05:06:26.408258 2026] [security2:error] [pid 1017536:tid 1017719] [client 136.107.231.130:5808] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/@fs/var/www/.env"] [unique_id "apK9MiJcY4fy7tP-rU0DJgAAAkk"]
[Sat Aug 29 05:06:26.410178 2026] [security2:error] [pid 1017536:tid 1017681] [client 20.63.81.20:56928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/ile56.php"] [unique_id "apK9MiJcY4fy7tP-rU0DKQAAAiM"]
[Sat Aug 29 05:06:26.410818 2026] [security2:error] [pid 1018003:tid 1018277] [client 136.107.231.130:5910] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/@fs/var/www/html/.env"] [unique_id "apK9MjAh5Y1i2tUxg4H2JwAABjU"]
[Sat Aug 29 05:06:26.413967 2026] [security2:error] [pid 1018003:tid 1018238] [client 136.107.231.130:5918] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/@fs/usr/src/app/.env"] [unique_id "apK9MjAh5Y1i2tUxg4H2KgAABg4"]
[Sat Aug 29 05:06:26.414595 2026] [core:error] [pid 1017536:tid 1017635] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.414610 2026] [core:error] [pid 1017536:tid 1017635] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.418672 2026] [security2:error] [pid 1018003:tid 1018258] [client 20.63.81.20:46853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/zoo1.php"] [unique_id "apK9MjAh5Y1i2tUxg4H2LQAABiI"]
[Sat Aug 29 05:06:26.421118 2026] [core:error] [pid 1017536:tid 1017655] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.421132 2026] [core:error] [pid 1017536:tid 1017655] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.422145 2026] [core:error] [pid 1017536:tid 1017606] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.422158 2026] [core:error] [pid 1017536:tid 1017606] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.422937 2026] [security2:error] [pid 1018003:tid 1018167] [client 20.151.200.44:65043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/mga.php"] [unique_id "apK9MjAh5Y1i2tUxg4H2LwAABcg"]
[Sat Aug 29 05:06:26.432104 2026] [security2:error] [pid 1017536:tid 1017695] [client 20.151.200.44:47337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/vbbn.php"] [unique_id "apK9MiJcY4fy7tP-rU0DLgAAAjE"]
[Sat Aug 29 05:06:26.446778 2026] [security2:error] [pid 1018003:tid 1018169] [client 20.104.18.15:8120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/info.php/new.php"] [unique_id "apK9MjAh5Y1i2tUxg4H2MwAABco"]
[Sat Aug 29 05:06:26.456925 2026] [core:error] [pid 1017536:tid 1017707] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.456943 2026] [core:error] [pid 1017536:tid 1017707] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.458434 2026] [security2:error] [pid 1017536:tid 1017673] [client 20.52.41.200:1201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/zoom1.php"] [unique_id "apK9MiJcY4fy7tP-rU0DMwAAAhs"]
[Sat Aug 29 05:06:26.463077 2026] [security2:error] [pid 1017536:tid 1017773] [client 20.151.200.44:65498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/see.php"] [unique_id "apK9MiJcY4fy7tP-rU0DNQAAAn8"]
[Sat Aug 29 05:06:26.468185 2026] [core:error] [pid 1017536:tid 1017602] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.468204 2026] [core:error] [pid 1017536:tid 1017602] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.469665 2026] [security2:error] [pid 1018003:tid 1018180] [client 20.196.209.81:4475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/Njima.php"] [unique_id "apK9MjAh5Y1i2tUxg4H2NQAABdU"]
[Sat Aug 29 05:06:26.472347 2026] [security2:error] [pid 1017536:tid 1017749] [client 20.104.18.15:36779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/images.php"] [unique_id "apK9MiJcY4fy7tP-rU0DNwAAAmc"]
[Sat Aug 29 05:06:26.472918 2026] [security2:error] [pid 1018003:tid 1018166] [client 158.158.54.35:2822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/filemanager.php"] [unique_id "apK9MjAh5Y1i2tUxg4H2NgAABcc"]
[Sat Aug 29 05:06:26.480632 2026] [security2:error] [pid 1017536:tid 1017689] [client 20.104.49.130:29995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/x1da.php"] [unique_id "apK9MiJcY4fy7tP-rU0DOAAAAis"]
[Sat Aug 29 05:06:26.480645 2026] [security2:error] [pid 1017536:tid 1017747] [client 20.104.18.15:23520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/htio.php"] [unique_id "apK9MiJcY4fy7tP-rU0DOQAAAmU"]
[Sat Aug 29 05:06:26.484301 2026] [security2:error] [pid 1017536:tid 1017717] [client 20.220.204.93:59066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/global.php"] [unique_id "apK9MiJcY4fy7tP-rU0DOgAAAkc"]
[Sat Aug 29 05:06:26.490669 2026] [security2:error] [pid 1017536:tid 1017746] [client 20.48.250.41:25443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/t.php"] [unique_id "apK9MiJcY4fy7tP-rU0DOwAAAmQ"]
[Sat Aug 29 05:06:26.507944 2026] [security2:error] [pid 1017536:tid 1017712] [client 52.139.37.240:15258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/index.php/feed/atom/"] [unique_id "apK9MiJcY4fy7tP-rU0DPAAAAkI"]
[Sat Aug 29 05:06:26.522520 2026] [security2:error] [pid 1017536:tid 1017616] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/srv/.env"] [unique_id "apK9MiJcY4fy7tP-rU0DPgACXk8"]
[Sat Aug 29 05:06:26.522634 2026] [security2:error] [pid 1017536:tid 1017639] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/stage/.env"] [unique_id "apK9MiJcY4fy7tP-rU0DPQACXmY"]
[Sat Aug 29 05:06:26.527206 2026] [security2:error] [pid 1018003:tid 1018194] [client 20.104.18.15:6939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/h2.php"] [unique_id "apK9MjAh5Y1i2tUxg4H2OgAABeM"]
[Sat Aug 29 05:06:26.539746 2026] [security2:error] [pid 1017536:tid 1017724] [client 168.107.94.195:55265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9MiJcY4fy7tP-rU0DPwAAAk4"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:26.541667 2026] [security2:error] [pid 1017536:tid 1017776] [client 20.220.204.93:64979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/ms.php"] [unique_id "apK9MiJcY4fy7tP-rU0DQAAAAoI"]
[Sat Aug 29 05:06:26.542631 2026] [security2:error] [pid 1017536:tid 1017733] [client 20.63.81.20:60541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/emmh.php"] [unique_id "apK9MiJcY4fy7tP-rU0DQQAAAlc"]
[Sat Aug 29 05:06:26.554556 2026] [security2:error] [pid 1017536:tid 1017709] [client 68.155.159.216:50273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-includes/index.php"] [unique_id "apK9MiJcY4fy7tP-rU0DQgAAAj8"]
[Sat Aug 29 05:06:26.561998 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.104.18.15:36778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/wp-content/l.php"] [unique_id "apK9MiJcY4fy7tP-rU0DQwAAAh0"]
[Sat Aug 29 05:06:26.572284 2026] [security2:error] [pid 1017536:tid 1017573] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/staging/.env"] [unique_id "apK9MiJcY4fy7tP-rU0DRQACGiQ"]
[Sat Aug 29 05:06:26.579304 2026] [security2:error] [pid 1018003:tid 1018226] [client 5.161.117.52:56050] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "ridetime.com"] [uri "/"] [unique_id "apK9MjAh5Y1i2tUxg4H2QAAABgM"], referer: https://ridetime.com
[Sat Aug 29 05:06:26.590475 2026] [security2:error] [pid 1017536:tid 1017681] [client 20.104.18.15:13121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/wp-activate.php"] [unique_id "apK9MiJcY4fy7tP-rU0DSwAAAiM"]
[Sat Aug 29 05:06:26.592335 2026] [core:error] [pid 1017536:tid 1017561] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.592350 2026] [core:error] [pid 1017536:tid 1017561] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.593442 2026] [core:error] [pid 1017536:tid 1017590] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.593461 2026] [core:error] [pid 1017536:tid 1017590] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.594620 2026] [security2:error] [pid 1017536:tid 1017582] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/stg/.env"] [unique_id "apK9MiJcY4fy7tP-rU0DUwACiy0"]
[Sat Aug 29 05:06:26.595105 2026] [security2:error] [pid 1017536:tid 1017737] [client 20.63.81.20:44484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/radio.php"] [unique_id "apK9MiJcY4fy7tP-rU0DVAAAAls"]
[Sat Aug 29 05:06:26.597150 2026] [core:error] [pid 1017536:tid 1017589] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.597165 2026] [core:error] [pid 1017536:tid 1017589] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.597650 2026] [core:error] [pid 1017536:tid 1017561] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.597661 2026] [core:error] [pid 1017536:tid 1017561] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.598320 2026] [core:error] [pid 1017536:tid 1017588] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.598331 2026] [core:error] [pid 1017536:tid 1017588] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.598631 2026] [core:error] [pid 1017536:tid 1017540] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.598645 2026] [core:error] [pid 1017536:tid 1017540] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.599076 2026] [core:error] [pid 1017536:tid 1017653] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.599085 2026] [core:error] [pid 1017536:tid 1017653] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.599807 2026] [core:error] [pid 1017536:tid 1017601] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.599818 2026] [core:error] [pid 1017536:tid 1017601] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.612939 2026] [security2:error] [pid 1018003:tid 1018213] [client 68.155.159.216:49185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK9MjAh5Y1i2tUxg4H2RAAABfY"]
[Sat Aug 29 05:06:26.613461 2026] [autoindex:error] [pid 1017536:tid 1017719] [client 20.104.18.15:0] AH01276: Cannot serve directory /home1/abmaccom/public_html/website_6571184f/wp-content/uploads/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:06:26.617032 2026] [security2:error] [pid 1018003:tid 1018276] [client 20.104.18.15:36710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/ops.php"] [unique_id "apK9MjAh5Y1i2tUxg4H2RgAABjQ"]
[Sat Aug 29 05:06:26.627958 2026] [core:error] [pid 1018003:tid 1018177] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.627976 2026] [core:error] [pid 1018003:tid 1018177] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.628438 2026] [security2:error] [pid 1018003:tid 1018202] [client 20.151.200.44:65032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/inwp.php"] [unique_id "apK9MjAh5Y1i2tUxg4H2SgAABes"]
[Sat Aug 29 05:06:26.629492 2026] [core:error] [pid 1018003:tid 1018200] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.629510 2026] [core:error] [pid 1018003:tid 1018200] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.642899 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.220.204.93:59029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/fs.php"] [unique_id "apK9MiJcY4fy7tP-rU0DWQAAAlY"]
[Sat Aug 29 05:06:26.651815 2026] [security2:error] [pid 1017536:tid 1017680] [client 20.104.18.15:23457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/dev.php"] [unique_id "apK9MiJcY4fy7tP-rU0DWwAAAiI"]
[Sat Aug 29 05:06:26.652602 2026] [security2:error] [pid 1017536:tid 1017781] [client 20.151.200.44:64886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/horeg.php"] [unique_id "apK9MiJcY4fy7tP-rU0DXAAAAoc"]
[Sat Aug 29 05:06:26.667999 2026] [security2:error] [pid 1017536:tid 1017793] [client 20.104.18.15:6978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/wp-content/mod/adminfuns.php"] [unique_id "apK9MiJcY4fy7tP-rU0DXQAAApM"]
[Sat Aug 29 05:06:26.669967 2026] [security2:error] [pid 1018003:tid 1018249] [client 20.48.250.41:25519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/erty.php"] [unique_id "apK9MjAh5Y1i2tUxg4H2UAAABhk"]
[Sat Aug 29 05:06:26.677268 2026] [security2:error] [pid 1018003:tid 1018152] [client 68.155.159.216:24476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-content/radio.php"] [unique_id "apK9MjAh5Y1i2tUxg4H2VQAABbk"]
[Sat Aug 29 05:06:26.678142 2026] [security2:error] [pid 1018003:tid 1018234] [client 57.141.14.105:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/cart/"] [unique_id "apK9MjAh5Y1i2tUxg4H2UwAABgo"]
[Sat Aug 29 05:06:26.683714 2026] [security2:error] [pid 1018003:tid 1018259] [client 20.220.204.93:64315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/zxekqlxb.php"] [unique_id "apK9MjAh5Y1i2tUxg4H2VgAABiM"]
[Sat Aug 29 05:06:26.685115 2026] [security2:error] [pid 1018003:tid 1018219] [client 20.63.81.20:60438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/em.php"] [unique_id "apK9MjAh5Y1i2tUxg4H2VwAABfw"]
[Sat Aug 29 05:06:26.697407 2026] [security2:error] [pid 1018003:tid 1018270] [client 20.104.18.15:8156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/w.php"] [unique_id "apK9MjAh5Y1i2tUxg4H2WgAABi4"]
[Sat Aug 29 05:06:26.698282 2026] [security2:error] [pid 1017536:tid 1017603] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/stripe/.env"] [unique_id "apK9MiJcY4fy7tP-rU0DXgACfEI"]
[Sat Aug 29 05:06:26.707456 2026] [core:error] [pid 1017536:tid 1017541] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.707474 2026] [core:error] [pid 1017536:tid 1017541] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.712031 2026] [security2:error] [pid 1017536:tid 1017734] [client 52.139.37.240:14493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/root.php"] [unique_id "apK9MiJcY4fy7tP-rU0DYgAAAlg"]
[Sat Aug 29 05:06:26.718076 2026] [security2:error] [pid 1017536:tid 1017712] [client 68.155.159.216:30602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9MiJcY4fy7tP-rU0DZgAAAkI"]
[Sat Aug 29 05:06:26.718109 2026] [security2:error] [pid 1017536:tid 1017691] [client 20.104.18.15:36765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/wp-admin/w.php"] [unique_id "apK9MiJcY4fy7tP-rU0DZQAAAi0"]
[Sat Aug 29 05:06:26.741291 2026] [security2:error] [pid 1017536:tid 1017710] [client 20.63.81.20:46865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/one.php"] [unique_id "apK9MiJcY4fy7tP-rU0DaQAAAkA"]
[Sat Aug 29 05:06:26.744038 2026] [core:error] [pid 1017536:tid 1017761] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.744060 2026] [core:error] [pid 1017536:tid 1017761] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.745677 2026] [core:error] [pid 1017536:tid 1017751] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.745694 2026] [core:error] [pid 1017536:tid 1017751] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.748516 2026] [security2:error] [pid 1017536:tid 1017550] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/terraform.tfstate.backup"] [unique_id "apK9MiJcY4fy7tP-rU0DbAACKw0"]
[Sat Aug 29 05:06:26.753137 2026] [security2:error] [pid 1017536:tid 1017551] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/test.php"] [unique_id "apK9MiJcY4fy7tP-rU0DcgACKw4"]
[Sat Aug 29 05:06:26.753946 2026] [security2:error] [pid 1017536:tid 1017733] [client 20.104.18.15:13073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/wp-trackback.php"] [unique_id "apK9MiJcY4fy7tP-rU0DdQAAAlc"]
[Sat Aug 29 05:06:26.755914 2026] [core:error] [pid 1017536:tid 1017563] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.755929 2026] [core:error] [pid 1017536:tid 1017563] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.759930 2026] [security2:error] [pid 1017536:tid 1017571] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/test/.env"] [unique_id "apK9MiJcY4fy7tP-rU0DeQACKyI"]
[Sat Aug 29 05:06:26.774311 2026] [security2:error] [pid 1017536:tid 1017790] [client 68.155.159.216:65063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9MiJcY4fy7tP-rU0DfAAAApA"]
[Sat Aug 29 05:06:26.776432 2026] [security2:error] [pid 1017536:tid 1017747] [client 5.161.117.52:56066] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "ridetime.com"] [uri "/index.html"] [unique_id "apK9MiJcY4fy7tP-rU0DewAAAmU"], referer: https://ridetime.com
[Sat Aug 29 05:06:26.776799 2026] [security2:error] [pid 1017536:tid 1017678] [client 20.104.18.15:36673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/coffexium.php"] [unique_id "apK9MiJcY4fy7tP-rU0DfQAAAiA"]
[Sat Aug 29 05:06:26.777597 2026] [core:error] [pid 1018003:tid 1018252] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.777614 2026] [core:error] [pid 1018003:tid 1018252] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.779175 2026] [security2:error] [pid 1017536:tid 1017704] [client 20.197.61.180:16335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bestcharlottecosmeticdentists.com"] [uri "/wp-content/languages/plugins/about.php"] [unique_id "apK9MiJcY4fy7tP-rU0DgAAAAjo"]
[Sat Aug 29 05:06:26.780417 2026] [core:error] [pid 1018003:tid 1018268] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.780434 2026] [core:error] [pid 1018003:tid 1018268] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.782107 2026] [core:error] [pid 1017536:tid 1017753] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.782124 2026] [core:error] [pid 1017536:tid 1017753] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.782501 2026] [core:error] [pid 1017536:tid 1017745] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.782515 2026] [core:error] [pid 1017536:tid 1017745] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.782524 2026] [core:error] [pid 1018003:tid 1018217] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.782532 2026] [core:error] [pid 1018003:tid 1018217] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.787790 2026] [security2:error] [pid 1017536:tid 1017707] [client 20.220.204.93:59126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/ioxi.php"] [unique_id "apK9MiJcY4fy7tP-rU0DhAAAAj0"]
[Sat Aug 29 05:06:26.790850 2026] [core:error] [pid 1017536:tid 1017736] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.790866 2026] [core:error] [pid 1017536:tid 1017736] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.793883 2026] [security2:error] [pid 1017536:tid 1017695] [client 20.104.18.15:23494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/gos.php"] [unique_id "apK9MiJcY4fy7tP-rU0DhgAAAjE"]
[Sat Aug 29 05:06:26.800895 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.104.18.15:6935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/sao.php"] [unique_id "apK9MiJcY4fy7tP-rU0DhwAAAlY"]
[Sat Aug 29 05:06:26.802777 2026] [security2:error] [pid 1017536:tid 1017680] [client 20.151.200.44:64964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/ad1.php"] [unique_id "apK9MiJcY4fy7tP-rU0DiAAAAiI"]
[Sat Aug 29 05:06:26.812888 2026] [security2:error] [pid 1017536:tid 1017687] [client 68.155.159.216:51411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/mah.php"] [unique_id "apK9MiJcY4fy7tP-rU0DigAAAik"]
[Sat Aug 29 05:06:26.816258 2026] [core:error] [pid 1017536:tid 1017752] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.816281 2026] [core:error] [pid 1017536:tid 1017752] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.816309 2026] [security2:error] [pid 1018003:tid 1018162] [client 20.151.200.44:47415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/rfi.php"] [unique_id "apK9MjAh5Y1i2tUxg4H2agAABcM"]
[Sat Aug 29 05:06:26.818472 2026] [core:error] [pid 1017536:tid 1017793] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.818487 2026] [core:error] [pid 1017536:tid 1017793] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.821526 2026] [security2:error] [pid 1017536:tid 1017706] [client 20.63.81.20:56861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/dvve.php"] [unique_id "apK9MiJcY4fy7tP-rU0DjQAAAjw"]
[Sat Aug 29 05:06:26.821782 2026] [security2:error] [pid 1017536:tid 1017770] [client 20.48.250.41:25583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/0x.php"] [unique_id "apK9MiJcY4fy7tP-rU0DjgAAAnw"]
[Sat Aug 29 05:06:26.832313 2026] [security2:error] [pid 1017536:tid 1017769] [client 40.83.93.50:1740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-admin/pk.php"] [unique_id "apK9MiJcY4fy7tP-rU0DkAAAAns"]
[Sat Aug 29 05:06:26.850562 2026] [security2:error] [pid 1018003:tid 1018183] [client 87.219.197.128:53709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK9MjAh5Y1i2tUxg4H2bQAABdg"]
[Sat Aug 29 05:06:26.850648 2026] [security2:error] [pid 1018003:tid 1018183] [client 87.219.197.128:53709] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK9MjAh5Y1i2tUxg4H2bQAABdg"]
[Sat Aug 29 05:06:26.860039 2026] [security2:error] [pid 1017536:tid 1017557] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/user/.env"] [unique_id "apK9MiJcY4fy7tP-rU0DkQACaRQ"]
[Sat Aug 29 05:06:26.871027 2026] [security2:error] [pid 1017536:tid 1017733] [client 158.23.147.79:30653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9MiJcY4fy7tP-rU0DlAAAAlc"]
[Sat Aug 29 05:06:26.873560 2026] [security2:error] [pid 1017536:tid 1017672] [client 158.23.147.79:26503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK9MiJcY4fy7tP-rU0DlgAAAho"]
[Sat Aug 29 05:06:26.881246 2026] [security2:error] [pid 1017536:tid 1017675] [client 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK9MiJcY4fy7tP-rU0DZwACHTo"]
[Sat Aug 29 05:06:26.886683 2026] [security2:error] [pid 1018003:tid 1018240] [client 4.205.62.107:21570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/localconf.php"] [unique_id "apK9MjAh5Y1i2tUxg4H2cgAABhA"]
[Sat Aug 29 05:06:26.895818 2026] [security2:error] [pid 1017536:tid 1017749] [client 20.104.18.15:36774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/wp-content/k.php"] [unique_id "apK9MiJcY4fy7tP-rU0DlwAAAmc"]
[Sat Aug 29 05:06:26.901037 2026] [security2:error] [pid 1017536:tid 1017549] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/v1/.env"] [unique_id "apK9MiJcY4fy7tP-rU0DmQACjgw"]
[Sat Aug 29 05:06:26.901038 2026] [security2:error] [pid 1017536:tid 1017600] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/v2/.env"] [unique_id "apK9MiJcY4fy7tP-rU0DmwACjj8"]
[Sat Aug 29 05:06:26.901880 2026] [core:error] [pid 1017536:tid 1017781] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.901901 2026] [core:error] [pid 1017536:tid 1017781] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.902945 2026] [security2:error] [pid 1017536:tid 1017578] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/v3/.env"] [unique_id "apK9MiJcY4fy7tP-rU0DnAACjik"]
[Sat Aug 29 05:06:26.904649 2026] [security2:error] [pid 1017536:tid 1017674] [client 20.52.41.200:1747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/txets.php"] [unique_id "apK9MiJcY4fy7tP-rU0DnQAAAhw"]
[Sat Aug 29 05:06:26.908689 2026] [security2:error] [pid 1017536:tid 1017734] [client 20.220.204.93:64945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/init.php"] [unique_id "apK9MiJcY4fy7tP-rU0DoQAAAlg"]
[Sat Aug 29 05:06:26.911121 2026] [security2:error] [pid 1018003:tid 1018207] [client 52.139.37.240:14917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/shell.php"] [unique_id "apK9MjAh5Y1i2tUxg4H2dAAABfA"]
[Sat Aug 29 05:06:26.912462 2026] [security2:error] [pid 1018003:tid 1018180] [client 158.23.147.79:58056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-includes/plugins.php"] [unique_id "apK9MjAh5Y1i2tUxg4H2dQAABdU"]
[Sat Aug 29 05:06:26.919201 2026] [security2:error] [pid 1018003:tid 1018166] [client 20.151.200.44:64227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/basic.php"] [unique_id "apK9MjAh5Y1i2tUxg4H2dgAABcc"]
[Sat Aug 29 05:06:26.921183 2026] [security2:error] [pid 1017536:tid 1017683] [client 213.202.253.4:61512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aantec.com"] [uri "/wp-content/schallfuns.php"] [unique_id "apK9MiJcY4fy7tP-rU0DogAAAiU"], referer: www.google.com
[Sat Aug 29 05:06:26.921818 2026] [security2:error] [pid 1017536:tid 1017770] [client 168.107.94.195:55729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9MiJcY4fy7tP-rU0DowAAAnw"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:26.925757 2026] [security2:error] [pid 1017536:tid 1017689] [client 158.23.147.79:24389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/images/index.php"] [unique_id "apK9MiJcY4fy7tP-rU0DpQAAAis"]
[Sat Aug 29 05:06:26.926870 2026] [security2:error] [pid 1017536:tid 1017686] [client 20.104.18.15:13125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/pri.php"] [unique_id "apK9MiJcY4fy7tP-rU0DpgAAAig"]
[Sat Aug 29 05:06:26.930757 2026] [security2:error] [pid 1018003:tid 1018221] [client 158.158.54.35:2854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-content/themes/admin.php"] [unique_id "apK9MjAh5Y1i2tUxg4H2dwAABf4"]
[Sat Aug 29 05:06:26.933268 2026] [security2:error] [pid 1017536:tid 1017712] [client 20.104.18.15:6979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/dapa.php"] [unique_id "apK9MiJcY4fy7tP-rU0DpwAAAkI"]
[Sat Aug 29 05:06:26.947679 2026] [core:error] [pid 1017536:tid 1017777] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.947698 2026] [core:error] [pid 1017536:tid 1017777] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.947798 2026] [security2:error] [pid 1017536:tid 1017751] [client 20.104.18.15:36687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/BDKR28WP.php"] [unique_id "apK9MiJcY4fy7tP-rU0DsAAAAmk"]
[Sat Aug 29 05:06:26.948603 2026] [security2:error] [pid 1017536:tid 1017790] [client 4.205.62.107:22414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/05.php"] [unique_id "apK9MiJcY4fy7tP-rU0DsQAAApA"]
[Sat Aug 29 05:06:26.948802 2026] [security2:error] [pid 1017536:tid 1017778] [client 20.104.18.15:23542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/132.php"] [unique_id "apK9MiJcY4fy7tP-rU0DsgAAAoQ"]
[Sat Aug 29 05:06:26.949697 2026] [core:error] [pid 1017536:tid 1017570] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.949711 2026] [core:error] [pid 1017536:tid 1017570] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.949767 2026] [core:error] [pid 1017536:tid 1017627] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.949775 2026] [core:error] [pid 1017536:tid 1017627] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.962594 2026] [core:error] [pid 1017536:tid 1017776] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.962613 2026] [core:error] [pid 1017536:tid 1017776] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.962762 2026] [security2:error] [pid 1018003:tid 1018199] [client 158.23.147.79:61588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/file5.php"] [unique_id "apK9MjAh5Y1i2tUxg4H2eQAABeg"]
[Sat Aug 29 05:06:26.968618 2026] [core:error] [pid 1017536:tid 1017729] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.968636 2026] [core:error] [pid 1017536:tid 1017729] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.977712 2026] [security2:error] [pid 1017536:tid 1017694] [client 20.104.18.15:8139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/x.php"] [unique_id "apK9MiJcY4fy7tP-rU0DuwAAAjA"]
[Sat Aug 29 05:06:26.979033 2026] [core:error] [pid 1018003:tid 1018198] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.979063 2026] [core:error] [pid 1018003:tid 1018198] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.979842 2026] [core:error] [pid 1018003:tid 1018226] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.979856 2026] [core:error] [pid 1018003:tid 1018226] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.982036 2026] [core:error] [pid 1017536:tid 1017585] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.982050 2026] [core:error] [pid 1017536:tid 1017585] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.983154 2026] [core:error] [pid 1017536:tid 1017781] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.983169 2026] [core:error] [pid 1017536:tid 1017781] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:26.985231 2026] [security2:error] [pid 1017536:tid 1017723] [client 4.205.62.107:65456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/app_dev.php"] [unique_id "apK9MiJcY4fy7tP-rU0DvgAAAk0"]
[Sat Aug 29 05:06:26.985980 2026] [security2:error] [pid 1018003:tid 1018276] [client 20.48.250.41:25441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/66.php"] [unique_id "apK9MjAh5Y1i2tUxg4H2fgAABjQ"]
[Sat Aug 29 05:06:27.014128 2026] [cgid:error] [pid 1017536:tid 1017780] [client 34.7.40.70:62760] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:27.014401 2026] [cgid:error] [pid 1017536:tid 1017765] [client 34.7.40.70:62750] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:27.014465 2026] [cgid:error] [pid 1017536:tid 1017767] [client 34.7.40.70:62766] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:27.018115 2026] [security2:error] [pid 1017536:tid 1017737] [client 34.7.40.70:62790] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/api/graphql"] [unique_id "apK9MyJcY4fy7tP-rU0DxAAAAls"]
[Sat Aug 29 05:06:27.018619 2026] [cgid:error] [pid 1017536:tid 1017678] [client 34.7.40.70:62786] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:27.019408 2026] [cgid:error] [pid 1017536:tid 1017747] [client 34.7.40.70:62752] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:27.022060 2026] [cgid:error] [pid 1017536:tid 1017681] [client 34.7.40.70:62776] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:27.023734 2026] [cgid:error] [pid 1018003:tid 1018195] [client 34.7.40.70:62896] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:27.023791 2026] [cgid:error] [pid 1017536:tid 1017748] [client 34.7.40.70:62876] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:27.023817 2026] [cgid:error] [pid 1018003:tid 1018175] [client 34.7.40.70:62796] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:27.024172 2026] [cgid:error] [pid 1017536:tid 1017713] [client 34.7.40.70:62826] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:27.025352 2026] [security2:error] [pid 1017536:tid 1017748] [client 34.7.40.70:62876] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/404.shtml"] [unique_id "apK9MyJcY4fy7tP-rU0DyQAAAmY"]
[Sat Aug 29 05:06:27.025363 2026] [security2:error] [pid 1018003:tid 1018195] [client 34.7.40.70:62896] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/404.shtml"] [unique_id "apK9MzAh5Y1i2tUxg4H2gQAABeQ"]
[Sat Aug 29 05:06:27.025453 2026] [security2:error] [pid 1018003:tid 1018175] [client 34.7.40.70:62796] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/404.shtml"] [unique_id "apK9MzAh5Y1i2tUxg4H2ggAABdA"]
[Sat Aug 29 05:06:27.025745 2026] [cgid:error] [pid 1017536:tid 1017717] [client 34.7.40.70:62794] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:27.027437 2026] [cgid:error] [pid 1017536:tid 1017696] [client 34.7.40.70:62880] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:27.027517 2026] [cgid:error] [pid 1017536:tid 1017698] [client 34.7.40.70:62860] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:27.027608 2026] [cgid:error] [pid 1018003:tid 1018212] [client 34.7.40.70:62858] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:27.028050 2026] [cgid:error] [pid 1017536:tid 1017711] [client 34.7.40.70:62922] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:27.028587 2026] [cgid:error] [pid 1018003:tid 1018150] [client 34.7.40.70:62836] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:27.029192 2026] [security2:error] [pid 1017536:tid 1017743] [client 34.7.40.70:62900] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/.claude.json"] [unique_id "apK9MyJcY4fy7tP-rU0DzwAAAmE"]
[Sat Aug 29 05:06:27.029652 2026] [security2:error] [pid 1018003:tid 1018245] [client 20.151.200.44:65079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/1vbqo.php"] [unique_id "apK9MzAh5Y1i2tUxg4H2hgAABhU"]
[Sat Aug 29 05:06:27.030264 2026] [cgid:error] [pid 1018003:tid 1018246] [client 34.7.40.70:62810] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:27.030500 2026] [cgid:error] [pid 1017536:tid 1017753] [client 34.7.40.70:62994] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:27.030663 2026] [security2:error] [pid 1017536:tid 1017705] [client 34.7.40.70:62862] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/.openclaw/.env"] [unique_id "apK9MyJcY4fy7tP-rU0D0AAAAjs"]
[Sat Aug 29 05:06:27.030887 2026] [security2:error] [pid 1018003:tid 1018150] [client 158.23.147.79:35209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/makeasmtp.php"] [unique_id "apK9MzAh5Y1i2tUxg4H2iAAABbc"]
[Sat Aug 29 05:06:27.031760 2026] [security2:error] [pid 1018003:tid 1018188] [client 34.7.40.70:62850] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/.hermes/.env"] [unique_id "apK9MzAh5Y1i2tUxg4H2hwAABd0"]
[Sat Aug 29 05:06:27.032978 2026] [cgid:error] [pid 1017536:tid 1017673] [client 34.7.40.70:62944] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:27.033347 2026] [cgid:error] [pid 1017536:tid 1017724] [client 34.7.40.70:62928] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:27.034347 2026] [cgid:error] [pid 1017536:tid 1017707] [client 34.7.40.70:62978] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:27.034805 2026] [cgid:error] [pid 1017536:tid 1017669] [client 34.7.40.70:62968] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:27.034904 2026] [security2:error] [pid 1017536:tid 1017669] [client 34.7.40.70:62968] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/404.shtml"] [unique_id "apK9MyJcY4fy7tP-rU0D1AAAAhc"]
[Sat Aug 29 05:06:27.035804 2026] [cgid:error] [pid 1017536:tid 1017785] [client 34.7.40.70:62986] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:27.036173 2026] [cgid:error] [pid 1017536:tid 1017736] [client 34.7.40.70:62940] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:27.036234 2026] [cgid:error] [pid 1018003:tid 1018238] [client 34.7.40.70:62952] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:27.037465 2026] [cgid:error] [pid 1017536:tid 1017695] [client 34.7.40.70:62988] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:27.037713 2026] [cgid:error] [pid 1017536:tid 1017745] [client 34.7.40.70:62912] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:27.039588 2026] [cgid:error] [pid 1017536:tid 1017732] [client 34.7.40.70:62980] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:27.041447 2026] [security2:error] [pid 1017536:tid 1017777] [client 20.220.204.93:52289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/bootstrap.php"] [unique_id "apK9MyJcY4fy7tP-rU0D2wAAAoM"]
[Sat Aug 29 05:06:27.043092 2026] [security2:error] [pid 1018003:tid 1018266] [client 20.151.200.44:47307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/tajj.php"] [unique_id "apK9MzAh5Y1i2tUxg4H2igAABio"]
[Sat Aug 29 05:06:27.043907 2026] [core:error] [pid 1017536:tid 1017731] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.043923 2026] [core:error] [pid 1017536:tid 1017731] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.047215 2026] [security2:error] [pid 1018003:tid 1018261] [client 158.23.147.79:50055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/log-mama/function.php"] [unique_id "apK9MzAh5Y1i2tUxg4H2iwAABiU"]
[Sat Aug 29 05:06:27.053817 2026] [core:error] [pid 1017536:tid 1017621] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.053840 2026] [core:error] [pid 1017536:tid 1017621] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.055333 2026] [core:error] [pid 1017536:tid 1017626] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.055349 2026] [core:error] [pid 1017536:tid 1017626] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.057569 2026] [security2:error] [pid 1018003:tid 1018259] [client 20.104.18.15:13175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/wp_blog_footer.php"] [unique_id "apK9MzAh5Y1i2tUxg4H2jwAABiM"]
[Sat Aug 29 05:06:27.064327 2026] [security2:error] [pid 1018003:tid 1018219] [client 68.155.159.216:33768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/ws.php"] [unique_id "apK9MzAh5Y1i2tUxg4H2kwAABfw"]
[Sat Aug 29 05:06:27.074761 2026] [security2:error] [pid 1018003:tid 1018262] [client 20.104.18.15:36766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/os.php"] [unique_id "apK9MzAh5Y1i2tUxg4H2lgAABiY"]
[Sat Aug 29 05:06:27.080218 2026] [security2:error] [pid 1018003:tid 1018231] [client 158.23.147.79:30622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/content.php"] [unique_id "apK9MzAh5Y1i2tUxg4H2lwAABgc"]
[Sat Aug 29 05:06:27.083184 2026] [security2:error] [pid 1018003:tid 1018216] [client 20.48.251.3:14298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/old_phpinfo.php"] [unique_id "apK9MzAh5Y1i2tUxg4H2mAAABfk"]
[Sat Aug 29 05:06:27.091335 2026] [core:error] [pid 1018003:tid 1018234] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.091352 2026] [core:error] [pid 1018003:tid 1018234] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.095384 2026] [security2:error] [pid 1018003:tid 1018159] [client 20.104.18.15:36615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/sf.php"] [unique_id "apK9MzAh5Y1i2tUxg4H2nQAABcA"]
[Sat Aug 29 05:06:27.099735 2026] [security2:error] [pid 1017536:tid 1017778] [client 20.196.209.81:11574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/configs.php"] [unique_id "apK9MyJcY4fy7tP-rU0D4QAAAoQ"]
[Sat Aug 29 05:06:27.108406 2026] [security2:error] [pid 1018003:tid 1018222] [client 20.104.49.130:57606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/read.php"] [unique_id "apK9MzAh5Y1i2tUxg4H2ngAABf8"]
[Sat Aug 29 05:06:27.108918 2026] [security2:error] [pid 1017536:tid 1017545] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/var/www/html/.env"] [unique_id "apK9MyJcY4fy7tP-rU0D4gACjgg"]
[Sat Aug 29 05:06:27.108956 2026] [security2:error] [pid 1017536:tid 1017564] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/var/www/.env"] [unique_id "apK9MyJcY4fy7tP-rU0D5AACjhs"]
[Sat Aug 29 05:06:27.110365 2026] [security2:error] [pid 1017536:tid 1017776] [client 52.139.37.240:14935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK9MyJcY4fy7tP-rU0D5QAAAoI"]
[Sat Aug 29 05:06:27.111300 2026] [core:error] [pid 1017536:tid 1017610] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.111313 2026] [core:error] [pid 1017536:tid 1017610] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.114208 2026] [security2:error] [pid 1017536:tid 1017674] [client 20.48.251.3:3347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/configuration.php"] [unique_id "apK9MyJcY4fy7tP-rU0D5gAAAhw"]
[Sat Aug 29 05:06:27.117461 2026] [core:error] [pid 1017536:tid 1017580] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.117473 2026] [core:error] [pid 1017536:tid 1017580] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.132184 2026] [security2:error] [pid 1017536:tid 1017646] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/web/.env"] [unique_id "apK9MyJcY4fy7tP-rU0D6QACjm0"]
[Sat Aug 29 05:06:27.135868 2026] [security2:error] [pid 1018003:tid 1018236] [client 20.104.18.15:23455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/v22.php"] [unique_id "apK9MzAh5Y1i2tUxg4H2ogAABgw"]
[Sat Aug 29 05:06:27.136664 2026] [core:error] [pid 1017536:tid 1017634] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.136679 2026] [core:error] [pid 1017536:tid 1017634] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.136843 2026] [core:error] [pid 1018003:tid 1018171] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.136851 2026] [core:error] [pid 1018003:tid 1018171] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.138677 2026] [core:error] [pid 1017536:tid 1017648] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.138694 2026] [core:error] [pid 1017536:tid 1017648] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.138801 2026] [core:error] [pid 1017536:tid 1017577] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.138816 2026] [core:error] [pid 1017536:tid 1017577] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.147305 2026] [core:error] [pid 1018003:tid 1018179] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.147320 2026] [core:error] [pid 1018003:tid 1018179] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.151397 2026] [security2:error] [pid 1018003:tid 1018192] [client 20.104.18.15:7077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/wp-content/l.php"] [unique_id "apK9MzAh5Y1i2tUxg4H2pAAABeE"]
[Sat Aug 29 05:06:27.163407 2026] [security2:error] [pid 1017536:tid 1017733] [client 20.220.204.93:64984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/term.php"] [unique_id "apK9MyJcY4fy7tP-rU0D7wAAAlc"]
[Sat Aug 29 05:06:27.163682 2026] [security2:error] [pid 1017536:tid 1017719] [client 20.104.18.15:8178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/ssla.php"] [unique_id "apK9MyJcY4fy7tP-rU0D8AAAAkk"]
[Sat Aug 29 05:06:27.173425 2026] [security2:error] [pid 1017536:tid 1017723] [client 20.220.204.93:59071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/export.php"] [unique_id "apK9MyJcY4fy7tP-rU0D8QAAAk0"]
[Sat Aug 29 05:06:27.175427 2026] [security2:error] [pid 1017536:tid 1017683] [client 20.48.250.41:25542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/f35.php"] [unique_id "apK9MyJcY4fy7tP-rU0D8gAAAiU"]
[Sat Aug 29 05:06:27.196528 2026] [security2:error] [pid 1018003:tid 1018174] [client 20.104.18.15:13062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/sushi.php"] [unique_id "apK9MzAh5Y1i2tUxg4H2qgAABc8"]
[Sat Aug 29 05:06:27.208811 2026] [core:error] [pid 1017536:tid 1017651] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.208824 2026] [core:error] [pid 1017536:tid 1017661] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.208838 2026] [core:error] [pid 1017536:tid 1017651] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.208842 2026] [core:error] [pid 1017536:tid 1017661] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.221153 2026] [core:error] [pid 1017536:tid 1017761] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.221169 2026] [core:error] [pid 1017536:tid 1017761] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.229231 2026] [core:error] [pid 1017536:tid 1017780] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.229246 2026] [core:error] [pid 1017536:tid 1017780] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.245627 2026] [security2:error] [pid 1017536:tid 1017713] [client 20.48.251.3:61092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/server_info.php"] [unique_id "apK9MyJcY4fy7tP-rU0D9wAAAkM"]
[Sat Aug 29 05:06:27.253781 2026] [security2:error] [pid 1017536:tid 1017696] [client 20.104.18.15:36746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/htio.php"] [unique_id "apK9MyJcY4fy7tP-rU0D-QAAAjI"]
[Sat Aug 29 05:06:27.256131 2026] [core:error] [pid 1017536:tid 1017614] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.256146 2026] [core:error] [pid 1017536:tid 1017614] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.256466 2026] [security2:error] [pid 1017536:tid 1017711] [client 20.104.18.15:36760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/k.php"] [unique_id "apK9MyJcY4fy7tP-rU0D-gAAAkE"]
[Sat Aug 29 05:06:27.265353 2026] [security2:error] [pid 1018003:tid 1018240] [client 4.205.62.107:22440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/aws-credentials.php"] [unique_id "apK9MzAh5Y1i2tUxg4H2rQAABhA"]
[Sat Aug 29 05:06:27.285795 2026] [core:error] [pid 1017536:tid 1017622] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.285812 2026] [core:error] [pid 1017536:tid 1017622] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.287388 2026] [core:error] [pid 1017536:tid 1017777] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.287403 2026] [core:error] [pid 1017536:tid 1017777] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.288620 2026] [core:error] [pid 1018003:tid 1018156] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.288638 2026] [core:error] [pid 1018003:tid 1018156] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.289565 2026] [security2:error] [pid 1017536:tid 1017793] [client 20.151.200.44:64878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/monso.php"] [unique_id "apK9MyJcY4fy7tP-rU0ECAAAApM"]
[Sat Aug 29 05:06:27.291066 2026] [core:error] [pid 1017536:tid 1017732] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.291079 2026] [core:error] [pid 1017536:tid 1017732] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.291628 2026] [core:error] [pid 1017536:tid 1017745] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.291643 2026] [core:error] [pid 1017536:tid 1017745] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.292952 2026] [security2:error] [pid 1018003:tid 1018180] [client 20.104.18.15:6984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/wp-admin/w.php"] [unique_id "apK9MzAh5Y1i2tUxg4H2sQAABdU"]
[Sat Aug 29 05:06:27.293516 2026] [security2:error] [pid 1018003:tid 1018166] [client 20.104.18.15:8008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "apK9MzAh5Y1i2tUxg4H2sgAABcc"]
[Sat Aug 29 05:06:27.293985 2026] [security2:error] [pid 1017536:tid 1017565] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/wp-config.php"] [unique_id "apK9MyJcY4fy7tP-rU0EDAACYRw"]
[Sat Aug 29 05:06:27.294033 2026] [security2:error] [pid 1017536:tid 1017663] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/website/.env"] [unique_id "apK9MyJcY4fy7tP-rU0ECgACYX4"]
[Sat Aug 29 05:06:27.298081 2026] [security2:error] [pid 1017536:tid 1017638] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.evecreative.co"] [uri "/wp-config.php.bak"] [unique_id "apK9MyJcY4fy7tP-rU0EDgACYWU"]
[Sat Aug 29 05:06:27.298552 2026] [security2:error] [pid 1018003:tid 1018162] [client 40.83.93.50:1777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-admin/plugin-install.php"] [unique_id "apK9MzAh5Y1i2tUxg4H2tAAABcM"]
[Sat Aug 29 05:06:27.304836 2026] [security2:error] [pid 1017536:tid 1017752] [client 168.107.94.195:56083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9MyJcY4fy7tP-rU0EEAAAAmo"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:27.305033 2026] [security2:error] [pid 1017536:tid 1017674] [client 20.104.18.15:23404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/wp-activate.php"] [unique_id "apK9MyJcY4fy7tP-rU0EEQAAAhw"]
[Sat Aug 29 05:06:27.306500 2026] [security2:error] [pid 1018003:tid 1018265] [client 4.205.62.107:53434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/xza.php"] [unique_id "apK9MzAh5Y1i2tUxg4H2tQAABik"]
[Sat Aug 29 05:06:27.309021 2026] [security2:error] [pid 1018003:tid 1018277] [client 52.139.37.240:14518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/wp-content/plugins/linkpreview/il.php"] [unique_id "apK9MzAh5Y1i2tUxg4H2tgAABjU"]
[Sat Aug 29 05:06:27.317222 2026] [core:error] [pid 1017536:tid 1017746] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.317242 2026] [core:error] [pid 1017536:tid 1017746] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.339571 2026] [security2:error] [pid 1017536:tid 1017623] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.evecreative.co"] [uri "/wp-config.php.new"] [unique_id "apK9MyJcY4fy7tP-rU0EEwACYVY"]
[Sat Aug 29 05:06:27.340317 2026] [security2:error] [pid 1018003:tid 1018221] [client 20.104.49.130:29957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/1xmomo.php"] [unique_id "apK9MzAh5Y1i2tUxg4H2uwAABf4"]
[Sat Aug 29 05:06:27.342670 2026] [security2:error] [pid 1017536:tid 1017719] [client 158.23.147.79:25588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-admin/admin.php"] [unique_id "apK9MyJcY4fy7tP-rU0EFAAAAkk"]
[Sat Aug 29 05:06:27.345796 2026] [security2:error] [pid 1018003:tid 1018227] [client 20.48.250.41:25434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/wen.php"] [unique_id "apK9MzAh5Y1i2tUxg4H2vAAABgQ"]
[Sat Aug 29 05:06:27.360172 2026] [cgid:error] [pid 1018003:tid 1018183] [client 20.52.41.200:1785] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/cpslggc/404.shtml
[Sat Aug 29 05:06:27.361192 2026] [security2:error] [pid 1017536:tid 1017553] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.evecreative.co"] [uri "/wp-config.php.old"] [unique_id "apK9MyJcY4fy7tP-rU0EFgACYRA"]
[Sat Aug 29 05:06:27.365282 2026] [core:error] [pid 1017536:tid 1017553] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.365301 2026] [core:error] [pid 1017536:tid 1017553] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.367290 2026] [security2:error] [pid 1017536:tid 1017683] [client 20.151.200.44:45917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/grsiuk.php"] [unique_id "apK9MyJcY4fy7tP-rU0EGAAAAiU"]
[Sat Aug 29 05:06:27.368762 2026] [security2:error] [pid 1017536:tid 1017689] [client 20.220.204.93:59028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/gk.php"] [unique_id "apK9MyJcY4fy7tP-rU0EGQAAAis"]
[Sat Aug 29 05:06:27.372613 2026] [security2:error] [pid 1018003:tid 1018177] [client 20.48.251.3:62126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/hosty.php"] [unique_id "apK9MzAh5Y1i2tUxg4H2wgAABdI"]
[Sat Aug 29 05:06:27.379248 2026] [security2:error] [pid 1018003:tid 1018230] [client 20.104.18.15:13223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/manga.php"] [unique_id "apK9MzAh5Y1i2tUxg4H2wwAABgY"]
[Sat Aug 29 05:06:27.388176 2026] [security2:error] [pid 1017536:tid 1017691] [client 103.185.242.143:62443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK9MyJcY4fy7tP-rU0EGwAAAi0"]
[Sat Aug 29 05:06:27.388269 2026] [security2:error] [pid 1017536:tid 1017691] [client 103.185.242.143:62443] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK9MyJcY4fy7tP-rU0EGwAAAi0"]
[Sat Aug 29 05:06:27.390185 2026] [security2:error] [pid 1017536:tid 1017568] [remote 93.123.109.228:34856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/wp-content/mysql.sql"] [unique_id "apK9MyJcY4fy7tP-rU0EGgACYR8"]
[Sat Aug 29 05:06:27.393960 2026] [core:error] [pid 1017536:tid 1017593] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.393984 2026] [core:error] [pid 1017536:tid 1017593] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.396098 2026] [core:error] [pid 1018003:tid 1018226] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.396111 2026] [core:error] [pid 1018003:tid 1018226] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.397249 2026] [security2:error] [pid 1017536:tid 1017717] [client 158.158.54.35:14094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-admin/css/admin.php"] [unique_id "apK9MyJcY4fy7tP-rU0EHQAAAkc"]
[Sat Aug 29 05:06:27.403029 2026] [security2:error] [pid 1017536:tid 1017751] [client 20.104.18.15:36711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/82.php"] [unique_id "apK9MyJcY4fy7tP-rU0EHgAAAmk"]
[Sat Aug 29 05:06:27.408345 2026] [core:error] [pid 1017536:tid 1017656] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.408368 2026] [core:error] [pid 1017536:tid 1017656] [remote 93.123.109.228:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.419567 2026] [security2:error] [pid 1017536:tid 1017761] [client 4.205.62.107:56042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/ebahvhhh.php"] [unique_id "apK9MyJcY4fy7tP-rU0EIQAAAnM"]
[Sat Aug 29 05:06:27.425739 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.104.18.15:36691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/dev.php"] [unique_id "apK9MzAh5Y1i2tUxg4H2ywAABcI"]
[Sat Aug 29 05:06:27.428977 2026] [security2:error] [pid 1018003:tid 1018200] [client 20.104.18.15:8151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/wp-aothait.php"] [unique_id "apK9MzAh5Y1i2tUxg4H2zAAABek"]
[Sat Aug 29 05:06:27.432582 2026] [security2:error] [pid 1017536:tid 1017687] [client 20.104.18.15:7007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/wp-content/k.php"] [unique_id "apK9MyJcY4fy7tP-rU0EIgAAAik"]
[Sat Aug 29 05:06:27.444956 2026] [security2:error] [pid 1017536:tid 1017737] [client 20.104.18.15:23459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/wp-trackback.php"] [unique_id "apK9MyJcY4fy7tP-rU0EIwAAAls"]
[Sat Aug 29 05:06:27.475396 2026] [security2:error] [pid 1017536:tid 1017788] [client 68.155.159.216:52763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK9MyJcY4fy7tP-rU0EKAAAAo4"]
[Sat Aug 29 05:06:27.477746 2026] [security2:error] [pid 1017536:tid 1017713] [client 20.220.204.93:64290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/aaa.php"] [unique_id "apK9MyJcY4fy7tP-rU0EKQAAAkM"]
[Sat Aug 29 05:06:27.484875 2026] [core:error] [pid 1017536:tid 1017698] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.484896 2026] [core:error] [pid 1017536:tid 1017698] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:27.496572 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.196.209.81:4429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/disagraeed.php"] [unique_id "apK9MyJcY4fy7tP-rU0EKwAAAh0"]
[Sat Aug 29 05:06:27.497059 2026] [security2:error] [pid 1017536:tid 1017673] [client 20.48.251.3:61242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/pass4.php"] [unique_id "apK9MyJcY4fy7tP-rU0ELAAAAhs"]
[Sat Aug 29 05:06:27.499183 2026] [security2:error] [pid 1017536:tid 1017786] [client 20.104.104.62:60417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/7logs.php"] [unique_id "apK9MyJcY4fy7tP-rU0ELQAAAow"]
[Sat Aug 29 05:06:27.503759 2026] [security2:error] [pid 1017536:tid 1017767] [client 52.139.37.240:15237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/wp-header-json.php"] [unique_id "apK9MyJcY4fy7tP-rU0ELgAAAnk"]
[Sat Aug 29 05:06:27.514600 2026] [cgid:error] [pid 1018003:tid 1018188] [client 20.52.41.200:1785] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/cpslggc/404.shtml
[Sat Aug 29 05:06:27.517924 2026] [security2:error] [pid 1018003:tid 1018238] [client 20.104.104.62:64643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/mcd.php"] [unique_id "apK9MzAh5Y1i2tUxg4H20wAABg4"]
[Sat Aug 29 05:06:27.520797 2026] [security2:error] [pid 1018003:tid 1018202] [client 20.104.18.15:13131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/asdfghj.php"] [unique_id "apK9MzAh5Y1i2tUxg4H21QAABes"]
[Sat Aug 29 05:06:27.536591 2026] [security2:error] [pid 1017536:tid 1017731] [client 20.48.250.41:25345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/inc.php"] [unique_id "apK9MyJcY4fy7tP-rU0EMAAAAlU"]
[Sat Aug 29 05:06:27.544728 2026] [security2:error] [pid 1018003:tid 1018266] [client 20.104.18.15:36854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/dex.php"] [unique_id "apK9MzAh5Y1i2tUxg4H21wAABio"]
[Sat Aug 29 05:06:27.549745 2026] [security2:error] [pid 1017536:tid 1017704] [client 68.155.159.216:14085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/x.php"] [unique_id "apK9MyJcY4fy7tP-rU0EMQAAAjo"]
[Sat Aug 29 05:06:27.569913 2026] [security2:error] [pid 1018003:tid 1018157] [client 20.104.18.15:36721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/gos.php"] [unique_id "apK9MzAh5Y1i2tUxg4H22gAABb4"]
[Sat Aug 29 05:06:27.574167 2026] [security2:error] [pid 1017536:tid 1017719] [client 20.104.18.15:8149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/wp-includes/index.php"] [unique_id "apK9MyJcY4fy7tP-rU0EMwAAAkk"]
[Sat Aug 29 05:06:27.574553 2026] [security2:error] [pid 1017536:tid 1017683] [client 20.104.18.15:7083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/os.php"] [unique_id "apK9MyJcY4fy7tP-rU0ENAAAAiU"]
[Sat Aug 29 05:06:27.577325 2026] [security2:error] [pid 1018003:tid 1018231] [client 20.220.204.93:59061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/logs1.php"] [unique_id "apK9MzAh5Y1i2tUxg4H22wAABgc"]
[Sat Aug 29 05:06:27.590260 2026] [security2:error] [pid 1017536:tid 1017761] [client 93.123.109.228:49502] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK9MyJcY4fy7tP-rU0ENQAAAnM"]
[Sat Aug 29 05:06:27.593437 2026] [security2:error] [pid 1017536:tid 1017687] [client 20.104.18.15:23408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/pri.php"] [unique_id "apK9MyJcY4fy7tP-rU0ENgAAAik"]
[Sat Aug 29 05:06:27.603293 2026] [security2:error] [pid 1017536:tid 1017678] [client 20.151.200.44:64975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/h02ugyh.php"] [unique_id "apK9MyJcY4fy7tP-rU0EOAAAAiA"]
[Sat Aug 29 05:06:27.606400 2026] [security2:error] [pid 1017536:tid 1017748] [client 93.123.109.228:49546] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK9MyJcY4fy7tP-rU0EOQAAAmY"]
[Sat Aug 29 05:06:27.606788 2026] [security2:error] [pid 1018003:tid 1018159] [client 20.104.104.62:48494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/quoys.php"] [unique_id "apK9MzAh5Y1i2tUxg4H23wAABcA"]
[Sat Aug 29 05:06:27.607024 2026] [security2:error] [pid 1017536:tid 1017792] [client 20.151.200.44:64940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/rce.php"] [unique_id "apK9MyJcY4fy7tP-rU0EOgAAApI"]
[Sat Aug 29 05:06:27.611573 2026] [security2:error] [pid 1018003:tid 1018066] [remote 93.123.109.228:34972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/test.php"] [unique_id "apK9MzAh5Y1i2tUxg4H24QAGCi0"]
[Sat Aug 29 05:06:27.624656 2026] [security2:error] [pid 1017536:tid 1017698] [client 20.48.251.3:61094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/cu.php"] [unique_id "apK9MyJcY4fy7tP-rU0EPgAAAjQ"]
[Sat Aug 29 05:06:27.660104 2026] [security2:error] [pid 1017536:tid 1017673] [client 20.104.104.62:36969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/sf.php"] [unique_id "apK9MyJcY4fy7tP-rU0EQgAAAhs"]
[Sat Aug 29 05:06:27.664009 2026] [security2:error] [pid 1018003:tid 1018252] [client 20.52.41.200:1785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-content/themes/about.php"] [unique_id "apK9MzAh5Y1i2tUxg4H25wAABhw"]
[Sat Aug 29 05:06:27.665793 2026] [security2:error] [pid 1017536:tid 1017695] [client 68.155.159.216:50258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/mah.php"] [unique_id "apK9MyJcY4fy7tP-rU0ERAAAAjE"]
[Sat Aug 29 05:06:27.668107 2026] [security2:error] [pid 1017536:tid 1017767] [client 93.123.109.228:49580] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(\\\\/\\\\*\\\\!? ?(?:select|grant|delete|insert|drop|alter|replace|truncate|update|create|rename|describe|union|concat|group_concat))" at REQUEST_FILENAME. [file "/opt/mod_security/hg_rules.conf"] [line "1019"] [id "9000042"] [rev "2.2.2"] [msg "SQL Comment Sequence Detected."] [data "/*update"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/*update.cgi*"] [unique_id "apK9MyJcY4fy7tP-rU0ERQAAAnk"]
[Sat Aug 29 05:06:27.681831 2026] [security2:error] [pid 1017536:tid 1017696] [client 52.139.37.240:31504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/ahax.php"] [unique_id "apK9MyJcY4fy7tP-rU0ERgAAAjI"]
[Sat Aug 29 05:06:27.687457 2026] [security2:error] [pid 1017536:tid 1017731] [client 168.107.94.195:56487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9MyJcY4fy7tP-rU0ESAAAAlU"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:27.688619 2026] [security2:error] [pid 1018003:tid 1018217] [client 20.104.18.15:13071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/dragonshell.php"] [unique_id "apK9MzAh5Y1i2tUxg4H26QAABfo"]
[Sat Aug 29 05:06:27.688778 2026] [security2:error] [pid 1018003:tid 1018239] [client 20.104.104.62:64689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/waw.php"] [unique_id "apK9MzAh5Y1i2tUxg4H26wAABg8"]
[Sat Aug 29 05:06:27.700117 2026] [security2:error] [pid 1017536:tid 1017681] [client 52.139.37.240:15257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/zup.php"] [unique_id "apK9MyJcY4fy7tP-rU0ESgAAAiM"]
[Sat Aug 29 05:06:27.701567 2026] [security2:error] [pid 1017536:tid 1017669] [client 20.104.104.62:20879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/.well-known/fox.php"] [unique_id "apK9MyJcY4fy7tP-rU0ESwAAAhc"]
[Sat Aug 29 05:06:27.704554 2026] [security2:error] [pid 1017536:tid 1017706] [client 20.48.250.41:25501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/6bcwiqwj.php"] [unique_id "apK9MyJcY4fy7tP-rU0ETAAAAjw"]
[Sat Aug 29 05:06:27.731856 2026] [security2:error] [pid 1018003:tid 1018179] [client 68.155.159.216:49215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK9MzAh5Y1i2tUxg4H27wAABdQ"]
[Sat Aug 29 05:06:27.736399 2026] [security2:error] [pid 1017536:tid 1017707] [client 20.104.18.15:36617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/132.php"] [unique_id "apK9MyJcY4fy7tP-rU0ETwAAAj0"]
[Sat Aug 29 05:06:27.741192 2026] [security2:error] [pid 1018003:tid 1018206] [client 20.104.18.15:23405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/wp_blog_footer.php"] [unique_id "apK9MzAh5Y1i2tUxg4H28AAABe8"]
[Sat Aug 29 05:06:27.744822 2026] [security2:error] [pid 1017536:tid 1017749] [client 20.104.18.15:8123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/file31.php"] [unique_id "apK9MyJcY4fy7tP-rU0EUAAAAmc"]
[Sat Aug 29 05:06:27.749077 2026] [security2:error] [pid 1017536:tid 1017790] [client 20.151.200.44:47350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/ahy66.php"] [unique_id "apK9MyJcY4fy7tP-rU0EUQAAApA"]
[Sat Aug 29 05:06:27.755230 2026] [security2:error] [pid 1017536:tid 1017674] [client 20.104.104.62:48667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/vbbn.php"] [unique_id "apK9MyJcY4fy7tP-rU0EUgAAAhw"]
[Sat Aug 29 05:06:27.755727 2026] [security2:error] [pid 1017536:tid 1017746] [client 20.48.251.3:3176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/services.php"] [unique_id "apK9MyJcY4fy7tP-rU0EUwAAAmQ"]
[Sat Aug 29 05:06:27.758148 2026] [security2:error] [pid 1017536:tid 1017734] [client 20.104.18.15:36694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/inso.php"] [unique_id "apK9MyJcY4fy7tP-rU0EVAAAAlg"]
[Sat Aug 29 05:06:27.763263 2026] [security2:error] [pid 1018003:tid 1018203] [client 20.104.18.15:7142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/htio.php"] [unique_id "apK9MzAh5Y1i2tUxg4H28QAABew"]
[Sat Aug 29 05:06:27.767757 2026] [security2:error] [pid 1017536:tid 1017769] [client 20.104.49.130:43807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/browse.php"] [unique_id "apK9MyJcY4fy7tP-rU0EVQAAAns"]
[Sat Aug 29 05:06:27.786438 2026] [security2:error] [pid 1017536:tid 1017711] [client 40.83.93.50:1734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-admin/plugins/img/themes/plugins/maintenance.php"] [unique_id "apK9MyJcY4fy7tP-rU0EVgAAAkE"]
[Sat Aug 29 05:06:27.792885 2026] [security2:error] [pid 1017536:tid 1017686] [client 93.123.109.228:49546] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/.docker/.env"] [unique_id "apK9MyJcY4fy7tP-rU0EVwAAAig"]
[Sat Aug 29 05:06:27.808816 2026] [security2:error] [pid 1017536:tid 1017683] [client 93.123.109.228:49528] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/.docker/laravel/app/.env"] [unique_id "apK9MyJcY4fy7tP-rU0EWgAAAiU"]
[Sat Aug 29 05:06:27.813543 2026] [security2:error] [pid 1017536:tid 1017672] [client 20.104.104.62:42699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/super.php"] [unique_id "apK9MyJcY4fy7tP-rU0EWwAAAho"]
[Sat Aug 29 05:06:27.817454 2026] [security2:error] [pid 1018003:tid 1018218] [client 74.7.244.26:55688] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.pnh.vev.mybluehost.me"] [uri "/robots.txt"] [unique_id "apK9MzAh5Y1i2tUxg4H2-gAF-1g"]
[Sat Aug 29 05:06:27.820416 2026] [security2:error] [pid 1017536:tid 1017694] [client 20.104.18.15:13307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/wp-safe.php"] [unique_id "apK9MyJcY4fy7tP-rU0EXAAAAjA"]
[Sat Aug 29 05:06:27.832480 2026] [security2:error] [pid 1018003:tid 1018268] [client 158.158.54.35:7394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/adminfuns.php"] [unique_id "apK9MzAh5Y1i2tUxg4H2_AAABiw"]
[Sat Aug 29 05:06:27.835570 2026] [security2:error] [pid 1018003:tid 1018153] [client 20.48.250.41:25491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/easy.php"] [unique_id "apK9MzAh5Y1i2tUxg4H2_gAABbo"]
[Sat Aug 29 05:06:27.838484 2026] [security2:error] [pid 1017536:tid 1017792] [client 93.123.109.228:49548] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK9MyJcY4fy7tP-rU0EXgAAApI"]
[Sat Aug 29 05:06:27.842564 2026] [security2:error] [pid 1018003:tid 1018160] [client 68.155.159.216:30608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9MzAh5Y1i2tUxg4H3AQAABcE"]
[Sat Aug 29 05:06:27.873614 2026] [security2:error] [pid 1017536:tid 1017713] [client 93.123.109.228:49600] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/.env.backup"] [unique_id "apK9MyJcY4fy7tP-rU0EZAAAAkM"]
[Sat Aug 29 05:06:27.875021 2026] [security2:error] [pid 1017536:tid 1017757] [client 93.123.109.228:49500] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/.env.bak"] [unique_id "apK9MyJcY4fy7tP-rU0EZgAAAm8"]
[Sat Aug 29 05:06:27.881103 2026] [security2:error] [pid 1018003:tid 1018225] [client 68.155.159.216:65077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9MzAh5Y1i2tUxg4H3BwAABgI"]
[Sat Aug 29 05:06:27.881146 2026] [security2:error] [pid 1017536:tid 1017710] [client 52.139.37.240:31511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/breads1.php"] [unique_id "apK9MyJcY4fy7tP-rU0EZwAAAkA"]
[Sat Aug 29 05:06:27.883969 2026] [security2:error] [pid 1018003:tid 1018240] [client 20.104.18.15:23422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/sushi.php"] [unique_id "apK9MzAh5Y1i2tUxg4H3CAAABhA"]
[Sat Aug 29 05:06:27.884926 2026] [security2:error] [pid 1017536:tid 1017740] [client 20.104.18.15:36695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/v22.php"] [unique_id "apK9MyJcY4fy7tP-rU0EaAAAAl4"]
[Sat Aug 29 05:06:27.885815 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.220.204.93:64301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/xsox.php"] [unique_id "apK9MyJcY4fy7tP-rU0EaQAAAnk"]
[Sat Aug 29 05:06:27.890374 2026] [security2:error] [pid 1017536:tid 1017696] [client 20.104.18.15:36742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/aa.php"] [unique_id "apK9MyJcY4fy7tP-rU0EawAAAjI"]
[Sat Aug 29 05:06:27.895248 2026] [security2:error] [pid 1017536:tid 1017731] [client 20.220.204.93:59034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/inege.php"] [unique_id "apK9MyJcY4fy7tP-rU0EbAAAAlU"]
[Sat Aug 29 05:06:27.897737 2026] [security2:error] [pid 1017536:tid 1017737] [client 52.139.37.240:14939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/a9.php"] [unique_id "apK9MyJcY4fy7tP-rU0EbQAAAls"]
[Sat Aug 29 05:06:27.899126 2026] [security2:error] [pid 1018003:tid 1018167] [client 20.104.18.15:7067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/dev.php"] [unique_id "apK9MzAh5Y1i2tUxg4H3CgAABcg"]
[Sat Aug 29 05:06:27.900623 2026] [security2:error] [pid 1017536:tid 1017786] [client 20.104.104.62:56349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/x23.php"] [unique_id "apK9MyJcY4fy7tP-rU0EbwAAAow"]
[Sat Aug 29 05:06:27.901962 2026] [security2:error] [pid 1018003:tid 1018156] [client 20.63.81.20:44530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/503.php"] [unique_id "apK9MzAh5Y1i2tUxg4H3CwAABb0"]
[Sat Aug 29 05:06:27.903396 2026] [security2:error] [pid 1017536:tid 1017681] [client 20.48.251.3:3330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/filesystems.php"] [unique_id "apK9MyJcY4fy7tP-rU0EcAAAAiM"]
[Sat Aug 29 05:06:27.921614 2026] [security2:error] [pid 1018003:tid 1018155] [client 68.155.159.216:51492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-blog-header.php"] [unique_id "apK9MzAh5Y1i2tUxg4H3DAAABbw"]
[Sat Aug 29 05:06:27.930433 2026] [security2:error] [pid 1018003:tid 1018207] [client 20.104.104.62:48748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/rfi.php"] [unique_id "apK9MzAh5Y1i2tUxg4H3DgAABfA"]
[Sat Aug 29 05:06:27.930697 2026] [security2:error] [pid 1018003:tid 1018244] [client 20.104.18.15:8061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/dk.php"] [unique_id "apK9MzAh5Y1i2tUxg4H3DQAABhQ"]
[Sat Aug 29 05:06:27.947878 2026] [security2:error] [pid 1017536:tid 1017733] [client 20.196.209.81:19412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/add_actualites.php"] [unique_id "apK9MyJcY4fy7tP-rU0EdAAAAlc"]
[Sat Aug 29 05:06:27.955691 2026] [security2:error] [pid 1018003:tid 1018265] [client 20.63.81.20:56868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/doo.php"] [unique_id "apK9MzAh5Y1i2tUxg4H3EAAABik"]
[Sat Aug 29 05:06:27.958299 2026] [security2:error] [pid 1017536:tid 1017773] [client 20.104.104.62:36988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/lufix1.php"] [unique_id "apK9MyJcY4fy7tP-rU0EdwAAAn8"]
[Sat Aug 29 05:06:27.976939 2026] [security2:error] [pid 1017536:tid 1017790] [client 158.23.147.79:26623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK9MyJcY4fy7tP-rU0EeQAAApA"]
[Sat Aug 29 05:06:27.984262 2026] [security2:error] [pid 1017536:tid 1017674] [client 158.23.147.79:30535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK9MyJcY4fy7tP-rU0EegAAAhw"]
[Sat Aug 29 05:06:27.993459 2026] [security2:error] [pid 1018003:tid 1018198] [client 20.104.18.15:13131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/gjewuagf.php"] [unique_id "apK9MzAh5Y1i2tUxg4H3FQAABec"]
[Sat Aug 29 05:06:28.014276 2026] [security2:error] [pid 1017536:tid 1017711] [client 20.151.200.44:64297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/exec.php"] [unique_id "apK9NCJcY4fy7tP-rU0EfQAAAkE"]
[Sat Aug 29 05:06:28.018620 2026] [security2:error] [pid 1017536:tid 1017686] [client 93.123.109.228:49592] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/.env.old"] [unique_id "apK9NCJcY4fy7tP-rU0EfgAAAig"]
[Sat Aug 29 05:06:28.026929 2026] [security2:error] [pid 1018003:tid 1018175] [client 4.205.62.107:22441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/xa.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3HAAABdA"]
[Sat Aug 29 05:06:28.030494 2026] [security2:error] [pid 1017536:tid 1017694] [client 93.123.109.228:49578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/.env.php"] [unique_id "apK9NCJcY4fy7tP-rU0EggAAAjA"]
[Sat Aug 29 05:06:28.030780 2026] [security2:error] [pid 1017536:tid 1017751] [client 20.220.204.93:59058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/wp-link10.php"] [unique_id "apK9NCJcY4fy7tP-rU0EgwAAAmk"]
[Sat Aug 29 05:06:28.032267 2026] [security2:error] [pid 1018003:tid 1018212] [client 20.104.18.15:23548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/manga.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3HwAABfU"]
[Sat Aug 29 05:06:28.036728 2026] [autoindex:error] [pid 1018003:tid 1018140] [remote 74.7.227.185:37412] AH01276: Cannot serve directory /home3/pnhvevmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:06:28.036960 2026] [security2:error] [pid 1017536:tid 1017748] [client 20.104.49.130:57608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/gecko-new.php"] [unique_id "apK9NCJcY4fy7tP-rU0EhQAAAmY"]
[Sat Aug 29 05:06:28.037474 2026] [security2:error] [pid 1017536:tid 1017765] [client 20.63.81.20:46857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/504.php"] [unique_id "apK9NCJcY4fy7tP-rU0EhgAAAnc"]
[Sat Aug 29 05:06:28.037979 2026] [security2:error] [pid 1017536:tid 1017792] [client 158.23.147.79:24539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK9NCJcY4fy7tP-rU0EhwAAApI"]
[Sat Aug 29 05:06:28.040569 2026] [security2:error] [pid 1017536:tid 1017698] [client 20.104.18.15:6921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/gos.php"] [unique_id "apK9NCJcY4fy7tP-rU0EiQAAAjQ"]
[Sat Aug 29 05:06:28.053663 2026] [security2:error] [pid 1017536:tid 1017753] [client 158.23.147.79:62665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK9NCJcY4fy7tP-rU0EigAAAms"]
[Sat Aug 29 05:06:28.057916 2026] [security2:error] [pid 1017536:tid 1017673] [client 20.104.18.15:36701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/wp-activate.php"] [unique_id "apK9NCJcY4fy7tP-rU0EiwAAAhs"]
[Sat Aug 29 05:06:28.062011 2026] [security2:error] [pid 1018003:tid 1018245] [client 20.48.250.41:25449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/fresh3.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3IgAABhU"]
[Sat Aug 29 05:06:28.064307 2026] [security2:error] [pid 1017536:tid 1017713] [client 20.104.104.62:56353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/ws66.php"] [unique_id "apK9NCJcY4fy7tP-rU0EjAAAAkM"]
[Sat Aug 29 05:06:28.067430 2026] [security2:error] [pid 1017536:tid 1017757] [client 168.107.94.195:56773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9NCJcY4fy7tP-rU0EjQAAAm8"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:28.069049 2026] [security2:error] [pid 1017536:tid 1017695] [client 158.23.147.79:37785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/file88.php"] [unique_id "apK9NCJcY4fy7tP-rU0EjgAAAjE"]
[Sat Aug 29 05:06:28.070790 2026] [security2:error] [pid 1017536:tid 1017710] [client 20.104.18.15:8004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/ta.php"] [unique_id "apK9NCJcY4fy7tP-rU0EkAAAAkA"]
[Sat Aug 29 05:06:28.078563 2026] [security2:error] [pid 1017536:tid 1017740] [client 4.205.62.107:22251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/xmy.php"] [unique_id "apK9NCJcY4fy7tP-rU0EkgAAAl4"]
[Sat Aug 29 05:06:28.079447 2026] [security2:error] [pid 1018003:tid 1018161] [client 52.139.37.240:31058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/must.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3JAAABcI"]
[Sat Aug 29 05:06:28.081681 2026] [security2:error] [pid 1018003:tid 1018188] [client 20.104.49.130:60743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/3.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3JQAABd0"]
[Sat Aug 29 05:06:28.088424 2026] [security2:error] [pid 1018003:tid 1018238] [client 20.63.81.20:60491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/adminer-4.6.6.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3JgAABg4"]
[Sat Aug 29 05:06:28.093616 2026] [security2:error] [pid 1017536:tid 1017717] [client 52.139.37.240:15283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/admin/index.php"] [unique_id "apK9NCJcY4fy7tP-rU0ElAAAAkc"]
[Sat Aug 29 05:06:28.099133 2026] [security2:error] [pid 1018003:tid 1018266] [client 20.104.18.15:36709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/img.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3KAAABio"]
[Sat Aug 29 05:06:28.117684 2026] [security2:error] [pid 1017536:tid 1017745] [client 93.123.109.228:49652] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/.env.swp"] [unique_id "apK9NCJcY4fy7tP-rU0ElQAAAmM"]
[Sat Aug 29 05:06:28.119193 2026] [security2:error] [pid 1018003:tid 1018255] [client 20.52.41.200:1748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-includes/assets/index.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3KwAABh8"]
[Sat Aug 29 05:06:28.133626 2026] [security2:error] [pid 1018003:tid 1018157] [client 4.205.62.107:26647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/php-info.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3LQAABb4"]
[Sat Aug 29 05:06:28.135503 2026] [security2:error] [pid 1017536:tid 1017669] [client 20.104.104.62:41802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/hack.php"] [unique_id "apK9NCJcY4fy7tP-rU0ElgAAAhc"]
[Sat Aug 29 05:06:28.135966 2026] [security2:error] [pid 1017536:tid 1017723] [client 20.104.104.62:48449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/tajj.php"] [unique_id "apK9NCJcY4fy7tP-rU0ElwAAAk0"]
[Sat Aug 29 05:06:28.153316 2026] [security2:error] [pid 1018003:tid 1018231] [client 158.23.147.79:35816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3MQAABgc"]
[Sat Aug 29 05:06:28.157758 2026] [security2:error] [pid 1017536:tid 1017749] [client 20.151.200.44:45978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/gaje.php"] [unique_id "apK9NCJcY4fy7tP-rU0EmwAAAmc"]
[Sat Aug 29 05:06:28.167416 2026] [security2:error] [pid 1018003:tid 1018172] [client 68.155.159.216:33761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-includes/css/index.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3MgAABc0"]
[Sat Aug 29 05:06:28.170869 2026] [security2:error] [pid 1018003:tid 1018024] [remote 93.123.109.228:34972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/wp-config.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3NAAGKwM"]
[Sat Aug 29 05:06:28.175401 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.63.81.20:46907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/admin.php"] [unique_id "apK9NCJcY4fy7tP-rU0EnAAAAlY"]
[Sat Aug 29 05:06:28.176821 2026] [security2:error] [pid 1017536:tid 1017674] [client 20.104.18.15:7093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/132.php"] [unique_id "apK9NCJcY4fy7tP-rU0EngAAAhw"]
[Sat Aug 29 05:06:28.177164 2026] [security2:error] [pid 1017536:tid 1017746] [client 93.123.109.228:49540] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/.env~"] [unique_id "apK9NCJcY4fy7tP-rU0EnQAAAmQ"]
[Sat Aug 29 05:06:28.186473 2026] [security2:error] [pid 1017536:tid 1017734] [client 20.104.104.62:40204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/.well-known/alfa.php"] [unique_id "apK9NCJcY4fy7tP-rU0EnwAAAlg"]
[Sat Aug 29 05:06:28.189440 2026] [security2:error] [pid 1017536:tid 1017776] [client 158.23.147.79:30531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/goat.php"] [unique_id "apK9NCJcY4fy7tP-rU0EoAAAAoI"]
[Sat Aug 29 05:06:28.191028 2026] [security2:error] [pid 1017536:tid 1017707] [client 20.104.18.15:13185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/tnglzqmv.php"] [unique_id "apK9NCJcY4fy7tP-rU0EoQAAAj0"]
[Sat Aug 29 05:06:28.200997 2026] [security2:error] [pid 1018003:tid 1018217] [client 20.151.200.44:65077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/shelp.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3NwAABfo"]
[Sat Aug 29 05:06:28.203754 2026] [security2:error] [pid 1017536:tid 1017689] [client 20.104.18.15:7946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/bo.php"] [unique_id "apK9NCJcY4fy7tP-rU0EpwAAAis"]
[Sat Aug 29 05:06:28.205731 2026] [security2:error] [pid 1017536:tid 1017687] [client 20.104.18.15:36743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/wp-trackback.php"] [unique_id "apK9NCJcY4fy7tP-rU0EqAAAAik"]
[Sat Aug 29 05:06:28.206166 2026] [security2:error] [pid 1018003:tid 1018196] [client 20.48.250.41:25575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/bgymj.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3OAAABeU"]
[Sat Aug 29 05:06:28.208787 2026] [security2:error] [pid 1018003:tid 1018026] [remote 93.123.109.228:34972] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.ewenclan.com"] [uri "/wp-config.php.new"] [unique_id "apK9NDAh5Y1i2tUxg4H3OQAGKwU"]
[Sat Aug 29 05:06:28.210556 2026] [security2:error] [pid 1018003:tid 1018030] [remote 93.123.109.228:34972] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.ewenclan.com"] [uri "/wp-config.php.old"] [unique_id "apK9NDAh5Y1i2tUxg4H3OwAGKwk"]
[Sat Aug 29 05:06:28.210740 2026] [security2:error] [pid 1018003:tid 1018271] [client 20.104.18.15:23300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/asdfghj.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3OgAABi8"]
[Sat Aug 29 05:06:28.213247 2026] [security2:error] [pid 1018003:tid 1018143] [remote 93.123.109.228:34972] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.ewenclan.com"] [uri "/wp-config.php.bak"] [unique_id "apK9NDAh5Y1i2tUxg4H3PAAGDHo"]
[Sat Aug 29 05:06:28.224170 2026] [security2:error] [pid 1018003:tid 1018192] [client 20.63.81.20:60480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/gelap1.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3PQAABeE"]
[Sat Aug 29 05:06:28.247660 2026] [security2:error] [pid 1017536:tid 1017710] [client 20.220.204.93:59010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/ww.php"] [unique_id "apK9NCJcY4fy7tP-rU0ErQAAAkA"]
[Sat Aug 29 05:06:28.257618 2026] [security2:error] [pid 1017536:tid 1017767] [client 93.123.109.228:49502] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/.git/config.bak"] [unique_id "apK9NCJcY4fy7tP-rU0ErwAAAnk"]
[Sat Aug 29 05:06:28.259961 2026] [security2:error] [pid 1018003:tid 1018174] [client 158.23.147.79:48152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/sad/about.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3QAAABc8"]
[Sat Aug 29 05:06:28.267727 2026] [security2:error] [pid 1017536:tid 1017696] [client 93.123.109.228:49518] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/.git/config.old"] [unique_id "apK9NCJcY4fy7tP-rU0EsAAAAjI"]
[Sat Aug 29 05:06:28.270073 2026] [security2:error] [pid 1018003:tid 1018152] [client 20.104.18.15:36737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/222.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3QQAABbk"]
[Sat Aug 29 05:06:28.273245 2026] [security2:error] [pid 1018003:tid 1018171] [client 52.139.37.240:31136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/up.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3QgAABcw"]
[Sat Aug 29 05:06:28.273694 2026] [security2:error] [pid 1018003:tid 1018219] [client 158.158.54.35:14082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/goods.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3QwAABfw"]
[Sat Aug 29 05:06:28.275774 2026] [security2:error] [pid 1017536:tid 1017737] [client 20.104.104.62:36971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/155.php"] [unique_id "apK9NCJcY4fy7tP-rU0EsgAAAls"]
[Sat Aug 29 05:06:28.277437 2026] [security2:error] [pid 1017536:tid 1017786] [client 93.123.109.228:49652] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/.git/config~"] [unique_id "apK9NCJcY4fy7tP-rU0EswAAAow"]
[Sat Aug 29 05:06:28.278388 2026] [security2:error] [pid 1018003:tid 1018259] [client 40.83.93.50:1653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-admin/security.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3RwAABiM"]
[Sat Aug 29 05:06:28.285927 2026] [security2:error] [pid 1018003:tid 1018234] [client 52.139.37.240:14476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/makeasmtp.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3SAAABgo"]
[Sat Aug 29 05:06:28.300775 2026] [security2:error] [pid 1017536:tid 1017706] [client 20.48.251.3:3142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/tax.php"] [unique_id "apK9NCJcY4fy7tP-rU0EtQAAAjw"]
[Sat Aug 29 05:06:28.304776 2026] [security2:error] [pid 1018003:tid 1018186] [client 20.63.81.20:46936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/ws85.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3SQAABds"]
[Sat Aug 29 05:06:28.306882 2026] [security2:error] [pid 1018003:tid 1018225] [client 20.104.104.62:48457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/grsiuk.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3SgAABgI"]
[Sat Aug 29 05:06:28.318647 2026] [security2:error] [pid 1017536:tid 1017723] [client 20.104.18.15:6992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/v22.php"] [unique_id "apK9NCJcY4fy7tP-rU0EtwAAAk0"]
[Sat Aug 29 05:06:28.339822 2026] [security2:error] [pid 1018003:tid 1018156] [client 20.104.104.62:43022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/Cok.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3TAAABb0"]
[Sat Aug 29 05:06:28.340589 2026] [security2:error] [pid 1018003:tid 1018155] [client 20.104.18.15:8088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/44.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3TQAABbw"]
[Sat Aug 29 05:06:28.344470 2026] [security2:error] [pid 1018003:tid 1018180] [client 20.104.18.15:13216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/wefile.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3TgAABdU"]
[Sat Aug 29 05:06:28.347494 2026] [security2:error] [pid 1017536:tid 1017733] [client 20.104.18.15:23546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/dragonshell.php"] [unique_id "apK9NCJcY4fy7tP-rU0EugAAAlc"]
[Sat Aug 29 05:06:28.352944 2026] [security2:error] [pid 1017536:tid 1017781] [client 20.104.18.15:36727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/pri.php"] [unique_id "apK9NCJcY4fy7tP-rU0EuwAAAoc"]
[Sat Aug 29 05:06:28.362127 2026] [security2:error] [pid 1017536:tid 1017773] [client 20.63.81.20:56863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/rsjlrria.php"] [unique_id "apK9NCJcY4fy7tP-rU0EvQAAAn8"]
[Sat Aug 29 05:06:28.405266 2026] [security2:error] [pid 1017536:tid 1017736] [client 20.48.250.41:25452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/ws69.php"] [unique_id "apK9NCJcY4fy7tP-rU0EwgAAAlo"]
[Sat Aug 29 05:06:28.405298 2026] [security2:error] [pid 1017536:tid 1017743] [client 4.205.62.107:22221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/4563.php"] [unique_id "apK9NCJcY4fy7tP-rU0EwwAAAmE"]
[Sat Aug 29 05:06:28.406153 2026] [security2:error] [pid 1018003:tid 1018227] [client 20.151.200.44:65019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/13ede.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3UAAABgQ"]
[Sat Aug 29 05:06:28.410512 2026] [security2:error] [pid 1018003:tid 1018198] [client 20.104.18.15:36798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/key.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3UQAABec"]
[Sat Aug 29 05:06:28.431027 2026] [security2:error] [pid 1018003:tid 1018200] [client 20.48.251.3:61110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/linusadmin-phpinfo.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3UgAABek"]
[Sat Aug 29 05:06:28.438964 2026] [security2:error] [pid 1018003:tid 1018195] [client 20.104.104.62:42722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/mcd.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3UwAABeQ"]
[Sat Aug 29 05:06:28.445651 2026] [security2:error] [pid 1017536:tid 1017745] [client 20.196.209.81:11521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/alfanew.php7"] [unique_id "apK9NCJcY4fy7tP-rU0EzAAAAmM"]
[Sat Aug 29 05:06:28.445954 2026] [security2:error] [pid 1017536:tid 1017686] [client 158.23.147.79:25563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK9NCJcY4fy7tP-rU0EzgAAAig"]
[Sat Aug 29 05:06:28.447951 2026] [security2:error] [pid 1017536:tid 1017753] [client 168.107.94.195:57118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9NCJcY4fy7tP-rU0EzwAAAms"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:28.448815 2026] [security2:error] [pid 1017536:tid 1017778] [client 4.205.62.107:53335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/var/www/wallet/index.php"] [unique_id "apK9NCJcY4fy7tP-rU0E0AAAAoQ"]
[Sat Aug 29 05:06:28.453568 2026] [security2:error] [pid 1018003:tid 1018183] [client 93.123.109.228:49678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK9NDAh5Y1i2tUxg4H3VgAABdg"]
[Sat Aug 29 05:06:28.453852 2026] [security2:error] [pid 1018003:tid 1018245] [client 20.104.104.62:48541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/ahy66.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3VwAABhU"]
[Sat Aug 29 05:06:28.456116 2026] [security2:error] [pid 1018003:tid 1018246] [client 20.104.18.15:7034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/wp-activate.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3WQAABhY"]
[Sat Aug 29 05:06:28.474689 2026] [security2:error] [pid 1018003:tid 1018187] [client 66.248.203.2:21504] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cheerfulmonk.com"] [uri "/2016/09/23/shoe-laces/"] [unique_id "apK9NDAh5Y1i2tUxg4H3WwAABdw"]
[Sat Aug 29 05:06:28.480095 2026] [security2:error] [pid 1018003:tid 1018258] [client 20.220.204.93:59081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/w1px.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3XQAABiI"]
[Sat Aug 29 05:06:28.482160 2026] [security2:error] [pid 1018003:tid 1018266] [client 20.104.18.15:13061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/blog.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3XgAABio"]
[Sat Aug 29 05:06:28.489606 2026] [security2:error] [pid 1018003:tid 1018230] [client 52.139.37.240:14656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/paku.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3XwAABgY"]
[Sat Aug 29 05:06:28.491896 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.151.200.44:46640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/wp-admin/zwso.php"] [unique_id "apK9NCJcY4fy7tP-rU0E1wAAAnk"]
[Sat Aug 29 05:06:28.496551 2026] [security2:error] [pid 1018003:tid 1018261] [client 20.151.200.44:61965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/dbc.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3YAAABiU"]
[Sat Aug 29 05:06:28.507264 2026] [security2:error] [pid 1017536:tid 1017751] [client 20.104.18.15:23461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/wp-safe.php"] [unique_id "apK9NCJcY4fy7tP-rU0E2AAAAmk"]
[Sat Aug 29 05:06:28.508117 2026] [security2:error] [pid 1018003:tid 1018255] [client 20.104.18.15:8108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/h2.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3YQAABh8"]
[Sat Aug 29 05:06:28.512370 2026] [security2:error] [pid 1017536:tid 1017696] [client 93.123.109.228:49732] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK9NCJcY4fy7tP-rU0E2gAAAjI"]
[Sat Aug 29 05:06:28.531268 2026] [security2:error] [pid 1018003:tid 1018185] [client 20.104.104.62:43014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/X7T6.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3ZQAABdo"]
[Sat Aug 29 05:06:28.539957 2026] [security2:error] [pid 1017536:tid 1017681] [client 20.220.204.93:63169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/lkui.php"] [unique_id "apK9NCJcY4fy7tP-rU0E3gAAAiM"]
[Sat Aug 29 05:06:28.546602 2026] [security2:error] [pid 1017536:tid 1017793] [client 20.104.18.15:36699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/wp_blog_footer.php"] [unique_id "apK9NCJcY4fy7tP-rU0E4wAAApM"]
[Sat Aug 29 05:06:28.547629 2026] [security2:error] [pid 1017536:tid 1017780] [client 93.123.109.228:49766] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(\\\\/\\\\*\\\\!? ?(?:select|grant|delete|insert|drop|alter|replace|truncate|update|create|rename|describe|union|concat|group_concat))" at REQUEST_FILENAME. [file "/opt/mod_security/hg_rules.conf"] [line "1019"] [id "9000042"] [rev "2.2.2"] [msg "SQL Comment Sequence Detected."] [data "/*update"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/*update.cgi*"] [unique_id "apK9NCJcY4fy7tP-rU0E4gAAAoY"]
[Sat Aug 29 05:06:28.550786 2026] [autoindex:error] [pid 1017536:tid 1017694] [client 52.139.37.240:31166] AH01276: Cannot serve directory /home4/swumccom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:06:28.552492 2026] [security2:error] [pid 1018003:tid 1018191] [client 20.104.18.15:36623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/chosen.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3ZwAABeA"]
[Sat Aug 29 05:06:28.557504 2026] [security2:error] [pid 1018003:tid 1018217] [client 20.48.250.41:25433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/ccs.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3aAAABfo"]
[Sat Aug 29 05:06:28.559986 2026] [security2:error] [pid 1017536:tid 1017752] [client 20.48.251.3:61117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/app/Models/Hrm/Employee.php"] [unique_id "apK9NCJcY4fy7tP-rU0E5gAAAmo"]
[Sat Aug 29 05:06:28.563049 2026] [security2:error] [pid 1017536:tid 1017680] [client 20.151.200.44:64994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/k8.php"] [unique_id "apK9NCJcY4fy7tP-rU0E5wAAAiI"]
[Sat Aug 29 05:06:28.569574 2026] [security2:error] [pid 1017536:tid 1017790] [client 20.104.104.62:64712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/.well-known/wso.php"] [unique_id "apK9NCJcY4fy7tP-rU0E6QAAApA"]
[Sat Aug 29 05:06:28.570260 2026] [security2:error] [pid 1018003:tid 1018267] [client 4.205.62.107:56049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/asa.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3aQAABis"]
[Sat Aug 29 05:06:28.580309 2026] [security2:error] [pid 1018003:tid 1018226] [client 20.52.41.200:1197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-admin/index.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3agAABgM"]
[Sat Aug 29 05:06:28.582977 2026] [security2:error] [pid 1017536:tid 1017749] [client 68.155.159.216:52834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK9NCJcY4fy7tP-rU0E6gAAAmc"]
[Sat Aug 29 05:06:28.589680 2026] [security2:error] [pid 1018003:tid 1018179] [client 20.104.104.62:60455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/waw.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3awAABdQ"]
[Sat Aug 29 05:06:28.595632 2026] [security2:error] [pid 1017536:tid 1017734] [client 20.104.104.62:48627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/gaje.php"] [unique_id "apK9NCJcY4fy7tP-rU0E7QAAAlg"]
[Sat Aug 29 05:06:28.597186 2026] [security2:error] [pid 1017536:tid 1017736] [client 68.155.159.216:18326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/radio.php"] [unique_id "apK9NCJcY4fy7tP-rU0E7gAAAlo"]
[Sat Aug 29 05:06:28.602765 2026] [security2:error] [pid 1017536:tid 1017687] [client 68.155.159.216:16320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/install.php"] [unique_id "apK9NCJcY4fy7tP-rU0E8AAAAik"]
[Sat Aug 29 05:06:28.614350 2026] [security2:error] [pid 1017536:tid 1017753] [client 52.139.37.240:31166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/wp-content/155.php"] [unique_id "apK9NCJcY4fy7tP-rU0E9QAAAms"]
[Sat Aug 29 05:06:28.623475 2026] [security2:error] [pid 1017536:tid 1017710] [client 20.104.18.15:7163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/wp-trackback.php"] [unique_id "apK9NCJcY4fy7tP-rU0E9wAAAkA"]
[Sat Aug 29 05:06:28.648197 2026] [security2:error] [pid 1017536:tid 1017696] [client 93.123.109.228:49804] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/.env"] [unique_id "apK9NCJcY4fy7tP-rU0E_AAAAjI"]
[Sat Aug 29 05:06:28.655149 2026] [security2:error] [pid 1017536:tid 1017683] [client 93.123.109.228:49818] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/laravel/app/.env"] [unique_id "apK9NCJcY4fy7tP-rU0E_QAAAiU"]
[Sat Aug 29 05:06:28.655327 2026] [security2:error] [pid 1017536:tid 1017706] [client 20.104.18.15:13270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/wp-admin/js/wp-load.php"] [unique_id "apK9NCJcY4fy7tP-rU0E_gAAAjw"]
[Sat Aug 29 05:06:28.658013 2026] [security2:error] [pid 1018003:tid 1018163] [client 158.23.147.79:50174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/bk/index.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3cgAABcQ"]
[Sat Aug 29 05:06:28.659921 2026] [security2:error] [pid 1017536:tid 1017695] [client 20.104.18.15:23434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/gjewuagf.php"] [unique_id "apK9NCJcY4fy7tP-rU0FAAAAAjE"]
[Sat Aug 29 05:06:28.678962 2026] [security2:error] [pid 1018003:tid 1018240] [client 20.104.18.15:36608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/sushi.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3cwAABhA"]
[Sat Aug 29 05:06:28.680397 2026] [security2:error] [pid 1018003:tid 1018225] [client 20.104.18.15:8015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/wp-content/mod/adminfuns.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3dAAABgI"]
[Sat Aug 29 05:06:28.680455 2026] [security2:error] [pid 1018003:tid 1018186] [client 20.220.204.93:52304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/to.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3dQAABds"]
[Sat Aug 29 05:06:28.686720 2026] [security2:error] [pid 1017536:tid 1017731] [client 20.48.251.3:3144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/agg.php"] [unique_id "apK9NCJcY4fy7tP-rU0FBAAAAlU"]
[Sat Aug 29 05:06:28.687998 2026] [security2:error] [pid 1017536:tid 1017778] [client 52.139.37.240:14471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/rtx.php"] [unique_id "apK9NCJcY4fy7tP-rU0FBQAAAoQ"]
[Sat Aug 29 05:06:28.703273 2026] [security2:error] [pid 1018003:tid 1018167] [client 20.48.250.41:25281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/mar.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3dwAABcg"]
[Sat Aug 29 05:06:28.724171 2026] [security2:error] [pid 1018003:tid 1018199] [client 93.123.109.228:49724] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK9NDAh5Y1i2tUxg4H3eAAABeg"]
[Sat Aug 29 05:06:28.729482 2026] [security2:error] [pid 1017536:tid 1017674] [client 20.104.104.62:64645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/see.php"] [unique_id "apK9NCJcY4fy7tP-rU0FCgAAAhw"]
[Sat Aug 29 05:06:28.744289 2026] [security2:error] [pid 1018003:tid 1018206] [client 158.158.54.35:2893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/css.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3ewAABe8"]
[Sat Aug 29 05:06:28.745495 2026] [security2:error] [pid 1017536:tid 1017734] [client 20.104.18.15:36627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/file1221.php"] [unique_id "apK9NCJcY4fy7tP-rU0FDQAAAlg"]
[Sat Aug 29 05:06:28.752113 2026] [security2:error] [pid 1017536:tid 1017761] [client 20.104.104.62:48682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/wp-admin/zwso.php"] [unique_id "apK9NCJcY4fy7tP-rU0FDgAAAnM"]
[Sat Aug 29 05:06:28.758382 2026] [security2:error] [pid 1017536:tid 1017669] [client 136.107.231.130:5982] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "alanmossman.mossmanphoto.com"] [uri "/cgi-sys/404.html"] [unique_id "apK9NCJcY4fy7tP-rU0FDwAAAhc"]
[Sat Aug 29 05:06:28.759508 2026] [security2:error] [pid 1018003:tid 1018175] [client 20.104.104.62:52084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/x23.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3fAAABdA"]
[Sat Aug 29 05:06:28.761141 2026] [security2:error] [pid 1017536:tid 1017707] [client 40.83.93.50:1757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-admin/setup-config.php"] [unique_id "apK9NCJcY4fy7tP-rU0FEAAAAj0"]
[Sat Aug 29 05:06:28.767919 2026] [security2:error] [pid 1017536:tid 1017729] [client 136.107.231.130:5978] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "alanmossman.mossmanphoto.com"] [uri "/@fs/var/www/html/wp-config.php"] [unique_id "apK9NCJcY4fy7tP-rU0FEgAAAlM"]
[Sat Aug 29 05:06:28.768044 2026] [security2:error] [pid 1017536:tid 1017729] [client 136.107.231.130:5978] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "alanmossman.mossmanphoto.com"] [uri "/@fs/var/www/html/wp-config.php"] [unique_id "apK9NCJcY4fy7tP-rU0FEgAAAlM"]
[Sat Aug 29 05:06:28.774118 2026] [security2:error] [pid 1018003:tid 1018188] [client 68.155.159.216:50371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-blog-header.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3gAAABd0"]
[Sat Aug 29 05:06:28.774529 2026] [security2:error] [pid 1018003:tid 1018160] [client 136.107.231.130:5976] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/@fs/root/.ssh/id_rsa"] [unique_id "apK9NDAh5Y1i2tUxg4H3fgAABcE"]
[Sat Aug 29 05:06:28.774599 2026] [security2:error] [pid 1018003:tid 1018169] [client 93.123.109.228:49842] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/.env.backup"] [unique_id "apK9NDAh5Y1i2tUxg4H3fwAABco"]
[Sat Aug 29 05:06:28.777233 2026] [security2:error] [pid 1018003:tid 1018160] [client 93.123.109.228:49858] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/.env.bak"] [unique_id "apK9NDAh5Y1i2tUxg4H3ggAABcE"]
[Sat Aug 29 05:06:28.784541 2026] [security2:error] [pid 1018003:tid 1018266] [client 20.104.18.15:13205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/robot.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3gwAABio"]
[Sat Aug 29 05:06:28.789497 2026] [security2:error] [pid 1017536:tid 1017748] [client 20.104.49.130:36301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.carlosmua.com"] [uri "/init.php"] [unique_id "apK9NCJcY4fy7tP-rU0FFgAAAmY"]
[Sat Aug 29 05:06:28.791394 2026] [security2:error] [pid 1017536:tid 1017712] [client 136.107.231.130:6044] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "alanmossman.mossmanphoto.com"] [uri "/cgi-sys/404.html"] [unique_id "apK9NCJcY4fy7tP-rU0FFAAAAkI"]
[Sat Aug 29 05:06:28.794626 2026] [core:error] [pid 1017536:tid 1017673] [client 136.107.231.130:6016] AH10244: invalid URI path (/@fs/../../../../../root/.env?raw??)
[Sat Aug 29 05:06:28.803112 2026] [security2:error] [pid 1018003:tid 1018261] [client 20.104.18.15:6988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/pri.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3iQAABiU"]
[Sat Aug 29 05:06:28.806320 2026] [security2:error] [pid 1017536:tid 1017765] [client 20.104.18.15:23488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/tnglzqmv.php"] [unique_id "apK9NCJcY4fy7tP-rU0FIgAAAnc"]
[Sat Aug 29 05:06:28.807015 2026] [security2:error] [pid 1017536:tid 1017706] [client 136.107.231.130:6212] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "alanmossman.mossmanphoto.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2fproc/self/environ"] [unique_id "apK9NCJcY4fy7tP-rU0FJAAAAjw"]
[Sat Aug 29 05:06:28.808758 2026] [security2:error] [pid 1017536:tid 1017793] [client 136.107.231.130:6078] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "alanmossman.mossmanphoto.com"] [uri "/cgi-sys/404.html"] [unique_id "apK9NCJcY4fy7tP-rU0FHQAAApM"]
[Sat Aug 29 05:06:28.810765 2026] [security2:error] [pid 1017536:tid 1017713] [client 136.107.231.130:6004] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "alanmossman.mossmanphoto.com"] [uri "/@fs/../../../../../proc/self/environ"] [unique_id "apK9NCJcY4fy7tP-rU0FJwAAAkM"]
[Sat Aug 29 05:06:28.816557 2026] [security2:error] [pid 1018003:tid 1018224] [client 158.23.147.79:32766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/asd.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3jwAABgE"]
[Sat Aug 29 05:06:28.817164 2026] [core:error] [pid 1017536:tid 1017683] [client 136.107.231.130:6032] AH10244: invalid URI path (/@fs/../../../../../app/.env?raw??)
[Sat Aug 29 05:06:28.817661 2026] [security2:error] [pid 1017536:tid 1017778] [client 52.139.37.240:31108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/wp-update.php"] [unique_id "apK9NCJcY4fy7tP-rU0FLAAAAoQ"]
[Sat Aug 29 05:06:28.818625 2026] [security2:error] [pid 1017536:tid 1017785] [client 20.48.251.3:61118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/requirements.php"] [unique_id "apK9NCJcY4fy7tP-rU0FLQAAAos"]
[Sat Aug 29 05:06:28.823330 2026] [security2:error] [pid 1017536:tid 1017776] [client 136.107.231.130:6222] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "alanmossman.mossmanphoto.com"] [uri "/cgi-sys/404.html"] [unique_id "apK9NCJcY4fy7tP-rU0FLgAAAoI"]
[Sat Aug 29 05:06:28.829119 2026] [security2:error] [pid 1017536:tid 1017686] [client 20.220.204.93:62590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "apK9NCJcY4fy7tP-rU0FMQAAAig"]
[Sat Aug 29 05:06:28.829216 2026] [security2:error] [pid 1017536:tid 1017707] [client 168.107.94.195:57514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9NCJcY4fy7tP-rU0FMgAAAj0"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:28.835167 2026] [security2:error] [pid 1017536:tid 1017711] [client 20.104.18.15:36795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/manga.php"] [unique_id "apK9NCJcY4fy7tP-rU0FMwAAAkE"]
[Sat Aug 29 05:06:28.840065 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.104.18.15:8103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/sao.php"] [unique_id "apK9NCJcY4fy7tP-rU0FNAAAAlY"]
[Sat Aug 29 05:06:28.842948 2026] [security2:error] [pid 1017536:tid 1017678] [client 20.104.104.62:40195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/.well-known/java.php"] [unique_id "apK9NCJcY4fy7tP-rU0FNQAAAiA"]
[Sat Aug 29 05:06:28.856507 2026] [security2:error] [pid 1017536:tid 1017757] [client 68.155.159.216:49195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/file.php"] [unique_id "apK9NCJcY4fy7tP-rU0FOAAAAm8"]
[Sat Aug 29 05:06:28.889716 2026] [security2:error] [pid 1017536:tid 1017745] [client 52.139.37.240:14521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/update/da222.php"] [unique_id "apK9NCJcY4fy7tP-rU0FOwAAAmM"]
[Sat Aug 29 05:06:28.889753 2026] [security2:error] [pid 1018003:tid 1018180] [client 20.196.209.81:11752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/xmlrpc.php0"] [unique_id "apK9NDAh5Y1i2tUxg4H3kQAABdU"]
[Sat Aug 29 05:06:28.891597 2026] [security2:error] [pid 1017536:tid 1017696] [client 20.104.104.62:48496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/Contrller.php"] [unique_id "apK9NCJcY4fy7tP-rU0FPAAAAjI"]
[Sat Aug 29 05:06:28.894622 2026] [security2:error] [pid 1017536:tid 1017706] [client 20.48.250.41:25525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/ccu.php"] [unique_id "apK9NCJcY4fy7tP-rU0FPgAAAjw"]
[Sat Aug 29 05:06:28.947626 2026] [security2:error] [pid 1018003:tid 1018267] [client 93.123.109.228:49858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/.env.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3lwAABis"]
[Sat Aug 29 05:06:28.949736 2026] [security2:error] [pid 1018003:tid 1018271] [client 93.123.109.228:49842] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/.env.old"] [unique_id "apK9NDAh5Y1i2tUxg4H3lgAABi8"]
[Sat Aug 29 05:06:28.950182 2026] [security2:error] [pid 1017536:tid 1017778] [client 20.48.251.3:61064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/var/www/wallet/index.php"] [unique_id "apK9NCJcY4fy7tP-rU0FRQAAAoQ"]
[Sat Aug 29 05:06:28.959928 2026] [security2:error] [pid 1017536:tid 1017769] [client 20.104.18.15:7074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/wp_blog_footer.php"] [unique_id "apK9NCJcY4fy7tP-rU0FRgAAAns"]
[Sat Aug 29 05:06:28.961188 2026] [security2:error] [pid 1018003:tid 1018236] [client 20.104.18.15:36688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/nox.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3mQAABgw"]
[Sat Aug 29 05:06:28.963279 2026] [security2:error] [pid 1018003:tid 1018233] [client 20.104.18.15:13165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/revo.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3mwAABgk"]
[Sat Aug 29 05:06:28.970316 2026] [security2:error] [pid 1018003:tid 1018273] [client 20.104.18.15:23485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/wefile.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3nQAABjE"]
[Sat Aug 29 05:06:28.974694 2026] [security2:error] [pid 1018003:tid 1018153] [client 20.104.104.62:52089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/ws66.php"] [unique_id "apK9NDAh5Y1i2tUxg4H3ngAABbo"]
[Sat Aug 29 05:06:28.988394 2026] [security2:error] [pid 1017536:tid 1017786] [client 20.104.49.130:34547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/dehnl.php"] [unique_id "apK9NCJcY4fy7tP-rU0FRwAAAow"]
[Sat Aug 29 05:06:28.991038 2026] [security2:error] [pid 1017536:tid 1017709] [client 20.104.18.15:8098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/dapa.php"] [unique_id "apK9NCJcY4fy7tP-rU0FSQAAAj8"]
[Sat Aug 29 05:06:29.003518 2026] [security2:error] [pid 1017536:tid 1017704] [client 20.104.104.62:64652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/horeg.php"] [unique_id "apK9NSJcY4fy7tP-rU0FTwAAAjo"]
[Sat Aug 29 05:06:29.010069 2026] [security2:error] [pid 1017536:tid 1017711] [client 20.220.204.93:59009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/thui.php"] [unique_id "apK9NSJcY4fy7tP-rU0FUAAAAkE"]
[Sat Aug 29 05:06:29.014423 2026] [security2:error] [pid 1017536:tid 1017694] [client 52.139.37.240:31042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/xmrlpc.php"] [unique_id "apK9NSJcY4fy7tP-rU0FUQAAAjA"]
[Sat Aug 29 05:06:29.023957 2026] [security2:error] [pid 1018003:tid 1018182] [client 68.155.159.216:30658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK9NTAh5Y1i2tUxg4H3ogAABdc"]
[Sat Aug 29 05:06:29.031014 2026] [security2:error] [pid 1017536:tid 1017673] [client 20.104.18.15:36780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/asdfghj.php"] [unique_id "apK9NSJcY4fy7tP-rU0FVAAAAhs"]
[Sat Aug 29 05:06:29.034064 2026] [security2:error] [pid 1018003:tid 1018184] [client 20.52.41.200:1790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/radio.php"] [unique_id "apK9NTAh5Y1i2tUxg4H3pAAABdk"]
[Sat Aug 29 05:06:29.037461 2026] [security2:error] [pid 1018003:tid 1018259] [client 93.123.109.228:49564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/.wp-config.php.swp"] [unique_id "apK9NTAh5Y1i2tUxg4H3pQAABiM"]
[Sat Aug 29 05:06:29.040109 2026] [security2:error] [pid 1018003:tid 1018167] [client 93.123.109.228:49724] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/.env.swp"] [unique_id "apK9NTAh5Y1i2tUxg4H3pgAABcg"]
[Sat Aug 29 05:06:29.052510 2026] [security2:error] [pid 1017536:tid 1017681] [client 68.155.159.216:51900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK9NSJcY4fy7tP-rU0FVQAAAiM"]
[Sat Aug 29 05:06:29.064889 2026] [security2:error] [pid 1017536:tid 1017696] [client 20.104.104.62:48677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/Zeiss.php"] [unique_id "apK9NSJcY4fy7tP-rU0FWAAAAjI"]
[Sat Aug 29 05:06:29.074816 2026] [security2:error] [pid 1018003:tid 1018156] [client 20.151.200.44:46653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/Contrller.php"] [unique_id "apK9NTAh5Y1i2tUxg4H3pwAABb0"]
[Sat Aug 29 05:06:29.077425 2026] [security2:error] [pid 1017536:tid 1017793] [client 20.48.251.3:62083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/124.php"] [unique_id "apK9NSJcY4fy7tP-rU0FWgAAApM"]
[Sat Aug 29 05:06:29.086025 2026] [security2:error] [pid 1017536:tid 1017695] [client 158.23.147.79:30559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK9NSJcY4fy7tP-rU0FWwAAAjE"]
[Sat Aug 29 05:06:29.090509 2026] [security2:error] [pid 1018003:tid 1018199] [client 93.123.109.228:49744] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/.env~"] [unique_id "apK9NTAh5Y1i2tUxg4H3qAAABeg"]
[Sat Aug 29 05:06:29.094620 2026] [security2:error] [pid 1018003:tid 1018198] [client 20.104.18.15:7021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/sushi.php"] [unique_id "apK9NTAh5Y1i2tUxg4H3qQAABec"]
[Sat Aug 29 05:06:29.104303 2026] [security2:error] [pid 1017536:tid 1017710] [client 20.104.18.15:36642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/akismet.php"] [unique_id "apK9NSJcY4fy7tP-rU0FXgAAAkA"]
[Sat Aug 29 05:06:29.110199 2026] [security2:error] [pid 1018003:tid 1018276] [client 20.104.18.15:23413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/blog.php"] [unique_id "apK9NTAh5Y1i2tUxg4H3rAAABjQ"]
[Sat Aug 29 05:06:29.113632 2026] [security2:error] [pid 1018003:tid 1018213] [client 158.23.147.79:26577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/file.php"] [unique_id "apK9NTAh5Y1i2tUxg4H3rQAABfY"]
[Sat Aug 29 05:06:29.125796 2026] [security2:error] [pid 1017536:tid 1017698] [client 93.123.109.228:49580] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/ADMIN/.env"] [unique_id "apK9NSJcY4fy7tP-rU0FYgAAAjQ"]
[Sat Aug 29 05:06:29.137202 2026] [security2:error] [pid 1017536:tid 1017786] [client 20.104.104.62:42735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/Cok.php"] [unique_id "apK9NSJcY4fy7tP-rU0FZAAAAow"]
[Sat Aug 29 05:06:29.148150 2026] [security2:error] [pid 1018003:tid 1018183] [client 20.104.18.15:13117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/birrs.php"] [unique_id "apK9NTAh5Y1i2tUxg4H3rwAABdg"]
[Sat Aug 29 05:06:29.151230 2026] [security2:error] [pid 1017536:tid 1017704] [client 158.23.147.79:24566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK9NSJcY4fy7tP-rU0FZgAAAjo"]
[Sat Aug 29 05:06:29.161639 2026] [security2:error] [pid 1017536:tid 1017711] [client 93.123.109.228:49540] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/API/.env"] [unique_id "apK9NSJcY4fy7tP-rU0FZwAAAkE"]
[Sat Aug 29 05:06:29.161839 2026] [security2:error] [pid 1018003:tid 1018175] [client 4.205.62.107:22213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/maxro.php"] [unique_id "apK9NTAh5Y1i2tUxg4H3sgAABdA"]
[Sat Aug 29 05:06:29.161841 2026] [security2:error] [pid 1018003:tid 1018246] [client 20.48.250.41:25533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/ak.php"] [unique_id "apK9NTAh5Y1i2tUxg4H3sQAABhY"]
[Sat Aug 29 05:06:29.162983 2026] [security2:error] [pid 1018003:tid 1018202] [client 20.104.18.15:8100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/wp-content/l.php"] [unique_id "apK9NTAh5Y1i2tUxg4H3swAABes"]
[Sat Aug 29 05:06:29.167726 2026] [security2:error] [pid 1017536:tid 1017694] [client 52.139.37.240:15262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/wp-admin/min.php"] [unique_id "apK9NSJcY4fy7tP-rU0FaQAAAjA"]
[Sat Aug 29 05:06:29.168956 2026] [security2:error] [pid 1018003:tid 1018268] [client 20.220.204.93:52340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/Jcrop.php"] [unique_id "apK9NTAh5Y1i2tUxg4H3twAABiw"]
[Sat Aug 29 05:06:29.170172 2026] [security2:error] [pid 1017536:tid 1017707] [client 158.23.147.79:62657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/goat1.php"] [unique_id "apK9NSJcY4fy7tP-rU0FagAAAj0"]
[Sat Aug 29 05:06:29.170551 2026] [core:error] [pid 1018003:tid 1018082] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.170740 2026] [core:error] [pid 1018003:tid 1018071] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.202602 2026] [security2:error] [pid 1017536:tid 1017740] [client 20.220.204.93:63857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/motu.php"] [unique_id "apK9NSJcY4fy7tP-rU0FbgAAAl4"]
[Sat Aug 29 05:06:29.208775 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.104.18.15:36827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/dragonshell.php"] [unique_id "apK9NSJcY4fy7tP-rU0FbwAAAnk"]
[Sat Aug 29 05:06:29.209740 2026] [security2:error] [pid 1018003:tid 1018172] [client 4.205.62.107:22350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/wp-blog.php"] [unique_id "apK9NTAh5Y1i2tUxg4H3vAAABc0"]
[Sat Aug 29 05:06:29.210836 2026] [security2:error] [pid 1018003:tid 1018261] [client 168.107.94.195:58068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9NTAh5Y1i2tUxg4H3vQAABiU"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:29.212552 2026] [security2:error] [pid 1018003:tid 1018195] [client 52.139.37.240:31623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/about/function.php"] [unique_id "apK9NTAh5Y1i2tUxg4H3vgAABeQ"]
[Sat Aug 29 05:06:29.216060 2026] [security2:error] [pid 1017536:tid 1017788] [client 20.48.251.3:3137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/test1.php"] [unique_id "apK9NSJcY4fy7tP-rU0FcAAAAo4"]
[Sat Aug 29 05:06:29.224290 2026] [core:error] [pid 1017536:tid 1017706] [client 158.158.54.35:11367] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.224308 2026] [core:error] [pid 1017536:tid 1017706] [client 158.158.54.35:11367] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.229897 2026] [security2:error] [pid 1017536:tid 1017672] [client 40.83.93.50:1753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-admin/system.php"] [unique_id "apK9NSJcY4fy7tP-rU0FcwAAAho"]
[Sat Aug 29 05:06:29.236765 2026] [core:error] [pid 1018003:tid 1018031] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.236781 2026] [core:error] [pid 1018003:tid 1018031] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.237081 2026] [security2:error] [pid 1018003:tid 1018238] [client 93.123.109.228:49744] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.bak"] [unique_id "apK9NTAh5Y1i2tUxg4H3wgAABg4"]
[Sat Aug 29 05:06:29.238245 2026] [core:error] [pid 1018003:tid 1018135] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.238261 2026] [core:error] [pid 1018003:tid 1018135] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.239109 2026] [core:error] [pid 1018003:tid 1018046] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.239375 2026] [core:error] [pid 1018003:tid 1018035] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.243137 2026] [security2:error] [pid 1017536:tid 1017752] [client 158.23.147.79:54376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/NewFile.php/"] [unique_id "apK9NSJcY4fy7tP-rU0FdAAAAmo"]
[Sat Aug 29 05:06:29.248973 2026] [security2:error] [pid 1017536:tid 1017695] [client 20.104.104.62:48499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/ww2.php"] [unique_id "apK9NSJcY4fy7tP-rU0FdwAAAjE"]
[Sat Aug 29 05:06:29.255806 2026] [security2:error] [pid 1018003:tid 1018170] [client 20.104.18.15:23469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/wp-admin/js/wp-load.php"] [unique_id "apK9NTAh5Y1i2tUxg4H3xQAABcs"]
[Sat Aug 29 05:06:29.259888 2026] [security2:error] [pid 1017536:tid 1017734] [client 93.123.109.228:49652] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/APP/.env"] [unique_id "apK9NSJcY4fy7tP-rU0FeQAAAlg"]
[Sat Aug 29 05:06:29.260156 2026] [security2:error] [pid 1018003:tid 1018157] [client 93.123.109.228:49664] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.old"] [unique_id "apK9NTAh5Y1i2tUxg4H3xgAABb4"]
[Sat Aug 29 05:06:29.261724 2026] [security2:error] [pid 1017536:tid 1017773] [client 93.123.109.228:49782] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config~"] [unique_id "apK9NSJcY4fy7tP-rU0FegAAAn8"]
[Sat Aug 29 05:06:29.262757 2026] [security2:error] [pid 1018003:tid 1018270] [client 20.104.104.62:56347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/basic.php"] [unique_id "apK9NTAh5Y1i2tUxg4H3xwAABi4"]
[Sat Aug 29 05:06:29.266996 2026] [security2:error] [pid 1018003:tid 1018191] [client 20.104.18.15:7160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/manga.php"] [unique_id "apK9NTAh5Y1i2tUxg4H3yAAABeA"]
[Sat Aug 29 05:06:29.268635 2026] [security2:error] [pid 1018003:tid 1018180] [client 4.205.62.107:65468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/infos.php"] [unique_id "apK9NTAh5Y1i2tUxg4H3yQAABdU"]
[Sat Aug 29 05:06:29.276567 2026] [security2:error] [pid 1017536:tid 1017704] [client 93.123.109.228:49548] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/Api/.env"] [unique_id "apK9NSJcY4fy7tP-rU0FewAAAjo"]
[Sat Aug 29 05:06:29.282641 2026] [security2:error] [pid 1018003:tid 1018217] [client 20.151.200.44:47338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/Zeiss.php"] [unique_id "apK9NTAh5Y1i2tUxg4H3ywAABfo"]
[Sat Aug 29 05:06:29.286549 2026] [security2:error] [pid 1017536:tid 1017694] [client 68.155.159.216:33764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK9NSJcY4fy7tP-rU0FfQAAAjA"]
[Sat Aug 29 05:06:29.290168 2026] [security2:error] [pid 1017536:tid 1017680] [client 20.104.49.130:60767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/df.php"] [unique_id "apK9NSJcY4fy7tP-rU0FfgAAAiI"]
[Sat Aug 29 05:06:29.292825 2026] [core:error] [pid 1018003:tid 1018025] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.292846 2026] [core:error] [pid 1018003:tid 1018025] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.294501 2026] [security2:error] [pid 1018003:tid 1018236] [client 20.104.18.15:8122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/wp-admin/w.php"] [unique_id "apK9NTAh5Y1i2tUxg4H3zQAABgw"]
[Sat Aug 29 05:06:29.297327 2026] [security2:error] [pid 1017536:tid 1017757] [client 93.123.109.228:49500] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/BACK/.env"] [unique_id "apK9NSJcY4fy7tP-rU0FgAAAAm8"]
[Sat Aug 29 05:06:29.308589 2026] [security2:error] [pid 1018003:tid 1018218] [client 20.151.200.44:65066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/alog.php"] [unique_id "apK9NTAh5Y1i2tUxg4H3zgAABfs"]
[Sat Aug 29 05:06:29.309818 2026] [security2:error] [pid 1018003:tid 1018226] [client 20.220.204.93:59039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/ws58.php"] [unique_id "apK9NTAh5Y1i2tUxg4H30AAABgM"]
[Sat Aug 29 05:06:29.309867 2026] [security2:error] [pid 1018003:tid 1018233] [client 158.23.147.79:30545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apK9NTAh5Y1i2tUxg4H30QAABgk"]
[Sat Aug 29 05:06:29.313548 2026] [core:error] [pid 1018003:tid 1018038] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.313564 2026] [core:error] [pid 1018003:tid 1018038] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.324464 2026] [security2:error] [pid 1018003:tid 1018171] [client 20.48.250.41:25455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/lib.php"] [unique_id "apK9NTAh5Y1i2tUxg4H31AAABcw"]
[Sat Aug 29 05:06:29.326883 2026] [security2:error] [pid 1017536:tid 1017678] [client 93.123.109.228:49540] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/BACKEND/.env"] [unique_id "apK9NSJcY4fy7tP-rU0FgQAAAiA"]
[Sat Aug 29 05:06:29.330110 2026] [security2:error] [pid 1017536:tid 1017740] [client 93.123.109.228:49530] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/BE/.env"] [unique_id "apK9NSJcY4fy7tP-rU0FggAAAl4"]
[Sat Aug 29 05:06:29.334834 2026] [security2:error] [pid 1017536:tid 1017674] [client 20.104.104.62:36930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/X7T6.php"] [unique_id "apK9NSJcY4fy7tP-rU0FhAAAAhw"]
[Sat Aug 29 05:06:29.342214 2026] [security2:error] [pid 1018003:tid 1018225] [client 20.48.251.3:61077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/bigdump.php"] [unique_id "apK9NTAh5Y1i2tUxg4H31gAABgI"]
[Sat Aug 29 05:06:29.343803 2026] [security2:error] [pid 1017536:tid 1017737] [client 20.196.209.81:16754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/content.php"] [unique_id "apK9NSJcY4fy7tP-rU0FhQAAAls"]
[Sat Aug 29 05:06:29.344515 2026] [security2:error] [pid 1018003:tid 1018186] [client 20.104.18.15:13241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/sss.php"] [unique_id "apK9NTAh5Y1i2tUxg4H31wAABds"]
[Sat Aug 29 05:06:29.357473 2026] [core:error] [pid 1018003:tid 1018043] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.357490 2026] [core:error] [pid 1018003:tid 1018043] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.358084 2026] [core:error] [pid 1018003:tid 1018037] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.358098 2026] [core:error] [pid 1018003:tid 1018037] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.358430 2026] [core:error] [pid 1018003:tid 1018102] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.358828 2026] [core:error] [pid 1018003:tid 1018047] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.360041 2026] [security2:error] [pid 1017536:tid 1017672] [client 93.123.109.228:49580] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/Backend/.env"] [unique_id "apK9NSJcY4fy7tP-rU0FiAAAAho"]
[Sat Aug 29 05:06:29.364709 2026] [security2:error] [pid 1018003:tid 1018155] [client 158.23.147.79:48335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/admin.php"] [unique_id "apK9NTAh5Y1i2tUxg4H33QAABbw"]
[Sat Aug 29 05:06:29.364750 2026] [security2:error] [pid 1018003:tid 1018203] [client 52.139.37.240:15259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/wp-admin/wp-fileesx-449.php"] [unique_id "apK9NTAh5Y1i2tUxg4H33gAABew"]
[Sat Aug 29 05:06:29.392078 2026] [security2:error] [pid 1017536:tid 1017781] [client 131.161.79.174:28423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 174.79.161.131.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "michielbon.com"] [uri "/xmlrpc.php"] [unique_id "apK9NSJcY4fy7tP-rU0FjAAAAoc"]
[Sat Aug 29 05:06:29.392217 2026] [security2:error] [pid 1017536:tid 1017781] [client 131.161.79.174:28423] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "michielbon.com"] [uri "/xmlrpc.php"] [unique_id "apK9NSJcY4fy7tP-rU0FjAAAAoc"]
[Sat Aug 29 05:06:29.398965 2026] [security2:error] [pid 1017536:tid 1017705] [client 158.23.147.79:35795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK9NSJcY4fy7tP-rU0FjQAAAjs"]
[Sat Aug 29 05:06:29.404928 2026] [security2:error] [pid 1017536:tid 1017710] [client 20.104.104.62:20645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/images/java.php"] [unique_id "apK9NSJcY4fy7tP-rU0FkQAAAkA"]
[Sat Aug 29 05:06:29.412708 2026] [security2:error] [pid 1017536:tid 1017724] [client 52.139.37.240:31085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/an.php"] [unique_id "apK9NSJcY4fy7tP-rU0FlAAAAk4"]
[Sat Aug 29 05:06:29.419883 2026] [security2:error] [pid 1017536:tid 1017777] [client 20.104.104.62:43008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/monso.php"] [unique_id "apK9NSJcY4fy7tP-rU0FlQAAAoM"]
[Sat Aug 29 05:06:29.420606 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.104.104.62:48757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/anz.php"] [unique_id "apK9NSJcY4fy7tP-rU0FlgAAAh0"]
[Sat Aug 29 05:06:29.425510 2026] [security2:error] [pid 1017536:tid 1017780] [client 93.123.109.228:49652] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/Be/.env"] [unique_id "apK9NSJcY4fy7tP-rU0FlwAAAoY"]
[Sat Aug 29 05:06:29.439203 2026] [security2:error] [pid 1017536:tid 1017773] [client 20.63.81.20:46965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/ffs.php"] [unique_id "apK9NSJcY4fy7tP-rU0FmgAAAn8"]
[Sat Aug 29 05:06:29.446103 2026] [security2:error] [pid 1017536:tid 1017709] [client 20.220.204.93:59102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/xs.php"] [unique_id "apK9NSJcY4fy7tP-rU0FngAAAj8"]
[Sat Aug 29 05:06:29.479188 2026] [security2:error] [pid 1017536:tid 1017694] [client 20.48.251.3:61189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/wdf.php"] [unique_id "apK9NSJcY4fy7tP-rU0FpAAAAjA"]
[Sat Aug 29 05:06:29.486212 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.151.200.44:64880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/wp-wlx.php"] [unique_id "apK9NSJcY4fy7tP-rU0FpwAAAlY"]
[Sat Aug 29 05:06:29.487256 2026] [security2:error] [pid 1018003:tid 1018219] [client 20.52.41.200:1279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/item.php"] [unique_id "apK9NTAh5Y1i2tUxg4H35gAABfw"]
[Sat Aug 29 05:06:29.503277 2026] [security2:error] [pid 1017536:tid 1017681] [client 20.63.81.20:56927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/AxAo.php"] [unique_id "apK9NSJcY4fy7tP-rU0FrQAAAiM"]
[Sat Aug 29 05:06:29.504531 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.220.204.93:64995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/Ov-Simple1.php"] [unique_id "apK9NTAh5Y1i2tUxg4H35wAABcI"]
[Sat Aug 29 05:06:29.515123 2026] [security2:error] [pid 1017536:tid 1017745] [client 20.48.250.41:25521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/wp-style.php"] [unique_id "apK9NSJcY4fy7tP-rU0FrwAAAmM"]
[Sat Aug 29 05:06:29.526786 2026] [security2:error] [pid 1017536:tid 1017689] [client 20.104.104.62:42659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/see.php"] [unique_id "apK9NSJcY4fy7tP-rU0FsQAAAis"]
[Sat Aug 29 05:06:29.548902 2026] [core:error] [pid 1018003:tid 1018052] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.garyandelaine.strangeworx.com
[Sat Aug 29 05:06:29.548926 2026] [core:error] [pid 1018003:tid 1018052] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.garyandelaine.strangeworx.com
[Sat Aug 29 05:06:29.552670 2026] [core:error] [pid 1018003:tid 1018055] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.552689 2026] [core:error] [pid 1018003:tid 1018055] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.552710 2026] [core:error] [pid 1018003:tid 1018054] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.554029 2026] [security2:error] [pid 1017536:tid 1017696] [client 4.205.62.107:22268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/cp2.php"] [unique_id "apK9NSJcY4fy7tP-rU0FtgAAAjI"]
[Sat Aug 29 05:06:29.554762 2026] [core:error] [pid 1018003:tid 1018056] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.554784 2026] [core:error] [pid 1018003:tid 1018056] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.555246 2026] [core:error] [pid 1018003:tid 1018041] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.555257 2026] [core:error] [pid 1018003:tid 1018041] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.557122 2026] [core:error] [pid 1018003:tid 1018044] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.557138 2026] [core:error] [pid 1018003:tid 1018044] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.557447 2026] [core:error] [pid 1018003:tid 1018048] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.560511 2026] [security2:error] [pid 1017536:tid 1017748] [client 52.139.37.240:14524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/wp-content/themes/min.php"] [unique_id "apK9NSJcY4fy7tP-rU0FtwAAAmY"]
[Sat Aug 29 05:06:29.571188 2026] [security2:error] [pid 1017536:tid 1017710] [client 20.63.81.20:46902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/nano.php"] [unique_id "apK9NSJcY4fy7tP-rU0FuQAAAkA"]
[Sat Aug 29 05:06:29.586680 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.104.104.62:56362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/rce.php"] [unique_id "apK9NSJcY4fy7tP-rU0FvAAAAh0"]
[Sat Aug 29 05:06:29.590219 2026] [security2:error] [pid 1017536:tid 1017706] [client 4.205.62.107:8961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/xp.php"] [unique_id "apK9NSJcY4fy7tP-rU0FvQAAAjw"]
[Sat Aug 29 05:06:29.590931 2026] [security2:error] [pid 1017536:tid 1017773] [client 168.107.94.195:58416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9NSJcY4fy7tP-rU0FvgAAAn8"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:29.604390 2026] [security2:error] [pid 1017536:tid 1017691] [client 20.48.251.3:61204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/bb.php"] [unique_id "apK9NSJcY4fy7tP-rU0FwQAAAi0"]
[Sat Aug 29 05:06:29.606524 2026] [security2:error] [pid 1017536:tid 1017707] [client 20.104.104.62:48631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/bge.php"] [unique_id "apK9NSJcY4fy7tP-rU0FwgAAAj0"]
[Sat Aug 29 05:06:29.610474 2026] [security2:error] [pid 1018003:tid 1018248] [client 52.139.37.240:31521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/asw.php"] [unique_id "apK9NTAh5Y1i2tUxg4H39wAABhg"]
[Sat Aug 29 05:06:29.643217 2026] [core:error] [pid 1018003:tid 1018049] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.garyandelaine.strangeworx.com
[Sat Aug 29 05:06:29.643233 2026] [core:error] [pid 1018003:tid 1018049] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.garyandelaine.strangeworx.com
[Sat Aug 29 05:06:29.644970 2026] [security2:error] [pid 1017536:tid 1017786] [client 20.63.81.20:60478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/class17.php"] [unique_id "apK9NSJcY4fy7tP-rU0FxQAAAow"]
[Sat Aug 29 05:06:29.668687 2026] [core:error] [pid 1018003:tid 1018050] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.671533 2026] [core:error] [pid 1018003:tid 1018051] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.671552 2026] [core:error] [pid 1018003:tid 1018051] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.672228 2026] [core:error] [pid 1018003:tid 1018040] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.672240 2026] [core:error] [pid 1018003:tid 1018040] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.673433 2026] [core:error] [pid 1018003:tid 1018050] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.673449 2026] [core:error] [pid 1018003:tid 1018050] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.673812 2026] [core:error] [pid 1018003:tid 1018053] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.673995 2026] [core:error] [pid 1018003:tid 1018057] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.674007 2026] [core:error] [pid 1018003:tid 1018057] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.675022 2026] [core:error] [pid 1018003:tid 1018061] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.677256 2026] [core:error] [pid 1018003:tid 1018072] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.677272 2026] [core:error] [pid 1018003:tid 1018072] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.678500 2026] [security2:error] [pid 1017536:tid 1017776] [client 20.151.200.44:47335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/ww2.php"] [unique_id "apK9NSJcY4fy7tP-rU0FyQAAAoI"]
[Sat Aug 29 05:06:29.681602 2026] [core:error] [pid 1018003:tid 1018060] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.681614 2026] [core:error] [pid 1018003:tid 1018060] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.682986 2026] [core:error] [pid 1018003:tid 1018169] [client 158.158.54.35:20661] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.683001 2026] [core:error] [pid 1018003:tid 1018169] [client 158.158.54.35:20661] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.689545 2026] [security2:error] [pid 1017536:tid 1017729] [client 20.104.104.62:42715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/horeg.php"] [unique_id "apK9NSJcY4fy7tP-rU0FygAAAlM"]
[Sat Aug 29 05:06:29.690952 2026] [security2:error] [pid 1017536:tid 1017743] [client 68.155.159.216:52845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-content/languages/about.php"] [unique_id "apK9NSJcY4fy7tP-rU0FywAAAmE"]
[Sat Aug 29 05:06:29.692993 2026] [security2:error] [pid 1018003:tid 1018162] [client 20.48.250.41:25431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/browse.php"] [unique_id "apK9NTAh5Y1i2tUxg4H4BwAABcM"]
[Sat Aug 29 05:06:29.695635 2026] [core:error] [pid 1018003:tid 1018084] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.695654 2026] [core:error] [pid 1018003:tid 1018084] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.696306 2026] [core:error] [pid 1018003:tid 1018058] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.696315 2026] [core:error] [pid 1018003:tid 1018022] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.696320 2026] [core:error] [pid 1018003:tid 1018058] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.696325 2026] [core:error] [pid 1018003:tid 1018022] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.711774 2026] [security2:error] [pid 1017536:tid 1017683] [client 4.205.62.107:53249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/radio.php"] [unique_id "apK9NSJcY4fy7tP-rU0FzwAAAiU"]
[Sat Aug 29 05:06:29.717181 2026] [core:error] [pid 1018003:tid 1018067] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.garyandelaine.strangeworx.com
[Sat Aug 29 05:06:29.717207 2026] [core:error] [pid 1018003:tid 1018067] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.garyandelaine.strangeworx.com
[Sat Aug 29 05:06:29.717606 2026] [security2:error] [pid 1017536:tid 1017705] [client 40.83.93.50:10119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-admin/test.php"] [unique_id "apK9NSJcY4fy7tP-rU0F0QAAAjs"]
[Sat Aug 29 05:06:29.719889 2026] [security2:error] [pid 1017536:tid 1017765] [client 20.63.81.20:46946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/ano.php"] [unique_id "apK9NSJcY4fy7tP-rU0F0gAAAnc"]
[Sat Aug 29 05:06:29.731486 2026] [security2:error] [pid 1017536:tid 1017746] [client 20.48.251.3:61689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/file59.php"] [unique_id "apK9NSJcY4fy7tP-rU0F0wAAAmQ"]
[Sat Aug 29 05:06:29.748033 2026] [security2:error] [pid 1017536:tid 1017686] [client 68.155.159.216:18314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK9NSJcY4fy7tP-rU0F1gAAAig"]
[Sat Aug 29 05:06:29.754621 2026] [security2:error] [pid 1017536:tid 1017695] [client 20.104.104.62:64720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/js/java.php"] [unique_id "apK9NSJcY4fy7tP-rU0F1wAAAjE"]
[Sat Aug 29 05:06:29.755224 2026] [security2:error] [pid 1017536:tid 1017709] [client 20.104.104.62:48577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/wp-ana.php"] [unique_id "apK9NSJcY4fy7tP-rU0F2AAAAj8"]
[Sat Aug 29 05:06:29.758746 2026] [security2:error] [pid 1017536:tid 1017673] [client 20.104.104.62:4801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/exec.php"] [unique_id "apK9NSJcY4fy7tP-rU0F2QAAAhs"]
[Sat Aug 29 05:06:29.766969 2026] [security2:error] [pid 1017536:tid 1017687] [client 158.23.147.79:50150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spymylink.com"] [uri "/first.php"] [unique_id "apK9NSJcY4fy7tP-rU0F2gAAAik"]
[Sat Aug 29 05:06:29.770957 2026] [security2:error] [pid 1017536:tid 1017704] [client 93.123.109.228:49502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/_profiler/phpinfo.php"] [unique_id "apK9NSJcY4fy7tP-rU0F2wAAAjo"]
[Sat Aug 29 05:06:29.773433 2026] [security2:error] [pid 1018003:tid 1018262] [client 20.63.81.20:56927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/okxoby.php"] [unique_id "apK9NTAh5Y1i2tUxg4H4EQAABiY"]
[Sat Aug 29 05:06:29.774134 2026] [security2:error] [pid 1017536:tid 1017753] [client 52.139.37.240:14947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/wp-content/themes/x/bypass.php"] [unique_id "apK9NSJcY4fy7tP-rU0F3AAAAms"]
[Sat Aug 29 05:06:29.796726 2026] [security2:error] [pid 1017536:tid 1017793] [client 20.151.200.44:64291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/attack.php"] [unique_id "apK9NSJcY4fy7tP-rU0F3wAAApM"]
[Sat Aug 29 05:06:29.802522 2026] [security2:error] [pid 1018003:tid 1018159] [client 20.197.61.180:11610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/post.php"] [unique_id "apK9NTAh5Y1i2tUxg4H4FAAABcA"]
[Sat Aug 29 05:06:29.804205 2026] [security2:error] [pid 1017536:tid 1017737] [client 68.155.159.216:24523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-admin/dropdown.php"] [unique_id "apK9NSJcY4fy7tP-rU0F4gAAAls"]
[Sat Aug 29 05:06:29.807078 2026] [security2:error] [pid 1018003:tid 1018275] [client 20.220.204.93:63827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/wp-blogs.php"] [unique_id "apK9NTAh5Y1i2tUxg4H4FQAABjM"]
[Sat Aug 29 05:06:29.807479 2026] [security2:error] [pid 1017536:tid 1017672] [client 20.196.209.81:4421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/wxo.php"] [unique_id "apK9NSJcY4fy7tP-rU0F4wAAAho"]
[Sat Aug 29 05:06:29.811326 2026] [security2:error] [pid 1017536:tid 1017710] [client 52.139.37.240:31078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/item.php"] [unique_id "apK9NSJcY4fy7tP-rU0F5AAAAkA"]
[Sat Aug 29 05:06:29.814018 2026] [security2:error] [pid 1018003:tid 1018157] [client 20.151.200.44:65031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/adin.php"] [unique_id "apK9NTAh5Y1i2tUxg4H4FgAABb4"]
[Sat Aug 29 05:06:29.849533 2026] [security2:error] [pid 1018003:tid 1018217] [client 20.63.81.20:46863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/mgrr.php"] [unique_id "apK9NTAh5Y1i2tUxg4H4GQAABfo"]
[Sat Aug 29 05:06:29.860825 2026] [security2:error] [pid 1017536:tid 1017777] [client 20.48.251.3:61071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/cli_bootstrap.php"] [unique_id "apK9NSJcY4fy7tP-rU0F7AAAAoM"]
[Sat Aug 29 05:06:29.881068 2026] [security2:error] [pid 1018003:tid 1018226] [client 20.48.250.41:25476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/zoo.php"] [unique_id "apK9NTAh5Y1i2tUxg4H4HAAABgM"]
[Sat Aug 29 05:06:29.882914 2026] [security2:error] [pid 1018003:tid 1018153] [client 68.155.159.216:50248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK9NTAh5Y1i2tUxg4H4HQAABbo"]
[Sat Aug 29 05:06:29.885722 2026] [security2:error] [pid 1018003:tid 1018273] [client 20.104.49.130:30075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/reviall.php"] [unique_id "apK9NTAh5Y1i2tUxg4H4HgAABjE"]
[Sat Aug 29 05:06:29.887403 2026] [security2:error] [pid 1018003:tid 1018171] [client 20.104.104.62:42698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/basic.php"] [unique_id "apK9NTAh5Y1i2tUxg4H4HwAABcw"]
[Sat Aug 29 05:06:29.887449 2026] [security2:error] [pid 1018003:tid 1018174] [client 93.123.109.228:49724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/.wp-config.php.swp"] [unique_id "apK9NTAh5Y1i2tUxg4H4IAAABc8"]
[Sat Aug 29 05:06:29.892732 2026] [security2:error] [pid 1018003:tid 1018233] [client 20.104.49.130:60750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/xmini4.php"] [unique_id "apK9NTAh5Y1i2tUxg4H4IQAABgk"]
[Sat Aug 29 05:06:29.942377 2026] [security2:error] [pid 1017536:tid 1017778] [client 158.23.147.79:32742] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "database.rfsoftware.com"] [uri "/1.php"] [unique_id "apK9NSJcY4fy7tP-rU0F9QAAAoQ"]
[Sat Aug 29 05:06:29.942516 2026] [security2:error] [pid 1017536:tid 1017778] [client 158.23.147.79:32742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/1.php"] [unique_id "apK9NSJcY4fy7tP-rU0F9QAAAoQ"]
[Sat Aug 29 05:06:29.944151 2026] [security2:error] [pid 1018003:tid 1018182] [client 93.123.109.228:49664] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/ADMIN/.env"] [unique_id "apK9NTAh5Y1i2tUxg4H4IwAABdc"]
[Sat Aug 29 05:06:29.944232 2026] [security2:error] [pid 1018003:tid 1018186] [client 93.123.109.228:49744] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/API/.env"] [unique_id "apK9NTAh5Y1i2tUxg4H4JAAABds"]
[Sat Aug 29 05:06:29.945466 2026] [security2:error] [pid 1018003:tid 1018240] [client 20.104.104.62:56341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/dbc.php"] [unique_id "apK9NTAh5Y1i2tUxg4H4JQAABhA"]
[Sat Aug 29 05:06:29.945719 2026] [security2:error] [pid 1017536:tid 1017773] [client 93.123.109.228:49546] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/admin-app/.env"] [unique_id "apK9NSJcY4fy7tP-rU0F9gAAAn8"]
[Sat Aug 29 05:06:29.946264 2026] [security2:error] [pid 1017536:tid 1017678] [client 20.52.41.200:1166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/t.php"] [unique_id "apK9NSJcY4fy7tP-rU0F-AAAAiA"]
[Sat Aug 29 05:06:29.951198 2026] [security2:error] [pid 1017536:tid 1017709] [client 20.104.104.62:48727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/secret.php"] [unique_id "apK9NSJcY4fy7tP-rU0F-gAAAj8"]
[Sat Aug 29 05:06:29.956793 2026] [core:error] [pid 1018003:tid 1018075] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.956814 2026] [core:error] [pid 1018003:tid 1018075] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.964009 2026] [security2:error] [pid 1017536:tid 1017698] [client 68.155.159.216:49189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/file17.php"] [unique_id "apK9NSJcY4fy7tP-rU0F-wAAAjQ"]
[Sat Aug 29 05:06:29.973262 2026] [security2:error] [pid 1018003:tid 1018199] [client 168.107.94.195:58851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9NTAh5Y1i2tUxg4H4KgAABeg"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:29.974518 2026] [security2:error] [pid 1018003:tid 1018190] [client 20.151.200.44:45894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/anz.php"] [unique_id "apK9NTAh5Y1i2tUxg4H4KwAABd8"]
[Sat Aug 29 05:06:29.978045 2026] [security2:error] [pid 1018003:tid 1018198] [client 20.220.204.93:64285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/mini.php"] [unique_id "apK9NTAh5Y1i2tUxg4H4MAAABec"]
[Sat Aug 29 05:06:29.979046 2026] [core:error] [pid 1018003:tid 1018089] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.979066 2026] [core:error] [pid 1018003:tid 1018089] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.980857 2026] [core:error] [pid 1018003:tid 1018070] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.980881 2026] [core:error] [pid 1018003:tid 1018070] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.981636 2026] [core:error] [pid 1018003:tid 1018087] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.981654 2026] [core:error] [pid 1018003:tid 1018087] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.981655 2026] [core:error] [pid 1018003:tid 1018083] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.981662 2026] [core:error] [pid 1018003:tid 1018083] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.981938 2026] [core:error] [pid 1018003:tid 1018146] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.981949 2026] [core:error] [pid 1018003:tid 1018146] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.983133 2026] [core:error] [pid 1018003:tid 1018089] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.983147 2026] [core:error] [pid 1018003:tid 1018089] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.983214 2026] [core:error] [pid 1018003:tid 1018076] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.983224 2026] [core:error] [pid 1018003:tid 1018076] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.984057 2026] [core:error] [pid 1018003:tid 1018092] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.984070 2026] [core:error] [pid 1018003:tid 1018092] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.985189 2026] [core:error] [pid 1018003:tid 1018097] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.985206 2026] [core:error] [pid 1018003:tid 1018097] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.985510 2026] [core:error] [pid 1018003:tid 1018079] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.985524 2026] [core:error] [pid 1018003:tid 1018079] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:29.988991 2026] [security2:error] [pid 1017536:tid 1017753] [client 20.48.251.3:62100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/dd.php"] [unique_id "apK9NSJcY4fy7tP-rU0F_wAAAms"]
[Sat Aug 29 05:06:30.007625 2026] [security2:error] [pid 1018003:tid 1018179] [client 52.139.37.240:31156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/jga.php"] [unique_id "apK9NjAh5Y1i2tUxg4H4OAAABdQ"]
[Sat Aug 29 05:06:30.008380 2026] [core:error] [pid 1018003:tid 1018065] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.008399 2026] [core:error] [pid 1018003:tid 1018065] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.008688 2026] [security2:error] [pid 1017536:tid 1017706] [client 74.7.175.153:59300] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "strangeworxweddingfilms.com"] [uri "/robots.txt"] [unique_id "apK9NSJcY4fy7tP-rU0F9wACPGc"]
[Sat Aug 29 05:06:30.037232 2026] [security2:error] [pid 1018003:tid 1018246] [client 52.139.37.240:15272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK9NjAh5Y1i2tUxg4H4OgAABhY"]
[Sat Aug 29 05:06:30.048018 2026] [security2:error] [pid 1018003:tid 1018268] [client 93.123.109.228:49694] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/APP/.env"] [unique_id "apK9NjAh5Y1i2tUxg4H4OwAABiw"]
[Sat Aug 29 05:06:30.070596 2026] [security2:error] [pid 1017536:tid 1017717] [client 93.123.109.228:49580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/admin/phpinfo.php"] [unique_id "apK9NiJcY4fy7tP-rU0GCAAAAkc"]
[Sat Aug 29 05:06:30.074136 2026] [security2:error] [pid 1017536:tid 1017748] [client 158.23.147.79:25517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/classwithtostring.php"] [unique_id "apK9NiJcY4fy7tP-rU0GCQAAAmY"]
[Sat Aug 29 05:06:30.080859 2026] [security2:error] [pid 1017536:tid 1017776] [client 93.123.109.228:49732] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/Api/.env"] [unique_id "apK9NiJcY4fy7tP-rU0GCgAAAoI"]
[Sat Aug 29 05:06:30.098984 2026] [security2:error] [pid 1018003:tid 1018188] [client 20.104.104.62:64743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-content/f0x.php"] [unique_id "apK9NjAh5Y1i2tUxg4H4PgAABd0"]
[Sat Aug 29 05:06:30.102562 2026] [security2:error] [pid 1018003:tid 1018244] [client 20.104.104.62:56383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/wp-wlx.php"] [unique_id "apK9NjAh5Y1i2tUxg4H4PwAABhQ"]
[Sat Aug 29 05:06:30.103033 2026] [security2:error] [pid 1018003:tid 1018261] [client 20.220.204.93:52336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/zu.php"] [unique_id "apK9NjAh5Y1i2tUxg4H4QAAABiU"]
[Sat Aug 29 05:06:30.108411 2026] [security2:error] [pid 1017536:tid 1017729] [client 20.48.250.41:25470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/elp.php"] [unique_id "apK9NiJcY4fy7tP-rU0GDAAAAlM"]
[Sat Aug 29 05:06:30.108997 2026] [security2:error] [pid 1017536:tid 1017777] [client 20.151.200.44:64389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/sf9.php"] [unique_id "apK9NiJcY4fy7tP-rU0GDgAAAoM"]
[Sat Aug 29 05:06:30.110110 2026] [security2:error] [pid 1017536:tid 1017724] [client 93.123.109.228:49708] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/BACK/.env"] [unique_id "apK9NiJcY4fy7tP-rU0GDQAAAk4"]
[Sat Aug 29 05:06:30.113326 2026] [security2:error] [pid 1018003:tid 1018266] [client 93.123.109.228:49744] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/BACKEND/.env"] [unique_id "apK9NjAh5Y1i2tUxg4H4QQAABio"]
[Sat Aug 29 05:06:30.117382 2026] [security2:error] [pid 1018003:tid 1018172] [client 93.123.109.228:49702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/BE/.env"] [unique_id "apK9NjAh5Y1i2tUxg4H4RgAABc0"]
[Sat Aug 29 05:06:30.119456 2026] [core:error] [pid 1018003:tid 1018090] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.119473 2026] [core:error] [pid 1018003:tid 1018090] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.119519 2026] [core:error] [pid 1018003:tid 1018077] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.119530 2026] [core:error] [pid 1018003:tid 1018077] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.119547 2026] [core:error] [pid 1018003:tid 1018134] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.120636 2026] [core:error] [pid 1018003:tid 1018081] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.120652 2026] [core:error] [pid 1018003:tid 1018081] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.120778 2026] [core:error] [pid 1018003:tid 1018095] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.122993 2026] [security2:error] [pid 1018003:tid 1018248] [client 20.48.251.3:61681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/wp-tem.php"] [unique_id "apK9NjAh5Y1i2tUxg4H4TQAABhg"]
[Sat Aug 29 05:06:30.124265 2026] [core:error] [pid 1018003:tid 1018063] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.124796 2026] [security2:error] [pid 1018003:tid 1018265] [client 158.23.184.117:59583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK9NjAh5Y1i2tUxg4H4TgAABik"]
[Sat Aug 29 05:06:30.125033 2026] [core:error] [pid 1018003:tid 1018090] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.125037 2026] [core:error] [pid 1018003:tid 1018096] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.125049 2026] [core:error] [pid 1018003:tid 1018096] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.125323 2026] [core:error] [pid 1018003:tid 1018074] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.128904 2026] [security2:error] [pid 1017536:tid 1017705] [client 20.104.104.62:48607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/pro.php"] [unique_id "apK9NiJcY4fy7tP-rU0GEAAAAjs"]
[Sat Aug 29 05:06:30.129238 2026] [security2:error] [pid 1018003:tid 1018207] [client 93.123.109.228:49842] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/Backend/.env"] [unique_id "apK9NjAh5Y1i2tUxg4H4TwAABfA"]
[Sat Aug 29 05:06:30.131314 2026] [security2:error] [pid 1017536:tid 1017705] [client 93.123.109.228:49622] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/administrator/.env"] [unique_id "apK9NiJcY4fy7tP-rU0GEQAAAjs"]
[Sat Aug 29 05:06:30.131811 2026] [security2:error] [pid 1018003:tid 1018221] [client 20.151.200.44:62011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/file66.php"] [unique_id "apK9NjAh5Y1i2tUxg4H4UAAABf4"]
[Sat Aug 29 05:06:30.133562 2026] [security2:error] [pid 1018003:tid 1018221] [client 68.155.159.216:30607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK9NjAh5Y1i2tUxg4H4UQAABf4"]
[Sat Aug 29 05:06:30.139941 2026] [core:error] [pid 1018003:tid 1018091] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.139958 2026] [core:error] [pid 1018003:tid 1018091] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.146389 2026] [security2:error] [pid 1018003:tid 1018224] [client 93.123.109.228:49798] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/Be/.env"] [unique_id "apK9NjAh5Y1i2tUxg4H4VAAABgE"]
[Sat Aug 29 05:06:30.149061 2026] [security2:error] [pid 1017536:tid 1017746] [client 93.123.109.228:49528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/admin_phpinfo.php"] [unique_id "apK9NiJcY4fy7tP-rU0GEgAAAmQ"]
[Sat Aug 29 05:06:30.167048 2026] [security2:error] [pid 1018003:tid 1018183] [client 158.158.54.35:7373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/w.php"] [unique_id "apK9NjAh5Y1i2tUxg4H4VgAABdg"]
[Sat Aug 29 05:06:30.174163 2026] [security2:error] [pid 1018003:tid 1018230] [client 68.155.159.216:51434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK9NjAh5Y1i2tUxg4H4VwAABgY"]
[Sat Aug 29 05:06:30.179716 2026] [security2:error] [pid 1018003:tid 1018185] [client 20.151.200.44:47359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/bge.php"] [unique_id "apK9NjAh5Y1i2tUxg4H4WQAABdo"]
[Sat Aug 29 05:06:30.187528 2026] [core:error] [pid 1018003:tid 1018104] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.187758 2026] [security2:error] [pid 1017536:tid 1017673] [client 20.220.204.93:64904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/amp.php"] [unique_id "apK9NiJcY4fy7tP-rU0GGAAAAhs"]
[Sat Aug 29 05:06:30.190809 2026] [core:error] [pid 1018003:tid 1018080] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.202684 2026] [security2:error] [pid 1018003:tid 1018227] [client 52.139.37.240:31111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/mac.php"] [unique_id "apK9NjAh5Y1i2tUxg4H4XgAABgQ"]
[Sat Aug 29 05:06:30.204922 2026] [core:error] [pid 1018003:tid 1018059] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.206699 2026] [security2:error] [pid 1017536:tid 1017696] [client 20.196.209.81:16743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/as.php"] [unique_id "apK9NiJcY4fy7tP-rU0GGgAAAjI"]
[Sat Aug 29 05:06:30.235813 2026] [core:error] [pid 1018003:tid 1018112] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.237070 2026] [security2:error] [pid 1017536:tid 1017778] [client 52.139.37.240:14915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/wp-info.php"] [unique_id "apK9NiJcY4fy7tP-rU0GHgAAAoQ"]
[Sat Aug 29 05:06:30.238161 2026] [core:error] [pid 1018003:tid 1018101] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.244581 2026] [security2:error] [pid 1017536:tid 1017713] [client 93.123.109.228:49868] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/api-backend/.env"] [unique_id "apK9NiJcY4fy7tP-rU0GIAAAAkM"]
[Sat Aug 29 05:06:30.249353 2026] [security2:error] [pid 1017536:tid 1017731] [client 93.123.109.228:49592] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/api-node/.env"] [unique_id "apK9NiJcY4fy7tP-rU0GIQAAAlU"]
[Sat Aug 29 05:06:30.254823 2026] [security2:error] [pid 1017536:tid 1017686] [client 20.48.251.3:3341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/txets.php"] [unique_id "apK9NiJcY4fy7tP-rU0GIgAAAig"]
[Sat Aug 29 05:06:30.254823 2026] [security2:error] [pid 1018003:tid 1018226] [client 20.220.204.93:59068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/lanka.php"] [unique_id "apK9NjAh5Y1i2tUxg4H4ZAAABgM"]
[Sat Aug 29 05:06:30.256923 2026] [core:error] [pid 1018003:tid 1018066] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.267337 2026] [security2:error] [pid 1018003:tid 1018171] [client 20.48.250.41:25494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/666.php"] [unique_id "apK9NjAh5Y1i2tUxg4H4ZwAABcw"]
[Sat Aug 29 05:06:30.268483 2026] [security2:error] [pid 1018003:tid 1018233] [client 158.23.147.79:26378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/file17.php"] [unique_id "apK9NjAh5Y1i2tUxg4H4aAAABgk"]
[Sat Aug 29 05:06:30.271102 2026] [security2:error] [pid 1018003:tid 1018191] [client 158.23.184.117:59549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/.well-known/acme-challenge/sx.php"] [unique_id "apK9NjAh5Y1i2tUxg4H4awAABeA"]
[Sat Aug 29 05:06:30.271113 2026] [security2:error] [pid 1018003:tid 1018259] [client 20.104.104.62:52093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/monso.php"] [unique_id "apK9NjAh5Y1i2tUxg4H4agAABiM"]
[Sat Aug 29 05:06:30.271128 2026] [core:error] [pid 1018003:tid 1018045] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.271141 2026] [core:error] [pid 1018003:tid 1018045] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.273745 2026] [security2:error] [pid 1017536:tid 1017687] [client 93.123.109.228:49540] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/api/.env"] [unique_id "apK9NiJcY4fy7tP-rU0GJQAAAik"]
[Sat Aug 29 05:06:30.285618 2026] [security2:error] [pid 1017536:tid 1017748] [client 158.23.147.79:63828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK9NiJcY4fy7tP-rU0GJwAAAmY"]
[Sat Aug 29 05:06:30.287929 2026] [core:error] [pid 1018003:tid 1018105] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.299975 2026] [security2:error] [pid 1017536:tid 1017776] [client 4.205.62.107:21606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/phina.php"] [unique_id "apK9NiJcY4fy7tP-rU0GKQAAAoI"]
[Sat Aug 29 05:06:30.322668 2026] [security2:error] [pid 1017536:tid 1017770] [client 20.104.104.62:48624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/999.php"] [unique_id "apK9NiJcY4fy7tP-rU0GKwAAAnw"]
[Sat Aug 29 05:06:30.327794 2026] [security2:error] [pid 1018003:tid 1018177] [client 20.104.104.62:64660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/attack.php"] [unique_id "apK9NjAh5Y1i2tUxg4H4dwAABdI"]
[Sat Aug 29 05:06:30.328464 2026] [core:error] [pid 1018003:tid 1018107] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.328481 2026] [core:error] [pid 1018003:tid 1018107] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.331426 2026] [core:error] [pid 1018003:tid 1018093] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.331444 2026] [core:error] [pid 1018003:tid 1018093] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.334783 2026] [security2:error] [pid 1017536:tid 1017786] [client 20.104.49.130:53673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/pfm.php"] [unique_id "apK9NiJcY4fy7tP-rU0GLgAAAow"]
[Sat Aug 29 05:06:30.336731 2026] [security2:error] [pid 1018003:tid 1018179] [client 20.220.204.93:64324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/cc13.php"] [unique_id "apK9NjAh5Y1i2tUxg4H4eAAABdQ"]
[Sat Aug 29 05:06:30.347790 2026] [security2:error] [pid 1017536:tid 1017734] [client 158.23.147.79:37800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/dropdown.php"] [unique_id "apK9NiJcY4fy7tP-rU0GLwAAAlg"]
[Sat Aug 29 05:06:30.351743 2026] [security2:error] [pid 1017536:tid 1017792] [client 4.205.62.107:22454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/update.php"] [unique_id "apK9NiJcY4fy7tP-rU0GMQAAApI"]
[Sat Aug 29 05:06:30.355056 2026] [security2:error] [pid 1017536:tid 1017678] [client 168.107.94.195:59295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9NiJcY4fy7tP-rU0GMwAAAiA"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:30.368511 2026] [security2:error] [pid 1017536:tid 1017696] [client 20.104.104.62:64714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-admin/f0x.php"] [unique_id "apK9NiJcY4fy7tP-rU0GNwAAAjI"]
[Sat Aug 29 05:06:30.382670 2026] [security2:error] [pid 1017536:tid 1017669] [client 20.48.251.3:61063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/time.php"] [unique_id "apK9NiJcY4fy7tP-rU0GPAAAAhc"]
[Sat Aug 29 05:06:30.384423 2026] [security2:error] [pid 1017536:tid 1017749] [client 93.123.109.228:49656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/api/info.php"] [unique_id "apK9NiJcY4fy7tP-rU0GPQAAAmc"]
[Sat Aug 29 05:06:30.389598 2026] [security2:error] [pid 1018003:tid 1018246] [client 20.220.204.93:59032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/gettest.php"] [unique_id "apK9NjAh5Y1i2tUxg4H4fAAABhY"]
[Sat Aug 29 05:06:30.392830 2026] [security2:error] [pid 1018003:tid 1018268] [client 40.83.93.50:1735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-admin/user/f35.php"] [unique_id "apK9NjAh5Y1i2tUxg4H4fQAABiw"]
[Sat Aug 29 05:06:30.396240 2026] [security2:error] [pid 1017536:tid 1017705] [client 52.139.37.240:31622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK9NiJcY4fy7tP-rU0GPwAAAjs"]
[Sat Aug 29 05:06:30.409074 2026] [security2:error] [pid 1017536:tid 1017675] [client 4.205.62.107:65412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/env.php"] [unique_id "apK9NiJcY4fy7tP-rU0GQwAAAh0"]
[Sat Aug 29 05:06:30.414526 2026] [security2:error] [pid 1017536:tid 1017751] [client 20.52.41.200:1177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/i.php"] [unique_id "apK9NiJcY4fy7tP-rU0GRQAAAmk"]
[Sat Aug 29 05:06:30.416729 2026] [security2:error] [pid 1017536:tid 1017781] [client 158.23.184.117:59559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/.well-known/admin.php"] [unique_id "apK9NiJcY4fy7tP-rU0GRgAAAoc"]
[Sat Aug 29 05:06:30.419469 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.151.200.44:65478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/zafir1.php"] [unique_id "apK9NjAh5Y1i2tUxg4H4gAAABcI"]
[Sat Aug 29 05:06:30.433591 2026] [security2:error] [pid 1017536:tid 1017698] [client 52.139.37.240:15255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/wp-wordfence-waf.php"] [unique_id "apK9NiJcY4fy7tP-rU0GSAAAAjQ"]
[Sat Aug 29 05:06:30.437061 2026] [security2:error] [pid 1017536:tid 1017687] [client 20.48.250.41:25514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/knmt.php"] [unique_id "apK9NiJcY4fy7tP-rU0GSgAAAik"]
[Sat Aug 29 05:06:30.440063 2026] [security2:error] [pid 1017536:tid 1017748] [client 20.151.200.44:65080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/lte7.php"] [unique_id "apK9NiJcY4fy7tP-rU0GSwAAAmY"]
[Sat Aug 29 05:06:30.447509 2026] [security2:error] [pid 1017536:tid 1017717] [client 158.23.147.79:30464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/cong.php"] [unique_id "apK9NiJcY4fy7tP-rU0GTQAAAkc"]
[Sat Aug 29 05:06:30.455059 2026] [security2:error] [pid 1018003:tid 1018266] [client 20.104.104.62:36968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/rce.php"] [unique_id "apK9NjAh5Y1i2tUxg4H4hAAABio"]
[Sat Aug 29 05:06:30.464535 2026] [security2:error] [pid 1018003:tid 1018248] [client 93.123.109.228:49842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK9NjAh5Y1i2tUxg4H4hgAABhg"]
[Sat Aug 29 05:06:30.470275 2026] [security2:error] [pid 1018003:tid 1018267] [client 158.23.147.79:48303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-admin/admin.php"] [unique_id "apK9NjAh5Y1i2tUxg4H4iAAABis"]
[Sat Aug 29 05:06:30.487885 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.104.104.62:43049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/file66.php"] [unique_id "apK9NiJcY4fy7tP-rU0GUgAAAnk"]
[Sat Aug 29 05:06:30.500349 2026] [security2:error] [pid 1017536:tid 1017773] [client 20.104.104.62:40230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-content/uploads/meiwei.php"] [unique_id "apK9NiJcY4fy7tP-rU0GVAAAAn8"]
[Sat Aug 29 05:06:30.513343 2026] [security2:error] [pid 1017536:tid 1017678] [client 20.48.251.3:3343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/doc.php"] [unique_id "apK9NiJcY4fy7tP-rU0GVQAAAiA"]
[Sat Aug 29 05:06:30.518988 2026] [security2:error] [pid 1017536:tid 1017696] [client 93.123.109.228:49876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/api/phpinfo.php"] [unique_id "apK9NiJcY4fy7tP-rU0GWAAAAjI"]
[Sat Aug 29 05:06:30.525924 2026] [security2:error] [pid 1018003:tid 1018155] [client 20.197.61.180:11647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/flower.php"] [unique_id "apK9NjAh5Y1i2tUxg4H4jAAABbw"]
[Sat Aug 29 05:06:30.533389 2026] [core:error] [pid 1018003:tid 1018098] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.533408 2026] [core:error] [pid 1018003:tid 1018098] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.543224 2026] [security2:error] [pid 1018003:tid 1018255] [client 20.220.204.93:64949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/aa.php"] [unique_id "apK9NjAh5Y1i2tUxg4H4jwAABh8"]
[Sat Aug 29 05:06:30.547085 2026] [core:error] [pid 1018003:tid 1018148] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.547103 2026] [core:error] [pid 1018003:tid 1018148] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.549792 2026] [security2:error] [pid 1017536:tid 1017705] [client 20.104.49.130:47869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/pfm.php"] [unique_id "apK9NiJcY4fy7tP-rU0GXAAAAjs"]
[Sat Aug 29 05:06:30.560706 2026] [security2:error] [pid 1018003:tid 1018185] [client 20.104.104.62:48650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/sef.php"] [unique_id "apK9NjAh5Y1i2tUxg4H4kQAABdo"]
[Sat Aug 29 05:06:30.561611 2026] [security2:error] [pid 1017536:tid 1017792] [client 158.23.184.117:59547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/.well-known/api.php"] [unique_id "apK9NiJcY4fy7tP-rU0GXgAAApI"]
[Sat Aug 29 05:06:30.564672 2026] [core:error] [pid 1018003:tid 1018114] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.564689 2026] [core:error] [pid 1018003:tid 1018114] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.570672 2026] [security2:error] [pid 1017536:tid 1017689] [client 20.48.250.41:25532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/sbhu.php"] [unique_id "apK9NiJcY4fy7tP-rU0GYAAAAis"]
[Sat Aug 29 05:06:30.581439 2026] [core:error] [pid 1018003:tid 1018113] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.581454 2026] [core:error] [pid 1018003:tid 1018113] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.585874 2026] [security2:error] [pid 1018003:tid 1018029] [remote 34.23.124.185:45960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 185.124.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/phpinfo.php"] [unique_id "apK9NjAh5Y1i2tUxg4H4lQAFwAg"]
[Sat Aug 29 05:06:30.586864 2026] [security2:error] [pid 1017536:tid 1017704] [client 93.123.109.228:49754] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/admin-app/.env"] [unique_id "apK9NiJcY4fy7tP-rU0GYgAAAjo"]
[Sat Aug 29 05:06:30.611700 2026] [security2:error] [pid 1018003:tid 1018118] [remote 34.23.124.185:45960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 185.124.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/info.php"] [unique_id "apK9NjAh5Y1i2tUxg4H4lwAFvmE"]
[Sat Aug 29 05:06:30.611709 2026] [core:error] [pid 1017536:tid 1017753] [client 158.23.184.117:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.611728 2026] [core:error] [pid 1017536:tid 1017753] [client 158.23.184.117:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.612651 2026] [security2:error] [pid 1017536:tid 1017673] [client 20.220.204.93:52331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/35.php"] [unique_id "apK9NiJcY4fy7tP-rU0GZgAAAhs"]
[Sat Aug 29 05:06:30.614651 2026] [security2:error] [pid 1017536:tid 1017780] [client 52.139.37.240:31053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK9NiJcY4fy7tP-rU0GaAAAAoY"]
[Sat Aug 29 05:06:30.617773 2026] [security2:error] [pid 1017536:tid 1017695] [client 158.158.54.35:2807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/ahax.php"] [unique_id "apK9NiJcY4fy7tP-rU0GaQAAAjE"]
[Sat Aug 29 05:06:30.631785 2026] [security2:error] [pid 1017536:tid 1017786] [client 20.196.209.81:11545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/room.php"] [unique_id "apK9NiJcY4fy7tP-rU0GbAAAAow"]
[Sat Aug 29 05:06:30.631896 2026] [security2:error] [pid 1018003:tid 1018262] [client 52.139.37.240:14929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/ws49.php"] [unique_id "apK9NjAh5Y1i2tUxg4H4mwAABiY"]
[Sat Aug 29 05:06:30.642629 2026] [security2:error] [pid 1017536:tid 1017793] [client 20.48.251.3:61230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/classsmtps.php"] [unique_id "apK9NiJcY4fy7tP-rU0GbgAAApM"]
[Sat Aug 29 05:06:30.680623 2026] [security2:error] [pid 1017536:tid 1017686] [client 68.155.159.216:56525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9NiJcY4fy7tP-rU0GdQAAAig"]
[Sat Aug 29 05:06:30.683252 2026] [security2:error] [pid 1017536:tid 1017675] [client 93.123.109.228:49548] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/apis/.env"] [unique_id "apK9NiJcY4fy7tP-rU0GdgAAAh0"]
[Sat Aug 29 05:06:30.701328 2026] [security2:error] [pid 1017536:tid 1017781] [client 20.151.200.44:46643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/wp-ana.php"] [unique_id "apK9NiJcY4fy7tP-rU0GeQAAAoc"]
[Sat Aug 29 05:06:30.706580 2026] [security2:error] [pid 1017536:tid 1017678] [client 158.23.184.117:59546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/.well-known/chosen.php"] [unique_id "apK9NiJcY4fy7tP-rU0GfAAAAiA"]
[Sat Aug 29 05:06:30.711879 2026] [security2:error] [pid 1018003:tid 1018108] [remote 34.23.124.185:45960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 185.124.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/app_dev.php/_profiler"] [unique_id "apK9NjAh5Y1i2tUxg4H4oAAF-1c"]
[Sat Aug 29 05:06:30.719787 2026] [security2:error] [pid 1017536:tid 1017687] [client 20.104.104.62:64692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/zafir1.php"] [unique_id "apK9NiJcY4fy7tP-rU0GgAAAAik"]
[Sat Aug 29 05:06:30.722033 2026] [security2:error] [pid 1017536:tid 1017704] [client 20.48.250.41:25558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/a332.php"] [unique_id "apK9NiJcY4fy7tP-rU0GgQAAAjo"]
[Sat Aug 29 05:06:30.724840 2026] [security2:error] [pid 1017536:tid 1017680] [client 93.123.109.228:49818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/admin/phpinfo.php"] [unique_id "apK9NiJcY4fy7tP-rU0GggAAAiI"]
[Sat Aug 29 05:06:30.733823 2026] [security2:error] [pid 1017536:tid 1017732] [client 4.205.62.107:9166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/wp-konfig.backup.php"] [unique_id "apK9NiJcY4fy7tP-rU0GgwAAAlY"]
[Sat Aug 29 05:06:30.741811 2026] [security2:error] [pid 1018003:tid 1018103] [remote 34.23.124.185:45960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 185.124.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/test.php"] [unique_id "apK9NjAh5Y1i2tUxg4H4owAGI1I"]
[Sat Aug 29 05:06:30.746204 2026] [security2:error] [pid 1018003:tid 1018109] [remote 34.23.124.185:45960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 185.124.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/app_dev.php"] [unique_id "apK9NjAh5Y1i2tUxg4H4pAAF4Fg"]
[Sat Aug 29 05:06:30.750176 2026] [security2:error] [pid 1017536:tid 1017695] [client 68.155.159.216:16138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-content/x/index.php"] [unique_id "apK9NiJcY4fy7tP-rU0GhwAAAjE"]
[Sat Aug 29 05:06:30.751485 2026] [security2:error] [pid 1017536:tid 1017691] [client 20.151.200.44:65477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/console.php"] [unique_id "apK9NiJcY4fy7tP-rU0GiAAAAi0"]
[Sat Aug 29 05:06:30.753584 2026] [security2:error] [pid 1017536:tid 1017674] [client 20.104.104.62:48511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/admin123.php"] [unique_id "apK9NiJcY4fy7tP-rU0GiQAAAhw"]
[Sat Aug 29 05:06:30.754160 2026] [security2:error] [pid 1017536:tid 1017767] [client 168.107.94.195:59643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9NiJcY4fy7tP-rU0GigAAAnk"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:30.755560 2026] [security2:error] [pid 1017536:tid 1017737] [client 20.220.204.93:64994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/s1.php"] [unique_id "apK9NiJcY4fy7tP-rU0GiwAAAls"]
[Sat Aug 29 05:06:30.759805 2026] [security2:error] [pid 1017536:tid 1017694] [client 93.123.109.228:49732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/admin_phpinfo.php"] [unique_id "apK9NiJcY4fy7tP-rU0GjAAAAjA"]
[Sat Aug 29 05:06:30.760930 2026] [security2:error] [pid 1018003:tid 1018106] [remote 34.23.124.185:45960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 185.124.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/i.php"] [unique_id "apK9NjAh5Y1i2tUxg4H4pwAFz1U"]
[Sat Aug 29 05:06:30.765250 2026] [core:error] [pid 1018003:tid 1018069] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.765268 2026] [core:error] [pid 1018003:tid 1018069] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.765345 2026] [core:error] [pid 1018003:tid 1018111] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.765365 2026] [core:error] [pid 1018003:tid 1018111] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.767390 2026] [security2:error] [pid 1017536:tid 1017793] [client 93.123.109.228:49708] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/administrator/.env"] [unique_id "apK9NiJcY4fy7tP-rU0GjQAAApM"]
[Sat Aug 29 05:06:30.770181 2026] [security2:error] [pid 1017536:tid 1017707] [client 20.48.251.3:62132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/cache-compat.php"] [unique_id "apK9NiJcY4fy7tP-rU0GjgAAAj0"]
[Sat Aug 29 05:06:30.774550 2026] [security2:error] [pid 1017536:tid 1017669] [client 20.151.200.44:64973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/tanjiro.php"] [unique_id "apK9NiJcY4fy7tP-rU0GjwAAAhc"]
[Sat Aug 29 05:06:30.781332 2026] [core:error] [pid 1018003:tid 1018068] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.781348 2026] [core:error] [pid 1018003:tid 1018068] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.781563 2026] [security2:error] [pid 1018003:tid 1018182] [client 20.104.104.62:23397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/exec.php"] [unique_id "apK9NjAh5Y1i2tUxg4H4qgAABdc"]
[Sat Aug 29 05:06:30.787520 2026] [security2:error] [pid 1017536:tid 1017705] [client 93.123.109.228:49600] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/app/.env"] [unique_id "apK9NiJcY4fy7tP-rU0GkQAAAjs"]
[Sat Aug 29 05:06:30.789493 2026] [security2:error] [pid 1018003:tid 1018225] [client 20.104.104.62:40213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/f0x.php"] [unique_id "apK9NjAh5Y1i2tUxg4H4qwAABgI"]
[Sat Aug 29 05:06:30.799697 2026] [security2:error] [pid 1018003:tid 1018240] [client 93.123.109.228:49664] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/api-node/.env"] [unique_id "apK9NjAh5Y1i2tUxg4H4rAAABhA"]
[Sat Aug 29 05:06:30.803837 2026] [security2:error] [pid 1018003:tid 1018164] [client 93.123.109.228:49702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/api-backend/.env"] [unique_id "apK9NjAh5Y1i2tUxg4H4rQAABcU"]
[Sat Aug 29 05:06:30.808266 2026] [security2:error] [pid 1018003:tid 1018199] [client 93.123.109.228:49832] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/api/.env"] [unique_id "apK9NjAh5Y1i2tUxg4H4rgAABeg"]
[Sat Aug 29 05:06:30.811402 2026] [security2:error] [pid 1017536:tid 1017780] [client 52.139.37.240:31159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/zafir1.php"] [unique_id "apK9NiJcY4fy7tP-rU0GkwAAAoY"]
[Sat Aug 29 05:06:30.840455 2026] [security2:error] [pid 1017536:tid 1017745] [client 52.139.37.240:14937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/xxx.php"] [unique_id "apK9NiJcY4fy7tP-rU0GmQAAAmM"]
[Sat Aug 29 05:06:30.850024 2026] [security2:error] [pid 1017536:tid 1017680] [client 4.205.62.107:56022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/xa.php"] [unique_id "apK9NiJcY4fy7tP-rU0GnAAAAiI"]
[Sat Aug 29 05:06:30.850060 2026] [security2:error] [pid 1017536:tid 1017776] [client 20.220.204.93:52321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/maraz.php"] [unique_id "apK9NiJcY4fy7tP-rU0GmwAAAoI"]
[Sat Aug 29 05:06:30.853159 2026] [core:error] [pid 1018003:tid 1018027] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.853173 2026] [core:error] [pid 1018003:tid 1018027] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.855668 2026] [core:error] [pid 1018003:tid 1018121] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.855683 2026] [core:error] [pid 1018003:tid 1018121] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.856777 2026] [security2:error] [pid 1017536:tid 1017773] [client 158.23.184.117:21532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/.well-known/config.php"] [unique_id "apK9NiJcY4fy7tP-rU0GnQAAAn8"]
[Sat Aug 29 05:06:30.861946 2026] [security2:error] [pid 1017536:tid 1017733] [client 40.83.93.50:23938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-admin/user/min.php"] [unique_id "apK9NiJcY4fy7tP-rU0GoAAAAlc"]
[Sat Aug 29 05:06:30.871538 2026] [core:error] [pid 1018003:tid 1018122] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.871554 2026] [core:error] [pid 1018003:tid 1018122] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.872018 2026] [security2:error] [pid 1017536:tid 1017748] [client 20.52.41.200:1247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/deepseek_d.php"] [unique_id "apK9NiJcY4fy7tP-rU0GoQAAAmY"]
[Sat Aug 29 05:06:30.895022 2026] [security2:error] [pid 1017536:tid 1017691] [client 20.48.251.3:61104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/aws_keys.php"] [unique_id "apK9NiJcY4fy7tP-rU0GowAAAi0"]
[Sat Aug 29 05:06:30.900164 2026] [security2:error] [pid 1017536:tid 1017786] [client 20.48.250.41:25562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/ws66.php"] [unique_id "apK9NiJcY4fy7tP-rU0GpQAAAow"]
[Sat Aug 29 05:06:30.909851 2026] [security2:error] [pid 1017536:tid 1017752] [client 20.63.81.20:43587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/esuutzzx.php"] [unique_id "apK9NiJcY4fy7tP-rU0GpwAAAmo"]
[Sat Aug 29 05:06:30.920228 2026] [security2:error] [pid 1017536:tid 1017705] [client 20.104.104.62:43013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/console.php"] [unique_id "apK9NiJcY4fy7tP-rU0GqgAAAjs"]
[Sat Aug 29 05:06:30.921182 2026] [core:error] [pid 1018003:tid 1018116] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.921202 2026] [core:error] [pid 1018003:tid 1018116] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.921254 2026] [core:error] [pid 1018003:tid 1018117] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.921266 2026] [core:error] [pid 1018003:tid 1018117] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.934032 2026] [security2:error] [pid 1018003:tid 1018277] [client 20.104.104.62:48694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/7h.php"] [unique_id "apK9NjAh5Y1i2tUxg4H4ugAABjU"]
[Sat Aug 29 05:06:30.942544 2026] [core:error] [pid 1018003:tid 1018123] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.942565 2026] [core:error] [pid 1018003:tid 1018123] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.958181 2026] [core:error] [pid 1018003:tid 1018126] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.958200 2026] [core:error] [pid 1018003:tid 1018126] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.959327 2026] [core:error] [pid 1018003:tid 1018138] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.959349 2026] [core:error] [pid 1018003:tid 1018138] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:30.960394 2026] [security2:error] [pid 1018003:tid 1018188] [client 20.104.104.62:23364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/dbc.php"] [unique_id "apK9NjAh5Y1i2tUxg4H4wgAABd0"]
[Sat Aug 29 05:06:30.978926 2026] [security2:error] [pid 1017536:tid 1017711] [client 93.123.109.228:49804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/api/info.php"] [unique_id "apK9NiJcY4fy7tP-rU0GsQAAAkE"]
[Sat Aug 29 05:06:31.000054 2026] [security2:error] [pid 1018003:tid 1018266] [client 20.151.200.44:47334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/secret.php"] [unique_id "apK9NjAh5Y1i2tUxg4H4xgAABio"]
[Sat Aug 29 05:06:31.000276 2026] [security2:error] [pid 1017536:tid 1017776] [client 35.198.240.194:64568] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.omni-staffing.com"] [uri "/cgi-sys/404.html"] [unique_id "apK9NiJcY4fy7tP-rU0GswAAAoI"]
[Sat Aug 29 05:06:31.000763 2026] [security2:error] [pid 1018003:tid 1018207] [client 35.198.240.194:64546] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.omni-staffing.com"] [uri "/config/firebase-admin.json"] [unique_id "apK9NzAh5Y1i2tUxg4H4yAAABfA"]
[Sat Aug 29 05:06:31.001939 2026] [security2:error] [pid 1018003:tid 1018167] [client 158.23.184.117:59553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/.well-known/core.php"] [unique_id "apK9NzAh5Y1i2tUxg4H4ywAABcg"]
[Sat Aug 29 05:06:31.004461 2026] [security2:error] [pid 1017536:tid 1017773] [client 35.198.240.194:64530] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.omni-staffing.com"] [uri "/config/gcp-credentials.json"] [unique_id "apK9NyJcY4fy7tP-rU0GuQAAAn8"]
[Sat Aug 29 05:06:31.005840 2026] [security2:error] [pid 1018003:tid 1018244] [client 35.198.240.194:64516] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.omni-staffing.com"] [uri "/cgi-sys/404.html"] [unique_id "apK9NjAh5Y1i2tUxg4H4xQAABhQ"]
[Sat Aug 29 05:06:31.011445 2026] [security2:error] [pid 1017536:tid 1017761] [client 20.63.81.20:46931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/mac.php"] [unique_id "apK9NyJcY4fy7tP-rU0GwwAAAnM"]
[Sat Aug 29 05:06:31.013257 2026] [security2:error] [pid 1018003:tid 1018221] [client 35.198.240.194:64588] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.omni-staffing.com"] [uri "/cgi-sys/404.html"] [unique_id "apK9NzAh5Y1i2tUxg4H40QAABf4"]
[Sat Aug 29 05:06:31.017343 2026] [security2:error] [pid 1018003:tid 1018231] [client 20.220.204.93:59134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/kbfr.php"] [unique_id "apK9NzAh5Y1i2tUxg4H41AAABgc"]
[Sat Aug 29 05:06:31.018320 2026] [security2:error] [pid 1017536:tid 1017753] [client 35.198.240.194:64496] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.omni-staffing.com"] [uri "/cgi-sys/404.html"] [unique_id "apK9NiJcY4fy7tP-rU0GtgAAAms"]
[Sat Aug 29 05:06:31.020872 2026] [security2:error] [pid 1017536:tid 1017743] [client 35.198.240.194:64642] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.omni-staffing.com"] [uri "/cgi-sys/404.html"] [unique_id "apK9NyJcY4fy7tP-rU0GwgAAAmE"]
[Sat Aug 29 05:06:31.020962 2026] [security2:error] [pid 1017536:tid 1017694] [client 35.198.240.194:64684] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.omni-staffing.com"] [uri "/cgi-sys/404.html"] [unique_id "apK9NyJcY4fy7tP-rU0GxQAAAjA"]
[Sat Aug 29 05:06:31.022136 2026] [security2:error] [pid 1017536:tid 1017786] [client 20.48.251.3:61061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/umgebung.php"] [unique_id "apK9NyJcY4fy7tP-rU0GzAAAAow"]
[Sat Aug 29 05:06:31.026768 2026] [security2:error] [pid 1018003:tid 1018212] [client 52.139.37.240:31147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/abc.php"] [unique_id "apK9NzAh5Y1i2tUxg4H41wAABfU"]
[Sat Aug 29 05:06:31.038314 2026] [security2:error] [pid 1018003:tid 1018152] [client 20.151.200.44:64967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/Rk41.php"] [unique_id "apK9NzAh5Y1i2tUxg4H42AAABbk"]
[Sat Aug 29 05:06:31.040493 2026] [security2:error] [pid 1018003:tid 1018261] [client 52.139.37.240:15287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/0x.php"] [unique_id "apK9NzAh5Y1i2tUxg4H42QAABiU"]
[Sat Aug 29 05:06:31.053384 2026] [security2:error] [pid 1018003:tid 1018170] [client 93.123.109.228:49910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/api/phpinfo.php"] [unique_id "apK9NzAh5Y1i2tUxg4H42gAABcs"]
[Sat Aug 29 05:06:31.056503 2026] [security2:error] [pid 1018003:tid 1018189] [client 158.23.147.79:32731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/ws.php"] [unique_id "apK9NzAh5Y1i2tUxg4H43AAABd4"]
[Sat Aug 29 05:06:31.057468 2026] [security2:error] [pid 1017536:tid 1017723] [client 20.48.250.41:25472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/ws68.php"] [unique_id "apK9NyJcY4fy7tP-rU0G0AAAAk0"]
[Sat Aug 29 05:06:31.065652 2026] [security2:error] [pid 1017536:tid 1017778] [client 158.158.54.35:35225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/shell.php"] [unique_id "apK9NyJcY4fy7tP-rU0G0wAAAoQ"]
[Sat Aug 29 05:06:31.068045 2026] [security2:error] [pid 1017536:tid 1017745] [client 20.63.81.20:56931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/replace.php"] [unique_id "apK9NyJcY4fy7tP-rU0G1AAAAmM"]
[Sat Aug 29 05:06:31.075499 2026] [security2:error] [pid 1018003:tid 1018157] [client 20.104.104.62:64719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-includes/fw.php"] [unique_id "apK9NzAh5Y1i2tUxg4H43gAABb4"]
[Sat Aug 29 05:06:31.090563 2026] [security2:error] [pid 1018003:tid 1018262] [client 68.155.159.216:49236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/file5.php"] [unique_id "apK9NzAh5Y1i2tUxg4H43wAABiY"]
[Sat Aug 29 05:06:31.101546 2026] [security2:error] [pid 1017536:tid 1017736] [client 20.104.104.62:48590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/wp-gzone.php"] [unique_id "apK9NyJcY4fy7tP-rU0G1wAAAlo"]
[Sat Aug 29 05:06:31.103240 2026] [core:error] [pid 1018003:tid 1018119] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.103259 2026] [core:error] [pid 1018003:tid 1018119] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.107641 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.104.49.130:30066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/albin.php"] [unique_id "apK9NyJcY4fy7tP-rU0G2AAAAnk"]
[Sat Aug 29 05:06:31.112845 2026] [core:error] [pid 1018003:tid 1018132] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.112866 2026] [core:error] [pid 1018003:tid 1018132] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.120261 2026] [security2:error] [pid 1017536:tid 1017743] [client 45.148.10.62:58036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ninaanddon.strangeworx.com"] [uri "/.env"] [unique_id "apK9NyJcY4fy7tP-rU0G2QAAAmE"]
[Sat Aug 29 05:06:31.123381 2026] [core:error] [pid 1018003:tid 1018120] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.123399 2026] [core:error] [pid 1018003:tid 1018120] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.124252 2026] [core:error] [pid 1018003:tid 1018127] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.124254 2026] [core:error] [pid 1018003:tid 1018140] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.124263 2026] [core:error] [pid 1018003:tid 1018127] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.124269 2026] [core:error] [pid 1018003:tid 1018140] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.136780 2026] [security2:error] [pid 1017536:tid 1017737] [client 168.107.94.195:60124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9NyJcY4fy7tP-rU0G2gAAAls"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:31.141041 2026] [security2:error] [pid 1017536:tid 1017770] [client 93.123.109.228:49548] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/application/.env"] [unique_id "apK9NyJcY4fy7tP-rU0G3AAAAnw"]
[Sat Aug 29 05:06:31.142737 2026] [security2:error] [pid 1017536:tid 1017683] [client 20.104.104.62:4808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/blnux.php"] [unique_id "apK9NyJcY4fy7tP-rU0G3QAAAiU"]
[Sat Aug 29 05:06:31.149400 2026] [security2:error] [pid 1017536:tid 1017781] [client 93.123.109.228:49892] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/apps/.env"] [unique_id "apK9NyJcY4fy7tP-rU0G3gAAAoc"]
[Sat Aug 29 05:06:31.149844 2026] [security2:error] [pid 1017536:tid 1017695] [client 158.23.184.117:21515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/.well-known/data.php"] [unique_id "apK9NyJcY4fy7tP-rU0G3wAAAjE"]
[Sat Aug 29 05:06:31.152142 2026] [security2:error] [pid 1018003:tid 1018233] [client 20.48.251.3:61243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/old_phpinfo.php"] [unique_id "apK9NzAh5Y1i2tUxg4H46wAABgk"]
[Sat Aug 29 05:06:31.158189 2026] [security2:error] [pid 1018003:tid 1018182] [client 20.63.81.20:46898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/simple.php"] [unique_id "apK9NzAh5Y1i2tUxg4H47QAABdc"]
[Sat Aug 29 05:06:31.159709 2026] [security2:error] [pid 1018003:tid 1018225] [client 20.104.104.62:60416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/wp-wlx.php"] [unique_id "apK9NzAh5Y1i2tUxg4H47gAABgI"]
[Sat Aug 29 05:06:31.168537 2026] [security2:error] [pid 1017536:tid 1017704] [client 20.151.200.44:65517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/blnux.php"] [unique_id "apK9NyJcY4fy7tP-rU0G5QAAAjo"]
[Sat Aug 29 05:06:31.173323 2026] [access_compat:error] [pid 1018003:tid 1018130] [remote 34.23.124.185:45960] AH01797: client denied by server configuration: /home2/strangew/public_html/garyandelaine/server-status
[Sat Aug 29 05:06:31.174619 2026] [core:error] [pid 1018003:tid 1018130] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.176979 2026] [security2:error] [pid 1018003:tid 1018164] [client 20.220.204.93:63143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/0byte.php"] [unique_id "apK9NzAh5Y1i2tUxg4H48AAABcU"]
[Sat Aug 29 05:06:31.195294 2026] [security2:error] [pid 1017536:tid 1017776] [client 20.63.81.20:60448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/gulu.php"] [unique_id "apK9NyJcY4fy7tP-rU0G6gAAAoI"]
[Sat Aug 29 05:06:31.203542 2026] [security2:error] [pid 1017536:tid 1017761] [client 93.123.109.228:50028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/apis/.env"] [unique_id "apK9NyJcY4fy7tP-rU0G7QAAAnM"]
[Sat Aug 29 05:06:31.208939 2026] [core:error] [pid 1018003:tid 1018125] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.208960 2026] [core:error] [pid 1018003:tid 1018125] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.217026 2026] [security2:error] [pid 1018003:tid 1018258] [client 136.107.231.130:6350] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/@fs/proc/self/cwd/.env"] [unique_id "apK9NzAh5Y1i2tUxg4H49AAABiI"]
[Sat Aug 29 05:06:31.217149 2026] [security2:error] [pid 1018003:tid 1018258] [client 136.107.231.130:6350] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "alanmossman.mossmanphoto.com"] [uri "/@fs/proc/self/cwd/.env"] [unique_id "apK9NzAh5Y1i2tUxg4H49AAABiI"]
[Sat Aug 29 05:06:31.217551 2026] [security2:error] [pid 1017536:tid 1017707] [client 20.48.250.41:25453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/users.php"] [unique_id "apK9NyJcY4fy7tP-rU0G8gAAAj0"]
[Sat Aug 29 05:06:31.217999 2026] [security2:error] [pid 1017536:tid 1017793] [client 4.205.62.107:22449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/xda.php"] [unique_id "apK9NyJcY4fy7tP-rU0G8wAAApM"]
[Sat Aug 29 05:06:31.219447 2026] [security2:error] [pid 1017536:tid 1017793] [client 20.151.200.44:64980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/7logs.php"] [unique_id "apK9NyJcY4fy7tP-rU0G9AAAApM"]
[Sat Aug 29 05:06:31.221110 2026] [core:error] [pid 1018003:tid 1018129] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.221129 2026] [core:error] [pid 1018003:tid 1018129] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.223432 2026] [security2:error] [pid 1017536:tid 1017694] [client 136.107.231.130:6342] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "alanmossman.mossmanphoto.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK9NyJcY4fy7tP-rU0G9gAAAjA"]
[Sat Aug 29 05:06:31.225335 2026] [security2:error] [pid 1018003:tid 1018139] [remote 34.23.124.185:45960] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/.env"] [unique_id "apK9NzAh5Y1i2tUxg4H49wAGFnY"]
[Sat Aug 29 05:06:31.226170 2026] [security2:error] [pid 1018003:tid 1018227] [client 20.196.209.81:3951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/class-wp-cmd.php"] [unique_id "apK9NzAh5Y1i2tUxg4H4-QAABgQ"]
[Sat Aug 29 05:06:31.229080 2026] [security2:error] [pid 1017536:tid 1017778] [client 52.139.37.240:31658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/c1.php"] [unique_id "apK9NyJcY4fy7tP-rU0G-AAAAoQ"]
[Sat Aug 29 05:06:31.233729 2026] [security2:error] [pid 1017536:tid 1017678] [client 20.197.61.180:7757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/meta.php"] [unique_id "apK9NyJcY4fy7tP-rU0G-QAAAiA"]
[Sat Aug 29 05:06:31.235421 2026] [security2:error] [pid 1017536:tid 1017790] [client 136.107.231.130:6326] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/@fs/var/task/.env"] [unique_id "apK9NyJcY4fy7tP-rU0G-gAAApA"]
[Sat Aug 29 05:06:31.236108 2026] [security2:error] [pid 1017536:tid 1017746] [client 52.139.37.240:15289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/CDX1.php"] [unique_id "apK9NyJcY4fy7tP-rU0G-wAAAmQ"]
[Sat Aug 29 05:06:31.241393 2026] [security2:error] [pid 1017536:tid 1017786] [client 68.155.159.216:30676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/simple.php"] [unique_id "apK9NyJcY4fy7tP-rU0G_gAAAow"]
[Sat Aug 29 05:06:31.243456 2026] [core:error] [pid 1018003:tid 1018128] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.243470 2026] [core:error] [pid 1018003:tid 1018128] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.244174 2026] [core:error] [pid 1018003:tid 1018137] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.244186 2026] [core:error] [pid 1018003:tid 1018137] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.245191 2026] [security2:error] [pid 1017536:tid 1017770] [client 158.23.147.79:24565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK9NyJcY4fy7tP-rU0G_wAAAnw"]
[Sat Aug 29 05:06:31.248531 2026] [security2:error] [pid 1017536:tid 1017769] [client 20.104.104.62:48612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/str.php"] [unique_id "apK9NyJcY4fy7tP-rU0HAAAAAns"]
[Sat Aug 29 05:06:31.269204 2026] [security2:error] [pid 1018003:tid 1018088] [remote 34.23.124.185:45960] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/.env.backup"] [unique_id "apK9NzAh5Y1i2tUxg4H4_QAFwkM"]
[Sat Aug 29 05:06:31.281528 2026] [security2:error] [pid 1018003:tid 1018160] [client 20.48.251.3:3332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.h.marketingmagicsecrets.com"] [uri "/wp-act.php"] [unique_id "apK9NzAh5Y1i2tUxg4H4_wAABcE"]
[Sat Aug 29 05:06:31.299554 2026] [security2:error] [pid 1017536:tid 1017709] [client 158.23.184.117:59552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/.well-known/db-status.php"] [unique_id "apK9NyJcY4fy7tP-rU0HBAAAAj8"]
[Sat Aug 29 05:06:31.299781 2026] [security2:error] [pid 1018003:tid 1018265] [client 20.104.104.62:40240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-includes/wp_wrong_datlib.php"] [unique_id "apK9NzAh5Y1i2tUxg4H5AQAABik"]
[Sat Aug 29 05:06:31.307090 2026] [security2:error] [pid 1018003:tid 1018142] [remote 34.23.124.185:45960] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/.env.old"] [unique_id "apK9NzAh5Y1i2tUxg4H5AgAGGXk"]
[Sat Aug 29 05:06:31.307620 2026] [security2:error] [pid 1018003:tid 1018133] [remote 34.23.124.185:45960] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/api/.env"] [unique_id "apK9NzAh5Y1i2tUxg4H5AwAGGXA"]
[Sat Aug 29 05:06:31.312375 2026] [security2:error] [pid 1018003:tid 1018195] [client 20.63.81.20:46963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/xty.php"] [unique_id "apK9NzAh5Y1i2tUxg4H5BAAABeQ"]
[Sat Aug 29 05:06:31.316209 2026] [security2:error] [pid 1017536:tid 1017776] [client 136.107.231.130:6364] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "alanmossman.mossmanphoto.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK9NyJcY4fy7tP-rU0HBgAAAoI"]
[Sat Aug 29 05:06:31.316306 2026] [security2:error] [pid 1018003:tid 1018244] [client 93.123.109.228:49982] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/app/.env"] [unique_id "apK9NzAh5Y1i2tUxg4H5BgAABhQ"]
[Sat Aug 29 05:06:31.324741 2026] [security2:error] [pid 1017536:tid 1017687] [client 45.148.10.62:58036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ninaanddon.strangeworx.com"] [uri "/.env"] [unique_id "apK9NyJcY4fy7tP-rU0HCgAAAik"]
[Sat Aug 29 05:06:31.325219 2026] [security2:error] [pid 1017536:tid 1017734] [client 158.23.147.79:30660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/js/index.php"] [unique_id "apK9NyJcY4fy7tP-rU0HCwAAAlg"]
[Sat Aug 29 05:06:31.326648 2026] [cgid:error] [pid 1018003:tid 1018186] [client 20.52.41.200:1275] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/cpslggc/404.shtml
[Sat Aug 29 05:06:31.329140 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.63.81.20:43594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/gtghklk.php"] [unique_id "apK9NyJcY4fy7tP-rU0HDQAAAnk"]
[Sat Aug 29 05:06:31.336591 2026] [security2:error] [pid 1018003:tid 1018073] [remote 34.23.124.185:45960] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/backend/.env"] [unique_id "apK9NzAh5Y1i2tUxg4H5CQAF8DQ"]
[Sat Aug 29 05:06:31.341481 2026] [security2:error] [pid 1018003:tid 1018234] [client 40.83.93.50:1746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-admin/users.php"] [unique_id "apK9NzAh5Y1i2tUxg4H5DAAABgo"]
[Sat Aug 29 05:06:31.355089 2026] [security2:error] [pid 1017536:tid 1017733] [client 20.220.204.93:59017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/wp-act.php"] [unique_id "apK9NyJcY4fy7tP-rU0HEQAAAlc"]
[Sat Aug 29 05:06:31.359159 2026] [security2:error] [pid 1018003:tid 1018141] [remote 34.23.124.185:45960] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/config/.env"] [unique_id "apK9NzAh5Y1i2tUxg4H5DgAFvHg"]
[Sat Aug 29 05:06:31.362666 2026] [security2:error] [pid 1018003:tid 1018175] [client 68.155.159.216:18331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/makeasmtp.php"] [unique_id "apK9NzAh5Y1i2tUxg4H5EAAABdA"]
[Sat Aug 29 05:06:31.362722 2026] [core:error] [pid 1018003:tid 1018144] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.362743 2026] [core:error] [pid 1018003:tid 1018144] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.365509 2026] [security2:error] [pid 1018003:tid 1018172] [client 20.104.104.62:43020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/pentest.php"] [unique_id "apK9NzAh5Y1i2tUxg4H5EQAABc0"]
[Sat Aug 29 05:06:31.387682 2026] [security2:error] [pid 1018003:tid 1018024] [remote 34.23.124.185:45960] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/.env.bak"] [unique_id "apK9NzAh5Y1i2tUxg4H5EwAF3AM"]
[Sat Aug 29 05:06:31.392626 2026] [security2:error] [pid 1018003:tid 1018224] [client 20.48.250.41:25506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/bzjdlofz.php"] [unique_id "apK9NzAh5Y1i2tUxg4H5FAAABgE"]
[Sat Aug 29 05:06:31.404778 2026] [security2:error] [pid 1018003:tid 1018230] [client 158.23.147.79:62658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-admin/network/index.php"] [unique_id "apK9NzAh5Y1i2tUxg4H5FgAABgY"]
[Sat Aug 29 05:06:31.405681 2026] [security2:error] [pid 1018003:tid 1018261] [client 158.23.147.79:26409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/file5.php"] [unique_id "apK9NzAh5Y1i2tUxg4H5FwAABiU"]
[Sat Aug 29 05:06:31.419424 2026] [security2:error] [pid 1017536:tid 1017711] [client 136.107.231.130:6252] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "alanmossman.mossmanphoto.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK9NyJcY4fy7tP-rU0HGAAAAkE"]
[Sat Aug 29 05:06:31.423385 2026] [security2:error] [pid 1018003:tid 1018221] [client 52.139.37.240:31648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/index.php/feed/atom/"] [unique_id "apK9NzAh5Y1i2tUxg4H5GQAABf4"]
[Sat Aug 29 05:06:31.424481 2026] [security2:error] [pid 1017536:tid 1017698] [client 20.104.104.62:48591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/mega.php"] [unique_id "apK9NyJcY4fy7tP-rU0HGQAAAjQ"]
[Sat Aug 29 05:06:31.426087 2026] [security2:error] [pid 1017536:tid 1017740] [client 20.104.104.62:23377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/attack.php"] [unique_id "apK9NyJcY4fy7tP-rU0HGwAAAl4"]
[Sat Aug 29 05:06:31.426130 2026] [security2:error] [pid 1017536:tid 1017781] [client 20.151.200.44:65068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/sf.php"] [unique_id "apK9NyJcY4fy7tP-rU0HGgAAAoc"]
[Sat Aug 29 05:06:31.427304 2026] [core:error] [pid 1018003:tid 1018115] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.427317 2026] [core:error] [pid 1018003:tid 1018115] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.432185 2026] [security2:error] [pid 1018003:tid 1018166] [client 52.139.37.240:15274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/akcc.php"] [unique_id "apK9NzAh5Y1i2tUxg4H5GwAABcc"]
[Sat Aug 29 05:06:31.435408 2026] [core:error] [pid 1018003:tid 1018147] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.438970 2026] [security2:error] [pid 1018003:tid 1018157] [client 4.205.62.107:22235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/aws_secret_config.php"] [unique_id "apK9NzAh5Y1i2tUxg4H5HgAABb4"]
[Sat Aug 29 05:06:31.439931 2026] [core:error] [pid 1018003:tid 1018145] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.443610 2026] [core:error] [pid 1018003:tid 1018026] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.445369 2026] [security2:error] [pid 1018003:tid 1018152] [client 158.23.184.117:21518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/.well-known/f35.php"] [unique_id "apK9NzAh5Y1i2tUxg4H5IAAABbk"]
[Sat Aug 29 05:06:31.454996 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.220.204.93:63852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/xr.php"] [unique_id "apK9NyJcY4fy7tP-rU0HIgAAAlY"]
[Sat Aug 29 05:06:31.456021 2026] [security2:error] [pid 1018003:tid 1018262] [client 20.151.200.44:47306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/pro.php"] [unique_id "apK9NzAh5Y1i2tUxg4H5IgAABiY"]
[Sat Aug 29 05:06:31.465126 2026] [core:error] [pid 1018003:tid 1018030] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.474603 2026] [security2:error] [pid 1018003:tid 1018222] [client 20.52.41.200:1275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "apK9NzAh5Y1i2tUxg4H5JgAABf8"]
[Sat Aug 29 05:06:31.492769 2026] [security2:error] [pid 1017536:tid 1017687] [client 136.107.231.130:6326] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "alanmossman.mossmanphoto.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK9NyJcY4fy7tP-rU0HJQAAAik"]
[Sat Aug 29 05:06:31.508410 2026] [security2:error] [pid 1017536:tid 1017767] [client 4.205.62.107:22419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/fns.php"] [unique_id "apK9NyJcY4fy7tP-rU0HJwAAAnk"]
[Sat Aug 29 05:06:31.512298 2026] [core:error] [pid 1018003:tid 1018021] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.520867 2026] [security2:error] [pid 1017536:tid 1017780] [client 158.23.147.79:35245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK9NyJcY4fy7tP-rU0HKwAAAoY"]
[Sat Aug 29 05:06:31.534135 2026] [core:error] [pid 1018003:tid 1018143] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.536211 2026] [core:error] [pid 1018003:tid 1018028] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.545400 2026] [security2:error] [pid 1018003:tid 1018245] [client 93.123.109.228:49798] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/application/.env"] [unique_id "apK9NzAh5Y1i2tUxg4H5MQAABhU"]
[Sat Aug 29 05:06:31.547807 2026] [security2:error] [pid 1017536:tid 1017691] [client 4.205.62.107:26677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/xve22.php"] [unique_id "apK9NyJcY4fy7tP-rU0HLwAAAi0"]
[Sat Aug 29 05:06:31.547857 2026] [security2:error] [pid 1017536:tid 1017710] [client 20.104.104.62:20804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-admin/wp_wrong_datlib.php"] [unique_id "apK9NyJcY4fy7tP-rU0HMAAAAkA"]
[Sat Aug 29 05:06:31.548676 2026] [security2:error] [pid 1017536:tid 1017792] [client 136.107.231.130:6380] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "alanmossman.mossmanphoto.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK9NyJcY4fy7tP-rU0HMQAAApI"]
[Sat Aug 29 05:06:31.560477 2026] [security2:error] [pid 1018003:tid 1018183] [client 158.158.54.35:7391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/elp.php"] [unique_id "apK9NzAh5Y1i2tUxg4H5MgAABdg"]
[Sat Aug 29 05:06:31.566137 2026] [security2:error] [pid 1017536:tid 1017731] [client 93.123.109.228:49754] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/apps/.env"] [unique_id "apK9NyJcY4fy7tP-rU0HNQAAAlU"]
[Sat Aug 29 05:06:31.569529 2026] [security2:error] [pid 1017536:tid 1017761] [client 20.104.104.62:43057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/6y7t.php"] [unique_id "apK9NyJcY4fy7tP-rU0HNgAAAnM"]
[Sat Aug 29 05:06:31.572384 2026] [security2:error] [pid 1017536:tid 1017749] [client 20.48.250.41:25581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/selesai.php"] [unique_id "apK9NyJcY4fy7tP-rU0HNwAAAmc"]
[Sat Aug 29 05:06:31.575102 2026] [security2:error] [pid 1017536:tid 1017740] [client 20.104.104.62:48641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/ww3.php"] [unique_id "apK9NyJcY4fy7tP-rU0HOQAAAl4"]
[Sat Aug 29 05:06:31.576711 2026] [security2:error] [pid 1017536:tid 1017781] [client 158.23.147.79:48206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK9NyJcY4fy7tP-rU0HOgAAAoc"]
[Sat Aug 29 05:06:31.582283 2026] [security2:error] [pid 1017536:tid 1017680] [client 20.151.200.44:64976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/super.php"] [unique_id "apK9NyJcY4fy7tP-rU0HPAAAAiI"]
[Sat Aug 29 05:06:31.592650 2026] [security2:error] [pid 1018003:tid 1018179] [client 158.23.184.117:21535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK9NzAh5Y1i2tUxg4H5MwAABdQ"]
[Sat Aug 29 05:06:31.604619 2026] [security2:error] [pid 1018003:tid 1018184] [client 136.107.231.130:6362] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "alanmossman.mossmanphoto.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK9NzAh5Y1i2tUxg4H5NAAABdk"]
[Sat Aug 29 05:06:31.612602 2026] [core:error] [pid 1018003:tid 1018023] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.612616 2026] [core:error] [pid 1018003:tid 1018023] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.617718 2026] [security2:error] [pid 1017536:tid 1017773] [client 52.139.37.240:31127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/root.php"] [unique_id "apK9NyJcY4fy7tP-rU0HQQAAAn8"]
[Sat Aug 29 05:06:31.628365 2026] [security2:error] [pid 1017536:tid 1017673] [client 52.139.37.240:15270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK9NyJcY4fy7tP-rU0HQwAAAhs"]
[Sat Aug 29 05:06:31.628797 2026] [security2:error] [pid 1017536:tid 1017765] [client 60.243.207.176:60028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK9NyJcY4fy7tP-rU0HRAAAAnc"]
[Sat Aug 29 05:06:31.628900 2026] [security2:error] [pid 1017536:tid 1017765] [client 60.243.207.176:60028] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK9NyJcY4fy7tP-rU0HRAAAAnc"]
[Sat Aug 29 05:06:31.629776 2026] [security2:error] [pid 1018003:tid 1018259] [client 20.196.209.81:16758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/disagreed.php"] [unique_id "apK9NzAh5Y1i2tUxg4H5NwAABiM"]
[Sat Aug 29 05:06:31.639793 2026] [core:error] [pid 1018003:tid 1018033] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.639813 2026] [core:error] [pid 1018003:tid 1018033] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.640562 2026] [core:error] [pid 1018003:tid 1018136] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.640579 2026] [core:error] [pid 1018003:tid 1018136] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.640863 2026] [core:error] [pid 1018003:tid 1018131] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.643010 2026] [core:error] [pid 1018003:tid 1018124] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.644685 2026] [security2:error] [pid 1017536:tid 1017669] [client 93.123.109.228:49600] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/back-api/.env"] [unique_id "apK9NyJcY4fy7tP-rU0HRgAAAhc"]
[Sat Aug 29 05:06:31.649697 2026] [security2:error] [pid 1018003:tid 1018036] [remote 34.23.124.185:45960] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/.github/.env"] [unique_id "apK9NzAh5Y1i2tUxg4H5PgAFwg8"]
[Sat Aug 29 05:06:31.669110 2026] [security2:error] [pid 1018003:tid 1018160] [client 20.104.104.62:36929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/file66.php"] [unique_id "apK9NzAh5Y1i2tUxg4H5QAAABcE"]
[Sat Aug 29 05:06:31.682847 2026] [security2:error] [pid 1017536:tid 1017691] [client 93.123.109.228:49874] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/back-end/.env"] [unique_id "apK9NyJcY4fy7tP-rU0HSgAAAi0"]
[Sat Aug 29 05:06:31.686203 2026] [core:error] [pid 1018003:tid 1018100] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.686220 2026] [core:error] [pid 1018003:tid 1018100] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.692037 2026] [security2:error] [pid 1018003:tid 1018244] [client 20.151.200.44:65514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/pentest.php"] [unique_id "apK9NzAh5Y1i2tUxg4H5RQAABhQ"]
[Sat Aug 29 05:06:31.696549 2026] [security2:error] [pid 1018003:tid 1018256] [client 20.220.204.93:59016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/24.php"] [unique_id "apK9NzAh5Y1i2tUxg4H5RwAABiA"]
[Sat Aug 29 05:06:31.697950 2026] [security2:error] [pid 1017536:tid 1017786] [client 93.123.109.228:49636] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/back/.env"] [unique_id "apK9NyJcY4fy7tP-rU0HTAAAAow"]
[Sat Aug 29 05:06:31.706965 2026] [security2:error] [pid 1017536:tid 1017761] [client 20.104.49.130:43805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/jp.php"] [unique_id "apK9NyJcY4fy7tP-rU0HTgAAAnM"]
[Sat Aug 29 05:06:31.709034 2026] [security2:error] [pid 1017536:tid 1017709] [client 20.220.204.93:63816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/h02ugyh.php"] [unique_id "apK9NyJcY4fy7tP-rU0HTwAAAj8"]
[Sat Aug 29 05:06:31.710112 2026] [security2:error] [pid 1017536:tid 1017746] [client 93.123.109.228:49652] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/backend-api/.env"] [unique_id "apK9NyJcY4fy7tP-rU0HUAAAAmQ"]
[Sat Aug 29 05:06:31.721795 2026] [security2:error] [pid 1017536:tid 1017729] [client 93.123.109.228:49518] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK9NyJcY4fy7tP-rU0HUwAAAlM"]
[Sat Aug 29 05:06:31.725290 2026] [security2:error] [pid 1017536:tid 1017713] [client 20.104.104.62:48579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/sko.php"] [unique_id "apK9NyJcY4fy7tP-rU0HVQAAAkM"]
[Sat Aug 29 05:06:31.725810 2026] [core:error] [pid 1018003:tid 1018071] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.725824 2026] [core:error] [pid 1018003:tid 1018071] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.727845 2026] [security2:error] [pid 1017536:tid 1017748] [client 20.48.250.41:25450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/shlo.php"] [unique_id "apK9NyJcY4fy7tP-rU0HVwAAAmY"]
[Sat Aug 29 05:06:31.737569 2026] [security2:error] [pid 1017536:tid 1017686] [client 158.23.184.117:21512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/.well-known/home.php"] [unique_id "apK9NyJcY4fy7tP-rU0HXAAAAig"]
[Sat Aug 29 05:06:31.748268 2026] [core:error] [pid 1018003:tid 1018032] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.748289 2026] [core:error] [pid 1018003:tid 1018032] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.748759 2026] [authz_core:error] [pid 1018003:tid 1018031] [remote 34.23.124.185:45960] AH01630: client denied by server configuration: /home2/strangew/public_html/garyandelaine/.htpasswd
[Sat Aug 29 05:06:31.749857 2026] [core:error] [pid 1018003:tid 1018031] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.760528 2026] [security2:error] [pid 1017536:tid 1017696] [client 103.240.76.112:43147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK9NyJcY4fy7tP-rU0HYAAAAjI"]
[Sat Aug 29 05:06:31.760647 2026] [security2:error] [pid 1017536:tid 1017696] [client 103.240.76.112:43147] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK9NyJcY4fy7tP-rU0HYAAAAjI"]
[Sat Aug 29 05:06:31.764389 2026] [security2:error] [pid 1017536:tid 1017765] [client 20.151.200.44:64404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/lufix1.php"] [unique_id "apK9NyJcY4fy7tP-rU0HYgAAAnc"]
[Sat Aug 29 05:06:31.772616 2026] [security2:error] [pid 1017536:tid 1017740] [client 136.107.231.130:6396] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "alanmossman.mossmanphoto.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK9NyJcY4fy7tP-rU0HYwAAAl4"]
[Sat Aug 29 05:06:31.810744 2026] [security2:error] [pid 1017536:tid 1017780] [client 40.83.93.50:1655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-admin/wp-cron.php"] [unique_id "apK9NyJcY4fy7tP-rU0HbAAAAoY"]
[Sat Aug 29 05:06:31.812387 2026] [security2:error] [pid 1017536:tid 1017776] [client 52.139.37.240:31636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/shell.php"] [unique_id "apK9NyJcY4fy7tP-rU0HbQAAAoI"]
[Sat Aug 29 05:06:31.818142 2026] [security2:error] [pid 1017536:tid 1017689] [client 52.139.37.240:15266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/s.php"] [unique_id "apK9NyJcY4fy7tP-rU0HbwAAAis"]
[Sat Aug 29 05:06:31.821088 2026] [security2:error] [pid 1017536:tid 1017786] [client 20.104.104.62:20614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-content/wp_wrong_datlib.php"] [unique_id "apK9NyJcY4fy7tP-rU0HcQAAAow"]
[Sat Aug 29 05:06:31.822742 2026] [security2:error] [pid 1017536:tid 1017761] [client 20.104.104.62:64657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/0xs.php"] [unique_id "apK9NyJcY4fy7tP-rU0HcgAAAnM"]
[Sat Aug 29 05:06:31.837539 2026] [security2:error] [pid 1017536:tid 1017790] [client 68.155.159.216:9233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-content/banners/about.php"] [unique_id "apK9NyJcY4fy7tP-rU0HdgAAApA"]
[Sat Aug 29 05:06:31.839694 2026] [core:error] [pid 1018003:tid 1018046] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.839715 2026] [core:error] [pid 1018003:tid 1018046] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.841403 2026] [core:error] [pid 1018003:tid 1018035] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.841423 2026] [core:error] [pid 1018003:tid 1018035] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.848318 2026] [core:error] [pid 1018003:tid 1018025] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.848334 2026] [core:error] [pid 1018003:tid 1018025] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.862490 2026] [security2:error] [pid 1017536:tid 1017683] [client 20.220.204.93:63752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/xxw.php"] [unique_id "apK9NyJcY4fy7tP-rU0HdwAAAiU"]
[Sat Aug 29 05:06:31.864897 2026] [security2:error] [pid 1017536:tid 1017678] [client 20.104.104.62:52047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/zafir1.php"] [unique_id "apK9NyJcY4fy7tP-rU0HeQAAAiA"]
[Sat Aug 29 05:06:31.867558 2026] [security2:error] [pid 1017536:tid 1017776] [client 20.220.204.93:59054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/155.php"] [unique_id "apK9NyJcY4fy7tP-rU0HewAAAoI"]
[Sat Aug 29 05:06:31.880308 2026] [core:error] [pid 1017536:tid 1017689] [client 45.148.10.62:58036] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.880327 2026] [core:error] [pid 1017536:tid 1017689] [client 45.148.10.62:58036] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.880638 2026] [core:error] [pid 1018003:tid 1018038] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.880656 2026] [core:error] [pid 1018003:tid 1018038] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.880669 2026] [core:error] [pid 1018003:tid 1018034] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.880679 2026] [core:error] [pid 1018003:tid 1018034] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.881456 2026] [security2:error] [pid 1017536:tid 1017709] [client 4.205.62.107:9177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK9NyJcY4fy7tP-rU0HgAAAAj8"]
[Sat Aug 29 05:06:31.885774 2026] [security2:error] [pid 1017536:tid 1017753] [client 158.23.184.117:21505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/.well-known/index.php"] [unique_id "apK9NyJcY4fy7tP-rU0HgQAAAms"]
[Sat Aug 29 05:06:31.889374 2026] [security2:error] [pid 1017536:tid 1017729] [client 20.151.200.44:46648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/999.php"] [unique_id "apK9NyJcY4fy7tP-rU0HggAAAlM"]
[Sat Aug 29 05:06:31.892111 2026] [security2:error] [pid 1017536:tid 1017790] [client 93.123.109.228:49540] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/backup/.env"] [unique_id "apK9NyJcY4fy7tP-rU0HgwAAApA"]
[Sat Aug 29 05:06:31.893768 2026] [security2:error] [pid 1017536:tid 1017773] [client 20.104.104.62:48745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/zoz.php"] [unique_id "apK9NyJcY4fy7tP-rU0HhAAAAn8"]
[Sat Aug 29 05:06:31.901065 2026] [core:error] [pid 1018003:tid 1018043] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.901082 2026] [core:error] [pid 1018003:tid 1018043] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.901847 2026] [security2:error] [pid 1017536:tid 1017707] [client 20.48.250.41:25355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/asax.php"] [unique_id "apK9NyJcY4fy7tP-rU0HhgAAAj0"]
[Sat Aug 29 05:06:31.912609 2026] [security2:error] [pid 1017536:tid 1017740] [client 93.123.109.228:49892] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/beta/.env"] [unique_id "apK9NyJcY4fy7tP-rU0HhwAAAl4"]
[Sat Aug 29 05:06:31.923113 2026] [core:error] [pid 1018003:tid 1018037] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.928118 2026] [security2:error] [pid 1017536:tid 1017745] [client 197.219.150.206:59746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK9NyJcY4fy7tP-rU0HiwAAAmM"]
[Sat Aug 29 05:06:31.928302 2026] [security2:error] [pid 1017536:tid 1017745] [client 197.219.150.206:59746] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK9NyJcY4fy7tP-rU0HiwAAAmM"]
[Sat Aug 29 05:06:31.932063 2026] [security2:error] [pid 1017536:tid 1017683] [client 93.123.109.228:49874] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/be/.env"] [unique_id "apK9NyJcY4fy7tP-rU0HjgAAAiU"]
[Sat Aug 29 05:06:31.935017 2026] [cgid:error] [pid 1018003:tid 1018187] [client 20.52.41.200:1206] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/cpslggc/404.shtml
[Sat Aug 29 05:06:31.942702 2026] [security2:error] [pid 1018003:tid 1018102] [remote 34.23.124.185:45960] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/.ssh/id_rsa"] [unique_id "apK9NzAh5Y1i2tUxg4H5YgAF31E"]
[Sat Aug 29 05:06:31.962853 2026] [security2:error] [pid 1017536:tid 1017757] [client 20.197.61.180:7190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/randkeyword.php"] [unique_id "apK9NyJcY4fy7tP-rU0HkQAAAm8"]
[Sat Aug 29 05:06:31.967927 2026] [security2:error] [pid 1017536:tid 1017773] [client 68.155.159.216:24551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/login.php"] [unique_id "apK9NyJcY4fy7tP-rU0HkwAAAn8"]
[Sat Aug 29 05:06:31.968563 2026] [core:error] [pid 1018003:tid 1018047] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.968584 2026] [core:error] [pid 1018003:tid 1018047] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.970683 2026] [core:error] [pid 1018003:tid 1018052] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.970697 2026] [core:error] [pid 1018003:tid 1018052] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:31.975911 2026] [security2:error] [pid 1017536:tid 1017546] [remote 74.7.227.154:41716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK9NyJcY4fy7tP-rU0HlAACdwk"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwp-easycart%2Fadmin%2Finc
[Sat Aug 29 05:06:31.977715 2026] [security2:error] [pid 1018003:tid 1018240] [client 93.123.109.228:49744] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/backend-api/.env"] [unique_id "apK9NzAh5Y1i2tUxg4H5ZQAABhA"]
[Sat Aug 29 05:06:31.977718 2026] [security2:error] [pid 1017536:tid 1017672] [client 93.123.109.228:50032] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/back-end/.env"] [unique_id "apK9NyJcY4fy7tP-rU0HlQAAAho"]
[Sat Aug 29 05:06:31.984431 2026] [security2:error] [pid 1017536:tid 1017743] [client 93.123.109.228:49754] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/back-api/.env"] [unique_id "apK9NyJcY4fy7tP-rU0HlgAAAmE"]
[Sat Aug 29 05:06:31.985593 2026] [security2:error] [pid 1017536:tid 1017673] [client 4.205.62.107:53258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/ws61.php"] [unique_id "apK9NyJcY4fy7tP-rU0HlwAAAhs"]
[Sat Aug 29 05:06:32.008073 2026] [security2:error] [pid 1018003:tid 1018259] [client 93.123.109.228:49664] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/back/.env"] [unique_id "apK9ODAh5Y1i2tUxg4H5ZgAABiM"]
[Sat Aug 29 05:06:32.010709 2026] [security2:error] [pid 1018003:tid 1018259] [client 93.123.109.228:49702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK9ODAh5Y1i2tUxg4H5ZwAABiM"]
[Sat Aug 29 05:06:32.014895 2026] [security2:error] [pid 1018003:tid 1018218] [client 52.139.37.240:31104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK9ODAh5Y1i2tUxg4H5aAAABfs"]
[Sat Aug 29 05:06:32.017343 2026] [security2:error] [pid 1017536:tid 1017678] [client 52.139.37.240:14957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/sagax.php"] [unique_id "apK9OCJcY4fy7tP-rU0HmwAAAiA"]
[Sat Aug 29 05:06:32.027799 2026] [security2:error] [pid 1018003:tid 1018153] [client 158.23.184.117:21521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/.well-known/login.php"] [unique_id "apK9ODAh5Y1i2tUxg4H5aQAABbo"]
[Sat Aug 29 05:06:32.031159 2026] [security2:error] [pid 1017536:tid 1017713] [client 68.155.159.216:50261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK9OCJcY4fy7tP-rU0HnQAAAkM"]
[Sat Aug 29 05:06:32.033838 2026] [security2:error] [pid 1018003:tid 1018268] [client 20.104.104.62:48467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/mmm.php"] [unique_id "apK9ODAh5Y1i2tUxg4H5awAABiw"]
[Sat Aug 29 05:06:32.044441 2026] [security2:error] [pid 1018003:tid 1018161] [client 158.23.147.79:30639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-content/index.php"] [unique_id "apK9ODAh5Y1i2tUxg4H5bgAABcI"]
[Sat Aug 29 05:06:32.045833 2026] [security2:error] [pid 1017536:tid 1017743] [client 158.23.184.117:46975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/wk/admin.php"] [unique_id "apK9OCJcY4fy7tP-rU0HogAAAmE"]
[Sat Aug 29 05:06:32.048661 2026] [security2:error] [pid 1017536:tid 1017675] [client 158.158.54.35:14136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-content/cong.php"] [unique_id "apK9OCJcY4fy7tP-rU0HowAAAh0"]
[Sat Aug 29 05:06:32.051953 2026] [security2:error] [pid 1018003:tid 1018277] [client 20.48.250.41:25467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/fetch.php"] [unique_id "apK9ODAh5Y1i2tUxg4H5bwAABjU"]
[Sat Aug 29 05:06:32.061110 2026] [security2:error] [pid 1018003:tid 1018225] [client 20.196.209.81:19453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/class_api.php"] [unique_id "apK9ODAh5Y1i2tUxg4H5cgAABgI"]
[Sat Aug 29 05:06:32.062014 2026] [security2:error] [pid 1017536:tid 1017751] [client 93.123.109.228:49892] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/client/.env"] [unique_id "apK9OCJcY4fy7tP-rU0HpgAAAmk"]
[Sat Aug 29 05:06:32.070969 2026] [core:error] [pid 1018003:tid 1018054] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:32.073322 2026] [security2:error] [pid 1017536:tid 1017780] [client 20.104.104.62:4825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/waf.php"] [unique_id "apK9OCJcY4fy7tP-rU0HqAAAAoY"]
[Sat Aug 29 05:06:32.088864 2026] [security2:error] [pid 1018003:tid 1018186] [client 20.52.41.200:1206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-content/themes/pridmag/il.php"] [unique_id "apK9ODAh5Y1i2tUxg4H5dQAABds"]
[Sat Aug 29 05:06:32.091709 2026] [security2:error] [pid 1017536:tid 1017673] [client 57.141.14.95:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/page/38/"] [unique_id "apK9OCJcY4fy7tP-rU0HqQAAAhs"]
[Sat Aug 29 05:06:32.097640 2026] [security2:error] [pid 1017536:tid 1017683] [client 20.104.104.62:64722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-content/fw.php"] [unique_id "apK9OCJcY4fy7tP-rU0HrQAAAiU"]
[Sat Aug 29 05:06:32.101852 2026] [security2:error] [pid 1017536:tid 1017752] [client 93.123.109.228:49874] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/cms/.env"] [unique_id "apK9OCJcY4fy7tP-rU0HrgAAAmo"]
[Sat Aug 29 05:06:32.107907 2026] [security2:error] [pid 1017536:tid 1017780] [client 20.151.200.44:64413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/hack.php"] [unique_id "apK9OCJcY4fy7tP-rU0HrwAAAoY"]
[Sat Aug 29 05:06:32.117587 2026] [core:error] [pid 1018003:tid 1018056] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:32.117601 2026] [core:error] [pid 1018003:tid 1018056] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:32.121734 2026] [security2:error] [pid 1018003:tid 1018044] [remote 34.23.124.185:45960] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/.ssh/id_dsa"] [unique_id "apK9ODAh5Y1i2tUxg4H5egAF0Bc"]
[Sat Aug 29 05:06:32.121966 2026] [security2:error] [pid 1017536:tid 1017736] [client 20.104.104.62:60477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/console.php"] [unique_id "apK9OCJcY4fy7tP-rU0HsQAAAlo"]
[Sat Aug 29 05:06:32.122677 2026] [core:error] [pid 1018003:tid 1018048] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:32.122689 2026] [core:error] [pid 1018003:tid 1018048] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:32.123756 2026] [core:error] [pid 1018003:tid 1018041] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:32.123769 2026] [core:error] [pid 1018003:tid 1018041] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:32.130225 2026] [security2:error] [pid 1017536:tid 1017711] [client 20.151.200.44:64910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/6y7t.php"] [unique_id "apK9OCJcY4fy7tP-rU0HtQAAAkE"]
[Sat Aug 29 05:06:32.137529 2026] [proxy_http:error] [pid 1017536:tid 1017785] (20014)Internal error (specific information not available): [client 34.21.253.104:1152] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:32.137545 2026] [proxy:error] [pid 1017536:tid 1017785] [client 34.21.253.104:1152] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/.bash_profile
[Sat Aug 29 05:06:32.143335 2026] [proxy_http:error] [pid 1018003:tid 1018245] (20014)Internal error (specific information not available): [client 34.21.253.104:1204] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:32.143348 2026] [proxy:error] [pid 1018003:tid 1018245] [client 34.21.253.104:1204] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/service-principal.json
[Sat Aug 29 05:06:32.148852 2026] [security2:error] [pid 1018003:tid 1018185] [client 20.220.204.93:64896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/bolt.php"] [unique_id "apK9ODAh5Y1i2tUxg4H5gwAABdo"]
[Sat Aug 29 05:06:32.151390 2026] [security2:error] [pid 1017536:tid 1017696] [client 34.21.253.104:1302] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "cpanel.replenishink.com"] [uri "/config.env"] [unique_id "apK9OCJcY4fy7tP-rU0HwQAAAjI"]
[Sat Aug 29 05:06:32.156447 2026] [security2:error] [pid 1018003:tid 1018039] [remote 34.23.124.185:45960] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/id_rsa"] [unique_id "apK9ODAh5Y1i2tUxg4H5hQAF3hI"]
[Sat Aug 29 05:06:32.162216 2026] [proxy_http:error] [pid 1018003:tid 1018198] (20014)Internal error (specific information not available): [client 34.21.253.104:1280] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:32.162231 2026] [proxy:error] [pid 1018003:tid 1018198] [client 34.21.253.104:1280] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/config/openai.json
[Sat Aug 29 05:06:32.169645 2026] [security2:error] [pid 1018003:tid 1018049] [remote 34.23.124.185:45960] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/id_dsa"] [unique_id "apK9ODAh5Y1i2tUxg4H5jgAGHxw"]
[Sat Aug 29 05:06:32.170412 2026] [security2:error] [pid 1017536:tid 1017736] [client 93.123.109.228:49898] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/backup/.env"] [unique_id "apK9OCJcY4fy7tP-rU0HzQAAAlo"]
[Sat Aug 29 05:06:32.170699 2026] [security2:error] [pid 1017536:tid 1017673] [client 93.123.109.228:49652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/config.php"] [unique_id "apK9OCJcY4fy7tP-rU0HzgAAAhs"]
[Sat Aug 29 05:06:32.174081 2026] [proxy_http:error] [pid 1017536:tid 1017746] (20014)Internal error (specific information not available): [client 34.21.253.104:1176] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:32.174096 2026] [proxy:error] [pid 1017536:tid 1017746] [client 34.21.253.104:1176] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/.gcp/service-account.json
[Sat Aug 29 05:06:32.176046 2026] [security2:error] [pid 1017536:tid 1017761] [client 158.23.184.117:59520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/.well-known/logs233/index.php"] [unique_id "apK9OCJcY4fy7tP-rU0HzwAAAnM"]
[Sat Aug 29 05:06:32.178802 2026] [security2:error] [pid 1018003:tid 1018166] [client 158.23.147.79:32662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-includes/css/index.php"] [unique_id "apK9ODAh5Y1i2tUxg4H5kAAABcc"]
[Sat Aug 29 05:06:32.181147 2026] [proxy_http:error] [pid 1017536:tid 1017705] (20014)Internal error (specific information not available): [client 34.21.253.104:1188] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:32.181162 2026] [proxy:error] [pid 1017536:tid 1017705] [client 34.21.253.104:1188] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/gcp-service-account.json
[Sat Aug 29 05:06:32.187013 2026] [security2:error] [pid 1017536:tid 1017749] [client 20.104.104.62:48687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/advanced.php"] [unique_id "apK9OCJcY4fy7tP-rU0H0QAAAmc"]
[Sat Aug 29 05:06:32.187145 2026] [proxy_http:error] [pid 1017536:tid 1017740] (20014)Internal error (specific information not available): [client 34.21.253.104:1342] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:32.187159 2026] [proxy:error] [pid 1017536:tid 1017740] [client 34.21.253.104:1342] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/client/.env
[Sat Aug 29 05:06:32.187939 2026] [security2:error] [pid 1017536:tid 1017711] [client 93.123.109.228:50028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/be/.env"] [unique_id "apK9OCJcY4fy7tP-rU0H0AAAAkE"]
[Sat Aug 29 05:06:32.188978 2026] [security2:error] [pid 1018003:tid 1018270] [client 20.48.250.41:25425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/vx.php"] [unique_id "apK9ODAh5Y1i2tUxg4H5kwAABi4"]
[Sat Aug 29 05:06:32.190379 2026] [proxy_http:error] [pid 1018003:tid 1018213] (20014)Internal error (specific information not available): [client 34.21.253.104:1388] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:32.190397 2026] [proxy:error] [pid 1018003:tid 1018213] [client 34.21.253.104:1388] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/.env.docker
[Sat Aug 29 05:06:32.193028 2026] [core:error] [pid 1018003:tid 1018062] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:32.193046 2026] [core:error] [pid 1018003:tid 1018062] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:32.194980 2026] [security2:error] [pid 1018003:tid 1018051] [remote 34.23.124.185:45960] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/key.pem"] [unique_id "apK9ODAh5Y1i2tUxg4H5lAAFvh4"]
[Sat Aug 29 05:06:32.197698 2026] [proxy_http:error] [pid 1018003:tid 1018198] (20014)Internal error (specific information not available): [client 34.21.253.104:1280] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:32.197712 2026] [proxy:error] [pid 1018003:tid 1018198] [client 34.21.253.104:1280] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/502.shtml
[Sat Aug 29 05:06:32.198713 2026] [security2:error] [pid 1018003:tid 1018170] [client 158.23.184.117:46936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/admin.php"] [unique_id "apK9ODAh5Y1i2tUxg4H5lQAABcs"]
[Sat Aug 29 05:06:32.205305 2026] [core:error] [pid 1018003:tid 1018040] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:32.205321 2026] [core:error] [pid 1018003:tid 1018040] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:32.212629 2026] [security2:error] [pid 1017536:tid 1017773] [client 52.139.37.240:31139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/wp-content/plugins/linkpreview/il.php"] [unique_id "apK9OCJcY4fy7tP-rU0H1AAAAn8"]
[Sat Aug 29 05:06:32.215125 2026] [security2:error] [pid 1017536:tid 1017709] [client 20.220.204.93:59033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/file.php"] [unique_id "apK9OCJcY4fy7tP-rU0H1QAAAj8"]
[Sat Aug 29 05:06:32.216452 2026] [proxy_http:error] [pid 1017536:tid 1017792] (20014)Internal error (specific information not available): [client 34.21.253.104:1372] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:32.216467 2026] [proxy:error] [pid 1017536:tid 1017792] [client 34.21.253.104:1372] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/production/.env
[Sat Aug 29 05:06:32.219804 2026] [core:error] [pid 1018003:tid 1018050] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:32.219818 2026] [core:error] [pid 1018003:tid 1018050] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:32.220727 2026] [security2:error] [pid 1018003:tid 1018262] [client 93.123.109.228:49982] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/beta/.env"] [unique_id "apK9ODAh5Y1i2tUxg4H5mQAABiY"]
[Sat Aug 29 05:06:32.223947 2026] [cgid:error] [pid 1017536:tid 1017689] [client 34.7.40.70:25202] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:32.224376 2026] [security2:error] [pid 1017536:tid 1017736] [client 158.23.147.79:25574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/install.php"] [unique_id "apK9OCJcY4fy7tP-rU0H3QAAAlo"]
[Sat Aug 29 05:06:32.224440 2026] [cgid:error] [pid 1017536:tid 1017781] [client 34.7.40.70:25226] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:32.224784 2026] [security2:error] [pid 1018003:tid 1018244] [client 34.7.40.70:25196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.40.7.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/pi.php"] [unique_id "apK9ODAh5Y1i2tUxg4H5nAAABhQ"]
[Sat Aug 29 05:06:32.225659 2026] [security2:error] [pid 1017536:tid 1017723] [client 34.7.40.70:25164] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/.htpasswd"] [unique_id "apK9OCJcY4fy7tP-rU0H3wAAAk0"]
[Sat Aug 29 05:06:32.225848 2026] [security2:error] [pid 1018003:tid 1018203] [client 34.7.40.70:25274] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.bash_history"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/.bash_history"] [unique_id "apK9ODAh5Y1i2tUxg4H5nQAABew"]
[Sat Aug 29 05:06:32.226045 2026] [security2:error] [pid 1017536:tid 1017757] [client 34.7.40.70:25180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.40.7.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/i.php"] [unique_id "apK9OCJcY4fy7tP-rU0H4AAAAm8"]
[Sat Aug 29 05:06:32.226124 2026] [security2:error] [pid 1017536:tid 1017757] [client 34.7.40.70:25180] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "409"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/i.php"] [unique_id "apK9OCJcY4fy7tP-rU0H4AAAAm8"]
[Sat Aug 29 05:06:32.226171 2026] [security2:error] [pid 1018003:tid 1018256] [client 34.7.40.70:25246] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/.env~"] [unique_id "apK9ODAh5Y1i2tUxg4H5mwAABiA"]
[Sat Aug 29 05:06:32.226263 2026] [cgid:error] [pid 1017536:tid 1017767] [client 34.7.40.70:25140] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:32.226323 2026] [cgid:error] [pid 1017536:tid 1017731] [client 34.7.40.70:25152] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:32.226622 2026] [cgid:error] [pid 1018003:tid 1018195] [client 34.7.40.70:25212] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:32.227386 2026] [cgid:error] [pid 1017536:tid 1017678] [client 34.7.40.70:25270] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:32.229088 2026] [security2:error] [pid 1017536:tid 1017695] [client 34.7.40.70:25258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/.env"] [unique_id "apK9OCJcY4fy7tP-rU0H4gAAAjE"]
[Sat Aug 29 05:06:32.230410 2026] [security2:error] [pid 1017536:tid 1017675] [client 34.7.40.70:25266] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/_next/.env"] [unique_id "apK9OCJcY4fy7tP-rU0H5QAAAh0"]
[Sat Aug 29 05:06:32.231164 2026] [cgid:error] [pid 1017536:tid 1017793] [client 34.7.40.70:25244] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:32.231828 2026] [cgid:error] [pid 1017536:tid 1017713] [client 34.7.40.70:25254] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:32.232066 2026] [cgid:error] [pid 1017536:tid 1017743] [client 34.7.40.70:25234] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:32.251230 2026] [security2:error] [pid 1017536:tid 1017669] [client 20.104.104.62:4832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/bnnof6.php"] [unique_id "apK9OCJcY4fy7tP-rU0H6QAAAhc"]
[Sat Aug 29 05:06:32.281495 2026] [security2:error] [pid 1018003:tid 1018212] [client 20.104.104.62:20809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-admin/fw.php"] [unique_id "apK9ODAh5Y1i2tUxg4H5oQAABfU"]
[Sat Aug 29 05:06:32.285236 2026] [security2:error] [pid 1018003:tid 1018053] [remote 34.23.124.185:45960] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/privatekey.key"] [unique_id "apK9ODAh5Y1i2tUxg4H5owAF6CA"]
[Sat Aug 29 05:06:32.287959 2026] [core:error] [pid 1018003:tid 1018057] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:32.287977 2026] [core:error] [pid 1018003:tid 1018057] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:32.288793 2026] [security2:error] [pid 1018003:tid 1018190] [client 52.139.37.240:14963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/wp-content/plugins/ftde.php"] [unique_id "apK9ODAh5Y1i2tUxg4H5pQAABd8"]
[Sat Aug 29 05:06:32.290435 2026] [security2:error] [pid 1017536:tid 1017706] [client 93.123.109.228:49548] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/config/.env"] [unique_id "apK9OCJcY4fy7tP-rU0H7QAAAjw"]
[Sat Aug 29 05:06:32.291693 2026] [security2:error] [pid 1018003:tid 1018155] [client 40.83.93.50:1766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-admin/wp-links-opml.php"] [unique_id "apK9ODAh5Y1i2tUxg4H5pgAABbw"]
[Sat Aug 29 05:06:32.318495 2026] [security2:error] [pid 1017536:tid 1017781] [client 93.123.109.228:49898] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/client/.env"] [unique_id "apK9OCJcY4fy7tP-rU0H8gAAAoc"]
[Sat Aug 29 05:06:32.324529 2026] [security2:error] [pid 1018003:tid 1018271] [client 158.23.184.117:21531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/.well-known/maintenance.php"] [unique_id "apK9ODAh5Y1i2tUxg4H5qgAABi8"]
[Sat Aug 29 05:06:32.329480 2026] [security2:error] [pid 1017536:tid 1017695] [client 20.104.49.130:57517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/yawa.php"] [unique_id "apK9OCJcY4fy7tP-rU0H9wAAAjE"]
[Sat Aug 29 05:06:32.335081 2026] [core:error] [pid 1018003:tid 1018060] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:32.335098 2026] [core:error] [pid 1018003:tid 1018060] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:32.336953 2026] [security2:error] [pid 1018003:tid 1018161] [client 93.123.109.228:49872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/config/aws.php"] [unique_id "apK9ODAh5Y1i2tUxg4H5sQAABcI"]
[Sat Aug 29 05:06:32.337014 2026] [core:error] [pid 1018003:tid 1018061] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:32.337026 2026] [core:error] [pid 1018003:tid 1018061] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:32.337457 2026] [core:error] [pid 1018003:tid 1018072] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:32.337470 2026] [core:error] [pid 1018003:tid 1018072] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:32.340101 2026] [security2:error] [pid 1018003:tid 1018277] [client 20.104.104.62:48586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/blox.php"] [unique_id "apK9ODAh5Y1i2tUxg4H5sgAABjU"]
[Sat Aug 29 05:06:32.340241 2026] [core:error] [pid 1018003:tid 1018084] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:32.340250 2026] [core:error] [pid 1018003:tid 1018084] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:32.342285 2026] [security2:error] [pid 1017536:tid 1017743] [client 93.123.109.228:50028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/cms/.env"] [unique_id "apK9OCJcY4fy7tP-rU0H-QAAAmE"]
[Sat Aug 29 05:06:32.344907 2026] [security2:error] [pid 1017536:tid 1017674] [client 158.23.184.117:62297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/goods.php"] [unique_id "apK9OCJcY4fy7tP-rU0H-gAAAhw"]
[Sat Aug 29 05:06:32.349160 2026] [security2:error] [pid 1017536:tid 1017734] [client 68.155.159.216:30673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-admin/about.php"] [unique_id "apK9OCJcY4fy7tP-rU0H_AAAAlg"]
[Sat Aug 29 05:06:32.351495 2026] [security2:error] [pid 1017536:tid 1017683] [client 158.23.147.79:24532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK9OCJcY4fy7tP-rU0H_QAAAiU"]
[Sat Aug 29 05:06:32.354116 2026] [security2:error] [pid 1017536:tid 1017732] [client 4.205.62.107:21588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/pinfo.php"] [unique_id "apK9OCJcY4fy7tP-rU0H_wAAAlY"]
[Sat Aug 29 05:06:32.359558 2026] [security2:error] [pid 1018003:tid 1018186] [client 68.155.159.216:51498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-includes/plugins.php"] [unique_id "apK9ODAh5Y1i2tUxg4H5tQAABds"]
[Sat Aug 29 05:06:32.366431 2026] [security2:error] [pid 1017536:tid 1017733] [client 20.220.204.93:59036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK9OCJcY4fy7tP-rU0IAQAAAlc"]
[Sat Aug 29 05:06:32.367616 2026] [security2:error] [pid 1017536:tid 1017691] [client 20.220.204.93:63835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/rtx.php"] [unique_id "apK9OCJcY4fy7tP-rU0IAgAAAi0"]
[Sat Aug 29 05:06:32.370843 2026] [security2:error] [pid 1017536:tid 1017707] [client 93.123.109.228:49500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/config/config.inc.php"] [unique_id "apK9OCJcY4fy7tP-rU0IAwAAAj0"]
[Sat Aug 29 05:06:32.398881 2026] [security2:error] [pid 1017536:tid 1017689] [client 20.48.250.41:25466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/global.php"] [unique_id "apK9OCJcY4fy7tP-rU0IBwAAAis"]
[Sat Aug 29 05:06:32.399469 2026] [security2:error] [pid 1017536:tid 1017723] [client 20.104.104.62:42691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/blnux.php"] [unique_id "apK9OCJcY4fy7tP-rU0ICAAAAk0"]
[Sat Aug 29 05:06:32.402290 2026] [security2:error] [pid 1017536:tid 1017724] [client 68.155.159.216:33634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-content/cong.php"] [unique_id "apK9OCJcY4fy7tP-rU0ICQAAAk4"]
[Sat Aug 29 05:06:32.411283 2026] [security2:error] [pid 1018003:tid 1018276] [client 52.139.37.240:31048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/wp-header-json.php"] [unique_id "apK9ODAh5Y1i2tUxg4H5uAAABjQ"]
[Sat Aug 29 05:06:32.415718 2026] [security2:error] [pid 1017536:tid 1017678] [client 68.155.159.216:64460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK9OCJcY4fy7tP-rU0ICwAAAiA"]
[Sat Aug 29 05:06:32.423527 2026] [security2:error] [pid 1017536:tid 1017792] [client 158.23.147.79:30629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/about/function.php"] [unique_id "apK9OCJcY4fy7tP-rU0IDwAAApI"]
[Sat Aug 29 05:06:32.435613 2026] [security2:error] [pid 1017536:tid 1017749] [client 93.123.109.228:49548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/config/config.php"] [unique_id "apK9OCJcY4fy7tP-rU0IEQAAAmc"]
[Sat Aug 29 05:06:32.436304 2026] [security2:error] [pid 1018003:tid 1018189] [client 93.123.109.228:49678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/config.php"] [unique_id "apK9ODAh5Y1i2tUxg4H5ugAABd4"]
[Sat Aug 29 05:06:32.445236 2026] [security2:error] [pid 1017536:tid 1017778] [client 213.202.253.4:52601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "aantec.com"] [uri "/wp-content/schallfuns.php"] [unique_id "apK9OCJcY4fy7tP-rU0IEwAAAoQ"], referer: www.google.com
[Sat Aug 29 05:06:32.463001 2026] [security2:error] [pid 1017536:tid 1017733] [client 20.151.200.44:64223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/0xs.php"] [unique_id "apK9OCJcY4fy7tP-rU0IGAAAAlc"]
[Sat Aug 29 05:06:32.469189 2026] [security2:error] [pid 1017536:tid 1017793] [client 158.23.184.117:21520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/.well-known/min.php"] [unique_id "apK9OCJcY4fy7tP-rU0IGQAAApM"]
[Sat Aug 29 05:06:32.475451 2026] [security2:error] [pid 1017536:tid 1017687] [client 20.63.81.20:60470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/comand.php"] [unique_id "apK9OCJcY4fy7tP-rU0IGgAAAik"]
[Sat Aug 29 05:06:32.480714 2026] [security2:error] [pid 1018003:tid 1018067] [remote 34.23.124.185:45960] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/@fs/app/.env"] [unique_id "apK9ODAh5Y1i2tUxg4H5wQAGMy4"]
[Sat Aug 29 05:06:32.480895 2026] [security2:error] [pid 1018003:tid 1018270] [client 20.104.104.62:56366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/ah24.php"] [unique_id "apK9ODAh5Y1i2tUxg4H5xQAABi4"]
[Sat Aug 29 05:06:32.483141 2026] [core:error] [pid 1018003:tid 1018022] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:32.483160 2026] [core:error] [pid 1018003:tid 1018022] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:32.483471 2026] [core:error] [pid 1018003:tid 1018070] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:32.483474 2026] [core:error] [pid 1018003:tid 1018058] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:32.483489 2026] [core:error] [pid 1018003:tid 1018070] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:32.483498 2026] [core:error] [pid 1018003:tid 1018058] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:32.483552 2026] [core:error] [pid 1018003:tid 1018075] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:32.483558 2026] [core:error] [pid 1018003:tid 1018075] [remote 34.23.124.185:45960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:32.487053 2026] [security2:error] [pid 1018003:tid 1018207] [client 20.196.209.81:16750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/aksinet.php"] [unique_id "apK9ODAh5Y1i2tUxg4H5yQAABfA"]
[Sat Aug 29 05:06:32.489730 2026] [security2:error] [pid 1017536:tid 1017731] [client 158.23.184.117:62281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/w.php"] [unique_id "apK9OCJcY4fy7tP-rU0IHgAAAlU"]
[Sat Aug 29 05:06:32.489808 2026] [security2:error] [pid 1018003:tid 1018207] [client 158.23.147.79:59872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/.well-known/index.php"] [unique_id "apK9ODAh5Y1i2tUxg4H5ywAABfA"]
[Sat Aug 29 05:06:32.492608 2026] [security2:error] [pid 1017536:tid 1017770] [client 52.139.37.240:15251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "apK9OCJcY4fy7tP-rU0IHwAAAnw"]
[Sat Aug 29 05:06:32.494927 2026] [security2:error] [pid 1017536:tid 1017757] [client 20.63.81.20:44488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/sallu.php"] [unique_id "apK9OCJcY4fy7tP-rU0IIQAAAm8"]
[Sat Aug 29 05:06:32.495808 2026] [security2:error] [pid 1018003:tid 1018167] [client 158.158.54.35:35226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK9ODAh5Y1i2tUxg4H5zQAABcg"]
[Sat Aug 29 05:06:32.496247 2026] [security2:error] [pid 1017536:tid 1017689] [client 93.123.109.228:50028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/config/.env"] [unique_id "apK9OCJcY4fy7tP-rU0IIAAAAis"]
[Sat Aug 29 05:06:32.500710 2026] [security2:error] [pid 1018003:tid 1018078] [remote 34.23.124.185:45960] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/@fs/src/.env"] [unique_id "apK9ODAh5Y1i2tUxg4H5zgAFuTk"]
[Sat Aug 29 05:06:32.506222 2026] [security2:error] [pid 1018003:tid 1018236] [client 20.220.204.93:64259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/ckk.php"] [unique_id "apK9ODAh5Y1i2tUxg4H5zwAABgw"]
[Sat Aug 29 05:06:32.511587 2026] [security2:error] [pid 1017536:tid 1017724] [client 93.123.109.228:49874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/config/env.php"] [unique_id "apK9OCJcY4fy7tP-rU0IIgAAAk4"]
[Sat Aug 29 05:06:32.513683 2026] [security2:error] [pid 1018003:tid 1018244] [client 158.23.147.79:63834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK9ODAh5Y1i2tUxg4H50gAABhQ"]
[Sat Aug 29 05:06:32.525773 2026] [security2:error] [pid 1017536:tid 1017792] [client 20.151.200.44:65048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/155.php"] [unique_id "apK9OCJcY4fy7tP-rU0IJQAAApI"]
[Sat Aug 29 05:06:32.530505 2026] [security2:error] [pid 1017536:tid 1017713] [client 20.151.200.44:46649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/sef.php"] [unique_id "apK9OCJcY4fy7tP-rU0IJgAAAkM"]
[Sat Aug 29 05:06:32.533720 2026] [security2:error] [pid 1017536:tid 1017751] [client 20.52.41.200:1743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/assets/images/doc.php"] [unique_id "apK9OCJcY4fy7tP-rU0IJwAAAmk"]
[Sat Aug 29 05:06:32.539955 2026] [security2:error] [pid 1018003:tid 1018256] [client 68.155.159.216:18192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK9ODAh5Y1i2tUxg4H51QAABiA"]
[Sat Aug 29 05:06:32.545208 2026] [security2:error] [pid 1018003:tid 1018243] [client 93.123.109.228:49702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/config/aws.php"] [unique_id "apK9ODAh5Y1i2tUxg4H51gAABhM"]
[Sat Aug 29 05:06:32.553366 2026] [security2:error] [pid 1017536:tid 1017673] [client 158.23.147.79:26611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/file88.php"] [unique_id "apK9OCJcY4fy7tP-rU0IKQAAAhs"]
[Sat Aug 29 05:06:32.560558 2026] [security2:error] [pid 1018003:tid 1018083] [remote 34.23.124.185:45960] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/.env"] [unique_id "apK9ODAh5Y1i2tUxg4H51wAF_z4"]
[Sat Aug 29 05:06:32.562463 2026] [security2:error] [pid 1017536:tid 1017669] [client 93.123.109.228:49592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/config/module.config.php"] [unique_id "apK9OCJcY4fy7tP-rU0ILAAAAhc"]
[Sat Aug 29 05:06:32.563310 2026] [security2:error] [pid 1017536:tid 1017752] [client 20.48.250.41:25362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/fs.php"] [unique_id "apK9OCJcY4fy7tP-rU0ILQAAAmo"]
[Sat Aug 29 05:06:32.577585 2026] [security2:error] [pid 1017536:tid 1017706] [client 4.205.62.107:22503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/greem_res.php"] [unique_id "apK9OCJcY4fy7tP-rU0ILgAAAjw"]
[Sat Aug 29 05:06:32.583990 2026] [security2:error] [pid 1018003:tid 1018180] [client 93.123.109.228:49694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/config/config.inc.php"] [unique_id "apK9ODAh5Y1i2tUxg4H52QAABdU"]
[Sat Aug 29 05:06:32.588700 2026] [security2:error] [pid 1018003:tid 1018174] [client 20.104.104.62:48697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/kcs.php"] [unique_id "apK9ODAh5Y1i2tUxg4H52gAABc8"]
[Sat Aug 29 05:06:32.598147 2026] [security2:error] [pid 1017536:tid 1017734] [client 93.123.109.228:49530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/config/nexmo.php"] [unique_id "apK9OCJcY4fy7tP-rU0IMAAAAlg"]
[Sat Aug 29 05:06:32.603644 2026] [security2:error] [pid 1017536:tid 1017736] [client 20.63.81.20:60530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/wp_motu_myk3v.php"] [unique_id "apK9OCJcY4fy7tP-rU0IMQAAAlo"]
[Sat Aug 29 05:06:32.603952 2026] [security2:error] [pid 1018003:tid 1018273] [client 45.148.10.62:58040] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ninaanddon.strangeworx.com"] [uri "/api/.env"] [unique_id "apK9ODAh5Y1i2tUxg4H52wAABjE"]
[Sat Aug 29 05:06:32.607319 2026] [security2:error] [pid 1017536:tid 1017683] [client 52.139.37.240:31618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/zup.php"] [unique_id "apK9OCJcY4fy7tP-rU0IMgAAAiU"]
[Sat Aug 29 05:06:32.611766 2026] [security2:error] [pid 1018003:tid 1018187] [client 20.220.204.93:52257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/06.php"] [unique_id "apK9ODAh5Y1i2tUxg4H53AAABdw"]
[Sat Aug 29 05:06:32.618614 2026] [security2:error] [pid 1018003:tid 1018217] [client 158.23.184.117:59570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/.well-known/module.php"] [unique_id "apK9ODAh5Y1i2tUxg4H53gAABfo"]
[Sat Aug 29 05:06:32.624916 2026] [security2:error] [pid 1018003:tid 1018155] [client 20.63.81.20:46964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/codex.php"] [unique_id "apK9ODAh5Y1i2tUxg4H54AAABbw"]
[Sat Aug 29 05:06:32.627730 2026] [security2:error] [pid 1018003:tid 1018190] [client 20.104.49.130:51514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/wp-login.php"] [unique_id "apK9ODAh5Y1i2tUxg4H53QAABd8"]
[Sat Aug 29 05:06:32.630885 2026] [security2:error] [pid 1018003:tid 1018087] [remote 34.23.124.185:45960] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/media../.env"] [unique_id "apK9ODAh5Y1i2tUxg4H54gAGL0I"]
[Sat Aug 29 05:06:32.634301 2026] [security2:error] [pid 1017536:tid 1017707] [client 158.23.184.117:46962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/new.php"] [unique_id "apK9OCJcY4fy7tP-rU0INgAAAj0"]
[Sat Aug 29 05:06:32.639667 2026] [security2:error] [pid 1018003:tid 1018268] [client 158.23.147.79:35796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-content/banners/about.php"] [unique_id "apK9ODAh5Y1i2tUxg4H55AAABiw"]
[Sat Aug 29 05:06:32.643135 2026] [security2:error] [pid 1018003:tid 1018146] [remote 34.23.124.185:45960] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/static../.env"] [unique_id "apK9ODAh5Y1i2tUxg4H55QAFun0"]
[Sat Aug 29 05:06:32.643223 2026] [security2:error] [pid 1018003:tid 1018089] [remote 34.23.124.185:45960] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ"] [unique_id "apK9ODAh5Y1i2tUxg4H55gAFukQ"]
[Sat Aug 29 05:06:32.646613 2026] [security2:error] [pid 1018003:tid 1018076] [remote 34.23.124.185:45960] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/.env"] [unique_id "apK9ODAh5Y1i2tUxg4H55wAFujc"]
[Sat Aug 29 05:06:32.657529 2026] [security2:error] [pid 1017536:tid 1017678] [client 4.205.62.107:22254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/25.php"] [unique_id "apK9OCJcY4fy7tP-rU0IOAAAAiA"]
[Sat Aug 29 05:06:32.660100 2026] [security2:error] [pid 1017536:tid 1017710] [client 20.104.104.62:43067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/ztv.php"] [unique_id "apK9OCJcY4fy7tP-rU0IOQAAAkA"]
[Sat Aug 29 05:06:32.674020 2026] [security2:error] [pid 1017536:tid 1017713] [client 93.123.109.228:49868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/config/stripe.php"] [unique_id "apK9OCJcY4fy7tP-rU0IPAAAAkM"]
[Sat Aug 29 05:06:32.674157 2026] [security2:error] [pid 1017536:tid 1017751] [client 93.123.109.228:50028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/config/config.php"] [unique_id "apK9OCJcY4fy7tP-rU0IPQAAAmk"]
[Sat Aug 29 05:06:32.685193 2026] [security2:error] [pid 1017536:tid 1017733] [client 158.23.147.79:48323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/classwithtostring.php"] [unique_id "apK9OCJcY4fy7tP-rU0IPwAAAlc"]
[Sat Aug 29 05:06:32.685824 2026] [security2:error] [pid 1017536:tid 1017674] [client 4.205.62.107:26631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/06.php"] [unique_id "apK9OCJcY4fy7tP-rU0IQAAAAhw"]
[Sat Aug 29 05:06:32.687674 2026] [security2:error] [pid 1018003:tid 1018179] [client 20.197.61.180:11604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/goods.php"] [unique_id "apK9ODAh5Y1i2tUxg4H56gAABdQ"]
[Sat Aug 29 05:06:32.691027 2026] [security2:error] [pid 1017536:tid 1017669] [client 20.104.104.62:20856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wordpress/fw.php"] [unique_id "apK9OCJcY4fy7tP-rU0IQwAAAhc"]
[Sat Aug 29 05:06:32.709073 2026] [security2:error] [pid 1018003:tid 1018265] [client 93.123.109.228:49982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/config/env.php"] [unique_id "apK9ODAh5Y1i2tUxg4H57AAABik"]
[Sat Aug 29 05:06:32.722477 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.48.250.41:25512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/ioxi.php"] [unique_id "apK9OCJcY4fy7tP-rU0IRQAAAlY"]
[Sat Aug 29 05:06:32.730876 2026] [security2:error] [pid 1017536:tid 1017736] [client 20.220.204.93:64916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/R57.php"] [unique_id "apK9OCJcY4fy7tP-rU0IRgAAAlo"]
[Sat Aug 29 05:06:32.734280 2026] [security2:error] [pid 1018003:tid 1018177] [client 20.63.81.20:56838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/wp_motu_ypdat.php"] [unique_id "apK9ODAh5Y1i2tUxg4H57wAABdI"]
[Sat Aug 29 05:06:32.738027 2026] [security2:error] [pid 1018003:tid 1018192] [client 20.104.104.62:48755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/wsz.php"] [unique_id "apK9ODAh5Y1i2tUxg4H58AAABeE"]
[Sat Aug 29 05:06:32.760004 2026] [security2:error] [pid 1017536:tid 1017724] [client 20.196.209.81:13276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/post.php"] [unique_id "apK9OCJcY4fy7tP-rU0ISQAAAk4"]
[Sat Aug 29 05:06:32.761164 2026] [security2:error] [pid 1017536:tid 1017776] [client 52.139.37.240:14934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/z.php"] [unique_id "apK9OCJcY4fy7tP-rU0ISgAAAoI"]
[Sat Aug 29 05:06:32.764778 2026] [security2:error] [pid 1018003:tid 1018266] [client 158.23.184.117:59531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/.well-known/options.php"] [unique_id "apK9ODAh5Y1i2tUxg4H58wAABio"]
[Sat Aug 29 05:06:32.765081 2026] [security2:error] [pid 1018003:tid 1018163] [client 20.151.200.44:65521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/waf.php"] [unique_id "apK9ODAh5Y1i2tUxg4H59AAABcQ"]
[Sat Aug 29 05:06:32.773106 2026] [security2:error] [pid 1018003:tid 1018230] [client 20.63.81.20:44465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/5656.php"] [unique_id "apK9ODAh5Y1i2tUxg4H59QAABgY"]
[Sat Aug 29 05:06:32.773105 2026] [security2:error] [pid 1017536:tid 1017778] [client 93.123.109.228:49898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/config/module.config.php"] [unique_id "apK9OCJcY4fy7tP-rU0ITAAAAoQ"]
[Sat Aug 29 05:06:32.774052 2026] [security2:error] [pid 1017536:tid 1017731] [client 40.83.93.50:1743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-admin/wp-load.php"] [unique_id "apK9OCJcY4fy7tP-rU0ITQAAAlU"]
[Sat Aug 29 05:06:32.780025 2026] [security2:error] [pid 1017536:tid 1017781] [client 158.23.184.117:46944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/php8.php"] [unique_id "apK9OCJcY4fy7tP-rU0ITwAAAoc"]
[Sat Aug 29 05:06:32.804051 2026] [security2:error] [pid 1017536:tid 1017689] [client 52.139.37.240:31092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/a9.php"] [unique_id "apK9OCJcY4fy7tP-rU0IUQAAAis"]
[Sat Aug 29 05:06:32.807469 2026] [security2:error] [pid 1018003:tid 1018194] [client 45.148.10.62:58040] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "ninaanddon.strangeworx.com"] [uri "/.env.bak"] [unique_id "apK9ODAh5Y1i2tUxg4H5-QAABeM"]
[Sat Aug 29 05:06:32.810331 2026] [security2:error] [pid 1018003:tid 1018270] [client 93.123.109.228:50006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/config/nexmo.php"] [unique_id "apK9ODAh5Y1i2tUxg4H5-gAABi4"]
[Sat Aug 29 05:06:32.822970 2026] [security2:error] [pid 1017536:tid 1017713] [client 20.151.200.44:64403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/mcd.php"] [unique_id "apK9OCJcY4fy7tP-rU0IUwAAAkM"]
[Sat Aug 29 05:06:32.825335 2026] [security2:error] [pid 1017536:tid 1017753] [client 93.123.109.228:49738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/config/stripe.php"] [unique_id "apK9OCJcY4fy7tP-rU0IVAAAAms"]
[Sat Aug 29 05:06:32.840239 2026] [security2:error] [pid 1017536:tid 1017748] [client 66.248.203.2:21518] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cheerfulmonk.com"] [uri "/2020/08/21/kbs-bear-story/"] [unique_id "apK9OCJcY4fy7tP-rU0IVwAAAmY"]
[Sat Aug 29 05:06:32.854933 2026] [security2:error] [pid 1018003:tid 1018079] [remote 34.23.124.185:45966] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/static/app/.env"] [unique_id "apK9ODAh5Y1i2tUxg4H5_gAFvTo"]
[Sat Aug 29 05:06:32.856299 2026] [security2:error] [pid 1018003:tid 1018134] [remote 34.23.124.185:45966] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/static/.env"] [unique_id "apK9ODAh5Y1i2tUxg4H6AQAFvXE"]
[Sat Aug 29 05:06:32.856319 2026] [security2:error] [pid 1018003:tid 1018077] [remote 34.23.124.185:45966] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/.env"] [unique_id "apK9ODAh5Y1i2tUxg4H6AAAFvTg"]
[Sat Aug 29 05:06:32.856428 2026] [security2:error] [pid 1018003:tid 1018065] [remote 34.23.124.185:45966] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/.env"] [unique_id "apK9ODAh5Y1i2tUxg4H5_wAFvSw"]
[Sat Aug 29 05:06:32.856636 2026] [security2:error] [pid 1018003:tid 1018097] [remote 34.23.124.185:45966] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/files../.env"] [unique_id "apK9ODAh5Y1i2tUxg4H5_QAFvUw"]
[Sat Aug 29 05:06:32.856649 2026] [security2:error] [pid 1018003:tid 1018079] [remote 34.23.124.185:45966] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/static/home/user/.env"] [unique_id "apK9ODAh5Y1i2tUxg4H6AgAFvTo"]
[Sat Aug 29 05:06:32.857174 2026] [security2:error] [pid 1018003:tid 1018213] [client 20.104.104.62:5116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/kure.php"] [unique_id "apK9ODAh5Y1i2tUxg4H6BAAABfY"]
[Sat Aug 29 05:06:32.865387 2026] [security2:error] [pid 1017536:tid 1017721] [client 20.63.81.20:60461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/edit.php"] [unique_id "apK9OCJcY4fy7tP-rU0IWwAAAks"]
[Sat Aug 29 05:06:32.880535 2026] [security2:error] [pid 1018003:tid 1018256] [client 20.104.49.130:46081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/ty.php"] [unique_id "apK9ODAh5Y1i2tUxg4H6BgAABiA"]
[Sat Aug 29 05:06:32.886373 2026] [security2:error] [pid 1017536:tid 1017707] [client 20.196.209.81:3845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/alfa-rex1.php"] [unique_id "apK9OCJcY4fy7tP-rU0IXgAAAj0"]
[Sat Aug 29 05:06:32.919731 2026] [security2:error] [pid 1018003:tid 1018174] [client 20.104.104.62:48630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/msy.php"] [unique_id "apK9ODAh5Y1i2tUxg4H6DAAABc8"]
[Sat Aug 29 05:06:32.924443 2026] [security2:error] [pid 1017536:tid 1017765] [client 20.104.104.62:52055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/pentest.php"] [unique_id "apK9OCJcY4fy7tP-rU0IZAAAAnc"]
[Sat Aug 29 05:06:32.930387 2026] [security2:error] [pid 1017536:tid 1017734] [client 158.23.184.117:46350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/wp-content/themes/admin.php"] [unique_id "apK9OCJcY4fy7tP-rU0IZgAAAlg"]
[Sat Aug 29 05:06:32.930389 2026] [security2:error] [pid 1018003:tid 1018262] [client 158.23.184.117:21544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/.well-known/panel.php"] [unique_id "apK9ODAh5Y1i2tUxg4H6DwAABiY"]
[Sat Aug 29 05:06:32.932064 2026] [security2:error] [pid 1017536:tid 1017752] [client 93.123.109.228:50038] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/crm/.env"] [unique_id "apK9OCJcY4fy7tP-rU0IYwAAAmo"]
[Sat Aug 29 05:06:32.943052 2026] [security2:error] [pid 1017536:tid 1017765] [client 93.123.109.228:50044] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/cron/.env"] [unique_id "apK9OCJcY4fy7tP-rU0IZQAAAnc"]
[Sat Aug 29 05:06:32.957243 2026] [security2:error] [pid 1018003:tid 1018169] [client 52.139.37.240:14512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/f35.php"] [unique_id "apK9ODAh5Y1i2tUxg4H6EQAABco"]
[Sat Aug 29 05:06:32.957651 2026] [security2:error] [pid 1018003:tid 1018187] [client 93.123.109.228:50116] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/current/.env"] [unique_id "apK9ODAh5Y1i2tUxg4H6EAAABdw"]
[Sat Aug 29 05:06:32.959758 2026] [security2:error] [pid 1018003:tid 1018217] [client 68.155.159.216:52858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-includes/Text/about.php"] [unique_id "apK9ODAh5Y1i2tUxg4H6EgAABfo"]
[Sat Aug 29 05:06:32.960670 2026] [security2:error] [pid 1018003:tid 1018155] [client 20.151.200.44:64294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/bnnof6.php"] [unique_id "apK9ODAh5Y1i2tUxg4H6EwAABbw"]
[Sat Aug 29 05:06:32.961312 2026] [security2:error] [pid 1018003:tid 1018164] [client 20.48.250.41:25445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/bootstrap.php"] [unique_id "apK9ODAh5Y1i2tUxg4H6FAAABcU"]
[Sat Aug 29 05:06:32.961313 2026] [security2:error] [pid 1017536:tid 1017753] [client 20.104.104.62:20845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-content/dg.php"] [unique_id "apK9OCJcY4fy7tP-rU0IaQAAAms"]
[Sat Aug 29 05:06:32.966908 2026] [security2:error] [pid 1018003:tid 1018190] [client 20.220.204.93:59107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/class.php"] [unique_id "apK9ODAh5Y1i2tUxg4H6FQAABd8"]
[Sat Aug 29 05:06:32.974086 2026] [security2:error] [pid 1017536:tid 1017717] [client 103.168.67.159:28098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 159.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "naturalkneads.com"] [uri "/wp/index.php"] [unique_id "apK9OCJcY4fy7tP-rU0IawAAAkc"], referer: https://naturalkneads.com/wp/wp-admin/
[Sat Aug 29 05:06:32.978985 2026] [security2:error] [pid 1018003:tid 1018063] [remote 34.23.124.185:45966] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/.env"] [unique_id "apK9ODAh5Y1i2tUxg4H6FgAGECo"]
[Sat Aug 29 05:06:32.978988 2026] [security2:error] [pid 1017536:tid 1017710] [client 93.123.109.228:50046] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/demo/.env"] [unique_id "apK9OCJcY4fy7tP-rU0IbAAAAkA"]
[Sat Aug 29 05:06:32.979895 2026] [security2:error] [pid 1018003:tid 1018167] [client 158.158.54.35:11194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-mail.php"] [unique_id "apK9ODAh5Y1i2tUxg4H6GAAABcg"]
[Sat Aug 29 05:06:32.984427 2026] [security2:error] [pid 1018003:tid 1018246] [client 20.52.41.200:1224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/bgymj.php"] [unique_id "apK9ODAh5Y1i2tUxg4H6GQAABhY"]
[Sat Aug 29 05:06:33.005666 2026] [security2:error] [pid 1018003:tid 1018096] [remote 34.23.124.185:45966] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/assets../.env"] [unique_id "apK9OTAh5Y1i2tUxg4H6GwAGB0s"]
[Sat Aug 29 05:06:33.006271 2026] [security2:error] [pid 1018003:tid 1018090] [remote 34.23.124.185:45966] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/api/.env/public/.env"] [unique_id "apK9OTAh5Y1i2tUxg4H6HAAGB0U"]
[Sat Aug 29 05:06:33.007909 2026] [core:error] [pid 1018003:tid 1018104] [remote 34.23.124.185:45966] AH10244: invalid URI path (/%2e%2e/.env)
[Sat Aug 29 05:06:33.010304 2026] [security2:error] [pid 1017536:tid 1017788] [client 93.123.109.228:50090] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/dev/.env"] [unique_id "apK9OSJcY4fy7tP-rU0IbwAAAo4"]
[Sat Aug 29 05:06:33.010605 2026] [core:error] [pid 1018003:tid 1018104] [remote 34.23.124.185:45966] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:33.018814 2026] [security2:error] [pid 1017536:tid 1017713] [client 52.139.37.240:31146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/admin/index.php"] [unique_id "apK9OSJcY4fy7tP-rU0IcwAAAkM"]
[Sat Aug 29 05:06:33.024507 2026] [security2:error] [pid 1017536:tid 1017767] [client 4.205.62.107:9003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/nlnub.php"] [unique_id "apK9OSJcY4fy7tP-rU0IdQAAAnk"]
[Sat Aug 29 05:06:33.038945 2026] [security2:error] [pid 1017536:tid 1017689] [client 20.151.200.44:65007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/waw.php"] [unique_id "apK9OSJcY4fy7tP-rU0IdwAAAis"]
[Sat Aug 29 05:06:33.045324 2026] [security2:error] [pid 1018003:tid 1018192] [client 20.104.104.62:56338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/cafe.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6IQAABeE"]
[Sat Aug 29 05:06:33.053898 2026] [security2:error] [pid 1018003:tid 1018266] [client 93.123.109.228:49612] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/develop/.env"] [unique_id "apK9OTAh5Y1i2tUxg4H6IgAABio"]
[Sat Aug 29 05:06:33.055922 2026] [security2:error] [pid 1017536:tid 1017674] [client 68.155.159.216:51294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-admin/index.php"] [unique_id "apK9OSJcY4fy7tP-rU0IegAAAhw"]
[Sat Aug 29 05:06:33.072500 2026] [security2:error] [pid 1018003:tid 1018230] [client 17.166.232.46:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/ingredient/le-jus-dun-demi-citron/"] [unique_id "apK9OTAh5Y1i2tUxg4H6IwAABgY"]
[Sat Aug 29 05:06:33.075502 2026] [security2:error] [pid 1017536:tid 1017723] [client 158.23.184.117:62309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/txets.php"] [unique_id "apK9OSJcY4fy7tP-rU0IfAAAAk0"]
[Sat Aug 29 05:06:33.075731 2026] [security2:error] [pid 1017536:tid 1017749] [client 158.23.184.117:60056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/.well-known/pki-validation/mariju.php"] [unique_id "apK9OSJcY4fy7tP-rU0IewAAAmc"]
[Sat Aug 29 05:06:33.098313 2026] [security2:error] [pid 1017536:tid 1017757] [client 20.48.250.41:25352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/export.php"] [unique_id "apK9OSJcY4fy7tP-rU0IfgAAAm8"]
[Sat Aug 29 05:06:33.100935 2026] [security2:error] [pid 1017536:tid 1017793] [client 93.123.109.228:50038] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/developer/.env"] [unique_id "apK9OSJcY4fy7tP-rU0IfwAAApM"]
[Sat Aug 29 05:06:33.101135 2026] [security2:error] [pid 1017536:tid 1017705] [client 171.61.160.196:22087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.160.61.171.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK9OSJcY4fy7tP-rU0IgAAAAjs"]
[Sat Aug 29 05:06:33.101238 2026] [security2:error] [pid 1017536:tid 1017705] [client 171.61.160.196:22087] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK9OSJcY4fy7tP-rU0IgAAAAjs"]
[Sat Aug 29 05:06:33.103924 2026] [security2:error] [pid 1017536:tid 1017695] [client 93.123.109.228:50044] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/development/.env"] [unique_id "apK9OSJcY4fy7tP-rU0IggAAAjE"]
[Sat Aug 29 05:06:33.108634 2026] [security2:error] [pid 1017536:tid 1017736] [client 20.104.104.62:48723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/siln.php"] [unique_id "apK9OSJcY4fy7tP-rU0IgwAAAlo"]
[Sat Aug 29 05:06:33.112820 2026] [security2:error] [pid 1017536:tid 1017694] [client 20.220.204.93:52299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/8.php"] [unique_id "apK9OSJcY4fy7tP-rU0IhAAAAjA"]
[Sat Aug 29 05:06:33.128152 2026] [security2:error] [pid 1018003:tid 1018152] [client 4.205.62.107:55969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/xza.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6JgAABbk"]
[Sat Aug 29 05:06:33.155611 2026] [security2:error] [pid 1018003:tid 1018194] [client 52.139.37.240:14956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/file61.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6KgAABeM"]
[Sat Aug 29 05:06:33.155917 2026] [security2:error] [pid 1017536:tid 1017689] [client 68.155.159.216:50325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-includes/plugins.php"] [unique_id "apK9OSJcY4fy7tP-rU0IiQAAAis"]
[Sat Aug 29 05:06:33.162543 2026] [security2:error] [pid 1018003:tid 1018265] [client 20.196.209.81:17857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/flower.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6KwAABik"]
[Sat Aug 29 05:06:33.165066 2026] [security2:error] [pid 1018003:tid 1018250] [client 158.23.147.79:30624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6LAAABho"]
[Sat Aug 29 05:06:33.187875 2026] [security2:error] [pid 1017536:tid 1017674] [client 20.151.200.44:46633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/admin123.php"] [unique_id "apK9OSJcY4fy7tP-rU0IjwAAAhw"]
[Sat Aug 29 05:06:33.215506 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.104.104.62:56321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/eval.php"] [unique_id "apK9OSJcY4fy7tP-rU0IkgAAAh0"]
[Sat Aug 29 05:06:33.216048 2026] [security2:error] [pid 1018003:tid 1018213] [client 52.139.37.240:31057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/makeasmtp.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6MwAABfY"]
[Sat Aug 29 05:06:33.220154 2026] [security2:error] [pid 1018003:tid 1018162] [client 158.23.184.117:60054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/.well-known/pki-validation/pl.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6NAAABcM"]
[Sat Aug 29 05:06:33.222385 2026] [security2:error] [pid 1017536:tid 1017752] [client 158.23.184.117:57101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/adminfuns.php"] [unique_id "apK9OSJcY4fy7tP-rU0IkwAAAmo"]
[Sat Aug 29 05:06:33.241930 2026] [security2:error] [pid 1018003:tid 1018199] [client 20.104.104.62:20842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-content/mek.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6NgAABeg"]
[Sat Aug 29 05:06:33.245255 2026] [security2:error] [pid 1017536:tid 1017717] [client 40.83.93.50:1609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-admin/wp-mail.php"] [unique_id "apK9OSJcY4fy7tP-rU0IlQAAAkc"]
[Sat Aug 29 05:06:33.248461 2026] [security2:error] [pid 1018003:tid 1018217] [client 68.155.159.216:49253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/file88.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6OAAABfo"]
[Sat Aug 29 05:06:33.254033 2026] [security2:error] [pid 1018003:tid 1018155] [client 20.48.250.41:25475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/gk.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6OQAABbw"]
[Sat Aug 29 05:06:33.259164 2026] [security2:error] [pid 1018003:tid 1018059] [remote 34.23.124.185:45966] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/img../.env"] [unique_id "apK9OTAh5Y1i2tUxg4H6OgAFxSY"]
[Sat Aug 29 05:06:33.278818 2026] [security2:error] [pid 1018003:tid 1018212] [client 20.220.204.93:52316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/0x0x.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6QgAABfU"]
[Sat Aug 29 05:06:33.279489 2026] [security2:error] [pid 1018003:tid 1018112] [remote 34.23.124.185:45966] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/images../.env"] [unique_id "apK9OTAh5Y1i2tUxg4H6QAAFuls"]
[Sat Aug 29 05:06:33.281877 2026] [core:error] [pid 1018003:tid 1018066] [remote 34.23.124.185:45966] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:33.281891 2026] [core:error] [pid 1018003:tid 1018066] [remote 34.23.124.185:45966] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:33.282740 2026] [security2:error] [pid 1018003:tid 1018045] [remote 34.23.124.185:45966] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/uploads../.env"] [unique_id "apK9OTAh5Y1i2tUxg4H6QwAFuhg"]
[Sat Aug 29 05:06:33.283471 2026] [security2:error] [pid 1018003:tid 1018167] [client 158.23.147.79:32743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6RQAABcg"]
[Sat Aug 29 05:06:33.283621 2026] [core:error] [pid 1018003:tid 1018086] [remote 34.23.124.185:45966] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:33.283633 2026] [core:error] [pid 1018003:tid 1018086] [remote 34.23.124.185:45966] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:33.283932 2026] [security2:error] [pid 1018003:tid 1018259] [client 20.151.200.44:64263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/ah24.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6RgAABiM"]
[Sat Aug 29 05:06:33.284528 2026] [core:error] [pid 1018003:tid 1018101] [remote 34.23.124.185:45966] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:33.284539 2026] [core:error] [pid 1018003:tid 1018101] [remote 34.23.124.185:45966] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:33.286975 2026] [security2:error] [pid 1017536:tid 1017710] [client 93.123.109.228:50044] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/erp/.env"] [unique_id "apK9OSJcY4fy7tP-rU0ImQAAAkA"]
[Sat Aug 29 05:06:33.293707 2026] [security2:error] [pid 1018003:tid 1018258] [client 20.196.209.81:16724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/headerg.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6RwAABiI"]
[Sat Aug 29 05:06:33.297853 2026] [security2:error] [pid 1018003:tid 1018216] [client 78.142.18.40:60371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.18.142.78.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "printingbyjoe.com"] [uri "/wp-login.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6RAAABfk"], referer: https://www.facebook.com/
[Sat Aug 29 05:06:33.312606 2026] [security2:error] [pid 1017536:tid 1017785] [client 20.151.200.44:64999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/x23.php"] [unique_id "apK9OSJcY4fy7tP-rU0ImgAAAos"]
[Sat Aug 29 05:06:33.324182 2026] [security2:error] [pid 1017536:tid 1017706] [client 93.123.109.228:49622] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/etc/apache2/apache2.conf"] [unique_id "apK9OSJcY4fy7tP-rU0ImwAAAjw"]
[Sat Aug 29 05:06:33.326575 2026] [security2:error] [pid 1017536:tid 1017743] [client 93.123.109.228:50164] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/etc/boto.cfg"] [unique_id "apK9OSJcY4fy7tP-rU0InAAAAmE"]
[Sat Aug 29 05:06:33.326864 2026] [security2:error] [pid 1018003:tid 1018105] [remote 34.23.124.185:45966] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/@fs/var/task/.env"] [unique_id "apK9OTAh5Y1i2tUxg4H6SQAGA1Q"]
[Sat Aug 29 05:06:33.334172 2026] [security2:error] [pid 1018003:tid 1018161] [client 93.123.109.228:50116] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/fe/.env"] [unique_id "apK9OTAh5Y1i2tUxg4H6SgAABcI"]
[Sat Aug 29 05:06:33.340196 2026] [security2:error] [pid 1018003:tid 1018267] [client 158.23.147.79:25561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-content/x/index.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6SwAABis"]
[Sat Aug 29 05:06:33.350552 2026] [security2:error] [pid 1018003:tid 1018182] [client 52.139.37.240:14930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/mah.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6TAAABdc"]
[Sat Aug 29 05:06:33.366653 2026] [security2:error] [pid 1018003:tid 1018231] [client 158.23.184.117:59530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/.well-known/pki-validation/x.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6TgAABgc"]
[Sat Aug 29 05:06:33.368157 2026] [security2:error] [pid 1018003:tid 1018225] [client 158.23.184.117:46951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/403.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6TwAABgI"]
[Sat Aug 29 05:06:33.368258 2026] [security2:error] [pid 1017536:tid 1017736] [client 20.104.104.62:4115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/sao.php"] [unique_id "apK9OSJcY4fy7tP-rU0IoAAAAlo"]
[Sat Aug 29 05:06:33.371343 2026] [security2:error] [pid 1018003:tid 1018093] [remote 34.23.124.185:45966] ModSecurity: Access denied with code 500 (phase 1) (Error: Connection drop requested but failed to close the  socket). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ"] [unique_id "apK9OTAh5Y1i2tUxg4H6UQAF20g"]
[Sat Aug 29 05:06:33.371372 2026] [security2:error] [pid 1018003:tid 1018107] [remote 34.23.124.185:45966] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/public/plugins/alertlist/../../../../../../../../proc/self/environ"] [unique_id "apK9OTAh5Y1i2tUxg4H6UAAF21Y"]
[Sat Aug 29 05:06:33.373057 2026] [security2:error] [pid 1017536:tid 1017673] [client 93.123.109.228:49892] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/front/.env"] [unique_id "apK9OSJcY4fy7tP-rU0IoQAAAhs"]
[Sat Aug 29 05:06:33.396285 2026] [security2:error] [pid 1018003:tid 1018255] [client 20.104.104.62:48594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/f-401.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6UgAABh8"]
[Sat Aug 29 05:06:33.397869 2026] [security2:error] [pid 1017536:tid 1017689] [client 20.48.250.41:25365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/logs1.php"] [unique_id "apK9OSJcY4fy7tP-rU0IowAAAis"]
[Sat Aug 29 05:06:33.406146 2026] [security2:error] [pid 1018003:tid 1018230] [client 93.123.109.228:49612] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/frontend/.env"] [unique_id "apK9OTAh5Y1i2tUxg4H6UwAABgY"]
[Sat Aug 29 05:06:33.415757 2026] [security2:error] [pid 1017536:tid 1017732] [client 52.139.37.240:30799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/paku.php"] [unique_id "apK9OSJcY4fy7tP-rU0IpQAAAlY"]
[Sat Aug 29 05:06:33.417465 2026] [security2:error] [pid 1017536:tid 1017786] [client 195.178.110.247:34398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.leedscastlepunting.co.uk"] [uri "/index.php"] [unique_id "apK9OSJcY4fy7tP-rU0IpgAAAow"]
[Sat Aug 29 05:06:33.430547 2026] [core:error] [pid 1018003:tid 1018156] [client 45.148.10.62:58040] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:33.430868 2026] [security2:error] [pid 1017536:tid 1017709] [client 185.104.184.230:52476] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.wlu.rog.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "apK9OSJcY4fy7tP-rU0IpwAAAj8"]
[Sat Aug 29 05:06:33.443148 2026] [security2:error] [pid 1018003:tid 1018218] [client 20.52.41.200:1776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6WQAABfs"]
[Sat Aug 29 05:06:33.449298 2026] [security2:error] [pid 1017536:tid 1017790] [client 20.197.61.180:7886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/hehe.php"] [unique_id "apK9OSJcY4fy7tP-rU0IqQAAApA"]
[Sat Aug 29 05:06:33.460511 2026] [security2:error] [pid 1018003:tid 1018268] [client 158.158.54.35:14132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-content.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6XAAABiw"]
[Sat Aug 29 05:06:33.490904 2026] [security2:error] [pid 1017536:tid 1017757] [client 68.155.159.216:51425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK9OSJcY4fy7tP-rU0IsQAAAm8"]
[Sat Aug 29 05:06:33.494295 2026] [security2:error] [pid 1017536:tid 1017785] [client 4.205.62.107:22257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/X57.php"] [unique_id "apK9OSJcY4fy7tP-rU0IsgAAAos"]
[Sat Aug 29 05:06:33.496684 2026] [security2:error] [pid 1017536:tid 1017793] [client 20.104.49.130:29983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/ohct.php"] [unique_id "apK9OSJcY4fy7tP-rU0IswAAApM"]
[Sat Aug 29 05:06:33.503510 2026] [security2:error] [pid 1018003:tid 1018262] [client 93.123.109.228:50116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/info.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6YQAABiY"]
[Sat Aug 29 05:06:33.510454 2026] [security2:error] [pid 1017536:tid 1017669] [client 158.23.184.117:21529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/.well-known/pki-validation/xmrlpc.php"] [unique_id "apK9OSJcY4fy7tP-rU0ItwAAAhc"]
[Sat Aug 29 05:06:33.524912 2026] [security2:error] [pid 1017536:tid 1017695] [client 93.123.109.228:50046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/infophp.php"] [unique_id "apK9OSJcY4fy7tP-rU0IuAAAAjE"]
[Sat Aug 29 05:06:33.529334 2026] [security2:error] [pid 1017536:tid 1017788] [client 68.155.159.216:64464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK9OSJcY4fy7tP-rU0IuQAAAo4"]
[Sat Aug 29 05:06:33.530204 2026] [security2:error] [pid 1018003:tid 1018244] [client 149.34.210.141:42145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6ZQAABhQ"]
[Sat Aug 29 05:06:33.530313 2026] [security2:error] [pid 1018003:tid 1018244] [client 149.34.210.141:42145] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6ZQAABhQ"]
[Sat Aug 29 05:06:33.530491 2026] [security2:error] [pid 1017536:tid 1017736] [client 93.123.109.228:49892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/infos.php"] [unique_id "apK9OSJcY4fy7tP-rU0IugAAAlo"]
[Sat Aug 29 05:06:33.531584 2026] [security2:error] [pid 1017536:tid 1017694] [client 158.23.147.79:30711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-admin/index.php"] [unique_id "apK9OSJcY4fy7tP-rU0IuwAAAjA"]
[Sat Aug 29 05:06:33.539952 2026] [security2:error] [pid 1017536:tid 1017673] [client 68.155.159.216:33748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK9OSJcY4fy7tP-rU0IvAAAAhs"]
[Sat Aug 29 05:06:33.542447 2026] [security2:error] [pid 1018003:tid 1018240] [client 20.48.250.41:25351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/inege.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6aAAABhA"]
[Sat Aug 29 05:06:33.546781 2026] [security2:error] [pid 1017536:tid 1017678] [client 52.139.37.240:14676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/mini.php"] [unique_id "apK9OSJcY4fy7tP-rU0IvgAAAiA"]
[Sat Aug 29 05:06:33.563132 2026] [security2:error] [pid 1018003:tid 1018167] [client 158.23.184.117:46913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/.trash7206/index.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6aQAABcg"]
[Sat Aug 29 05:06:33.564267 2026] [security2:error] [pid 1017536:tid 1017778] [client 20.104.104.62:48622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/hq.php"] [unique_id "apK9OSJcY4fy7tP-rU0IvwAAAoQ"]
[Sat Aug 29 05:06:33.572232 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.196.209.81:9443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/meta.php"] [unique_id "apK9OSJcY4fy7tP-rU0IwAAAAh0"]
[Sat Aug 29 05:06:33.584744 2026] [security2:error] [pid 1018003:tid 1018238] [client 195.178.110.247:17736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.leedscastlepunting.co.uk"] [uri "/index.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6bAAABg4"]
[Sat Aug 29 05:06:33.586148 2026] [security2:error] [pid 1017536:tid 1017709] [client 20.220.204.93:59047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/166.php"] [unique_id "apK9OSJcY4fy7tP-rU0IxQAAAj8"]
[Sat Aug 29 05:06:33.586249 2026] [security2:error] [pid 1017536:tid 1017765] [client 93.123.109.228:49546] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/local/.env"] [unique_id "apK9OSJcY4fy7tP-rU0IxAAAAnc"]
[Sat Aug 29 05:06:33.590395 2026] [security2:error] [pid 1017536:tid 1017790] [client 20.151.200.44:64923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/ztv.php"] [unique_id "apK9OSJcY4fy7tP-rU0IxgAAApA"]
[Sat Aug 29 05:06:33.593073 2026] [security2:error] [pid 1017536:tid 1017753] [client 93.123.109.228:50090] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/laravel/.env"] [unique_id "apK9OSJcY4fy7tP-rU0IyAAAAms"]
[Sat Aug 29 05:06:33.593766 2026] [security2:error] [pid 1017536:tid 1017710] [client 93.123.109.228:49622] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/lms/.env"] [unique_id "apK9OSJcY4fy7tP-rU0IygAAAkA"]
[Sat Aug 29 05:06:33.602388 2026] [security2:error] [pid 1018003:tid 1018271] [client 20.104.104.62:36961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/6y7t.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6bgAABi8"]
[Sat Aug 29 05:06:33.612232 2026] [security2:error] [pid 1017536:tid 1017678] [client 52.139.37.240:31157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/rtx.php"] [unique_id "apK9OSJcY4fy7tP-rU0IzgAAAiA"]
[Sat Aug 29 05:06:33.628845 2026] [security2:error] [pid 1017536:tid 1017598] [remote 34.23.124.185:45974] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/@fs/.env"] [unique_id "apK9OSJcY4fy7tP-rU0IzwACkz0"]
[Sat Aug 29 05:06:33.628884 2026] [security2:error] [pid 1017536:tid 1017606] [remote 34.23.124.185:45974] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/@fs/.env"] [unique_id "apK9OSJcY4fy7tP-rU0I0gACk0U"]
[Sat Aug 29 05:06:33.632589 2026] [security2:error] [pid 1017536:tid 1017740] [client 20.151.200.44:45467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/7h.php"] [unique_id "apK9OSJcY4fy7tP-rU0I0wAAAl4"]
[Sat Aug 29 05:06:33.637875 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.104.104.62:64664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/uuu.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6cAAABcI"]
[Sat Aug 29 05:06:33.647066 2026] [security2:error] [pid 1018003:tid 1018191] [client 68.155.159.216:18131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6cQAABeA"]
[Sat Aug 29 05:06:33.655677 2026] [security2:error] [pid 1018003:tid 1018216] [client 158.23.184.117:21509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/.well-known/security.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6cgAABfk"]
[Sat Aug 29 05:06:33.658128 2026] [security2:error] [pid 1018003:tid 1018172] [client 93.123.109.228:49884] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/market/.env"] [unique_id "apK9OTAh5Y1i2tUxg4H6cwAABc0"]
[Sat Aug 29 05:06:33.666401 2026] [security2:error] [pid 1017536:tid 1017694] [client 158.23.147.79:59218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/.well-knownold/index.php"] [unique_id "apK9OSJcY4fy7tP-rU0I2AAAAjA"]
[Sat Aug 29 05:06:33.669738 2026] [security2:error] [pid 1017536:tid 1017537] [remote 34.23.124.185:45974] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/@fs/.env"] [unique_id "apK9OSJcY4fy7tP-rU0I2QACUwA"]
[Sat Aug 29 05:06:33.671456 2026] [security2:error] [pid 1017536:tid 1017673] [client 93.123.109.228:49600] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/marketing/.env"] [unique_id "apK9OSJcY4fy7tP-rU0I2gAAAhs"]
[Sat Aug 29 05:06:33.682592 2026] [security2:error] [pid 1018003:tid 1018195] [client 20.48.250.41:25475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/wp-link10.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6dQAABeQ"]
[Sat Aug 29 05:06:33.685427 2026] [security2:error] [pid 1018003:tid 1018231] [client 20.151.200.44:65086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/ws66.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6dgAABgc"]
[Sat Aug 29 05:06:33.694321 2026] [security2:error] [pid 1018003:tid 1018225] [client 158.23.147.79:26508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/NewFile.php/"] [unique_id "apK9OTAh5Y1i2tUxg4H6dwAABgI"]
[Sat Aug 29 05:06:33.697376 2026] [security2:error] [pid 1017536:tid 1017778] [client 93.123.109.228:49540] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/media/.env"] [unique_id "apK9OSJcY4fy7tP-rU0I3QAAAoQ"]
[Sat Aug 29 05:06:33.698728 2026] [security2:error] [pid 1017536:tid 1017734] [client 20.104.104.62:48728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/mh.php"] [unique_id "apK9OSJcY4fy7tP-rU0I3gAAAlg"]
[Sat Aug 29 05:06:33.708353 2026] [security2:error] [pid 1017536:tid 1017736] [client 158.23.184.117:46353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/.trash7206/admin.php"] [unique_id "apK9OSJcY4fy7tP-rU0I3wAAAlo"]
[Sat Aug 29 05:06:33.714905 2026] [security2:error] [pid 1017536:tid 1017737] [client 20.104.49.130:34500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/dex.php"] [unique_id "apK9OSJcY4fy7tP-rU0I4QAAAls"]
[Sat Aug 29 05:06:33.714944 2026] [security2:error] [pid 1017536:tid 1017616] [remote 34.23.124.185:45974] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/wp-config.php.old"] [unique_id "apK9OSJcY4fy7tP-rU0I4gACHE8"]
[Sat Aug 29 05:06:33.719596 2026] [security2:error] [pid 1017536:tid 1017689] [client 40.83.93.50:23968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-admin/wp-settings.php"] [unique_id "apK9OSJcY4fy7tP-rU0I4wAAAis"]
[Sat Aug 29 05:06:33.724352 2026] [security2:error] [pid 1017536:tid 1017709] [client 20.220.204.93:59015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/h2a2ck.php"] [unique_id "apK9OSJcY4fy7tP-rU0I5QAAAj8"]
[Sat Aug 29 05:06:33.725195 2026] [security2:error] [pid 1017536:tid 1017573] [remote 34.23.124.185:45974] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/wp-config.php.bak"] [unique_id "apK9OSJcY4fy7tP-rU0I5wACaiQ"]
[Sat Aug 29 05:06:33.725699 2026] [core:error] [pid 1017536:tid 1017639] [remote 34.23.124.185:45974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:33.725714 2026] [core:error] [pid 1017536:tid 1017639] [remote 34.23.124.185:45974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:33.732114 2026] [security2:error] [pid 1017536:tid 1017691] [client 4.205.62.107:21616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/app/Helpers/bladeHelpers.php"] [unique_id "apK9OSJcY4fy7tP-rU0I6wAAAi0"]
[Sat Aug 29 05:06:33.732533 2026] [security2:error] [pid 1017536:tid 1017706] [client 93.123.109.228:49546] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/new/.env"] [unique_id "apK9OSJcY4fy7tP-rU0I6gAAAjw"]
[Sat Aug 29 05:06:33.736199 2026] [security2:error] [pid 1017536:tid 1017721] [client 93.123.109.228:50148] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/node-api/.env"] [unique_id "apK9OSJcY4fy7tP-rU0I7AAAAks"]
[Sat Aug 29 05:06:33.738303 2026] [security2:error] [pid 1017536:tid 1017575] [remote 34.23.124.185:45974] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/laravel/.env"] [unique_id "apK9OSJcY4fy7tP-rU0I7QACkiY"]
[Sat Aug 29 05:06:33.738829 2026] [security2:error] [pid 1017536:tid 1017765] [client 185.104.184.230:52486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.184.104.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "webdisk.wlu.rog.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "apK9OSJcY4fy7tP-rU0I5gAAAnc"]
[Sat Aug 29 05:06:33.742731 2026] [security2:error] [pid 1017536:tid 1017757] [client 93.123.109.228:50090] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/node/.env"] [unique_id "apK9OSJcY4fy7tP-rU0I7wAAAm8"]
[Sat Aug 29 05:06:33.744590 2026] [security2:error] [pid 1018003:tid 1018221] [client 52.139.37.240:14685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/v.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6fQAABf4"]
[Sat Aug 29 05:06:33.744872 2026] [security2:error] [pid 1017536:tid 1017548] [remote 34.23.124.185:45974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 185.124.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/config/.env.php"] [unique_id "apK9OSJcY4fy7tP-rU0I8AACIAs"]
[Sat Aug 29 05:06:33.753680 2026] [security2:error] [pid 1017536:tid 1017740] [client 93.123.109.228:49622] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/node/api/.env"] [unique_id "apK9OSJcY4fy7tP-rU0I8gAAAl4"]
[Sat Aug 29 05:06:33.758118 2026] [security2:error] [pid 1017536:tid 1017785] [client 20.196.209.81:19432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/meta.php"] [unique_id "apK9OSJcY4fy7tP-rU0I8wAAAos"]
[Sat Aug 29 05:06:33.759762 2026] [security2:error] [pid 1018003:tid 1018189] [client 93.123.109.228:49612] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/nodeapi/.env"] [unique_id "apK9OTAh5Y1i2tUxg4H6fgAABd4"]
[Sat Aug 29 05:06:33.760830 2026] [security2:error] [pid 1017536:tid 1017748] [client 93.123.109.228:49788] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/crm/.env"] [unique_id "apK9OSJcY4fy7tP-rU0I9AAAAmY"]
[Sat Aug 29 05:06:33.764008 2026] [security2:error] [pid 1017536:tid 1017681] [client 93.123.109.228:50164] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/nodeweb/.env"] [unique_id "apK9OSJcY4fy7tP-rU0I9gAAAiM"]
[Sat Aug 29 05:06:33.765289 2026] [security2:error] [pid 1017536:tid 1017694] [client 93.123.109.228:49636] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/node/backend/.env"] [unique_id "apK9OSJcY4fy7tP-rU0I9wAAAjA"]
[Sat Aug 29 05:06:33.769678 2026] [security2:error] [pid 1018003:tid 1018157] [client 93.123.109.228:49994] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/cron/.env"] [unique_id "apK9OTAh5Y1i2tUxg4H6fwAABb4"]
[Sat Aug 29 05:06:33.774044 2026] [security2:error] [pid 1017536:tid 1017673] [client 158.23.147.79:35837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK9OSJcY4fy7tP-rU0I-AAAAhs"]
[Sat Aug 29 05:06:33.793055 2026] [security2:error] [pid 1017536:tid 1017675] [client 4.205.62.107:22396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/public/vx.php"] [unique_id "apK9OSJcY4fy7tP-rU0I-wAAAh0"]
[Sat Aug 29 05:06:33.798850 2026] [security2:error] [pid 1017536:tid 1017731] [client 158.23.184.117:59582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/.well-known/system.php"] [unique_id "apK9OSJcY4fy7tP-rU0I_gAAAlU"]
[Sat Aug 29 05:06:33.817173 2026] [security2:error] [pid 1017536:tid 1017788] [client 93.123.109.228:49708] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/current/.env"] [unique_id "apK9OSJcY4fy7tP-rU0JAgAAAo4"]
[Sat Aug 29 05:06:33.821847 2026] [security2:error] [pid 1017536:tid 1017749] [client 93.123.109.228:50038] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/old/.env"] [unique_id "apK9OSJcY4fy7tP-rU0JBQAAAmc"]
[Sat Aug 29 05:06:33.823011 2026] [security2:error] [pid 1018003:tid 1018152] [client 20.104.104.62:20806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/bypass.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6gwAABbk"]
[Sat Aug 29 05:06:33.824307 2026] [security2:error] [pid 1018003:tid 1018219] [client 4.205.62.107:65514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/xin1.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6hAAABfw"]
[Sat Aug 29 05:06:33.825693 2026] [security2:error] [pid 1018003:tid 1018245] [client 52.139.37.240:31512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/update/da222.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6hQAABhU"]
[Sat Aug 29 05:06:33.829997 2026] [security2:error] [pid 1017536:tid 1017751] [client 93.123.109.228:49754] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/demo/.env"] [unique_id "apK9OSJcY4fy7tP-rU0JCAAAAmk"]
[Sat Aug 29 05:06:33.831713 2026] [security2:error] [pid 1017536:tid 1017710] [client 20.48.250.41:25451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/ww.php"] [unique_id "apK9OSJcY4fy7tP-rU0JCgAAAkA"]
[Sat Aug 29 05:06:33.845165 2026] [security2:error] [pid 1017536:tid 1017765] [client 20.104.104.62:48462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/f2r4.php"] [unique_id "apK9OSJcY4fy7tP-rU0JDAAAAnc"]
[Sat Aug 29 05:06:33.848432 2026] [security2:error] [pid 1017536:tid 1017757] [client 93.123.109.228:49540] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/opt/.env"] [unique_id "apK9OSJcY4fy7tP-rU0JDgAAAm8"]
[Sat Aug 29 05:06:33.850125 2026] [security2:error] [pid 1017536:tid 1017770] [client 93.123.109.228:49996] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/dev/.env"] [unique_id "apK9OSJcY4fy7tP-rU0JEAAAAnw"]
[Sat Aug 29 05:06:33.852533 2026] [security2:error] [pid 1017536:tid 1017674] [client 158.23.184.117:62274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/wp-content/admin.php"] [unique_id "apK9OSJcY4fy7tP-rU0JEQAAAhw"]
[Sat Aug 29 05:06:33.857541 2026] [security2:error] [pid 1017536:tid 1017793] [client 20.151.200.44:64287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/kure.php"] [unique_id "apK9OSJcY4fy7tP-rU0JEwAAApM"]
[Sat Aug 29 05:06:33.883301 2026] [security2:error] [pid 1018003:tid 1018198] [client 20.104.104.62:43064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/private.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6iwAABec"]
[Sat Aug 29 05:06:33.893881 2026] [security2:error] [pid 1017536:tid 1017785] [client 93.123.109.228:49966] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/develop/.env"] [unique_id "apK9OSJcY4fy7tP-rU0JFgAAAos"]
[Sat Aug 29 05:06:33.904502 2026] [security2:error] [pid 1018003:tid 1018190] [client 61.9.8.62:4096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6igAABd8"]
[Sat Aug 29 05:06:33.904665 2026] [security2:error] [pid 1018003:tid 1018190] [client 61.9.8.62:4096] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6igAABd8"]
[Sat Aug 29 05:06:33.916203 2026] [security2:error] [pid 1017536:tid 1017673] [client 20.220.204.93:59072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/error_log.php"] [unique_id "apK9OSJcY4fy7tP-rU0JGgAAAhs"]
[Sat Aug 29 05:06:33.922278 2026] [security2:error] [pid 1018003:tid 1018199] [client 93.123.109.228:49832] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/developer/.env"] [unique_id "apK9OTAh5Y1i2tUxg4H6jgAABeg"]
[Sat Aug 29 05:06:33.922501 2026] [security2:error] [pid 1018003:tid 1018098] [remote 198.52.231.183:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 183.231.52.198.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantsfans.net"] [uri "/message_board/index.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6kAAF2U0"]
[Sat Aug 29 05:06:33.927104 2026] [cgid:error] [pid 1017536:tid 1017729] [client 20.52.41.200:1763] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/cpslggc/404.shtml
[Sat Aug 29 05:06:33.938365 2026] [security2:error] [pid 1018003:tid 1018265] [client 20.104.104.62:52081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/0xs.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6kgAABik"]
[Sat Aug 29 05:06:33.946112 2026] [security2:error] [pid 1018003:tid 1018180] [client 158.23.184.117:21510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/.well-known/users.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6kwAABdU"]
[Sat Aug 29 05:06:33.950400 2026] [security2:error] [pid 1017536:tid 1017723] [client 52.139.37.240:15278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK9OSJcY4fy7tP-rU0JHAAAAk0"]
[Sat Aug 29 05:06:33.954171 2026] [security2:error] [pid 1018003:tid 1018217] [client 20.63.81.20:46889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/w3lls.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6lAAABfo"]
[Sat Aug 29 05:06:33.968736 2026] [security2:error] [pid 1017536:tid 1017675] [client 93.123.109.228:49974] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/development/.env"] [unique_id "apK9OSJcY4fy7tP-rU0JHgAAAh0"]
[Sat Aug 29 05:06:33.976114 2026] [security2:error] [pid 1018003:tid 1018256] [client 158.158.54.35:11178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "apK9OTAh5Y1i2tUxg4H6kQAABiA"]
[Sat Aug 29 05:06:33.980673 2026] [security2:error] [pid 1017536:tid 1017788] [client 20.48.250.41:25422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/w1px.php"] [unique_id "apK9OSJcY4fy7tP-rU0JIAAAAo4"]
[Sat Aug 29 05:06:33.983476 2026] [security2:error] [pid 1017536:tid 1017653] [remote 34.23.124.185:45974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 185.124.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/config.php.bak"] [unique_id "apK9OSJcY4fy7tP-rU0JIgACK3Q"]
[Sat Aug 29 05:06:33.986873 2026] [security2:error] [pid 1017536:tid 1017588] [remote 34.23.124.185:45974] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/core/.env"] [unique_id "apK9OSJcY4fy7tP-rU0JIwACQDM"]
[Sat Aug 29 05:06:33.991237 2026] [security2:error] [pid 1017536:tid 1017590] [remote 34.23.124.185:45974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 185.124.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/.env.php.bak"] [unique_id "apK9OSJcY4fy7tP-rU0JJgACajU"]
[Sat Aug 29 05:06:33.993247 2026] [security2:error] [pid 1017536:tid 1017603] [remote 34.23.124.185:45974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 185.124.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/configuration.php.bak"] [unique_id "apK9OSJcY4fy7tP-rU0JKAACakI"]
[Sat Aug 29 05:06:33.993566 2026] [core:error] [pid 1017536:tid 1017601] [remote 34.23.124.185:45974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:33.993580 2026] [core:error] [pid 1017536:tid 1017601] [remote 34.23.124.185:45974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:33.994668 2026] [core:error] [pid 1017536:tid 1017596] [remote 34.23.124.185:45974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.006056 2026] [security2:error] [pid 1017536:tid 1017770] [client 20.151.200.44:65023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/Cok.php"] [unique_id "apK9OiJcY4fy7tP-rU0JKwAAAnw"]
[Sat Aug 29 05:06:34.008140 2026] [security2:error] [pid 1017536:tid 1017706] [client 20.63.81.20:43525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/tqkdqbbv.php"] [unique_id "apK9OiJcY4fy7tP-rU0JLAAAAjw"]
[Sat Aug 29 05:06:34.015852 2026] [security2:error] [pid 1017536:tid 1017734] [client 158.23.184.117:46974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/wp-mail.php"] [unique_id "apK9OiJcY4fy7tP-rU0JLQAAAlg"]
[Sat Aug 29 05:06:34.068596 2026] [security2:error] [pid 1018003:tid 1018169] [client 68.155.159.216:52806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/asd.php"] [unique_id "apK9OjAh5Y1i2tUxg4H6nwAABco"]
[Sat Aug 29 05:06:34.068676 2026] [security2:error] [pid 1017536:tid 1017729] [client 20.151.200.44:64242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/cafe.php"] [unique_id "apK9OiJcY4fy7tP-rU0JMQAAAlM"]
[Sat Aug 29 05:06:34.072762 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.104.104.62:20810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/w50.php"] [unique_id "apK9OiJcY4fy7tP-rU0JMwAAAnk"]
[Sat Aug 29 05:06:34.072982 2026] [security2:error] [pid 1017536:tid 1017707] [client 20.151.200.44:45440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/wp-gzone.php"] [unique_id "apK9OiJcY4fy7tP-rU0JMgAAAj0"]
[Sat Aug 29 05:06:34.076822 2026] [security2:error] [pid 1017536:tid 1017541] [remote 34.23.124.185:45974] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/web/.env"] [unique_id "apK9OiJcY4fy7tP-rU0JNAACZwQ"]
[Sat Aug 29 05:06:34.077068 2026] [security2:error] [pid 1018003:tid 1018163] [client 20.220.204.93:52300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/403.php"] [unique_id "apK9OjAh5Y1i2tUxg4H6oAAABcQ"]
[Sat Aug 29 05:06:34.077662 2026] [security2:error] [pid 1017536:tid 1017751] [client 20.104.104.62:48663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/sadis.php"] [unique_id "apK9OiJcY4fy7tP-rU0JOAAAAmk"]
[Sat Aug 29 05:06:34.078058 2026] [security2:error] [pid 1017536:tid 1017788] [client 20.52.41.200:1763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-load.php"] [unique_id "apK9OiJcY4fy7tP-rU0JNwAAAo4"]
[Sat Aug 29 05:06:34.078439 2026] [security2:error] [pid 1017536:tid 1017567] [remote 34.23.124.185:45974] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/.env.swp"] [unique_id "apK9OiJcY4fy7tP-rU0JNgACZx4"]
[Sat Aug 29 05:06:34.083892 2026] [security2:error] [pid 1017536:tid 1017780] [client 20.63.81.20:46861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/fpwch.php"] [unique_id "apK9OiJcY4fy7tP-rU0JOgAAAoY"]
[Sat Aug 29 05:06:34.083953 2026] [core:error] [pid 1017536:tid 1017550] [remote 34.23.124.185:45974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.084373 2026] [security2:error] [pid 1017536:tid 1017562] [remote 34.23.124.185:45974] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/wp/.env"] [unique_id "apK9OiJcY4fy7tP-rU0JOQACZxk"]
[Sat Aug 29 05:06:34.088129 2026] [security2:error] [pid 1017536:tid 1017792] [client 158.23.184.117:60049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/.well-known/wp-blog-header.php"] [unique_id "apK9OiJcY4fy7tP-rU0JOwAAApI"]
[Sat Aug 29 05:06:34.089876 2026] [autoindex:error] [pid 1018003:tid 1018244] [client 52.139.37.240:31117] AH01276: Cannot serve directory /home4/swumccom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:06:34.090720 2026] [security2:error] [pid 1018003:tid 1018203] [client 20.196.209.81:25048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/randkeyword.php"] [unique_id "apK9OjAh5Y1i2tUxg4H6ogAABew"]
[Sat Aug 29 05:06:34.095117 2026] [security2:error] [pid 1018003:tid 1018207] [client 20.104.104.62:43055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/lfi.php"] [unique_id "apK9OjAh5Y1i2tUxg4H6owAABfA"]
[Sat Aug 29 05:06:34.099732 2026] [security2:error] [pid 1017536:tid 1017551] [remote 34.23.124.185:45974] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/storage/.env"] [unique_id "apK9OiJcY4fy7tP-rU0JPQACag4"]
[Sat Aug 29 05:06:34.100901 2026] [security2:error] [pid 1017536:tid 1017786] [client 93.123.109.228:50090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/php-info.php"] [unique_id "apK9OiJcY4fy7tP-rU0JPgAAAow"]
[Sat Aug 29 05:06:34.108731 2026] [security2:error] [pid 1017536:tid 1017563] [remote 34.23.124.185:45974] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/public/.env"] [unique_id "apK9OiJcY4fy7tP-rU0JQQACHBo"]
[Sat Aug 29 05:06:34.108926 2026] [security2:error] [pid 1018003:tid 1018243] [client 136.107.231.130:6448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/images../.env"] [unique_id "apK9OjAh5Y1i2tUxg4H6pgAABhM"]
[Sat Aug 29 05:06:34.109337 2026] [security2:error] [pid 1017536:tid 1017669] [client 136.107.231.130:6436] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/assets../.env"] [unique_id "apK9OiJcY4fy7tP-rU0JQAAAAhc"]
[Sat Aug 29 05:06:34.113286 2026] [security2:error] [pid 1017536:tid 1017696] [client 136.107.231.130:6464] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/v1/.env"] [unique_id "apK9OiJcY4fy7tP-rU0JQwAAAjI"]
[Sat Aug 29 05:06:34.114772 2026] [security2:error] [pid 1018003:tid 1018161] [client 136.107.231.130:6560] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/.env.backup"] [unique_id "apK9OjAh5Y1i2tUxg4H6qAAABcI"]
[Sat Aug 29 05:06:34.115933 2026] [security2:error] [pid 1018003:tid 1018191] [client 136.107.231.130:6412] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/uploads../.env"] [unique_id "apK9OjAh5Y1i2tUxg4H6qQAABeA"]
[Sat Aug 29 05:06:34.117136 2026] [security2:error] [pid 1018003:tid 1018160] [client 136.107.231.130:6476] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/.env"] [unique_id "apK9OjAh5Y1i2tUxg4H6qgAABcE"]
[Sat Aug 29 05:06:34.117693 2026] [security2:error] [pid 1017536:tid 1017785] [client 136.107.231.130:6422] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/img../.env"] [unique_id "apK9OiJcY4fy7tP-rU0JRQAAAos"]
[Sat Aug 29 05:06:34.118099 2026] [security2:error] [pid 1017536:tid 1017745] [client 136.107.231.130:6666] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/config/.env"] [unique_id "apK9OiJcY4fy7tP-rU0JRgAAAmM"]
[Sat Aug 29 05:06:34.118660 2026] [security2:error] [pid 1018003:tid 1018267] [client 136.107.231.130:6504] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/v2/.env"] [unique_id "apK9OjAh5Y1i2tUxg4H6qwAABis"]
[Sat Aug 29 05:06:34.118767 2026] [security2:error] [pid 1018003:tid 1018267] [client 136.107.231.130:6504] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "alanmossman.mossmanphoto.com"] [uri "/v2/.env"] [unique_id "apK9OjAh5Y1i2tUxg4H6qwAABis"]
[Sat Aug 29 05:06:34.120522 2026] [security2:error] [pid 1017536:tid 1017695] [client 136.107.231.130:6596] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/docker/.env"] [unique_id "apK9OiJcY4fy7tP-rU0JRwAAAjE"]
[Sat Aug 29 05:06:34.121709 2026] [security2:error] [pid 1018003:tid 1018206] [client 136.107.231.130:6546] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/.env.bak"] [unique_id "apK9OjAh5Y1i2tUxg4H6rAAABe8"]
[Sat Aug 29 05:06:34.121892 2026] [security2:error] [pid 1017536:tid 1017748] [client 136.107.231.130:6406] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/.env"] [unique_id "apK9OiJcY4fy7tP-rU0JSAAAAmY"]
[Sat Aug 29 05:06:34.121894 2026] [security2:error] [pid 1017536:tid 1017744] [client 136.107.231.130:6636] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/core/.env"] [unique_id "apK9OiJcY4fy7tP-rU0JSQAAAmI"]
[Sat Aug 29 05:06:34.121993 2026] [security2:error] [pid 1017536:tid 1017744] [client 136.107.231.130:6636] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "alanmossman.mossmanphoto.com"] [uri "/core/.env"] [unique_id "apK9OiJcY4fy7tP-rU0JSQAAAmI"]
[Sat Aug 29 05:06:34.122649 2026] [security2:error] [pid 1017536:tid 1017705] [client 93.123.109.228:49636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/phpinfo.php"] [unique_id "apK9OiJcY4fy7tP-rU0JSgAAAjs"]
[Sat Aug 29 05:06:34.125512 2026] [security2:error] [pid 1017536:tid 1017683] [client 136.107.231.130:6700] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/web/.env"] [unique_id "apK9OiJcY4fy7tP-rU0JTAAAAiU"]
[Sat Aug 29 05:06:34.126508 2026] [security2:error] [pid 1017536:tid 1017717] [client 136.107.231.130:6564] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/app/.env"] [unique_id "apK9OiJcY4fy7tP-rU0JSwAAAkc"]
[Sat Aug 29 05:06:34.127566 2026] [security2:error] [pid 1018003:tid 1018189] [client 93.123.109.228:50136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/php.php"] [unique_id "apK9OjAh5Y1i2tUxg4H6tAAABd4"]
[Sat Aug 29 05:06:34.127664 2026] [security2:error] [pid 1018003:tid 1018172] [client 136.107.231.130:6676] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/.env.old"] [unique_id "apK9OjAh5Y1i2tUxg4H6sQAABc0"]
[Sat Aug 29 05:06:34.129046 2026] [security2:error] [pid 1018003:tid 1018248] [client 136.107.231.130:6532] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "alanmossman.mossmanphoto.com"] [uri "/cgi-sys/404.html"] [unique_id "apK9OjAh5Y1i2tUxg4H6rwAABhg"]
[Sat Aug 29 05:06:34.129246 2026] [security2:error] [pid 1018003:tid 1018231] [client 136.107.231.130:6566] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/backend/.env"] [unique_id "apK9OjAh5Y1i2tUxg4H6sgAABgc"]
[Sat Aug 29 05:06:34.129336 2026] [security2:error] [pid 1018003:tid 1018192] [client 136.107.231.130:6678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/server/.env"] [unique_id "apK9OjAh5Y1i2tUxg4H6tQAABeE"]
[Sat Aug 29 05:06:34.130014 2026] [security2:error] [pid 1018003:tid 1018182] [client 136.107.231.130:6650] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/src/.env"] [unique_id "apK9OjAh5Y1i2tUxg4H6swAABdc"]
[Sat Aug 29 05:06:34.130134 2026] [security2:error] [pid 1018003:tid 1018157] [client 20.104.104.62:36963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/waf.php"] [unique_id "apK9OjAh5Y1i2tUxg4H6uAAABb4"]
[Sat Aug 29 05:06:34.130718 2026] [security2:error] [pid 1018003:tid 1018186] [client 136.107.231.130:6608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/.env.swp"] [unique_id "apK9OjAh5Y1i2tUxg4H6twAABds"]
[Sat Aug 29 05:06:34.130824 2026] [security2:error] [pid 1017536:tid 1017711] [client 93.123.109.228:49546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/php_info.php"] [unique_id "apK9OiJcY4fy7tP-rU0JTwAAAkE"]
[Sat Aug 29 05:06:34.131274 2026] [security2:error] [pid 1017536:tid 1017765] [client 93.123.109.228:50148] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/portal/.env"] [unique_id "apK9OiJcY4fy7tP-rU0JTgAAAnc"]
[Sat Aug 29 05:06:34.131643 2026] [security2:error] [pid 1018003:tid 1018266] [client 136.107.231.130:6600] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/laravel/.env"] [unique_id "apK9OjAh5Y1i2tUxg4H6uQAABio"]
[Sat Aug 29 05:06:34.131887 2026] [security2:error] [pid 1018003:tid 1018175] [client 136.107.231.130:6642] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/api/.env"] [unique_id "apK9OjAh5Y1i2tUxg4H6uwAABdA"]
[Sat Aug 29 05:06:34.131974 2026] [security2:error] [pid 1018003:tid 1018175] [client 136.107.231.130:6642] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "alanmossman.mossmanphoto.com"] [uri "/api/.env"] [unique_id "apK9OjAh5Y1i2tUxg4H6uwAABdA"]
[Sat Aug 29 05:06:34.132145 2026] [security2:error] [pid 1018003:tid 1018185] [client 136.107.231.130:6692] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/frontend/.env"] [unique_id "apK9OjAh5Y1i2tUxg4H6ugAABdo"]
[Sat Aug 29 05:06:34.132241 2026] [security2:error] [pid 1018003:tid 1018185] [client 136.107.231.130:6692] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "alanmossman.mossmanphoto.com"] [uri "/frontend/.env"] [unique_id "apK9OjAh5Y1i2tUxg4H6ugAABdo"]
[Sat Aug 29 05:06:34.132312 2026] [security2:error] [pid 1018003:tid 1018177] [client 136.107.231.130:6450] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/.docker/.env"] [unique_id "apK9OjAh5Y1i2tUxg4H6vQAABdI"]
[Sat Aug 29 05:06:34.132408 2026] [security2:error] [pid 1018003:tid 1018177] [client 136.107.231.130:6450] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "alanmossman.mossmanphoto.com"] [uri "/.docker/.env"] [unique_id "apK9OjAh5Y1i2tUxg4H6vQAABdI"]
[Sat Aug 29 05:06:34.138208 2026] [security2:error] [pid 1018003:tid 1018224] [client 103.171.189.88:55125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9OjAh5Y1i2tUxg4H6vgAABgE"]
[Sat Aug 29 05:06:34.138285 2026] [security2:error] [pid 1018003:tid 1018224] [client 103.171.189.88:55125] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9OjAh5Y1i2tUxg4H6vgAABgE"]
[Sat Aug 29 05:06:34.142486 2026] [security2:error] [pid 1017536:tid 1017713] [client 52.139.37.240:14923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "apK9OiJcY4fy7tP-rU0JUQAAAkM"]
[Sat Aug 29 05:06:34.144067 2026] [security2:error] [pid 1017536:tid 1017740] [client 68.155.159.216:24462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/hehehehe.php"] [unique_id "apK9OiJcY4fy7tP-rU0JUgAAAl4"]
[Sat Aug 29 05:06:34.145815 2026] [security2:error] [pid 1018003:tid 1018159] [client 20.197.61.180:7893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/wp-admin/class-db.php"] [unique_id "apK9OjAh5Y1i2tUxg4H6wAAABcA"]
[Sat Aug 29 05:06:34.151814 2026] [security2:error] [pid 1017536:tid 1017694] [client 20.48.250.41:25458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/to.php"] [unique_id "apK9OiJcY4fy7tP-rU0JVAAAAjA"]
[Sat Aug 29 05:06:34.153350 2026] [security2:error] [pid 1017536:tid 1017571] [remote 34.23.124.185:45974] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/wp-config.old"] [unique_id "apK9OiJcY4fy7tP-rU0JUwACNCI"]
[Sat Aug 29 05:06:34.154278 2026] [security2:error] [pid 1018003:tid 1018219] [client 52.139.37.240:31117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/wp-admin/min.php"] [unique_id "apK9OjAh5Y1i2tUxg4H6wQAABfw"]
[Sat Aug 29 05:06:34.161454 2026] [security2:error] [pid 1017536:tid 1017707] [client 20.63.81.20:43597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/kjyehoxl.php"] [unique_id "apK9OiJcY4fy7tP-rU0JVwAAAj0"]
[Sat Aug 29 05:06:34.166977 2026] [security2:error] [pid 1018003:tid 1018268] [client 93.123.109.228:49884] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/prod/.env"] [unique_id "apK9OjAh5Y1i2tUxg4H6wwAABiw"]
[Sat Aug 29 05:06:34.170537 2026] [security2:error] [pid 1017536:tid 1017586] [remote 34.23.124.185:45974] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/wp-config.php.swp"] [unique_id "apK9OiJcY4fy7tP-rU0JWQACYTE"]
[Sat Aug 29 05:06:34.171475 2026] [core:error] [pid 1017536:tid 1017612] [remote 34.23.124.185:45974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.171492 2026] [core:error] [pid 1017536:tid 1017612] [remote 34.23.124.185:45974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.172445 2026] [security2:error] [pid 1017536:tid 1017721] [client 68.155.159.216:51497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK9OiJcY4fy7tP-rU0JWwAAAks"]
[Sat Aug 29 05:06:34.174304 2026] [security2:error] [pid 1017536:tid 1017721] [client 4.205.62.107:53429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/wpver.php"] [unique_id "apK9OiJcY4fy7tP-rU0JXAAAAks"]
[Sat Aug 29 05:06:34.175711 2026] [security2:error] [pid 1018003:tid 1018109] [remote 34.75.89.130:51724] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "freejohnstuart.com"] [uri "/wp-config.old"] [unique_id "apK9OjAh5Y1i2tUxg4H6yAAGGlg"]
[Sat Aug 29 05:06:34.175724 2026] [security2:error] [pid 1018003:tid 1018111] [remote 34.75.89.130:51724] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "freejohnstuart.com"] [uri "/wp-config.php.swp"] [unique_id "apK9OjAh5Y1i2tUxg4H6ywAGGlo"]
[Sat Aug 29 05:06:34.180332 2026] [core:error] [pid 1017536:tid 1017625] [remote 34.23.124.185:45974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.180346 2026] [core:error] [pid 1017536:tid 1017625] [remote 34.23.124.185:45974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.184230 2026] [security2:error] [pid 1017536:tid 1017689] [client 93.123.109.228:49600] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/product/.env"] [unique_id "apK9OiJcY4fy7tP-rU0JXgAAAis"]
[Sat Aug 29 05:06:34.188249 2026] [security2:error] [pid 1017536:tid 1017664] [remote 34.23.124.185:45974] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/wp-config.php~"] [unique_id "apK9OiJcY4fy7tP-rU0JYAACkn8"]
[Sat Aug 29 05:06:34.191066 2026] [security2:error] [pid 1017536:tid 1017678] [client 20.196.209.81:11561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/dxc.php"] [unique_id "apK9OiJcY4fy7tP-rU0JYQAAAiA"]
[Sat Aug 29 05:06:34.203083 2026] [core:error] [pid 1017536:tid 1017587] [remote 34.23.124.185:45974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.203100 2026] [core:error] [pid 1017536:tid 1017587] [remote 34.23.124.185:45974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.207075 2026] [security2:error] [pid 1017536:tid 1017704] [client 93.123.109.228:49540] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/production/.env"] [unique_id "apK9OiJcY4fy7tP-rU0JZQAAAjo"]
[Sat Aug 29 05:06:34.207243 2026] [security2:error] [pid 1017536:tid 1017785] [client 20.151.200.44:64394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/X7T6.php"] [unique_id "apK9OiJcY4fy7tP-rU0JZgAAAos"]
[Sat Aug 29 05:06:34.209946 2026] [security2:error] [pid 1017536:tid 1017695] [client 158.23.184.117:46923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/3.php"] [unique_id "apK9OiJcY4fy7tP-rU0JZwAAAjE"]
[Sat Aug 29 05:06:34.213622 2026] [core:error] [pid 1018003:tid 1018271] [client 45.148.10.62:38768] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.213641 2026] [core:error] [pid 1018003:tid 1018271] [client 45.148.10.62:38768] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.224301 2026] [security2:error] [pid 1018003:tid 1018194] [client 185.104.184.230:52492] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.wlu.rog.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "apK9OjAh5Y1i2tUxg4H6zgAABeM"]
[Sat Aug 29 05:06:34.225028 2026] [security2:error] [pid 1017536:tid 1017790] [client 168.107.94.195:60481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9OiJcY4fy7tP-rU0JagAAApA"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:34.232892 2026] [security2:error] [pid 1017536:tid 1017749] [client 158.23.184.117:59544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/.well-known/wp-links-opml.php"] [unique_id "apK9OiJcY4fy7tP-rU0JawAAAmc"]
[Sat Aug 29 05:06:34.237473 2026] [core:error] [pid 1017536:tid 1017583] [remote 34.23.124.185:45974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.237490 2026] [core:error] [pid 1017536:tid 1017583] [remote 34.23.124.185:45974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.238342 2026] [security2:error] [pid 1017536:tid 1017723] [client 40.83.93.50:1658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-admin/wp-signup.php"] [unique_id "apK9OiJcY4fy7tP-rU0JbgAAAk0"]
[Sat Aug 29 05:06:34.255704 2026] [security2:error] [pid 1018003:tid 1018262] [client 20.104.104.62:56326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/quoys.php"] [unique_id "apK9OjAh5Y1i2tUxg4H60QAABiY"]
[Sat Aug 29 05:06:34.257704 2026] [security2:error] [pid 1017536:tid 1017740] [client 20.104.104.62:48463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/xcre1.php"] [unique_id "apK9OiJcY4fy7tP-rU0JbwAAAl4"]
[Sat Aug 29 05:06:34.260792 2026] [security2:error] [pid 1017536:tid 1017675] [client 93.123.109.228:50128] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/project/.env"] [unique_id "apK9OiJcY4fy7tP-rU0JcAAAAh0"]
[Sat Aug 29 05:06:34.262947 2026] [security2:error] [pid 1017536:tid 1017698] [client 68.155.159.216:50353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK9OiJcY4fy7tP-rU0JcQAAAjQ"]
[Sat Aug 29 05:06:34.264008 2026] [security2:error] [pid 1017536:tid 1017767] [client 4.205.62.107:55972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/ms-edit.php"] [unique_id "apK9OiJcY4fy7tP-rU0JcgAAAnk"]
[Sat Aug 29 05:06:34.271371 2026] [security2:error] [pid 1017536:tid 1017707] [client 158.23.147.79:30655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK9OiJcY4fy7tP-rU0JcwAAAj0"]
[Sat Aug 29 05:06:34.285487 2026] [security2:error] [pid 1017536:tid 1017731] [client 93.123.109.228:50148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/public/phpinfo.php"] [unique_id "apK9OiJcY4fy7tP-rU0JdQAAAlU"]
[Sat Aug 29 05:06:34.291572 2026] [security2:error] [pid 1017536:tid 1017792] [client 93.123.109.228:50124] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/public/.env"] [unique_id "apK9OiJcY4fy7tP-rU0JdgAAApI"]
[Sat Aug 29 05:06:34.294624 2026] [security2:error] [pid 1017536:tid 1017786] [client 93.123.109.228:49518] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/public_html/.env"] [unique_id "apK9OiJcY4fy7tP-rU0JdwAAAow"]
[Sat Aug 29 05:06:34.294851 2026] [security2:error] [pid 1018003:tid 1018187] [client 93.123.109.228:49612] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/public-api/.env"] [unique_id "apK9OjAh5Y1i2tUxg4H60wAABdw"]
[Sat Aug 29 05:06:34.301823 2026] [security2:error] [pid 1017536:tid 1017678] [client 93.123.109.228:49622] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/qa/.env"] [unique_id "apK9OiJcY4fy7tP-rU0JeAAAAiA"]
[Sat Aug 29 05:06:34.325077 2026] [core:error] [pid 1017536:tid 1017552] [remote 34.23.124.185:45974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.325092 2026] [core:error] [pid 1017536:tid 1017552] [remote 34.23.124.185:45974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.326802 2026] [security2:error] [pid 1018003:tid 1018153] [client 20.48.250.41:25379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/thui.php"] [unique_id "apK9OjAh5Y1i2tUxg4H61gAABbo"]
[Sat Aug 29 05:06:34.338619 2026] [core:error] [pid 1017536:tid 1017595] [remote 34.23.124.185:45974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.338642 2026] [core:error] [pid 1017536:tid 1017595] [remote 34.23.124.185:45974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.338697 2026] [core:error] [pid 1017536:tid 1017557] [remote 34.23.124.185:45974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.338705 2026] [core:error] [pid 1017536:tid 1017557] [remote 34.23.124.185:45974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.341461 2026] [security2:error] [pid 1018003:tid 1018265] [client 52.139.37.240:14913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9OjAh5Y1i2tUxg4H61wAABik"]
[Sat Aug 29 05:06:34.345325 2026] [core:error] [pid 1017536:tid 1017549] [remote 34.23.124.185:45974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.345337 2026] [core:error] [pid 1017536:tid 1017549] [remote 34.23.124.185:45974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.350982 2026] [security2:error] [pid 1017536:tid 1017721] [client 52.139.37.240:31088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/wp-admin/wp-fileesx-449.php"] [unique_id "apK9OiJcY4fy7tP-rU0JhAAAAks"]
[Sat Aug 29 05:06:34.352131 2026] [security2:error] [pid 1017536:tid 1017717] [client 20.151.200.44:65033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/see.php"] [unique_id "apK9OiJcY4fy7tP-rU0JhgAAAkc"]
[Sat Aug 29 05:06:34.352772 2026] [security2:error] [pid 1018003:tid 1018212] [client 158.23.184.117:62324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "apK9OjAh5Y1i2tUxg4H62AAABfU"]
[Sat Aug 29 05:06:34.353476 2026] [core:error] [pid 1017536:tid 1017600] [remote 34.23.124.185:45974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.353486 2026] [core:error] [pid 1017536:tid 1017600] [remote 34.23.124.185:45974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.366260 2026] [security2:error] [pid 1017536:tid 1017749] [client 20.220.204.93:59024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/cytyr.php"] [unique_id "apK9OiJcY4fy7tP-rU0JiAAAAmc"]
[Sat Aug 29 05:06:34.375929 2026] [security2:error] [pid 1018003:tid 1018246] [client 158.23.184.117:60061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/.well-known/wp-load.php"] [unique_id "apK9OjAh5Y1i2tUxg4H62gAABhY"]
[Sat Aug 29 05:06:34.384272 2026] [security2:error] [pid 1018003:tid 1018218] [client 20.104.104.62:4098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/vbbn.php"] [unique_id "apK9OjAh5Y1i2tUxg4H63AAABfs"]
[Sat Aug 29 05:06:34.387256 2026] [security2:error] [pid 1018003:tid 1018258] [client 20.104.104.62:20807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/xccc.php"] [unique_id "apK9OjAh5Y1i2tUxg4H63QAABiI"]
[Sat Aug 29 05:06:34.388446 2026] [security2:error] [pid 1018003:tid 1018179] [client 158.23.147.79:32660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-content/cong.php"] [unique_id "apK9OjAh5Y1i2tUxg4H63gAABdQ"]
[Sat Aug 29 05:06:34.397745 2026] [core:error] [pid 1017536:tid 1017578] [remote 34.23.124.185:45974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.397799 2026] [core:error] [pid 1017536:tid 1017578] [remote 34.23.124.185:45974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.405694 2026] [security2:error] [pid 1017536:tid 1017710] [client 20.104.104.62:36935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/bnnof6.php"] [unique_id "apK9OiJcY4fy7tP-rU0JjQAAAkA"]
[Sat Aug 29 05:06:34.407568 2026] [security2:error] [pid 1017536:tid 1017781] [client 20.151.200.44:47418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/str.php"] [unique_id "apK9OiJcY4fy7tP-rU0JjgAAAoc"]
[Sat Aug 29 05:06:34.407923 2026] [security2:error] [pid 1017536:tid 1017711] [client 20.104.104.62:48703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/motu.php"] [unique_id "apK9OiJcY4fy7tP-rU0JjwAAAkE"]
[Sat Aug 29 05:06:34.422778 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.151.200.44:64835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/eval.php"] [unique_id "apK9OiJcY4fy7tP-rU0JkQAAAh0"]
[Sat Aug 29 05:06:34.437250 2026] [security2:error] [pid 1018003:tid 1018243] [client 158.23.147.79:25592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK9OjAh5Y1i2tUxg4H66QAABhM"]
[Sat Aug 29 05:06:34.439891 2026] [security2:error] [pid 1017536:tid 1017558] [remote 34.23.124.185:45974] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ"] [unique_id "apK9OiJcY4fy7tP-rU0JlQACNBU"]
[Sat Aug 29 05:06:34.440805 2026] [core:error] [pid 1017536:tid 1017570] [remote 34.23.124.185:45974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.440819 2026] [core:error] [pid 1017536:tid 1017570] [remote 34.23.124.185:45974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.442152 2026] [security2:error] [pid 1018003:tid 1018217] [client 158.158.54.35:17098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/css/wp-login.php"] [unique_id "apK9OjAh5Y1i2tUxg4H66wAABfo"]
[Sat Aug 29 05:06:34.465686 2026] [security2:error] [pid 1017536:tid 1017611] [remote 91.226.251.15:42594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.251.226.91.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "eastsidepride.com"] [uri "/wp-login.php"] [unique_id "apK9OiJcY4fy7tP-rU0JlwACU0o"]
[Sat Aug 29 05:06:34.469337 2026] [security2:error] [pid 1018003:tid 1018275] [client 20.48.250.41:25515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/Jcrop.php"] [unique_id "apK9OjAh5Y1i2tUxg4H68AAABjM"]
[Sat Aug 29 05:06:34.469396 2026] [security2:error] [pid 1018003:tid 1018206] [client 158.23.147.79:24503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/nf_tracking.php"] [unique_id "apK9OjAh5Y1i2tUxg4H67wAABe8"]
[Sat Aug 29 05:06:34.503756 2026] [security2:error] [pid 1017536:tid 1017704] [client 93.123.109.228:49974] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/erp/.env"] [unique_id "apK9OiJcY4fy7tP-rU0JoAAAAjo"]
[Sat Aug 29 05:06:34.505193 2026] [security2:error] [pid 1017536:tid 1017748] [client 20.196.209.81:13282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/goods.php"] [unique_id "apK9OiJcY4fy7tP-rU0JoQAAAmY"]
[Sat Aug 29 05:06:34.519997 2026] [security2:error] [pid 1017536:tid 1017749] [client 185.104.184.230:52506] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.wlu.rog.mybluehost.me"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "apK9OiJcY4fy7tP-rU0JpAAAAmc"]
[Sat Aug 29 05:06:34.522654 2026] [security2:error] [pid 1018003:tid 1018189] [client 158.23.184.117:21526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/.well-known/wp-mail.php"] [unique_id "apK9OjAh5Y1i2tUxg4H69AAABd4"]
[Sat Aug 29 05:06:34.541092 2026] [security2:error] [pid 1018003:tid 1018230] [client 20.104.104.62:48756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/wefile.php"] [unique_id "apK9OjAh5Y1i2tUxg4H6_QAABgY"]
[Sat Aug 29 05:06:34.543584 2026] [security2:error] [pid 1018003:tid 1018213] [client 20.104.104.62:64659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/rfi.php"] [unique_id "apK9OjAh5Y1i2tUxg4H6_gAABfY"]
[Sat Aug 29 05:06:34.544018 2026] [cgid:error] [pid 1018003:tid 1018164] [client 20.52.41.200:1252] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/cpslggc/404.shtml
[Sat Aug 29 05:06:34.547626 2026] [security2:error] [pid 1018003:tid 1018195] [client 52.139.37.240:31640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/wp-content/themes/min.php"] [unique_id "apK9OjAh5Y1i2tUxg4H6_wAABeQ"]
[Sat Aug 29 05:06:34.573095 2026] [security2:error] [pid 1018003:tid 1018174] [client 20.151.200.44:64991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/horeg.php"] [unique_id "apK9OjAh5Y1i2tUxg4H7AQAABc8"]
[Sat Aug 29 05:06:34.574509 2026] [security2:error] [pid 1017536:tid 1017723] [client 20.220.204.93:59073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/galer.php"] [unique_id "apK9OiJcY4fy7tP-rU0JpgAAAk0"]
[Sat Aug 29 05:06:34.575794 2026] [security2:error] [pid 1017536:tid 1017793] [client 158.23.184.117:62276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/wp-admin/css/admin.php"] [unique_id "apK9OiJcY4fy7tP-rU0JpwAAApM"]
[Sat Aug 29 05:06:34.600518 2026] [security2:error] [pid 1018003:tid 1018252] [client 93.123.109.228:49832] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/etc/apache2/apache2.conf"] [unique_id "apK9OjAh5Y1i2tUxg4H7BQAABhw"]
[Sat Aug 29 05:06:34.603956 2026] [security2:error] [pid 1018003:tid 1018222] [client 52.139.37.240:15246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/wp-index.php"] [unique_id "apK9OjAh5Y1i2tUxg4H7BgAABf8"]
[Sat Aug 29 05:06:34.605144 2026] [security2:error] [pid 1018003:tid 1018187] [client 168.107.94.195:63121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9OjAh5Y1i2tUxg4H7BwAABdw"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:34.616173 2026] [security2:error] [pid 1017536:tid 1017711] [client 20.104.104.62:28588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ronsseptic.com"] [uri "/wp-content/index.php"] [unique_id "apK9OiJcY4fy7tP-rU0JqwAAAkE"]
[Sat Aug 29 05:06:34.617897 2026] [security2:error] [pid 1017536:tid 1017705] [client 20.104.104.62:42626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/ah24.php"] [unique_id "apK9OiJcY4fy7tP-rU0JrAAAAjs"]
[Sat Aug 29 05:06:34.618079 2026] [security2:error] [pid 1017536:tid 1017731] [client 20.196.209.81:16755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/wp-2019.php"] [unique_id "apK9OiJcY4fy7tP-rU0JrQAAAlU"]
[Sat Aug 29 05:06:34.633316 2026] [security2:error] [pid 1017536:tid 1017675] [client 4.205.62.107:22375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/register.php"] [unique_id "apK9OiJcY4fy7tP-rU0JrwAAAh0"]
[Sat Aug 29 05:06:34.637764 2026] [security2:error] [pid 1017536:tid 1017698] [client 158.23.147.79:30592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/about.php"] [unique_id "apK9OiJcY4fy7tP-rU0JsQAAAjQ"]
[Sat Aug 29 05:06:34.646488 2026] [security2:error] [pid 1018003:tid 1018167] [client 68.155.159.216:64471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/simple.php"] [unique_id "apK9OjAh5Y1i2tUxg4H7CwAABcg"]
[Sat Aug 29 05:06:34.649661 2026] [security2:error] [pid 1018003:tid 1018246] [client 93.123.109.228:49994] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/etc/boto.cfg"] [unique_id "apK9OjAh5Y1i2tUxg4H7DAAABhY"]
[Sat Aug 29 05:06:34.651906 2026] [security2:error] [pid 1017536:tid 1017780] [client 20.48.250.41:25436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/ws58.php"] [unique_id "apK9OiJcY4fy7tP-rU0JswAAAoY"]
[Sat Aug 29 05:06:34.653081 2026] [security2:error] [pid 1018003:tid 1018218] [client 158.23.147.79:61623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-content/themes/too.php"] [unique_id "apK9OjAh5Y1i2tUxg4H7DQAABfs"]
[Sat Aug 29 05:06:34.655753 2026] [security2:error] [pid 1017536:tid 1017689] [client 20.104.104.62:20841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/moon.php"] [unique_id "apK9OiJcY4fy7tP-rU0JtAAAAis"]
[Sat Aug 29 05:06:34.661168 2026] [security2:error] [pid 1017536:tid 1017743] [client 93.123.109.228:50068] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/s3/.env.bak"] [unique_id "apK9OiJcY4fy7tP-rU0JtQAAAmE"]
[Sat Aug 29 05:06:34.668229 2026] [security2:error] [pid 1017536:tid 1017705] [client 158.23.184.117:59575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/.well-known/wp-settings.php"] [unique_id "apK9OiJcY4fy7tP-rU0JtgAAAjs"]
[Sat Aug 29 05:06:34.672042 2026] [security2:error] [pid 1017536:tid 1017751] [client 93.123.109.228:49708] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/fe/.env"] [unique_id "apK9OiJcY4fy7tP-rU0JtwAAAmk"]
[Sat Aug 29 05:06:34.694027 2026] [security2:error] [pid 1018003:tid 1018163] [client 20.52.41.200:1252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/a.php"] [unique_id "apK9OjAh5Y1i2tUxg4H7EAAABcQ"]
[Sat Aug 29 05:06:34.700392 2026] [security2:error] [pid 1018003:tid 1018276] [client 20.151.200.44:61953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/sao.php"] [unique_id "apK9OjAh5Y1i2tUxg4H7EQAABjQ"]
[Sat Aug 29 05:06:34.701631 2026] [security2:error] [pid 1018003:tid 1018244] [client 20.104.104.62:43011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/tajj.php"] [unique_id "apK9OjAh5Y1i2tUxg4H7EgAABhQ"]
[Sat Aug 29 05:06:34.721028 2026] [security2:error] [pid 1017536:tid 1017669] [client 158.23.184.117:62284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/bthil.php"] [unique_id "apK9OiJcY4fy7tP-rU0JugAAAhc"]
[Sat Aug 29 05:06:34.726477 2026] [security2:error] [pid 1018003:tid 1018206] [client 20.104.104.62:48500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/EM.php"] [unique_id "apK9OjAh5Y1i2tUxg4H7FQAABe8"]
[Sat Aug 29 05:06:34.728031 2026] [security2:error] [pid 1017536:tid 1017790] [client 40.83.93.50:1769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-blog-header.php"] [unique_id "apK9OiJcY4fy7tP-rU0JvQAAApA"]
[Sat Aug 29 05:06:34.734811 2026] [core:error] [pid 1017536:tid 1017538] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.734817 2026] [core:error] [pid 1017536:tid 1017585] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.734827 2026] [core:error] [pid 1017536:tid 1017538] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.734831 2026] [core:error] [pid 1017536:tid 1017585] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.735212 2026] [security2:error] [pid 1017536:tid 1017569] [remote 34.23.124.185:45990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/web.config"] [unique_id "apK9OiJcY4fy7tP-rU0JwwACjCA"]
[Sat Aug 29 05:06:34.735842 2026] [core:error] [pid 1017536:tid 1017572] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.735851 2026] [core:error] [pid 1017536:tid 1017608] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.737073 2026] [core:error] [pid 1017536:tid 1017621] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.742839 2026] [security2:error] [pid 1018003:tid 1018179] [client 52.139.37.240:31655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/wp-content/themes/x/bypass.php"] [unique_id "apK9OjAh5Y1i2tUxg4H7FgAABdQ"]
[Sat Aug 29 05:06:34.751036 2026] [security2:error] [pid 1017536:tid 1017736] [client 93.123.109.228:49766] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/front/.env"] [unique_id "apK9OiJcY4fy7tP-rU0JxQAAAlo"]
[Sat Aug 29 05:06:34.757479 2026] [security2:error] [pid 1017536:tid 1017694] [client 93.123.109.228:49996] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/frontend/.env"] [unique_id "apK9OiJcY4fy7tP-rU0JxgAAAjA"]
[Sat Aug 29 05:06:34.790763 2026] [security2:error] [pid 1018003:tid 1018275] [client 52.139.37.240:52644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.healthysmilestoday.com"] [uri "/aged.php"] [unique_id "apK9OjAh5Y1i2tUxg4H7GQAABjM"]
[Sat Aug 29 05:06:34.799391 2026] [security2:error] [pid 1017536:tid 1017749] [client 52.139.37.240:14954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/ww2.php"] [unique_id "apK9OiJcY4fy7tP-rU0JyQAAAmc"]
[Sat Aug 29 05:06:34.802337 2026] [security2:error] [pid 1018003:tid 1018157] [client 158.23.147.79:37897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK9OjAh5Y1i2tUxg4H7GgAABb4"]
[Sat Aug 29 05:06:34.818612 2026] [security2:error] [pid 1017536:tid 1017673] [client 158.23.184.117:60065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/.well-known/wp-signup.php"] [unique_id "apK9OiJcY4fy7tP-rU0JzwAAAhs"]
[Sat Aug 29 05:06:34.818737 2026] [security2:error] [pid 1017536:tid 1017753] [client 93.123.109.228:49622] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/server/.env"] [unique_id "apK9OiJcY4fy7tP-rU0JzgAAAms"]
[Sat Aug 29 05:06:34.819412 2026] [security2:error] [pid 1018003:tid 1018175] [client 20.48.250.41:25570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/xs.php"] [unique_id "apK9OjAh5Y1i2tUxg4H7HAAABdA"]
[Sat Aug 29 05:06:34.820131 2026] [security2:error] [pid 1018003:tid 1018185] [client 185.104.184.230:52530] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.wlu.rog.mybluehost.me"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "apK9OjAh5Y1i2tUxg4H7HQAABdo"]
[Sat Aug 29 05:06:34.823369 2026] [security2:error] [pid 1017536:tid 1017729] [client 93.123.109.228:50068] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/server/api/.env"] [unique_id "apK9OiJcY4fy7tP-rU0J0QAAAlM"]
[Sat Aug 29 05:06:34.833925 2026] [security2:error] [pid 1018003:tid 1018255] [client 93.123.109.228:49612] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/server/backend/.env"] [unique_id "apK9OjAh5Y1i2tUxg4H7HwAABh8"]
[Sat Aug 29 05:06:34.841311 2026] [security2:error] [pid 1017536:tid 1017780] [client 20.151.200.44:64395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/basic.php"] [unique_id "apK9OiJcY4fy7tP-rU0J1AAAAoY"]
[Sat Aug 29 05:06:34.843248 2026] [security2:error] [pid 1017536:tid 1017792] [client 158.23.147.79:26536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/dropdown.php"] [unique_id "apK9OiJcY4fy7tP-rU0J1QAAApI"]
[Sat Aug 29 05:06:34.846484 2026] [security2:error] [pid 1017536:tid 1017743] [client 158.23.147.79:48255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/install.php"] [unique_id "apK9OiJcY4fy7tP-rU0J1wAAAmE"]
[Sat Aug 29 05:06:34.850863 2026] [security2:error] [pid 1018003:tid 1018159] [client 20.104.104.62:60471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/ztv.php"] [unique_id "apK9OjAh5Y1i2tUxg4H7IQAABcA"]
[Sat Aug 29 05:06:34.856705 2026] [security2:error] [pid 1018003:tid 1018245] [client 20.220.204.93:59106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/baixy.php"] [unique_id "apK9OjAh5Y1i2tUxg4H7IgAABhU"]
[Sat Aug 29 05:06:34.866043 2026] [security2:error] [pid 1017536:tid 1017675] [client 158.23.184.117:46338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/file.php"] [unique_id "apK9OiJcY4fy7tP-rU0J2gAAAh0"]
[Sat Aug 29 05:06:34.868007 2026] [security2:error] [pid 1018003:tid 1018240] [client 20.197.61.180:7557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/wp-contentt.php"] [unique_id "apK9OjAh5Y1i2tUxg4H7IwAABhA"]
[Sat Aug 29 05:06:34.868155 2026] [security2:error] [pid 1018003:tid 1018156] [client 4.205.62.107:22376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/wp-jufsis.php"] [unique_id "apK9OjAh5Y1i2tUxg4H7JAAABb0"]
[Sat Aug 29 05:06:34.872682 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.151.200.44:64838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/uuu.php"] [unique_id "apK9OiJcY4fy7tP-rU0J3QAAAlY"]
[Sat Aug 29 05:06:34.879703 2026] [security2:error] [pid 1017536:tid 1017681] [client 20.104.104.62:28556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ronsseptic.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "apK9OiJcY4fy7tP-rU0J3wAAAiM"]
[Sat Aug 29 05:06:34.894502 2026] [security2:error] [pid 1017536:tid 1017691] [client 158.158.54.35:14140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/images/index.php"] [unique_id "apK9OiJcY4fy7tP-rU0J4AAAAi0"]
[Sat Aug 29 05:06:34.895070 2026] [security2:error] [pid 1018003:tid 1018213] [client 158.23.147.79:35738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/asd.php"] [unique_id "apK9OjAh5Y1i2tUxg4H7KwAABfY"]
[Sat Aug 29 05:06:34.903498 2026] [security2:error] [pid 1017536:tid 1017793] [client 20.196.209.81:17907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/hehe.php"] [unique_id "apK9OiJcY4fy7tP-rU0J4gAAApM"]
[Sat Aug 29 05:06:34.903997 2026] [security2:error] [pid 1017536:tid 1017564] [remote 52.167.144.136:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantsfans.net"] [uri "/message_board/index.php"] [unique_id "apK9OiJcY4fy7tP-rU0J4wACXhs"]
[Sat Aug 29 05:06:34.910325 2026] [security2:error] [pid 1017536:tid 1017669] [client 20.104.104.62:43032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/grsiuk.php"] [unique_id "apK9OiJcY4fy7tP-rU0J5AAAAhc"]
[Sat Aug 29 05:06:34.911473 2026] [security2:error] [pid 1018003:tid 1018190] [client 68.155.159.216:49297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/NewFile.php/"] [unique_id "apK9OjAh5Y1i2tUxg4H7MwAABd8"]
[Sat Aug 29 05:06:34.916168 2026] [security2:error] [pid 1018003:tid 1018194] [client 20.104.49.130:54814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/log.php"] [unique_id "apK9OjAh5Y1i2tUxg4H7NAAABeM"]
[Sat Aug 29 05:06:34.926387 2026] [security2:error] [pid 1018003:tid 1018199] [client 20.104.104.62:48659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/ca4.php"] [unique_id "apK9OjAh5Y1i2tUxg4H7NwAABeg"]
[Sat Aug 29 05:06:34.931020 2026] [security2:error] [pid 1017536:tid 1017709] [client 4.205.62.107:22288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/333.php"] [unique_id "apK9OiJcY4fy7tP-rU0J5wAAAj8"]
[Sat Aug 29 05:06:34.942029 2026] [security2:error] [pid 1017536:tid 1017695] [client 93.123.109.228:49754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/info.php"] [unique_id "apK9OiJcY4fy7tP-rU0J6QAAAjE"]
[Sat Aug 29 05:06:34.948811 2026] [security2:error] [pid 1017536:tid 1017734] [client 93.123.109.228:49708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/infophp.php"] [unique_id "apK9OiJcY4fy7tP-rU0J6wAAAlg"]
[Sat Aug 29 05:06:34.961107 2026] [security2:error] [pid 1018003:tid 1018256] [client 20.104.104.62:20862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wkwk.php"] [unique_id "apK9OjAh5Y1i2tUxg4H7PQAABiA"]
[Sat Aug 29 05:06:34.962035 2026] [security2:error] [pid 1017536:tid 1017776] [client 4.205.62.107:26639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/sadd.php"] [unique_id "apK9OiJcY4fy7tP-rU0J7AAAAoI"]
[Sat Aug 29 05:06:34.966470 2026] [security2:error] [pid 1017536:tid 1017672] [client 158.23.184.117:59571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/002.php"] [unique_id "apK9OiJcY4fy7tP-rU0J7gAAAho"]
[Sat Aug 29 05:06:34.968861 2026] [security2:error] [pid 1017536:tid 1017711] [client 93.123.109.228:49622] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/service/.env"] [unique_id "apK9OiJcY4fy7tP-rU0J8AAAAkE"]
[Sat Aug 29 05:06:34.971892 2026] [security2:error] [pid 1018003:tid 1018259] [client 93.123.109.228:50102] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/services/.env"] [unique_id "apK9OjAh5Y1i2tUxg4H7PwAABiM"]
[Sat Aug 29 05:06:34.977339 2026] [security2:error] [pid 1017536:tid 1017707] [client 158.23.184.117:34695] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.miketowery.net"] [uri "/1.php"] [unique_id "apK9OiJcY4fy7tP-rU0J8wAAAj0"]
[Sat Aug 29 05:06:34.977463 2026] [security2:error] [pid 1017536:tid 1017707] [client 158.23.184.117:34695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/1.php"] [unique_id "apK9OiJcY4fy7tP-rU0J8wAAAj0"]
[Sat Aug 29 05:06:34.985592 2026] [security2:error] [pid 1018003:tid 1018218] [client 168.107.94.195:63445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9OjAh5Y1i2tUxg4H7QAAABfs"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:34.987758 2026] [core:error] [pid 1017536:tid 1017580] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.987781 2026] [core:error] [pid 1017536:tid 1017580] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.989489 2026] [core:error] [pid 1017536:tid 1017610] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.989505 2026] [core:error] [pid 1017536:tid 1017610] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.989518 2026] [core:error] [pid 1017536:tid 1017646] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.989531 2026] [core:error] [pid 1017536:tid 1017646] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.990242 2026] [core:error] [pid 1017536:tid 1017634] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.990255 2026] [core:error] [pid 1017536:tid 1017634] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.990256 2026] [core:error] [pid 1017536:tid 1017577] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.990265 2026] [core:error] [pid 1017536:tid 1017577] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.990467 2026] [security2:error] [pid 1018003:tid 1018265] [client 20.48.250.41:25361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/zu.php"] [unique_id "apK9OjAh5Y1i2tUxg4H7QQAABik"]
[Sat Aug 29 05:06:34.991380 2026] [core:error] [pid 1017536:tid 1017648] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.991396 2026] [core:error] [pid 1017536:tid 1017648] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:34.997763 2026] [security2:error] [pid 1017536:tid 1017736] [client 52.139.37.240:15236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/7logs.php"] [unique_id "apK9OiJcY4fy7tP-rU0J-wAAAlo"]
[Sat Aug 29 05:06:34.998112 2026] [security2:error] [pid 1018003:tid 1018233] [client 93.123.109.228:50016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/infos.php"] [unique_id "apK9OjAh5Y1i2tUxg4H7RAAABgk"]
[Sat Aug 29 05:06:35.010783 2026] [security2:error] [pid 1018003:tid 1018153] [client 158.23.184.117:62320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/lock360.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7RgAABbo"]
[Sat Aug 29 05:06:35.011604 2026] [security2:error] [pid 1018003:tid 1018252] [client 52.139.37.240:52614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.healthysmilestoday.com"] [uri "/essexec.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7SAAABhw"]
[Sat Aug 29 05:06:35.015605 2026] [security2:error] [pid 1017536:tid 1017792] [client 20.104.104.62:23402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/kure.php"] [unique_id "apK9OyJcY4fy7tP-rU0J_gAAApI"]
[Sat Aug 29 05:06:35.026065 2026] [autoindex:error] [pid 1018003:tid 1018171] [client 52.139.37.240:0] AH01276: Cannot serve directory /home4/swumccom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:06:35.027022 2026] [security2:error] [pid 1018003:tid 1018207] [client 93.123.109.228:49954] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/laravel/.env"] [unique_id "apK9OzAh5Y1i2tUxg4H7SQAABfA"]
[Sat Aug 29 05:06:35.027452 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.220.204.93:59064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/ava.php"] [unique_id "apK9OyJcY4fy7tP-rU0J_wAAAh0"]
[Sat Aug 29 05:06:35.035023 2026] [security2:error] [pid 1018003:tid 1018164] [client 20.196.209.81:19423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/menu.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7SgAABcU"]
[Sat Aug 29 05:06:35.044717 2026] [security2:error] [pid 1017536:tid 1017673] [client 158.23.184.117:34547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/2.php"] [unique_id "apK9OyJcY4fy7tP-rU0KAAAAAhs"]
[Sat Aug 29 05:06:35.052224 2026] [security2:error] [pid 1017536:tid 1017748] [client 93.123.109.228:50038] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/shared/.env"] [unique_id "apK9OyJcY4fy7tP-rU0KAQAAAmY"]
[Sat Aug 29 05:06:35.072787 2026] [security2:error] [pid 1018003:tid 1018277] [client 20.151.200.44:46629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/mega.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7TAAABjU"]
[Sat Aug 29 05:06:35.075320 2026] [security2:error] [pid 1018003:tid 1018267] [client 93.123.109.228:50058] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/shop/.env"] [unique_id "apK9OzAh5Y1i2tUxg4H7TQAABis"]
[Sat Aug 29 05:06:35.102379 2026] [security2:error] [pid 1017536:tid 1017793] [client 20.151.200.44:65034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/monso.php"] [unique_id "apK9OyJcY4fy7tP-rU0KAgAAApM"]
[Sat Aug 29 05:06:35.109035 2026] [security2:error] [pid 1018003:tid 1018217] [client 52.139.37.240:31546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7UQAABfo"]
[Sat Aug 29 05:06:35.115824 2026] [security2:error] [pid 1017536:tid 1017761] [client 158.23.184.117:60067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/0x.php"] [unique_id "apK9OyJcY4fy7tP-rU0KAwAAAnM"]
[Sat Aug 29 05:06:35.116693 2026] [security2:error] [pid 1017536:tid 1017790] [client 20.104.104.62:4816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/ahy66.php"] [unique_id "apK9OyJcY4fy7tP-rU0KBgAAApA"]
[Sat Aug 29 05:06:35.119085 2026] [core:error] [pid 1017536:tid 1017631] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:35.119100 2026] [core:error] [pid 1017536:tid 1017631] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:35.119870 2026] [core:error] [pid 1017536:tid 1017615] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:35.119886 2026] [core:error] [pid 1017536:tid 1017615] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:35.122816 2026] [security2:error] [pid 1018003:tid 1018160] [client 185.104.184.230:52538] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.wlu.rog.mybluehost.me"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "apK9OzAh5Y1i2tUxg4H7UwAABcE"]
[Sat Aug 29 05:06:35.136710 2026] [security2:error] [pid 1017536:tid 1017734] [client 20.48.250.41:25526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/lanka.php"] [unique_id "apK9OyJcY4fy7tP-rU0KCgAAAlg"]
[Sat Aug 29 05:06:35.138117 2026] [security2:error] [pid 1017536:tid 1017786] [client 93.123.109.228:50176] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/src/.env"] [unique_id "apK9OyJcY4fy7tP-rU0KCwAAAow"]
[Sat Aug 29 05:06:35.138701 2026] [security2:error] [pid 1017536:tid 1017776] [client 93.123.109.228:49974] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/lms/.env"] [unique_id "apK9OyJcY4fy7tP-rU0KDAAAAoI"]
[Sat Aug 29 05:06:35.151167 2026] [security2:error] [pid 1017536:tid 1017781] [client 111.235.68.106:35756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK9OyJcY4fy7tP-rU0KDQAAAoc"]
[Sat Aug 29 05:06:35.151285 2026] [security2:error] [pid 1017536:tid 1017781] [client 111.235.68.106:35756] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK9OyJcY4fy7tP-rU0KDQAAAoc"]
[Sat Aug 29 05:06:35.152130 2026] [security2:error] [pid 1017536:tid 1017669] [client 158.23.184.117:46358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/fpwch.php"] [unique_id "apK9OyJcY4fy7tP-rU0KDgAAAhc"]
[Sat Aug 29 05:06:35.166272 2026] [security2:error] [pid 1018003:tid 1018226] [client 20.52.41.200:1753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/u.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7WAAABgM"]
[Sat Aug 29 05:06:35.189453 2026] [security2:error] [pid 1017536:tid 1017780] [client 68.155.159.216:33671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK9OyJcY4fy7tP-rU0KEgAAAoY"]
[Sat Aug 29 05:06:35.192438 2026] [security2:error] [pid 1018003:tid 1018261] [client 68.155.159.216:52738] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.philadelphialawworks.org"] [uri "/1.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7WgAABiU"]
[Sat Aug 29 05:06:35.192461 2026] [security2:error] [pid 1017536:tid 1017672] [client 158.23.184.117:34702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/7.php"] [unique_id "apK9OyJcY4fy7tP-rU0KFQAAAho"]
[Sat Aug 29 05:06:35.192512 2026] [security2:error] [pid 1018003:tid 1018261] [client 68.155.159.216:52738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/1.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7WgAABiU"]
[Sat Aug 29 05:06:35.195986 2026] [security2:error] [pid 1017536:tid 1017678] [client 52.139.37.240:14657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/ac.php"] [unique_id "apK9OyJcY4fy7tP-rU0KFwAAAiA"]
[Sat Aug 29 05:06:35.203389 2026] [security2:error] [pid 1017536:tid 1017737] [client 20.104.104.62:64735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wpvitamins.php"] [unique_id "apK9OyJcY4fy7tP-rU0KGQAAAls"]
[Sat Aug 29 05:06:35.207014 2026] [security2:error] [pid 1017536:tid 1017689] [client 20.104.104.62:48490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newfweiler.marklutton.com"] [uri "/x0x.php"] [unique_id "apK9OyJcY4fy7tP-rU0KGwAAAis"]
[Sat Aug 29 05:06:35.208978 2026] [security2:error] [pid 1017536:tid 1017731] [client 52.139.37.240:52640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.healthysmilestoday.com"] [uri "/fw.php"] [unique_id "apK9OyJcY4fy7tP-rU0KHAAAAlU"]
[Sat Aug 29 05:06:35.221971 2026] [security2:error] [pid 1017536:tid 1017691] [client 40.83.93.50:1762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-blogs.php"] [unique_id "apK9OyJcY4fy7tP-rU0KHgAAAi0"]
[Sat Aug 29 05:06:35.227813 2026] [security2:error] [pid 1018003:tid 1018198] [client 20.104.104.62:28562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ronsseptic.com"] [uri "/403.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7XQAABec"]
[Sat Aug 29 05:06:35.228096 2026] [security2:error] [pid 1018003:tid 1018240] [client 93.123.109.228:49798] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/local/.env"] [unique_id "apK9OzAh5Y1i2tUxg4H7XAAABhA"]
[Sat Aug 29 05:06:35.235917 2026] [security2:error] [pid 1017536:tid 1017748] [client 20.63.81.20:46937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/domvf.php"] [unique_id "apK9OyJcY4fy7tP-rU0KIQAAAmY"]
[Sat Aug 29 05:06:35.242160 2026] [security2:error] [pid 1018003:tid 1018243] [client 103.162.125.59:54109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.125.162.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7XgAABhM"]
[Sat Aug 29 05:06:35.242239 2026] [security2:error] [pid 1018003:tid 1018243] [client 103.162.125.59:54109] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7XgAABhM"]
[Sat Aug 29 05:06:35.244011 2026] [security2:error] [pid 1018003:tid 1018268] [client 20.104.104.62:60426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/cafe.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7XwAABiw"]
[Sat Aug 29 05:06:35.249726 2026] [core:error] [pid 1017536:tid 1017644] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:35.249740 2026] [core:error] [pid 1017536:tid 1017644] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:35.259295 2026] [security2:error] [pid 1018003:tid 1018230] [client 20.220.204.93:59094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/gdn.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7YQAABgY"]
[Sat Aug 29 05:06:35.264944 2026] [security2:error] [pid 1017536:tid 1017790] [client 20.151.200.44:64416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/rce.php"] [unique_id "apK9OyJcY4fy7tP-rU0KJAAAApA"]
[Sat Aug 29 05:06:35.270042 2026] [core:error] [pid 1017536:tid 1017661] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:35.270060 2026] [core:error] [pid 1017536:tid 1017661] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:35.271406 2026] [security2:error] [pid 1017536:tid 1017734] [client 20.48.250.41:25372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/gettest.php"] [unique_id "apK9OyJcY4fy7tP-rU0KKAAAAlg"]
[Sat Aug 29 05:06:35.271691 2026] [core:error] [pid 1017536:tid 1017651] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:35.271698 2026] [core:error] [pid 1017536:tid 1017651] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:35.272326 2026] [security2:error] [pid 1017536:tid 1017776] [client 20.104.104.62:5057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/gaje.php"] [unique_id "apK9OyJcY4fy7tP-rU0KKQAAAoI"]
[Sat Aug 29 05:06:35.278540 2026] [security2:error] [pid 1017536:tid 1017691] [client 158.23.184.117:21507] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/1.php"] [unique_id "apK9OyJcY4fy7tP-rU0KKwAAAi0"]
[Sat Aug 29 05:06:35.278627 2026] [security2:error] [pid 1017536:tid 1017691] [client 158.23.184.117:21507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/1.php"] [unique_id "apK9OyJcY4fy7tP-rU0KKwAAAi0"]
[Sat Aug 29 05:06:35.278740 2026] [security2:error] [pid 1017536:tid 1017669] [client 68.155.159.216:51441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/about.php"] [unique_id "apK9OyJcY4fy7tP-rU0KLAAAAhc"]
[Sat Aug 29 05:06:35.278988 2026] [security2:error] [pid 1017536:tid 1017781] [client 93.123.109.228:50044] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/srv/.env"] [unique_id "apK9OyJcY4fy7tP-rU0KKgAAAoc"]
[Sat Aug 29 05:06:35.279793 2026] [security2:error] [pid 1017536:tid 1017717] [client 68.155.159.216:18332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK9OyJcY4fy7tP-rU0KLgAAAkc"]
[Sat Aug 29 05:06:35.281083 2026] [security2:error] [pid 1017536:tid 1017710] [client 93.123.109.228:50032] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/market/.env"] [unique_id "apK9OyJcY4fy7tP-rU0KLwAAAkA"]
[Sat Aug 29 05:06:35.285012 2026] [security2:error] [pid 1018003:tid 1018195] [client 93.123.109.228:50102] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/stage/.env"] [unique_id "apK9OzAh5Y1i2tUxg4H7YwAABeQ"]
[Sat Aug 29 05:06:35.291961 2026] [security2:error] [pid 1017536:tid 1017736] [client 93.123.109.228:50176] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/staging/.env"] [unique_id "apK9OyJcY4fy7tP-rU0KMQAAAlo"]
[Sat Aug 29 05:06:35.295597 2026] [core:error] [pid 1017536:tid 1017643] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:35.295611 2026] [core:error] [pid 1017536:tid 1017643] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:35.296661 2026] [core:error] [pid 1017536:tid 1017554] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:35.296673 2026] [core:error] [pid 1017536:tid 1017554] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:35.298113 2026] [security2:error] [pid 1018003:tid 1018189] [client 158.23.184.117:62306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/storage/index.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7ZAAABd4"]
[Sat Aug 29 05:06:35.300487 2026] [core:error] [pid 1017536:tid 1017614] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:35.300499 2026] [core:error] [pid 1017536:tid 1017614] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:35.304062 2026] [security2:error] [pid 1017536:tid 1017723] [client 20.63.81.20:56885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/llyuxaqd.php"] [unique_id "apK9OyJcY4fy7tP-rU0KNwAAAk0"]
[Sat Aug 29 05:06:35.309764 2026] [security2:error] [pid 1017536:tid 1017733] [client 52.139.37.240:31617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/wp-info.php"] [unique_id "apK9OyJcY4fy7tP-rU0KOQAAAlc"]
[Sat Aug 29 05:06:35.313413 2026] [core:error] [pid 1017536:tid 1017630] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:35.313430 2026] [core:error] [pid 1017536:tid 1017630] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:35.336673 2026] [security2:error] [pid 1017536:tid 1017788] [client 158.23.184.117:34516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/10.php"] [unique_id "apK9OyJcY4fy7tP-rU0KOwAAAo4"]
[Sat Aug 29 05:06:35.338679 2026] [security2:error] [pid 1017536:tid 1017731] [client 93.123.109.228:49518] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/stg/.env"] [unique_id "apK9OyJcY4fy7tP-rU0KPAAAAlU"]
[Sat Aug 29 05:06:35.343030 2026] [security2:error] [pid 1017536:tid 1017622] [remote 198.52.231.183:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 183.231.52.198.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantsfans.net"] [uri "/wp-comments-post.php"] [unique_id "apK9OyJcY4fy7tP-rU0KNgACi1U"]
[Sat Aug 29 05:06:35.343201 2026] [security2:error] [pid 1017536:tid 1017785] [client 198.52.231.183:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "409"] [hostname "giantsfans.net"] [uri "/wp-comments-post.php"] [unique_id "apK9OyJcY4fy7tP-rU0KNgACi1U"]
[Sat Aug 29 05:06:35.359696 2026] [security2:error] [pid 1017536:tid 1017792] [client 4.205.62.107:53437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/autogooey.php"] [unique_id "apK9OyJcY4fy7tP-rU0KPwAAApI"]
[Sat Aug 29 05:06:35.362439 2026] [core:error] [pid 1017536:tid 1017729] [client 158.158.54.35:2856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:35.362453 2026] [core:error] [pid 1017536:tid 1017729] [client 158.158.54.35:2856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:35.367572 2026] [security2:error] [pid 1018003:tid 1018188] [client 168.107.94.195:63844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7ZwAABd0"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:35.368242 2026] [security2:error] [pid 1017536:tid 1017749] [client 20.151.200.44:64277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/private.php"] [unique_id "apK9OyJcY4fy7tP-rU0KQQAAAmc"]
[Sat Aug 29 05:06:35.368858 2026] [security2:error] [pid 1017536:tid 1017681] [client 20.151.200.44:47358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/ww3.php"] [unique_id "apK9OyJcY4fy7tP-rU0KQgAAAiM"]
[Sat Aug 29 05:06:35.377654 2026] [security2:error] [pid 1018003:tid 1018256] [client 68.155.159.216:50275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/goat1.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7aAAABiA"]
[Sat Aug 29 05:06:35.381680 2026] [security2:error] [pid 1017536:tid 1017786] [client 158.23.147.79:30637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK9OyJcY4fy7tP-rU0KRAAAAow"]
[Sat Aug 29 05:06:35.386304 2026] [security2:error] [pid 1018003:tid 1018212] [client 93.123.109.228:49664] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/marketing/.env"] [unique_id "apK9OzAh5Y1i2tUxg4H7agAABfU"]
[Sat Aug 29 05:06:35.389484 2026] [security2:error] [pid 1018003:tid 1018262] [client 20.63.81.20:46901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/biufile.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7bAAABiY"]
[Sat Aug 29 05:06:35.390246 2026] [security2:error] [pid 1017536:tid 1017705] [client 52.139.37.240:15277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/ctex1.php"] [unique_id "apK9OyJcY4fy7tP-rU0KRgAAAjs"]
[Sat Aug 29 05:06:35.391078 2026] [security2:error] [pid 1018003:tid 1018167] [client 20.220.204.93:52242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/f2.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7bQAABcg"]
[Sat Aug 29 05:06:35.400317 2026] [security2:error] [pid 1017536:tid 1017724] [client 4.205.62.107:55990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/lmfi2.php"] [unique_id "apK9OyJcY4fy7tP-rU0KSgAAAk4"]
[Sat Aug 29 05:06:35.401652 2026] [security2:error] [pid 1018003:tid 1018030] [remote 34.75.89.130:51724] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "freejohnstuart.com"] [uri "/static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ"] [unique_id "apK9OzAh5Y1i2tUxg4H7cQAGCQk"]
[Sat Aug 29 05:06:35.415098 2026] [core:error] [pid 1017536:tid 1017628] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:35.415117 2026] [core:error] [pid 1017536:tid 1017628] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:35.418104 2026] [security2:error] [pid 1018003:tid 1018222] [client 52.139.37.240:52623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.healthysmilestoday.com"] [uri "/zwso.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7dQAABf8"]
[Sat Aug 29 05:06:35.418451 2026] [security2:error] [pid 1017536:tid 1017547] [remote 34.23.124.185:45990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/app/.env"] [unique_id "apK9OyJcY4fy7tP-rU0KTgACQAo"]
[Sat Aug 29 05:06:35.418964 2026] [security2:error] [pid 1017536:tid 1017709] [client 158.23.184.117:22274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/10.php"] [unique_id "apK9OyJcY4fy7tP-rU0KUQAAAj8"]
[Sat Aug 29 05:06:35.419159 2026] [security2:error] [pid 1017536:tid 1017669] [client 93.123.109.228:49600] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/stripe/.env"] [unique_id "apK9OyJcY4fy7tP-rU0KTQAAAhc"]
[Sat Aug 29 05:06:35.419177 2026] [security2:error] [pid 1017536:tid 1017565] [remote 34.23.124.185:45990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/server/.env"] [unique_id "apK9OyJcY4fy7tP-rU0KTwACQBw"]
[Sat Aug 29 05:06:35.419470 2026] [security2:error] [pid 1017536:tid 1017663] [remote 34.23.124.185:45990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/dev/.env"] [unique_id "apK9OyJcY4fy7tP-rU0KUAACQH4"]
[Sat Aug 29 05:06:35.425192 2026] [security2:error] [pid 1017536:tid 1017713] [client 185.104.184.230:52546] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.wlu.rog.mybluehost.me"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "apK9OyJcY4fy7tP-rU0KUgAAAkM"]
[Sat Aug 29 05:06:35.426188 2026] [security2:error] [pid 1018003:tid 1018187] [client 20.104.104.62:28565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ronsseptic.com"] [uri "/ava.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7dgAABdw"]
[Sat Aug 29 05:06:35.433841 2026] [security2:error] [pid 1018003:tid 1018252] [client 20.220.204.93:59091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7eAAABhw"]
[Sat Aug 29 05:06:35.436007 2026] [security2:error] [pid 1017536:tid 1017584] [remote 34.23.124.185:45990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/frontend/.env"] [unique_id "apK9OyJcY4fy7tP-rU0KVAACJS8"]
[Sat Aug 29 05:06:35.436030 2026] [security2:error] [pid 1017536:tid 1017638] [remote 34.23.124.185:45990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/src/.env"] [unique_id "apK9OyJcY4fy7tP-rU0KVQACJWU"]
[Sat Aug 29 05:06:35.436394 2026] [security2:error] [pid 1017536:tid 1017765] [client 20.48.250.41:25349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/35.php"] [unique_id "apK9OyJcY4fy7tP-rU0KVgAAAnc"]
[Sat Aug 29 05:06:35.441179 2026] [security2:error] [pid 1017536:tid 1017696] [client 20.63.81.20:60451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/nbwxolou.php"] [unique_id "apK9OyJcY4fy7tP-rU0KWAAAAjI"]
[Sat Aug 29 05:06:35.445938 2026] [security2:error] [pid 1018003:tid 1018183] [client 20.196.209.81:13300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/wp-admin/class-db.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7ewAABdg"]
[Sat Aug 29 05:06:35.482745 2026] [security2:error] [pid 1017536:tid 1017780] [client 158.23.184.117:34737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/13.php"] [unique_id "apK9OyJcY4fy7tP-rU0KXAAAAoY"]
[Sat Aug 29 05:06:35.490238 2026] [security2:error] [pid 1018003:tid 1018170] [client 93.123.109.228:49954] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/media/.env"] [unique_id "apK9OzAh5Y1i2tUxg4H7fgAABcs"]
[Sat Aug 29 05:06:35.491868 2026] [security2:error] [pid 1017536:tid 1017674] [client 93.123.109.228:49518] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/terraform.tfstate.backup"] [unique_id "apK9OyJcY4fy7tP-rU0KXQAAAhw"]
[Sat Aug 29 05:06:35.496663 2026] [security2:error] [pid 1018003:tid 1018161] [client 158.23.184.117:46947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/wp-includes/blocks/search/index.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7fwAABcI"]
[Sat Aug 29 05:06:35.498965 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.196.209.81:3900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/alfa.php"] [unique_id "apK9OyJcY4fy7tP-rU0KXwAAAlY"]
[Sat Aug 29 05:06:35.503146 2026] [security2:error] [pid 1017536:tid 1017678] [client 52.139.37.240:31130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/wp-wordfence-waf.php"] [unique_id "apK9OyJcY4fy7tP-rU0KYQAAAiA"]
[Sat Aug 29 05:06:35.503775 2026] [security2:error] [pid 1017536:tid 1017743] [client 93.123.109.228:49966] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/new/.env"] [unique_id "apK9OyJcY4fy7tP-rU0KYAAAAmE"]
[Sat Aug 29 05:06:35.511287 2026] [security2:error] [pid 1017536:tid 1017706] [client 93.123.109.228:49940] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/node-api/.env"] [unique_id "apK9OyJcY4fy7tP-rU0KYgAAAjw"]
[Sat Aug 29 05:06:35.518045 2026] [security2:error] [pid 1017536:tid 1017649] [remote 34.23.124.185:45990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/production/.env"] [unique_id "apK9OyJcY4fy7tP-rU0KZQACjHA"]
[Sat Aug 29 05:06:35.518579 2026] [security2:error] [pid 1017536:tid 1017695] [client 20.63.81.20:46950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/blacks.php"] [unique_id "apK9OyJcY4fy7tP-rU0KZwAAAjE"]
[Sat Aug 29 05:06:35.519814 2026] [security2:error] [pid 1017536:tid 1017623] [remote 34.23.124.185:45990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/docker/.env"] [unique_id "apK9OyJcY4fy7tP-rU0KZgACjFY"]
[Sat Aug 29 05:06:35.537132 2026] [security2:error] [pid 1017536:tid 1017724] [client 93.123.109.228:50068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/test.php"] [unique_id "apK9OyJcY4fy7tP-rU0KaAAAAk4"]
[Sat Aug 29 05:06:35.539568 2026] [security2:error] [pid 1017536:tid 1017637] [remote 34.23.124.185:45990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/apps/.env"] [unique_id "apK9OyJcY4fy7tP-rU0KaQACWGQ"]
[Sat Aug 29 05:06:35.539569 2026] [security2:error] [pid 1017536:tid 1017553] [remote 34.23.124.185:45990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/staging/.env"] [unique_id "apK9OyJcY4fy7tP-rU0KagACWBA"]
[Sat Aug 29 05:06:35.540034 2026] [security2:error] [pid 1017536:tid 1017691] [client 158.23.147.79:32685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK9OyJcY4fy7tP-rU0KawAAAi0"]
[Sat Aug 29 05:06:35.542997 2026] [security2:error] [pid 1017536:tid 1017717] [client 93.123.109.228:50164] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/test/.env"] [unique_id "apK9OyJcY4fy7tP-rU0KbAAAAkc"]
[Sat Aug 29 05:06:35.544612 2026] [security2:error] [pid 1017536:tid 1017753] [client 158.23.147.79:25504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK9OyJcY4fy7tP-rU0KbQAAAms"]
[Sat Aug 29 05:06:35.548633 2026] [security2:error] [pid 1017536:tid 1017568] [remote 34.23.124.185:45990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/v2/.env"] [unique_id "apK9OyJcY4fy7tP-rU0KbgACPR8"]
[Sat Aug 29 05:06:35.552862 2026] [security2:error] [pid 1017536:tid 1017704] [client 45.148.10.62:38770] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ninaanddon.strangeworx.com"] [uri "/stripe/.env"] [unique_id "apK9OyJcY4fy7tP-rU0KbwAAAjo"]
[Sat Aug 29 05:06:35.559226 2026] [security2:error] [pid 1017536:tid 1017681] [client 158.23.184.117:21517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/100.php"] [unique_id "apK9OyJcY4fy7tP-rU0KcAAAAiM"]
[Sat Aug 29 05:06:35.566429 2026] [security2:error] [pid 1017536:tid 1017713] [client 93.123.109.228:49600] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/user/.env"] [unique_id "apK9OyJcY4fy7tP-rU0KcgAAAkM"]
[Sat Aug 29 05:06:35.567430 2026] [security2:error] [pid 1018003:tid 1018160] [client 20.151.200.44:65069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/exec.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7gwAABcE"]
[Sat Aug 29 05:06:35.568782 2026] [security2:error] [pid 1017536:tid 1017593] [remote 34.23.124.185:45990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/v1/.env"] [unique_id "apK9OyJcY4fy7tP-rU0KdAACMjg"]
[Sat Aug 29 05:06:35.574830 2026] [security2:error] [pid 1017536:tid 1017672] [client 20.63.81.20:60539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/nsxeubyv.php"] [unique_id "apK9OyJcY4fy7tP-rU0KdQAAAho"]
[Sat Aug 29 05:06:35.581483 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.220.204.93:59052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/grsiuk.php"] [unique_id "apK9OyJcY4fy7tP-rU0KdgAAAh0"]
[Sat Aug 29 05:06:35.584934 2026] [security2:error] [pid 1018003:tid 1018231] [client 158.23.147.79:24323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wzy.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7hAAABgc"]
[Sat Aug 29 05:06:35.586709 2026] [security2:error] [pid 1018003:tid 1018206] [client 52.139.37.240:14941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/defaults.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7hQAABe8"]
[Sat Aug 29 05:06:35.591582 2026] [security2:error] [pid 1018003:tid 1018216] [client 20.197.61.180:9405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/theme.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7hgAABfk"]
[Sat Aug 29 05:06:35.600224 2026] [security2:error] [pid 1018003:tid 1018192] [client 93.123.109.228:50102] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/v1/.env"] [unique_id "apK9OzAh5Y1i2tUxg4H7hwAABeE"]
[Sat Aug 29 05:06:35.603120 2026] [security2:error] [pid 1017536:tid 1017785] [client 20.151.200.44:47308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/sko.php"] [unique_id "apK9OyJcY4fy7tP-rU0KeAAAAos"]
[Sat Aug 29 05:06:35.605804 2026] [security2:error] [pid 1017536:tid 1017776] [client 20.48.250.41:25471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/maraz.php"] [unique_id "apK9OyJcY4fy7tP-rU0KeQAAAoI"]
[Sat Aug 29 05:06:35.608674 2026] [security2:error] [pid 1017536:tid 1017740] [client 93.123.109.228:49782] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/node/backend/.env"] [unique_id "apK9OyJcY4fy7tP-rU0KegAAAl4"]
[Sat Aug 29 05:06:35.613713 2026] [security2:error] [pid 1018003:tid 1018179] [client 52.139.37.240:6761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.healthysmilestoday.com"] [uri "/admin/function.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7iQAABdQ"]
[Sat Aug 29 05:06:35.614535 2026] [security2:error] [pid 1017536:tid 1017731] [client 93.123.109.228:49622] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/v2/.env"] [unique_id "apK9OyJcY4fy7tP-rU0KewAAAlU"]
[Sat Aug 29 05:06:35.619202 2026] [security2:error] [pid 1017536:tid 1017656] [remote 34.23.124.185:45990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/old/.env"] [unique_id "apK9OyJcY4fy7tP-rU0KfAAChnc"]
[Sat Aug 29 05:06:35.620509 2026] [security2:error] [pid 1017536:tid 1017652] [remote 34.23.124.185:45990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/site/.env"] [unique_id "apK9OyJcY4fy7tP-rU0KfQAChnM"]
[Sat Aug 29 05:06:35.623343 2026] [security2:error] [pid 1018003:tid 1018171] [client 20.52.41.200:1229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/r.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7igAABcw"]
[Sat Aug 29 05:06:35.625280 2026] [security2:error] [pid 1017536:tid 1017751] [client 158.23.184.117:34722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/100.php"] [unique_id "apK9OyJcY4fy7tP-rU0KfgAAAmk"]
[Sat Aug 29 05:06:35.634234 2026] [security2:error] [pid 1017536:tid 1017641] [remote 34.23.124.185:45990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/env.bak"] [unique_id "apK9OyJcY4fy7tP-rU0KgAACYWg"]
[Sat Aug 29 05:06:35.634621 2026] [security2:error] [pid 1017536:tid 1017793] [client 93.123.109.228:50128] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/v3/.env"] [unique_id "apK9OyJcY4fy7tP-rU0KgQAAApM"]
[Sat Aug 29 05:06:35.635245 2026] [security2:error] [pid 1017536:tid 1017556] [remote 34.23.124.185:45990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/portal/.env"] [unique_id "apK9OyJcY4fy7tP-rU0KggACYRM"]
[Sat Aug 29 05:06:35.637550 2026] [security2:error] [pid 1018003:tid 1018184] [client 20.220.204.93:59103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7iwAABdk"]
[Sat Aug 29 05:06:35.641188 2026] [security2:error] [pid 1017536:tid 1017788] [client 158.23.184.117:62299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/wp-signup.php"] [unique_id "apK9OyJcY4fy7tP-rU0KgwAAAo4"]
[Sat Aug 29 05:06:35.659836 2026] [security2:error] [pid 1018003:tid 1018185] [client 20.63.81.20:46888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/beck.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7jQAABdo"]
[Sat Aug 29 05:06:35.665545 2026] [security2:error] [pid 1018003:tid 1018177] [client 93.123.109.228:49798] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/nodeapi/.env"] [unique_id "apK9OzAh5Y1i2tUxg4H7jgAABdI"]
[Sat Aug 29 05:06:35.667527 2026] [security2:error] [pid 1017536:tid 1017717] [client 20.151.200.44:64293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/lfi.php"] [unique_id "apK9OyJcY4fy7tP-rU0KhwAAAkc"]
[Sat Aug 29 05:06:35.676735 2026] [security2:error] [pid 1017536:tid 1017654] [remote 34.23.124.185:45990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/.docker/.env"] [unique_id "apK9OyJcY4fy7tP-rU0KiAACP3U"]
[Sat Aug 29 05:06:35.697705 2026] [security2:error] [pid 1017536:tid 1017678] [client 52.139.37.240:31098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/ws49.php"] [unique_id "apK9OyJcY4fy7tP-rU0KiwAAAiA"]
[Sat Aug 29 05:06:35.700198 2026] [security2:error] [pid 1018003:tid 1018219] [client 93.123.109.228:49664] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/node/.env"] [unique_id "apK9OzAh5Y1i2tUxg4H7kgAABfw"]
[Sat Aug 29 05:06:35.703792 2026] [security2:error] [pid 1017536:tid 1017748] [client 158.23.184.117:21534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/2.php"] [unique_id "apK9OyJcY4fy7tP-rU0KjAAAAmY"]
[Sat Aug 29 05:06:35.704295 2026] [security2:error] [pid 1018003:tid 1018198] [client 20.63.81.20:56904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/zfqipfss.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7lAAABec"]
[Sat Aug 29 05:06:35.705261 2026] [security2:error] [pid 1018003:tid 1018261] [client 93.123.109.228:49932] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/node/api/.env"] [unique_id "apK9OzAh5Y1i2tUxg4H7kwAABiU"]
[Sat Aug 29 05:06:35.721526 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.220.204.93:59056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/wp-scr1pts.php"] [unique_id "apK9OyJcY4fy7tP-rU0KkQAAAh0"]
[Sat Aug 29 05:06:35.724880 2026] [core:error] [pid 1017536:tid 1017770] [client 45.148.10.62:38770] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:35.724900 2026] [core:error] [pid 1017536:tid 1017770] [client 45.148.10.62:38770] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:35.725545 2026] [security2:error] [pid 1018003:tid 1018266] [client 93.123.109.228:49994] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/old/.env"] [unique_id "apK9OzAh5Y1i2tUxg4H7lgAABio"]
[Sat Aug 29 05:06:35.726803 2026] [security2:error] [pid 1017536:tid 1017669] [client 40.83.93.50:23999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-comments-post.php"] [unique_id "apK9OyJcY4fy7tP-rU0KkwAAAhc"]
[Sat Aug 29 05:06:35.735878 2026] [security2:error] [pid 1017536:tid 1017778] [client 185.104.184.230:52562] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.wlu.rog.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "apK9OyJcY4fy7tP-rU0KlAAAAoQ"]
[Sat Aug 29 05:06:35.740121 2026] [security2:error] [pid 1017536:tid 1017733] [client 20.48.250.41:25402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/kbfr.php"] [unique_id "apK9OyJcY4fy7tP-rU0KlgAAAlc"]
[Sat Aug 29 05:06:35.745914 2026] [security2:error] [pid 1017536:tid 1017757] [client 158.23.147.79:30470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/themes.php"] [unique_id "apK9OyJcY4fy7tP-rU0KlwAAAm8"]
[Sat Aug 29 05:06:35.752635 2026] [security2:error] [pid 1018003:tid 1018230] [client 168.107.94.195:64161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7lwAABgY"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:35.764859 2026] [security2:error] [pid 1017536:tid 1017740] [client 93.123.109.228:49766] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/nodeweb/.env"] [unique_id "apK9OyJcY4fy7tP-rU0KmQAAAl4"]
[Sat Aug 29 05:06:35.771225 2026] [security2:error] [pid 1017536:tid 1017751] [client 4.205.62.107:22228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/xqq.php"] [unique_id "apK9OyJcY4fy7tP-rU0KnAAAAmk"]
[Sat Aug 29 05:06:35.771245 2026] [security2:error] [pid 1017536:tid 1017683] [client 158.23.184.117:34747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/222.php"] [unique_id "apK9OyJcY4fy7tP-rU0KmwAAAiU"]
[Sat Aug 29 05:06:35.773226 2026] [security2:error] [pid 1018003:tid 1018239] [client 20.220.204.93:52332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/ff1.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7mgAABg8"]
[Sat Aug 29 05:06:35.785398 2026] [security2:error] [pid 1017536:tid 1017710] [client 52.139.37.240:14514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/domains.php"] [unique_id "apK9OyJcY4fy7tP-rU0KngAAAkA"]
[Sat Aug 29 05:06:35.787104 2026] [security2:error] [pid 1018003:tid 1018243] [client 158.23.184.117:46377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/404.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7nAAABhM"]
[Sat Aug 29 05:06:35.800409 2026] [security2:error] [pid 1017536:tid 1017788] [client 20.63.81.20:44485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/t3.php"] [unique_id "apK9OyJcY4fy7tP-rU0KoQAAAo4"]
[Sat Aug 29 05:06:35.806559 2026] [security2:error] [pid 1017536:tid 1017761] [client 68.155.159.216:38585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9OyJcY4fy7tP-rU0KowAAAnM"]
[Sat Aug 29 05:06:35.809022 2026] [security2:error] [pid 1018003:tid 1018268] [client 52.139.37.240:6770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.healthysmilestoday.com"] [uri "/zoom1.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7nQAABiw"]
[Sat Aug 29 05:06:35.809022 2026] [security2:error] [pid 1017536:tid 1017695] [client 158.23.147.79:59893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/radio.php"] [unique_id "apK9OyJcY4fy7tP-rU0KpAAAAjE"]
[Sat Aug 29 05:06:35.817855 2026] [core:error] [pid 1017536:tid 1017576] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:35.817876 2026] [core:error] [pid 1017536:tid 1017576] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:35.818754 2026] [security2:error] [pid 1017536:tid 1017632] [remote 34.23.124.185:45990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/env.old"] [unique_id "apK9OyJcY4fy7tP-rU0KpgACjF8"]
[Sat Aug 29 05:06:35.818754 2026] [security2:error] [pid 1017536:tid 1017633] [remote 34.23.124.185:45990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/api/.env.bak"] [unique_id "apK9OyJcY4fy7tP-rU0KpwACjGA"]
[Sat Aug 29 05:06:35.824552 2026] [security2:error] [pid 1017536:tid 1017752] [client 93.123.109.228:49518] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/var/www/.env"] [unique_id "apK9OyJcY4fy7tP-rU0KqAAAAmo"]
[Sat Aug 29 05:06:35.832317 2026] [security2:error] [pid 1017536:tid 1017711] [client 158.158.54.35:4870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/inputs.php"] [unique_id "apK9OyJcY4fy7tP-rU0KqQAAAkE"]
[Sat Aug 29 05:06:35.836382 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.63.81.20:56947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/zrjuyoos.php"] [unique_id "apK9OyJcY4fy7tP-rU0KqgAAAnk"]
[Sat Aug 29 05:06:35.841850 2026] [security2:error] [pid 1017536:tid 1017594] [remote 34.23.124.185:45990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/@fs/.env"] [unique_id "apK9OyJcY4fy7tP-rU0KqwACazk"]
[Sat Aug 29 05:06:35.848648 2026] [security2:error] [pid 1018003:tid 1018180] [client 93.123.109.228:49612] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/var/www/html/.env"] [unique_id "apK9OzAh5Y1i2tUxg4H7nwAABdU"]
[Sat Aug 29 05:06:35.850793 2026] [security2:error] [pid 1018003:tid 1018271] [client 158.23.184.117:59550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/222.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7ogAABi8"]
[Sat Aug 29 05:06:35.854865 2026] [security2:error] [pid 1017536:tid 1017681] [client 20.220.204.93:59085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/num.php"] [unique_id "apK9OyJcY4fy7tP-rU0KrQAAAiM"]
[Sat Aug 29 05:06:35.860974 2026] [security2:error] [pid 1017536:tid 1017647] [remote 34.23.124.185:45990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/.env.production.bak"] [unique_id "apK9OyJcY4fy7tP-rU0KrgACZm4"]
[Sat Aug 29 05:06:35.860979 2026] [security2:error] [pid 1017536:tid 1017609] [remote 34.23.124.185:45990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/.env.prod.bak"] [unique_id "apK9OyJcY4fy7tP-rU0KrwACZkg"]
[Sat Aug 29 05:06:35.867346 2026] [security2:error] [pid 1018003:tid 1018262] [client 93.123.109.228:49832] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/opt/.env"] [unique_id "apK9OzAh5Y1i2tUxg4H7owAABiY"]
[Sat Aug 29 05:06:35.870964 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.104.49.130:50608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.danesquality.com"] [uri "/ws85.php"] [unique_id "apK9OyJcY4fy7tP-rU0KsQAAAh0"]
[Sat Aug 29 05:06:35.878390 2026] [security2:error] [pid 1018003:tid 1018233] [client 93.123.109.228:50058] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/web/.env"] [unique_id "apK9OzAh5Y1i2tUxg4H7pAAABgk"]
[Sat Aug 29 05:06:35.880405 2026] [security2:error] [pid 1018003:tid 1018250] [client 20.196.209.81:13260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/wp-contentt.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7pQAABho"]
[Sat Aug 29 05:06:35.895567 2026] [security2:error] [pid 1017536:tid 1017687] [client 52.139.37.240:30824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/xxx.php"] [unique_id "apK9OyJcY4fy7tP-rU0KswAAAik"]
[Sat Aug 29 05:06:35.901149 2026] [security2:error] [pid 1017536:tid 1017780] [client 20.196.209.81:16717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/feed-rss2-queue.php"] [unique_id "apK9OyJcY4fy7tP-rU0KtQAAAoY"]
[Sat Aug 29 05:06:35.915926 2026] [security2:error] [pid 1017536:tid 1017640] [remote 34.23.124.185:45990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/@fs/root/.env"] [unique_id "apK9OyJcY4fy7tP-rU0KtwACi2c"]
[Sat Aug 29 05:06:35.916800 2026] [security2:error] [pid 1017536:tid 1017745] [client 20.220.204.93:52268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/t.php"] [unique_id "apK9OyJcY4fy7tP-rU0KuAAAAmM"]
[Sat Aug 29 05:06:35.921151 2026] [security2:error] [pid 1018003:tid 1018167] [client 158.23.184.117:34505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/adminfuns.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7pwAABcg"]
[Sat Aug 29 05:06:35.924855 2026] [security2:error] [pid 1018003:tid 1018187] [client 20.48.250.41:25290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/wp-act.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7qAAABdw"]
[Sat Aug 29 05:06:35.925649 2026] [security2:error] [pid 1018003:tid 1018252] [client 20.151.200.44:65001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/dbc.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7qQAABhw"]
[Sat Aug 29 05:06:35.950571 2026] [security2:error] [pid 1017536:tid 1017778] [client 158.23.184.117:46948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/as.php"] [unique_id "apK9OyJcY4fy7tP-rU0KvgAAAoQ"]
[Sat Aug 29 05:06:35.954229 2026] [core:error] [pid 1017536:tid 1017642] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:35.957595 2026] [core:error] [pid 1017536:tid 1017659] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:35.960132 2026] [core:error] [pid 1017536:tid 1017574] [remote 34.23.124.185:45990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:35.961124 2026] [security2:error] [pid 1017536:tid 1017591] [remote 34.23.124.185:45990] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK9OyJcY4fy7tP-rU0KwgACjjY"]
[Sat Aug 29 05:06:35.962788 2026] [security2:error] [pid 1017536:tid 1017732] [client 158.23.147.79:38748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK9OyJcY4fy7tP-rU0KwwAAAlY"]
[Sat Aug 29 05:06:35.971695 2026] [security2:error] [pid 1018003:tid 1018203] [client 20.63.81.20:46973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/wp.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7rgAABew"]
[Sat Aug 29 05:06:35.975056 2026] [security2:error] [pid 1017536:tid 1017698] [client 20.151.200.44:46650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/zoz.php"] [unique_id "apK9OyJcY4fy7tP-rU0KxwAAAjQ"]
[Sat Aug 29 05:06:35.987634 2026] [security2:error] [pid 1017536:tid 1017736] [client 52.139.37.240:14949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/dropdown.php"] [unique_id "apK9OyJcY4fy7tP-rU0KyAAAAlo"]
[Sat Aug 29 05:06:35.991435 2026] [security2:error] [pid 1018003:tid 1018200] [client 20.220.204.93:52296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/a4.php"] [unique_id "apK9OzAh5Y1i2tUxg4H7sQAABek"]
[Sat Aug 29 05:06:36.000000 2026] [security2:error] [pid 1017536:tid 1017776] [client 158.23.184.117:59569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/24.php"] [unique_id "apK9OyJcY4fy7tP-rU0KygAAAoI"]
[Sat Aug 29 05:06:36.001664 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.104.49.130:43020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/reviall.php"] [unique_id "apK9PDAh5Y1i2tUxg4H7swAABcI"]
[Sat Aug 29 05:06:36.002562 2026] [security2:error] [pid 1017536:tid 1017752] [client 93.123.109.228:49622] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/website/.env"] [unique_id "apK9OyJcY4fy7tP-rU0KywAAAmo"]
[Sat Aug 29 05:06:36.008216 2026] [security2:error] [pid 1017536:tid 1017767] [client 4.205.62.107:22262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/wp-content/admin.php"] [unique_id "apK9PCJcY4fy7tP-rU0KzAAAAnk"]
[Sat Aug 29 05:06:36.016508 2026] [security2:error] [pid 1017536:tid 1017710] [client 52.139.37.240:52615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.healthysmilestoday.com"] [uri "/about.php7"] [unique_id "apK9PCJcY4fy7tP-rU0KzQAAAkA"]
[Sat Aug 29 05:06:36.016742 2026] [security2:error] [pid 1018003:tid 1018276] [client 68.155.159.216:49196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/dropdown.php"] [unique_id "apK9PDAh5Y1i2tUxg4H7twAABjQ"]
[Sat Aug 29 05:06:36.025746 2026] [security2:error] [pid 1018003:tid 1018217] [client 93.123.109.228:50058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.evecreative.co"] [uri "/wp-config.php"] [unique_id "apK9PDAh5Y1i2tUxg4H7uAAABfo"]
[Sat Aug 29 05:06:36.026435 2026] [security2:error] [pid 1018003:tid 1018155] [client 93.123.109.228:36996] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.evecreative.co"] [uri "/wp-config.php.bak"] [unique_id "apK9PDAh5Y1i2tUxg4H7uQAABbw"]
[Sat Aug 29 05:06:36.039498 2026] [security2:error] [pid 1017536:tid 1017724] [client 185.104.184.230:52566] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.wlu.rog.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "apK9PCJcY4fy7tP-rU0KzwAAAk4"]
[Sat Aug 29 05:06:36.060333 2026] [security2:error] [pid 1017536:tid 1017765] [client 158.23.147.79:35786] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/1.php"] [unique_id "apK9PCJcY4fy7tP-rU0K0gAAAnc"]
[Sat Aug 29 05:06:36.060448 2026] [security2:error] [pid 1017536:tid 1017765] [client 158.23.147.79:35786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/1.php"] [unique_id "apK9PCJcY4fy7tP-rU0K0gAAAnc"]
[Sat Aug 29 05:06:36.065227 2026] [security2:error] [pid 1018003:tid 1018206] [client 93.123.109.228:37014] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.evecreative.co"] [uri "/wp-config.php.new"] [unique_id "apK9PDAh5Y1i2tUxg4H7uwAABe8"]
[Sat Aug 29 05:06:36.069811 2026] [security2:error] [pid 1017536:tid 1017687] [client 93.123.109.228:49540] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.evecreative.co"] [uri "/wp-config.php.old"] [unique_id "apK9PCJcY4fy7tP-rU0K0wAAAik"]
[Sat Aug 29 05:06:36.075301 2026] [security2:error] [pid 1017536:tid 1017729] [client 185.104.184.230:38160] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.xvo.oau.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/wp-includes/wlwmanifest.xml"] [unique_id "apK9PCJcY4fy7tP-rU0K1AAAAlM"]
[Sat Aug 29 05:06:36.078316 2026] [security2:error] [pid 1017536:tid 1017780] [client 4.205.62.107:22219] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/a1vx.php"] [unique_id "apK9PCJcY4fy7tP-rU0K1QAAAoY"]
[Sat Aug 29 05:06:36.082234 2026] [security2:error] [pid 1017536:tid 1017672] [client 20.52.41.200:1166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-blog.php"] [unique_id "apK9PCJcY4fy7tP-rU0K1gAAAho"]
[Sat Aug 29 05:06:36.082270 2026] [security2:error] [pid 1017536:tid 1017785] [client 20.48.250.41:25566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/24.php"] [unique_id "apK9PCJcY4fy7tP-rU0K1wAAAos"]
[Sat Aug 29 05:06:36.096089 2026] [security2:error] [pid 1017536:tid 1017704] [client 158.23.184.117:46348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/php.php"] [unique_id "apK9PCJcY4fy7tP-rU0K2QAAAjo"]
[Sat Aug 29 05:06:36.096732 2026] [security2:error] [pid 1017536:tid 1017751] [client 4.205.62.107:26628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/application.config.php"] [unique_id "apK9PCJcY4fy7tP-rU0K2gAAAmk"]
[Sat Aug 29 05:06:36.096751 2026] [security2:error] [pid 1018003:tid 1018202] [client 52.139.37.240:31133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/0x.php"] [unique_id "apK9PDAh5Y1i2tUxg4H7vAAABes"]
[Sat Aug 29 05:06:36.099204 2026] [security2:error] [pid 1017536:tid 1017778] [client 20.151.200.44:62015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/quoys.php"] [unique_id "apK9PCJcY4fy7tP-rU0K2wAAAoQ"]
[Sat Aug 29 05:06:36.103844 2026] [security2:error] [pid 1018003:tid 1018171] [client 93.123.109.228:50102] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "cpcontacts.evecreative.co"] [uri "/___proxy_subdomain_cpcontacts/wp-content/mysql.sql"] [unique_id "apK9PDAh5Y1i2tUxg4H7vQAABcw"]
[Sat Aug 29 05:06:36.106563 2026] [security2:error] [pid 1017536:tid 1017761] [client 20.63.81.20:44492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/abcd.php"] [unique_id "apK9PCJcY4fy7tP-rU0K3AAAAnM"]
[Sat Aug 29 05:06:36.107540 2026] [security2:error] [pid 1017536:tid 1017669] [client 158.23.184.117:34496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/abcd.php"] [unique_id "apK9PCJcY4fy7tP-rU0K3QAAAhc"]
[Sat Aug 29 05:06:36.134321 2026] [security2:error] [pid 1017536:tid 1017786] [client 168.107.94.195:64473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9PCJcY4fy7tP-rU0K4AAAAow"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:36.143490 2026] [security2:error] [pid 1017536:tid 1017683] [client 158.23.184.117:60047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/3pjcpmfsd8b.php"] [unique_id "apK9PCJcY4fy7tP-rU0K4wAAAiU"]
[Sat Aug 29 05:06:36.182508 2026] [security2:error] [pid 1017536:tid 1017793] [client 52.139.37.240:15261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/files/index.php"] [unique_id "apK9PCJcY4fy7tP-rU0K5AAAApM"]
[Sat Aug 29 05:06:36.196608 2026] [security2:error] [pid 1017536:tid 1017645] [remote 34.23.124.185:45994] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/_image"] [unique_id "apK9PCJcY4fy7tP-rU0K6gACkmw"]
[Sat Aug 29 05:06:36.196886 2026] [security2:error] [pid 1017536:tid 1017629] [remote 34.23.124.185:45994] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:href. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "/../,ARGS:href"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/_image"] [unique_id "apK9PCJcY4fy7tP-rU0K5wACklw"]
[Sat Aug 29 05:06:36.197810 2026] [security2:error] [pid 1018003:tid 1018224] [client 20.220.204.93:59120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/erty.php"] [unique_id "apK9PDAh5Y1i2tUxg4H7wgAABgE"]
[Sat Aug 29 05:06:36.198710 2026] [core:error] [pid 1017536:tid 1017592] [remote 34.23.124.185:45994] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.198726 2026] [core:error] [pid 1017536:tid 1017658] [remote 34.23.124.185:45994] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.199051 2026] [core:error] [pid 1017536:tid 1017599] [remote 34.23.124.185:45994] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.199637 2026] [core:error] [pid 1017536:tid 1017546] [remote 34.23.124.185:45994] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.207081 2026] [security2:error] [pid 1017536:tid 1017752] [client 52.139.37.240:6754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.healthysmilestoday.com"] [uri "/cron.php"] [unique_id "apK9PCJcY4fy7tP-rU0K6wAAAmo"]
[Sat Aug 29 05:06:36.210846 2026] [security2:error] [pid 1017536:tid 1017707] [client 20.220.204.93:52307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/tfm.php"] [unique_id "apK9PCJcY4fy7tP-rU0K7AAAAj0"]
[Sat Aug 29 05:06:36.221084 2026] [security2:error] [pid 1017536:tid 1017675] [client 40.83.93.50:1623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-config.php"] [unique_id "apK9PCJcY4fy7tP-rU0K7wAAAh0"]
[Sat Aug 29 05:06:36.242591 2026] [security2:error] [pid 1017536:tid 1017724] [client 158.23.184.117:46971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/term.php"] [unique_id "apK9PCJcY4fy7tP-rU0K8QAAAk4"]
[Sat Aug 29 05:06:36.243247 2026] [security2:error] [pid 1017536:tid 1017729] [client 20.63.81.20:44448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/nofile.php"] [unique_id "apK9PCJcY4fy7tP-rU0K8gAAAlM"]
[Sat Aug 29 05:06:36.251671 2026] [security2:error] [pid 1017536:tid 1017734] [client 158.23.184.117:33949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/al.php"] [unique_id "apK9PCJcY4fy7tP-rU0K9AAAAlg"]
[Sat Aug 29 05:06:36.269930 2026] [security2:error] [pid 1018003:tid 1018240] [client 20.48.250.41:25469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/155.php"] [unique_id "apK9PDAh5Y1i2tUxg4H7xgAABhA"]
[Sat Aug 29 05:06:36.285462 2026] [security2:error] [pid 1017536:tid 1017743] [client 158.158.54.35:8709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/alfa.php"] [unique_id "apK9PCJcY4fy7tP-rU0K9gAAAmE"]
[Sat Aug 29 05:06:36.285472 2026] [security2:error] [pid 1017536:tid 1017717] [client 20.196.209.81:9462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/theme.php"] [unique_id "apK9PCJcY4fy7tP-rU0K9QAAAkc"]
[Sat Aug 29 05:06:36.289536 2026] [security2:error] [pid 1017536:tid 1017745] [client 68.155.159.216:33649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK9PCJcY4fy7tP-rU0K9wAAAmM"]
[Sat Aug 29 05:06:36.290209 2026] [security2:error] [pid 1017536:tid 1017696] [client 158.23.184.117:59526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.hurricanewindowfilm.com"] [uri "/403.php"] [unique_id "apK9PCJcY4fy7tP-rU0K-AAAAjI"]
[Sat Aug 29 05:06:36.290839 2026] [security2:error] [pid 1017536:tid 1017751] [client 93.123.109.228:49782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/php-info.php"] [unique_id "apK9PCJcY4fy7tP-rU0K-QAAAmk"]
[Sat Aug 29 05:06:36.291651 2026] [security2:error] [pid 1017536:tid 1017790] [client 52.139.37.240:31120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/CDX1.php"] [unique_id "apK9PCJcY4fy7tP-rU0K-gAAApA"]
[Sat Aug 29 05:06:36.300276 2026] [security2:error] [pid 1017536:tid 1017710] [client 20.196.209.81:11547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/inputs.php"] [unique_id "apK9PCJcY4fy7tP-rU0K-wAAAkA"]
[Sat Aug 29 05:06:36.309863 2026] [security2:error] [pid 1017536:tid 1017732] [client 93.123.109.228:49996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/php.php"] [unique_id "apK9PCJcY4fy7tP-rU0K_AAAAlY"]
[Sat Aug 29 05:06:36.318395 2026] [security2:error] [pid 1017536:tid 1017698] [client 20.151.200.44:46636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/mmm.php"] [unique_id "apK9PCJcY4fy7tP-rU0K_QAAAjQ"]
[Sat Aug 29 05:06:36.333247 2026] [security2:error] [pid 1018003:tid 1018213] [client 185.104.184.230:52582] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.wlu.rog.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "apK9PDAh5Y1i2tUxg4H7yQAABfY"]
[Sat Aug 29 05:06:36.350882 2026] [security2:error] [pid 1017536:tid 1017691] [client 20.220.204.93:59124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/Geforce.php"] [unique_id "apK9PCJcY4fy7tP-rU0LAQAAAi0"]
[Sat Aug 29 05:06:36.361758 2026] [security2:error] [pid 1018003:tid 1018243] [client 20.151.200.44:64983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/wp-wlx.php"] [unique_id "apK9PDAh5Y1i2tUxg4H7ygAABhM"]
[Sat Aug 29 05:06:36.364308 2026] [autoindex:error] [pid 1017536:tid 1017544] [remote 87.58.197.202:42512] AH01276: Cannot serve directory /home3/zkrrogmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:06:36.373386 2026] [security2:error] [pid 1018003:tid 1018225] [client 20.63.81.20:46849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/run.php"] [unique_id "apK9PDAh5Y1i2tUxg4H7zQAABgI"]
[Sat Aug 29 05:06:36.373600 2026] [security2:error] [pid 1017536:tid 1017669] [client 52.139.37.240:15282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "paulroyce.com"] [uri "/flower.php"] [unique_id "apK9PCJcY4fy7tP-rU0LBAAAAhc"]
[Sat Aug 29 05:06:36.381574 2026] [security2:error] [pid 1018003:tid 1018199] [client 68.155.159.216:51473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK9PDAh5Y1i2tUxg4H7zgAABeg"]
[Sat Aug 29 05:06:36.381575 2026] [security2:error] [pid 1017536:tid 1017752] [client 68.155.159.216:18360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-content/banners/about.php"] [unique_id "apK9PCJcY4fy7tP-rU0LBgAAAmo"]
[Sat Aug 29 05:06:36.384946 2026] [security2:error] [pid 1017536:tid 1017736] [client 158.23.184.117:46399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/Ov-Simple1.php"] [unique_id "apK9PCJcY4fy7tP-rU0LCQAAAlo"]
[Sat Aug 29 05:06:36.389043 2026] [security2:error] [pid 1018003:tid 1018188] [client 20.220.204.93:59082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/0x.php"] [unique_id "apK9PDAh5Y1i2tUxg4H7zwAABd0"]
[Sat Aug 29 05:06:36.390145 2026] [security2:error] [pid 1017536:tid 1017675] [client 93.123.109.228:49974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/php_info.php"] [unique_id "apK9PCJcY4fy7tP-rU0LCgAAAh0"]
[Sat Aug 29 05:06:36.397505 2026] [security2:error] [pid 1017536:tid 1017706] [client 158.23.184.117:34732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/alfa.php"] [unique_id "apK9PCJcY4fy7tP-rU0LCwAAAjw"]
[Sat Aug 29 05:06:36.398596 2026] [security2:error] [pid 1017536:tid 1017683] [client 52.139.37.240:55761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.healthysmilestoday.com"] [uri "/wp-2019.php"] [unique_id "apK9PCJcY4fy7tP-rU0LDAAAAiU"]
[Sat Aug 29 05:06:36.401696 2026] [security2:error] [pid 1017536:tid 1017781] [client 20.197.61.180:8908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/alumni_reg.php"] [unique_id "apK9PCJcY4fy7tP-rU0LDQAAAoc"]
[Sat Aug 29 05:06:36.408926 2026] [security2:error] [pid 1017536:tid 1017607] [remote 193.24.211.70:49898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.211.24.193.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "interpressglobal.com"] [uri "/wp-login.php"] [unique_id "apK9PCJcY4fy7tP-rU0LCAACMEY"]
[Sat Aug 29 05:06:36.419940 2026] [security2:error] [pid 1018003:tid 1018166] [client 93.123.109.228:49932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/phpinfo.php"] [unique_id "apK9PDAh5Y1i2tUxg4H70AAABcc"]
[Sat Aug 29 05:06:36.437910 2026] [security2:error] [pid 1017536:tid 1017751] [client 93.123.109.228:50032] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/portal/.env"] [unique_id "apK9PCJcY4fy7tP-rU0LDwAAAmk"]
[Sat Aug 29 05:06:36.445226 2026] [security2:error] [pid 1018003:tid 1018256] [client 136.107.231.130:28854] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "alanmossman.mossmanphoto.com"] [uri "/.git/HEAD"] [unique_id "apK9PDAh5Y1i2tUxg4H70gAABiA"]
[Sat Aug 29 05:06:36.446895 2026] [security2:error] [pid 1018003:tid 1018180] [client 136.107.231.130:28884] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/.github/.env"] [unique_id "apK9PDAh5Y1i2tUxg4H71AAABdU"]
[Sat Aug 29 05:06:36.447372 2026] [security2:error] [pid 1017536:tid 1017710] [client 20.48.250.41:25511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/file.php"] [unique_id "apK9PCJcY4fy7tP-rU0LFAAAAkA"]
[Sat Aug 29 05:06:36.447391 2026] [security2:error] [pid 1018003:tid 1018248] [client 136.107.231.130:28836] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/public/.env"] [unique_id "apK9PDAh5Y1i2tUxg4H70wAABhg"]
[Sat Aug 29 05:06:36.447484 2026] [security2:error] [pid 1018003:tid 1018248] [client 136.107.231.130:28836] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "alanmossman.mossmanphoto.com"] [uri "/public/.env"] [unique_id "apK9PDAh5Y1i2tUxg4H70wAABhg"]
[Sat Aug 29 05:06:36.450071 2026] [security2:error] [pid 1017536:tid 1017770] [client 136.107.231.130:28892] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "alanmossman.mossmanphoto.com"] [uri "/cgi-sys/404.html"] [unique_id "apK9PCJcY4fy7tP-rU0LFgAAAnw"]
[Sat Aug 29 05:06:36.454913 2026] [security2:error] [pid 1018003:tid 1018271] [client 136.107.231.130:28926] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "alanmossman.mossmanphoto.com"] [uri "/cgi-sys/404.html"] [unique_id "apK9PDAh5Y1i2tUxg4H71QAABi8"]
[Sat Aug 29 05:06:36.456440 2026] [core:error] [pid 1017536:tid 1017579] [remote 34.23.124.185:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.459155 2026] [security2:error] [pid 1017536:tid 1017780] [client 136.107.231.130:28958] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "alanmossman.mossmanphoto.com"] [uri "/cgi-sys/404.html"] [unique_id "apK9PCJcY4fy7tP-rU0LHAAAAoY"]
[Sat Aug 29 05:06:36.465222 2026] [core:error] [pid 1017536:tid 1017662] [remote 34.23.124.185:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.466637 2026] [core:error] [pid 1018003:tid 1018230] [client 45.148.10.62:38778] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.466652 2026] [core:error] [pid 1018003:tid 1018230] [client 45.148.10.62:38778] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.476618 2026] [security2:error] [pid 1018003:tid 1018252] [client 158.23.147.79:48253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-content/x/index.php"] [unique_id "apK9PDAh5Y1i2tUxg4H72QAABhw"]
[Sat Aug 29 05:06:36.481964 2026] [security2:error] [pid 1018003:tid 1018259] [client 93.123.109.228:49832] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/prod/.env"] [unique_id "apK9PDAh5Y1i2tUxg4H72gAABiM"]
[Sat Aug 29 05:06:36.485230 2026] [core:error] [pid 1017536:tid 1017597] [remote 34.23.124.185:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.486782 2026] [core:error] [pid 1017536:tid 1017635] [remote 34.23.124.185:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.487003 2026] [core:error] [pid 1017536:tid 1017581] [remote 34.23.124.185:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.487003 2026] [core:error] [pid 1017536:tid 1017655] [remote 34.23.124.185:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.489968 2026] [security2:error] [pid 1018003:tid 1018265] [client 52.139.37.240:31045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/akcc.php"] [unique_id "apK9PDAh5Y1i2tUxg4H72wAABik"]
[Sat Aug 29 05:06:36.500272 2026] [security2:error] [pid 1018003:tid 1018221] [client 20.151.200.44:65059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/attack.php"] [unique_id "apK9PDAh5Y1i2tUxg4H73AAABf4"]
[Sat Aug 29 05:06:36.506825 2026] [security2:error] [pid 1018003:tid 1018207] [client 20.63.81.20:46896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/new.php"] [unique_id "apK9PDAh5Y1i2tUxg4H73QAABfA"]
[Sat Aug 29 05:06:36.510111 2026] [security2:error] [pid 1017536:tid 1017749] [client 4.205.62.107:53323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/aws_keys.php"] [unique_id "apK9PCJcY4fy7tP-rU0LIwAAAmc"]
[Sat Aug 29 05:06:36.511368 2026] [security2:error] [pid 1018003:tid 1018200] [client 158.23.147.79:30478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-mail.php"] [unique_id "apK9PDAh5Y1i2tUxg4H73gAABek"]
[Sat Aug 29 05:06:36.531366 2026] [security2:error] [pid 1018003:tid 1018218] [client 158.23.184.117:46957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/atomlib.php"] [unique_id "apK9PDAh5Y1i2tUxg4H74AAABfs"]
[Sat Aug 29 05:06:36.537118 2026] [security2:error] [pid 1017536:tid 1017678] [client 20.52.41.200:1222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/xxx.php"] [unique_id "apK9PCJcY4fy7tP-rU0LJAAAAiA"]
[Sat Aug 29 05:06:36.539194 2026] [security2:error] [pid 1017536:tid 1017707] [client 4.205.62.107:56013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wpver.php"] [unique_id "apK9PCJcY4fy7tP-rU0LJQAAAj0"]
[Sat Aug 29 05:06:36.539202 2026] [security2:error] [pid 1018003:tid 1018162] [client 93.123.109.228:49798] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/product/.env"] [unique_id "apK9PDAh5Y1i2tUxg4H74QAABcM"]
[Sat Aug 29 05:06:36.542053 2026] [security2:error] [pid 1017536:tid 1017752] [client 20.220.204.93:59122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/66.php"] [unique_id "apK9PCJcY4fy7tP-rU0LJwAAAmo"]
[Sat Aug 29 05:06:36.542675 2026] [security2:error] [pid 1018003:tid 1018191] [client 168.107.94.195:64844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9PDAh5Y1i2tUxg4H74gAABeA"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:36.542914 2026] [security2:error] [pid 1018003:tid 1018203] [client 158.23.184.117:34729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/as.php"] [unique_id "apK9PDAh5Y1i2tUxg4H74wAABew"]
[Sat Aug 29 05:06:36.547783 2026] [security2:error] [pid 1018003:tid 1018276] [client 20.220.204.93:52293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/click.php"] [unique_id "apK9PDAh5Y1i2tUxg4H75AAABjQ"]
[Sat Aug 29 05:06:36.548906 2026] [security2:error] [pid 1018003:tid 1018170] [client 93.123.109.228:49664] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/production/.env"] [unique_id "apK9PDAh5Y1i2tUxg4H75QAABcs"]
[Sat Aug 29 05:06:36.551455 2026] [security2:error] [pid 1018003:tid 1018155] [client 20.151.200.44:46014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/advanced.php"] [unique_id "apK9PDAh5Y1i2tUxg4H75wAABbw"]
[Sat Aug 29 05:06:36.567071 2026] [core:error] [pid 1017536:tid 1017602] [remote 34.23.124.185:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.575434 2026] [security2:error] [pid 1017536:tid 1017667] [client 52.139.37.240:8476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drjrae.com"] [uri "/aged.php"] [unique_id "apK9PCJcY4fy7tP-rU0LKgAAAhU"]
[Sat Aug 29 05:06:36.587952 2026] [security2:error] [pid 1017536:tid 1017781] [client 20.48.250.41:25382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK9PCJcY4fy7tP-rU0LLAAAAoc"]
[Sat Aug 29 05:06:36.590468 2026] [security2:error] [pid 1018003:tid 1018161] [client 52.139.37.240:6665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.healthysmilestoday.com"] [uri "/gecko-new.php"] [unique_id "apK9PDAh5Y1i2tUxg4H77AAABcI"]
[Sat Aug 29 05:06:36.606911 2026] [core:error] [pid 1017536:tid 1017598] [remote 34.23.124.185:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.607342 2026] [core:error] [pid 1017536:tid 1017606] [remote 34.23.124.185:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.607993 2026] [core:error] [pid 1017536:tid 1017650] [remote 34.23.124.185:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.609722 2026] [core:error] [pid 1017536:tid 1017537] [remote 34.23.124.185:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.616788 2026] [security2:error] [pid 1018003:tid 1018179] [client 68.155.159.216:51230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/goat1.php"] [unique_id "apK9PDAh5Y1i2tUxg4H77QAABdQ"]
[Sat Aug 29 05:06:36.630681 2026] [security2:error] [pid 1017536:tid 1017765] [client 20.151.200.44:64919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/vbbn.php"] [unique_id "apK9PCJcY4fy7tP-rU0LMwAAAnc"]
[Sat Aug 29 05:06:36.632208 2026] [security2:error] [pid 1017536:tid 1017710] [client 158.23.147.79:17436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9PCJcY4fy7tP-rU0LNAAAAkA"]
[Sat Aug 29 05:06:36.638209 2026] [security2:error] [pid 1017536:tid 1017731] [client 185.104.184.230:52590] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.wlu.rog.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "apK9PCJcY4fy7tP-rU0LNQAAAlU"]
[Sat Aug 29 05:06:36.638963 2026] [security2:error] [pid 1017536:tid 1017673] [client 20.63.81.20:44484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/inx.php"] [unique_id "apK9PCJcY4fy7tP-rU0LNgAAAhs"]
[Sat Aug 29 05:06:36.646153 2026] [core:error] [pid 1017536:tid 1017616] [remote 34.23.124.185:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.648149 2026] [security2:error] [pid 1018003:tid 1018273] [client 158.23.147.79:50172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9PDAh5Y1i2tUxg4H77gAABjE"]
[Sat Aug 29 05:06:36.652028 2026] [security2:error] [pid 1018003:tid 1018175] [client 158.23.147.79:32747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK9PDAh5Y1i2tUxg4H77wAABdA"]
[Sat Aug 29 05:06:36.669674 2026] [security2:error] [pid 1017536:tid 1017761] [client 20.104.49.130:50576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.danesquality.com"] [uri "/wp-the.php"] [unique_id "apK9PCJcY4fy7tP-rU0LOAAAAnM"]
[Sat Aug 29 05:06:36.671988 2026] [security2:error] [pid 1017536:tid 1017709] [client 20.151.200.44:64990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/file66.php"] [unique_id "apK9PCJcY4fy7tP-rU0LOgAAAj8"]
[Sat Aug 29 05:06:36.674467 2026] [core:error] [pid 1017536:tid 1017573] [remote 34.23.124.185:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.676993 2026] [security2:error] [pid 1018003:tid 1018184] [client 158.23.184.117:46959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/edit.php"] [unique_id "apK9PDAh5Y1i2tUxg4H78AAABdk"]
[Sat Aug 29 05:06:36.681886 2026] [security2:error] [pid 1018003:tid 1018172] [client 185.104.184.230:38164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.184.104.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "autodiscover.xvo.oau.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/xmlrpc.php"] [unique_id "apK9PDAh5Y1i2tUxg4H78QAABc0"]
[Sat Aug 29 05:06:36.685257 2026] [security2:error] [pid 1017536:tid 1017732] [client 158.23.147.79:24409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK9PCJcY4fy7tP-rU0LOwAAAlY"]
[Sat Aug 29 05:06:36.688259 2026] [security2:error] [pid 1018003:tid 1018234] [client 158.23.184.117:34720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/aa.php"] [unique_id "apK9PDAh5Y1i2tUxg4H78gAABgo"]
[Sat Aug 29 05:06:36.692216 2026] [core:error] [pid 1017536:tid 1017639] [remote 34.23.124.185:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.692230 2026] [core:error] [pid 1017536:tid 1017639] [remote 34.23.124.185:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.698443 2026] [security2:error] [pid 1017536:tid 1017691] [client 20.220.204.93:59048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/ms.php"] [unique_id "apK9PCJcY4fy7tP-rU0LPgAAAi0"]
[Sat Aug 29 05:06:36.705768 2026] [security2:error] [pid 1017536:tid 1017736] [client 40.83.93.50:23969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-configs.php"] [unique_id "apK9PCJcY4fy7tP-rU0LPwAAAlo"]
[Sat Aug 29 05:06:36.710500 2026] [core:error] [pid 1017536:tid 1017589] [remote 34.23.124.185:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.710501 2026] [core:error] [pid 1017536:tid 1017548] [remote 34.23.124.185:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.710513 2026] [core:error] [pid 1017536:tid 1017589] [remote 34.23.124.185:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.710518 2026] [core:error] [pid 1017536:tid 1017548] [remote 34.23.124.185:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.711478 2026] [core:error] [pid 1017536:tid 1017575] [remote 34.23.124.185:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.720225 2026] [security2:error] [pid 1017536:tid 1017669] [client 93.123.109.228:49940] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/project/.env"] [unique_id "apK9PCJcY4fy7tP-rU0LQwAAAhc"]
[Sat Aug 29 05:06:36.729436 2026] [core:error] [pid 1017536:tid 1017653] [remote 34.23.124.185:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.729453 2026] [core:error] [pid 1017536:tid 1017653] [remote 34.23.124.185:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.731999 2026] [security2:error] [pid 1017536:tid 1017757] [client 158.158.54.35:14096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/403.php"] [unique_id "apK9PCJcY4fy7tP-rU0LRQAAAm8"]
[Sat Aug 29 05:06:36.738429 2026] [security2:error] [pid 1018003:tid 1018217] [client 20.196.209.81:17892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/alumni_reg.php"] [unique_id "apK9PDAh5Y1i2tUxg4H78wAABfo"]
[Sat Aug 29 05:06:36.753021 2026] [security2:error] [pid 1017536:tid 1017667] [client 20.48.250.41:25428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/06.php"] [unique_id "apK9PCJcY4fy7tP-rU0LRwAAAhU"]
[Sat Aug 29 05:06:36.759795 2026] [core:error] [pid 1017536:tid 1017588] [remote 34.23.124.185:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.759808 2026] [core:error] [pid 1017536:tid 1017588] [remote 34.23.124.185:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.770020 2026] [security2:error] [pid 1017536:tid 1017778] [client 20.196.209.81:4422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/class-walker-category-dropdown-class.php"] [unique_id "apK9PCJcY4fy7tP-rU0LSQAAAoQ"]
[Sat Aug 29 05:06:36.770923 2026] [security2:error] [pid 1017536:tid 1017785] [client 20.63.81.20:46869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/vpn.php"] [unique_id "apK9PCJcY4fy7tP-rU0LSgAAAos"]
[Sat Aug 29 05:06:36.785262 2026] [core:error] [pid 1017536:tid 1017590] [remote 34.23.124.185:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.785277 2026] [core:error] [pid 1017536:tid 1017590] [remote 34.23.124.185:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.791164 2026] [core:error] [pid 1017536:tid 1017601] [remote 34.23.124.185:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.791189 2026] [core:error] [pid 1017536:tid 1017603] [remote 34.23.124.185:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.802676 2026] [security2:error] [pid 1018003:tid 1018266] [client 93.123.109.228:49798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/public/phpinfo.php"] [unique_id "apK9PDAh5Y1i2tUxg4H79AAABio"]
[Sat Aug 29 05:06:36.813245 2026] [core:error] [pid 1017536:tid 1017596] [remote 34.23.124.185:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.813255 2026] [core:error] [pid 1017536:tid 1017596] [remote 34.23.124.185:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.821008 2026] [security2:error] [pid 1018003:tid 1018159] [client 93.123.109.228:49994] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/public/.env"] [unique_id "apK9PDAh5Y1i2tUxg4H79QAABcA"]
[Sat Aug 29 05:06:36.821029 2026] [security2:error] [pid 1017536:tid 1017748] [client 20.151.200.44:64285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/rfi.php"] [unique_id "apK9PCJcY4fy7tP-rU0LTwAAAmY"]
[Sat Aug 29 05:06:36.821459 2026] [security2:error] [pid 1017536:tid 1017717] [client 158.23.184.117:46340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/7.php"] [unique_id "apK9PCJcY4fy7tP-rU0LUQAAAkc"]
[Sat Aug 29 05:06:36.823728 2026] [core:error] [pid 1017536:tid 1017561] [remote 34.23.124.185:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.828500 2026] [security2:error] [pid 1017536:tid 1017540] [remote 74.7.227.154:41716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK9PCJcY4fy7tP-rU0LUwACGwM"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwp-easycart%2Fdesign%2Flayout%2Fbase-responsive-v3
[Sat Aug 29 05:06:36.829721 2026] [security2:error] [pid 1017536:tid 1017743] [client 158.23.184.117:34534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/abc.php"] [unique_id "apK9PCJcY4fy7tP-rU0LVQAAAmE"]
[Sat Aug 29 05:06:36.830581 2026] [security2:error] [pid 1017536:tid 1017770] [client 20.220.204.93:59092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/f35.php"] [unique_id "apK9PCJcY4fy7tP-rU0LVgAAAnw"]
[Sat Aug 29 05:06:36.857220 2026] [security2:error] [pid 1018003:tid 1018177] [client 93.123.109.228:49832] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/public_html/.env"] [unique_id "apK9PDAh5Y1i2tUxg4H79gAABdI"]
[Sat Aug 29 05:06:36.859252 2026] [core:error] [pid 1017536:tid 1017541] [remote 34.23.124.185:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.864606 2026] [core:error] [pid 1017536:tid 1017567] [remote 34.23.124.185:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.865460 2026] [security2:error] [pid 1017536:tid 1017709] [client 20.151.200.44:47376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/blox.php"] [unique_id "apK9PCJcY4fy7tP-rU0LXAAAAj8"]
[Sat Aug 29 05:06:36.866295 2026] [core:error] [pid 1017536:tid 1017550] [remote 34.23.124.185:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.866368 2026] [core:error] [pid 1017536:tid 1017562] [remote 34.23.124.185:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.889564 2026] [security2:error] [pid 1017536:tid 1017749] [client 20.220.204.93:59067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/zxekqlxb.php"] [unique_id "apK9PCJcY4fy7tP-rU0LXQAAAmc"]
[Sat Aug 29 05:06:36.909089 2026] [security2:error] [pid 1018003:tid 1018166] [client 4.205.62.107:21905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/a1vx.php"] [unique_id "apK9PDAh5Y1i2tUxg4H79wAABcc"]
[Sat Aug 29 05:06:36.913284 2026] [security2:error] [pid 1018003:tid 1018233] [client 158.23.147.79:59860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK9PDAh5Y1i2tUxg4H7-AAABgk"]
[Sat Aug 29 05:06:36.923600 2026] [core:error] [pid 1017536:tid 1017551] [remote 34.23.124.185:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.923623 2026] [core:error] [pid 1017536:tid 1017551] [remote 34.23.124.185:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.923818 2026] [security2:error] [pid 1017536:tid 1017713] [client 168.107.94.195:65195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9PCJcY4fy7tP-rU0LYQAAAkM"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:36.924102 2026] [core:error] [pid 1017536:tid 1017563] [remote 34.23.124.185:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.937047 2026] [security2:error] [pid 1018003:tid 1018248] [client 93.123.109.228:49954] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/public-api/.env"] [unique_id "apK9PDAh5Y1i2tUxg4H7-QAABhg"]
[Sat Aug 29 05:06:36.937759 2026] [security2:error] [pid 1018003:tid 1018180] [client 20.63.81.20:44417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/shiny.php"] [unique_id "apK9PDAh5Y1i2tUxg4H7-gAABdU"]
[Sat Aug 29 05:06:36.939671 2026] [security2:error] [pid 1018003:tid 1018167] [client 93.123.109.228:49664] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/qa/.env"] [unique_id "apK9PDAh5Y1i2tUxg4H7_gAABcg"]
[Sat Aug 29 05:06:36.939675 2026] [security2:error] [pid 1018003:tid 1018036] [remote 34.75.89.130:51736] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "freejohnstuart.com"] [uri "/web.config"] [unique_id "apK9PDAh5Y1i2tUxg4H7_AAGLw8"]
[Sat Aug 29 05:06:36.943154 2026] [security2:error] [pid 1017536:tid 1017695] [client 185.104.184.230:52602] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.wlu.rog.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "apK9PCJcY4fy7tP-rU0LYgAAAjE"]
[Sat Aug 29 05:06:36.946516 2026] [security2:error] [pid 1018003:tid 1018187] [client 20.151.200.44:64446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/zafir1.php"] [unique_id "apK9PDAh5Y1i2tUxg4H8AwAABdw"]
[Sat Aug 29 05:06:36.947148 2026] [core:error] [pid 1017536:tid 1017571] [remote 34.23.124.185:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.947596 2026] [core:error] [pid 1017536:tid 1017586] [remote 34.23.124.185:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.949442 2026] [core:error] [pid 1017536:tid 1017612] [remote 34.23.124.185:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.949456 2026] [core:error] [pid 1017536:tid 1017612] [remote 34.23.124.185:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:36.949476 2026] [security2:error] [pid 1017536:tid 1017625] [remote 34.23.124.185:46008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 185.124.23.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/pi.php"] [unique_id "apK9PCJcY4fy7tP-rU0LZgACHVg"]
[Sat Aug 29 05:06:36.951627 2026] [security2:error] [pid 1018003:tid 1018152] [client 158.23.147.79:25532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-login.php"] [unique_id "apK9PDAh5Y1i2tUxg4H8BAAABbk"]
[Sat Aug 29 05:06:36.962863 2026] [security2:error] [pid 1017536:tid 1017683] [client 20.220.204.93:59069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/wen.php"] [unique_id "apK9PCJcY4fy7tP-rU0LZwAAAiU"]
[Sat Aug 29 05:06:36.967588 2026] [security2:error] [pid 1018003:tid 1018246] [client 158.23.184.117:46351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/black.php"] [unique_id "apK9PDAh5Y1i2tUxg4H8BQAABhY"]
[Sat Aug 29 05:06:36.968538 2026] [security2:error] [pid 1017536:tid 1017667] [client 20.151.200.44:64901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/tajj.php"] [unique_id "apK9PCJcY4fy7tP-rU0LaAAAAhU"]
[Sat Aug 29 05:06:36.975033 2026] [security2:error] [pid 1017536:tid 1017672] [client 158.23.147.79:26595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/.well-known/index.php"] [unique_id "apK9PCJcY4fy7tP-rU0LaQAAAho"]
[Sat Aug 29 05:06:36.975771 2026] [security2:error] [pid 1018003:tid 1018256] [client 158.23.184.117:34503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/av.php"] [unique_id "apK9PDAh5Y1i2tUxg4H8BgAABiA"]
[Sat Aug 29 05:06:36.988804 2026] [security2:error] [pid 1018003:tid 1018238] [client 20.48.250.41:25567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/class.php"] [unique_id "apK9PDAh5Y1i2tUxg4H8BwAABg4"]
[Sat Aug 29 05:06:36.992154 2026] [cgid:error] [pid 1017536:tid 1017767] [client 20.52.41.200:1732] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/cpslggc/404.shtml
[Sat Aug 29 05:06:37.051851 2026] [security2:error] [pid 1017536:tid 1017724] [client 20.220.204.93:52342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/init.php"] [unique_id "apK9PSJcY4fy7tP-rU0LbgAAAk4"]
[Sat Aug 29 05:06:37.065449 2026] [security2:error] [pid 1018003:tid 1018218] [client 158.23.147.79:38768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/images/index.php"] [unique_id "apK9PTAh5Y1i2tUxg4H8CQAABfs"]
[Sat Aug 29 05:06:37.068786 2026] [security2:error] [pid 1017536:tid 1017664] [remote 34.23.124.185:46008] ModSecurity: Access denied with code 406 (phase 2). Match of "ipMatch 127.0.0.1,::1" against "REMOTE_ADDR" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "724"] [id "340114"] [rev "2"] [msg "Atomicorp.com WAF Rules: Apache admin service access attempt"] [severity "CRITICAL"] [hostname "www.garyandelaine.strangeworx.com"] [uri "/server-info"] [unique_id "apK9PSJcY4fy7tP-rU0LbwACfH8"]
[Sat Aug 29 05:06:37.089735 2026] [security2:error] [pid 1017536:tid 1017729] [client 20.63.81.20:46892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/goods.php"] [unique_id "apK9PSJcY4fy7tP-rU0LcQAAAlM"]
[Sat Aug 29 05:06:37.117315 2026] [security2:error] [pid 1017536:tid 1017731] [client 158.23.184.117:62330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/wp-blog-header.php"] [unique_id "apK9PSJcY4fy7tP-rU0LdAAAAlU"]
[Sat Aug 29 05:06:37.117699 2026] [security2:error] [pid 1018003:tid 1018225] [client 20.197.61.180:11611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/colors.php"] [unique_id "apK9PTAh5Y1i2tUxg4H8DQAABgI"]
[Sat Aug 29 05:06:37.119294 2026] [security2:error] [pid 1018003:tid 1018162] [client 158.23.184.117:34540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/autoload_classmap.php"] [unique_id "apK9PTAh5Y1i2tUxg4H8DgAABcM"]
[Sat Aug 29 05:06:37.122985 2026] [security2:error] [pid 1018003:tid 1018170] [client 68.155.159.216:49216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/.well-known/index.php"] [unique_id "apK9PTAh5Y1i2tUxg4H8DwAABcs"]
[Sat Aug 29 05:06:37.134978 2026] [security2:error] [pid 1018003:tid 1018231] [client 20.220.204.93:59055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/inc.php"] [unique_id "apK9PTAh5Y1i2tUxg4H8EQAABgc"]
[Sat Aug 29 05:06:37.145086 2026] [cgid:error] [pid 1017536:tid 1017732] [client 20.52.41.200:1732] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/cpslggc/404.shtml
[Sat Aug 29 05:06:37.145928 2026] [security2:error] [pid 1018003:tid 1018160] [client 20.48.250.41:25350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/8.php"] [unique_id "apK9PTAh5Y1i2tUxg4H8EgAABcE"]
[Sat Aug 29 05:06:37.150783 2026] [security2:error] [pid 1018003:tid 1018206] [client 20.151.200.44:65024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/console.php"] [unique_id "apK9PTAh5Y1i2tUxg4H8EwAABe8"]
[Sat Aug 29 05:06:37.153494 2026] [security2:error] [pid 1018003:tid 1018190] [client 4.205.62.107:22370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/124.php"] [unique_id "apK9PTAh5Y1i2tUxg4H8FAAABd8"]
[Sat Aug 29 05:06:37.173529 2026] [security2:error] [pid 1017536:tid 1017740] [client 20.151.200.44:64957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/grsiuk.php"] [unique_id "apK9PSJcY4fy7tP-rU0LdgAAAl4"]
[Sat Aug 29 05:06:37.175769 2026] [security2:error] [pid 1017536:tid 1017717] [client 158.158.54.35:2788] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/1.php"] [unique_id "apK9PSJcY4fy7tP-rU0LdwAAAkc"]
[Sat Aug 29 05:06:37.175837 2026] [security2:error] [pid 1017536:tid 1017717] [client 158.158.54.35:2788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/1.php"] [unique_id "apK9PSJcY4fy7tP-rU0LdwAAAkc"]
[Sat Aug 29 05:06:37.182048 2026] [security2:error] [pid 1017536:tid 1017751] [client 40.83.93.50:23954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-conflg.php"] [unique_id "apK9PSJcY4fy7tP-rU0LeAAAAmk"]
[Sat Aug 29 05:06:37.185569 2026] [security2:error] [pid 1017536:tid 1017705] [client 158.23.147.79:35798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/ws.php"] [unique_id "apK9PSJcY4fy7tP-rU0LeQAAAjs"]
[Sat Aug 29 05:06:37.189836 2026] [security2:error] [pid 1017536:tid 1017743] [client 20.196.209.81:13259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/colors.php"] [unique_id "apK9PSJcY4fy7tP-rU0LegAAAmE"]
[Sat Aug 29 05:06:37.193600 2026] [security2:error] [pid 1017536:tid 1017776] [client 20.220.204.93:52224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/term.php"] [unique_id "apK9PSJcY4fy7tP-rU0LfAAAAoI"]
[Sat Aug 29 05:06:37.194679 2026] [security2:error] [pid 1018003:tid 1018200] [client 20.196.209.81:11542] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.merlynscatering.net"] [uri "/1.php7"] [unique_id "apK9PTAh5Y1i2tUxg4H8FgAABek"]
[Sat Aug 29 05:06:37.194761 2026] [security2:error] [pid 1018003:tid 1018200] [client 20.196.209.81:11542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/1.php7"] [unique_id "apK9PTAh5Y1i2tUxg4H8FgAABek"]
[Sat Aug 29 05:06:37.223256 2026] [security2:error] [pid 1017536:tid 1017793] [client 4.205.62.107:22258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/phpsysinfo.php"] [unique_id "apK9PSJcY4fy7tP-rU0LfgAAApM"]
[Sat Aug 29 05:06:37.237683 2026] [security2:error] [pid 1017536:tid 1017778] [client 4.205.62.107:65445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/xp.php"] [unique_id "apK9PSJcY4fy7tP-rU0LfwAAAoQ"]
[Sat Aug 29 05:06:37.241457 2026] [security2:error] [pid 1017536:tid 1017673] [client 185.104.184.230:52612] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.wlu.rog.mybluehost.me"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "apK9PSJcY4fy7tP-rU0LgAAAAhs"]
[Sat Aug 29 05:06:37.246858 2026] [security2:error] [pid 1017536:tid 1017765] [client 20.63.81.20:46956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/alfa.php"] [unique_id "apK9PSJcY4fy7tP-rU0LgQAAAnc"]
[Sat Aug 29 05:06:37.259579 2026] [core:error] [pid 1018003:tid 1018153] [client 45.148.10.62:38782] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:37.259598 2026] [core:error] [pid 1018003:tid 1018153] [client 45.148.10.62:38782] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:37.268592 2026] [security2:error] [pid 1017536:tid 1017706] [client 20.151.200.44:45966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/kcs.php"] [unique_id "apK9PSJcY4fy7tP-rU0LhAAAAjw"]
[Sat Aug 29 05:06:37.277899 2026] [security2:error] [pid 1018003:tid 1018195] [client 35.198.240.194:2580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 194.240.198.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.omni-staffing.com"] [uri "/configuration.php.bak"] [unique_id "apK9PTAh5Y1i2tUxg4H8HQAABeQ"]
[Sat Aug 29 05:06:37.278006 2026] [security2:error] [pid 1018003:tid 1018195] [client 35.198.240.194:2580] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "409"] [hostname "mail.omni-staffing.com"] [uri "/configuration.php.bak"] [unique_id "apK9PTAh5Y1i2tUxg4H8HQAABeQ"]
[Sat Aug 29 05:06:37.279058 2026] [security2:error] [pid 1018003:tid 1018268] [client 35.198.240.194:2502] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "mail.omni-staffing.com"] [uri "/web.config"] [unique_id "apK9PTAh5Y1i2tUxg4H8HAAABiw"]
[Sat Aug 29 05:06:37.280442 2026] [security2:error] [pid 1018003:tid 1018245] [client 35.198.240.194:2544] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.omni-staffing.com"] [uri "/cgi-sys/404.html"] [unique_id "apK9PTAh5Y1i2tUxg4H8HgAABhU"]
[Sat Aug 29 05:06:37.282146 2026] [security2:error] [pid 1018003:tid 1018266] [client 35.198.240.194:2616] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.omni-staffing.com"] [uri "/runtime.js"] [unique_id "apK9PTAh5Y1i2tUxg4H8IwAABio"]
[Sat Aug 29 05:06:37.294080 2026] [security2:error] [pid 1017536:tid 1017731] [client 20.52.41.200:1732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/tool.php"] [unique_id "apK9PSJcY4fy7tP-rU0LiQAAAlU"]
[Sat Aug 29 05:06:37.298998 2026] [security2:error] [pid 1018003:tid 1018243] [client 20.48.250.41:25380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/0x0x.php"] [unique_id "apK9PTAh5Y1i2tUxg4H8KAAABhM"]
[Sat Aug 29 05:06:37.303504 2026] [security2:error] [pid 1018003:tid 1018189] [client 168.107.94.195:49153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9PTAh5Y1i2tUxg4H8KQAABd4"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:37.307696 2026] [security2:error] [pid 1017536:tid 1017788] [client 158.23.184.117:46960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/2.php"] [unique_id "apK9PSJcY4fy7tP-rU0LigAAAo4"]
[Sat Aug 29 05:06:37.309135 2026] [security2:error] [pid 1017536:tid 1017587] [remote 74.7.227.154:41716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK9PSJcY4fy7tP-rU0LjAACWDI"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwp-easycart%2Fdesign%2Flayout%2Fbase-responsive-v3
[Sat Aug 29 05:06:37.318610 2026] [security2:error] [pid 1017536:tid 1017691] [client 20.151.200.44:61986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/ahy66.php"] [unique_id "apK9PSJcY4fy7tP-rU0LjQAAAi0"]
[Sat Aug 29 05:06:37.358097 2026] [security2:error] [pid 1018003:tid 1018172] [client 158.23.184.117:34529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/asus.php"] [unique_id "apK9PTAh5Y1i2tUxg4H8MgAABc0"]
[Sat Aug 29 05:06:37.359294 2026] [security2:error] [pid 1017536:tid 1017705] [client 158.23.147.79:30555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/cgi-bin/index.php"] [unique_id "apK9PSJcY4fy7tP-rU0LjwAAAjs"]
[Sat Aug 29 05:06:37.360164 2026] [security2:error] [pid 1018003:tid 1018248] [client 20.220.204.93:59125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/6bcwiqwj.php"] [unique_id "apK9PTAh5Y1i2tUxg4H8MwAABhg"]
[Sat Aug 29 05:06:37.367798 2026] [security2:error] [pid 1017536:tid 1017743] [client 20.220.204.93:59053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/aaa.php"] [unique_id "apK9PSJcY4fy7tP-rU0LkgAAAmE"]
[Sat Aug 29 05:06:37.368565 2026] [cgid:error] [pid 1017536:tid 1017678] [client 34.7.40.70:25370] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:37.368644 2026] [cgid:error] [pid 1018003:tid 1018161] [client 34.7.40.70:25340] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:37.369014 2026] [cgid:error] [pid 1017536:tid 1017711] [client 34.7.40.70:25304] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:37.369110 2026] [security2:error] [pid 1017536:tid 1017711] [client 34.7.40.70:25304] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/404.shtml"] [unique_id "apK9PSJcY4fy7tP-rU0LkAAAAkE"]
[Sat Aug 29 05:06:37.371073 2026] [cgid:error] [pid 1018003:tid 1018202] [client 34.7.40.70:25404] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:37.371101 2026] [cgid:error] [pid 1017536:tid 1017713] [client 34.7.40.70:25290] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:37.371178 2026] [cgid:error] [pid 1017536:tid 1017737] [client 34.7.40.70:25430] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:37.371797 2026] [cgid:error] [pid 1017536:tid 1017669] [client 34.7.40.70:25308] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:37.371797 2026] [cgid:error] [pid 1018003:tid 1018192] [client 34.7.40.70:25334] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:37.371905 2026] [security2:error] [pid 1017536:tid 1017669] [client 34.7.40.70:25308] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/404.shtml"] [unique_id "apK9PSJcY4fy7tP-rU0LkwAAAhc"]
[Sat Aug 29 05:06:37.372369 2026] [cgid:error] [pid 1017536:tid 1017757] [client 34.7.40.70:25362] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:37.373071 2026] [cgid:error] [pid 1018003:tid 1018169] [client 34.7.40.70:25506] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:37.373224 2026] [cgid:error] [pid 1018003:tid 1018157] [client 34.7.40.70:25458] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:37.373470 2026] [cgid:error] [pid 1017536:tid 1017752] [client 34.7.40.70:25298] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:37.373470 2026] [cgid:error] [pid 1017536:tid 1017695] [client 34.7.40.70:25424] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:37.373473 2026] [cgid:error] [pid 1018003:tid 1018179] [client 34.7.40.70:25390] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:37.373515 2026] [security2:error] [pid 1018003:tid 1018182] [client 34.7.40.70:25532] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/dev/.env"] [unique_id "apK9PTAh5Y1i2tUxg4H8OwAABdc"]
[Sat Aug 29 05:06:37.373711 2026] [security2:error] [pid 1018003:tid 1018175] [client 34.7.40.70:25570] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/production/.env"] [unique_id "apK9PTAh5Y1i2tUxg4H8PAAABdA"]
[Sat Aug 29 05:06:37.373835 2026] [security2:error] [pid 1017536:tid 1017744] [client 34.7.40.70:25504] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/client/.env"] [unique_id "apK9PSJcY4fy7tP-rU0LmQAAAmI"]
[Sat Aug 29 05:06:37.374592 2026] [cgid:error] [pid 1018003:tid 1018171] [client 34.7.40.70:25346] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:37.375145 2026] [security2:error] [pid 1017536:tid 1017781] [client 34.7.40.70:25518] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/backup/.env"] [unique_id "apK9PSJcY4fy7tP-rU0LnAAAAoc"]
[Sat Aug 29 05:06:37.375398 2026] [cgid:error] [pid 1017536:tid 1017707] [client 34.7.40.70:25318] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:37.376927 2026] [cgid:error] [pid 1017536:tid 1017675] [client 34.7.40.70:25378] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:37.377330 2026] [cgid:error] [pid 1018003:tid 1018224] [client 34.7.40.70:25580] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:37.377478 2026] [cgid:error] [pid 1017536:tid 1017667] [client 34.7.40.70:25490] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:37.377478 2026] [cgid:error] [pid 1018003:tid 1018273] [client 34.7.40.70:25460] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:37.377709 2026] [cgid:error] [pid 1017536:tid 1017683] [client 34.7.40.70:25418] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:37.379369 2026] [cgid:error] [pid 1018003:tid 1018185] [client 34.7.40.70:25486] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:37.380991 2026] [security2:error] [pid 1017536:tid 1017767] [client 34.7.40.70:25546] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/staging/.env"] [unique_id "apK9PSJcY4fy7tP-rU0LoQAAAnk"]
[Sat Aug 29 05:06:37.382764 2026] [cgid:error] [pid 1017536:tid 1017672] [client 34.7.40.70:25444] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:37.382904 2026] [cgid:error] [pid 1017536:tid 1017785] [client 34.7.40.70:25560] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:37.382927 2026] [cgid:error] [pid 1017536:tid 1017745] [client 34.7.40.70:25604] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:37.383326 2026] [cgid:error] [pid 1017536:tid 1017696] [client 34.7.40.70:25582] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:37.383393 2026] [security2:error] [pid 1017536:tid 1017745] [client 34.7.40.70:25604] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/404.shtml"] [unique_id "apK9PSJcY4fy7tP-rU0LnwAAAmM"]
[Sat Aug 29 05:06:37.383456 2026] [security2:error] [pid 1017536:tid 1017696] [client 34.7.40.70:25582] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/404.shtml"] [unique_id "apK9PSJcY4fy7tP-rU0LowAAAjI"]
[Sat Aug 29 05:06:37.384602 2026] [cgid:error] [pid 1017536:tid 1017748] [client 34.7.40.70:25578] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:37.389551 2026] [security2:error] [pid 1017536:tid 1017793] [client 20.63.81.20:44511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/33.php"] [unique_id "apK9PSJcY4fy7tP-rU0LpgAAApM"]
[Sat Aug 29 05:06:37.412209 2026] [security2:error] [pid 1018003:tid 1018216] [client 87.219.197.128:54293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK9PTAh5Y1i2tUxg4H8QgAABfk"]
[Sat Aug 29 05:06:37.412298 2026] [security2:error] [pid 1018003:tid 1018216] [client 87.219.197.128:54293] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK9PTAh5Y1i2tUxg4H8QgAABfk"]
[Sat Aug 29 05:06:37.434825 2026] [security2:error] [pid 1017536:tid 1017710] [client 68.155.159.216:33612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-content/radio.php"] [unique_id "apK9PSJcY4fy7tP-rU0LqAAAAkA"]
[Sat Aug 29 05:06:37.446800 2026] [security2:error] [pid 1017536:tid 1017761] [client 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK9PSJcY4fy7tP-rU0LjgACcy0"]
[Sat Aug 29 05:06:37.447643 2026] [security2:error] [pid 1017536:tid 1017770] [client 20.48.250.41:25290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/166.php"] [unique_id "apK9PSJcY4fy7tP-rU0LqQAAAnw"]
[Sat Aug 29 05:06:37.451144 2026] [security2:error] [pid 1017536:tid 1017778] [client 158.23.184.117:46966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/index/function.php"] [unique_id "apK9PSJcY4fy7tP-rU0LqgAAAoQ"]
[Sat Aug 29 05:06:37.454105 2026] [security2:error] [pid 1018003:tid 1018262] [client 20.151.200.44:64427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/blnux.php"] [unique_id "apK9PTAh5Y1i2tUxg4H8QwAABiY"]
[Sat Aug 29 05:06:37.454952 2026] [security2:error] [pid 1018003:tid 1018230] [client 20.151.200.44:47315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/wsz.php"] [unique_id "apK9PTAh5Y1i2tUxg4H8RAAABgY"]
[Sat Aug 29 05:06:37.500999 2026] [security2:error] [pid 1017536:tid 1017729] [client 158.23.184.117:34750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/about.php"] [unique_id "apK9PSJcY4fy7tP-rU0LrgAAAlM"]
[Sat Aug 29 05:06:37.523315 2026] [security2:error] [pid 1017536:tid 1017740] [client 57.141.14.111:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/page/34/"] [unique_id "apK9PSJcY4fy7tP-rU0LsAAAAl4"]
[Sat Aug 29 05:06:37.534397 2026] [security2:error] [pid 1018003:tid 1018218] [client 20.63.81.20:46916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/133.php"] [unique_id "apK9PTAh5Y1i2tUxg4H8SAAABfs"]
[Sat Aug 29 05:06:37.534808 2026] [security2:error] [pid 1017536:tid 1017732] [client 185.104.184.230:52618] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.wlu.rog.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "apK9PSJcY4fy7tP-rU0LsQAAAlY"]
[Sat Aug 29 05:06:37.548304 2026] [security2:error] [pid 1018003:tid 1018170] [client 68.155.159.216:50307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK9PTAh5Y1i2tUxg4H8TAAABcs"]
[Sat Aug 29 05:06:37.568473 2026] [security2:error] [pid 1018003:tid 1018206] [client 20.220.204.93:52302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/easy.php"] [unique_id "apK9PTAh5Y1i2tUxg4H8TwAABe8"]
[Sat Aug 29 05:06:37.583391 2026] [security2:error] [pid 1017536:tid 1017678] [client 20.220.204.93:59057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/xsox.php"] [unique_id "apK9PSJcY4fy7tP-rU0LswAAAiA"]
[Sat Aug 29 05:06:37.585011 2026] [security2:error] [pid 1017536:tid 1017711] [client 158.23.147.79:48210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK9PSJcY4fy7tP-rU0LtAAAAkE"]
[Sat Aug 29 05:06:37.590517 2026] [security2:error] [pid 1018003:tid 1018238] [client 20.196.209.81:11524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/ds.php"] [unique_id "apK9PTAh5Y1i2tUxg4H8UQAABg4"]
[Sat Aug 29 05:06:37.595421 2026] [security2:error] [pid 1018003:tid 1018225] [client 158.23.184.117:62294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/wp-admin/maint/repair.php"] [unique_id "apK9PTAh5Y1i2tUxg4H8UgAABgI"]
[Sat Aug 29 05:06:37.598219 2026] [security2:error] [pid 1017536:tid 1017737] [client 20.48.250.41:25520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/h2a2ck.php"] [unique_id "apK9PSJcY4fy7tP-rU0LtQAAAls"]
[Sat Aug 29 05:06:37.607903 2026] [security2:error] [pid 1017536:tid 1017695] [client 20.151.200.44:46600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/msy.php"] [unique_id "apK9PSJcY4fy7tP-rU0LtwAAAjE"]
[Sat Aug 29 05:06:37.613445 2026] [security2:error] [pid 1017536:tid 1017790] [client 20.196.209.81:13307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/Js.php"] [unique_id "apK9PSJcY4fy7tP-rU0LuAAAApA"]
[Sat Aug 29 05:06:37.627268 2026] [security2:error] [pid 1018003:tid 1018153] [client 158.23.147.79:30615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK9PTAh5Y1i2tUxg4H8VQAABbo"]
[Sat Aug 29 05:06:37.634020 2026] [security2:error] [pid 1017536:tid 1017707] [client 114.119.139.78:60653] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.classiclightingusa.com"] [uri "/catalog/product_info.php/cPath/3/products_id/681/osCsid/56aa4ec5dc57dc42f82c493b0191f57d"] [unique_id "apK9PSJcY4fy7tP-rU0LuwAAAj0"], referer: http://www.classiclightingusa.com/catalog/index.php/cPath/3/osCsid/56aa4ec5dc57dc42f82c493b0191f57d
[Sat Aug 29 05:06:37.634724 2026] [core:error] [pid 1017536:tid 1017731] [client 158.158.54.35:11187] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:37.634736 2026] [core:error] [pid 1017536:tid 1017731] [client 158.158.54.35:11187] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:37.643054 2026] [security2:error] [pid 1017536:tid 1017713] [client 158.23.184.117:33939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/atomlib.php"] [unique_id "apK9PSJcY4fy7tP-rU0LvAAAAkM"]
[Sat Aug 29 05:06:37.648528 2026] [security2:error] [pid 1018003:tid 1018259] [client 40.83.93.50:1752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-content.php"] [unique_id "apK9PTAh5Y1i2tUxg4H8VgAABiM"]
[Sat Aug 29 05:06:37.663543 2026] [security2:error] [pid 1017536:tid 1017672] [client 68.155.159.216:14294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/wp-content/x.php"] [unique_id "apK9PSJcY4fy7tP-rU0LvgAAAho"]
[Sat Aug 29 05:06:37.664674 2026] [security2:error] [pid 1017536:tid 1017745] [client 4.205.62.107:53338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/adminer-4.7.6-en.php"] [unique_id "apK9PSJcY4fy7tP-rU0LvwAAAmM"]
[Sat Aug 29 05:06:37.674140 2026] [security2:error] [pid 1017536:tid 1017696] [client 20.151.200.44:64981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/pentest.php"] [unique_id "apK9PSJcY4fy7tP-rU0LwAAAAjI"]
[Sat Aug 29 05:06:37.676235 2026] [security2:error] [pid 1017536:tid 1017704] [client 4.205.62.107:53263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/ah25.php"] [unique_id "apK9PSJcY4fy7tP-rU0LwQAAAjo"]
[Sat Aug 29 05:06:37.676488 2026] [security2:error] [pid 1017536:tid 1017793] [client 20.63.81.20:44491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/sym.php"] [unique_id "apK9PSJcY4fy7tP-rU0LwgAAApM"]
[Sat Aug 29 05:06:37.682391 2026] [security2:error] [pid 1017536:tid 1017765] [client 168.107.94.195:49406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9PSJcY4fy7tP-rU0LwwAAAnc"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:37.695322 2026] [security2:error] [pid 1017536:tid 1017781] [client 52.139.37.240:31627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK9PSJcY4fy7tP-rU0LxAAAAoc"]
[Sat Aug 29 05:06:37.706697 2026] [security2:error] [pid 1018003:tid 1018266] [client 158.23.184.117:19218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/.dj/index.php"] [unique_id "apK9PTAh5Y1i2tUxg4H8WQAABio"]
[Sat Aug 29 05:06:37.708215 2026] [security2:error] [pid 1018003:tid 1018268] [client 20.220.204.93:52254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/fresh3.php"] [unique_id "apK9PTAh5Y1i2tUxg4H8WgAABiw"]
[Sat Aug 29 05:06:37.712883 2026] [security2:error] [pid 1018003:tid 1018240] [client 68.155.159.216:51417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK9PTAh5Y1i2tUxg4H8WwAABhA"]
[Sat Aug 29 05:06:37.728723 2026] [security2:error] [pid 1017536:tid 1017780] [client 20.220.204.93:59008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/lkui.php"] [unique_id "apK9PSJcY4fy7tP-rU0LygAAAoY"]
[Sat Aug 29 05:06:37.740052 2026] [security2:error] [pid 1018003:tid 1018155] [client 158.23.147.79:17430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9PTAh5Y1i2tUxg4H8XAAABbw"]
[Sat Aug 29 05:06:37.747854 2026] [security2:error] [pid 1018003:tid 1018275] [client 20.52.41.200:1758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/k.php"] [unique_id "apK9PTAh5Y1i2tUxg4H8XQAABjM"]
[Sat Aug 29 05:06:37.749330 2026] [security2:error] [pid 1017536:tid 1017691] [client 20.48.250.41:25531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/error_log.php"] [unique_id "apK9PSJcY4fy7tP-rU0LzAAAAi0"]
[Sat Aug 29 05:06:37.759043 2026] [security2:error] [pid 1017536:tid 1017717] [client 68.155.159.216:64473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-admin/about.php"] [unique_id "apK9PSJcY4fy7tP-rU0LzQAAAkc"]
[Sat Aug 29 05:06:37.777368 2026] [security2:error] [pid 1017536:tid 1017778] [client 52.139.37.240:8626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drjrae.com"] [uri "/essexec.php"] [unique_id "apK9PSJcY4fy7tP-rU0LzwAAAoQ"]
[Sat Aug 29 05:06:37.777789 2026] [security2:error] [pid 1018003:tid 1018217] [client 52.139.37.240:52626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.healthysmilestoday.com"] [uri "/add_actualites.php"] [unique_id "apK9PTAh5Y1i2tUxg4H8XwAABfo"]
[Sat Aug 29 05:06:37.784722 2026] [security2:error] [pid 1017536:tid 1017674] [client 158.23.184.117:46973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK9PSJcY4fy7tP-rU0L0AAAAhw"]
[Sat Aug 29 05:06:37.788652 2026] [security2:error] [pid 1017536:tid 1017721] [client 158.23.184.117:34704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/alfa-rex.php7"] [unique_id "apK9PSJcY4fy7tP-rU0L0QAAAks"]
[Sat Aug 29 05:06:37.791579 2026] [security2:error] [pid 1017536:tid 1017776] [client 158.23.147.79:24482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK9PSJcY4fy7tP-rU0L0gAAAoI"]
[Sat Aug 29 05:06:37.805100 2026] [security2:error] [pid 1018003:tid 1018166] [client 20.63.81.20:46852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/8.php"] [unique_id "apK9PTAh5Y1i2tUxg4H8ZAAABcc"]
[Sat Aug 29 05:06:37.822582 2026] [security2:error] [pid 1017536:tid 1017752] [client 45.148.10.62:38786] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ninaanddon.strangeworx.com"] [uri "/backend/.env"] [unique_id "apK9PSJcY4fy7tP-rU0L0wAAAmo"]
[Sat Aug 29 05:06:37.831037 2026] [security2:error] [pid 1017536:tid 1017757] [client 185.104.184.230:52634] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.wlu.rog.mybluehost.me"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "apK9PSJcY4fy7tP-rU0L1AAAAm8"]
[Sat Aug 29 05:06:37.831411 2026] [security2:error] [pid 1017536:tid 1017707] [client 20.104.49.130:53722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/albin.php"] [unique_id "apK9PSJcY4fy7tP-rU0L1QAAAj0"]
[Sat Aug 29 05:06:37.835274 2026] [security2:error] [pid 1017536:tid 1017667] [client 20.104.49.130:36087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.danesquality.com"] [uri "/155.php"] [unique_id "apK9PSJcY4fy7tP-rU0L1gAAAhU"]
[Sat Aug 29 05:06:37.840446 2026] [security2:error] [pid 1017536:tid 1017669] [client 20.197.61.180:11596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/Js.php"] [unique_id "apK9PSJcY4fy7tP-rU0L1wAAAhc"]
[Sat Aug 29 05:06:37.851822 2026] [security2:error] [pid 1018003:tid 1018250] [client 158.23.184.117:19223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/.info.php"] [unique_id "apK9PTAh5Y1i2tUxg4H8ZgAABho"]
[Sat Aug 29 05:06:37.864220 2026] [security2:error] [pid 1018003:tid 1018174] [client 114.119.150.158:31579] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "femaleurinal.org"] [uri "/women-urinating-standing/female-urination-standing-up/"] [unique_id "apK9PTAh5Y1i2tUxg4H8ZwAABc8"], referer: https://femaleurinal.org/women-urinating-standing/
[Sat Aug 29 05:06:37.867852 2026] [security2:error] [pid 1018003:tid 1018172] [client 20.220.204.93:59111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "apK9PTAh5Y1i2tUxg4H8aAAABc0"]
[Sat Aug 29 05:06:37.880387 2026] [security2:error] [pid 1018003:tid 1018194] [client 93.123.109.228:49832] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/s3/.env.bak"] [unique_id "apK9PTAh5Y1i2tUxg4H8aQAABeM"]
[Sat Aug 29 05:06:37.892603 2026] [security2:error] [pid 1018003:tid 1018169] [client 20.220.204.93:59014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/bgymj.php"] [unique_id "apK9PTAh5Y1i2tUxg4H8bgAABco"]
[Sat Aug 29 05:06:37.897095 2026] [security2:error] [pid 1018003:tid 1018157] [client 20.48.250.41:25363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/403.php"] [unique_id "apK9PTAh5Y1i2tUxg4H8bwAABb4"]
[Sat Aug 29 05:06:37.897569 2026] [security2:error] [pid 1017536:tid 1017765] [client 20.151.200.44:65087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/6y7t.php"] [unique_id "apK9PSJcY4fy7tP-rU0L2QAAAnc"]
[Sat Aug 29 05:06:37.905678 2026] [security2:error] [pid 1017536:tid 1017767] [client 52.139.37.240:31665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/s.php"] [unique_id "apK9PSJcY4fy7tP-rU0L2wAAAnk"]
[Sat Aug 29 05:06:37.910952 2026] [security2:error] [pid 1018003:tid 1018175] [client 20.151.200.44:47375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/siln.php"] [unique_id "apK9PTAh5Y1i2tUxg4H8cAAABdA"]
[Sat Aug 29 05:06:37.913968 2026] [security2:error] [pid 1018003:tid 1018212] [client 103.185.242.143:63013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK9PTAh5Y1i2tUxg4H8cQAABfU"]
[Sat Aug 29 05:06:37.914098 2026] [security2:error] [pid 1018003:tid 1018212] [client 103.185.242.143:63013] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK9PTAh5Y1i2tUxg4H8cQAABfU"]
[Sat Aug 29 05:06:37.932771 2026] [security2:error] [pid 1018003:tid 1018252] [client 158.23.184.117:46946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/xda.php"] [unique_id "apK9PTAh5Y1i2tUxg4H8cgAABhw"]
[Sat Aug 29 05:06:37.934982 2026] [security2:error] [pid 1017536:tid 1017673] [client 158.23.184.117:34498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/b.php"] [unique_id "apK9PSJcY4fy7tP-rU0L3AAAAhs"]
[Sat Aug 29 05:06:37.958540 2026] [security2:error] [pid 1017536:tid 1017724] [client 20.63.81.20:41931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/goods.php"] [unique_id "apK9PSJcY4fy7tP-rU0L3gAAAk4"]
[Sat Aug 29 05:06:37.966120 2026] [security2:error] [pid 1017536:tid 1017748] [client 185.104.184.230:38180] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.xvo.oau.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/blog/wp-includes/wlwmanifest.xml"] [unique_id "apK9PSJcY4fy7tP-rU0L3wAAAmY"]
[Sat Aug 29 05:06:37.973403 2026] [security2:error] [pid 1017536:tid 1017767] [client 52.139.37.240:52628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.healthysmilestoday.com"] [uri "/browse.php"] [unique_id "apK9PSJcY4fy7tP-rU0L4gAAAnk"]
[Sat Aug 29 05:06:37.988902 2026] [security2:error] [pid 1017536:tid 1017751] [client 45.148.10.62:38786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ninaanddon.strangeworx.com"] [uri "/test.php"] [unique_id "apK9PSJcY4fy7tP-rU0L4wAAAmk"]
[Sat Aug 29 05:06:37.990035 2026] [security2:error] [pid 1017536:tid 1017613] [remote 67.223.118.10:47448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.118.223.67.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "eastsidepride.barhashing.com"] [uri "/wp-login.php"] [unique_id "apK9PSJcY4fy7tP-rU0L4AACY0w"]
[Sat Aug 29 05:06:37.995115 2026] [security2:error] [pid 1017536:tid 1017709] [client 158.23.184.117:18453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/.trash7206/index.php"] [unique_id "apK9PSJcY4fy7tP-rU0L5AAAAj8"]
[Sat Aug 29 05:06:38.008972 2026] [security2:error] [pid 1017536:tid 1017780] [client 52.139.37.240:8490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drjrae.com"] [uri "/fw.php"] [unique_id "apK9PiJcY4fy7tP-rU0L5QAAAoY"]
[Sat Aug 29 05:06:38.021329 2026] [security2:error] [pid 1018003:tid 1018227] [client 20.220.204.93:52239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/motu.php"] [unique_id "apK9PjAh5Y1i2tUxg4H8dgAABgQ"]
[Sat Aug 29 05:06:38.022327 2026] [security2:error] [pid 1018003:tid 1018192] [client 20.196.209.81:9463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/access.php"] [unique_id "apK9PjAh5Y1i2tUxg4H8dwAABeE"]
[Sat Aug 29 05:06:38.041859 2026] [security2:error] [pid 1018003:tid 1018262] [client 158.23.147.79:61579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/makeasmtp.php"] [unique_id "apK9PjAh5Y1i2tUxg4H8eAAABiY"]
[Sat Aug 29 05:06:38.046082 2026] [security2:error] [pid 1017536:tid 1017752] [client 4.205.62.107:21593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/public/vx.php"] [unique_id "apK9PiJcY4fy7tP-rU0L6wAAAmo"]
[Sat Aug 29 05:06:38.046105 2026] [security2:error] [pid 1017536:tid 1017731] [client 68.155.159.216:38559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK9PiJcY4fy7tP-rU0L6gAAAlU"]
[Sat Aug 29 05:06:38.054929 2026] [security2:error] [pid 1017536:tid 1017710] [client 20.196.209.81:11555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/GOD.php"] [unique_id "apK9PiJcY4fy7tP-rU0L7AAAAkA"]
[Sat Aug 29 05:06:38.060636 2026] [security2:error] [pid 1017536:tid 1017552] [remote 67.223.118.10:47438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.118.223.67.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "eastsidepride.barhashing.com"] [uri "/wp-login.php"] [unique_id "apK9PiJcY4fy7tP-rU0L7QACPQ8"]
[Sat Aug 29 05:06:38.062472 2026] [security2:error] [pid 1017536:tid 1017713] [client 168.107.94.195:49734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9PiJcY4fy7tP-rU0L7gAAAkM"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:38.067259 2026] [security2:error] [pid 1017536:tid 1017744] [client 20.48.250.41:25446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/cytyr.php"] [unique_id "apK9PiJcY4fy7tP-rU0L7wAAAmI"]
[Sat Aug 29 05:06:38.079000 2026] [security2:error] [pid 1017536:tid 1017674] [client 158.23.184.117:46922] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "devlop3d.airviewconcept.com"] [uri "/1.php"] [unique_id "apK9PiJcY4fy7tP-rU0L8AAAAhw"]
[Sat Aug 29 05:06:38.079107 2026] [security2:error] [pid 1017536:tid 1017674] [client 158.23.184.117:46922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/1.php"] [unique_id "apK9PiJcY4fy7tP-rU0L8AAAAhw"]
[Sat Aug 29 05:06:38.080051 2026] [security2:error] [pid 1018003:tid 1018246] [client 158.23.184.117:34713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/buy.php"] [unique_id "apK9PjAh5Y1i2tUxg4H8fgAABhY"]
[Sat Aug 29 05:06:38.091225 2026] [security2:error] [pid 1017536:tid 1017706] [client 158.158.54.35:28673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/s.php"] [unique_id "apK9PiJcY4fy7tP-rU0L8QAAAjw"]
[Sat Aug 29 05:06:38.099448 2026] [security2:error] [pid 1018003:tid 1018162] [client 20.151.200.44:64260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/gaje.php"] [unique_id "apK9PjAh5Y1i2tUxg4H8fwAABcM"]
[Sat Aug 29 05:06:38.100056 2026] [security2:error] [pid 1017536:tid 1017721] [client 52.139.37.240:30802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/sagax.php"] [unique_id "apK9PiJcY4fy7tP-rU0L8gAAAks"]
[Sat Aug 29 05:06:38.104218 2026] [security2:error] [pid 1018003:tid 1018255] [client 20.151.200.44:46635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/f-401.php"] [unique_id "apK9PjAh5Y1i2tUxg4H8gAAABh8"]
[Sat Aug 29 05:06:38.112987 2026] [security2:error] [pid 1018003:tid 1018277] [client 20.104.49.130:52519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/about.php"] [unique_id "apK9PjAh5Y1i2tUxg4H8gQAABjU"]
[Sat Aug 29 05:06:38.121216 2026] [security2:error] [pid 1017536:tid 1017717] [client 20.63.81.20:44467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/ah.php"] [unique_id "apK9PiJcY4fy7tP-rU0L9QAAAkc"]
[Sat Aug 29 05:06:38.122186 2026] [security2:error] [pid 1017536:tid 1017695] [client 185.104.184.230:52640] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.wlu.rog.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "apK9PiJcY4fy7tP-rU0L9gAAAjE"]
[Sat Aug 29 05:06:38.141413 2026] [security2:error] [pid 1018003:tid 1018183] [client 158.23.184.117:18438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/.trash7206/min.php"] [unique_id "apK9PjAh5Y1i2tUxg4H8hwAABdg"]
[Sat Aug 29 05:06:38.150459 2026] [security2:error] [pid 1018003:tid 1018184] [client 20.104.49.130:57680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/wp-login.php"] [unique_id "apK9PjAh5Y1i2tUxg4H8iAAABdk"]
[Sat Aug 29 05:06:38.150490 2026] [security2:error] [pid 1018003:tid 1018219] [client 158.23.147.79:26491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-content/themes/too.php"] [unique_id "apK9PjAh5Y1i2tUxg4H8iQAABfw"]
[Sat Aug 29 05:06:38.157264 2026] [security2:error] [pid 1018003:tid 1018156] [client 20.220.204.93:52349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/Ov-Simple1.php"] [unique_id "apK9PjAh5Y1i2tUxg4H8iwAABb0"]
[Sat Aug 29 05:06:38.166001 2026] [security2:error] [pid 1017536:tid 1017781] [client 52.139.37.240:6740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.healthysmilestoday.com"] [uri "/contentloader1.php"] [unique_id "apK9PiJcY4fy7tP-rU0L-gAAAoc"]
[Sat Aug 29 05:06:38.171313 2026] [security2:error] [pid 1017536:tid 1017713] [client 158.23.147.79:59223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK9PiJcY4fy7tP-rU0L-wAAAkM"]
[Sat Aug 29 05:06:38.198682 2026] [security2:error] [pid 1018003:tid 1018234] [client 52.139.37.240:8467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drjrae.com"] [uri "/zwso.php"] [unique_id "apK9PjAh5Y1i2tUxg4H8kAAABgo"]
[Sat Aug 29 05:06:38.202956 2026] [security2:error] [pid 1018003:tid 1018256] [client 20.52.41.200:1231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/root.php"] [unique_id "apK9PjAh5Y1i2tUxg4H8kgAABiA"]
[Sat Aug 29 05:06:38.212142 2026] [security2:error] [pid 1017536:tid 1017765] [client 20.48.250.41:25292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/galer.php"] [unique_id "apK9PiJcY4fy7tP-rU0L_gAAAnc"]
[Sat Aug 29 05:06:38.222371 2026] [security2:error] [pid 1018003:tid 1018248] [client 93.123.109.228:49832] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/server/.env"] [unique_id "apK9PjAh5Y1i2tUxg4H8lAAABhg"]
[Sat Aug 29 05:06:38.225005 2026] [security2:error] [pid 1017536:tid 1017744] [client 158.23.184.117:34745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/bless.php"] [unique_id "apK9PiJcY4fy7tP-rU0MAQAAAmI"]
[Sat Aug 29 05:06:38.225024 2026] [security2:error] [pid 1017536:tid 1017736] [client 158.23.184.117:46355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK9PiJcY4fy7tP-rU0MAgAAAlo"]
[Sat Aug 29 05:06:38.226197 2026] [security2:error] [pid 1017536:tid 1017673] [client 20.220.204.93:59025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/ws69.php"] [unique_id "apK9PiJcY4fy7tP-rU0MAwAAAhs"]
[Sat Aug 29 05:06:38.229759 2026] [security2:error] [pid 1018003:tid 1018169] [client 68.155.159.216:49217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-content/themes/too.php"] [unique_id "apK9PjAh5Y1i2tUxg4H8lQAABco"]
[Sat Aug 29 05:06:38.230804 2026] [security2:error] [pid 1017536:tid 1017691] [client 93.123.109.228:50032] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/server/api/.env"] [unique_id "apK9PiJcY4fy7tP-rU0MBAAAAi0"]
[Sat Aug 29 05:06:38.243610 2026] [security2:error] [pid 1017536:tid 1017705] [client 20.151.200.44:64350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/0xs.php"] [unique_id "apK9PiJcY4fy7tP-rU0MBQAAAjs"]
[Sat Aug 29 05:06:38.258004 2026] [security2:error] [pid 1017536:tid 1017780] [client 20.63.81.20:44498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/ws55.php"] [unique_id "apK9PiJcY4fy7tP-rU0MBwAAAoY"]
[Sat Aug 29 05:06:38.285596 2026] [security2:error] [pid 1017536:tid 1017767] [client 158.23.184.117:19202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/.well-known//index.php"] [unique_id "apK9PiJcY4fy7tP-rU0MCAAAAnk"]
[Sat Aug 29 05:06:38.289308 2026] [security2:error] [pid 1017536:tid 1017734] [client 40.83.93.50:1741] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-content/1.php"] [unique_id "apK9PiJcY4fy7tP-rU0MCQAAAlg"]
[Sat Aug 29 05:06:38.289400 2026] [security2:error] [pid 1017536:tid 1017734] [client 40.83.93.50:1741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-content/1.php"] [unique_id "apK9PiJcY4fy7tP-rU0MCQAAAlg"]
[Sat Aug 29 05:06:38.290894 2026] [security2:error] [pid 1017536:tid 1017790] [client 158.23.147.79:35806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-includes/css/index.php"] [unique_id "apK9PiJcY4fy7tP-rU0MCgAAApA"]
[Sat Aug 29 05:06:38.303111 2026] [security2:error] [pid 1017536:tid 1017675] [client 93.123.109.228:37086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/server/backend/.env"] [unique_id "apK9PiJcY4fy7tP-rU0MDQAAAh0"]
[Sat Aug 29 05:06:38.304004 2026] [security2:error] [pid 1018003:tid 1018180] [client 68.155.159.216:52860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/ws.php"] [unique_id "apK9PjAh5Y1i2tUxg4H8mAAABdU"]
[Sat Aug 29 05:06:38.308238 2026] [security2:error] [pid 1017536:tid 1017757] [client 20.151.200.44:46536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/hq.php"] [unique_id "apK9PiJcY4fy7tP-rU0MDgAAAm8"]
[Sat Aug 29 05:06:38.309346 2026] [security2:error] [pid 1018003:tid 1018224] [client 4.205.62.107:22409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/cu.php"] [unique_id "apK9PjAh5Y1i2tUxg4H8mgAABgE"]
[Sat Aug 29 05:06:38.340499 2026] [security2:error] [pid 1018003:tid 1018239] [client 20.48.250.41:25493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/baixy.php"] [unique_id "apK9PjAh5Y1i2tUxg4H8nAAABg8"]
[Sat Aug 29 05:06:38.360324 2026] [security2:error] [pid 1017536:tid 1017785] [client 4.205.62.107:21908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/koiy.php"] [unique_id "apK9PiJcY4fy7tP-rU0MEAAAAos"]
[Sat Aug 29 05:06:38.360649 2026] [security2:error] [pid 1018003:tid 1018273] [client 52.139.37.240:6748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.healthysmilestoday.com"] [uri "/upfile.php"] [unique_id "apK9PjAh5Y1i2tUxg4H8nQAABjE"]
[Sat Aug 29 05:06:38.376811 2026] [security2:error] [pid 1017536:tid 1017761] [client 4.205.62.107:26670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/g3.php"] [unique_id "apK9PiJcY4fy7tP-rU0MEgAAAnM"]
[Sat Aug 29 05:06:38.387644 2026] [security2:error] [pid 1017536:tid 1017667] [client 158.23.184.117:34504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/class-t.api.php"] [unique_id "apK9PiJcY4fy7tP-rU0MEwAAAhU"]
[Sat Aug 29 05:06:38.389460 2026] [security2:error] [pid 1017536:tid 1017673] [client 20.63.81.20:44521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/drykl.php"] [unique_id "apK9PiJcY4fy7tP-rU0MFAAAAhs"]
[Sat Aug 29 05:06:38.389903 2026] [security2:error] [pid 1017536:tid 1017753] [client 20.151.200.44:64283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/wp-admin/zwso.php"] [unique_id "apK9PiJcY4fy7tP-rU0MFQAAAms"]
[Sat Aug 29 05:06:38.395001 2026] [security2:error] [pid 1017536:tid 1017776] [client 20.220.204.93:52238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/wp-blogs.php"] [unique_id "apK9PiJcY4fy7tP-rU0MFgAAAoI"]
[Sat Aug 29 05:06:38.396108 2026] [security2:error] [pid 1017536:tid 1017696] [client 52.139.37.240:8452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drjrae.com"] [uri "/admin/function.php"] [unique_id "apK9PiJcY4fy7tP-rU0MFwAAAjI"]
[Sat Aug 29 05:06:38.406953 2026] [security2:error] [pid 1017536:tid 1017740] [client 20.220.204.93:59112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/ccs.php"] [unique_id "apK9PiJcY4fy7tP-rU0MGgAAAl4"]
[Sat Aug 29 05:06:38.415212 2026] [security2:error] [pid 1017536:tid 1017745] [client 158.23.184.117:46343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/wp-includes/admin.php"] [unique_id "apK9PiJcY4fy7tP-rU0MGwAAAmM"]
[Sat Aug 29 05:06:38.431024 2026] [security2:error] [pid 1017536:tid 1017721] [client 158.23.184.117:18490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/.well-known/about.php"] [unique_id "apK9PiJcY4fy7tP-rU0MHAAAAks"]
[Sat Aug 29 05:06:38.438076 2026] [security2:error] [pid 1017536:tid 1017737] [client 20.151.200.44:46652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/mh.php"] [unique_id "apK9PiJcY4fy7tP-rU0MHQAAAls"]
[Sat Aug 29 05:06:38.441999 2026] [security2:error] [pid 1017536:tid 1017695] [client 168.107.94.195:50045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9PiJcY4fy7tP-rU0MHgAAAjE"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:38.446604 2026] [security2:error] [pid 1017536:tid 1017709] [client 193.56.28.190:48171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 190.28.56.193.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK9PiJcY4fy7tP-rU0MGAAAAj8"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:06:38.474872 2026] [security2:error] [pid 1018003:tid 1018265] [client 20.48.250.41:25560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/ava.php"] [unique_id "apK9PjAh5Y1i2tUxg4H8oQAABik"]
[Sat Aug 29 05:06:38.476688 2026] [security2:error] [pid 1017536:tid 1017707] [client 20.151.200.44:64419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/waf.php"] [unique_id "apK9PiJcY4fy7tP-rU0MIAAAAj0"]
[Sat Aug 29 05:06:38.477388 2026] [security2:error] [pid 1017536:tid 1017706] [client 20.196.209.81:19409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/ggfi.php"] [unique_id "apK9PiJcY4fy7tP-rU0MIQAAAjw"]
[Sat Aug 29 05:06:38.504758 2026] [security2:error] [pid 1017536:tid 1017736] [client 158.23.147.79:30646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/content.php"] [unique_id "apK9PiJcY4fy7tP-rU0MJAAAAlo"]
[Sat Aug 29 05:06:38.538762 2026] [security2:error] [pid 1017536:tid 1017776] [client 68.155.159.216:33684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-admin/dropdown.php"] [unique_id "apK9PiJcY4fy7tP-rU0MJwAAAoI"]
[Sat Aug 29 05:06:38.539025 2026] [security2:error] [pid 1018003:tid 1018227] [client 158.158.54.35:14105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/test1.php"] [unique_id "apK9PjAh5Y1i2tUxg4H8pAAABgQ"]
[Sat Aug 29 05:06:38.539782 2026] [security2:error] [pid 1017536:tid 1017696] [client 20.63.81.20:44416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/backup.php"] [unique_id "apK9PiJcY4fy7tP-rU0MKAAAAjI"]
[Sat Aug 29 05:06:38.543304 2026] [security2:error] [pid 1017536:tid 1017729] [client 20.220.204.93:59060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/mar.php"] [unique_id "apK9PiJcY4fy7tP-rU0MKQAAAlM"]
[Sat Aug 29 05:06:38.546843 2026] [security2:error] [pid 1017536:tid 1017786] [client 158.23.184.117:34724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/cache.php"] [unique_id "apK9PiJcY4fy7tP-rU0MKgAAAow"]
[Sat Aug 29 05:06:38.546935 2026] [security2:error] [pid 1017536:tid 1017691] [client 158.23.147.79:25424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK9PiJcY4fy7tP-rU0MKwAAAi0"]
[Sat Aug 29 05:06:38.554069 2026] [security2:error] [pid 1017536:tid 1017781] [client 52.139.37.240:55788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.healthysmilestoday.com"] [uri "/form.php"] [unique_id "apK9PiJcY4fy7tP-rU0MLAAAAoc"]
[Sat Aug 29 05:06:38.559565 2026] [security2:error] [pid 1018003:tid 1018206] [client 68.155.159.216:18188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK9PjAh5Y1i2tUxg4H8pgAABe8"]
[Sat Aug 29 05:06:38.559894 2026] [security2:error] [pid 1017536:tid 1017667] [client 158.23.184.117:46342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/wp-themes.php"] [unique_id "apK9PiJcY4fy7tP-rU0MLgAAAhU"]
[Sat Aug 29 05:06:38.561575 2026] [security2:error] [pid 1017536:tid 1017678] [client 185.104.184.230:38184] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.xvo.oau.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/web/wp-includes/wlwmanifest.xml"] [unique_id "apK9PiJcY4fy7tP-rU0MLwAAAiA"]
[Sat Aug 29 05:06:38.572258 2026] [security2:error] [pid 1017536:tid 1017669] [client 20.197.61.180:8929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/access.php"] [unique_id "apK9PiJcY4fy7tP-rU0MMAAAAhc"]
[Sat Aug 29 05:06:38.583267 2026] [security2:error] [pid 1018003:tid 1018270] [client 20.196.209.81:4121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/classsmtps.php"] [unique_id "apK9PjAh5Y1i2tUxg4H8pwAABi4"]
[Sat Aug 29 05:06:38.584364 2026] [security2:error] [pid 1018003:tid 1018162] [client 20.151.200.44:47323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/f2r4.php"] [unique_id "apK9PjAh5Y1i2tUxg4H8qAAABcM"]
[Sat Aug 29 05:06:38.587672 2026] [security2:error] [pid 1018003:tid 1018244] [client 52.139.37.240:8603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drjrae.com"] [uri "/zoom1.php"] [unique_id "apK9PjAh5Y1i2tUxg4H8qQAABhQ"]
[Sat Aug 29 05:06:38.592878 2026] [security2:error] [pid 1017536:tid 1017695] [client 20.151.200.44:64282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/Contrller.php"] [unique_id "apK9PiJcY4fy7tP-rU0MMwAAAjE"]
[Sat Aug 29 05:06:38.607931 2026] [security2:error] [pid 1017536:tid 1017704] [client 213.202.253.4:61112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bv-place.com"] [uri "/txets.php"] [unique_id "apK9PiJcY4fy7tP-rU0MNwAAAjo"], referer: www.google.com
[Sat Aug 29 05:06:38.612911 2026] [security2:error] [pid 1018003:tid 1018160] [client 93.123.109.228:49744] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/services/.env"] [unique_id "apK9PjAh5Y1i2tUxg4H8qgAABcE"]
[Sat Aug 29 05:06:38.614438 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.48.250.41:25493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/gdn.php"] [unique_id "apK9PiJcY4fy7tP-rU0MOAAAAlY"]
[Sat Aug 29 05:06:38.631681 2026] [security2:error] [pid 1017536:tid 1017770] [client 20.220.204.93:52243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/mini.php"] [unique_id "apK9PiJcY4fy7tP-rU0MOgAAAnw"]
[Sat Aug 29 05:06:38.650976 2026] [security2:error] [pid 1017536:tid 1017673] [client 20.151.200.44:65004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/bnnof6.php"] [unique_id "apK9PiJcY4fy7tP-rU0MOwAAAhs"]
[Sat Aug 29 05:06:38.653106 2026] [security2:error] [pid 1017536:tid 1017744] [client 20.52.41.200:1250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/p.php"] [unique_id "apK9PiJcY4fy7tP-rU0MPAAAAmI"]
[Sat Aug 29 05:06:38.664026 2026] [security2:error] [pid 1017536:tid 1017793] [client 158.23.184.117:18478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK9PiJcY4fy7tP-rU0MPQAAApM"]
[Sat Aug 29 05:06:38.674873 2026] [security2:error] [pid 1017536:tid 1017776] [client 93.123.109.228:37086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/service/.env"] [unique_id "apK9PiJcY4fy7tP-rU0MPwAAAoI"]
[Sat Aug 29 05:06:38.680759 2026] [security2:error] [pid 1017536:tid 1017696] [client 20.220.204.93:52227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/ccu.php"] [unique_id "apK9PiJcY4fy7tP-rU0MQAAAAjI"]
[Sat Aug 29 05:06:38.689716 2026] [security2:error] [pid 1017536:tid 1017778] [client 158.23.184.117:34541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/content.php"] [unique_id "apK9PiJcY4fy7tP-rU0MQQAAAoQ"]
[Sat Aug 29 05:06:38.701156 2026] [security2:error] [pid 1018003:tid 1018207] [client 20.63.81.20:44436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/indo.php"] [unique_id "apK9PjAh5Y1i2tUxg4H8rQAABfA"]
[Sat Aug 29 05:06:38.704250 2026] [security2:error] [pid 1018003:tid 1018200] [client 158.23.184.117:46958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/adminfuns.php/.well-known/acme-challenge/file.php"] [unique_id "apK9PjAh5Y1i2tUxg4H8rgAABek"]
[Sat Aug 29 05:06:38.739744 2026] [security2:error] [pid 1017536:tid 1017788] [client 20.151.200.44:47345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/sadis.php"] [unique_id "apK9PiJcY4fy7tP-rU0MRgAAAo4"]
[Sat Aug 29 05:06:38.746597 2026] [security2:error] [pid 1017536:tid 1017717] [client 158.23.147.79:30652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-admin/css/index.php"] [unique_id "apK9PiJcY4fy7tP-rU0MSAAAAkc"]
[Sat Aug 29 05:06:38.749808 2026] [security2:error] [pid 1017536:tid 1017695] [client 158.23.147.79:32744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK9PiJcY4fy7tP-rU0MSgAAAjE"]
[Sat Aug 29 05:06:38.749955 2026] [security2:error] [pid 1018003:tid 1018153] [client 52.139.37.240:52637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.healthysmilestoday.com"] [uri "/wp-sigunq.php"] [unique_id "apK9PjAh5Y1i2tUxg4H8tAAABbo"]
[Sat Aug 29 05:06:38.764330 2026] [security2:error] [pid 1018003:tid 1018156] [client 68.155.159.216:14237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK9PjAh5Y1i2tUxg4H8tQAABb0"]
[Sat Aug 29 05:06:38.768670 2026] [security2:error] [pid 1017536:tid 1017751] [client 40.83.93.50:23946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-content/about.php"] [unique_id "apK9PiJcY4fy7tP-rU0MSwAAAmk"]
[Sat Aug 29 05:06:38.773967 2026] [security2:error] [pid 1018003:tid 1018198] [client 20.48.250.41:25461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/f2.php"] [unique_id "apK9PjAh5Y1i2tUxg4H8tgAABec"]
[Sat Aug 29 05:06:38.774023 2026] [security2:error] [pid 1017536:tid 1017781] [client 52.139.37.240:8459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drjrae.com"] [uri "/about.php7"] [unique_id "apK9PiJcY4fy7tP-rU0MTAAAAoc"]
[Sat Aug 29 05:06:38.792874 2026] [security2:error] [pid 1017536:tid 1017704] [client 158.23.147.79:50081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9PiJcY4fy7tP-rU0MTQAAAjo"]
[Sat Aug 29 05:06:38.803662 2026] [security2:error] [pid 1017536:tid 1017674] [client 4.205.62.107:9006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/api.php"] [unique_id "apK9PiJcY4fy7tP-rU0MTgAAAhw"]
[Sat Aug 29 05:06:38.805986 2026] [security2:error] [pid 1018003:tid 1018155] [client 93.123.109.228:37160] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/shared/.env"] [unique_id "apK9PjAh5Y1i2tUxg4H8uQAABbw"]
[Sat Aug 29 05:06:38.806937 2026] [security2:error] [pid 1018003:tid 1018245] [client 158.23.184.117:18486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/.well-known/acme-challenge/content.php"] [unique_id "apK9PjAh5Y1i2tUxg4H8ugAABhU"]
[Sat Aug 29 05:06:38.813559 2026] [security2:error] [pid 1017536:tid 1017765] [client 4.205.62.107:56053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/groceries/index.php"] [unique_id "apK9PiJcY4fy7tP-rU0MTwAAAnc"]
[Sat Aug 29 05:06:38.817547 2026] [security2:error] [pid 1017536:tid 1017712] [client 20.220.204.93:52343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/ak.php"] [unique_id "apK9PiJcY4fy7tP-rU0MUAAAAkI"]
[Sat Aug 29 05:06:38.818758 2026] [security2:error] [pid 1017536:tid 1017785] [client 68.155.159.216:51583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-admin/network/index.php"] [unique_id "apK9PiJcY4fy7tP-rU0MUQAAAos"]
[Sat Aug 29 05:06:38.824966 2026] [security2:error] [pid 1018003:tid 1018258] [client 168.107.94.195:50396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9PjAh5Y1i2tUxg4H8uwAABiI"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:38.831288 2026] [security2:error] [pid 1018003:tid 1018203] [client 93.123.109.228:37156] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/shop/.env"] [unique_id "apK9PjAh5Y1i2tUxg4H8vAAABew"]
[Sat Aug 29 05:06:38.837548 2026] [security2:error] [pid 1017536:tid 1017744] [client 20.63.81.20:46894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/sign.php"] [unique_id "apK9PiJcY4fy7tP-rU0MUgAAAmI"]
[Sat Aug 29 05:06:38.840995 2026] [security2:error] [pid 1018003:tid 1018240] [client 158.23.184.117:34555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/classwithtostring.php"] [unique_id "apK9PjAh5Y1i2tUxg4H8vQAABhA"]
[Sat Aug 29 05:06:38.853961 2026] [security2:error] [pid 1018003:tid 1018164] [client 20.151.200.44:64392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/ah24.php"] [unique_id "apK9PjAh5Y1i2tUxg4H8vgAABcU"]
[Sat Aug 29 05:06:38.854847 2026] [security2:error] [pid 1017536:tid 1017793] [client 20.220.204.93:52225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/amp.php"] [unique_id "apK9PiJcY4fy7tP-rU0MVAAAApM"]
[Sat Aug 29 05:06:38.865175 2026] [security2:error] [pid 1017536:tid 1017696] [client 68.155.159.216:65112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK9PiJcY4fy7tP-rU0MVgAAAjI"]
[Sat Aug 29 05:06:38.871046 2026] [security2:error] [pid 1017536:tid 1017721] [client 20.196.209.81:3852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/alfa-rex.php"] [unique_id "apK9PiJcY4fy7tP-rU0MVwAAAks"]
[Sat Aug 29 05:06:38.880862 2026] [security2:error] [pid 1017536:tid 1017740] [client 45.148.10.62:38798] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "ninaanddon.strangeworx.com"] [uri "/.env.backup"] [unique_id "apK9PiJcY4fy7tP-rU0MWAAAAl4"]
[Sat Aug 29 05:06:38.898665 2026] [security2:error] [pid 1017536:tid 1017792] [client 158.23.147.79:24386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK9PiJcY4fy7tP-rU0MWQAAApI"]
[Sat Aug 29 05:06:38.902424 2026] [security2:error] [pid 1017536:tid 1017745] [client 158.23.184.117:46339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "apK9PiJcY4fy7tP-rU0MWgAAAmM"]
[Sat Aug 29 05:06:38.914643 2026] [security2:error] [pid 1017536:tid 1017737] [client 20.48.250.41:25586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/grsiuk.php"] [unique_id "apK9PiJcY4fy7tP-rU0MWwAAAls"]
[Sat Aug 29 05:06:38.916835 2026] [security2:error] [pid 1017536:tid 1017752] [client 20.151.200.44:47408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/xcre1.php"] [unique_id "apK9PiJcY4fy7tP-rU0MXAAAAmo"]
[Sat Aug 29 05:06:38.924798 2026] [security2:error] [pid 1018003:tid 1018065] [remote 34.75.89.130:51736] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "freejohnstuart.com"] [uri "/production/.env"] [unique_id "apK9PjAh5Y1i2tUxg4H8wQAF3Sw"]
[Sat Aug 29 05:06:38.939689 2026] [security2:error] [pid 1017536:tid 1017748] [client 52.139.37.240:55790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.healthysmilestoday.com"] [uri "/07.php"] [unique_id "apK9PiJcY4fy7tP-rU0MXgAAAmY"]
[Sat Aug 29 05:06:38.949526 2026] [security2:error] [pid 1017536:tid 1017751] [client 20.220.204.93:52297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/lib.php"] [unique_id "apK9PiJcY4fy7tP-rU0MXwAAAmk"]
[Sat Aug 29 05:06:38.952679 2026] [security2:error] [pid 1017536:tid 1017757] [client 158.23.147.79:17417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK9PiJcY4fy7tP-rU0MYAAAAm8"]
[Sat Aug 29 05:06:38.970175 2026] [security2:error] [pid 1017536:tid 1017678] [client 52.139.37.240:8638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drjrae.com"] [uri "/cron.php"] [unique_id "apK9PiJcY4fy7tP-rU0MYgAAAiA"]
[Sat Aug 29 05:06:38.971047 2026] [security2:error] [pid 1017536:tid 1017736] [client 158.158.54.35:4902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/ws.php"] [unique_id "apK9PiJcY4fy7tP-rU0MYwAAAlo"]
[Sat Aug 29 05:06:38.972202 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.63.81.20:46942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/wnnjpsby.php"] [unique_id "apK9PiJcY4fy7tP-rU0MZAAAAlY"]
[Sat Aug 29 05:06:38.972556 2026] [security2:error] [pid 1018003:tid 1018097] [remote 34.75.89.130:51736] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "freejohnstuart.com"] [uri "/server/.env"] [unique_id "apK9PjAh5Y1i2tUxg4H8wwAGIEw"]
[Sat Aug 29 05:06:38.973867 2026] [security2:error] [pid 1018003:tid 1018063] [remote 34.75.89.130:51736] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "freejohnstuart.com"] [uri "/frontend/.env"] [unique_id "apK9PjAh5Y1i2tUxg4H8xgAGICo"]
[Sat Aug 29 05:06:38.973874 2026] [security2:error] [pid 1018003:tid 1018079] [remote 34.75.89.130:51736] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "freejohnstuart.com"] [uri "/src/.env"] [unique_id "apK9PjAh5Y1i2tUxg4H8xAAGIDo"]
[Sat Aug 29 05:06:38.973886 2026] [security2:error] [pid 1018003:tid 1018096] [remote 34.75.89.130:51736] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "freejohnstuart.com"] [uri "/app/.env"] [unique_id "apK9PjAh5Y1i2tUxg4H8xwAGIEs"]
[Sat Aug 29 05:06:38.973976 2026] [security2:error] [pid 1018003:tid 1018081] [remote 34.75.89.130:51736] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "freejohnstuart.com"] [uri "/dev/.env"] [unique_id "apK9PjAh5Y1i2tUxg4H8xQAGIDw"]
[Sat Aug 29 05:06:38.987868 2026] [security2:error] [pid 1018003:tid 1018233] [client 158.23.184.117:34691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/css.php"] [unique_id "apK9PjAh5Y1i2tUxg4H8yAAABgk"]
[Sat Aug 29 05:06:38.988475 2026] [security2:error] [pid 1017536:tid 1017776] [client 20.196.209.81:17894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/contentloader1.php"] [unique_id "apK9PiJcY4fy7tP-rU0MaAAAAoI"]
[Sat Aug 29 05:06:38.996936 2026] [core:error] [pid 1018003:tid 1018174] [client 20.197.61.180:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:38.996952 2026] [core:error] [pid 1018003:tid 1018174] [client 20.197.61.180:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:39.002543 2026] [security2:error] [pid 1017536:tid 1017712] [client 20.220.204.93:52322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/cc13.php"] [unique_id "apK9PyJcY4fy7tP-rU0MaQAAAkI"]
[Sat Aug 29 05:06:39.026267 2026] [security2:error] [pid 1018003:tid 1018252] [client 158.23.184.117:18450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK9PzAh5Y1i2tUxg4H8ygAABhw"]
[Sat Aug 29 05:06:39.046639 2026] [security2:error] [pid 1018003:tid 1018250] [client 158.23.184.117:62326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "devlop3d.airviewconcept.com"] [uri "/11.php"] [unique_id "apK9PzAh5Y1i2tUxg4H8ywAABho"]
[Sat Aug 29 05:06:39.054132 2026] [security2:error] [pid 1017536:tid 1017770] [client 195.63.31.115:46163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 115.31.63.195.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK9PyJcY4fy7tP-rU0MagAAAnw"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:06:39.061096 2026] [security2:error] [pid 1017536:tid 1017778] [client 136.107.231.130:29072] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "alanmossman.mossmanphoto.com"] [uri "/cgi-sys/404.html"] [unique_id "apK9PyJcY4fy7tP-rU0McAAAAoQ"]
[Sat Aug 29 05:06:39.063210 2026] [security2:error] [pid 1017536:tid 1017729] [client 136.107.231.130:29206] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/.ssh/id_rsa"] [unique_id "apK9PyJcY4fy7tP-rU0McwAAAlM"]
[Sat Aug 29 05:06:39.066770 2026] [security2:error] [pid 1017536:tid 1017721] [client 20.48.250.41:25513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/wp-scr1pts.php"] [unique_id "apK9PyJcY4fy7tP-rU0MdwAAAks"]
[Sat Aug 29 05:06:39.069325 2026] [security2:error] [pid 1018003:tid 1018152] [client 20.151.200.44:45908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/motu.php"] [unique_id "apK9PzAh5Y1i2tUxg4H82AAABbk"]
[Sat Aug 29 05:06:39.070106 2026] [security2:error] [pid 1018003:tid 1018212] [client 136.107.231.130:29220] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/.ssh/id_dsa"] [unique_id "apK9PzAh5Y1i2tUxg4H81wAABfU"]
[Sat Aug 29 05:06:39.089533 2026] [security2:error] [pid 1018003:tid 1018276] [client 20.220.204.93:52315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/wp-style.php"] [unique_id "apK9PzAh5Y1i2tUxg4H82QAABjQ"]
[Sat Aug 29 05:06:39.093913 2026] [security2:error] [pid 1018003:tid 1018206] [client 93.123.109.228:37156] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/src/.env"] [unique_id "apK9PzAh5Y1i2tUxg4H82wAABe8"]
[Sat Aug 29 05:06:39.096378 2026] [security2:error] [pid 1017536:tid 1017743] [client 20.52.41.200:1270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/a1.php"] [unique_id "apK9PyJcY4fy7tP-rU0MgAAAAmE"]
[Sat Aug 29 05:06:39.098493 2026] [security2:error] [pid 1017536:tid 1017781] [client 20.151.200.44:64232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/Zeiss.php"] [unique_id "apK9PyJcY4fy7tP-rU0MgQAAAoc"]
[Sat Aug 29 05:06:39.107404 2026] [security2:error] [pid 1018003:tid 1018090] [remote 34.75.89.130:51736] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "freejohnstuart.com"] [uri "/staging/.env"] [unique_id "apK9PzAh5Y1i2tUxg4H83AAGFEU"]
[Sat Aug 29 05:06:39.107470 2026] [security2:error] [pid 1018003:tid 1018074] [remote 34.75.89.130:51736] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "freejohnstuart.com"] [uri "/v1/.env"] [unique_id "apK9PzAh5Y1i2tUxg4H83QAGFDU"]
[Sat Aug 29 05:06:39.109318 2026] [security2:error] [pid 1018003:tid 1018059] [remote 34.75.89.130:51736] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "freejohnstuart.com"] [uri "/v2/.env"] [unique_id "apK9PzAh5Y1i2tUxg4H84AAGFCY"]
[Sat Aug 29 05:06:39.109450 2026] [security2:error] [pid 1018003:tid 1018095] [remote 34.75.89.130:51736] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "freejohnstuart.com"] [uri "/docker/.env"] [unique_id "apK9PzAh5Y1i2tUxg4H83wAGFEo"]
[Sat Aug 29 05:06:39.109450 2026] [security2:error] [pid 1018003:tid 1018091] [remote 34.75.89.130:51736] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "freejohnstuart.com"] [uri "/apps/.env"] [unique_id "apK9PzAh5Y1i2tUxg4H83gAGFEY"]
[Sat Aug 29 05:06:39.109830 2026] [security2:error] [pid 1018003:tid 1018104] [remote 34.75.89.130:51736] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "freejohnstuart.com"] [uri "/old/.env"] [unique_id "apK9PzAh5Y1i2tUxg4H84QAGFFM"]
[Sat Aug 29 05:06:39.128731 2026] [security2:error] [pid 1018003:tid 1018267] [client 20.63.81.20:44513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/gigi.php"] [unique_id "apK9PzAh5Y1i2tUxg4H84gAABis"]
[Sat Aug 29 05:06:39.132797 2026] [security2:error] [pid 1018003:tid 1018216] [client 158.23.184.117:34535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/chosen.php"] [unique_id "apK9PzAh5Y1i2tUxg4H84wAABfk"]
[Sat Aug 29 05:06:39.160314 2026] [security2:error] [pid 1018003:tid 1018225] [client 20.220.204.93:52233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/aa.php"] [unique_id "apK9PzAh5Y1i2tUxg4H85gAABgI"]
[Sat Aug 29 05:06:39.163803 2026] [security2:error] [pid 1017536:tid 1017786] [client 185.104.184.230:36220] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.xvo.oau.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "apK9PyJcY4fy7tP-rU0MhgAAAow"]
[Sat Aug 29 05:06:39.164930 2026] [security2:error] [pid 1018003:tid 1018162] [client 52.139.37.240:52633] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "cpcalendars.healthysmilestoday.com"] [uri "/c99.php"] [unique_id "apK9PzAh5Y1i2tUxg4H85wAABcM"]
[Sat Aug 29 05:06:39.170902 2026] [security2:error] [pid 1017536:tid 1017732] [client 158.23.184.117:19241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/.well-known/acme-challenge/sx.php"] [unique_id "apK9PyJcY4fy7tP-rU0MhwAAAlY"]
[Sat Aug 29 05:06:39.174880 2026] [security2:error] [pid 1017536:tid 1017757] [client 52.139.37.240:8505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drjrae.com"] [uri "/wp-2019.php"] [unique_id "apK9PyJcY4fy7tP-rU0MiAAAAm8"]
[Sat Aug 29 05:06:39.189256 2026] [security2:error] [pid 1017536:tid 1017711] [client 158.23.147.79:61611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK9PyJcY4fy7tP-rU0MiQAAAkE"]
[Sat Aug 29 05:06:39.197144 2026] [security2:error] [pid 1018003:tid 1018153] [client 20.48.250.41:25347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/num.php"] [unique_id "apK9PzAh5Y1i2tUxg4H86gAABbo"]
[Sat Aug 29 05:06:39.204341 2026] [security2:error] [pid 1017536:tid 1017765] [client 168.107.94.195:50752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9PyJcY4fy7tP-rU0MigAAAnc"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:39.205896 2026] [security2:error] [pid 1017536:tid 1017765] [client 4.205.62.107:22358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/log.php"] [unique_id "apK9PyJcY4fy7tP-rU0MjAAAAnc"]
[Sat Aug 29 05:06:39.230805 2026] [security2:error] [pid 1017536:tid 1017752] [client 20.220.204.93:59119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/browse.php"] [unique_id "apK9PyJcY4fy7tP-rU0MjwAAAmo"]
[Sat Aug 29 05:06:39.248083 2026] [fcgid:warn] [pid 1018003:tid 1018198] (70014)End of file found: [client 199.45.155.15:56200] mod_fcgid: can't get data from http client
[Sat Aug 29 05:06:39.258142 2026] [proxy_http:error] [pid 1018003:tid 1018159] (20014)Internal error (specific information not available): [client 35.228.2.165:40490] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:39.258156 2026] [proxy:error] [pid 1018003:tid 1018159] [client 35.228.2.165:40490] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/.git/config
[Sat Aug 29 05:06:39.261562 2026] [security2:error] [pid 1017536:tid 1017729] [client 158.23.147.79:26566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/radio.php"] [unique_id "apK9PyJcY4fy7tP-rU0MkQAAAlM"]
[Sat Aug 29 05:06:39.263700 2026] [proxy_http:error] [pid 1018003:tid 1018265] (20014)Internal error (specific information not available): [client 35.228.2.165:40496] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:39.263713 2026] [proxy:error] [pid 1018003:tid 1018265] [client 35.228.2.165:40496] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/public/.git/config
[Sat Aug 29 05:06:39.269319 2026] [proxy_http:error] [pid 1018003:tid 1018163] (20014)Internal error (specific information not available): [client 35.228.2.165:40548] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:39.269333 2026] [proxy:error] [pid 1018003:tid 1018163] [client 35.228.2.165:40548] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/src/.git/config
[Sat Aug 29 05:06:39.272089 2026] [security2:error] [pid 1017536:tid 1017751] [client 40.83.93.50:1604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-content/admin-header.php"] [unique_id "apK9PyJcY4fy7tP-rU0MkwAAAmk"]
[Sat Aug 29 05:06:39.273214 2026] [security2:error] [pid 1017536:tid 1017705] [client 20.63.81.20:46884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/info.php/new.php"] [unique_id "apK9PyJcY4fy7tP-rU0MlAAAAjs"]
[Sat Aug 29 05:06:39.274461 2026] [security2:error] [pid 1017536:tid 1017698] [client 45.148.10.62:38798] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "ninaanddon.strangeworx.com"] [uri "/.env.old"] [unique_id "apK9PyJcY4fy7tP-rU0MkgAAAjQ"]
[Sat Aug 29 05:06:39.274477 2026] [security2:error] [pid 1018003:tid 1018155] [client 20.151.200.44:64993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/ztv.php"] [unique_id "apK9PzAh5Y1i2tUxg4H89QAABbw"]
[Sat Aug 29 05:06:39.278098 2026] [security2:error] [pid 1017536:tid 1017695] [client 158.23.184.117:34538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/doc.php"] [unique_id "apK9PyJcY4fy7tP-rU0MlQAAAjE"]
[Sat Aug 29 05:06:39.278201 2026] [security2:error] [pid 1018003:tid 1018245] [client 158.23.147.79:63025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK9PzAh5Y1i2tUxg4H89gAABhU"]
[Sat Aug 29 05:06:39.279794 2026] [security2:error] [pid 1018003:tid 1018112] [remote 34.75.89.130:51736] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "freejohnstuart.com"] [uri "/portal/.env"] [unique_id "apK9PzAh5Y1i2tUxg4H89wAGM1s"]
[Sat Aug 29 05:06:39.304344 2026] [security2:error] [pid 1018003:tid 1018066] [remote 34.75.89.130:51736] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "freejohnstuart.com"] [uri "/.docker/.env"] [unique_id "apK9PzAh5Y1i2tUxg4H8-AAGIi0"]
[Sat Aug 29 05:06:39.305107 2026] [security2:error] [pid 1018003:tid 1018086] [remote 34.75.89.130:51736] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "freejohnstuart.com"] [uri "/env.old"] [unique_id "apK9PzAh5Y1i2tUxg4H8-QAGIkE"]
[Sat Aug 29 05:06:39.307021 2026] [security2:error] [pid 1018003:tid 1018105] [remote 34.75.89.130:51736] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "freejohnstuart.com"] [uri "/site/.env"] [unique_id "apK9PzAh5Y1i2tUxg4H8_AAF7FQ"]
[Sat Aug 29 05:06:39.307525 2026] [security2:error] [pid 1018003:tid 1018045] [remote 34.75.89.130:51736] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "freejohnstuart.com"] [uri "/env.bak"] [unique_id "apK9PzAh5Y1i2tUxg4H8-wAF7Bg"]
[Sat Aug 29 05:06:39.307627 2026] [security2:error] [pid 1018003:tid 1018101] [remote 34.75.89.130:51736] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "freejohnstuart.com"] [uri "/api/.env.bak"] [unique_id "apK9PzAh5Y1i2tUxg4H8-gAF7FA"]
[Sat Aug 29 05:06:39.323620 2026] [security2:error] [pid 1017536:tid 1017788] [client 20.48.250.41:25523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/a4.php"] [unique_id "apK9PyJcY4fy7tP-rU0MlgAAAo4"]
[Sat Aug 29 05:06:39.329029 2026] [proxy_http:error] [pid 1018003:tid 1018196] (20014)Internal error (specific information not available): [client 35.228.2.165:40574] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:39.329041 2026] [proxy:error] [pid 1018003:tid 1018196] [client 35.228.2.165:40574] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/var/www/.git/config
[Sat Aug 29 05:06:39.329343 2026] [security2:error] [pid 1018003:tid 1018246] [client 20.197.61.180:8902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/classsmtps.php"] [unique_id "apK9PzAh5Y1i2tUxg4H9AAAABhY"]
[Sat Aug 29 05:06:39.350683 2026] [security2:error] [pid 1017536:tid 1017743] [client 68.155.159.216:49211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/radio.php"] [unique_id "apK9PyJcY4fy7tP-rU0MlwAAAmE"]
[Sat Aug 29 05:06:39.352052 2026] [security2:error] [pid 1017536:tid 1017781] [client 20.220.204.93:52318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/s1.php"] [unique_id "apK9PyJcY4fy7tP-rU0MmAAAAoc"]
[Sat Aug 29 05:06:39.356301 2026] [security2:error] [pid 1018003:tid 1018189] [client 52.139.37.240:52617] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "cpcalendars.healthysmilestoday.com"] [uri "/c99.php"] [unique_id "apK9PzAh5Y1i2tUxg4H9AgAABd4"]
[Sat Aug 29 05:06:39.371177 2026] [security2:error] [pid 1018003:tid 1018266] [client 20.196.209.81:3948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/cookie.php"] [unique_id "apK9PzAh5Y1i2tUxg4H9BAAABio"]
[Sat Aug 29 05:06:39.373810 2026] [security2:error] [pid 1018003:tid 1018217] [client 20.220.204.93:59110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/zoo.php"] [unique_id "apK9PzAh5Y1i2tUxg4H9BQAABfo"]
[Sat Aug 29 05:06:39.383641 2026] [security2:error] [pid 1017536:tid 1017723] [client 52.139.37.240:8625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drjrae.com"] [uri "/gecko-new.php"] [unique_id "apK9PyJcY4fy7tP-rU0MmwAAAk0"]
[Sat Aug 29 05:06:39.385901 2026] [security2:error] [pid 1017536:tid 1017687] [client 52.139.37.240:33573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superresources.com"] [uri "/aged.php"] [unique_id "apK9PyJcY4fy7tP-rU0MnAAAAik"]
[Sat Aug 29 05:06:39.390111 2026] [security2:error] [pid 1017536:tid 1017780] [client 52.139.37.240:52206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/ahax.php"] [unique_id "apK9PyJcY4fy7tP-rU0MnQAAAoY"]
[Sat Aug 29 05:06:39.398033 2026] [security2:error] [pid 1017536:tid 1017778] [client 20.196.209.81:4138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/al.php"] [unique_id "apK9PyJcY4fy7tP-rU0MnwAAAoQ"]
[Sat Aug 29 05:06:39.411186 2026] [security2:error] [pid 1018003:tid 1018185] [client 93.123.109.228:37160] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/srv/.env"] [unique_id "apK9PzAh5Y1i2tUxg4H9BgAABdo"]
[Sat Aug 29 05:06:39.412332 2026] [security2:error] [pid 1017536:tid 1017691] [client 158.158.54.35:20648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-themes.php"] [unique_id "apK9PyJcY4fy7tP-rU0MoAAAAi0"]
[Sat Aug 29 05:06:39.413860 2026] [security2:error] [pid 1017536:tid 1017751] [client 158.23.147.79:35746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK9PyJcY4fy7tP-rU0MoQAAAmk"]
[Sat Aug 29 05:06:39.421222 2026] [security2:error] [pid 1017536:tid 1017698] [client 93.123.109.228:50032] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/staging/.env"] [unique_id "apK9PyJcY4fy7tP-rU0MowAAAjQ"]
[Sat Aug 29 05:06:39.452632 2026] [security2:error] [pid 1017536:tid 1017788] [client 4.205.62.107:22385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/ok.php"] [unique_id "apK9PyJcY4fy7tP-rU0MpQAAAo4"]
[Sat Aug 29 05:06:39.455542 2026] [security2:error] [pid 1017536:tid 1017709] [client 68.155.159.216:52768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-includes/css/index.php"] [unique_id "apK9PyJcY4fy7tP-rU0MpgAAAj8"]
[Sat Aug 29 05:06:39.461690 2026] [security2:error] [pid 1017536:tid 1017678] [client 20.151.200.44:47415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/wefile.php"] [unique_id "apK9PyJcY4fy7tP-rU0MqAAAAiA"]
[Sat Aug 29 05:06:39.462098 2026] [security2:error] [pid 1017536:tid 1017736] [client 20.48.250.41:25460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/tfm.php"] [unique_id "apK9PyJcY4fy7tP-rU0MqQAAAlo"]
[Sat Aug 29 05:06:39.463868 2026] [core:error] [pid 1017536:tid 1017743] [client 45.148.10.62:38798] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:39.463884 2026] [core:error] [pid 1017536:tid 1017743] [client 45.148.10.62:38798] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:39.480797 2026] [security2:error] [pid 1017536:tid 1017706] [client 20.151.200.44:64978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/kure.php"] [unique_id "apK9PyJcY4fy7tP-rU0MqgAAAjw"]
[Sat Aug 29 05:06:39.500541 2026] [security2:error] [pid 1017536:tid 1017786] [client 20.63.81.20:46940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/w.php"] [unique_id "apK9PyJcY4fy7tP-rU0MqwAAAow"]
[Sat Aug 29 05:06:39.501910 2026] [security2:error] [pid 1018003:tid 1018194] [client 68.155.159.216:51495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/themes.php"] [unique_id "apK9PzAh5Y1i2tUxg4H9CQAABeM"]
[Sat Aug 29 05:06:39.514298 2026] [security2:error] [pid 1018003:tid 1018179] [client 20.220.204.93:50776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/elp.php"] [unique_id "apK9PzAh5Y1i2tUxg4H9CwAABdQ"]
[Sat Aug 29 05:06:39.514332 2026] [security2:error] [pid 1018003:tid 1018157] [client 4.205.62.107:65439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/wp-konfig.php"] [unique_id "apK9PzAh5Y1i2tUxg4H9DAAABb4"]
[Sat Aug 29 05:06:39.515205 2026] [security2:error] [pid 1018003:tid 1018157] [client 4.205.62.107:22232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/test1.php"] [unique_id "apK9PzAh5Y1i2tUxg4H9DQAABb4"]
[Sat Aug 29 05:06:39.544059 2026] [security2:error] [pid 1018003:tid 1018276] [client 20.220.204.93:59116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/0byte.php"] [unique_id "apK9PzAh5Y1i2tUxg4H9EgAABjQ"]
[Sat Aug 29 05:06:39.546829 2026] [security2:error] [pid 1018003:tid 1018250] [client 52.139.37.240:6743] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "cpcalendars.healthysmilestoday.com"] [uri "/c99.php"] [unique_id "apK9PzAh5Y1i2tUxg4H9FAAABho"]
[Sat Aug 29 05:06:39.567778 2026] [security2:error] [pid 1017536:tid 1017778] [client 20.151.200.44:64211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/ww2.php"] [unique_id "apK9PyJcY4fy7tP-rU0MrAAAAoQ"]
[Sat Aug 29 05:06:39.569688 2026] [security2:error] [pid 1017536:tid 1017705] [client 20.52.41.200:1187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9PyJcY4fy7tP-rU0MrQAAAjs"]
[Sat Aug 29 05:06:39.581813 2026] [security2:error] [pid 1018003:tid 1018182] [client 52.139.37.240:33561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superresources.com"] [uri "/essexec.php"] [unique_id "apK9PzAh5Y1i2tUxg4H9FwAABdc"]
[Sat Aug 29 05:06:39.583412 2026] [security2:error] [pid 1018003:tid 1018179] [client 52.139.37.240:8582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drjrae.com"] [uri "/add_actualites.php"] [unique_id "apK9PzAh5Y1i2tUxg4H9GAAABdQ"]
[Sat Aug 29 05:06:39.584399 2026] [security2:error] [pid 1018003:tid 1018261] [client 168.107.94.195:51129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9PzAh5Y1i2tUxg4H9GQAABiU"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:39.600753 2026] [security2:error] [pid 1018003:tid 1018212] [client 52.139.37.240:51745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/breads1.php"] [unique_id "apK9PzAh5Y1i2tUxg4H9HAAABfU"]
[Sat Aug 29 05:06:39.601214 2026] [security2:error] [pid 1018003:tid 1018162] [client 93.123.109.228:37160] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/stg/.env"] [unique_id "apK9PzAh5Y1i2tUxg4H9GwAABcM"]
[Sat Aug 29 05:06:39.611905 2026] [security2:error] [pid 1017536:tid 1017770] [client 20.48.250.41:25370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/Geforce.php"] [unique_id "apK9PyJcY4fy7tP-rU0MswAAAnw"]
[Sat Aug 29 05:06:39.621192 2026] [proxy_http:error] [pid 1017536:tid 1017696] (20014)Internal error (specific information not available): [client 35.228.2.165:60050] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:39.621209 2026] [proxy:error] [pid 1017536:tid 1017696] [client 35.228.2.165:60050] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/.git/config
[Sat Aug 29 05:06:39.627834 2026] [security2:error] [pid 1017536:tid 1017717] [client 20.63.81.20:46897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/x.php"] [unique_id "apK9PyJcY4fy7tP-rU0MtwAAAkc"]
[Sat Aug 29 05:06:39.629644 2026] [proxy_http:error] [pid 1018003:tid 1018156] (20014)Internal error (specific information not available): [client 35.228.2.165:60080] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:39.629661 2026] [proxy:error] [pid 1018003:tid 1018156] [client 35.228.2.165:60080] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/src/.git/config
[Sat Aug 29 05:06:39.633271 2026] [security2:error] [pid 1017536:tid 1017691] [client 93.123.109.228:49966] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/stage/.env"] [unique_id "apK9PyJcY4fy7tP-rU0MuQAAAi0"]
[Sat Aug 29 05:06:39.634914 2026] [security2:error] [pid 1018003:tid 1018198] [client 158.23.147.79:30583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK9PzAh5Y1i2tUxg4H9IQAABec"]
[Sat Aug 29 05:06:39.642062 2026] [security2:error] [pid 1017536:tid 1017698] [client 68.155.159.216:33769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/login.php"] [unique_id "apK9PyJcY4fy7tP-rU0MuwAAAjQ"]
[Sat Aug 29 05:06:39.645642 2026] [security2:error] [pid 1017536:tid 1017761] [client 68.155.159.216:50187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-admin/network/index.php"] [unique_id "apK9PyJcY4fy7tP-rU0MvAAAAnM"]
[Sat Aug 29 05:06:39.653173 2026] [security2:error] [pid 1017536:tid 1017740] [client 158.23.147.79:25570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-admin/images/about.php"] [unique_id "apK9PyJcY4fy7tP-rU0MvgAAAl4"]
[Sat Aug 29 05:06:39.655140 2026] [security2:error] [pid 1018003:tid 1018191] [client 20.151.200.44:45895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/EM.php"] [unique_id "apK9PzAh5Y1i2tUxg4H9IgAABeA"]
[Sat Aug 29 05:06:39.662733 2026] [security2:error] [pid 1018003:tid 1018155] [client 20.220.204.93:52292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/666.php"] [unique_id "apK9PzAh5Y1i2tUxg4H9JAAABbw"]
[Sat Aug 29 05:06:39.665553 2026] [security2:error] [pid 1017536:tid 1017745] [client 216.26.243.152:41233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.243.26.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bfcorrigan.com"] [uri "/wp-login.php"] [unique_id "apK9PyJcY4fy7tP-rU0MugAAAmM"], referer: https://bfcorrigan.com/wp-login.php
[Sat Aug 29 05:06:39.666048 2026] [security2:error] [pid 1018003:tid 1018159] [client 68.155.159.216:18255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/asd.php"] [unique_id "apK9PzAh5Y1i2tUxg4H9JgAABcA"]
[Sat Aug 29 05:06:39.680545 2026] [security2:error] [pid 1017536:tid 1017667] [client 20.220.204.93:52241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/xr.php"] [unique_id "apK9PyJcY4fy7tP-rU0MwAAAAhU"]
[Sat Aug 29 05:06:39.710371 2026] [security2:error] [pid 1018003:tid 1018246] [client 158.23.147.79:48273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-admin/includes/index.php"] [unique_id "apK9PzAh5Y1i2tUxg4H9KwAABhY"]
[Sat Aug 29 05:06:39.755969 2026] [security2:error] [pid 1017536:tid 1017776] [client 40.83.93.50:1603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-content/admin.php"] [unique_id "apK9PyJcY4fy7tP-rU0MwgAAAoI"]
[Sat Aug 29 05:06:39.758335 2026] [security2:error] [pid 1018003:tid 1018240] [client 20.151.200.44:65050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/cafe.php"] [unique_id "apK9PzAh5Y1i2tUxg4H9LAAABhA"]
[Sat Aug 29 05:06:39.765120 2026] [security2:error] [pid 1017536:tid 1017743] [client 20.63.81.20:44480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/ssla.php"] [unique_id "apK9PyJcY4fy7tP-rU0MxAAAAmE"]
[Sat Aug 29 05:06:39.770052 2026] [security2:error] [pid 1017536:tid 1017751] [client 20.196.209.81:4477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/NewFile.php"] [unique_id "apK9PyJcY4fy7tP-rU0MxQAAAmk"]
[Sat Aug 29 05:06:39.772199 2026] [security2:error] [pid 1017536:tid 1017694] [client 185.104.184.230:36222] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.xvo.oau.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/website/wp-includes/wlwmanifest.xml"] [unique_id "apK9PyJcY4fy7tP-rU0MxgAAAjA"]
[Sat Aug 29 05:06:39.777663 2026] [security2:error] [pid 1018003:tid 1018196] [client 52.139.37.240:8631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drjrae.com"] [uri "/browse.php"] [unique_id "apK9PzAh5Y1i2tUxg4H9LQAABeU"]
[Sat Aug 29 05:06:39.787564 2026] [security2:error] [pid 1017536:tid 1017748] [client 20.48.250.41:25344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/click.php"] [unique_id "apK9PyJcY4fy7tP-rU0MxwAAAmY"]
[Sat Aug 29 05:06:39.795530 2026] [security2:error] [pid 1017536:tid 1017704] [client 52.139.37.240:32840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superresources.com"] [uri "/fw.php"] [unique_id "apK9PyJcY4fy7tP-rU0MyAAAAjo"]
[Sat Aug 29 05:06:39.798152 2026] [security2:error] [pid 1017536:tid 1017678] [client 52.139.37.240:32087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/must.php"] [unique_id "apK9PyJcY4fy7tP-rU0MyQAAAiA"]
[Sat Aug 29 05:06:39.814840 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.151.200.44:46651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/ca4.php"] [unique_id "apK9PyJcY4fy7tP-rU0MygAAAlY"]
[Sat Aug 29 05:06:39.836024 2026] [security2:error] [pid 1017536:tid 1017785] [client 20.220.204.93:52324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/knmt.php"] [unique_id "apK9PyJcY4fy7tP-rU0MywAAAos"]
[Sat Aug 29 05:06:39.858423 2026] [security2:error] [pid 1018003:tid 1018213] [client 52.139.37.240:21126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/ahax.php"] [unique_id "apK9PzAh5Y1i2tUxg4H9MwAABfY"]
[Sat Aug 29 05:06:39.858676 2026] [security2:error] [pid 1017536:tid 1017689] [client 158.23.147.79:30577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/index.php"] [unique_id "apK9PyJcY4fy7tP-rU0MzAAAAis"]
[Sat Aug 29 05:06:39.861388 2026] [security2:error] [pid 1018003:tid 1018243] [client 158.158.54.35:20665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-trackback.php"] [unique_id "apK9PzAh5Y1i2tUxg4H9NAAABhM"]
[Sat Aug 29 05:06:39.864586 2026] [security2:error] [pid 1017536:tid 1017765] [client 158.23.147.79:32663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-content/radio.php"] [unique_id "apK9PyJcY4fy7tP-rU0MzgAAAnc"]
[Sat Aug 29 05:06:39.865696 2026] [security2:error] [pid 1017536:tid 1017669] [client 93.123.109.228:50032] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/stripe/.env"] [unique_id "apK9PyJcY4fy7tP-rU0MzQAAAhc"]
[Sat Aug 29 05:06:39.871232 2026] [security2:error] [pid 1017536:tid 1017705] [client 68.155.159.216:14242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/log-mama/function.php"] [unique_id "apK9PyJcY4fy7tP-rU0MzwAAAjs"]
[Sat Aug 29 05:06:39.891794 2026] [security2:error] [pid 1018003:tid 1018099] [remote 34.75.89.130:51736] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "freejohnstuart.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK9PzAh5Y1i2tUxg4H9NgAGL04"]
[Sat Aug 29 05:06:39.891853 2026] [security2:error] [pid 1018003:tid 1018107] [remote 34.75.89.130:51736] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "freejohnstuart.com"] [uri "/@fs/root/.env"] [unique_id "apK9PzAh5Y1i2tUxg4H9NQAGL1Y"]
[Sat Aug 29 05:06:39.922645 2026] [security2:error] [pid 1018003:tid 1018221] [client 20.63.81.20:46928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "apK9PzAh5Y1i2tUxg4H9OQAABf4"]
[Sat Aug 29 05:06:39.928771 2026] [security2:error] [pid 1018003:tid 1018175] [client 68.155.159.216:51321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK9PzAh5Y1i2tUxg4H9OgAABdA"]
[Sat Aug 29 05:06:39.931377 2026] [security2:error] [pid 1017536:tid 1017729] [client 52.139.37.240:30806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/wp-content/plugins/ftde.php"] [unique_id "apK9PyJcY4fy7tP-rU0M0gAAAlM"]
[Sat Aug 29 05:06:39.933731 2026] [security2:error] [pid 1018003:tid 1018157] [client 20.48.250.41:25381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/ms.php"] [unique_id "apK9PzAh5Y1i2tUxg4H9OwAABb4"]
[Sat Aug 29 05:06:39.942845 2026] [security2:error] [pid 1018003:tid 1018171] [client 4.205.62.107:53415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/txets.php"] [unique_id "apK9PzAh5Y1i2tUxg4H9PAAABcw"]
[Sat Aug 29 05:06:39.954917 2026] [security2:error] [pid 1018003:tid 1018169] [client 4.205.62.107:56036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/konfig.php"] [unique_id "apK9PzAh5Y1i2tUxg4H9PQAABco"]
[Sat Aug 29 05:06:39.963249 2026] [security2:error] [pid 1018003:tid 1018180] [client 20.220.204.93:59093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/h02ugyh.php"] [unique_id "apK9PzAh5Y1i2tUxg4H9PgAABdU"]
[Sat Aug 29 05:06:39.964139 2026] [security2:error] [pid 1017536:tid 1017753] [client 168.107.94.195:51423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9PyJcY4fy7tP-rU0M0wAAAms"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:39.965998 2026] [security2:error] [pid 1018003:tid 1018167] [client 68.155.159.216:65110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK9PzAh5Y1i2tUxg4H9PwAABcg"]
[Sat Aug 29 05:06:39.970800 2026] [security2:error] [pid 1017536:tid 1017740] [client 20.220.204.93:59038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/sbhu.php"] [unique_id "apK9PyJcY4fy7tP-rU0M1AAAAl4"]
[Sat Aug 29 05:06:39.976941 2026] [security2:error] [pid 1018003:tid 1018248] [client 52.139.37.240:8608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drjrae.com"] [uri "/contentloader1.php"] [unique_id "apK9PzAh5Y1i2tUxg4H9QAAABhg"]
[Sat Aug 29 05:06:39.982475 2026] [security2:error] [pid 1018003:tid 1018276] [client 20.151.200.44:47336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/x0x.php"] [unique_id "apK9PzAh5Y1i2tUxg4H9QQAABjQ"]
[Sat Aug 29 05:06:40.010400 2026] [security2:error] [pid 1018003:tid 1018239] [client 20.52.41.200:1200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/alfa-rex.php7"] [unique_id "apK9QDAh5Y1i2tUxg4H9QwAABg8"]
[Sat Aug 29 05:06:40.013207 2026] [security2:error] [pid 1017536:tid 1017792] [client 158.23.147.79:24420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK9QCJcY4fy7tP-rU0M1gAAApI"]
[Sat Aug 29 05:06:40.016232 2026] [security2:error] [pid 1017536:tid 1017683] [client 20.151.200.44:64379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/eval.php"] [unique_id "apK9QCJcY4fy7tP-rU0M1wAAAiU"]
[Sat Aug 29 05:06:40.053971 2026] [security2:error] [pid 1018003:tid 1018250] [client 20.63.81.20:46874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/wp-aothait.php"] [unique_id "apK9QDAh5Y1i2tUxg4H9RAAABho"]
[Sat Aug 29 05:06:40.055300 2026] [security2:error] [pid 1017536:tid 1017786] [client 20.197.61.180:7897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/contentloader1.php"] [unique_id "apK9QCJcY4fy7tP-rU0M2QAAAow"]
[Sat Aug 29 05:06:40.082325 2026] [security2:error] [pid 1017536:tid 1017691] [client 20.196.209.81:4104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/global.php"] [unique_id "apK9QCJcY4fy7tP-rU0M2gAAAi0"]
[Sat Aug 29 05:06:40.090681 2026] [security2:error] [pid 1017536:tid 1017704] [client 20.48.250.41:25387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/zxekqlxb.php"] [unique_id "apK9QCJcY4fy7tP-rU0M3QAAAjo"]
[Sat Aug 29 05:06:40.106310 2026] [security2:error] [pid 1017536:tid 1017678] [client 20.220.204.93:59078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/xxw.php"] [unique_id "apK9QCJcY4fy7tP-rU0M3gAAAiA"]
[Sat Aug 29 05:06:40.114098 2026] [security2:error] [pid 1018003:tid 1018200] [client 93.123.109.228:37156] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/terraform.tfstate.backup"] [unique_id "apK9QDAh5Y1i2tUxg4H9RgAABek"]
[Sat Aug 29 05:06:40.123665 2026] [security2:error] [pid 1017536:tid 1017731] [client 20.220.204.93:59037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/a332.php"] [unique_id "apK9QCJcY4fy7tP-rU0M4gAAAlU"]
[Sat Aug 29 05:06:40.125052 2026] [security2:error] [pid 1017536:tid 1017724] [client 93.123.109.228:37208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/test.php"] [unique_id "apK9QCJcY4fy7tP-rU0M5AAAAk4"]
[Sat Aug 29 05:06:40.128143 2026] [security2:error] [pid 1018003:tid 1018182] [client 20.104.49.130:43780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.carlosmua.com"] [uri "/wen.php"] [unique_id "apK9QDAh5Y1i2tUxg4H9RwAABdc"]
[Sat Aug 29 05:06:40.169172 2026] [security2:error] [pid 1017536:tid 1017788] [client 20.196.209.81:3933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/config.php"] [unique_id "apK9QCJcY4fy7tP-rU0M6AAAAo4"]
[Sat Aug 29 05:06:40.191472 2026] [security2:error] [pid 1017536:tid 1017721] [client 20.63.81.20:46971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/wp-includes/index.php"] [unique_id "apK9QCJcY4fy7tP-rU0M6QAAAks"]
[Sat Aug 29 05:06:40.199299 2026] [security2:error] [pid 1018003:tid 1018198] [client 93.123.109.228:49832] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/test/.env"] [unique_id "apK9QDAh5Y1i2tUxg4H9SgAABec"]
[Sat Aug 29 05:06:40.221767 2026] [security2:error] [pid 1017536:tid 1017695] [client 20.151.200.44:65056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/sao.php"] [unique_id "apK9QCJcY4fy7tP-rU0M7QAAAjE"]
[Sat Aug 29 05:06:40.224130 2026] [security2:error] [pid 1017536:tid 1017745] [client 20.48.250.41:25459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/init.php"] [unique_id "apK9QCJcY4fy7tP-rU0M7gAAAmM"]
[Sat Aug 29 05:06:40.231695 2026] [security2:error] [pid 1017536:tid 1017683] [client 68.155.159.216:12116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-admin/images/index.php"] [unique_id "apK9QCJcY4fy7tP-rU0M7wAAAiU"]
[Sat Aug 29 05:06:40.232253 2026] [security2:error] [pid 1017536:tid 1017694] [client 40.83.93.50:10820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-content/autoload_classmap.php"] [unique_id "apK9QCJcY4fy7tP-rU0M8AAAAjA"]
[Sat Aug 29 05:06:40.249322 2026] [security2:error] [pid 1017536:tid 1017781] [client 20.151.200.44:47321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.thomaslmcdonell.com"] [uri "/fesa.php"] [unique_id "apK9QCJcY4fy7tP-rU0M8QAAAoc"]
[Sat Aug 29 05:06:40.258958 2026] [security2:error] [pid 1017536:tid 1017743] [client 20.220.204.93:52273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/ws66.php"] [unique_id "apK9QCJcY4fy7tP-rU0M8gAAAmE"]
[Sat Aug 29 05:06:40.266997 2026] [security2:error] [pid 1018003:tid 1018191] [client 93.123.109.228:49994] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/user/.env"] [unique_id "apK9QDAh5Y1i2tUxg4H9TAAABeA"]
[Sat Aug 29 05:06:40.289815 2026] [security2:error] [pid 1017536:tid 1017678] [client 158.23.147.79:61585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK9QCJcY4fy7tP-rU0M9QAAAiA"]
[Sat Aug 29 05:06:40.324898 2026] [security2:error] [pid 1017536:tid 1017707] [client 20.63.81.20:46878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/file31.php"] [unique_id "apK9QCJcY4fy7tP-rU0M9wAAAj0"]
[Sat Aug 29 05:06:40.327262 2026] [core:error] [pid 1018003:tid 1018219] [client 158.158.54.35:15199] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:40.327277 2026] [core:error] [pid 1018003:tid 1018219] [client 158.158.54.35:15199] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:40.343867 2026] [security2:error] [pid 1017536:tid 1017788] [client 168.107.94.195:51806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9QCJcY4fy7tP-rU0M_AAAAo4"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:40.344923 2026] [proxy_http:error] [pid 1017536:tid 1017778] (20014)Internal error (specific information not available): [client 34.21.253.104:18054] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:40.344936 2026] [proxy:error] [pid 1017536:tid 1017778] [client 34.21.253.104:18054] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/google-service-account.json
[Sat Aug 29 05:06:40.348330 2026] [security2:error] [pid 1018003:tid 1018207] [client 34.21.253.104:17968] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "cpanel.replenishink.com"] [uri "/creds.json"] [unique_id "apK9QDAh5Y1i2tUxg4H9TwAABfA"]
[Sat Aug 29 05:06:40.350527 2026] [proxy_http:error] [pid 1017536:tid 1017669] (20014)Internal error (specific information not available): [client 34.21.253.104:17974] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:40.350539 2026] [proxy:error] [pid 1017536:tid 1017669] [client 34.21.253.104:17974] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/secret.json
[Sat Aug 29 05:06:40.354832 2026] [proxy_http:error] [pid 1018003:tid 1018183] (20014)Internal error (specific information not available): [client 34.21.253.104:18088] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:40.354847 2026] [proxy:error] [pid 1018003:tid 1018183] [client 34.21.253.104:18088] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/firebase.json
[Sat Aug 29 05:06:40.355522 2026] [security2:error] [pid 1017536:tid 1017717] [client 4.205.62.107:22387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/ebahvhhh.php"] [unique_id "apK9QCJcY4fy7tP-rU0NBAAAAkc"]
[Sat Aug 29 05:06:40.355682 2026] [proxy_http:error] [pid 1017536:tid 1017778] (20014)Internal error (specific information not available): [client 34.21.253.104:18054] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:40.355698 2026] [proxy:error] [pid 1017536:tid 1017778] [client 34.21.253.104:18054] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/502.shtml
[Sat Aug 29 05:06:40.356073 2026] [security2:error] [pid 1017536:tid 1017696] [client 34.21.253.104:18096] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cpanel.replenishink.com"] [uri "/api-keys.json"] [unique_id "apK9QCJcY4fy7tP-rU0NBgAAAjI"]
[Sat Aug 29 05:06:40.356257 2026] [security2:error] [pid 1017536:tid 1017751] [client 185.104.184.230:36226] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.xvo.oau.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/wp/wp-includes/wlwmanifest.xml"] [unique_id "apK9QCJcY4fy7tP-rU0NBQAAAmk"]
[Sat Aug 29 05:06:40.356540 2026] [security2:error] [pid 1017536:tid 1017721] [client 20.220.204.93:59059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/bolt.php"] [unique_id "apK9QCJcY4fy7tP-rU0NBwAAAks"]
[Sat Aug 29 05:06:40.361073 2026] [proxy_http:error] [pid 1017536:tid 1017770] (20014)Internal error (specific information not available): [client 34.21.253.104:18072] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:40.361088 2026] [proxy:error] [pid 1017536:tid 1017770] [client 34.21.253.104:18072] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/firebase-admin.json
[Sat Aug 29 05:06:40.366898 2026] [proxy_http:error] [pid 1017536:tid 1017669] (20014)Internal error (specific information not available): [client 34.21.253.104:17974] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:40.366912 2026] [proxy:error] [pid 1017536:tid 1017669] [client 34.21.253.104:17974] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/502.shtml
[Sat Aug 29 05:06:40.371907 2026] [proxy_http:error] [pid 1017536:tid 1017713] (20014)Internal error (specific information not available): [client 34.21.253.104:18018] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:06:40.371920 2026] [proxy:error] [pid 1017536:tid 1017713] [client 34.21.253.104:18018] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/service-account-key.json
[Sat Aug 29 05:06:40.373926 2026] [security2:error] [pid 1017536:tid 1017740] [client 20.48.250.41:25437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/term.php"] [unique_id "apK9QCJcY4fy7tP-rU0NCAAAAl4"]
[Sat Aug 29 05:06:40.378675 2026] [security2:error] [pid 1017536:tid 1017761] [client 45.148.10.62:38808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ninaanddon.strangeworx.com"] [uri "/.env.php.bak"] [unique_id "apK9QCJcY4fy7tP-rU0NCQAAAnM"]
[Sat Aug 29 05:06:40.383835 2026] [security2:error] [pid 1017536:tid 1017689] [client 158.23.147.79:63843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK9QCJcY4fy7tP-rU0NCgAAAis"]
[Sat Aug 29 05:06:40.390486 2026] [security2:error] [pid 1017536:tid 1017745] [client 20.151.200.44:65017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/uuu.php"] [unique_id "apK9QCJcY4fy7tP-rU0NCwAAAmM"]
[Sat Aug 29 05:06:40.395504 2026] [security2:error] [pid 1017536:tid 1017709] [client 93.123.109.228:37218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/v1/.env"] [unique_id "apK9QCJcY4fy7tP-rU0NDAAAAj8"]
[Sat Aug 29 05:06:40.396043 2026] [security2:error] [pid 1017536:tid 1017694] [client 20.220.204.93:50787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/ws68.php"] [unique_id "apK9QCJcY4fy7tP-rU0NDQAAAjA"]
[Sat Aug 29 05:06:40.403268 2026] [security2:error] [pid 1017536:tid 1017781] [client 158.23.147.79:26569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK9QCJcY4fy7tP-rU0NDwAAAoc"]
[Sat Aug 29 05:06:40.418696 2026] [security2:error] [pid 1017536:tid 1017743] [client 93.123.109.228:50032] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/v2/.env"] [unique_id "apK9QCJcY4fy7tP-rU0NEgAAAmE"]
[Sat Aug 29 05:06:40.425515 2026] [security2:error] [pid 1018003:tid 1018245] [client 93.123.109.228:37160] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/v3/.env"] [unique_id "apK9QDAh5Y1i2tUxg4H9UwAABhU"]
[Sat Aug 29 05:06:40.460944 2026] [security2:error] [pid 1017536:tid 1017674] [client 20.52.41.200:1730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-includes/fonts/index.php"] [unique_id "apK9QCJcY4fy7tP-rU0NEwAAAhw"]
[Sat Aug 29 05:06:40.462776 2026] [security2:error] [pid 1017536:tid 1017790] [client 20.63.81.20:46870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/dk.php"] [unique_id "apK9QCJcY4fy7tP-rU0NFAAAApA"]
[Sat Aug 29 05:06:40.487881 2026] [security2:error] [pid 1017536:tid 1017793] [client 20.196.209.81:9415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/update.php"] [unique_id "apK9QCJcY4fy7tP-rU0NFQAAApM"]
[Sat Aug 29 05:06:40.497272 2026] [security2:error] [pid 1017536:tid 1017780] [client 20.220.204.93:52333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/rtx.php"] [unique_id "apK9QCJcY4fy7tP-rU0NFgAAAoY"]
[Sat Aug 29 05:06:40.499419 2026] [security2:error] [pid 1018003:tid 1018152] [client 20.151.200.44:64246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/anz.php"] [unique_id "apK9QDAh5Y1i2tUxg4H9VgAABbk"]
[Sat Aug 29 05:06:40.505401 2026] [security2:error] [pid 1018003:tid 1018265] [client 158.23.147.79:17445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK9QDAh5Y1i2tUxg4H9VwAABik"]
[Sat Aug 29 05:06:40.515234 2026] [security2:error] [pid 1018003:tid 1018255] [client 20.48.250.41:25389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/aaa.php"] [unique_id "apK9QDAh5Y1i2tUxg4H9WQAABh8"]
[Sat Aug 29 05:06:40.516385 2026] [security2:error] [pid 1018003:tid 1018277] [client 158.23.147.79:35713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-content/cong.php"] [unique_id "apK9QDAh5Y1i2tUxg4H9WgAABjU"]
[Sat Aug 29 05:06:40.537494 2026] [security2:error] [pid 1018003:tid 1018188] [client 20.220.204.93:50695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/users.php"] [unique_id "apK9QDAh5Y1i2tUxg4H9XAAABd0"]
[Sat Aug 29 05:06:40.539591 2026] [security2:error] [pid 1018003:tid 1018177] [client 147.182.236.246:35810] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1609"] [id "900942"] [msg "Invalid WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.path=///"] [hostname "nashtones.com"] [uri "/"] [unique_id "apK9QDAh5Y1i2tUxg4H9WwAABdI"]
[Sat Aug 29 05:06:40.568864 2026] [security2:error] [pid 1018003:tid 1018189] [client 147.182.236.246:35810] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1609"] [id "900942"] [msg "Invalid WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.path=:"] [hostname "nashtones.com"] [uri "/"] [unique_id "apK9QDAh5Y1i2tUxg4H9XQAABd4"]
[Sat Aug 29 05:06:40.578626 2026] [security2:error] [pid 1018003:tid 1018266] [client 74.248.24.12:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "djiboutifresh.eastacare.com"] [uri "/"] [unique_id "apK9QDAh5Y1i2tUxg4H9XgAABio"]
[Sat Aug 29 05:06:40.580554 2026] [security2:error] [pid 1017536:tid 1017744] [client 68.155.159.216:52791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK9QCJcY4fy7tP-rU0NHQAAAmI"]
[Sat Aug 29 05:06:40.599015 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.63.81.20:46942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/ta.php"] [unique_id "apK9QDAh5Y1i2tUxg4H9YQAABcI"]
[Sat Aug 29 05:06:40.604056 2026] [security2:error] [pid 1018003:tid 1018163] [client 20.196.209.81:11544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/22.php"] [unique_id "apK9QDAh5Y1i2tUxg4H9YgAABcQ"]
[Sat Aug 29 05:06:40.609102 2026] [security2:error] [pid 1018003:tid 1018174] [client 4.205.62.107:22339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/test.config.php"] [unique_id "apK9QDAh5Y1i2tUxg4H9YwAABc8"]
[Sat Aug 29 05:06:40.634461 2026] [security2:error] [pid 1017536:tid 1017695] [client 20.220.204.93:52301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/ckk.php"] [unique_id "apK9QCJcY4fy7tP-rU0NIwAAAjE"]
[Sat Aug 29 05:06:40.650488 2026] [security2:error] [pid 1017536:tid 1017694] [client 4.205.62.107:65466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/25.php"] [unique_id "apK9QCJcY4fy7tP-rU0NJAAAAjA"]
[Sat Aug 29 05:06:40.652222 2026] [security2:error] [pid 1017536:tid 1017792] [client 20.151.200.44:64963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/private.php"] [unique_id "apK9QCJcY4fy7tP-rU0NJQAAApI"]
[Sat Aug 29 05:06:40.652811 2026] [security2:error] [pid 1017536:tid 1017781] [client 4.205.62.107:22443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/lmfi2.php"] [unique_id "apK9QCJcY4fy7tP-rU0NJgAAAoc"]
[Sat Aug 29 05:06:40.664767 2026] [security2:error] [pid 1017536:tid 1017743] [client 20.48.250.41:25555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/xsox.php"] [unique_id "apK9QCJcY4fy7tP-rU0NKAAAAmE"]
[Sat Aug 29 05:06:40.674792 2026] [security2:error] [pid 1017536:tid 1017786] [client 20.220.204.93:52350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/bzjdlofz.php"] [unique_id "apK9QCJcY4fy7tP-rU0NKQAAAow"]
[Sat Aug 29 05:06:40.706631 2026] [security2:error] [pid 1018003:tid 1018166] [client 40.83.93.50:23947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-content/cache/min/1/wp-content/admin.php"] [unique_id "apK9QDAh5Y1i2tUxg4H9ZQAABcc"]
[Sat Aug 29 05:06:40.724498 2026] [security2:error] [pid 1018003:tid 1018175] [client 168.107.94.195:52101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9QDAh5Y1i2tUxg4H9ZgAABdA"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:40.732112 2026] [security2:error] [pid 1017536:tid 1017687] [client 20.63.81.20:46872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/bo.php"] [unique_id "apK9QCJcY4fy7tP-rU0NLgAAAik"]
[Sat Aug 29 05:06:40.734202 2026] [security2:error] [pid 1018003:tid 1018230] [client 158.23.147.79:30506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/mah.php"] [unique_id "apK9QDAh5Y1i2tUxg4H9ZwAABgY"]
[Sat Aug 29 05:06:40.752381 2026] [security2:error] [pid 1018003:tid 1018231] [client 93.123.109.228:49994] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/var/www/.env"] [unique_id "apK9QDAh5Y1i2tUxg4H9aAAABgc"]
[Sat Aug 29 05:06:40.785507 2026] [security2:error] [pid 1018003:tid 1018243] [client 158.158.54.35:4920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/222.php"] [unique_id "apK9QDAh5Y1i2tUxg4H9aQAABhM"]
[Sat Aug 29 05:06:40.788407 2026] [security2:error] [pid 1017536:tid 1017780] [client 93.123.109.228:37192] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/var/www/html/.env"] [unique_id "apK9QCJcY4fy7tP-rU0NLwAAAoY"]
[Sat Aug 29 05:06:40.791140 2026] [security2:error] [pid 1017536:tid 1017784] [client 20.220.204.93:52258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.vivaboxhomes.com"] [uri "/R57.php"] [unique_id "apK9QCJcY4fy7tP-rU0NMAAAAoo"]
[Sat Aug 29 05:06:40.815817 2026] [security2:error] [pid 1017536:tid 1017729] [client 20.220.204.93:52309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/selesai.php"] [unique_id "apK9QCJcY4fy7tP-rU0NMQAAAlM"]
[Sat Aug 29 05:06:40.828643 2026] [security2:error] [pid 1017536:tid 1017717] [client 158.23.147.79:48181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-login.php"] [unique_id "apK9QCJcY4fy7tP-rU0NMwAAAkc"]
[Sat Aug 29 05:06:40.830333 2026] [security2:error] [pid 1018003:tid 1018276] [client 20.48.250.41:25384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/lkui.php"] [unique_id "apK9QDAh5Y1i2tUxg4H9awAABjQ"]
[Sat Aug 29 05:06:40.832342 2026] [security2:error] [pid 1017536:tid 1017705] [client 20.151.200.44:65016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/lfi.php"] [unique_id "apK9QCJcY4fy7tP-rU0NNAAAAjs"]
[Sat Aug 29 05:06:40.860216 2026] [security2:error] [pid 1018003:tid 1018206] [client 20.63.81.20:41962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/44.php"] [unique_id "apK9QDAh5Y1i2tUxg4H9bAAABe8"]
[Sat Aug 29 05:06:40.860332 2026] [security2:error] [pid 1017536:tid 1017778] [client 68.155.159.216:16342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK9QCJcY4fy7tP-rU0NNQAAAoQ"]
[Sat Aug 29 05:06:40.917777 2026] [security2:error] [pid 1017536:tid 1017776] [client 20.52.41.200:1256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/upload.php"] [unique_id "apK9QCJcY4fy7tP-rU0NNgAAAoI"]
[Sat Aug 29 05:06:40.932987 2026] [security2:error] [pid 1018003:tid 1018221] [client 20.197.61.180:7877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/al.php"] [unique_id "apK9QDAh5Y1i2tUxg4H9bgAABf4"]
[Sat Aug 29 05:06:40.936734 2026] [security2:error] [pid 1017536:tid 1017740] [client 93.123.109.228:37100] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/web/.env"] [unique_id "apK9QCJcY4fy7tP-rU0NNwAAAl4"]
[Sat Aug 29 05:06:40.956467 2026] [security2:error] [pid 1018003:tid 1018267] [client 74.7.175.136:59830] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.rlmitchellrealestate.alabamaracingrealtor.com"] [uri "/index.php"] [unique_id "apK9QDAh5Y1i2tUxg4H9cAAGK38"]
[Sat Aug 29 05:06:40.961399 2026] [security2:error] [pid 1018003:tid 1018259] [client 185.104.184.230:36240] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.xvo.oau.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/news/wp-includes/wlwmanifest.xml"] [unique_id "apK9QDAh5Y1i2tUxg4H9cQAABiM"]
[Sat Aug 29 05:06:40.964383 2026] [security2:error] [pid 1017536:tid 1017770] [client 158.23.147.79:30656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-blog-header.php"] [unique_id "apK9QCJcY4fy7tP-rU0NOwAAAnw"]
[Sat Aug 29 05:06:40.971906 2026] [security2:error] [pid 1017536:tid 1017713] [client 20.151.200.44:64414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/quoys.php"] [unique_id "apK9QCJcY4fy7tP-rU0NPAAAAkM"]
[Sat Aug 29 05:06:40.973997 2026] [security2:error] [pid 1017536:tid 1017752] [client 20.220.204.93:59038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/shlo.php"] [unique_id "apK9QCJcY4fy7tP-rU0NPQAAAmo"]
[Sat Aug 29 05:06:40.979717 2026] [security2:error] [pid 1017536:tid 1017761] [client 68.155.159.216:14224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/bk/index.php"] [unique_id "apK9QCJcY4fy7tP-rU0NPgAAAnM"]
[Sat Aug 29 05:06:40.992339 2026] [security2:error] [pid 1017536:tid 1017695] [client 158.23.147.79:32658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-admin/dropdown.php"] [unique_id "apK9QCJcY4fy7tP-rU0NPwAAAjE"]
[Sat Aug 29 05:06:41.011275 2026] [security2:error] [pid 1017536:tid 1017792] [client 20.63.81.20:46864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/h2.php"] [unique_id "apK9QSJcY4fy7tP-rU0NRAAAApI"]
[Sat Aug 29 05:06:41.026337 2026] [security2:error] [pid 1018003:tid 1018169] [client 20.196.209.81:13250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/blog.php"] [unique_id "apK9QTAh5Y1i2tUxg4H9cwAABco"]
[Sat Aug 29 05:06:41.028433 2026] [security2:error] [pid 1018003:tid 1018244] [client 20.196.209.81:4425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/bak.phps"] [unique_id "apK9QTAh5Y1i2tUxg4H9dAAABhQ"]
[Sat Aug 29 05:06:41.063047 2026] [security2:error] [pid 1017536:tid 1017731] [client 68.155.159.216:65143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/chosen.php"] [unique_id "apK9QSJcY4fy7tP-rU0NRgAAAlU"]
[Sat Aug 29 05:06:41.092798 2026] [security2:error] [pid 1017536:tid 1017707] [client 68.155.159.216:51579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/.well-knownold/index.php"] [unique_id "apK9QSJcY4fy7tP-rU0NSAAAAj0"]
[Sat Aug 29 05:06:41.103554 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.220.204.93:59099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/asax.php"] [unique_id "apK9QSJcY4fy7tP-rU0NSgAAAlY"]
[Sat Aug 29 05:06:41.104364 2026] [security2:error] [pid 1017536:tid 1017793] [client 168.107.94.195:52416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9QSJcY4fy7tP-rU0NSwAAApM"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:41.105401 2026] [security2:error] [pid 1017536:tid 1017780] [client 4.205.62.107:56020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/paths.php"] [unique_id "apK9QSJcY4fy7tP-rU0NTAAAAoY"]
[Sat Aug 29 05:06:41.107627 2026] [security2:error] [pid 1018003:tid 1018179] [client 20.48.250.41:25419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "apK9QTAh5Y1i2tUxg4H9eAAABdQ"]
[Sat Aug 29 05:06:41.132909 2026] [security2:error] [pid 1018003:tid 1018198] [client 158.23.147.79:24551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK9QTAh5Y1i2tUxg4H9eQAABec"]
[Sat Aug 29 05:06:41.153804 2026] [security2:error] [pid 1017536:tid 1017744] [client 4.205.62.107:53418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/public/mah.php.php"] [unique_id "apK9QSJcY4fy7tP-rU0NUAAAAmI"]
[Sat Aug 29 05:06:41.158641 2026] [security2:error] [pid 1018003:tid 1018192] [client 20.63.81.20:44517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/wp-content/mod/adminfuns.php"] [unique_id "apK9QTAh5Y1i2tUxg4H9egAABeE"]
[Sat Aug 29 05:06:41.195332 2026] [security2:error] [pid 1018003:tid 1018219] [client 20.151.200.44:65055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/vbbn.php"] [unique_id "apK9QTAh5Y1i2tUxg4H9ewAABfw"]
[Sat Aug 29 05:06:41.195624 2026] [security2:error] [pid 1017536:tid 1017683] [client 93.123.109.228:37100] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/website/.env"] [unique_id "apK9QSJcY4fy7tP-rU0NVAAAAiU"]
[Sat Aug 29 05:06:41.206364 2026] [security2:error] [pid 1017536:tid 1017736] [client 40.83.93.50:1771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-content/classwithtostring.php"] [unique_id "apK9QSJcY4fy7tP-rU0NVQAAAlo"]
[Sat Aug 29 05:06:41.207291 2026] [security2:error] [pid 1017536:tid 1017698] [client 20.151.200.44:64850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/bge.php"] [unique_id "apK9QSJcY4fy7tP-rU0NVgAAAjQ"]
[Sat Aug 29 05:06:41.240524 2026] [security2:error] [pid 1017536:tid 1017790] [client 45.148.10.62:38812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ninaanddon.strangeworx.com"] [uri "/.env.php"] [unique_id "apK9QSJcY4fy7tP-rU0NVwAAApA"]
[Sat Aug 29 05:06:41.243235 2026] [security2:error] [pid 1017536:tid 1017757] [client 158.158.54.35:2878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/x.php"] [unique_id "apK9QSJcY4fy7tP-rU0NWAAAAm8"]
[Sat Aug 29 05:06:41.245662 2026] [security2:error] [pid 1018003:tid 1018245] [client 68.155.159.216:50228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK9QTAh5Y1i2tUxg4H9fQAABhU"]
[Sat Aug 29 05:06:41.248850 2026] [security2:error] [pid 1017536:tid 1017667] [client 20.220.204.93:52294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/fetch.php"] [unique_id "apK9QSJcY4fy7tP-rU0NWQAAAhU"]
[Sat Aug 29 05:06:41.265928 2026] [security2:error] [pid 1018003:tid 1018227] [client 158.23.147.79:25594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK9QTAh5Y1i2tUxg4H9fwAABgQ"]
[Sat Aug 29 05:06:41.282369 2026] [security2:error] [pid 1018003:tid 1018203] [client 20.104.49.130:63433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.danesquality.com"] [uri "/fs.php"] [unique_id "apK9QTAh5Y1i2tUxg4H9gAAABew"]
[Sat Aug 29 05:06:41.289923 2026] [security2:error] [pid 1018003:tid 1018202] [client 20.48.250.41:25394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/motu.php"] [unique_id "apK9QTAh5Y1i2tUxg4H9gQAABes"]
[Sat Aug 29 05:06:41.293989 2026] [security2:error] [pid 1018003:tid 1018159] [client 93.123.109.228:49744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/wp-config.php"] [unique_id "apK9QTAh5Y1i2tUxg4H9ggAABcA"]
[Sat Aug 29 05:06:41.331311 2026] [security2:error] [pid 1018003:tid 1018240] [client 93.123.109.228:37160] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.ewenclan.com"] [uri "/wp-config.php.bak"] [unique_id "apK9QTAh5Y1i2tUxg4H9hAAABhA"]
[Sat Aug 29 05:06:41.338960 2026] [security2:error] [pid 1018003:tid 1018234] [client 68.155.159.216:12255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-includes/index.php"] [unique_id "apK9QTAh5Y1i2tUxg4H9hgAABgo"]
[Sat Aug 29 05:06:41.358744 2026] [security2:error] [pid 1018003:tid 1018266] [client 93.123.109.228:49832] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.ewenclan.com"] [uri "/wp-config.php.old"] [unique_id "apK9QTAh5Y1i2tUxg4H9iAAABio"]
[Sat Aug 29 05:06:41.358868 2026] [security2:error] [pid 1018003:tid 1018222] [client 20.104.49.130:60761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/xwpg.php"] [unique_id "apK9QTAh5Y1i2tUxg4H9hwAABf8"]
[Sat Aug 29 05:06:41.361789 2026] [security2:error] [pid 1017536:tid 1017678] [client 93.123.109.228:37188] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "cpcontacts.ewenclan.com"] [uri "/___proxy_subdomain_cpcontacts/wp-content/mysql.sql"] [unique_id "apK9QSJcY4fy7tP-rU0NZQAAAiA"]
[Sat Aug 29 05:06:41.372274 2026] [cgid:error] [pid 1018003:tid 1018275] [client 20.52.41.200:1158] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/cpslggc/404.shtml
[Sat Aug 29 05:06:41.373266 2026] [security2:error] [pid 1017536:tid 1017710] [client 93.123.109.228:49916] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.ewenclan.com"] [uri "/wp-config.php.new"] [unique_id "apK9QSJcY4fy7tP-rU0NZwAAAkA"]
[Sat Aug 29 05:06:41.375628 2026] [security2:error] [pid 1018003:tid 1018252] [client 20.63.81.20:44462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/sao.php"] [unique_id "apK9QTAh5Y1i2tUxg4H9iwAABhw"]
[Sat Aug 29 05:06:41.405302 2026] [security2:error] [pid 1017536:tid 1017753] [client 68.155.159.216:30713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK9QSJcY4fy7tP-rU0NaQAAAms"]
[Sat Aug 29 05:06:41.412799 2026] [security2:error] [pid 1018003:tid 1018188] [client 45.61.187.50:63158] ModSecurity: Access denied with code 406 (phase 1). Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "187"] [id "900401"] [msg "PHP Spam Botnet"] [hostname "succulentideas.com"] [uri "/wp-json/batch/v1"] [unique_id "apK9QTAh5Y1i2tUxg4H9jQAABd0"]
[Sat Aug 29 05:06:41.414440 2026] [security2:error] [pid 1017536:tid 1017712] [client 20.220.204.93:52253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/vx.php"] [unique_id "apK9QSJcY4fy7tP-rU0NagAAAkI"]
[Sat Aug 29 05:06:41.426630 2026] [security2:error] [pid 1017536:tid 1017713] [client 158.23.147.79:54386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK9QSJcY4fy7tP-rU0NbAAAAkM"]
[Sat Aug 29 05:06:41.427613 2026] [security2:error] [pid 1018003:tid 1018265] [client 20.196.209.81:19437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/install.php"] [unique_id "apK9QTAh5Y1i2tUxg4H9jgAABik"]
[Sat Aug 29 05:06:41.446527 2026] [security2:error] [pid 1018003:tid 1018255] [client 20.196.209.81:17891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/bypass.php"] [unique_id "apK9QTAh5Y1i2tUxg4H9kAAABh8"]
[Sat Aug 29 05:06:41.450602 2026] [security2:error] [pid 1017536:tid 1017732] [client 136.107.231.130:29314] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "alanmossman.mossmanphoto.com"] [uri "/wp-config.php.bak"] [unique_id "apK9QSJcY4fy7tP-rU0NbwAAAlY"]
[Sat Aug 29 05:06:41.454309 2026] [security2:error] [pid 1017536:tid 1017793] [client 136.107.231.130:29278] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/key.pem"] [unique_id "apK9QSJcY4fy7tP-rU0NcAAAApM"]
[Sat Aug 29 05:06:41.456263 2026] [security2:error] [pid 1018003:tid 1018224] [client 136.107.231.130:29268] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/id_dsa"] [unique_id "apK9QTAh5Y1i2tUxg4H9kwAABgE"]
[Sat Aug 29 05:06:41.457190 2026] [security2:error] [pid 1017536:tid 1017784] [client 136.107.231.130:29286] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "alanmossman.mossmanphoto.com"] [uri "/cgi-sys/404.html"] [unique_id "apK9QSJcY4fy7tP-rU0NcwAAAoo"]
[Sat Aug 29 05:06:41.457205 2026] [security2:error] [pid 1018003:tid 1018218] [client 136.107.231.130:29256] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/id_rsa"] [unique_id "apK9QTAh5Y1i2tUxg4H9lAAABfs"]
[Sat Aug 29 05:06:41.458599 2026] [security2:error] [pid 1017536:tid 1017721] [client 136.107.231.130:29318] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "alanmossman.mossmanphoto.com"] [uri "/wp-config.php.old"] [unique_id "apK9QSJcY4fy7tP-rU0NdgAAAks"]
[Sat Aug 29 05:06:41.458852 2026] [security2:error] [pid 1018003:tid 1018213] [client 136.107.231.130:29296] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/privatekey.key"] [unique_id "apK9QTAh5Y1i2tUxg4H9lgAABfY"]
[Sat Aug 29 05:06:41.466710 2026] [security2:error] [pid 1017536:tid 1017757] [client 68.155.159.216:49282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK9QSJcY4fy7tP-rU0NeAAAAm8"]
[Sat Aug 29 05:06:41.467409 2026] [security2:error] [pid 1017536:tid 1017767] [client 136.107.231.130:29312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.231.107.136.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alanmossman.mossmanphoto.com"] [uri "/wp-config.php"] [unique_id "apK9QSJcY4fy7tP-rU0NcQAAAnk"]
[Sat Aug 29 05:06:41.468779 2026] [security2:error] [pid 1017536:tid 1017669] [client 136.107.231.130:29332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.231.107.136.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alanmossman.mossmanphoto.com"] [uri "/config.php.bak"] [unique_id "apK9QSJcY4fy7tP-rU0NdQAAAhc"]
[Sat Aug 29 05:06:41.469210 2026] [security2:error] [pid 1018003:tid 1018180] [client 20.48.250.41:25457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/Ov-Simple1.php"] [unique_id "apK9QTAh5Y1i2tUxg4H9mAAABdU"]
[Sat Aug 29 05:06:41.484830 2026] [security2:error] [pid 1017536:tid 1017709] [client 168.107.94.195:52730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9QSJcY4fy7tP-rU0NegAAAj8"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:41.491619 2026] [security2:error] [pid 1018003:tid 1018271] [client 136.107.231.130:29324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.231.107.136.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alanmossman.mossmanphoto.com"] [uri "/config.php"] [unique_id "apK9QTAh5Y1i2tUxg4H9lQAABi8"]
[Sat Aug 29 05:06:41.496889 2026] [security2:error] [pid 1018003:tid 1018167] [client 4.205.62.107:22395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/asa.php"] [unique_id "apK9QTAh5Y1i2tUxg4H9mQAABcg"]
[Sat Aug 29 05:06:41.497717 2026] [security2:error] [pid 1018003:tid 1018276] [client 158.23.147.79:62651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK9QTAh5Y1i2tUxg4H9mgAABjQ"]
[Sat Aug 29 05:06:41.504334 2026] [security2:error] [pid 1018003:tid 1018239] [client 20.63.81.20:44430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/dapa.php"] [unique_id "apK9QTAh5Y1i2tUxg4H9mwAABg8"]
[Sat Aug 29 05:06:41.524534 2026] [cgid:error] [pid 1018003:tid 1018216] [client 20.52.41.200:1158] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/cpslggc/404.shtml
[Sat Aug 29 05:06:41.543714 2026] [security2:error] [pid 1018003:tid 1018186] [client 158.23.147.79:26480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/makeasmtp.php"] [unique_id "apK9QTAh5Y1i2tUxg4H9nQAABds"]
[Sat Aug 29 05:06:41.557331 2026] [security2:error] [pid 1017536:tid 1017792] [client 185.104.184.230:36246] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.xvo.oau.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/2018/wp-includes/wlwmanifest.xml"] [unique_id "apK9QSJcY4fy7tP-rU0NfQAAApI"]
[Sat Aug 29 05:06:41.568061 2026] [security2:error] [pid 1018003:tid 1018200] [client 20.151.200.44:65028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/rfi.php"] [unique_id "apK9QTAh5Y1i2tUxg4H9ngAABek"]
[Sat Aug 29 05:06:41.579885 2026] [security2:error] [pid 1017536:tid 1017696] [client 20.151.200.44:65491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/wp-ana.php"] [unique_id "apK9QSJcY4fy7tP-rU0NfgAAAjI"]
[Sat Aug 29 05:06:41.585568 2026] [security2:error] [pid 1017536:tid 1017712] [client 20.104.49.130:48540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/ohct.php"] [unique_id "apK9QSJcY4fy7tP-rU0NgQAAAkI"]
[Sat Aug 29 05:06:41.587042 2026] [security2:error] [pid 1017536:tid 1017564] [remote 34.75.89.130:51744] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "freejohnstuart.com"] [uri "/_image"] [unique_id "apK9QSJcY4fy7tP-rU0NggACaxs"]
[Sat Aug 29 05:06:41.626749 2026] [security2:error] [pid 1017536:tid 1017752] [client 20.220.204.93:52298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/global.php"] [unique_id "apK9QSJcY4fy7tP-rU0NgwAAAmo"]
[Sat Aug 29 05:06:41.639137 2026] [security2:error] [pid 1018003:tid 1018156] [client 158.23.147.79:17472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/simple.php"] [unique_id "apK9QTAh5Y1i2tUxg4H9nwAABb0"]
[Sat Aug 29 05:06:41.647858 2026] [security2:error] [pid 1018003:tid 1018190] [client 68.155.159.216:51460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-mail.php"] [unique_id "apK9QTAh5Y1i2tUxg4H9oAAABd8"]
[Sat Aug 29 05:06:41.666201 2026] [security2:error] [pid 1017536:tid 1017737] [client 20.48.250.41:25439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/wp-blogs.php"] [unique_id "apK9QSJcY4fy7tP-rU0NhAAAAls"]
[Sat Aug 29 05:06:41.673716 2026] [security2:error] [pid 1018003:tid 1018162] [client 20.52.41.200:1158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-content/file.php"] [unique_id "apK9QTAh5Y1i2tUxg4H9oQAABcM"]
[Sat Aug 29 05:06:41.675373 2026] [security2:error] [pid 1018003:tid 1018175] [client 20.197.61.180:7874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/global.php"] [unique_id "apK9QTAh5Y1i2tUxg4H9ogAABdA"]
[Sat Aug 29 05:06:41.676227 2026] [security2:error] [pid 1018003:tid 1018238] [client 40.83.93.50:1619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-content/config.php"] [unique_id "apK9QTAh5Y1i2tUxg4H9owAABg4"]
[Sat Aug 29 05:06:41.682753 2026] [security2:error] [pid 1018003:tid 1018258] [client 20.63.81.20:44518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/wp-content/l.php"] [unique_id "apK9QTAh5Y1i2tUxg4H9pAAABiI"]
[Sat Aug 29 05:06:41.695724 2026] [security2:error] [pid 1017536:tid 1017793] [client 158.23.147.79:35801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK9QSJcY4fy7tP-rU0NhQAAApM"]
[Sat Aug 29 05:06:41.715204 2026] [security2:error] [pid 1017536:tid 1017717] [client 158.158.54.35:2835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/new.php"] [unique_id "apK9QSJcY4fy7tP-rU0NhgAAAkc"]
[Sat Aug 29 05:06:41.732229 2026] [security2:error] [pid 1017536:tid 1017711] [client 20.151.200.44:64421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/tajj.php"] [unique_id "apK9QSJcY4fy7tP-rU0NhwAAAkE"]
[Sat Aug 29 05:06:41.758160 2026] [security2:error] [pid 1018003:tid 1018219] [client 45.61.187.50:63220] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:requests.requests.body.requests.requests.path. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "union select ,ARGS:requests.requests.body.requests.requests.path"] [severity "CRITICAL"] [tag "SQLi"] [hostname "succulentideas.com"] [uri "/wp-json/batch/v1"] [unique_id "apK9QTAh5Y1i2tUxg4H9pwAABfw"]
[Sat Aug 29 05:06:41.762519 2026] [security2:error] [pid 1017536:tid 1017767] [client 4.205.62.107:22347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/apikeys.php"] [unique_id "apK9QSJcY4fy7tP-rU0NiAAAAnk"]
[Sat Aug 29 05:06:41.772264 2026] [security2:error] [pid 1017536:tid 1017674] [client 68.155.159.216:33753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/hehehehe.php"] [unique_id "apK9QSJcY4fy7tP-rU0NiQAAAhw"]
[Sat Aug 29 05:06:41.786766 2026] [security2:error] [pid 1017536:tid 1017748] [client 4.205.62.107:65484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/nlnub.php"] [unique_id "apK9QSJcY4fy7tP-rU0NigAAAmY"]
[Sat Aug 29 05:06:41.790772 2026] [security2:error] [pid 1017536:tid 1017743] [client 4.205.62.107:22475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/aws_sdk_settings.php"] [unique_id "apK9QSJcY4fy7tP-rU0NiwAAAmE"]
[Sat Aug 29 05:06:41.802095 2026] [security2:error] [pid 1018003:tid 1018159] [client 20.48.250.41:25507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/mini.php"] [unique_id "apK9QTAh5Y1i2tUxg4H9qAAABcA"]
[Sat Aug 29 05:06:41.804582 2026] [ssl:error] [pid 1017536:tid 1017675] [client 13.219.121.241:50756] AH02032: Hostname host2038.hostmonster.com (default host as no SNI was provided) and hostname whm.haverhillmasonry.org provided via HTTP have no compatible SSL setup for policy 'secure'
[Sat Aug 29 05:06:41.812280 2026] [security2:error] [pid 1017536:tid 1017785] [client 20.63.81.20:44499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/wp-admin/w.php"] [unique_id "apK9QSJcY4fy7tP-rU0NjQAAAos"]
[Sat Aug 29 05:06:41.825928 2026] [core:error] [pid 1017536:tid 1017761] [client 45.148.10.62:38818] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:41.826922 2026] [security2:error] [pid 1017536:tid 1017784] [client 20.196.209.81:4461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/colour.php"] [unique_id "apK9QSJcY4fy7tP-rU0NjwAAAoo"]
[Sat Aug 29 05:06:41.844104 2026] [security2:error] [pid 1018003:tid 1018203] [client 20.196.209.81:17881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/extractable-loader-head.php"] [unique_id "apK9QTAh5Y1i2tUxg4H9qQAABew"]
[Sat Aug 29 05:06:41.851637 2026] [security2:error] [pid 1018003:tid 1018184] [client 45.61.187.50:63220] ModSecurity: Access denied with code 406 (phase 1). Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "187"] [id "900401"] [msg "PHP Spam Botnet"] [hostname "succulentideas.com"] [uri "/wp-json/batch/v1"] [unique_id "apK9QTAh5Y1i2tUxg4H9qgAABdk"]
[Sat Aug 29 05:06:41.859398 2026] [security2:error] [pid 1018003:tid 1018164] [client 158.23.147.79:30706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK9QTAh5Y1i2tUxg4H9qwAABcU"]
[Sat Aug 29 05:06:41.863664 2026] [security2:error] [pid 1018003:tid 1018177] [client 168.107.94.195:53063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9QTAh5Y1i2tUxg4H9rAAABdI"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:41.866920 2026] [security2:error] [pid 1017536:tid 1017707] [client 20.151.200.44:65011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/grsiuk.php"] [unique_id "apK9QSJcY4fy7tP-rU0NkQAAAj0"]
[Sat Aug 29 05:06:41.920213 2026] [security2:error] [pid 1018003:tid 1018163] [client 20.220.204.93:59041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/fs.php"] [unique_id "apK9QTAh5Y1i2tUxg4H9rQAABcQ"]
[Sat Aug 29 05:06:41.930701 2026] [security2:error] [pid 1018003:tid 1018265] [client 20.151.200.44:64286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/secret.php"] [unique_id "apK9QTAh5Y1i2tUxg4H9rgAABik"]
[Sat Aug 29 05:06:41.932193 2026] [security2:error] [pid 1018003:tid 1018188] [client 158.23.147.79:48163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK9QTAh5Y1i2tUxg4H9sAAABd0"]
[Sat Aug 29 05:06:41.941071 2026] [security2:error] [pid 1017536:tid 1017740] [client 20.63.81.20:44538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/wp-content/k.php"] [unique_id "apK9QSJcY4fy7tP-rU0NkwAAAl4"]
[Sat Aug 29 05:06:41.956784 2026] [security2:error] [pid 1017536:tid 1017713] [client 68.155.159.216:16334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-admin/includes/index.php"] [unique_id "apK9QSJcY4fy7tP-rU0NlQAAAkM"]
[Sat Aug 29 05:06:41.975377 2026] [security2:error] [pid 1017536:tid 1017698] [client 20.48.250.41:25421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/amp.php"] [unique_id "apK9QSJcY4fy7tP-rU0NlgAAAjQ"]
[Sat Aug 29 05:06:42.001217 2026] [security2:error] [pid 1018003:tid 1018218] [client 20.104.49.130:60746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9QjAh5Y1i2tUxg4H9sQAABfs"]
[Sat Aug 29 05:06:42.069441 2026] [security2:error] [pid 1017536:tid 1017683] [client 20.151.200.44:64965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/ahy66.php"] [unique_id "apK9QiJcY4fy7tP-rU0NmgAAAiU"]
[Sat Aug 29 05:06:42.072683 2026] [security2:error] [pid 1017536:tid 1017674] [client 20.63.81.20:46938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/os.php"] [unique_id "apK9QiJcY4fy7tP-rU0NmwAAAhw"]
[Sat Aug 29 05:06:42.077286 2026] [security2:error] [pid 1017536:tid 1017669] [client 158.23.147.79:30659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK9QiJcY4fy7tP-rU0NnAAAAhc"]
[Sat Aug 29 05:06:42.091176 2026] [security2:error] [pid 1018003:tid 1018167] [client 68.155.159.216:14280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.questconsultantsme.co"] [uri "/first.php"] [unique_id "apK9QjAh5Y1i2tUxg4H9swAABcg"]
[Sat Aug 29 05:06:42.106955 2026] [security2:error] [pid 1017536:tid 1017743] [client 20.48.250.41:25303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/cc13.php"] [unique_id "apK9QiJcY4fy7tP-rU0NngAAAmE"]
[Sat Aug 29 05:06:42.117676 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.220.204.93:59065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/ioxi.php"] [unique_id "apK9QiJcY4fy7tP-rU0NoAAAAh0"]
[Sat Aug 29 05:06:42.129580 2026] [security2:error] [pid 1018003:tid 1018174] [client 20.52.41.200:1745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/files.php"] [unique_id "apK9QjAh5Y1i2tUxg4H9tQAABc8"]
[Sat Aug 29 05:06:42.141063 2026] [security2:error] [pid 1017536:tid 1017786] [client 185.104.184.230:36250] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.xvo.oau.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/2019/wp-includes/wlwmanifest.xml"] [unique_id "apK9QiJcY4fy7tP-rU0NpAAAAow"]
[Sat Aug 29 05:06:42.155768 2026] [security2:error] [pid 1017536:tid 1017793] [client 40.83.93.50:1756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-content/cong.php"] [unique_id "apK9QiJcY4fy7tP-rU0NpwAAApM"]
[Sat Aug 29 05:06:42.158619 2026] [security2:error] [pid 1017536:tid 1017711] [client 158.158.54.35:34276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/menu.php"] [unique_id "apK9QiJcY4fy7tP-rU0NqAAAAkE"]
[Sat Aug 29 05:06:42.168820 2026] [security2:error] [pid 1017536:tid 1017723] [client 68.155.159.216:64458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/goods.php"] [unique_id "apK9QiJcY4fy7tP-rU0NqQAAAk0"]
[Sat Aug 29 05:06:42.174118 2026] [security2:error] [pid 1017536:tid 1017792] [client 68.155.159.216:56558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK9QiJcY4fy7tP-rU0NqgAAApI"]
[Sat Aug 29 05:06:42.210247 2026] [security2:error] [pid 1017536:tid 1017713] [client 20.151.200.44:65008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/gaje.php"] [unique_id "apK9QiJcY4fy7tP-rU0NrQAAAkM"]
[Sat Aug 29 05:06:42.212095 2026] [security2:error] [pid 1017536:tid 1017698] [client 20.63.81.20:44512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/htio.php"] [unique_id "apK9QiJcY4fy7tP-rU0NrgAAAjQ"]
[Sat Aug 29 05:06:42.219657 2026] [security2:error] [pid 1017536:tid 1017729] [client 68.155.159.216:51809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK9QiJcY4fy7tP-rU0NsAAAAlM"]
[Sat Aug 29 05:06:42.220688 2026] [security2:error] [pid 1017536:tid 1017721] [client 103.240.76.112:49710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK9QiJcY4fy7tP-rU0NsQAAAks"]
[Sat Aug 29 05:06:42.220789 2026] [security2:error] [pid 1017536:tid 1017721] [client 103.240.76.112:49710] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK9QiJcY4fy7tP-rU0NsQAAAks"]
[Sat Aug 29 05:06:42.222999 2026] [security2:error] [pid 1018003:tid 1018271] [client 20.196.209.81:3883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/OK.php"] [unique_id "apK9QjAh5Y1i2tUxg4H9uAAABi8"]
[Sat Aug 29 05:06:42.241220 2026] [security2:error] [pid 1017536:tid 1017781] [client 45.61.187.50:63344] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1584"] [id "900939"] [msg "Invalid WordPress REST batch path"] [data "ARGS:requests.requests.path=///"] [hostname "succulentideas.com"] [uri "/wp-json/batch/v1"] [unique_id "apK9QiJcY4fy7tP-rU0NsgAAAoc"]
[Sat Aug 29 05:06:42.244152 2026] [security2:error] [pid 1018003:tid 1018270] [client 4.205.62.107:56052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/olfclass.php"] [unique_id "apK9QjAh5Y1i2tUxg4H9uQAABi4"]
[Sat Aug 29 05:06:42.245437 2026] [security2:error] [pid 1018003:tid 1018216] [client 168.107.94.195:53562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9QjAh5Y1i2tUxg4H9ugAABfk"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:42.251914 2026] [security2:error] [pid 1018003:tid 1018225] [client 20.48.250.41:25377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/aa.php"] [unique_id "apK9QjAh5Y1i2tUxg4H9uwAABgI"]
[Sat Aug 29 05:06:42.260783 2026] [security2:error] [pid 1017536:tid 1017765] [client 20.220.204.93:50767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/bootstrap.php"] [unique_id "apK9QiJcY4fy7tP-rU0NswAAAnc"]
[Sat Aug 29 05:06:42.265110 2026] [security2:error] [pid 1018003:tid 1018267] [client 158.23.147.79:24430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/packed.php"] [unique_id "apK9QjAh5Y1i2tUxg4H9vQAABis"]
[Sat Aug 29 05:06:42.304219 2026] [security2:error] [pid 1017536:tid 1017705] [client 4.205.62.107:53322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/linusadmin-phpinfo.php"] [unique_id "apK9QiJcY4fy7tP-rU0NtAAAAjs"]
[Sat Aug 29 05:06:42.310433 2026] [security2:error] [pid 1017536:tid 1017704] [client 20.196.209.81:17910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/defaults.php"] [unique_id "apK9QiJcY4fy7tP-rU0NtQAAAjo"]
[Sat Aug 29 05:06:42.345293 2026] [security2:error] [pid 1017536:tid 1017724] [client 20.63.81.20:46890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/dev.php"] [unique_id "apK9QiJcY4fy7tP-rU0NuAAAAk4"]
[Sat Aug 29 05:06:42.362242 2026] [security2:error] [pid 1017536:tid 1017785] [client 60.243.207.176:60677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK9QiJcY4fy7tP-rU0NuQAAAos"]
[Sat Aug 29 05:06:42.362803 2026] [security2:error] [pid 1017536:tid 1017785] [client 60.243.207.176:60677] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK9QiJcY4fy7tP-rU0NuQAAAos"]
[Sat Aug 29 05:06:42.371810 2026] [security2:error] [pid 1017536:tid 1017711] [client 158.23.147.79:25490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-admin.php"] [unique_id "apK9QiJcY4fy7tP-rU0NugAAAkE"]
[Sat Aug 29 05:06:42.375401 2026] [security2:error] [pid 1017536:tid 1017723] [client 45.61.187.50:63344] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.body.requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1600"] [id "900941"] [msg "Invalid nested WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.body.requests.requests.path=///"] [hostname "succulentideas.com"] [uri "/"] [unique_id "apK9QiJcY4fy7tP-rU0NuwAAAk0"]
[Sat Aug 29 05:06:42.383330 2026] [security2:error] [pid 1018003:tid 1018160] [client 20.48.250.41:25420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/s1.php"] [unique_id "apK9QjAh5Y1i2tUxg4H9vgAABcE"]
[Sat Aug 29 05:06:42.390686 2026] [security2:error] [pid 1017536:tid 1017712] [client 20.151.200.44:64317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/pro.php"] [unique_id "apK9QiJcY4fy7tP-rU0NvAAAAkI"]
[Sat Aug 29 05:06:42.393168 2026] [security2:error] [pid 1017536:tid 1017673] [client 20.197.61.180:7202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/update.php"] [unique_id "apK9QiJcY4fy7tP-rU0NvgAAAhs"]
[Sat Aug 29 05:06:42.399731 2026] [security2:error] [pid 1017536:tid 1017717] [client 20.220.204.93:59044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/export.php"] [unique_id "apK9QiJcY4fy7tP-rU0NvwAAAkc"]
[Sat Aug 29 05:06:42.414019 2026] [security2:error] [pid 1018003:tid 1018212] [client 68.155.159.216:6143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9QjAh5Y1i2tUxg4H9wAAABfU"]
[Sat Aug 29 05:06:42.447851 2026] [security2:error] [pid 1018003:tid 1018198] [client 68.155.159.216:12204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/mah.php"] [unique_id "apK9QjAh5Y1i2tUxg4H9wgAABec"]
[Sat Aug 29 05:06:42.471835 2026] [security2:error] [pid 1018003:tid 1018261] [client 20.151.200.44:65051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/wp-admin/zwso.php"] [unique_id "apK9QjAh5Y1i2tUxg4H9wwAABiU"]
[Sat Aug 29 05:06:42.472711 2026] [security2:error] [pid 1017536:tid 1017784] [client 45.61.187.50:63344] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1584"] [id "900939"] [msg "Invalid WordPress REST batch path"] [data "ARGS:requests.requests.path=///"] [hostname "succulentideas.com"] [uri "/wp-json/batch/v1"] [unique_id "apK9QiJcY4fy7tP-rU0NwgAAAoo"]
[Sat Aug 29 05:06:42.480025 2026] [security2:error] [pid 1018003:tid 1018162] [client 20.63.81.20:46873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/gos.php"] [unique_id "apK9QjAh5Y1i2tUxg4H9xAAABcM"]
[Sat Aug 29 05:06:42.509800 2026] [security2:error] [pid 1018003:tid 1018175] [client 68.155.159.216:30687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK9QjAh5Y1i2tUxg4H9xQAABdA"]
[Sat Aug 29 05:06:42.515649 2026] [core:error] [pid 1017536:tid 1017786] [client 45.148.10.62:38824] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:42.515666 2026] [core:error] [pid 1017536:tid 1017786] [client 45.148.10.62:38824] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:42.516816 2026] [cgid:error] [pid 1017536:tid 1017792] [client 34.7.40.70:4840] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:42.522103 2026] [cgid:error] [pid 1017536:tid 1017751] [client 34.7.40.70:4946] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:42.523657 2026] [cgid:error] [pid 1017536:tid 1017696] [client 34.7.40.70:4928] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:42.524652 2026] [cgid:error] [pid 1017536:tid 1017753] [client 34.7.40.70:4874] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:42.524954 2026] [security2:error] [pid 1017536:tid 1017745] [client 34.7.40.70:4830] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/creds.json"] [unique_id "apK9QiJcY4fy7tP-rU0NzAAAAmM"]
[Sat Aug 29 05:06:42.525136 2026] [cgid:error] [pid 1017536:tid 1017776] [client 34.7.40.70:4848] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:42.525452 2026] [cgid:error] [pid 1017536:tid 1017748] [client 34.7.40.70:4956] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:42.525926 2026] [cgid:error] [pid 1017536:tid 1017780] [client 34.7.40.70:4898] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:42.526041 2026] [cgid:error] [pid 1018003:tid 1018195] [client 34.7.40.70:4870] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:42.527471 2026] [cgid:error] [pid 1017536:tid 1017695] [client 34.7.40.70:4922] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:42.527578 2026] [cgid:error] [pid 1017536:tid 1017698] [client 34.7.40.70:4864] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:42.527834 2026] [cgid:error] [pid 1017536:tid 1017732] [client 34.7.40.70:4892] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:42.528435 2026] [cgid:error] [pid 1018003:tid 1018250] [client 34.7.40.70:4934] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:42.528488 2026] [cgid:error] [pid 1017536:tid 1017713] [client 34.7.40.70:4884] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:42.531081 2026] [cgid:error] [pid 1017536:tid 1017752] [client 34.7.40.70:4902] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:42.531605 2026] [cgid:error] [pid 1017536:tid 1017790] [client 34.7.40.70:4910] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:42.534779 2026] [security2:error] [pid 1018003:tid 1018238] [client 158.23.147.79:53784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-content/banners/about.php"] [unique_id "apK9QjAh5Y1i2tUxg4H9yAAABg4"]
[Sat Aug 29 05:06:42.547146 2026] [security2:error] [pid 1018003:tid 1018207] [client 20.220.204.93:50759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/gk.php"] [unique_id "apK9QjAh5Y1i2tUxg4H9yQAABfA"]
[Sat Aug 29 05:06:42.567826 2026] [security2:error] [pid 1017536:tid 1017785] [client 20.48.250.41:25284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/0byte.php"] [unique_id "apK9QiJcY4fy7tP-rU0N0wAAAos"]
[Sat Aug 29 05:06:42.569081 2026] [security2:error] [pid 1018003:tid 1018187] [client 20.104.49.130:34533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/css.php"] [unique_id "apK9QjAh5Y1i2tUxg4H9ygAABdw"]
[Sat Aug 29 05:06:42.572541 2026] [security2:error] [pid 1017536:tid 1017710] [client 213.202.253.4:50110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bv-place.com"] [uri "/txets.php"] [unique_id "apK9QiJcY4fy7tP-rU0N1QAAAkA"], referer: www.google.com
[Sat Aug 29 05:06:42.580549 2026] [security2:error] [pid 1018003:tid 1018182] [client 20.52.41.200:1774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/o.php"] [unique_id "apK9QjAh5Y1i2tUxg4H9ywAABdc"]
[Sat Aug 29 05:06:42.583171 2026] [security2:error] [pid 1017536:tid 1017770] [client 45.61.187.50:63344] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.body.requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1600"] [id "900941"] [msg "Invalid nested WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.body.requests.requests.path=///"] [hostname "succulentideas.com"] [uri "/"] [unique_id "apK9QiJcY4fy7tP-rU0N1gAAAnw"]
[Sat Aug 29 05:06:42.617256 2026] [security2:error] [pid 1018003:tid 1018219] [client 20.63.81.20:46966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/132.php"] [unique_id "apK9QjAh5Y1i2tUxg4H9zAAABfw"]
[Sat Aug 29 05:06:42.626933 2026] [security2:error] [pid 1017536:tid 1017733] [client 168.107.94.195:53984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9QiJcY4fy7tP-rU0N2wAAAlc"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:42.628565 2026] [security2:error] [pid 1018003:tid 1018156] [client 158.158.54.35:4865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK9QjAh5Y1i2tUxg4H9zQAABb0"]
[Sat Aug 29 05:06:42.629030 2026] [security2:error] [pid 1017536:tid 1017683] [client 4.205.62.107:22275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/radio.php"] [unique_id "apK9QiJcY4fy7tP-rU0N3QAAAiU"]
[Sat Aug 29 05:06:42.629050 2026] [security2:error] [pid 1018003:tid 1018191] [client 40.83.93.50:10842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-content/content.php"] [unique_id "apK9QjAh5Y1i2tUxg4H9zgAABeA"]
[Sat Aug 29 05:06:42.677407 2026] [security2:error] [pid 1017536:tid 1017743] [client 158.23.147.79:26605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK9QiJcY4fy7tP-rU0N4AAAAmE"]
[Sat Aug 29 05:06:42.683273 2026] [security2:error] [pid 1017536:tid 1017731] [client 20.196.209.81:19414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.merlynscatering.net"] [uri "/aaa.php"] [unique_id "apK9QiJcY4fy7tP-rU0N4QAAAlU"]
[Sat Aug 29 05:06:42.683923 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.220.204.93:52313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/logs1.php"] [unique_id "apK9QiJcY4fy7tP-rU0N4gAAAh0"]
[Sat Aug 29 05:06:42.689147 2026] [security2:error] [pid 1017536:tid 1017744] [client 20.151.200.44:64997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/Contrller.php"] [unique_id "apK9QiJcY4fy7tP-rU0N5AAAAmI"]
[Sat Aug 29 05:06:42.690221 2026] [security2:error] [pid 1017536:tid 1017761] [client 45.61.187.50:63344] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1584"] [id "900939"] [msg "Invalid WordPress REST batch path"] [data "ARGS:requests.requests.path=///"] [hostname "succulentideas.com"] [uri "/wp-json/batch/v1"] [unique_id "apK9QiJcY4fy7tP-rU0N4wAAAnM"]
[Sat Aug 29 05:06:42.702986 2026] [security2:error] [pid 1017536:tid 1017792] [client 158.23.147.79:62686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/nf_tracking.php"] [unique_id "apK9QiJcY4fy7tP-rU0N5QAAApI"]
[Sat Aug 29 05:06:42.713043 2026] [security2:error] [pid 1017536:tid 1017751] [client 20.48.250.41:25416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/xr.php"] [unique_id "apK9QiJcY4fy7tP-rU0N5gAAAmk"]
[Sat Aug 29 05:06:42.720086 2026] [security2:error] [pid 1018003:tid 1018177] [client 68.155.159.216:52743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-content/cong.php"] [unique_id "apK9QjAh5Y1i2tUxg4H9zwAABdI"]
[Sat Aug 29 05:06:42.748778 2026] [security2:error] [pid 1017536:tid 1017704] [client 20.63.81.20:41885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/v22.php"] [unique_id "apK9QiJcY4fy7tP-rU0N5wAAAjo"]
[Sat Aug 29 05:06:42.749384 2026] [security2:error] [pid 1017536:tid 1017736] [client 20.196.209.81:4112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/post.php"] [unique_id "apK9QiJcY4fy7tP-rU0N6AAAAlo"]
[Sat Aug 29 05:06:42.749408 2026] [security2:error] [pid 1018003:tid 1018196] [client 158.23.147.79:17475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-admin/about.php"] [unique_id "apK9QjAh5Y1i2tUxg4H90AAABeU"]
[Sat Aug 29 05:06:42.754808 2026] [security2:error] [pid 1017536:tid 1017667] [client 185.104.184.230:36252] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.xvo.oau.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/wp1/wp-includes/wlwmanifest.xml"] [unique_id "apK9QiJcY4fy7tP-rU0N6QAAAhU"]
[Sat Aug 29 05:06:42.785286 2026] [security2:error] [pid 1017536:tid 1017695] [client 20.104.49.130:60786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/kerang.php"] [unique_id "apK9QiJcY4fy7tP-rU0N6wAAAjE"]
[Sat Aug 29 05:06:42.785855 2026] [security2:error] [pid 1017536:tid 1017698] [client 20.151.200.44:61957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/999.php"] [unique_id "apK9QiJcY4fy7tP-rU0N7AAAAjQ"]
[Sat Aug 29 05:06:42.799294 2026] [security2:error] [pid 1017536:tid 1017713] [client 45.61.187.50:63344] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.body.requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1600"] [id "900941"] [msg "Invalid nested WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.body.requests.requests.path=///"] [hostname "succulentideas.com"] [uri "/"] [unique_id "apK9QiJcY4fy7tP-rU0N7gAAAkM"]
[Sat Aug 29 05:06:42.806850 2026] [security2:error] [pid 1017536:tid 1017752] [client 68.155.159.216:18242] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcalendars.cisagency.com"] [uri "/1.php"] [unique_id "apK9QiJcY4fy7tP-rU0N7wAAAmo"]
[Sat Aug 29 05:06:42.806967 2026] [security2:error] [pid 1017536:tid 1017752] [client 68.155.159.216:18242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/1.php"] [unique_id "apK9QiJcY4fy7tP-rU0N7wAAAmo"]
[Sat Aug 29 05:06:42.836651 2026] [security2:error] [pid 1017536:tid 1017669] [client 158.23.147.79:35730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK9QiJcY4fy7tP-rU0N8QAAAhc"]
[Sat Aug 29 05:06:42.856170 2026] [security2:error] [pid 1017536:tid 1017770] [client 20.48.250.41:25353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/h02ugyh.php"] [unique_id "apK9QiJcY4fy7tP-rU0N8gAAAnw"]
[Sat Aug 29 05:06:42.884800 2026] [security2:error] [pid 1017536:tid 1017711] [client 20.63.81.20:41940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/wp-activate.php"] [unique_id "apK9QiJcY4fy7tP-rU0N8wAAAkE"]
[Sat Aug 29 05:06:42.885892 2026] [security2:error] [pid 1017536:tid 1017721] [client 68.155.159.216:33616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK9QiJcY4fy7tP-rU0N9AAAAks"]
[Sat Aug 29 05:06:42.899350 2026] [security2:error] [pid 1018003:tid 1018163] [client 4.205.62.107:22300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/god.php"] [unique_id "apK9QjAh5Y1i2tUxg4H90wAABcQ"]
[Sat Aug 29 05:06:42.910837 2026] [security2:error] [pid 1018003:tid 1018188] [client 20.220.204.93:59115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/inege.php"] [unique_id "apK9QjAh5Y1i2tUxg4H91QAABd0"]
[Sat Aug 29 05:06:42.927300 2026] [security2:error] [pid 1018003:tid 1018255] [client 4.205.62.107:22457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/mga.php"] [unique_id "apK9QjAh5Y1i2tUxg4H91gAABh8"]
[Sat Aug 29 05:06:42.929646 2026] [security2:error] [pid 1017536:tid 1017761] [client 4.205.62.107:26630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/mga.php"] [unique_id "apK9QiJcY4fy7tP-rU0N-gAAAnM"]
[Sat Aug 29 05:06:42.929708 2026] [security2:error] [pid 1017536:tid 1017731] [client 57.141.14.89:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/"] [unique_id "apK9QiJcY4fy7tP-rU0N-QAAAlU"]
[Sat Aug 29 05:06:42.950008 2026] [security2:error] [pid 1017536:tid 1017729] [client 20.151.200.44:65060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/Zeiss.php"] [unique_id "apK9QiJcY4fy7tP-rU0N_AAAAlM"]
[Sat Aug 29 05:06:42.969963 2026] [security2:error] [pid 1017536:tid 1017745] [client 158.23.147.79:30490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/plugins.php"] [unique_id "apK9QiJcY4fy7tP-rU0N_wAAAmM"]
[Sat Aug 29 05:06:43.006763 2026] [security2:error] [pid 1017536:tid 1017698] [client 168.107.94.195:54244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9QyJcY4fy7tP-rU0OBQAAAjQ"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:43.012208 2026] [security2:error] [pid 1017536:tid 1017724] [client 20.48.250.41:25462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/xxw.php"] [unique_id "apK9QyJcY4fy7tP-rU0OBwAAAk4"]
[Sat Aug 29 05:06:43.014041 2026] [security2:error] [pid 1017536:tid 1017785] [client 20.63.81.20:46948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/wp-trackback.php"] [unique_id "apK9QyJcY4fy7tP-rU0OCAAAAos"]
[Sat Aug 29 05:06:43.036288 2026] [security2:error] [pid 1018003:tid 1018167] [client 158.23.147.79:48336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-admin/images/about.php"] [unique_id "apK9QzAh5Y1i2tUxg4H92QAABcg"]
[Sat Aug 29 05:06:43.036423 2026] [security2:error] [pid 1017536:tid 1017781] [client 20.52.41.200:1159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/file2.php"] [unique_id "apK9QyJcY4fy7tP-rU0OCgAAAoc"]
[Sat Aug 29 05:06:43.050147 2026] [security2:error] [pid 1017536:tid 1017712] [client 20.220.204.93:59095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/wp-link10.php"] [unique_id "apK9QyJcY4fy7tP-rU0ODAAAAkI"]
[Sat Aug 29 05:06:43.065941 2026] [security2:error] [pid 1017536:tid 1017721] [client 68.155.159.216:16350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-login.php"] [unique_id "apK9QyJcY4fy7tP-rU0ODQAAAks"]
[Sat Aug 29 05:06:43.068239 2026] [core:error] [pid 1018003:tid 1018230] [client 158.158.54.35:15206] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:43.068258 2026] [core:error] [pid 1018003:tid 1018230] [client 158.158.54.35:15206] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:43.101941 2026] [security2:error] [pid 1017536:tid 1017678] [client 40.83.93.50:1770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-content/core.php"] [unique_id "apK9QyJcY4fy7tP-rU0ODgAAAiA"]
[Sat Aug 29 05:06:43.119286 2026] [security2:error] [pid 1017536:tid 1017673] [client 20.197.61.180:8913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/blog.php"] [unique_id "apK9QyJcY4fy7tP-rU0ODwAAAhs"]
[Sat Aug 29 05:06:43.123258 2026] [security2:error] [pid 1017536:tid 1017696] [client 20.104.49.130:20620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.danesquality.com"] [uri "/kgoc6awap3napxxxdCdefault.php"] [unique_id "apK9QyJcY4fy7tP-rU0OEAAAAjI"]
[Sat Aug 29 05:06:43.130796 2026] [security2:error] [pid 1017536:tid 1017732] [client 45.61.187.50:63554] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "succulentideas.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "apK9QyJcY4fy7tP-rU0OEQAAAlY"]
[Sat Aug 29 05:06:43.141818 2026] [security2:error] [pid 1017536:tid 1017637] [remote 74.7.227.189:50368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 189.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pinnacleforms.com"] [uri "/ist4isp.php"] [unique_id "apK9QyJcY4fy7tP-rU0OEgACHGQ"], referer: https://mail.pinnacleforms.com/
[Sat Aug 29 05:06:43.145753 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.63.81.20:46957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/pri.php"] [unique_id "apK9QyJcY4fy7tP-rU0OEwAAAh0"]
[Sat Aug 29 05:06:43.151191 2026] [security2:error] [pid 1017536:tid 1017793] [client 20.196.209.81:4130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/csv.php"] [unique_id "apK9QyJcY4fy7tP-rU0OFAAAApM"]
[Sat Aug 29 05:06:43.163482 2026] [security2:error] [pid 1017536:tid 1017792] [client 20.48.250.41:25403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/bolt.php"] [unique_id "apK9QyJcY4fy7tP-rU0OFQAAApI"]
[Sat Aug 29 05:06:43.170138 2026] [security2:error] [pid 1017536:tid 1017717] [client 158.23.147.79:32589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/login.php"] [unique_id "apK9QyJcY4fy7tP-rU0OFwAAAkc"]
[Sat Aug 29 05:06:43.179209 2026] [security2:error] [pid 1017536:tid 1017705] [client 158.23.147.79:30564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK9QyJcY4fy7tP-rU0OGAAAAjs"]
[Sat Aug 29 05:06:43.191912 2026] [security2:error] [pid 1018003:tid 1018225] [client 20.220.204.93:50761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/ww.php"] [unique_id "apK9QzAh5Y1i2tUxg4H92wAABgI"]
[Sat Aug 29 05:06:43.277062 2026] [security2:error] [pid 1018003:tid 1018231] [client 68.155.159.216:65089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK9QzAh5Y1i2tUxg4H93AAABgc"]
[Sat Aug 29 05:06:43.278460 2026] [security2:error] [pid 1017536:tid 1017709] [client 20.151.200.44:64334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/ww2.php"] [unique_id "apK9QyJcY4fy7tP-rU0OIgAAAj8"]
[Sat Aug 29 05:06:43.278891 2026] [security2:error] [pid 1017536:tid 1017673] [client 68.155.159.216:38674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/simple.php"] [unique_id "apK9QyJcY4fy7tP-rU0OIwAAAhs"]
[Sat Aug 29 05:06:43.285133 2026] [core:error] [pid 1018003:tid 1018239] [client 45.148.10.62:38840] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:43.285147 2026] [core:error] [pid 1018003:tid 1018239] [client 45.148.10.62:38840] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:43.301692 2026] [security2:error] [pid 1018003:tid 1018226] [client 20.48.250.41:25375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/rtx.php"] [unique_id "apK9QzAh5Y1i2tUxg4H93gAABgM"]
[Sat Aug 29 05:06:43.302440 2026] [security2:error] [pid 1018003:tid 1018256] [client 20.63.81.20:46911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/wp_blog_footer.php"] [unique_id "apK9QzAh5Y1i2tUxg4H93wAABiA"]
[Sat Aug 29 05:06:43.349997 2026] [security2:error] [pid 1017536:tid 1017711] [client 185.104.184.230:36262] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.xvo.oau.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/test/wp-includes/wlwmanifest.xml"] [unique_id "apK9QyJcY4fy7tP-rU0OJQAAAkE"]
[Sat Aug 29 05:06:43.355398 2026] [security2:error] [pid 1018003:tid 1018172] [client 20.220.204.93:52287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/w1px.php"] [unique_id "apK9QzAh5Y1i2tUxg4H94gAABc0"]
[Sat Aug 29 05:06:43.356047 2026] [security2:error] [pid 1017536:tid 1017705] [client 68.155.159.216:50289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/.well-knownold/index.php"] [unique_id "apK9QyJcY4fy7tP-rU0OJgAAAjs"]
[Sat Aug 29 05:06:43.374058 2026] [security2:error] [pid 1018003:tid 1018155] [client 68.155.159.216:51433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK9QzAh5Y1i2tUxg4H94wAABbw"]
[Sat Aug 29 05:06:43.374436 2026] [security2:error] [pid 1017536:tid 1017753] [client 4.205.62.107:55949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/gnmlc.php"] [unique_id "apK9QyJcY4fy7tP-rU0OJwAAAms"]
[Sat Aug 29 05:06:43.385144 2026] [security2:error] [pid 1018003:tid 1018190] [client 168.107.94.195:54592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9QzAh5Y1i2tUxg4H95AAABd8"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:43.406678 2026] [security2:error] [pid 1018003:tid 1018261] [client 20.151.200.44:65005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/anz.php"] [unique_id "apK9QzAh5Y1i2tUxg4H95QAABiU"]
[Sat Aug 29 05:06:43.448117 2026] [security2:error] [pid 1017536:tid 1017776] [client 20.151.200.44:64837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/sef.php"] [unique_id "apK9QyJcY4fy7tP-rU0OLAAAAoI"]
[Sat Aug 29 05:06:43.451857 2026] [security2:error] [pid 1017536:tid 1017767] [client 20.63.81.20:44495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/sushi.php"] [unique_id "apK9QyJcY4fy7tP-rU0OLQAAAnk"]
[Sat Aug 29 05:06:43.459749 2026] [security2:error] [pid 1017536:tid 1017765] [client 20.48.250.41:25371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/ckk.php"] [unique_id "apK9QyJcY4fy7tP-rU0OMQAAAnc"]
[Sat Aug 29 05:06:43.461265 2026] [security2:error] [pid 1017536:tid 1017780] [client 4.205.62.107:53416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/routes.php"] [unique_id "apK9QyJcY4fy7tP-rU0OMgAAAoY"]
[Sat Aug 29 05:06:43.478018 2026] [security2:error] [pid 1017536:tid 1017695] [client 158.23.147.79:25426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK9QyJcY4fy7tP-rU0ONQAAAjE"]
[Sat Aug 29 05:06:43.492631 2026] [security2:error] [pid 1018003:tid 1018198] [client 20.52.41.200:1423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK9QzAh5Y1i2tUxg4H96gAABec"]
[Sat Aug 29 05:06:43.512753 2026] [security2:error] [pid 1017536:tid 1017790] [client 158.158.54.35:4871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/lite.php"] [unique_id "apK9QyJcY4fy7tP-rU0OOQAAApA"]
[Sat Aug 29 05:06:43.519901 2026] [security2:error] [pid 1017536:tid 1017713] [client 68.155.159.216:6081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9QyJcY4fy7tP-rU0OOgAAAkM"]
[Sat Aug 29 05:06:43.531779 2026] [security2:error] [pid 1017536:tid 1017784] [client 197.219.150.206:60297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK9QyJcY4fy7tP-rU0OPAAAAoo"]
[Sat Aug 29 05:06:43.531894 2026] [security2:error] [pid 1017536:tid 1017784] [client 197.219.150.206:60297] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK9QyJcY4fy7tP-rU0OPAAAAoo"]
[Sat Aug 29 05:06:43.565020 2026] [security2:error] [pid 1017536:tid 1017778] [client 136.107.231.130:29358] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "alanmossman.mossmanphoto.com"] [uri "/docker-compose.yml"] [unique_id "apK9QyJcY4fy7tP-rU0OPwAAAoQ"]
[Sat Aug 29 05:06:43.570871 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.220.204.93:52345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/to.php"] [unique_id "apK9QyJcY4fy7tP-rU0OQgAAAlY"]
[Sat Aug 29 05:06:43.583504 2026] [security2:error] [pid 1018003:tid 1018191] [client 20.63.81.20:44522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/manga.php"] [unique_id "apK9QzAh5Y1i2tUxg4H97wAABeA"]
[Sat Aug 29 05:06:43.584671 2026] [security2:error] [pid 1017536:tid 1017737] [client 40.83.93.50:1601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-content/db-status.php"] [unique_id "apK9QyJcY4fy7tP-rU0ORQAAAls"]
[Sat Aug 29 05:06:43.601601 2026] [security2:error] [pid 1018003:tid 1018217] [client 20.151.200.44:64393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/bge.php"] [unique_id "apK9QzAh5Y1i2tUxg4H98AAABfo"]
[Sat Aug 29 05:06:43.604766 2026] [security2:error] [pid 1017536:tid 1017761] [client 20.48.250.41:25368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.oncesocial.com"] [uri "/R57.php"] [unique_id "apK9QyJcY4fy7tP-rU0ORgAAAnM"]
[Sat Aug 29 05:06:43.614937 2026] [security2:error] [pid 1017536:tid 1017792] [client 68.155.159.216:30593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/chosen.php"] [unique_id "apK9QyJcY4fy7tP-rU0OSQAAApI"]
[Sat Aug 29 05:06:43.621632 2026] [security2:error] [pid 1018003:tid 1018175] [client 20.196.209.81:4142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/fox.php"] [unique_id "apK9QzAh5Y1i2tUxg4H98wAABdA"]
[Sat Aug 29 05:06:43.674505 2026] [security2:error] [pid 1017536:tid 1017790] [client 158.23.147.79:61616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK9QyJcY4fy7tP-rU0OUAAAApA"]
[Sat Aug 29 05:06:43.688641 2026] [security2:error] [pid 1017536:tid 1017752] [client 136.107.231.130:29364] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "alanmossman.mossmanphoto.com"] [uri "/.anthropic/config.json"] [unique_id "apK9QyJcY4fy7tP-rU0OUQAAAmo"]
[Sat Aug 29 05:06:43.701765 2026] [security2:error] [pid 1017536:tid 1017731] [client 103.171.189.88:55805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9QyJcY4fy7tP-rU0OUgAAAlU"]
[Sat Aug 29 05:06:43.701886 2026] [security2:error] [pid 1017536:tid 1017731] [client 103.171.189.88:55805] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9QyJcY4fy7tP-rU0OUgAAAlU"]
[Sat Aug 29 05:06:43.712524 2026] [security2:error] [pid 1018003:tid 1018196] [client 20.220.204.93:59127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/thui.php"] [unique_id "apK9QzAh5Y1i2tUxg4H99QAABeU"]
[Sat Aug 29 05:06:43.725546 2026] [security2:error] [pid 1018003:tid 1018266] [client 20.151.200.44:64298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/admin123.php"] [unique_id "apK9QzAh5Y1i2tUxg4H99gAABio"]
[Sat Aug 29 05:06:43.730413 2026] [security2:error] [pid 1017536:tid 1017743] [client 136.107.231.130:29384] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "alanmossman.mossmanphoto.com"] [uri "/.codex/config.toml"] [unique_id "apK9QyJcY4fy7tP-rU0OVAAAAmE"]
[Sat Aug 29 05:06:43.731385 2026] [security2:error] [pid 1017536:tid 1017778] [client 20.63.81.20:44446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/asdfghj.php"] [unique_id "apK9QyJcY4fy7tP-rU0OVQAAAoQ"]
[Sat Aug 29 05:06:43.746478 2026] [security2:error] [pid 1017536:tid 1017709] [client 136.107.231.130:29364] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/.hermes/.env"] [unique_id "apK9QyJcY4fy7tP-rU0OVgAAAj8"]
[Sat Aug 29 05:06:43.765613 2026] [security2:error] [pid 1017536:tid 1017737] [client 168.107.94.195:54955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9QyJcY4fy7tP-rU0OVwAAAls"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:43.766785 2026] [security2:error] [pid 1017536:tid 1017674] [client 4.205.62.107:22225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/xa.php"] [unique_id "apK9QyJcY4fy7tP-rU0OWAAAAhw"]
[Sat Aug 29 05:06:43.770047 2026] [security2:error] [pid 1018003:tid 1018188] [client 158.23.147.79:50060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK9QzAh5Y1i2tUxg4H9-AAABd0"]
[Sat Aug 29 05:06:43.783176 2026] [security2:error] [pid 1017536:tid 1017740] [client 136.107.231.130:29384] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "alanmossman.mossmanphoto.com"] [uri "/.hermes/config.yaml"] [unique_id "apK9QyJcY4fy7tP-rU0OWQAAAl4"]
[Sat Aug 29 05:06:43.787638 2026] [security2:error] [pid 1018003:tid 1018255] [client 158.23.147.79:26559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK9QzAh5Y1i2tUxg4H9-wAABh8"]
[Sat Aug 29 05:06:43.803999 2026] [security2:error] [pid 1017536:tid 1017761] [client 136.107.231.130:29364] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "alanmossman.mossmanphoto.com"] [uri "/.openclaw/.env"] [unique_id "apK9QyJcY4fy7tP-rU0OXQAAAnM"]
[Sat Aug 29 05:06:43.804113 2026] [security2:error] [pid 1017536:tid 1017761] [client 136.107.231.130:29364] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "alanmossman.mossmanphoto.com"] [uri "/.openclaw/.env"] [unique_id "apK9QyJcY4fy7tP-rU0OXQAAAnM"]
[Sat Aug 29 05:06:43.828564 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.197.61.180:7220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/bypass.php"] [unique_id "apK9QyJcY4fy7tP-rU0OYwAAAh0"]
[Sat Aug 29 05:06:43.835899 2026] [security2:error] [pid 1017536:tid 1017770] [client 68.155.159.216:52816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK9QyJcY4fy7tP-rU0OZAAAAnw"]
[Sat Aug 29 05:06:43.840579 2026] [security2:error] [pid 1018003:tid 1018218] [client 20.151.200.44:65015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/wp-ana.php"] [unique_id "apK9QzAh5Y1i2tUxg4H9_QAABfs"]
[Sat Aug 29 05:06:43.861991 2026] [security2:error] [pid 1017536:tid 1017695] [client 20.63.81.20:44529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/dragonshell.php"] [unique_id "apK9QyJcY4fy7tP-rU0OZgAAAjE"]
[Sat Aug 29 05:06:43.862197 2026] [security2:error] [pid 1017536:tid 1017733] [client 20.220.204.93:52351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/Jcrop.php"] [unique_id "apK9QyJcY4fy7tP-rU0OZwAAAlc"]
[Sat Aug 29 05:06:43.868346 2026] [security2:error] [pid 1017536:tid 1017710] [client 158.23.147.79:17490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK9QyJcY4fy7tP-rU0OagAAAkA"]
[Sat Aug 29 05:06:43.887784 2026] [security2:error] [pid 1017536:tid 1017696] [client 20.151.200.44:46595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9QyJcY4fy7tP-rU0ObAAAAjI"]
[Sat Aug 29 05:06:43.923589 2026] [security2:error] [pid 1017536:tid 1017683] [client 68.155.159.216:18427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/ws.php"] [unique_id "apK9QyJcY4fy7tP-rU0ObwAAAiU"]
[Sat Aug 29 05:06:43.943441 2026] [security2:error] [pid 1017536:tid 1017765] [client 185.104.184.230:36270] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.xvo.oau.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/media/wp-includes/wlwmanifest.xml"] [unique_id "apK9QyJcY4fy7tP-rU0OcQAAAnc"]
[Sat Aug 29 05:06:43.945823 2026] [core:error] [pid 1018003:tid 1018222] [client 45.148.10.62:49700] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:43.945844 2026] [core:error] [pid 1018003:tid 1018222] [client 45.148.10.62:49700] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:43.947415 2026] [security2:error] [pid 1017536:tid 1017678] [client 158.23.147.79:35823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK9QyJcY4fy7tP-rU0OcgAAAiA"]
[Sat Aug 29 05:06:43.951246 2026] [security2:error] [pid 1018003:tid 1018180] [client 136.107.231.130:29380] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "alanmossman.mossmanphoto.com"] [uri "/awsConfig.js"] [unique_id "apK9QzAh5Y1i2tUxg4H-AQAABdU"]
[Sat Aug 29 05:06:43.955669 2026] [security2:error] [pid 1017536:tid 1017694] [client 20.52.41.200:1766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/xda.php"] [unique_id "apK9QyJcY4fy7tP-rU0OdQAAAjA"]
[Sat Aug 29 05:06:43.960122 2026] [security2:error] [pid 1017536:tid 1017717] [client 158.158.54.35:20300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/term.php"] [unique_id "apK9QyJcY4fy7tP-rU0OdwAAAkc"]
[Sat Aug 29 05:06:43.989273 2026] [security2:error] [pid 1017536:tid 1017724] [client 68.155.159.216:33746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-content/admin.php"] [unique_id "apK9QyJcY4fy7tP-rU0OegAAAk4"]
[Sat Aug 29 05:06:43.990869 2026] [security2:error] [pid 1018003:tid 1018194] [client 20.63.81.20:44516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/wp-safe.php"] [unique_id "apK9QzAh5Y1i2tUxg4H-AgAABeM"]
[Sat Aug 29 05:06:44.028386 2026] [security2:error] [pid 1018003:tid 1018166] [client 20.196.209.81:9458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/disagraeosc.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-BQAABcc"]
[Sat Aug 29 05:06:44.035644 2026] [security2:error] [pid 1017536:tid 1017675] [client 4.205.62.107:22354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/fleen.php"] [unique_id "apK9RCJcY4fy7tP-rU0OfQAAAh0"]
[Sat Aug 29 05:06:44.051013 2026] [security2:error] [pid 1018003:tid 1018216] [client 20.220.204.93:59076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/ws58.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-BgAABfk"]
[Sat Aug 29 05:06:44.060296 2026] [security2:error] [pid 1017536:tid 1017672] [client 20.151.200.44:64423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/secret.php"] [unique_id "apK9RCJcY4fy7tP-rU0OfwAAAho"]
[Sat Aug 29 05:06:44.065661 2026] [security2:error] [pid 1017536:tid 1017770] [client 4.205.62.107:21844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/konfig.php"] [unique_id "apK9RCJcY4fy7tP-rU0OgQAAAnw"]
[Sat Aug 29 05:06:44.065678 2026] [security2:error] [pid 1017536:tid 1017745] [client 4.205.62.107:65509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/ccou.php"] [unique_id "apK9RCJcY4fy7tP-rU0OggAAAmM"]
[Sat Aug 29 05:06:44.090652 2026] [security2:error] [pid 1017536:tid 1017713] [client 40.83.93.50:1645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-content/disagrsxr.php"] [unique_id "apK9RCJcY4fy7tP-rU0OgwAAAkM"]
[Sat Aug 29 05:06:44.096388 2026] [security2:error] [pid 1018003:tid 1018189] [client 149.34.210.141:59355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-BwAABd4"]
[Sat Aug 29 05:06:44.096509 2026] [security2:error] [pid 1018003:tid 1018189] [client 149.34.210.141:59355] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-BwAABd4"]
[Sat Aug 29 05:06:44.144614 2026] [security2:error] [pid 1017536:tid 1017790] [client 158.23.147.79:48185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK9RCJcY4fy7tP-rU0OhAAAApA"]
[Sat Aug 29 05:06:44.146015 2026] [security2:error] [pid 1017536:tid 1017698] [client 168.107.94.195:55319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9RCJcY4fy7tP-rU0OhgAAAjQ"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:44.148103 2026] [security2:error] [pid 1018003:tid 1018186] [client 20.63.81.20:44503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/gjewuagf.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-CQAABds"]
[Sat Aug 29 05:06:44.157659 2026] [security2:error] [pid 1017536:tid 1017678] [client 20.104.49.130:36362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.danesquality.com"] [uri "/ms-edit.php"] [unique_id "apK9RCJcY4fy7tP-rU0OigAAAiA"]
[Sat Aug 29 05:06:44.169759 2026] [security2:error] [pid 1018003:tid 1018231] [client 68.155.159.216:16227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-CwAABgc"]
[Sat Aug 29 05:06:44.177045 2026] [security2:error] [pid 1017536:tid 1017785] [client 20.151.200.44:65525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/7h.php"] [unique_id "apK9RCJcY4fy7tP-rU0OjAAAAos"]
[Sat Aug 29 05:06:44.205977 2026] [security2:error] [pid 1018003:tid 1018256] [client 68.155.159.216:51201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/cgi-bin/index.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-DAAABiA"]
[Sat Aug 29 05:06:44.211212 2026] [security2:error] [pid 1018003:tid 1018244] [client 136.107.231.130:29380] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "alanmossman.mossmanphoto.com"] [uri "/metrics"] [unique_id "apK9RDAh5Y1i2tUxg4H-DQAABhQ"]
[Sat Aug 29 05:06:44.235337 2026] [security2:error] [pid 1018003:tid 1018172] [client 20.151.200.44:64367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/pro.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-DgAABc0"]
[Sat Aug 29 05:06:44.267605 2026] [security2:error] [pid 1018003:tid 1018261] [client 20.220.204.93:52308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/xs.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-DwAABiU"]
[Sat Aug 29 05:06:44.288848 2026] [security2:error] [pid 1017536:tid 1017723] [client 20.63.81.20:46941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/tnglzqmv.php"] [unique_id "apK9RCJcY4fy7tP-rU0OjgAAAk0"]
[Sat Aug 29 05:06:44.292510 2026] [security2:error] [pid 1018003:tid 1018182] [client 158.23.147.79:32656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/hehehehe.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-EQAABdc"]
[Sat Aug 29 05:06:44.327732 2026] [security2:error] [pid 1017536:tid 1017674] [client 158.23.147.79:30533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/goat1.php"] [unique_id "apK9RCJcY4fy7tP-rU0OkAAAAhw"]
[Sat Aug 29 05:06:44.347852 2026] [security2:error] [pid 1018003:tid 1018175] [client 20.104.18.15:36681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/atomlib.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-EgAABdA"]
[Sat Aug 29 05:06:44.366163 2026] [security2:error] [pid 1017536:tid 1017705] [client 20.151.200.44:46652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9RCJcY4fy7tP-rU0OlwAAAjs"]
[Sat Aug 29 05:06:44.382316 2026] [security2:error] [pid 1017536:tid 1017751] [client 68.155.159.216:38544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-admin/about.php"] [unique_id "apK9RCJcY4fy7tP-rU0OmQAAAmk"]
[Sat Aug 29 05:06:44.382948 2026] [security2:error] [pid 1017536:tid 1017793] [client 68.155.159.216:65025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK9RCJcY4fy7tP-rU0OmgAAApM"]
[Sat Aug 29 05:06:44.385112 2026] [security2:error] [pid 1018003:tid 1018207] [client 20.104.18.15:36761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/gjewuagf.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-FQAABfA"]
[Sat Aug 29 05:06:44.392089 2026] [security2:error] [pid 1017536:tid 1017673] [client 20.151.200.44:64985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/999.php"] [unique_id "apK9RCJcY4fy7tP-rU0OmwAAAhs"]
[Sat Aug 29 05:06:44.400702 2026] [security2:error] [pid 1017536:tid 1017729] [client 20.220.204.93:52314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/zu.php"] [unique_id "apK9RCJcY4fy7tP-rU0OngAAAlM"]
[Sat Aug 29 05:06:44.410842 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.52.41.200:1733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/theme.php"] [unique_id "apK9RCJcY4fy7tP-rU0OoAAAAlY"]
[Sat Aug 29 05:06:44.423511 2026] [security2:error] [pid 1017536:tid 1017752] [client 158.158.54.35:11358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/config.php"] [unique_id "apK9RCJcY4fy7tP-rU0OoQAAAmo"]
[Sat Aug 29 05:06:44.427618 2026] [security2:error] [pid 1018003:tid 1018156] [client 20.196.209.81:4124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/about.php525"] [unique_id "apK9RDAh5Y1i2tUxg4H-GAAABb0"]
[Sat Aug 29 05:06:44.429165 2026] [security2:error] [pid 1017536:tid 1017757] [client 20.63.81.20:46958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/wefile.php"] [unique_id "apK9RCJcY4fy7tP-rU0OowAAAm8"]
[Sat Aug 29 05:06:44.442485 2026] [security2:error] [pid 1018003:tid 1018196] [client 20.104.18.15:23462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/revo.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-GQAABeU"]
[Sat Aug 29 05:06:44.445569 2026] [security2:error] [pid 1017536:tid 1017678] [client 20.104.18.15:7001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/dragonshell.php"] [unique_id "apK9RCJcY4fy7tP-rU0OrAAAAiA"]
[Sat Aug 29 05:06:44.457599 2026] [security2:error] [pid 1017536:tid 1017694] [client 68.155.159.216:50181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK9RCJcY4fy7tP-rU0OrQAAAjA"]
[Sat Aug 29 05:06:44.463520 2026] [security2:error] [pid 1018003:tid 1018163] [client 20.151.200.44:64298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/wp-gzone.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-GwAABcQ"]
[Sat Aug 29 05:06:44.478272 2026] [security2:error] [pid 1017536:tid 1017784] [client 20.104.18.15:36855] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.horseweblog.com"] [uri "/1.php"] [unique_id "apK9RCJcY4fy7tP-rU0OrwAAAoo"]
[Sat Aug 29 05:06:44.478349 2026] [security2:error] [pid 1017536:tid 1017784] [client 20.104.18.15:36855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/1.php"] [unique_id "apK9RCJcY4fy7tP-rU0OrwAAAoo"]
[Sat Aug 29 05:06:44.486879 2026] [security2:error] [pid 1018003:tid 1018157] [client 20.104.18.15:8011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/os.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-HAAABb4"]
[Sat Aug 29 05:06:44.489344 2026] [security2:error] [pid 1018003:tid 1018265] [client 20.104.18.15:13246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/wp-includes/ID3/moon.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-HQAABik"]
[Sat Aug 29 05:06:44.521242 2026] [security2:error] [pid 1017536:tid 1017793] [client 4.205.62.107:55988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/koiy.php"] [unique_id "apK9RCJcY4fy7tP-rU0OsgAAApM"]
[Sat Aug 29 05:06:44.527407 2026] [security2:error] [pid 1018003:tid 1018222] [client 168.107.94.195:55690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-HwAABf8"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:44.536136 2026] [security2:error] [pid 1018003:tid 1018174] [client 20.220.204.93:59128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/lanka.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-IAAABc8"]
[Sat Aug 29 05:06:44.538190 2026] [security2:error] [pid 1018003:tid 1018192] [client 185.104.184.230:36274] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.xvo.oau.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/wp2/wp-includes/wlwmanifest.xml"] [unique_id "apK9RDAh5Y1i2tUxg4H-IQAABeE"]
[Sat Aug 29 05:06:44.540090 2026] [security2:error] [pid 1017536:tid 1017672] [client 20.151.200.44:64433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/sef.php"] [unique_id "apK9RCJcY4fy7tP-rU0OswAAAho"]
[Sat Aug 29 05:06:44.546824 2026] [security2:error] [pid 1017536:tid 1017724] [client 20.197.61.180:8915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/extractable-loader-head.php"] [unique_id "apK9RCJcY4fy7tP-rU0OtgAAAk4"]
[Sat Aug 29 05:06:44.555575 2026] [security2:error] [pid 1017536:tid 1017732] [client 20.63.81.20:41969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/blog.php"] [unique_id "apK9RCJcY4fy7tP-rU0OuAAAAlY"]
[Sat Aug 29 05:06:44.556138 2026] [security2:error] [pid 1018003:tid 1018167] [client 20.104.18.15:36653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/tnglzqmv.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-IgAABcg"]
[Sat Aug 29 05:06:44.568343 2026] [security2:error] [pid 1017536:tid 1017778] [client 61.9.8.103:5904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK9RCJcY4fy7tP-rU0OtwAAAoQ"]
[Sat Aug 29 05:06:44.568467 2026] [security2:error] [pid 1017536:tid 1017778] [client 61.9.8.103:5904] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK9RCJcY4fy7tP-rU0OtwAAAoQ"]
[Sat Aug 29 05:06:44.575740 2026] [security2:error] [pid 1018003:tid 1018267] [client 20.104.18.15:6983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/wp-safe.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-JAAABis"]
[Sat Aug 29 05:06:44.583542 2026] [security2:error] [pid 1017536:tid 1017695] [client 40.83.93.50:23994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-content/f35.php"] [unique_id "apK9RCJcY4fy7tP-rU0OugAAAjE"]
[Sat Aug 29 05:06:44.584902 2026] [security2:error] [pid 1017536:tid 1017790] [client 158.23.147.79:25489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/lock.php"] [unique_id "apK9RCJcY4fy7tP-rU0OuwAAApA"]
[Sat Aug 29 05:06:44.600556 2026] [security2:error] [pid 1017536:tid 1017696] [client 68.155.159.216:49173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/makeasmtp.php"] [unique_id "apK9RCJcY4fy7tP-rU0OvAAAAjI"]
[Sat Aug 29 05:06:44.603491 2026] [security2:error] [pid 1017536:tid 1017683] [client 20.104.18.15:23400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/birrs.php"] [unique_id "apK9RCJcY4fy7tP-rU0OvQAAAiU"]
[Sat Aug 29 05:06:44.604408 2026] [security2:error] [pid 1017536:tid 1017792] [client 4.205.62.107:9004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/fm.php"] [unique_id "apK9RCJcY4fy7tP-rU0OvgAAApI"]
[Sat Aug 29 05:06:44.604574 2026] [security2:error] [pid 1017536:tid 1017678] [client 20.151.200.44:64234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/str.php"] [unique_id "apK9RCJcY4fy7tP-rU0OvwAAAiA"]
[Sat Aug 29 05:06:44.620144 2026] [security2:error] [pid 1017536:tid 1017785] [client 158.23.147.79:24461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-content/packed.php"] [unique_id "apK9RCJcY4fy7tP-rU0OwQAAAos"]
[Sat Aug 29 05:06:44.620517 2026] [security2:error] [pid 1017536:tid 1017781] [client 20.104.18.15:8134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/htio.php"] [unique_id "apK9RCJcY4fy7tP-rU0OwgAAAoc"]
[Sat Aug 29 05:06:44.621366 2026] [security2:error] [pid 1017536:tid 1017706] [client 20.104.49.130:36062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.danesquality.com"] [uri "/tool.php"] [unique_id "apK9RCJcY4fy7tP-rU0OwwAAAjw"]
[Sat Aug 29 05:06:44.675144 2026] [security2:error] [pid 1018003:tid 1018172] [client 20.104.18.15:36741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/samll.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-JQAABc0"]
[Sat Aug 29 05:06:44.678593 2026] [security2:error] [pid 1017536:tid 1017675] [client 20.104.18.15:13171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/xmini4.php"] [unique_id "apK9RCJcY4fy7tP-rU0OygAAAh0"]
[Sat Aug 29 05:06:44.680184 2026] [security2:error] [pid 1017536:tid 1017793] [client 20.63.81.20:46851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/wp-admin/js/wp-load.php"] [unique_id "apK9RCJcY4fy7tP-rU0OywAAApM"]
[Sat Aug 29 05:06:44.681315 2026] [security2:error] [pid 1017536:tid 1017669] [client 20.220.204.93:59080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/gettest.php"] [unique_id "apK9RCJcY4fy7tP-rU0OzAAAAhc"]
[Sat Aug 29 05:06:44.708970 2026] [core:error] [pid 1018003:tid 1018271] [client 45.148.10.62:49712] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:44.708988 2026] [core:error] [pid 1018003:tid 1018271] [client 45.148.10.62:49712] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:44.723064 2026] [security2:error] [pid 1017536:tid 1017673] [client 68.155.159.216:30659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/goods.php"] [unique_id "apK9RCJcY4fy7tP-rU0O0AAAAhs"]
[Sat Aug 29 05:06:44.724683 2026] [security2:error] [pid 1018003:tid 1018198] [client 20.104.18.15:7042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/gjewuagf.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-KAAABec"]
[Sat Aug 29 05:06:44.725254 2026] [security2:error] [pid 1018003:tid 1018258] [client 20.151.200.44:47369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/baee.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-KQAABiI"]
[Sat Aug 29 05:06:44.742778 2026] [security2:error] [pid 1017536:tid 1017757] [client 20.104.18.15:23414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/sss.php"] [unique_id "apK9RCJcY4fy7tP-rU0O0QAAAm8"]
[Sat Aug 29 05:06:44.756337 2026] [security2:error] [pid 1017536:tid 1017721] [client 20.104.18.15:8095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/dev.php"] [unique_id "apK9RCJcY4fy7tP-rU0O0gAAAks"]
[Sat Aug 29 05:06:44.757646 2026] [security2:error] [pid 1017536:tid 1017784] [client 20.151.200.44:65084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/admin123.php"] [unique_id "apK9RCJcY4fy7tP-rU0O0wAAAoo"]
[Sat Aug 29 05:06:44.758976 2026] [security2:error] [pid 1017536:tid 1017598] [remote 52.167.144.136:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantsfans.net"] [uri "/message_board/index.php"] [unique_id "apK9RCJcY4fy7tP-rU0O1QACQz0"]
[Sat Aug 29 05:06:44.772099 2026] [security2:error] [pid 1018003:tid 1018219] [client 20.104.18.15:36683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/wefile.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-KgAABfw"]
[Sat Aug 29 05:06:44.802050 2026] [security2:error] [pid 1018003:tid 1018179] [client 171.61.160.196:2734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.160.61.171.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-KwAABdQ"]
[Sat Aug 29 05:06:44.802128 2026] [security2:error] [pid 1018003:tid 1018179] [client 171.61.160.196:2734] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-KwAABdQ"]
[Sat Aug 29 05:06:44.803711 2026] [security2:error] [pid 1017536:tid 1017723] [client 20.63.81.20:44452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/robot.php"] [unique_id "apK9RCJcY4fy7tP-rU0O2QAAAk0"]
[Sat Aug 29 05:06:44.807505 2026] [security2:error] [pid 1017536:tid 1017753] [client 20.104.18.15:36672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/she11.php"] [unique_id "apK9RCJcY4fy7tP-rU0O2gAAAms"]
[Sat Aug 29 05:06:44.814250 2026] [security2:error] [pid 1017536:tid 1017731] [client 20.220.204.93:52244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/35.php"] [unique_id "apK9RCJcY4fy7tP-rU0O2wAAAlU"]
[Sat Aug 29 05:06:44.815398 2026] [security2:error] [pid 1018003:tid 1018175] [client 20.104.18.15:13161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/gulu.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-LAAABdA"]
[Sat Aug 29 05:06:44.823150 2026] [autoindex:error] [pid 1017536:tid 1017743] [client 147.185.132.79:65006] AH01276: Cannot serve directory /home3/aknsvwmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:06:44.823403 2026] [security2:error] [pid 1018003:tid 1018239] [client 158.23.147.79:37582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/asd.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-LQAABg8"]
[Sat Aug 29 05:06:44.856256 2026] [security2:error] [pid 1017536:tid 1017778] [client 158.158.54.35:8731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK9RCJcY4fy7tP-rU0O3gAAAoQ"]
[Sat Aug 29 05:06:44.864478 2026] [security2:error] [pid 1017536:tid 1017729] [client 20.52.41.200:1781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/classwithtostring.php"] [unique_id "apK9RCJcY4fy7tP-rU0O3wAAAlM"]
[Sat Aug 29 05:06:44.866383 2026] [security2:error] [pid 1018003:tid 1018152] [client 20.151.200.44:64954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/mega.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-LgAABbk"]
[Sat Aug 29 05:06:44.878318 2026] [security2:error] [pid 1017536:tid 1017792] [client 20.196.209.81:9433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/spip.php"] [unique_id "apK9RCJcY4fy7tP-rU0O4AAAApI"]
[Sat Aug 29 05:06:44.878337 2026] [security2:error] [pid 1018003:tid 1018252] [client 20.104.18.15:7108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/tnglzqmv.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-LwAABhw"]
[Sat Aug 29 05:06:44.892010 2026] [security2:error] [pid 1018003:tid 1018227] [client 20.104.18.15:8057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/gos.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-MAAABgQ"]
[Sat Aug 29 05:06:44.916772 2026] [security2:error] [pid 1018003:tid 1018188] [client 168.107.94.195:56032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-MgAABd0"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:44.920006 2026] [security2:error] [pid 1018003:tid 1018255] [client 4.205.62.107:22315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/ws61.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-MwAABh8"]
[Sat Aug 29 05:06:44.922864 2026] [security2:error] [pid 1018003:tid 1018157] [client 158.23.147.79:26579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-content/languages/about.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-NAAABb4"]
[Sat Aug 29 05:06:44.923227 2026] [security2:error] [pid 1018003:tid 1018206] [client 20.104.18.15:36814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/blog.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-NQAABe8"]
[Sat Aug 29 05:06:44.931010 2026] [security2:error] [pid 1018003:tid 1018185] [client 158.23.147.79:49813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-NgAABdo"]
[Sat Aug 29 05:06:44.932740 2026] [security2:error] [pid 1018003:tid 1018218] [client 20.48.250.41:21461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-NwAABfs"]
[Sat Aug 29 05:06:44.933187 2026] [security2:error] [pid 1018003:tid 1018213] [client 20.63.81.20:46933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/revo.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-OAAABfY"]
[Sat Aug 29 05:06:44.941606 2026] [security2:error] [pid 1018003:tid 1018224] [client 20.151.200.44:64385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/7h.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-OgAABgE"]
[Sat Aug 29 05:06:44.942845 2026] [security2:error] [pid 1018003:tid 1018222] [client 68.155.159.216:52831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-OwAABf8"]
[Sat Aug 29 05:06:44.942995 2026] [security2:error] [pid 1018003:tid 1018194] [client 20.220.204.93:52325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/maraz.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-PAAABeM"]
[Sat Aug 29 05:06:44.969257 2026] [security2:error] [pid 1018003:tid 1018167] [client 20.104.18.15:36849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/kerang.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-PwAABcg"]
[Sat Aug 29 05:06:44.976732 2026] [security2:error] [pid 1018003:tid 1018267] [client 158.23.147.79:17428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-QAAABis"]
[Sat Aug 29 05:06:44.977276 2026] [security2:error] [pid 1018003:tid 1018216] [client 20.104.18.15:13217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/replace.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-QQAABfk"]
[Sat Aug 29 05:06:44.980298 2026] [security2:error] [pid 1018003:tid 1018156] [client 45.61.187.50:63982] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "succulentideas.com"] [uri "/wp-content/plugins/wp_gljbkwx/wp_gljbkwx.php"] [unique_id "apK9RDAh5Y1i2tUxg4H-QgAABb0"]
[Sat Aug 29 05:06:45.011492 2026] [security2:error] [pid 1018003:tid 1018111] [remote 74.7.227.154:41662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK9RTAh5Y1i2tUxg4H-QwAGLlo"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwp-easycart%2Fadmin%2Felementor
[Sat Aug 29 05:06:45.012399 2026] [http2:warn] [pid 1017536:tid 1017739] [client 57.141.14.32:63142] h2_stream(1017536-172-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:06:45.017489 2026] [security2:error] [pid 1018003:tid 1018246] [client 20.104.18.15:7015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/wefile.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-RAAABhY"]
[Sat Aug 29 05:06:45.034743 2026] [security2:error] [pid 1018003:tid 1018160] [client 68.155.159.216:18322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-includes/css/index.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-RgAABcE"]
[Sat Aug 29 05:06:45.043558 2026] [security2:error] [pid 1018003:tid 1018262] [client 20.104.18.15:8106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/132.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-SQAABiY"]
[Sat Aug 29 05:06:45.054875 2026] [security2:error] [pid 1018003:tid 1018190] [client 20.151.200.44:61976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/ww3.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-SgAABd8"]
[Sat Aug 29 05:06:45.061476 2026] [security2:error] [pid 1018003:tid 1018271] [client 20.63.81.20:46922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/birrs.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-TAAABi8"]
[Sat Aug 29 05:06:45.063390 2026] [security2:error] [pid 1018003:tid 1018233] [client 40.83.93.50:1649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-content/index.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-TQAABgk"]
[Sat Aug 29 05:06:45.079011 2026] [security2:error] [pid 1018003:tid 1018177] [client 20.220.204.93:52226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/kbfr.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-TwAABdI"]
[Sat Aug 29 05:06:45.087161 2026] [security2:error] [pid 1018003:tid 1018258] [client 20.104.18.15:36818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/wp-admin/js/wp-load.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-UQAABiI"]
[Sat Aug 29 05:06:45.094072 2026] [security2:error] [pid 1018003:tid 1018187] [client 20.48.250.41:21447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-UgAABdw"]
[Sat Aug 29 05:06:45.107091 2026] [security2:error] [pid 1018003:tid 1018191] [client 20.104.18.15:13130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/c4.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-VAAABeA"]
[Sat Aug 29 05:06:45.127326 2026] [security2:error] [pid 1018003:tid 1018184] [client 20.151.200.44:65075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/wp-gzone.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-VQAABdk"]
[Sat Aug 29 05:06:45.132897 2026] [security2:error] [pid 1018003:tid 1018153] [client 185.104.184.230:36280] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.xvo.oau.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/site/wp-includes/wlwmanifest.xml"] [unique_id "apK9RTAh5Y1i2tUxg4H-VgAABbo"]
[Sat Aug 29 05:06:45.135637 2026] [security2:error] [pid 1018003:tid 1018230] [client 68.155.159.216:33724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/xmlrpc.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-VwAABgY"]
[Sat Aug 29 05:06:45.150643 2026] [security2:error] [pid 1018003:tid 1018162] [client 158.23.147.79:30649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-WAAABcM"]
[Sat Aug 29 05:06:45.157126 2026] [security2:error] [pid 1018003:tid 1018238] [client 158.23.147.79:35760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-content/radio.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-WwAABg4"]
[Sat Aug 29 05:06:45.171375 2026] [security2:error] [pid 1018003:tid 1018206] [client 20.104.18.15:36794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/m.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-XAAABe8"]
[Sat Aug 29 05:06:45.174030 2026] [security2:error] [pid 1018003:tid 1018185] [client 4.205.62.107:22242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/phpinfo01.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-XQAABdo"]
[Sat Aug 29 05:06:45.195969 2026] [security2:error] [pid 1018003:tid 1018222] [client 20.104.18.15:8155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/v22.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-XwAABf8"]
[Sat Aug 29 05:06:45.200670 2026] [security2:error] [pid 1018003:tid 1018194] [client 4.205.62.107:65501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/rum.or.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-YAAABeM"]
[Sat Aug 29 05:06:45.204261 2026] [security2:error] [pid 1018003:tid 1018192] [client 20.104.18.15:7122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/blog.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-YgAABeE"]
[Sat Aug 29 05:06:45.204294 2026] [security2:error] [pid 1018003:tid 1018273] [client 20.63.81.20:44495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/sss.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-YQAABjE"]
[Sat Aug 29 05:06:45.209584 2026] [security2:error] [pid 1018003:tid 1018166] [client 20.220.204.93:59130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/wp-act.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-YwAABcc"]
[Sat Aug 29 05:06:45.217117 2026] [security2:error] [pid 1018003:tid 1018167] [client 20.104.18.15:36734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/robot.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-ZAAABcg"]
[Sat Aug 29 05:06:45.226196 2026] [core:error] [pid 1018003:tid 1018175] [client 20.104.18.15:23524] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.226211 2026] [core:error] [pid 1018003:tid 1018175] [client 20.104.18.15:23524] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.234904 2026] [security2:error] [pid 1018003:tid 1018267] [client 20.48.250.41:21496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/ff1.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-ZgAABis"]
[Sat Aug 29 05:06:45.237335 2026] [security2:error] [pid 1018003:tid 1018275] [client 4.205.62.107:22392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/nw.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-aAAABjM"]
[Sat Aug 29 05:06:45.248088 2026] [security2:error] [pid 1018003:tid 1018189] [client 158.23.147.79:48409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-admin.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-aQAABd4"]
[Sat Aug 29 05:06:45.250090 2026] [security2:error] [pid 1018003:tid 1018259] [client 20.104.18.15:13067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/rxr.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-agAABiM"]
[Sat Aug 29 05:06:45.260331 2026] [security2:error] [pid 1018003:tid 1018186] [client 20.151.200.44:47327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/d12.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-awAABds"]
[Sat Aug 29 05:06:45.262709 2026] [security2:error] [pid 1018003:tid 1018170] [client 20.151.200.44:64266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/sko.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-bAAABcs"]
[Sat Aug 29 05:06:45.263709 2026] [security2:error] [pid 1018003:tid 1018231] [client 20.151.200.44:64984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/str.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-bQAABgc"]
[Sat Aug 29 05:06:45.272977 2026] [security2:error] [pid 1018003:tid 1018244] [client 20.197.61.180:7888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/defaults.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-bgAABhQ"]
[Sat Aug 29 05:06:45.277241 2026] [security2:error] [pid 1018003:tid 1018155] [client 68.155.159.216:16357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-admin/images/about.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-bwAABbw"]
[Sat Aug 29 05:06:45.279716 2026] [security2:error] [pid 1018003:tid 1018183] [client 20.196.209.81:17913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/backup.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-cAAABdg"]
[Sat Aug 29 05:06:45.298093 2026] [security2:error] [pid 1018003:tid 1018198] [client 168.107.94.195:56470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-cQAABec"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:45.302243 2026] [security2:error] [pid 1018003:tid 1018161] [client 158.158.54.35:15218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-good.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-cgAABcI"]
[Sat Aug 29 05:06:45.308175 2026] [security2:error] [pid 1018003:tid 1018159] [client 20.104.18.15:23362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/wp-includes/ID3/moon.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-cwAABcA"]
[Sat Aug 29 05:06:45.321167 2026] [security2:error] [pid 1018003:tid 1018265] [client 20.52.41.200:1171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/news.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-dAAABik"]
[Sat Aug 29 05:06:45.335012 2026] [security2:error] [pid 1018003:tid 1018268] [client 20.104.18.15:36640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/fling.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-dQAABiw"]
[Sat Aug 29 05:06:45.339239 2026] [security2:error] [pid 1018003:tid 1018243] [client 20.104.18.15:6966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/wp-admin/js/wp-load.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-dwAABhM"]
[Sat Aug 29 05:06:45.342488 2026] [security2:error] [pid 1018003:tid 1018164] [client 20.104.18.15:8065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/wp-activate.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-eAAABcU"]
[Sat Aug 29 05:06:45.350495 2026] [security2:error] [pid 1018003:tid 1018207] [client 20.220.204.93:59051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/24.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-eQAABfA"]
[Sat Aug 29 05:06:45.374443 2026] [security2:error] [pid 1018003:tid 1018162] [client 20.48.250.41:21385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/t.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-egAABcM"]
[Sat Aug 29 05:06:45.378815 2026] [security2:error] [pid 1018003:tid 1018221] [client 20.104.18.15:36719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/revo.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-ewAABf4"]
[Sat Aug 29 05:06:45.394281 2026] [security2:error] [pid 1018003:tid 1018227] [client 20.151.200.44:64855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/zoz.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-fAAABgQ"]
[Sat Aug 29 05:06:45.406263 2026] [security2:error] [pid 1018003:tid 1018192] [client 158.23.147.79:32588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-fQAABeE"]
[Sat Aug 29 05:06:45.408694 2026] [security2:error] [pid 1018003:tid 1018166] [client 20.104.18.15:13162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.doozytrack.com"] [uri "/reviall.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-fgAABcc"]
[Sat Aug 29 05:06:45.418998 2026] [security2:error] [pid 1018003:tid 1018267] [client 20.63.81.20:44523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/wp-includes/ID3/moon.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-fwAABis"]
[Sat Aug 29 05:06:45.425528 2026] [security2:error] [pid 1018003:tid 1018069] [remote 74.7.227.154:41662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK9RTAh5Y1i2tUxg4H-gAAFvTA"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwp-easycart%2Fadmin%2Felementor
[Sat Aug 29 05:06:45.431535 2026] [security2:error] [pid 1018003:tid 1018256] [client 45.148.10.62:49726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ninaanddon.strangeworx.com"] [uri "/wp-config.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-gQAABiA"]
[Sat Aug 29 05:06:45.457386 2026] [security2:error] [pid 1018003:tid 1018186] [client 20.104.18.15:23368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/xmini4.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-ggAABds"]
[Sat Aug 29 05:06:45.460094 2026] [security2:error] [pid 1018003:tid 1018270] [client 158.23.147.79:30566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/classwithtostring.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-gwAABi4"]
[Sat Aug 29 05:06:45.470949 2026] [security2:error] [pid 1018003:tid 1018244] [client 20.104.18.15:6989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/robot.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-hQAABhQ"]
[Sat Aug 29 05:06:45.472043 2026] [security2:error] [pid 1018003:tid 1018261] [client 20.151.200.44:65040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/mega.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-hgAABiU"]
[Sat Aug 29 05:06:45.478704 2026] [security2:error] [pid 1018003:tid 1018271] [client 20.151.200.44:47420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/yyy.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-hwAABi8"]
[Sat Aug 29 05:06:45.497663 2026] [security2:error] [pid 1018003:tid 1018195] [client 20.104.18.15:36793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/btyuio.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-iQAABeQ"]
[Sat Aug 29 05:06:45.522953 2026] [security2:error] [pid 1018003:tid 1018191] [client 20.48.250.41:21387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/erty.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-kAAABeA"]
[Sat Aug 29 05:06:45.537529 2026] [security2:error] [pid 1018003:tid 1018126] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK9RTAh5Y1i2tUxg4H-kgAGHGk"]
[Sat Aug 29 05:06:45.538275 2026] [security2:error] [pid 1018003:tid 1018152] [client 40.83.93.50:1730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-content/install.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-kwAABbk"]
[Sat Aug 29 05:06:45.545237 2026] [security2:error] [pid 1018003:tid 1018138] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK9RTAh5Y1i2tUxg4H-lQAGHHU"]
[Sat Aug 29 05:06:45.547239 2026] [core:error] [pid 1018003:tid 1018119] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.547253 2026] [core:error] [pid 1018003:tid 1018119] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.549797 2026] [security2:error] [pid 1018003:tid 1018127] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(\\\\/\\\\*\\\\!? ?(?:select|grant|delete|insert|drop|alter|replace|truncate|update|create|rename|describe|union|concat|group_concat))" at REQUEST_FILENAME. [file "/opt/mod_security/hg_rules.conf"] [line "1019"] [id "9000042"] [rev "2.2.2"] [msg "SQL Comment Sequence Detected."] [data "/*update"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/*update.cgi*"] [unique_id "apK9RTAh5Y1i2tUxg4H-mgAGHGo"]
[Sat Aug 29 05:06:45.549912 2026] [security2:error] [pid 1018003:tid 1018243] [client 20.104.18.15:36683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/birrs.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-ngAABhM"]
[Sat Aug 29 05:06:45.555444 2026] [security2:error] [pid 1018003:tid 1018174] [client 20.63.81.20:46970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/xmini4.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-nwAABc8"]
[Sat Aug 29 05:06:45.557414 2026] [security2:error] [pid 1018003:tid 1018202] [client 20.104.18.15:8175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/wp-trackback.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-oAAABes"]
[Sat Aug 29 05:06:45.568208 2026] [security2:error] [pid 1018003:tid 1018162] [client 68.155.159.216:50297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-pQAABcM"]
[Sat Aug 29 05:06:45.569216 2026] [core:error] [pid 1018003:tid 1018230] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.569231 2026] [core:error] [pid 1018003:tid 1018230] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.569246 2026] [core:error] [pid 1018003:tid 1018200] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.569248 2026] [core:error] [pid 1018003:tid 1018240] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.569255 2026] [core:error] [pid 1018003:tid 1018200] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.569260 2026] [core:error] [pid 1018003:tid 1018240] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.569748 2026] [core:error] [pid 1018003:tid 1018164] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.569762 2026] [core:error] [pid 1018003:tid 1018164] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.588236 2026] [security2:error] [pid 1018003:tid 1018267] [client 20.104.18.15:23382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/gulu.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-pgAABis"]
[Sat Aug 29 05:06:45.595471 2026] [security2:error] [pid 1018003:tid 1018186] [client 20.151.200.44:64925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/mmm.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-qAAABds"]
[Sat Aug 29 05:06:45.622492 2026] [security2:error] [pid 1018003:tid 1018261] [client 20.104.18.15:7088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/revo.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-qQAABiU"]
[Sat Aug 29 05:06:45.637179 2026] [security2:error] [pid 1018003:tid 1018183] [client 20.104.18.15:36680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/dehnl.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-qgAABdg"]
[Sat Aug 29 05:06:45.656878 2026] [security2:error] [pid 1018003:tid 1018233] [client 20.220.204.93:50813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/155.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-qwAABgk"]
[Sat Aug 29 05:06:45.658692 2026] [security2:error] [pid 1018003:tid 1018198] [client 4.205.62.107:55986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/w.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-rAAABec"]
[Sat Aug 29 05:06:45.673756 2026] [security2:error] [pid 1018003:tid 1018187] [client 20.104.49.130:47962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/log.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-rQAABdw"]
[Sat Aug 29 05:06:45.676449 2026] [security2:error] [pid 1018003:tid 1018203] [client 20.196.209.81:4113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/haiterus.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-rgAABew"]
[Sat Aug 29 05:06:45.677244 2026] [security2:error] [pid 1018003:tid 1018161] [client 168.107.94.195:56834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-rwAABcI"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:45.686528 2026] [security2:error] [pid 1018003:tid 1018238] [client 20.63.81.20:44421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/gulu.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-wAAABg4"]
[Sat Aug 29 05:06:45.689597 2026] [security2:error] [pid 1018003:tid 1018250] [client 20.48.250.41:21497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/0x.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-wQAABho"]
[Sat Aug 29 05:06:45.695144 2026] [security2:error] [pid 1018003:tid 1018242] [client 20.151.200.44:65037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/ww3.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-xAAABhI"]
[Sat Aug 29 05:06:45.695557 2026] [security2:error] [pid 1018003:tid 1018073] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/.env"] [unique_id "apK9RTAh5Y1i2tUxg4H-wwAFwDQ"]
[Sat Aug 29 05:06:45.695942 2026] [security2:error] [pid 1018003:tid 1018180] [client 158.23.147.79:25485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/index/function.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-xQAABdU"]
[Sat Aug 29 05:06:45.702902 2026] [core:error] [pid 1018003:tid 1018141] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.702920 2026] [core:error] [pid 1018003:tid 1018141] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.703371 2026] [core:error] [pid 1018003:tid 1018174] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.703383 2026] [core:error] [pid 1018003:tid 1018174] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.704212 2026] [core:error] [pid 1018003:tid 1018273] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.704223 2026] [core:error] [pid 1018003:tid 1018273] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.705242 2026] [core:error] [pid 1018003:tid 1018157] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.705253 2026] [core:error] [pid 1018003:tid 1018157] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.705310 2026] [core:error] [pid 1018003:tid 1018185] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.705318 2026] [core:error] [pid 1018003:tid 1018185] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.705633 2026] [core:error] [pid 1018003:tid 1018194] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.705646 2026] [core:error] [pid 1018003:tid 1018194] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.709461 2026] [security2:error] [pid 1018003:tid 1018221] [client 20.104.18.15:36733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/sss.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-zwAABf4"]
[Sat Aug 29 05:06:45.709617 2026] [security2:error] [pid 1018003:tid 1018144] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/laravel/app/.env"] [unique_id "apK9RTAh5Y1i2tUxg4H-zgAFwHs"]
[Sat Aug 29 05:06:45.709910 2026] [core:error] [pid 1018003:tid 1018202] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.709919 2026] [core:error] [pid 1018003:tid 1018202] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.710402 2026] [security2:error] [pid 1018003:tid 1018218] [client 111.235.68.106:60249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-0QAABfs"]
[Sat Aug 29 05:06:45.711548 2026] [core:error] [pid 1018003:tid 1018207] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.712561 2026] [core:error] [pid 1018003:tid 1018207] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.712635 2026] [security2:error] [pid 1018003:tid 1018218] [client 111.235.68.106:60249] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-0QAABfs"]
[Sat Aug 29 05:06:45.713115 2026] [core:error] [pid 1018003:tid 1018164] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.713122 2026] [core:error] [pid 1018003:tid 1018164] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.716703 2026] [core:error] [pid 1018003:tid 1018224] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.716714 2026] [core:error] [pid 1018003:tid 1018224] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.717154 2026] [core:error] [pid 1018003:tid 1018024] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.717162 2026] [core:error] [pid 1018003:tid 1018024] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.722785 2026] [security2:error] [pid 1018003:tid 1018275] [client 185.104.184.230:36292] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.xvo.oau.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/cms/wp-includes/wlwmanifest.xml"] [unique_id "apK9RTAh5Y1i2tUxg4H-1wAABjM"]
[Sat Aug 29 05:06:45.744541 2026] [security2:error] [pid 1018003:tid 1018270] [client 4.205.62.107:53327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/pinfo.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-2AAABi4"]
[Sat Aug 29 05:06:45.745306 2026] [security2:error] [pid 1018003:tid 1018160] [client 20.104.18.15:23374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/replace.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-2QAABcE"]
[Sat Aug 29 05:06:45.749327 2026] [security2:error] [pid 1018003:tid 1018262] [client 20.104.18.15:8052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/pri.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-2gAABiY"]
[Sat Aug 29 05:06:45.764809 2026] [security2:error] [pid 1018003:tid 1018155] [client 20.104.18.15:6917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/birrs.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-2wAABbw"]
[Sat Aug 29 05:06:45.769159 2026] [core:error] [pid 1018003:tid 1018172] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.769175 2026] [core:error] [pid 1018003:tid 1018172] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.773823 2026] [security2:error] [pid 1018003:tid 1018170] [client 158.158.54.35:8761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-3QAABcs"]
[Sat Aug 29 05:06:45.779176 2026] [security2:error] [pid 1018003:tid 1018190] [client 20.52.41.200:1232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/about/function.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-3gAABd8"]
[Sat Aug 29 05:06:45.790845 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.151.200.44:46647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/bgymj.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-5AAABcI"]
[Sat Aug 29 05:06:45.807582 2026] [security2:error] [pid 1018003:tid 1018243] [client 20.220.204.93:52277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/file.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-5wAABhM"]
[Sat Aug 29 05:06:45.813562 2026] [security2:error] [pid 1018003:tid 1018174] [client 20.63.81.20:41920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/replace.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-6AAABc8"]
[Sat Aug 29 05:06:45.820838 2026] [security2:error] [pid 1018003:tid 1018162] [client 20.104.18.15:36715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/zoo2.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-6QAABcM"]
[Sat Aug 29 05:06:45.825300 2026] [security2:error] [pid 1018003:tid 1018157] [client 158.23.147.79:38737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wzy.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-6gAABb4"]
[Sat Aug 29 05:06:45.827391 2026] [security2:error] [pid 1018003:tid 1018194] [client 68.155.159.216:30694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-6wAABeM"]
[Sat Aug 29 05:06:45.841212 2026] [security2:error] [pid 1018003:tid 1018115] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK9RTAh5Y1i2tUxg4H-7AAF6V4"]
[Sat Aug 29 05:06:45.848134 2026] [security2:error] [pid 1018003:tid 1018226] [client 20.151.200.44:64272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/advanced.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-8QAABgM"]
[Sat Aug 29 05:06:45.848300 2026] [security2:error] [pid 1018003:tid 1018191] [client 20.151.200.44:64338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/sko.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-8gAABeA"]
[Sat Aug 29 05:06:45.854597 2026] [security2:error] [pid 1018003:tid 1018217] [client 20.48.250.41:21379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/66.php"] [unique_id "apK9RTAh5Y1i2tUxg4H-9QAABfo"]
[Sat Aug 29 05:06:45.861576 2026] [security2:error] [pid 1018003:tid 1018036] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/.env.bak"] [unique_id "apK9RTAh5Y1i2tUxg4H-9wAF6Q8"]
[Sat Aug 29 05:06:45.861587 2026] [security2:error] [pid 1018003:tid 1018031] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/.env.backup"] [unique_id "apK9RTAh5Y1i2tUxg4H-9gAF6Qo"]
[Sat Aug 29 05:06:45.868809 2026] [core:error] [pid 1018003:tid 1018255] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.868823 2026] [core:error] [pid 1018003:tid 1018255] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.870501 2026] [core:error] [pid 1018003:tid 1018221] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.870514 2026] [core:error] [pid 1018003:tid 1018221] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.870665 2026] [core:error] [pid 1018003:tid 1018239] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.870674 2026] [core:error] [pid 1018003:tid 1018239] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.876955 2026] [security2:error] [pid 1018003:tid 1018153] [client 20.104.18.15:23319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/c4.php"] [unique_id "apK9RTAh5Y1i2tUxg4H_BgAABbo"]
[Sat Aug 29 05:06:45.881938 2026] [security2:error] [pid 1018003:tid 1018236] [client 20.104.18.15:8046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/wp_blog_footer.php"] [unique_id "apK9RTAh5Y1i2tUxg4H_DgAABgw"]
[Sat Aug 29 05:06:45.884067 2026] [security2:error] [pid 1018003:tid 1018212] [client 68.155.159.216:51836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK9RTAh5Y1i2tUxg4H_EAAABfU"]
[Sat Aug 29 05:06:45.885883 2026] [security2:error] [pid 1018003:tid 1018160] [client 158.23.147.79:24424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-l0gin.php"] [unique_id "apK9RTAh5Y1i2tUxg4H_EQAABcE"]
[Sat Aug 29 05:06:45.890719 2026] [core:error] [pid 1018003:tid 1018244] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.890732 2026] [core:error] [pid 1018003:tid 1018244] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.891316 2026] [core:error] [pid 1018003:tid 1018262] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.891324 2026] [core:error] [pid 1018003:tid 1018262] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.918864 2026] [security2:error] [pid 1018003:tid 1018169] [client 103.162.125.59:54658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.125.162.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK9RTAh5Y1i2tUxg4H_FQAABco"]
[Sat Aug 29 05:06:45.918995 2026] [security2:error] [pid 1018003:tid 1018169] [client 103.162.125.59:54658] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK9RTAh5Y1i2tUxg4H_FQAABco"]
[Sat Aug 29 05:06:45.933467 2026] [core:error] [pid 1018003:tid 1018195] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.933493 2026] [core:error] [pid 1018003:tid 1018195] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.936086 2026] [core:error] [pid 1018003:tid 1018271] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.936105 2026] [core:error] [pid 1018003:tid 1018271] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.937100 2026] [security2:error] [pid 1018003:tid 1018213] [client 158.23.147.79:61586] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/1.php"] [unique_id "apK9RTAh5Y1i2tUxg4H_GQAABfY"]
[Sat Aug 29 05:06:45.937227 2026] [security2:error] [pid 1018003:tid 1018213] [client 158.23.147.79:61586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/1.php"] [unique_id "apK9RTAh5Y1i2tUxg4H_GQAABfY"]
[Sat Aug 29 05:06:45.939533 2026] [security2:error] [pid 1018003:tid 1018261] [client 20.104.18.15:7050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/sss.php"] [unique_id "apK9RTAh5Y1i2tUxg4H_GgAABiU"]
[Sat Aug 29 05:06:45.943691 2026] [core:error] [pid 1018003:tid 1018195] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.943706 2026] [core:error] [pid 1018003:tid 1018195] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.944646 2026] [security2:error] [pid 1018003:tid 1018175] [client 20.63.81.20:46909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/c4.php"] [unique_id "apK9RTAh5Y1i2tUxg4H_HAAABdA"]
[Sat Aug 29 05:06:45.949701 2026] [security2:error] [pid 1018003:tid 1018273] [client 20.220.204.93:52320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK9RTAh5Y1i2tUxg4H_HQAABjE"]
[Sat Aug 29 05:06:45.960402 2026] [core:error] [pid 1018003:tid 1018184] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.960414 2026] [core:error] [pid 1018003:tid 1018184] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.960415 2026] [core:error] [pid 1018003:tid 1018203] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.960435 2026] [core:error] [pid 1018003:tid 1018203] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.960760 2026] [core:error] [pid 1018003:tid 1018234] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.960768 2026] [core:error] [pid 1018003:tid 1018234] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.980913 2026] [core:error] [pid 1018003:tid 1018250] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.980925 2026] [core:error] [pid 1018003:tid 1018250] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.983289 2026] [security2:error] [pid 1018003:tid 1018164] [client 20.151.200.44:65078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/zoz.php"] [unique_id "apK9RTAh5Y1i2tUxg4H_IgAABcU"]
[Sat Aug 29 05:06:45.985278 2026] [security2:error] [pid 1018003:tid 1018043] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/.env.old"] [unique_id "apK9RTAh5Y1i2tUxg4H_IwAF6RY"]
[Sat Aug 29 05:06:45.996408 2026] [core:error] [pid 1018003:tid 1018192] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:45.996416 2026] [core:error] [pid 1018003:tid 1018192] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.006361 2026] [security2:error] [pid 1018003:tid 1018163] [client 20.104.18.15:23363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/rxr.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_JQAABcQ"]
[Sat Aug 29 05:06:46.027272 2026] [security2:error] [pid 1018003:tid 1018236] [client 158.23.147.79:26489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-content/banners/about.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_JgAABgw"]
[Sat Aug 29 05:06:46.030230 2026] [security2:error] [pid 1018003:tid 1018270] [client 20.104.18.15:36736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/zoo1.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_KQAABi4"]
[Sat Aug 29 05:06:46.037810 2026] [security2:error] [pid 1018003:tid 1018169] [client 20.48.250.41:21396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/f35.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_MwAABco"]
[Sat Aug 29 05:06:46.048720 2026] [security2:error] [pid 1018003:tid 1018156] [client 20.104.18.15:8032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/sushi.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_NAAABb0"]
[Sat Aug 29 05:06:46.055972 2026] [security2:error] [pid 1018003:tid 1018233] [client 168.107.94.195:57232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_NQAABgk"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:46.058249 2026] [security2:error] [pid 1018003:tid 1018196] [client 158.23.147.79:49990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/simple.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_OQAABeU"]
[Sat Aug 29 05:06:46.058499 2026] [security2:error] [pid 1018003:tid 1018225] [client 20.197.61.180:8917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/post.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_OgAABgI"]
[Sat Aug 29 05:06:46.060075 2026] [core:error] [pid 1018003:tid 1018177] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.060086 2026] [core:error] [pid 1018003:tid 1018177] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.060274 2026] [core:error] [pid 1018003:tid 1018198] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.060286 2026] [core:error] [pid 1018003:tid 1018198] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.060377 2026] [core:error] [pid 1018003:tid 1018170] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.060397 2026] [core:error] [pid 1018003:tid 1018170] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.060575 2026] [security2:error] [pid 1018003:tid 1018258] [client 4.205.62.107:22415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/xza.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_OwAABiI"]
[Sat Aug 29 05:06:46.066101 2026] [core:error] [pid 1018003:tid 1018187] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.066114 2026] [core:error] [pid 1018003:tid 1018187] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.067478 2026] [core:error] [pid 1018003:tid 1018170] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.067491 2026] [core:error] [pid 1018003:tid 1018170] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.076242 2026] [security2:error] [pid 1018003:tid 1018234] [client 20.63.81.20:44431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/rxr.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_PwAABgo"]
[Sat Aug 29 05:06:46.080158 2026] [security2:error] [pid 1018003:tid 1018174] [client 20.196.209.81:9428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/go.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_QAAABc8"]
[Sat Aug 29 05:06:46.085550 2026] [core:error] [pid 1018003:tid 1018267] [client 20.104.18.15:36861] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.085569 2026] [core:error] [pid 1018003:tid 1018267] [client 20.104.18.15:36861] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.086068 2026] [security2:error] [pid 1018003:tid 1018231] [client 20.220.204.93:52246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/06.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_RAAABgc"]
[Sat Aug 29 05:06:46.095337 2026] [security2:error] [pid 1018003:tid 1018218] [client 158.23.147.79:17451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/chosen.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_RwAABfs"]
[Sat Aug 29 05:06:46.102592 2026] [core:error] [pid 1018003:tid 1018186] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.102606 2026] [core:error] [pid 1018003:tid 1018186] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.112029 2026] [security2:error] [pid 1018003:tid 1018221] [client 20.151.200.44:65063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/mmm.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_SQAABf4"]
[Sat Aug 29 05:06:46.113694 2026] [security2:error] [pid 1018003:tid 1018230] [client 45.61.187.50:64241] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "succulentideas.com"] [uri "/wp-content/plugins/wp_gljbkwx/wp_gljbkwx.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_SgAABgY"]
[Sat Aug 29 05:06:46.122777 2026] [security2:error] [pid 1018003:tid 1018044] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/.env.swp"] [unique_id "apK9RjAh5Y1i2tUxg4H_SwAGAxc"]
[Sat Aug 29 05:06:46.127640 2026] [security2:error] [pid 1018003:tid 1018039] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/.env~"] [unique_id "apK9RjAh5Y1i2tUxg4H_TwAGAxI"]
[Sat Aug 29 05:06:46.139870 2026] [security2:error] [pid 1018003:tid 1018182] [client 68.155.159.216:18402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_VwAABdc"]
[Sat Aug 29 05:06:46.146709 2026] [security2:error] [pid 1018003:tid 1018153] [client 20.151.200.44:64284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/blox.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_XAAABbo"]
[Sat Aug 29 05:06:46.151767 2026] [security2:error] [pid 1018003:tid 1018236] [client 20.104.18.15:23320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "louiseandkane.strangeworx.com"] [uri "/reviall.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_XgAABgw"]
[Sat Aug 29 05:06:46.155111 2026] [core:error] [pid 1018003:tid 1018240] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.155132 2026] [core:error] [pid 1018003:tid 1018240] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.155528 2026] [core:error] [pid 1018003:tid 1018206] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.155541 2026] [core:error] [pid 1018003:tid 1018206] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.155949 2026] [security2:error] [pid 1018003:tid 1018169] [client 20.151.200.44:46624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/fh26.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_YQAABco"]
[Sat Aug 29 05:06:46.159998 2026] [core:error] [pid 1018003:tid 1018244] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.160020 2026] [core:error] [pid 1018003:tid 1018244] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.160297 2026] [core:error] [pid 1018003:tid 1018266] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.160308 2026] [core:error] [pid 1018003:tid 1018266] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.160451 2026] [core:error] [pid 1018003:tid 1018270] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.160464 2026] [core:error] [pid 1018003:tid 1018270] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.162259 2026] [core:error] [pid 1018003:tid 1018206] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.162278 2026] [core:error] [pid 1018003:tid 1018206] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.164329 2026] [core:error] [pid 1018003:tid 1018159] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.164344 2026] [core:error] [pid 1018003:tid 1018159] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.166506 2026] [core:error] [pid 1018003:tid 1018225] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.166520 2026] [core:error] [pid 1018003:tid 1018225] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.173163 2026] [security2:error] [pid 1018003:tid 1018180] [client 20.104.18.15:36714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/wp-includes/ID3/moon.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_aQAABdU"]
[Sat Aug 29 05:06:46.191713 2026] [security2:error] [pid 1018003:tid 1018189] [client 20.48.250.41:21484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/wen.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_agAABd4"]
[Sat Aug 29 05:06:46.200416 2026] [security2:error] [pid 1018003:tid 1018157] [client 40.83.93.50:1648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-content/languages/about.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_awAABb4"]
[Sat Aug 29 05:06:46.203164 2026] [security2:error] [pid 1018003:tid 1018184] [client 20.104.18.15:8109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/manga.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_bAAABdk"]
[Sat Aug 29 05:06:46.203803 2026] [security2:error] [pid 1018003:tid 1018262] [client 20.63.81.20:44469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.alabamaracingrealtor.com"] [uri "/reviall.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_bQAABiY"]
[Sat Aug 29 05:06:46.230274 2026] [security2:error] [pid 1018003:tid 1018273] [client 158.158.54.35:11335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/abcd.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_dgAABjE"]
[Sat Aug 29 05:06:46.241497 2026] [cgid:error] [pid 1018003:tid 1018191] [client 20.52.41.200:1153] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/cpslggc/404.shtml
[Sat Aug 29 05:06:46.252343 2026] [security2:error] [pid 1018003:tid 1018067] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.bak"] [unique_id "apK9RjAh5Y1i2tUxg4H_fgAFwS4"]
[Sat Aug 29 05:06:46.255526 2026] [core:error] [pid 1018003:tid 1018221] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.255539 2026] [core:error] [pid 1018003:tid 1018221] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.262434 2026] [security2:error] [pid 1018003:tid 1018250] [client 68.155.159.216:33661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/atomlib.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_gQAABho"]
[Sat Aug 29 05:06:46.274304 2026] [security2:error] [pid 1018003:tid 1018061] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.old"] [unique_id "apK9RjAh5Y1i2tUxg4H_gwAFwSg"]
[Sat Aug 29 05:06:46.275565 2026] [core:error] [pid 1018003:tid 1018239] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.275579 2026] [core:error] [pid 1018003:tid 1018239] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.288003 2026] [security2:error] [pid 1018003:tid 1018224] [client 20.220.204.93:59097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/class.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_hAAABgE"]
[Sat Aug 29 05:06:46.294863 2026] [security2:error] [pid 1018003:tid 1018163] [client 20.151.200.44:61920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/kcs.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_hQAABcQ"]
[Sat Aug 29 05:06:46.311626 2026] [security2:error] [pid 1018003:tid 1018233] [client 4.205.62.107:22357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/wp-info.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_jgAABgk"]
[Sat Aug 29 05:06:46.315007 2026] [security2:error] [pid 1018003:tid 1018196] [client 20.151.200.44:62720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/advanced.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_kAAABeU"]
[Sat Aug 29 05:06:46.317028 2026] [security2:error] [pid 1018003:tid 1018078] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config~"] [unique_id "apK9RjAh5Y1i2tUxg4H_kQAFwTk"]
[Sat Aug 29 05:06:46.318347 2026] [security2:error] [pid 1018003:tid 1018256] [client 185.104.184.230:36300] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.xvo.oau.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/sito/wp-includes/wlwmanifest.xml"] [unique_id "apK9RjAh5Y1i2tUxg4H_kgAABiA"]
[Sat Aug 29 05:06:46.335166 2026] [security2:error] [pid 1018003:tid 1018216] [client 158.23.184.117:18481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/.well-known/admin.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_mgAABfk"]
[Sat Aug 29 05:06:46.337546 2026] [security2:error] [pid 1018003:tid 1018206] [client 20.104.18.15:36716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/xmini4.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_nAAABe8"]
[Sat Aug 29 05:06:46.339659 2026] [core:error] [pid 1018003:tid 1018270] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.339671 2026] [core:error] [pid 1018003:tid 1018270] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.341839 2026] [security2:error] [pid 1018003:tid 1018265] [client 4.205.62.107:65437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/xmy.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_nQAABik"]
[Sat Aug 29 05:06:46.348125 2026] [core:error] [pid 1018003:tid 1018252] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.348138 2026] [core:error] [pid 1018003:tid 1018252] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.349854 2026] [security2:error] [pid 1018003:tid 1018261] [client 20.48.250.41:21448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/inc.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_nwAABiU"]
[Sat Aug 29 05:06:46.355256 2026] [security2:error] [pid 1018003:tid 1018225] [client 158.23.147.79:48283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-includes/assets/index.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_oAAABgI"]
[Sat Aug 29 05:06:46.360273 2026] [security2:error] [pid 1018003:tid 1018195] [client 20.104.18.15:36717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/radio.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_oQAABeQ"]
[Sat Aug 29 05:06:46.373916 2026] [security2:error] [pid 1018003:tid 1018170] [client 4.205.62.107:22294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/myfile.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_pAAABcs"]
[Sat Aug 29 05:06:46.385083 2026] [core:error] [pid 1018003:tid 1018227] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.385095 2026] [core:error] [pid 1018003:tid 1018227] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.385963 2026] [core:error] [pid 1018003:tid 1018192] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.385978 2026] [core:error] [pid 1018003:tid 1018192] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.388134 2026] [core:error] [pid 1018003:tid 1018190] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.388148 2026] [core:error] [pid 1018003:tid 1018190] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.389402 2026] [security2:error] [pid 1018003:tid 1018190] [client 68.155.159.216:16132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_qwAABd8"]
[Sat Aug 29 05:06:46.390087 2026] [core:error] [pid 1018003:tid 1018234] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.390096 2026] [core:error] [pid 1018003:tid 1018234] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.390127 2026] [core:error] [pid 1018003:tid 1018194] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.390135 2026] [core:error] [pid 1018003:tid 1018194] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.391311 2026] [core:error] [pid 1018003:tid 1018184] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.391323 2026] [core:error] [pid 1018003:tid 1018184] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.392147 2026] [security2:error] [pid 1018003:tid 1018183] [client 20.52.41.200:1153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-includes/admin.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_rgAABdg"]
[Sat Aug 29 05:06:46.393485 2026] [core:error] [pid 1018003:tid 1018174] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.393498 2026] [core:error] [pid 1018003:tid 1018174] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.393870 2026] [core:error] [pid 1018003:tid 1018157] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.393879 2026] [core:error] [pid 1018003:tid 1018157] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.399664 2026] [core:error] [pid 1018003:tid 1018182] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.399675 2026] [core:error] [pid 1018003:tid 1018182] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.412201 2026] [security2:error] [pid 1018003:tid 1018270] [client 20.104.18.15:7043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/wp-includes/ID3/moon.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_sgAABi4"]
[Sat Aug 29 05:06:46.414854 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.104.18.15:8078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/asdfghj.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_swAABcI"]
[Sat Aug 29 05:06:46.434489 2026] [core:error] [pid 1018003:tid 1018203] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.434505 2026] [core:error] [pid 1018003:tid 1018203] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.435833 2026] [security2:error] [pid 1018003:tid 1018252] [client 168.107.94.195:57590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_tQAABhw"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:46.446196 2026] [security2:error] [pid 1018003:tid 1018233] [client 158.23.184.117:34515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/elp.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_uAAABgk"]
[Sat Aug 29 05:06:46.461514 2026] [core:error] [pid 1018003:tid 1018187] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.461537 2026] [core:error] [pid 1018003:tid 1018187] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.461890 2026] [security2:error] [pid 1018003:tid 1018175] [client 158.23.147.79:35263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-admin/dropdown.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_uwAABdA"]
[Sat Aug 29 05:06:46.462626 2026] [security2:error] [pid 1018003:tid 1018224] [client 52.139.37.240:61670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxbible.org"] [uri "/aged.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_vAAABgE"]
[Sat Aug 29 05:06:46.469569 2026] [security2:error] [pid 1018003:tid 1018188] [client 20.104.18.15:36609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/gulu.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_vgAABd0"]
[Sat Aug 29 05:06:46.479937 2026] [security2:error] [pid 1018003:tid 1018222] [client 158.23.184.117:19347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/.well-known/api.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_wQAABf8"]
[Sat Aug 29 05:06:46.489380 2026] [core:error] [pid 1018003:tid 1018262] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.489401 2026] [core:error] [pid 1018003:tid 1018262] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.492573 2026] [security2:error] [pid 1018003:tid 1018242] [client 20.196.209.81:17860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/gecko-new.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_wwAABhI"]
[Sat Aug 29 05:06:46.508044 2026] [security2:error] [pid 1018003:tid 1018230] [client 20.104.18.15:36788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/one.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_zQAABgY"]
[Sat Aug 29 05:06:46.513623 2026] [security2:error] [pid 1018003:tid 1018198] [client 20.151.200.44:64361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/blox.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_zgAABec"]
[Sat Aug 29 05:06:46.522124 2026] [security2:error] [pid 1018003:tid 1018250] [client 20.48.250.41:21475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/6bcwiqwj.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_0QAABho"]
[Sat Aug 29 05:06:46.523012 2026] [core:error] [pid 1018003:tid 1018221] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.523026 2026] [core:error] [pid 1018003:tid 1018221] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.525836 2026] [core:error] [pid 1018003:tid 1018167] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.525852 2026] [core:error] [pid 1018003:tid 1018167] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.526611 2026] [security2:error] [pid 1018003:tid 1018243] [client 45.148.10.62:49738] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "ninaanddon.strangeworx.com"] [uri "/wp-config.php.old"] [unique_id "apK9RjAh5Y1i2tUxg4H_0wAABhM"]
[Sat Aug 29 05:06:46.528603 2026] [core:error] [pid 1018003:tid 1018275] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.528617 2026] [core:error] [pid 1018003:tid 1018275] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.541498 2026] [security2:error] [pid 1018003:tid 1018196] [client 20.220.204.93:52295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/8.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_1QAABeU"]
[Sat Aug 29 05:06:46.542121 2026] [security2:error] [pid 1018003:tid 1018256] [client 20.104.49.130:60939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/berlin.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_1gAABiA"]
[Sat Aug 29 05:06:46.546751 2026] [security2:error] [pid 1018003:tid 1018266] [client 20.104.49.130:57505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/sta.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_1wAABio"]
[Sat Aug 29 05:06:46.555075 2026] [security2:error] [pid 1018003:tid 1018185] [client 68.155.159.216:52810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_3wAABdo"]
[Sat Aug 29 05:06:46.557937 2026] [security2:error] [pid 1018003:tid 1018155] [client 68.155.159.216:38680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_4gAABbw"]
[Sat Aug 29 05:06:46.562086 2026] [security2:error] [pid 1018003:tid 1018206] [client 158.23.147.79:32733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-content/admin.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_6AAABe8"]
[Sat Aug 29 05:06:46.566175 2026] [security2:error] [pid 1018003:tid 1018233] [client 20.104.18.15:7979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/dragonshell.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_7gAABgk"]
[Sat Aug 29 05:06:46.567925 2026] [security2:error] [pid 1018003:tid 1018164] [client 20.104.18.15:7018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/xmini4.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_7wAABcU"]
[Sat Aug 29 05:06:46.572055 2026] [security2:error] [pid 1018003:tid 1018175] [client 158.23.147.79:30548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-admin/network/index.php"] [unique_id "apK9RjAh5Y1i2tUxg4H_8QAABdA"]
[Sat Aug 29 05:06:46.576494 2026] [core:error] [pid 1018003:tid 1018224] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.576510 2026] [core:error] [pid 1018003:tid 1018224] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.577914 2026] [core:error] [pid 1018003:tid 1018187] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.577930 2026] [core:error] [pid 1018003:tid 1018187] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.579403 2026] [core:error] [pid 1018003:tid 1018277] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.579425 2026] [core:error] [pid 1018003:tid 1018277] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.580207 2026] [core:error] [pid 1018003:tid 1018226] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.580217 2026] [core:error] [pid 1018003:tid 1018226] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.584027 2026] [core:error] [pid 1018003:tid 1018170] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.584041 2026] [core:error] [pid 1018003:tid 1018170] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.585185 2026] [core:error] [pid 1018003:tid 1018242] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.585202 2026] [core:error] [pid 1018003:tid 1018242] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.585701 2026] [core:error] [pid 1018003:tid 1018234] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.585710 2026] [core:error] [pid 1018003:tid 1018234] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.586691 2026] [core:error] [pid 1018003:tid 1018218] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.586705 2026] [core:error] [pid 1018003:tid 1018218] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.588577 2026] [core:error] [pid 1018003:tid 1018166] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.588600 2026] [core:error] [pid 1018003:tid 1018166] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.589722 2026] [core:error] [pid 1018003:tid 1018230] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.589733 2026] [core:error] [pid 1018003:tid 1018230] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.592272 2026] [security2:error] [pid 1018003:tid 1018156] [client 158.23.184.117:34521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/Exception-class.php"] [unique_id "apK9RjAh5Y1i2tUxg4H__AAABb0"]
[Sat Aug 29 05:06:46.594320 2026] [security2:error] [pid 1018003:tid 1018212] [client 20.151.200.44:65523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/wsz.php"] [unique_id "apK9RjAh5Y1i2tUxg4H__QAABfU"]
[Sat Aug 29 05:06:46.614004 2026] [security2:error] [pid 1018003:tid 1018155] [client 20.104.18.15:36663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/replace.php"] [unique_id "apK9RjAh5Y1i2tUxg4EAAQAABbw"]
[Sat Aug 29 05:06:46.620524 2026] [security2:error] [pid 1018003:tid 1018172] [client 158.23.184.117:19310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/.well-known/chosen.php"] [unique_id "apK9RjAh5Y1i2tUxg4EAAgAABc0"]
[Sat Aug 29 05:06:46.630723 2026] [core:error] [pid 1018003:tid 1018175] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.630739 2026] [core:error] [pid 1018003:tid 1018175] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.632010 2026] [security2:error] [pid 1018003:tid 1018262] [client 20.151.200.44:46636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/fgd.php"] [unique_id "apK9RjAh5Y1i2tUxg4EABgAABiY"]
[Sat Aug 29 05:06:46.665971 2026] [security2:error] [pid 1018003:tid 1018169] [client 52.139.37.240:61672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxbible.org"] [uri "/essexec.php"] [unique_id "apK9RjAh5Y1i2tUxg4EACQAABco"]
[Sat Aug 29 05:06:46.669764 2026] [security2:error] [pid 1018003:tid 1018265] [client 20.151.200.44:64415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/kcs.php"] [unique_id "apK9RjAh5Y1i2tUxg4EACgAABik"]
[Sat Aug 29 05:06:46.670405 2026] [security2:error] [pid 1018003:tid 1018217] [client 20.104.18.15:36784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/503.php"] [unique_id "apK9RjAh5Y1i2tUxg4EACwAABfo"]
[Sat Aug 29 05:06:46.671675 2026] [security2:error] [pid 1018003:tid 1018213] [client 68.155.159.216:50411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/images/index.php"] [unique_id "apK9RjAh5Y1i2tUxg4EADAAABfY"]
[Sat Aug 29 05:06:46.682486 2026] [security2:error] [pid 1018003:tid 1018255] [client 40.83.93.50:23974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-content/languages/chosen.php"] [unique_id "apK9RjAh5Y1i2tUxg4EAEgAABh8"]
[Sat Aug 29 05:06:46.685012 2026] [core:error] [pid 1018003:tid 1018225] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.685028 2026] [core:error] [pid 1018003:tid 1018225] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.685549 2026] [security2:error] [pid 1018003:tid 1018170] [client 20.220.204.93:59070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/0x0x.php"] [unique_id "apK9RjAh5Y1i2tUxg4EAFQAABcs"]
[Sat Aug 29 05:06:46.687164 2026] [core:error] [pid 1018003:tid 1018258] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.687179 2026] [core:error] [pid 1018003:tid 1018258] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.695379 2026] [security2:error] [pid 1018003:tid 1018221] [client 20.48.250.41:21451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/easy.php"] [unique_id "apK9RjAh5Y1i2tUxg4EAGQAABf4"]
[Sat Aug 29 05:06:46.695802 2026] [security2:error] [pid 1018003:tid 1018238] [client 158.158.54.35:28370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-access.php"] [unique_id "apK9RjAh5Y1i2tUxg4EAGAAABg4"]
[Sat Aug 29 05:06:46.697242 2026] [security2:error] [pid 1018003:tid 1018239] [client 20.104.18.15:8111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/wp-safe.php"] [unique_id "apK9RjAh5Y1i2tUxg4EAGgAABg8"]
[Sat Aug 29 05:06:46.697479 2026] [security2:error] [pid 1018003:tid 1018218] [client 20.104.18.15:7039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/gulu.php"] [unique_id "apK9RjAh5Y1i2tUxg4EAGwAABfs"]
[Sat Aug 29 05:06:46.725732 2026] [core:error] [pid 1018003:tid 1018159] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.725745 2026] [core:error] [pid 1018003:tid 1018159] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.728308 2026] [core:error] [pid 1018003:tid 1018230] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.728320 2026] [core:error] [pid 1018003:tid 1018230] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.728962 2026] [core:error] [pid 1018003:tid 1018153] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.728974 2026] [core:error] [pid 1018003:tid 1018153] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.737835 2026] [security2:error] [pid 1018003:tid 1018234] [client 158.23.184.117:33942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/ee.php"] [unique_id "apK9RjAh5Y1i2tUxg4EAIQAABgo"]
[Sat Aug 29 05:06:46.757364 2026] [security2:error] [pid 1018003:tid 1018233] [client 68.155.159.216:49160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK9RjAh5Y1i2tUxg4EAMQAABgk"]
[Sat Aug 29 05:06:46.772044 2026] [security2:error] [pid 1018003:tid 1018175] [client 20.104.18.15:36812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/c4.php"] [unique_id "apK9RjAh5Y1i2tUxg4EANgAABdA"]
[Sat Aug 29 05:06:46.777568 2026] [security2:error] [pid 1018003:tid 1018186] [client 158.23.147.79:30638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK9RjAh5Y1i2tUxg4EANwAABds"]
[Sat Aug 29 05:06:46.777896 2026] [security2:error] [pid 1018003:tid 1018185] [client 68.155.159.216:51887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/images/index.php"] [unique_id "apK9RjAh5Y1i2tUxg4EAOAAABdo"]
[Sat Aug 29 05:06:46.781095 2026] [security2:error] [pid 1018003:tid 1018157] [client 158.23.184.117:19274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/.well-known/config.php"] [unique_id "apK9RjAh5Y1i2tUxg4EAOgAABb4"]
[Sat Aug 29 05:06:46.784094 2026] [core:error] [pid 1018003:tid 1018172] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.784106 2026] [core:error] [pid 1018003:tid 1018172] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.786029 2026] [core:error] [pid 1018003:tid 1018224] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.786043 2026] [core:error] [pid 1018003:tid 1018224] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.790523 2026] [core:error] [pid 1018003:tid 1018231] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.790523 2026] [core:error] [pid 1018003:tid 1018216] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.790537 2026] [core:error] [pid 1018003:tid 1018231] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.790545 2026] [core:error] [pid 1018003:tid 1018216] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.791666 2026] [core:error] [pid 1018003:tid 1018277] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.791677 2026] [core:error] [pid 1018003:tid 1018277] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.798180 2026] [security2:error] [pid 1018003:tid 1018160] [client 20.197.61.180:7780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/csv.php"] [unique_id "apK9RjAh5Y1i2tUxg4EAQgAABcE"]
[Sat Aug 29 05:06:46.799297 2026] [core:error] [pid 1018003:tid 1018162] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.799306 2026] [core:error] [pid 1018003:tid 1018162] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.801277 2026] [core:error] [pid 1018003:tid 1018217] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.801287 2026] [core:error] [pid 1018003:tid 1018217] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.803438 2026] [core:error] [pid 1018003:tid 1018255] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.803453 2026] [core:error] [pid 1018003:tid 1018255] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.806016 2026] [core:error] [pid 1018003:tid 1018170] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.806027 2026] [core:error] [pid 1018003:tid 1018170] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.806134 2026] [core:error] [pid 1018003:tid 1018242] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.806141 2026] [core:error] [pid 1018003:tid 1018242] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.809172 2026] [core:error] [pid 1018003:tid 1018258] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.809181 2026] [core:error] [pid 1018003:tid 1018258] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.809748 2026] [security2:error] [pid 1018003:tid 1018271] [client 4.205.62.107:56046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/btx25.php"] [unique_id "apK9RjAh5Y1i2tUxg4EASAAABi8"]
[Sat Aug 29 05:06:46.812922 2026] [security2:error] [pid 1018003:tid 1018153] [client 20.151.200.44:64336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/wsz.php"] [unique_id "apK9RjAh5Y1i2tUxg4EASQAABbo"]
[Sat Aug 29 05:06:46.815227 2026] [security2:error] [pid 1018003:tid 1018163] [client 168.107.94.195:58035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9RjAh5Y1i2tUxg4EASgAABcQ"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:46.828478 2026] [security2:error] [pid 1018003:tid 1018275] [client 20.104.18.15:8002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/gjewuagf.php"] [unique_id "apK9RjAh5Y1i2tUxg4EASwAABjM"]
[Sat Aug 29 05:06:46.838779 2026] [security2:error] [pid 1018003:tid 1018270] [client 20.220.204.93:59012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/166.php"] [unique_id "apK9RjAh5Y1i2tUxg4EATAAABi4"]
[Sat Aug 29 05:06:46.845472 2026] [security2:error] [pid 1018003:tid 1018164] [client 20.48.250.41:21389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/fresh3.php"] [unique_id "apK9RjAh5Y1i2tUxg4EATQAABcU"]
[Sat Aug 29 05:06:46.847137 2026] [security2:error] [pid 1018003:tid 1018175] [client 158.23.147.79:25528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/.well-known/content.php"] [unique_id "apK9RjAh5Y1i2tUxg4EATwAABdA"]
[Sat Aug 29 05:06:46.848210 2026] [cgid:error] [pid 1018003:tid 1018250] [client 20.52.41.200:1243] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/cpslggc/404.shtml
[Sat Aug 29 05:06:46.854949 2026] [core:error] [pid 1018003:tid 1018111] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.854960 2026] [core:error] [pid 1018003:tid 1018111] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.856636 2026] [security2:error] [pid 1018003:tid 1018226] [client 52.139.37.240:2595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxbible.org"] [uri "/fw.php"] [unique_id "apK9RjAh5Y1i2tUxg4EAUQAABgM"]
[Sat Aug 29 05:06:46.860332 2026] [security2:error] [pid 1018003:tid 1018172] [client 20.151.200.44:47371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/inject.php"] [unique_id "apK9RjAh5Y1i2tUxg4EAUwAABc0"]
[Sat Aug 29 05:06:46.868919 2026] [security2:error] [pid 1018003:tid 1018216] [client 20.104.18.15:36781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/504.php"] [unique_id "apK9RjAh5Y1i2tUxg4EAVQAABfk"]
[Sat Aug 29 05:06:46.886883 2026] [core:error] [pid 1018003:tid 1018265] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.886899 2026] [core:error] [pid 1018003:tid 1018265] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.896122 2026] [core:error] [pid 1018003:tid 1018212] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.896134 2026] [core:error] [pid 1018003:tid 1018212] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.922617 2026] [core:error] [pid 1018003:tid 1018162] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.922656 2026] [core:error] [pid 1018003:tid 1018162] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.922894 2026] [security2:error] [pid 1018003:tid 1018190] [client 20.196.209.81:17884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/wp-admin.php"] [unique_id "apK9RjAh5Y1i2tUxg4EAYAAABd8"]
[Sat Aug 29 05:06:46.925623 2026] [security2:error] [pid 1018003:tid 1018221] [client 68.155.159.216:6035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK9RjAh5Y1i2tUxg4EAYQAABf4"]
[Sat Aug 29 05:06:46.926900 2026] [security2:error] [pid 1018003:tid 1018224] [client 158.23.184.117:34742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/edit.php"] [unique_id "apK9RjAh5Y1i2tUxg4EAYwAABgE"]
[Sat Aug 29 05:06:46.929538 2026] [security2:error] [pid 1018003:tid 1018218] [client 20.104.18.15:36675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/rxr.php"] [unique_id "apK9RjAh5Y1i2tUxg4EAZAAABfs"]
[Sat Aug 29 05:06:46.929928 2026] [security2:error] [pid 1018003:tid 1018169] [client 158.23.184.117:19283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/.well-known/core.php"] [unique_id "apK9RjAh5Y1i2tUxg4EAZQAABco"]
[Sat Aug 29 05:06:46.934169 2026] [core:error] [pid 1018003:tid 1018238] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.934189 2026] [core:error] [pid 1018003:tid 1018238] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.947211 2026] [security2:error] [pid 1018003:tid 1018243] [client 4.205.62.107:53374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/admin-ajax.php"] [unique_id "apK9RjAh5Y1i2tUxg4EAZgAABhM"]
[Sat Aug 29 05:06:46.947593 2026] [security2:error] [pid 1018003:tid 1018188] [client 68.155.159.216:30667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK9RjAh5Y1i2tUxg4EAaAAABd0"]
[Sat Aug 29 05:06:46.950814 2026] [security2:error] [pid 1018003:tid 1018166] [client 20.104.18.15:6976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/replace.php"] [unique_id "apK9RjAh5Y1i2tUxg4EAaQAABcc"]
[Sat Aug 29 05:06:46.956022 2026] [security2:error] [pid 1018003:tid 1018258] [client 20.151.200.44:64396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/msy.php"] [unique_id "apK9RjAh5Y1i2tUxg4EAawAABiI"]
[Sat Aug 29 05:06:46.958775 2026] [security2:error] [pid 1018003:tid 1018116] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/.wp-config.php.swp"] [unique_id "apK9RjAh5Y1i2tUxg4EAbQAFz18"]
[Sat Aug 29 05:06:46.963695 2026] [security2:error] [pid 1018003:tid 1018271] [client 20.104.18.15:8150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/tnglzqmv.php"] [unique_id "apK9RjAh5Y1i2tUxg4EAcQAABi8"]
[Sat Aug 29 05:06:46.974281 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.151.200.44:64316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/msy.php"] [unique_id "apK9RjAh5Y1i2tUxg4EAdwAABcI"]
[Sat Aug 29 05:06:46.974617 2026] [security2:error] [pid 1018003:tid 1018126] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/ADMIN/.env"] [unique_id "apK9RjAh5Y1i2tUxg4EAdQAFz2k"]
[Sat Aug 29 05:06:46.976991 2026] [security2:error] [pid 1018003:tid 1018127] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/API/.env"] [unique_id "apK9RjAh5Y1i2tUxg4EAegAFz2o"]
[Sat Aug 29 05:06:46.977093 2026] [core:error] [pid 1018003:tid 1018138] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.977105 2026] [core:error] [pid 1018003:tid 1018138] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.979009 2026] [core:error] [pid 1018003:tid 1018132] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.979022 2026] [core:error] [pid 1018003:tid 1018132] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.987777 2026] [core:error] [pid 1018003:tid 1018163] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.987789 2026] [core:error] [pid 1018003:tid 1018163] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.992143 2026] [core:error] [pid 1018003:tid 1018266] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.992154 2026] [core:error] [pid 1018003:tid 1018266] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:46.997493 2026] [security2:error] [pid 1018003:tid 1018233] [client 20.52.41.200:1243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/lock360.php"] [unique_id "apK9RjAh5Y1i2tUxg4EAgQAABgk"]
[Sat Aug 29 05:06:47.010158 2026] [cgid:error] [pid 1018003:tid 1018217] [client 45.156.129.121:40300] AH01264: stderr from /home1/acovibco/public_html/metlane/cgi-bin/authLogin.cgi: script not found or unable to stat, referer: http://metlane.com/cgi-bin/authLogin.cgi
[Sat Aug 29 05:06:47.015251 2026] [security2:error] [pid 1018003:tid 1018194] [client 52.139.37.240:32856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superresources.com"] [uri "/zwso.php"] [unique_id "apK9RzAh5Y1i2tUxg4EAgwAABeM"]
[Sat Aug 29 05:06:47.017484 2026] [security2:error] [pid 1018003:tid 1018231] [client 20.104.18.15:36550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/admin.php"] [unique_id "apK9RzAh5Y1i2tUxg4EAhAAABgc"]
[Sat Aug 29 05:06:47.022064 2026] [security2:error] [pid 1018003:tid 1018213] [client 20.220.204.93:59042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/h2a2ck.php"] [unique_id "apK9RzAh5Y1i2tUxg4EAiAAABfY"]
[Sat Aug 29 05:06:47.023928 2026] [core:error] [pid 1018003:tid 1018256] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.023940 2026] [core:error] [pid 1018003:tid 1018256] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.024205 2026] [core:error] [pid 1018003:tid 1018175] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.024215 2026] [core:error] [pid 1018003:tid 1018175] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.024214 2026] [core:error] [pid 1018003:tid 1018267] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.024226 2026] [core:error] [pid 1018003:tid 1018267] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.026602 2026] [core:error] [pid 1018003:tid 1018120] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.026614 2026] [core:error] [pid 1018003:tid 1018120] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.028929 2026] [security2:error] [pid 1018003:tid 1018177] [client 68.155.159.216:51798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-includes/content.php"] [unique_id "apK9RzAh5Y1i2tUxg4EAigAABdI"]
[Sat Aug 29 05:06:47.036611 2026] [security2:error] [pid 1018003:tid 1018198] [client 52.139.37.240:32753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/up.php"] [unique_id "apK9RzAh5Y1i2tUxg4EAjAAABec"]
[Sat Aug 29 05:06:47.039287 2026] [core:error] [pid 1018003:tid 1018212] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.039305 2026] [core:error] [pid 1018003:tid 1018212] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.059615 2026] [security2:error] [pid 1018003:tid 1018270] [client 52.139.37.240:2607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxbible.org"] [uri "/zwso.php"] [unique_id "apK9RzAh5Y1i2tUxg4EAjQAABi4"]
[Sat Aug 29 05:06:47.072015 2026] [security2:error] [pid 1018003:tid 1018169] [client 158.23.147.79:24509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK9RzAh5Y1i2tUxg4EAkAAABco"]
[Sat Aug 29 05:06:47.072299 2026] [security2:error] [pid 1018003:tid 1018157] [client 158.23.184.117:34735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/f35.php"] [unique_id "apK9RzAh5Y1i2tUxg4EAkQAABb4"]
[Sat Aug 29 05:06:47.072970 2026] [core:error] [pid 1018003:tid 1018123] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.072983 2026] [core:error] [pid 1018003:tid 1018123] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.073139 2026] [security2:error] [pid 1018003:tid 1018246] [client 158.23.184.117:19305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/.well-known/data.php"] [unique_id "apK9RzAh5Y1i2tUxg4EAkgAABhY"]
[Sat Aug 29 05:06:47.073337 2026] [security2:error] [pid 1018003:tid 1018226] [client 52.139.37.240:21384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/breads1.php"] [unique_id "apK9RzAh5Y1i2tUxg4EAkwAABgM"]
[Sat Aug 29 05:06:47.073961 2026] [core:error] [pid 1018003:tid 1018073] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.073972 2026] [core:error] [pid 1018003:tid 1018073] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.078893 2026] [core:error] [pid 1018003:tid 1018141] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.078907 2026] [core:error] [pid 1018003:tid 1018141] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.087555 2026] [security2:error] [pid 1018003:tid 1018243] [client 20.48.250.41:21495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/bgymj.php"] [unique_id "apK9RzAh5Y1i2tUxg4EAlQAABhM"]
[Sat Aug 29 05:06:47.092896 2026] [security2:error] [pid 1018003:tid 1018236] [client 20.104.18.15:36669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandandrew.strangeworx.com"] [uri "/reviall.php"] [unique_id "apK9RzAh5Y1i2tUxg4EAlgAABgw"]
[Sat Aug 29 05:06:47.105960 2026] [security2:error] [pid 1018003:tid 1018130] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/APP/.env"] [unique_id "apK9RzAh5Y1i2tUxg4EAmQAGBm0"]
[Sat Aug 29 05:06:47.110353 2026] [security2:error] [pid 1018003:tid 1018139] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/Api/.env"] [unique_id "apK9RzAh5Y1i2tUxg4EAmgAF3HY"]
[Sat Aug 29 05:06:47.120448 2026] [security2:error] [pid 1018003:tid 1018163] [client 20.104.18.15:7086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/c4.php"] [unique_id "apK9RzAh5Y1i2tUxg4EAnAAABcQ"]
[Sat Aug 29 05:06:47.120669 2026] [security2:error] [pid 1018003:tid 1018128] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/BACK/.env"] [unique_id "apK9RzAh5Y1i2tUxg4EAmwAGCms"]
[Sat Aug 29 05:06:47.125317 2026] [security2:error] [pid 1018003:tid 1018144] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/BE/.env"] [unique_id "apK9RzAh5Y1i2tUxg4EAngAGCXs"]
[Sat Aug 29 05:06:47.125341 2026] [security2:error] [pid 1018003:tid 1018142] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/BACKEND/.env"] [unique_id "apK9RzAh5Y1i2tUxg4EAnQAGCXk"]
[Sat Aug 29 05:06:47.126972 2026] [core:error] [pid 1018003:tid 1018137] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.126985 2026] [core:error] [pid 1018003:tid 1018137] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.139947 2026] [security2:error] [pid 1018003:tid 1018125] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/Backend/.env"] [unique_id "apK9RzAh5Y1i2tUxg4EAoQAGB2g"]
[Sat Aug 29 05:06:47.140176 2026] [security2:error] [pid 1018003:tid 1018194] [client 158.23.147.79:58093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK9RzAh5Y1i2tUxg4EAowAABeM"]
[Sat Aug 29 05:06:47.140197 2026] [security2:error] [pid 1018003:tid 1018240] [client 158.158.54.35:35205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-content/uploads/min.php"] [unique_id "apK9RzAh5Y1i2tUxg4EAogAABhA"]
[Sat Aug 29 05:06:47.141455 2026] [security2:error] [pid 1018003:tid 1018225] [client 52.139.37.240:30807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "apK9RzAh5Y1i2tUxg4EApAAABgI"]
[Sat Aug 29 05:06:47.142246 2026] [security2:error] [pid 1018003:tid 1018265] [client 20.104.18.15:8118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/wefile.php"] [unique_id "apK9RzAh5Y1i2tUxg4EApQAABik"]
[Sat Aug 29 05:06:47.147560 2026] [security2:error] [pid 1018003:tid 1018129] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/Be/.env"] [unique_id "apK9RzAh5Y1i2tUxg4EApgAGIGw"]
[Sat Aug 29 05:06:47.158969 2026] [security2:error] [pid 1018003:tid 1018267] [client 20.220.204.93:52228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/error_log.php"] [unique_id "apK9RzAh5Y1i2tUxg4EApwAABis"]
[Sat Aug 29 05:06:47.177103 2026] [security2:error] [pid 1018003:tid 1018159] [client 20.104.18.15:36674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/ws85.php"] [unique_id "apK9RzAh5Y1i2tUxg4EAqQAABcA"]
[Sat Aug 29 05:06:47.181148 2026] [security2:error] [pid 1018003:tid 1018172] [client 40.83.93.50:23959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-content/languages/index.php"] [unique_id "apK9RzAh5Y1i2tUxg4EArAAABc0"]
[Sat Aug 29 05:06:47.186980 2026] [security2:error] [pid 1018003:tid 1018161] [client 52.139.37.240:8456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drjrae.com"] [uri "/upfile.php"] [unique_id "apK9RzAh5Y1i2tUxg4EArgAABcI"]
[Sat Aug 29 05:06:47.196006 2026] [security2:error] [pid 1018003:tid 1018275] [client 4.205.62.107:21571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/ms-edit.php"] [unique_id "apK9RzAh5Y1i2tUxg4EAtAAABjM"]
[Sat Aug 29 05:06:47.196013 2026] [security2:error] [pid 1018003:tid 1018255] [client 168.107.94.195:58321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9RzAh5Y1i2tUxg4EAswAABh8"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:47.205382 2026] [security2:error] [pid 1018003:tid 1018179] [client 158.23.147.79:17424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/goods.php"] [unique_id "apK9RzAh5Y1i2tUxg4EAtwAABdQ"]
[Sat Aug 29 05:06:47.209074 2026] [security2:error] [pid 1018003:tid 1018189] [client 52.139.37.240:33587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superresources.com"] [uri "/admin/function.php"] [unique_id "apK9RzAh5Y1i2tUxg4EAuQAABd4"]
[Sat Aug 29 05:06:47.211343 2026] [security2:error] [pid 1018003:tid 1018174] [client 158.23.147.79:26488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-includes/Text/about.php"] [unique_id "apK9RzAh5Y1i2tUxg4EAuwAABc8"]
[Sat Aug 29 05:06:47.216802 2026] [security2:error] [pid 1018003:tid 1018182] [client 158.23.184.117:19276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/.well-known/db-status.php"] [unique_id "apK9RzAh5Y1i2tUxg4EAvgAABdc"]
[Sat Aug 29 05:06:47.220121 2026] [security2:error] [pid 1018003:tid 1018268] [client 158.23.184.117:34699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/fff.php"] [unique_id "apK9RzAh5Y1i2tUxg4EAwQAABiw"]
[Sat Aug 29 05:06:47.220747 2026] [core:error] [pid 1018003:tid 1018167] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.220759 2026] [core:error] [pid 1018003:tid 1018167] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.224746 2026] [core:error] [pid 1018003:tid 1018218] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.224763 2026] [core:error] [pid 1018003:tid 1018218] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.224904 2026] [core:error] [pid 1018003:tid 1018157] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.224919 2026] [core:error] [pid 1018003:tid 1018157] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.224981 2026] [core:error] [pid 1018003:tid 1018169] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.224994 2026] [core:error] [pid 1018003:tid 1018169] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.226533 2026] [core:error] [pid 1018003:tid 1018246] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.226544 2026] [core:error] [pid 1018003:tid 1018246] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.247703 2026] [core:error] [pid 1018003:tid 1018155] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.247720 2026] [core:error] [pid 1018003:tid 1018155] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.255389 2026] [security2:error] [pid 1018003:tid 1018250] [client 68.155.159.216:18182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-content/cong.php"] [unique_id "apK9RzAh5Y1i2tUxg4EA0AAABho"]
[Sat Aug 29 05:06:47.258246 2026] [security2:error] [pid 1018003:tid 1018217] [client 20.104.18.15:7016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/rxr.php"] [unique_id "apK9RzAh5Y1i2tUxg4EA0gAABfo"]
[Sat Aug 29 05:06:47.268634 2026] [core:error] [pid 1018003:tid 1018231] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.268658 2026] [core:error] [pid 1018003:tid 1018231] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.271598 2026] [security2:error] [pid 1018003:tid 1018184] [client 52.139.37.240:61669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxbible.org"] [uri "/admin/function.php"] [unique_id "apK9RzAh5Y1i2tUxg4EA2gAABdk"]
[Sat Aug 29 05:06:47.273106 2026] [security2:error] [pid 1018003:tid 1018184] [client 20.48.250.41:21482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/ws69.php"] [unique_id "apK9RzAh5Y1i2tUxg4EA2wAABdk"]
[Sat Aug 29 05:06:47.274173 2026] [core:error] [pid 1018003:tid 1018160] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.274190 2026] [core:error] [pid 1018003:tid 1018160] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.284267 2026] [security2:error] [pid 1018003:tid 1018212] [client 52.139.37.240:20771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/must.php"] [unique_id "apK9RzAh5Y1i2tUxg4EA4AAABfU"]
[Sat Aug 29 05:06:47.286459 2026] [core:error] [pid 1018003:tid 1018189] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.286477 2026] [core:error] [pid 1018003:tid 1018189] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.286810 2026] [security2:error] [pid 1018003:tid 1018153] [client 45.148.10.62:49748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ninaanddon.strangeworx.com"] [uri "/config.php"] [unique_id "apK9RzAh5Y1i2tUxg4EA4gAABbo"]
[Sat Aug 29 05:06:47.294643 2026] [security2:error] [pid 1018003:tid 1018200] [client 20.220.204.93:59118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/403.php"] [unique_id "apK9RzAh5Y1i2tUxg4EA6wAABek"]
[Sat Aug 29 05:06:47.294750 2026] [core:error] [pid 1018003:tid 1018174] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.294765 2026] [core:error] [pid 1018003:tid 1018174] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.295315 2026] [security2:error] [pid 1018003:tid 1018170] [client 52.139.37.240:32748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/wp-content/155.php"] [unique_id "apK9RzAh5Y1i2tUxg4EA7AAABcs"]
[Sat Aug 29 05:06:47.296725 2026] [security2:error] [pid 1018003:tid 1018218] [client 20.104.18.15:8027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/blog.php"] [unique_id "apK9RzAh5Y1i2tUxg4EA7QAABfs"]
[Sat Aug 29 05:06:47.301819 2026] [security2:error] [pid 1018003:tid 1018252] [client 45.61.187.50:64523] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "succulentideas.com"] [uri "/wp-content/plugins/wp_gljbkwx/wp_gljbkwx.php"] [unique_id "apK9RzAh5Y1i2tUxg4EA7wAABhw"]
[Sat Aug 29 05:06:47.314758 2026] [core:error] [pid 1018003:tid 1018243] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.314778 2026] [core:error] [pid 1018003:tid 1018243] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.316075 2026] [core:error] [pid 1018003:tid 1018242] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.316088 2026] [core:error] [pid 1018003:tid 1018242] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.316238 2026] [core:error] [pid 1018003:tid 1018236] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.316249 2026] [core:error] [pid 1018003:tid 1018236] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.318620 2026] [security2:error] [pid 1018003:tid 1018187] [client 158.23.147.79:50072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-admin/about.php"] [unique_id "apK9RzAh5Y1i2tUxg4EA9QAABdw"]
[Sat Aug 29 05:06:47.334233 2026] [core:error] [pid 1018003:tid 1018180] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.334246 2026] [core:error] [pid 1018003:tid 1018180] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.335684 2026] [core:error] [pid 1018003:tid 1018166] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.335707 2026] [core:error] [pid 1018003:tid 1018166] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.339523 2026] [core:error] [pid 1018003:tid 1018250] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.339535 2026] [core:error] [pid 1018003:tid 1018250] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.346307 2026] [security2:error] [pid 1018003:tid 1018222] [client 20.196.209.81:17903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/wp-configs.php"] [unique_id "apK9RzAh5Y1i2tUxg4EA-wAABf8"]
[Sat Aug 29 05:06:47.358883 2026] [security2:error] [pid 1018003:tid 1018258] [client 158.23.184.117:19345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/.well-known/f35.php"] [unique_id "apK9RzAh5Y1i2tUxg4EA_QAABiI"]
[Sat Aug 29 05:06:47.365176 2026] [security2:error] [pid 1018003:tid 1018261] [client 158.23.184.117:34734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/ff1.php"] [unique_id "apK9RzAh5Y1i2tUxg4EA_wAABiU"]
[Sat Aug 29 05:06:47.371979 2026] [http2:info] [pid 1028675:tid 1028675] h2_workers: created with min=128 max=192 idle_ms=600000
[Sat Aug 29 05:06:47.375555 2026] [security2:error] [pid 1018003:tid 1018239] [client 68.155.159.216:33614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/lv.php"] [unique_id "apK9RzAh5Y1i2tUxg4EBAQAABg8"]
[Sat Aug 29 05:06:47.377093 2026] [security2:error] [pid 1018003:tid 1018200] [client 20.104.18.15:36773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/ffs.php"] [unique_id "apK9RzAh5Y1i2tUxg4EBAwAABek"]
[Sat Aug 29 05:06:47.377335 2026] [security2:error] [pid 1018003:tid 1018195] [client 52.139.37.240:8473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drjrae.com"] [uri "/form.php"] [unique_id "apK9RzAh5Y1i2tUxg4EBBAAABeQ"]
[Sat Aug 29 05:06:47.384655 2026] [autoindex:error] [pid 1018003:tid 1018196] [client 52.139.37.240:0] AH01276: Cannot serve directory /home4/swumccom/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:06:47.402600 2026] [core:error] [pid 1018003:tid 1018071] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.402789 2026] [core:error] [pid 1018003:tid 1018071] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.405221 2026] [security2:error] [pid 1018003:tid 1018217] [client 52.139.37.240:33571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superresources.com"] [uri "/zoom1.php"] [unique_id "apK9RzAh5Y1i2tUxg4EBDAAABfo"]
[Sat Aug 29 05:06:47.407124 2026] [core:error] [pid 1018003:tid 1018034] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.407140 2026] [core:error] [pid 1018003:tid 1018034] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.422521 2026] [core:error] [pid 1018003:tid 1018047] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.422541 2026] [core:error] [pid 1018003:tid 1018047] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.442872 2026] [security2:error] [pid 1018003:tid 1018155] [client 20.104.18.15:8094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/wp-admin/js/wp-load.php"] [unique_id "apK9RzAh5Y1i2tUxg4EBEQAABbw"]
[Sat Aug 29 05:06:47.445883 2026] [core:error] [pid 1018003:tid 1018206] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.445902 2026] [core:error] [pid 1018003:tid 1018206] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.456271 2026] [security2:error] [pid 1018003:tid 1018246] [client 20.52.41.200:1238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-conflg.php"] [unique_id "apK9RzAh5Y1i2tUxg4EBFAAABhY"]
[Sat Aug 29 05:06:47.457932 2026] [security2:error] [pid 1018003:tid 1018202] [client 213.202.253.4:55202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bv-place.com"] [uri "/wp-content/txets.php"] [unique_id "apK9RzAh5Y1i2tUxg4EBFQAABes"], referer: www.google.com
[Sat Aug 29 05:06:47.461239 2026] [security2:error] [pid 1018003:tid 1018164] [client 4.205.62.107:22269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/infos.php"] [unique_id "apK9RzAh5Y1i2tUxg4EBFgAABcU"]
[Sat Aug 29 05:06:47.470777 2026] [security2:error] [pid 1018003:tid 1018186] [client 4.205.62.107:65504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/ms-edit.php"] [unique_id "apK9RzAh5Y1i2tUxg4EBGAAABds"]
[Sat Aug 29 05:06:47.470830 2026] [core:error] [pid 1018003:tid 1018180] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.470841 2026] [core:error] [pid 1018003:tid 1018180] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.473037 2026] [core:error] [pid 1028675:tid 1028816] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.473054 2026] [core:error] [pid 1028675:tid 1028816] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.474438 2026] [security2:error] [pid 1018003:tid 1018250] [client 52.139.37.240:31493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/z.php"] [unique_id "apK9RzAh5Y1i2tUxg4EBGQAABho"]
[Sat Aug 29 05:06:47.474583 2026] [security2:error] [pid 1018003:tid 1018225] [client 20.48.250.41:21391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/ccs.php"] [unique_id "apK9RzAh5Y1i2tUxg4EBGgAABgI"]
[Sat Aug 29 05:06:47.476827 2026] [security2:error] [pid 1018003:tid 1018267] [client 20.104.18.15:7064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "moderntechservices.com"] [uri "/reviall.php"] [unique_id "apK9RzAh5Y1i2tUxg4EBHAAABis"]
[Sat Aug 29 05:06:47.477506 2026] [security2:error] [pid 1018003:tid 1018252] [client 52.139.37.240:2587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxbible.org"] [uri "/zoom1.php"] [unique_id "apK9RzAh5Y1i2tUxg4EBHQAABhw"]
[Sat Aug 29 05:06:47.482136 2026] [security2:error] [pid 1018003:tid 1018243] [client 52.139.37.240:20741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/up.php"] [unique_id "apK9RzAh5Y1i2tUxg4EBIAAABhM"]
[Sat Aug 29 05:06:47.490436 2026] [security2:error] [pid 1018003:tid 1018242] [client 52.139.37.240:52217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/wp-update.php"] [unique_id "apK9RzAh5Y1i2tUxg4EBJgAABhI"]
[Sat Aug 29 05:06:47.500034 2026] [core:error] [pid 1018003:tid 1018169] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.500049 2026] [core:error] [pid 1018003:tid 1018169] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.501388 2026] [security2:error] [pid 1018003:tid 1018167] [client 158.23.184.117:19351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK9RzAh5Y1i2tUxg4EBKQAABcg"]
[Sat Aug 29 05:06:47.509264 2026] [security2:error] [pid 1018003:tid 1018226] [client 158.23.184.117:34703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/flower.php"] [unique_id "apK9RzAh5Y1i2tUxg4EBLAAABgM"]
[Sat Aug 29 05:06:47.515880 2026] [core:error] [pid 1018003:tid 1018275] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.515901 2026] [core:error] [pid 1018003:tid 1018275] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.524345 2026] [core:error] [pid 1028675:tid 1028825] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.524377 2026] [core:error] [pid 1028675:tid 1028825] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.524998 2026] [security2:error] [pid 1018003:tid 1018189] [client 4.205.62.107:22327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/thui.php"] [unique_id "apK9RzAh5Y1i2tUxg4EBMwAABd4"]
[Sat Aug 29 05:06:47.526872 2026] [core:error] [pid 1018003:tid 1018203] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.526889 2026] [core:error] [pid 1018003:tid 1018203] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.527219 2026] [core:error] [pid 1028675:tid 1028828] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.527232 2026] [core:error] [pid 1028675:tid 1028828] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.527597 2026] [core:error] [pid 1018003:tid 1018227] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.527621 2026] [core:error] [pid 1018003:tid 1018227] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.527642 2026] [core:error] [pid 1018003:tid 1018221] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.527653 2026] [core:error] [pid 1018003:tid 1018221] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.528561 2026] [core:error] [pid 1018003:tid 1018212] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.528576 2026] [core:error] [pid 1018003:tid 1018212] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.531233 2026] [core:error] [pid 1018003:tid 1018270] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.531246 2026] [core:error] [pid 1018003:tid 1018270] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.531826 2026] [core:error] [pid 1018003:tid 1018185] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.531841 2026] [core:error] [pid 1018003:tid 1018185] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.550968 2026] [security2:error] [pid 1028675:tid 1028837] [client 20.104.18.15:36726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/nano.php"] [unique_id "apK9R9dHPfW2QFvhmL7LsAAAABs"]
[Sat Aug 29 05:06:47.551233 2026] [security2:error] [pid 1028675:tid 1028836] [client 20.220.204.93:59096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/cytyr.php"] [unique_id "apK9R9dHPfW2QFvhmL7LsQAAABo"]
[Sat Aug 29 05:06:47.553682 2026] [security2:error] [pid 1018003:tid 1018040] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/admin-app/.env"] [unique_id "apK9RzAh5Y1i2tUxg4EBOQAGLBM"]
[Sat Aug 29 05:06:47.571801 2026] [security2:error] [pid 1028675:tid 1028834] [client 57.141.14.89:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/"] [unique_id "apK9R9dHPfW2QFvhmL7LsgAAABg"]
[Sat Aug 29 05:06:47.576009 2026] [security2:error] [pid 1028675:tid 1028847] [client 168.107.94.195:58594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9R9dHPfW2QFvhmL7LtQAAACU"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:47.579273 2026] [core:error] [pid 1028675:tid 1028845] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.579294 2026] [core:error] [pid 1028675:tid 1028845] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.583398 2026] [security2:error] [pid 1028675:tid 1028826] [client 52.139.37.240:8468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drjrae.com"] [uri "/wp-sigunq.php"] [unique_id "apK9R9dHPfW2QFvhmL7LtgAAABA"]
[Sat Aug 29 05:06:47.591462 2026] [security2:error] [pid 1018003:tid 1018179] [client 158.158.54.35:11336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK9RzAh5Y1i2tUxg4EBPQAABdQ"]
[Sat Aug 29 05:06:47.600320 2026] [core:error] [pid 1028675:tid 1028850] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.600337 2026] [core:error] [pid 1028675:tid 1028850] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.601446 2026] [security2:error] [pid 1018003:tid 1018233] [client 20.104.18.15:8112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/robot.php"] [unique_id "apK9RzAh5Y1i2tUxg4EBPgAABgk"]
[Sat Aug 29 05:06:47.602010 2026] [security2:error] [pid 1028675:tid 1028852] [client 158.23.147.79:35758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/login.php"] [unique_id "apK9R9dHPfW2QFvhmL7LuAAAACo"]
[Sat Aug 29 05:06:47.627123 2026] [security2:error] [pid 1028675:tid 1028838] [client 52.139.37.240:32836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superresources.com"] [uri "/about.php7"] [unique_id "apK9R9dHPfW2QFvhmL7LuQAAABw"]
[Sat Aug 29 05:06:47.641919 2026] [security2:error] [pid 1018003:tid 1018243] [client 20.48.250.41:21439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/mar.php"] [unique_id "apK9RzAh5Y1i2tUxg4EBQgAABhM"]
[Sat Aug 29 05:06:47.642280 2026] [security2:error] [pid 1018003:tid 1018170] [client 20.197.61.180:11597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/fox.php"] [unique_id "apK9RzAh5Y1i2tUxg4EBQwAABcs"]
[Sat Aug 29 05:06:47.643288 2026] [core:error] [pid 1018003:tid 1018067] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.643308 2026] [core:error] [pid 1018003:tid 1018067] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.645073 2026] [security2:error] [pid 1028675:tid 1028851] [client 158.23.184.117:19329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/.well-known/home.php"] [unique_id "apK9R9dHPfW2QFvhmL7LugAAACk"]
[Sat Aug 29 05:06:47.649330 2026] [security2:error] [pid 1028675:tid 1028821] [client 40.83.93.50:1790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-content/languages/min.php"] [unique_id "apK9R9dHPfW2QFvhmL7LvAAAAAs"]
[Sat Aug 29 05:06:47.661864 2026] [security2:error] [pid 1018003:tid 1018182] [client 68.155.159.216:9227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-content/radio.php"] [unique_id "apK9RzAh5Y1i2tUxg4EBRQAABdc"]
[Sat Aug 29 05:06:47.668775 2026] [security2:error] [pid 1028675:tid 1028868] [client 158.23.147.79:32655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/xmlrpc.php"] [unique_id "apK9R9dHPfW2QFvhmL7LvQAAADo"]
[Sat Aug 29 05:06:47.668992 2026] [core:error] [pid 1018003:tid 1018061] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.669173 2026] [core:error] [pid 1018003:tid 1018061] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.670719 2026] [security2:error] [pid 1028675:tid 1028867] [client 20.104.49.130:39054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/pfm.php"] [unique_id "apK9R9dHPfW2QFvhmL7LvgAAADk"]
[Sat Aug 29 05:06:47.671796 2026] [core:error] [pid 1018003:tid 1018078] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.671812 2026] [core:error] [pid 1018003:tid 1018078] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.673221 2026] [security2:error] [pid 1028675:tid 1028858] [client 158.23.184.117:33933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/file.php"] [unique_id "apK9R9dHPfW2QFvhmL7LwAAAADA"]
[Sat Aug 29 05:06:47.673851 2026] [security2:error] [pid 1028675:tid 1028869] [client 68.155.159.216:56519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK9R9dHPfW2QFvhmL7LwQAAADs"]
[Sat Aug 29 05:06:47.673915 2026] [security2:error] [pid 1028675:tid 1028853] [client 52.139.37.240:2598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxbible.org"] [uri "/about.php7"] [unique_id "apK9R9dHPfW2QFvhmL7LwgAAACs"]
[Sat Aug 29 05:06:47.675166 2026] [core:error] [pid 1018003:tid 1018157] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.675184 2026] [core:error] [pid 1018003:tid 1018157] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.675901 2026] [security2:error] [pid 1028675:tid 1028855] [client 52.139.37.240:31506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/f35.php"] [unique_id "apK9R9dHPfW2QFvhmL7LwwAAAC0"]
[Sat Aug 29 05:06:47.676115 2026] [core:error] [pid 1028675:tid 1028866] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.676128 2026] [core:error] [pid 1028675:tid 1028866] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.676756 2026] [core:error] [pid 1018003:tid 1018053] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.676767 2026] [core:error] [pid 1018003:tid 1018053] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.680696 2026] [core:error] [pid 1028675:tid 1028856] [client 52.139.37.240:21438] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.680708 2026] [core:error] [pid 1028675:tid 1028856] [client 52.139.37.240:21438] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.690906 2026] [security2:error] [pid 1028675:tid 1028870] [client 158.23.147.79:30570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/.well-knownold/index.php"] [unique_id "apK9R9dHPfW2QFvhmL7LxQAAADw"]
[Sat Aug 29 05:06:47.691557 2026] [security2:error] [pid 1018003:tid 1018267] [client 52.139.37.240:32020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/xmrlpc.php"] [unique_id "apK9RzAh5Y1i2tUxg4EBTAAABis"]
[Sat Aug 29 05:06:47.695353 2026] [core:error] [pid 1018003:tid 1018060] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.695374 2026] [core:error] [pid 1018003:tid 1018060] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.707610 2026] [core:error] [pid 1028675:tid 1028877] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.707629 2026] [core:error] [pid 1028675:tid 1028877] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.712089 2026] [security2:error] [pid 1028675:tid 1028879] [client 20.220.204.93:50801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/galer.php"] [unique_id "apK9R9dHPfW2QFvhmL7LyAAAAEU"]
[Sat Aug 29 05:06:47.719794 2026] [security2:error] [pid 1018003:tid 1018075] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/administrator/.env"] [unique_id "apK9RzAh5Y1i2tUxg4EBUgAGHDY"]
[Sat Aug 29 05:06:47.721035 2026] [core:error] [pid 1018003:tid 1018087] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.721051 2026] [core:error] [pid 1018003:tid 1018087] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.721067 2026] [core:error] [pid 1018003:tid 1018072] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.721074 2026] [core:error] [pid 1018003:tid 1018072] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.721767 2026] [core:error] [pid 1018003:tid 1018083] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.721780 2026] [core:error] [pid 1018003:tid 1018083] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.723215 2026] [security2:error] [pid 1028675:tid 1028884] [client 20.104.18.15:36645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/ano.php"] [unique_id "apK9R9dHPfW2QFvhmL7LyQAAAEo"]
[Sat Aug 29 05:06:47.730814 2026] [core:error] [pid 1018003:tid 1018258] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.730829 2026] [core:error] [pid 1018003:tid 1018258] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.734551 2026] [security2:error] [pid 1018003:tid 1018085] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/api-backend/.env"] [unique_id "apK9RzAh5Y1i2tUxg4EBVQAGHEA"]
[Sat Aug 29 05:06:47.747000 2026] [security2:error] [pid 1018003:tid 1018221] [client 20.104.49.130:51372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9RzAh5Y1i2tUxg4EBVgAABf4"]
[Sat Aug 29 05:06:47.758404 2026] [core:error] [pid 1018003:tid 1018212] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.758427 2026] [core:error] [pid 1018003:tid 1018212] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.759305 2026] [security2:error] [pid 1028675:tid 1028893] [client 20.104.18.15:8062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/revo.php"] [unique_id "apK9R9dHPfW2QFvhmL7LzAAAAFM"]
[Sat Aug 29 05:06:47.764856 2026] [security2:error] [pid 1028675:tid 1028860] [client 20.196.209.81:4134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/essexec.php"] [unique_id "apK9R9dHPfW2QFvhmL7LzQAAADI"]
[Sat Aug 29 05:06:47.775511 2026] [security2:error] [pid 1028675:tid 1028897] [client 68.155.159.216:50310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK9R9dHPfW2QFvhmL7LzgAAAFc"]
[Sat Aug 29 05:06:47.777523 2026] [security2:error] [pid 1018003:tid 1018275] [client 52.139.37.240:8624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drjrae.com"] [uri "/07.php"] [unique_id "apK9RzAh5Y1i2tUxg4EBWAAABjM"]
[Sat Aug 29 05:06:47.783180 2026] [security2:error] [pid 1028675:tid 1028899] [client 20.48.250.41:21490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/ccu.php"] [unique_id "apK9R9dHPfW2QFvhmL7LzwAAAFk"]
[Sat Aug 29 05:06:47.788394 2026] [security2:error] [pid 1018003:tid 1018092] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/api-node/.env"] [unique_id "apK9RzAh5Y1i2tUxg4EBWQAGLkc"]
[Sat Aug 29 05:06:47.790097 2026] [security2:error] [pid 1018003:tid 1018203] [client 158.23.184.117:19350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/.well-known/index.php"] [unique_id "apK9RzAh5Y1i2tUxg4EBWwAABew"]
[Sat Aug 29 05:06:47.818280 2026] [security2:error] [pid 1028675:tid 1028895] [client 158.23.184.117:34537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/goods.php"] [unique_id "apK9R9dHPfW2QFvhmL7L0QAAAFU"]
[Sat Aug 29 05:06:47.821569 2026] [security2:error] [pid 1018003:tid 1018058] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/api/.env"] [unique_id "apK9RzAh5Y1i2tUxg4EBXAAF2iU"]
[Sat Aug 29 05:06:47.826203 2026] [security2:error] [pid 1018003:tid 1018239] [client 52.139.37.240:33584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superresources.com"] [uri "/cron.php"] [unique_id "apK9RzAh5Y1i2tUxg4EBXgAABg8"]
[Sat Aug 29 05:06:47.829198 2026] [core:error] [pid 1018003:tid 1018089] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.829213 2026] [core:error] [pid 1018003:tid 1018089] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.840875 2026] [core:error] [pid 1018003:tid 1018134] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.840887 2026] [core:error] [pid 1018003:tid 1018134] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.843811 2026] [core:error] [pid 1028675:tid 1028912] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.843826 2026] [core:error] [pid 1028675:tid 1028912] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.844349 2026] [core:error] [pid 1018003:tid 1018055] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.844371 2026] [core:error] [pid 1018003:tid 1018055] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.849836 2026] [core:error] [pid 1018003:tid 1018097] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.849851 2026] [core:error] [pid 1018003:tid 1018097] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.851978 2026] [core:error] [pid 1028675:tid 1028916] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.851990 2026] [core:error] [pid 1028675:tid 1028916] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.856768 2026] [core:error] [pid 1018003:tid 1018065] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.856782 2026] [core:error] [pid 1018003:tid 1018065] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.867344 2026] [core:error] [pid 1018003:tid 1018063] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.867365 2026] [core:error] [pid 1018003:tid 1018063] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.869711 2026] [security2:error] [pid 1028675:tid 1028904] [client 52.139.37.240:2906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxbible.org"] [uri "/cron.php"] [unique_id "apK9R9dHPfW2QFvhmL7L1QAAAF4"]
[Sat Aug 29 05:06:47.873518 2026] [security2:error] [pid 1028675:tid 1028905] [client 52.139.37.240:30792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/file61.php"] [unique_id "apK9R9dHPfW2QFvhmL7L1gAAAF8"]
[Sat Aug 29 05:06:47.878842 2026] [security2:error] [pid 1018003:tid 1018256] [client 68.155.159.216:49171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK9RzAh5Y1i2tUxg4EBaAAABiA"]
[Sat Aug 29 05:06:47.881484 2026] [core:error] [pid 1018003:tid 1018096] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.881495 2026] [core:error] [pid 1018003:tid 1018096] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.883522 2026] [security2:error] [pid 1028675:tid 1028907] [client 52.139.37.240:32743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/about/function.php"] [unique_id "apK9R9dHPfW2QFvhmL7L2AAAAGE"]
[Sat Aug 29 05:06:47.887066 2026] [security2:error] [pid 1028675:tid 1028927] [client 158.23.147.79:30543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK9R9dHPfW2QFvhmL7L2wAAAHU"]
[Sat Aug 29 05:06:47.896871 2026] [security2:error] [pid 1018003:tid 1018192] [client 20.104.18.15:8133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/birrs.php"] [unique_id "apK9RzAh5Y1i2tUxg4EBbQAABeE"]
[Sat Aug 29 05:06:47.900012 2026] [core:error] [pid 1018003:tid 1018230] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.900027 2026] [core:error] [pid 1018003:tid 1018230] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.900811 2026] [core:error] [pid 1028675:tid 1028928] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.900826 2026] [core:error] [pid 1028675:tid 1028928] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.900953 2026] [security2:error] [pid 1028675:tid 1028906] [client 52.139.37.240:21415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/wp-content/155.php"] [unique_id "apK9R9dHPfW2QFvhmL7L3QAAAGA"]
[Sat Aug 29 05:06:47.911529 2026] [security2:error] [pid 1018003:tid 1018213] [client 20.52.41.200:1788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/123.php"] [unique_id "apK9RzAh5Y1i2tUxg4EBbgAABfY"]
[Sat Aug 29 05:06:47.914061 2026] [security2:error] [pid 1018003:tid 1018266] [client 20.220.204.93:52275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/baixy.php"] [unique_id "apK9RzAh5Y1i2tUxg4EBbwAABio"]
[Sat Aug 29 05:06:47.921668 2026] [core:error] [pid 1028675:tid 1028932] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.922927 2026] [core:error] [pid 1028675:tid 1028932] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.927740 2026] [core:error] [pid 1028675:tid 1028930] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.927761 2026] [core:error] [pid 1028675:tid 1028930] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.936820 2026] [security2:error] [pid 1028675:tid 1028924] [client 158.23.184.117:19335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/.well-known/login.php"] [unique_id "apK9R9dHPfW2QFvhmL7L4AAAAHI"]
[Sat Aug 29 05:06:47.947731 2026] [security2:error] [pid 1018003:tid 1018160] [client 20.48.250.41:21476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/ak.php"] [unique_id "apK9RzAh5Y1i2tUxg4EBcQAABcE"]
[Sat Aug 29 05:06:47.948569 2026] [security2:error] [pid 1018003:tid 1018233] [client 20.104.18.15:36732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/mgrr.php"] [unique_id "apK9RzAh5Y1i2tUxg4EBcgAABgk"]
[Sat Aug 29 05:06:47.950246 2026] [core:error] [pid 1018003:tid 1018112] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.950265 2026] [core:error] [pid 1018003:tid 1018112] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.951785 2026] [security2:error] [pid 1018003:tid 1018190] [client 4.205.62.107:56019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/app_dev.php"] [unique_id "apK9RzAh5Y1i2tUxg4EBcwAABd8"]
[Sat Aug 29 05:06:47.952101 2026] [security2:error] [pid 1028675:tid 1028831] [client 158.23.147.79:25413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/cong.php"] [unique_id "apK9R9dHPfW2QFvhmL7L4QAAABU"]
[Sat Aug 29 05:06:47.955381 2026] [security2:error] [pid 1028675:tid 1028832] [client 168.107.94.195:58947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9R9dHPfW2QFvhmL7L4gAAABY"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:47.956915 2026] [core:error] [pid 1018003:tid 1018090] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.956931 2026] [core:error] [pid 1018003:tid 1018090] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.966350 2026] [security2:error] [pid 1028675:tid 1028818] [client 158.23.147.79:48365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/lock.php"] [unique_id "apK9R9dHPfW2QFvhmL7L4wAAAAg"]
[Sat Aug 29 05:06:47.967161 2026] [security2:error] [pid 1018003:tid 1018155] [client 158.23.184.117:33926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/g.php"] [unique_id "apK9RzAh5Y1i2tUxg4EBdQAABbw"]
[Sat Aug 29 05:06:47.977660 2026] [security2:error] [pid 1028675:tid 1028933] [client 52.139.37.240:8502] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.drjrae.com"] [uri "/c99.php"] [unique_id "apK9R9dHPfW2QFvhmL7L5AAAAHs"]
[Sat Aug 29 05:06:47.978757 2026] [security2:error] [pid 1028675:tid 1028903] [client 87.219.197.128:54881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK9R9dHPfW2QFvhmL7L5QAAAF0"]
[Sat Aug 29 05:06:47.978869 2026] [security2:error] [pid 1028675:tid 1028903] [client 87.219.197.128:54881] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK9R9dHPfW2QFvhmL7L5QAAAF0"]
[Sat Aug 29 05:06:47.982304 2026] [core:error] [pid 1018003:tid 1018091] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.982318 2026] [core:error] [pid 1018003:tid 1018091] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.982736 2026] [core:error] [pid 1018003:tid 1018095] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.982751 2026] [core:error] [pid 1018003:tid 1018095] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.990806 2026] [core:error] [pid 1018003:tid 1018074] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:47.990820 2026] [core:error] [pid 1018003:tid 1018074] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.025374 2026] [core:error] [pid 1018003:tid 1018194] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.025398 2026] [core:error] [pid 1018003:tid 1018194] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.026044 2026] [security2:error] [pid 1018003:tid 1018189] [client 68.155.159.216:6023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK9SDAh5Y1i2tUxg4EBggAABd4"]
[Sat Aug 29 05:06:48.026592 2026] [core:error] [pid 1018003:tid 1018226] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.026617 2026] [core:error] [pid 1018003:tid 1018226] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.029701 2026] [security2:error] [pid 1028675:tid 1028839] [client 52.139.37.240:33586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superresources.com"] [uri "/wp-2019.php"] [unique_id "apK9SNdHPfW2QFvhmL7L7AAAAB0"]
[Sat Aug 29 05:06:48.031019 2026] [core:error] [pid 1028675:tid 1028826] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.031034 2026] [core:error] [pid 1028675:tid 1028826] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.033619 2026] [core:error] [pid 1028675:tid 1028849] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.033640 2026] [core:error] [pid 1028675:tid 1028849] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.040043 2026] [security2:error] [pid 1028675:tid 1028854] [client 20.104.18.15:8055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/sss.php"] [unique_id "apK9SNdHPfW2QFvhmL7L7gAAACw"]
[Sat Aug 29 05:06:48.044078 2026] [security2:error] [pid 1018003:tid 1018195] [client 20.104.18.15:13652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9SDAh5Y1i2tUxg4EBgwAABeQ"]
[Sat Aug 29 05:06:48.060152 2026] [security2:error] [pid 1028675:tid 1028929] [client 158.158.54.35:11367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/bthil.php"] [unique_id "apK9SNdHPfW2QFvhmL7L8AAAAHc"]
[Sat Aug 29 05:06:48.073037 2026] [security2:error] [pid 1018003:tid 1018200] [client 20.220.204.93:52348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/ava.php"] [unique_id "apK9SDAh5Y1i2tUxg4EBhgAABek"]
[Sat Aug 29 05:06:48.076881 2026] [core:error] [pid 1028675:tid 1028817] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.076902 2026] [core:error] [pid 1028675:tid 1028817] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.080880 2026] [security2:error] [pid 1028675:tid 1028864] [client 68.155.159.216:24544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK9SNdHPfW2QFvhmL7L8wAAADY"]
[Sat Aug 29 05:06:48.081197 2026] [security2:error] [pid 1028675:tid 1028852] [client 158.23.184.117:19359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/.well-known/logs233/index.php"] [unique_id "apK9SNdHPfW2QFvhmL7L9AAAACo"]
[Sat Aug 29 05:06:48.086794 2026] [cgid:error] [pid 1028675:tid 1028813] [client 34.7.40.70:4982] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:48.087316 2026] [security2:error] [pid 1018003:tid 1018114] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/apis/.env"] [unique_id "apK9SDAh5Y1i2tUxg4EBiwAGNV0"]
[Sat Aug 29 05:06:48.093003 2026] [cgid:error] [pid 1028675:tid 1028815] [client 34.7.40.70:5032] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:48.093454 2026] [cgid:error] [pid 1018003:tid 1018202] [client 34.7.40.70:4984] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:48.093548 2026] [security2:error] [pid 1018003:tid 1018202] [client 34.7.40.70:4984] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/404.shtml"] [unique_id "apK9SDAh5Y1i2tUxg4EBjAAABes"]
[Sat Aug 29 05:06:48.093655 2026] [cgid:error] [pid 1018003:tid 1018206] [client 34.7.40.70:4972] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:48.096288 2026] [core:error] [pid 1028675:tid 1028858] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.096302 2026] [core:error] [pid 1028675:tid 1028858] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.096651 2026] [cgid:error] [pid 1018003:tid 1018164] [client 34.7.40.70:5054] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:48.096762 2026] [security2:error] [pid 1018003:tid 1018164] [client 34.7.40.70:5054] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/404.shtml"] [unique_id "apK9SDAh5Y1i2tUxg4EBjgAABcU"]
[Sat Aug 29 05:06:48.097415 2026] [core:error] [pid 1028675:tid 1028868] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.097430 2026] [core:error] [pid 1028675:tid 1028868] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.099338 2026] [cgid:error] [pid 1018003:tid 1018262] [client 34.7.40.70:5016] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:48.101876 2026] [cgid:error] [pid 1018003:tid 1018265] [client 34.7.40.70:4994] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:48.102126 2026] [cgid:error] [pid 1018003:tid 1018186] [client 34.7.40.70:5078] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:48.102126 2026] [cgid:error] [pid 1018003:tid 1018166] [client 34.7.40.70:5062] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:48.103273 2026] [cgid:error] [pid 1028675:tid 1028820] [client 34.7.40.70:5100] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:48.103320 2026] [cgid:error] [pid 1028675:tid 1028825] [client 34.7.40.70:5082] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:48.103545 2026] [security2:error] [pid 1028675:tid 1028825] [client 34.7.40.70:5082] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/404.shtml"] [unique_id "apK9SNdHPfW2QFvhmL7L-wAAAA8"]
[Sat Aug 29 05:06:48.103776 2026] [cgid:error] [pid 1018003:tid 1018250] [client 34.7.40.70:5116] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:48.103911 2026] [security2:error] [pid 1028675:tid 1028872] [client 20.104.18.15:36767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/mac.php"] [unique_id "apK9SNdHPfW2QFvhmL7L_QAAAD4"]
[Sat Aug 29 05:06:48.105330 2026] [security2:error] [pid 1018003:tid 1018246] [client 34.7.40.70:5136] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/config/storage.yml"] [unique_id "apK9SDAh5Y1i2tUxg4EBlgAABhY"]
[Sat Aug 29 05:06:48.105583 2026] [cgid:error] [pid 1028675:tid 1028833] [client 34.7.40.70:5086] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:48.105851 2026] [security2:error] [pid 1018003:tid 1018161] [client 34.7.40.70:5000] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/backend/aws.json"] [unique_id "apK9SDAh5Y1i2tUxg4EBmAAABcI"]
[Sat Aug 29 05:06:48.105991 2026] [core:error] [pid 1018003:tid 1018203] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.105999 2026] [core:error] [pid 1018003:tid 1018203] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.107275 2026] [core:error] [pid 1018003:tid 1018094] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.107289 2026] [core:error] [pid 1018003:tid 1018094] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.107620 2026] [cgid:error] [pid 1028675:tid 1028828] [client 34.7.40.70:5104] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:48.108269 2026] [core:error] [pid 1018003:tid 1018146] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.108276 2026] [core:error] [pid 1018003:tid 1018146] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.108303 2026] [cgid:error] [pid 1028675:tid 1028835] [client 34.7.40.70:5122] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:48.109408 2026] [cgid:error] [pid 1018003:tid 1018172] [client 34.7.40.70:5146] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:48.109864 2026] [cgid:error] [pid 1018003:tid 1018268] [client 34.7.40.70:5192] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:48.111971 2026] [cgid:error] [pid 1018003:tid 1018273] [client 34.7.40.70:5046] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:48.113085 2026] [core:error] [pid 1028675:tid 1028870] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.113100 2026] [core:error] [pid 1028675:tid 1028870] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.113808 2026] [core:error] [pid 1028675:tid 1028853] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.113827 2026] [core:error] [pid 1028675:tid 1028853] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.114910 2026] [cgid:error] [pid 1028675:tid 1028837] [client 34.7.40.70:5162] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:48.115050 2026] [security2:error] [pid 1028675:tid 1028837] [client 34.7.40.70:5162] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/404.shtml"] [unique_id "apK9SNdHPfW2QFvhmL7MAgAAABs"]
[Sat Aug 29 05:06:48.115511 2026] [cgid:error] [pid 1018003:tid 1018242] [client 34.7.40.70:5220] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:48.118725 2026] [cgid:error] [pid 1028675:tid 1028836] [client 34.7.40.70:5176] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:48.119161 2026] [cgid:error] [pid 1018003:tid 1018184] [client 34.7.40.70:5182] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:48.119528 2026] [cgid:error] [pid 1018003:tid 1018182] [client 34.7.40.70:5252] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:48.119597 2026] [cgid:error] [pid 1028675:tid 1028810] [client 34.7.40.70:5242] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:48.121528 2026] [security2:error] [pid 1028675:tid 1028879] [client 4.205.62.107:53420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/wdf.php"] [unique_id "apK9SNdHPfW2QFvhmL7MBgAAAEU"]
[Sat Aug 29 05:06:48.123042 2026] [cgid:error] [pid 1028675:tid 1028841] [client 34.7.40.70:5258] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:48.123156 2026] [security2:error] [pid 1028675:tid 1028880] [client 20.48.250.41:21411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/lib.php"] [unique_id "apK9SNdHPfW2QFvhmL7MBwAAAEY"]
[Sat Aug 29 05:06:48.127077 2026] [cgid:error] [pid 1018003:tid 1018231] [client 34.7.40.70:5230] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:48.128351 2026] [cgid:error] [pid 1018003:tid 1018170] [client 34.7.40.70:5240] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:48.128628 2026] [cgid:error] [pid 1028675:tid 1028822] [client 34.7.40.70:5250] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:48.130836 2026] [security2:error] [pid 1028675:tid 1028840] [client 40.83.93.50:1767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-content/languages/pk.php"] [unique_id "apK9SNdHPfW2QFvhmL7MCgAAAB4"]
[Sat Aug 29 05:06:48.131044 2026] [cgid:error] [pid 1018003:tid 1018159] [client 34.7.40.70:5206] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:48.131392 2026] [cgid:error] [pid 1018003:tid 1018243] [client 34.7.40.70:5194] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:48.137130 2026] [security2:error] [pid 1018003:tid 1018271] [client 158.23.184.117:33971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/hplfuns.php"] [unique_id "apK9SDAh5Y1i2tUxg4EBpgAABi8"]
[Sat Aug 29 05:06:48.139222 2026] [security2:error] [pid 1018003:tid 1018230] [client 20.151.200.44:64267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/siln.php"] [unique_id "apK9SDAh5Y1i2tUxg4EBqAAABgY"]
[Sat Aug 29 05:06:48.143810 2026] [security2:error] [pid 1028675:tid 1028886] [client 20.151.200.44:47332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/mga.php"] [unique_id "apK9SNdHPfW2QFvhmL7MDAAAAEw"]
[Sat Aug 29 05:06:48.147273 2026] [security2:error] [pid 1028675:tid 1028887] [client 68.155.159.216:51520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-admin/css/index.php"] [unique_id "apK9SNdHPfW2QFvhmL7MDQAAAE0"]
[Sat Aug 29 05:06:48.152926 2026] [core:error] [pid 1018003:tid 1018162] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.152940 2026] [core:error] [pid 1018003:tid 1018162] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.159435 2026] [security2:error] [pid 1028675:tid 1028873] [client 158.23.147.79:65489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/ws.php"] [unique_id "apK9SNdHPfW2QFvhmL7MDgAAAD8"]
[Sat Aug 29 05:06:48.164567 2026] [core:error] [pid 1028675:tid 1028892] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.164587 2026] [core:error] [pid 1028675:tid 1028892] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.171318 2026] [security2:error] [pid 1018003:tid 1018188] [client 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK9SDAh5Y1i2tUxg4EBhQAF3Ts"]
[Sat Aug 29 05:06:48.180659 2026] [security2:error] [pid 1018003:tid 1018108] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/app/.env"] [unique_id "apK9SDAh5Y1i2tUxg4EBqwAF2lc"]
[Sat Aug 29 05:06:48.183119 2026] [security2:error] [pid 1018003:tid 1018175] [client 20.104.18.15:13735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9SDAh5Y1i2tUxg4EBrgAABdA"]
[Sat Aug 29 05:06:48.198515 2026] [core:error] [pid 1028675:tid 1028895] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.198544 2026] [core:error] [pid 1028675:tid 1028895] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.210179 2026] [core:error] [pid 1028675:tid 1028910] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.210200 2026] [core:error] [pid 1028675:tid 1028910] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.212742 2026] [security2:error] [pid 1018003:tid 1018155] [client 20.220.204.93:52288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/gdn.php"] [unique_id "apK9SDAh5Y1i2tUxg4EBsgAABbw"]
[Sat Aug 29 05:06:48.227840 2026] [security2:error] [pid 1028675:tid 1028897] [client 158.23.184.117:19361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/.well-known/maintenance.php"] [unique_id "apK9SNdHPfW2QFvhmL7MGgAAAFc"]
[Sat Aug 29 05:06:48.248854 2026] [security2:error] [pid 1018003:tid 1018194] [client 20.48.250.41:21487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/wp-style.php"] [unique_id "apK9SDAh5Y1i2tUxg4EBtgAABeM"]
[Sat Aug 29 05:06:48.250851 2026] [core:error] [pid 1028675:tid 1028911] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.250870 2026] [core:error] [pid 1028675:tid 1028911] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.251903 2026] [core:error] [pid 1018003:tid 1018163] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.251920 2026] [core:error] [pid 1018003:tid 1018163] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.271900 2026] [security2:error] [pid 1018003:tid 1018240] [client 20.196.209.81:4151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/hello.php"] [unique_id "apK9SDAh5Y1i2tUxg4EBwgAABhA"]
[Sat Aug 29 05:06:48.274934 2026] [core:error] [pid 1018003:tid 1018212] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.274955 2026] [core:error] [pid 1018003:tid 1018212] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.275876 2026] [core:error] [pid 1028675:tid 1028926] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.275895 2026] [core:error] [pid 1028675:tid 1028926] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.279596 2026] [security2:error] [pid 1028675:tid 1028923] [client 20.104.18.15:36720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/simple.php"] [unique_id "apK9SNdHPfW2QFvhmL7MIAAAAHE"]
[Sat Aug 29 05:06:48.282545 2026] [core:error] [pid 1028675:tid 1028928] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.282564 2026] [core:error] [pid 1028675:tid 1028928] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.284477 2026] [security2:error] [pid 1018003:tid 1018169] [client 158.23.184.117:34740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/ioxi-o.php"] [unique_id "apK9SDAh5Y1i2tUxg4EBxgAABco"]
[Sat Aug 29 05:06:48.284961 2026] [core:error] [pid 1018003:tid 1018200] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.284973 2026] [core:error] [pid 1018003:tid 1018200] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.285392 2026] [core:error] [pid 1028675:tid 1028934] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.285406 2026] [core:error] [pid 1028675:tid 1028934] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.287982 2026] [core:error] [pid 1018003:tid 1018206] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.287996 2026] [core:error] [pid 1018003:tid 1018206] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.294680 2026] [core:error] [pid 1018003:tid 1018122] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.294699 2026] [core:error] [pid 1018003:tid 1018122] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.301082 2026] [core:error] [pid 1028675:tid 1028925] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.301098 2026] [core:error] [pid 1028675:tid 1028925] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.303520 2026] [security2:error] [pid 1028675:tid 1028937] [client 158.23.147.79:38778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK9SNdHPfW2QFvhmL7MIwAAAH8"]
[Sat Aug 29 05:06:48.311554 2026] [security2:error] [pid 1018003:tid 1018161] [client 158.23.147.79:17481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK9SDAh5Y1i2tUxg4EBzQAABcI"]
[Sat Aug 29 05:06:48.316997 2026] [security2:error] [pid 1018003:tid 1018203] [client 158.23.147.79:26573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/asd.php"] [unique_id "apK9SDAh5Y1i2tUxg4EBzgAABew"]
[Sat Aug 29 05:06:48.329620 2026] [core:error] [pid 1018003:tid 1018140] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.329637 2026] [core:error] [pid 1018003:tid 1018140] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.330297 2026] [core:error] [pid 1028675:tid 1028812] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.330318 2026] [core:error] [pid 1028675:tid 1028812] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.335187 2026] [security2:error] [pid 1018003:tid 1018268] [client 4.205.62.107:22423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/lmfi2.php"] [unique_id "apK9SDAh5Y1i2tUxg4EB0QAABiw"]
[Sat Aug 29 05:06:48.335495 2026] [core:error] [pid 1018003:tid 1018218] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.335513 2026] [core:error] [pid 1018003:tid 1018218] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.336273 2026] [security2:error] [pid 1028675:tid 1028829] [client 168.107.94.195:59354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9SNdHPfW2QFvhmL7MJgAAABM"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:48.337735 2026] [core:error] [pid 1018003:tid 1018027] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.337747 2026] [core:error] [pid 1018003:tid 1018027] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.344664 2026] [security2:error] [pid 1018003:tid 1018184] [client 20.104.104.62:29213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.watercolorsbylola.allgooddays.org"] [uri "/term.php"] [unique_id "apK9SDAh5Y1i2tUxg4EB0wAABdk"]
[Sat Aug 29 05:06:48.353939 2026] [security2:error] [pid 1028675:tid 1028814] [client 20.220.204.93:52326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/f2.php"] [unique_id "apK9SNdHPfW2QFvhmL7MKAAAAAQ"]
[Sat Aug 29 05:06:48.363684 2026] [security2:error] [pid 1018003:tid 1018236] [client 68.155.159.216:18200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK9SDAh5Y1i2tUxg4EB1wAABgw"]
[Sat Aug 29 05:06:48.365492 2026] [security2:error] [pid 1028675:tid 1028818] [client 158.23.147.79:24493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK9SNdHPfW2QFvhmL7MKQAAAAg"]
[Sat Aug 29 05:06:48.367432 2026] [security2:error] [pid 1018003:tid 1018230] [client 20.104.18.15:13707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/ap.php"] [unique_id "apK9SDAh5Y1i2tUxg4EB2AAABgY"]
[Sat Aug 29 05:06:48.371850 2026] [security2:error] [pid 1028675:tid 1028824] [client 158.23.184.117:19323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/.well-known/min.php"] [unique_id "apK9SNdHPfW2QFvhmL7MKwAAAA4"]
[Sat Aug 29 05:06:48.372448 2026] [core:error] [pid 1028675:tid 1028903] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.372460 2026] [core:error] [pid 1028675:tid 1028903] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.378549 2026] [security2:error] [pid 1018003:tid 1018267] [client 20.52.41.200:1262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/yanz.php"] [unique_id "apK9SDAh5Y1i2tUxg4EB2QAABis"]
[Sat Aug 29 05:06:48.387598 2026] [security2:error] [pid 1028675:tid 1028848] [client 20.48.250.41:21467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/browse.php"] [unique_id "apK9SNdHPfW2QFvhmL7MLAAAACY"]
[Sat Aug 29 05:06:48.390003 2026] [security2:error] [pid 1018003:tid 1018224] [client 20.197.61.180:16583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/disagraeosc.php"] [unique_id "apK9SDAh5Y1i2tUxg4EB2gAABgE"]
[Sat Aug 29 05:06:48.390943 2026] [core:error] [pid 1028675:tid 1028933] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.390956 2026] [core:error] [pid 1028675:tid 1028933] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.393783 2026] [security2:error] [pid 1028675:tid 1028844] [client 68.155.159.216:60765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK9SNdHPfW2QFvhmL7MLgAAACI"]
[Sat Aug 29 05:06:48.410288 2026] [core:error] [pid 1018003:tid 1018073] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.410304 2026] [core:error] [pid 1018003:tid 1018073] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.427555 2026] [security2:error] [pid 1018003:tid 1018256] [client 20.104.18.15:36723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/xty.php"] [unique_id "apK9SDAh5Y1i2tUxg4EB4AAABiA"]
[Sat Aug 29 05:06:48.433076 2026] [security2:error] [pid 1028675:tid 1028857] [client 158.23.147.79:49802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK9SNdHPfW2QFvhmL7MLwAAAC8"]
[Sat Aug 29 05:06:48.435999 2026] [security2:error] [pid 1018003:tid 1018217] [client 158.23.184.117:34714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/in.php"] [unique_id "apK9SDAh5Y1i2tUxg4EB4wAABfo"]
[Sat Aug 29 05:06:48.436521 2026] [security2:error] [pid 1018003:tid 1018130] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/apps/.env"] [unique_id "apK9SDAh5Y1i2tUxg4EB4QAGB20"]
[Sat Aug 29 05:06:48.436523 2026] [security2:error] [pid 1018003:tid 1018141] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/application/.env"] [unique_id "apK9SDAh5Y1i2tUxg4EB4gAGB3g"]
[Sat Aug 29 05:06:48.443328 2026] [core:error] [pid 1018003:tid 1018139] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.443347 2026] [core:error] [pid 1018003:tid 1018139] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.448408 2026] [core:error] [pid 1018003:tid 1018144] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.448426 2026] [core:error] [pid 1018003:tid 1018144] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.449843 2026] [core:error] [pid 1018003:tid 1018128] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.449857 2026] [core:error] [pid 1018003:tid 1018128] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.450656 2026] [core:error] [pid 1018003:tid 1018142] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.450665 2026] [core:error] [pid 1018003:tid 1018142] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.452379 2026] [core:error] [pid 1018003:tid 1018137] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.452394 2026] [core:error] [pid 1018003:tid 1018137] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.453026 2026] [core:error] [pid 1028675:tid 1028929] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.453036 2026] [core:error] [pid 1028675:tid 1028929] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.454971 2026] [security2:error] [pid 1018003:tid 1018243] [client 45.61.187.50:64764] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "succulentideas.com"] [uri "/wp-content/plugins/wp_gljbkwx/wp_gljbkwx.php"] [unique_id "apK9SDAh5Y1i2tUxg4EB6gAABhM"]
[Sat Aug 29 05:06:48.456658 2026] [core:error] [pid 1018003:tid 1018125] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.456676 2026] [core:error] [pid 1018003:tid 1018125] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.478425 2026] [core:error] [pid 1018003:tid 1018129] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.478446 2026] [core:error] [pid 1018003:tid 1018129] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.485377 2026] [security2:error] [pid 1018003:tid 1018156] [client 68.155.159.216:33667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9SDAh5Y1i2tUxg4EB8AAABb0"]
[Sat Aug 29 05:06:48.487177 2026] [security2:error] [pid 1028675:tid 1028869] [client 20.220.204.93:50815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/grsiuk.php"] [unique_id "apK9SNdHPfW2QFvhmL7MMgAAADs"]
[Sat Aug 29 05:06:48.488267 2026] [security2:error] [pid 1028675:tid 1028815] [client 20.151.200.44:64217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/f-401.php"] [unique_id "apK9SNdHPfW2QFvhmL7MMwAAAAU"]
[Sat Aug 29 05:06:48.519614 2026] [security2:error] [pid 1028675:tid 1028864] [client 158.23.184.117:19340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/.well-known/module.php"] [unique_id "apK9SNdHPfW2QFvhmL7MNQAAADY"]
[Sat Aug 29 05:06:48.523901 2026] [core:error] [pid 1028675:tid 1028855] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.523920 2026] [core:error] [pid 1028675:tid 1028855] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.527642 2026] [security2:error] [pid 1028675:tid 1028866] [client 20.48.250.41:21390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/zoo.php"] [unique_id "apK9SNdHPfW2QFvhmL7MNwAAADg"]
[Sat Aug 29 05:06:48.529906 2026] [core:error] [pid 1018003:tid 1018170] [client 158.158.54.35:15176] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.529929 2026] [core:error] [pid 1018003:tid 1018170] [client 158.158.54.35:15176] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.532609 2026] [security2:error] [pid 1028675:tid 1028871] [client 20.104.49.130:42197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/worksec.php"] [unique_id "apK9SNdHPfW2QFvhmL7MOAAAAD0"]
[Sat Aug 29 05:06:48.538103 2026] [security2:error] [pid 1028675:tid 1028852] [client 20.104.104.62:28818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.watercolorsbylola.allgooddays.org"] [uri "/ms-edit.php"] [unique_id "apK9SNdHPfW2QFvhmL7MOQAAACo"]
[Sat Aug 29 05:06:48.542851 2026] [security2:error] [pid 1028675:tid 1028825] [client 20.104.18.15:13651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/media.php"] [unique_id "apK9SNdHPfW2QFvhmL7MOgAAAA8"]
[Sat Aug 29 05:06:48.543224 2026] [security2:error] [pid 1018003:tid 1018174] [client 68.155.159.216:16327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-admin.php"] [unique_id "apK9SDAh5Y1i2tUxg4EB9AAABc8"]
[Sat Aug 29 05:06:48.551076 2026] [core:error] [pid 1018003:tid 1018275] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.551090 2026] [core:error] [pid 1018003:tid 1018275] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.553570 2026] [security2:error] [pid 1018003:tid 1018202] [client 20.151.200.44:65070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/siln.php"] [unique_id "apK9SDAh5Y1i2tUxg4EB9gAABes"]
[Sat Aug 29 05:06:48.569475 2026] [core:error] [pid 1018003:tid 1018221] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.569489 2026] [core:error] [pid 1018003:tid 1018221] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.581653 2026] [security2:error] [pid 1028675:tid 1028820] [client 158.23.184.117:54171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/info.php"] [unique_id "apK9SNdHPfW2QFvhmL7MPQAAAAo"]
[Sat Aug 29 05:06:48.589426 2026] [security2:error] [pid 1028675:tid 1028863] [client 20.104.18.15:36692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/sallu.php"] [unique_id "apK9SNdHPfW2QFvhmL7MPwAAADU"]
[Sat Aug 29 05:06:48.590897 2026] [core:error] [pid 1028675:tid 1028875] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.590914 2026] [core:error] [pid 1028675:tid 1028875] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.595583 2026] [security2:error] [pid 1018003:tid 1018191] [client 103.185.242.143:63584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK9SDAh5Y1i2tUxg4EB-QAABeA"]
[Sat Aug 29 05:06:48.595667 2026] [security2:error] [pid 1018003:tid 1018191] [client 103.185.242.143:63584] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK9SDAh5Y1i2tUxg4EB-QAABeA"]
[Sat Aug 29 05:06:48.600382 2026] [security2:error] [pid 1028675:tid 1028879] [client 4.205.62.107:26651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/sys.php"] [unique_id "apK9SNdHPfW2QFvhmL7MQAAAAEU"]
[Sat Aug 29 05:06:48.604071 2026] [security2:error] [pid 1028675:tid 1028881] [client 4.205.62.107:22444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/vx.php"] [unique_id "apK9SNdHPfW2QFvhmL7MQQAAAEc"]
[Sat Aug 29 05:06:48.610303 2026] [security2:error] [pid 1028675:tid 1028861] [client 40.83.93.50:1656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.leedscastlepunting.co.uk"] [uri "/wp-content/languages/plugins/about.php"] [unique_id "apK9SNdHPfW2QFvhmL7MQgAAADM"]
[Sat Aug 29 05:06:48.616584 2026] [core:error] [pid 1018003:tid 1018021] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.616609 2026] [core:error] [pid 1018003:tid 1018021] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.625093 2026] [core:error] [pid 1018003:tid 1018115] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.625103 2026] [core:error] [pid 1018003:tid 1018036] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.625111 2026] [core:error] [pid 1018003:tid 1018115] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.625112 2026] [core:error] [pid 1018003:tid 1018036] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.630307 2026] [security2:error] [pid 1028675:tid 1028888] [client 68.155.159.216:30691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/file.php"] [unique_id "apK9SNdHPfW2QFvhmL7MRQAAAE4"]
[Sat Aug 29 05:06:48.632730 2026] [core:error] [pid 1018003:tid 1018023] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.632752 2026] [core:error] [pid 1018003:tid 1018023] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.646053 2026] [core:error] [pid 1028675:tid 1028890] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.646071 2026] [core:error] [pid 1028675:tid 1028890] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.649846 2026] [core:error] [pid 1018003:tid 1018239] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.649859 2026] [core:error] [pid 1018003:tid 1018239] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.651540 2026] [core:error] [pid 1018003:tid 1018238] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.651560 2026] [core:error] [pid 1018003:tid 1018238] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.652595 2026] [security2:error] [pid 1018003:tid 1018277] [client 20.220.204.93:52237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/wp-scr1pts.php"] [unique_id "apK9SDAh5Y1i2tUxg4ECEQAABjU"]
[Sat Aug 29 05:06:48.653581 2026] [security2:error] [pid 1018003:tid 1018185] [client 20.48.250.41:21386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/elp.php"] [unique_id "apK9SDAh5Y1i2tUxg4ECEgAABdo"]
[Sat Aug 29 05:06:48.654032 2026] [core:error] [pid 1018003:tid 1018234] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.654045 2026] [core:error] [pid 1018003:tid 1018234] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.654733 2026] [core:error] [pid 1018003:tid 1018268] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.654744 2026] [core:error] [pid 1018003:tid 1018268] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.656260 2026] [core:error] [pid 1018003:tid 1018242] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.656271 2026] [core:error] [pid 1018003:tid 1018242] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.661967 2026] [core:error] [pid 1018003:tid 1018192] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.661979 2026] [core:error] [pid 1018003:tid 1018192] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.663711 2026] [security2:error] [pid 1028675:tid 1028884] [client 158.23.184.117:19294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/.well-known/options.php"] [unique_id "apK9SNdHPfW2QFvhmL7MSQAAAEo"]
[Sat Aug 29 05:06:48.666936 2026] [security2:error] [pid 1028675:tid 1028914] [client 4.205.62.107:22463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/public/bnn_.php.php"] [unique_id "apK9SNdHPfW2QFvhmL7MSgAAAGg"]
[Sat Aug 29 05:06:48.669091 2026] [security2:error] [pid 1018003:tid 1018258] [client 20.196.209.81:14609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/fi2.php"] [unique_id "apK9SDAh5Y1i2tUxg4ECFQAABiI"]
[Sat Aug 29 05:06:48.669683 2026] [core:error] [pid 1028675:tid 1028913] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.669696 2026] [core:error] [pid 1028675:tid 1028913] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.673631 2026] [security2:error] [pid 1028675:tid 1028919] [client 20.104.18.15:13744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/adminfuns.php"] [unique_id "apK9SNdHPfW2QFvhmL7MTAAAAG0"]
[Sat Aug 29 05:06:48.687864 2026] [security2:error] [pid 1028675:tid 1028927] [client 20.104.18.15:8182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/wp-includes/ID3/moon.php"] [unique_id "apK9SNdHPfW2QFvhmL7MTQAAAHU"]
[Sat Aug 29 05:06:48.717489 2026] [security2:error] [pid 1028675:tid 1028934] [client 168.107.94.195:59717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9SNdHPfW2QFvhmL7MTwAAAHw"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:48.727219 2026] [security2:error] [pid 1028675:tid 1028911] [client 158.23.184.117:34728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/inputs.php"] [unique_id "apK9SNdHPfW2QFvhmL7MUAAAAGU"]
[Sat Aug 29 05:06:48.731763 2026] [security2:error] [pid 1018003:tid 1018159] [client 20.104.104.62:28809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.watercolorsbylola.allgooddays.org"] [uri "/admin.php"] [unique_id "apK9SDAh5Y1i2tUxg4ECGgAABcA"]
[Sat Aug 29 05:06:48.733217 2026] [security2:error] [pid 1018003:tid 1018169] [client 20.151.200.44:46594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/inwp.php"] [unique_id "apK9SDAh5Y1i2tUxg4ECGwAABco"]
[Sat Aug 29 05:06:48.737462 2026] [core:error] [pid 1018003:tid 1018221] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.737478 2026] [core:error] [pid 1018003:tid 1018221] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.743416 2026] [security2:error] [pid 1018003:tid 1018240] [client 45.148.10.62:49756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ninaanddon.strangeworx.com"] [uri "/config.php.bak"] [unique_id "apK9SDAh5Y1i2tUxg4ECHgAABhA"]
[Sat Aug 29 05:06:48.747892 2026] [core:error] [pid 1018003:tid 1018180] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.747908 2026] [core:error] [pid 1018003:tid 1018180] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.753476 2026] [security2:error] [pid 1028675:tid 1028924] [client 20.104.18.15:36613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/codex.php"] [unique_id "apK9SNdHPfW2QFvhmL7MVQAAAHI"]
[Sat Aug 29 05:06:48.754818 2026] [core:error] [pid 1028675:tid 1028925] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.754829 2026] [core:error] [pid 1028675:tid 1028925] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.756546 2026] [core:error] [pid 1028675:tid 1028937] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.756558 2026] [core:error] [pid 1028675:tid 1028937] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.770450 2026] [security2:error] [pid 1018003:tid 1018052] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/back-api/.env"] [unique_id "apK9SDAh5Y1i2tUxg4ECIwAF0B8"]
[Sat Aug 29 05:06:48.770639 2026] [security2:error] [pid 1018003:tid 1018038] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/back-end/.env"] [unique_id "apK9SDAh5Y1i2tUxg4ECJAAF0BE"]
[Sat Aug 29 05:06:48.771725 2026] [core:error] [pid 1018003:tid 1018043] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.771737 2026] [core:error] [pid 1018003:tid 1018043] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.779575 2026] [security2:error] [pid 1028675:tid 1028824] [client 68.155.159.216:38581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/chosen.php"] [unique_id "apK9SNdHPfW2QFvhmL7MVwAAAA4"]
[Sat Aug 29 05:06:48.784092 2026] [security2:error] [pid 1018003:tid 1018037] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/back/.env"] [unique_id "apK9SDAh5Y1i2tUxg4ECJQAF4BA"]
[Sat Aug 29 05:06:48.784735 2026] [security2:error] [pid 1018003:tid 1018206] [client 68.155.159.216:9295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-admin/dropdown.php"] [unique_id "apK9SDAh5Y1i2tUxg4ECJgAABe8"]
[Sat Aug 29 05:06:48.790588 2026] [security2:error] [pid 1018003:tid 1018262] [client 158.23.147.79:32648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/atomlib.php"] [unique_id "apK9SDAh5Y1i2tUxg4ECJwAABiY"]
[Sat Aug 29 05:06:48.796881 2026] [security2:error] [pid 1018003:tid 1018102] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/backend-api/.env"] [unique_id "apK9SDAh5Y1i2tUxg4ECKAAFzVE"]
[Sat Aug 29 05:06:48.799325 2026] [security2:error] [pid 1028675:tid 1028842] [client 20.220.204.93:59026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/num.php"] [unique_id "apK9SNdHPfW2QFvhmL7MWQAAACA"]
[Sat Aug 29 05:06:48.806385 2026] [security2:error] [pid 1018003:tid 1018044] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK9SDAh5Y1i2tUxg4ECKQAGDxc"]
[Sat Aug 29 05:06:48.806987 2026] [security2:error] [pid 1028675:tid 1028827] [client 158.23.184.117:19346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/.well-known/panel.php"] [unique_id "apK9SNdHPfW2QFvhmL7MWgAAABE"]
[Sat Aug 29 05:06:48.809697 2026] [core:error] [pid 1018003:tid 1018041] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.809710 2026] [core:error] [pid 1018003:tid 1018041] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.810202 2026] [security2:error] [pid 1028675:tid 1028860] [client 47.128.36.27:27970] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.jmdental.com.au"] [uri "/robots.txt"] [unique_id "apK9SNdHPfW2QFvhmL7MWwAAADI"]
[Sat Aug 29 05:06:48.810228 2026] [core:error] [pid 1018003:tid 1018040] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.810234 2026] [core:error] [pid 1018003:tid 1018040] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.810507 2026] [core:error] [pid 1018003:tid 1018131] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.810517 2026] [core:error] [pid 1018003:tid 1018131] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.812180 2026] [core:error] [pid 1018003:tid 1018135] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.812195 2026] [core:error] [pid 1018003:tid 1018135] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.813670 2026] [security2:error] [pid 1028675:tid 1028831] [client 20.48.250.41:21376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/666.php"] [unique_id "apK9SNdHPfW2QFvhmL7MXAAAABU"]
[Sat Aug 29 05:06:48.817077 2026] [core:error] [pid 1018003:tid 1018039] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.817088 2026] [core:error] [pid 1018003:tid 1018039] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.819789 2026] [security2:error] [pid 1018003:tid 1018182] [client 20.104.18.15:13725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/classwithtostring.php"] [unique_id "apK9SDAh5Y1i2tUxg4ECLwAABdc"]
[Sat Aug 29 05:06:48.833027 2026] [security2:error] [pid 1028675:tid 1028917] [client 20.52.41.200:1165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/autoload_classmap.php"] [unique_id "apK9SNdHPfW2QFvhmL7MXQAAAGs"]
[Sat Aug 29 05:06:48.843944 2026] [core:error] [pid 1018003:tid 1018048] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.843966 2026] [core:error] [pid 1018003:tid 1018048] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.858390 2026] [security2:error] [pid 1028675:tid 1028849] [client 20.104.18.15:8124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/xmini4.php"] [unique_id "apK9SNdHPfW2QFvhmL7MXwAAACc"]
[Sat Aug 29 05:06:48.871411 2026] [security2:error] [pid 1028675:tid 1028819] [client 158.23.184.117:34512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/item.php"] [unique_id "apK9SNdHPfW2QFvhmL7MYAAAAAk"]
[Sat Aug 29 05:06:48.888566 2026] [security2:error] [pid 1028675:tid 1028902] [client 68.155.159.216:50234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK9SNdHPfW2QFvhmL7MYQAAAFw"]
[Sat Aug 29 05:06:48.918895 2026] [core:error] [pid 1018003:tid 1018054] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.918918 2026] [core:error] [pid 1018003:tid 1018054] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.923671 2026] [core:error] [pid 1018003:tid 1018136] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.923693 2026] [core:error] [pid 1018003:tid 1018136] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.923737 2026] [core:error] [pid 1018003:tid 1018054] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.923747 2026] [core:error] [pid 1018003:tid 1018054] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.928177 2026] [security2:error] [pid 1028675:tid 1028865] [client 20.104.104.62:27018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ngoiloi.nlvn.net"] [uri "/admin.php"] [unique_id "apK9SNdHPfW2QFvhmL7MYwAAADc"]
[Sat Aug 29 05:06:48.930388 2026] [core:error] [pid 1018003:tid 1018062] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.930412 2026] [core:error] [pid 1018003:tid 1018062] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.932180 2026] [core:error] [pid 1018003:tid 1018056] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.932200 2026] [core:error] [pid 1018003:tid 1018056] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.940224 2026] [security2:error] [pid 1028675:tid 1028869] [client 20.104.18.15:36817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/5656.php"] [unique_id "apK9SNdHPfW2QFvhmL7MZAAAADs"]
[Sat Aug 29 05:06:48.940997 2026] [security2:error] [pid 1018003:tid 1018067] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/backup/.env"] [unique_id "apK9SDAh5Y1i2tUxg4ECNwAGLi4"]
[Sat Aug 29 05:06:48.941320 2026] [security2:error] [pid 1028675:tid 1028815] [client 20.220.204.93:52334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/a4.php"] [unique_id "apK9SNdHPfW2QFvhmL7MZQAAAAU"]
[Sat Aug 29 05:06:48.942610 2026] [security2:error] [pid 1018003:tid 1018061] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/be/.env"] [unique_id "apK9SDAh5Y1i2tUxg4ECOAAGLig"]
[Sat Aug 29 05:06:48.943176 2026] [security2:error] [pid 1018003:tid 1018234] [client 20.104.104.62:29204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.watercolorsbylola.allgooddays.org"] [uri "/index.php"] [unique_id "apK9SDAh5Y1i2tUxg4ECOgAABgo"]
[Sat Aug 29 05:06:48.943753 2026] [security2:error] [pid 1018003:tid 1018078] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/beta/.env"] [unique_id "apK9SDAh5Y1i2tUxg4ECOQAGLjk"]
[Sat Aug 29 05:06:48.950589 2026] [security2:error] [pid 1018003:tid 1018244] [client 20.104.18.15:13753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK9SDAh5Y1i2tUxg4ECPAAABhQ"]
[Sat Aug 29 05:06:48.955967 2026] [security2:error] [pid 1028675:tid 1028929] [client 158.23.184.117:19324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/.well-known/pki-validation/mariju.php"] [unique_id "apK9SNdHPfW2QFvhmL7MZwAAAHc"]
[Sat Aug 29 05:06:48.963164 2026] [security2:error] [pid 1028675:tid 1028856] [client 20.48.250.41:21474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/knmt.php"] [unique_id "apK9SNdHPfW2QFvhmL7MaAAAAC4"]
[Sat Aug 29 05:06:48.978628 2026] [security2:error] [pid 1028675:tid 1028871] [client 68.155.159.216:49181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK9SNdHPfW2QFvhmL7MagAAAD0"]
[Sat Aug 29 05:06:48.982644 2026] [security2:error] [pid 1018003:tid 1018256] [client 20.151.200.44:46639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/ad1.php"] [unique_id "apK9SDAh5Y1i2tUxg4ECRAAABiA"]
[Sat Aug 29 05:06:48.992011 2026] [core:error] [pid 1028675:tid 1028909] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.992028 2026] [core:error] [pid 1028675:tid 1028909] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.997717 2026] [core:error] [pid 1018003:tid 1018258] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.997732 2026] [core:error] [pid 1018003:tid 1018258] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.997862 2026] [core:error] [pid 1018003:tid 1018266] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:48.997872 2026] [core:error] [pid 1018003:tid 1018266] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.009146 2026] [core:error] [pid 1018003:tid 1018160] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.009162 2026] [core:error] [pid 1018003:tid 1018160] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.015594 2026] [security2:error] [pid 1028675:tid 1028838] [client 158.158.54.35:11371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/cv.php"] [unique_id "apK9SddHPfW2QFvhmL7MbwAAABw"]
[Sat Aug 29 05:06:49.016417 2026] [security2:error] [pid 1028675:tid 1028859] [client 158.23.184.117:34513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/k.php"] [unique_id "apK9SddHPfW2QFvhmL7McAAAADE"]
[Sat Aug 29 05:06:49.020431 2026] [cgid:error] [pid 1018003:tid 1018213] [client 158.23.184.117:46967] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/dontbenicemovie/404.shtml
[Sat Aug 29 05:06:49.023916 2026] [security2:error] [pid 1028675:tid 1028821] [client 158.23.147.79:30634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK9SddHPfW2QFvhmL7McQAAAAs"]
[Sat Aug 29 05:06:49.030053 2026] [security2:error] [pid 1018003:tid 1018226] [client 20.104.18.15:8030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/gulu.php"] [unique_id "apK9STAh5Y1i2tUxg4ECSwAABgM"]
[Sat Aug 29 05:06:49.049874 2026] [core:error] [pid 1018003:tid 1018265] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.049893 2026] [core:error] [pid 1018003:tid 1018265] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.049922 2026] [security2:error] [pid 1028675:tid 1028836] [client 195.178.110.101:1816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "naturalkneads.com"] [uri "/index.php"] [unique_id "apK9SddHPfW2QFvhmL7McwAAABo"]
[Sat Aug 29 05:06:49.066071 2026] [core:error] [pid 1028675:tid 1028810] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.066094 2026] [core:error] [pid 1028675:tid 1028810] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.067286 2026] [security2:error] [pid 1018003:tid 1018212] [client 158.23.184.117:46967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dontbenicemovie.wanderlustpictures.com"] [uri "/wk/admin.php"] [unique_id "apK9STAh5Y1i2tUxg4ECUwAABfU"]
[Sat Aug 29 05:06:49.067396 2026] [core:error] [pid 1028675:tid 1028841] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.067409 2026] [core:error] [pid 1028675:tid 1028841] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.068541 2026] [core:error] [pid 1018003:tid 1018170] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.068557 2026] [core:error] [pid 1018003:tid 1018170] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.072475 2026] [security2:error] [pid 1028675:tid 1028898] [client 20.196.209.81:17858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/1p.php"] [unique_id "apK9SddHPfW2QFvhmL7MdgAAAFg"]
[Sat Aug 29 05:06:49.084061 2026] [security2:error] [pid 1018003:tid 1018169] [client 20.104.18.15:13646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/5PJcpMFsD8B.php"] [unique_id "apK9STAh5Y1i2tUxg4ECVAAABco"]
[Sat Aug 29 05:06:49.087543 2026] [security2:error] [pid 1018003:tid 1018084] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/client/.env"] [unique_id "apK9STAh5Y1i2tUxg4ECVQAGJT8"]
[Sat Aug 29 05:06:49.088452 2026] [security2:error] [pid 1018003:tid 1018240] [client 4.205.62.107:55985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/php-info.php"] [unique_id "apK9STAh5Y1i2tUxg4ECVgAABhA"]
[Sat Aug 29 05:06:49.092100 2026] [security2:error] [pid 1018003:tid 1018088] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/cms/.env"] [unique_id "apK9STAh5Y1i2tUxg4ECWQAF6UM"]
[Sat Aug 29 05:06:49.093620 2026] [core:error] [pid 1018003:tid 1018085] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.093639 2026] [core:error] [pid 1018003:tid 1018085] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.096194 2026] [security2:error] [pid 1018003:tid 1018191] [client 168.107.94.195:60173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9STAh5Y1i2tUxg4ECXQAABeA"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:49.100513 2026] [security2:error] [pid 1028675:tid 1028891] [client 20.220.204.93:52272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/tfm.php"] [unique_id "apK9SddHPfW2QFvhmL7MegAAAFE"]
[Sat Aug 29 05:06:49.100892 2026] [security2:error] [pid 1018003:tid 1018163] [client 158.23.184.117:19349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/.well-known/pki-validation/pl.php"] [unique_id "apK9STAh5Y1i2tUxg4ECYAAABcQ"]
[Sat Aug 29 05:06:49.103295 2026] [core:error] [pid 1018003:tid 1018134] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.103309 2026] [core:error] [pid 1018003:tid 1018134] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.103974 2026] [security2:error] [pid 1018003:tid 1018206] [client 20.48.250.41:21463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/sbhu.php"] [unique_id "apK9STAh5Y1i2tUxg4ECYQAABe8"]
[Sat Aug 29 05:06:49.109237 2026] [security2:error] [pid 1028675:tid 1028857] [client 20.197.61.180:8922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/about.php525"] [unique_id "apK9SddHPfW2QFvhmL7MfAAAAC8"]
[Sat Aug 29 05:06:49.112931 2026] [core:error] [pid 1018003:tid 1018273] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.112946 2026] [core:error] [pid 1018003:tid 1018273] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.118743 2026] [core:error] [pid 1028675:tid 1028892] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.118757 2026] [core:error] [pid 1028675:tid 1028892] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.123257 2026] [security2:error] [pid 1028675:tid 1028900] [client 20.104.18.15:36771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/w3lls.php"] [unique_id "apK9SddHPfW2QFvhmL7MgAAAAFo"]
[Sat Aug 29 05:06:49.123534 2026] [core:error] [pid 1028675:tid 1028896] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.123545 2026] [core:error] [pid 1028675:tid 1028896] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.123999 2026] [security2:error] [pid 1028675:tid 1028835] [client 20.104.104.62:27530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ngoiloi.nlvn.net"] [uri "/lite.php"] [unique_id "apK9SddHPfW2QFvhmL7MgQAAABk"]
[Sat Aug 29 05:06:49.124882 2026] [core:error] [pid 1028675:tid 1028822] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.124900 2026] [core:error] [pid 1028675:tid 1028822] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.132957 2026] [security2:error] [pid 1028675:tid 1028899] [client 68.155.159.216:6112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/simple.php"] [unique_id "apK9SddHPfW2QFvhmL7MggAAAFk"]
[Sat Aug 29 05:06:49.137586 2026] [security2:error] [pid 1028675:tid 1028880] [client 20.104.104.62:29241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.watercolorsbylola.allgooddays.org"] [uri "/about.php"] [unique_id "apK9SddHPfW2QFvhmL7MgwAAAEY"]
[Sat Aug 29 05:06:49.151555 2026] [core:error] [pid 1018003:tid 1018055] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.151570 2026] [core:error] [pid 1018003:tid 1018055] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.161828 2026] [security2:error] [pid 1028675:tid 1028883] [client 158.23.184.117:34550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/license.php"] [unique_id "apK9SddHPfW2QFvhmL7MiAAAAEk"]
[Sat Aug 29 05:06:49.168878 2026] [security2:error] [pid 1028675:tid 1028897] [client 40.83.93.50:7739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/post.php"] [unique_id "apK9SddHPfW2QFvhmL7MiQAAAFc"]
[Sat Aug 29 05:06:49.181822 2026] [security2:error] [pid 1018003:tid 1018236] [client 68.155.159.216:24411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-content/admin.php"] [unique_id "apK9STAh5Y1i2tUxg4ECZgAABgw"]
[Sat Aug 29 05:06:49.182498 2026] [security2:error] [pid 1028675:tid 1028921] [client 20.104.18.15:8058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/replace.php"] [unique_id "apK9SddHPfW2QFvhmL7MigAAAG8"]
[Sat Aug 29 05:06:49.186360 2026] [core:error] [pid 1018003:tid 1018207] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.186379 2026] [core:error] [pid 1018003:tid 1018207] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.212113 2026] [security2:error] [pid 1018003:tid 1018166] [client 20.151.200.44:64384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/f-401.php"] [unique_id "apK9STAh5Y1i2tUxg4ECagAABcc"]
[Sat Aug 29 05:06:49.215615 2026] [security2:error] [pid 1018003:tid 1018195] [client 20.104.18.15:13734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK9STAh5Y1i2tUxg4ECbAAABeQ"]
[Sat Aug 29 05:06:49.216676 2026] [security2:error] [pid 1028675:tid 1028919] [client 158.23.184.117:62296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dontbenicemovie.wanderlustpictures.com"] [uri "/admin.php"] [unique_id "apK9SddHPfW2QFvhmL7MjQAAAG0"]
[Sat Aug 29 05:06:49.230391 2026] [security2:error] [pid 1018003:tid 1018162] [client 20.220.204.93:52303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/Geforce.php"] [unique_id "apK9STAh5Y1i2tUxg4ECbwAABcM"]
[Sat Aug 29 05:06:49.244982 2026] [security2:error] [pid 1018003:tid 1018234] [client 158.23.184.117:19313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/.well-known/pki-validation/x.php"] [unique_id "apK9STAh5Y1i2tUxg4ECcQAABgo"]
[Sat Aug 29 05:06:49.251433 2026] [security2:error] [pid 1018003:tid 1018217] [client 20.104.49.130:58107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.carlosmua.com"] [uri "/Jcrop.php"] [unique_id "apK9STAh5Y1i2tUxg4ECcwAABfo"]
[Sat Aug 29 05:06:49.253012 2026] [security2:error] [pid 1028675:tid 1028905] [client 20.48.250.41:21469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/a332.php"] [unique_id "apK9SddHPfW2QFvhmL7MjwAAAF8"]
[Sat Aug 29 05:06:49.271485 2026] [security2:error] [pid 1018003:tid 1018059] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/config/.env"] [unique_id "apK9STAh5Y1i2tUxg4ECdgAGLiY"]
[Sat Aug 29 05:06:49.271630 2026] [core:error] [pid 1028675:tid 1028906] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.271643 2026] [core:error] [pid 1028675:tid 1028906] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.274165 2026] [core:error] [pid 1018003:tid 1018079] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.274179 2026] [core:error] [pid 1018003:tid 1018079] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.276489 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.52.41.200:1237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/bi.php"] [unique_id "apK9STAh5Y1i2tUxg4ECfgAABcI"]
[Sat Aug 29 05:06:49.280115 2026] [core:error] [pid 1018003:tid 1018112] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.280135 2026] [core:error] [pid 1018003:tid 1018112] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.292124 2026] [core:error] [pid 1018003:tid 1018187] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.292141 2026] [core:error] [pid 1018003:tid 1018187] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.292157 2026] [core:error] [pid 1018003:tid 1018246] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.292166 2026] [core:error] [pid 1018003:tid 1018246] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.303591 2026] [core:error] [pid 1028675:tid 1028934] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.303608 2026] [core:error] [pid 1028675:tid 1028934] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.304983 2026] [core:error] [pid 1018003:tid 1018265] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.304994 2026] [core:error] [pid 1018003:tid 1018265] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.306336 2026] [core:error] [pid 1028675:tid 1028818] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.306360 2026] [core:error] [pid 1028675:tid 1028818] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.307708 2026] [core:error] [pid 1028675:tid 1028824] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.307720 2026] [core:error] [pid 1028675:tid 1028824] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.309075 2026] [core:error] [pid 1018003:tid 1018170] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.309089 2026] [core:error] [pid 1018003:tid 1018170] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.313831 2026] [core:error] [pid 1028675:tid 1028860] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.313845 2026] [core:error] [pid 1028675:tid 1028860] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.318629 2026] [security2:error] [pid 1028675:tid 1028814] [client 4.205.62.107:8964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/snq.php"] [unique_id "apK9SddHPfW2QFvhmL7MlwAAAAQ"]
[Sat Aug 29 05:06:49.320922 2026] [security2:error] [pid 1028675:tid 1028932] [client 20.104.104.62:27052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ngoiloi.nlvn.net"] [uri "/about.php"] [unique_id "apK9SddHPfW2QFvhmL7MmAAAAHo"]
[Sat Aug 29 05:06:49.321276 2026] [security2:error] [pid 1028675:tid 1028850] [client 20.151.200.44:61969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/hq.php"] [unique_id "apK9SddHPfW2QFvhmL7MmQAAACg"]
[Sat Aug 29 05:06:49.331736 2026] [security2:error] [pid 1028675:tid 1028854] [client 20.104.18.15:36631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/fpwch.php"] [unique_id "apK9SddHPfW2QFvhmL7MmgAAACw"]
[Sat Aug 29 05:06:49.332332 2026] [security2:error] [pid 1028675:tid 1028924] [client 20.104.104.62:29247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.watercolorsbylola.allgooddays.org"] [uri "/vx.php"] [unique_id "apK9SddHPfW2QFvhmL7MmwAAAHI"]
[Sat Aug 29 05:06:49.334595 2026] [core:error] [pid 1018003:tid 1018095] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.334606 2026] [core:error] [pid 1018003:tid 1018095] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.340022 2026] [core:error] [pid 1018003:tid 1018086] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.340033 2026] [core:error] [pid 1018003:tid 1018086] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.344496 2026] [core:error] [pid 1018003:tid 1018066] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.344508 2026] [core:error] [pid 1018003:tid 1018066] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.346473 2026] [security2:error] [pid 1028675:tid 1028902] [client 20.104.18.15:13732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/wsd.php"] [unique_id "apK9SddHPfW2QFvhmL7MnQAAAFw"]
[Sat Aug 29 05:06:49.357842 2026] [security2:error] [pid 1028675:tid 1028903] [client 20.220.204.93:52328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/click.php"] [unique_id "apK9SddHPfW2QFvhmL7MngAAAF0"]
[Sat Aug 29 05:06:49.360836 2026] [security2:error] [pid 1028675:tid 1028834] [client 20.151.200.44:46610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/1vbqo.php"] [unique_id "apK9SddHPfW2QFvhmL7MnwAAABg"]
[Sat Aug 29 05:06:49.361293 2026] [security2:error] [pid 1028675:tid 1028851] [client 20.104.18.15:8163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/c4.php"] [unique_id "apK9SddHPfW2QFvhmL7MoAAAACk"]
[Sat Aug 29 05:06:49.364078 2026] [security2:error] [pid 1028675:tid 1028813] [client 20.104.49.130:60789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/gecko-new.php"] [unique_id "apK9SddHPfW2QFvhmL7MoQAAAAM"]
[Sat Aug 29 05:06:49.370644 2026] [core:error] [pid 1028675:tid 1028865] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.370656 2026] [core:error] [pid 1028675:tid 1028865] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.411488 2026] [security2:error] [pid 1028675:tid 1028862] [client 20.48.250.41:21493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/ws66.php"] [unique_id "apK9SddHPfW2QFvhmL7MpAAAADQ"]
[Sat Aug 29 05:06:49.437327 2026] [security2:error] [pid 1028675:tid 1028870] [client 158.23.147.79:17461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK9SddHPfW2QFvhmL7MpQAAADw"]
[Sat Aug 29 05:06:49.439697 2026] [security2:error] [pid 1018003:tid 1018222] [client 158.23.147.79:26468] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcontacts.olker.us"] [uri "/1.php"] [unique_id "apK9STAh5Y1i2tUxg4ECiwAABf8"]
[Sat Aug 29 05:06:49.439772 2026] [security2:error] [pid 1018003:tid 1018222] [client 158.23.147.79:26468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/1.php"] [unique_id "apK9STAh5Y1i2tUxg4ECiwAABf8"]
[Sat Aug 29 05:06:49.440618 2026] [security2:error] [pid 1028675:tid 1028853] [client 20.104.49.130:50606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.danesquality.com"] [uri "/abc.php"] [unique_id "apK9SddHPfW2QFvhmL7MpgAAACs"]
[Sat Aug 29 05:06:49.444381 2026] [core:error] [pid 1018003:tid 1018114] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.444403 2026] [core:error] [pid 1018003:tid 1018114] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.444493 2026] [core:error] [pid 1018003:tid 1018077] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.444503 2026] [core:error] [pid 1018003:tid 1018077] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.445066 2026] [core:error] [pid 1018003:tid 1018105] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.445074 2026] [core:error] [pid 1018003:tid 1018105] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.451908 2026] [core:error] [pid 1018003:tid 1018099] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.451922 2026] [core:error] [pid 1018003:tid 1018099] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.455620 2026] [core:error] [pid 1018003:tid 1018030] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.455631 2026] [core:error] [pid 1018003:tid 1018030] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.461578 2026] [security2:error] [pid 1028675:tid 1028820] [client 68.155.159.216:18365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK9SddHPfW2QFvhmL7MqgAAAAo"]
[Sat Aug 29 05:06:49.464210 2026] [core:error] [pid 1028675:tid 1028858] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.464221 2026] [core:error] [pid 1028675:tid 1028858] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.469233 2026] [core:error] [pid 1028675:tid 1028925] [client 45.148.10.62:49768] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.471177 2026] [security2:error] [pid 1028675:tid 1028810] [client 4.205.62.107:22456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/wpver.php"] [unique_id "apK9SddHPfW2QFvhmL7MsAAAAAA"]
[Sat Aug 29 05:06:49.474625 2026] [security2:error] [pid 1018003:tid 1018186] [client 158.23.147.79:24510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/ans.php"] [unique_id "apK9STAh5Y1i2tUxg4EClgAABds"]
[Sat Aug 29 05:06:49.474658 2026] [security2:error] [pid 1028675:tid 1028898] [client 168.107.94.195:60418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9SddHPfW2QFvhmL7MsQAAAFg"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:49.481456 2026] [core:error] [pid 1018003:tid 1018029] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.481469 2026] [core:error] [pid 1018003:tid 1018029] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.483838 2026] [core:error] [pid 1018003:tid 1018225] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.483851 2026] [core:error] [pid 1018003:tid 1018225] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.485438 2026] [security2:error] [pid 1028675:tid 1028882] [client 20.104.18.15:13699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/bulet.php"] [unique_id "apK9SddHPfW2QFvhmL7MswAAAEg"]
[Sat Aug 29 05:06:49.491160 2026] [core:error] [pid 1018003:tid 1018080] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.491170 2026] [core:error] [pid 1018003:tid 1018080] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.493160 2026] [security2:error] [pid 1018003:tid 1018218] [client 20.220.204.93:52335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/ms.php"] [unique_id "apK9STAh5Y1i2tUxg4ECoAAABfs"]
[Sat Aug 29 05:06:49.493528 2026] [security2:error] [pid 1018003:tid 1018175] [client 20.104.18.15:7960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/rxr.php"] [unique_id "apK9STAh5Y1i2tUxg4ECoQAABdA"]
[Sat Aug 29 05:06:49.495094 2026] [security2:error] [pid 1028675:tid 1028861] [client 20.104.18.15:36616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/domvf.php"] [unique_id "apK9SddHPfW2QFvhmL7MtAAAADM"]
[Sat Aug 29 05:06:49.500703 2026] [security2:error] [pid 1018003:tid 1018261] [client 158.158.54.35:29634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-content/packed.php"] [unique_id "apK9STAh5Y1i2tUxg4ECpAAABiU"]
[Sat Aug 29 05:06:49.509398 2026] [core:error] [pid 1018003:tid 1018182] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.509413 2026] [core:error] [pid 1018003:tid 1018182] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.509609 2026] [core:error] [pid 1018003:tid 1018277] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.509619 2026] [core:error] [pid 1018003:tid 1018277] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.513733 2026] [core:error] [pid 1018003:tid 1018238] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.513744 2026] [core:error] [pid 1018003:tid 1018238] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.513895 2026] [core:error] [pid 1018003:tid 1018271] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.513903 2026] [core:error] [pid 1018003:tid 1018271] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.515869 2026] [core:error] [pid 1018003:tid 1018268] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.515879 2026] [core:error] [pid 1018003:tid 1018268] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.518504 2026] [core:error] [pid 1018003:tid 1018230] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.518514 2026] [core:error] [pid 1018003:tid 1018230] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.519778 2026] [security2:error] [pid 1028675:tid 1028838] [client 20.104.104.62:27054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ngoiloi.nlvn.net"] [uri "/inputs.php"] [unique_id "apK9SddHPfW2QFvhmL7MtgAAABw"]
[Sat Aug 29 05:06:49.520730 2026] [security2:error] [pid 1018003:tid 1018256] [client 68.155.159.216:65105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/file.php"] [unique_id "apK9STAh5Y1i2tUxg4ECrQAABiA"]
[Sat Aug 29 05:06:49.525707 2026] [security2:error] [pid 1028675:tid 1028877] [client 20.104.104.62:29242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.watercolorsbylola.allgooddays.org"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK9SddHPfW2QFvhmL7MtwAAAEM"]
[Sat Aug 29 05:06:49.545985 2026] [security2:error] [pid 1028675:tid 1028909] [client 20.196.209.81:13311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/Njima.php"] [unique_id "apK9SddHPfW2QFvhmL7MuAAAAGM"]
[Sat Aug 29 05:06:49.548639 2026] [security2:error] [pid 1028675:tid 1028892] [client 158.23.147.79:25539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-includes/js/index.php"] [unique_id "apK9SddHPfW2QFvhmL7MuQAAAFI"]
[Sat Aug 29 05:06:49.554931 2026] [core:error] [pid 1018003:tid 1018161] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.554950 2026] [core:error] [pid 1018003:tid 1018161] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.556335 2026] [security2:error] [pid 1028675:tid 1028889] [client 158.23.147.79:50126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK9SddHPfW2QFvhmL7MugAAAE8"]
[Sat Aug 29 05:06:49.563731 2026] [security2:error] [pid 1028675:tid 1028890] [client 20.48.250.41:21494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/ws68.php"] [unique_id "apK9SddHPfW2QFvhmL7MuwAAAFA"]
[Sat Aug 29 05:06:49.572444 2026] [security2:error] [pid 1018003:tid 1018189] [client 158.23.147.79:62709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK9STAh5Y1i2tUxg4ECsQAABd4"]
[Sat Aug 29 05:06:49.586697 2026] [security2:error] [pid 1028675:tid 1028896] [client 68.155.159.216:33727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/content.php"] [unique_id "apK9SddHPfW2QFvhmL7MvAAAAFY"]
[Sat Aug 29 05:06:49.591027 2026] [core:error] [pid 1018003:tid 1018106] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.591045 2026] [core:error] [pid 1018003:tid 1018106] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.595773 2026] [core:error] [pid 1018003:tid 1018069] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.595785 2026] [core:error] [pid 1018003:tid 1018069] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.601082 2026] [core:error] [pid 1018003:tid 1018116] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.601094 2026] [core:error] [pid 1018003:tid 1018116] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.613370 2026] [security2:error] [pid 1018003:tid 1018166] [client 45.61.187.50:65028] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "succulentideas.com"] [uri "/wp-content/plugins/wp_gljbkwx/wp_gljbkwx.php"] [unique_id "apK9STAh5Y1i2tUxg4ECuAAABcc"]
[Sat Aug 29 05:06:49.614719 2026] [core:error] [pid 1028675:tid 1028894] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.614732 2026] [core:error] [pid 1028675:tid 1028894] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.618500 2026] [security2:error] [pid 1028675:tid 1028901] [client 20.104.18.15:13709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/av.php"] [unique_id "apK9SddHPfW2QFvhmL7MwQAAAFs"]
[Sat Aug 29 05:06:49.622558 2026] [core:error] [pid 1028675:tid 1028880] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.622574 2026] [core:error] [pid 1028675:tid 1028880] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.632993 2026] [core:error] [pid 1028675:tid 1028847] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.633005 2026] [core:error] [pid 1028675:tid 1028847] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.633187 2026] [core:error] [pid 1018003:tid 1018127] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.633197 2026] [core:error] [pid 1018003:tid 1018127] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.636165 2026] [core:error] [pid 1018003:tid 1018126] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.636174 2026] [core:error] [pid 1018003:tid 1018126] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.643766 2026] [security2:error] [pid 1028675:tid 1028928] [client 20.104.18.15:36770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/biufile.php"] [unique_id "apK9SddHPfW2QFvhmL7MxAAAAHY"]
[Sat Aug 29 05:06:49.647191 2026] [security2:error] [pid 1028675:tid 1028919] [client 20.220.204.93:50790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/zxekqlxb.php"] [unique_id "apK9SddHPfW2QFvhmL7MxQAAAG0"]
[Sat Aug 29 05:06:49.648000 2026] [security2:error] [pid 1018003:tid 1018258] [client 20.104.18.15:8010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "canistermachine.com"] [uri "/reviall.php"] [unique_id "apK9STAh5Y1i2tUxg4ECuwAABiI"]
[Sat Aug 29 05:06:49.652099 2026] [security2:error] [pid 1028675:tid 1028905] [client 20.151.200.44:47304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/h02ugyh.php"] [unique_id "apK9SddHPfW2QFvhmL7MxgAAAF8"]
[Sat Aug 29 05:06:49.663019 2026] [core:error] [pid 1018003:tid 1018121] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.663041 2026] [core:error] [pid 1018003:tid 1018121] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.679408 2026] [core:error] [pid 1028675:tid 1028906] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.679427 2026] [core:error] [pid 1028675:tid 1028906] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.684411 2026] [core:error] [pid 1028675:tid 1028916] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.684430 2026] [core:error] [pid 1028675:tid 1028916] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.686016 2026] [core:error] [pid 1018003:tid 1018202] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.686029 2026] [core:error] [pid 1018003:tid 1018202] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.686062 2026] [core:error] [pid 1028675:tid 1028829] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.686079 2026] [core:error] [pid 1028675:tid 1028829] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.691090 2026] [core:error] [pid 1028675:tid 1028911] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.691101 2026] [core:error] [pid 1028675:tid 1028911] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.693707 2026] [core:error] [pid 1028675:tid 1028827] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.693718 2026] [core:error] [pid 1028675:tid 1028827] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.699125 2026] [security2:error] [pid 1028675:tid 1028848] [client 20.48.250.41:21435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/users.php"] [unique_id "apK9SddHPfW2QFvhmL7MzgAAACY"]
[Sat Aug 29 05:06:49.714638 2026] [security2:error] [pid 1028675:tid 1028895] [client 20.52.41.200:1789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/cc.php"] [unique_id "apK9SddHPfW2QFvhmL7MzwAAAFU"]
[Sat Aug 29 05:06:49.714666 2026] [security2:error] [pid 1028675:tid 1028935] [client 20.104.104.62:27533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ngoiloi.nlvn.net"] [uri "/adminfuns.php"] [unique_id "apK9SddHPfW2QFvhmL7M0AAAAH0"]
[Sat Aug 29 05:06:49.718113 2026] [security2:error] [pid 1018003:tid 1018252] [client 20.104.104.62:29246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.watercolorsbylola.allgooddays.org"] [uri "/goods.php"] [unique_id "apK9STAh5Y1i2tUxg4ECywAABhw"]
[Sat Aug 29 05:06:49.718216 2026] [security2:error] [pid 1018003:tid 1018196] [client 40.83.93.50:7871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/flower.php"] [unique_id "apK9STAh5Y1i2tUxg4ECzAAABeU"]
[Sat Aug 29 05:06:49.733273 2026] [security2:error] [pid 1018003:tid 1018180] [client 68.155.159.216:30688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/file17.php"] [unique_id "apK9STAh5Y1i2tUxg4ECzQAABdU"]
[Sat Aug 29 05:06:49.741562 2026] [security2:error] [pid 1028675:tid 1028814] [client 4.205.62.107:22366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/radio.php"] [unique_id "apK9SddHPfW2QFvhmL7M0QAAAAQ"]
[Sat Aug 29 05:06:49.747482 2026] [security2:error] [pid 1018003:tid 1018117] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/crm/.env"] [unique_id "apK9STAh5Y1i2tUxg4ECzgAF_mA"]
[Sat Aug 29 05:06:49.749514 2026] [security2:error] [pid 1018003:tid 1018174] [client 4.205.62.107:65522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/phpsysinfo.php"] [unique_id "apK9STAh5Y1i2tUxg4EC0AAABc8"]
[Sat Aug 29 05:06:49.750986 2026] [core:error] [pid 1018003:tid 1018141] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.750997 2026] [core:error] [pid 1018003:tid 1018141] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.751175 2026] [core:error] [pid 1018003:tid 1018130] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.751183 2026] [core:error] [pid 1018003:tid 1018130] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.761392 2026] [security2:error] [pid 1028675:tid 1028850] [client 20.104.18.15:13701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/images.php"] [unique_id "apK9SddHPfW2QFvhmL7M0wAAACg"]
[Sat Aug 29 05:06:49.762439 2026] [security2:error] [pid 1018003:tid 1018240] [client 158.23.147.79:35838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/hehehehe.php"] [unique_id "apK9STAh5Y1i2tUxg4EC0gAABhA"]
[Sat Aug 29 05:06:49.769618 2026] [security2:error] [pid 1018003:tid 1018139] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/cron/.env"] [unique_id "apK9STAh5Y1i2tUxg4EC0wAF_nY"]
[Sat Aug 29 05:06:49.772347 2026] [core:error] [pid 1018003:tid 1018191] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.772397 2026] [core:error] [pid 1018003:tid 1018191] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.776927 2026] [security2:error] [pid 1018003:tid 1018144] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/current/.env"] [unique_id "apK9STAh5Y1i2tUxg4EC1QAF_ns"]
[Sat Aug 29 05:06:49.778767 2026] [security2:error] [pid 1028675:tid 1028849] [client 20.220.204.93:59087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/init.php"] [unique_id "apK9SddHPfW2QFvhmL7M1AAAACc"]
[Sat Aug 29 05:06:49.782982 2026] [security2:error] [pid 1018003:tid 1018142] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/demo/.env"] [unique_id "apK9STAh5Y1i2tUxg4EC1wAF_3k"]
[Sat Aug 29 05:06:49.803800 2026] [security2:error] [pid 1018003:tid 1018182] [client 4.205.62.107:22297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/php_info.php"] [unique_id "apK9STAh5Y1i2tUxg4EC2gAABdc"]
[Sat Aug 29 05:06:49.804649 2026] [core:error] [pid 1018003:tid 1018261] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.804672 2026] [core:error] [pid 1018003:tid 1018261] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.811545 2026] [security2:error] [pid 1018003:tid 1018125] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/dev/.env"] [unique_id "apK9STAh5Y1i2tUxg4EC2wAF_2g"]
[Sat Aug 29 05:06:49.814152 2026] [core:error] [pid 1028675:tid 1028846] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.814169 2026] [core:error] [pid 1028675:tid 1028846] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.816989 2026] [security2:error] [pid 1018003:tid 1018271] [client 20.104.18.15:36796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/blacks.php"] [unique_id "apK9STAh5Y1i2tUxg4EC3AAABi8"]
[Sat Aug 29 05:06:49.820859 2026] [security2:error] [pid 1018003:tid 1018224] [client 20.151.200.44:47336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/shelp.php"] [unique_id "apK9STAh5Y1i2tUxg4EC3QAABgE"]
[Sat Aug 29 05:06:49.833478 2026] [security2:error] [pid 1018003:tid 1018184] [client 20.48.250.41:21395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/bzjdlofz.php"] [unique_id "apK9STAh5Y1i2tUxg4EC3gAABdk"]
[Sat Aug 29 05:06:49.836077 2026] [security2:error] [pid 1018003:tid 1018129] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/develop/.env"] [unique_id "apK9STAh5Y1i2tUxg4EC4AAFumw"]
[Sat Aug 29 05:06:49.837088 2026] [security2:error] [pid 1018003:tid 1018133] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/development/.env"] [unique_id "apK9STAh5Y1i2tUxg4EC4gAFunA"]
[Sat Aug 29 05:06:49.837183 2026] [security2:error] [pid 1018003:tid 1018111] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/developer/.env"] [unique_id "apK9STAh5Y1i2tUxg4EC4QAFulo"]
[Sat Aug 29 05:06:49.837599 2026] [core:error] [pid 1018003:tid 1018123] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.837612 2026] [core:error] [pid 1018003:tid 1018123] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.840287 2026] [security2:error] [pid 1018003:tid 1018244] [client 20.197.61.180:8924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/spip.php"] [unique_id "apK9STAh5Y1i2tUxg4EC5gAABhQ"]
[Sat Aug 29 05:06:49.854677 2026] [security2:error] [pid 1028675:tid 1028871] [client 168.107.94.195:60690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9SddHPfW2QFvhmL7M2wAAAD0"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:49.878289 2026] [core:error] [pid 1028675:tid 1028862] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.878306 2026] [core:error] [pid 1028675:tid 1028862] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.886778 2026] [security2:error] [pid 1028675:tid 1028870] [client 68.155.159.216:56514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/goods.php"] [unique_id "apK9SddHPfW2QFvhmL7M4AAAADw"]
[Sat Aug 29 05:06:49.888239 2026] [security2:error] [pid 1028675:tid 1028853] [client 20.104.18.15:13661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/ops.php"] [unique_id "apK9SddHPfW2QFvhmL7M4QAAACs"]
[Sat Aug 29 05:06:49.897821 2026] [security2:error] [pid 1028675:tid 1028821] [client 158.23.147.79:32767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/lv.php"] [unique_id "apK9SddHPfW2QFvhmL7M4gAAAAs"]
[Sat Aug 29 05:06:49.900560 2026] [core:error] [pid 1018003:tid 1018036] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.900574 2026] [core:error] [pid 1018003:tid 1018036] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.916257 2026] [security2:error] [pid 1018003:tid 1018242] [client 20.104.104.62:28931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.watercolorsbylola.allgooddays.org"] [uri "/wp-access.php"] [unique_id "apK9STAh5Y1i2tUxg4EC7gAABhI"]
[Sat Aug 29 05:06:49.921091 2026] [security2:error] [pid 1018003:tid 1018226] [client 68.155.159.216:51546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK9STAh5Y1i2tUxg4EC7wAABgM"]
[Sat Aug 29 05:06:49.925895 2026] [security2:error] [pid 1018003:tid 1018192] [client 68.155.159.216:52752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/login.php"] [unique_id "apK9STAh5Y1i2tUxg4EC8wAABeE"]
[Sat Aug 29 05:06:49.937044 2026] [core:error] [pid 1018003:tid 1018161] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.937070 2026] [core:error] [pid 1018003:tid 1018161] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.954181 2026] [security2:error] [pid 1028675:tid 1028878] [client 20.220.204.93:52339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/term.php"] [unique_id "apK9SddHPfW2QFvhmL7M6QAAAEQ"]
[Sat Aug 29 05:06:49.954949 2026] [core:error] [pid 1028675:tid 1028858] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.954966 2026] [core:error] [pid 1028675:tid 1028858] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.970443 2026] [security2:error] [pid 1028675:tid 1028886] [client 20.104.18.15:36625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/beck.php"] [unique_id "apK9SddHPfW2QFvhmL7M6gAAAEw"]
[Sat Aug 29 05:06:49.971464 2026] [security2:error] [pid 1018003:tid 1018185] [client 20.196.209.81:9448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/configs.php"] [unique_id "apK9STAh5Y1i2tUxg4EC-AAABdo"]
[Sat Aug 29 05:06:49.987211 2026] [core:error] [pid 1028675:tid 1028861] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.987212 2026] [core:error] [pid 1028675:tid 1028810] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.987227 2026] [core:error] [pid 1028675:tid 1028861] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.987231 2026] [core:error] [pid 1028675:tid 1028810] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.990506 2026] [core:error] [pid 1028675:tid 1028887] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.990518 2026] [core:error] [pid 1028675:tid 1028887] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.990948 2026] [core:error] [pid 1028675:tid 1028930] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.991063 2026] [core:error] [pid 1028675:tid 1028930] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.997442 2026] [cgid:error] [pid 1028675:tid 1028843] [client 20.104.104.62:27060] AH01264: stderr from /home3/nlvnnet/public_html/ngoiloi/cgi-bin: script not found or unable to stat
[Sat Aug 29 05:06:49.998574 2026] [core:error] [pid 1028675:tid 1028888] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.998602 2026] [core:error] [pid 1028675:tid 1028888] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.999463 2026] [core:error] [pid 1018003:tid 1018035] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:49.999569 2026] [core:error] [pid 1018003:tid 1018035] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.018172 2026] [security2:error] [pid 1028675:tid 1028865] [client 158.158.54.35:34274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-admin/js/index.php"] [unique_id "apK9StdHPfW2QFvhmL7M8QAAADc"]
[Sat Aug 29 05:06:50.021347 2026] [security2:error] [pid 1018003:tid 1018258] [client 20.104.18.15:13752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/coffexium.php"] [unique_id "apK9SjAh5Y1i2tUxg4EDBAAABiI"]
[Sat Aug 29 05:06:50.023321 2026] [core:error] [pid 1018003:tid 1018145] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.023336 2026] [core:error] [pid 1018003:tid 1018145] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.038332 2026] [security2:error] [pid 1018003:tid 1018047] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/erp/.env"] [unique_id "apK9SjAh5Y1i2tUxg4EDBwAFuho"]
[Sat Aug 29 05:06:50.045753 2026] [core:error] [pid 1018003:tid 1018202] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.045769 2026] [core:error] [pid 1018003:tid 1018202] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.046714 2026] [core:error] [pid 1028675:tid 1028840] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.046748 2026] [core:error] [pid 1028675:tid 1028840] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.048454 2026] [core:error] [pid 1028675:tid 1028857] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.048469 2026] [core:error] [pid 1028675:tid 1028857] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.048730 2026] [core:error] [pid 1018003:tid 1018275] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.048739 2026] [core:error] [pid 1018003:tid 1018275] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.049351 2026] [core:error] [pid 1018003:tid 1018194] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.049373 2026] [core:error] [pid 1018003:tid 1018194] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.063492 2026] [security2:error] [pid 1028675:tid 1028896] [client 20.104.104.62:27060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ngoiloi.nlvn.net"] [uri "/edit.php"] [unique_id "apK9StdHPfW2QFvhmL7M9gAAAFY"]
[Sat Aug 29 05:06:50.075269 2026] [security2:error] [pid 1028675:tid 1028910] [client 20.151.200.44:61967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/mh.php"] [unique_id "apK9StdHPfW2QFvhmL7M-AAAAGQ"]
[Sat Aug 29 05:06:50.075764 2026] [core:error] [pid 1028675:tid 1028835] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.075779 2026] [core:error] [pid 1028675:tid 1028835] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.077183 2026] [security2:error] [pid 1028675:tid 1028899] [client 68.155.159.216:49156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-content/banners/about.php"] [unique_id "apK9StdHPfW2QFvhmL7M-QAAAFk"]
[Sat Aug 29 05:06:50.081327 2026] [security2:error] [pid 1028675:tid 1028880] [client 20.48.250.41:21445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/selesai.php"] [unique_id "apK9StdHPfW2QFvhmL7M-gAAAEY"]
[Sat Aug 29 05:06:50.106777 2026] [security2:error] [pid 1018003:tid 1018052] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/etc/apache2/apache2.conf"] [unique_id "apK9SjAh5Y1i2tUxg4EDDAAFzx8"]
[Sat Aug 29 05:06:50.108943 2026] [security2:error] [pid 1018003:tid 1018240] [client 20.220.204.93:50762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/aaa.php"] [unique_id "apK9SjAh5Y1i2tUxg4EDDQAABhA"]
[Sat Aug 29 05:06:50.115724 2026] [security2:error] [pid 1028675:tid 1028889] [client 20.104.104.62:28817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.watercolorsbylola.allgooddays.org"] [uri "/autoload_classmap/function.php"] [unique_id "apK9StdHPfW2QFvhmL7M-wAAAE8"]
[Sat Aug 29 05:06:50.127753 2026] [security2:error] [pid 1028675:tid 1028847] [client 20.104.18.15:36670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/t3.php"] [unique_id "apK9StdHPfW2QFvhmL7M_AAAACU"]
[Sat Aug 29 05:06:50.130398 2026] [security2:error] [pid 1028675:tid 1028921] [client 20.104.49.130:47810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/sta.php"] [unique_id "apK9StdHPfW2QFvhmL7M_QAAAG8"]
[Sat Aug 29 05:06:50.133180 2026] [security2:error] [pid 1018003:tid 1018038] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/etc/boto.cfg"] [unique_id "apK9SjAh5Y1i2tUxg4EDDgAFxBE"]
[Sat Aug 29 05:06:50.134697 2026] [security2:error] [pid 1018003:tid 1018043] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/fe/.env"] [unique_id "apK9SjAh5Y1i2tUxg4EDDwAFxBY"]
[Sat Aug 29 05:06:50.141621 2026] [security2:error] [pid 1018003:tid 1018206] [client 68.155.159.216:16268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-includes/assets/index.php"] [unique_id "apK9SjAh5Y1i2tUxg4EDEgAABe8"]
[Sat Aug 29 05:06:50.143116 2026] [security2:error] [pid 1028675:tid 1028914] [client 158.23.147.79:48324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/index/function.php"] [unique_id "apK9StdHPfW2QFvhmL7M_gAAAGg"]
[Sat Aug 29 05:06:50.157444 2026] [security2:error] [pid 1028675:tid 1028926] [client 20.104.18.15:13741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/BDKR28WP.php"] [unique_id "apK9StdHPfW2QFvhmL7NAAAAAHQ"]
[Sat Aug 29 05:06:50.161607 2026] [security2:error] [pid 1018003:tid 1018217] [client 20.52.41.200:1169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/files/index.php"] [unique_id "apK9SjAh5Y1i2tUxg4EDFQAABfo"]
[Sat Aug 29 05:06:50.169765 2026] [security2:error] [pid 1028675:tid 1028937] [client 20.151.200.44:46620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/13ede.php"] [unique_id "apK9StdHPfW2QFvhmL7NAwAAAH8"]
[Sat Aug 29 05:06:50.171558 2026] [security2:error] [pid 1018003:tid 1018186] [client 158.23.147.79:30561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/images/index.php"] [unique_id "apK9SjAh5Y1i2tUxg4EDGAAABds"]
[Sat Aug 29 05:06:50.173169 2026] [core:error] [pid 1028675:tid 1028905] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.173183 2026] [core:error] [pid 1028675:tid 1028905] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.180384 2026] [security2:error] [pid 1018003:tid 1018131] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/front/.env"] [unique_id "apK9SjAh5Y1i2tUxg4EDGQAFxG4"]
[Sat Aug 29 05:06:50.181866 2026] [security2:error] [pid 1018003:tid 1018135] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/frontend/.env"] [unique_id "apK9SjAh5Y1i2tUxg4EDGgAFxHI"]
[Sat Aug 29 05:06:50.188176 2026] [core:error] [pid 1028675:tid 1028852] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.188193 2026] [core:error] [pid 1028675:tid 1028852] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.216720 2026] [core:error] [pid 1028675:tid 1028818] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.216736 2026] [core:error] [pid 1028675:tid 1028818] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.218399 2026] [core:error] [pid 1028675:tid 1028827] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.218429 2026] [core:error] [pid 1028675:tid 1028827] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.222053 2026] [core:error] [pid 1018003:tid 1018239] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.222076 2026] [core:error] [pid 1018003:tid 1018239] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.224472 2026] [security2:error] [pid 1028675:tid 1028935] [client 4.205.62.107:55964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/infos.php"] [unique_id "apK9StdHPfW2QFvhmL7NDwAAAH0"]
[Sat Aug 29 05:06:50.235682 2026] [core:error] [pid 1018003:tid 1018218] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.235700 2026] [core:error] [pid 1018003:tid 1018218] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.236439 2026] [security2:error] [pid 1028675:tid 1028839] [client 168.107.94.195:60973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9StdHPfW2QFvhmL7NEAAAAB0"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:50.238241 2026] [security2:error] [pid 1028675:tid 1028854] [client 20.48.250.41:21333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/shlo.php"] [unique_id "apK9StdHPfW2QFvhmL7NEgAAACw"]
[Sat Aug 29 05:06:50.239330 2026] [security2:error] [pid 1028675:tid 1028903] [client 68.155.159.216:6106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-admin/about.php"] [unique_id "apK9StdHPfW2QFvhmL7NEwAAAF0"]
[Sat Aug 29 05:06:50.239382 2026] [core:error] [pid 1028675:tid 1028902] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.239395 2026] [core:error] [pid 1028675:tid 1028902] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.246932 2026] [core:error] [pid 1028675:tid 1028834] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.246946 2026] [core:error] [pid 1028675:tid 1028834] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.248303 2026] [core:error] [pid 1028675:tid 1028851] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.248317 2026] [core:error] [pid 1028675:tid 1028851] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.251522 2026] [core:error] [pid 1018003:tid 1018062] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.251541 2026] [core:error] [pid 1018003:tid 1018062] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.254230 2026] [security2:error] [pid 1028675:tid 1028909] [client 40.83.93.50:13765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/meta.php"] [unique_id "apK9StdHPfW2QFvhmL7NFwAAAGM"]
[Sat Aug 29 05:06:50.260103 2026] [core:error] [pid 1028675:tid 1028884] [client 45.148.10.62:49776] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.265930 2026] [security2:error] [pid 1028675:tid 1028816] [client 20.104.104.62:27039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ngoiloi.nlvn.net"] [uri "/term.php"] [unique_id "apK9StdHPfW2QFvhmL7NGgAAAAY"]
[Sat Aug 29 05:06:50.280190 2026] [security2:error] [pid 1018003:tid 1018238] [client 20.104.18.15:36546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/wp.php"] [unique_id "apK9SjAh5Y1i2tUxg4EDJgAABg4"]
[Sat Aug 29 05:06:50.283059 2026] [security2:error] [pid 1028675:tid 1028867] [client 20.220.204.93:52267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/xsox.php"] [unique_id "apK9StdHPfW2QFvhmL7NHAAAADk"]
[Sat Aug 29 05:06:50.293738 2026] [security2:error] [pid 1018003:tid 1018271] [client 20.104.18.15:13632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/sf.php"] [unique_id "apK9SjAh5Y1i2tUxg4EDKAAABi8"]
[Sat Aug 29 05:06:50.302757 2026] [security2:error] [pid 1018003:tid 1018061] [remote 66.116.199.98:36060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.199.116.66.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.jarritosmexicanos.mx"] [uri "/wp-login.php"] [unique_id "apK9SjAh5Y1i2tUxg4EDJwAFuSg"]
[Sat Aug 29 05:06:50.305280 2026] [core:error] [pid 1028675:tid 1028898] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.305295 2026] [core:error] [pid 1028675:tid 1028898] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.307705 2026] [core:error] [pid 1018003:tid 1018222] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.307719 2026] [core:error] [pid 1018003:tid 1018222] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.311762 2026] [security2:error] [pid 1018003:tid 1018184] [client 20.104.49.130:36090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.danesquality.com"] [uri "/ioxi-o.php"] [unique_id "apK9SjAh5Y1i2tUxg4EDKgAABdk"]
[Sat Aug 29 05:06:50.313309 2026] [security2:error] [pid 1028675:tid 1028871] [client 20.104.104.62:28800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.watercolorsbylola.allgooddays.org"] [uri "/ms.php"] [unique_id "apK9StdHPfW2QFvhmL7NHwAAAD0"]
[Sat Aug 29 05:06:50.314224 2026] [core:error] [pid 1028675:tid 1028929] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.314237 2026] [core:error] [pid 1028675:tid 1028929] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.318034 2026] [security2:error] [pid 1028675:tid 1028870] [client 158.23.184.117:34510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/load.php"] [unique_id "apK9StdHPfW2QFvhmL7NIQAAADw"]
[Sat Aug 29 05:06:50.336195 2026] [security2:error] [pid 1018003:tid 1018057] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/laravel/.env"] [unique_id "apK9SjAh5Y1i2tUxg4EDLwAFxCQ"]
[Sat Aug 29 05:06:50.356625 2026] [core:error] [pid 1028675:tid 1028843] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.356644 2026] [core:error] [pid 1028675:tid 1028843] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.356819 2026] [core:error] [pid 1018003:tid 1018195] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.356826 2026] [core:error] [pid 1018003:tid 1018195] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.375000 2026] [security2:error] [pid 1018003:tid 1018050] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/lms/.env"] [unique_id "apK9SjAh5Y1i2tUxg4EDMgAFxB0"]
[Sat Aug 29 05:06:50.377403 2026] [security2:error] [pid 1018003:tid 1018072] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/local/.env"] [unique_id "apK9SjAh5Y1i2tUxg4EDNAAFxDM"]
[Sat Aug 29 05:06:50.384919 2026] [security2:error] [pid 1018003:tid 1018236] [client 20.196.209.81:9435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/disagraeed.php"] [unique_id "apK9SjAh5Y1i2tUxg4EDNgAABgw"]
[Sat Aug 29 05:06:50.388472 2026] [security2:error] [pid 1018003:tid 1018213] [client 20.48.250.41:21491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/asax.php"] [unique_id "apK9SjAh5Y1i2tUxg4EDNwAABfY"]
[Sat Aug 29 05:06:50.392673 2026] [core:error] [pid 1028675:tid 1028873] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.392690 2026] [core:error] [pid 1028675:tid 1028873] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.394406 2026] [security2:error] [pid 1028675:tid 1028930] [client 158.23.184.117:19354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/.well-known/pki-validation/xmrlpc.php"] [unique_id "apK9StdHPfW2QFvhmL7NKAAAAHg"]
[Sat Aug 29 05:06:50.395286 2026] [security2:error] [pid 1028675:tid 1028810] [client 158.23.184.117:47005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dontbenicemovie.wanderlustpictures.com"] [uri "/goods.php"] [unique_id "apK9StdHPfW2QFvhmL7NKQAAAAA"]
[Sat Aug 29 05:06:50.402334 2026] [core:error] [pid 1018003:tid 1018177] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.402350 2026] [core:error] [pid 1018003:tid 1018177] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.403177 2026] [security2:error] [pid 1028675:tid 1028908] [client 158.23.147.79:61590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-includes/css/index.php"] [unique_id "apK9StdHPfW2QFvhmL7NKwAAAGI"]
[Sat Aug 29 05:06:50.409151 2026] [core:error] [pid 1018003:tid 1018200] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.409169 2026] [core:error] [pid 1018003:tid 1018200] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.416593 2026] [core:error] [pid 1028675:tid 1028900] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.416608 2026] [core:error] [pid 1028675:tid 1028900] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.420967 2026] [core:error] [pid 1028675:tid 1028872] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.420980 2026] [core:error] [pid 1028675:tid 1028872] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.426046 2026] [security2:error] [pid 1018003:tid 1018088] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/market/.env"] [unique_id "apK9SjAh5Y1i2tUxg4EDPgAFwUM"]
[Sat Aug 29 05:06:50.430649 2026] [security2:error] [pid 1018003:tid 1018234] [client 20.104.18.15:36856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/abcd.php"] [unique_id "apK9SjAh5Y1i2tUxg4EDPwAABgo"]
[Sat Aug 29 05:06:50.434160 2026] [security2:error] [pid 1018003:tid 1018085] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/marketing/.env"] [unique_id "apK9SjAh5Y1i2tUxg4EDQAAF9UA"]
[Sat Aug 29 05:06:50.445076 2026] [security2:error] [pid 1028675:tid 1028883] [client 20.104.104.62:64647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/Contrller.php"] [unique_id "apK9StdHPfW2QFvhmL7NLgAAAEk"]
[Sat Aug 29 05:06:50.455586 2026] [autoindex:error] [pid 1018003:tid 1018192] [client 147.185.132.39:60412] AH01276: Cannot serve directory /home3/rwnbzvmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:06:50.462893 2026] [security2:error] [pid 1018003:tid 1018226] [client 20.104.104.62:27022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ngoiloi.nlvn.net"] [uri "/wp.php"] [unique_id "apK9SjAh5Y1i2tUxg4EDRAAABgM"]
[Sat Aug 29 05:06:50.467545 2026] [security2:error] [pid 1018003:tid 1018202] [client 20.220.204.93:59074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/lkui.php"] [unique_id "apK9SjAh5Y1i2tUxg4EDRQAABes"]
[Sat Aug 29 05:06:50.479932 2026] [security2:error] [pid 1028675:tid 1028923] [client 20.104.104.62:64759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/meiwei.php"] [unique_id "apK9StdHPfW2QFvhmL7NMQAAAHE"]
[Sat Aug 29 05:06:50.481091 2026] [security2:error] [pid 1018003:tid 1018049] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/media/.env"] [unique_id "apK9SjAh5Y1i2tUxg4EDRgAGIhw"]
[Sat Aug 29 05:06:50.485501 2026] [core:error] [pid 1028675:tid 1028926] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.485517 2026] [core:error] [pid 1028675:tid 1028926] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.494636 2026] [security2:error] [pid 1028675:tid 1028812] [client 20.104.104.62:52060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/sao.php"] [unique_id "apK9StdHPfW2QFvhmL7NNQAAAAI"]
[Sat Aug 29 05:06:50.506748 2026] [security2:error] [pid 1018003:tid 1018055] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/new/.env"] [unique_id "apK9SjAh5Y1i2tUxg4EDTQAGIiI"]
[Sat Aug 29 05:06:50.514621 2026] [security2:error] [pid 1018003:tid 1018190] [client 4.205.62.107:53356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/aws_credentials.php"] [unique_id "apK9SjAh5Y1i2tUxg4EDTwAABd8"]
[Sat Aug 29 05:06:50.515103 2026] [core:error] [pid 1028675:tid 1028855] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.515113 2026] [core:error] [pid 1028675:tid 1028855] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.515145 2026] [core:error] [pid 1018003:tid 1018170] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.515154 2026] [core:error] [pid 1018003:tid 1018170] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.524010 2026] [security2:error] [pid 1018003:tid 1018070] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/node-api/.env"] [unique_id "apK9SjAh5Y1i2tUxg4EDUAAGIjE"]
[Sat Aug 29 05:06:50.525578 2026] [core:error] [pid 1018003:tid 1018266] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.525593 2026] [core:error] [pid 1018003:tid 1018266] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.538216 2026] [security2:error] [pid 1028675:tid 1028914] [client 158.23.184.117:33930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/manager.php"] [unique_id "apK9StdHPfW2QFvhmL7NOAAAAGg"]
[Sat Aug 29 05:06:50.541005 2026] [security2:error] [pid 1018003:tid 1018167] [client 158.23.184.117:62287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dontbenicemovie.wanderlustpictures.com"] [uri "/w.php"] [unique_id "apK9SjAh5Y1i2tUxg4EDUwAABcg"]
[Sat Aug 29 05:06:50.541298 2026] [security2:error] [pid 1018003:tid 1018275] [client 158.23.184.117:19264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/.well-known/security.php"] [unique_id "apK9SjAh5Y1i2tUxg4EDVAAABjM"]
[Sat Aug 29 05:06:50.542706 2026] [security2:error] [pid 1018003:tid 1018196] [client 158.23.147.79:17456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/file.php"] [unique_id "apK9SjAh5Y1i2tUxg4EDVgAABeU"]
[Sat Aug 29 05:06:50.542926 2026] [security2:error] [pid 1018003:tid 1018059] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/node/.env"] [unique_id "apK9SjAh5Y1i2tUxg4EDVQAFyCY"]
[Sat Aug 29 05:06:50.543649 2026] [security2:error] [pid 1018003:tid 1018079] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/node/api/.env"] [unique_id "apK9SjAh5Y1i2tUxg4EDVwAFyDo"]
[Sat Aug 29 05:06:50.552703 2026] [security2:error] [pid 1018003:tid 1018112] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/node/backend/.env"] [unique_id "apK9SjAh5Y1i2tUxg4EDWAAF71s"]
[Sat Aug 29 05:06:50.558378 2026] [security2:error] [pid 1018003:tid 1018053] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/nodeapi/.env"] [unique_id "apK9SjAh5Y1i2tUxg4EDWQAF-iA"]
[Sat Aug 29 05:06:50.558776 2026] [security2:error] [pid 1028675:tid 1028922] [client 20.197.61.180:7872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/backup.php"] [unique_id "apK9StdHPfW2QFvhmL7NOQAAAHA"]
[Sat Aug 29 05:06:50.563379 2026] [security2:error] [pid 1018003:tid 1018063] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/nodeweb/.env"] [unique_id "apK9SjAh5Y1i2tUxg4EDWgAF2yo"]
[Sat Aug 29 05:06:50.567932 2026] [security2:error] [pid 1028675:tid 1028927] [client 68.155.159.216:18431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK9StdHPfW2QFvhmL7NOwAAAHU"]
[Sat Aug 29 05:06:50.571188 2026] [security2:error] [pid 1018003:tid 1018273] [client 20.48.250.41:21388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/fetch.php"] [unique_id "apK9SjAh5Y1i2tUxg4EDXQAABjE"]
[Sat Aug 29 05:06:50.577741 2026] [security2:error] [pid 1018003:tid 1018091] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/old/.env"] [unique_id "apK9SjAh5Y1i2tUxg4EDYQAGLkY"]
[Sat Aug 29 05:06:50.577810 2026] [security2:error] [pid 1028675:tid 1028818] [client 20.104.104.62:28819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.watercolorsbylola.allgooddays.org"] [uri "/adminfuns.php"] [unique_id "apK9StdHPfW2QFvhmL7NPQAAAAg"]
[Sat Aug 29 05:06:50.582552 2026] [security2:error] [pid 1028675:tid 1028824] [client 20.104.104.62:5087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/Zeiss.php"] [unique_id "apK9StdHPfW2QFvhmL7NPwAAAA4"]
[Sat Aug 29 05:06:50.582573 2026] [security2:error] [pid 1028675:tid 1028827] [client 158.23.147.79:24434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/worksec.php"] [unique_id "apK9StdHPfW2QFvhmL7NPgAAABE"]
[Sat Aug 29 05:06:50.592306 2026] [security2:error] [pid 1028675:tid 1028860] [client 20.151.200.44:47415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/k8.php"] [unique_id "apK9StdHPfW2QFvhmL7NQAAAADI"]
[Sat Aug 29 05:06:50.599917 2026] [core:error] [pid 1018003:tid 1018221] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.599932 2026] [core:error] [pid 1018003:tid 1018221] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.600277 2026] [core:error] [pid 1018003:tid 1018216] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.600289 2026] [core:error] [pid 1018003:tid 1018216] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.601642 2026] [core:error] [pid 1018003:tid 1018238] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.601654 2026] [core:error] [pid 1018003:tid 1018238] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.605651 2026] [security2:error] [pid 1028675:tid 1028847] [client 20.52.41.200:1783] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpsl-ggc.org"] [uri "/1.php7"] [unique_id "apK9StdHPfW2QFvhmL7NQQAAACU"]
[Sat Aug 29 05:06:50.605733 2026] [security2:error] [pid 1028675:tid 1028847] [client 20.52.41.200:1783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/1.php7"] [unique_id "apK9StdHPfW2QFvhmL7NQQAAACU"]
[Sat Aug 29 05:06:50.607002 2026] [security2:error] [pid 1018003:tid 1018188] [client 4.205.62.107:22337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/ah25.php"] [unique_id "apK9SjAh5Y1i2tUxg4EDZQAABd0"]
[Sat Aug 29 05:06:50.617373 2026] [security2:error] [pid 1028675:tid 1028920] [client 158.158.54.35:29674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/core.php"] [unique_id "apK9StdHPfW2QFvhmL7NQgAAAG4"]
[Sat Aug 29 05:06:50.629835 2026] [security2:error] [pid 1018003:tid 1018195] [client 20.104.104.62:42673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/uuu.php"] [unique_id "apK9SjAh5Y1i2tUxg4EDZgAABeQ"]
[Sat Aug 29 05:06:50.632384 2026] [security2:error] [pid 1018003:tid 1018162] [client 68.155.159.216:65074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/file17.php"] [unique_id "apK9SjAh5Y1i2tUxg4EDZwAABcM"]
[Sat Aug 29 05:06:50.645417 2026] [security2:error] [pid 1018003:tid 1018267] [client 20.220.204.93:50794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "apK9SjAh5Y1i2tUxg4EDaAAABis"]
[Sat Aug 29 05:06:50.655205 2026] [security2:error] [pid 1028675:tid 1028849] [client 158.23.147.79:26531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/ws.php"] [unique_id "apK9StdHPfW2QFvhmL7NQwAAACc"]
[Sat Aug 29 05:06:50.656113 2026] [security2:error] [pid 1028675:tid 1028844] [client 20.104.104.62:27034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ngoiloi.nlvn.net"] [uri "/ioxi-o.php"] [unique_id "apK9StdHPfW2QFvhmL7NRAAAACI"]
[Sat Aug 29 05:06:50.662206 2026] [security2:error] [pid 1018003:tid 1018256] [client 158.23.147.79:50048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/chosen.php"] [unique_id "apK9SjAh5Y1i2tUxg4EDaQAABiA"]
[Sat Aug 29 05:06:50.668633 2026] [security2:error] [pid 1018003:tid 1018233] [client 168.107.94.195:61260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9SjAh5Y1i2tUxg4EDagAABgk"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:50.670574 2026] [security2:error] [pid 1018003:tid 1018096] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/opt/.env"] [unique_id "apK9SjAh5Y1i2tUxg4EDawAF2Es"]
[Sat Aug 29 05:06:50.687096 2026] [security2:error] [pid 1018003:tid 1018262] [client 158.23.184.117:62290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dontbenicemovie.wanderlustpictures.com"] [uri "/new.php"] [unique_id "apK9SjAh5Y1i2tUxg4EDcwAABiY"]
[Sat Aug 29 05:06:50.689543 2026] [security2:error] [pid 1028675:tid 1028917] [client 158.23.184.117:19348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/.well-known/system.php"] [unique_id "apK9StdHPfW2QFvhmL7NRgAAAGs"]
[Sat Aug 29 05:06:50.697034 2026] [core:error] [pid 1028675:tid 1028934] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.697052 2026] [core:error] [pid 1028675:tid 1028934] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.699818 2026] [core:error] [pid 1028675:tid 1028903] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.699837 2026] [core:error] [pid 1028675:tid 1028903] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.700051 2026] [core:error] [pid 1018003:tid 1018200] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.700073 2026] [core:error] [pid 1018003:tid 1018200] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.700600 2026] [core:error] [pid 1018003:tid 1018277] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.700608 2026] [core:error] [pid 1018003:tid 1018277] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.705486 2026] [security2:error] [pid 1028675:tid 1028839] [client 158.23.184.117:33937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/media.php"] [unique_id "apK9StdHPfW2QFvhmL7NSwAAAB0"]
[Sat Aug 29 05:06:50.717274 2026] [core:error] [pid 1018003:tid 1018226] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.717296 2026] [core:error] [pid 1018003:tid 1018226] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.717805 2026] [security2:error] [pid 1028675:tid 1028834] [client 20.104.104.62:4135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/ww2.php"] [unique_id "apK9StdHPfW2QFvhmL7NTgAAABg"]
[Sat Aug 29 05:06:50.720372 2026] [security2:error] [pid 1028675:tid 1028884] [client 158.23.147.79:59200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK9StdHPfW2QFvhmL7NUAAAAEo"]
[Sat Aug 29 05:06:50.722726 2026] [core:error] [pid 1018003:tid 1018202] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.722739 2026] [core:error] [pid 1018003:tid 1018202] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.723948 2026] [security2:error] [pid 1028675:tid 1028828] [client 68.155.159.216:33665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK9StdHPfW2QFvhmL7NUQAAABI"]
[Sat Aug 29 05:06:50.732794 2026] [core:error] [pid 1028675:tid 1028853] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.732812 2026] [core:error] [pid 1028675:tid 1028853] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.733165 2026] [security2:error] [pid 1028675:tid 1028895] [client 20.48.250.41:21437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/vx.php"] [unique_id "apK9StdHPfW2QFvhmL7NVQAAAFU"]
[Sat Aug 29 05:06:50.735029 2026] [core:error] [pid 1018003:tid 1018190] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.735044 2026] [core:error] [pid 1018003:tid 1018190] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.738735 2026] [core:error] [pid 1018003:tid 1018170] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.738750 2026] [core:error] [pid 1018003:tid 1018170] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.741281 2026] [core:error] [pid 1028675:tid 1028867] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.741300 2026] [core:error] [pid 1028675:tid 1028867] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.744657 2026] [core:error] [pid 1028675:tid 1028868] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.744674 2026] [core:error] [pid 1028675:tid 1028868] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.770961 2026] [security2:error] [pid 1028675:tid 1028813] [client 20.104.104.62:29199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.watercolorsbylola.allgooddays.org"] [uri "/wp-content/about.php"] [unique_id "apK9StdHPfW2QFvhmL7NWQAAAAM"]
[Sat Aug 29 05:06:50.780581 2026] [core:error] [pid 1028675:tid 1028821] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.780599 2026] [core:error] [pid 1028675:tid 1028821] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.790348 2026] [security2:error] [pid 1028675:tid 1028832] [client 40.83.93.50:7693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/randkeyword.php"] [unique_id "apK9StdHPfW2QFvhmL7NXAAAABY"]
[Sat Aug 29 05:06:50.803616 2026] [security2:error] [pid 1028675:tid 1028810] [client 20.220.204.93:52252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/motu.php"] [unique_id "apK9StdHPfW2QFvhmL7NXwAAAAA"]
[Sat Aug 29 05:06:50.812777 2026] [security2:error] [pid 1028675:tid 1028840] [client 158.23.147.79:30558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK9StdHPfW2QFvhmL7NYQAAAB4"]
[Sat Aug 29 05:06:50.815139 2026] [core:error] [pid 1028675:tid 1028887] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.815154 2026] [core:error] [pid 1028675:tid 1028887] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.815964 2026] [core:error] [pid 1018003:tid 1018174] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.815979 2026] [core:error] [pid 1018003:tid 1018174] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.819255 2026] [core:error] [pid 1028675:tid 1028908] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.819271 2026] [core:error] [pid 1028675:tid 1028908] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.829191 2026] [security2:error] [pid 1018003:tid 1018206] [client 20.104.104.62:40202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/fonts/priv8.php"] [unique_id "apK9SjAh5Y1i2tUxg4EDiwAABe8"]
[Sat Aug 29 05:06:50.833170 2026] [security2:error] [pid 1028675:tid 1028843] [client 158.23.184.117:57107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dontbenicemovie.wanderlustpictures.com"] [uri "/php8.php"] [unique_id "apK9StdHPfW2QFvhmL7NZgAAACE"]
[Sat Aug 29 05:06:50.833605 2026] [security2:error] [pid 1028675:tid 1028886] [client 158.23.184.117:19380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/.well-known/users.php"] [unique_id "apK9StdHPfW2QFvhmL7NZwAAAEw"]
[Sat Aug 29 05:06:50.839801 2026] [security2:error] [pid 1028675:tid 1028894] [client 68.155.159.216:30604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/file5.php"] [unique_id "apK9StdHPfW2QFvhmL7NaAAAAFQ"]
[Sat Aug 29 05:06:50.849268 2026] [core:error] [pid 1018003:tid 1018093] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.849281 2026] [core:error] [pid 1018003:tid 1018093] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.849288 2026] [security2:error] [pid 1028675:tid 1028877] [client 158.23.184.117:33943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/mar.php"] [unique_id "apK9StdHPfW2QFvhmL7NagAAAEM"]
[Sat Aug 29 05:06:50.850753 2026] [security2:error] [pid 1028675:tid 1028892] [client 20.104.104.62:23408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/private.php"] [unique_id "apK9StdHPfW2QFvhmL7NbAAAAFI"]
[Sat Aug 29 05:06:50.857441 2026] [security2:error] [pid 1028675:tid 1028872] [client 20.104.104.62:43031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/anz.php"] [unique_id "apK9StdHPfW2QFvhmL7NbwAAAD4"]
[Sat Aug 29 05:06:50.876129 2026] [security2:error] [pid 1028675:tid 1028883] [client 20.48.250.41:21503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/global.php"] [unique_id "apK9StdHPfW2QFvhmL7NcAAAAEk"]
[Sat Aug 29 05:06:50.878677 2026] [security2:error] [pid 1018003:tid 1018218] [client 4.205.62.107:22236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/BDKR28WP.php"] [unique_id "apK9SjAh5Y1i2tUxg4EDkgAABfs"]
[Sat Aug 29 05:06:50.885627 2026] [core:error] [pid 1028675:tid 1028837] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.885645 2026] [core:error] [pid 1028675:tid 1028837] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.886624 2026] [core:error] [pid 1018003:tid 1018164] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.886639 2026] [core:error] [pid 1018003:tid 1018164] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.892004 2026] [core:error] [pid 1018003:tid 1018106] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.892018 2026] [core:error] [pid 1018003:tid 1018106] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.892645 2026] [security2:error] [pid 1018003:tid 1018175] [client 4.205.62.107:65435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/sgd.php"] [unique_id "apK9SjAh5Y1i2tUxg4EDmgAABdA"]
[Sat Aug 29 05:06:50.893292 2026] [core:error] [pid 1028675:tid 1028921] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.893302 2026] [core:error] [pid 1028675:tid 1028921] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.913439 2026] [core:error] [pid 1028675:tid 1028914] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.913468 2026] [core:error] [pid 1028675:tid 1028914] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.922076 2026] [security2:error] [pid 1018003:tid 1018116] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/portal/.env"] [unique_id "apK9SjAh5Y1i2tUxg4EDoAAFul8"]
[Sat Aug 29 05:06:50.922467 2026] [core:error] [pid 1018003:tid 1018172] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.922487 2026] [core:error] [pid 1018003:tid 1018172] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.922779 2026] [core:error] [pid 1018003:tid 1018184] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.922792 2026] [core:error] [pid 1018003:tid 1018184] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.925933 2026] [security2:error] [pid 1028675:tid 1028829] [client 20.104.104.62:27062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ngoiloi.nlvn.net"] [uri "/system_core.php"] [unique_id "apK9StdHPfW2QFvhmL7NdgAAABM"]
[Sat Aug 29 05:06:50.929462 2026] [core:error] [pid 1018003:tid 1018268] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.929479 2026] [core:error] [pid 1018003:tid 1018268] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.936072 2026] [security2:error] [pid 1028675:tid 1028878] [client 20.196.209.81:9522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/add_actualites.php"] [unique_id "apK9StdHPfW2QFvhmL7NdwAAAEQ"]
[Sat Aug 29 05:06:50.944267 2026] [core:error] [pid 1028675:tid 1028824] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.944288 2026] [core:error] [pid 1028675:tid 1028824] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.946155 2026] [security2:error] [pid 1028675:tid 1028831] [client 20.220.204.93:52284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/Ov-Simple1.php"] [unique_id "apK9StdHPfW2QFvhmL7NegAAABU"]
[Sat Aug 29 05:06:50.946193 2026] [security2:error] [pid 1018003:tid 1018177] [client 4.205.62.107:22490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/broadcasting.php"] [unique_id "apK9SjAh5Y1i2tUxg4EDowAABdI"]
[Sat Aug 29 05:06:50.965742 2026] [security2:error] [pid 1028675:tid 1028852] [client 20.104.104.62:29200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.watercolorsbylola.allgooddays.org"] [uri "/66.php"] [unique_id "apK9StdHPfW2QFvhmL7NgQAAACo"]
[Sat Aug 29 05:06:50.965785 2026] [security2:error] [pid 1028675:tid 1028684] [remote 31.13.127.112:64462] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.jobindjibouti.com"] [uri "/wp-content/uploads/2017/08/Logo-couleur-e1596529147682.png"] [unique_id "apK9StdHPfW2QFvhmL7NfwAABQQ"]
[Sat Aug 29 05:06:50.969684 2026] [core:error] [pid 1018003:tid 1018203] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.969698 2026] [core:error] [pid 1018003:tid 1018203] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.973147 2026] [core:error] [pid 1028675:tid 1028917] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.973159 2026] [core:error] [pid 1028675:tid 1028917] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.975144 2026] [core:error] [pid 1018003:tid 1018138] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.975156 2026] [core:error] [pid 1018003:tid 1018138] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:50.975711 2026] [security2:error] [pid 1018003:tid 1018126] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/prod/.env"] [unique_id "apK9SjAh5Y1i2tUxg4EDqgAFumk"]
[Sat Aug 29 05:06:50.984274 2026] [security2:error] [pid 1018003:tid 1018256] [client 158.23.184.117:19378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/.well-known/wp-blog-header.php"] [unique_id "apK9SjAh5Y1i2tUxg4EDqwAABiA"]
[Sat Aug 29 05:06:50.987199 2026] [security2:error] [pid 1018003:tid 1018230] [client 158.23.184.117:62300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dontbenicemovie.wanderlustpictures.com"] [uri "/wp-content/themes/admin.php"] [unique_id "apK9SjAh5Y1i2tUxg4EDrAAABgY"]
[Sat Aug 29 05:06:50.994383 2026] [security2:error] [pid 1018003:tid 1018121] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/product/.env"] [unique_id "apK9SjAh5Y1i2tUxg4EDrQAFwWQ"]
[Sat Aug 29 05:06:50.995832 2026] [security2:error] [pid 1028675:tid 1028911] [client 158.23.184.117:34736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/my1.php"] [unique_id "apK9StdHPfW2QFvhmL7NhAAAAGU"]
[Sat Aug 29 05:06:51.013951 2026] [security2:error] [pid 1028675:tid 1028828] [client 158.23.184.117:46920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "diamondswindowtinting.enproftp.com"] [uri "/wk/admin.php"] [unique_id "apK9S9dHPfW2QFvhmL7NhQAAABI"]
[Sat Aug 29 05:06:51.015262 2026] [security2:error] [pid 1028675:tid 1028876] [client 158.23.147.79:32760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9S9dHPfW2QFvhmL7NhgAAAEI"]
[Sat Aug 29 05:06:51.023884 2026] [security2:error] [pid 1018003:tid 1018157] [client 20.104.104.62:64696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/bge.php"] [unique_id "apK9SzAh5Y1i2tUxg4EDrwAABb4"]
[Sat Aug 29 05:06:51.033268 2026] [security2:error] [pid 1028675:tid 1028819] [client 20.48.250.41:21377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/fs.php"] [unique_id "apK9S9dHPfW2QFvhmL7NiQAAAAk"]
[Sat Aug 29 05:06:51.037902 2026] [security2:error] [pid 1018003:tid 1018132] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/production/.env"] [unique_id "apK9SzAh5Y1i2tUxg4EDsAAGKW8"]
[Sat Aug 29 05:06:51.038265 2026] [security2:error] [pid 1028675:tid 1028817] [client 68.155.159.216:50195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK9S9dHPfW2QFvhmL7NigAAAAc"]
[Sat Aug 29 05:06:51.047838 2026] [security2:error] [pid 1028675:tid 1028880] [client 20.52.41.200:1255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/disagraeosc.php"] [unique_id "apK9S9dHPfW2QFvhmL7NiwAAAEY"]
[Sat Aug 29 05:06:51.048885 2026] [security2:error] [pid 1028675:tid 1028851] [client 168.107.94.195:61618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9S9dHPfW2QFvhmL7NjQAAACk"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:51.053101 2026] [core:error] [pid 1018003:tid 1018217] [client 45.148.10.62:49786] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.054860 2026] [security2:error] [pid 1018003:tid 1018027] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/project/.env"] [unique_id "apK9SzAh5Y1i2tUxg4EDtAAF3wY"]
[Sat Aug 29 05:06:51.062582 2026] [security2:error] [pid 1028675:tid 1028882] [client 68.155.159.216:52821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/hehehehe.php"] [unique_id "apK9S9dHPfW2QFvhmL7NjgAAAEg"]
[Sat Aug 29 05:06:51.068793 2026] [security2:error] [pid 1028675:tid 1028929] [client 20.104.104.62:60422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/lfi.php"] [unique_id "apK9S9dHPfW2QFvhmL7NjwAAAHc"]
[Sat Aug 29 05:06:51.071706 2026] [security2:error] [pid 1028675:tid 1028902] [client 52.139.37.240:61659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxbible.org"] [uri "/wp-2019.php"] [unique_id "apK9S9dHPfW2QFvhmL7NkQAAAFw"]
[Sat Aug 29 05:06:51.074536 2026] [security2:error] [pid 1018003:tid 1018117] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/public-api/.env"] [unique_id "apK9SzAh5Y1i2tUxg4EDuAAF32A"]
[Sat Aug 29 05:06:51.078795 2026] [security2:error] [pid 1028675:tid 1028913] [client 68.155.159.216:51303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK9S9dHPfW2QFvhmL7NkgAAAGc"]
[Sat Aug 29 05:06:51.085586 2026] [core:error] [pid 1028675:tid 1028813] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.085604 2026] [core:error] [pid 1028675:tid 1028813] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.086669 2026] [core:error] [pid 1018003:tid 1018170] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.086685 2026] [core:error] [pid 1018003:tid 1018170] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.087542 2026] [core:error] [pid 1018003:tid 1018139] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.087557 2026] [core:error] [pid 1018003:tid 1018139] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.089016 2026] [security2:error] [pid 1018003:tid 1018244] [client 158.158.54.35:8734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/admin/function.php"] [unique_id "apK9SzAh5Y1i2tUxg4EDvQAABhQ"]
[Sat Aug 29 05:06:51.092318 2026] [security2:error] [pid 1018003:tid 1018073] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/public/.env"] [unique_id "apK9SzAh5Y1i2tUxg4EDvgAF3zQ"]
[Sat Aug 29 05:06:51.092949 2026] [security2:error] [pid 1018003:tid 1018226] [client 52.139.37.240:31123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/mah.php"] [unique_id "apK9SzAh5Y1i2tUxg4EDvwAABgM"]
[Sat Aug 29 05:06:51.102111 2026] [security2:error] [pid 1028675:tid 1028856] [client 52.139.37.240:32731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/an.php"] [unique_id "apK9S9dHPfW2QFvhmL7NlwAAAC4"]
[Sat Aug 29 05:06:51.103302 2026] [security2:error] [pid 1028675:tid 1028833] [client 52.139.37.240:20767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/wp-update.php"] [unique_id "apK9S9dHPfW2QFvhmL7NmAAAABc"]
[Sat Aug 29 05:06:51.113817 2026] [security2:error] [pid 1018003:tid 1018144] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/public_html/.env"] [unique_id "apK9SzAh5Y1i2tUxg4EDwQAF33s"]
[Sat Aug 29 05:06:51.114683 2026] [core:error] [pid 1018003:tid 1018243] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.114695 2026] [core:error] [pid 1018003:tid 1018243] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.124329 2026] [core:error] [pid 1028675:tid 1028912] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.124345 2026] [core:error] [pid 1028675:tid 1028912] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.127348 2026] [security2:error] [pid 1028675:tid 1028862] [client 158.23.184.117:19372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/.well-known/wp-links-opml.php"] [unique_id "apK9S9dHPfW2QFvhmL7NmgAAADQ"]
[Sat Aug 29 05:06:51.130087 2026] [security2:error] [pid 1018003:tid 1018107] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/qa/.env"] [unique_id "apK9SzAh5Y1i2tUxg4EDxQAF31Y"]
[Sat Aug 29 05:06:51.133295 2026] [security2:error] [pid 1018003:tid 1018169] [client 158.23.184.117:46984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dontbenicemovie.wanderlustpictures.com"] [uri "/txets.php"] [unique_id "apK9SzAh5Y1i2tUxg4EDyQAABco"]
[Sat Aug 29 05:06:51.156770 2026] [security2:error] [pid 1028675:tid 1028811] [client 20.104.104.62:43019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/wp-ana.php"] [unique_id "apK9S9dHPfW2QFvhmL7NoQAAAAE"]
[Sat Aug 29 05:06:51.158821 2026] [security2:error] [pid 1028675:tid 1028825] [client 20.104.104.62:29207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.watercolorsbylola.allgooddays.org"] [uri "/elp.php"] [unique_id "apK9S9dHPfW2QFvhmL7NogAAAA8"]
[Sat Aug 29 05:06:51.159370 2026] [core:error] [pid 1028675:tid 1028872] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.159390 2026] [core:error] [pid 1028675:tid 1028872] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.159453 2026] [core:error] [pid 1028675:tid 1028899] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.159464 2026] [core:error] [pid 1028675:tid 1028899] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.159806 2026] [security2:error] [pid 1028675:tid 1028810] [client 158.23.184.117:33924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/mm.php"] [unique_id "apK9S9dHPfW2QFvhmL7NowAAAAA"]
[Sat Aug 29 05:06:51.161158 2026] [security2:error] [pid 1018003:tid 1018196] [client 158.23.184.117:46359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "diamondswindowtinting.enproftp.com"] [uri "/admin.php"] [unique_id "apK9SzAh5Y1i2tUxg4EDywAABeU"]
[Sat Aug 29 05:06:51.166005 2026] [security2:error] [pid 1028675:tid 1028883] [client 20.104.104.62:20724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/vendor/priv8.php"] [unique_id "apK9S9dHPfW2QFvhmL7NpQAAAEk"]
[Sat Aug 29 05:06:51.166231 2026] [security2:error] [pid 1018003:tid 1018275] [client 20.220.204.93:52338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/wp-blogs.php"] [unique_id "apK9SzAh5Y1i2tUxg4EDzQAABjM"]
[Sat Aug 29 05:06:51.171510 2026] [core:error] [pid 1018003:tid 1018258] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.171529 2026] [core:error] [pid 1018003:tid 1018258] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.171574 2026] [core:error] [pid 1018003:tid 1018206] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.171583 2026] [core:error] [pid 1018003:tid 1018206] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.171630 2026] [core:error] [pid 1018003:tid 1018186] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.171639 2026] [core:error] [pid 1018003:tid 1018186] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.173752 2026] [security2:error] [pid 1028675:tid 1028905] [client 158.23.147.79:25548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-content/index.php"] [unique_id "apK9S9dHPfW2QFvhmL7NpgAAAF8"]
[Sat Aug 29 05:06:51.174730 2026] [security2:error] [pid 1028675:tid 1028932] [client 68.155.159.216:49278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK9S9dHPfW2QFvhmL7NpwAAAHo"]
[Sat Aug 29 05:06:51.179310 2026] [security2:error] [pid 1028675:tid 1028936] [client 20.151.200.44:47363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/alog.php"] [unique_id "apK9S9dHPfW2QFvhmL7NqAAAAH4"]
[Sat Aug 29 05:06:51.187479 2026] [security2:error] [pid 1028675:tid 1028908] [client 52.139.37.240:9114] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.drjrae.com"] [uri "/c99.php"] [unique_id "apK9S9dHPfW2QFvhmL7NqgAAAGI"]
[Sat Aug 29 05:06:51.191382 2026] [security2:error] [pid 1018003:tid 1018184] [client 20.104.104.62:27045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ngoiloi.nlvn.net"] [uri "/goods.php"] [unique_id "apK9SzAh5Y1i2tUxg4ED0gAABdk"]
[Sat Aug 29 05:06:51.196664 2026] [security2:error] [pid 1028675:tid 1028916] [client 20.48.250.41:21479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/ioxi.php"] [unique_id "apK9S9dHPfW2QFvhmL7NrAAAAGo"]
[Sat Aug 29 05:06:51.240182 2026] [security2:error] [pid 1028675:tid 1028921] [client 52.139.37.240:32838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superresources.com"] [uri "/gecko-new.php"] [unique_id "apK9S9dHPfW2QFvhmL7NsAAAAG8"]
[Sat Aug 29 05:06:51.243016 2026] [core:error] [pid 1028675:tid 1028922] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.243033 2026] [core:error] [pid 1028675:tid 1028922] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.251892 2026] [core:error] [pid 1028675:tid 1028850] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.251912 2026] [core:error] [pid 1028675:tid 1028850] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.256908 2026] [security2:error] [pid 1028675:tid 1028846] [client 158.23.147.79:48406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/.well-known/content.php"] [unique_id "apK9S9dHPfW2QFvhmL7NtQAAACQ"]
[Sat Aug 29 05:06:51.266152 2026] [security2:error] [pid 1028675:tid 1028845] [client 52.139.37.240:2907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxbible.org"] [uri "/gecko-new.php"] [unique_id "apK9S9dHPfW2QFvhmL7NtgAAACM"]
[Sat Aug 29 05:06:51.269155 2026] [security2:error] [pid 1028675:tid 1028827] [client 158.23.184.117:19266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/.well-known/wp-load.php"] [unique_id "apK9S9dHPfW2QFvhmL7NuQAAABE"]
[Sat Aug 29 05:06:51.269258 2026] [core:error] [pid 1018003:tid 1018185] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.269270 2026] [core:error] [pid 1018003:tid 1018185] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.271785 2026] [core:error] [pid 1028675:tid 1028839] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.271798 2026] [core:error] [pid 1028675:tid 1028839] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.275761 2026] [security2:error] [pid 1028675:tid 1028840] [client 40.83.93.50:7572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/goods.php"] [unique_id "apK9S9dHPfW2QFvhmL7NuwAAAB4"]
[Sat Aug 29 05:06:51.278825 2026] [core:error] [pid 1018003:tid 1018277] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.278840 2026] [core:error] [pid 1018003:tid 1018277] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.284518 2026] [security2:error] [pid 1028675:tid 1028896] [client 158.23.147.79:30579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK9S9dHPfW2QFvhmL7NvQAAAFY"]
[Sat Aug 29 05:06:51.291580 2026] [security2:error] [pid 1028675:tid 1028860] [client 158.23.184.117:46999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dontbenicemovie.wanderlustpictures.com"] [uri "/adminfuns.php"] [unique_id "apK9S9dHPfW2QFvhmL7NvgAAADI"]
[Sat Aug 29 05:06:51.293600 2026] [security2:error] [pid 1028675:tid 1028874] [client 20.104.104.62:56357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/secret.php"] [unique_id "apK9S9dHPfW2QFvhmL7NvwAAAEA"]
[Sat Aug 29 05:06:51.298743 2026] [security2:error] [pid 1028675:tid 1028824] [client 52.139.37.240:32109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/asw.php"] [unique_id "apK9S9dHPfW2QFvhmL7NwAAAAA4"]
[Sat Aug 29 05:06:51.301051 2026] [security2:error] [pid 1028675:tid 1028814] [client 52.139.37.240:31041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/mini.php"] [unique_id "apK9S9dHPfW2QFvhmL7NwQAAAAQ"]
[Sat Aug 29 05:06:51.302129 2026] [core:error] [pid 1018003:tid 1018230] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.302146 2026] [core:error] [pid 1018003:tid 1018230] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.302971 2026] [security2:error] [pid 1028675:tid 1028815] [client 158.23.184.117:34710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/network.php"] [unique_id "apK9S9dHPfW2QFvhmL7NwgAAAAU"]
[Sat Aug 29 05:06:51.303024 2026] [security2:error] [pid 1018003:tid 1018234] [client 68.155.159.216:51812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK9SzAh5Y1i2tUxg4ED6AAABgo"]
[Sat Aug 29 05:06:51.303821 2026] [security2:error] [pid 1028675:tid 1028841] [client 20.104.104.62:42665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/quoys.php"] [unique_id "apK9S9dHPfW2QFvhmL7NwwAAAB8"]
[Sat Aug 29 05:06:51.304810 2026] [security2:error] [pid 1018003:tid 1018187] [client 158.23.184.117:47029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "diamondswindowtinting.enproftp.com"] [uri "/goods.php"] [unique_id "apK9SzAh5Y1i2tUxg4ED6QAABdw"]
[Sat Aug 29 05:06:51.305441 2026] [security2:error] [pid 1028675:tid 1028880] [client 20.220.204.93:50781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/mini.php"] [unique_id "apK9S9dHPfW2QFvhmL7NxAAAAEY"]
[Sat Aug 29 05:06:51.308691 2026] [core:error] [pid 1018003:tid 1018236] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.308708 2026] [core:error] [pid 1018003:tid 1018236] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.310543 2026] [security2:error] [pid 1028675:tid 1028878] [client 52.139.37.240:20766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/xmrlpc.php"] [unique_id "apK9S9dHPfW2QFvhmL7NxQAAAEQ"]
[Sat Aug 29 05:06:51.312555 2026] [core:error] [pid 1018003:tid 1018212] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.312568 2026] [core:error] [pid 1018003:tid 1018212] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.321086 2026] [core:error] [pid 1028675:tid 1028858] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.321105 2026] [core:error] [pid 1028675:tid 1028858] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.322782 2026] [core:error] [pid 1018003:tid 1018231] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.322796 2026] [core:error] [pid 1018003:tid 1018231] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.330434 2026] [security2:error] [pid 1018003:tid 1018244] [client 20.151.200.44:61913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/f2r4.php"] [unique_id "apK9SzAh5Y1i2tUxg4ED9AAABhQ"]
[Sat Aug 29 05:06:51.330592 2026] [core:error] [pid 1018003:tid 1018170] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.330605 2026] [core:error] [pid 1018003:tid 1018170] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.343975 2026] [core:error] [pid 1018003:tid 1018226] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.343990 2026] [core:error] [pid 1018003:tid 1018226] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.346215 2026] [security2:error] [pid 1018003:tid 1018243] [client 20.48.250.41:21501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/bootstrap.php"] [unique_id "apK9SzAh5Y1i2tUxg4ED-AAABhM"]
[Sat Aug 29 05:06:51.347630 2026] [security2:error] [pid 1018003:tid 1018156] [client 68.155.159.216:6124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK9SzAh5Y1i2tUxg4ED-gAABb0"]
[Sat Aug 29 05:06:51.349681 2026] [core:error] [pid 1018003:tid 1018200] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.349696 2026] [core:error] [pid 1018003:tid 1018200] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.359649 2026] [security2:error] [pid 1028675:tid 1028895] [client 20.104.104.62:28815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.watercolorsbylola.allgooddays.org"] [uri "/ioxi-o.php"] [unique_id "apK9S9dHPfW2QFvhmL7NzQAAAFU"]
[Sat Aug 29 05:06:51.359681 2026] [security2:error] [pid 1028675:tid 1028914] [client 20.196.209.81:9446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/alfanew.php7"] [unique_id "apK9S9dHPfW2QFvhmL7NzAAAAGg"]
[Sat Aug 29 05:06:51.369520 2026] [core:error] [pid 1018003:tid 1018180] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.369540 2026] [core:error] [pid 1018003:tid 1018180] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.370129 2026] [security2:error] [pid 1028675:tid 1028933] [client 4.205.62.107:56025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/env.php"] [unique_id "apK9S9dHPfW2QFvhmL7NzgAAAHs"]
[Sat Aug 29 05:06:51.382491 2026] [security2:error] [pid 1028675:tid 1028882] [client 52.139.37.240:8619] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.drjrae.com"] [uri "/c99.php"] [unique_id "apK9S9dHPfW2QFvhmL7NzwAAAEg"]
[Sat Aug 29 05:06:51.387081 2026] [core:error] [pid 1028675:tid 1028862] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.387094 2026] [core:error] [pid 1028675:tid 1028862] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.387451 2026] [core:error] [pid 1018003:tid 1018239] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.387467 2026] [core:error] [pid 1018003:tid 1018239] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.389397 2026] [security2:error] [pid 1028675:tid 1028902] [client 20.104.104.62:27040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ngoiloi.nlvn.net"] [uri "/bolt.php"] [unique_id "apK9S9dHPfW2QFvhmL7N0gAAAFw"]
[Sat Aug 29 05:06:51.397718 2026] [security2:error] [pid 1018003:tid 1018174] [client 20.197.61.180:15952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/haiterus.php"] [unique_id "apK9SzAh5Y1i2tUxg4ED_gAABc8"]
[Sat Aug 29 05:06:51.414093 2026] [security2:error] [pid 1028675:tid 1028832] [client 158.23.184.117:19365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/.well-known/wp-mail.php"] [unique_id "apK9S9dHPfW2QFvhmL7N1QAAABY"]
[Sat Aug 29 05:06:51.422006 2026] [core:error] [pid 1028675:tid 1028843] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.422028 2026] [core:error] [pid 1028675:tid 1028843] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.424556 2026] [core:error] [pid 1028675:tid 1028889] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.424577 2026] [core:error] [pid 1028675:tid 1028889] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.425073 2026] [security2:error] [pid 1028675:tid 1028837] [client 20.104.104.62:4856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/pro.php"] [unique_id "apK9S9dHPfW2QFvhmL7N2QAAABs"]
[Sat Aug 29 05:06:51.429169 2026] [security2:error] [pid 1028675:tid 1028855] [client 168.107.94.195:61976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9S9dHPfW2QFvhmL7N2wAAAC0"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:51.436854 2026] [security2:error] [pid 1028675:tid 1028866] [client 158.23.184.117:46964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dontbenicemovie.wanderlustpictures.com"] [uri "/403.php"] [unique_id "apK9S9dHPfW2QFvhmL7N3AAAADg"]
[Sat Aug 29 05:06:51.446063 2026] [security2:error] [pid 1028675:tid 1028835] [client 20.151.200.44:64357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/hq.php"] [unique_id "apK9S9dHPfW2QFvhmL7N3QAAABk"]
[Sat Aug 29 05:06:51.447388 2026] [security2:error] [pid 1028675:tid 1028825] [client 158.23.184.117:33936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/new.php"] [unique_id "apK9S9dHPfW2QFvhmL7N3gAAAA8"]
[Sat Aug 29 05:06:51.448992 2026] [security2:error] [pid 1028675:tid 1028821] [client 52.139.37.240:33570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superresources.com"] [uri "/add_actualites.php"] [unique_id "apK9S9dHPfW2QFvhmL7N3wAAAAs"]
[Sat Aug 29 05:06:51.452407 2026] [security2:error] [pid 1028675:tid 1028810] [client 158.23.184.117:46982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "diamondswindowtinting.enproftp.com"] [uri "/w.php"] [unique_id "apK9S9dHPfW2QFvhmL7N4QAAAAA"]
[Sat Aug 29 05:06:51.453243 2026] [core:error] [pid 1028675:tid 1028936] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.453256 2026] [core:error] [pid 1028675:tid 1028936] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.460586 2026] [core:error] [pid 1028675:tid 1028900] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.460603 2026] [core:error] [pid 1028675:tid 1028900] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.481833 2026] [security2:error] [pid 1028675:tid 1028899] [client 52.139.37.240:2883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxbible.org"] [uri "/add_actualites.php"] [unique_id "apK9S9dHPfW2QFvhmL7N6QAAAFk"]
[Sat Aug 29 05:06:51.483239 2026] [security2:error] [pid 1018003:tid 1018225] [client 20.220.204.93:52290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/amp.php"] [unique_id "apK9SzAh5Y1i2tUxg4EEEAAABgI"]
[Sat Aug 29 05:06:51.484116 2026] [core:error] [pid 1018003:tid 1018270] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.484133 2026] [core:error] [pid 1018003:tid 1018270] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.492673 2026] [security2:error] [pid 1028675:tid 1028863] [client 52.139.37.240:32127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/item.php"] [unique_id "apK9S9dHPfW2QFvhmL7N6gAAADU"]
[Sat Aug 29 05:06:51.498588 2026] [security2:error] [pid 1028675:tid 1028865] [client 52.139.37.240:31015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/v.php"] [unique_id "apK9S9dHPfW2QFvhmL7N6wAAADc"]
[Sat Aug 29 05:06:51.500215 2026] [security2:error] [pid 1018003:tid 1018262] [client 20.104.18.15:13719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/k.php"] [unique_id "apK9SzAh5Y1i2tUxg4EEEQAABiY"]
[Sat Aug 29 05:06:51.502970 2026] [security2:error] [pid 1018003:tid 1018267] [client 20.48.250.41:21315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/export.php"] [unique_id "apK9SzAh5Y1i2tUxg4EEEgAABis"]
[Sat Aug 29 05:06:51.504125 2026] [security2:error] [pid 1018003:tid 1018194] [client 20.52.41.200:1152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-logs.php"] [unique_id "apK9SzAh5Y1i2tUxg4EEEwAABeM"]
[Sat Aug 29 05:06:51.504633 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.104.104.62:60465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/vbbn.php"] [unique_id "apK9SzAh5Y1i2tUxg4EEFAAABcI"]
[Sat Aug 29 05:06:51.506770 2026] [security2:error] [pid 1028675:tid 1028867] [client 52.139.37.240:21411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/about/function.php"] [unique_id "apK9S9dHPfW2QFvhmL7N7AAAADk"]
[Sat Aug 29 05:06:51.511667 2026] [security2:error] [pid 1018003:tid 1018041] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/s3/.env.bak"] [unique_id "apK9SzAh5Y1i2tUxg4EEFQAF3xQ"]
[Sat Aug 29 05:06:51.512456 2026] [security2:error] [pid 1018003:tid 1018160] [client 158.23.147.79:59843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK9SzAh5Y1i2tUxg4EEFgAABcE"]
[Sat Aug 29 05:06:51.522663 2026] [core:error] [pid 1028675:tid 1028917] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.522679 2026] [core:error] [pid 1028675:tid 1028917] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.522860 2026] [core:error] [pid 1028675:tid 1028848] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.522886 2026] [core:error] [pid 1028675:tid 1028848] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.523055 2026] [security2:error] [pid 1018003:tid 1018207] [client 20.104.104.62:64725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/css/priv8.php"] [unique_id "apK9SzAh5Y1i2tUxg4EEGQAABfA"]
[Sat Aug 29 05:06:51.523060 2026] [core:error] [pid 1018003:tid 1018230] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.523070 2026] [core:error] [pid 1018003:tid 1018230] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.524805 2026] [core:error] [pid 1018003:tid 1018234] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.524820 2026] [core:error] [pid 1018003:tid 1018234] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.525627 2026] [core:error] [pid 1028675:tid 1028845] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.525642 2026] [core:error] [pid 1028675:tid 1028845] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.529141 2026] [core:error] [pid 1028675:tid 1028911] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.529151 2026] [core:error] [pid 1028675:tid 1028911] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.559170 2026] [security2:error] [pid 1028675:tid 1028854] [client 158.23.184.117:19379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/.well-known/wp-settings.php"] [unique_id "apK9S9dHPfW2QFvhmL7N9AAAACw"]
[Sat Aug 29 05:06:51.560398 2026] [core:error] [pid 1028675:tid 1028893] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.560426 2026] [core:error] [pid 1028675:tid 1028893] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.565065 2026] [security2:error] [pid 1028675:tid 1028871] [client 20.104.104.62:4820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/999.php"] [unique_id "apK9S9dHPfW2QFvhmL7N9gAAAD0"]
[Sat Aug 29 05:06:51.565641 2026] [core:error] [pid 1028675:tid 1028878] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.565652 2026] [core:error] [pid 1028675:tid 1028878] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.576786 2026] [security2:error] [pid 1018003:tid 1018277] [client 52.139.37.240:8508] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.drjrae.com"] [uri "/c99.php"] [unique_id "apK9SzAh5Y1i2tUxg4EEJAAABjU"]
[Sat Aug 29 05:06:51.585759 2026] [security2:error] [pid 1028675:tid 1028901] [client 158.158.54.35:20594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/admin/index.php"] [unique_id "apK9S9dHPfW2QFvhmL7N-gAAAFs"]
[Sat Aug 29 05:06:51.587025 2026] [cgid:error] [pid 1018003:tid 1018157] [client 158.23.184.117:62303] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/dontbenicemovie/404.shtml
[Sat Aug 29 05:06:51.587638 2026] [security2:error] [pid 1028675:tid 1028839] [client 20.104.104.62:27028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ngoiloi.nlvn.net"] [uri "/file.php"] [unique_id "apK9S9dHPfW2QFvhmL7N-wAAAB0"]
[Sat Aug 29 05:06:51.587747 2026] [core:error] [pid 1028675:tid 1028891] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.587754 2026] [core:error] [pid 1028675:tid 1028891] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.589478 2026] [core:error] [pid 1028675:tid 1028856] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.589489 2026] [core:error] [pid 1028675:tid 1028856] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.590238 2026] [security2:error] [pid 1028675:tid 1028814] [client 158.23.184.117:33921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/0x.php"] [unique_id "apK9S9dHPfW2QFvhmL7N_QAAAAQ"]
[Sat Aug 29 05:06:51.596879 2026] [security2:error] [pid 1028675:tid 1028815] [client 158.23.184.117:46385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "diamondswindowtinting.enproftp.com"] [uri "/new.php"] [unique_id "apK9S9dHPfW2QFvhmL7N_gAAAAU"]
[Sat Aug 29 05:06:51.597782 2026] [security2:error] [pid 1018003:tid 1018192] [client 20.104.18.15:36548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/nofile.php"] [unique_id "apK9SzAh5Y1i2tUxg4EEJgAABeE"]
[Sat Aug 29 05:06:51.625530 2026] [security2:error] [pid 1018003:tid 1018166] [client 20.104.104.62:28806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.watercolorsbylola.allgooddays.org"] [uri "/wp-links-opml.php"] [unique_id "apK9SzAh5Y1i2tUxg4EEKAAABcc"]
[Sat Aug 29 05:06:51.627660 2026] [core:error] [pid 1018003:tid 1018183] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.627674 2026] [core:error] [pid 1018003:tid 1018183] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.632836 2026] [core:error] [pid 1028675:tid 1028906] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.632850 2026] [core:error] [pid 1028675:tid 1028906] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.634179 2026] [security2:error] [pid 1018003:tid 1018156] [client 158.23.184.117:62303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dontbenicemovie.wanderlustpictures.com"] [uri "/.trash7206/index.php"] [unique_id "apK9SzAh5Y1i2tUxg4EEKgAABb0"]
[Sat Aug 29 05:06:51.636718 2026] [security2:error] [pid 1028675:tid 1028857] [client 20.104.18.15:13633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/82.php"] [unique_id "apK9S9dHPfW2QFvhmL7OAgAAAC8"]
[Sat Aug 29 05:06:51.644239 2026] [security2:error] [pid 1028675:tid 1028931] [client 52.139.37.240:33575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superresources.com"] [uri "/browse.php"] [unique_id "apK9S9dHPfW2QFvhmL7OBAAAAHk"]
[Sat Aug 29 05:06:51.651403 2026] [security2:error] [pid 1018003:tid 1018275] [client 158.23.147.79:17492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/file17.php"] [unique_id "apK9SzAh5Y1i2tUxg4EELAAABjM"]
[Sat Aug 29 05:06:51.652954 2026] [security2:error] [pid 1018003:tid 1018167] [client 20.48.250.41:21455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/gk.php"] [unique_id "apK9SzAh5Y1i2tUxg4EELQAABcg"]
[Sat Aug 29 05:06:51.656729 2026] [core:error] [pid 1028675:tid 1028898] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.656747 2026] [core:error] [pid 1028675:tid 1028898] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.668611 2026] [security2:error] [pid 1018003:tid 1018067] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/server/.env"] [unique_id "apK9SzAh5Y1i2tUxg4EEMQAGHy4"]
[Sat Aug 29 05:06:51.669938 2026] [core:error] [pid 1018003:tid 1018056] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.669952 2026] [core:error] [pid 1018003:tid 1018056] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.679616 2026] [security2:error] [pid 1028675:tid 1028929] [client 52.139.37.240:2890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxbible.org"] [uri "/browse.php"] [unique_id "apK9S9dHPfW2QFvhmL7OBgAAAHc"]
[Sat Aug 29 05:06:51.687914 2026] [security2:error] [pid 1018003:tid 1018153] [client 52.139.37.240:32062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/jga.php"] [unique_id "apK9SzAh5Y1i2tUxg4EEMwAABbo"]
[Sat Aug 29 05:06:51.688774 2026] [security2:error] [pid 1018003:tid 1018172] [client 68.155.159.216:18329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-content/radio.php"] [unique_id "apK9SzAh5Y1i2tUxg4EENAAABc0"]
[Sat Aug 29 05:06:51.693514 2026] [security2:error] [pid 1028675:tid 1028925] [client 52.139.37.240:31064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK9S9dHPfW2QFvhmL7OBwAAAHM"]
[Sat Aug 29 05:06:51.696021 2026] [core:error] [pid 1018003:tid 1018164] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.696041 2026] [core:error] [pid 1018003:tid 1018164] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.706239 2026] [security2:error] [pid 1028675:tid 1028831] [client 52.139.37.240:21175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/an.php"] [unique_id "apK9S9dHPfW2QFvhmL7OCAAAABU"]
[Sat Aug 29 05:06:51.706521 2026] [security2:error] [pid 1018003:tid 1018273] [client 158.23.184.117:19278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/.well-known/wp-signup.php"] [unique_id "apK9SzAh5Y1i2tUxg4EENgAABjE"]
[Sat Aug 29 05:06:51.709875 2026] [security2:error] [pid 1018003:tid 1018177] [client 20.104.104.62:56322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/sef.php"] [unique_id "apK9SzAh5Y1i2tUxg4EENwAABdI"]
[Sat Aug 29 05:06:51.717578 2026] [security2:error] [pid 1018003:tid 1018250] [client 4.205.62.107:53408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/v1.php"] [unique_id "apK9SzAh5Y1i2tUxg4EEOAAABho"]
[Sat Aug 29 05:06:51.718743 2026] [security2:error] [pid 1028675:tid 1028926] [client 20.104.104.62:52045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/rfi.php"] [unique_id "apK9S9dHPfW2QFvhmL7OCQAAAHQ"]
[Sat Aug 29 05:06:51.721062 2026] [security2:error] [pid 1028675:tid 1028886] [client 20.220.204.93:59104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/cc13.php"] [unique_id "apK9S9dHPfW2QFvhmL7OCgAAAEw"]
[Sat Aug 29 05:06:51.721701 2026] [security2:error] [pid 1018003:tid 1018057] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/server/api/.env"] [unique_id "apK9SzAh5Y1i2tUxg4EEOQAF7CQ"]
[Sat Aug 29 05:06:51.723954 2026] [security2:error] [pid 1018003:tid 1018050] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/server/backend/.env"] [unique_id "apK9SzAh5Y1i2tUxg4EEOwAF7B0"]
[Sat Aug 29 05:06:51.724841 2026] [core:error] [pid 1018003:tid 1018051] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.724856 2026] [core:error] [pid 1018003:tid 1018051] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.727338 2026] [core:error] [pid 1018003:tid 1018072] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.727363 2026] [core:error] [pid 1018003:tid 1018072] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.730051 2026] [core:error] [pid 1018003:tid 1018078] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.730067 2026] [core:error] [pid 1018003:tid 1018078] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.731039 2026] [core:error] [pid 1018003:tid 1018060] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.731059 2026] [core:error] [pid 1018003:tid 1018060] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.733222 2026] [security2:error] [pid 1028675:tid 1028812] [client 68.155.159.216:65111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/file5.php"] [unique_id "apK9S9dHPfW2QFvhmL7OCwAAAAI"]
[Sat Aug 29 05:06:51.733962 2026] [core:error] [pid 1018003:tid 1018075] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.733977 2026] [core:error] [pid 1018003:tid 1018075] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.740872 2026] [core:error] [pid 1018003:tid 1018024] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.740887 2026] [core:error] [pid 1018003:tid 1018024] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.742499 2026] [security2:error] [pid 1018003:tid 1018174] [client 158.23.184.117:46925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "diamondswindowtinting.enproftp.com"] [uri "/php8.php"] [unique_id "apK9SzAh5Y1i2tUxg4EEQQAABc8"]
[Sat Aug 29 05:06:51.749321 2026] [security2:error] [pid 1028675:tid 1028932] [client 4.205.62.107:22351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/groceries/index.php"] [unique_id "apK9S9dHPfW2QFvhmL7ODQAAAHo"]
[Sat Aug 29 05:06:51.753315 2026] [security2:error] [pid 1028675:tid 1028825] [client 68.155.159.216:16314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/lock.php"] [unique_id "apK9S9dHPfW2QFvhmL7ODgAAAA8"]
[Sat Aug 29 05:06:51.753547 2026] [security2:error] [pid 1028675:tid 1028821] [client 20.104.18.15:36614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/run.php"] [unique_id "apK9S9dHPfW2QFvhmL7ODwAAAAs"]
[Sat Aug 29 05:06:51.754160 2026] [security2:error] [pid 1028675:tid 1028887] [client 20.196.209.81:13295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/xmlrpc.php0"] [unique_id "apK9S9dHPfW2QFvhmL7OEAAAAE0"]
[Sat Aug 29 05:06:51.769153 2026] [security2:error] [pid 1028675:tid 1028820] [client 158.23.147.79:24498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/x.php"] [unique_id "apK9S9dHPfW2QFvhmL7OEQAAAAo"]
[Sat Aug 29 05:06:51.776297 2026] [security2:error] [pid 1018003:tid 1018187] [client 20.104.18.15:13644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/dex.php"] [unique_id "apK9SzAh5Y1i2tUxg4EEQgAABdw"]
[Sat Aug 29 05:06:51.782210 2026] [security2:error] [pid 1028675:tid 1028879] [client 40.83.93.50:7588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/hehe.php"] [unique_id "apK9S9dHPfW2QFvhmL7OEgAAAEU"]
[Sat Aug 29 05:06:51.783767 2026] [security2:error] [pid 1028675:tid 1028837] [client 158.23.184.117:46989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dontbenicemovie.wanderlustpictures.com"] [uri "/.trash7206/admin.php"] [unique_id "apK9S9dHPfW2QFvhmL7OEwAAABs"]
[Sat Aug 29 05:06:51.783995 2026] [security2:error] [pid 1028675:tid 1028930] [client 45.148.10.62:49790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ninaanddon.strangeworx.com"] [uri "/phpinfo.php"] [unique_id "apK9S9dHPfW2QFvhmL7OFAAAAHg"]
[Sat Aug 29 05:06:51.784591 2026] [security2:error] [pid 1018003:tid 1018262] [client 20.104.104.62:27521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ngoiloi.nlvn.net"] [uri "/404.php"] [unique_id "apK9SzAh5Y1i2tUxg4EEQwAABiY"]
[Sat Aug 29 05:06:51.798119 2026] [security2:error] [pid 1028675:tid 1028919] [client 158.23.184.117:34746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/0.php"] [unique_id "apK9S9dHPfW2QFvhmL7OFQAAAG0"]
[Sat Aug 29 05:06:51.803756 2026] [security2:error] [pid 1028675:tid 1028899] [client 20.48.250.41:21404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/logs1.php"] [unique_id "apK9S9dHPfW2QFvhmL7OFgAAAFk"]
[Sat Aug 29 05:06:51.805287 2026] [core:error] [pid 1018003:tid 1018087] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.805303 2026] [core:error] [pid 1018003:tid 1018087] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.808593 2026] [security2:error] [pid 1028675:tid 1028849] [client 158.158.54.35:17855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/.trash7206/index.php"] [unique_id "apK9S9dHPfW2QFvhmL7OGAAAACc"]
[Sat Aug 29 05:06:51.810092 2026] [security2:error] [pid 1028675:tid 1028863] [client 168.107.94.195:62376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9S9dHPfW2QFvhmL7OGQAAADU"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:51.817243 2026] [security2:error] [pid 1028675:tid 1028847] [client 158.23.147.79:50155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/goods.php"] [unique_id "apK9S9dHPfW2QFvhmL7OGwAAACU"]
[Sat Aug 29 05:06:51.823176 2026] [security2:error] [pid 1018003:tid 1018195] [client 20.104.104.62:28838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.watercolorsbylola.allgooddays.org"] [uri "/feokc.php"] [unique_id "apK9SzAh5Y1i2tUxg4EESwAABeQ"]
[Sat Aug 29 05:06:51.840212 2026] [security2:error] [pid 1028675:tid 1028830] [client 52.139.37.240:32843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superresources.com"] [uri "/contentloader1.php"] [unique_id "apK9S9dHPfW2QFvhmL7OHAAAABQ"]
[Sat Aug 29 05:06:51.840553 2026] [security2:error] [pid 1018003:tid 1018049] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/service/.env"] [unique_id "apK9SzAh5Y1i2tUxg4EETQAF-hw"]
[Sat Aug 29 05:06:51.840552 2026] [security2:error] [pid 1018003:tid 1018134] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/services/.env"] [unique_id "apK9SzAh5Y1i2tUxg4EETAAF-nE"]
[Sat Aug 29 05:06:51.844024 2026] [security2:error] [pid 1018003:tid 1018268] [client 20.151.200.44:47391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/adin.php"] [unique_id "apK9SzAh5Y1i2tUxg4EETwAABiw"]
[Sat Aug 29 05:06:51.848538 2026] [security2:error] [pid 1018003:tid 1018157] [client 20.104.104.62:37196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/admin123.php"] [unique_id "apK9SzAh5Y1i2tUxg4EEUAAABb4"]
[Sat Aug 29 05:06:51.850466 2026] [security2:error] [pid 1028675:tid 1028928] [client 158.23.184.117:19330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/002.php"] [unique_id "apK9S9dHPfW2QFvhmL7OHgAAAHY"]
[Sat Aug 29 05:06:51.853762 2026] [security2:error] [pid 1028675:tid 1028828] [client 68.155.159.216:33568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/goat.php"] [unique_id "apK9S9dHPfW2QFvhmL7OHwAAABI"]
[Sat Aug 29 05:06:51.859673 2026] [core:error] [pid 1028675:tid 1028845] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.859690 2026] [core:error] [pid 1028675:tid 1028845] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.859738 2026] [core:error] [pid 1028675:tid 1028844] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.859747 2026] [core:error] [pid 1028675:tid 1028844] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.862048 2026] [core:error] [pid 1018003:tid 1018266] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.862064 2026] [core:error] [pid 1018003:tid 1018192] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.862066 2026] [core:error] [pid 1018003:tid 1018266] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.862077 2026] [core:error] [pid 1018003:tid 1018192] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.862713 2026] [core:error] [pid 1018003:tid 1018244] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.862728 2026] [core:error] [pid 1018003:tid 1018244] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.869246 2026] [security2:error] [pid 1028675:tid 1028922] [client 52.139.37.240:2583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxbible.org"] [uri "/contentloader1.php"] [unique_id "apK9S9dHPfW2QFvhmL7OIgAAAHA"]
[Sat Aug 29 05:06:51.870211 2026] [core:error] [pid 1018003:tid 1018022] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.870227 2026] [core:error] [pid 1018003:tid 1018022] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.881751 2026] [security2:error] [pid 1028675:tid 1028924] [client 52.139.37.240:32064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/mac.php"] [unique_id "apK9S9dHPfW2QFvhmL7OJQAAAHI"]
[Sat Aug 29 05:06:51.888556 2026] [security2:error] [pid 1018003:tid 1018163] [client 158.23.184.117:46383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "diamondswindowtinting.enproftp.com"] [uri "/wp-content/themes/admin.php"] [unique_id "apK9SzAh5Y1i2tUxg4EEWQAABcQ"]
[Sat Aug 29 05:06:51.891567 2026] [security2:error] [pid 1018003:tid 1018079] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/shared/.env"] [unique_id "apK9SzAh5Y1i2tUxg4EEWgAGAzo"]
[Sat Aug 29 05:06:51.894045 2026] [security2:error] [pid 1018003:tid 1018112] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/shop/.env"] [unique_id "apK9SzAh5Y1i2tUxg4EEWwAGA1s"]
[Sat Aug 29 05:06:51.897457 2026] [security2:error] [pid 1028675:tid 1028842] [client 52.139.37.240:31540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "apK9S9dHPfW2QFvhmL7OKAAAACA"]
[Sat Aug 29 05:06:51.905707 2026] [security2:error] [pid 1018003:tid 1018275] [client 20.104.18.15:13745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/inso.php"] [unique_id "apK9SzAh5Y1i2tUxg4EEXQAABjM"]
[Sat Aug 29 05:06:51.908032 2026] [security2:error] [pid 1028675:tid 1028839] [client 20.104.104.62:40233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/assets/priv8.php"] [unique_id "apK9S9dHPfW2QFvhmL7OKgAAAB0"]
[Sat Aug 29 05:06:51.919535 2026] [security2:error] [pid 1018003:tid 1018172] [client 20.104.104.62:42631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/tajj.php"] [unique_id "apK9SzAh5Y1i2tUxg4EEYAAABc0"]
[Sat Aug 29 05:06:51.927229 2026] [core:error] [pid 1018003:tid 1018190] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.927258 2026] [core:error] [pid 1018003:tid 1018190] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.927314 2026] [core:error] [pid 1018003:tid 1018180] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.927397 2026] [core:error] [pid 1018003:tid 1018180] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.927983 2026] [core:error] [pid 1018003:tid 1018239] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.928005 2026] [core:error] [pid 1018003:tid 1018239] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.928577 2026] [core:error] [pid 1018003:tid 1018275] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.928591 2026] [core:error] [pid 1018003:tid 1018275] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.932224 2026] [security2:error] [pid 1028675:tid 1028814] [client 158.23.147.79:30628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK9S9dHPfW2QFvhmL7OKwAAAAQ"]
[Sat Aug 29 05:06:51.932312 2026] [security2:error] [pid 1028675:tid 1028856] [client 20.151.200.44:64869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/sadis.php"] [unique_id "apK9S9dHPfW2QFvhmL7OLAAAAC4"]
[Sat Aug 29 05:06:51.934616 2026] [security2:error] [pid 1018003:tid 1018255] [client 20.104.18.15:36728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/new.php"] [unique_id "apK9SzAh5Y1i2tUxg4EEZQAABh8"]
[Sat Aug 29 05:06:51.937253 2026] [security2:error] [pid 1018003:tid 1018225] [client 158.23.147.79:35789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK9SzAh5Y1i2tUxg4EEZgAABgI"]
[Sat Aug 29 05:06:51.937806 2026] [core:error] [pid 1018003:tid 1018221] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.937820 2026] [core:error] [pid 1018003:tid 1018221] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.940444 2026] [security2:error] [pid 1018003:tid 1018196] [client 158.23.184.117:34688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/oxshell.php"] [unique_id "apK9SzAh5Y1i2tUxg4EEZwAABeU"]
[Sat Aug 29 05:06:51.945549 2026] [security2:error] [pid 1028675:tid 1028858] [client 158.23.184.117:62293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dontbenicemovie.wanderlustpictures.com"] [uri "/wp-content/admin.php"] [unique_id "apK9S9dHPfW2QFvhmL7OLQAAADA"]
[Sat Aug 29 05:06:51.949120 2026] [security2:error] [pid 1018003:tid 1018185] [client 68.155.159.216:30685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/file88.php"] [unique_id "apK9SzAh5Y1i2tUxg4EEaQAABdo"]
[Sat Aug 29 05:06:51.956377 2026] [security2:error] [pid 1018003:tid 1018174] [client 20.220.204.93:50814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/aa.php"] [unique_id "apK9SzAh5Y1i2tUxg4EEbQAABc8"]
[Sat Aug 29 05:06:51.962241 2026] [security2:error] [pid 1018003:tid 1018231] [client 20.52.41.200:1751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-admin/css/about.php"] [unique_id "apK9SzAh5Y1i2tUxg4EEbwAABgc"]
[Sat Aug 29 05:06:51.962944 2026] [security2:error] [pid 1028675:tid 1028934] [client 20.48.250.41:21323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/inege.php"] [unique_id "apK9S9dHPfW2QFvhmL7OLwAAAHw"]
[Sat Aug 29 05:06:51.964885 2026] [security2:error] [pid 1028675:tid 1028867] [client 158.158.54.35:18144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wk/index.php"] [unique_id "apK9S9dHPfW2QFvhmL7OMAAAADk"]
[Sat Aug 29 05:06:51.990835 2026] [security2:error] [pid 1018003:tid 1018164] [client 20.104.104.62:27525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ngoiloi.nlvn.net"] [uri "/wk/index.php"] [unique_id "apK9SzAh5Y1i2tUxg4EEcQAABcU"]
[Sat Aug 29 05:06:51.994413 2026] [core:error] [pid 1028675:tid 1028862] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:51.994435 2026] [core:error] [pid 1028675:tid 1028862] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.001565 2026] [security2:error] [pid 1018003:tid 1018267] [client 158.23.184.117:19267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/0x.php"] [unique_id "apK9TDAh5Y1i2tUxg4EEcgAABis"]
[Sat Aug 29 05:06:52.013972 2026] [security2:error] [pid 1028675:tid 1028832] [client 4.205.62.107:22226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/_js.jpg..bk.php"] [unique_id "apK9TNdHPfW2QFvhmL7OMwAAABY"]
[Sat Aug 29 05:06:52.025854 2026] [security2:error] [pid 1018003:tid 1018160] [client 20.104.104.62:29224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.watercolorsbylola.allgooddays.org"] [uri "/k.php"] [unique_id "apK9TDAh5Y1i2tUxg4EEdgAABcE"]
[Sat Aug 29 05:06:52.026627 2026] [security2:error] [pid 1028675:tid 1028929] [client 4.205.62.107:58458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9TNdHPfW2QFvhmL7ONQAAAHc"]
[Sat Aug 29 05:06:52.028697 2026] [security2:error] [pid 1018003:tid 1018230] [client 158.23.184.117:62330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "diamondswindowtinting.enproftp.com"] [uri "/txets.php"] [unique_id "apK9TDAh5Y1i2tUxg4EEdwAABgY"]
[Sat Aug 29 05:06:52.032268 2026] [security2:error] [pid 1028675:tid 1028831] [client 4.205.62.107:65469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/fleen.php"] [unique_id "apK9TNdHPfW2QFvhmL7OOAAAABU"]
[Sat Aug 29 05:06:52.037480 2026] [security2:error] [pid 1018003:tid 1018090] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/src/.env"] [unique_id "apK9TDAh5Y1i2tUxg4EEeQAGJkU"]
[Sat Aug 29 05:06:52.038798 2026] [core:error] [pid 1018003:tid 1018086] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.038810 2026] [core:error] [pid 1018003:tid 1018086] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.039485 2026] [core:error] [pid 1018003:tid 1018095] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.039505 2026] [core:error] [pid 1018003:tid 1018095] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.039765 2026] [core:error] [pid 1018003:tid 1018104] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.039772 2026] [core:error] [pid 1018003:tid 1018104] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.039772 2026] [core:error] [pid 1018003:tid 1018081] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.039782 2026] [core:error] [pid 1018003:tid 1018081] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.039873 2026] [core:error] [pid 1018003:tid 1018066] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.039878 2026] [core:error] [pid 1018003:tid 1018066] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.043677 2026] [core:error] [pid 1018003:tid 1018218] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.043687 2026] [core:error] [pid 1018003:tid 1018218] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.055660 2026] [core:error] [pid 1018003:tid 1018074] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.055672 2026] [core:error] [pid 1018003:tid 1018074] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.057910 2026] [core:error] [pid 1028675:tid 1028855] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.057925 2026] [core:error] [pid 1028675:tid 1028855] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.063598 2026] [core:error] [pid 1028675:tid 1028872] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.063615 2026] [core:error] [pid 1028675:tid 1028872] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.082854 2026] [security2:error] [pid 1028675:tid 1028810] [client 4.205.62.107:22026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/v4.php"] [unique_id "apK9TNdHPfW2QFvhmL7OPAAAAAA"]
[Sat Aug 29 05:06:52.083598 2026] [security2:error] [pid 1028675:tid 1028907] [client 158.23.184.117:34530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/php8.php"] [unique_id "apK9TNdHPfW2QFvhmL7OPQAAAGE"]
[Sat Aug 29 05:06:52.091971 2026] [security2:error] [pid 1018003:tid 1018170] [client 20.48.250.41:21472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/wp-link10.php"] [unique_id "apK9TDAh5Y1i2tUxg4EEgwAABcs"]
[Sat Aug 29 05:06:52.093330 2026] [security2:error] [pid 1028675:tid 1028908] [client 20.220.204.93:59043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/s1.php"] [unique_id "apK9TNdHPfW2QFvhmL7OPgAAAGI"]
[Sat Aug 29 05:06:52.096561 2026] [core:error] [pid 1018003:tid 1018077] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.096574 2026] [core:error] [pid 1018003:tid 1018077] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.109101 2026] [core:error] [pid 1018003:tid 1018099] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.109112 2026] [core:error] [pid 1018003:tid 1018099] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.110470 2026] [security2:error] [pid 1018003:tid 1018166] [client 20.104.104.62:52039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/grsiuk.php"] [unique_id "apK9TDAh5Y1i2tUxg4EEiQAABcc"]
[Sat Aug 29 05:06:52.111031 2026] [core:error] [pid 1018003:tid 1018030] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.111040 2026] [core:error] [pid 1018003:tid 1018030] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.113605 2026] [security2:error] [pid 1018003:tid 1018172] [client 158.158.54.35:20552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/storage/rip.php"] [unique_id "apK9TDAh5Y1i2tUxg4EEigAABc0"]
[Sat Aug 29 05:06:52.115856 2026] [security2:error] [pid 1028675:tid 1028829] [client 158.23.147.79:62669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK9TNdHPfW2QFvhmL7OPwAAABM"]
[Sat Aug 29 05:06:52.116309 2026] [security2:error] [pid 1018003:tid 1018183] [client 20.104.104.62:56373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/7h.php"] [unique_id "apK9TDAh5Y1i2tUxg4EEiwAABdg"]
[Sat Aug 29 05:06:52.130333 2026] [security2:error] [pid 1028675:tid 1028910] [client 158.23.147.79:32615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/content.php"] [unique_id "apK9TNdHPfW2QFvhmL7OQAAAAGQ"]
[Sat Aug 29 05:06:52.133745 2026] [core:error] [pid 1028675:tid 1028927] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.133758 2026] [core:error] [pid 1028675:tid 1028927] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.136235 2026] [security2:error] [pid 1028675:tid 1028817] [client 20.197.61.180:8924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/go.php"] [unique_id "apK9TNdHPfW2QFvhmL7OQgAAAAc"]
[Sat Aug 29 05:06:52.141672 2026] [security2:error] [pid 1028675:tid 1028900] [client 68.155.159.216:50177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK9TNdHPfW2QFvhmL7OQwAAAFo"]
[Sat Aug 29 05:06:52.161453 2026] [core:error] [pid 1018003:tid 1018058] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.161469 2026] [core:error] [pid 1018003:tid 1018058] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.166521 2026] [security2:error] [pid 1028675:tid 1028849] [client 20.104.49.130:60774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/makeasmtp.php"] [unique_id "apK9TNdHPfW2QFvhmL7ORAAAACc"]
[Sat Aug 29 05:06:52.184289 2026] [security2:error] [pid 1028675:tid 1028853] [client 68.155.159.216:52751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK9TNdHPfW2QFvhmL7ORQAAACs"]
[Sat Aug 29 05:06:52.196162 2026] [security2:error] [pid 1018003:tid 1018198] [client 20.104.104.62:27064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ngoiloi.nlvn.net"] [uri "/wp-content/admin.php"] [unique_id "apK9TDAh5Y1i2tUxg4EEjgAABec"]
[Sat Aug 29 05:06:52.203073 2026] [core:error] [pid 1018003:tid 1018118] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.203090 2026] [core:error] [pid 1018003:tid 1018118] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.205774 2026] [security2:error] [pid 1028675:tid 1028917] [client 168.107.94.195:62717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9TNdHPfW2QFvhmL7OSAAAAGs"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:52.207072 2026] [security2:error] [pid 1018003:tid 1018029] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/srv/.env"] [unique_id "apK9TDAh5Y1i2tUxg4EEkAAGIgg"]
[Sat Aug 29 05:06:52.207108 2026] [security2:error] [pid 1018003:tid 1018045] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/stg/.env"] [unique_id "apK9TDAh5Y1i2tUxg4EEkQAGIhg"]
[Sat Aug 29 05:06:52.212828 2026] [core:error] [pid 1018003:tid 1018093] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.212838 2026] [core:error] [pid 1018003:tid 1018093] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.217321 2026] [security2:error] [pid 1028675:tid 1028845] [client 20.104.104.62:20913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/js/priv8.php"] [unique_id "apK9TNdHPfW2QFvhmL7OSQAAACM"]
[Sat Aug 29 05:06:52.220910 2026] [security2:error] [pid 1028675:tid 1028876] [client 20.151.200.44:64895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/xcre1.php"] [unique_id "apK9TNdHPfW2QFvhmL7OSgAAAEI"]
[Sat Aug 29 05:06:52.222988 2026] [security2:error] [pid 1028675:tid 1028919] [client 20.104.104.62:29205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.watercolorsbylola.allgooddays.org"] [uri "/tx78.php"] [unique_id "apK9TNdHPfW2QFvhmL7OSwAAAG0"]
[Sat Aug 29 05:06:52.231749 2026] [security2:error] [pid 1028675:tid 1028861] [client 20.220.204.93:50777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/0byte.php"] [unique_id "apK9TNdHPfW2QFvhmL7OTQAAADM"]
[Sat Aug 29 05:06:52.240275 2026] [security2:error] [pid 1018003:tid 1018106] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/stage/.env"] [unique_id "apK9TDAh5Y1i2tUxg4EEkwAF0FU"]
[Sat Aug 29 05:06:52.240382 2026] [security2:error] [pid 1018003:tid 1018148] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/staging/.env"] [unique_id "apK9TDAh5Y1i2tUxg4EElAAF0H8"]
[Sat Aug 29 05:06:52.242410 2026] [core:error] [pid 1018003:tid 1018108] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.242427 2026] [core:error] [pid 1018003:tid 1018108] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.246239 2026] [core:error] [pid 1018003:tid 1018116] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.246251 2026] [core:error] [pid 1018003:tid 1018116] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.247676 2026] [core:error] [pid 1018003:tid 1018080] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.247691 2026] [core:error] [pid 1018003:tid 1018080] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.248294 2026] [core:error] [pid 1018003:tid 1018146] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.248304 2026] [core:error] [pid 1018003:tid 1018146] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.248685 2026] [core:error] [pid 1018003:tid 1018113] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.248699 2026] [core:error] [pid 1018003:tid 1018113] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.261577 2026] [security2:error] [pid 1028675:tid 1028860] [client 20.151.200.44:47379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/sf9.php"] [unique_id "apK9TNdHPfW2QFvhmL7OUgAAADI"]
[Sat Aug 29 05:06:52.269132 2026] [security2:error] [pid 1018003:tid 1018255] [client 20.48.250.41:21325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/ww.php"] [unique_id "apK9TDAh5Y1i2tUxg4EEnQAABh8"]
[Sat Aug 29 05:06:52.272279 2026] [security2:error] [pid 1028675:tid 1028923] [client 40.83.93.50:17307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/wp-admin/class-db.php"] [unique_id "apK9TNdHPfW2QFvhmL7OUwAAAHE"]
[Sat Aug 29 05:06:52.278449 2026] [core:error] [pid 1018003:tid 1018098] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.278466 2026] [core:error] [pid 1018003:tid 1018098] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.280793 2026] [security2:error] [pid 1028675:tid 1028926] [client 20.196.209.81:13278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/content.php"] [unique_id "apK9TNdHPfW2QFvhmL7OVQAAAHQ"]
[Sat Aug 29 05:06:52.282280 2026] [security2:error] [pid 1018003:tid 1018068] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/stripe/.env"] [unique_id "apK9TDAh5Y1i2tUxg4EEoQAF-S8"]
[Sat Aug 29 05:06:52.283520 2026] [security2:error] [pid 1028675:tid 1028851] [client 158.23.147.79:25502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/about/function.php"] [unique_id "apK9TNdHPfW2QFvhmL7OVgAAACk"]
[Sat Aug 29 05:06:52.284187 2026] [security2:error] [pid 1028675:tid 1028924] [client 20.104.104.62:23361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/ahy66.php"] [unique_id "apK9TNdHPfW2QFvhmL7OVwAAAHI"]
[Sat Aug 29 05:06:52.290156 2026] [security2:error] [pid 1028675:tid 1028854] [client 68.155.159.216:49294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/asd.php"] [unique_id "apK9TNdHPfW2QFvhmL7OWAAAACw"]
[Sat Aug 29 05:06:52.302003 2026] [security2:error] [pid 1028675:tid 1028813] [client 68.155.159.216:24571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/xmlrpc.php"] [unique_id "apK9TNdHPfW2QFvhmL7OWQAAAAM"]
[Sat Aug 29 05:06:52.324009 2026] [core:error] [pid 1028675:tid 1028824] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.324023 2026] [core:error] [pid 1028675:tid 1028824] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.325125 2026] [security2:error] [pid 1018003:tid 1018239] [client 216.244.66.243:45856] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "scottportfolio.com"] [uri "/userfiles/5300-kakoi-sort-bolgarskogo-pertsa-luchshe-posadit.xml"] [unique_id "apK9TDAh5Y1i2tUxg4EEowAABg8"]
[Sat Aug 29 05:06:52.325245 2026] [security2:error] [pid 1018003:tid 1018239] [client 216.244.66.243:45856] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "scottportfolio.com"] [uri "/userfiles/5300-kakoi-sort-bolgarskogo-pertsa-luchshe-posadit.xml"] [unique_id "apK9TDAh5Y1i2tUxg4EEowAABg8"]
[Sat Aug 29 05:06:52.325688 2026] [core:error] [pid 1018003:tid 1018138] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.325700 2026] [core:error] [pid 1018003:tid 1018138] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.327316 2026] [security2:error] [pid 1028675:tid 1028873] [client 20.104.104.62:56359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/wp-gzone.php"] [unique_id "apK9TNdHPfW2QFvhmL7OXAAAAD8"]
[Sat Aug 29 05:06:52.356123 2026] [core:error] [pid 1028675:tid 1028895] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.356141 2026] [core:error] [pid 1028675:tid 1028895] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.363092 2026] [security2:error] [pid 1018003:tid 1018225] [client 158.23.147.79:48204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/cong.php"] [unique_id "apK9TDAh5Y1i2tUxg4EEpAAABgI"]
[Sat Aug 29 05:06:52.367129 2026] [security2:error] [pid 1028675:tid 1028933] [client 20.151.200.44:64845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/motu.php"] [unique_id "apK9TNdHPfW2QFvhmL7OYAAAAHs"]
[Sat Aug 29 05:06:52.376929 2026] [security2:error] [pid 1028675:tid 1028906] [client 68.155.159.216:51213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK9TNdHPfW2QFvhmL7OZAAAAGA"]
[Sat Aug 29 05:06:52.390466 2026] [security2:error] [pid 1018003:tid 1018207] [client 158.23.147.79:30544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK9TDAh5Y1i2tUxg4EEqwAABfA"]
[Sat Aug 29 05:06:52.390794 2026] [core:error] [pid 1028675:tid 1028881] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.390806 2026] [core:error] [pid 1028675:tid 1028881] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.391153 2026] [security2:error] [pid 1028675:tid 1028868] [client 20.104.104.62:27050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ngoiloi.nlvn.net"] [uri "/wp-content/themes/admin.php"] [unique_id "apK9TNdHPfW2QFvhmL7OaAAAADo"]
[Sat Aug 29 05:06:52.391155 2026] [core:error] [pid 1028675:tid 1028859] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.391166 2026] [core:error] [pid 1028675:tid 1028859] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.392505 2026] [core:error] [pid 1028675:tid 1028857] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.392517 2026] [core:error] [pid 1028675:tid 1028857] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.394309 2026] [core:error] [pid 1028675:tid 1028862] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.394336 2026] [core:error] [pid 1028675:tid 1028862] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.404940 2026] [security2:error] [pid 1018003:tid 1018027] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/terraform.tfstate.backup"] [unique_id "apK9TDAh5Y1i2tUxg4EErgAF_gY"]
[Sat Aug 29 05:06:52.413959 2026] [core:error] [pid 1018003:tid 1018139] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.413979 2026] [core:error] [pid 1018003:tid 1018139] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.414002 2026] [security2:error] [pid 1028675:tid 1028865] [client 158.158.54.35:17818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/admin.php"] [unique_id "apK9TNdHPfW2QFvhmL7ObQAAADc"]
[Sat Aug 29 05:06:52.416290 2026] [security2:error] [pid 1018003:tid 1018073] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/test/.env"] [unique_id "apK9TDAh5Y1i2tUxg4EEswAF_jQ"]
[Sat Aug 29 05:06:52.417411 2026] [security2:error] [pid 1028675:tid 1028911] [client 20.52.41.200:1242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/system_log.php"] [unique_id "apK9TNdHPfW2QFvhmL7ObwAAAGU"]
[Sat Aug 29 05:06:52.420427 2026] [security2:error] [pid 1018003:tid 1018177] [client 20.104.104.62:29206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.watercolorsbylola.allgooddays.org"] [uri "/wp-content/themes/admin.php"] [unique_id "apK9TDAh5Y1i2tUxg4EEtQAABdI"]
[Sat Aug 29 05:06:52.426874 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.220.204.93:52305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/xr.php"] [unique_id "apK9TDAh5Y1i2tUxg4EEtgAABcI"]
[Sat Aug 29 05:06:52.436088 2026] [core:error] [pid 1028675:tid 1028866] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.436103 2026] [core:error] [pid 1028675:tid 1028866] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.440715 2026] [security2:error] [pid 1028675:tid 1028872] [client 20.104.104.62:40220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/images/priv8.php"] [unique_id "apK9TNdHPfW2QFvhmL7OcgAAAD4"]
[Sat Aug 29 05:06:52.453859 2026] [core:error] [pid 1018003:tid 1018160] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.453875 2026] [core:error] [pid 1018003:tid 1018160] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.454326 2026] [core:error] [pid 1018003:tid 1018230] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.454335 2026] [core:error] [pid 1018003:tid 1018230] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.457269 2026] [core:error] [pid 1028675:tid 1028820] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.457282 2026] [core:error] [pid 1028675:tid 1028820] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.459205 2026] [core:error] [pid 1018003:tid 1018155] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.459219 2026] [core:error] [pid 1018003:tid 1018155] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.459505 2026] [security2:error] [pid 1028675:tid 1028829] [client 20.104.104.62:4861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/str.php"] [unique_id "apK9TNdHPfW2QFvhmL7OdQAAABM"]
[Sat Aug 29 05:06:52.460677 2026] [security2:error] [pid 1028675:tid 1028879] [client 20.48.250.41:21421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/w1px.php"] [unique_id "apK9TNdHPfW2QFvhmL7OdgAAAEU"]
[Sat Aug 29 05:06:52.462980 2026] [security2:error] [pid 1018003:tid 1018195] [client 20.104.104.62:60456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/gaje.php"] [unique_id "apK9TDAh5Y1i2tUxg4EEvwAABeQ"]
[Sat Aug 29 05:06:52.473449 2026] [core:error] [pid 1028675:tid 1028930] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.473465 2026] [core:error] [pid 1028675:tid 1028930] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.478988 2026] [security2:error] [pid 1018003:tid 1018130] [remote 74.7.227.154:41662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK9TDAh5Y1i2tUxg4EEwAAGLG0"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwp-easycart%2Fadmin%2Felementor
[Sat Aug 29 05:06:52.514912 2026] [security2:error] [pid 1028675:tid 1028899] [client 4.205.62.107:55975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/xve22.php"] [unique_id "apK9TNdHPfW2QFvhmL7OfAAAAFk"]
[Sat Aug 29 05:06:52.517896 2026] [security2:error] [pid 1028675:tid 1028849] [client 20.151.200.44:61327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/wefile.php"] [unique_id "apK9TNdHPfW2QFvhmL7OfQAAACc"]
[Sat Aug 29 05:06:52.541907 2026] [security2:error] [pid 1028675:tid 1028917] [client 68.155.159.216:51208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-includes/index.php"] [unique_id "apK9TNdHPfW2QFvhmL7OfwAAAGs"]
[Sat Aug 29 05:06:52.545695 2026] [autoindex:error] [pid 1028675:tid 1028853] [client 20.63.219.114:0] AH01276: Cannot serve directory /home2/davidsea/public_html/travelcrazed/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:06:52.547310 2026] [core:error] [pid 1028675:tid 1028853] [client 20.63.219.114:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.564130 2026] [security2:error] [pid 1028675:tid 1028919] [client 20.220.204.93:50789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/h02ugyh.php"] [unique_id "apK9TNdHPfW2QFvhmL7OgQAAAG0"]
[Sat Aug 29 05:06:52.564593 2026] [security2:error] [pid 1018003:tid 1018206] [client 158.158.54.35:15192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/zoom1.php"] [unique_id "apK9TDAh5Y1i2tUxg4EEwwAABe8"]
[Sat Aug 29 05:06:52.568290 2026] [security2:error] [pid 1018003:tid 1018128] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/v1/.env"] [unique_id "apK9TDAh5Y1i2tUxg4EExQAGEGs"]
[Sat Aug 29 05:06:52.581047 2026] [security2:error] [pid 1018003:tid 1018137] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/user/.env"] [unique_id "apK9TDAh5Y1i2tUxg4EEyQAGEHQ"]
[Sat Aug 29 05:06:52.583614 2026] [security2:error] [pid 1018003:tid 1018277] [client 20.104.104.62:27522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ngoiloi.nlvn.net"] [uri "/.well-known/logs233/index.php"] [unique_id "apK9TDAh5Y1i2tUxg4EEygAABjU"]
[Sat Aug 29 05:06:52.584021 2026] [security2:error] [pid 1028675:tid 1028860] [client 20.151.200.44:47322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/lte7.php"] [unique_id "apK9TNdHPfW2QFvhmL7OggAAADI"]
[Sat Aug 29 05:06:52.584554 2026] [security2:error] [pid 1028675:tid 1028887] [client 168.107.94.195:63247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9TNdHPfW2QFvhmL7OgwAAAE0"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:52.585646 2026] [security2:error] [pid 1018003:tid 1018183] [client 20.104.104.62:64676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/mega.php"] [unique_id "apK9TDAh5Y1i2tUxg4EEywAABdg"]
[Sat Aug 29 05:06:52.603679 2026] [security2:error] [pid 1018003:tid 1018122] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/v2/.env"] [unique_id "apK9TDAh5Y1i2tUxg4EEzAAGEGU"]
[Sat Aug 29 05:06:52.610094 2026] [security2:error] [pid 1018003:tid 1018179] [client 20.104.49.130:52496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.carlosmua.com"] [uri "/menu.php"] [unique_id "apK9TDAh5Y1i2tUxg4EEzgAABdQ"]
[Sat Aug 29 05:06:52.615342 2026] [security2:error] [pid 1028675:tid 1028828] [client 20.104.104.62:29244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.watercolorsbylola.allgooddays.org"] [uri "/wp-content/sallu.php"] [unique_id "apK9TNdHPfW2QFvhmL7OiQAAABI"]
[Sat Aug 29 05:06:52.616483 2026] [security2:error] [pid 1018003:tid 1018133] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/v3/.env"] [unique_id "apK9TDAh5Y1i2tUxg4EEzwAGEHA"]
[Sat Aug 29 05:06:52.617161 2026] [security2:error] [pid 1018003:tid 1018217] [client 20.104.104.62:42702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/wp-admin/zwso.php"] [unique_id "apK9TDAh5Y1i2tUxg4EE0AAABfo"]
[Sat Aug 29 05:06:52.621275 2026] [core:error] [pid 1028675:tid 1028893] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.621289 2026] [core:error] [pid 1028675:tid 1028893] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.624191 2026] [core:error] [pid 1028675:tid 1028871] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.624204 2026] [core:error] [pid 1028675:tid 1028871] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.635976 2026] [security2:error] [pid 1018003:tid 1018169] [client 158.23.147.79:53823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-content/cong.php"] [unique_id "apK9TDAh5Y1i2tUxg4EE0wAABco"]
[Sat Aug 29 05:06:52.637609 2026] [core:error] [pid 1018003:tid 1018202] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.637622 2026] [core:error] [pid 1018003:tid 1018202] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.645644 2026] [security2:error] [pid 1028675:tid 1028839] [client 20.48.250.41:21488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/to.php"] [unique_id "apK9TNdHPfW2QFvhmL7OjgAAAB0"]
[Sat Aug 29 05:06:52.673497 2026] [core:error] [pid 1018003:tid 1018191] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.673517 2026] [core:error] [pid 1018003:tid 1018191] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.684233 2026] [security2:error] [pid 1028675:tid 1028856] [client 20.151.200.44:64197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/EM.php"] [unique_id "apK9TNdHPfW2QFvhmL7OkQAAAC4"]
[Sat Aug 29 05:06:52.695054 2026] [core:error] [pid 1018003:tid 1018123] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.695069 2026] [core:error] [pid 1018003:tid 1018123] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.698340 2026] [core:error] [pid 1018003:tid 1018021] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.698479 2026] [core:error] [pid 1018003:tid 1018021] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.706319 2026] [security2:error] [pid 1028675:tid 1028916] [client 103.240.76.112:42589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK9TNdHPfW2QFvhmL7OlAAAAGo"]
[Sat Aug 29 05:06:52.706432 2026] [security2:error] [pid 1028675:tid 1028916] [client 103.240.76.112:42589] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK9TNdHPfW2QFvhmL7OlAAAAGo"]
[Sat Aug 29 05:06:52.707640 2026] [security2:error] [pid 1018003:tid 1018184] [client 20.220.204.93:52251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/xxw.php"] [unique_id "apK9TDAh5Y1i2tUxg4EE4gAABdk"]
[Sat Aug 29 05:06:52.717810 2026] [security2:error] [pid 1018003:tid 1018196] [client 20.104.104.62:64673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/ww3.php"] [unique_id "apK9TDAh5Y1i2tUxg4EE5QAABeU"]
[Sat Aug 29 05:06:52.718014 2026] [security2:error] [pid 1028675:tid 1028861] [client 20.196.209.81:17888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/wxo.php"] [unique_id "apK9TNdHPfW2QFvhmL7OlgAAADM"]
[Sat Aug 29 05:06:52.731428 2026] [core:error] [pid 1018003:tid 1018185] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.731447 2026] [core:error] [pid 1018003:tid 1018185] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.733537 2026] [core:error] [pid 1018003:tid 1018234] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.733556 2026] [core:error] [pid 1018003:tid 1018234] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.734129 2026] [core:error] [pid 1028675:tid 1028933] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.734151 2026] [core:error] [pid 1028675:tid 1028933] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.736178 2026] [core:error] [pid 1018003:tid 1018047] [remote 45.148.10.62:49802] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.736651 2026] [core:error] [pid 1018003:tid 1018250] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.736663 2026] [core:error] [pid 1018003:tid 1018250] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.739203 2026] [core:error] [pid 1018003:tid 1018203] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.739214 2026] [core:error] [pid 1018003:tid 1018203] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.747944 2026] [security2:error] [pid 1018003:tid 1018155] [client 20.104.104.62:20695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/Xploit.php"] [unique_id "apK9TDAh5Y1i2tUxg4EE7QAABbw"]
[Sat Aug 29 05:06:52.760212 2026] [security2:error] [pid 1018003:tid 1018267] [client 158.23.147.79:26513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-includes/css/index.php"] [unique_id "apK9TDAh5Y1i2tUxg4EE7wAABis"]
[Sat Aug 29 05:06:52.764245 2026] [security2:error] [pid 1018003:tid 1018224] [client 40.83.93.50:7743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/wp-contentt.php"] [unique_id "apK9TDAh5Y1i2tUxg4EE8AAABgE"]
[Sat Aug 29 05:06:52.765737 2026] [security2:error] [pid 1018003:tid 1018221] [client 158.23.147.79:17439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/file5.php"] [unique_id "apK9TDAh5Y1i2tUxg4EE8QAABf4"]
[Sat Aug 29 05:06:52.768810 2026] [security2:error] [pid 1018003:tid 1018268] [client 20.104.104.62:52088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/Contrller.php"] [unique_id "apK9TDAh5Y1i2tUxg4EE8gAABiw"]
[Sat Aug 29 05:06:52.776342 2026] [security2:error] [pid 1018003:tid 1018194] [client 20.104.104.62:27015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ngoiloi.nlvn.net"] [uri "/as.php"] [unique_id "apK9TDAh5Y1i2tUxg4EE9QAABeM"]
[Sat Aug 29 05:06:52.779049 2026] [core:error] [pid 1018003:tid 1018124] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.779063 2026] [core:error] [pid 1018003:tid 1018124] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.779504 2026] [core:error] [pid 1018003:tid 1018046] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.779515 2026] [core:error] [pid 1018003:tid 1018046] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.780981 2026] [core:error] [pid 1018003:tid 1018033] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.780993 2026] [core:error] [pid 1018003:tid 1018033] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.787308 2026] [security2:error] [pid 1028675:tid 1028889] [client 213.202.253.4:64638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bv-place.com"] [uri "/wp-content/txets.php"] [unique_id "apK9TNdHPfW2QFvhmL7OmQAAAE8"], referer: www.google.com
[Sat Aug 29 05:06:52.799130 2026] [security2:error] [pid 1028675:tid 1028868] [client 20.48.250.41:21499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/thui.php"] [unique_id "apK9TNdHPfW2QFvhmL7OmgAAADo"]
[Sat Aug 29 05:06:52.800210 2026] [core:error] [pid 1018003:tid 1018143] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.800223 2026] [core:error] [pid 1018003:tid 1018143] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.811574 2026] [security2:error] [pid 1018003:tid 1018189] [client 20.104.104.62:28959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.watercolorsbylola.allgooddays.org"] [uri "/0.php"] [unique_id "apK9TDAh5Y1i2tUxg4EE_wAABd4"]
[Sat Aug 29 05:06:52.817758 2026] [core:error] [pid 1018003:tid 1018217] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.817772 2026] [core:error] [pid 1018003:tid 1018217] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.836820 2026] [security2:error] [pid 1028675:tid 1028924] [client 20.197.61.180:8952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/gecko-new.php"] [unique_id "apK9TNdHPfW2QFvhmL7OnQAAAHI"]
[Sat Aug 29 05:06:52.838094 2026] [security2:error] [pid 1018003:tid 1018246] [client 68.155.159.216:18343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-admin/dropdown.php"] [unique_id "apK9TDAh5Y1i2tUxg4EFAQAABhY"]
[Sat Aug 29 05:06:52.846220 2026] [security2:error] [pid 1018003:tid 1018202] [client 20.104.104.62:43024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/sko.php"] [unique_id "apK9TDAh5Y1i2tUxg4EFAgAABes"]
[Sat Aug 29 05:06:52.854099 2026] [core:error] [pid 1018003:tid 1018198] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.854115 2026] [core:error] [pid 1018003:tid 1018198] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.855900 2026] [security2:error] [pid 1028675:tid 1028935] [client 20.151.200.44:65503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/ca4.php"] [unique_id "apK9TNdHPfW2QFvhmL7OngAAAH0"]
[Sat Aug 29 05:06:52.857219 2026] [security2:error] [pid 1018003:tid 1018034] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/var/www/.env"] [unique_id "apK9TDAh5Y1i2tUxg4EFBAAGKQ0"]
[Sat Aug 29 05:06:52.860218 2026] [security2:error] [pid 1028675:tid 1028832] [client 4.205.62.107:9176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/olfclass.php"] [unique_id "apK9TNdHPfW2QFvhmL7OoAAAABY"]
[Sat Aug 29 05:06:52.860846 2026] [core:error] [pid 1028675:tid 1028892] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.860846 2026] [security2:error] [pid 1018003:tid 1018041] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/var/www/html/.env"] [unique_id "apK9TDAh5Y1i2tUxg4EFBQAGKRQ"]
[Sat Aug 29 05:06:52.860860 2026] [core:error] [pid 1028675:tid 1028892] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.860864 2026] [security2:error] [pid 1028675:tid 1028843] [client 68.155.159.216:64448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/file88.php"] [unique_id "apK9TNdHPfW2QFvhmL7OoQAAACE"]
[Sat Aug 29 05:06:52.862627 2026] [security2:error] [pid 1018003:tid 1018153] [client 68.155.159.216:16375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/index/function.php"] [unique_id "apK9TDAh5Y1i2tUxg4EFBgAABbo"]
[Sat Aug 29 05:06:52.863265 2026] [security2:error] [pid 1018003:tid 1018152] [client 20.220.204.93:50758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/bolt.php"] [unique_id "apK9TDAh5Y1i2tUxg4EFBwAABbk"]
[Sat Aug 29 05:06:52.866856 2026] [security2:error] [pid 1018003:tid 1018174] [client 158.158.54.35:10358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/php8.php"] [unique_id "apK9TDAh5Y1i2tUxg4EFCQAABc8"]
[Sat Aug 29 05:06:52.868666 2026] [security2:error] [pid 1028675:tid 1028827] [client 20.52.41.200:1773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/24.php"] [unique_id "apK9TNdHPfW2QFvhmL7OowAAABE"]
[Sat Aug 29 05:06:52.881831 2026] [core:error] [pid 1028675:tid 1028912] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.881845 2026] [core:error] [pid 1028675:tid 1028912] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.886898 2026] [security2:error] [pid 1028675:tid 1028884] [client 4.205.62.107:22373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/konfig.php"] [unique_id "apK9TNdHPfW2QFvhmL7OqAAAAEo"]
[Sat Aug 29 05:06:52.890233 2026] [security2:error] [pid 1018003:tid 1018037] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/web/.env"] [unique_id "apK9TDAh5Y1i2tUxg4EFDAAGKRA"]
[Sat Aug 29 05:06:52.891016 2026] [core:error] [pid 1018003:tid 1018135] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.891030 2026] [core:error] [pid 1018003:tid 1018135] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.891779 2026] [core:error] [pid 1018003:tid 1018131] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.891793 2026] [core:error] [pid 1018003:tid 1018131] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.892798 2026] [core:error] [pid 1018003:tid 1018102] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.892810 2026] [core:error] [pid 1018003:tid 1018102] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.897683 2026] [security2:error] [pid 1028675:tid 1028831] [client 158.23.147.79:24453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-content/x.php"] [unique_id "apK9TNdHPfW2QFvhmL7OqgAAABU"]
[Sat Aug 29 05:06:52.917882 2026] [core:error] [pid 1018003:tid 1018039] [remote 45.148.10.62:49802] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.917909 2026] [core:error] [pid 1018003:tid 1018039] [remote 45.148.10.62:49802] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.920345 2026] [core:error] [pid 1018003:tid 1018025] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.920377 2026] [core:error] [pid 1018003:tid 1018025] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.940452 2026] [security2:error] [pid 1028675:tid 1028812] [client 158.23.147.79:50174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK9TNdHPfW2QFvhmL7OrQAAAAI"]
[Sat Aug 29 05:06:52.943180 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.151.200.44:46653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/tanjiro.php"] [unique_id "apK9TDAh5Y1i2tUxg4EFEgAABcI"]
[Sat Aug 29 05:06:52.963105 2026] [core:error] [pid 1028675:tid 1028829] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.963124 2026] [core:error] [pid 1028675:tid 1028829] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.963885 2026] [security2:error] [pid 1028675:tid 1028899] [client 168.107.94.195:63556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9TNdHPfW2QFvhmL7OrwAAAFk"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:52.974535 2026] [security2:error] [pid 1018003:tid 1018188] [client 68.155.159.216:33705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK9TDAh5Y1i2tUxg4EFFAAABd0"]
[Sat Aug 29 05:06:52.980589 2026] [security2:error] [pid 1028675:tid 1028848] [client 68.155.159.216:6063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK9TNdHPfW2QFvhmL7OtgAAACY"]
[Sat Aug 29 05:06:52.989671 2026] [core:error] [pid 1018003:tid 1018043] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.989689 2026] [core:error] [pid 1018003:tid 1018043] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.990141 2026] [core:error] [pid 1018003:tid 1018054] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.990155 2026] [core:error] [pid 1018003:tid 1018054] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.990205 2026] [core:error] [pid 1018003:tid 1018044] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.990215 2026] [core:error] [pid 1018003:tid 1018044] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:52.996379 2026] [security2:error] [pid 1018003:tid 1018200] [client 20.104.104.62:4830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/zoz.php"] [unique_id "apK9TDAh5Y1i2tUxg4EFGgAABek"]
[Sat Aug 29 05:06:53.004426 2026] [security2:error] [pid 1018003:tid 1018239] [client 20.220.204.93:41804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/rtx.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFGwAABg8"]
[Sat Aug 29 05:06:53.004427 2026] [security2:error] [pid 1028675:tid 1028837] [client 20.104.104.62:29234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.watercolorsbylola.allgooddays.org"] [uri "/aa.php"] [unique_id "apK9TddHPfW2QFvhmL7OuQAAABs"]
[Sat Aug 29 05:06:53.006121 2026] [security2:error] [pid 1028675:tid 1028837] [client 20.48.250.41:21468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/Jcrop.php"] [unique_id "apK9TddHPfW2QFvhmL7OugAAABs"]
[Sat Aug 29 05:06:53.008787 2026] [security2:error] [pid 1018003:tid 1018175] [client 34.7.40.70:44734] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/web.config"] [unique_id "apK9TTAh5Y1i2tUxg4EFHAAABdA"]
[Sat Aug 29 05:06:53.010363 2026] [cgid:error] [pid 1028675:tid 1028858] [client 34.7.40.70:44740] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:53.011793 2026] [security2:error] [pid 1018003:tid 1018218] [client 20.104.104.62:23405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/Zeiss.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFHQAABfs"]
[Sat Aug 29 05:06:53.017397 2026] [cgid:error] [pid 1018003:tid 1018275] [client 34.7.40.70:44738] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:53.018111 2026] [cgid:error] [pid 1028675:tid 1028865] [client 34.7.40.70:44756] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:53.018282 2026] [cgid:error] [pid 1028675:tid 1028886] [client 34.7.40.70:44754] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:53.018381 2026] [security2:error] [pid 1028675:tid 1028886] [client 34.7.40.70:44754] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/404.shtml"] [unique_id "apK9TddHPfW2QFvhmL7OvQAAAEw"]
[Sat Aug 29 05:06:53.020973 2026] [cgid:error] [pid 1028675:tid 1028932] [client 34.7.40.70:44784] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:53.022082 2026] [security2:error] [pid 1028675:tid 1028905] [client 158.158.54.35:20333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/txets.php"] [unique_id "apK9TddHPfW2QFvhmL7OwAAAAF8"]
[Sat Aug 29 05:06:53.022451 2026] [cgid:error] [pid 1028675:tid 1028911] [client 34.7.40.70:44766] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:53.022900 2026] [cgid:error] [pid 1018003:tid 1018184] [client 34.7.40.70:44774] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:53.024566 2026] [cgid:error] [pid 1028675:tid 1028835] [client 34.7.40.70:44778] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:53.026103 2026] [cgid:error] [pid 1028675:tid 1028855] [client 34.7.40.70:44794] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:53.039286 2026] [security2:error] [pid 1018003:tid 1018155] [client 158.23.147.79:30542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFIwAABbw"]
[Sat Aug 29 05:06:53.039610 2026] [security2:error] [pid 1018003:tid 1018277] [client 60.243.207.176:61313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFIQAABjU"]
[Sat Aug 29 05:06:53.039686 2026] [security2:error] [pid 1018003:tid 1018277] [client 60.243.207.176:61313] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFIQAABjU"]
[Sat Aug 29 05:06:53.040855 2026] [security2:error] [pid 1018003:tid 1018231] [client 34.7.40.70:44800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.40.7.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/configuration.php.bak"] [unique_id "apK9TTAh5Y1i2tUxg4EFJQAABgc"]
[Sat Aug 29 05:06:53.041067 2026] [cgid:error] [pid 1028675:tid 1028825] [client 34.7.40.70:44796] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:53.041088 2026] [cgid:error] [pid 1018003:tid 1018196] [client 34.7.40.70:44820] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:53.046568 2026] [cgid:error] [pid 1028675:tid 1028897] [client 34.7.40.70:44816] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:53.048563 2026] [cgid:error] [pid 1018003:tid 1018207] [client 34.7.40.70:44832] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:53.054706 2026] [core:error] [pid 1028675:tid 1028876] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.054720 2026] [core:error] [pid 1028675:tid 1028876] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.057847 2026] [cgid:error] [pid 1028675:tid 1028842] [client 34.7.40.70:44834] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:53.062748 2026] [core:error] [pid 1028675:tid 1028860] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.062770 2026] [core:error] [pid 1028675:tid 1028860] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.065301 2026] [core:error] [pid 1018003:tid 1018136] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.065323 2026] [core:error] [pid 1018003:tid 1018136] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.067457 2026] [security2:error] [pid 1018003:tid 1018072] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.fastnetus.com"] [uri "/wp-config.php.bak"] [unique_id "apK9TTAh5Y1i2tUxg4EFLwAGHzM"]
[Sat Aug 29 05:06:53.068899 2026] [security2:error] [pid 1018003:tid 1018050] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/website/.env"] [unique_id "apK9TTAh5Y1i2tUxg4EFLgAGHx0"]
[Sat Aug 29 05:06:53.076367 2026] [security2:error] [pid 1018003:tid 1018060] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.fastnetus.com"] [uri "/wp-config.php.new"] [unique_id "apK9TTAh5Y1i2tUxg4EFMQAGHyc"]
[Sat Aug 29 05:06:53.077611 2026] [security2:error] [pid 1028675:tid 1028890] [client 158.23.147.79:35729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-content/admin.php"] [unique_id "apK9TddHPfW2QFvhmL7OzwAAAFA"]
[Sat Aug 29 05:06:53.085262 2026] [security2:error] [pid 1018003:tid 1018170] [client 20.151.200.44:62007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/x0x.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFMwAABcs"]
[Sat Aug 29 05:06:53.085624 2026] [security2:error] [pid 1018003:tid 1018024] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.fastnetus.com"] [uri "/wp-config.php.old"] [unique_id "apK9TTAh5Y1i2tUxg4EFNAAGHwM"]
[Sat Aug 29 05:06:53.101519 2026] [security2:error] [pid 1028675:tid 1028877] [client 158.23.184.117:46938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dontbenicemovie.wanderlustpictures.com"] [uri "/wp-mail.php"] [unique_id "apK9TddHPfW2QFvhmL7O0AAAAEM"]
[Sat Aug 29 05:06:53.119442 2026] [security2:error] [pid 1028675:tid 1028891] [client 20.104.104.62:27033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ngoiloi.nlvn.net"] [uri "/wp-content/uploads/index.php"] [unique_id "apK9TddHPfW2QFvhmL7O0QAAAFE"]
[Sat Aug 29 05:06:53.121914 2026] [core:error] [pid 1018003:tid 1018087] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.121930 2026] [core:error] [pid 1018003:tid 1018087] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.135133 2026] [security2:error] [pid 1018003:tid 1018230] [client 20.196.209.81:9447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/as.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFOAAABgY"]
[Sat Aug 29 05:06:53.138316 2026] [security2:error] [pid 1018003:tid 1018169] [client 20.104.104.62:4120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/mmm.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFPQAABco"]
[Sat Aug 29 05:06:53.138512 2026] [security2:error] [pid 1018003:tid 1018088] [remote 93.123.109.228:43512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/wp-content/mysql.sql"] [unique_id "apK9TTAh5Y1i2tUxg4EFPAAGH0M"]
[Sat Aug 29 05:06:53.139170 2026] [core:error] [pid 1018003:tid 1018049] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.139180 2026] [core:error] [pid 1018003:tid 1018049] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.139922 2026] [core:error] [pid 1018003:tid 1018134] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.139938 2026] [core:error] [pid 1018003:tid 1018134] [remote 93.123.109.228:43512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.139943 2026] [core:error] [pid 1018003:tid 1018244] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.139960 2026] [core:error] [pid 1018003:tid 1018244] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.141285 2026] [core:error] [pid 1018003:tid 1018246] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.141301 2026] [core:error] [pid 1018003:tid 1018246] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.145574 2026] [core:error] [pid 1028675:tid 1028880] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.145575 2026] [core:error] [pid 1028675:tid 1028894] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.145586 2026] [core:error] [pid 1028675:tid 1028880] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.145592 2026] [core:error] [pid 1028675:tid 1028894] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.152829 2026] [security2:error] [pid 1018003:tid 1018038] [remote 45.148.10.62:49802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ninaanddon.strangeworx.com"] [uri "/wp-login.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFNgAF3hE"]
[Sat Aug 29 05:06:53.155021 2026] [security2:error] [pid 1018003:tid 1018213] [client 4.205.62.107:22417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/setup-config.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFPwAABfY"]
[Sat Aug 29 05:06:53.162878 2026] [security2:error] [pid 1018003:tid 1018243] [client 158.23.184.117:19282] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "yeselespinoza.andresortega.org"] [uri "/1.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFQQAABhM"]
[Sat Aug 29 05:06:53.162969 2026] [security2:error] [pid 1018003:tid 1018243] [client 158.23.184.117:19282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/1.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFQQAABhM"]
[Sat Aug 29 05:06:53.162979 2026] [core:error] [pid 1018003:tid 1018167] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.162997 2026] [core:error] [pid 1018003:tid 1018167] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.164501 2026] [security2:error] [pid 1018003:tid 1018240] [client 4.205.62.107:58472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFQgAABhA"]
[Sat Aug 29 05:06:53.168324 2026] [security2:error] [pid 1018003:tid 1018186] [client 4.205.62.107:65431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/upload.form.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFQwAABds"]
[Sat Aug 29 05:06:53.183971 2026] [security2:error] [pid 1018003:tid 1018217] [client 158.23.184.117:46986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "diamondswindowtinting.enproftp.com"] [uri "/adminfuns.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFRAAABfo"]
[Sat Aug 29 05:06:53.183995 2026] [security2:error] [pid 1018003:tid 1018152] [client 20.220.204.93:50788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/ckk.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFRQAABbk"]
[Sat Aug 29 05:06:53.210698 2026] [cgid:error] [pid 1018003:tid 1018252] [client 20.104.104.62:28829] AH01265: stderr from /home1/allgoodd/public_html/watercolorsbylola/cgi-bin/: attempt to invoke directory as script
[Sat Aug 29 05:06:53.217582 2026] [security2:error] [pid 1028675:tid 1028851] [client 4.205.62.107:22438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/debuggen.php"] [unique_id "apK9TddHPfW2QFvhmL7O2AAAACk"]
[Sat Aug 29 05:06:53.227687 2026] [security2:error] [pid 1018003:tid 1018153] [client 158.23.184.117:33941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/p.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFSAAABbo"]
[Sat Aug 29 05:06:53.231994 2026] [security2:error] [pid 1028675:tid 1028906] [client 158.23.147.79:38722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/packed.php"] [unique_id "apK9TddHPfW2QFvhmL7O2gAAAGA"]
[Sat Aug 29 05:06:53.233248 2026] [security2:error] [pid 1028675:tid 1028881] [client 158.23.147.79:32754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK9TddHPfW2QFvhmL7O2wAAAEc"]
[Sat Aug 29 05:06:53.236681 2026] [security2:error] [pid 1028675:tid 1028874] [client 20.48.250.41:21324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/ws58.php"] [unique_id "apK9TddHPfW2QFvhmL7O3AAAAEA"]
[Sat Aug 29 05:06:53.239277 2026] [security2:error] [pid 1018003:tid 1018250] [client 20.104.104.62:36959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/ww2.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFSwAABho"]
[Sat Aug 29 05:06:53.247224 2026] [cgid:error] [pid 1018003:tid 1018180] [client 158.23.184.117:46914] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/dontbenicemovie/404.shtml
[Sat Aug 29 05:06:53.257463 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.151.200.44:45962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/Rk41.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFTQAABcI"]
[Sat Aug 29 05:06:53.263772 2026] [security2:error] [pid 1028675:tid 1028868] [client 68.155.159.216:50290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/nf_tracking.php"] [unique_id "apK9TddHPfW2QFvhmL7O3QAAADo"]
[Sat Aug 29 05:06:53.268164 2026] [security2:error] [pid 1028675:tid 1028859] [client 20.104.49.130:46580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/bdroot.php"] [unique_id "apK9TddHPfW2QFvhmL7O3wAAADE"]
[Sat Aug 29 05:06:53.269297 2026] [core:error] [pid 1028675:tid 1028902] [client 20.52.41.200:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.269313 2026] [core:error] [pid 1028675:tid 1028902] [client 20.52.41.200:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.274907 2026] [security2:error] [pid 1018003:tid 1018175] [client 20.104.104.62:28829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.watercolorsbylola.allgooddays.org"] [uri "/file.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFTgAABdA"]
[Sat Aug 29 05:06:53.275262 2026] [security2:error] [pid 1028675:tid 1028924] [client 20.104.104.62:56368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/advanced.php"] [unique_id "apK9TddHPfW2QFvhmL7O4QAAAHI"]
[Sat Aug 29 05:06:53.276175 2026] [core:error] [pid 1028675:tid 1028857] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.276191 2026] [core:error] [pid 1028675:tid 1028857] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.294120 2026] [security2:error] [pid 1018003:tid 1018184] [client 158.23.184.117:46914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dontbenicemovie.wanderlustpictures.com"] [uri "/3.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFUAAABdk"]
[Sat Aug 29 05:06:53.306381 2026] [security2:error] [pid 1018003:tid 1018273] [client 158.23.184.117:19272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/10.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFUQAABjE"]
[Sat Aug 29 05:06:53.308063 2026] [fcgid:warn] [pid 1018003:tid 1018277] (70014)End of file found: [client 66.132.186.197:8382] mod_fcgid: can't get data from http client
[Sat Aug 29 05:06:53.310083 2026] [security2:error] [pid 1018003:tid 1018166] [client 40.83.93.50:7716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/theme.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFUwAABcc"]
[Sat Aug 29 05:06:53.313907 2026] [security2:error] [pid 1018003:tid 1018231] [client 20.220.204.93:52317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aztecalimpieza.com"] [uri "/R57.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFVQAABgc"]
[Sat Aug 29 05:06:53.314180 2026] [security2:error] [pid 1018003:tid 1018196] [client 20.151.200.44:64238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "livingthecode.org"] [uri "/fesa.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFVgAABeU"]
[Sat Aug 29 05:06:53.314327 2026] [cgid:error] [pid 1018003:tid 1018159] [client 20.52.41.200:1191] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/cpslggc/404.shtml
[Sat Aug 29 05:06:53.329386 2026] [security2:error] [pid 1018003:tid 1018218] [client 158.23.184.117:62273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "diamondswindowtinting.enproftp.com"] [uri "/403.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFWAAABfs"]
[Sat Aug 29 05:06:53.342803 2026] [security2:error] [pid 1028675:tid 1028917] [client 168.107.94.195:63801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9TddHPfW2QFvhmL7O4wAAAGs"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:53.360599 2026] [security2:error] [pid 1028675:tid 1028848] [client 93.123.109.228:52412] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK9TddHPfW2QFvhmL7O5AAAACY"]
[Sat Aug 29 05:06:53.367919 2026] [security2:error] [pid 1028675:tid 1028915] [client 158.23.184.117:34553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/php.php"] [unique_id "apK9TddHPfW2QFvhmL7O5gAAAGk"]
[Sat Aug 29 05:06:53.381069 2026] [security2:error] [pid 1028675:tid 1028840] [client 20.48.250.41:21394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/xs.php"] [unique_id "apK9TddHPfW2QFvhmL7O6QAAAB4"]
[Sat Aug 29 05:06:53.392799 2026] [security2:error] [pid 1018003:tid 1018221] [client 20.104.104.62:27031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ngoiloi.nlvn.net"] [uri "/abcd.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFWwAABf4"]
[Sat Aug 29 05:06:53.403150 2026] [security2:error] [pid 1028675:tid 1028837] [client 103.168.67.159:53248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 159.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "naturalkneads.com"] [uri "/wp/index.php"] [unique_id "apK9TddHPfW2QFvhmL7O6gAAABs"], referer: https://naturalkneads.com/wp/wp-admin/
[Sat Aug 29 05:06:53.403780 2026] [security2:error] [pid 1018003:tid 1018202] [client 20.104.104.62:43034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/blox.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFXAAABes"]
[Sat Aug 29 05:06:53.420777 2026] [security2:error] [pid 1018003:tid 1018213] [client 68.155.159.216:49243] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/1.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFXQAABfY"]
[Sat Aug 29 05:06:53.420868 2026] [security2:error] [pid 1018003:tid 1018213] [client 68.155.159.216:49243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/1.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFXQAABfY"]
[Sat Aug 29 05:06:53.433066 2026] [security2:error] [pid 1018003:tid 1018243] [client 93.123.109.228:52464] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK9TTAh5Y1i2tUxg4EFXgAABhM"]
[Sat Aug 29 05:06:53.439499 2026] [security2:error] [pid 1028675:tid 1028853] [client 158.23.184.117:62272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dontbenicemovie.wanderlustpictures.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "apK9TddHPfW2QFvhmL7O6wAAACs"]
[Sat Aug 29 05:06:53.448655 2026] [security2:error] [pid 1018003:tid 1018156] [client 158.23.184.117:19268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/100.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFXwAABb0"]
[Sat Aug 29 05:06:53.457737 2026] [security2:error] [pid 1018003:tid 1018225] [client 93.123.109.228:52476] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(\\\\/\\\\*\\\\!? ?(?:select|grant|delete|insert|drop|alter|replace|truncate|update|create|rename|describe|union|concat|group_concat))" at REQUEST_FILENAME. [file "/opt/mod_security/hg_rules.conf"] [line "1019"] [id "9000042"] [rev "2.2.2"] [msg "SQL Comment Sequence Detected."] [data "/*update"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/*update.cgi*"] [unique_id "apK9TTAh5Y1i2tUxg4EFYAAABgI"]
[Sat Aug 29 05:06:53.460619 2026] [security2:error] [pid 1018003:tid 1018198] [client 20.52.41.200:1191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-content/plugins/index.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFYQAABec"]
[Sat Aug 29 05:06:53.472194 2026] [security2:error] [pid 1018003:tid 1018217] [client 158.23.147.79:48354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-includes/js/index.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFYwAABfo"]
[Sat Aug 29 05:06:53.473727 2026] [core:error] [pid 1028675:tid 1028878] [client 158.158.54.35:15211] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.473749 2026] [core:error] [pid 1028675:tid 1028878] [client 158.158.54.35:15211] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.474418 2026] [security2:error] [pid 1028675:tid 1028858] [client 20.104.104.62:29190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.watercolorsbylola.allgooddays.org"] [uri "/sc.php"] [unique_id "apK9TddHPfW2QFvhmL7O8AAAADA"]
[Sat Aug 29 05:06:53.487162 2026] [security2:error] [pid 1018003:tid 1018161] [client 158.158.54.35:10343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/install.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFcQAABcI"]
[Sat Aug 29 05:06:53.497203 2026] [security2:error] [pid 1018003:tid 1018200] [client 158.23.147.79:30541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-login.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFdgAABek"]
[Sat Aug 29 05:06:53.512589 2026] [security2:error] [pid 1028675:tid 1028825] [client 158.23.184.117:33932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/past.php"] [unique_id "apK9TddHPfW2QFvhmL7O_QAAAA8"]
[Sat Aug 29 05:06:53.517837 2026] [security2:error] [pid 1028675:tid 1028842] [client 20.48.250.41:21412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/zu.php"] [unique_id "apK9TddHPfW2QFvhmL7O_wAAACA"]
[Sat Aug 29 05:06:53.527291 2026] [security2:error] [pid 1028675:tid 1028862] [client 158.23.184.117:46952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "diamondswindowtinting.enproftp.com"] [uri "/.trash7206/index.php"] [unique_id "apK9TddHPfW2QFvhmL7PAQAAADQ"]
[Sat Aug 29 05:06:53.535498 2026] [security2:error] [pid 1028675:tid 1028828] [client 20.104.104.62:4842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/kcs.php"] [unique_id "apK9TddHPfW2QFvhmL7PAgAAABI"]
[Sat Aug 29 05:06:53.539768 2026] [security2:error] [pid 1028675:tid 1028893] [client 93.123.109.228:52440] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/.env"] [unique_id "apK9TddHPfW2QFvhmL7PAwAAAFM"]
[Sat Aug 29 05:06:53.554800 2026] [security2:error] [pid 1028675:tid 1028925] [client 93.123.109.228:52428] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/laravel/app/.env"] [unique_id "apK9TddHPfW2QFvhmL7PBAAAAHM"]
[Sat Aug 29 05:06:53.570067 2026] [security2:error] [pid 1028675:tid 1028920] [client 20.196.209.81:17872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/room.php"] [unique_id "apK9TddHPfW2QFvhmL7PBQAAAG4"]
[Sat Aug 29 05:06:53.574237 2026] [security2:error] [pid 1018003:tid 1018266] [client 20.151.200.44:46655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/7logs.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFeQAABio"]
[Sat Aug 29 05:06:53.582587 2026] [security2:error] [pid 1028675:tid 1028908] [client 20.197.61.180:7584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/wp-admin.php"] [unique_id "apK9TddHPfW2QFvhmL7PBgAAAGI"]
[Sat Aug 29 05:06:53.585558 2026] [cgid:error] [pid 1018003:tid 1018236] [client 158.23.184.117:46930] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/dontbenicemovie/404.shtml
[Sat Aug 29 05:06:53.588254 2026] [security2:error] [pid 1018003:tid 1018203] [client 20.104.104.62:27058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ngoiloi.nlvn.net"] [uri "/index/function.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFfQAABew"]
[Sat Aug 29 05:06:53.590444 2026] [security2:error] [pid 1018003:tid 1018273] [client 93.123.109.228:52516] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK9TTAh5Y1i2tUxg4EFfgAABjE"]
[Sat Aug 29 05:06:53.593185 2026] [security2:error] [pid 1018003:tid 1018275] [client 158.23.184.117:19273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/2.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFfwAABjM"]
[Sat Aug 29 05:06:53.612938 2026] [security2:error] [pid 1028675:tid 1028824] [client 20.104.104.62:23406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/anz.php"] [unique_id "apK9TddHPfW2QFvhmL7PBwAAAA4"]
[Sat Aug 29 05:06:53.616027 2026] [security2:error] [pid 1028675:tid 1028830] [client 20.104.104.62:64705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wso2.5.1.php"] [unique_id "apK9TddHPfW2QFvhmL7PCAAAABQ"]
[Sat Aug 29 05:06:53.632128 2026] [security2:error] [pid 1018003:tid 1018195] [client 158.23.184.117:46930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dontbenicemovie.wanderlustpictures.com"] [uri "/wp-admin/css/admin.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFgQAABeQ"]
[Sat Aug 29 05:06:53.649469 2026] [security2:error] [pid 1018003:tid 1018170] [client 93.123.109.228:52492] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/.env.backup"] [unique_id "apK9TTAh5Y1i2tUxg4EFggAABcs"]
[Sat Aug 29 05:06:53.658347 2026] [security2:error] [pid 1028675:tid 1028871] [client 4.205.62.107:55987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/06.php"] [unique_id "apK9TddHPfW2QFvhmL7PDAAAAD0"]
[Sat Aug 29 05:06:53.659388 2026] [security2:error] [pid 1028675:tid 1028866] [client 158.23.184.117:33945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/root.php"] [unique_id "apK9TddHPfW2QFvhmL7PDQAAADg"]
[Sat Aug 29 05:06:53.664154 2026] [security2:error] [pid 1018003:tid 1018246] [client 93.123.109.228:52506] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/.env.bak"] [unique_id "apK9TTAh5Y1i2tUxg4EFgwAABhY"]
[Sat Aug 29 05:06:53.673783 2026] [security2:error] [pid 1018003:tid 1018218] [client 158.23.184.117:47032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "diamondswindowtinting.enproftp.com"] [uri "/.trash7206/admin.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFhgAABfs"]
[Sat Aug 29 05:06:53.675567 2026] [security2:error] [pid 1018003:tid 1018166] [client 20.104.104.62:29223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.watercolorsbylola.allgooddays.org"] [uri "/tinyfilemanager.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFhwAABcc"]
[Sat Aug 29 05:06:53.680004 2026] [security2:error] [pid 1028675:tid 1028937] [client 20.104.104.62:57047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/wsz.php"] [unique_id "apK9TddHPfW2QFvhmL7PDgAAAH8"]
[Sat Aug 29 05:06:53.696803 2026] [security2:error] [pid 1018003:tid 1018186] [client 20.48.250.41:21450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/lanka.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFiwAABds"]
[Sat Aug 29 05:06:53.724733 2026] [security2:error] [pid 1018003:tid 1018191] [client 168.107.94.195:64100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFjQAABeA"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:53.743894 2026] [security2:error] [pid 1018003:tid 1018156] [client 158.23.184.117:19381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/222.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFkAAABb0"]
[Sat Aug 29 05:06:53.747119 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.104.49.130:54806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/talkxkej.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFkgAABcI"]
[Sat Aug 29 05:06:53.768353 2026] [security2:error] [pid 1028675:tid 1028843] [client 20.104.49.130:57496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/wp-css.php"] [unique_id "apK9TddHPfW2QFvhmL7PFgAAACE"]
[Sat Aug 29 05:06:53.773857 2026] [security2:error] [pid 1028675:tid 1028826] [client 158.23.147.79:54343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK9TddHPfW2QFvhmL7PFwAAABA"]
[Sat Aug 29 05:06:53.778767 2026] [security2:error] [pid 1028675:tid 1028912] [client 20.151.200.44:46645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/sf.php"] [unique_id "apK9TddHPfW2QFvhmL7PGgAAAGY"]
[Sat Aug 29 05:06:53.780018 2026] [security2:error] [pid 1028675:tid 1028811] [client 93.123.109.228:52468] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/.env.old"] [unique_id "apK9TddHPfW2QFvhmL7PGQAAAAE"]
[Sat Aug 29 05:06:53.780232 2026] [security2:error] [pid 1018003:tid 1018152] [client 158.23.184.117:62282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dontbenicemovie.wanderlustpictures.com"] [uri "/bthil.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFkwAABbk"]
[Sat Aug 29 05:06:53.786605 2026] [security2:error] [pid 1028675:tid 1028859] [client 20.104.104.62:27008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ngoiloi.nlvn.net"] [uri "/rip.php"] [unique_id "apK9TddHPfW2QFvhmL7PGwAAADE"]
[Sat Aug 29 05:06:53.804017 2026] [security2:error] [pid 1018003:tid 1018200] [client 158.23.184.117:34507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/r.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFmAAABek"]
[Sat Aug 29 05:06:53.818941 2026] [security2:error] [pid 1028675:tid 1028872] [client 20.104.104.62:43071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/msy.php"] [unique_id "apK9TddHPfW2QFvhmL7PHQAAAD4"]
[Sat Aug 29 05:06:53.827846 2026] [security2:error] [pid 1028675:tid 1028827] [client 158.23.184.117:46970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "diamondswindowtinting.enproftp.com"] [uri "/wp-content/admin.php"] [unique_id "apK9TddHPfW2QFvhmL7PHgAAABE"]
[Sat Aug 29 05:06:53.840758 2026] [security2:error] [pid 1018003:tid 1018266] [client 20.104.104.62:47572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wibu.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFmwAABio"]
[Sat Aug 29 05:06:53.868605 2026] [security2:error] [pid 1018003:tid 1018212] [client 158.23.147.79:26568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFngAABfU"]
[Sat Aug 29 05:06:53.869531 2026] [security2:error] [pid 1028675:tid 1028932] [client 20.48.250.41:21486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/gettest.php"] [unique_id "apK9TddHPfW2QFvhmL7PIAAAAHo"]
[Sat Aug 29 05:06:53.876593 2026] [security2:error] [pid 1018003:tid 1018224] [client 158.23.147.79:17409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/file88.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFoAAABgE"]
[Sat Aug 29 05:06:53.880882 2026] [security2:error] [pid 1028675:tid 1028849] [client 20.104.104.62:28824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.watercolorsbylola.allgooddays.org"] [uri "/upload.php"] [unique_id "apK9TddHPfW2QFvhmL7PJAAAACc"]
[Sat Aug 29 05:06:53.882040 2026] [security2:error] [pid 1028675:tid 1028845] [client 93.123.109.228:52406] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/.env.swp"] [unique_id "apK9TddHPfW2QFvhmL7PIwAAACM"]
[Sat Aug 29 05:06:53.888699 2026] [security2:error] [pid 1028675:tid 1028840] [client 158.23.184.117:19280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/24.php"] [unique_id "apK9TddHPfW2QFvhmL7PJgAAAB4"]
[Sat Aug 29 05:06:53.892527 2026] [security2:error] [pid 1018003:tid 1018059] [remote 34.139.66.91:54766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 91.66.139.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tgd6.com"] [uri "/.env.php.bak"] [unique_id "apK9TTAh5Y1i2tUxg4EFpAAF8CY"]
[Sat Aug 29 05:06:53.892775 2026] [security2:error] [pid 1018003:tid 1018070] [remote 34.139.66.91:54766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 91.66.139.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tgd6.com"] [uri "/config/.env.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFpgAF8DE"]
[Sat Aug 29 05:06:53.892845 2026] [security2:error] [pid 1018003:tid 1018092] [remote 34.139.66.91:54766] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "tgd6.com"] [uri "/laravel/.env"] [unique_id "apK9TTAh5Y1i2tUxg4EFpQAF8Ec"]
[Sat Aug 29 05:06:53.902159 2026] [security2:error] [pid 1028675:tid 1028817] [client 93.123.109.228:52412] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/.env~"] [unique_id "apK9TddHPfW2QFvhmL7PJwAAAAc"]
[Sat Aug 29 05:06:53.916324 2026] [security2:error] [pid 1018003:tid 1018089] [remote 40.77.167.35:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.167.77.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantsfans.net"] [uri "/message_board/index.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFqQAF_0Q"]
[Sat Aug 29 05:06:53.925811 2026] [cgid:error] [pid 1028675:tid 1028857] [client 20.52.41.200:1266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/cpslggc/404.shtml
[Sat Aug 29 05:06:53.929694 2026] [security2:error] [pid 1028675:tid 1028858] [client 158.23.184.117:46396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dontbenicemovie.wanderlustpictures.com"] [uri "/file.php"] [unique_id "apK9TddHPfW2QFvhmL7PKgAAADA"]
[Sat Aug 29 05:06:53.945726 2026] [security2:error] [pid 1018003:tid 1018243] [client 20.104.104.62:23381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/bge.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFtAAABhM"]
[Sat Aug 29 05:06:53.947269 2026] [security2:error] [pid 1018003:tid 1018194] [client 158.23.184.117:34726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.miketowery.net"] [uri "/sid3.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFtQAABeM"]
[Sat Aug 29 05:06:53.949633 2026] [security2:error] [pid 1018003:tid 1018090] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK9TTAh5Y1i2tUxg4EFsAAFvEU"]
[Sat Aug 29 05:06:53.950853 2026] [security2:error] [pid 1018003:tid 1018053] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(\\\\/\\\\*\\\\!? ?(?:select|grant|delete|insert|drop|alter|replace|truncate|update|create|rename|describe|union|concat|group_concat))" at REQUEST_FILENAME. [file "/opt/mod_security/hg_rules.conf"] [line "1019"] [id "9000042"] [rev "2.2.2"] [msg "SQL Comment Sequence Detected."] [data "/*update"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/*update.cgi*"] [unique_id "apK9TTAh5Y1i2tUxg4EFrgAFvCA"]
[Sat Aug 29 05:06:53.955402 2026] [core:error] [pid 1028675:tid 1028832] [client 158.158.54.35:24931] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.955419 2026] [core:error] [pid 1028675:tid 1028832] [client 158.158.54.35:24931] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.957456 2026] [security2:error] [pid 1018003:tid 1018225] [client 20.104.104.62:42778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/siln.php"] [unique_id "apK9TTAh5Y1i2tUxg4EFvgAABgI"]
[Sat Aug 29 05:06:53.958204 2026] [core:error] [pid 1018003:tid 1018258] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.958217 2026] [core:error] [pid 1018003:tid 1018258] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.974166 2026] [core:error] [pid 1028675:tid 1028908] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.974193 2026] [core:error] [pid 1028675:tid 1028908] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.975164 2026] [core:error] [pid 1028675:tid 1028839] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.975188 2026] [core:error] [pid 1028675:tid 1028839] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.975582 2026] [core:error] [pid 1028675:tid 1028854] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.975596 2026] [core:error] [pid 1028675:tid 1028854] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.976840 2026] [security2:error] [pid 1028675:tid 1028844] [client 158.23.184.117:46949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "diamondswindowtinting.enproftp.com"] [uri "/wp-mail.php"] [unique_id "apK9TddHPfW2QFvhmL7PNwAAACI"]
[Sat Aug 29 05:06:53.978616 2026] [core:error] [pid 1018003:tid 1018177] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.978632 2026] [core:error] [pid 1018003:tid 1018177] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.981482 2026] [security2:error] [pid 1028675:tid 1028824] [client 68.155.159.216:16165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/.well-known/content.php"] [unique_id "apK9TddHPfW2QFvhmL7POAAAAA4"]
[Sat Aug 29 05:06:53.985279 2026] [security2:error] [pid 1028675:tid 1028884] [client 158.158.54.35:32905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/ioxi-o.php"] [unique_id "apK9TddHPfW2QFvhmL7POgAAAEo"]
[Sat Aug 29 05:06:53.991892 2026] [core:error] [pid 1018003:tid 1018074] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.991907 2026] [core:error] [pid 1018003:tid 1018074] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.991935 2026] [security2:error] [pid 1018003:tid 1018077] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK9TTAh5Y1i2tUxg4EFywAFvDg"]
[Sat Aug 29 05:06:53.992551 2026] [security2:error] [pid 1028675:tid 1028910] [client 68.155.159.216:65116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/NewFile.php/"] [unique_id "apK9TddHPfW2QFvhmL7PPgAAAGQ"]
[Sat Aug 29 05:06:53.994887 2026] [core:error] [pid 1028675:tid 1028904] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.994901 2026] [core:error] [pid 1028675:tid 1028904] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:53.996671 2026] [security2:error] [pid 1028675:tid 1028913] [client 57.141.14.103:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/"] [unique_id "apK9TddHPfW2QFvhmL7PPQAAAGc"]
[Sat Aug 29 05:06:54.017005 2026] [security2:error] [pid 1028675:tid 1028903] [client 158.23.147.79:24550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK9TtdHPfW2QFvhmL7PRAAAAF0"]
[Sat Aug 29 05:06:54.018268 2026] [security2:error] [pid 1028675:tid 1028870] [client 68.155.159.216:18374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/login.php"] [unique_id "apK9TtdHPfW2QFvhmL7PRgAAADw"]
[Sat Aug 29 05:06:54.021378 2026] [security2:error] [pid 1028675:tid 1028851] [client 20.151.200.44:47299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/super.php"] [unique_id "apK9TtdHPfW2QFvhmL7PSAAAACk"]
[Sat Aug 29 05:06:54.022633 2026] [core:error] [pid 1028675:tid 1028937] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.022650 2026] [core:error] [pid 1028675:tid 1028937] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.023347 2026] [core:error] [pid 1028675:tid 1028900] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.023375 2026] [core:error] [pid 1028675:tid 1028900] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.023638 2026] [core:error] [pid 1028675:tid 1028885] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.023647 2026] [core:error] [pid 1028675:tid 1028885] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.024631 2026] [security2:error] [pid 1018003:tid 1018240] [client 4.205.62.107:21625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/paths.php"] [unique_id "apK9TjAh5Y1i2tUxg4EF1AAABhA"]
[Sat Aug 29 05:06:54.024970 2026] [core:error] [pid 1028675:tid 1028906] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.024983 2026] [core:error] [pid 1028675:tid 1028906] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.025074 2026] [core:error] [pid 1028675:tid 1028881] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.025083 2026] [core:error] [pid 1028675:tid 1028881] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.026708 2026] [core:error] [pid 1028675:tid 1028874] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.026722 2026] [core:error] [pid 1028675:tid 1028874] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.030406 2026] [security2:error] [pid 1028675:tid 1028882] [client 93.123.109.228:52406] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.bak"] [unique_id "apK9TtdHPfW2QFvhmL7PTQAAAEg"]
[Sat Aug 29 05:06:54.034041 2026] [security2:error] [pid 1018003:tid 1018189] [client 93.123.109.228:52512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.old"] [unique_id "apK9TjAh5Y1i2tUxg4EF1gAABd4"]
[Sat Aug 29 05:06:54.034362 2026] [security2:error] [pid 1018003:tid 1018180] [client 158.23.184.117:19292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yeselespinoza.andresortega.org"] [uri "/3pjcpmfsd8b.php"] [unique_id "apK9TjAh5Y1i2tUxg4EF1wAABdU"]
[Sat Aug 29 05:06:54.036563 2026] [security2:error] [pid 1028675:tid 1028843] [client 93.123.109.228:52546] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config~"] [unique_id "apK9TtdHPfW2QFvhmL7PTwAAACE"]
[Sat Aug 29 05:06:54.044738 2026] [security2:error] [pid 1018003:tid 1018275] [client 158.23.147.79:49984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK9TjAh5Y1i2tUxg4EF2QAABjM"]
[Sat Aug 29 05:06:54.045469 2026] [security2:error] [pid 1018003:tid 1018157] [client 20.196.209.81:17916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/class-wp-cmd.php"] [unique_id "apK9TjAh5Y1i2tUxg4EF2wAABb4"]
[Sat Aug 29 05:06:54.049599 2026] [security2:error] [pid 1018003:tid 1018058] [remote 34.139.66.91:54766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 91.66.139.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tgd6.com"] [uri "/config.php.bak"] [unique_id "apK9TjAh5Y1i2tUxg4EF3AAF9iU"]
[Sat Aug 29 05:06:54.052061 2026] [security2:error] [pid 1018003:tid 1018118] [remote 34.139.66.91:54766] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "tgd6.com"] [uri "/core/.env"] [unique_id "apK9TjAh5Y1i2tUxg4EF3QAF9mE"]
[Sat Aug 29 05:06:54.062520 2026] [security2:error] [pid 1018003:tid 1018267] [client 40.83.93.50:17339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/alumni_reg.php"] [unique_id "apK9TjAh5Y1i2tUxg4EF4QAABis"]
[Sat Aug 29 05:06:54.067440 2026] [security2:error] [pid 1028675:tid 1028838] [client 103.168.67.159:53254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 159.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "naturalkneads.com"] [uri "/wp/index.php"] [unique_id "apK9TtdHPfW2QFvhmL7PVAAAABw"], referer: https://naturalkneads.com/wp/wp-admin/
[Sat Aug 29 05:06:54.067713 2026] [security2:error] [pid 1018003:tid 1018277] [client 20.104.104.62:27071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ngoiloi.nlvn.net"] [uri "/wp-content.php"] [unique_id "apK9TjAh5Y1i2tUxg4EF4gAABjU"]
[Sat Aug 29 05:06:54.073579 2026] [security2:error] [pid 1028675:tid 1028850] [client 20.48.250.41:21252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/35.php"] [unique_id "apK9TtdHPfW2QFvhmL7PVQAAACg"]
[Sat Aug 29 05:06:54.075492 2026] [security2:error] [pid 1018003:tid 1018236] [client 158.23.184.117:46369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dontbenicemovie.wanderlustpictures.com"] [uri "/lock360.php"] [unique_id "apK9TjAh5Y1i2tUxg4EF4wAABgw"]
[Sat Aug 29 05:06:54.081705 2026] [cgid:error] [pid 1028675:tid 1028917] [client 20.52.41.200:1266] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/cpslggc/404.shtml
[Sat Aug 29 05:06:54.081974 2026] [security2:error] [pid 1018003:tid 1018273] [client 68.155.159.216:6025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/chosen.php"] [unique_id "apK9TjAh5Y1i2tUxg4EF5gAABjE"]
[Sat Aug 29 05:06:54.084523 2026] [security2:error] [pid 1028675:tid 1028889] [client 20.104.104.62:29208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.watercolorsbylola.allgooddays.org"] [uri "/wp-act.php"] [unique_id "apK9TtdHPfW2QFvhmL7PVwAAAE8"]
[Sat Aug 29 05:06:54.088034 2026] [security2:error] [pid 1018003:tid 1018262] [client 197.219.150.206:60835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK9TjAh5Y1i2tUxg4EF6gAABiY"]
[Sat Aug 29 05:06:54.088279 2026] [security2:error] [pid 1018003:tid 1018262] [client 197.219.150.206:60835] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK9TjAh5Y1i2tUxg4EF6gAABiY"]
[Sat Aug 29 05:06:54.102804 2026] [security2:error] [pid 1018003:tid 1018148] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/.env"] [unique_id "apK9TjAh5Y1i2tUxg4EF7QAFy38"]
[Sat Aug 29 05:06:54.104528 2026] [security2:error] [pid 1028675:tid 1028907] [client 20.104.104.62:64670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/f-401.php"] [unique_id "apK9TtdHPfW2QFvhmL7PWQAAAGE"]
[Sat Aug 29 05:06:54.105398 2026] [security2:error] [pid 1018003:tid 1018218] [client 168.107.94.195:64526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9TjAh5Y1i2tUxg4EF7gAABfs"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:54.112731 2026] [core:error] [pid 1018003:tid 1018108] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.112754 2026] [core:error] [pid 1018003:tid 1018108] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.133479 2026] [security2:error] [pid 1028675:tid 1028933] [client 4.205.62.107:9002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/abcd.php"] [unique_id "apK9TtdHPfW2QFvhmL7PXgAAAHs"]
[Sat Aug 29 05:06:54.136914 2026] [security2:error] [pid 1018003:tid 1018116] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/laravel/app/.env"] [unique_id "apK9TjAh5Y1i2tUxg4EF9AAFy18"]
[Sat Aug 29 05:06:54.138054 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.104.104.62:52072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/wp-ana.php"] [unique_id "apK9TjAh5Y1i2tUxg4EF-QAABcI"]
[Sat Aug 29 05:06:54.138975 2026] [core:error] [pid 1018003:tid 1018225] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.138994 2026] [core:error] [pid 1018003:tid 1018225] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.139297 2026] [security2:error] [pid 1018003:tid 1018116] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK9TjAh5Y1i2tUxg4EF-gAFy18"]
[Sat Aug 29 05:06:54.141734 2026] [core:error] [pid 1018003:tid 1018080] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.141763 2026] [core:error] [pid 1018003:tid 1018080] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.146739 2026] [security2:error] [pid 1028675:tid 1028878] [client 158.23.147.79:30714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK9TtdHPfW2QFvhmL7PYgAAAEQ"]
[Sat Aug 29 05:06:54.166785 2026] [security2:error] [pid 1018003:tid 1018159] [client 103.171.189.88:56377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9TjAh5Y1i2tUxg4EGAwAABcA"]
[Sat Aug 29 05:06:54.166915 2026] [security2:error] [pid 1018003:tid 1018159] [client 103.171.189.88:56377] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9TjAh5Y1i2tUxg4EGAwAABcA"]
[Sat Aug 29 05:06:54.173812 2026] [core:error] [pid 1018003:tid 1018190] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.173830 2026] [core:error] [pid 1018003:tid 1018190] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.178059 2026] [core:error] [pid 1028675:tid 1028840] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.178079 2026] [core:error] [pid 1028675:tid 1028840] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.178549 2026] [security2:error] [pid 1018003:tid 1018126] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/.env.bak"] [unique_id "apK9TjAh5Y1i2tUxg4EGCAAFy2k"]
[Sat Aug 29 05:06:54.179614 2026] [security2:error] [pid 1018003:tid 1018121] [remote 34.139.66.91:54766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 91.66.139.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tgd6.com"] [uri "/configuration.php.bak"] [unique_id "apK9TjAh5Y1i2tUxg4EGCgAF0GQ"]
[Sat Aug 29 05:06:54.180132 2026] [security2:error] [pid 1018003:tid 1018126] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/.env.backup"] [unique_id "apK9TjAh5Y1i2tUxg4EGCQAFy2k"]
[Sat Aug 29 05:06:54.191750 2026] [security2:error] [pid 1018003:tid 1018139] [remote 34.139.66.91:54766] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "tgd6.com"] [uri "/public/.env"] [unique_id "apK9TjAh5Y1i2tUxg4EGDgAFvXY"]
[Sat Aug 29 05:06:54.198834 2026] [core:error] [pid 1018003:tid 1018243] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.198853 2026] [core:error] [pid 1018003:tid 1018243] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.203073 2026] [security2:error] [pid 1018003:tid 1018167] [client 20.104.49.130:53813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/wp-login.php"] [unique_id "apK9TjAh5Y1i2tUxg4EGEgAABcg"]
[Sat Aug 29 05:06:54.207048 2026] [core:error] [pid 1018003:tid 1018200] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.207063 2026] [core:error] [pid 1018003:tid 1018200] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.221084 2026] [core:error] [pid 1028675:tid 1028835] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.221106 2026] [core:error] [pid 1028675:tid 1028835] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.226845 2026] [security2:error] [pid 1028675:tid 1028833] [client 20.151.200.44:47417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/lufix1.php"] [unique_id "apK9TtdHPfW2QFvhmL7PcAAAABc"]
[Sat Aug 29 05:06:54.230809 2026] [security2:error] [pid 1028675:tid 1028824] [client 20.52.41.200:1266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-admin/images/index.php"] [unique_id "apK9TtdHPfW2QFvhmL7PcQAAAA4"]
[Sat Aug 29 05:06:54.231573 2026] [security2:error] [pid 1028675:tid 1028925] [client 20.48.250.41:21492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/maraz.php"] [unique_id "apK9TtdHPfW2QFvhmL7PcgAAAHM"]
[Sat Aug 29 05:06:54.237036 2026] [core:error] [pid 1028675:tid 1028844] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.237055 2026] [core:error] [pid 1028675:tid 1028844] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.238352 2026] [core:error] [pid 1018003:tid 1018217] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.238379 2026] [core:error] [pid 1018003:tid 1018217] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.241840 2026] [core:error] [pid 1028675:tid 1028880] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.241858 2026] [core:error] [pid 1028675:tid 1028880] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.254693 2026] [security2:error] [pid 1018003:tid 1018231] [client 20.104.104.62:37187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/hq.php"] [unique_id "apK9TjAh5Y1i2tUxg4EGHQAABgc"]
[Sat Aug 29 05:06:54.265204 2026] [security2:error] [pid 1018003:tid 1018164] [client 20.104.104.62:40201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/Wop.php"] [unique_id "apK9TjAh5Y1i2tUxg4EGHgAABcU"]
[Sat Aug 29 05:06:54.281645 2026] [core:error] [pid 1028675:tid 1028836] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.281668 2026] [core:error] [pid 1028675:tid 1028836] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.282467 2026] [security2:error] [pid 1028675:tid 1028877] [client 20.104.104.62:29185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.watercolorsbylola.allgooddays.org"] [uri "/wp-admin/user/index.php"] [unique_id "apK9TtdHPfW2QFvhmL7PdwAAAEM"]
[Sat Aug 29 05:06:54.300433 2026] [security2:error] [pid 1018003:tid 1018128] [remote 34.139.66.91:54766] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "tgd6.com"] [uri "/.env.swp"] [unique_id "apK9TjAh5Y1i2tUxg4EGJgAF_2s"]
[Sat Aug 29 05:06:54.301175 2026] [security2:error] [pid 1018003:tid 1018137] [remote 74.7.227.154:41662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK9TjAh5Y1i2tUxg4EGKAAF_3Q"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwp-easycart%2Fadmin%2Felementor
[Sat Aug 29 05:06:54.304469 2026] [core:error] [pid 1028675:tid 1028851] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.304486 2026] [core:error] [pid 1028675:tid 1028851] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.304976 2026] [security2:error] [pid 1028675:tid 1028885] [client 4.205.62.107:22379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/phpversion.php"] [unique_id "apK9TtdHPfW2QFvhmL7PfgAAAEs"]
[Sat Aug 29 05:06:54.308716 2026] [security2:error] [pid 1018003:tid 1018161] [client 4.205.62.107:65470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/aws_auth.php"] [unique_id "apK9TjAh5Y1i2tUxg4EGKgAABcI"]
[Sat Aug 29 05:06:54.309134 2026] [core:error] [pid 1028675:tid 1028900] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.309145 2026] [core:error] [pid 1028675:tid 1028900] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.316401 2026] [core:error] [pid 1018003:tid 1018225] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.316428 2026] [core:error] [pid 1018003:tid 1018225] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.317401 2026] [security2:error] [pid 1018003:tid 1018174] [client 4.205.62.107:58400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/goods.php"] [unique_id "apK9TjAh5Y1i2tUxg4EGLQAABc8"]
[Sat Aug 29 05:06:54.317908 2026] [security2:error] [pid 1028675:tid 1028906] [client 68.155.159.216:9268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-content/admin.php"] [unique_id "apK9TtdHPfW2QFvhmL7PgwAAAGA"]
[Sat Aug 29 05:06:54.318731 2026] [core:error] [pid 1018003:tid 1018195] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.318744 2026] [core:error] [pid 1018003:tid 1018195] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.319276 2026] [core:error] [pid 1028675:tid 1028930] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.319289 2026] [core:error] [pid 1028675:tid 1028930] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.320570 2026] [security2:error] [pid 1018003:tid 1018196] [client 20.197.61.180:11633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/wp-configs.php"] [unique_id "apK9TjAh5Y1i2tUxg4EGLwAABeU"]
[Sat Aug 29 05:06:54.332213 2026] [security2:error] [pid 1018003:tid 1018122] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/.env.old"] [unique_id "apK9TjAh5Y1i2tUxg4EGMQAF2mU"]
[Sat Aug 29 05:06:54.365202 2026] [security2:error] [pid 1018003:tid 1018133] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/.env.php"] [unique_id "apK9TjAh5Y1i2tUxg4EGNAAFvXA"]
[Sat Aug 29 05:06:54.367074 2026] [security2:error] [pid 1028675:tid 1028863] [client 68.155.159.216:50324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wzy.php"] [unique_id "apK9TtdHPfW2QFvhmL7PhwAAADU"]
[Sat Aug 29 05:06:54.370161 2026] [security2:error] [pid 1018003:tid 1018191] [client 20.104.104.62:42680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/secret.php"] [unique_id "apK9TjAh5Y1i2tUxg4EGNQAABeA"]
[Sat Aug 29 05:06:54.371970 2026] [security2:error] [pid 1018003:tid 1018271] [client 4.205.62.107:22265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/wp-admin/sc.php"] [unique_id "apK9TjAh5Y1i2tUxg4EGNgAABi8"]
[Sat Aug 29 05:06:54.372642 2026] [security2:error] [pid 1018003:tid 1018198] [client 158.23.147.79:32765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/goat.php"] [unique_id "apK9TjAh5Y1i2tUxg4EGNwAABec"]
[Sat Aug 29 05:06:54.384384 2026] [security2:error] [pid 1018003:tid 1018202] [client 20.104.104.62:43036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/mh.php"] [unique_id "apK9TjAh5Y1i2tUxg4EGQAAABes"]
[Sat Aug 29 05:06:54.392767 2026] [security2:error] [pid 1018003:tid 1018230] [client 20.48.250.41:21384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/kbfr.php"] [unique_id "apK9TjAh5Y1i2tUxg4EGQwAABgY"]
[Sat Aug 29 05:06:54.403584 2026] [core:error] [pid 1028675:tid 1028924] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.403609 2026] [core:error] [pid 1028675:tid 1028924] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.408388 2026] [core:error] [pid 1028675:tid 1028883] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.408404 2026] [core:error] [pid 1028675:tid 1028883] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.409561 2026] [core:error] [pid 1028675:tid 1028837] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.409576 2026] [core:error] [pid 1028675:tid 1028837] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.410298 2026] [core:error] [pid 1018003:tid 1018270] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.410308 2026] [core:error] [pid 1018003:tid 1018270] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.416925 2026] [core:error] [pid 1028675:tid 1028933] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.416939 2026] [core:error] [pid 1028675:tid 1028933] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.427881 2026] [security2:error] [pid 1028675:tid 1028871] [client 158.158.54.35:28355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-content/themes/about.php"] [unique_id "apK9TtdHPfW2QFvhmL7PkAAAAD0"]
[Sat Aug 29 05:06:54.429261 2026] [core:error] [pid 1028675:tid 1028849] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.429277 2026] [core:error] [pid 1028675:tid 1028849] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.430241 2026] [security2:error] [pid 1028675:tid 1028931] [client 68.155.159.216:24562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/atomlib.php"] [unique_id "apK9TtdHPfW2QFvhmL7PkQAAAHk"]
[Sat Aug 29 05:06:54.434506 2026] [security2:error] [pid 1018003:tid 1018206] [client 158.23.147.79:25538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK9TjAh5Y1i2tUxg4EGTAAABe8"]
[Sat Aug 29 05:06:54.456941 2026] [security2:error] [pid 1018003:tid 1018147] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/.env.swp"] [unique_id "apK9TjAh5Y1i2tUxg4EGTQAF2H4"]
[Sat Aug 29 05:06:54.469304 2026] [security2:error] [pid 1018003:tid 1018160] [client 20.151.200.44:47300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/hack.php"] [unique_id "apK9TjAh5Y1i2tUxg4EGUAAABcE"]
[Sat Aug 29 05:06:54.470112 2026] [security2:error] [pid 1018003:tid 1018021] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/.env~"] [unique_id "apK9TjAh5Y1i2tUxg4EGUQAF-wA"]
[Sat Aug 29 05:06:54.474807 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.104.104.62:27041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ngoiloi.nlvn.net"] [uri "/ws.php"] [unique_id "apK9TjAh5Y1i2tUxg4EGVAAABcI"]
[Sat Aug 29 05:06:54.477465 2026] [security2:error] [pid 1028675:tid 1028810] [client 20.104.104.62:29193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.watercolorsbylola.allgooddays.org"] [uri "/wp-content/index.php"] [unique_id "apK9TtdHPfW2QFvhmL7PlQAAAAA"]
[Sat Aug 29 05:06:54.484167 2026] [security2:error] [pid 1028675:tid 1028850] [client 20.196.209.81:9751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/disagreed.php"] [unique_id "apK9TtdHPfW2QFvhmL7PmAAAACg"]
[Sat Aug 29 05:06:54.484427 2026] [core:error] [pid 1028675:tid 1028842] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.484439 2026] [core:error] [pid 1028675:tid 1028842] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.486017 2026] [security2:error] [pid 1018003:tid 1018174] [client 168.107.94.195:65013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9TjAh5Y1i2tUxg4EGVgAABc8"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:54.488218 2026] [security2:error] [pid 1028675:tid 1028887] [client 20.104.49.130:46532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/run.php"] [unique_id "apK9TtdHPfW2QFvhmL7PmQAAAE0"]
[Sat Aug 29 05:06:54.489268 2026] [core:error] [pid 1018003:tid 1018169] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.489278 2026] [core:error] [pid 1018003:tid 1018169] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.505300 2026] [security2:error] [pid 1018003:tid 1018216] [client 158.158.54.35:18123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/xmlrpc.php"] [unique_id "apK9TjAh5Y1i2tUxg4EGWwAABfk"]
[Sat Aug 29 05:06:54.505387 2026] [core:error] [pid 1028675:tid 1028890] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.505400 2026] [core:error] [pid 1028675:tid 1028890] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.521569 2026] [security2:error] [pid 1028675:tid 1028835] [client 20.104.49.130:60758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/coffexium.php"] [unique_id "apK9TtdHPfW2QFvhmL7PoAAAABk"]
[Sat Aug 29 05:06:54.527276 2026] [security2:error] [pid 1028675:tid 1028839] [client 20.104.104.62:5058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/f2r4.php"] [unique_id "apK9TtdHPfW2QFvhmL7PogAAAB0"]
[Sat Aug 29 05:06:54.528794 2026] [security2:error] [pid 1018003:tid 1018207] [client 68.155.159.216:49219] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/ws.php"] [unique_id "apK9TjAh5Y1i2tUxg4EGYgAABfA"]
[Sat Aug 29 05:06:54.536878 2026] [core:error] [pid 1028675:tid 1028854] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.536894 2026] [core:error] [pid 1028675:tid 1028854] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.540188 2026] [core:error] [pid 1028675:tid 1028919] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.540206 2026] [core:error] [pid 1028675:tid 1028919] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.540510 2026] [core:error] [pid 1018003:tid 1018159] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.540521 2026] [core:error] [pid 1018003:tid 1018159] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.540800 2026] [security2:error] [pid 1028675:tid 1028820] [client 20.104.104.62:36938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/pro.php"] [unique_id "apK9TtdHPfW2QFvhmL7PpQAAAAo"]
[Sat Aug 29 05:06:54.543886 2026] [core:error] [pid 1028675:tid 1028833] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.543898 2026] [core:error] [pid 1028675:tid 1028833] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.555651 2026] [security2:error] [pid 1018003:tid 1018234] [client 20.48.250.41:21343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/wp-act.php"] [unique_id "apK9TjAh5Y1i2tUxg4EGZwAABgo"]
[Sat Aug 29 05:06:54.563284 2026] [security2:error] [pid 1018003:tid 1018186] [client 40.83.93.50:7561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/colors.php"] [unique_id "apK9TjAh5Y1i2tUxg4EGbQAABds"]
[Sat Aug 29 05:06:54.566915 2026] [security2:error] [pid 1018003:tid 1018145] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.bak"] [unique_id "apK9TjAh5Y1i2tUxg4EGbwAF-3w"]
[Sat Aug 29 05:06:54.568292 2026] [core:error] [pid 1028675:tid 1028815] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.568312 2026] [core:error] [pid 1028675:tid 1028815] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.579446 2026] [security2:error] [pid 1028675:tid 1028836] [client 20.104.104.62:40207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/pah.php"] [unique_id "apK9TtdHPfW2QFvhmL7PrAAAABo"]
[Sat Aug 29 05:06:54.579931 2026] [security2:error] [pid 1018003:tid 1018198] [client 158.23.147.79:48384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-content/index.php"] [unique_id "apK9TjAh5Y1i2tUxg4EGcQAABec"]
[Sat Aug 29 05:06:54.582269 2026] [core:error] [pid 1028675:tid 1028811] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.582280 2026] [core:error] [pid 1028675:tid 1028811] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.587009 2026] [security2:error] [pid 1028675:tid 1028861] [client 20.151.200.44:65041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/mh.php"] [unique_id "apK9TtdHPfW2QFvhmL7PrgAAADM"]
[Sat Aug 29 05:06:54.594505 2026] [security2:error] [pid 1018003:tid 1018032] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.old"] [unique_id "apK9TjAh5Y1i2tUxg4EGcwAF-ws"]
[Sat Aug 29 05:06:54.601512 2026] [security2:error] [pid 1018003:tid 1018277] [client 93.123.109.228:52492] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/.wp-config.php.swp"] [unique_id "apK9TjAh5Y1i2tUxg4EGdQAABjU"]
[Sat Aug 29 05:06:54.606993 2026] [security2:error] [pid 1018003:tid 1018034] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config~"] [unique_id "apK9TjAh5Y1i2tUxg4EGdgAF-w0"]
[Sat Aug 29 05:06:54.612126 2026] [security2:error] [pid 1028675:tid 1028813] [client 20.151.200.44:47423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/155.php"] [unique_id "apK9TtdHPfW2QFvhmL7PrwAAAAM"]
[Sat Aug 29 05:06:54.625613 2026] [core:error] [pid 1018003:tid 1018244] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.625626 2026] [core:error] [pid 1018003:tid 1018244] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.625924 2026] [core:error] [pid 1028675:tid 1028920] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.625932 2026] [core:error] [pid 1028675:tid 1028920] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.629599 2026] [core:error] [pid 1018003:tid 1018179] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.629611 2026] [core:error] [pid 1018003:tid 1018179] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.636522 2026] [security2:error] [pid 1028675:tid 1028819] [client 149.34.210.141:7599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9TtdHPfW2QFvhmL7PsQAAAAk"]
[Sat Aug 29 05:06:54.636607 2026] [security2:error] [pid 1028675:tid 1028819] [client 149.34.210.141:7599] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9TtdHPfW2QFvhmL7PsQAAAAk"]
[Sat Aug 29 05:06:54.642110 2026] [core:error] [pid 1028675:tid 1028916] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.642123 2026] [core:error] [pid 1028675:tid 1028916] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.650904 2026] [security2:error] [pid 1028675:tid 1028852] [client 93.123.109.228:52428] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/ADMIN/.env"] [unique_id "apK9TtdHPfW2QFvhmL7PtAAAACo"]
[Sat Aug 29 05:06:54.661847 2026] [security2:error] [pid 1018003:tid 1018189] [client 93.123.109.228:52464] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/API/.env"] [unique_id "apK9TjAh5Y1i2tUxg4EGfAAABd4"]
[Sat Aug 29 05:06:54.670587 2026] [security2:error] [pid 1028675:tid 1028831] [client 20.52.41.200:1729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/num.php"] [unique_id "apK9TtdHPfW2QFvhmL7PtwAAABU"]
[Sat Aug 29 05:06:54.670632 2026] [security2:error] [pid 1028675:tid 1028821] [client 20.104.104.62:29191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.watercolorsbylola.allgooddays.org"] [uri "/wp-content/uploads/wpr-addons/forms/b1ack.php"] [unique_id "apK9TtdHPfW2QFvhmL7PtgAAAAs"]
[Sat Aug 29 05:06:54.673882 2026] [security2:error] [pid 1028675:tid 1028937] [client 20.104.104.62:27055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ngoiloi.nlvn.net"] [uri "/0x.php"] [unique_id "apK9TtdHPfW2QFvhmL7PuAAAAH8"]
[Sat Aug 29 05:06:54.678142 2026] [security2:error] [pid 1028675:tid 1028874] [client 20.104.104.62:43056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/sadis.php"] [unique_id "apK9TtdHPfW2QFvhmL7PugAAAEA"]
[Sat Aug 29 05:06:54.705195 2026] [security2:error] [pid 1018003:tid 1018170] [client 20.48.250.41:21462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/24.php"] [unique_id "apK9TjAh5Y1i2tUxg4EGggAABcs"]
[Sat Aug 29 05:06:54.712704 2026] [core:error] [pid 1028675:tid 1028882] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.712724 2026] [core:error] [pid 1028675:tid 1028882] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.720236 2026] [security2:error] [pid 1028675:tid 1028843] [client 93.123.109.228:52412] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/APP/.env"] [unique_id "apK9TtdHPfW2QFvhmL7PwQAAACE"]
[Sat Aug 29 05:06:54.726434 2026] [security2:error] [pid 1028675:tid 1028838] [client 20.104.104.62:23411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/999.php"] [unique_id "apK9TtdHPfW2QFvhmL7PxQAAABw"]
[Sat Aug 29 05:06:54.727131 2026] [security2:error] [pid 1028675:tid 1028872] [client 68.155.159.216:1930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9TtdHPfW2QFvhmL7PxgAAAD4"]
[Sat Aug 29 05:06:54.732821 2026] [security2:error] [pid 1018003:tid 1018071] [remote 34.139.66.91:54766] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "tgd6.com"] [uri "/storage/.env"] [unique_id "apK9TjAh5Y1i2tUxg4EGjQAGDjI"]
[Sat Aug 29 05:06:54.734388 2026] [core:error] [pid 1028675:tid 1028917] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.734406 2026] [core:error] [pid 1028675:tid 1028917] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.734575 2026] [core:error] [pid 1028675:tid 1028823] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.734587 2026] [core:error] [pid 1028675:tid 1028823] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.740327 2026] [security2:error] [pid 1018003:tid 1018275] [client 93.123.109.228:52476] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/Api/.env"] [unique_id "apK9TjAh5Y1i2tUxg4EGjgAABjM"]
[Sat Aug 29 05:06:54.742185 2026] [core:error] [pid 1028675:tid 1028816] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.742201 2026] [core:error] [pid 1028675:tid 1028816] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.745211 2026] [core:error] [pid 1028675:tid 1028893] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.745227 2026] [core:error] [pid 1028675:tid 1028893] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.745275 2026] [core:error] [pid 1028675:tid 1028896] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.745285 2026] [core:error] [pid 1028675:tid 1028896] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.745644 2026] [core:error] [pid 1018003:tid 1018262] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.745653 2026] [core:error] [pid 1018003:tid 1018262] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.746155 2026] [security2:error] [pid 1028675:tid 1028909] [client 68.155.159.216:51827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/mah.php"] [unique_id "apK9TtdHPfW2QFvhmL7PzwAAAGM"]
[Sat Aug 29 05:06:54.748233 2026] [security2:error] [pid 1028675:tid 1028837] [client 158.23.147.79:63809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-content/packed.php"] [unique_id "apK9TtdHPfW2QFvhmL7P0AAAABs"]
[Sat Aug 29 05:06:54.749685 2026] [security2:error] [pid 1018003:tid 1018155] [client 93.123.109.228:52492] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/BACK/.env"] [unique_id "apK9TjAh5Y1i2tUxg4EGkQAABbw"]
[Sat Aug 29 05:06:54.752172 2026] [security2:error] [pid 1018003:tid 1018233] [client 93.123.109.228:52512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/BACKEND/.env"] [unique_id "apK9TjAh5Y1i2tUxg4EGkgAABgk"]
[Sat Aug 29 05:06:54.757183 2026] [security2:error] [pid 1018003:tid 1018054] [remote 34.139.66.91:54766] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "tgd6.com"] [uri "/wp/.env"] [unique_id "apK9TjAh5Y1i2tUxg4EGlAAGICE"]
[Sat Aug 29 05:06:54.758614 2026] [security2:error] [pid 1018003:tid 1018167] [client 93.123.109.228:52498] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/BE/.env"] [unique_id "apK9TjAh5Y1i2tUxg4EGlQAABcg"]
[Sat Aug 29 05:06:54.761750 2026] [security2:error] [pid 1028675:tid 1028911] [client 20.104.49.130:52288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/666.php"] [unique_id "apK9TtdHPfW2QFvhmL7P0QAAAGU"]
[Sat Aug 29 05:06:54.767875 2026] [security2:error] [pid 1018003:tid 1018100] [remote 34.139.66.91:54766] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "tgd6.com"] [uri "/web/.env"] [unique_id "apK9TjAh5Y1i2tUxg4EGmQAF2E8"]
[Sat Aug 29 05:06:54.768579 2026] [security2:error] [pid 1018003:tid 1018061] [remote 34.139.66.91:54766] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "tgd6.com"] [uri "/wp-config.php~"] [unique_id "apK9TjAh5Y1i2tUxg4EGnAAF2Cg"]
[Sat Aug 29 05:06:54.768708 2026] [core:error] [pid 1028675:tid 1028905] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.768807 2026] [core:error] [pid 1028675:tid 1028905] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.769101 2026] [core:error] [pid 1028675:tid 1028914] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.769109 2026] [core:error] [pid 1028675:tid 1028914] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.770412 2026] [core:error] [pid 1018003:tid 1018236] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.770430 2026] [core:error] [pid 1018003:tid 1018236] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.782667 2026] [security2:error] [pid 1028675:tid 1028810] [client 20.104.104.62:20801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/webshell.php"] [unique_id "apK9TtdHPfW2QFvhmL7P1QAAAAA"]
[Sat Aug 29 05:06:54.788020 2026] [security2:error] [pid 1018003:tid 1018050] [remote 34.139.66.91:54766] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "tgd6.com"] [uri "/wp-config.old"] [unique_id "apK9TjAh5Y1i2tUxg4EGnwAGAh0"]
[Sat Aug 29 05:06:54.790155 2026] [security2:error] [pid 1028675:tid 1028850] [client 4.205.62.107:56010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/xin1.php"] [unique_id "apK9TtdHPfW2QFvhmL7P1gAAACg"]
[Sat Aug 29 05:06:54.800984 2026] [core:error] [pid 1028675:tid 1028887] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.800997 2026] [core:error] [pid 1028675:tid 1028887] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.803162 2026] [core:error] [pid 1028675:tid 1028876] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.803175 2026] [core:error] [pid 1028675:tid 1028876] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.810265 2026] [security2:error] [pid 1028675:tid 1028856] [client 20.104.104.62:64694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/xcre1.php"] [unique_id "apK9TtdHPfW2QFvhmL7P2wAAAC4"]
[Sat Aug 29 05:06:54.812795 2026] [core:error] [pid 1028675:tid 1028890] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.812807 2026] [core:error] [pid 1028675:tid 1028890] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.816170 2026] [core:error] [pid 1018003:tid 1018166] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.816188 2026] [core:error] [pid 1018003:tid 1018166] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.816612 2026] [core:error] [pid 1028675:tid 1028830] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.816623 2026] [core:error] [pid 1028675:tid 1028830] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.821081 2026] [security2:error] [pid 1018003:tid 1018195] [client 93.123.109.228:52420] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/Backend/.env"] [unique_id "apK9TjAh5Y1i2tUxg4EGowAABeQ"]
[Sat Aug 29 05:06:54.821343 2026] [security2:error] [pid 1028675:tid 1028846] [client 93.123.109.228:52470] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/Be/.env"] [unique_id "apK9TtdHPfW2QFvhmL7P4AAAACQ"]
[Sat Aug 29 05:06:54.846700 2026] [security2:error] [pid 1028675:tid 1028901] [client 20.196.209.81:17156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-admin/network/xmrlpc.php"] [unique_id "apK9TtdHPfW2QFvhmL7P4gAAAFs"]
[Sat Aug 29 05:06:54.849505 2026] [security2:error] [pid 1028675:tid 1028841] [client 20.48.250.41:21502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/155.php"] [unique_id "apK9TtdHPfW2QFvhmL7P4wAAAB8"]
[Sat Aug 29 05:06:54.867877 2026] [security2:error] [pid 1018003:tid 1018219] [client 168.107.94.195:65345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9TjAh5Y1i2tUxg4EGqAAABfw"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:54.869036 2026] [security2:error] [pid 1018003:tid 1018169] [client 20.104.104.62:28851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.watercolorsbylola.allgooddays.org"] [uri "/.well-known/s1.php"] [unique_id "apK9TjAh5Y1i2tUxg4EGqQAABco"]
[Sat Aug 29 05:06:54.869061 2026] [security2:error] [pid 1018003:tid 1018174] [client 20.104.104.62:27026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ngoiloi.nlvn.net"] [uri "/an.php"] [unique_id "apK9TjAh5Y1i2tUxg4EGqgAABc8"]
[Sat Aug 29 05:06:54.883982 2026] [security2:error] [pid 1028675:tid 1028848] [client 158.158.54.35:20573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK9TtdHPfW2QFvhmL7P5QAAACY"]
[Sat Aug 29 05:06:54.889176 2026] [security2:error] [pid 1028675:tid 1028853] [client 20.196.209.81:9465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/class_api.php"] [unique_id "apK9TtdHPfW2QFvhmL7P5gAAACs"]
[Sat Aug 29 05:06:54.917539 2026] [security2:error] [pid 1028675:tid 1028891] [client 52.139.37.240:20795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/asw.php"] [unique_id "apK9TtdHPfW2QFvhmL7P6AAAAFE"]
[Sat Aug 29 05:06:54.922864 2026] [security2:error] [pid 1018003:tid 1018203] [client 158.23.147.79:54355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK9TjAh5Y1i2tUxg4EGswAABew"]
[Sat Aug 29 05:06:54.941519 2026] [core:error] [pid 1018003:tid 1018198] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.941543 2026] [core:error] [pid 1018003:tid 1018198] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.950789 2026] [security2:error] [pid 1018003:tid 1018246] [client 158.158.54.35:23567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/filemanager.php"] [unique_id "apK9TjAh5Y1i2tUxg4EGtwAABhY"]
[Sat Aug 29 05:06:54.975228 2026] [security2:error] [pid 1028675:tid 1028836] [client 158.23.147.79:26618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-content/cong.php"] [unique_id "apK9TtdHPfW2QFvhmL7P6wAAABo"]
[Sat Aug 29 05:06:54.983032 2026] [security2:error] [pid 1028675:tid 1028858] [client 158.23.147.79:17473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/NewFile.php/"] [unique_id "apK9TtdHPfW2QFvhmL7P7AAAADA"]
[Sat Aug 29 05:06:54.986693 2026] [security2:error] [pid 1018003:tid 1018239] [client 20.48.250.41:21464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/file.php"] [unique_id "apK9TjAh5Y1i2tUxg4EGvQAABg8"]
[Sat Aug 29 05:06:54.988059 2026] [core:error] [pid 1018003:tid 1018179] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.988075 2026] [core:error] [pid 1018003:tid 1018179] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.988308 2026] [core:error] [pid 1018003:tid 1018157] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:54.988318 2026] [core:error] [pid 1018003:tid 1018157] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.007051 2026] [security2:error] [pid 1018003:tid 1018189] [client 68.155.159.216:38528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK9TzAh5Y1i2tUxg4EGwQAABd4"]
[Sat Aug 29 05:06:55.022474 2026] [core:error] [pid 1028675:tid 1028921] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.022495 2026] [core:error] [pid 1028675:tid 1028921] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.039016 2026] [security2:error] [pid 1018003:tid 1018152] [client 20.197.61.180:11591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/essexec.php"] [unique_id "apK9TzAh5Y1i2tUxg4EGygAABbk"]
[Sat Aug 29 05:06:55.044543 2026] [security2:error] [pid 1028675:tid 1028904] [client 52.139.37.240:33549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superresources.com"] [uri "/upfile.php"] [unique_id "apK9T9dHPfW2QFvhmL7P-AAAAF4"]
[Sat Aug 29 05:06:55.049316 2026] [security2:error] [pid 1018003:tid 1018075] [remote 34.139.66.91:54766] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "tgd6.com"] [uri "/wp-config.php.swp"] [unique_id "apK9TzAh5Y1i2tUxg4EGywAFyzY"]
[Sat Aug 29 05:06:55.058504 2026] [core:error] [pid 1028675:tid 1028882] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.058523 2026] [core:error] [pid 1028675:tid 1028882] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.063572 2026] [core:error] [pid 1028675:tid 1028826] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.063633 2026] [core:error] [pid 1028675:tid 1028826] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.065514 2026] [core:error] [pid 1028675:tid 1028881] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.065539 2026] [core:error] [pid 1028675:tid 1028881] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.069293 2026] [security2:error] [pid 1028675:tid 1028920] [client 52.139.37.240:2900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxbible.org"] [uri "/upfile.php"] [unique_id "apK9T9dHPfW2QFvhmL7QAwAAAG4"]
[Sat Aug 29 05:06:55.075321 2026] [core:error] [pid 1028675:tid 1028870] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.075337 2026] [core:error] [pid 1028675:tid 1028870] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.076174 2026] [core:error] [pid 1018003:tid 1018238] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.076187 2026] [core:error] [pid 1018003:tid 1018238] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.091980 2026] [core:error] [pid 1028675:tid 1028928] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.091996 2026] [core:error] [pid 1028675:tid 1028928] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.093373 2026] [core:error] [pid 1028675:tid 1028829] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.093389 2026] [core:error] [pid 1028675:tid 1028829] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.094663 2026] [core:error] [pid 1018003:tid 1018262] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.094676 2026] [core:error] [pid 1018003:tid 1018262] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.095774 2026] [core:error] [pid 1028675:tid 1028893] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.095792 2026] [core:error] [pid 1028675:tid 1028893] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.096166 2026] [core:error] [pid 1018003:tid 1018155] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.096178 2026] [core:error] [pid 1018003:tid 1018155] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.101108 2026] [security2:error] [pid 1018003:tid 1018267] [client 20.104.49.130:46539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/srontol.php"] [unique_id "apK9TzAh5Y1i2tUxg4EG3AAABis"]
[Sat Aug 29 05:06:55.109048 2026] [security2:error] [pid 1028675:tid 1028818] [client 52.139.37.240:31497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9T9dHPfW2QFvhmL7QCwAAAAg"]
[Sat Aug 29 05:06:55.110625 2026] [security2:error] [pid 1028675:tid 1028916] [client 52.139.37.240:32033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK9T9dHPfW2QFvhmL7QDQAAAGo"]
[Sat Aug 29 05:06:55.110828 2026] [core:error] [pid 1028675:tid 1028934] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.110837 2026] [core:error] [pid 1028675:tid 1028934] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.119979 2026] [core:error] [pid 1018003:tid 1018206] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.119993 2026] [core:error] [pid 1018003:tid 1018206] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.128163 2026] [cgid:error] [pid 1028675:tid 1028877] [client 20.52.41.200:1749] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/cpslggc/404.shtml
[Sat Aug 29 05:06:55.128503 2026] [core:error] [pid 1028675:tid 1028849] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.128524 2026] [core:error] [pid 1028675:tid 1028849] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.130127 2026] [security2:error] [pid 1028675:tid 1028859] [client 52.139.37.240:20865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/item.php"] [unique_id "apK9T9dHPfW2QFvhmL7QEAAAADE"]
[Sat Aug 29 05:06:55.141987 2026] [security2:error] [pid 1018003:tid 1018160] [client 158.23.147.79:24458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/log-mama/function.php"] [unique_id "apK9TzAh5Y1i2tUxg4EG5AAABcE"]
[Sat Aug 29 05:06:55.152689 2026] [security2:error] [pid 1028675:tid 1028929] [client 20.48.250.41:21340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK9T9dHPfW2QFvhmL7QEwAAAHc"]
[Sat Aug 29 05:06:55.156332 2026] [security2:error] [pid 1028675:tid 1028850] [client 68.155.159.216:65098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/dropdown.php"] [unique_id "apK9T9dHPfW2QFvhmL7QFQAAACg"]
[Sat Aug 29 05:06:55.161444 2026] [security2:error] [pid 1028675:tid 1028855] [client 4.205.62.107:22063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/olfclass.php"] [unique_id "apK9T9dHPfW2QFvhmL7QFwAAAC0"]
[Sat Aug 29 05:06:55.167076 2026] [core:error] [pid 1018003:tid 1018192] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.167095 2026] [core:error] [pid 1018003:tid 1018192] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.170966 2026] [security2:error] [pid 1028675:tid 1028887] [client 158.23.147.79:50145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/file.php"] [unique_id "apK9T9dHPfW2QFvhmL7QGAAAAE0"]
[Sat Aug 29 05:06:55.179766 2026] [core:error] [pid 1028675:tid 1028817] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.179790 2026] [core:error] [pid 1028675:tid 1028817] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.180333 2026] [security2:error] [pid 1028675:tid 1028932] [client 68.155.159.216:18289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/hehehehe.php"] [unique_id "apK9T9dHPfW2QFvhmL7QGgAAAHo"]
[Sat Aug 29 05:06:55.206043 2026] [security2:error] [pid 1018003:tid 1018194] [client 93.123.109.228:52464] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/admin-app/.env"] [unique_id "apK9TzAh5Y1i2tUxg4EG8gAABeM"]
[Sat Aug 29 05:06:55.238673 2026] [core:error] [pid 1018003:tid 1018187] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.238691 2026] [core:error] [pid 1018003:tid 1018187] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.244545 2026] [security2:error] [pid 1018003:tid 1018156] [client 61.9.8.151:60029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK9TzAh5Y1i2tUxg4EG_AAABb0"]
[Sat Aug 29 05:06:55.244630 2026] [security2:error] [pid 1018003:tid 1018156] [client 61.9.8.151:60029] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK9TzAh5Y1i2tUxg4EG_AAABb0"]
[Sat Aug 29 05:06:55.247142 2026] [security2:error] [pid 1028675:tid 1028905] [client 20.196.209.81:5815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-admin/options-general.php"] [unique_id "apK9T9dHPfW2QFvhmL7QJQAAAF8"]
[Sat Aug 29 05:06:55.248297 2026] [security2:error] [pid 1028675:tid 1028832] [client 168.107.94.195:49340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9T9dHPfW2QFvhmL7QJgAAABY"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:55.250113 2026] [core:error] [pid 1018003:tid 1018105] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.250134 2026] [core:error] [pid 1018003:tid 1018105] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.257917 2026] [security2:error] [pid 1028675:tid 1028836] [client 158.23.147.79:30534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-admin/images/about.php"] [unique_id "apK9T9dHPfW2QFvhmL7QKQAAABo"]
[Sat Aug 29 05:06:55.258213 2026] [security2:error] [pid 1018003:tid 1018261] [client 52.139.37.240:32859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superresources.com"] [uri "/form.php"] [unique_id "apK9TzAh5Y1i2tUxg4EHAgAABiU"]
[Sat Aug 29 05:06:55.262145 2026] [security2:error] [pid 1028675:tid 1028858] [client 158.23.147.79:35743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/xmlrpc.php"] [unique_id "apK9T9dHPfW2QFvhmL7QLAAAADA"]
[Sat Aug 29 05:06:55.264152 2026] [security2:error] [pid 1028675:tid 1028828] [client 40.83.93.50:7699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/Js.php"] [unique_id "apK9T9dHPfW2QFvhmL7QLQAAABI"]
[Sat Aug 29 05:06:55.270846 2026] [security2:error] [pid 1018003:tid 1018169] [client 52.139.37.240:2893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxbible.org"] [uri "/form.php"] [unique_id "apK9TzAh5Y1i2tUxg4EHBgAABco"]
[Sat Aug 29 05:06:55.274431 2026] [core:error] [pid 1018003:tid 1018175] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.274445 2026] [core:error] [pid 1018003:tid 1018175] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.278770 2026] [core:error] [pid 1028675:tid 1028921] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.278787 2026] [core:error] [pid 1028675:tid 1028921] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.282064 2026] [cgid:error] [pid 1028675:tid 1028819] [client 20.52.41.200:1749] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/cpslggc/404.shtml
[Sat Aug 29 05:06:55.287387 2026] [security2:error] [pid 1028675:tid 1028937] [client 20.151.200.44:62725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/f2r4.php"] [unique_id "apK9T9dHPfW2QFvhmL7QNgAAAH8"]
[Sat Aug 29 05:06:55.291317 2026] [security2:error] [pid 1018003:tid 1018271] [client 20.48.250.41:21425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/06.php"] [unique_id "apK9TzAh5Y1i2tUxg4EHDgAABi8"]
[Sat Aug 29 05:06:55.293656 2026] [core:error] [pid 1018003:tid 1018246] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.293675 2026] [core:error] [pid 1018003:tid 1018246] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.295126 2026] [core:error] [pid 1028675:tid 1028838] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.295139 2026] [core:error] [pid 1028675:tid 1028838] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.296726 2026] [core:error] [pid 1018003:tid 1018191] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.296740 2026] [core:error] [pid 1018003:tid 1018191] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.300527 2026] [security2:error] [pid 1028675:tid 1028935] [client 52.139.37.240:32103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK9T9dHPfW2QFvhmL7QOgAAAH0"]
[Sat Aug 29 05:06:55.300713 2026] [core:error] [pid 1028675:tid 1028872] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.300721 2026] [core:error] [pid 1028675:tid 1028872] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.313073 2026] [core:error] [pid 1028675:tid 1028826] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.313092 2026] [core:error] [pid 1028675:tid 1028826] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.315991 2026] [core:error] [pid 1028675:tid 1028895] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.316002 2026] [core:error] [pid 1028675:tid 1028895] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.324377 2026] [security2:error] [pid 1018003:tid 1018106] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/.wp-config.php.swp"] [unique_id "apK9TzAh5Y1i2tUxg4EHEwAF_1U"]
[Sat Aug 29 05:06:55.328750 2026] [core:error] [pid 1028675:tid 1028831] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.328771 2026] [core:error] [pid 1028675:tid 1028831] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.329657 2026] [core:error] [pid 1028675:tid 1028870] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.329668 2026] [core:error] [pid 1028675:tid 1028870] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.332187 2026] [core:error] [pid 1018003:tid 1018221] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.332204 2026] [core:error] [pid 1018003:tid 1018221] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.335143 2026] [security2:error] [pid 1028675:tid 1028875] [client 20.104.49.130:43044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/ohct.php"] [unique_id "apK9T9dHPfW2QFvhmL7QQwAAAEE"]
[Sat Aug 29 05:06:55.336590 2026] [core:error] [pid 1028675:tid 1028829] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.336610 2026] [core:error] [pid 1028675:tid 1028829] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.339756 2026] [security2:error] [pid 1028675:tid 1028916] [client 20.151.200.44:47328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/mcd.php"] [unique_id "apK9T9dHPfW2QFvhmL7QRQAAAGo"]
[Sat Aug 29 05:06:55.341406 2026] [security2:error] [pid 1028675:tid 1028856] [client 20.196.209.81:9767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/aksinet.php"] [unique_id "apK9T9dHPfW2QFvhmL7QRgAAAC4"]
[Sat Aug 29 05:06:55.346212 2026] [security2:error] [pid 1028675:tid 1028888] [client 52.139.37.240:20871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/jga.php"] [unique_id "apK9T9dHPfW2QFvhmL7QSAAAAE4"]
[Sat Aug 29 05:06:55.354118 2026] [security2:error] [pid 1028675:tid 1028820] [client 158.158.54.35:20342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-admin/index.php"] [unique_id "apK9T9dHPfW2QFvhmL7QSQAAAAo"]
[Sat Aug 29 05:06:55.359055 2026] [autoindex:error] [pid 1018003:tid 1018172] [client 52.139.37.240:0] AH01276: Cannot serve directory /home4/swumccom/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:06:55.371105 2026] [security2:error] [pid 1018003:tid 1018152] [client 93.123.109.228:52548] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/administrator/.env"] [unique_id "apK9TzAh5Y1i2tUxg4EHGAAABbk"]
[Sat Aug 29 05:06:55.372790 2026] [security2:error] [pid 1018003:tid 1018162] [client 4.205.62.107:9199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/userfuns.php"] [unique_id "apK9TzAh5Y1i2tUxg4EHGQAABcM"]
[Sat Aug 29 05:06:55.395147 2026] [security2:error] [pid 1018003:tid 1018170] [client 93.123.109.228:52464] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/api-backend/.env"] [unique_id "apK9TzAh5Y1i2tUxg4EHGgAABcs"]
[Sat Aug 29 05:06:55.395251 2026] [security2:error] [pid 1028675:tid 1028815] [client 158.158.54.35:17808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-content/themes/admin.php"] [unique_id "apK9T9dHPfW2QFvhmL7QTgAAAAU"]
[Sat Aug 29 05:06:55.399790 2026] [security2:error] [pid 1028675:tid 1028883] [client 93.123.109.228:52406] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/api-node/.env"] [unique_id "apK9T9dHPfW2QFvhmL7QUAAAAEk"]
[Sat Aug 29 05:06:55.416649 2026] [security2:error] [pid 1028675:tid 1028850] [client 93.123.109.228:52470] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/api/.env"] [unique_id "apK9T9dHPfW2QFvhmL7QUQAAACg"]
[Sat Aug 29 05:06:55.424875 2026] [security2:error] [pid 1028675:tid 1028922] [client 52.139.37.240:31141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/wp-index.php"] [unique_id "apK9T9dHPfW2QFvhmL7QUwAAAHA"]
[Sat Aug 29 05:06:55.426716 2026] [security2:error] [pid 1028675:tid 1028892] [client 68.155.159.216:9218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK9T9dHPfW2QFvhmL7QVAAAAFI"]
[Sat Aug 29 05:06:55.432342 2026] [security2:error] [pid 1028675:tid 1028863] [client 20.52.41.200:1749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-content/upgrade/index.php"] [unique_id "apK9T9dHPfW2QFvhmL7QVQAAADU"]
[Sat Aug 29 05:06:55.448241 2026] [security2:error] [pid 1018003:tid 1018155] [client 4.205.62.107:26660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/hiquido.com/index.php"] [unique_id "apK9TzAh5Y1i2tUxg4EHHAAABbw"]
[Sat Aug 29 05:06:55.449491 2026] [security2:error] [pid 1028675:tid 1028933] [client 52.139.37.240:32834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superresources.com"] [uri "/wp-sigunq.php"] [unique_id "apK9T9dHPfW2QFvhmL7QVwAAAHs"]
[Sat Aug 29 05:06:55.459644 2026] [security2:error] [pid 1028675:tid 1028890] [client 20.48.250.41:21481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/class.php"] [unique_id "apK9T9dHPfW2QFvhmL7QWAAAAFA"]
[Sat Aug 29 05:06:55.462817 2026] [security2:error] [pid 1018003:tid 1018213] [client 4.205.62.107:21611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/hiquido.com/index.php"] [unique_id "apK9TzAh5Y1i2tUxg4EHIQAABfY"]
[Sat Aug 29 05:06:55.468614 2026] [security2:error] [pid 1028675:tid 1028822] [client 52.139.37.240:2576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxbible.org"] [uri "/wp-sigunq.php"] [unique_id "apK9T9dHPfW2QFvhmL7QWQAAAAw"]
[Sat Aug 29 05:06:55.478152 2026] [security2:error] [pid 1018003:tid 1018184] [client 4.205.62.107:51482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/asa.php"] [unique_id "apK9TzAh5Y1i2tUxg4EHIgAABdk"]
[Sat Aug 29 05:06:55.482901 2026] [security2:error] [pid 1018003:tid 1018258] [client 68.155.159.216:50330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK9TzAh5Y1i2tUxg4EHIwAABiI"]
[Sat Aug 29 05:06:55.490088 2026] [security2:error] [pid 1018003:tid 1018080] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/Api/.env"] [unique_id "apK9TzAh5Y1i2tUxg4EHJgAFwTs"]
[Sat Aug 29 05:06:55.490389 2026] [security2:error] [pid 1018003:tid 1018138] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/BACK/.env"] [unique_id "apK9TzAh5Y1i2tUxg4EHJQAFwXU"]
[Sat Aug 29 05:06:55.490451 2026] [security2:error] [pid 1018003:tid 1018094] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/BACKEND/.env"] [unique_id "apK9TzAh5Y1i2tUxg4EHJwAFwUk"]
[Sat Aug 29 05:06:55.495085 2026] [security2:error] [pid 1028675:tid 1028925] [client 52.139.37.240:32718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/zafir1.php"] [unique_id "apK9T9dHPfW2QFvhmL7QWwAAAHM"]
[Sat Aug 29 05:06:55.503136 2026] [security2:error] [pid 1018003:tid 1018121] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/ADMIN/.env"] [unique_id "apK9TzAh5Y1i2tUxg4EHLAAF4WQ"]
[Sat Aug 29 05:06:55.503148 2026] [security2:error] [pid 1018003:tid 1018069] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/API/.env"] [unique_id "apK9TzAh5Y1i2tUxg4EHLQAF4TA"]
[Sat Aug 29 05:06:55.509452 2026] [security2:error] [pid 1018003:tid 1018207] [client 158.23.147.79:32677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK9TzAh5Y1i2tUxg4EHLwAABfA"]
[Sat Aug 29 05:06:55.511796 2026] [security2:error] [pid 1028675:tid 1028910] [client 4.205.62.107:22229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/application.config.php"] [unique_id "apK9T9dHPfW2QFvhmL7QXQAAAGQ"]
[Sat Aug 29 05:06:55.532940 2026] [core:error] [pid 1028675:tid 1028919] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.532955 2026] [core:error] [pid 1028675:tid 1028919] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.535319 2026] [core:error] [pid 1018003:tid 1018139] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.535335 2026] [core:error] [pid 1018003:tid 1018139] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.535537 2026] [core:error] [pid 1018003:tid 1018027] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.535550 2026] [core:error] [pid 1018003:tid 1018027] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.536042 2026] [core:error] [pid 1018003:tid 1018146] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.536051 2026] [core:error] [pid 1018003:tid 1018146] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.536289 2026] [core:error] [pid 1028675:tid 1028897] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.536300 2026] [core:error] [pid 1028675:tid 1028897] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.536931 2026] [core:error] [pid 1018003:tid 1018098] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.536939 2026] [core:error] [pid 1018003:tid 1018098] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.539007 2026] [security2:error] [pid 1028675:tid 1028908] [client 52.139.37.240:21130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/mac.php"] [unique_id "apK9T9dHPfW2QFvhmL7QYAAAAGI"]
[Sat Aug 29 05:06:55.539129 2026] [security2:error] [pid 1028675:tid 1028858] [client 158.23.147.79:25555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-admin/index.php"] [unique_id "apK9T9dHPfW2QFvhmL7QYQAAADA"]
[Sat Aug 29 05:06:55.543081 2026] [security2:error] [pid 1028675:tid 1028828] [client 68.155.159.216:24396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/lv.php"] [unique_id "apK9T9dHPfW2QFvhmL7QYgAAABI"]
[Sat Aug 29 05:06:55.558138 2026] [security2:error] [pid 1018003:tid 1018073] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/APP/.env"] [unique_id "apK9TzAh5Y1i2tUxg4EHPAAF7DQ"]
[Sat Aug 29 05:06:55.558253 2026] [core:error] [pid 1018003:tid 1018091] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.558264 2026] [core:error] [pid 1018003:tid 1018091] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.559537 2026] [core:error] [pid 1018003:tid 1018093] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.559557 2026] [core:error] [pid 1018003:tid 1018093] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.561922 2026] [security2:error] [pid 1018003:tid 1018109] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/BE/.env"] [unique_id "apK9TzAh5Y1i2tUxg4EHPQAFylg"]
[Sat Aug 29 05:06:55.620466 2026] [security2:error] [pid 1028675:tid 1028927] [client 20.48.250.41:21354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/8.php"] [unique_id "apK9T9dHPfW2QFvhmL7QaQAAAHU"]
[Sat Aug 29 05:06:55.622375 2026] [security2:error] [pid 1028675:tid 1028854] [client 52.139.37.240:31654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/ww2.php"] [unique_id "apK9T9dHPfW2QFvhmL7QawAAACw"]
[Sat Aug 29 05:06:55.629445 2026] [security2:error] [pid 1028675:tid 1028920] [client 168.107.94.195:49649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9T9dHPfW2QFvhmL7QbgAAAG4"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:55.635816 2026] [security2:error] [pid 1028675:tid 1028867] [client 68.155.159.216:49227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-includes/css/index.php"] [unique_id "apK9T9dHPfW2QFvhmL7QbwAAADk"]
[Sat Aug 29 05:06:55.644107 2026] [security2:error] [pid 1018003:tid 1018188] [client 52.139.37.240:33547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superresources.com"] [uri "/07.php"] [unique_id "apK9TzAh5Y1i2tUxg4EHRQAABd0"]
[Sat Aug 29 05:06:55.645601 2026] [core:error] [pid 1028675:tid 1028813] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.645614 2026] [core:error] [pid 1028675:tid 1028813] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.655974 2026] [security2:error] [pid 1018003:tid 1018239] [client 20.104.49.130:47847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/static.php"] [unique_id "apK9TzAh5Y1i2tUxg4EHUAAABg8"]
[Sat Aug 29 05:06:55.659109 2026] [security2:error] [pid 1018003:tid 1018122] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/Backend/.env"] [unique_id "apK9TzAh5Y1i2tUxg4EHUgAGH2U"]
[Sat Aug 29 05:06:55.659491 2026] [security2:error] [pid 1018003:tid 1018107] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/Be/.env"] [unique_id "apK9TzAh5Y1i2tUxg4EHUwAGH1Y"]
[Sat Aug 29 05:06:55.659928 2026] [security2:error] [pid 1028675:tid 1028837] [client 158.23.147.79:30590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK9T9dHPfW2QFvhmL7QdQAAABs"]
[Sat Aug 29 05:06:55.664536 2026] [security2:error] [pid 1028675:tid 1028935] [client 52.139.37.240:2580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxbible.org"] [uri "/07.php"] [unique_id "apK9T9dHPfW2QFvhmL7QeAAAAH0"]
[Sat Aug 29 05:06:55.668064 2026] [security2:error] [pid 1028675:tid 1028832] [client 20.196.209.81:5777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-admin/options.php"] [unique_id "apK9T9dHPfW2QFvhmL7QeQAAABY"]
[Sat Aug 29 05:06:55.672975 2026] [core:error] [pid 1018003:tid 1018120] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.672992 2026] [core:error] [pid 1018003:tid 1018120] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.684569 2026] [security2:error] [pid 1018003:tid 1018243] [client 158.23.147.79:48191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/about/function.php"] [unique_id "apK9TzAh5Y1i2tUxg4EHVwAABhM"]
[Sat Aug 29 05:06:55.689273 2026] [security2:error] [pid 1028675:tid 1028847] [client 52.139.37.240:32746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/abc.php"] [unique_id "apK9T9dHPfW2QFvhmL7QewAAACU"]
[Sat Aug 29 05:06:55.690321 2026] [core:error] [pid 1028675:tid 1028821] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.690339 2026] [core:error] [pid 1028675:tid 1028821] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.694857 2026] [core:error] [pid 1018003:tid 1018230] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.694885 2026] [core:error] [pid 1018003:tid 1018230] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.716979 2026] [core:error] [pid 1028675:tid 1028829] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.717001 2026] [core:error] [pid 1028675:tid 1028829] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.717810 2026] [core:error] [pid 1028675:tid 1028911] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.717826 2026] [core:error] [pid 1028675:tid 1028911] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.719442 2026] [core:error] [pid 1018003:tid 1018200] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.719458 2026] [core:error] [pid 1018003:tid 1018200] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.725623 2026] [security2:error] [pid 1028675:tid 1028818] [client 93.123.109.228:52468] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/apis/.env"] [unique_id "apK9T9dHPfW2QFvhmL7QgQAAAAg"]
[Sat Aug 29 05:06:55.729168 2026] [core:error] [pid 1018003:tid 1018162] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.729183 2026] [core:error] [pid 1018003:tid 1018162] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.729200 2026] [core:error] [pid 1018003:tid 1018231] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.729207 2026] [core:error] [pid 1018003:tid 1018231] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.739567 2026] [core:error] [pid 1028675:tid 1028820] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.739587 2026] [core:error] [pid 1028675:tid 1028820] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.760060 2026] [security2:error] [pid 1028675:tid 1028852] [client 52.139.37.240:21388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK9T9dHPfW2QFvhmL7QiQAAACo"]
[Sat Aug 29 05:06:55.764053 2026] [security2:error] [pid 1028675:tid 1028903] [client 20.196.209.81:14654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/alfa-rex1.php"] [unique_id "apK9T9dHPfW2QFvhmL7QigAAAF0"]
[Sat Aug 29 05:06:55.765610 2026] [security2:error] [pid 1028675:tid 1028849] [client 20.104.49.130:57615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/bdroot.php"] [unique_id "apK9T9dHPfW2QFvhmL7QjAAAACc"]
[Sat Aug 29 05:06:55.770188 2026] [security2:error] [pid 1028675:tid 1028857] [client 20.48.250.41:21489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/0x0x.php"] [unique_id "apK9T9dHPfW2QFvhmL7QjQAAAC8"]
[Sat Aug 29 05:06:55.770258 2026] [core:error] [pid 1028675:tid 1028931] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.770270 2026] [core:error] [pid 1028675:tid 1028931] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.772668 2026] [security2:error] [pid 1028675:tid 1028841] [client 20.197.61.180:9715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/hello.php"] [unique_id "apK9T9dHPfW2QFvhmL7QjgAAAB8"]
[Sat Aug 29 05:06:55.779547 2026] [core:error] [pid 1028675:tid 1028929] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.779562 2026] [core:error] [pid 1028675:tid 1028929] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.779591 2026] [core:error] [pid 1028675:tid 1028850] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.779601 2026] [core:error] [pid 1028675:tid 1028850] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.780897 2026] [core:error] [pid 1028675:tid 1028900] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.780916 2026] [core:error] [pid 1028675:tid 1028900] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.791111 2026] [security2:error] [pid 1018003:tid 1018240] [client 93.123.109.228:52506] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/app/.env"] [unique_id "apK9TzAh5Y1i2tUxg4EHcAAABhA"]
[Sat Aug 29 05:06:55.816820 2026] [security2:error] [pid 1018003:tid 1018277] [client 40.83.93.50:7717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/access.php"] [unique_id "apK9TzAh5Y1i2tUxg4EHdwAABjU"]
[Sat Aug 29 05:06:55.820079 2026] [security2:error] [pid 1028675:tid 1028871] [client 52.139.37.240:31153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/7logs.php"] [unique_id "apK9T9dHPfW2QFvhmL7QlgAAAD0"]
[Sat Aug 29 05:06:55.824526 2026] [security2:error] [pid 1018003:tid 1018161] [client 68.155.159.216:65059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9TzAh5Y1i2tUxg4EHeAAABcI"]
[Sat Aug 29 05:06:55.830858 2026] [security2:error] [pid 1018003:tid 1018180] [client 158.158.54.35:16129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/radio.php"] [unique_id "apK9TzAh5Y1i2tUxg4EHegAABdU"]
[Sat Aug 29 05:06:55.834381 2026] [security2:error] [pid 1018003:tid 1018268] [client 68.155.159.216:2007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9TzAh5Y1i2tUxg4EHewAABiw"]
[Sat Aug 29 05:06:55.843762 2026] [core:error] [pid 1028675:tid 1028865] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.843780 2026] [core:error] [pid 1028675:tid 1028865] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.844085 2026] [core:error] [pid 1028675:tid 1028846] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.844099 2026] [core:error] [pid 1028675:tid 1028846] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.847608 2026] [security2:error] [pid 1018003:tid 1018179] [client 158.158.54.35:38402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-admin/css/admin.php"] [unique_id "apK9TzAh5Y1i2tUxg4EHfAAABdQ"]
[Sat Aug 29 05:06:55.850570 2026] [core:error] [pid 1018003:tid 1018207] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.850584 2026] [core:error] [pid 1018003:tid 1018207] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.861863 2026] [security2:error] [pid 1018003:tid 1018236] [client 52.139.37.240:33566] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "superresources.com"] [uri "/c99.php"] [unique_id "apK9TzAh5Y1i2tUxg4EHggAABgw"]
[Sat Aug 29 05:06:55.861863 2026] [security2:error] [pid 1028675:tid 1028932] [client 52.139.37.240:2880] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "fairfaxbible.org"] [uri "/c99.php"] [unique_id "apK9T9dHPfW2QFvhmL7QmwAAAHo"]
[Sat Aug 29 05:06:55.881145 2026] [security2:error] [pid 1018003:tid 1018198] [client 20.151.200.44:47373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/waw.php"] [unique_id "apK9TzAh5Y1i2tUxg4EHigAABec"]
[Sat Aug 29 05:06:55.887279 2026] [security2:error] [pid 1028675:tid 1028845] [client 20.52.41.200:1261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "apK9T9dHPfW2QFvhmL7QogAAACM"]
[Sat Aug 29 05:06:55.887400 2026] [core:error] [pid 1018003:tid 1018124] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.887416 2026] [core:error] [pid 1018003:tid 1018124] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.908438 2026] [core:error] [pid 1018003:tid 1018212] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.908460 2026] [core:error] [pid 1018003:tid 1018212] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.924347 2026] [core:error] [pid 1018003:tid 1018169] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.924380 2026] [core:error] [pid 1018003:tid 1018169] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.924996 2026] [security2:error] [pid 1018003:tid 1018156] [client 4.205.62.107:53266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/sadd.php"] [unique_id "apK9TzAh5Y1i2tUxg4EHkQAABb0"]
[Sat Aug 29 05:06:55.927950 2026] [core:error] [pid 1028675:tid 1028879] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.927971 2026] [core:error] [pid 1028675:tid 1028879] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.930467 2026] [security2:error] [pid 1018003:tid 1018175] [client 20.48.250.41:21473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/166.php"] [unique_id "apK9TzAh5Y1i2tUxg4EHlAAABdA"]
[Sat Aug 29 05:06:55.932392 2026] [security2:error] [pid 1018003:tid 1018032] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK9TzAh5Y1i2tUxg4EHlQAGLgs"]
[Sat Aug 29 05:06:55.937743 2026] [core:error] [pid 1018003:tid 1018033] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.937764 2026] [core:error] [pid 1018003:tid 1018033] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.942018 2026] [core:error] [pid 1018003:tid 1018095] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.942032 2026] [core:error] [pid 1018003:tid 1018095] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.946861 2026] [core:error] [pid 1028675:tid 1028874] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.946876 2026] [core:error] [pid 1028675:tid 1028874] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.951120 2026] [core:error] [pid 1028675:tid 1028904] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.951139 2026] [core:error] [pid 1028675:tid 1028904] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.960791 2026] [core:error] [pid 1018003:tid 1018230] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.960808 2026] [core:error] [pid 1018003:tid 1018230] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.967084 2026] [core:error] [pid 1028675:tid 1028826] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.967098 2026] [core:error] [pid 1028675:tid 1028826] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.972683 2026] [core:error] [pid 1028675:tid 1028907] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.972702 2026] [core:error] [pid 1028675:tid 1028907] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.974570 2026] [core:error] [pid 1018003:tid 1018163] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:55.974587 2026] [core:error] [pid 1018003:tid 1018163] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.004163 2026] [security2:error] [pid 1028675:tid 1028814] [client 93.123.109.228:52546] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/application/.env"] [unique_id "apK9UNdHPfW2QFvhmL7QrwAAAAQ"]
[Sat Aug 29 05:06:56.004657 2026] [security2:error] [pid 1018003:tid 1018131] [remote 34.139.66.91:54766] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "tgd6.com"] [uri "/static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ"] [unique_id "apK9UDAh5Y1i2tUxg4EHqAAFy24"]
[Sat Aug 29 05:06:56.008292 2026] [security2:error] [pid 1028675:tid 1028889] [client 93.123.109.228:52428] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/apps/.env"] [unique_id "apK9UNdHPfW2QFvhmL7QsAAAAE8"]
[Sat Aug 29 05:06:56.009430 2026] [security2:error] [pid 1028675:tid 1028885] [client 168.107.94.195:49920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9UNdHPfW2QFvhmL7QsQAAAEs"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:56.044384 2026] [security2:error] [pid 1028675:tid 1028895] [client 20.151.200.44:64399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/sadis.php"] [unique_id "apK9UNdHPfW2QFvhmL7QsgAAAFU"]
[Sat Aug 29 05:06:56.055789 2026] [security2:error] [pid 1028675:tid 1028862] [client 20.48.160.90:51688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9UNdHPfW2QFvhmL7QswAAADQ"]
[Sat Aug 29 05:06:56.067712 2026] [security2:error] [pid 1028675:tid 1028861] [client 20.48.250.41:21381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/h2a2ck.php"] [unique_id "apK9UNdHPfW2QFvhmL7QtgAAADM"]
[Sat Aug 29 05:06:56.069293 2026] [security2:error] [pid 1018003:tid 1018166] [client 20.196.209.81:22428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-admin/panel.php"] [unique_id "apK9UDAh5Y1i2tUxg4EHrAAABcc"]
[Sat Aug 29 05:06:56.101643 2026] [security2:error] [pid 1018003:tid 1018258] [client 158.23.147.79:59846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK9UDAh5Y1i2tUxg4EHtgAABiI"]
[Sat Aug 29 05:06:56.114646 2026] [security2:error] [pid 1018003:tid 1018161] [client 68.155.159.216:56542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK9UDAh5Y1i2tUxg4EHtwAABcI"]
[Sat Aug 29 05:06:56.121074 2026] [security2:error] [pid 1028675:tid 1028924] [client 68.155.159.216:33773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apK9UNdHPfW2QFvhmL7QuwAAAHI"]
[Sat Aug 29 05:06:56.121239 2026] [core:error] [pid 1018003:tid 1018180] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.121250 2026] [core:error] [pid 1018003:tid 1018180] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.123784 2026] [core:error] [pid 1018003:tid 1018268] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.123799 2026] [core:error] [pid 1018003:tid 1018268] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.128222 2026] [core:error] [pid 1028675:tid 1028823] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.128242 2026] [core:error] [pid 1028675:tid 1028823] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.128891 2026] [core:error] [pid 1018003:tid 1018196] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.128907 2026] [core:error] [pid 1018003:tid 1018196] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.129626 2026] [core:error] [pid 1018003:tid 1018202] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.129645 2026] [core:error] [pid 1018003:tid 1018202] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.149596 2026] [security2:error] [pid 1018003:tid 1018255] [client 127.0.0.1:28372] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "127.0.0.1"] [uri "/cgi-sys/autoconfig.cgi"] [unique_id "apK9UDAh5Y1i2tUxg4EHrQAABh8"]
[Sat Aug 29 05:06:56.149884 2026] [security2:error] [pid 1028675:tid 1028847] [client 74.7.228.38:39154] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "autoconfig.thehsubox.com"] [uri "/robots.txt"] [unique_id "apK9UNdHPfW2QFvhmL7QtAAAJRk"]
[Sat Aug 29 05:06:56.161066 2026] [security2:error] [pid 1018003:tid 1018213] [client 20.196.209.81:17889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/headerg.php"] [unique_id "apK9UDAh5Y1i2tUxg4EHwgAABfY"]
[Sat Aug 29 05:06:56.161526 2026] [security2:error] [pid 1028675:tid 1028896] [client 158.23.147.79:26604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK9UNdHPfW2QFvhmL7QwgAAAFY"]
[Sat Aug 29 05:06:56.184190 2026] [security2:error] [pid 1018003:tid 1018057] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/admin-app/.env"] [unique_id "apK9UDAh5Y1i2tUxg4EHywAF3CQ"]
[Sat Aug 29 05:06:56.186571 2026] [core:error] [pid 1018003:tid 1018052] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.186586 2026] [core:error] [pid 1018003:tid 1018052] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.192016 2026] [core:error] [pid 1018003:tid 1018246] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.192031 2026] [core:error] [pid 1018003:tid 1018246] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.197985 2026] [core:error] [pid 1018003:tid 1018060] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.197998 2026] [core:error] [pid 1018003:tid 1018060] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.200465 2026] [core:error] [pid 1028675:tid 1028887] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.200478 2026] [core:error] [pid 1028675:tid 1028887] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.201161 2026] [core:error] [pid 1018003:tid 1018024] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.201171 2026] [core:error] [pid 1018003:tid 1018024] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.205589 2026] [core:error] [pid 1028675:tid 1028892] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.205603 2026] [core:error] [pid 1028675:tid 1028892] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.209164 2026] [core:error] [pid 1018003:tid 1018049] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.209175 2026] [core:error] [pid 1018003:tid 1018049] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.212091 2026] [core:error] [pid 1018003:tid 1018134] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.212103 2026] [core:error] [pid 1018003:tid 1018134] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.223119 2026] [security2:error] [pid 1028675:tid 1028843] [client 68.155.159.216:6109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/goods.php"] [unique_id "apK9UNdHPfW2QFvhmL7QzAAAACE"]
[Sat Aug 29 05:06:56.231002 2026] [security2:error] [pid 1018003:tid 1018230] [client 20.48.250.41:21446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/error_log.php"] [unique_id "apK9UDAh5Y1i2tUxg4EH1QAABgY"]
[Sat Aug 29 05:06:56.245183 2026] [core:error] [pid 1018003:tid 1018243] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.245198 2026] [core:error] [pid 1018003:tid 1018243] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.251644 2026] [security2:error] [pid 1018003:tid 1018051] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/admin/phpinfo.php"] [unique_id "apK9UDAh5Y1i2tUxg4EH2QAF3B4"]
[Sat Aug 29 05:06:56.254448 2026] [security2:error] [pid 1028675:tid 1028890] [client 68.155.159.216:65139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/.well-known/index.php"] [unique_id "apK9UNdHPfW2QFvhmL7Q0AAAAFA"]
[Sat Aug 29 05:06:56.268304 2026] [security2:error] [pid 1018003:tid 1018152] [client 111.235.68.106:62087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK9UDAh5Y1i2tUxg4EH2wAABbk"]
[Sat Aug 29 05:06:56.268410 2026] [security2:error] [pid 1018003:tid 1018152] [client 111.235.68.106:62087] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK9UDAh5Y1i2tUxg4EH2wAABbk"]
[Sat Aug 29 05:06:56.273895 2026] [security2:error] [pid 1018003:tid 1018266] [client 158.23.147.79:50107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/file17.php"] [unique_id "apK9UDAh5Y1i2tUxg4EH3QAABio"]
[Sat Aug 29 05:06:56.275343 2026] [core:error] [pid 1018003:tid 1018038] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.275363 2026] [core:error] [pid 1018003:tid 1018038] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.277411 2026] [security2:error] [pid 1028675:tid 1028891] [client 158.23.147.79:24441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/bk/index.php"] [unique_id "apK9UNdHPfW2QFvhmL7Q0gAAAFE"]
[Sat Aug 29 05:06:56.280353 2026] [core:error] [pid 1018003:tid 1018078] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.280382 2026] [core:error] [pid 1018003:tid 1018078] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.282851 2026] [security2:error] [pid 1018003:tid 1018225] [client 158.158.54.35:20604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/item.php"] [unique_id "apK9UDAh5Y1i2tUxg4EH3wAABgI"]
[Sat Aug 29 05:06:56.285257 2026] [security2:error] [pid 1018003:tid 1018075] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/admin_phpinfo.php"] [unique_id "apK9UDAh5Y1i2tUxg4EH4QAF2zY"]
[Sat Aug 29 05:06:56.289827 2026] [security2:error] [pid 1018003:tid 1018183] [client 158.158.54.35:17793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/adminfuns.php"] [unique_id "apK9UDAh5Y1i2tUxg4EH4wAABdg"]
[Sat Aug 29 05:06:56.301317 2026] [security2:error] [pid 1028675:tid 1028894] [client 4.205.62.107:21596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/gnmlc.php"] [unique_id "apK9UNdHPfW2QFvhmL7Q1gAAAFQ"]
[Sat Aug 29 05:06:56.302632 2026] [security2:error] [pid 1028675:tid 1028931] [client 40.83.93.50:17313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/classsmtps.php"] [unique_id "apK9UNdHPfW2QFvhmL7Q1wAAAHk"]
[Sat Aug 29 05:06:56.310014 2026] [security2:error] [pid 1018003:tid 1018190] [client 158.23.147.79:62659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-l0gin.php"] [unique_id "apK9UDAh5Y1i2tUxg4EH5gAABd8"]
[Sat Aug 29 05:06:56.311081 2026] [security2:error] [pid 1018003:tid 1018085] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/administrator/.env"] [unique_id "apK9UDAh5Y1i2tUxg4EH5QAFukA"]
[Sat Aug 29 05:06:56.318069 2026] [security2:error] [pid 1028675:tid 1028846] [client 74.7.175.137:47346] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "scentsofmagic.store"] [uri "/robots.txt"] [unique_id "apK9UNdHPfW2QFvhmL7Q2AAAACQ"]
[Sat Aug 29 05:06:56.319055 2026] [security2:error] [pid 1018003:tid 1018275] [client 20.48.160.90:51667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9UDAh5Y1i2tUxg4EH6AAABjM"]
[Sat Aug 29 05:06:56.320619 2026] [core:error] [pid 1018003:tid 1018062] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.320634 2026] [core:error] [pid 1018003:tid 1018062] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.341158 2026] [security2:error] [pid 1018003:tid 1018194] [client 20.52.41.200:1277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/gifclass.php"] [unique_id "apK9UDAh5Y1i2tUxg4EH6wAABeM"]
[Sat Aug 29 05:06:56.343642 2026] [security2:error] [pid 1018003:tid 1018238] [client 93.123.109.228:52512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/back-api/.env"] [unique_id "apK9UDAh5Y1i2tUxg4EH7AAABg4"]
[Sat Aug 29 05:06:56.349611 2026] [security2:error] [pid 1018003:tid 1018172] [client 93.123.109.228:52498] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/back-end/.env"] [unique_id "apK9UDAh5Y1i2tUxg4EH7QAABc0"]
[Sat Aug 29 05:06:56.362547 2026] [security2:error] [pid 1018003:tid 1018166] [client 20.48.250.41:21326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/403.php"] [unique_id "apK9UDAh5Y1i2tUxg4EH7gAABcc"]
[Sat Aug 29 05:06:56.364968 2026] [security2:error] [pid 1018003:tid 1018256] [client 93.123.109.228:52492] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/back/.env"] [unique_id "apK9UDAh5Y1i2tUxg4EH7wAABiA"]
[Sat Aug 29 05:06:56.365559 2026] [security2:error] [pid 1028675:tid 1028910] [client 93.123.109.228:52546] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/backend-api/.env"] [unique_id "apK9UNdHPfW2QFvhmL7Q2gAAAGQ"]
[Sat Aug 29 05:06:56.370566 2026] [security2:error] [pid 1028675:tid 1028905] [client 158.23.147.79:35721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/atomlib.php"] [unique_id "apK9UNdHPfW2QFvhmL7Q2wAAAF8"]
[Sat Aug 29 05:06:56.381096 2026] [security2:error] [pid 1018003:tid 1018240] [client 158.23.147.79:30558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-admin.php"] [unique_id "apK9UDAh5Y1i2tUxg4EH8wAABhA"]
[Sat Aug 29 05:06:56.381646 2026] [security2:error] [pid 1018003:tid 1018067] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/api-backend/.env"] [unique_id "apK9UDAh5Y1i2tUxg4EH8gAF2i4"]
[Sat Aug 29 05:06:56.382910 2026] [core:error] [pid 1018003:tid 1018136] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.382921 2026] [core:error] [pid 1018003:tid 1018136] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.382973 2026] [core:error] [pid 1018003:tid 1018055] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.382983 2026] [core:error] [pid 1018003:tid 1018055] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.384906 2026] [security2:error] [pid 1018003:tid 1018115] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/api/.env"] [unique_id "apK9UDAh5Y1i2tUxg4EH9gAF2l4"]
[Sat Aug 29 05:06:56.385001 2026] [security2:error] [pid 1018003:tid 1018056] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/api-node/.env"] [unique_id "apK9UDAh5Y1i2tUxg4EH9AAF2iM"]
[Sat Aug 29 05:06:56.389000 2026] [security2:error] [pid 1018003:tid 1018160] [client 93.123.109.228:52456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK9UDAh5Y1i2tUxg4EH-QAABcE"]
[Sat Aug 29 05:06:56.389944 2026] [security2:error] [pid 1028675:tid 1028845] [client 168.107.94.195:50290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9UNdHPfW2QFvhmL7Q3AAAACM"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:56.391134 2026] [core:error] [pid 1018003:tid 1018089] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.391146 2026] [core:error] [pid 1018003:tid 1018089] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.412094 2026] [security2:error] [pid 1028675:tid 1028908] [client 20.151.200.44:64391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/xcre1.php"] [unique_id "apK9UNdHPfW2QFvhmL7Q3QAAAGI"]
[Sat Aug 29 05:06:56.446554 2026] [core:error] [pid 1018003:tid 1018070] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.446572 2026] [core:error] [pid 1018003:tid 1018070] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.448304 2026] [core:error] [pid 1018003:tid 1018112] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.448315 2026] [core:error] [pid 1018003:tid 1018112] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.449034 2026] [security2:error] [pid 1028675:tid 1028858] [client 74.7.175.137:47086] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "scentsofmagic.store"] [uri "/robots.txt"] [unique_id "apK9UNdHPfW2QFvhmL7Q4QAAMBw"], referer: http://scentsofmagic.store/robots.txt
[Sat Aug 29 05:06:56.452005 2026] [security2:error] [pid 1018003:tid 1018053] [remote 34.139.66.91:50250] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "tgd6.com"] [uri "/web.config"] [unique_id "apK9UDAh5Y1i2tUxg4EIBAAGNSA"]
[Sat Aug 29 05:06:56.454650 2026] [security2:error] [pid 1018003:tid 1018236] [client 114.119.132.57:40249] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.classiclightingusa.com"] [uri "/catalog/product_reviews_write.php/products_id/880/osCsid/98540975880f445559b164a4ef4b8d85"] [unique_id "apK9UDAh5Y1i2tUxg4EIBwAABgw"], referer: http://www.classiclightingusa.com/catalog/product_info.php/products_id/880/osCsid/98540975880f445559b164a4ef4b8d85
[Sat Aug 29 05:06:56.455916 2026] [core:error] [pid 1018003:tid 1018079] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.455929 2026] [core:error] [pid 1018003:tid 1018079] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.461689 2026] [core:error] [pid 1028675:tid 1028812] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.461705 2026] [core:error] [pid 1028675:tid 1028812] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.466476 2026] [security2:error] [pid 1028675:tid 1028824] [client 20.196.209.81:22418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-admin/pk.php"] [unique_id "apK9UNdHPfW2QFvhmL7Q5AAAAA4"]
[Sat Aug 29 05:06:56.474793 2026] [core:error] [pid 1028675:tid 1028937] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.474808 2026] [core:error] [pid 1028675:tid 1028937] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.500772 2026] [core:error] [pid 1018003:tid 1018077] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.500791 2026] [core:error] [pid 1018003:tid 1018077] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.511019 2026] [security2:error] [pid 1018003:tid 1018224] [client 20.197.61.180:11600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/fi2.php"] [unique_id "apK9UDAh5Y1i2tUxg4EIEAAABgE"]
[Sat Aug 29 05:06:56.513973 2026] [security2:error] [pid 1028675:tid 1028811] [client 103.162.125.59:55207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.125.162.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK9UNdHPfW2QFvhmL7Q6AAAAAE"]
[Sat Aug 29 05:06:56.514106 2026] [security2:error] [pid 1028675:tid 1028811] [client 103.162.125.59:55207] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK9UNdHPfW2QFvhmL7Q6AAAAAE"]
[Sat Aug 29 05:06:56.514237 2026] [security2:error] [pid 1018003:tid 1018099] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/api/info.php"] [unique_id "apK9UDAh5Y1i2tUxg4EIEgAF2k4"]
[Sat Aug 29 05:06:56.515257 2026] [security2:error] [pid 1028675:tid 1028930] [client 20.48.160.90:51273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/ser.php"] [unique_id "apK9UNdHPfW2QFvhmL7Q6QAAAHg"]
[Sat Aug 29 05:06:56.535173 2026] [security2:error] [pid 1018003:tid 1018156] [client 68.155.159.216:9310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/atomlib.php"] [unique_id "apK9UDAh5Y1i2tUxg4EIFgAABb0"]
[Sat Aug 29 05:06:56.540806 2026] [security2:error] [pid 1028675:tid 1028826] [client 93.123.109.228:52546] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/backup/.env"] [unique_id "apK9UNdHPfW2QFvhmL7Q7AAAABA"]
[Sat Aug 29 05:06:56.541598 2026] [security2:error] [pid 1028675:tid 1028816] [client 20.48.250.41:21444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/cytyr.php"] [unique_id "apK9UNdHPfW2QFvhmL7Q7QAAAAY"]
[Sat Aug 29 05:06:56.543494 2026] [core:error] [pid 1018003:tid 1018105] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.543507 2026] [core:error] [pid 1018003:tid 1018105] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.548729 2026] [security2:error] [pid 1018003:tid 1018169] [client 93.123.109.228:52456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/be/.env"] [unique_id "apK9UDAh5Y1i2tUxg4EIGQAABco"]
[Sat Aug 29 05:06:56.548978 2026] [security2:error] [pid 1028675:tid 1028882] [client 74.7.175.137:47360] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "scentsofmagic.store"] [uri "/robots.txt"] [unique_id "apK9UNdHPfW2QFvhmL7Q7gAAAEg"]
[Sat Aug 29 05:06:56.553628 2026] [security2:error] [pid 1018003:tid 1018191] [client 68.155.159.216:51679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-blog-header.php"] [unique_id "apK9UDAh5Y1i2tUxg4EIGgAABeA"]
[Sat Aug 29 05:06:56.559547 2026] [core:error] [pid 1018003:tid 1018244] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.559563 2026] [core:error] [pid 1018003:tid 1018244] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.560703 2026] [security2:error] [pid 1028675:tid 1028935] [client 93.123.109.228:52470] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/beta/.env"] [unique_id "apK9UNdHPfW2QFvhmL7Q8QAAAH0"]
[Sat Aug 29 05:06:56.561051 2026] [security2:error] [pid 1028675:tid 1028880] [client 20.196.209.81:9769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/meta.php"] [unique_id "apK9UNdHPfW2QFvhmL7Q8gAAAEY"]
[Sat Aug 29 05:06:56.562393 2026] [core:error] [pid 1028675:tid 1028837] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.562407 2026] [core:error] [pid 1028675:tid 1028837] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.570756 2026] [core:error] [pid 1018003:tid 1018030] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.570776 2026] [core:error] [pid 1018003:tid 1018030] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.579989 2026] [security2:error] [pid 1018003:tid 1018243] [client 20.151.200.44:64387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/motu.php"] [unique_id "apK9UDAh5Y1i2tUxg4EIHwAABhM"]
[Sat Aug 29 05:06:56.582904 2026] [core:error] [pid 1018003:tid 1018063] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.582920 2026] [core:error] [pid 1018003:tid 1018063] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.587050 2026] [core:error] [pid 1028675:tid 1028870] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.587066 2026] [core:error] [pid 1028675:tid 1028870] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.588742 2026] [security2:error] [pid 1018003:tid 1018187] [client 68.155.159.216:50272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK9UDAh5Y1i2tUxg4EIIAAABdw"]
[Sat Aug 29 05:06:56.594745 2026] [security2:error] [pid 1028675:tid 1028878] [client 20.104.49.130:56226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.danesquality.com"] [uri "/bthil.php"] [unique_id "apK9UNdHPfW2QFvhmL7Q9QAAAEQ"]
[Sat Aug 29 05:06:56.600119 2026] [security2:error] [pid 1018003:tid 1018152] [client 4.205.62.107:22147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/app_local.php"] [unique_id "apK9UDAh5Y1i2tUxg4EIIQAABbk"]
[Sat Aug 29 05:06:56.609140 2026] [core:error] [pid 1018003:tid 1018076] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.609155 2026] [core:error] [pid 1018003:tid 1018076] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.610376 2026] [security2:error] [pid 1028675:tid 1028861] [client 4.205.62.107:24976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/ws79.php"] [unique_id "apK9UNdHPfW2QFvhmL7Q-AAAADM"]
[Sat Aug 29 05:06:56.613393 2026] [core:error] [pid 1018003:tid 1018108] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.613408 2026] [core:error] [pid 1018003:tid 1018108] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.614579 2026] [security2:error] [pid 1028675:tid 1028856] [client 158.23.147.79:32579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apK9UNdHPfW2QFvhmL7Q-gAAAC4"]
[Sat Aug 29 05:06:56.616366 2026] [security2:error] [pid 1018003:tid 1018118] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/api/phpinfo.php"] [unique_id "apK9UDAh5Y1i2tUxg4EIJgAF2mE"]
[Sat Aug 29 05:06:56.624882 2026] [security2:error] [pid 1018003:tid 1018183] [client 4.205.62.107:58385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/aww.php"] [unique_id "apK9UDAh5Y1i2tUxg4EIJwAABdg"]
[Sat Aug 29 05:06:56.629128 2026] [security2:error] [pid 1028675:tid 1028898] [client 4.205.62.107:8980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/register.php"] [unique_id "apK9UNdHPfW2QFvhmL7Q9gAAAFg"]
[Sat Aug 29 05:06:56.643370 2026] [core:error] [pid 1018003:tid 1018175] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.643390 2026] [core:error] [pid 1018003:tid 1018175] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.647246 2026] [security2:error] [pid 1018003:tid 1018189] [client 4.205.62.107:22297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/v2.php"] [unique_id "apK9UDAh5Y1i2tUxg4EIMAAABd4"]
[Sat Aug 29 05:06:56.647263 2026] [security2:error] [pid 1018003:tid 1018157] [client 158.23.147.79:25493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK9UDAh5Y1i2tUxg4EIMQAABb4"]
[Sat Aug 29 05:06:56.654663 2026] [core:error] [pid 1018003:tid 1018221] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.654676 2026] [core:error] [pid 1018003:tid 1018221] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.655706 2026] [core:error] [pid 1018003:tid 1018262] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.655718 2026] [core:error] [pid 1018003:tid 1018262] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.675914 2026] [security2:error] [pid 1028675:tid 1028903] [client 93.123.109.228:52406] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/client/.env"] [unique_id "apK9UNdHPfW2QFvhmL7Q_wAAAF0"]
[Sat Aug 29 05:06:56.676757 2026] [core:error] [pid 1028675:tid 1028911] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.676773 2026] [core:error] [pid 1028675:tid 1028911] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.678906 2026] [security2:error] [pid 1018003:tid 1018270] [client 74.7.175.137:47102] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "scentsofmagic.store"] [uri "/robots.txt"] [unique_id "apK9UDAh5Y1i2tUxg4EIOAAABi4"], referer: http://scentsofmagic.store/robots.txt
[Sat Aug 29 05:06:56.692883 2026] [security2:error] [pid 1028675:tid 1028847] [client 93.123.109.228:52546] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/cms/.env"] [unique_id "apK9UNdHPfW2QFvhmL7RAgAAACU"]
[Sat Aug 29 05:06:56.697134 2026] [security2:error] [pid 1018003:tid 1018161] [client 216.244.66.243:45872] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "scottportfolio.com"] [uri "/userfiles/akkumuliatornaia-vozdukhoduvka-sadovyi-pylesos-makita-dub185z.xml"] [unique_id "apK9UDAh5Y1i2tUxg4EIOwAABcI"]
[Sat Aug 29 05:06:56.697232 2026] [security2:error] [pid 1018003:tid 1018161] [client 216.244.66.243:45872] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "scottportfolio.com"] [uri "/userfiles/akkumuliatornaia-vozdukhoduvka-sadovyi-pylesos-makita-dub185z.xml"] [unique_id "apK9UDAh5Y1i2tUxg4EIOwAABcI"]
[Sat Aug 29 05:06:56.700779 2026] [core:error] [pid 1018003:tid 1018240] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.700795 2026] [core:error] [pid 1018003:tid 1018240] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.702025 2026] [core:error] [pid 1028675:tid 1028876] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.702040 2026] [core:error] [pid 1028675:tid 1028876] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.713861 2026] [security2:error] [pid 1018003:tid 1018202] [client 20.48.160.90:51266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/431.php"] [unique_id "apK9UDAh5Y1i2tUxg4EIQQAABes"]
[Sat Aug 29 05:06:56.720834 2026] [security2:error] [pid 1018003:tid 1018219] [client 158.158.54.35:29649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/t.php"] [unique_id "apK9UDAh5Y1i2tUxg4EIQwAABfw"]
[Sat Aug 29 05:06:56.720994 2026] [security2:error] [pid 1018003:tid 1018236] [client 20.48.250.41:21372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/galer.php"] [unique_id "apK9UDAh5Y1i2tUxg4EIRAAABgw"]
[Sat Aug 29 05:06:56.735377 2026] [core:error] [pid 1028675:tid 1028922] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.735402 2026] [core:error] [pid 1028675:tid 1028922] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.735988 2026] [security2:error] [pid 1028675:tid 1028885] [client 158.158.54.35:9791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/goods.php"] [unique_id "apK9UNdHPfW2QFvhmL7RCgAAAEs"]
[Sat Aug 29 05:06:56.757619 2026] [security2:error] [pid 1028675:tid 1028915] [client 68.155.159.216:49206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK9UNdHPfW2QFvhmL7RCwAAAGk"]
[Sat Aug 29 05:06:56.760968 2026] [security2:error] [pid 1018003:tid 1018255] [client 20.151.200.44:64968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/wefile.php"] [unique_id "apK9UDAh5Y1i2tUxg4EIRgAABh8"]
[Sat Aug 29 05:06:56.763353 2026] [security2:error] [pid 1018003:tid 1018224] [client 74.7.175.137:47372] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "scentsofmagic.store"] [uri "/robots.txt"] [unique_id "apK9UDAh5Y1i2tUxg4EIRwAABgE"]
[Sat Aug 29 05:06:56.771820 2026] [security2:error] [pid 1028675:tid 1028933] [client 168.107.94.195:50606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9UNdHPfW2QFvhmL7RDAAAAHs"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:56.782088 2026] [security2:error] [pid 1018003:tid 1018080] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/apis/.env"] [unique_id "apK9UDAh5Y1i2tUxg4EISwAF1Ds"]
[Sat Aug 29 05:06:56.789352 2026] [security2:error] [pid 1028675:tid 1028871] [client 158.23.147.79:48241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-includes/customize/index.php"] [unique_id "apK9UNdHPfW2QFvhmL7RDwAAAD0"]
[Sat Aug 29 05:06:56.796919 2026] [cgid:error] [pid 1018003:tid 1018167] [client 20.52.41.200:1772] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/cpslggc/404.shtml
[Sat Aug 29 05:06:56.812584 2026] [security2:error] [pid 1018003:tid 1018190] [client 40.83.93.50:7591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/contentloader1.php"] [unique_id "apK9UDAh5Y1i2tUxg4EIUAAABd8"]
[Sat Aug 29 05:06:56.814758 2026] [core:error] [pid 1028675:tid 1028928] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.814773 2026] [core:error] [pid 1028675:tid 1028928] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.825113 2026] [core:error] [pid 1018003:tid 1018195] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.825129 2026] [core:error] [pid 1018003:tid 1018195] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.833621 2026] [core:error] [pid 1018003:tid 1018139] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.833636 2026] [core:error] [pid 1018003:tid 1018139] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.837960 2026] [core:error] [pid 1018003:tid 1018230] [client 74.7.241.152:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.837973 2026] [core:error] [pid 1018003:tid 1018230] [client 74.7.241.152:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.838074 2026] [security2:error] [pid 1018003:tid 1018230] [client 74.7.241.152:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "cpcontacts.hdfbookkeeping.com"] [uri "/___proxy_subdomain_cpcontacts/index.php"] [unique_id "apK9UDAh5Y1i2tUxg4EIWgAABgY"]
[Sat Aug 29 05:06:56.838199 2026] [core:error] [pid 1018003:tid 1018234] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.838209 2026] [core:error] [pid 1018003:tid 1018234] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.839060 2026] [security2:error] [pid 1018003:tid 1018243] [client 93.123.109.228:52464] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/config/.env"] [unique_id "apK9UDAh5Y1i2tUxg4EIXQAABhM"]
[Sat Aug 29 05:06:56.849915 2026] [security2:error] [pid 1028675:tid 1028925] [client 20.48.250.41:21466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/baixy.php"] [unique_id "apK9UNdHPfW2QFvhmL7RFwAAAHM"]
[Sat Aug 29 05:06:56.851631 2026] [core:error] [pid 1018003:tid 1018027] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.851643 2026] [core:error] [pid 1018003:tid 1018027] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.856929 2026] [security2:error] [pid 1028675:tid 1028892] [client 74.7.241.152:40066] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "cpcontacts.hdfbookkeeping.com"] [uri "/___proxy_subdomain_cpcontacts/robots.txt"] [unique_id "apK9UNdHPfW2QFvhmL7REQAAUh0"]
[Sat Aug 29 05:06:56.859879 2026] [core:error] [pid 1018003:tid 1018239] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.859893 2026] [core:error] [pid 1018003:tid 1018239] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.863182 2026] [security2:error] [pid 1028675:tid 1028887] [client 20.196.209.81:17194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-admin/plugin-install.php"] [unique_id "apK9UNdHPfW2QFvhmL7RGQAAAE0"]
[Sat Aug 29 05:06:56.863228 2026] [security2:error] [pid 1018003:tid 1018101] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/app/.env"] [unique_id "apK9UDAh5Y1i2tUxg4EIZAAF1FA"]
[Sat Aug 29 05:06:56.863350 2026] [core:error] [pid 1028675:tid 1028833] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.863387 2026] [core:error] [pid 1028675:tid 1028833] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.866016 2026] [core:error] [pid 1028675:tid 1028860] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.866027 2026] [core:error] [pid 1028675:tid 1028860] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.894934 2026] [security2:error] [pid 1028675:tid 1028932] [client 20.151.200.44:65003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/EM.php"] [unique_id "apK9UNdHPfW2QFvhmL7RIgAAAHo"]
[Sat Aug 29 05:06:56.895287 2026] [security2:error] [pid 1028675:tid 1028835] [client 74.7.175.137:47116] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "scentsofmagic.store"] [uri "/robots.txt"] [unique_id "apK9UNdHPfW2QFvhmL7RIQAAABk"], referer: http://scentsofmagic.store/robots.txt
[Sat Aug 29 05:06:56.902974 2026] [core:error] [pid 1028675:tid 1028858] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.902988 2026] [core:error] [pid 1028675:tid 1028858] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.914005 2026] [core:error] [pid 1028675:tid 1028912] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.914026 2026] [core:error] [pid 1028675:tid 1028912] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.914057 2026] [core:error] [pid 1028675:tid 1028881] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.914067 2026] [core:error] [pid 1028675:tid 1028881] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.932390 2026] [security2:error] [pid 1018003:tid 1018157] [client 68.155.159.216:64463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9UDAh5Y1i2tUxg4EIcQAABb4"]
[Sat Aug 29 05:06:56.947486 2026] [security2:error] [pid 1018003:tid 1018265] [client 20.52.41.200:1772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK9UDAh5Y1i2tUxg4EIdQAABik"]
[Sat Aug 29 05:06:56.970121 2026] [core:error] [pid 1028675:tid 1028919] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.970141 2026] [core:error] [pid 1028675:tid 1028919] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.973647 2026] [core:error] [pid 1028675:tid 1028831] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.973667 2026] [core:error] [pid 1028675:tid 1028831] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.977370 2026] [core:error] [pid 1028675:tid 1028867] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.977384 2026] [core:error] [pid 1028675:tid 1028867] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.977559 2026] [core:error] [pid 1028675:tid 1028826] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.977569 2026] [core:error] [pid 1028675:tid 1028826] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:56.981918 2026] [security2:error] [pid 1028675:tid 1028907] [client 20.48.250.41:21350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/ava.php"] [unique_id "apK9UNdHPfW2QFvhmL7RMgAAAGE"]
[Sat Aug 29 05:06:56.989648 2026] [security2:error] [pid 1028675:tid 1028821] [client 20.151.200.44:47366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/x23.php"] [unique_id "apK9UNdHPfW2QFvhmL7RNAAAAAs"]
[Sat Aug 29 05:06:56.998902 2026] [security2:error] [pid 1018003:tid 1018270] [client 20.48.160.90:51682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/rxr.php"] [unique_id "apK9UDAh5Y1i2tUxg4EIfwAABi4"]
[Sat Aug 29 05:06:57.003543 2026] [core:error] [pid 1018003:tid 1018177] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.003559 2026] [core:error] [pid 1018003:tid 1018177] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.005311 2026] [security2:error] [pid 1028675:tid 1028921] [client 20.196.209.81:17877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/dxc.php"] [unique_id "apK9UddHPfW2QFvhmL7RNwAAAG8"]
[Sat Aug 29 05:06:57.009398 2026] [core:error] [pid 1028675:tid 1028901] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.009412 2026] [core:error] [pid 1028675:tid 1028901] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.011101 2026] [core:error] [pid 1018003:tid 1018120] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.011114 2026] [core:error] [pid 1018003:tid 1018120] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.024566 2026] [core:error] [pid 1018003:tid 1018125] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.024584 2026] [core:error] [pid 1018003:tid 1018125] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.026654 2026] [core:error] [pid 1018003:tid 1018065] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.026672 2026] [core:error] [pid 1018003:tid 1018065] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.039637 2026] [core:error] [pid 1018003:tid 1018240] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.039665 2026] [core:error] [pid 1018003:tid 1018240] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.041072 2026] [security2:error] [pid 1028675:tid 1028886] [client 68.155.159.216:2005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK9UddHPfW2QFvhmL7RPQAAAEw"]
[Sat Aug 29 05:06:57.043581 2026] [core:error] [pid 1018003:tid 1018256] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.043597 2026] [core:error] [pid 1018003:tid 1018256] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.061595 2026] [security2:error] [pid 1028675:tid 1028911] [client 20.104.49.130:63579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/wpxml.php"] [unique_id "apK9UddHPfW2QFvhmL7RQAAAAGU"]
[Sat Aug 29 05:06:57.067376 2026] [core:error] [pid 1018003:tid 1018147] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.067391 2026] [core:error] [pid 1018003:tid 1018147] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.068732 2026] [security2:error] [pid 1028675:tid 1028849] [client 4.205.62.107:55961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/application.config.php"] [unique_id "apK9UddHPfW2QFvhmL7RQgAAACc"]
[Sat Aug 29 05:06:57.072227 2026] [security2:error] [pid 1018003:tid 1018123] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/application/.env"] [unique_id "apK9UTAh5Y1i2tUxg4EIkAAF1GY"]
[Sat Aug 29 05:06:57.091855 2026] [core:error] [pid 1028675:tid 1028903] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.091874 2026] [core:error] [pid 1028675:tid 1028903] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.097350 2026] [core:error] [pid 1018003:tid 1018160] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.097352 2026] [core:error] [pid 1018003:tid 1018236] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.097375 2026] [core:error] [pid 1018003:tid 1018160] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.097380 2026] [core:error] [pid 1018003:tid 1018236] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.106577 2026] [security2:error] [pid 1028675:tid 1028841] [client 20.151.200.44:64388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/ca4.php"] [unique_id "apK9UddHPfW2QFvhmL7RRwAAAB8"]
[Sat Aug 29 05:06:57.118756 2026] [security2:error] [pid 1018003:tid 1018277] [client 158.23.147.79:17482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/dropdown.php"] [unique_id "apK9UTAh5Y1i2tUxg4EIlAAABjU"]
[Sat Aug 29 05:06:57.152653 2026] [security2:error] [pid 1018003:tid 1018255] [client 168.107.94.195:50957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9UTAh5Y1i2tUxg4EIlgAABh8"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:57.153080 2026] [security2:error] [pid 1018003:tid 1018159] [client 68.155.159.216:24478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9UTAh5Y1i2tUxg4EIlwAABcA"]
[Sat Aug 29 05:06:57.160173 2026] [security2:error] [pid 1018003:tid 1018021] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/apps/.env"] [unique_id "apK9UTAh5Y1i2tUxg4EImQAF4QA"]
[Sat Aug 29 05:06:57.162383 2026] [core:error] [pid 1018003:tid 1018031] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.162392 2026] [core:error] [pid 1018003:tid 1018036] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.162397 2026] [core:error] [pid 1018003:tid 1018031] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.162401 2026] [core:error] [pid 1018003:tid 1018036] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.170772 2026] [security2:error] [pid 1028675:tid 1028856] [client 158.158.54.35:34251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/i.php"] [unique_id "apK9UddHPfW2QFvhmL7RSgAAAC4"]
[Sat Aug 29 05:06:57.177270 2026] [security2:error] [pid 1028675:tid 1028844] [client 20.48.250.41:21400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/gdn.php"] [unique_id "apK9UddHPfW2QFvhmL7RSwAAACI"]
[Sat Aug 29 05:06:57.179767 2026] [security2:error] [pid 1028675:tid 1028854] [client 158.158.54.35:18122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/css.php"] [unique_id "apK9UddHPfW2QFvhmL7RTAAAACw"]
[Sat Aug 29 05:06:57.188867 2026] [core:error] [pid 1018003:tid 1018103] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.188884 2026] [core:error] [pid 1018003:tid 1018103] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.193402 2026] [core:error] [pid 1018003:tid 1018033] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.193416 2026] [core:error] [pid 1018003:tid 1018033] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.194442 2026] [core:error] [pid 1018003:tid 1018071] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.194458 2026] [core:error] [pid 1018003:tid 1018071] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.217412 2026] [core:error] [pid 1018003:tid 1018095] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.217439 2026] [core:error] [pid 1018003:tid 1018095] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.217454 2026] [core:error] [pid 1018003:tid 1018054] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.217460 2026] [core:error] [pid 1018003:tid 1018054] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.222046 2026] [security2:error] [pid 1028675:tid 1028830] [client 68.155.159.216:38556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/file.php"] [unique_id "apK9UddHPfW2QFvhmL7RTgAAABQ"]
[Sat Aug 29 05:06:57.222419 2026] [security2:error] [pid 1028675:tid 1028909] [client 68.155.159.216:33736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK9UddHPfW2QFvhmL7RTwAAAGM"]
[Sat Aug 29 05:06:57.252699 2026] [security2:error] [pid 1018003:tid 1018166] [client 20.197.61.180:13846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/1p.php"] [unique_id "apK9UTAh5Y1i2tUxg4EIrgAABcc"]
[Sat Aug 29 05:06:57.257020 2026] [security2:error] [pid 1018003:tid 1018183] [client 20.104.49.130:58101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.carlosmua.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK9UTAh5Y1i2tUxg4EIrwAABdg"]
[Sat Aug 29 05:06:57.260093 2026] [security2:error] [pid 1028675:tid 1028885] [client 20.196.209.81:15091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-admin/plugins/img/themes/plugins/maintenance.php"] [unique_id "apK9UddHPfW2QFvhmL7RUQAAAEs"]
[Sat Aug 29 05:06:57.287009 2026] [security2:error] [pid 1028675:tid 1028925] [client 20.151.200.44:65010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/x0x.php"] [unique_id "apK9UddHPfW2QFvhmL7RUwAAAHM"]
[Sat Aug 29 05:06:57.302487 2026] [core:error] [pid 1028675:tid 1028892] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.302509 2026] [core:error] [pid 1028675:tid 1028892] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.304913 2026] [security2:error] [pid 1018003:tid 1018182] [client 158.23.147.79:26529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK9UTAh5Y1i2tUxg4EIvgAABdc"]
[Sat Aug 29 05:06:57.307626 2026] [core:error] [pid 1018003:tid 1018041] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.307644 2026] [core:error] [pid 1018003:tid 1018041] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.308352 2026] [core:error] [pid 1018003:tid 1018043] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.308381 2026] [core:error] [pid 1018003:tid 1018043] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.342758 2026] [security2:error] [pid 1028675:tid 1028845] [client 68.155.159.216:6114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK9UddHPfW2QFvhmL7RXQAAACM"]
[Sat Aug 29 05:06:57.346266 2026] [security2:error] [pid 1028675:tid 1028890] [client 74.7.244.40:34136] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.edward.chow-s.com"] [uri "/robots.txt"] [unique_id "apK9UddHPfW2QFvhmL7RWwAAUB4"]
[Sat Aug 29 05:06:57.352599 2026] [security2:error] [pid 1018003:tid 1018185] [client 158.23.147.79:61568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-content/radio.php"] [unique_id "apK9UTAh5Y1i2tUxg4EI0AAABdo"]
[Sat Aug 29 05:06:57.353542 2026] [core:error] [pid 1028675:tid 1028840] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.353558 2026] [core:error] [pid 1028675:tid 1028840] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.353675 2026] [security2:error] [pid 1018003:tid 1018163] [client 74.7.228.2:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.isasi.cloverleafsystems.com"] [uri "/cgi-sys/404.html"] [unique_id "apK9UTAh5Y1i2tUxg4EIzgAABcQ"]
[Sat Aug 29 05:06:57.354151 2026] [core:error] [pid 1018003:tid 1018170] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.354162 2026] [core:error] [pid 1018003:tid 1018170] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.357469 2026] [core:error] [pid 1018003:tid 1018271] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.357491 2026] [core:error] [pid 1018003:tid 1018271] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.358766 2026] [security2:error] [pid 1018003:tid 1018256] [client 20.48.250.41:21454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/f2.php"] [unique_id "apK9UTAh5Y1i2tUxg4EI0gAABiA"]
[Sat Aug 29 05:06:57.360389 2026] [security2:error] [pid 1018003:tid 1018187] [client 74.7.228.2:46792] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.isasi.cloverleafsystems.com"] [uri "/robots.txt"] [unique_id "apK9UTAh5Y1i2tUxg4EIxAAF3E8"]
[Sat Aug 29 05:06:57.361167 2026] [security2:error] [pid 1028675:tid 1028936] [client 68.155.159.216:65024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-content/themes/too.php"] [unique_id "apK9UddHPfW2QFvhmL7RYQAAAH4"]
[Sat Aug 29 05:06:57.363060 2026] [core:error] [pid 1018003:tid 1018267] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.363080 2026] [core:error] [pid 1018003:tid 1018267] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.375020 2026] [core:error] [pid 1018003:tid 1018250] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.375042 2026] [core:error] [pid 1018003:tid 1018250] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.375924 2026] [core:error] [pid 1018003:tid 1018028] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.375938 2026] [core:error] [pid 1018003:tid 1018028] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.377530 2026] [security2:error] [pid 1028675:tid 1028881] [client 158.23.147.79:49840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/file5.php"] [unique_id "apK9UddHPfW2QFvhmL7RZAAAAEc"]
[Sat Aug 29 05:06:57.378738 2026] [core:error] [pid 1018003:tid 1018160] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.378752 2026] [core:error] [pid 1018003:tid 1018160] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.380603 2026] [security2:error] [pid 1018003:tid 1018236] [client 158.23.147.79:24480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/first.php"] [unique_id "apK9UTAh5Y1i2tUxg4EI2AAABgw"]
[Sat Aug 29 05:06:57.381562 2026] [security2:error] [pid 1028675:tid 1028923] [client 20.48.160.90:51307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/csst.php"] [unique_id "apK9UddHPfW2QFvhmL7RZQAAAHE"]
[Sat Aug 29 05:06:57.397779 2026] [security2:error] [pid 1018003:tid 1018206] [client 93.123.109.228:52456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/crm/.env"] [unique_id "apK9UTAh5Y1i2tUxg4EI2gAABe8"]
[Sat Aug 29 05:06:57.404086 2026] [security2:error] [pid 1018003:tid 1018213] [client 20.52.41.200:1778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/css/index.php"] [unique_id "apK9UTAh5Y1i2tUxg4EI2wAABfY"]
[Sat Aug 29 05:06:57.408523 2026] [security2:error] [pid 1028675:tid 1028816] [client 93.123.109.228:52406] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/cron/.env"] [unique_id "apK9UddHPfW2QFvhmL7RZgAAAAY"]
[Sat Aug 29 05:06:57.415215 2026] [security2:error] [pid 1028675:tid 1028917] [client 20.196.209.81:9411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/wp-2019.php"] [unique_id "apK9UddHPfW2QFvhmL7RZwAAAGs"]
[Sat Aug 29 05:06:57.431009 2026] [security2:error] [pid 1028675:tid 1028935] [client 93.123.109.228:52546] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/current/.env"] [unique_id "apK9UddHPfW2QFvhmL7RaAAAAH0"]
[Sat Aug 29 05:06:57.434283 2026] [security2:error] [pid 1018003:tid 1018207] [client 20.151.200.44:64971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.kozo.com.mx"] [uri "/fesa.php"] [unique_id "apK9UTAh5Y1i2tUxg4EI3QAABfA"]
[Sat Aug 29 05:06:57.440964 2026] [security2:error] [pid 1028675:tid 1028880] [client 4.205.62.107:22413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/koiy.php"] [unique_id "apK9UddHPfW2QFvhmL7RaQAAAEY"]
[Sat Aug 29 05:06:57.451924 2026] [security2:error] [pid 1018003:tid 1018191] [client 40.83.93.50:17314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/al.php"] [unique_id "apK9UTAh5Y1i2tUxg4EI4QAABeA"]
[Sat Aug 29 05:06:57.463751 2026] [security2:error] [pid 1028675:tid 1028905] [client 127.0.0.1:28410] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK9UddHPfW2QFvhmL7RYwAAAF8"]
[Sat Aug 29 05:06:57.463807 2026] [security2:error] [pid 1028675:tid 1028833] [client 74.7.244.4:38834] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.glow.clothing"] [uri "/robots.txt"] [unique_id "apK9UddHPfW2QFvhmL7RYgAAFx8"]
[Sat Aug 29 05:06:57.464325 2026] [security2:error] [pid 1028675:tid 1028826] [client 93.123.109.228:52468] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/demo/.env"] [unique_id "apK9UddHPfW2QFvhmL7RbAAAABA"]
[Sat Aug 29 05:06:57.469024 2026] [core:error] [pid 1018003:tid 1018051] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.469040 2026] [core:error] [pid 1018003:tid 1018051] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.471974 2026] [core:error] [pid 1018003:tid 1018186] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.471992 2026] [core:error] [pid 1018003:tid 1018186] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.476995 2026] [security2:error] [pid 1018003:tid 1018234] [client 93.123.109.228:52464] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/dev/.env"] [unique_id "apK9UTAh5Y1i2tUxg4EI6wAABgo"]
[Sat Aug 29 05:06:57.478666 2026] [core:error] [pid 1028675:tid 1028814] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.478688 2026] [core:error] [pid 1028675:tid 1028814] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.484464 2026] [security2:error] [pid 1018003:tid 1018231] [client 158.23.147.79:30654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK9UTAh5Y1i2tUxg4EI7AAABgc"]
[Sat Aug 29 05:06:57.493693 2026] [security2:error] [pid 1018003:tid 1018225] [client 158.23.147.79:35831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/lv.php"] [unique_id "apK9UTAh5Y1i2tUxg4EI7gAABgI"]
[Sat Aug 29 05:06:57.497216 2026] [security2:error] [pid 1028675:tid 1028829] [client 68.155.159.216:12126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-blog-header.php"] [unique_id "apK9UddHPfW2QFvhmL7RcQAAABM"]
[Sat Aug 29 05:06:57.498597 2026] [core:error] [pid 1028675:tid 1028895] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.498611 2026] [core:error] [pid 1028675:tid 1028895] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.499034 2026] [core:error] [pid 1018003:tid 1018212] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.499045 2026] [core:error] [pid 1018003:tid 1018212] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.500806 2026] [security2:error] [pid 1018003:tid 1018233] [client 68.155.159.216:51555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/nf_tracking.php"] [unique_id "apK9UTAh5Y1i2tUxg4EI8gAABgk"]
[Sat Aug 29 05:06:57.502678 2026] [core:error] [pid 1028675:tid 1028907] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.502693 2026] [core:error] [pid 1028675:tid 1028907] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.504180 2026] [core:error] [pid 1018003:tid 1018157] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.504192 2026] [core:error] [pid 1018003:tid 1018157] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.504556 2026] [security2:error] [pid 1028675:tid 1028820] [client 93.123.109.228:52470] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/develop/.env"] [unique_id "apK9UddHPfW2QFvhmL7RdQAAAAo"]
[Sat Aug 29 05:06:57.509934 2026] [security2:error] [pid 1028675:tid 1028896] [client 93.123.109.228:52412] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/developer/.env"] [unique_id "apK9UddHPfW2QFvhmL7RdgAAAFY"]
[Sat Aug 29 05:06:57.521674 2026] [core:error] [pid 1018003:tid 1018115] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.521689 2026] [core:error] [pid 1018003:tid 1018115] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.523169 2026] [security2:error] [pid 1018003:tid 1018153] [client 93.123.109.228:52476] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/development/.env"] [unique_id "apK9UTAh5Y1i2tUxg4EI_gAABbo"]
[Sat Aug 29 05:06:57.526487 2026] [security2:error] [pid 1018003:tid 1018056] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/back-api/.env"] [unique_id "apK9UTAh5Y1i2tUxg4EI_wAF_iM"]
[Sat Aug 29 05:06:57.526753 2026] [security2:error] [pid 1018003:tid 1018177] [client 20.48.250.41:21432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/grsiuk.php"] [unique_id "apK9UTAh5Y1i2tUxg4EJAAAABdI"]
[Sat Aug 29 05:06:57.532932 2026] [security2:error] [pid 1028675:tid 1028839] [client 168.107.94.195:51239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9UddHPfW2QFvhmL7RegAAAB0"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:57.535484 2026] [security2:error] [pid 1028675:tid 1028821] [client 74.7.228.28:56394] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "ccfinancialaccounting.com"] [uri "/robots.txt"] [unique_id "apK9UddHPfW2QFvhmL7ReQAACyA"]
[Sat Aug 29 05:06:57.537344 2026] [security2:error] [pid 1018003:tid 1018112] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/back-end/.env"] [unique_id "apK9UTAh5Y1i2tUxg4EJBAAF_ls"]
[Sat Aug 29 05:06:57.538148 2026] [security2:error] [pid 1018003:tid 1018104] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/back/.env"] [unique_id "apK9UTAh5Y1i2tUxg4EJBQAF_lM"]
[Sat Aug 29 05:06:57.538155 2026] [security2:error] [pid 1018003:tid 1018081] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK9UTAh5Y1i2tUxg4EJBgAF_jw"]
[Sat Aug 29 05:06:57.538660 2026] [security2:error] [pid 1018003:tid 1018053] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/backend-api/.env"] [unique_id "apK9UTAh5Y1i2tUxg4EJBwAF_iA"]
[Sat Aug 29 05:06:57.539568 2026] [core:error] [pid 1028675:tid 1028875] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.539581 2026] [core:error] [pid 1028675:tid 1028875] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.555908 2026] [core:error] [pid 1018003:tid 1018256] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.555929 2026] [core:error] [pid 1018003:tid 1018256] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.573299 2026] [core:error] [pid 1018003:tid 1018194] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.573317 2026] [core:error] [pid 1018003:tid 1018194] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.580420 2026] [security2:error] [pid 1028675:tid 1028838] [client 127.0.0.1:28430] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.kingcoqui.com"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK9UddHPfW2QFvhmL7RcgAAABw"]
[Sat Aug 29 05:06:57.580429 2026] [security2:error] [pid 1028675:tid 1028888] [client 127.0.0.1:28442] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK9UddHPfW2QFvhmL7RdAAAAE4"]
[Sat Aug 29 05:06:57.580489 2026] [security2:error] [pid 1018003:tid 1018167] [client 74.7.244.34:45588] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.kingcoqui.com"] [uri "/robots.txt"] [unique_id "apK9UTAh5Y1i2tUxg4EI8AAFyBE"]
[Sat Aug 29 05:06:57.614773 2026] [security2:error] [pid 1028675:tid 1028904] [client 158.158.54.35:34296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/deepseek_d.php"] [unique_id "apK9UddHPfW2QFvhmL7RfgAAAF4"]
[Sat Aug 29 05:06:57.639003 2026] [security2:error] [pid 1028675:tid 1028883] [client 20.48.160.90:51310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/wp-includes/blocks/query-title/footer.php"] [unique_id "apK9UddHPfW2QFvhmL7RgQAAAEk"]
[Sat Aug 29 05:06:57.639545 2026] [security2:error] [pid 1028675:tid 1028929] [client 68.155.159.216:52794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/lv.php"] [unique_id "apK9UddHPfW2QFvhmL7RggAAAHc"]
[Sat Aug 29 05:06:57.665094 2026] [security2:error] [pid 1028675:tid 1028848] [client 20.196.209.81:17186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-admin/security.php"] [unique_id "apK9UddHPfW2QFvhmL7RhAAAACY"]
[Sat Aug 29 05:06:57.672591 2026] [security2:error] [pid 1018003:tid 1018277] [client 68.155.159.216:51471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK9UTAh5Y1i2tUxg4EJFgAABjU"]
[Sat Aug 29 05:06:57.689873 2026] [security2:error] [pid 1028675:tid 1028899] [client 68.155.159.216:50355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK9UddHPfW2QFvhmL7RhgAAAFk"]
[Sat Aug 29 05:06:57.694202 2026] [security2:error] [pid 1018003:tid 1018191] [client 20.48.250.41:21356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/wp-scr1pts.php"] [unique_id "apK9UTAh5Y1i2tUxg4EJHQAABeA"]
[Sat Aug 29 05:06:57.732177 2026] [security2:error] [pid 1028675:tid 1028891] [client 93.123.109.228:52470] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/erp/.env"] [unique_id "apK9UddHPfW2QFvhmL7RiQAAAFE"]
[Sat Aug 29 05:06:57.733457 2026] [security2:error] [pid 1028675:tid 1028865] [client 93.123.109.228:52406] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/etc/apache2/apache2.conf"] [unique_id "apK9UddHPfW2QFvhmL7RigAAADc"]
[Sat Aug 29 05:06:57.733592 2026] [security2:error] [pid 1018003:tid 1018172] [client 93.123.109.228:52512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/etc/boto.cfg"] [unique_id "apK9UTAh5Y1i2tUxg4EJIQAABc0"]
[Sat Aug 29 05:06:57.743776 2026] [security2:error] [pid 1018003:tid 1018099] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/backup/.env"] [unique_id "apK9UTAh5Y1i2tUxg4EJIgAF1U4"]
[Sat Aug 29 05:06:57.746291 2026] [security2:error] [pid 1018003:tid 1018183] [client 4.205.62.107:22023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/xqq.php"] [unique_id "apK9UTAh5Y1i2tUxg4EJIwAABdg"]
[Sat Aug 29 05:06:57.750146 2026] [security2:error] [pid 1018003:tid 1018275] [client 93.123.109.228:52456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/fe/.env"] [unique_id "apK9UTAh5Y1i2tUxg4EJJAAABjM"]
[Sat Aug 29 05:06:57.755588 2026] [security2:error] [pid 1018003:tid 1018157] [client 158.23.147.79:25420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/about.php"] [unique_id "apK9UTAh5Y1i2tUxg4EJJQAABb4"]
[Sat Aug 29 05:06:57.755591 2026] [security2:error] [pid 1028675:tid 1028846] [client 4.205.62.107:65458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/public/wp-blog.php"] [unique_id "apK9UddHPfW2QFvhmL7RjwAAACQ"]
[Sat Aug 29 05:06:57.760909 2026] [security2:error] [pid 1028675:tid 1028858] [client 4.205.62.107:58386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/ty.php"] [unique_id "apK9UddHPfW2QFvhmL7RkAAAADA"]
[Sat Aug 29 05:06:57.769435 2026] [security2:error] [pid 1018003:tid 1018175] [client 158.23.147.79:32729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK9UTAh5Y1i2tUxg4EJKQAABdA"]
[Sat Aug 29 05:06:57.786554 2026] [security2:error] [pid 1018003:tid 1018152] [client 4.205.62.107:22401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/cli_bootstrap.php"] [unique_id "apK9UTAh5Y1i2tUxg4EJKwAABbk"]
[Sat Aug 29 05:06:57.790476 2026] [core:error] [pid 1018003:tid 1018030] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.790496 2026] [core:error] [pid 1018003:tid 1018030] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.797025 2026] [security2:error] [pid 1018003:tid 1018153] [client 20.151.200.44:47321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/ws66.php"] [unique_id "apK9UTAh5Y1i2tUxg4EJLAAABbo"]
[Sat Aug 29 05:06:57.817093 2026] [core:error] [pid 1028675:tid 1028908] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.817109 2026] [core:error] [pid 1028675:tid 1028908] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.818972 2026] [core:error] [pid 1018003:tid 1018086] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.818991 2026] [core:error] [pid 1018003:tid 1018086] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.820521 2026] [security2:error] [pid 1028675:tid 1028870] [client 213.202.253.4:65392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bv-place.com"] [uri "/filefuns.php"] [unique_id "apK9UddHPfW2QFvhmL7RlAAAADw"], referer: www.google.com
[Sat Aug 29 05:06:57.822347 2026] [core:error] [pid 1018003:tid 1018108] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.822374 2026] [core:error] [pid 1018003:tid 1018108] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.823712 2026] [core:error] [pid 1018003:tid 1018118] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.823725 2026] [core:error] [pid 1018003:tid 1018118] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.824212 2026] [core:error] [pid 1018003:tid 1018114] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.824225 2026] [core:error] [pid 1018003:tid 1018114] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.824808 2026] [core:error] [pid 1018003:tid 1018084] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.824820 2026] [core:error] [pid 1018003:tid 1018084] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.824911 2026] [core:error] [pid 1018003:tid 1018097] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.824916 2026] [core:error] [pid 1018003:tid 1018097] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.829180 2026] [core:error] [pid 1018003:tid 1018148] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.829191 2026] [core:error] [pid 1018003:tid 1018148] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.832227 2026] [security2:error] [pid 1018003:tid 1018258] [client 93.123.109.228:52516] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/front/.env"] [unique_id "apK9UTAh5Y1i2tUxg4EJOgAABiI"]
[Sat Aug 29 05:06:57.836046 2026] [security2:error] [pid 1028675:tid 1028863] [client 20.196.209.81:9437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/menu.php"] [unique_id "apK9UddHPfW2QFvhmL7RlQAAADU"]
[Sat Aug 29 05:06:57.837180 2026] [security2:error] [pid 1028675:tid 1028933] [client 20.48.160.90:51669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/wp-content/uploads/indoex.php"] [unique_id "apK9UddHPfW2QFvhmL7RlgAAAHs"]
[Sat Aug 29 05:06:57.840089 2026] [security2:error] [pid 1018003:tid 1018271] [client 4.205.62.107:53366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/php-info.php"] [unique_id "apK9UTAh5Y1i2tUxg4EJOwAABi8"]
[Sat Aug 29 05:06:57.847949 2026] [security2:error] [pid 1018003:tid 1018066] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/beta/.env"] [unique_id "apK9UTAh5Y1i2tUxg4EJPAAFxC0"]
[Sat Aug 29 05:06:57.847973 2026] [security2:error] [pid 1018003:tid 1018058] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/be/.env"] [unique_id "apK9UTAh5Y1i2tUxg4EJPgAFxCU"]
[Sat Aug 29 05:06:57.849338 2026] [security2:error] [pid 1018003:tid 1018187] [client 93.123.109.228:52476] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/frontend/.env"] [unique_id "apK9UTAh5Y1i2tUxg4EJQQAABdw"]
[Sat Aug 29 05:06:57.849377 2026] [core:error] [pid 1018003:tid 1018116] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.849388 2026] [core:error] [pid 1018003:tid 1018116] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.851990 2026] [core:error] [pid 1018003:tid 1018113] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.852000 2026] [core:error] [pid 1018003:tid 1018113] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.856209 2026] [security2:error] [pid 1018003:tid 1018186] [client 20.52.41.200:1271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-cron.php"] [unique_id "apK9UTAh5Y1i2tUxg4EJQgAABds"]
[Sat Aug 29 05:06:57.872934 2026] [security2:error] [pid 1018003:tid 1018196] [client 20.48.250.41:21378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/num.php"] [unique_id "apK9UTAh5Y1i2tUxg4EJQwAABeU"]
[Sat Aug 29 05:06:57.880812 2026] [security2:error] [pid 1028675:tid 1028857] [client 34.7.40.70:44868] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/credentials.js"] [unique_id "apK9UddHPfW2QFvhmL7RnAAAAC8"]
[Sat Aug 29 05:06:57.881479 2026] [cgid:error] [pid 1018003:tid 1018190] [client 34.7.40.70:44978] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:57.885526 2026] [security2:error] [pid 1018003:tid 1018185] [client 20.104.49.130:46529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/crgio.php"] [unique_id "apK9UTAh5Y1i2tUxg4EJRwAABdo"]
[Sat Aug 29 05:06:57.886076 2026] [cgid:error] [pid 1028675:tid 1028925] [client 34.7.40.70:44950] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:57.886820 2026] [cgid:error] [pid 1028675:tid 1028885] [client 34.7.40.70:44890] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:57.888403 2026] [cgid:error] [pid 1028675:tid 1028909] [client 34.7.40.70:44876] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:57.888428 2026] [cgid:error] [pid 1028675:tid 1028931] [client 34.7.40.70:44854] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:57.888428 2026] [cgid:error] [pid 1028675:tid 1028843] [client 34.7.40.70:44912] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:57.888541 2026] [security2:error] [pid 1028675:tid 1028931] [client 34.7.40.70:44854] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/404.shtml"] [unique_id "apK9UddHPfW2QFvhmL7RoQAAAHk"]
[Sat Aug 29 05:06:57.888541 2026] [security2:error] [pid 1028675:tid 1028843] [client 34.7.40.70:44912] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/404.shtml"] [unique_id "apK9UddHPfW2QFvhmL7RoAAAACE"]
[Sat Aug 29 05:06:57.889289 2026] [cgid:error] [pid 1018003:tid 1018261] [client 34.7.40.70:44838] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:57.905165 2026] [core:error] [pid 1018003:tid 1018022] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.905175 2026] [core:error] [pid 1028675:tid 1028831] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.905186 2026] [core:error] [pid 1018003:tid 1018022] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.905197 2026] [core:error] [pid 1028675:tid 1028831] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.921058 2026] [security2:error] [pid 1018003:tid 1018174] [client 158.23.147.79:48130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-content/themes/index.php"] [unique_id "apK9UTAh5Y1i2tUxg4EJTwAABc8"]
[Sat Aug 29 05:06:57.921803 2026] [security2:error] [pid 1028675:tid 1028833] [client 158.158.54.35:38448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/w.php"] [unique_id "apK9UddHPfW2QFvhmL7RowAAABc"]
[Sat Aug 29 05:06:57.922672 2026] [security2:error] [pid 1028675:tid 1028826] [client 168.107.94.195:51534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9UddHPfW2QFvhmL7RpAAAABA"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:57.928615 2026] [security2:error] [pid 1028675:tid 1028893] [client 34.7.40.70:44964] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/telescope/requests"] [unique_id "apK9UddHPfW2QFvhmL7RpgAAAFM"]
[Sat Aug 29 05:06:57.930495 2026] [security2:error] [pid 1018003:tid 1018172] [client 34.7.40.70:44952] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/api/v2/settings"] [unique_id "apK9UTAh5Y1i2tUxg4EJVQAABc0"]
[Sat Aug 29 05:06:57.931832 2026] [security2:error] [pid 1018003:tid 1018244] [client 34.7.40.70:45040] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/.aider.conf.yml"] [unique_id "apK9UTAh5Y1i2tUxg4EJVwAABhQ"]
[Sat Aug 29 05:06:57.933069 2026] [security2:error] [pid 1018003:tid 1018212] [client 34.7.40.70:45118] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/.aws/credentials.old"] [unique_id "apK9UTAh5Y1i2tUxg4EJUAAABfU"]
[Sat Aug 29 05:06:57.934862 2026] [cgid:error] [pid 1018003:tid 1018224] [client 34.7.40.70:45098] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:57.934902 2026] [cgid:error] [pid 1028675:tid 1028884] [client 34.7.40.70:45020] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:57.934924 2026] [cgid:error] [pid 1018003:tid 1018225] [client 34.7.40.70:44970] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:57.935554 2026] [security2:error] [pid 1028675:tid 1028887] [client 34.7.40.70:45096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/aws/.env"] [unique_id "apK9UddHPfW2QFvhmL7RqQAAAE0"]
[Sat Aug 29 05:06:57.936089 2026] [cgid:error] [pid 1028675:tid 1028855] [client 34.7.40.70:45030] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:57.936924 2026] [cgid:error] [pid 1018003:tid 1018231] [client 34.7.40.70:44948] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:57.937528 2026] [cgid:error] [pid 1028675:tid 1028890] [client 34.7.40.70:45006] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:57.938894 2026] [cgid:error] [pid 1018003:tid 1018266] [client 34.7.40.70:45048] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:57.941011 2026] [cgid:error] [pid 1028675:tid 1028845] [client 34.7.40.70:45062] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:57.941704 2026] [cgid:error] [pid 1028675:tid 1028892] [client 34.7.40.70:44906] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:57.941926 2026] [cgid:error] [pid 1018003:tid 1018200] [client 34.7.40.70:45082] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:57.943368 2026] [cgid:error] [pid 1018003:tid 1018156] [client 34.7.40.70:44980] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:57.945621 2026] [cgid:error] [pid 1018003:tid 1018203] [client 34.7.40.70:44998] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:57.947700 2026] [core:error] [pid 1018003:tid 1018160] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.947721 2026] [core:error] [pid 1018003:tid 1018160] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.950271 2026] [security2:error] [pid 1018003:tid 1018233] [client 34.7.40.70:45104] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/.aws/credentials.bak"] [unique_id "apK9UTAh5Y1i2tUxg4EJXgAABgk"]
[Sat Aug 29 05:06:57.951283 2026] [cgid:error] [pid 1018003:tid 1018166] [client 34.7.40.70:45070] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:57.954944 2026] [security2:error] [pid 1018003:tid 1018226] [client 20.104.49.130:53843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/log.php"] [unique_id "apK9UTAh5Y1i2tUxg4EJYQAABgM"]
[Sat Aug 29 05:06:57.968366 2026] [security2:error] [pid 1028675:tid 1028840] [client 34.7.40.70:45068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.40.7.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/config/aws.php"] [unique_id "apK9UddHPfW2QFvhmL7RsgAAAB4"]
[Sat Aug 29 05:06:57.969693 2026] [cgid:error] [pid 1028675:tid 1028932] [client 34.7.40.70:45050] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:57.969716 2026] [cgid:error] [pid 1018003:tid 1018246] [client 34.7.40.70:44932] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:57.971269 2026] [cgid:error] [pid 1018003:tid 1018198] [client 34.7.40.70:44922] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:57.972403 2026] [cgid:error] [pid 1028675:tid 1028910] [client 34.7.40.70:45086] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:06:57.977117 2026] [security2:error] [pid 1018003:tid 1018101] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/client/.env"] [unique_id "apK9UTAh5Y1i2tUxg4EJawAGMVA"]
[Sat Aug 29 05:06:57.982903 2026] [security2:error] [pid 1018003:tid 1018126] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/cms/.env"] [unique_id "apK9UTAh5Y1i2tUxg4EJbgAGMWk"]
[Sat Aug 29 05:06:57.984240 2026] [core:error] [pid 1018003:tid 1018069] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.984260 2026] [core:error] [pid 1018003:tid 1018069] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:57.984651 2026] [security2:error] [pid 1018003:tid 1018234] [client 93.123.109.228:52498] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/laravel/.env"] [unique_id "apK9UTAh5Y1i2tUxg4EJcwAABgo"]
[Sat Aug 29 05:06:57.988707 2026] [security2:error] [pid 1018003:tid 1018175] [client 93.123.109.228:52516] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/lms/.env"] [unique_id "apK9UTAh5Y1i2tUxg4EJdwAABdA"]
[Sat Aug 29 05:06:58.001121 2026] [core:error] [pid 1018003:tid 1018230] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.001138 2026] [core:error] [pid 1018003:tid 1018230] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.003010 2026] [core:error] [pid 1028675:tid 1028898] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.003025 2026] [core:error] [pid 1028675:tid 1028898] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.007106 2026] [security2:error] [pid 1018003:tid 1018152] [client 93.123.109.228:52476] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/local/.env"] [unique_id "apK9UjAh5Y1i2tUxg4EJeQAABbk"]
[Sat Aug 29 05:06:58.016162 2026] [core:error] [pid 1018003:tid 1018262] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.016180 2026] [core:error] [pid 1018003:tid 1018262] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.016285 2026] [core:error] [pid 1028675:tid 1028937] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.016299 2026] [core:error] [pid 1028675:tid 1028937] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.019579 2026] [core:error] [pid 1018003:tid 1018217] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.019593 2026] [core:error] [pid 1018003:tid 1018217] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.020700 2026] [core:error] [pid 1028675:tid 1028924] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.020715 2026] [core:error] [pid 1028675:tid 1028924] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.026673 2026] [core:error] [pid 1018003:tid 1018098] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.026687 2026] [core:error] [pid 1018003:tid 1018098] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.031563 2026] [security2:error] [pid 1028675:tid 1028896] [client 20.48.250.41:21423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/a4.php"] [unique_id "apK9UtdHPfW2QFvhmL7RvAAAAFY"]
[Sat Aug 29 05:06:58.043337 2026] [security2:error] [pid 1028675:tid 1028821] [client 20.48.160.90:51665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK9UtdHPfW2QFvhmL7RvwAAAAs"]
[Sat Aug 29 05:06:58.044871 2026] [security2:error] [pid 1028675:tid 1028935] [client 40.83.93.50:17301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/global.php"] [unique_id "apK9UtdHPfW2QFvhmL7RwAAAAH0"]
[Sat Aug 29 05:06:58.052602 2026] [core:error] [pid 1018003:tid 1018196] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.052621 2026] [core:error] [pid 1018003:tid 1018196] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.058966 2026] [security2:error] [pid 1018003:tid 1018073] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/config.php"] [unique_id "apK9UjAh5Y1i2tUxg4EJgQAGMTQ"]
[Sat Aug 29 05:06:58.062276 2026] [core:error] [pid 1018003:tid 1018109] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.062290 2026] [core:error] [pid 1018003:tid 1018109] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.066443 2026] [core:error] [pid 1028675:tid 1028927] [client 158.158.54.35:24943] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.066464 2026] [core:error] [pid 1028675:tid 1028927] [client 158.158.54.35:24943] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.076985 2026] [security2:error] [pid 1018003:tid 1018270] [client 20.196.209.81:15504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK9UjAh5Y1i2tUxg4EJgwAABi4"]
[Sat Aug 29 05:06:58.088740 2026] [security2:error] [pid 1018003:tid 1018212] [client 93.123.109.228:52420] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/market/.env"] [unique_id "apK9UjAh5Y1i2tUxg4EJhgAABfU"]
[Sat Aug 29 05:06:58.103784 2026] [security2:error] [pid 1028675:tid 1028897] [client 68.155.159.216:65056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK9UtdHPfW2QFvhmL7RwwAAAFc"]
[Sat Aug 29 05:06:58.109339 2026] [security2:error] [pid 1028675:tid 1028882] [client 20.197.61.180:8907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/Njima.php"] [unique_id "apK9UtdHPfW2QFvhmL7RxAAAAEg"]
[Sat Aug 29 05:06:58.113515 2026] [security2:error] [pid 1018003:tid 1018224] [client 93.123.109.228:52456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/marketing/.env"] [unique_id "apK9UjAh5Y1i2tUxg4EJhwAABgE"]
[Sat Aug 29 05:06:58.133406 2026] [security2:error] [pid 1018003:tid 1018119] [remote 34.139.66.91:50250] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "tgd6.com"] [uri "/app/.env"] [unique_id "apK9UjAh5Y1i2tUxg4EJjgAF5GI"]
[Sat Aug 29 05:06:58.142772 2026] [security2:error] [pid 1018003:tid 1018179] [client 93.123.109.228:52506] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/media/.env"] [unique_id "apK9UjAh5Y1i2tUxg4EJkgAABdQ"]
[Sat Aug 29 05:06:58.149508 2026] [security2:error] [pid 1018003:tid 1018120] [remote 34.139.66.91:50250] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "tgd6.com"] [uri "/src/.env"] [unique_id "apK9UjAh5Y1i2tUxg4EJlgAF5GM"]
[Sat Aug 29 05:06:58.166048 2026] [security2:error] [pid 1018003:tid 1018250] [client 93.123.109.228:52464] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/node/.env"] [unique_id "apK9UjAh5Y1i2tUxg4EJmAAABho"]
[Sat Aug 29 05:06:58.171147 2026] [security2:error] [pid 1018003:tid 1018125] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/config/.env"] [unique_id "apK9UjAh5Y1i2tUxg4EJmgAGAmg"]
[Sat Aug 29 05:06:58.171210 2026] [security2:error] [pid 1028675:tid 1028856] [client 93.123.109.228:52428] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/new/.env"] [unique_id "apK9UtdHPfW2QFvhmL7RygAAAC4"]
[Sat Aug 29 05:06:58.172310 2026] [core:error] [pid 1018003:tid 1018203] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.172331 2026] [core:error] [pid 1018003:tid 1018203] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.173483 2026] [core:error] [pid 1028675:tid 1028866] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.173499 2026] [core:error] [pid 1028675:tid 1028866] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.173754 2026] [core:error] [pid 1028675:tid 1028825] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.173763 2026] [core:error] [pid 1028675:tid 1028825] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.173874 2026] [core:error] [pid 1018003:tid 1018065] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.173887 2026] [core:error] [pid 1018003:tid 1018065] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.174161 2026] [security2:error] [pid 1018003:tid 1018255] [client 93.123.109.228:52476] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/nodeapi/.env"] [unique_id "apK9UjAh5Y1i2tUxg4EJnQAABh8"]
[Sat Aug 29 05:06:58.176165 2026] [security2:error] [pid 1018003:tid 1018191] [client 93.123.109.228:52548] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/node-api/.env"] [unique_id "apK9UjAh5Y1i2tUxg4EJngAABeA"]
[Sat Aug 29 05:06:58.176350 2026] [core:error] [pid 1028675:tid 1028915] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.176371 2026] [core:error] [pid 1028675:tid 1028915] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.176772 2026] [core:error] [pid 1018003:tid 1018202] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.176781 2026] [core:error] [pid 1018003:tid 1018202] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.177735 2026] [security2:error] [pid 1028675:tid 1028916] [client 93.123.109.228:52412] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/node/api/.env"] [unique_id "apK9UtdHPfW2QFvhmL7RzQAAAGo"]
[Sat Aug 29 05:06:58.190598 2026] [security2:error] [pid 1018003:tid 1018169] [client 93.123.109.228:52492] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/node/backend/.env"] [unique_id "apK9UjAh5Y1i2tUxg4EJogAABco"]
[Sat Aug 29 05:06:58.195319 2026] [core:error] [pid 1028675:tid 1028902] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.195332 2026] [core:error] [pid 1028675:tid 1028902] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.202535 2026] [security2:error] [pid 1018003:tid 1018267] [client 20.48.250.41:21427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/tfm.php"] [unique_id "apK9UjAh5Y1i2tUxg4EJpAAABis"]
[Sat Aug 29 05:06:58.203551 2026] [core:error] [pid 1028675:tid 1028835] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.203565 2026] [core:error] [pid 1028675:tid 1028835] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.212040 2026] [core:error] [pid 1018003:tid 1018107] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.212058 2026] [core:error] [pid 1018003:tid 1018107] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.213280 2026] [security2:error] [pid 1018003:tid 1018147] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/config/config.inc.php"] [unique_id "apK9UjAh5Y1i2tUxg4EJpwAGAn4"]
[Sat Aug 29 05:06:58.213349 2026] [security2:error] [pid 1028675:tid 1028918] [client 20.151.200.44:47341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/Cok.php"] [unique_id "apK9UtdHPfW2QFvhmL7R0wAAAGw"]
[Sat Aug 29 05:06:58.217819 2026] [security2:error] [pid 1028675:tid 1028908] [client 93.123.109.228:52406] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/nodeweb/.env"] [unique_id "apK9UtdHPfW2QFvhmL7R1QAAAGI"]
[Sat Aug 29 05:06:58.219962 2026] [security2:error] [pid 1028675:tid 1028822] [client 4.205.62.107:53268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/xp.php"] [unique_id "apK9UtdHPfW2QFvhmL7R1gAAAAw"]
[Sat Aug 29 05:06:58.220803 2026] [core:error] [pid 1018003:tid 1018129] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.220817 2026] [core:error] [pid 1018003:tid 1018129] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.221554 2026] [security2:error] [pid 1018003:tid 1018230] [client 158.23.147.79:17419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/.well-known/index.php"] [unique_id "apK9UjAh5Y1i2tUxg4EJqwAABgY"]
[Sat Aug 29 05:06:58.229266 2026] [security2:error] [pid 1018003:tid 1018222] [client 20.104.49.130:60980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/simple.php"] [unique_id "apK9UjAh5Y1i2tUxg4EJrQAABf8"]
[Sat Aug 29 05:06:58.235299 2026] [security2:error] [pid 1018003:tid 1018142] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/config/aws.php"] [unique_id "apK9UjAh5Y1i2tUxg4EJrwAGAnk"]
[Sat Aug 29 05:06:58.238283 2026] [security2:error] [pid 1028675:tid 1028850] [client 20.196.209.81:17905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/alfa.php"] [unique_id "apK9UtdHPfW2QFvhmL7R2QAAACg"]
[Sat Aug 29 05:06:58.248553 2026] [core:error] [pid 1018003:tid 1018183] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.248570 2026] [core:error] [pid 1018003:tid 1018183] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.249663 2026] [core:error] [pid 1028675:tid 1028863] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.249680 2026] [core:error] [pid 1028675:tid 1028863] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.256961 2026] [core:error] [pid 1018003:tid 1018192] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.256976 2026] [core:error] [pid 1018003:tid 1018192] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.259585 2026] [security2:error] [pid 1028675:tid 1028857] [client 68.155.159.216:24556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/content.php"] [unique_id "apK9UtdHPfW2QFvhmL7R3AAAAC8"]
[Sat Aug 29 05:06:58.267002 2026] [security2:error] [pid 1018003:tid 1018189] [client 93.123.109.228:52456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/old/.env"] [unique_id "apK9UjAh5Y1i2tUxg4EJswAABd4"]
[Sat Aug 29 05:06:58.298240 2026] [security2:error] [pid 1018003:tid 1018240] [client 20.48.160.90:51593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/haxor.php"] [unique_id "apK9UjAh5Y1i2tUxg4EJtAAABhA"]
[Sat Aug 29 05:06:58.304230 2026] [security2:error] [pid 1018003:tid 1018217] [client 168.107.94.195:51820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9UjAh5Y1i2tUxg4EJtgAABfo"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:58.305554 2026] [security2:error] [pid 1028675:tid 1028880] [client 93.123.109.228:52546] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/opt/.env"] [unique_id "apK9UtdHPfW2QFvhmL7R3gAAAEY"]
[Sat Aug 29 05:06:58.318013 2026] [security2:error] [pid 1028675:tid 1028899] [client 20.52.41.200:1160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-block.php"] [unique_id "apK9UtdHPfW2QFvhmL7R3wAAAFk"]
[Sat Aug 29 05:06:58.325384 2026] [core:error] [pid 1018003:tid 1018021] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.325413 2026] [core:error] [pid 1018003:tid 1018031] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.325414 2026] [core:error] [pid 1018003:tid 1018021] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.325431 2026] [core:error] [pid 1018003:tid 1018031] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.328275 2026] [security2:error] [pid 1018003:tid 1018186] [client 68.155.159.216:38551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/file17.php"] [unique_id "apK9UjAh5Y1i2tUxg4EJvAAABds"]
[Sat Aug 29 05:06:58.330610 2026] [security2:error] [pid 1028675:tid 1028917] [client 68.155.159.216:33765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/dropdown.php"] [unique_id "apK9UtdHPfW2QFvhmL7R4gAAAGs"]
[Sat Aug 29 05:06:58.346070 2026] [security2:error] [pid 1028675:tid 1028893] [client 20.48.250.41:21480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/Geforce.php"] [unique_id "apK9UtdHPfW2QFvhmL7R5AAAAFM"]
[Sat Aug 29 05:06:58.368477 2026] [security2:error] [pid 1018003:tid 1018036] [remote 34.139.66.91:50250] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "tgd6.com"] [uri "/frontend/.env"] [unique_id "apK9UjAh5Y1i2tUxg4EJvwAF5A8"]
[Sat Aug 29 05:06:58.369201 2026] [security2:error] [pid 1028675:tid 1028872] [client 158.158.54.35:7324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/ahax.php"] [unique_id "apK9UtdHPfW2QFvhmL7R5gAAAD4"]
[Sat Aug 29 05:06:58.379157 2026] [core:error] [pid 1018003:tid 1018127] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.379173 2026] [core:error] [pid 1018003:tid 1018127] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.379500 2026] [core:error] [pid 1018003:tid 1018026] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.379510 2026] [core:error] [pid 1018003:tid 1018026] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.381692 2026] [security2:error] [pid 1028675:tid 1028845] [client 20.104.49.130:60799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/ty.php"] [unique_id "apK9UtdHPfW2QFvhmL7R6AAAACM"]
[Sat Aug 29 05:06:58.392551 2026] [core:error] [pid 1018003:tid 1018032] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.392568 2026] [core:error] [pid 1018003:tid 1018032] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.444018 2026] [security2:error] [pid 1028675:tid 1028910] [client 68.155.159.216:6082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK9UtdHPfW2QFvhmL7R6gAAAGQ"]
[Sat Aug 29 05:06:58.445131 2026] [security2:error] [pid 1018003:tid 1018124] [remote 34.139.66.91:50250] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "tgd6.com"] [uri "/server/.env"] [unique_id "apK9UjAh5Y1i2tUxg4EJxwAF5Gc"]
[Sat Aug 29 05:06:58.446644 2026] [security2:error] [pid 1018003:tid 1018068] [remote 34.139.66.91:50250] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "tgd6.com"] [uri "/production/.env"] [unique_id "apK9UjAh5Y1i2tUxg4EJyAAF5C8"]
[Sat Aug 29 05:06:58.450511 2026] [security2:error] [pid 1018003:tid 1018145] [remote 34.139.66.91:50250] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "tgd6.com"] [uri "/dev/.env"] [unique_id "apK9UjAh5Y1i2tUxg4EJygAF5Hw"]
[Sat Aug 29 05:06:58.453970 2026] [security2:error] [pid 1018003:tid 1018212] [client 20.48.160.90:51663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/google.php"] [unique_id "apK9UjAh5Y1i2tUxg4EJywAABfU"]
[Sat Aug 29 05:06:58.459225 2026] [security2:error] [pid 1018003:tid 1018224] [client 158.23.147.79:26405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK9UjAh5Y1i2tUxg4EJzAAABgE"]
[Sat Aug 29 05:06:58.467675 2026] [security2:error] [pid 1028675:tid 1028930] [client 68.155.159.216:64452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/radio.php"] [unique_id "apK9UtdHPfW2QFvhmL7R7AAAAHg"]
[Sat Aug 29 05:06:58.471405 2026] [security2:error] [pid 1018003:tid 1018103] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/config/config.php"] [unique_id "apK9UjAh5Y1i2tUxg4EJzgAF2VI"]
[Sat Aug 29 05:06:58.474526 2026] [security2:error] [pid 1028675:tid 1028920] [client 20.196.209.81:5880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-admin/system.php"] [unique_id "apK9UtdHPfW2QFvhmL7R7gAAAG4"]
[Sat Aug 29 05:06:58.476774 2026] [security2:error] [pid 1028675:tid 1028829] [client 20.48.250.41:21419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/click.php"] [unique_id "apK9UtdHPfW2QFvhmL7R7wAAABM"]
[Sat Aug 29 05:06:58.502124 2026] [security2:error] [pid 1018003:tid 1018157] [client 87.219.197.128:61166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK9UjAh5Y1i2tUxg4EJ0QAABb4"]
[Sat Aug 29 05:06:58.502259 2026] [security2:error] [pid 1018003:tid 1018157] [client 87.219.197.128:61166] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK9UjAh5Y1i2tUxg4EJ0QAABb4"]
[Sat Aug 29 05:06:58.506684 2026] [security2:error] [pid 1018003:tid 1018033] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/config/env.php"] [unique_id "apK9UjAh5Y1i2tUxg4EJ0gAF_gw"]
[Sat Aug 29 05:06:58.511503 2026] [core:error] [pid 1018003:tid 1018071] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.511521 2026] [core:error] [pid 1018003:tid 1018071] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.513213 2026] [security2:error] [pid 1028675:tid 1028884] [client 158.158.54.35:29689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "apK9UtdHPfW2QFvhmL7R8wAAAEo"]
[Sat Aug 29 05:06:58.514868 2026] [security2:error] [pid 1018003:tid 1018046] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/config/nexmo.php"] [unique_id "apK9UjAh5Y1i2tUxg4EJ1wAF_hk"]
[Sat Aug 29 05:06:58.518314 2026] [security2:error] [pid 1018003:tid 1018035] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/config/module.config.php"] [unique_id "apK9UjAh5Y1i2tUxg4EJ2gAF_g4"]
[Sat Aug 29 05:06:58.519580 2026] [security2:error] [pid 1028675:tid 1028821] [client 158.23.147.79:49805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/file88.php"] [unique_id "apK9UtdHPfW2QFvhmL7R9gAAAAs"]
[Sat Aug 29 05:06:58.528198 2026] [core:error] [pid 1018003:tid 1018143] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.528217 2026] [core:error] [pid 1018003:tid 1018143] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.529780 2026] [core:error] [pid 1018003:tid 1018041] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.529797 2026] [core:error] [pid 1018003:tid 1018041] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.535213 2026] [core:error] [pid 1018003:tid 1018034] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.535230 2026] [core:error] [pid 1018003:tid 1018034] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.536563 2026] [core:error] [pid 1018003:tid 1018102] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.536579 2026] [core:error] [pid 1018003:tid 1018102] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.541316 2026] [core:error] [pid 1018003:tid 1018044] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.541331 2026] [core:error] [pid 1018003:tid 1018044] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.548198 2026] [core:error] [pid 1028675:tid 1028911] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.548214 2026] [core:error] [pid 1028675:tid 1028911] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.551843 2026] [security2:error] [pid 1018003:tid 1018052] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/config/stripe.php"] [unique_id "apK9UjAh5Y1i2tUxg4EJ5QAF_h8"]
[Sat Aug 29 05:06:58.553908 2026] [core:error] [pid 1018003:tid 1018239] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.553927 2026] [core:error] [pid 1018003:tid 1018239] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.556860 2026] [core:error] [pid 1028675:tid 1028903] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.556875 2026] [core:error] [pid 1028675:tid 1028903] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.570861 2026] [core:error] [pid 1028675:tid 1028913] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.570878 2026] [core:error] [pid 1028675:tid 1028913] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.576073 2026] [security2:error] [pid 1028675:tid 1028907] [client 4.205.62.107:22432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/w.php"] [unique_id "apK9UtdHPfW2QFvhmL7SAAAAAGE"]
[Sat Aug 29 05:06:58.578854 2026] [security2:error] [pid 1018003:tid 1018174] [client 40.83.93.50:17297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/update.php"] [unique_id "apK9UjAh5Y1i2tUxg4EJ5gAABc8"]
[Sat Aug 29 05:06:58.580136 2026] [security2:error] [pid 1018003:tid 1018252] [client 93.123.109.228:52548] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/portal/.env"] [unique_id "apK9UjAh5Y1i2tUxg4EJ5wAABhw"]
[Sat Aug 29 05:06:58.585939 2026] [core:error] [pid 1028675:tid 1028888] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.585957 2026] [core:error] [pid 1028675:tid 1028888] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.589530 2026] [security2:error] [pid 1028675:tid 1028921] [client 68.155.159.216:2037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK9UtdHPfW2QFvhmL7SAgAAAG8"]
[Sat Aug 29 05:06:58.600252 2026] [security2:error] [pid 1018003:tid 1018234] [client 158.23.147.79:35782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9UjAh5Y1i2tUxg4EJ6QAABgo"]
[Sat Aug 29 05:06:58.614013 2026] [security2:error] [pid 1028675:tid 1028922] [client 93.123.109.228:52470] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/prod/.env"] [unique_id "apK9UtdHPfW2QFvhmL7SAwAAAHA"]
[Sat Aug 29 05:06:58.621383 2026] [security2:error] [pid 1018003:tid 1018169] [client 68.155.159.216:12251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK9UjAh5Y1i2tUxg4EJ7AAABco"]
[Sat Aug 29 05:06:58.630583 2026] [security2:error] [pid 1018003:tid 1018267] [client 20.48.250.41:21459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/ms.php"] [unique_id "apK9UjAh5Y1i2tUxg4EJ7QAABis"]
[Sat Aug 29 05:06:58.632181 2026] [security2:error] [pid 1028675:tid 1028916] [client 93.123.109.228:52546] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/product/.env"] [unique_id "apK9UtdHPfW2QFvhmL7SBAAAAGo"]
[Sat Aug 29 05:06:58.639770 2026] [security2:error] [pid 1018003:tid 1018222] [client 93.123.109.228:52506] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/production/.env"] [unique_id "apK9UjAh5Y1i2tUxg4EJ7gAABf8"]
[Sat Aug 29 05:06:58.659559 2026] [security2:error] [pid 1028675:tid 1028875] [client 20.196.209.81:9775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/feed-rss2-queue.php"] [unique_id "apK9UtdHPfW2QFvhmL7SBwAAAEE"]
[Sat Aug 29 05:06:58.662472 2026] [core:error] [pid 1018003:tid 1018100] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.662493 2026] [core:error] [pid 1018003:tid 1018100] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.662571 2026] [security2:error] [pid 1018003:tid 1018217] [client 20.48.160.90:51279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "apK9UjAh5Y1i2tUxg4EJ9QAABfo"]
[Sat Aug 29 05:06:58.665461 2026] [core:error] [pid 1018003:tid 1018039] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.665473 2026] [core:error] [pid 1018003:tid 1018039] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.667979 2026] [security2:error] [pid 1028675:tid 1028810] [client 93.123.109.228:52468] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/project/.env"] [unique_id "apK9UtdHPfW2QFvhmL7SCQAAAAA"]
[Sat Aug 29 05:06:58.674885 2026] [security2:error] [pid 1018003:tid 1018188] [client 93.123.109.228:52498] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/public-api/.env"] [unique_id "apK9UjAh5Y1i2tUxg4EJ-AAABd0"]
[Sat Aug 29 05:06:58.682508 2026] [core:error] [pid 1018003:tid 1018187] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.682524 2026] [core:error] [pid 1018003:tid 1018187] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.689802 2026] [core:error] [pid 1028675:tid 1028923] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.689824 2026] [core:error] [pid 1028675:tid 1028923] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.692581 2026] [security2:error] [pid 1028675:tid 1028850] [client 93.123.109.228:52428] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/public/.env"] [unique_id "apK9UtdHPfW2QFvhmL7SDQAAACg"]
[Sat Aug 29 05:06:58.699375 2026] [core:error] [pid 1018003:tid 1018061] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.699391 2026] [core:error] [pid 1018003:tid 1018061] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.701570 2026] [security2:error] [pid 1028675:tid 1028933] [client 168.107.94.195:52208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9UtdHPfW2QFvhmL7SEAAAAHs"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:58.707063 2026] [security2:error] [pid 1018003:tid 1018177] [client 93.123.109.228:52516] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/public_html/.env"] [unique_id "apK9UjAh5Y1i2tUxg4EKAQAABdI"]
[Sat Aug 29 05:06:58.709996 2026] [core:error] [pid 1028675:tid 1028925] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.710012 2026] [core:error] [pid 1028675:tid 1028925] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.714460 2026] [core:error] [pid 1018003:tid 1018051] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.714478 2026] [core:error] [pid 1018003:tid 1018051] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.734144 2026] [security2:error] [pid 1018003:tid 1018049] [remote 34.139.66.91:50250] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "tgd6.com"] [uri "/apps/.env"] [unique_id "apK9UjAh5Y1i2tUxg4EKCQAFyBw"]
[Sat Aug 29 05:06:58.735202 2026] [core:error] [pid 1018003:tid 1018050] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.735224 2026] [core:error] [pid 1018003:tid 1018050] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.736228 2026] [core:error] [pid 1018003:tid 1018088] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.736243 2026] [core:error] [pid 1018003:tid 1018088] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.747017 2026] [security2:error] [pid 1028675:tid 1028899] [client 68.155.159.216:52813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9UtdHPfW2QFvhmL7SGgAAAFk"]
[Sat Aug 29 05:06:58.747828 2026] [core:error] [pid 1028675:tid 1028831] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.747845 2026] [core:error] [pid 1028675:tid 1028831] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.763739 2026] [security2:error] [pid 1028675:tid 1028898] [client 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK9UtdHPfW2QFvhmL7SBgAAWCw"]
[Sat Aug 29 05:06:58.764006 2026] [core:error] [pid 1028675:tid 1028893] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.764019 2026] [core:error] [pid 1028675:tid 1028893] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.766255 2026] [core:error] [pid 1028675:tid 1028853] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.766273 2026] [core:error] [pid 1028675:tid 1028853] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.770096 2026] [core:error] [pid 1028675:tid 1028833] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.770115 2026] [core:error] [pid 1028675:tid 1028833] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.771120 2026] [core:error] [pid 1028675:tid 1028872] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.771134 2026] [core:error] [pid 1028675:tid 1028872] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.771339 2026] [security2:error] [pid 1018003:tid 1018261] [client 93.123.109.228:52548] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/qa/.env"] [unique_id "apK9UjAh5Y1i2tUxg4EKDgAABiU"]
[Sat Aug 29 05:06:58.771792 2026] [core:error] [pid 1018003:tid 1018224] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.771805 2026] [core:error] [pid 1018003:tid 1018224] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.773318 2026] [security2:error] [pid 1028675:tid 1028887] [client 20.48.250.41:21465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/zxekqlxb.php"] [unique_id "apK9UtdHPfW2QFvhmL7SHwAAAE0"]
[Sat Aug 29 05:06:58.775193 2026] [security2:error] [pid 1028675:tid 1028856] [client 20.52.41.200:1265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-includes/fonts/admin.php"] [unique_id "apK9UtdHPfW2QFvhmL7SIAAAAC4"]
[Sat Aug 29 05:06:58.775559 2026] [security2:error] [pid 1018003:tid 1018134] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/crm/.env"] [unique_id "apK9UjAh5Y1i2tUxg4EKDwAFw3E"]
[Sat Aug 29 05:06:58.783508 2026] [security2:error] [pid 1018003:tid 1018085] [remote 34.139.66.91:50250] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "tgd6.com"] [uri "/v1/.env"] [unique_id "apK9UjAh5Y1i2tUxg4EKEAAGLEA"]
[Sat Aug 29 05:06:58.802300 2026] [security2:error] [pid 1018003:tid 1018213] [client 68.155.159.216:50296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK9UjAh5Y1i2tUxg4EKEgAABfY"]
[Sat Aug 29 05:06:58.809573 2026] [security2:error] [pid 1028675:tid 1028920] [client 158.23.147.79:30495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/lock.php"] [unique_id "apK9UtdHPfW2QFvhmL7SIwAAAG4"]
[Sat Aug 29 05:06:58.812737 2026] [security2:error] [pid 1018003:tid 1018062] [remote 34.139.66.91:50250] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "tgd6.com"] [uri "/site/.env"] [unique_id "apK9UjAh5Y1i2tUxg4EKEwAGNSk"]
[Sat Aug 29 05:06:58.817494 2026] [security2:error] [pid 1018003:tid 1018067] [remote 34.139.66.91:50250] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "tgd6.com"] [uri "/old/.env"] [unique_id "apK9UjAh5Y1i2tUxg4EKFQAF1C4"]
[Sat Aug 29 05:06:58.827470 2026] [security2:error] [pid 1018003:tid 1018136] [remote 34.139.66.91:50250] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "tgd6.com"] [uri "/v2/.env"] [unique_id "apK9UjAh5Y1i2tUxg4EKFgAGA3M"]
[Sat Aug 29 05:06:58.835458 2026] [security2:error] [pid 1028675:tid 1028862] [client 20.48.160.90:51638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/robots.php"] [unique_id "apK9UtdHPfW2QFvhmL7SJgAAADQ"]
[Sat Aug 29 05:06:58.841213 2026] [security2:error] [pid 1028675:tid 1028912] [client 158.158.54.35:22135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/shell.php"] [unique_id "apK9UtdHPfW2QFvhmL7SKAAAAGY"]
[Sat Aug 29 05:06:58.841371 2026] [security2:error] [pid 1018003:tid 1018266] [client 20.197.61.180:7878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/configs.php"] [unique_id "apK9UjAh5Y1i2tUxg4EKGgAABio"]
[Sat Aug 29 05:06:58.860841 2026] [security2:error] [pid 1018003:tid 1018115] [remote 34.139.66.91:50250] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "tgd6.com"] [uri "/docker/.env"] [unique_id "apK9UjAh5Y1i2tUxg4EKHAAGH14"]
[Sat Aug 29 05:06:58.867896 2026] [security2:error] [pid 1018003:tid 1018056] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/current/.env"] [unique_id "apK9UjAh5Y1i2tUxg4EKHgAF4yM"]
[Sat Aug 29 05:06:58.874858 2026] [security2:error] [pid 1028675:tid 1028880] [client 20.196.209.81:15501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-admin/test.php"] [unique_id "apK9UtdHPfW2QFvhmL7SKgAAAEY"]
[Sat Aug 29 05:06:58.876933 2026] [security2:error] [pid 1018003:tid 1018104] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/demo/.env"] [unique_id "apK9UjAh5Y1i2tUxg4EKIAAFz1M"]
[Sat Aug 29 05:06:58.876956 2026] [security2:error] [pid 1018003:tid 1018053] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/dev/.env"] [unique_id "apK9UjAh5Y1i2tUxg4EKIgAFzyA"]
[Sat Aug 29 05:06:58.877811 2026] [security2:error] [pid 1018003:tid 1018206] [client 158.23.147.79:32715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/dropdown.php"] [unique_id "apK9UjAh5Y1i2tUxg4EKJAAABe8"]
[Sat Aug 29 05:06:58.883063 2026] [security2:error] [pid 1018003:tid 1018070] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/develop/.env"] [unique_id "apK9UjAh5Y1i2tUxg4EKKAAFzzE"]
[Sat Aug 29 05:06:58.883533 2026] [core:error] [pid 1018003:tid 1018055] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.883547 2026] [core:error] [pid 1018003:tid 1018055] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.889531 2026] [security2:error] [pid 1018003:tid 1018159] [client 4.205.62.107:65436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/php-details.php"] [unique_id "apK9UjAh5Y1i2tUxg4EKKQAABcA"]
[Sat Aug 29 05:06:58.893853 2026] [security2:error] [pid 1018003:tid 1018234] [client 4.205.62.107:21581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/or.php"] [unique_id "apK9UjAh5Y1i2tUxg4EKKgAABgo"]
[Sat Aug 29 05:06:58.895683 2026] [security2:error] [pid 1018003:tid 1018089] [remote 34.139.66.91:50250] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "tgd6.com"] [uri "/.docker/.env"] [unique_id "apK9UjAh5Y1i2tUxg4EKKwAFvUQ"]
[Sat Aug 29 05:06:58.900756 2026] [security2:error] [pid 1018003:tid 1018216] [client 4.205.62.107:58451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/grsiuk.php"] [unique_id "apK9UjAh5Y1i2tUxg4EKLAAABfk"]
[Sat Aug 29 05:06:58.902886 2026] [security2:error] [pid 1028675:tid 1028900] [client 52.139.37.240:32101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/c1.php"] [unique_id "apK9UtdHPfW2QFvhmL7SLQAAAFo"]
[Sat Aug 29 05:06:58.906726 2026] [security2:error] [pid 1018003:tid 1018038] [remote 34.139.66.91:50250] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "tgd6.com"] [uri "/portal/.env"] [unique_id "apK9UjAh5Y1i2tUxg4EKLQAFwhE"]
[Sat Aug 29 05:06:58.910350 2026] [security2:error] [pid 1018003:tid 1018092] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/development/.env"] [unique_id "apK9UjAh5Y1i2tUxg4EKLgAFz0c"]
[Sat Aug 29 05:06:58.915394 2026] [security2:error] [pid 1018003:tid 1018087] [remote 34.139.66.91:50250] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "tgd6.com"] [uri "/staging/.env"] [unique_id "apK9UjAh5Y1i2tUxg4EKLwAFwkI"]
[Sat Aug 29 05:06:58.916949 2026] [security2:error] [pid 1018003:tid 1018230] [client 68.155.159.216:49274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-content/cong.php"] [unique_id "apK9UjAh5Y1i2tUxg4EKMAAABgY"]
[Sat Aug 29 05:06:58.933868 2026] [security2:error] [pid 1018003:tid 1018230] [client 20.48.250.41:21260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/init.php"] [unique_id "apK9UjAh5Y1i2tUxg4EKNAAABgY"]
[Sat Aug 29 05:06:58.934508 2026] [security2:error] [pid 1018003:tid 1018222] [client 4.205.62.107:22411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/wander.php"] [unique_id "apK9UjAh5Y1i2tUxg4EKNQAABf8"]
[Sat Aug 29 05:06:58.942923 2026] [core:error] [pid 1018003:tid 1018169] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.942949 2026] [core:error] [pid 1018003:tid 1018169] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.947635 2026] [core:error] [pid 1028675:tid 1028815] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.947653 2026] [core:error] [pid 1028675:tid 1028815] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.971960 2026] [security2:error] [pid 1018003:tid 1018059] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/cron/.env"] [unique_id "apK9UjAh5Y1i2tUxg4EKOQAGDiY"]
[Sat Aug 29 05:06:58.972124 2026] [core:error] [pid 1018003:tid 1018163] [client 158.158.54.35:28408] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.972137 2026] [core:error] [pid 1018003:tid 1018163] [client 158.158.54.35:28408] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:58.983634 2026] [security2:error] [pid 1018003:tid 1018090] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/developer/.env"] [unique_id "apK9UjAh5Y1i2tUxg4EKOwAF20U"]
[Sat Aug 29 05:06:59.015379 2026] [security2:error] [pid 1018003:tid 1018273] [client 20.48.160.90:51608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/wp-content/plugins/ccx/index.php"] [unique_id "apK9UzAh5Y1i2tUxg4EKRQAABjE"]
[Sat Aug 29 05:06:59.022570 2026] [core:error] [pid 1018003:tid 1018063] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.022592 2026] [core:error] [pid 1018003:tid 1018063] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.025928 2026] [core:error] [pid 1028675:tid 1028883] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.025953 2026] [core:error] [pid 1028675:tid 1028883] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.034027 2026] [security2:error] [pid 1018003:tid 1018261] [client 158.23.147.79:48200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/about.php"] [unique_id "apK9UzAh5Y1i2tUxg4EKUQAABiU"]
[Sat Aug 29 05:06:59.034582 2026] [core:error] [pid 1018003:tid 1018244] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.034596 2026] [core:error] [pid 1018003:tid 1018244] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.040286 2026] [core:error] [pid 1018003:tid 1018212] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.040300 2026] [core:error] [pid 1018003:tid 1018212] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.050646 2026] [security2:error] [pid 1028675:tid 1028914] [client 4.205.62.107:9187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/xin1.php"] [unique_id "apK9U9dHPfW2QFvhmL7SOAAAAGg"]
[Sat Aug 29 05:06:59.053692 2026] [core:error] [pid 1018003:tid 1018233] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.053706 2026] [core:error] [pid 1018003:tid 1018233] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.053720 2026] [core:error] [pid 1018003:tid 1018277] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.053729 2026] [core:error] [pid 1018003:tid 1018277] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.053980 2026] [core:error] [pid 1018003:tid 1018213] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.053992 2026] [core:error] [pid 1018003:tid 1018213] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.065943 2026] [security2:error] [pid 1018003:tid 1018267] [client 40.83.93.50:7577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/blog.php"] [unique_id "apK9UzAh5Y1i2tUxg4EKXAAABis"]
[Sat Aug 29 05:06:59.066771 2026] [security2:error] [pid 1018003:tid 1018114] [remote 34.139.66.91:50250] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "tgd6.com"] [uri "/api/.env.bak"] [unique_id "apK9UzAh5Y1i2tUxg4EKWgAFx10"]
[Sat Aug 29 05:06:59.067029 2026] [security2:error] [pid 1018003:tid 1018118] [remote 34.139.66.91:50250] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "tgd6.com"] [uri "/env.bak"] [unique_id "apK9UzAh5Y1i2tUxg4EKWwAFx2E"]
[Sat Aug 29 05:06:59.068802 2026] [security2:error] [pid 1018003:tid 1018182] [client 20.196.209.81:9744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/inputs.php"] [unique_id "apK9UzAh5Y1i2tUxg4EKYAAABdc"]
[Sat Aug 29 05:06:59.072063 2026] [security2:error] [pid 1018003:tid 1018097] [remote 34.139.66.91:50250] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "tgd6.com"] [uri "/env.old"] [unique_id "apK9UzAh5Y1i2tUxg4EKYQAF50w"]
[Sat Aug 29 05:06:59.083843 2026] [security2:error] [pid 1028675:tid 1028922] [client 168.107.94.195:52674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9U9dHPfW2QFvhmL7SOwAAAHA"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:59.084443 2026] [security2:error] [pid 1018003:tid 1018216] [client 20.48.250.41:21424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/term.php"] [unique_id "apK9UzAh5Y1i2tUxg4EKYwAABfk"]
[Sat Aug 29 05:06:59.085658 2026] [core:error] [pid 1018003:tid 1018148] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.085676 2026] [core:error] [pid 1018003:tid 1018148] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.091240 2026] [core:error] [pid 1028675:tid 1028876] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.091254 2026] [core:error] [pid 1028675:tid 1028876] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.091264 2026] [core:error] [pid 1028675:tid 1028812] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.091273 2026] [core:error] [pid 1028675:tid 1028812] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.092348 2026] [core:error] [pid 1028675:tid 1028929] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.092386 2026] [core:error] [pid 1028675:tid 1028929] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.093067 2026] [core:error] [pid 1018003:tid 1018153] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.093076 2026] [core:error] [pid 1018003:tid 1018153] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.106179 2026] [security2:error] [pid 1028675:tid 1028854] [client 68.155.159.216:16191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/cong.php"] [unique_id "apK9U9dHPfW2QFvhmL7SQAAAACw"]
[Sat Aug 29 05:06:59.114915 2026] [core:error] [pid 1018003:tid 1018058] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.114929 2026] [core:error] [pid 1018003:tid 1018058] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.124192 2026] [security2:error] [pid 1028675:tid 1028871] [client 20.104.49.130:43646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/sta.php"] [unique_id "apK9U9dHPfW2QFvhmL7SQwAAAD0"]
[Sat Aug 29 05:06:59.130458 2026] [security2:error] [pid 1028675:tid 1028838] [client 103.185.242.143:64161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK9U9dHPfW2QFvhmL7SRAAAABw"]
[Sat Aug 29 05:06:59.130536 2026] [security2:error] [pid 1028675:tid 1028838] [client 103.185.242.143:64161] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK9U9dHPfW2QFvhmL7SRAAAABw"]
[Sat Aug 29 05:06:59.131129 2026] [security2:error] [pid 1018003:tid 1018116] [remote 74.7.227.189:35158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 189.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pinnacleforms.com"] [uri "/OeEmailReview.php"] [unique_id "apK9UzAh5Y1i2tUxg4EKaAAFwl8"], referer: https://mail.pinnacleforms.com/
[Sat Aug 29 05:06:59.140956 2026] [core:error] [pid 1028675:tid 1028891] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.140969 2026] [core:error] [pid 1028675:tid 1028891] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.143710 2026] [security2:error] [pid 1018003:tid 1018252] [client 93.123.109.228:52548] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/s3/.env.bak"] [unique_id "apK9UzAh5Y1i2tUxg4EKaQAABhw"]
[Sat Aug 29 05:06:59.155029 2026] [security2:error] [pid 1028675:tid 1028902] [client 20.151.200.44:45963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/X7T6.php"] [unique_id "apK9U9dHPfW2QFvhmL7SRgAAAFw"]
[Sat Aug 29 05:06:59.201533 2026] [security2:error] [pid 1018003:tid 1018022] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/erp/.env"] [unique_id "apK9UzAh5Y1i2tUxg4EKbgAF-gE"]
[Sat Aug 29 05:06:59.209737 2026] [security2:error] [pid 1028675:tid 1028835] [client 68.155.159.216:64459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK9U9dHPfW2QFvhmL7STAAAABk"]
[Sat Aug 29 05:06:59.214327 2026] [security2:error] [pid 1018003:tid 1018101] [remote 34.139.66.91:50250] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "tgd6.com"] [uri "/.env.production.bak"] [unique_id "apK9UzAh5Y1i2tUxg4EKcAAGL1A"]
[Sat Aug 29 05:06:59.215932 2026] [security2:error] [pid 1018003:tid 1018126] [remote 34.139.66.91:50250] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "tgd6.com"] [uri "/.env.prod.bak"] [unique_id "apK9UzAh5Y1i2tUxg4EKcgAGL2k"]
[Sat Aug 29 05:06:59.229207 2026] [security2:error] [pid 1018003:tid 1018029] [remote 34.139.66.91:50250] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "tgd6.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK9UzAh5Y1i2tUxg4EKdQAGKQg"]
[Sat Aug 29 05:06:59.229954 2026] [security2:error] [pid 1018003:tid 1018139] [remote 34.139.66.91:50250] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "tgd6.com"] [uri "/@fs/root/.env"] [unique_id "apK9UzAh5Y1i2tUxg4EKdgAGKXY"]
[Sat Aug 29 05:06:59.230172 2026] [core:error] [pid 1028675:tid 1028908] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.230181 2026] [core:error] [pid 1028675:tid 1028908] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.230593 2026] [security2:error] [pid 1018003:tid 1018027] [remote 34.139.66.91:50250] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "tgd6.com"] [uri "/@fs/.env"] [unique_id "apK9UzAh5Y1i2tUxg4EKdwAGKQY"]
[Sat Aug 29 05:06:59.242308 2026] [security2:error] [pid 1018003:tid 1018262] [client 20.52.41.200:1158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/m.php"] [unique_id "apK9UzAh5Y1i2tUxg4EKeAAABiY"]
[Sat Aug 29 05:06:59.246395 2026] [security2:error] [pid 1028675:tid 1028850] [client 20.48.160.90:51644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/wp-admin/css/colors/maro.php"] [unique_id "apK9U9dHPfW2QFvhmL7SUAAAACg"]
[Sat Aug 29 05:06:59.250123 2026] [security2:error] [pid 1028675:tid 1028933] [client 20.104.49.130:36330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.carlosmua.com"] [uri "/ws85.php"] [unique_id "apK9U9dHPfW2QFvhmL7SUQAAAHs"]
[Sat Aug 29 05:06:59.254595 2026] [core:error] [pid 1028675:tid 1028844] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.254608 2026] [core:error] [pid 1028675:tid 1028844] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.256240 2026] [security2:error] [pid 1028675:tid 1028885] [client 20.48.250.41:21397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/aaa.php"] [unique_id "apK9U9dHPfW2QFvhmL7SUwAAAEs"]
[Sat Aug 29 05:06:59.274408 2026] [core:error] [pid 1018003:tid 1018170] [client 20.196.209.81:15528] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.274428 2026] [core:error] [pid 1018003:tid 1018170] [client 20.196.209.81:15528] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.276291 2026] [security2:error] [pid 1018003:tid 1018187] [client 93.123.109.228:52516] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/server/.env"] [unique_id "apK9UzAh5Y1i2tUxg4EKfAAABdw"]
[Sat Aug 29 05:06:59.276342 2026] [security2:error] [pid 1018003:tid 1018219] [client 93.123.109.228:52456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/server/api/.env"] [unique_id "apK9UzAh5Y1i2tUxg4EKfQAABfw"]
[Sat Aug 29 05:06:59.278182 2026] [security2:error] [pid 1018003:tid 1018138] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/fe/.env"] [unique_id "apK9UzAh5Y1i2tUxg4EKfwAGMXU"]
[Sat Aug 29 05:06:59.279193 2026] [security2:error] [pid 1018003:tid 1018138] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/frontend/.env"] [unique_id "apK9UzAh5Y1i2tUxg4EKhQAGMXU"]
[Sat Aug 29 05:06:59.279237 2026] [security2:error] [pid 1018003:tid 1018073] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/front/.env"] [unique_id "apK9UzAh5Y1i2tUxg4EKhAAGMTQ"]
[Sat Aug 29 05:06:59.280132 2026] [security2:error] [pid 1028675:tid 1028857] [client 40.83.93.50:20829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-admin/network/xmrlpc.php"] [unique_id "apK9U9dHPfW2QFvhmL7SVQAAAC8"]
[Sat Aug 29 05:06:59.283530 2026] [security2:error] [pid 1028675:tid 1028865] [client 158.158.54.35:17630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/elp.php"] [unique_id "apK9U9dHPfW2QFvhmL7SWAAAADc"]
[Sat Aug 29 05:06:59.297447 2026] [security2:error] [pid 1028675:tid 1028893] [client 93.123.109.228:52468] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/server/backend/.env"] [unique_id "apK9U9dHPfW2QFvhmL7SWgAAAFM"]
[Sat Aug 29 05:06:59.303569 2026] [security2:error] [pid 1018003:tid 1018091] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/etc/apache2/apache2.conf"] [unique_id "apK9UzAh5Y1i2tUxg4EKiwAGMUY"]
[Sat Aug 29 05:06:59.310025 2026] [core:error] [pid 1028675:tid 1028936] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.310041 2026] [core:error] [pid 1028675:tid 1028936] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.310782 2026] [core:error] [pid 1028675:tid 1028890] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.310799 2026] [core:error] [pid 1028675:tid 1028890] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.313020 2026] [core:error] [pid 1028675:tid 1028931] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.313032 2026] [core:error] [pid 1028675:tid 1028931] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.313272 2026] [core:error] [pid 1028675:tid 1028855] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.313283 2026] [core:error] [pid 1028675:tid 1028855] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.323624 2026] [core:error] [pid 1028675:tid 1028863] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.323637 2026] [core:error] [pid 1028675:tid 1028863] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.331273 2026] [core:error] [pid 1018003:tid 1018224] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.331299 2026] [core:error] [pid 1018003:tid 1018224] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.343716 2026] [security2:error] [pid 1018003:tid 1018189] [client 158.23.147.79:17447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-content/themes/too.php"] [unique_id "apK9UzAh5Y1i2tUxg4EKkQAABd4"]
[Sat Aug 29 05:06:59.347383 2026] [security2:error] [pid 1018003:tid 1018120] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/etc/boto.cfg"] [unique_id "apK9UzAh5Y1i2tUxg4EKkgAGMWM"]
[Sat Aug 29 05:06:59.363291 2026] [security2:error] [pid 1018003:tid 1018258] [client 4.205.62.107:53311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/g3.php"] [unique_id "apK9UzAh5Y1i2tUxg4EKlwAABiI"]
[Sat Aug 29 05:06:59.369575 2026] [core:error] [pid 1018003:tid 1018160] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.369593 2026] [core:error] [pid 1018003:tid 1018160] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.383212 2026] [core:error] [pid 1028675:tid 1028814] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.383230 2026] [core:error] [pid 1028675:tid 1028814] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.387197 2026] [security2:error] [pid 1028675:tid 1028912] [client 68.155.159.216:24573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK9U9dHPfW2QFvhmL7SZwAAAGY"]
[Sat Aug 29 05:06:59.390708 2026] [core:error] [pid 1018003:tid 1018166] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.390733 2026] [core:error] [pid 1018003:tid 1018166] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.417139 2026] [security2:error] [pid 1028675:tid 1028880] [client 20.104.49.130:60749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/dk.php"] [unique_id "apK9U9dHPfW2QFvhmL7SaQAAAEY"]
[Sat Aug 29 05:06:59.420862 2026] [security2:error] [pid 1028675:tid 1028917] [client 158.158.54.35:20334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-content/themes/pridmag/il.php"] [unique_id "apK9U9dHPfW2QFvhmL7SagAAAGs"]
[Sat Aug 29 05:06:59.426036 2026] [security2:error] [pid 1028675:tid 1028841] [client 20.48.250.41:21330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/xsox.php"] [unique_id "apK9U9dHPfW2QFvhmL7SawAAAB8"]
[Sat Aug 29 05:06:59.431930 2026] [core:error] [pid 1018003:tid 1018216] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.431946 2026] [core:error] [pid 1018003:tid 1018216] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.432269 2026] [security2:error] [pid 1028675:tid 1028935] [client 93.123.109.228:52428] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/service/.env"] [unique_id "apK9U9dHPfW2QFvhmL7SbAAAAH0"]
[Sat Aug 29 05:06:59.436722 2026] [security2:error] [pid 1018003:tid 1018141] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/infophp.php"] [unique_id "apK9UzAh5Y1i2tUxg4EKowAGMXg"]
[Sat Aug 29 05:06:59.439259 2026] [security2:error] [pid 1028675:tid 1028859] [client 68.155.159.216:33694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/sad/about.php"] [unique_id "apK9U9dHPfW2QFvhmL7SbQAAADE"]
[Sat Aug 29 05:06:59.439851 2026] [security2:error] [pid 1018003:tid 1018132] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/info.php"] [unique_id "apK9UzAh5Y1i2tUxg4EKpgAGMW8"]
[Sat Aug 29 05:06:59.441398 2026] [core:error] [pid 1018003:tid 1018128] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.441410 2026] [core:error] [pid 1018003:tid 1018128] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.446297 2026] [security2:error] [pid 1028675:tid 1028849] [client 68.155.159.216:56526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/file5.php"] [unique_id "apK9U9dHPfW2QFvhmL7SbwAAACc"]
[Sat Aug 29 05:06:59.449745 2026] [security2:error] [pid 1018003:tid 1018180] [client 93.123.109.228:52464] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/services/.env"] [unique_id "apK9UzAh5Y1i2tUxg4EKpwAABdU"]
[Sat Aug 29 05:06:59.461753 2026] [core:error] [pid 1028675:tid 1028828] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.461774 2026] [core:error] [pid 1028675:tid 1028828] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.464855 2026] [security2:error] [pid 1018003:tid 1018107] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/infos.php"] [unique_id "apK9UzAh5Y1i2tUxg4EKqwAGMVY"]
[Sat Aug 29 05:06:59.480529 2026] [security2:error] [pid 1018003:tid 1018230] [client 20.48.160.90:51585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/wp-admin/css/colors/coffee/marijuana.php"] [unique_id "apK9UzAh5Y1i2tUxg4EKrgAABgY"]
[Sat Aug 29 05:06:59.481661 2026] [security2:error] [pid 1018003:tid 1018161] [client 168.107.94.195:53120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9UzAh5Y1i2tUxg4EKrwAABcI"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:59.483592 2026] [security2:error] [pid 1018003:tid 1018129] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/laravel/.env"] [unique_id "apK9UzAh5Y1i2tUxg4EKsAAGMWw"]
[Sat Aug 29 05:06:59.485924 2026] [security2:error] [pid 1018003:tid 1018212] [client 20.196.209.81:9419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/class-walker-category-dropdown-class.php"] [unique_id "apK9UzAh5Y1i2tUxg4EKtAAABfU"]
[Sat Aug 29 05:06:59.511790 2026] [security2:error] [pid 1018003:tid 1018123] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/lms/.env"] [unique_id "apK9UzAh5Y1i2tUxg4EKtgAGMWY"]
[Sat Aug 29 05:06:59.511790 2026] [security2:error] [pid 1018003:tid 1018045] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/local/.env"] [unique_id "apK9UzAh5Y1i2tUxg4EKtQAGMRg"]
[Sat Aug 29 05:06:59.517258 2026] [core:error] [pid 1028675:tid 1028818] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.517275 2026] [core:error] [pid 1028675:tid 1028818] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.520534 2026] [security2:error] [pid 1018003:tid 1018192] [client 93.123.109.228:52506] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/shared/.env"] [unique_id "apK9UzAh5Y1i2tUxg4EKtwAABeE"]
[Sat Aug 29 05:06:59.522759 2026] [core:error] [pid 1018003:tid 1018169] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.522776 2026] [core:error] [pid 1018003:tid 1018169] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.527686 2026] [security2:error] [pid 1028675:tid 1028922] [client 93.123.109.228:52546] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/shop/.env"] [unique_id "apK9U9dHPfW2QFvhmL7SdgAAAHA"]
[Sat Aug 29 05:06:59.541079 2026] [security2:error] [pid 1028675:tid 1028853] [client 20.197.61.180:9374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/disagraeed.php"] [unique_id "apK9U9dHPfW2QFvhmL7SeQAAACs"]
[Sat Aug 29 05:06:59.555346 2026] [security2:error] [pid 1018003:tid 1018036] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/market/.env"] [unique_id "apK9UzAh5Y1i2tUxg4EKwgAGMQ8"]
[Sat Aug 29 05:06:59.565016 2026] [security2:error] [pid 1018003:tid 1018186] [client 158.23.147.79:62990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK9UzAh5Y1i2tUxg4EKxwAABds"]
[Sat Aug 29 05:06:59.565687 2026] [core:error] [pid 1018003:tid 1018163] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.565702 2026] [core:error] [pid 1018003:tid 1018163] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.568769 2026] [core:error] [pid 1018003:tid 1018262] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.568787 2026] [core:error] [pid 1018003:tid 1018262] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.572365 2026] [security2:error] [pid 1018003:tid 1018256] [client 68.155.159.216:63856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK9UzAh5Y1i2tUxg4EKygAABiA"]
[Sat Aug 29 05:06:59.572799 2026] [core:error] [pid 1018003:tid 1018219] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.572808 2026] [core:error] [pid 1018003:tid 1018219] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.575786 2026] [security2:error] [pid 1028675:tid 1028821] [client 40.83.93.50:7740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/bypass.php"] [unique_id "apK9U9dHPfW2QFvhmL7SfAAAAAs"]
[Sat Aug 29 05:06:59.581390 2026] [core:error] [pid 1018003:tid 1018270] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.581409 2026] [core:error] [pid 1018003:tid 1018270] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.584647 2026] [security2:error] [pid 1028675:tid 1028906] [client 93.123.109.228:52428] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/src/.env"] [unique_id "apK9U9dHPfW2QFvhmL7SfQAAAGA"]
[Sat Aug 29 05:06:59.595752 2026] [security2:error] [pid 1018003:tid 1018261] [client 158.23.147.79:26532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-content/radio.php"] [unique_id "apK9UzAh5Y1i2tUxg4EKzgAABiU"]
[Sat Aug 29 05:06:59.603484 2026] [security2:error] [pid 1018003:tid 1018026] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/marketing/.env"] [unique_id "apK9UzAh5Y1i2tUxg4EK0QAF9gU"]
[Sat Aug 29 05:06:59.604056 2026] [security2:error] [pid 1018003:tid 1018179] [client 20.48.250.41:21477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/lkui.php"] [unique_id "apK9UzAh5Y1i2tUxg4EK1AAABdQ"]
[Sat Aug 29 05:06:59.605125 2026] [security2:error] [pid 1018003:tid 1018032] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/media/.env"] [unique_id "apK9UzAh5Y1i2tUxg4EK0gAF9gs"]
[Sat Aug 29 05:06:59.645463 2026] [core:error] [pid 1028675:tid 1028916] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.645479 2026] [core:error] [pid 1028675:tid 1028916] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.650047 2026] [security2:error] [pid 1018003:tid 1018130] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/new/.env"] [unique_id "apK9UzAh5Y1i2tUxg4EK3QAF9m0"]
[Sat Aug 29 05:06:59.654284 2026] [security2:error] [pid 1028675:tid 1028871] [client 20.104.49.130:58087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/users.php"] [unique_id "apK9U9dHPfW2QFvhmL7SgwAAAD0"]
[Sat Aug 29 05:06:59.661855 2026] [core:error] [pid 1028675:tid 1028873] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.661871 2026] [core:error] [pid 1028675:tid 1028873] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.668132 2026] [security2:error] [pid 1018003:tid 1018226] [client 158.23.147.79:49845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/NewFile.php/"] [unique_id "apK9UzAh5Y1i2tUxg4EK3gAABgM"]
[Sat Aug 29 05:06:59.671864 2026] [core:error] [pid 1018003:tid 1018194] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.671882 2026] [core:error] [pid 1018003:tid 1018194] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.671903 2026] [security2:error] [pid 1028675:tid 1028876] [client 20.196.209.81:17178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-admin/user/f35.php"] [unique_id "apK9U9dHPfW2QFvhmL7ShgAAAEI"]
[Sat Aug 29 05:06:59.691728 2026] [security2:error] [pid 1018003:tid 1018221] [client 68.155.159.216:1994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/simple.php"] [unique_id "apK9UzAh5Y1i2tUxg4EK5AAABf4"]
[Sat Aug 29 05:06:59.693179 2026] [security2:error] [pid 1018003:tid 1018183] [client 20.52.41.200:1204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-admin/css/wp-login.php"] [unique_id "apK9UzAh5Y1i2tUxg4EK5QAABdg"]
[Sat Aug 29 05:06:59.715940 2026] [security2:error] [pid 1018003:tid 1018222] [client 4.205.62.107:22484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/btx25.php"] [unique_id "apK9UzAh5Y1i2tUxg4EK6QAABf8"]
[Sat Aug 29 05:06:59.716474 2026] [security2:error] [pid 1018003:tid 1018239] [client 158.23.147.79:35824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/content.php"] [unique_id "apK9UzAh5Y1i2tUxg4EK6gAABg8"]
[Sat Aug 29 05:06:59.716479 2026] [security2:error] [pid 1018003:tid 1018046] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/node/.env"] [unique_id "apK9UzAh5Y1i2tUxg4EK5gAF9hk"]
[Sat Aug 29 05:06:59.716481 2026] [security2:error] [pid 1018003:tid 1018071] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/node-api/.env"] [unique_id "apK9UzAh5Y1i2tUxg4EK5wAF9jI"]
[Sat Aug 29 05:06:59.720881 2026] [security2:error] [pid 1018003:tid 1018216] [client 20.48.160.90:51311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/wp-admin/css/colors/coffee/mari.php"] [unique_id "apK9UzAh5Y1i2tUxg4EK7gAABfk"]
[Sat Aug 29 05:06:59.721840 2026] [security2:error] [pid 1018003:tid 1018041] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/nodeapi/.env"] [unique_id "apK9UzAh5Y1i2tUxg4EK7QAF9hQ"]
[Sat Aug 29 05:06:59.721928 2026] [security2:error] [pid 1018003:tid 1018035] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/node/api/.env"] [unique_id "apK9UzAh5Y1i2tUxg4EK7AAF9g4"]
[Sat Aug 29 05:06:59.721962 2026] [security2:error] [pid 1018003:tid 1018143] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/node/backend/.env"] [unique_id "apK9UzAh5Y1i2tUxg4EK6wAF9no"]
[Sat Aug 29 05:06:59.722872 2026] [security2:error] [pid 1018003:tid 1018153] [client 93.123.109.228:52476] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/stage/.env"] [unique_id "apK9UzAh5Y1i2tUxg4EK7wAABbo"]
[Sat Aug 29 05:06:59.724914 2026] [security2:error] [pid 1028675:tid 1028923] [client 93.123.109.228:52406] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/srv/.env"] [unique_id "apK9U9dHPfW2QFvhmL7SiQAAAHE"]
[Sat Aug 29 05:06:59.726784 2026] [security2:error] [pid 1018003:tid 1018102] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/nodeweb/.env"] [unique_id "apK9UzAh5Y1i2tUxg4EK8AAF9lE"]
[Sat Aug 29 05:06:59.732746 2026] [security2:error] [pid 1018003:tid 1018188] [client 158.158.54.35:10346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-content/cong.php"] [unique_id "apK9UzAh5Y1i2tUxg4EK9AAABd0"]
[Sat Aug 29 05:06:59.735491 2026] [security2:error] [pid 1018003:tid 1018172] [client 68.155.159.216:33571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9UzAh5Y1i2tUxg4EK9QAABc0"]
[Sat Aug 29 05:06:59.736108 2026] [security2:error] [pid 1028675:tid 1028933] [client 20.151.200.44:47372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/see.php"] [unique_id "apK9U9dHPfW2QFvhmL7SjQAAAHs"]
[Sat Aug 29 05:06:59.741635 2026] [security2:error] [pid 1018003:tid 1018195] [client 93.123.109.228:52420] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/staging/.env"] [unique_id "apK9UzAh5Y1i2tUxg4EK9wAABeQ"]
[Sat Aug 29 05:06:59.743104 2026] [security2:error] [pid 1028675:tid 1028844] [client 20.48.250.41:21478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "apK9U9dHPfW2QFvhmL7SjgAAACI"]
[Sat Aug 29 05:06:59.748795 2026] [security2:error] [pid 1028675:tid 1028885] [client 20.203.141.11:13326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/.trash7206/index.php"] [unique_id "apK9U9dHPfW2QFvhmL7SjwAAAEs"]
[Sat Aug 29 05:06:59.751927 2026] [security2:error] [pid 1018003:tid 1018185] [client 40.83.93.50:22836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-admin/options-general.php"] [unique_id "apK9UzAh5Y1i2tUxg4EK-AAABdo"]
[Sat Aug 29 05:06:59.755146 2026] [core:error] [pid 1028675:tid 1028830] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.755164 2026] [core:error] [pid 1028675:tid 1028830] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.762591 2026] [security2:error] [pid 1018003:tid 1018052] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/old/.env"] [unique_id "apK9UzAh5Y1i2tUxg4EK-gAF9h8"]
[Sat Aug 29 05:06:59.766860 2026] [security2:error] [pid 1028675:tid 1028934] [client 68.155.159.216:12270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-admin/user/index.php"] [unique_id "apK9U9dHPfW2QFvhmL7SkgAAAHw"]
[Sat Aug 29 05:06:59.792781 2026] [security2:error] [pid 1028675:tid 1028872] [client 93.123.109.228:52468] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/stg/.env"] [unique_id "apK9U9dHPfW2QFvhmL7SlgAAAD4"]
[Sat Aug 29 05:06:59.794836 2026] [security2:error] [pid 1028675:tid 1028865] [client 57.141.14.22:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/"] [unique_id "apK9U9dHPfW2QFvhmL7SlAAAADc"]
[Sat Aug 29 05:06:59.795038 2026] [core:error] [pid 1018003:tid 1018243] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.795056 2026] [core:error] [pid 1018003:tid 1018243] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.795096 2026] [core:error] [pid 1028675:tid 1028893] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.795107 2026] [core:error] [pid 1028675:tid 1028893] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.797343 2026] [core:error] [pid 1028675:tid 1028845] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.797367 2026] [core:error] [pid 1028675:tid 1028845] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.798225 2026] [core:error] [pid 1018003:tid 1018238] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.798233 2026] [core:error] [pid 1018003:tid 1018238] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.804704 2026] [security2:error] [pid 1018003:tid 1018043] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/opt/.env"] [unique_id "apK9UzAh5Y1i2tUxg4ELAwAFyxY"]
[Sat Aug 29 05:06:59.826536 2026] [security2:error] [pid 1028675:tid 1028840] [client 20.104.49.130:63599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/txets.php"] [unique_id "apK9U9dHPfW2QFvhmL7SmQAAAB4"]
[Sat Aug 29 05:06:59.840693 2026] [core:error] [pid 1028675:tid 1028932] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.840711 2026] [core:error] [pid 1028675:tid 1028932] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.846348 2026] [core:error] [pid 1028675:tid 1028816] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.846380 2026] [core:error] [pid 1028675:tid 1028816] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.861738 2026] [security2:error] [pid 1028675:tid 1028920] [client 168.107.94.195:53621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9U9dHPfW2QFvhmL7SnQAAAG4"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:06:59.877066 2026] [security2:error] [pid 1028675:tid 1028852] [client 93.123.109.228:52406] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/stripe/.env"] [unique_id "apK9U9dHPfW2QFvhmL7SoAAAACo"]
[Sat Aug 29 05:06:59.877741 2026] [security2:error] [pid 1018003:tid 1018265] [client 20.48.250.41:21336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/motu.php"] [unique_id "apK9UzAh5Y1i2tUxg4ELEQAABik"]
[Sat Aug 29 05:06:59.878730 2026] [security2:error] [pid 1028675:tid 1028810] [client 158.158.54.35:34245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/assets/images/doc.php"] [unique_id "apK9U9dHPfW2QFvhmL7SoQAAAAA"]
[Sat Aug 29 05:06:59.923137 2026] [core:error] [pid 1028675:tid 1028912] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.923164 2026] [core:error] [pid 1028675:tid 1028912] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.939612 2026] [security2:error] [pid 1018003:tid 1018198] [client 68.155.159.216:51401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK9UzAh5Y1i2tUxg4ELHAAABec"]
[Sat Aug 29 05:06:59.972196 2026] [security2:error] [pid 1028675:tid 1028874] [client 20.196.209.81:9644] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/1.php7"] [unique_id "apK9U9dHPfW2QFvhmL7SqAAAAEA"]
[Sat Aug 29 05:06:59.972318 2026] [security2:error] [pid 1028675:tid 1028874] [client 20.196.209.81:9644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/1.php7"] [unique_id "apK9U9dHPfW2QFvhmL7SqAAAAEA"]
[Sat Aug 29 05:06:59.975883 2026] [core:error] [pid 1028675:tid 1028900] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.975898 2026] [core:error] [pid 1028675:tid 1028900] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.979935 2026] [security2:error] [pid 1028675:tid 1028815] [client 93.123.109.228:52468] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/terraform.tfstate.backup"] [unique_id "apK9U9dHPfW2QFvhmL7SqgAAAAU"]
[Sat Aug 29 05:06:59.981181 2026] [security2:error] [pid 1018003:tid 1018167] [client 20.104.49.130:57504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/browse.php"] [unique_id "apK9UzAh5Y1i2tUxg4ELLQAABcg"]
[Sat Aug 29 05:06:59.996939 2026] [core:error] [pid 1018003:tid 1018250] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:06:59.996962 2026] [core:error] [pid 1018003:tid 1018250] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.005936 2026] [core:error] [pid 1018003:tid 1018156] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.005956 2026] [core:error] [pid 1018003:tid 1018156] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.006461 2026] [core:error] [pid 1028675:tid 1028903] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.006477 2026] [core:error] [pid 1028675:tid 1028903] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.006806 2026] [core:error] [pid 1028675:tid 1028907] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.006822 2026] [core:error] [pid 1028675:tid 1028907] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.007505 2026] [core:error] [pid 1028675:tid 1028927] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.007520 2026] [core:error] [pid 1028675:tid 1028927] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.008787 2026] [core:error] [pid 1028675:tid 1028924] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.008807 2026] [core:error] [pid 1028675:tid 1028924] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.009349 2026] [core:error] [pid 1028675:tid 1028858] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.009371 2026] [core:error] [pid 1028675:tid 1028858] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.013095 2026] [core:error] [pid 1018003:tid 1018153] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.013109 2026] [core:error] [pid 1018003:tid 1018153] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.013796 2026] [core:error] [pid 1028675:tid 1028881] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.013810 2026] [core:error] [pid 1028675:tid 1028881] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.015975 2026] [core:error] [pid 1028675:tid 1028839] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.015988 2026] [core:error] [pid 1028675:tid 1028839] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.016517 2026] [core:error] [pid 1028675:tid 1028889] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.016529 2026] [core:error] [pid 1028675:tid 1028889] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.017288 2026] [core:error] [pid 1018003:tid 1018062] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.017297 2026] [core:error] [pid 1018003:tid 1018062] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.021454 2026] [core:error] [pid 1028675:tid 1028848] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.021499 2026] [core:error] [pid 1028675:tid 1028848] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.021763 2026] [security2:error] [pid 1028675:tid 1028906] [client 20.48.250.41:21269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/Ov-Simple1.php"] [unique_id "apK9VNdHPfW2QFvhmL7SuAAAAGA"]
[Sat Aug 29 05:07:00.027824 2026] [security2:error] [pid 1028675:tid 1028916] [client 4.205.62.107:65414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/routes.php"] [unique_id "apK9VNdHPfW2QFvhmL7SuQAAAGo"]
[Sat Aug 29 05:07:00.028779 2026] [security2:error] [pid 1018003:tid 1018277] [client 68.155.159.216:49225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK9VDAh5Y1i2tUxg4ELNgAABjU"]
[Sat Aug 29 05:07:00.032019 2026] [security2:error] [pid 1028675:tid 1028886] [client 4.205.62.107:22348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/i.php"] [unique_id "apK9VNdHPfW2QFvhmL7SugAAAEw"]
[Sat Aug 29 05:07:00.044488 2026] [security2:error] [pid 1018003:tid 1018266] [client 93.123.109.228:52506] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/test/.env"] [unique_id "apK9VDAh5Y1i2tUxg4ELNwAABio"]
[Sat Aug 29 05:07:00.053229 2026] [security2:error] [pid 1028675:tid 1028860] [client 20.151.200.44:46551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/horeg.php"] [unique_id "apK9VNdHPfW2QFvhmL7SvQAAADI"]
[Sat Aug 29 05:07:00.056469 2026] [security2:error] [pid 1028675:tid 1028928] [client 4.205.62.107:58444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/oiko6u.php"] [unique_id "apK9VNdHPfW2QFvhmL7SwAAAAHY"]
[Sat Aug 29 05:07:00.059573 2026] [security2:error] [pid 1028675:tid 1028902] [client 93.123.109.228:52546] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/user/.env"] [unique_id "apK9VNdHPfW2QFvhmL7SwgAAAFw"]
[Sat Aug 29 05:07:00.077195 2026] [security2:error] [pid 1028675:tid 1028846] [client 4.205.62.107:22371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andresortega.org"] [uri "/ah25.php"] [unique_id "apK9VNdHPfW2QFvhmL7SxAAAACQ"]
[Sat Aug 29 05:07:00.077282 2026] [security2:error] [pid 1018003:tid 1018166] [client 20.196.209.81:22416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-admin/user/min.php"] [unique_id "apK9VDAh5Y1i2tUxg4ELPAAABcc"]
[Sat Aug 29 05:07:00.088303 2026] [security2:error] [pid 1028675:tid 1028923] [client 20.48.160.90:51288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/wp-includes/images/crystal/option.php"] [unique_id "apK9VNdHPfW2QFvhmL7SxQAAAHE"]
[Sat Aug 29 05:07:00.094433 2026] [security2:error] [pid 1018003:tid 1018163] [client 93.123.109.228:52420] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/v1/.env"] [unique_id "apK9VDAh5Y1i2tUxg4ELPQAABcQ"]
[Sat Aug 29 05:07:00.095983 2026] [core:error] [pid 1028675:tid 1028822] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.095995 2026] [core:error] [pid 1028675:tid 1028822] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.100880 2026] [security2:error] [pid 1018003:tid 1018179] [client 40.83.93.50:7602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/extractable-loader-head.php"] [unique_id "apK9VDAh5Y1i2tUxg4ELPgAABdQ"]
[Sat Aug 29 05:07:00.133616 2026] [security2:error] [pid 1028675:tid 1028899] [client 93.123.109.228:52428] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/v2/.env"] [unique_id "apK9VNdHPfW2QFvhmL7SyAAAAFk"]
[Sat Aug 29 05:07:00.140522 2026] [security2:error] [pid 1018003:tid 1018225] [client 93.123.109.228:52512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/v3/.env"] [unique_id "apK9VDAh5Y1i2tUxg4ELQAAABgI"]
[Sat Aug 29 05:07:00.143925 2026] [security2:error] [pid 1028675:tid 1028854] [client 20.196.209.81:1776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/post.php"] [unique_id "apK9VNdHPfW2QFvhmL7SygAAACw"]
[Sat Aug 29 05:07:00.144278 2026] [security2:error] [pid 1028675:tid 1028842] [client 158.23.147.79:48443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK9VNdHPfW2QFvhmL7SywAAACA"]
[Sat Aug 29 05:07:00.151094 2026] [security2:error] [pid 1018003:tid 1018136] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/php-info.php"] [unique_id "apK9VDAh5Y1i2tUxg4ELQgAF9nM"]
[Sat Aug 29 05:07:00.152594 2026] [security2:error] [pid 1028675:tid 1028872] [client 20.48.250.41:21471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/wp-blogs.php"] [unique_id "apK9VNdHPfW2QFvhmL7SzQAAAD4"]
[Sat Aug 29 05:07:00.154730 2026] [security2:error] [pid 1028675:tid 1028861] [client 20.52.41.200:1215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/222.php"] [unique_id "apK9VNdHPfW2QFvhmL7SzgAAADM"]
[Sat Aug 29 05:07:00.157971 2026] [security2:error] [pid 1018003:tid 1018056] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/php.php"] [unique_id "apK9VDAh5Y1i2tUxg4ELRAAGECM"]
[Sat Aug 29 05:07:00.158458 2026] [security2:error] [pid 1018003:tid 1018104] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/php_info.php"] [unique_id "apK9VDAh5Y1i2tUxg4ELRQAGEFM"]
[Sat Aug 29 05:07:00.158866 2026] [security2:error] [pid 1018003:tid 1018055] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/phpinfo.php"] [unique_id "apK9VDAh5Y1i2tUxg4ELRwAGECI"]
[Sat Aug 29 05:07:00.189016 2026] [core:error] [pid 1018003:tid 1018231] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.189040 2026] [core:error] [pid 1018003:tid 1018231] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.189443 2026] [security2:error] [pid 1018003:tid 1018087] [remote 34.139.66.91:50252] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "tgd6.com"] [uri "/_image"] [unique_id "apK9VDAh5Y1i2tUxg4ELUAAF3EI"]
[Sat Aug 29 05:07:00.205242 2026] [security2:error] [pid 1018003:tid 1018185] [client 158.158.54.35:10201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK9VDAh5Y1i2tUxg4ELVwAABdo"]
[Sat Aug 29 05:07:00.209260 2026] [security2:error] [pid 1028675:tid 1028878] [client 4.205.62.107:9189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/adminfus.php"] [unique_id "apK9VNdHPfW2QFvhmL7S2AAAAEQ"]
[Sat Aug 29 05:07:00.209755 2026] [security2:error] [pid 1028675:tid 1028811] [client 20.203.141.11:1103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wk/index.php"] [unique_id "apK9VNdHPfW2QFvhmL7S2QAAAAE"]
[Sat Aug 29 05:07:00.210640 2026] [security2:error] [pid 1018003:tid 1018063] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/portal/.env"] [unique_id "apK9VDAh5Y1i2tUxg4ELWQAGECo"]
[Sat Aug 29 05:07:00.211465 2026] [core:error] [pid 1018003:tid 1018090] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.211477 2026] [core:error] [pid 1018003:tid 1018090] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.222666 2026] [security2:error] [pid 1028675:tid 1028876] [client 40.83.93.50:20817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-admin/options.php"] [unique_id "apK9VNdHPfW2QFvhmL7S2wAAAEI"]
[Sat Aug 29 05:07:00.222925 2026] [security2:error] [pid 1018003:tid 1018122] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/production/.env"] [unique_id "apK9VDAh5Y1i2tUxg4ELXQAGEGU"]
[Sat Aug 29 05:07:00.222943 2026] [security2:error] [pid 1018003:tid 1018030] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/prod/.env"] [unique_id "apK9VDAh5Y1i2tUxg4ELXgAGEAk"]
[Sat Aug 29 05:07:00.223489 2026] [security2:error] [pid 1018003:tid 1018025] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/product/.env"] [unique_id "apK9VDAh5Y1i2tUxg4ELXAAGEAQ"]
[Sat Aug 29 05:07:00.229897 2026] [security2:error] [pid 1028675:tid 1028856] [client 68.155.159.216:16148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-includes/js/index.php"] [unique_id "apK9VNdHPfW2QFvhmL7S3gAAAC4"]
[Sat Aug 29 05:07:00.231989 2026] [core:error] [pid 1018003:tid 1018114] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.232002 2026] [core:error] [pid 1018003:tid 1018114] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.232622 2026] [core:error] [pid 1028675:tid 1028816] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.232696 2026] [core:error] [pid 1028675:tid 1028816] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.233920 2026] [security2:error] [pid 1028675:tid 1028835] [client 106.213.87.167:18761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.87.213.106.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK9VNdHPfW2QFvhmL7S1wAAABk"]
[Sat Aug 29 05:07:00.234033 2026] [security2:error] [pid 1028675:tid 1028835] [client 106.213.87.167:18761] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK9VNdHPfW2QFvhmL7S1wAAABk"]
[Sat Aug 29 05:07:00.234635 2026] [core:error] [pid 1018003:tid 1018258] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.234652 2026] [core:error] [pid 1018003:tid 1018258] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.235532 2026] [security2:error] [pid 1018003:tid 1018216] [client 20.197.61.180:13876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/add_actualites.php"] [unique_id "apK9VDAh5Y1i2tUxg4ELYwAABfk"]
[Sat Aug 29 05:07:00.243291 2026] [security2:error] [pid 1018003:tid 1018261] [client 168.107.94.195:54022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9VDAh5Y1i2tUxg4ELZAAABiU"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:00.247935 2026] [security2:error] [pid 1018003:tid 1018118] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/project/.env"] [unique_id "apK9VDAh5Y1i2tUxg4ELZQAGEGE"]
[Sat Aug 29 05:07:00.256002 2026] [core:error] [pid 1028675:tid 1028852] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.256019 2026] [core:error] [pid 1028675:tid 1028852] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.256548 2026] [core:error] [pid 1028675:tid 1028901] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.256563 2026] [core:error] [pid 1028675:tid 1028901] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.282793 2026] [security2:error] [pid 1028675:tid 1028883] [client 20.151.200.44:47315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/basic.php"] [unique_id "apK9VNdHPfW2QFvhmL7S6QAAAEk"]
[Sat Aug 29 05:07:00.298682 2026] [security2:error] [pid 1028675:tid 1028907] [client 20.48.250.41:21380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/mini.php"] [unique_id "apK9VNdHPfW2QFvhmL7S6gAAAGE"]
[Sat Aug 29 05:07:00.316209 2026] [security2:error] [pid 1028675:tid 1028826] [client 158.158.54.35:20311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/bgymj.php"] [unique_id "apK9VNdHPfW2QFvhmL7S7gAAABA"]
[Sat Aug 29 05:07:00.316989 2026] [security2:error] [pid 1028675:tid 1028888] [client 68.155.159.216:64468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/simple.php"] [unique_id "apK9VNdHPfW2QFvhmL7S7wAAAE4"]
[Sat Aug 29 05:07:00.320561 2026] [security2:error] [pid 1018003:tid 1018074] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/public/phpinfo.php"] [unique_id "apK9VDAh5Y1i2tUxg4ELbQAF_jU"]
[Sat Aug 29 05:07:00.320717 2026] [security2:error] [pid 1018003:tid 1018076] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/public/.env"] [unique_id "apK9VDAh5Y1i2tUxg4ELbAAF_jc"]
[Sat Aug 29 05:07:00.320721 2026] [security2:error] [pid 1018003:tid 1018096] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/public-api/.env"] [unique_id "apK9VDAh5Y1i2tUxg4ELawAF_ks"]
[Sat Aug 29 05:07:00.329482 2026] [security2:error] [pid 1028675:tid 1028858] [client 93.123.109.228:52468] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/var/www/.env"] [unique_id "apK9VNdHPfW2QFvhmL7S8AAAADA"]
[Sat Aug 29 05:07:00.334152 2026] [core:error] [pid 1028675:tid 1028917] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.334166 2026] [core:error] [pid 1028675:tid 1028917] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.344037 2026] [security2:error] [pid 1018003:tid 1018222] [client 93.123.109.228:52464] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/var/www/html/.env"] [unique_id "apK9VDAh5Y1i2tUxg4ELbwAABf8"]
[Sat Aug 29 05:07:00.356600 2026] [security2:error] [pid 1018003:tid 1018233] [client 68.155.159.216:18423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK9VDAh5Y1i2tUxg4ELcgAABgk"]
[Sat Aug 29 05:07:00.359254 2026] [core:error] [pid 1018003:tid 1018148] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.359272 2026] [core:error] [pid 1018003:tid 1018148] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.370533 2026] [security2:error] [pid 1018003:tid 1018188] [client 93.123.109.228:52456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/web/.env"] [unique_id "apK9VDAh5Y1i2tUxg4ELdAAABd0"]
[Sat Aug 29 05:07:00.376560 2026] [security2:error] [pid 1018003:tid 1018084] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/qa/.env"] [unique_id "apK9VDAh5Y1i2tUxg4ELdwAF3z8"]
[Sat Aug 29 05:07:00.380509 2026] [security2:error] [pid 1018003:tid 1018086] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/public_html/.env"] [unique_id "apK9VDAh5Y1i2tUxg4ELeAAF30E"]
[Sat Aug 29 05:07:00.390368 2026] [security2:error] [pid 1028675:tid 1028915] [client 68.155.159.216:9271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/content.php"] [unique_id "apK9VNdHPfW2QFvhmL7S-AAAAGk"]
[Sat Aug 29 05:07:00.400000 2026] [security2:error] [pid 1018003:tid 1018226] [client 20.48.160.90:51615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/wp-includes/pomo/xxx.php"] [unique_id "apK9VDAh5Y1i2tUxg4ELgQAABgM"]
[Sat Aug 29 05:07:00.403275 2026] [core:error] [pid 1018003:tid 1018164] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.403296 2026] [core:error] [pid 1018003:tid 1018164] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.405113 2026] [core:error] [pid 1028675:tid 1028937] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.405234 2026] [core:error] [pid 1028675:tid 1028937] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.413677 2026] [core:error] [pid 1028675:tid 1028862] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.413692 2026] [core:error] [pid 1028675:tid 1028862] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.415258 2026] [core:error] [pid 1028675:tid 1028916] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.415271 2026] [core:error] [pid 1028675:tid 1028916] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.419780 2026] [security2:error] [pid 1028675:tid 1028815] [client 20.196.209.81:9408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/ds.php"] [unique_id "apK9VNdHPfW2QFvhmL7TAQAAAAU"]
[Sat Aug 29 05:07:00.422260 2026] [core:error] [pid 1028675:tid 1028902] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.422273 2026] [core:error] [pid 1028675:tid 1028902] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.430542 2026] [security2:error] [pid 1028675:tid 1028885] [client 216.244.66.243:38794] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "scottportfolio.com"] [uri "/userfiles/kupit-dlia-uvelicheniia-titan-gel-351.xml"] [unique_id "apK9VNdHPfW2QFvhmL7TBwAAAEs"]
[Sat Aug 29 05:07:00.430628 2026] [security2:error] [pid 1028675:tid 1028885] [client 216.244.66.243:38794] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "scottportfolio.com"] [uri "/userfiles/kupit-dlia-uvelicheniia-titan-gel-351.xml"] [unique_id "apK9VNdHPfW2QFvhmL7TBwAAAEs"]
[Sat Aug 29 05:07:00.430970 2026] [core:error] [pid 1028675:tid 1028923] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.430979 2026] [core:error] [pid 1028675:tid 1028923] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.434601 2026] [core:error] [pid 1028675:tid 1028822] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.434616 2026] [core:error] [pid 1028675:tid 1028822] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.436677 2026] [core:error] [pid 1028675:tid 1028844] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.436692 2026] [core:error] [pid 1028675:tid 1028844] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.443218 2026] [core:error] [pid 1028675:tid 1028925] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.443230 2026] [core:error] [pid 1028675:tid 1028925] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.448018 2026] [security2:error] [pid 1028675:tid 1028850] [client 158.23.147.79:17458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/radio.php"] [unique_id "apK9VNdHPfW2QFvhmL7TDAAAACg"]
[Sat Aug 29 05:07:00.450331 2026] [security2:error] [pid 1028675:tid 1028845] [client 20.48.250.41:21422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/amp.php"] [unique_id "apK9VNdHPfW2QFvhmL7TDQAAACM"]
[Sat Aug 29 05:07:00.461026 2026] [security2:error] [pid 1018003:tid 1018268] [client 20.151.200.44:47365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/monso.php"] [unique_id "apK9VDAh5Y1i2tUxg4ELiQAABiw"]
[Sat Aug 29 05:07:00.479867 2026] [security2:error] [pid 1028675:tid 1028818] [client 20.196.209.81:15530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-admin/users.php"] [unique_id "apK9VNdHPfW2QFvhmL7TEAAAAAg"]
[Sat Aug 29 05:07:00.497553 2026] [security2:error] [pid 1028675:tid 1028876] [client 4.205.62.107:55942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-konfig.php"] [unique_id "apK9VNdHPfW2QFvhmL7TFQAAAEI"]
[Sat Aug 29 05:07:00.516169 2026] [core:error] [pid 1028675:tid 1028936] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.516190 2026] [core:error] [pid 1028675:tid 1028936] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.517757 2026] [core:error] [pid 1028675:tid 1028920] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.517775 2026] [core:error] [pid 1028675:tid 1028920] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.523347 2026] [core:error] [pid 1028675:tid 1028905] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.523376 2026] [core:error] [pid 1028675:tid 1028905] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.530672 2026] [security2:error] [pid 1018003:tid 1018203] [client 93.123.109.228:52516] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/website/.env"] [unique_id "apK9VDAh5Y1i2tUxg4ELkQAABew"]
[Sat Aug 29 05:07:00.530695 2026] [security2:error] [pid 1028675:tid 1028733] [remote 34.139.66.91:50268] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:href. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "/../,ARGS:href"] [severity "CRITICAL"] [hostname "tgd6.com"] [uri "/_image"] [unique_id "apK9VNdHPfW2QFvhmL7THgAAKTQ"]
[Sat Aug 29 05:07:00.542443 2026] [security2:error] [pid 1028675:tid 1028900] [client 20.104.49.130:48610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/new.php"] [unique_id "apK9VNdHPfW2QFvhmL7TIgAAAFo"]
[Sat Aug 29 05:07:00.542768 2026] [security2:error] [pid 1028675:tid 1028836] [client 20.196.209.81:11324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/flower.php"] [unique_id "apK9VNdHPfW2QFvhmL7TIwAAABo"]
[Sat Aug 29 05:07:00.561668 2026] [security2:error] [pid 1018003:tid 1018207] [client 93.123.109.228:52506] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.fastnetus.com"] [uri "/wp-config.php.bak"] [unique_id "apK9VDAh5Y1i2tUxg4ELmQAABfA"]
[Sat Aug 29 05:07:00.564290 2026] [security2:error] [pid 1028675:tid 1028826] [client 93.123.109.228:52546] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.fastnetus.com"] [uri "/wp-config.php.new"] [unique_id "apK9VNdHPfW2QFvhmL7TKQAAABA"]
[Sat Aug 29 05:07:00.565072 2026] [core:error] [pid 1028675:tid 1028883] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.565090 2026] [core:error] [pid 1028675:tid 1028883] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.576162 2026] [core:error] [pid 1028675:tid 1028924] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.576190 2026] [core:error] [pid 1028675:tid 1028924] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.576742 2026] [security2:error] [pid 1018003:tid 1018175] [client 93.123.109.228:52548] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.fastnetus.com"] [uri "/wp-config.php.old"] [unique_id "apK9VDAh5Y1i2tUxg4ELmwAABdA"]
[Sat Aug 29 05:07:00.596892 2026] [security2:error] [pid 1018003:tid 1018212] [client 20.48.250.41:21449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/cc13.php"] [unique_id "apK9VDAh5Y1i2tUxg4ELnQAABfU"]
[Sat Aug 29 05:07:00.597847 2026] [security2:error] [pid 1028675:tid 1028875] [client 158.23.147.79:53811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-admin/dropdown.php"] [unique_id "apK9VNdHPfW2QFvhmL7TKwAAAEE"]
[Sat Aug 29 05:07:00.605911 2026] [security2:error] [pid 1028675:tid 1028892] [client 20.52.41.200:1154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/mini.php"] [unique_id "apK9VNdHPfW2QFvhmL7TLwAAAFI"]
[Sat Aug 29 05:07:00.606793 2026] [core:error] [pid 1028675:tid 1028918] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.606812 2026] [core:error] [pid 1028675:tid 1028918] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.612195 2026] [security2:error] [pid 1018003:tid 1018256] [client 158.23.147.79:30647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/index/function.php"] [unique_id "apK9VDAh5Y1i2tUxg4ELnwAABiA"]
[Sat Aug 29 05:07:00.614033 2026] [security2:error] [pid 1028675:tid 1028929] [client 68.155.159.216:51259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wzy.php"] [unique_id "apK9VNdHPfW2QFvhmL7TMQAAAHc"]
[Sat Aug 29 05:07:00.614902 2026] [core:error] [pid 1028675:tid 1028892] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.614914 2026] [core:error] [pid 1028675:tid 1028892] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.624035 2026] [security2:error] [pid 1028675:tid 1028842] [client 40.83.93.50:7569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/defaults.php"] [unique_id "apK9VNdHPfW2QFvhmL7TMwAAACA"]
[Sat Aug 29 05:07:00.624393 2026] [security2:error] [pid 1018003:tid 1018261] [client 168.107.94.195:54371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9VDAh5Y1i2tUxg4ELpgAABiU"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:00.632204 2026] [security2:error] [pid 1028675:tid 1028886] [client 93.123.109.228:52412] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "cpcontacts.fastnetus.com"] [uri "/___proxy_subdomain_cpcontacts/wp-content/mysql.sql"] [unique_id "apK9VNdHPfW2QFvhmL7TNQAAAEw"]
[Sat Aug 29 05:07:00.651657 2026] [security2:error] [pid 1028675:tid 1028928] [client 20.48.160.90:51599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/650.php"] [unique_id "apK9VNdHPfW2QFvhmL7TOgAAAHY"]
[Sat Aug 29 05:07:00.655496 2026] [security2:error] [pid 1028675:tid 1028816] [client 158.158.54.35:17655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-mail.php"] [unique_id "apK9VNdHPfW2QFvhmL7TPgAAAAY"]
[Sat Aug 29 05:07:00.657231 2026] [core:error] [pid 1028675:tid 1028825] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.657249 2026] [core:error] [pid 1028675:tid 1028825] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.658109 2026] [core:error] [pid 1028675:tid 1028846] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.658121 2026] [core:error] [pid 1028675:tid 1028846] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.669733 2026] [core:error] [pid 1028675:tid 1028923] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.669751 2026] [core:error] [pid 1028675:tid 1028923] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.677072 2026] [core:error] [pid 1018003:tid 1018183] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.677094 2026] [core:error] [pid 1018003:tid 1018183] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.681262 2026] [security2:error] [pid 1028675:tid 1028832] [client 68.155.159.216:65134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/makeasmtp.php"] [unique_id "apK9VNdHPfW2QFvhmL7TQwAAABY"]
[Sat Aug 29 05:07:00.722128 2026] [security2:error] [pid 1028675:tid 1028861] [client 20.151.200.44:46596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/rce.php"] [unique_id "apK9VNdHPfW2QFvhmL7TRwAAADM"]
[Sat Aug 29 05:07:00.723266 2026] [core:error] [pid 1018003:tid 1018188] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.723280 2026] [core:error] [pid 1018003:tid 1018188] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.723837 2026] [core:error] [pid 1028675:tid 1028867] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.723851 2026] [core:error] [pid 1028675:tid 1028867] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.724571 2026] [core:error] [pid 1018003:tid 1018172] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.724588 2026] [core:error] [pid 1018003:tid 1018172] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.725077 2026] [core:error] [pid 1018003:tid 1018160] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.725088 2026] [core:error] [pid 1018003:tid 1018160] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.725119 2026] [security2:error] [pid 1018003:tid 1018153] [client 103.168.67.159:32700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 159.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "naturalkneads.com"] [uri "/wp/index.php"] [unique_id "apK9VDAh5Y1i2tUxg4ELwAAABbo"], referer: https://naturalkneads.com/wp/wp-admin/
[Sat Aug 29 05:07:00.725913 2026] [security2:error] [pid 1028675:tid 1028833] [client 40.83.93.50:22844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-admin/panel.php"] [unique_id "apK9VNdHPfW2QFvhmL7TSAAAABc"]
[Sat Aug 29 05:07:00.728281 2026] [core:error] [pid 1018003:tid 1018194] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.728297 2026] [core:error] [pid 1018003:tid 1018194] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.731416 2026] [core:error] [pid 1028675:tid 1028860] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.731444 2026] [core:error] [pid 1028675:tid 1028860] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.742189 2026] [security2:error] [pid 1028675:tid 1028909] [client 158.23.147.79:26410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-admin/dropdown.php"] [unique_id "apK9VNdHPfW2QFvhmL7TTQAAAGM"]
[Sat Aug 29 05:07:00.743613 2026] [core:error] [pid 1028675:tid 1028895] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.743632 2026] [core:error] [pid 1028675:tid 1028895] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.744794 2026] [core:error] [pid 1028675:tid 1028887] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.744807 2026] [core:error] [pid 1028675:tid 1028887] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.745081 2026] [security2:error] [pid 1018003:tid 1018192] [client 20.48.250.41:21403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/aa.php"] [unique_id "apK9VDAh5Y1i2tUxg4ELxAAABeE"]
[Sat Aug 29 05:07:00.753290 2026] [security2:error] [pid 1028675:tid 1028856] [client 20.104.49.130:63597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/memberfuns.php"] [unique_id "apK9VNdHPfW2QFvhmL7TTgAAAC4"]
[Sat Aug 29 05:07:00.760881 2026] [core:error] [pid 1028675:tid 1028810] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.760902 2026] [core:error] [pid 1028675:tid 1028810] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.776686 2026] [security2:error] [pid 1028675:tid 1028915] [client 158.158.54.35:8736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK9VNdHPfW2QFvhmL7TVgAAAGk"]
[Sat Aug 29 05:07:00.778548 2026] [core:error] [pid 1028675:tid 1028901] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.778568 2026] [core:error] [pid 1028675:tid 1028901] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.793102 2026] [security2:error] [pid 1018003:tid 1018255] [client 20.203.141.11:22411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/admin.php"] [unique_id "apK9VDAh5Y1i2tUxg4ELyQAABh8"]
[Sat Aug 29 05:07:00.798964 2026] [core:error] [pid 1018003:tid 1018203] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.798984 2026] [core:error] [pid 1018003:tid 1018203] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.812799 2026] [security2:error] [pid 1018003:tid 1018113] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/s3/.env.bak"] [unique_id "apK9VDAh5Y1i2tUxg4ELywAGDlw"]
[Sat Aug 29 05:07:00.820330 2026] [security2:error] [pid 1028675:tid 1028900] [client 20.48.160.90:51267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/nakrip.php"] [unique_id "apK9VNdHPfW2QFvhmL7TWAAAAFo"]
[Sat Aug 29 05:07:00.828325 2026] [security2:error] [pid 1028675:tid 1028907] [client 158.23.147.79:35788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK9VNdHPfW2QFvhmL7TWgAAAGE"]
[Sat Aug 29 05:07:00.828662 2026] [core:error] [pid 1028675:tid 1028813] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.828677 2026] [core:error] [pid 1028675:tid 1028813] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.829117 2026] [security2:error] [pid 1018003:tid 1018200] [client 20.196.209.81:9615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/GOD.php"] [unique_id "apK9VDAh5Y1i2tUxg4ELzAAABek"]
[Sat Aug 29 05:07:00.829465 2026] [security2:error] [pid 1028675:tid 1028826] [client 158.23.147.79:50133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/dropdown.php"] [unique_id "apK9VNdHPfW2QFvhmL7TWwAAABA"]
[Sat Aug 29 05:07:00.845341 2026] [security2:error] [pid 1018003:tid 1018207] [client 68.155.159.216:33630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9VDAh5Y1i2tUxg4ELzgAABfA"]
[Sat Aug 29 05:07:00.852542 2026] [security2:error] [pid 1028675:tid 1028924] [client 4.205.62.107:22374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/app_dev.php"] [unique_id "apK9VNdHPfW2QFvhmL7TXQAAAHI"]
[Sat Aug 29 05:07:00.871103 2026] [security2:error] [pid 1018003:tid 1018270] [client 158.23.147.79:25523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK9VDAh5Y1i2tUxg4EL0gAABi4"]
[Sat Aug 29 05:07:00.875073 2026] [core:error] [pid 1018003:tid 1018185] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.875094 2026] [core:error] [pid 1018003:tid 1018185] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.878258 2026] [security2:error] [pid 1028675:tid 1028882] [client 68.155.159.216:12223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-includes/plugins.php"] [unique_id "apK9VNdHPfW2QFvhmL7TYQAAAEg"]
[Sat Aug 29 05:07:00.878910 2026] [security2:error] [pid 1018003:tid 1018275] [client 20.196.209.81:22441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-admin/wp-cron.php"] [unique_id "apK9VDAh5Y1i2tUxg4EL1AAABjM"]
[Sat Aug 29 05:07:00.882846 2026] [security2:error] [pid 1028675:tid 1028881] [client 20.48.250.41:21485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/s1.php"] [unique_id "apK9VNdHPfW2QFvhmL7TYwAAAEc"]
[Sat Aug 29 05:07:00.884131 2026] [core:error] [pid 1028675:tid 1028875] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.884143 2026] [core:error] [pid 1028675:tid 1028875] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.893312 2026] [core:error] [pid 1028675:tid 1028918] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.893326 2026] [core:error] [pid 1028675:tid 1028918] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:00.910841 2026] [security2:error] [pid 1028675:tid 1028889] [client 20.104.49.130:60759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/tiny2.php"] [unique_id "apK9VNdHPfW2QFvhmL7TZQAAAE8"]
[Sat Aug 29 05:07:00.940071 2026] [security2:error] [pid 1018003:tid 1018177] [client 158.23.147.79:62989] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.sprint52.com"] [uri "/ioxi002.PhP7"] [unique_id "apK9VDAh5Y1i2tUxg4EL1QAABdI"]
[Sat Aug 29 05:07:00.940956 2026] [security2:error] [pid 1028675:tid 1028893] [client 20.196.209.81:11292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/meta.php"] [unique_id "apK9VNdHPfW2QFvhmL7TZgAAAFM"]
[Sat Aug 29 05:07:00.958978 2026] [security2:error] [pid 1028675:tid 1028815] [client 158.23.147.79:30621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/.well-known/content.php"] [unique_id "apK9VNdHPfW2QFvhmL7TaAAAAAU"]
[Sat Aug 29 05:07:00.969519 2026] [security2:error] [pid 1028675:tid 1028902] [client 20.48.160.90:51590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/wp-includes/interactivity-api/flower.php"] [unique_id "apK9VNdHPfW2QFvhmL7TagAAAFw"]
[Sat Aug 29 05:07:00.970487 2026] [security2:error] [pid 1028675:tid 1028921] [client 68.155.159.216:50288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK9VNdHPfW2QFvhmL7TawAAAG8"]
[Sat Aug 29 05:07:00.993815 2026] [security2:error] [pid 1028675:tid 1028847] [client 20.197.61.180:8083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/alfanew.php7"] [unique_id "apK9VNdHPfW2QFvhmL7TbQAAACU"]
[Sat Aug 29 05:07:01.006343 2026] [security2:error] [pid 1028675:tid 1028830] [client 168.107.94.195:54797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9VddHPfW2QFvhmL7TbgAAABQ"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:01.013052 2026] [security2:error] [pid 1018003:tid 1018162] [client 20.48.250.41:21408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/0byte.php"] [unique_id "apK9VTAh5Y1i2tUxg4EL1wAABcM"]
[Sat Aug 29 05:07:01.024044 2026] [security2:error] [pid 1028675:tid 1028844] [client 158.23.147.79:32671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/sad/about.php"] [unique_id "apK9VddHPfW2QFvhmL7TbwAAACI"]
[Sat Aug 29 05:07:01.032601 2026] [security2:error] [pid 1018003:tid 1018221] [client 63.179.191.156:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.jobindjibouti.com"] [uri "/"] [unique_id "apK9VTAh5Y1i2tUxg4EL2QAABf4"]
[Sat Aug 29 05:07:01.047444 2026] [security2:error] [pid 1028675:tid 1028832] [client 68.155.159.216:38557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/file88.php"] [unique_id "apK9VddHPfW2QFvhmL7TcAAAABY"]
[Sat Aug 29 05:07:01.047764 2026] [security2:error] [pid 1028675:tid 1028849] [client 68.155.159.216:51469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-includes/plugins.php"] [unique_id "apK9VddHPfW2QFvhmL7TcQAAACc"]
[Sat Aug 29 05:07:01.049399 2026] [security2:error] [pid 1028675:tid 1028835] [client 68.155.159.216:33670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/admin.php"] [unique_id "apK9VddHPfW2QFvhmL7TcgAAABk"]
[Sat Aug 29 05:07:01.066281 2026] [security2:error] [pid 1018003:tid 1018265] [client 20.52.41.200:1419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/aa.php"] [unique_id "apK9VTAh5Y1i2tUxg4EL2gAABik"]
[Sat Aug 29 05:07:01.069349 2026] [security2:error] [pid 1028675:tid 1028848] [client 20.151.200.44:47326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/exec.php"] [unique_id "apK9VddHPfW2QFvhmL7TcwAAACY"]
[Sat Aug 29 05:07:01.122919 2026] [security2:error] [pid 1028675:tid 1028913] [client 158.158.54.35:9741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-content.php"] [unique_id "apK9VddHPfW2QFvhmL7TeAAAAGc"]
[Sat Aug 29 05:07:01.166946 2026] [security2:error] [pid 1018003:tid 1018172] [client 4.205.62.107:22372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/aww.php"] [unique_id "apK9VTAh5Y1i2tUxg4EL3AAABc0"]
[Sat Aug 29 05:07:01.177744 2026] [security2:error] [pid 1028675:tid 1028833] [client 68.155.159.216:49172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK9VddHPfW2QFvhmL7TeQAAABc"]
[Sat Aug 29 05:07:01.183871 2026] [security2:error] [pid 1028675:tid 1028931] [client 4.205.62.107:65513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/aww.php"] [unique_id "apK9VddHPfW2QFvhmL7TegAAAHk"]
[Sat Aug 29 05:07:01.191694 2026] [security2:error] [pid 1018003:tid 1018153] [client 4.205.62.107:58369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/edit.php"] [unique_id "apK9VTAh5Y1i2tUxg4EL3QAABbo"]
[Sat Aug 29 05:07:01.198076 2026] [security2:error] [pid 1018003:tid 1018234] [client 40.83.93.50:13575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-admin/pk.php"] [unique_id "apK9VTAh5Y1i2tUxg4EL3wAABgo"]
[Sat Aug 29 05:07:01.203713 2026] [security2:error] [pid 1028675:tid 1028909] [client 20.48.250.41:21392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/xr.php"] [unique_id "apK9VddHPfW2QFvhmL7TewAAAGM"]
[Sat Aug 29 05:07:01.220215 2026] [core:error] [pid 1018003:tid 1018233] [client 158.158.54.35:8750] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.220230 2026] [core:error] [pid 1018003:tid 1018233] [client 158.158.54.35:8750] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.220700 2026] [security2:error] [pid 1028675:tid 1028812] [client 40.83.93.50:7258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/post.php"] [unique_id "apK9VddHPfW2QFvhmL7TfQAAAAI"]
[Sat Aug 29 05:07:01.249194 2026] [security2:error] [pid 1028675:tid 1028810] [client 158.23.147.79:48331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/themes.php"] [unique_id "apK9VddHPfW2QFvhmL7TfgAAAAA"]
[Sat Aug 29 05:07:01.251755 2026] [security2:error] [pid 1028675:tid 1028855] [client 20.48.160.90:51594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/xcc.php"] [unique_id "apK9VddHPfW2QFvhmL7TfwAAAC0"]
[Sat Aug 29 05:07:01.273366 2026] [security2:error] [pid 1028675:tid 1028860] [client 20.196.209.81:22457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-admin/wp-links-opml.php"] [unique_id "apK9VddHPfW2QFvhmL7TgAAAADI"]
[Sat Aug 29 05:07:01.286936 2026] [security2:error] [pid 1028675:tid 1028865] [client 20.196.209.81:17911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/ggfi.php"] [unique_id "apK9VddHPfW2QFvhmL7TgQAAADc"]
[Sat Aug 29 05:07:01.308606 2026] [security2:error] [pid 1028675:tid 1028831] [client 20.203.141.11:11529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/php8.php"] [unique_id "apK9VddHPfW2QFvhmL7TggAAABU"]
[Sat Aug 29 05:07:01.340506 2026] [security2:error] [pid 1028675:tid 1028876] [client 20.196.209.81:11314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/randkeyword.php"] [unique_id "apK9VddHPfW2QFvhmL7ThQAAAEI"]
[Sat Aug 29 05:07:01.349689 2026] [security2:error] [pid 1018003:tid 1018266] [client 4.205.62.107:8714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/env.php"] [unique_id "apK9VTAh5Y1i2tUxg4EL5AAABio"]
[Sat Aug 29 05:07:01.353087 2026] [security2:error] [pid 1028675:tid 1028880] [client 68.155.159.216:16252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-content/index.php"] [unique_id "apK9VddHPfW2QFvhmL7ThwAAAEY"]
[Sat Aug 29 05:07:01.363722 2026] [security2:error] [pid 1028675:tid 1028811] [client 20.48.250.41:21430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/h02ugyh.php"] [unique_id "apK9VddHPfW2QFvhmL7TiQAAAAE"]
[Sat Aug 29 05:07:01.380020 2026] [security2:error] [pid 1018003:tid 1018192] [client 20.151.200.44:46651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/dbc.php"] [unique_id "apK9VTAh5Y1i2tUxg4EL5QAABeE"]
[Sat Aug 29 05:07:01.385740 2026] [security2:error] [pid 1018003:tid 1018191] [client 168.107.94.195:55333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9VTAh5Y1i2tUxg4EL5gAABeA"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:01.392995 2026] [security2:error] [pid 1028675:tid 1028820] [client 63.179.191.156:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.jobindjibouti.com"] [uri "/jobs/"] [unique_id "apK9VddHPfW2QFvhmL7TigAAAAo"]
[Sat Aug 29 05:07:01.439911 2026] [security2:error] [pid 1018003:tid 1018111] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/server/api/.env"] [unique_id "apK9VTAh5Y1i2tUxg4EL6QAFx1o"]
[Sat Aug 29 05:07:01.453872 2026] [security2:error] [pid 1028675:tid 1028858] [client 68.155.159.216:65126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-admin/about.php"] [unique_id "apK9VddHPfW2QFvhmL7TkQAAADA"]
[Sat Aug 29 05:07:01.458018 2026] [security2:error] [pid 1028675:tid 1028840] [client 20.48.160.90:51678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/wp-includes/Text/Diff/Engine/aaa.php"] [unique_id "apK9VddHPfW2QFvhmL7TkgAAAB4"]
[Sat Aug 29 05:07:01.463412 2026] [core:error] [pid 1018003:tid 1018021] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.463439 2026] [core:error] [pid 1018003:tid 1018021] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.466122 2026] [core:error] [pid 1018003:tid 1018031] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.466137 2026] [core:error] [pid 1018003:tid 1018031] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.468789 2026] [core:error] [pid 1018003:tid 1018127] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.468802 2026] [core:error] [pid 1018003:tid 1018127] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.470202 2026] [core:error] [pid 1018003:tid 1018026] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.470221 2026] [core:error] [pid 1018003:tid 1018026] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.470577 2026] [core:error] [pid 1018003:tid 1018159] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.470590 2026] [core:error] [pid 1018003:tid 1018159] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.482309 2026] [security2:error] [pid 1018003:tid 1018032] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/server/backend/.env"] [unique_id "apK9VTAh5Y1i2tUxg4EL8QAFxws"]
[Sat Aug 29 05:07:01.491823 2026] [core:error] [pid 1028675:tid 1028926] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.491838 2026] [core:error] [pid 1028675:tid 1028926] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.519988 2026] [security2:error] [pid 1018003:tid 1018187] [client 20.48.250.41:21328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/xxw.php"] [unique_id "apK9VTAh5Y1i2tUxg4EL8wAABdw"]
[Sat Aug 29 05:07:01.523650 2026] [security2:error] [pid 1028675:tid 1028874] [client 20.52.41.200:1734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/c.php"] [unique_id "apK9VddHPfW2QFvhmL7TlAAAAEA"]
[Sat Aug 29 05:07:01.531739 2026] [core:error] [pid 1018003:tid 1018130] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.531751 2026] [core:error] [pid 1018003:tid 1018068] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.531753 2026] [core:error] [pid 1018003:tid 1018130] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.531759 2026] [core:error] [pid 1018003:tid 1018068] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.531855 2026] [core:error] [pid 1018003:tid 1018124] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.531864 2026] [core:error] [pid 1018003:tid 1018124] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.558783 2026] [security2:error] [pid 1018003:tid 1018270] [client 158.23.147.79:17459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK9VTAh5Y1i2tUxg4EL9wAABi4"]
[Sat Aug 29 05:07:01.559816 2026] [security2:error] [pid 1028675:tid 1028857] [client 68.155.159.216:6022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/file.php"] [unique_id "apK9VddHPfW2QFvhmL7TlwAAAC8"]
[Sat Aug 29 05:07:01.564869 2026] [security2:error] [pid 1018003:tid 1018169] [client 158.158.54.35:17997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "apK9VTAh5Y1i2tUxg4EL-AAABco"]
[Sat Aug 29 05:07:01.568270 2026] [security2:error] [pid 1028675:tid 1028875] [client 20.104.49.130:47868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/reop3.php"] [unique_id "apK9VddHPfW2QFvhmL7TmAAAAEE"]
[Sat Aug 29 05:07:01.633141 2026] [security2:error] [pid 1018003:tid 1018177] [client 4.205.62.107:56030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/25.php"] [unique_id "apK9VTAh5Y1i2tUxg4EMAQAABdI"]
[Sat Aug 29 05:07:01.645349 2026] [core:error] [pid 1028675:tid 1028889] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.645372 2026] [core:error] [pid 1028675:tid 1028889] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.657493 2026] [core:error] [pid 1028675:tid 1028932] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.657509 2026] [core:error] [pid 1028675:tid 1028932] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.658999 2026] [core:error] [pid 1028675:tid 1028906] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.659010 2026] [core:error] [pid 1028675:tid 1028906] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.660167 2026] [security2:error] [pid 1018003:tid 1018145] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/service/.env"] [unique_id "apK9VTAh5Y1i2tUxg4EMAwAFy3w"]
[Sat Aug 29 05:07:01.662570 2026] [core:error] [pid 1018003:tid 1018231] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.662584 2026] [core:error] [pid 1018003:tid 1018231] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.667409 2026] [security2:error] [pid 1028675:tid 1028893] [client 20.48.250.41:21418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/bolt.php"] [unique_id "apK9VddHPfW2QFvhmL7TpAAAAFM"]
[Sat Aug 29 05:07:01.667573 2026] [core:error] [pid 1028675:tid 1028816] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.667581 2026] [core:error] [pid 1028675:tid 1028816] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.668068 2026] [security2:error] [pid 1018003:tid 1018200] [client 158.158.54.35:16897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-load.php"] [unique_id "apK9VTAh5Y1i2tUxg4EMBwAABek"]
[Sat Aug 29 05:07:01.668718 2026] [core:error] [pid 1018003:tid 1018103] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.668733 2026] [core:error] [pid 1018003:tid 1018103] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.673835 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.196.209.81:15488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-admin/wp-load.php"] [unique_id "apK9VTAh5Y1i2tUxg4EMCAAABcI"]
[Sat Aug 29 05:07:01.676325 2026] [security2:error] [pid 1018003:tid 1018196] [client 40.83.93.50:22786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-admin/plugin-install.php"] [unique_id "apK9VTAh5Y1i2tUxg4EMCQAABeU"]
[Sat Aug 29 05:07:01.682703 2026] [core:error] [pid 1028675:tid 1028847] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.682715 2026] [core:error] [pid 1028675:tid 1028847] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.690106 2026] [security2:error] [pid 1018003:tid 1018157] [client 20.48.160.90:51670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/wp-includes/style-engine/gecko-new.php"] [unique_id "apK9VTAh5Y1i2tUxg4EMCwAABb4"]
[Sat Aug 29 05:07:01.690380 2026] [security2:error] [pid 1028675:tid 1028870] [client 20.196.209.81:9755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/alfa-rex.php"] [unique_id "apK9VddHPfW2QFvhmL7TrgAAADw"]
[Sat Aug 29 05:07:01.702732 2026] [core:error] [pid 1028675:tid 1028824] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.702744 2026] [core:error] [pid 1028675:tid 1028824] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.718586 2026] [security2:error] [pid 1018003:tid 1018224] [client 158.23.147.79:30540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/cong.php"] [unique_id "apK9VTAh5Y1i2tUxg4EMDAAABgE"]
[Sat Aug 29 05:07:01.725677 2026] [security2:error] [pid 1028675:tid 1028835] [client 68.155.159.216:51865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK9VddHPfW2QFvhmL7TsQAAABk"]
[Sat Aug 29 05:07:01.725724 2026] [security2:error] [pid 1018003:tid 1018044] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/server/.env"] [unique_id "apK9VTAh5Y1i2tUxg4EMDQAFwxc"]
[Sat Aug 29 05:07:01.727064 2026] [security2:error] [pid 1028675:tid 1028881] [client 40.83.93.50:7729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/csv.php"] [unique_id "apK9VddHPfW2QFvhmL7TsgAAAEc"]
[Sat Aug 29 05:07:01.741732 2026] [security2:error] [pid 1028675:tid 1028892] [client 20.196.209.81:11297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/goods.php"] [unique_id "apK9VddHPfW2QFvhmL7TtAAAAFI"]
[Sat Aug 29 05:07:01.741798 2026] [security2:error] [pid 1018003:tid 1018225] [client 20.197.61.180:8137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/xmlrpc.php0"] [unique_id "apK9VTAh5Y1i2tUxg4EMDgAABgI"]
[Sat Aug 29 05:07:01.764968 2026] [security2:error] [pid 1028675:tid 1028933] [client 168.107.94.195:55724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9VddHPfW2QFvhmL7TtQAAAHs"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:01.769158 2026] [security2:error] [pid 1018003:tid 1018183] [client 158.23.147.79:59841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/login.php"] [unique_id "apK9VTAh5Y1i2tUxg4EMDwAABdg"]
[Sat Aug 29 05:07:01.786288 2026] [security2:error] [pid 1018003:tid 1018265] [client 68.155.159.216:65124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK9VTAh5Y1i2tUxg4EMEgAABik"]
[Sat Aug 29 05:07:01.787066 2026] [security2:error] [pid 1018003:tid 1018095] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/services/.env"] [unique_id "apK9VTAh5Y1i2tUxg4EMEAAGGko"]
[Sat Aug 29 05:07:01.822459 2026] [core:error] [pid 1018003:tid 1018153] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.822471 2026] [core:error] [pid 1018003:tid 1018153] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.829543 2026] [security2:error] [pid 1028675:tid 1028818] [client 20.151.200.44:47316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/wp-wlx.php"] [unique_id "apK9VddHPfW2QFvhmL7TvAAAAAg"]
[Sat Aug 29 05:07:01.830836 2026] [security2:error] [pid 1028675:tid 1028931] [client 20.48.250.41:21429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/rtx.php"] [unique_id "apK9VddHPfW2QFvhmL7TvQAAAHk"]
[Sat Aug 29 05:07:01.848227 2026] [security2:error] [pid 1018003:tid 1018156] [client 158.23.147.79:26575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/login.php"] [unique_id "apK9VTAh5Y1i2tUxg4EMHAAABb0"]
[Sat Aug 29 05:07:01.849182 2026] [core:error] [pid 1018003:tid 1018135] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.849197 2026] [core:error] [pid 1018003:tid 1018135] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.870074 2026] [security2:error] [pid 1028675:tid 1028887] [client 20.48.160.90:51284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/wp-settings.php"] [unique_id "apK9VddHPfW2QFvhmL7TxQAAAE0"]
[Sat Aug 29 05:07:01.874550 2026] [security2:error] [pid 1018003:tid 1018048] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/shop/.env"] [unique_id "apK9VTAh5Y1i2tUxg4EMIQAGKhs"]
[Sat Aug 29 05:07:01.875871 2026] [security2:error] [pid 1018003:tid 1018039] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/shared/.env"] [unique_id "apK9VTAh5Y1i2tUxg4EMIgAGKhI"]
[Sat Aug 29 05:07:01.876531 2026] [core:error] [pid 1028675:tid 1028920] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.876547 2026] [core:error] [pid 1028675:tid 1028920] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.876727 2026] [core:error] [pid 1028675:tid 1028856] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.876737 2026] [core:error] [pid 1028675:tid 1028856] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.878640 2026] [core:error] [pid 1028675:tid 1028814] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.878654 2026] [core:error] [pid 1028675:tid 1028814] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.878980 2026] [core:error] [pid 1018003:tid 1018192] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.878988 2026] [core:error] [pid 1018003:tid 1018192] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.902140 2026] [core:error] [pid 1018003:tid 1018271] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.902161 2026] [core:error] [pid 1018003:tid 1018271] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.902403 2026] [core:error] [pid 1028675:tid 1028831] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.902433 2026] [core:error] [pid 1028675:tid 1028831] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.939953 2026] [security2:error] [pid 1028675:tid 1028880] [client 158.23.147.79:49985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/.well-known/index.php"] [unique_id "apK9VddHPfW2QFvhmL7TzAAAAEY"]
[Sat Aug 29 05:07:01.942520 2026] [security2:error] [pid 1018003:tid 1018207] [client 158.23.147.79:35222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/goat.php"] [unique_id "apK9VTAh5Y1i2tUxg4EMKgAABfA"]
[Sat Aug 29 05:07:01.951323 2026] [security2:error] [pid 1018003:tid 1018037] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/src/.env"] [unique_id "apK9VTAh5Y1i2tUxg4EMLwAGLhA"]
[Sat Aug 29 05:07:01.955277 2026] [core:error] [pid 1018003:tid 1018075] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.955298 2026] [core:error] [pid 1018003:tid 1018075] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.971402 2026] [core:error] [pid 1028675:tid 1028813] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.971420 2026] [core:error] [pid 1028675:tid 1028813] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.973281 2026] [security2:error] [pid 1018003:tid 1018275] [client 158.23.147.79:25410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/themes.php"] [unique_id "apK9VTAh5Y1i2tUxg4EMMgAABjM"]
[Sat Aug 29 05:07:01.976150 2026] [core:error] [pid 1018003:tid 1018185] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.976178 2026] [core:error] [pid 1018003:tid 1018185] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:01.982902 2026] [security2:error] [pid 1028675:tid 1028888] [client 68.155.159.216:12125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK9VddHPfW2QFvhmL7T0wAAAE4"]
[Sat Aug 29 05:07:01.983552 2026] [security2:error] [pid 1028675:tid 1028833] [client 20.52.41.200:1205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/f.php"] [unique_id "apK9VddHPfW2QFvhmL7T1AAAABc"]
[Sat Aug 29 05:07:01.992470 2026] [security2:error] [pid 1028675:tid 1028858] [client 4.205.62.107:22465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/php-info.php"] [unique_id "apK9VddHPfW2QFvhmL7T1QAAADA"]
[Sat Aug 29 05:07:01.996309 2026] [security2:error] [pid 1028675:tid 1028840] [client 20.48.250.41:21312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/ckk.php"] [unique_id "apK9VddHPfW2QFvhmL7T1gAAAB4"]
[Sat Aug 29 05:07:02.018821 2026] [core:error] [pid 1028675:tid 1028903] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.018839 2026] [core:error] [pid 1028675:tid 1028903] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.031113 2026] [security2:error] [pid 1018003:tid 1018200] [client 20.203.141.11:23667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/install.php"] [unique_id "apK9VjAh5Y1i2tUxg4EMNQAABek"]
[Sat Aug 29 05:07:02.041037 2026] [security2:error] [pid 1028675:tid 1028915] [client 158.158.54.35:38457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/css/wp-login.php"] [unique_id "apK9VtdHPfW2QFvhmL7T3QAAAGk"]
[Sat Aug 29 05:07:02.059446 2026] [security2:error] [pid 1028675:tid 1028842] [client 158.23.147.79:62698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK9VtdHPfW2QFvhmL7T4AAAACA"]
[Sat Aug 29 05:07:02.060436 2026] [security2:error] [pid 1028675:tid 1028889] [client 20.48.160.90:51293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/wp-signup.php"] [unique_id "apK9VtdHPfW2QFvhmL7T4QAAAE8"]
[Sat Aug 29 05:07:02.067584 2026] [security2:error] [pid 1018003:tid 1018174] [client 158.23.147.79:30488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/js/index.php"] [unique_id "apK9VjAh5Y1i2tUxg4EMNgAABc8"]
[Sat Aug 29 05:07:02.073377 2026] [security2:error] [pid 1018003:tid 1018187] [client 20.196.209.81:13126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-admin/wp-mail.php"] [unique_id "apK9VjAh5Y1i2tUxg4EMOAAABdw"]
[Sat Aug 29 05:07:02.086199 2026] [security2:error] [pid 1028675:tid 1028908] [client 68.155.159.216:50350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/packed.php"] [unique_id "apK9VtdHPfW2QFvhmL7T5QAAAGI"]
[Sat Aug 29 05:07:02.087146 2026] [security2:error] [pid 1028675:tid 1028828] [client 20.196.209.81:14653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/cookie.php"] [unique_id "apK9VtdHPfW2QFvhmL7T5gAAABI"]
[Sat Aug 29 05:07:02.089029 2026] [security2:error] [pid 1028675:tid 1028891] [client 195.178.110.105:58334] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.body.requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1600"] [id "900941"] [msg "Invalid nested WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.body.requests.requests.path=///"] [hostname "landonrian.com"] [uri "/wp/"] [unique_id "apK9VtdHPfW2QFvhmL7T5AAAAFE"]
[Sat Aug 29 05:07:02.109675 2026] [core:error] [pid 1018003:tid 1018050] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.109692 2026] [core:error] [pid 1018003:tid 1018050] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.134054 2026] [security2:error] [pid 1028675:tid 1028816] [client 158.23.147.79:32681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/admin.php"] [unique_id "apK9VtdHPfW2QFvhmL7T6QAAAAY"]
[Sat Aug 29 05:07:02.135015 2026] [core:error] [pid 1028675:tid 1028826] [client 158.158.54.35:8730] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.135034 2026] [core:error] [pid 1028675:tid 1028826] [client 158.158.54.35:8730] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.142679 2026] [security2:error] [pid 1028675:tid 1028899] [client 40.83.93.50:13577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-admin/plugins/img/themes/plugins/maintenance.php"] [unique_id "apK9VtdHPfW2QFvhmL7T6gAAAFk"]
[Sat Aug 29 05:07:02.145636 2026] [security2:error] [pid 1028675:tid 1028902] [client 168.107.94.195:56198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9VtdHPfW2QFvhmL7T6wAAAFw"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:02.149810 2026] [core:error] [pid 1018003:tid 1018049] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.149825 2026] [core:error] [pid 1018003:tid 1018049] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.150384 2026] [core:error] [pid 1018003:tid 1018024] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.150399 2026] [core:error] [pid 1018003:tid 1018024] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.172604 2026] [core:error] [pid 1018003:tid 1018040] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.172622 2026] [core:error] [pid 1018003:tid 1018040] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.173884 2026] [core:error] [pid 1018003:tid 1018062] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.173896 2026] [core:error] [pid 1018003:tid 1018062] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.174341 2026] [core:error] [pid 1018003:tid 1018060] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.174350 2026] [core:error] [pid 1018003:tid 1018060] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.200847 2026] [security2:error] [pid 1028675:tid 1028885] [client 20.48.160.90:51652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/wp-conffg.php"] [unique_id "apK9VtdHPfW2QFvhmL7T7gAAAEs"]
[Sat Aug 29 05:07:02.208941 2026] [security2:error] [pid 1018003:tid 1018183] [client 20.48.250.41:21433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fpm.net.cn"] [uri "/R57.php"] [unique_id "apK9VjAh5Y1i2tUxg4EMRgAABdg"]
[Sat Aug 29 05:07:02.210687 2026] [core:error] [pid 1018003:tid 1018033] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.210702 2026] [core:error] [pid 1018003:tid 1018033] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.211925 2026] [core:error] [pid 1018003:tid 1018085] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.211942 2026] [core:error] [pid 1018003:tid 1018085] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.215678 2026] [security2:error] [pid 1018003:tid 1018136] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/srv/.env"] [unique_id "apK9VjAh5Y1i2tUxg4EMSAAGKXM"]
[Sat Aug 29 05:07:02.216968 2026] [core:error] [pid 1018003:tid 1018067] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.216980 2026] [core:error] [pid 1018003:tid 1018067] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.229853 2026] [security2:error] [pid 1018003:tid 1018240] [client 20.196.209.81:1985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/hehe.php"] [unique_id "apK9VjAh5Y1i2tUxg4EMSwAABhA"]
[Sat Aug 29 05:07:02.230561 2026] [security2:error] [pid 1018003:tid 1018056] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/stage/.env"] [unique_id "apK9VjAh5Y1i2tUxg4EMSQAGKSM"]
[Sat Aug 29 05:07:02.233117 2026] [security2:error] [pid 1018003:tid 1018104] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/staging/.env"] [unique_id "apK9VjAh5Y1i2tUxg4EMTAAGKVM"]
[Sat Aug 29 05:07:02.234969 2026] [core:error] [pid 1018003:tid 1018055] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.234983 2026] [core:error] [pid 1018003:tid 1018055] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.256689 2026] [core:error] [pid 1018003:tid 1018053] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.256708 2026] [core:error] [pid 1018003:tid 1018053] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.257176 2026] [core:error] [pid 1028675:tid 1028832] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.257187 2026] [core:error] [pid 1028675:tid 1028832] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.272733 2026] [security2:error] [pid 1028675:tid 1028882] [client 40.83.93.50:7684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/fox.php"] [unique_id "apK9VtdHPfW2QFvhmL7T9QAAAEg"]
[Sat Aug 29 05:07:02.288404 2026] [security2:error] [pid 1028675:tid 1028933] [client 68.155.159.216:49230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK9VtdHPfW2QFvhmL7T9wAAAHs"]
[Sat Aug 29 05:07:02.306951 2026] [security2:error] [pid 1028675:tid 1028877] [client 4.205.62.107:22467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/sgd.php"] [unique_id "apK9VtdHPfW2QFvhmL7T-QAAAEM"]
[Sat Aug 29 05:07:02.319576 2026] [security2:error] [pid 1028675:tid 1028867] [client 4.205.62.107:65442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/maxro.php"] [unique_id "apK9VtdHPfW2QFvhmL7T-gAAADk"]
[Sat Aug 29 05:07:02.323212 2026] [security2:error] [pid 1018003:tid 1018089] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/stg/.env"] [unique_id "apK9VjAh5Y1i2tUxg4EMUAAGCkQ"]
[Sat Aug 29 05:07:02.325136 2026] [core:error] [pid 1018003:tid 1018087] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.325153 2026] [core:error] [pid 1018003:tid 1018087] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.325154 2026] [core:error] [pid 1018003:tid 1018092] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.325164 2026] [core:error] [pid 1018003:tid 1018092] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.330712 2026] [security2:error] [pid 1028675:tid 1028845] [client 4.205.62.107:58404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/gnmlc.php"] [unique_id "apK9VtdHPfW2QFvhmL7T-wAAACM"]
[Sat Aug 29 05:07:02.344769 2026] [security2:error] [pid 1028675:tid 1028854] [client 20.151.200.44:45915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/attack.php"] [unique_id "apK9VtdHPfW2QFvhmL7T_AAAACw"]
[Sat Aug 29 05:07:02.355611 2026] [security2:error] [pid 1028675:tid 1028887] [client 158.23.147.79:48133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-mail.php"] [unique_id "apK9VtdHPfW2QFvhmL7T_QAAAE0"]
[Sat Aug 29 05:07:02.362410 2026] [core:error] [pid 1018003:tid 1018038] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.362434 2026] [core:error] [pid 1018003:tid 1018038] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.373285 2026] [security2:error] [pid 1028675:tid 1028810] [client 20.48.160.90:51700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/wp-validate.php"] [unique_id "apK9VtdHPfW2QFvhmL7T_wAAAAA"]
[Sat Aug 29 05:07:02.383077 2026] [core:error] [pid 1018003:tid 1018063] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.383091 2026] [core:error] [pid 1018003:tid 1018063] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.383156 2026] [core:error] [pid 1018003:tid 1018070] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.383167 2026] [core:error] [pid 1018003:tid 1018070] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.383643 2026] [security2:error] [pid 1018003:tid 1018025] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/stripe/.env"] [unique_id "apK9VjAh5Y1i2tUxg4EMWAAGDwQ"]
[Sat Aug 29 05:07:02.384576 2026] [core:error] [pid 1018003:tid 1018122] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.384594 2026] [core:error] [pid 1018003:tid 1018122] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.385058 2026] [core:error] [pid 1018003:tid 1018114] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.385067 2026] [core:error] [pid 1018003:tid 1018114] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.410385 2026] [core:error] [pid 1028675:tid 1028880] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.410403 2026] [core:error] [pid 1028675:tid 1028880] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.410402 2026] [core:error] [pid 1028675:tid 1028823] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.410411 2026] [core:error] [pid 1028675:tid 1028823] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.411949 2026] [core:error] [pid 1028675:tid 1028876] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.411965 2026] [core:error] [pid 1028675:tid 1028876] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.413673 2026] [core:error] [pid 1018003:tid 1018190] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.413686 2026] [core:error] [pid 1018003:tid 1018190] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.431776 2026] [security2:error] [pid 1018003:tid 1018156] [client 20.104.49.130:51348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/az.php"] [unique_id "apK9VjAh5Y1i2tUxg4EMXQAABb0"]
[Sat Aug 29 05:07:02.445648 2026] [security2:error] [pid 1028675:tid 1028848] [client 20.52.41.200:1167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/av.php"] [unique_id "apK9VtdHPfW2QFvhmL7UDAAAACY"]
[Sat Aug 29 05:07:02.451069 2026] [security2:error] [pid 1018003:tid 1018273] [client 20.197.61.180:18322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/content.php"] [unique_id "apK9VjAh5Y1i2tUxg4EMXgAABjE"]
[Sat Aug 29 05:07:02.457934 2026] [security2:error] [pid 1028675:tid 1028839] [client 68.155.159.216:16199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/about/function.php"] [unique_id "apK9VtdHPfW2QFvhmL7UDgAAAB0"]
[Sat Aug 29 05:07:02.473823 2026] [security2:error] [pid 1028675:tid 1028913] [client 158.158.54.35:22095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/images/index.php"] [unique_id "apK9VtdHPfW2QFvhmL7UEgAAAGc"]
[Sat Aug 29 05:07:02.483939 2026] [security2:error] [pid 1028675:tid 1028909] [client 20.196.209.81:17199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-admin/wp-settings.php"] [unique_id "apK9VtdHPfW2QFvhmL7UFAAAAGM"]
[Sat Aug 29 05:07:02.489441 2026] [core:error] [pid 1028675:tid 1028841] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.489460 2026] [core:error] [pid 1028675:tid 1028841] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.490209 2026] [core:error] [pid 1028675:tid 1028911] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.490219 2026] [core:error] [pid 1028675:tid 1028911] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.493529 2026] [security2:error] [pid 1028675:tid 1028935] [client 4.205.62.107:53387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/ms-edit.php"] [unique_id "apK9VtdHPfW2QFvhmL7UGAAAAH0"]
[Sat Aug 29 05:07:02.495484 2026] [core:error] [pid 1028675:tid 1028900] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.495505 2026] [core:error] [pid 1028675:tid 1028900] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.503131 2026] [security2:error] [pid 1018003:tid 1018198] [client 20.196.209.81:9762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/NewFile.php"] [unique_id "apK9VjAh5Y1i2tUxg4EMYwAABec"]
[Sat Aug 29 05:07:02.526230 2026] [security2:error] [pid 1028675:tid 1028936] [client 168.107.94.195:56632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9VtdHPfW2QFvhmL7UGQAAAH4"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:02.555006 2026] [security2:error] [pid 1028675:tid 1028918] [client 20.48.160.90:51710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/700.php"] [unique_id "apK9VtdHPfW2QFvhmL7UGgAAAGw"]
[Sat Aug 29 05:07:02.563805 2026] [security2:error] [pid 1028675:tid 1028838] [client 68.155.159.216:65055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK9VtdHPfW2QFvhmL7UGwAAABw"]
[Sat Aug 29 05:07:02.576747 2026] [security2:error] [pid 1028675:tid 1028831] [client 20.203.141.11:1364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/ioxi-o.php"] [unique_id "apK9VtdHPfW2QFvhmL7UHAAAABU"]
[Sat Aug 29 05:07:02.587721 2026] [security2:error] [pid 1028675:tid 1028926] [client 158.158.54.35:2879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/a.php"] [unique_id "apK9VtdHPfW2QFvhmL7UHQAAAHQ"]
[Sat Aug 29 05:07:02.606732 2026] [security2:error] [pid 1018003:tid 1018028] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/terraform.tfstate.backup"] [unique_id "apK9VjAh5Y1i2tUxg4EMZAAFygc"]
[Sat Aug 29 05:07:02.607628 2026] [core:error] [pid 1018003:tid 1018076] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.607645 2026] [core:error] [pid 1018003:tid 1018076] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.609686 2026] [security2:error] [pid 1028675:tid 1028844] [client 40.83.93.50:22824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-admin/security.php"] [unique_id "apK9VtdHPfW2QFvhmL7UHgAAACI"]
[Sat Aug 29 05:07:02.626200 2026] [core:error] [pid 1028675:tid 1028870] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.626214 2026] [core:error] [pid 1028675:tid 1028870] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.636020 2026] [core:error] [pid 1018003:tid 1018185] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.636031 2026] [core:error] [pid 1018003:tid 1018185] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.662231 2026] [security2:error] [pid 1028675:tid 1028929] [client 20.196.209.81:15198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/wp-admin/class-db.php"] [unique_id "apK9VtdHPfW2QFvhmL7UJwAAAHc"]
[Sat Aug 29 05:07:02.663451 2026] [security2:error] [pid 1028675:tid 1028861] [client 158.23.147.79:17450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/makeasmtp.php"] [unique_id "apK9VtdHPfW2QFvhmL7UKAAAADM"]
[Sat Aug 29 05:07:02.674798 2026] [security2:error] [pid 1028675:tid 1028877] [client 195.178.110.105:58334] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.body.requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1600"] [id "900941"] [msg "Invalid nested WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.body.requests.requests.path=///"] [hostname "landonrian.com"] [uri "/wordpress/"] [unique_id "apK9VtdHPfW2QFvhmL7UKQAAAEM"]
[Sat Aug 29 05:07:02.685408 2026] [security2:error] [pid 1018003:tid 1018230] [client 68.155.159.216:6141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/file17.php"] [unique_id "apK9VjAh5Y1i2tUxg4EMawAABgY"]
[Sat Aug 29 05:07:02.705980 2026] [security2:error] [pid 1018003:tid 1018148] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/test.php"] [unique_id "apK9VjAh5Y1i2tUxg4EMbAAGLn8"]
[Sat Aug 29 05:07:02.706984 2026] [security2:error] [pid 1018003:tid 1018084] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/test/.env"] [unique_id "apK9VjAh5Y1i2tUxg4EMbQAGLj8"]
[Sat Aug 29 05:07:02.709063 2026] [security2:error] [pid 1028675:tid 1028818] [client 20.48.160.90:51318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/c4.php"] [unique_id "apK9VtdHPfW2QFvhmL7UKwAAAAg"]
[Sat Aug 29 05:07:02.734723 2026] [cgid:error] [pid 1028675:tid 1028918] [client 34.7.40.70:9626] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:07:02.734975 2026] [security2:error] [pid 1018003:tid 1018166] [client 34.7.40.70:9716] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/sendgrid/.env"] [unique_id "apK9VjAh5Y1i2tUxg4EMcQAABcc"]
[Sat Aug 29 05:07:02.735056 2026] [security2:error] [pid 1018003:tid 1018166] [client 34.7.40.70:9716] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/sendgrid/.env"] [unique_id "apK9VjAh5Y1i2tUxg4EMcQAABcc"]
[Sat Aug 29 05:07:02.735351 2026] [cgid:error] [pid 1028675:tid 1028908] [client 34.7.40.70:9636] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:07:02.735471 2026] [security2:error] [pid 1028675:tid 1028893] [client 34.7.40.70:9702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/var/www/html/.env"] [unique_id "apK9VtdHPfW2QFvhmL7UMAAAAFM"]
[Sat Aug 29 05:07:02.735668 2026] [security2:error] [pid 1018003:tid 1018108] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/user/.env"] [unique_id "apK9VjAh5Y1i2tUxg4EMcgAF6Vc"]
[Sat Aug 29 05:07:02.737510 2026] [cgid:error] [pid 1028675:tid 1028826] [client 34.7.40.70:9762] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:07:02.737870 2026] [security2:error] [pid 1018003:tid 1018101] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/v1/.env"] [unique_id "apK9VjAh5Y1i2tUxg4EMdQAF6VA"]
[Sat Aug 29 05:07:02.738132 2026] [cgid:error] [pid 1028675:tid 1028816] [client 34.7.40.70:9708] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:07:02.738373 2026] [cgid:error] [pid 1028675:tid 1028815] [client 34.7.40.70:9664] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:07:02.738492 2026] [cgid:error] [pid 1028675:tid 1028821] [client 34.7.40.70:9680] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:07:02.739013 2026] [security2:error] [pid 1028675:tid 1028821] [client 34.7.40.70:9680] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/404.shtml"] [unique_id "apK9VtdHPfW2QFvhmL7UNwAAAAs"]
[Sat Aug 29 05:07:02.745555 2026] [core:error] [pid 1028675:tid 1028865] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.745567 2026] [core:error] [pid 1028675:tid 1028865] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.748969 2026] [core:error] [pid 1028675:tid 1028905] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.748981 2026] [core:error] [pid 1028675:tid 1028905] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.749416 2026] [security2:error] [pid 1028675:tid 1028899] [client 34.7.40.70:9770] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/stripe/.env"] [unique_id "apK9VtdHPfW2QFvhmL7UPgAAAFk"]
[Sat Aug 29 05:07:02.750459 2026] [cgid:error] [pid 1028675:tid 1028872] [client 34.7.40.70:9732] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:07:02.750610 2026] [cgid:error] [pid 1028675:tid 1028891] [client 34.7.40.70:9660] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:07:02.750839 2026] [security2:error] [pid 1018003:tid 1018207] [client 34.7.40.70:9692] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/var/www/.env"] [unique_id "apK9VjAh5Y1i2tUxg4EMeAAABfA"]
[Sat Aug 29 05:07:02.751042 2026] [security2:error] [pid 1028675:tid 1028927] [client 34.7.40.70:9736] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/mail/.env"] [unique_id "apK9VtdHPfW2QFvhmL7UQAAAAHU"]
[Sat Aug 29 05:07:02.751466 2026] [cgid:error] [pid 1028675:tid 1028902] [client 34.7.40.70:9754] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:07:02.758734 2026] [cgid:error] [pid 1028675:tid 1028828] [client 34.7.40.70:9652] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:07:02.760683 2026] [core:error] [pid 1018003:tid 1018170] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.760694 2026] [core:error] [pid 1018003:tid 1018170] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.760694 2026] [core:error] [pid 1018003:tid 1018226] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.760702 2026] [core:error] [pid 1018003:tid 1018226] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.765587 2026] [core:error] [pid 1018003:tid 1018224] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.765604 2026] [core:error] [pid 1018003:tid 1018224] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.766740 2026] [security2:error] [pid 1028675:tid 1028921] [client 34.7.40.70:9746] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/email/.env"] [unique_id "apK9VtdHPfW2QFvhmL7UQgAAAG8"]
[Sat Aug 29 05:07:02.770273 2026] [security2:error] [pid 1018003:tid 1018126] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/v3/.env"] [unique_id "apK9VjAh5Y1i2tUxg4EMfAAF6Wk"]
[Sat Aug 29 05:07:02.771223 2026] [security2:error] [pid 1018003:tid 1018022] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/v2/.env"] [unique_id "apK9VjAh5Y1i2tUxg4EMfQAF6QE"]
[Sat Aug 29 05:07:02.771876 2026] [security2:error] [pid 1018003:tid 1018216] [client 4.205.62.107:55958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/nlnub.php"] [unique_id "apK9VjAh5Y1i2tUxg4EMfwAABfk"]
[Sat Aug 29 05:07:02.792029 2026] [security2:error] [pid 1028675:tid 1028835] [client 40.83.93.50:7701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/disagraeosc.php"] [unique_id "apK9VtdHPfW2QFvhmL7URgAAABk"]
[Sat Aug 29 05:07:02.803929 2026] [security2:error] [pid 1028675:tid 1028907] [client 68.155.159.216:2004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-admin/about.php"] [unique_id "apK9VtdHPfW2QFvhmL7USQAAAGE"]
[Sat Aug 29 05:07:02.808270 2026] [security2:error] [pid 1028675:tid 1028910] [client 20.151.200.44:47297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/file66.php"] [unique_id "apK9VtdHPfW2QFvhmL7USgAAAGQ"]
[Sat Aug 29 05:07:02.814757 2026] [core:error] [pid 1028675:tid 1028836] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.814769 2026] [core:error] [pid 1028675:tid 1028836] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.825241 2026] [security2:error] [pid 1028675:tid 1028898] [client 158.23.147.79:30527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-content/index.php"] [unique_id "apK9VtdHPfW2QFvhmL7UTQAAAFg"]
[Sat Aug 29 05:07:02.834753 2026] [security2:error] [pid 1028675:tid 1028924] [client 68.155.159.216:51873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK9VtdHPfW2QFvhmL7UTgAAAHI"]
[Sat Aug 29 05:07:02.858348 2026] [security2:error] [pid 1028675:tid 1028913] [client 20.48.160.90:51282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/wp-tymanage.php"] [unique_id "apK9VtdHPfW2QFvhmL7UUAAAAGc"]
[Sat Aug 29 05:07:02.874042 2026] [core:error] [pid 1018003:tid 1018139] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.874059 2026] [core:error] [pid 1018003:tid 1018139] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.881584 2026] [core:error] [pid 1018003:tid 1018138] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.881614 2026] [core:error] [pid 1018003:tid 1018138] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.899252 2026] [core:error] [pid 1028675:tid 1028911] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.899273 2026] [core:error] [pid 1028675:tid 1028911] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.899481 2026] [security2:error] [pid 1028675:tid 1028814] [client 20.52.41.200:1202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/file.php"] [unique_id "apK9VtdHPfW2QFvhmL7UVQAAAAQ"]
[Sat Aug 29 05:07:02.900851 2026] [core:error] [pid 1028675:tid 1028922] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.900849 2026] [core:error] [pid 1018003:tid 1018195] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.900865 2026] [core:error] [pid 1028675:tid 1028922] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.900867 2026] [core:error] [pid 1018003:tid 1018195] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.902791 2026] [security2:error] [pid 1028675:tid 1028876] [client 20.196.209.81:5833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-admin/wp-signup.php"] [unique_id "apK9VtdHPfW2QFvhmL7UVgAAAEI"]
[Sat Aug 29 05:07:02.905920 2026] [security2:error] [pid 1018003:tid 1018277] [client 168.107.94.195:57057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9VjAh5Y1i2tUxg4EMjQAABjU"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:02.917662 2026] [core:error] [pid 1018003:tid 1018250] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.917682 2026] [core:error] [pid 1018003:tid 1018250] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.939291 2026] [security2:error] [pid 1028675:tid 1028888] [client 20.196.209.81:13265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/config.php"] [unique_id "apK9VtdHPfW2QFvhmL7UXQAAAE4"]
[Sat Aug 29 05:07:02.941922 2026] [core:error] [pid 1018003:tid 1018098] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.941957 2026] [core:error] [pid 1018003:tid 1018098] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.951795 2026] [core:error] [pid 1018003:tid 1018146] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.951811 2026] [core:error] [pid 1018003:tid 1018146] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.952477 2026] [core:error] [pid 1018003:tid 1018125] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.952496 2026] [core:error] [pid 1018003:tid 1018125] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.960572 2026] [core:error] [pid 1028675:tid 1028885] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.960588 2026] [core:error] [pid 1028675:tid 1028885] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.970900 2026] [security2:error] [pid 1028675:tid 1028824] [client 158.23.147.79:26499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/hehehehe.php"] [unique_id "apK9VtdHPfW2QFvhmL7UawAAAA4"]
[Sat Aug 29 05:07:02.978516 2026] [core:error] [pid 1028675:tid 1028904] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.978532 2026] [core:error] [pid 1028675:tid 1028904] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.978659 2026] [core:error] [pid 1028675:tid 1028849] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.978671 2026] [core:error] [pid 1028675:tid 1028849] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.983880 2026] [core:error] [pid 1028675:tid 1028832] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:02.983898 2026] [core:error] [pid 1028675:tid 1028832] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.000212 2026] [security2:error] [pid 1028675:tid 1028878] [client 20.48.160.90:51648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/ajfto.php"] [unique_id "apK9VtdHPfW2QFvhmL7UbwAAAEQ"]
[Sat Aug 29 05:07:03.002339 2026] [security2:error] [pid 1018003:tid 1018156] [client 52.139.37.240:21158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK9VzAh5Y1i2tUxg4EMlwAABb0"]
[Sat Aug 29 05:07:03.009216 2026] [security2:error] [pid 1028675:tid 1028822] [client 213.202.253.4:60982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bv-place.com"] [uri "/filefuns.php"] [unique_id "apK9V9dHPfW2QFvhmL7UcAAAAAw"], referer: www.google.com
[Sat Aug 29 05:07:03.030539 2026] [security2:error] [pid 1018003:tid 1018268] [client 158.158.54.35:20326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/u.php"] [unique_id "apK9VzAh5Y1i2tUxg4EMmAAABiw"]
[Sat Aug 29 05:07:03.043083 2026] [security2:error] [pid 1028675:tid 1028920] [client 158.23.147.79:53766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/hehehehe.php"] [unique_id "apK9V9dHPfW2QFvhmL7UcgAAAG4"]
[Sat Aug 29 05:07:03.043422 2026] [security2:error] [pid 1028675:tid 1028812] [client 52.139.37.240:31100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/ac.php"] [unique_id "apK9V9dHPfW2QFvhmL7UcQAAAAI"]
[Sat Aug 29 05:07:03.056119 2026] [security2:error] [pid 1028675:tid 1028918] [client 158.23.147.79:50061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-content/themes/too.php"] [unique_id "apK9V9dHPfW2QFvhmL7UcwAAAGw"]
[Sat Aug 29 05:07:03.063603 2026] [security2:error] [pid 1028675:tid 1028810] [client 158.23.147.79:35726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK9V9dHPfW2QFvhmL7UdAAAAAA"]
[Sat Aug 29 05:07:03.064942 2026] [security2:error] [pid 1018003:tid 1018246] [client 20.196.209.81:15205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/wp-contentt.php"] [unique_id "apK9VzAh5Y1i2tUxg4EMmgAABhY"]
[Sat Aug 29 05:07:03.068278 2026] [security2:error] [pid 1028675:tid 1028925] [client 52.139.37.240:33552] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "superresources.com"] [uri "/c99.php"] [unique_id "apK9V9dHPfW2QFvhmL7UdgAAAHM"]
[Sat Aug 29 05:07:03.069397 2026] [security2:error] [pid 1028675:tid 1028865] [client 158.158.54.35:9765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/inputs.php"] [unique_id "apK9V9dHPfW2QFvhmL7UeAAAADc"]
[Sat Aug 29 05:07:03.072258 2026] [security2:error] [pid 1018003:tid 1018261] [client 52.139.37.240:2570] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "fairfaxbible.org"] [uri "/c99.php"] [unique_id "apK9VzAh5Y1i2tUxg4EMnAAABiU"]
[Sat Aug 29 05:07:03.091902 2026] [core:error] [pid 1018003:tid 1018244] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.091916 2026] [core:error] [pid 1018003:tid 1018244] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.091963 2026] [security2:error] [pid 1028675:tid 1028887] [client 158.23.147.79:25492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-mail.php"] [unique_id "apK9V9dHPfW2QFvhmL7UeQAAAE0"]
[Sat Aug 29 05:07:03.091966 2026] [core:error] [pid 1018003:tid 1018077] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.091975 2026] [core:error] [pid 1018003:tid 1018077] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.100216 2026] [security2:error] [pid 1028675:tid 1028912] [client 40.83.93.50:20833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK9V9dHPfW2QFvhmL7UewAAAGY"]
[Sat Aug 29 05:07:03.108092 2026] [security2:error] [pid 1018003:tid 1018120] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/var/www/.env"] [unique_id "apK9VzAh5Y1i2tUxg4EMowAGM2M"]
[Sat Aug 29 05:07:03.119739 2026] [security2:error] [pid 1018003:tid 1018140] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/var/www/html/.env"] [unique_id "apK9VzAh5Y1i2tUxg4EMpAAF_Hc"]
[Sat Aug 29 05:07:03.121189 2026] [core:error] [pid 1018003:tid 1018065] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.121206 2026] [core:error] [pid 1018003:tid 1018065] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.121470 2026] [security2:error] [pid 1018003:tid 1018128] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/web/.env"] [unique_id "apK9VzAh5Y1i2tUxg4EMpwAF_Gs"]
[Sat Aug 29 05:07:03.122843 2026] [core:error] [pid 1018003:tid 1018113] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.122854 2026] [core:error] [pid 1018003:tid 1018113] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.122899 2026] [core:error] [pid 1018003:tid 1018093] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.122906 2026] [core:error] [pid 1018003:tid 1018093] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.124178 2026] [core:error] [pid 1018003:tid 1018117] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.124190 2026] [core:error] [pid 1018003:tid 1018117] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.124259 2026] [core:error] [pid 1018003:tid 1018107] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.124267 2026] [core:error] [pid 1018003:tid 1018107] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.125200 2026] [core:error] [pid 1018003:tid 1018061] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.125213 2026] [core:error] [pid 1018003:tid 1018061] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.130259 2026] [security2:error] [pid 1028675:tid 1028891] [client 4.205.62.107:22445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/infos.php"] [unique_id "apK9V9dHPfW2QFvhmL7UfgAAAFE"]
[Sat Aug 29 05:07:03.141864 2026] [security2:error] [pid 1028675:tid 1028921] [client 20.104.49.130:29961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/f35.update.php"] [unique_id "apK9V9dHPfW2QFvhmL7UfwAAAG8"]
[Sat Aug 29 05:07:03.143675 2026] [security2:error] [pid 1028675:tid 1028917] [client 68.155.159.216:51448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK9V9dHPfW2QFvhmL7UgQAAAGs"]
[Sat Aug 29 05:07:03.144929 2026] [core:error] [pid 1028675:tid 1028896] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.144940 2026] [core:error] [pid 1028675:tid 1028896] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.148112 2026] [security2:error] [pid 1028675:tid 1028871] [client 68.155.159.216:38555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/NewFile.php/"] [unique_id "apK9V9dHPfW2QFvhmL7UggAAAD0"]
[Sat Aug 29 05:07:03.156193 2026] [security2:error] [pid 1028675:tid 1028890] [client 20.197.61.180:9709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/wxo.php"] [unique_id "apK9V9dHPfW2QFvhmL7UhQAAAFA"]
[Sat Aug 29 05:07:03.160168 2026] [security2:error] [pid 1028675:tid 1028860] [client 20.151.200.44:46583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/zafir1.php"] [unique_id "apK9V9dHPfW2QFvhmL7UhgAAADI"]
[Sat Aug 29 05:07:03.168464 2026] [security2:error] [pid 1028675:tid 1028933] [client 103.240.76.112:42707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK9V9dHPfW2QFvhmL7UhwAAAHs"]
[Sat Aug 29 05:07:03.168553 2026] [security2:error] [pid 1028675:tid 1028933] [client 103.240.76.112:42707] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK9V9dHPfW2QFvhmL7UhwAAAHs"]
[Sat Aug 29 05:07:03.172607 2026] [security2:error] [pid 1028675:tid 1028855] [client 158.23.147.79:30476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/about/function.php"] [unique_id "apK9V9dHPfW2QFvhmL7UiAAAAC0"]
[Sat Aug 29 05:07:03.174991 2026] [security2:error] [pid 1028675:tid 1028906] [client 20.203.141.11:9992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/xmlrpc.php"] [unique_id "apK9V9dHPfW2QFvhmL7UfQAAAGA"]
[Sat Aug 29 05:07:03.194737 2026] [security2:error] [pid 1028675:tid 1028852] [client 52.139.37.240:20772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/zafir1.php"] [unique_id "apK9V9dHPfW2QFvhmL7UiQAAACo"]
[Sat Aug 29 05:07:03.214841 2026] [security2:error] [pid 1028675:tid 1028894] [client 158.23.147.79:62685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/ans.php"] [unique_id "apK9V9dHPfW2QFvhmL7UkAAAAFQ"]
[Sat Aug 29 05:07:03.239485 2026] [security2:error] [pid 1028675:tid 1028862] [client 52.139.37.240:31675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/ctex1.php"] [unique_id "apK9V9dHPfW2QFvhmL7UkgAAADQ"]
[Sat Aug 29 05:07:03.242348 2026] [security2:error] [pid 1028675:tid 1028923] [client 158.23.147.79:32678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-admin/admin.php"] [unique_id "apK9V9dHPfW2QFvhmL7UkwAAAHE"]
[Sat Aug 29 05:07:03.259747 2026] [security2:error] [pid 1028675:tid 1028858] [client 52.139.37.240:2248] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "fairfaxbible.org"] [uri "/c99.php"] [unique_id "apK9V9dHPfW2QFvhmL7UlgAAADA"]
[Sat Aug 29 05:07:03.282586 2026] [security2:error] [pid 1028675:tid 1028913] [client 52.139.37.240:32832] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "superresources.com"] [uri "/c99.php"] [unique_id "apK9V9dHPfW2QFvhmL7UnQAAAGc"]
[Sat Aug 29 05:07:03.284500 2026] [security2:error] [pid 1028675:tid 1028900] [client 195.178.110.105:58334] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.body.requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1600"] [id "900941"] [msg "Invalid nested WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.body.requests.requests.path=///"] [hostname "landonrian.com"] [uri "/blog/"] [unique_id "apK9V9dHPfW2QFvhmL7UnAAAAFo"]
[Sat Aug 29 05:07:03.285255 2026] [security2:error] [pid 1028675:tid 1028901] [client 168.107.94.195:57488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9V9dHPfW2QFvhmL7UngAAAFs"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:03.294468 2026] [security2:error] [pid 1028675:tid 1028927] [client 40.83.93.50:17286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/about.php525"] [unique_id "apK9V9dHPfW2QFvhmL7UnwAAAHU"]
[Sat Aug 29 05:07:03.296214 2026] [security2:error] [pid 1028675:tid 1028833] [client 20.196.209.81:22401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-blog-header.php"] [unique_id "apK9V9dHPfW2QFvhmL7UoAAAABc"]
[Sat Aug 29 05:07:03.298628 2026] [security2:error] [pid 1028675:tid 1028825] [client 20.48.160.90:51686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/wp_KwIW0U5F.php"] [unique_id "apK9V9dHPfW2QFvhmL7UoQAAAA8"]
[Sat Aug 29 05:07:03.313803 2026] [security2:error] [pid 1028675:tid 1028847] [client 20.104.49.130:57476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/ab.php"] [unique_id "apK9V9dHPfW2QFvhmL7UogAAACU"]
[Sat Aug 29 05:07:03.330209 2026] [core:error] [pid 1018003:tid 1018045] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.330223 2026] [core:error] [pid 1018003:tid 1018045] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.353648 2026] [security2:error] [pid 1028675:tid 1028836] [client 20.52.41.200:1408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-includes/customize/index.php"] [unique_id "apK9V9dHPfW2QFvhmL7UpAAAABo"]
[Sat Aug 29 05:07:03.357509 2026] [security2:error] [pid 1018003:tid 1018258] [client 20.196.209.81:9624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/22.php"] [unique_id "apK9VzAh5Y1i2tUxg4EMtAAABiI"]
[Sat Aug 29 05:07:03.361640 2026] [security2:error] [pid 1028675:tid 1028830] [client 20.104.49.130:43635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/talkxkej.php"] [unique_id "apK9V9dHPfW2QFvhmL7UpQAAABQ"]
[Sat Aug 29 05:07:03.366491 2026] [security2:error] [pid 1028675:tid 1028875] [client 158.23.147.79:62685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/worksec.php"] [unique_id "apK9V9dHPfW2QFvhmL7UpgAAAEE"]
[Sat Aug 29 05:07:03.394899 2026] [security2:error] [pid 1028675:tid 1028885] [client 52.139.37.240:21123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/abc.php"] [unique_id "apK9V9dHPfW2QFvhmL7UpwAAAEs"]
[Sat Aug 29 05:07:03.403154 2026] [core:error] [pid 1028675:tid 1028859] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.403166 2026] [core:error] [pid 1028675:tid 1028859] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.430816 2026] [security2:error] [pid 1018003:tid 1018262] [client 20.48.250.41:60780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9VzAh5Y1i2tUxg4EMuAAABiY"]
[Sat Aug 29 05:07:03.444982 2026] [security2:error] [pid 1018003:tid 1018167] [client 4.205.62.107:22041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/gecko-litespeed.php"] [unique_id "apK9VzAh5Y1i2tUxg4EMugAABcg"]
[Sat Aug 29 05:07:03.452450 2026] [core:error] [pid 1018003:tid 1018196] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.452464 2026] [core:error] [pid 1018003:tid 1018196] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.454559 2026] [security2:error] [pid 1018003:tid 1018187] [client 52.139.37.240:2899] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "fairfaxbible.org"] [uri "/c99.php"] [unique_id "apK9VzAh5Y1i2tUxg4EMvAAABdw"]
[Sat Aug 29 05:07:03.456847 2026] [security2:error] [pid 1028675:tid 1028818] [client 4.205.62.107:65481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/brc.php"] [unique_id "apK9V9dHPfW2QFvhmL7UswAAAAg"]
[Sat Aug 29 05:07:03.458981 2026] [security2:error] [pid 1028675:tid 1028854] [client 20.48.160.90:51671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/wp_xiPu52Ut.php"] [unique_id "apK9V9dHPfW2QFvhmL7UtQAAACw"]
[Sat Aug 29 05:07:03.460256 2026] [core:error] [pid 1028675:tid 1028914] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.460273 2026] [core:error] [pid 1028675:tid 1028914] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.462078 2026] [security2:error] [pid 1028675:tid 1028831] [client 158.158.54.35:20586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/r.php"] [unique_id "apK9V9dHPfW2QFvhmL7UtgAAABU"]
[Sat Aug 29 05:07:03.470164 2026] [security2:error] [pid 1028675:tid 1028812] [client 4.205.62.107:58406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/wp-access.php"] [unique_id "apK9V9dHPfW2QFvhmL7UtwAAAAI"]
[Sat Aug 29 05:07:03.476925 2026] [security2:error] [pid 1028675:tid 1028937] [client 52.139.37.240:31105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/defaults.php"] [unique_id "apK9V9dHPfW2QFvhmL7UuAAAAH8"]
[Sat Aug 29 05:07:03.484993 2026] [security2:error] [pid 1018003:tid 1018026] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/wp-config.php"] [unique_id "apK9VzAh5Y1i2tUxg4EMwQAFywU"]
[Sat Aug 29 05:07:03.485957 2026] [security2:error] [pid 1018003:tid 1018031] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/website/.env"] [unique_id "apK9VzAh5Y1i2tUxg4EMvwAFywo"]
[Sat Aug 29 05:07:03.487871 2026] [core:error] [pid 1018003:tid 1018111] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.487887 2026] [core:error] [pid 1018003:tid 1018111] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.494760 2026] [security2:error] [pid 1018003:tid 1018032] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/wp-config.php.bak"] [unique_id "apK9VzAh5Y1i2tUxg4EMwgAFyws"]
[Sat Aug 29 05:07:03.510131 2026] [security2:error] [pid 1028675:tid 1028916] [client 158.158.54.35:9770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/alfa.php"] [unique_id "apK9V9dHPfW2QFvhmL7UuwAAAGo"]
[Sat Aug 29 05:07:03.520675 2026] [core:error] [pid 1018003:tid 1018240] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.520692 2026] [core:error] [pid 1018003:tid 1018240] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.527108 2026] [security2:error] [pid 1018003:tid 1018147] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/wp-config.php.new"] [unique_id "apK9VzAh5Y1i2tUxg4EMxQAFy34"]
[Sat Aug 29 05:07:03.529310 2026] [security2:error] [pid 1018003:tid 1018036] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/wp-config.php.old"] [unique_id "apK9VzAh5Y1i2tUxg4EMxgAFyw8"]
[Sat Aug 29 05:07:03.530696 2026] [security2:error] [pid 1018003:tid 1018130] [remote 93.123.109.228:58270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/wp-content/mysql.sql"] [unique_id "apK9VzAh5Y1i2tUxg4EMyAAFy20"]
[Sat Aug 29 05:07:03.531526 2026] [core:error] [pid 1018003:tid 1018144] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.531537 2026] [core:error] [pid 1018003:tid 1018144] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.537796 2026] [core:error] [pid 1018003:tid 1018068] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.537810 2026] [core:error] [pid 1018003:tid 1018068] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.542161 2026] [core:error] [pid 1028675:tid 1028810] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.542173 2026] [core:error] [pid 1028675:tid 1028810] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.545914 2026] [security2:error] [pid 1018003:tid 1018182] [client 68.155.159.216:52828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK9VzAh5Y1i2tUxg4EMygAABdc"]
[Sat Aug 29 05:07:03.547922 2026] [security2:error] [pid 1028675:tid 1028892] [client 20.196.209.81:2033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/theme.php"] [unique_id "apK9V9dHPfW2QFvhmL7UvQAAAFI"]
[Sat Aug 29 05:07:03.569732 2026] [core:error] [pid 1018003:tid 1018190] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.569744 2026] [core:error] [pid 1018003:tid 1018190] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.569876 2026] [security2:error] [pid 1028675:tid 1028860] [client 68.155.159.216:16381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-includes/customize/index.php"] [unique_id "apK9V9dHPfW2QFvhmL7UvgAAADI"]
[Sat Aug 29 05:07:03.588802 2026] [security2:error] [pid 1028675:tid 1028887] [client 52.139.37.240:21416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/c1.php"] [unique_id "apK9V9dHPfW2QFvhmL7UvwAAAE0"]
[Sat Aug 29 05:07:03.602420 2026] [security2:error] [pid 1028675:tid 1028861] [client 40.83.93.50:22840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-admin/system.php"] [unique_id "apK9V9dHPfW2QFvhmL7UwAAAADM"]
[Sat Aug 29 05:07:03.612642 2026] [security2:error] [pid 1028675:tid 1028884] [client 20.48.160.90:51625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/wp_n5VD7XDh.php"] [unique_id "apK9V9dHPfW2QFvhmL7UwgAAAEo"]
[Sat Aug 29 05:07:03.614157 2026] [security2:error] [pid 1028675:tid 1028852] [client 20.48.250.41:62579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9V9dHPfW2QFvhmL7UwwAAACo"]
[Sat Aug 29 05:07:03.638981 2026] [security2:error] [pid 1028675:tid 1028918] [client 20.203.141.11:45444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/filemanager.php"] [unique_id "apK9V9dHPfW2QFvhmL7UxAAAAGw"]
[Sat Aug 29 05:07:03.664638 2026] [security2:error] [pid 1018003:tid 1018189] [client 168.107.94.195:58072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9VzAh5Y1i2tUxg4EMzwAABd4"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:03.672519 2026] [security2:error] [pid 1028675:tid 1028923] [client 4.205.62.107:53411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/avim.php"] [unique_id "apK9V9dHPfW2QFvhmL7UxwAAAHE"]
[Sat Aug 29 05:07:03.675497 2026] [security2:error] [pid 1018003:tid 1018152] [client 68.155.159.216:65040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK9VzAh5Y1i2tUxg4EM0AAABbk"]
[Sat Aug 29 05:07:03.683762 2026] [security2:error] [pid 1018003:tid 1018162] [client 60.243.207.176:61892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK9VzAh5Y1i2tUxg4EM0gAABcM"]
[Sat Aug 29 05:07:03.683866 2026] [security2:error] [pid 1018003:tid 1018162] [client 60.243.207.176:61892] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK9VzAh5Y1i2tUxg4EM0gAABcM"]
[Sat Aug 29 05:07:03.687921 2026] [security2:error] [pid 1028675:tid 1028896] [client 20.196.209.81:22414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-blogs.php"] [unique_id "apK9V9dHPfW2QFvhmL7UyAAAAFY"]
[Sat Aug 29 05:07:03.692462 2026] [security2:error] [pid 1028675:tid 1028924] [client 52.139.37.240:31043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/domains.php"] [unique_id "apK9V9dHPfW2QFvhmL7UyQAAAHI"]
[Sat Aug 29 05:07:03.700246 2026] [core:error] [pid 1018003:tid 1018046] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.700263 2026] [core:error] [pid 1018003:tid 1018046] [remote 93.123.109.228:58270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.754289 2026] [security2:error] [pid 1028675:tid 1028858] [client 68.155.159.216:33573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK9V9dHPfW2QFvhmL7U0AAAADA"]
[Sat Aug 29 05:07:03.765444 2026] [security2:error] [pid 1028675:tid 1028846] [client 20.48.250.41:59359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/ff1.php"] [unique_id "apK9V9dHPfW2QFvhmL7U0QAAACQ"]
[Sat Aug 29 05:07:03.769620 2026] [security2:error] [pid 1028675:tid 1028888] [client 158.23.147.79:17431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK9V9dHPfW2QFvhmL7U0gAAAE4"]
[Sat Aug 29 05:07:03.782965 2026] [security2:error] [pid 1028675:tid 1028863] [client 52.139.37.240:21387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/index.php/feed/atom/"] [unique_id "apK9V9dHPfW2QFvhmL7U0wAAADU"]
[Sat Aug 29 05:07:03.797511 2026] [security2:error] [pid 1018003:tid 1018246] [client 20.48.160.90:51296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/wp-mini.php"] [unique_id "apK9VzAh5Y1i2tUxg4EM2AAABhY"]
[Sat Aug 29 05:07:03.803291 2026] [security2:error] [pid 1018003:tid 1018184] [client 40.83.93.50:17306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/spip.php"] [unique_id "apK9VzAh5Y1i2tUxg4EM2QAABdk"]
[Sat Aug 29 05:07:03.805369 2026] [security2:error] [pid 1028675:tid 1028841] [client 20.52.41.200:1260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/gmo.php"] [unique_id "apK9V9dHPfW2QFvhmL7U1AAAAB8"]
[Sat Aug 29 05:07:03.815642 2026] [core:error] [pid 1018003:tid 1018203] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.815659 2026] [core:error] [pid 1018003:tid 1018203] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:03.832099 2026] [security2:error] [pid 1018003:tid 1018252] [client 20.196.209.81:9773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/bak.phps"] [unique_id "apK9VzAh5Y1i2tUxg4EM2wAABhw"]
[Sat Aug 29 05:07:03.834879 2026] [security2:error] [pid 1018003:tid 1018217] [client 20.104.49.130:57611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/talkxkej.php"] [unique_id "apK9VzAh5Y1i2tUxg4EM3AAABfo"]
[Sat Aug 29 05:07:03.837480 2026] [security2:error] [pid 1028675:tid 1028844] [client 20.104.49.130:60757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/v2.php"] [unique_id "apK9V9dHPfW2QFvhmL7U1QAAACI"]
[Sat Aug 29 05:07:03.888386 2026] [security2:error] [pid 1028675:tid 1028839] [client 20.197.61.180:7892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/as.php"] [unique_id "apK9V9dHPfW2QFvhmL7U3AAAAB0"]
[Sat Aug 29 05:07:03.896251 2026] [security2:error] [pid 1028675:tid 1028928] [client 52.139.37.240:30808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/dropdown.php"] [unique_id "apK9V9dHPfW2QFvhmL7U3QAAAHY"]
[Sat Aug 29 05:07:03.901927 2026] [security2:error] [pid 1028675:tid 1028849] [client 68.155.159.216:64480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK9V9dHPfW2QFvhmL7U3gAAACc"]
[Sat Aug 29 05:07:03.911047 2026] [security2:error] [pid 1018003:tid 1018261] [client 4.205.62.107:55937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/mga.php"] [unique_id "apK9VzAh5Y1i2tUxg4EM3QAABiU"]
[Sat Aug 29 05:07:03.911787 2026] [security2:error] [pid 1018003:tid 1018275] [client 68.155.159.216:1928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK9VzAh5Y1i2tUxg4EM3gAABjM"]
[Sat Aug 29 05:07:03.915452 2026] [security2:error] [pid 1028675:tid 1028901] [client 158.158.54.35:16916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-blog.php"] [unique_id "apK9V9dHPfW2QFvhmL7U3wAAAFs"]
[Sat Aug 29 05:07:03.932316 2026] [security2:error] [pid 1018003:tid 1018256] [client 20.48.160.90:51626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/xmini4.php"] [unique_id "apK9VzAh5Y1i2tUxg4EM3wAABiA"]
[Sat Aug 29 05:07:03.933578 2026] [security2:error] [pid 1018003:tid 1018169] [client 20.48.250.41:62548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/t.php"] [unique_id "apK9VzAh5Y1i2tUxg4EM4AAABco"]
[Sat Aug 29 05:07:03.952747 2026] [security2:error] [pid 1028675:tid 1028879] [client 158.23.147.79:30505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK9V9dHPfW2QFvhmL7U4AAAAEU"]
[Sat Aug 29 05:07:03.954372 2026] [security2:error] [pid 1028675:tid 1028820] [client 68.155.159.216:51822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK9V9dHPfW2QFvhmL7U4QAAAAo"]
[Sat Aug 29 05:07:03.961091 2026] [security2:error] [pid 1028675:tid 1028857] [client 158.158.54.35:10572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/403.php"] [unique_id "apK9V9dHPfW2QFvhmL7U4gAAAC8"]
[Sat Aug 29 05:07:03.974815 2026] [security2:error] [pid 1018003:tid 1018163] [client 20.196.209.81:15198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/alumni_reg.php"] [unique_id "apK9VzAh5Y1i2tUxg4EM4QAABcQ"]
[Sat Aug 29 05:07:03.992120 2026] [security2:error] [pid 1018003:tid 1018219] [client 52.139.37.240:20798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/root.php"] [unique_id "apK9VzAh5Y1i2tUxg4EM4gAABfw"]
[Sat Aug 29 05:07:04.002525 2026] [security2:error] [pid 1018003:tid 1018230] [client 158.23.147.79:48269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/cgi-bin/index.php"] [unique_id "apK9WDAh5Y1i2tUxg4EM4wAABgY"]
[Sat Aug 29 05:07:04.043652 2026] [security2:error] [pid 1028675:tid 1028920] [client 168.107.94.195:58455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9WNdHPfW2QFvhmL7U6gAAAG4"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:04.049237 2026] [security2:error] [pid 1018003:tid 1018166] [client 93.123.109.228:39106] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK9WDAh5Y1i2tUxg4EM5AAABcc"]
[Sat Aug 29 05:07:04.078062 2026] [security2:error] [pid 1028675:tid 1028937] [client 158.23.147.79:26528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK9WNdHPfW2QFvhmL7U8gAAAH8"]
[Sat Aug 29 05:07:04.082336 2026] [security2:error] [pid 1028675:tid 1028885] [client 20.196.209.81:15522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-comments-post.php"] [unique_id "apK9WNdHPfW2QFvhmL7U8wAAAEs"]
[Sat Aug 29 05:07:04.085160 2026] [core:error] [pid 1028675:tid 1028915] [client 158.23.184.117:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:04.085175 2026] [core:error] [pid 1028675:tid 1028915] [client 158.23.184.117:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:04.093204 2026] [security2:error] [pid 1018003:tid 1018155] [client 52.139.37.240:31551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/files/index.php"] [unique_id "apK9WDAh5Y1i2tUxg4EM5wAABbw"]
[Sat Aug 29 05:07:04.097996 2026] [security2:error] [pid 1018003:tid 1018216] [client 20.104.49.130:54793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/term.php"] [unique_id "apK9WDAh5Y1i2tUxg4EM6AAABfk"]
[Sat Aug 29 05:07:04.098947 2026] [security2:error] [pid 1018003:tid 1018177] [client 40.83.93.50:20861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-admin/test.php"] [unique_id "apK9WDAh5Y1i2tUxg4EM6QAABdI"]
[Sat Aug 29 05:07:04.100451 2026] [security2:error] [pid 1028675:tid 1028816] [client 20.48.160.90:51300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/reop3.php"] [unique_id "apK9WNdHPfW2QFvhmL7U9QAAAAY"]
[Sat Aug 29 05:07:04.113509 2026] [security2:error] [pid 1028675:tid 1028821] [client 93.123.109.228:39148] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK9WNdHPfW2QFvhmL7U9gAAAAs"]
[Sat Aug 29 05:07:04.133232 2026] [security2:error] [pid 1028675:tid 1028872] [client 20.48.250.41:60734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/erty.php"] [unique_id "apK9WNdHPfW2QFvhmL7U-QAAAD4"]
[Sat Aug 29 05:07:04.166974 2026] [security2:error] [pid 1028675:tid 1028892] [client 20.151.200.44:47303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/console.php"] [unique_id "apK9WNdHPfW2QFvhmL7U-gAAAFI"]
[Sat Aug 29 05:07:04.176312 2026] [security2:error] [pid 1018003:tid 1018164] [client 93.123.109.228:39186] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(\\\\/\\\\*\\\\!? ?(?:select|grant|delete|insert|drop|alter|replace|truncate|update|create|rename|describe|union|concat|group_concat))" at REQUEST_FILENAME. [file "/opt/mod_security/hg_rules.conf"] [line "1019"] [id "9000042"] [rev "2.2.2"] [msg "SQL Comment Sequence Detected."] [data "/*update"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/*update.cgi*"] [unique_id "apK9WDAh5Y1i2tUxg4EM7AAABcU"]
[Sat Aug 29 05:07:04.179154 2026] [security2:error] [pid 1028675:tid 1028902] [client 158.23.147.79:35742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apK9WNdHPfW2QFvhmL7U_QAAAFw"]
[Sat Aug 29 05:07:04.187691 2026] [security2:error] [pid 1018003:tid 1018191] [client 20.203.141.11:12699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-content/themes/admin.php"] [unique_id "apK9WDAh5Y1i2tUxg4EM7gAABeA"]
[Sat Aug 29 05:07:04.188750 2026] [security2:error] [pid 1018003:tid 1018188] [client 52.139.37.240:21385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/shell.php"] [unique_id "apK9WDAh5Y1i2tUxg4EM7wAABd0"]
[Sat Aug 29 05:07:04.223156 2026] [security2:error] [pid 1018003:tid 1018187] [client 68.155.159.216:50238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-content/packed.php"] [unique_id "apK9WDAh5Y1i2tUxg4EM8AAABdw"]
[Sat Aug 29 05:07:04.224509 2026] [security2:error] [pid 1028675:tid 1028873] [client 158.23.184.117:2567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/update/da222.php"] [unique_id "apK9WNdHPfW2QFvhmL7VAAAAAD8"]
[Sat Aug 29 05:07:04.232690 2026] [security2:error] [pid 1028675:tid 1028826] [client 20.196.209.81:9409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/install.php"] [unique_id "apK9WNdHPfW2QFvhmL7VAQAAABA"]
[Sat Aug 29 05:07:04.240021 2026] [security2:error] [pid 1028675:tid 1028860] [client 20.48.160.90:51624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/wp-mail.php"] [unique_id "apK9WNdHPfW2QFvhmL7VAwAAADI"]
[Sat Aug 29 05:07:04.244282 2026] [security2:error] [pid 1028675:tid 1028878] [client 20.52.41.200:1214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/classwithtostring.php"] [unique_id "apK9WNdHPfW2QFvhmL7VBAAAAEQ"]
[Sat Aug 29 05:07:04.253378 2026] [security2:error] [pid 1018003:tid 1018170] [client 20.104.18.15:5095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9WDAh5Y1i2tUxg4EM8QAABcs"]
[Sat Aug 29 05:07:04.268196 2026] [security2:error] [pid 1018003:tid 1018152] [client 4.205.62.107:22038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/env.php"] [unique_id "apK9WDAh5Y1i2tUxg4EM8gAABbk"]
[Sat Aug 29 05:07:04.276813 2026] [security2:error] [pid 1028675:tid 1028861] [client 158.23.147.79:30554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-admin/index.php"] [unique_id "apK9WNdHPfW2QFvhmL7VCgAAADM"]
[Sat Aug 29 05:07:04.288742 2026] [security2:error] [pid 1018003:tid 1018190] [client 52.139.37.240:31091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/flower.php"] [unique_id "apK9WDAh5Y1i2tUxg4EM8wAABd8"]
[Sat Aug 29 05:07:04.299618 2026] [security2:error] [pid 1018003:tid 1018234] [client 20.48.250.41:60704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/0x.php"] [unique_id "apK9WDAh5Y1i2tUxg4EM9QAABgo"]
[Sat Aug 29 05:07:04.319177 2026] [security2:error] [pid 1028675:tid 1028926] [client 40.83.93.50:3868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/backup.php"] [unique_id "apK9WNdHPfW2QFvhmL7VEAAAAHQ"]
[Sat Aug 29 05:07:04.346708 2026] [security2:error] [pid 1028675:tid 1028896] [client 158.23.147.79:32707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK9WNdHPfW2QFvhmL7VEwAAAFY"]
[Sat Aug 29 05:07:04.348197 2026] [security2:error] [pid 1018003:tid 1018184] [client 93.123.109.228:39186] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/.env"] [unique_id "apK9WDAh5Y1i2tUxg4EM9wAABdk"]
[Sat Aug 29 05:07:04.365939 2026] [security2:error] [pid 1028675:tid 1028835] [client 158.158.54.35:29677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/xxx.php"] [unique_id "apK9WNdHPfW2QFvhmL7VFQAAABk"]
[Sat Aug 29 05:07:04.368042 2026] [security2:error] [pid 1028675:tid 1028931] [client 158.23.184.117:2568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/xmr.php"] [unique_id "apK9WNdHPfW2QFvhmL7VFgAAAHk"]
[Sat Aug 29 05:07:04.382171 2026] [security2:error] [pid 1028675:tid 1028924] [client 20.48.160.90:51683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/wp-conffg.php"] [unique_id "apK9WNdHPfW2QFvhmL7VFwAAAHI"]
[Sat Aug 29 05:07:04.382173 2026] [security2:error] [pid 1018003:tid 1018153] [client 20.196.209.81:2023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/colors.php"] [unique_id "apK9WDAh5Y1i2tUxg4EM-gAABbo"]
[Sat Aug 29 05:07:04.383637 2026] [security2:error] [pid 1028675:tid 1028910] [client 52.139.37.240:21148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK9WNdHPfW2QFvhmL7VGAAAAGQ"]
[Sat Aug 29 05:07:04.389237 2026] [security2:error] [pid 1028675:tid 1028935] [client 93.123.109.228:39120] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/laravel/app/.env"] [unique_id "apK9WNdHPfW2QFvhmL7VGQAAAH0"]
[Sat Aug 29 05:07:04.421576 2026] [security2:error] [pid 1028675:tid 1028900] [client 168.107.94.195:58743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9WNdHPfW2QFvhmL7VIQAAAFo"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:04.469270 2026] [security2:error] [pid 1018003:tid 1018212] [client 20.104.18.15:5118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9WDAh5Y1i2tUxg4EM_QAABfU"]
[Sat Aug 29 05:07:04.469333 2026] [security2:error] [pid 1018003:tid 1018265] [client 158.158.54.35:17559] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "traditionalslateroofing.com"] [uri "/1.php"] [unique_id "apK9WDAh5Y1i2tUxg4EM_AAABik"]
[Sat Aug 29 05:07:04.469471 2026] [security2:error] [pid 1018003:tid 1018265] [client 158.158.54.35:17559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/1.php"] [unique_id "apK9WDAh5Y1i2tUxg4EM_AAABik"]
[Sat Aug 29 05:07:04.476485 2026] [security2:error] [pid 1028675:tid 1028897] [client 20.196.209.81:15539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-config.php"] [unique_id "apK9WNdHPfW2QFvhmL7VKwAAAFc"]
[Sat Aug 29 05:07:04.478236 2026] [security2:error] [pid 1018003:tid 1018185] [client 20.48.250.41:60788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/66.php"] [unique_id "apK9WDAh5Y1i2tUxg4EM_wAABdo"]
[Sat Aug 29 05:07:04.494719 2026] [security2:error] [pid 1028675:tid 1028824] [client 158.23.147.79:62719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/x.php"] [unique_id "apK9WNdHPfW2QFvhmL7VLQAAAA4"]
[Sat Aug 29 05:07:04.513211 2026] [security2:error] [pid 1028675:tid 1028853] [client 158.23.184.117:2581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK9WNdHPfW2QFvhmL7VLgAAACs"]
[Sat Aug 29 05:07:04.523443 2026] [security2:error] [pid 1028675:tid 1028881] [client 20.48.160.90:51291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/filefuns.php"] [unique_id "apK9WNdHPfW2QFvhmL7VLwAAAEc"]
[Sat Aug 29 05:07:04.541900 2026] [security2:error] [pid 1028675:tid 1028820] [client 68.155.159.216:24534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/goat.php"] [unique_id "apK9WNdHPfW2QFvhmL7VMAAAAAo"]
[Sat Aug 29 05:07:04.578654 2026] [security2:error] [pid 1028675:tid 1028849] [client 52.139.37.240:21395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/wp-content/plugins/linkpreview/il.php"] [unique_id "apK9WNdHPfW2QFvhmL7VOwAAACc"]
[Sat Aug 29 05:07:04.581200 2026] [core:error] [pid 1028675:tid 1028858] [client 40.83.93.50:22785] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:04.581218 2026] [core:error] [pid 1028675:tid 1028858] [client 40.83.93.50:22785] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:04.598909 2026] [security2:error] [pid 1018003:tid 1018202] [client 4.205.62.107:26667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/vx.php"] [unique_id "apK9WDAh5Y1i2tUxg4ENAAAABes"]
[Sat Aug 29 05:07:04.607432 2026] [security2:error] [pid 1018003:tid 1018163] [client 4.205.62.107:58478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/xda.php"] [unique_id "apK9WDAh5Y1i2tUxg4ENAQAABcQ"]
[Sat Aug 29 05:07:04.607875 2026] [security2:error] [pid 1028675:tid 1028914] [client 20.104.49.130:63612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/dehnl.php"] [unique_id "apK9WNdHPfW2QFvhmL7VPwAAAGg"]
[Sat Aug 29 05:07:04.611827 2026] [security2:error] [pid 1028675:tid 1028831] [client 93.123.109.228:39206] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/.env.backup"] [unique_id "apK9WNdHPfW2QFvhmL7VQAAAABU"]
[Sat Aug 29 05:07:04.613322 2026] [security2:error] [pid 1028675:tid 1028856] [client 93.123.109.228:39120] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/.env.bak"] [unique_id "apK9WNdHPfW2QFvhmL7VQgAAAC4"]
[Sat Aug 29 05:07:04.613973 2026] [security2:error] [pid 1028675:tid 1028937] [client 4.205.62.107:21619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/motu.php"] [unique_id "apK9WNdHPfW2QFvhmL7VQwAAAH8"]
[Sat Aug 29 05:07:04.630286 2026] [security2:error] [pid 1028675:tid 1028767] [remote 34.139.66.91:50268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 91.66.139.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tgd6.com"] [uri "/phpinfo.php"] [unique_id "apK9WNdHPfW2QFvhmL7VSgAAalY"]
[Sat Aug 29 05:07:04.636337 2026] [security2:error] [pid 1018003:tid 1018179] [client 20.197.61.180:16614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/room.php"] [unique_id "apK9WDAh5Y1i2tUxg4ENAwAABdQ"]
[Sat Aug 29 05:07:04.639134 2026] [security2:error] [pid 1018003:tid 1018207] [client 197.219.150.206:61372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK9WDAh5Y1i2tUxg4ENBQAABfA"]
[Sat Aug 29 05:07:04.639215 2026] [security2:error] [pid 1018003:tid 1018207] [client 197.219.150.206:61372] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK9WDAh5Y1i2tUxg4ENBQAABfA"]
[Sat Aug 29 05:07:04.647543 2026] [security2:error] [pid 1018003:tid 1018258] [client 20.48.250.41:62565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/f35.php"] [unique_id "apK9WDAh5Y1i2tUxg4ENBwAABiI"]
[Sat Aug 29 05:07:04.648042 2026] [security2:error] [pid 1028675:tid 1028904] [client 20.196.209.81:17866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/colour.php"] [unique_id "apK9WNdHPfW2QFvhmL7VTwAAAF4"]
[Sat Aug 29 05:07:04.652071 2026] [security2:error] [pid 1028675:tid 1028925] [client 103.171.189.88:57012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9WNdHPfW2QFvhmL7VUAAAAHM"]
[Sat Aug 29 05:07:04.652183 2026] [security2:error] [pid 1028675:tid 1028925] [client 103.171.189.88:57012] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9WNdHPfW2QFvhmL7VUAAAAHM"]
[Sat Aug 29 05:07:04.654104 2026] [security2:error] [pid 1028675:tid 1028865] [client 20.104.18.15:5068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/ap.php"] [unique_id "apK9WNdHPfW2QFvhmL7VUQAAADc"]
[Sat Aug 29 05:07:04.656649 2026] [security2:error] [pid 1018003:tid 1018163] [client 158.23.184.117:2788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/wp-act.php"] [unique_id "apK9WDAh5Y1i2tUxg4ENCAAABcQ"]
[Sat Aug 29 05:07:04.682021 2026] [security2:error] [pid 1018003:tid 1018155] [client 93.123.109.228:39176] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK9WDAh5Y1i2tUxg4ENCgAABbw"]
[Sat Aug 29 05:07:04.686777 2026] [security2:error] [pid 1028675:tid 1028891] [client 158.23.147.79:53820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK9WNdHPfW2QFvhmL7VWQAAAFE"]
[Sat Aug 29 05:07:04.696103 2026] [security2:error] [pid 1028675:tid 1028917] [client 20.48.160.90:51697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/wp-cron.php"] [unique_id "apK9WNdHPfW2QFvhmL7VWwAAAGs"]
[Sat Aug 29 05:07:04.697773 2026] [security2:error] [pid 1028675:tid 1028819] [client 20.203.141.11:27397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-admin/css/admin.php"] [unique_id "apK9WNdHPfW2QFvhmL7VXAAAAAk"]
[Sat Aug 29 05:07:04.697871 2026] [security2:error] [pid 1028675:tid 1028857] [client 20.52.41.200:1241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/404.php"] [unique_id "apK9WNdHPfW2QFvhmL7VXQAAAC8"]
[Sat Aug 29 05:07:04.698630 2026] [security2:error] [pid 1028675:tid 1028810] [client 68.155.159.216:16224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-admin/index.php"] [unique_id "apK9WNdHPfW2QFvhmL7VXgAAAAA"]
[Sat Aug 29 05:07:04.767234 2026] [security2:error] [pid 1028675:tid 1028813] [client 52.139.37.240:20739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/wp-header-json.php"] [unique_id "apK9WNdHPfW2QFvhmL7VZAAAAAM"]
[Sat Aug 29 05:07:04.777516 2026] [security2:error] [pid 1028675:tid 1028887] [client 68.155.159.216:65115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/chosen.php"] [unique_id "apK9WNdHPfW2QFvhmL7VZgAAAE0"]
[Sat Aug 29 05:07:04.801291 2026] [security2:error] [pid 1018003:tid 1018182] [client 158.23.184.117:2968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/fff.php"] [unique_id "apK9WDAh5Y1i2tUxg4ENDgAABdc"]
[Sat Aug 29 05:07:04.803159 2026] [core:error] [pid 1028675:tid 1028880] [client 158.158.54.35:20296] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:04.803175 2026] [core:error] [pid 1028675:tid 1028880] [client 158.158.54.35:20296] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:04.806202 2026] [security2:error] [pid 1018003:tid 1018188] [client 93.123.109.228:39186] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/.env.old"] [unique_id "apK9WDAh5Y1i2tUxg4ENDwAABd0"]
[Sat Aug 29 05:07:04.809944 2026] [security2:error] [pid 1028675:tid 1028918] [client 93.123.109.228:39190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/.env.php"] [unique_id "apK9WNdHPfW2QFvhmL7VbgAAAGw"]
[Sat Aug 29 05:07:04.816157 2026] [security2:error] [pid 1028675:tid 1028898] [client 57.141.14.36:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/page/5/"] [unique_id "apK9WNdHPfW2QFvhmL7VbwAAAFg"]
[Sat Aug 29 05:07:04.817416 2026] [security2:error] [pid 1028675:tid 1028866] [client 168.107.94.195:59111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9WNdHPfW2QFvhmL7VcAAAADg"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:04.818451 2026] [security2:error] [pid 1018003:tid 1018233] [client 4.205.62.107:8990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/file21.php"] [unique_id "apK9WDAh5Y1i2tUxg4ENEAAABgk"]
[Sat Aug 29 05:07:04.820591 2026] [security2:error] [pid 1018003:tid 1018166] [client 40.83.93.50:17298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/haiterus.php"] [unique_id "apK9WDAh5Y1i2tUxg4ENEQAABcc"]
[Sat Aug 29 05:07:04.827609 2026] [security2:error] [pid 1018003:tid 1018167] [client 20.196.209.81:1995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/Js.php"] [unique_id "apK9WDAh5Y1i2tUxg4ENEgAABcg"]
[Sat Aug 29 05:07:04.833676 2026] [security2:error] [pid 1028675:tid 1028774] [remote 34.139.66.91:50268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 91.66.139.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tgd6.com"] [uri "/pi.php"] [unique_id "apK9WNdHPfW2QFvhmL7VdAAAZV0"]
[Sat Aug 29 05:07:04.836524 2026] [security2:error] [pid 1028675:tid 1028785] [remote 34.139.66.91:50268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 91.66.139.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tgd6.com"] [uri "/info.php"] [unique_id "apK9WNdHPfW2QFvhmL7VdQAABGg"]
[Sat Aug 29 05:07:04.837015 2026] [security2:error] [pid 1028675:tid 1028786] [remote 34.139.66.91:50268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 91.66.139.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tgd6.com"] [uri "/test.php"] [unique_id "apK9WNdHPfW2QFvhmL7VdwAABGk"]
[Sat Aug 29 05:07:04.837336 2026] [security2:error] [pid 1028675:tid 1028783] [remote 34.139.66.91:50268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 91.66.139.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tgd6.com"] [uri "/i.php"] [unique_id "apK9WNdHPfW2QFvhmL7VeAAABGY"]
[Sat Aug 29 05:07:04.857178 2026] [security2:error] [pid 1028675:tid 1028910] [client 68.155.159.216:33681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK9WNdHPfW2QFvhmL7VfgAAAGQ"]
[Sat Aug 29 05:07:04.860989 2026] [security2:error] [pid 1028675:tid 1028909] [client 20.48.250.41:62545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/wen.php"] [unique_id "apK9WNdHPfW2QFvhmL7VfwAAAGM"]
[Sat Aug 29 05:07:04.874051 2026] [security2:error] [pid 1028675:tid 1028935] [client 158.23.147.79:17502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK9WNdHPfW2QFvhmL7VgAAAAH0"]
[Sat Aug 29 05:07:04.879819 2026] [security2:error] [pid 1018003:tid 1018183] [client 20.196.209.81:17174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-configs.php"] [unique_id "apK9WDAh5Y1i2tUxg4ENFQAABdg"]
[Sat Aug 29 05:07:04.902541 2026] [security2:error] [pid 1028675:tid 1028932] [client 20.104.18.15:5068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/media.php"] [unique_id "apK9WNdHPfW2QFvhmL7ViAAAAHo"]
[Sat Aug 29 05:07:04.917531 2026] [security2:error] [pid 1018003:tid 1018234] [client 20.48.160.90:51704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/lock360.php"] [unique_id "apK9WDAh5Y1i2tUxg4ENFgAABgo"]
[Sat Aug 29 05:07:04.937203 2026] [security2:error] [pid 1028675:tid 1028798] [remote 93.123.109.228:51634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/.env.php"] [unique_id "apK9WNdHPfW2QFvhmL7VjgAASnU"]
[Sat Aug 29 05:07:04.939332 2026] [security2:error] [pid 1028675:tid 1028853] [client 93.123.109.228:39212] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/.env.swp"] [unique_id "apK9WNdHPfW2QFvhmL7VjQAAACs"]
[Sat Aug 29 05:07:04.955350 2026] [security2:error] [pid 1028675:tid 1028900] [client 52.139.37.240:21424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/zup.php"] [unique_id "apK9WNdHPfW2QFvhmL7VjwAAAFo"]
[Sat Aug 29 05:07:04.959958 2026] [security2:error] [pid 1028675:tid 1028799] [remote 34.139.66.91:50268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 91.66.139.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tgd6.com"] [uri "/app_dev.php/_profiler"] [unique_id "apK9WNdHPfW2QFvhmL7VkQAAB3Y"]
[Sat Aug 29 05:07:04.959975 2026] [security2:error] [pid 1028675:tid 1028794] [remote 34.139.66.91:50268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 91.66.139.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tgd6.com"] [uri "/app_dev.php"] [unique_id "apK9WNdHPfW2QFvhmL7VkgAAB3E"]
[Sat Aug 29 05:07:04.979632 2026] [security2:error] [pid 1028675:tid 1028841] [client 158.23.184.117:2776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/.tmb/dropdown.php"] [unique_id "apK9WNdHPfW2QFvhmL7VkwAAAB8"]
[Sat Aug 29 05:07:05.009947 2026] [security2:error] [pid 1028675:tid 1028906] [client 20.48.250.41:60757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/inc.php"] [unique_id "apK9WddHPfW2QFvhmL7VnwAAAGA"]
[Sat Aug 29 05:07:05.011376 2026] [security2:error] [pid 1018003:tid 1018261] [client 68.155.159.216:65062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK9WTAh5Y1i2tUxg4ENGwAABiU"]
[Sat Aug 29 05:07:05.018452 2026] [security2:error] [pid 1028675:tid 1028849] [client 68.155.159.216:1990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK9WddHPfW2QFvhmL7VoAAAACc"]
[Sat Aug 29 05:07:05.025692 2026] [security2:error] [pid 1018003:tid 1018275] [client 93.123.109.228:39106] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/.env~"] [unique_id "apK9WTAh5Y1i2tUxg4ENHAAABjM"]
[Sat Aug 29 05:07:05.049731 2026] [security2:error] [pid 1028675:tid 1028842] [client 4.205.62.107:56055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/ccou.php"] [unique_id "apK9WddHPfW2QFvhmL7VpAAAACA"]
[Sat Aug 29 05:07:05.049962 2026] [security2:error] [pid 1018003:tid 1018190] [client 20.196.209.81:17859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/OK.php"] [unique_id "apK9WTAh5Y1i2tUxg4ENHwAABd8"]
[Sat Aug 29 05:07:05.054723 2026] [security2:error] [pid 1028675:tid 1028919] [client 158.23.147.79:30514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK9WddHPfW2QFvhmL7VpwAAAG0"]
[Sat Aug 29 05:07:05.056795 2026] [security2:error] [pid 1018003:tid 1018156] [client 68.155.159.216:51848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK9WTAh5Y1i2tUxg4ENIAAABb0"]
[Sat Aug 29 05:07:05.071738 2026] [security2:error] [pid 1028675:tid 1028844] [client 40.83.93.50:21201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-admin/user/f35.php"] [unique_id "apK9WddHPfW2QFvhmL7VqQAAACI"]
[Sat Aug 29 05:07:05.094049 2026] [security2:error] [pid 1018003:tid 1018231] [client 158.158.54.35:17550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/s.php"] [unique_id "apK9WTAh5Y1i2tUxg4ENIgAABgc"]
[Sat Aug 29 05:07:05.094460 2026] [security2:error] [pid 1018003:tid 1018192] [client 20.48.160.90:51607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/wp-theme.php"] [unique_id "apK9WTAh5Y1i2tUxg4ENIwAABeE"]
[Sat Aug 29 05:07:05.096988 2026] [security2:error] [pid 1028675:tid 1028831] [client 20.104.18.15:5078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/adminfuns.php"] [unique_id "apK9WddHPfW2QFvhmL7VrwAAABU"]
[Sat Aug 29 05:07:05.122243 2026] [security2:error] [pid 1028675:tid 1028916] [client 158.23.147.79:48169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK9WddHPfW2QFvhmL7VsgAAAGo"]
[Sat Aug 29 05:07:05.140500 2026] [security2:error] [pid 1028675:tid 1028854] [client 158.23.184.117:2775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/robots.php"] [unique_id "apK9WddHPfW2QFvhmL7VtAAAACw"]
[Sat Aug 29 05:07:05.152325 2026] [security2:error] [pid 1018003:tid 1018244] [client 20.52.41.200:1170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/php.php"] [unique_id "apK9WTAh5Y1i2tUxg4ENJAAABhQ"]
[Sat Aug 29 05:07:05.163413 2026] [security2:error] [pid 1018003:tid 1018159] [client 52.139.37.240:21429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/a9.php"] [unique_id "apK9WTAh5Y1i2tUxg4ENJwAABcA"]
[Sat Aug 29 05:07:05.166446 2026] [security2:error] [pid 1018003:tid 1018225] [client 158.23.147.79:50106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/radio.php"] [unique_id "apK9WTAh5Y1i2tUxg4ENKAAABgI"]
[Sat Aug 29 05:07:05.171219 2026] [security2:error] [pid 1028675:tid 1028925] [client 20.48.250.41:62563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/6bcwiqwj.php"] [unique_id "apK9WddHPfW2QFvhmL7VuAAAAHM"]
[Sat Aug 29 05:07:05.183769 2026] [security2:error] [pid 1018003:tid 1018217] [client 158.23.147.79:26369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-content/admin.php"] [unique_id "apK9WTAh5Y1i2tUxg4ENKgAABfo"]
[Sat Aug 29 05:07:05.193958 2026] [security2:error] [pid 1018003:tid 1018187] [client 149.34.210.141:42204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9WTAh5Y1i2tUxg4ENKwAABdw"]
[Sat Aug 29 05:07:05.194055 2026] [security2:error] [pid 1018003:tid 1018187] [client 149.34.210.141:42204] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9WTAh5Y1i2tUxg4ENKwAABdw"]
[Sat Aug 29 05:07:05.197535 2026] [security2:error] [pid 1018003:tid 1018160] [client 168.107.94.195:59448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9WTAh5Y1i2tUxg4ENLAAABcE"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:05.232184 2026] [security2:error] [pid 1028675:tid 1028871] [client 93.123.109.228:39132] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.old"] [unique_id "apK9WddHPfW2QFvhmL7VxAAAAD0"]
[Sat Aug 29 05:07:05.242968 2026] [security2:error] [pid 1018003:tid 1018196] [client 20.151.200.44:46533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/blnux.php"] [unique_id "apK9WTAh5Y1i2tUxg4ENLwAABeU"]
[Sat Aug 29 05:07:05.244782 2026] [security2:error] [pid 1018003:tid 1018163] [client 158.23.147.79:25500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/cgi-bin/index.php"] [unique_id "apK9WTAh5Y1i2tUxg4ENMQAABcQ"]
[Sat Aug 29 05:07:05.249398 2026] [core:error] [pid 1018003:tid 1018267] [client 158.158.54.35:28379] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:05.249420 2026] [core:error] [pid 1018003:tid 1018267] [client 158.158.54.35:28379] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:05.251504 2026] [security2:error] [pid 1028675:tid 1028812] [client 20.196.209.81:11279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/access.php"] [unique_id "apK9WddHPfW2QFvhmL7VxQAAAAI"]
[Sat Aug 29 05:07:05.255102 2026] [security2:error] [pid 1028675:tid 1028936] [client 20.104.18.15:5003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/classwithtostring.php"] [unique_id "apK9WddHPfW2QFvhmL7VxgAAAH4"]
[Sat Aug 29 05:07:05.259398 2026] [security2:error] [pid 1028675:tid 1028813] [client 68.155.159.216:33537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-admin/admin.php"] [unique_id "apK9WddHPfW2QFvhmL7VxwAAAAM"]
[Sat Aug 29 05:07:05.274561 2026] [security2:error] [pid 1028675:tid 1028860] [client 20.104.49.130:36237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.carlosmua.com"] [uri "/wp-the.php"] [unique_id "apK9WddHPfW2QFvhmL7VyAAAADI"]
[Sat Aug 29 05:07:05.274575 2026] [security2:error] [pid 1028675:tid 1028861] [client 20.48.160.90:51304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/2d7433/index.php"] [unique_id "apK9WddHPfW2QFvhmL7VyQAAADM"]
[Sat Aug 29 05:07:05.276524 2026] [security2:error] [pid 1018003:tid 1018200] [client 20.196.209.81:22447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-conflg.php"] [unique_id "apK9WTAh5Y1i2tUxg4ENMwAABek"]
[Sat Aug 29 05:07:05.281596 2026] [security2:error] [pid 1028675:tid 1028878] [client 93.123.109.228:39206] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config~"] [unique_id "apK9WddHPfW2QFvhmL7VygAAAEQ"]
[Sat Aug 29 05:07:05.284329 2026] [security2:error] [pid 1028675:tid 1028826] [client 158.23.184.117:2583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/.well-known/install.php"] [unique_id "apK9WddHPfW2QFvhmL7VywAAABA"]
[Sat Aug 29 05:07:05.284330 2026] [security2:error] [pid 1018003:tid 1018212] [client 20.203.141.11:1224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/adminfuns.php"] [unique_id "apK9WTAh5Y1i2tUxg4ENNAAABfU"]
[Sat Aug 29 05:07:05.285011 2026] [security2:error] [pid 1028675:tid 1028872] [client 158.23.147.79:35744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK9WddHPfW2QFvhmL7VzAAAAD4"]
[Sat Aug 29 05:07:05.298464 2026] [security2:error] [pid 1028675:tid 1028815] [client 93.123.109.228:39204] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.bak"] [unique_id "apK9WddHPfW2QFvhmL7VzQAAAAU"]
[Sat Aug 29 05:07:05.307596 2026] [security2:error] [pid 1028675:tid 1028926] [client 20.48.250.41:60759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/easy.php"] [unique_id "apK9WddHPfW2QFvhmL7VzwAAAHQ"]
[Sat Aug 29 05:07:05.337208 2026] [security2:error] [pid 1028675:tid 1028874] [client 40.83.93.50:17288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/go.php"] [unique_id "apK9WddHPfW2QFvhmL7V0QAAAEA"]
[Sat Aug 29 05:07:05.357711 2026] [security2:error] [pid 1028675:tid 1028915] [client 20.197.61.180:13839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/class-wp-cmd.php"] [unique_id "apK9WddHPfW2QFvhmL7V0wAAAGk"]
[Sat Aug 29 05:07:05.358917 2026] [security2:error] [pid 1028675:tid 1028814] [client 68.155.159.216:50334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-l0gin.php"] [unique_id "apK9WddHPfW2QFvhmL7V1AAAAAQ"]
[Sat Aug 29 05:07:05.367737 2026] [security2:error] [pid 1028675:tid 1028929] [client 52.139.37.240:21176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/admin/index.php"] [unique_id "apK9WddHPfW2QFvhmL7V1gAAAHc"]
[Sat Aug 29 05:07:05.382201 2026] [security2:error] [pid 1018003:tid 1018195] [client 171.61.160.196:29939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.160.61.171.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK9WTAh5Y1i2tUxg4ENOAAABeQ"]
[Sat Aug 29 05:07:05.382318 2026] [security2:error] [pid 1018003:tid 1018195] [client 171.61.160.196:29939] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK9WTAh5Y1i2tUxg4ENOAAABeQ"]
[Sat Aug 29 05:07:05.387639 2026] [security2:error] [pid 1018003:tid 1018250] [client 158.23.147.79:30575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK9WTAh5Y1i2tUxg4ENOQAABho"]
[Sat Aug 29 05:07:05.389365 2026] [security2:error] [pid 1028675:tid 1028897] [client 20.104.18.15:5091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK9WddHPfW2QFvhmL7V2gAAAFc"]
[Sat Aug 29 05:07:05.404792 2026] [security2:error] [pid 1028675:tid 1028839] [client 68.155.159.216:49210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-content/radio.php"] [unique_id "apK9WddHPfW2QFvhmL7V2wAAAB0"]
[Sat Aug 29 05:07:05.420457 2026] [security2:error] [pid 1018003:tid 1018186] [client 4.205.62.107:22380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/xve22.php"] [unique_id "apK9WTAh5Y1i2tUxg4ENOwAABds"]
[Sat Aug 29 05:07:05.429401 2026] [security2:error] [pid 1018003:tid 1018167] [client 20.48.160.90:51616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/wp-login.php"] [unique_id "apK9WTAh5Y1i2tUxg4ENOgAABcg"]
[Sat Aug 29 05:07:05.452901 2026] [security2:error] [pid 1028675:tid 1028830] [client 158.23.147.79:32597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/classwithtostring.php"] [unique_id "apK9WddHPfW2QFvhmL7V3QAAABQ"]
[Sat Aug 29 05:07:05.476780 2026] [security2:error] [pid 1028675:tid 1028881] [client 20.48.250.41:59374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/fresh3.php"] [unique_id "apK9WddHPfW2QFvhmL7V3gAAAEc"]
[Sat Aug 29 05:07:05.480774 2026] [security2:error] [pid 1028675:tid 1028841] [client 158.23.184.117:2577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/wp-admin/about.php"] [unique_id "apK9WddHPfW2QFvhmL7V3wAAAB8"]
[Sat Aug 29 05:07:05.526246 2026] [security2:error] [pid 1028675:tid 1028704] [remote 34.139.66.91:50268] ModSecurity: Access denied with code 406 (phase 2). Match of "ipMatch 127.0.0.1,::1" against "REMOTE_ADDR" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "724"] [id "340114"] [rev "2"] [msg "Atomicorp.com WAF Rules: Apache admin service access attempt"] [severity "CRITICAL"] [hostname "tgd6.com"] [uri "/server-info"] [unique_id "apK9WddHPfW2QFvhmL7V5AAAJBc"]
[Sat Aug 29 05:07:05.544565 2026] [security2:error] [pid 1028675:tid 1028913] [client 158.158.54.35:10584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/test1.php"] [unique_id "apK9WddHPfW2QFvhmL7V6gAAAGc"]
[Sat Aug 29 05:07:05.547549 2026] [security2:error] [pid 1028675:tid 1028847] [client 20.104.18.15:5010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/5PJcpMFsD8B.php"] [unique_id "apK9WddHPfW2QFvhmL7V6wAAACU"]
[Sat Aug 29 05:07:05.565027 2026] [security2:error] [pid 1028675:tid 1028907] [client 52.139.37.240:20791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/makeasmtp.php"] [unique_id "apK9WddHPfW2QFvhmL7V7gAAAGE"]
[Sat Aug 29 05:07:05.565497 2026] [security2:error] [pid 1018003:tid 1018233] [client 40.83.93.50:13630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-admin/user/min.php"] [unique_id "apK9WTAh5Y1i2tUxg4ENPgAABgk"]
[Sat Aug 29 05:07:05.578832 2026] [security2:error] [pid 1028675:tid 1028914] [client 168.107.94.195:59786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9WddHPfW2QFvhmL7V8QAAAGg"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:05.583598 2026] [access_compat:error] [pid 1028675:tid 1028707] [remote 34.139.66.91:50268] AH01797: client denied by server configuration: /var/www/html/server-status
[Sat Aug 29 05:07:05.606351 2026] [security2:error] [pid 1028675:tid 1028904] [client 20.48.250.41:59309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/bgymj.php"] [unique_id "apK9WddHPfW2QFvhmL7V9AAAAF4"]
[Sat Aug 29 05:07:05.609034 2026] [security2:error] [pid 1028675:tid 1028817] [client 20.52.41.200:1440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/init.php"] [unique_id "apK9WddHPfW2QFvhmL7V9QAAAAc"]
[Sat Aug 29 05:07:05.613611 2026] [security2:error] [pid 1018003:tid 1018153] [client 20.48.160.90:51621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/images.php"] [unique_id "apK9WTAh5Y1i2tUxg4ENQQAABbo"]
[Sat Aug 29 05:07:05.615321 2026] [security2:error] [pid 1028675:tid 1028870] [client 20.196.209.81:9750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts.glowt-shirt.com"] [uri "/aaa.php"] [unique_id "apK9WddHPfW2QFvhmL7V-wAAADw"]
[Sat Aug 29 05:07:05.626309 2026] [security2:error] [pid 1028675:tid 1028876] [client 158.23.184.117:2781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/wp-content/backup.php"] [unique_id "apK9WddHPfW2QFvhmL7V_AAAAEI"]
[Sat Aug 29 05:07:05.639657 2026] [security2:error] [pid 1028675:tid 1028873] [client 158.23.147.79:63853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-content/x.php"] [unique_id "apK9WddHPfW2QFvhmL7V_gAAAD8"]
[Sat Aug 29 05:07:05.663378 2026] [security2:error] [pid 1018003:tid 1018246] [client 20.196.209.81:11302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/classsmtps.php"] [unique_id "apK9WTAh5Y1i2tUxg4ENQwAABhY"]
[Sat Aug 29 05:07:05.675370 2026] [security2:error] [pid 1028675:tid 1028919] [client 20.196.209.81:5986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-content.php"] [unique_id "apK9WddHPfW2QFvhmL7WAQAAAG0"]
[Sat Aug 29 05:07:05.704522 2026] [security2:error] [pid 1028675:tid 1028863] [client 158.158.54.35:8714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/tool.php"] [unique_id "apK9WddHPfW2QFvhmL7WBAAAADU"]
[Sat Aug 29 05:07:05.736096 2026] [security2:error] [pid 1028675:tid 1028855] [client 4.205.62.107:65432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/ty.php"] [unique_id "apK9WddHPfW2QFvhmL7WCQAAAC0"]
[Sat Aug 29 05:07:05.747003 2026] [security2:error] [pid 1018003:tid 1018192] [client 20.104.18.15:5110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK9WTAh5Y1i2tUxg4ENRQAABeE"]
[Sat Aug 29 05:07:05.747733 2026] [security2:error] [pid 1028675:tid 1028814] [client 4.205.62.107:58390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/motu.php"] [unique_id "apK9WddHPfW2QFvhmL7WCwAAAAQ"]
[Sat Aug 29 05:07:05.753533 2026] [security2:error] [pid 1028675:tid 1028929] [client 4.205.62.107:22016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/rpk.php"] [unique_id "apK9WddHPfW2QFvhmL7WDAAAAHc"]
[Sat Aug 29 05:07:05.754836 2026] [security2:error] [pid 1028675:tid 1028922] [client 20.48.160.90:51672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/ops.php"] [unique_id "apK9WddHPfW2QFvhmL7WDQAAAHA"]
[Sat Aug 29 05:07:05.757607 2026] [security2:error] [pid 1028675:tid 1028878] [client 52.139.37.240:20744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/paku.php"] [unique_id "apK9WddHPfW2QFvhmL7WDgAAAEQ"]
[Sat Aug 29 05:07:05.762726 2026] [security2:error] [pid 1028675:tid 1028835] [client 20.48.250.41:60710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/ws69.php"] [unique_id "apK9WddHPfW2QFvhmL7WDwAAABk"]
[Sat Aug 29 05:07:05.770095 2026] [security2:error] [pid 1028675:tid 1028890] [client 158.23.184.117:2774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/.well-known/aa.php"] [unique_id "apK9WddHPfW2QFvhmL7WEAAAAFA"]
[Sat Aug 29 05:07:05.772574 2026] [security2:error] [pid 1028675:tid 1028891] [client 20.203.141.11:11226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/goods.php"] [unique_id "apK9WddHPfW2QFvhmL7WEQAAAFE"]
[Sat Aug 29 05:07:05.843556 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.104.49.130:48523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/well.php"] [unique_id "apK9WTAh5Y1i2tUxg4ENSgAABcI"]
[Sat Aug 29 05:07:05.886658 2026] [security2:error] [pid 1028675:tid 1028849] [client 68.155.159.216:65027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/goods.php"] [unique_id "apK9WddHPfW2QFvhmL7WFgAAACc"]
[Sat Aug 29 05:07:05.916724 2026] [security2:error] [pid 1028675:tid 1028840] [client 158.23.184.117:2778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "apK9WddHPfW2QFvhmL7WGAAAAB4"]
[Sat Aug 29 05:07:05.926953 2026] [security2:error] [pid 1028675:tid 1028897] [client 40.83.93.50:7589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/gecko-new.php"] [unique_id "apK9WddHPfW2QFvhmL7WGwAAAFc"]
[Sat Aug 29 05:07:05.939129 2026] [security2:error] [pid 1018003:tid 1018262] [client 20.48.250.41:60760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/ccs.php"] [unique_id "apK9WTAh5Y1i2tUxg4ENTQAABiY"]
[Sat Aug 29 05:07:05.946590 2026] [security2:error] [pid 1028675:tid 1028914] [client 20.104.18.15:5080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/wsd.php"] [unique_id "apK9WddHPfW2QFvhmL7WHQAAAGg"]
[Sat Aug 29 05:07:05.958243 2026] [security2:error] [pid 1018003:tid 1018157] [client 168.107.94.195:60213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9WTAh5Y1i2tUxg4ENTgAABb4"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:05.961472 2026] [security2:error] [pid 1028675:tid 1028865] [client 20.48.160.90:51309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK9WddHPfW2QFvhmL7WHwAAADc"]
[Sat Aug 29 05:07:05.962659 2026] [security2:error] [pid 1028675:tid 1028833] [client 52.139.37.240:20790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/rtx.php"] [unique_id "apK9WddHPfW2QFvhmL7WIAAAABc"]
[Sat Aug 29 05:07:05.964287 2026] [security2:error] [pid 1028675:tid 1028892] [client 61.9.8.103:6998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK9WddHPfW2QFvhmL7WIQAAAFI"]
[Sat Aug 29 05:07:05.964414 2026] [security2:error] [pid 1028675:tid 1028892] [client 61.9.8.103:6998] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK9WddHPfW2QFvhmL7WIQAAAFI"]
[Sat Aug 29 05:07:05.978768 2026] [security2:error] [pid 1028675:tid 1028899] [client 68.155.159.216:33786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/simple.php"] [unique_id "apK9WddHPfW2QFvhmL7WIgAAAFk"]
[Sat Aug 29 05:07:05.991343 2026] [security2:error] [pid 1028675:tid 1028817] [client 158.23.147.79:17498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK9WddHPfW2QFvhmL7WIwAAAAc"]
[Sat Aug 29 05:07:05.994328 2026] [security2:error] [pid 1018003:tid 1018252] [client 52.139.37.240:30005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greathairkc.com"] [uri "/aged.php"] [unique_id "apK9WTAh5Y1i2tUxg4ENUAAABhw"]
[Sat Aug 29 05:07:05.997258 2026] [security2:error] [pid 1018003:tid 1018177] [client 4.205.62.107:53351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/wsws.php"] [unique_id "apK9WTAh5Y1i2tUxg4ENUQAABdI"]
[Sat Aug 29 05:07:06.003140 2026] [security2:error] [pid 1028675:tid 1028879] [client 158.158.54.35:7350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/ws.php"] [unique_id "apK9WtdHPfW2QFvhmL7WJAAAAEU"]
[Sat Aug 29 05:07:06.036601 2026] [security2:error] [pid 1028675:tid 1028828] [client 40.83.93.50:22791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-admin/users.php"] [unique_id "apK9WtdHPfW2QFvhmL7WJwAAABI"]
[Sat Aug 29 05:07:06.068148 2026] [security2:error] [pid 1028675:tid 1028858] [client 20.52.41.200:1192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "apK9WtdHPfW2QFvhmL7WKQAAADA"]
[Sat Aug 29 05:07:06.079063 2026] [security2:error] [pid 1018003:tid 1018207] [client 20.197.61.180:13862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/disagreed.php"] [unique_id "apK9WjAh5Y1i2tUxg4ENVAAABfA"]
[Sat Aug 29 05:07:06.082621 2026] [security2:error] [pid 1028675:tid 1028873] [client 158.23.184.117:2588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/wp-content/plugins/alfa-rex.php"] [unique_id "apK9WtdHPfW2QFvhmL7WKwAAAD8"]
[Sat Aug 29 05:07:06.084661 2026] [security2:error] [pid 1018003:tid 1018250] [client 20.151.200.44:47349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/pentest.php"] [unique_id "apK9WjAh5Y1i2tUxg4ENVQAABho"]
[Sat Aug 29 05:07:06.086535 2026] [security2:error] [pid 1018003:tid 1018277] [client 20.48.250.41:60744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/mar.php"] [unique_id "apK9WjAh5Y1i2tUxg4ENVgAABjU"]
[Sat Aug 29 05:07:06.102934 2026] [core:error] [pid 1028675:tid 1028831] [client 20.196.209.81:20362] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:06.102950 2026] [core:error] [pid 1028675:tid 1028831] [client 20.196.209.81:20362] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:06.116611 2026] [security2:error] [pid 1018003:tid 1018186] [client 68.155.159.216:65044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-content/banners/about.php"] [unique_id "apK9WjAh5Y1i2tUxg4ENVwAABds"]
[Sat Aug 29 05:07:06.116866 2026] [security2:error] [pid 1028675:tid 1028926] [client 20.48.160.90:51271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK9WtdHPfW2QFvhmL7WMAAAAHQ"]
[Sat Aug 29 05:07:06.120262 2026] [security2:error] [pid 1028675:tid 1028919] [client 52.139.37.240:32124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/index.php/feed/atom/"] [unique_id "apK9WtdHPfW2QFvhmL7WMQAAAG0"]
[Sat Aug 29 05:07:06.124443 2026] [security2:error] [pid 1028675:tid 1028863] [client 68.155.159.216:2011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/chosen.php"] [unique_id "apK9WtdHPfW2QFvhmL7WMgAAADU"]
[Sat Aug 29 05:07:06.146444 2026] [security2:error] [pid 1028675:tid 1028898] [client 158.23.184.117:12042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dubeyko.com"] [uri "/update/da222.php"] [unique_id "apK9WtdHPfW2QFvhmL7WOQAAAFg"]
[Sat Aug 29 05:07:06.160312 2026] [security2:error] [pid 1028675:tid 1028818] [client 20.196.209.81:11280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/contentloader1.php"] [unique_id "apK9WtdHPfW2QFvhmL7WPgAAAAg"]
[Sat Aug 29 05:07:06.161721 2026] [security2:error] [pid 1018003:tid 1018166] [client 52.139.37.240:21399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/update/da222.php"] [unique_id "apK9WjAh5Y1i2tUxg4ENXAAABcc"]
[Sat Aug 29 05:07:06.163214 2026] [security2:error] [pid 1028675:tid 1028876] [client 158.158.54.35:16915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/k.php"] [unique_id "apK9WtdHPfW2QFvhmL7WPwAAAEI"]
[Sat Aug 29 05:07:06.171479 2026] [security2:error] [pid 1028675:tid 1028915] [client 68.155.159.216:51458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK9WtdHPfW2QFvhmL7WQAAAAGk"]
[Sat Aug 29 05:07:06.202901 2026] [security2:error] [pid 1028675:tid 1028890] [client 4.205.62.107:56062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/rum.or.php"] [unique_id "apK9WtdHPfW2QFvhmL7WQQAAAFA"]
[Sat Aug 29 05:07:06.217423 2026] [security2:error] [pid 1028675:tid 1028845] [client 20.104.18.15:5083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/bulet.php"] [unique_id "apK9WtdHPfW2QFvhmL7WQwAAACM"]
[Sat Aug 29 05:07:06.229001 2026] [security2:error] [pid 1028675:tid 1028933] [client 158.23.147.79:48231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-includes/content.php"] [unique_id "apK9WtdHPfW2QFvhmL7WRAAAAHs"]
[Sat Aug 29 05:07:06.232159 2026] [security2:error] [pid 1028675:tid 1028881] [client 20.48.250.41:60765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/ccu.php"] [unique_id "apK9WtdHPfW2QFvhmL7WRQAAAEc"]
[Sat Aug 29 05:07:06.238567 2026] [security2:error] [pid 1018003:tid 1018179] [client 20.104.49.130:51376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/js.php"] [unique_id "apK9WjAh5Y1i2tUxg4ENXgAABdQ"]
[Sat Aug 29 05:07:06.268050 2026] [security2:error] [pid 1018003:tid 1018203] [client 158.23.147.79:50058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK9WjAh5Y1i2tUxg4ENXwAABew"]
[Sat Aug 29 05:07:06.269548 2026] [security2:error] [pid 1028675:tid 1028851] [client 52.139.37.240:29854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greathairkc.com"] [uri "/essexec.php"] [unique_id "apK9WtdHPfW2QFvhmL7WSgAAACk"]
[Sat Aug 29 05:07:06.271736 2026] [security2:error] [pid 1028675:tid 1028920] [client 20.203.141.11:18164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/css.php"] [unique_id "apK9WtdHPfW2QFvhmL7WSwAAAG4"]
[Sat Aug 29 05:07:06.288120 2026] [security2:error] [pid 1028675:tid 1028894] [client 20.48.160.90:51586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/about.php"] [unique_id "apK9WtdHPfW2QFvhmL7WTAAAAFQ"]
[Sat Aug 29 05:07:06.324988 2026] [security2:error] [pid 1028675:tid 1028849] [client 158.23.184.117:2771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/test.php"] [unique_id "apK9WtdHPfW2QFvhmL7WUQAAACc"]
[Sat Aug 29 05:07:06.337045 2026] [security2:error] [pid 1028675:tid 1028910] [client 158.23.184.117:12069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dubeyko.com"] [uri "/xmr.php"] [unique_id "apK9WtdHPfW2QFvhmL7WUgAAAGQ"]
[Sat Aug 29 05:07:06.337490 2026] [security2:error] [pid 1018003:tid 1018190] [client 168.107.94.195:60521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9WjAh5Y1i2tUxg4ENYgAABd8"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:06.341251 2026] [security2:error] [pid 1018003:tid 1018224] [client 52.139.37.240:32752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/root.php"] [unique_id "apK9WjAh5Y1i2tUxg4ENZAAABgE"]
[Sat Aug 29 05:07:06.358265 2026] [core:error] [pid 1018003:tid 1018221] [client 52.139.37.240:20756] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:06.358283 2026] [core:error] [pid 1018003:tid 1018221] [client 52.139.37.240:20756] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:06.367651 2026] [security2:error] [pid 1028675:tid 1028843] [client 158.23.147.79:25503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK9WtdHPfW2QFvhmL7WWgAAACE"]
[Sat Aug 29 05:07:06.369553 2026] [security2:error] [pid 1028675:tid 1028888] [client 68.155.159.216:33643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK9WtdHPfW2QFvhmL7WWwAAAE4"]
[Sat Aug 29 05:07:06.373636 2026] [security2:error] [pid 1028675:tid 1028927] [client 20.48.250.41:60797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/ak.php"] [unique_id "apK9WtdHPfW2QFvhmL7WXAAAAHU"]
[Sat Aug 29 05:07:06.393697 2026] [security2:error] [pid 1018003:tid 1018231] [client 158.23.147.79:35809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/dropdown.php"] [unique_id "apK9WjAh5Y1i2tUxg4ENaAAABgc"]
[Sat Aug 29 05:07:06.402813 2026] [security2:error] [pid 1018003:tid 1018217] [client 20.151.200.44:46649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/6y7t.php"] [unique_id "apK9WjAh5Y1i2tUxg4ENbAAABfo"]
[Sat Aug 29 05:07:06.404079 2026] [security2:error] [pid 1028675:tid 1028885] [client 93.123.109.228:39092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/.wp-config.php.swp"] [unique_id "apK9WtdHPfW2QFvhmL7WYQAAAEs"]
[Sat Aug 29 05:07:06.425994 2026] [security2:error] [pid 1018003:tid 1018219] [client 20.104.18.15:4992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/av.php"] [unique_id "apK9WjAh5Y1i2tUxg4ENbgAABfw"]
[Sat Aug 29 05:07:06.427153 2026] [security2:error] [pid 1028675:tid 1028875] [client 20.48.160.90:51229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/admin.php/admin.php"] [unique_id "apK9WtdHPfW2QFvhmL7WZgAAAEE"]
[Sat Aug 29 05:07:06.446112 2026] [security2:error] [pid 1028675:tid 1028906] [client 158.158.54.35:18010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-themes.php"] [unique_id "apK9WtdHPfW2QFvhmL7WaQAAAGA"]
[Sat Aug 29 05:07:06.464128 2026] [security2:error] [pid 1018003:tid 1018175] [client 68.155.159.216:50178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK9WjAh5Y1i2tUxg4ENcAAABdA"]
[Sat Aug 29 05:07:06.464523 2026] [security2:error] [pid 1018003:tid 1018268] [client 52.139.37.240:29953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greathairkc.com"] [uri "/fw.php"] [unique_id "apK9WjAh5Y1i2tUxg4ENcQAABiw"]
[Sat Aug 29 05:07:06.470305 2026] [security2:error] [pid 1018003:tid 1018202] [client 158.23.184.117:2574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/wp-includes/mani.php"] [unique_id "apK9WjAh5Y1i2tUxg4ENcgAABes"]
[Sat Aug 29 05:07:06.483775 2026] [security2:error] [pid 1028675:tid 1028819] [client 158.23.184.117:11943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dubeyko.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK9WtdHPfW2QFvhmL7WagAAAAk"]
[Sat Aug 29 05:07:06.488306 2026] [security2:error] [pid 1018003:tid 1018275] [client 40.83.93.50:7583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/wp-admin.php"] [unique_id "apK9WjAh5Y1i2tUxg4ENcwAABjM"]
[Sat Aug 29 05:07:06.499090 2026] [security2:error] [pid 1018003:tid 1018157] [client 158.23.147.79:30552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/about.php"] [unique_id "apK9WjAh5Y1i2tUxg4ENdAAABb4"]
[Sat Aug 29 05:07:06.506826 2026] [security2:error] [pid 1028675:tid 1028937] [client 20.48.250.41:60732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/lib.php"] [unique_id "apK9WtdHPfW2QFvhmL7WbAAAAH8"]
[Sat Aug 29 05:07:06.511495 2026] [autoindex:error] [pid 1028675:tid 1028835] [client 43.157.149.188:55172] AH01276: Cannot serve directory /home1/thrbikes/public_html/deargabriel/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://deargabriel.com
[Sat Aug 29 05:07:06.525321 2026] [cgid:error] [pid 1018003:tid 1018256] [client 20.52.41.200:1446] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/cpslggc/404.shtml
[Sat Aug 29 05:07:06.528649 2026] [security2:error] [pid 1018003:tid 1018255] [client 20.196.209.81:22411] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-content/1.php"] [unique_id "apK9WjAh5Y1i2tUxg4ENdgAABh8"]
[Sat Aug 29 05:07:06.528760 2026] [security2:error] [pid 1018003:tid 1018255] [client 20.196.209.81:22411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-content/1.php"] [unique_id "apK9WjAh5Y1i2tUxg4ENdgAABh8"]
[Sat Aug 29 05:07:06.534752 2026] [security2:error] [pid 1018003:tid 1018230] [client 52.139.37.240:32121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/shell.php"] [unique_id "apK9WjAh5Y1i2tUxg4ENdwAABgY"]
[Sat Aug 29 05:07:06.540225 2026] [security2:error] [pid 1028675:tid 1028914] [client 40.83.93.50:13572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-admin/wp-cron.php"] [unique_id "apK9WtdHPfW2QFvhmL7WcAAAAGg"]
[Sat Aug 29 05:07:06.552997 2026] [security2:error] [pid 1028675:tid 1028905] [client 93.123.109.228:39226] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/ADMIN/.env"] [unique_id "apK9WtdHPfW2QFvhmL7WcQAAAF8"]
[Sat Aug 29 05:07:06.553144 2026] [security2:error] [pid 1018003:tid 1018262] [client 52.139.37.240:20763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/wp-admin/min.php"] [unique_id "apK9WjAh5Y1i2tUxg4ENeAAABiY"]
[Sat Aug 29 05:07:06.558617 2026] [security2:error] [pid 1018003:tid 1018236] [client 20.196.209.81:2034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/al.php"] [unique_id "apK9WjAh5Y1i2tUxg4ENeQAABgw"]
[Sat Aug 29 05:07:06.560478 2026] [security2:error] [pid 1018003:tid 1018222] [client 158.23.147.79:32672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/install.php"] [unique_id "apK9WjAh5Y1i2tUxg4ENegAABf8"]
[Sat Aug 29 05:07:06.561508 2026] [security2:error] [pid 1018003:tid 1018182] [client 20.48.160.90:51705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/media.php"] [unique_id "apK9WjAh5Y1i2tUxg4ENewAABdc"]
[Sat Aug 29 05:07:06.567048 2026] [security2:error] [pid 1028675:tid 1028856] [client 93.123.109.228:39206] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/API/.env"] [unique_id "apK9WtdHPfW2QFvhmL7WdgAAAC4"]
[Sat Aug 29 05:07:06.574525 2026] [security2:error] [pid 1028675:tid 1028861] [client 4.205.62.107:22151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/06.php"] [unique_id "apK9WtdHPfW2QFvhmL7WeAAAADM"]
[Sat Aug 29 05:07:06.613801 2026] [security2:error] [pid 1018003:tid 1018195] [client 20.104.49.130:63559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/red.php"] [unique_id "apK9WjAh5Y1i2tUxg4ENfAAABeQ"]
[Sat Aug 29 05:07:06.619871 2026] [security2:error] [pid 1028675:tid 1028873] [client 158.23.184.117:2764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/wp-includes/Test.php"] [unique_id "apK9WtdHPfW2QFvhmL7WewAAAD8"]
[Sat Aug 29 05:07:06.619893 2026] [security2:error] [pid 1028675:tid 1028917] [client 158.158.54.35:20558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/root.php"] [unique_id "apK9WtdHPfW2QFvhmL7WfAAAAGs"]
[Sat Aug 29 05:07:06.632988 2026] [security2:error] [pid 1028675:tid 1028831] [client 158.23.184.117:12052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dubeyko.com"] [uri "/wp-act.php"] [unique_id "apK9WtdHPfW2QFvhmL7WgQAAABU"]
[Sat Aug 29 05:07:06.647057 2026] [security2:error] [pid 1028675:tid 1028855] [client 20.104.18.15:5116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/images.php"] [unique_id "apK9WtdHPfW2QFvhmL7WgwAAAC0"]
[Sat Aug 29 05:07:06.655950 2026] [security2:error] [pid 1028675:tid 1028926] [client 52.139.37.240:29870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greathairkc.com"] [uri "/zwso.php"] [unique_id "apK9WtdHPfW2QFvhmL7WhwAAAHQ"]
[Sat Aug 29 05:07:06.666690 2026] [security2:error] [pid 1028675:tid 1028929] [client 20.48.250.41:59346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/wp-style.php"] [unique_id "apK9WtdHPfW2QFvhmL7WigAAAHc"]
[Sat Aug 29 05:07:06.676407 2026] [cgid:error] [pid 1018003:tid 1018166] [client 20.52.41.200:1446] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/cpslggc/404.shtml
[Sat Aug 29 05:07:06.683478 2026] [security2:error] [pid 1028675:tid 1028922] [client 158.23.147.79:30491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK9WtdHPfW2QFvhmL7WiwAAAHA"]
[Sat Aug 29 05:07:06.696827 2026] [security2:error] [pid 1018003:tid 1018198] [client 20.48.160.90:51265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/mac.php"] [unique_id "apK9WjAh5Y1i2tUxg4ENggAABec"]
[Sat Aug 29 05:07:06.704652 2026] [security2:error] [pid 1028675:tid 1028874] [client 93.123.109.228:39212] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/Api/.env"] [unique_id "apK9WtdHPfW2QFvhmL7WjAAAAEA"]
[Sat Aug 29 05:07:06.717188 2026] [security2:error] [pid 1028675:tid 1028935] [client 168.107.94.195:60898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9WtdHPfW2QFvhmL7WjQAAAH0"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:06.729867 2026] [security2:error] [pid 1028675:tid 1028896] [client 52.139.37.240:32072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK9WtdHPfW2QFvhmL7WjwAAAFY"]
[Sat Aug 29 05:07:06.742125 2026] [security2:error] [pid 1018003:tid 1018155] [client 180.190.5.40:39901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.5.190.180.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK9WjAh5Y1i2tUxg4ENhAAABbw"]
[Sat Aug 29 05:07:06.742263 2026] [security2:error] [pid 1018003:tid 1018155] [client 180.190.5.40:39901] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK9WjAh5Y1i2tUxg4ENhAAABbw"]
[Sat Aug 29 05:07:06.750486 2026] [security2:error] [pid 1018003:tid 1018183] [client 52.139.37.240:20776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/wp-admin/wp-fileesx-449.php"] [unique_id "apK9WjAh5Y1i2tUxg4ENhQAABdg"]
[Sat Aug 29 05:07:06.762977 2026] [security2:error] [pid 1028675:tid 1028880] [client 158.23.184.117:2813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/wp-includes/pomo.php"] [unique_id "apK9WtdHPfW2QFvhmL7WkQAAAEY"]
[Sat Aug 29 05:07:06.773285 2026] [security2:error] [pid 1018003:tid 1018179] [client 93.123.109.228:39176] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/BE/.env"] [unique_id "apK9WjAh5Y1i2tUxg4ENhgAABdQ"]
[Sat Aug 29 05:07:06.777244 2026] [security2:error] [pid 1028675:tid 1028932] [client 158.23.184.117:12047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dubeyko.com"] [uri "/fff.php"] [unique_id "apK9WtdHPfW2QFvhmL7WkwAAAHo"]
[Sat Aug 29 05:07:06.799616 2026] [security2:error] [pid 1018003:tid 1018203] [client 158.23.147.79:63820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK9WjAh5Y1i2tUxg4ENhwAABew"]
[Sat Aug 29 05:07:06.805527 2026] [security2:error] [pid 1018003:tid 1018172] [client 20.151.200.44:47401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/0xs.php"] [unique_id "apK9WjAh5Y1i2tUxg4ENiAAABc0"]
[Sat Aug 29 05:07:06.805840 2026] [security2:error] [pid 1028675:tid 1028841] [client 111.235.68.106:53740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK9WtdHPfW2QFvhmL7WlAAAAB8"]
[Sat Aug 29 05:07:06.805933 2026] [security2:error] [pid 1028675:tid 1028841] [client 111.235.68.106:53740] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK9WtdHPfW2QFvhmL7WlAAAAB8"]
[Sat Aug 29 05:07:06.808388 2026] [security2:error] [pid 1028675:tid 1028858] [client 20.197.61.180:13857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/class_api.php"] [unique_id "apK9WtdHPfW2QFvhmL7WlQAAADA"]
[Sat Aug 29 05:07:06.817694 2026] [security2:error] [pid 1018003:tid 1018190] [client 20.48.250.41:59300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/browse.php"] [unique_id "apK9WjAh5Y1i2tUxg4ENigAABd8"]
[Sat Aug 29 05:07:06.824877 2026] [security2:error] [pid 1018003:tid 1018224] [client 20.52.41.200:1446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-content/admin.php"] [unique_id "apK9WjAh5Y1i2tUxg4ENiwAABgE"]
[Sat Aug 29 05:07:06.845706 2026] [security2:error] [pid 1028675:tid 1028848] [client 20.48.160.90:51695] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "highqualitytea.com"] [uri "/1.php"] [unique_id "apK9WtdHPfW2QFvhmL7WngAAACY"]
[Sat Aug 29 05:07:06.845802 2026] [security2:error] [pid 1028675:tid 1028848] [client 20.48.160.90:51695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/1.php"] [unique_id "apK9WtdHPfW2QFvhmL7WngAAACY"]
[Sat Aug 29 05:07:06.846544 2026] [security2:error] [pid 1028675:tid 1028859] [client 158.23.147.79:65502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-content/admin.php"] [unique_id "apK9WtdHPfW2QFvhmL7WnwAAADE"]
[Sat Aug 29 05:07:06.851413 2026] [security2:error] [pid 1028675:tid 1028933] [client 52.139.37.240:30145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greathairkc.com"] [uri "/admin/function.php"] [unique_id "apK9WtdHPfW2QFvhmL7WoAAAAHs"]
[Sat Aug 29 05:07:06.872922 2026] [security2:error] [pid 1028675:tid 1028822] [client 93.123.109.228:39148] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/Backend/.env"] [unique_id "apK9WtdHPfW2QFvhmL7WpAAAAAw"]
[Sat Aug 29 05:07:06.876996 2026] [security2:error] [pid 1018003:tid 1018217] [client 93.123.109.228:39186] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/APP/.env"] [unique_id "apK9WjAh5Y1i2tUxg4ENjAAABfo"]
[Sat Aug 29 05:07:06.886168 2026] [security2:error] [pid 1018003:tid 1018244] [client 4.205.62.107:65472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/adminer-4.7.6-en.php"] [unique_id "apK9WjAh5Y1i2tUxg4ENjgAABhQ"]
[Sat Aug 29 05:07:06.890999 2026] [security2:error] [pid 1028675:tid 1028850] [client 4.205.62.107:58491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/G-in.php"] [unique_id "apK9WtdHPfW2QFvhmL7WqQAAACg"]
[Sat Aug 29 05:07:06.910865 2026] [security2:error] [pid 1018003:tid 1018159] [client 4.205.62.107:22391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/ms.php"] [unique_id "apK9WjAh5Y1i2tUxg4ENkAAABcA"]
[Sat Aug 29 05:07:06.917591 2026] [security2:error] [pid 1018003:tid 1018159] [client 20.104.18.15:5079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/ops.php"] [unique_id "apK9WjAh5Y1i2tUxg4ENkQAABcA"]
[Sat Aug 29 05:07:06.927535 2026] [security2:error] [pid 1028675:tid 1028881] [client 20.196.209.81:5866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-content/about.php"] [unique_id "apK9WtdHPfW2QFvhmL7WqwAAAEc"]
[Sat Aug 29 05:07:06.928647 2026] [security2:error] [pid 1018003:tid 1018169] [client 52.139.37.240:32029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/wp-content/plugins/linkpreview/il.php"] [unique_id "apK9WjAh5Y1i2tUxg4ENkgAABco"]
[Sat Aug 29 05:07:06.932313 2026] [security2:error] [pid 1018003:tid 1018192] [client 158.23.184.117:11961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dubeyko.com"] [uri "/.tmb/dropdown.php"] [unique_id "apK9WjAh5Y1i2tUxg4ENkwAABeE"]
[Sat Aug 29 05:07:06.938398 2026] [security2:error] [pid 1028675:tid 1028930] [client 158.158.54.35:10332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-trackback.php"] [unique_id "apK9WtdHPfW2QFvhmL7WrAAAAHg"]
[Sat Aug 29 05:07:06.947963 2026] [security2:error] [pid 1018003:tid 1018187] [client 52.139.37.240:21166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/wp-content/themes/min.php"] [unique_id "apK9WjAh5Y1i2tUxg4ENlAAABdw"]
[Sat Aug 29 05:07:06.950074 2026] [security2:error] [pid 1018003:tid 1018196] [client 68.155.159.216:30696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/NewFile.php/"] [unique_id "apK9WjAh5Y1i2tUxg4ENlQAABeU"]
[Sat Aug 29 05:07:06.951272 2026] [security2:error] [pid 1028675:tid 1028833] [client 20.48.250.41:60777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/zoo.php"] [unique_id "apK9WtdHPfW2QFvhmL7WtAAAABc"]
[Sat Aug 29 05:07:06.958705 2026] [security2:error] [pid 1028675:tid 1028851] [client 20.196.209.81:11275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/global.php"] [unique_id "apK9WtdHPfW2QFvhmL7WtgAAACk"]
[Sat Aug 29 05:07:06.980867 2026] [security2:error] [pid 1028675:tid 1028811] [client 158.23.184.117:63751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cworthy.net"] [uri "/wk/admin.php"] [unique_id "apK9WtdHPfW2QFvhmL7WuwAAAAE"]
[Sat Aug 29 05:07:06.980950 2026] [security2:error] [pid 1028675:tid 1028904] [client 93.123.109.228:39206] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/BACK/.env"] [unique_id "apK9WtdHPfW2QFvhmL7WuQAAAF4"]
[Sat Aug 29 05:07:06.984847 2026] [security2:error] [pid 1028675:tid 1028854] [client 93.123.109.228:39226] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/BACKEND/.env"] [unique_id "apK9WtdHPfW2QFvhmL7WvAAAACw"]
[Sat Aug 29 05:07:06.987962 2026] [security2:error] [pid 1018003:tid 1018246] [client 40.83.93.50:3872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/wp-configs.php"] [unique_id "apK9WjAh5Y1i2tUxg4ENmAAABhY"]
[Sat Aug 29 05:07:06.989192 2026] [security2:error] [pid 1028675:tid 1028817] [client 68.155.159.216:64423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK9WtdHPfW2QFvhmL7WvQAAAAc"]
[Sat Aug 29 05:07:07.021485 2026] [security2:error] [pid 1018003:tid 1018230] [client 20.48.160.90:51290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/classwithtostring.php"] [unique_id "apK9WzAh5Y1i2tUxg4ENnQAABgY"]
[Sat Aug 29 05:07:07.036126 2026] [security2:error] [pid 1028675:tid 1028823] [client 20.203.141.11:45420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/w.php"] [unique_id "apK9W9dHPfW2QFvhmL7WvwAAAA0"]
[Sat Aug 29 05:07:07.049095 2026] [security2:error] [pid 1028675:tid 1028849] [client 40.83.93.50:13608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-admin/wp-links-opml.php"] [unique_id "apK9W9dHPfW2QFvhmL7WwAAAACc"]
[Sat Aug 29 05:07:07.051112 2026] [security2:error] [pid 1018003:tid 1018262] [client 158.23.184.117:2590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/wp-admin/link-add.php"] [unique_id "apK9WzAh5Y1i2tUxg4ENoQAABiY"]
[Sat Aug 29 05:07:07.064506 2026] [security2:error] [pid 1018003:tid 1018157] [client 52.139.37.240:29999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greathairkc.com"] [uri "/zoom1.php"] [unique_id "apK9WzAh5Y1i2tUxg4ENogAABb4"]
[Sat Aug 29 05:07:07.065193 2026] [security2:error] [pid 1018003:tid 1018163] [client 158.158.54.35:35228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/p.php"] [unique_id "apK9WzAh5Y1i2tUxg4ENowAABcQ"]
[Sat Aug 29 05:07:07.075998 2026] [security2:error] [pid 1028675:tid 1028835] [client 20.104.18.15:13757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/img.php"] [unique_id "apK9W9dHPfW2QFvhmL7WwgAAABk"]
[Sat Aug 29 05:07:07.077920 2026] [security2:error] [pid 1018003:tid 1018216] [client 158.23.184.117:12036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dubeyko.com"] [uri "/robots.php"] [unique_id "apK9WzAh5Y1i2tUxg4ENpAAABfk"]
[Sat Aug 29 05:07:07.083546 2026] [security2:error] [pid 1028675:tid 1028936] [client 93.123.109.228:39100] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/Be/.env"] [unique_id "apK9W9dHPfW2QFvhmL7WwwAAAH4"]
[Sat Aug 29 05:07:07.086184 2026] [security2:error] [pid 1028675:tid 1028889] [client 20.104.18.15:5117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/coffexium.php"] [unique_id "apK9W9dHPfW2QFvhmL7WxAAAAE8"]
[Sat Aug 29 05:07:07.086670 2026] [security2:error] [pid 1028675:tid 1028856] [client 68.155.159.216:33737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-admin/about.php"] [unique_id "apK9W9dHPfW2QFvhmL7WxQAAAC4"]
[Sat Aug 29 05:07:07.091757 2026] [security2:error] [pid 1028675:tid 1028832] [client 158.23.147.79:17415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-content/banners/about.php"] [unique_id "apK9W9dHPfW2QFvhmL7WxgAAABY"]
[Sat Aug 29 05:07:07.096365 2026] [security2:error] [pid 1028675:tid 1028830] [client 168.107.94.195:61245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9W9dHPfW2QFvhmL7WxwAAABQ"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:07.102110 2026] [security2:error] [pid 1028675:tid 1028826] [client 68.155.159.216:12252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/goat1.php"] [unique_id "apK9W9dHPfW2QFvhmL7WyAAAABA"]
[Sat Aug 29 05:07:07.117613 2026] [security2:error] [pid 1028675:tid 1028872] [client 103.162.125.59:55748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.125.162.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK9W9dHPfW2QFvhmL7WyQAAAD4"]
[Sat Aug 29 05:07:07.117772 2026] [security2:error] [pid 1028675:tid 1028872] [client 103.162.125.59:55748] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK9W9dHPfW2QFvhmL7WyQAAAD4"]
[Sat Aug 29 05:07:07.125302 2026] [security2:error] [pid 1028675:tid 1028871] [client 158.23.184.117:39990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cworthy.net"] [uri "/admin.php"] [unique_id "apK9W9dHPfW2QFvhmL7WygAAAD0"]
[Sat Aug 29 05:07:07.133271 2026] [security2:error] [pid 1028675:tid 1028873] [client 20.104.18.15:36722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/vpn.php"] [unique_id "apK9W9dHPfW2QFvhmL7WywAAAD8"]
[Sat Aug 29 05:07:07.136295 2026] [security2:error] [pid 1028675:tid 1028898] [client 20.48.250.41:60718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/elp.php"] [unique_id "apK9W9dHPfW2QFvhmL7WzAAAAFg"]
[Sat Aug 29 05:07:07.140456 2026] [security2:error] [pid 1028675:tid 1028842] [client 52.139.37.240:21146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/wp-content/themes/x/bypass.php"] [unique_id "apK9W9dHPfW2QFvhmL7WzgAAACA"]
[Sat Aug 29 05:07:07.145684 2026] [security2:error] [pid 1028675:tid 1028828] [client 52.139.37.240:51762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/wp-header-json.php"] [unique_id "apK9W9dHPfW2QFvhmL7W0QAAABI"]
[Sat Aug 29 05:07:07.162962 2026] [security2:error] [pid 1018003:tid 1018170] [client 20.48.160.90:51617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/wp-ws68.php"] [unique_id "apK9WzAh5Y1i2tUxg4ENqQAABcs"]
[Sat Aug 29 05:07:07.188680 2026] [security2:error] [pid 1028675:tid 1028860] [client 20.104.49.130:60971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/x1da.php"] [unique_id "apK9W9dHPfW2QFvhmL7W1AAAADI"]
[Sat Aug 29 05:07:07.197046 2026] [security2:error] [pid 1028675:tid 1028922] [client 158.23.184.117:2769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/wp-includes/Text.php"] [unique_id "apK9W9dHPfW2QFvhmL7W1QAAAHA"]
[Sat Aug 29 05:07:07.198027 2026] [security2:error] [pid 1028675:tid 1028900] [client 4.205.62.107:53326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/ebahvhhh.php"] [unique_id "apK9W9dHPfW2QFvhmL7W1gAAAFo"]
[Sat Aug 29 05:07:07.215952 2026] [security2:error] [pid 1018003:tid 1018273] [client 20.104.18.15:13716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/222.php"] [unique_id "apK9WzAh5Y1i2tUxg4ENrQAABjE"]
[Sat Aug 29 05:07:07.224731 2026] [security2:error] [pid 1018003:tid 1018191] [client 68.155.159.216:64470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK9WzAh5Y1i2tUxg4ENrgAABeA"]
[Sat Aug 29 05:07:07.226299 2026] [security2:error] [pid 1028675:tid 1028933] [client 20.104.18.15:5108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/BDKR28WP.php"] [unique_id "apK9W9dHPfW2QFvhmL7W2gAAAHs"]
[Sat Aug 29 05:07:07.230471 2026] [security2:error] [pid 1028675:tid 1028894] [client 68.155.159.216:1935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/goods.php"] [unique_id "apK9W9dHPfW2QFvhmL7W3QAAAFQ"]
[Sat Aug 29 05:07:07.232310 2026] [security2:error] [pid 1028675:tid 1028921] [client 68.155.159.216:24558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK9W9dHPfW2QFvhmL7W4gAAAG8"]
[Sat Aug 29 05:07:07.236319 2026] [security2:error] [pid 1028675:tid 1028880] [client 158.23.184.117:11949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dubeyko.com"] [uri "/.well-known/install.php"] [unique_id "apK9W9dHPfW2QFvhmL7W4wAAAEY"]
[Sat Aug 29 05:07:07.259419 2026] [security2:error] [pid 1028675:tid 1028853] [client 52.139.37.240:29831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greathairkc.com"] [uri "/about.php7"] [unique_id "apK9W9dHPfW2QFvhmL7W5gAAACs"]
[Sat Aug 29 05:07:07.266559 2026] [security2:error] [pid 1028675:tid 1028931] [client 20.48.250.41:59340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/666.php"] [unique_id "apK9W9dHPfW2QFvhmL7W6AAAAHk"]
[Sat Aug 29 05:07:07.269412 2026] [security2:error] [pid 1028675:tid 1028881] [client 20.151.200.44:47333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/waf.php"] [unique_id "apK9W9dHPfW2QFvhmL7W6QAAAEc"]
[Sat Aug 29 05:07:07.269910 2026] [security2:error] [pid 1028675:tid 1028859] [client 158.23.184.117:56526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cworthy.net"] [uri "/goods.php"] [unique_id "apK9W9dHPfW2QFvhmL7W6gAAADE"]
[Sat Aug 29 05:07:07.273988 2026] [security2:error] [pid 1028675:tid 1028772] [remote 93.123.109.228:51634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/.wp-config.php.swp"] [unique_id "apK9W9dHPfW2QFvhmL7W6wAAW1s"]
[Sat Aug 29 05:07:07.276140 2026] [security2:error] [pid 1028675:tid 1028863] [client 20.52.41.200:1417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-configs.php"] [unique_id "apK9W9dHPfW2QFvhmL7W7AAAADU"]
[Sat Aug 29 05:07:07.279412 2026] [security2:error] [pid 1028675:tid 1028930] [client 20.104.18.15:36558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/shiny.php"] [unique_id "apK9W9dHPfW2QFvhmL7W7gAAAHg"]
[Sat Aug 29 05:07:07.292168 2026] [security2:error] [pid 1018003:tid 1018238] [client 68.155.159.216:51300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/packed.php"] [unique_id "apK9WzAh5Y1i2tUxg4ENsgAABg4"]
[Sat Aug 29 05:07:07.331061 2026] [security2:error] [pid 1028675:tid 1028845] [client 20.196.209.81:22452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-content/admin-header.php"] [unique_id "apK9W9dHPfW2QFvhmL7W8AAAACM"]
[Sat Aug 29 05:07:07.340265 2026] [security2:error] [pid 1028675:tid 1028918] [client 4.205.62.107:53251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/xmy.php"] [unique_id "apK9W9dHPfW2QFvhmL7W8QAAAGw"]
[Sat Aug 29 05:07:07.340265 2026] [security2:error] [pid 1018003:tid 1018179] [client 52.139.37.240:32078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/zup.php"] [unique_id "apK9WzAh5Y1i2tUxg4ENswAABdQ"]
[Sat Aug 29 05:07:07.343875 2026] [security2:error] [pid 1028675:tid 1028821] [client 20.48.160.90:51684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/simple.php"] [unique_id "apK9W9dHPfW2QFvhmL7W8gAAAAs"]
[Sat Aug 29 05:07:07.347235 2026] [security2:error] [pid 1018003:tid 1018261] [client 158.23.147.79:48318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-admin/css/index.php"] [unique_id "apK9WzAh5Y1i2tUxg4ENtAAABiU"]
[Sat Aug 29 05:07:07.353275 2026] [security2:error] [pid 1018003:tid 1018265] [client 158.23.184.117:2561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/wp-trackback.php"] [unique_id "apK9WzAh5Y1i2tUxg4ENtQAABik"]
[Sat Aug 29 05:07:07.358686 2026] [security2:error] [pid 1018003:tid 1018231] [client 158.23.147.79:26435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/xmlrpc.php"] [unique_id "apK9WzAh5Y1i2tUxg4ENuAAABgc"]
[Sat Aug 29 05:07:07.360242 2026] [security2:error] [pid 1028675:tid 1028857] [client 20.104.18.15:13739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/key.php"] [unique_id "apK9W9dHPfW2QFvhmL7W9QAAAC8"]
[Sat Aug 29 05:07:07.373738 2026] [security2:error] [pid 1018003:tid 1018198] [client 20.196.209.81:11274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/update.php"] [unique_id "apK9WzAh5Y1i2tUxg4ENuQAABec"]
[Sat Aug 29 05:07:07.374836 2026] [security2:error] [pid 1028675:tid 1028937] [client 158.23.147.79:50100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/makeasmtp.php"] [unique_id "apK9W9dHPfW2QFvhmL7W-AAAAH8"]
[Sat Aug 29 05:07:07.375026 2026] [security2:error] [pid 1028675:tid 1028810] [client 20.104.18.15:5063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/sf.php"] [unique_id "apK9W9dHPfW2QFvhmL7W-QAAAAA"]
[Sat Aug 29 05:07:07.377949 2026] [core:error] [pid 1028675:tid 1028916] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:07.377967 2026] [core:error] [pid 1028675:tid 1028916] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:07.414767 2026] [security2:error] [pid 1018003:tid 1018219] [client 158.23.184.117:63788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cworthy.net"] [uri "/w.php"] [unique_id "apK9WzAh5Y1i2tUxg4ENvAAABfw"]
[Sat Aug 29 05:07:07.432663 2026] [security2:error] [pid 1028675:tid 1028872] [client 20.48.250.41:60747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/knmt.php"] [unique_id "apK9W9dHPfW2QFvhmL7W_gAAAD4"]
[Sat Aug 29 05:07:07.435080 2026] [security2:error] [pid 1018003:tid 1018187] [client 93.123.109.228:39166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK9WzAh5Y1i2tUxg4ENvQAABdw"]
[Sat Aug 29 05:07:07.439663 2026] [security2:error] [pid 1028675:tid 1028923] [client 158.23.184.117:11947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dubeyko.com"] [uri "/wp-admin/about.php"] [unique_id "apK9W9dHPfW2QFvhmL7XAQAAAHE"]
[Sat Aug 29 05:07:07.455063 2026] [security2:error] [pid 1028675:tid 1028898] [client 20.104.18.15:36612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/goods.php"] [unique_id "apK9W9dHPfW2QFvhmL7XBAAAAFg"]
[Sat Aug 29 05:07:07.455259 2026] [security2:error] [pid 1028675:tid 1028936] [client 52.139.37.240:30148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greathairkc.com"] [uri "/cron.php"] [unique_id "apK9W9dHPfW2QFvhmL7XBQAAAH4"]
[Sat Aug 29 05:07:07.466880 2026] [security2:error] [pid 1028675:tid 1028877] [client 40.83.93.50:17327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/essexec.php"] [unique_id "apK9W9dHPfW2QFvhmL7XBgAAAEM"]
[Sat Aug 29 05:07:07.472818 2026] [security2:error] [pid 1028675:tid 1028915] [client 158.23.147.79:25472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-includes/content.php"] [unique_id "apK9W9dHPfW2QFvhmL7XCAAAAGk"]
[Sat Aug 29 05:07:07.478174 2026] [security2:error] [pid 1028675:tid 1028855] [client 168.107.94.195:61526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9W9dHPfW2QFvhmL7XCQAAAC0"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:07.480452 2026] [security2:error] [pid 1018003:tid 1018268] [client 20.48.160.90:51613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/aaa.php"] [unique_id "apK9WzAh5Y1i2tUxg4ENvwAABiw"]
[Sat Aug 29 05:07:07.483730 2026] [security2:error] [pid 1018003:tid 1018202] [client 68.155.159.216:33725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/classwithtostring.php"] [unique_id "apK9WzAh5Y1i2tUxg4ENwAAABes"]
[Sat Aug 29 05:07:07.502344 2026] [security2:error] [pid 1018003:tid 1018224] [client 20.203.141.11:43359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/ahax.php"] [unique_id "apK9WzAh5Y1i2tUxg4ENwgAABgE"]
[Sat Aug 29 05:07:07.507882 2026] [security2:error] [pid 1028675:tid 1028887] [client 20.104.18.15:4993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/k.php"] [unique_id "apK9W9dHPfW2QFvhmL7XCwAAAE0"]
[Sat Aug 29 05:07:07.511187 2026] [security2:error] [pid 1018003:tid 1018221] [client 158.23.184.117:2954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/wp-admin/maint.php"] [unique_id "apK9WzAh5Y1i2tUxg4ENwwAABf4"]
[Sat Aug 29 05:07:07.511970 2026] [security2:error] [pid 1018003:tid 1018213] [client 68.155.159.216:18419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-content/admin.php"] [unique_id "apK9WzAh5Y1i2tUxg4ENxAAABfY"]
[Sat Aug 29 05:07:07.517025 2026] [security2:error] [pid 1028675:tid 1028902] [client 40.83.93.50:20850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-admin/wp-load.php"] [unique_id "apK9W9dHPfW2QFvhmL7XDAAAAFw"]
[Sat Aug 29 05:07:07.527492 2026] [security2:error] [pid 1028675:tid 1028835] [client 158.158.54.35:14923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/a1.php"] [unique_id "apK9W9dHPfW2QFvhmL7XDQAAABk"]
[Sat Aug 29 05:07:07.529231 2026] [security2:error] [pid 1028675:tid 1028825] [client 20.104.18.15:13736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/chosen.php"] [unique_id "apK9W9dHPfW2QFvhmL7XDgAAAA8"]
[Sat Aug 29 05:07:07.533000 2026] [security2:error] [pid 1028675:tid 1028842] [client 52.139.37.240:32110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/a9.php"] [unique_id "apK9W9dHPfW2QFvhmL7XDwAAACA"]
[Sat Aug 29 05:07:07.536669 2026] [security2:error] [pid 1028675:tid 1028854] [client 20.197.61.180:13856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/aksinet.php"] [unique_id "apK9W9dHPfW2QFvhmL7XEAAAACw"]
[Sat Aug 29 05:07:07.548594 2026] [security2:error] [pid 1018003:tid 1018270] [client 68.155.159.216:49250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-admin/dropdown.php"] [unique_id "apK9WzAh5Y1i2tUxg4ENxQAABi4"]
[Sat Aug 29 05:07:07.558257 2026] [security2:error] [pid 1018003:tid 1018256] [client 158.23.184.117:63775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cworthy.net"] [uri "/new.php"] [unique_id "apK9WzAh5Y1i2tUxg4ENxgAABiA"]
[Sat Aug 29 05:07:07.565612 2026] [security2:error] [pid 1028675:tid 1028920] [client 158.158.54.35:38417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/222.php"] [unique_id "apK9W9dHPfW2QFvhmL7XEgAAAG4"]
[Sat Aug 29 05:07:07.576168 2026] [security2:error] [pid 1028675:tid 1028891] [client 52.139.37.240:21423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK9W9dHPfW2QFvhmL7XFAAAAFE"]
[Sat Aug 29 05:07:07.605534 2026] [security2:error] [pid 1028675:tid 1028837] [client 20.48.250.41:62516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/sbhu.php"] [unique_id "apK9W9dHPfW2QFvhmL7XFwAAABs"]
[Sat Aug 29 05:07:07.611935 2026] [security2:error] [pid 1018003:tid 1018157] [client 158.23.184.117:11929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dubeyko.com"] [uri "/wp-content/backup.php"] [unique_id "apK9WzAh5Y1i2tUxg4ENywAABb4"]
[Sat Aug 29 05:07:07.613631 2026] [security2:error] [pid 1018003:tid 1018182] [client 158.23.147.79:30669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/themes.php"] [unique_id "apK9WzAh5Y1i2tUxg4ENzAAABdc"]
[Sat Aug 29 05:07:07.649066 2026] [security2:error] [pid 1018003:tid 1018236] [client 52.139.37.240:29956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greathairkc.com"] [uri "/wp-2019.php"] [unique_id "apK9WzAh5Y1i2tUxg4ENzQAABgw"]
[Sat Aug 29 05:07:07.662733 2026] [security2:error] [pid 1028675:tid 1028895] [client 158.23.184.117:2790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/wp-includes/num.php"] [unique_id "apK9W9dHPfW2QFvhmL7XIwAAAFU"]
[Sat Aug 29 05:07:07.666035 2026] [security2:error] [pid 1018003:tid 1018164] [client 20.104.18.15:13658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/file1221.php"] [unique_id "apK9WzAh5Y1i2tUxg4ENzwAABcU"]
[Sat Aug 29 05:07:07.667564 2026] [security2:error] [pid 1028675:tid 1028859] [client 93.123.109.228:39132] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/admin-app/.env"] [unique_id "apK9W9dHPfW2QFvhmL7XJAAAADE"]
[Sat Aug 29 05:07:07.672261 2026] [security2:error] [pid 1028675:tid 1028927] [client 20.104.18.15:36654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/alfa.php"] [unique_id "apK9W9dHPfW2QFvhmL7XJQAAAHU"]
[Sat Aug 29 05:07:07.685825 2026] [security2:error] [pid 1028675:tid 1028892] [client 20.104.18.15:5102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/82.php"] [unique_id "apK9W9dHPfW2QFvhmL7XJwAAAFI"]
[Sat Aug 29 05:07:07.688701 2026] [security2:error] [pid 1018003:tid 1018277] [client 158.23.147.79:32594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-content/x/index.php"] [unique_id "apK9WzAh5Y1i2tUxg4EN0gAABjU"]
[Sat Aug 29 05:07:07.712971 2026] [security2:error] [pid 1028675:tid 1028897] [client 4.205.62.107:22404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/xin1.php"] [unique_id "apK9W9dHPfW2QFvhmL7XKQAAAFc"]
[Sat Aug 29 05:07:07.722728 2026] [security2:error] [pid 1028675:tid 1028888] [client 158.23.184.117:39989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cworthy.net"] [uri "/php8.php"] [unique_id "apK9W9dHPfW2QFvhmL7XKwAAAE4"]
[Sat Aug 29 05:07:07.728274 2026] [security2:error] [pid 1028675:tid 1028881] [client 52.139.37.240:32030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/admin/index.php"] [unique_id "apK9W9dHPfW2QFvhmL7XLQAAAEc"]
[Sat Aug 29 05:07:07.729294 2026] [security2:error] [pid 1028675:tid 1028845] [client 20.104.49.130:60740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/chosen.php"] [unique_id "apK9W9dHPfW2QFvhmL7XLgAAACM"]
[Sat Aug 29 05:07:07.730088 2026] [security2:error] [pid 1028675:tid 1028899] [client 20.196.209.81:13157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-content/admin.php"] [unique_id "apK9W9dHPfW2QFvhmL7XLwAAAFk"]
[Sat Aug 29 05:07:07.730153 2026] [security2:error] [pid 1028675:tid 1028875] [client 20.52.41.200:1267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-includes/index.php"] [unique_id "apK9W9dHPfW2QFvhmL7XMAAAAEE"]
[Sat Aug 29 05:07:07.738754 2026] [security2:error] [pid 1028675:tid 1028821] [client 20.48.250.41:59390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/a332.php"] [unique_id "apK9W9dHPfW2QFvhmL7XMgAAAAs"]
[Sat Aug 29 05:07:07.766244 2026] [security2:error] [pid 1028675:tid 1028873] [client 93.123.109.228:39226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/admin/phpinfo.php"] [unique_id "apK9W9dHPfW2QFvhmL7XNgAAAD8"]
[Sat Aug 29 05:07:07.766433 2026] [security2:error] [pid 1028675:tid 1028817] [client 158.23.184.117:11960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dubeyko.com"] [uri "/.well-known/aa.php"] [unique_id "apK9W9dHPfW2QFvhmL7XNwAAAAc"]
[Sat Aug 29 05:07:07.769675 2026] [security2:error] [pid 1028675:tid 1028924] [client 52.139.37.240:21438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/wp-info.php"] [unique_id "apK9W9dHPfW2QFvhmL7XOAAAAHI"]
[Sat Aug 29 05:07:07.801791 2026] [security2:error] [pid 1028675:tid 1028874] [client 68.155.159.216:16082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-content/themes/index.php"] [unique_id "apK9W9dHPfW2QFvhmL7XPAAAAEA"]
[Sat Aug 29 05:07:07.808469 2026] [security2:error] [pid 1018003:tid 1018217] [client 68.155.159.216:6036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/file5.php"] [unique_id "apK9WzAh5Y1i2tUxg4EN1gAABfo"]
[Sat Aug 29 05:07:07.810295 2026] [security2:error] [pid 1018003:tid 1018198] [client 20.104.18.15:13645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/nox.php"] [unique_id "apK9WzAh5Y1i2tUxg4EN1wAABec"]
[Sat Aug 29 05:07:07.814521 2026] [security2:error] [pid 1028675:tid 1028914] [client 158.23.184.117:2563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/identity.php"] [unique_id "apK9W9dHPfW2QFvhmL7XPQAAAGg"]
[Sat Aug 29 05:07:07.825707 2026] [security2:error] [pid 1028675:tid 1028935] [client 20.104.18.15:36584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/33.php"] [unique_id "apK9W9dHPfW2QFvhmL7XPgAAAH0"]
[Sat Aug 29 05:07:07.836886 2026] [security2:error] [pid 1018003:tid 1018159] [client 158.23.147.79:30588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-mail.php"] [unique_id "apK9WzAh5Y1i2tUxg4EN2QAABcA"]
[Sat Aug 29 05:07:07.838731 2026] [security2:error] [pid 1028675:tid 1028898] [client 52.139.37.240:30153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greathairkc.com"] [uri "/gecko-new.php"] [unique_id "apK9W9dHPfW2QFvhmL7XPwAAAFg"]
[Sat Aug 29 05:07:07.842314 2026] [http2:warn] [pid 1017536:tid 1017690] [client 57.141.14.59:50242] h2_stream(1017536-275-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:07:07.858995 2026] [security2:error] [pid 1018003:tid 1018187] [client 168.107.94.195:61827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9WzAh5Y1i2tUxg4EN2wAABdw"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:07.868527 2026] [security2:error] [pid 1018003:tid 1018258] [client 158.23.184.117:63744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cworthy.net"] [uri "/wp-content/themes/admin.php"] [unique_id "apK9WzAh5Y1i2tUxg4EN3AAABiI"]
[Sat Aug 29 05:07:07.897596 2026] [cgid:error] [pid 1018003:tid 1018177] [client 34.7.40.70:9784] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:07:07.898233 2026] [security2:error] [pid 1028675:tid 1028906] [client 34.7.40.70:9824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/prod/.env"] [unique_id "apK9W9dHPfW2QFvhmL7XSwAAAGA"]
[Sat Aug 29 05:07:07.899593 2026] [security2:error] [pid 1018003:tid 1018246] [client 20.104.18.15:5002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/dex.php"] [unique_id "apK9WzAh5Y1i2tUxg4EN3gAABhY"]
[Sat Aug 29 05:07:07.900495 2026] [security2:error] [pid 1018003:tid 1018233] [client 34.7.40.70:9844] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/test/.env"] [unique_id "apK9WzAh5Y1i2tUxg4EN3wAABgk"]
[Sat Aug 29 05:07:07.900653 2026] [security2:error] [pid 1018003:tid 1018203] [client 34.7.40.70:9880] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/internal/.env"] [unique_id "apK9WzAh5Y1i2tUxg4EN4AAABew"]
[Sat Aug 29 05:07:07.901931 2026] [security2:error] [pid 1028675:tid 1028812] [client 34.7.40.70:9864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/services/.env"] [unique_id "apK9W9dHPfW2QFvhmL7XTAAAAAI"]
[Sat Aug 29 05:07:07.902104 2026] [security2:error] [pid 1018003:tid 1018160] [client 20.196.209.81:15177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/blog.php"] [unique_id "apK9WzAh5Y1i2tUxg4EN4QAABcE"]
[Sat Aug 29 05:07:07.904664 2026] [security2:error] [pid 1028675:tid 1028867] [client 34.7.40.70:9800] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/back/.env"] [unique_id "apK9W9dHPfW2QFvhmL7XTQAAADk"]
[Sat Aug 29 05:07:07.904958 2026] [security2:error] [pid 1018003:tid 1018183] [client 34.7.40.70:9820] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/development/.env"] [unique_id "apK9WzAh5Y1i2tUxg4EN4wAABdg"]
[Sat Aug 29 05:07:07.908526 2026] [security2:error] [pid 1028675:tid 1028937] [client 34.7.40.70:9804] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/backend-api/.env"] [unique_id "apK9W9dHPfW2QFvhmL7XTgAAAH8"]
[Sat Aug 29 05:07:07.908699 2026] [security2:error] [pid 1028675:tid 1028831] [client 34.7.40.70:10014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.40.7.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/config/env.php"] [unique_id "apK9W9dHPfW2QFvhmL7XUQAAABU"]
[Sat Aug 29 05:07:07.910816 2026] [security2:error] [pid 1028675:tid 1028810] [client 34.7.40.70:9928] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/backend/api/.env"] [unique_id "apK9W9dHPfW2QFvhmL7XUAAAAAA"]
[Sat Aug 29 05:07:07.910840 2026] [security2:error] [pid 1018003:tid 1018172] [client 34.7.40.70:9896] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/app/backend/.env"] [unique_id "apK9WzAh5Y1i2tUxg4EN5AAABc0"]
[Sat Aug 29 05:07:07.910874 2026] [security2:error] [pid 1018003:tid 1018190] [client 34.7.40.70:9848] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/node/.env"] [unique_id "apK9WzAh5Y1i2tUxg4EN5QAABd8"]
[Sat Aug 29 05:07:07.911177 2026] [security2:error] [pid 1028675:tid 1028857] [client 34.7.40.70:9828] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/stage/.env"] [unique_id "apK9W9dHPfW2QFvhmL7XUgAAAC8"]
[Sat Aug 29 05:07:07.911635 2026] [cgid:error] [pid 1018003:tid 1018238] [client 34.7.40.70:9962] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:07:07.911977 2026] [security2:error] [pid 1018003:tid 1018174] [client 158.23.184.117:11925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dubeyko.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "apK9WzAh5Y1i2tUxg4EN6AAABc8"]
[Sat Aug 29 05:07:07.914926 2026] [security2:error] [pid 1018003:tid 1018265] [client 34.7.40.70:10028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/private/.env"] [unique_id "apK9WzAh5Y1i2tUxg4EN5gAABik"]
[Sat Aug 29 05:07:07.915082 2026] [security2:error] [pid 1028675:tid 1028856] [client 34.7.40.70:9932] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/frontend/.env.local"] [unique_id "apK9W9dHPfW2QFvhmL7XWQAAAC4"]
[Sat Aug 29 05:07:07.916695 2026] [cgid:error] [pid 1028675:tid 1028849] [client 34.7.40.70:9918] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:07:07.916697 2026] [cgid:error] [pid 1028675:tid 1028905] [client 34.7.40.70:9946] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:07:07.917225 2026] [security2:error] [pid 1028675:tid 1028850] [client 34.7.40.70:10018] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/src/api/.env"] [unique_id "apK9W9dHPfW2QFvhmL7XUwAAACg"]
[Sat Aug 29 05:07:07.920523 2026] [security2:error] [pid 1028675:tid 1028826] [client 34.7.40.70:9994] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/apps/backend/.env"] [unique_id "apK9W9dHPfW2QFvhmL7XWgAAABA"]
[Sat Aug 29 05:07:07.921317 2026] [cgid:error] [pid 1028675:tid 1028813] [client 34.7.40.70:9998] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:07:07.921676 2026] [security2:error] [pid 1028675:tid 1028839] [client 34.7.40.70:9984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/apps/api/.env"] [unique_id "apK9W9dHPfW2QFvhmL7XVQAAAB0"]
[Sat Aug 29 05:07:07.922714 2026] [cgid:error] [pid 1028675:tid 1028819] [client 34.7.40.70:9944] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:07:07.923911 2026] [cgid:error] [pid 1028675:tid 1028872] [client 34.7.40.70:10004] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:07:07.924180 2026] [cgid:error] [pid 1028675:tid 1028917] [client 34.7.40.70:10016] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:07:07.924611 2026] [security2:error] [pid 1028675:tid 1028861] [client 34.7.40.70:9990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/database/.env"] [unique_id "apK9W9dHPfW2QFvhmL7XXwAAADM"]
[Sat Aug 29 05:07:07.924832 2026] [cgid:error] [pid 1028675:tid 1028830] [client 34.7.40.70:9972] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:07:07.926668 2026] [cgid:error] [pid 1028675:tid 1028832] [client 34.7.40.70:9964] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:07:07.929042 2026] [security2:error] [pid 1018003:tid 1018234] [client 52.139.37.240:32706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/makeasmtp.php"] [unique_id "apK9WzAh5Y1i2tUxg4EN6QAABgo"]
[Sat Aug 29 05:07:07.929287 2026] [security2:error] [pid 1018003:tid 1018221] [client 158.23.147.79:38746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/log-mama/function.php"] [unique_id "apK9WzAh5Y1i2tUxg4EN6gAABf4"]
[Sat Aug 29 05:07:07.931653 2026] [security2:error] [pid 1018003:tid 1018212] [client 20.48.250.41:62529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/ws66.php"] [unique_id "apK9WzAh5Y1i2tUxg4EN7AAABfU"]
[Sat Aug 29 05:07:07.934617 2026] [security2:error] [pid 1028675:tid 1028916] [client 34.7.40.70:9902] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/app/api/.env"] [unique_id "apK9W9dHPfW2QFvhmL7XYAAAAGo"]
[Sat Aug 29 05:07:07.938006 2026] [cgid:error] [pid 1018003:tid 1018261] [client 34.7.40.70:9978] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:07:07.938462 2026] [cgid:error] [pid 1018003:tid 1018179] [client 34.7.40.70:9956] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:07:07.941154 2026] [cgid:error] [pid 1028675:tid 1028833] [client 34.7.40.70:9980] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/textualconcepts/404.shtml
[Sat Aug 29 05:07:07.941322 2026] [security2:error] [pid 1028675:tid 1028835] [client 20.104.18.15:13750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/akismet.php"] [unique_id "apK9W9dHPfW2QFvhmL7XYgAAABk"]
[Sat Aug 29 05:07:07.947334 2026] [security2:error] [pid 1028675:tid 1028825] [client 20.151.200.44:47342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/bnnof6.php"] [unique_id "apK9W9dHPfW2QFvhmL7XYwAAAA8"]
[Sat Aug 29 05:07:07.947494 2026] [security2:error] [pid 1018003:tid 1018261] [client 34.7.40.70:9978] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/404.shtml"] [unique_id "apK9WzAh5Y1i2tUxg4EN5wAABiU"]
[Sat Aug 29 05:07:07.947604 2026] [security2:error] [pid 1018003:tid 1018179] [client 34.7.40.70:9956] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "textualconcepts.lowfatdinnermenus.com"] [uri "/404.shtml"] [unique_id "apK9WzAh5Y1i2tUxg4EN6wAABdQ"]
[Sat Aug 29 05:07:07.953700 2026] [security2:error] [pid 1028675:tid 1028858] [client 158.23.147.79:65482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/xmlrpc.php"] [unique_id "apK9W9dHPfW2QFvhmL7XZAAAADA"]
[Sat Aug 29 05:07:07.964277 2026] [security2:error] [pid 1018003:tid 1018156] [client 20.203.141.11:11201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/shell.php"] [unique_id "apK9WzAh5Y1i2tUxg4EN7QAABb0"]
[Sat Aug 29 05:07:07.966972 2026] [security2:error] [pid 1028675:tid 1028890] [client 52.139.37.240:21154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/wp-wordfence-waf.php"] [unique_id "apK9W9dHPfW2QFvhmL7XZgAAAFA"]
[Sat Aug 29 05:07:07.971868 2026] [security2:error] [pid 1018003:tid 1018256] [client 20.104.49.130:60935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/yawa.php"] [unique_id "apK9WzAh5Y1i2tUxg4EN7gAABiA"]
[Sat Aug 29 05:07:07.974004 2026] [security2:error] [pid 1028675:tid 1028862] [client 40.83.93.50:7599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/hello.php"] [unique_id "apK9W9dHPfW2QFvhmL7XZwAAADQ"]
[Sat Aug 29 05:07:07.984774 2026] [security2:error] [pid 1018003:tid 1018184] [client 158.158.54.35:29664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9WzAh5Y1i2tUxg4EN8AAABdk"]
[Sat Aug 29 05:07:07.989295 2026] [security2:error] [pid 1028675:tid 1028884] [client 20.104.18.15:36660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/133.php"] [unique_id "apK9W9dHPfW2QFvhmL7XaQAAAEo"]
[Sat Aug 29 05:07:07.990366 2026] [security2:error] [pid 1028675:tid 1028933] [client 93.123.109.228:39162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/admin_phpinfo.php"] [unique_id "apK9W9dHPfW2QFvhmL7XagAAAHs"]
[Sat Aug 29 05:07:07.995169 2026] [security2:error] [pid 1028675:tid 1028828] [client 40.83.93.50:20845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-admin/wp-mail.php"] [unique_id "apK9W9dHPfW2QFvhmL7XawAAABI"]
[Sat Aug 29 05:07:08.013797 2026] [security2:error] [pid 1018003:tid 1018240] [client 158.23.184.117:63786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cworthy.net"] [uri "/txets.php"] [unique_id "apK9XDAh5Y1i2tUxg4EN8QAABhA"]
[Sat Aug 29 05:07:08.023713 2026] [security2:error] [pid 1018003:tid 1018222] [client 158.23.184.117:2582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/Radio.php"] [unique_id "apK9XDAh5Y1i2tUxg4EN8gAABf8"]
[Sat Aug 29 05:07:08.034452 2026] [security2:error] [pid 1018003:tid 1018230] [client 52.139.37.240:29873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greathairkc.com"] [uri "/add_actualites.php"] [unique_id "apK9XDAh5Y1i2tUxg4EN8wAABgY"]
[Sat Aug 29 05:07:08.036323 2026] [security2:error] [pid 1018003:tid 1018262] [client 4.205.62.107:65424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/phpi.php"] [unique_id "apK9XDAh5Y1i2tUxg4EN9AAABiY"]
[Sat Aug 29 05:07:08.044076 2026] [security2:error] [pid 1028675:tid 1028814] [client 4.205.62.107:22398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/ccou.php"] [unique_id "apK9XNdHPfW2QFvhmL7XdgAAAAQ"]
[Sat Aug 29 05:07:08.052603 2026] [security2:error] [pid 1018003:tid 1018195] [client 93.123.109.228:39094] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/api-backend/.env"] [unique_id "apK9XDAh5Y1i2tUxg4EN9QAABeQ"]
[Sat Aug 29 05:07:08.054613 2026] [security2:error] [pid 1028675:tid 1028840] [client 4.205.62.107:58437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/classsmtps.php"] [unique_id "apK9XNdHPfW2QFvhmL7XdwAAAB4"]
[Sat Aug 29 05:07:08.063789 2026] [security2:error] [pid 1028675:tid 1028894] [client 158.23.184.117:11913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dubeyko.com"] [uri "/wp-content/plugins/alfa-rex.php"] [unique_id "apK9XNdHPfW2QFvhmL7XeAAAAFQ"]
[Sat Aug 29 05:07:08.065651 2026] [security2:error] [pid 1018003:tid 1018189] [client 158.158.54.35:16781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/x.php"] [unique_id "apK9XDAh5Y1i2tUxg4EN9gAABd4"]
[Sat Aug 29 05:07:08.073736 2026] [security2:error] [pid 1028675:tid 1028863] [client 20.104.18.15:5112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/inso.php"] [unique_id "apK9XNdHPfW2QFvhmL7XeQAAADU"]
[Sat Aug 29 05:07:08.093028 2026] [security2:error] [pid 1028675:tid 1028892] [client 68.155.159.216:64478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK9XNdHPfW2QFvhmL7XewAAAFI"]
[Sat Aug 29 05:07:08.101922 2026] [security2:error] [pid 1028675:tid 1028907] [client 20.48.250.41:60735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/ws68.php"] [unique_id "apK9XNdHPfW2QFvhmL7XfAAAAGE"]
[Sat Aug 29 05:07:08.125809 2026] [security2:error] [pid 1028675:tid 1028883] [client 20.196.209.81:17195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-content/autoload_classmap.php"] [unique_id "apK9XNdHPfW2QFvhmL7XfgAAAEk"]
[Sat Aug 29 05:07:08.134453 2026] [security2:error] [pid 1028675:tid 1028845] [client 20.104.18.15:13679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/ajax.php"] [unique_id "apK9XNdHPfW2QFvhmL7XhAAAACM"]
[Sat Aug 29 05:07:08.138297 2026] [security2:error] [pid 1028675:tid 1028875] [client 93.123.109.228:39212] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/administrator/.env"] [unique_id "apK9XNdHPfW2QFvhmL7XhgAAAEE"]
[Sat Aug 29 05:07:08.142144 2026] [security2:error] [pid 1028675:tid 1028859] [client 52.139.37.240:32126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/paku.php"] [unique_id "apK9XNdHPfW2QFvhmL7XhwAAADE"]
[Sat Aug 29 05:07:08.144270 2026] [security2:error] [pid 1028675:tid 1028919] [client 213.202.253.4:60113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bv-place.com"] [uri "/wp-content/postnews.php"] [unique_id "apK9XNdHPfW2QFvhmL7XiAAAAG0"], referer: www.google.com
[Sat Aug 29 05:07:08.154468 2026] [security2:error] [pid 1028675:tid 1028870] [client 158.23.184.117:63757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cworthy.net"] [uri "/adminfuns.php"] [unique_id "apK9XNdHPfW2QFvhmL7XigAAADw"]
[Sat Aug 29 05:07:08.163596 2026] [security2:error] [pid 1028675:tid 1028924] [client 20.104.18.15:36813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/sym.php"] [unique_id "apK9XNdHPfW2QFvhmL7XjAAAAHI"]
[Sat Aug 29 05:07:08.165123 2026] [security2:error] [pid 1028675:tid 1028851] [client 52.139.37.240:21428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/ws49.php"] [unique_id "apK9XNdHPfW2QFvhmL7XjQAAACk"]
[Sat Aug 29 05:07:08.170453 2026] [security2:error] [pid 1028675:tid 1028816] [client 93.123.109.228:39120] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/api-node/.env"] [unique_id "apK9XNdHPfW2QFvhmL7XjwAAAAY"]
[Sat Aug 29 05:07:08.188491 2026] [security2:error] [pid 1018003:tid 1018236] [client 20.52.41.200:1157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-admin/a.php"] [unique_id "apK9XDAh5Y1i2tUxg4EN-wAABgw"]
[Sat Aug 29 05:07:08.192304 2026] [security2:error] [pid 1028675:tid 1028929] [client 68.155.159.216:33790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK9XNdHPfW2QFvhmL7XkQAAAHc"]
[Sat Aug 29 05:07:08.210031 2026] [security2:error] [pid 1028675:tid 1028855] [client 20.48.160.90:51320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/shiny.php"] [unique_id "apK9XNdHPfW2QFvhmL7XlgAAAC0"]
[Sat Aug 29 05:07:08.212301 2026] [security2:error] [pid 1028675:tid 1028923] [client 20.104.18.15:5077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/aa.php"] [unique_id "apK9XNdHPfW2QFvhmL7XlwAAAHE"]
[Sat Aug 29 05:07:08.214494 2026] [security2:error] [pid 1018003:tid 1018159] [client 68.155.159.216:12118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK9XDAh5Y1i2tUxg4EN_QAABcA"]
[Sat Aug 29 05:07:08.215561 2026] [security2:error] [pid 1028675:tid 1028935] [client 158.23.184.117:2575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/wp-includes/Requests/Exception/file.php"] [unique_id "apK9XNdHPfW2QFvhmL7XnAAAAH0"]
[Sat Aug 29 05:07:08.228737 2026] [security2:error] [pid 1028675:tid 1028836] [client 52.139.37.240:29863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greathairkc.com"] [uri "/browse.php"] [unique_id "apK9XNdHPfW2QFvhmL7XnQAAABo"]
[Sat Aug 29 05:07:08.242129 2026] [security2:error] [pid 1028675:tid 1028902] [client 20.104.49.130:30063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/sd.php"] [unique_id "apK9XNdHPfW2QFvhmL7XoAAAAFw"]
[Sat Aug 29 05:07:08.261361 2026] [security2:error] [pid 1028675:tid 1028928] [client 168.107.94.195:62183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9XNdHPfW2QFvhmL7XoQAAAHY"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:08.269571 2026] [security2:error] [pid 1028675:tid 1028922] [client 93.123.109.228:39132] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/api/.env"] [unique_id "apK9XNdHPfW2QFvhmL7XogAAAHA"]
[Sat Aug 29 05:07:08.272735 2026] [security2:error] [pid 1018003:tid 1018226] [client 20.197.61.180:13880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/alfa-rex1.php"] [unique_id "apK9XDAh5Y1i2tUxg4EOAQAABgM"]
[Sat Aug 29 05:07:08.273904 2026] [security2:error] [pid 1018003:tid 1018196] [client 158.23.184.117:12076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dubeyko.com"] [uri "/test.php"] [unique_id "apK9XDAh5Y1i2tUxg4EOAgAABeU"]
[Sat Aug 29 05:07:08.274115 2026] [security2:error] [pid 1018003:tid 1018152] [client 20.48.250.41:60751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/users.php"] [unique_id "apK9XDAh5Y1i2tUxg4EOAwAABbk"]
[Sat Aug 29 05:07:08.275034 2026] [security2:error] [pid 1028675:tid 1028812] [client 20.104.18.15:13749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/atomlib.php"] [unique_id "apK9XNdHPfW2QFvhmL7XowAAAAI"]
[Sat Aug 29 05:07:08.299025 2026] [security2:error] [pid 1028675:tid 1028879] [client 158.23.184.117:39966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cworthy.net"] [uri "/403.php"] [unique_id "apK9XNdHPfW2QFvhmL7XpAAAAEU"]
[Sat Aug 29 05:07:08.308543 2026] [security2:error] [pid 1018003:tid 1018268] [client 93.123.109.228:39106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/api/info.php"] [unique_id "apK9XDAh5Y1i2tUxg4EOBgAABiw"]
[Sat Aug 29 05:07:08.308911 2026] [security2:error] [pid 1028675:tid 1028850] [client 20.104.104.62:44606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9XNdHPfW2QFvhmL7XpQAAACg"]
[Sat Aug 29 05:07:08.309209 2026] [security2:error] [pid 1028675:tid 1028936] [client 20.196.209.81:15168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/bypass.php"] [unique_id "apK9XNdHPfW2QFvhmL7XpgAAAH4"]
[Sat Aug 29 05:07:08.329619 2026] [security2:error] [pid 1018003:tid 1018202] [client 20.104.18.15:36657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/8.php"] [unique_id "apK9XDAh5Y1i2tUxg4EOCAAABes"]
[Sat Aug 29 05:07:08.330700 2026] [security2:error] [pid 1028675:tid 1028813] [client 68.155.159.216:24448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apK9XNdHPfW2QFvhmL7XpwAAAAM"]
[Sat Aug 29 05:07:08.332041 2026] [security2:error] [pid 1028675:tid 1028839] [client 68.155.159.216:65141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/asd.php"] [unique_id "apK9XNdHPfW2QFvhmL7XqAAAAB0"]
[Sat Aug 29 05:07:08.336916 2026] [security2:error] [pid 1028675:tid 1028819] [client 68.155.159.216:1933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK9XNdHPfW2QFvhmL7XqQAAAAk"]
[Sat Aug 29 05:07:08.341110 2026] [security2:error] [pid 1028675:tid 1028841] [client 52.139.37.240:32745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/rtx.php"] [unique_id "apK9XNdHPfW2QFvhmL7XqgAAAB8"]
[Sat Aug 29 05:07:08.348239 2026] [security2:error] [pid 1028675:tid 1028832] [client 20.151.200.44:47422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/ah24.php"] [unique_id "apK9XNdHPfW2QFvhmL7XqwAAABY"]
[Sat Aug 29 05:07:08.362817 2026] [security2:error] [pid 1018003:tid 1018258] [client 52.139.37.240:21160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/xxx.php"] [unique_id "apK9XDAh5Y1i2tUxg4EOCQAABiI"]
[Sat Aug 29 05:07:08.370024 2026] [security2:error] [pid 1028675:tid 1028880] [client 4.205.62.107:9195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/bthil.php"] [unique_id "apK9XNdHPfW2QFvhmL7XsQAAAEY"]
[Sat Aug 29 05:07:08.388572 2026] [security2:error] [pid 1028675:tid 1028884] [client 20.48.160.90:51285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/goods.php"] [unique_id "apK9XNdHPfW2QFvhmL7XtQAAAEo"]
[Sat Aug 29 05:07:08.404271 2026] [security2:error] [pid 1028675:tid 1028828] [client 93.123.109.228:39238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/api/phpinfo.php"] [unique_id "apK9XNdHPfW2QFvhmL7XtgAAABI"]
[Sat Aug 29 05:07:08.412089 2026] [security2:error] [pid 1028675:tid 1028903] [client 158.23.184.117:2773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/wp-admin/add.php"] [unique_id "apK9XNdHPfW2QFvhmL7XtwAAAF0"]
[Sat Aug 29 05:07:08.414080 2026] [security2:error] [pid 1018003:tid 1018177] [client 158.23.184.117:12038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dubeyko.com"] [uri "/wp-includes/mani.php"] [unique_id "apK9XDAh5Y1i2tUxg4EOCwAABdI"]
[Sat Aug 29 05:07:08.426114 2026] [security2:error] [pid 1028675:tid 1028835] [client 52.139.37.240:29998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greathairkc.com"] [uri "/contentloader1.php"] [unique_id "apK9XNdHPfW2QFvhmL7XuAAAABk"]
[Sat Aug 29 05:07:08.433560 2026] [security2:error] [pid 1028675:tid 1028937] [client 158.158.54.35:14938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/alfa-rex.php7"] [unique_id "apK9XNdHPfW2QFvhmL7XugAAAH8"]
[Sat Aug 29 05:07:08.433579 2026] [security2:error] [pid 1028675:tid 1028867] [client 20.203.141.11:13364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/elp.php"] [unique_id "apK9XNdHPfW2QFvhmL7XuQAAADk"]
[Sat Aug 29 05:07:08.436044 2026] [security2:error] [pid 1028675:tid 1028910] [client 20.104.18.15:5114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/img.php"] [unique_id "apK9XNdHPfW2QFvhmL7XuwAAAGQ"]
[Sat Aug 29 05:07:08.445906 2026] [security2:error] [pid 1028675:tid 1028822] [client 20.104.104.62:44549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9XNdHPfW2QFvhmL7XvQAAAAw"]
[Sat Aug 29 05:07:08.449746 2026] [security2:error] [pid 1028675:tid 1028866] [client 20.104.18.15:13585] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "lunar-festival.com"] [uri "/1.php"] [unique_id "apK9XNdHPfW2QFvhmL7XvgAAADg"]
[Sat Aug 29 05:07:08.449807 2026] [security2:error] [pid 1028675:tid 1028866] [client 20.104.18.15:13585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/1.php"] [unique_id "apK9XNdHPfW2QFvhmL7XvgAAADg"]
[Sat Aug 29 05:07:08.460013 2026] [security2:error] [pid 1028675:tid 1028931] [client 20.48.250.41:60783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/bzjdlofz.php"] [unique_id "apK9XNdHPfW2QFvhmL7XwQAAAHk"]
[Sat Aug 29 05:07:08.475870 2026] [security2:error] [pid 1018003:tid 1018174] [client 158.23.147.79:26498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/atomlib.php"] [unique_id "apK9XDAh5Y1i2tUxg4EODQAABc8"]
[Sat Aug 29 05:07:08.476733 2026] [security2:error] [pid 1018003:tid 1018265] [client 20.104.49.130:43803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/echkm.php"] [unique_id "apK9XDAh5Y1i2tUxg4EODgAABik"]
[Sat Aug 29 05:07:08.478108 2026] [security2:error] [pid 1018003:tid 1018213] [client 4.205.62.107:53124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/ms-edit.php"] [unique_id "apK9XDAh5Y1i2tUxg4EODwAABfY"]
[Sat Aug 29 05:07:08.486351 2026] [security2:error] [pid 1018003:tid 1018234] [client 20.104.18.15:36638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/goods.php"] [unique_id "apK9XDAh5Y1i2tUxg4EOEAAABgo"]
[Sat Aug 29 05:07:08.493159 2026] [security2:error] [pid 1028675:tid 1028904] [client 158.23.184.117:63765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cworthy.net"] [uri "/.trash7206/index.php"] [unique_id "apK9XNdHPfW2QFvhmL7XwwAAAF4"]
[Sat Aug 29 05:07:08.497302 2026] [security2:error] [pid 1028675:tid 1028826] [client 40.83.93.50:13591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-admin/wp-settings.php"] [unique_id "apK9XNdHPfW2QFvhmL7XxAAAABA"]
[Sat Aug 29 05:07:08.499024 2026] [security2:error] [pid 1028675:tid 1028883] [client 158.23.147.79:50045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK9XNdHPfW2QFvhmL7XxgAAAEk"]
[Sat Aug 29 05:07:08.521636 2026] [security2:error] [pid 1028675:tid 1028919] [client 20.48.160.90:51664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/000.php/index.php"] [unique_id "apK9XNdHPfW2QFvhmL7XyAAAAG0"]
[Sat Aug 29 05:07:08.524179 2026] [security2:error] [pid 1028675:tid 1028702] [remote 93.123.109.228:51634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK9XNdHPfW2QFvhmL7XyQAAbBU"]
[Sat Aug 29 05:07:08.524763 2026] [security2:error] [pid 1028675:tid 1028896] [client 158.158.54.35:17661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/new.php"] [unique_id "apK9XNdHPfW2QFvhmL7XygAAAFY"]
[Sat Aug 29 05:07:08.525876 2026] [security2:error] [pid 1028675:tid 1028833] [client 40.83.93.50:7615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/fi2.php"] [unique_id "apK9XNdHPfW2QFvhmL7XzAAAABc"]
[Sat Aug 29 05:07:08.528525 2026] [security2:error] [pid 1028675:tid 1028876] [client 52.139.37.240:32095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/update/da222.php"] [unique_id "apK9XNdHPfW2QFvhmL7X1AAAAEI"]
[Sat Aug 29 05:07:08.529335 2026] [security2:error] [pid 1028675:tid 1028933] [client 20.196.209.81:22437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-content/cache/min/1/wp-content/admin.php"] [unique_id "apK9XNdHPfW2QFvhmL7X1gAAAHs"]
[Sat Aug 29 05:07:08.558828 2026] [security2:error] [pid 1028675:tid 1028859] [client 158.23.184.117:12050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dubeyko.com"] [uri "/wp-includes/Test.php"] [unique_id "apK9XNdHPfW2QFvhmL7X2QAAADE"]
[Sat Aug 29 05:07:08.564846 2026] [security2:error] [pid 1028675:tid 1028881] [client 52.139.37.240:20754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/0x.php"] [unique_id "apK9XNdHPfW2QFvhmL7X2wAAAEc"]
[Sat Aug 29 05:07:08.575753 2026] [security2:error] [pid 1028675:tid 1028924] [client 158.23.147.79:25431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-admin/css/index.php"] [unique_id "apK9XNdHPfW2QFvhmL7X3AAAAHI"]
[Sat Aug 29 05:07:08.581387 2026] [security2:error] [pid 1028675:tid 1028921] [client 68.155.159.216:30677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/dropdown.php"] [unique_id "apK9XNdHPfW2QFvhmL7X3QAAAG8"]
[Sat Aug 29 05:07:08.588262 2026] [security2:error] [pid 1028675:tid 1028925] [client 158.23.184.117:2615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/wp-includes/assets/about.php"] [unique_id "apK9XNdHPfW2QFvhmL7X3wAAAHM"]
[Sat Aug 29 05:07:08.594733 2026] [security2:error] [pid 1028675:tid 1028877] [client 20.104.104.62:10477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/baee.php"] [unique_id "apK9XNdHPfW2QFvhmL7X4AAAAEM"]
[Sat Aug 29 05:07:08.605017 2026] [security2:error] [pid 1028675:tid 1028885] [client 20.104.18.15:5090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/222.php"] [unique_id "apK9XNdHPfW2QFvhmL7X4QAAAEs"]
[Sat Aug 29 05:07:08.640178 2026] [security2:error] [pid 1018003:tid 1018275] [client 158.23.184.117:39955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cworthy.net"] [uri "/.trash7206/admin.php"] [unique_id "apK9XDAh5Y1i2tUxg4EOEgAABjM"]
[Sat Aug 29 05:07:08.642976 2026] [security2:error] [pid 1028675:tid 1028887] [client 168.107.94.195:62503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9XNdHPfW2QFvhmL7X5AAAAE0"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:08.644742 2026] [security2:error] [pid 1028675:tid 1028902] [client 20.104.18.15:13705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/samll.php"] [unique_id "apK9XNdHPfW2QFvhmL7X5QAAAFw"]
[Sat Aug 29 05:07:08.644806 2026] [security2:error] [pid 1018003:tid 1018167] [client 52.139.37.240:29976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greathairkc.com"] [uri "/upfile.php"] [unique_id "apK9XDAh5Y1i2tUxg4EOEwAABcg"]
[Sat Aug 29 05:07:08.646438 2026] [cgid:error] [pid 1028675:tid 1028897] [client 20.52.41.200:1172] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/cpslggc/404.shtml
[Sat Aug 29 05:07:08.651695 2026] [security2:error] [pid 1028675:tid 1028932] [client 20.48.250.41:60766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/selesai.php"] [unique_id "apK9XNdHPfW2QFvhmL7X5gAAAHo"]
[Sat Aug 29 05:07:08.652447 2026] [security2:error] [pid 1028675:tid 1028860] [client 20.104.18.15:36661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/ah.php"] [unique_id "apK9XNdHPfW2QFvhmL7X5wAAADI"]
[Sat Aug 29 05:07:08.660894 2026] [security2:error] [pid 1028675:tid 1028818] [client 20.48.160.90:51694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/Jcrop.php"] [unique_id "apK9XNdHPfW2QFvhmL7X6gAAAAg"]
[Sat Aug 29 05:07:08.688736 2026] [security2:error] [pid 1028675:tid 1028861] [client 68.155.159.216:18410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/xmlrpc.php"] [unique_id "apK9XNdHPfW2QFvhmL7X7AAAADM"]
[Sat Aug 29 05:07:08.720339 2026] [security2:error] [pid 1028675:tid 1028890] [client 158.23.147.79:30473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/cgi-bin/index.php"] [unique_id "apK9XNdHPfW2QFvhmL7X7gAAAFA"]
[Sat Aug 29 05:07:08.727989 2026] [security2:error] [pid 1018003:tid 1018277] [client 20.151.200.44:46593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/ztv.php"] [unique_id "apK9XDAh5Y1i2tUxg4EOFgAABjU"]
[Sat Aug 29 05:07:08.738886 2026] [security2:error] [pid 1028675:tid 1028866] [client 20.104.104.62:10855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/d12.php"] [unique_id "apK9XNdHPfW2QFvhmL7X8gAAADg"]
[Sat Aug 29 05:07:08.742157 2026] [security2:error] [pid 1018003:tid 1018256] [client 20.196.209.81:1989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/extractable-loader-head.php"] [unique_id "apK9XDAh5Y1i2tUxg4EOGAAABiA"]
[Sat Aug 29 05:07:08.747952 2026] [security2:error] [pid 1018003:tid 1018230] [client 158.23.184.117:11934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dubeyko.com"] [uri "/wp-includes/pomo.php"] [unique_id "apK9XDAh5Y1i2tUxg4EOGQAABgY"]
[Sat Aug 29 05:07:08.752846 2026] [security2:error] [pid 1018003:tid 1018182] [client 158.23.184.117:2579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/wp-content/themes/twentytwentythree.php"] [unique_id "apK9XDAh5Y1i2tUxg4EOGgAABdc"]
[Sat Aug 29 05:07:08.757902 2026] [security2:error] [pid 1028675:tid 1028841] [client 52.139.37.240:21430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/CDX1.php"] [unique_id "apK9XNdHPfW2QFvhmL7X9QAAAB8"]
[Sat Aug 29 05:07:08.758761 2026] [security2:error] [pid 1028675:tid 1028894] [client 20.104.18.15:5104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/key.php"] [unique_id "apK9XNdHPfW2QFvhmL7X9gAAAFQ"]
[Sat Aug 29 05:07:08.785063 2026] [security2:error] [pid 1028675:tid 1028846] [client 158.23.184.117:56517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cworthy.net"] [uri "/wp-content/admin.php"] [unique_id "apK9XNdHPfW2QFvhmL7X-QAAACQ"]
[Sat Aug 29 05:07:08.788701 2026] [security2:error] [pid 1028675:tid 1028840] [client 52.139.37.240:32739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/wp-admin/min.php"] [unique_id "apK9XNdHPfW2QFvhmL7X-gAAAB4"]
[Sat Aug 29 05:07:08.793911 2026] [security2:error] [pid 1018003:tid 1018191] [client 20.48.250.41:62535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/shlo.php"] [unique_id "apK9XDAh5Y1i2tUxg4EOHQAABeA"]
[Sat Aug 29 05:07:08.795074 2026] [security2:error] [pid 1028675:tid 1028907] [client 20.52.41.200:1172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-includes/Text/about.php"] [unique_id "apK9XNdHPfW2QFvhmL7X-wAAAGE"]
[Sat Aug 29 05:07:08.814631 2026] [security2:error] [pid 1028675:tid 1028721] [remote 93.123.109.228:51634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/admin/phpinfo.php"] [unique_id "apK9XNdHPfW2QFvhmL7YAwAASSg"]
[Sat Aug 29 05:07:08.827682 2026] [security2:error] [pid 1028675:tid 1028919] [client 20.104.18.15:13700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/she11.php"] [unique_id "apK9XNdHPfW2QFvhmL7YBgAAAG0"]
[Sat Aug 29 05:07:08.830224 2026] [security2:error] [pid 1028675:tid 1028918] [client 20.48.160.90:51685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/35iDq8NAjLu.php"] [unique_id "apK9XNdHPfW2QFvhmL7YBwAAAGw"]
[Sat Aug 29 05:07:08.840724 2026] [security2:error] [pid 1028675:tid 1028863] [client 52.139.37.240:29986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greathairkc.com"] [uri "/form.php"] [unique_id "apK9XNdHPfW2QFvhmL7YCAAAADU"]
[Sat Aug 29 05:07:08.847475 2026] [security2:error] [pid 1028675:tid 1028833] [client 4.205.62.107:22425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/sadd.php"] [unique_id "apK9XNdHPfW2QFvhmL7YCQAAABc"]
[Sat Aug 29 05:07:08.852834 2026] [security2:error] [pid 1028675:tid 1028876] [client 20.104.18.15:36643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/ws55.php"] [unique_id "apK9XNdHPfW2QFvhmL7YCgAAAEI"]
[Sat Aug 29 05:07:08.878903 2026] [security2:error] [pid 1028675:tid 1028811] [client 93.123.109.228:39204] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/apis/.env"] [unique_id "apK9XNdHPfW2QFvhmL7YDAAAAAE"]
[Sat Aug 29 05:07:08.882177 2026] [security2:error] [pid 1028675:tid 1028910] [client 158.158.54.35:29695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "apK9XNdHPfW2QFvhmL7YDQAAAGQ"]
[Sat Aug 29 05:07:08.889594 2026] [security2:error] [pid 1028675:tid 1028817] [client 20.104.18.15:5101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/chosen.php"] [unique_id "apK9XNdHPfW2QFvhmL7YDgAAAAc"]
[Sat Aug 29 05:07:08.891546 2026] [security2:error] [pid 1028675:tid 1028881] [client 20.104.104.62:10473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/yyy.php"] [unique_id "apK9XNdHPfW2QFvhmL7YDwAAAEc"]
[Sat Aug 29 05:07:08.903657 2026] [security2:error] [pid 1028675:tid 1028931] [client 20.203.141.11:24096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-content/cong.php"] [unique_id "apK9XNdHPfW2QFvhmL7YEAAAAHk"]
[Sat Aug 29 05:07:08.905563 2026] [security2:error] [pid 1028675:tid 1028924] [client 93.123.109.228:39250] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/app/.env"] [unique_id "apK9XNdHPfW2QFvhmL7YEQAAAHI"]
[Sat Aug 29 05:07:08.922916 2026] [security2:error] [pid 1028675:tid 1028725] [remote 93.123.109.228:51634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/admin_phpinfo.php"] [unique_id "apK9XNdHPfW2QFvhmL7YEwAAdyw"]
[Sat Aug 29 05:07:08.924648 2026] [security2:error] [pid 1028675:tid 1028871] [client 68.155.159.216:6125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/file88.php"] [unique_id "apK9XNdHPfW2QFvhmL7YFAAAAD0"]
[Sat Aug 29 05:07:08.929421 2026] [security2:error] [pid 1028675:tid 1028820] [client 158.23.184.117:56512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cworthy.net"] [uri "/wp-mail.php"] [unique_id "apK9XNdHPfW2QFvhmL7YFQAAAAo"]
[Sat Aug 29 05:07:08.930599 2026] [security2:error] [pid 1028675:tid 1028925] [client 20.48.250.41:60689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/asax.php"] [unique_id "apK9XNdHPfW2QFvhmL7YFgAAAHM"]
[Sat Aug 29 05:07:08.931972 2026] [security2:error] [pid 1028675:tid 1028871] [client 68.155.159.216:16069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/about.php"] [unique_id "apK9XNdHPfW2QFvhmL7YFwAAAD0"]
[Sat Aug 29 05:07:08.945934 2026] [security2:error] [pid 1028675:tid 1028873] [client 158.23.147.79:30573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK9XNdHPfW2QFvhmL7YGQAAAD8"]
[Sat Aug 29 05:07:08.949642 2026] [security2:error] [pid 1018003:tid 1018225] [client 158.23.184.117:2963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/wp-content/languages/themes/num.php"] [unique_id "apK9XDAh5Y1i2tUxg4EOJQAABgI"]
[Sat Aug 29 05:07:08.949782 2026] [security2:error] [pid 1018003:tid 1018196] [client 52.139.37.240:20910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/akcc.php"] [unique_id "apK9XDAh5Y1i2tUxg4EOJgAABeU"]
[Sat Aug 29 05:07:08.956766 2026] [security2:error] [pid 1028675:tid 1028826] [client 20.196.209.81:13121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-content/classwithtostring.php"] [unique_id "apK9XNdHPfW2QFvhmL7YGwAAABA"]
[Sat Aug 29 05:07:08.964498 2026] [security2:error] [pid 1018003:tid 1018202] [client 20.104.18.15:13755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/kerang.php"] [unique_id "apK9XDAh5Y1i2tUxg4EOJwAABes"]
[Sat Aug 29 05:07:08.971667 2026] [security2:error] [pid 1028675:tid 1028899] [client 158.158.54.35:10194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/menu.php"] [unique_id "apK9XNdHPfW2QFvhmL7YHgAAAFk"]
[Sat Aug 29 05:07:08.977777 2026] [security2:error] [pid 1028675:tid 1028897] [client 20.48.160.90:51287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/btx25.php"] [unique_id "apK9XNdHPfW2QFvhmL7YIAAAAFc"]
[Sat Aug 29 05:07:08.987934 2026] [security2:error] [pid 1028675:tid 1028845] [client 40.83.93.50:22793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-admin/wp-signup.php"] [unique_id "apK9XNdHPfW2QFvhmL7YIgAAACM"]
[Sat Aug 29 05:07:08.989042 2026] [security2:error] [pid 1028675:tid 1028895] [client 20.197.61.180:7911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/headerg.php"] [unique_id "apK9XNdHPfW2QFvhmL7YIwAAAFU"]
[Sat Aug 29 05:07:09.011686 2026] [security2:error] [pid 1018003:tid 1018169] [client 40.83.93.50:7542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/1p.php"] [unique_id "apK9XTAh5Y1i2tUxg4EOKQAABco"]
[Sat Aug 29 05:07:09.015280 2026] [security2:error] [pid 1018003:tid 1018258] [client 158.23.184.117:12067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dubeyko.com"] [uri "/wp-admin/link-add.php"] [unique_id "apK9XTAh5Y1i2tUxg4EOKgAABiI"]
[Sat Aug 29 05:07:09.026849 2026] [security2:error] [pid 1028675:tid 1028831] [client 20.104.18.15:5087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/file1221.php"] [unique_id "apK9XddHPfW2QFvhmL7YJQAAABU"]
[Sat Aug 29 05:07:09.028481 2026] [security2:error] [pid 1028675:tid 1028810] [client 168.107.94.195:62908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9XddHPfW2QFvhmL7YJgAAAAA"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:09.034777 2026] [security2:error] [pid 1028675:tid 1028923] [client 52.139.37.240:32707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/wp-admin/wp-fileesx-449.php"] [unique_id "apK9XddHPfW2QFvhmL7YJwAAAHE"]
[Sat Aug 29 05:07:09.035686 2026] [security2:error] [pid 1028675:tid 1028836] [client 52.139.37.240:30008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greathairkc.com"] [uri "/wp-sigunq.php"] [unique_id "apK9XddHPfW2QFvhmL7YKAAAABo"]
[Sat Aug 29 05:07:09.046114 2026] [security2:error] [pid 1018003:tid 1018190] [client 20.104.104.62:10841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/bgymj.php"] [unique_id "apK9XTAh5Y1i2tUxg4EOKwAABd8"]
[Sat Aug 29 05:07:09.059479 2026] [security2:error] [pid 1028675:tid 1028839] [client 20.104.18.15:36725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/drykl.php"] [unique_id "apK9XddHPfW2QFvhmL7YKgAAAB0"]
[Sat Aug 29 05:07:09.059621 2026] [security2:error] [pid 1028675:tid 1028859] [client 87.219.197.128:61747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK9XddHPfW2QFvhmL7YKwAAADE"]
[Sat Aug 29 05:07:09.059959 2026] [security2:error] [pid 1028675:tid 1028859] [client 87.219.197.128:61747] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK9XddHPfW2QFvhmL7YKwAAADE"]
[Sat Aug 29 05:07:09.075143 2026] [security2:error] [pid 1018003:tid 1018231] [client 158.23.147.79:37922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/bk/index.php"] [unique_id "apK9XTAh5Y1i2tUxg4EOLQAABgc"]
[Sat Aug 29 05:07:09.096893 2026] [security2:error] [pid 1028675:tid 1028936] [client 158.23.184.117:2760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/wp.php"] [unique_id "apK9XddHPfW2QFvhmL7YLgAAAH4"]
[Sat Aug 29 05:07:09.099517 2026] [security2:error] [pid 1028675:tid 1028915] [client 20.104.18.15:13742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/m.php"] [unique_id "apK9XddHPfW2QFvhmL7YMAAAAGk"]
[Sat Aug 29 05:07:09.118936 2026] [security2:error] [pid 1018003:tid 1018183] [client 158.23.184.117:63781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cworthy.net"] [uri "/3.php"] [unique_id "apK9XTAh5Y1i2tUxg4EOLgAABdg"]
[Sat Aug 29 05:07:09.146984 2026] [security2:error] [pid 1028675:tid 1028837] [client 20.48.250.41:59380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/fetch.php"] [unique_id "apK9XddHPfW2QFvhmL7YMwAAABs"]
[Sat Aug 29 05:07:09.149925 2026] [security2:error] [pid 1028675:tid 1028822] [client 68.155.159.216:49175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/login.php"] [unique_id "apK9XddHPfW2QFvhmL7YNAAAAAw"]
[Sat Aug 29 05:07:09.167733 2026] [security2:error] [pid 1028675:tid 1028913] [client 4.205.62.107:65411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK9XddHPfW2QFvhmL7YNQAAAGc"]
[Sat Aug 29 05:07:09.171212 2026] [security2:error] [pid 1028675:tid 1028884] [client 52.139.37.240:20787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK9XddHPfW2QFvhmL7YNgAAAEo"]
[Sat Aug 29 05:07:09.180014 2026] [security2:error] [pid 1028675:tid 1028903] [client 158.23.184.117:11914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dubeyko.com"] [uri "/wp-includes/Text.php"] [unique_id "apK9XddHPfW2QFvhmL7YNwAAAF0"]
[Sat Aug 29 05:07:09.182909 2026] [security2:error] [pid 1018003:tid 1018270] [client 4.205.62.107:22343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/66.php"] [unique_id "apK9XTAh5Y1i2tUxg4EOMgAABi4"]
[Sat Aug 29 05:07:09.187271 2026] [security2:error] [pid 1028675:tid 1028930] [client 20.104.18.15:5103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/nox.php"] [unique_id "apK9XddHPfW2QFvhmL7YOQAAAHg"]
[Sat Aug 29 05:07:09.192366 2026] [security2:error] [pid 1018003:tid 1018275] [client 4.205.62.107:58391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/tax.php"] [unique_id "apK9XTAh5Y1i2tUxg4EONAAABjM"]
[Sat Aug 29 05:07:09.200278 2026] [security2:error] [pid 1018003:tid 1018222] [client 20.104.104.62:10687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/fh26.php"] [unique_id "apK9XTAh5Y1i2tUxg4EONgAABf8"]
[Sat Aug 29 05:07:09.216339 2026] [security2:error] [pid 1028675:tid 1028878] [client 20.48.160.90:51647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/radio.php"] [unique_id "apK9XddHPfW2QFvhmL7YQgAAAEQ"]
[Sat Aug 29 05:07:09.220128 2026] [security2:error] [pid 1018003:tid 1018174] [client 20.196.209.81:1729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/defaults.php"] [unique_id "apK9XTAh5Y1i2tUxg4EONwAABc8"]
[Sat Aug 29 05:07:09.227807 2026] [security2:error] [pid 1018003:tid 1018262] [client 158.23.147.79:17434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK9XTAh5Y1i2tUxg4EOOAAABiY"]
[Sat Aug 29 05:07:09.229791 2026] [security2:error] [pid 1028675:tid 1028919] [client 20.104.18.15:36791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/backup.php"] [unique_id "apK9XddHPfW2QFvhmL7YRgAAAG0"]
[Sat Aug 29 05:07:09.230578 2026] [security2:error] [pid 1028675:tid 1028814] [client 52.139.37.240:32728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/wp-content/themes/min.php"] [unique_id "apK9XddHPfW2QFvhmL7YRwAAAAQ"]
[Sat Aug 29 05:07:09.238815 2026] [security2:error] [pid 1028675:tid 1028823] [client 20.104.49.130:48579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/dex.php"] [unique_id "apK9XddHPfW2QFvhmL7YSgAAAA0"]
[Sat Aug 29 05:07:09.240743 2026] [security2:error] [pid 1018003:tid 1018167] [client 158.23.184.117:2587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/xmlrpc.php"] [unique_id "apK9XTAh5Y1i2tUxg4EOOQAABcg"]
[Sat Aug 29 05:07:09.243302 2026] [security2:error] [pid 1028675:tid 1028894] [client 52.139.37.240:29883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greathairkc.com"] [uri "/07.php"] [unique_id "apK9XddHPfW2QFvhmL7YSwAAAFQ"]
[Sat Aug 29 05:07:09.264294 2026] [security2:error] [pid 1028675:tid 1028891] [client 158.23.184.117:39992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cworthy.net"] [uri "/wp-includes/fonts/index.php"] [unique_id "apK9XddHPfW2QFvhmL7YTAAAAFE"]
[Sat Aug 29 05:07:09.267613 2026] [security2:error] [pid 1028675:tid 1028883] [client 20.104.18.15:13738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/fling.php"] [unique_id "apK9XddHPfW2QFvhmL7YTQAAAEk"]
[Sat Aug 29 05:07:09.271746 2026] [security2:error] [pid 1028675:tid 1028916] [client 20.52.41.200:1276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpsl-ggc.org"] [uri "/wp-admin.php"] [unique_id "apK9XddHPfW2QFvhmL7YTgAAAGo"]
[Sat Aug 29 05:07:09.314306 2026] [security2:error] [pid 1028675:tid 1028841] [client 158.158.54.35:16950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/upload.php"] [unique_id "apK9XddHPfW2QFvhmL7YUQAAAB8"]
[Sat Aug 29 05:07:09.320155 2026] [security2:error] [pid 1028675:tid 1028921] [client 68.155.159.216:12229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-admin/network/index.php"] [unique_id "apK9XddHPfW2QFvhmL7YUgAAAG8"]
[Sat Aug 29 05:07:09.325764 2026] [security2:error] [pid 1028675:tid 1028881] [client 158.23.184.117:12045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dubeyko.com"] [uri "/wp-trackback.php"] [unique_id "apK9XddHPfW2QFvhmL7YVQAAAEc"]
[Sat Aug 29 05:07:09.337772 2026] [security2:error] [pid 1018003:tid 1018255] [client 20.104.104.62:10848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/fgd.php"] [unique_id "apK9XTAh5Y1i2tUxg4EOPQAABh8"]
[Sat Aug 29 05:07:09.354848 2026] [security2:error] [pid 1028675:tid 1028908] [client 20.48.250.41:58453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/vx.php"] [unique_id "apK9XddHPfW2QFvhmL7YXAAAAGI"]
[Sat Aug 29 05:07:09.356579 2026] [security2:error] [pid 1028675:tid 1028855] [client 93.123.109.228:39252] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/application/.env"] [unique_id "apK9XddHPfW2QFvhmL7YWwAAAC0"]
[Sat Aug 29 05:07:09.360695 2026] [security2:error] [pid 1018003:tid 1018157] [client 20.196.209.81:22412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-content/config.php"] [unique_id "apK9XTAh5Y1i2tUxg4EOPgAABb4"]
[Sat Aug 29 05:07:09.364604 2026] [security2:error] [pid 1028675:tid 1028851] [client 52.139.37.240:20789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/s.php"] [unique_id "apK9XddHPfW2QFvhmL7YXQAAACk"]
[Sat Aug 29 05:07:09.365709 2026] [security2:error] [pid 1028675:tid 1028815] [client 20.104.18.15:5060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/akismet.php"] [unique_id "apK9XddHPfW2QFvhmL7YXgAAAAU"]
[Sat Aug 29 05:07:09.383586 2026] [security2:error] [pid 1018003:tid 1018230] [client 93.123.109.228:39176] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/apps/.env"] [unique_id "apK9XTAh5Y1i2tUxg4EOPwAABgY"]
[Sat Aug 29 05:07:09.386578 2026] [security2:error] [pid 1028675:tid 1028914] [client 158.23.184.117:2789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/app.php"] [unique_id "apK9XddHPfW2QFvhmL7YYQAAAGg"]
[Sat Aug 29 05:07:09.397822 2026] [security2:error] [pid 1028675:tid 1028811] [client 20.203.141.11:7388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK9XddHPfW2QFvhmL7YYwAAAAE"]
[Sat Aug 29 05:07:09.397844 2026] [security2:error] [pid 1028675:tid 1028895] [client 20.104.18.15:13659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/btyuio.php"] [unique_id "apK9XddHPfW2QFvhmL7YZAAAAFU"]
[Sat Aug 29 05:07:09.406500 2026] [core:error] [pid 1028675:tid 1028860] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:09.406517 2026] [core:error] [pid 1028675:tid 1028860] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:09.408544 2026] [security2:error] [pid 1028675:tid 1028898] [client 168.107.94.195:63265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9XddHPfW2QFvhmL7YZwAAAFg"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:09.411484 2026] [security2:error] [pid 1028675:tid 1028880] [client 20.48.160.90:51312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/dex.php"] [unique_id "apK9XddHPfW2QFvhmL7YaAAAAEY"]
[Sat Aug 29 05:07:09.412848 2026] [security2:error] [pid 1028675:tid 1028746] [remote 93.123.109.228:51634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/api/info.php"] [unique_id "apK9XddHPfW2QFvhmL7YaQAAXEE"]
[Sat Aug 29 05:07:09.416156 2026] [security2:error] [pid 1028675:tid 1028750] [remote 93.123.109.228:51634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/api/phpinfo.php"] [unique_id "apK9XddHPfW2QFvhmL7YcAAAXEU"]
[Sat Aug 29 05:07:09.422939 2026] [security2:error] [pid 1028675:tid 1028821] [client 158.158.54.35:38454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK9XddHPfW2QFvhmL7YdAAAAAs"]
[Sat Aug 29 05:07:09.422992 2026] [security2:error] [pid 1028675:tid 1028844] [client 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK9XddHPfW2QFvhmL7YUAAAIjs"]
[Sat Aug 29 05:07:09.423804 2026] [security2:error] [pid 1028675:tid 1028843] [client 52.139.37.240:52205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/wp-content/themes/x/bypass.php"] [unique_id "apK9XddHPfW2QFvhmL7YdQAAACE"]
[Sat Aug 29 05:07:09.441697 2026] [security2:error] [pid 1028675:tid 1028899] [client 52.139.37.240:30168] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "cpcontacts.greathairkc.com"] [uri "/c99.php"] [unique_id "apK9XddHPfW2QFvhmL7YdwAAAFk"]
[Sat Aug 29 05:07:09.442272 2026] [security2:error] [pid 1028675:tid 1028905] [client 68.155.159.216:65088] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "snackgaro.com"] [uri "/1.php"] [unique_id "apK9XddHPfW2QFvhmL7YeAAAAF8"]
[Sat Aug 29 05:07:09.442473 2026] [security2:error] [pid 1028675:tid 1028905] [client 68.155.159.216:65088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/1.php"] [unique_id "apK9XddHPfW2QFvhmL7YeAAAAF8"]
[Sat Aug 29 05:07:09.444635 2026] [security2:error] [pid 1028675:tid 1028928] [client 68.155.159.216:2019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK9XddHPfW2QFvhmL7YegAAAHY"]
[Sat Aug 29 05:07:09.451012 2026] [security2:error] [pid 1028675:tid 1028836] [client 68.155.159.216:24541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK9XddHPfW2QFvhmL7YfAAAABo"]
[Sat Aug 29 05:07:09.458155 2026] [security2:error] [pid 1028675:tid 1028816] [client 40.83.93.50:20826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-blog-header.php"] [unique_id "apK9XddHPfW2QFvhmL7YfgAAAAY"]
[Sat Aug 29 05:07:09.459078 2026] [security2:error] [pid 1018003:tid 1018236] [client 158.23.184.117:40016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cworthy.net"] [uri "/wp-admin/css/admin.php"] [unique_id "apK9XTAh5Y1i2tUxg4EOQgAABgw"]
[Sat Aug 29 05:07:09.460820 2026] [security2:error] [pid 1028675:tid 1028812] [client 20.104.18.15:36644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/indo.php"] [unique_id "apK9XddHPfW2QFvhmL7YfwAAAAI"]
[Sat Aug 29 05:07:09.464756 2026] [security2:error] [pid 1028675:tid 1028813] [client 20.151.200.44:47350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/kure.php"] [unique_id "apK9XddHPfW2QFvhmL7YgAAAAAM"]
[Sat Aug 29 05:07:09.469983 2026] [security2:error] [pid 1018003:tid 1018182] [client 158.23.184.117:11918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dubeyko.com"] [uri "/wp-admin/maint.php"] [unique_id "apK9XTAh5Y1i2tUxg4EORAAABdc"]
[Sat Aug 29 05:07:09.470352 2026] [security2:error] [pid 1028675:tid 1028861] [client 68.155.159.216:51802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-content/packed.php"] [unique_id "apK9XddHPfW2QFvhmL7YgQAAADM"]
[Sat Aug 29 05:07:09.482888 2026] [core:error] [pid 1028675:tid 1028917] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:09.482903 2026] [core:error] [pid 1028675:tid 1028917] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:09.488553 2026] [security2:error] [pid 1028675:tid 1028911] [client 20.104.104.62:10466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/inject.php"] [unique_id "apK9XddHPfW2QFvhmL7YhQAAAGU"]
[Sat Aug 29 05:07:09.493148 2026] [security2:error] [pid 1018003:tid 1018166] [client 40.83.93.50:3847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/Njima.php"] [unique_id "apK9XTAh5Y1i2tUxg4EORgAABcc"]
[Sat Aug 29 05:07:09.494064 2026] [security2:error] [pid 1028675:tid 1028872] [client 20.104.49.130:57721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/run.php"] [unique_id "apK9XddHPfW2QFvhmL7YhwAAAD4"]
[Sat Aug 29 05:07:09.508818 2026] [security2:error] [pid 1018003:tid 1018226] [client 158.23.147.79:35763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/sad/about.php"] [unique_id "apK9XTAh5Y1i2tUxg4EORwAABgM"]
[Sat Aug 29 05:07:09.522979 2026] [security2:error] [pid 1028675:tid 1028822] [client 20.48.250.41:59365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/global.php"] [unique_id "apK9XddHPfW2QFvhmL7YigAAAAw"]
[Sat Aug 29 05:07:09.530636 2026] [security2:error] [pid 1028675:tid 1028858] [client 158.23.184.117:2780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/aaa.php"] [unique_id "apK9XddHPfW2QFvhmL7YiwAAADA"]
[Sat Aug 29 05:07:09.547728 2026] [security2:error] [pid 1028675:tid 1028884] [client 20.104.18.15:5011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/ajax.php"] [unique_id "apK9XddHPfW2QFvhmL7YjQAAAEo"]
[Sat Aug 29 05:07:09.553719 2026] [security2:error] [pid 1028675:tid 1028825] [client 52.139.37.240:21437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/sagax.php"] [unique_id "apK9XddHPfW2QFvhmL7YjgAAAA8"]
[Sat Aug 29 05:07:09.567309 2026] [security2:error] [pid 1028675:tid 1028814] [client 158.23.147.79:53761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/atomlib.php"] [unique_id "apK9XddHPfW2QFvhmL7YkgAAAAQ"]
[Sat Aug 29 05:07:09.571312 2026] [security2:error] [pid 1028675:tid 1028863] [client 4.205.62.107:8998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/aws_auth.php"] [unique_id "apK9XddHPfW2QFvhmL7YlAAAADU"]
[Sat Aug 29 05:07:09.585472 2026] [security2:error] [pid 1018003:tid 1018225] [client 20.104.18.15:13730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/dehnl.php"] [unique_id "apK9XTAh5Y1i2tUxg4EOSgAABgI"]
[Sat Aug 29 05:07:09.590388 2026] [security2:error] [pid 1018003:tid 1018196] [client 158.23.147.79:26433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/lv.php"] [unique_id "apK9XTAh5Y1i2tUxg4EOSwAABeU"]
[Sat Aug 29 05:07:09.591295 2026] [security2:error] [pid 1028675:tid 1028927] [client 20.48.160.90:49487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/giodywky.php"] [unique_id "apK9XddHPfW2QFvhmL7YmAAAAHU"]
[Sat Aug 29 05:07:09.603289 2026] [security2:error] [pid 1028675:tid 1028853] [client 20.104.18.15:36621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/sign.php"] [unique_id "apK9XddHPfW2QFvhmL7YmQAAACs"]
[Sat Aug 29 05:07:09.603314 2026] [security2:error] [pid 1028675:tid 1028878] [client 158.23.184.117:39976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cworthy.net"] [uri "/bthil.php"] [unique_id "apK9XddHPfW2QFvhmL7YmgAAAEQ"]
[Sat Aug 29 05:07:09.615373 2026] [security2:error] [pid 1028675:tid 1028931] [client 4.205.62.107:56021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/sys.php"] [unique_id "apK9XddHPfW2QFvhmL7YoQAAAHk"]
[Sat Aug 29 05:07:09.615977 2026] [security2:error] [pid 1018003:tid 1018271] [client 158.23.184.117:11716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dubeyko.com"] [uri "/wp-includes/num.php"] [unique_id "apK9XTAh5Y1i2tUxg4EOTAAABi8"]
[Sat Aug 29 05:07:09.627457 2026] [security2:error] [pid 1028675:tid 1028842] [client 20.196.209.81:15193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/post.php"] [unique_id "apK9XddHPfW2QFvhmL7YpAAAACA"]
[Sat Aug 29 05:07:09.630971 2026] [security2:error] [pid 1028675:tid 1028871] [client 20.104.104.62:44571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/mga.php"] [unique_id "apK9XddHPfW2QFvhmL7YpgAAAD0"]
[Sat Aug 29 05:07:09.631222 2026] [security2:error] [pid 1028675:tid 1028841] [client 158.23.147.79:50067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK9XddHPfW2QFvhmL7YpwAAAB8"]
[Sat Aug 29 05:07:09.640617 2026] [security2:error] [pid 1018003:tid 1018152] [client 52.139.37.240:29866] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "cpcontacts.greathairkc.com"] [uri "/c99.php"] [unique_id "apK9XTAh5Y1i2tUxg4EOTwAABbk"]
[Sat Aug 29 05:07:09.655303 2026] [security2:error] [pid 1018003:tid 1018240] [client 20.48.250.41:62509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/fs.php"] [unique_id "apK9XTAh5Y1i2tUxg4EOUgAABhA"]
[Sat Aug 29 05:07:09.668262 2026] [core:error] [pid 1018003:tid 1018185] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:09.668280 2026] [core:error] [pid 1018003:tid 1018185] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:09.671618 2026] [security2:error] [pid 1028675:tid 1028851] [client 158.23.147.79:25531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK9XddHPfW2QFvhmL7YqgAAACk"]
[Sat Aug 29 05:07:09.686431 2026] [security2:error] [pid 1018003:tid 1018177] [client 68.155.159.216:30712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/.well-known/index.php"] [unique_id "apK9XTAh5Y1i2tUxg4EOVwAABdI"]
[Sat Aug 29 05:07:09.688328 2026] [security2:error] [pid 1028675:tid 1028914] [client 52.139.37.240:32720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK9XddHPfW2QFvhmL7YqwAAAGg"]
[Sat Aug 29 05:07:09.710470 2026] [security2:error] [pid 1028675:tid 1028866] [client 103.185.242.143:64751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK9XddHPfW2QFvhmL7YrgAAADg"]
[Sat Aug 29 05:07:09.713142 2026] [security2:error] [pid 1028675:tid 1028866] [client 103.185.242.143:64751] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK9XddHPfW2QFvhmL7YrgAAADg"]
[Sat Aug 29 05:07:09.727584 2026] [security2:error] [pid 1018003:tid 1018213] [client 158.23.184.117:2761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/hehe.php"] [unique_id "apK9XTAh5Y1i2tUxg4EOWQAABfY"]
[Sat Aug 29 05:07:09.731989 2026] [security2:error] [pid 1028675:tid 1028880] [client 20.48.160.90:51662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/wp-kz.php"] [unique_id "apK9XddHPfW2QFvhmL7YtAAAAEY"]
[Sat Aug 29 05:07:09.732014 2026] [security2:error] [pid 1028675:tid 1028839] [client 20.197.61.180:7755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/meta.php"] [unique_id "apK9XddHPfW2QFvhmL7YtQAAAB0"]
[Sat Aug 29 05:07:09.748020 2026] [security2:error] [pid 1018003:tid 1018265] [client 158.23.184.117:63767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cworthy.net"] [uri "/file.php"] [unique_id "apK9XTAh5Y1i2tUxg4EOWwAABik"]
[Sat Aug 29 05:07:09.749423 2026] [security2:error] [pid 1018003:tid 1018156] [client 20.104.18.15:13717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/zoo2.php"] [unique_id "apK9XTAh5Y1i2tUxg4EOXAAABb0"]
[Sat Aug 29 05:07:09.750177 2026] [security2:error] [pid 1018003:tid 1018179] [client 158.23.184.117:30209] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mikelait.managemymood.com"] [uri "/1.php"] [unique_id "apK9XTAh5Y1i2tUxg4EOXQAABdQ"]
[Sat Aug 29 05:07:09.750274 2026] [security2:error] [pid 1018003:tid 1018179] [client 158.23.184.117:30209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mikelait.managemymood.com"] [uri "/1.php"] [unique_id "apK9XTAh5Y1i2tUxg4EOXQAABdQ"]
[Sat Aug 29 05:07:09.754307 2026] [security2:error] [pid 1018003:tid 1018270] [client 20.104.18.15:5084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/atomlib.php"] [unique_id "apK9XTAh5Y1i2tUxg4EOXgAABi4"]
[Sat Aug 29 05:07:09.758071 2026] [security2:error] [pid 1018003:tid 1018275] [client 20.104.18.15:36635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/wnnjpsby.php"] [unique_id "apK9XTAh5Y1i2tUxg4EOXwAABjM"]
[Sat Aug 29 05:07:09.763708 2026] [core:error] [pid 1028675:tid 1028883] [client 158.158.54.35:14958] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:09.763728 2026] [core:error] [pid 1028675:tid 1028883] [client 158.158.54.35:14958] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:09.768961 2026] [security2:error] [pid 1018003:tid 1018222] [client 20.104.104.62:10479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/inwp.php"] [unique_id "apK9XTAh5Y1i2tUxg4EOYQAABf8"]
[Sat Aug 29 05:07:09.784730 2026] [security2:error] [pid 1018003:tid 1018224] [client 20.196.209.81:5769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-content/cong.php"] [unique_id "apK9XTAh5Y1i2tUxg4EOYgAABgE"]
[Sat Aug 29 05:07:09.787591 2026] [security2:error] [pid 1018003:tid 1018162] [client 168.107.94.195:63613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9XTAh5Y1i2tUxg4EOYwAABcM"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:09.797878 2026] [core:error] [pid 1018003:tid 1018207] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:09.797902 2026] [core:error] [pid 1018003:tid 1018207] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:09.802375 2026] [security2:error] [pid 1018003:tid 1018261] [client 158.23.184.117:12035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dubeyko.com"] [uri "/identity.php"] [unique_id "apK9XTAh5Y1i2tUxg4EOaAAABiU"]
[Sat Aug 29 05:07:09.828412 2026] [security2:error] [pid 1018003:tid 1018194] [client 158.23.147.79:30460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/content.php"] [unique_id "apK9XTAh5Y1i2tUxg4EOagAABeM"]
[Sat Aug 29 05:07:09.832860 2026] [security2:error] [pid 1018003:tid 1018216] [client 52.139.37.240:29869] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "cpcontacts.greathairkc.com"] [uri "/c99.php"] [unique_id "apK9XTAh5Y1i2tUxg4EOawAABfk"]
[Sat Aug 29 05:07:09.842214 2026] [security2:error] [pid 1018003:tid 1018191] [client 20.48.250.41:62541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/ioxi.php"] [unique_id "apK9XTAh5Y1i2tUxg4EObQAABeA"]
[Sat Aug 29 05:07:09.855470 2026] [security2:error] [pid 1028675:tid 1028899] [client 158.23.147.79:32739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK9XddHPfW2QFvhmL7Y3AAAAFk"]
[Sat Aug 29 05:07:09.859229 2026] [security2:error] [pid 1028675:tid 1028811] [client 20.203.141.11:35247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-mail.php"] [unique_id "apK9XddHPfW2QFvhmL7Y3QAAAAE"]
[Sat Aug 29 05:07:09.872725 2026] [core:error] [pid 1018003:tid 1018155] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:09.872741 2026] [core:error] [pid 1018003:tid 1018155] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:09.874471 2026] [security2:error] [pid 1018003:tid 1018230] [client 158.23.184.117:2597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/wp-includes/PHPMailer.php"] [unique_id "apK9XTAh5Y1i2tUxg4EOcAAABgY"]
[Sat Aug 29 05:07:09.880056 2026] [security2:error] [pid 1028675:tid 1028846] [client 20.104.18.15:13698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/zoo1.php"] [unique_id "apK9XddHPfW2QFvhmL7Y4AAAACQ"]
[Sat Aug 29 05:07:09.893912 2026] [security2:error] [pid 1028675:tid 1028922] [client 158.23.184.117:63759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cworthy.net"] [uri "/lock360.php"] [unique_id "apK9XddHPfW2QFvhmL7Y4gAAAHA"]
[Sat Aug 29 05:07:09.896456 2026] [security2:error] [pid 1018003:tid 1018219] [client 93.123.109.228:39186] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/back-api/.env"] [unique_id "apK9XTAh5Y1i2tUxg4EOcQAABfw"]
[Sat Aug 29 05:07:09.899983 2026] [security2:error] [pid 1028675:tid 1028915] [client 20.104.104.62:10632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/ad1.php"] [unique_id "apK9XddHPfW2QFvhmL7Y5AAAAGk"]
[Sat Aug 29 05:07:09.900788 2026] [security2:error] [pid 1028675:tid 1028911] [client 52.139.37.240:32733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/wp-info.php"] [unique_id "apK9XddHPfW2QFvhmL7Y5QAAAGU"]
[Sat Aug 29 05:07:09.901262 2026] [security2:error] [pid 1028675:tid 1028917] [client 158.23.184.117:30259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mikelait.managemymood.com"] [uri "/2.php"] [unique_id "apK9XddHPfW2QFvhmL7Y4wAAAGs"]
[Sat Aug 29 05:07:09.901283 2026] [security2:error] [pid 1028675:tid 1028902] [client 20.104.18.15:36557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/gigi.php"] [unique_id "apK9XddHPfW2QFvhmL7Y5gAAAFw"]
[Sat Aug 29 05:07:09.902668 2026] [security2:error] [pid 1028675:tid 1028903] [client 20.104.49.130:47855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/wp-blog-header.php"] [unique_id "apK9XddHPfW2QFvhmL7Y5wAAAF0"]
[Sat Aug 29 05:07:09.916815 2026] [security2:error] [pid 1018003:tid 1018196] [client 20.104.18.15:5025] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcalendars.enveso.com"] [uri "/1.php"] [unique_id "apK9XTAh5Y1i2tUxg4EOcwAABeU"]
[Sat Aug 29 05:07:09.916956 2026] [security2:error] [pid 1018003:tid 1018196] [client 20.104.18.15:5025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/1.php"] [unique_id "apK9XTAh5Y1i2tUxg4EOcwAABeU"]
[Sat Aug 29 05:07:09.918663 2026] [security2:error] [pid 1018003:tid 1018225] [client 93.123.109.228:39176] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/back-end/.env"] [unique_id "apK9XTAh5Y1i2tUxg4EOcgAABgI"]
[Sat Aug 29 05:07:09.923772 2026] [security2:error] [pid 1028675:tid 1028889] [client 93.123.109.228:39272] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/back/.env"] [unique_id "apK9XddHPfW2QFvhmL7Y6AAAAE8"]
[Sat Aug 29 05:07:09.929508 2026] [security2:error] [pid 1028675:tid 1028825] [client 93.123.109.228:39120] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK9XddHPfW2QFvhmL7Y6gAAAA8"]
[Sat Aug 29 05:07:09.944615 2026] [security2:error] [pid 1018003:tid 1018167] [client 40.83.93.50:13637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-blogs.php"] [unique_id "apK9XTAh5Y1i2tUxg4EOdAAABcg"]
[Sat Aug 29 05:07:09.945350 2026] [security2:error] [pid 1028675:tid 1028814] [client 20.48.160.90:49529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/wp-includes/ID3/getid.php"] [unique_id "apK9XddHPfW2QFvhmL7Y6wAAAAQ"]
[Sat Aug 29 05:07:09.951465 2026] [security2:error] [pid 1028675:tid 1028933] [client 93.123.109.228:39206] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/backend-api/.env"] [unique_id "apK9XddHPfW2QFvhmL7Y7QAAAHs"]
[Sat Aug 29 05:07:09.973693 2026] [security2:error] [pid 1028675:tid 1028870] [client 20.48.250.41:62499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/bootstrap.php"] [unique_id "apK9XddHPfW2QFvhmL7Y8gAAADw"]
[Sat Aug 29 05:07:09.986289 2026] [security2:error] [pid 1028675:tid 1028931] [client 20.104.104.62:4846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/wefile.php"] [unique_id "apK9XddHPfW2QFvhmL7Y8wAAAHk"]
[Sat Aug 29 05:07:09.988923 2026] [security2:error] [pid 1028675:tid 1028842] [client 4.205.62.107:22266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/application.config.php"] [unique_id "apK9XddHPfW2QFvhmL7Y9QAAACA"]
[Sat Aug 29 05:07:09.994181 2026] [security2:error] [pid 1028675:tid 1028875] [client 52.139.37.240:20760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/wp-content/plugins/ftde.php"] [unique_id "apK9XddHPfW2QFvhmL7Y9wAAAEE"]
[Sat Aug 29 05:07:09.999743 2026] [security2:error] [pid 1028675:tid 1028820] [client 158.23.184.117:12060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dubeyko.com"] [uri "/Radio.php"] [unique_id "apK9XddHPfW2QFvhmL7Y-QAAAAo"]
[Sat Aug 29 05:07:10.018700 2026] [security2:error] [pid 1028675:tid 1028851] [client 158.158.54.35:10569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/lite.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZAAAAACk"]
[Sat Aug 29 05:07:10.020392 2026] [security2:error] [pid 1028675:tid 1028878] [client 158.23.184.117:2805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/wp-content/upgrade/alfanew.php7"] [unique_id "apK9XtdHPfW2QFvhmL7ZAQAAAEQ"]
[Sat Aug 29 05:07:10.022299 2026] [security2:error] [pid 1028675:tid 1028851] [client 20.104.104.62:42731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/admin123.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZAwAAACk"]
[Sat Aug 29 05:07:10.031987 2026] [security2:error] [pid 1028675:tid 1028914] [client 68.155.159.216:6121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/NewFile.php/"] [unique_id "apK9XtdHPfW2QFvhmL7ZBQAAAGg"]
[Sat Aug 29 05:07:10.038074 2026] [security2:error] [pid 1028675:tid 1028885] [client 20.104.18.15:13591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/radio.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZBwAAAEs"]
[Sat Aug 29 05:07:10.038101 2026] [security2:error] [pid 1028675:tid 1028871] [client 158.23.184.117:40046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cworthy.net"] [uri "/fpwch.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZBgAAAD0"]
[Sat Aug 29 05:07:10.045813 2026] [security2:error] [pid 1028675:tid 1028831] [client 68.155.159.216:16164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZCQAAABU"]
[Sat Aug 29 05:07:10.050367 2026] [security2:error] [pid 1028675:tid 1028874] [client 158.23.184.117:30218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mikelait.managemymood.com"] [uri "/7.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZDAAAAEA"]
[Sat Aug 29 05:07:10.054162 2026] [security2:error] [pid 1028675:tid 1028896] [client 20.104.18.15:36731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/info.php/new.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZDQAAAFY"]
[Sat Aug 29 05:07:10.066165 2026] [security2:error] [pid 1018003:tid 1018163] [client 20.196.209.81:15190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/csv.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOeAAABcQ"]
[Sat Aug 29 05:07:10.070829 2026] [security2:error] [pid 1018003:tid 1018185] [client 158.23.147.79:30500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-admin/css/index.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOeQAABdo"]
[Sat Aug 29 05:07:10.072069 2026] [security2:error] [pid 1028675:tid 1028928] [client 20.104.104.62:44573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/1vbqo.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZDgAAAHY"]
[Sat Aug 29 05:07:10.076449 2026] [security2:error] [pid 1028675:tid 1028898] [client 93.123.109.228:39256] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/backup/.env"] [unique_id "apK9XtdHPfW2QFvhmL7ZEAAAAFg"]
[Sat Aug 29 05:07:10.081184 2026] [security2:error] [pid 1028675:tid 1028830] [client 93.123.109.228:39272] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/be/.env"] [unique_id "apK9XtdHPfW2QFvhmL7ZEQAAABQ"]
[Sat Aug 29 05:07:10.083996 2026] [security2:error] [pid 1018003:tid 1018152] [client 93.123.109.228:39176] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/beta/.env"] [unique_id "apK9XjAh5Y1i2tUxg4EOewAABbk"]
[Sat Aug 29 05:07:10.095664 2026] [security2:error] [pid 1018003:tid 1018271] [client 40.83.93.50:3861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/configs.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOfAAABi8"]
[Sat Aug 29 05:07:10.105892 2026] [security2:error] [pid 1028675:tid 1028866] [client 52.139.37.240:32007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/wp-wordfence-waf.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZFQAAADg"]
[Sat Aug 29 05:07:10.123203 2026] [security2:error] [pid 1018003:tid 1018234] [client 20.104.18.15:5094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/samll.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOfQAABgo"]
[Sat Aug 29 05:07:10.142401 2026] [security2:error] [pid 1028675:tid 1028892] [client 20.104.104.62:4817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/EM.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZGgAAAFI"]
[Sat Aug 29 05:07:10.164905 2026] [security2:error] [pid 1018003:tid 1018177] [client 158.23.184.117:2576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/admin/alfa-rex.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOgAAABdI"]
[Sat Aug 29 05:07:10.169135 2026] [security2:error] [pid 1028675:tid 1028911] [client 168.107.94.195:64006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZJgAAAGU"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:10.182414 2026] [security2:error] [pid 1018003:tid 1018267] [client 158.23.184.117:39988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cworthy.net"] [uri "/storage/index.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOggAABis"]
[Sat Aug 29 05:07:10.184963 2026] [security2:error] [pid 1028675:tid 1028824] [client 20.48.250.41:62507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/export.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZJwAAAA4"]
[Sat Aug 29 05:07:10.186757 2026] [security2:error] [pid 1018003:tid 1018268] [client 52.139.37.240:20775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOgwAABiw"]
[Sat Aug 29 05:07:10.199843 2026] [security2:error] [pid 1028675:tid 1028846] [client 158.23.184.117:30056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mikelait.managemymood.com"] [uri "/10.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZKgAAACQ"]
[Sat Aug 29 05:07:10.200473 2026] [security2:error] [pid 1028675:tid 1028889] [client 20.104.18.15:13636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/one.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZKwAAAE8"]
[Sat Aug 29 05:07:10.201725 2026] [security2:error] [pid 1028675:tid 1028884] [client 158.23.147.79:62713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sprint52.com"] [uri "/first.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZLAAAAEo"]
[Sat Aug 29 05:07:10.203076 2026] [security2:error] [pid 1028675:tid 1028907] [client 20.151.200.44:45996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/cafe.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZLQAAAGE"]
[Sat Aug 29 05:07:10.209402 2026] [security2:error] [pid 1018003:tid 1018160] [client 20.196.209.81:15494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-content/content.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOhQAABcE"]
[Sat Aug 29 05:07:10.210810 2026] [security2:error] [pid 1018003:tid 1018275] [client 20.104.104.62:10816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/h02ugyh.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOhgAABjM"]
[Sat Aug 29 05:07:10.211034 2026] [security2:error] [pid 1018003:tid 1018221] [client 158.23.184.117:11939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dubeyko.com"] [uri "/wp-includes/Requests/Exception/file.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOhwAABf4"]
[Sat Aug 29 05:07:10.217281 2026] [core:error] [pid 1028675:tid 1028883] [client 158.158.54.35:20581] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:10.217296 2026] [core:error] [pid 1028675:tid 1028883] [client 158.158.54.35:20581] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:10.222948 2026] [security2:error] [pid 1028675:tid 1028849] [client 20.104.104.62:64756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wso2022_shell.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZMQAAACc"]
[Sat Aug 29 05:07:10.235813 2026] [security2:error] [pid 1018003:tid 1018207] [client 68.155.159.216:50344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOigAABfA"]
[Sat Aug 29 05:07:10.240800 2026] [security2:error] [pid 1028675:tid 1028932] [client 93.123.109.228:39132] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/client/.env"] [unique_id "apK9XtdHPfW2QFvhmL7ZMgAAAHo"]
[Sat Aug 29 05:07:10.268874 2026] [security2:error] [pid 1028675:tid 1028894] [client 93.123.109.228:39212] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/cms/.env"] [unique_id "apK9XtdHPfW2QFvhmL7ZNAAAAFQ"]
[Sat Aug 29 05:07:10.277800 2026] [security2:error] [pid 1018003:tid 1018191] [client 20.104.104.62:4819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/ca4.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOjgAABeA"]
[Sat Aug 29 05:07:10.302978 2026] [security2:error] [pid 1028675:tid 1028913] [client 52.139.37.240:32077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/ws49.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZPAAAAGc"]
[Sat Aug 29 05:07:10.303873 2026] [security2:error] [pid 1028675:tid 1028888] [client 20.104.18.15:5013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/she11.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZPQAAAE4"]
[Sat Aug 29 05:07:10.304410 2026] [security2:error] [pid 1028675:tid 1028931] [client 68.155.159.216:33744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZPgAAAHk"]
[Sat Aug 29 05:07:10.305759 2026] [security2:error] [pid 1028675:tid 1028842] [client 4.205.62.107:65447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/myfile.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZPwAAACA"]
[Sat Aug 29 05:07:10.308754 2026] [security2:error] [pid 1018003:tid 1018157] [client 158.23.184.117:2807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/wp-content/export.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOkAAABb4"]
[Sat Aug 29 05:07:10.315888 2026] [security2:error] [pid 1028675:tid 1028847] [client 20.48.160.90:51632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/session.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZQAAAACU"]
[Sat Aug 29 05:07:10.320441 2026] [security2:error] [pid 1028675:tid 1028815] [client 20.48.250.41:60707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/gk.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZQQAAAAU"]
[Sat Aug 29 05:07:10.324501 2026] [security2:error] [pid 1028675:tid 1028848] [client 4.205.62.107:22406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/wp-act.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZQgAAACY"]
[Sat Aug 29 05:07:10.326766 2026] [security2:error] [pid 1018003:tid 1018161] [client 158.23.147.79:17489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/asd.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOkgAABcI"]
[Sat Aug 29 05:07:10.331919 2026] [security2:error] [pid 1028675:tid 1028878] [client 20.104.104.62:23415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/7h.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZQwAAAEQ"]
[Sat Aug 29 05:07:10.337733 2026] [security2:error] [pid 1028675:tid 1028851] [client 20.104.18.15:13643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/503.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZRAAAACk"]
[Sat Aug 29 05:07:10.344725 2026] [security2:error] [pid 1028675:tid 1028925] [client 4.205.62.107:58393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/themes.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZRgAAAHM"]
[Sat Aug 29 05:07:10.349532 2026] [security2:error] [pid 1028675:tid 1028916] [client 158.23.184.117:30229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mikelait.managemymood.com"] [uri "/13.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZSAAAAGo"]
[Sat Aug 29 05:07:10.353057 2026] [security2:error] [pid 1028675:tid 1028902] [client 20.203.141.11:27422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-content.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZSwAAAFw"]
[Sat Aug 29 05:07:10.355288 2026] [security2:error] [pid 1028675:tid 1028871] [client 93.123.109.228:39148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/config.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZTQAAAD0"]
[Sat Aug 29 05:07:10.362641 2026] [security2:error] [pid 1018003:tid 1018216] [client 20.104.104.62:44583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/shelp.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOkwAABfk"]
[Sat Aug 29 05:07:10.378985 2026] [security2:error] [pid 1018003:tid 1018164] [client 158.23.184.117:63778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cworthy.net"] [uri "/wp-includes/blocks/search/index.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOlAAABcU"]
[Sat Aug 29 05:07:10.399046 2026] [security2:error] [pid 1028675:tid 1028861] [client 158.23.184.117:12061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dubeyko.com"] [uri "/wp-admin/add.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZVQAAADM"]
[Sat Aug 29 05:07:10.413229 2026] [security2:error] [pid 1018003:tid 1018170] [client 40.83.93.50:13605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-comments-post.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOlQAABcs"]
[Sat Aug 29 05:07:10.427858 2026] [security2:error] [pid 1028675:tid 1028890] [client 20.104.104.62:64700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/x0x.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZXgAAAFA"]
[Sat Aug 29 05:07:10.429723 2026] [security2:error] [pid 1028675:tid 1028877] [client 68.155.159.216:12262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZXwAAAEM"]
[Sat Aug 29 05:07:10.431339 2026] [security2:error] [pid 1028675:tid 1028872] [client 20.104.18.15:5111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/kerang.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZYQAAAD4"]
[Sat Aug 29 05:07:10.451343 2026] [security2:error] [pid 1028675:tid 1028936] [client 158.23.184.117:2619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/new.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZZQAAAH4"]
[Sat Aug 29 05:07:10.455393 2026] [security2:error] [pid 1018003:tid 1018196] [client 93.123.109.228:39244] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/config/.env"] [unique_id "apK9XjAh5Y1i2tUxg4EOmAAABeU"]
[Sat Aug 29 05:07:10.463281 2026] [security2:error] [pid 1028675:tid 1028826] [client 158.158.54.35:10215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/term.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZawAAABA"]
[Sat Aug 29 05:07:10.466372 2026] [security2:error] [pid 1028675:tid 1028933] [client 20.197.61.180:13832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/dxc.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZbAAAAHs"]
[Sat Aug 29 05:07:10.485276 2026] [core:error] [pid 1018003:tid 1018258] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:10.485295 2026] [core:error] [pid 1018003:tid 1018258] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:10.492117 2026] [security2:error] [pid 1018003:tid 1018167] [client 93.123.109.228:39234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/config/aws.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOmwAABcg"]
[Sat Aug 29 05:07:10.495816 2026] [security2:error] [pid 1028675:tid 1028892] [client 158.23.184.117:30213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mikelait.managemymood.com"] [uri "/100.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZcwAAAFI"]
[Sat Aug 29 05:07:10.501491 2026] [security2:error] [pid 1028675:tid 1028895] [client 52.139.37.240:52199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/xxx.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZdQAAAFU"]
[Sat Aug 29 05:07:10.506471 2026] [security2:error] [pid 1028675:tid 1028889] [client 20.104.104.62:44603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/13ede.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZdgAAAE8"]
[Sat Aug 29 05:07:10.520882 2026] [security2:error] [pid 1028675:tid 1028879] [client 20.196.209.81:1993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/fox.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZegAAAEU"]
[Sat Aug 29 05:07:10.523365 2026] [security2:error] [pid 1028675:tid 1028922] [client 158.23.184.117:63777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cworthy.net"] [uri "/wp-signup.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZfQAAAHA"]
[Sat Aug 29 05:07:10.542870 2026] [security2:error] [pid 1018003:tid 1018217] [client 158.23.184.117:12075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dubeyko.com"] [uri "/wp-includes/assets/about.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOngAABfo"]
[Sat Aug 29 05:07:10.543615 2026] [security2:error] [pid 1028675:tid 1028927] [client 20.48.160.90:51620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/eagle.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZgAAAAHU"]
[Sat Aug 29 05:07:10.550899 2026] [security2:error] [pid 1018003:tid 1018244] [client 168.107.94.195:64336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOnwAABhQ"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:10.561914 2026] [security2:error] [pid 1028675:tid 1028847] [client 93.123.109.228:39272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/config/config.inc.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZhQAAACU"]
[Sat Aug 29 05:07:10.563986 2026] [security2:error] [pid 1018003:tid 1018163] [client 20.104.18.15:13642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/504.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOoAAABcQ"]
[Sat Aug 29 05:07:10.564518 2026] [security2:error] [pid 1028675:tid 1028837] [client 20.48.250.41:62531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/logs1.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZhwAAABs"]
[Sat Aug 29 05:07:10.576504 2026] [security2:error] [pid 1028675:tid 1028925] [client 20.104.104.62:36986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/wp-gzone.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZiwAAAHM"]
[Sat Aug 29 05:07:10.579519 2026] [security2:error] [pid 1028675:tid 1028916] [client 20.104.18.15:5009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/m.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZjAAAAGo"]
[Sat Aug 29 05:07:10.581265 2026] [security2:error] [pid 1028675:tid 1028902] [client 20.104.104.62:40248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wpxadmin.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZjQAAAFw"]
[Sat Aug 29 05:07:10.583845 2026] [security2:error] [pid 1028675:tid 1028875] [client 68.155.159.216:51857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-l0gin.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZjgAAAEE"]
[Sat Aug 29 05:07:10.587634 2026] [security2:error] [pid 1028675:tid 1028811] [client 20.104.18.15:36611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/w.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZkAAAAAE"]
[Sat Aug 29 05:07:10.595021 2026] [security2:error] [pid 1018003:tid 1018240] [client 158.23.184.117:2785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/wp-content/plugins/revslider/admin.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOoQAABhA"]
[Sat Aug 29 05:07:10.603810 2026] [security2:error] [pid 1028675:tid 1028822] [client 20.196.209.81:5773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-content/core.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZlAAAAAw"]
[Sat Aug 29 05:07:10.609742 2026] [security2:error] [pid 1028675:tid 1028828] [client 20.104.104.62:4137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.americanvarietyradio.net"] [uri "/fesa.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZlQAAABI"]
[Sat Aug 29 05:07:10.611506 2026] [security2:error] [pid 1018003:tid 1018190] [client 93.123.109.228:39186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/config/config.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOpAAABd8"]
[Sat Aug 29 05:07:10.638173 2026] [security2:error] [pid 1028675:tid 1028898] [client 20.104.68.135:9026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lisakayguitar.com"] [uri "/sm.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZmwAAAFg"]
[Sat Aug 29 05:07:10.639394 2026] [security2:error] [pid 1028675:tid 1028904] [client 40.83.93.50:7509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/disagraeed.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZnAAAAF4"]
[Sat Aug 29 05:07:10.645168 2026] [security2:error] [pid 1018003:tid 1018172] [client 158.23.184.117:60612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mikelait.managemymood.com"] [uri "/222.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOpwAABc0"]
[Sat Aug 29 05:07:10.651081 2026] [security2:error] [pid 1028675:tid 1028899] [client 20.104.104.62:44586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/k8.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZowAAAFk"]
[Sat Aug 29 05:07:10.657475 2026] [security2:error] [pid 1028675:tid 1028816] [client 93.123.109.228:39132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/config/env.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZpQAAAAY"]
[Sat Aug 29 05:07:10.663410 2026] [security2:error] [pid 1028675:tid 1028833] [client 158.158.54.35:20604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-content/file.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZqgAAABc"]
[Sat Aug 29 05:07:10.667845 2026] [security2:error] [pid 1018003:tid 1018213] [client 158.23.184.117:63768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cworthy.net"] [uri "/404.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOqQAABfY"]
[Sat Aug 29 05:07:10.675027 2026] [security2:error] [pid 1028675:tid 1028920] [client 158.23.147.79:59886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/lv.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZrAAAAG4"]
[Sat Aug 29 05:07:10.682148 2026] [security2:error] [pid 1028675:tid 1028881] [client 52.139.37.240:21177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/z.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZrQAAAEc"]
[Sat Aug 29 05:07:10.686121 2026] [security2:error] [pid 1028675:tid 1028826] [client 20.48.160.90:51231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/up-kon.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZrgAAABA"]
[Sat Aug 29 05:07:10.686216 2026] [security2:error] [pid 1028675:tid 1028836] [client 158.23.184.117:11956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dubeyko.com"] [uri "/wp-content/themes/twentytwentythree.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZrwAAABo"]
[Sat Aug 29 05:07:10.693290 2026] [security2:error] [pid 1028675:tid 1028937] [client 20.48.250.41:58385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/inege.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZsAAAAH8"]
[Sat Aug 29 05:07:10.695689 2026] [security2:error] [pid 1028675:tid 1028857] [client 52.139.37.240:32100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/0x.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZsgAAAC8"]
[Sat Aug 29 05:07:10.702519 2026] [security2:error] [pid 1028675:tid 1028924] [client 93.123.109.228:39252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/config/nexmo.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZtAAAAHI"]
[Sat Aug 29 05:07:10.705387 2026] [security2:error] [pid 1028675:tid 1028921] [client 20.104.18.15:13674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/admin.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZtgAAAG8"]
[Sat Aug 29 05:07:10.708315 2026] [security2:error] [pid 1028675:tid 1028863] [client 93.123.109.228:39206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/config/module.config.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZtwAAADU"]
[Sat Aug 29 05:07:10.737151 2026] [security2:error] [pid 1018003:tid 1018267] [client 158.23.184.117:2767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/wp-content/images/uploads/admin.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOrAAABis"]
[Sat Aug 29 05:07:10.740990 2026] [security2:error] [pid 1028675:tid 1028912] [client 20.104.18.15:36659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/x.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZugAAAGY"]
[Sat Aug 29 05:07:10.752412 2026] [security2:error] [pid 1018003:tid 1018162] [client 93.123.109.228:39286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/config/stripe.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOrQAABcM"]
[Sat Aug 29 05:07:10.759336 2026] [security2:error] [pid 1018003:tid 1018195] [client 4.205.62.107:8999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/queue.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOrgAABeQ"]
[Sat Aug 29 05:07:10.766640 2026] [security2:error] [pid 1018003:tid 1018189] [client 4.205.62.107:55981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/phpsysinfo.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOrwAABd4"]
[Sat Aug 29 05:07:10.767216 2026] [security2:error] [pid 1018003:tid 1018231] [client 20.104.18.15:4941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/fling.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOsAAABgc"]
[Sat Aug 29 05:07:10.773465 2026] [security2:error] [pid 1018003:tid 1018186] [client 20.104.104.62:42682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/str.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOsgAABds"]
[Sat Aug 29 05:07:10.775165 2026] [security2:error] [pid 1028675:tid 1028844] [client 158.23.147.79:50114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZwQAAACI"]
[Sat Aug 29 05:07:10.777648 2026] [security2:error] [pid 1028675:tid 1028905] [client 158.23.147.79:25579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-includes/index.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZwgAAAF8"]
[Sat Aug 29 05:07:10.784567 2026] [security2:error] [pid 1028675:tid 1028882] [client 68.155.159.216:49228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/hehehehe.php"] [unique_id "apK9XtdHPfW2QFvhmL7ZxwAAAEg"]
[Sat Aug 29 05:07:10.786248 2026] [security2:error] [pid 1018003:tid 1018182] [client 20.104.104.62:10828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/alog.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOtAAABdc"]
[Sat Aug 29 05:07:10.790825 2026] [security2:error] [pid 1018003:tid 1018191] [client 68.155.159.216:30719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-content/themes/too.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOtQAABeA"]
[Sat Aug 29 05:07:10.822700 2026] [security2:error] [pid 1018003:tid 1018207] [client 158.23.184.117:63763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cworthy.net"] [uri "/as.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOuAAABfA"]
[Sat Aug 29 05:07:10.829223 2026] [security2:error] [pid 1028675:tid 1028878] [client 68.155.159.216:18369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/atomlib.php"] [unique_id "apK9XtdHPfW2QFvhmL7Z0QAAAEQ"]
[Sat Aug 29 05:07:10.836748 2026] [security2:error] [pid 1018003:tid 1018200] [client 20.48.160.90:51278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/tinny.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOugAABek"]
[Sat Aug 29 05:07:10.837382 2026] [security2:error] [pid 1028675:tid 1028902] [client 20.48.250.41:59270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/wp-link10.php"] [unique_id "apK9XtdHPfW2QFvhmL7Z2AAAAFw"]
[Sat Aug 29 05:07:10.848304 2026] [security2:error] [pid 1028675:tid 1028884] [client 158.23.184.117:60614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mikelait.managemymood.com"] [uri "/adminfuns.php"] [unique_id "apK9XtdHPfW2QFvhmL7Z2gAAAEo"]
[Sat Aug 29 05:07:10.848662 2026] [security2:error] [pid 1018003:tid 1018268] [client 20.203.141.11:13364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOvAAABiw"]
[Sat Aug 29 05:07:10.877685 2026] [security2:error] [pid 1018003:tid 1018258] [client 20.104.18.15:13733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/ws85.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOwAAABiI"]
[Sat Aug 29 05:07:10.877685 2026] [security2:error] [pid 1028675:tid 1028880] [client 52.139.37.240:20762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/f35.php"] [unique_id "apK9XtdHPfW2QFvhmL7Z3QAAAEY"]
[Sat Aug 29 05:07:10.881060 2026] [security2:error] [pid 1028675:tid 1028900] [client 158.23.184.117:11931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dubeyko.com"] [uri "/wp-content/languages/themes/num.php"] [unique_id "apK9XtdHPfW2QFvhmL7Z3gAAAFo"]
[Sat Aug 29 05:07:10.883214 2026] [security2:error] [pid 1018003:tid 1018174] [client 40.83.93.50:22835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-config.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOwQAABc8"]
[Sat Aug 29 05:07:10.897010 2026] [security2:error] [pid 1018003:tid 1018236] [client 52.139.37.240:32060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/CDX1.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOwwAABgw"]
[Sat Aug 29 05:07:10.909493 2026] [security2:error] [pid 1028675:tid 1028904] [client 20.104.68.135:9085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lisakayguitar.com"] [uri "/shell.php"] [unique_id "apK9XtdHPfW2QFvhmL7Z5wAAAF4"]
[Sat Aug 29 05:07:10.910863 2026] [security2:error] [pid 1028675:tid 1028871] [client 158.23.184.117:2810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/tools.php"] [unique_id "apK9XtdHPfW2QFvhmL7Z6wAAAD0"]
[Sat Aug 29 05:07:10.918967 2026] [security2:error] [pid 1018003:tid 1018277] [client 158.158.54.35:18029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/config.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOxAAABjU"]
[Sat Aug 29 05:07:10.920809 2026] [security2:error] [pid 1018003:tid 1018233] [client 20.104.104.62:10840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/adin.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOxQAABgk"]
[Sat Aug 29 05:07:10.927436 2026] [security2:error] [pid 1028675:tid 1028860] [client 20.104.104.62:60425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/mega.php"] [unique_id "apK9XtdHPfW2QFvhmL7Z8AAAADI"]
[Sat Aug 29 05:07:10.928395 2026] [security2:error] [pid 1028675:tid 1028927] [client 20.196.209.81:2037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/disagraeosc.php"] [unique_id "apK9XtdHPfW2QFvhmL7Z7wAAAHU"]
[Sat Aug 29 05:07:10.928395 2026] [security2:error] [pid 1018003:tid 1018252] [client 20.104.18.15:36786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/ssla.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOxwAABhw"]
[Sat Aug 29 05:07:10.933148 2026] [security2:error] [pid 1028675:tid 1028813] [client 168.107.94.195:64875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9XtdHPfW2QFvhmL7Z8gAAAAM"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:10.934125 2026] [security2:error] [pid 1028675:tid 1028862] [client 20.104.49.130:60947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/ops.php"] [unique_id "apK9XtdHPfW2QFvhmL7Z8wAAADQ"]
[Sat Aug 29 05:07:10.951129 2026] [security2:error] [pid 1018003:tid 1018185] [client 158.23.147.79:30581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOygAABdo"]
[Sat Aug 29 05:07:10.953868 2026] [security2:error] [pid 1028675:tid 1028933] [client 87.199.194.213:64082] ModSecurity: Access denied with code 406 (phase 1). IPmatchFromFile: "87.199.194.213" matched at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1090"] [id "999022"] [msg "Blacklisted IP Address for POST data StopForumSpam List"] [hostname "thesmartpm.com"] [uri "/apps/wp-comments-post.php"] [unique_id "apK9XtdHPfW2QFvhmL7Z-QAAAHs"], referer: https://thesmartpm.com/ut-dallas-applied-project-management-forum-november-2014-presentation/
[Sat Aug 29 05:07:10.953985 2026] [security2:error] [pid 1028675:tid 1028933] [client 87.199.194.213:64082] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "406"] [hostname "thesmartpm.com"] [uri "/apps/wp-comments-post.php"] [unique_id "apK9XtdHPfW2QFvhmL7Z-QAAAHs"], referer: https://thesmartpm.com/ut-dallas-applied-project-management-forum-november-2014-presentation/
[Sat Aug 29 05:07:10.966267 2026] [security2:error] [pid 1028675:tid 1028810] [client 20.104.18.15:5050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/btyuio.php"] [unique_id "apK9XtdHPfW2QFvhmL7Z_AAAAAA"]
[Sat Aug 29 05:07:10.969132 2026] [security2:error] [pid 1018003:tid 1018246] [client 158.23.184.117:63806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cworthy.net"] [uri "/php.php"] [unique_id "apK9XjAh5Y1i2tUxg4EOzAAABhY"]
[Sat Aug 29 05:07:10.988726 2026] [security2:error] [pid 1028675:tid 1028826] [client 93.123.109.228:39212] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/crm/.env"] [unique_id "apK9XtdHPfW2QFvhmL7Z_wAAABA"]
[Sat Aug 29 05:07:10.999219 2026] [security2:error] [pid 1028675:tid 1028937] [client 93.123.109.228:39120] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/cron/.env"] [unique_id "apK9XtdHPfW2QFvhmL7aAAAAAH8"]
[Sat Aug 29 05:07:11.002506 2026] [security2:error] [pid 1018003:tid 1018163] [client 158.23.184.117:30208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mikelait.managemymood.com"] [uri "/abcd.php"] [unique_id "apK9XzAh5Y1i2tUxg4EOzQAABcQ"]
[Sat Aug 29 05:07:11.004181 2026] [security2:error] [pid 1018003:tid 1018183] [client 93.123.109.228:39304] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/current/.env"] [unique_id "apK9XzAh5Y1i2tUxg4EOzgAABdg"]
[Sat Aug 29 05:07:11.016217 2026] [security2:error] [pid 1028675:tid 1028866] [client 93.123.109.228:39312] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/demo/.env"] [unique_id "apK9X9dHPfW2QFvhmL7aAQAAADg"]
[Sat Aug 29 05:07:11.028384 2026] [security2:error] [pid 1028675:tid 1028936] [client 52.139.37.240:53207] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "cpcontacts.greathairkc.com"] [uri "/c99.php"] [unique_id "apK9X9dHPfW2QFvhmL7aAgAAAH4"]
[Sat Aug 29 05:07:11.030759 2026] [security2:error] [pid 1028675:tid 1028839] [client 20.196.209.81:22435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-content/db-status.php"] [unique_id "apK9X9dHPfW2QFvhmL7aAwAAAB0"]
[Sat Aug 29 05:07:11.033897 2026] [security2:error] [pid 1018003:tid 1018221] [client 20.48.160.90:51679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/wp-easy.php"] [unique_id "apK9XzAh5Y1i2tUxg4EO0AAABf4"]
[Sat Aug 29 05:07:11.041253 2026] [security2:error] [pid 1018003:tid 1018195] [client 20.48.250.41:60685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/ww.php"] [unique_id "apK9XzAh5Y1i2tUxg4EO0QAABeQ"]
[Sat Aug 29 05:07:11.047314 2026] [http2:warn] [pid 1018003:tid 1018214] [client 57.141.14.83:32086] h2_stream(1018003-136-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:07:11.059579 2026] [core:error] [pid 1018003:tid 1018186] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:11.059598 2026] [core:error] [pid 1018003:tid 1018186] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:11.064415 2026] [security2:error] [pid 1018003:tid 1018159] [client 20.104.18.15:13635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/ffs.php"] [unique_id "apK9XzAh5Y1i2tUxg4EO1AAABcA"]
[Sat Aug 29 05:07:11.065749 2026] [security2:error] [pid 1028675:tid 1028901] [client 20.104.104.62:10858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/sf9.php"] [unique_id "apK9X9dHPfW2QFvhmL7aCAAAAFs"]
[Sat Aug 29 05:07:11.067502 2026] [security2:error] [pid 1018003:tid 1018261] [client 68.155.159.216:24468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/dropdown.php"] [unique_id "apK9XzAh5Y1i2tUxg4EO1QAABiU"]
[Sat Aug 29 05:07:11.083735 2026] [security2:error] [pid 1028675:tid 1028857] [client 52.139.37.240:21182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/file61.php"] [unique_id "apK9X9dHPfW2QFvhmL7aCQAAAC8"]
[Sat Aug 29 05:07:11.085166 2026] [security2:error] [pid 1018003:tid 1018166] [client 93.123.109.228:39176] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/dev/.env"] [unique_id "apK9XzAh5Y1i2tUxg4EO1wAABcc"]
[Sat Aug 29 05:07:11.089024 2026] [security2:error] [pid 1018003:tid 1018157] [client 93.123.109.228:39346] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/develop/.env"] [unique_id "apK9XzAh5Y1i2tUxg4EO2AAABb4"]
[Sat Aug 29 05:07:11.092928 2026] [security2:error] [pid 1028675:tid 1028819] [client 52.139.37.240:32735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/akcc.php"] [unique_id "apK9X9dHPfW2QFvhmL7aCgAAAAk"]
[Sat Aug 29 05:07:11.097214 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.104.104.62:20805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wso2.5.php"] [unique_id "apK9XzAh5Y1i2tUxg4EO2QAABcI"]
[Sat Aug 29 05:07:11.101265 2026] [security2:error] [pid 1028675:tid 1028887] [client 20.104.104.62:52069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/ww3.php"] [unique_id "apK9X9dHPfW2QFvhmL7aDwAAAE0"]
[Sat Aug 29 05:07:11.103176 2026] [security2:error] [pid 1018003:tid 1018104] [remote 40.77.167.35:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.167.77.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantsfans.net"] [uri "/message_board/index.php"] [unique_id "apK9XzAh5Y1i2tUxg4EO2gAFw1M"]
[Sat Aug 29 05:07:11.105227 2026] [security2:error] [pid 1028675:tid 1028924] [client 20.104.68.135:55655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lisakayguitar.com"] [uri "/simple.php"] [unique_id "apK9X9dHPfW2QFvhmL7aEwAAAHI"]
[Sat Aug 29 05:07:11.110878 2026] [security2:error] [pid 1018003:tid 1018198] [client 158.158.54.35:20320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/files.php"] [unique_id "apK9XzAh5Y1i2tUxg4EO2wAABec"]
[Sat Aug 29 05:07:11.123127 2026] [security2:error] [pid 1018003:tid 1018200] [client 20.104.18.15:5004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/dehnl.php"] [unique_id "apK9XzAh5Y1i2tUxg4EO3AAABek"]
[Sat Aug 29 05:07:11.125714 2026] [security2:error] [pid 1028675:tid 1028854] [client 93.123.109.228:39204] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/developer/.env"] [unique_id "apK9X9dHPfW2QFvhmL7aFQAAACw"]
[Sat Aug 29 05:07:11.125862 2026] [security2:error] [pid 1018003:tid 1018256] [client 4.205.62.107:22420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/xp.php"] [unique_id "apK9XzAh5Y1i2tUxg4EO3QAABiA"]
[Sat Aug 29 05:07:11.136724 2026] [security2:error] [pid 1028675:tid 1028872] [client 93.123.109.228:39212] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/development/.env"] [unique_id "apK9X9dHPfW2QFvhmL7aFgAAAD4"]
[Sat Aug 29 05:07:11.199296 2026] [security2:error] [pid 1028675:tid 1028848] [client 158.23.147.79:30709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/index.php"] [unique_id "apK9X9dHPfW2QFvhmL7aIgAAACY"]
[Sat Aug 29 05:07:11.201949 2026] [security2:error] [pid 1028675:tid 1028923] [client 20.104.18.15:13639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/nano.php"] [unique_id "apK9X9dHPfW2QFvhmL7aIwAAAHE"]
[Sat Aug 29 05:07:11.202494 2026] [security2:error] [pid 1018003:tid 1018160] [client 68.155.159.216:5986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/dropdown.php"] [unique_id "apK9XzAh5Y1i2tUxg4EO4gAABcE"]
[Sat Aug 29 05:07:11.203336 2026] [security2:error] [pid 1028675:tid 1028918] [client 20.104.104.62:10636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/lte7.php"] [unique_id "apK9X9dHPfW2QFvhmL7aJQAAAGw"]
[Sat Aug 29 05:07:11.206306 2026] [security2:error] [pid 1028675:tid 1028842] [client 68.155.159.216:64442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/file.php"] [unique_id "apK9X9dHPfW2QFvhmL7aJgAAACA"]
[Sat Aug 29 05:07:11.207330 2026] [security2:error] [pid 1028675:tid 1028851] [client 20.48.160.90:51598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/d7.php"] [unique_id "apK9X9dHPfW2QFvhmL7aJwAAACk"]
[Sat Aug 29 05:07:11.222445 2026] [security2:error] [pid 1028675:tid 1028832] [client 20.197.61.180:13830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/wp-2019.php"] [unique_id "apK9X9dHPfW2QFvhmL7aKQAAABY"]
[Sat Aug 29 05:07:11.279070 2026] [security2:error] [pid 1028675:tid 1028916] [client 52.139.37.240:21421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/mah.php"] [unique_id "apK9X9dHPfW2QFvhmL7aNAAAAGo"]
[Sat Aug 29 05:07:11.282516 2026] [security2:error] [pid 1028675:tid 1028815] [client 20.151.200.44:47405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/eval.php"] [unique_id "apK9X9dHPfW2QFvhmL7aNQAAAAU"]
[Sat Aug 29 05:07:11.284448 2026] [security2:error] [pid 1028675:tid 1028846] [client 20.104.18.15:5099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/zoo2.php"] [unique_id "apK9X9dHPfW2QFvhmL7aNgAAACQ"]
[Sat Aug 29 05:07:11.286986 2026] [security2:error] [pid 1028675:tid 1028919] [client 52.139.37.240:32104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK9X9dHPfW2QFvhmL7aNwAAAG0"]
[Sat Aug 29 05:07:11.288062 2026] [security2:error] [pid 1028675:tid 1028859] [client 20.48.250.41:60771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/w1px.php"] [unique_id "apK9X9dHPfW2QFvhmL7aOgAAADE"]
[Sat Aug 29 05:07:11.290308 2026] [security2:error] [pid 1028675:tid 1028871] [client 20.104.104.62:52087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/sko.php"] [unique_id "apK9X9dHPfW2QFvhmL7aPQAAAD0"]
[Sat Aug 29 05:07:11.301448 2026] [security2:error] [pid 1018003:tid 1018175] [client 93.123.109.228:39244] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/erp/.env"] [unique_id "apK9XzAh5Y1i2tUxg4EO6AAABdA"]
[Sat Aug 29 05:07:11.301504 2026] [security2:error] [pid 1028675:tid 1028884] [client 20.104.68.135:9061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lisakayguitar.com"] [uri "/wp-admin.php"] [unique_id "apK9X9dHPfW2QFvhmL7aQgAAAEo"]
[Sat Aug 29 05:07:11.316058 2026] [security2:error] [pid 1028675:tid 1028862] [client 168.107.94.195:65332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9X9dHPfW2QFvhmL7aQwAAADQ"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:11.319884 2026] [security2:error] [pid 1018003:tid 1018185] [client 93.123.109.228:39288] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/etc/apache2/apache2.conf"] [unique_id "apK9XzAh5Y1i2tUxg4EO6QAABdo"]
[Sat Aug 29 05:07:11.324156 2026] [security2:error] [pid 1018003:tid 1018219] [client 20.203.141.11:45407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/css/wp-login.php"] [unique_id "apK9XzAh5Y1i2tUxg4EO6wAABfw"]
[Sat Aug 29 05:07:11.328815 2026] [security2:error] [pid 1028675:tid 1028898] [client 93.123.109.228:39100] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/etc/boto.cfg"] [unique_id "apK9X9dHPfW2QFvhmL7aRAAAAFg"]
[Sat Aug 29 05:07:11.330995 2026] [security2:error] [pid 1028675:tid 1028935] [client 20.196.209.81:15188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/about.php525"] [unique_id "apK9X9dHPfW2QFvhmL7aRQAAAH0"]
[Sat Aug 29 05:07:11.332581 2026] [security2:error] [pid 1018003:tid 1018152] [client 20.104.18.15:36730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "apK9XzAh5Y1i2tUxg4EO7QAABbk"]
[Sat Aug 29 05:07:11.332974 2026] [security2:error] [pid 1018003:tid 1018240] [client 93.123.109.228:39304] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/fe/.env"] [unique_id "apK9XzAh5Y1i2tUxg4EO7AAABhA"]
[Sat Aug 29 05:07:11.335702 2026] [security2:error] [pid 1018003:tid 1018179] [client 20.104.104.62:10818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/tanjiro.php"] [unique_id "apK9XzAh5Y1i2tUxg4EO7gAABdQ"]
[Sat Aug 29 05:07:11.350663 2026] [security2:error] [pid 1028675:tid 1028841] [client 68.155.159.216:50215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/ans.php"] [unique_id "apK9X9dHPfW2QFvhmL7aTgAAAB8"]
[Sat Aug 29 05:07:11.359786 2026] [security2:error] [pid 1018003:tid 1018167] [client 40.83.93.50:13610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-configs.php"] [unique_id "apK9XzAh5Y1i2tUxg4EO8QAABcg"]
[Sat Aug 29 05:07:11.376599 2026] [security2:error] [pid 1028675:tid 1028881] [client 20.104.18.15:13635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/ano.php"] [unique_id "apK9X9dHPfW2QFvhmL7aUwAAAEc"]
[Sat Aug 29 05:07:11.384277 2026] [security2:error] [pid 1028675:tid 1028866] [client 93.123.109.228:39312] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/front/.env"] [unique_id "apK9X9dHPfW2QFvhmL7aVAAAADg"]
[Sat Aug 29 05:07:11.385479 2026] [security2:error] [pid 1028675:tid 1028839] [client 20.48.160.90:51217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/v5.php"] [unique_id "apK9X9dHPfW2QFvhmL7aVQAAAB0"]
[Sat Aug 29 05:07:11.393230 2026] [security2:error] [pid 1028675:tid 1028853] [client 93.123.109.228:39256] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/frontend/.env"] [unique_id "apK9X9dHPfW2QFvhmL7aVgAAACs"]
[Sat Aug 29 05:07:11.394274 2026] [security2:error] [pid 1028675:tid 1028840] [client 158.158.54.35:10615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK9X9dHPfW2QFvhmL7aVwAAAB4"]
[Sat Aug 29 05:07:11.410110 2026] [security2:error] [pid 1028675:tid 1028831] [client 40.83.93.50:7439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/add_actualites.php"] [unique_id "apK9X9dHPfW2QFvhmL7aWQAAABU"]
[Sat Aug 29 05:07:11.427454 2026] [security2:error] [pid 1028675:tid 1028914] [client 20.196.209.81:13122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-content/disagrsxr.php"] [unique_id "apK9X9dHPfW2QFvhmL7aWgAAAGg"]
[Sat Aug 29 05:07:11.434627 2026] [security2:error] [pid 1028675:tid 1028911] [client 158.23.147.79:17486] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/1.php"] [unique_id "apK9X9dHPfW2QFvhmL7aXQAAAGU"]
[Sat Aug 29 05:07:11.434710 2026] [security2:error] [pid 1028675:tid 1028911] [client 158.23.147.79:17486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/1.php"] [unique_id "apK9X9dHPfW2QFvhmL7aXQAAAGU"]
[Sat Aug 29 05:07:11.439949 2026] [security2:error] [pid 1018003:tid 1018183] [client 20.104.104.62:20687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-mode.php"] [unique_id "apK9XzAh5Y1i2tUxg4EO9AAABdg"]
[Sat Aug 29 05:07:11.451893 2026] [security2:error] [pid 1028675:tid 1028906] [client 68.155.159.216:33674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/chosen.php"] [unique_id "apK9X9dHPfW2QFvhmL7aXwAAAGA"]
[Sat Aug 29 05:07:11.453068 2026] [security2:error] [pid 1018003:tid 1018270] [client 20.48.250.41:59363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/to.php"] [unique_id "apK9XzAh5Y1i2tUxg4EO9gAABi4"]
[Sat Aug 29 05:07:11.457122 2026] [security2:error] [pid 1028675:tid 1028780] [remote 93.123.109.228:51634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/config.php"] [unique_id "apK9X9dHPfW2QFvhmL7aYAAAXWM"]
[Sat Aug 29 05:07:11.457219 2026] [security2:error] [pid 1028675:tid 1028857] [client 20.104.18.15:5057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/zoo1.php"] [unique_id "apK9X9dHPfW2QFvhmL7aYQAAAC8"]
[Sat Aug 29 05:07:11.469409 2026] [security2:error] [pid 1028675:tid 1028874] [client 20.104.104.62:10867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/Rk41.php"] [unique_id "apK9X9dHPfW2QFvhmL7aYwAAAEA"]
[Sat Aug 29 05:07:11.471712 2026] [security2:error] [pid 1028675:tid 1028835] [client 4.205.62.107:65524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/lm15.php"] [unique_id "apK9X9dHPfW2QFvhmL7aZAAAABk"]
[Sat Aug 29 05:07:11.472592 2026] [security2:error] [pid 1028675:tid 1028885] [client 4.205.62.107:22461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/samll.php"] [unique_id "apK9X9dHPfW2QFvhmL7aZQAAAEs"]
[Sat Aug 29 05:07:11.474523 2026] [security2:error] [pid 1018003:tid 1018190] [client 52.139.37.240:20788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/mini.php"] [unique_id "apK9XzAh5Y1i2tUxg4EO-gAABd8"]
[Sat Aug 29 05:07:11.478669 2026] [security2:error] [pid 1028675:tid 1028921] [client 52.139.37.240:32740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/s.php"] [unique_id "apK9X9dHPfW2QFvhmL7aZwAAAG8"]
[Sat Aug 29 05:07:11.484625 2026] [security2:error] [pid 1018003:tid 1018267] [client 4.205.62.107:58448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/tinyfilemanager.php"] [unique_id "apK9XzAh5Y1i2tUxg4EO-wAABis"]
[Sat Aug 29 05:07:11.486809 2026] [security2:error] [pid 1018003:tid 1018262] [client 93.123.109.228:39304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/info.php"] [unique_id "apK9XzAh5Y1i2tUxg4EO_AAABiY"]
[Sat Aug 29 05:07:11.490322 2026] [security2:error] [pid 1018003:tid 1018224] [client 87.199.194.213:64116] ModSecurity: Access denied with code 406 (phase 1). IPmatchFromFile: "87.199.194.213" matched at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1090"] [id "999022"] [msg "Blacklisted IP Address for POST data StopForumSpam List"] [hostname "thesmartpm.com"] [uri "/apps/wp-comments-post.php"] [unique_id "apK9XzAh5Y1i2tUxg4EO_QAABgE"], referer: https://thesmartpm.com/ut-dallas-applied-project-management-forum-november-2014-presentation/
[Sat Aug 29 05:07:11.490412 2026] [security2:error] [pid 1018003:tid 1018224] [client 87.199.194.213:64116] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "406"] [hostname "thesmartpm.com"] [uri "/apps/wp-comments-post.php"] [unique_id "apK9XzAh5Y1i2tUxg4EO_QAABgE"], referer: https://thesmartpm.com/ut-dallas-applied-project-management-forum-november-2014-presentation/
[Sat Aug 29 05:07:11.490447 2026] [security2:error] [pid 1018003:tid 1018177] [client 20.104.104.62:42730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/zoz.php"] [unique_id "apK9XzAh5Y1i2tUxg4EO_gAABdI"]
[Sat Aug 29 05:07:11.491163 2026] [security2:error] [pid 1028675:tid 1028932] [client 93.123.109.228:39100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/infophp.php"] [unique_id "apK9X9dHPfW2QFvhmL7aaAAAAHo"]
[Sat Aug 29 05:07:11.496655 2026] [security2:error] [pid 1028675:tid 1028863] [client 20.104.68.135:2979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lisakayguitar.com"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "apK9X9dHPfW2QFvhmL7aaQAAADU"]
[Sat Aug 29 05:07:11.511759 2026] [security2:error] [pid 1028675:tid 1028891] [client 93.123.109.228:39250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/infos.php"] [unique_id "apK9X9dHPfW2QFvhmL7abAAAAFE"]
[Sat Aug 29 05:07:11.520424 2026] [security2:error] [pid 1018003:tid 1018212] [client 158.23.147.79:32666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK9XzAh5Y1i2tUxg4EO_wAABfU"]
[Sat Aug 29 05:07:11.522706 2026] [security2:error] [pid 1018003:tid 1018186] [client 93.123.109.228:39094] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/laravel/.env"] [unique_id "apK9XzAh5Y1i2tUxg4EPAAAABds"]
[Sat Aug 29 05:07:11.529609 2026] [security2:error] [pid 1028675:tid 1028894] [client 93.123.109.228:39282] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/lms/.env"] [unique_id "apK9X9dHPfW2QFvhmL7aeAAAAFQ"]
[Sat Aug 29 05:07:11.532511 2026] [security2:error] [pid 1028675:tid 1028837] [client 68.155.159.216:12188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/.well-knownold/index.php"] [unique_id "apK9X9dHPfW2QFvhmL7aeQAAABs"]
[Sat Aug 29 05:07:11.551059 2026] [security2:error] [pid 1028675:tid 1028842] [client 20.104.18.15:13662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/mgrr.php"] [unique_id "apK9X9dHPfW2QFvhmL7afgAAACA"]
[Sat Aug 29 05:07:11.555851 2026] [security2:error] [pid 1028675:tid 1028851] [client 93.123.109.228:39312] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/local/.env"] [unique_id "apK9X9dHPfW2QFvhmL7afwAAACk"]
[Sat Aug 29 05:07:11.556155 2026] [security2:error] [pid 1018003:tid 1018217] [client 68.155.159.216:65046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/ws.php"] [unique_id "apK9XzAh5Y1i2tUxg4EPAwAABfo"]
[Sat Aug 29 05:07:11.556775 2026] [security2:error] [pid 1028675:tid 1028877] [client 158.158.54.35:14914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/o.php"] [unique_id "apK9X9dHPfW2QFvhmL7agAAAAEM"]
[Sat Aug 29 05:07:11.562451 2026] [security2:error] [pid 1028675:tid 1028897] [client 68.155.159.216:1926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/file.php"] [unique_id "apK9X9dHPfW2QFvhmL7aggAAAFc"]
[Sat Aug 29 05:07:11.570005 2026] [security2:error] [pid 1028675:tid 1028794] [remote 93.123.109.228:51634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/config/config.inc.php"] [unique_id "apK9X9dHPfW2QFvhmL7ahgAACHE"]
[Sat Aug 29 05:07:11.575770 2026] [security2:error] [pid 1028675:tid 1028929] [client 20.48.160.90:51698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/az.php"] [unique_id "apK9X9dHPfW2QFvhmL7aiQAAAHc"]
[Sat Aug 29 05:07:11.592149 2026] [security2:error] [pid 1028675:tid 1028815] [client 20.104.18.15:36646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/wp-aothait.php"] [unique_id "apK9X9dHPfW2QFvhmL7aiwAAAAU"]
[Sat Aug 29 05:07:11.608092 2026] [security2:error] [pid 1028675:tid 1028904] [client 20.104.104.62:44593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/7logs.php"] [unique_id "apK9X9dHPfW2QFvhmL7ajQAAAF4"]
[Sat Aug 29 05:07:11.620985 2026] [security2:error] [pid 1028675:tid 1028862] [client 20.104.18.15:5096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/radio.php"] [unique_id "apK9X9dHPfW2QFvhmL7ajgAAADQ"]
[Sat Aug 29 05:07:11.631533 2026] [security2:error] [pid 1028675:tid 1028797] [remote 93.123.109.228:51634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/config/aws.php"] [unique_id "apK9X9dHPfW2QFvhmL7akAAACHQ"]
[Sat Aug 29 05:07:11.634081 2026] [security2:error] [pid 1018003:tid 1018162] [client 20.48.250.41:62490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/thui.php"] [unique_id "apK9XzAh5Y1i2tUxg4EPBQAABcM"]
[Sat Aug 29 05:07:11.649663 2026] [security2:error] [pid 1018003:tid 1018216] [client 93.123.109.228:39176] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/market/.env"] [unique_id "apK9XzAh5Y1i2tUxg4EPBgAABfk"]
[Sat Aug 29 05:07:11.652963 2026] [security2:error] [pid 1028675:tid 1028873] [client 158.23.147.79:35802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/admin.php"] [unique_id "apK9X9dHPfW2QFvhmL7akgAAAD8"]
[Sat Aug 29 05:07:11.669130 2026] [security2:error] [pid 1028675:tid 1028871] [client 52.139.37.240:20797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/v.php"] [unique_id "apK9X9dHPfW2QFvhmL7akwAAAD0"]
[Sat Aug 29 05:07:11.669151 2026] [security2:error] [pid 1028675:tid 1028927] [client 52.139.37.240:32082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/sagax.php"] [unique_id "apK9X9dHPfW2QFvhmL7alAAAAHU"]
[Sat Aug 29 05:07:11.681314 2026] [security2:error] [pid 1018003:tid 1018256] [client 93.123.109.228:39094] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/marketing/.env"] [unique_id "apK9XzAh5Y1i2tUxg4EPCQAABiA"]
[Sat Aug 29 05:07:11.682472 2026] [security2:error] [pid 1028675:tid 1028810] [client 20.104.104.62:20839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-mailcek.php"] [unique_id "apK9X9dHPfW2QFvhmL7alQAAAAA"]
[Sat Aug 29 05:07:11.687110 2026] [security2:error] [pid 1018003:tid 1018268] [client 93.123.109.228:39244] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/new/.env"] [unique_id "apK9XzAh5Y1i2tUxg4EPCwAABiw"]
[Sat Aug 29 05:07:11.689138 2026] [security2:error] [pid 1028675:tid 1028867] [client 93.123.109.228:39120] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/media/.env"] [unique_id "apK9X9dHPfW2QFvhmL7algAAADk"]
[Sat Aug 29 05:07:11.694105 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.104.68.135:18271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lisakayguitar.com"] [uri "/wp-admin/includes/about.php"] [unique_id "apK9XzAh5Y1i2tUxg4EPDAAABcI"]
[Sat Aug 29 05:07:11.698271 2026] [security2:error] [pid 1018003:tid 1018196] [client 168.107.94.195:49394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9XzAh5Y1i2tUxg4EPDwAABeU"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:11.702799 2026] [security2:error] [pid 1028675:tid 1028937] [client 93.123.109.228:39282] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/node/.env"] [unique_id "apK9X9dHPfW2QFvhmL7amwAAAH8"]
[Sat Aug 29 05:07:11.705136 2026] [security2:error] [pid 1028675:tid 1028839] [client 93.123.109.228:39256] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/node/backend/.env"] [unique_id "apK9X9dHPfW2QFvhmL7anAAAAB0"]
[Sat Aug 29 05:07:11.706563 2026] [security2:error] [pid 1028675:tid 1028839] [client 93.123.109.228:39348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/node/api/.env"] [unique_id "apK9X9dHPfW2QFvhmL7anQAAAB0"]
[Sat Aug 29 05:07:11.713069 2026] [security2:error] [pid 1028675:tid 1028853] [client 93.123.109.228:39366] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/node-api/.env"] [unique_id "apK9X9dHPfW2QFvhmL7aoAAAACs"]
[Sat Aug 29 05:07:11.713254 2026] [security2:error] [pid 1018003:tid 1018188] [client 158.23.147.79:26442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9XzAh5Y1i2tUxg4EPEAAABd0"]
[Sat Aug 29 05:07:11.716253 2026] [security2:error] [pid 1028675:tid 1028812] [client 20.104.18.15:13664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/mac.php"] [unique_id "apK9X9dHPfW2QFvhmL7aoQAAAAI"]
[Sat Aug 29 05:07:11.728554 2026] [security2:error] [pid 1028675:tid 1028919] [client 20.196.209.81:15187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/spip.php"] [unique_id "apK9X9dHPfW2QFvhmL7aogAAAG0"]
[Sat Aug 29 05:07:11.728569 2026] [security2:error] [pid 1028675:tid 1028807] [remote 93.123.109.228:51634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/config/config.php"] [unique_id "apK9X9dHPfW2QFvhmL7aowAAUH4"]
[Sat Aug 29 05:07:11.744925 2026] [security2:error] [pid 1028675:tid 1028843] [client 20.104.104.62:23369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/mmm.php"] [unique_id "apK9X9dHPfW2QFvhmL7apQAAACE"]
[Sat Aug 29 05:07:11.746326 2026] [security2:error] [pid 1018003:tid 1018160] [client 20.48.160.90:51629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/js.php"] [unique_id "apK9XzAh5Y1i2tUxg4EPEQAABcE"]
[Sat Aug 29 05:07:11.748411 2026] [security2:error] [pid 1018003:tid 1018275] [client 20.104.104.62:10664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/sf.php"] [unique_id "apK9XzAh5Y1i2tUxg4EPEgAABjM"]
[Sat Aug 29 05:07:11.758186 2026] [security2:error] [pid 1028675:tid 1028824] [client 68.155.159.216:51315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK9X9dHPfW2QFvhmL7apgAAAA4"]
[Sat Aug 29 05:07:11.771666 2026] [security2:error] [pid 1028675:tid 1028936] [client 93.123.109.228:39312] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/nodeapi/.env"] [unique_id "apK9X9dHPfW2QFvhmL7apwAAAH4"]
[Sat Aug 29 05:07:11.773334 2026] [security2:error] [pid 1028675:tid 1028821] [client 93.123.109.228:39212] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/nodeweb/.env"] [unique_id "apK9X9dHPfW2QFvhmL7aqAAAAAs"]
[Sat Aug 29 05:07:11.774954 2026] [security2:error] [pid 1018003:tid 1018203] [client 20.104.18.15:5031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/one.php"] [unique_id "apK9XzAh5Y1i2tUxg4EPEwAABew"]
[Sat Aug 29 05:07:11.793648 2026] [security2:error] [pid 1028675:tid 1028686] [remote 93.123.109.228:51634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/config/module.config.php"] [unique_id "apK9X9dHPfW2QFvhmL7arQAALwY"]
[Sat Aug 29 05:07:11.793674 2026] [security2:error] [pid 1028675:tid 1028683] [remote 93.123.109.228:51634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/config/env.php"] [unique_id "apK9X9dHPfW2QFvhmL7asQAALwM"]
[Sat Aug 29 05:07:11.793689 2026] [security2:error] [pid 1028675:tid 1028687] [remote 93.123.109.228:51634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/config/nexmo.php"] [unique_id "apK9X9dHPfW2QFvhmL7aqwAALwc"]
[Sat Aug 29 05:07:11.795309 2026] [security2:error] [pid 1028675:tid 1028903] [client 158.23.147.79:61624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9X9dHPfW2QFvhmL7aswAAAF0"]
[Sat Aug 29 05:07:11.816510 2026] [security2:error] [pid 1028675:tid 1028874] [client 20.48.250.41:58457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/Jcrop.php"] [unique_id "apK9X9dHPfW2QFvhmL7atAAAAEA"]
[Sat Aug 29 05:07:11.828169 2026] [security2:error] [pid 1018003:tid 1018184] [client 20.196.209.81:15543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-content/f35.php"] [unique_id "apK9XzAh5Y1i2tUxg4EPFgAABdk"]
[Sat Aug 29 05:07:11.829471 2026] [security2:error] [pid 1028675:tid 1028933] [client 20.203.141.11:43347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/images/index.php"] [unique_id "apK9X9dHPfW2QFvhmL7atgAAAHs"]
[Sat Aug 29 05:07:11.836453 2026] [security2:error] [pid 1018003:tid 1018179] [client 93.123.109.228:39244] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/old/.env"] [unique_id "apK9XzAh5Y1i2tUxg4EPFwAABdQ"]
[Sat Aug 29 05:07:11.843299 2026] [security2:error] [pid 1018003:tid 1018246] [client 93.123.109.228:39288] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/opt/.env"] [unique_id "apK9XzAh5Y1i2tUxg4EPGAAABhY"]
[Sat Aug 29 05:07:11.852362 2026] [security2:error] [pid 1018003:tid 1018169] [client 20.104.18.15:13634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/simple.php"] [unique_id "apK9XzAh5Y1i2tUxg4EPGgAABco"]
[Sat Aug 29 05:07:11.863615 2026] [security2:error] [pid 1018003:tid 1018164] [client 40.83.93.50:20837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-conflg.php"] [unique_id "apK9XzAh5Y1i2tUxg4EPGwAABcU"]
[Sat Aug 29 05:07:11.876434 2026] [security2:error] [pid 1028675:tid 1028863] [client 158.23.147.79:50169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-content/banners/about.php"] [unique_id "apK9X9dHPfW2QFvhmL7avQAAADU"]
[Sat Aug 29 05:07:11.878914 2026] [security2:error] [pid 1018003:tid 1018174] [client 158.158.54.35:17639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-good.php"] [unique_id "apK9XzAh5Y1i2tUxg4EPHgAABc8"]
[Sat Aug 29 05:07:11.884455 2026] [security2:error] [pid 1018003:tid 1018163] [client 20.104.104.62:10821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/super.php"] [unique_id "apK9XzAh5Y1i2tUxg4EPHwAABcQ"]
[Sat Aug 29 05:07:11.888818 2026] [security2:error] [pid 1028675:tid 1028835] [client 52.139.37.240:20888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK9X9dHPfW2QFvhmL7awAAAABk"]
[Sat Aug 29 05:07:11.889196 2026] [security2:error] [pid 1018003:tid 1018240] [client 20.104.68.135:19282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lisakayguitar.com"] [uri "/wp-admin/js/index.php"] [unique_id "apK9XzAh5Y1i2tUxg4EPIAAABhA"]
[Sat Aug 29 05:07:11.896931 2026] [security2:error] [pid 1028675:tid 1028891] [client 158.23.147.79:25438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/mah.php"] [unique_id "apK9X9dHPfW2QFvhmL7awgAAAFE"]
[Sat Aug 29 05:07:11.909184 2026] [security2:error] [pid 1018003:tid 1018190] [client 4.205.62.107:53123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/sgd.php"] [unique_id "apK9XzAh5Y1i2tUxg4EPIgAABd8"]
[Sat Aug 29 05:07:11.911350 2026] [security2:error] [pid 1028675:tid 1028690] [remote 93.123.109.228:51634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/config/stripe.php"] [unique_id "apK9X9dHPfW2QFvhmL7axgAABAo"]
[Sat Aug 29 05:07:11.933038 2026] [security2:error] [pid 1018003:tid 1018262] [client 4.205.62.107:53433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/plss3.php"] [unique_id "apK9XzAh5Y1i2tUxg4EPJAAABiY"]
[Sat Aug 29 05:07:11.942919 2026] [security2:error] [pid 1028675:tid 1028847] [client 68.155.159.216:18393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/lv.php"] [unique_id "apK9X9dHPfW2QFvhmL7azgAAACU"]
[Sat Aug 29 05:07:11.943353 2026] [security2:error] [pid 1028675:tid 1028905] [client 52.139.37.240:32763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/wp-content/plugins/ftde.php"] [unique_id "apK9X9dHPfW2QFvhmL7azwAAAF8"]
[Sat Aug 29 05:07:11.958420 2026] [security2:error] [pid 1018003:tid 1018189] [client 20.104.104.62:23371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/advanced.php"] [unique_id "apK9XzAh5Y1i2tUxg4EPJwAABd4"]
[Sat Aug 29 05:07:11.968648 2026] [security2:error] [pid 1028675:tid 1028878] [client 20.104.104.62:20700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-config-blog.php"] [unique_id "apK9X9dHPfW2QFvhmL7a1AAAAEQ"]
[Sat Aug 29 05:07:11.985243 2026] [security2:error] [pid 1018003:tid 1018182] [client 20.104.18.15:5075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/503.php"] [unique_id "apK9XzAh5Y1i2tUxg4EPKwAABdc"]
[Sat Aug 29 05:07:11.988165 2026] [security2:error] [pid 1018003:tid 1018255] [client 20.48.160.90:51299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/hd.php"] [unique_id "apK9XzAh5Y1i2tUxg4EPLAAABh8"]
[Sat Aug 29 05:07:11.990407 2026] [core:error] [pid 1028675:tid 1028879] [client 20.196.209.81:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:11.990424 2026] [core:error] [pid 1028675:tid 1028879] [client 20.196.209.81:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:12.004497 2026] [security2:error] [pid 1028675:tid 1028889] [client 158.158.54.35:20562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/file2.php"] [unique_id "apK9YNdHPfW2QFvhmL7a3AAAAE8"]
[Sat Aug 29 05:07:12.007239 2026] [security2:error] [pid 1028675:tid 1028924] [client 40.83.93.50:3884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/alfanew.php7"] [unique_id "apK9YNdHPfW2QFvhmL7a3QAAAHI"]
[Sat Aug 29 05:07:12.008028 2026] [security2:error] [pid 1018003:tid 1018261] [client 20.104.18.15:13689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/xty.php"] [unique_id "apK9YDAh5Y1i2tUxg4EPMAAABiU"]
[Sat Aug 29 05:07:12.018855 2026] [security2:error] [pid 1018003:tid 1018175] [client 20.197.61.180:8139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/menu.php"] [unique_id "apK9YDAh5Y1i2tUxg4EPMgAABdA"]
[Sat Aug 29 05:07:12.036012 2026] [security2:error] [pid 1028675:tid 1028815] [client 20.104.104.62:10490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/lufix1.php"] [unique_id "apK9YNdHPfW2QFvhmL7a4QAAAAU"]
[Sat Aug 29 05:07:12.039866 2026] [security2:error] [pid 1018003:tid 1018162] [client 93.123.109.228:39394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/php-info.php"] [unique_id "apK9YDAh5Y1i2tUxg4EPMwAABcM"]
[Sat Aug 29 05:07:12.040717 2026] [security2:error] [pid 1028675:tid 1028916] [client 20.48.250.41:59344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/ws58.php"] [unique_id "apK9YNdHPfW2QFvhmL7a4wAAAGo"]
[Sat Aug 29 05:07:12.042976 2026] [security2:error] [pid 1018003:tid 1018226] [client 93.123.109.228:39346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/php.php"] [unique_id "apK9YDAh5Y1i2tUxg4EPNAAABgM"]
[Sat Aug 29 05:07:12.043986 2026] [security2:error] [pid 1028675:tid 1028904] [client 20.104.18.15:36582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/wp-includes/index.php"] [unique_id "apK9YNdHPfW2QFvhmL7a5QAAAF4"]
[Sat Aug 29 05:07:12.048720 2026] [security2:error] [pid 1028675:tid 1028860] [client 93.123.109.228:39366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/php_info.php"] [unique_id "apK9YNdHPfW2QFvhmL7a5wAAADI"]
[Sat Aug 29 05:07:12.058863 2026] [security2:error] [pid 1028675:tid 1028884] [client 93.123.109.228:39256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/phpinfo.php"] [unique_id "apK9YNdHPfW2QFvhmL7a6gAAAEo"]
[Sat Aug 29 05:07:12.072882 2026] [security2:error] [pid 1028675:tid 1028862] [client 158.23.147.79:30480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/mah.php"] [unique_id "apK9YNdHPfW2QFvhmL7a6wAAADQ"]
[Sat Aug 29 05:07:12.078164 2026] [security2:error] [pid 1028675:tid 1028875] [client 168.107.94.195:49860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9YNdHPfW2QFvhmL7a7wAAAEE"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:12.081118 2026] [security2:error] [pid 1018003:tid 1018277] [client 52.139.37.240:21163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "apK9YDAh5Y1i2tUxg4EPNgAABjU"]
[Sat Aug 29 05:07:12.088451 2026] [security2:error] [pid 1028675:tid 1028929] [client 20.104.68.135:19317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lisakayguitar.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK9YNdHPfW2QFvhmL7a8wAAAHc"]
[Sat Aug 29 05:07:12.103083 2026] [security2:error] [pid 1028675:tid 1028928] [client 93.123.109.228:39212] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/portal/.env"] [unique_id "apK9YNdHPfW2QFvhmL7a9wAAAHY"]
[Sat Aug 29 05:07:12.139497 2026] [security2:error] [pid 1028675:tid 1028935] [client 52.139.37.240:32108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "apK9YNdHPfW2QFvhmL7a_QAAAH0"]
[Sat Aug 29 05:07:12.145173 2026] [security2:error] [pid 1018003:tid 1018258] [client 20.104.18.15:5074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/504.php"] [unique_id "apK9YDAh5Y1i2tUxg4EPNwAABiI"]
[Sat Aug 29 05:07:12.146928 2026] [security2:error] [pid 1018003:tid 1018236] [client 20.104.18.15:13747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/sallu.php"] [unique_id "apK9YDAh5Y1i2tUxg4EPOAAABgw"]
[Sat Aug 29 05:07:12.147338 2026] [security2:error] [pid 1018003:tid 1018160] [client 20.48.160.90:51707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/xl2023.php"] [unique_id "apK9YDAh5Y1i2tUxg4EPOQAABcE"]
[Sat Aug 29 05:07:12.153238 2026] [security2:error] [pid 1028675:tid 1028896] [client 182.178.76.234:57324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 234.76.178.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mmhvacllc.com"] [uri "/xmlrpc.php"] [unique_id "apK9YNdHPfW2QFvhmL7a-QAAAFY"]
[Sat Aug 29 05:07:12.153409 2026] [security2:error] [pid 1028675:tid 1028896] [client 182.178.76.234:57324] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mmhvacllc.com"] [uri "/xmlrpc.php"] [unique_id "apK9YNdHPfW2QFvhmL7a-QAAAFY"]
[Sat Aug 29 05:07:12.153580 2026] [security2:error] [pid 1018003:tid 1018222] [client 20.196.209.81:2025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/backup.php"] [unique_id "apK9YDAh5Y1i2tUxg4EPOwAABf8"]
[Sat Aug 29 05:07:12.162789 2026] [security2:error] [pid 1028675:tid 1028866] [client 93.123.109.228:39120] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/product/.env"] [unique_id "apK9YNdHPfW2QFvhmL7a_gAAADg"]
[Sat Aug 29 05:07:12.163571 2026] [security2:error] [pid 1028675:tid 1028839] [client 93.123.109.228:39204] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/prod/.env"] [unique_id "apK9YNdHPfW2QFvhmL7a_wAAAB0"]
[Sat Aug 29 05:07:12.171090 2026] [security2:error] [pid 1028675:tid 1028853] [client 68.155.159.216:24570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/sad/about.php"] [unique_id "apK9YNdHPfW2QFvhmL7bAQAAACs"]
[Sat Aug 29 05:07:12.185415 2026] [security2:error] [pid 1028675:tid 1028890] [client 93.123.109.228:39282] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/production/.env"] [unique_id "apK9YNdHPfW2QFvhmL7bBAAAAFA"]
[Sat Aug 29 05:07:12.192595 2026] [security2:error] [pid 1018003:tid 1018203] [client 93.123.109.228:39288] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/project/.env"] [unique_id "apK9YDAh5Y1i2tUxg4EPPgAABew"]
[Sat Aug 29 05:07:12.204417 2026] [security2:error] [pid 1028675:tid 1028936] [client 20.104.104.62:10495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/hack.php"] [unique_id "apK9YNdHPfW2QFvhmL7bBgAAAH4"]
[Sat Aug 29 05:07:12.213545 2026] [security2:error] [pid 1018003:tid 1018184] [client 93.123.109.228:39244] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/public/.env"] [unique_id "apK9YDAh5Y1i2tUxg4EPQAAABdk"]
[Sat Aug 29 05:07:12.225941 2026] [security2:error] [pid 1028675:tid 1028927] [client 20.196.209.81:15517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-content/index.php"] [unique_id "apK9YNdHPfW2QFvhmL7bDQAAAHU"]
[Sat Aug 29 05:07:12.240769 2026] [security2:error] [pid 1028675:tid 1028887] [client 20.104.104.62:40214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-thumbs.php"] [unique_id "apK9YNdHPfW2QFvhmL7bDwAAAE0"]
[Sat Aug 29 05:07:12.241510 2026] [security2:error] [pid 1028675:tid 1028883] [client 93.123.109.228:39348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/public-api/.env"] [unique_id "apK9YNdHPfW2QFvhmL7bDgAAAEk"]
[Sat Aug 29 05:07:12.242305 2026] [security2:error] [pid 1028675:tid 1028857] [client 20.104.104.62:36962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/blox.php"] [unique_id "apK9YNdHPfW2QFvhmL7bEAAAAC8"]
[Sat Aug 29 05:07:12.245720 2026] [security2:error] [pid 1018003:tid 1018271] [client 93.123.109.228:39380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/public/phpinfo.php"] [unique_id "apK9YDAh5Y1i2tUxg4EPQQAABi8"]
[Sat Aug 29 05:07:12.249942 2026] [security2:error] [pid 1028675:tid 1028854] [client 93.123.109.228:39212] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/public_html/.env"] [unique_id "apK9YNdHPfW2QFvhmL7bEQAAACw"]
[Sat Aug 29 05:07:12.266099 2026] [security2:error] [pid 1028675:tid 1028921] [client 4.205.62.107:21614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/g3.php"] [unique_id "apK9YNdHPfW2QFvhmL7bFAAAAG8"]
[Sat Aug 29 05:07:12.275881 2026] [security2:error] [pid 1018003:tid 1018244] [client 20.104.18.15:5015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/admin.php"] [unique_id "apK9YDAh5Y1i2tUxg4EPQgAABhQ"]
[Sat Aug 29 05:07:12.276461 2026] [security2:error] [pid 1028675:tid 1028821] [client 52.139.37.240:21408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9YNdHPfW2QFvhmL7bFgAAAAs"]
[Sat Aug 29 05:07:12.283104 2026] [security2:error] [pid 1028675:tid 1028844] [client 20.104.68.135:23912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lisakayguitar.com"] [uri "/wp-admin/network/admin.php"] [unique_id "apK9YNdHPfW2QFvhmL7bFwAAACI"]
[Sat Aug 29 05:07:12.290676 2026] [security2:error] [pid 1018003:tid 1018174] [client 20.104.18.15:13710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/codex.php"] [unique_id "apK9YDAh5Y1i2tUxg4EPQwAABc8"]
[Sat Aug 29 05:07:12.295453 2026] [security2:error] [pid 1028675:tid 1028910] [client 20.48.250.41:62530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/xs.php"] [unique_id "apK9YNdHPfW2QFvhmL7bGgAAAGQ"]
[Sat Aug 29 05:07:12.306196 2026] [security2:error] [pid 1018003:tid 1018270] [client 20.104.18.15:36650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/file31.php"] [unique_id "apK9YDAh5Y1i2tUxg4EPRAAABi4"]
[Sat Aug 29 05:07:12.312097 2026] [security2:error] [pid 1018003:tid 1018240] [client 158.23.147.79:30536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-blog-header.php"] [unique_id "apK9YDAh5Y1i2tUxg4EPRQAABhA"]
[Sat Aug 29 05:07:12.312603 2026] [security2:error] [pid 1028675:tid 1028848] [client 93.123.109.228:39204] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/qa/.env"] [unique_id "apK9YNdHPfW2QFvhmL7bHgAAACY"]
[Sat Aug 29 05:07:12.326412 2026] [security2:error] [pid 1018003:tid 1018265] [client 68.155.159.216:65064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/file17.php"] [unique_id "apK9YDAh5Y1i2tUxg4EPRwAABik"]
[Sat Aug 29 05:07:12.339072 2026] [security2:error] [pid 1028675:tid 1028843] [client 158.158.54.35:17555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "apK9YNdHPfW2QFvhmL7bJAAAACE"]
[Sat Aug 29 05:07:12.347550 2026] [security2:error] [pid 1028675:tid 1028914] [client 40.83.93.50:22805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-content.php"] [unique_id "apK9YNdHPfW2QFvhmL7bJgAAAGg"]
[Sat Aug 29 05:07:12.357786 2026] [security2:error] [pid 1018003:tid 1018202] [client 68.155.159.216:6118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/.well-known/index.php"] [unique_id "apK9YDAh5Y1i2tUxg4EPSwAABes"]
[Sat Aug 29 05:07:12.382844 2026] [security2:error] [pid 1028675:tid 1028897] [client 20.48.160.90:51624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/V2.php"] [unique_id "apK9YNdHPfW2QFvhmL7bLgAAAFc"]
[Sat Aug 29 05:07:12.385030 2026] [security2:error] [pid 1028675:tid 1028889] [client 20.104.104.62:20854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-mobfi.php"] [unique_id "apK9YNdHPfW2QFvhmL7bMAAAAE8"]
[Sat Aug 29 05:07:12.402398 2026] [security2:error] [pid 1028675:tid 1028859] [client 52.139.37.240:32074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/z.php"] [unique_id "apK9YNdHPfW2QFvhmL7bOQAAADE"]
[Sat Aug 29 05:07:12.412833 2026] [security2:error] [pid 1018003:tid 1018231] [client 20.104.18.15:5071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/ws85.php"] [unique_id "apK9YDAh5Y1i2tUxg4EPTgAABgc"]
[Sat Aug 29 05:07:12.428241 2026] [security2:error] [pid 1018003:tid 1018217] [client 20.104.18.15:13731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/5656.php"] [unique_id "apK9YDAh5Y1i2tUxg4EPTwAABfo"]
[Sat Aug 29 05:07:12.430941 2026] [security2:error] [pid 1028675:tid 1028884] [client 20.104.104.62:42718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/kcs.php"] [unique_id "apK9YNdHPfW2QFvhmL7bPAAAAEo"]
[Sat Aug 29 05:07:12.453494 2026] [security2:error] [pid 1028675:tid 1028823] [client 158.158.54.35:2851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK9YNdHPfW2QFvhmL7bPwAAAA0"]
[Sat Aug 29 05:07:12.455827 2026] [security2:error] [pid 1028675:tid 1028816] [client 20.104.104.62:10851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/155.php"] [unique_id "apK9YNdHPfW2QFvhmL7bQgAAAAY"]
[Sat Aug 29 05:07:12.459961 2026] [security2:error] [pid 1018003:tid 1018191] [client 168.107.94.195:50329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9YDAh5Y1i2tUxg4EPUAAABeA"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:12.480269 2026] [security2:error] [pid 1028675:tid 1028855] [client 20.104.68.135:19321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lisakayguitar.com"] [uri "/wp-conflg/function.php"] [unique_id "apK9YNdHPfW2QFvhmL7bRwAAAC0"]
[Sat Aug 29 05:07:12.494002 2026] [security2:error] [pid 1028675:tid 1028830] [client 20.104.49.130:54857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/dragonshell.php"] [unique_id "apK9YNdHPfW2QFvhmL7bSAAAABQ"]
[Sat Aug 29 05:07:12.497398 2026] [security2:error] [pid 1018003:tid 1018198] [client 20.203.141.11:25404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/inputs.php"] [unique_id "apK9YDAh5Y1i2tUxg4EPVgAABec"]
[Sat Aug 29 05:07:12.509077 2026] [security2:error] [pid 1018003:tid 1018226] [client 20.104.18.15:36618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/dk.php"] [unique_id "apK9YDAh5Y1i2tUxg4EPWAAABgM"]
[Sat Aug 29 05:07:12.527364 2026] [security2:error] [pid 1028675:tid 1028866] [client 20.48.250.41:60761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/zu.php"] [unique_id "apK9YNdHPfW2QFvhmL7bUQAAADg"]
[Sat Aug 29 05:07:12.530569 2026] [security2:error] [pid 1018003:tid 1018216] [client 20.48.160.90:51294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/mad.php"] [unique_id "apK9YDAh5Y1i2tUxg4EPWQAABfk"]
[Sat Aug 29 05:07:12.544610 2026] [core:error] [pid 1018003:tid 1018162] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:12.544627 2026] [core:error] [pid 1018003:tid 1018162] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:12.557366 2026] [security2:error] [pid 1028675:tid 1028890] [client 158.23.147.79:17462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/ws.php"] [unique_id "apK9YNdHPfW2QFvhmL7bVQAAAFA"]
[Sat Aug 29 05:07:12.560643 2026] [security2:error] [pid 1028675:tid 1028911] [client 20.104.18.15:13758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/w3lls.php"] [unique_id "apK9YNdHPfW2QFvhmL7bVgAAAGU"]
[Sat Aug 29 05:07:12.565267 2026] [security2:error] [pid 1018003:tid 1018219] [client 20.196.209.81:4503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/haiterus.php"] [unique_id "apK9YDAh5Y1i2tUxg4EPXgAABfw"]
[Sat Aug 29 05:07:12.577885 2026] [security2:error] [pid 1028675:tid 1028861] [client 20.104.18.15:5031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/ffs.php"] [unique_id "apK9YNdHPfW2QFvhmL7bWwAAADM"]
[Sat Aug 29 05:07:12.589883 2026] [security2:error] [pid 1028675:tid 1028903] [client 20.104.104.62:10854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/mcd.php"] [unique_id "apK9YNdHPfW2QFvhmL7bXwAAAF0"]
[Sat Aug 29 05:07:12.598619 2026] [security2:error] [pid 1028675:tid 1028839] [client 52.139.37.240:32091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/f35.php"] [unique_id "apK9YNdHPfW2QFvhmL7bYwAAAB0"]
[Sat Aug 29 05:07:12.611903 2026] [security2:error] [pid 1018003:tid 1018188] [client 4.205.62.107:65480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/test.config.php"] [unique_id "apK9YDAh5Y1i2tUxg4EPXwAABd0"]
[Sat Aug 29 05:07:12.612339 2026] [security2:error] [pid 1018003:tid 1018170] [client 68.155.159.216:33479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/install.php"] [unique_id "apK9YDAh5Y1i2tUxg4EPYAAABcs"]
[Sat Aug 29 05:07:12.614404 2026] [security2:error] [pid 1028675:tid 1028885] [client 4.205.62.107:22320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/pass4.php"] [unique_id "apK9YNdHPfW2QFvhmL7bZgAAAEs"]
[Sat Aug 29 05:07:12.629739 2026] [security2:error] [pid 1018003:tid 1018238] [client 158.23.147.79:32682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-login.php"] [unique_id "apK9YDAh5Y1i2tUxg4EPYQAABg4"]
[Sat Aug 29 05:07:12.638931 2026] [security2:error] [pid 1028675:tid 1028825] [client 68.155.159.216:12195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK9YNdHPfW2QFvhmL7bawAAAA8"]
[Sat Aug 29 05:07:12.640010 2026] [security2:error] [pid 1028675:tid 1028854] [client 4.205.62.107:51472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/min.php"] [unique_id "apK9YNdHPfW2QFvhmL7bbAAAACw"]
[Sat Aug 29 05:07:12.653422 2026] [security2:error] [pid 1028675:tid 1028935] [client 20.196.209.81:17201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-content/install.php"] [unique_id "apK9YNdHPfW2QFvhmL7bcAAAAH0"]
[Sat Aug 29 05:07:12.661608 2026] [security2:error] [pid 1028675:tid 1028821] [client 68.155.159.216:65125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-includes/css/index.php"] [unique_id "apK9YNdHPfW2QFvhmL7bcgAAAAs"]
[Sat Aug 29 05:07:12.664153 2026] [security2:error] [pid 1028675:tid 1028891] [client 93.123.109.228:39120] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/s3/.env.bak"] [unique_id "apK9YNdHPfW2QFvhmL7bcwAAAFE"]
[Sat Aug 29 05:07:12.669784 2026] [security2:error] [pid 1018003:tid 1018184] [client 20.48.250.41:62554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/lanka.php"] [unique_id "apK9YDAh5Y1i2tUxg4EPZQAABdk"]
[Sat Aug 29 05:07:12.670441 2026] [security2:error] [pid 1018003:tid 1018169] [client 20.48.160.90:51209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/st.php"] [unique_id "apK9YDAh5Y1i2tUxg4EPZgAABco"]
[Sat Aug 29 05:07:12.670499 2026] [security2:error] [pid 1028675:tid 1028910] [client 68.155.159.216:2041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/file17.php"] [unique_id "apK9YNdHPfW2QFvhmL7bdQAAAGQ"]
[Sat Aug 29 05:07:12.695258 2026] [security2:error] [pid 1018003:tid 1018160] [client 20.104.68.135:19279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lisakayguitar.com"] [uri "/wp-content/classwithtostring.php"] [unique_id "apK9YDAh5Y1i2tUxg4EPZwAABcE"]
[Sat Aug 29 05:07:12.699524 2026] [security2:error] [pid 1028675:tid 1028888] [client 20.104.18.15:13569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/fpwch.php"] [unique_id "apK9YNdHPfW2QFvhmL7beAAAAE4"]
[Sat Aug 29 05:07:12.716679 2026] [security2:error] [pid 1028675:tid 1028835] [client 20.104.18.15:36491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/ta.php"] [unique_id "apK9YNdHPfW2QFvhmL7bfAAAABk"]
[Sat Aug 29 05:07:12.723972 2026] [security2:error] [pid 1018003:tid 1018270] [client 20.104.104.62:10817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/waw.php"] [unique_id "apK9YDAh5Y1i2tUxg4EPagAABi4"]
[Sat Aug 29 05:07:12.726486 2026] [security2:error] [pid 1028675:tid 1028842] [client 146.70.194.254:40494] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "modelbasenjis.com"] [uri "/cgi-sys/suspendedpage.cgi/wp-includes/wlwmanifest.xml"] [unique_id "apK9YNdHPfW2QFvhmL7bgwAAACA"]
[Sat Aug 29 05:07:12.727491 2026] [security2:error] [pid 1028675:tid 1028881] [client 40.83.93.50:7474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/xmlrpc.php0"] [unique_id "apK9YNdHPfW2QFvhmL7bhAAAAEc"]
[Sat Aug 29 05:07:12.736692 2026] [security2:error] [pid 1018003:tid 1018183] [client 195.178.110.247:38196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lexusdealership.com"] [uri "/index.php"] [unique_id "apK9YDAh5Y1i2tUxg4EPbAAABdg"]
[Sat Aug 29 05:07:12.737579 2026] [security2:error] [pid 1028675:tid 1028914] [client 20.104.18.15:5016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/nano.php"] [unique_id "apK9YNdHPfW2QFvhmL7bhQAAAGg"]
[Sat Aug 29 05:07:12.738662 2026] [security2:error] [pid 1018003:tid 1018267] [client 20.104.104.62:60447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/wsz.php"] [unique_id "apK9YDAh5Y1i2tUxg4EPbQAABis"]
[Sat Aug 29 05:07:12.755726 2026] [security2:error] [pid 1028675:tid 1028841] [client 20.197.61.180:13872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/alfa.php"] [unique_id "apK9YNdHPfW2QFvhmL7bhwAAAB8"]
[Sat Aug 29 05:07:12.759911 2026] [security2:error] [pid 1028675:tid 1028870] [client 93.123.109.228:39212] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/server/.env"] [unique_id "apK9YNdHPfW2QFvhmL7biAAAADw"]
[Sat Aug 29 05:07:12.768170 2026] [security2:error] [pid 1018003:tid 1018246] [client 52.139.37.240:20781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/wp-index.php"] [unique_id "apK9YDAh5Y1i2tUxg4EPbgAABhY"]
[Sat Aug 29 05:07:12.777070 2026] [security2:error] [pid 1018003:tid 1018262] [client 20.104.104.62:40217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-comments-post.php"] [unique_id "apK9YDAh5Y1i2tUxg4EPbwAABiY"]
[Sat Aug 29 05:07:12.777473 2026] [security2:error] [pid 1028675:tid 1028897] [client 93.123.109.228:39428] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/server/api/.env"] [unique_id "apK9YNdHPfW2QFvhmL7biQAAAFc"]
[Sat Aug 29 05:07:12.787046 2026] [security2:error] [pid 1028675:tid 1028814] [client 93.123.109.228:39434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/server/backend/.env"] [unique_id "apK9YNdHPfW2QFvhmL7bjwAAAAQ"]
[Sat Aug 29 05:07:12.809479 2026] [security2:error] [pid 1028675:tid 1028925] [client 20.48.160.90:51584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/alfanew.php"] [unique_id "apK9YNdHPfW2QFvhmL7blwAAAHM"]
[Sat Aug 29 05:07:12.818890 2026] [security2:error] [pid 1028675:tid 1028923] [client 52.139.37.240:32102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/file61.php"] [unique_id "apK9YNdHPfW2QFvhmL7bmwAAAHE"]
[Sat Aug 29 05:07:12.819793 2026] [security2:error] [pid 1028675:tid 1028815] [client 158.23.147.79:26432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/content.php"] [unique_id "apK9YNdHPfW2QFvhmL7bnAAAAAU"]
[Sat Aug 29 05:07:12.830040 2026] [security2:error] [pid 1028675:tid 1028862] [client 20.104.18.15:13737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/domvf.php"] [unique_id "apK9YNdHPfW2QFvhmL7bnQAAADQ"]
[Sat Aug 29 05:07:12.832529 2026] [security2:error] [pid 1028675:tid 1028929] [client 20.48.250.41:59271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/gettest.php"] [unique_id "apK9YNdHPfW2QFvhmL7bnwAAAHc"]
[Sat Aug 29 05:07:12.833269 2026] [core:error] [pid 1028675:tid 1028908] [client 40.83.93.50:20811] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:12.833282 2026] [core:error] [pid 1028675:tid 1028908] [client 40.83.93.50:20811] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:12.853156 2026] [security2:error] [pid 1028675:tid 1028860] [client 20.104.104.62:44547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/x23.php"] [unique_id "apK9YNdHPfW2QFvhmL7bogAAADI"]
[Sat Aug 29 05:07:12.860152 2026] [security2:error] [pid 1018003:tid 1018156] [client 158.158.54.35:21962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/abcd.php"] [unique_id "apK9YDAh5Y1i2tUxg4EPcwAABb0"]
[Sat Aug 29 05:07:12.864998 2026] [security2:error] [pid 1028675:tid 1028855] [client 168.107.94.195:50795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9YNdHPfW2QFvhmL7bpQAAAC0"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:12.878686 2026] [security2:error] [pid 1018003:tid 1018217] [client 20.104.18.15:5076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/ano.php"] [unique_id "apK9YDAh5Y1i2tUxg4EPdAAABfo"]
[Sat Aug 29 05:07:12.884708 2026] [security2:error] [pid 1028675:tid 1028856] [client 20.104.18.15:36666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/bo.php"] [unique_id "apK9YNdHPfW2QFvhmL7bpgAAAC4"]
[Sat Aug 29 05:07:12.901456 2026] [security2:error] [pid 1018003:tid 1018190] [client 158.158.54.35:15176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/xda.php"] [unique_id "apK9YDAh5Y1i2tUxg4EPdQAABd8"]
[Sat Aug 29 05:07:12.909987 2026] [security2:error] [pid 1018003:tid 1018175] [client 20.104.104.62:52032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/msy.php"] [unique_id "apK9YDAh5Y1i2tUxg4EPdwAABdA"]
[Sat Aug 29 05:07:12.912106 2026] [security2:error] [pid 1018003:tid 1018275] [client 195.178.110.247:65002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lexusdealership.com"] [uri "/index.php"] [unique_id "apK9YDAh5Y1i2tUxg4EPeAAABjM"]
[Sat Aug 29 05:07:12.922969 2026] [security2:error] [pid 1018003:tid 1018187] [client 93.123.109.228:39094] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/service/.env"] [unique_id "apK9YDAh5Y1i2tUxg4EPeQAABdw"]
[Sat Aug 29 05:07:12.933780 2026] [security2:error] [pid 1018003:tid 1018155] [client 68.155.159.216:30701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/radio.php"] [unique_id "apK9YDAh5Y1i2tUxg4EPegAABbw"]
[Sat Aug 29 05:07:12.948596 2026] [security2:error] [pid 1028675:tid 1028919] [client 93.123.109.228:39282] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/services/.env"] [unique_id "apK9YNdHPfW2QFvhmL7bsAAAAG0"]
[Sat Aug 29 05:07:12.960607 2026] [security2:error] [pid 1028675:tid 1028937] [client 52.139.37.240:21432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/ww2.php"] [unique_id "apK9YNdHPfW2QFvhmL7btQAAAH8"]
[Sat Aug 29 05:07:12.962737 2026] [security2:error] [pid 1018003:tid 1018261] [client 20.48.160.90:51655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/ioxi.php"] [unique_id "apK9YDAh5Y1i2tUxg4EPfAAABiU"]
[Sat Aug 29 05:07:12.963940 2026] [security2:error] [pid 1028675:tid 1028936] [client 20.104.18.15:13612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/biufile.php"] [unique_id "apK9YNdHPfW2QFvhmL7btgAAAH4"]
[Sat Aug 29 05:07:12.964705 2026] [security2:error] [pid 1028675:tid 1028828] [client 20.104.68.135:55660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lisakayguitar.com"] [uri "/wp-content/themes/fitnessbase/404.php"] [unique_id "apK9YNdHPfW2QFvhmL7btwAAABI"]
[Sat Aug 29 05:07:12.966853 2026] [security2:error] [pid 1028675:tid 1028903] [client 68.155.159.216:50274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/worksec.php"] [unique_id "apK9YNdHPfW2QFvhmL7buAAAAF0"]
[Sat Aug 29 05:07:12.984265 2026] [security2:error] [pid 1028675:tid 1028873] [client 20.203.141.11:27451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/alfa.php"] [unique_id "apK9YNdHPfW2QFvhmL7bvgAAAD8"]
[Sat Aug 29 05:07:12.985327 2026] [security2:error] [pid 1028675:tid 1028887] [client 20.104.104.62:10871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/ws66.php"] [unique_id "apK9YNdHPfW2QFvhmL7bvwAAAE0"]
[Sat Aug 29 05:07:12.986253 2026] [security2:error] [pid 1028675:tid 1028824] [client 57.141.14.83:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/page/42/"] [unique_id "apK9YNdHPfW2QFvhmL7bvQAAAA4"]
[Sat Aug 29 05:07:12.996990 2026] [security2:error] [pid 1028675:tid 1028928] [client 20.196.209.81:2027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/go.php"] [unique_id "apK9YNdHPfW2QFvhmL7bwAAAAHY"]
[Sat Aug 29 05:07:13.005862 2026] [security2:error] [pid 1028675:tid 1028791] [remote 93.123.109.228:51634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/info.php"] [unique_id "apK9YddHPfW2QFvhmL7bxAAAAm4"]
[Sat Aug 29 05:07:13.008125 2026] [security2:error] [pid 1028675:tid 1028927] [client 158.23.147.79:25495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-blog-header.php"] [unique_id "apK9YddHPfW2QFvhmL7bxQAAAHU"]
[Sat Aug 29 05:07:13.012700 2026] [security2:error] [pid 1028675:tid 1028920] [client 213.202.253.4:60048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bv-place.com"] [uri "/wp-content/postnews.php"] [unique_id "apK9YddHPfW2QFvhmL7bxgAAAG4"], referer: www.google.com
[Sat Aug 29 05:07:13.014939 2026] [security2:error] [pid 1028675:tid 1028798] [remote 93.123.109.228:51634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/infophp.php"] [unique_id "apK9YddHPfW2QFvhmL7bxwAAAnU"]
[Sat Aug 29 05:07:13.016493 2026] [security2:error] [pid 1028675:tid 1028899] [client 52.139.37.240:32631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/mah.php"] [unique_id "apK9YddHPfW2QFvhmL7byAAAAFk"]
[Sat Aug 29 05:07:13.018589 2026] [security2:error] [pid 1028675:tid 1028794] [remote 93.123.109.228:51634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/infos.php"] [unique_id "apK9YddHPfW2QFvhmL7bygAAAnE"]
[Sat Aug 29 05:07:13.045400 2026] [security2:error] [pid 1018003:tid 1018196] [client 4.205.62.107:55968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/fleen.php"] [unique_id "apK9YTAh5Y1i2tUxg4EPgAAABeU"]
[Sat Aug 29 05:07:13.052615 2026] [security2:error] [pid 1028675:tid 1028910] [client 20.104.18.15:5039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/mgrr.php"] [unique_id "apK9YddHPfW2QFvhmL7b1AAAAGQ"]
[Sat Aug 29 05:07:13.052645 2026] [security2:error] [pid 1028675:tid 1028909] [client 20.48.250.41:62478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/35.php"] [unique_id "apK9YddHPfW2QFvhmL7b0wAAAGM"]
[Sat Aug 29 05:07:13.053190 2026] [security2:error] [pid 1018003:tid 1018213] [client 20.104.18.15:36629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/44.php"] [unique_id "apK9YTAh5Y1i2tUxg4EPggAABfY"]
[Sat Aug 29 05:07:13.055462 2026] [core:error] [pid 1028675:tid 1028890] [client 20.196.209.81:22431] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:13.055477 2026] [core:error] [pid 1028675:tid 1028890] [client 20.196.209.81:22431] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:13.055576 2026] [security2:error] [pid 1028675:tid 1028822] [client 20.104.49.130:60989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/css.php"] [unique_id "apK9YddHPfW2QFvhmL7b1QAAAAw"]
[Sat Aug 29 05:07:13.065905 2026] [security2:error] [pid 1018003:tid 1018188] [client 93.123.109.228:39510] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/shared/.env"] [unique_id "apK9YTAh5Y1i2tUxg4EPgwAABd0"]
[Sat Aug 29 05:07:13.067502 2026] [security2:error] [pid 1018003:tid 1018170] [client 158.23.147.79:50137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK9YTAh5Y1i2tUxg4EPhAAABcs"]
[Sat Aug 29 05:07:13.096344 2026] [security2:error] [pid 1028675:tid 1028835] [client 68.155.159.216:33720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/goods.php"] [unique_id "apK9YddHPfW2QFvhmL7b2QAAABk"]
[Sat Aug 29 05:07:13.108952 2026] [security2:error] [pid 1028675:tid 1028843] [client 93.123.109.228:39408] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/shop/.env"] [unique_id "apK9YddHPfW2QFvhmL7b2wAAACE"]
[Sat Aug 29 05:07:13.114150 2026] [security2:error] [pid 1028675:tid 1028851] [client 4.205.62.107:8993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/configuration.php"] [unique_id "apK9YddHPfW2QFvhmL7b3AAAACk"]
[Sat Aug 29 05:07:13.114759 2026] [security2:error] [pid 1028675:tid 1028870] [client 20.104.104.62:40232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-config-style.php"] [unique_id "apK9YddHPfW2QFvhmL7b3gAAADw"]
[Sat Aug 29 05:07:13.114907 2026] [security2:error] [pid 1028675:tid 1028849] [client 93.123.109.228:39312] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/src/.env"] [unique_id "apK9YddHPfW2QFvhmL7b3QAAACc"]
[Sat Aug 29 05:07:13.121197 2026] [security2:error] [pid 1028675:tid 1028904] [client 20.104.18.15:13666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/blacks.php"] [unique_id "apK9YddHPfW2QFvhmL7b4gAAAF4"]
[Sat Aug 29 05:07:13.123687 2026] [security2:error] [pid 1028675:tid 1028926] [client 20.104.104.62:10482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/Cok.php"] [unique_id "apK9YddHPfW2QFvhmL7b5QAAAHQ"]
[Sat Aug 29 05:07:13.148368 2026] [security2:error] [pid 1018003:tid 1018236] [client 52.139.37.240:14955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/ahax.php"] [unique_id "apK9YTAh5Y1i2tUxg4EPiAAABgw"]
[Sat Aug 29 05:07:13.152425 2026] [security2:error] [pid 1028675:tid 1028837] [client 52.139.37.240:21404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/7logs.php"] [unique_id "apK9YddHPfW2QFvhmL7b5wAAABs"]
[Sat Aug 29 05:07:13.161754 2026] [security2:error] [pid 1028675:tid 1028878] [client 20.104.68.135:3003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lisakayguitar.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK9YddHPfW2QFvhmL7b6QAAAEQ"]
[Sat Aug 29 05:07:13.180768 2026] [security2:error] [pid 1028675:tid 1028908] [client 158.23.147.79:30499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK9YddHPfW2QFvhmL7b6wAAAGI"]
[Sat Aug 29 05:07:13.199402 2026] [security2:error] [pid 1018003:tid 1018184] [client 103.168.67.159:40294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 159.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "naturalkneads.com"] [uri "/wp/index.php"] [unique_id "apK9YTAh5Y1i2tUxg4EPiwAABdk"], referer: https://naturalkneads.com/wp/wp-admin/
[Sat Aug 29 05:07:13.206167 2026] [security2:error] [pid 1028675:tid 1028918] [client 20.104.18.15:5106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/mac.php"] [unique_id "apK9YddHPfW2QFvhmL7b8AAAAGw"]
[Sat Aug 29 05:07:13.211160 2026] [security2:error] [pid 1028675:tid 1028856] [client 20.104.18.15:36549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/h2.php"] [unique_id "apK9YddHPfW2QFvhmL7b8gAAAC4"]
[Sat Aug 29 05:07:13.211858 2026] [security2:error] [pid 1028675:tid 1028923] [client 52.139.37.240:51754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/mini.php"] [unique_id "apK9YddHPfW2QFvhmL7b8wAAAHE"]
[Sat Aug 29 05:07:13.221169 2026] [security2:error] [pid 1028675:tid 1028858] [client 20.48.250.41:62552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/maraz.php"] [unique_id "apK9YddHPfW2QFvhmL7b9QAAADA"]
[Sat Aug 29 05:07:13.225515 2026] [security2:error] [pid 1028675:tid 1028857] [client 40.83.93.50:17312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/content.php"] [unique_id "apK9YddHPfW2QFvhmL7b9wAAAC8"]
[Sat Aug 29 05:07:13.233702 2026] [security2:error] [pid 1018003:tid 1018163] [client 20.104.49.130:34499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/002.php"] [unique_id "apK9YTAh5Y1i2tUxg4EPjgAABcQ"]
[Sat Aug 29 05:07:13.243064 2026] [security2:error] [pid 1028675:tid 1028840] [client 20.48.160.90:51326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/TNT.php"] [unique_id "apK9YddHPfW2QFvhmL7cAgAAAB4"]
[Sat Aug 29 05:07:13.269161 2026] [security2:error] [pid 1028675:tid 1028861] [client 93.123.109.228:39408] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/stage/.env"] [unique_id "apK9YddHPfW2QFvhmL7cBgAAADM"]
[Sat Aug 29 05:07:13.271634 2026] [security2:error] [pid 1018003:tid 1018265] [client 93.123.109.228:39244] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/srv/.env"] [unique_id "apK9YTAh5Y1i2tUxg4EPjwAABik"]
[Sat Aug 29 05:07:13.279307 2026] [security2:error] [pid 1028675:tid 1028839] [client 68.155.159.216:24561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/admin.php"] [unique_id "apK9YddHPfW2QFvhmL7cCwAAAB0"]
[Sat Aug 29 05:07:13.279579 2026] [security2:error] [pid 1028675:tid 1028810] [client 93.123.109.228:39414] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/staging/.env"] [unique_id "apK9YddHPfW2QFvhmL7cCgAAAAA"]
[Sat Aug 29 05:07:13.282804 2026] [security2:error] [pid 1028675:tid 1028892] [client 168.107.94.195:51241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9YddHPfW2QFvhmL7cAwAAAFI"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:13.289523 2026] [security2:error] [pid 1028675:tid 1028885] [client 20.104.104.62:44561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/X7T6.php"] [unique_id "apK9YddHPfW2QFvhmL7cDAAAAEs"]
[Sat Aug 29 05:07:13.293583 2026] [security2:error] [pid 1018003:tid 1018177] [client 20.104.18.15:13593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/beck.php"] [unique_id "apK9YTAh5Y1i2tUxg4EPkgAABdI"]
[Sat Aug 29 05:07:13.306583 2026] [security2:error] [pid 1018003:tid 1018152] [client 40.83.93.50:20808] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-content/1.php"] [unique_id "apK9YTAh5Y1i2tUxg4EPkwAABbk"]
[Sat Aug 29 05:07:13.306687 2026] [security2:error] [pid 1018003:tid 1018152] [client 40.83.93.50:20808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-content/1.php"] [unique_id "apK9YTAh5Y1i2tUxg4EPkwAABbk"]
[Sat Aug 29 05:07:13.307907 2026] [security2:error] [pid 1028675:tid 1028884] [client 158.158.54.35:17546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-access.php"] [unique_id "apK9YddHPfW2QFvhmL7cDwAAAEo"]
[Sat Aug 29 05:07:13.324285 2026] [security2:error] [pid 1028675:tid 1028927] [client 93.123.109.228:39282] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/stg/.env"] [unique_id "apK9YddHPfW2QFvhmL7cEwAAAHU"]
[Sat Aug 29 05:07:13.341382 2026] [security2:error] [pid 1018003:tid 1018212] [client 20.104.104.62:20656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-logo.php"] [unique_id "apK9YTAh5Y1i2tUxg4EPlQAABfU"]
[Sat Aug 29 05:07:13.346544 2026] [security2:error] [pid 1018003:tid 1018183] [client 52.139.37.240:20872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/ac.php"] [unique_id "apK9YTAh5Y1i2tUxg4EPlgAABdg"]
[Sat Aug 29 05:07:13.347643 2026] [security2:error] [pid 1028675:tid 1028830] [client 158.158.54.35:29679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/theme.php"] [unique_id "apK9YddHPfW2QFvhmL7cGgAAABQ"]
[Sat Aug 29 05:07:13.353872 2026] [security2:error] [pid 1018003:tid 1018224] [client 20.48.250.41:60719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/kbfr.php"] [unique_id "apK9YTAh5Y1i2tUxg4EPmAAABgE"]
[Sat Aug 29 05:07:13.357789 2026] [security2:error] [pid 1028675:tid 1028819] [client 20.104.49.130:52315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/amax.php"] [unique_id "apK9YddHPfW2QFvhmL7cHQAAAAk"]
[Sat Aug 29 05:07:13.359947 2026] [security2:error] [pid 1018003:tid 1018267] [client 52.139.37.240:14510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/breads1.php"] [unique_id "apK9YTAh5Y1i2tUxg4EPmgAABis"]
[Sat Aug 29 05:07:13.376041 2026] [security2:error] [pid 1028675:tid 1028883] [client 20.104.68.135:19273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lisakayguitar.com"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "apK9YddHPfW2QFvhmL7cIAAAAEk"]
[Sat Aug 29 05:07:13.388119 2026] [security2:error] [pid 1028675:tid 1028935] [client 20.104.18.15:5072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/simple.php"] [unique_id "apK9YddHPfW2QFvhmL7cIgAAAH0"]
[Sat Aug 29 05:07:13.395954 2026] [security2:error] [pid 1028675:tid 1028919] [client 20.196.209.81:15172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/gecko-new.php"] [unique_id "apK9YddHPfW2QFvhmL7cJAAAAG0"]
[Sat Aug 29 05:07:13.396501 2026] [security2:error] [pid 1028675:tid 1028909] [client 20.104.18.15:36649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/wp-content/mod/adminfuns.php"] [unique_id "apK9YddHPfW2QFvhmL7cJQAAAGM"]
[Sat Aug 29 05:07:13.400091 2026] [security2:error] [pid 1018003:tid 1018262] [client 52.139.37.240:32094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/v.php"] [unique_id "apK9YTAh5Y1i2tUxg4EPngAABiY"]
[Sat Aug 29 05:07:13.402868 2026] [security2:error] [pid 1028675:tid 1028910] [client 20.48.160.90:51203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/cd.php"] [unique_id "apK9YddHPfW2QFvhmL7cJwAAAGQ"]
[Sat Aug 29 05:07:13.416464 2026] [security2:error] [pid 1028675:tid 1028847] [client 158.23.147.79:30607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK9YddHPfW2QFvhmL7cKgAAACU"]
[Sat Aug 29 05:07:13.418120 2026] [security2:error] [pid 1018003:tid 1018182] [client 4.205.62.107:21582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/wp-konfig.php"] [unique_id "apK9YTAh5Y1i2tUxg4EPnwAABdc"]
[Sat Aug 29 05:07:13.420889 2026] [security2:error] [pid 1018003:tid 1018217] [client 93.123.109.228:39244] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/stripe/.env"] [unique_id "apK9YTAh5Y1i2tUxg4EPoAAABfo"]
[Sat Aug 29 05:07:13.445267 2026] [security2:error] [pid 1018003:tid 1018275] [client 68.155.159.216:64485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/file5.php"] [unique_id "apK9YTAh5Y1i2tUxg4EPoQAABjM"]
[Sat Aug 29 05:07:13.447700 2026] [security2:error] [pid 1028675:tid 1028888] [client 20.104.104.62:10494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/see.php"] [unique_id "apK9YddHPfW2QFvhmL7cLwAAAE4"]
[Sat Aug 29 05:07:13.449208 2026] [security2:error] [pid 1018003:tid 1018155] [client 20.104.18.15:13714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/t3.php"] [unique_id "apK9YTAh5Y1i2tUxg4EPowAABbw"]
[Sat Aug 29 05:07:13.454333 2026] [security2:error] [pid 1028675:tid 1028928] [client 20.196.209.81:22458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK9YddHPfW2QFvhmL7cMAAAAHY"]
[Sat Aug 29 05:07:13.462972 2026] [security2:error] [pid 1028675:tid 1028881] [client 68.155.159.216:6097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-content/themes/too.php"] [unique_id "apK9YddHPfW2QFvhmL7cMQAAAEc"]
[Sat Aug 29 05:07:13.468055 2026] [security2:error] [pid 1028675:tid 1028914] [client 195.178.110.247:38202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.liatbehr.com"] [uri "/index.php"] [unique_id "apK9YddHPfW2QFvhmL7cNAAAAGg"]
[Sat Aug 29 05:07:13.471559 2026] [security2:error] [pid 1018003:tid 1018270] [client 20.197.61.180:13840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/feed-rss2-queue.php"] [unique_id "apK9YTAh5Y1i2tUxg4EPpAAABi4"]
[Sat Aug 29 05:07:13.498618 2026] [security2:error] [pid 1028675:tid 1028899] [client 20.203.141.11:1352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/403.php"] [unique_id "apK9YddHPfW2QFvhmL7cOQAAAFk"]
[Sat Aug 29 05:07:13.507961 2026] [security2:error] [pid 1028675:tid 1028813] [client 20.48.250.41:58441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/wp-act.php"] [unique_id "apK9YddHPfW2QFvhmL7cOwAAAAM"]
[Sat Aug 29 05:07:13.510647 2026] [security2:error] [pid 1028675:tid 1028814] [client 20.104.104.62:42714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/siln.php"] [unique_id "apK9YddHPfW2QFvhmL7cPAAAAAQ"]
[Sat Aug 29 05:07:13.521579 2026] [security2:error] [pid 1028675:tid 1028879] [client 93.123.109.228:39204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/test.php"] [unique_id "apK9YddHPfW2QFvhmL7cQAAAAEU"]
[Sat Aug 29 05:07:13.529988 2026] [security2:error] [pid 1028675:tid 1028837] [client 20.151.200.44:47357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/sao.php"] [unique_id "apK9YddHPfW2QFvhmL7cQQAAABs"]
[Sat Aug 29 05:07:13.535715 2026] [security2:error] [pid 1028675:tid 1028878] [client 20.104.18.15:5056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/xty.php"] [unique_id "apK9YddHPfW2QFvhmL7cRAAAAEQ"]
[Sat Aug 29 05:07:13.536404 2026] [security2:error] [pid 1018003:tid 1018226] [client 93.123.109.228:39176] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/terraform.tfstate.backup"] [unique_id "apK9YTAh5Y1i2tUxg4EPpwAABgM"]
[Sat Aug 29 05:07:13.546617 2026] [security2:error] [pid 1028675:tid 1028849] [client 52.139.37.240:21127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/ctex1.php"] [unique_id "apK9YddHPfW2QFvhmL7cRgAAACc"]
[Sat Aug 29 05:07:13.547550 2026] [security2:error] [pid 1018003:tid 1018219] [client 93.123.109.228:39510] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/test/.env"] [unique_id "apK9YTAh5Y1i2tUxg4EPqQAABfw"]
[Sat Aug 29 05:07:13.556083 2026] [security2:error] [pid 1018003:tid 1018277] [client 52.139.37.240:14478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/must.php"] [unique_id "apK9YTAh5Y1i2tUxg4EPqgAABjU"]
[Sat Aug 29 05:07:13.556424 2026] [security2:error] [pid 1028675:tid 1028855] [client 20.104.49.130:34554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/srontol.php"] [unique_id "apK9YddHPfW2QFvhmL7cSAAAAC0"]
[Sat Aug 29 05:07:13.560313 2026] [security2:error] [pid 1018003:tid 1018213] [client 20.48.160.90:51661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/luuf.php"] [unique_id "apK9YTAh5Y1i2tUxg4EPqwAABfY"]
[Sat Aug 29 05:07:13.560786 2026] [security2:error] [pid 1018003:tid 1018255] [client 20.104.18.15:36630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/sao.php"] [unique_id "apK9YTAh5Y1i2tUxg4EPrAAABh8"]
[Sat Aug 29 05:07:13.576306 2026] [security2:error] [pid 1028675:tid 1028853] [client 93.123.109.228:39120] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/user/.env"] [unique_id "apK9YddHPfW2QFvhmL7cTwAAACs"]
[Sat Aug 29 05:07:13.588500 2026] [security2:error] [pid 1028675:tid 1028897] [client 20.104.68.135:19322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lisakayguitar.com"] [uri "/wp-content/uploads/de_fb_uploads/b.php"] [unique_id "apK9YddHPfW2QFvhmL7cVAAAAFc"]
[Sat Aug 29 05:07:13.592834 2026] [security2:error] [pid 1028675:tid 1028815] [client 52.139.37.240:32117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK9YddHPfW2QFvhmL7cVQAAAAU"]
[Sat Aug 29 05:07:13.598347 2026] [security2:error] [pid 1018003:tid 1018188] [client 20.104.104.62:10452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/horeg.php"] [unique_id "apK9YTAh5Y1i2tUxg4EPrgAABd0"]
[Sat Aug 29 05:07:13.601927 2026] [security2:error] [pid 1028675:tid 1028861] [client 93.123.109.228:39408] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/v1/.env"] [unique_id "apK9YddHPfW2QFvhmL7cVwAAADM"]
[Sat Aug 29 05:07:13.607217 2026] [security2:error] [pid 1028675:tid 1028871] [client 20.104.18.15:13655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/wp.php"] [unique_id "apK9YddHPfW2QFvhmL7cWAAAAD0"]
[Sat Aug 29 05:07:13.642084 2026] [security2:error] [pid 1028675:tid 1028851] [client 195.178.110.247:65012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.liatbehr.com"] [uri "/index.php"] [unique_id "apK9YddHPfW2QFvhmL7cWgAAACk"]
[Sat Aug 29 05:07:13.643619 2026] [security2:error] [pid 1028675:tid 1028712] [remote 47.128.48.166:23412] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.glamrus.rocks"] [uri "/robots.txt"] [unique_id "apK9YddHPfW2QFvhmL7cWwAAZR8"]
[Sat Aug 29 05:07:13.659798 2026] [security2:error] [pid 1028675:tid 1028912] [client 93.123.109.228:39282] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/v2/.env"] [unique_id "apK9YddHPfW2QFvhmL7cXAAAAGY"]
[Sat Aug 29 05:07:13.664250 2026] [security2:error] [pid 1028675:tid 1028874] [client 168.107.94.195:51625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9YddHPfW2QFvhmL7cXwAAAEA"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:13.667011 2026] [security2:error] [pid 1028675:tid 1028927] [client 20.48.250.41:59272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/24.php"] [unique_id "apK9YddHPfW2QFvhmL7cYQAAAHU"]
[Sat Aug 29 05:07:13.684174 2026] [security2:error] [pid 1018003:tid 1018236] [client 93.123.109.228:39330] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/v3/.env"] [unique_id "apK9YTAh5Y1i2tUxg4EPsAAABgw"]
[Sat Aug 29 05:07:13.693468 2026] [security2:error] [pid 1028675:tid 1028863] [client 20.104.104.62:20811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-config-sample.php"] [unique_id "apK9YddHPfW2QFvhmL7cZgAAADU"]
[Sat Aug 29 05:07:13.701561 2026] [security2:error] [pid 1018003:tid 1018174] [client 20.104.18.15:36553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/dapa.php"] [unique_id "apK9YTAh5Y1i2tUxg4EPtAAABc8"]
[Sat Aug 29 05:07:13.712730 2026] [security2:error] [pid 1018003:tid 1018265] [client 68.155.159.216:33752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-content/x/index.php"] [unique_id "apK9YTAh5Y1i2tUxg4EPtgAABik"]
[Sat Aug 29 05:07:13.723746 2026] [security2:error] [pid 1018003:tid 1018240] [client 20.48.160.90:51605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/fex.php"] [unique_id "apK9YTAh5Y1i2tUxg4EPuAAABhA"]
[Sat Aug 29 05:07:13.729675 2026] [security2:error] [pid 1018003:tid 1018244] [client 103.240.76.112:43339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK9YTAh5Y1i2tUxg4EPuQAABhQ"]
[Sat Aug 29 05:07:13.729815 2026] [security2:error] [pid 1018003:tid 1018244] [client 103.240.76.112:43339] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK9YTAh5Y1i2tUxg4EPuQAABhQ"]
[Sat Aug 29 05:07:13.736847 2026] [security2:error] [pid 1018003:tid 1018212] [client 158.23.147.79:32718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK9YTAh5Y1i2tUxg4EPugAABfU"]
[Sat Aug 29 05:07:13.740266 2026] [security2:error] [pid 1028675:tid 1028830] [client 52.139.37.240:21171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/defaults.php"] [unique_id "apK9YddHPfW2QFvhmL7cbwAAABQ"]
[Sat Aug 29 05:07:13.740816 2026] [security2:error] [pid 1028675:tid 1028923] [client 40.83.93.50:9274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/wxo.php"] [unique_id "apK9YddHPfW2QFvhmL7ccAAAAHE"]
[Sat Aug 29 05:07:13.741551 2026] [security2:error] [pid 1028675:tid 1028909] [client 20.104.104.62:10660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/basic.php"] [unique_id "apK9YddHPfW2QFvhmL7ccQAAAGM"]
[Sat Aug 29 05:07:13.745520 2026] [security2:error] [pid 1018003:tid 1018177] [client 20.104.18.15:13594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/abcd.php"] [unique_id "apK9YTAh5Y1i2tUxg4EPvQAABdI"]
[Sat Aug 29 05:07:13.746298 2026] [security2:error] [pid 1028675:tid 1028847] [client 68.155.159.216:12165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK9YddHPfW2QFvhmL7cdQAAACU"]
[Sat Aug 29 05:07:13.749133 2026] [security2:error] [pid 1028675:tid 1028835] [client 4.205.62.107:65413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/gecko-litespeed.php"] [unique_id "apK9YddHPfW2QFvhmL7cegAAABk"]
[Sat Aug 29 05:07:13.754328 2026] [security2:error] [pid 1028675:tid 1028905] [client 20.104.18.15:5070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/sallu.php"] [unique_id "apK9YddHPfW2QFvhmL7cewAAAF8"]
[Sat Aug 29 05:07:13.764048 2026] [security2:error] [pid 1018003:tid 1018170] [client 158.158.54.35:10617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-content/uploads/min.php"] [unique_id "apK9YTAh5Y1i2tUxg4EPvgAABcs"]
[Sat Aug 29 05:07:13.767966 2026] [security2:error] [pid 1028675:tid 1028930] [client 68.155.159.216:63815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK9YddHPfW2QFvhmL7cgAAAAHg"]
[Sat Aug 29 05:07:13.772598 2026] [security2:error] [pid 1028675:tid 1028842] [client 4.205.62.107:22034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/dd.php"] [unique_id "apK9YddHPfW2QFvhmL7cggAAACA"]
[Sat Aug 29 05:07:13.775056 2026] [security2:error] [pid 1018003:tid 1018258] [client 40.83.93.50:20825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-content/about.php"] [unique_id "apK9YTAh5Y1i2tUxg4EPwAAABiI"]
[Sat Aug 29 05:07:13.777072 2026] [security2:error] [pid 1028675:tid 1028900] [client 68.155.159.216:2026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/file5.php"] [unique_id "apK9YddHPfW2QFvhmL7chQAAAFo"]
[Sat Aug 29 05:07:13.785499 2026] [security2:error] [pid 1018003:tid 1018195] [client 20.104.68.135:2948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lisakayguitar.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK9YTAh5Y1i2tUxg4EPwQAABeQ"]
[Sat Aug 29 05:07:13.786659 2026] [security2:error] [pid 1028675:tid 1028844] [client 20.104.49.130:43010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/srontol.php"] [unique_id "apK9YddHPfW2QFvhmL7cigAAACI"]
[Sat Aug 29 05:07:13.791660 2026] [security2:error] [pid 1018003:tid 1018189] [client 4.205.62.107:58442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/cache-compat.php"] [unique_id "apK9YTAh5Y1i2tUxg4EPwgAABd4"]
[Sat Aug 29 05:07:13.797210 2026] [security2:error] [pid 1018003:tid 1018238] [client 20.196.209.81:14729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/wp-admin.php"] [unique_id "apK9YTAh5Y1i2tUxg4EPwwAABg4"]
[Sat Aug 29 05:07:13.798143 2026] [security2:error] [pid 1028675:tid 1028721] [remote 93.123.109.228:51634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/php-info.php"] [unique_id "apK9YddHPfW2QFvhmL7ciwAAayg"]
[Sat Aug 29 05:07:13.805622 2026] [security2:error] [pid 1018003:tid 1018157] [client 158.158.54.35:15191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/classwithtostring.php"] [unique_id "apK9YTAh5Y1i2tUxg4EPxAAABb4"]
[Sat Aug 29 05:07:13.824283 2026] [security2:error] [pid 1028675:tid 1028872] [client 158.23.147.79:35717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-admin/admin.php"] [unique_id "apK9YddHPfW2QFvhmL7cjQAAAD4"]
[Sat Aug 29 05:07:13.827216 2026] [security2:error] [pid 1028675:tid 1028741] [remote 93.123.109.228:51634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/php.php"] [unique_id "apK9YddHPfW2QFvhmL7cjgAAazw"]
[Sat Aug 29 05:07:13.829373 2026] [security2:error] [pid 1028675:tid 1028725] [remote 93.123.109.228:51634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/php_info.php"] [unique_id "apK9YddHPfW2QFvhmL7cjwAAayw"]
[Sat Aug 29 05:07:13.852247 2026] [security2:error] [pid 1018003:tid 1018273] [client 20.196.209.81:15533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-content/languages/chosen.php"] [unique_id "apK9YTAh5Y1i2tUxg4EPxgAABjE"]
[Sat Aug 29 05:07:13.853680 2026] [security2:error] [pid 1018003:tid 1018191] [client 93.123.109.228:39176] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/var/www/.env"] [unique_id "apK9YTAh5Y1i2tUxg4EPxwAABeA"]
[Sat Aug 29 05:07:13.857452 2026] [security2:error] [pid 1028675:tid 1028814] [client 93.123.109.228:39312] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/var/www/html/.env"] [unique_id "apK9YddHPfW2QFvhmL7ckQAAAAQ"]
[Sat Aug 29 05:07:13.863137 2026] [security2:error] [pid 1018003:tid 1018190] [client 20.48.160.90:49420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/l.php"] [unique_id "apK9YTAh5Y1i2tUxg4EPyAAABd8"]
[Sat Aug 29 05:07:13.865296 2026] [security2:error] [pid 1028675:tid 1028925] [client 20.48.250.41:60781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/155.php"] [unique_id "apK9YddHPfW2QFvhmL7ckwAAAHM"]
[Sat Aug 29 05:07:13.866074 2026] [security2:error] [pid 1028675:tid 1028737] [remote 93.123.109.228:51634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/phpinfo.php"] [unique_id "apK9YddHPfW2QFvhmL7clAAARTg"]
[Sat Aug 29 05:07:13.879767 2026] [security2:error] [pid 1018003:tid 1018275] [client 93.123.109.228:39288] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/web/.env"] [unique_id "apK9YTAh5Y1i2tUxg4EPygAABjM"]
[Sat Aug 29 05:07:13.882826 2026] [security2:error] [pid 1028675:tid 1028878] [client 20.104.18.15:13692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/nofile.php"] [unique_id "apK9YddHPfW2QFvhmL7clwAAAEQ"]
[Sat Aug 29 05:07:13.894783 2026] [security2:error] [pid 1018003:tid 1018192] [client 20.104.104.62:10868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/monso.php"] [unique_id "apK9YTAh5Y1i2tUxg4EPzAAABeE"]
[Sat Aug 29 05:07:13.908629 2026] [security2:error] [pid 1018003:tid 1018194] [client 68.155.159.216:49204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK9YTAh5Y1i2tUxg4EPzgAABeM"]
[Sat Aug 29 05:07:13.928410 2026] [security2:error] [pid 1018003:tid 1018226] [client 158.23.147.79:26617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK9YTAh5Y1i2tUxg4EPzwAABgM"]
[Sat Aug 29 05:07:13.951043 2026] [security2:error] [pid 1018003:tid 1018179] [client 20.104.18.15:4981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/codex.php"] [unique_id "apK9YTAh5Y1i2tUxg4EP0AAABdQ"]
[Sat Aug 29 05:07:13.966278 2026] [autoindex:error] [pid 1018003:tid 1018162] [client 205.210.31.8:57570] AH01276: Cannot serve directory /home3/umuqmhmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:07:13.976303 2026] [security2:error] [pid 1018003:tid 1018255] [client 20.104.18.15:36696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/wp-content/l.php"] [unique_id "apK9YTAh5Y1i2tUxg4EP0wAABh8"]
[Sat Aug 29 05:07:13.981116 2026] [security2:error] [pid 1028675:tid 1028929] [client 20.104.104.62:20836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/blog/fw.php"] [unique_id "apK9YddHPfW2QFvhmL7csgAAAHc"]
[Sat Aug 29 05:07:13.983420 2026] [security2:error] [pid 1028675:tid 1028889] [client 20.203.141.11:11236] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.xbdorthodontics.com"] [uri "/1.php"] [unique_id "apK9YddHPfW2QFvhmL7cswAAAE8"]
[Sat Aug 29 05:07:13.983500 2026] [security2:error] [pid 1028675:tid 1028889] [client 20.203.141.11:11236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/1.php"] [unique_id "apK9YddHPfW2QFvhmL7cswAAAE8"]
[Sat Aug 29 05:07:13.986717 2026] [security2:error] [pid 1018003:tid 1018200] [client 20.104.68.135:11686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lisakayguitar.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK9YTAh5Y1i2tUxg4EP1AAABek"]
[Sat Aug 29 05:07:14.011099 2026] [security2:error] [pid 1028675:tid 1028857] [client 93.123.109.228:39312] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/website/.env"] [unique_id "apK9YtdHPfW2QFvhmL7ctwAAAC8"]
[Sat Aug 29 05:07:14.013458 2026] [security2:error] [pid 1028675:tid 1028833] [client 20.48.160.90:51676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/xr.php"] [unique_id "apK9YtdHPfW2QFvhmL7cuAAAABc"]
[Sat Aug 29 05:07:14.020395 2026] [security2:error] [pid 1028675:tid 1028748] [remote 93.123.109.228:51634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/public/phpinfo.php"] [unique_id "apK9YtdHPfW2QFvhmL7cugAAXEM"]
[Sat Aug 29 05:07:14.021918 2026] [security2:error] [pid 1028675:tid 1028853] [client 20.104.18.15:13668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/run.php"] [unique_id "apK9YtdHPfW2QFvhmL7cuwAAACs"]
[Sat Aug 29 05:07:14.023450 2026] [security2:error] [pid 1018003:tid 1018207] [client 20.48.250.41:62576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/file.php"] [unique_id "apK9YjAh5Y1i2tUxg4EP1wAABfA"]
[Sat Aug 29 05:07:14.024199 2026] [security2:error] [pid 1018003:tid 1018188] [client 20.104.104.62:52085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/f-401.php"] [unique_id "apK9YjAh5Y1i2tUxg4EP2AAABd0"]
[Sat Aug 29 05:07:14.029603 2026] [security2:error] [pid 1018003:tid 1018184] [client 93.123.109.228:39288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/wp-config.php"] [unique_id "apK9YjAh5Y1i2tUxg4EP2gAABdk"]
[Sat Aug 29 05:07:14.044948 2026] [security2:error] [pid 1028675:tid 1028815] [client 168.107.94.195:52043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9YtdHPfW2QFvhmL7cvQAAAAU"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:14.048869 2026] [security2:error] [pid 1028675:tid 1028936] [client 93.123.109.228:39326] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/wp-config.php.bak"] [unique_id "apK9YtdHPfW2QFvhmL7cvgAAAH4"]
[Sat Aug 29 05:07:14.057379 2026] [security2:error] [pid 1018003:tid 1018271] [client 93.123.109.228:39094] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/wp-config.php.new"] [unique_id "apK9YjAh5Y1i2tUxg4EP2wAABi8"]
[Sat Aug 29 05:07:14.057809 2026] [security2:error] [pid 1028675:tid 1028871] [client 93.123.109.228:39434] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/wp-config.php.old"] [unique_id "apK9YtdHPfW2QFvhmL7cwAAAAD0"]
[Sat Aug 29 05:07:14.069716 2026] [security2:error] [pid 1028675:tid 1028839] [client 68.155.159.216:50349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/x.php"] [unique_id "apK9YtdHPfW2QFvhmL7cwgAAAB0"]
[Sat Aug 29 05:07:14.070626 2026] [security2:error] [pid 1028675:tid 1028856] [client 20.104.104.62:10859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/rce.php"] [unique_id "apK9YtdHPfW2QFvhmL7cwwAAAC4"]
[Sat Aug 29 05:07:14.074093 2026] [security2:error] [pid 1018003:tid 1018202] [client 68.155.159.216:30699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK9YjAh5Y1i2tUxg4EP3AAABes"]
[Sat Aug 29 05:07:14.113522 2026] [security2:error] [pid 1018003:tid 1018240] [client 158.23.147.79:25572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK9YjAh5Y1i2tUxg4EP3gAABhA"]
[Sat Aug 29 05:07:14.127964 2026] [security2:error] [pid 1028675:tid 1028873] [client 20.104.18.15:5064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/5656.php"] [unique_id "apK9YtdHPfW2QFvhmL7cyQAAAD8"]
[Sat Aug 29 05:07:14.132850 2026] [security2:error] [pid 1028675:tid 1028824] [client 93.123.109.228:39120] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "cpcontacts.fellowsofmythgar.com"] [uri "/___proxy_subdomain_cpcontacts/wp-content/mysql.sql"] [unique_id "apK9YtdHPfW2QFvhmL7cywAAAA4"]
[Sat Aug 29 05:07:14.137303 2026] [security2:error] [pid 1028675:tid 1028883] [client 20.104.18.15:36626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/wp-admin/w.php"] [unique_id "apK9YtdHPfW2QFvhmL7czgAAAEk"]
[Sat Aug 29 05:07:14.163410 2026] [security2:error] [pid 1018003:tid 1018267] [client 158.23.147.79:17457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-includes/css/index.php"] [unique_id "apK9YjAh5Y1i2tUxg4EP4AAABis"]
[Sat Aug 29 05:07:14.175930 2026] [security2:error] [pid 1018003:tid 1018277] [client 20.197.61.180:7908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/inputs.php"] [unique_id "apK9YjAh5Y1i2tUxg4EP4QAABjU"]
[Sat Aug 29 05:07:14.176916 2026] [security2:error] [pid 1028675:tid 1028850] [client 20.104.18.15:13751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/new.php"] [unique_id "apK9YtdHPfW2QFvhmL7c1QAAACg"]
[Sat Aug 29 05:07:14.184295 2026] [security2:error] [pid 1018003:tid 1018189] [client 158.23.147.79:49994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/asd.php"] [unique_id "apK9YjAh5Y1i2tUxg4EP4wAABd4"]
[Sat Aug 29 05:07:14.203081 2026] [security2:error] [pid 1028675:tid 1028894] [client 20.48.250.41:60705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK9YtdHPfW2QFvhmL7c2QAAAFQ"]
[Sat Aug 29 05:07:14.205517 2026] [security2:error] [pid 1028675:tid 1028920] [client 20.104.68.135:2964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lisakayguitar.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "apK9YtdHPfW2QFvhmL7c2gAAAG4"]
[Sat Aug 29 05:07:14.209546 2026] [security2:error] [pid 1018003:tid 1018190] [client 4.205.62.107:56014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/upload.form.php"] [unique_id "apK9YjAh5Y1i2tUxg4EP5QAABd8"]
[Sat Aug 29 05:07:14.210055 2026] [http2:warn] [pid 1017536:tid 1017791] [client 57.141.14.6:58642] h2_stream(1017536-30-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:07:14.213454 2026] [security2:error] [pid 1028675:tid 1028828] [client 158.158.54.35:7276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK9YtdHPfW2QFvhmL7c3AAAABI"]
[Sat Aug 29 05:07:14.215844 2026] [security2:error] [pid 1018003:tid 1018275] [client 20.104.104.62:10827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/exec.php"] [unique_id "apK9YjAh5Y1i2tUxg4EP5gAABjM"]
[Sat Aug 29 05:07:14.228946 2026] [security2:error] [pid 1028675:tid 1028898] [client 20.196.209.81:2036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/wp-configs.php"] [unique_id "apK9YtdHPfW2QFvhmL7c3gAAAFg"]
[Sat Aug 29 05:07:14.249743 2026] [security2:error] [pid 1028675:tid 1028903] [client 40.83.93.50:13592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-content/admin-header.php"] [unique_id "apK9YtdHPfW2QFvhmL7c4QAAAF0"]
[Sat Aug 29 05:07:14.250758 2026] [security2:error] [pid 1028675:tid 1028885] [client 158.158.54.35:15200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/news.php"] [unique_id "apK9YtdHPfW2QFvhmL7c4gAAAEs"]
[Sat Aug 29 05:07:14.256763 2026] [security2:error] [pid 1028675:tid 1028912] [client 20.196.209.81:20723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-content/languages/index.php"] [unique_id "apK9YtdHPfW2QFvhmL7c5QAAAGY"]
[Sat Aug 29 05:07:14.268517 2026] [security2:error] [pid 1028675:tid 1028904] [client 4.205.62.107:8974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/public/rip.php.php"] [unique_id "apK9YtdHPfW2QFvhmL7c5gAAAF4"]
[Sat Aug 29 05:07:14.287141 2026] [security2:error] [pid 1018003:tid 1018155] [client 158.23.147.79:30667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/plugins.php"] [unique_id "apK9YjAh5Y1i2tUxg4EP6AAABbw"]
[Sat Aug 29 05:07:14.290916 2026] [security2:error] [pid 1018003:tid 1018194] [client 20.104.104.62:64757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-optionss.php"] [unique_id "apK9YjAh5Y1i2tUxg4EP6QAABeM"]
[Sat Aug 29 05:07:14.305614 2026] [security2:error] [pid 1028675:tid 1028891] [client 35.194.208.44:43844] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/@fs/app/.env"] [unique_id "apK9YtdHPfW2QFvhmL7c7AAAAFE"]
[Sat Aug 29 05:07:14.306214 2026] [security2:error] [pid 1018003:tid 1018258] [client 35.194.208.44:43898] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ"] [unique_id "apK9YjAh5Y1i2tUxg4EP7QAABiI"]
[Sat Aug 29 05:07:14.306424 2026] [security2:error] [pid 1018003:tid 1018170] [client 35.194.208.44:43842] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/@fs/root/.env"] [unique_id "apK9YjAh5Y1i2tUxg4EP6gAABcs"]
[Sat Aug 29 05:07:14.306621 2026] [security2:error] [pid 1018003:tid 1018221] [client 35.194.208.44:43838] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/@fs/.env"] [unique_id "apK9YjAh5Y1i2tUxg4EP7AAABf4"]
[Sat Aug 29 05:07:14.309036 2026] [security2:error] [pid 1028675:tid 1028830] [client 35.194.208.44:43858] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK9YtdHPfW2QFvhmL7c7wAAABQ"]
[Sat Aug 29 05:07:14.310046 2026] [security2:error] [pid 1028675:tid 1028923] [client 35.194.208.44:43884] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/@fs/..%252f..%252f..%252f..%252f..%252froot/.env"] [unique_id "apK9YtdHPfW2QFvhmL7c8QAAAHE"]
[Sat Aug 29 05:07:14.310196 2026] [security2:error] [pid 1028675:tid 1028909] [client 35.194.208.44:43916] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/.env"] [unique_id "apK9YtdHPfW2QFvhmL7c7QAAAGM"]
[Sat Aug 29 05:07:14.310904 2026] [core:error] [pid 1028675:tid 1028847] [client 35.194.208.44:43924] AH10244: invalid URI path (/@fs/../../.env?raw??)
[Sat Aug 29 05:07:14.311525 2026] [security2:error] [pid 1028675:tid 1028878] [client 20.104.18.15:13641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/inx.php"] [unique_id "apK9YtdHPfW2QFvhmL7c8wAAAEQ"]
[Sat Aug 29 05:07:14.312736 2026] [security2:error] [pid 1018003:tid 1018186] [client 35.194.208.44:43904] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2fapp/.env"] [unique_id "apK9YjAh5Y1i2tUxg4EP7gAABds"]
[Sat Aug 29 05:07:14.313241 2026] [security2:error] [pid 1018003:tid 1018186] [client 35.194.208.44:43904] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2fapp/.env"] [unique_id "apK9YjAh5Y1i2tUxg4EP7gAABds"]
[Sat Aug 29 05:07:14.313958 2026] [security2:error] [pid 1028675:tid 1028819] [client 35.194.208.44:43850] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/@fs/src/.env"] [unique_id "apK9YtdHPfW2QFvhmL7c9AAAAAk"]
[Sat Aug 29 05:07:14.318635 2026] [security2:error] [pid 1018003:tid 1018219] [client 20.104.18.15:5034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/w3lls.php"] [unique_id "apK9YjAh5Y1i2tUxg4EP8wAABfw"]
[Sat Aug 29 05:07:14.322550 2026] [security2:error] [pid 1018003:tid 1018216] [client 20.48.160.90:51693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/Q3.php"] [unique_id "apK9YjAh5Y1i2tUxg4EP9gAABfk"]
[Sat Aug 29 05:07:14.322850 2026] [security2:error] [pid 1018003:tid 1018157] [client 35.194.208.44:43990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/@fs/root/.aws/credentials.backup"] [unique_id "apK9YjAh5Y1i2tUxg4EP9QAABb4"]
[Sat Aug 29 05:07:14.326572 2026] [security2:error] [pid 1018003:tid 1018224] [client 40.83.93.50:7504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/as.php"] [unique_id "apK9YjAh5Y1i2tUxg4EP-wAABgE"]
[Sat Aug 29 05:07:14.328051 2026] [security2:error] [pid 1018003:tid 1018266] [client 35.194.208.44:44004] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/@fs/root/.aws/credentials.bak"] [unique_id "apK9YjAh5Y1i2tUxg4EP-QAABio"]
[Sat Aug 29 05:07:14.328154 2026] [security2:error] [pid 1018003:tid 1018266] [client 35.194.208.44:44004] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/@fs/root/.aws/credentials.bak"] [unique_id "apK9YjAh5Y1i2tUxg4EP-QAABio"]
[Sat Aug 29 05:07:14.330687 2026] [security2:error] [pid 1028675:tid 1028851] [client 60.243.207.176:62464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK9YtdHPfW2QFvhmL7dAQAAACk"]
[Sat Aug 29 05:07:14.330779 2026] [security2:error] [pid 1028675:tid 1028851] [client 60.243.207.176:62464] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK9YtdHPfW2QFvhmL7dAQAAACk"]
[Sat Aug 29 05:07:14.339144 2026] [security2:error] [pid 1028675:tid 1028914] [client 35.194.208.44:44062] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/@fs/home/www-data/.aws/credentials"] [unique_id "apK9YtdHPfW2QFvhmL7dBwAAAGg"]
[Sat Aug 29 05:07:14.361121 2026] [security2:error] [pid 1028675:tid 1028932] [client 20.104.18.15:36604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/wp-content/k.php"] [unique_id "apK9YtdHPfW2QFvhmL7dDgAAAHo"]
[Sat Aug 29 05:07:14.376563 2026] [security2:error] [pid 1028675:tid 1028929] [client 20.104.104.62:44569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/dbc.php"] [unique_id "apK9YtdHPfW2QFvhmL7dDwAAAHc"]
[Sat Aug 29 05:07:14.386599 2026] [security2:error] [pid 1028675:tid 1028845] [client 68.155.159.216:24524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-admin/admin.php"] [unique_id "apK9YtdHPfW2QFvhmL7dFAAAACM"]
[Sat Aug 29 05:07:14.426745 2026] [security2:error] [pid 1018003:tid 1018207] [client 168.107.94.195:52508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9YjAh5Y1i2tUxg4EQBwAABfA"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:14.445505 2026] [security2:error] [pid 1018003:tid 1018184] [client 20.48.250.41:59321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/06.php"] [unique_id "apK9YjAh5Y1i2tUxg4EQCAAABdk"]
[Sat Aug 29 05:07:14.459969 2026] [security2:error] [pid 1018003:tid 1018174] [client 20.104.18.15:5098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/fpwch.php"] [unique_id "apK9YjAh5Y1i2tUxg4EQCQAABc8"]
[Sat Aug 29 05:07:14.462990 2026] [security2:error] [pid 1018003:tid 1018252] [client 20.104.104.62:42719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/hq.php"] [unique_id "apK9YjAh5Y1i2tUxg4EQCgAABhw"]
[Sat Aug 29 05:07:14.471152 2026] [security2:error] [pid 1018003:tid 1018233] [client 20.48.160.90:49530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/Q1.php"] [unique_id "apK9YjAh5Y1i2tUxg4EQCwAABgk"]
[Sat Aug 29 05:07:14.478885 2026] [security2:error] [pid 1028675:tid 1028918] [client 20.104.18.15:13571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/vpn.php"] [unique_id "apK9YtdHPfW2QFvhmL7dIwAAAGw"]
[Sat Aug 29 05:07:14.480181 2026] [security2:error] [pid 1018003:tid 1018236] [client 20.104.68.135:11689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lisakayguitar.com"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "apK9YjAh5Y1i2tUxg4EQDAAABgw"]
[Sat Aug 29 05:07:14.504239 2026] [security2:error] [pid 1028675:tid 1028861] [client 20.104.104.62:40226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/work.php"] [unique_id "apK9YtdHPfW2QFvhmL7dJgAAADM"]
[Sat Aug 29 05:07:14.520611 2026] [security2:error] [pid 1028675:tid 1028839] [client 20.104.104.62:10463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/wp-wlx.php"] [unique_id "apK9YtdHPfW2QFvhmL7dKQAAAB0"]
[Sat Aug 29 05:07:14.523773 2026] [security2:error] [pid 1018003:tid 1018265] [client 158.23.147.79:30475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK9YjAh5Y1i2tUxg4EQDQAABik"]
[Sat Aug 29 05:07:14.545795 2026] [security2:error] [pid 1028675:tid 1028874] [client 20.104.18.15:36664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/os.php"] [unique_id "apK9YtdHPfW2QFvhmL7dKgAAAEA"]
[Sat Aug 29 05:07:14.557753 2026] [security2:error] [pid 1028675:tid 1028824] [client 4.205.62.107:21622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/25.php"] [unique_id "apK9YtdHPfW2QFvhmL7dLAAAAA4"]
[Sat Aug 29 05:07:14.598346 2026] [core:error] [pid 1028675:tid 1028850] [client 20.203.141.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:14.598370 2026] [core:error] [pid 1028675:tid 1028850] [client 20.203.141.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:14.606440 2026] [security2:error] [pid 1028675:tid 1028920] [client 20.203.141.11:45475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/s.php"] [unique_id "apK9YtdHPfW2QFvhmL7dNQAAAG4"]
[Sat Aug 29 05:07:14.607636 2026] [security2:error] [pid 1028675:tid 1028841] [client 20.48.160.90:51325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/nz.php"] [unique_id "apK9YtdHPfW2QFvhmL7dNgAAAB8"]
[Sat Aug 29 05:07:14.632216 2026] [security2:error] [pid 1018003:tid 1018271] [client 20.196.209.81:14781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/essexec.php"] [unique_id "apK9YjAh5Y1i2tUxg4EQEQAABi8"]
[Sat Aug 29 05:07:14.633968 2026] [security2:error] [pid 1028675:tid 1028903] [client 20.48.250.41:59267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/class.php"] [unique_id "apK9YtdHPfW2QFvhmL7dOwAAAF0"]
[Sat Aug 29 05:07:14.636618 2026] [security2:error] [pid 1018003:tid 1018164] [client 127.0.0.1:40300] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK9YjAh5Y1i2tUxg4EP_AAABcU"]
[Sat Aug 29 05:07:14.636647 2026] [security2:error] [pid 1028675:tid 1028900] [client 35.194.208.44:43986] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/@fs/root/.aws/config"] [unique_id "apK9YtdHPfW2QFvhmL7c_gAAAFo"]
[Sat Aug 29 05:07:14.641494 2026] [security2:error] [pid 1028675:tid 1028922] [client 20.104.18.15:13708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/shiny.php"] [unique_id "apK9YtdHPfW2QFvhmL7dPQAAAHA"]
[Sat Aug 29 05:07:14.649558 2026] [security2:error] [pid 1028675:tid 1028904] [client 68.155.159.216:6090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/radio.php"] [unique_id "apK9YtdHPfW2QFvhmL7dPgAAAF4"]
[Sat Aug 29 05:07:14.656797 2026] [security2:error] [pid 1028675:tid 1028810] [client 20.196.209.81:15540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-content/languages/min.php"] [unique_id "apK9YtdHPfW2QFvhmL7dQAAAAAA"]
[Sat Aug 29 05:07:14.660865 2026] [security2:error] [pid 1028675:tid 1028871] [client 158.158.54.35:17987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/bthil.php"] [unique_id "apK9YtdHPfW2QFvhmL7dQQAAAD0"]
[Sat Aug 29 05:07:14.666145 2026] [security2:error] [pid 1028675:tid 1028924] [client 20.104.104.62:10832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/attack.php"] [unique_id "apK9YtdHPfW2QFvhmL7dQgAAAHI"]
[Sat Aug 29 05:07:14.679288 2026] [security2:error] [pid 1028675:tid 1028843] [client 20.104.68.135:11661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lisakayguitar.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9YtdHPfW2QFvhmL7dRQAAACE"]
[Sat Aug 29 05:07:14.695215 2026] [security2:error] [pid 1018003:tid 1018240] [client 158.158.54.35:15193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/about/function.php"] [unique_id "apK9YjAh5Y1i2tUxg4EQFgAABhA"]
[Sat Aug 29 05:07:14.697075 2026] [security2:error] [pid 1018003:tid 1018246] [client 20.104.18.15:5113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/domvf.php"] [unique_id "apK9YjAh5Y1i2tUxg4EQFwAABhY"]
[Sat Aug 29 05:07:14.705628 2026] [security2:error] [pid 1028675:tid 1028907] [client 20.104.104.62:40241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-config-pantheon.php"] [unique_id "apK9YtdHPfW2QFvhmL7dSwAAAGE"]
[Sat Aug 29 05:07:14.724977 2026] [security2:error] [pid 1018003:tid 1018183] [client 40.83.93.50:13627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-content/admin.php"] [unique_id "apK9YjAh5Y1i2tUxg4EQGQAABdg"]
[Sat Aug 29 05:07:14.758856 2026] [security2:error] [pid 1028675:tid 1028819] [client 52.139.37.240:15294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/up.php"] [unique_id "apK9YtdHPfW2QFvhmL7dUwAAAAk"]
[Sat Aug 29 05:07:14.761249 2026] [security2:error] [pid 1028675:tid 1028858] [client 20.48.160.90:49476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/sg.php"] [unique_id "apK9YtdHPfW2QFvhmL7dVAAAADA"]
[Sat Aug 29 05:07:14.761930 2026] [security2:error] [pid 1028675:tid 1028818] [client 20.104.18.15:36620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/htio.php"] [unique_id "apK9YtdHPfW2QFvhmL7dVQAAAAg"]
[Sat Aug 29 05:07:14.764661 2026] [security2:error] [pid 1028675:tid 1028816] [client 127.0.0.1:40362] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK9YtdHPfW2QFvhmL7dBQAAAAY"]
[Sat Aug 29 05:07:14.764718 2026] [security2:error] [pid 1028675:tid 1028844] [client 35.194.208.44:44018] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/@fs/home/node/.aws/config"] [unique_id "apK9YtdHPfW2QFvhmL7dAwAAACI"]
[Sat Aug 29 05:07:14.772528 2026] [security2:error] [pid 1018003:tid 1018221] [client 20.48.250.41:62465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/8.php"] [unique_id "apK9YjAh5Y1i2tUxg4EQGgAABf4"]
[Sat Aug 29 05:07:14.795120 2026] [security2:error] [pid 1028675:tid 1028855] [client 52.139.37.240:51770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "apK9YtdHPfW2QFvhmL7dWgAAAC0"]
[Sat Aug 29 05:07:14.799338 2026] [security2:error] [pid 1018003:tid 1018219] [client 20.104.104.62:36974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/mh.php"] [unique_id "apK9YjAh5Y1i2tUxg4EQGwAABfw"]
[Sat Aug 29 05:07:14.808275 2026] [security2:error] [pid 1018003:tid 1018224] [client 168.107.94.195:52769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9YjAh5Y1i2tUxg4EQHAAABgE"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:14.813778 2026] [security2:error] [pid 1028675:tid 1028857] [client 20.104.104.62:10461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/file66.php"] [unique_id "apK9YtdHPfW2QFvhmL7dXgAAAC8"]
[Sat Aug 29 05:07:14.818491 2026] [security2:error] [pid 1018003:tid 1018169] [client 68.155.159.216:33587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK9YjAh5Y1i2tUxg4EQHQAABco"]
[Sat Aug 29 05:07:14.842578 2026] [security2:error] [pid 1018003:tid 1018185] [client 158.23.147.79:32714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-admin/images/about.php"] [unique_id "apK9YjAh5Y1i2tUxg4EQHwAABdo"]
[Sat Aug 29 05:07:14.845818 2026] [security2:error] [pid 1028675:tid 1028813] [client 40.83.93.50:7429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/room.php"] [unique_id "apK9YtdHPfW2QFvhmL7dYQAAAAM"]
[Sat Aug 29 05:07:14.861703 2026] [security2:error] [pid 1018003:tid 1018172] [client 20.104.18.15:13680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/goods.php"] [unique_id "apK9YjAh5Y1i2tUxg4EQIQAABc0"]
[Sat Aug 29 05:07:14.875212 2026] [security2:error] [pid 1028675:tid 1028859] [client 68.155.159.216:65031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-content/cong.php"] [unique_id "apK9YtdHPfW2QFvhmL7dZwAAADE"]
[Sat Aug 29 05:07:14.886686 2026] [security2:error] [pid 1028675:tid 1028936] [client 4.205.62.107:24979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/goods.php"] [unique_id "apK9YtdHPfW2QFvhmL7daQAAAH4"]
[Sat Aug 29 05:07:14.891843 2026] [security2:error] [pid 1028675:tid 1028896] [client 68.155.159.216:1921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/file88.php"] [unique_id "apK9YtdHPfW2QFvhmL7dagAAAFY"]
[Sat Aug 29 05:07:14.895043 2026] [security2:error] [pid 1028675:tid 1028811] [client 20.48.160.90:51253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/hypo.php"] [unique_id "apK9YtdHPfW2QFvhmL7dawAAAAE"]
[Sat Aug 29 05:07:14.902522 2026] [security2:error] [pid 1028675:tid 1028861] [client 4.205.62.107:22520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/doc.php"] [unique_id "apK9YtdHPfW2QFvhmL7dbQAAADM"]
[Sat Aug 29 05:07:14.908068 2026] [security2:error] [pid 1018003:tid 1018202] [client 20.48.250.41:62508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/0x0x.php"] [unique_id "apK9YjAh5Y1i2tUxg4EQJgAABes"]
[Sat Aug 29 05:07:14.929999 2026] [security2:error] [pid 1018003:tid 1018270] [client 20.197.61.180:7203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/class-walker-category-dropdown-class.php"] [unique_id "apK9YjAh5Y1i2tUxg4EQKAAABi4"]
[Sat Aug 29 05:07:14.943256 2026] [security2:error] [pid 1028675:tid 1028824] [client 158.23.147.79:35784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK9YtdHPfW2QFvhmL7dcwAAAA4"]
[Sat Aug 29 05:07:14.944548 2026] [security2:error] [pid 1018003:tid 1018174] [client 52.139.37.240:21402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/domains.php"] [unique_id "apK9YjAh5Y1i2tUxg4EQKgAABc8"]
[Sat Aug 29 05:07:14.945097 2026] [security2:error] [pid 1028675:tid 1028825] [client 20.104.104.62:42724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/f2r4.php"] [unique_id "apK9YtdHPfW2QFvhmL7ddAAAAA8"]
[Sat Aug 29 05:07:14.948281 2026] [security2:error] [pid 1018003:tid 1018256] [client 4.205.62.107:51459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/fff.php"] [unique_id "apK9YjAh5Y1i2tUxg4EQKwAABiA"]
[Sat Aug 29 05:07:14.948952 2026] [security2:error] [pid 1028675:tid 1028863] [client 20.104.104.62:10825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/zafir1.php"] [unique_id "apK9YtdHPfW2QFvhmL7ddQAAADU"]
[Sat Aug 29 05:07:14.951148 2026] [security2:error] [pid 1018003:tid 1018267] [client 20.104.68.135:15261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lisakayguitar.com"] [uri "/wp-includes/blocks/buttons/index.php"] [unique_id "apK9YjAh5Y1i2tUxg4EQLAAABis"]
[Sat Aug 29 05:07:14.965179 2026] [security2:error] [pid 1028675:tid 1028854] [client 158.23.147.79:53804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/content.php"] [unique_id "apK9YtdHPfW2QFvhmL7ddwAAACw"]
[Sat Aug 29 05:07:14.999813 2026] [security2:error] [pid 1018003:tid 1018268] [client 52.139.37.240:32085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9YjAh5Y1i2tUxg4EQMAAABiw"]
[Sat Aug 29 05:07:15.016878 2026] [security2:error] [pid 1028675:tid 1028890] [client 68.155.159.216:49184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-content/admin.php"] [unique_id "apK9Y9dHPfW2QFvhmL7dfAAAAFA"]
[Sat Aug 29 05:07:15.029640 2026] [security2:error] [pid 1018003:tid 1018194] [client 114.119.157.112:63075] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.classiclightingusa.com"] [uri "/catalog/product_reviews_write.php/products_id/626/osCsid/6b7db4fe5228fd82276a6609e8cbfe98"] [unique_id "apK9YzAh5Y1i2tUxg4EQMwAABeM"], referer: http://www.classiclightingusa.com/catalog/product_info.php/products_id/626/osCsid/6b7db4fe5228fd82276a6609e8cbfe98
[Sat Aug 29 05:07:15.038805 2026] [security2:error] [pid 1018003:tid 1018221] [client 20.48.160.90:51640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/Hd.php"] [unique_id "apK9YzAh5Y1i2tUxg4EQNAAABf4"]
[Sat Aug 29 05:07:15.039148 2026] [security2:error] [pid 1018003:tid 1018156] [client 52.139.37.240:14951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/wp-content/155.php"] [unique_id "apK9YzAh5Y1i2tUxg4EQNQAABb0"]
[Sat Aug 29 05:07:15.053224 2026] [security2:error] [pid 1018003:tid 1018219] [client 103.168.67.159:40306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 159.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "naturalkneads.com"] [uri "/wp/index.php"] [unique_id "apK9YzAh5Y1i2tUxg4EQNgAABfw"], referer: https://naturalkneads.com/wp/wp-admin/
[Sat Aug 29 05:07:15.056207 2026] [security2:error] [pid 1018003:tid 1018152] [client 20.196.209.81:20688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-content/languages/pk.php"] [unique_id "apK9YzAh5Y1i2tUxg4EQNwAABbk"]
[Sat Aug 29 05:07:15.057539 2026] [security2:error] [pid 1028675:tid 1028912] [client 158.23.147.79:26553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/goat.php"] [unique_id "apK9Y9dHPfW2QFvhmL7dggAAAGY"]
[Sat Aug 29 05:07:15.065575 2026] [security2:error] [pid 1028675:tid 1028911] [client 20.196.209.81:2041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/hello.php"] [unique_id "apK9Y9dHPfW2QFvhmL7dhQAAAGU"]
[Sat Aug 29 05:07:15.065821 2026] [security2:error] [pid 1028675:tid 1028917] [client 68.155.159.216:64416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/file88.php"] [unique_id "apK9Y9dHPfW2QFvhmL7dhAAAAGs"]
[Sat Aug 29 05:07:15.067057 2026] [security2:error] [pid 1018003:tid 1018175] [client 20.48.250.41:59379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/166.php"] [unique_id "apK9YzAh5Y1i2tUxg4EQOAAABdA"]
[Sat Aug 29 05:07:15.090392 2026] [security2:error] [pid 1018003:tid 1018266] [client 20.104.104.62:10657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/console.php"] [unique_id "apK9YzAh5Y1i2tUxg4EQOQAABio"]
[Sat Aug 29 05:07:15.107830 2026] [security2:error] [pid 1018003:tid 1018203] [client 20.104.49.130:54910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/wp-blogs.php"] [unique_id "apK9YzAh5Y1i2tUxg4EQOgAABew"]
[Sat Aug 29 05:07:15.117412 2026] [security2:error] [pid 1028675:tid 1028937] [client 20.203.141.11:27951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/test1.php"] [unique_id "apK9Y9dHPfW2QFvhmL7diwAAAH8"]
[Sat Aug 29 05:07:15.131488 2026] [core:error] [pid 1018003:tid 1018277] [client 158.158.54.35:34259] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:15.131503 2026] [core:error] [pid 1018003:tid 1018277] [client 158.158.54.35:34259] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:15.143040 2026] [security2:error] [pid 1018003:tid 1018157] [client 52.139.37.240:20785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/dropdown.php"] [unique_id "apK9YzAh5Y1i2tUxg4EQPAAABb4"]
[Sat Aug 29 05:07:15.143276 2026] [security2:error] [pid 1018003:tid 1018222] [client 20.104.104.62:20829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-xmlx.php"] [unique_id "apK9YzAh5Y1i2tUxg4EQPQAABf8"]
[Sat Aug 29 05:07:15.145028 2026] [security2:error] [pid 1018003:tid 1018200] [client 20.104.104.62:42656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/sadis.php"] [unique_id "apK9YzAh5Y1i2tUxg4EQPgAABek"]
[Sat Aug 29 05:07:15.146952 2026] [security2:error] [pid 1018003:tid 1018230] [client 20.104.68.135:3694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lisakayguitar.com"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "apK9YzAh5Y1i2tUxg4EQPwAABgY"]
[Sat Aug 29 05:07:15.184655 2026] [security2:error] [pid 1028675:tid 1028843] [client 68.155.159.216:30706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/makeasmtp.php"] [unique_id "apK9Y9dHPfW2QFvhmL7dlQAAACE"]
[Sat Aug 29 05:07:15.187645 2026] [security2:error] [pid 1028675:tid 1028878] [client 168.107.94.195:53103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9Y9dHPfW2QFvhmL7dlgAAAEQ"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:15.193041 2026] [security2:error] [pid 1018003:tid 1018233] [client 68.155.159.216:50235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-content/x.php"] [unique_id "apK9YzAh5Y1i2tUxg4EQQQAABgk"]
[Sat Aug 29 05:07:15.193934 2026] [security2:error] [pid 1028675:tid 1028866] [client 146.70.194.254:40496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 254.194.70.146.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "modelbasenjis.com"] [uri "/cgi-sys/suspendedpage.cgi/xmlrpc.php"] [unique_id "apK9Y9dHPfW2QFvhmL7dkwAAADg"]
[Sat Aug 29 05:07:15.200773 2026] [security2:error] [pid 1028675:tid 1028900] [client 40.83.93.50:13584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-content/autoload_classmap.php"] [unique_id "apK9Y9dHPfW2QFvhmL7dnAAAAFo"]
[Sat Aug 29 05:07:15.212513 2026] [security2:error] [pid 1028675:tid 1028814] [client 103.171.189.88:57692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9Y9dHPfW2QFvhmL7dmwAAAAQ"]
[Sat Aug 29 05:07:15.212631 2026] [security2:error] [pid 1028675:tid 1028814] [client 103.171.189.88:57692] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9Y9dHPfW2QFvhmL7dmwAAAAQ"]
[Sat Aug 29 05:07:15.219552 2026] [security2:error] [pid 1028675:tid 1028823] [client 158.23.147.79:25596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK9Y9dHPfW2QFvhmL7doAAAAA0"]
[Sat Aug 29 05:07:15.226858 2026] [security2:error] [pid 1028675:tid 1028851] [client 20.104.104.62:10824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/blnux.php"] [unique_id "apK9Y9dHPfW2QFvhmL7dogAAACk"]
[Sat Aug 29 05:07:15.232014 2026] [security2:error] [pid 1028675:tid 1028929] [client 68.155.159.216:33734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK9Y9dHPfW2QFvhmL7dowAAAHc"]
[Sat Aug 29 05:07:15.235054 2026] [security2:error] [pid 1018003:tid 1018184] [client 52.139.37.240:15273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/wp-update.php"] [unique_id "apK9YzAh5Y1i2tUxg4EQQgAABdk"]
[Sat Aug 29 05:07:15.236517 2026] [security2:error] [pid 1028675:tid 1028845] [client 20.48.250.41:58444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/h2a2ck.php"] [unique_id "apK9Y9dHPfW2QFvhmL7dpAAAACM"]
[Sat Aug 29 05:07:15.259135 2026] [security2:error] [pid 1028675:tid 1028819] [client 52.139.37.240:32759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/wp-index.php"] [unique_id "apK9Y9dHPfW2QFvhmL7dqwAAAAk"]
[Sat Aug 29 05:07:15.274018 2026] [security2:error] [pid 1028675:tid 1028836] [client 158.23.147.79:17508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK9Y9dHPfW2QFvhmL7drgAAABo"]
[Sat Aug 29 05:07:15.287253 2026] [security2:error] [pid 1028675:tid 1028833] [client 158.158.54.35:18046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/cv.php"] [unique_id "apK9Y9dHPfW2QFvhmL7dtAAAABc"]
[Sat Aug 29 05:07:15.289642 2026] [security2:error] [pid 1018003:tid 1018238] [client 158.23.147.79:50095] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.samueljamesmcgrath.com"] [uri "/1.php"] [unique_id "apK9YzAh5Y1i2tUxg4EQRAAABg4"]
[Sat Aug 29 05:07:15.289731 2026] [security2:error] [pid 1018003:tid 1018238] [client 158.23.147.79:50095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/1.php"] [unique_id "apK9YzAh5Y1i2tUxg4EQRAAABg4"]
[Sat Aug 29 05:07:15.309589 2026] [security2:error] [pid 1028675:tid 1028925] [client 20.48.160.90:51277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/im.php"] [unique_id "apK9Y9dHPfW2QFvhmL7duQAAAHM"]
[Sat Aug 29 05:07:15.333483 2026] [security2:error] [pid 1018003:tid 1018196] [client 52.139.37.240:21134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/files/index.php"] [unique_id "apK9YzAh5Y1i2tUxg4EQRQAABeU"]
[Sat Aug 29 05:07:15.353116 2026] [security2:error] [pid 1018003:tid 1018164] [client 4.205.62.107:55993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/aws_auth.php"] [unique_id "apK9YzAh5Y1i2tUxg4EQRwAABcU"]
[Sat Aug 29 05:07:15.354121 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.104.104.62:52049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/xcre1.php"] [unique_id "apK9YzAh5Y1i2tUxg4EQSAAABcI"]
[Sat Aug 29 05:07:15.361398 2026] [security2:error] [pid 1018003:tid 1018187] [client 20.104.104.62:10486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/pentest.php"] [unique_id "apK9YzAh5Y1i2tUxg4EQSQAABdw"]
[Sat Aug 29 05:07:15.364339 2026] [security2:error] [pid 1018003:tid 1018182] [client 20.48.250.41:62473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/error_log.php"] [unique_id "apK9YzAh5Y1i2tUxg4EQSgAABdc"]
[Sat Aug 29 05:07:15.368101 2026] [security2:error] [pid 1018003:tid 1018213] [client 68.155.159.216:12272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/images/index.php"] [unique_id "apK9YzAh5Y1i2tUxg4EQTAAABfY"]
[Sat Aug 29 05:07:15.391324 2026] [security2:error] [pid 1028675:tid 1028840] [client 158.23.147.79:30513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/goat1.php"] [unique_id "apK9Y9dHPfW2QFvhmL7dwwAAAB4"]
[Sat Aug 29 05:07:15.419708 2026] [security2:error] [pid 1018003:tid 1018186] [client 20.104.68.135:2994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lisakayguitar.com"] [uri "/wp-includes/index.php"] [unique_id "apK9YzAh5Y1i2tUxg4EQTgAABds"]
[Sat Aug 29 05:07:15.424198 2026] [security2:error] [pid 1028675:tid 1028909] [client 40.83.93.50:7998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/class-wp-cmd.php"] [unique_id "apK9Y9dHPfW2QFvhmL7dxgAAAGM"]
[Sat Aug 29 05:07:15.424731 2026] [security2:error] [pid 1018003:tid 1018246] [client 52.139.37.240:14975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/xmrlpc.php"] [unique_id "apK9YzAh5Y1i2tUxg4EQTwAABhY"]
[Sat Aug 29 05:07:15.450228 2026] [security2:error] [pid 1018003:tid 1018183] [client 52.139.37.240:32096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/ww2.php"] [unique_id "apK9YzAh5Y1i2tUxg4EQUAAABdg"]
[Sat Aug 29 05:07:15.450446 2026] [security2:error] [pid 1028675:tid 1028905] [client 20.48.160.90:51275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/fc.php"] [unique_id "apK9Y9dHPfW2QFvhmL7d0AAAAF8"]
[Sat Aug 29 05:07:15.451912 2026] [security2:error] [pid 1018003:tid 1018192] [client 4.205.62.107:9171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/h.php"] [unique_id "apK9YzAh5Y1i2tUxg4EQUQAABeE"]
[Sat Aug 29 05:07:15.454584 2026] [security2:error] [pid 1028675:tid 1028879] [client 20.196.209.81:22055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.corinaandbrian.strangeworx.com"] [uri "/wp-content/languages/plugins/about.php"] [unique_id "apK9Y9dHPfW2QFvhmL7d0wAAAEU"]
[Sat Aug 29 05:07:15.467093 2026] [security2:error] [pid 1028675:tid 1028913] [client 20.196.209.81:1999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/fi2.php"] [unique_id "apK9Y9dHPfW2QFvhmL7d2QAAAGc"]
[Sat Aug 29 05:07:15.489580 2026] [security2:error] [pid 1028675:tid 1028854] [client 68.155.159.216:24483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK9Y9dHPfW2QFvhmL7d3AAAACw"]
[Sat Aug 29 05:07:15.496180 2026] [security2:error] [pid 1028675:tid 1028835] [client 20.104.104.62:10458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/6y7t.php"] [unique_id "apK9Y9dHPfW2QFvhmL7d3QAAABk"]
[Sat Aug 29 05:07:15.520709 2026] [security2:error] [pid 1028675:tid 1028773] [remote 93.123.109.228:51634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/test.php"] [unique_id "apK9Y9dHPfW2QFvhmL7d4gAAG1w"]
[Sat Aug 29 05:07:15.539963 2026] [security2:error] [pid 1028675:tid 1028870] [client 20.48.250.41:60738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/403.php"] [unique_id "apK9Y9dHPfW2QFvhmL7d5AAAADw"]
[Sat Aug 29 05:07:15.558972 2026] [security2:error] [pid 1028675:tid 1028872] [client 68.155.159.216:60721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK9Y9dHPfW2QFvhmL7d5gAAAD4"]
[Sat Aug 29 05:07:15.566601 2026] [security2:error] [pid 1028675:tid 1028885] [client 168.107.94.195:53588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9Y9dHPfW2QFvhmL7d6QAAAEs"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:15.575307 2026] [security2:error] [pid 1028675:tid 1028936] [client 158.158.54.35:28357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-includes/admin.php"] [unique_id "apK9Y9dHPfW2QFvhmL7d6gAAAH4"]
[Sat Aug 29 05:07:15.610883 2026] [security2:error] [pid 1028675:tid 1028873] [client 20.203.141.11:9001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/ws.php"] [unique_id "apK9Y9dHPfW2QFvhmL7d7gAAAD8"]
[Sat Aug 29 05:07:15.614917 2026] [security2:error] [pid 1028675:tid 1028906] [client 20.104.68.135:3709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lisakayguitar.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK9Y9dHPfW2QFvhmL7d8AAAAGA"]
[Sat Aug 29 05:07:15.631911 2026] [security2:error] [pid 1028675:tid 1028892] [client 158.23.147.79:30485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK9Y9dHPfW2QFvhmL7d8QAAAFI"]
[Sat Aug 29 05:07:15.633500 2026] [security2:error] [pid 1018003:tid 1018203] [client 20.104.104.62:10482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/0xs.php"] [unique_id "apK9YzAh5Y1i2tUxg4EQVwAABew"]
[Sat Aug 29 05:07:15.640226 2026] [security2:error] [pid 1018003:tid 1018231] [client 20.48.160.90:51592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/ke.php"] [unique_id "apK9YzAh5Y1i2tUxg4EQWAAABgc"]
[Sat Aug 29 05:07:15.643191 2026] [security2:error] [pid 1028675:tid 1028877] [client 20.104.104.62:64708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/pwp-.myluv.php"] [unique_id "apK9Y9dHPfW2QFvhmL7d9AAAAEM"]
[Sat Aug 29 05:07:15.658603 2026] [security2:error] [pid 1018003:tid 1018170] [client 20.197.61.180:13854] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "likesareus.com"] [uri "/1.php7"] [unique_id "apK9YzAh5Y1i2tUxg4EQWgAABcs"]
[Sat Aug 29 05:07:15.658708 2026] [security2:error] [pid 1018003:tid 1018170] [client 20.197.61.180:13854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/1.php7"] [unique_id "apK9YzAh5Y1i2tUxg4EQWgAABcs"]
[Sat Aug 29 05:07:15.668255 2026] [security2:error] [pid 1028675:tid 1028821] [client 20.48.250.41:58446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/cytyr.php"] [unique_id "apK9Y9dHPfW2QFvhmL7d9wAAAAs"]
[Sat Aug 29 05:07:15.670337 2026] [security2:error] [pid 1018003:tid 1018277] [client 185.104.184.230:55228] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.bjx.okj.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "apK9YzAh5Y1i2tUxg4EQXAAABjU"]
[Sat Aug 29 05:07:15.673374 2026] [security2:error] [pid 1028675:tid 1028920] [client 40.83.93.50:21219] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-content/cache/min/1/wp-content/admin.php"] [unique_id "apK9Y9dHPfW2QFvhmL7d-AAAAG4"]
[Sat Aug 29 05:07:15.711690 2026] [security2:error] [pid 1018003:tid 1018200] [client 4.205.62.107:21913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/nlnub.php"] [unique_id "apK9YzAh5Y1i2tUxg4EQXgAABek"]
[Sat Aug 29 05:07:15.756109 2026] [security2:error] [pid 1018003:tid 1018169] [client 158.158.54.35:17561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-content/packed.php"] [unique_id "apK9YzAh5Y1i2tUxg4EQXwAABco"]
[Sat Aug 29 05:07:15.766583 2026] [security2:error] [pid 1018003:tid 1018191] [client 197.219.150.206:61968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK9YzAh5Y1i2tUxg4EQYAAABeA"]
[Sat Aug 29 05:07:15.766692 2026] [security2:error] [pid 1018003:tid 1018191] [client 197.219.150.206:61968] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK9YzAh5Y1i2tUxg4EQYAAABeA"]
[Sat Aug 29 05:07:15.769582 2026] [security2:error] [pid 1028675:tid 1028932] [client 20.104.104.62:10842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/waf.php"] [unique_id "apK9Y9dHPfW2QFvhmL7eCAAAAHo"]
[Sat Aug 29 05:07:15.810386 2026] [security2:error] [pid 1028675:tid 1028928] [client 20.104.68.135:19291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lisakayguitar.com"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "apK9Y9dHPfW2QFvhmL7eCgAAAHY"]
[Sat Aug 29 05:07:15.823083 2026] [security2:error] [pid 1028675:tid 1028915] [client 20.104.104.62:42637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/motu.php"] [unique_id "apK9Y9dHPfW2QFvhmL7eDgAAAGk"]
[Sat Aug 29 05:07:15.836179 2026] [security2:error] [pid 1018003:tid 1018262] [client 20.48.160.90:51649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/tf.php"] [unique_id "apK9YzAh5Y1i2tUxg4EQZAAABiY"]
[Sat Aug 29 05:07:15.842644 2026] [security2:error] [pid 1018003:tid 1018202] [client 57.141.14.21:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/cart/"] [unique_id "apK9YzAh5Y1i2tUxg4EQZQAABes"]
[Sat Aug 29 05:07:15.848727 2026] [security2:error] [pid 1018003:tid 1018184] [client 20.48.250.41:62517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/galer.php"] [unique_id "apK9YzAh5Y1i2tUxg4EQZwAABdk"]
[Sat Aug 29 05:07:15.888386 2026] [autoindex:error] [pid 1018003:tid 1018225] [client 192.145.125.70:43636] AH01276: Cannot serve directory /home3/zbvtvpmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:07:15.895555 2026] [security2:error] [pid 1028675:tid 1028908] [client 20.104.104.62:10483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/bnnof6.php"] [unique_id "apK9Y9dHPfW2QFvhmL7eHgAAAGI"]
[Sat Aug 29 05:07:15.925887 2026] [security2:error] [pid 1018003:tid 1018188] [client 20.196.209.81:15202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/1p.php"] [unique_id "apK9YzAh5Y1i2tUxg4EQaQAABd0"]
[Sat Aug 29 05:07:15.927063 2026] [security2:error] [pid 1028675:tid 1028862] [client 68.155.159.216:33732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK9Y9dHPfW2QFvhmL7eJwAAADQ"]
[Sat Aug 29 05:07:15.950772 2026] [security2:error] [pid 1018003:tid 1018266] [client 149.34.210.141:40283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9YzAh5Y1i2tUxg4EQawAABio"]
[Sat Aug 29 05:07:15.950877 2026] [security2:error] [pid 1018003:tid 1018266] [client 149.34.210.141:40283] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9YzAh5Y1i2tUxg4EQawAABio"]
[Sat Aug 29 05:07:15.951348 2026] [security2:error] [pid 1018003:tid 1018271] [client 168.107.94.195:53994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9YzAh5Y1i2tUxg4EQbAAABi8"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:15.965849 2026] [security2:error] [pid 1018003:tid 1018161] [client 158.23.147.79:32745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK9YzAh5Y1i2tUxg4EQbQAABcI"]
[Sat Aug 29 05:07:15.970938 2026] [security2:error] [pid 1018003:tid 1018258] [client 40.83.93.50:7547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/disagreed.php"] [unique_id "apK9YzAh5Y1i2tUxg4EQbwAABiI"]
[Sat Aug 29 05:07:15.980228 2026] [security2:error] [pid 1028675:tid 1028876] [client 68.155.159.216:65140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK9Y9dHPfW2QFvhmL7eLgAAAEI"]
[Sat Aug 29 05:07:15.983861 2026] [security2:error] [pid 1018003:tid 1018159] [client 20.48.250.41:60774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/baixy.php"] [unique_id "apK9YzAh5Y1i2tUxg4EQcAAABcA"]
[Sat Aug 29 05:07:15.989418 2026] [security2:error] [pid 1018003:tid 1018182] [client 68.155.159.216:1968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/NewFile.php/"] [unique_id "apK9YzAh5Y1i2tUxg4EQcQAABdc"]
[Sat Aug 29 05:07:15.997908 2026] [security2:error] [pid 1018003:tid 1018194] [client 185.104.184.230:55242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.184.104.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "cpanel.bjx.okj.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "apK9YzAh5Y1i2tUxg4EQcgAABeM"]
[Sat Aug 29 05:07:15.999593 2026] [security2:error] [pid 1018003:tid 1018166] [client 20.48.160.90:51656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/px.php"] [unique_id "apK9YzAh5Y1i2tUxg4EQcwAABcc"]
[Sat Aug 29 05:07:16.012845 2026] [security2:error] [pid 1028675:tid 1028818] [client 20.104.104.62:20840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wihp1.php"] [unique_id "apK9ZNdHPfW2QFvhmL7eNQAAAAg"]
[Sat Aug 29 05:07:16.024855 2026] [core:error] [pid 1028675:tid 1028895] [client 158.158.54.35:20600] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.024870 2026] [core:error] [pid 1028675:tid 1028895] [client 158.158.54.35:20600] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.025757 2026] [security2:error] [pid 1028675:tid 1028830] [client 4.205.62.107:26655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/loxi-o.php"] [unique_id "apK9ZNdHPfW2QFvhmL7eOgAAABQ"]
[Sat Aug 29 05:07:16.028774 2026] [security2:error] [pid 1018003:tid 1018255] [client 20.104.104.62:10837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/ah24.php"] [unique_id "apK9ZDAh5Y1i2tUxg4EQdQAABh8"]
[Sat Aug 29 05:07:16.034172 2026] [security2:error] [pid 1018003:tid 1018275] [client 192.145.125.70:43636] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "zbv.tvp.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "apK9ZDAh5Y1i2tUxg4EQdgAABjM"]
[Sat Aug 29 05:07:16.051293 2026] [security2:error] [pid 1028675:tid 1028863] [client 158.23.147.79:35815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/classwithtostring.php"] [unique_id "apK9ZNdHPfW2QFvhmL7ePgAAADU"]
[Sat Aug 29 05:07:16.073847 2026] [security2:error] [pid 1018003:tid 1018172] [client 4.205.62.107:22055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/fun.php"] [unique_id "apK9ZDAh5Y1i2tUxg4EQdwAABc0"]
[Sat Aug 29 05:07:16.083812 2026] [security2:error] [pid 1018003:tid 1018169] [client 4.205.62.107:58447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/sadd.php"] [unique_id "apK9ZDAh5Y1i2tUxg4EQeAAABco"]
[Sat Aug 29 05:07:16.087984 2026] [security2:error] [pid 1028675:tid 1028919] [client 20.104.104.62:36950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/wefile.php"] [unique_id "apK9ZNdHPfW2QFvhmL7eQgAAAG0"]
[Sat Aug 29 05:07:16.093754 2026] [security2:error] [pid 1018003:tid 1018191] [client 20.104.68.135:3695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lisakayguitar.com"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "apK9ZDAh5Y1i2tUxg4EQeQAABeA"]
[Sat Aug 29 05:07:16.110014 2026] [security2:error] [pid 1028675:tid 1028872] [client 20.151.200.44:47325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/uuu.php"] [unique_id "apK9ZNdHPfW2QFvhmL7eRQAAAD4"]
[Sat Aug 29 05:07:16.120489 2026] [security2:error] [pid 1018003:tid 1018226] [client 20.48.250.41:60708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/ava.php"] [unique_id "apK9ZDAh5Y1i2tUxg4EQegAABgM"]
[Sat Aug 29 05:07:16.122135 2026] [security2:error] [pid 1028675:tid 1028885] [client 68.155.159.216:49214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/xmlrpc.php"] [unique_id "apK9ZNdHPfW2QFvhmL7eRgAAAEs"]
[Sat Aug 29 05:07:16.131159 2026] [security2:error] [pid 1028675:tid 1028936] [client 158.23.147.79:54342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK9ZNdHPfW2QFvhmL7eRwAAAH4"]
[Sat Aug 29 05:07:16.137223 2026] [security2:error] [pid 1028675:tid 1028903] [client 20.48.160.90:51677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/jg.php"] [unique_id "apK9ZNdHPfW2QFvhmL7eSQAAAF0"]
[Sat Aug 29 05:07:16.149770 2026] [security2:error] [pid 1028675:tid 1028905] [client 40.83.93.50:13571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-content/classwithtostring.php"] [unique_id "apK9ZNdHPfW2QFvhmL7eTAAAAF8"]
[Sat Aug 29 05:07:16.153713 2026] [security2:error] [pid 1018003:tid 1018187] [client 20.203.141.11:11223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-themes.php"] [unique_id "apK9ZDAh5Y1i2tUxg4EQewAABdw"]
[Sat Aug 29 05:07:16.176593 2026] [security2:error] [pid 1018003:tid 1018219] [client 34.81.157.26:40434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/@fs/root/.env"] [unique_id "apK9ZDAh5Y1i2tUxg4EQfQAABfw"]
[Sat Aug 29 05:07:16.177104 2026] [security2:error] [pid 1028675:tid 1028715] [remote 93.123.109.228:51634] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.ffcbranson.com"] [uri "/wp-config.php.bak"] [unique_id "apK9ZNdHPfW2QFvhmL7eUwAAXCI"]
[Sat Aug 29 05:07:16.177342 2026] [security2:error] [pid 1028675:tid 1028709] [remote 93.123.109.228:51634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/wp-config.php"] [unique_id "apK9ZNdHPfW2QFvhmL7eUgAAXBw"]
[Sat Aug 29 05:07:16.177659 2026] [security2:error] [pid 1018003:tid 1018190] [client 34.81.157.26:40422] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/@fs/.env"] [unique_id "apK9ZDAh5Y1i2tUxg4EQfgAABd8"]
[Sat Aug 29 05:07:16.178669 2026] [security2:error] [pid 1018003:tid 1018152] [client 34.81.157.26:40462] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/@fs/app/.env"] [unique_id "apK9ZDAh5Y1i2tUxg4EQfwAABbk"]
[Sat Aug 29 05:07:16.178872 2026] [security2:error] [pid 1018003:tid 1018256] [client 34.81.157.26:40490] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ"] [unique_id "apK9ZDAh5Y1i2tUxg4EQgQAABiA"]
[Sat Aug 29 05:07:16.178912 2026] [security2:error] [pid 1018003:tid 1018183] [client 34.81.157.26:40480] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK9ZDAh5Y1i2tUxg4EQgAAABdg"]
[Sat Aug 29 05:07:16.182293 2026] [security2:error] [pid 1028675:tid 1028913] [client 34.81.157.26:40512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/.env"] [unique_id "apK9ZNdHPfW2QFvhmL7eVQAAAGc"]
[Sat Aug 29 05:07:16.182467 2026] [security2:error] [pid 1018003:tid 1018179] [client 34.81.157.26:40498] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/@fs/..%2f..%2f..%2f..%2f..%2fapp/.env"] [unique_id "apK9ZDAh5Y1i2tUxg4EQhQAABdQ"]
[Sat Aug 29 05:07:16.182488 2026] [core:error] [pid 1018003:tid 1018177] [client 34.81.157.26:40518] AH10244: invalid URI path (/@fs/../../.env?raw??)
[Sat Aug 29 05:07:16.182738 2026] [security2:error] [pid 1028675:tid 1028706] [remote 93.123.109.228:51634] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.ffcbranson.com"] [uri "/wp-config.php.new"] [unique_id "apK9ZNdHPfW2QFvhmL7eVwAAXBk"]
[Sat Aug 29 05:07:16.183232 2026] [security2:error] [pid 1028675:tid 1028850] [client 68.155.159.216:65144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/NewFile.php/"] [unique_id "apK9ZNdHPfW2QFvhmL7eWQAAACg"]
[Sat Aug 29 05:07:16.186402 2026] [security2:error] [pid 1018003:tid 1018195] [client 34.81.157.26:40486] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/@fs/..%2f..%2f..%2f..%2f..%2froot/.env"] [unique_id "apK9ZDAh5Y1i2tUxg4EQigAABeQ"]
[Sat Aug 29 05:07:16.186976 2026] [security2:error] [pid 1018003:tid 1018216] [client 34.81.157.26:40450] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/@fs/src/.env"] [unique_id "apK9ZDAh5Y1i2tUxg4EQjAAABfk"]
[Sat Aug 29 05:07:16.187885 2026] [security2:error] [pid 1028675:tid 1028891] [client 20.104.104.62:10565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/ztv.php"] [unique_id "apK9ZNdHPfW2QFvhmL7eXwAAAFE"]
[Sat Aug 29 05:07:16.190017 2026] [security2:error] [pid 1018003:tid 1018252] [client 34.81.157.26:40588] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/@fs/root/.aws/credentials.backup"] [unique_id "apK9ZDAh5Y1i2tUxg4EQkAAABhw"]
[Sat Aug 29 05:07:16.192976 2026] [security2:error] [pid 1028675:tid 1028820] [client 34.81.157.26:40614] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/@fs/root/.aws/credentials.bak"] [unique_id "apK9ZNdHPfW2QFvhmL7eYwAAAAo"]
[Sat Aug 29 05:07:16.194843 2026] [security2:error] [pid 1018003:tid 1018277] [client 34.81.157.26:40650] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/@fs/home/ubuntu/.aws/config"] [unique_id "apK9ZDAh5Y1i2tUxg4EQmAAABjU"]
[Sat Aug 29 05:07:16.199188 2026] [core:error] [pid 1028675:tid 1028843] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.199204 2026] [core:error] [pid 1028675:tid 1028843] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.208869 2026] [core:error] [pid 1028675:tid 1028928] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.208883 2026] [core:error] [pid 1028675:tid 1028928] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.210957 2026] [security2:error] [pid 1028675:tid 1028883] [client 158.158.54.35:22003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-admin/js/index.php"] [unique_id "apK9ZNdHPfW2QFvhmL7edwAAAEk"]
[Sat Aug 29 05:07:16.213878 2026] [core:error] [pid 1028675:tid 1028836] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.213894 2026] [core:error] [pid 1028675:tid 1028836] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.215559 2026] [core:error] [pid 1018003:tid 1018159] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.215573 2026] [core:error] [pid 1018003:tid 1018159] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.216648 2026] [core:error] [pid 1028675:tid 1028855] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.216665 2026] [core:error] [pid 1028675:tid 1028855] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.216685 2026] [core:error] [pid 1028675:tid 1028882] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.216691 2026] [core:error] [pid 1028675:tid 1028882] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.216967 2026] [core:error] [pid 1028675:tid 1028833] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.216979 2026] [core:error] [pid 1028675:tid 1028833] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.218112 2026] [core:error] [pid 1028675:tid 1028916] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.218125 2026] [core:error] [pid 1028675:tid 1028916] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.218495 2026] [security2:error] [pid 1028675:tid 1028710] [remote 93.123.109.228:51634] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.ffcbranson.com"] [uri "/wp-config.php.old"] [unique_id "apK9ZNdHPfW2QFvhmL7efQAAFR0"]
[Sat Aug 29 05:07:16.221883 2026] [core:error] [pid 1028675:tid 1028857] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.221936 2026] [core:error] [pid 1028675:tid 1028867] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.222095 2026] [core:error] [pid 1028675:tid 1028857] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.222110 2026] [core:error] [pid 1028675:tid 1028867] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.222826 2026] [core:error] [pid 1028675:tid 1028925] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.222842 2026] [core:error] [pid 1028675:tid 1028925] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.223339 2026] [core:error] [pid 1018003:tid 1018213] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.223349 2026] [core:error] [pid 1018003:tid 1018213] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.223617 2026] [core:error] [pid 1028675:tid 1028832] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.223629 2026] [core:error] [pid 1028675:tid 1028832] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.223835 2026] [core:error] [pid 1028675:tid 1028877] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.223843 2026] [core:error] [pid 1028675:tid 1028877] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.223941 2026] [security2:error] [pid 1028675:tid 1028877] [client 34.81.157.26:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/index.php"] [unique_id "apK9ZNdHPfW2QFvhmL7egQAAAEM"]
[Sat Aug 29 05:07:16.226507 2026] [security2:error] [pid 1028675:tid 1028888] [client 34.81.157.26:40634] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/@fs/home/node/.aws/credentials"] [unique_id "apK9ZNdHPfW2QFvhmL7eYgAAAE4"]
[Sat Aug 29 05:07:16.227044 2026] [core:error] [pid 1018003:tid 1018234] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.227062 2026] [core:error] [pid 1018003:tid 1018234] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.227278 2026] [core:error] [pid 1028675:tid 1028815] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.227280 2026] [core:error] [pid 1028675:tid 1028908] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.227292 2026] [core:error] [pid 1028675:tid 1028815] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.227297 2026] [core:error] [pid 1028675:tid 1028908] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.227786 2026] [core:error] [pid 1028675:tid 1028881] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.227801 2026] [core:error] [pid 1028675:tid 1028881] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.228276 2026] [core:error] [pid 1028675:tid 1028884] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.228287 2026] [core:error] [pid 1028675:tid 1028884] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.230171 2026] [core:error] [pid 1028675:tid 1028811] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.230183 2026] [core:error] [pid 1028675:tid 1028811] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.233495 2026] [core:error] [pid 1028675:tid 1028931] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.233508 2026] [core:error] [pid 1028675:tid 1028931] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.281797 2026] [security2:error] [pid 1028675:tid 1028850] [client 20.48.160.90:51690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/yj.php"] [unique_id "apK9ZNdHPfW2QFvhmL7ekwAAACg"]
[Sat Aug 29 05:07:16.290202 2026] [security2:error] [pid 1018003:tid 1018172] [client 68.155.159.216:30716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK9ZDAh5Y1i2tUxg4EQoAAABc0"]
[Sat Aug 29 05:07:16.304964 2026] [core:error] [pid 1028675:tid 1028845] [client 158.23.184.117:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.304982 2026] [core:error] [pid 1028675:tid 1028845] [client 158.23.184.117:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:16.326330 2026] [security2:error] [pid 1018003:tid 1018163] [client 20.48.250.41:62474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/gdn.php"] [unique_id "apK9ZDAh5Y1i2tUxg4EQoQAABcQ"]
[Sat Aug 29 05:07:16.328215 2026] [security2:error] [pid 1028675:tid 1028814] [client 20.196.209.81:15184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/Njima.php"] [unique_id "apK9ZNdHPfW2QFvhmL7elwAAAAQ"]
[Sat Aug 29 05:07:16.330100 2026] [security2:error] [pid 1028675:tid 1028883] [client 168.107.94.195:54418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9ZNdHPfW2QFvhmL7emAAAAEk"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:16.338475 2026] [security2:error] [pid 1028675:tid 1028848] [client 20.104.104.62:10668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/kure.php"] [unique_id "apK9ZNdHPfW2QFvhmL7emQAAACY"]
[Sat Aug 29 05:07:16.338860 2026] [security2:error] [pid 1028675:tid 1028825] [client 68.155.159.216:33783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK9ZNdHPfW2QFvhmL7emwAAAA8"]
[Sat Aug 29 05:07:16.352902 2026] [security2:error] [pid 1028675:tid 1028833] [client 158.23.147.79:25521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-includes/plugins.php"] [unique_id "apK9ZNdHPfW2QFvhmL7enwAAABc"]
[Sat Aug 29 05:07:16.380413 2026] [security2:error] [pid 1028675:tid 1028926] [client 20.197.61.180:7737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/ds.php"] [unique_id "apK9ZNdHPfW2QFvhmL7eoQAAAHQ"]
[Sat Aug 29 05:07:16.380413 2026] [security2:error] [pid 1018003:tid 1018166] [client 158.23.147.79:17476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-content/cong.php"] [unique_id "apK9ZDAh5Y1i2tUxg4EQpAAABcc"]
[Sat Aug 29 05:07:16.396055 2026] [security2:error] [pid 1028675:tid 1028924] [client 158.23.147.79:49833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/ws.php"] [unique_id "apK9ZNdHPfW2QFvhmL7epAAAAHI"]
[Sat Aug 29 05:07:16.422314 2026] [security2:error] [pid 1028675:tid 1028910] [client 20.48.160.90:51228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/zi.php"] [unique_id "apK9ZNdHPfW2QFvhmL7eqAAAAGQ"]
[Sat Aug 29 05:07:16.430617 2026] [security2:error] [pid 1028675:tid 1028863] [client 20.104.68.135:3677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lisakayguitar.com"] [uri "/wp-links-opml.php"] [unique_id "apK9ZNdHPfW2QFvhmL7eqQAAADU"]
[Sat Aug 29 05:07:16.432785 2026] [security2:error] [pid 1018003:tid 1018221] [client 93.123.109.228:44822] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK9ZDAh5Y1i2tUxg4EQpgAABf4"]
[Sat Aug 29 05:07:16.469478 2026] [security2:error] [pid 1028675:tid 1028830] [client 20.48.250.41:62505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/f2.php"] [unique_id "apK9ZNdHPfW2QFvhmL7eqwAAABQ"]
[Sat Aug 29 05:07:16.471353 2026] [security2:error] [pid 1028675:tid 1028875] [client 158.158.54.35:20347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/lock360.php"] [unique_id "apK9ZNdHPfW2QFvhmL7erAAAAEE"]
[Sat Aug 29 05:07:16.471803 2026] [security2:error] [pid 1018003:tid 1018203] [client 20.104.104.62:44591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/cafe.php"] [unique_id "apK9ZDAh5Y1i2tUxg4EQqAAABew"]
[Sat Aug 29 05:07:16.472656 2026] [security2:error] [pid 1028675:tid 1028819] [client 40.83.93.50:7517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/class_api.php"] [unique_id "apK9ZNdHPfW2QFvhmL7erQAAAAk"]
[Sat Aug 29 05:07:16.479191 2026] [security2:error] [pid 1028675:tid 1028930] [client 93.123.109.228:44884] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK9ZNdHPfW2QFvhmL7esAAAAHg"]
[Sat Aug 29 05:07:16.481191 2026] [security2:error] [pid 1018003:tid 1018192] [client 68.155.159.216:12266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK9ZDAh5Y1i2tUxg4EQqQAABeE"]
[Sat Aug 29 05:07:16.491958 2026] [security2:error] [pid 1018003:tid 1018164] [client 4.205.62.107:56059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/hiquido.com/index.php"] [unique_id "apK9ZDAh5Y1i2tUxg4EQqwAABcU"]
[Sat Aug 29 05:07:16.492893 2026] [security2:error] [pid 1028675:tid 1028851] [client 20.104.104.62:52061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/EM.php"] [unique_id "apK9ZNdHPfW2QFvhmL7etQAAACk"]
[Sat Aug 29 05:07:16.512344 2026] [security2:error] [pid 1018003:tid 1018183] [client 68.155.159.216:52750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/goat.php"] [unique_id "apK9ZDAh5Y1i2tUxg4EQrAAABdg"]
[Sat Aug 29 05:07:16.563982 2026] [security2:error] [pid 1028675:tid 1028920] [client 158.23.147.79:48162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-admin/images/index.php"] [unique_id "apK9ZNdHPfW2QFvhmL7euwAAAG4"]
[Sat Aug 29 05:07:16.565975 2026] [security2:error] [pid 1028675:tid 1028903] [client 93.123.109.228:44944] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(\\\\/\\\\*\\\\!? ?(?:select|grant|delete|insert|drop|alter|replace|truncate|update|create|rename|describe|union|concat|group_concat))" at REQUEST_FILENAME. [file "/opt/mod_security/hg_rules.conf"] [line "1019"] [id "9000042"] [rev "2.2.2"] [msg "SQL Comment Sequence Detected."] [data "/*update"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/*update.cgi*"] [unique_id "apK9ZNdHPfW2QFvhmL7evAAAAF0"]
[Sat Aug 29 05:07:16.569998 2026] [security2:error] [pid 1028675:tid 1028927] [client 20.48.160.90:51635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/ue.php"] [unique_id "apK9ZNdHPfW2QFvhmL7evQAAAHU"]
[Sat Aug 29 05:07:16.591353 2026] [security2:error] [pid 1028675:tid 1028889] [client 4.205.62.107:8977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/mamzi.php"] [unique_id "apK9ZNdHPfW2QFvhmL7evwAAAE8"]
[Sat Aug 29 05:07:16.627424 2026] [security2:error] [pid 1028675:tid 1028853] [client 20.48.250.41:62485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/grsiuk.php"] [unique_id "apK9ZNdHPfW2QFvhmL7exAAAACs"]
[Sat Aug 29 05:07:16.627664 2026] [security2:error] [pid 1028675:tid 1028914] [client 20.104.68.135:11674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lisakayguitar.com"] [uri "/wp-signup.php"] [unique_id "apK9ZNdHPfW2QFvhmL7exQAAAGg"]
[Sat Aug 29 05:07:16.629124 2026] [security2:error] [pid 1018003:tid 1018275] [client 20.104.104.62:10492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/eval.php"] [unique_id "apK9ZDAh5Y1i2tUxg4EQrgAABjM"]
[Sat Aug 29 05:07:16.630873 2026] [security2:error] [pid 1018003:tid 1018271] [client 93.123.109.228:44950] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/.env"] [unique_id "apK9ZDAh5Y1i2tUxg4EQrwAABi8"]
[Sat Aug 29 05:07:16.633384 2026] [security2:error] [pid 1028675:tid 1028830] [client 20.203.141.11:23121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-trackback.php"] [unique_id "apK9ZNdHPfW2QFvhmL7exwAAABQ"]
[Sat Aug 29 05:07:16.647305 2026] [security2:error] [pid 1018003:tid 1018240] [client 20.104.104.62:42632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/ca4.php"] [unique_id "apK9ZDAh5Y1i2tUxg4EQsAAABhA"]
[Sat Aug 29 05:07:16.648402 2026] [security2:error] [pid 1018003:tid 1018101] [remote 136.108.15.119:30694] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "tonewarpstudio-com-br.tonewarp.com"] [uri "/.env"] [unique_id "apK9ZDAh5Y1i2tUxg4EQsQAF_1A"]
[Sat Aug 29 05:07:16.650024 2026] [security2:error] [pid 1028675:tid 1028919] [client 40.83.93.50:13694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-content/config.php"] [unique_id "apK9ZNdHPfW2QFvhmL7eygAAAG0"]
[Sat Aug 29 05:07:16.650461 2026] [security2:error] [pid 1018003:tid 1018200] [client 93.123.109.228:44904] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/laravel/app/.env"] [unique_id "apK9ZDAh5Y1i2tUxg4EQsgAABek"]
[Sat Aug 29 05:07:16.657097 2026] [security2:error] [pid 1028675:tid 1028897] [client 192.145.125.70:43644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.125.145.192.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "zbv.tvp.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "apK9ZNdHPfW2QFvhmL7eywAAAFc"]
[Sat Aug 29 05:07:16.658884 2026] [security2:error] [pid 1028675:tid 1028902] [client 61.9.8.223:4029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK9ZNdHPfW2QFvhmL7eyQAAAFw"]
[Sat Aug 29 05:07:16.658977 2026] [security2:error] [pid 1028675:tid 1028902] [client 61.9.8.223:4029] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK9ZNdHPfW2QFvhmL7eyQAAAFw"]
[Sat Aug 29 05:07:16.659622 2026] [security2:error] [pid 1028675:tid 1028891] [client 93.123.109.228:44874] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK9ZNdHPfW2QFvhmL7ezAAAAFE"]
[Sat Aug 29 05:07:16.668657 2026] [security2:error] [pid 1028675:tid 1028895] [client 20.104.104.62:20627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-blog.php"] [unique_id "apK9ZNdHPfW2QFvhmL7ezQAAAFU"]
[Sat Aug 29 05:07:16.676204 2026] [security2:error] [pid 1018003:tid 1018170] [client 158.23.147.79:26610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK9ZDAh5Y1i2tUxg4EQswAABcs"]
[Sat Aug 29 05:07:16.691934 2026] [security2:error] [pid 1028675:tid 1028860] [client 185.104.184.230:55252] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.bjx.okj.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "apK9ZNdHPfW2QFvhmL7e0AAAADI"]
[Sat Aug 29 05:07:16.695084 2026] [security2:error] [pid 1028675:tid 1028849] [client 158.158.54.35:21953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/core.php"] [unique_id "apK9ZNdHPfW2QFvhmL7e0gAAACc"]
[Sat Aug 29 05:07:16.709855 2026] [security2:error] [pid 1028675:tid 1028825] [client 168.107.94.195:54861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9ZNdHPfW2QFvhmL7e1QAAAA8"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:16.716031 2026] [security2:error] [pid 1028675:tid 1028836] [client 93.123.109.228:44944] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/.env.backup"] [unique_id "apK9ZNdHPfW2QFvhmL7e1wAAABo"]
[Sat Aug 29 05:07:16.718033 2026] [security2:error] [pid 1028675:tid 1028882] [client 93.123.109.228:44930] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/.env.bak"] [unique_id "apK9ZNdHPfW2QFvhmL7e2AAAAEg"]
[Sat Aug 29 05:07:16.722849 2026] [security2:error] [pid 1028675:tid 1028855] [client 20.48.160.90:51268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/nv.php"] [unique_id "apK9ZNdHPfW2QFvhmL7e2QAAAC0"]
[Sat Aug 29 05:07:16.725451 2026] [security2:error] [pid 1018003:tid 1018175] [client 20.196.209.81:2010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/configs.php"] [unique_id "apK9ZDAh5Y1i2tUxg4EQtQAABdA"]
[Sat Aug 29 05:07:16.727576 2026] [security2:error] [pid 1018003:tid 1018244] [client 68.155.159.216:51896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/ans.php"] [unique_id "apK9ZDAh5Y1i2tUxg4EQtgAABhQ"]
[Sat Aug 29 05:07:16.751712 2026] [security2:error] [pid 1018003:tid 1018187] [client 158.23.147.79:30568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-admin/network/index.php"] [unique_id "apK9ZDAh5Y1i2tUxg4EQuQAABdw"]
[Sat Aug 29 05:07:16.757570 2026] [security2:error] [pid 1028675:tid 1028847] [client 20.104.104.62:10652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/sao.php"] [unique_id "apK9ZNdHPfW2QFvhmL7e3wAAACU"]
[Sat Aug 29 05:07:16.767749 2026] [security2:error] [pid 1028675:tid 1028892] [client 20.151.200.44:47408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/private.php"] [unique_id "apK9ZNdHPfW2QFvhmL7e4AAAAFI"]
[Sat Aug 29 05:07:16.816295 2026] [security2:error] [pid 1028675:tid 1028924] [client 20.104.104.62:41793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/x0x.php"] [unique_id "apK9ZNdHPfW2QFvhmL7e5gAAAHI"]
[Sat Aug 29 05:07:16.819179 2026] [security2:error] [pid 1028675:tid 1028856] [client 20.48.250.41:62571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/wp-scr1pts.php"] [unique_id "apK9ZNdHPfW2QFvhmL7e6AAAAC4"]
[Sat Aug 29 05:07:16.822415 2026] [security2:error] [pid 1018003:tid 1018185] [client 146.70.194.254:44246] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "modelbasenjis.com"] [uri "/cgi-sys/suspendedpage.cgi/blog/wp-includes/wlwmanifest.xml"] [unique_id "apK9ZDAh5Y1i2tUxg4EQvgAABdo"]
[Sat Aug 29 05:07:16.865789 2026] [security2:error] [pid 1018003:tid 1018261] [client 20.104.68.135:11695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lisakayguitar.com"] [uri "/xmlrpc.php"] [unique_id "apK9ZDAh5Y1i2tUxg4EQvAAABiU"]
[Sat Aug 29 05:07:16.866455 2026] [security2:error] [pid 1018003:tid 1018159] [client 4.205.62.107:22282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/mga.php"] [unique_id "apK9ZDAh5Y1i2tUxg4EQvwAABcA"]
[Sat Aug 29 05:07:16.867929 2026] [security2:error] [pid 1018003:tid 1018177] [client 20.48.160.90:49483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/jw.php"] [unique_id "apK9ZDAh5Y1i2tUxg4EQwAAABdI"]
[Sat Aug 29 05:07:16.870210 2026] [security2:error] [pid 1028675:tid 1028910] [client 93.123.109.228:44930] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/.env.old"] [unique_id "apK9ZNdHPfW2QFvhmL7e7AAAAGQ"]
[Sat Aug 29 05:07:16.871919 2026] [security2:error] [pid 1028675:tid 1028863] [client 93.123.109.228:44944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/.env.php"] [unique_id "apK9ZNdHPfW2QFvhmL7e7QAAADU"]
[Sat Aug 29 05:07:16.888467 2026] [security2:error] [pid 1028675:tid 1028835] [client 20.104.104.62:10878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/uuu.php"] [unique_id "apK9ZNdHPfW2QFvhmL7e7wAAABk"]
[Sat Aug 29 05:07:16.926407 2026] [security2:error] [pid 1018003:tid 1018265] [client 20.104.49.130:57642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/static.php"] [unique_id "apK9ZDAh5Y1i2tUxg4EQwgAABik"]
[Sat Aug 29 05:07:16.927060 2026] [security2:error] [pid 1018003:tid 1018266] [client 158.158.54.35:14921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-conflg.php"] [unique_id "apK9ZDAh5Y1i2tUxg4EQwwAABio"]
[Sat Aug 29 05:07:16.959645 2026] [security2:error] [pid 1028675:tid 1028866] [client 20.48.250.41:60690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/num.php"] [unique_id "apK9ZNdHPfW2QFvhmL7e9wAAADg"]
[Sat Aug 29 05:07:16.960806 2026] [security2:error] [pid 1028675:tid 1028828] [client 20.104.104.62:60424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.beraluzgroup.com"] [uri "/fesa.php"] [unique_id "apK9ZNdHPfW2QFvhmL7e-QAAABI"]
[Sat Aug 29 05:07:16.967414 2026] [security2:error] [pid 1018003:tid 1018213] [client 93.123.109.228:44822] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/.env.swp"] [unique_id "apK9ZDAh5Y1i2tUxg4EQxAAABfY"]
[Sat Aug 29 05:07:16.976201 2026] [security2:error] [pid 1018003:tid 1018270] [client 93.123.109.228:44904] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/.env~"] [unique_id "apK9ZDAh5Y1i2tUxg4EQxwAABi4"]
[Sat Aug 29 05:07:16.998690 2026] [security2:error] [pid 1018003:tid 1018234] [client 185.104.184.230:55266] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.bjx.okj.mybluehost.me"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "apK9ZDAh5Y1i2tUxg4EQygAABgo"]
[Sat Aug 29 05:07:17.002985 2026] [security2:error] [pid 1018003:tid 1018271] [client 20.104.104.62:64717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-utchershill.php"] [unique_id "apK9ZTAh5Y1i2tUxg4EQywAABi8"]
[Sat Aug 29 05:07:17.004197 2026] [core:error] [pid 1028675:tid 1028870] [client 5.255.231.32:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:17.004213 2026] [core:error] [pid 1028675:tid 1028870] [client 5.255.231.32:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:17.021007 2026] [security2:error] [pid 1028675:tid 1028936] [client 20.48.160.90:51618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/or.php"] [unique_id "apK9ZddHPfW2QFvhmL7fAgAAAH4"]
[Sat Aug 29 05:07:17.024828 2026] [security2:error] [pid 1028675:tid 1028903] [client 20.104.104.62:10849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/private.php"] [unique_id "apK9ZddHPfW2QFvhmL7fAwAAAF0"]
[Sat Aug 29 05:07:17.060817 2026] [security2:error] [pid 1018003:tid 1018224] [client 68.155.159.216:33767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-login.php"] [unique_id "apK9ZTAh5Y1i2tUxg4EQzAAABgE"]
[Sat Aug 29 05:07:17.062398 2026] [security2:error] [pid 1028675:tid 1028840] [client 20.104.68.135:11711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lisakayguitar.com"] [uri "/yas.php"] [unique_id "apK9ZddHPfW2QFvhmL7fBgAAAB4"]
[Sat Aug 29 05:07:17.062464 2026] [security2:error] [pid 1018003:tid 1018182] [client 40.83.93.50:7455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/aksinet.php"] [unique_id "apK9ZTAh5Y1i2tUxg4EQzQAABdc"]
[Sat Aug 29 05:07:17.071990 2026] [security2:error] [pid 1018003:tid 1018222] [client 158.23.147.79:32664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-admin.php"] [unique_id "apK9ZTAh5Y1i2tUxg4EQzgAABf8"]
[Sat Aug 29 05:07:17.086559 2026] [security2:error] [pid 1018003:tid 1018230] [client 68.155.159.216:64499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK9ZTAh5Y1i2tUxg4EQzwAABgY"]
[Sat Aug 29 05:07:17.089686 2026] [security2:error] [pid 1028675:tid 1028899] [client 168.107.94.195:55353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9ZddHPfW2QFvhmL7fDQAAAFk"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:17.111146 2026] [security2:error] [pid 1028675:tid 1028919] [client 20.48.250.41:62532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/a4.php"] [unique_id "apK9ZddHPfW2QFvhmL7fEQAAAG0"]
[Sat Aug 29 05:07:17.117225 2026] [security2:error] [pid 1028675:tid 1028888] [client 40.83.93.50:20809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-content/cong.php"] [unique_id "apK9ZddHPfW2QFvhmL7fEwAAAE4"]
[Sat Aug 29 05:07:17.130548 2026] [security2:error] [pid 1028675:tid 1028917] [client 93.123.109.228:44830] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.old"] [unique_id "apK9ZddHPfW2QFvhmL7fFQAAAGs"]
[Sat Aug 29 05:07:17.137974 2026] [security2:error] [pid 1018003:tid 1018273] [client 93.123.109.228:44822] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config~"] [unique_id "apK9ZTAh5Y1i2tUxg4EQ0QAABjE"]
[Sat Aug 29 05:07:17.150198 2026] [security2:error] [pid 1018003:tid 1018275] [client 158.158.54.35:24189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/admin/function.php"] [unique_id "apK9ZTAh5Y1i2tUxg4EQ0gAABjM"]
[Sat Aug 29 05:07:17.162316 2026] [security2:error] [pid 1018003:tid 1018244] [client 4.205.62.107:26659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/f35.php"] [unique_id "apK9ZTAh5Y1i2tUxg4EQ1AAABhQ"]
[Sat Aug 29 05:07:17.168382 2026] [security2:error] [pid 1028675:tid 1028883] [client 93.123.109.228:44806] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.bak"] [unique_id "apK9ZddHPfW2QFvhmL7fGwAAAEk"]
[Sat Aug 29 05:07:17.176368 2026] [security2:error] [pid 1018003:tid 1018212] [client 20.48.160.90:51259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/ile56.php"] [unique_id "apK9ZTAh5Y1i2tUxg4EQ1QAABfU"]
[Sat Aug 29 05:07:17.188342 2026] [security2:error] [pid 1018003:tid 1018187] [client 158.23.147.79:35211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/install.php"] [unique_id "apK9ZTAh5Y1i2tUxg4EQ1gAABdw"]
[Sat Aug 29 05:07:17.202351 2026] [security2:error] [pid 1028675:tid 1028820] [client 20.104.104.62:10846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/lfi.php"] [unique_id "apK9ZddHPfW2QFvhmL7fHwAAAAo"]
[Sat Aug 29 05:07:17.213677 2026] [security2:error] [pid 1028675:tid 1028882] [client 4.205.62.107:22448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/bb.php"] [unique_id "apK9ZddHPfW2QFvhmL7fIAAAAEg"]
[Sat Aug 29 05:07:17.216237 2026] [security2:error] [pid 1018003:tid 1018240] [client 20.196.209.81:11266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/disagraeed.php"] [unique_id "apK9ZTAh5Y1i2tUxg4EQ2AAABhA"]
[Sat Aug 29 05:07:17.221730 2026] [security2:error] [pid 1018003:tid 1018256] [client 4.205.62.107:58370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/app_dev.php"] [unique_id "apK9ZTAh5Y1i2tUxg4EQ2QAABiA"]
[Sat Aug 29 05:07:17.227300 2026] [security2:error] [pid 1018003:tid 1018161] [client 68.155.159.216:49212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/atomlib.php"] [unique_id "apK9ZTAh5Y1i2tUxg4EQ2gAABcI"]
[Sat Aug 29 05:07:17.248909 2026] [security2:error] [pid 1028675:tid 1028813] [client 158.23.147.79:61608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/goat.php"] [unique_id "apK9ZddHPfW2QFvhmL7fJgAAAAM"]
[Sat Aug 29 05:07:17.252067 2026] [security2:error] [pid 1018003:tid 1018252] [client 20.104.104.62:20714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-log.php"] [unique_id "apK9ZTAh5Y1i2tUxg4EQ2wAABhw"]
[Sat Aug 29 05:07:17.265946 2026] [autoindex:error] [pid 1018003:tid 1018186] [client 192.145.125.70:43652] AH01276: Cannot serve directory /home3/zbvtvpmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:07:17.267985 2026] [security2:error] [pid 1018003:tid 1018179] [client 20.48.250.41:59381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/tfm.php"] [unique_id "apK9ZTAh5Y1i2tUxg4EQ3QAABdQ"]
[Sat Aug 29 05:07:17.277082 2026] [security2:error] [pid 1028675:tid 1028907] [client 20.104.49.130:51499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/worksec.php"] [unique_id "apK9ZddHPfW2QFvhmL7fKwAAAGE"]
[Sat Aug 29 05:07:17.293470 2026] [security2:error] [pid 1018003:tid 1018219] [client 111.235.68.106:28209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK9ZTAh5Y1i2tUxg4EQ3wAABfw"]
[Sat Aug 29 05:07:17.293613 2026] [security2:error] [pid 1018003:tid 1018219] [client 111.235.68.106:28209] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK9ZTAh5Y1i2tUxg4EQ3wAABfw"]
[Sat Aug 29 05:07:17.299115 2026] [security2:error] [pid 1028675:tid 1028924] [client 185.104.184.230:55282] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.bjx.okj.mybluehost.me"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "apK9ZddHPfW2QFvhmL7fLwAAAHI"]
[Sat Aug 29 05:07:17.307919 2026] [security2:error] [pid 1028675:tid 1028832] [client 20.203.141.11:5769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/222.php"] [unique_id "apK9ZddHPfW2QFvhmL7fMQAAABY"]
[Sat Aug 29 05:07:17.335266 2026] [security2:error] [pid 1018003:tid 1018169] [client 20.197.61.180:8935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/GOD.php"] [unique_id "apK9ZTAh5Y1i2tUxg4EQ4gAABco"]
[Sat Aug 29 05:07:17.338653 2026] [security2:error] [pid 1028675:tid 1028887] [client 158.23.184.117:4275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lumbeesolar.com"] [uri "/update/da222.php"] [unique_id "apK9ZddHPfW2QFvhmL7fNQAAAE0"]
[Sat Aug 29 05:07:17.347781 2026] [security2:error] [pid 1028675:tid 1028910] [client 20.104.104.62:10853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/quoys.php"] [unique_id "apK9ZddHPfW2QFvhmL7fNwAAAGQ"]
[Sat Aug 29 05:07:17.373297 2026] [security2:error] [pid 1018003:tid 1018174] [client 158.158.54.35:34290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/123.php"] [unique_id "apK9ZTAh5Y1i2tUxg4EQ4wAABc8"]
[Sat Aug 29 05:07:17.382249 2026] [security2:error] [pid 1018003:tid 1018164] [client 20.48.160.90:51227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/emmh.php"] [unique_id "apK9ZTAh5Y1i2tUxg4EQ5QAABcU"]
[Sat Aug 29 05:07:17.396155 2026] [security2:error] [pid 1028675:tid 1028933] [client 171.61.160.196:13018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.160.61.171.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK9ZddHPfW2QFvhmL7fOwAAAHs"]
[Sat Aug 29 05:07:17.396283 2026] [security2:error] [pid 1028675:tid 1028933] [client 171.61.160.196:13018] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK9ZddHPfW2QFvhmL7fOwAAAHs"]
[Sat Aug 29 05:07:17.412178 2026] [security2:error] [pid 1018003:tid 1018238] [client 192.145.125.70:43652] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "zbv.tvp.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "apK9ZTAh5Y1i2tUxg4EQ5wAABg4"]
[Sat Aug 29 05:07:17.435832 2026] [core:error] [pid 1018003:tid 1018189] [client 20.104.104.62:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:17.435849 2026] [core:error] [pid 1018003:tid 1018189] [client 20.104.104.62:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:17.449673 2026] [security2:error] [pid 1018003:tid 1018196] [client 68.155.159.216:33644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/file.php"] [unique_id "apK9ZTAh5Y1i2tUxg4EQ6wAABeU"]
[Sat Aug 29 05:07:17.456006 2026] [security2:error] [pid 1028675:tid 1028875] [client 20.48.250.41:60776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/Geforce.php"] [unique_id "apK9ZddHPfW2QFvhmL7fPwAAAEE"]
[Sat Aug 29 05:07:17.463559 2026] [security2:error] [pid 1018003:tid 1018234] [client 158.23.147.79:25356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK9ZTAh5Y1i2tUxg4EQ7AAABgo"]
[Sat Aug 29 05:07:17.474897 2026] [security2:error] [pid 1028675:tid 1028851] [client 168.107.94.195:55862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9ZddHPfW2QFvhmL7fRQAAACk"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:17.475721 2026] [security2:error] [pid 1028675:tid 1028815] [client 20.151.200.44:46629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/lfi.php"] [unique_id "apK9ZddHPfW2QFvhmL7fRgAAAAU"]
[Sat Aug 29 05:07:17.485161 2026] [security2:error] [pid 1018003:tid 1018183] [client 158.23.184.117:4289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lumbeesolar.com"] [uri "/xmr.php"] [unique_id "apK9ZTAh5Y1i2tUxg4EQ7gAABdg"]
[Sat Aug 29 05:07:17.487555 2026] [security2:error] [pid 1028675:tid 1028915] [client 158.23.147.79:17425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK9ZddHPfW2QFvhmL7fRwAAAGk"]
[Sat Aug 29 05:07:17.489041 2026] [security2:error] [pid 1028675:tid 1028842] [client 20.104.104.62:10873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/vbbn.php"] [unique_id "apK9ZddHPfW2QFvhmL7fSAAAACA"]
[Sat Aug 29 05:07:17.540266 2026] [security2:error] [pid 1028675:tid 1028885] [client 158.23.147.79:30616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK9ZddHPfW2QFvhmL7fUQAAAEs"]
[Sat Aug 29 05:07:17.550035 2026] [security2:error] [pid 1028675:tid 1028880] [client 20.48.160.90:51261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/em.php"] [unique_id "apK9ZddHPfW2QFvhmL7fUgAAAEY"]
[Sat Aug 29 05:07:17.556564 2026] [security2:error] [pid 1018003:tid 1018195] [client 40.83.93.50:7949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/alfa-rex1.php"] [unique_id "apK9ZTAh5Y1i2tUxg4EQ8AAABeQ"]
[Sat Aug 29 05:07:17.588316 2026] [security2:error] [pid 1028675:tid 1028830] [client 68.155.159.216:12267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK9ZddHPfW2QFvhmL7fVAAAABQ"]
[Sat Aug 29 05:07:17.589993 2026] [security2:error] [pid 1028675:tid 1028837] [client 185.104.184.230:55294] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.bjx.okj.mybluehost.me"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "apK9ZddHPfW2QFvhmL7fVQAAABs"]
[Sat Aug 29 05:07:17.593630 2026] [security2:error] [pid 1018003:tid 1018184] [client 40.83.93.50:22832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-content/content.php"] [unique_id "apK9ZTAh5Y1i2tUxg4EQ8gAABdk"]
[Sat Aug 29 05:07:17.612114 2026] [security2:error] [pid 1028675:tid 1028822] [client 20.196.209.81:1986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/add_actualites.php"] [unique_id "apK9ZddHPfW2QFvhmL7fVwAAAAw"]
[Sat Aug 29 05:07:17.625899 2026] [security2:error] [pid 1028675:tid 1028902] [client 20.104.104.62:10681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/rfi.php"] [unique_id "apK9ZddHPfW2QFvhmL7fWQAAAFw"]
[Sat Aug 29 05:07:17.633111 2026] [security2:error] [pid 1028675:tid 1028899] [client 158.23.184.117:4269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lumbeesolar.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK9ZddHPfW2QFvhmL7fXAAAAFk"]
[Sat Aug 29 05:07:17.634435 2026] [security2:error] [pid 1028675:tid 1028908] [client 158.158.54.35:23341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/admin/index.php"] [unique_id "apK9ZddHPfW2QFvhmL7fXQAAAGI"]
[Sat Aug 29 05:07:17.636738 2026] [security2:error] [pid 1018003:tid 1018207] [client 68.155.159.216:52776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK9ZTAh5Y1i2tUxg4EQ8wAABfA"]
[Sat Aug 29 05:07:17.642605 2026] [security2:error] [pid 1028675:tid 1028928] [client 4.205.62.107:53133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/ws79.php"] [unique_id "apK9ZddHPfW2QFvhmL7fXwAAAHY"]
[Sat Aug 29 05:07:17.665790 2026] [security2:error] [pid 1028675:tid 1028872] [client 20.48.250.41:58382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/click.php"] [unique_id "apK9ZddHPfW2QFvhmL7fYgAAAD4"]
[Sat Aug 29 05:07:17.686173 2026] [security2:error] [pid 1028675:tid 1028892] [client 20.48.160.90:51303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/dvve.php"] [unique_id "apK9ZddHPfW2QFvhmL7fawAAAFI"]
[Sat Aug 29 05:07:17.694895 2026] [security2:error] [pid 1028675:tid 1028878] [client 158.23.147.79:48251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-includes/index.php"] [unique_id "apK9ZddHPfW2QFvhmL7fbQAAAEQ"]
[Sat Aug 29 05:07:17.728303 2026] [security2:error] [pid 1028675:tid 1028836] [client 103.162.125.59:56288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.125.162.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK9ZddHPfW2QFvhmL7fcgAAABo"]
[Sat Aug 29 05:07:17.728457 2026] [security2:error] [pid 1028675:tid 1028836] [client 103.162.125.59:56288] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK9ZddHPfW2QFvhmL7fcgAAABo"]
[Sat Aug 29 05:07:17.742486 2026] [security2:error] [pid 1018003:tid 1018217] [client 93.123.109.228:44950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/.wp-config.php.swp"] [unique_id "apK9ZTAh5Y1i2tUxg4EQ-AAABfo"]
[Sat Aug 29 05:07:17.761561 2026] [security2:error] [pid 1028675:tid 1028849] [client 68.155.159.216:6138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK9ZddHPfW2QFvhmL7fdQAAACc"]
[Sat Aug 29 05:07:17.762816 2026] [security2:error] [pid 1028675:tid 1028887] [client 20.104.104.62:10861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/tajj.php"] [unique_id "apK9ZddHPfW2QFvhmL7fdgAAAE0"]
[Sat Aug 29 05:07:17.777886 2026] [security2:error] [pid 1028675:tid 1028924] [client 158.23.184.117:4225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lumbeesolar.com"] [uri "/wp-act.php"] [unique_id "apK9ZddHPfW2QFvhmL7feAAAAHI"]
[Sat Aug 29 05:07:17.780560 2026] [security2:error] [pid 1028675:tid 1028858] [client 20.104.49.130:48545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/jp.php"] [unique_id "apK9ZddHPfW2QFvhmL7fegAAADA"]
[Sat Aug 29 05:07:17.786325 2026] [security2:error] [pid 1028675:tid 1028873] [client 20.203.141.11:11258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/x.php"] [unique_id "apK9ZddHPfW2QFvhmL7fewAAAD8"]
[Sat Aug 29 05:07:17.803277 2026] [security2:error] [pid 1018003:tid 1018185] [client 93.123.109.228:44822] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/ADMIN/.env"] [unique_id "apK9ZTAh5Y1i2tUxg4EQ-gAABdo"]
[Sat Aug 29 05:07:17.803303 2026] [security2:error] [pid 1028675:tid 1028933] [client 158.23.147.79:26469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-content/uploads/about.php"] [unique_id "apK9ZddHPfW2QFvhmL7ffwAAAHs"]
[Sat Aug 29 05:07:17.815302 2026] [security2:error] [pid 1018003:tid 1018163] [client 158.158.54.35:16897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/yanz.php"] [unique_id "apK9ZTAh5Y1i2tUxg4EQ_gAABcQ"]
[Sat Aug 29 05:07:17.824221 2026] [security2:error] [pid 1028675:tid 1028867] [client 93.123.109.228:44874] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/API/.env"] [unique_id "apK9ZddHPfW2QFvhmL7fhAAAADk"]
[Sat Aug 29 05:07:17.824274 2026] [security2:error] [pid 1028675:tid 1028860] [client 20.48.160.90:51701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/doo.php"] [unique_id "apK9ZddHPfW2QFvhmL7fhQAAADI"]
[Sat Aug 29 05:07:17.855478 2026] [security2:error] [pid 1028675:tid 1028826] [client 158.23.147.79:30567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/.well-knownold/index.php"] [unique_id "apK9ZddHPfW2QFvhmL7fkAAAABA"]
[Sat Aug 29 05:07:17.858393 2026] [security2:error] [pid 1018003:tid 1018177] [client 168.107.94.195:56341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9ZTAh5Y1i2tUxg4ERAAAABdI"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:17.891530 2026] [security2:error] [pid 1028675:tid 1028858] [client 185.104.184.230:55300] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.bjx.okj.mybluehost.me"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "apK9ZddHPfW2QFvhmL7fpQAAADA"]
[Sat Aug 29 05:07:17.893575 2026] [security2:error] [pid 1018003:tid 1018160] [client 20.104.104.62:44572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/grsiuk.php"] [unique_id "apK9ZTAh5Y1i2tUxg4EREAAABcE"]
[Sat Aug 29 05:07:17.894217 2026] [security2:error] [pid 1028675:tid 1028858] [client 93.123.109.228:45012] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/APP/.env"] [unique_id "apK9ZddHPfW2QFvhmL7fpgAAADA"]
[Sat Aug 29 05:07:17.894605 2026] [security2:error] [pid 1028675:tid 1028857] [client 93.123.109.228:44916] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/Api/.env"] [unique_id "apK9ZddHPfW2QFvhmL7fqAAAAC8"]
[Sat Aug 29 05:07:17.894848 2026] [security2:error] [pid 1028675:tid 1028929] [client 93.123.109.228:44962] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/BACK/.env"] [unique_id "apK9ZddHPfW2QFvhmL7fqQAAAHc"]
[Sat Aug 29 05:07:17.908596 2026] [security2:error] [pid 1028675:tid 1028867] [client 93.123.109.228:44806] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/BACKEND/.env"] [unique_id "apK9ZddHPfW2QFvhmL7fsQAAADk"]
[Sat Aug 29 05:07:17.919008 2026] [security2:error] [pid 1028675:tid 1028828] [client 93.123.109.228:44940] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/BE/.env"] [unique_id "apK9ZddHPfW2QFvhmL7ftgAAABI"]
[Sat Aug 29 05:07:17.924640 2026] [security2:error] [pid 1028675:tid 1028820] [client 158.23.184.117:4303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lumbeesolar.com"] [uri "/fff.php"] [unique_id "apK9ZddHPfW2QFvhmL7ftwAAAAo"]
[Sat Aug 29 05:07:17.925169 2026] [security2:error] [pid 1018003:tid 1018230] [client 158.173.241.137:41129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.241.173.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mikelait.com"] [uri "/suggest.php"] [unique_id "apK9ZTAh5Y1i2tUxg4EREwAABgY"], referer: https://mikelait.com/suggest.php?page=Our+Family+Genealogy+Pages
[Sat Aug 29 05:07:17.947442 2026] [security2:error] [pid 1028675:tid 1028902] [client 93.123.109.228:44946] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/Backend/.env"] [unique_id "apK9ZddHPfW2QFvhmL7fuwAAAFw"]
[Sat Aug 29 05:07:17.952748 2026] [security2:error] [pid 1018003:tid 1018159] [client 93.123.109.228:44822] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/Be/.env"] [unique_id "apK9ZTAh5Y1i2tUxg4ERGAAABcA"]
[Sat Aug 29 05:07:17.960852 2026] [security2:error] [pid 1018003:tid 1018219] [client 4.205.62.107:9198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/admin.php"] [unique_id "apK9ZTAh5Y1i2tUxg4ERGwAABfw"]
[Sat Aug 29 05:07:17.960868 2026] [security2:error] [pid 1018003:tid 1018265] [client 68.155.159.216:51569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/worksec.php"] [unique_id "apK9ZTAh5Y1i2tUxg4ERHAAABik"]
[Sat Aug 29 05:07:17.962775 2026] [security2:error] [pid 1028675:tid 1028850] [client 20.48.160.90:51239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/adminer-4.6.6.php"] [unique_id "apK9ZddHPfW2QFvhmL7fwAAAACg"]
[Sat Aug 29 05:07:18.007780 2026] [security2:error] [pid 1018003:tid 1018195] [client 4.205.62.107:22030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/ccou.php"] [unique_id "apK9ZjAh5Y1i2tUxg4EROgAABeQ"]
[Sat Aug 29 05:07:18.008109 2026] [security2:error] [pid 1028675:tid 1028918] [client 20.196.209.81:15178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/alfanew.php7"] [unique_id "apK9ZtdHPfW2QFvhmL7fzQAAAGw"]
[Sat Aug 29 05:07:18.014177 2026] [security2:error] [pid 1028675:tid 1028901] [client 192.145.125.70:43662] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "zbv.tvp.mybluehost.me"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "apK9ZtdHPfW2QFvhmL7f1AAAAFs"]
[Sat Aug 29 05:07:18.014400 2026] [security2:error] [pid 1018003:tid 1018162] [client 20.48.250.41:59368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/ms.php"] [unique_id "apK9ZjAh5Y1i2tUxg4ERPAAABcM"]
[Sat Aug 29 05:07:18.026216 2026] [security2:error] [pid 1028675:tid 1028930] [client 20.104.104.62:10475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/ahy66.php"] [unique_id "apK9ZtdHPfW2QFvhmL7f1gAAAHg"]
[Sat Aug 29 05:07:18.029049 2026] [security2:error] [pid 1018003:tid 1018266] [client 20.151.200.44:47311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/quoys.php"] [unique_id "apK9ZjAh5Y1i2tUxg4ERPwAABio"]
[Sat Aug 29 05:07:18.063218 2026] [security2:error] [pid 1028675:tid 1028884] [client 20.197.61.180:8934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/ggfi.php"] [unique_id "apK9ZtdHPfW2QFvhmL7f5QAAAEo"]
[Sat Aug 29 05:07:18.070735 2026] [security2:error] [pid 1018003:tid 1018191] [client 158.23.184.117:2578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/wp-content/uploads/my.php"] [unique_id "apK9ZjAh5Y1i2tUxg4ERRQAABeA"]
[Sat Aug 29 05:07:18.082794 2026] [security2:error] [pid 1018003:tid 1018212] [client 40.83.93.50:22818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-content/core.php"] [unique_id "apK9ZjAh5Y1i2tUxg4ERRwAABfU"]
[Sat Aug 29 05:07:18.092301 2026] [security2:error] [pid 1018003:tid 1018277] [client 158.23.184.117:4229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lumbeesolar.com"] [uri "/.tmb/dropdown.php"] [unique_id "apK9ZjAh5Y1i2tUxg4ERSQAABjU"]
[Sat Aug 29 05:07:18.100193 2026] [security2:error] [pid 1028675:tid 1028844] [client 20.48.160.90:51600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/gelap1.php"] [unique_id "apK9ZtdHPfW2QFvhmL7f7wAAACI"]
[Sat Aug 29 05:07:18.108550 2026] [security2:error] [pid 1028675:tid 1028867] [client 158.23.184.117:11942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dubeyko.com"] [uri "/wp.php"] [unique_id "apK9ZtdHPfW2QFvhmL7f8AAAADk"]
[Sat Aug 29 05:07:18.112864 2026] [security2:error] [pid 1018003:tid 1018231] [client 158.158.54.35:24174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/storage/rip.php"] [unique_id "apK9ZjAh5Y1i2tUxg4ERSwAABgc"]
[Sat Aug 29 05:07:18.149052 2026] [security2:error] [pid 1018003:tid 1018163] [client 158.23.184.117:63787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cworthy.net"] [uri "/term.php"] [unique_id "apK9ZjAh5Y1i2tUxg4ERUAAABcQ"]
[Sat Aug 29 05:07:18.149950 2026] [security2:error] [pid 1018003:tid 1018252] [client 40.83.93.50:7472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/headerg.php"] [unique_id "apK9ZjAh5Y1i2tUxg4ERUQAABhw"]
[Sat Aug 29 05:07:18.164410 2026] [security2:error] [pid 1018003:tid 1018161] [client 68.155.159.216:38577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/dropdown.php"] [unique_id "apK9ZjAh5Y1i2tUxg4ERVAAABcI"]
[Sat Aug 29 05:07:18.165244 2026] [security2:error] [pid 1028675:tid 1028872] [client 158.23.184.117:30257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mikelait.managemymood.com"] [uri "/al.php"] [unique_id "apK9ZtdHPfW2QFvhmL7f-wAAAD4"]
[Sat Aug 29 05:07:18.177506 2026] [security2:error] [pid 1028675:tid 1028833] [client 158.23.147.79:32675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK9ZtdHPfW2QFvhmL7f_QAAABc"]
[Sat Aug 29 05:07:18.182535 2026] [security2:error] [pid 1018003:tid 1018266] [client 68.155.159.216:33788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK9ZjAh5Y1i2tUxg4ERVwAABio"]
[Sat Aug 29 05:07:18.198694 2026] [security2:error] [pid 1028675:tid 1028848] [client 68.155.159.216:1993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/dropdown.php"] [unique_id "apK9ZtdHPfW2QFvhmL7gBAAAACY"]
[Sat Aug 29 05:07:18.202592 2026] [security2:error] [pid 1028675:tid 1028913] [client 185.104.184.230:55310] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.bjx.okj.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "apK9ZtdHPfW2QFvhmL7gBwAAAGc"]
[Sat Aug 29 05:07:18.203301 2026] [security2:error] [pid 1018003:tid 1018203] [client 68.155.159.216:51397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/goat1.php"] [unique_id "apK9ZjAh5Y1i2tUxg4ERXAAABew"]
[Sat Aug 29 05:07:18.216853 2026] [security2:error] [pid 1018003:tid 1018256] [client 158.23.184.117:2600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/wp-includes/themes/uploads/config.php"] [unique_id "apK9ZjAh5Y1i2tUxg4ERXgAABiA"]
[Sat Aug 29 05:07:18.235308 2026] [security2:error] [pid 1028675:tid 1028866] [client 20.48.160.90:51680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/rsjlrria.php"] [unique_id "apK9ZtdHPfW2QFvhmL7gEQAAADg"]
[Sat Aug 29 05:07:18.238804 2026] [security2:error] [pid 1028675:tid 1028890] [client 168.107.94.195:56800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9ZtdHPfW2QFvhmL7gEgAAAFA"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:18.246470 2026] [security2:error] [pid 1028675:tid 1028845] [client 20.104.104.62:10860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/gaje.php"] [unique_id "apK9ZtdHPfW2QFvhmL7gFwAAACM"]
[Sat Aug 29 05:07:18.253010 2026] [security2:error] [pid 1018003:tid 1018155] [client 158.23.184.117:12079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dubeyko.com"] [uri "/xmlrpc.php"] [unique_id "apK9ZjAh5Y1i2tUxg4ERYQAABbw"]
[Sat Aug 29 05:07:18.255891 2026] [security2:error] [pid 1028675:tid 1028837] [client 20.203.141.11:11262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/new.php"] [unique_id "apK9ZtdHPfW2QFvhmL7gGwAAABs"]
[Sat Aug 29 05:07:18.269495 2026] [security2:error] [pid 1018003:tid 1018160] [client 158.23.184.117:4244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lumbeesolar.com"] [uri "/robots.php"] [unique_id "apK9ZjAh5Y1i2tUxg4ERYwAABcE"]
[Sat Aug 29 05:07:18.275191 2026] [security2:error] [pid 1018003:tid 1018265] [client 158.158.54.35:20296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/autoload_classmap.php"] [unique_id "apK9ZjAh5Y1i2tUxg4ERZAAABik"]
[Sat Aug 29 05:07:18.288086 2026] [security2:error] [pid 1028675:tid 1028931] [client 93.123.109.228:44806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK9ZtdHPfW2QFvhmL7gIwAAAHk"]
[Sat Aug 29 05:07:18.292210 2026] [security2:error] [pid 1028675:tid 1028846] [client 213.202.253.4:63026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bv-place.com"] [uri "/postnews.php"] [unique_id "apK9ZtdHPfW2QFvhmL7gJAAAACQ"], referer: www.google.com
[Sat Aug 29 05:07:18.300822 2026] [security2:error] [pid 1028675:tid 1028849] [client 4.205.62.107:65526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/api.php"] [unique_id "apK9ZtdHPfW2QFvhmL7gJgAAACc"]
[Sat Aug 29 05:07:18.303157 2026] [security2:error] [pid 1028675:tid 1028839] [client 68.155.159.216:65029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/dropdown.php"] [unique_id "apK9ZtdHPfW2QFvhmL7gJwAAAB0"]
[Sat Aug 29 05:07:18.303851 2026] [security2:error] [pid 1018003:tid 1018277] [client 68.155.159.216:50359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK9ZjAh5Y1i2tUxg4ERZgAABjU"]
[Sat Aug 29 05:07:18.346684 2026] [security2:error] [pid 1028675:tid 1028923] [client 158.23.147.79:35825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-content/x/index.php"] [unique_id "apK9ZtdHPfW2QFvhmL7gKwAAAHE"]
[Sat Aug 29 05:07:18.350976 2026] [security2:error] [pid 1028675:tid 1028935] [client 68.155.159.216:49273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/lv.php"] [unique_id "apK9ZtdHPfW2QFvhmL7gLQAAAH0"]
[Sat Aug 29 05:07:18.356595 2026] [core:error] [pid 1028675:tid 1028880] [client 57.141.14.20:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:18.356613 2026] [core:error] [pid 1028675:tid 1028880] [client 57.141.14.20:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:18.359315 2026] [security2:error] [pid 1018003:tid 1018189] [client 4.205.62.107:58381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/thui.php"] [unique_id "apK9ZjAh5Y1i2tUxg4ERbAAABd4"]
[Sat Aug 29 05:07:18.364956 2026] [security2:error] [pid 1028675:tid 1028842] [client 93.123.109.228:44930] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/admin-app/.env"] [unique_id "apK9ZtdHPfW2QFvhmL7gMwAAACA"]
[Sat Aug 29 05:07:18.365816 2026] [security2:error] [pid 1028675:tid 1028825] [client 4.205.62.107:22452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/06.php"] [unique_id "apK9ZtdHPfW2QFvhmL7gNAAAAA8"]
[Sat Aug 29 05:07:18.387700 2026] [security2:error] [pid 1028675:tid 1028828] [client 20.48.160.90:51708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/AxAo.php"] [unique_id "apK9ZtdHPfW2QFvhmL7gNwAAABI"]
[Sat Aug 29 05:07:18.390286 2026] [security2:error] [pid 1028675:tid 1028891] [client 20.104.104.62:10686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/wp-admin/zwso.php"] [unique_id "apK9ZtdHPfW2QFvhmL7gOAAAAFE"]
[Sat Aug 29 05:07:18.429173 2026] [security2:error] [pid 1028675:tid 1028882] [client 68.155.159.216:30612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK9ZtdHPfW2QFvhmL7gPwAAAEg"]
[Sat Aug 29 05:07:18.464831 2026] [security2:error] [pid 1028675:tid 1028921] [client 20.48.250.41:60672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/zxekqlxb.php"] [unique_id "apK9ZtdHPfW2QFvhmL7gQAAAAG8"]
[Sat Aug 29 05:07:18.486065 2026] [security2:error] [pid 1018003:tid 1018163] [client 74.7.241.159:44960] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "anescoavtech.com"] [uri "/robots.txt"] [unique_id "apK9ZjAh5Y1i2tUxg4ERcAAABcQ"]
[Sat Aug 29 05:07:18.514606 2026] [security2:error] [pid 1028675:tid 1028813] [client 20.104.104.62:40250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/web-setting.php"] [unique_id "apK9ZtdHPfW2QFvhmL7gRgAAAAM"]
[Sat Aug 29 05:07:18.516235 2026] [security2:error] [pid 1028675:tid 1028836] [client 185.104.184.230:55324] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.bjx.okj.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "apK9ZtdHPfW2QFvhmL7gRwAAABo"]
[Sat Aug 29 05:07:18.519106 2026] [security2:error] [pid 1028675:tid 1028901] [client 93.123.109.228:45024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/admin/phpinfo.php"] [unique_id "apK9ZtdHPfW2QFvhmL7gSAAAAFs"]
[Sat Aug 29 05:07:18.525192 2026] [security2:error] [pid 1028675:tid 1028821] [client 20.104.104.62:10659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/Contrller.php"] [unique_id "apK9ZtdHPfW2QFvhmL7gSQAAAAs"]
[Sat Aug 29 05:07:18.545604 2026] [security2:error] [pid 1018003:tid 1018174] [client 20.48.160.90:51255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/class17.php"] [unique_id "apK9ZjAh5Y1i2tUxg4ERcgAABc8"]
[Sat Aug 29 05:07:18.551367 2026] [security2:error] [pid 1028675:tid 1028883] [client 20.196.209.81:11287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/xmlrpc.php0"] [unique_id "apK9ZtdHPfW2QFvhmL7gUAAAAEk"]
[Sat Aug 29 05:07:18.551404 2026] [security2:error] [pid 1028675:tid 1028917] [client 52.139.37.240:21139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.tikiwithray.com"] [uri "/flower.php"] [unique_id "apK9ZtdHPfW2QFvhmL7gUQAAAGs"]
[Sat Aug 29 05:07:18.553073 2026] [security2:error] [pid 1028675:tid 1028876] [client 93.123.109.228:44874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/admin_phpinfo.php"] [unique_id "apK9ZtdHPfW2QFvhmL7gUgAAAEI"]
[Sat Aug 29 05:07:18.562063 2026] [security2:error] [pid 1018003:tid 1018216] [client 93.123.109.228:44904] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/administrator/.env"] [unique_id "apK9ZjAh5Y1i2tUxg4ERcwAABfk"]
[Sat Aug 29 05:07:18.569366 2026] [security2:error] [pid 1028675:tid 1028892] [client 40.83.93.50:13597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-content/db-status.php"] [unique_id "apK9ZtdHPfW2QFvhmL7gVAAAAFI"]
[Sat Aug 29 05:07:18.569712 2026] [security2:error] [pid 1028675:tid 1028915] [client 158.23.147.79:25422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/goat1.php"] [unique_id "apK9ZtdHPfW2QFvhmL7gVQAAAGk"]
[Sat Aug 29 05:07:18.575928 2026] [security2:error] [pid 1028675:tid 1028866] [client 93.123.109.228:44962] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/api-backend/.env"] [unique_id "apK9ZtdHPfW2QFvhmL7gWAAAADg"]
[Sat Aug 29 05:07:18.588649 2026] [security2:error] [pid 1028675:tid 1028896] [client 93.123.109.228:44916] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/api-node/.env"] [unique_id "apK9ZtdHPfW2QFvhmL7gWwAAAFY"]
[Sat Aug 29 05:07:18.609614 2026] [security2:error] [pid 1028675:tid 1028837] [client 158.23.147.79:17443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK9ZtdHPfW2QFvhmL7gXwAAABs"]
[Sat Aug 29 05:07:18.612574 2026] [security2:error] [pid 1018003:tid 1018225] [client 192.145.125.70:43668] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "zbv.tvp.mybluehost.me"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "apK9ZjAh5Y1i2tUxg4ERdAAABgI"]
[Sat Aug 29 05:07:18.616125 2026] [security2:error] [pid 1028675:tid 1028851] [client 68.155.159.216:24499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/classwithtostring.php"] [unique_id "apK9ZtdHPfW2QFvhmL7gYAAAACk"]
[Sat Aug 29 05:07:18.619299 2026] [security2:error] [pid 1028675:tid 1028819] [client 168.107.94.195:57211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9ZtdHPfW2QFvhmL7gYgAAAAk"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:18.632137 2026] [security2:error] [pid 1028675:tid 1028894] [client 20.48.250.41:62523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/init.php"] [unique_id "apK9ZtdHPfW2QFvhmL7gZQAAAFQ"]
[Sat Aug 29 05:07:18.632371 2026] [security2:error] [pid 1028675:tid 1028884] [client 93.123.109.228:44858] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/api/.env"] [unique_id "apK9ZtdHPfW2QFvhmL7gZAAAAEo"]
[Sat Aug 29 05:07:18.633604 2026] [security2:error] [pid 1018003:tid 1018187] [client 52.139.37.240:14950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/about/function.php"] [unique_id "apK9ZjAh5Y1i2tUxg4ERdgAABdw"]
[Sat Aug 29 05:07:18.649371 2026] [security2:error] [pid 1018003:tid 1018246] [client 158.23.147.79:30498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK9ZjAh5Y1i2tUxg4ERdwAABhY"]
[Sat Aug 29 05:07:18.650744 2026] [security2:error] [pid 1028675:tid 1028872] [client 158.158.54.35:23325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/zoom1.php"] [unique_id "apK9ZtdHPfW2QFvhmL7gZwAAAD4"]
[Sat Aug 29 05:07:18.653458 2026] [security2:error] [pid 1028675:tid 1028845] [client 52.139.37.240:32068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/7logs.php"] [unique_id "apK9ZtdHPfW2QFvhmL7gaAAAACM"]
[Sat Aug 29 05:07:18.661306 2026] [security2:error] [pid 1028675:tid 1028874] [client 20.104.104.62:10488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/Zeiss.php"] [unique_id "apK9ZtdHPfW2QFvhmL7gagAAAEA"]
[Sat Aug 29 05:07:18.693388 2026] [security2:error] [pid 1028675:tid 1028897] [client 20.48.160.90:51302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/okxoby.php"] [unique_id "apK9ZtdHPfW2QFvhmL7gcAAAAFc"]
[Sat Aug 29 05:07:18.719750 2026] [security2:error] [pid 1018003:tid 1018159] [client 20.203.141.11:1256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/menu.php"] [unique_id "apK9ZjAh5Y1i2tUxg4EReQAABcA"]
[Sat Aug 29 05:07:18.734803 2026] [security2:error] [pid 1028675:tid 1028812] [client 40.83.93.50:7977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/meta.php"] [unique_id "apK9ZtdHPfW2QFvhmL7gcQAAAAI"]
[Sat Aug 29 05:07:18.743374 2026] [security2:error] [pid 1018003:tid 1018162] [client 158.158.54.35:16916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/bi.php"] [unique_id "apK9ZjAh5Y1i2tUxg4ERfAAABcM"]
[Sat Aug 29 05:07:18.747371 2026] [security2:error] [pid 1028675:tid 1028911] [client 68.155.159.216:52841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-content/uploads/about.php"] [unique_id "apK9ZtdHPfW2QFvhmL7gdAAAAGU"]
[Sat Aug 29 05:07:18.754974 2026] [security2:error] [pid 1028675:tid 1028881] [client 180.190.5.40:50576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.5.190.180.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK9ZtdHPfW2QFvhmL7gdwAAAEc"]
[Sat Aug 29 05:07:18.755046 2026] [security2:error] [pid 1028675:tid 1028881] [client 180.190.5.40:50576] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK9ZtdHPfW2QFvhmL7gdwAAAEc"]
[Sat Aug 29 05:07:18.772596 2026] [security2:error] [pid 1018003:tid 1018256] [client 93.123.109.228:44984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/api/info.php"] [unique_id "apK9ZjAh5Y1i2tUxg4ERfQAABiA"]
[Sat Aug 29 05:07:18.780370 2026] [security2:error] [pid 1028675:tid 1028910] [client 20.197.61.180:13883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/alfa-rex.php"] [unique_id "apK9ZtdHPfW2QFvhmL7gfgAAAGQ"]
[Sat Aug 29 05:07:18.783064 2026] [security2:error] [pid 1028675:tid 1028882] [client 20.104.49.130:57492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/about.php"] [unique_id "apK9ZtdHPfW2QFvhmL7gfwAAAEg"]
[Sat Aug 29 05:07:18.792635 2026] [security2:error] [pid 1018003:tid 1018196] [client 20.104.104.62:10758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/ww2.php"] [unique_id "apK9ZjAh5Y1i2tUxg4ERfgAABeU"]
[Sat Aug 29 05:07:18.794433 2026] [security2:error] [pid 1018003:tid 1018200] [client 158.23.147.79:48194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/mah.php"] [unique_id "apK9ZjAh5Y1i2tUxg4ERfwAABek"]
[Sat Aug 29 05:07:18.797860 2026] [security2:error] [pid 1028675:tid 1028916] [client 4.205.62.107:56048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/public/wp-blog.php"] [unique_id "apK9ZtdHPfW2QFvhmL7ggQAAAGo"]
[Sat Aug 29 05:07:18.812693 2026] [security2:error] [pid 1028675:tid 1028914] [client 93.123.109.228:44884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/api/phpinfo.php"] [unique_id "apK9ZtdHPfW2QFvhmL7gggAAAGg"]
[Sat Aug 29 05:07:18.814655 2026] [security2:error] [pid 1028675:tid 1028912] [client 185.104.184.230:41998] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.bjx.okj.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "apK9ZtdHPfW2QFvhmL7ggwAAAGY"]
[Sat Aug 29 05:07:18.816976 2026] [security2:error] [pid 1028675:tid 1028899] [client 20.151.200.44:47395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/vbbn.php"] [unique_id "apK9ZtdHPfW2QFvhmL7ghAAAAFk"]
[Sat Aug 29 05:07:18.824728 2026] [security2:error] [pid 1018003:tid 1018170] [client 20.104.104.62:64704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-ettoyag.php"] [unique_id "apK9ZjAh5Y1i2tUxg4ERgAAABcs"]
[Sat Aug 29 05:07:18.828948 2026] [security2:error] [pid 1018003:tid 1018271] [client 52.139.37.240:14964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/an.php"] [unique_id "apK9ZjAh5Y1i2tUxg4ERgQAABi8"]
[Sat Aug 29 05:07:18.831815 2026] [security2:error] [pid 1018003:tid 1018236] [client 20.48.160.90:51283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/esuutzzx.php"] [unique_id "apK9ZjAh5Y1i2tUxg4ERggAABgw"]
[Sat Aug 29 05:07:18.843684 2026] [security2:error] [pid 1028675:tid 1028847] [client 52.139.37.240:32741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/ac.php"] [unique_id "apK9ZtdHPfW2QFvhmL7ghwAAACU"]
[Sat Aug 29 05:07:18.892073 2026] [security2:error] [pid 1018003:tid 1018212] [client 20.48.250.41:60726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/term.php"] [unique_id "apK9ZjAh5Y1i2tUxg4ERhAAABfU"]
[Sat Aug 29 05:07:18.928503 2026] [security2:error] [pid 1028675:tid 1028933] [client 68.155.159.216:6030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/makeasmtp.php"] [unique_id "apK9ZtdHPfW2QFvhmL7gkAAAAHs"]
[Sat Aug 29 05:07:18.929950 2026] [security2:error] [pid 1018003:tid 1018261] [client 20.104.104.62:10822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/anz.php"] [unique_id "apK9ZjAh5Y1i2tUxg4ERhgAABiU"]
[Sat Aug 29 05:07:18.947780 2026] [security2:error] [pid 1028675:tid 1028873] [client 93.123.109.228:44916] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/apis/.env"] [unique_id "apK9ZtdHPfW2QFvhmL7glgAAAD8"]
[Sat Aug 29 05:07:18.965575 2026] [security2:error] [pid 1018003:tid 1018184] [client 158.23.147.79:30403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK9ZjAh5Y1i2tUxg4ERiAAABdk"]
[Sat Aug 29 05:07:18.979864 2026] [security2:error] [pid 1018003:tid 1018233] [client 20.196.209.81:15174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/content.php"] [unique_id "apK9ZjAh5Y1i2tUxg4ERiQAABgk"]
[Sat Aug 29 05:07:18.992711 2026] [security2:error] [pid 1028675:tid 1028877] [client 20.48.160.90:49512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/replace.php"] [unique_id "apK9ZtdHPfW2QFvhmL7gngAAAEM"]
[Sat Aug 29 05:07:18.997326 2026] [security2:error] [pid 1028675:tid 1028862] [client 20.104.49.130:60779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/av.php"] [unique_id "apK9ZtdHPfW2QFvhmL7gnwAAADQ"]
[Sat Aug 29 05:07:19.000010 2026] [security2:error] [pid 1028675:tid 1028837] [client 168.107.94.195:57545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9ZtdHPfW2QFvhmL7goAAAABs"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:19.008500 2026] [security2:error] [pid 1028675:tid 1028871] [client 20.104.49.130:30069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/browse.php"] [unique_id "apK9Z9dHPfW2QFvhmL7gpAAAAD0"]
[Sat Aug 29 05:07:19.015572 2026] [security2:error] [pid 1018003:tid 1018189] [client 158.23.147.79:54393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK9ZzAh5Y1i2tUxg4ERigAABd4"]
[Sat Aug 29 05:07:19.032480 2026] [security2:error] [pid 1028675:tid 1028872] [client 93.123.109.228:44842] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/app/.env"] [unique_id "apK9Z9dHPfW2QFvhmL7gpgAAAD4"]
[Sat Aug 29 05:07:19.038579 2026] [security2:error] [pid 1028675:tid 1028915] [client 52.139.37.240:52221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/ctex1.php"] [unique_id "apK9Z9dHPfW2QFvhmL7gqAAAAGk"]
[Sat Aug 29 05:07:19.042932 2026] [security2:error] [pid 1018003:tid 1018231] [client 52.139.37.240:14974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/asw.php"] [unique_id "apK9ZzAh5Y1i2tUxg4ERjAAABgc"]
[Sat Aug 29 05:07:19.049622 2026] [security2:error] [pid 1028675:tid 1028813] [client 40.83.93.50:20815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-content/disagrsxr.php"] [unique_id "apK9Z9dHPfW2QFvhmL7gqgAAAAM"]
[Sat Aug 29 05:07:19.064377 2026] [security2:error] [pid 1028675:tid 1028815] [client 20.104.104.62:10666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/bge.php"] [unique_id "apK9Z9dHPfW2QFvhmL7gqwAAAAU"]
[Sat Aug 29 05:07:19.074592 2026] [security2:error] [pid 1018003:tid 1018250] [client 20.48.250.41:60768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/aaa.php"] [unique_id "apK9ZzAh5Y1i2tUxg4ERjgAABho"]
[Sat Aug 29 05:07:19.086883 2026] [security2:error] [pid 1028675:tid 1028897] [client 68.155.159.216:33673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/file17.php"] [unique_id "apK9Z9dHPfW2QFvhmL7grgAAAFc"]
[Sat Aug 29 05:07:19.108787 2026] [security2:error] [pid 1018003:tid 1018244] [client 185.104.184.230:59442] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.bjx.okj.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "apK9ZzAh5Y1i2tUxg4ERjwAABhQ"]
[Sat Aug 29 05:07:19.133088 2026] [security2:error] [pid 1018003:tid 1018088] [remote 74.7.227.189:42320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 189.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pinnacleforms.com"] [uri "/jInventoryRpt.php"] [unique_id "apK9ZzAh5Y1i2tUxg4ERkAAGHEM"], referer: https://mail.pinnacleforms.com/
[Sat Aug 29 05:07:19.143961 2026] [security2:error] [pid 1028675:tid 1028881] [client 4.205.62.107:22485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/rum.or.php"] [unique_id "apK9Z9dHPfW2QFvhmL7gtQAAAEc"]
[Sat Aug 29 05:07:19.147304 2026] [security2:error] [pid 1018003:tid 1018222] [client 20.48.160.90:51689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/gulu.php"] [unique_id "apK9ZzAh5Y1i2tUxg4ERkQAABf8"]
[Sat Aug 29 05:07:19.148856 2026] [security2:error] [pid 1028675:tid 1028841] [client 4.205.62.107:53386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/g3.php"] [unique_id "apK9Z9dHPfW2QFvhmL7gtwAAAB8"]
[Sat Aug 29 05:07:19.150687 2026] [security2:error] [pid 1028675:tid 1028854] [client 20.104.104.62:40224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/venom.php"] [unique_id "apK9Z9dHPfW2QFvhmL7guQAAACw"]
[Sat Aug 29 05:07:19.195678 2026] [security2:error] [pid 1018003:tid 1018255] [client 158.158.54.35:29676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/cc.php"] [unique_id "apK9ZzAh5Y1i2tUxg4ERkgAABh8"]
[Sat Aug 29 05:07:19.196166 2026] [security2:error] [pid 1028675:tid 1028901] [client 192.145.125.70:43684] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "zbv.tvp.mybluehost.me"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "apK9Z9dHPfW2QFvhmL7gvwAAAFs"]
[Sat Aug 29 05:07:19.206220 2026] [security2:error] [pid 1028675:tid 1028855] [client 68.155.159.216:51478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/x.php"] [unique_id "apK9Z9dHPfW2QFvhmL7gwgAAAC0"]
[Sat Aug 29 05:07:19.212666 2026] [security2:error] [pid 1018003:tid 1018267] [client 20.203.141.11:11247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK9ZzAh5Y1i2tUxg4ERlQAABis"]
[Sat Aug 29 05:07:19.229494 2026] [security2:error] [pid 1018003:tid 1018198] [client 20.48.250.41:62497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/xsox.php"] [unique_id "apK9ZzAh5Y1i2tUxg4ERlwAABec"]
[Sat Aug 29 05:07:19.230641 2026] [security2:error] [pid 1018003:tid 1018217] [client 40.83.93.50:7537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/dxc.php"] [unique_id "apK9ZzAh5Y1i2tUxg4ERmQAABfo"]
[Sat Aug 29 05:07:19.232729 2026] [security2:error] [pid 1028675:tid 1028910] [client 52.139.37.240:32016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/defaults.php"] [unique_id "apK9Z9dHPfW2QFvhmL7gxQAAAGQ"]
[Sat Aug 29 05:07:19.235302 2026] [security2:error] [pid 1028675:tid 1028850] [client 20.104.104.62:10669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/wp-ana.php"] [unique_id "apK9Z9dHPfW2QFvhmL7gyAAAACg"]
[Sat Aug 29 05:07:19.236715 2026] [security2:error] [pid 1028675:tid 1028882] [client 52.139.37.240:14484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/item.php"] [unique_id "apK9Z9dHPfW2QFvhmL7gygAAAEg"]
[Sat Aug 29 05:07:19.237030 2026] [security2:error] [pid 1028675:tid 1028833] [client 93.123.109.228:44988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/application/.env"] [unique_id "apK9Z9dHPfW2QFvhmL7gyQAAABc"]
[Sat Aug 29 05:07:19.241563 2026] [security2:error] [pid 1028675:tid 1028923] [client 158.158.54.35:17648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/txets.php"] [unique_id "apK9Z9dHPfW2QFvhmL7gywAAAHE"]
[Sat Aug 29 05:07:19.246964 2026] [security2:error] [pid 1028675:tid 1028856] [client 39.44.3.46:64334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.3.44.39.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mihp.net"] [uri "/xmlrpc.php"] [unique_id "apK9Z9dHPfW2QFvhmL7gxgAAAC4"]
[Sat Aug 29 05:07:19.247047 2026] [security2:error] [pid 1028675:tid 1028856] [client 39.44.3.46:64334] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mihp.net"] [uri "/xmlrpc.php"] [unique_id "apK9Z9dHPfW2QFvhmL7gxgAAAC4"]
[Sat Aug 29 05:07:19.254656 2026] [security2:error] [pid 1018003:tid 1018152] [client 93.123.109.228:44904] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/apps/.env"] [unique_id "apK9ZzAh5Y1i2tUxg4ERmgAABbk"]
[Sat Aug 29 05:07:19.262562 2026] [security2:error] [pid 1018003:tid 1018159] [client 68.155.159.216:38564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/.well-known/index.php"] [unique_id "apK9ZzAh5Y1i2tUxg4ERmwAABcA"]
[Sat Aug 29 05:07:19.268038 2026] [security2:error] [pid 1018003:tid 1018190] [client 39.44.3.46:64335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.3.44.39.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mihp.net"] [uri "/xmlrpc.php"] [unique_id "apK9ZzAh5Y1i2tUxg4ERlgAABd8"]
[Sat Aug 29 05:07:19.268151 2026] [security2:error] [pid 1018003:tid 1018190] [client 39.44.3.46:64335] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mihp.net"] [uri "/xmlrpc.php"] [unique_id "apK9ZzAh5Y1i2tUxg4ERlgAABd8"]
[Sat Aug 29 05:07:19.283700 2026] [security2:error] [pid 1018003:tid 1018240] [client 158.23.147.79:32717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/lock.php"] [unique_id "apK9ZzAh5Y1i2tUxg4ERnAAABhA"]
[Sat Aug 29 05:07:19.290767 2026] [security2:error] [pid 1018003:tid 1018166] [client 146.70.194.254:44262] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "modelbasenjis.com"] [uri "/cgi-sys/suspendedpage.cgi/web/wp-includes/wlwmanifest.xml"] [unique_id "apK9ZzAh5Y1i2tUxg4ERnQAABcc"]
[Sat Aug 29 05:07:19.320202 2026] [security2:error] [pid 1028675:tid 1028903] [client 68.155.159.216:51270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK9Z9dHPfW2QFvhmL7g1QAAAF0"]
[Sat Aug 29 05:07:19.326158 2026] [security2:error] [pid 1028675:tid 1028857] [client 20.48.160.90:51641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/gtghklk.php"] [unique_id "apK9Z9dHPfW2QFvhmL7g1gAAAC8"]
[Sat Aug 29 05:07:19.365843 2026] [security2:error] [pid 1028675:tid 1028898] [client 20.104.104.62:10845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/secret.php"] [unique_id "apK9Z9dHPfW2QFvhmL7g3QAAAFg"]
[Sat Aug 29 05:07:19.377931 2026] [security2:error] [pid 1028675:tid 1028918] [client 20.104.49.130:60962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/1xmomo.php"] [unique_id "apK9Z9dHPfW2QFvhmL7g4gAAAGw"]
[Sat Aug 29 05:07:19.379133 2026] [security2:error] [pid 1028675:tid 1028819] [client 168.107.94.195:58010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9Z9dHPfW2QFvhmL7g4wAAAAk"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:19.409221 2026] [security2:error] [pid 1018003:tid 1018162] [client 20.196.209.81:1736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/wxo.php"] [unique_id "apK9ZzAh5Y1i2tUxg4ERoAAABcM"]
[Sat Aug 29 05:07:19.409651 2026] [security2:error] [pid 1018003:tid 1018258] [client 68.155.159.216:65145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/.well-known/index.php"] [unique_id "apK9ZzAh5Y1i2tUxg4ERoQAABiI"]
[Sat Aug 29 05:07:19.413115 2026] [security2:error] [pid 1018003:tid 1018172] [client 185.104.184.230:59452] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.bjx.okj.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "apK9ZzAh5Y1i2tUxg4ERogAABc0"]
[Sat Aug 29 05:07:19.429393 2026] [security2:error] [pid 1028675:tid 1028731] [remote 43.135.153.177:56822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 177.153.135.43.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "woosigns.com"] [uri "/xmlrpc.php"] [unique_id "apK9Z9dHPfW2QFvhmL7g5wAAMzI"]
[Sat Aug 29 05:07:19.429599 2026] [security2:error] [pid 1028675:tid 1028861] [client 43.135.153.177:56822] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "woosigns.com"] [uri "/xmlrpc.php"] [unique_id "apK9Z9dHPfW2QFvhmL7g5wAAMzI"]
[Sat Aug 29 05:07:19.435715 2026] [security2:error] [pid 1018003:tid 1018183] [client 52.139.37.240:14705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/jga.php"] [unique_id "apK9ZzAh5Y1i2tUxg4ERpQAABdg"]
[Sat Aug 29 05:07:19.436682 2026] [security2:error] [pid 1028675:tid 1028877] [client 52.139.37.240:51736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/domains.php"] [unique_id "apK9Z9dHPfW2QFvhmL7g6wAAAEM"]
[Sat Aug 29 05:07:19.439868 2026] [security2:error] [pid 1028675:tid 1028904] [client 4.205.62.107:65467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/temp.php"] [unique_id "apK9Z9dHPfW2QFvhmL7g7AAAAF4"]
[Sat Aug 29 05:07:19.454481 2026] [security2:error] [pid 1028675:tid 1028835] [client 68.155.159.216:50342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/log-mama/function.php"] [unique_id "apK9Z9dHPfW2QFvhmL7g7gAAABk"]
[Sat Aug 29 05:07:19.466604 2026] [security2:error] [pid 1028675:tid 1028845] [client 20.48.250.41:62591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/lkui.php"] [unique_id "apK9Z9dHPfW2QFvhmL7g8AAAACM"]
[Sat Aug 29 05:07:19.467197 2026] [security2:error] [pid 1028675:tid 1028874] [client 158.23.147.79:35810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK9Z9dHPfW2QFvhmL7g8QAAAEA"]
[Sat Aug 29 05:07:19.500283 2026] [security2:error] [pid 1028675:tid 1028885] [client 4.205.62.107:58466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/session.php"] [unique_id "apK9Z9dHPfW2QFvhmL7g9gAAAEs"]
[Sat Aug 29 05:07:19.502550 2026] [security2:error] [pid 1028675:tid 1028929] [client 20.48.250.41:35459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9Z9dHPfW2QFvhmL7g-AAAAHc"]
[Sat Aug 29 05:07:19.508528 2026] [security2:error] [pid 1018003:tid 1018182] [client 20.104.104.62:20860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/vuln.php"] [unique_id "apK9ZzAh5Y1i2tUxg4ERpgAABdc"]
[Sat Aug 29 05:07:19.510148 2026] [security2:error] [pid 1018003:tid 1018277] [client 20.48.160.90:51627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/comand.php"] [unique_id "apK9ZzAh5Y1i2tUxg4ERpwAABjU"]
[Sat Aug 29 05:07:19.511773 2026] [security2:error] [pid 1018003:tid 1018277] [client 158.23.147.79:49814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-includes/css/index.php"] [unique_id "apK9ZzAh5Y1i2tUxg4ERqAAABjU"]
[Sat Aug 29 05:07:19.515884 2026] [security2:error] [pid 1018003:tid 1018238] [client 4.205.62.107:22430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/otuz1.php"] [unique_id "apK9ZzAh5Y1i2tUxg4ERqQAABg4"]
[Sat Aug 29 05:07:19.517330 2026] [security2:error] [pid 1018003:tid 1018169] [client 20.104.104.62:10676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/pro.php"] [unique_id "apK9ZzAh5Y1i2tUxg4ERqgAABco"]
[Sat Aug 29 05:07:19.529721 2026] [security2:error] [pid 1028675:tid 1028927] [client 40.83.93.50:13640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-content/f35.php"] [unique_id "apK9Z9dHPfW2QFvhmL7g_AAAAHU"]
[Sat Aug 29 05:07:19.529724 2026] [security2:error] [pid 1018003:tid 1018219] [client 20.197.61.180:9704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/cookie.php"] [unique_id "apK9ZzAh5Y1i2tUxg4ERqwAABfw"]
[Sat Aug 29 05:07:19.551842 2026] [security2:error] [pid 1018003:tid 1018184] [client 68.155.159.216:30626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK9ZzAh5Y1i2tUxg4ERrAAABdk"]
[Sat Aug 29 05:07:19.574914 2026] [security2:error] [pid 1018003:tid 1018177] [client 87.219.197.128:62320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK9ZzAh5Y1i2tUxg4ERrgAABdI"]
[Sat Aug 29 05:07:19.575006 2026] [security2:error] [pid 1018003:tid 1018177] [client 87.219.197.128:62320] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK9ZzAh5Y1i2tUxg4ERrgAABdI"]
[Sat Aug 29 05:07:19.587105 2026] [security2:error] [pid 1028675:tid 1028936] [client 93.123.109.228:44894] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/back-api/.env"] [unique_id "apK9Z9dHPfW2QFvhmL7hAQAAAH4"]
[Sat Aug 29 05:07:19.594496 2026] [security2:error] [pid 1028675:tid 1028891] [client 93.123.109.228:44988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/back/.env"] [unique_id "apK9Z9dHPfW2QFvhmL7hAgAAAFE"]
[Sat Aug 29 05:07:19.595492 2026] [security2:error] [pid 1028675:tid 1028854] [client 93.123.109.228:44946] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/back-end/.env"] [unique_id "apK9Z9dHPfW2QFvhmL7hAwAAACw"]
[Sat Aug 29 05:07:19.600523 2026] [security2:error] [pid 1018003:tid 1018273] [client 40.83.93.50:20749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-admin/network/xmrlpc.php"] [unique_id "apK9ZzAh5Y1i2tUxg4ERsAAABjE"]
[Sat Aug 29 05:07:19.601736 2026] [security2:error] [pid 1018003:tid 1018179] [client 20.48.250.41:60699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "apK9ZzAh5Y1i2tUxg4ERsQAABdQ"]
[Sat Aug 29 05:07:19.605242 2026] [security2:error] [pid 1028675:tid 1028928] [client 93.123.109.228:44842] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/backend-api/.env"] [unique_id "apK9Z9dHPfW2QFvhmL7hBAAAAHY"]
[Sat Aug 29 05:07:19.619984 2026] [security2:error] [pid 1028675:tid 1028878] [client 93.123.109.228:44916] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK9Z9dHPfW2QFvhmL7hBQAAAEQ"]
[Sat Aug 29 05:07:19.631873 2026] [security2:error] [pid 1018003:tid 1018156] [client 52.139.37.240:52230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/dropdown.php"] [unique_id "apK9ZzAh5Y1i2tUxg4ERtAAABb0"]
[Sat Aug 29 05:07:19.639783 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.48.160.90:51619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/wp_motu_myk3v.php"] [unique_id "apK9ZzAh5Y1i2tUxg4ERtQAABcI"]
[Sat Aug 29 05:07:19.644989 2026] [security2:error] [pid 1028675:tid 1028831] [client 158.158.54.35:34293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/files/index.php"] [unique_id "apK9Z9dHPfW2QFvhmL7hCAAAABU"]
[Sat Aug 29 05:07:19.645189 2026] [security2:error] [pid 1018003:tid 1018255] [client 20.104.104.62:10467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/999.php"] [unique_id "apK9ZzAh5Y1i2tUxg4ERtgAABh8"]
[Sat Aug 29 05:07:19.651197 2026] [security2:error] [pid 1018003:tid 1018250] [client 52.139.37.240:14498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/mac.php"] [unique_id "apK9ZzAh5Y1i2tUxg4ERuAAABho"]
[Sat Aug 29 05:07:19.673320 2026] [security2:error] [pid 1028675:tid 1028914] [client 20.48.250.41:35471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9Z9dHPfW2QFvhmL7hCgAAAGg"]
[Sat Aug 29 05:07:19.683596 2026] [security2:error] [pid 1018003:tid 1018164] [client 158.23.147.79:25416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK9ZzAh5Y1i2tUxg4ERuQAABcU"]
[Sat Aug 29 05:07:19.708802 2026] [security2:error] [pid 1018003:tid 1018152] [client 185.104.184.230:59460] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.bjx.okj.mybluehost.me"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "apK9ZzAh5Y1i2tUxg4ERuwAABbk"]
[Sat Aug 29 05:07:19.727512 2026] [security2:error] [pid 1018003:tid 1018231] [client 40.83.93.50:7978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/wp-2019.php"] [unique_id "apK9ZzAh5Y1i2tUxg4ERvQAABgc"]
[Sat Aug 29 05:07:19.760130 2026] [security2:error] [pid 1028675:tid 1028930] [client 168.107.94.195:58282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9Z9dHPfW2QFvhmL7hGgAAAHg"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:19.768411 2026] [security2:error] [pid 1028675:tid 1028913] [client 93.123.109.228:44946] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/backup/.env"] [unique_id "apK9Z9dHPfW2QFvhmL7hGwAAAGc"]
[Sat Aug 29 05:07:19.773896 2026] [security2:error] [pid 1028675:tid 1028821] [client 93.123.109.228:44842] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/be/.env"] [unique_id "apK9Z9dHPfW2QFvhmL7hHQAAAAs"]
[Sat Aug 29 05:07:19.779250 2026] [security2:error] [pid 1018003:tid 1018170] [client 93.123.109.228:44904] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/beta/.env"] [unique_id "apK9ZzAh5Y1i2tUxg4ERvwAABcs"]
[Sat Aug 29 05:07:19.779753 2026] [security2:error] [pid 1028675:tid 1028900] [client 20.48.250.41:60733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/motu.php"] [unique_id "apK9Z9dHPfW2QFvhmL7hIAAAAFo"]
[Sat Aug 29 05:07:19.780724 2026] [security2:error] [pid 1028675:tid 1028844] [client 20.48.160.90:51691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/wp_motu_ypdat.php"] [unique_id "apK9Z9dHPfW2QFvhmL7hIQAAACI"]
[Sat Aug 29 05:07:19.783883 2026] [security2:error] [pid 1028675:tid 1028870] [client 20.104.104.62:10875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/sef.php"] [unique_id "apK9Z9dHPfW2QFvhmL7hIwAAADw"]
[Sat Aug 29 05:07:19.790310 2026] [security2:error] [pid 1028675:tid 1028883] [client 68.155.159.216:24512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/install.php"] [unique_id "apK9Z9dHPfW2QFvhmL7hJgAAAEk"]
[Sat Aug 29 05:07:19.799414 2026] [security2:error] [pid 1018003:tid 1018175] [client 192.145.125.70:43700] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "zbv.tvp.mybluehost.me"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "apK9ZzAh5Y1i2tUxg4ERwQAABdA"]
[Sat Aug 29 05:07:19.803843 2026] [security2:error] [pid 1028675:tid 1028857] [client 20.104.104.62:40228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/V5.php"] [unique_id "apK9Z9dHPfW2QFvhmL7hKAAAAC8"]
[Sat Aug 29 05:07:19.810759 2026] [security2:error] [pid 1028675:tid 1028917] [client 20.48.250.41:35457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/ff1.php"] [unique_id "apK9Z9dHPfW2QFvhmL7hKgAAAGs"]
[Sat Aug 29 05:07:19.826499 2026] [security2:error] [pid 1028675:tid 1028848] [client 52.139.37.240:32744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/files/index.php"] [unique_id "apK9Z9dHPfW2QFvhmL7hLgAAACY"]
[Sat Aug 29 05:07:19.836988 2026] [security2:error] [pid 1028675:tid 1028912] [client 20.196.209.81:2002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/as.php"] [unique_id "apK9Z9dHPfW2QFvhmL7hMQAAAGY"]
[Sat Aug 29 05:07:19.841880 2026] [security2:error] [pid 1028675:tid 1028837] [client 20.203.141.11:22443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/lite.php"] [unique_id "apK9Z9dHPfW2QFvhmL7hMgAAABs"]
[Sat Aug 29 05:07:19.915102 2026] [security2:error] [pid 1028675:tid 1028877] [client 20.104.104.62:10665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/admin123.php"] [unique_id "apK9Z9dHPfW2QFvhmL7hOgAAAEM"]
[Sat Aug 29 05:07:19.916389 2026] [security2:error] [pid 1028675:tid 1028902] [client 93.123.109.228:44940] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/client/.env"] [unique_id "apK9Z9dHPfW2QFvhmL7hOQAAAFw"]
[Sat Aug 29 05:07:19.927380 2026] [security2:error] [pid 1028675:tid 1028872] [client 93.123.109.228:44930] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/cms/.env"] [unique_id "apK9Z9dHPfW2QFvhmL7hPAAAAD4"]
[Sat Aug 29 05:07:19.929962 2026] [security2:error] [pid 1028675:tid 1028826] [client 20.48.250.41:58397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/Ov-Simple1.php"] [unique_id "apK9Z9dHPfW2QFvhmL7hPgAAABA"]
[Sat Aug 29 05:07:19.938935 2026] [security2:error] [pid 1028675:tid 1028845] [client 4.205.62.107:53279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/php-details.php"] [unique_id "apK9Z9dHPfW2QFvhmL7hPwAAACM"]
[Sat Aug 29 05:07:19.948392 2026] [security2:error] [pid 1028675:tid 1028824] [client 20.48.250.41:49124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9Z9dHPfW2QFvhmL7hQgAAAA4"]
[Sat Aug 29 05:07:19.951064 2026] [security2:error] [pid 1028675:tid 1028885] [client 20.48.160.90:49517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/edit.php"] [unique_id "apK9Z9dHPfW2QFvhmL7hQwAAAEs"]
[Sat Aug 29 05:07:19.954284 2026] [security2:error] [pid 1028675:tid 1028840] [client 20.48.250.41:35103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/t.php"] [unique_id "apK9Z9dHPfW2QFvhmL7hRQAAAB4"]
[Sat Aug 29 05:07:19.967318 2026] [security2:error] [pid 1028675:tid 1028811] [client 158.23.147.79:26515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-admin/maint/index.php"] [unique_id "apK9Z9dHPfW2QFvhmL7hRgAAAAE"]
[Sat Aug 29 05:07:19.991613 2026] [security2:error] [pid 1028675:tid 1028847] [client 93.123.109.228:45012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/config.php"] [unique_id "apK9Z9dHPfW2QFvhmL7hRwAAACU"]
[Sat Aug 29 05:07:19.999715 2026] [security2:error] [pid 1028675:tid 1028862] [client 40.83.93.50:20856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-content/index.php"] [unique_id "apK9Z9dHPfW2QFvhmL7hSAAAADQ"]
[Sat Aug 29 05:07:20.021176 2026] [security2:error] [pid 1018003:tid 1018187] [client 185.104.184.230:59468] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.bjx.okj.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "apK9aDAh5Y1i2tUxg4ERxgAABdw"]
[Sat Aug 29 05:07:20.050739 2026] [security2:error] [pid 1018003:tid 1018256] [client 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK9ZzAh5Y1i2tUxg4ERwwAGIBw"]
[Sat Aug 29 05:07:20.051389 2026] [security2:error] [pid 1018003:tid 1018234] [client 20.104.104.62:10654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/7h.php"] [unique_id "apK9aDAh5Y1i2tUxg4ERyAAABgo"]
[Sat Aug 29 05:07:20.068909 2026] [security2:error] [pid 1028675:tid 1028928] [client 68.155.159.216:6057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK9aNdHPfW2QFvhmL7hTgAAAHY"]
[Sat Aug 29 05:07:20.083559 2026] [security2:error] [pid 1018003:tid 1018277] [client 20.48.250.41:60700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/wp-blogs.php"] [unique_id "apK9aDAh5Y1i2tUxg4ERyQAABjU"]
[Sat Aug 29 05:07:20.087694 2026] [security2:error] [pid 1018003:tid 1018238] [client 158.158.54.35:23349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-content/themes/about.php"] [unique_id "apK9aDAh5Y1i2tUxg4ERygAABg4"]
[Sat Aug 29 05:07:20.088069 2026] [security2:error] [pid 1028675:tid 1028931] [client 40.83.93.50:24536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-admin/options-general.php"] [unique_id "apK9aNdHPfW2QFvhmL7hUQAAAHk"]
[Sat Aug 29 05:07:20.096323 2026] [security2:error] [pid 1018003:tid 1018169] [client 20.48.250.41:35128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/erty.php"] [unique_id "apK9aDAh5Y1i2tUxg4ERzAAABco"]
[Sat Aug 29 05:07:20.096713 2026] [security2:error] [pid 1028675:tid 1028932] [client 20.48.160.90:51207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/tqkdqbbv.php"] [unique_id "apK9aNdHPfW2QFvhmL7hUwAAAHo"]
[Sat Aug 29 05:07:20.098401 2026] [security2:error] [pid 1028675:tid 1028889] [client 158.158.54.35:34830] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/1.php7"] [unique_id "apK9aNdHPfW2QFvhmL7hVAAAAE8"]
[Sat Aug 29 05:07:20.098475 2026] [security2:error] [pid 1028675:tid 1028889] [client 158.158.54.35:34830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/1.php7"] [unique_id "apK9aNdHPfW2QFvhmL7hVAAAAE8"]
[Sat Aug 29 05:07:20.099789 2026] [security2:error] [pid 1028675:tid 1028916] [client 20.48.250.41:49102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9aNdHPfW2QFvhmL7hVQAAAGo"]
[Sat Aug 29 05:07:20.100548 2026] [security2:error] [pid 1018003:tid 1018219] [client 158.23.147.79:30538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK9aDAh5Y1i2tUxg4ERzQAABfw"]
[Sat Aug 29 05:07:20.125396 2026] [security2:error] [pid 1028675:tid 1028830] [client 93.123.109.228:44946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/config/aws.php"] [unique_id "apK9aNdHPfW2QFvhmL7hVgAAABQ"]
[Sat Aug 29 05:07:20.136704 2026] [security2:error] [pid 1018003:tid 1018226] [client 93.123.109.228:44822] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/config/.env"] [unique_id "apK9aDAh5Y1i2tUxg4ERzwAABgM"]
[Sat Aug 29 05:07:20.140567 2026] [security2:error] [pid 1028675:tid 1028910] [client 168.107.94.195:58682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9aNdHPfW2QFvhmL7hWwAAAGQ"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:20.168450 2026] [security2:error] [pid 1028675:tid 1028836] [client 93.123.109.228:44842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/config/config.inc.php"] [unique_id "apK9aNdHPfW2QFvhmL7hYAAAABo"]
[Sat Aug 29 05:07:20.194287 2026] [security2:error] [pid 1028675:tid 1028923] [client 93.123.109.228:44972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/config/config.php"] [unique_id "apK9aNdHPfW2QFvhmL7hYwAAAHE"]
[Sat Aug 29 05:07:20.196674 2026] [security2:error] [pid 1028675:tid 1028900] [client 20.104.104.62:10675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/wp-gzone.php"] [unique_id "apK9aNdHPfW2QFvhmL7hZAAAAFo"]
[Sat Aug 29 05:07:20.199995 2026] [security2:error] [pid 1028675:tid 1028870] [client 68.155.159.216:65069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK9aNdHPfW2QFvhmL7hZgAAADw"]
[Sat Aug 29 05:07:20.230312 2026] [security2:error] [pid 1028675:tid 1028933] [client 20.48.250.41:35104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/0x.php"] [unique_id "apK9aNdHPfW2QFvhmL7hbQAAAHs"]
[Sat Aug 29 05:07:20.233207 2026] [security2:error] [pid 1028675:tid 1028859] [client 20.48.250.41:62475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/mini.php"] [unique_id "apK9aNdHPfW2QFvhmL7hbgAAADE"]
[Sat Aug 29 05:07:20.233628 2026] [security2:error] [pid 1028675:tid 1028903] [client 20.48.250.41:49151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/ff1.php"] [unique_id "apK9aNdHPfW2QFvhmL7hbwAAAF0"]
[Sat Aug 29 05:07:20.252682 2026] [security2:error] [pid 1028675:tid 1028846] [client 20.197.61.180:13824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/NewFile.php"] [unique_id "apK9aNdHPfW2QFvhmL7hdAAAACQ"]
[Sat Aug 29 05:07:20.256690 2026] [security2:error] [pid 1018003:tid 1018268] [client 20.104.49.130:45741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/init.php"] [unique_id "apK9aDAh5Y1i2tUxg4ER0QAABiw"]
[Sat Aug 29 05:07:20.266806 2026] [security2:error] [pid 1028675:tid 1028919] [client 20.196.209.81:11327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/room.php"] [unique_id "apK9aNdHPfW2QFvhmL7hdwAAAG0"]
[Sat Aug 29 05:07:20.273721 2026] [security2:error] [pid 1028675:tid 1028894] [client 20.48.160.90:51280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/kjyehoxl.php"] [unique_id "apK9aNdHPfW2QFvhmL7heAAAAFQ"]
[Sat Aug 29 05:07:20.278151 2026] [security2:error] [pid 1028675:tid 1028832] [client 4.205.62.107:22505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/xmy.php"] [unique_id "apK9aNdHPfW2QFvhmL7hegAAABY"]
[Sat Aug 29 05:07:20.283643 2026] [security2:error] [pid 1028675:tid 1028828] [client 40.83.93.50:7960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/menu.php"] [unique_id "apK9aNdHPfW2QFvhmL7hewAAABI"]
[Sat Aug 29 05:07:20.289569 2026] [security2:error] [pid 1028675:tid 1028820] [client 93.123.109.228:44894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/config/env.php"] [unique_id "apK9aNdHPfW2QFvhmL7hfAAAAAo"]
[Sat Aug 29 05:07:20.300137 2026] [security2:error] [pid 1028675:tid 1028902] [client 4.205.62.107:53363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/cloud.php"] [unique_id "apK9aNdHPfW2QFvhmL7hfQAAAFw"]
[Sat Aug 29 05:07:20.300722 2026] [security2:error] [pid 1028675:tid 1028872] [client 93.123.109.228:44988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/config/module.config.php"] [unique_id "apK9aNdHPfW2QFvhmL7hfgAAAD4"]
[Sat Aug 29 05:07:20.310118 2026] [security2:error] [pid 1018003:tid 1018177] [client 20.203.141.11:8986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/term.php"] [unique_id "apK9aDAh5Y1i2tUxg4ER1AAABdI"]
[Sat Aug 29 05:07:20.315934 2026] [security2:error] [pid 1028675:tid 1028813] [client 68.155.159.216:51493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-content/x.php"] [unique_id "apK9aNdHPfW2QFvhmL7hfwAAAAM"]
[Sat Aug 29 05:07:20.322553 2026] [security2:error] [pid 1028675:tid 1028909] [client 93.123.109.228:45030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/config/nexmo.php"] [unique_id "apK9aNdHPfW2QFvhmL7hgQAAAGM"]
[Sat Aug 29 05:07:20.329865 2026] [security2:error] [pid 1028675:tid 1028840] [client 20.104.104.62:10634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/str.php"] [unique_id "apK9aNdHPfW2QFvhmL7hggAAAB4"]
[Sat Aug 29 05:07:20.351713 2026] [security2:error] [pid 1028675:tid 1028924] [client 68.155.159.216:33617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-admin/images/about.php"] [unique_id "apK9aNdHPfW2QFvhmL7hhQAAAHI"]
[Sat Aug 29 05:07:20.361443 2026] [security2:error] [pid 1018003:tid 1018174] [client 103.185.242.143:65330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK9aDAh5Y1i2tUxg4ER1gAABc8"]
[Sat Aug 29 05:07:20.361544 2026] [security2:error] [pid 1018003:tid 1018174] [client 103.185.242.143:65330] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK9aDAh5Y1i2tUxg4ER1gAABc8"]
[Sat Aug 29 05:07:20.362820 2026] [security2:error] [pid 1028675:tid 1028867] [client 68.155.159.216:38570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-content/themes/too.php"] [unique_id "apK9aNdHPfW2QFvhmL7hhgAAADk"]
[Sat Aug 29 05:07:20.371732 2026] [security2:error] [pid 1028675:tid 1028927] [client 20.48.250.41:49042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/t.php"] [unique_id "apK9aNdHPfW2QFvhmL7hhwAAAHU"]
[Sat Aug 29 05:07:20.372349 2026] [security2:error] [pid 1028675:tid 1028812] [client 93.123.109.228:45004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/config/stripe.php"] [unique_id "apK9aNdHPfW2QFvhmL7hiAAAAAI"]
[Sat Aug 29 05:07:20.375957 2026] [security2:error] [pid 1028675:tid 1028879] [client 20.48.250.41:58405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/amp.php"] [unique_id "apK9aNdHPfW2QFvhmL7hiQAAAEU"]
[Sat Aug 29 05:07:20.390816 2026] [security2:error] [pid 1028675:tid 1028911] [client 158.23.147.79:32736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/index/function.php"] [unique_id "apK9aNdHPfW2QFvhmL7hjAAAAGU"]
[Sat Aug 29 05:07:20.394345 2026] [security2:error] [pid 1028675:tid 1028843] [client 20.48.250.41:35470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/66.php"] [unique_id "apK9aNdHPfW2QFvhmL7hjQAAACE"]
[Sat Aug 29 05:07:20.396421 2026] [security2:error] [pid 1028675:tid 1028918] [client 20.104.104.62:40249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/v5.php"] [unique_id "apK9aNdHPfW2QFvhmL7hjwAAAGw"]
[Sat Aug 29 05:07:20.396488 2026] [security2:error] [pid 1028675:tid 1028914] [client 192.145.125.70:43702] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "zbv.tvp.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "apK9aNdHPfW2QFvhmL7hjgAAAGg"]
[Sat Aug 29 05:07:20.416516 2026] [security2:error] [pid 1028675:tid 1028854] [client 185.104.184.230:59472] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.bjx.okj.mybluehost.me"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "apK9aNdHPfW2QFvhmL7hkAAAACw"]
[Sat Aug 29 05:07:20.418501 2026] [security2:error] [pid 1028675:tid 1028891] [client 158.23.147.79:54382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apK9aNdHPfW2QFvhmL7hkQAAAFE"]
[Sat Aug 29 05:07:20.432717 2026] [security2:error] [pid 1028675:tid 1028853] [client 68.155.159.216:51463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-admin/network/index.php"] [unique_id "apK9aNdHPfW2QFvhmL7hkwAAACs"]
[Sat Aug 29 05:07:20.465328 2026] [security2:error] [pid 1018003:tid 1018207] [client 20.104.104.62:10646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/mega.php"] [unique_id "apK9aDAh5Y1i2tUxg4ER2gAABfA"]
[Sat Aug 29 05:07:20.468435 2026] [autoindex:error] [pid 1028675:tid 1028752] [remote 87.58.197.202:2000] AH01276: Cannot serve directory /home3/zmymhfmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:07:20.472003 2026] [security2:error] [pid 1028675:tid 1028926] [client 20.48.160.90:51264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/llyuxaqd.php"] [unique_id "apK9aNdHPfW2QFvhmL7hmQAAAHQ"]
[Sat Aug 29 05:07:20.488339 2026] [security2:error] [pid 1028675:tid 1028885] [client 40.83.93.50:22796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-content/install.php"] [unique_id "apK9aNdHPfW2QFvhmL7hnwAAAEs"]
[Sat Aug 29 05:07:20.489854 2026] [security2:error] [pid 1028675:tid 1028870] [client 20.151.200.44:46641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/rfi.php"] [unique_id "apK9aNdHPfW2QFvhmL7hoQAAADw"]
[Sat Aug 29 05:07:20.516758 2026] [security2:error] [pid 1028675:tid 1028903] [client 68.155.159.216:65136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-content/themes/too.php"] [unique_id "apK9aNdHPfW2QFvhmL7howAAAF0"]
[Sat Aug 29 05:07:20.521145 2026] [security2:error] [pid 1028675:tid 1028892] [client 168.107.94.195:59139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9aNdHPfW2QFvhmL7hpAAAAFI"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:20.522718 2026] [security2:error] [pid 1028675:tid 1028892] [client 20.48.250.41:49031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/erty.php"] [unique_id "apK9aNdHPfW2QFvhmL7hpQAAAFI"]
[Sat Aug 29 05:07:20.546642 2026] [security2:error] [pid 1028675:tid 1028819] [client 20.48.250.41:35475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/f35.php"] [unique_id "apK9aNdHPfW2QFvhmL7hqgAAAAk"]
[Sat Aug 29 05:07:20.553510 2026] [security2:error] [pid 1028675:tid 1028873] [client 158.158.54.35:28388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/disagraeosc.php"] [unique_id "apK9aNdHPfW2QFvhmL7hrQAAAD8"]
[Sat Aug 29 05:07:20.562586 2026] [security2:error] [pid 1028675:tid 1028860] [client 20.104.49.130:60979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/sym.php"] [unique_id "apK9aNdHPfW2QFvhmL7hrgAAADI"]
[Sat Aug 29 05:07:20.563608 2026] [security2:error] [pid 1028675:tid 1028814] [client 158.158.54.35:22447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK9aNdHPfW2QFvhmL7hrwAAAAQ"]
[Sat Aug 29 05:07:20.567338 2026] [security2:error] [pid 1018003:tid 1018246] [client 68.155.159.216:50214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/bk/index.php"] [unique_id "apK9aDAh5Y1i2tUxg4ER3QAABhY"]
[Sat Aug 29 05:07:20.580044 2026] [security2:error] [pid 1018003:tid 1018159] [client 4.205.62.107:65510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/fm.php"] [unique_id "apK9aDAh5Y1i2tUxg4ER3gAABcA"]
[Sat Aug 29 05:07:20.581687 2026] [security2:error] [pid 1018003:tid 1018152] [client 158.23.147.79:35812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK9aDAh5Y1i2tUxg4ER3wAABbk"]
[Sat Aug 29 05:07:20.588506 2026] [security2:error] [pid 1028675:tid 1028818] [client 40.83.93.50:5645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-admin/options.php"] [unique_id "apK9aNdHPfW2QFvhmL7htgAAAAg"]
[Sat Aug 29 05:07:20.593609 2026] [security2:error] [pid 1028675:tid 1028904] [client 93.123.109.228:44940] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/crm/.env"] [unique_id "apK9aNdHPfW2QFvhmL7huAAAAF4"]
[Sat Aug 29 05:07:20.602048 2026] [security2:error] [pid 1028675:tid 1028840] [client 20.104.104.62:10869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/ww3.php"] [unique_id "apK9aNdHPfW2QFvhmL7huQAAAB4"]
[Sat Aug 29 05:07:20.618692 2026] [security2:error] [pid 1018003:tid 1018240] [client 93.123.109.228:44904] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/cron/.env"] [unique_id "apK9aDAh5Y1i2tUxg4ER4AAABhA"]
[Sat Aug 29 05:07:20.619200 2026] [security2:error] [pid 1028675:tid 1028824] [client 20.48.160.90:51246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/nbwxolou.php"] [unique_id "apK9aNdHPfW2QFvhmL7hugAAAA4"]
[Sat Aug 29 05:07:20.619944 2026] [security2:error] [pid 1028675:tid 1028874] [client 20.48.250.41:60695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/cc13.php"] [unique_id "apK9aNdHPfW2QFvhmL7huwAAAEA"]
[Sat Aug 29 05:07:20.635525 2026] [security2:error] [pid 1018003:tid 1018203] [client 158.23.147.79:50092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK9aDAh5Y1i2tUxg4ER4QAABew"]
[Sat Aug 29 05:07:20.636966 2026] [security2:error] [pid 1018003:tid 1018196] [client 4.205.62.107:58457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/saml.php"] [unique_id "apK9aDAh5Y1i2tUxg4ER4gAABeU"]
[Sat Aug 29 05:07:20.639011 2026] [security2:error] [pid 1028675:tid 1028927] [client 93.123.109.228:45052] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/current/.env"] [unique_id "apK9aNdHPfW2QFvhmL7hvQAAAHU"]
[Sat Aug 29 05:07:20.658208 2026] [security2:error] [pid 1028675:tid 1028866] [client 4.205.62.107:22336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/filesystems.php"] [unique_id "apK9aNdHPfW2QFvhmL7hvwAAADg"]
[Sat Aug 29 05:07:20.668012 2026] [security2:error] [pid 1028675:tid 1028925] [client 93.123.109.228:45084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/demo/.env"] [unique_id "apK9aNdHPfW2QFvhmL7hwAAAAHM"]
[Sat Aug 29 05:07:20.681159 2026] [security2:error] [pid 1028675:tid 1028922] [client 93.123.109.228:45074] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/dev/.env"] [unique_id "apK9aNdHPfW2QFvhmL7hwwAAAHA"]
[Sat Aug 29 05:07:20.690773 2026] [security2:error] [pid 1018003:tid 1018183] [client 20.48.250.41:49135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/0x.php"] [unique_id "apK9aDAh5Y1i2tUxg4ER5QAABdg"]
[Sat Aug 29 05:07:20.704393 2026] [security2:error] [pid 1018003:tid 1018262] [client 93.123.109.228:45042] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/develop/.env"] [unique_id "apK9aDAh5Y1i2tUxg4ER5wAABiY"]
[Sat Aug 29 05:07:20.704971 2026] [security2:error] [pid 1018003:tid 1018182] [client 20.48.250.41:35114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/wen.php"] [unique_id "apK9aDAh5Y1i2tUxg4ER6AAABdc"]
[Sat Aug 29 05:07:20.706604 2026] [security2:error] [pid 1018003:tid 1018256] [client 68.155.159.216:12172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK9aDAh5Y1i2tUxg4ER6QAABiA"]
[Sat Aug 29 05:07:20.719601 2026] [security2:error] [pid 1028675:tid 1028850] [client 185.104.184.230:59486] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.bjx.okj.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "apK9aNdHPfW2QFvhmL7hywAAACg"]
[Sat Aug 29 05:07:20.728864 2026] [security2:error] [pid 1028675:tid 1028926] [client 93.123.109.228:44974] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/development/.env"] [unique_id "apK9aNdHPfW2QFvhmL7hzQAAAHQ"]
[Sat Aug 29 05:07:20.731576 2026] [security2:error] [pid 1028675:tid 1028820] [client 20.196.209.81:15182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/class-wp-cmd.php"] [unique_id "apK9aNdHPfW2QFvhmL7hzgAAAAo"]
[Sat Aug 29 05:07:20.741736 2026] [security2:error] [pid 1028675:tid 1028923] [client 93.123.109.228:44858] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/developer/.env"] [unique_id "apK9aNdHPfW2QFvhmL7h0AAAAHE"]
[Sat Aug 29 05:07:20.744993 2026] [security2:error] [pid 1028675:tid 1028885] [client 20.104.104.62:10637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/sko.php"] [unique_id "apK9aNdHPfW2QFvhmL7h0QAAAEs"]
[Sat Aug 29 05:07:20.768844 2026] [security2:error] [pid 1018003:tid 1018231] [client 35.194.208.44:45026] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/@fs/home/ubuntu/.env"] [unique_id "apK9aDAh5Y1i2tUxg4ER7AAABgc"]
[Sat Aug 29 05:07:20.770147 2026] [security2:error] [pid 1028675:tid 1028811] [client 35.194.208.44:45056] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/@fs/usr/src/app/.env"] [unique_id "apK9aNdHPfW2QFvhmL7h1gAAAAE"]
[Sat Aug 29 05:07:20.771081 2026] [security2:error] [pid 1028675:tid 1028862] [client 35.194.208.44:45034] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/@fs/var/www/.env"] [unique_id "apK9aNdHPfW2QFvhmL7h2AAAADQ"]
[Sat Aug 29 05:07:20.771383 2026] [security2:error] [pid 1018003:tid 1018190] [client 35.194.208.44:45040] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/@fs/var/www/html/.env"] [unique_id "apK9aDAh5Y1i2tUxg4ER7gAABd8"]
[Sat Aug 29 05:07:20.773626 2026] [security2:error] [pid 1028675:tid 1028933] [client 158.23.147.79:30529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/images/index.php"] [unique_id "apK9aNdHPfW2QFvhmL7h2gAAAHs"]
[Sat Aug 29 05:07:20.777570 2026] [security2:error] [pid 1018003:tid 1018160] [client 20.48.250.41:58456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/aa.php"] [unique_id "apK9aDAh5Y1i2tUxg4ER8QAABcE"]
[Sat Aug 29 05:07:20.783012 2026] [security2:error] [pid 1018003:tid 1018184] [client 20.48.160.90:49481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/nsxeubyv.php"] [unique_id "apK9aDAh5Y1i2tUxg4ER8gAABdk"]
[Sat Aug 29 05:07:20.802891 2026] [security2:error] [pid 1028675:tid 1028871] [client 146.70.194.254:44276] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "modelbasenjis.com"] [uri "/cgi-sys/suspendedpage.cgi/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "apK9aNdHPfW2QFvhmL7h5AAAAD0"]
[Sat Aug 29 05:07:20.804739 2026] [security2:error] [pid 1028675:tid 1028908] [client 40.83.93.50:7466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/alfa.php"] [unique_id "apK9aNdHPfW2QFvhmL7h5QAAAGI"]
[Sat Aug 29 05:07:20.815197 2026] [security2:error] [pid 1018003:tid 1018157] [client 158.23.147.79:25462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-admin/network/index.php"] [unique_id "apK9aDAh5Y1i2tUxg4ER9wAABb4"]
[Sat Aug 29 05:07:20.827187 2026] [security2:error] [pid 1028675:tid 1028846] [client 20.203.141.11:12480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/.trash7206/index.php"] [unique_id "apK9aNdHPfW2QFvhmL7h6gAAACQ"]
[Sat Aug 29 05:07:20.844072 2026] [security2:error] [pid 1028675:tid 1028851] [client 20.48.250.41:35131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/inc.php"] [unique_id "apK9aNdHPfW2QFvhmL7h6wAAACk"]
[Sat Aug 29 05:07:20.845918 2026] [security2:error] [pid 1028675:tid 1028894] [client 20.48.250.41:49106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/66.php"] [unique_id "apK9aNdHPfW2QFvhmL7h7QAAAFQ"]
[Sat Aug 29 05:07:20.853781 2026] [security2:error] [pid 1018003:tid 1018156] [client 20.151.200.44:47411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/tajj.php"] [unique_id "apK9aDAh5Y1i2tUxg4ER-QAABb0"]
[Sat Aug 29 05:07:20.863593 2026] [security2:error] [pid 1018003:tid 1018187] [client 20.203.141.11:24065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/config.php"] [unique_id "apK9aDAh5Y1i2tUxg4ER-gAABdw"]
[Sat Aug 29 05:07:20.864398 2026] [security2:error] [pid 1018003:tid 1018270] [client 52.139.37.240:14681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK9aDAh5Y1i2tUxg4ER-wAABi4"]
[Sat Aug 29 05:07:20.901861 2026] [security2:error] [pid 1028675:tid 1028879] [client 168.107.94.195:59448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9aNdHPfW2QFvhmL7h9gAAAEU"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:20.902014 2026] [security2:error] [pid 1028675:tid 1028911] [client 93.123.109.228:44916] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/erp/.env"] [unique_id "apK9aNdHPfW2QFvhmL7h9QAAAGU"]
[Sat Aug 29 05:07:20.903377 2026] [security2:error] [pid 1028675:tid 1028841] [client 20.104.104.62:10574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/zoz.php"] [unique_id "apK9aNdHPfW2QFvhmL7h9wAAAB8"]
[Sat Aug 29 05:07:20.932838 2026] [security2:error] [pid 1028675:tid 1028928] [client 93.123.109.228:44940] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/etc/apache2/apache2.conf"] [unique_id "apK9aNdHPfW2QFvhmL7h_gAAAHY"]
[Sat Aug 29 05:07:20.933958 2026] [security2:error] [pid 1028675:tid 1028826] [client 20.48.160.90:51681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/zfqipfss.php"] [unique_id "apK9aNdHPfW2QFvhmL7iAAAAABA"]
[Sat Aug 29 05:07:20.936887 2026] [security2:error] [pid 1028675:tid 1028876] [client 20.48.250.41:62489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/s1.php"] [unique_id "apK9aNdHPfW2QFvhmL7iAQAAAEI"]
[Sat Aug 29 05:07:20.938624 2026] [security2:error] [pid 1028675:tid 1028925] [client 158.23.147.79:48139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-blog-header.php"] [unique_id "apK9aNdHPfW2QFvhmL7iAgAAAHM"]
[Sat Aug 29 05:07:20.938886 2026] [security2:error] [pid 1028675:tid 1028839] [client 57.141.14.32:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/page/19/"] [unique_id "apK9aNdHPfW2QFvhmL7h_AAAAB0"]
[Sat Aug 29 05:07:20.945438 2026] [security2:error] [pid 1018003:tid 1018207] [client 93.123.109.228:44822] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/etc/boto.cfg"] [unique_id "apK9aDAh5Y1i2tUxg4ER_gAABfA"]
[Sat Aug 29 05:07:20.947831 2026] [security2:error] [pid 1028675:tid 1028890] [client 93.123.109.228:44962] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/fe/.env"] [unique_id "apK9aNdHPfW2QFvhmL7iAwAAAFA"]
[Sat Aug 29 05:07:20.971970 2026] [core:error] [pid 1028675:tid 1028856] [client 40.83.93.50:20834] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:20.971988 2026] [core:error] [pid 1028675:tid 1028856] [client 40.83.93.50:20834] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:20.983002 2026] [security2:error] [pid 1028675:tid 1028821] [client 20.197.61.180:13064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/config.php"] [unique_id "apK9aNdHPfW2QFvhmL7iCAAAAAs"]
[Sat Aug 29 05:07:20.987218 2026] [security2:error] [pid 1028675:tid 1028778] [remote 52.167.144.136:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantsfans.net"] [uri "/message_board/index.php"] [unique_id "apK9aNdHPfW2QFvhmL7iCQAAR2E"]
[Sat Aug 29 05:07:20.992785 2026] [security2:error] [pid 1028675:tid 1028878] [client 20.48.250.41:35077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/6bcwiqwj.php"] [unique_id "apK9aNdHPfW2QFvhmL7iCwAAAEQ"]
[Sat Aug 29 05:07:20.992948 2026] [security2:error] [pid 1028675:tid 1028889] [client 192.145.125.70:43710] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "zbv.tvp.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "apK9aNdHPfW2QFvhmL7iDAAAAE8"]
[Sat Aug 29 05:07:21.007911 2026] [security2:error] [pid 1028675:tid 1028884] [client 158.158.54.35:16128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-logs.php"] [unique_id "apK9addHPfW2QFvhmL7iDgAAAEo"]
[Sat Aug 29 05:07:21.018139 2026] [security2:error] [pid 1028675:tid 1028836] [client 93.123.109.228:44930] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/front/.env"] [unique_id "apK9addHPfW2QFvhmL7iDwAAABo"]
[Sat Aug 29 05:07:21.020887 2026] [security2:error] [pid 1028675:tid 1028836] [client 20.104.104.62:20820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/Unknown45.php"] [unique_id "apK9addHPfW2QFvhmL7iEQAAABo"]
[Sat Aug 29 05:07:21.023930 2026] [security2:error] [pid 1028675:tid 1028885] [client 93.123.109.228:45074] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/frontend/.env"] [unique_id "apK9addHPfW2QFvhmL7iEgAAAEs"]
[Sat Aug 29 05:07:21.036269 2026] [security2:error] [pid 1028675:tid 1028862] [client 20.48.250.41:49138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/f35.php"] [unique_id "apK9addHPfW2QFvhmL7iFQAAADQ"]
[Sat Aug 29 05:07:21.042500 2026] [security2:error] [pid 1018003:tid 1018217] [client 52.139.37.240:32758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.plumplumscheese.com"] [uri "/flower.php"] [unique_id "apK9aTAh5Y1i2tUxg4ESAwAABfo"]
[Sat Aug 29 05:07:21.061445 2026] [security2:error] [pid 1028675:tid 1028843] [client 40.83.93.50:24514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-admin/panel.php"] [unique_id "apK9addHPfW2QFvhmL7iGgAAACE"]
[Sat Aug 29 05:07:21.063514 2026] [security2:error] [pid 1028675:tid 1028921] [client 52.139.37.240:14674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK9addHPfW2QFvhmL7iGwAAAG8"]
[Sat Aug 29 05:07:21.065827 2026] [security2:error] [pid 1028675:tid 1028877] [client 20.48.160.90:49447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "highqualitytea.com"] [uri "/zrjuyoos.php"] [unique_id "apK9addHPfW2QFvhmL7iHAAAAEM"]
[Sat Aug 29 05:07:21.068538 2026] [security2:error] [pid 1028675:tid 1028860] [client 20.48.250.41:59360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/0byte.php"] [unique_id "apK9addHPfW2QFvhmL7iHQAAADI"]
[Sat Aug 29 05:07:21.070656 2026] [security2:error] [pid 1018003:tid 1018250] [client 158.158.54.35:16831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-admin/index.php"] [unique_id "apK9aTAh5Y1i2tUxg4ESBAAABho"]
[Sat Aug 29 05:07:21.071139 2026] [security2:error] [pid 1028675:tid 1028814] [client 4.205.62.107:53254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/routes.php"] [unique_id "apK9addHPfW2QFvhmL7iHwAAAAQ"]
[Sat Aug 29 05:07:21.073234 2026] [security2:error] [pid 1028675:tid 1028814] [client 158.23.147.79:26590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/dropdown.php"] [unique_id "apK9addHPfW2QFvhmL7iIQAAAAQ"]
[Sat Aug 29 05:07:21.087635 2026] [security2:error] [pid 1028675:tid 1028909] [client 20.151.200.44:46646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/grsiuk.php"] [unique_id "apK9addHPfW2QFvhmL7iJQAAAGM"]
[Sat Aug 29 05:07:21.093351 2026] [security2:error] [pid 1028675:tid 1028837] [client 127.0.0.1:40528] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK9aNdHPfW2QFvhmL7h-gAAABs"]
[Sat Aug 29 05:07:21.093623 2026] [security2:error] [pid 1028675:tid 1028914] [client 35.194.208.44:45056] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/@fs/app/aws-exports.js"] [unique_id "apK9aNdHPfW2QFvhmL7h-AAAAGg"]
[Sat Aug 29 05:07:21.129123 2026] [security2:error] [pid 1018003:tid 1018271] [client 93.123.109.228:45128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/info.php"] [unique_id "apK9aTAh5Y1i2tUxg4ESBwAABi8"]
[Sat Aug 29 05:07:21.129392 2026] [security2:error] [pid 1018003:tid 1018175] [client 93.123.109.228:44904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/infophp.php"] [unique_id "apK9aTAh5Y1i2tUxg4ESBgAABdA"]
[Sat Aug 29 05:07:21.136445 2026] [security2:error] [pid 1028675:tid 1028915] [client 20.48.250.41:35085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/easy.php"] [unique_id "apK9addHPfW2QFvhmL7iLAAAAGk"]
[Sat Aug 29 05:07:21.155683 2026] [security2:error] [pid 1028675:tid 1028823] [client 20.196.209.81:11319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/disagreed.php"] [unique_id "apK9addHPfW2QFvhmL7iLQAAAA0"]
[Sat Aug 29 05:07:21.156031 2026] [security2:error] [pid 1028675:tid 1028826] [client 20.104.49.130:30078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/002.php"] [unique_id "apK9addHPfW2QFvhmL7iLwAAABA"]
[Sat Aug 29 05:07:21.156079 2026] [security2:error] [pid 1028675:tid 1028876] [client 93.123.109.228:45064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/infos.php"] [unique_id "apK9addHPfW2QFvhmL7iLgAAAEI"]
[Sat Aug 29 05:07:21.174952 2026] [security2:error] [pid 1018003:tid 1018258] [client 20.48.250.41:49109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/wen.php"] [unique_id "apK9aTAh5Y1i2tUxg4ESCgAABiI"]
[Sat Aug 29 05:07:21.176755 2026] [security2:error] [pid 1028675:tid 1028929] [client 93.123.109.228:44930] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/lms/.env"] [unique_id "apK9addHPfW2QFvhmL7iMQAAAHc"]
[Sat Aug 29 05:07:21.187262 2026] [security2:error] [pid 1028675:tid 1028890] [client 93.123.109.228:44962] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/laravel/.env"] [unique_id "apK9addHPfW2QFvhmL7iMwAAAFA"]
[Sat Aug 29 05:07:21.190437 2026] [security2:error] [pid 1028675:tid 1028887] [client 68.155.159.216:6116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK9addHPfW2QFvhmL7iNAAAAE0"]
[Sat Aug 29 05:07:21.209453 2026] [http2:warn] [pid 1018003:tid 1018272] [client 57.141.14.67:61602] h2_stream(1018003-14-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:07:21.228217 2026] [security2:error] [pid 1018003:tid 1018182] [client 20.48.250.41:59305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/xr.php"] [unique_id "apK9aTAh5Y1i2tUxg4ESDQAABdc"]
[Sat Aug 29 05:07:21.229787 2026] [security2:error] [pid 1028675:tid 1028937] [client 93.123.109.228:45086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/local/.env"] [unique_id "apK9addHPfW2QFvhmL7iOAAAAH8"]
[Sat Aug 29 05:07:21.247205 2026] [security2:error] [pid 1028675:tid 1028910] [client 68.155.159.216:33778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/file5.php"] [unique_id "apK9addHPfW2QFvhmL7iPAAAAGQ"]
[Sat Aug 29 05:07:21.248274 2026] [security2:error] [pid 1028675:tid 1028850] [client 93.123.109.228:44916] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/market/.env"] [unique_id "apK9addHPfW2QFvhmL7iOwAAACg"]
[Sat Aug 29 05:07:21.258523 2026] [security2:error] [pid 1028675:tid 1028825] [client 93.123.109.228:44974] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/marketing/.env"] [unique_id "apK9addHPfW2QFvhmL7iPQAAAA8"]
[Sat Aug 29 05:07:21.269929 2026] [security2:error] [pid 1028675:tid 1028931] [client 52.139.37.240:14673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/zafir1.php"] [unique_id "apK9addHPfW2QFvhmL7iQAAAAHk"]
[Sat Aug 29 05:07:21.285610 2026] [security2:error] [pid 1028675:tid 1028920] [client 40.83.93.50:7989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/feed-rss2-queue.php"] [unique_id "apK9addHPfW2QFvhmL7iQgAAAG4"]
[Sat Aug 29 05:07:21.294389 2026] [security2:error] [pid 1028675:tid 1028811] [client 93.123.109.228:45052] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/media/.env"] [unique_id "apK9addHPfW2QFvhmL7iQwAAAAE"]
[Sat Aug 29 05:07:21.299306 2026] [security2:error] [pid 1018003:tid 1018252] [client 20.203.141.11:11266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wk/index.php"] [unique_id "apK9aTAh5Y1i2tUxg4ESDgAABhw"]
[Sat Aug 29 05:07:21.301548 2026] [security2:error] [pid 1018003:tid 1018190] [client 68.155.159.216:2040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/.well-known/index.php"] [unique_id "apK9aTAh5Y1i2tUxg4ESDwAABd8"]
[Sat Aug 29 05:07:21.302650 2026] [security2:error] [pid 1018003:tid 1018277] [client 168.107.94.195:59860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9aTAh5Y1i2tUxg4ESEAAABjU"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:21.308112 2026] [security2:error] [pid 1028675:tid 1028858] [client 20.48.250.41:49039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/inc.php"] [unique_id "apK9addHPfW2QFvhmL7iRgAAADA"]
[Sat Aug 29 05:07:21.345686 2026] [security2:error] [pid 1018003:tid 1018238] [client 93.123.109.228:44822] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/new/.env"] [unique_id "apK9aTAh5Y1i2tUxg4ESEQAABg4"]
[Sat Aug 29 05:07:21.347233 2026] [security2:error] [pid 1028675:tid 1028888] [client 93.123.109.228:45178] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/node-api/.env"] [unique_id "apK9addHPfW2QFvhmL7iSwAAAE4"]
[Sat Aug 29 05:07:21.354599 2026] [security2:error] [pid 1028675:tid 1028843] [client 20.104.49.130:48586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/wp-css.php"] [unique_id "apK9addHPfW2QFvhmL7iTAAAACE"]
[Sat Aug 29 05:07:21.365251 2026] [security2:error] [pid 1028675:tid 1028846] [client 93.123.109.228:45074] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/node/.env"] [unique_id "apK9addHPfW2QFvhmL7iTQAAACQ"]
[Sat Aug 29 05:07:21.366080 2026] [security2:error] [pid 1018003:tid 1018191] [client 20.203.141.11:1279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK9aTAh5Y1i2tUxg4ESEgAABeA"]
[Sat Aug 29 05:07:21.368587 2026] [security2:error] [pid 1028675:tid 1028921] [client 20.48.250.41:59275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/h02ugyh.php"] [unique_id "apK9addHPfW2QFvhmL7iTgAAAG8"]
[Sat Aug 29 05:07:21.372466 2026] [security2:error] [pid 1028675:tid 1028877] [client 93.123.109.228:44830] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/node/api/.env"] [unique_id "apK9addHPfW2QFvhmL7iTwAAAEM"]
[Sat Aug 29 05:07:21.387465 2026] [security2:error] [pid 1018003:tid 1018157] [client 93.123.109.228:45042] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/node/backend/.env"] [unique_id "apK9aTAh5Y1i2tUxg4ESEwAABb4"]
[Sat Aug 29 05:07:21.391383 2026] [security2:error] [pid 1028675:tid 1028894] [client 93.123.109.228:45086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/nodeapi/.env"] [unique_id "apK9addHPfW2QFvhmL7iUgAAAFQ"]
[Sat Aug 29 05:07:21.391663 2026] [security2:error] [pid 1028675:tid 1028898] [client 93.123.109.228:45084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/nodeweb/.env"] [unique_id "apK9addHPfW2QFvhmL7iUQAAAFg"]
[Sat Aug 29 05:07:21.394702 2026] [security2:error] [pid 1028675:tid 1028930] [client 20.48.250.41:35100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/fresh3.php"] [unique_id "apK9addHPfW2QFvhmL7iUwAAAHg"]
[Sat Aug 29 05:07:21.420428 2026] [security2:error] [pid 1028675:tid 1028914] [client 93.123.109.228:44974] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/old/.env"] [unique_id "apK9addHPfW2QFvhmL7iWgAAAGg"]
[Sat Aug 29 05:07:21.421219 2026] [security2:error] [pid 1028675:tid 1028883] [client 4.205.62.107:21608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/ms-edit.php"] [unique_id "apK9addHPfW2QFvhmL7iWwAAAEk"]
[Sat Aug 29 05:07:21.436404 2026] [security2:error] [pid 1028675:tid 1028842] [client 68.155.159.216:51511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK9addHPfW2QFvhmL7iXwAAACA"]
[Sat Aug 29 05:07:21.443694 2026] [security2:error] [pid 1028675:tid 1028924] [client 20.48.250.41:49111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/6bcwiqwj.php"] [unique_id "apK9addHPfW2QFvhmL7iZQAAAHI"]
[Sat Aug 29 05:07:21.446191 2026] [security2:error] [pid 1028675:tid 1028924] [client 93.123.109.228:45052] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/opt/.env"] [unique_id "apK9addHPfW2QFvhmL7iZgAAAHI"]
[Sat Aug 29 05:07:21.450846 2026] [security2:error] [pid 1028675:tid 1028885] [client 40.83.93.50:20834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK9addHPfW2QFvhmL7iZwAAAEs"]
[Sat Aug 29 05:07:21.453844 2026] [security2:error] [pid 1028675:tid 1028913] [client 158.158.54.35:29633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-admin/css/about.php"] [unique_id "apK9addHPfW2QFvhmL7iaAAAAGc"]
[Sat Aug 29 05:07:21.468470 2026] [security2:error] [pid 1028675:tid 1028897] [client 68.155.159.216:38580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/radio.php"] [unique_id "apK9addHPfW2QFvhmL7iagAAAFc"]
[Sat Aug 29 05:07:21.481425 2026] [security2:error] [pid 1028675:tid 1028818] [client 52.139.37.240:14675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/abc.php"] [unique_id "apK9addHPfW2QFvhmL7ibgAAAAg"]
[Sat Aug 29 05:07:21.494905 2026] [security2:error] [pid 1028675:tid 1028826] [client 68.155.159.216:49158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9addHPfW2QFvhmL7icQAAABA"]
[Sat Aug 29 05:07:21.526312 2026] [security2:error] [pid 1028675:tid 1028856] [client 20.48.250.41:35489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/bgymj.php"] [unique_id "apK9addHPfW2QFvhmL7iewAAAC4"]
[Sat Aug 29 05:07:21.526949 2026] [security2:error] [pid 1028675:tid 1028912] [client 158.158.54.35:16782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/radio.php"] [unique_id "apK9addHPfW2QFvhmL7ifAAAAGY"]
[Sat Aug 29 05:07:21.535592 2026] [security2:error] [pid 1018003:tid 1018156] [client 20.48.250.41:60798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/xxw.php"] [unique_id "apK9aTAh5Y1i2tUxg4ESFwAABb0"]
[Sat Aug 29 05:07:21.546331 2026] [security2:error] [pid 1028675:tid 1028880] [client 4.205.62.107:9014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/f35.php"] [unique_id "apK9addHPfW2QFvhmL7ifwAAAEY"]
[Sat Aug 29 05:07:21.550364 2026] [security2:error] [pid 1028675:tid 1028902] [client 40.83.93.50:5232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-admin/pk.php"] [unique_id "apK9addHPfW2QFvhmL7igAAAAFw"]
[Sat Aug 29 05:07:21.550400 2026] [security2:error] [pid 1028675:tid 1028819] [client 68.155.159.216:51878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK9addHPfW2QFvhmL7igQAAAAk"]
[Sat Aug 29 05:07:21.563758 2026] [security2:error] [pid 1028675:tid 1028849] [client 20.196.209.81:2015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/class_api.php"] [unique_id "apK9addHPfW2QFvhmL7ihQAAACc"]
[Sat Aug 29 05:07:21.569729 2026] [security2:error] [pid 1028675:tid 1028937] [client 20.48.250.41:49123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/easy.php"] [unique_id "apK9addHPfW2QFvhmL7iiAAAAH8"]
[Sat Aug 29 05:07:21.593050 2026] [security2:error] [pid 1018003:tid 1018188] [client 192.145.125.70:43718] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "zbv.tvp.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "apK9aTAh5Y1i2tUxg4ESGAAABd0"]
[Sat Aug 29 05:07:21.626237 2026] [security2:error] [pid 1028675:tid 1028857] [client 68.155.159.216:65054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/radio.php"] [unique_id "apK9addHPfW2QFvhmL7ikgAAAC8"]
[Sat Aug 29 05:07:21.657409 2026] [security2:error] [pid 1018003:tid 1018230] [client 20.48.250.41:35115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/ws69.php"] [unique_id "apK9aTAh5Y1i2tUxg4ESGQAABgY"]
[Sat Aug 29 05:07:21.670107 2026] [security2:error] [pid 1018003:tid 1018216] [client 20.48.250.41:59273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/bolt.php"] [unique_id "apK9aTAh5Y1i2tUxg4ESGgAABfk"]
[Sat Aug 29 05:07:21.680391 2026] [security2:error] [pid 1028675:tid 1028836] [client 52.139.37.240:14972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/c1.php"] [unique_id "apK9addHPfW2QFvhmL7ilQAAABo"]
[Sat Aug 29 05:07:21.682918 2026] [security2:error] [pid 1018003:tid 1018236] [client 68.155.159.216:50203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.bistrobrew.com"] [uri "/first.php"] [unique_id "apK9aTAh5Y1i2tUxg4ESHAAABgw"]
[Sat Aug 29 05:07:21.687567 2026] [security2:error] [pid 1028675:tid 1028843] [client 93.123.109.228:45178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/php.php"] [unique_id "apK9addHPfW2QFvhmL7ilgAAACE"]
[Sat Aug 29 05:07:21.687760 2026] [security2:error] [pid 1028675:tid 1028830] [client 93.123.109.228:44930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/php-info.php"] [unique_id "apK9addHPfW2QFvhmL7ilwAAABQ"]
[Sat Aug 29 05:07:21.695095 2026] [security2:error] [pid 1028675:tid 1028921] [client 158.23.147.79:35839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-login.php"] [unique_id "apK9addHPfW2QFvhmL7imAAAAG8"]
[Sat Aug 29 05:07:21.697693 2026] [security2:error] [pid 1028675:tid 1028841] [client 20.197.61.180:7883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/22.php"] [unique_id "apK9addHPfW2QFvhmL7imgAAAB8"]
[Sat Aug 29 05:07:21.698542 2026] [security2:error] [pid 1028675:tid 1028877] [client 168.107.94.195:60305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9addHPfW2QFvhmL7imwAAAEM"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:21.703275 2026] [security2:error] [pid 1018003:tid 1018224] [client 93.123.109.228:45042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/php_info.php"] [unique_id "apK9aTAh5Y1i2tUxg4ESHQAABgE"]
[Sat Aug 29 05:07:21.713854 2026] [security2:error] [pid 1018003:tid 1018161] [client 4.205.62.107:65499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/tinyfilemanager.php"] [unique_id "apK9aTAh5Y1i2tUxg4ESHgAABcI"]
[Sat Aug 29 05:07:21.719221 2026] [security2:error] [pid 1028675:tid 1028909] [client 93.123.109.228:45180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/phpinfo.php"] [unique_id "apK9addHPfW2QFvhmL7inQAAAGM"]
[Sat Aug 29 05:07:21.721883 2026] [security2:error] [pid 1028675:tid 1028926] [client 158.23.147.79:17452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK9addHPfW2QFvhmL7ingAAAHQ"]
[Sat Aug 29 05:07:21.730380 2026] [security2:error] [pid 1028675:tid 1028828] [client 20.48.250.41:49148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/fresh3.php"] [unique_id "apK9addHPfW2QFvhmL7ioQAAABI"]
[Sat Aug 29 05:07:21.749105 2026] [security2:error] [pid 1028675:tid 1028935] [client 93.123.109.228:45086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/portal/.env"] [unique_id "apK9addHPfW2QFvhmL7ipQAAAH0"]
[Sat Aug 29 05:07:21.754977 2026] [security2:error] [pid 1028675:tid 1028924] [client 158.23.147.79:50068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-content/cong.php"] [unique_id "apK9addHPfW2QFvhmL7iqAAAAHI"]
[Sat Aug 29 05:07:21.766801 2026] [security2:error] [pid 1018003:tid 1018270] [client 20.203.141.11:13622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/admin.php"] [unique_id "apK9aTAh5Y1i2tUxg4ESIAAABi4"]
[Sat Aug 29 05:07:21.774603 2026] [security2:error] [pid 1028675:tid 1028818] [client 4.205.62.107:58445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/aws_settings.php"] [unique_id "apK9addHPfW2QFvhmL7irAAAAAg"]
[Sat Aug 29 05:07:21.789273 2026] [security2:error] [pid 1028675:tid 1028927] [client 20.48.250.41:35134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/ccs.php"] [unique_id "apK9addHPfW2QFvhmL7irgAAAHU"]
[Sat Aug 29 05:07:21.791412 2026] [security2:error] [pid 1028675:tid 1028823] [client 20.151.200.44:47361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/ahy66.php"] [unique_id "apK9addHPfW2QFvhmL7irwAAAA0"]
[Sat Aug 29 05:07:21.799186 2026] [security2:error] [pid 1028675:tid 1028925] [client 20.48.250.41:59279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/rtx.php"] [unique_id "apK9addHPfW2QFvhmL7isAAAAHM"]
[Sat Aug 29 05:07:21.811931 2026] [security2:error] [pid 1028675:tid 1028856] [client 93.123.109.228:44916] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/prod/.env"] [unique_id "apK9addHPfW2QFvhmL7isgAAAC4"]
[Sat Aug 29 05:07:21.814393 2026] [security2:error] [pid 1018003:tid 1018233] [client 4.205.62.107:22424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/server_info.php"] [unique_id "apK9aTAh5Y1i2tUxg4ESIgAABgk"]
[Sat Aug 29 05:07:21.817411 2026] [security2:error] [pid 1028675:tid 1028912] [client 93.123.109.228:44940] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/product/.env"] [unique_id "apK9addHPfW2QFvhmL7iswAAAGY"]
[Sat Aug 29 05:07:21.824003 2026] [security2:error] [pid 1028675:tid 1028839] [client 68.155.159.216:12186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK9addHPfW2QFvhmL7itAAAAB0"]
[Sat Aug 29 05:07:21.830191 2026] [security2:error] [pid 1028675:tid 1028816] [client 93.123.109.228:45052] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/production/.env"] [unique_id "apK9addHPfW2QFvhmL7itQAAAAY"]
[Sat Aug 29 05:07:21.846414 2026] [security2:error] [pid 1028675:tid 1028937] [client 93.123.109.228:45164] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/project/.env"] [unique_id "apK9addHPfW2QFvhmL7iuQAAAH8"]
[Sat Aug 29 05:07:21.855867 2026] [security2:error] [pid 1028675:tid 1028861] [client 93.123.109.228:45200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/public-api/.env"] [unique_id "apK9addHPfW2QFvhmL7iugAAADM"]
[Sat Aug 29 05:07:21.870014 2026] [security2:error] [pid 1028675:tid 1028825] [client 93.123.109.228:45162] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/public/.env"] [unique_id "apK9addHPfW2QFvhmL7ivgAAAA8"]
[Sat Aug 29 05:07:21.870738 2026] [security2:error] [pid 1028675:tid 1028931] [client 93.123.109.228:45074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/public/phpinfo.php"] [unique_id "apK9addHPfW2QFvhmL7ivwAAAHk"]
[Sat Aug 29 05:07:21.874059 2026] [security2:error] [pid 1028675:tid 1028811] [client 158.23.147.79:30626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK9addHPfW2QFvhmL7iwgAAAAE"]
[Sat Aug 29 05:07:21.874727 2026] [security2:error] [pid 1028675:tid 1028822] [client 52.139.37.240:14669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/index.php/feed/atom/"] [unique_id "apK9addHPfW2QFvhmL7iwwAAAAw"]
[Sat Aug 29 05:07:21.878302 2026] [security2:error] [pid 1018003:tid 1018185] [client 103.168.67.159:49990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 159.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "naturalkneads.com"] [uri "/wp/index.php"] [unique_id "apK9aTAh5Y1i2tUxg4ESJAAABdo"], referer: https://naturalkneads.com/wp/wp-admin/
[Sat Aug 29 05:07:21.887591 2026] [security2:error] [pid 1028675:tid 1028871] [client 20.48.250.41:49097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/bgymj.php"] [unique_id "apK9addHPfW2QFvhmL7ixAAAAD0"]
[Sat Aug 29 05:07:21.890746 2026] [security2:error] [pid 1028675:tid 1028866] [client 93.123.109.228:44830] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/public_html/.env"] [unique_id "apK9addHPfW2QFvhmL7ixQAAADg"]
[Sat Aug 29 05:07:21.900424 2026] [security2:error] [pid 1028675:tid 1028845] [client 40.83.93.50:7531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/inputs.php"] [unique_id "apK9addHPfW2QFvhmL7ixgAAACM"]
[Sat Aug 29 05:07:21.902474 2026] [security2:error] [pid 1028675:tid 1028911] [client 195.178.110.247:5386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lifeandmemorycenter.com"] [uri "/index.php"] [unique_id "apK9addHPfW2QFvhmL7ixwAAAGU"]
[Sat Aug 29 05:07:21.915125 2026] [security2:error] [pid 1028675:tid 1028913] [client 158.158.54.35:16137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/system_log.php"] [unique_id "apK9addHPfW2QFvhmL7iyQAAAGc"]
[Sat Aug 29 05:07:21.915771 2026] [security2:error] [pid 1028675:tid 1028814] [client 20.203.141.11:24065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-good.php"] [unique_id "apK9addHPfW2QFvhmL7iygAAAAQ"]
[Sat Aug 29 05:07:21.929618 2026] [security2:error] [pid 1028675:tid 1028900] [client 20.48.250.41:35102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/mar.php"] [unique_id "apK9addHPfW2QFvhmL7izQAAAFo"]
[Sat Aug 29 05:07:21.930293 2026] [security2:error] [pid 1028675:tid 1028895] [client 93.123.109.228:45084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/qa/.env"] [unique_id "apK9addHPfW2QFvhmL7iywAAAFU"]
[Sat Aug 29 05:07:21.933609 2026] [security2:error] [pid 1028675:tid 1028884] [client 20.48.250.41:60737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/ckk.php"] [unique_id "apK9addHPfW2QFvhmL7izgAAAEo"]
[Sat Aug 29 05:07:21.934322 2026] [security2:error] [pid 1028675:tid 1028915] [client 40.83.93.50:20828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-content/languages/chosen.php"] [unique_id "apK9addHPfW2QFvhmL7izwAAAGk"]
[Sat Aug 29 05:07:21.952611 2026] [security2:error] [pid 1028675:tid 1028836] [client 68.155.159.216:24404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-content/x/index.php"] [unique_id "apK9addHPfW2QFvhmL7i0QAAABo"]
[Sat Aug 29 05:07:21.983244 2026] [security2:error] [pid 1028675:tid 1028887] [client 158.158.54.35:7233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/item.php"] [unique_id "apK9addHPfW2QFvhmL7i1gAAAE0"]
[Sat Aug 29 05:07:21.992745 2026] [security2:error] [pid 1028675:tid 1028846] [client 158.23.147.79:25509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK9addHPfW2QFvhmL7i2AAAACQ"]
[Sat Aug 29 05:07:22.006246 2026] [security2:error] [pid 1028675:tid 1028853] [client 20.196.209.81:11286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/aksinet.php"] [unique_id "apK9atdHPfW2QFvhmL7i3AAAACs"]
[Sat Aug 29 05:07:22.028575 2026] [security2:error] [pid 1028675:tid 1028828] [client 20.48.250.41:49093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/ws69.php"] [unique_id "apK9atdHPfW2QFvhmL7i4AAAABI"]
[Sat Aug 29 05:07:22.032309 2026] [security2:error] [pid 1018003:tid 1018152] [client 40.83.93.50:24523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-admin/plugin-install.php"] [unique_id "apK9ajAh5Y1i2tUxg4ESJwAABbk"]
[Sat Aug 29 05:07:22.035427 2026] [security2:error] [pid 1028675:tid 1028883] [client 158.23.147.79:48132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK9atdHPfW2QFvhmL7i4wAAAEk"]
[Sat Aug 29 05:07:22.071202 2026] [security2:error] [pid 1028675:tid 1028897] [client 158.23.147.79:61595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK9atdHPfW2QFvhmL7i5wAAAFc"]
[Sat Aug 29 05:07:22.074772 2026] [security2:error] [pid 1028675:tid 1028926] [client 52.139.37.240:14661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/root.php"] [unique_id "apK9atdHPfW2QFvhmL7i6AAAAHQ"]
[Sat Aug 29 05:07:22.077692 2026] [security2:error] [pid 1028675:tid 1028881] [client 195.178.110.247:48656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lifeandmemorycenter.com"] [uri "/index.php"] [unique_id "apK9atdHPfW2QFvhmL7i6QAAAEc"]
[Sat Aug 29 05:07:22.078928 2026] [security2:error] [pid 1028675:tid 1028879] [client 168.107.94.195:60673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9atdHPfW2QFvhmL7i6gAAAEU"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:22.087872 2026] [security2:error] [pid 1028675:tid 1028925] [client 20.48.250.41:62560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ochentayuno.com"] [uri "/R57.php"] [unique_id "apK9atdHPfW2QFvhmL7i7gAAAHM"]
[Sat Aug 29 05:07:22.113701 2026] [security2:error] [pid 1028675:tid 1028816] [client 20.48.250.41:35120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/ccu.php"] [unique_id "apK9atdHPfW2QFvhmL7i9AAAAAY"]
[Sat Aug 29 05:07:22.121672 2026] [security2:error] [pid 1028675:tid 1028928] [client 146.70.194.254:44288] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "modelbasenjis.com"] [uri "/cgi-sys/suspendedpage.cgi/website/wp-includes/wlwmanifest.xml"] [unique_id "apK9atdHPfW2QFvhmL7i9QAAAHY"]
[Sat Aug 29 05:07:22.165303 2026] [security2:error] [pid 1018003:tid 1018265] [client 20.48.250.41:49125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/ccs.php"] [unique_id "apK9ajAh5Y1i2tUxg4ESLQAABik"]
[Sat Aug 29 05:07:22.178467 2026] [security2:error] [pid 1028675:tid 1028825] [client 158.23.147.79:26456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/sad/about.php"] [unique_id "apK9atdHPfW2QFvhmL7jAAAAAA8"]
[Sat Aug 29 05:07:22.192735 2026] [security2:error] [pid 1028675:tid 1028815] [client 20.151.200.44:46539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/gaje.php"] [unique_id "apK9atdHPfW2QFvhmL7jCwAAAAU"]
[Sat Aug 29 05:07:22.197158 2026] [security2:error] [pid 1028675:tid 1028862] [client 192.145.125.70:43732] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "zbv.tvp.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "apK9atdHPfW2QFvhmL7jDgAAADQ"]
[Sat Aug 29 05:07:22.212983 2026] [security2:error] [pid 1028675:tid 1028929] [client 4.205.62.107:53298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/aww.php"] [unique_id "apK9atdHPfW2QFvhmL7jEQAAAHc"]
[Sat Aug 29 05:07:22.234118 2026] [security2:error] [pid 1028675:tid 1028818] [client 20.203.141.11:38617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/php8.php"] [unique_id "apK9atdHPfW2QFvhmL7jFQAAAAg"]
[Sat Aug 29 05:07:22.262459 2026] [security2:error] [pid 1028675:tid 1028847] [client 20.48.250.41:35093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/ak.php"] [unique_id "apK9atdHPfW2QFvhmL7jGgAAACU"]
[Sat Aug 29 05:07:22.269075 2026] [security2:error] [pid 1028675:tid 1028915] [client 93.123.109.228:45084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/s3/.env.bak"] [unique_id "apK9atdHPfW2QFvhmL7jHQAAAGk"]
[Sat Aug 29 05:07:22.274449 2026] [security2:error] [pid 1028675:tid 1028811] [client 52.139.37.240:14626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/shell.php"] [unique_id "apK9atdHPfW2QFvhmL7jHwAAAAE"]
[Sat Aug 29 05:07:22.301901 2026] [security2:error] [pid 1018003:tid 1018160] [client 20.48.250.41:49092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/mar.php"] [unique_id "apK9ajAh5Y1i2tUxg4ESMwAABcE"]
[Sat Aug 29 05:07:22.327801 2026] [security2:error] [pid 1028675:tid 1028875] [client 158.23.147.79:30613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK9atdHPfW2QFvhmL7jJQAAAEE"]
[Sat Aug 29 05:07:22.333806 2026] [security2:error] [pid 1018003:tid 1018219] [client 68.155.159.216:65071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-content/radio.php"] [unique_id "apK9ajAh5Y1i2tUxg4ESNQAABfw"]
[Sat Aug 29 05:07:22.340861 2026] [core:error] [pid 1028675:tid 1028898] [client 195.178.110.60:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:22.340879 2026] [core:error] [pid 1028675:tid 1028898] [client 195.178.110.60:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:22.377892 2026] [security2:error] [pid 1028675:tid 1028822] [client 40.83.93.50:7958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/class-walker-category-dropdown-class.php"] [unique_id "apK9atdHPfW2QFvhmL7jNgAAAAw"]
[Sat Aug 29 05:07:22.389107 2026] [security2:error] [pid 1018003:tid 1018267] [client 20.203.141.11:1368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "apK9ajAh5Y1i2tUxg4ESOAAABis"]
[Sat Aug 29 05:07:22.393177 2026] [security2:error] [pid 1028675:tid 1028913] [client 158.158.54.35:29647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/24.php"] [unique_id "apK9atdHPfW2QFvhmL7jOAAAAGc"]
[Sat Aug 29 05:07:22.401924 2026] [security2:error] [pid 1028675:tid 1028901] [client 20.48.250.41:35466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/lib.php"] [unique_id "apK9atdHPfW2QFvhmL7jOQAAAFs"]
[Sat Aug 29 05:07:22.405268 2026] [security2:error] [pid 1028675:tid 1028820] [client 40.83.93.50:13628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-content/languages/index.php"] [unique_id "apK9atdHPfW2QFvhmL7jOwAAAAo"]
[Sat Aug 29 05:07:22.405705 2026] [security2:error] [pid 1028675:tid 1028824] [client 93.123.109.228:45162] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/server/.env"] [unique_id "apK9atdHPfW2QFvhmL7jOgAAAA4"]
[Sat Aug 29 05:07:22.413225 2026] [security2:error] [pid 1028675:tid 1028867] [client 93.123.109.228:44858] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/server/api/.env"] [unique_id "apK9atdHPfW2QFvhmL7jPAAAADk"]
[Sat Aug 29 05:07:22.423510 2026] [security2:error] [pid 1028675:tid 1028813] [client 68.155.159.216:1932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-content/themes/too.php"] [unique_id "apK9atdHPfW2QFvhmL7jPgAAAAM"]
[Sat Aug 29 05:07:22.431133 2026] [security2:error] [pid 1028675:tid 1028897] [client 93.123.109.228:44830] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/server/backend/.env"] [unique_id "apK9atdHPfW2QFvhmL7jPwAAAFc"]
[Sat Aug 29 05:07:22.435482 2026] [security2:error] [pid 1018003:tid 1018156] [client 20.48.250.41:49136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/ccu.php"] [unique_id "apK9ajAh5Y1i2tUxg4ESOQAABb0"]
[Sat Aug 29 05:07:22.435500 2026] [security2:error] [pid 1028675:tid 1028843] [client 20.196.209.81:11296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/alfa-rex1.php"] [unique_id "apK9atdHPfW2QFvhmL7jQgAAACE"]
[Sat Aug 29 05:07:22.457317 2026] [security2:error] [pid 1028675:tid 1028927] [client 68.155.159.216:33650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK9atdHPfW2QFvhmL7jRQAAAHU"]
[Sat Aug 29 05:07:22.458940 2026] [security2:error] [pid 1028675:tid 1028823] [client 168.107.94.195:61050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9atdHPfW2QFvhmL7jRgAAAA0"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:22.460128 2026] [security2:error] [pid 1028675:tid 1028925] [client 20.104.49.130:57632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/classwithtostring.php"] [unique_id "apK9atdHPfW2QFvhmL7jRwAAAHM"]
[Sat Aug 29 05:07:22.463127 2026] [security2:error] [pid 1018003:tid 1018179] [client 52.139.37.240:14679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK9ajAh5Y1i2tUxg4ESOgAABdQ"]
[Sat Aug 29 05:07:22.469957 2026] [security2:error] [pid 1028675:tid 1028856] [client 195.178.110.101:36650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "naturalkneads.com"] [uri "/index.php"] [unique_id "apK9atdHPfW2QFvhmL7jSAAAAC4"]
[Sat Aug 29 05:07:22.476928 2026] [security2:error] [pid 1018003:tid 1018231] [client 20.197.61.180:7711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/bak.phps"] [unique_id "apK9ajAh5Y1i2tUxg4ESOwAABgc"]
[Sat Aug 29 05:07:22.493689 2026] [security2:error] [pid 1018003:tid 1018184] [client 158.158.54.35:22456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/t.php"] [unique_id "apK9ajAh5Y1i2tUxg4ESPAAABdk"]
[Sat Aug 29 05:07:22.506610 2026] [security2:error] [pid 1028675:tid 1028880] [client 40.83.93.50:5673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-admin/plugins/img/themes/plugins/maintenance.php"] [unique_id "apK9atdHPfW2QFvhmL7jTQAAAEY"]
[Sat Aug 29 05:07:22.536713 2026] [security2:error] [pid 1028675:tid 1028825] [client 158.23.147.79:32643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/.well-known/content.php"] [unique_id "apK9atdHPfW2QFvhmL7jTwAAAA8"]
[Sat Aug 29 05:07:22.546138 2026] [security2:error] [pid 1028675:tid 1028858] [client 68.155.159.216:51785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/log-mama/function.php"] [unique_id "apK9atdHPfW2QFvhmL7jUQAAADA"]
[Sat Aug 29 05:07:22.546704 2026] [security2:error] [pid 1028675:tid 1028871] [client 93.123.109.228:45052] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/service/.env"] [unique_id "apK9atdHPfW2QFvhmL7jUgAAAD0"]
[Sat Aug 29 05:07:22.547796 2026] [security2:error] [pid 1028675:tid 1028878] [client 20.104.49.130:30036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/jp.php"] [unique_id "apK9atdHPfW2QFvhmL7jUwAAAEQ"]
[Sat Aug 29 05:07:22.552364 2026] [security2:error] [pid 1028675:tid 1028936] [client 93.123.109.228:45192] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/services/.env"] [unique_id "apK9atdHPfW2QFvhmL7jVAAAAH4"]
[Sat Aug 29 05:07:22.575265 2026] [security2:error] [pid 1028675:tid 1028845] [client 68.155.159.216:56513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK9atdHPfW2QFvhmL7jXAAAACM"]
[Sat Aug 29 05:07:22.575857 2026] [security2:error] [pid 1028675:tid 1028900] [client 20.48.250.41:35458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/wp-style.php"] [unique_id "apK9atdHPfW2QFvhmL7jXQAAAFo"]
[Sat Aug 29 05:07:22.588051 2026] [security2:error] [pid 1028675:tid 1028919] [client 4.205.62.107:22428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/sys.php"] [unique_id "apK9atdHPfW2QFvhmL7jYQAAAG0"]
[Sat Aug 29 05:07:22.603590 2026] [security2:error] [pid 1028675:tid 1028836] [client 68.155.159.216:49229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/content.php"] [unique_id "apK9atdHPfW2QFvhmL7jYwAAABo"]
[Sat Aug 29 05:07:22.611411 2026] [security2:error] [pid 1028675:tid 1028841] [client 20.48.250.41:49112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/ak.php"] [unique_id "apK9atdHPfW2QFvhmL7jZAAAAB8"]
[Sat Aug 29 05:07:22.641996 2026] [security2:error] [pid 1028675:tid 1028894] [client 93.123.109.228:45164] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/shared/.env"] [unique_id "apK9atdHPfW2QFvhmL7jagAAAFQ"]
[Sat Aug 29 05:07:22.646715 2026] [security2:error] [pid 1028675:tid 1028898] [client 93.123.109.228:44974] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/shop/.env"] [unique_id "apK9atdHPfW2QFvhmL7jbQAAAFg"]
[Sat Aug 29 05:07:22.653799 2026] [security2:error] [pid 1028675:tid 1028859] [client 34.81.157.26:35528] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/@fs/home/ubuntu/.env"] [unique_id "apK9atdHPfW2QFvhmL7jcAAAADE"]
[Sat Aug 29 05:07:22.667301 2026] [security2:error] [pid 1018003:tid 1018174] [client 34.81.157.26:35544] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/@fs/var/www/html/.env"] [unique_id "apK9ajAh5Y1i2tUxg4ESQAAABc8"]
[Sat Aug 29 05:07:22.668311 2026] [security2:error] [pid 1028675:tid 1028861] [client 34.81.157.26:35540] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/@fs/var/www/.env"] [unique_id "apK9atdHPfW2QFvhmL7jegAAADM"]
[Sat Aug 29 05:07:22.669465 2026] [security2:error] [pid 1028675:tid 1028903] [client 34.81.157.26:35556] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/@fs/usr/src/app/.env"] [unique_id "apK9atdHPfW2QFvhmL7jewAAAF0"]
[Sat Aug 29 05:07:22.671100 2026] [security2:error] [pid 1028675:tid 1028899] [client 34.81.157.26:35552] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/@fs/app/terraform.tfstate"] [unique_id "apK9atdHPfW2QFvhmL7jfAAAAFk"]
[Sat Aug 29 05:07:22.671478 2026] [security2:error] [pid 1028675:tid 1028931] [client 34.81.157.26:35564] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/@fs/root/terraform.tfstate"] [unique_id "apK9atdHPfW2QFvhmL7jfwAAAHk"]
[Sat Aug 29 05:07:22.671964 2026] [security2:error] [pid 1028675:tid 1028910] [client 52.139.37.240:14687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/wp-content/plugins/linkpreview/il.php"] [unique_id "apK9atdHPfW2QFvhmL7jgAAAAGQ"]
[Sat Aug 29 05:07:22.685002 2026] [core:error] [pid 1018003:tid 1018224] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:22.685018 2026] [core:error] [pid 1018003:tid 1018224] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:22.685613 2026] [security2:error] [pid 1028675:tid 1028820] [client 20.104.49.130:43041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/static.php"] [unique_id "apK9atdHPfW2QFvhmL7jiAAAAAo"]
[Sat Aug 29 05:07:22.691962 2026] [security2:error] [pid 1028675:tid 1028867] [client 4.205.62.107:53370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/params.php"] [unique_id "apK9atdHPfW2QFvhmL7jigAAADk"]
[Sat Aug 29 05:07:22.706290 2026] [core:error] [pid 1028675:tid 1028813] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:22.706307 2026] [core:error] [pid 1028675:tid 1028813] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:22.719352 2026] [security2:error] [pid 1028675:tid 1028879] [client 20.151.200.44:47406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/wp-admin/zwso.php"] [unique_id "apK9atdHPfW2QFvhmL7jjwAAAEU"]
[Sat Aug 29 05:07:22.720590 2026] [security2:error] [pid 1018003:tid 1018226] [client 93.123.109.228:44822] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/src/.env"] [unique_id "apK9ajAh5Y1i2tUxg4ESRAAABgM"]
[Sat Aug 29 05:07:22.724015 2026] [core:error] [pid 1018003:tid 1018186] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:22.724036 2026] [core:error] [pid 1018003:tid 1018186] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:22.728311 2026] [core:error] [pid 1028675:tid 1028914] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:22.728326 2026] [core:error] [pid 1028675:tid 1028914] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:22.728757 2026] [core:error] [pid 1028675:tid 1028927] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:22.728772 2026] [core:error] [pid 1028675:tid 1028927] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:22.730044 2026] [core:error] [pid 1018003:tid 1018246] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:22.730055 2026] [core:error] [pid 1018003:tid 1018246] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:22.737173 2026] [core:error] [pid 1018003:tid 1018159] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:22.737191 2026] [core:error] [pid 1018003:tid 1018159] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:22.738532 2026] [security2:error] [pid 1018003:tid 1018217] [client 68.155.159.216:65091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK9ajAh5Y1i2tUxg4ESSAAABfo"]
[Sat Aug 29 05:07:22.742140 2026] [security2:error] [pid 1018003:tid 1018250] [client 20.48.250.41:49127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/lib.php"] [unique_id "apK9ajAh5Y1i2tUxg4ESSQAABho"]
[Sat Aug 29 05:07:22.803250 2026] [security2:error] [pid 1018003:tid 1018261] [client 192.145.125.70:43738] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "zbv.tvp.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "apK9ajAh5Y1i2tUxg4ESSwAABiU"]
[Sat Aug 29 05:07:22.828653 2026] [security2:error] [pid 1028675:tid 1028848] [client 158.23.147.79:17468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-content/radio.php"] [unique_id "apK9atdHPfW2QFvhmL7joQAAACY"]
[Sat Aug 29 05:07:22.839420 2026] [security2:error] [pid 1018003:tid 1018183] [client 168.107.94.195:61423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9ajAh5Y1i2tUxg4ESTQAABdg"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:22.842267 2026] [security2:error] [pid 1028675:tid 1028811] [client 93.123.109.228:45200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/srv/.env"] [unique_id "apK9atdHPfW2QFvhmL7jowAAAAE"]
[Sat Aug 29 05:07:22.851050 2026] [core:error] [pid 1028675:tid 1028897] [client 158.158.54.35:20565] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:22.851065 2026] [core:error] [pid 1028675:tid 1028897] [client 158.158.54.35:20565] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:22.853277 2026] [security2:error] [pid 1018003:tid 1018195] [client 4.205.62.107:65450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/05.php"] [unique_id "apK9ajAh5Y1i2tUxg4ESTgAABeQ"]
[Sat Aug 29 05:07:22.861893 2026] [security2:error] [pid 1028675:tid 1028907] [client 20.48.250.41:35123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/browse.php"] [unique_id "apK9atdHPfW2QFvhmL7jpQAAAGE"]
[Sat Aug 29 05:07:22.862250 2026] [security2:error] [pid 1018003:tid 1018265] [client 158.23.147.79:50064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK9ajAh5Y1i2tUxg4ESTwAABik"]
[Sat Aug 29 05:07:22.863238 2026] [security2:error] [pid 1018003:tid 1018207] [client 40.83.93.50:11679] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/1.php7"] [unique_id "apK9ajAh5Y1i2tUxg4ESUQAABfA"]
[Sat Aug 29 05:07:22.863335 2026] [security2:error] [pid 1018003:tid 1018207] [client 40.83.93.50:11679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/1.php7"] [unique_id "apK9ajAh5Y1i2tUxg4ESUQAABfA"]
[Sat Aug 29 05:07:22.863445 2026] [security2:error] [pid 1028675:tid 1028854] [client 20.196.209.81:14731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/headerg.php"] [unique_id "apK9atdHPfW2QFvhmL7jpgAAACw"]
[Sat Aug 29 05:07:22.863898 2026] [security2:error] [pid 1018003:tid 1018182] [client 93.123.109.228:45138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/stage/.env"] [unique_id "apK9ajAh5Y1i2tUxg4ESUAAABdc"]
[Sat Aug 29 05:07:22.865603 2026] [security2:error] [pid 1028675:tid 1028855] [client 20.203.141.11:33714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/install.php"] [unique_id "apK9atdHPfW2QFvhmL7jpwAAAC0"]
[Sat Aug 29 05:07:22.869045 2026] [security2:error] [pid 1028675:tid 1028830] [client 93.123.109.228:45052] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/staging/.env"] [unique_id "apK9atdHPfW2QFvhmL7jqAAAABQ"]
[Sat Aug 29 05:07:22.871308 2026] [security2:error] [pid 1028675:tid 1028895] [client 52.139.37.240:14477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/wp-header-json.php"] [unique_id "apK9atdHPfW2QFvhmL7jqQAAAFU"]
[Sat Aug 29 05:07:22.879139 2026] [security2:error] [pid 1028675:tid 1028840] [client 20.203.141.11:5779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/abcd.php"] [unique_id "apK9atdHPfW2QFvhmL7jqgAAAB4"]
[Sat Aug 29 05:07:22.879247 2026] [security2:error] [pid 1028675:tid 1028898] [client 20.48.250.41:49117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/wp-style.php"] [unique_id "apK9atdHPfW2QFvhmL7jqwAAAFg"]
[Sat Aug 29 05:07:22.895056 2026] [security2:error] [pid 1018003:tid 1018155] [client 40.83.93.50:13606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-content/languages/min.php"] [unique_id "apK9ajAh5Y1i2tUxg4ESUwAABbw"]
[Sat Aug 29 05:07:22.915516 2026] [security2:error] [pid 1018003:tid 1018234] [client 4.205.62.107:58375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/aws-credentials.php"] [unique_id "apK9ajAh5Y1i2tUxg4ESVAAABgo"]
[Sat Aug 29 05:07:22.919846 2026] [security2:error] [pid 1028675:tid 1028859] [client 93.123.109.228:44916] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/stg/.env"] [unique_id "apK9atdHPfW2QFvhmL7jsAAAADE"]
[Sat Aug 29 05:07:22.925302 2026] [security2:error] [pid 1018003:tid 1018162] [client 20.151.200.44:47353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/Contrller.php"] [unique_id "apK9ajAh5Y1i2tUxg4ESVQAABcM"]
[Sat Aug 29 05:07:22.935565 2026] [security2:error] [pid 1018003:tid 1018169] [client 68.155.159.216:12215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/nf_tracking.php"] [unique_id "apK9ajAh5Y1i2tUxg4ESVgAABco"]
[Sat Aug 29 05:07:22.960989 2026] [security2:error] [pid 1018003:tid 1018271] [client 158.158.54.35:17594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/i.php"] [unique_id "apK9ajAh5Y1i2tUxg4ESVwAABi8"]
[Sat Aug 29 05:07:22.966933 2026] [security2:error] [pid 1028675:tid 1028892] [client 4.205.62.107:22421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/87.php"] [unique_id "apK9atdHPfW2QFvhmL7jugAAAFI"]
[Sat Aug 29 05:07:22.991196 2026] [security2:error] [pid 1028675:tid 1028824] [client 158.23.147.79:30640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK9atdHPfW2QFvhmL7jvwAAAA4"]
[Sat Aug 29 05:07:22.993068 2026] [security2:error] [pid 1028675:tid 1028896] [client 213.202.253.4:65104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bv-place.com"] [uri "/postnews.php"] [unique_id "apK9atdHPfW2QFvhmL7jwAAAAFY"], referer: www.google.com
[Sat Aug 29 05:07:23.000460 2026] [security2:error] [pid 1028675:tid 1028842] [client 93.123.109.228:45200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/stripe/.env"] [unique_id "apK9atdHPfW2QFvhmL7jwgAAACA"]
[Sat Aug 29 05:07:23.004260 2026] [security2:error] [pid 1018003:tid 1018164] [client 40.83.93.50:5689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-admin/security.php"] [unique_id "apK9azAh5Y1i2tUxg4ESWgAABcU"]
[Sat Aug 29 05:07:23.023234 2026] [security2:error] [pid 1018003:tid 1018273] [client 20.48.250.41:49072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/browse.php"] [unique_id "apK9azAh5Y1i2tUxg4ESXAAABjE"]
[Sat Aug 29 05:07:23.071763 2026] [security2:error] [pid 1028675:tid 1028880] [client 93.123.109.228:44916] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/terraform.tfstate.backup"] [unique_id "apK9a9dHPfW2QFvhmL7jzAAAAEY"]
[Sat Aug 29 05:07:23.085674 2026] [security2:error] [pid 1018003:tid 1018157] [client 52.139.37.240:14677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/zup.php"] [unique_id "apK9azAh5Y1i2tUxg4ESXgAABb4"]
[Sat Aug 29 05:07:23.123700 2026] [security2:error] [pid 1018003:tid 1018231] [client 158.23.147.79:25564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/.well-knownold/index.php"] [unique_id "apK9azAh5Y1i2tUxg4ESXwAABgc"]
[Sat Aug 29 05:07:23.150475 2026] [security2:error] [pid 1028675:tid 1028825] [client 93.123.109.228:44858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/test.php"] [unique_id "apK9a9dHPfW2QFvhmL7j3QAAAA8"]
[Sat Aug 29 05:07:23.153170 2026] [security2:error] [pid 1028675:tid 1028858] [client 20.48.250.41:49026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/zoo.php"] [unique_id "apK9a9dHPfW2QFvhmL7j3wAAADA"]
[Sat Aug 29 05:07:23.153929 2026] [security2:error] [pid 1028675:tid 1028815] [client 93.123.109.228:45148] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/test/.env"] [unique_id "apK9a9dHPfW2QFvhmL7j3gAAAAU"]
[Sat Aug 29 05:07:23.153993 2026] [security2:error] [pid 1028675:tid 1028908] [client 158.23.147.79:48150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-admin/user/index.php"] [unique_id "apK9a9dHPfW2QFvhmL7j4AAAAGI"]
[Sat Aug 29 05:07:23.158347 2026] [security2:error] [pid 1028675:tid 1028850] [client 20.104.49.130:46559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/about.php"] [unique_id "apK9a9dHPfW2QFvhmL7j4QAAACg"]
[Sat Aug 29 05:07:23.160338 2026] [security2:error] [pid 1018003:tid 1018163] [client 20.48.250.41:35465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/zoo.php"] [unique_id "apK9azAh5Y1i2tUxg4ESYAAABcQ"]
[Sat Aug 29 05:07:23.173171 2026] [security2:error] [pid 1028675:tid 1028826] [client 20.151.200.44:46627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/Zeiss.php"] [unique_id "apK9a9dHPfW2QFvhmL7j4gAAABA"]
[Sat Aug 29 05:07:23.198440 2026] [security2:error] [pid 1028675:tid 1028878] [client 20.104.49.130:60968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/fling.php"] [unique_id "apK9a9dHPfW2QFvhmL7j5QAAAEQ"]
[Sat Aug 29 05:07:23.206890 2026] [security2:error] [pid 1028675:tid 1028901] [client 20.197.61.180:7929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/install.php"] [unique_id "apK9a9dHPfW2QFvhmL7j5gAAAFs"]
[Sat Aug 29 05:07:23.211282 2026] [security2:error] [pid 1028675:tid 1028936] [client 93.123.109.228:44962] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/user/.env"] [unique_id "apK9a9dHPfW2QFvhmL7j5wAAAH4"]
[Sat Aug 29 05:07:23.233290 2026] [security2:error] [pid 1028675:tid 1028900] [client 93.123.109.228:44974] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/v1/.env"] [unique_id "apK9a9dHPfW2QFvhmL7j6gAAAFo"]
[Sat Aug 29 05:07:23.240947 2026] [security2:error] [pid 1028675:tid 1028860] [client 168.107.94.195:61800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9a9dHPfW2QFvhmL7j6wAAADI"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:23.256604 2026] [security2:error] [pid 1018003:tid 1018174] [client 93.123.109.228:44822] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/v2/.env"] [unique_id "apK9azAh5Y1i2tUxg4ESZAAABc8"]
[Sat Aug 29 05:07:23.258667 2026] [security2:error] [pid 1028675:tid 1028759] [remote 136.108.23.170:55262] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.thesmartpm.com"] [uri "/.env"] [unique_id "apK9a9dHPfW2QFvhmL7j7gAAIU4"]
[Sat Aug 29 05:07:23.260733 2026] [security2:error] [pid 1028675:tid 1028835] [client 93.123.109.228:45052] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/v3/.env"] [unique_id "apK9a9dHPfW2QFvhmL7j8AAAABk"]
[Sat Aug 29 05:07:23.281410 2026] [security2:error] [pid 1028675:tid 1028911] [client 52.139.37.240:14707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/a9.php"] [unique_id "apK9a9dHPfW2QFvhmL7j9AAAAGU"]
[Sat Aug 29 05:07:23.283176 2026] [security2:error] [pid 1028675:tid 1028861] [client 158.23.147.79:26561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/admin.php"] [unique_id "apK9a9dHPfW2QFvhmL7j9QAAADM"]
[Sat Aug 29 05:07:23.295439 2026] [security2:error] [pid 1028675:tid 1028853] [client 20.48.250.41:49144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/elp.php"] [unique_id "apK9a9dHPfW2QFvhmL7j9gAAACs"]
[Sat Aug 29 05:07:23.298386 2026] [security2:error] [pid 1018003:tid 1018184] [client 158.158.54.35:31481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK9azAh5Y1i2tUxg4ESZQAABdk"]
[Sat Aug 29 05:07:23.329602 2026] [security2:error] [pid 1028675:tid 1028821] [client 20.196.209.81:15180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/meta.php"] [unique_id "apK9a9dHPfW2QFvhmL7j-AAAAAs"]
[Sat Aug 29 05:07:23.337425 2026] [security2:error] [pid 1028675:tid 1028871] [client 20.203.141.11:3035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/ioxi-o.php"] [unique_id "apK9a9dHPfW2QFvhmL7j-gAAAD0"]
[Sat Aug 29 05:07:23.355408 2026] [security2:error] [pid 1018003:tid 1018236] [client 20.203.141.11:1368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-access.php"] [unique_id "apK9azAh5Y1i2tUxg4ESZwAABgw"]
[Sat Aug 29 05:07:23.365774 2026] [security2:error] [pid 1028675:tid 1028880] [client 4.205.62.107:56056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/maxro.php"] [unique_id "apK9a9dHPfW2QFvhmL7j_wAAAEY"]
[Sat Aug 29 05:07:23.366509 2026] [security2:error] [pid 1028675:tid 1028881] [client 68.155.159.216:33745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/file88.php"] [unique_id "apK9a9dHPfW2QFvhmL7kAAAAAEc"]
[Sat Aug 29 05:07:23.376150 2026] [security2:error] [pid 1028675:tid 1028904] [client 20.48.250.41:35075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/elp.php"] [unique_id "apK9a9dHPfW2QFvhmL7kAwAAAF4"]
[Sat Aug 29 05:07:23.380114 2026] [security2:error] [pid 1028675:tid 1028919] [client 40.83.93.50:20840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-content/languages/pk.php"] [unique_id "apK9a9dHPfW2QFvhmL7kBgAAAG0"]
[Sat Aug 29 05:07:23.402390 2026] [security2:error] [pid 1028675:tid 1028849] [client 192.145.125.70:43742] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "zbv.tvp.mybluehost.me"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "apK9a9dHPfW2QFvhmL7kCAAAACc"]
[Sat Aug 29 05:07:23.428125 2026] [security2:error] [pid 1018003:tid 1018189] [client 20.48.250.41:49150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/666.php"] [unique_id "apK9azAh5Y1i2tUxg4ESaQAABd4"]
[Sat Aug 29 05:07:23.430052 2026] [security2:error] [pid 1028675:tid 1028858] [client 93.123.109.228:45086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/var/www/.env"] [unique_id "apK9a9dHPfW2QFvhmL7kCwAAADA"]
[Sat Aug 29 05:07:23.434237 2026] [security2:error] [pid 1028675:tid 1028842] [client 158.158.54.35:22439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/deepseek_d.php"] [unique_id "apK9a9dHPfW2QFvhmL7kDQAAACA"]
[Sat Aug 29 05:07:23.438317 2026] [security2:error] [pid 1028675:tid 1028920] [client 40.83.93.50:7516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/ds.php"] [unique_id "apK9a9dHPfW2QFvhmL7kDgAAAG4"]
[Sat Aug 29 05:07:23.442892 2026] [security2:error] [pid 1028675:tid 1028925] [client 68.155.159.216:65097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-admin/dropdown.php"] [unique_id "apK9a9dHPfW2QFvhmL7kDwAAAHM"]
[Sat Aug 29 05:07:23.446802 2026] [security2:error] [pid 1028675:tid 1028866] [client 93.123.109.228:44940] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/var/www/html/.env"] [unique_id "apK9a9dHPfW2QFvhmL7kEAAAADg"]
[Sat Aug 29 05:07:23.454827 2026] [security2:error] [pid 1018003:tid 1018192] [client 158.23.147.79:30507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK9azAh5Y1i2tUxg4ESagAABeE"]
[Sat Aug 29 05:07:23.494326 2026] [security2:error] [pid 1028675:tid 1028825] [client 52.139.37.240:14693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/admin/index.php"] [unique_id "apK9a9dHPfW2QFvhmL7kEgAAAA8"]
[Sat Aug 29 05:07:23.502077 2026] [security2:error] [pid 1028675:tid 1028918] [client 40.83.93.50:5679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK9a9dHPfW2QFvhmL7kEwAAAGw"]
[Sat Aug 29 05:07:23.511636 2026] [security2:error] [pid 1018003:tid 1018196] [client 20.48.250.41:35083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/666.php"] [unique_id "apK9azAh5Y1i2tUxg4ESbAAABeU"]
[Sat Aug 29 05:07:23.515778 2026] [security2:error] [pid 1028675:tid 1028847] [client 158.23.147.79:53847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/dropdown.php"] [unique_id "apK9a9dHPfW2QFvhmL7kFwAAACU"]
[Sat Aug 29 05:07:23.523885 2026] [security2:error] [pid 1018003:tid 1018261] [client 93.123.109.228:45138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/web/.env"] [unique_id "apK9azAh5Y1i2tUxg4ESbQAABiU"]
[Sat Aug 29 05:07:23.529101 2026] [security2:error] [pid 1028675:tid 1028818] [client 68.155.159.216:2044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/radio.php"] [unique_id "apK9a9dHPfW2QFvhmL7kGAAAAAg"]
[Sat Aug 29 05:07:23.561678 2026] [security2:error] [pid 1028675:tid 1028887] [client 20.48.250.41:49036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/knmt.php"] [unique_id "apK9a9dHPfW2QFvhmL7kHQAAAE0"]
[Sat Aug 29 05:07:23.575070 2026] [security2:error] [pid 1028675:tid 1028860] [client 68.155.159.216:33615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-admin.php"] [unique_id "apK9a9dHPfW2QFvhmL7kHwAAADI"]
[Sat Aug 29 05:07:23.622644 2026] [security2:error] [pid 1028675:tid 1028911] [client 168.107.94.195:62169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9a9dHPfW2QFvhmL7kKQAAAGU"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:23.645294 2026] [security2:error] [pid 1028675:tid 1028819] [client 20.48.250.41:35121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/knmt.php"] [unique_id "apK9a9dHPfW2QFvhmL7kLAAAAAk"]
[Sat Aug 29 05:07:23.646412 2026] [security2:error] [pid 1018003:tid 1018207] [client 93.123.109.228:44822] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/website/.env"] [unique_id "apK9azAh5Y1i2tUxg4ESbwAABfA"]
[Sat Aug 29 05:07:23.648756 2026] [security2:error] [pid 1028675:tid 1028899] [client 158.23.147.79:32735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/cong.php"] [unique_id "apK9a9dHPfW2QFvhmL7kLQAAAFk"]
[Sat Aug 29 05:07:23.652366 2026] [security2:error] [pid 1028675:tid 1028823] [client 68.155.159.216:51475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/.well-knownold/index.php"] [unique_id "apK9a9dHPfW2QFvhmL7kLgAAAA0"]
[Sat Aug 29 05:07:23.679396 2026] [security2:error] [pid 1018003:tid 1018155] [client 68.155.159.216:38541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/makeasmtp.php"] [unique_id "apK9azAh5Y1i2tUxg4EScAAABbw"]
[Sat Aug 29 05:07:23.690092 2026] [security2:error] [pid 1028675:tid 1028867] [client 52.139.37.240:14682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/makeasmtp.php"] [unique_id "apK9a9dHPfW2QFvhmL7kMAAAADk"]
[Sat Aug 29 05:07:23.690867 2026] [security2:error] [pid 1028675:tid 1028856] [client 93.123.109.228:45148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ffcbranson.com"] [uri "/wp-config.php"] [unique_id "apK9a9dHPfW2QFvhmL7kMQAAAC4"]
[Sat Aug 29 05:07:23.692784 2026] [security2:error] [pid 1028675:tid 1028857] [client 20.48.250.41:49040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/sbhu.php"] [unique_id "apK9a9dHPfW2QFvhmL7kMwAAAC8"]
[Sat Aug 29 05:07:23.694665 2026] [security2:error] [pid 1028675:tid 1028821] [client 93.123.109.228:44830] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.ffcbranson.com"] [uri "/wp-config.php.bak"] [unique_id "apK9a9dHPfW2QFvhmL7kNAAAAAs"]
[Sat Aug 29 05:07:23.709286 2026] [security2:error] [pid 1018003:tid 1018162] [client 68.155.159.216:49326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK9azAh5Y1i2tUxg4EScgAABcM"]
[Sat Aug 29 05:07:23.714213 2026] [security2:error] [pid 1028675:tid 1028876] [client 93.123.109.228:45192] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.ffcbranson.com"] [uri "/wp-config.php.old"] [unique_id "apK9a9dHPfW2QFvhmL7kNgAAAEI"]
[Sat Aug 29 05:07:23.722051 2026] [security2:error] [pid 1018003:tid 1018175] [client 4.205.62.107:22473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/phpsysinfo.php"] [unique_id "apK9azAh5Y1i2tUxg4EScwAABdA"]
[Sat Aug 29 05:07:23.729703 2026] [security2:error] [pid 1028675:tid 1028880] [client 93.123.109.228:45162] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.ffcbranson.com"] [uri "/wp-config.php.new"] [unique_id "apK9a9dHPfW2QFvhmL7kNwAAAEY"]
[Sat Aug 29 05:07:23.742957 2026] [security2:error] [pid 1028675:tid 1028904] [client 68.155.159.216:30714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-content/banners/about.php"] [unique_id "apK9a9dHPfW2QFvhmL7kOAAAAF4"]
[Sat Aug 29 05:07:23.748268 2026] [core:error] [pid 1028675:tid 1028843] [client 158.158.54.35:14971] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:23.748283 2026] [core:error] [pid 1028675:tid 1028843] [client 158.158.54.35:14971] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:23.750782 2026] [security2:error] [pid 1018003:tid 1018265] [client 20.196.209.81:11295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/dxc.php"] [unique_id "apK9azAh5Y1i2tUxg4ESdAAABik"]
[Sat Aug 29 05:07:23.752676 2026] [security2:error] [pid 1028675:tid 1028849] [client 93.123.109.228:45086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "cpcontacts.ffcbranson.com"] [uri "/___proxy_subdomain_cpcontacts/wp-content/mysql.sql"] [unique_id "apK9a9dHPfW2QFvhmL7kPAAAACc"]
[Sat Aug 29 05:07:23.816005 2026] [security2:error] [pid 1028675:tid 1028925] [client 20.48.250.41:35491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/sbhu.php"] [unique_id "apK9a9dHPfW2QFvhmL7kRQAAAHM"]
[Sat Aug 29 05:07:23.817965 2026] [security2:error] [pid 1028675:tid 1028866] [client 52.138.0.157:5655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/sm.php"] [unique_id "apK9a9dHPfW2QFvhmL7kRwAAADg"]
[Sat Aug 29 05:07:23.825378 2026] [security2:error] [pid 1018003:tid 1018256] [client 20.203.141.11:5763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-content/uploads/min.php"] [unique_id "apK9azAh5Y1i2tUxg4ESdgAABiA"]
[Sat Aug 29 05:07:23.837612 2026] [security2:error] [pid 1028675:tid 1028922] [client 20.48.250.41:49060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/a332.php"] [unique_id "apK9a9dHPfW2QFvhmL7kSgAAAHA"]
[Sat Aug 29 05:07:23.839489 2026] [security2:error] [pid 1018003:tid 1018262] [client 68.155.159.216:64488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/makeasmtp.php"] [unique_id "apK9azAh5Y1i2tUxg4ESdwAABiY"]
[Sat Aug 29 05:07:23.840582 2026] [security2:error] [pid 1018003:tid 1018182] [client 20.203.141.11:27666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/xmlrpc.php"] [unique_id "apK9azAh5Y1i2tUxg4ESeAAABdc"]
[Sat Aug 29 05:07:23.845718 2026] [security2:error] [pid 1028675:tid 1028826] [client 4.205.62.107:9185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/debug.php"] [unique_id "apK9a9dHPfW2QFvhmL7kSwAAABA"]
[Sat Aug 29 05:07:23.875959 2026] [security2:error] [pid 1028675:tid 1028901] [client 158.23.147.79:35775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK9a9dHPfW2QFvhmL7kTAAAAFs"]
[Sat Aug 29 05:07:23.877160 2026] [security2:error] [pid 1018003:tid 1018169] [client 40.83.93.50:20855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kellyandjohn.strangeworx.com"] [uri "/wp-content/languages/plugins/about.php"] [unique_id "apK9azAh5Y1i2tUxg4ESeQAABco"]
[Sat Aug 29 05:07:23.887914 2026] [security2:error] [pid 1028675:tid 1028837] [client 52.139.37.240:14944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/paku.php"] [unique_id "apK9a9dHPfW2QFvhmL7kTgAAABs"]
[Sat Aug 29 05:07:23.898881 2026] [security2:error] [pid 1028675:tid 1028818] [client 20.104.49.130:58084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/wen.php"] [unique_id "apK9a9dHPfW2QFvhmL7kTwAAAAg"]
[Sat Aug 29 05:07:23.925282 2026] [security2:error] [pid 1018003:tid 1018234] [client 20.197.61.180:7176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/colour.php"] [unique_id "apK9azAh5Y1i2tUxg4ESewAABgo"]
[Sat Aug 29 05:07:23.936396 2026] [security2:error] [pid 1028675:tid 1028845] [client 158.23.147.79:17518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-admin/dropdown.php"] [unique_id "apK9a9dHPfW2QFvhmL7kUAAAACM"]
[Sat Aug 29 05:07:23.949532 2026] [security2:error] [pid 1028675:tid 1028842] [client 40.83.93.50:7491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/GOD.php"] [unique_id "apK9a9dHPfW2QFvhmL7kUgAAACA"]
[Sat Aug 29 05:07:23.976323 2026] [security2:error] [pid 1028675:tid 1028921] [client 20.48.250.41:35081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/a332.php"] [unique_id "apK9a9dHPfW2QFvhmL7kVAAAAG8"]
[Sat Aug 29 05:07:23.993731 2026] [security2:error] [pid 1028675:tid 1028900] [client 4.205.62.107:65464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/wp-blog.php"] [unique_id "apK9a9dHPfW2QFvhmL7kVgAAAFo"]
[Sat Aug 29 05:07:23.999580 2026] [security2:error] [pid 1018003:tid 1018172] [client 192.145.125.70:43756] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "zbv.tvp.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "apK9azAh5Y1i2tUxg4ESfAAABc0"]
[Sat Aug 29 05:07:24.003110 2026] [security2:error] [pid 1028675:tid 1028907] [client 168.107.94.195:62652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9bNdHPfW2QFvhmL7kWAAAAGE"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:24.010789 2026] [security2:error] [pid 1028675:tid 1028873] [client 40.83.93.50:24533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-admin/system.php"] [unique_id "apK9bNdHPfW2QFvhmL7kWQAAAD8"]
[Sat Aug 29 05:07:24.020228 2026] [security2:error] [pid 1028675:tid 1028846] [client 52.138.0.157:40985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/shell.php"] [unique_id "apK9bNdHPfW2QFvhmL7kWgAAACQ"]
[Sat Aug 29 05:07:24.026128 2026] [security2:error] [pid 1018003:tid 1018187] [client 158.158.54.35:21990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "apK9bDAh5Y1i2tUxg4ESfQAABdw"]
[Sat Aug 29 05:07:24.031584 2026] [security2:error] [pid 1018003:tid 1018203] [client 20.48.250.41:49096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/ws66.php"] [unique_id "apK9bDAh5Y1i2tUxg4ESfwAABew"]
[Sat Aug 29 05:07:24.037330 2026] [security2:error] [pid 1018003:tid 1018163] [client 68.155.159.216:12113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wzy.php"] [unique_id "apK9bDAh5Y1i2tUxg4ESgAAABcQ"]
[Sat Aug 29 05:07:24.047394 2026] [security2:error] [pid 1028675:tid 1028833] [client 103.72.85.95:30722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 95.85.72.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mocoex.com"] [uri "/xmlrpc.php"] [unique_id "apK9a9dHPfW2QFvhmL7kVwAAABc"]
[Sat Aug 29 05:07:24.047522 2026] [security2:error] [pid 1028675:tid 1028833] [client 103.72.85.95:30722] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mocoex.com"] [uri "/xmlrpc.php"] [unique_id "apK9a9dHPfW2QFvhmL7kVwAAABc"]
[Sat Aug 29 05:07:24.048328 2026] [security2:error] [pid 1028675:tid 1028897] [client 158.23.147.79:49999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK9bNdHPfW2QFvhmL7kWwAAAFc"]
[Sat Aug 29 05:07:24.051694 2026] [security2:error] [pid 1028675:tid 1028875] [client 4.205.62.107:58440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/umgebung.php"] [unique_id "apK9bNdHPfW2QFvhmL7kXAAAAEE"]
[Sat Aug 29 05:07:24.084343 2026] [security2:error] [pid 1028675:tid 1028854] [client 52.139.37.240:15284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/rtx.php"] [unique_id "apK9bNdHPfW2QFvhmL7kXwAAACw"]
[Sat Aug 29 05:07:24.106242 2026] [security2:error] [pid 1028675:tid 1028894] [client 4.205.62.107:22381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/kedi.php"] [unique_id "apK9bNdHPfW2QFvhmL7kYAAAAFQ"]
[Sat Aug 29 05:07:24.111741 2026] [security2:error] [pid 1028675:tid 1028835] [client 20.48.250.41:35510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/ws66.php"] [unique_id "apK9bNdHPfW2QFvhmL7kYQAAABk"]
[Sat Aug 29 05:07:24.113387 2026] [security2:error] [pid 1028675:tid 1028883] [client 20.151.200.44:46625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/ww2.php"] [unique_id "apK9bNdHPfW2QFvhmL7kYgAAAEk"]
[Sat Aug 29 05:07:24.129204 2026] [security2:error] [pid 1028675:tid 1028813] [client 68.155.159.216:24515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK9bNdHPfW2QFvhmL7kYwAAAAM"]
[Sat Aug 29 05:07:24.148402 2026] [security2:error] [pid 1018003:tid 1018188] [client 20.196.209.81:11299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/wp-2019.php"] [unique_id "apK9bDAh5Y1i2tUxg4ESgQAABd0"]
[Sat Aug 29 05:07:24.199124 2026] [security2:error] [pid 1028675:tid 1028821] [client 20.48.250.41:49133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/ws68.php"] [unique_id "apK9bNdHPfW2QFvhmL7kZgAAAAs"]
[Sat Aug 29 05:07:24.203057 2026] [core:error] [pid 1028675:tid 1028887] [client 158.158.54.35:31474] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:24.203076 2026] [core:error] [pid 1028675:tid 1028887] [client 158.158.54.35:31474] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:24.214063 2026] [security2:error] [pid 1028675:tid 1028912] [client 103.240.76.112:50335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK9bNdHPfW2QFvhmL7kaAAAAGY"]
[Sat Aug 29 05:07:24.214195 2026] [security2:error] [pid 1028675:tid 1028912] [client 103.240.76.112:50335] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK9bNdHPfW2QFvhmL7kaAAAAGY"]
[Sat Aug 29 05:07:24.214380 2026] [security2:error] [pid 1028675:tid 1028903] [client 52.138.0.157:5646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/simple.php"] [unique_id "apK9bNdHPfW2QFvhmL7kaQAAAF0"]
[Sat Aug 29 05:07:24.218235 2026] [security2:error] [pid 1028675:tid 1028880] [client 68.155.159.216:51236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/bk/index.php"] [unique_id "apK9bNdHPfW2QFvhmL7kagAAAEY"]
[Sat Aug 29 05:07:24.230609 2026] [security2:error] [pid 1018003:tid 1018198] [client 158.23.147.79:25587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK9bDAh5Y1i2tUxg4ESgwAABec"]
[Sat Aug 29 05:07:24.244555 2026] [security2:error] [pid 1018003:tid 1018226] [client 20.48.250.41:35095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/ws68.php"] [unique_id "apK9bDAh5Y1i2tUxg4EShAAABgM"]
[Sat Aug 29 05:07:24.280185 2026] [security2:error] [pid 1018003:tid 1018161] [client 52.139.37.240:15271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/update/da222.php"] [unique_id "apK9bDAh5Y1i2tUxg4ESiAAABcI"]
[Sat Aug 29 05:07:24.297295 2026] [security2:error] [pid 1028675:tid 1028839] [client 146.70.194.254:44292] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "modelbasenjis.com"] [uri "/cgi-sys/suspendedpage.cgi/wp/wp-includes/wlwmanifest.xml"] [unique_id "apK9bNdHPfW2QFvhmL7kcwAAAB0"]
[Sat Aug 29 05:07:24.310104 2026] [security2:error] [pid 1028675:tid 1028937] [client 68.155.159.216:6029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK9bNdHPfW2QFvhmL7kdAAAAH8"]
[Sat Aug 29 05:07:24.310388 2026] [autoindex:error] [pid 1018003:tid 1018025] [remote 87.58.197.202:58006] AH01276: Cannot serve directory /home3/tffvbdmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:07:24.314012 2026] [security2:error] [pid 1028675:tid 1028819] [client 20.203.141.11:23162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK9bNdHPfW2QFvhmL7kdQAAAAk"]
[Sat Aug 29 05:07:24.314059 2026] [security2:error] [pid 1028675:tid 1028823] [client 20.203.141.11:22324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/filemanager.php"] [unique_id "apK9bNdHPfW2QFvhmL7kdgAAAA0"]
[Sat Aug 29 05:07:24.330163 2026] [security2:error] [pid 1018003:tid 1018212] [client 158.23.184.117:12066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/update/da222.php"] [unique_id "apK9bDAh5Y1i2tUxg4ESiwAABfU"]
[Sat Aug 29 05:07:24.342600 2026] [security2:error] [pid 1028675:tid 1028850] [client 20.48.250.41:49081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/users.php"] [unique_id "apK9bNdHPfW2QFvhmL7keAAAACg"]
[Sat Aug 29 05:07:24.384855 2026] [security2:error] [pid 1018003:tid 1018152] [client 158.23.147.79:26502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-admin/admin.php"] [unique_id "apK9bDAh5Y1i2tUxg4ESjAAABbk"]
[Sat Aug 29 05:07:24.401218 2026] [security2:error] [pid 1028675:tid 1028837] [client 168.107.94.195:63124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9bNdHPfW2QFvhmL7kfAAAABs"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:24.405446 2026] [security2:error] [pid 1028675:tid 1028826] [client 52.138.0.157:19601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin.php"] [unique_id "apK9bNdHPfW2QFvhmL7kfQAAABA"]
[Sat Aug 29 05:07:24.414141 2026] [security2:error] [pid 1028675:tid 1028933] [client 20.48.250.41:35028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/users.php"] [unique_id "apK9bNdHPfW2QFvhmL7kfgAAAHs"]
[Sat Aug 29 05:07:24.425868 2026] [security2:error] [pid 1028675:tid 1028888] [client 158.23.184.117:12084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.it-methods.com"] [uri "/update/da222.php"] [unique_id "apK9bNdHPfW2QFvhmL7kfwAAAE4"]
[Sat Aug 29 05:07:24.449911 2026] [security2:error] [pid 1028675:tid 1028909] [client 40.83.93.50:7499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/ggfi.php"] [unique_id "apK9bNdHPfW2QFvhmL7kgAAAAGM"]
[Sat Aug 29 05:07:24.470837 2026] [security2:error] [pid 1028675:tid 1028932] [client 20.104.49.130:47867] ModSecurity: Access denied with connection close (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1032"] [id "900036"] [msg "Wordpress BOT exploit :: No UA/Referer"] [hostname "mail.flatlandsfoto.com"] [uri "/wp-login.php"] [unique_id "apK9bNdHPfW2QFvhmL7kgQAAAHo"]
[Sat Aug 29 05:07:24.473964 2026] [security2:error] [pid 1028675:tid 1028921] [client 20.48.250.41:49110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/bzjdlofz.php"] [unique_id "apK9bNdHPfW2QFvhmL7kggAAAG8"]
[Sat Aug 29 05:07:24.473999 2026] [security2:error] [pid 1028675:tid 1028848] [client 158.23.184.117:12037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/xmr.php"] [unique_id "apK9bNdHPfW2QFvhmL7kgwAAACY"]
[Sat Aug 29 05:07:24.483290 2026] [security2:error] [pid 1018003:tid 1018159] [client 40.83.93.50:5212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-admin/test.php"] [unique_id "apK9bDAh5Y1i2tUxg4ESjQAABcA"]
[Sat Aug 29 05:07:24.484113 2026] [security2:error] [pid 1028675:tid 1028746] [remote 136.108.23.170:55262] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "www.thesmartpm.com"] [uri "/.env.backup"] [unique_id "apK9bNdHPfW2QFvhmL7khQAAWkE"]
[Sat Aug 29 05:07:24.484459 2026] [security2:error] [pid 1028675:tid 1028757] [remote 136.108.23.170:55262] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.thesmartpm.com"] [uri "/.env.bak"] [unique_id "apK9bNdHPfW2QFvhmL7khgAAWkw"]
[Sat Aug 29 05:07:24.500757 2026] [security2:error] [pid 1018003:tid 1018175] [client 20.104.49.130:34525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/crgio.php"] [unique_id "apK9bDAh5Y1i2tUxg4ESjwAABdA"]
[Sat Aug 29 05:07:24.516081 2026] [security2:error] [pid 1028675:tid 1028855] [client 4.205.62.107:55996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/brc.php"] [unique_id "apK9bNdHPfW2QFvhmL7kiQAAAC0"]
[Sat Aug 29 05:07:24.544747 2026] [security2:error] [pid 1018003:tid 1018219] [client 20.48.250.41:35105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/bzjdlofz.php"] [unique_id "apK9bDAh5Y1i2tUxg4ESkAAABfw"]
[Sat Aug 29 05:07:24.561902 2026] [security2:error] [pid 1028675:tid 1028930] [client 158.23.147.79:30520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/nf_tracking.php"] [unique_id "apK9bNdHPfW2QFvhmL7kiwAAAHg"]
[Sat Aug 29 05:07:24.569602 2026] [security2:error] [pid 1028675:tid 1028897] [client 158.23.184.117:11930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.it-methods.com"] [uri "/xmr.php"] [unique_id "apK9bNdHPfW2QFvhmL7kjAAAAFc"]
[Sat Aug 29 05:07:24.573125 2026] [security2:error] [pid 1018003:tid 1018207] [client 20.196.209.81:1996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/menu.php"] [unique_id "apK9bDAh5Y1i2tUxg4ESkwAABfA"]
[Sat Aug 29 05:07:24.583500 2026] [security2:error] [pid 1018003:tid 1018191] [client 52.139.37.240:14922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/wp-admin/min.php"] [unique_id "apK9bDAh5Y1i2tUxg4ESlAAABeA"]
[Sat Aug 29 05:07:24.592930 2026] [security2:error] [pid 1028675:tid 1028908] [client 192.145.125.70:50392] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "zbv.tvp.mybluehost.me"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "apK9bNdHPfW2QFvhmL7kjgAAAGI"]
[Sat Aug 29 05:07:24.594053 2026] [security2:error] [pid 1028675:tid 1028765] [remote 136.108.23.170:55262] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "www.thesmartpm.com"] [uri "/.env.old"] [unique_id "apK9bNdHPfW2QFvhmL7kjQAAP1Q"]
[Sat Aug 29 05:07:24.600197 2026] [security2:error] [pid 1018003:tid 1018183] [client 52.138.0.157:19615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "apK9bDAh5Y1i2tUxg4ESlQAABdg"]
[Sat Aug 29 05:07:24.603414 2026] [security2:error] [pid 1028675:tid 1028763] [remote 136.108.23.170:55262] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.thesmartpm.com"] [uri "/config/.env"] [unique_id "apK9bNdHPfW2QFvhmL7kkAAAP1I"]
[Sat Aug 29 05:07:24.619367 2026] [security2:error] [pid 1018003:tid 1018271] [client 158.23.184.117:12084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK9bDAh5Y1i2tUxg4ESlgAABi8"]
[Sat Aug 29 05:07:24.622280 2026] [security2:error] [pid 1028675:tid 1028910] [client 20.48.250.41:49069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/selesai.php"] [unique_id "apK9bNdHPfW2QFvhmL7kkQAAAGQ"]
[Sat Aug 29 05:07:24.624515 2026] [security2:error] [pid 1028675:tid 1028822] [client 158.158.54.35:22181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-content/themes/pridmag/il.php"] [unique_id "apK9bNdHPfW2QFvhmL7kkgAAAAw"]
[Sat Aug 29 05:07:24.636243 2026] [security2:error] [pid 1028675:tid 1028926] [client 68.155.159.216:2006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK9bNdHPfW2QFvhmL7kkwAAAHQ"]
[Sat Aug 29 05:07:24.640964 2026] [security2:error] [pid 1028675:tid 1028773] [remote 136.108.23.170:55262] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.thesmartpm.com"] [uri "/api/.env"] [unique_id "apK9bNdHPfW2QFvhmL7klQAAP1w"]
[Sat Aug 29 05:07:24.641037 2026] [security2:error] [pid 1028675:tid 1028754] [remote 136.108.23.170:55262] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.thesmartpm.com"] [uri "/backend/.env"] [unique_id "apK9bNdHPfW2QFvhmL7klAAAP0k"]
[Sat Aug 29 05:07:24.660871 2026] [security2:error] [pid 1028675:tid 1028818] [client 20.197.61.180:13066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/OK.php"] [unique_id "apK9bNdHPfW2QFvhmL7klgAAAAg"]
[Sat Aug 29 05:07:24.668164 2026] [security2:error] [pid 1018003:tid 1018267] [client 20.104.18.15:12170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9bDAh5Y1i2tUxg4ESlwAABis"]
[Sat Aug 29 05:07:24.680841 2026] [security2:error] [pid 1018003:tid 1018156] [client 20.48.250.41:35472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/selesai.php"] [unique_id "apK9bDAh5Y1i2tUxg4ESmQAABb0"]
[Sat Aug 29 05:07:24.687061 2026] [security2:error] [pid 1028675:tid 1028912] [client 68.155.159.216:33707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK9bNdHPfW2QFvhmL7kmQAAAGY"]
[Sat Aug 29 05:07:24.690589 2026] [security2:error] [pid 1018003:tid 1018190] [client 158.158.54.35:14940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK9bDAh5Y1i2tUxg4ESmwAABd8"]
[Sat Aug 29 05:07:24.701559 2026] [security2:error] [pid 1018003:tid 1018157] [client 158.23.147.79:53130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/sad/about.php"] [unique_id "apK9bDAh5Y1i2tUxg4ESnAAABb4"]
[Sat Aug 29 05:07:24.717603 2026] [security2:error] [pid 1018003:tid 1018277] [client 158.23.184.117:11737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.it-methods.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK9bDAh5Y1i2tUxg4ESnQAABjU"]
[Sat Aug 29 05:07:24.719968 2026] [security2:error] [pid 1018003:tid 1018172] [client 20.151.200.44:45475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/anz.php"] [unique_id "apK9bDAh5Y1i2tUxg4ESngAABc0"]
[Sat Aug 29 05:07:24.755083 2026] [security2:error] [pid 1028675:tid 1028923] [client 158.23.147.79:32647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-includes/js/index.php"] [unique_id "apK9bNdHPfW2QFvhmL7kngAAAHE"]
[Sat Aug 29 05:07:24.760205 2026] [security2:error] [pid 1028675:tid 1028815] [client 20.48.250.41:49132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/shlo.php"] [unique_id "apK9bNdHPfW2QFvhmL7koAAAAAU"]
[Sat Aug 29 05:07:24.760406 2026] [security2:error] [pid 1028675:tid 1028916] [client 68.155.159.216:51258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK9bNdHPfW2QFvhmL7knwAAAGo"]
[Sat Aug 29 05:07:24.766898 2026] [security2:error] [pid 1028675:tid 1028816] [client 158.23.184.117:11962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/wp-act.php"] [unique_id "apK9bNdHPfW2QFvhmL7koQAAAAY"]
[Sat Aug 29 05:07:24.779713 2026] [security2:error] [pid 1018003:tid 1018179] [client 52.139.37.240:14968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/wp-admin/wp-fileesx-449.php"] [unique_id "apK9bDAh5Y1i2tUxg4ESnwAABdQ"]
[Sat Aug 29 05:07:24.781113 2026] [security2:error] [pid 1028675:tid 1028899] [client 20.203.141.11:27951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/bthil.php"] [unique_id "apK9bNdHPfW2QFvhmL7kogAAAFk"]
[Sat Aug 29 05:07:24.781641 2026] [security2:error] [pid 1028675:tid 1028931] [client 20.203.141.11:38177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-content/themes/admin.php"] [unique_id "apK9bNdHPfW2QFvhmL7kpAAAAHk"]
[Sat Aug 29 05:07:24.781897 2026] [security2:error] [pid 1028675:tid 1028920] [client 168.107.94.195:63534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9bNdHPfW2QFvhmL7kowAAAG4"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:24.799399 2026] [security2:error] [pid 1028675:tid 1028879] [client 52.138.0.157:10516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/includes/about.php"] [unique_id "apK9bNdHPfW2QFvhmL7kpQAAAEU"]
[Sat Aug 29 05:07:24.815803 2026] [security2:error] [pid 1028675:tid 1028878] [client 20.104.18.15:12284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9bNdHPfW2QFvhmL7kpgAAAEQ"]
[Sat Aug 29 05:07:24.829756 2026] [security2:error] [pid 1028675:tid 1028826] [client 68.155.159.216:49186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/goat.php"] [unique_id "apK9bNdHPfW2QFvhmL7kpwAAABA"]
[Sat Aug 29 05:07:24.861669 2026] [security2:error] [pid 1028675:tid 1028814] [client 158.23.184.117:12062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.it-methods.com"] [uri "/wp-act.php"] [unique_id "apK9bNdHPfW2QFvhmL7kqAAAAAQ"]
[Sat Aug 29 05:07:24.865185 2026] [security2:error] [pid 1028675:tid 1028909] [client 4.205.62.107:22361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/sgd.php"] [unique_id "apK9bNdHPfW2QFvhmL7kqgAAAGM"]
[Sat Aug 29 05:07:24.877008 2026] [security2:error] [pid 1028675:tid 1028811] [client 20.48.250.41:35512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/shlo.php"] [unique_id "apK9bNdHPfW2QFvhmL7kqwAAAAE"]
[Sat Aug 29 05:07:24.903296 2026] [security2:error] [pid 1018003:tid 1018255] [client 20.48.250.41:49025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/asax.php"] [unique_id "apK9bDAh5Y1i2tUxg4ESoAAABh8"]
[Sat Aug 29 05:07:24.919976 2026] [security2:error] [pid 1028675:tid 1028845] [client 158.23.184.117:11959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/fff.php"] [unique_id "apK9bNdHPfW2QFvhmL7krgAAACM"]
[Sat Aug 29 05:07:24.945266 2026] [security2:error] [pid 1028675:tid 1028900] [client 68.155.159.216:65109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK9bNdHPfW2QFvhmL7krwAAAFo"]
[Sat Aug 29 05:07:24.950575 2026] [security2:error] [pid 1028675:tid 1028907] [client 20.104.18.15:12231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/ap.php"] [unique_id "apK9bNdHPfW2QFvhmL7ksAAAAGE"]
[Sat Aug 29 05:07:24.989948 2026] [security2:error] [pid 1018003:tid 1018174] [client 52.139.37.240:15243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/wp-content/themes/min.php"] [unique_id "apK9bDAh5Y1i2tUxg4ESogAABc8"]
[Sat Aug 29 05:07:24.992649 2026] [security2:error] [pid 1028675:tid 1028888] [client 20.196.209.81:15218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/alfa.php"] [unique_id "apK9bNdHPfW2QFvhmL7ksgAAAE4"]
[Sat Aug 29 05:07:24.995658 2026] [security2:error] [pid 1028675:tid 1028897] [client 158.23.147.79:35201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-admin/images/about.php"] [unique_id "apK9bNdHPfW2QFvhmL7ktAAAAFc"]
[Sat Aug 29 05:07:24.996609 2026] [security2:error] [pid 1018003:tid 1018167] [client 52.138.0.157:20514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/js/index.php"] [unique_id "apK9bDAh5Y1i2tUxg4ESowAABcg"]
[Sat Aug 29 05:07:25.025911 2026] [security2:error] [pid 1028675:tid 1028937] [client 60.243.207.176:63046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK9bddHPfW2QFvhmL7kuQAAAH8"]
[Sat Aug 29 05:07:25.026219 2026] [security2:error] [pid 1028675:tid 1028937] [client 60.243.207.176:63046] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK9bddHPfW2QFvhmL7kuQAAAH8"]
[Sat Aug 29 05:07:25.039279 2026] [security2:error] [pid 1018003:tid 1018186] [client 20.48.250.41:35503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/asax.php"] [unique_id "apK9bTAh5Y1i2tUxg4ESpQAABds"]
[Sat Aug 29 05:07:25.042699 2026] [security2:error] [pid 1018003:tid 1018184] [client 158.23.147.79:17421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/login.php"] [unique_id "apK9bTAh5Y1i2tUxg4ESpgAABdk"]
[Sat Aug 29 05:07:25.045656 2026] [security2:error] [pid 1018003:tid 1018266] [client 20.48.250.41:49131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/fetch.php"] [unique_id "apK9bTAh5Y1i2tUxg4ESpwAABio"]
[Sat Aug 29 05:07:25.055790 2026] [security2:error] [pid 1028675:tid 1028872] [client 158.23.184.117:11912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.it-methods.com"] [uri "/fff.php"] [unique_id "apK9bddHPfW2QFvhmL7kvAAAAD4"]
[Sat Aug 29 05:07:25.064383 2026] [security2:error] [pid 1028675:tid 1028824] [client 68.155.159.216:16255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/themes.php"] [unique_id "apK9bddHPfW2QFvhmL7kvwAAAA4"]
[Sat Aug 29 05:07:25.066073 2026] [security2:error] [pid 1028675:tid 1028883] [client 158.23.184.117:11935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.tmb/dropdown.php"] [unique_id "apK9bddHPfW2QFvhmL7kwAAAAEk"]
[Sat Aug 29 05:07:25.082992 2026] [security2:error] [pid 1018003:tid 1018224] [client 158.158.54.35:24129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/assets/images/doc.php"] [unique_id "apK9bTAh5Y1i2tUxg4ESqgAABgE"]
[Sat Aug 29 05:07:25.117046 2026] [security2:error] [pid 1028675:tid 1028828] [client 20.104.49.130:30068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/classwithtostring.php"] [unique_id "apK9bddHPfW2QFvhmL7kxgAAABI"]
[Sat Aug 29 05:07:25.117362 2026] [security2:error] [pid 1018003:tid 1018162] [client 20.104.18.15:12245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/media.php"] [unique_id "apK9bTAh5Y1i2tUxg4ESqwAABcM"]
[Sat Aug 29 05:07:25.128376 2026] [security2:error] [pid 1028675:tid 1028825] [client 4.205.62.107:24989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/erty.php"] [unique_id "apK9bddHPfW2QFvhmL7kxwAAAA8"]
[Sat Aug 29 05:07:25.130061 2026] [security2:error] [pid 1028675:tid 1028892] [client 40.83.93.50:5662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-admin/user/f35.php"] [unique_id "apK9bddHPfW2QFvhmL7kyAAAAFI"]
[Sat Aug 29 05:07:25.138818 2026] [security2:error] [pid 1018003:tid 1018226] [client 158.158.54.35:16901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/num.php"] [unique_id "apK9bTAh5Y1i2tUxg4ESrAAABgM"]
[Sat Aug 29 05:07:25.143030 2026] [security2:error] [pid 1018003:tid 1018159] [client 68.155.159.216:12175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-admin/setup-config.php"] [unique_id "apK9bTAh5Y1i2tUxg4ESrQAABcA"]
[Sat Aug 29 05:07:25.147129 2026] [security2:error] [pid 1018003:tid 1018175] [client 4.205.62.107:53362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/dialog.php"] [unique_id "apK9bTAh5Y1i2tUxg4ESrgAABdA"]
[Sat Aug 29 05:07:25.147240 2026] [security2:error] [pid 1028675:tid 1028812] [client 40.83.93.50:11682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/alfa-rex.php"] [unique_id "apK9bddHPfW2QFvhmL7kywAAAAI"]
[Sat Aug 29 05:07:25.149193 2026] [security2:error] [pid 1018003:tid 1018155] [client 158.23.147.79:50051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK9bTAh5Y1i2tUxg4ESrwAABbw"]
[Sat Aug 29 05:07:25.149195 2026] [security2:error] [pid 1028675:tid 1028923] [client 158.23.147.79:30489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wzy.php"] [unique_id "apK9bddHPfW2QFvhmL7kzQAAAHE"]
[Sat Aug 29 05:07:25.161457 2026] [security2:error] [pid 1028675:tid 1028916] [client 168.107.94.195:63876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9bddHPfW2QFvhmL7kzgAAAGo"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:25.181529 2026] [security2:error] [pid 1028675:tid 1028877] [client 192.145.125.70:50408] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "zbv.tvp.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "apK9bddHPfW2QFvhmL7kzwAAAEM"]
[Sat Aug 29 05:07:25.181630 2026] [security2:error] [pid 1028675:tid 1028839] [client 20.48.250.41:35135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/fetch.php"] [unique_id "apK9bddHPfW2QFvhmL7k0AAAAB0"]
[Sat Aug 29 05:07:25.187028 2026] [security2:error] [pid 1028675:tid 1028853] [client 52.139.37.240:14971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/wp-content/themes/x/bypass.php"] [unique_id "apK9bddHPfW2QFvhmL7k0QAAACs"]
[Sat Aug 29 05:07:25.189395 2026] [security2:error] [pid 1028675:tid 1028920] [client 20.48.250.41:49089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/vx.php"] [unique_id "apK9bddHPfW2QFvhmL7k0wAAAG4"]
[Sat Aug 29 05:07:25.189452 2026] [security2:error] [pid 1028675:tid 1028931] [client 4.205.62.107:58486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/wp-content/db-status.php"] [unique_id "apK9bddHPfW2QFvhmL7k0gAAAHk"]
[Sat Aug 29 05:07:25.215719 2026] [security2:error] [pid 1028675:tid 1028816] [client 158.23.184.117:12078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/robots.php"] [unique_id "apK9bddHPfW2QFvhmL7k1gAAAAY"]
[Sat Aug 29 05:07:25.215971 2026] [security2:error] [pid 1018003:tid 1018219] [client 158.23.184.117:12070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.it-methods.com"] [uri "/.tmb/dropdown.php"] [unique_id "apK9bTAh5Y1i2tUxg4ESsAAABfw"]
[Sat Aug 29 05:07:25.240865 2026] [security2:error] [pid 1028675:tid 1028922] [client 4.205.62.107:22150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/wp-content/maintenance.php"] [unique_id "apK9bddHPfW2QFvhmL7k1wAAAHA"]
[Sat Aug 29 05:07:25.244934 2026] [security2:error] [pid 1018003:tid 1018271] [client 68.155.159.216:24542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK9bTAh5Y1i2tUxg4ESsQAABi8"]
[Sat Aug 29 05:07:25.247426 2026] [security2:error] [pid 1028675:tid 1028901] [client 20.104.18.15:12242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/adminfuns.php"] [unique_id "apK9bddHPfW2QFvhmL7k2AAAAFs"]
[Sat Aug 29 05:07:25.253196 2026] [security2:error] [pid 1018003:tid 1018213] [client 20.203.141.11:22278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-admin/css/admin.php"] [unique_id "apK9bTAh5Y1i2tUxg4ESswAABfY"]
[Sat Aug 29 05:07:25.268375 2026] [http2:warn] [pid 1017536:tid 1017764] [client 57.141.14.63:59328] h2_stream(1017536-342-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:07:25.271689 2026] [security2:error] [pid 1028675:tid 1028814] [client 158.23.147.79:48355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-includes/plugins.php"] [unique_id "apK9bddHPfW2QFvhmL7k2wAAAAQ"]
[Sat Aug 29 05:07:25.315940 2026] [security2:error] [pid 1018003:tid 1018169] [client 20.48.250.41:35476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/vx.php"] [unique_id "apK9bTAh5Y1i2tUxg4EStQAABco"]
[Sat Aug 29 05:07:25.318708 2026] [security2:error] [pid 1028675:tid 1028845] [client 52.138.0.157:27807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK9bddHPfW2QFvhmL7k3QAAACM"]
[Sat Aug 29 05:07:25.324215 2026] [security2:error] [pid 1018003:tid 1018256] [client 158.23.184.117:63770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cworthy.net"] [uri "/Ov-Simple1.php"] [unique_id "apK9bTAh5Y1i2tUxg4EStgAABiA"]
[Sat Aug 29 05:07:25.342841 2026] [security2:error] [pid 1028675:tid 1028833] [client 158.23.147.79:25408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK9bddHPfW2QFvhmL7k5AAAABc"]
[Sat Aug 29 05:07:25.360835 2026] [security2:error] [pid 1028675:tid 1028811] [client 158.23.184.117:30022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mikelait.managemymood.com"] [uri "/alfa.php"] [unique_id "apK9bddHPfW2QFvhmL7k5QAAAAE"]
[Sat Aug 29 05:07:25.362419 2026] [security2:error] [pid 1018003:tid 1018268] [client 158.23.184.117:12049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.well-known/install.php"] [unique_id "apK9bTAh5Y1i2tUxg4EStwAABiw"]
[Sat Aug 29 05:07:25.362821 2026] [security2:error] [pid 1018003:tid 1018182] [client 158.23.184.117:11336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.it-methods.com"] [uri "/robots.php"] [unique_id "apK9bTAh5Y1i2tUxg4ESuAAABdc"]
[Sat Aug 29 05:07:25.365361 2026] [security2:error] [pid 1028675:tid 1028919] [client 68.155.159.216:30597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK9bddHPfW2QFvhmL7k5gAAAG0"]
[Sat Aug 29 05:07:25.373808 2026] [security2:error] [pid 1018003:tid 1018190] [client 20.48.250.41:49047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/global.php"] [unique_id "apK9bTAh5Y1i2tUxg4ESuQAABd8"]
[Sat Aug 29 05:07:25.373944 2026] [security2:error] [pid 1028675:tid 1028881] [client 20.104.49.130:57711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/sxxb.php"] [unique_id "apK9bddHPfW2QFvhmL7k6AAAAEc"]
[Sat Aug 29 05:07:25.378404 2026] [security2:error] [pid 1028675:tid 1028880] [client 20.197.61.180:13885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "likesareus.com"] [uri "/aaa.php"] [unique_id "apK9bddHPfW2QFvhmL7k6QAAAEY"]
[Sat Aug 29 05:07:25.386196 2026] [security2:error] [pid 1028675:tid 1028902] [client 68.155.159.216:51398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "nillpower.com"] [uri "/first.php"] [unique_id "apK9bddHPfW2QFvhmL7k6wAAAFw"]
[Sat Aug 29 05:07:25.388550 2026] [security2:error] [pid 1028675:tid 1028928] [client 20.196.209.81:14479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/feed-rss2-queue.php"] [unique_id "apK9bddHPfW2QFvhmL7k7AAAAHY"]
[Sat Aug 29 05:07:25.388722 2026] [security2:error] [pid 1028675:tid 1028855] [client 158.23.184.117:2753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/av.php"] [unique_id "apK9bddHPfW2QFvhmL7k7QAAAC0"]
[Sat Aug 29 05:07:25.417712 2026] [security2:error] [pid 1028675:tid 1028860] [client 158.23.184.117:11945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dubeyko.com"] [uri "/app.php"] [unique_id "apK9bddHPfW2QFvhmL7k8AAAADI"]
[Sat Aug 29 05:07:25.425602 2026] [security2:error] [pid 1028675:tid 1028883] [client 20.104.18.15:12179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/classwithtostring.php"] [unique_id "apK9bddHPfW2QFvhmL7k8QAAAEk"]
[Sat Aug 29 05:07:25.428891 2026] [security2:error] [pid 1028675:tid 1028861] [client 68.155.159.216:5952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-content/banners/about.php"] [unique_id "apK9bddHPfW2QFvhmL7k8gAAADM"]
[Sat Aug 29 05:07:25.431814 2026] [security2:error] [pid 1028675:tid 1028937] [client 158.23.184.117:4310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lumbeesolar.com"] [uri "/.well-known/install.php"] [unique_id "apK9bddHPfW2QFvhmL7k8wAAAH8"]
[Sat Aug 29 05:07:25.451170 2026] [security2:error] [pid 1018003:tid 1018163] [client 20.203.141.11:11205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/cv.php"] [unique_id "apK9bTAh5Y1i2tUxg4ESugAABcQ"]
[Sat Aug 29 05:07:25.467992 2026] [security2:error] [pid 1028675:tid 1028872] [client 158.23.184.117:39964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cworthy.net"] [uri "/atomlib.php"] [unique_id "apK9bddHPfW2QFvhmL7k9AAAAD4"]
[Sat Aug 29 05:07:25.481651 2026] [security2:error] [pid 1028675:tid 1028918] [client 52.139.37.240:15286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK9bddHPfW2QFvhmL7k9QAAAGw"]
[Sat Aug 29 05:07:25.497063 2026] [security2:error] [pid 1028675:tid 1028854] [client 158.23.147.79:26587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK9bddHPfW2QFvhmL7k9gAAACw"]
[Sat Aug 29 05:07:25.506199 2026] [security2:error] [pid 1028675:tid 1028912] [client 20.48.250.41:48964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/fs.php"] [unique_id "apK9bddHPfW2QFvhmL7k-AAAAGY"]
[Sat Aug 29 05:07:25.509041 2026] [security2:error] [pid 1018003:tid 1018179] [client 158.23.184.117:30040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mikelait.managemymood.com"] [uri "/as.php"] [unique_id "apK9bTAh5Y1i2tUxg4ESuwAABdQ"]
[Sat Aug 29 05:07:25.516102 2026] [security2:error] [pid 1028675:tid 1028908] [client 52.138.0.157:20519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/network/admin.php"] [unique_id "apK9bddHPfW2QFvhmL7k-gAAAGI"]
[Sat Aug 29 05:07:25.529711 2026] [security2:error] [pid 1028675:tid 1028825] [client 158.23.184.117:11756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.it-methods.com"] [uri "/.well-known/install.php"] [unique_id "apK9bddHPfW2QFvhmL7k-wAAAA8"]
[Sat Aug 29 05:07:25.531070 2026] [security2:error] [pid 1028675:tid 1028870] [client 158.158.54.35:17593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/bgymj.php"] [unique_id "apK9bddHPfW2QFvhmL7k_AAAADw"]
[Sat Aug 29 05:07:25.534370 2026] [security2:error] [pid 1018003:tid 1018233] [client 68.155.159.216:33679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/NewFile.php/"] [unique_id "apK9bTAh5Y1i2tUxg4ESvwAABgk"]
[Sat Aug 29 05:07:25.542480 2026] [security2:error] [pid 1028675:tid 1028839] [client 168.107.94.195:64237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9bddHPfW2QFvhmL7k_QAAAB0"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:25.559146 2026] [security2:error] [pid 1028675:tid 1028903] [client 68.155.159.216:65114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/login.php"] [unique_id "apK9bddHPfW2QFvhmL7k_gAAAF0"]
[Sat Aug 29 05:07:25.560035 2026] [security2:error] [pid 1018003:tid 1018166] [client 158.23.184.117:12087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/wp-admin/about.php"] [unique_id "apK9bTAh5Y1i2tUxg4ESwAAABcc"]
[Sat Aug 29 05:07:25.564909 2026] [security2:error] [pid 1018003:tid 1018252] [client 158.23.184.117:12064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dubeyko.com"] [uri "/aaa.php"] [unique_id "apK9bTAh5Y1i2tUxg4ESwQAABhw"]
[Sat Aug 29 05:07:25.584563 2026] [security2:error] [pid 1018003:tid 1018184] [client 158.23.184.117:2586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/wp-includes/ID3/file.php"] [unique_id "apK9bTAh5Y1i2tUxg4ESwwAABdk"]
[Sat Aug 29 05:07:25.585042 2026] [security2:error] [pid 1028675:tid 1028850] [client 20.104.18.15:12283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK9bddHPfW2QFvhmL7lAQAAACg"]
[Sat Aug 29 05:07:25.594023 2026] [core:error] [pid 1028675:tid 1028828] [client 158.158.54.35:29663] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:25.594039 2026] [core:error] [pid 1028675:tid 1028828] [client 158.158.54.35:29663] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:25.598896 2026] [security2:error] [pid 1028675:tid 1028926] [client 40.83.93.50:5693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-admin/user/min.php"] [unique_id "apK9bddHPfW2QFvhmL7lAwAAAHQ"]
[Sat Aug 29 05:07:25.608208 2026] [security2:error] [pid 1028675:tid 1028826] [client 20.48.250.41:35485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/global.php"] [unique_id "apK9bddHPfW2QFvhmL7lBQAAABA"]
[Sat Aug 29 05:07:25.610299 2026] [security2:error] [pid 1028675:tid 1028819] [client 158.23.184.117:39967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cworthy.net"] [uri "/edit.php"] [unique_id "apK9bddHPfW2QFvhmL7lBgAAAAk"]
[Sat Aug 29 05:07:25.628756 2026] [security2:error] [pid 1028675:tid 1028814] [client 158.23.184.117:4363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lumbeesolar.com"] [uri "/wp-admin/about.php"] [unique_id "apK9bddHPfW2QFvhmL7lBwAAAAQ"]
[Sat Aug 29 05:07:25.647458 2026] [security2:error] [pid 1018003:tid 1018200] [client 40.83.93.50:7957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/cookie.php"] [unique_id "apK9bTAh5Y1i2tUxg4ESxAAABek"]
[Sat Aug 29 05:07:25.650775 2026] [security2:error] [pid 1028675:tid 1028837] [client 158.23.184.117:30256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mikelait.managemymood.com"] [uri "/aa.php"] [unique_id "apK9bddHPfW2QFvhmL7lCAAAABs"]
[Sat Aug 29 05:07:25.654125 2026] [security2:error] [pid 1028675:tid 1028840] [client 4.205.62.107:56050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/vx.php"] [unique_id "apK9bddHPfW2QFvhmL7lCQAAAB4"]
[Sat Aug 29 05:07:25.662187 2026] [security2:error] [pid 1018003:tid 1018202] [client 20.48.250.41:49146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/ioxi.php"] [unique_id "apK9bTAh5Y1i2tUxg4ESxQAABes"]
[Sat Aug 29 05:07:25.670718 2026] [security2:error] [pid 1018003:tid 1018053] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK9bTAh5Y1i2tUxg4ESxgAGIiA"]
[Sat Aug 29 05:07:25.683150 2026] [security2:error] [pid 1028675:tid 1028858] [client 158.23.147.79:30633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/ans.php"] [unique_id "apK9bddHPfW2QFvhmL7lDgAAADA"]
[Sat Aug 29 05:07:25.687544 2026] [security2:error] [pid 1028675:tid 1028847] [client 52.139.37.240:14690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/wp-info.php"] [unique_id "apK9bddHPfW2QFvhmL7lDwAAACU"]
[Sat Aug 29 05:07:25.692467 2026] [security2:error] [pid 1028675:tid 1028867] [client 103.171.189.88:58262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9bddHPfW2QFvhmL7lEAAAADk"]
[Sat Aug 29 05:07:25.692556 2026] [security2:error] [pid 1028675:tid 1028867] [client 103.171.189.88:58262] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9bddHPfW2QFvhmL7lEAAAADk"]
[Sat Aug 29 05:07:25.702903 2026] [security2:error] [pid 1018003:tid 1018170] [client 158.23.184.117:12032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/wp-content/backup.php"] [unique_id "apK9bTAh5Y1i2tUxg4ES0QAABcs"]
[Sat Aug 29 05:07:25.710099 2026] [security2:error] [pid 1028675:tid 1028844] [client 52.138.0.157:20516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-conflg/function.php"] [unique_id "apK9bddHPfW2QFvhmL7lEgAAACI"]
[Sat Aug 29 05:07:25.724378 2026] [security2:error] [pid 1018003:tid 1018221] [client 158.23.184.117:11936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.it-methods.com"] [uri "/wp-admin/about.php"] [unique_id "apK9bTAh5Y1i2tUxg4ES0gAABf4"]
[Sat Aug 29 05:07:25.729370 2026] [security2:error] [pid 1028675:tid 1028920] [client 20.203.141.11:22275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/adminfuns.php"] [unique_id "apK9bddHPfW2QFvhmL7lEwAAAG4"]
[Sat Aug 29 05:07:25.729600 2026] [security2:error] [pid 1028675:tid 1028925] [client 158.23.184.117:2770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "reed-white.bistrobrew.com"] [uri "/wp-admin/css/fff.php"] [unique_id "apK9bddHPfW2QFvhmL7lFAAAAHM"]
[Sat Aug 29 05:07:25.739205 2026] [core:error] [pid 1018003:tid 1018155] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:25.739217 2026] [core:error] [pid 1018003:tid 1018155] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:25.741936 2026] [security2:error] [pid 1028675:tid 1028928] [client 68.155.159.216:2008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/makeasmtp.php"] [unique_id "apK9bddHPfW2QFvhmL7lFQAAAHY"]
[Sat Aug 29 05:07:25.748121 2026] [core:error] [pid 1018003:tid 1018191] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:25.748133 2026] [core:error] [pid 1018003:tid 1018191] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:25.757145 2026] [security2:error] [pid 1028675:tid 1028811] [client 158.23.184.117:63783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cworthy.net"] [uri "/7.php"] [unique_id "apK9bddHPfW2QFvhmL7lFgAAAAE"]
[Sat Aug 29 05:07:25.758129 2026] [security2:error] [pid 1028675:tid 1028860] [client 158.23.184.117:11954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dubeyko.com"] [uri "/hehe.php"] [unique_id "apK9bddHPfW2QFvhmL7lFwAAADI"]
[Sat Aug 29 05:07:25.766277 2026] [security2:error] [pid 1018003:tid 1018248] [client 192.145.125.70:50418] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "zbv.tvp.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "apK9bTAh5Y1i2tUxg4ES1QAABhg"]
[Sat Aug 29 05:07:25.773886 2026] [security2:error] [pid 1018003:tid 1018189] [client 158.23.184.117:4392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lumbeesolar.com"] [uri "/wp-content/backup.php"] [unique_id "apK9bTAh5Y1i2tUxg4ES1gAABd4"]
[Sat Aug 29 05:07:25.780371 2026] [core:error] [pid 1028675:tid 1028824] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:25.780384 2026] [core:error] [pid 1028675:tid 1028824] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:25.781504 2026] [core:error] [pid 1028675:tid 1028937] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:25.781518 2026] [core:error] [pid 1028675:tid 1028937] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:25.786521 2026] [core:error] [pid 1028675:tid 1028872] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:25.786533 2026] [core:error] [pid 1028675:tid 1028872] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:25.789250 2026] [security2:error] [pid 1018003:tid 1018217] [client 20.48.250.41:35132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/fs.php"] [unique_id "apK9bTAh5Y1i2tUxg4ES2AAABfo"]
[Sat Aug 29 05:07:25.789603 2026] [security2:error] [pid 1028675:tid 1028876] [client 68.155.159.216:33595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/lock.php"] [unique_id "apK9bddHPfW2QFvhmL7lIAAAAEI"]
[Sat Aug 29 05:07:25.789902 2026] [security2:error] [pid 1028675:tid 1028894] [client 68.155.159.216:38590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK9bddHPfW2QFvhmL7lIQAAAFQ"]
[Sat Aug 29 05:07:25.789929 2026] [core:error] [pid 1028675:tid 1028822] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:25.789937 2026] [core:error] [pid 1028675:tid 1028822] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:25.804008 2026] [security2:error] [pid 1018003:tid 1018275] [client 20.48.250.41:49141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/bootstrap.php"] [unique_id "apK9bTAh5Y1i2tUxg4ES2QAABjM"]
[Sat Aug 29 05:07:25.816301 2026] [security2:error] [pid 1018003:tid 1018028] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK9bTAh5Y1i2tUxg4ES3AAGIgc"]
[Sat Aug 29 05:07:25.817603 2026] [security2:error] [pid 1018003:tid 1018084] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(\\\\/\\\\*\\\\!? ?(?:select|grant|delete|insert|drop|alter|replace|truncate|update|create|rename|describe|union|concat|group_concat))" at REQUEST_FILENAME. [file "/opt/mod_security/hg_rules.conf"] [line "1019"] [id "9000042"] [rev "2.2.2"] [msg "SQL Comment Sequence Detected."] [data "/*update"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/*update.cgi*"] [unique_id "apK9bTAh5Y1i2tUxg4ES4QAGIj8"]
[Sat Aug 29 05:07:25.820091 2026] [core:error] [pid 1018003:tid 1018096] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:25.820104 2026] [core:error] [pid 1018003:tid 1018096] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:25.821439 2026] [security2:error] [pid 1018003:tid 1018196] [client 20.196.209.81:1868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/inputs.php"] [unique_id "apK9bTAh5Y1i2tUxg4ES4gAABeU"]
[Sat Aug 29 05:07:25.825207 2026] [security2:error] [pid 1018003:tid 1018169] [client 20.104.18.15:12219] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/5PJcpMFsD8B.php"] [unique_id "apK9bTAh5Y1i2tUxg4ES4wAABco"]
[Sat Aug 29 05:07:25.849625 2026] [security2:error] [pid 1028675:tid 1028897] [client 158.23.184.117:11333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.well-known/aa.php"] [unique_id "apK9bddHPfW2QFvhmL7lKQAAAFc"]
[Sat Aug 29 05:07:25.855027 2026] [security2:error] [pid 1028675:tid 1028903] [client 158.23.147.79:32740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-content/index.php"] [unique_id "apK9bddHPfW2QFvhmL7lLAAAAF0"]
[Sat Aug 29 05:07:25.855597 2026] [core:error] [pid 1018003:tid 1018182] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:25.855609 2026] [core:error] [pid 1018003:tid 1018182] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:25.855914 2026] [core:error] [pid 1028675:tid 1028839] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:25.855924 2026] [core:error] [pid 1028675:tid 1028839] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:25.856089 2026] [core:error] [pid 1028675:tid 1028899] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:25.856097 2026] [core:error] [pid 1028675:tid 1028899] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:25.859550 2026] [core:error] [pid 1028675:tid 1028871] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:25.859561 2026] [core:error] [pid 1028675:tid 1028871] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:25.863748 2026] [core:error] [pid 1018003:tid 1018156] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:25.863760 2026] [core:error] [pid 1018003:tid 1018156] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:25.863813 2026] [core:error] [pid 1028675:tid 1028922] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:25.863821 2026] [core:error] [pid 1028675:tid 1028922] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:25.864376 2026] [core:error] [pid 1028675:tid 1028828] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:25.864388 2026] [core:error] [pid 1028675:tid 1028828] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:25.864957 2026] [security2:error] [pid 1018003:tid 1018265] [client 158.23.184.117:12077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.it-methods.com"] [uri "/wp-content/backup.php"] [unique_id "apK9bTAh5Y1i2tUxg4ES5wAABik"]
[Sat Aug 29 05:07:25.866549 2026] [security2:error] [pid 1028675:tid 1028890] [client 158.23.184.117:60608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mikelait.managemymood.com"] [uri "/abc.php"] [unique_id "apK9bddHPfW2QFvhmL7lMAAAAFA"]
[Sat Aug 29 05:07:25.877429 2026] [security2:error] [pid 1018003:tid 1018277] [client 20.104.49.130:57495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/666.php"] [unique_id "apK9bTAh5Y1i2tUxg4ES6AAABjU"]
[Sat Aug 29 05:07:25.879863 2026] [security2:error] [pid 1018003:tid 1018231] [client 68.155.159.216:51231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK9bTAh5Y1i2tUxg4ES6QAABgc"]
[Sat Aug 29 05:07:25.880776 2026] [security2:error] [pid 1028675:tid 1028889] [client 52.139.37.240:14666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/wp-wordfence-waf.php"] [unique_id "apK9bddHPfW2QFvhmL7lMQAAAE8"]
[Sat Aug 29 05:07:25.900797 2026] [security2:error] [pid 1028675:tid 1028853] [client 158.23.184.117:63794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cworthy.net"] [uri "/black.php"] [unique_id "apK9bddHPfW2QFvhmL7lMgAAACs"]
[Sat Aug 29 05:07:25.903819 2026] [security2:error] [pid 1028675:tid 1028816] [client 158.23.184.117:11908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dubeyko.com"] [uri "/wp-includes/PHPMailer.php"] [unique_id "apK9bddHPfW2QFvhmL7lMwAAAAY"]
[Sat Aug 29 05:07:25.907857 2026] [security2:error] [pid 1018003:tid 1018256] [client 52.138.0.157:5634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-content/classwithtostring.php"] [unique_id "apK9bTAh5Y1i2tUxg4ES6gAABiA"]
[Sat Aug 29 05:07:25.921136 2026] [security2:error] [pid 1018003:tid 1018234] [client 158.23.184.117:4413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lumbeesolar.com"] [uri "/.well-known/aa.php"] [unique_id "apK9bTAh5Y1i2tUxg4ES6wAABgo"]
[Sat Aug 29 05:07:25.924642 2026] [security2:error] [pid 1028675:tid 1028867] [client 168.107.94.195:64605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9bddHPfW2QFvhmL7lNAAAADk"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:25.929701 2026] [security2:error] [pid 1028675:tid 1028843] [client 20.203.141.11:35218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-content/packed.php"] [unique_id "apK9bddHPfW2QFvhmL7lNQAAACE"]
[Sat Aug 29 05:07:25.936207 2026] [security2:error] [pid 1018003:tid 1018101] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/.docker/.env"] [unique_id "apK9bTAh5Y1i2tUxg4ES7AAGH1A"]
[Sat Aug 29 05:07:25.941285 2026] [security2:error] [pid 1018003:tid 1018167] [client 68.155.159.216:49240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK9bTAh5Y1i2tUxg4ES7QAABcg"]
[Sat Aug 29 05:07:25.950707 2026] [security2:error] [pid 1028675:tid 1028877] [client 158.23.147.79:54356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/admin.php"] [unique_id "apK9bddHPfW2QFvhmL7lOQAAAEM"]
[Sat Aug 29 05:07:25.954099 2026] [security2:error] [pid 1028675:tid 1028930] [client 20.48.250.41:49091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/export.php"] [unique_id "apK9bddHPfW2QFvhmL7lPAAAAHg"]
[Sat Aug 29 05:07:25.970818 2026] [ssl:error] [pid 1018003:tid 1018195] [client 3.233.59.216:17923] AH02032: Hostname host2038.hostmonster.com (default host as no SNI was provided) and hostname webdisk.evecreative.co provided via HTTP have no compatible SSL setup for policy 'secure'
[Sat Aug 29 05:07:25.979106 2026] [security2:error] [pid 1028675:tid 1028870] [client 158.158.54.35:17581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK9bddHPfW2QFvhmL7lQgAAADw"]
[Sat Aug 29 05:07:25.982767 2026] [security2:error] [pid 1018003:tid 1018086] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK9bTAh5Y1i2tUxg4ES8gAGGkE"]
[Sat Aug 29 05:07:25.990828 2026] [security2:error] [pid 1018003:tid 1018200] [client 20.104.18.15:12233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK9bTAh5Y1i2tUxg4ES9gAABek"]
[Sat Aug 29 05:07:25.995296 2026] [security2:error] [pid 1028675:tid 1028859] [client 20.48.250.41:35086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/ioxi.php"] [unique_id "apK9bddHPfW2QFvhmL7lSAAAADE"]
[Sat Aug 29 05:07:26.000983 2026] [security2:error] [pid 1018003:tid 1018216] [client 158.23.184.117:11940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "apK9bjAh5Y1i2tUxg4ES-QAABfk"]
[Sat Aug 29 05:07:26.013344 2026] [security2:error] [pid 1028675:tid 1028919] [client 158.23.184.117:11734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.it-methods.com"] [uri "/.well-known/aa.php"] [unique_id "apK9btdHPfW2QFvhmL7lSgAAAG0"]
[Sat Aug 29 05:07:26.014046 2026] [security2:error] [pid 1018003:tid 1018252] [client 158.23.184.117:30251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mikelait.managemymood.com"] [uri "/av.php"] [unique_id "apK9bjAh5Y1i2tUxg4ES-wAABhw"]
[Sat Aug 29 05:07:26.019406 2026] [security2:error] [pid 1018003:tid 1018080] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/.docker/laravel/app/.env"] [unique_id "apK9bjAh5Y1i2tUxg4ES_wAGGjs"]
[Sat Aug 29 05:07:26.019791 2026] [security2:error] [pid 1018003:tid 1018188] [client 4.205.62.107:21627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/fleen.php"] [unique_id "apK9bjAh5Y1i2tUxg4ETAAAABd0"]
[Sat Aug 29 05:07:26.021951 2026] [core:error] [pid 1018003:tid 1018138] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.021968 2026] [core:error] [pid 1018003:tid 1018138] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.022844 2026] [core:error] [pid 1028675:tid 1028855] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.022866 2026] [core:error] [pid 1028675:tid 1028855] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.025367 2026] [core:error] [pid 1018003:tid 1018069] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.025380 2026] [core:error] [pid 1018003:tid 1018069] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.026536 2026] [core:error] [pid 1028675:tid 1028911] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.026554 2026] [core:error] [pid 1028675:tid 1028911] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.027026 2026] [core:error] [pid 1028675:tid 1028811] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.027041 2026] [core:error] [pid 1028675:tid 1028811] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.037384 2026] [core:error] [pid 1018003:tid 1018174] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.037398 2026] [core:error] [pid 1018003:tid 1018174] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.047796 2026] [security2:error] [pid 1018003:tid 1018177] [client 158.23.184.117:63801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cworthy.net"] [uri "/wp-blog-header.php"] [unique_id "apK9bjAh5Y1i2tUxg4ETBQAABdI"]
[Sat Aug 29 05:07:26.052513 2026] [core:error] [pid 1018003:tid 1018222] [client 158.158.54.35:15169] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.052531 2026] [core:error] [pid 1018003:tid 1018222] [client 158.158.54.35:15169] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.055424 2026] [core:error] [pid 1028675:tid 1028918] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.055448 2026] [core:error] [pid 1028675:tid 1028918] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.070559 2026] [security2:error] [pid 1018003:tid 1018163] [client 40.83.93.50:5640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-admin/users.php"] [unique_id "apK9bjAh5Y1i2tUxg4ETBwAABcQ"]
[Sat Aug 29 05:07:26.072248 2026] [core:error] [pid 1028675:tid 1028887] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.072267 2026] [core:error] [pid 1028675:tid 1028887] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.082453 2026] [security2:error] [pid 1028675:tid 1028860] [client 158.23.184.117:11909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dubeyko.com"] [uri "/wp-content/upgrade/alfanew.php7"] [unique_id "apK9btdHPfW2QFvhmL7lUQAAADI"]
[Sat Aug 29 05:07:26.082573 2026] [security2:error] [pid 1028675:tid 1028914] [client 158.23.184.117:4251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lumbeesolar.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "apK9btdHPfW2QFvhmL7lUwAAAGg"]
[Sat Aug 29 05:07:26.082613 2026] [security2:error] [pid 1028675:tid 1028932] [client 52.139.37.240:14513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/ws49.php"] [unique_id "apK9btdHPfW2QFvhmL7lUgAAAHo"]
[Sat Aug 29 05:07:26.085944 2026] [security2:error] [pid 1028675:tid 1028875] [client 20.48.250.41:49024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/gk.php"] [unique_id "apK9btdHPfW2QFvhmL7lVAAAAEE"]
[Sat Aug 29 05:07:26.115418 2026] [security2:error] [pid 1018003:tid 1018106] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/.env.bak"] [unique_id "apK9bjAh5Y1i2tUxg4ETCQAF4FU"]
[Sat Aug 29 05:07:26.115576 2026] [core:error] [pid 1028675:tid 1028903] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.115593 2026] [core:error] [pid 1028675:tid 1028903] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.116934 2026] [security2:error] [pid 1018003:tid 1018112] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/.env.backup"] [unique_id "apK9bjAh5Y1i2tUxg4ETCwAF4Fs"]
[Sat Aug 29 05:07:26.125372 2026] [security2:error] [pid 1028675:tid 1028904] [client 20.104.18.15:12276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/wsd.php"] [unique_id "apK9btdHPfW2QFvhmL7lWQAAAF4"]
[Sat Aug 29 05:07:26.139735 2026] [security2:error] [pid 1028675:tid 1028917] [client 146.70.194.254:59624] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "modelbasenjis.com"] [uri "/cgi-sys/suspendedpage.cgi/news/wp-includes/wlwmanifest.xml"] [unique_id "apK9btdHPfW2QFvhmL7lWgAAAGs"]
[Sat Aug 29 05:07:26.146407 2026] [core:error] [pid 1018003:tid 1018217] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.146425 2026] [core:error] [pid 1018003:tid 1018217] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.160859 2026] [security2:error] [pid 1028675:tid 1028927] [client 158.23.184.117:30067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mikelait.managemymood.com"] [uri "/autoload_classmap.php"] [unique_id "apK9btdHPfW2QFvhmL7lWwAAAHU"]
[Sat Aug 29 05:07:26.163738 2026] [security2:error] [pid 1028675:tid 1028901] [client 158.23.184.117:11769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.it-methods.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "apK9btdHPfW2QFvhmL7lXAAAAFs"]
[Sat Aug 29 05:07:26.164695 2026] [security2:error] [pid 1028675:tid 1028890] [client 158.23.147.79:17474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/hehehehe.php"] [unique_id "apK9btdHPfW2QFvhmL7lXgAAAFA"]
[Sat Aug 29 05:07:26.176251 2026] [security2:error] [pid 1028675:tid 1028845] [client 68.155.159.216:16077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-mail.php"] [unique_id "apK9btdHPfW2QFvhmL7lXwAAACM"]
[Sat Aug 29 05:07:26.177116 2026] [core:error] [pid 1018003:tid 1018273] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.177131 2026] [core:error] [pid 1018003:tid 1018273] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.185170 2026] [security2:error] [pid 1028675:tid 1028858] [client 52.138.0.157:10498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-content/themes/fitnessbase/404.php"] [unique_id "apK9btdHPfW2QFvhmL7lYAAAADA"]
[Sat Aug 29 05:07:26.188177 2026] [security2:error] [pid 1028675:tid 1028896] [client 40.83.93.50:11709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/config.php"] [unique_id "apK9btdHPfW2QFvhmL7lYQAAAFY"]
[Sat Aug 29 05:07:26.196335 2026] [security2:error] [pid 1018003:tid 1018125] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/.env.php"] [unique_id "apK9bjAh5Y1i2tUxg4ETEwAF4Gg"]
[Sat Aug 29 05:07:26.197601 2026] [security2:error] [pid 1028675:tid 1028853] [client 20.48.250.41:35483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/bootstrap.php"] [unique_id "apK9btdHPfW2QFvhmL7lYwAAACs"]
[Sat Aug 29 05:07:26.204392 2026] [security2:error] [pid 1028675:tid 1028815] [client 158.23.184.117:12057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/wp-content/plugins/alfa-rex.php"] [unique_id "apK9btdHPfW2QFvhmL7lZQAAAAU"]
[Sat Aug 29 05:07:26.204512 2026] [security2:error] [pid 1018003:tid 1018097] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/.env.old"] [unique_id "apK9bjAh5Y1i2tUxg4ETFgAF4Ew"]
[Sat Aug 29 05:07:26.226710 2026] [security2:error] [pid 1018003:tid 1018207] [client 20.203.141.11:3053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/goods.php"] [unique_id "apK9bjAh5Y1i2tUxg4ETGAAABfA"]
[Sat Aug 29 05:07:26.227798 2026] [security2:error] [pid 1028675:tid 1028889] [client 158.23.184.117:11731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dubeyko.com"] [uri "/admin/alfa-rex.php"] [unique_id "apK9btdHPfW2QFvhmL7laQAAAE8"]
[Sat Aug 29 05:07:26.243425 2026] [security2:error] [pid 1028675:tid 1028859] [client 158.23.184.117:39969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cworthy.net"] [uri "/2.php"] [unique_id "apK9btdHPfW2QFvhmL7lbAAAADE"]
[Sat Aug 29 05:07:26.243983 2026] [security2:error] [pid 1018003:tid 1018182] [client 20.48.250.41:49098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/logs1.php"] [unique_id "apK9bjAh5Y1i2tUxg4ETGgAABdc"]
[Sat Aug 29 05:07:26.253761 2026] [security2:error] [pid 1028675:tid 1028910] [client 20.104.18.15:12178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/bulet.php"] [unique_id "apK9btdHPfW2QFvhmL7lbwAAAGQ"]
[Sat Aug 29 05:07:26.268273 2026] [security2:error] [pid 1018003:tid 1018190] [client 4.205.62.107:26625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/wp-config.backup.php"] [unique_id "apK9bjAh5Y1i2tUxg4ETHgAABd8"]
[Sat Aug 29 05:07:26.275262 2026] [security2:error] [pid 1018003:tid 1018140] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/.env.swp"] [unique_id "apK9bjAh5Y1i2tUxg4ETIAAF4Hc"]
[Sat Aug 29 05:07:26.276039 2026] [security2:error] [pid 1028675:tid 1028888] [client 52.139.37.240:14708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/xxx.php"] [unique_id "apK9btdHPfW2QFvhmL7lcQAAAE4"]
[Sat Aug 29 05:07:26.279317 2026] [security2:error] [pid 1028675:tid 1028840] [client 20.196.209.81:1890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/class-walker-category-dropdown-class.php"] [unique_id "apK9btdHPfW2QFvhmL7lcgAAAB4"]
[Sat Aug 29 05:07:26.282332 2026] [core:error] [pid 1028675:tid 1028821] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.282346 2026] [core:error] [pid 1028675:tid 1028821] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.284535 2026] [security2:error] [pid 1028675:tid 1028884] [client 158.23.184.117:4384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lumbeesolar.com"] [uri "/wp-content/plugins/alfa-rex.php"] [unique_id "apK9btdHPfW2QFvhmL7ldAAAAEo"]
[Sat Aug 29 05:07:26.284938 2026] [core:error] [pid 1018003:tid 1018265] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.284949 2026] [core:error] [pid 1018003:tid 1018265] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.286572 2026] [core:error] [pid 1028675:tid 1028872] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.286586 2026] [core:error] [pid 1028675:tid 1028872] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.286940 2026] [core:error] [pid 1018003:tid 1018212] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.286950 2026] [core:error] [pid 1018003:tid 1018212] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.287576 2026] [security2:error] [pid 1028675:tid 1028836] [client 20.104.49.130:46556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/666.php"] [unique_id "apK9btdHPfW2QFvhmL7ldgAAABo"]
[Sat Aug 29 05:07:26.295507 2026] [core:error] [pid 1018003:tid 1018172] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.295519 2026] [core:error] [pid 1018003:tid 1018172] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.304697 2026] [security2:error] [pid 1028675:tid 1028824] [client 158.23.184.117:30057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mikelait.managemymood.com"] [uri "/asus.php"] [unique_id "apK9btdHPfW2QFvhmL7ldwAAAA4"]
[Sat Aug 29 05:07:26.305845 2026] [security2:error] [pid 1018003:tid 1018187] [client 168.107.94.195:64980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9bjAh5Y1i2tUxg4ETJgAABdw"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:26.315756 2026] [core:error] [pid 1028675:tid 1028856] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.315768 2026] [core:error] [pid 1028675:tid 1028856] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.323888 2026] [security2:error] [pid 1028675:tid 1028846] [client 158.23.184.117:12044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.it-methods.com"] [uri "/wp-content/plugins/alfa-rex.php"] [unique_id "apK9btdHPfW2QFvhmL7leQAAACQ"]
[Sat Aug 29 05:07:26.327685 2026] [core:error] [pid 1028675:tid 1028903] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.327698 2026] [core:error] [pid 1028675:tid 1028903] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.331689 2026] [security2:error] [pid 1028675:tid 1028929] [client 20.48.250.41:35018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/export.php"] [unique_id "apK9btdHPfW2QFvhmL7lfQAAAHc"]
[Sat Aug 29 05:07:26.333171 2026] [security2:error] [pid 1028675:tid 1028819] [client 4.205.62.107:58382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/file59.php"] [unique_id "apK9btdHPfW2QFvhmL7lfgAAAAk"]
[Sat Aug 29 05:07:26.340465 2026] [core:error] [pid 1028675:tid 1028923] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.340477 2026] [core:error] [pid 1028675:tid 1028923] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.348535 2026] [core:error] [pid 1028675:tid 1028912] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.348550 2026] [core:error] [pid 1028675:tid 1028912] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.351694 2026] [core:error] [pid 1018003:tid 1018255] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.351707 2026] [core:error] [pid 1018003:tid 1018255] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.355009 2026] [core:error] [pid 1028675:tid 1028861] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.355027 2026] [core:error] [pid 1028675:tid 1028861] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.378857 2026] [security2:error] [pid 1018003:tid 1018203] [client 52.138.0.157:20495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK9bjAh5Y1i2tUxg4ETLAAABew"]
[Sat Aug 29 05:07:26.379275 2026] [security2:error] [pid 1028675:tid 1028847] [client 4.205.62.107:22392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/upload.form.php"] [unique_id "apK9btdHPfW2QFvhmL7lhQAAACU"]
[Sat Aug 29 05:07:26.381676 2026] [security2:error] [pid 1018003:tid 1018216] [client 158.23.147.79:48291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK9bjAh5Y1i2tUxg4ETLQAABfk"]
[Sat Aug 29 05:07:26.393867 2026] [security2:error] [pid 1028675:tid 1028896] [client 4.205.62.107:9008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/doc.php"] [unique_id "apK9btdHPfW2QFvhmL7lhgAAAFY"]
[Sat Aug 29 05:07:26.395438 2026] [security2:error] [pid 1028675:tid 1028843] [client 158.23.184.117:12048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/test.php"] [unique_id "apK9btdHPfW2QFvhmL7lhwAAACE"]
[Sat Aug 29 05:07:26.398093 2026] [security2:error] [pid 1018003:tid 1018188] [client 20.48.250.41:49055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/inege.php"] [unique_id "apK9bjAh5Y1i2tUxg4ETLwAABd0"]
[Sat Aug 29 05:07:26.399077 2026] [core:error] [pid 1018003:tid 1018252] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.399091 2026] [core:error] [pid 1018003:tid 1018252] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.419501 2026] [security2:error] [pid 1028675:tid 1028937] [client 20.203.141.11:11206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-admin/js/index.php"] [unique_id "apK9btdHPfW2QFvhmL7ligAAAH8"]
[Sat Aug 29 05:07:26.443785 2026] [security2:error] [pid 1018003:tid 1018270] [client 158.23.147.79:25497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/images/index.php"] [unique_id "apK9bjAh5Y1i2tUxg4ETMAAABi4"]
[Sat Aug 29 05:07:26.453629 2026] [security2:error] [pid 1018003:tid 1018246] [client 20.104.18.15:12264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/av.php"] [unique_id "apK9bjAh5Y1i2tUxg4ETMwAABhY"]
[Sat Aug 29 05:07:26.455910 2026] [security2:error] [pid 1028675:tid 1028859] [client 20.104.18.15:19417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9btdHPfW2QFvhmL7ljgAAADE"]
[Sat Aug 29 05:07:26.456323 2026] [security2:error] [pid 1018003:tid 1018155] [client 149.34.210.141:34037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9bjAh5Y1i2tUxg4ETNQAABbw"]
[Sat Aug 29 05:07:26.456423 2026] [security2:error] [pid 1018003:tid 1018155] [client 149.34.210.141:34037] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9bjAh5Y1i2tUxg4ETNQAABbw"]
[Sat Aug 29 05:07:26.464156 2026] [security2:error] [pid 1018003:tid 1018119] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/.env~"] [unique_id "apK9bjAh5Y1i2tUxg4ETOAAF_mI"]
[Sat Aug 29 05:07:26.471068 2026] [security2:error] [pid 1028675:tid 1028811] [client 195.178.110.247:5414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lifesosweet.com"] [uri "/index.php"] [unique_id "apK9btdHPfW2QFvhmL7lkQAAAAE"]
[Sat Aug 29 05:07:26.471106 2026] [security2:error] [pid 1028675:tid 1028911] [client 68.155.159.216:30693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/asd.php"] [unique_id "apK9btdHPfW2QFvhmL7lkAAAAGU"]
[Sat Aug 29 05:07:26.474502 2026] [security2:error] [pid 1018003:tid 1018192] [client 52.139.37.240:14718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/0x.php"] [unique_id "apK9bjAh5Y1i2tUxg4ETOQAABeE"]
[Sat Aug 29 05:07:26.501442 2026] [security2:error] [pid 1018003:tid 1018123] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/.git/config.old"] [unique_id "apK9bjAh5Y1i2tUxg4ETPAAF_mY"]
[Sat Aug 29 05:07:26.502389 2026] [security2:error] [pid 1018003:tid 1018167] [client 158.158.54.35:16132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "apK9bjAh5Y1i2tUxg4ETPQAABcg"]
[Sat Aug 29 05:07:26.507029 2026] [security2:error] [pid 1018003:tid 1018026] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/.git/config~"] [unique_id "apK9bjAh5Y1i2tUxg4ETPgAF_gU"]
[Sat Aug 29 05:07:26.538977 2026] [core:error] [pid 1028675:tid 1028884] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.538993 2026] [core:error] [pid 1028675:tid 1028884] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.540679 2026] [core:error] [pid 1028675:tid 1028876] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.540694 2026] [core:error] [pid 1028675:tid 1028876] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.541956 2026] [core:error] [pid 1028675:tid 1028918] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.541970 2026] [core:error] [pid 1028675:tid 1028918] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.545619 2026] [core:error] [pid 1028675:tid 1028822] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.545631 2026] [core:error] [pid 1028675:tid 1028822] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.549692 2026] [core:error] [pid 1028675:tid 1028836] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.549703 2026] [core:error] [pid 1028675:tid 1028836] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.550231 2026] [security2:error] [pid 1028675:tid 1028830] [client 68.155.159.216:6123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK9btdHPfW2QFvhmL7lnQAAABQ"]
[Sat Aug 29 05:07:26.550915 2026] [security2:error] [pid 1018003:tid 1018189] [client 20.48.250.41:49139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/wp-link10.php"] [unique_id "apK9bjAh5Y1i2tUxg4ETRQAABd4"]
[Sat Aug 29 05:07:26.565321 2026] [security2:error] [pid 1018003:tid 1018147] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/.git/config.bak"] [unique_id "apK9bjAh5Y1i2tUxg4ETSAAF_n4"]
[Sat Aug 29 05:07:26.570317 2026] [core:error] [pid 1028675:tid 1028842] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.570329 2026] [core:error] [pid 1028675:tid 1028842] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.577815 2026] [security2:error] [pid 1028675:tid 1028844] [client 40.83.93.50:5202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-admin/wp-cron.php"] [unique_id "apK9btdHPfW2QFvhmL7logAAACI"]
[Sat Aug 29 05:07:26.580720 2026] [security2:error] [pid 1028675:tid 1028850] [client 158.158.54.35:22148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-load.php"] [unique_id "apK9btdHPfW2QFvhmL7lowAAACg"]
[Sat Aug 29 05:07:26.584185 2026] [security2:error] [pid 1028675:tid 1028849] [client 20.104.18.15:19440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9btdHPfW2QFvhmL7lpAAAACc"]
[Sat Aug 29 05:07:26.589059 2026] [security2:error] [pid 1028675:tid 1028856] [client 20.48.250.41:35074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/gk.php"] [unique_id "apK9btdHPfW2QFvhmL7lpQAAAC4"]
[Sat Aug 29 05:07:26.592955 2026] [security2:error] [pid 1028675:tid 1028821] [client 52.138.0.157:20499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "apK9btdHPfW2QFvhmL7lpgAAAAs"]
[Sat Aug 29 05:07:26.618133 2026] [core:error] [pid 1028675:tid 1028903] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.618148 2026] [core:error] [pid 1028675:tid 1028903] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.619250 2026] [security2:error] [pid 1028675:tid 1028904] [client 158.23.147.79:26506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/classwithtostring.php"] [unique_id "apK9btdHPfW2QFvhmL7lqQAAAF4"]
[Sat Aug 29 05:07:26.622421 2026] [core:error] [pid 1028675:tid 1028871] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.622439 2026] [core:error] [pid 1028675:tid 1028871] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.633455 2026] [security2:error] [pid 1028675:tid 1028908] [client 195.178.110.247:48676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lifesosweet.com"] [uri "/index.php"] [unique_id "apK9btdHPfW2QFvhmL7lqwAAAGI"]
[Sat Aug 29 05:07:26.662834 2026] [core:error] [pid 1028675:tid 1028920] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.662858 2026] [core:error] [pid 1028675:tid 1028920] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.665911 2026] [security2:error] [pid 1028675:tid 1028867] [client 68.155.159.216:33551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/dropdown.php"] [unique_id "apK9btdHPfW2QFvhmL7lswAAADk"]
[Sat Aug 29 05:07:26.667480 2026] [security2:error] [pid 1028675:tid 1028826] [client 52.139.37.240:14692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/CDX1.php"] [unique_id "apK9btdHPfW2QFvhmL7ltgAAABA"]
[Sat Aug 29 05:07:26.672239 2026] [security2:error] [pid 1018003:tid 1018202] [client 40.83.93.50:7983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/22.php"] [unique_id "apK9bjAh5Y1i2tUxg4ETTQAABes"]
[Sat Aug 29 05:07:26.674766 2026] [core:error] [pid 1018003:tid 1018273] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.674779 2026] [core:error] [pid 1018003:tid 1018273] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.680083 2026] [security2:error] [pid 1018003:tid 1018159] [client 68.155.159.216:64456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/hehehehe.php"] [unique_id "apK9bjAh5Y1i2tUxg4ETTwAABcA"]
[Sat Aug 29 05:07:26.684368 2026] [security2:error] [pid 1028675:tid 1028897] [client 20.196.209.81:10572] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "www.hellospringford.wine-garden.com"] [uri "/1.php7"] [unique_id "apK9btdHPfW2QFvhmL7luwAAAFc"]
[Sat Aug 29 05:07:26.684440 2026] [security2:error] [pid 1028675:tid 1028897] [client 20.196.209.81:10572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/1.php7"] [unique_id "apK9btdHPfW2QFvhmL7luwAAAFc"]
[Sat Aug 29 05:07:26.687501 2026] [security2:error] [pid 1018003:tid 1018196] [client 168.107.94.195:65318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9bjAh5Y1i2tUxg4ETUAAABeU"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:26.689130 2026] [security2:error] [pid 1028675:tid 1028858] [client 20.48.250.41:49120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/ww.php"] [unique_id "apK9btdHPfW2QFvhmL7lvQAAADA"]
[Sat Aug 29 05:07:26.700018 2026] [security2:error] [pid 1028675:tid 1028853] [client 20.104.18.15:12248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/images.php"] [unique_id "apK9btdHPfW2QFvhmL7lvwAAACs"]
[Sat Aug 29 05:07:26.713721 2026] [core:error] [pid 1028675:tid 1028815] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.713734 2026] [core:error] [pid 1028675:tid 1028815] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.713888 2026] [core:error] [pid 1028675:tid 1028843] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.713897 2026] [core:error] [pid 1028675:tid 1028843] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.727529 2026] [security2:error] [pid 1028675:tid 1028879] [client 20.203.141.11:38626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/css.php"] [unique_id "apK9btdHPfW2QFvhmL7lxgAAAEU"]
[Sat Aug 29 05:07:26.740244 2026] [security2:error] [pid 1028675:tid 1028911] [client 68.155.159.216:12139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK9btdHPfW2QFvhmL7lyQAAAGU"]
[Sat Aug 29 05:07:26.749395 2026] [security2:error] [pid 1028675:tid 1028888] [client 57.141.14.67:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/cart/"] [unique_id "apK9btdHPfW2QFvhmL7lygAAAE4"]
[Sat Aug 29 05:07:26.749927 2026] [security2:error] [pid 1028675:tid 1028894] [client 20.104.18.15:19399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/ap.php"] [unique_id "apK9btdHPfW2QFvhmL7lywAAAFQ"]
[Sat Aug 29 05:07:26.760474 2026] [core:error] [pid 1018003:tid 1018265] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.760490 2026] [core:error] [pid 1018003:tid 1018265] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.771314 2026] [security2:error] [pid 1028675:tid 1028822] [client 158.23.147.79:30472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/worksec.php"] [unique_id "apK9btdHPfW2QFvhmL7l1AAAAAw"]
[Sat Aug 29 05:07:26.782196 2026] [security2:error] [pid 1028675:tid 1028860] [client 20.48.250.41:35106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/logs1.php"] [unique_id "apK9btdHPfW2QFvhmL7l2wAAADI"]
[Sat Aug 29 05:07:26.787578 2026] [security2:error] [pid 1018003:tid 1018268] [client 52.138.0.157:5682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-content/uploads/de_fb_uploads/b.php"] [unique_id "apK9bjAh5Y1i2tUxg4ETWwAABiw"]
[Sat Aug 29 05:07:26.793453 2026] [security2:error] [pid 1018003:tid 1018277] [client 4.205.62.107:53138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/ty.php"] [unique_id "apK9bjAh5Y1i2tUxg4ETXAAABjU"]
[Sat Aug 29 05:07:26.799647 2026] [security2:error] [pid 1028675:tid 1028812] [client 158.23.147.79:30414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK9btdHPfW2QFvhmL7l3AAAAAI"]
[Sat Aug 29 05:07:26.801025 2026] [security2:error] [pid 1028675:tid 1028839] [client 20.151.200.44:63949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9btdHPfW2QFvhmL7l3QAAAB0"]
[Sat Aug 29 05:07:26.808688 2026] [security2:error] [pid 1028675:tid 1028916] [client 20.104.49.130:47842] ModSecurity: Access denied with connection close (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1032"] [id "900036"] [msg "Wordpress BOT exploit :: No UA/Referer"] [hostname "mail.flatlandsfoto.com"] [uri "/wp-login.php"] [unique_id "apK9btdHPfW2QFvhmL7l3gAAAGo"]
[Sat Aug 29 05:07:26.810089 2026] [core:error] [pid 1018003:tid 1018172] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.810101 2026] [core:error] [pid 1018003:tid 1018172] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.812900 2026] [core:error] [pid 1028675:tid 1028850] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.812915 2026] [core:error] [pid 1028675:tid 1028850] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.813004 2026] [core:error] [pid 1018003:tid 1018258] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.813015 2026] [core:error] [pid 1018003:tid 1018258] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.814168 2026] [core:error] [pid 1028675:tid 1028849] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.814182 2026] [core:error] [pid 1028675:tid 1028849] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.817096 2026] [core:error] [pid 1028675:tid 1028821] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.817108 2026] [core:error] [pid 1028675:tid 1028821] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.820995 2026] [security2:error] [pid 1028675:tid 1028871] [client 20.104.49.130:36329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.carlosmua.com"] [uri "/fs.php"] [unique_id "apK9btdHPfW2QFvhmL7l5gAAAD0"]
[Sat Aug 29 05:07:26.830800 2026] [core:error] [pid 1018003:tid 1018187] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.830815 2026] [core:error] [pid 1018003:tid 1018187] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.840041 2026] [security2:error] [pid 1028675:tid 1028922] [client 20.48.250.41:48993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/w1px.php"] [unique_id "apK9btdHPfW2QFvhmL7l7AAAAHA"]
[Sat Aug 29 05:07:26.858575 2026] [security2:error] [pid 1028675:tid 1028861] [client 68.155.159.216:2022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK9btdHPfW2QFvhmL7l7wAAADM"]
[Sat Aug 29 05:07:26.863514 2026] [security2:error] [pid 1028675:tid 1028832] [client 52.139.37.240:14694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/akcc.php"] [unique_id "apK9btdHPfW2QFvhmL7l8AAAABY"]
[Sat Aug 29 05:07:26.880580 2026] [core:error] [pid 1018003:tid 1018200] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.880602 2026] [core:error] [pid 1018003:tid 1018200] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.880720 2026] [core:error] [pid 1028675:tid 1028858] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.880730 2026] [core:error] [pid 1028675:tid 1028858] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.884740 2026] [core:error] [pid 1028675:tid 1028929] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.884753 2026] [core:error] [pid 1028675:tid 1028929] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.886789 2026] [core:error] [pid 1028675:tid 1028930] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.886806 2026] [core:error] [pid 1028675:tid 1028930] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.887277 2026] [security2:error] [pid 1018003:tid 1018170] [client 68.155.159.216:56522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK9bjAh5Y1i2tUxg4ETbAAABcs"]
[Sat Aug 29 05:07:26.887780 2026] [core:error] [pid 1028675:tid 1028853] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.887793 2026] [core:error] [pid 1028675:tid 1028853] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.889052 2026] [security2:error] [pid 1018003:tid 1018157] [client 20.203.141.11:8984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/core.php"] [unique_id "apK9bjAh5Y1i2tUxg4ETbQAABb4"]
[Sat Aug 29 05:07:26.889940 2026] [core:error] [pid 1028675:tid 1028845] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.889953 2026] [core:error] [pid 1028675:tid 1028845] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.895797 2026] [security2:error] [pid 1028675:tid 1028911] [client 20.104.18.15:19406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/media.php"] [unique_id "apK9btdHPfW2QFvhmL7l-QAAAGU"]
[Sat Aug 29 05:07:26.897202 2026] [security2:error] [pid 1028675:tid 1028892] [client 68.155.159.216:33718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/index/function.php"] [unique_id "apK9btdHPfW2QFvhmL7l-gAAAFI"]
[Sat Aug 29 05:07:26.945777 2026] [security2:error] [pid 1018003:tid 1018270] [client 20.104.18.15:12177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/ops.php"] [unique_id "apK9bjAh5Y1i2tUxg4ETcAAABi4"]
[Sat Aug 29 05:07:26.959333 2026] [core:error] [pid 1028675:tid 1028828] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.959768 2026] [core:error] [pid 1028675:tid 1028828] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.960503 2026] [security2:error] [pid 1018003:tid 1018192] [client 68.155.159.216:18273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9bjAh5Y1i2tUxg4ETdAAABeE"]
[Sat Aug 29 05:07:26.984234 2026] [security2:error] [pid 1018003:tid 1018222] [client 52.138.0.157:40974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK9bjAh5Y1i2tUxg4ETdQAABf8"]
[Sat Aug 29 05:07:26.989778 2026] [core:error] [pid 1028675:tid 1028914] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:26.989795 2026] [core:error] [pid 1028675:tid 1028914] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.007943 2026] [core:error] [pid 1018003:tid 1018262] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.007967 2026] [core:error] [pid 1018003:tid 1018262] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.011489 2026] [security2:error] [pid 1018003:tid 1018231] [client 158.158.54.35:4438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "apK9bzAh5Y1i2tUxg4ETewAABgc"]
[Sat Aug 29 05:07:27.021839 2026] [security2:error] [pid 1018003:tid 1018213] [client 68.155.159.216:51256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/images/index.php"] [unique_id "apK9bzAh5Y1i2tUxg4ETfgAABfY"]
[Sat Aug 29 05:07:27.028345 2026] [security2:error] [pid 1018003:tid 1018043] [remote 216.73.216.46:58556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo-store.sortthru.com"] [uri "/reception-signs/"] [unique_id "apK9bzAh5Y1i2tUxg4ETfQAGFBY"]
[Sat Aug 29 05:07:27.044605 2026] [core:error] [pid 1028675:tid 1028917] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.044626 2026] [core:error] [pid 1028675:tid 1028917] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.045673 2026] [core:error] [pid 1018003:tid 1018271] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.045673 2026] [core:error] [pid 1028675:tid 1028884] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.045690 2026] [core:error] [pid 1018003:tid 1018271] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.045694 2026] [core:error] [pid 1028675:tid 1028884] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.046740 2026] [core:error] [pid 1028675:tid 1028912] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.046755 2026] [core:error] [pid 1028675:tid 1028912] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.048315 2026] [core:error] [pid 1028675:tid 1028875] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.048327 2026] [core:error] [pid 1028675:tid 1028875] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.062029 2026] [security2:error] [pid 1028675:tid 1028839] [client 52.139.37.240:14952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK9b9dHPfW2QFvhmL7mCQAAAB0"]
[Sat Aug 29 05:07:27.063590 2026] [security2:error] [pid 1028675:tid 1028872] [client 40.83.93.50:5653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-admin/wp-links-opml.php"] [unique_id "apK9b9dHPfW2QFvhmL7mCgAAAD4"]
[Sat Aug 29 05:07:27.067906 2026] [security2:error] [pid 1018003:tid 1018182] [client 168.107.94.195:49343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9bzAh5Y1i2tUxg4ETgQAABdc"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:27.077339 2026] [security2:error] [pid 1028675:tid 1028928] [client 20.104.18.15:12160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/coffexium.php"] [unique_id "apK9b9dHPfW2QFvhmL7mCwAAAHY"]
[Sat Aug 29 05:07:27.110830 2026] [security2:error] [pid 1018003:tid 1018265] [client 20.104.18.15:19392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/adminfuns.php"] [unique_id "apK9bzAh5Y1i2tUxg4ETggAABik"]
[Sat Aug 29 05:07:27.139731 2026] [security2:error] [pid 1018003:tid 1018219] [client 20.196.209.81:10597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/ds.php"] [unique_id "apK9bzAh5Y1i2tUxg4ETigAABfw"]
[Sat Aug 29 05:07:27.142713 2026] [core:error] [pid 1028675:tid 1028879] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.142729 2026] [core:error] [pid 1028675:tid 1028879] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.151973 2026] [security2:error] [pid 1018003:tid 1018238] [client 4.205.62.107:21600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/upload.form.php"] [unique_id "apK9bzAh5Y1i2tUxg4ETjwAABg4"]
[Sat Aug 29 05:07:27.157106 2026] [core:error] [pid 1018003:tid 1018255] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.157123 2026] [core:error] [pid 1018003:tid 1018255] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.161318 2026] [core:error] [pid 1018003:tid 1018266] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.161332 2026] [core:error] [pid 1018003:tid 1018266] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.161717 2026] [core:error] [pid 1028675:tid 1028845] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.161734 2026] [core:error] [pid 1028675:tid 1028845] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.162046 2026] [core:error] [pid 1018003:tid 1018184] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.162060 2026] [core:error] [pid 1018003:tid 1018184] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.164557 2026] [core:error] [pid 1028675:tid 1028881] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.164568 2026] [core:error] [pid 1028675:tid 1028881] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.164926 2026] [security2:error] [pid 1028675:tid 1028849] [client 40.83.93.50:7986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/bak.phps"] [unique_id "apK9b9dHPfW2QFvhmL7mFgAAACc"]
[Sat Aug 29 05:07:27.166663 2026] [core:error] [pid 1018003:tid 1018190] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.166676 2026] [core:error] [pid 1018003:tid 1018190] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.176687 2026] [security2:error] [pid 1018003:tid 1018177] [client 158.158.54.35:21991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/a.php"] [unique_id "apK9bzAh5Y1i2tUxg4ETlwAABdI"]
[Sat Aug 29 05:07:27.177613 2026] [core:error] [pid 1028675:tid 1028888] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.177625 2026] [core:error] [pid 1028675:tid 1028888] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.180155 2026] [core:error] [pid 1018003:tid 1018157] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.180167 2026] [core:error] [pid 1018003:tid 1018157] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.182148 2026] [security2:error] [pid 1018003:tid 1018268] [client 52.138.0.157:27785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK9bzAh5Y1i2tUxg4ETmQAABiw"]
[Sat Aug 29 05:07:27.191290 2026] [core:error] [pid 1018003:tid 1018191] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.191302 2026] [core:error] [pid 1018003:tid 1018191] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.239438 2026] [security2:error] [pid 1028675:tid 1028937] [client 158.23.147.79:61599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-admin/admin.php"] [unique_id "apK9b9dHPfW2QFvhmL7mGwAAAH8"]
[Sat Aug 29 05:07:27.251675 2026] [security2:error] [pid 1028675:tid 1028866] [client 197.219.150.206:62568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK9b9dHPfW2QFvhmL7mHAAAADg"]
[Sat Aug 29 05:07:27.251788 2026] [security2:error] [pid 1028675:tid 1028866] [client 197.219.150.206:62568] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK9b9dHPfW2QFvhmL7mHAAAADg"]
[Sat Aug 29 05:07:27.257189 2026] [security2:error] [pid 1028675:tid 1028836] [client 52.139.37.240:14663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/s.php"] [unique_id "apK9b9dHPfW2QFvhmL7mHQAAABo"]
[Sat Aug 29 05:07:27.257189 2026] [security2:error] [pid 1018003:tid 1018246] [client 20.104.18.15:19328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/classwithtostring.php"] [unique_id "apK9bzAh5Y1i2tUxg4ETnQAABhY"]
[Sat Aug 29 05:07:27.271438 2026] [security2:error] [pid 1028675:tid 1028932] [client 20.104.18.15:12173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/BDKR28WP.php"] [unique_id "apK9b9dHPfW2QFvhmL7mHgAAAHo"]
[Sat Aug 29 05:07:27.274839 2026] [security2:error] [pid 1028675:tid 1028907] [client 158.23.147.79:17448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK9b9dHPfW2QFvhmL7mHwAAAGE"]
[Sat Aug 29 05:07:27.282696 2026] [security2:error] [pid 1028675:tid 1028812] [client 20.151.200.44:65274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9b9dHPfW2QFvhmL7mIQAAAAI"]
[Sat Aug 29 05:07:27.289393 2026] [security2:error] [pid 1028675:tid 1028833] [client 52.139.37.240:19289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/ahax.php"] [unique_id "apK9b9dHPfW2QFvhmL7mIwAAABc"]
[Sat Aug 29 05:07:27.290526 2026] [security2:error] [pid 1028675:tid 1028894] [client 61.9.8.52:13583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 52.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK9b9dHPfW2QFvhmL7mIAAAAFQ"]
[Sat Aug 29 05:07:27.290617 2026] [security2:error] [pid 1028675:tid 1028894] [client 61.9.8.52:13583] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK9b9dHPfW2QFvhmL7mIAAAAFQ"]
[Sat Aug 29 05:07:27.302583 2026] [security2:error] [pid 1028675:tid 1028896] [client 158.23.147.79:50041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-content/radio.php"] [unique_id "apK9b9dHPfW2QFvhmL7mJQAAAFY"]
[Sat Aug 29 05:07:27.314230 2026] [core:error] [pid 1018003:tid 1018231] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.314244 2026] [core:error] [pid 1018003:tid 1018231] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.351318 2026] [security2:error] [pid 1028675:tid 1028928] [client 68.155.159.216:24492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-login.php"] [unique_id "apK9b9dHPfW2QFvhmL7mKgAAAHY"]
[Sat Aug 29 05:07:27.374545 2026] [security2:error] [pid 1028675:tid 1028841] [client 52.138.0.157:20509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "apK9b9dHPfW2QFvhmL7mKwAAAB8"]
[Sat Aug 29 05:07:27.396510 2026] [security2:error] [pid 1028675:tid 1028936] [client 20.203.141.11:11243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/admin/function.php"] [unique_id "apK9b9dHPfW2QFvhmL7mLgAAAH4"]
[Sat Aug 29 05:07:27.402150 2026] [core:error] [pid 1028675:tid 1028848] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.402169 2026] [core:error] [pid 1028675:tid 1028848] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.402819 2026] [core:error] [pid 1018003:tid 1018271] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.402832 2026] [core:error] [pid 1018003:tid 1018271] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.404390 2026] [core:error] [pid 1018003:tid 1018087] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.404403 2026] [core:error] [pid 1018003:tid 1018087] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.405743 2026] [security2:error] [pid 1018003:tid 1018207] [client 4.205.62.107:24986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/edit.php"] [unique_id "apK9bzAh5Y1i2tUxg4ETugAABfA"]
[Sat Aug 29 05:07:27.407644 2026] [security2:error] [pid 1028675:tid 1028900] [client 20.104.18.15:12277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/sf.php"] [unique_id "apK9b9dHPfW2QFvhmL7mMQAAAFo"]
[Sat Aug 29 05:07:27.408219 2026] [core:error] [pid 1018003:tid 1018273] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.408220 2026] [security2:error] [pid 1028675:tid 1028843] [client 20.104.18.15:19423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK9b9dHPfW2QFvhmL7mMgAAACE"]
[Sat Aug 29 05:07:27.408231 2026] [core:error] [pid 1018003:tid 1018273] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.408290 2026] [core:error] [pid 1028675:tid 1028870] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.408298 2026] [core:error] [pid 1028675:tid 1028870] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.409273 2026] [core:error] [pid 1018003:tid 1018202] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.409290 2026] [core:error] [pid 1018003:tid 1018202] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.410733 2026] [core:error] [pid 1018003:tid 1018221] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.410745 2026] [core:error] [pid 1018003:tid 1018221] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.421171 2026] [core:error] [pid 1028675:tid 1028820] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.421184 2026] [core:error] [pid 1028675:tid 1028820] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.421329 2026] [core:error] [pid 1028675:tid 1028846] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.421338 2026] [core:error] [pid 1028675:tid 1028846] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.422723 2026] [core:error] [pid 1028675:tid 1028849] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.422735 2026] [core:error] [pid 1028675:tid 1028849] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.435823 2026] [core:error] [pid 1028675:tid 1028910] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.435844 2026] [core:error] [pid 1028675:tid 1028910] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.446190 2026] [security2:error] [pid 1028675:tid 1028930] [client 168.107.94.195:49829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9b9dHPfW2QFvhmL7mOQAAAHg"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:27.450096 2026] [security2:error] [pid 1028675:tid 1028863] [client 52.139.37.240:14925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/sagax.php"] [unique_id "apK9b9dHPfW2QFvhmL7mOgAAADU"]
[Sat Aug 29 05:07:27.452571 2026] [core:error] [pid 1018003:tid 1018233] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.452585 2026] [core:error] [pid 1018003:tid 1018233] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.453133 2026] [core:error] [pid 1018003:tid 1018172] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.453144 2026] [core:error] [pid 1018003:tid 1018172] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.454348 2026] [core:error] [pid 1018003:tid 1018161] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.454367 2026] [core:error] [pid 1018003:tid 1018161] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.456520 2026] [security2:error] [pid 1028675:tid 1028911] [client 158.23.147.79:32741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/about/function.php"] [unique_id "apK9b9dHPfW2QFvhmL7mOwAAAGU"]
[Sat Aug 29 05:07:27.459536 2026] [security2:error] [pid 1028675:tid 1028904] [client 158.158.54.35:29663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/gifclass.php"] [unique_id "apK9b9dHPfW2QFvhmL7mPAAAAF4"]
[Sat Aug 29 05:07:27.469605 2026] [security2:error] [pid 1028675:tid 1028920] [client 4.205.62.107:58475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/time.php"] [unique_id "apK9b9dHPfW2QFvhmL7mPwAAAG4"]
[Sat Aug 29 05:07:27.481698 2026] [security2:error] [pid 1028675:tid 1028845] [client 52.139.37.240:19318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/breads1.php"] [unique_id "apK9b9dHPfW2QFvhmL7mQAAAACM"]
[Sat Aug 29 05:07:27.488647 2026] [core:error] [pid 1018003:tid 1018170] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.488662 2026] [core:error] [pid 1018003:tid 1018170] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.490602 2026] [security2:error] [pid 1028675:tid 1028890] [client 158.23.147.79:48192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/goat1.php"] [unique_id "apK9b9dHPfW2QFvhmL7mQQAAAFA"]
[Sat Aug 29 05:07:27.528256 2026] [security2:error] [pid 1028675:tid 1028830] [client 4.205.62.107:22024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/v3.php"] [unique_id "apK9b9dHPfW2QFvhmL7mQgAAABQ"]
[Sat Aug 29 05:07:27.530810 2026] [security2:error] [pid 1028675:tid 1028824] [client 40.83.93.50:5650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-admin/wp-load.php"] [unique_id "apK9b9dHPfW2QFvhmL7mQwAAAA4"]
[Sat Aug 29 05:07:27.533406 2026] [security2:error] [pid 1028675:tid 1028932] [client 68.155.159.216:49341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apK9b9dHPfW2QFvhmL7mRAAAAHo"]
[Sat Aug 29 05:07:27.540865 2026] [security2:error] [pid 1018003:tid 1018226] [client 146.70.36.124:49828] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.airviewconcept.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "apK9bzAh5Y1i2tUxg4ETxAAABgM"]
[Sat Aug 29 05:07:27.548003 2026] [security2:error] [pid 1028675:tid 1028894] [client 158.23.147.79:25556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK9b9dHPfW2QFvhmL7mRgAAAFQ"]
[Sat Aug 29 05:07:27.565267 2026] [security2:error] [pid 1018003:tid 1018092] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/API/.env"] [unique_id "apK9bzAh5Y1i2tUxg4ETxgAGK0c"]
[Sat Aug 29 05:07:27.572283 2026] [core:error] [pid 1028675:tid 1028819] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.572298 2026] [core:error] [pid 1028675:tid 1028819] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.575158 2026] [security2:error] [pid 1018003:tid 1018238] [client 20.196.209.81:10609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/GOD.php"] [unique_id "apK9bzAh5Y1i2tUxg4ETyQAABg4"]
[Sat Aug 29 05:07:27.577179 2026] [security2:error] [pid 1028675:tid 1028875] [client 20.104.18.15:12174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/k.php"] [unique_id "apK9b9dHPfW2QFvhmL7mSgAAAEE"]
[Sat Aug 29 05:07:27.580167 2026] [core:error] [pid 1018003:tid 1018070] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.580180 2026] [core:error] [pid 1018003:tid 1018070] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.582541 2026] [security2:error] [pid 1018003:tid 1018192] [client 20.104.18.15:19449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/5PJcpMFsD8B.php"] [unique_id "apK9bzAh5Y1i2tUxg4ETywAABeE"]
[Sat Aug 29 05:07:27.589820 2026] [core:error] [pid 1018003:tid 1018059] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.589837 2026] [core:error] [pid 1018003:tid 1018059] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.590978 2026] [security2:error] [pid 1028675:tid 1028821] [client 68.155.159.216:30690] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/1.php"] [unique_id "apK9b9dHPfW2QFvhmL7mSwAAAAs"]
[Sat Aug 29 05:07:27.591054 2026] [security2:error] [pid 1028675:tid 1028821] [client 68.155.159.216:30690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/1.php"] [unique_id "apK9b9dHPfW2QFvhmL7mSwAAAAs"]
[Sat Aug 29 05:07:27.599436 2026] [core:error] [pid 1018003:tid 1018122] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.599451 2026] [core:error] [pid 1018003:tid 1018122] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.600483 2026] [core:error] [pid 1018003:tid 1018030] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.600495 2026] [core:error] [pid 1018003:tid 1018030] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.603515 2026] [core:error] [pid 1028675:tid 1028927] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.603527 2026] [core:error] [pid 1028675:tid 1028927] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.609029 2026] [core:error] [pid 1018003:tid 1018053] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.609043 2026] [core:error] [pid 1018003:tid 1018053] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.613519 2026] [core:error] [pid 1018003:tid 1018028] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.613531 2026] [core:error] [pid 1018003:tid 1018028] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.614605 2026] [security2:error] [pid 1018003:tid 1018084] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/APP/.env"] [unique_id "apK9bzAh5Y1i2tUxg4ET0wAGKz8"]
[Sat Aug 29 05:07:27.614636 2026] [security2:error] [pid 1018003:tid 1018096] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/Api/.env"] [unique_id "apK9bzAh5Y1i2tUxg4ET0gAGK0s"]
[Sat Aug 29 05:07:27.634799 2026] [security2:error] [pid 1018003:tid 1018248] [client 52.138.0.157:5695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "apK9bzAh5Y1i2tUxg4ET1AAABhg"]
[Sat Aug 29 05:07:27.635145 2026] [security2:error] [pid 1018003:tid 1018081] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/.wp-config.php.swp"] [unique_id "apK9bzAh5Y1i2tUxg4ET1QAF5Dw"]
[Sat Aug 29 05:07:27.638314 2026] [security2:error] [pid 1018003:tid 1018076] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/ADMIN/.env"] [unique_id "apK9bzAh5Y1i2tUxg4ET1gAF_zc"]
[Sat Aug 29 05:07:27.647276 2026] [authz_core:error] [pid 1028675:tid 1028816] [client 43.159.144.16:0] AH01630: client denied by server configuration: /home4/rocworxc/public_html/royalryder/php.ini, referer: http://www.royalryder.com
[Sat Aug 29 05:07:27.667455 2026] [security2:error] [pid 1028675:tid 1028847] [client 158.158.54.35:5279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/u.php"] [unique_id "apK9b9dHPfW2QFvhmL7mUwAAACU"]
[Sat Aug 29 05:07:27.674116 2026] [core:error] [pid 1018003:tid 1018246] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.674140 2026] [core:error] [pid 1018003:tid 1018246] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.677168 2026] [security2:error] [pid 1028675:tid 1028837] [client 52.139.37.240:19281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/must.php"] [unique_id "apK9b9dHPfW2QFvhmL7mVAAAABs"]
[Sat Aug 29 05:07:27.717728 2026] [security2:error] [pid 1018003:tid 1018216] [client 20.104.18.15:19448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK9bzAh5Y1i2tUxg4ET2gAABfk"]
[Sat Aug 29 05:07:27.722837 2026] [security2:error] [pid 1018003:tid 1018271] [client 52.139.37.240:14504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/wp-content/plugins/ftde.php"] [unique_id "apK9bzAh5Y1i2tUxg4ET3AAABi8"]
[Sat Aug 29 05:07:27.724283 2026] [security2:error] [pid 1018003:tid 1018207] [client 158.23.147.79:26445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/install.php"] [unique_id "apK9bzAh5Y1i2tUxg4ET3QAABfA"]
[Sat Aug 29 05:07:27.728468 2026] [security2:error] [pid 1018003:tid 1018273] [client 4.205.62.107:9159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/atex1.php"] [unique_id "apK9bzAh5Y1i2tUxg4ET3wAABjE"]
[Sat Aug 29 05:07:27.728498 2026] [security2:error] [pid 1018003:tid 1018202] [client 20.104.18.15:12227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/82.php"] [unique_id "apK9bzAh5Y1i2tUxg4ET3gAABes"]
[Sat Aug 29 05:07:27.751717 2026] [security2:error] [pid 1028675:tid 1028898] [client 20.151.200.44:64657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/baee.php"] [unique_id "apK9b9dHPfW2QFvhmL7mVQAAAFg"]
[Sat Aug 29 05:07:27.759994 2026] [security2:error] [pid 1028675:tid 1028929] [client 20.104.49.130:47945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/reop3.php"] [unique_id "apK9b9dHPfW2QFvhmL7mVwAAAHc"]
[Sat Aug 29 05:07:27.776033 2026] [security2:error] [pid 1028675:tid 1028840] [client 68.155.159.216:33787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/.well-known/index.php"] [unique_id "apK9b9dHPfW2QFvhmL7mWAAAAB4"]
[Sat Aug 29 05:07:27.788124 2026] [security2:error] [pid 1028675:tid 1028923] [client 68.155.159.216:65067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK9b9dHPfW2QFvhmL7mWQAAAHE"]
[Sat Aug 29 05:07:27.823909 2026] [security2:error] [pid 1028675:tid 1028925] [client 168.107.94.195:50268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9b9dHPfW2QFvhmL7mWwAAAHM"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:27.831041 2026] [security2:error] [pid 1028675:tid 1028879] [client 52.138.0.157:27793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9b9dHPfW2QFvhmL7mXAAAAEU"]
[Sat Aug 29 05:07:27.832475 2026] [security2:error] [pid 1028675:tid 1028850] [client 103.168.67.159:50004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 159.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "naturalkneads.com"] [uri "/wp/index.php"] [unique_id "apK9b9dHPfW2QFvhmL7mXQAAACg"], referer: https://naturalkneads.com/wp/wp-admin/
[Sat Aug 29 05:07:27.842815 2026] [security2:error] [pid 1028675:tid 1028818] [client 146.70.36.124:49832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 124.36.70.146.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "webdisk.airviewconcept.com"] [uri "/xmlrpc.php"] [unique_id "apK9b9dHPfW2QFvhmL7mXgAAAAg"]
[Sat Aug 29 05:07:27.847489 2026] [security2:error] [pid 1028675:tid 1028909] [client 68.155.159.216:12208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK9b9dHPfW2QFvhmL7mXwAAAGM"]
[Sat Aug 29 05:07:27.847827 2026] [security2:error] [pid 1028675:tid 1028926] [client 111.235.68.106:1868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK9b9dHPfW2QFvhmL7mYAAAAHQ"]
[Sat Aug 29 05:07:27.847912 2026] [security2:error] [pid 1028675:tid 1028926] [client 111.235.68.106:1868] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK9b9dHPfW2QFvhmL7mYAAAAHQ"]
[Sat Aug 29 05:07:27.867864 2026] [security2:error] [pid 1018003:tid 1018152] [client 213.202.253.4:63616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bv-place.com"] [uri "/userfuns.php"] [unique_id "apK9bzAh5Y1i2tUxg4ET4gAABbk"], referer: www.google.com
[Sat Aug 29 05:07:27.884867 2026] [security2:error] [pid 1018003:tid 1018212] [client 52.139.37.240:19291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/up.php"] [unique_id "apK9bzAh5Y1i2tUxg4ET4wAABfU"]
[Sat Aug 29 05:07:27.886939 2026] [security2:error] [pid 1018003:tid 1018219] [client 20.104.18.15:19335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/wsd.php"] [unique_id "apK9bzAh5Y1i2tUxg4ET5AAABfw"]
[Sat Aug 29 05:07:27.896576 2026] [security2:error] [pid 1028675:tid 1028918] [client 20.104.18.15:12266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/dex.php"] [unique_id "apK9b9dHPfW2QFvhmL7mYgAAAGw"]
[Sat Aug 29 05:07:27.909098 2026] [security2:error] [pid 1018003:tid 1018155] [client 158.23.147.79:30537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/x.php"] [unique_id "apK9bzAh5Y1i2tUxg4ET5QAABbw"]
[Sat Aug 29 05:07:27.909901 2026] [security2:error] [pid 1018003:tid 1018255] [client 158.23.147.79:30467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK9bzAh5Y1i2tUxg4ET5gAABh8"]
[Sat Aug 29 05:07:27.912224 2026] [security2:error] [pid 1018003:tid 1018162] [client 52.139.37.240:14701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "apK9bzAh5Y1i2tUxg4ET5wAABcM"]
[Sat Aug 29 05:07:27.913036 2026] [core:error] [pid 1028675:tid 1028912] [client 158.158.54.35:20553] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.913054 2026] [core:error] [pid 1028675:tid 1028912] [client 158.158.54.35:20553] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:27.926895 2026] [security2:error] [pid 1028675:tid 1028815] [client 40.83.93.50:7434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/install.php"] [unique_id "apK9b9dHPfW2QFvhmL7mZAAAAAU"]
[Sat Aug 29 05:07:27.933430 2026] [security2:error] [pid 1018003:tid 1018236] [client 4.205.62.107:53290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/adminer-4.7.6-en.php"] [unique_id "apK9bzAh5Y1i2tUxg4ET6AAABgw"]
[Sat Aug 29 05:07:27.945918 2026] [security2:error] [pid 1028675:tid 1028839] [client 20.203.141.11:23672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/admin/index.php"] [unique_id "apK9b9dHPfW2QFvhmL7mZQAAAB0"]
[Sat Aug 29 05:07:27.966335 2026] [security2:error] [pid 1018003:tid 1018190] [client 68.155.159.216:1936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK9bzAh5Y1i2tUxg4ET6QAABd8"]
[Sat Aug 29 05:07:27.994186 2026] [security2:error] [pid 1028675:tid 1028930] [client 40.83.93.50:5204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-admin/wp-mail.php"] [unique_id "apK9b9dHPfW2QFvhmL7mZwAAAHg"]
[Sat Aug 29 05:07:27.995464 2026] [security2:error] [pid 1028675:tid 1028890] [client 20.48.250.41:35052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/inege.php"] [unique_id "apK9b9dHPfW2QFvhmL7maAAAAFA"]
[Sat Aug 29 05:07:28.004270 2026] [security2:error] [pid 1028675:tid 1028842] [client 20.196.209.81:14525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/ggfi.php"] [unique_id "apK9cNdHPfW2QFvhmL7maQAAACA"]
[Sat Aug 29 05:07:28.022116 2026] [security2:error] [pid 1028675:tid 1028860] [client 20.104.18.15:19347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/bulet.php"] [unique_id "apK9cNdHPfW2QFvhmL7magAAADI"]
[Sat Aug 29 05:07:28.065905 2026] [security2:error] [pid 1028675:tid 1028824] [client 68.155.159.216:33625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/.well-known/content.php"] [unique_id "apK9cNdHPfW2QFvhmL7mbQAAAA4"]
[Sat Aug 29 05:07:28.071114 2026] [security2:error] [pid 1018003:tid 1018268] [client 68.155.159.216:18414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/content.php"] [unique_id "apK9cDAh5Y1i2tUxg4ET6wAABiw"]
[Sat Aug 29 05:07:28.071520 2026] [security2:error] [pid 1028675:tid 1028907] [client 20.104.49.130:63594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/reviall.php"] [unique_id "apK9cNdHPfW2QFvhmL7mbgAAAGE"]
[Sat Aug 29 05:07:28.071677 2026] [security2:error] [pid 1028675:tid 1028932] [client 20.104.104.62:10563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/mmm.php"] [unique_id "apK9cNdHPfW2QFvhmL7mbwAAAHo"]
[Sat Aug 29 05:07:28.072777 2026] [security2:error] [pid 1028675:tid 1028812] [client 68.155.159.216:65094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK9cNdHPfW2QFvhmL7mcAAAAAI"]
[Sat Aug 29 05:07:28.081706 2026] [security2:error] [pid 1028675:tid 1028833] [client 20.104.18.15:12175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/inso.php"] [unique_id "apK9cNdHPfW2QFvhmL7mcgAAABc"]
[Sat Aug 29 05:07:28.092336 2026] [http2:warn] [pid 1017536:tid 1017714] [client 57.141.14.73:47554] h2_stream(1017536-369-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:07:28.102114 2026] [security2:error] [pid 1018003:tid 1018203] [client 158.158.54.35:22461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/r.php"] [unique_id "apK9cDAh5Y1i2tUxg4ET7QAABew"]
[Sat Aug 29 05:07:28.110843 2026] [security2:error] [pid 1028675:tid 1028899] [client 52.138.0.157:19642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-includes/blocks/buttons/index.php"] [unique_id "apK9cNdHPfW2QFvhmL7mdAAAAFk"]
[Sat Aug 29 05:07:28.113315 2026] [security2:error] [pid 1018003:tid 1018226] [client 158.23.147.79:35223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK9cDAh5Y1i2tUxg4ET7gAABgM"]
[Sat Aug 29 05:07:28.123320 2026] [security2:error] [pid 1028675:tid 1028867] [client 195.178.110.247:5426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lifes-finance.com"] [uri "/index.php"] [unique_id "apK9cNdHPfW2QFvhmL7mdQAAADk"]
[Sat Aug 29 05:07:28.129508 2026] [security2:error] [pid 1028675:tid 1028821] [client 20.151.200.44:63403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/d12.php"] [unique_id "apK9cNdHPfW2QFvhmL7megAAAAs"]
[Sat Aug 29 05:07:28.133161 2026] [security2:error] [pid 1028675:tid 1028826] [client 68.155.159.216:51420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK9cNdHPfW2QFvhmL7mfAAAABA"]
[Sat Aug 29 05:07:28.140146 2026] [security2:error] [pid 1028675:tid 1028804] [remote 136.108.23.170:55264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 170.23.108.136.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thesmartpm.com"] [uri "/apps/wp-login.php"] [unique_id "apK9cNdHPfW2QFvhmL7mdgAAR3s"], referer: https://thesmartpm.com/login
[Sat Aug 29 05:07:28.143417 2026] [security2:error] [pid 1028675:tid 1028928] [client 52.139.37.240:19320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/wp-content/155.php"] [unique_id "apK9cNdHPfW2QFvhmL7mfgAAAHY"]
[Sat Aug 29 05:07:28.160172 2026] [security2:error] [pid 1018003:tid 1018238] [client 20.104.18.15:19421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/av.php"] [unique_id "apK9cDAh5Y1i2tUxg4ET8AAABg4"]
[Sat Aug 29 05:07:28.176031 2026] [security2:error] [pid 1028675:tid 1028900] [client 114.119.148.1:48865] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.enproretail.com"] [uri "/blast-window-film-2"] [unique_id "apK9cNdHPfW2QFvhmL7mkAAAAFo"], referer: http://www.enproretail.com/view-control-window-film-2
[Sat Aug 29 05:07:28.177718 2026] [security2:error] [pid 1028675:tid 1028935] [client 20.104.49.130:63571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/samll.php"] [unique_id "apK9cNdHPfW2QFvhmL7mkQAAAH0"]
[Sat Aug 29 05:07:28.181786 2026] [security2:error] [pid 1028675:tid 1028851] [client 52.139.37.240:14936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/z.php"] [unique_id "apK9cNdHPfW2QFvhmL7mkwAAACk"]
[Sat Aug 29 05:07:28.206046 2026] [security2:error] [pid 1028675:tid 1028919] [client 20.104.104.62:44597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/advanced.php"] [unique_id "apK9cNdHPfW2QFvhmL7mlgAAAG0"]
[Sat Aug 29 05:07:28.206602 2026] [security2:error] [pid 1028675:tid 1028823] [client 168.107.94.195:50668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9cNdHPfW2QFvhmL7mlwAAAA0"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:28.231842 2026] [security2:error] [pid 1018003:tid 1018183] [client 20.104.18.15:12240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/aa.php"] [unique_id "apK9cDAh5Y1i2tUxg4ET-AAABdg"]
[Sat Aug 29 05:07:28.288292 2026] [security2:error] [pid 1028675:tid 1028875] [client 195.178.110.247:48692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lifes-finance.com"] [uri "/index.php"] [unique_id "apK9cNdHPfW2QFvhmL7mmwAAAEE"]
[Sat Aug 29 05:07:28.301212 2026] [security2:error] [pid 1028675:tid 1028918] [client 146.70.36.124:49840] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.airviewconcept.com"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "apK9cNdHPfW2QFvhmL7mnQAAAGw"]
[Sat Aug 29 05:07:28.306117 2026] [security2:error] [pid 1018003:tid 1018172] [client 4.205.62.107:22410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/aws_auth.php"] [unique_id "apK9cDAh5Y1i2tUxg4ET-gAABc0"]
[Sat Aug 29 05:07:28.307248 2026] [security2:error] [pid 1018003:tid 1018231] [client 52.138.0.157:20534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "apK9cDAh5Y1i2tUxg4ET-wAABgc"]
[Sat Aug 29 05:07:28.320928 2026] [security2:error] [pid 1018003:tid 1018072] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/BACKEND/.env"] [unique_id "apK9cDAh5Y1i2tUxg4ET_AAF6zM"]
[Sat Aug 29 05:07:28.322341 2026] [security2:error] [pid 1028675:tid 1028876] [client 20.104.18.15:19398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/images.php"] [unique_id "apK9cNdHPfW2QFvhmL7mnwAAAEI"]
[Sat Aug 29 05:07:28.324292 2026] [core:error] [pid 1018003:tid 1018023] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.324306 2026] [core:error] [pid 1018003:tid 1018023] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.327147 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.104.104.62:40198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/vinus.php"] [unique_id "apK9cDAh5Y1i2tUxg4ET_wAABcI"]
[Sat Aug 29 05:07:28.327220 2026] [security2:error] [pid 1018003:tid 1018074] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/Backend/.env"] [unique_id "apK9cDAh5Y1i2tUxg4ET_gAF6zU"]
[Sat Aug 29 05:07:28.329398 2026] [security2:error] [pid 1018003:tid 1018101] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/Be/.env"] [unique_id "apK9cDAh5Y1i2tUxg4EUAAAF61A"]
[Sat Aug 29 05:07:28.338211 2026] [security2:error] [pid 1018003:tid 1018155] [client 52.139.37.240:19319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/wp-update.php"] [unique_id "apK9cDAh5Y1i2tUxg4EUAgAABbw"]
[Sat Aug 29 05:07:28.341386 2026] [core:error] [pid 1028675:tid 1028921] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.341405 2026] [core:error] [pid 1028675:tid 1028921] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.351571 2026] [security2:error] [pid 1028675:tid 1028824] [client 68.155.159.216:16380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/cgi-bin/index.php"] [unique_id "apK9cNdHPfW2QFvhmL7mogAAAA4"]
[Sat Aug 29 05:07:28.352626 2026] [security2:error] [pid 1028675:tid 1028897] [client 20.104.104.62:10852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/blox.php"] [unique_id "apK9cNdHPfW2QFvhmL7mowAAAFc"]
[Sat Aug 29 05:07:28.365855 2026] [security2:error] [pid 1018003:tid 1018179] [client 158.158.54.35:14927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK9cDAh5Y1i2tUxg4EUBAAABdQ"]
[Sat Aug 29 05:07:28.376751 2026] [security2:error] [pid 1028675:tid 1028815] [client 52.139.37.240:15295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/f35.php"] [unique_id "apK9cNdHPfW2QFvhmL7mpQAAAAU"]
[Sat Aug 29 05:07:28.385830 2026] [security2:error] [pid 1018003:tid 1018262] [client 20.104.18.15:12261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/img.php"] [unique_id "apK9cDAh5Y1i2tUxg4EUBQAABiY"]
[Sat Aug 29 05:07:28.391916 2026] [security2:error] [pid 1028675:tid 1028820] [client 35.194.208.44:33238] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/@fs/var/www/html/wp-config.php"] [unique_id "apK9cNdHPfW2QFvhmL7mqAAAAAo"]
[Sat Aug 29 05:07:28.391993 2026] [security2:error] [pid 1028675:tid 1028820] [client 35.194.208.44:33238] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/@fs/var/www/html/wp-config.php"] [unique_id "apK9cNdHPfW2QFvhmL7mqAAAAAo"]
[Sat Aug 29 05:07:28.394265 2026] [security2:error] [pid 1028675:tid 1028833] [client 158.23.147.79:17465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-content/admin.php"] [unique_id "apK9cNdHPfW2QFvhmL7mqQAAABc"]
[Sat Aug 29 05:07:28.395155 2026] [security2:error] [pid 1028675:tid 1028916] [client 20.104.49.130:60748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/ab.php"] [unique_id "apK9cNdHPfW2QFvhmL7mrAAAAGo"]
[Sat Aug 29 05:07:28.395783 2026] [security2:error] [pid 1018003:tid 1018207] [client 35.194.208.44:33274] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/@fs/../../../../../proc/self/environ"] [unique_id "apK9cDAh5Y1i2tUxg4EUCQAABfA"]
[Sat Aug 29 05:07:28.395786 2026] [core:error] [pid 1018003:tid 1018271] [client 35.194.208.44:33290] AH10244: invalid URI path (/@fs/../../../../../app/.env?raw??)
[Sat Aug 29 05:07:28.396986 2026] [core:error] [pid 1028675:tid 1028879] [client 35.194.208.44:33296] AH10244: invalid URI path (/@fs/../../../../../root/.env?raw??)
[Sat Aug 29 05:07:28.399050 2026] [security2:error] [pid 1028675:tid 1028910] [client 35.194.208.44:33304] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2fproc/self/environ"] [unique_id "apK9cNdHPfW2QFvhmL7mtQAAAGQ"]
[Sat Aug 29 05:07:28.401590 2026] [security2:error] [pid 1028675:tid 1028855] [client 35.194.208.44:33236] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/@fs/root/.ssh/id_rsa"] [unique_id "apK9cNdHPfW2QFvhmL7mtAAAAC0"]
[Sat Aug 29 05:07:28.408053 2026] [security2:error] [pid 1018003:tid 1018213] [client 40.83.93.50:11655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/colour.php"] [unique_id "apK9cDAh5Y1i2tUxg4EUFgAABfY"]
[Sat Aug 29 05:07:28.409975 2026] [security2:error] [pid 1028675:tid 1028849] [client 20.203.141.11:35204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/storage/rip.php"] [unique_id "apK9cNdHPfW2QFvhmL7mwAAAACc"]
[Sat Aug 29 05:07:28.422832 2026] [core:error] [pid 1018003:tid 1018236] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.422853 2026] [core:error] [pid 1018003:tid 1018236] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.445493 2026] [security2:error] [pid 1028675:tid 1028911] [client 103.162.125.59:56830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.125.162.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK9cNdHPfW2QFvhmL7myAAAAGU"]
[Sat Aug 29 05:07:28.445541 2026] [security2:error] [pid 1018003:tid 1018058] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/BACK/.env"] [unique_id "apK9cDAh5Y1i2tUxg4EUNgAF6yU"]
[Sat Aug 29 05:07:28.445635 2026] [security2:error] [pid 1028675:tid 1028911] [client 103.162.125.59:56830] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK9cNdHPfW2QFvhmL7myAAAAGU"]
[Sat Aug 29 05:07:28.449480 2026] [security2:error] [pid 1018003:tid 1018066] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/BE/.env"] [unique_id "apK9cDAh5Y1i2tUxg4EUNwAF6y0"]
[Sat Aug 29 05:07:28.467493 2026] [core:error] [pid 1028675:tid 1028912] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.467517 2026] [core:error] [pid 1028675:tid 1028912] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.467713 2026] [core:error] [pid 1028675:tid 1028843] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.467721 2026] [core:error] [pid 1028675:tid 1028843] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.468287 2026] [core:error] [pid 1018003:tid 1018187] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.468301 2026] [core:error] [pid 1018003:tid 1018187] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.470883 2026] [core:error] [pid 1028675:tid 1028813] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.470899 2026] [core:error] [pid 1028675:tid 1028813] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.477293 2026] [security2:error] [pid 1028675:tid 1028914] [client 20.104.18.15:19431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/ops.php"] [unique_id "apK9cNdHPfW2QFvhmL7m0QAAAGg"]
[Sat Aug 29 05:07:28.486583 2026] [core:error] [pid 1028675:tid 1028832] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.486603 2026] [core:error] [pid 1028675:tid 1028832] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.488034 2026] [core:error] [pid 1018003:tid 1018170] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.488052 2026] [core:error] [pid 1018003:tid 1018170] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.491882 2026] [security2:error] [pid 1028675:tid 1028930] [client 40.83.93.50:5185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-admin/wp-settings.php"] [unique_id "apK9cNdHPfW2QFvhmL7m1gAAAHg"]
[Sat Aug 29 05:07:28.493007 2026] [core:error] [pid 1018003:tid 1018177] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.493020 2026] [core:error] [pid 1018003:tid 1018177] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.498521 2026] [security2:error] [pid 1018003:tid 1018255] [client 20.196.209.81:14501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/alfa-rex.php"] [unique_id "apK9cDAh5Y1i2tUxg4EUQAAABh8"]
[Sat Aug 29 05:07:28.503462 2026] [security2:error] [pid 1028675:tid 1028888] [client 20.151.200.44:63346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/yyy.php"] [unique_id "apK9cNdHPfW2QFvhmL7m2AAAAE4"]
[Sat Aug 29 05:07:28.506940 2026] [core:error] [pid 1028675:tid 1028812] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.506962 2026] [core:error] [pid 1028675:tid 1028812] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.507936 2026] [security2:error] [pid 1018003:tid 1018157] [client 20.104.104.62:10877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/kcs.php"] [unique_id "apK9cDAh5Y1i2tUxg4EUQQAABb4"]
[Sat Aug 29 05:07:28.515040 2026] [security2:error] [pid 1018003:tid 1018252] [client 171.61.160.196:19506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.160.61.171.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK9cDAh5Y1i2tUxg4EUQwAABhw"]
[Sat Aug 29 05:07:28.515866 2026] [security2:error] [pid 1018003:tid 1018252] [client 171.61.160.196:19506] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK9cDAh5Y1i2tUxg4EUQwAABhw"]
[Sat Aug 29 05:07:28.530013 2026] [security2:error] [pid 1028675:tid 1028876] [client 52.139.37.240:19306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/xmrlpc.php"] [unique_id "apK9cNdHPfW2QFvhmL7m3AAAAEI"]
[Sat Aug 29 05:07:28.545460 2026] [security2:error] [pid 1028675:tid 1028818] [client 4.205.62.107:65461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/8.php"] [unique_id "apK9cNdHPfW2QFvhmL7m3QAAAAg"]
[Sat Aug 29 05:07:28.556785 2026] [security2:error] [pid 1028675:tid 1028826] [client 158.158.54.35:4508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-blog.php"] [unique_id "apK9cNdHPfW2QFvhmL7m3gAAABA"]
[Sat Aug 29 05:07:28.573121 2026] [security2:error] [pid 1018003:tid 1018203] [client 52.139.37.240:14680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/file61.php"] [unique_id "apK9cDAh5Y1i2tUxg4EURAAABew"]
[Sat Aug 29 05:07:28.575515 2026] [security2:error] [pid 1028675:tid 1028903] [client 52.138.0.157:40973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-includes/index.php"] [unique_id "apK9cNdHPfW2QFvhmL7m3wAAAF0"]
[Sat Aug 29 05:07:28.584521 2026] [security2:error] [pid 1028675:tid 1028849] [client 20.104.18.15:12252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/222.php"] [unique_id "apK9cNdHPfW2QFvhmL7m4QAAACc"]
[Sat Aug 29 05:07:28.587492 2026] [security2:error] [pid 1028675:tid 1028844] [client 168.107.94.195:51053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9cNdHPfW2QFvhmL7m4wAAACI"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:28.590533 2026] [security2:error] [pid 1018003:tid 1018179] [client 146.70.36.124:49846] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.airviewconcept.com"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "apK9cDAh5Y1i2tUxg4EURQAABdQ"]
[Sat Aug 29 05:07:28.598092 2026] [security2:error] [pid 1028675:tid 1028935] [client 158.23.147.79:48136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK9cNdHPfW2QFvhmL7m7wAAAH0"]
[Sat Aug 29 05:07:28.598637 2026] [security2:error] [pid 1028675:tid 1028900] [client 20.151.200.44:47318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/bge.php"] [unique_id "apK9cNdHPfW2QFvhmL7m8AAAAFo"]
[Sat Aug 29 05:07:28.604682 2026] [security2:error] [pid 1018003:tid 1018200] [client 4.205.62.107:58394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/old_phpinfo.php"] [unique_id "apK9cDAh5Y1i2tUxg4EUSAAABek"]
[Sat Aug 29 05:07:28.614594 2026] [security2:error] [pid 1028675:tid 1028894] [client 20.104.18.15:19455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/coffexium.php"] [unique_id "apK9cNdHPfW2QFvhmL7m8gAAAFQ"]
[Sat Aug 29 05:07:28.642497 2026] [security2:error] [pid 1028675:tid 1028931] [client 68.155.159.216:49224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK9cNdHPfW2QFvhmL7m-AAAAHk"]
[Sat Aug 29 05:07:28.648123 2026] [security2:error] [pid 1028675:tid 1028898] [client 158.23.147.79:59870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK9cNdHPfW2QFvhmL7m-QAAAFg"]
[Sat Aug 29 05:07:28.654969 2026] [security2:error] [pid 1028675:tid 1028870] [client 20.104.104.62:10470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/wsz.php"] [unique_id "apK9cNdHPfW2QFvhmL7m-gAAADw"]
[Sat Aug 29 05:07:28.657119 2026] [security2:error] [pid 1028675:tid 1028841] [client 158.23.147.79:25508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK9cNdHPfW2QFvhmL7m-wAAAB8"]
[Sat Aug 29 05:07:28.658897 2026] [security2:error] [pid 1028675:tid 1028866] [client 127.0.0.1:30300] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK9cNdHPfW2QFvhmL7muAAAADg"]
[Sat Aug 29 05:07:28.658928 2026] [security2:error] [pid 1028675:tid 1028846] [client 35.194.208.44:33216] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/@fs/root/.ssh/id_ed25519"] [unique_id "apK9cNdHPfW2QFvhmL7mqgAAACQ"]
[Sat Aug 29 05:07:28.686886 2026] [security2:error] [pid 1018003:tid 1018203] [client 4.205.62.107:22468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/sale.php"] [unique_id "apK9cDAh5Y1i2tUxg4EUTwAABew"]
[Sat Aug 29 05:07:28.720351 2026] [core:error] [pid 1018003:tid 1018090] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.720379 2026] [core:error] [pid 1018003:tid 1018090] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.724000 2026] [security2:error] [pid 1018003:tid 1018191] [client 127.0.0.1:30346] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK9cDAh5Y1i2tUxg4EUEQAABeA"]
[Sat Aug 29 05:07:28.724262 2026] [security2:error] [pid 1018003:tid 1018217] [client 35.194.208.44:33362] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/@fs/root/.azure/credentials"] [unique_id "apK9cDAh5Y1i2tUxg4EUDQAABfo"]
[Sat Aug 29 05:07:28.724980 2026] [security2:error] [pid 1028675:tid 1028848] [client 52.139.37.240:19286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/about/function.php"] [unique_id "apK9cNdHPfW2QFvhmL7nBAAAACY"]
[Sat Aug 29 05:07:28.731022 2026] [core:error] [pid 1028675:tid 1028916] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.731038 2026] [core:error] [pid 1028675:tid 1028916] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.739735 2026] [core:error] [pid 1028675:tid 1028878] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.739751 2026] [core:error] [pid 1028675:tid 1028878] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.743804 2026] [core:error] [pid 1028675:tid 1028826] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.743819 2026] [core:error] [pid 1028675:tid 1028826] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.744014 2026] [core:error] [pid 1018003:tid 1018213] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.744032 2026] [core:error] [pid 1018003:tid 1018213] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.749921 2026] [core:error] [pid 1018003:tid 1018157] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.749935 2026] [core:error] [pid 1018003:tid 1018157] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.759818 2026] [core:error] [pid 1028675:tid 1028811] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.759839 2026] [core:error] [pid 1028675:tid 1028811] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.770719 2026] [security2:error] [pid 1028675:tid 1028932] [client 52.139.37.240:14940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/mah.php"] [unique_id "apK9cNdHPfW2QFvhmL7nDAAAAHo"]
[Sat Aug 29 05:07:28.774031 2026] [security2:error] [pid 1018003:tid 1018266] [client 52.138.0.157:19588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK9cDAh5Y1i2tUxg4EUZQAABio"]
[Sat Aug 29 05:07:28.774330 2026] [security2:error] [pid 1018003:tid 1018238] [client 20.104.104.62:20698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/store.php"] [unique_id "apK9cDAh5Y1i2tUxg4EUZAAABg4"]
[Sat Aug 29 05:07:28.775083 2026] [security2:error] [pid 1018003:tid 1018177] [client 20.104.18.15:12257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/key.php"] [unique_id "apK9cDAh5Y1i2tUxg4EUZgAABdI"]
[Sat Aug 29 05:07:28.788098 2026] [core:error] [pid 1018003:tid 1018191] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.788114 2026] [core:error] [pid 1018003:tid 1018191] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.788688 2026] [core:error] [pid 1018003:tid 1018182] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.788701 2026] [core:error] [pid 1018003:tid 1018182] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.793848 2026] [security2:error] [pid 1028675:tid 1028921] [client 20.104.104.62:44581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/msy.php"] [unique_id "apK9cNdHPfW2QFvhmL7nDwAAAG8"]
[Sat Aug 29 05:07:28.796635 2026] [core:error] [pid 1018003:tid 1018121] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.796655 2026] [core:error] [pid 1018003:tid 1018121] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.799207 2026] [core:error] [pid 1018003:tid 1018128] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.799219 2026] [core:error] [pid 1018003:tid 1018128] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.803901 2026] [core:error] [pid 1018003:tid 1018252] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.803915 2026] [core:error] [pid 1018003:tid 1018252] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.804802 2026] [security2:error] [pid 1018003:tid 1018250] [client 20.104.18.15:18880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/BDKR28WP.php"] [unique_id "apK9cDAh5Y1i2tUxg4EUcQAABho"]
[Sat Aug 29 05:07:28.805480 2026] [core:error] [pid 1018003:tid 1018261] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.805492 2026] [core:error] [pid 1018003:tid 1018261] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.808467 2026] [core:error] [pid 1018003:tid 1018170] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.808478 2026] [core:error] [pid 1018003:tid 1018170] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.823641 2026] [core:error] [pid 1018003:tid 1018200] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.823667 2026] [core:error] [pid 1018003:tid 1018200] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.825262 2026] [security2:error] [pid 1028675:tid 1028832] [client 158.158.54.35:2202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/css/index.php"] [unique_id "apK9cNdHPfW2QFvhmL7nEQAAABY"]
[Sat Aug 29 05:07:28.829212 2026] [core:error] [pid 1028675:tid 1028813] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.829228 2026] [core:error] [pid 1028675:tid 1028813] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:28.846012 2026] [security2:error] [pid 1018003:tid 1018256] [client 158.23.147.79:26444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-content/x/index.php"] [unique_id "apK9cDAh5Y1i2tUxg4EUdAAABiA"]
[Sat Aug 29 05:07:28.849374 2026] [security2:error] [pid 1018003:tid 1018120] [remote 35.231.104.225:41784] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.qandlcondos.com"] [uri "/@fs/proc/self/cwd/.env"] [unique_id "apK9cDAh5Y1i2tUxg4EUdQAF12M"]
[Sat Aug 29 05:07:28.876097 2026] [security2:error] [pid 1028675:tid 1028914] [client 4.205.62.107:8976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/product.php"] [unique_id "apK9cNdHPfW2QFvhmL7nFAAAAGg"]
[Sat Aug 29 05:07:28.885827 2026] [security2:error] [pid 1028675:tid 1028846] [client 146.70.36.124:49858] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.airviewconcept.com"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "apK9cNdHPfW2QFvhmL7nFQAAACQ"]
[Sat Aug 29 05:07:28.910032 2026] [security2:error] [pid 1018003:tid 1018255] [client 20.196.209.81:14486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/cookie.php"] [unique_id "apK9cDAh5Y1i2tUxg4EUdwAABh8"]
[Sat Aug 29 05:07:28.919497 2026] [security2:error] [pid 1028675:tid 1028870] [client 52.139.37.240:19288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/an.php"] [unique_id "apK9cNdHPfW2QFvhmL7nFgAAADw"]
[Sat Aug 29 05:07:28.920798 2026] [security2:error] [pid 1018003:tid 1018156] [client 40.83.93.50:7982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/OK.php"] [unique_id "apK9cDAh5Y1i2tUxg4EUeAAABb0"]
[Sat Aug 29 05:07:28.924101 2026] [security2:error] [pid 1018003:tid 1018170] [client 20.151.200.44:64681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/bgymj.php"] [unique_id "apK9cDAh5Y1i2tUxg4EUeQAABcs"]
[Sat Aug 29 05:07:28.937558 2026] [security2:error] [pid 1028675:tid 1028844] [client 20.203.141.11:1369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/zoom1.php"] [unique_id "apK9cNdHPfW2QFvhmL7nFwAAACI"]
[Sat Aug 29 05:07:28.939510 2026] [security2:error] [pid 1028675:tid 1028908] [client 20.104.18.15:12234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/chosen.php"] [unique_id "apK9cNdHPfW2QFvhmL7nGAAAAGI"]
[Sat Aug 29 05:07:28.943905 2026] [security2:error] [pid 1028675:tid 1028812] [client 20.104.104.62:10633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/siln.php"] [unique_id "apK9cNdHPfW2QFvhmL7nGQAAAAI"]
[Sat Aug 29 05:07:28.950638 2026] [security2:error] [pid 1028675:tid 1028920] [client 20.203.141.11:38641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/w.php"] [unique_id "apK9cNdHPfW2QFvhmL7nGgAAAG4"]
[Sat Aug 29 05:07:28.957592 2026] [security2:error] [pid 1018003:tid 1018117] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/_profiler/phpinfo.php"] [unique_id "apK9cDAh5Y1i2tUxg4EUfAAF6WA"]
[Sat Aug 29 05:07:28.967756 2026] [security2:error] [pid 1028675:tid 1028930] [client 52.139.37.240:14611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/mini.php"] [unique_id "apK9cNdHPfW2QFvhmL7nHAAAAHg"]
[Sat Aug 29 05:07:28.967019 2026] [security2:error] [pid 1028675:tid 1028902] [client 52.138.0.157:20492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "apK9cNdHPfW2QFvhmL7nGwAAAFw"]
[Sat Aug 29 05:07:28.971023 2026] [security2:error] [pid 1018003:tid 1018213] [client 168.107.94.195:51340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9cDAh5Y1i2tUxg4EUfgAABfY"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:28.979921 2026] [security2:error] [pid 1018003:tid 1018111] [remote 35.231.104.225:41784] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "www.qandlcondos.com"] [uri "/public/plugins/alertlist/../../../../../../../../proc/self/environ"] [unique_id "apK9cDAh5Y1i2tUxg4EUggAF0lo"]
[Sat Aug 29 05:07:28.982568 2026] [security2:error] [pid 1018003:tid 1018266] [client 40.83.93.50:15703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-admin/wp-signup.php"] [unique_id "apK9cDAh5Y1i2tUxg4EUhgAABio"]
[Sat Aug 29 05:07:28.982791 2026] [security2:error] [pid 1018003:tid 1018147] [remote 35.231.104.225:41784] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.qandlcondos.com"] [uri "/@fs/var/task/.env"] [unique_id "apK9cDAh5Y1i2tUxg4EUhAAF0n4"]
[Sat Aug 29 05:07:28.993455 2026] [security2:error] [pid 1018003:tid 1018268] [client 20.104.18.15:19442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/sf.php"] [unique_id "apK9cDAh5Y1i2tUxg4EUiQAABiw"]
[Sat Aug 29 05:07:29.009441 2026] [security2:error] [pid 1018003:tid 1018185] [client 20.63.81.20:20963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9cTAh5Y1i2tUxg4EUigAABdo"]
[Sat Aug 29 05:07:29.032610 2026] [security2:error] [pid 1028675:tid 1028866] [client 158.158.54.35:22456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/xxx.php"] [unique_id "apK9cddHPfW2QFvhmL7nIwAAADg"]
[Sat Aug 29 05:07:29.035968 2026] [core:error] [pid 1028675:tid 1028853] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.035995 2026] [core:error] [pid 1028675:tid 1028853] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.043207 2026] [security2:error] [pid 1028675:tid 1028929] [client 158.23.147.79:30445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-content/x.php"] [unique_id "apK9cddHPfW2QFvhmL7nJQAAAHc"]
[Sat Aug 29 05:07:29.045115 2026] [security2:error] [pid 1028675:tid 1028849] [client 158.23.147.79:30546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK9cddHPfW2QFvhmL7nJgAAACc"]
[Sat Aug 29 05:07:29.045150 2026] [security2:error] [pid 1028675:tid 1028929] [client 20.151.200.44:47396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/wp-ana.php"] [unique_id "apK9cddHPfW2QFvhmL7nJwAAAHc"]
[Sat Aug 29 05:07:29.054489 2026] [security2:error] [pid 1028675:tid 1028856] [client 68.155.159.216:38578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK9cddHPfW2QFvhmL7nKgAAAC4"]
[Sat Aug 29 05:07:29.076313 2026] [security2:error] [pid 1028675:tid 1028843] [client 158.23.147.79:32684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK9cddHPfW2QFvhmL7nLAAAACE"]
[Sat Aug 29 05:07:29.079552 2026] [security2:error] [pid 1018003:tid 1018212] [client 4.205.62.107:56001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/phpi.php"] [unique_id "apK9cTAh5Y1i2tUxg4EUlAAABfU"]
[Sat Aug 29 05:07:29.088164 2026] [security2:error] [pid 1028675:tid 1028931] [client 20.104.104.62:10874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/f-401.php"] [unique_id "apK9cddHPfW2QFvhmL7nLgAAAHk"]
[Sat Aug 29 05:07:29.094207 2026] [security2:error] [pid 1018003:tid 1018186] [client 68.155.159.216:1992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK9cTAh5Y1i2tUxg4EUlQAABds"]
[Sat Aug 29 05:07:29.094302 2026] [core:error] [pid 1018003:tid 1018252] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.094319 2026] [core:error] [pid 1018003:tid 1018252] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.094509 2026] [security2:error] [pid 1018003:tid 1018216] [client 20.104.104.62:20683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/unzip.php"] [unique_id "apK9cTAh5Y1i2tUxg4EUlgAABfk"]
[Sat Aug 29 05:07:29.095548 2026] [core:error] [pid 1018003:tid 1018267] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.095560 2026] [core:error] [pid 1018003:tid 1018267] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.095961 2026] [core:error] [pid 1018003:tid 1018202] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.095968 2026] [core:error] [pid 1018003:tid 1018202] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.097250 2026] [core:error] [pid 1028675:tid 1028881] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.097263 2026] [core:error] [pid 1028675:tid 1028881] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.105767 2026] [core:error] [pid 1028675:tid 1028832] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.105784 2026] [core:error] [pid 1028675:tid 1028832] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.112387 2026] [security2:error] [pid 1028675:tid 1028900] [client 52.139.37.240:19285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/asw.php"] [unique_id "apK9cddHPfW2QFvhmL7nMAAAAFo"]
[Sat Aug 29 05:07:29.125031 2026] [security2:error] [pid 1028675:tid 1028820] [client 20.104.18.15:12278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/file1221.php"] [unique_id "apK9cddHPfW2QFvhmL7nMgAAAAo"]
[Sat Aug 29 05:07:29.131575 2026] [security2:error] [pid 1028675:tid 1028920] [client 20.104.18.15:19416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/k.php"] [unique_id "apK9cddHPfW2QFvhmL7nMwAAAG4"]
[Sat Aug 29 05:07:29.149671 2026] [security2:error] [pid 1018003:tid 1018145] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/admin-app/.env"] [unique_id "apK9cTAh5Y1i2tUxg4EUngAF_3w"]
[Sat Aug 29 05:07:29.151539 2026] [core:error] [pid 1018003:tid 1018071] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.151557 2026] [core:error] [pid 1018003:tid 1018071] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.153546 2026] [core:error] [pid 1018003:tid 1018046] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.153546 2026] [core:error] [pid 1018003:tid 1018021] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.153569 2026] [core:error] [pid 1018003:tid 1018021] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.153574 2026] [core:error] [pid 1018003:tid 1018046] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.167783 2026] [security2:error] [pid 1018003:tid 1018182] [client 68.155.159.216:18262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK9cTAh5Y1i2tUxg4EUogAABdc"]
[Sat Aug 29 05:07:29.173148 2026] [security2:error] [pid 1018003:tid 1018200] [client 52.139.37.240:14965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/v.php"] [unique_id "apK9cTAh5Y1i2tUxg4EUowAABek"]
[Sat Aug 29 05:07:29.177643 2026] [security2:error] [pid 1018003:tid 1018271] [client 20.63.81.20:20954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9cTAh5Y1i2tUxg4EUpAAABi8"]
[Sat Aug 29 05:07:29.178909 2026] [security2:error] [pid 1018003:tid 1018248] [client 146.70.36.124:49874] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.airviewconcept.com"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "apK9cTAh5Y1i2tUxg4EUpQAABhg"]
[Sat Aug 29 05:07:29.179806 2026] [security2:error] [pid 1018003:tid 1018190] [client 68.155.159.216:65058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK9cTAh5Y1i2tUxg4EUpgAABd8"]
[Sat Aug 29 05:07:29.180768 2026] [core:error] [pid 1028675:tid 1028903] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.180788 2026] [core:error] [pid 1028675:tid 1028903] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.188499 2026] [core:error] [pid 1018003:tid 1018157] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.188518 2026] [core:error] [pid 1018003:tid 1018157] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.192484 2026] [core:error] [pid 1028675:tid 1028849] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.192500 2026] [core:error] [pid 1028675:tid 1028849] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.202087 2026] [core:error] [pid 1028675:tid 1028929] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.202100 2026] [core:error] [pid 1028675:tid 1028929] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.206062 2026] [security2:error] [pid 1028675:tid 1028842] [client 68.155.159.216:33600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/cong.php"] [unique_id "apK9cddHPfW2QFvhmL7nPQAAACA"]
[Sat Aug 29 05:07:29.218328 2026] [core:error] [pid 1018003:tid 1018217] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.218342 2026] [core:error] [pid 1018003:tid 1018217] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.218959 2026] [security2:error] [pid 1028675:tid 1028889] [client 158.23.147.79:35719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-admin.php"] [unique_id "apK9cddHPfW2QFvhmL7nQAAAAE8"]
[Sat Aug 29 05:07:29.225788 2026] [security2:error] [pid 1028675:tid 1028880] [client 20.104.104.62:10647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/hq.php"] [unique_id "apK9cddHPfW2QFvhmL7nQQAAAEY"]
[Sat Aug 29 05:07:29.245521 2026] [security2:error] [pid 1028675:tid 1028816] [client 68.155.159.216:51580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK9cddHPfW2QFvhmL7nQwAAAAY"]
[Sat Aug 29 05:07:29.263711 2026] [security2:error] [pid 1028675:tid 1028846] [client 52.138.0.157:1421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "apK9cddHPfW2QFvhmL7nTAAAACQ"]
[Sat Aug 29 05:07:29.266616 2026] [security2:error] [pid 1018003:tid 1018103] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/admin/phpinfo.php"] [unique_id "apK9cTAh5Y1i2tUxg4EUrQAF8FI"]
[Sat Aug 29 05:07:29.270074 2026] [security2:error] [pid 1028675:tid 1028687] [remote 136.108.23.170:55262] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.thesmartpm.com"] [uri "/.github/.env"] [unique_id "apK9cddHPfW2QFvhmL7nUAAARAc"]
[Sat Aug 29 05:07:29.270262 2026] [core:error] [pid 1018003:tid 1018022] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.270272 2026] [core:error] [pid 1018003:tid 1018022] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.270472 2026] [core:error] [pid 1018003:tid 1018143] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.270487 2026] [core:error] [pid 1018003:tid 1018143] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.279188 2026] [security2:error] [pid 1018003:tid 1018258] [client 20.104.18.15:12236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/nox.php"] [unique_id "apK9cTAh5Y1i2tUxg4EUrgAABiI"]
[Sat Aug 29 05:07:29.300369 2026] [security2:error] [pid 1028675:tid 1028821] [client 158.158.54.35:14935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-cron.php"] [unique_id "apK9cddHPfW2QFvhmL7nVQAAAAs"]
[Sat Aug 29 05:07:29.305326 2026] [security2:error] [pid 1028675:tid 1028919] [client 52.139.37.240:19323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/item.php"] [unique_id "apK9cddHPfW2QFvhmL7nVwAAAG0"]
[Sat Aug 29 05:07:29.306606 2026] [security2:error] [pid 1018003:tid 1018189] [client 20.196.209.81:14467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/NewFile.php"] [unique_id "apK9cTAh5Y1i2tUxg4EUsAAABd4"]
[Sat Aug 29 05:07:29.312151 2026] [security2:error] [pid 1028675:tid 1028866] [client 20.63.81.20:20928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/ser.php"] [unique_id "apK9cddHPfW2QFvhmL7nWAAAADg"]
[Sat Aug 29 05:07:29.322068 2026] [security2:error] [pid 1028675:tid 1028853] [client 20.104.18.15:19445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/82.php"] [unique_id "apK9cddHPfW2QFvhmL7nWQAAACs"]
[Sat Aug 29 05:07:29.331825 2026] [core:error] [pid 1018003:tid 1018052] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.331841 2026] [core:error] [pid 1018003:tid 1018052] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.334686 2026] [security2:error] [pid 1018003:tid 1018244] [client 20.48.250.41:35500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/wp-link10.php"] [unique_id "apK9cTAh5Y1i2tUxg4EUsgAABhQ"]
[Sat Aug 29 05:07:29.337836 2026] [security2:error] [pid 1018003:tid 1018044] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/admin_phpinfo.php"] [unique_id "apK9cTAh5Y1i2tUxg4EUtAAFwBc"]
[Sat Aug 29 05:07:29.338718 2026] [security2:error] [pid 1018003:tid 1018102] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/administrator/.env"] [unique_id "apK9cTAh5Y1i2tUxg4EUswAFwFE"]
[Sat Aug 29 05:07:29.350981 2026] [security2:error] [pid 1018003:tid 1018184] [client 168.107.94.195:51779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9cTAh5Y1i2tUxg4EUtQAABdk"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:29.363103 2026] [security2:error] [pid 1018003:tid 1018196] [client 20.104.104.62:10588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/mh.php"] [unique_id "apK9cTAh5Y1i2tUxg4EUtgAABeU"]
[Sat Aug 29 05:07:29.367970 2026] [security2:error] [pid 1028675:tid 1028876] [client 52.139.37.240:14495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK9cddHPfW2QFvhmL7nWwAAAEI"]
[Sat Aug 29 05:07:29.406036 2026] [security2:error] [pid 1018003:tid 1018039] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/api/.env"] [unique_id "apK9cTAh5Y1i2tUxg4EUuwAGARI"]
[Sat Aug 29 05:07:29.406036 2026] [security2:error] [pid 1018003:tid 1018043] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/api-backend/.env"] [unique_id "apK9cTAh5Y1i2tUxg4EUugAGARY"]
[Sat Aug 29 05:07:29.406778 2026] [security2:error] [pid 1018003:tid 1018083] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/api-node/.env"] [unique_id "apK9cTAh5Y1i2tUxg4EUvAAGAT4"]
[Sat Aug 29 05:07:29.408166 2026] [core:error] [pid 1018003:tid 1018095] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.408180 2026] [core:error] [pid 1018003:tid 1018095] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.408625 2026] [core:error] [pid 1018003:tid 1018037] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.408637 2026] [core:error] [pid 1018003:tid 1018037] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.408725 2026] [core:error] [pid 1018003:tid 1018100] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.408735 2026] [core:error] [pid 1018003:tid 1018100] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.408869 2026] [core:error] [pid 1018003:tid 1018135] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.408880 2026] [core:error] [pid 1018003:tid 1018135] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.414187 2026] [security2:error] [pid 1018003:tid 1018226] [client 34.81.157.26:30772] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/@fs/var/www/html/wp-config.php"] [unique_id "apK9cTAh5Y1i2tUxg4EUwgAABgM"]
[Sat Aug 29 05:07:29.414490 2026] [security2:error] [pid 1028675:tid 1028907] [client 20.104.18.15:12273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/akismet.php"] [unique_id "apK9cddHPfW2QFvhmL7nZAAAAGE"]
[Sat Aug 29 05:07:29.414981 2026] [security2:error] [pid 1018003:tid 1018192] [client 34.81.157.26:30802] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2fapp/.env"] [unique_id "apK9cTAh5Y1i2tUxg4EUwwAABeE"]
[Sat Aug 29 05:07:29.415118 2026] [security2:error] [pid 1018003:tid 1018246] [client 34.81.157.26:30814] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2fproc/self/environ"] [unique_id "apK9cTAh5Y1i2tUxg4EUxQAABhY"]
[Sat Aug 29 05:07:29.416972 2026] [core:error] [pid 1018003:tid 1018169] [client 34.81.157.26:30836] AH10244: invalid URI path (/@fs/../../../../../app/.env?raw??)
[Sat Aug 29 05:07:29.417013 2026] [security2:error] [pid 1028675:tid 1028815] [client 34.81.157.26:30844] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/@fs/../../../../../proc/self/environ"] [unique_id "apK9cddHPfW2QFvhmL7nZwAAAAU"]
[Sat Aug 29 05:07:29.417337 2026] [core:error] [pid 1018003:tid 1018265] [client 34.81.157.26:30846] AH10244: invalid URI path (/@fs/../../../../../root/.env?raw??)
[Sat Aug 29 05:07:29.417696 2026] [security2:error] [pid 1018003:tid 1018273] [client 34.81.157.26:30718] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/@fs/root/.ssh/id_rsa"] [unique_id "apK9cTAh5Y1i2tUxg4EUxgAABjE"]
[Sat Aug 29 05:07:29.418222 2026] [security2:error] [pid 1028675:tid 1028850] [client 34.81.157.26:30872] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/cgi-sys/404.html"] [unique_id "apK9cddHPfW2QFvhmL7nZgAAACg"]
[Sat Aug 29 05:07:29.422488 2026] [security2:error] [pid 1028675:tid 1028881] [client 40.83.93.50:11650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.traceyandstewart.strangeworx.com"] [uri "/aaa.php"] [unique_id "apK9cddHPfW2QFvhmL7nbwAAAEc"]
[Sat Aug 29 05:07:29.428111 2026] [security2:error] [pid 1028675:tid 1028870] [client 20.203.141.11:27706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/ahax.php"] [unique_id "apK9cddHPfW2QFvhmL7ndQAAADw"]
[Sat Aug 29 05:07:29.429694 2026] [core:error] [pid 1018003:tid 1018182] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.429707 2026] [core:error] [pid 1018003:tid 1018182] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.432952 2026] [core:error] [pid 1028675:tid 1028848] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.432968 2026] [core:error] [pid 1028675:tid 1028848] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.434590 2026] [security2:error] [pid 1018003:tid 1018200] [client 34.81.157.26:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/cgi-sys/404.html"] [unique_id "apK9cTAh5Y1i2tUxg4EUywAABek"]
[Sat Aug 29 05:07:29.435157 2026] [core:error] [pid 1028675:tid 1028830] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.435168 2026] [core:error] [pid 1028675:tid 1028830] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.439080 2026] [security2:error] [pid 1018003:tid 1018270] [client 158.23.147.79:50109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-admin/dropdown.php"] [unique_id "apK9cTAh5Y1i2tUxg4EU0AAABi4"]
[Sat Aug 29 05:07:29.442653 2026] [core:error] [pid 1028675:tid 1028858] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.442668 2026] [core:error] [pid 1028675:tid 1028858] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.443655 2026] [core:error] [pid 1028675:tid 1028884] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.443669 2026] [core:error] [pid 1028675:tid 1028884] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.449048 2026] [security2:error] [pid 1018003:tid 1018236] [client 34.81.157.26:30992] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/@fs/home/ubuntu/.oci/config"] [unique_id "apK9cTAh5Y1i2tUxg4EU0QAABgw"]
[Sat Aug 29 05:07:29.451258 2026] [security2:error] [pid 1028675:tid 1028832] [client 34.81.157.26:30822] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/cgi-sys/404.html"] [unique_id "apK9cddHPfW2QFvhmL7nYAAAABY"]
[Sat Aug 29 05:07:29.455463 2026] [security2:error] [pid 1018003:tid 1018188] [client 4.205.62.107:22020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/hiquido.com/index.php"] [unique_id "apK9cTAh5Y1i2tUxg4EU0gAABd0"]
[Sat Aug 29 05:07:29.456010 2026] [security2:error] [pid 1018003:tid 1018198] [client 20.63.81.20:20933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/431.php"] [unique_id "apK9cTAh5Y1i2tUxg4EU1AAABec"]
[Sat Aug 29 05:07:29.459088 2026] [core:error] [pid 1028675:tid 1028816] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.459104 2026] [core:error] [pid 1028675:tid 1028816] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.459980 2026] [core:error] [pid 1028675:tid 1028890] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.459990 2026] [core:error] [pid 1028675:tid 1028890] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.461016 2026] [core:error] [pid 1028675:tid 1028896] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.461091 2026] [core:error] [pid 1018003:tid 1018177] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.461175 2026] [core:error] [pid 1028675:tid 1028896] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.461180 2026] [core:error] [pid 1018003:tid 1018177] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.461266 2026] [core:error] [pid 1018003:tid 1018203] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.461272 2026] [core:error] [pid 1018003:tid 1018203] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.461689 2026] [core:error] [pid 1028675:tid 1028902] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.461699 2026] [core:error] [pid 1028675:tid 1028902] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.462686 2026] [core:error] [pid 1028675:tid 1028861] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.462697 2026] [core:error] [pid 1028675:tid 1028861] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.463208 2026] [core:error] [pid 1018003:tid 1018191] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.463217 2026] [core:error] [pid 1018003:tid 1018191] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.463788 2026] [core:error] [pid 1028675:tid 1028821] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.463807 2026] [core:error] [pid 1028675:tid 1028821] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.465098 2026] [core:error] [pid 1028675:tid 1028899] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.465114 2026] [core:error] [pid 1028675:tid 1028899] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.467128 2026] [core:error] [pid 1028675:tid 1028919] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.467143 2026] [core:error] [pid 1028675:tid 1028919] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.469319 2026] [core:error] [pid 1018003:tid 1018162] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.469330 2026] [core:error] [pid 1018003:tid 1018162] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.469992 2026] [core:error] [pid 1018003:tid 1018219] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.470003 2026] [core:error] [pid 1018003:tid 1018219] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.470728 2026] [security2:error] [pid 1028675:tid 1028837] [client 40.83.93.50:24488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-blog-header.php"] [unique_id "apK9cddHPfW2QFvhmL7nkwAAABs"]
[Sat Aug 29 05:07:29.470878 2026] [security2:error] [pid 1028675:tid 1028917] [client 20.203.141.11:1365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/txets.php"] [unique_id "apK9cddHPfW2QFvhmL7nlAAAAGs"]
[Sat Aug 29 05:07:29.471012 2026] [security2:error] [pid 1028675:tid 1028929] [client 20.48.250.41:35072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/ww.php"] [unique_id "apK9cddHPfW2QFvhmL7nlQAAAHc"]
[Sat Aug 29 05:07:29.473080 2026] [security2:error] [pid 1028675:tid 1028828] [client 20.104.104.62:64721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/think.php"] [unique_id "apK9cddHPfW2QFvhmL7nlgAAABI"]
[Sat Aug 29 05:07:29.474441 2026] [security2:error] [pid 1028675:tid 1028863] [client 146.70.36.124:49886] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.airviewconcept.com"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "apK9cddHPfW2QFvhmL7nmAAAADU"]
[Sat Aug 29 05:07:29.475698 2026] [core:error] [pid 1028675:tid 1028830] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.475709 2026] [core:error] [pid 1028675:tid 1028830] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.479377 2026] [security2:error] [pid 1028675:tid 1028860] [client 20.104.18.15:19346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/dex.php"] [unique_id "apK9cddHPfW2QFvhmL7nmQAAADI"]
[Sat Aug 29 05:07:29.492807 2026] [core:error] [pid 1018003:tid 1018078] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.492818 2026] [core:error] [pid 1018003:tid 1018078] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.498860 2026] [security2:error] [pid 1028675:tid 1028814] [client 20.104.104.62:10624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/f2r4.php"] [unique_id "apK9cddHPfW2QFvhmL7nmwAAAAQ"]
[Sat Aug 29 05:07:29.501491 2026] [security2:error] [pid 1018003:tid 1018190] [client 52.139.37.240:19317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/jga.php"] [unique_id "apK9cTAh5Y1i2tUxg4EU2gAABd8"]
[Sat Aug 29 05:07:29.513949 2026] [core:error] [pid 1018003:tid 1018051] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.513960 2026] [core:error] [pid 1018003:tid 1018051] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.514000 2026] [core:error] [pid 1018003:tid 1018079] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.514015 2026] [core:error] [pid 1018003:tid 1018079] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.515609 2026] [core:error] [pid 1018003:tid 1018034] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.515622 2026] [core:error] [pid 1018003:tid 1018034] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.534733 2026] [security2:error] [pid 1028675:tid 1028832] [client 20.151.200.44:65224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/fh26.php"] [unique_id "apK9cddHPfW2QFvhmL7nnwAAABY"]
[Sat Aug 29 05:07:29.536519 2026] [core:error] [pid 1018003:tid 1018075] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.536530 2026] [core:error] [pid 1018003:tid 1018075] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.564630 2026] [security2:error] [pid 1028675:tid 1028901] [client 158.23.147.79:17446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/xmlrpc.php"] [unique_id "apK9cddHPfW2QFvhmL7nngAAAFs"]
[Sat Aug 29 05:07:29.565615 2026] [security2:error] [pid 1028675:tid 1028879] [client 52.139.37.240:15279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "apK9cddHPfW2QFvhmL7noQAAAEU"]
[Sat Aug 29 05:07:29.568496 2026] [core:error] [pid 1028675:tid 1028897] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.568509 2026] [core:error] [pid 1028675:tid 1028897] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.569111 2026] [core:error] [pid 1018003:tid 1018244] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.569118 2026] [core:error] [pid 1018003:tid 1018244] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.581915 2026] [security2:error] [pid 1018003:tid 1018195] [client 20.104.18.15:12279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/ajax.php"] [unique_id "apK9cTAh5Y1i2tUxg4EU5AAABeQ"]
[Sat Aug 29 05:07:29.584575 2026] [security2:error] [pid 1028675:tid 1028824] [client 20.63.81.20:20865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/rxr.php"] [unique_id "apK9cddHPfW2QFvhmL7nowAAAA4"]
[Sat Aug 29 05:07:29.604367 2026] [security2:error] [pid 1028675:tid 1028918] [client 20.104.49.130:58193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/Jcrop.php"] [unique_id "apK9cddHPfW2QFvhmL7npAAAAGw"]
[Sat Aug 29 05:07:29.615657 2026] [security2:error] [pid 1028675:tid 1028811] [client 20.48.250.41:35111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/w1px.php"] [unique_id "apK9cddHPfW2QFvhmL7npQAAAAE"]
[Sat Aug 29 05:07:29.617710 2026] [security2:error] [pid 1018003:tid 1018157] [client 20.151.200.44:45985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/secret.php"] [unique_id "apK9cTAh5Y1i2tUxg4EU5QAABb4"]
[Sat Aug 29 05:07:29.629180 2026] [security2:error] [pid 1028675:tid 1028920] [client 52.138.0.157:20483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-links-opml.php"] [unique_id "apK9cddHPfW2QFvhmL7npgAAAG4"]
[Sat Aug 29 05:07:29.631654 2026] [security2:error] [pid 1028675:tid 1028912] [client 20.104.104.62:10663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/sadis.php"] [unique_id "apK9cddHPfW2QFvhmL7nqAAAAGY"]
[Sat Aug 29 05:07:29.663855 2026] [security2:error] [pid 1028675:tid 1028921] [client 68.155.159.216:6038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/asd.php"] [unique_id "apK9cddHPfW2QFvhmL7nqgAAAG8"]
[Sat Aug 29 05:07:29.696349 2026] [security2:error] [pid 1028675:tid 1028849] [client 52.139.37.240:19299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/mac.php"] [unique_id "apK9cddHPfW2QFvhmL7nqwAAACc"]
[Sat Aug 29 05:07:29.699023 2026] [security2:error] [pid 1028675:tid 1028844] [client 20.104.18.15:18905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/inso.php"] [unique_id "apK9cddHPfW2QFvhmL7nrAAAACI"]
[Sat Aug 29 05:07:29.706292 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.196.209.81:1899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/config.php"] [unique_id "apK9cTAh5Y1i2tUxg4EU5gAABcI"]
[Sat Aug 29 05:07:29.709579 2026] [security2:error] [pid 1028675:tid 1028847] [client 20.104.104.62:20611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/tod.php"] [unique_id "apK9cddHPfW2QFvhmL7nrQAAACU"]
[Sat Aug 29 05:07:29.710293 2026] [security2:error] [pid 1028675:tid 1028892] [client 4.205.62.107:65488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/thui.php"] [unique_id "apK9cddHPfW2QFvhmL7nrgAAAFI"]
[Sat Aug 29 05:07:29.719512 2026] [security2:error] [pid 1018003:tid 1018198] [client 20.63.81.20:20950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/csst.php"] [unique_id "apK9cTAh5Y1i2tUxg4EU5wAABec"]
[Sat Aug 29 05:07:29.730524 2026] [security2:error] [pid 1028675:tid 1028931] [client 168.107.94.195:52126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9cddHPfW2QFvhmL7nrwAAAHk"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:29.735895 2026] [security2:error] [pid 1028675:tid 1028848] [client 20.104.18.15:12258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/atomlib.php"] [unique_id "apK9cddHPfW2QFvhmL7nsAAAACY"]
[Sat Aug 29 05:07:29.738924 2026] [security2:error] [pid 1028675:tid 1028873] [client 4.205.62.107:58481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/paths.php"] [unique_id "apK9cddHPfW2QFvhmL7nsQAAAD8"]
[Sat Aug 29 05:07:29.740807 2026] [security2:error] [pid 1028675:tid 1028896] [client 158.158.54.35:31479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-block.php"] [unique_id "apK9cddHPfW2QFvhmL7nsgAAAFY"]
[Sat Aug 29 05:07:29.756061 2026] [security2:error] [pid 1028675:tid 1028881] [client 52.139.37.240:14506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9cddHPfW2QFvhmL7nswAAAEc"]
[Sat Aug 29 05:07:29.758408 2026] [security2:error] [pid 1028675:tid 1028917] [client 68.155.159.216:30531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/ws.php"] [unique_id "apK9cddHPfW2QFvhmL7ntAAAAGs"]
[Sat Aug 29 05:07:29.762738 2026] [security2:error] [pid 1028675:tid 1028818] [client 68.155.159.216:49153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/dropdown.php"] [unique_id "apK9cddHPfW2QFvhmL7ntQAAAAg"]
[Sat Aug 29 05:07:29.768114 2026] [security2:error] [pid 1028675:tid 1028932] [client 20.104.104.62:44574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/xcre1.php"] [unique_id "apK9cddHPfW2QFvhmL7ntwAAAHo"]
[Sat Aug 29 05:07:29.776737 2026] [security2:error] [pid 1028675:tid 1028842] [client 158.158.54.35:24280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/tool.php"] [unique_id "apK9cddHPfW2QFvhmL7nuAAAACA"]
[Sat Aug 29 05:07:29.780255 2026] [security2:error] [pid 1028675:tid 1028909] [client 146.70.36.124:49888] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.airviewconcept.com"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "apK9cddHPfW2QFvhmL7nugAAAGM"]
[Sat Aug 29 05:07:29.789425 2026] [security2:error] [pid 1018003:tid 1018186] [client 91.92.47.191:45988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.corrigansbasement.com"] [uri "/wp-config.php"] [unique_id "apK9cTAh5Y1i2tUxg4EU6AAABds"]
[Sat Aug 29 05:07:29.799135 2026] [security2:error] [pid 1028675:tid 1028858] [client 20.151.200.44:46648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/pro.php"] [unique_id "apK9cddHPfW2QFvhmL7nvAAAADA"]
[Sat Aug 29 05:07:29.800675 2026] [security2:error] [pid 1028675:tid 1028884] [client 20.48.250.41:35498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/to.php"] [unique_id "apK9cddHPfW2QFvhmL7nvQAAAEo"]
[Sat Aug 29 05:07:29.806070 2026] [security2:error] [pid 1018003:tid 1018169] [client 68.155.159.216:52809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-admin/maint/index.php"] [unique_id "apK9cTAh5Y1i2tUxg4EU6QAABco"]
[Sat Aug 29 05:07:29.813138 2026] [security2:error] [pid 1018003:tid 1018124] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/api/info.php"] [unique_id "apK9cTAh5Y1i2tUxg4EU6gAF4Gc"]
[Sat Aug 29 05:07:29.820522 2026] [security2:error] [pid 1028675:tid 1028837] [client 52.138.0.157:5642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-signup.php"] [unique_id "apK9cddHPfW2QFvhmL7nvgAAABs"]
[Sat Aug 29 05:07:29.821393 2026] [core:error] [pid 1018003:tid 1018136] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.821407 2026] [core:error] [pid 1018003:tid 1018136] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.821766 2026] [core:error] [pid 1018003:tid 1018033] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.821774 2026] [core:error] [pid 1018003:tid 1018033] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.822416 2026] [security2:error] [pid 1028675:tid 1028830] [client 103.168.67.159:65464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 159.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "naturalkneads.com"] [uri "/wp/index.php"] [unique_id "apK9cddHPfW2QFvhmL7nvwAAABQ"], referer: https://naturalkneads.com/wp/wp-admin/
[Sat Aug 29 05:07:29.823115 2026] [security2:error] [pid 1018003:tid 1018040] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/api/phpinfo.php"] [unique_id "apK9cTAh5Y1i2tUxg4EU8QAF4BM"]
[Sat Aug 29 05:07:29.824371 2026] [core:error] [pid 1018003:tid 1018085] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.824382 2026] [core:error] [pid 1018003:tid 1018085] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.827448 2026] [core:error] [pid 1018003:tid 1018049] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.827463 2026] [core:error] [pid 1018003:tid 1018049] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.830721 2026] [core:error] [pid 1018003:tid 1018104] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.830732 2026] [core:error] [pid 1018003:tid 1018104] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.838318 2026] [security2:error] [pid 1028675:tid 1028851] [client 20.104.18.15:19405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/aa.php"] [unique_id "apK9cddHPfW2QFvhmL7nwQAAACk"]
[Sat Aug 29 05:07:29.838816 2026] [security2:error] [pid 1028675:tid 1028846] [client 4.205.62.107:22498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/wp-content/themes/luJMF.php"] [unique_id "apK9cddHPfW2QFvhmL7nwgAAACQ"]
[Sat Aug 29 05:07:29.839569 2026] [core:error] [pid 1028675:tid 1028832] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.839580 2026] [core:error] [pid 1028675:tid 1028832] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.849980 2026] [security2:error] [pid 1028675:tid 1028888] [client 20.63.81.20:20958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/wp-includes/blocks/query-title/footer.php"] [unique_id "apK9cddHPfW2QFvhmL7nxQAAAE4"]
[Sat Aug 29 05:07:29.858443 2026] [security2:error] [pid 1018003:tid 1018221] [client 180.190.5.40:50541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.5.190.180.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK9cTAh5Y1i2tUxg4EU9wAABf4"]
[Sat Aug 29 05:07:29.858527 2026] [security2:error] [pid 1018003:tid 1018221] [client 180.190.5.40:50541] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK9cTAh5Y1i2tUxg4EU9wAABf4"]
[Sat Aug 29 05:07:29.858809 2026] [core:error] [pid 1018003:tid 1018271] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.858819 2026] [core:error] [pid 1018003:tid 1018271] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.863896 2026] [core:error] [pid 1018003:tid 1018231] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.863908 2026] [core:error] [pid 1018003:tid 1018231] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.874883 2026] [security2:error] [pid 1018003:tid 1018219] [client 20.104.18.15:12165] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.printingbyjoe.com"] [uri "/1.php"] [unique_id "apK9cTAh5Y1i2tUxg4EU-QAABfw"]
[Sat Aug 29 05:07:29.874960 2026] [security2:error] [pid 1018003:tid 1018219] [client 20.104.18.15:12165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/1.php"] [unique_id "apK9cTAh5Y1i2tUxg4EU-QAABfw"]
[Sat Aug 29 05:07:29.898079 2026] [security2:error] [pid 1028675:tid 1028872] [client 20.104.104.62:10582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/motu.php"] [unique_id "apK9cddHPfW2QFvhmL7nxgAAAD4"]
[Sat Aug 29 05:07:29.903052 2026] [security2:error] [pid 1028675:tid 1028903] [client 20.104.18.15:5082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/blacks.php"] [unique_id "apK9cddHPfW2QFvhmL7nxwAAAF0"]
[Sat Aug 29 05:07:29.909945 2026] [security2:error] [pid 1028675:tid 1028879] [client 52.139.37.240:19330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK9cddHPfW2QFvhmL7nyAAAAEU"]
[Sat Aug 29 05:07:29.922006 2026] [security2:error] [pid 1018003:tid 1018203] [client 20.203.141.11:38621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/shell.php"] [unique_id "apK9cTAh5Y1i2tUxg4EU_wAABew"]
[Sat Aug 29 05:07:29.946691 2026] [core:error] [pid 1028675:tid 1028840] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.946717 2026] [core:error] [pid 1028675:tid 1028840] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.947848 2026] [core:error] [pid 1028675:tid 1028825] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.947874 2026] [core:error] [pid 1028675:tid 1028825] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.950164 2026] [security2:error] [pid 1018003:tid 1018174] [client 68.155.159.216:12287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK9cTAh5Y1i2tUxg4EVAQAABc8"]
[Sat Aug 29 05:07:29.950474 2026] [core:error] [pid 1028675:tid 1028821] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.950486 2026] [core:error] [pid 1028675:tid 1028821] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.951545 2026] [core:error] [pid 1018003:tid 1018256] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.951565 2026] [core:error] [pid 1018003:tid 1018256] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:29.952952 2026] [security2:error] [pid 1028675:tid 1028920] [client 158.23.147.79:26588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK9cddHPfW2QFvhmL7n0QAAAG4"]
[Sat Aug 29 05:07:29.955152 2026] [security2:error] [pid 1028675:tid 1028899] [client 68.155.159.216:63855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-content/admin.php"] [unique_id "apK9cddHPfW2QFvhmL7n0gAAAFk"]
[Sat Aug 29 05:07:29.957300 2026] [security2:error] [pid 1028675:tid 1028921] [client 68.155.159.216:33544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-content/themes/too.php"] [unique_id "apK9cddHPfW2QFvhmL7n0wAAAG8"]
[Sat Aug 29 05:07:29.967851 2026] [security2:error] [pid 1028675:tid 1028911] [client 40.83.93.50:5223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-blogs.php"] [unique_id "apK9cddHPfW2QFvhmL7n1AAAAGU"]
[Sat Aug 29 05:07:29.975596 2026] [security2:error] [pid 1028675:tid 1028843] [client 20.104.18.15:19422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/img.php"] [unique_id "apK9cddHPfW2QFvhmL7n1QAAACE"]
[Sat Aug 29 05:07:29.976740 2026] [security2:error] [pid 1028675:tid 1028849] [client 20.151.200.44:46611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/999.php"] [unique_id "apK9cddHPfW2QFvhmL7n1wAAACc"]
[Sat Aug 29 05:07:29.978230 2026] [security2:error] [pid 1028675:tid 1028870] [client 20.63.81.20:20956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/wp-content/uploads/indoex.php"] [unique_id "apK9cddHPfW2QFvhmL7n2AAAADw"]
[Sat Aug 29 05:07:29.981139 2026] [security2:error] [pid 1018003:tid 1018262] [client 20.104.18.15:36637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/gos.php"] [unique_id "apK9cTAh5Y1i2tUxg4EVAwAABiY"]
[Sat Aug 29 05:07:29.991468 2026] [security2:error] [pid 1018003:tid 1018189] [client 20.48.250.41:35014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/thui.php"] [unique_id "apK9cTAh5Y1i2tUxg4EVBAAABd4"]
[Sat Aug 29 05:07:29.998637 2026] [security2:error] [pid 1018003:tid 1018268] [client 20.48.250.41:49056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/to.php"] [unique_id "apK9cTAh5Y1i2tUxg4EVBQAABiw"]
[Sat Aug 29 05:07:30.030032 2026] [security2:error] [pid 1028675:tid 1028812] [client 20.104.104.62:10856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/wefile.php"] [unique_id "apK9ctdHPfW2QFvhmL7n2gAAAAI"]
[Sat Aug 29 05:07:30.032719 2026] [security2:error] [pid 1018003:tid 1018156] [client 52.138.0.157:1458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/xmlrpc.php"] [unique_id "apK9cjAh5Y1i2tUxg4EVBgAABb0"]
[Sat Aug 29 05:07:30.034404 2026] [security2:error] [pid 1028675:tid 1028931] [client 20.104.18.15:13728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/33.php"] [unique_id "apK9ctdHPfW2QFvhmL7n2wAAAHk"]
[Sat Aug 29 05:07:30.034671 2026] [security2:error] [pid 1028675:tid 1028848] [client 52.139.37.240:14668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/wp-index.php"] [unique_id "apK9ctdHPfW2QFvhmL7n3AAAACY"]
[Sat Aug 29 05:07:30.038204 2026] [security2:error] [pid 1018003:tid 1018233] [client 20.104.49.130:30017] ModSecurity: Access denied with connection close (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1032"] [id "900036"] [msg "Wordpress BOT exploit :: No UA/Referer"] [hostname "mail.flatlandsfoto.com"] [uri "/wp-login.php"] [unique_id "apK9cjAh5Y1i2tUxg4EVBwAABgk"]
[Sat Aug 29 05:07:30.077562 2026] [security2:error] [pid 1028675:tid 1028909] [client 4.205.62.107:8983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/public/wp-blog.php"] [unique_id "apK9ctdHPfW2QFvhmL7n3gAAAGM"]
[Sat Aug 29 05:07:30.078138 2026] [security2:error] [pid 1028675:tid 1028856] [client 87.219.197.128:62929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK9ctdHPfW2QFvhmL7n3wAAAC4"]
[Sat Aug 29 05:07:30.078264 2026] [security2:error] [pid 1028675:tid 1028856] [client 87.219.197.128:62929] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK9ctdHPfW2QFvhmL7n3wAAAC4"]
[Sat Aug 29 05:07:30.082147 2026] [security2:error] [pid 1028675:tid 1028856] [client 146.70.36.124:49898] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.airviewconcept.com"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "apK9ctdHPfW2QFvhmL7n4QAAAC4"]
[Sat Aug 29 05:07:30.102797 2026] [security2:error] [pid 1028675:tid 1028873] [client 52.139.37.240:19345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK9ctdHPfW2QFvhmL7n4wAAAD8"]
[Sat Aug 29 05:07:30.104274 2026] [security2:error] [pid 1028675:tid 1028860] [client 20.104.18.15:12198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/samll.php"] [unique_id "apK9ctdHPfW2QFvhmL7n5AAAADI"]
[Sat Aug 29 05:07:30.111125 2026] [security2:error] [pid 1028675:tid 1028814] [client 20.63.81.20:20960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK9ctdHPfW2QFvhmL7n5QAAAAQ"]
[Sat Aug 29 05:07:30.116934 2026] [security2:error] [pid 1028675:tid 1028851] [client 20.104.18.15:19453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/222.php"] [unique_id "apK9ctdHPfW2QFvhmL7n5gAAACk"]
[Sat Aug 29 05:07:30.130841 2026] [security2:error] [pid 1028675:tid 1028925] [client 168.107.94.195:52530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9ctdHPfW2QFvhmL7n6AAAAHM"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:30.133239 2026] [security2:error] [pid 1028675:tid 1028925] [client 20.104.104.62:64727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/setor.php"] [unique_id "apK9ctdHPfW2QFvhmL7n6QAAAHM"]
[Sat Aug 29 05:07:30.147238 2026] [security2:error] [pid 1028675:tid 1028922] [client 20.104.18.15:36639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/132.php"] [unique_id "apK9ctdHPfW2QFvhmL7n6wAAAHA"]
[Sat Aug 29 05:07:30.161841 2026] [security2:error] [pid 1018003:tid 1018192] [client 158.23.147.79:30402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK9cjAh5Y1i2tUxg4EVFAAABeE"]
[Sat Aug 29 05:07:30.162792 2026] [security2:error] [pid 1018003:tid 1018273] [client 68.155.159.216:56512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-content/banners/about.php"] [unique_id "apK9cjAh5Y1i2tUxg4EVFQAABjE"]
[Sat Aug 29 05:07:30.172385 2026] [security2:error] [pid 1018003:tid 1018234] [client 20.151.200.44:46621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/sef.php"] [unique_id "apK9cjAh5Y1i2tUxg4EVFwAABgo"]
[Sat Aug 29 05:07:30.175512 2026] [security2:error] [pid 1018003:tid 1018200] [client 158.23.147.79:30502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK9cjAh5Y1i2tUxg4EVGQAABek"]
[Sat Aug 29 05:07:30.176081 2026] [security2:error] [pid 1028675:tid 1028867] [client 158.23.147.79:32591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-admin/index.php"] [unique_id "apK9ctdHPfW2QFvhmL7n7AAAADk"]
[Sat Aug 29 05:07:30.177868 2026] [security2:error] [pid 1018003:tid 1018266] [client 20.104.104.62:10864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/EM.php"] [unique_id "apK9cjAh5Y1i2tUxg4EVHQAABio"]
[Sat Aug 29 05:07:30.178070 2026] [security2:error] [pid 1018003:tid 1018067] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/apis/.env"] [unique_id "apK9cjAh5Y1i2tUxg4EVGgAF1y4"]
[Sat Aug 29 05:07:30.187027 2026] [security2:error] [pid 1018003:tid 1018212] [client 20.104.18.15:13704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/133.php"] [unique_id "apK9cjAh5Y1i2tUxg4EVHgAABfU"]
[Sat Aug 29 05:07:30.187164 2026] [security2:error] [pid 1018003:tid 1018270] [client 20.104.18.15:4961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/beck.php"] [unique_id "apK9cjAh5Y1i2tUxg4EVHwAABi4"]
[Sat Aug 29 05:07:30.189445 2026] [security2:error] [pid 1028675:tid 1028896] [client 158.158.54.35:16154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-includes/fonts/admin.php"] [unique_id "apK9ctdHPfW2QFvhmL7n7wAAAFY"]
[Sat Aug 29 05:07:30.205390 2026] [security2:error] [pid 1028675:tid 1028842] [client 20.196.209.81:14485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/22.php"] [unique_id "apK9ctdHPfW2QFvhmL7n8AAAACA"]
[Sat Aug 29 05:07:30.211977 2026] [security2:error] [pid 1018003:tid 1018244] [client 158.158.54.35:7280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/k.php"] [unique_id "apK9cjAh5Y1i2tUxg4EVIQAABhQ"]
[Sat Aug 29 05:07:30.212839 2026] [security2:error] [pid 1028675:tid 1028825] [client 20.48.250.41:35511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/Jcrop.php"] [unique_id "apK9ctdHPfW2QFvhmL7n8QAAAA8"]
[Sat Aug 29 05:07:30.225070 2026] [security2:error] [pid 1018003:tid 1018246] [client 52.139.37.240:14702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/ww2.php"] [unique_id "apK9cjAh5Y1i2tUxg4EVIwAABhY"]
[Sat Aug 29 05:07:30.227937 2026] [core:error] [pid 1018003:tid 1018275] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.227954 2026] [core:error] [pid 1018003:tid 1018275] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.230157 2026] [core:error] [pid 1028675:tid 1028920] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.230174 2026] [core:error] [pid 1028675:tid 1028920] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.230581 2026] [core:error] [pid 1028675:tid 1028879] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.230597 2026] [core:error] [pid 1028675:tid 1028879] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.236094 2026] [security2:error] [pid 1028675:tid 1028876] [client 52.138.0.157:39716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/yas.php"] [unique_id "apK9ctdHPfW2QFvhmL7n9QAAAEI"]
[Sat Aug 29 05:07:30.236972 2026] [security2:error] [pid 1018003:tid 1018261] [client 20.104.18.15:12180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/she11.php"] [unique_id "apK9cjAh5Y1i2tUxg4EVJgAABiU"]
[Sat Aug 29 05:07:30.237720 2026] [security2:error] [pid 1018003:tid 1018186] [client 68.155.159.216:2014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-content/banners/about.php"] [unique_id "apK9cjAh5Y1i2tUxg4EVJwAABds"]
[Sat Aug 29 05:07:30.242447 2026] [security2:error] [pid 1028675:tid 1028889] [client 20.48.250.41:49064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/thui.php"] [unique_id "apK9ctdHPfW2QFvhmL7n9gAAAE8"]
[Sat Aug 29 05:07:30.245310 2026] [security2:error] [pid 1028675:tid 1028899] [client 20.63.81.20:20967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/haxor.php"] [unique_id "apK9ctdHPfW2QFvhmL7n9wAAAFk"]
[Sat Aug 29 05:07:30.246306 2026] [security2:error] [pid 1028675:tid 1028921] [client 4.205.62.107:56024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK9ctdHPfW2QFvhmL7n-AAAAG8"]
[Sat Aug 29 05:07:30.249827 2026] [core:error] [pid 1018003:tid 1018023] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.249840 2026] [core:error] [pid 1018003:tid 1018023] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.250788 2026] [core:error] [pid 1018003:tid 1018072] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.250800 2026] [core:error] [pid 1018003:tid 1018072] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.264559 2026] [security2:error] [pid 1028675:tid 1028859] [client 20.104.18.15:19356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/key.php"] [unique_id "apK9ctdHPfW2QFvhmL7n_AAAADE"]
[Sat Aug 29 05:07:30.268001 2026] [security2:error] [pid 1028675:tid 1028847] [client 158.23.147.79:25353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK9ctdHPfW2QFvhmL7n_QAAACU"]
[Sat Aug 29 05:07:30.285481 2026] [security2:error] [pid 1018003:tid 1018177] [client 68.155.159.216:63841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-content/banners/about.php"] [unique_id "apK9cjAh5Y1i2tUxg4EVLwAABdI"]
[Sat Aug 29 05:07:30.288418 2026] [security2:error] [pid 1018003:tid 1018086] [remote 52.167.144.172:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantsfans.net"] [uri "/message_board/index.php"] [unique_id "apK9cjAh5Y1i2tUxg4EVMAAF60E"]
[Sat Aug 29 05:07:30.292955 2026] [security2:error] [pid 1018003:tid 1018191] [client 68.155.159.216:18386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/goat.php"] [unique_id "apK9cjAh5Y1i2tUxg4EVMQAABeA"]
[Sat Aug 29 05:07:30.294662 2026] [security2:error] [pid 1028675:tid 1028917] [client 20.104.49.130:34536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/f35.update.php"] [unique_id "apK9ctdHPfW2QFvhmL7n_wAAAGs"]
[Sat Aug 29 05:07:30.296189 2026] [core:error] [pid 1028675:tid 1028881] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.296203 2026] [core:error] [pid 1028675:tid 1028881] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.296281 2026] [security2:error] [pid 1018003:tid 1018198] [client 52.139.37.240:19279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/zafir1.php"] [unique_id "apK9cjAh5Y1i2tUxg4EVMgAABec"]
[Sat Aug 29 05:07:30.301034 2026] [security2:error] [pid 1028675:tid 1028929] [client 20.203.141.11:8965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-content/themes/about.php"] [unique_id "apK9ctdHPfW2QFvhmL7oAAAAAHc"]
[Sat Aug 29 05:07:30.309103 2026] [security2:error] [pid 1028675:tid 1028844] [client 20.104.104.62:10662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/ca4.php"] [unique_id "apK9ctdHPfW2QFvhmL7oAQAAACI"]
[Sat Aug 29 05:07:30.326921 2026] [security2:error] [pid 1028675:tid 1028878] [client 68.155.159.216:33572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-includes/js/index.php"] [unique_id "apK9ctdHPfW2QFvhmL7oAwAAAEQ"]
[Sat Aug 29 05:07:30.329021 2026] [security2:error] [pid 1018003:tid 1018174] [client 158.23.147.79:59897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/classwithtostring.php"] [unique_id "apK9cjAh5Y1i2tUxg4EVNAAABc8"]
[Sat Aug 29 05:07:30.329925 2026] [security2:error] [pid 1018003:tid 1018256] [client 158.23.147.79:35216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK9cjAh5Y1i2tUxg4EVNQAABiA"]
[Sat Aug 29 05:07:30.331206 2026] [security2:error] [pid 1028675:tid 1028839] [client 20.104.18.15:5000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/t3.php"] [unique_id "apK9ctdHPfW2QFvhmL7oBAAAAB0"]
[Sat Aug 29 05:07:30.334076 2026] [security2:error] [pid 1028675:tid 1028814] [client 20.104.18.15:13583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/sym.php"] [unique_id "apK9ctdHPfW2QFvhmL7oBQAAAAQ"]
[Sat Aug 29 05:07:30.345675 2026] [core:error] [pid 1028675:tid 1028937] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.345687 2026] [core:error] [pid 1028675:tid 1028937] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.352628 2026] [security2:error] [pid 1018003:tid 1018258] [client 68.155.159.216:51819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK9cjAh5Y1i2tUxg4EVNgAABiI"]
[Sat Aug 29 05:07:30.357912 2026] [core:error] [pid 1018003:tid 1018262] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.357925 2026] [core:error] [pid 1018003:tid 1018262] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.359504 2026] [security2:error] [pid 1028675:tid 1028835] [client 20.151.200.44:46654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/admin123.php"] [unique_id "apK9ctdHPfW2QFvhmL7oCwAAABk"]
[Sat Aug 29 05:07:30.370161 2026] [security2:error] [pid 1028675:tid 1028866] [client 20.63.81.20:20959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/google.php"] [unique_id "apK9ctdHPfW2QFvhmL7oDAAAADg"]
[Sat Aug 29 05:07:30.374539 2026] [security2:error] [pid 1028675:tid 1028816] [client 146.70.36.124:49912] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.airviewconcept.com"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "apK9ctdHPfW2QFvhmL7oDQAAAAY"]
[Sat Aug 29 05:07:30.400408 2026] [security2:error] [pid 1018003:tid 1018222] [client 20.203.141.11:38601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/elp.php"] [unique_id "apK9cjAh5Y1i2tUxg4EVOQAABf8"]
[Sat Aug 29 05:07:30.407731 2026] [security2:error] [pid 1018003:tid 1018066] [remote 35.231.104.225:41798] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "www.qandlcondos.com"] [uri "/api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ"] [unique_id "apK9cjAh5Y1i2tUxg4EVOgAFuS0"]
[Sat Aug 29 05:07:30.409675 2026] [security2:error] [pid 1018003:tid 1018196] [client 20.104.18.15:19409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/chosen.php"] [unique_id "apK9cjAh5Y1i2tUxg4EVOwAABeU"]
[Sat Aug 29 05:07:30.415503 2026] [security2:error] [pid 1028675:tid 1028841] [client 52.139.37.240:14491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/7logs.php"] [unique_id "apK9ctdHPfW2QFvhmL7oDgAAAB8"]
[Sat Aug 29 05:07:30.420855 2026] [security2:error] [pid 1028675:tid 1028903] [client 20.104.18.15:12214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/kerang.php"] [unique_id "apK9ctdHPfW2QFvhmL7oDwAAAF0"]
[Sat Aug 29 05:07:30.424403 2026] [security2:error] [pid 1028675:tid 1028898] [client 20.48.250.41:49032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/Jcrop.php"] [unique_id "apK9ctdHPfW2QFvhmL7oEAAAAFg"]
[Sat Aug 29 05:07:30.424660 2026] [security2:error] [pid 1028675:tid 1028867] [client 20.48.250.41:35097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/ws58.php"] [unique_id "apK9ctdHPfW2QFvhmL7oEQAAADk"]
[Sat Aug 29 05:07:30.432421 2026] [security2:error] [pid 1028675:tid 1028812] [client 40.83.93.50:24457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-comments-post.php"] [unique_id "apK9ctdHPfW2QFvhmL7oEgAAAAI"]
[Sat Aug 29 05:07:30.440020 2026] [security2:error] [pid 1028675:tid 1028825] [client 20.104.18.15:36707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/v22.php"] [unique_id "apK9ctdHPfW2QFvhmL7oEwAAAA8"]
[Sat Aug 29 05:07:30.448133 2026] [security2:error] [pid 1028675:tid 1028912] [client 20.104.104.62:10642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/x0x.php"] [unique_id "apK9ctdHPfW2QFvhmL7oFAAAAGY"]
[Sat Aug 29 05:07:30.449464 2026] [security2:error] [pid 1018003:tid 1018172] [client 20.104.104.62:64745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/thr.php"] [unique_id "apK9cjAh5Y1i2tUxg4EVPAAABc0"]
[Sat Aug 29 05:07:30.463211 2026] [security2:error] [pid 1018003:tid 1018195] [client 68.155.159.216:24477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK9cjAh5Y1i2tUxg4EVPQAABeQ"]
[Sat Aug 29 05:07:30.476297 2026] [security2:error] [pid 1028675:tid 1028861] [client 20.104.18.15:13656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/8.php"] [unique_id "apK9ctdHPfW2QFvhmL7oFQAAADM"]
[Sat Aug 29 05:07:30.492099 2026] [security2:error] [pid 1028675:tid 1028811] [client 52.139.37.240:19265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/abc.php"] [unique_id "apK9ctdHPfW2QFvhmL7oFgAAAAE"]
[Sat Aug 29 05:07:30.494751 2026] [security2:error] [pid 1028675:tid 1028832] [client 20.104.18.15:4996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/wp.php"] [unique_id "apK9ctdHPfW2QFvhmL7oFwAAABY"]
[Sat Aug 29 05:07:30.497947 2026] [security2:error] [pid 1028675:tid 1028887] [client 20.63.81.20:20974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "apK9ctdHPfW2QFvhmL7oGAAAAE0"]
[Sat Aug 29 05:07:30.509815 2026] [security2:error] [pid 1028675:tid 1028899] [client 168.107.94.195:52923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9ctdHPfW2QFvhmL7oHAAAAFk"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:30.541138 2026] [security2:error] [pid 1018003:tid 1018234] [client 20.151.200.44:47412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/7h.php"] [unique_id "apK9cjAh5Y1i2tUxg4EVPwAABgo"]
[Sat Aug 29 05:07:30.544199 2026] [security2:error] [pid 1018003:tid 1018138] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/app/.env"] [unique_id "apK9cjAh5Y1i2tUxg4EVQAAF6XU"]
[Sat Aug 29 05:07:30.548962 2026] [security2:error] [pid 1018003:tid 1018266] [client 20.104.18.15:12172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/m.php"] [unique_id "apK9cjAh5Y1i2tUxg4EVQQAABio"]
[Sat Aug 29 05:07:30.555260 2026] [security2:error] [pid 1018003:tid 1018270] [client 20.48.250.41:49101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/ws58.php"] [unique_id "apK9cjAh5Y1i2tUxg4EVQgAABi4"]
[Sat Aug 29 05:07:30.559622 2026] [security2:error] [pid 1028675:tid 1028919] [client 158.23.147.79:49995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/login.php"] [unique_id "apK9ctdHPfW2QFvhmL7oIwAAAG0"]
[Sat Aug 29 05:07:30.586339 2026] [security2:error] [pid 1028675:tid 1028917] [client 20.104.18.15:19337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/file1221.php"] [unique_id "apK9ctdHPfW2QFvhmL7oKAAAAGs"]
[Sat Aug 29 05:07:30.589985 2026] [security2:error] [pid 1018003:tid 1018236] [client 20.104.104.62:10585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.capturephoto.net"] [uri "/fesa.php"] [unique_id "apK9cjAh5Y1i2tUxg4EVSQAABgw"]
[Sat Aug 29 05:07:30.596933 2026] [security2:error] [pid 1028675:tid 1028929] [client 4.205.62.107:21893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/ws79.php"] [unique_id "apK9ctdHPfW2QFvhmL7oKQAAAHc"]
[Sat Aug 29 05:07:30.601594 2026] [core:error] [pid 1018003:tid 1018188] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.601610 2026] [core:error] [pid 1018003:tid 1018188] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.603983 2026] [core:error] [pid 1028675:tid 1028813] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.603998 2026] [core:error] [pid 1028675:tid 1028813] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.604576 2026] [core:error] [pid 1028675:tid 1028818] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.604590 2026] [core:error] [pid 1028675:tid 1028818] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.607610 2026] [core:error] [pid 1018003:tid 1018275] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.607627 2026] [core:error] [pid 1018003:tid 1018275] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.607831 2026] [core:error] [pid 1018003:tid 1018246] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.607841 2026] [core:error] [pid 1018003:tid 1018246] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.609145 2026] [security2:error] [pid 1028675:tid 1028833] [client 20.196.209.81:1990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/bak.phps"] [unique_id "apK9ctdHPfW2QFvhmL7oLAAAABc"]
[Sat Aug 29 05:07:30.619142 2026] [security2:error] [pid 1028675:tid 1028837] [client 20.48.250.41:35473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/xs.php"] [unique_id "apK9ctdHPfW2QFvhmL7oLQAAABs"]
[Sat Aug 29 05:07:30.622641 2026] [security2:error] [pid 1028675:tid 1028920] [client 158.158.54.35:16186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/m.php"] [unique_id "apK9ctdHPfW2QFvhmL7oLgAAAG4"]
[Sat Aug 29 05:07:30.627684 2026] [security2:error] [pid 1028675:tid 1028859] [client 52.139.37.240:15256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/ac.php"] [unique_id "apK9ctdHPfW2QFvhmL7oLwAAADE"]
[Sat Aug 29 05:07:30.633138 2026] [security2:error] [pid 1018003:tid 1018182] [client 20.63.81.20:20929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/robots.php"] [unique_id "apK9cjAh5Y1i2tUxg4EVTgAABdc"]
[Sat Aug 29 05:07:30.652575 2026] [security2:error] [pid 1028675:tid 1028855] [client 158.158.54.35:15886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/root.php"] [unique_id "apK9ctdHPfW2QFvhmL7oMAAAAC0"]
[Sat Aug 29 05:07:30.658967 2026] [security2:error] [pid 1028675:tid 1028862] [client 20.104.18.15:4998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/abcd.php"] [unique_id "apK9ctdHPfW2QFvhmL7oMQAAADQ"]
[Sat Aug 29 05:07:30.662794 2026] [security2:error] [pid 1028675:tid 1028851] [client 20.104.18.15:36588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/wp-activate.php"] [unique_id "apK9ctdHPfW2QFvhmL7oMgAAACk"]
[Sat Aug 29 05:07:30.667784 2026] [security2:error] [pid 1018003:tid 1018162] [client 158.23.147.79:17506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/atomlib.php"] [unique_id "apK9cjAh5Y1i2tUxg4EVUAAABcM"]
[Sat Aug 29 05:07:30.680751 2026] [security2:error] [pid 1018003:tid 1018224] [client 146.70.36.124:49922] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.airviewconcept.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "apK9cjAh5Y1i2tUxg4EVWAAABgE"]
[Sat Aug 29 05:07:30.684653 2026] [security2:error] [pid 1028675:tid 1028814] [client 52.139.37.240:19293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/c1.php"] [unique_id "apK9ctdHPfW2QFvhmL7oNQAAAAQ"]
[Sat Aug 29 05:07:30.689114 2026] [security2:error] [pid 1028675:tid 1028925] [client 20.48.250.41:49090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/xs.php"] [unique_id "apK9ctdHPfW2QFvhmL7oNwAAAHM"]
[Sat Aug 29 05:07:30.689215 2026] [security2:error] [pid 1028675:tid 1028888] [client 20.104.18.15:13754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/goods.php"] [unique_id "apK9ctdHPfW2QFvhmL7oNgAAAE4"]
[Sat Aug 29 05:07:30.696779 2026] [core:error] [pid 1018003:tid 1018191] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.696796 2026] [core:error] [pid 1018003:tid 1018191] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.696970 2026] [core:error] [pid 1028675:tid 1028901] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.696981 2026] [core:error] [pid 1028675:tid 1028901] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.700970 2026] [security2:error] [pid 1028675:tid 1028824] [client 20.151.200.44:47370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/wp-gzone.php"] [unique_id "apK9ctdHPfW2QFvhmL7oOgAAAA4"]
[Sat Aug 29 05:07:30.703866 2026] [security2:error] [pid 1018003:tid 1018255] [client 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK9cjAh5Y1i2tUxg4EVSgAGH1U"]
[Sat Aug 29 05:07:30.705883 2026] [core:error] [pid 1028675:tid 1028870] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.705895 2026] [core:error] [pid 1028675:tid 1028870] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.713150 2026] [core:error] [pid 1028675:tid 1028866] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.713162 2026] [core:error] [pid 1028675:tid 1028866] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.713424 2026] [core:error] [pid 1018003:tid 1018256] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.713441 2026] [core:error] [pid 1018003:tid 1018256] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.716857 2026] [core:error] [pid 1028675:tid 1028922] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.716867 2026] [core:error] [pid 1028675:tid 1028922] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.717320 2026] [security2:error] [pid 1028675:tid 1028916] [client 158.23.147.79:48284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-admin/network/index.php"] [unique_id "apK9ctdHPfW2QFvhmL7oPgAAAGo"]
[Sat Aug 29 05:07:30.746567 2026] [security2:error] [pid 1028675:tid 1028867] [client 20.104.18.15:19336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/nox.php"] [unique_id "apK9ctdHPfW2QFvhmL7oQQAAADk"]
[Sat Aug 29 05:07:30.747545 2026] [security2:error] [pid 1018003:tid 1018250] [client 20.104.49.130:50591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.danesquality.com"] [uri "/xwx1.php"] [unique_id "apK9cjAh5Y1i2tUxg4EVXAAABho"]
[Sat Aug 29 05:07:30.755170 2026] [security2:error] [pid 1028675:tid 1028844] [client 20.203.141.11:27351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK9ctdHPfW2QFvhmL7oQgAAACI"]
[Sat Aug 29 05:07:30.761069 2026] [security2:error] [pid 1028675:tid 1028850] [client 20.104.18.15:12168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/fling.php"] [unique_id "apK9ctdHPfW2QFvhmL7oQwAAACg"]
[Sat Aug 29 05:07:30.765189 2026] [security2:error] [pid 1018003:tid 1018267] [client 20.63.81.20:20976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/wp-content/plugins/ccx/index.php"] [unique_id "apK9cjAh5Y1i2tUxg4EVXQAABis"]
[Sat Aug 29 05:07:30.770402 2026] [security2:error] [pid 1018003:tid 1018217] [client 68.155.159.216:6140] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/1.php"] [unique_id "apK9cjAh5Y1i2tUxg4EVXgAABfo"]
[Sat Aug 29 05:07:30.770505 2026] [security2:error] [pid 1018003:tid 1018217] [client 68.155.159.216:6140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/1.php"] [unique_id "apK9cjAh5Y1i2tUxg4EVXgAABfo"]
[Sat Aug 29 05:07:30.817579 2026] [security2:error] [pid 1028675:tid 1028858] [client 20.104.18.15:5089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/nofile.php"] [unique_id "apK9ctdHPfW2QFvhmL7oRgAAADA"]
[Sat Aug 29 05:07:30.823272 2026] [core:error] [pid 1028675:tid 1028889] [client 34.138.144.127:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.823287 2026] [core:error] [pid 1028675:tid 1028889] [client 34.138.144.127:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.832516 2026] [security2:error] [pid 1028675:tid 1028912] [client 52.139.37.240:15273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/ctex1.php"] [unique_id "apK9ctdHPfW2QFvhmL7oRwAAAGY"]
[Sat Aug 29 05:07:30.839520 2026] [security2:error] [pid 1028675:tid 1028826] [client 20.104.104.62:20835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/tmv.php"] [unique_id "apK9ctdHPfW2QFvhmL7oSAAAABA"]
[Sat Aug 29 05:07:30.853803 2026] [security2:error] [pid 1028675:tid 1028911] [client 4.205.62.107:24965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/file21.php"] [unique_id "apK9ctdHPfW2QFvhmL7oSQAAAGU"]
[Sat Aug 29 05:07:30.857888 2026] [security2:error] [pid 1028675:tid 1028871] [client 20.203.141.11:18189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-content/cong.php"] [unique_id "apK9ctdHPfW2QFvhmL7oSgAAAD0"]
[Sat Aug 29 05:07:30.866849 2026] [security2:error] [pid 1018003:tid 1018183] [client 68.155.159.216:30592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-includes/css/index.php"] [unique_id "apK9cjAh5Y1i2tUxg4EVYAAABdg"]
[Sat Aug 29 05:07:30.876334 2026] [security2:error] [pid 1018003:tid 1018159] [client 20.104.18.15:36724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/wp-trackback.php"] [unique_id "apK9cjAh5Y1i2tUxg4EVYQAABcA"]
[Sat Aug 29 05:07:30.876564 2026] [security2:error] [pid 1028675:tid 1028887] [client 52.139.37.240:19325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/index.php/feed/atom/"] [unique_id "apK9ctdHPfW2QFvhmL7oSwAAAE0"]
[Sat Aug 29 05:07:30.879108 2026] [security2:error] [pid 1018003:tid 1018184] [client 4.205.62.107:58484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/css.php"] [unique_id "apK9cjAh5Y1i2tUxg4EVYgAABdk"]
[Sat Aug 29 05:07:30.887215 2026] [security2:error] [pid 1028675:tid 1028830] [client 68.155.159.216:49157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/sad/about.php"] [unique_id "apK9ctdHPfW2QFvhmL7oTAAAABQ"]
[Sat Aug 29 05:07:30.891721 2026] [security2:error] [pid 1018003:tid 1018222] [client 20.151.200.44:60167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/fgd.php"] [unique_id "apK9cjAh5Y1i2tUxg4EVYwAABf8"]
[Sat Aug 29 05:07:30.893362 2026] [security2:error] [pid 1018003:tid 1018196] [client 20.104.18.15:13595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/ah.php"] [unique_id "apK9cjAh5Y1i2tUxg4EVZgAABeU"]
[Sat Aug 29 05:07:30.893502 2026] [security2:error] [pid 1028675:tid 1028890] [client 20.63.81.20:20943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/wp-admin/css/colors/maro.php"] [unique_id "apK9ctdHPfW2QFvhmL7oTQAAAFA"]
[Sat Aug 29 05:07:30.895563 2026] [core:error] [pid 1018003:tid 1018121] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.895580 2026] [core:error] [pid 1018003:tid 1018121] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.899300 2026] [security2:error] [pid 1018003:tid 1018172] [client 20.104.18.15:12226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/btyuio.php"] [unique_id "apK9cjAh5Y1i2tUxg4EVaAAABc0"]
[Sat Aug 29 05:07:30.902408 2026] [security2:error] [pid 1028675:tid 1028903] [client 40.83.93.50:5642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-config.php"] [unique_id "apK9ctdHPfW2QFvhmL7oTgAAAF0"]
[Sat Aug 29 05:07:30.918611 2026] [security2:error] [pid 1028675:tid 1028919] [client 68.155.159.216:52830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/dropdown.php"] [unique_id "apK9ctdHPfW2QFvhmL7oTwAAAG0"]
[Sat Aug 29 05:07:30.920007 2026] [security2:error] [pid 1028675:tid 1028881] [client 168.107.94.195:53324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9ctdHPfW2QFvhmL7oUAAAAEc"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:30.921931 2026] [security2:error] [pid 1018003:tid 1018226] [client 20.104.18.15:19330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/akismet.php"] [unique_id "apK9cjAh5Y1i2tUxg4EVawAABgM"]
[Sat Aug 29 05:07:30.926431 2026] [core:error] [pid 1018003:tid 1018238] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.926460 2026] [core:error] [pid 1018003:tid 1018238] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.929039 2026] [core:error] [pid 1018003:tid 1018109] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.929062 2026] [core:error] [pid 1018003:tid 1018109] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.948815 2026] [security2:error] [pid 1018003:tid 1018094] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/apps/.env"] [unique_id "apK9cjAh5Y1i2tUxg4EVcQAGMUk"]
[Sat Aug 29 05:07:30.949005 2026] [security2:error] [pid 1018003:tid 1018140] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/application/.env"] [unique_id "apK9cjAh5Y1i2tUxg4EVcAAGMXc"]
[Sat Aug 29 05:07:30.952772 2026] [core:error] [pid 1018003:tid 1018146] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.952785 2026] [core:error] [pid 1018003:tid 1018146] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.974981 2026] [security2:error] [pid 1018003:tid 1018077] [remote 34.138.144.127:58716] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/wp/.env"] [unique_id "apK9cjAh5Y1i2tUxg4EVcwAFvDg"]
[Sat Aug 29 05:07:30.979726 2026] [security2:error] [pid 1028675:tid 1028848] [client 4.205.62.107:21914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/packed.php"] [unique_id "apK9ctdHPfW2QFvhmL7oVAAAACY"]
[Sat Aug 29 05:07:30.980249 2026] [core:error] [pid 1018003:tid 1018120] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.980260 2026] [core:error] [pid 1018003:tid 1018120] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.981338 2026] [core:error] [pid 1028675:tid 1028873] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.981363 2026] [core:error] [pid 1028675:tid 1028873] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.981381 2026] [core:error] [pid 1018003:tid 1018275] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.981391 2026] [core:error] [pid 1018003:tid 1018275] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.983919 2026] [security2:error] [pid 1028675:tid 1028873] [client 146.70.36.124:49928] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.airviewconcept.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "apK9ctdHPfW2QFvhmL7oVQAAAD8"]
[Sat Aug 29 05:07:30.984971 2026] [core:error] [pid 1018003:tid 1018246] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.984995 2026] [core:error] [pid 1018003:tid 1018246] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.986051 2026] [core:error] [pid 1018003:tid 1018065] [remote 34.138.144.127:58716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.986064 2026] [core:error] [pid 1018003:tid 1018065] [remote 34.138.144.127:58716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.989232 2026] [core:error] [pid 1018003:tid 1018117] [remote 34.138.144.127:58716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.989245 2026] [core:error] [pid 1018003:tid 1018117] [remote 34.138.144.127:58716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:30.989331 2026] [security2:error] [pid 1028675:tid 1028837] [client 20.104.49.130:43804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.carlosmua.com"] [uri "/kgoc6awap3napxxxdCdefault.php"] [unique_id "apK9ctdHPfW2QFvhmL7oVgAAABs"]
[Sat Aug 29 05:07:30.989427 2026] [security2:error] [pid 1018003:tid 1018107] [remote 35.231.104.225:42404] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.qandlcondos.com"] [uri "/@fs/.env"] [unique_id "apK9cjAh5Y1i2tUxg4EVeQAGGFY"]
[Sat Aug 29 05:07:31.005091 2026] [security2:error] [pid 1018003:tid 1018202] [client 20.104.18.15:4944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/run.php"] [unique_id "apK9czAh5Y1i2tUxg4EVgQAABes"]
[Sat Aug 29 05:07:31.023695 2026] [security2:error] [pid 1028675:tid 1028862] [client 20.104.18.15:36648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/pri.php"] [unique_id "apK9c9dHPfW2QFvhmL7oVwAAADQ"]
[Sat Aug 29 05:07:31.025201 2026] [security2:error] [pid 1028675:tid 1028847] [client 52.139.37.240:14492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/defaults.php"] [unique_id "apK9c9dHPfW2QFvhmL7oWAAAACU"]
[Sat Aug 29 05:07:31.029667 2026] [security2:error] [pid 1028675:tid 1028842] [client 103.185.242.143:49525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK9c9dHPfW2QFvhmL7oWgAAACA"]
[Sat Aug 29 05:07:31.029791 2026] [security2:error] [pid 1028675:tid 1028842] [client 103.185.242.143:49525] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK9c9dHPfW2QFvhmL7oWgAAACA"]
[Sat Aug 29 05:07:31.034803 2026] [security2:error] [pid 1028675:tid 1028936] [client 20.104.18.15:13575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/ws55.php"] [unique_id "apK9c9dHPfW2QFvhmL7oWwAAAH4"]
[Sat Aug 29 05:07:31.036117 2026] [security2:error] [pid 1028675:tid 1028814] [client 20.63.81.20:20936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/wp-admin/css/colors/coffee/marijuana.php"] [unique_id "apK9c9dHPfW2QFvhmL7oXAAAAAQ"]
[Sat Aug 29 05:07:31.040588 2026] [security2:error] [pid 1028675:tid 1028900] [client 20.196.209.81:10581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/install.php"] [unique_id "apK9c9dHPfW2QFvhmL7oXwAAAFo"]
[Sat Aug 29 05:07:31.047316 2026] [security2:error] [pid 1028675:tid 1028824] [client 20.104.18.15:12260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/dehnl.php"] [unique_id "apK9c9dHPfW2QFvhmL7oYAAAAA4"]
[Sat Aug 29 05:07:31.061233 2026] [security2:error] [pid 1028675:tid 1028870] [client 158.23.147.79:26463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-admin/includes/index.php"] [unique_id "apK9c9dHPfW2QFvhmL7oZAAAADw"]
[Sat Aug 29 05:07:31.062234 2026] [security2:error] [pid 1028675:tid 1028914] [client 68.155.159.216:65072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/xmlrpc.php"] [unique_id "apK9c9dHPfW2QFvhmL7oZQAAAGg"]
[Sat Aug 29 05:07:31.068264 2026] [security2:error] [pid 1028675:tid 1028910] [client 68.155.159.216:33541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/radio.php"] [unique_id "apK9c9dHPfW2QFvhmL7oZgAAAGQ"]
[Sat Aug 29 05:07:31.071057 2026] [security2:error] [pid 1028675:tid 1028819] [client 158.158.54.35:4475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "apK9c9dHPfW2QFvhmL7oZwAAAAk"]
[Sat Aug 29 05:07:31.071876 2026] [security2:error] [pid 1028675:tid 1028920] [client 52.139.37.240:19282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/root.php"] [unique_id "apK9c9dHPfW2QFvhmL7oaAAAAG4"]
[Sat Aug 29 05:07:31.074888 2026] [core:error] [pid 1018003:tid 1018061] [remote 34.138.144.127:58716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.074904 2026] [core:error] [pid 1018003:tid 1018061] [remote 34.138.144.127:58716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.076192 2026] [security2:error] [pid 1018003:tid 1018119] [remote 34.138.144.127:58716] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcalendars.roycehomesales.com"] [uri "/wp-config.php~"] [unique_id "apK9czAh5Y1i2tUxg4EVgwAGHGI"]
[Sat Aug 29 05:07:31.113013 2026] [security2:error] [pid 1028675:tid 1028909] [client 158.158.54.35:4492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/p.php"] [unique_id "apK9c9dHPfW2QFvhmL7obQAAAGM"]
[Sat Aug 29 05:07:31.132543 2026] [security2:error] [pid 1028675:tid 1028858] [client 20.151.200.44:47404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/str.php"] [unique_id "apK9c9dHPfW2QFvhmL7ocQAAADA"]
[Sat Aug 29 05:07:31.135066 2026] [core:error] [pid 1018003:tid 1018080] [remote 34.138.144.127:58716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.135084 2026] [core:error] [pid 1018003:tid 1018080] [remote 34.138.144.127:58716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.139391 2026] [security2:error] [pid 1018003:tid 1018133] [remote 35.231.104.225:42404] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "www.qandlcondos.com"] [uri "/wp-config.php.old"] [unique_id "apK9czAh5Y1i2tUxg4EVhwAGIHA"]
[Sat Aug 29 05:07:31.140264 2026] [security2:error] [pid 1018003:tid 1018113] [remote 35.231.104.225:42404] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.qandlcondos.com"] [uri "/@fs/.env"] [unique_id "apK9czAh5Y1i2tUxg4EVhgAGIFw"]
[Sat Aug 29 05:07:31.146717 2026] [security2:error] [pid 1018003:tid 1018032] [remote 35.231.104.225:42404] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.qandlcondos.com"] [uri "/@fs/.env"] [unique_id "apK9czAh5Y1i2tUxg4EViQAF_gs"]
[Sat Aug 29 05:07:31.150269 2026] [security2:error] [pid 1018003:tid 1018145] [remote 35.231.104.225:42404] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "www.qandlcondos.com"] [uri "/wp-config.php.bak"] [unique_id "apK9czAh5Y1i2tUxg4EViwAGInw"]
[Sat Aug 29 05:07:31.151644 2026] [security2:error] [pid 1018003:tid 1018130] [remote 35.231.104.225:42404] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.qandlcondos.com"] [uri "/laravel/.env"] [unique_id "apK9czAh5Y1i2tUxg4EVigAGIm0"]
[Sat Aug 29 05:07:31.166027 2026] [security2:error] [pid 1018003:tid 1018189] [client 20.104.18.15:19331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/ajax.php"] [unique_id "apK9czAh5Y1i2tUxg4EVjwAABd4"]
[Sat Aug 29 05:07:31.167978 2026] [security2:error] [pid 1018003:tid 1018250] [client 20.104.18.15:13687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/drykl.php"] [unique_id "apK9czAh5Y1i2tUxg4EVkAAABho"]
[Sat Aug 29 05:07:31.169580 2026] [security2:error] [pid 1018003:tid 1018268] [client 20.63.81.20:20872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/wp-admin/css/colors/coffee/mari.php"] [unique_id "apK9czAh5Y1i2tUxg4EVkQAABiw"]
[Sat Aug 29 05:07:31.187427 2026] [security2:error] [pid 1018003:tid 1018175] [client 146.70.194.254:59636] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "modelbasenjis.com"] [uri "/cgi-sys/suspendedpage.cgi/2018/wp-includes/wlwmanifest.xml"] [unique_id "apK9czAh5Y1i2tUxg4EVkwAABdA"]
[Sat Aug 29 05:07:31.194595 2026] [security2:error] [pid 1028675:tid 1028887] [client 20.104.18.15:4966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/new.php"] [unique_id "apK9c9dHPfW2QFvhmL7ocwAAAE0"]
[Sat Aug 29 05:07:31.215342 2026] [security2:error] [pid 1028675:tid 1028912] [client 52.139.37.240:15232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/domains.php"] [unique_id "apK9c9dHPfW2QFvhmL7odQAAAGY"]
[Sat Aug 29 05:07:31.231463 2026] [security2:error] [pid 1028675:tid 1028823] [client 20.203.141.11:39488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-admin/index.php"] [unique_id "apK9c9dHPfW2QFvhmL7odgAAAA0"]
[Sat Aug 29 05:07:31.240817 2026] [core:error] [pid 1018003:tid 1018021] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.240833 2026] [core:error] [pid 1018003:tid 1018021] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.244727 2026] [core:error] [pid 1018003:tid 1018046] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.244745 2026] [core:error] [pid 1018003:tid 1018046] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.246175 2026] [core:error] [pid 1018003:tid 1018142] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.246191 2026] [core:error] [pid 1018003:tid 1018142] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.248093 2026] [core:error] [pid 1018003:tid 1018036] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.248115 2026] [core:error] [pid 1018003:tid 1018036] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.249169 2026] [core:error] [pid 1018003:tid 1018044] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.249185 2026] [core:error] [pid 1018003:tid 1018044] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.249902 2026] [core:error] [pid 1018003:tid 1018137] [remote 34.138.144.127:58716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.249925 2026] [core:error] [pid 1018003:tid 1018137] [remote 34.138.144.127:58716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.253658 2026] [core:error] [pid 1018003:tid 1018035] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.253673 2026] [core:error] [pid 1018003:tid 1018035] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.253959 2026] [core:error] [pid 1018003:tid 1018127] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.253968 2026] [core:error] [pid 1018003:tid 1018127] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.254249 2026] [core:error] [pid 1018003:tid 1018045] [remote 34.138.144.127:58716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.254259 2026] [core:error] [pid 1018003:tid 1018045] [remote 34.138.144.127:58716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.254497 2026] [core:error] [pid 1018003:tid 1018041] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.254513 2026] [core:error] [pid 1018003:tid 1018041] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.254743 2026] [core:error] [pid 1018003:tid 1018102] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.254749 2026] [core:error] [pid 1018003:tid 1018102] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.255150 2026] [core:error] [pid 1018003:tid 1018039] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.255160 2026] [core:error] [pid 1018003:tid 1018039] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.267447 2026] [security2:error] [pid 1028675:tid 1028830] [client 52.139.37.240:19341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/shell.php"] [unique_id "apK9c9dHPfW2QFvhmL7oeQAAABQ"]
[Sat Aug 29 05:07:31.273692 2026] [security2:error] [pid 1018003:tid 1018172] [client 68.155.159.216:56550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK9czAh5Y1i2tUxg4EVqAAABc0"]
[Sat Aug 29 05:07:31.278617 2026] [security2:error] [pid 1028675:tid 1028833] [client 20.104.18.15:12213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/zoo2.php"] [unique_id "apK9c9dHPfW2QFvhmL7oegAAABc"]
[Sat Aug 29 05:07:31.279202 2026] [security2:error] [pid 1028675:tid 1028927] [client 158.23.147.79:30426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK9c9dHPfW2QFvhmL7oewAAAHU"]
[Sat Aug 29 05:07:31.280612 2026] [security2:error] [pid 1028675:tid 1028818] [client 4.205.62.107:8709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/test.php"] [unique_id "apK9c9dHPfW2QFvhmL7ofAAAAAg"]
[Sat Aug 29 05:07:31.286999 2026] [security2:error] [pid 1028675:tid 1028873] [client 146.70.36.124:49944] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.airviewconcept.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "apK9c9dHPfW2QFvhmL7ofQAAAD8"]
[Sat Aug 29 05:07:31.291269 2026] [security2:error] [pid 1028675:tid 1028847] [client 158.23.147.79:32581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK9c9dHPfW2QFvhmL7ofwAAACU"]
[Sat Aug 29 05:07:31.294954 2026] [core:error] [pid 1028675:tid 1028813] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.294968 2026] [core:error] [pid 1028675:tid 1028813] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.295906 2026] [core:error] [pid 1028675:tid 1028837] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.295920 2026] [core:error] [pid 1028675:tid 1028837] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.296059 2026] [core:error] [pid 1028675:tid 1028862] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.296070 2026] [core:error] [pid 1028675:tid 1028862] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.296332 2026] [core:error] [pid 1028675:tid 1028859] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.296341 2026] [core:error] [pid 1028675:tid 1028859] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.296404 2026] [core:error] [pid 1028675:tid 1028839] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.296417 2026] [core:error] [pid 1028675:tid 1028839] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.301529 2026] [security2:error] [pid 1018003:tid 1018226] [client 20.63.81.20:20880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/wp-includes/images/crystal/option.php"] [unique_id "apK9czAh5Y1i2tUxg4EVqQAABgM"]
[Sat Aug 29 05:07:31.301888 2026] [security2:error] [pid 1028675:tid 1028900] [client 20.104.18.15:13589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/backup.php"] [unique_id "apK9c9dHPfW2QFvhmL7ohAAAAFo"]
[Sat Aug 29 05:07:31.302812 2026] [security2:error] [pid 1028675:tid 1028917] [client 20.104.18.15:19436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/atomlib.php"] [unique_id "apK9c9dHPfW2QFvhmL7ohQAAAGs"]
[Sat Aug 29 05:07:31.316428 2026] [security2:error] [pid 1018003:tid 1018192] [client 168.107.94.195:53844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9czAh5Y1i2tUxg4EVqgAABeE"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:31.325858 2026] [security2:error] [pid 1028675:tid 1028821] [client 20.203.141.11:38166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK9c9dHPfW2QFvhmL7ohgAAAAs"]
[Sat Aug 29 05:07:31.333051 2026] [security2:error] [pid 1028675:tid 1028902] [client 20.104.18.15:36656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/wp_blog_footer.php"] [unique_id "apK9c9dHPfW2QFvhmL7ohwAAAFw"]
[Sat Aug 29 05:07:31.354989 2026] [security2:error] [pid 1018003:tid 1018083] [remote 34.138.144.127:58716] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcalendars.roycehomesales.com"] [uri "/wp-config.php.swp"] [unique_id "apK9czAh5Y1i2tUxg4EVrAAF7D4"]
[Sat Aug 29 05:07:31.356829 2026] [security2:error] [pid 1018003:tid 1018277] [client 68.155.159.216:1986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK9czAh5Y1i2tUxg4EVrQAABjU"]
[Sat Aug 29 05:07:31.357111 2026] [security2:error] [pid 1028675:tid 1028914] [client 20.104.18.15:5055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/inx.php"] [unique_id "apK9c9dHPfW2QFvhmL7oiAAAAGg"]
[Sat Aug 29 05:07:31.361247 2026] [core:error] [pid 1018003:tid 1018095] [remote 34.138.144.127:58716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.361262 2026] [core:error] [pid 1018003:tid 1018095] [remote 34.138.144.127:58716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.374053 2026] [security2:error] [pid 1028675:tid 1028916] [client 158.23.147.79:25417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK9c9dHPfW2QFvhmL7oiQAAAGo"]
[Sat Aug 29 05:07:31.376995 2026] [security2:error] [pid 1028675:tid 1028849] [client 40.83.93.50:24456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-configs.php"] [unique_id "apK9c9dHPfW2QFvhmL7oigAAACc"]
[Sat Aug 29 05:07:31.378099 2026] [security2:error] [pid 1028675:tid 1028920] [client 4.205.62.107:53280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/myfile.php"] [unique_id "apK9c9dHPfW2QFvhmL7oiwAAAG4"]
[Sat Aug 29 05:07:31.396152 2026] [security2:error] [pid 1018003:tid 1018100] [remote 35.231.104.225:42404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 225.104.231.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.qandlcondos.com"] [uri "/config.php.bak"] [unique_id "apK9czAh5Y1i2tUxg4EVrgAF-U8"]
[Sat Aug 29 05:07:31.396619 2026] [security2:error] [pid 1018003:tid 1018157] [client 20.104.104.62:64732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/terminal.php"] [unique_id "apK9czAh5Y1i2tUxg4EVsAAABb4"]
[Sat Aug 29 05:07:31.403658 2026] [security2:error] [pid 1018003:tid 1018037] [remote 35.231.104.225:42404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 225.104.231.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.qandlcondos.com"] [uri "/configuration.php.bak"] [unique_id "apK9czAh5Y1i2tUxg4EVrwAF-RA"]
[Sat Aug 29 05:07:31.405562 2026] [security2:error] [pid 1018003:tid 1018231] [client 52.139.37.240:14938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/dropdown.php"] [unique_id "apK9czAh5Y1i2tUxg4EVsQAABgc"]
[Sat Aug 29 05:07:31.432761 2026] [security2:error] [pid 1028675:tid 1028825] [client 158.23.147.79:35829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/lock.php"] [unique_id "apK9c9dHPfW2QFvhmL7ojAAAAA8"]
[Sat Aug 29 05:07:31.433791 2026] [security2:error] [pid 1018003:tid 1018164] [client 20.104.18.15:13568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/indo.php"] [unique_id "apK9czAh5Y1i2tUxg4EVsgAABcU"]
[Sat Aug 29 05:07:31.433892 2026] [security2:error] [pid 1028675:tid 1028812] [client 68.155.159.216:33577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-content/index.php"] [unique_id "apK9c9dHPfW2QFvhmL7ojQAAAAI"]
[Sat Aug 29 05:07:31.434447 2026] [security2:error] [pid 1028675:tid 1028844] [client 20.104.18.15:19427] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.kozo.com.mx"] [uri "/1.php"] [unique_id "apK9c9dHPfW2QFvhmL7ojgAAACI"]
[Sat Aug 29 05:07:31.434513 2026] [security2:error] [pid 1028675:tid 1028844] [client 20.104.18.15:19427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/1.php"] [unique_id "apK9c9dHPfW2QFvhmL7ojgAAACI"]
[Sat Aug 29 05:07:31.446984 2026] [security2:error] [pid 1018003:tid 1018273] [client 20.104.18.15:12282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/zoo1.php"] [unique_id "apK9czAh5Y1i2tUxg4EVswAABjE"]
[Sat Aug 29 05:07:31.447042 2026] [security2:error] [pid 1028675:tid 1028861] [client 20.63.81.20:20948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/wp-includes/pomo/xxx.php"] [unique_id "apK9c9dHPfW2QFvhmL7ojwAAADM"]
[Sat Aug 29 05:07:31.460827 2026] [security2:error] [pid 1018003:tid 1018182] [client 158.23.147.79:37770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/install.php"] [unique_id "apK9czAh5Y1i2tUxg4EVtAAABdc"]
[Sat Aug 29 05:07:31.474376 2026] [security2:error] [pid 1018003:tid 1018246] [client 52.139.37.240:19300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK9czAh5Y1i2tUxg4EVtQAABhY"]
[Sat Aug 29 05:07:31.478231 2026] [security2:error] [pid 1018003:tid 1018135] [remote 34.138.144.127:58716] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/wp-config.old"] [unique_id "apK9czAh5Y1i2tUxg4EVtwAGGHI"]
[Sat Aug 29 05:07:31.479195 2026] [core:error] [pid 1018003:tid 1018054] [remote 34.138.144.127:58716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.479207 2026] [core:error] [pid 1018003:tid 1018054] [remote 34.138.144.127:58716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.479590 2026] [core:error] [pid 1018003:tid 1018048] [remote 34.138.144.127:58716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.479607 2026] [core:error] [pid 1018003:tid 1018048] [remote 34.138.144.127:58716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.479751 2026] [security2:error] [pid 1018003:tid 1018185] [client 20.196.209.81:1889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/colour.php"] [unique_id "apK9czAh5Y1i2tUxg4EVugAABdo"]
[Sat Aug 29 05:07:31.479892 2026] [core:error] [pid 1018003:tid 1018078] [remote 34.138.144.127:58716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.479900 2026] [core:error] [pid 1018003:tid 1018078] [remote 34.138.144.127:58716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.490752 2026] [security2:error] [pid 1018003:tid 1018198] [client 20.104.18.15:4947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/vpn.php"] [unique_id "apK9czAh5Y1i2tUxg4EVuwAABec"]
[Sat Aug 29 05:07:31.495046 2026] [security2:error] [pid 1028675:tid 1028811] [client 20.104.18.15:36561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/sushi.php"] [unique_id "apK9c9dHPfW2QFvhmL7okAAAAAE"]
[Sat Aug 29 05:07:31.514065 2026] [core:error] [pid 1018003:tid 1018134] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.514079 2026] [core:error] [pid 1018003:tid 1018134] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.515075 2026] [security2:error] [pid 1028675:tid 1028863] [client 158.158.54.35:34869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/222.php"] [unique_id "apK9c9dHPfW2QFvhmL7okgAAADU"]
[Sat Aug 29 05:07:31.552589 2026] [core:error] [pid 1028675:tid 1028890] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.552608 2026] [core:error] [pid 1028675:tid 1028890] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.554669 2026] [security2:error] [pid 1018003:tid 1018049] [remote 35.231.104.225:42404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 225.104.231.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.qandlcondos.com"] [uri "/config/.env.php"] [unique_id "apK9czAh5Y1i2tUxg4EVzgAGCRw"]
[Sat Aug 29 05:07:31.555279 2026] [security2:error] [pid 1018003:tid 1018050] [remote 35.231.104.225:42404] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.qandlcondos.com"] [uri "/core/.env"] [unique_id "apK9czAh5Y1i2tUxg4EVzwAGCR0"]
[Sat Aug 29 05:07:31.556525 2026] [security2:error] [pid 1018003:tid 1018056] [remote 35.231.104.225:42404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 225.104.231.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.qandlcondos.com"] [uri "/.env.php.bak"] [unique_id "apK9czAh5Y1i2tUxg4EV0QAGCSM"]
[Sat Aug 29 05:07:31.559920 2026] [security2:error] [pid 1028675:tid 1028819] [client 158.158.54.35:24263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/a1.php"] [unique_id "apK9c9dHPfW2QFvhmL7omwAAAAk"]
[Sat Aug 29 05:07:31.563153 2026] [core:error] [pid 1018003:tid 1018262] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.563168 2026] [core:error] [pid 1018003:tid 1018262] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.563546 2026] [core:error] [pid 1018003:tid 1018183] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.563554 2026] [core:error] [pid 1018003:tid 1018183] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.565952 2026] [security2:error] [pid 1028675:tid 1028881] [client 20.104.18.15:13604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/sign.php"] [unique_id "apK9c9dHPfW2QFvhmL7onQAAAEc"]
[Sat Aug 29 05:07:31.567551 2026] [core:error] [pid 1028675:tid 1028880] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.567570 2026] [core:error] [pid 1028675:tid 1028880] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.586151 2026] [core:error] [pid 1028675:tid 1028884] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.586165 2026] [core:error] [pid 1028675:tid 1028884] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.586653 2026] [security2:error] [pid 1028675:tid 1028854] [client 20.104.18.15:12271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/radio.php"] [unique_id "apK9c9dHPfW2QFvhmL7ooAAAACw"]
[Sat Aug 29 05:07:31.586966 2026] [security2:error] [pid 1028675:tid 1028848] [client 20.63.81.20:20971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/650.php"] [unique_id "apK9c9dHPfW2QFvhmL7ooQAAACY"]
[Sat Aug 29 05:07:31.589255 2026] [core:error] [pid 1018003:tid 1018195] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.589266 2026] [core:error] [pid 1018003:tid 1018195] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.592043 2026] [security2:error] [pid 1028675:tid 1028927] [client 146.70.36.124:49960] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.airviewconcept.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "apK9c9dHPfW2QFvhmL7oowAAAHU"]
[Sat Aug 29 05:07:31.593038 2026] [core:error] [pid 1018003:tid 1018170] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.593050 2026] [core:error] [pid 1018003:tid 1018170] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.596942 2026] [core:error] [pid 1028675:tid 1028833] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.596953 2026] [core:error] [pid 1028675:tid 1028833] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.598794 2026] [core:error] [pid 1018003:tid 1018238] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.598804 2026] [core:error] [pid 1018003:tid 1018238] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.601422 2026] [security2:error] [pid 1028675:tid 1028813] [client 20.104.18.15:19371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/samll.php"] [unique_id "apK9c9dHPfW2QFvhmL7opwAAAAM"]
[Sat Aug 29 05:07:31.609698 2026] [security2:error] [pid 1018003:tid 1018217] [client 52.139.37.240:14927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/files/index.php"] [unique_id "apK9czAh5Y1i2tUxg4EV2AAABfo"]
[Sat Aug 29 05:07:31.640321 2026] [core:error] [pid 1018003:tid 1018184] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.640332 2026] [core:error] [pid 1018003:tid 1018184] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.644388 2026] [security2:error] [pid 1018003:tid 1018226] [client 20.104.104.62:25832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.horseventure-net.penmarketing.org"] [uri "/wp-content/index.php"] [unique_id "apK9czAh5Y1i2tUxg4EV2gAABgM"]
[Sat Aug 29 05:07:31.647662 2026] [security2:error] [pid 1028675:tid 1028814] [client 20.104.18.15:36572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/manga.php"] [unique_id "apK9c9dHPfW2QFvhmL7oqAAAAAQ"]
[Sat Aug 29 05:07:31.661209 2026] [security2:error] [pid 1028675:tid 1028901] [client 20.104.18.15:4950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/shiny.php"] [unique_id "apK9c9dHPfW2QFvhmL7oqQAAAFs"]
[Sat Aug 29 05:07:31.665644 2026] [security2:error] [pid 1028675:tid 1028847] [client 52.139.37.240:19348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/wp-content/plugins/linkpreview/il.php"] [unique_id "apK9c9dHPfW2QFvhmL7oqgAAACU"]
[Sat Aug 29 05:07:31.686668 2026] [core:error] [pid 1018003:tid 1018038] [remote 34.138.144.127:58716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://cpcalendars.roycehomesales.com
[Sat Aug 29 05:07:31.686687 2026] [core:error] [pid 1018003:tid 1018038] [remote 34.138.144.127:58716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://cpcalendars.roycehomesales.com
[Sat Aug 29 05:07:31.687346 2026] [core:error] [pid 1018003:tid 1018055] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.687365 2026] [core:error] [pid 1018003:tid 1018055] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.687542 2026] [core:error] [pid 1018003:tid 1018060] [remote 34.138.144.127:58716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.687552 2026] [core:error] [pid 1018003:tid 1018060] [remote 34.138.144.127:58716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.689261 2026] [core:error] [pid 1018003:tid 1018087] [remote 34.138.144.127:58716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.689270 2026] [core:error] [pid 1018003:tid 1018087] [remote 34.138.144.127:58716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.695187 2026] [security2:error] [pid 1028675:tid 1028875] [client 57.141.14.83:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/cart/"] [unique_id "apK9c9dHPfW2QFvhmL7orAAAAEE"]
[Sat Aug 29 05:07:31.696256 2026] [security2:error] [pid 1028675:tid 1028888] [client 168.107.94.195:54202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9c9dHPfW2QFvhmL7orQAAAE4"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:31.697175 2026] [security2:error] [pid 1018003:tid 1018024] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/back-api/.env"] [unique_id "apK9czAh5Y1i2tUxg4EV3wAF_gM"]
[Sat Aug 29 05:07:31.702691 2026] [security2:error] [pid 1028675:tid 1028853] [client 20.104.18.15:13697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/wnnjpsby.php"] [unique_id "apK9c9dHPfW2QFvhmL7orgAAACs"]
[Sat Aug 29 05:07:31.710890 2026] [security2:error] [pid 1018003:tid 1018062] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/back-end/.env"] [unique_id "apK9czAh5Y1i2tUxg4EV4AAF_ik"]
[Sat Aug 29 05:07:31.713738 2026] [core:error] [pid 1028675:tid 1028826] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.713750 2026] [core:error] [pid 1028675:tid 1028826] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.717719 2026] [core:error] [pid 1018003:tid 1018047] [remote 34.138.144.127:58716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.717731 2026] [core:error] [pid 1018003:tid 1018047] [remote 34.138.144.127:58716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.721167 2026] [core:error] [pid 1018003:tid 1018030] [remote 34.138.144.127:58716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.721180 2026] [core:error] [pid 1018003:tid 1018030] [remote 34.138.144.127:58716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.722048 2026] [core:error] [pid 1018003:tid 1018025] [remote 34.138.144.127:58716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.722062 2026] [core:error] [pid 1018003:tid 1018025] [remote 34.138.144.127:58716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.724268 2026] [security2:error] [pid 1028675:tid 1028828] [client 20.203.141.11:25505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/radio.php"] [unique_id "apK9c9dHPfW2QFvhmL7osAAAABI"]
[Sat Aug 29 05:07:31.724748 2026] [security2:error] [pid 1028675:tid 1028914] [client 20.63.81.20:20884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/nakrip.php"] [unique_id "apK9c9dHPfW2QFvhmL7osQAAAGg"]
[Sat Aug 29 05:07:31.725317 2026] [security2:error] [pid 1018003:tid 1018096] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/back/.env"] [unique_id "apK9czAh5Y1i2tUxg4EV5AAF_ks"]
[Sat Aug 29 05:07:31.738610 2026] [security2:error] [pid 1018003:tid 1018063] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/backend-api/.env"] [unique_id "apK9czAh5Y1i2tUxg4EV5gAF-So"]
[Sat Aug 29 05:07:31.738652 2026] [security2:error] [pid 1018003:tid 1018266] [client 4.205.62.107:22403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/public/wp-blog.php"] [unique_id "apK9czAh5Y1i2tUxg4EV5wAABio"]
[Sat Aug 29 05:07:31.741073 2026] [security2:error] [pid 1028675:tid 1028872] [client 20.104.18.15:12238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/one.php"] [unique_id "apK9c9dHPfW2QFvhmL7osgAAAD4"]
[Sat Aug 29 05:07:31.741979 2026] [core:error] [pid 1018003:tid 1018084] [remote 34.138.144.127:58716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.741993 2026] [core:error] [pid 1018003:tid 1018084] [remote 34.138.144.127:58716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.756580 2026] [security2:error] [pid 1028675:tid 1028820] [client 68.155.159.216:24453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-admin/images/about.php"] [unique_id "apK9c9dHPfW2QFvhmL7otQAAAAo"]
[Sat Aug 29 05:07:31.780871 2026] [security2:error] [pid 1028675:tid 1028839] [client 20.203.141.11:27694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-mail.php"] [unique_id "apK9c9dHPfW2QFvhmL7otwAAAB0"]
[Sat Aug 29 05:07:31.802300 2026] [security2:error] [pid 1028675:tid 1028861] [client 20.104.18.15:36564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/asdfghj.php"] [unique_id "apK9c9dHPfW2QFvhmL7ougAAADM"]
[Sat Aug 29 05:07:31.805538 2026] [security2:error] [pid 1028675:tid 1028811] [client 20.104.18.15:19412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/she11.php"] [unique_id "apK9c9dHPfW2QFvhmL7ovAAAAAE"]
[Sat Aug 29 05:07:31.805869 2026] [security2:error] [pid 1028675:tid 1028920] [client 52.139.37.240:14924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.ewenclan.com"] [uri "/flower.php"] [unique_id "apK9c9dHPfW2QFvhmL7ovQAAAG4"]
[Sat Aug 29 05:07:31.812062 2026] [security2:error] [pid 1028675:tid 1028923] [client 158.23.147.79:17485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/lv.php"] [unique_id "apK9c9dHPfW2QFvhmL7ovwAAAHE"]
[Sat Aug 29 05:07:31.816058 2026] [security2:error] [pid 1028675:tid 1028851] [client 20.104.18.15:5022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/goods.php"] [unique_id "apK9c9dHPfW2QFvhmL7owAAAACk"]
[Sat Aug 29 05:07:31.819628 2026] [security2:error] [pid 1018003:tid 1018122] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK9czAh5Y1i2tUxg4EV6wAF12U"]
[Sat Aug 29 05:07:31.820258 2026] [security2:error] [pid 1028675:tid 1028887] [client 158.23.147.79:48161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK9c9dHPfW2QFvhmL7owQAAAE0"]
[Sat Aug 29 05:07:31.821189 2026] [core:error] [pid 1018003:tid 1018059] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.821210 2026] [core:error] [pid 1018003:tid 1018059] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.821583 2026] [core:error] [pid 1018003:tid 1018053] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.821594 2026] [core:error] [pid 1018003:tid 1018053] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.821716 2026] [core:error] [pid 1018003:tid 1018092] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.821727 2026] [core:error] [pid 1018003:tid 1018092] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.836489 2026] [security2:error] [pid 1028675:tid 1028903] [client 20.104.18.15:13748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/gigi.php"] [unique_id "apK9c9dHPfW2QFvhmL7owgAAAF0"]
[Sat Aug 29 05:07:31.843576 2026] [core:error] [pid 1018003:tid 1018070] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.843591 2026] [core:error] [pid 1018003:tid 1018070] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.859185 2026] [security2:error] [pid 1028675:tid 1028890] [client 20.104.104.62:40223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/titid.php"] [unique_id "apK9c9dHPfW2QFvhmL7oxAAAAFA"]
[Sat Aug 29 05:07:31.859215 2026] [security2:error] [pid 1028675:tid 1028821] [client 40.83.93.50:5226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-conflg.php"] [unique_id "apK9c9dHPfW2QFvhmL7owwAAAAs"]
[Sat Aug 29 05:07:31.859481 2026] [security2:error] [pid 1028675:tid 1028823] [client 20.48.250.41:49066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/zu.php"] [unique_id "apK9c9dHPfW2QFvhmL7oxQAAAA0"]
[Sat Aug 29 05:07:31.861043 2026] [security2:error] [pid 1028675:tid 1028932] [client 20.151.200.44:64688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/inject.php"] [unique_id "apK9c9dHPfW2QFvhmL7oxgAAAHo"]
[Sat Aug 29 05:07:31.869607 2026] [security2:error] [pid 1028675:tid 1028909] [client 52.139.37.240:19357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/wp-header-json.php"] [unique_id "apK9c9dHPfW2QFvhmL7oyAAAAGM"]
[Sat Aug 29 05:07:31.873385 2026] [security2:error] [pid 1028675:tid 1028843] [client 20.63.81.20:20969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/wp-includes/interactivity-api/flower.php"] [unique_id "apK9c9dHPfW2QFvhmL7oyQAAACE"]
[Sat Aug 29 05:07:31.880850 2026] [security2:error] [pid 1028675:tid 1028854] [client 68.155.159.216:6108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/ws.php"] [unique_id "apK9c9dHPfW2QFvhmL7ozAAAACw"]
[Sat Aug 29 05:07:31.884560 2026] [security2:error] [pid 1028675:tid 1028883] [client 20.196.209.81:14473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/OK.php"] [unique_id "apK9c9dHPfW2QFvhmL7ozQAAAEk"]
[Sat Aug 29 05:07:31.896598 2026] [security2:error] [pid 1028675:tid 1028877] [client 20.104.18.15:12200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/503.php"] [unique_id "apK9c9dHPfW2QFvhmL7ozgAAAEM"]
[Sat Aug 29 05:07:31.897292 2026] [core:error] [pid 1018003:tid 1018028] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.897305 2026] [core:error] [pid 1018003:tid 1018028] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.897985 2026] [core:error] [pid 1018003:tid 1018067] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.898001 2026] [core:error] [pid 1018003:tid 1018067] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.898241 2026] [core:error] [pid 1018003:tid 1018129] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.898251 2026] [core:error] [pid 1018003:tid 1018129] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:31.904529 2026] [security2:error] [pid 1028675:tid 1028927] [client 146.70.36.124:49976] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.airviewconcept.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "apK9c9dHPfW2QFvhmL7ozwAAAHU"]
[Sat Aug 29 05:07:31.909404 2026] [security2:error] [pid 1018003:tid 1018248] [client 20.104.104.62:25608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.horseventure-net.penmarketing.org"] [uri "/wp-content/uploads/admin.php"] [unique_id "apK9czAh5Y1i2tUxg4EV8gAABhg"]
[Sat Aug 29 05:07:31.928875 2026] [security2:error] [pid 1018003:tid 1018202] [client 20.48.250.41:35492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/zu.php"] [unique_id "apK9czAh5Y1i2tUxg4EV8wAABes"]
[Sat Aug 29 05:07:31.948510 2026] [security2:error] [pid 1028675:tid 1028832] [client 20.151.200.44:47416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/mega.php"] [unique_id "apK9c9dHPfW2QFvhmL7o0wAAABY"]
[Sat Aug 29 05:07:31.950691 2026] [security2:error] [pid 1028675:tid 1028842] [client 20.104.18.15:36787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/dragonshell.php"] [unique_id "apK9c9dHPfW2QFvhmL7o1AAAACA"]
[Sat Aug 29 05:07:31.959384 2026] [security2:error] [pid 1018003:tid 1018190] [client 20.104.18.15:19441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/kerang.php"] [unique_id "apK9czAh5Y1i2tUxg4EV9gAABd8"]
[Sat Aug 29 05:07:31.964724 2026] [security2:error] [pid 1028675:tid 1028863] [client 158.158.54.35:31464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/mini.php"] [unique_id "apK9c9dHPfW2QFvhmL7o1QAAADU"]
[Sat Aug 29 05:07:31.971516 2026] [security2:error] [pid 1028675:tid 1028925] [client 20.104.18.15:13618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/info.php/new.php"] [unique_id "apK9c9dHPfW2QFvhmL7o1wAAAHM"]
[Sat Aug 29 05:07:31.988874 2026] [security2:error] [pid 1028675:tid 1028929] [client 68.155.159.216:30703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK9c9dHPfW2QFvhmL7o4AAAAHc"]
[Sat Aug 29 05:07:31.989394 2026] [security2:error] [pid 1028675:tid 1028901] [client 4.205.62.107:24994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/mcebraed.php"] [unique_id "apK9c9dHPfW2QFvhmL7o4QAAAFs"]
[Sat Aug 29 05:07:32.004025 2026] [security2:error] [pid 1028675:tid 1028902] [client 20.63.81.20:20962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/xcc.php"] [unique_id "apK9dNdHPfW2QFvhmL7o4gAAAFw"]
[Sat Aug 29 05:07:32.008940 2026] [security2:error] [pid 1028675:tid 1028912] [client 158.158.54.35:5300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9dNdHPfW2QFvhmL7o4wAAAGY"]
[Sat Aug 29 05:07:32.014079 2026] [security2:error] [pid 1018003:tid 1018256] [client 4.205.62.107:58389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/erty.php"] [unique_id "apK9dDAh5Y1i2tUxg4EV-AAABiA"]
[Sat Aug 29 05:07:32.026537 2026] [core:error] [pid 1018003:tid 1018118] [remote 34.138.144.127:58716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://cpcalendars.roycehomesales.com
[Sat Aug 29 05:07:32.026554 2026] [core:error] [pid 1018003:tid 1018118] [remote 34.138.144.127:58716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://cpcalendars.roycehomesales.com
[Sat Aug 29 05:07:32.027625 2026] [core:error] [pid 1018003:tid 1018099] [remote 34.138.144.127:58716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.027638 2026] [core:error] [pid 1018003:tid 1018099] [remote 34.138.144.127:58716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.040755 2026] [core:error] [pid 1018003:tid 1018114] [remote 34.138.144.127:58716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.051446 2026] [security2:error] [pid 1028675:tid 1028872] [client 68.155.159.216:12248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK9dNdHPfW2QFvhmL7o5AAAAD4"]
[Sat Aug 29 05:07:32.051748 2026] [security2:error] [pid 1028675:tid 1028837] [client 68.155.159.216:52854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/sad/about.php"] [unique_id "apK9dNdHPfW2QFvhmL7o5QAAABs"]
[Sat Aug 29 05:07:32.052104 2026] [security2:error] [pid 1028675:tid 1028918] [client 20.104.18.15:5100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/alfa.php"] [unique_id "apK9dNdHPfW2QFvhmL7o5gAAAGw"]
[Sat Aug 29 05:07:32.064842 2026] [security2:error] [pid 1028675:tid 1028900] [client 52.139.37.240:19344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/zup.php"] [unique_id "apK9dNdHPfW2QFvhmL7o5wAAAFo"]
[Sat Aug 29 05:07:32.066182 2026] [security2:error] [pid 1028675:tid 1028850] [client 20.104.18.15:12259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/504.php"] [unique_id "apK9dNdHPfW2QFvhmL7o6AAAACg"]
[Sat Aug 29 05:07:32.075065 2026] [security2:error] [pid 1028675:tid 1028876] [client 168.107.94.195:54582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9dNdHPfW2QFvhmL7o6gAAAEI"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:32.085583 2026] [security2:error] [pid 1018003:tid 1018219] [client 20.48.250.41:49044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/lanka.php"] [unique_id "apK9dDAh5Y1i2tUxg4EV_AAABfw"]
[Sat Aug 29 05:07:32.090748 2026] [security2:error] [pid 1028675:tid 1028923] [client 20.104.18.15:19432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/m.php"] [unique_id "apK9dNdHPfW2QFvhmL7o6wAAAHE"]
[Sat Aug 29 05:07:32.105882 2026] [security2:error] [pid 1028675:tid 1028851] [client 20.48.250.41:35050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/lanka.php"] [unique_id "apK9dNdHPfW2QFvhmL7o7QAAACk"]
[Sat Aug 29 05:07:32.108005 2026] [security2:error] [pid 1018003:tid 1018076] [remote 35.231.104.225:42404] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.qandlcondos.com"] [uri "/web/.env"] [unique_id "apK9dDAh5Y1i2tUxg4EV_QAFwjc"]
[Sat Aug 29 05:07:32.108007 2026] [security2:error] [pid 1018003:tid 1018081] [remote 35.231.104.225:42404] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.qandlcondos.com"] [uri "/public/.env"] [unique_id "apK9dDAh5Y1i2tUxg4EV_gAFwjw"]
[Sat Aug 29 05:07:32.117734 2026] [security2:error] [pid 1028675:tid 1028819] [client 4.205.62.107:22048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/phpi.php"] [unique_id "apK9dNdHPfW2QFvhmL7o7gAAAAk"]
[Sat Aug 29 05:07:32.118824 2026] [security2:error] [pid 1018003:tid 1018023] [remote 35.231.104.225:42404] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.qandlcondos.com"] [uri "/wp/.env"] [unique_id "apK9dDAh5Y1i2tUxg4EV_wAFzQI"]
[Sat Aug 29 05:07:32.123832 2026] [security2:error] [pid 1028675:tid 1028890] [client 20.104.49.130:63613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/images.php"] [unique_id "apK9dNdHPfW2QFvhmL7o7wAAAFA"]
[Sat Aug 29 05:07:32.144099 2026] [security2:error] [pid 1018003:tid 1018189] [client 20.63.81.20:20913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/wp-includes/Text/Diff/Engine/aaa.php"] [unique_id "apK9dDAh5Y1i2tUxg4EWAAAABd4"]
[Sat Aug 29 05:07:32.155027 2026] [security2:error] [pid 1028675:tid 1028909] [client 68.155.159.216:51505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK9dNdHPfW2QFvhmL7o8QAAAGM"]
[Sat Aug 29 05:07:32.168098 2026] [security2:error] [pid 1028675:tid 1028884] [client 68.155.159.216:65090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/atomlib.php"] [unique_id "apK9dNdHPfW2QFvhmL7o8gAAAEo"]
[Sat Aug 29 05:07:32.171008 2026] [security2:error] [pid 1028675:tid 1028854] [client 158.23.147.79:50051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/hehehehe.php"] [unique_id "apK9dNdHPfW2QFvhmL7o9AAAACw"]
[Sat Aug 29 05:07:32.171898 2026] [security2:error] [pid 1018003:tid 1018072] [remote 35.231.104.225:42404] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "www.qandlcondos.com"] [uri "/.env.swp"] [unique_id "apK9dDAh5Y1i2tUxg4EWAQAF5DM"]
[Sat Aug 29 05:07:32.175953 2026] [security2:error] [pid 1018003:tid 1018074] [remote 35.231.104.225:42404] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.qandlcondos.com"] [uri "/storage/.env"] [unique_id "apK9dDAh5Y1i2tUxg4EWAwAFyzU"]
[Sat Aug 29 05:07:32.176039 2026] [security2:error] [pid 1028675:tid 1028877] [client 68.155.159.216:33542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK9dNdHPfW2QFvhmL7o9QAAAEM"]
[Sat Aug 29 05:07:32.195830 2026] [core:error] [pid 1018003:tid 1018101] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.195843 2026] [core:error] [pid 1018003:tid 1018101] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.197728 2026] [security2:error] [pid 1028675:tid 1028862] [client 20.104.18.15:12268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/admin.php"] [unique_id "apK9dNdHPfW2QFvhmL7o9gAAADQ"]
[Sat Aug 29 05:07:32.198894 2026] [security2:error] [pid 1018003:tid 1018066] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/client/.env"] [unique_id "apK9dDAh5Y1i2tUxg4EWBwAFvS0"]
[Sat Aug 29 05:07:32.204399 2026] [security2:error] [pid 1018003:tid 1018138] [remote 34.138.144.127:58716] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "cpcalendars.roycehomesales.com"] [uri "/static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ"] [unique_id "apK9dDAh5Y1i2tUxg4EWCQAF2XU"]
[Sat Aug 29 05:07:32.207390 2026] [core:error] [pid 1018003:tid 1018138] [remote 34.138.144.127:58716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.210138 2026] [security2:error] [pid 1028675:tid 1028825] [client 20.203.141.11:45412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/item.php"] [unique_id "apK9dNdHPfW2QFvhmL7o-AAAAA8"]
[Sat Aug 29 05:07:32.217193 2026] [security2:error] [pid 1028675:tid 1028863] [client 20.104.18.15:5012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/33.php"] [unique_id "apK9dNdHPfW2QFvhmL7o-QAAADU"]
[Sat Aug 29 05:07:32.219566 2026] [security2:error] [pid 1028675:tid 1028937] [client 20.104.18.15:19339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/fling.php"] [unique_id "apK9dNdHPfW2QFvhmL7o-gAAAH8"]
[Sat Aug 29 05:07:32.220484 2026] [security2:error] [pid 1028675:tid 1028925] [client 146.70.36.124:49986] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.airviewconcept.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "apK9dNdHPfW2QFvhmL7o-wAAAHM"]
[Sat Aug 29 05:07:32.232842 2026] [core:error] [pid 1018003:tid 1018069] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.232854 2026] [core:error] [pid 1018003:tid 1018069] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.235973 2026] [security2:error] [pid 1028675:tid 1028910] [client 20.104.104.62:25644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.horseventure-net.penmarketing.org"] [uri "/403.php"] [unique_id "apK9dNdHPfW2QFvhmL7o_AAAAGQ"]
[Sat Aug 29 05:07:32.240804 2026] [security2:error] [pid 1018003:tid 1018139] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/backup/.env"] [unique_id "apK9dDAh5Y1i2tUxg4EWDQAFvXY"]
[Sat Aug 29 05:07:32.241161 2026] [core:error] [pid 1018003:tid 1018105] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.241169 2026] [core:error] [pid 1018003:tid 1018105] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.241184 2026] [security2:error] [pid 1018003:tid 1018116] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/be/.env"] [unique_id "apK9dDAh5Y1i2tUxg4EWDgAFvV8"]
[Sat Aug 29 05:07:32.242046 2026] [core:error] [pid 1018003:tid 1018126] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.242055 2026] [core:error] [pid 1018003:tid 1018126] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.243347 2026] [security2:error] [pid 1028675:tid 1028811] [client 20.203.141.11:38647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-content.php"] [unique_id "apK9dNdHPfW2QFvhmL7o_QAAAAE"]
[Sat Aug 29 05:07:32.245560 2026] [security2:error] [pid 1018003:tid 1018090] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/beta/.env"] [unique_id "apK9dDAh5Y1i2tUxg4EWDwAFvUU"]
[Sat Aug 29 05:07:32.257552 2026] [security2:error] [pid 1018003:tid 1018207] [client 52.139.37.240:19324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/a9.php"] [unique_id "apK9dDAh5Y1i2tUxg4EWEAAABfA"]
[Sat Aug 29 05:07:32.267190 2026] [core:error] [pid 1028675:tid 1028812] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.267204 2026] [core:error] [pid 1028675:tid 1028812] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.268241 2026] [core:error] [pid 1028675:tid 1028814] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.268253 2026] [core:error] [pid 1028675:tid 1028814] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.286782 2026] [security2:error] [pid 1028675:tid 1028911] [client 91.92.47.191:46000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.corrigansbasement.com"] [uri "/config.php"] [unique_id "apK9dNdHPfW2QFvhmL7pAAAAAGU"]
[Sat Aug 29 05:07:32.286988 2026] [security2:error] [pid 1028675:tid 1028824] [client 20.151.200.44:45897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/ww3.php"] [unique_id "apK9dNdHPfW2QFvhmL7pAQAAAA4"]
[Sat Aug 29 05:07:32.315507 2026] [security2:error] [pid 1028675:tid 1028818] [client 20.63.81.20:20877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/wp-includes/style-engine/gecko-new.php"] [unique_id "apK9dNdHPfW2QFvhmL7pAwAAAAg"]
[Sat Aug 29 05:07:32.317291 2026] [security2:error] [pid 1018003:tid 1018073] [remote 35.231.104.225:42404] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "www.qandlcondos.com"] [uri "/wp-config.php~"] [unique_id "apK9dDAh5Y1i2tUxg4EWEgAGDDQ"]
[Sat Aug 29 05:07:32.332610 2026] [security2:error] [pid 1018003:tid 1018109] [remote 35.231.104.225:42404] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "www.qandlcondos.com"] [uri "/wp-config.php.swp"] [unique_id "apK9dDAh5Y1i2tUxg4EWGgAGNVg"]
[Sat Aug 29 05:07:32.336929 2026] [security2:error] [pid 1018003:tid 1018098] [remote 35.231.104.225:42404] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "www.qandlcondos.com"] [uri "/wp-config.old"] [unique_id "apK9dDAh5Y1i2tUxg4EWGwAF7E0"]
[Sat Aug 29 05:07:32.339451 2026] [security2:error] [pid 1028675:tid 1028848] [client 20.196.209.81:14498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hellospringford.wine-garden.com"] [uri "/aaa.php"] [unique_id "apK9dNdHPfW2QFvhmL7pCgAAACY"]
[Sat Aug 29 05:07:32.342544 2026] [security2:error] [pid 1018003:tid 1018162] [client 40.83.93.50:24482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-content.php"] [unique_id "apK9dDAh5Y1i2tUxg4EWHAAABcM"]
[Sat Aug 29 05:07:32.348830 2026] [core:error] [pid 1028675:tid 1028816] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.348845 2026] [core:error] [pid 1028675:tid 1028816] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.349851 2026] [core:error] [pid 1028675:tid 1028860] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.349866 2026] [core:error] [pid 1028675:tid 1028860] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.350575 2026] [core:error] [pid 1028675:tid 1028904] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.350588 2026] [core:error] [pid 1028675:tid 1028904] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.352517 2026] [core:error] [pid 1028675:tid 1028922] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.352529 2026] [core:error] [pid 1028675:tid 1028922] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.354187 2026] [core:error] [pid 1028675:tid 1028840] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.354199 2026] [core:error] [pid 1028675:tid 1028840] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.356311 2026] [core:error] [pid 1028675:tid 1028872] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.356321 2026] [core:error] [pid 1028675:tid 1028872] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.380715 2026] [security2:error] [pid 1028675:tid 1028819] [client 68.155.159.216:38670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/asd.php"] [unique_id "apK9dNdHPfW2QFvhmL7pEwAAAAk"]
[Sat Aug 29 05:07:32.387097 2026] [security2:error] [pid 1028675:tid 1028890] [client 158.23.147.79:30411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/log-mama/function.php"] [unique_id "apK9dNdHPfW2QFvhmL7pFAAAAFA"]
[Sat Aug 29 05:07:32.388256 2026] [security2:error] [pid 1028675:tid 1028870] [client 52.139.37.240:3387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "databases-ap.medulae.com"] [uri "/aged.php"] [unique_id "apK9dNdHPfW2QFvhmL7pFQAAADw"]
[Sat Aug 29 05:07:32.389480 2026] [security2:error] [pid 1028675:tid 1028823] [client 158.23.147.79:32651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/about.php"] [unique_id "apK9dNdHPfW2QFvhmL7pFgAAAA0"]
[Sat Aug 29 05:07:32.391003 2026] [security2:error] [pid 1028675:tid 1028932] [client 20.104.18.15:36671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/wp-safe.php"] [unique_id "apK9dNdHPfW2QFvhmL7pFwAAAHo"]
[Sat Aug 29 05:07:32.411496 2026] [autoindex:error] [pid 1028675:tid 1028909] [client 20.104.18.15:0] AH01276: Cannot serve directory /home3/zenicane/public_html/lunarfestival/wp-content/uploads/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:07:32.430039 2026] [security2:error] [pid 1028675:tid 1028923] [client 20.104.104.62:25830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.horseventure-net.penmarketing.org"] [uri "/ava.php"] [unique_id "apK9dNdHPfW2QFvhmL7pGgAAAHE"]
[Sat Aug 29 05:07:32.435494 2026] [security2:error] [pid 1018003:tid 1018244] [client 20.104.49.130:43634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/f35.update.php"] [unique_id "apK9dDAh5Y1i2tUxg4EWHQAABhQ"]
[Sat Aug 29 05:07:32.436060 2026] [security2:error] [pid 1028675:tid 1028871] [client 158.158.54.35:33498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/aa.php"] [unique_id "apK9dNdHPfW2QFvhmL7pGwAAAD0"]
[Sat Aug 29 05:07:32.441423 2026] [security2:error] [pid 1028675:tid 1028930] [client 158.158.54.35:24306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/alfa-rex.php7"] [unique_id "apK9dNdHPfW2QFvhmL7pHAAAAHg"]
[Sat Aug 29 05:07:32.443873 2026] [security2:error] [pid 1028675:tid 1028919] [client 4.205.62.107:8971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/txets.php"] [unique_id "apK9dNdHPfW2QFvhmL7pHQAAAG0"]
[Sat Aug 29 05:07:32.444680 2026] [security2:error] [pid 1028675:tid 1028862] [client 20.63.81.20:20972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/wp-settings.php"] [unique_id "apK9dNdHPfW2QFvhmL7pHgAAADQ"]
[Sat Aug 29 05:07:32.453291 2026] [security2:error] [pid 1028675:tid 1028821] [client 52.139.37.240:19389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/admin/index.php"] [unique_id "apK9dNdHPfW2QFvhmL7pHwAAAAs"]
[Sat Aug 29 05:07:32.455939 2026] [security2:error] [pid 1028675:tid 1028825] [client 168.107.94.195:54937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9dNdHPfW2QFvhmL7pIQAAAA8"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:32.466925 2026] [security2:error] [pid 1028675:tid 1028842] [client 68.155.159.216:2021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/asd.php"] [unique_id "apK9dNdHPfW2QFvhmL7pIwAAACA"]
[Sat Aug 29 05:07:32.472495 2026] [security2:error] [pid 1028675:tid 1028746] [remote 136.108.23.170:55264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 170.23.108.136.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thesmartpm.com"] [uri "/apps/wp-login.php"] [unique_id "apK9dNdHPfW2QFvhmL7pJAAANUE"], referer: https://thesmartpm.com/apps/wp-admin/
[Sat Aug 29 05:07:32.473088 2026] [security2:error] [pid 1028675:tid 1028757] [remote 136.108.23.170:55264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 170.23.108.136.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thesmartpm.com"] [uri "/apps/wp-login.php"] [unique_id "apK9dNdHPfW2QFvhmL7pJQAANUw"], referer: https://thesmartpm.com/apps/wp-admin/
[Sat Aug 29 05:07:32.473914 2026] [security2:error] [pid 1018003:tid 1018094] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/config.php"] [unique_id "apK9dDAh5Y1i2tUxg4EWHwAFvEk"]
[Sat Aug 29 05:07:32.474527 2026] [authz_core:error] [pid 1028675:tid 1028765] [remote 136.108.23.170:55262] AH01630: client denied by server configuration: /home4/sortthru/public_html/thesmartpm/.htpasswd
[Sat Aug 29 05:07:32.475884 2026] [core:error] [pid 1028675:tid 1028732] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.475894 2026] [core:error] [pid 1028675:tid 1028732] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.483646 2026] [security2:error] [pid 1028675:tid 1028897] [client 158.23.147.79:25524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/nf_tracking.php"] [unique_id "apK9dNdHPfW2QFvhmL7pKgAAAFc"]
[Sat Aug 29 05:07:32.493775 2026] [security2:error] [pid 1028675:tid 1028867] [client 146.70.194.254:59652] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "modelbasenjis.com"] [uri "/cgi-sys/suspendedpage.cgi/shop/wp-includes/wlwmanifest.xml"] [unique_id "apK9dNdHPfW2QFvhmL7pKwAAADk"]
[Sat Aug 29 05:07:32.494923 2026] [security2:error] [pid 1028675:tid 1028880] [client 20.104.18.15:13715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/w.php"] [unique_id "apK9dNdHPfW2QFvhmL7pLQAAAEY"]
[Sat Aug 29 05:07:32.497863 2026] [security2:error] [pid 1028675:tid 1028811] [client 20.151.200.44:46585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/sko.php"] [unique_id "apK9dNdHPfW2QFvhmL7pLgAAAAE"]
[Sat Aug 29 05:07:32.506091 2026] [core:error] [pid 1028675:tid 1028756] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://cpcalendars.roycehomesales.com
[Sat Aug 29 05:07:32.506107 2026] [core:error] [pid 1028675:tid 1028756] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://cpcalendars.roycehomesales.com
[Sat Aug 29 05:07:32.507571 2026] [core:error] [pid 1028675:tid 1028785] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.515142 2026] [security2:error] [pid 1018003:tid 1018266] [client 4.205.62.107:53152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/lm15.php"] [unique_id "apK9dDAh5Y1i2tUxg4EWIQAABio"]
[Sat Aug 29 05:07:32.516660 2026] [core:error] [pid 1018003:tid 1018216] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.516678 2026] [core:error] [pid 1018003:tid 1018216] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.529026 2026] [core:error] [pid 1018003:tid 1018077] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.529040 2026] [core:error] [pid 1018003:tid 1018077] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.529227 2026] [core:error] [pid 1018003:tid 1018027] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.529238 2026] [core:error] [pid 1018003:tid 1018027] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.530330 2026] [security2:error] [pid 1018003:tid 1018065] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/cms/.env"] [unique_id "apK9dDAh5Y1i2tUxg4EWKgAGByw"]
[Sat Aug 29 05:07:32.533098 2026] [core:error] [pid 1018003:tid 1018107] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.533113 2026] [core:error] [pid 1018003:tid 1018107] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.541578 2026] [security2:error] [pid 1028675:tid 1028855] [client 68.155.159.216:33555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/about/function.php"] [unique_id "apK9dNdHPfW2QFvhmL7pNAAAAC0"]
[Sat Aug 29 05:07:32.541779 2026] [security2:error] [pid 1018003:tid 1018248] [client 146.70.36.124:49994] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.airviewconcept.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "apK9dDAh5Y1i2tUxg4EWMQAABhg"]
[Sat Aug 29 05:07:32.547528 2026] [security2:error] [pid 1028675:tid 1028761] [remote 34.138.144.127:58722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/.env"] [unique_id "apK9dNdHPfW2QFvhmL7pNwAAZVA"]
[Sat Aug 29 05:07:32.550545 2026] [core:error] [pid 1028675:tid 1028735] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.550559 2026] [core:error] [pid 1028675:tid 1028735] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.551449 2026] [core:error] [pid 1028675:tid 1028776] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.551473 2026] [core:error] [pid 1028675:tid 1028776] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.556173 2026] [security2:error] [pid 1028675:tid 1028878] [client 158.23.147.79:35830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/index/function.php"] [unique_id "apK9dNdHPfW2QFvhmL7pOQAAAEQ"]
[Sat Aug 29 05:07:32.557758 2026] [core:error] [pid 1028675:tid 1028866] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.557777 2026] [core:error] [pid 1028675:tid 1028866] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.559708 2026] [core:error] [pid 1028675:tid 1028902] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.559727 2026] [core:error] [pid 1028675:tid 1028902] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.559898 2026] [core:error] [pid 1028675:tid 1028818] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.559907 2026] [core:error] [pid 1028675:tid 1028818] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.572997 2026] [core:error] [pid 1028675:tid 1028848] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.573011 2026] [core:error] [pid 1028675:tid 1028848] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.578942 2026] [security2:error] [pid 1018003:tid 1018198] [client 20.63.81.20:20968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/wp-signup.php"] [unique_id "apK9dDAh5Y1i2tUxg4EWMwAABec"]
[Sat Aug 29 05:07:32.584424 2026] [security2:error] [pid 1018003:tid 1018157] [client 52.139.37.240:51879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "databases-ap.medulae.com"] [uri "/essexec.php"] [unique_id "apK9dDAh5Y1i2tUxg4EWNQAABb4"]
[Sat Aug 29 05:07:32.589727 2026] [core:error] [pid 1028675:tid 1028777] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.589744 2026] [core:error] [pid 1028675:tid 1028777] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.593833 2026] [security2:error] [pid 1018003:tid 1018119] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/config/.env"] [unique_id "apK9dDAh5Y1i2tUxg4EWOQAF22I"]
[Sat Aug 29 05:07:32.595895 2026] [core:error] [pid 1018003:tid 1018061] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.595907 2026] [core:error] [pid 1018003:tid 1018061] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.620700 2026] [core:error] [pid 1028675:tid 1028840] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.620719 2026] [core:error] [pid 1028675:tid 1028840] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.621709 2026] [core:error] [pid 1028675:tid 1028907] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.621725 2026] [core:error] [pid 1028675:tid 1028907] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.626035 2026] [core:error] [pid 1028675:tid 1028839] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.626052 2026] [core:error] [pid 1028675:tid 1028839] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.627717 2026] [security2:error] [pid 1028675:tid 1028816] [client 20.104.104.62:25615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.horseventure-net.penmarketing.org"] [uri "/info.php"] [unique_id "apK9dNdHPfW2QFvhmL7pRAAAAAY"]
[Sat Aug 29 05:07:32.627874 2026] [security2:error] [pid 1028675:tid 1028876] [client 20.104.104.62:20822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/sllolx.php"] [unique_id "apK9dNdHPfW2QFvhmL7pRQAAAEI"]
[Sat Aug 29 05:07:32.647559 2026] [security2:error] [pid 1028675:tid 1028837] [client 52.139.37.240:19297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/makeasmtp.php"] [unique_id "apK9dNdHPfW2QFvhmL7pRwAAABs"]
[Sat Aug 29 05:07:32.652000 2026] [security2:error] [pid 1028675:tid 1028920] [client 185.104.184.230:49132] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.jia.zbw.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/wp-includes/wlwmanifest.xml"] [unique_id "apK9dNdHPfW2QFvhmL7pSAAAAG4"]
[Sat Aug 29 05:07:32.662836 2026] [core:error] [pid 1018003:tid 1018183] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.662852 2026] [core:error] [pid 1018003:tid 1018183] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.673114 2026] [security2:error] [pid 1028675:tid 1028843] [client 158.23.147.79:26593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-login.php"] [unique_id "apK9dNdHPfW2QFvhmL7pSQAAACE"]
[Sat Aug 29 05:07:32.698184 2026] [security2:error] [pid 1028675:tid 1028824] [client 20.203.141.11:38189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "apK9dNdHPfW2QFvhmL7pTAAAAA4"]
[Sat Aug 29 05:07:32.703492 2026] [security2:error] [pid 1018003:tid 1018161] [client 114.119.135.182:45301] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.classiclightingusa.com"] [uri "/catalog/product_info.php/products_id/857/action/notify/osCsid/5543e7812b759b0a003a973ae85b9fd8"] [unique_id "apK9dDAh5Y1i2tUxg4EWPwAABcI"], referer: http://www.classiclightingusa.com/catalog/product_info.php/products_id/857
[Sat Aug 29 05:07:32.711754 2026] [security2:error] [pid 1018003:tid 1018190] [client 20.203.141.11:13319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/t.php"] [unique_id "apK9dDAh5Y1i2tUxg4EWQAAABd8"]
[Sat Aug 29 05:07:32.712183 2026] [security2:error] [pid 1018003:tid 1018172] [client 20.63.81.20:20991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/wp-conffg.php"] [unique_id "apK9dDAh5Y1i2tUxg4EWQQAABc0"]
[Sat Aug 29 05:07:32.750337 2026] [security2:error] [pid 1028675:tid 1028892] [client 20.104.49.130:36302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.carlosmua.com"] [uri "/ms-edit.php"] [unique_id "apK9dNdHPfW2QFvhmL7pTQAAAFI"]
[Sat Aug 29 05:07:32.776328 2026] [security2:error] [pid 1018003:tid 1018267] [client 52.139.37.240:3349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "databases-ap.medulae.com"] [uri "/fw.php"] [unique_id "apK9dDAh5Y1i2tUxg4EWRAAABis"]
[Sat Aug 29 05:07:32.823763 2026] [security2:error] [pid 1028675:tid 1028889] [client 20.104.104.62:25636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.horseventure-net.penmarketing.org"] [uri "/wp-admin/admin.php"] [unique_id "apK9dNdHPfW2QFvhmL7pUQAAAE8"]
[Sat Aug 29 05:07:32.832181 2026] [security2:error] [pid 1018003:tid 1018071] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/config/config.inc.php"] [unique_id "apK9dDAh5Y1i2tUxg4EWSgAFyDI"]
[Sat Aug 29 05:07:32.832197 2026] [security2:error] [pid 1018003:tid 1018032] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/config/aws.php"] [unique_id "apK9dDAh5Y1i2tUxg4EWSwAFyAs"]
[Sat Aug 29 05:07:32.833156 2026] [security2:error] [pid 1018003:tid 1018043] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/config/config.php"] [unique_id "apK9dDAh5Y1i2tUxg4EWUAAFyBY"]
[Sat Aug 29 05:07:32.835860 2026] [core:error] [pid 1018003:tid 1018046] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.835875 2026] [core:error] [pid 1018003:tid 1018046] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.835888 2026] [core:error] [pid 1018003:tid 1018044] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.835901 2026] [core:error] [pid 1018003:tid 1018044] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.837500 2026] [security2:error] [pid 1018003:tid 1018234] [client 168.107.94.195:55322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9dDAh5Y1i2tUxg4EWUgAABgo"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:32.838068 2026] [core:error] [pid 1018003:tid 1018130] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.838087 2026] [core:error] [pid 1018003:tid 1018130] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.838234 2026] [core:error] [pid 1018003:tid 1018021] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.838245 2026] [core:error] [pid 1018003:tid 1018021] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.838800 2026] [core:error] [pid 1018003:tid 1018036] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.838808 2026] [core:error] [pid 1018003:tid 1018036] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.842907 2026] [security2:error] [pid 1028675:tid 1028841] [client 20.63.81.20:20915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/wp-validate.php"] [unique_id "apK9dNdHPfW2QFvhmL7pVAAAAB8"]
[Sat Aug 29 05:07:32.851571 2026] [security2:error] [pid 1018003:tid 1018159] [client 52.139.37.240:19283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/paku.php"] [unique_id "apK9dDAh5Y1i2tUxg4EWVQAABcA"]
[Sat Aug 29 05:07:32.857077 2026] [security2:error] [pid 1028675:tid 1028930] [client 20.151.200.44:45954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/zoz.php"] [unique_id "apK9dNdHPfW2QFvhmL7pVQAAAHg"]
[Sat Aug 29 05:07:32.864119 2026] [security2:error] [pid 1018003:tid 1018277] [client 68.155.159.216:24500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK9dDAh5Y1i2tUxg4EWVwAABjU"]
[Sat Aug 29 05:07:32.874129 2026] [security2:error] [pid 1018003:tid 1018270] [client 4.205.62.107:21602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/php-details.php"] [unique_id "apK9dDAh5Y1i2tUxg4EWWQAABi4"]
[Sat Aug 29 05:07:32.885342 2026] [core:error] [pid 1028675:tid 1028862] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.885366 2026] [core:error] [pid 1028675:tid 1028862] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:32.898009 2026] [security2:error] [pid 1028675:tid 1028853] [client 158.158.54.35:5267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "apK9dNdHPfW2QFvhmL7pVwAAACs"]
[Sat Aug 29 05:07:32.912920 2026] [security2:error] [pid 1028675:tid 1028926] [client 213.202.253.4:60646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bv-place.com"] [uri "/userfuns.php"] [unique_id "apK9dNdHPfW2QFvhmL7pWAAAAHQ"], referer: www.google.com
[Sat Aug 29 05:07:32.929808 2026] [access_compat:error] [pid 1028675:tid 1028842] [client 67.20.76.220:22480] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:07:32.930980 2026] [security2:error] [pid 1028675:tid 1028910] [client 158.23.147.79:48179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/.well-knownold/index.php"] [unique_id "apK9dNdHPfW2QFvhmL7pWgAAAGQ"]
[Sat Aug 29 05:07:32.934918 2026] [security2:error] [pid 1018003:tid 1018266] [client 158.23.147.79:17441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9dDAh5Y1i2tUxg4EWXAAABio"]
[Sat Aug 29 05:07:32.941674 2026] [security2:error] [pid 1018003:tid 1018217] [client 158.158.54.35:11170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/c.php"] [unique_id "apK9dDAh5Y1i2tUxg4EWXgAABfo"]
[Sat Aug 29 05:07:32.970651 2026] [security2:error] [pid 1028675:tid 1028811] [client 20.63.81.20:20874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/700.php"] [unique_id "apK9dNdHPfW2QFvhmL7pXAAAAAE"]
[Sat Aug 29 05:07:32.973072 2026] [security2:error] [pid 1028675:tid 1028825] [client 52.139.37.240:3363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "databases-ap.medulae.com"] [uri "/zwso.php"] [unique_id "apK9dNdHPfW2QFvhmL7pXQAAAA8"]
[Sat Aug 29 05:07:32.984546 2026] [security2:error] [pid 1028675:tid 1028925] [client 68.155.159.216:6119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-includes/css/index.php"] [unique_id "apK9dNdHPfW2QFvhmL7pXwAAAHM"]
[Sat Aug 29 05:07:33.002017 2026] [security2:error] [pid 1028675:tid 1028878] [client 40.83.93.50:5590] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "wagnerfarmscbd.com"] [uri "/wp-content/1.php"] [unique_id "apK9dddHPfW2QFvhmL7pZAAAAEQ"]
[Sat Aug 29 05:07:33.002097 2026] [security2:error] [pid 1028675:tid 1028878] [client 40.83.93.50:5590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-content/1.php"] [unique_id "apK9dddHPfW2QFvhmL7pZAAAAEQ"]
[Sat Aug 29 05:07:33.006021 2026] [core:error] [pid 1028675:tid 1028780] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.006040 2026] [core:error] [pid 1028675:tid 1028780] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.007946 2026] [core:error] [pid 1028675:tid 1028786] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.009175 2026] [core:error] [pid 1028675:tid 1028786] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.018517 2026] [security2:error] [pid 1028675:tid 1028867] [client 20.104.104.62:25628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.horseventure-net.penmarketing.org"] [uri "/wp-content/plugins/about.php"] [unique_id "apK9dddHPfW2QFvhmL7paAAAADk"]
[Sat Aug 29 05:07:33.023987 2026] [security2:error] [pid 1028675:tid 1028916] [client 68.155.159.216:49193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/admin.php"] [unique_id "apK9dddHPfW2QFvhmL7pagAAAGo"]
[Sat Aug 29 05:07:33.037865 2026] [security2:error] [pid 1028675:tid 1028894] [client 20.104.104.62:64758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/small.php"] [unique_id "apK9dddHPfW2QFvhmL7pbQAAAFQ"]
[Sat Aug 29 05:07:33.049724 2026] [security2:error] [pid 1028675:tid 1028901] [client 52.139.37.240:19339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/rtx.php"] [unique_id "apK9dddHPfW2QFvhmL7pbgAAAFs"]
[Sat Aug 29 05:07:33.068428 2026] [core:error] [pid 1028675:tid 1028798] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.068451 2026] [core:error] [pid 1028675:tid 1028798] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.070032 2026] [core:error] [pid 1028675:tid 1028789] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.070059 2026] [core:error] [pid 1028675:tid 1028789] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.070136 2026] [core:error] [pid 1028675:tid 1028779] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.070150 2026] [core:error] [pid 1028675:tid 1028779] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.112237 2026] [security2:error] [pid 1028675:tid 1028872] [client 20.63.81.20:20937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/c4.php"] [unique_id "apK9dddHPfW2QFvhmL7pdAAAAD4"]
[Sat Aug 29 05:07:33.127730 2026] [security2:error] [pid 1028675:tid 1028816] [client 4.205.62.107:26644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/server-info.php"] [unique_id "apK9dddHPfW2QFvhmL7pdQAAAAY"]
[Sat Aug 29 05:07:33.140089 2026] [core:error] [pid 1018003:tid 1018022] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.140108 2026] [core:error] [pid 1018003:tid 1018022] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.149805 2026] [security2:error] [pid 1028675:tid 1028781] [remote 34.138.144.127:58722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/web.config"] [unique_id "apK9dddHPfW2QFvhmL7peAAAJ2Q"]
[Sat Aug 29 05:07:33.155350 2026] [security2:error] [pid 1028675:tid 1028875] [client 4.205.62.107:58461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/ws62.php"] [unique_id "apK9dddHPfW2QFvhmL7peQAAAEE"]
[Sat Aug 29 05:07:33.186111 2026] [security2:error] [pid 1028675:tid 1028850] [client 52.139.37.240:51882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "databases-ap.medulae.com"] [uri "/admin/function.php"] [unique_id "apK9dddHPfW2QFvhmL7pegAAACg"]
[Sat Aug 29 05:07:33.194273 2026] [core:error] [pid 1018003:tid 1018157] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.194289 2026] [core:error] [pid 1018003:tid 1018157] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.199208 2026] [security2:error] [pid 1028675:tid 1028820] [client 20.203.141.11:18229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/css/wp-login.php"] [unique_id "apK9dddHPfW2QFvhmL7pewAAAAo"]
[Sat Aug 29 05:07:33.205531 2026] [security2:error] [pid 1028675:tid 1028815] [client 20.151.200.44:64007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/mga.php"] [unique_id "apK9dddHPfW2QFvhmL7pfAAAAAU"]
[Sat Aug 29 05:07:33.214131 2026] [security2:error] [pid 1018003:tid 1018231] [client 20.104.104.62:25639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.horseventure-net.penmarketing.org"] [uri "/wp-content/plugins/plugin/index.php"] [unique_id "apK9dTAh5Y1i2tUxg4EWZwAABgc"]
[Sat Aug 29 05:07:33.220507 2026] [core:error] [pid 1028675:tid 1028881] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.220523 2026] [core:error] [pid 1028675:tid 1028881] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.243289 2026] [security2:error] [pid 1028675:tid 1028900] [client 20.203.141.11:13328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/i.php"] [unique_id "apK9dddHPfW2QFvhmL7pfgAAAFo"]
[Sat Aug 29 05:07:33.245041 2026] [security2:error] [pid 1028675:tid 1028892] [client 20.63.81.20:20990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/wp-tymanage.php"] [unique_id "apK9dddHPfW2QFvhmL7pfwAAAFI"]
[Sat Aug 29 05:07:33.250911 2026] [security2:error] [pid 1028675:tid 1028888] [client 168.107.94.195:55787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9dddHPfW2QFvhmL7pgAAAAE4"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:33.254649 2026] [security2:error] [pid 1018003:tid 1018185] [client 185.104.184.230:49136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.184.104.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "autodiscover.jia.zbw.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/xmlrpc.php"] [unique_id "apK9dTAh5Y1i2tUxg4EWaAAABdo"]
[Sat Aug 29 05:07:33.254716 2026] [security2:error] [pid 1028675:tid 1028837] [client 52.139.37.240:19307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/update/da222.php"] [unique_id "apK9dddHPfW2QFvhmL7pgQAAABs"]
[Sat Aug 29 05:07:33.255408 2026] [security2:error] [pid 1028675:tid 1028879] [client 158.23.147.79:30586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/bk/index.php"] [unique_id "apK9dddHPfW2QFvhmL7pggAAAEU"]
[Sat Aug 29 05:07:33.264028 2026] [security2:error] [pid 1028675:tid 1028889] [client 68.155.159.216:51212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/nf_tracking.php"] [unique_id "apK9dddHPfW2QFvhmL7pgwAAAE8"]
[Sat Aug 29 05:07:33.265403 2026] [security2:error] [pid 1018003:tid 1018144] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/config/env.php"] [unique_id "apK9dTAh5Y1i2tUxg4EWawAGKXs"]
[Sat Aug 29 05:07:33.266260 2026] [core:error] [pid 1018003:tid 1018142] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.266270 2026] [core:error] [pid 1018003:tid 1018142] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.266584 2026] [core:error] [pid 1018003:tid 1018052] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.266595 2026] [core:error] [pid 1018003:tid 1018052] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.274213 2026] [security2:error] [pid 1028675:tid 1028884] [client 4.205.62.107:22412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/config_dev.php"] [unique_id "apK9dddHPfW2QFvhmL7phAAAAEo"]
[Sat Aug 29 05:07:33.277368 2026] [security2:error] [pid 1028675:tid 1028841] [client 68.155.159.216:64451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/lv.php"] [unique_id "apK9dddHPfW2QFvhmL7phQAAAB8"]
[Sat Aug 29 05:07:33.277655 2026] [security2:error] [pid 1028675:tid 1028930] [client 68.155.159.216:33730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/makeasmtp.php"] [unique_id "apK9dddHPfW2QFvhmL7phgAAAHg"]
[Sat Aug 29 05:07:33.277778 2026] [core:error] [pid 1018003:tid 1018143] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.277790 2026] [core:error] [pid 1018003:tid 1018143] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.294944 2026] [security2:error] [pid 1028675:tid 1028919] [client 158.23.147.79:53158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-content/x/index.php"] [unique_id "apK9dddHPfW2QFvhmL7piAAAAG0"]
[Sat Aug 29 05:07:33.316292 2026] [core:error] [pid 1028675:tid 1028762] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.316316 2026] [core:error] [pid 1028675:tid 1028762] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.320548 2026] [security2:error] [pid 1018003:tid 1018177] [client 20.104.49.130:46529] ModSecurity: Access denied with connection close (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1032"] [id "900036"] [msg "Wordpress BOT exploit :: No UA/Referer"] [hostname "mail.flatlandsfoto.com"] [uri "/wp-login.php"] [unique_id "apK9dTAh5Y1i2tUxg4EWcQAABdI"]
[Sat Aug 29 05:07:33.333287 2026] [core:error] [pid 1028675:tid 1028792] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.333287 2026] [core:error] [pid 1028675:tid 1028796] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.333307 2026] [core:error] [pid 1028675:tid 1028792] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.333308 2026] [core:error] [pid 1028675:tid 1028796] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.342044 2026] [core:error] [pid 1028675:tid 1028791] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.342058 2026] [core:error] [pid 1028675:tid 1028791] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.342103 2026] [security2:error] [pid 1018003:tid 1018095] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/config/module.config.php"] [unique_id "apK9dTAh5Y1i2tUxg4EWdAAFzUo"]
[Sat Aug 29 05:07:33.342155 2026] [security2:error] [pid 1018003:tid 1018100] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/config/nexmo.php"] [unique_id "apK9dTAh5Y1i2tUxg4EWcwAFzU8"]
[Sat Aug 29 05:07:33.346845 2026] [security2:error] [pid 1018003:tid 1018189] [client 20.151.200.44:46632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/mmm.php"] [unique_id "apK9dTAh5Y1i2tUxg4EWdwAABd4"]
[Sat Aug 29 05:07:33.347647 2026] [security2:error] [pid 1028675:tid 1028843] [client 158.158.54.35:5285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/upload.php"] [unique_id "apK9dddHPfW2QFvhmL7pkAAAACE"]
[Sat Aug 29 05:07:33.355724 2026] [security2:error] [pid 1028675:tid 1028784] [remote 34.138.144.127:58722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/.env.bak"] [unique_id "apK9dddHPfW2QFvhmL7pkQAAD2c"]
[Sat Aug 29 05:07:33.355774 2026] [security2:error] [pid 1028675:tid 1028783] [remote 34.138.144.127:58722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/.env.backup"] [unique_id "apK9dddHPfW2QFvhmL7pkgAAD2Y"]
[Sat Aug 29 05:07:33.371920 2026] [core:error] [pid 1018003:tid 1018238] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.371930 2026] [core:error] [pid 1018003:tid 1018267] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.371939 2026] [core:error] [pid 1018003:tid 1018238] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.371942 2026] [core:error] [pid 1018003:tid 1018267] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.376897 2026] [security2:error] [pid 1018003:tid 1018186] [client 52.139.37.240:3381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "databases-ap.medulae.com"] [uri "/zoom1.php"] [unique_id "apK9dTAh5Y1i2tUxg4EWfAAABds"]
[Sat Aug 29 05:07:33.386140 2026] [security2:error] [pid 1028675:tid 1028883] [client 158.158.54.35:34850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/f.php"] [unique_id "apK9dddHPfW2QFvhmL7pkwAAAEk"]
[Sat Aug 29 05:07:33.401118 2026] [security2:error] [pid 1018003:tid 1018271] [client 68.155.159.216:65150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK9dTAh5Y1i2tUxg4EWfQAABi8"]
[Sat Aug 29 05:07:33.407587 2026] [security2:error] [pid 1028675:tid 1028910] [client 20.104.104.62:25752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.horseventure-net.penmarketing.org"] [uri "/wp-content/uploads/index.php/wp-includes/Text/"] [unique_id "apK9dddHPfW2QFvhmL7plAAAAGQ"]
[Sat Aug 29 05:07:33.411058 2026] [security2:error] [pid 1028675:tid 1028925] [client 20.63.81.20:20940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/ajfto.php"] [unique_id "apK9dddHPfW2QFvhmL7plQAAAHM"]
[Sat Aug 29 05:07:33.411919 2026] [security2:error] [pid 1028675:tid 1028878] [client 68.155.159.216:18336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK9dddHPfW2QFvhmL7plgAAAEQ"]
[Sat Aug 29 05:07:33.452416 2026] [security2:error] [pid 1028675:tid 1028794] [remote 34.138.144.127:58722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/api/.env"] [unique_id "apK9dddHPfW2QFvhmL7pmAAAdnE"]
[Sat Aug 29 05:07:33.456301 2026] [security2:error] [pid 1028675:tid 1028904] [client 20.104.104.62:20855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/style-js.php"] [unique_id "apK9dddHPfW2QFvhmL7pmwAAAF4"]
[Sat Aug 29 05:07:33.459402 2026] [security2:error] [pid 1028675:tid 1028801] [remote 34.138.144.127:58722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/.env.old"] [unique_id "apK9dddHPfW2QFvhmL7pmgAAJng"]
[Sat Aug 29 05:07:33.461350 2026] [core:error] [pid 1018003:tid 1018048] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.461378 2026] [core:error] [pid 1018003:tid 1018048] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.462212 2026] [core:error] [pid 1018003:tid 1018078] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.462224 2026] [core:error] [pid 1018003:tid 1018078] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.462918 2026] [security2:error] [pid 1018003:tid 1018134] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/config/stripe.php"] [unique_id "apK9dTAh5Y1i2tUxg4EWhAAGJXE"]
[Sat Aug 29 05:07:33.469344 2026] [core:error] [pid 1028675:tid 1028787] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.469370 2026] [core:error] [pid 1028675:tid 1028787] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.471709 2026] [security2:error] [pid 1028675:tid 1028832] [client 40.83.93.50:15696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-content/about.php"] [unique_id "apK9dddHPfW2QFvhmL7pnwAAABY"]
[Sat Aug 29 05:07:33.478821 2026] [security2:error] [pid 1028675:tid 1028936] [client 52.139.37.240:33579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "luxuryweddingphotographer.com"] [uri "/aged.php"] [unique_id "apK9dddHPfW2QFvhmL7poAAAAH4"]
[Sat Aug 29 05:07:33.480525 2026] [security2:error] [pid 1028675:tid 1028847] [client 68.155.159.216:38677] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.juntoohki.com"] [uri "/1.php"] [unique_id "apK9dddHPfW2QFvhmL7poQAAACU"]
[Sat Aug 29 05:07:33.480607 2026] [security2:error] [pid 1028675:tid 1028847] [client 68.155.159.216:38677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/1.php"] [unique_id "apK9dddHPfW2QFvhmL7poQAAACU"]
[Sat Aug 29 05:07:33.486172 2026] [security2:error] [pid 1028675:tid 1028800] [remote 34.138.144.127:58722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/backend/.env"] [unique_id "apK9dddHPfW2QFvhmL7ppAAARnc"]
[Sat Aug 29 05:07:33.487783 2026] [core:error] [pid 1028675:tid 1028782] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.487797 2026] [core:error] [pid 1028675:tid 1028782] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.487811 2026] [core:error] [pid 1028675:tid 1028795] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.487821 2026] [core:error] [pid 1028675:tid 1028795] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.493390 2026] [security2:error] [pid 1028675:tid 1028872] [client 158.23.147.79:30497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/first.php"] [unique_id "apK9dddHPfW2QFvhmL7ppQAAAD4"]
[Sat Aug 29 05:07:33.500486 2026] [security2:error] [pid 1028675:tid 1028839] [client 158.23.147.79:32699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK9dddHPfW2QFvhmL7ppgAAAB0"]
[Sat Aug 29 05:07:33.502110 2026] [security2:error] [pid 1018003:tid 1018056] [remote 35.231.104.225:42404] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "www.qandlcondos.com"] [uri "/static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ"] [unique_id "apK9dTAh5Y1i2tUxg4EWhgAGMyM"]
[Sat Aug 29 05:07:33.505823 2026] [http2:warn] [pid 1018003:tid 1018269] [client 57.141.14.38:38056] h2_stream(1018003-201-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:07:33.540394 2026] [security2:error] [pid 1018003:tid 1018266] [client 52.139.37.240:19340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/wp-admin/min.php"] [unique_id "apK9dTAh5Y1i2tUxg4EWiwAABio"]
[Sat Aug 29 05:07:33.542877 2026] [core:error] [pid 1028675:tid 1028870] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.542896 2026] [core:error] [pid 1028675:tid 1028870] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.543665 2026] [core:error] [pid 1028675:tid 1028844] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.543685 2026] [core:error] [pid 1028675:tid 1028844] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.557368 2026] [security2:error] [pid 1028675:tid 1028854] [client 20.63.81.20:20951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/wp_KwIW0U5F.php"] [unique_id "apK9dddHPfW2QFvhmL7pqgAAACw"]
[Sat Aug 29 05:07:33.567554 2026] [security2:error] [pid 1028675:tid 1028903] [client 68.155.159.216:2031] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcalendars.drjrae.com"] [uri "/1.php"] [unique_id "apK9dddHPfW2QFvhmL7pqwAAAF0"]
[Sat Aug 29 05:07:33.567685 2026] [security2:error] [pid 1028675:tid 1028903] [client 68.155.159.216:2031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/1.php"] [unique_id "apK9dddHPfW2QFvhmL7pqwAAAF0"]
[Sat Aug 29 05:07:33.571610 2026] [security2:error] [pid 1028675:tid 1028816] [client 52.139.37.240:51883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "databases-ap.medulae.com"] [uri "/about.php7"] [unique_id "apK9dddHPfW2QFvhmL7prQAAAAY"]
[Sat Aug 29 05:07:33.581621 2026] [security2:error] [pid 1028675:tid 1028902] [client 20.104.49.130:34559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/term.php"] [unique_id "apK9dddHPfW2QFvhmL7prgAAAFw"]
[Sat Aug 29 05:07:33.588019 2026] [security2:error] [pid 1028675:tid 1028900] [client 158.23.147.79:25443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wzy.php"] [unique_id "apK9dddHPfW2QFvhmL7prwAAAFo"]
[Sat Aug 29 05:07:33.630268 2026] [security2:error] [pid 1018003:tid 1018248] [client 168.107.94.195:56347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9dTAh5Y1i2tUxg4EWjAAABhg"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:33.640147 2026] [security2:error] [pid 1028675:tid 1028790] [remote 34.138.144.127:58722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/config/.env"] [unique_id "apK9dddHPfW2QFvhmL7psQAAH20"]
[Sat Aug 29 05:07:33.660695 2026] [core:error] [pid 1028675:tid 1028788] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.660715 2026] [core:error] [pid 1028675:tid 1028788] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.662577 2026] [security2:error] [pid 1018003:tid 1018169] [client 158.23.147.79:35728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/.well-known/content.php"] [unique_id "apK9dTAh5Y1i2tUxg4EWjwAABco"]
[Sat Aug 29 05:07:33.663336 2026] [core:error] [pid 1028675:tid 1028797] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.663350 2026] [core:error] [pid 1028675:tid 1028797] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.663469 2026] [security2:error] [pid 1028675:tid 1028853] [client 4.205.62.107:53331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/cxc.php"] [unique_id "apK9dddHPfW2QFvhmL7ptgAAACs"]
[Sat Aug 29 05:07:33.663837 2026] [core:error] [pid 1028675:tid 1028770] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.663848 2026] [core:error] [pid 1028675:tid 1028770] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.663937 2026] [security2:error] [pid 1018003:tid 1018255] [client 68.155.159.216:52850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/admin.php"] [unique_id "apK9dTAh5Y1i2tUxg4EWkAAABh8"]
[Sat Aug 29 05:07:33.664379 2026] [security2:error] [pid 1028675:tid 1028830] [client 68.155.159.216:12191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/packed.php"] [unique_id "apK9dddHPfW2QFvhmL7ptwAAABQ"]
[Sat Aug 29 05:07:33.670231 2026] [core:error] [pid 1028675:tid 1028802] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.670243 2026] [core:error] [pid 1028675:tid 1028802] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.671289 2026] [core:error] [pid 1028675:tid 1028803] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.671300 2026] [core:error] [pid 1028675:tid 1028803] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.674124 2026] [security2:error] [pid 1028675:tid 1028858] [client 52.139.37.240:32854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "luxuryweddingphotographer.com"] [uri "/essexec.php"] [unique_id "apK9dddHPfW2QFvhmL7puwAAADA"]
[Sat Aug 29 05:07:33.674319 2026] [security2:error] [pid 1028675:tid 1028825] [client 4.205.62.107:53296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/test.config.php"] [unique_id "apK9dddHPfW2QFvhmL7pvAAAAA8"]
[Sat Aug 29 05:07:33.688781 2026] [security2:error] [pid 1028675:tid 1028875] [client 20.203.141.11:38599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/images/index.php"] [unique_id "apK9dddHPfW2QFvhmL7pvQAAAEE"]
[Sat Aug 29 05:07:33.689549 2026] [security2:error] [pid 1028675:tid 1028923] [client 20.63.81.20:20908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/wp_xiPu52Ut.php"] [unique_id "apK9dddHPfW2QFvhmL7pvgAAAHE"]
[Sat Aug 29 05:07:33.731880 2026] [security2:error] [pid 1028675:tid 1028887] [client 20.203.141.11:5784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/deepseek_d.php"] [unique_id "apK9dddHPfW2QFvhmL7pvwAAAE0"]
[Sat Aug 29 05:07:33.735131 2026] [security2:error] [pid 1028675:tid 1028843] [client 52.139.37.240:19333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/wp-admin/wp-fileesx-449.php"] [unique_id "apK9dddHPfW2QFvhmL7pwAAAACE"]
[Sat Aug 29 05:07:33.767320 2026] [core:error] [pid 1018003:tid 1018085] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.767336 2026] [core:error] [pid 1018003:tid 1018085] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.772975 2026] [security2:error] [pid 1018003:tid 1018246] [client 52.139.37.240:51901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "databases-ap.medulae.com"] [uri "/cron.php"] [unique_id "apK9dTAh5Y1i2tUxg4EWkwAABhY"]
[Sat Aug 29 05:07:33.776134 2026] [core:error] [pid 1018003:tid 1018051] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.776145 2026] [core:error] [pid 1018003:tid 1018136] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.776147 2026] [core:error] [pid 1018003:tid 1018051] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.776153 2026] [core:error] [pid 1018003:tid 1018136] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.822321 2026] [core:error] [pid 1018003:tid 1018268] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.822340 2026] [core:error] [pid 1018003:tid 1018268] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.822947 2026] [security2:error] [pid 1028675:tid 1028912] [client 20.63.81.20:20984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/wp_n5VD7XDh.php"] [unique_id "apK9dddHPfW2QFvhmL7pyQAAAGY"]
[Sat Aug 29 05:07:33.829484 2026] [security2:error] [pid 1028675:tid 1028918] [client 20.151.200.44:64638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/inwp.php"] [unique_id "apK9dddHPfW2QFvhmL7pywAAAGw"]
[Sat Aug 29 05:07:33.834341 2026] [core:error] [pid 1018003:tid 1018265] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.834366 2026] [core:error] [pid 1018003:tid 1018265] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.834940 2026] [core:error] [pid 1018003:tid 1018240] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.834951 2026] [core:error] [pid 1018003:tid 1018240] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.836353 2026] [core:error] [pid 1028675:tid 1028936] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.836370 2026] [security2:error] [pid 1018003:tid 1018191] [client 158.158.54.35:2189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/av.php"] [unique_id "apK9dTAh5Y1i2tUxg4EWowAABeA"]
[Sat Aug 29 05:07:33.836379 2026] [core:error] [pid 1028675:tid 1028936] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.843680 2026] [security2:error] [pid 1028675:tid 1028907] [client 158.23.147.79:26615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK9dddHPfW2QFvhmL7pzQAAAGE"]
[Sat Aug 29 05:07:33.853846 2026] [core:error] [pid 1028675:tid 1028807] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.853864 2026] [core:error] [pid 1028675:tid 1028807] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.869182 2026] [core:error] [pid 1018003:tid 1018034] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.869208 2026] [core:error] [pid 1018003:tid 1018034] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.869230 2026] [core:error] [pid 1018003:tid 1018087] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.869238 2026] [core:error] [pid 1018003:tid 1018087] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.881061 2026] [security2:error] [pid 1028675:tid 1028890] [client 20.104.104.62:25605] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "www.horseventure-net.penmarketing.org"] [uri "/1.php"] [unique_id "apK9dddHPfW2QFvhmL7p0wAAAFA"]
[Sat Aug 29 05:07:33.881149 2026] [security2:error] [pid 1028675:tid 1028890] [client 20.104.104.62:25605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.horseventure-net.penmarketing.org"] [uri "/1.php"] [unique_id "apK9dddHPfW2QFvhmL7p0wAAAFA"]
[Sat Aug 29 05:07:33.881600 2026] [security2:error] [pid 1018003:tid 1018250] [client 52.139.37.240:33541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "luxuryweddingphotographer.com"] [uri "/fw.php"] [unique_id "apK9dTAh5Y1i2tUxg4EWrAAABho"]
[Sat Aug 29 05:07:33.887639 2026] [core:error] [pid 1018003:tid 1018047] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.887654 2026] [core:error] [pid 1018003:tid 1018164] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.887657 2026] [core:error] [pid 1018003:tid 1018047] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.887666 2026] [core:error] [pid 1018003:tid 1018164] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.889805 2026] [core:error] [pid 1018003:tid 1018236] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.889825 2026] [core:error] [pid 1018003:tid 1018236] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.902885 2026] [core:error] [pid 1018003:tid 1018156] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.902906 2026] [core:error] [pid 1018003:tid 1018156] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.916192 2026] [core:error] [pid 1028675:tid 1028856] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.916215 2026] [core:error] [pid 1028675:tid 1028856] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.918466 2026] [core:error] [pid 1018003:tid 1018234] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.918487 2026] [core:error] [pid 1018003:tid 1018234] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.931957 2026] [security2:error] [pid 1018003:tid 1018226] [client 52.139.37.240:19310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/wp-content/themes/min.php"] [unique_id "apK9dTAh5Y1i2tUxg4EWtgAABgM"]
[Sat Aug 29 05:07:33.950693 2026] [security2:error] [pid 1028675:tid 1028876] [client 74.7.230.51:41962] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "durancefarm.com"] [uri "/robots.txt"] [unique_id "apK9dddHPfW2QFvhmL7p2QAAQgM"]
[Sat Aug 29 05:07:33.952648 2026] [security2:error] [pid 1018003:tid 1018198] [client 40.83.93.50:5478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-content/admin-header.php"] [unique_id "apK9dTAh5Y1i2tUxg4EWugAABec"]
[Sat Aug 29 05:07:33.959052 2026] [security2:error] [pid 1018003:tid 1018266] [client 20.63.81.20:20941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/wp-mini.php"] [unique_id "apK9dTAh5Y1i2tUxg4EWuwAABio"]
[Sat Aug 29 05:07:33.971043 2026] [security2:error] [pid 1018003:tid 1018271] [client 52.139.37.240:3437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "databases-ap.medulae.com"] [uri "/wp-2019.php"] [unique_id "apK9dTAh5Y1i2tUxg4EWvQAABi8"]
[Sat Aug 29 05:07:33.971977 2026] [security2:error] [pid 1018003:tid 1018217] [client 68.155.159.216:24553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-admin.php"] [unique_id "apK9dTAh5Y1i2tUxg4EWvgAABfo"]
[Sat Aug 29 05:07:33.974202 2026] [core:error] [pid 1018003:tid 1018159] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:33.974217 2026] [core:error] [pid 1018003:tid 1018159] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.011271 2026] [security2:error] [pid 1028675:tid 1028937] [client 168.107.94.195:56738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9dtdHPfW2QFvhmL7p2gAAAH8"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:34.029804 2026] [security2:error] [pid 1018003:tid 1018122] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/cron/.env"] [unique_id "apK9djAh5Y1i2tUxg4EWwAAFxGU"]
[Sat Aug 29 05:07:34.029805 2026] [security2:error] [pid 1018003:tid 1018063] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/crm/.env"] [unique_id "apK9djAh5Y1i2tUxg4EWvwAFxCo"]
[Sat Aug 29 05:07:34.031125 2026] [core:error] [pid 1018003:tid 1018124] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.031137 2026] [core:error] [pid 1018003:tid 1018124] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.031844 2026] [core:error] [pid 1018003:tid 1018084] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.031866 2026] [core:error] [pid 1018003:tid 1018084] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.034930 2026] [security2:error] [pid 1028675:tid 1028812] [client 158.23.147.79:48196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK9dtdHPfW2QFvhmL7p2wAAAAI"]
[Sat Aug 29 05:07:34.035789 2026] [security2:error] [pid 1018003:tid 1018240] [client 4.205.62.107:22405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/routes.php"] [unique_id "apK9djAh5Y1i2tUxg4EWwwAABhA"]
[Sat Aug 29 05:07:34.065576 2026] [security2:error] [pid 1028675:tid 1028837] [client 158.23.147.79:17533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/content.php"] [unique_id "apK9dtdHPfW2QFvhmL7p3gAAABs"]
[Sat Aug 29 05:07:34.067901 2026] [core:error] [pid 1028675:tid 1028682] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.067923 2026] [core:error] [pid 1028675:tid 1028682] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.069523 2026] [core:error] [pid 1028675:tid 1028806] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.069545 2026] [core:error] [pid 1028675:tid 1028806] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.073772 2026] [core:error] [pid 1028675:tid 1028804] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.073786 2026] [core:error] [pid 1028675:tid 1028804] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.074585 2026] [security2:error] [pid 1028675:tid 1028877] [client 158.158.54.35:22171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-content/file.php"] [unique_id "apK9dtdHPfW2QFvhmL7p4gAAAEM"]
[Sat Aug 29 05:07:34.075247 2026] [core:error] [pid 1028675:tid 1028684] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.075258 2026] [core:error] [pid 1028675:tid 1028684] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.075573 2026] [core:error] [pid 1028675:tid 1028691] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.075583 2026] [core:error] [pid 1028675:tid 1028691] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.075921 2026] [security2:error] [pid 1028675:tid 1028816] [client 20.104.104.62:25796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.horseventure-net.penmarketing.org"] [uri "/admin/function.php"] [unique_id "apK9dtdHPfW2QFvhmL7p4wAAAAY"]
[Sat Aug 29 05:07:34.076714 2026] [security2:error] [pid 1028675:tid 1028902] [client 52.139.37.240:33560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "luxuryweddingphotographer.com"] [uri "/zwso.php"] [unique_id "apK9dtdHPfW2QFvhmL7p5AAAAFw"]
[Sat Aug 29 05:07:34.084342 2026] [security2:error] [pid 1018003:tid 1018059] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/current/.env"] [unique_id "apK9djAh5Y1i2tUxg4EWxAAF3yY"]
[Sat Aug 29 05:07:34.087626 2026] [security2:error] [pid 1018003:tid 1018157] [client 20.63.81.20:20947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/xmini4.php"] [unique_id "apK9djAh5Y1i2tUxg4EWxQAABb4"]
[Sat Aug 29 05:07:34.107765 2026] [security2:error] [pid 1028675:tid 1028889] [client 20.104.104.62:64749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/style.php"] [unique_id "apK9dtdHPfW2QFvhmL7p5wAAAE8"]
[Sat Aug 29 05:07:34.111395 2026] [security2:error] [pid 1028675:tid 1028884] [client 68.155.159.216:30711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-content/cong.php"] [unique_id "apK9dtdHPfW2QFvhmL7p6AAAAEo"]
[Sat Aug 29 05:07:34.126677 2026] [security2:error] [pid 1018003:tid 1018184] [client 68.155.159.216:49249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-admin/admin.php"] [unique_id "apK9djAh5Y1i2tUxg4EWxgAABdk"]
[Sat Aug 29 05:07:34.127269 2026] [security2:error] [pid 1028675:tid 1028911] [client 52.139.37.240:19290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/wp-content/themes/x/bypass.php"] [unique_id "apK9dtdHPfW2QFvhmL7p6QAAAGU"]
[Sat Aug 29 05:07:34.136906 2026] [core:error] [pid 1028675:tid 1028686] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.136922 2026] [core:error] [pid 1028675:tid 1028686] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.168917 2026] [security2:error] [pid 1028675:tid 1028897] [client 52.139.37.240:3343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "databases-ap.medulae.com"] [uri "/gecko-new.php"] [unique_id "apK9dtdHPfW2QFvhmL7p7AAAAFc"]
[Sat Aug 29 05:07:34.170777 2026] [authz_core:error] [pid 1018003:tid 1018170] [client 20.203.141.11:12508] AH01630: client denied by server configuration: /home2/newfloo1/public_html/wp-includes/PHPMailer/error_log
[Sat Aug 29 05:07:34.209606 2026] [security2:error] [pid 1018003:tid 1018053] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/developer/.env"] [unique_id "apK9djAh5Y1i2tUxg4EWyAAGNSA"]
[Sat Aug 29 05:07:34.209606 2026] [security2:error] [pid 1018003:tid 1018092] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/development/.env"] [unique_id "apK9djAh5Y1i2tUxg4EWyQAGNUc"]
[Sat Aug 29 05:07:34.217695 2026] [security2:error] [pid 1018003:tid 1018156] [client 20.63.81.20:20875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/reop3.php"] [unique_id "apK9djAh5Y1i2tUxg4EW0AAABb0"]
[Sat Aug 29 05:07:34.220827 2026] [security2:error] [pid 1018003:tid 1018099] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/demo/.env"] [unique_id "apK9djAh5Y1i2tUxg4EW0wAGNU4"]
[Sat Aug 29 05:07:34.221630 2026] [core:error] [pid 1018003:tid 1018118] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.221646 2026] [core:error] [pid 1018003:tid 1018118] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.225709 2026] [security2:error] [pid 1018003:tid 1018076] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/dev/.env"] [unique_id "apK9djAh5Y1i2tUxg4EW1gAGNTc"]
[Sat Aug 29 05:07:34.231568 2026] [security2:error] [pid 1018003:tid 1018081] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/develop/.env"] [unique_id "apK9djAh5Y1i2tUxg4EW2AAGNTw"]
[Sat Aug 29 05:07:34.237510 2026] [core:error] [pid 1018003:tid 1018023] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.237520 2026] [core:error] [pid 1018003:tid 1018023] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.244107 2026] [core:error] [pid 1028675:tid 1028886] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.244129 2026] [core:error] [pid 1028675:tid 1028886] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.245173 2026] [core:error] [pid 1028675:tid 1028843] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.245186 2026] [core:error] [pid 1028675:tid 1028843] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.247711 2026] [core:error] [pid 1028675:tid 1028910] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.247722 2026] [core:error] [pid 1028675:tid 1028910] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.250612 2026] [core:error] [pid 1028675:tid 1028925] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.250624 2026] [core:error] [pid 1028675:tid 1028925] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.251015 2026] [core:error] [pid 1028675:tid 1028842] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.251025 2026] [core:error] [pid 1028675:tid 1028842] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.270553 2026] [security2:error] [pid 1028675:tid 1028936] [client 4.205.62.107:65451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/gk.php"] [unique_id "apK9dtdHPfW2QFvhmL7p8wAAAH4"]
[Sat Aug 29 05:07:34.270817 2026] [security2:error] [pid 1028675:tid 1028858] [client 52.139.37.240:33581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "luxuryweddingphotographer.com"] [uri "/admin/function.php"] [unique_id "apK9dtdHPfW2QFvhmL7p9AAAADA"]
[Sat Aug 29 05:07:34.273518 2026] [security2:error] [pid 1028675:tid 1028929] [client 20.104.104.62:25824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.horseventure-net.penmarketing.org"] [uri "/autoload_classmap.php"] [unique_id "apK9dtdHPfW2QFvhmL7p9QAAAHc"]
[Sat Aug 29 05:07:34.293757 2026] [security2:error] [pid 1028675:tid 1028847] [client 4.205.62.107:58376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/wp-class.php"] [unique_id "apK9dtdHPfW2QFvhmL7p9wAAACU"]
[Sat Aug 29 05:07:34.300961 2026] [security2:error] [pid 1018003:tid 1018250] [client 158.158.54.35:20547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/file.php"] [unique_id "apK9djAh5Y1i2tUxg4EW3AAABho"]
[Sat Aug 29 05:07:34.317870 2026] [security2:error] [pid 1018003:tid 1018066] [remote 35.231.104.225:42418] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "www.qandlcondos.com"] [uri "/web.config"] [unique_id "apK9djAh5Y1i2tUxg4EW4AAFwy0"]
[Sat Aug 29 05:07:34.319039 2026] [core:error] [pid 1028675:tid 1028839] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.319052 2026] [core:error] [pid 1028675:tid 1028839] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.332264 2026] [security2:error] [pid 1018003:tid 1018270] [client 20.151.200.44:64057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/ad1.php"] [unique_id "apK9djAh5Y1i2tUxg4EW4wAABi4"]
[Sat Aug 29 05:07:34.333731 2026] [security2:error] [pid 1018003:tid 1018233] [client 20.203.141.11:12508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/inputs.php"] [unique_id "apK9djAh5Y1i2tUxg4EW5AAABgk"]
[Sat Aug 29 05:07:34.353908 2026] [security2:error] [pid 1018003:tid 1018212] [client 20.63.81.20:20955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/wp-mail.php"] [unique_id "apK9djAh5Y1i2tUxg4EW5gAABfU"]
[Sat Aug 29 05:07:34.363262 2026] [security2:error] [pid 1028675:tid 1028815] [client 158.23.147.79:30642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-content/packed.php"] [unique_id "apK9dtdHPfW2QFvhmL7p_gAAAAU"]
[Sat Aug 29 05:07:34.363497 2026] [security2:error] [pid 1028675:tid 1028907] [client 52.139.37.240:3348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "databases-ap.medulae.com"] [uri "/add_actualites.php"] [unique_id "apK9dtdHPfW2QFvhmL7p_wAAAGE"]
[Sat Aug 29 05:07:34.375519 2026] [security2:error] [pid 1018003:tid 1018155] [client 20.203.141.11:45465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "apK9djAh5Y1i2tUxg4EW6AAABbw"]
[Sat Aug 29 05:07:34.379036 2026] [security2:error] [pid 1018003:tid 1018271] [client 68.155.159.216:65129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9djAh5Y1i2tUxg4EW6QAABi8"]
[Sat Aug 29 05:07:34.391926 2026] [security2:error] [pid 1018003:tid 1018182] [client 168.107.94.195:57133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9djAh5Y1i2tUxg4EW8gAABdc"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:34.392074 2026] [security2:error] [pid 1018003:tid 1018203] [client 68.155.159.216:51514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wzy.php"] [unique_id "apK9djAh5Y1i2tUxg4EW8QAABew"]
[Sat Aug 29 05:07:34.411839 2026] [security2:error] [pid 1028675:tid 1028898] [client 52.139.37.240:19296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK9dtdHPfW2QFvhmL7qBAAAAFg"]
[Sat Aug 29 05:07:34.420719 2026] [core:error] [pid 1028675:tid 1028892] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.420734 2026] [core:error] [pid 1028675:tid 1028892] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.422120 2026] [security2:error] [pid 1028675:tid 1028835] [client 4.205.62.107:22481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/oc460l3x.php"] [unique_id "apK9dtdHPfW2QFvhmL7qBwAAABk"]
[Sat Aug 29 05:07:34.422766 2026] [core:error] [pid 1028675:tid 1028813] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.422778 2026] [core:error] [pid 1028675:tid 1028813] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.427249 2026] [core:error] [pid 1028675:tid 1028903] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.427262 2026] [core:error] [pid 1028675:tid 1028903] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.431290 2026] [security2:error] [pid 1018003:tid 1018224] [client 68.155.159.216:33700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK9djAh5Y1i2tUxg4EW9QAABgE"]
[Sat Aug 29 05:07:34.433099 2026] [core:error] [pid 1028675:tid 1028837] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.433113 2026] [core:error] [pid 1028675:tid 1028837] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.434372 2026] [core:error] [pid 1028675:tid 1028870] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.434385 2026] [core:error] [pid 1028675:tid 1028870] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.437200 2026] [core:error] [pid 1018003:tid 1018161] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.437214 2026] [core:error] [pid 1018003:tid 1018161] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.439703 2026] [core:error] [pid 1018003:tid 1018058] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.439718 2026] [core:error] [pid 1018003:tid 1018058] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.447228 2026] [security2:error] [pid 1028675:tid 1028863] [client 40.83.93.50:5466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-content/admin.php"] [unique_id "apK9dtdHPfW2QFvhmL7qCwAAADU"]
[Sat Aug 29 05:07:34.467147 2026] [security2:error] [pid 1018003:tid 1018186] [client 20.104.104.62:25804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.horseventure-net.penmarketing.org"] [uri "/classwithtostring.php"] [unique_id "apK9djAh5Y1i2tUxg4EW-QAABds"]
[Sat Aug 29 05:07:34.468519 2026] [security2:error] [pid 1018003:tid 1018097] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/erp/.env"] [unique_id "apK9djAh5Y1i2tUxg4EW_AAGHEw"]
[Sat Aug 29 05:07:34.472213 2026] [security2:error] [pid 1018003:tid 1018121] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/etc/apache2/apache2.conf"] [unique_id "apK9djAh5Y1i2tUxg4EXAAAGHGQ"]
[Sat Aug 29 05:07:34.473286 2026] [core:error] [pid 1018003:tid 1018109] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.473298 2026] [core:error] [pid 1018003:tid 1018109] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.474103 2026] [security2:error] [pid 1018003:tid 1018248] [client 52.139.37.240:33567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "luxuryweddingphotographer.com"] [uri "/zoom1.php"] [unique_id "apK9djAh5Y1i2tUxg4EXAgAABhg"]
[Sat Aug 29 05:07:34.505314 2026] [security2:error] [pid 1028675:tid 1028926] [client 68.155.159.216:63809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/asd.php"] [unique_id "apK9dtdHPfW2QFvhmL7qEQAAAHQ"]
[Sat Aug 29 05:07:34.507061 2026] [core:error] [pid 1028675:tid 1028841] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.507077 2026] [core:error] [pid 1028675:tid 1028841] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.508827 2026] [security2:error] [pid 1018003:tid 1018112] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/etc/boto.cfg"] [unique_id "apK9djAh5Y1i2tUxg4EXAwAGHFs"]
[Sat Aug 29 05:07:34.510553 2026] [core:error] [pid 1028675:tid 1028833] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.510566 2026] [core:error] [pid 1028675:tid 1028833] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.511105 2026] [core:error] [pid 1028675:tid 1028897] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.511113 2026] [core:error] [pid 1028675:tid 1028897] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.514175 2026] [core:error] [pid 1028675:tid 1028853] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.514185 2026] [core:error] [pid 1028675:tid 1028853] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.517915 2026] [security2:error] [pid 1018003:tid 1018184] [client 20.104.49.130:48582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/well.php"] [unique_id "apK9djAh5Y1i2tUxg4EXBAAABdk"]
[Sat Aug 29 05:07:34.522511 2026] [security2:error] [pid 1018003:tid 1018187] [client 158.158.54.35:13056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/files.php"] [unique_id "apK9djAh5Y1i2tUxg4EXBQAABdw"]
[Sat Aug 29 05:07:34.522552 2026] [security2:error] [pid 1028675:tid 1028873] [client 68.155.159.216:18401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apK9dtdHPfW2QFvhmL7qFQAAAD8"]
[Sat Aug 29 05:07:34.534182 2026] [security2:error] [pid 1028675:tid 1028875] [client 20.63.81.20:20868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/wp-conffg.php"] [unique_id "apK9dtdHPfW2QFvhmL7qFwAAAEE"]
[Sat Aug 29 05:07:34.552373 2026] [security2:error] [pid 1028675:tid 1028821] [client 52.139.37.240:3330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "databases-ap.medulae.com"] [uri "/browse.php"] [unique_id "apK9dtdHPfW2QFvhmL7qGQAAAAs"]
[Sat Aug 29 05:07:34.553836 2026] [security2:error] [pid 1028675:tid 1028867] [client 185.104.184.230:49144] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.jia.zbw.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/blog/wp-includes/wlwmanifest.xml"] [unique_id "apK9dtdHPfW2QFvhmL7qGgAAADk"]
[Sat Aug 29 05:07:34.580630 2026] [security2:error] [pid 1028675:tid 1028916] [client 158.23.147.79:53760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK9dtdHPfW2QFvhmL7qGwAAAGo"]
[Sat Aug 29 05:07:34.587162 2026] [security2:error] [pid 1028675:tid 1028910] [client 68.155.159.216:38554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/ws.php"] [unique_id "apK9dtdHPfW2QFvhmL7qHAAAAGQ"]
[Sat Aug 29 05:07:34.604219 2026] [security2:error] [pid 1028675:tid 1028923] [client 52.139.37.240:19326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/wp-info.php"] [unique_id "apK9dtdHPfW2QFvhmL7qHgAAAHE"]
[Sat Aug 29 05:07:34.655280 2026] [security2:error] [pid 1018003:tid 1018250] [client 68.155.159.216:33659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK9djAh5Y1i2tUxg4EXEAAABho"]
[Sat Aug 29 05:07:34.670125 2026] [security2:error] [pid 1018003:tid 1018198] [client 20.104.104.62:25627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.horseventure-net.penmarketing.org"] [uri "/content.php"] [unique_id "apK9djAh5Y1i2tUxg4EXEwAABec"]
[Sat Aug 29 05:07:34.670761 2026] [security2:error] [pid 1018003:tid 1018277] [client 52.139.37.240:33596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "luxuryweddingphotographer.com"] [uri "/about.php7"] [unique_id "apK9djAh5Y1i2tUxg4EXFAAABjU"]
[Sat Aug 29 05:07:34.684621 2026] [security2:error] [pid 1018003:tid 1018212] [client 20.63.81.20:20973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/filefuns.php"] [unique_id "apK9djAh5Y1i2tUxg4EXFQAABfU"]
[Sat Aug 29 05:07:34.686538 2026] [security2:error] [pid 1018003:tid 1018172] [client 68.155.159.216:1929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/ws.php"] [unique_id "apK9djAh5Y1i2tUxg4EXFgAABc0"]
[Sat Aug 29 05:07:34.690866 2026] [security2:error] [pid 1018003:tid 1018155] [client 158.23.147.79:25427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK9djAh5Y1i2tUxg4EXFwAABbw"]
[Sat Aug 29 05:07:34.707278 2026] [security2:error] [pid 1018003:tid 1018065] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/fe/.env"] [unique_id "apK9djAh5Y1i2tUxg4EXGAAGHyw"]
[Sat Aug 29 05:07:34.726261 2026] [security2:error] [pid 1018003:tid 1018267] [client 146.70.194.254:57188] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "modelbasenjis.com"] [uri "/cgi-sys/suspendedpage.cgi/wp1/wp-includes/wlwmanifest.xml"] [unique_id "apK9djAh5Y1i2tUxg4EXGgAABis"]
[Sat Aug 29 05:07:34.745306 2026] [security2:error] [pid 1018003:tid 1018233] [client 52.139.37.240:51840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "databases-ap.medulae.com"] [uri "/contentloader1.php"] [unique_id "apK9djAh5Y1i2tUxg4EXHAAABgk"]
[Sat Aug 29 05:07:34.751370 2026] [security2:error] [pid 1028675:tid 1028842] [client 158.158.54.35:29635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK9dtdHPfW2QFvhmL7qIQAAACA"]
[Sat Aug 29 05:07:34.767642 2026] [security2:error] [pid 1018003:tid 1018222] [client 20.104.104.62:20694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/Success.php"] [unique_id "apK9djAh5Y1i2tUxg4EXHgAABf8"]
[Sat Aug 29 05:07:34.770805 2026] [security2:error] [pid 1028675:tid 1028846] [client 168.107.94.195:57522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9dtdHPfW2QFvhmL7qIgAAACQ"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:34.773487 2026] [security2:error] [pid 1028675:tid 1028844] [client 68.155.159.216:9237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-admin/admin.php"] [unique_id "apK9dtdHPfW2QFvhmL7qIwAAACI"]
[Sat Aug 29 05:07:34.775814 2026] [security2:error] [pid 1028675:tid 1028866] [client 103.240.76.112:42586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK9dtdHPfW2QFvhmL7qJAAAADg"]
[Sat Aug 29 05:07:34.776038 2026] [security2:error] [pid 1028675:tid 1028866] [client 103.240.76.112:42586] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK9dtdHPfW2QFvhmL7qJAAAADg"]
[Sat Aug 29 05:07:34.776538 2026] [security2:error] [pid 1018003:tid 1018141] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/front/.env"] [unique_id "apK9djAh5Y1i2tUxg4EXIgAF23g"]
[Sat Aug 29 05:07:34.785542 2026] [security2:error] [pid 1028675:tid 1028914] [client 68.155.159.216:12245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-content/packed.php"] [unique_id "apK9dtdHPfW2QFvhmL7qKAAAAGg"]
[Sat Aug 29 05:07:34.800416 2026] [security2:error] [pid 1018003:tid 1018246] [client 52.139.37.240:19314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/wp-wordfence-waf.php"] [unique_id "apK9djAh5Y1i2tUxg4EXKAAABhY"]
[Sat Aug 29 05:07:34.802081 2026] [core:error] [pid 1018003:tid 1018157] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.802094 2026] [core:error] [pid 1018003:tid 1018157] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.802993 2026] [security2:error] [pid 1028675:tid 1028850] [client 4.205.62.107:9212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/gjm.php"] [unique_id "apK9dtdHPfW2QFvhmL7qKgAAACg"]
[Sat Aug 29 05:07:34.803869 2026] [core:error] [pid 1028675:tid 1028909] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.803881 2026] [core:error] [pid 1028675:tid 1028909] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.804312 2026] [core:error] [pid 1018003:tid 1018189] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.804322 2026] [core:error] [pid 1018003:tid 1018189] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.805123 2026] [core:error] [pid 1018003:tid 1018258] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.805136 2026] [core:error] [pid 1018003:tid 1018258] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.811851 2026] [core:error] [pid 1028675:tid 1028689] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.811870 2026] [core:error] [pid 1028675:tid 1028689] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.811883 2026] [core:error] [pid 1028675:tid 1028695] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.811887 2026] [core:error] [pid 1028675:tid 1028688] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.811892 2026] [core:error] [pid 1028675:tid 1028695] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.811903 2026] [core:error] [pid 1028675:tid 1028688] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.816105 2026] [core:error] [pid 1028675:tid 1028701] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.816120 2026] [core:error] [pid 1028675:tid 1028701] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.816288 2026] [security2:error] [pid 1018003:tid 1018190] [client 20.151.200.44:64627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/1vbqo.php"] [unique_id "apK9djAh5Y1i2tUxg4EXKwAABd8"]
[Sat Aug 29 05:07:34.819804 2026] [security2:error] [pid 1028675:tid 1028892] [client 4.205.62.107:56045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/gecko-litespeed.php"] [unique_id "apK9dtdHPfW2QFvhmL7qMAAAAFI"]
[Sat Aug 29 05:07:34.820039 2026] [security2:error] [pid 1028675:tid 1028835] [client 20.63.81.20:20977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/wp-cron.php"] [unique_id "apK9dtdHPfW2QFvhmL7qMQAAABk"]
[Sat Aug 29 05:07:34.852159 2026] [core:error] [pid 1028675:tid 1028685] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.852182 2026] [core:error] [pid 1028675:tid 1028685] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.852454 2026] [core:error] [pid 1028675:tid 1028696] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.852475 2026] [core:error] [pid 1028675:tid 1028696] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.865645 2026] [security2:error] [pid 1028675:tid 1028917] [client 20.104.104.62:25792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.horseventure-net.penmarketing.org"] [uri "/function/function.php"] [unique_id "apK9dtdHPfW2QFvhmL7qNQAAAGs"]
[Sat Aug 29 05:07:34.888861 2026] [security2:error] [pid 1028675:tid 1028848] [client 52.139.37.240:33542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "luxuryweddingphotographer.com"] [uri "/cron.php"] [unique_id "apK9dtdHPfW2QFvhmL7qNwAAACY"]
[Sat Aug 29 05:07:34.896955 2026] [security2:error] [pid 1018003:tid 1018188] [client 20.203.141.11:38651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/alfa.php"] [unique_id "apK9djAh5Y1i2tUxg4EXMQAABd0"]
[Sat Aug 29 05:07:34.917842 2026] [security2:error] [pid 1028675:tid 1028819] [client 40.83.93.50:6093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-content/autoload_classmap.php"] [unique_id "apK9dtdHPfW2QFvhmL7qOAAAAAk"]
[Sat Aug 29 05:07:34.942166 2026] [security2:error] [pid 1028675:tid 1028877] [client 52.139.37.240:3384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "databases-ap.medulae.com"] [uri "/upfile.php"] [unique_id "apK9dtdHPfW2QFvhmL7qOQAAAEM"]
[Sat Aug 29 05:07:34.949670 2026] [security2:error] [pid 1018003:tid 1018132] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/frontend/.env"] [unique_id "apK9djAh5Y1i2tUxg4EXNQAGM28"]
[Sat Aug 29 05:07:34.950415 2026] [security2:error] [pid 1018003:tid 1018167] [client 158.23.147.79:26451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-admin/images/about.php"] [unique_id "apK9djAh5Y1i2tUxg4EXNgAABcg"]
[Sat Aug 29 05:07:34.950669 2026] [security2:error] [pid 1018003:tid 1018261] [client 20.151.200.44:46618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/advanced.php"] [unique_id "apK9djAh5Y1i2tUxg4EXNwAABiU"]
[Sat Aug 29 05:07:34.962965 2026] [security2:error] [pid 1028675:tid 1028854] [client 20.63.81.20:20892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/lock360.php"] [unique_id "apK9dtdHPfW2QFvhmL7qOwAAACw"]
[Sat Aug 29 05:07:34.966147 2026] [security2:error] [pid 1028675:tid 1028694] [remote 34.138.144.127:58722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/app/.env"] [unique_id "apK9dtdHPfW2QFvhmL7qPAAARQ4"]
[Sat Aug 29 05:07:34.966468 2026] [core:error] [pid 1028675:tid 1028740] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.966480 2026] [core:error] [pid 1028675:tid 1028740] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.968048 2026] [security2:error] [pid 1028675:tid 1028813] [client 158.158.54.35:6988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/o.php"] [unique_id "apK9dtdHPfW2QFvhmL7qPwAAAAM"]
[Sat Aug 29 05:07:34.992262 2026] [core:error] [pid 1028675:tid 1028841] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.992289 2026] [core:error] [pid 1028675:tid 1028841] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.992944 2026] [core:error] [pid 1028675:tid 1028926] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.992961 2026] [core:error] [pid 1028675:tid 1028926] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.996490 2026] [core:error] [pid 1028675:tid 1028833] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.996501 2026] [core:error] [pid 1028675:tid 1028833] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:34.998218 2026] [security2:error] [pid 1028675:tid 1028872] [client 52.139.37.240:19356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/ws49.php"] [unique_id "apK9dtdHPfW2QFvhmL7qQwAAAD4"]
[Sat Aug 29 05:07:35.016092 2026] [security2:error] [pid 1018003:tid 1018046] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/info.php"] [unique_id "apK9dzAh5Y1i2tUxg4EXPgAF5xk"]
[Sat Aug 29 05:07:35.018096 2026] [security2:error] [pid 1018003:tid 1018044] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/infophp.php"] [unique_id "apK9dzAh5Y1i2tUxg4EXQAAF5xc"]
[Sat Aug 29 05:07:35.019368 2026] [core:error] [pid 1018003:tid 1018043] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.019387 2026] [core:error] [pid 1018003:tid 1018043] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.043072 2026] [core:error] [pid 1028675:tid 1028886] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.043099 2026] [core:error] [pid 1028675:tid 1028886] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.043902 2026] [security2:error] [pid 1018003:tid 1018155] [client 20.203.141.11:25472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-content/themes/pridmag/il.php"] [unique_id "apK9dzAh5Y1i2tUxg4EXQgAABbw"]
[Sat Aug 29 05:07:35.044500 2026] [core:error] [pid 1028675:tid 1028889] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.044516 2026] [core:error] [pid 1028675:tid 1028889] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.060503 2026] [security2:error] [pid 1028675:tid 1028897] [client 20.104.104.62:25656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.horseventure-net.penmarketing.org"] [uri "/item.php"] [unique_id "apK9d9dHPfW2QFvhmL7qRwAAAFc"]
[Sat Aug 29 05:07:35.078125 2026] [security2:error] [pid 1028675:tid 1028932] [client 52.139.37.240:32862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "luxuryweddingphotographer.com"] [uri "/wp-2019.php"] [unique_id "apK9d9dHPfW2QFvhmL7qSAAAAHo"]
[Sat Aug 29 05:07:35.087918 2026] [security2:error] [pid 1018003:tid 1018130] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/infos.php"] [unique_id "apK9dzAh5Y1i2tUxg4EXSAAF7G0"]
[Sat Aug 29 05:07:35.090127 2026] [security2:error] [pid 1018003:tid 1018137] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/laravel/.env"] [unique_id "apK9dzAh5Y1i2tUxg4EXRgAF7HQ"]
[Sat Aug 29 05:07:35.090154 2026] [security2:error] [pid 1018003:tid 1018035] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/lms/.env"] [unique_id "apK9dzAh5Y1i2tUxg4EXRwAF7A4"]
[Sat Aug 29 05:07:35.090475 2026] [security2:error] [pid 1028675:tid 1028899] [client 68.155.159.216:24516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK9d9dHPfW2QFvhmL7qSQAAAFk"]
[Sat Aug 29 05:07:35.094306 2026] [security2:error] [pid 1028675:tid 1028904] [client 20.63.81.20:20920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/wp-theme.php"] [unique_id "apK9d9dHPfW2QFvhmL7qSwAAAF4"]
[Sat Aug 29 05:07:35.114910 2026] [core:error] [pid 1028675:tid 1028922] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.114924 2026] [core:error] [pid 1028675:tid 1028922] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.118702 2026] [core:error] [pid 1018003:tid 1018221] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.118717 2026] [core:error] [pid 1018003:tid 1018221] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.123405 2026] [core:error] [pid 1018003:tid 1018267] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.123417 2026] [core:error] [pid 1018003:tid 1018267] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.132682 2026] [security2:error] [pid 1028675:tid 1028839] [client 68.155.159.216:6139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK9d9dHPfW2QFvhmL7qTwAAAB0"]
[Sat Aug 29 05:07:35.141299 2026] [security2:error] [pid 1028675:tid 1028811] [client 158.23.147.79:48321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK9d9dHPfW2QFvhmL7qUQAAAAE"]
[Sat Aug 29 05:07:35.149862 2026] [security2:error] [pid 1028675:tid 1028858] [client 168.107.94.195:57952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9d9dHPfW2QFvhmL7qUgAAADA"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:35.150129 2026] [core:error] [pid 1018003:tid 1018159] [client 20.203.141.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.150139 2026] [core:error] [pid 1018003:tid 1018159] [client 20.203.141.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.152273 2026] [security2:error] [pid 1028675:tid 1028923] [client 52.139.37.240:51900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "databases-ap.medulae.com"] [uri "/form.php"] [unique_id "apK9d9dHPfW2QFvhmL7qUwAAAHE"]
[Sat Aug 29 05:07:35.156504 2026] [core:error] [pid 1028675:tid 1028823] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.156520 2026] [core:error] [pid 1028675:tid 1028823] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.166895 2026] [security2:error] [pid 1028675:tid 1028849] [client 185.104.184.230:49158] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.jia.zbw.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/web/wp-includes/wlwmanifest.xml"] [unique_id "apK9d9dHPfW2QFvhmL7qVQAAACc"]
[Sat Aug 29 05:07:35.170785 2026] [security2:error] [pid 1028675:tid 1028909] [client 158.23.147.79:17576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK9d9dHPfW2QFvhmL7qVgAAAGM"]
[Sat Aug 29 05:07:35.181490 2026] [security2:error] [pid 1028675:tid 1028824] [client 4.205.62.107:22479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/aww.php"] [unique_id "apK9d9dHPfW2QFvhmL7qWAAAAA4"]
[Sat Aug 29 05:07:35.187245 2026] [security2:error] [pid 1028675:tid 1028929] [client 52.139.37.240:19273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/xxx.php"] [unique_id "apK9d9dHPfW2QFvhmL7qWQAAAHc"]
[Sat Aug 29 05:07:35.194042 2026] [security2:error] [pid 1028675:tid 1028878] [client 158.158.54.35:4417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/gmo.php"] [unique_id "apK9d9dHPfW2QFvhmL7qWgAAAEQ"]
[Sat Aug 29 05:07:35.212511 2026] [security2:error] [pid 1028675:tid 1028892] [client 68.155.159.216:30644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK9d9dHPfW2QFvhmL7qXAAAAFI"]
[Sat Aug 29 05:07:35.229017 2026] [security2:error] [pid 1028675:tid 1028919] [client 20.63.81.20:20822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/2d7433/index.php"] [unique_id "apK9d9dHPfW2QFvhmL7qXQAAAG0"]
[Sat Aug 29 05:07:35.234698 2026] [security2:error] [pid 1018003:tid 1018265] [client 68.155.159.216:49203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK9dzAh5Y1i2tUxg4EXUgAABik"]
[Sat Aug 29 05:07:35.234720 2026] [security2:error] [pid 1018003:tid 1018270] [client 128.90.161.20:46246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.161.90.128.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.greenfieldparts.com"] [uri "/wp-login.php"] [unique_id "apK9dzAh5Y1i2tUxg4EXUQAABi4"]
[Sat Aug 29 05:07:35.255101 2026] [security2:error] [pid 1018003:tid 1018133] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/local/.env"] [unique_id "apK9dzAh5Y1i2tUxg4EXVwAGFnA"]
[Sat Aug 29 05:07:35.255104 2026] [security2:error] [pid 1018003:tid 1018108] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/marketing/.env"] [unique_id "apK9dzAh5Y1i2tUxg4EXVQAGFlc"]
[Sat Aug 29 05:07:35.255570 2026] [security2:error] [pid 1018003:tid 1018022] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/market/.env"] [unique_id "apK9dzAh5Y1i2tUxg4EXVAAGFgE"]
[Sat Aug 29 05:07:35.256423 2026] [security2:error] [pid 1028675:tid 1028856] [client 20.104.104.62:25826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.horseventure-net.penmarketing.org"] [uri "/ms-edit.php"] [unique_id "apK9d9dHPfW2QFvhmL7qXwAAAC4"]
[Sat Aug 29 05:07:35.258221 2026] [security2:error] [pid 1018003:tid 1018144] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/media/.env"] [unique_id "apK9dzAh5Y1i2tUxg4EXWwAGFns"]
[Sat Aug 29 05:07:35.261912 2026] [security2:error] [pid 1028675:tid 1028819] [client 20.48.250.41:35089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/gettest.php"] [unique_id "apK9d9dHPfW2QFvhmL7qZQAAAAk"]
[Sat Aug 29 05:07:35.269155 2026] [security2:error] [pid 1028675:tid 1028815] [client 52.139.37.240:32865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "luxuryweddingphotographer.com"] [uri "/gecko-new.php"] [unique_id "apK9d9dHPfW2QFvhmL7qZgAAAAU"]
[Sat Aug 29 05:07:35.278398 2026] [security2:error] [pid 1018003:tid 1018187] [client 20.48.250.41:49145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/gettest.php"] [unique_id "apK9dzAh5Y1i2tUxg4EXXQAABdw"]
[Sat Aug 29 05:07:35.303045 2026] [core:error] [pid 1018003:tid 1018185] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.303060 2026] [core:error] [pid 1018003:tid 1018185] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.317009 2026] [security2:error] [pid 1028675:tid 1028912] [client 158.23.147.79:50006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK9d9dHPfW2QFvhmL7qawAAAGY"]
[Sat Aug 29 05:07:35.319340 2026] [core:error] [pid 1018003:tid 1018170] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.319362 2026] [core:error] [pid 1018003:tid 1018170] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.319489 2026] [core:error] [pid 1018003:tid 1018252] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.319497 2026] [core:error] [pid 1018003:tid 1018252] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.326043 2026] [core:error] [pid 1028675:tid 1028710] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.326057 2026] [core:error] [pid 1028675:tid 1028710] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.328034 2026] [core:error] [pid 1028675:tid 1028883] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.328045 2026] [core:error] [pid 1028675:tid 1028883] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.329599 2026] [core:error] [pid 1018003:tid 1018207] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.329610 2026] [core:error] [pid 1018003:tid 1018207] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.335682 2026] [security2:error] [pid 1028675:tid 1028821] [client 20.151.200.44:64654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/h02ugyh.php"] [unique_id "apK9d9dHPfW2QFvhmL7qcAAAAAs"]
[Sat Aug 29 05:07:35.336248 2026] [core:error] [pid 1028675:tid 1028705] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.336256 2026] [core:error] [pid 1028675:tid 1028705] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.338770 2026] [security2:error] [pid 1018003:tid 1018182] [client 20.104.104.62:20851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/syad.php"] [unique_id "apK9dzAh5Y1i2tUxg4EXZwAABdc"]
[Sat Aug 29 05:07:35.347952 2026] [security2:error] [pid 1018003:tid 1018216] [client 52.139.37.240:3373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "databases-ap.medulae.com"] [uri "/wp-sigunq.php"] [unique_id "apK9dzAh5Y1i2tUxg4EXaAAABfk"]
[Sat Aug 29 05:07:35.358547 2026] [security2:error] [pid 1018003:tid 1018068] [remote 35.231.104.225:42418] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.qandlcondos.com"] [uri "/src/.env"] [unique_id "apK9dzAh5Y1i2tUxg4EXagAFyC8"]
[Sat Aug 29 05:07:35.358547 2026] [security2:error] [pid 1018003:tid 1018037] [remote 35.231.104.225:42418] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.qandlcondos.com"] [uri "/app/.env"] [unique_id "apK9dzAh5Y1i2tUxg4EXawAFyBA"]
[Sat Aug 29 05:07:35.359681 2026] [security2:error] [pid 1028675:tid 1028716] [remote 34.138.144.127:58722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/.github/.env"] [unique_id "apK9d9dHPfW2QFvhmL7qcQAAVyM"]
[Sat Aug 29 05:07:35.362093 2026] [core:error] [pid 1028675:tid 1028706] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.362107 2026] [core:error] [pid 1028675:tid 1028706] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.365665 2026] [security2:error] [pid 1028675:tid 1028718] [remote 34.138.144.127:58722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/src/.env"] [unique_id "apK9d9dHPfW2QFvhmL7qdAAAVyU"]
[Sat Aug 29 05:07:35.374079 2026] [security2:error] [pid 1028675:tid 1028907] [client 20.203.141.11:13608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/403.php"] [unique_id "apK9d9dHPfW2QFvhmL7qdQAAAGE"]
[Sat Aug 29 05:07:35.375598 2026] [security2:error] [pid 1018003:tid 1018275] [client 20.63.81.20:20919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/wp-login.php"] [unique_id "apK9dzAh5Y1i2tUxg4EXbAAABjM"]
[Sat Aug 29 05:07:35.380050 2026] [security2:error] [pid 1028675:tid 1028830] [client 52.139.37.240:19385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/0x.php"] [unique_id "apK9d9dHPfW2QFvhmL7qdgAAABQ"]
[Sat Aug 29 05:07:35.390935 2026] [security2:error] [pid 1028675:tid 1028899] [client 20.48.250.41:35016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/35.php"] [unique_id "apK9d9dHPfW2QFvhmL7qdwAAAFk"]
[Sat Aug 29 05:07:35.397596 2026] [security2:error] [pid 1028675:tid 1028876] [client 40.83.93.50:15707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-content/cache/min/1/wp-content/admin.php"] [unique_id "apK9d9dHPfW2QFvhmL7qeAAAAEI"]
[Sat Aug 29 05:07:35.404857 2026] [security2:error] [pid 1018003:tid 1018262] [client 4.205.62.107:26676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/god.php"] [unique_id "apK9dzAh5Y1i2tUxg4EXcgAABiY"]
[Sat Aug 29 05:07:35.405880 2026] [security2:error] [pid 1018003:tid 1018134] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/new/.env"] [unique_id "apK9dzAh5Y1i2tUxg4EXcQAGKnE"]
[Sat Aug 29 05:07:35.413119 2026] [security2:error] [pid 1028675:tid 1028816] [client 158.158.54.35:32793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/file2.php"] [unique_id "apK9d9dHPfW2QFvhmL7qegAAAAY"]
[Sat Aug 29 05:07:35.419739 2026] [core:error] [pid 1028675:tid 1028704] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.419757 2026] [core:error] [pid 1028675:tid 1028704] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.425308 2026] [core:error] [pid 1028675:tid 1028922] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.425322 2026] [core:error] [pid 1028675:tid 1028922] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.425642 2026] [core:error] [pid 1028675:tid 1028918] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.425666 2026] [core:error] [pid 1028675:tid 1028918] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.431496 2026] [security2:error] [pid 1028675:tid 1028880] [client 4.205.62.107:58396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/hosty.php"] [unique_id "apK9d9dHPfW2QFvhmL7qfQAAAEY"]
[Sat Aug 29 05:07:35.454643 2026] [security2:error] [pid 1028675:tid 1028932] [client 20.104.104.62:25793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.horseventure-net.penmarketing.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK9d9dHPfW2QFvhmL7qfgAAAHo"]
[Sat Aug 29 05:07:35.460566 2026] [security2:error] [pid 1018003:tid 1018056] [remote 35.231.104.225:42418] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.qandlcondos.com"] [uri "/frontend/.env"] [unique_id "apK9dzAh5Y1i2tUxg4EXcwAGLyM"]
[Sat Aug 29 05:07:35.461774 2026] [security2:error] [pid 1028675:tid 1028898] [client 52.139.37.240:33537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "luxuryweddingphotographer.com"] [uri "/add_actualites.php"] [unique_id "apK9d9dHPfW2QFvhmL7qfwAAAFg"]
[Sat Aug 29 05:07:35.474683 2026] [security2:error] [pid 1018003:tid 1018104] [remote 35.231.104.225:42418] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.qandlcondos.com"] [uri "/dev/.env"] [unique_id "apK9dzAh5Y1i2tUxg4EXdAAGGFM"]
[Sat Aug 29 05:07:35.475178 2026] [security2:error] [pid 1018003:tid 1018049] [remote 35.231.104.225:42418] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.qandlcondos.com"] [uri "/server/.env"] [unique_id "apK9dzAh5Y1i2tUxg4EXdQAGGBw"]
[Sat Aug 29 05:07:35.476557 2026] [security2:error] [pid 1018003:tid 1018050] [remote 35.231.104.225:42418] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.qandlcondos.com"] [uri "/production/.env"] [unique_id "apK9dzAh5Y1i2tUxg4EXdgAGGB0"]
[Sat Aug 29 05:07:35.492186 2026] [security2:error] [pid 1018003:tid 1018221] [client 20.48.250.41:49035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/35.php"] [unique_id "apK9dzAh5Y1i2tUxg4EXdwAABf4"]
[Sat Aug 29 05:07:35.518774 2026] [security2:error] [pid 1018003:tid 1018267] [client 68.155.159.216:51487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK9dzAh5Y1i2tUxg4EXeAAABis"]
[Sat Aug 29 05:07:35.526021 2026] [security2:error] [pid 1018003:tid 1018255] [client 20.48.250.41:35462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/maraz.php"] [unique_id "apK9dzAh5Y1i2tUxg4EXeQAABh8"]
[Sat Aug 29 05:07:35.526742 2026] [security2:error] [pid 1028675:tid 1028910] [client 20.203.141.11:8973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/assets/images/doc.php"] [unique_id "apK9d9dHPfW2QFvhmL7qgAAAAGQ"]
[Sat Aug 29 05:07:35.527530 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.63.81.20:20952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/images.php"] [unique_id "apK9dzAh5Y1i2tUxg4EXegAABcI"]
[Sat Aug 29 05:07:35.539345 2026] [security2:error] [pid 1028675:tid 1028825] [client 52.139.37.240:3376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "databases-ap.medulae.com"] [uri "/07.php"] [unique_id "apK9d9dHPfW2QFvhmL7qgQAAAA8"]
[Sat Aug 29 05:07:35.545652 2026] [security2:error] [pid 1018003:tid 1018224] [client 68.155.159.216:33758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK9dzAh5Y1i2tUxg4EXewAABgE"]
[Sat Aug 29 05:07:35.560996 2026] [security2:error] [pid 1018003:tid 1018233] [client 4.205.62.107:22455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/wp-content/plugin-install.php"] [unique_id "apK9dzAh5Y1i2tUxg4EXfgAABgk"]
[Sat Aug 29 05:07:35.569312 2026] [security2:error] [pid 1018003:tid 1018057] [remote 35.231.104.225:42418] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.qandlcondos.com"] [uri "/docker/.env"] [unique_id "apK9dzAh5Y1i2tUxg4EXfwAFwyQ"]
[Sat Aug 29 05:07:35.571806 2026] [security2:error] [pid 1018003:tid 1018054] [remote 35.231.104.225:42418] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.qandlcondos.com"] [uri "/staging/.env"] [unique_id "apK9dzAh5Y1i2tUxg4EXgAAGLiE"]
[Sat Aug 29 05:07:35.573289 2026] [security2:error] [pid 1028675:tid 1028928] [client 52.139.37.240:19312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/CDX1.php"] [unique_id "apK9d9dHPfW2QFvhmL7qggAAAHY"]
[Sat Aug 29 05:07:35.585017 2026] [security2:error] [pid 1028675:tid 1028857] [client 20.104.49.130:34553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/sd.php"] [unique_id "apK9d9dHPfW2QFvhmL7qgwAAAC8"]
[Sat Aug 29 05:07:35.589152 2026] [security2:error] [pid 1018003:tid 1018169] [client 52.139.37.240:37154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/ahax.php"] [unique_id "apK9dzAh5Y1i2tUxg4EXgQAABco"]
[Sat Aug 29 05:07:35.590515 2026] [security2:error] [pid 1028675:tid 1028862] [client 91.92.47.191:46008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.corrigansbasement.com"] [uri "/configuration.php"] [unique_id "apK9d9dHPfW2QFvhmL7qhQAAADQ"]
[Sat Aug 29 05:07:35.596058 2026] [security2:error] [pid 1018003:tid 1018163] [client 168.107.94.195:58282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9dzAh5Y1i2tUxg4EXgwAABcQ"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:35.627253 2026] [security2:error] [pid 1018003:tid 1018273] [client 68.155.159.216:65060] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/1.php"] [unique_id "apK9dzAh5Y1i2tUxg4EXhAAABjE"]
[Sat Aug 29 05:07:35.627387 2026] [security2:error] [pid 1018003:tid 1018273] [client 68.155.159.216:65060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/1.php"] [unique_id "apK9dzAh5Y1i2tUxg4EXhAAABjE"]
[Sat Aug 29 05:07:35.631745 2026] [security2:error] [pid 1018003:tid 1018202] [client 68.155.159.216:18372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK9dzAh5Y1i2tUxg4EXhQAABes"]
[Sat Aug 29 05:07:35.643824 2026] [security2:error] [pid 1028675:tid 1028858] [client 158.158.54.35:34840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/classwithtostring.php"] [unique_id "apK9d9dHPfW2QFvhmL7qhwAAADA"]
[Sat Aug 29 05:07:35.647509 2026] [security2:error] [pid 1028675:tid 1028902] [client 158.23.147.79:32577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/themes.php"] [unique_id "apK9d9dHPfW2QFvhmL7qiAAAAFw"]
[Sat Aug 29 05:07:35.659256 2026] [security2:error] [pid 1018003:tid 1018189] [client 52.139.37.240:33569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "luxuryweddingphotographer.com"] [uri "/browse.php"] [unique_id "apK9dzAh5Y1i2tUxg4EXhwAABd4"]
[Sat Aug 29 05:07:35.659595 2026] [security2:error] [pid 1028675:tid 1028863] [client 20.63.81.20:20830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/ops.php"] [unique_id "apK9d9dHPfW2QFvhmL7qiwAAADU"]
[Sat Aug 29 05:07:35.665270 2026] [security2:error] [pid 1018003:tid 1018177] [client 20.48.250.41:49115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/maraz.php"] [unique_id "apK9dzAh5Y1i2tUxg4EXiwAABdI"]
[Sat Aug 29 05:07:35.696491 2026] [security2:error] [pid 1018003:tid 1018198] [client 60.243.207.176:63987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK9dzAh5Y1i2tUxg4EXjgAABec"]
[Sat Aug 29 05:07:35.696582 2026] [security2:error] [pid 1018003:tid 1018198] [client 60.243.207.176:63987] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK9dzAh5Y1i2tUxg4EXjgAABec"]
[Sat Aug 29 05:07:35.702792 2026] [security2:error] [pid 1028675:tid 1028711] [remote 34.138.144.127:58722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/dev/.env"] [unique_id "apK9d9dHPfW2QFvhmL7qjQAALB4"]
[Sat Aug 29 05:07:35.705146 2026] [core:error] [pid 1028675:tid 1028714] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.705161 2026] [core:error] [pid 1028675:tid 1028714] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.705797 2026] [security2:error] [pid 1018003:tid 1018262] [client 20.48.250.41:35008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/kbfr.php"] [unique_id "apK9dzAh5Y1i2tUxg4EXjwAABiY"]
[Sat Aug 29 05:07:35.722440 2026] [security2:error] [pid 1028675:tid 1028833] [client 20.104.104.62:25626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.horseventure-net.penmarketing.org"] [uri "/wp-admin/user/index.php"] [unique_id "apK9d9dHPfW2QFvhmL7qkwAAABc"]
[Sat Aug 29 05:07:35.722696 2026] [security2:error] [pid 1028675:tid 1028709] [remote 34.138.144.127:58722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/server/.env"] [unique_id "apK9d9dHPfW2QFvhmL7qkAAAPBw"]
[Sat Aug 29 05:07:35.724657 2026] [security2:error] [pid 1028675:tid 1028707] [remote 34.138.144.127:58722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/frontend/.env"] [unique_id "apK9d9dHPfW2QFvhmL7qkgAAPBo"]
[Sat Aug 29 05:07:35.724715 2026] [security2:error] [pid 1018003:tid 1018212] [client 20.151.200.44:64669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/shelp.php"] [unique_id "apK9dzAh5Y1i2tUxg4EXkAAABfU"]
[Sat Aug 29 05:07:35.725927 2026] [security2:error] [pid 1018003:tid 1018250] [client 195.178.110.247:41638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/index.php"] [unique_id "apK9dzAh5Y1i2tUxg4EXkQAABho"]
[Sat Aug 29 05:07:35.726072 2026] [core:error] [pid 1028675:tid 1028728] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.726086 2026] [core:error] [pid 1028675:tid 1028728] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.727505 2026] [core:error] [pid 1028675:tid 1028702] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.727516 2026] [core:error] [pid 1028675:tid 1028702] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.729397 2026] [security2:error] [pid 1018003:tid 1018135] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/old/.env"] [unique_id "apK9dzAh5Y1i2tUxg4EXlAAGEHI"]
[Sat Aug 29 05:07:35.733529 2026] [security2:error] [pid 1028675:tid 1028813] [client 52.139.37.240:51881] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "databases-ap.medulae.com"] [uri "/c99.php"] [unique_id "apK9d9dHPfW2QFvhmL7qlAAAAAM"]
[Sat Aug 29 05:07:35.745469 2026] [security2:error] [pid 1018003:tid 1018038] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/node/backend/.env"] [unique_id "apK9dzAh5Y1i2tUxg4EXlwAGEBE"]
[Sat Aug 29 05:07:35.745714 2026] [security2:error] [pid 1018003:tid 1018051] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/node/.env"] [unique_id "apK9dzAh5Y1i2tUxg4EXmQAGEB4"]
[Sat Aug 29 05:07:35.745722 2026] [security2:error] [pid 1018003:tid 1018136] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/node-api/.env"] [unique_id "apK9dzAh5Y1i2tUxg4EXmgAGEHM"]
[Sat Aug 29 05:07:35.745724 2026] [security2:error] [pid 1018003:tid 1018075] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/node/api/.env"] [unique_id "apK9dzAh5Y1i2tUxg4EXmAAGEDY"]
[Sat Aug 29 05:07:35.746177 2026] [security2:error] [pid 1018003:tid 1018040] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/opt/.env"] [unique_id "apK9dzAh5Y1i2tUxg4EXmwAGEBM"]
[Sat Aug 29 05:07:35.747214 2026] [security2:error] [pid 1018003:tid 1018033] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/nodeapi/.env"] [unique_id "apK9dzAh5Y1i2tUxg4EXnQAGEAw"]
[Sat Aug 29 05:07:35.747223 2026] [security2:error] [pid 1018003:tid 1018034] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/nodeweb/.env"] [unique_id "apK9dzAh5Y1i2tUxg4EXnAAGEA0"]
[Sat Aug 29 05:07:35.758121 2026] [security2:error] [pid 1018003:tid 1018191] [client 185.104.184.230:49164] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.jia.zbw.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "apK9dzAh5Y1i2tUxg4EXogAABeA"]
[Sat Aug 29 05:07:35.760402 2026] [core:error] [pid 1028675:tid 1028896] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.760417 2026] [core:error] [pid 1028675:tid 1028896] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.768486 2026] [security2:error] [pid 1028675:tid 1028912] [client 52.139.37.240:19338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/akcc.php"] [unique_id "apK9d9dHPfW2QFvhmL7qmAAAAGY"]
[Sat Aug 29 05:07:35.771500 2026] [security2:error] [pid 1018003:tid 1018055] [remote 35.231.104.225:42418] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.qandlcondos.com"] [uri "/apps/.env"] [unique_id "apK9dzAh5Y1i2tUxg4EXpAAGASI"]
[Sat Aug 29 05:07:35.772141 2026] [security2:error] [pid 1018003:tid 1018060] [remote 35.231.104.225:42418] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.qandlcondos.com"] [uri "/v2/.env"] [unique_id "apK9dzAh5Y1i2tUxg4EXpQAGASc"]
[Sat Aug 29 05:07:35.772337 2026] [core:error] [pid 1018003:tid 1018255] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.772350 2026] [core:error] [pid 1018003:tid 1018255] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.775259 2026] [security2:error] [pid 1028675:tid 1028927] [client 68.155.159.216:33728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-admin/index.php"] [unique_id "apK9d9dHPfW2QFvhmL7qmQAAAHU"]
[Sat Aug 29 05:07:35.775851 2026] [core:error] [pid 1018003:tid 1018161] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.775863 2026] [core:error] [pid 1018003:tid 1018161] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.780685 2026] [security2:error] [pid 1018003:tid 1018030] [remote 35.231.104.225:42418] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.qandlcondos.com"] [uri "/v1/.env"] [unique_id "apK9dzAh5Y1i2tUxg4EXqQAF-gk"]
[Sat Aug 29 05:07:35.780723 2026] [security2:error] [pid 1018003:tid 1018025] [remote 35.231.104.225:42418] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.qandlcondos.com"] [uri "/old/.env"] [unique_id "apK9dzAh5Y1i2tUxg4EXqgAF-gQ"]
[Sat Aug 29 05:07:35.783555 2026] [security2:error] [pid 1018003:tid 1018234] [client 52.139.37.240:37283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/breads1.php"] [unique_id "apK9dzAh5Y1i2tUxg4EXrQAABgo"]
[Sat Aug 29 05:07:35.786346 2026] [core:error] [pid 1028675:tid 1028889] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.786374 2026] [core:error] [pid 1028675:tid 1028889] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.787573 2026] [core:error] [pid 1018003:tid 1018169] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.787591 2026] [core:error] [pid 1018003:tid 1018169] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.791534 2026] [security2:error] [pid 1028675:tid 1028916] [client 20.63.81.20:20866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK9d9dHPfW2QFvhmL7qnAAAAGo"]
[Sat Aug 29 05:07:35.800167 2026] [security2:error] [pid 1018003:tid 1018188] [client 158.23.147.79:35767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/cong.php"] [unique_id "apK9dzAh5Y1i2tUxg4EXrwAABd0"]
[Sat Aug 29 05:07:35.837135 2026] [security2:error] [pid 1018003:tid 1018275] [client 35.194.208.44:33558] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/@fs/root/.openai/config.json"] [unique_id "apK9dzAh5Y1i2tUxg4EXtwAABjM"]
[Sat Aug 29 05:07:35.837875 2026] [security2:error] [pid 1028675:tid 1028881] [client 20.203.141.11:22304] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.newflooringhawaii.com"] [uri "/1.php"] [unique_id "apK9d9dHPfW2QFvhmL7qnwAAAEc"]
[Sat Aug 29 05:07:35.837955 2026] [security2:error] [pid 1028675:tid 1028881] [client 20.203.141.11:22304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/1.php"] [unique_id "apK9d9dHPfW2QFvhmL7qnwAAAEc"]
[Sat Aug 29 05:07:35.838729 2026] [security2:error] [pid 1018003:tid 1018189] [client 20.48.250.41:49028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/kbfr.php"] [unique_id "apK9dzAh5Y1i2tUxg4EXuAAABd4"]
[Sat Aug 29 05:07:35.844763 2026] [security2:error] [pid 1028675:tid 1028875] [client 158.158.54.35:24166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK9d9dHPfW2QFvhmL7qoAAAAEE"]
[Sat Aug 29 05:07:35.845794 2026] [security2:error] [pid 1018003:tid 1018177] [client 20.48.250.41:35116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/wp-act.php"] [unique_id "apK9dzAh5Y1i2tUxg4EXuQAABdI"]
[Sat Aug 29 05:07:35.848392 2026] [security2:error] [pid 1018003:tid 1018258] [client 52.139.37.240:32886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "luxuryweddingphotographer.com"] [uri "/contentloader1.php"] [unique_id "apK9dzAh5Y1i2tUxg4EXugAABiI"]
[Sat Aug 29 05:07:35.855443 2026] [security2:error] [pid 1018003:tid 1018222] [client 127.0.0.1:44502] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK9dzAh5Y1i2tUxg4EXrAAABf8"]
[Sat Aug 29 05:07:35.855498 2026] [security2:error] [pid 1018003:tid 1018190] [client 35.194.208.44:33544] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/@fs/home/ubuntu/.config/anthropic/credentials/default.json"] [unique_id "apK9dzAh5Y1i2tUxg4EXqAAABd8"]
[Sat Aug 29 05:07:35.883937 2026] [security2:error] [pid 1018003:tid 1018277] [client 40.83.93.50:6098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-content/classwithtostring.php"] [unique_id "apK9dzAh5Y1i2tUxg4EXvwAABjU"]
[Sat Aug 29 05:07:35.885960 2026] [security2:error] [pid 1028675:tid 1028727] [remote 34.138.144.127:58722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/staging/.env"] [unique_id "apK9d9dHPfW2QFvhmL7qqgAAbC4"]
[Sat Aug 29 05:07:35.886846 2026] [security2:error] [pid 1028675:tid 1028737] [remote 34.138.144.127:58722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/docker/.env"] [unique_id "apK9d9dHPfW2QFvhmL7qrAAAbDg"]
[Sat Aug 29 05:07:35.887049 2026] [security2:error] [pid 1028675:tid 1028733] [remote 34.138.144.127:58722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/production/.env"] [unique_id "apK9d9dHPfW2QFvhmL7qrQAAbDQ"]
[Sat Aug 29 05:07:35.888565 2026] [core:error] [pid 1028675:tid 1028713] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.888584 2026] [core:error] [pid 1028675:tid 1028713] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.891095 2026] [security2:error] [pid 1018003:tid 1018256] [client 195.178.110.247:57882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/index.php"] [unique_id "apK9dzAh5Y1i2tUxg4EXwAAABiA"]
[Sat Aug 29 05:07:35.905037 2026] [security2:error] [pid 1028675:tid 1028883] [client 35.194.208.44:33586] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/@fs/var/task/.env"] [unique_id "apK9d9dHPfW2QFvhmL7qsAAAAEk"]
[Sat Aug 29 05:07:35.920549 2026] [security2:error] [pid 1028675:tid 1028923] [client 20.48.250.41:49415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9d9dHPfW2QFvhmL7qsQAAAHE"]
[Sat Aug 29 05:07:35.921031 2026] [security2:error] [pid 1018003:tid 1018226] [client 20.104.104.62:25660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.horseventure-net.penmarketing.org"] [uri "/wp-content/about.php"] [unique_id "apK9dzAh5Y1i2tUxg4EXwgAABgM"]
[Sat Aug 29 05:07:35.928053 2026] [security2:error] [pid 1028675:tid 1028867] [client 35.194.208.44:33602] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/@fs/proc/self/cwd/.env"] [unique_id "apK9d9dHPfW2QFvhmL7qsgAAADk"]
[Sat Aug 29 05:07:35.928980 2026] [security2:error] [pid 1018003:tid 1018219] [client 52.139.37.240:51873] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "databases-ap.medulae.com"] [uri "/c99.php"] [unique_id "apK9dzAh5Y1i2tUxg4EXwwAABfw"]
[Sat Aug 29 05:07:35.930534 2026] [security2:error] [pid 1028675:tid 1028842] [client 20.63.81.20:20801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK9d9dHPfW2QFvhmL7qswAAACA"]
[Sat Aug 29 05:07:35.946041 2026] [core:error] [pid 1028675:tid 1028931] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.946070 2026] [core:error] [pid 1028675:tid 1028931] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.946782 2026] [security2:error] [pid 1028675:tid 1028861] [client 4.205.62.107:9164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/app/Models/Hrm/Employee.php"] [unique_id "apK9d9dHPfW2QFvhmL7qtQAAADM"]
[Sat Aug 29 05:07:35.951891 2026] [core:error] [pid 1018003:tid 1018250] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.952118 2026] [core:error] [pid 1018003:tid 1018250] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.954138 2026] [security2:error] [pid 1028675:tid 1028850] [client 158.23.147.79:53783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK9d9dHPfW2QFvhmL7qtwAAACg"]
[Sat Aug 29 05:07:35.965412 2026] [security2:error] [pid 1028675:tid 1028849] [client 4.205.62.107:53177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/goods.php"] [unique_id "apK9d9dHPfW2QFvhmL7quAAAACc"]
[Sat Aug 29 05:07:35.976458 2026] [security2:error] [pid 1028675:tid 1028820] [client 168.107.94.195:58673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9d9dHPfW2QFvhmL7qugAAAAo"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:35.976472 2026] [security2:error] [pid 1018003:tid 1018203] [client 20.48.250.41:35478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/24.php"] [unique_id "apK9dzAh5Y1i2tUxg4EXxgAABew"]
[Sat Aug 29 05:07:35.979759 2026] [security2:error] [pid 1028675:tid 1028914] [client 52.139.37.240:19371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK9d9dHPfW2QFvhmL7quwAAAGg"]
[Sat Aug 29 05:07:35.979991 2026] [core:error] [pid 1028675:tid 1028846] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.980001 2026] [core:error] [pid 1028675:tid 1028846] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:35.987314 2026] [security2:error] [pid 1028675:tid 1028823] [client 52.139.37.240:37258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/must.php"] [unique_id "apK9d9dHPfW2QFvhmL7qvAAAAA0"]
[Sat Aug 29 05:07:35.989455 2026] [security2:error] [pid 1028675:tid 1028907] [client 35.194.208.44:33606] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK9d9dHPfW2QFvhmL7qvQAAAGE"]
[Sat Aug 29 05:07:35.994638 2026] [security2:error] [pid 1028675:tid 1028856] [client 20.48.250.41:49104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/wp-act.php"] [unique_id "apK9d9dHPfW2QFvhmL7qwAAAAC4"]
[Sat Aug 29 05:07:36.002590 2026] [security2:error] [pid 1018003:tid 1018217] [client 20.104.104.62:20672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/success.php"] [unique_id "apK9eDAh5Y1i2tUxg4EXyAAABfo"]
[Sat Aug 29 05:07:36.003169 2026] [security2:error] [pid 1018003:tid 1018182] [client 20.203.141.11:11260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/bgymj.php"] [unique_id "apK9eDAh5Y1i2tUxg4EXyQAABdc"]
[Sat Aug 29 05:07:36.032092 2026] [core:error] [pid 1018003:tid 1018183] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.032118 2026] [core:error] [pid 1018003:tid 1018183] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.046365 2026] [core:error] [pid 1028675:tid 1028833] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.046391 2026] [core:error] [pid 1028675:tid 1028833] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.046390 2026] [core:error] [pid 1018003:tid 1018275] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.046403 2026] [core:error] [pid 1018003:tid 1018275] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.046513 2026] [core:error] [pid 1028675:tid 1028854] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.046521 2026] [core:error] [pid 1028675:tid 1028854] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.050301 2026] [core:error] [pid 1018003:tid 1018189] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.050323 2026] [core:error] [pid 1018003:tid 1018189] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.053990 2026] [security2:error] [pid 1028675:tid 1028824] [client 52.139.37.240:33175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "luxuryweddingphotographer.com"] [uri "/upfile.php"] [unique_id "apK9eNdHPfW2QFvhmL7qygAAAA4"]
[Sat Aug 29 05:07:36.056749 2026] [security2:error] [pid 1018003:tid 1018206] [client 158.23.147.79:26597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK9eDAh5Y1i2tUxg4EX1wAABe8"]
[Sat Aug 29 05:07:36.063066 2026] [security2:error] [pid 1018003:tid 1018261] [client 20.63.81.20:20899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/about.php"] [unique_id "apK9eDAh5Y1i2tUxg4EX2QAABiU"]
[Sat Aug 29 05:07:36.069141 2026] [security2:error] [pid 1018003:tid 1018118] [remote 35.231.104.225:42418] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.qandlcondos.com"] [uri "/portal/.env"] [unique_id "apK9eDAh5Y1i2tUxg4EX3AAGDmE"]
[Sat Aug 29 05:07:36.069408 2026] [security2:error] [pid 1018003:tid 1018076] [remote 35.231.104.225:42418] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.qandlcondos.com"] [uri "/.docker/.env"] [unique_id "apK9eDAh5Y1i2tUxg4EX3QAGDjc"]
[Sat Aug 29 05:07:36.074012 2026] [security2:error] [pid 1028675:tid 1028889] [client 20.48.250.41:65235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9eNdHPfW2QFvhmL7qywAAAE8"]
[Sat Aug 29 05:07:36.084953 2026] [core:error] [pid 1028675:tid 1028871] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.084969 2026] [core:error] [pid 1028675:tid 1028871] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.097949 2026] [core:error] [pid 1028675:tid 1028897] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.097964 2026] [core:error] [pid 1028675:tid 1028897] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.118095 2026] [security2:error] [pid 1018003:tid 1018179] [client 20.104.104.62:25621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.horseventure-net.penmarketing.org"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "apK9eDAh5Y1i2tUxg4EX3gAABdQ"]
[Sat Aug 29 05:07:36.120944 2026] [security2:error] [pid 1028675:tid 1028848] [client 52.139.37.240:3329] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "databases-ap.medulae.com"] [uri "/c99.php"] [unique_id "apK9eNdHPfW2QFvhmL7qzgAAACY"]
[Sat Aug 29 05:07:36.128304 2026] [security2:error] [pid 1028675:tid 1028819] [client 20.48.250.41:49107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/24.php"] [unique_id "apK9eNdHPfW2QFvhmL7qzwAAAAk"]
[Sat Aug 29 05:07:36.136584 2026] [security2:error] [pid 1028675:tid 1028719] [remote 34.138.144.127:58722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/apps/.env"] [unique_id "apK9eNdHPfW2QFvhmL7q0QAAQyY"]
[Sat Aug 29 05:07:36.138824 2026] [core:error] [pid 1028675:tid 1028703] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.138849 2026] [core:error] [pid 1028675:tid 1028703] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.139088 2026] [security2:error] [pid 1028675:tid 1028922] [client 20.48.250.41:35127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/155.php"] [unique_id "apK9eNdHPfW2QFvhmL7q1QAAAHA"]
[Sat Aug 29 05:07:36.153711 2026] [security2:error] [pid 1018003:tid 1018152] [client 103.171.189.88:58970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9eDAh5Y1i2tUxg4EX5AAABbk"]
[Sat Aug 29 05:07:36.153793 2026] [security2:error] [pid 1018003:tid 1018152] [client 103.171.189.88:58970] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9eDAh5Y1i2tUxg4EX5AAABbk"]
[Sat Aug 29 05:07:36.164515 2026] [security2:error] [pid 1018003:tid 1018067] [remote 35.231.104.225:42418] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.qandlcondos.com"] [uri "/site/.env"] [unique_id "apK9eDAh5Y1i2tUxg4EX5gAF7C4"]
[Sat Aug 29 05:07:36.173498 2026] [security2:error] [pid 1018003:tid 1018174] [client 52.139.37.240:18823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/s.php"] [unique_id "apK9eDAh5Y1i2tUxg4EX5wAABc8"]
[Sat Aug 29 05:07:36.174209 2026] [core:error] [pid 1028675:tid 1028842] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.174220 2026] [core:error] [pid 1028675:tid 1028842] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.176431 2026] [core:error] [pid 1028675:tid 1028867] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.176455 2026] [core:error] [pid 1028675:tid 1028867] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.177148 2026] [security2:error] [pid 1028675:tid 1028937] [client 158.158.54.35:20554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/404.php"] [unique_id "apK9eNdHPfW2QFvhmL7q3AAAAH8"]
[Sat Aug 29 05:07:36.179775 2026] [security2:error] [pid 1028675:tid 1028881] [client 52.139.37.240:37251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/up.php"] [unique_id "apK9eNdHPfW2QFvhmL7q3QAAAEc"]
[Sat Aug 29 05:07:36.193273 2026] [security2:error] [pid 1028675:tid 1028904] [client 20.63.81.20:20932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/admin.php/admin.php"] [unique_id "apK9eNdHPfW2QFvhmL7q3gAAAF4"]
[Sat Aug 29 05:07:36.208711 2026] [security2:error] [pid 1028675:tid 1028892] [client 146.70.194.254:57200] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "modelbasenjis.com"] [uri "/cgi-sys/suspendedpage.cgi/test/wp-includes/wlwmanifest.xml"] [unique_id "apK9eNdHPfW2QFvhmL7q4QAAAFI"]
[Sat Aug 29 05:07:36.209887 2026] [core:error] [pid 1028675:tid 1028919] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.209906 2026] [core:error] [pid 1028675:tid 1028919] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.210516 2026] [core:error] [pid 1028675:tid 1028862] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.210531 2026] [core:error] [pid 1028675:tid 1028862] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.210913 2026] [core:error] [pid 1028675:tid 1028900] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.210922 2026] [core:error] [pid 1028675:tid 1028900] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.215986 2026] [security2:error] [pid 1018003:tid 1018170] [client 20.48.250.41:49491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/ff1.php"] [unique_id "apK9eDAh5Y1i2tUxg4EX7AAABcs"]
[Sat Aug 29 05:07:36.216524 2026] [security2:error] [pid 1028675:tid 1028726] [remote 34.138.144.127:58722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/v2/.env"] [unique_id "apK9eNdHPfW2QFvhmL7q4wAAFy0"]
[Sat Aug 29 05:07:36.217499 2026] [security2:error] [pid 1028675:tid 1028720] [remote 34.138.144.127:58722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/old/.env"] [unique_id "apK9eNdHPfW2QFvhmL7q5QAAFyc"]
[Sat Aug 29 05:07:36.219134 2026] [security2:error] [pid 1018003:tid 1018066] [remote 35.231.104.225:42418] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.qandlcondos.com"] [uri "/env.bak"] [unique_id "apK9eDAh5Y1i2tUxg4EX6gAFxS0"]
[Sat Aug 29 05:07:36.219708 2026] [security2:error] [pid 1028675:tid 1028726] [remote 34.138.144.127:58722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/v1/.env"] [unique_id "apK9eNdHPfW2QFvhmL7q5gAAFy0"]
[Sat Aug 29 05:07:36.221543 2026] [core:error] [pid 1028675:tid 1028724] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.221558 2026] [core:error] [pid 1028675:tid 1028724] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.248202 2026] [security2:error] [pid 1028675:tid 1028820] [client 52.139.37.240:32841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "luxuryweddingphotographer.com"] [uri "/form.php"] [unique_id "apK9eNdHPfW2QFvhmL7q6QAAAAo"]
[Sat Aug 29 05:07:36.268784 2026] [security2:error] [pid 1018003:tid 1018169] [client 158.23.147.79:48187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/images/index.php"] [unique_id "apK9eDAh5Y1i2tUxg4EX8AAABco"]
[Sat Aug 29 05:07:36.275608 2026] [security2:error] [pid 1018003:tid 1018089] [remote 35.231.104.225:42418] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "www.qandlcondos.com"] [uri "/env.old"] [unique_id "apK9eDAh5Y1i2tUxg4EX8QAF0EQ"]
[Sat Aug 29 05:07:36.277146 2026] [security2:error] [pid 1028675:tid 1028830] [client 158.158.54.35:32829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/xda.php"] [unique_id "apK9eNdHPfW2QFvhmL7q6wAAABQ"]
[Sat Aug 29 05:07:36.278461 2026] [security2:error] [pid 1018003:tid 1018273] [client 158.23.147.79:17469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/goat.php"] [unique_id "apK9eDAh5Y1i2tUxg4EX8wAABjE"]
[Sat Aug 29 05:07:36.313377 2026] [security2:error] [pid 1018003:tid 1018069] [remote 35.231.104.225:42418] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.qandlcondos.com"] [uri "/api/.env.bak"] [unique_id "apK9eDAh5Y1i2tUxg4EX9AAGBzA"]
[Sat Aug 29 05:07:36.314418 2026] [security2:error] [pid 1028675:tid 1028925] [client 34.81.157.26:31082] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/@fs/home/ubuntu/.openai/config.json"] [unique_id "apK9eNdHPfW2QFvhmL7q9gAAAHM"]
[Sat Aug 29 05:07:36.316755 2026] [security2:error] [pid 1028675:tid 1028886] [client 34.81.157.26:31116] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/@fs/var/task/.env"] [unique_id "apK9eNdHPfW2QFvhmL7q-wAAAEw"]
[Sat Aug 29 05:07:36.316850 2026] [security2:error] [pid 1028675:tid 1028886] [client 34.81.157.26:31116] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/@fs/var/task/.env"] [unique_id "apK9eNdHPfW2QFvhmL7q-wAAAEw"]
[Sat Aug 29 05:07:36.317070 2026] [security2:error] [pid 1028675:tid 1028873] [client 52.139.37.240:3341] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "databases-ap.medulae.com"] [uri "/c99.php"] [unique_id "apK9eNdHPfW2QFvhmL7q_AAAAD8"]
[Sat Aug 29 05:07:36.317946 2026] [security2:error] [pid 1028675:tid 1028681] [remote 34.138.144.127:58722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/site/.env"] [unique_id "apK9eNdHPfW2QFvhmL7q-QAAdAE"]
[Sat Aug 29 05:07:36.318741 2026] [security2:error] [pid 1028675:tid 1028849] [client 34.81.157.26:31066] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/cgi-sys/404.html"] [unique_id "apK9eNdHPfW2QFvhmL7q-gAAACc"]
[Sat Aug 29 05:07:36.321143 2026] [core:error] [pid 1028675:tid 1028793] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.321159 2026] [core:error] [pid 1028675:tid 1028793] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.321678 2026] [core:error] [pid 1028675:tid 1028741] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.321693 2026] [core:error] [pid 1028675:tid 1028741] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.322281 2026] [security2:error] [pid 1028675:tid 1028897] [client 4.205.62.107:22431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/maxro.php"] [unique_id "apK9eNdHPfW2QFvhmL7q_QAAAFc"]
[Sat Aug 29 05:07:36.324667 2026] [security2:error] [pid 1028675:tid 1028832] [client 20.48.250.41:35084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/file.php"] [unique_id "apK9eNdHPfW2QFvhmL7q_gAAABY"]
[Sat Aug 29 05:07:36.327483 2026] [security2:error] [pid 1028675:tid 1028832] [client 20.63.81.20:20879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/media.php"] [unique_id "apK9eNdHPfW2QFvhmL7rAQAAABY"]
[Sat Aug 29 05:07:36.332789 2026] [security2:error] [pid 1018003:tid 1018224] [client 34.81.157.26:31128] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/@fs/proc/self/cwd/.env"] [unique_id "apK9eDAh5Y1i2tUxg4EX9wAABgE"]
[Sat Aug 29 05:07:36.339636 2026] [security2:error] [pid 1028675:tid 1028730] [remote 34.138.144.127:58722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/.docker/.env"] [unique_id "apK9eNdHPfW2QFvhmL7rBAAANTE"]
[Sat Aug 29 05:07:36.340120 2026] [security2:error] [pid 1018003:tid 1018189] [client 20.48.250.41:49134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/155.php"] [unique_id "apK9eDAh5Y1i2tUxg4EX-QAABd4"]
[Sat Aug 29 05:07:36.341966 2026] [core:error] [pid 1028675:tid 1028739] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.341982 2026] [core:error] [pid 1028675:tid 1028739] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.345506 2026] [http2:warn] [pid 1017536:tid 1017719] [client 57.141.14.14:64940] h2_stream(1017536-392-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:07:36.351555 2026] [security2:error] [pid 1028675:tid 1028901] [client 40.83.93.50:5598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-content/config.php"] [unique_id "apK9eNdHPfW2QFvhmL7rCAAAAFs"]
[Sat Aug 29 05:07:36.352182 2026] [security2:error] [pid 1028675:tid 1028877] [client 20.104.104.62:20705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/swm@asd365.php"] [unique_id "apK9eNdHPfW2QFvhmL7rCQAAAEM"]
[Sat Aug 29 05:07:36.354785 2026] [security2:error] [pid 1028675:tid 1028815] [client 34.81.157.26:31150] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK9eNdHPfW2QFvhmL7rDAAAAAU"]
[Sat Aug 29 05:07:36.357659 2026] [security2:error] [pid 1028675:tid 1028896] [client 168.107.94.195:59055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9eNdHPfW2QFvhmL7rDQAAAFY"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:36.358025 2026] [security2:error] [pid 1018003:tid 1018271] [client 34.81.157.26:31154] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/@fs/proc/1/environ"] [unique_id "apK9eDAh5Y1i2tUxg4EX-gAABi8"]
[Sat Aug 29 05:07:36.362169 2026] [authz_core:error] [pid 1028675:tid 1028932] [client 20.203.141.11:38147] AH01630: client denied by server configuration: /home2/newfloo1/public_html/wp-admin/error_log
[Sat Aug 29 05:07:36.369304 2026] [security2:error] [pid 1028675:tid 1028855] [client 185.104.184.230:49166] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.jia.zbw.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/wp/wp-includes/wlwmanifest.xml"] [unique_id "apK9eNdHPfW2QFvhmL7rEQAAAC0"]
[Sat Aug 29 05:07:36.370986 2026] [security2:error] [pid 1028675:tid 1028889] [client 52.139.37.240:19315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/sagax.php"] [unique_id "apK9eNdHPfW2QFvhmL7rEgAAAE8"]
[Sat Aug 29 05:07:36.381307 2026] [security2:error] [pid 1028675:tid 1028734] [remote 34.138.144.127:58722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/portal/.env"] [unique_id "apK9eNdHPfW2QFvhmL7rFAAAOTU"]
[Sat Aug 29 05:07:36.386172 2026] [security2:error] [pid 1018003:tid 1018072] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/php-info.php"] [unique_id "apK9eDAh5Y1i2tUxg4EX_QAF2zM"]
[Sat Aug 29 05:07:36.387959 2026] [security2:error] [pid 1018003:tid 1018090] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/php.php"] [unique_id "apK9eDAh5Y1i2tUxg4EX_gAF20U"]
[Sat Aug 29 05:07:36.389684 2026] [security2:error] [pid 1018003:tid 1018105] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/php_info.php"] [unique_id "apK9eDAh5Y1i2tUxg4EX_wAF21Q"]
[Sat Aug 29 05:07:36.401037 2026] [security2:error] [pid 1018003:tid 1018156] [client 20.48.250.41:65362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/t.php"] [unique_id "apK9eDAh5Y1i2tUxg4EYAAAABb0"]
[Sat Aug 29 05:07:36.407145 2026] [core:error] [pid 1028675:tid 1028845] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.407164 2026] [core:error] [pid 1028675:tid 1028845] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.407628 2026] [core:error] [pid 1028675:tid 1028857] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.407645 2026] [core:error] [pid 1028675:tid 1028857] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.408170 2026] [security2:error] [pid 1028675:tid 1028699] [remote 34.138.144.127:58722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/env.bak"] [unique_id "apK9eNdHPfW2QFvhmL7rGAAADRI"]
[Sat Aug 29 05:07:36.450700 2026] [security2:error] [pid 1028675:tid 1028937] [client 52.139.37.240:32876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "luxuryweddingphotographer.com"] [uri "/wp-sigunq.php"] [unique_id "apK9eNdHPfW2QFvhmL7rHAAAAH8"]
[Sat Aug 29 05:07:36.455192 2026] [security2:error] [pid 1028675:tid 1028813] [client 158.23.147.79:50090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-content/admin.php"] [unique_id "apK9eNdHPfW2QFvhmL7rHQAAAAM"]
[Sat Aug 29 05:07:36.456499 2026] [security2:error] [pid 1028675:tid 1028930] [client 52.139.37.240:37740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/wp-content/155.php"] [unique_id "apK9eNdHPfW2QFvhmL7rHwAAAHg"]
[Sat Aug 29 05:07:36.460010 2026] [core:error] [pid 1028675:tid 1028828] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.460029 2026] [core:error] [pid 1028675:tid 1028828] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.465482 2026] [security2:error] [pid 1028675:tid 1028833] [client 20.63.81.20:20871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/mac.php"] [unique_id "apK9eNdHPfW2QFvhmL7rIAAAABc"]
[Sat Aug 29 05:07:36.469611 2026] [security2:error] [pid 1028675:tid 1028858] [client 20.203.141.11:6596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK9eNdHPfW2QFvhmL7rIQAAADA"]
[Sat Aug 29 05:07:36.481460 2026] [security2:error] [pid 1018003:tid 1018207] [client 20.48.250.41:35505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK9eDAh5Y1i2tUxg4EYCAAABfA"]
[Sat Aug 29 05:07:36.482949 2026] [security2:error] [pid 1018003:tid 1018058] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/prod/.env"] [unique_id "apK9eDAh5Y1i2tUxg4EYBgAGAyU"]
[Sat Aug 29 05:07:36.483235 2026] [security2:error] [pid 1018003:tid 1018116] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/portal/.env"] [unique_id "apK9eDAh5Y1i2tUxg4EYBQAGA18"]
[Sat Aug 29 05:07:36.483888 2026] [security2:error] [pid 1018003:tid 1018167] [client 20.48.250.41:49027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/file.php"] [unique_id "apK9eDAh5Y1i2tUxg4EYCgAABcg"]
[Sat Aug 29 05:07:36.491227 2026] [core:error] [pid 1018003:tid 1018097] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.491251 2026] [core:error] [pid 1018003:tid 1018097] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.495936 2026] [core:error] [pid 1018003:tid 1018121] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.495958 2026] [core:error] [pid 1018003:tid 1018121] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.514380 2026] [security2:error] [pid 1028675:tid 1028883] [client 20.104.49.130:48585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/ano.php"] [unique_id "apK9eNdHPfW2QFvhmL7rJwAAAEk"]
[Sat Aug 29 05:07:36.531062 2026] [core:error] [pid 1018003:tid 1018191] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.531084 2026] [core:error] [pid 1018003:tid 1018191] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.532387 2026] [core:error] [pid 1028675:tid 1028886] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.532404 2026] [core:error] [pid 1028675:tid 1028886] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.534462 2026] [security2:error] [pid 1018003:tid 1018112] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/phpinfo.php"] [unique_id "apK9eDAh5Y1i2tUxg4EYEwAGA1s"]
[Sat Aug 29 05:07:36.547318 2026] [security2:error] [pid 1028675:tid 1028847] [client 4.205.62.107:65452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/fff.php"] [unique_id "apK9eNdHPfW2QFvhmL7rKwAAACU"]
[Sat Aug 29 05:07:36.548922 2026] [security2:error] [pid 1028675:tid 1028832] [client 68.155.159.216:64476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/content.php"] [unique_id "apK9eNdHPfW2QFvhmL7rLAAAABY"]
[Sat Aug 29 05:07:36.566825 2026] [core:error] [pid 1018003:tid 1018246] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.566852 2026] [core:error] [pid 1018003:tid 1018246] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.575665 2026] [security2:error] [pid 1018003:tid 1018029] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/product/.env"] [unique_id "apK9eDAh5Y1i2tUxg4EYFwAGHAg"]
[Sat Aug 29 05:07:36.579217 2026] [core:error] [pid 1018003:tid 1018098] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.579237 2026] [core:error] [pid 1018003:tid 1018098] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.585090 2026] [security2:error] [pid 1018003:tid 1018234] [client 20.151.200.44:46635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/blox.php"] [unique_id "apK9eDAh5Y1i2tUxg4EYGwAABgo"]
[Sat Aug 29 05:07:36.586854 2026] [security2:error] [pid 1018003:tid 1018125] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/production/.env"] [unique_id "apK9eDAh5Y1i2tUxg4EYGQAF4Wg"]
[Sat Aug 29 05:07:36.591802 2026] [security2:error] [pid 1018003:tid 1018183] [client 4.205.62.107:58388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/temp.php"] [unique_id "apK9eDAh5Y1i2tUxg4EYHwAABdg"]
[Sat Aug 29 05:07:36.593335 2026] [security2:error] [pid 1018003:tid 1018180] [client 20.48.250.41:49460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/erty.php"] [unique_id "apK9eDAh5Y1i2tUxg4EYIQAABdU"]
[Sat Aug 29 05:07:36.606870 2026] [security2:error] [pid 1018003:tid 1018240] [client 20.63.81.20:20907] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.peakperformanceplus.com"] [uri "/1.php"] [unique_id "apK9eDAh5Y1i2tUxg4EYJAAABhA"]
[Sat Aug 29 05:07:36.607064 2026] [security2:error] [pid 1018003:tid 1018240] [client 20.63.81.20:20907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/1.php"] [unique_id "apK9eDAh5Y1i2tUxg4EYJAAABhA"]
[Sat Aug 29 05:07:36.614632 2026] [security2:error] [pid 1028675:tid 1028866] [client 158.158.54.35:16952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/php.php"] [unique_id "apK9eNdHPfW2QFvhmL7rMQAAADg"]
[Sat Aug 29 05:07:36.616413 2026] [core:error] [pid 1028675:tid 1028928] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.616429 2026] [core:error] [pid 1028675:tid 1028928] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.630118 2026] [security2:error] [pid 1018003:tid 1018258] [client 20.104.49.130:36296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/menu.php"] [unique_id "apK9eDAh5Y1i2tUxg4EYJQAABiI"]
[Sat Aug 29 05:07:36.639054 2026] [security2:error] [pid 1028675:tid 1028919] [client 20.151.200.44:64634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/13ede.php"] [unique_id "apK9eNdHPfW2QFvhmL7rMwAAAG0"]
[Sat Aug 29 05:07:36.644245 2026] [security2:error] [pid 1028675:tid 1028862] [client 20.48.250.41:49054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK9eNdHPfW2QFvhmL7rNAAAADQ"]
[Sat Aug 29 05:07:36.644535 2026] [security2:error] [pid 1018003:tid 1018170] [client 52.139.37.240:32845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "luxuryweddingphotographer.com"] [uri "/07.php"] [unique_id "apK9eDAh5Y1i2tUxg4EYJwAABcs"]
[Sat Aug 29 05:07:36.650398 2026] [security2:error] [pid 1028675:tid 1028840] [client 20.104.49.130:65224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/wp-login.php"] [unique_id "apK9eNdHPfW2QFvhmL7rNgAAAB4"]
[Sat Aug 29 05:07:36.650530 2026] [security2:error] [pid 1018003:tid 1018146] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/project/.env"] [unique_id "apK9eDAh5Y1i2tUxg4EYKAAGAX0"]
[Sat Aug 29 05:07:36.655063 2026] [security2:error] [pid 1028675:tid 1028911] [client 20.203.141.11:38147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/s.php"] [unique_id "apK9eNdHPfW2QFvhmL7rOAAAAGU"]
[Sat Aug 29 05:07:36.656207 2026] [security2:error] [pid 1028675:tid 1028881] [client 52.139.37.240:37135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/wp-update.php"] [unique_id "apK9eNdHPfW2QFvhmL7rOQAAAEc"]
[Sat Aug 29 05:07:36.657446 2026] [security2:error] [pid 1018003:tid 1018107] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/public/phpinfo.php"] [unique_id "apK9eDAh5Y1i2tUxg4EYKwAGAVY"]
[Sat Aug 29 05:07:36.658008 2026] [security2:error] [pid 1018003:tid 1018027] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/public-api/.env"] [unique_id "apK9eDAh5Y1i2tUxg4EYKgAGAQY"]
[Sat Aug 29 05:07:36.658027 2026] [security2:error] [pid 1018003:tid 1018140] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/public/.env"] [unique_id "apK9eDAh5Y1i2tUxg4EYLQAGAXc"]
[Sat Aug 29 05:07:36.660616 2026] [core:error] [pid 1018003:tid 1018073] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.660639 2026] [core:error] [pid 1018003:tid 1018073] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.666769 2026] [security2:error] [pid 1018003:tid 1018198] [client 52.139.37.240:19328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/wp-content/plugins/ftde.php"] [unique_id "apK9eDAh5Y1i2tUxg4EYLwAABec"]
[Sat Aug 29 05:07:36.667945 2026] [security2:error] [pid 1018003:tid 1018185] [client 20.48.250.41:35464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/06.php"] [unique_id "apK9eDAh5Y1i2tUxg4EYMAAABdo"]
[Sat Aug 29 05:07:36.669369 2026] [core:error] [pid 1028675:tid 1028884] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.669383 2026] [core:error] [pid 1028675:tid 1028884] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.679281 2026] [core:error] [pid 1018003:tid 1018261] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.679296 2026] [core:error] [pid 1018003:tid 1018261] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.683328 2026] [security2:error] [pid 1018003:tid 1018156] [client 20.104.104.62:25663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.horseventure-net.penmarketing.org"] [uri "/xmlrpc.php"] [unique_id "apK9eDAh5Y1i2tUxg4EYLgAABb0"]
[Sat Aug 29 05:07:36.698758 2026] [security2:error] [pid 1028675:tid 1028690] [remote 34.138.144.127:58722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/env.old"] [unique_id "apK9eNdHPfW2QFvhmL7rOwAAUAo"]
[Sat Aug 29 05:07:36.700926 2026] [security2:error] [pid 1018003:tid 1018141] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/qa/.env"] [unique_id "apK9eDAh5Y1i2tUxg4EYMwAFzXg"]
[Sat Aug 29 05:07:36.701063 2026] [security2:error] [pid 1018003:tid 1018065] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/public_html/.env"] [unique_id "apK9eDAh5Y1i2tUxg4EYMgAFzSw"]
[Sat Aug 29 05:07:36.703408 2026] [core:error] [pid 1028675:tid 1028693] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.703424 2026] [core:error] [pid 1028675:tid 1028693] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.720242 2026] [security2:error] [pid 1028675:tid 1028725] [remote 34.138.144.127:58722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/api/.env.bak"] [unique_id "apK9eNdHPfW2QFvhmL7rPgAACiw"]
[Sat Aug 29 05:07:36.720335 2026] [security2:error] [pid 1028675:tid 1028839] [client 4.205.62.107:21626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/paypal.php"] [unique_id "apK9eNdHPfW2QFvhmL7rPwAAAB0"]
[Sat Aug 29 05:07:36.721338 2026] [security2:error] [pid 1028675:tid 1028855] [client 158.158.54.35:22408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/theme.php"] [unique_id "apK9eNdHPfW2QFvhmL7rQAAAAC0"]
[Sat Aug 29 05:07:36.721844 2026] [core:error] [pid 1028675:tid 1028708] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.721857 2026] [core:error] [pid 1028675:tid 1028708] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.737704 2026] [security2:error] [pid 1028675:tid 1028858] [client 168.107.94.195:59418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9eNdHPfW2QFvhmL7rQQAAADA"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:36.741287 2026] [security2:error] [pid 1018003:tid 1018207] [client 68.155.159.216:38657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-includes/css/index.php"] [unique_id "apK9eDAh5Y1i2tUxg4EYNwAABfA"]
[Sat Aug 29 05:07:36.742748 2026] [core:error] [pid 1028675:tid 1028717] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.742763 2026] [core:error] [pid 1028675:tid 1028717] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.746144 2026] [core:error] [pid 1028675:tid 1028722] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.746161 2026] [core:error] [pid 1028675:tid 1028722] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.753350 2026] [security2:error] [pid 1018003:tid 1018250] [client 20.63.81.20:20887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/classwithtostring.php"] [unique_id "apK9eDAh5Y1i2tUxg4EYPwAABho"]
[Sat Aug 29 05:07:36.753376 2026] [security2:error] [pid 1018003:tid 1018233] [client 158.23.147.79:32616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-mail.php"] [unique_id "apK9eDAh5Y1i2tUxg4EYQQAABgk"]
[Sat Aug 29 05:07:36.763179 2026] [core:error] [pid 1028675:tid 1028841] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.763197 2026] [core:error] [pid 1028675:tid 1028841] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.765873 2026] [security2:error] [pid 1028675:tid 1028883] [client 20.48.250.41:65242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/0x.php"] [unique_id "apK9eNdHPfW2QFvhmL7rSQAAAEk"]
[Sat Aug 29 05:07:36.765968 2026] [core:error] [pid 1018003:tid 1018152] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.765978 2026] [core:error] [pid 1018003:tid 1018152] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.768104 2026] [core:error] [pid 1018003:tid 1018221] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.768121 2026] [core:error] [pid 1018003:tid 1018221] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.768623 2026] [core:error] [pid 1028675:tid 1028879] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.768635 2026] [core:error] [pid 1028675:tid 1028879] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.771850 2026] [security2:error] [pid 1028675:tid 1028925] [client 20.104.104.62:64751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/smtphec.php"] [unique_id "apK9eNdHPfW2QFvhmL7rTQAAAHM"]
[Sat Aug 29 05:07:36.771965 2026] [core:error] [pid 1028675:tid 1028861] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.771974 2026] [core:error] [pid 1028675:tid 1028861] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.776895 2026] [core:error] [pid 1018003:tid 1018174] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.776911 2026] [core:error] [pid 1018003:tid 1018174] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.779646 2026] [security2:error] [pid 1028675:tid 1028843] [client 213.209.159.223:11821] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_webdisk/.env"] [unique_id "apK9eNdHPfW2QFvhmL7rTgAAACE"]
[Sat Aug 29 05:07:36.785420 2026] [security2:error] [pid 1028675:tid 1028821] [client 202.71.25.11:51118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.25.71.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK9eNdHPfW2QFvhmL7rRAAAAAs"]
[Sat Aug 29 05:07:36.785545 2026] [security2:error] [pid 1028675:tid 1028821] [client 202.71.25.11:51118] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK9eNdHPfW2QFvhmL7rRAAAAAs"]
[Sat Aug 29 05:07:36.791167 2026] [core:error] [pid 1018003:tid 1018180] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.791180 2026] [core:error] [pid 1018003:tid 1018180] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.794819 2026] [security2:error] [pid 1028675:tid 1028859] [client 35.204.197.107:32768] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "www.unitedprocessing.lifesosweet.com"] [uri "/"] [unique_id "apK9eNdHPfW2QFvhmL7rTwAAADE"]
[Sat Aug 29 05:07:36.794879 2026] [security2:error] [pid 1028675:tid 1028859] [client 35.204.197.107:32768] ModSecurity: Warning. Matched phrase "Scrapy" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.unitedprocessing.lifesosweet.com"] [uri "/"] [unique_id "apK9eNdHPfW2QFvhmL7rTwAAADE"]
[Sat Aug 29 05:07:36.821696 2026] [security2:error] [pid 1018003:tid 1018277] [client 40.83.93.50:15715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-content/cong.php"] [unique_id "apK9eDAh5Y1i2tUxg4EYUAAABjU"]
[Sat Aug 29 05:07:36.829388 2026] [security2:error] [pid 1018003:tid 1018169] [client 20.48.250.41:49029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/06.php"] [unique_id "apK9eDAh5Y1i2tUxg4EYUgAABco"]
[Sat Aug 29 05:07:36.831840 2026] [security2:error] [pid 1028675:tid 1028877] [client 20.48.250.41:35030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/class.php"] [unique_id "apK9eNdHPfW2QFvhmL7rUwAAAEM"]
[Sat Aug 29 05:07:36.844311 2026] [security2:error] [pid 1028675:tid 1028886] [client 52.139.37.240:32878] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "luxuryweddingphotographer.com"] [uri "/c99.php"] [unique_id "apK9eNdHPfW2QFvhmL7rVwAAAEw"]
[Sat Aug 29 05:07:36.849372 2026] [core:error] [pid 1028675:tid 1028929] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.849392 2026] [core:error] [pid 1028675:tid 1028929] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.850747 2026] [core:error] [pid 1028675:tid 1028814] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.850761 2026] [core:error] [pid 1028675:tid 1028814] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.852616 2026] [core:error] [pid 1028675:tid 1028866] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.852633 2026] [core:error] [pid 1028675:tid 1028866] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.852835 2026] [core:error] [pid 1028675:tid 1028916] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.852846 2026] [core:error] [pid 1028675:tid 1028916] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.853148 2026] [core:error] [pid 1028675:tid 1028880] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.853156 2026] [core:error] [pid 1028675:tid 1028880] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.853334 2026] [security2:error] [pid 1018003:tid 1018216] [client 52.139.37.240:37293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/xmrlpc.php"] [unique_id "apK9eDAh5Y1i2tUxg4EYVwAABfk"]
[Sat Aug 29 05:07:36.855876 2026] [core:error] [pid 1018003:tid 1018188] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.855891 2026] [core:error] [pid 1018003:tid 1018188] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.856032 2026] [security2:error] [pid 1018003:tid 1018273] [client 52.139.37.240:18829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "apK9eDAh5Y1i2tUxg4EYWAAABjE"]
[Sat Aug 29 05:07:36.868723 2026] [security2:error] [pid 1028675:tid 1028812] [client 213.209.159.223:61715] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_whm/.env"] [unique_id "apK9eNdHPfW2QFvhmL7rYQAAAAI"]
[Sat Aug 29 05:07:36.869697 2026] [security2:error] [pid 1028675:tid 1028811] [client 158.23.147.79:25457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK9eNdHPfW2QFvhmL7rYgAAAAE"]
[Sat Aug 29 05:07:36.883586 2026] [core:error] [pid 1018003:tid 1018170] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.883602 2026] [core:error] [pid 1018003:tid 1018170] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.884406 2026] [security2:error] [pid 1028675:tid 1028844] [client 20.63.81.20:20935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/wp-ws68.php"] [unique_id "apK9eNdHPfW2QFvhmL7raQAAACI"]
[Sat Aug 29 05:07:36.884563 2026] [core:error] [pid 1028675:tid 1028872] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.884572 2026] [core:error] [pid 1028675:tid 1028872] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.893744 2026] [security2:error] [pid 1028675:tid 1028839] [client 213.209.159.223:48023] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/.env"] [unique_id "apK9eNdHPfW2QFvhmL7rawAAAB0"]
[Sat Aug 29 05:07:36.901109 2026] [core:error] [pid 1028675:tid 1028855] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.901124 2026] [core:error] [pid 1028675:tid 1028855] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.908011 2026] [access_compat:error] [pid 1028675:tid 1028909] [client 67.20.76.220:53272] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:07:36.917112 2026] [core:error] [pid 1028675:tid 1028749] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.917135 2026] [core:error] [pid 1028675:tid 1028749] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.921949 2026] [security2:error] [pid 1028675:tid 1028910] [client 213.209.159.223:11821] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_webdisk/api/.env"] [unique_id "apK9eNdHPfW2QFvhmL7rcAAAAGQ"]
[Sat Aug 29 05:07:36.944777 2026] [security2:error] [pid 1028675:tid 1028931] [client 20.104.104.62:25809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.horseventure-net.penmarketing.org"] [uri "/test1.php"] [unique_id "apK9eNdHPfW2QFvhmL7rdAAAAHk"]
[Sat Aug 29 05:07:36.947005 2026] [access_compat:error] [pid 1018003:tid 1018206] [client 67.20.76.220:53326] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:07:36.955798 2026] [security2:error] [pid 1018003:tid 1018175] [client 149.34.210.141:63951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9eDAh5Y1i2tUxg4EYYwAABdA"]
[Sat Aug 29 05:07:36.955934 2026] [security2:error] [pid 1018003:tid 1018175] [client 149.34.210.141:63951] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9eDAh5Y1i2tUxg4EYYwAABdA"]
[Sat Aug 29 05:07:36.959418 2026] [security2:error] [pid 1028675:tid 1028926] [client 20.48.250.41:65317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/66.php"] [unique_id "apK9eNdHPfW2QFvhmL7reQAAAHQ"]
[Sat Aug 29 05:07:36.968443 2026] [security2:error] [pid 1028675:tid 1028813] [client 185.104.184.230:49182] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.jia.zbw.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/news/wp-includes/wlwmanifest.xml"] [unique_id "apK9eNdHPfW2QFvhmL7rewAAAAM"]
[Sat Aug 29 05:07:36.974090 2026] [security2:error] [pid 1028675:tid 1028821] [client 20.48.250.41:49121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/class.php"] [unique_id "apK9eNdHPfW2QFvhmL7rfAAAAAs"]
[Sat Aug 29 05:07:36.982183 2026] [security2:error] [pid 1028675:tid 1028901] [client 20.48.250.41:35096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/8.php"] [unique_id "apK9eNdHPfW2QFvhmL7rfwAAAFs"]
[Sat Aug 29 05:07:36.998849 2026] [core:error] [pid 1018003:tid 1018155] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.998871 2026] [core:error] [pid 1018003:tid 1018155] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.999339 2026] [core:error] [pid 1028675:tid 1028857] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:36.999351 2026] [core:error] [pid 1028675:tid 1028857] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.000263 2026] [core:error] [pid 1028675:tid 1028929] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.000273 2026] [core:error] [pid 1028675:tid 1028929] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.000770 2026] [core:error] [pid 1018003:tid 1018172] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.000783 2026] [core:error] [pid 1018003:tid 1018172] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.002269 2026] [core:error] [pid 1018003:tid 1018190] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.002289 2026] [core:error] [pid 1018003:tid 1018190] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.004269 2026] [security2:error] [pid 1028675:tid 1028811] [client 213.209.159.223:61715] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_whm/api/.env"] [unique_id "apK9eddHPfW2QFvhmL7rhAAAAAE"]
[Sat Aug 29 05:07:37.005656 2026] [core:error] [pid 1018003:tid 1018186] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.005672 2026] [core:error] [pid 1018003:tid 1018186] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.006214 2026] [core:error] [pid 1018003:tid 1018248] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.006225 2026] [core:error] [pid 1018003:tid 1018248] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.009838 2026] [security2:error] [pid 1028675:tid 1028876] [client 20.63.81.20:20934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/simple.php"] [unique_id "apK9eddHPfW2QFvhmL7rhQAAAEI"]
[Sat Aug 29 05:07:37.032791 2026] [security2:error] [pid 1028675:tid 1028890] [client 213.209.159.223:48023] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/api/.env"] [unique_id "apK9eddHPfW2QFvhmL7rhwAAAFA"]
[Sat Aug 29 05:07:37.042086 2026] [security2:error] [pid 1028675:tid 1028863] [client 52.139.37.240:32837] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "luxuryweddingphotographer.com"] [uri "/c99.php"] [unique_id "apK9eddHPfW2QFvhmL7riwAAADU"]
[Sat Aug 29 05:07:37.045992 2026] [core:error] [pid 1028675:tid 1028870] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.046008 2026] [core:error] [pid 1028675:tid 1028870] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.048350 2026] [security2:error] [pid 1028675:tid 1028867] [client 52.139.37.240:37311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/about/function.php"] [unique_id "apK9eddHPfW2QFvhmL7rjgAAADk"]
[Sat Aug 29 05:07:37.054087 2026] [core:error] [pid 1028675:tid 1028841] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.054100 2026] [core:error] [pid 1028675:tid 1028841] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.057705 2026] [core:error] [pid 1018003:tid 1018203] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.057722 2026] [core:error] [pid 1018003:tid 1018203] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.060643 2026] [security2:error] [pid 1028675:tid 1028926] [client 213.209.159.223:11821] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_webdisk/backend/.env"] [unique_id "apK9eddHPfW2QFvhmL7rkQAAAHQ"]
[Sat Aug 29 05:07:37.066124 2026] [security2:error] [pid 1028675:tid 1028892] [client 158.158.54.35:14924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/init.php"] [unique_id "apK9eddHPfW2QFvhmL7rkwAAAFI"]
[Sat Aug 29 05:07:37.075479 2026] [core:error] [pid 1018003:tid 1018167] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.075493 2026] [core:error] [pid 1018003:tid 1018167] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.093925 2026] [security2:error] [pid 1028675:tid 1028889] [client 20.203.141.11:45425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-load.php"] [unique_id "apK9eddHPfW2QFvhmL7rlgAAAE8"]
[Sat Aug 29 05:07:37.093970 2026] [security2:error] [pid 1018003:tid 1018226] [client 4.205.62.107:53380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/bigdump.php"] [unique_id "apK9eTAh5Y1i2tUxg4EYeQAABgM"]
[Sat Aug 29 05:07:37.098335 2026] [security2:error] [pid 1028675:tid 1028931] [client 91.92.47.67:52274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 67.47.92.91.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "pintadelbajio.com"] [uri "/wp-login.php"] [unique_id "apK9eddHPfW2QFvhmL7rlQAAAHk"], referer: https://www.google.com/
[Sat Aug 29 05:07:37.100072 2026] [core:error] [pid 1018003:tid 1018252] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.100087 2026] [core:error] [pid 1018003:tid 1018252] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.101628 2026] [core:error] [pid 1028675:tid 1028866] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.101643 2026] [core:error] [pid 1028675:tid 1028866] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.112749 2026] [security2:error] [pid 1028675:tid 1028814] [client 4.205.62.107:56029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/loxi-o.php"] [unique_id "apK9eddHPfW2QFvhmL7rmQAAAAQ"]
[Sat Aug 29 05:07:37.117766 2026] [security2:error] [pid 1018003:tid 1018234] [client 168.107.94.195:59759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9eTAh5Y1i2tUxg4EYewAABgo"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:37.118038 2026] [security2:error] [pid 1028675:tid 1028850] [client 213.209.159.223:3266] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/.env"] [unique_id "apK9eddHPfW2QFvhmL7rmgAAACg"]
[Sat Aug 29 05:07:37.118897 2026] [security2:error] [pid 1028675:tid 1028922] [client 20.48.250.41:48911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/8.php"] [unique_id "apK9eddHPfW2QFvhmL7rmwAAAHA"]
[Sat Aug 29 05:07:37.119046 2026] [security2:error] [pid 1028675:tid 1028907] [client 20.203.141.11:33726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/test1.php"] [unique_id "apK9eddHPfW2QFvhmL7rnAAAAGE"]
[Sat Aug 29 05:07:37.124052 2026] [core:error] [pid 1028675:tid 1028812] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.124063 2026] [core:error] [pid 1028675:tid 1028812] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.137622 2026] [security2:error] [pid 1028675:tid 1028877] [client 20.104.104.62:25654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.horseventure-net.penmarketing.org"] [uri "/upload.php"] [unique_id "apK9eddHPfW2QFvhmL7roQAAAEM"]
[Sat Aug 29 05:07:37.138242 2026] [security2:error] [pid 1028675:tid 1028751] [remote 34.138.144.127:58722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/@fs/.env"] [unique_id "apK9eddHPfW2QFvhmL7rnwAAekY"]
[Sat Aug 29 05:07:37.138510 2026] [security2:error] [pid 1018003:tid 1018262] [client 20.63.81.20:20983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/aaa.php"] [unique_id "apK9eTAh5Y1i2tUxg4EYfgAABiY"]
[Sat Aug 29 05:07:37.138909 2026] [security2:error] [pid 1028675:tid 1028744] [remote 34.138.144.127:58722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/.ssh/id_rsa"] [unique_id "apK9eddHPfW2QFvhmL7roAAAej8"]
[Sat Aug 29 05:07:37.139302 2026] [security2:error] [pid 1028675:tid 1028860] [client 213.209.159.223:61715] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_whm/backend/.env"] [unique_id "apK9eddHPfW2QFvhmL7rogAAADI"]
[Sat Aug 29 05:07:37.142373 2026] [security2:error] [pid 1028675:tid 1028755] [remote 34.138.144.127:58722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/.env.prod.bak"] [unique_id "apK9eddHPfW2QFvhmL7rpAAAeko"]
[Sat Aug 29 05:07:37.145238 2026] [core:error] [pid 1028675:tid 1028751] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.145257 2026] [core:error] [pid 1028675:tid 1028751] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.150030 2026] [security2:error] [pid 1028675:tid 1028830] [client 20.48.250.41:49485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/f35.php"] [unique_id "apK9eddHPfW2QFvhmL7rpwAAABQ"]
[Sat Aug 29 05:07:37.151541 2026] [core:error] [pid 1018003:tid 1018240] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.151558 2026] [core:error] [pid 1018003:tid 1018240] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.158394 2026] [security2:error] [pid 1018003:tid 1018182] [client 20.48.250.41:35480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/0x0x.php"] [unique_id "apK9eTAh5Y1i2tUxg4EYiAAABdc"]
[Sat Aug 29 05:07:37.159623 2026] [security2:error] [pid 1028675:tid 1028743] [remote 34.138.144.127:58722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/.env.production.bak"] [unique_id "apK9eddHPfW2QFvhmL7rqAAALD4"]
[Sat Aug 29 05:07:37.165749 2026] [security2:error] [pid 1018003:tid 1018078] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/s3/.env.bak"] [unique_id "apK9eTAh5Y1i2tUxg4EYigAFuTk"]
[Sat Aug 29 05:07:37.170081 2026] [core:error] [pid 1028675:tid 1028876] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.170099 2026] [core:error] [pid 1028675:tid 1028876] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.171127 2026] [security2:error] [pid 1028675:tid 1028890] [client 213.209.159.223:48023] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/backend/.env"] [unique_id "apK9eddHPfW2QFvhmL7rqwAAAFA"]
[Sat Aug 29 05:07:37.172391 2026] [security2:error] [pid 1028675:tid 1028856] [client 158.158.54.35:4514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/classwithtostring.php"] [unique_id "apK9eddHPfW2QFvhmL7rrAAAAC4"]
[Sat Aug 29 05:07:37.177321 2026] [security2:error] [pid 1018003:tid 1018275] [client 52.139.37.240:19342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/z.php"] [unique_id "apK9eTAh5Y1i2tUxg4EYlAAABjM"]
[Sat Aug 29 05:07:37.177934 2026] [security2:error] [pid 1028675:tid 1028764] [remote 34.138.144.127:58722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/@fs/root/.env"] [unique_id "apK9eddHPfW2QFvhmL7rrQAAI1M"]
[Sat Aug 29 05:07:37.178613 2026] [security2:error] [pid 1018003:tid 1018217] [client 158.23.147.79:26582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-includes/assets/index.php"] [unique_id "apK9eTAh5Y1i2tUxg4EYlQAABfo"]
[Sat Aug 29 05:07:37.189548 2026] [core:error] [pid 1028675:tid 1028883] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.189566 2026] [core:error] [pid 1028675:tid 1028883] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.191689 2026] [core:error] [pid 1028675:tid 1028897] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.191705 2026] [core:error] [pid 1028675:tid 1028897] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.192136 2026] [core:error] [pid 1028675:tid 1028825] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.192147 2026] [core:error] [pid 1028675:tid 1028825] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.192667 2026] [core:error] [pid 1028675:tid 1028904] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.192681 2026] [core:error] [pid 1028675:tid 1028904] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.193426 2026] [core:error] [pid 1028675:tid 1028875] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.193448 2026] [core:error] [pid 1028675:tid 1028875] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.201252 2026] [security2:error] [pid 1028675:tid 1028849] [client 20.104.49.130:53845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/term.php"] [unique_id "apK9eddHPfW2QFvhmL7rtwAAACc"]
[Sat Aug 29 05:07:37.206614 2026] [security2:error] [pid 1018003:tid 1018175] [client 213.209.159.223:33290] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/.env"] [unique_id "apK9eTAh5Y1i2tUxg4EYnQAABdA"]
[Sat Aug 29 05:07:37.207634 2026] [security2:error] [pid 1028675:tid 1028900] [client 20.104.49.130:34540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/df.php"] [unique_id "apK9eddHPfW2QFvhmL7rugAAAFo"]
[Sat Aug 29 05:07:37.212927 2026] [security2:error] [pid 1028675:tid 1028928] [client 213.209.159.223:11821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.greatdecisionsofcharlevoix.com"] [uri "/phpinfo.php"] [unique_id "apK9eddHPfW2QFvhmL7rtgAAAHY"]
[Sat Aug 29 05:07:37.217254 2026] [core:error] [pid 1028675:tid 1028861] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.217273 2026] [core:error] [pid 1028675:tid 1028861] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.225028 2026] [core:error] [pid 1018003:tid 1018135] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.225045 2026] [core:error] [pid 1018003:tid 1018135] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.227853 2026] [core:error] [pid 1028675:tid 1028925] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.227867 2026] [core:error] [pid 1028675:tid 1028925] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.228158 2026] [core:error] [pid 1028675:tid 1028929] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.228169 2026] [core:error] [pid 1028675:tid 1028929] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.237539 2026] [security2:error] [pid 1028675:tid 1028878] [client 52.139.37.240:32866] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "luxuryweddingphotographer.com"] [uri "/c99.php"] [unique_id "apK9eddHPfW2QFvhmL7rvgAAAEQ"]
[Sat Aug 29 05:07:37.244225 2026] [security2:error] [pid 1018003:tid 1018267] [client 52.139.37.240:37128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/an.php"] [unique_id "apK9eTAh5Y1i2tUxg4EYoAAABis"]
[Sat Aug 29 05:07:37.254153 2026] [security2:error] [pid 1018003:tid 1018224] [client 68.155.159.216:24320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/lock.php"] [unique_id "apK9eTAh5Y1i2tUxg4EYoQAABgE"]
[Sat Aug 29 05:07:37.259302 2026] [security2:error] [pid 1028675:tid 1028877] [client 213.209.159.223:3266] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/api/.env"] [unique_id "apK9eddHPfW2QFvhmL7rwAAAAEM"]
[Sat Aug 29 05:07:37.260909 2026] [security2:error] [pid 1018003:tid 1018038] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/server/.env"] [unique_id "apK9eTAh5Y1i2tUxg4EYogAF6xE"]
[Sat Aug 29 05:07:37.267701 2026] [security2:error] [pid 1028675:tid 1028837] [client 20.104.104.62:20831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/s_on.php"] [unique_id "apK9eddHPfW2QFvhmL7rwgAAABs"]
[Sat Aug 29 05:07:37.267757 2026] [security2:error] [pid 1028675:tid 1028919] [client 20.48.250.41:49049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/0x0x.php"] [unique_id "apK9eddHPfW2QFvhmL7rwQAAAG0"]
[Sat Aug 29 05:07:37.273970 2026] [security2:error] [pid 1028675:tid 1028916] [client 213.209.159.223:61715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/phpinfo.php"] [unique_id "apK9eddHPfW2QFvhmL7rxAAAAGo"]
[Sat Aug 29 05:07:37.274730 2026] [security2:error] [pid 1018003:tid 1018051] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/server/api/.env"] [unique_id "apK9eTAh5Y1i2tUxg4EYpAAF7x4"]
[Sat Aug 29 05:07:37.276307 2026] [core:error] [pid 1018003:tid 1018075] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.276322 2026] [core:error] [pid 1018003:tid 1018075] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.281690 2026] [security2:error] [pid 1018003:tid 1018136] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/server/backend/.env"] [unique_id "apK9eTAh5Y1i2tUxg4EYpgAF33M"]
[Sat Aug 29 05:07:37.299040 2026] [security2:error] [pid 1028675:tid 1028898] [client 40.83.93.50:6121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-content/content.php"] [unique_id "apK9eddHPfW2QFvhmL7rxgAAAFg"]
[Sat Aug 29 05:07:37.301516 2026] [security2:error] [pid 1018003:tid 1018186] [client 20.48.250.41:65395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/wen.php"] [unique_id "apK9eTAh5Y1i2tUxg4EYsAAABds"]
[Sat Aug 29 05:07:37.303964 2026] [core:error] [pid 1018003:tid 1018030] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.303981 2026] [core:error] [pid 1018003:tid 1018030] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.308487 2026] [security2:error] [pid 1028675:tid 1028930] [client 213.209.159.223:48023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/phpinfo.php"] [unique_id "apK9eddHPfW2QFvhmL7ryAAAAHg"]
[Sat Aug 29 05:07:37.312671 2026] [security2:error] [pid 1018003:tid 1018096] [remote 35.231.104.225:42418] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "www.qandlcondos.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK9eTAh5Y1i2tUxg4EYtQAGFEs"]
[Sat Aug 29 05:07:37.313234 2026] [security2:error] [pid 1018003:tid 1018079] [remote 35.231.104.225:42418] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.qandlcondos.com"] [uri "/@fs/.env"] [unique_id "apK9eTAh5Y1i2tUxg4EYtAAGFDo"]
[Sat Aug 29 05:07:37.313455 2026] [security2:error] [pid 1018003:tid 1018025] [remote 35.231.104.225:42418] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.qandlcondos.com"] [uri "/.env.prod.bak"] [unique_id "apK9eTAh5Y1i2tUxg4EYsQAGFAQ"]
[Sat Aug 29 05:07:37.313896 2026] [security2:error] [pid 1018003:tid 1018047] [remote 35.231.104.225:42418] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.qandlcondos.com"] [uri "/@fs/root/.env"] [unique_id "apK9eTAh5Y1i2tUxg4EYtgAGFBo"]
[Sat Aug 29 05:07:37.314496 2026] [security2:error] [pid 1018003:tid 1018122] [remote 35.231.104.225:42418] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.qandlcondos.com"] [uri "/.env.production.bak"] [unique_id "apK9eTAh5Y1i2tUxg4EYswAGFGU"]
[Sat Aug 29 05:07:37.323115 2026] [core:error] [pid 1018003:tid 1018088] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.323136 2026] [core:error] [pid 1018003:tid 1018088] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.323237 2026] [core:error] [pid 1018003:tid 1018124] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.323247 2026] [core:error] [pid 1018003:tid 1018124] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.333483 2026] [security2:error] [pid 1018003:tid 1018203] [client 213.209.159.223:12320] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/.env"] [unique_id "apK9eTAh5Y1i2tUxg4EYugAABew"]
[Sat Aug 29 05:07:37.344275 2026] [security2:error] [pid 1018003:tid 1018185] [client 213.209.159.223:33290] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/api/.env"] [unique_id "apK9eTAh5Y1i2tUxg4EYvAAABdo"]
[Sat Aug 29 05:07:37.348976 2026] [core:error] [pid 1018003:tid 1018053] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.348993 2026] [core:error] [pid 1018003:tid 1018053] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.351119 2026] [core:error] [pid 1018003:tid 1018118] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.351134 2026] [core:error] [pid 1018003:tid 1018118] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.352863 2026] [core:error] [pid 1018003:tid 1018076] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.352879 2026] [core:error] [pid 1018003:tid 1018076] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.362648 2026] [core:error] [pid 1028675:tid 1028753] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.362662 2026] [core:error] [pid 1028675:tid 1028753] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.365867 2026] [core:error] [pid 1028675:tid 1028752] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.365894 2026] [core:error] [pid 1028675:tid 1028752] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.367575 2026] [core:error] [pid 1028675:tid 1028767] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.367590 2026] [core:error] [pid 1028675:tid 1028767] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.371143 2026] [security2:error] [pid 1018003:tid 1018226] [client 20.48.250.41:35068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/166.php"] [unique_id "apK9eTAh5Y1i2tUxg4EYxAAABgM"]
[Sat Aug 29 05:07:37.377186 2026] [security2:error] [pid 1028675:tid 1028890] [client 52.139.37.240:19376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/f35.php"] [unique_id "apK9eddHPfW2QFvhmL7r1AAAAFA"]
[Sat Aug 29 05:07:37.378194 2026] [security2:error] [pid 1028675:tid 1028855] [client 158.23.147.79:48280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK9eddHPfW2QFvhmL7r1QAAAC0"]
[Sat Aug 29 05:07:37.381150 2026] [security2:error] [pid 1018003:tid 1018246] [client 20.151.200.44:64023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/k8.php"] [unique_id "apK9eTAh5Y1i2tUxg4EYxwAABhY"]
[Sat Aug 29 05:07:37.384216 2026] [security2:error] [pid 1028675:tid 1028883] [client 91.92.47.67:58358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 67.47.92.91.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "pintadelbajio.com"] [uri "/wp-login.php"] [unique_id "apK9eddHPfW2QFvhmL7r1wAAAEk"]
[Sat Aug 29 05:07:37.388984 2026] [security2:error] [pid 1028675:tid 1028745] [remote 34.138.144.127:58722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/id_rsa"] [unique_id "apK9eddHPfW2QFvhmL7r2AAAF0A"]
[Sat Aug 29 05:07:37.389515 2026] [security2:error] [pid 1028675:tid 1028736] [remote 34.138.144.127:58722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/.ssh/id_dsa"] [unique_id "apK9eddHPfW2QFvhmL7r2QAAFzc"]
[Sat Aug 29 05:07:37.396745 2026] [security2:error] [pid 1028675:tid 1028825] [client 213.209.159.223:3266] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/backend/.env"] [unique_id "apK9eddHPfW2QFvhmL7r3AAAAA8"]
[Sat Aug 29 05:07:37.402169 2026] [security2:error] [pid 1028675:tid 1028904] [client 158.23.147.79:17442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK9eddHPfW2QFvhmL7r3QAAAF4"]
[Sat Aug 29 05:07:37.409988 2026] [security2:error] [pid 1018003:tid 1018129] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/service/.env"] [unique_id "apK9eTAh5Y1i2tUxg4EYyQAFyGw"]
[Sat Aug 29 05:07:37.413520 2026] [security2:error] [pid 1018003:tid 1018028] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/services/.env"] [unique_id "apK9eTAh5Y1i2tUxg4EYygAFyAc"]
[Sat Aug 29 05:07:37.419203 2026] [core:error] [pid 1028675:tid 1028748] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.419216 2026] [core:error] [pid 1028675:tid 1028748] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.421149 2026] [core:error] [pid 1028675:tid 1028813] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.421163 2026] [core:error] [pid 1028675:tid 1028813] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.423208 2026] [core:error] [pid 1028675:tid 1028859] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.423224 2026] [core:error] [pid 1028675:tid 1028859] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.430906 2026] [security2:error] [pid 1028675:tid 1028839] [client 20.63.81.20:20931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/shiny.php"] [unique_id "apK9eddHPfW2QFvhmL7r4QAAAB0"]
[Sat Aug 29 05:07:37.432977 2026] [core:error] [pid 1018003:tid 1018089] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.432994 2026] [core:error] [pid 1018003:tid 1018089] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.434639 2026] [core:error] [pid 1028675:tid 1028863] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.434654 2026] [core:error] [pid 1028675:tid 1028863] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.434689 2026] [core:error] [pid 1018003:tid 1018164] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.434699 2026] [core:error] [pid 1018003:tid 1018164] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.438151 2026] [security2:error] [pid 1018003:tid 1018174] [client 52.139.37.240:32858] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "luxuryweddingphotographer.com"] [uri "/c99.php"] [unique_id "apK9eTAh5Y1i2tUxg4EY0gAABc8"]
[Sat Aug 29 05:07:37.438341 2026] [core:error] [pid 1028675:tid 1028858] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.438349 2026] [core:error] [pid 1028675:tid 1028858] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.446184 2026] [security2:error] [pid 1018003:tid 1018256] [client 52.139.37.240:37748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/asw.php"] [unique_id "apK9eTAh5Y1i2tUxg4EY0wAABiA"]
[Sat Aug 29 05:07:37.452289 2026] [security2:error] [pid 1018003:tid 1018231] [client 128.90.161.20:46252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.161.90.128.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.doorrepairdubuque.com"] [uri "/wp-login.php"] [unique_id "apK9eTAh5Y1i2tUxg4EY1AAABgc"]
[Sat Aug 29 05:07:37.456756 2026] [core:error] [pid 1028675:tid 1028861] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.456773 2026] [core:error] [pid 1028675:tid 1028861] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.461502 2026] [security2:error] [pid 1028675:tid 1028862] [client 4.205.62.107:21621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/brc.php"] [unique_id "apK9eddHPfW2QFvhmL7r6QAAADQ"]
[Sat Aug 29 05:07:37.467524 2026] [security2:error] [pid 1028675:tid 1028860] [client 20.48.250.41:49147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/166.php"] [unique_id "apK9eddHPfW2QFvhmL7r7AAAADI"]
[Sat Aug 29 05:07:37.469887 2026] [security2:error] [pid 1018003:tid 1018275] [client 213.209.159.223:12320] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/api/.env"] [unique_id "apK9eTAh5Y1i2tUxg4EY2gAABjM"]
[Sat Aug 29 05:07:37.472944 2026] [core:error] [pid 1028675:tid 1028837] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.472957 2026] [core:error] [pid 1028675:tid 1028837] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.477580 2026] [security2:error] [pid 1028675:tid 1028919] [client 158.23.147.79:30578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-l0gin.php"] [unique_id "apK9eddHPfW2QFvhmL7r7gAAAG0"]
[Sat Aug 29 05:07:37.481542 2026] [security2:error] [pid 1018003:tid 1018217] [client 213.209.159.223:33290] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/backend/.env"] [unique_id "apK9eTAh5Y1i2tUxg4EY3AAABfo"]
[Sat Aug 29 05:07:37.485334 2026] [security2:error] [pid 1018003:tid 1018097] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/shared/.env"] [unique_id "apK9eTAh5Y1i2tUxg4EY3gAFyEw"]
[Sat Aug 29 05:07:37.497730 2026] [security2:error] [pid 1018003:tid 1018216] [client 168.107.94.195:60149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9eTAh5Y1i2tUxg4EY4QAABfk"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:37.501346 2026] [security2:error] [pid 1018003:tid 1018115] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/shop/.env"] [unique_id "apK9eTAh5Y1i2tUxg4EY4gAFyF4"]
[Sat Aug 29 05:07:37.504146 2026] [security2:error] [pid 1028675:tid 1028824] [client 20.104.49.130:57624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/wp-blog-header.php"] [unique_id "apK9eddHPfW2QFvhmL7r8QAAAA4"]
[Sat Aug 29 05:07:37.504907 2026] [security2:error] [pid 1028675:tid 1028842] [client 20.48.250.41:49414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/inc.php"] [unique_id "apK9eddHPfW2QFvhmL7r8gAAACA"]
[Sat Aug 29 05:07:37.525390 2026] [core:error] [pid 1018003:tid 1018271] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.525417 2026] [core:error] [pid 1018003:tid 1018271] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.526387 2026] [security2:error] [pid 1028675:tid 1028820] [client 20.104.104.62:25811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.horseventure-net.penmarketing.org"] [uri "/wp-admin/js/index.php"] [unique_id "apK9eddHPfW2QFvhmL7r9QAAAAo"]
[Sat Aug 29 05:07:37.533911 2026] [security2:error] [pid 1028675:tid 1028914] [client 213.209.159.223:3266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/phpinfo.php"] [unique_id "apK9eddHPfW2QFvhmL7r9gAAAGg"]
[Sat Aug 29 05:07:37.535148 2026] [security2:error] [pid 1018003:tid 1018175] [client 20.48.250.41:35040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/h2a2ck.php"] [unique_id "apK9eTAh5Y1i2tUxg4EY7gAABdA"]
[Sat Aug 29 05:07:37.537844 2026] [security2:error] [pid 1028675:tid 1028845] [client 158.158.54.35:33515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "apK9eddHPfW2QFvhmL7r9wAAACM"]
[Sat Aug 29 05:07:37.556345 2026] [core:error] [pid 1028675:tid 1028888] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.556372 2026] [core:error] [pid 1028675:tid 1028888] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.564568 2026] [security2:error] [pid 1028675:tid 1028883] [client 20.63.81.20:20858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/goods.php"] [unique_id "apK9eddHPfW2QFvhmL7r-gAAAEk"]
[Sat Aug 29 05:07:37.566157 2026] [security2:error] [pid 1028675:tid 1028883] [client 158.23.147.79:50117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/xmlrpc.php"] [unique_id "apK9eddHPfW2QFvhmL7r-wAAAEk"]
[Sat Aug 29 05:07:37.566350 2026] [core:error] [pid 1018003:tid 1018224] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.566379 2026] [core:error] [pid 1018003:tid 1018224] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.567750 2026] [security2:error] [pid 1028675:tid 1028902] [client 185.104.184.230:49192] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.jia.zbw.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/2018/wp-includes/wlwmanifest.xml"] [unique_id "apK9eddHPfW2QFvhmL7r_AAAAFw"]
[Sat Aug 29 05:07:37.569082 2026] [security2:error] [pid 1028675:tid 1028878] [client 52.139.37.240:19264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/file61.php"] [unique_id "apK9eddHPfW2QFvhmL7r_QAAAEQ"]
[Sat Aug 29 05:07:37.578101 2026] [security2:error] [pid 1018003:tid 1018139] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/src/.env"] [unique_id "apK9eTAh5Y1i2tUxg4EY9wAFyHY"]
[Sat Aug 29 05:07:37.582910 2026] [core:error] [pid 1018003:tid 1018086] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.582925 2026] [core:error] [pid 1018003:tid 1018086] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.588878 2026] [core:error] [pid 1018003:tid 1018141] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.588894 2026] [core:error] [pid 1018003:tid 1018141] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.590874 2026] [core:error] [pid 1018003:tid 1018206] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.590889 2026] [core:error] [pid 1018003:tid 1018206] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.595323 2026] [core:error] [pid 1028675:tid 1028746] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.595342 2026] [core:error] [pid 1028675:tid 1028746] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.598254 2026] [security2:error] [pid 1028675:tid 1028931] [client 20.203.141.11:22292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/ws.php"] [unique_id "apK9eddHPfW2QFvhmL7sAgAAAHk"]
[Sat Aug 29 05:07:37.602935 2026] [core:error] [pid 1028675:tid 1028856] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.602950 2026] [core:error] [pid 1028675:tid 1028856] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.603766 2026] [core:error] [pid 1018003:tid 1018236] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.603782 2026] [core:error] [pid 1018003:tid 1018236] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.604279 2026] [security2:error] [pid 1028675:tid 1028894] [client 57.141.14.103:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/"] [unique_id "apK9eddHPfW2QFvhmL7sBAAAAFQ"]
[Sat Aug 29 05:07:37.606511 2026] [security2:error] [pid 1018003:tid 1018191] [client 213.209.159.223:12320] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/backend/.env"] [unique_id "apK9eTAh5Y1i2tUxg4EZAgAABeA"]
[Sat Aug 29 05:07:37.606962 2026] [core:error] [pid 1018003:tid 1018248] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.606975 2026] [core:error] [pid 1018003:tid 1018248] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.614586 2026] [security2:error] [pid 1028675:tid 1028903] [client 158.158.54.35:24456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/news.php"] [unique_id "apK9eddHPfW2QFvhmL7sBQAAAF0"]
[Sat Aug 29 05:07:37.614938 2026] [core:error] [pid 1018003:tid 1018120] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.614948 2026] [core:error] [pid 1018003:tid 1018120] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.618258 2026] [security2:error] [pid 1028675:tid 1028814] [client 20.104.104.62:40244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/selaras.php"] [unique_id "apK9eddHPfW2QFvhmL7sBgAAAAQ"]
[Sat Aug 29 05:07:37.619551 2026] [security2:error] [pid 1018003:tid 1018221] [client 213.209.159.223:33290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/phpinfo.php"] [unique_id "apK9eTAh5Y1i2tUxg4EZBwAABf4"]
[Sat Aug 29 05:07:37.619552 2026] [core:error] [pid 1018003:tid 1018147] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.619569 2026] [core:error] [pid 1018003:tid 1018147] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.620037 2026] [security2:error] [pid 1018003:tid 1018187] [client 20.48.250.41:48969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/h2a2ck.php"] [unique_id "apK9eTAh5Y1i2tUxg4EZCAAABdw"]
[Sat Aug 29 05:07:37.622580 2026] [core:error] [pid 1018003:tid 1018031] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.622594 2026] [core:error] [pid 1018003:tid 1018031] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.632470 2026] [security2:error] [pid 1028675:tid 1028756] [remote 34.138.144.127:58722] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "cpcalendars.roycehomesales.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK9eddHPfW2QFvhmL7sCgAAbks"]
[Sat Aug 29 05:07:37.634552 2026] [security2:error] [pid 1028675:tid 1028765] [remote 34.138.144.127:58722] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/id_dsa"] [unique_id "apK9eddHPfW2QFvhmL7sCAAAblQ"]
[Sat Aug 29 05:07:37.635966 2026] [core:error] [pid 1028675:tid 1028757] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.635984 2026] [core:error] [pid 1028675:tid 1028757] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.636066 2026] [core:error] [pid 1028675:tid 1028756] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.637293 2026] [security2:error] [pid 1018003:tid 1018111] [remote 93.123.109.228:45692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flicklister.com"] [uri "/.env.php"] [unique_id "apK9eTAh5Y1i2tUxg4EZDQAF_Fo"]
[Sat Aug 29 05:07:37.637671 2026] [core:error] [pid 1028675:tid 1028732] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.637688 2026] [core:error] [pid 1028675:tid 1028732] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.638813 2026] [core:error] [pid 1028675:tid 1028785] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.638827 2026] [core:error] [pid 1028675:tid 1028785] [remote 34.138.144.127:58722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.639937 2026] [core:error] [pid 1018003:tid 1018119] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.639953 2026] [core:error] [pid 1018003:tid 1018119] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.644663 2026] [security2:error] [pid 1028675:tid 1028761] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(\\\\/\\\\*\\\\!? ?(?:select|grant|delete|insert|drop|alter|replace|truncate|update|create|rename|describe|union|concat|group_concat))" at REQUEST_FILENAME. [file "/opt/mod_security/hg_rules.conf"] [line "1019"] [id "9000042"] [rev "2.2.2"] [msg "SQL Comment Sequence Detected."] [data "/*update"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/*update.cgi*"] [unique_id "apK9eddHPfW2QFvhmL7sDQAAf1A"]
[Sat Aug 29 05:07:37.651391 2026] [security2:error] [pid 1018003:tid 1018190] [client 52.139.37.240:37131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/item.php"] [unique_id "apK9eTAh5Y1i2tUxg4EZEgAABd8"]
[Sat Aug 29 05:07:37.651679 2026] [security2:error] [pid 1028675:tid 1028773] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK9eddHPfW2QFvhmL7sEgAAf1w"]
[Sat Aug 29 05:07:37.653101 2026] [core:error] [pid 1018003:tid 1018061] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.653118 2026] [core:error] [pid 1018003:tid 1018061] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.655626 2026] [core:error] [pid 1028675:tid 1028773] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.655641 2026] [core:error] [pid 1028675:tid 1028773] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.666168 2026] [security2:error] [pid 1018003:tid 1018262] [client 20.48.250.41:35038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/error_log.php"] [unique_id "apK9eTAh5Y1i2tUxg4EZFQAABiY"]
[Sat Aug 29 05:07:37.673081 2026] [security2:error] [pid 1028675:tid 1028861] [client 20.151.200.44:63297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/alog.php"] [unique_id "apK9eddHPfW2QFvhmL7sGQAAADM"]
[Sat Aug 29 05:07:37.674641 2026] [core:error] [pid 1018003:tid 1018231] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.674658 2026] [core:error] [pid 1018003:tid 1018231] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.674847 2026] [core:error] [pid 1018003:tid 1018265] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.674856 2026] [core:error] [pid 1018003:tid 1018265] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.676209 2026] [core:error] [pid 1018003:tid 1018177] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.676224 2026] [core:error] [pid 1018003:tid 1018177] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.676489 2026] [security2:error] [pid 1028675:tid 1028850] [client 20.104.104.62:24750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinhenley.com"] [uri "/wp-content/index.php"] [unique_id "apK9eddHPfW2QFvhmL7sGgAAACg"]
[Sat Aug 29 05:07:37.677225 2026] [core:error] [pid 1018003:tid 1018174] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.677237 2026] [core:error] [pid 1018003:tid 1018174] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.680674 2026] [security2:error] [pid 1028675:tid 1028816] [client 4.205.62.107:65441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/autogooey.php"] [unique_id "apK9eddHPfW2QFvhmL7sGwAAAAY"]
[Sat Aug 29 05:07:37.686579 2026] [core:error] [pid 1018003:tid 1018169] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.686594 2026] [core:error] [pid 1018003:tid 1018169] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.694290 2026] [core:error] [pid 1018003:tid 1018046] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.694307 2026] [core:error] [pid 1018003:tid 1018046] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.710706 2026] [security2:error] [pid 1018003:tid 1018184] [client 158.23.147.79:53798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-login.php"] [unique_id "apK9eTAh5Y1i2tUxg4EZIQAABdk"]
[Sat Aug 29 05:07:37.719426 2026] [core:error] [pid 1028675:tid 1028927] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.719450 2026] [core:error] [pid 1028675:tid 1028927] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.724198 2026] [security2:error] [pid 1028675:tid 1028911] [client 20.104.104.62:25634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.horseventure-net.penmarketing.org"] [uri "/wp-admin/post.php"] [unique_id "apK9eddHPfW2QFvhmL7sHwAAAGU"]
[Sat Aug 29 05:07:37.730483 2026] [security2:error] [pid 1018003:tid 1018035] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/srv/.env"] [unique_id "apK9eTAh5Y1i2tUxg4EZJgAF2A4"]
[Sat Aug 29 05:07:37.730979 2026] [core:error] [pid 1018003:tid 1018036] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.730991 2026] [core:error] [pid 1018003:tid 1018036] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.731565 2026] [security2:error] [pid 1018003:tid 1018233] [client 4.205.62.107:58487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/php-details.php"] [unique_id "apK9eTAh5Y1i2tUxg4EZJwAABgk"]
[Sat Aug 29 05:07:37.731747 2026] [core:error] [pid 1018003:tid 1018032] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.731780 2026] [core:error] [pid 1018003:tid 1018032] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.734367 2026] [security2:error] [pid 1018003:tid 1018128] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/stage/.env"] [unique_id "apK9eTAh5Y1i2tUxg4EZKAAGGms"]
[Sat Aug 29 05:07:37.737391 2026] [security2:error] [pid 1018003:tid 1018130] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/staging/.env"] [unique_id "apK9eTAh5Y1i2tUxg4EZKgAF220"]
[Sat Aug 29 05:07:37.739381 2026] [security2:error] [pid 1018003:tid 1018236] [client 20.48.250.41:65218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/6bcwiqwj.php"] [unique_id "apK9eTAh5Y1i2tUxg4EZKwAABgw"]
[Sat Aug 29 05:07:37.741026 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.63.81.20:20953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/000.php/index.php"] [unique_id "apK9eTAh5Y1i2tUxg4EZLAAABcI"]
[Sat Aug 29 05:07:37.743013 2026] [security2:error] [pid 1018003:tid 1018238] [client 213.209.159.223:12320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/phpinfo.php"] [unique_id "apK9eTAh5Y1i2tUxg4EZLgAABg4"]
[Sat Aug 29 05:07:37.745065 2026] [security2:error] [pid 1018003:tid 1018248] [client 20.203.141.11:27337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/a.php"] [unique_id "apK9eTAh5Y1i2tUxg4EZMAAABhg"]
[Sat Aug 29 05:07:37.746682 2026] [core:error] [pid 1018003:tid 1018137] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.746697 2026] [core:error] [pid 1018003:tid 1018137] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.757473 2026] [core:error] [pid 1018003:tid 1018045] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.757504 2026] [core:error] [pid 1018003:tid 1018045] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.761640 2026] [core:error] [pid 1018003:tid 1018133] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.761657 2026] [core:error] [pid 1018003:tid 1018133] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.762919 2026] [security2:error] [pid 1018003:tid 1018022] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/stg/.env"] [unique_id "apK9eTAh5Y1i2tUxg4EZNwAF_wE"]
[Sat Aug 29 05:07:37.764633 2026] [core:error] [pid 1018003:tid 1018143] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.764649 2026] [core:error] [pid 1018003:tid 1018143] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.769165 2026] [security2:error] [pid 1028675:tid 1028877] [client 52.139.37.240:19292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/mah.php"] [unique_id "apK9eddHPfW2QFvhmL7sIwAAAEM"]
[Sat Aug 29 05:07:37.772258 2026] [security2:error] [pid 1028675:tid 1028871] [client 40.83.93.50:6096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-content/core.php"] [unique_id "apK9eddHPfW2QFvhmL7sJAAAAD0"]
[Sat Aug 29 05:07:37.773734 2026] [core:error] [pid 1018003:tid 1018144] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.773748 2026] [core:error] [pid 1018003:tid 1018144] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.774617 2026] [security2:error] [pid 1018003:tid 1018179] [client 20.48.250.41:48966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/error_log.php"] [unique_id "apK9eTAh5Y1i2tUxg4EZOwAABdQ"]
[Sat Aug 29 05:07:37.776078 2026] [core:error] [pid 1018003:tid 1018052] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.776091 2026] [core:error] [pid 1018003:tid 1018052] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.785683 2026] [security2:error] [pid 1028675:tid 1028914] [client 213.209.159.223:44070] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_webdisk/laravel/.env"] [unique_id "apK9eddHPfW2QFvhmL7sJQAAAGg"]
[Sat Aug 29 05:07:37.793902 2026] [core:error] [pid 1018003:tid 1018078] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.793919 2026] [core:error] [pid 1018003:tid 1018078] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.794238 2026] [security2:error] [pid 1028675:tid 1028771] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK9eddHPfW2QFvhmL7sJwAAbFo"]
[Sat Aug 29 05:07:37.802944 2026] [security2:error] [pid 1028675:tid 1028778] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/.env"] [unique_id "apK9eddHPfW2QFvhmL7sNgAAbGE"]
[Sat Aug 29 05:07:37.810344 2026] [security2:error] [pid 1028675:tid 1028892] [client 68.155.159.216:2035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-includes/css/index.php"] [unique_id "apK9eddHPfW2QFvhmL7sOgAAAFI"]
[Sat Aug 29 05:07:37.811815 2026] [core:error] [pid 1028675:tid 1028781] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.811829 2026] [core:error] [pid 1028675:tid 1028781] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.815895 2026] [core:error] [pid 1028675:tid 1028859] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.815910 2026] [core:error] [pid 1028675:tid 1028859] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.816256 2026] [core:error] [pid 1028675:tid 1028844] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.816268 2026] [core:error] [pid 1028675:tid 1028844] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.822982 2026] [security2:error] [pid 1028675:tid 1028848] [client 146.70.194.254:57202] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "modelbasenjis.com"] [uri "/cgi-sys/suspendedpage.cgi/media/wp-includes/wlwmanifest.xml"] [unique_id "apK9eddHPfW2QFvhmL7sPwAAACY"]
[Sat Aug 29 05:07:37.826002 2026] [core:error] [pid 1018003:tid 1018231] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.826020 2026] [core:error] [pid 1018003:tid 1018231] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.826112 2026] [core:error] [pid 1028675:tid 1028813] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.826128 2026] [core:error] [pid 1028675:tid 1028813] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.826871 2026] [core:error] [pid 1018003:tid 1018265] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.826885 2026] [core:error] [pid 1018003:tid 1018265] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.827174 2026] [core:error] [pid 1028675:tid 1028910] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.827184 2026] [core:error] [pid 1028675:tid 1028910] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.828635 2026] [core:error] [pid 1028675:tid 1028856] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.828651 2026] [core:error] [pid 1028675:tid 1028856] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.831623 2026] [core:error] [pid 1028675:tid 1028894] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.831635 2026] [core:error] [pid 1028675:tid 1028894] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.836393 2026] [core:error] [pid 1018003:tid 1018174] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.836416 2026] [core:error] [pid 1018003:tid 1018174] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.845238 2026] [security2:error] [pid 1028675:tid 1028886] [client 20.48.250.41:35129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/403.php"] [unique_id "apK9eddHPfW2QFvhmL7sQwAAAEw"]
[Sat Aug 29 05:07:37.848697 2026] [security2:error] [pid 1018003:tid 1018270] [client 20.104.104.62:25039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinhenley.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "apK9eTAh5Y1i2tUxg4EZTAAABi4"]
[Sat Aug 29 05:07:37.851162 2026] [core:error] [pid 1018003:tid 1018050] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.851181 2026] [core:error] [pid 1018003:tid 1018050] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.860631 2026] [security2:error] [pid 1028675:tid 1028857] [client 158.23.147.79:32692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/cgi-bin/index.php"] [unique_id "apK9eddHPfW2QFvhmL7sRAAAAC8"]
[Sat Aug 29 05:07:37.862034 2026] [security2:error] [pid 1028675:tid 1028769] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/laravel/app/.env"] [unique_id "apK9eddHPfW2QFvhmL7sRQAAblg"]
[Sat Aug 29 05:07:37.863120 2026] [security2:error] [pid 1018003:tid 1018184] [client 213.209.159.223:53552] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_whm/laravel/.env"] [unique_id "apK9eTAh5Y1i2tUxg4EZTgAABdk"]
[Sat Aug 29 05:07:37.864613 2026] [core:error] [pid 1028675:tid 1028762] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.864626 2026] [core:error] [pid 1028675:tid 1028762] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.871447 2026] [security2:error] [pid 1028675:tid 1028819] [client 4.205.62.107:22433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/chosen.php"] [unique_id "apK9eddHPfW2QFvhmL7sSAAAAAk"]
[Sat Aug 29 05:07:37.872737 2026] [security2:error] [pid 1028675:tid 1028926] [client 20.63.81.20:20864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/Jcrop.php"] [unique_id "apK9eddHPfW2QFvhmL7sSQAAAHQ"]
[Sat Aug 29 05:07:37.875303 2026] [security2:error] [pid 1028675:tid 1028930] [client 213.209.159.223:38862] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/laravel/.env"] [unique_id "apK9eddHPfW2QFvhmL7sSgAAAHg"]
[Sat Aug 29 05:07:37.878322 2026] [security2:error] [pid 1028675:tid 1028925] [client 168.107.94.195:60459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9eddHPfW2QFvhmL7sTAAAAHM"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:37.879388 2026] [security2:error] [pid 1018003:tid 1018057] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/stripe/.env"] [unique_id "apK9eTAh5Y1i2tUxg4EZUgAF0CQ"]
[Sat Aug 29 05:07:37.885460 2026] [core:error] [pid 1018003:tid 1018037] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.885479 2026] [core:error] [pid 1018003:tid 1018037] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.894043 2026] [core:error] [pid 1018003:tid 1018255] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.894063 2026] [core:error] [pid 1018003:tid 1018255] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.920754 2026] [core:error] [pid 1018003:tid 1018246] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.920778 2026] [core:error] [pid 1018003:tid 1018246] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.921433 2026] [security2:error] [pid 1028675:tid 1028850] [client 128.90.161.20:46280] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1584"] [id "900939"] [msg "Invalid WordPress REST batch path"] [data "ARGS:requests.requests.path=///"] [hostname "cpcontacts.greenfieldparts.com"] [uri "/___proxy_subdomain_cpcontacts/wp-json/batch/v1"] [unique_id "apK9eddHPfW2QFvhmL7sTgAAACg"]
[Sat Aug 29 05:07:37.922666 2026] [security2:error] [pid 1028675:tid 1028861] [client 20.48.250.41:49033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/403.php"] [unique_id "apK9eddHPfW2QFvhmL7sTwAAADM"]
[Sat Aug 29 05:07:37.926611 2026] [security2:error] [pid 1018003:tid 1018202] [client 20.104.104.62:25816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.horseventure-net.penmarketing.org"] [uri "/wp-content/plugins/index.php"] [unique_id "apK9eTAh5Y1i2tUxg4EZYQAABes"]
[Sat Aug 29 05:07:37.928015 2026] [core:error] [pid 1018003:tid 1018250] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.928035 2026] [core:error] [pid 1018003:tid 1018250] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.930085 2026] [security2:error] [pid 1018003:tid 1018236] [client 68.155.159.216:12146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-l0gin.php"] [unique_id "apK9eTAh5Y1i2tUxg4EZZAAABgw"]
[Sat Aug 29 05:07:37.940264 2026] [security2:error] [pid 1028675:tid 1028850] [client 213.209.159.223:44070] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_webdisk/core/.env"] [unique_id "apK9eddHPfW2QFvhmL7sUAAAACg"]
[Sat Aug 29 05:07:37.951814 2026] [security2:error] [pid 1018003:tid 1018258] [client 20.151.200.44:64590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/adin.php"] [unique_id "apK9eTAh5Y1i2tUxg4EZaAAABiI"]
[Sat Aug 29 05:07:37.954889 2026] [access_compat:error] [pid 1018003:tid 1018248] [client 67.20.76.220:53354] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:07:37.958226 2026] [security2:error] [pid 1018003:tid 1018085] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/terraform.tfstate.backup"] [unique_id "apK9eTAh5Y1i2tUxg4EZawAF0EA"]
[Sat Aug 29 05:07:37.958555 2026] [security2:error] [pid 1028675:tid 1028828] [client 68.155.159.216:52843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK9eddHPfW2QFvhmL7sVwAAABI"]
[Sat Aug 29 05:07:37.959762 2026] [security2:error] [pid 1028675:tid 1028792] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK9eddHPfW2QFvhmL7sUgAAKG8"]
[Sat Aug 29 05:07:37.960461 2026] [core:error] [pid 1018003:tid 1018191] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.960475 2026] [core:error] [pid 1018003:tid 1018191] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.961327 2026] [core:error] [pid 1028675:tid 1028862] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.961339 2026] [core:error] [pid 1028675:tid 1028862] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.964992 2026] [access_compat:error] [pid 1028675:tid 1028816] [client 67.20.76.220:53340] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:07:37.965602 2026] [security2:error] [pid 1028675:tid 1028837] [client 158.23.147.79:35780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-includes/js/index.php"] [unique_id "apK9eddHPfW2QFvhmL7sWAAAABs"]
[Sat Aug 29 05:07:37.971576 2026] [security2:error] [pid 1018003:tid 1018060] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/test.php"] [unique_id "apK9eTAh5Y1i2tUxg4EZdAAF0Cc"]
[Sat Aug 29 05:07:37.971968 2026] [security2:error] [pid 1028675:tid 1028794] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/.env.backup"] [unique_id "apK9eddHPfW2QFvhmL7sWgAAKHE"]
[Sat Aug 29 05:07:37.972199 2026] [security2:error] [pid 1028675:tid 1028801] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/.env.bak"] [unique_id "apK9eddHPfW2QFvhmL7sWwAAKHg"]
[Sat Aug 29 05:07:37.976538 2026] [security2:error] [pid 1018003:tid 1018124] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/test/.env"] [unique_id "apK9eTAh5Y1i2tUxg4EZdQAF0Gc"]
[Sat Aug 29 05:07:37.977869 2026] [core:error] [pid 1018003:tid 1018025] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.977884 2026] [core:error] [pid 1018003:tid 1018025] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.982874 2026] [security2:error] [pid 1028675:tid 1028932] [client 158.23.147.79:25458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK9eddHPfW2QFvhmL7sYwAAAHo"]
[Sat Aug 29 05:07:37.986650 2026] [core:error] [pid 1018003:tid 1018152] [client 158.158.54.35:33499] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.986665 2026] [core:error] [pid 1018003:tid 1018152] [client 158.158.54.35:33499] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.990683 2026] [core:error] [pid 1018003:tid 1018207] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.990703 2026] [core:error] [pid 1018003:tid 1018207] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.994248 2026] [core:error] [pid 1018003:tid 1018252] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.994268 2026] [core:error] [pid 1018003:tid 1018252] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.995057 2026] [core:error] [pid 1028675:tid 1028898] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.995082 2026] [core:error] [pid 1028675:tid 1028898] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.997479 2026] [core:error] [pid 1018003:tid 1018164] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:37.997496 2026] [core:error] [pid 1018003:tid 1018164] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.001757 2026] [core:error] [pid 1028675:tid 1028871] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.001772 2026] [core:error] [pid 1028675:tid 1028871] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.001853 2026] [security2:error] [pid 1028675:tid 1028877] [client 20.48.250.41:35125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/cytyr.php"] [unique_id "apK9etdHPfW2QFvhmL7scQAAAEM"]
[Sat Aug 29 05:07:38.003976 2026] [security2:error] [pid 1028675:tid 1028914] [client 20.63.81.20:20939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/35iDq8NAjLu.php"] [unique_id "apK9etdHPfW2QFvhmL7scwAAAGg"]
[Sat Aug 29 05:07:38.004893 2026] [core:error] [pid 1028675:tid 1028820] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.004908 2026] [core:error] [pid 1028675:tid 1028820] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.006951 2026] [core:error] [pid 1018003:tid 1018145] [remote 34.138.144.127:58730] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.006969 2026] [core:error] [pid 1018003:tid 1018145] [remote 34.138.144.127:58730] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.007056 2026] [security2:error] [pid 1018003:tid 1018188] [client 213.209.159.223:53552] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_whm/core/.env"] [unique_id "apK9ejAh5Y1i2tUxg4EZhQAABd0"]
[Sat Aug 29 05:07:38.007322 2026] [core:error] [pid 1028675:tid 1028842] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.007336 2026] [core:error] [pid 1028675:tid 1028842] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.007582 2026] [core:error] [pid 1028675:tid 1028870] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.007596 2026] [core:error] [pid 1028675:tid 1028870] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.008690 2026] [core:error] [pid 1028675:tid 1028845] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.008705 2026] [core:error] [pid 1028675:tid 1028845] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.009418 2026] [security2:error] [pid 1018003:tid 1018188] [client 20.48.250.41:65367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/easy.php"] [unique_id "apK9ejAh5Y1i2tUxg4EZhwAABd0"]
[Sat Aug 29 05:07:38.009464 2026] [core:error] [pid 1028675:tid 1028892] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.009473 2026] [core:error] [pid 1028675:tid 1028892] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.010324 2026] [core:error] [pid 1018003:tid 1018270] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.010331 2026] [core:error] [pid 1018003:tid 1018270] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.011826 2026] [core:error] [pid 1028675:tid 1028880] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.011848 2026] [core:error] [pid 1028675:tid 1028880] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.013685 2026] [security2:error] [pid 1028675:tid 1028856] [client 213.209.159.223:38862] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/core/.env"] [unique_id "apK9etdHPfW2QFvhmL7segAAAC4"]
[Sat Aug 29 05:07:38.020297 2026] [core:error] [pid 1028675:tid 1028856] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.020311 2026] [core:error] [pid 1028675:tid 1028856] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.024412 2026] [core:error] [pid 1028675:tid 1028897] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.024427 2026] [core:error] [pid 1028675:tid 1028897] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.044393 2026] [security2:error] [pid 1018003:tid 1018024] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/user/.env"] [unique_id "apK9ejAh5Y1i2tUxg4EZjAAF2AM"]
[Sat Aug 29 05:07:38.046746 2026] [core:error] [pid 1018003:tid 1018186] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.046767 2026] [core:error] [pid 1018003:tid 1018186] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.050665 2026] [security2:error] [pid 1018003:tid 1018180] [client 158.158.54.35:5259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/about/function.php"] [unique_id "apK9ejAh5Y1i2tUxg4EZkAAABdU"]
[Sat Aug 29 05:07:38.054039 2026] [core:error] [pid 1028675:tid 1028847] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.054057 2026] [core:error] [pid 1028675:tid 1028847] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.062032 2026] [core:error] [pid 1018003:tid 1018028] [remote 34.138.144.127:58730] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.062053 2026] [core:error] [pid 1018003:tid 1018028] [remote 34.138.144.127:58730] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.072368 2026] [security2:error] [pid 1018003:tid 1018240] [client 61.9.8.108:1236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 108.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK9ejAh5Y1i2tUxg4EZiAAABhA"]
[Sat Aug 29 05:07:38.072521 2026] [security2:error] [pid 1018003:tid 1018240] [client 61.9.8.108:1236] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK9ejAh5Y1i2tUxg4EZiAAABhA"]
[Sat Aug 29 05:07:38.078099 2026] [core:error] [pid 1028675:tid 1028860] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.078113 2026] [core:error] [pid 1028675:tid 1028860] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.079521 2026] [security2:error] [pid 1028675:tid 1028887] [client 20.48.250.41:49137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/cytyr.php"] [unique_id "apK9etdHPfW2QFvhmL7sjQAAAE0"]
[Sat Aug 29 05:07:38.080607 2026] [core:error] [pid 1018003:tid 1018236] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.080621 2026] [core:error] [pid 1018003:tid 1018236] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.088252 2026] [core:error] [pid 1028675:tid 1028837] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.088281 2026] [core:error] [pid 1028675:tid 1028837] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.089736 2026] [security2:error] [pid 1018003:tid 1018070] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/v1/.env"] [unique_id "apK9ejAh5Y1i2tUxg4EZlwAF2DE"]
[Sat Aug 29 05:07:38.092701 2026] [security2:error] [pid 1028675:tid 1028812] [client 20.203.141.11:22326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-themes.php"] [unique_id "apK9etdHPfW2QFvhmL7skAAAAAI"]
[Sat Aug 29 05:07:38.096785 2026] [autoindex:error] [pid 1028675:tid 1028872] [client 20.104.104.62:0] AH01276: Cannot serve directory /home1/thrbikes/public_html/kevinhenley/wp-includes/block-supports/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:07:38.100498 2026] [core:error] [pid 1028675:tid 1028862] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.100518 2026] [core:error] [pid 1028675:tid 1028862] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.101237 2026] [security2:error] [pid 1028675:tid 1028932] [client 213.209.159.223:50842] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/laravel/.env"] [unique_id "apK9etdHPfW2QFvhmL7slAAAAHo"]
[Sat Aug 29 05:07:38.103451 2026] [security2:error] [pid 1028675:tid 1028919] [client 128.90.161.20:46280] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1609"] [id "900942"] [msg "Invalid WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.path=///"] [hostname "cpcontacts.greenfieldparts.com"] [uri "/___proxy_subdomain_cpcontacts/"] [unique_id "apK9etdHPfW2QFvhmL7skwAAAG0"]
[Sat Aug 29 05:07:38.111689 2026] [security2:error] [pid 1028675:tid 1028804] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/.env.old"] [unique_id "apK9etdHPfW2QFvhmL7smwAAVns"]
[Sat Aug 29 05:07:38.115154 2026] [security2:error] [pid 1018003:tid 1018059] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/v2/.env"] [unique_id "apK9ejAh5Y1i2tUxg4EZmgAF2CY"]
[Sat Aug 29 05:07:38.116678 2026] [security2:error] [pid 1018003:tid 1018067] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/v3/.env"] [unique_id "apK9ejAh5Y1i2tUxg4EZmwAF2C4"]
[Sat Aug 29 05:07:38.120580 2026] [core:error] [pid 1018003:tid 1018172] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.120599 2026] [core:error] [pid 1018003:tid 1018172] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.122549 2026] [security2:error] [pid 1028675:tid 1028925] [client 20.104.104.62:25800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.horseventure-net.penmarketing.org"] [uri "/wp-content/upgrade/index.php"] [unique_id "apK9etdHPfW2QFvhmL7sngAAAHM"]
[Sat Aug 29 05:07:38.127918 2026] [core:error] [pid 1018003:tid 1018023] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.127937 2026] [core:error] [pid 1018003:tid 1018023] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.130455 2026] [security2:error] [pid 1018003:tid 1018198] [client 20.104.104.62:20711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/ssh.php"] [unique_id "apK9ejAh5Y1i2tUxg4EZogAABec"]
[Sat Aug 29 05:07:38.130976 2026] [security2:error] [pid 1018003:tid 1018066] [remote 34.138.144.127:58730] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/privatekey.key"] [unique_id "apK9ejAh5Y1i2tUxg4EZoQAGMS0"]
[Sat Aug 29 05:07:38.136971 2026] [security2:error] [pid 1018003:tid 1018177] [client 20.63.81.20:20867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/btx25.php"] [unique_id "apK9ejAh5Y1i2tUxg4EZpQAABdI"]
[Sat Aug 29 05:07:38.138550 2026] [security2:error] [pid 1028675:tid 1028686] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/.env.php"] [unique_id "apK9etdHPfW2QFvhmL7soQAAIwY"]
[Sat Aug 29 05:07:38.143735 2026] [core:error] [pid 1028675:tid 1028888] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.143754 2026] [core:error] [pid 1028675:tid 1028888] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.148664 2026] [core:error] [pid 1018003:tid 1018097] [remote 34.138.144.127:58730] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.148683 2026] [core:error] [pid 1018003:tid 1018097] [remote 34.138.144.127:58730] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.150032 2026] [core:error] [pid 1018003:tid 1018105] [remote 34.138.144.127:58730] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.150049 2026] [core:error] [pid 1018003:tid 1018105] [remote 34.138.144.127:58730] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.151363 2026] [security2:error] [pid 1018003:tid 1018058] [remote 34.138.144.127:58730] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/key.pem"] [unique_id "apK9ejAh5Y1i2tUxg4EZrgAFxCU"]
[Sat Aug 29 05:07:38.153615 2026] [core:error] [pid 1018003:tid 1018069] [remote 34.138.144.127:58730] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.153621 2026] [core:error] [pid 1018003:tid 1018074] [remote 34.138.144.127:58730] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.153645 2026] [core:error] [pid 1018003:tid 1018069] [remote 34.138.144.127:58730] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.153650 2026] [core:error] [pid 1018003:tid 1018074] [remote 34.138.144.127:58730] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.157275 2026] [security2:error] [pid 1028675:tid 1028848] [client 20.151.200.44:64016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/sf9.php"] [unique_id "apK9etdHPfW2QFvhmL7sqQAAACY"]
[Sat Aug 29 05:07:38.164201 2026] [security2:error] [pid 1028675:tid 1028694] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/.env.swp"] [unique_id "apK9etdHPfW2QFvhmL7srwAAIw4"]
[Sat Aug 29 05:07:38.170303 2026] [core:error] [pid 1018003:tid 1018091] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.170326 2026] [core:error] [pid 1018003:tid 1018091] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.172320 2026] [security2:error] [pid 1018003:tid 1018268] [client 185.104.184.230:49208] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.jia.zbw.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/2019/wp-includes/wlwmanifest.xml"] [unique_id "apK9ejAh5Y1i2tUxg4EZvAAABiw"]
[Sat Aug 29 05:07:38.179023 2026] [core:error] [pid 1028675:tid 1028823] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.179044 2026] [core:error] [pid 1028675:tid 1028823] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.189272 2026] [security2:error] [pid 1028675:tid 1028706] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/.env~"] [unique_id "apK9etdHPfW2QFvhmL7suAAAIxk"]
[Sat Aug 29 05:07:38.191043 2026] [core:error] [pid 1018003:tid 1018190] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.191059 2026] [core:error] [pid 1018003:tid 1018190] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.192958 2026] [core:error] [pid 1018003:tid 1018216] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.192978 2026] [core:error] [pid 1018003:tid 1018216] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.203515 2026] [core:error] [pid 1018003:tid 1018179] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.203535 2026] [core:error] [pid 1018003:tid 1018179] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.210079 2026] [security2:error] [pid 1018003:tid 1018188] [client 20.48.250.41:65400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/fresh3.php"] [unique_id "apK9ejAh5Y1i2tUxg4EZzAAABd0"]
[Sat Aug 29 05:07:38.211336 2026] [core:error] [pid 1028675:tid 1028863] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.211377 2026] [core:error] [pid 1028675:tid 1028863] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.212220 2026] [core:error] [pid 1018003:tid 1018184] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.212238 2026] [core:error] [pid 1018003:tid 1018184] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.213480 2026] [core:error] [pid 1018003:tid 1018234] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.214957 2026] [core:error] [pid 1018003:tid 1018234] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.215592 2026] [autoindex:error] [pid 1028675:tid 1028902] [client 20.104.104.62:0] AH01276: Cannot serve directory /home1/thrbikes/public_html/kevinhenley/wp-includes/js/crop/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:07:38.216404 2026] [core:error] [pid 1018003:tid 1018267] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.216422 2026] [core:error] [pid 1018003:tid 1018267] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.222020 2026] [core:error] [pid 1018003:tid 1018255] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.222037 2026] [core:error] [pid 1018003:tid 1018255] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.222982 2026] [core:error] [pid 1028675:tid 1028897] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.222995 2026] [core:error] [pid 1028675:tid 1028897] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.224809 2026] [core:error] [pid 1028675:tid 1028866] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.224827 2026] [core:error] [pid 1028675:tid 1028866] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.227387 2026] [core:error] [pid 1018003:tid 1018270] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.227404 2026] [core:error] [pid 1018003:tid 1018270] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.227447 2026] [core:error] [pid 1028675:tid 1028894] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.227457 2026] [core:error] [pid 1028675:tid 1028894] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.235315 2026] [security2:error] [pid 1028675:tid 1028922] [client 4.205.62.107:8981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/channels.php"] [unique_id "apK9etdHPfW2QFvhmL7syAAAAHA"]
[Sat Aug 29 05:07:38.240202 2026] [security2:error] [pid 1028675:tid 1028811] [client 213.209.159.223:50842] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/core/.env"] [unique_id "apK9etdHPfW2QFvhmL7szAAAAAE"]
[Sat Aug 29 05:07:38.242346 2026] [core:error] [pid 1028675:tid 1028856] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.242376 2026] [core:error] [pid 1018003:tid 1018125] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.242489 2026] [core:error] [pid 1028675:tid 1028856] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.242503 2026] [core:error] [pid 1018003:tid 1018125] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.244139 2026] [core:error] [pid 1018003:tid 1018258] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.244150 2026] [core:error] [pid 1018003:tid 1018258] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.246552 2026] [security2:error] [pid 1018003:tid 1018189] [client 20.48.250.41:49011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/galer.php"] [unique_id "apK9ejAh5Y1i2tUxg4EZ1wAABd4"]
[Sat Aug 29 05:07:38.247115 2026] [security2:error] [pid 1018003:tid 1018244] [client 40.83.93.50:5492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-content/db-status.php"] [unique_id "apK9ejAh5Y1i2tUxg4EZ2AAABhQ"]
[Sat Aug 29 05:07:38.250986 2026] [core:error] [pid 1018003:tid 1018221] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.251907 2026] [security2:error] [pid 1018003:tid 1018226] [client 4.205.62.107:53151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/f35.php"] [unique_id "apK9ejAh5Y1i2tUxg4EZ2QAABgM"]
[Sat Aug 29 05:07:38.253227 2026] [core:error] [pid 1018003:tid 1018221] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.254952 2026] [core:error] [pid 1028675:tid 1028828] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.254966 2026] [core:error] [pid 1028675:tid 1028828] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.256203 2026] [security2:error] [pid 1018003:tid 1018263] [client 20.203.141.11:23632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/u.php"] [unique_id "apK9ejAh5Y1i2tUxg4EZ3AAABic"]
[Sat Aug 29 05:07:38.257384 2026] [security2:error] [pid 1028675:tid 1028837] [client 168.107.94.195:60754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9etdHPfW2QFvhmL7szwAAABs"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:38.263342 2026] [core:error] [pid 1018003:tid 1018273] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.263365 2026] [core:error] [pid 1018003:tid 1018273] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.274274 2026] [core:error] [pid 1018003:tid 1018107] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.274297 2026] [core:error] [pid 1018003:tid 1018107] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.280111 2026] [security2:error] [pid 1028675:tid 1028927] [client 20.63.81.20:20946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/radio.php"] [unique_id "apK9etdHPfW2QFvhmL7s1AAAAHU"]
[Sat Aug 29 05:07:38.281580 2026] [core:error] [pid 1018003:tid 1018101] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.281607 2026] [core:error] [pid 1018003:tid 1018101] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.284111 2026] [security2:error] [pid 1028675:tid 1028909] [client 20.104.104.62:24732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinhenley.com"] [uri "/403.php"] [unique_id "apK9etdHPfW2QFvhmL7s1QAAAGM"]
[Sat Aug 29 05:07:38.286421 2026] [security2:error] [pid 1028675:tid 1028920] [client 158.23.147.79:26619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/lock.php"] [unique_id "apK9etdHPfW2QFvhmL7s2AAAAG4"]
[Sat Aug 29 05:07:38.296164 2026] [security2:error] [pid 1018003:tid 1018216] [client 20.151.200.44:47337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/kcs.php"] [unique_id "apK9ejAh5Y1i2tUxg4EZ6AAABfk"]
[Sat Aug 29 05:07:38.296428 2026] [security2:error] [pid 1028675:tid 1028867] [client 213.209.159.223:61307] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/laravel/.env"] [unique_id "apK9etdHPfW2QFvhmL7s3AAAADk"]
[Sat Aug 29 05:07:38.297214 2026] [core:error] [pid 1028675:tid 1028850] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.297301 2026] [core:error] [pid 1028675:tid 1028850] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.299020 2026] [core:error] [pid 1018003:tid 1018174] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.299034 2026] [core:error] [pid 1018003:tid 1018174] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.299320 2026] [core:error] [pid 1028675:tid 1028858] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.299333 2026] [core:error] [pid 1028675:tid 1028858] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.300423 2026] [security2:error] [pid 1028675:tid 1028919] [client 20.48.250.41:35026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/galer.php"] [unique_id "apK9etdHPfW2QFvhmL7s3QAAAG0"]
[Sat Aug 29 05:07:38.307697 2026] [core:error] [pid 1018003:tid 1018065] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.307718 2026] [core:error] [pid 1018003:tid 1018065] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.308536 2026] [core:error] [pid 1028675:tid 1028928] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.308555 2026] [core:error] [pid 1028675:tid 1028928] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.319952 2026] [security2:error] [pid 1028675:tid 1028930] [client 20.104.104.62:25813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.horseventure-net.penmarketing.org"] [uri "/wp-content/uploads/system_core.php"] [unique_id "apK9etdHPfW2QFvhmL7s4gAAAHg"]
[Sat Aug 29 05:07:38.321305 2026] [security2:error] [pid 1018003:tid 1018119] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/var/www/.env"] [unique_id "apK9ejAh5Y1i2tUxg4EZ7QAF2GI"]
[Sat Aug 29 05:07:38.324207 2026] [core:error] [pid 1028675:tid 1028896] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.324221 2026] [core:error] [pid 1028675:tid 1028896] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.325883 2026] [security2:error] [pid 1028675:tid 1028712] [remote 35.231.104.225:42430] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:href. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "/../,ARGS:href"] [severity "CRITICAL"] [hostname "www.qandlcondos.com"] [uri "/_image"] [unique_id "apK9etdHPfW2QFvhmL7s5QAAIh8"]
[Sat Aug 29 05:07:38.328645 2026] [security2:error] [pid 1018003:tid 1018262] [client 111.235.68.106:11103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK9ejAh5Y1i2tUxg4EZ7wAABiY"]
[Sat Aug 29 05:07:38.328752 2026] [security2:error] [pid 1018003:tid 1018262] [client 111.235.68.106:11103] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK9ejAh5Y1i2tUxg4EZ7wAABiY"]
[Sat Aug 29 05:07:38.334994 2026] [core:error] [pid 1018003:tid 1018212] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.335011 2026] [core:error] [pid 1018003:tid 1018212] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.337127 2026] [security2:error] [pid 1028675:tid 1028715] [remote 35.231.104.225:42430] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "www.qandlcondos.com"] [uri "/_image"] [unique_id "apK9etdHPfW2QFvhmL7s5wAAPCI"]
[Sat Aug 29 05:07:38.340958 2026] [core:error] [pid 1028675:tid 1028875] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.340969 2026] [core:error] [pid 1028675:tid 1028875] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.344081 2026] [security2:error] [pid 1018003:tid 1018026] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/var/www/html/.env"] [unique_id "apK9ejAh5Y1i2tUxg4EZ8QAGCgU"]
[Sat Aug 29 05:07:38.352877 2026] [security2:error] [pid 1028675:tid 1028929] [client 213.202.253.4:57258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bv-place.com"] [uri "/gdftps.php"] [unique_id "apK9etdHPfW2QFvhmL7s6wAAAHc"], referer: www.google.com
[Sat Aug 29 05:07:38.364134 2026] [security2:error] [pid 1028675:tid 1028720] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.bak"] [unique_id "apK9etdHPfW2QFvhmL7s7gAAIyc"]
[Sat Aug 29 05:07:38.367563 2026] [core:error] [pid 1018003:tid 1018080] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.367581 2026] [core:error] [pid 1018003:tid 1018080] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.367856 2026] [security2:error] [pid 1028675:tid 1028726] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.old"] [unique_id "apK9etdHPfW2QFvhmL7s8QAAIy0"]
[Sat Aug 29 05:07:38.373128 2026] [security2:error] [pid 1028675:tid 1028724] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config~"] [unique_id "apK9etdHPfW2QFvhmL7s8gAAIys"]
[Sat Aug 29 05:07:38.373965 2026] [security2:error] [pid 1028675:tid 1028839] [client 20.48.250.41:49498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/bgymj.php"] [unique_id "apK9etdHPfW2QFvhmL7s8wAAAB0"]
[Sat Aug 29 05:07:38.379666 2026] [security2:error] [pid 1018003:tid 1018256] [client 213.209.159.223:39353] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/.env"] [unique_id "apK9ejAh5Y1i2tUxg4EZ9wAABiA"]
[Sat Aug 29 05:07:38.381819 2026] [security2:error] [pid 1028675:tid 1028936] [client 20.151.200.44:63972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/lte7.php"] [unique_id "apK9etdHPfW2QFvhmL7s9QAAAH4"]
[Sat Aug 29 05:07:38.383328 2026] [core:error] [pid 1018003:tid 1018255] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.383348 2026] [core:error] [pid 1018003:tid 1018255] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.384625 2026] [core:error] [pid 1018003:tid 1018270] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.384641 2026] [core:error] [pid 1018003:tid 1018270] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.385548 2026] [security2:error] [pid 1028675:tid 1028859] [client 213.209.159.223:44070] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_webdisk/app/.env"] [unique_id "apK9etdHPfW2QFvhmL7s9gAAADE"]
[Sat Aug 29 05:07:38.392038 2026] [security2:error] [pid 1018003:tid 1018132] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/web/.env"] [unique_id "apK9ejAh5Y1i2tUxg4EZ-wAFwm8"]
[Sat Aug 29 05:07:38.393448 2026] [core:error] [pid 1018003:tid 1018240] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.393470 2026] [core:error] [pid 1018003:tid 1018240] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.398802 2026] [core:error] [pid 1018003:tid 1018035] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.398821 2026] [core:error] [pid 1018003:tid 1018035] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.398982 2026] [core:error] [pid 1018003:tid 1018123] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.398994 2026] [core:error] [pid 1018003:tid 1018123] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.399547 2026] [core:error] [pid 1018003:tid 1018036] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.399558 2026] [core:error] [pid 1018003:tid 1018036] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.407987 2026] [core:error] [pid 1018003:tid 1018032] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.408001 2026] [core:error] [pid 1018003:tid 1018032] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.409513 2026] [core:error] [pid 1028675:tid 1028814] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.409536 2026] [core:error] [pid 1028675:tid 1028814] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.412402 2026] [core:error] [pid 1018003:tid 1018271] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.412417 2026] [core:error] [pid 1018003:tid 1018271] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.412973 2026] [security2:error] [pid 1018003:tid 1018222] [client 20.63.81.20:20890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/dex.php"] [unique_id "apK9ejAh5Y1i2tUxg4EaBQAABf8"]
[Sat Aug 29 05:07:38.415200 2026] [core:error] [pid 1028675:tid 1028894] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.415210 2026] [core:error] [pid 1028675:tid 1028894] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.415592 2026] [core:error] [pid 1018003:tid 1018043] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.415605 2026] [core:error] [pid 1018003:tid 1018043] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.416967 2026] [core:error] [pid 1018003:tid 1018246] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.416980 2026] [core:error] [pid 1018003:tid 1018246] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.430395 2026] [core:error] [pid 1028675:tid 1028811] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.430417 2026] [core:error] [pid 1028675:tid 1028811] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.431963 2026] [security2:error] [pid 1028675:tid 1028819] [client 213.209.159.223:61307] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/core/.env"] [unique_id "apK9etdHPfW2QFvhmL7tBAAAAAk"]
[Sat Aug 29 05:07:38.432250 2026] [core:error] [pid 1018003:tid 1018170] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.432262 2026] [core:error] [pid 1018003:tid 1018170] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.436095 2026] [core:error] [pid 1018003:tid 1018094] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.436118 2026] [core:error] [pid 1018003:tid 1018094] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.436427 2026] [security2:error] [pid 1028675:tid 1028856] [client 213.209.159.223:38862] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/app/.env"] [unique_id "apK9etdHPfW2QFvhmL7tBQAAAC4"]
[Sat Aug 29 05:07:38.438395 2026] [core:error] [pid 1018003:tid 1018258] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.438415 2026] [core:error] [pid 1018003:tid 1018258] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.443420 2026] [core:error] [pid 1018003:tid 1018192] [client 158.158.54.35:4470] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.443447 2026] [core:error] [pid 1018003:tid 1018192] [client 158.158.54.35:4470] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.450893 2026] [security2:error] [pid 1018003:tid 1018167] [client 213.209.159.223:53552] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_whm/app/.env"] [unique_id "apK9ejAh5Y1i2tUxg4EaEQAABcg"]
[Sat Aug 29 05:07:38.462739 2026] [security2:error] [pid 1028675:tid 1028832] [client 20.48.250.41:35516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/baixy.php"] [unique_id "apK9etdHPfW2QFvhmL7tCAAAABY"]
[Sat Aug 29 05:07:38.467529 2026] [core:error] [pid 1018003:tid 1018186] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.467548 2026] [core:error] [pid 1018003:tid 1018186] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.473581 2026] [core:error] [pid 1018003:tid 1018144] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.473596 2026] [core:error] [pid 1018003:tid 1018144] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.479092 2026] [security2:error] [pid 1028675:tid 1028837] [client 213.209.159.223:44315] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/laravel/.env"] [unique_id "apK9etdHPfW2QFvhmL7tCwAAABs"]
[Sat Aug 29 05:07:38.482002 2026] [security2:error] [pid 1028675:tid 1028911] [client 20.104.104.62:24733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinhenley.com"] [uri "/ava.php"] [unique_id "apK9etdHPfW2QFvhmL7tDAAAAGU"]
[Sat Aug 29 05:07:38.498025 2026] [core:error] [pid 1028675:tid 1028907] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.498051 2026] [core:error] [pid 1028675:tid 1028907] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.499548 2026] [core:error] [pid 1028675:tid 1028812] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.499564 2026] [core:error] [pid 1028675:tid 1028812] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.500168 2026] [core:error] [pid 1028675:tid 1028872] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.500182 2026] [core:error] [pid 1028675:tid 1028872] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.500607 2026] [security2:error] [pid 1018003:tid 1018179] [client 158.23.147.79:48264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK9ejAh5Y1i2tUxg4EaIwAABdQ"]
[Sat Aug 29 05:07:38.501164 2026] [core:error] [pid 1028675:tid 1028876] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.501175 2026] [core:error] [pid 1028675:tid 1028876] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.501497 2026] [core:error] [pid 1018003:tid 1018224] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.501510 2026] [core:error] [pid 1018003:tid 1018224] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.503170 2026] [core:error] [pid 1028675:tid 1028862] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.503190 2026] [core:error] [pid 1028675:tid 1028862] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.506496 2026] [security2:error] [pid 1018003:tid 1018108] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/website/.env"] [unique_id "apK9ejAh5Y1i2tUxg4EaJAAF71c"]
[Sat Aug 29 05:07:38.516803 2026] [security2:error] [pid 1018003:tid 1018183] [client 213.209.159.223:39353] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/api/.env"] [unique_id "apK9ejAh5Y1i2tUxg4EaJwAABdg"]
[Sat Aug 29 05:07:38.516967 2026] [security2:error] [pid 1018003:tid 1018263] [client 20.104.104.62:25827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.horseventure-net.penmarketing.org"] [uri "/wp-content/uploads/users.php"] [unique_id "apK9ejAh5Y1i2tUxg4EaKAAABic"]
[Sat Aug 29 05:07:38.521322 2026] [security2:error] [pid 1028675:tid 1028925] [client 213.209.159.223:44070] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_webdisk/dev/.env"] [unique_id "apK9etdHPfW2QFvhmL7tGgAAAHM"]
[Sat Aug 29 05:07:38.521565 2026] [core:error] [pid 1018003:tid 1018207] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.521580 2026] [core:error] [pid 1018003:tid 1018207] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.524425 2026] [core:error] [pid 1028675:tid 1028919] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.524445 2026] [core:error] [pid 1028675:tid 1028919] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.534865 2026] [security2:error] [pid 1028675:tid 1028927] [client 20.48.250.41:48979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/baixy.php"] [unique_id "apK9etdHPfW2QFvhmL7tHwAAAHU"]
[Sat Aug 29 05:07:38.539660 2026] [security2:error] [pid 1018003:tid 1018050] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/wp-config.php"] [unique_id "apK9ejAh5Y1i2tUxg4EaLgAGKx0"]
[Sat Aug 29 05:07:38.541302 2026] [core:error] [pid 1028675:tid 1028930] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.541319 2026] [core:error] [pid 1028675:tid 1028930] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.544309 2026] [core:error] [pid 1028675:tid 1028896] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.544333 2026] [core:error] [pid 1028675:tid 1028896] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.548669 2026] [security2:error] [pid 1028675:tid 1028821] [client 20.63.81.20:20889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/giodywky.php"] [unique_id "apK9etdHPfW2QFvhmL7tIgAAAAs"]
[Sat Aug 29 05:07:38.550498 2026] [core:error] [pid 1018003:tid 1018184] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.550513 2026] [core:error] [pid 1018003:tid 1018184] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.554530 2026] [core:error] [pid 1018003:tid 1018157] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.554545 2026] [core:error] [pid 1018003:tid 1018157] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.554747 2026] [security2:error] [pid 1018003:tid 1018048] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.flir.in.th"] [uri "/wp-config.php.new"] [unique_id "apK9ejAh5Y1i2tUxg4EaNQAGKxs"]
[Sat Aug 29 05:07:38.554748 2026] [security2:error] [pid 1018003:tid 1018057] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.flir.in.th"] [uri "/wp-config.php.bak"] [unique_id "apK9ejAh5Y1i2tUxg4EaNAAGKyQ"]
[Sat Aug 29 05:07:38.561466 2026] [security2:error] [pid 1018003:tid 1018142] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.flir.in.th"] [uri "/wp-config.php.old"] [unique_id "apK9ejAh5Y1i2tUxg4EaOAAGK3k"]
[Sat Aug 29 05:07:38.563953 2026] [core:error] [pid 1018003:tid 1018056] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.563967 2026] [core:error] [pid 1018003:tid 1018056] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.564975 2026] [security2:error] [pid 1028675:tid 1028866] [client 20.203.141.11:22301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-trackback.php"] [unique_id "apK9etdHPfW2QFvhmL7tKgAAADg"]
[Sat Aug 29 05:07:38.567734 2026] [security2:error] [pid 1018003:tid 1018102] [remote 93.123.109.228:48258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/wp-content/mysql.sql"] [unique_id "apK9ejAh5Y1i2tUxg4EaOQAGEFE"]
[Sat Aug 29 05:07:38.569234 2026] [core:error] [pid 1018003:tid 1018135] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.569251 2026] [core:error] [pid 1018003:tid 1018135] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.574190 2026] [core:error] [pid 1018003:tid 1018250] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.574205 2026] [core:error] [pid 1018003:tid 1018250] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.574547 2026] [core:error] [pid 1018003:tid 1018162] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.574562 2026] [core:error] [pid 1018003:tid 1018162] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.575279 2026] [security2:error] [pid 1028675:tid 1028873] [client 213.209.159.223:38862] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/dev/.env"] [unique_id "apK9etdHPfW2QFvhmL7tLgAAAD8"]
[Sat Aug 29 05:07:38.585026 2026] [security2:error] [pid 1018003:tid 1018152] [client 158.23.147.79:30705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK9ejAh5Y1i2tUxg4EaRQAABbk"]
[Sat Aug 29 05:07:38.585072 2026] [security2:error] [pid 1018003:tid 1018238] [client 20.48.250.41:49530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/ws69.php"] [unique_id "apK9ejAh5Y1i2tUxg4EaRAAABg4"]
[Sat Aug 29 05:07:38.585458 2026] [core:error] [pid 1018003:tid 1018246] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.585477 2026] [core:error] [pid 1018003:tid 1018246] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.590005 2026] [core:error] [pid 1018003:tid 1018258] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.590020 2026] [core:error] [pid 1018003:tid 1018258] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.593717 2026] [security2:error] [pid 1018003:tid 1018167] [client 213.209.159.223:53552] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_whm/dev/.env"] [unique_id "apK9ejAh5Y1i2tUxg4EaSQAABcg"]
[Sat Aug 29 05:07:38.606633 2026] [core:error] [pid 1018003:tid 1018174] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.606653 2026] [core:error] [pid 1018003:tid 1018174] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.608272 2026] [security2:error] [pid 1028675:tid 1028929] [client 4.205.62.107:22408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/vx.php"] [unique_id "apK9etdHPfW2QFvhmL7tMQAAAHc"]
[Sat Aug 29 05:07:38.609883 2026] [security2:error] [pid 1028675:tid 1028929] [client 20.151.200.44:63331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/tanjiro.php"] [unique_id "apK9etdHPfW2QFvhmL7tMgAAAHc"]
[Sat Aug 29 05:07:38.614250 2026] [core:error] [pid 1018003:tid 1018047] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.614269 2026] [core:error] [pid 1018003:tid 1018047] [remote 93.123.109.228:48258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.618910 2026] [security2:error] [pid 1028675:tid 1028863] [client 213.209.159.223:44315] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/core/.env"] [unique_id "apK9etdHPfW2QFvhmL7tMwAAADU"]
[Sat Aug 29 05:07:38.620801 2026] [core:error] [pid 1018003:tid 1018216] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.620815 2026] [core:error] [pid 1018003:tid 1018216] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.622009 2026] [core:error] [pid 1018003:tid 1018198] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.622025 2026] [core:error] [pid 1018003:tid 1018198] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.632260 2026] [core:error] [pid 1028675:tid 1028840] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.632278 2026] [core:error] [pid 1028675:tid 1028840] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.636303 2026] [security2:error] [pid 1028675:tid 1028918] [client 168.107.94.195:61046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9etdHPfW2QFvhmL7tOgAAAGw"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:38.645843 2026] [security2:error] [pid 1028675:tid 1028883] [client 158.158.54.35:18198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-includes/admin.php"] [unique_id "apK9etdHPfW2QFvhmL7tPAAAAEk"]
[Sat Aug 29 05:07:38.648128 2026] [core:error] [pid 1018003:tid 1018207] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.648147 2026] [core:error] [pid 1018003:tid 1018207] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.653433 2026] [security2:error] [pid 1018003:tid 1018234] [client 213.209.159.223:39353] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/backend/.env"] [unique_id "apK9ejAh5Y1i2tUxg4EaWAAABgo"]
[Sat Aug 29 05:07:38.657049 2026] [core:error] [pid 1028675:tid 1028910] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.657066 2026] [core:error] [pid 1028675:tid 1028910] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.659538 2026] [security2:error] [pid 1028675:tid 1028823] [client 213.209.159.223:50842] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/app/.env"] [unique_id "apK9etdHPfW2QFvhmL7tPwAAAA0"]
[Sat Aug 29 05:07:38.662597 2026] [security2:error] [pid 1018003:tid 1018095] [remote 93.123.109.228:45692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flicklister.com"] [uri "/.wp-config.php.swp"] [unique_id "apK9ejAh5Y1i2tUxg4EaWgAF_Eo"]
[Sat Aug 29 05:07:38.671261 2026] [security2:error] [pid 1018003:tid 1018255] [client 20.48.250.41:49119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/ava.php"] [unique_id "apK9ejAh5Y1i2tUxg4EaXAAABh8"]
[Sat Aug 29 05:07:38.673180 2026] [security2:error] [pid 1028675:tid 1028903] [client 20.104.49.130:45725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/ws85.php"] [unique_id "apK9etdHPfW2QFvhmL7tRAAAAF0"]
[Sat Aug 29 05:07:38.679003 2026] [security2:error] [pid 1028675:tid 1028894] [client 20.63.81.20:20985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/wp-kz.php"] [unique_id "apK9etdHPfW2QFvhmL7tSAAAAFQ"]
[Sat Aug 29 05:07:38.680199 2026] [security2:error] [pid 1018003:tid 1018195] [client 20.104.104.62:25032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinhenley.com"] [uri "/info.php"] [unique_id "apK9ejAh5Y1i2tUxg4EaXwAABeQ"]
[Sat Aug 29 05:07:38.682881 2026] [security2:error] [pid 1028675:tid 1028861] [client 20.48.250.41:35061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/ava.php"] [unique_id "apK9etdHPfW2QFvhmL7tSwAAADM"]
[Sat Aug 29 05:07:38.704968 2026] [core:error] [pid 1018003:tid 1018156] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.704985 2026] [core:error] [pid 1018003:tid 1018156] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.708172 2026] [core:error] [pid 1028675:tid 1028890] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.708193 2026] [core:error] [pid 1028675:tid 1028890] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.710069 2026] [security2:error] [pid 1028675:tid 1028917] [client 158.23.147.79:50010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/atomlib.php"] [unique_id "apK9etdHPfW2QFvhmL7tWgAAAGs"]
[Sat Aug 29 05:07:38.733392 2026] [security2:error] [pid 1018003:tid 1018212] [client 20.104.104.62:25728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.horseventure-net.penmarketing.org"] [uri "/wp-content/wp-conflg.php"] [unique_id "apK9ejAh5Y1i2tUxg4EaZwAABfU"]
[Sat Aug 29 05:07:38.733472 2026] [core:error] [pid 1028675:tid 1028811] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.733486 2026] [core:error] [pid 1028675:tid 1028811] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.738201 2026] [core:error] [pid 1028675:tid 1028911] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.738220 2026] [core:error] [pid 1028675:tid 1028911] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.739770 2026] [core:error] [pid 1028675:tid 1028907] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.739792 2026] [core:error] [pid 1028675:tid 1028907] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.742817 2026] [security2:error] [pid 1018003:tid 1018161] [client 40.83.93.50:5443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-content/disagrsxr.php"] [unique_id "apK9ejAh5Y1i2tUxg4EabgAABcI"]
[Sat Aug 29 05:07:38.742934 2026] [core:error] [pid 1018003:tid 1018277] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.742945 2026] [core:error] [pid 1018003:tid 1018277] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.746322 2026] [security2:error] [pid 1028675:tid 1028867] [client 20.104.104.62:64728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/s4d.php"] [unique_id "apK9etdHPfW2QFvhmL7tZgAAADk"]
[Sat Aug 29 05:07:38.753472 2026] [core:error] [pid 1018003:tid 1018152] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.753489 2026] [core:error] [pid 1018003:tid 1018152] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.756905 2026] [core:error] [pid 1028675:tid 1028850] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.756923 2026] [core:error] [pid 1028675:tid 1028850] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.768171 2026] [core:error] [pid 1028675:tid 1028919] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.768190 2026] [core:error] [pid 1028675:tid 1028919] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.770109 2026] [core:error] [pid 1028675:tid 1028927] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.770132 2026] [core:error] [pid 1028675:tid 1028927] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.774293 2026] [security2:error] [pid 1018003:tid 1018163] [client 185.104.184.230:49218] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.jia.zbw.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/wp1/wp-includes/wlwmanifest.xml"] [unique_id "apK9ejAh5Y1i2tUxg4EacgAABcQ"]
[Sat Aug 29 05:07:38.781666 2026] [security2:error] [pid 1028675:tid 1028888] [client 20.203.141.11:25521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/r.php"] [unique_id "apK9etdHPfW2QFvhmL7tbAAAAE4"]
[Sat Aug 29 05:07:38.789673 2026] [security2:error] [pid 1018003:tid 1018236] [client 213.209.159.223:39353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/phpinfo.php"] [unique_id "apK9ejAh5Y1i2tUxg4EadAAABgw"]
[Sat Aug 29 05:07:38.796822 2026] [security2:error] [pid 1028675:tid 1028937] [client 213.209.159.223:50842] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/dev/.env"] [unique_id "apK9etdHPfW2QFvhmL7tcAAAAH8"]
[Sat Aug 29 05:07:38.808093 2026] [security2:error] [pid 1028675:tid 1028820] [client 213.209.159.223:44070] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_webdisk/server/.env"] [unique_id "apK9etdHPfW2QFvhmL7tdAAAAAo"]
[Sat Aug 29 05:07:38.811167 2026] [core:error] [pid 1018003:tid 1018174] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.811186 2026] [core:error] [pid 1018003:tid 1018174] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.818680 2026] [security2:error] [pid 1018003:tid 1018271] [client 20.48.250.41:49086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/gdn.php"] [unique_id "apK9ejAh5Y1i2tUxg4EaeQAABi8"]
[Sat Aug 29 05:07:38.819674 2026] [security2:error] [pid 1018003:tid 1018203] [client 4.205.62.107:26678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/sdsa.php"] [unique_id "apK9ejAh5Y1i2tUxg4EaegAABew"]
[Sat Aug 29 05:07:38.823817 2026] [security2:error] [pid 1018003:tid 1018233] [client 20.48.250.41:35017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/gdn.php"] [unique_id "apK9ejAh5Y1i2tUxg4EafwAABgk"]
[Sat Aug 29 05:07:38.823871 2026] [security2:error] [pid 1018003:tid 1018198] [client 20.63.81.20:20904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/wp-includes/ID3/getid.php"] [unique_id "apK9ejAh5Y1i2tUxg4EafgAABec"]
[Sat Aug 29 05:07:38.830985 2026] [security2:error] [pid 1028675:tid 1028839] [client 93.123.109.228:60688] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK9etdHPfW2QFvhmL7tdwAAAB0"]
[Sat Aug 29 05:07:38.836212 2026] [core:error] [pid 1018003:tid 1018167] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.836235 2026] [core:error] [pid 1018003:tid 1018167] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.844215 2026] [core:error] [pid 1028675:tid 1028936] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.844234 2026] [core:error] [pid 1028675:tid 1028936] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.849529 2026] [security2:error] [pid 1028675:tid 1028859] [client 213.209.159.223:61307] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/app/.env"] [unique_id "apK9etdHPfW2QFvhmL7tfAAAADE"]
[Sat Aug 29 05:07:38.851297 2026] [security2:error] [pid 1018003:tid 1018207] [client 93.123.109.228:60734] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK9ejAh5Y1i2tUxg4EahwAABfA"]
[Sat Aug 29 05:07:38.855001 2026] [core:error] [pid 1018003:tid 1018177] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.855020 2026] [core:error] [pid 1018003:tid 1018177] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.858214 2026] [security2:error] [pid 1018003:tid 1018236] [client 52.139.37.240:37121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/jga.php"] [unique_id "apK9ejAh5Y1i2tUxg4EaigAABgw"]
[Sat Aug 29 05:07:38.859125 2026] [security2:error] [pid 1028675:tid 1028816] [client 213.209.159.223:38862] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/server/.env"] [unique_id "apK9etdHPfW2QFvhmL7tfQAAAAY"]
[Sat Aug 29 05:07:38.862244 2026] [core:error] [pid 1018003:tid 1018231] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.862262 2026] [core:error] [pid 1018003:tid 1018231] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.877792 2026] [security2:error] [pid 1028675:tid 1028904] [client 20.104.104.62:24756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinhenley.com"] [uri "/wp-admin/admin.php"] [unique_id "apK9etdHPfW2QFvhmL7tfwAAAF4"]
[Sat Aug 29 05:07:38.878163 2026] [security2:error] [pid 1018003:tid 1018156] [client 4.205.62.107:58387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/ms-edit.php"] [unique_id "apK9ejAh5Y1i2tUxg4EakAAABb0"]
[Sat Aug 29 05:07:38.880205 2026] [security2:error] [pid 1018003:tid 1018195] [client 93.123.109.228:60774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(\\\\/\\\\*\\\\!? ?(?:select|grant|delete|insert|drop|alter|replace|truncate|update|create|rename|describe|union|concat|group_concat))" at REQUEST_FILENAME. [file "/opt/mod_security/hg_rules.conf"] [line "1019"] [id "9000042"] [rev "2.2.2"] [msg "SQL Comment Sequence Detected."] [data "/*update"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/*update.cgi*"] [unique_id "apK9ejAh5Y1i2tUxg4EakQAABeQ"]
[Sat Aug 29 05:07:38.887576 2026] [security2:error] [pid 1028675:tid 1028876] [client 158.158.54.35:31468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-content/admin.php"] [unique_id "apK9etdHPfW2QFvhmL7tgwAAAEI"]
[Sat Aug 29 05:07:38.897596 2026] [security2:error] [pid 1018003:tid 1018238] [client 20.104.49.130:53832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/sd.php"] [unique_id "apK9ejAh5Y1i2tUxg4EamQAABg4"]
[Sat Aug 29 05:07:38.901580 2026] [core:error] [pid 1018003:tid 1018270] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.901600 2026] [core:error] [pid 1018003:tid 1018270] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.904311 2026] [core:error] [pid 1028675:tid 1028771] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.904330 2026] [core:error] [pid 1028675:tid 1028771] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.920534 2026] [core:error] [pid 1018003:tid 1018206] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.920558 2026] [core:error] [pid 1018003:tid 1018206] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.931312 2026] [security2:error] [pid 1018003:tid 1018234] [client 20.104.104.62:25613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.horseventure-net.penmarketing.org"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK9ejAh5Y1i2tUxg4EaogAABgo"]
[Sat Aug 29 05:07:38.950494 2026] [core:error] [pid 1018003:tid 1018170] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.950524 2026] [core:error] [pid 1018003:tid 1018170] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.958075 2026] [security2:error] [pid 1018003:tid 1018167] [client 20.48.250.41:49130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/f2.php"] [unique_id "apK9ejAh5Y1i2tUxg4EapwAABcg"]
[Sat Aug 29 05:07:38.966406 2026] [security2:error] [pid 1018003:tid 1018231] [client 20.48.250.41:65351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/ccs.php"] [unique_id "apK9ejAh5Y1i2tUxg4EarAAABgc"]
[Sat Aug 29 05:07:38.968102 2026] [access_compat:error] [pid 1028675:tid 1028890] [client 67.20.76.220:53422] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:07:38.969673 2026] [security2:error] [pid 1018003:tid 1018221] [client 52.139.37.240:18819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/mini.php"] [unique_id "apK9ejAh5Y1i2tUxg4EargAABf4"]
[Sat Aug 29 05:07:38.970674 2026] [core:error] [pid 1018003:tid 1018198] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.970697 2026] [core:error] [pid 1018003:tid 1018198] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.973645 2026] [core:error] [pid 1018003:tid 1018263] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.973662 2026] [core:error] [pid 1018003:tid 1018263] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.975587 2026] [security2:error] [pid 1018003:tid 1018184] [client 20.63.81.20:20987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/session.php"] [unique_id "apK9ejAh5Y1i2tUxg4EasQAABdk"]
[Sat Aug 29 05:07:38.985812 2026] [security2:error] [pid 1028675:tid 1028900] [client 213.209.159.223:61307] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/dev/.env"] [unique_id "apK9etdHPfW2QFvhmL7tlQAAAFo"]
[Sat Aug 29 05:07:38.986967 2026] [security2:error] [pid 1028675:tid 1028884] [client 93.123.109.228:60688] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/.docker/.env"] [unique_id "apK9etdHPfW2QFvhmL7tlgAAAEo"]
[Sat Aug 29 05:07:38.988429 2026] [security2:error] [pid 1018003:tid 1018195] [client 91.92.47.191:40128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.corrigansbasement.com"] [uri "/settings.php"] [unique_id "apK9ejAh5Y1i2tUxg4EatgAABeQ"]
[Sat Aug 29 05:07:38.988977 2026] [security2:error] [pid 1018003:tid 1018266] [client 103.162.125.59:57368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.125.162.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK9ejAh5Y1i2tUxg4EatwAABio"]
[Sat Aug 29 05:07:38.989268 2026] [security2:error] [pid 1028675:tid 1028786] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/.wp-config.php.swp"] [unique_id "apK9etdHPfW2QFvhmL7tmAAAJ2k"]
[Sat Aug 29 05:07:38.989673 2026] [security2:error] [pid 1018003:tid 1018266] [client 103.162.125.59:57368] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK9ejAh5Y1i2tUxg4EatwAABio"]
[Sat Aug 29 05:07:38.992889 2026] [core:error] [pid 1018003:tid 1018185] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:38.992905 2026] [core:error] [pid 1018003:tid 1018185] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.002670 2026] [security2:error] [pid 1028675:tid 1028872] [client 51.195.150.164:64042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 164.150.195.51.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "pinnaclenestwatch.com"] [uri "/images/images/cache.php"] [unique_id "apK9e9dHPfW2QFvhmL7tmgAAAD4"], referer: www.google.com
[Sat Aug 29 05:07:39.004654 2026] [security2:error] [pid 1018003:tid 1018161] [client 93.123.109.228:60700] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/.docker/laravel/app/.env"] [unique_id "apK9ezAh5Y1i2tUxg4EaugAABcI"]
[Sat Aug 29 05:07:39.006904 2026] [security2:error] [pid 1018003:tid 1018161] [client 4.205.62.107:22043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/rum.or.php"] [unique_id "apK9ezAh5Y1i2tUxg4EauwAABcI"]
[Sat Aug 29 05:07:39.016472 2026] [security2:error] [pid 1018003:tid 1018163] [client 168.107.94.195:61395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9ezAh5Y1i2tUxg4EavgAABcQ"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:39.024819 2026] [security2:error] [pid 1028675:tid 1028789] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/ADMIN/.env"] [unique_id "apK9e9dHPfW2QFvhmL7tnwAAJ2w"]
[Sat Aug 29 05:07:39.025047 2026] [core:error] [pid 1028675:tid 1028911] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.025060 2026] [core:error] [pid 1028675:tid 1028911] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.026443 2026] [core:error] [pid 1028675:tid 1028920] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.026463 2026] [core:error] [pid 1028675:tid 1028920] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.028809 2026] [security2:error] [pid 1018003:tid 1018265] [client 20.151.200.44:64619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/Rk41.php"] [unique_id "apK9ezAh5Y1i2tUxg4EaxQAABik"]
[Sat Aug 29 05:07:39.029517 2026] [security2:error] [pid 1018003:tid 1018233] [client 93.123.109.228:60724] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK9ezAh5Y1i2tUxg4EaxAAABgk"]
[Sat Aug 29 05:07:39.030205 2026] [core:error] [pid 1018003:tid 1018164] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.030217 2026] [core:error] [pid 1018003:tid 1018164] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.031167 2026] [core:error] [pid 1018003:tid 1018186] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.031184 2026] [core:error] [pid 1018003:tid 1018186] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.031347 2026] [core:error] [pid 1018003:tid 1018268] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.031375 2026] [core:error] [pid 1018003:tid 1018268] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.057468 2026] [core:error] [pid 1028675:tid 1028819] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.057488 2026] [core:error] [pid 1028675:tid 1028819] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.059514 2026] [security2:error] [pid 1018003:tid 1018240] [client 52.139.37.240:37706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/mac.php"] [unique_id "apK9ezAh5Y1i2tUxg4EaywAABhA"]
[Sat Aug 29 05:07:39.072773 2026] [security2:error] [pid 1028675:tid 1028919] [client 158.23.147.79:53773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK9e9dHPfW2QFvhmL7tqgAAAG0"]
[Sat Aug 29 05:07:39.075162 2026] [security2:error] [pid 1028675:tid 1028851] [client 20.104.104.62:24743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinhenley.com"] [uri "/wp-content/plugins/about.php"] [unique_id "apK9e9dHPfW2QFvhmL7trAAAACk"]
[Sat Aug 29 05:07:39.075816 2026] [security2:error] [pid 1028675:tid 1028792] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/API/.env"] [unique_id "apK9e9dHPfW2QFvhmL7tqQAAJ28"]
[Sat Aug 29 05:07:39.078066 2026] [security2:error] [pid 1028675:tid 1028888] [client 158.23.147.79:35783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-content/index.php"] [unique_id "apK9e9dHPfW2QFvhmL7trQAAAE4"]
[Sat Aug 29 05:07:39.081082 2026] [core:error] [pid 1028675:tid 1028794] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.081095 2026] [core:error] [pid 1028675:tid 1028794] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.085443 2026] [core:error] [pid 1018003:tid 1018182] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.085461 2026] [core:error] [pid 1018003:tid 1018182] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.087329 2026] [security2:error] [pid 1018003:tid 1018266] [client 158.23.147.79:25522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK9ezAh5Y1i2tUxg4Ea0wAABio"]
[Sat Aug 29 05:07:39.090242 2026] [security2:error] [pid 1018003:tid 1018185] [client 20.48.250.41:35071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/f2.php"] [unique_id "apK9ezAh5Y1i2tUxg4Ea1QAABdo"]
[Sat Aug 29 05:07:39.093470 2026] [security2:error] [pid 1028675:tid 1028841] [client 197.219.150.206:63121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK9e9dHPfW2QFvhmL7tsAAAAB8"]
[Sat Aug 29 05:07:39.093611 2026] [security2:error] [pid 1028675:tid 1028841] [client 197.219.150.206:63121] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK9e9dHPfW2QFvhmL7tsAAAAB8"]
[Sat Aug 29 05:07:39.094431 2026] [security2:error] [pid 1018003:tid 1018202] [client 93.123.109.228:60750] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/.env.backup"] [unique_id "apK9ezAh5Y1i2tUxg4Ea1gAABes"]
[Sat Aug 29 05:07:39.094914 2026] [security2:error] [pid 1028675:tid 1028821] [client 213.209.159.223:50842] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/server/.env"] [unique_id "apK9e9dHPfW2QFvhmL7tsQAAAAs"]
[Sat Aug 29 05:07:39.100308 2026] [security2:error] [pid 1028675:tid 1028870] [client 20.104.104.62:40235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/slot.php"] [unique_id "apK9e9dHPfW2QFvhmL7tswAAADw"]
[Sat Aug 29 05:07:39.114105 2026] [security2:error] [pid 1028675:tid 1028839] [client 20.63.81.20:20980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/eagle.php"] [unique_id "apK9e9dHPfW2QFvhmL7ttQAAAB0"]
[Sat Aug 29 05:07:39.124044 2026] [security2:error] [pid 1018003:tid 1018161] [client 20.48.250.41:49020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/grsiuk.php"] [unique_id "apK9ezAh5Y1i2tUxg4Ea2QAABcI"]
[Sat Aug 29 05:07:39.132076 2026] [security2:error] [pid 1018003:tid 1018152] [client 20.48.250.41:49525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/mar.php"] [unique_id "apK9ezAh5Y1i2tUxg4Ea3AAABbk"]
[Sat Aug 29 05:07:39.133333 2026] [security2:error] [pid 1018003:tid 1018172] [client 213.209.159.223:53552] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_whm/server/.env"] [unique_id "apK9ezAh5Y1i2tUxg4Ea3QAABc0"]
[Sat Aug 29 05:07:39.134029 2026] [core:error] [pid 1018003:tid 1018246] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.134050 2026] [core:error] [pid 1018003:tid 1018246] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.141098 2026] [security2:error] [pid 1018003:tid 1018256] [client 93.123.109.228:60784] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/.env.bak"] [unique_id "apK9ezAh5Y1i2tUxg4Ea3gAABiA"]
[Sat Aug 29 05:07:39.143270 2026] [core:error] [pid 1028675:tid 1028791] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.143285 2026] [core:error] [pid 1028675:tid 1028791] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.148651 2026] [security2:error] [pid 1028675:tid 1028783] [remote 74.7.227.189:36472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 189.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pinnacleforms.com"] [uri "/jOEpickCst.php"] [unique_id "apK9e9dHPfW2QFvhmL7tuwAAPGY"], referer: https://mail.pinnacleforms.com/
[Sat Aug 29 05:07:39.165759 2026] [core:error] [pid 1028675:tid 1028795] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.165774 2026] [core:error] [pid 1028675:tid 1028795] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.166242 2026] [core:error] [pid 1028675:tid 1028784] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.166253 2026] [core:error] [pid 1028675:tid 1028784] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.168694 2026] [core:error] [pid 1028675:tid 1028782] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.168716 2026] [core:error] [pid 1028675:tid 1028782] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.168769 2026] [core:error] [pid 1028675:tid 1028800] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.168775 2026] [core:error] [pid 1028675:tid 1028800] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.187015 2026] [security2:error] [pid 1028675:tid 1028790] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/BACK/.env"] [unique_id "apK9e9dHPfW2QFvhmL7twQAAZG0"]
[Sat Aug 29 05:07:39.187170 2026] [security2:error] [pid 1028675:tid 1028797] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/APP/.env"] [unique_id "apK9e9dHPfW2QFvhmL7txAAAZHQ"]
[Sat Aug 29 05:07:39.187189 2026] [security2:error] [pid 1028675:tid 1028788] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/BACKEND/.env"] [unique_id "apK9e9dHPfW2QFvhmL7twwAAZGs"]
[Sat Aug 29 05:07:39.187199 2026] [security2:error] [pid 1028675:tid 1028787] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/Api/.env"] [unique_id "apK9e9dHPfW2QFvhmL7twgAAZGo"]
[Sat Aug 29 05:07:39.188055 2026] [security2:error] [pid 1028675:tid 1028802] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/BE/.env"] [unique_id "apK9e9dHPfW2QFvhmL7txQAAZHk"]
[Sat Aug 29 05:07:39.197343 2026] [security2:error] [pid 1028675:tid 1028820] [client 52.139.37.240:19349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/v.php"] [unique_id "apK9e9dHPfW2QFvhmL7txwAAAAo"]
[Sat Aug 29 05:07:39.198531 2026] [security2:error] [pid 1018003:tid 1018271] [client 20.104.104.62:25632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.horseventure-net.penmarketing.org"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK9ezAh5Y1i2tUxg4Ea5wAABi8"]
[Sat Aug 29 05:07:39.199238 2026] [core:error] [pid 1028675:tid 1028770] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.199249 2026] [core:error] [pid 1028675:tid 1028770] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.227671 2026] [security2:error] [pid 1028675:tid 1028807] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/Backend/.env"] [unique_id "apK9e9dHPfW2QFvhmL7tzQAAY34"]
[Sat Aug 29 05:07:39.231465 2026] [security2:error] [pid 1018003:tid 1018195] [client 40.83.93.50:5441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-content/f35.php"] [unique_id "apK9ezAh5Y1i2tUxg4Ea7QAABeQ"]
[Sat Aug 29 05:07:39.232897 2026] [security2:error] [pid 1018003:tid 1018162] [client 158.158.54.35:13092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/lock360.php"] [unique_id "apK9ezAh5Y1i2tUxg4Ea7gAABcM"]
[Sat Aug 29 05:07:39.235054 2026] [security2:error] [pid 1028675:tid 1028683] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/Be/.env"] [unique_id "apK9e9dHPfW2QFvhmL7t0AAAJAM"]
[Sat Aug 29 05:07:39.235549 2026] [security2:error] [pid 1018003:tid 1018177] [client 93.123.109.228:60710] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/.env.old"] [unique_id "apK9ezAh5Y1i2tUxg4Ea7wAABdI"]
[Sat Aug 29 05:07:39.246077 2026] [security2:error] [pid 1018003:tid 1018268] [client 93.123.109.228:60750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/.env.php"] [unique_id "apK9ezAh5Y1i2tUxg4Ea8gAABiw"]
[Sat Aug 29 05:07:39.247387 2026] [security2:error] [pid 1018003:tid 1018081] [remote 34.138.144.127:58730] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "cpcalendars.roycehomesales.com"] [uri "/_image"] [unique_id "apK9ezAh5Y1i2tUxg4Ea8wAGLDw"]
[Sat Aug 29 05:07:39.250705 2026] [security2:error] [pid 1028675:tid 1028866] [client 20.63.81.20:20804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/up-kon.php"] [unique_id "apK9e9dHPfW2QFvhmL7t1QAAADg"]
[Sat Aug 29 05:07:39.252276 2026] [core:error] [pid 1018003:tid 1018081] [remote 34.138.144.127:58730] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.257257 2026] [security2:error] [pid 1028675:tid 1028900] [client 213.209.159.223:44070] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_webdisk/staging/.env"] [unique_id "apK9e9dHPfW2QFvhmL7t1wAAAFo"]
[Sat Aug 29 05:07:39.263812 2026] [security2:error] [pid 1028675:tid 1028872] [client 213.209.159.223:61307] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/server/.env"] [unique_id "apK9e9dHPfW2QFvhmL7t2QAAAD4"]
[Sat Aug 29 05:07:39.271974 2026] [security2:error] [pid 1018003:tid 1018226] [client 20.203.141.11:13616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/222.php"] [unique_id "apK9ezAh5Y1i2tUxg4Ea9gAABgM"]
[Sat Aug 29 05:07:39.273283 2026] [security2:error] [pid 1018003:tid 1018234] [client 20.104.104.62:24724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinhenley.com"] [uri "/wp-content/plugins/plugin/index.php"] [unique_id "apK9ezAh5Y1i2tUxg4Ea9wAABgo"]
[Sat Aug 29 05:07:39.275802 2026] [security2:error] [pid 1028675:tid 1028920] [client 20.48.250.41:35499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/grsiuk.php"] [unique_id "apK9e9dHPfW2QFvhmL7t2wAAAG4"]
[Sat Aug 29 05:07:39.278375 2026] [security2:error] [pid 1028675:tid 1028902] [client 20.48.250.41:49140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/wp-scr1pts.php"] [unique_id "apK9e9dHPfW2QFvhmL7t3AAAAFw"]
[Sat Aug 29 05:07:39.284757 2026] [security2:error] [pid 1028675:tid 1028890] [client 213.209.159.223:38862] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/staging/.env"] [unique_id "apK9e9dHPfW2QFvhmL7t3QAAAFA"]
[Sat Aug 29 05:07:39.287147 2026] [core:error] [pid 1028675:tid 1028925] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.287162 2026] [core:error] [pid 1028675:tid 1028925] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.288956 2026] [core:error] [pid 1018003:tid 1018221] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.288969 2026] [core:error] [pid 1018003:tid 1018221] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.323442 2026] [security2:error] [pid 1028675:tid 1028929] [client 20.203.141.11:12623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-blog.php"] [unique_id "apK9e9dHPfW2QFvhmL7t6QAAAHc"]
[Sat Aug 29 05:07:39.334533 2026] [security2:error] [pid 1018003:tid 1018027] [remote 93.123.109.228:45692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flicklister.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK9ezAh5Y1i2tUxg4EbAgAF_AY"]
[Sat Aug 29 05:07:39.337481 2026] [security2:error] [pid 1018003:tid 1018191] [client 158.158.54.35:4435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-configs.php"] [unique_id "apK9ezAh5Y1i2tUxg4EbAwAABeA"]
[Sat Aug 29 05:07:39.338395 2026] [security2:error] [pid 1028675:tid 1028812] [client 213.209.159.223:44315] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/app/.env"] [unique_id "apK9e9dHPfW2QFvhmL7t7gAAAAI"]
[Sat Aug 29 05:07:39.345006 2026] [core:error] [pid 1028675:tid 1028883] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.345028 2026] [core:error] [pid 1028675:tid 1028883] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.348430 2026] [core:error] [pid 1018003:tid 1018179] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.348454 2026] [core:error] [pid 1018003:tid 1018179] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.352185 2026] [security2:error] [pid 1028675:tid 1028824] [client 93.123.109.228:60688] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/.env.swp"] [unique_id "apK9e9dHPfW2QFvhmL7t-QAAAA4"]
[Sat Aug 29 05:07:39.354733 2026] [core:error] [pid 1028675:tid 1028880] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.354756 2026] [core:error] [pid 1028675:tid 1028880] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.354906 2026] [core:error] [pid 1028675:tid 1028821] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.354922 2026] [core:error] [pid 1028675:tid 1028821] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.356538 2026] [core:error] [pid 1028675:tid 1028814] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.356556 2026] [core:error] [pid 1028675:tid 1028814] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.358967 2026] [security2:error] [pid 1028675:tid 1028863] [client 20.48.250.41:65162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/ccu.php"] [unique_id "apK9e9dHPfW2QFvhmL7t_gAAADU"]
[Sat Aug 29 05:07:39.359410 2026] [core:error] [pid 1018003:tid 1018183] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.359426 2026] [core:error] [pid 1018003:tid 1018183] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.369971 2026] [security2:error] [pid 1028675:tid 1028927] [client 185.104.184.230:50354] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.jia.zbw.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/test/wp-includes/wlwmanifest.xml"] [unique_id "apK9e9dHPfW2QFvhmL7uAgAAAHU"]
[Sat Aug 29 05:07:39.371546 2026] [core:error] [pid 1028675:tid 1028870] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.371562 2026] [core:error] [pid 1028675:tid 1028870] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.382667 2026] [core:error] [pid 1018003:tid 1018185] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.382695 2026] [core:error] [pid 1018003:tid 1018185] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.383021 2026] [core:error] [pid 1028675:tid 1028918] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.383034 2026] [core:error] [pid 1028675:tid 1028918] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.383091 2026] [core:error] [pid 1018003:tid 1018238] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.383101 2026] [core:error] [pid 1018003:tid 1018238] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.383308 2026] [core:error] [pid 1018003:tid 1018217] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.383318 2026] [core:error] [pid 1018003:tid 1018217] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.388623 2026] [security2:error] [pid 1028675:tid 1028923] [client 20.63.81.20:20902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/tinny.php"] [unique_id "apK9e9dHPfW2QFvhmL7uCAAAAHE"]
[Sat Aug 29 05:07:39.390558 2026] [core:error] [pid 1028675:tid 1028910] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.390574 2026] [core:error] [pid 1028675:tid 1028910] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.396938 2026] [security2:error] [pid 1018003:tid 1018172] [client 168.107.94.195:61728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9ezAh5Y1i2tUxg4EbEAAABc0"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:39.399887 2026] [security2:error] [pid 1028675:tid 1028845] [client 20.104.104.62:25810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.horseventure-net.penmarketing.org"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "apK9e9dHPfW2QFvhmL7uCgAAACM"]
[Sat Aug 29 05:07:39.402188 2026] [security2:error] [pid 1018003:tid 1018273] [client 93.123.109.228:60710] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/.env~"] [unique_id "apK9ezAh5Y1i2tUxg4EbDwAABjE"]
[Sat Aug 29 05:07:39.405041 2026] [security2:error] [pid 1028675:tid 1028917] [client 4.205.62.107:53375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/ws79.php"] [unique_id "apK9e9dHPfW2QFvhmL7uDQAAAGs"]
[Sat Aug 29 05:07:39.407523 2026] [security2:error] [pid 1028675:tid 1028930] [client 4.205.62.107:3943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/api.php"] [unique_id "apK9e9dHPfW2QFvhmL7uDgAAAHg"]
[Sat Aug 29 05:07:39.409917 2026] [core:error] [pid 1028675:tid 1028909] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.409937 2026] [core:error] [pid 1028675:tid 1028909] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.438722 2026] [security2:error] [pid 1028675:tid 1028832] [client 20.48.250.41:35467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/wp-scr1pts.php"] [unique_id "apK9e9dHPfW2QFvhmL7uFQAAABY"]
[Sat Aug 29 05:07:39.442591 2026] [security2:error] [pid 1028675:tid 1028884] [client 20.48.250.41:49143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/num.php"] [unique_id "apK9e9dHPfW2QFvhmL7uGAAAAEo"]
[Sat Aug 29 05:07:39.472714 2026] [security2:error] [pid 1018003:tid 1018233] [client 158.23.147.79:32617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK9ezAh5Y1i2tUxg4EbJwAABgk"]
[Sat Aug 29 05:07:39.476183 2026] [security2:error] [pid 1028675:tid 1028837] [client 213.209.159.223:44315] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/dev/.env"] [unique_id "apK9e9dHPfW2QFvhmL7uHwAAABs"]
[Sat Aug 29 05:07:39.476721 2026] [core:error] [pid 1028675:tid 1028911] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.476739 2026] [core:error] [pid 1028675:tid 1028911] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.479456 2026] [core:error] [pid 1028675:tid 1028857] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.479472 2026] [core:error] [pid 1028675:tid 1028857] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.481496 2026] [security2:error] [pid 1018003:tid 1018263] [client 20.104.104.62:24706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinhenley.com"] [uri "/wp-content/uploads/index.php/wp-includes/Text/"] [unique_id "apK9ezAh5Y1i2tUxg4EbKgAABic"]
[Sat Aug 29 05:07:39.482503 2026] [core:error] [pid 1028675:tid 1028828] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.482518 2026] [core:error] [pid 1028675:tid 1028828] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.492934 2026] [security2:error] [pid 1018003:tid 1018236] [client 93.123.109.228:60784] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/.git/config.bak"] [unique_id "apK9ezAh5Y1i2tUxg4EbLgAABgw"]
[Sat Aug 29 05:07:39.506446 2026] [security2:error] [pid 1028675:tid 1028881] [client 146.70.194.254:57214] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "modelbasenjis.com"] [uri "/cgi-sys/suspendedpage.cgi/wp2/wp-includes/wlwmanifest.xml"] [unique_id "apK9e9dHPfW2QFvhmL7uJQAAAEc"]
[Sat Aug 29 05:07:39.517773 2026] [security2:error] [pid 1028675:tid 1028821] [client 93.123.109.228:60688] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/.git/config.old"] [unique_id "apK9e9dHPfW2QFvhmL7uJgAAAAs"]
[Sat Aug 29 05:07:39.517863 2026] [security2:error] [pid 1028675:tid 1028880] [client 213.209.159.223:50842] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/staging/.env"] [unique_id "apK9e9dHPfW2QFvhmL7uJwAAAEY"]
[Sat Aug 29 05:07:39.523036 2026] [core:error] [pid 1028675:tid 1028819] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.523054 2026] [core:error] [pid 1028675:tid 1028819] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.525762 2026] [security2:error] [pid 1028675:tid 1028851] [client 20.63.81.20:20881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/wp-easy.php"] [unique_id "apK9e9dHPfW2QFvhmL7uKgAAACk"]
[Sat Aug 29 05:07:39.530281 2026] [core:error] [pid 1028675:tid 1028707] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.530296 2026] [core:error] [pid 1028675:tid 1028707] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.531228 2026] [security2:error] [pid 1018003:tid 1018231] [client 93.123.109.228:60734] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/.git/config~"] [unique_id "apK9ezAh5Y1i2tUxg4EbLwAABgc"]
[Sat Aug 29 05:07:39.544236 2026] [core:error] [pid 1028675:tid 1028728] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.544253 2026] [core:error] [pid 1028675:tid 1028728] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.545673 2026] [core:error] [pid 1028675:tid 1028688] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.545702 2026] [core:error] [pid 1028675:tid 1028688] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.550341 2026] [security2:error] [pid 1028675:tid 1028737] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK9e9dHPfW2QFvhmL7uNwAAHzg"]
[Sat Aug 29 05:07:39.551911 2026] [security2:error] [pid 1028675:tid 1028888] [client 20.104.104.62:20729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/sad.php"] [unique_id "apK9e9dHPfW2QFvhmL7uOAAAAE4"]
[Sat Aug 29 05:07:39.563692 2026] [security2:error] [pid 1018003:tid 1018221] [client 213.209.159.223:47761] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/laravel/.env"] [unique_id "apK9ezAh5Y1i2tUxg4EbOQAABf4"]
[Sat Aug 29 05:07:39.564493 2026] [core:error] [pid 1018003:tid 1018234] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.564514 2026] [core:error] [pid 1018003:tid 1018234] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.569187 2026] [core:error] [pid 1018003:tid 1018174] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.569206 2026] [core:error] [pid 1018003:tid 1018174] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.578020 2026] [core:error] [pid 1018003:tid 1018174] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.578039 2026] [core:error] [pid 1018003:tid 1018174] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.579047 2026] [core:error] [pid 1028675:tid 1028870] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.579061 2026] [core:error] [pid 1028675:tid 1028870] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.579786 2026] [security2:error] [pid 1018003:tid 1018190] [client 213.209.159.223:53552] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_whm/staging/.env"] [unique_id "apK9ezAh5Y1i2tUxg4EbQAAABd8"]
[Sat Aug 29 05:07:39.586385 2026] [security2:error] [pid 1018003:tid 1018117] [remote 93.123.109.228:45692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flicklister.com"] [uri "/admin/phpinfo.php"] [unique_id "apK9ezAh5Y1i2tUxg4EbQgAF_GA"]
[Sat Aug 29 05:07:39.586915 2026] [security2:error] [pid 1018003:tid 1018212] [client 20.48.250.41:35463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/num.php"] [unique_id "apK9ezAh5Y1i2tUxg4EbQwAABfU"]
[Sat Aug 29 05:07:39.588563 2026] [security2:error] [pid 1018003:tid 1018202] [client 20.151.200.44:63329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/7logs.php"] [unique_id "apK9ezAh5Y1i2tUxg4EbRAAABes"]
[Sat Aug 29 05:07:39.590311 2026] [security2:error] [pid 1018003:tid 1018238] [client 158.23.147.79:17488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apK9ezAh5Y1i2tUxg4EbRgAABg4"]
[Sat Aug 29 05:07:39.593777 2026] [core:error] [pid 1018003:tid 1018206] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.593793 2026] [core:error] [pid 1018003:tid 1018206] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.595118 2026] [core:error] [pid 1018003:tid 1018202] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.595140 2026] [core:error] [pid 1018003:tid 1018202] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.595615 2026] [core:error] [pid 1018003:tid 1018183] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.595632 2026] [core:error] [pid 1018003:tid 1018183] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.598489 2026] [security2:error] [pid 1028675:tid 1028843] [client 20.104.104.62:25603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.horseventure-net.penmarketing.org"] [uri "/wp-includes/css/index.php"] [unique_id "apK9e9dHPfW2QFvhmL7uQgAAACE"]
[Sat Aug 29 05:07:39.605481 2026] [core:error] [pid 1028675:tid 1028875] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.605494 2026] [core:error] [pid 1028675:tid 1028875] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.612451 2026] [security2:error] [pid 1028675:tid 1028914] [client 20.48.250.41:49057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/a4.php"] [unique_id "apK9e9dHPfW2QFvhmL7uRgAAAGg"]
[Sat Aug 29 05:07:39.613390 2026] [security2:error] [pid 1028675:tid 1028845] [client 20.48.250.41:65169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/ak.php"] [unique_id "apK9e9dHPfW2QFvhmL7uSAAAACM"]
[Sat Aug 29 05:07:39.614676 2026] [security2:error] [pid 1028675:tid 1028841] [client 158.23.147.79:48337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK9e9dHPfW2QFvhmL7uSQAAAB8"]
[Sat Aug 29 05:07:39.615854 2026] [security2:error] [pid 1028675:tid 1028907] [client 51.195.150.164:52901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 164.150.195.51.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "pinnaclenestwatch.com"] [uri "/images/images/cache.php"] [unique_id "apK9e9dHPfW2QFvhmL7uSgAAAGE"], referer: www.google.com
[Sat Aug 29 05:07:39.625922 2026] [security2:error] [pid 1018003:tid 1018043] [remote 93.123.109.228:45692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flicklister.com"] [uri "/admin_phpinfo.php"] [unique_id "apK9ezAh5Y1i2tUxg4EbTgAF_BY"]
[Sat Aug 29 05:07:39.649069 2026] [security2:error] [pid 1028675:tid 1028720] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/admin-app/.env"] [unique_id "apK9e9dHPfW2QFvhmL7uVAAAfSc"]
[Sat Aug 29 05:07:39.670522 2026] [security2:error] [pid 1018003:tid 1018268] [client 158.158.54.35:13100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-conflg.php"] [unique_id "apK9ezAh5Y1i2tUxg4EbUAAABiw"]
[Sat Aug 29 05:07:39.673101 2026] [core:error] [pid 1028675:tid 1028908] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.673121 2026] [core:error] [pid 1028675:tid 1028908] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.675817 2026] [security2:error] [pid 1028675:tid 1028920] [client 20.63.81.20:20873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/d7.php"] [unique_id "apK9e9dHPfW2QFvhmL7uXQAAAG4"]
[Sat Aug 29 05:07:39.678472 2026] [security2:error] [pid 1028675:tid 1028925] [client 213.209.159.223:61307] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/staging/.env"] [unique_id "apK9e9dHPfW2QFvhmL7uXwAAAHM"]
[Sat Aug 29 05:07:39.679583 2026] [core:error] [pid 1028675:tid 1028926] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.679601 2026] [core:error] [pid 1028675:tid 1028926] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.699226 2026] [security2:error] [pid 1028675:tid 1028839] [client 40.83.93.50:5614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-content/index.php"] [unique_id "apK9e9dHPfW2QFvhmL7ubQAAAB0"]
[Sat Aug 29 05:07:39.702886 2026] [core:error] [pid 1028675:tid 1028741] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.702903 2026] [core:error] [pid 1028675:tid 1028741] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.704554 2026] [core:error] [pid 1028675:tid 1028681] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.704577 2026] [core:error] [pid 1028675:tid 1028681] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.708582 2026] [core:error] [pid 1028675:tid 1028842] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.708601 2026] [core:error] [pid 1028675:tid 1028842] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.719895 2026] [core:error] [pid 1028675:tid 1028814] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.719915 2026] [core:error] [pid 1028675:tid 1028814] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.730432 2026] [autoindex:error] [pid 1028675:tid 1028824] [client 20.104.104.62:0] AH01276: Cannot serve directory /home1/thrbikes/public_html/kevinhenley/wp-includes/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:07:39.736419 2026] [core:error] [pid 1028675:tid 1028730] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.736444 2026] [core:error] [pid 1028675:tid 1028730] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.737104 2026] [core:error] [pid 1028675:tid 1028734] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.737124 2026] [core:error] [pid 1028675:tid 1028734] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.737385 2026] [security2:error] [pid 1028675:tid 1028887] [client 20.48.250.41:35456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/a4.php"] [unique_id "apK9e9dHPfW2QFvhmL7uegAAAE0"]
[Sat Aug 29 05:07:39.739056 2026] [core:error] [pid 1028675:tid 1028739] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.739073 2026] [core:error] [pid 1028675:tid 1028739] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.740559 2026] [core:error] [pid 1028675:tid 1028888] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.740578 2026] [core:error] [pid 1028675:tid 1028888] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.746304 2026] [security2:error] [pid 1028675:tid 1028700] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/admin/phpinfo.php"] [unique_id "apK9e9dHPfW2QFvhmL7ufQAAfRM"]
[Sat Aug 29 05:07:39.748993 2026] [core:error] [pid 1028675:tid 1028742] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.749007 2026] [core:error] [pid 1028675:tid 1028742] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.750772 2026] [security2:error] [pid 1018003:tid 1018182] [client 20.203.141.11:33681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/x.php"] [unique_id "apK9ezAh5Y1i2tUxg4EbUwAABdc"]
[Sat Aug 29 05:07:39.768084 2026] [core:error] [pid 1028675:tid 1028758] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.768099 2026] [core:error] [pid 1028675:tid 1028758] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.775505 2026] [security2:error] [pid 1018003:tid 1018187] [client 158.158.54.35:34848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-includes/index.php"] [unique_id "apK9ezAh5Y1i2tUxg4EbVAAABdw"]
[Sat Aug 29 05:07:39.779610 2026] [security2:error] [pid 1028675:tid 1028849] [client 168.107.94.195:62079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9e9dHPfW2QFvhmL7ugwAAACc"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:39.781294 2026] [core:error] [pid 1028675:tid 1028843] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.781313 2026] [core:error] [pid 1028675:tid 1028843] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.784598 2026] [security2:error] [pid 1028675:tid 1028917] [client 4.205.62.107:22399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/ty.php"] [unique_id "apK9e9dHPfW2QFvhmL7uhQAAAGs"]
[Sat Aug 29 05:07:39.788232 2026] [security2:error] [pid 1028675:tid 1028692] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/admin_phpinfo.php"] [unique_id "apK9e9dHPfW2QFvhmL7uhgAAHww"]
[Sat Aug 29 05:07:39.790261 2026] [security2:error] [pid 1028675:tid 1028858] [client 20.203.141.11:12684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/xxx.php"] [unique_id "apK9e9dHPfW2QFvhmL7uhwAAADA"]
[Sat Aug 29 05:07:39.805630 2026] [security2:error] [pid 1028675:tid 1028923] [client 20.48.250.41:49046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/tfm.php"] [unique_id "apK9e9dHPfW2QFvhmL7ujgAAAHE"]
[Sat Aug 29 05:07:39.818924 2026] [core:error] [pid 1028675:tid 1028693] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.818949 2026] [core:error] [pid 1028675:tid 1028693] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.820923 2026] [core:error] [pid 1028675:tid 1028708] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.820941 2026] [core:error] [pid 1028675:tid 1028708] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.823365 2026] [security2:error] [pid 1028675:tid 1028860] [client 20.104.49.130:60953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/sxxb.php"] [unique_id "apK9e9dHPfW2QFvhmL7umAAAADI"]
[Sat Aug 29 05:07:39.825567 2026] [core:error] [pid 1028675:tid 1028749] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.825684 2026] [core:error] [pid 1028675:tid 1028749] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.826393 2026] [core:error] [pid 1028675:tid 1028725] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.826401 2026] [core:error] [pid 1028675:tid 1028725] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.826949 2026] [core:error] [pid 1028675:tid 1028722] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.826959 2026] [core:error] [pid 1028675:tid 1028722] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.828666 2026] [core:error] [pid 1028675:tid 1028717] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.828680 2026] [core:error] [pid 1028675:tid 1028717] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.831700 2026] [security2:error] [pid 1028675:tid 1028747] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/administrator/.env"] [unique_id "apK9e9dHPfW2QFvhmL7umQAAbkI"]
[Sat Aug 29 05:07:39.839022 2026] [security2:error] [pid 1028675:tid 1028908] [client 158.23.147.79:50120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/lv.php"] [unique_id "apK9e9dHPfW2QFvhmL7unAAAAGI"]
[Sat Aug 29 05:07:39.841571 2026] [security2:error] [pid 1028675:tid 1028926] [client 20.63.81.20:20989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/v5.php"] [unique_id "apK9e9dHPfW2QFvhmL7unQAAAHQ"]
[Sat Aug 29 05:07:39.851022 2026] [security2:error] [pid 1028675:tid 1028750] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/api-backend/.env"] [unique_id "apK9e9dHPfW2QFvhmL7upAAAeUU"]
[Sat Aug 29 05:07:39.852062 2026] [core:error] [pid 1028675:tid 1028755] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.852079 2026] [core:error] [pid 1028675:tid 1028755] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.856417 2026] [security2:error] [pid 1028675:tid 1028892] [client 20.48.250.41:49454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/lib.php"] [unique_id "apK9e9dHPfW2QFvhmL7upwAAAFI"]
[Sat Aug 29 05:07:39.868328 2026] [security2:error] [pid 1028675:tid 1028837] [client 20.104.104.62:25616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.horseventure-net.penmarketing.org"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK9e9dHPfW2QFvhmL7uqAAAABs"]
[Sat Aug 29 05:07:39.884463 2026] [security2:error] [pid 1028675:tid 1028745] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/api-node/.env"] [unique_id "apK9e9dHPfW2QFvhmL7uqQAARkA"]
[Sat Aug 29 05:07:39.892163 2026] [security2:error] [pid 1028675:tid 1028748] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/api/.env"] [unique_id "apK9e9dHPfW2QFvhmL7uqwAARkM"]
[Sat Aug 29 05:07:39.897076 2026] [core:error] [pid 1028675:tid 1028738] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.897096 2026] [core:error] [pid 1028675:tid 1028738] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.901406 2026] [core:error] [pid 1028675:tid 1028752] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.901424 2026] [core:error] [pid 1028675:tid 1028752] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.902136 2026] [core:error] [pid 1028675:tid 1028753] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.902151 2026] [core:error] [pid 1028675:tid 1028753] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.902165 2026] [core:error] [pid 1028675:tid 1028757] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.902170 2026] [core:error] [pid 1028675:tid 1028757] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.910669 2026] [access_compat:error] [pid 1018003:tid 1018261] [client 67.20.76.220:53418] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:07:39.910900 2026] [security2:error] [pid 1028675:tid 1028833] [client 213.209.159.223:44315] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/server/.env"] [unique_id "apK9e9dHPfW2QFvhmL7utgAAABc"]
[Sat Aug 29 05:07:39.912303 2026] [security2:error] [pid 1028675:tid 1028824] [client 213.209.159.223:17468] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/core/.env"] [unique_id "apK9e9dHPfW2QFvhmL7utAAAAA4"]
[Sat Aug 29 05:07:39.921738 2026] [security2:error] [pid 1028675:tid 1028756] [remote 34.138.144.127:52902] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/@fs/app/.env"] [unique_id "apK9e9dHPfW2QFvhmL7uugAAA0s"]
[Sat Aug 29 05:07:39.924615 2026] [core:error] [pid 1028675:tid 1028785] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.924637 2026] [core:error] [pid 1028675:tid 1028785] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.927521 2026] [core:error] [pid 1028675:tid 1028767] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.927540 2026] [core:error] [pid 1028675:tid 1028767] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.929137 2026] [core:error] [pid 1028675:tid 1028746] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.929152 2026] [core:error] [pid 1028675:tid 1028746] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.931674 2026] [core:error] [pid 1028675:tid 1028751] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.931691 2026] [core:error] [pid 1028675:tid 1028751] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.947959 2026] [core:error] [pid 1028675:tid 1028765] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.947988 2026] [core:error] [pid 1028675:tid 1028765] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.959465 2026] [core:error] [pid 1028675:tid 1028732] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.959476 2026] [core:error] [pid 1028675:tid 1028815] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.959483 2026] [core:error] [pid 1028675:tid 1028732] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.959489 2026] [core:error] [pid 1028675:tid 1028815] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.961844 2026] [security2:error] [pid 1028675:tid 1028832] [client 20.104.104.62:20720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/sec.php"] [unique_id "apK9e9dHPfW2QFvhmL7uywAAABY"]
[Sat Aug 29 05:07:39.962518 2026] [security2:error] [pid 1028675:tid 1028903] [client 185.104.184.230:50364] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.jia.zbw.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/media/wp-includes/wlwmanifest.xml"] [unique_id "apK9e9dHPfW2QFvhmL7uzAAAAF0"]
[Sat Aug 29 05:07:39.963562 2026] [security2:error] [pid 1028675:tid 1028823] [client 4.205.62.107:65505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/sale.php"] [unique_id "apK9e9dHPfW2QFvhmL7uzgAAAA0"]
[Sat Aug 29 05:07:39.974698 2026] [security2:error] [pid 1028675:tid 1028898] [client 20.63.81.20:20813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/az.php"] [unique_id "apK9e9dHPfW2QFvhmL7u1AAAAFg"]
[Sat Aug 29 05:07:39.975499 2026] [security2:error] [pid 1028675:tid 1028847] [client 20.48.250.41:49070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/Geforce.php"] [unique_id "apK9e9dHPfW2QFvhmL7u1QAAACU"]
[Sat Aug 29 05:07:39.976339 2026] [core:error] [pid 1028675:tid 1028878] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.976352 2026] [core:error] [pid 1028675:tid 1028878] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.979150 2026] [core:error] [pid 1028675:tid 1028761] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.979171 2026] [core:error] [pid 1028675:tid 1028761] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:39.980537 2026] [security2:error] [pid 1028675:tid 1028781] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/api/info.php"] [unique_id "apK9e9dHPfW2QFvhmL7u2gAARmQ"]
[Sat Aug 29 05:07:39.993821 2026] [security2:error] [pid 1028675:tid 1028857] [client 213.209.159.223:38862] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/source/.env"] [unique_id "apK9e9dHPfW2QFvhmL7u3wAAAC8"]
[Sat Aug 29 05:07:40.004578 2026] [security2:error] [pid 1028675:tid 1028837] [client 213.209.159.223:44070] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_webdisk/source/.env"] [unique_id "apK9fNdHPfW2QFvhmL7u4wAAABs"]
[Sat Aug 29 05:07:40.011317 2026] [autoindex:error] [pid 1028675:tid 1028931] [client 20.104.104.62:0] AH01276: Cannot serve directory /home1/thrbikes/public_html/kevinhenley/wp-includes/PHPMailer/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:07:40.011576 2026] [core:error] [pid 1028675:tid 1028766] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.012015 2026] [core:error] [pid 1028675:tid 1028766] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.012997 2026] [core:error] [pid 1028675:tid 1028825] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.013017 2026] [core:error] [pid 1028675:tid 1028825] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.015584 2026] [security2:error] [pid 1028675:tid 1028883] [client 4.205.62.107:58468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/requirements.php"] [unique_id "apK9fNdHPfW2QFvhmL7u6QAAAEk"]
[Sat Aug 29 05:07:40.020283 2026] [core:error] [pid 1028675:tid 1028820] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.020296 2026] [core:error] [pid 1028675:tid 1028820] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.036582 2026] [core:error] [pid 1028675:tid 1028786] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.036582 2026] [core:error] [pid 1028675:tid 1028813] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.036598 2026] [core:error] [pid 1028675:tid 1028786] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.036604 2026] [core:error] [pid 1028675:tid 1028813] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.037247 2026] [core:error] [pid 1028675:tid 1028776] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.037258 2026] [core:error] [pid 1028675:tid 1028776] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.042736 2026] [core:error] [pid 1028675:tid 1028777] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.042758 2026] [core:error] [pid 1028675:tid 1028777] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.042806 2026] [core:error] [pid 1028675:tid 1028774] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.042816 2026] [core:error] [pid 1028675:tid 1028774] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.044966 2026] [security2:error] [pid 1028675:tid 1028862] [client 20.151.200.44:63374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/sf.php"] [unique_id "apK9fNdHPfW2QFvhmL7u8wAAADQ"]
[Sat Aug 29 05:07:40.048557 2026] [security2:error] [pid 1028675:tid 1028928] [client 20.48.250.41:35469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/tfm.php"] [unique_id "apK9fNdHPfW2QFvhmL7u9gAAAHY"]
[Sat Aug 29 05:07:40.048860 2026] [core:error] [pid 1028675:tid 1028778] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.048870 2026] [core:error] [pid 1028675:tid 1028778] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.049728 2026] [core:error] [pid 1028675:tid 1028789] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.049745 2026] [core:error] [pid 1028675:tid 1028789] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.050472 2026] [security2:error] [pid 1028675:tid 1028754] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/api/phpinfo.php"] [unique_id "apK9fNdHPfW2QFvhmL7u-QAARkk"]
[Sat Aug 29 05:07:40.052752 2026] [core:error] [pid 1028675:tid 1028771] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.052773 2026] [core:error] [pid 1028675:tid 1028771] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.061391 2026] [security2:error] [pid 1028675:tid 1028898] [client 20.48.250.41:65369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/wp-style.php"] [unique_id "apK9fNdHPfW2QFvhmL7vAAAAAFg"]
[Sat Aug 29 05:07:40.061429 2026] [core:error] [pid 1028675:tid 1028772] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.061447 2026] [core:error] [pid 1028675:tid 1028772] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.065173 2026] [security2:error] [pid 1028675:tid 1028779] [remote 34.138.144.127:52902] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/@fs/src/.env"] [unique_id "apK9fNdHPfW2QFvhmL7vAQAAdGI"]
[Sat Aug 29 05:07:40.067678 2026] [core:error] [pid 1028675:tid 1028762] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.067691 2026] [core:error] [pid 1028675:tid 1028762] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.069747 2026] [security2:error] [pid 1028675:tid 1028904] [client 20.104.104.62:25845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.horseventure-net.penmarketing.org"] [uri "/wp-links.php/wp-content/plugins/wp-content/uploa/"] [unique_id "apK9fNdHPfW2QFvhmL7vBAAAAF4"]
[Sat Aug 29 05:07:40.078925 2026] [core:error] [pid 1028675:tid 1028848] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.078940 2026] [core:error] [pid 1028675:tid 1028848] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.112403 2026] [security2:error] [pid 1028675:tid 1028824] [client 20.63.81.20:20981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/js.php"] [unique_id "apK9fNdHPfW2QFvhmL7vFwAAAA4"]
[Sat Aug 29 05:07:40.113185 2026] [security2:error] [pid 1028675:tid 1028859] [client 158.158.54.35:12964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/123.php"] [unique_id "apK9fNdHPfW2QFvhmL7vGAAAADE"]
[Sat Aug 29 05:07:40.113799 2026] [security2:error] [pid 1028675:tid 1028887] [client 62.60.130.128:60790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.130.60.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproretail.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "apK9fNdHPfW2QFvhmL7vGgAAAE0"]
[Sat Aug 29 05:07:40.117638 2026] [core:error] [pid 1028675:tid 1028814] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.117656 2026] [core:error] [pid 1028675:tid 1028814] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.118458 2026] [autoindex:error] [pid 1028675:tid 1028896] [client 20.104.104.62:0] AH01276: Cannot serve directory /home1/thrbikes/public_html/kevinhenley/wp-includes/pomo/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:07:40.124262 2026] [security2:error] [pid 1028675:tid 1028902] [client 20.48.250.41:49012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/click.php"] [unique_id "apK9fNdHPfW2QFvhmL7vIAAAAFw"]
[Sat Aug 29 05:07:40.153519 2026] [security2:error] [pid 1028675:tid 1028920] [client 4.205.62.107:21906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/loxi-o.php"] [unique_id "apK9fNdHPfW2QFvhmL7vJgAAAG4"]
[Sat Aug 29 05:07:40.159050 2026] [security2:error] [pid 1028675:tid 1028815] [client 168.107.94.195:62381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9fNdHPfW2QFvhmL7vJwAAAAU"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:40.174326 2026] [security2:error] [pid 1028675:tid 1028873] [client 158.23.147.79:35754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/about/function.php"] [unique_id "apK9fNdHPfW2QFvhmL7vLAAAAD8"]
[Sat Aug 29 05:07:40.190792 2026] [security2:error] [pid 1028675:tid 1028842] [client 158.23.147.79:25444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK9fNdHPfW2QFvhmL7vLgAAACA"]
[Sat Aug 29 05:07:40.195651 2026] [security2:error] [pid 1028675:tid 1028936] [client 40.83.93.50:5457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-content/install.php"] [unique_id "apK9fNdHPfW2QFvhmL7vMQAAAH4"]
[Sat Aug 29 05:07:40.202048 2026] [core:error] [pid 1028675:tid 1028802] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.202067 2026] [core:error] [pid 1028675:tid 1028802] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.202301 2026] [security2:error] [pid 1028675:tid 1028931] [client 20.48.250.41:35481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/Geforce.php"] [unique_id "apK9fNdHPfW2QFvhmL7vOAAAAHk"]
[Sat Aug 29 05:07:40.204173 2026] [core:error] [pid 1028675:tid 1028770] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.204190 2026] [core:error] [pid 1028675:tid 1028770] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.215886 2026] [security2:error] [pid 1028675:tid 1028825] [client 20.48.250.41:49466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/browse.php"] [unique_id "apK9fNdHPfW2QFvhmL7vPQAAAA8"]
[Sat Aug 29 05:07:40.220493 2026] [security2:error] [pid 1028675:tid 1028890] [client 20.203.141.11:38611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/new.php"] [unique_id "apK9fNdHPfW2QFvhmL7vRwAAAFA"]
[Sat Aug 29 05:07:40.222724 2026] [security2:error] [pid 1028675:tid 1028900] [client 158.158.54.35:13818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-admin/a.php"] [unique_id "apK9fNdHPfW2QFvhmL7vTAAAAFo"]
[Sat Aug 29 05:07:40.223026 2026] [security2:error] [pid 1028675:tid 1028686] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/apis/.env"] [unique_id "apK9fNdHPfW2QFvhmL7vSQAAdwY"]
[Sat Aug 29 05:07:40.226179 2026] [security2:error] [pid 1028675:tid 1028689] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/app/.env"] [unique_id "apK9fNdHPfW2QFvhmL7vUgAAdwk"]
[Sat Aug 29 05:07:40.227590 2026] [core:error] [pid 1028675:tid 1028856] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.227605 2026] [core:error] [pid 1028675:tid 1028856] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.230097 2026] [autoindex:error] [pid 1028675:tid 1028851] [client 20.104.104.62:0] AH01276: Cannot serve directory /home1/thrbikes/public_html/kevinhenley/.well-known/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:07:40.237299 2026] [core:error] [pid 1028675:tid 1028858] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.237317 2026] [core:error] [pid 1028675:tid 1028858] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.238218 2026] [core:error] [pid 1028675:tid 1028910] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.238236 2026] [core:error] [pid 1028675:tid 1028910] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.241782 2026] [security2:error] [pid 1028675:tid 1028875] [client 213.209.159.223:50842] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/source/.env"] [unique_id "apK9fNdHPfW2QFvhmL7vZgAAAEE"]
[Sat Aug 29 05:07:40.244504 2026] [security2:error] [pid 1028675:tid 1028695] [remote 93.123.109.228:46036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flicklister.com"] [uri "/api/info.php"] [unique_id "apK9fNdHPfW2QFvhmL7vawAAAg8"]
[Sat Aug 29 05:07:40.250610 2026] [security2:error] [pid 1028675:tid 1028870] [client 20.63.81.20:20944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/hd.php"] [unique_id "apK9fNdHPfW2QFvhmL7vbQAAADw"]
[Sat Aug 29 05:07:40.262786 2026] [core:error] [pid 1028675:tid 1028862] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.262803 2026] [core:error] [pid 1028675:tid 1028862] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.264020 2026] [core:error] [pid 1028675:tid 1028927] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.264039 2026] [core:error] [pid 1028675:tid 1028927] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.266004 2026] [core:error] [pid 1028675:tid 1028878] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.266022 2026] [core:error] [pid 1028675:tid 1028878] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.266296 2026] [core:error] [pid 1028675:tid 1028815] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.266307 2026] [core:error] [pid 1028675:tid 1028815] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.268583 2026] [core:error] [pid 1028675:tid 1028866] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.268601 2026] [core:error] [pid 1028675:tid 1028866] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.268715 2026] [core:error] [pid 1028675:tid 1028843] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.268729 2026] [core:error] [pid 1028675:tid 1028843] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.268782 2026] [core:error] [pid 1028675:tid 1028914] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.268793 2026] [core:error] [pid 1028675:tid 1028914] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.271285 2026] [core:error] [pid 1028675:tid 1028879] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.271300 2026] [core:error] [pid 1028675:tid 1028879] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.277418 2026] [security2:error] [pid 1028675:tid 1028903] [client 213.209.159.223:38862] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/framework/.env"] [unique_id "apK9fNdHPfW2QFvhmL7vfwAAAF0"]
[Sat Aug 29 05:07:40.289489 2026] [security2:error] [pid 1028675:tid 1028884] [client 213.209.159.223:44070] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_webdisk/framework/.env"] [unique_id "apK9fNdHPfW2QFvhmL7vhgAAAEo"]
[Sat Aug 29 05:07:40.297028 2026] [security2:error] [pid 1028675:tid 1028841] [client 20.104.104.62:25038] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "kevinhenley.com"] [uri "/1.php"] [unique_id "apK9fNdHPfW2QFvhmL7vhwAAAB8"]
[Sat Aug 29 05:07:40.297123 2026] [security2:error] [pid 1028675:tid 1028841] [client 20.104.104.62:25038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinhenley.com"] [uri "/1.php"] [unique_id "apK9fNdHPfW2QFvhmL7vhwAAAB8"]
[Sat Aug 29 05:07:40.301754 2026] [core:error] [pid 1028675:tid 1028845] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.301772 2026] [core:error] [pid 1028675:tid 1028845] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.309892 2026] [security2:error] [pid 1028675:tid 1028937] [client 93.123.109.228:60838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/.wp-config.php.swp"] [unique_id "apK9fNdHPfW2QFvhmL7vjgAAAH8"]
[Sat Aug 29 05:07:40.336388 2026] [security2:error] [pid 1028675:tid 1028847] [client 20.48.250.41:49094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/ms.php"] [unique_id "apK9fNdHPfW2QFvhmL7vlQAAACU"]
[Sat Aug 29 05:07:40.336708 2026] [security2:error] [pid 1028675:tid 1028733] [remote 93.123.109.228:46036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flicklister.com"] [uri "/api/phpinfo.php"] [unique_id "apK9fNdHPfW2QFvhmL7vkwAAAjQ"]
[Sat Aug 29 05:07:40.337205 2026] [security2:error] [pid 1028675:tid 1028896] [client 93.123.109.228:60804] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/ADMIN/.env"] [unique_id "apK9fNdHPfW2QFvhmL7vlAAAAFY"]
[Sat Aug 29 05:07:40.347530 2026] [security2:error] [pid 1028675:tid 1028910] [client 20.104.104.62:64711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/shapes.php"] [unique_id "apK9fNdHPfW2QFvhmL7vmAAAAGQ"]
[Sat Aug 29 05:07:40.351849 2026] [security2:error] [pid 1028675:tid 1028848] [client 20.48.250.41:49496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/zoo.php"] [unique_id "apK9fNdHPfW2QFvhmL7vmQAAACY"]
[Sat Aug 29 05:07:40.354842 2026] [security2:error] [pid 1028675:tid 1028883] [client 93.123.109.228:60686] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/API/.env"] [unique_id "apK9fNdHPfW2QFvhmL7vmwAAAEk"]
[Sat Aug 29 05:07:40.372016 2026] [security2:error] [pid 1028675:tid 1028816] [client 158.23.147.79:37771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-admin/images/about.php"] [unique_id "apK9fNdHPfW2QFvhmL7vngAAAAY"]
[Sat Aug 29 05:07:40.377546 2026] [security2:error] [pid 1028675:tid 1028855] [client 20.48.250.41:35047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/click.php"] [unique_id "apK9fNdHPfW2QFvhmL7vowAAAC0"]
[Sat Aug 29 05:07:40.378959 2026] [security2:error] [pid 1028675:tid 1028867] [client 213.209.159.223:61307] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/source/.env"] [unique_id "apK9fNdHPfW2QFvhmL7vpgAAADk"]
[Sat Aug 29 05:07:40.380695 2026] [core:error] [pid 1028675:tid 1028840] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.380710 2026] [core:error] [pid 1028675:tid 1028840] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.391697 2026] [security2:error] [pid 1028675:tid 1028914] [client 20.63.81.20:20964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/xl2023.php"] [unique_id "apK9fNdHPfW2QFvhmL7vsQAAAGg"]
[Sat Aug 29 05:07:40.404151 2026] [core:error] [pid 1028675:tid 1028824] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.404165 2026] [core:error] [pid 1028675:tid 1028824] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.411885 2026] [core:error] [pid 1028675:tid 1028894] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.411900 2026] [core:error] [pid 1028675:tid 1028894] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.413933 2026] [core:error] [pid 1028675:tid 1028900] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.413950 2026] [core:error] [pid 1028675:tid 1028900] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.415251 2026] [core:error] [pid 1028675:tid 1028820] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.415266 2026] [core:error] [pid 1028675:tid 1028820] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.415563 2026] [security2:error] [pid 1028675:tid 1028859] [client 213.209.159.223:38862] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/ikiwiki/.env"] [unique_id "apK9fNdHPfW2QFvhmL7vuwAAADE"]
[Sat Aug 29 05:07:40.423222 2026] [core:error] [pid 1028675:tid 1028793] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.423236 2026] [core:error] [pid 1028675:tid 1028793] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.424818 2026] [security2:error] [pid 1028675:tid 1028856] [client 213.209.159.223:44070] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_webdisk/ikiwiki/.env"] [unique_id "apK9fNdHPfW2QFvhmL7vxQAAAC4"]
[Sat Aug 29 05:07:40.426730 2026] [security2:error] [pid 1028675:tid 1028860] [client 20.151.200.44:47352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/wsz.php"] [unique_id "apK9fNdHPfW2QFvhmL7vygAAADI"]
[Sat Aug 29 05:07:40.428200 2026] [core:error] [pid 1028675:tid 1028742] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.428216 2026] [core:error] [pid 1028675:tid 1028742] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.438315 2026] [core:error] [pid 1028675:tid 1028925] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.438329 2026] [core:error] [pid 1028675:tid 1028925] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.442054 2026] [core:error] [pid 1028675:tid 1028896] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.442071 2026] [core:error] [pid 1028675:tid 1028896] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.444960 2026] [core:error] [pid 1028675:tid 1028690] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.444975 2026] [core:error] [pid 1028675:tid 1028690] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.445482 2026] [core:error] [pid 1028675:tid 1028858] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.445498 2026] [core:error] [pid 1028675:tid 1028858] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.451982 2026] [core:error] [pid 1028675:tid 1028916] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.451998 2026] [core:error] [pid 1028675:tid 1028916] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.452873 2026] [core:error] [pid 1028675:tid 1028877] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.452896 2026] [core:error] [pid 1028675:tid 1028877] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.456782 2026] [security2:error] [pid 1028675:tid 1028840] [client 158.23.147.79:26500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/index/function.php"] [unique_id "apK9fNdHPfW2QFvhmL7v2wAAAB4"]
[Sat Aug 29 05:07:40.458824 2026] [security2:error] [pid 1028675:tid 1028840] [client 93.123.109.228:60866] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/APP/.env"] [unique_id "apK9fNdHPfW2QFvhmL7v3AAAAB4"]
[Sat Aug 29 05:07:40.464467 2026] [security2:error] [pid 1028675:tid 1028861] [client 93.123.109.228:60888] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/BACK/.env"] [unique_id "apK9fNdHPfW2QFvhmL7v3gAAADM"]
[Sat Aug 29 05:07:40.465093 2026] [security2:error] [pid 1028675:tid 1028842] [client 93.123.109.228:60910] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/Api/.env"] [unique_id "apK9fNdHPfW2QFvhmL7v3wAAACA"]
[Sat Aug 29 05:07:40.473041 2026] [core:error] [pid 1028675:tid 1028861] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.473058 2026] [core:error] [pid 1028675:tid 1028861] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.476100 2026] [core:error] [pid 1028675:tid 1028918] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.476115 2026] [core:error] [pid 1028675:tid 1028918] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.477766 2026] [security2:error] [pid 1028675:tid 1028873] [client 93.123.109.228:60828] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/BE/.env"] [unique_id "apK9fNdHPfW2QFvhmL7v5gAAAD8"]
[Sat Aug 29 05:07:40.477828 2026] [security2:error] [pid 1028675:tid 1028936] [client 93.123.109.228:60990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/BACKEND/.env"] [unique_id "apK9fNdHPfW2QFvhmL7v5QAAAH4"]
[Sat Aug 29 05:07:40.486138 2026] [security2:error] [pid 1028675:tid 1028894] [client 213.209.159.223:11050] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_whm/source/.env"] [unique_id "apK9fNdHPfW2QFvhmL7v6AAAAFQ"]
[Sat Aug 29 05:07:40.496199 2026] [security2:error] [pid 1028675:tid 1028907] [client 20.104.104.62:25030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinhenley.com"] [uri "/admin/function.php"] [unique_id "apK9fNdHPfW2QFvhmL7v7gAAAGE"]
[Sat Aug 29 05:07:40.498490 2026] [core:error] [pid 1028675:tid 1028908] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.498505 2026] [core:error] [pid 1028675:tid 1028908] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.516189 2026] [security2:error] [pid 1028675:tid 1028857] [client 20.48.250.41:49034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/zxekqlxb.php"] [unique_id "apK9fNdHPfW2QFvhmL7v8wAAAC8"]
[Sat Aug 29 05:07:40.516681 2026] [security2:error] [pid 1028675:tid 1028884] [client 93.123.109.228:60686] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/Backend/.env"] [unique_id "apK9fNdHPfW2QFvhmL7v8QAAAEo"]
[Sat Aug 29 05:07:40.516705 2026] [security2:error] [pid 1028675:tid 1028917] [client 93.123.109.228:60762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/Be/.env"] [unique_id "apK9fNdHPfW2QFvhmL7v8gAAAGs"]
[Sat Aug 29 05:07:40.517319 2026] [security2:error] [pid 1028675:tid 1028857] [client 20.48.250.41:35494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/ms.php"] [unique_id "apK9fNdHPfW2QFvhmL7v9AAAAC8"]
[Sat Aug 29 05:07:40.521953 2026] [security2:error] [pid 1028675:tid 1028863] [client 213.209.159.223:50842] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/framework/.env"] [unique_id "apK9fNdHPfW2QFvhmL7v-AAAADU"]
[Sat Aug 29 05:07:40.530908 2026] [security2:error] [pid 1028675:tid 1028898] [client 20.63.81.20:20970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/V2.php"] [unique_id "apK9fNdHPfW2QFvhmL7v_AAAAFg"]
[Sat Aug 29 05:07:40.539446 2026] [security2:error] [pid 1028675:tid 1028925] [client 168.107.94.195:62728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9fNdHPfW2QFvhmL7v_QAAAHM"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:40.542280 2026] [security2:error] [pid 1028675:tid 1028910] [client 213.209.159.223:17468] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/app/.env"] [unique_id "apK9fNdHPfW2QFvhmL7v_wAAAGQ"]
[Sat Aug 29 05:07:40.543572 2026] [security2:error] [pid 1028675:tid 1028902] [client 4.205.62.107:53250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/temp.php"] [unique_id "apK9fNdHPfW2QFvhmL7wAAAAAFw"]
[Sat Aug 29 05:07:40.547136 2026] [core:error] [pid 1028675:tid 1028745] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.547153 2026] [core:error] [pid 1028675:tid 1028745] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.553264 2026] [security2:error] [pid 1028675:tid 1028896] [client 213.209.159.223:38862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/config.inc.php"] [unique_id "apK9fNdHPfW2QFvhmL7wBQAAAFY"]
[Sat Aug 29 05:07:40.557287 2026] [security2:error] [pid 1028675:tid 1028911] [client 185.104.184.230:50366] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.jia.zbw.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/wp2/wp-includes/wlwmanifest.xml"] [unique_id "apK9fNdHPfW2QFvhmL7wCAAAAGU"]
[Sat Aug 29 05:07:40.557975 2026] [security2:error] [pid 1028675:tid 1028756] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/application/.env"] [unique_id "apK9fNdHPfW2QFvhmL7wBwAAd0s"]
[Sat Aug 29 05:07:40.559645 2026] [security2:error] [pid 1028675:tid 1028858] [client 213.209.159.223:44070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.greatdecisionsofcharlevoix.com"] [uri "/config.inc.php"] [unique_id "apK9fNdHPfW2QFvhmL7wCgAAADA"]
[Sat Aug 29 05:07:40.565236 2026] [security2:error] [pid 1028675:tid 1028785] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/apps/.env"] [unique_id "apK9fNdHPfW2QFvhmL7wCwAATmg"]
[Sat Aug 29 05:07:40.569790 2026] [core:error] [pid 1028675:tid 1028751] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.569815 2026] [core:error] [pid 1028675:tid 1028751] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.570669 2026] [core:error] [pid 1028675:tid 1028767] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.570680 2026] [core:error] [pid 1028675:tid 1028767] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.574650 2026] [security2:error] [pid 1028675:tid 1028821] [client 158.23.147.79:32751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-includes/content.php"] [unique_id "apK9fNdHPfW2QFvhmL7wEgAAAAs"]
[Sat Aug 29 05:07:40.576031 2026] [core:error] [pid 1028675:tid 1028732] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.576043 2026] [core:error] [pid 1028675:tid 1028732] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.576204 2026] [security2:error] [pid 1028675:tid 1028937] [client 158.158.54.35:13073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/yanz.php"] [unique_id "apK9fNdHPfW2QFvhmL7wEwAAAH8"]
[Sat Aug 29 05:07:40.580111 2026] [core:error] [pid 1028675:tid 1028743] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.580126 2026] [core:error] [pid 1028675:tid 1028743] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.590751 2026] [security2:error] [pid 1028675:tid 1028870] [client 4.205.62.107:9020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/sys.php"] [unique_id "apK9fNdHPfW2QFvhmL7wFwAAADw"]
[Sat Aug 29 05:07:40.600957 2026] [security2:error] [pid 1028675:tid 1028840] [client 213.209.159.223:44315] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/staging/.env"] [unique_id "apK9fNdHPfW2QFvhmL7wGQAAAB4"]
[Sat Aug 29 05:07:40.603581 2026] [core:error] [pid 1028675:tid 1028761] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.603588 2026] [core:error] [pid 1028675:tid 1028736] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.603598 2026] [core:error] [pid 1028675:tid 1028761] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.603605 2026] [core:error] [pid 1028675:tid 1028736] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.603706 2026] [core:error] [pid 1028675:tid 1028781] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.603717 2026] [core:error] [pid 1028675:tid 1028781] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.608868 2026] [security2:error] [pid 1028675:tid 1028847] [client 87.219.197.128:63528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK9fNdHPfW2QFvhmL7wIQAAACU"]
[Sat Aug 29 05:07:40.609230 2026] [security2:error] [pid 1028675:tid 1028847] [client 87.219.197.128:63528] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK9fNdHPfW2QFvhmL7wIQAAACU"]
[Sat Aug 29 05:07:40.618852 2026] [security2:error] [pid 1028675:tid 1028845] [client 20.203.141.11:23671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/tool.php"] [unique_id "apK9fNdHPfW2QFvhmL7wIwAAACM"]
[Sat Aug 29 05:07:40.642270 2026] [security2:error] [pid 1028675:tid 1028936] [client 20.48.250.41:65385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/elp.php"] [unique_id "apK9fNdHPfW2QFvhmL7wMgAAAH4"]
[Sat Aug 29 05:07:40.644395 2026] [core:error] [pid 1028675:tid 1028923] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.644425 2026] [core:error] [pid 1028675:tid 1028923] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.648021 2026] [core:error] [pid 1028675:tid 1028777] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.648040 2026] [core:error] [pid 1028675:tid 1028777] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.648048 2026] [security2:error] [pid 1028675:tid 1028879] [client 20.48.250.41:48983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/init.php"] [unique_id "apK9fNdHPfW2QFvhmL7wNgAAAEU"]
[Sat Aug 29 05:07:40.649610 2026] [security2:error] [pid 1028675:tid 1028851] [client 20.48.250.41:35015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/zxekqlxb.php"] [unique_id "apK9fNdHPfW2QFvhmL7wNwAAACk"]
[Sat Aug 29 05:07:40.657017 2026] [security2:error] [pid 1028675:tid 1028900] [client 213.209.159.223:61307] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/framework/.env"] [unique_id "apK9fNdHPfW2QFvhmL7wOQAAAFo"]
[Sat Aug 29 05:07:40.659915 2026] [security2:error] [pid 1028675:tid 1028839] [client 213.209.159.223:50842] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/ikiwiki/.env"] [unique_id "apK9fNdHPfW2QFvhmL7wOwAAAB0"]
[Sat Aug 29 05:07:40.666163 2026] [core:error] [pid 1028675:tid 1028811] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.666184 2026] [core:error] [pid 1028675:tid 1028811] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.667462 2026] [core:error] [pid 1028675:tid 1028917] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.667477 2026] [core:error] [pid 1028675:tid 1028917] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.667710 2026] [core:error] [pid 1028675:tid 1028859] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.667722 2026] [core:error] [pid 1028675:tid 1028859] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.672848 2026] [core:error] [pid 1028675:tid 1028857] [client 158.158.54.35:13810] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.672865 2026] [core:error] [pid 1028675:tid 1028857] [client 158.158.54.35:13810] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.678242 2026] [security2:error] [pid 1028675:tid 1028772] [remote 34.138.144.127:52902] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/.env"] [unique_id "apK9fNdHPfW2QFvhmL7wSQAAZFs"]
[Sat Aug 29 05:07:40.679202 2026] [security2:error] [pid 1028675:tid 1028902] [client 20.63.81.20:20893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/mad.php"] [unique_id "apK9fNdHPfW2QFvhmL7wTQAAAFw"]
[Sat Aug 29 05:07:40.679985 2026] [security2:error] [pid 1028675:tid 1028875] [client 213.209.159.223:17468] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/dev/.env"] [unique_id "apK9fNdHPfW2QFvhmL7wTgAAAEE"]
[Sat Aug 29 05:07:40.681582 2026] [security2:error] [pid 1028675:tid 1028764] [remote 34.138.144.127:52902] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/@fs/..%2f..%2f..%2f..%2f..%2froot/.env"] [unique_id "apK9fNdHPfW2QFvhmL7wTAAAZFM"]
[Sat Aug 29 05:07:40.683048 2026] [core:error] [pid 1028675:tid 1028779] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.683061 2026] [core:error] [pid 1028675:tid 1028779] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.683875 2026] [core:error] [pid 1028675:tid 1028762] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.683890 2026] [core:error] [pid 1028675:tid 1028762] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.689904 2026] [core:error] [pid 1028675:tid 1028896] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.689918 2026] [core:error] [pid 1028675:tid 1028896] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.698137 2026] [security2:error] [pid 1028675:tid 1028918] [client 20.104.104.62:24757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinhenley.com"] [uri "/autoload_classmap.php"] [unique_id "apK9fNdHPfW2QFvhmL7wVQAAAGw"]
[Sat Aug 29 05:07:40.701317 2026] [core:error] [pid 1028675:tid 1028791] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.701333 2026] [core:error] [pid 1028675:tid 1028791] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.710035 2026] [core:error] [pid 1028675:tid 1028795] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.710050 2026] [core:error] [pid 1028675:tid 1028795] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.712152 2026] [core:error] [pid 1028675:tid 1028782] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.712170 2026] [core:error] [pid 1028675:tid 1028782] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.712410 2026] [core:error] [pid 1028675:tid 1028784] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.712428 2026] [core:error] [pid 1028675:tid 1028784] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.719581 2026] [security2:error] [pid 1028675:tid 1028903] [client 20.203.141.11:38596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/menu.php"] [unique_id "apK9fNdHPfW2QFvhmL7wYAAAAF0"]
[Sat Aug 29 05:07:40.722450 2026] [security2:error] [pid 1028675:tid 1028922] [client 146.70.194.254:57222] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "modelbasenjis.com"] [uri "/cgi-sys/suspendedpage.cgi/site/wp-includes/wlwmanifest.xml"] [unique_id "apK9fNdHPfW2QFvhmL7wZAAAAHA"]
[Sat Aug 29 05:07:40.723368 2026] [security2:error] [pid 1028675:tid 1028914] [client 158.23.147.79:17435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK9fNdHPfW2QFvhmL7wZQAAAGg"]
[Sat Aug 29 05:07:40.723808 2026] [security2:error] [pid 1028675:tid 1028927] [client 20.104.104.62:20815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/sos.php"] [unique_id "apK9fNdHPfW2QFvhmL7wZgAAAHU"]
[Sat Aug 29 05:07:40.740260 2026] [security2:error] [pid 1028675:tid 1028935] [client 171.61.160.196:10970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.160.61.171.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK9fNdHPfW2QFvhmL7wcgAAAH0"]
[Sat Aug 29 05:07:40.741236 2026] [security2:error] [pid 1028675:tid 1028935] [client 171.61.160.196:10970] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK9fNdHPfW2QFvhmL7wcgAAAH0"]
[Sat Aug 29 05:07:40.747783 2026] [security2:error] [pid 1028675:tid 1028876] [client 158.23.147.79:48252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK9fNdHPfW2QFvhmL7wcwAAAEI"]
[Sat Aug 29 05:07:40.754555 2026] [core:error] [pid 1028675:tid 1028802] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.754570 2026] [core:error] [pid 1028675:tid 1028802] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.765979 2026] [security2:error] [pid 1028675:tid 1028839] [client 213.209.159.223:11050] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_whm/framework/.env"] [unique_id "apK9fNdHPfW2QFvhmL7wfQAAAB0"]
[Sat Aug 29 05:07:40.774177 2026] [core:error] [pid 1028675:tid 1028923] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.774195 2026] [core:error] [pid 1028675:tid 1028923] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.774368 2026] [core:error] [pid 1028675:tid 1028823] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.774385 2026] [core:error] [pid 1028675:tid 1028823] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.774571 2026] [core:error] [pid 1028675:tid 1028819] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.774582 2026] [core:error] [pid 1028675:tid 1028819] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.775547 2026] [core:error] [pid 1028675:tid 1028811] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.775562 2026] [core:error] [pid 1028675:tid 1028811] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.782757 2026] [security2:error] [pid 1028675:tid 1028863] [client 20.48.250.41:49073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/term.php"] [unique_id "apK9fNdHPfW2QFvhmL7whgAAADU"]
[Sat Aug 29 05:07:40.792835 2026] [security2:error] [pid 1028675:tid 1028856] [client 213.209.159.223:61307] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/ikiwiki/.env"] [unique_id "apK9fNdHPfW2QFvhmL7wiAAAAC4"]
[Sat Aug 29 05:07:40.796987 2026] [security2:error] [pid 1028675:tid 1028842] [client 213.209.159.223:50842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/config.inc.php"] [unique_id "apK9fNdHPfW2QFvhmL7wiQAAACA"]
[Sat Aug 29 05:07:40.811561 2026] [security2:error] [pid 1028675:tid 1028872] [client 20.63.81.20:20942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/st.php"] [unique_id "apK9fNdHPfW2QFvhmL7wjwAAAD4"]
[Sat Aug 29 05:07:40.811899 2026] [security2:error] [pid 1028675:tid 1028799] [remote 34.138.144.127:52902] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/.env"] [unique_id "apK9fNdHPfW2QFvhmL7wjQAAenY"]
[Sat Aug 29 05:07:40.815905 2026] [security2:error] [pid 1028675:tid 1028930] [client 40.83.93.50:6122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK9fNdHPfW2QFvhmL7wkwAAAHg"]
[Sat Aug 29 05:07:40.816085 2026] [core:error] [pid 1028675:tid 1028804] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.816680 2026] [core:error] [pid 1028675:tid 1028804] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.818887 2026] [core:error] [pid 1028675:tid 1028928] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.818899 2026] [core:error] [pid 1028675:tid 1028928] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.827005 2026] [core:error] [pid 1028675:tid 1028710] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.827022 2026] [core:error] [pid 1028675:tid 1028710] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.830163 2026] [core:error] [pid 1028675:tid 1028680] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.830183 2026] [core:error] [pid 1028675:tid 1028680] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.832081 2026] [security2:error] [pid 1028675:tid 1028922] [client 20.151.200.44:63996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/super.php"] [unique_id "apK9fNdHPfW2QFvhmL7woQAAAHA"]
[Sat Aug 29 05:07:40.832542 2026] [security2:error] [pid 1028675:tid 1028904] [client 213.209.159.223:51408] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/system/.env"] [unique_id "apK9fNdHPfW2QFvhmL7wnwAAAF4"]
[Sat Aug 29 05:07:40.833613 2026] [security2:error] [pid 1028675:tid 1028914] [client 213.209.159.223:28096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_webdisk/system/.env"] [unique_id "apK9fNdHPfW2QFvhmL7wogAAAGg"]
[Sat Aug 29 05:07:40.834400 2026] [core:error] [pid 1028675:tid 1028816] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.834417 2026] [core:error] [pid 1028675:tid 1028816] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.838986 2026] [core:error] [pid 1028675:tid 1028892] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.839006 2026] [core:error] [pid 1028675:tid 1028892] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.840642 2026] [core:error] [pid 1028675:tid 1028843] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.840656 2026] [core:error] [pid 1028675:tid 1028843] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.844429 2026] [core:error] [pid 1028675:tid 1028881] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.844454 2026] [core:error] [pid 1028675:tid 1028881] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.844850 2026] [security2:error] [pid 1028675:tid 1028728] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/back-api/.env"] [unique_id "apK9fNdHPfW2QFvhmL7wqQAAEi8"]
[Sat Aug 29 05:07:40.860877 2026] [security2:error] [pid 1028675:tid 1028820] [client 93.123.109.228:60922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/_profiler/phpinfo.php"] [unique_id "apK9fNdHPfW2QFvhmL7wqwAAAAo"]
[Sat Aug 29 05:07:40.869969 2026] [core:error] [pid 1028675:tid 1028813] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.869987 2026] [core:error] [pid 1028675:tid 1028813] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.879845 2026] [core:error] [pid 1028675:tid 1028819] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.879866 2026] [core:error] [pid 1028675:tid 1028819] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.888300 2026] [security2:error] [pid 1028675:tid 1028718] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/back-end/.env"] [unique_id "apK9fNdHPfW2QFvhmL7wtQAASSU"]
[Sat Aug 29 05:07:40.888621 2026] [security2:error] [pid 1028675:tid 1028845] [client 20.48.250.41:35073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/init.php"] [unique_id "apK9fNdHPfW2QFvhmL7wtgAAACM"]
[Sat Aug 29 05:07:40.891062 2026] [security2:error] [pid 1028675:tid 1028701] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/back/.env"] [unique_id "apK9fNdHPfW2QFvhmL7wuAAAWxQ"]
[Sat Aug 29 05:07:40.900474 2026] [security2:error] [pid 1028675:tid 1028920] [client 20.104.104.62:24721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinhenley.com"] [uri "/classwithtostring.php"] [unique_id "apK9fNdHPfW2QFvhmL7wuQAAAG4"]
[Sat Aug 29 05:07:40.902127 2026] [security2:error] [pid 1028675:tid 1028861] [client 213.209.159.223:11050] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_whm/ikiwiki/.env"] [unique_id "apK9fNdHPfW2QFvhmL7wugAAADM"]
[Sat Aug 29 05:07:40.923254 2026] [security2:error] [pid 1028675:tid 1028886] [client 168.107.94.195:63147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9fNdHPfW2QFvhmL7wvwAAAEw"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:40.930972 2026] [security2:error] [pid 1028675:tid 1028840] [client 213.209.159.223:61307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/config.inc.php"] [unique_id "apK9fNdHPfW2QFvhmL7wwgAAAB4"]
[Sat Aug 29 05:07:40.931278 2026] [security2:error] [pid 1028675:tid 1028909] [client 20.48.250.41:49518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/666.php"] [unique_id "apK9fNdHPfW2QFvhmL7wwwAAAGM"]
[Sat Aug 29 05:07:40.937128 2026] [security2:error] [pid 1028675:tid 1028909] [client 4.205.62.107:21919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/adminer-4.7.6-en.php"] [unique_id "apK9fNdHPfW2QFvhmL7wxAAAAGM"]
[Sat Aug 29 05:07:40.949615 2026] [security2:error] [pid 1028675:tid 1028846] [client 93.123.109.228:60854] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/admin-app/.env"] [unique_id "apK9fNdHPfW2QFvhmL7wxwAAACQ"]
[Sat Aug 29 05:07:40.953418 2026] [security2:error] [pid 1028675:tid 1028707] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/backend-api/.env"] [unique_id "apK9fNdHPfW2QFvhmL7wyAAAIho"]
[Sat Aug 29 05:07:40.962943 2026] [security2:error] [pid 1028675:tid 1028688] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK9fNdHPfW2QFvhmL7wywAANAg"]
[Sat Aug 29 05:07:40.966297 2026] [core:error] [pid 1028675:tid 1028712] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.966330 2026] [core:error] [pid 1028675:tid 1028712] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.967152 2026] [security2:error] [pid 1028675:tid 1028898] [client 213.209.159.223:28096] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "webdisk.greatdecisionsofcharlevoix.com"] [uri "/wp-config.php.backup"] [unique_id "apK9fNdHPfW2QFvhmL7w0gAAAFg"]
[Sat Aug 29 05:07:40.967263 2026] [security2:error] [pid 1028675:tid 1028741] [remote 34.138.144.127:52902] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "cpcalendars.roycehomesales.com"] [uri "/@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ"] [unique_id "apK9fNdHPfW2QFvhmL7w0QAAWjw"]
[Sat Aug 29 05:07:40.967708 2026] [core:error] [pid 1028675:tid 1028727] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.967718 2026] [core:error] [pid 1028675:tid 1028727] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.967964 2026] [core:error] [pid 1028675:tid 1028716] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.967971 2026] [core:error] [pid 1028675:tid 1028716] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.968879 2026] [security2:error] [pid 1028675:tid 1028918] [client 213.209.159.223:51408] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/wp-config.php.backup"] [unique_id "apK9fNdHPfW2QFvhmL7w1AAAAGw"]
[Sat Aug 29 05:07:40.969875 2026] [security2:error] [pid 1028675:tid 1028833] [client 20.48.250.41:49087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/aaa.php"] [unique_id "apK9fNdHPfW2QFvhmL7w1QAAABc"]
[Sat Aug 29 05:07:40.970252 2026] [core:error] [pid 1028675:tid 1028741] [remote 34.138.144.127:52902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.971302 2026] [security2:error] [pid 1028675:tid 1028740] [remote 34.138.144.127:52902] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/.env"] [unique_id "apK9fNdHPfW2QFvhmL7w0wAAWjs"]
[Sat Aug 29 05:07:40.993897 2026] [core:error] [pid 1028675:tid 1028720] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.993925 2026] [core:error] [pid 1028675:tid 1028720] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.994316 2026] [core:error] [pid 1028675:tid 1028793] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.994330 2026] [core:error] [pid 1028675:tid 1028793] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.998414 2026] [core:error] [pid 1028675:tid 1028703] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:40.998433 2026] [core:error] [pid 1028675:tid 1028703] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.001277 2026] [security2:error] [pid 1028675:tid 1028856] [client 20.104.49.130:63499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pvillusions.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9fddHPfW2QFvhmL7w4AAAAC4"]
[Sat Aug 29 05:07:41.010593 2026] [security2:error] [pid 1028675:tid 1028910] [client 20.63.81.20:20894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/alfanew.php"] [unique_id "apK9fddHPfW2QFvhmL7w5gAAAGQ"]
[Sat Aug 29 05:07:41.012573 2026] [core:error] [pid 1028675:tid 1028699] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.012593 2026] [core:error] [pid 1028675:tid 1028699] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.019435 2026] [security2:error] [pid 1028675:tid 1028883] [client 20.48.250.41:35496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/term.php"] [unique_id "apK9fddHPfW2QFvhmL7w6QAAAEk"]
[Sat Aug 29 05:07:41.021529 2026] [security2:error] [pid 1028675:tid 1028832] [client 158.158.54.35:18233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/autoload_classmap.php"] [unique_id "apK9fddHPfW2QFvhmL7w6gAAABY"]
[Sat Aug 29 05:07:41.026529 2026] [security2:error] [pid 1028675:tid 1028920] [client 158.23.147.79:50099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9fddHPfW2QFvhmL7w7AAAAG4"]
[Sat Aug 29 05:07:41.030098 2026] [core:error] [pid 1028675:tid 1028726] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.030115 2026] [core:error] [pid 1028675:tid 1028726] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.030183 2026] [core:error] [pid 1028675:tid 1028690] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.030194 2026] [core:error] [pid 1028675:tid 1028690] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.030238 2026] [core:error] [pid 1028675:tid 1028724] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.030249 2026] [core:error] [pid 1028675:tid 1028724] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.037513 2026] [security2:error] [pid 1028675:tid 1028926] [client 213.209.159.223:11050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/config.inc.php"] [unique_id "apK9fddHPfW2QFvhmL7w8QAAAHQ"]
[Sat Aug 29 05:07:41.047276 2026] [security2:error] [pid 1028675:tid 1028730] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/backup/.env"] [unique_id "apK9fddHPfW2QFvhmL7w9QAAHjE"]
[Sat Aug 29 05:07:41.047992 2026] [security2:error] [pid 1028675:tid 1028700] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/be/.env"] [unique_id "apK9fddHPfW2QFvhmL7w9gAAHhM"]
[Sat Aug 29 05:07:41.049365 2026] [core:error] [pid 1028675:tid 1028687] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.049383 2026] [core:error] [pid 1028675:tid 1028687] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.051714 2026] [security2:error] [pid 1028675:tid 1028681] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/beta/.env"] [unique_id "apK9fddHPfW2QFvhmL7w9wAAagE"]
[Sat Aug 29 05:07:41.058734 2026] [security2:error] [pid 1028675:tid 1028842] [client 213.209.159.223:17468] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/server/.env"] [unique_id "apK9fddHPfW2QFvhmL7w-gAAACA"]
[Sat Aug 29 05:07:41.069029 2026] [security2:error] [pid 1028675:tid 1028907] [client 93.123.109.228:60976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/admin/phpinfo.php"] [unique_id "apK9fddHPfW2QFvhmL7w_wAAAGE"]
[Sat Aug 29 05:07:41.072283 2026] [security2:error] [pid 1028675:tid 1028898] [client 213.209.159.223:36354] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/system/.env"] [unique_id "apK9fddHPfW2QFvhmL7xAAAAAFg"]
[Sat Aug 29 05:07:41.077192 2026] [security2:error] [pid 1028675:tid 1028860] [client 20.203.141.11:23126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/k.php"] [unique_id "apK9fddHPfW2QFvhmL7xAwAAADI"]
[Sat Aug 29 05:07:41.080373 2026] [security2:error] [pid 1028675:tid 1028900] [client 20.48.250.41:65341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/knmt.php"] [unique_id "apK9fddHPfW2QFvhmL7xBQAAAFo"]
[Sat Aug 29 05:07:41.097784 2026] [security2:error] [pid 1028675:tid 1028816] [client 4.205.62.107:65478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/wp-class.php"] [unique_id "apK9fddHPfW2QFvhmL7xCgAAAAY"]
[Sat Aug 29 05:07:41.098424 2026] [security2:error] [pid 1028675:tid 1028863] [client 20.104.104.62:24740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinhenley.com"] [uri "/content.php"] [unique_id "apK9fddHPfW2QFvhmL7xCwAAADU"]
[Sat Aug 29 05:07:41.114688 2026] [security2:error] [pid 1028675:tid 1028897] [client 20.63.219.114:16054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-admin/network/xmrlpc.php"] [unique_id "apK9fddHPfW2QFvhmL7xEgAAAFc"]
[Sat Aug 29 05:07:41.122991 2026] [security2:error] [pid 1028675:tid 1028855] [client 20.104.104.62:47578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/print.php"] [unique_id "apK9fddHPfW2QFvhmL7xFAAAAC0"]
[Sat Aug 29 05:07:41.125698 2026] [security2:error] [pid 1028675:tid 1028856] [client 93.123.109.228:60686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/admin_phpinfo.php"] [unique_id "apK9fddHPfW2QFvhmL7xFQAAAC4"]
[Sat Aug 29 05:07:41.127833 2026] [security2:error] [pid 1028675:tid 1028867] [client 158.158.54.35:2479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK9fddHPfW2QFvhmL7xFwAAADk"]
[Sat Aug 29 05:07:41.131620 2026] [security2:error] [pid 1028675:tid 1028884] [client 93.123.109.228:60866] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/administrator/.env"] [unique_id "apK9fddHPfW2QFvhmL7xGAAAAEo"]
[Sat Aug 29 05:07:41.142467 2026] [security2:error] [pid 1028675:tid 1028813] [client 20.48.250.41:48999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/xsox.php"] [unique_id "apK9fddHPfW2QFvhmL7xHQAAAAM"]
[Sat Aug 29 05:07:41.144275 2026] [core:error] [pid 1028675:tid 1028910] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.144292 2026] [core:error] [pid 1028675:tid 1028910] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.147219 2026] [security2:error] [pid 1028675:tid 1028930] [client 93.123.109.228:60790] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/api-backend/.env"] [unique_id "apK9fddHPfW2QFvhmL7xHwAAAHg"]
[Sat Aug 29 05:07:41.150323 2026] [security2:error] [pid 1028675:tid 1028845] [client 20.48.250.41:35059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/aaa.php"] [unique_id "apK9fddHPfW2QFvhmL7xIAAAACM"]
[Sat Aug 29 05:07:41.152976 2026] [security2:error] [pid 1028675:tid 1028840] [client 4.205.62.107:58476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/hochladen.form.php"] [unique_id "apK9fddHPfW2QFvhmL7xIgAAAB4"]
[Sat Aug 29 05:07:41.158947 2026] [security2:error] [pid 1028675:tid 1028916] [client 20.63.81.20:20888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/ioxi.php"] [unique_id "apK9fddHPfW2QFvhmL7xJQAAAGo"]
[Sat Aug 29 05:07:41.160850 2026] [security2:error] [pid 1028675:tid 1028811] [client 185.104.184.230:50378] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.jia.zbw.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/site/wp-includes/wlwmanifest.xml"] [unique_id "apK9fddHPfW2QFvhmL7xJgAAAAE"]
[Sat Aug 29 05:07:41.176527 2026] [core:error] [pid 1028675:tid 1028936] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.176544 2026] [core:error] [pid 1028675:tid 1028936] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.192305 2026] [security2:error] [pid 1028675:tid 1028750] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/client/.env"] [unique_id "apK9fddHPfW2QFvhmL7xKgAAekU"]
[Sat Aug 29 05:07:41.194882 2026] [security2:error] [pid 1028675:tid 1028858] [client 20.203.141.11:12538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK9fddHPfW2QFvhmL7xKwAAADA"]
[Sat Aug 29 05:07:41.195696 2026] [security2:error] [pid 1028675:tid 1028860] [client 93.123.109.228:60888] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/api/.env"] [unique_id "apK9fddHPfW2QFvhmL7xLAAAADI"]
[Sat Aug 29 05:07:41.199538 2026] [security2:error] [pid 1028675:tid 1028896] [client 93.123.109.228:60916] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/api-node/.env"] [unique_id "apK9fddHPfW2QFvhmL7xNAAAAFY"]
[Sat Aug 29 05:07:41.206097 2026] [security2:error] [pid 1028675:tid 1028824] [client 213.209.159.223:59138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/system/.env"] [unique_id "apK9fddHPfW2QFvhmL7xPAAAAA4"]
[Sat Aug 29 05:07:41.207025 2026] [security2:error] [pid 1028675:tid 1028876] [client 213.209.159.223:36354] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/wp-config.php.backup"] [unique_id "apK9fddHPfW2QFvhmL7xPgAAAEI"]
[Sat Aug 29 05:07:41.209016 2026] [core:error] [pid 1028675:tid 1028781] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.209081 2026] [core:error] [pid 1028675:tid 1028781] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.211934 2026] [security2:error] [pid 1028675:tid 1028772] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/cms/.env"] [unique_id "apK9fddHPfW2QFvhmL7xTAAAZVs"]
[Sat Aug 29 05:07:41.219920 2026] [core:error] [pid 1028675:tid 1028774] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.219941 2026] [core:error] [pid 1028675:tid 1028774] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.221574 2026] [security2:error] [pid 1028675:tid 1028846] [client 158.23.147.79:30484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK9fddHPfW2QFvhmL7xVwAAACQ"]
[Sat Aug 29 05:07:41.223964 2026] [core:error] [pid 1028675:tid 1028929] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.223977 2026] [core:error] [pid 1028675:tid 1028929] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.229586 2026] [core:error] [pid 1028675:tid 1028878] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.229608 2026] [core:error] [pid 1028675:tid 1028878] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.230720 2026] [core:error] [pid 1028675:tid 1028903] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.230735 2026] [core:error] [pid 1028675:tid 1028903] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.233342 2026] [core:error] [pid 1028675:tid 1028828] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.233372 2026] [core:error] [pid 1028675:tid 1028828] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.234272 2026] [core:error] [pid 1028675:tid 1028867] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.234285 2026] [core:error] [pid 1028675:tid 1028867] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.234296 2026] [core:error] [pid 1028675:tid 1028883] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.234305 2026] [core:error] [pid 1028675:tid 1028883] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.238841 2026] [core:error] [pid 1028675:tid 1028841] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.238856 2026] [core:error] [pid 1028675:tid 1028841] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.244391 2026] [core:error] [pid 1028675:tid 1028811] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.244408 2026] [core:error] [pid 1028675:tid 1028811] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.244741 2026] [core:error] [pid 1028675:tid 1028842] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.244756 2026] [core:error] [pid 1028675:tid 1028842] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.246960 2026] [core:error] [pid 1028675:tid 1028844] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.246980 2026] [core:error] [pid 1028675:tid 1028844] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.261292 2026] [security2:error] [pid 1028675:tid 1028801] [remote 34.138.144.127:52916] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/static../.env"] [unique_id "apK9fddHPfW2QFvhmL7xcAAAVHg"]
[Sat Aug 29 05:07:41.278648 2026] [security2:error] [pid 1028675:tid 1028917] [client 158.23.147.79:35206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK9fddHPfW2QFvhmL7xfAAAAGs"]
[Sat Aug 29 05:07:41.281402 2026] [core:error] [pid 1028675:tid 1028771] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.281418 2026] [core:error] [pid 1028675:tid 1028771] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.285462 2026] [security2:error] [pid 1028675:tid 1028884] [client 20.48.250.41:49105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/lkui.php"] [unique_id "apK9fddHPfW2QFvhmL7xgQAAAEo"]
[Sat Aug 29 05:07:41.286557 2026] [security2:error] [pid 1028675:tid 1028796] [remote 34.138.144.127:52916] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/media../.env"] [unique_id "apK9fddHPfW2QFvhmL7xfwAAd3M"]
[Sat Aug 29 05:07:41.289457 2026] [security2:error] [pid 1028675:tid 1028783] [remote 34.138.144.127:52916] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/files../.env"] [unique_id "apK9fddHPfW2QFvhmL7xggAAd2Y"]
[Sat Aug 29 05:07:41.289962 2026] [security2:error] [pid 1028675:tid 1028856] [client 20.48.250.41:35079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/xsox.php"] [unique_id "apK9fddHPfW2QFvhmL7xhQAAAC4"]
[Sat Aug 29 05:07:41.291235 2026] [core:error] [pid 1028675:tid 1028802] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.291252 2026] [core:error] [pid 1028675:tid 1028802] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.292387 2026] [security2:error] [pid 1028675:tid 1028856] [client 20.63.81.20:20844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/TNT.php"] [unique_id "apK9fddHPfW2QFvhmL7xhgAAAC4"]
[Sat Aug 29 05:07:41.294654 2026] [security2:error] [pid 1028675:tid 1028925] [client 20.104.104.62:25031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinhenley.com"] [uri "/function/function.php"] [unique_id "apK9fddHPfW2QFvhmL7xiAAAAHM"]
[Sat Aug 29 05:07:41.295277 2026] [core:error] [pid 1028675:tid 1028792] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.295288 2026] [core:error] [pid 1028675:tid 1028792] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.295768 2026] [security2:error] [pid 1028675:tid 1028920] [client 4.205.62.107:22390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/luJMF.php"] [unique_id "apK9fddHPfW2QFvhmL7xiQAAAG4"]
[Sat Aug 29 05:07:41.302253 2026] [security2:error] [pid 1028675:tid 1028837] [client 40.83.93.50:5612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-content/languages/chosen.php"] [unique_id "apK9fddHPfW2QFvhmL7xkQAAABs"]
[Sat Aug 29 05:07:41.302282 2026] [security2:error] [pid 1028675:tid 1028935] [client 20.48.250.41:49495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/sbhu.php"] [unique_id "apK9fddHPfW2QFvhmL7xjwAAAH0"]
[Sat Aug 29 05:07:41.304308 2026] [security2:error] [pid 1028675:tid 1028819] [client 168.107.94.195:63533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9fddHPfW2QFvhmL7xkwAAAAk"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:41.307097 2026] [security2:error] [pid 1028675:tid 1028828] [client 93.123.109.228:60804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/api/info.php"] [unique_id "apK9fddHPfW2QFvhmL7xlwAAABI"]
[Sat Aug 29 05:07:41.309744 2026] [security2:error] [pid 1028675:tid 1028883] [client 158.23.147.79:25512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/packed.php"] [unique_id "apK9fddHPfW2QFvhmL7xmgAAAEk"]
[Sat Aug 29 05:07:41.309965 2026] [core:error] [pid 1028675:tid 1028710] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.309976 2026] [core:error] [pid 1028675:tid 1028710] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.311226 2026] [security2:error] [pid 1028675:tid 1028887] [client 213.209.159.223:18542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_whm/system/.env"] [unique_id "apK9fddHPfW2QFvhmL7xmwAAAE0"]
[Sat Aug 29 05:07:41.336964 2026] [security2:error] [pid 1028675:tid 1028686] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/config.php"] [unique_id "apK9fddHPfW2QFvhmL7xogAAXgY"]
[Sat Aug 29 05:07:41.340405 2026] [security2:error] [pid 1028675:tid 1028875] [client 213.209.159.223:59138] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/wp-config.php.backup"] [unique_id "apK9fddHPfW2QFvhmL7xowAAAEE"]
[Sat Aug 29 05:07:41.344147 2026] [security2:error] [pid 1028675:tid 1028880] [client 20.151.200.44:65327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/lufix1.php"] [unique_id "apK9fddHPfW2QFvhmL7xpQAAAEY"]
[Sat Aug 29 05:07:41.379384 2026] [security2:error] [pid 1028675:tid 1028863] [client 20.104.49.130:57700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/xmini4.php"] [unique_id "apK9fddHPfW2QFvhmL7xrAAAADU"]
[Sat Aug 29 05:07:41.403185 2026] [core:error] [pid 1028675:tid 1028816] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.403204 2026] [core:error] [pid 1028675:tid 1028816] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.403418 2026] [security2:error] [pid 1028675:tid 1028886] [client 93.123.109.228:60916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/api/phpinfo.php"] [unique_id "apK9fddHPfW2QFvhmL7xuQAAAEw"]
[Sat Aug 29 05:07:41.406101 2026] [core:error] [pid 1028675:tid 1028909] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.406118 2026] [core:error] [pid 1028675:tid 1028909] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.410658 2026] [security2:error] [pid 1028675:tid 1028803] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/config/.env"] [unique_id "apK9fddHPfW2QFvhmL7xvwAAQXo"]
[Sat Aug 29 05:07:41.413528 2026] [core:error] [pid 1028675:tid 1028799] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.413544 2026] [core:error] [pid 1028675:tid 1028799] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.419145 2026] [security2:error] [pid 1028675:tid 1028727] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/config/aws.php"] [unique_id "apK9fddHPfW2QFvhmL7xyQAAQS4"]
[Sat Aug 29 05:07:41.421164 2026] [security2:error] [pid 1028675:tid 1028715] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/config/config.inc.php"] [unique_id "apK9fddHPfW2QFvhmL7xzQAAQSI"]
[Sat Aug 29 05:07:41.423628 2026] [core:error] [pid 1028675:tid 1028702] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.423648 2026] [core:error] [pid 1028675:tid 1028702] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.424559 2026] [core:error] [pid 1028675:tid 1028886] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.424628 2026] [core:error] [pid 1028675:tid 1028886] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.426486 2026] [core:error] [pid 1028675:tid 1028712] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.426503 2026] [core:error] [pid 1028675:tid 1028712] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.427041 2026] [security2:error] [pid 1028675:tid 1028856] [client 20.63.81.20:20805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/cd.php"] [unique_id "apK9fddHPfW2QFvhmL7x0QAAAC4"]
[Sat Aug 29 05:07:41.440807 2026] [core:error] [pid 1028675:tid 1028837] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.440826 2026] [core:error] [pid 1028675:tid 1028837] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.442125 2026] [security2:error] [pid 1028675:tid 1028814] [client 20.48.250.41:49051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "apK9fddHPfW2QFvhmL7x1wAAAAQ"]
[Sat Aug 29 05:07:41.444492 2026] [core:error] [pid 1028675:tid 1028720] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.444511 2026] [core:error] [pid 1028675:tid 1028720] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.447125 2026] [security2:error] [pid 1028675:tid 1028916] [client 213.209.159.223:18542] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/wp-config.php.backup"] [unique_id "apK9fddHPfW2QFvhmL7x3AAAAGo"]
[Sat Aug 29 05:07:41.449714 2026] [core:error] [pid 1028675:tid 1028847] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.449729 2026] [core:error] [pid 1028675:tid 1028847] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.451911 2026] [core:error] [pid 1028675:tid 1028833] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.451929 2026] [core:error] [pid 1028675:tid 1028833] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.456922 2026] [core:error] [pid 1028675:tid 1028706] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.456939 2026] [core:error] [pid 1028675:tid 1028706] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.457382 2026] [core:error] [pid 1028675:tid 1028696] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.457394 2026] [core:error] [pid 1028675:tid 1028696] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.457465 2026] [core:error] [pid 1028675:tid 1028937] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.457476 2026] [core:error] [pid 1028675:tid 1028937] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.458288 2026] [core:error] [pid 1028675:tid 1028867] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.458304 2026] [core:error] [pid 1028675:tid 1028867] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.458638 2026] [security2:error] [pid 1028675:tid 1028711] [remote 34.138.144.127:52916] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/static/.env"] [unique_id "apK9fddHPfW2QFvhmL7x5QAAMB4"]
[Sat Aug 29 05:07:41.461288 2026] [core:error] [pid 1028675:tid 1028699] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.461304 2026] [core:error] [pid 1028675:tid 1028699] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.463036 2026] [security2:error] [pid 1028675:tid 1028848] [client 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK9fddHPfW2QFvhmL7xngAAJms"]
[Sat Aug 29 05:07:41.472033 2026] [security2:error] [pid 1028675:tid 1028840] [client 158.158.54.35:24460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/bi.php"] [unique_id "apK9fddHPfW2QFvhmL7x6QAAAB4"]
[Sat Aug 29 05:07:41.474389 2026] [security2:error] [pid 1028675:tid 1028866] [client 20.63.219.114:4274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-admin/options-general.php"] [unique_id "apK9fddHPfW2QFvhmL7x7AAAADg"]
[Sat Aug 29 05:07:41.476490 2026] [core:error] [pid 1028675:tid 1028724] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.476506 2026] [core:error] [pid 1028675:tid 1028724] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.486983 2026] [security2:error] [pid 1028675:tid 1028841] [client 20.48.250.41:35108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/lkui.php"] [unique_id "apK9fddHPfW2QFvhmL7x8wAAAB8"]
[Sat Aug 29 05:07:41.490743 2026] [security2:error] [pid 1028675:tid 1028813] [client 20.104.104.62:25026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinhenley.com"] [uri "/item.php"] [unique_id "apK9fddHPfW2QFvhmL7x9QAAAAM"]
[Sat Aug 29 05:07:41.502293 2026] [core:error] [pid 1028675:tid 1028687] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.502310 2026] [core:error] [pid 1028675:tid 1028687] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.545428 2026] [security2:error] [pid 1028675:tid 1028894] [client 20.203.141.11:45381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/root.php"] [unique_id "apK9fddHPfW2QFvhmL7yBgAAAFQ"]
[Sat Aug 29 05:07:41.548986 2026] [security2:error] [pid 1028675:tid 1028758] [remote 34.138.144.127:52916] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/static/home/user/.env"] [unique_id "apK9fddHPfW2QFvhmL7yBAAAWk0"]
[Sat Aug 29 05:07:41.556197 2026] [security2:error] [pid 1028675:tid 1028721] [remote 34.138.144.127:52916] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/.env"] [unique_id "apK9fddHPfW2QFvhmL7yCQAAMyg"]
[Sat Aug 29 05:07:41.560162 2026] [core:error] [pid 1028675:tid 1028729] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.560184 2026] [core:error] [pid 1028675:tid 1028729] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.562478 2026] [security2:error] [pid 1028675:tid 1028870] [client 93.123.109.228:60948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/apis/.env"] [unique_id "apK9fddHPfW2QFvhmL7yDgAAADw"]
[Sat Aug 29 05:07:41.565765 2026] [security2:error] [pid 1028675:tid 1028904] [client 20.63.81.20:20870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/luuf.php"] [unique_id "apK9fddHPfW2QFvhmL7yEQAAAF4"]
[Sat Aug 29 05:07:41.578551 2026] [security2:error] [pid 1028675:tid 1028851] [client 158.158.54.35:13765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gregblacker4rexburg.freeadobeflashtutorials.com"] [uri "/wp-admin.php"] [unique_id "apK9fddHPfW2QFvhmL7yFgAAACk"]
[Sat Aug 29 05:07:41.583980 2026] [security2:error] [pid 1028675:tid 1028901] [client 103.185.242.143:50114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK9fddHPfW2QFvhmL7yGQAAAFs"]
[Sat Aug 29 05:07:41.584311 2026] [security2:error] [pid 1028675:tid 1028901] [client 103.185.242.143:50114] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK9fddHPfW2QFvhmL7yGQAAAFs"]
[Sat Aug 29 05:07:41.588098 2026] [security2:error] [pid 1028675:tid 1028722] [remote 34.31.186.92:17408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 92.186.31.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.koyasan.org.tw"] [uri "/web/bbs/board.php"] [unique_id "apK9fddHPfW2QFvhmL7yCAAAQik"]
[Sat Aug 29 05:07:41.590622 2026] [core:error] [pid 1028675:tid 1028744] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.590638 2026] [core:error] [pid 1028675:tid 1028744] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.591825 2026] [core:error] [pid 1028675:tid 1028759] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.591840 2026] [core:error] [pid 1028675:tid 1028759] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.592964 2026] [security2:error] [pid 1028675:tid 1028717] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/config/config.php"] [unique_id "apK9fddHPfW2QFvhmL7yHgAAASQ"]
[Sat Aug 29 05:07:41.596649 2026] [core:error] [pid 1028675:tid 1028757] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.596678 2026] [core:error] [pid 1028675:tid 1028757] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.596887 2026] [core:error] [pid 1028675:tid 1028756] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.596898 2026] [core:error] [pid 1028675:tid 1028756] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.596982 2026] [core:error] [pid 1028675:tid 1028734] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.596992 2026] [core:error] [pid 1028675:tid 1028734] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.598659 2026] [security2:error] [pid 1028675:tid 1028751] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/config/env.php"] [unique_id "apK9fddHPfW2QFvhmL7yJAAAAUY"]
[Sat Aug 29 05:07:41.598850 2026] [security2:error] [pid 1028675:tid 1028935] [client 20.48.250.41:49041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/motu.php"] [unique_id "apK9fddHPfW2QFvhmL7yJQAAAH0"]
[Sat Aug 29 05:07:41.600901 2026] [core:error] [pid 1028675:tid 1028753] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.600917 2026] [core:error] [pid 1028675:tid 1028753] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.612771 2026] [security2:error] [pid 1028675:tid 1028777] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/config/module.config.php"] [unique_id "apK9fddHPfW2QFvhmL7yLQAAV2A"]
[Sat Aug 29 05:07:41.613530 2026] [security2:error] [pid 1028675:tid 1028732] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/config/nexmo.php"] [unique_id "apK9fddHPfW2QFvhmL7yLgAAVzM"]
[Sat Aug 29 05:07:41.614585 2026] [core:error] [pid 1028675:tid 1028778] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.614602 2026] [core:error] [pid 1028675:tid 1028778] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.625211 2026] [security2:error] [pid 1028675:tid 1028816] [client 20.48.250.41:35023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "apK9fddHPfW2QFvhmL7yNgAAAAY"]
[Sat Aug 29 05:07:41.627012 2026] [security2:error] [pid 1028675:tid 1028866] [client 20.104.104.62:20692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/pdi.php"] [unique_id "apK9fddHPfW2QFvhmL7yNwAAADg"]
[Sat Aug 29 05:07:41.637006 2026] [security2:error] [pid 1028675:tid 1028748] [remote 93.123.109.228:46162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flowerfh.com"] [uri "/.env.php"] [unique_id "apK9fddHPfW2QFvhmL7yOAAAIUM"]
[Sat Aug 29 05:07:41.645989 2026] [security2:error] [pid 1028675:tid 1028746] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/config/stripe.php"] [unique_id "apK9fddHPfW2QFvhmL7yPQAAV0E"]
[Sat Aug 29 05:07:41.648731 2026] [core:error] [pid 1028675:tid 1028766] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.648746 2026] [core:error] [pid 1028675:tid 1028766] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.651961 2026] [core:error] [pid 1028675:tid 1028736] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.651976 2026] [core:error] [pid 1028675:tid 1028736] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.655820 2026] [core:error] [pid 1028675:tid 1028824] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.655847 2026] [core:error] [pid 1028675:tid 1028824] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.661244 2026] [security2:error] [pid 1028675:tid 1028873] [client 93.123.109.228:60910] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/app/.env"] [unique_id "apK9fddHPfW2QFvhmL7yQgAAAD8"]
[Sat Aug 29 05:07:41.664580 2026] [security2:error] [pid 1028675:tid 1028936] [client 213.209.159.223:25276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/app_dev.php/_profiler/open"] [unique_id "apK9fddHPfW2QFvhmL7yRgAAAH4"]
[Sat Aug 29 05:07:41.668103 2026] [security2:error] [pid 1028675:tid 1028767] [remote 34.138.144.127:52916] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/static/app/.env"] [unique_id "apK9fddHPfW2QFvhmL7yRwAAc1Y"]
[Sat Aug 29 05:07:41.682322 2026] [security2:error] [pid 1028675:tid 1028890] [client 4.205.62.107:55962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/fm.php"] [unique_id "apK9fddHPfW2QFvhmL7yUgAAAFA"]
[Sat Aug 29 05:07:41.685448 2026] [security2:error] [pid 1028675:tid 1028837] [client 158.23.147.79:32598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-admin/css/index.php"] [unique_id "apK9fddHPfW2QFvhmL7yVAAAABs"]
[Sat Aug 29 05:07:41.686380 2026] [security2:error] [pid 1028675:tid 1028900] [client 168.107.94.195:63895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9fddHPfW2QFvhmL7yVQAAAFo"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:41.690690 2026] [core:error] [pid 1028675:tid 1028894] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.690718 2026] [core:error] [pid 1028675:tid 1028894] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.691611 2026] [core:error] [pid 1028675:tid 1028821] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.691626 2026] [core:error] [pid 1028675:tid 1028821] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.693079 2026] [security2:error] [pid 1028675:tid 1028819] [client 213.209.159.223:17468] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/staging/.env"] [unique_id "apK9fddHPfW2QFvhmL7yVwAAAAk"]
[Sat Aug 29 05:07:41.695873 2026] [security2:error] [pid 1028675:tid 1028846] [client 20.48.250.41:49413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/a332.php"] [unique_id "apK9fddHPfW2QFvhmL7yWAAAACQ"]
[Sat Aug 29 05:07:41.696603 2026] [security2:error] [pid 1028675:tid 1028881] [client 20.63.81.20:20945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/fex.php"] [unique_id "apK9fddHPfW2QFvhmL7yWgAAAEc"]
[Sat Aug 29 05:07:41.696860 2026] [security2:error] [pid 1028675:tid 1028910] [client 20.104.104.62:24767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinhenley.com"] [uri "/ms-edit.php"] [unique_id "apK9fddHPfW2QFvhmL7yWwAAAGQ"]
[Sat Aug 29 05:07:41.700499 2026] [security2:error] [pid 1028675:tid 1028855] [client 213.209.159.223:5206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.greatdecisionsofcharlevoix.com"] [uri "/app_dev.php/_profiler/open"] [unique_id "apK9fddHPfW2QFvhmL7yXgAAAC0"]
[Sat Aug 29 05:07:41.700962 2026] [core:error] [pid 1028675:tid 1028828] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.700974 2026] [core:error] [pid 1028675:tid 1028828] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.749328 2026] [core:error] [pid 1028675:tid 1028797] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.749349 2026] [core:error] [pid 1028675:tid 1028797] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.754251 2026] [core:error] [pid 1028675:tid 1028789] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.754270 2026] [core:error] [pid 1028675:tid 1028789] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.758814 2026] [security2:error] [pid 1028675:tid 1028883] [client 20.48.250.41:49108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/Ov-Simple1.php"] [unique_id "apK9fddHPfW2QFvhmL7ycwAAAEk"]
[Sat Aug 29 05:07:41.764673 2026] [core:error] [pid 1028675:tid 1028686] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.764693 2026] [core:error] [pid 1028675:tid 1028686] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.768367 2026] [security2:error] [pid 1028675:tid 1028847] [client 20.48.250.41:35515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/motu.php"] [unique_id "apK9fddHPfW2QFvhmL7yewAAACU"]
[Sat Aug 29 05:07:41.768950 2026] [security2:error] [pid 1028675:tid 1028839] [client 185.104.184.230:50390] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.jia.zbw.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/cms/wp-includes/wlwmanifest.xml"] [unique_id "apK9fddHPfW2QFvhmL7yfAAAAB0"]
[Sat Aug 29 05:07:41.776343 2026] [core:error] [pid 1028675:tid 1028775] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.776371 2026] [core:error] [pid 1028675:tid 1028775] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.776528 2026] [core:error] [pid 1028675:tid 1028798] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.776545 2026] [core:error] [pid 1028675:tid 1028798] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.785993 2026] [security2:error] [pid 1028675:tid 1028844] [client 40.83.93.50:6103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-content/languages/index.php"] [unique_id "apK9fddHPfW2QFvhmL7yhwAAACI"]
[Sat Aug 29 05:07:41.800041 2026] [core:error] [pid 1028675:tid 1028917] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.800059 2026] [core:error] [pid 1028675:tid 1028917] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.800179 2026] [core:error] [pid 1028675:tid 1028894] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.800197 2026] [core:error] [pid 1028675:tid 1028894] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.801647 2026] [core:error] [pid 1028675:tid 1028860] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.801665 2026] [core:error] [pid 1028675:tid 1028860] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.812091 2026] [core:error] [pid 1028675:tid 1028770] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.812111 2026] [core:error] [pid 1028675:tid 1028770] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.817407 2026] [core:error] [pid 1028675:tid 1028904] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.817428 2026] [core:error] [pid 1028675:tid 1028904] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.818531 2026] [security2:error] [pid 1028675:tid 1028901] [client 4.205.62.107:9005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/dragonshell.php"] [unique_id "apK9fddHPfW2QFvhmL7ylQAAAFs"]
[Sat Aug 29 05:07:41.829515 2026] [security2:error] [pid 1028675:tid 1028872] [client 20.63.219.114:4264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-admin/options.php"] [unique_id "apK9fddHPfW2QFvhmL7yoAAAAD4"]
[Sat Aug 29 05:07:41.840459 2026] [security2:error] [pid 1028675:tid 1028870] [client 20.63.81.20:20961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/l.php"] [unique_id "apK9fddHPfW2QFvhmL7ypAAAADw"]
[Sat Aug 29 05:07:41.842389 2026] [security2:error] [pid 1028675:tid 1028863] [client 158.23.147.79:17471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/dropdown.php"] [unique_id "apK9fddHPfW2QFvhmL7ypQAAADU"]
[Sat Aug 29 05:07:41.843173 2026] [security2:error] [pid 1028675:tid 1028926] [client 20.151.200.44:65222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/hack.php"] [unique_id "apK9fddHPfW2QFvhmL7ypgAAAHQ"]
[Sat Aug 29 05:07:41.851734 2026] [core:error] [pid 1028675:tid 1028880] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.851753 2026] [core:error] [pid 1028675:tid 1028880] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.853208 2026] [core:error] [pid 1028675:tid 1028918] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.853227 2026] [core:error] [pid 1028675:tid 1028918] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.854535 2026] [core:error] [pid 1028675:tid 1028886] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.854554 2026] [core:error] [pid 1028675:tid 1028886] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.855661 2026] [core:error] [pid 1028675:tid 1028780] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.861384 2026] [security2:error] [pid 1028675:tid 1028916] [client 213.209.159.223:44315] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/source/.env"] [unique_id "apK9fddHPfW2QFvhmL7ysgAAAGo"]
[Sat Aug 29 05:07:41.868034 2026] [core:error] [pid 1028675:tid 1028695] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.868055 2026] [core:error] [pid 1028675:tid 1028695] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.892502 2026] [core:error] [pid 1028675:tid 1028706] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.892520 2026] [core:error] [pid 1028675:tid 1028706] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.893096 2026] [security2:error] [pid 1028675:tid 1028828] [client 20.104.104.62:24716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinhenley.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK9fddHPfW2QFvhmL7yyQAAABI"]
[Sat Aug 29 05:07:41.893311 2026] [security2:error] [pid 1028675:tid 1028724] [remote 34.138.144.127:52916] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/api/.env/public/.env"] [unique_id "apK9fddHPfW2QFvhmL7yxgAAeis"]
[Sat Aug 29 05:07:41.894143 2026] [security2:error] [pid 1028675:tid 1028696] [remote 34.138.144.127:52916] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/.env"] [unique_id "apK9fddHPfW2QFvhmL7yvQAAehA"]
[Sat Aug 29 05:07:41.895300 2026] [security2:error] [pid 1028675:tid 1028806] [remote 93.123.109.228:46036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flicklister.com"] [uri "/config.php"] [unique_id "apK9fddHPfW2QFvhmL7yywAAdn0"]
[Sat Aug 29 05:07:41.897331 2026] [core:error] [pid 1028675:tid 1028794] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.897347 2026] [core:error] [pid 1028675:tid 1028794] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.898502 2026] [security2:error] [pid 1028675:tid 1028861] [client 158.23.147.79:48197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/nf_tracking.php"] [unique_id "apK9fddHPfW2QFvhmL7yzwAAADM"]
[Sat Aug 29 05:07:41.899668 2026] [core:error] [pid 1028675:tid 1028821] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.899683 2026] [core:error] [pid 1028675:tid 1028821] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.900204 2026] [core:error] [pid 1028675:tid 1028900] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.900213 2026] [core:error] [pid 1028675:tid 1028900] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.902042 2026] [core:error] [pid 1028675:tid 1028859] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.902056 2026] [core:error] [pid 1028675:tid 1028859] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.907066 2026] [security2:error] [pid 1028675:tid 1028896] [client 213.209.159.223:49270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/app_dev.php/_profiler/open"] [unique_id "apK9fddHPfW2QFvhmL7y0gAAAFY"]
[Sat Aug 29 05:07:41.920923 2026] [access_compat:error] [pid 1028675:tid 1028896] [client 67.20.76.220:53490] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:07:41.929678 2026] [security2:error] [pid 1028675:tid 1028872] [client 20.52.41.200:5356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/.trash7206/index.php"] [unique_id "apK9fddHPfW2QFvhmL7y2QAAAD4"]
[Sat Aug 29 05:07:41.932205 2026] [access_compat:error] [pid 1028675:tid 1028902] [client 67.20.76.220:53504] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:07:41.933327 2026] [access_compat:error] [pid 1028675:tid 1028887] [client 67.20.76.220:53546] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:07:41.947913 2026] [security2:error] [pid 1028675:tid 1028811] [client 213.209.159.223:56108] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/wp-content/mysql.sql"] [unique_id "apK9fddHPfW2QFvhmL7y5wAAAAE"]
[Sat Aug 29 05:07:41.948327 2026] [security2:error] [pid 1028675:tid 1028793] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/crm/.env"] [unique_id "apK9fddHPfW2QFvhmL7y5gAAdHA"]
[Sat Aug 29 05:07:41.950934 2026] [security2:error] [pid 1028675:tid 1028863] [client 20.48.250.41:35078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/Ov-Simple1.php"] [unique_id "apK9fddHPfW2QFvhmL7y6gAAADU"]
[Sat Aug 29 05:07:41.951244 2026] [core:error] [pid 1028675:tid 1028758] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.951255 2026] [core:error] [pid 1028675:tid 1028758] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.952038 2026] [security2:error] [pid 1028675:tid 1028737] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/cron/.env"] [unique_id "apK9fddHPfW2QFvhmL7y6wAAdDg"]
[Sat Aug 29 05:07:41.952178 2026] [security2:error] [pid 1028675:tid 1028703] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/current/.env"] [unique_id "apK9fddHPfW2QFvhmL7y7AAAdBY"]
[Sat Aug 29 05:07:41.952376 2026] [core:error] [pid 1028675:tid 1028708] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.952391 2026] [core:error] [pid 1028675:tid 1028708] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.953097 2026] [security2:error] [pid 1028675:tid 1028931] [client 158.158.54.35:4525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/cc.php"] [unique_id "apK9fddHPfW2QFvhmL7y7QAAAHk"]
[Sat Aug 29 05:07:41.963859 2026] [core:error] [pid 1028675:tid 1028747] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.963875 2026] [core:error] [pid 1028675:tid 1028747] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.965405 2026] [security2:error] [pid 1028675:tid 1028744] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/demo/.env"] [unique_id "apK9fddHPfW2QFvhmL7y9wAAAz8"]
[Sat Aug 29 05:07:41.968570 2026] [security2:error] [pid 1028675:tid 1028717] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/dev/.env"] [unique_id "apK9fddHPfW2QFvhmL7y-gAAAyQ"]
[Sat Aug 29 05:07:41.968976 2026] [security2:error] [pid 1028675:tid 1028892] [client 93.123.109.228:60958] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/application/.env"] [unique_id "apK9fddHPfW2QFvhmL7y_AAAAFI"]
[Sat Aug 29 05:07:41.971917 2026] [security2:error] [pid 1028675:tid 1028916] [client 93.123.109.228:60948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/apps/.env"] [unique_id "apK9fddHPfW2QFvhmL7y_QAAAGo"]
[Sat Aug 29 05:07:41.974794 2026] [security2:error] [pid 1028675:tid 1028892] [client 213.209.159.223:30931] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "webdisk.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_webdisk/wp-content/mysql.sql"] [unique_id "apK9fddHPfW2QFvhmL7zAAAAAFI"]
[Sat Aug 29 05:07:41.982822 2026] [security2:error] [pid 1028675:tid 1028837] [client 20.48.250.41:49114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/wp-blogs.php"] [unique_id "apK9fddHPfW2QFvhmL7zAgAAABs"]
[Sat Aug 29 05:07:41.987985 2026] [core:error] [pid 1028675:tid 1028879] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.988006 2026] [core:error] [pid 1028675:tid 1028879] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.994996 2026] [core:error] [pid 1028675:tid 1028814] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:41.995012 2026] [core:error] [pid 1028675:tid 1028814] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.002793 2026] [security2:error] [pid 1028675:tid 1028842] [client 20.48.250.41:65266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/ws66.php"] [unique_id "apK9ftdHPfW2QFvhmL7zCwAAACA"]
[Sat Aug 29 05:07:42.014846 2026] [security2:error] [pid 1028675:tid 1028920] [client 20.203.141.11:45431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/p.php"] [unique_id "apK9ftdHPfW2QFvhmL7zEAAAAG4"]
[Sat Aug 29 05:07:42.017846 2026] [security2:error] [pid 1028675:tid 1028859] [client 20.63.81.20:20912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/xr.php"] [unique_id "apK9ftdHPfW2QFvhmL7zEQAAADE"]
[Sat Aug 29 05:07:42.026050 2026] [core:error] [pid 1028675:tid 1028777] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.026067 2026] [core:error] [pid 1028675:tid 1028777] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.029055 2026] [security2:error] [pid 1028675:tid 1028748] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/develop/.env"] [unique_id "apK9ftdHPfW2QFvhmL7zGgAAI0M"]
[Sat Aug 29 05:07:42.029111 2026] [security2:error] [pid 1028675:tid 1028746] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/developer/.env"] [unique_id "apK9ftdHPfW2QFvhmL7zGwAAI0E"]
[Sat Aug 29 05:07:42.030061 2026] [security2:error] [pid 1028675:tid 1028846] [client 213.209.159.223:12865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/app_dev.php/_profiler/open"] [unique_id "apK9ftdHPfW2QFvhmL7zHAAAACQ"]
[Sat Aug 29 05:07:42.034297 2026] [security2:error] [pid 1028675:tid 1028741] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/development/.env"] [unique_id "apK9ftdHPfW2QFvhmL7zHgAAQjw"]
[Sat Aug 29 05:07:42.037409 2026] [core:error] [pid 1028675:tid 1028766] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.037424 2026] [core:error] [pid 1028675:tid 1028766] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.041242 2026] [security2:error] [pid 1028675:tid 1028685] [remote 34.138.144.127:52916] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/images../.env"] [unique_id "apK9ftdHPfW2QFvhmL7zHwAAcQU"]
[Sat Aug 29 05:07:42.043004 2026] [core:error] [pid 1028675:tid 1028736] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.048311 2026] [core:error] [pid 1028675:tid 1028730] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.048323 2026] [core:error] [pid 1028675:tid 1028730] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.048698 2026] [security2:error] [pid 1028675:tid 1028767] [remote 34.138.144.127:52916] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/uploads../.env"] [unique_id "apK9ftdHPfW2QFvhmL7zJAAAcVY"]
[Sat Aug 29 05:07:42.057419 2026] [security2:error] [pid 1028675:tid 1028739] [remote 93.123.109.228:46036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flicklister.com"] [uri "/config/aws.php"] [unique_id "apK9ftdHPfW2QFvhmL7zJgAAdjo"]
[Sat Aug 29 05:07:42.068542 2026] [security2:error] [pid 1028675:tid 1028815] [client 168.107.94.195:64247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9ftdHPfW2QFvhmL7zLwAAAAU"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:42.070095 2026] [security2:error] [pid 1028675:tid 1028811] [client 158.23.147.79:26501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/.well-known/content.php"] [unique_id "apK9ftdHPfW2QFvhmL7zMQAAAAE"]
[Sat Aug 29 05:07:42.073296 2026] [security2:error] [pid 1028675:tid 1028931] [client 4.205.62.107:21939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/phpi.php"] [unique_id "apK9ftdHPfW2QFvhmL7zMwAAAHk"]
[Sat Aug 29 05:07:42.084452 2026] [security2:error] [pid 1028675:tid 1028930] [client 20.48.250.41:35517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/wp-blogs.php"] [unique_id "apK9ftdHPfW2QFvhmL7zNQAAAHg"]
[Sat Aug 29 05:07:42.102865 2026] [core:error] [pid 1028675:tid 1028752] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.102885 2026] [core:error] [pid 1028675:tid 1028752] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.111604 2026] [core:error] [pid 1028675:tid 1028927] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.111623 2026] [core:error] [pid 1028675:tid 1028927] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.112341 2026] [core:error] [pid 1028675:tid 1028916] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.112367 2026] [core:error] [pid 1028675:tid 1028916] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.114444 2026] [core:error] [pid 1028675:tid 1028892] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.114460 2026] [core:error] [pid 1028675:tid 1028892] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.127428 2026] [core:error] [pid 1028675:tid 1028903] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.127461 2026] [core:error] [pid 1028675:tid 1028903] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.131919 2026] [core:error] [pid 1028675:tid 1028897] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.131937 2026] [core:error] [pid 1028675:tid 1028897] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.132277 2026] [core:error] [pid 1028675:tid 1028813] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.132288 2026] [core:error] [pid 1028675:tid 1028813] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.135954 2026] [security2:error] [pid 1028675:tid 1028860] [client 20.48.250.41:49524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/ws68.php"] [unique_id "apK9ftdHPfW2QFvhmL7zVgAAADI"]
[Sat Aug 29 05:07:42.138226 2026] [security2:error] [pid 1028675:tid 1028772] [remote 93.123.109.228:46036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flicklister.com"] [uri "/config/config.inc.php"] [unique_id "apK9ftdHPfW2QFvhmL7zVwAAdls"]
[Sat Aug 29 05:07:42.138984 2026] [core:error] [pid 1028675:tid 1028917] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.138997 2026] [core:error] [pid 1028675:tid 1028917] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.145055 2026] [core:error] [pid 1028675:tid 1028832] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.145075 2026] [core:error] [pid 1028675:tid 1028832] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.151162 2026] [security2:error] [pid 1028675:tid 1028886] [client 213.209.159.223:37494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/app_dev.php/_profiler/open"] [unique_id "apK9ftdHPfW2QFvhmL7zYQAAAEw"]
[Sat Aug 29 05:07:42.157714 2026] [security2:error] [pid 1028675:tid 1028918] [client 20.63.81.20:20906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/Q3.php"] [unique_id "apK9ftdHPfW2QFvhmL7zYwAAAGw"]
[Sat Aug 29 05:07:42.167342 2026] [core:error] [pid 1028675:tid 1028823] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.167369 2026] [core:error] [pid 1028675:tid 1028823] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.170196 2026] [security2:error] [pid 1028675:tid 1028786] [remote 93.123.109.228:46036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flicklister.com"] [uri "/config/config.php"] [unique_id "apK9ftdHPfW2QFvhmL7zbAAAdmk"]
[Sat Aug 29 05:07:42.171903 2026] [autoindex:error] [pid 1028675:tid 1028888] [client 20.104.104.62:24741] AH01276: Cannot serve directory /home1/thrbikes/public_html/kevinhenley/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:07:42.172889 2026] [core:error] [pid 1028675:tid 1028930] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.172911 2026] [core:error] [pid 1028675:tid 1028930] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.177113 2026] [security2:error] [pid 1028675:tid 1028878] [client 20.104.104.62:20674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/rayzky.php"] [unique_id "apK9ftdHPfW2QFvhmL7zcAAAAEQ"]
[Sat Aug 29 05:07:42.178222 2026] [core:error] [pid 1028675:tid 1028770] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.178239 2026] [core:error] [pid 1028675:tid 1028770] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.182193 2026] [core:error] [pid 1028675:tid 1028721] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.182217 2026] [core:error] [pid 1028675:tid 1028721] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.187399 2026] [security2:error] [pid 1028675:tid 1028880] [client 20.63.219.114:17184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-admin/panel.php"] [unique_id "apK9ftdHPfW2QFvhmL7zeAAAAEY"]
[Sat Aug 29 05:07:42.194855 2026] [security2:error] [pid 1028675:tid 1028837] [client 213.209.159.223:9844] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/wp-content/mysql.sql"] [unique_id "apK9ftdHPfW2QFvhmL7zegAAABs"]
[Sat Aug 29 05:07:42.205557 2026] [security2:error] [pid 1028675:tid 1028861] [client 20.48.250.41:48995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/mini.php"] [unique_id "apK9ftdHPfW2QFvhmL7zfwAAADM"]
[Sat Aug 29 05:07:42.212827 2026] [core:error] [pid 1028675:tid 1028903] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.212845 2026] [core:error] [pid 1028675:tid 1028903] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.217581 2026] [security2:error] [pid 1028675:tid 1028813] [client 20.48.250.41:35057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/mini.php"] [unique_id "apK9ftdHPfW2QFvhmL7zgwAAAAM"]
[Sat Aug 29 05:07:42.220157 2026] [core:error] [pid 1028675:tid 1028862] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.220171 2026] [core:error] [pid 1028675:tid 1028862] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.220409 2026] [security2:error] [pid 1028675:tid 1028763] [remote 93.123.109.228:46036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flicklister.com"] [uri "/config/env.php"] [unique_id "apK9ftdHPfW2QFvhmL7zhwAAdlI"]
[Sat Aug 29 05:07:42.221291 2026] [security2:error] [pid 1028675:tid 1028860] [client 213.209.159.223:56108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/php-info.php"] [unique_id "apK9ftdHPfW2QFvhmL7ziAAAADI"]
[Sat Aug 29 05:07:42.231256 2026] [security2:error] [pid 1028675:tid 1028937] [client 20.104.49.130:39087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/wp-blog-header.php"] [unique_id "apK9ftdHPfW2QFvhmL7zjQAAAH8"]
[Sat Aug 29 05:07:42.237591 2026] [security2:error] [pid 1028675:tid 1028879] [client 20.104.104.62:24741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinhenley.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK9ftdHPfW2QFvhmL7zjgAAAEU"]
[Sat Aug 29 05:07:42.238160 2026] [security2:error] [pid 1028675:tid 1028857] [client 20.151.200.44:64676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/155.php"] [unique_id "apK9ftdHPfW2QFvhmL7zkAAAAC8"]
[Sat Aug 29 05:07:42.248238 2026] [core:error] [pid 1028675:tid 1028833] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.248253 2026] [core:error] [pid 1028675:tid 1028833] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.249658 2026] [security2:error] [pid 1028675:tid 1028680] [remote 34.138.144.127:52916] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/assets../.env"] [unique_id "apK9ftdHPfW2QFvhmL7zlAAACwA"]
[Sat Aug 29 05:07:42.252154 2026] [security2:error] [pid 1028675:tid 1028923] [client 4.205.62.107:65496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/database.php"] [unique_id "apK9ftdHPfW2QFvhmL7zmAAAAHE"]
[Sat Aug 29 05:07:42.252968 2026] [security2:error] [pid 1028675:tid 1028720] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/erp/.env"] [unique_id "apK9ftdHPfW2QFvhmL7zlwAAPic"]
[Sat Aug 29 05:07:42.256635 2026] [security2:error] [pid 1028675:tid 1028884] [client 20.203.141.11:33692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/lite.php"] [unique_id "apK9ftdHPfW2QFvhmL7zmQAAAEo"]
[Sat Aug 29 05:07:42.261227 2026] [security2:error] [pid 1028675:tid 1028819] [client 213.209.159.223:30931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.greatdecisionsofcharlevoix.com"] [uri "/php-info.php"] [unique_id "apK9ftdHPfW2QFvhmL7zmwAAAAk"]
[Sat Aug 29 05:07:42.270061 2026] [security2:error] [pid 1028675:tid 1028706] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/etc/apache2/apache2.conf"] [unique_id "apK9ftdHPfW2QFvhmL7zowAAPhk"]
[Sat Aug 29 05:07:42.272017 2026] [security2:error] [pid 1028675:tid 1028684] [remote 34.138.144.127:52916] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/img../.env"] [unique_id "apK9ftdHPfW2QFvhmL7zogAAbAQ"]
[Sat Aug 29 05:07:42.274118 2026] [core:error] [pid 1028675:tid 1028764] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.274137 2026] [core:error] [pid 1028675:tid 1028764] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.274604 2026] [core:error] [pid 1028675:tid 1028800] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.274622 2026] [core:error] [pid 1028675:tid 1028800] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.274891 2026] [core:error] [pid 1028675:tid 1028787] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.274903 2026] [core:error] [pid 1028675:tid 1028787] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.280308 2026] [security2:error] [pid 1028675:tid 1028696] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/etc/boto.cfg"] [unique_id "apK9ftdHPfW2QFvhmL7zpQAAPhA"]
[Sat Aug 29 05:07:42.280809 2026] [security2:error] [pid 1028675:tid 1028719] [remote 93.123.109.228:46036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flicklister.com"] [uri "/config/module.config.php"] [unique_id "apK9ftdHPfW2QFvhmL7zpgAAdiY"]
[Sat Aug 29 05:07:42.285814 2026] [security2:error] [pid 1028675:tid 1028877] [client 213.209.159.223:44315] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/framework/.env"] [unique_id "apK9ftdHPfW2QFvhmL7zqQAAAEM"]
[Sat Aug 29 05:07:42.287113 2026] [security2:error] [pid 1028675:tid 1028856] [client 20.63.81.20:20982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/Q1.php"] [unique_id "apK9ftdHPfW2QFvhmL7zqgAAAC4"]
[Sat Aug 29 05:07:42.287908 2026] [security2:error] [pid 1028675:tid 1028820] [client 40.83.93.50:15714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-content/languages/min.php"] [unique_id "apK9ftdHPfW2QFvhmL7zrAAAAAo"]
[Sat Aug 29 05:07:42.288617 2026] [core:error] [pid 1028675:tid 1028697] [remote 34.138.144.127:52916] AH10244: invalid URI path (/%2e%2e/.env)
[Sat Aug 29 05:07:42.290319 2026] [security2:error] [pid 1028675:tid 1028870] [client 158.23.147.79:49850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/content.php"] [unique_id "apK9ftdHPfW2QFvhmL7zsAAAADw"]
[Sat Aug 29 05:07:42.292590 2026] [security2:error] [pid 1028675:tid 1028842] [client 4.205.62.107:58439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/asdf.php"] [unique_id "apK9ftdHPfW2QFvhmL7zsgAAACA"]
[Sat Aug 29 05:07:42.293723 2026] [core:error] [pid 1028675:tid 1028877] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.293739 2026] [core:error] [pid 1028675:tid 1028877] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.294237 2026] [core:error] [pid 1028675:tid 1028697] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.297144 2026] [security2:error] [pid 1028675:tid 1028788] [remote 93.123.109.228:46036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flicklister.com"] [uri "/config/nexmo.php"] [unique_id "apK9ftdHPfW2QFvhmL7ztAAAG2s"]
[Sat Aug 29 05:07:42.304263 2026] [security2:error] [pid 1028675:tid 1028699] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/fe/.env"] [unique_id "apK9ftdHPfW2QFvhmL7zuAAAPhI"]
[Sat Aug 29 05:07:42.305224 2026] [security2:error] [pid 1028675:tid 1028935] [client 213.209.159.223:29034] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/wp-content/mysql.sql"] [unique_id "apK9ftdHPfW2QFvhmL7zugAAAH0"]
[Sat Aug 29 05:07:42.316630 2026] [security2:error] [pid 1028675:tid 1028813] [client 20.48.250.41:65393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/users.php"] [unique_id "apK9ftdHPfW2QFvhmL7zxgAAAAM"]
[Sat Aug 29 05:07:42.324248 2026] [security2:error] [pid 1028675:tid 1028708] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/front/.env"] [unique_id "apK9ftdHPfW2QFvhmL7zzAAAPhs"]
[Sat Aug 29 05:07:42.334489 2026] [core:error] [pid 1028675:tid 1028881] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.334512 2026] [core:error] [pid 1028675:tid 1028881] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.338258 2026] [core:error] [pid 1028675:tid 1028828] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.338280 2026] [core:error] [pid 1028675:tid 1028828] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.339106 2026] [security2:error] [pid 1028675:tid 1028690] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/frontend/.env"] [unique_id "apK9ftdHPfW2QFvhmL7z0QAAPgo"]
[Sat Aug 29 05:07:42.339855 2026] [security2:error] [pid 1028675:tid 1028931] [client 20.48.250.41:49004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/amp.php"] [unique_id "apK9ftdHPfW2QFvhmL7z0wAAAHk"]
[Sat Aug 29 05:07:42.341956 2026] [security2:error] [pid 1028675:tid 1028884] [client 158.23.147.79:30521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/ans.php"] [unique_id "apK9ftdHPfW2QFvhmL7z1gAAAEo"]
[Sat Aug 29 05:07:42.345625 2026] [core:error] [pid 1028675:tid 1028879] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.345641 2026] [core:error] [pid 1028675:tid 1028879] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.350753 2026] [core:error] [pid 1028675:tid 1028884] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.350773 2026] [core:error] [pid 1028675:tid 1028884] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.359011 2026] [security2:error] [pid 1028675:tid 1028744] [remote 93.123.109.228:46036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flicklister.com"] [uri "/config/stripe.php"] [unique_id "apK9ftdHPfW2QFvhmL7z4QAAQj8"]
[Sat Aug 29 05:07:42.369225 2026] [security2:error] [pid 1028675:tid 1028849] [client 185.104.184.230:50398] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.jia.zbw.mybluehost.me"] [uri "/autodiscover/autodiscover.xml/sito/wp-includes/wlwmanifest.xml"] [unique_id "apK9ftdHPfW2QFvhmL7z5wAAACc"]
[Sat Aug 29 05:07:42.382812 2026] [security2:error] [pid 1028675:tid 1028845] [client 20.151.200.44:47317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/msy.php"] [unique_id "apK9ftdHPfW2QFvhmL7z7QAAACM"]
[Sat Aug 29 05:07:42.385146 2026] [security2:error] [pid 1028675:tid 1028917] [client 20.52.41.200:5323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wk/index.php"] [unique_id "apK9ftdHPfW2QFvhmL7z7wAAAGs"]
[Sat Aug 29 05:07:42.391105 2026] [security2:error] [pid 1028675:tid 1028910] [client 158.23.147.79:35749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-admin/index.php"] [unique_id "apK9ftdHPfW2QFvhmL7z9QAAAGQ"]
[Sat Aug 29 05:07:42.393477 2026] [security2:error] [pid 1028675:tid 1028814] [client 93.123.109.228:60878] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/back-api/.env"] [unique_id "apK9ftdHPfW2QFvhmL7z9gAAAAQ"]
[Sat Aug 29 05:07:42.393938 2026] [core:error] [pid 1028675:tid 1028917] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.393952 2026] [core:error] [pid 1028675:tid 1028917] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.399628 2026] [security2:error] [pid 1028675:tid 1028932] [client 158.158.54.35:13099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/files/index.php"] [unique_id "apK9ftdHPfW2QFvhmL7z-gAAAHo"]
[Sat Aug 29 05:07:42.404304 2026] [security2:error] [pid 1028675:tid 1028903] [client 93.123.109.228:60860] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/back-end/.env"] [unique_id "apK9ftdHPfW2QFvhmL7z-wAAAF0"]
[Sat Aug 29 05:07:42.416808 2026] [security2:error] [pid 1028675:tid 1028881] [client 20.63.81.20:20869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/nz.php"] [unique_id "apK9ftdHPfW2QFvhmL7z_wAAAEc"]
[Sat Aug 29 05:07:42.422444 2026] [security2:error] [pid 1028675:tid 1028857] [client 93.123.109.228:60688] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/back/.env"] [unique_id "apK9ftdHPfW2QFvhmL70AgAAAC8"]
[Sat Aug 29 05:07:42.422667 2026] [core:error] [pid 1028675:tid 1028839] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.422682 2026] [core:error] [pid 1028675:tid 1028839] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.422803 2026] [security2:error] [pid 1028675:tid 1028931] [client 213.209.159.223:44315] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/ikiwiki/.env"] [unique_id "apK9ftdHPfW2QFvhmL70BAAAAHk"]
[Sat Aug 29 05:07:42.427699 2026] [security2:error] [pid 1028675:tid 1028815] [client 93.123.109.228:60990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/backend-api/.env"] [unique_id "apK9ftdHPfW2QFvhmL70CQAAAAU"]
[Sat Aug 29 05:07:42.428558 2026] [security2:error] [pid 1028675:tid 1028861] [client 213.209.159.223:15968] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_whm/wp-content/mysql.sql"] [unique_id "apK9ftdHPfW2QFvhmL70BwAAADM"]
[Sat Aug 29 05:07:42.432653 2026] [core:error] [pid 1028675:tid 1028716] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.432669 2026] [core:error] [pid 1028675:tid 1028716] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.434146 2026] [core:error] [pid 1028675:tid 1028881] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.434161 2026] [core:error] [pid 1028675:tid 1028881] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.434329 2026] [security2:error] [pid 1028675:tid 1028741] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/info.php"] [unique_id "apK9ftdHPfW2QFvhmL70DQAAPjw"]
[Sat Aug 29 05:07:42.437315 2026] [security2:error] [pid 1028675:tid 1028902] [client 4.205.62.107:22394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/drykl.php"] [unique_id "apK9ftdHPfW2QFvhmL70EgAAAFw"]
[Sat Aug 29 05:07:42.439144 2026] [security2:error] [pid 1028675:tid 1028849] [client 20.104.104.62:24722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinhenley.com"] [uri "/wp-content/about.php"] [unique_id "apK9ftdHPfW2QFvhmL70FAAAACc"]
[Sat Aug 29 05:07:42.444526 2026] [core:error] [pid 1028675:tid 1028840] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.444543 2026] [core:error] [pid 1028675:tid 1028840] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.450907 2026] [security2:error] [pid 1028675:tid 1028820] [client 168.107.94.195:64527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9ftdHPfW2QFvhmL70GQAAAAo"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:42.453062 2026] [security2:error] [pid 1028675:tid 1028877] [client 93.123.109.228:60902] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK9ftdHPfW2QFvhmL70GwAAAEM"]
[Sat Aug 29 05:07:42.457200 2026] [core:error] [pid 1028675:tid 1028902] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.457217 2026] [core:error] [pid 1028675:tid 1028902] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.457425 2026] [core:error] [pid 1028675:tid 1028842] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.457446 2026] [core:error] [pid 1028675:tid 1028842] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.459635 2026] [security2:error] [pid 1028675:tid 1028700] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/infophp.php"] [unique_id "apK9ftdHPfW2QFvhmL70HwAAPhM"]
[Sat Aug 29 05:07:42.460198 2026] [security2:error] [pid 1028675:tid 1028757] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/infos.php"] [unique_id "apK9ftdHPfW2QFvhmL70IAAAPkw"]
[Sat Aug 29 05:07:42.469324 2026] [http2:info] [pid 1034096:tid 1034096] h2_workers: created with min=128 max=192 idle_ms=600000
[Sat Aug 29 05:07:42.485046 2026] [security2:error] [pid 1028675:tid 1028892] [client 20.203.141.11:45441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/a1.php"] [unique_id "apK9ftdHPfW2QFvhmL70JQAAAFI"]
[Sat Aug 29 05:07:42.487894 2026] [security2:error] [pid 1028675:tid 1028922] [client 213.209.159.223:9844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/php-info.php"] [unique_id "apK9ftdHPfW2QFvhmL70JgAAAHA"]
[Sat Aug 29 05:07:42.522228 2026] [security2:error] [pid 1028675:tid 1028750] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/laravel/.env"] [unique_id "apK9ftdHPfW2QFvhmL70KwAAOEU"]
[Sat Aug 29 05:07:42.527577 2026] [security2:error] [pid 1028675:tid 1028755] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/lms/.env"] [unique_id "apK9ftdHPfW2QFvhmL70LgAAOEo"]
[Sat Aug 29 05:07:42.537659 2026] [security2:error] [pid 1034096:tid 1034253] [client 20.104.104.62:40218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/repair.php"] [unique_id "apK9fi04twRPFuquKD2VogAAAIc"]
[Sat Aug 29 05:07:42.544234 2026] [core:error] [pid 1034096:tid 1034252] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.544261 2026] [core:error] [pid 1034096:tid 1034252] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.544284 2026] [security2:error] [pid 1034096:tid 1034254] [client 20.63.81.20:20924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/sg.php"] [unique_id "apK9fi04twRPFuquKD2VpQAAAIg"]
[Sat Aug 29 05:07:42.551567 2026] [security2:error] [pid 1028675:tid 1028847] [client 20.63.219.114:16035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-admin/pk.php"] [unique_id "apK9ftdHPfW2QFvhmL70PwAAACU"]
[Sat Aug 29 05:07:42.553933 2026] [security2:error] [pid 1028675:tid 1028732] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/local/.env"] [unique_id "apK9ftdHPfW2QFvhmL70QAAAODM"]
[Sat Aug 29 05:07:42.559188 2026] [security2:error] [pid 1028675:tid 1028909] [client 213.209.159.223:44315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/config.inc.php"] [unique_id "apK9ftdHPfW2QFvhmL70QwAAAGM"]
[Sat Aug 29 05:07:42.561238 2026] [core:error] [pid 1034096:tid 1034257] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.561261 2026] [core:error] [pid 1034096:tid 1034257] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.565410 2026] [core:error] [pid 1028675:tid 1028819] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.565429 2026] [core:error] [pid 1028675:tid 1028819] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.588493 2026] [security2:error] [pid 1028675:tid 1028884] [client 213.209.159.223:29034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/php-info.php"] [unique_id "apK9ftdHPfW2QFvhmL70TAAAAEo"]
[Sat Aug 29 05:07:42.593733 2026] [core:error] [pid 1028675:tid 1028862] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.593754 2026] [core:error] [pid 1028675:tid 1028862] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.595391 2026] [security2:error] [pid 1028675:tid 1028735] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/market/.env"] [unique_id "apK9ftdHPfW2QFvhmL70UgAAODY"]
[Sat Aug 29 05:07:42.598713 2026] [security2:error] [pid 1028675:tid 1028930] [client 93.123.109.228:60688] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/backup/.env"] [unique_id "apK9ftdHPfW2QFvhmL70VQAAAHg"]
[Sat Aug 29 05:07:42.606630 2026] [security2:error] [pid 1028675:tid 1028911] [client 93.123.109.228:60888] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/be/.env"] [unique_id "apK9ftdHPfW2QFvhmL70VwAAAGU"]
[Sat Aug 29 05:07:42.610668 2026] [security2:error] [pid 1028675:tid 1028887] [client 93.123.109.228:60762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/beta/.env"] [unique_id "apK9ftdHPfW2QFvhmL70WQAAAE0"]
[Sat Aug 29 05:07:42.613568 2026] [security2:error] [pid 1028675:tid 1028742] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/marketing/.env"] [unique_id "apK9ftdHPfW2QFvhmL70XQAAOD0"]
[Sat Aug 29 05:07:42.621712 2026] [core:error] [pid 1028675:tid 1028902] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.621735 2026] [core:error] [pid 1028675:tid 1028902] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.622283 2026] [core:error] [pid 1028675:tid 1028907] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.622296 2026] [core:error] [pid 1028675:tid 1028907] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.641968 2026] [security2:error] [pid 1034096:tid 1034260] [client 20.104.104.62:24742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinhenley.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "apK9fi04twRPFuquKD2VqQAAAI4"]
[Sat Aug 29 05:07:42.658862 2026] [security2:error] [pid 1028675:tid 1028781] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/media/.env"] [unique_id "apK9ftdHPfW2QFvhmL70awAAOGQ"]
[Sat Aug 29 05:07:42.669898 2026] [core:error] [pid 1034096:tid 1034283] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.669921 2026] [core:error] [pid 1034096:tid 1034283] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.675764 2026] [security2:error] [pid 1028675:tid 1028881] [client 20.63.81.20:20979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/hypo.php"] [unique_id "apK9ftdHPfW2QFvhmL70dgAAAEc"]
[Sat Aug 29 05:07:42.700620 2026] [security2:error] [pid 1028675:tid 1028680] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/new/.env"] [unique_id "apK9ftdHPfW2QFvhmL70fgAAOAA"]
[Sat Aug 29 05:07:42.707658 2026] [security2:error] [pid 1028675:tid 1028760] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/node-api/.env"] [unique_id "apK9ftdHPfW2QFvhmL70gQAAOE8"]
[Sat Aug 29 05:07:42.713396 2026] [security2:error] [pid 1028675:tid 1028926] [client 213.209.159.223:15968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/php-info.php"] [unique_id "apK9ftdHPfW2QFvhmL70ggAAAHQ"]
[Sat Aug 29 05:07:42.718589 2026] [security2:error] [pid 1028675:tid 1028800] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/nodeapi/.env"] [unique_id "apK9ftdHPfW2QFvhmL70hwAAOHc"]
[Sat Aug 29 05:07:42.718589 2026] [security2:error] [pid 1028675:tid 1028764] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/node/backend/.env"] [unique_id "apK9ftdHPfW2QFvhmL70iAAAOFM"]
[Sat Aug 29 05:07:42.718692 2026] [security2:error] [pid 1028675:tid 1028684] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/node/api/.env"] [unique_id "apK9ftdHPfW2QFvhmL70hQAAOAQ"]
[Sat Aug 29 05:07:42.723295 2026] [core:error] [pid 1034096:tid 1034295] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.723312 2026] [core:error] [pid 1034096:tid 1034295] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.725166 2026] [security2:error] [pid 1028675:tid 1028696] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/node/.env"] [unique_id "apK9ftdHPfW2QFvhmL70jAAAOBA"]
[Sat Aug 29 05:07:42.727149 2026] [core:error] [pid 1034096:tid 1034294] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.727171 2026] [core:error] [pid 1034096:tid 1034294] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.728763 2026] [core:error] [pid 1028675:tid 1028724] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.728780 2026] [core:error] [pid 1028675:tid 1028724] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.734573 2026] [core:error] [pid 1028675:tid 1028697] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.734591 2026] [core:error] [pid 1028675:tid 1028697] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.735767 2026] [core:error] [pid 1028675:tid 1028806] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.735785 2026] [core:error] [pid 1028675:tid 1028806] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.736996 2026] [core:error] [pid 1028675:tid 1028740] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.737011 2026] [core:error] [pid 1028675:tid 1028740] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.739381 2026] [core:error] [pid 1028675:tid 1028791] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.739399 2026] [core:error] [pid 1028675:tid 1028791] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.747894 2026] [security2:error] [pid 1028675:tid 1028699] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/nodeweb/.env"] [unique_id "apK9ftdHPfW2QFvhmL70mQAAOBI"]
[Sat Aug 29 05:07:42.747933 2026] [security2:error] [pid 1028675:tid 1028782] [remote 34.138.144.127:52916] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.roycehomesales.com"] [uri "/___proxy_subdomain_cpcalendars/@fs/var/task/.env"] [unique_id "apK9ftdHPfW2QFvhmL70mAAAMWU"]
[Sat Aug 29 05:07:42.752531 2026] [security2:error] [pid 1028675:tid 1028887] [client 93.123.109.228:60688] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/client/.env"] [unique_id "apK9ftdHPfW2QFvhmL70nQAAAE0"]
[Sat Aug 29 05:07:42.760029 2026] [security2:error] [pid 1028675:tid 1028901] [client 180.190.5.40:39900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.5.190.180.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK9ftdHPfW2QFvhmL70oAAAAFs"]
[Sat Aug 29 05:07:42.760128 2026] [security2:error] [pid 1028675:tid 1028901] [client 180.190.5.40:39900] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK9ftdHPfW2QFvhmL70oAAAAFs"]
[Sat Aug 29 05:07:42.762877 2026] [security2:error] [pid 1028675:tid 1028918] [client 20.203.141.11:38615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/term.php"] [unique_id "apK9ftdHPfW2QFvhmL70ogAAAGw"]
[Sat Aug 29 05:07:42.762883 2026] [security2:error] [pid 1034096:tid 1034263] [client 40.83.93.50:5477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-content/languages/pk.php"] [unique_id "apK9fi04twRPFuquKD2VsQAAAJE"]
[Sat Aug 29 05:07:42.763895 2026] [core:error] [pid 1028675:tid 1028873] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.763911 2026] [core:error] [pid 1028675:tid 1028873] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.765347 2026] [security2:error] [pid 1028675:tid 1028828] [client 34.81.157.26:12204] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/.env"] [unique_id "apK9ftdHPfW2QFvhmL70pQAAABI"]
[Sat Aug 29 05:07:42.769291 2026] [security2:error] [pid 1034096:tid 1034265] [client 34.81.157.26:12244] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/v1/.env"] [unique_id "apK9fi04twRPFuquKD2VsgAAAJM"]
[Sat Aug 29 05:07:42.772127 2026] [security2:error] [pid 1028675:tid 1028812] [client 34.81.157.26:12268] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/uploads../.env"] [unique_id "apK9ftdHPfW2QFvhmL70pwAAAAI"]
[Sat Aug 29 05:07:42.773837 2026] [security2:error] [pid 1028675:tid 1028910] [client 34.81.157.26:12212] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/assets../.env"] [unique_id "apK9ftdHPfW2QFvhmL70qAAAAGQ"]
[Sat Aug 29 05:07:42.774115 2026] [security2:error] [pid 1034096:tid 1034277] [client 34.81.157.26:12498] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/web/.env"] [unique_id "apK9fi04twRPFuquKD2VswAAAJ8"]
[Sat Aug 29 05:07:42.774785 2026] [security2:error] [pid 1028675:tid 1028892] [client 34.81.157.26:12288] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/.env.production"] [unique_id "apK9ftdHPfW2QFvhmL70qgAAAFI"]
[Sat Aug 29 05:07:42.774962 2026] [security2:error] [pid 1034096:tid 1034267] [client 34.81.157.26:12208] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/img../.env"] [unique_id "apK9fi04twRPFuquKD2VtAAAAJU"]
[Sat Aug 29 05:07:42.775579 2026] [security2:error] [pid 1028675:tid 1028821] [client 34.81.157.26:12236] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/.docker/.env"] [unique_id "apK9ftdHPfW2QFvhmL70qwAAAAs"]
[Sat Aug 29 05:07:42.777906 2026] [security2:error] [pid 1034096:tid 1034272] [client 34.81.157.26:12274] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/.env"] [unique_id "apK9fi04twRPFuquKD2VtQAAAJo"]
[Sat Aug 29 05:07:42.778493 2026] [security2:error] [pid 1034096:tid 1034273] [client 34.81.157.26:12416] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/config/.env"] [unique_id "apK9fi04twRPFuquKD2VtgAAAJs"]
[Sat Aug 29 05:07:42.783053 2026] [security2:error] [pid 1034096:tid 1034274] [client 34.81.157.26:12398] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/api/.env"] [unique_id "apK9fi04twRPFuquKD2VuAAAAJw"]
[Sat Aug 29 05:07:42.783459 2026] [security2:error] [pid 1028675:tid 1028858] [client 34.81.157.26:12302] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/.env.bak"] [unique_id "apK9ftdHPfW2QFvhmL70sAAAADA"]
[Sat Aug 29 05:07:42.784632 2026] [security2:error] [pid 1028675:tid 1028841] [client 213.209.159.223:54078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/info.php.bak"] [unique_id "apK9ftdHPfW2QFvhmL70sgAAAB8"]
[Sat Aug 29 05:07:42.785698 2026] [security2:error] [pid 1034096:tid 1034275] [client 34.81.157.26:12484] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/server/.env"] [unique_id "apK9fi04twRPFuquKD2VtwAAAJ0"]
[Sat Aug 29 05:07:42.786206 2026] [security2:error] [pid 1034096:tid 1034276] [client 34.81.157.26:12364] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/.env.swp"] [unique_id "apK9fi04twRPFuquKD2VuQAAAJ4"]
[Sat Aug 29 05:07:42.788013 2026] [security2:error] [pid 1034096:tid 1034268] [client 34.81.157.26:12330] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/.env.old"] [unique_id "apK9fi04twRPFuquKD2VugAAAJY"]
[Sat Aug 29 05:07:42.790416 2026] [security2:error] [pid 1028675:tid 1028860] [client 34.81.157.26:12260] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/v2/.env"] [unique_id "apK9ftdHPfW2QFvhmL70uwAAADI"]
[Sat Aug 29 05:07:42.790519 2026] [security2:error] [pid 1034096:tid 1034282] [client 34.81.157.26:12470] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/src/.env"] [unique_id "apK9fi04twRPFuquKD2VwgAAAKQ"]
[Sat Aug 29 05:07:42.790706 2026] [security2:error] [pid 1028675:tid 1028816] [client 93.123.109.228:60888] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/cms/.env"] [unique_id "apK9ftdHPfW2QFvhmL70tQAAAAY"]
[Sat Aug 29 05:07:42.791747 2026] [security2:error] [pid 1034096:tid 1034279] [client 34.81.157.26:12390] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/app/.env"] [unique_id "apK9fi04twRPFuquKD2VwQAAAKE"]
[Sat Aug 29 05:07:42.792461 2026] [security2:error] [pid 1028675:tid 1028925] [client 34.81.157.26:12226] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/images../.env"] [unique_id "apK9ftdHPfW2QFvhmL70vAAAAHM"]
[Sat Aug 29 05:07:42.793658 2026] [security2:error] [pid 1028675:tid 1028922] [client 34.81.157.26:12412] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/backend/.env"] [unique_id "apK9ftdHPfW2QFvhmL70twAAAHA"]
[Sat Aug 29 05:07:42.795602 2026] [security2:error] [pid 1028675:tid 1028922] [client 34.81.157.26:12412] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/backend/.env"] [unique_id "apK9ftdHPfW2QFvhmL70twAAAHA"]
[Sat Aug 29 05:07:42.795882 2026] [security2:error] [pid 1028675:tid 1028931] [client 34.81.157.26:12436] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/docker/.env"] [unique_id "apK9ftdHPfW2QFvhmL70vgAAAHk"]
[Sat Aug 29 05:07:42.795882 2026] [security2:error] [pid 1028675:tid 1028813] [client 34.81.157.26:12430] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/laravel/.env"] [unique_id "apK9ftdHPfW2QFvhmL70vQAAAAM"]
[Sat Aug 29 05:07:42.795974 2026] [security2:error] [pid 1028675:tid 1028931] [client 34.81.157.26:12436] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/docker/.env"] [unique_id "apK9ftdHPfW2QFvhmL70vgAAAHk"]
[Sat Aug 29 05:07:42.795974 2026] [security2:error] [pid 1034096:tid 1034281] [client 34.81.157.26:12488] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/frontend/.env"] [unique_id "apK9fi04twRPFuquKD2VvwAAAKM"]
[Sat Aug 29 05:07:42.796676 2026] [security2:error] [pid 1034096:tid 1034269] [client 34.81.157.26:12374] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/.env.backup"] [unique_id "apK9fi04twRPFuquKD2VwAAAAJc"]
[Sat Aug 29 05:07:42.802025 2026] [security2:error] [pid 1028675:tid 1028932] [client 34.81.157.26:12448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/core/.env"] [unique_id "apK9ftdHPfW2QFvhmL70wQAAAHo"]
[Sat Aug 29 05:07:42.805120 2026] [security2:error] [pid 1028675:tid 1028695] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/old/.env"] [unique_id "apK9ftdHPfW2QFvhmL70xgAAOA8"]
[Sat Aug 29 05:07:42.807118 2026] [security2:error] [pid 1028675:tid 1028909] [client 158.23.147.79:32610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK9ftdHPfW2QFvhmL70yAAAAGM"]
[Sat Aug 29 05:07:42.811078 2026] [security2:error] [pid 1028675:tid 1028897] [client 20.151.200.44:46597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/siln.php"] [unique_id "apK9ftdHPfW2QFvhmL70ywAAAFc"]
[Sat Aug 29 05:07:42.811110 2026] [security2:error] [pid 1028675:tid 1028728] [remote 93.123.109.228:46162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flowerfh.com"] [uri "/.wp-config.php.swp"] [unique_id "apK9ftdHPfW2QFvhmL70ygAAIS8"]
[Sat Aug 29 05:07:42.817838 2026] [security2:error] [pid 1028675:tid 1028920] [client 4.205.62.107:53132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/tinyfilemanager.php"] [unique_id "apK9ftdHPfW2QFvhmL70zQAAAG4"]
[Sat Aug 29 05:07:42.822629 2026] [security2:error] [pid 1028675:tid 1028856] [client 20.63.81.20:20918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/Hd.php"] [unique_id "apK9ftdHPfW2QFvhmL700AAAAC4"]
[Sat Aug 29 05:07:42.831064 2026] [core:error] [pid 1028675:tid 1028823] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.831085 2026] [core:error] [pid 1028675:tid 1028823] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.832179 2026] [core:error] [pid 1028675:tid 1028890] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.832196 2026] [core:error] [pid 1028675:tid 1028890] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.832374 2026] [security2:error] [pid 1028675:tid 1028823] [client 34.81.157.26:0] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/index.php"] [unique_id "apK9ftdHPfW2QFvhmL700gAAAA0"]
[Sat Aug 29 05:07:42.832725 2026] [security2:error] [pid 1034096:tid 1034270] [client 168.107.94.195:64904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9fi04twRPFuquKD2VxQAAAJg"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:42.832824 2026] [core:error] [pid 1028675:tid 1028927] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.832837 2026] [core:error] [pid 1028675:tid 1028927] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.837804 2026] [security2:error] [pid 1034096:tid 1034271] [client 213.209.159.223:33297] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/system/.env"] [unique_id "apK9fi04twRPFuquKD2VxwAAAJk"]
[Sat Aug 29 05:07:42.840967 2026] [security2:error] [pid 1034096:tid 1034289] [client 20.52.41.200:5338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/admin.php"] [unique_id "apK9fi04twRPFuquKD2VyAAAAKs"]
[Sat Aug 29 05:07:42.841569 2026] [security2:error] [pid 1028675:tid 1028839] [client 213.209.159.223:49054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.greatdecisionsofcharlevoix.com"] [uri "/info.php.bak"] [unique_id "apK9ftdHPfW2QFvhmL702wAAAB0"]
[Sat Aug 29 05:07:42.842001 2026] [security2:error] [pid 1034096:tid 1034290] [client 158.158.54.35:18216] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "traditionalslateroofing.com"] [uri "/1.php7"] [unique_id "apK9fi04twRPFuquKD2VyQAAAKw"]
[Sat Aug 29 05:07:42.842104 2026] [security2:error] [pid 1034096:tid 1034290] [client 158.158.54.35:18216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/1.php7"] [unique_id "apK9fi04twRPFuquKD2VyQAAAKw"]
[Sat Aug 29 05:07:42.845679 2026] [security2:error] [pid 1028675:tid 1028914] [client 93.123.109.228:60964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/config.php"] [unique_id "apK9ftdHPfW2QFvhmL703QAAAGg"]
[Sat Aug 29 05:07:42.849820 2026] [security2:error] [pid 1028675:tid 1028820] [client 34.81.157.26:12316] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/.env.staging"] [unique_id "apK9ftdHPfW2QFvhmL70rQAAAAo"]
[Sat Aug 29 05:07:42.849866 2026] [security2:error] [pid 1028675:tid 1028904] [client 213.209.159.223:17468] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/source/.env"] [unique_id "apK9ftdHPfW2QFvhmL703gAAAF4"]
[Sat Aug 29 05:07:42.858552 2026] [security2:error] [pid 1028675:tid 1028703] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/opt/.env"] [unique_id "apK9ftdHPfW2QFvhmL704QAAOBY"]
[Sat Aug 29 05:07:42.863598 2026] [core:error] [pid 1034096:tid 1034317] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.863619 2026] [core:error] [pid 1034096:tid 1034317] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.864159 2026] [core:error] [pid 1034096:tid 1034322] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.864172 2026] [core:error] [pid 1034096:tid 1034322] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.865707 2026] [core:error] [pid 1028675:tid 1028930] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.865729 2026] [core:error] [pid 1028675:tid 1028930] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.865826 2026] [core:error] [pid 1034096:tid 1034323] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.865842 2026] [core:error] [pid 1034096:tid 1034323] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.868574 2026] [core:error] [pid 1028675:tid 1028916] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.868589 2026] [core:error] [pid 1028675:tid 1028916] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.881030 2026] [core:error] [pid 1028675:tid 1028935] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.881047 2026] [core:error] [pid 1028675:tid 1028935] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.893184 2026] [core:error] [pid 1034096:tid 1034330] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.893207 2026] [core:error] [pid 1034096:tid 1034330] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.898398 2026] [autoindex:error] [pid 1028675:tid 1028859] [client 20.104.104.62:0] AH01276: Cannot serve directory /home1/thrbikes/public_html/kevinhenley/wp-content/uploads/2024/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:07:42.915430 2026] [security2:error] [pid 1028675:tid 1028886] [client 20.63.219.114:17202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-admin/plugin-install.php"] [unique_id "apK9ftdHPfW2QFvhmL71AgAAAEw"]
[Sat Aug 29 05:07:42.949177 2026] [security2:error] [pid 1028675:tid 1028757] [remote 34.138.144.127:52916] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "cpcalendars.roycehomesales.com"] [uri "/api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ"] [unique_id "apK9ftdHPfW2QFvhmL71DAAAQ0w"]
[Sat Aug 29 05:07:42.951896 2026] [security2:error] [pid 1028675:tid 1028849] [client 93.123.109.228:60910] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/config/.env"] [unique_id "apK9ftdHPfW2QFvhmL71CwAAACc"]
[Sat Aug 29 05:07:42.955261 2026] [core:error] [pid 1034096:tid 1034338] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.955279 2026] [core:error] [pid 1034096:tid 1034338] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.957283 2026] [core:error] [pid 1028675:tid 1028928] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.957303 2026] [core:error] [pid 1028675:tid 1028928] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.957617 2026] [core:error] [pid 1034096:tid 1034342] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.957637 2026] [core:error] [pid 1034096:tid 1034342] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.958387 2026] [security2:error] [pid 1028675:tid 1028855] [client 20.63.81.20:20847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/im.php"] [unique_id "apK9ftdHPfW2QFvhmL71FAAAAC0"]
[Sat Aug 29 05:07:42.958388 2026] [security2:error] [pid 1034096:tid 1034303] [client 20.203.141.11:7408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9fi04twRPFuquKD2V3AAAALk"]
[Sat Aug 29 05:07:42.960058 2026] [core:error] [pid 1028675:tid 1028757] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.960075 2026] [core:error] [pid 1034096:tid 1034343] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.960086 2026] [core:error] [pid 1034096:tid 1034343] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.971192 2026] [core:error] [pid 1028675:tid 1028856] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.971212 2026] [core:error] [pid 1028675:tid 1028856] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.975350 2026] [core:error] [pid 1028675:tid 1028713] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.975379 2026] [core:error] [pid 1028675:tid 1028713] [remote 34.138.144.127:52916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.977938 2026] [security2:error] [pid 1034096:tid 1034350] [client 213.209.159.223:33297] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/wp-config.php.backup"] [unique_id "apK9fi04twRPFuquKD2V5wAAAOg"]
[Sat Aug 29 05:07:42.979950 2026] [security2:error] [pid 1028675:tid 1028848] [client 93.123.109.228:60990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/config/aws.php"] [unique_id "apK9ftdHPfW2QFvhmL71HgAAACY"]
[Sat Aug 29 05:07:42.982892 2026] [security2:error] [pid 1034096:tid 1034352] [client 158.23.147.79:17484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/sad/about.php"] [unique_id "apK9fi04twRPFuquKD2V6AAAAOo"]
[Sat Aug 29 05:07:42.983200 2026] [access_compat:error] [pid 1034096:tid 1034339] [client 67.20.76.220:53590] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:07:42.983742 2026] [core:error] [pid 1028675:tid 1028909] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:42.983756 2026] [core:error] [pid 1028675:tid 1028909] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.008468 2026] [security2:error] [pid 1028675:tid 1028846] [client 158.23.147.79:53780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK9f9dHPfW2QFvhmL71NAAAACQ"]
[Sat Aug 29 05:07:43.011916 2026] [core:error] [pid 1028675:tid 1028878] [client 34.77.149.138:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.011934 2026] [core:error] [pid 1028675:tid 1028878] [client 34.77.149.138:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.012615 2026] [security2:error] [pid 1034096:tid 1034360] [client 158.23.147.79:48171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wzy.php"] [unique_id "apK9fi04twRPFuquKD2V6wAAAPI"]
[Sat Aug 29 05:07:43.015900 2026] [core:error] [pid 1028675:tid 1028812] [client 34.77.149.138:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.015920 2026] [core:error] [pid 1028675:tid 1028812] [client 34.77.149.138:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.028604 2026] [security2:error] [pid 1028675:tid 1028897] [client 93.123.109.228:60902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/config/config.inc.php"] [unique_id "apK9f9dHPfW2QFvhmL71PwAAAFc"]
[Sat Aug 29 05:07:43.029586 2026] [core:error] [pid 1034096:tid 1034358] [client 34.77.149.138:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.029603 2026] [core:error] [pid 1034096:tid 1034358] [client 34.77.149.138:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.032155 2026] [core:error] [pid 1034096:tid 1034362] [client 34.77.149.138:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.032177 2026] [core:error] [pid 1034096:tid 1034362] [client 34.77.149.138:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.036824 2026] [core:error] [pid 1028675:tid 1028870] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.036844 2026] [core:error] [pid 1028675:tid 1028870] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.039228 2026] [core:error] [pid 1028675:tid 1028860] [client 34.77.149.138:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.039244 2026] [core:error] [pid 1028675:tid 1028860] [client 34.77.149.138:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.042171 2026] [core:error] [pid 1028675:tid 1028892] [client 34.77.149.138:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.042218 2026] [core:error] [pid 1028675:tid 1028892] [client 34.77.149.138:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.042420 2026] [core:error] [pid 1034096:tid 1034369] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.042449 2026] [core:error] [pid 1034096:tid 1034369] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.043548 2026] [core:error] [pid 1034096:tid 1034366] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.043577 2026] [core:error] [pid 1034096:tid 1034366] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.044399 2026] [core:error] [pid 1028675:tid 1028931] [client 34.77.149.138:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.044416 2026] [core:error] [pid 1028675:tid 1028931] [client 34.77.149.138:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.046923 2026] [core:error] [pid 1034096:tid 1034359] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.046942 2026] [core:error] [pid 1034096:tid 1034359] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.052104 2026] [core:error] [pid 1028675:tid 1028859] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.052154 2026] [core:error] [pid 1028675:tid 1028859] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.056139 2026] [security2:error] [pid 1028675:tid 1028848] [client 213.209.159.223:39162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/info.php.bak"] [unique_id "apK9f9dHPfW2QFvhmL71TAAAACY"]
[Sat Aug 29 05:07:43.059060 2026] [core:error] [pid 1028675:tid 1028920] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.059079 2026] [core:error] [pid 1028675:tid 1028920] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.064154 2026] [security2:error] [pid 1034096:tid 1034254] [client 213.209.159.223:18662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/phpinfo.php.bak"] [unique_id "apK9fy04twRPFuquKD2V8wAAAIg"]
[Sat Aug 29 05:07:43.066298 2026] [core:error] [pid 1028675:tid 1028917] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.066328 2026] [core:error] [pid 1028675:tid 1028917] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.069024 2026] [security2:error] [pid 1028675:tid 1028828] [client 93.123.109.228:60828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/config/config.php"] [unique_id "apK9f9dHPfW2QFvhmL71UQAAABI"]
[Sat Aug 29 05:07:43.073077 2026] [core:error] [pid 1034096:tid 1034252] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.073093 2026] [core:error] [pid 1034096:tid 1034252] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.076456 2026] [security2:error] [pid 1028675:tid 1028855] [client 20.104.104.62:64766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/raw.php"] [unique_id "apK9f9dHPfW2QFvhmL71VAAAAC0"]
[Sat Aug 29 05:07:43.081167 2026] [core:error] [pid 1028675:tid 1028851] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.081189 2026] [core:error] [pid 1028675:tid 1028851] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.092391 2026] [security2:error] [pid 1028675:tid 1028841] [client 20.151.200.44:47351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/f-401.php"] [unique_id "apK9f9dHPfW2QFvhmL71VwAAAB8"]
[Sat Aug 29 05:07:43.102314 2026] [core:error] [pid 1028675:tid 1028743] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.102336 2026] [core:error] [pid 1028675:tid 1028743] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.108142 2026] [security2:error] [pid 1028675:tid 1028896] [client 20.63.81.20:20926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/fc.php"] [unique_id "apK9f9dHPfW2QFvhmL71WwAAAFY"]
[Sat Aug 29 05:07:43.118259 2026] [security2:error] [pid 1034096:tid 1034258] [client 213.209.159.223:59430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.greatdecisionsofcharlevoix.com"] [uri "/phpinfo.php.bak"] [unique_id "apK9fy04twRPFuquKD2V9QAAAIw"]
[Sat Aug 29 05:07:43.139791 2026] [security2:error] [pid 1028675:tid 1028761] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/php-info.php"] [unique_id "apK9f9dHPfW2QFvhmL71YwAAHVA"]
[Sat Aug 29 05:07:43.140387 2026] [security2:error] [pid 1028675:tid 1028761] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/php_info.php"] [unique_id "apK9f9dHPfW2QFvhmL71ZQAAHVA"]
[Sat Aug 29 05:07:43.140462 2026] [security2:error] [pid 1028675:tid 1028801] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/php.php"] [unique_id "apK9f9dHPfW2QFvhmL71ZAAAHXg"]
[Sat Aug 29 05:07:43.149415 2026] [security2:error] [pid 1028675:tid 1028932] [client 213.209.159.223:6452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/info.php.bak"] [unique_id "apK9f9dHPfW2QFvhmL71aQAAAHo"]
[Sat Aug 29 05:07:43.164724 2026] [security2:error] [pid 1028675:tid 1028786] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/phpinfo.php"] [unique_id "apK9f9dHPfW2QFvhmL71bwAAHWk"]
[Sat Aug 29 05:07:43.168403 2026] [security2:error] [pid 1028675:tid 1028931] [client 20.151.200.44:63370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/mcd.php"] [unique_id "apK9f9dHPfW2QFvhmL71cQAAAHk"]
[Sat Aug 29 05:07:43.173634 2026] [security2:error] [pid 1028675:tid 1028927] [client 93.123.109.228:60854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/config/env.php"] [unique_id "apK9f9dHPfW2QFvhmL71cgAAAHU"]
[Sat Aug 29 05:07:43.183721 2026] [autoindex:error] [pid 1028675:tid 1028820] [client 20.104.104.62:0] AH01276: Cannot serve directory /home1/thrbikes/public_html/kevinhenley/wp-includes/blocks/block/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:07:43.186597 2026] [security2:error] [pid 1028675:tid 1028870] [client 158.23.147.79:26376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/cong.php"] [unique_id "apK9f9dHPfW2QFvhmL71dQAAADw"]
[Sat Aug 29 05:07:43.199699 2026] [core:error] [pid 1028675:tid 1028892] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.199728 2026] [core:error] [pid 1028675:tid 1028892] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.201508 2026] [security2:error] [pid 1034096:tid 1034288] [client 52.139.37.240:62210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jobindjibouti.eastacare.com"] [uri "/aged.php"] [unique_id "apK9fy04twRPFuquKD2V-gAAAKo"]
[Sat Aug 29 05:07:43.204133 2026] [core:error] [pid 1028675:tid 1028894] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.204151 2026] [core:error] [pid 1028675:tid 1028894] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.215196 2026] [security2:error] [pid 1028675:tid 1028856] [client 168.107.94.195:65326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9f9dHPfW2QFvhmL71fgAAAC4"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:43.218067 2026] [security2:error] [pid 1028675:tid 1028816] [client 4.205.62.107:9179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/ws61.php"] [unique_id "apK9f9dHPfW2QFvhmL71gwAAAAY"]
[Sat Aug 29 05:07:43.218590 2026] [security2:error] [pid 1028675:tid 1028721] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/portal/.env"] [unique_id "apK9f9dHPfW2QFvhmL71gQAAeCg"]
[Sat Aug 29 05:07:43.218593 2026] [security2:error] [pid 1028675:tid 1028760] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/prod/.env"] [unique_id "apK9f9dHPfW2QFvhmL71ggAAeE8"]
[Sat Aug 29 05:07:43.220556 2026] [core:error] [pid 1028675:tid 1028680] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.220573 2026] [core:error] [pid 1028675:tid 1028680] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.226021 2026] [security2:error] [pid 1028675:tid 1028917] [client 93.123.109.228:60878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/config/nexmo.php"] [unique_id "apK9f9dHPfW2QFvhmL71hgAAAGs"]
[Sat Aug 29 05:07:43.227468 2026] [security2:error] [pid 1028675:tid 1028887] [client 4.205.62.107:21589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK9f9dHPfW2QFvhmL71hwAAAE0"]
[Sat Aug 29 05:07:43.233965 2026] [security2:error] [pid 1028675:tid 1028682] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/product/.env"] [unique_id "apK9f9dHPfW2QFvhmL71igAAeAI"]
[Sat Aug 29 05:07:43.234558 2026] [core:error] [pid 1028675:tid 1028684] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.234574 2026] [core:error] [pid 1028675:tid 1028684] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.236378 2026] [security2:error] [pid 1034096:tid 1034256] [client 40.83.93.50:15717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-content/languages/plugins/about.php"] [unique_id "apK9fy04twRPFuquKD2WAgAAAIo"]
[Sat Aug 29 05:07:43.239050 2026] [security2:error] [pid 1028675:tid 1028823] [client 93.123.109.228:60958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/config/module.config.php"] [unique_id "apK9f9dHPfW2QFvhmL71jQAAAA0"]
[Sat Aug 29 05:07:43.243068 2026] [security2:error] [pid 1034096:tid 1034282] [client 20.63.81.20:20817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/ke.php"] [unique_id "apK9fy04twRPFuquKD2WAwAAAKQ"]
[Sat Aug 29 05:07:43.246690 2026] [security2:error] [pid 1028675:tid 1028846] [client 20.203.141.11:38625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/config.php"] [unique_id "apK9f9dHPfW2QFvhmL71kAAAACQ"]
[Sat Aug 29 05:07:43.250518 2026] [security2:error] [pid 1028675:tid 1028724] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/production/.env"] [unique_id "apK9f9dHPfW2QFvhmL71kQAAeCs"]
[Sat Aug 29 05:07:43.253734 2026] [security2:error] [pid 1028675:tid 1028883] [client 213.209.159.223:17468] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/framework/.env"] [unique_id "apK9f9dHPfW2QFvhmL71kwAAAEk"]
[Sat Aug 29 05:07:43.268469 2026] [core:error] [pid 1034096:tid 1034274] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.268491 2026] [core:error] [pid 1034096:tid 1034274] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.268938 2026] [authz_core:error] [pid 1034096:tid 1034279] [client 40.83.93.50:0] AH01630: client denied by server configuration: /home4/rocworxc/public_html/royalryder/php.ini
[Sat Aug 29 05:07:43.273334 2026] [security2:error] [pid 1028675:tid 1028904] [client 20.104.49.130:50601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.danesquality.com"] [uri "/bolt.php"] [unique_id "apK9f9dHPfW2QFvhmL71mgAAAF4"]
[Sat Aug 29 05:07:43.275603 2026] [security2:error] [pid 1028675:tid 1028888] [client 20.63.219.114:4238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-admin/plugins/img/themes/plugins/maintenance.php"] [unique_id "apK9f9dHPfW2QFvhmL71nQAAAE4"]
[Sat Aug 29 05:07:43.293376 2026] [security2:error] [pid 1034096:tid 1034302] [client 93.123.109.228:42112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/config/stripe.php"] [unique_id "apK9fy04twRPFuquKD2WCgAAALg"]
[Sat Aug 29 05:07:43.293495 2026] [core:error] [pid 1028675:tid 1028900] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.293513 2026] [core:error] [pid 1028675:tid 1028900] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.295399 2026] [security2:error] [pid 1034096:tid 1034302] [client 213.209.159.223:21288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/info.php.bak"] [unique_id "apK9fy04twRPFuquKD2WDAAAALg"]
[Sat Aug 29 05:07:43.295403 2026] [security2:error] [pid 1028675:tid 1028881] [client 158.158.54.35:32803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/disagraeosc.php"] [unique_id "apK9f9dHPfW2QFvhmL71pAAAAEc"]
[Sat Aug 29 05:07:43.296545 2026] [core:error] [pid 1028675:tid 1028896] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.296565 2026] [core:error] [pid 1028675:tid 1028896] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.300642 2026] [security2:error] [pid 1028675:tid 1028814] [client 20.52.41.200:5357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/php8.php"] [unique_id "apK9f9dHPfW2QFvhmL71pgAAAAQ"]
[Sat Aug 29 05:07:43.307621 2026] [security2:error] [pid 1028675:tid 1028699] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/project/.env"] [unique_id "apK9f9dHPfW2QFvhmL71qAAAeBI"]
[Sat Aug 29 05:07:43.308252 2026] [security2:error] [pid 1028675:tid 1028784] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/public-api/.env"] [unique_id "apK9f9dHPfW2QFvhmL71qgAAeGc"]
[Sat Aug 29 05:07:43.312610 2026] [core:error] [pid 1034096:tid 1034306] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.312628 2026] [core:error] [pid 1034096:tid 1034306] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.317090 2026] [proxy_http:error] [pid 1034096:tid 1034306] (20014)Internal error (specific information not available): [client 34.77.149.138:57620] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:07:43.317108 2026] [proxy:error] [pid 1034096:tid 1034306] [client 34.77.149.138:57620] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/backend/.git/config
[Sat Aug 29 05:07:43.318547 2026] [security2:error] [pid 1028675:tid 1028745] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/public/.env"] [unique_id "apK9f9dHPfW2QFvhmL71rwAAeEA"]
[Sat Aug 29 05:07:43.333993 2026] [security2:error] [pid 1028675:tid 1028857] [client 20.151.200.44:46542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/hq.php"] [unique_id "apK9f9dHPfW2QFvhmL71tgAAAC8"]
[Sat Aug 29 05:07:43.337969 2026] [security2:error] [pid 1028675:tid 1028929] [client 213.209.159.223:53398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/phpinfo.php.bak"] [unique_id "apK9f9dHPfW2QFvhmL71twAAAHc"]
[Sat Aug 29 05:07:43.371062 2026] [core:error] [pid 1028675:tid 1028845] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.371090 2026] [core:error] [pid 1028675:tid 1028845] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.379047 2026] [security2:error] [pid 1028675:tid 1028769] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/public/phpinfo.php"] [unique_id "apK9f9dHPfW2QFvhmL71xwAAeFg"]
[Sat Aug 29 05:07:43.383257 2026] [security2:error] [pid 1028675:tid 1028769] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/public_html/.env"] [unique_id "apK9f9dHPfW2QFvhmL71yQAAeFg"]
[Sat Aug 29 05:07:43.386680 2026] [security2:error] [pid 1028675:tid 1028833] [client 20.63.81.20:20827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/tf.php"] [unique_id "apK9f9dHPfW2QFvhmL71zQAAABc"]
[Sat Aug 29 05:07:43.392465 2026] [security2:error] [pid 1028675:tid 1028849] [client 213.209.159.223:17468] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/ikiwiki/.env"] [unique_id "apK9f9dHPfW2QFvhmL71zgAAACc"]
[Sat Aug 29 05:07:43.396088 2026] [security2:error] [pid 1028675:tid 1028894] [client 4.205.62.107:65465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/atex1.php"] [unique_id "apK9f9dHPfW2QFvhmL710AAAAFQ"]
[Sat Aug 29 05:07:43.402040 2026] [security2:error] [pid 1028675:tid 1028861] [client 20.104.104.62:20823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/py.php"] [unique_id "apK9f9dHPfW2QFvhmL710QAAADM"]
[Sat Aug 29 05:07:43.404089 2026] [security2:error] [pid 1028675:tid 1028808] [remote 93.123.109.228:46036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flicklister.com"] [uri "/infophp.php"] [unique_id "apK9f9dHPfW2QFvhmL710wAAQn8"]
[Sat Aug 29 05:07:43.404134 2026] [security2:error] [pid 1028675:tid 1028703] [remote 93.123.109.228:46036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flicklister.com"] [uri "/info.php"] [unique_id "apK9f9dHPfW2QFvhmL711AAAQhY"]
[Sat Aug 29 05:07:43.404505 2026] [core:error] [pid 1028675:tid 1028729] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.404527 2026] [core:error] [pid 1028675:tid 1028729] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.404554 2026] [security2:error] [pid 1028675:tid 1028780] [remote 93.123.109.228:46036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flicklister.com"] [uri "/infos.php"] [unique_id "apK9f9dHPfW2QFvhmL711wAAQmM"]
[Sat Aug 29 05:07:43.411314 2026] [security2:error] [pid 1028675:tid 1028737] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/qa/.env"] [unique_id "apK9f9dHPfW2QFvhmL710gAAeDg"]
[Sat Aug 29 05:07:43.418454 2026] [security2:error] [pid 1028675:tid 1028875] [client 146.70.194.254:57232] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "modelbasenjis.com"] [uri "/cgi-sys/suspendedpage.cgi/cms/wp-includes/wlwmanifest.xml"] [unique_id "apK9f9dHPfW2QFvhmL713QAAAEE"]
[Sat Aug 29 05:07:43.424362 2026] [security2:error] [pid 1034096:tid 1034366] [client 213.209.159.223:27870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/phpinfo.php.bak"] [unique_id "apK9fy04twRPFuquKD2WGwAAAPg"]
[Sat Aug 29 05:07:43.427017 2026] [security2:error] [pid 1028675:tid 1028821] [client 20.203.141.11:27915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/alfa-rex.php7"] [unique_id "apK9f9dHPfW2QFvhmL713wAAAAs"]
[Sat Aug 29 05:07:43.429996 2026] [security2:error] [pid 1028675:tid 1028828] [client 4.205.62.107:58471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/zz.php"] [unique_id "apK9f9dHPfW2QFvhmL714QAAABI"]
[Sat Aug 29 05:07:43.434585 2026] [security2:error] [pid 1034096:tid 1034321] [client 40.83.93.50:8237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/post.php"] [unique_id "apK9fy04twRPFuquKD2WHQAAAMs"]
[Sat Aug 29 05:07:43.440742 2026] [core:error] [pid 1028675:tid 1028892] [client 34.77.149.138:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.440759 2026] [core:error] [pid 1028675:tid 1028892] [client 34.77.149.138:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.457653 2026] [core:error] [pid 1034096:tid 1034340] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.457673 2026] [core:error] [pid 1034096:tid 1034340] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.459527 2026] [security2:error] [pid 1028675:tid 1028900] [client 158.23.147.79:30584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/worksec.php"] [unique_id "apK9f9dHPfW2QFvhmL717gAAAFo"]
[Sat Aug 29 05:07:43.460981 2026] [core:error] [pid 1028675:tid 1028883] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.460999 2026] [core:error] [pid 1028675:tid 1028883] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.462040 2026] [core:error] [pid 1028675:tid 1028886] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.462053 2026] [core:error] [pid 1028675:tid 1028886] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.464825 2026] [core:error] [pid 1028675:tid 1028903] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.464840 2026] [core:error] [pid 1028675:tid 1028903] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.475900 2026] [security2:error] [pid 1034096:tid 1034361] [client 52.139.37.240:62265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jobindjibouti.eastacare.com"] [uri "/essexec.php"] [unique_id "apK9fy04twRPFuquKD2WIQAAAPM"]
[Sat Aug 29 05:07:43.478681 2026] [security2:error] [pid 1034096:tid 1034336] [client 35.194.208.44:43670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/assets../.env"] [unique_id "apK9fy04twRPFuquKD2WIgAAANo"]
[Sat Aug 29 05:07:43.478816 2026] [security2:error] [pid 1034096:tid 1034336] [client 35.194.208.44:43670] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/assets../.env"] [unique_id "apK9fy04twRPFuquKD2WIgAAANo"]
[Sat Aug 29 05:07:43.479652 2026] [security2:error] [pid 1034096:tid 1034337] [client 35.194.208.44:43642] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/.env"] [unique_id "apK9fy04twRPFuquKD2WIwAAANs"]
[Sat Aug 29 05:07:43.481077 2026] [security2:error] [pid 1028675:tid 1028863] [client 35.194.208.44:43646] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/uploads../.env"] [unique_id "apK9f9dHPfW2QFvhmL719gAAADU"]
[Sat Aug 29 05:07:43.482986 2026] [security2:error] [pid 1034096:tid 1034364] [client 35.194.208.44:43810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/app/.env"] [unique_id "apK9fy04twRPFuquKD2WJAAAAPY"]
[Sat Aug 29 05:07:43.483299 2026] [security2:error] [pid 1034096:tid 1034311] [client 35.194.208.44:43752] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/.env.bak"] [unique_id "apK9fy04twRPFuquKD2WJgAAAME"]
[Sat Aug 29 05:07:43.490953 2026] [security2:error] [pid 1034096:tid 1034362] [client 35.194.208.44:43894] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/server/.env"] [unique_id "apK9fy04twRPFuquKD2WJwAAAPQ"]
[Sat Aug 29 05:07:43.491350 2026] [security2:error] [pid 1034096:tid 1034362] [client 35.194.208.44:43894] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/server/.env"] [unique_id "apK9fy04twRPFuquKD2WJwAAAPQ"]
[Sat Aug 29 05:07:43.492742 2026] [security2:error] [pid 1028675:tid 1028922] [client 35.194.208.44:43828] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/laravel/.env"] [unique_id "apK9f9dHPfW2QFvhmL71_QAAAHA"]
[Sat Aug 29 05:07:43.494308 2026] [security2:error] [pid 1034096:tid 1034320] [client 35.194.208.44:43654] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/img../.env"] [unique_id "apK9fy04twRPFuquKD2WKQAAAMo"]
[Sat Aug 29 05:07:43.501446 2026] [security2:error] [pid 1034096:tid 1034334] [client 35.194.208.44:43774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/.env.old"] [unique_id "apK9fy04twRPFuquKD2WLQAAANg"]
[Sat Aug 29 05:07:43.509710 2026] [security2:error] [pid 1034096:tid 1034350] [client 35.194.208.44:43816] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/api/.env"] [unique_id "apK9fy04twRPFuquKD2WNAAAAOg"]
[Sat Aug 29 05:07:43.515154 2026] [security2:error] [pid 1034096:tid 1034327] [client 35.194.208.44:43688] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/v2/.env"] [unique_id "apK9fy04twRPFuquKD2WMQAAANE"]
[Sat Aug 29 05:07:43.515331 2026] [security2:error] [pid 1034096:tid 1034327] [client 35.194.208.44:43688] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/v2/.env"] [unique_id "apK9fy04twRPFuquKD2WMQAAANE"]
[Sat Aug 29 05:07:43.515692 2026] [security2:error] [pid 1034096:tid 1034348] [client 35.194.208.44:43900] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/frontend/.env"] [unique_id "apK9fy04twRPFuquKD2WNwAAAOY"]
[Sat Aug 29 05:07:43.516600 2026] [security2:error] [pid 1034096:tid 1034341] [client 35.194.208.44:43684] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/v1/.env"] [unique_id "apK9fy04twRPFuquKD2WOQAAAN8"]
[Sat Aug 29 05:07:43.517227 2026] [security2:error] [pid 1034096:tid 1034347] [client 35.194.208.44:43680] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/.docker/.env"] [unique_id "apK9fy04twRPFuquKD2WMAAAAOU"]
[Sat Aug 29 05:07:43.517477 2026] [security2:error] [pid 1034096:tid 1034344] [client 35.194.208.44:43682] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/images../.env"] [unique_id "apK9fy04twRPFuquKD2WLwAAAOI"]
[Sat Aug 29 05:07:43.519092 2026] [security2:error] [pid 1034096:tid 1034266] [client 20.63.81.20:20831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/px.php"] [unique_id "apK9fy04twRPFuquKD2WOwAAAJQ"]
[Sat Aug 29 05:07:43.519746 2026] [security2:error] [pid 1034096:tid 1034347] [client 35.194.208.44:43680] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/.docker/.env"] [unique_id "apK9fy04twRPFuquKD2WMAAAAOU"]
[Sat Aug 29 05:07:43.521284 2026] [security2:error] [pid 1034096:tid 1034342] [client 35.194.208.44:43916] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/web/.env"] [unique_id "apK9fy04twRPFuquKD2WPQAAAOA"]
[Sat Aug 29 05:07:43.523793 2026] [security2:error] [pid 1028675:tid 1028859] [client 158.23.147.79:50121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK9f9dHPfW2QFvhmL72CQAAADE"]
[Sat Aug 29 05:07:43.528912 2026] [security2:error] [pid 1034096:tid 1034352] [client 35.194.208.44:43794] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/.env.swp"] [unique_id "apK9fy04twRPFuquKD2WPgAAAOo"]
[Sat Aug 29 05:07:43.532555 2026] [security2:error] [pid 1028675:tid 1028894] [client 213.209.159.223:17468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/config.inc.php"] [unique_id "apK9f9dHPfW2QFvhmL72EwAAAFQ"]
[Sat Aug 29 05:07:43.532900 2026] [security2:error] [pid 1034096:tid 1034291] [client 213.202.253.4:58952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bv-place.com"] [uri "/gdftps.php"] [unique_id "apK9fy04twRPFuquKD2WQwAAAK0"], referer: www.google.com
[Sat Aug 29 05:07:43.533448 2026] [security2:error] [pid 1034096:tid 1034352] [client 35.194.208.44:43794] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/.env.swp"] [unique_id "apK9fy04twRPFuquKD2WPgAAAOo"]
[Sat Aug 29 05:07:43.534345 2026] [security2:error] [pid 1034096:tid 1034368] [client 35.194.208.44:43762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/.env.backup"] [unique_id "apK9fy04twRPFuquKD2WQAAAAPo"]
[Sat Aug 29 05:07:43.536547 2026] [security2:error] [pid 1034096:tid 1034338] [client 35.194.208.44:43880] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/docker/.env"] [unique_id "apK9fy04twRPFuquKD2WQQAAANw"]
[Sat Aug 29 05:07:43.539952 2026] [security2:error] [pid 1034096:tid 1034283] [client 20.104.49.130:43813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/wp-the.php"] [unique_id "apK9fy04twRPFuquKD2WSAAAAKU"]
[Sat Aug 29 05:07:43.542850 2026] [security2:error] [pid 1034096:tid 1034345] [client 35.194.208.44:43842] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/backend/.env"] [unique_id "apK9fy04twRPFuquKD2WRAAAAOM"]
[Sat Aug 29 05:07:43.543954 2026] [security2:error] [pid 1034096:tid 1034368] [client 35.194.208.44:43762] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/.env.backup"] [unique_id "apK9fy04twRPFuquKD2WQAAAAPo"]
[Sat Aug 29 05:07:43.545290 2026] [security2:error] [pid 1028675:tid 1028861] [client 93.123.109.228:60910] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/crm/.env"] [unique_id "apK9f9dHPfW2QFvhmL72FgAAADM"]
[Sat Aug 29 05:07:43.545417 2026] [security2:error] [pid 1034096:tid 1034360] [client 35.194.208.44:43870] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/src/.env"] [unique_id "apK9fy04twRPFuquKD2WRQAAAPI"]
[Sat Aug 29 05:07:43.546227 2026] [security2:error] [pid 1034096:tid 1034333] [client 35.194.208.44:43818] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/config/.env"] [unique_id "apK9fy04twRPFuquKD2WRgAAANc"]
[Sat Aug 29 05:07:43.549420 2026] [core:error] [pid 1034096:tid 1034285] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.549460 2026] [core:error] [pid 1034096:tid 1034285] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.549947 2026] [security2:error] [pid 1034096:tid 1034354] [client 35.194.208.44:43878] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/core/.env"] [unique_id "apK9fy04twRPFuquKD2WSgAAAOw"]
[Sat Aug 29 05:07:43.551545 2026] [security2:error] [pid 1034096:tid 1034331] [client 35.194.208.44:43702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/.env"] [unique_id "apK9fy04twRPFuquKD2WSQAAANU"]
[Sat Aug 29 05:07:43.554152 2026] [core:error] [pid 1034096:tid 1034294] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.554170 2026] [core:error] [pid 1034096:tid 1034294] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.555497 2026] [core:error] [pid 1034096:tid 1034297] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.555514 2026] [core:error] [pid 1034096:tid 1034297] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.564080 2026] [security2:error] [pid 1028675:tid 1028917] [client 93.123.109.228:60866] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/cron/.env"] [unique_id "apK9f9dHPfW2QFvhmL72HAAAAGs"]
[Sat Aug 29 05:07:43.570699 2026] [core:error] [pid 1028675:tid 1028901] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.570721 2026] [core:error] [pid 1028675:tid 1028901] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.571832 2026] [security2:error] [pid 1034096:tid 1034274] [client 213.209.159.223:58453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/phpinfo.php.bak"] [unique_id "apK9fy04twRPFuquKD2WWAAAAJw"]
[Sat Aug 29 05:07:43.578727 2026] [core:error] [pid 1034096:tid 1034256] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.578752 2026] [core:error] [pid 1034096:tid 1034256] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.580427 2026] [security2:error] [pid 1028675:tid 1028875] [client 4.205.62.107:22470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/aws.php"] [unique_id "apK9f9dHPfW2QFvhmL72JAAAAEE"]
[Sat Aug 29 05:07:43.581979 2026] [security2:error] [pid 1028675:tid 1028926] [client 93.123.109.228:60688] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/current/.env"] [unique_id "apK9f9dHPfW2QFvhmL72JQAAAHQ"]
[Sat Aug 29 05:07:43.588719 2026] [security2:error] [pid 1034096:tid 1034286] [client 93.123.109.228:42196] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/demo/.env"] [unique_id "apK9fy04twRPFuquKD2WXgAAAKg"]
[Sat Aug 29 05:07:43.606041 2026] [security2:error] [pid 1034096:tid 1034302] [client 168.107.94.195:49267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9fy04twRPFuquKD2WZQAAALg"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:43.611670 2026] [security2:error] [pid 1028675:tid 1028890] [client 93.123.109.228:42200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/dev/.env"] [unique_id "apK9f9dHPfW2QFvhmL72LAAAAFA"]
[Sat Aug 29 05:07:43.614075 2026] [core:error] [pid 1034096:tid 1034276] [client 34.77.149.138:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.614097 2026] [core:error] [pid 1034096:tid 1034276] [client 34.77.149.138:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.614220 2026] [access_compat:error] [pid 1034096:tid 1034310] [client 57.141.14.107:0] AH01797: client denied by server configuration: /home4/eastacar/public_html/djiboutifresh/acheter
[Sat Aug 29 05:07:43.614570 2026] [core:error] [pid 1034096:tid 1034256] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.614585 2026] [core:error] [pid 1034096:tid 1034256] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.614816 2026] [core:error] [pid 1034096:tid 1034308] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.614827 2026] [core:error] [pid 1034096:tid 1034308] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.618135 2026] [core:error] [pid 1034096:tid 1034319] [client 34.77.149.138:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.618154 2026] [core:error] [pid 1034096:tid 1034319] [client 34.77.149.138:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.624056 2026] [core:error] [pid 1034096:tid 1034324] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.624075 2026] [core:error] [pid 1034096:tid 1034324] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.624483 2026] [core:error] [pid 1034096:tid 1034263] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.624501 2026] [core:error] [pid 1034096:tid 1034263] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.627091 2026] [security2:error] [pid 1028675:tid 1028881] [client 128.90.161.20:46302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.161.90.128.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.greenfieldparts.com"] [uri "/wp-login.php"] [unique_id "apK9f9dHPfW2QFvhmL72MgAAAEc"]
[Sat Aug 29 05:07:43.628044 2026] [core:error] [pid 1034096:tid 1034290] [client 34.77.149.138:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.628062 2026] [core:error] [pid 1034096:tid 1034290] [client 34.77.149.138:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.630947 2026] [security2:error] [pid 1034096:tid 1034281] [client 93.123.109.228:42236] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/develop/.env"] [unique_id "apK9fy04twRPFuquKD2WbgAAAKM"]
[Sat Aug 29 05:07:43.632307 2026] [core:error] [pid 1028675:tid 1028875] [client 34.77.149.138:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.632324 2026] [core:error] [pid 1028675:tid 1028875] [client 34.77.149.138:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.635500 2026] [security2:error] [pid 1028675:tid 1028877] [client 93.123.109.228:42204] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/developer/.env"] [unique_id "apK9f9dHPfW2QFvhmL72MwAAAEM"]
[Sat Aug 29 05:07:43.635503 2026] [security2:error] [pid 1034096:tid 1034262] [client 20.63.219.114:4284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-admin/security.php"] [unique_id "apK9fy04twRPFuquKD2WbwAAAJA"]
[Sat Aug 29 05:07:43.640159 2026] [security2:error] [pid 1028675:tid 1028751] [remote 93.123.109.228:46162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flowerfh.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK9f9dHPfW2QFvhmL72NQAAIUY"]
[Sat Aug 29 05:07:43.647960 2026] [core:error] [pid 1028675:tid 1028866] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.647979 2026] [core:error] [pid 1028675:tid 1028866] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.651112 2026] [security2:error] [pid 1034096:tid 1034362] [client 213.209.159.223:13149] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/env/.env"] [unique_id "apK9fy04twRPFuquKD2WcAAAAPQ"]
[Sat Aug 29 05:07:43.654084 2026] [security2:error] [pid 1028675:tid 1028846] [client 20.63.81.20:20922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/jg.php"] [unique_id "apK9f9dHPfW2QFvhmL72OQAAACQ"]
[Sat Aug 29 05:07:43.654307 2026] [autoindex:error] [pid 1034096:tid 1034305] [client 20.104.104.62:0] AH01276: Cannot serve directory /home1/thrbikes/public_html/kevinhenley/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:07:43.655365 2026] [core:error] [pid 1028675:tid 1028860] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.655381 2026] [core:error] [pid 1028675:tid 1028860] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.661495 2026] [security2:error] [pid 1034096:tid 1034322] [client 93.123.109.228:42116] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/development/.env"] [unique_id "apK9fy04twRPFuquKD2WcgAAAMw"]
[Sat Aug 29 05:07:43.664495 2026] [core:error] [pid 1034096:tid 1034259] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.664516 2026] [core:error] [pid 1034096:tid 1034259] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.677972 2026] [security2:error] [pid 1034096:tid 1034342] [client 20.151.200.44:46640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/mh.php"] [unique_id "apK9fy04twRPFuquKD2WdQAAAOA"]
[Sat Aug 29 05:07:43.683552 2026] [security2:error] [pid 1034096:tid 1034304] [client 52.139.37.240:62269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jobindjibouti.eastacare.com"] [uri "/fw.php"] [unique_id "apK9fy04twRPFuquKD2WdgAAALo"]
[Sat Aug 29 05:07:43.690949 2026] [core:error] [pid 1028675:tid 1028816] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.690968 2026] [core:error] [pid 1028675:tid 1028816] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.699292 2026] [security2:error] [pid 1034096:tid 1034344] [client 127.0.0.1:45038] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK9fy04twRPFuquKD2WOgAAAOI"]
[Sat Aug 29 05:07:43.702446 2026] [security2:error] [pid 1034096:tid 1034351] [client 35.194.208.44:43788] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/env.js"] [unique_id "apK9fy04twRPFuquKD2WMwAAAOk"]
[Sat Aug 29 05:07:43.706781 2026] [core:error] [pid 1028675:tid 1028872] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.706810 2026] [core:error] [pid 1028675:tid 1028872] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.728605 2026] [security2:error] [pid 1028675:tid 1028911] [client 20.104.104.62:25474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinhenley.com"] [uri "/xmlrpc.php"] [unique_id "apK9f9dHPfW2QFvhmL72TgAAAGU"]
[Sat Aug 29 05:07:43.732819 2026] [security2:error] [pid 1034096:tid 1034376] [client 213.209.159.223:56168] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_webdisk/env/.env"] [unique_id "apK9fy04twRPFuquKD2WegAAAQI"]
[Sat Aug 29 05:07:43.740027 2026] [security2:error] [pid 1034096:tid 1034267] [client 158.158.54.35:18200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-logs.php"] [unique_id "apK9fy04twRPFuquKD2WewAAAJU"]
[Sat Aug 29 05:07:43.756112 2026] [core:error] [pid 1028675:tid 1028909] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.756139 2026] [core:error] [pid 1028675:tid 1028909] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.762502 2026] [core:error] [pid 1028675:tid 1028917] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.762521 2026] [core:error] [pid 1028675:tid 1028917] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.793280 2026] [security2:error] [pid 1034096:tid 1034325] [client 20.63.81.20:20808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/yj.php"] [unique_id "apK9fy04twRPFuquKD2WiQAAAM8"]
[Sat Aug 29 05:07:43.794787 2026] [core:error] [pid 1028675:tid 1028907] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.794809 2026] [core:error] [pid 1028675:tid 1028907] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.795013 2026] [core:error] [pid 1034096:tid 1034377] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.795027 2026] [core:error] [pid 1034096:tid 1034377] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.796869 2026] [core:error] [pid 1028675:tid 1028901] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.796885 2026] [core:error] [pid 1028675:tid 1028901] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.799209 2026] [core:error] [pid 1028675:tid 1028888] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.799228 2026] [core:error] [pid 1028675:tid 1028888] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.803689 2026] [security2:error] [pid 1034096:tid 1034284] [client 127.0.0.1:45060] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK9fy04twRPFuquKD2WTQAAAKY"]
[Sat Aug 29 05:07:43.804279 2026] [security2:error] [pid 1034096:tid 1034357] [client 35.194.208.44:43804] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/env.json"] [unique_id "apK9fy04twRPFuquKD2WQgAAAO8"]
[Sat Aug 29 05:07:43.812083 2026] [security2:error] [pid 1028675:tid 1028851] [client 213.209.159.223:18597] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/system/.env"] [unique_id "apK9f9dHPfW2QFvhmL72cwAAACk"]
[Sat Aug 29 05:07:43.814783 2026] [security2:error] [pid 1028675:tid 1028821] [client 20.203.141.11:13604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK9f9dHPfW2QFvhmL72dgAAAAs"]
[Sat Aug 29 05:07:43.821141 2026] [core:error] [pid 1028675:tid 1028881] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.821167 2026] [core:error] [pid 1028675:tid 1028881] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.828838 2026] [security2:error] [pid 1028675:tid 1028925] [client 20.104.104.62:27685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.johngibsondrawings.com"] [uri "/wp-content/index.php"] [unique_id "apK9f9dHPfW2QFvhmL72eAAAAHM"]
[Sat Aug 29 05:07:43.834514 2026] [security2:error] [pid 1028675:tid 1028903] [client 93.123.109.228:60860] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/erp/.env"] [unique_id "apK9f9dHPfW2QFvhmL72fQAAAF0"]
[Sat Aug 29 05:07:43.835676 2026] [core:error] [pid 1034096:tid 1034359] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.835694 2026] [core:error] [pid 1034096:tid 1034359] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.845328 2026] [security2:error] [pid 1034096:tid 1034318] [client 52.139.37.240:33590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/aged.php"] [unique_id "apK9fy04twRPFuquKD2WkAAAAMg"]
[Sat Aug 29 05:07:43.849398 2026] [core:error] [pid 1034096:tid 1034257] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.849420 2026] [core:error] [pid 1034096:tid 1034257] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.849771 2026] [core:error] [pid 1034096:tid 1034319] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.849784 2026] [core:error] [pid 1034096:tid 1034319] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.851772 2026] [core:error] [pid 1034096:tid 1034277] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.851794 2026] [core:error] [pid 1034096:tid 1034277] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.852585 2026] [core:error] [pid 1034096:tid 1034353] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.852601 2026] [core:error] [pid 1034096:tid 1034353] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.863781 2026] [security2:error] [pid 1028675:tid 1028784] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/s3/.env.bak"] [unique_id "apK9f9dHPfW2QFvhmL72hwAAeGc"]
[Sat Aug 29 05:07:43.873648 2026] [security2:error] [pid 1028675:tid 1028846] [client 93.123.109.228:60910] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/etc/apache2/apache2.conf"] [unique_id "apK9f9dHPfW2QFvhmL72iQAAACQ"]
[Sat Aug 29 05:07:43.879838 2026] [security2:error] [pid 1028675:tid 1028879] [client 52.139.37.240:62248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jobindjibouti.eastacare.com"] [uri "/zwso.php"] [unique_id "apK9f9dHPfW2QFvhmL72jQAAAEU"]
[Sat Aug 29 05:07:43.884642 2026] [core:error] [pid 1034096:tid 1034373] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.884662 2026] [core:error] [pid 1034096:tid 1034373] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.889187 2026] [security2:error] [pid 1028675:tid 1028845] [client 93.123.109.228:60936] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/etc/boto.cfg"] [unique_id "apK9f9dHPfW2QFvhmL72jwAAACM"]
[Sat Aug 29 05:07:43.900638 2026] [security2:error] [pid 1034096:tid 1034298] [client 20.203.141.11:13334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "apK9fy04twRPFuquKD2WnQAAALQ"]
[Sat Aug 29 05:07:43.904580 2026] [core:error] [pid 1034096:tid 1034332] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.904601 2026] [core:error] [pid 1034096:tid 1034332] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.911507 2026] [core:error] [pid 1034096:tid 1034374] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.911527 2026] [core:error] [pid 1034096:tid 1034374] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.913112 2026] [security2:error] [pid 1034096:tid 1034298] [client 213.209.159.223:12374] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/env/.env"] [unique_id "apK9fy04twRPFuquKD2WngAAALQ"]
[Sat Aug 29 05:07:43.913527 2026] [security2:error] [pid 1028675:tid 1028932] [client 93.123.109.228:60866] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/fe/.env"] [unique_id "apK9f9dHPfW2QFvhmL72kQAAAHo"]
[Sat Aug 29 05:07:43.915127 2026] [security2:error] [pid 1034096:tid 1034354] [client 40.83.93.50:8738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/flower.php"] [unique_id "apK9fy04twRPFuquKD2WoAAAAOw"]
[Sat Aug 29 05:07:43.928300 2026] [security2:error] [pid 1034096:tid 1034262] [client 158.23.147.79:32716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-includes/index.php"] [unique_id "apK9fy04twRPFuquKD2WogAAAJA"]
[Sat Aug 29 05:07:43.929363 2026] [security2:error] [pid 1028675:tid 1028771] [remote 93.123.109.228:46162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flowerfh.com"] [uri "/admin/phpinfo.php"] [unique_id "apK9f9dHPfW2QFvhmL72lAAAIVo"]
[Sat Aug 29 05:07:43.931039 2026] [security2:error] [pid 1034096:tid 1034255] [client 20.63.81.20:20895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/zi.php"] [unique_id "apK9fy04twRPFuquKD2WpAAAAIk"]
[Sat Aug 29 05:07:43.932742 2026] [security2:error] [pid 1034096:tid 1034352] [client 213.209.159.223:13149] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/src/.env"] [unique_id "apK9fy04twRPFuquKD2WowAAAOo"]
[Sat Aug 29 05:07:43.946683 2026] [access_compat:error] [pid 1034096:tid 1034361] [client 67.20.76.220:11068] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:07:43.952603 2026] [security2:error] [pid 1034096:tid 1034311] [client 20.52.41.200:5362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/install.php"] [unique_id "apK9fy04twRPFuquKD2WqAAAAME"]
[Sat Aug 29 05:07:43.955210 2026] [security2:error] [pid 1028675:tid 1028931] [client 213.209.159.223:18597] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/wp-config.php.backup"] [unique_id "apK9f9dHPfW2QFvhmL72nAAAAHk"]
[Sat Aug 29 05:07:43.955243 2026] [autoindex:error] [pid 1028675:tid 1028745] [remote 87.58.197.202:56040] AH01276: Cannot serve directory /home3/xhnksumy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:07:43.958772 2026] [security2:error] [pid 1034096:tid 1034350] [client 4.205.62.107:53271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/05.php"] [unique_id "apK9fy04twRPFuquKD2WrAAAAOg"]
[Sat Aug 29 05:07:43.960865 2026] [security2:error] [pid 1028675:tid 1028740] [remote 93.123.109.228:46162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flowerfh.com"] [uri "/admin_phpinfo.php"] [unique_id "apK9f9dHPfW2QFvhmL72owAAITs"]
[Sat Aug 29 05:07:43.961170 2026] [security2:error] [pid 1034096:tid 1034307] [client 20.151.200.44:63404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/waw.php"] [unique_id "apK9fy04twRPFuquKD2WrgAAAL0"]
[Sat Aug 29 05:07:43.962530 2026] [security2:error] [pid 1034096:tid 1034362] [client 93.123.109.228:42170] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/front/.env"] [unique_id "apK9fy04twRPFuquKD2WqgAAAPQ"]
[Sat Aug 29 05:07:43.969604 2026] [security2:error] [pid 1028675:tid 1028894] [client 93.123.109.228:60762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/frontend/.env"] [unique_id "apK9f9dHPfW2QFvhmL72pgAAAFQ"]
[Sat Aug 29 05:07:43.973886 2026] [core:error] [pid 1028675:tid 1028833] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.973902 2026] [core:error] [pid 1028675:tid 1028833] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.992080 2026] [security2:error] [pid 1034096:tid 1034316] [client 168.107.94.195:49587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9fy04twRPFuquKD2WuwAAAMY"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:43.992798 2026] [security2:error] [pid 1034096:tid 1034344] [client 213.209.159.223:42692] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/env/.env"] [unique_id "apK9fy04twRPFuquKD2WuQAAAOI"]
[Sat Aug 29 05:07:43.993345 2026] [security2:error] [pid 1034096:tid 1034291] [client 20.104.104.62:20816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/ray.php"] [unique_id "apK9fy04twRPFuquKD2WvAAAAK0"]
[Sat Aug 29 05:07:43.995828 2026] [core:error] [pid 1028675:tid 1028715] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.995845 2026] [core:error] [pid 1028675:tid 1028715] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.997132 2026] [core:error] [pid 1034096:tid 1034293] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.997150 2026] [core:error] [pid 1034096:tid 1034293] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.997223 2026] [security2:error] [pid 1028675:tid 1028884] [client 20.63.219.114:16049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK9f9dHPfW2QFvhmL72swAAAEo"]
[Sat Aug 29 05:07:43.997508 2026] [core:error] [pid 1034096:tid 1034266] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:43.997525 2026] [core:error] [pid 1034096:tid 1034266] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.000633 2026] [core:error] [pid 1034096:tid 1034351] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.000650 2026] [core:error] [pid 1034096:tid 1034351] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.001058 2026] [core:error] [pid 1028675:tid 1028917] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.001070 2026] [core:error] [pid 1028675:tid 1028917] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.001640 2026] [security2:error] [pid 1028675:tid 1028706] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/server/.env"] [unique_id "apK9gNdHPfW2QFvhmL72tQAANBk"]
[Sat Aug 29 05:07:44.002836 2026] [autoindex:error] [pid 1028675:tid 1028819] [client 45.148.10.62:44782] AH01276: Cannot serve directory /home3/wkmvbdmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:07:44.003086 2026] [security2:error] [pid 1028675:tid 1028773] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/server/api/.env"] [unique_id "apK9gNdHPfW2QFvhmL72twAANFw"]
[Sat Aug 29 05:07:44.007910 2026] [core:error] [pid 1034096:tid 1034258] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.007925 2026] [core:error] [pid 1034096:tid 1034258] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.010920 2026] [core:error] [pid 1028675:tid 1028754] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.010940 2026] [core:error] [pid 1028675:tid 1028754] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.012222 2026] [security2:error] [pid 1028675:tid 1028776] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/server/backend/.env"] [unique_id "apK9gNdHPfW2QFvhmL72ugAANF8"]
[Sat Aug 29 05:07:44.013884 2026] [core:error] [pid 1028675:tid 1028849] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.013903 2026] [core:error] [pid 1028675:tid 1028849] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.016100 2026] [core:error] [pid 1028675:tid 1028728] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.016116 2026] [core:error] [pid 1028675:tid 1028728] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.026296 2026] [security2:error] [pid 1034096:tid 1034278] [client 213.209.159.223:56168] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_webdisk/src/.env"] [unique_id "apK9gC04twRPFuquKD2WwwAAAKA"]
[Sat Aug 29 05:07:44.035017 2026] [security2:error] [pid 1028675:tid 1028901] [client 20.104.49.130:57646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/worksec.php"] [unique_id "apK9gNdHPfW2QFvhmL72wgAAAFs"]
[Sat Aug 29 05:07:44.042454 2026] [security2:error] [pid 1034096:tid 1034322] [client 52.139.37.240:32887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/essexec.php"] [unique_id "apK9gC04twRPFuquKD2WxAAAAMw"]
[Sat Aug 29 05:07:44.048205 2026] [security2:error] [pid 1028675:tid 1028823] [client 20.104.104.62:27700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.johngibsondrawings.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "apK9gNdHPfW2QFvhmL72xgAAAA0"]
[Sat Aug 29 05:07:44.050725 2026] [security2:error] [pid 1028675:tid 1028892] [client 93.123.109.228:42200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/info.php"] [unique_id "apK9gNdHPfW2QFvhmL72yAAAAFI"]
[Sat Aug 29 05:07:44.054035 2026] [core:error] [pid 1028675:tid 1028788] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.054053 2026] [core:error] [pid 1028675:tid 1028788] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.074831 2026] [security2:error] [pid 1034096:tid 1034294] [client 52.139.37.240:63567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jobindjibouti.eastacare.com"] [uri "/admin/function.php"] [unique_id "apK9gC04twRPFuquKD2WyAAAALA"]
[Sat Aug 29 05:07:44.075449 2026] [security2:error] [pid 1028675:tid 1028890] [client 93.123.109.228:60866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/infophp.php"] [unique_id "apK9gNdHPfW2QFvhmL72ywAAAFA"]
[Sat Aug 29 05:07:44.078229 2026] [security2:error] [pid 1034096:tid 1034271] [client 20.63.81.20:20896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/ue.php"] [unique_id "apK9gC04twRPFuquKD2WyQAAAJk"]
[Sat Aug 29 05:07:44.079127 2026] [security2:error] [pid 1028675:tid 1028841] [client 93.123.109.228:42106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/infos.php"] [unique_id "apK9gNdHPfW2QFvhmL72zgAAAB8"]
[Sat Aug 29 05:07:44.090998 2026] [security2:error] [pid 1034096:tid 1034269] [client 158.23.147.79:17509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/admin.php"] [unique_id "apK9gC04twRPFuquKD2WygAAAJc"]
[Sat Aug 29 05:07:44.095954 2026] [core:error] [pid 1028675:tid 1028767] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.095972 2026] [core:error] [pid 1028675:tid 1028767] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.119167 2026] [core:error] [pid 1028675:tid 1028794] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.119185 2026] [core:error] [pid 1028675:tid 1028794] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.130577 2026] [security2:error] [pid 1028675:tid 1028886] [client 93.123.109.228:60688] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/laravel/.env"] [unique_id "apK9gNdHPfW2QFvhmL721gAAAEw"]
[Sat Aug 29 05:07:44.131691 2026] [security2:error] [pid 1034096:tid 1034303] [client 93.123.109.228:42236] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/lms/.env"] [unique_id "apK9gC04twRPFuquKD2WzQAAALk"]
[Sat Aug 29 05:07:44.135102 2026] [security2:error] [pid 1034096:tid 1034257] [client 93.123.109.228:42196] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/local/.env"] [unique_id "apK9gC04twRPFuquKD2W0AAAAIs"]
[Sat Aug 29 05:07:44.136760 2026] [security2:error] [pid 1034096:tid 1034318] [client 158.23.147.79:48274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-admin/setup-config.php"] [unique_id "apK9gC04twRPFuquKD2W0gAAAMg"]
[Sat Aug 29 05:07:44.140928 2026] [security2:error] [pid 1034096:tid 1034349] [client 213.209.159.223:38230] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_whm/env/.env"] [unique_id "apK9gC04twRPFuquKD2W0wAAAOc"]
[Sat Aug 29 05:07:44.144818 2026] [core:error] [pid 1028675:tid 1028707] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.144839 2026] [core:error] [pid 1028675:tid 1028707] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.156635 2026] [core:error] [pid 1028675:tid 1028755] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.156650 2026] [core:error] [pid 1028675:tid 1028755] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.173634 2026] [security2:error] [pid 1028675:tid 1028753] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/service/.env"] [unique_id "apK9gNdHPfW2QFvhmL725wAAHUg"]
[Sat Aug 29 05:07:44.178612 2026] [security2:error] [pid 1028675:tid 1028692] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/services/.env"] [unique_id "apK9gNdHPfW2QFvhmL726QAAHQw"]
[Sat Aug 29 05:07:44.181045 2026] [security2:error] [pid 1028675:tid 1028928] [client 158.23.147.79:53122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-admin.php"] [unique_id "apK9gNdHPfW2QFvhmL728AAAAHY"]
[Sat Aug 29 05:07:44.182206 2026] [security2:error] [pid 1028675:tid 1028870] [client 45.148.10.62:44782] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.wkm.vbd.mybluehost.me"] [uri "/.env"] [unique_id "apK9gNdHPfW2QFvhmL727QAAADw"]
[Sat Aug 29 05:07:44.184511 2026] [core:error] [pid 1028675:tid 1028752] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.184531 2026] [core:error] [pid 1028675:tid 1028752] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.189829 2026] [security2:error] [pid 1028675:tid 1028916] [client 93.123.109.228:42204] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/market/.env"] [unique_id "apK9gNdHPfW2QFvhmL729AAAAGo"]
[Sat Aug 29 05:07:44.190232 2026] [security2:error] [pid 1034096:tid 1034288] [client 158.158.54.35:12948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-admin/css/about.php"] [unique_id "apK9gC04twRPFuquKD2W3gAAAKo"]
[Sat Aug 29 05:07:44.190310 2026] [core:error] [pid 1034096:tid 1034343] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.190324 2026] [core:error] [pid 1034096:tid 1034343] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.191758 2026] [security2:error] [pid 1034096:tid 1034299] [client 213.209.159.223:12374] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/src/.env"] [unique_id "apK9gC04twRPFuquKD2W3wAAALU"]
[Sat Aug 29 05:07:44.203344 2026] [core:error] [pid 1034096:tid 1034317] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.203376 2026] [core:error] [pid 1034096:tid 1034317] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.205685 2026] [core:error] [pid 1034096:tid 1034371] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.205706 2026] [core:error] [pid 1034096:tid 1034371] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.205956 2026] [core:error] [pid 1034096:tid 1034370] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.205966 2026] [core:error] [pid 1034096:tid 1034370] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.210416 2026] [security2:error] [pid 1028675:tid 1028879] [client 93.123.109.228:60910] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/marketing/.env"] [unique_id "apK9gNdHPfW2QFvhmL72-QAAAEU"]
[Sat Aug 29 05:07:44.215450 2026] [security2:error] [pid 1034096:tid 1034332] [client 213.209.159.223:13149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/config/app.php"] [unique_id "apK9gC04twRPFuquKD2W4wAAANY"]
[Sat Aug 29 05:07:44.225409 2026] [security2:error] [pid 1028675:tid 1028734] [remote 93.123.109.228:46036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flicklister.com"] [uri "/php-info.php"] [unique_id "apK9gNdHPfW2QFvhmL72_QAAQjU"]
[Sat Aug 29 05:07:44.234332 2026] [core:error] [pid 1034096:tid 1034378] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.234352 2026] [core:error] [pid 1034096:tid 1034378] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.243480 2026] [security2:error] [pid 1028675:tid 1028748] [remote 93.123.109.228:46162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flowerfh.com"] [uri "/api/info.php"] [unique_id "apK9gNdHPfW2QFvhmL73BAAAIUM"]
[Sat Aug 29 05:07:44.243879 2026] [security2:error] [pid 1028675:tid 1028733] [remote 93.123.109.228:46036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flicklister.com"] [uri "/php.php"] [unique_id "apK9gNdHPfW2QFvhmL73BQAAQjQ"]
[Sat Aug 29 05:07:44.244381 2026] [security2:error] [pid 1034096:tid 1034262] [client 20.104.104.62:25078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinhenley.com"] [uri "/test1.php"] [unique_id "apK9gC04twRPFuquKD2W6QAAAJA"]
[Sat Aug 29 05:07:44.245594 2026] [core:error] [pid 1028675:tid 1028887] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.245617 2026] [core:error] [pid 1028675:tid 1028887] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.245774 2026] [security2:error] [pid 1028675:tid 1028847] [client 52.139.37.240:32873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/fw.php"] [unique_id "apK9gNdHPfW2QFvhmL73BwAAACU"]
[Sat Aug 29 05:07:44.246525 2026] [security2:error] [pid 1028675:tid 1028816] [client 20.63.81.20:20833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/nv.php"] [unique_id "apK9gNdHPfW2QFvhmL73CAAAAAY"]
[Sat Aug 29 05:07:44.246528 2026] [security2:error] [pid 1034096:tid 1034255] [client 93.123.109.228:42220] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/media/.env"] [unique_id "apK9gC04twRPFuquKD2W6AAAAIk"]
[Sat Aug 29 05:07:44.247864 2026] [core:error] [pid 1028675:tid 1028856] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.247883 2026] [core:error] [pid 1028675:tid 1028856] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.251076 2026] [security2:error] [pid 1028675:tid 1028803] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/shared/.env"] [unique_id "apK9gNdHPfW2QFvhmL73CQAAHXo"]
[Sat Aug 29 05:07:44.258728 2026] [core:error] [pid 1028675:tid 1028847] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.258757 2026] [core:error] [pid 1028675:tid 1028847] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.270028 2026] [security2:error] [pid 1034096:tid 1034310] [client 52.139.37.240:63562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jobindjibouti.eastacare.com"] [uri "/zoom1.php"] [unique_id "apK9gC04twRPFuquKD2W6wAAAMA"]
[Sat Aug 29 05:07:44.270101 2026] [security2:error] [pid 1028675:tid 1028746] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/shop/.env"] [unique_id "apK9gNdHPfW2QFvhmL73DAAAHUE"]
[Sat Aug 29 05:07:44.274661 2026] [security2:error] [pid 1028675:tid 1028877] [client 20.203.141.11:13605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-good.php"] [unique_id "apK9gNdHPfW2QFvhmL73DQAAAEM"]
[Sat Aug 29 05:07:44.274807 2026] [security2:error] [pid 1028675:tid 1028726] [remote 93.123.109.228:46036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flicklister.com"] [uri "/php_info.php"] [unique_id "apK9gNdHPfW2QFvhmL73DgAAQi0"]
[Sat Aug 29 05:07:44.278143 2026] [security2:error] [pid 1034096:tid 1034350] [client 213.209.159.223:42692] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/src/.env"] [unique_id "apK9gC04twRPFuquKD2W7QAAAOg"]
[Sat Aug 29 05:07:44.281040 2026] [security2:error] [pid 1034096:tid 1034362] [client 93.123.109.228:42236] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/new/.env"] [unique_id "apK9gC04twRPFuquKD2W7gAAAPQ"]
[Sat Aug 29 05:07:44.281710 2026] [security2:error] [pid 1028675:tid 1028833] [client 93.123.109.228:60688] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/node-api/.env"] [unique_id "apK9gNdHPfW2QFvhmL73EAAAABc"]
[Sat Aug 29 05:07:44.287025 2026] [security2:error] [pid 1028675:tid 1028859] [client 93.123.109.228:60762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/node/.env"] [unique_id "apK9gNdHPfW2QFvhmL73EgAAADE"]
[Sat Aug 29 05:07:44.291463 2026] [security2:error] [pid 1034096:tid 1034337] [client 93.123.109.228:42196] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/node/api/.env"] [unique_id "apK9gC04twRPFuquKD2W7wAAANs"]
[Sat Aug 29 05:07:44.297213 2026] [security2:error] [pid 1028675:tid 1028801] [remote 93.123.109.228:46036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flicklister.com"] [uri "/phpinfo.php"] [unique_id "apK9gNdHPfW2QFvhmL73FAAAQng"]
[Sat Aug 29 05:07:44.298288 2026] [security2:error] [pid 1034096:tid 1034347] [client 93.123.109.228:42170] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/node/backend/.env"] [unique_id "apK9gC04twRPFuquKD2W8QAAAOU"]
[Sat Aug 29 05:07:44.301124 2026] [core:error] [pid 1034096:tid 1034330] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.301148 2026] [core:error] [pid 1034096:tid 1034330] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.313115 2026] [security2:error] [pid 1028675:tid 1028922] [client 93.123.109.228:60956] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/nodeapi/.env"] [unique_id "apK9gNdHPfW2QFvhmL73FwAAAHA"]
[Sat Aug 29 05:07:44.319631 2026] [security2:error] [pid 1034096:tid 1034291] [client 213.209.159.223:56168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.greatdecisionsofcharlevoix.com"] [uri "/config/app.php"] [unique_id "apK9gC04twRPFuquKD2W9AAAAK0"]
[Sat Aug 29 05:07:44.324525 2026] [security2:error] [pid 1028675:tid 1028904] [client 93.123.109.228:60860] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/nodeweb/.env"] [unique_id "apK9gNdHPfW2QFvhmL73HAAAAF4"]
[Sat Aug 29 05:07:44.329391 2026] [security2:error] [pid 1028675:tid 1028849] [client 213.209.159.223:1572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/app_dev.php/_profiler/open"] [unique_id "apK9gNdHPfW2QFvhmL73HgAAACc"]
[Sat Aug 29 05:07:44.334367 2026] [security2:error] [pid 1028675:tid 1028848] [client 45.148.10.62:44782] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.wkm.vbd.mybluehost.me"] [uri "/.env"] [unique_id "apK9gNdHPfW2QFvhmL73HwAAACY"]
[Sat Aug 29 05:07:44.349855 2026] [security2:error] [pid 1028675:tid 1028721] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/src/.env"] [unique_id "apK9gNdHPfW2QFvhmL73JQAAHSg"]
[Sat Aug 29 05:07:44.350725 2026] [security2:error] [pid 1028675:tid 1028937] [client 158.23.147.79:11469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9gNdHPfW2QFvhmL73KQAAAH8"]
[Sat Aug 29 05:07:44.352660 2026] [security2:error] [pid 1028675:tid 1028823] [client 158.23.147.79:26523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-includes/js/index.php"] [unique_id "apK9gNdHPfW2QFvhmL73KgAAAA0"]
[Sat Aug 29 05:07:44.356672 2026] [security2:error] [pid 1034096:tid 1034354] [client 20.63.219.114:12232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-admin/system.php"] [unique_id "apK9gC04twRPFuquKD2W-wAAAOw"]
[Sat Aug 29 05:07:44.359188 2026] [security2:error] [pid 1028675:tid 1028761] [remote 93.123.109.228:46162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flowerfh.com"] [uri "/api/phpinfo.php"] [unique_id "apK9gNdHPfW2QFvhmL73KwAAIVA"]
[Sat Aug 29 05:07:44.362835 2026] [security2:error] [pid 1028675:tid 1028878] [client 93.123.109.228:60910] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/old/.env"] [unique_id "apK9gNdHPfW2QFvhmL73LAAAAEQ"]
[Sat Aug 29 05:07:44.367742 2026] [core:error] [pid 1028675:tid 1028862] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.367760 2026] [core:error] [pid 1028675:tid 1028862] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.369524 2026] [core:error] [pid 1028675:tid 1028680] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.369540 2026] [core:error] [pid 1028675:tid 1028680] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.371234 2026] [security2:error] [pid 1034096:tid 1034290] [client 20.203.141.11:23635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/upload.php"] [unique_id "apK9gC04twRPFuquKD2W_QAAAKw"]
[Sat Aug 29 05:07:44.380761 2026] [security2:error] [pid 1034096:tid 1034258] [client 168.107.94.195:49894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9gC04twRPFuquKD2XAQAAAIw"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:44.382041 2026] [security2:error] [pid 1028675:tid 1028888] [client 4.205.62.107:22056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/myfile.php"] [unique_id "apK9gNdHPfW2QFvhmL73NQAAAE4"]
[Sat Aug 29 05:07:44.384268 2026] [core:error] [pid 1034096:tid 1034300] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.384286 2026] [core:error] [pid 1034096:tid 1034300] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.384946 2026] [core:error] [pid 1028675:tid 1028705] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.384961 2026] [core:error] [pid 1028675:tid 1028705] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.386311 2026] [core:error] [pid 1028675:tid 1028682] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.386332 2026] [core:error] [pid 1028675:tid 1028682] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.386689 2026] [core:error] [pid 1034096:tid 1034364] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.386699 2026] [core:error] [pid 1034096:tid 1034364] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.386849 2026] [core:error] [pid 1028675:tid 1028851] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.386858 2026] [core:error] [pid 1028675:tid 1028851] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.392403 2026] [core:error] [pid 1028675:tid 1028837] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.392421 2026] [core:error] [pid 1028675:tid 1028837] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.392982 2026] [security2:error] [pid 1028675:tid 1028932] [client 40.83.93.50:8226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/meta.php"] [unique_id "apK9gNdHPfW2QFvhmL73OwAAAHo"]
[Sat Aug 29 05:07:44.393041 2026] [security2:error] [pid 1028675:tid 1028883] [client 20.63.81.20:20816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/jw.php"] [unique_id "apK9gNdHPfW2QFvhmL73PAAAAEk"]
[Sat Aug 29 05:07:44.400063 2026] [security2:error] [pid 1034096:tid 1034326] [client 20.104.104.62:28554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.johngibsondrawings.com"] [uri "/403.php"] [unique_id "apK9gC04twRPFuquKD2XAwAAANA"]
[Sat Aug 29 05:07:44.403609 2026] [security2:error] [pid 1028675:tid 1028814] [client 93.123.109.228:60888] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/opt/.env"] [unique_id "apK9gNdHPfW2QFvhmL73PwAAAAQ"]
[Sat Aug 29 05:07:44.404431 2026] [core:error] [pid 1028675:tid 1028704] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.404461 2026] [core:error] [pid 1028675:tid 1028704] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.410072 2026] [security2:error] [pid 1034096:tid 1034334] [client 20.52.41.200:5317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/ioxi-o.php"] [unique_id "apK9gC04twRPFuquKD2XBAAAANg"]
[Sat Aug 29 05:07:44.413467 2026] [security2:error] [pid 1034096:tid 1034270] [client 4.205.62.107:53400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/w.php"] [unique_id "apK9gC04twRPFuquKD2XBQAAAJg"]
[Sat Aug 29 05:07:44.417268 2026] [security2:error] [pid 1028675:tid 1028903] [client 158.23.147.79:25543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-content/packed.php"] [unique_id "apK9gNdHPfW2QFvhmL73QQAAAF0"]
[Sat Aug 29 05:07:44.421789 2026] [security2:error] [pid 1034096:tid 1034328] [client 213.209.159.223:38230] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_whm/src/.env"] [unique_id "apK9gC04twRPFuquKD2XBwAAANI"]
[Sat Aug 29 05:07:44.435224 2026] [security2:error] [pid 1034096:tid 1034303] [client 20.151.200.44:47312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/f2r4.php"] [unique_id "apK9gC04twRPFuquKD2XCQAAALk"]
[Sat Aug 29 05:07:44.440723 2026] [security2:error] [pid 1034096:tid 1034333] [client 52.139.37.240:32863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/zwso.php"] [unique_id "apK9gC04twRPFuquKD2XDAAAANc"]
[Sat Aug 29 05:07:44.445654 2026] [core:error] [pid 1028675:tid 1028697] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.445672 2026] [core:error] [pid 1028675:tid 1028697] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.445794 2026] [core:error] [pid 1028675:tid 1028792] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.445805 2026] [core:error] [pid 1028675:tid 1028792] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.448067 2026] [security2:error] [pid 1028675:tid 1028879] [client 20.104.49.130:48771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/tiny2.php"] [unique_id "apK9gNdHPfW2QFvhmL73TQAAAEU"]
[Sat Aug 29 05:07:44.449859 2026] [security2:error] [pid 1034096:tid 1034363] [client 20.104.104.62:24738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinhenley.com"] [uri "/upload.php"] [unique_id "apK9gC04twRPFuquKD2XDQAAAPU"]
[Sat Aug 29 05:07:44.454783 2026] [core:error] [pid 1028675:tid 1028770] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.454801 2026] [core:error] [pid 1028675:tid 1028770] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.468254 2026] [security2:error] [pid 1034096:tid 1034263] [client 213.209.159.223:12374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/config/app.php"] [unique_id "apK9gC04twRPFuquKD2XEAAAAJE"]
[Sat Aug 29 05:07:44.475738 2026] [security2:error] [pid 1028675:tid 1028914] [client 20.104.104.62:20894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/Q2-.php"] [unique_id "apK9gNdHPfW2QFvhmL73WgAAAGg"]
[Sat Aug 29 05:07:44.477907 2026] [core:error] [pid 1028675:tid 1028783] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.477926 2026] [core:error] [pid 1028675:tid 1028783] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.478213 2026] [core:error] [pid 1028675:tid 1028793] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.478227 2026] [core:error] [pid 1028675:tid 1028793] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.480556 2026] [security2:error] [pid 1034096:tid 1034269] [client 52.139.37.240:62229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jobindjibouti.eastacare.com"] [uri "/about.php7"] [unique_id "apK9gC04twRPFuquKD2XEgAAAJc"]
[Sat Aug 29 05:07:44.490611 2026] [security2:error] [pid 1028675:tid 1028896] [client 213.209.159.223:13233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "apK9gNdHPfW2QFvhmL73YAAAAFY"]
[Sat Aug 29 05:07:44.493256 2026] [security2:error] [pid 1028675:tid 1028685] [remote 93.123.109.228:46036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flicklister.com"] [uri "/public/phpinfo.php"] [unique_id "apK9gNdHPfW2QFvhmL73YQAAQgU"]
[Sat Aug 29 05:07:44.511625 2026] [core:error] [pid 1028675:tid 1028897] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.511646 2026] [core:error] [pid 1028675:tid 1028897] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.512997 2026] [security2:error] [pid 1028675:tid 1028860] [client 20.104.104.62:48048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9gNdHPfW2QFvhmL73agAAADI"]
[Sat Aug 29 05:07:44.520742 2026] [security2:error] [pid 1028675:tid 1028782] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/srv/.env"] [unique_id "apK9gNdHPfW2QFvhmL73cAAALmU"]
[Sat Aug 29 05:07:44.521655 2026] [core:error] [pid 1028675:tid 1028769] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.521670 2026] [core:error] [pid 1028675:tid 1028769] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.525266 2026] [security2:error] [pid 1028675:tid 1028922] [client 4.205.62.107:65457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/aws_sdk_settings.php"] [unique_id "apK9gNdHPfW2QFvhmL73cwAAAHA"]
[Sat Aug 29 05:07:44.528810 2026] [security2:error] [pid 1028675:tid 1028805] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/stage/.env"] [unique_id "apK9gNdHPfW2QFvhmL73dAAACXw"]
[Sat Aug 29 05:07:44.536180 2026] [security2:error] [pid 1028675:tid 1028776] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/staging/.env"] [unique_id "apK9gNdHPfW2QFvhmL73dgAAa18"]
[Sat Aug 29 05:07:44.539892 2026] [core:error] [pid 1028675:tid 1028686] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.539909 2026] [core:error] [pid 1028675:tid 1028686] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.543666 2026] [core:error] [pid 1028675:tid 1028728] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.543695 2026] [core:error] [pid 1028675:tid 1028728] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.545464 2026] [security2:error] [pid 1028675:tid 1028904] [client 158.23.147.79:35226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK9gNdHPfW2QFvhmL73egAAAF4"]
[Sat Aug 29 05:07:44.547018 2026] [core:error] [pid 1028675:tid 1028791] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.547037 2026] [core:error] [pid 1028675:tid 1028791] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.548528 2026] [security2:error] [pid 1028675:tid 1028849] [client 20.63.81.20:20809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/or.php"] [unique_id "apK9gNdHPfW2QFvhmL73fAAAACc"]
[Sat Aug 29 05:07:44.550411 2026] [core:error] [pid 1028675:tid 1028710] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.550428 2026] [core:error] [pid 1028675:tid 1028710] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.556561 2026] [security2:error] [pid 1028675:tid 1028720] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/stg/.env"] [unique_id "apK9gNdHPfW2QFvhmL73fwAAEic"]
[Sat Aug 29 05:07:44.561198 2026] [security2:error] [pid 1034096:tid 1034375] [client 213.209.159.223:42692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/config/app.php"] [unique_id "apK9gC04twRPFuquKD2XFgAAAQE"]
[Sat Aug 29 05:07:44.563247 2026] [core:error] [pid 1028675:tid 1028788] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.563272 2026] [core:error] [pid 1028675:tid 1028788] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.566598 2026] [security2:error] [pid 1034096:tid 1034332] [client 4.205.62.107:58436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/wp-konfig.php"] [unique_id "apK9gC04twRPFuquKD2XFwAAANY"]
[Sat Aug 29 05:07:44.591085 2026] [security2:error] [pid 1034096:tid 1034301] [client 213.209.159.223:20697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.greatdecisionsofcharlevoix.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "apK9gC04twRPFuquKD2XGQAAALc"]
[Sat Aug 29 05:07:44.598541 2026] [core:error] [pid 1028675:tid 1028703] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.598562 2026] [core:error] [pid 1028675:tid 1028703] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.599000 2026] [security2:error] [pid 1034096:tid 1034317] [client 20.104.104.62:27668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.johngibsondrawings.com"] [uri "/ava.php"] [unique_id "apK9gC04twRPFuquKD2XGgAAAMc"]
[Sat Aug 29 05:07:44.602271 2026] [security2:error] [pid 1028675:tid 1028821] [client 213.209.159.223:4795] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/wp-content/mysql.sql"] [unique_id "apK9gNdHPfW2QFvhmL73iwAAAAs"]
[Sat Aug 29 05:07:44.604349 2026] [core:error] [pid 1028675:tid 1028737] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.604376 2026] [core:error] [pid 1028675:tid 1028737] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.629039 2026] [security2:error] [pid 1028675:tid 1028832] [client 158.23.147.79:50079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/goat.php"] [unique_id "apK9gNdHPfW2QFvhmL73lQAAABY"]
[Sat Aug 29 05:07:44.629163 2026] [security2:error] [pid 1028675:tid 1028925] [client 93.123.109.228:60762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/php-info.php"] [unique_id "apK9gNdHPfW2QFvhmL73lgAAAHM"]
[Sat Aug 29 05:07:44.630063 2026] [core:error] [pid 1028675:tid 1028744] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.630080 2026] [core:error] [pid 1028675:tid 1028744] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.631723 2026] [security2:error] [pid 1034096:tid 1034310] [client 93.123.109.228:42196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/php.php"] [unique_id "apK9gC04twRPFuquKD2XHAAAAMA"]
[Sat Aug 29 05:07:44.645327 2026] [autoindex:error] [pid 1028675:tid 1028881] [client 45.148.10.62:44782] AH01276: Cannot serve directory /home3/wkmvbdmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:07:44.647631 2026] [security2:error] [pid 1034096:tid 1034343] [client 158.158.54.35:22411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/system_log.php"] [unique_id "apK9gC04twRPFuquKD2XHgAAAOE"]
[Sat Aug 29 05:07:44.650457 2026] [core:error] [pid 1028675:tid 1028814] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.650475 2026] [core:error] [pid 1028675:tid 1028814] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.654697 2026] [security2:error] [pid 1034096:tid 1034265] [client 52.139.37.240:33546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/admin/function.php"] [unique_id "apK9gC04twRPFuquKD2XHwAAAJM"]
[Sat Aug 29 05:07:44.655881 2026] [security2:error] [pid 1034096:tid 1034280] [client 93.123.109.228:42236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/php_info.php"] [unique_id "apK9gC04twRPFuquKD2XIAAAAKI"]
[Sat Aug 29 05:07:44.661337 2026] [core:error] [pid 1028675:tid 1028900] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.661364 2026] [core:error] [pid 1028675:tid 1028900] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.668967 2026] [security2:error] [pid 1028675:tid 1028815] [client 20.104.104.62:37569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9gNdHPfW2QFvhmL73oQAAAAU"]
[Sat Aug 29 05:07:44.670139 2026] [security2:error] [pid 1028675:tid 1028928] [client 93.123.109.228:60936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/phpinfo.php"] [unique_id "apK9gNdHPfW2QFvhmL73ogAAAHY"]
[Sat Aug 29 05:07:44.677666 2026] [security2:error] [pid 1034096:tid 1034252] [client 52.139.37.240:63564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jobindjibouti.eastacare.com"] [uri "/cron.php"] [unique_id "apK9gC04twRPFuquKD2XIwAAAIY"]
[Sat Aug 29 05:07:44.679072 2026] [security2:error] [pid 1034096:tid 1034330] [client 20.63.81.20:20885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/ile56.php"] [unique_id "apK9gC04twRPFuquKD2XJAAAANQ"]
[Sat Aug 29 05:07:44.680832 2026] [security2:error] [pid 1028675:tid 1028690] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/stripe/.env"] [unique_id "apK9gNdHPfW2QFvhmL73owAANQo"]
[Sat Aug 29 05:07:44.683790 2026] [core:error] [pid 1028675:tid 1028752] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.683810 2026] [core:error] [pid 1028675:tid 1028752] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.691482 2026] [security2:error] [pid 1028675:tid 1028910] [client 93.123.109.228:60956] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/portal/.env"] [unique_id "apK9gNdHPfW2QFvhmL73rQAAAGQ"]
[Sat Aug 29 05:07:44.702373 2026] [security2:error] [pid 1028675:tid 1028741] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/terraform.tfstate.backup"] [unique_id "apK9gNdHPfW2QFvhmL73tAAANTw"]
[Sat Aug 29 05:07:44.707239 2026] [security2:error] [pid 1034096:tid 1034289] [client 213.209.159.223:38230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/config/app.php"] [unique_id "apK9gC04twRPFuquKD2XKQAAAKs"]
[Sat Aug 29 05:07:44.709510 2026] [core:error] [pid 1028675:tid 1028733] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.709526 2026] [core:error] [pid 1028675:tid 1028733] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.715682 2026] [core:error] [pid 1028675:tid 1028923] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.715705 2026] [core:error] [pid 1028675:tid 1028923] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.715803 2026] [core:error] [pid 1034096:tid 1034254] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.715816 2026] [core:error] [pid 1034096:tid 1034254] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.721907 2026] [core:error] [pid 1034096:tid 1034292] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.721927 2026] [core:error] [pid 1034096:tid 1034292] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.722447 2026] [security2:error] [pid 1028675:tid 1028931] [client 93.123.109.228:60790] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/prod/.env"] [unique_id "apK9gNdHPfW2QFvhmL73vwAAAHk"]
[Sat Aug 29 05:07:44.726582 2026] [autoindex:error] [pid 1028675:tid 1028862] [client 20.104.104.62:25036] AH01276: Cannot serve directory /home1/thrbikes/public_html/kevinhenley/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:07:44.730282 2026] [security2:error] [pid 1028675:tid 1028914] [client 4.205.62.107:22471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/05.php"] [unique_id "apK9gNdHPfW2QFvhmL73wQAAAGg"]
[Sat Aug 29 05:07:44.733162 2026] [security2:error] [pid 1028675:tid 1028901] [client 20.203.141.11:18239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "apK9gNdHPfW2QFvhmL73wwAAAFs"]
[Sat Aug 29 05:07:44.734121 2026] [core:error] [pid 1034096:tid 1034295] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.734136 2026] [core:error] [pid 1034096:tid 1034295] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.736621 2026] [core:error] [pid 1034096:tid 1034264] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.736648 2026] [core:error] [pid 1034096:tid 1034264] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.736972 2026] [security2:error] [pid 1034096:tid 1034295] [client 93.123.109.228:42220] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/product/.env"] [unique_id "apK9gC04twRPFuquKD2XMQAAALE"]
[Sat Aug 29 05:07:44.739334 2026] [security2:error] [pid 1034096:tid 1034316] [client 213.209.159.223:55967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "apK9gC04twRPFuquKD2XMwAAAMY"]
[Sat Aug 29 05:07:44.741912 2026] [security2:error] [pid 1034096:tid 1034352] [client 20.63.219.114:16009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-admin/test.php"] [unique_id "apK9gC04twRPFuquKD2XNQAAAOo"]
[Sat Aug 29 05:07:44.745077 2026] [security2:error] [pid 1028675:tid 1028859] [client 93.123.109.228:42204] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/production/.env"] [unique_id "apK9gNdHPfW2QFvhmL73yAAAADE"]
[Sat Aug 29 05:07:44.748752 2026] [core:error] [pid 1028675:tid 1028929] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.748767 2026] [core:error] [pid 1028675:tid 1028929] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.753230 2026] [security2:error] [pid 1028675:tid 1028695] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/test.php"] [unique_id "apK9gNdHPfW2QFvhmL73ygAANQ8"]
[Sat Aug 29 05:07:44.754580 2026] [core:error] [pid 1034096:tid 1034285] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.754598 2026] [core:error] [pid 1034096:tid 1034285] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.765269 2026] [security2:error] [pid 1028675:tid 1028884] [client 168.107.94.195:50235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9gNdHPfW2QFvhmL73zgAAAEo"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:44.769461 2026] [security2:error] [pid 1028675:tid 1028736] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/test/.env"] [unique_id "apK9gNdHPfW2QFvhmL73zwAANTc"]
[Sat Aug 29 05:07:44.790208 2026] [security2:error] [pid 1028675:tid 1028873] [client 93.123.109.228:42206] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/project/.env"] [unique_id "apK9gNdHPfW2QFvhmL731gAAAD8"]
[Sat Aug 29 05:07:44.793080 2026] [security2:error] [pid 1028675:tid 1028937] [client 93.123.109.228:60688] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/public-api/.env"] [unique_id "apK9gNdHPfW2QFvhmL731wAAAH8"]
[Sat Aug 29 05:07:44.798407 2026] [security2:error] [pid 1028675:tid 1028842] [client 20.104.104.62:27657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.johngibsondrawings.com"] [uri "/info.php"] [unique_id "apK9gNdHPfW2QFvhmL732gAAACA"]
[Sat Aug 29 05:07:44.808200 2026] [security2:error] [pid 1028675:tid 1028828] [client 20.104.104.62:48018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/baee.php"] [unique_id "apK9gNdHPfW2QFvhmL733AAAABI"]
[Sat Aug 29 05:07:44.811186 2026] [security2:error] [pid 1028675:tid 1028892] [client 93.123.109.228:42146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/public/.env"] [unique_id "apK9gNdHPfW2QFvhmL733gAAAFI"]
[Sat Aug 29 05:07:44.813189 2026] [security2:error] [pid 1034096:tid 1034259] [client 20.63.81.20:20911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/emmh.php"] [unique_id "apK9gC04twRPFuquKD2XPAAAAI0"]
[Sat Aug 29 05:07:44.824302 2026] [core:error] [pid 1034096:tid 1034365] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.824322 2026] [core:error] [pid 1034096:tid 1034365] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.830526 2026] [security2:error] [pid 1028675:tid 1028718] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/user/.env"] [unique_id "apK9gNdHPfW2QFvhmL736AAAHiU"]
[Sat Aug 29 05:07:44.832016 2026] [security2:error] [pid 1028675:tid 1028890] [client 93.123.109.228:60948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/public/phpinfo.php"] [unique_id "apK9gNdHPfW2QFvhmL736QAAAFA"]
[Sat Aug 29 05:07:44.835114 2026] [security2:error] [pid 1028675:tid 1028880] [client 213.209.159.223:38441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "apK9gNdHPfW2QFvhmL737AAAAEY"]
[Sat Aug 29 05:07:44.848818 2026] [core:error] [pid 1028675:tid 1028880] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.848840 2026] [core:error] [pid 1028675:tid 1028880] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.850271 2026] [security2:error] [pid 1028675:tid 1028861] [client 93.123.109.228:60956] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/public_html/.env"] [unique_id "apK9gNdHPfW2QFvhmL738gAAADM"]
[Sat Aug 29 05:07:44.853335 2026] [security2:error] [pid 1028675:tid 1028713] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/v1/.env"] [unique_id "apK9gNdHPfW2QFvhmL739AAAHiA"]
[Sat Aug 29 05:07:44.854520 2026] [core:error] [pid 1028675:tid 1028858] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.854540 2026] [core:error] [pid 1028675:tid 1028858] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.861709 2026] [security2:error] [pid 1034096:tid 1034364] [client 52.139.37.240:33170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/zoom1.php"] [unique_id "apK9gC04twRPFuquKD2XQwAAAPY"]
[Sat Aug 29 05:07:44.865970 2026] [security2:error] [pid 1028675:tid 1028925] [client 93.123.109.228:60860] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/qa/.env"] [unique_id "apK9gNdHPfW2QFvhmL73-QAAAHM"]
[Sat Aug 29 05:07:44.871061 2026] [security2:error] [pid 1028675:tid 1028717] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/v2/.env"] [unique_id "apK9gNdHPfW2QFvhmL73_AAAHiQ"]
[Sat Aug 29 05:07:44.871552 2026] [security2:error] [pid 1028675:tid 1028786] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/v3/.env"] [unique_id "apK9gNdHPfW2QFvhmL73_QAAHmk"]
[Sat Aug 29 05:07:44.877327 2026] [security2:error] [pid 1028675:tid 1028927] [client 52.139.37.240:62246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jobindjibouti.eastacare.com"] [uri "/wp-2019.php"] [unique_id "apK9gNdHPfW2QFvhmL74AQAAAHU"]
[Sat Aug 29 05:07:44.885142 2026] [autoindex:error] [pid 1028675:tid 1028917] [client 20.104.104.62:25036] AH01276: Cannot serve directory /home1/thrbikes/public_html/kevinhenley/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:07:44.901025 2026] [core:error] [pid 1028675:tid 1028774] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.901046 2026] [core:error] [pid 1028675:tid 1028774] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.901510 2026] [core:error] [pid 1028675:tid 1028935] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.901529 2026] [core:error] [pid 1028675:tid 1028935] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.908551 2026] [security2:error] [pid 1034096:tid 1034342] [client 20.52.41.200:5316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/xmlrpc.php"] [unique_id "apK9gC04twRPFuquKD2XQgAAAOA"]
[Sat Aug 29 05:07:44.910047 2026] [access_compat:error] [pid 1034096:tid 1034336] [client 67.20.76.220:11072] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:07:44.915834 2026] [security2:error] [pid 1034096:tid 1034284] [client 213.209.159.223:24985] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/web/.env"] [unique_id "apK9gC04twRPFuquKD2XRQAAAKY"]
[Sat Aug 29 05:07:44.917596 2026] [security2:error] [pid 1034096:tid 1034368] [client 40.83.93.50:13961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/randkeyword.php"] [unique_id "apK9gC04twRPFuquKD2XRgAAAPo"]
[Sat Aug 29 05:07:44.929210 2026] [security2:error] [pid 1028675:tid 1028931] [client 20.104.104.62:40245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/python.php"] [unique_id "apK9gNdHPfW2QFvhmL74EwAAAHk"]
[Sat Aug 29 05:07:44.938222 2026] [core:error] [pid 1028675:tid 1028742] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.940914 2026] [core:error] [pid 1028675:tid 1028742] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.960595 2026] [security2:error] [pid 1034096:tid 1034315] [client 20.63.81.20:20900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/em.php"] [unique_id "apK9gC04twRPFuquKD2XTgAAAMU"]
[Sat Aug 29 05:07:44.970450 2026] [security2:error] [pid 1034096:tid 1034283] [client 213.209.159.223:64036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/app_dev.php/_profiler/open"] [unique_id "apK9gC04twRPFuquKD2XUAAAAKU"]
[Sat Aug 29 05:07:44.972401 2026] [security2:error] [pid 1028675:tid 1028856] [client 20.104.104.62:37581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/d12.php"] [unique_id "apK9gNdHPfW2QFvhmL74HgAAAC4"]
[Sat Aug 29 05:07:44.975129 2026] [security2:error] [pid 1028675:tid 1028937] [client 20.104.49.130:56221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.danesquality.com"] [uri "/cilus.php"] [unique_id "apK9gNdHPfW2QFvhmL74IgAAAH8"]
[Sat Aug 29 05:07:44.979467 2026] [core:error] [pid 1028675:tid 1028875] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.979489 2026] [core:error] [pid 1028675:tid 1028875] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.982927 2026] [core:error] [pid 1028675:tid 1028849] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.982947 2026] [core:error] [pid 1028675:tid 1028849] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.985092 2026] [core:error] [pid 1028675:tid 1028877] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.985110 2026] [core:error] [pid 1028675:tid 1028877] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.985702 2026] [core:error] [pid 1028675:tid 1028866] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.985715 2026] [core:error] [pid 1028675:tid 1028866] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.989299 2026] [security2:error] [pid 1034096:tid 1034304] [client 213.209.159.223:28972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "apK9gC04twRPFuquKD2XUgAAALo"]
[Sat Aug 29 05:07:44.990528 2026] [core:error] [pid 1034096:tid 1034287] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:44.990549 2026] [core:error] [pid 1034096:tid 1034287] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.005339 2026] [core:error] [pid 1028675:tid 1028699] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.005369 2026] [core:error] [pid 1028675:tid 1028699] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.007206 2026] [security2:error] [pid 1028675:tid 1028916] [client 20.104.104.62:27693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.johngibsondrawings.com"] [uri "/wp-admin/admin.php"] [unique_id "apK9gddHPfW2QFvhmL74MwAAAGo"]
[Sat Aug 29 05:07:45.009846 2026] [core:error] [pid 1034096:tid 1034269] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.009924 2026] [core:error] [pid 1034096:tid 1034269] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.013589 2026] [http2:warn] [pid 1017536:tid 1017739] [client 57.141.14.32:63142] h2_stream(1017536-172-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:07:45.019886 2026] [core:error] [pid 1028675:tid 1028782] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.019911 2026] [core:error] [pid 1028675:tid 1028782] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.021824 2026] [security2:error] [pid 1028675:tid 1028832] [client 45.148.10.62:44782] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.wkm.vbd.mybluehost.me"] [uri "/api/.env"] [unique_id "apK9gddHPfW2QFvhmL74OwAAABY"]
[Sat Aug 29 05:07:45.024248 2026] [security2:error] [pid 1028675:tid 1028825] [client 213.209.159.223:6687] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_webdisk/web/.env"] [unique_id "apK9gddHPfW2QFvhmL74PgAAAA8"]
[Sat Aug 29 05:07:45.030315 2026] [core:error] [pid 1028675:tid 1028724] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.030335 2026] [core:error] [pid 1028675:tid 1028724] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.030623 2026] [security2:error] [pid 1028675:tid 1028815] [client 213.209.159.223:4795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/php-info.php"] [unique_id "apK9gddHPfW2QFvhmL74RAAAAAU"]
[Sat Aug 29 05:07:45.040291 2026] [security2:error] [pid 1034096:tid 1034371] [client 158.23.147.79:32603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/mah.php"] [unique_id "apK9gS04twRPFuquKD2XVwAAAP0"]
[Sat Aug 29 05:07:45.055657 2026] [security2:error] [pid 1034096:tid 1034313] [client 213.209.159.223:24985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/phpinfo.php3"] [unique_id "apK9gS04twRPFuquKD2XWgAAAMM"]
[Sat Aug 29 05:07:45.056304 2026] [core:error] [pid 1028675:tid 1028881] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.056325 2026] [core:error] [pid 1028675:tid 1028881] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.060513 2026] [security2:error] [pid 1028675:tid 1028890] [client 52.139.37.240:33195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/about.php7"] [unique_id "apK9gddHPfW2QFvhmL74TQAAAFA"]
[Sat Aug 29 05:07:45.063650 2026] [core:error] [pid 1034096:tid 1034299] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.063666 2026] [core:error] [pid 1034096:tid 1034299] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.064322 2026] [core:error] [pid 1034096:tid 1034332] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.064334 2026] [core:error] [pid 1034096:tid 1034332] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.065319 2026] [autoindex:error] [pid 1028675:tid 1028846] [client 20.104.104.62:25036] AH01276: Cannot serve directory /home1/thrbikes/public_html/kevinhenley/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:07:45.075667 2026] [security2:error] [pid 1028675:tid 1028916] [client 52.139.37.240:63581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jobindjibouti.eastacare.com"] [uri "/gecko-new.php"] [unique_id "apK9gddHPfW2QFvhmL74UAAAAGo"]
[Sat Aug 29 05:07:45.097860 2026] [security2:error] [pid 1034096:tid 1034353] [client 20.63.81.20:20882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/dvve.php"] [unique_id "apK9gS04twRPFuquKD2XXAAAAOs"]
[Sat Aug 29 05:07:45.100321 2026] [security2:error] [pid 1028675:tid 1028720] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/var/www/.env"] [unique_id "apK9gddHPfW2QFvhmL74WAAAHic"]
[Sat Aug 29 05:07:45.100827 2026] [security2:error] [pid 1034096:tid 1034310] [client 4.205.62.107:56057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-blog.php"] [unique_id "apK9gS04twRPFuquKD2XXQAAAMA"]
[Sat Aug 29 05:07:45.102749 2026] [security2:error] [pid 1028675:tid 1028860] [client 158.23.147.79:30528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/x.php"] [unique_id "apK9gddHPfW2QFvhmL74WQAAADI"]
[Sat Aug 29 05:07:45.103002 2026] [core:error] [pid 1028675:tid 1028745] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.103015 2026] [core:error] [pid 1028675:tid 1028745] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.105571 2026] [core:error] [pid 1028675:tid 1028837] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.105588 2026] [core:error] [pid 1028675:tid 1028837] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.107677 2026] [core:error] [pid 1028675:tid 1028859] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.107697 2026] [core:error] [pid 1028675:tid 1028859] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.115633 2026] [security2:error] [pid 1034096:tid 1034265] [client 20.104.104.62:20706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-pop.php"] [unique_id "apK9gS04twRPFuquKD2XXwAAAJM"]
[Sat Aug 29 05:07:45.122766 2026] [security2:error] [pid 1028675:tid 1028894] [client 158.158.54.35:12035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/24.php"] [unique_id "apK9gddHPfW2QFvhmL74XgAAAFQ"]
[Sat Aug 29 05:07:45.130892 2026] [security2:error] [pid 1028675:tid 1028857] [client 20.104.104.62:25036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinhenley.com"] [uri "/wp-admin/js/index.php"] [unique_id "apK9gddHPfW2QFvhmL74YQAAAC8"]
[Sat Aug 29 05:07:45.134539 2026] [security2:error] [pid 1028675:tid 1028800] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/var/www/html/.env"] [unique_id "apK9gddHPfW2QFvhmL74YgAAf3c"]
[Sat Aug 29 05:07:45.149249 2026] [security2:error] [pid 1028675:tid 1028703] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/web/.env"] [unique_id "apK9gddHPfW2QFvhmL74ZgAAYhY"]
[Sat Aug 29 05:07:45.149790 2026] [core:error] [pid 1028675:tid 1028768] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.149810 2026] [core:error] [pid 1028675:tid 1028768] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.156479 2026] [security2:error] [pid 1028675:tid 1028849] [client 20.203.141.11:13322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-content/file.php"] [unique_id "apK9gddHPfW2QFvhmL74bAAAACc"]
[Sat Aug 29 05:07:45.157872 2026] [core:error] [pid 1028675:tid 1028737] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.157889 2026] [core:error] [pid 1028675:tid 1028737] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.158893 2026] [core:error] [pid 1028675:tid 1028683] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.158909 2026] [core:error] [pid 1028675:tid 1028683] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.159668 2026] [security2:error] [pid 1028675:tid 1028828] [client 213.209.159.223:52875] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/web/.env"] [unique_id "apK9gddHPfW2QFvhmL74bQAAABI"]
[Sat Aug 29 05:07:45.159854 2026] [security2:error] [pid 1028675:tid 1028821] [client 213.209.159.223:6687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.greatdecisionsofcharlevoix.com"] [uri "/phpinfo.php3"] [unique_id "apK9gddHPfW2QFvhmL74bgAAAAs"]
[Sat Aug 29 05:07:45.168067 2026] [security2:error] [pid 1028675:tid 1028811] [client 168.107.94.195:50563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9gddHPfW2QFvhmL74cQAAAAE"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:45.173075 2026] [core:error] [pid 1028675:tid 1028711] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.173096 2026] [core:error] [pid 1028675:tid 1028711] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.173598 2026] [core:error] [pid 1028675:tid 1028780] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.173617 2026] [core:error] [pid 1028675:tid 1028780] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.180636 2026] [security2:error] [pid 1028675:tid 1028858] [client 45.148.10.62:44782] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.wkm.vbd.mybluehost.me"] [uri "/.env.bak"] [unique_id "apK9gddHPfW2QFvhmL74dAAAADA"]
[Sat Aug 29 05:07:45.182916 2026] [core:error] [pid 1028675:tid 1028771] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.182939 2026] [core:error] [pid 1028675:tid 1028771] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.183115 2026] [core:error] [pid 1034096:tid 1034261] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.183128 2026] [core:error] [pid 1034096:tid 1034261] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.188561 2026] [autoindex:error] [pid 1028675:tid 1028691] [remote 87.58.197.202:56042] AH01276: Cannot serve directory /home3/krkimpla/public_html/kruegerimplants/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:07:45.200709 2026] [security2:error] [pid 1034096:tid 1034314] [client 20.151.200.44:63332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/x23.php"] [unique_id "apK9gS04twRPFuquKD2XZgAAAMQ"]
[Sat Aug 29 05:07:45.207743 2026] [security2:error] [pid 1034096:tid 1034311] [client 20.104.104.62:37596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/yyy.php"] [unique_id "apK9gS04twRPFuquKD2XZwAAAME"]
[Sat Aug 29 05:07:45.207829 2026] [security2:error] [pid 1028675:tid 1028866] [client 158.23.147.79:17420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-admin/admin.php"] [unique_id "apK9gddHPfW2QFvhmL74fwAAADg"]
[Sat Aug 29 05:07:45.209331 2026] [security2:error] [pid 1028675:tid 1028923] [client 20.104.104.62:27704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.johngibsondrawings.com"] [uri "/wp-content/plugins/about.php"] [unique_id "apK9gddHPfW2QFvhmL74fgAAAHE"]
[Sat Aug 29 05:07:45.228717 2026] [autoindex:error] [pid 1034096:tid 1034133] [remote 87.58.197.202:56048] AH01276: Cannot serve directory /home3/krkimpla/public_html/kruegerimplants/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:07:45.232091 2026] [core:error] [pid 1028675:tid 1028714] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.232113 2026] [core:error] [pid 1028675:tid 1028714] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.234067 2026] [security2:error] [pid 1028675:tid 1028825] [client 20.63.219.114:13892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-admin/user/f35.php"] [unique_id "apK9gddHPfW2QFvhmL74hAAAAA8"]
[Sat Aug 29 05:07:45.234565 2026] [security2:error] [pid 1028675:tid 1028909] [client 20.203.141.11:27692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/abcd.php"] [unique_id "apK9gddHPfW2QFvhmL74hQAAAGM"]
[Sat Aug 29 05:07:45.246944 2026] [security2:error] [pid 1034096:tid 1034295] [client 213.209.159.223:7089] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/wp-content/mysql.sql"] [unique_id "apK9gS04twRPFuquKD2XawAAALE"]
[Sat Aug 29 05:07:45.247993 2026] [security2:error] [pid 1028675:tid 1028928] [client 158.23.147.79:48386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK9gddHPfW2QFvhmL74iwAAAHY"]
[Sat Aug 29 05:07:45.248213 2026] [security2:error] [pid 1034096:tid 1034355] [client 213.209.159.223:9798] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/web/.env"] [unique_id "apK9gS04twRPFuquKD2XbAAAAO0"]
[Sat Aug 29 05:07:45.248393 2026] [security2:error] [pid 1034096:tid 1034281] [client 103.240.76.112:42656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK9gS04twRPFuquKD2XbQAAAKM"]
[Sat Aug 29 05:07:45.248512 2026] [security2:error] [pid 1034096:tid 1034281] [client 103.240.76.112:42656] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK9gS04twRPFuquKD2XbQAAAKM"]
[Sat Aug 29 05:07:45.255258 2026] [core:error] [pid 1034096:tid 1034316] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.255282 2026] [core:error] [pid 1034096:tid 1034316] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.259161 2026] [security2:error] [pid 1028675:tid 1028890] [client 20.63.81.20:20814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/doo.php"] [unique_id "apK9gddHPfW2QFvhmL74kQAAAFA"]
[Sat Aug 29 05:07:45.261699 2026] [core:error] [pid 1028675:tid 1028707] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.261727 2026] [core:error] [pid 1028675:tid 1028707] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.266013 2026] [core:error] [pid 1034096:tid 1034352] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.266033 2026] [core:error] [pid 1034096:tid 1034352] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.275109 2026] [security2:error] [pid 1034096:tid 1034361] [client 52.139.37.240:62262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jobindjibouti.eastacare.com"] [uri "/add_actualites.php"] [unique_id "apK9gS04twRPFuquKD2XcQAAAPM"]
[Sat Aug 29 05:07:45.279135 2026] [core:error] [pid 1028675:tid 1028931] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.279156 2026] [core:error] [pid 1028675:tid 1028931] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.279860 2026] [security2:error] [pid 1034096:tid 1034292] [client 52.139.37.240:32848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/cron.php"] [unique_id "apK9gS04twRPFuquKD2XcgAAAK4"]
[Sat Aug 29 05:07:45.289198 2026] [security2:error] [pid 1028675:tid 1028708] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/website/.env"] [unique_id "apK9gddHPfW2QFvhmL74mAAAFhs"]
[Sat Aug 29 05:07:45.291530 2026] [core:error] [pid 1028675:tid 1028833] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.291554 2026] [core:error] [pid 1028675:tid 1028833] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.296347 2026] [security2:error] [pid 1028675:tid 1028884] [client 213.209.159.223:52875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/phpinfo.php3"] [unique_id "apK9gddHPfW2QFvhmL74nwAAAEo"]
[Sat Aug 29 05:07:45.296666 2026] [core:error] [pid 1028675:tid 1028837] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.296677 2026] [core:error] [pid 1028675:tid 1028837] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.309040 2026] [security2:error] [pid 1028675:tid 1028748] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/wp-config.php"] [unique_id "apK9gddHPfW2QFvhmL74pgAAFkM"]
[Sat Aug 29 05:07:45.309412 2026] [security2:error] [pid 1028675:tid 1028748] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/wp-config.php.bak"] [unique_id "apK9gddHPfW2QFvhmL74pwAAFkM"]
[Sat Aug 29 05:07:45.309460 2026] [security2:error] [pid 1028675:tid 1028695] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/wp-config.php.new"] [unique_id "apK9gddHPfW2QFvhmL74qAAAFg8"]
[Sat Aug 29 05:07:45.313976 2026] [security2:error] [pid 1034096:tid 1034300] [client 20.104.104.62:20847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/marjan.php"] [unique_id "apK9gS04twRPFuquKD2XdAAAALY"]
[Sat Aug 29 05:07:45.325493 2026] [security2:error] [pid 1034096:tid 1034275] [client 20.104.49.130:55134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.danesquality.com"] [uri "/ws78.php"] [unique_id "apK9gS04twRPFuquKD2XdgAAAJ0"]
[Sat Aug 29 05:07:45.327954 2026] [core:error] [pid 1028675:tid 1028753] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.327972 2026] [core:error] [pid 1028675:tid 1028753] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.329588 2026] [security2:error] [pid 1028675:tid 1028875] [client 93.123.109.228:60860] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/s3/.env.bak"] [unique_id "apK9gddHPfW2QFvhmL74rAAAAEE"]
[Sat Aug 29 05:07:45.333732 2026] [security2:error] [pid 1028675:tid 1028736] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/wp-config.php.old"] [unique_id "apK9gddHPfW2QFvhmL74rwAAFjc"]
[Sat Aug 29 05:07:45.333943 2026] [security2:error] [pid 1028675:tid 1028845] [client 20.104.104.62:25033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinhenley.com"] [uri "/wp-admin/post.php"] [unique_id "apK9gddHPfW2QFvhmL74rgAAACM"]
[Sat Aug 29 05:07:45.339932 2026] [core:error] [pid 1028675:tid 1028900] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.339954 2026] [core:error] [pid 1028675:tid 1028900] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.346048 2026] [security2:error] [pid 1028675:tid 1028716] [remote 93.123.109.228:45864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/wp-content/mysql.sql"] [unique_id "apK9gddHPfW2QFvhmL74tAAAFiM"]
[Sat Aug 29 05:07:45.354917 2026] [security2:error] [pid 1034096:tid 1034309] [client 20.52.41.200:4556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/filemanager.php"] [unique_id "apK9gS04twRPFuquKD2XeQAAAL8"]
[Sat Aug 29 05:07:45.358945 2026] [core:error] [pid 1028675:tid 1028689] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.358971 2026] [core:error] [pid 1028675:tid 1028689] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.366095 2026] [security2:error] [pid 1034096:tid 1034323] [client 20.104.104.62:37575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/bgymj.php"] [unique_id "apK9gS04twRPFuquKD2XegAAAM0"]
[Sat Aug 29 05:07:45.386446 2026] [security2:error] [pid 1034096:tid 1034291] [client 213.209.159.223:9798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/phpinfo.php3"] [unique_id "apK9gS04twRPFuquKD2XfQAAAK0"]
[Sat Aug 29 05:07:45.390039 2026] [core:error] [pid 1028675:tid 1028718] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.390060 2026] [core:error] [pid 1028675:tid 1028718] [remote 93.123.109.228:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.394697 2026] [security2:error] [pid 1028675:tid 1028903] [client 45.148.10.62:44786] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ninjamover.com"] [uri "/.env"] [unique_id "apK9gddHPfW2QFvhmL74wQAAAF0"]
[Sat Aug 29 05:07:45.395543 2026] [security2:error] [pid 1028675:tid 1028896] [client 20.63.81.20:20965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/adminer-4.6.6.php"] [unique_id "apK9gddHPfW2QFvhmL74wgAAAFY"]
[Sat Aug 29 05:07:45.396300 2026] [security2:error] [pid 1028675:tid 1028907] [client 146.70.194.254:43562] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "modelbasenjis.com"] [uri "/cgi-sys/suspendedpage.cgi/sito/wp-includes/wlwmanifest.xml"] [unique_id "apK9gddHPfW2QFvhmL74wwAAAGE"]
[Sat Aug 29 05:07:45.399874 2026] [security2:error] [pid 1034096:tid 1034294] [client 20.48.250.41:35046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/amp.php"] [unique_id "apK9gS04twRPFuquKD2XgAAAALA"]
[Sat Aug 29 05:07:45.407343 2026] [security2:error] [pid 1028675:tid 1028892] [client 20.104.104.62:27648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.johngibsondrawings.com"] [uri "/wp-content/plugins/plugin/index.php"] [unique_id "apK9gddHPfW2QFvhmL74xQAAAFI"]
[Sat Aug 29 05:07:45.410101 2026] [security2:error] [pid 1028675:tid 1028926] [client 213.209.159.223:9118] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_whm/web/.env"] [unique_id "apK9gddHPfW2QFvhmL74xgAAAHQ"]
[Sat Aug 29 05:07:45.426001 2026] [security2:error] [pid 1034096:tid 1034354] [client 40.83.93.50:8707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/goods.php"] [unique_id "apK9gS04twRPFuquKD2XgwAAAOw"]
[Sat Aug 29 05:07:45.462604 2026] [security2:error] [pid 1028675:tid 1028928] [client 158.23.147.79:26580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-content/index.php"] [unique_id "apK9gddHPfW2QFvhmL741gAAAHY"]
[Sat Aug 29 05:07:45.463264 2026] [security2:error] [pid 1028675:tid 1028898] [client 93.123.109.228:42132] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/server/.env"] [unique_id "apK9gddHPfW2QFvhmL741QAAAFg"]
[Sat Aug 29 05:07:45.464787 2026] [security2:error] [pid 1028675:tid 1028851] [client 158.23.147.79:11384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9gddHPfW2QFvhmL741wAAACk"]
[Sat Aug 29 05:07:45.467166 2026] [security2:error] [pid 1034096:tid 1034296] [client 52.139.37.240:63578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jobindjibouti.eastacare.com"] [uri "/browse.php"] [unique_id "apK9gS04twRPFuquKD2XhwAAALI"]
[Sat Aug 29 05:07:45.470686 2026] [security2:error] [pid 1028675:tid 1028916] [client 93.123.109.228:42146] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/server/api/.env"] [unique_id "apK9gddHPfW2QFvhmL742AAAAGo"]
[Sat Aug 29 05:07:45.484662 2026] [security2:error] [pid 1028675:tid 1028931] [client 93.123.109.228:60860] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/server/backend/.env"] [unique_id "apK9gddHPfW2QFvhmL744AAAAHk"]
[Sat Aug 29 05:07:45.486013 2026] [core:error] [pid 1034096:tid 1034266] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.486027 2026] [core:error] [pid 1034096:tid 1034266] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:45.515298 2026] [security2:error] [pid 1028675:tid 1028909] [client 52.139.37.240:32851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/wp-2019.php"] [unique_id "apK9gddHPfW2QFvhmL745QAAAGM"]
[Sat Aug 29 05:07:45.520587 2026] [security2:error] [pid 1034096:tid 1034329] [client 20.48.250.41:49045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/cc13.php"] [unique_id "apK9gS04twRPFuquKD2XkQAAANM"]
[Sat Aug 29 05:07:45.522967 2026] [security2:error] [pid 1034096:tid 1034263] [client 158.23.147.79:25526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-l0gin.php"] [unique_id "apK9gS04twRPFuquKD2XkgAAAJE"]
[Sat Aug 29 05:07:45.531841 2026] [security2:error] [pid 1028675:tid 1028918] [client 20.104.104.62:24720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinhenley.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK9gddHPfW2QFvhmL745wAAAGw"]
[Sat Aug 29 05:07:45.534933 2026] [security2:error] [pid 1028675:tid 1028833] [client 20.48.250.41:65305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/bzjdlofz.php"] [unique_id "apK9gddHPfW2QFvhmL746QAAABc"]
[Sat Aug 29 05:07:45.536583 2026] [security2:error] [pid 1028675:tid 1028840] [client 20.63.81.20:20807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/gelap1.php"] [unique_id "apK9gddHPfW2QFvhmL746gAAAB4"]
[Sat Aug 29 05:07:45.546997 2026] [security2:error] [pid 1028675:tid 1028884] [client 213.209.159.223:9118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/phpinfo.php3"] [unique_id "apK9gddHPfW2QFvhmL747QAAAEo"]
[Sat Aug 29 05:07:45.552167 2026] [security2:error] [pid 1034096:tid 1034288] [client 20.104.104.62:48056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/fh26.php"] [unique_id "apK9gS04twRPFuquKD2XlAAAAKo"]
[Sat Aug 29 05:07:45.554067 2026] [security2:error] [pid 1028675:tid 1028920] [client 168.107.94.195:50940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9gddHPfW2QFvhmL747gAAAG4"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:45.582258 2026] [security2:error] [pid 1034096:tid 1034318] [client 4.205.62.107:22525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/lm15.php"] [unique_id "apK9gS04twRPFuquKD2XmAAAAMg"]
[Sat Aug 29 05:07:45.587973 2026] [security2:error] [pid 1034096:tid 1034283] [client 52.139.37.240:56108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/ahax.php"] [unique_id "apK9gS04twRPFuquKD2XmQAAAKU"]
[Sat Aug 29 05:07:45.589205 2026] [security2:error] [pid 1034096:tid 1034296] [client 20.63.219.114:4240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-admin/user/min.php"] [unique_id "apK9gS04twRPFuquKD2XmgAAALI"]
[Sat Aug 29 05:07:45.607942 2026] [security2:error] [pid 1034096:tid 1034371] [client 103.168.67.159:60204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 159.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "naturalkneads.com"] [uri "/wp/index.php"] [unique_id "apK9gS04twRPFuquKD2XnQAAAP0"], referer: https://naturalkneads.com/wp/wp-admin/
[Sat Aug 29 05:07:45.608947 2026] [security2:error] [pid 1034096:tid 1034306] [client 20.104.104.62:27701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.johngibsondrawings.com"] [uri "/wp-content/uploads/index.php/wp-includes/Text/"] [unique_id "apK9gS04twRPFuquKD2XngAAALw"]
[Sat Aug 29 05:07:45.613760 2026] [security2:error] [pid 1028675:tid 1028932] [client 93.123.109.228:42132] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/service/.env"] [unique_id "apK9gddHPfW2QFvhmL75AAAAAHo"]
[Sat Aug 29 05:07:45.619505 2026] [security2:error] [pid 1028675:tid 1028911] [client 93.123.109.228:42192] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/services/.env"] [unique_id "apK9gddHPfW2QFvhmL75AQAAAGU"]
[Sat Aug 29 05:07:45.620211 2026] [security2:error] [pid 1028675:tid 1028890] [client 20.203.141.11:45450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/files.php"] [unique_id "apK9gddHPfW2QFvhmL75AwAAAFA"]
[Sat Aug 29 05:07:45.624523 2026] [security2:error] [pid 1028675:tid 1028821] [client 128.90.161.20:60070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.161.90.128.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "greenfieldparts.greenfieldstone.com"] [uri "/wp-login.php"] [unique_id "apK9gddHPfW2QFvhmL75BQAAAAs"]
[Sat Aug 29 05:07:45.636083 2026] [security2:error] [pid 1028675:tid 1028870] [client 20.48.250.41:35109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/cc13.php"] [unique_id "apK9gddHPfW2QFvhmL75DQAAADw"]
[Sat Aug 29 05:07:45.652563 2026] [security2:error] [pid 1034096:tid 1034299] [client 213.209.159.223:7089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/php-info.php"] [unique_id "apK9gS04twRPFuquKD2XoQAAALU"]
[Sat Aug 29 05:07:45.659946 2026] [security2:error] [pid 1034096:tid 1034321] [client 20.48.250.41:48990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/aa.php"] [unique_id "apK9gS04twRPFuquKD2XogAAAMs"]
[Sat Aug 29 05:07:45.663946 2026] [security2:error] [pid 1034096:tid 1034279] [client 52.139.37.240:63592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jobindjibouti.eastacare.com"] [uri "/contentloader1.php"] [unique_id "apK9gS04twRPFuquKD2XowAAAKE"]
[Sat Aug 29 05:07:45.669178 2026] [security2:error] [pid 1034096:tid 1034378] [client 158.23.147.79:35214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/about.php"] [unique_id "apK9gS04twRPFuquKD2XpQAAAQQ"]
[Sat Aug 29 05:07:45.679949 2026] [security2:error] [pid 1034096:tid 1034265] [client 93.123.109.228:42186] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/shared/.env"] [unique_id "apK9gS04twRPFuquKD2XpwAAAJM"]
[Sat Aug 29 05:07:45.682824 2026] [security2:error] [pid 1028675:tid 1028917] [client 4.205.62.107:26672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/setup-config.php"] [unique_id "apK9gddHPfW2QFvhmL75FwAAAGs"]
[Sat Aug 29 05:07:45.685241 2026] [security2:error] [pid 1028675:tid 1028888] [client 20.63.81.20:20766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/rsjlrria.php"] [unique_id "apK9gddHPfW2QFvhmL75GAAAAE4"]
[Sat Aug 29 05:07:45.695023 2026] [security2:error] [pid 1028675:tid 1028904] [client 93.123.109.228:60688] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/shop/.env"] [unique_id "apK9gddHPfW2QFvhmL75GgAAAF4"]
[Sat Aug 29 05:07:45.695984 2026] [security2:error] [pid 1028675:tid 1028811] [client 93.123.109.228:42310] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK9gddHPfW2QFvhmL75GwAAAAE"]
[Sat Aug 29 05:07:45.696538 2026] [security2:error] [pid 1028675:tid 1028855] [client 20.203.141.11:22277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-access.php"] [unique_id "apK9gddHPfW2QFvhmL75HAAAAC0"]
[Sat Aug 29 05:07:45.702993 2026] [security2:error] [pid 1034096:tid 1034252] [client 93.123.109.228:42254] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK9gS04twRPFuquKD2XrAAAAIY"]
[Sat Aug 29 05:07:45.714470 2026] [security2:error] [pid 1034096:tid 1034302] [client 4.205.62.107:58405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/brc.php"] [unique_id "apK9gS04twRPFuquKD2XrgAAALg"]
[Sat Aug 29 05:07:45.719041 2026] [security2:error] [pid 1034096:tid 1034293] [client 52.139.37.240:32874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/gecko-new.php"] [unique_id "apK9gS04twRPFuquKD2XrwAAAK8"]
[Sat Aug 29 05:07:45.725892 2026] [security2:error] [pid 1028675:tid 1028925] [client 20.104.104.62:37598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/fgd.php"] [unique_id "apK9gddHPfW2QFvhmL75IgAAAHM"]
[Sat Aug 29 05:07:45.733860 2026] [security2:error] [pid 1034096:tid 1034340] [client 158.158.54.35:12977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK9gS04twRPFuquKD2XsQAAAN4"]
[Sat Aug 29 05:07:45.733860 2026] [security2:error] [pid 1028675:tid 1028902] [client 20.104.104.62:24708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinhenley.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "apK9gddHPfW2QFvhmL75JQAAAFw"]
[Sat Aug 29 05:07:45.742088 2026] [security2:error] [pid 1034096:tid 1034314] [client 20.48.250.41:65305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/selesai.php"] [unique_id "apK9gS04twRPFuquKD2XswAAAMQ"]
[Sat Aug 29 05:07:45.761379 2026] [security2:error] [pid 1028675:tid 1028916] [client 93.123.109.228:42350] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(\\\\/\\\\*\\\\!? ?(?:select|grant|delete|insert|drop|alter|replace|truncate|update|create|rename|describe|union|concat|group_concat))" at REQUEST_FILENAME. [file "/opt/mod_security/hg_rules.conf"] [line "1019"] [id "9000042"] [rev "2.2.2"] [msg "SQL Comment Sequence Detected."] [data "/*update"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/*update.cgi*"] [unique_id "apK9gddHPfW2QFvhmL75MAAAAGo"]
[Sat Aug 29 05:07:45.776832 2026] [security2:error] [pid 1028675:tid 1028839] [client 93.123.109.228:42192] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/src/.env"] [unique_id "apK9gddHPfW2QFvhmL75MwAAAB0"]
[Sat Aug 29 05:07:45.783174 2026] [security2:error] [pid 1034096:tid 1034261] [client 52.139.37.240:16757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/breads1.php"] [unique_id "apK9gS04twRPFuquKD2XtwAAAI8"]
[Sat Aug 29 05:07:45.811891 2026] [security2:error] [pid 1028675:tid 1028887] [client 20.52.41.200:4549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-content/themes/admin.php"] [unique_id "apK9gddHPfW2QFvhmL75RAAAAE0"]
[Sat Aug 29 05:07:45.821213 2026] [security2:error] [pid 1028675:tid 1028886] [client 20.63.81.20:20834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/AxAo.php"] [unique_id "apK9gddHPfW2QFvhmL75RQAAAEw"]
[Sat Aug 29 05:07:45.849422 2026] [security2:error] [pid 1034096:tid 1034361] [client 93.123.109.228:42270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/.env"] [unique_id "apK9gS04twRPFuquKD2XugAAAPM"]
[Sat Aug 29 05:07:45.860336 2026] [security2:error] [pid 1028675:tid 1028878] [client 52.139.37.240:63560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jobindjibouti.eastacare.com"] [uri "/upfile.php"] [unique_id "apK9gddHPfW2QFvhmL75UAAAAEQ"]
[Sat Aug 29 05:07:45.866634 2026] [security2:error] [pid 1028675:tid 1028910] [client 4.205.62.107:22070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/xmy.php"] [unique_id "apK9gddHPfW2QFvhmL75UwAAAGQ"]
[Sat Aug 29 05:07:45.868721 2026] [security2:error] [pid 1028675:tid 1028932] [client 20.104.104.62:37586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/inject.php"] [unique_id "apK9gddHPfW2QFvhmL75VQAAAHo"]
[Sat Aug 29 05:07:45.870391 2026] [security2:error] [pid 1034096:tid 1034292] [client 93.123.109.228:42254] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/laravel/app/.env"] [unique_id "apK9gS04twRPFuquKD2XuwAAAK4"]
[Sat Aug 29 05:07:45.871520 2026] [security2:error] [pid 1028675:tid 1028819] [client 20.48.250.41:49110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/s1.php"] [unique_id "apK9gddHPfW2QFvhmL75VwAAAAk"]
[Sat Aug 29 05:07:45.880841 2026] [security2:error] [pid 1028675:tid 1028911] [client 4.205.62.107:8752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/u88.php"] [unique_id "apK9gddHPfW2QFvhmL75WAAAAGU"]
[Sat Aug 29 05:07:45.889338 2026] [security2:error] [pid 1034096:tid 1034300] [client 40.83.93.50:13953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/post.php"] [unique_id "apK9gS04twRPFuquKD2XvAAAALY"]
[Sat Aug 29 05:07:45.910658 2026] [security2:error] [pid 1028675:tid 1028883] [client 213.209.159.223:8318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/info.php.bak"] [unique_id "apK9gddHPfW2QFvhmL75XgAAAEk"]
[Sat Aug 29 05:07:45.916088 2026] [security2:error] [pid 1028675:tid 1028820] [client 93.123.109.228:42336] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK9gddHPfW2QFvhmL75XwAAAAo"]
[Sat Aug 29 05:07:45.929960 2026] [security2:error] [pid 1028675:tid 1028879] [client 40.83.93.50:8235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/hehe.php"] [unique_id "apK9gddHPfW2QFvhmL75ZAAAAEU"]
[Sat Aug 29 05:07:45.932531 2026] [security2:error] [pid 1028675:tid 1028847] [client 20.104.104.62:24745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinhenley.com"] [uri "/wp-content/uploads/system_core.php"] [unique_id "apK9gddHPfW2QFvhmL75ZQAAACU"]
[Sat Aug 29 05:07:45.932616 2026] [security2:error] [pid 1028675:tid 1028888] [client 93.123.109.228:42192] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/srv/.env"] [unique_id "apK9gddHPfW2QFvhmL75YwAAAE4"]
[Sat Aug 29 05:07:45.934975 2026] [security2:error] [pid 1034096:tid 1034350] [client 168.107.94.195:51328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9gS04twRPFuquKD2XwQAAAOg"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:45.936021 2026] [security2:error] [pid 1028675:tid 1028923] [client 52.139.37.240:33551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/add_actualites.php"] [unique_id "apK9gddHPfW2QFvhmL75ZgAAAHE"]
[Sat Aug 29 05:07:45.949752 2026] [security2:error] [pid 1028675:tid 1028823] [client 93.123.109.228:60790] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/stage/.env"] [unique_id "apK9gddHPfW2QFvhmL75aAAAAA0"]
[Sat Aug 29 05:07:45.951132 2026] [security2:error] [pid 1028675:tid 1028920] [client 20.63.219.114:16061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-admin/users.php"] [unique_id "apK9gddHPfW2QFvhmL75bAAAAG4"]
[Sat Aug 29 05:07:45.952351 2026] [security2:error] [pid 1028675:tid 1028814] [client 93.123.109.228:42384] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/.env.bak"] [unique_id "apK9gddHPfW2QFvhmL75awAAAAQ"]
[Sat Aug 29 05:07:45.952378 2026] [security2:error] [pid 1034096:tid 1034259] [client 93.123.109.228:42324] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/.env.backup"] [unique_id "apK9gS04twRPFuquKD2XwwAAAI0"]
[Sat Aug 29 05:07:45.954315 2026] [security2:error] [pid 1034096:tid 1034367] [client 20.48.250.41:35336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/aa.php"] [unique_id "apK9gS04twRPFuquKD2XxAAAAPk"]
[Sat Aug 29 05:07:45.959734 2026] [security2:error] [pid 1028675:tid 1028815] [client 20.63.81.20:20776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/class17.php"] [unique_id "apK9gddHPfW2QFvhmL75cQAAAAU"]
[Sat Aug 29 05:07:45.961196 2026] [security2:error] [pid 1028675:tid 1028902] [client 45.148.10.62:44786] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ninjamover.com"] [uri "/.env"] [unique_id "apK9gddHPfW2QFvhmL75cwAAAFw"]
[Sat Aug 29 05:07:45.961219 2026] [security2:error] [pid 1028675:tid 1028907] [client 20.104.104.62:20693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/on.php"] [unique_id "apK9gddHPfW2QFvhmL75dAAAAGE"]
[Sat Aug 29 05:07:45.961576 2026] [security2:error] [pid 1028675:tid 1028877] [client 93.123.109.228:42204] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/staging/.env"] [unique_id "apK9gddHPfW2QFvhmL75cgAAAEM"]
[Sat Aug 29 05:07:45.981131 2026] [security2:error] [pid 1028675:tid 1028862] [client 20.151.200.44:46606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/sadis.php"] [unique_id "apK9gddHPfW2QFvhmL75egAAADQ"]
[Sat Aug 29 05:07:45.981870 2026] [security2:error] [pid 1034096:tid 1034346] [client 52.139.37.240:16746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/must.php"] [unique_id "apK9gS04twRPFuquKD2XxwAAAOQ"]
[Sat Aug 29 05:07:46.004208 2026] [security2:error] [pid 1028675:tid 1028849] [client 20.104.104.62:48027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/mga.php"] [unique_id "apK9gtdHPfW2QFvhmL75ewAAACc"]
[Sat Aug 29 05:07:46.022758 2026] [security2:error] [pid 1034096:tid 1034354] [client 93.123.109.228:42186] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/stg/.env"] [unique_id "apK9gi04twRPFuquKD2XywAAAOw"]
[Sat Aug 29 05:07:46.048535 2026] [security2:error] [pid 1028675:tid 1028894] [client 40.83.93.50:8731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/flower.php"] [unique_id "apK9gtdHPfW2QFvhmL75kAAAAFQ"]
[Sat Aug 29 05:07:46.055935 2026] [security2:error] [pid 1028675:tid 1028846] [client 52.139.37.240:62236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jobindjibouti.eastacare.com"] [uri "/form.php"] [unique_id "apK9gtdHPfW2QFvhmL75kgAAACQ"]
[Sat Aug 29 05:07:46.060186 2026] [security2:error] [pid 1028675:tid 1028791] [remote 93.123.109.228:46162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flowerfh.com"] [uri "/config.php"] [unique_id "apK9gtdHPfW2QFvhmL75kwAAIW4"]
[Sat Aug 29 05:07:46.068126 2026] [security2:error] [pid 1028675:tid 1028918] [client 45.148.10.62:44782] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.wkm.vbd.mybluehost.me"] [uri "/stripe/.env"] [unique_id "apK9gtdHPfW2QFvhmL75lAAAAGw"]
[Sat Aug 29 05:07:46.084172 2026] [security2:error] [pid 1028675:tid 1028880] [client 20.203.141.11:17963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/o.php"] [unique_id "apK9gtdHPfW2QFvhmL75mAAAAEY"]
[Sat Aug 29 05:07:46.100858 2026] [security2:error] [pid 1034096:tid 1034268] [client 20.63.81.20:20802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/okxoby.php"] [unique_id "apK9gi04twRPFuquKD2X0gAAAJY"]
[Sat Aug 29 05:07:46.103593 2026] [security2:error] [pid 1028675:tid 1028816] [client 93.123.109.228:42384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/.env.php"] [unique_id "apK9gtdHPfW2QFvhmL75nAAAAAY"]
[Sat Aug 29 05:07:46.104210 2026] [security2:error] [pid 1034096:tid 1034267] [client 93.123.109.228:42324] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/.env.old"] [unique_id "apK9gi04twRPFuquKD2X0wAAAJU"]
[Sat Aug 29 05:07:46.111862 2026] [security2:error] [pid 1028675:tid 1028897] [client 20.104.104.62:27653] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.johngibsondrawings.com"] [uri "/1.php"] [unique_id "apK9gtdHPfW2QFvhmL75nwAAAFc"]
[Sat Aug 29 05:07:46.111982 2026] [security2:error] [pid 1028675:tid 1028897] [client 20.104.104.62:27653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.johngibsondrawings.com"] [uri "/1.php"] [unique_id "apK9gtdHPfW2QFvhmL75nwAAAFc"]
[Sat Aug 29 05:07:46.136611 2026] [security2:error] [pid 1028675:tid 1028878] [client 20.104.104.62:24707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinhenley.com"] [uri "/wp-content/uploads/users.php"] [unique_id "apK9gtdHPfW2QFvhmL75qAAAAEQ"]
[Sat Aug 29 05:07:46.139825 2026] [security2:error] [pid 1028675:tid 1028857] [client 52.139.37.240:33598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/browse.php"] [unique_id "apK9gtdHPfW2QFvhmL75qQAAAC8"]
[Sat Aug 29 05:07:46.155164 2026] [security2:error] [pid 1028675:tid 1028903] [client 158.23.147.79:32695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-blog-header.php"] [unique_id "apK9gtdHPfW2QFvhmL75rQAAAF0"]
[Sat Aug 29 05:07:46.163663 2026] [security2:error] [pid 1034096:tid 1034271] [client 20.203.141.11:12487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-content/uploads/min.php"] [unique_id "apK9gi04twRPFuquKD2X1gAAAJk"]
[Sat Aug 29 05:07:46.166028 2026] [security2:error] [pid 1028675:tid 1028888] [client 93.123.109.228:60790] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/stripe/.env"] [unique_id "apK9gtdHPfW2QFvhmL75sQAAAE4"]
[Sat Aug 29 05:07:46.170992 2026] [security2:error] [pid 1034096:tid 1034342] [client 20.104.104.62:48046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/inwp.php"] [unique_id "apK9gi04twRPFuquKD2X1wAAAOA"]
[Sat Aug 29 05:07:46.190843 2026] [security2:error] [pid 1034096:tid 1034319] [client 213.209.159.223:14796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/phpinfo.php.bak"] [unique_id "apK9gi04twRPFuquKD2X2gAAAMk"]
[Sat Aug 29 05:07:46.195857 2026] [security2:error] [pid 1028675:tid 1028935] [client 52.139.37.240:16736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/up.php"] [unique_id "apK9gtdHPfW2QFvhmL75twAAAH0"]
[Sat Aug 29 05:07:46.207607 2026] [security2:error] [pid 1034096:tid 1034278] [client 93.123.109.228:42270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/.env.swp"] [unique_id "apK9gi04twRPFuquKD2X3QAAAKA"]
[Sat Aug 29 05:07:46.227085 2026] [security2:error] [pid 1028675:tid 1028907] [client 158.23.147.79:6099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9gtdHPfW2QFvhmL75vwAAAGE"]
[Sat Aug 29 05:07:46.246871 2026] [security2:error] [pid 1028675:tid 1028908] [client 20.63.81.20:20826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/esuutzzx.php"] [unique_id "apK9gtdHPfW2QFvhmL75wwAAAGI"]
[Sat Aug 29 05:07:46.247527 2026] [security2:error] [pid 1028675:tid 1028837] [client 93.123.109.228:42398] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/.env~"] [unique_id "apK9gtdHPfW2QFvhmL75wgAAABs"]
[Sat Aug 29 05:07:46.254418 2026] [security2:error] [pid 1034096:tid 1034257] [client 4.205.62.107:53288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/erty.php"] [unique_id "apK9gi04twRPFuquKD2X4wAAAIs"]
[Sat Aug 29 05:07:46.256756 2026] [security2:error] [pid 1034096:tid 1034260] [client 93.123.109.228:42220] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/terraform.tfstate.backup"] [unique_id "apK9gi04twRPFuquKD2X4gAAAI4"]
[Sat Aug 29 05:07:46.257221 2026] [security2:error] [pid 1028675:tid 1028937] [client 52.139.37.240:62238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jobindjibouti.eastacare.com"] [uri "/wp-sigunq.php"] [unique_id "apK9gtdHPfW2QFvhmL75xgAAAH8"]
[Sat Aug 29 05:07:46.273589 2026] [security2:error] [pid 1028675:tid 1028927] [client 20.52.41.200:5336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-admin/css/admin.php"] [unique_id "apK9gtdHPfW2QFvhmL75yQAAAHU"]
[Sat Aug 29 05:07:46.276988 2026] [security2:error] [pid 1028675:tid 1028794] [remote 93.123.109.228:46162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flowerfh.com"] [uri "/config/aws.php"] [unique_id "apK9gtdHPfW2QFvhmL75ygAAIXE"]
[Sat Aug 29 05:07:46.284812 2026] [security2:error] [pid 1028675:tid 1028928] [client 60.243.207.176:64580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK9gtdHPfW2QFvhmL75zwAAAHY"]
[Sat Aug 29 05:07:46.284919 2026] [security2:error] [pid 1028675:tid 1028928] [client 60.243.207.176:64580] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK9gtdHPfW2QFvhmL75zwAAAHY"]
[Sat Aug 29 05:07:46.287157 2026] [security2:error] [pid 1028675:tid 1028815] [client 52.139.37.240:37757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK9gtdHPfW2QFvhmL751AAAAAU"]
[Sat Aug 29 05:07:46.303339 2026] [security2:error] [pid 1028675:tid 1028694] [remote 93.123.109.228:46162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flowerfh.com"] [uri "/config/config.inc.php"] [unique_id "apK9gtdHPfW2QFvhmL752wAAIQ4"]
[Sat Aug 29 05:07:46.313117 2026] [security2:error] [pid 1028675:tid 1028931] [client 93.123.109.228:42156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/test.php"] [unique_id "apK9gtdHPfW2QFvhmL753AAAAHk"]
[Sat Aug 29 05:07:46.314847 2026] [security2:error] [pid 1028675:tid 1028811] [client 20.63.219.114:13907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-admin/wp-cron.php"] [unique_id "apK9gtdHPfW2QFvhmL753QAAAAE"]
[Sat Aug 29 05:07:46.316435 2026] [security2:error] [pid 1034096:tid 1034370] [client 20.104.104.62:27703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.johngibsondrawings.com"] [uri "/admin/function.php"] [unique_id "apK9gi04twRPFuquKD2X8AAAAPw"]
[Sat Aug 29 05:07:46.318296 2026] [security2:error] [pid 1028675:tid 1028887] [client 168.107.94.195:51868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9gtdHPfW2QFvhmL753gAAAE0"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:46.336947 2026] [security2:error] [pid 1028675:tid 1028886] [client 158.23.147.79:53159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK9gtdHPfW2QFvhmL755AAAAEw"]
[Sat Aug 29 05:07:46.338138 2026] [security2:error] [pid 1028675:tid 1028936] [client 20.104.104.62:24753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinhenley.com"] [uri "/wp-content/wp-conflg.php"] [unique_id "apK9gtdHPfW2QFvhmL755wAAAH4"]
[Sat Aug 29 05:07:46.349999 2026] [security2:error] [pid 1034096:tid 1034332] [client 158.23.147.79:48155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK9gi04twRPFuquKD2X9QAAANY"]
[Sat Aug 29 05:07:46.361980 2026] [security2:error] [pid 1028675:tid 1028880] [client 93.123.109.228:42310] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.bak"] [unique_id "apK9gtdHPfW2QFvhmL758wAAAEY"]
[Sat Aug 29 05:07:46.364507 2026] [security2:error] [pid 1028675:tid 1028803] [remote 93.123.109.228:46162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flowerfh.com"] [uri "/config/config.php"] [unique_id "apK9gtdHPfW2QFvhmL759wAAIXo"]
[Sat Aug 29 05:07:46.366241 2026] [security2:error] [pid 1034096:tid 1034308] [client 93.123.109.228:42270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.old"] [unique_id "apK9gi04twRPFuquKD2X9wAAAL4"]
[Sat Aug 29 05:07:46.367536 2026] [security2:error] [pid 1028675:tid 1028819] [client 93.123.109.228:42206] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/test/.env"] [unique_id "apK9gtdHPfW2QFvhmL75-AAAAAk"]
[Sat Aug 29 05:07:46.395437 2026] [security2:error] [pid 1028675:tid 1028820] [client 20.104.104.62:40200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/mari.php"] [unique_id "apK9gtdHPfW2QFvhmL75_wAAAAo"]
[Sat Aug 29 05:07:46.400510 2026] [security2:error] [pid 1028675:tid 1028872] [client 93.123.109.228:42204] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/user/.env"] [unique_id "apK9gtdHPfW2QFvhmL76AgAAAD4"]
[Sat Aug 29 05:07:46.402598 2026] [security2:error] [pid 1028675:tid 1028878] [client 93.123.109.228:42400] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config~"] [unique_id "apK9gtdHPfW2QFvhmL76BAAAAEQ"]
[Sat Aug 29 05:07:46.404304 2026] [security2:error] [pid 1028675:tid 1028926] [client 40.83.93.50:8727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/wp-admin/class-db.php"] [unique_id "apK9gtdHPfW2QFvhmL76BQAAAHQ"]
[Sat Aug 29 05:07:46.406891 2026] [security2:error] [pid 1028675:tid 1028910] [client 20.63.81.20:20957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/replace.php"] [unique_id "apK9gtdHPfW2QFvhmL76BgAAAGQ"]
[Sat Aug 29 05:07:46.417268 2026] [security2:error] [pid 1028675:tid 1028835] [client 93.123.109.228:60688] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/v1/.env"] [unique_id "apK9gtdHPfW2QFvhmL76CAAAABk"]
[Sat Aug 29 05:07:46.432341 2026] [security2:error] [pid 1028675:tid 1028739] [remote 93.123.109.228:46162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flowerfh.com"] [uri "/config/env.php"] [unique_id "apK9gtdHPfW2QFvhmL76CgAAITo"]
[Sat Aug 29 05:07:46.434921 2026] [security2:error] [pid 1034096:tid 1034362] [client 20.104.104.62:37592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/ad1.php"] [unique_id "apK9gi04twRPFuquKD2X_AAAAPQ"]
[Sat Aug 29 05:07:46.443460 2026] [security2:error] [pid 1028675:tid 1028935] [client 93.123.109.228:42132] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/v2/.env"] [unique_id "apK9gtdHPfW2QFvhmL76DAAAAH0"]
[Sat Aug 29 05:07:46.453756 2026] [security2:error] [pid 1028675:tid 1028717] [remote 93.123.109.228:46162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flowerfh.com"] [uri "/config/module.config.php"] [unique_id "apK9gtdHPfW2QFvhmL76DwAAISQ"]
[Sat Aug 29 05:07:46.455840 2026] [security2:error] [pid 1028675:tid 1028804] [remote 93.123.109.228:46036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flicklister.com"] [uri "/test.php"] [unique_id "apK9gtdHPfW2QFvhmL76EAAAQns"]
[Sat Aug 29 05:07:46.456046 2026] [security2:error] [pid 1028675:tid 1028786] [remote 93.123.109.228:46162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flowerfh.com"] [uri "/config/nexmo.php"] [unique_id "apK9gtdHPfW2QFvhmL76EQAAIWk"]
[Sat Aug 29 05:07:46.463297 2026] [security2:error] [pid 1034096:tid 1034343] [client 213.209.159.223:39156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/info.php.bak"] [unique_id "apK9gi04twRPFuquKD2X_gAAAOE"]
[Sat Aug 29 05:07:46.463807 2026] [security2:error] [pid 1028675:tid 1028823] [client 20.104.49.130:63615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/3.php"] [unique_id "apK9gtdHPfW2QFvhmL76FQAAAA0"]
[Sat Aug 29 05:07:46.473793 2026] [security2:error] [pid 1028675:tid 1028907] [client 93.123.109.228:60888] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/v3/.env"] [unique_id "apK9gtdHPfW2QFvhmL76FwAAAGE"]
[Sat Aug 29 05:07:46.491882 2026] [security2:error] [pid 1028675:tid 1028837] [client 158.158.54.35:12991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK9gtdHPfW2QFvhmL76GwAAABs"]
[Sat Aug 29 05:07:46.516613 2026] [security2:error] [pid 1028675:tid 1028839] [client 40.83.93.50:11575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/meta.php"] [unique_id "apK9gtdHPfW2QFvhmL76IgAAAB0"]
[Sat Aug 29 05:07:46.517112 2026] [security2:error] [pid 1028675:tid 1028909] [client 20.104.104.62:27665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.johngibsondrawings.com"] [uri "/autoload_classmap.php"] [unique_id "apK9gtdHPfW2QFvhmL76IwAAAGM"]
[Sat Aug 29 05:07:46.531335 2026] [security2:error] [pid 1028675:tid 1028914] [client 20.104.104.62:24739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinhenley.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK9gtdHPfW2QFvhmL76KAAAAGg"]
[Sat Aug 29 05:07:46.556278 2026] [security2:error] [pid 1034096:tid 1034321] [client 20.203.141.11:10013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/file2.php"] [unique_id "apK9gi04twRPFuquKD2YDQAAAMs"]
[Sat Aug 29 05:07:46.558696 2026] [security2:error] [pid 1028675:tid 1028862] [client 20.63.81.20:20815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/gulu.php"] [unique_id "apK9gtdHPfW2QFvhmL76LgAAADQ"]
[Sat Aug 29 05:07:46.561942 2026] [security2:error] [pid 1028675:tid 1028795] [remote 93.123.109.228:46162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flowerfh.com"] [uri "/config/stripe.php"] [unique_id "apK9gtdHPfW2QFvhmL76MQAAUnI"]
[Sat Aug 29 05:07:46.629620 2026] [security2:error] [pid 1034096:tid 1034355] [client 158.23.147.79:25360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK9gi04twRPFuquKD2YEQAAAO0"]
[Sat Aug 29 05:07:46.652556 2026] [security2:error] [pid 1028675:tid 1028884] [client 103.171.189.88:59604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9gtdHPfW2QFvhmL76SgAAAEo"]
[Sat Aug 29 05:07:46.652699 2026] [security2:error] [pid 1028675:tid 1028884] [client 103.171.189.88:59604] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9gtdHPfW2QFvhmL76SgAAAEo"]
[Sat Aug 29 05:07:46.653937 2026] [security2:error] [pid 1028675:tid 1028848] [client 20.104.104.62:37583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/1vbqo.php"] [unique_id "apK9gtdHPfW2QFvhmL76SwAAACY"]
[Sat Aug 29 05:07:46.661963 2026] [security2:error] [pid 1034096:tid 1034256] [client 20.203.141.11:12489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK9gi04twRPFuquKD2YFQAAAIo"]
[Sat Aug 29 05:07:46.687481 2026] [security2:error] [pid 1028675:tid 1028898] [client 45.148.10.62:44782] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.wkm.vbd.mybluehost.me"] [uri "/backend/.env"] [unique_id "apK9gtdHPfW2QFvhmL76VAAAAFg"]
[Sat Aug 29 05:07:46.691259 2026] [security2:error] [pid 1034096:tid 1034316] [client 20.63.81.20:20957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/gtghklk.php"] [unique_id "apK9gi04twRPFuquKD2YGAAAAMY"]
[Sat Aug 29 05:07:46.700147 2026] [security2:error] [pid 1034096:tid 1034352] [client 168.107.94.195:52226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9gi04twRPFuquKD2YGgAAAOo"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:46.700742 2026] [security2:error] [pid 1028675:tid 1028931] [client 20.63.219.114:4229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-admin/wp-links-opml.php"] [unique_id "apK9gtdHPfW2QFvhmL76WgAAAHk"]
[Sat Aug 29 05:07:46.701945 2026] [security2:error] [pid 1034096:tid 1034340] [client 20.151.200.44:60140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/ws66.php"] [unique_id "apK9gi04twRPFuquKD2YGwAAAN4"]
[Sat Aug 29 05:07:46.717931 2026] [security2:error] [pid 1034096:tid 1034295] [client 93.123.109.228:42220] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/var/www/.env"] [unique_id "apK9gi04twRPFuquKD2YHgAAALE"]
[Sat Aug 29 05:07:46.719865 2026] [security2:error] [pid 1028675:tid 1028932] [client 20.104.104.62:27666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.johngibsondrawings.com"] [uri "/classwithtostring.php"] [unique_id "apK9gtdHPfW2QFvhmL76YAAAAHo"]
[Sat Aug 29 05:07:46.730311 2026] [security2:error] [pid 1028675:tid 1028811] [client 20.52.41.200:5326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/adminfuns.php"] [unique_id "apK9gtdHPfW2QFvhmL76ZAAAAAE"]
[Sat Aug 29 05:07:46.737416 2026] [security2:error] [pid 1034096:tid 1034300] [client 4.205.62.107:21604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/test.config.php"] [unique_id "apK9gi04twRPFuquKD2YIQAAALY"]
[Sat Aug 29 05:07:46.768257 2026] [security2:error] [pid 1034096:tid 1034275] [client 213.209.159.223:51684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/phpinfo.php.bak"] [unique_id "apK9gi04twRPFuquKD2YJQAAAJ0"]
[Sat Aug 29 05:07:46.780527 2026] [autoindex:error] [pid 1034096:tid 1034259] [client 20.104.104.62:0] AH01276: Cannot serve directory /home1/thrbikes/public_html/kevinhenley/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:07:46.795553 2026] [security2:error] [pid 1028675:tid 1028888] [client 93.123.109.228:60910] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/var/www/html/.env"] [unique_id "apK9gtdHPfW2QFvhmL76bwAAAE4"]
[Sat Aug 29 05:07:46.808955 2026] [security2:error] [pid 1034096:tid 1034376] [client 20.104.104.62:40197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/old-index.php"] [unique_id "apK9gi04twRPFuquKD2YKgAAAQI"]
[Sat Aug 29 05:07:46.813419 2026] [security2:error] [pid 1028675:tid 1028842] [client 93.123.109.228:42206] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/web/.env"] [unique_id "apK9gtdHPfW2QFvhmL76dAAAACA"]
[Sat Aug 29 05:07:46.822423 2026] [security2:error] [pid 1034096:tid 1034309] [client 20.63.81.20:20854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/comand.php"] [unique_id "apK9gi04twRPFuquKD2YLAAAAL8"]
[Sat Aug 29 05:07:46.833922 2026] [security2:error] [pid 1034096:tid 1034341] [client 4.205.62.107:65477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/wp-admin/sc.php"] [unique_id "apK9gi04twRPFuquKD2YLQAAAN8"]
[Sat Aug 29 05:07:46.837614 2026] [security2:error] [pid 1028675:tid 1028903] [client 45.148.10.62:44782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wkm.vbd.mybluehost.me"] [uri "/test.php"] [unique_id "apK9gtdHPfW2QFvhmL76ewAAAF0"]
[Sat Aug 29 05:07:46.850436 2026] [security2:error] [pid 1028675:tid 1028935] [client 20.104.104.62:25037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinhenley.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK9gtdHPfW2QFvhmL76fAAAAH0"]
[Sat Aug 29 05:07:46.857243 2026] [security2:error] [pid 1034096:tid 1034358] [client 158.23.147.79:35244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK9gi04twRPFuquKD2YMAAAAPA"]
[Sat Aug 29 05:07:46.860425 2026] [security2:error] [pid 1028675:tid 1028907] [client 4.205.62.107:58479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/4563.php"] [unique_id "apK9gtdHPfW2QFvhmL76fwAAAGE"]
[Sat Aug 29 05:07:46.863766 2026] [security2:error] [pid 1034096:tid 1034273] [client 20.104.104.62:48008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/h02ugyh.php"] [unique_id "apK9gi04twRPFuquKD2YMQAAAJs"]
[Sat Aug 29 05:07:46.889478 2026] [security2:error] [pid 1028675:tid 1028832] [client 40.83.93.50:11556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/wp-contentt.php"] [unique_id "apK9gtdHPfW2QFvhmL76hQAAABY"]
[Sat Aug 29 05:07:46.895598 2026] [cgid:error] [pid 1028675:tid 1028911] [client 45.148.10.62:44786] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/ninjamov/public_html/404.shtml
[Sat Aug 29 05:07:46.925419 2026] [security2:error] [pid 1028675:tid 1028904] [client 20.104.104.62:27682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.johngibsondrawings.com"] [uri "/content.php"] [unique_id "apK9gtdHPfW2QFvhmL76kAAAAF4"]
[Sat Aug 29 05:07:46.934215 2026] [access_compat:error] [pid 1034096:tid 1034357] [client 67.20.76.220:11164] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:07:46.944404 2026] [security2:error] [pid 1034096:tid 1034286] [client 158.158.54.35:4482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/num.php"] [unique_id "apK9gi04twRPFuquKD2YOQAAAKg"]
[Sat Aug 29 05:07:46.973835 2026] [security2:error] [pid 1028675:tid 1028928] [client 93.123.109.228:60956] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/website/.env"] [unique_id "apK9gtdHPfW2QFvhmL76mgAAAHY"]
[Sat Aug 29 05:07:46.975602 2026] [security2:error] [pid 1034096:tid 1034287] [client 20.63.81.20:20842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/wp_motu_myk3v.php"] [unique_id "apK9gi04twRPFuquKD2YPQAAAKk"]
[Sat Aug 29 05:07:47.010057 2026] [security2:error] [pid 1028675:tid 1028873] [client 4.205.62.107:22033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/wp-blog.php"] [unique_id "apK9g9dHPfW2QFvhmL76oAAAAD8"]
[Sat Aug 29 05:07:47.013388 2026] [security2:error] [pid 1034096:tid 1034304] [client 20.104.104.62:48047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/shelp.php"] [unique_id "apK9gy04twRPFuquKD2YQQAAALo"]
[Sat Aug 29 05:07:47.022741 2026] [security2:error] [pid 1034096:tid 1034370] [client 93.123.109.228:42186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flir.in.th"] [uri "/wp-config.php"] [unique_id "apK9gy04twRPFuquKD2YQgAAAPw"]
[Sat Aug 29 05:07:47.025414 2026] [security2:error] [pid 1028675:tid 1028877] [client 20.203.141.11:27973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK9g9dHPfW2QFvhmL76qAAAAEM"]
[Sat Aug 29 05:07:47.027495 2026] [security2:error] [pid 1028675:tid 1028858] [client 93.123.109.228:60860] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.flir.in.th"] [uri "/wp-config.php.bak"] [unique_id "apK9g9dHPfW2QFvhmL76qQAAADA"]
[Sat Aug 29 05:07:47.030213 2026] [security2:error] [pid 1028675:tid 1028902] [client 40.83.93.50:11533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/randkeyword.php"] [unique_id "apK9g9dHPfW2QFvhmL76qgAAAFw"]
[Sat Aug 29 05:07:47.044305 2026] [security2:error] [pid 1034096:tid 1034283] [client 20.104.104.62:25028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinhenley.com"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "apK9gy04twRPFuquKD2YRAAAAKU"]
[Sat Aug 29 05:07:47.058838 2026] [security2:error] [pid 1034096:tid 1034332] [client 93.123.109.228:42378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/.wp-config.php.swp"] [unique_id "apK9gy04twRPFuquKD2YSAAAANY"]
[Sat Aug 29 05:07:47.066072 2026] [security2:error] [pid 1034096:tid 1034286] [client 20.63.219.114:16007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-admin/wp-load.php"] [unique_id "apK9gy04twRPFuquKD2YSQAAAKg"]
[Sat Aug 29 05:07:47.073331 2026] [security2:error] [pid 1028675:tid 1028824] [client 93.123.109.228:42132] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.flir.in.th"] [uri "/wp-config.php.new"] [unique_id "apK9g9dHPfW2QFvhmL76sAAAAA4"]
[Sat Aug 29 05:07:47.073790 2026] [security2:error] [pid 1028675:tid 1028936] [client 45.148.10.62:44786] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ninjamover.com"] [uri "/api/.env"] [unique_id "apK9g9dHPfW2QFvhmL76rwAAAH4"]
[Sat Aug 29 05:07:47.074631 2026] [security2:error] [pid 1034096:tid 1034296] [client 93.123.109.228:42116] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.flir.in.th"] [uri "/wp-config.php.old"] [unique_id "apK9gy04twRPFuquKD2YSgAAALI"]
[Sat Aug 29 05:07:47.084399 2026] [security2:error] [pid 1028675:tid 1028925] [client 168.107.94.195:52661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9g9dHPfW2QFvhmL76sQAAAHM"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:47.090776 2026] [security2:error] [pid 1028675:tid 1028866] [client 158.23.147.79:26370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/about/function.php"] [unique_id "apK9g9dHPfW2QFvhmL76sgAAADg"]
[Sat Aug 29 05:07:47.097496 2026] [security2:error] [pid 1028675:tid 1028922] [client 213.209.159.223:30046] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/env/.env"] [unique_id "apK9g9dHPfW2QFvhmL76tQAAAHA"]
[Sat Aug 29 05:07:47.100154 2026] [security2:error] [pid 1034096:tid 1034377] [client 20.104.104.62:20843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/ocgi.php"] [unique_id "apK9gy04twRPFuquKD2YUAAAAQM"]
[Sat Aug 29 05:07:47.117279 2026] [security2:error] [pid 1034096:tid 1034366] [client 20.63.81.20:20949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/wp_motu_ypdat.php"] [unique_id "apK9gy04twRPFuquKD2YUgAAAPg"]
[Sat Aug 29 05:07:47.120733 2026] [security2:error] [pid 1034096:tid 1034313] [client 20.104.104.62:27663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.johngibsondrawings.com"] [uri "/function/function.php"] [unique_id "apK9gy04twRPFuquKD2YUwAAAMM"]
[Sat Aug 29 05:07:47.128971 2026] [security2:error] [pid 1034096:tid 1034349] [client 20.203.141.11:24261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/bthil.php"] [unique_id "apK9gy04twRPFuquKD2YVgAAAOc"]
[Sat Aug 29 05:07:47.141956 2026] [security2:error] [pid 1028675:tid 1028894] [client 93.123.109.228:60888] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "cpcontacts.flir.in.th"] [uri "/___proxy_subdomain_cpcontacts/wp-content/mysql.sql"] [unique_id "apK9g9dHPfW2QFvhmL76vwAAAFQ"]
[Sat Aug 29 05:07:47.142600 2026] [security2:error] [pid 1034096:tid 1034282] [client 93.123.109.228:42252] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/ADMIN/.env"] [unique_id "apK9gy04twRPFuquKD2YVwAAAKQ"]
[Sat Aug 29 05:07:47.175980 2026] [security2:error] [pid 1028675:tid 1028796] [remote 93.123.109.228:46036] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.flicklister.com"] [uri "/wp-config.php.new"] [unique_id "apK9g9dHPfW2QFvhmL76xgAAQnM"]
[Sat Aug 29 05:07:47.179925 2026] [security2:error] [pid 1034096:tid 1034371] [client 20.52.41.200:5339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/goods.php"] [unique_id "apK9gy04twRPFuquKD2YWQAAAP0"]
[Sat Aug 29 05:07:47.186190 2026] [security2:error] [pid 1028675:tid 1028753] [remote 93.123.109.228:46036] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.flicklister.com"] [uri "/wp-config.php.old"] [unique_id "apK9g9dHPfW2QFvhmL76yAAAQkg"]
[Sat Aug 29 05:07:47.197607 2026] [security2:error] [pid 1028675:tid 1028690] [remote 93.123.109.228:46036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flicklister.com"] [uri "/wp-config.php"] [unique_id "apK9g9dHPfW2QFvhmL76ywAAQgo"]
[Sat Aug 29 05:07:47.200135 2026] [security2:error] [pid 1028675:tid 1028811] [client 4.205.62.107:53381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/mcebraed.php"] [unique_id "apK9g9dHPfW2QFvhmL76zgAAAAE"]
[Sat Aug 29 05:07:47.202282 2026] [security2:error] [pid 1034096:tid 1034277] [client 93.123.109.228:42324] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/API/.env"] [unique_id "apK9gy04twRPFuquKD2YWgAAAJ8"]
[Sat Aug 29 05:07:47.204783 2026] [security2:error] [pid 1028675:tid 1028696] [remote 93.123.109.228:46036] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.flicklister.com"] [uri "/wp-config.php.bak"] [unique_id "apK9g9dHPfW2QFvhmL760gAAQhA"]
[Sat Aug 29 05:07:47.224667 2026] [security2:error] [pid 1034096:tid 1034254] [client 202.71.25.11:51877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.25.71.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK9gy04twRPFuquKD2YWwAAAIg"]
[Sat Aug 29 05:07:47.224819 2026] [security2:error] [pid 1034096:tid 1034254] [client 202.71.25.11:51877] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK9gy04twRPFuquKD2YWwAAAIg"]
[Sat Aug 29 05:07:47.243640 2026] [security2:error] [pid 1034096:tid 1034265] [client 20.104.104.62:24717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinhenley.com"] [uri "/wp-includes/css/index.php"] [unique_id "apK9gy04twRPFuquKD2YXQAAAJM"]
[Sat Aug 29 05:07:47.250579 2026] [security2:error] [pid 1034096:tid 1034262] [client 20.63.81.20:20803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/edit.php"] [unique_id "apK9gy04twRPFuquKD2YXgAAAJA"]
[Sat Aug 29 05:07:47.252228 2026] [security2:error] [pid 1028675:tid 1028881] [client 45.148.10.62:44786] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "ninjamover.com"] [uri "/.env.bak"] [unique_id "apK9g9dHPfW2QFvhmL762gAAAEc"]
[Sat Aug 29 05:07:47.268963 2026] [security2:error] [pid 1028675:tid 1028835] [client 158.23.147.79:32670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK9g9dHPfW2QFvhmL763gAAABk"]
[Sat Aug 29 05:07:47.282327 2026] [security2:error] [pid 1034096:tid 1034351] [client 93.123.109.228:42296] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/APP/.env"] [unique_id "apK9gy04twRPFuquKD2YYQAAAOk"]
[Sat Aug 29 05:07:47.298585 2026] [security2:error] [pid 1034096:tid 1034345] [client 93.123.109.228:42252] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/Api/.env"] [unique_id "apK9gy04twRPFuquKD2YYwAAAOM"]
[Sat Aug 29 05:07:47.301961 2026] [security2:error] [pid 1034096:tid 1034359] [client 93.123.109.228:42270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/BACK/.env"] [unique_id "apK9gy04twRPFuquKD2YZAAAAPE"]
[Sat Aug 29 05:07:47.302900 2026] [security2:error] [pid 1034096:tid 1034337] [client 20.151.200.44:64644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/Cok.php"] [unique_id "apK9gy04twRPFuquKD2YZQAAANs"]
[Sat Aug 29 05:07:47.303626 2026] [security2:error] [pid 1028675:tid 1028842] [client 93.123.109.228:42350] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/BACKEND/.env"] [unique_id "apK9g9dHPfW2QFvhmL764wAAACA"]
[Sat Aug 29 05:07:47.305679 2026] [security2:error] [pid 1034096:tid 1034352] [client 93.123.109.228:42254] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/BE/.env"] [unique_id "apK9gy04twRPFuquKD2YZwAAAOo"]
[Sat Aug 29 05:07:47.318134 2026] [security2:error] [pid 1028675:tid 1028910] [client 128.90.161.20:60076] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1584"] [id "900939"] [msg "Invalid WordPress REST batch path"] [data "ARGS:requests.requests.path=///"] [hostname "cpcontacts.doorrepairdubuque.com"] [uri "/___proxy_subdomain_cpcontacts/wp-json/batch/v1"] [unique_id "apK9g9dHPfW2QFvhmL765QAAAGQ"]
[Sat Aug 29 05:07:47.318156 2026] [security2:error] [pid 1034096:tid 1034293] [client 20.104.104.62:28549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.johngibsondrawings.com"] [uri "/item.php"] [unique_id "apK9gy04twRPFuquKD2YaAAAAK8"]
[Sat Aug 29 05:07:47.334150 2026] [security2:error] [pid 1034096:tid 1034300] [client 158.23.147.79:6088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9gy04twRPFuquKD2YaQAAALY"]
[Sat Aug 29 05:07:47.340263 2026] [security2:error] [pid 1034096:tid 1034335] [client 93.123.109.228:42280] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/Backend/.env"] [unique_id "apK9gy04twRPFuquKD2YagAAANk"]
[Sat Aug 29 05:07:47.355587 2026] [security2:error] [pid 1034096:tid 1034297] [client 93.123.109.228:42386] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/Be/.env"] [unique_id "apK9gy04twRPFuquKD2YbAAAALM"]
[Sat Aug 29 05:07:47.355886 2026] [security2:error] [pid 1034096:tid 1034261] [client 20.104.49.130:60930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/ohct.php"] [unique_id "apK9gy04twRPFuquKD2YbQAAAI8"]
[Sat Aug 29 05:07:47.365782 2026] [security2:error] [pid 1034096:tid 1034350] [client 158.23.147.79:17413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK9gy04twRPFuquKD2YbgAAAOg"]
[Sat Aug 29 05:07:47.381212 2026] [security2:error] [pid 1034096:tid 1034346] [client 20.104.104.62:37619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/13ede.php"] [unique_id "apK9gy04twRPFuquKD2YbwAAAOQ"]
[Sat Aug 29 05:07:47.393801 2026] [security2:error] [pid 1034096:tid 1034255] [client 40.83.93.50:11550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/theme.php"] [unique_id "apK9gy04twRPFuquKD2YcAAAAIk"]
[Sat Aug 29 05:07:47.403083 2026] [security2:error] [pid 1034096:tid 1034274] [client 4.205.62.107:56061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-config.backup.php"] [unique_id "apK9gy04twRPFuquKD2YcQAAAJw"]
[Sat Aug 29 05:07:47.404319 2026] [security2:error] [pid 1028675:tid 1028911] [client 20.63.81.20:20905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/tqkdqbbv.php"] [unique_id "apK9g9dHPfW2QFvhmL767QAAAGU"]
[Sat Aug 29 05:07:47.414702 2026] [security2:error] [pid 1034096:tid 1034291] [client 20.151.200.44:46592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/xcre1.php"] [unique_id "apK9gy04twRPFuquKD2YcwAAAK0"]
[Sat Aug 29 05:07:47.427412 2026] [security2:error] [pid 1028675:tid 1028812] [client 20.104.18.15:12197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/ffs.php"] [unique_id "apK9g9dHPfW2QFvhmL768wAAAAI"]
[Sat Aug 29 05:07:47.429227 2026] [security2:error] [pid 1034096:tid 1034352] [client 20.63.219.114:13936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-admin/wp-mail.php"] [unique_id "apK9gy04twRPFuquKD2YdQAAAOo"]
[Sat Aug 29 05:07:47.441855 2026] [security2:error] [pid 1034096:tid 1034364] [client 93.123.109.228:42462] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flicklister.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK9gy04twRPFuquKD2YdgAAAPY"]
[Sat Aug 29 05:07:47.454761 2026] [security2:error] [pid 1034096:tid 1034341] [client 128.90.161.20:60078] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1584"] [id "900939"] [msg "Invalid WordPress REST batch path"] [data "ARGS:requests.requests.path=///"] [hostname "cpcalendars.greenfieldparts.com"] [uri "/___proxy_subdomain_cpcalendars/wp-json/batch/v1"] [unique_id "apK9gy04twRPFuquKD2YeQAAAN8"]
[Sat Aug 29 05:07:47.457023 2026] [security2:error] [pid 1028675:tid 1028926] [client 20.104.18.15:5014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/sym.php"] [unique_id "apK9g9dHPfW2QFvhmL76_AAAAHQ"]
[Sat Aug 29 05:07:47.459263 2026] [security2:error] [pid 1028675:tid 1028928] [client 20.104.18.15:19343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/dehnl.php"] [unique_id "apK9g9dHPfW2QFvhmL76_QAAAHY"]
[Sat Aug 29 05:07:47.459836 2026] [security2:error] [pid 1028675:tid 1028875] [client 158.23.147.79:53764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/lock.php"] [unique_id "apK9g9dHPfW2QFvhmL76_gAAAEE"]
[Sat Aug 29 05:07:47.463566 2026] [security2:error] [pid 1028675:tid 1028859] [client 168.107.94.195:53046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9g9dHPfW2QFvhmL76_wAAADE"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:47.466978 2026] [security2:error] [pid 1034096:tid 1034279] [client 149.34.210.141:45804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9gy04twRPFuquKD2YfQAAAKE"]
[Sat Aug 29 05:07:47.467069 2026] [security2:error] [pid 1034096:tid 1034279] [client 149.34.210.141:45804] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9gy04twRPFuquKD2YfQAAAKE"]
[Sat Aug 29 05:07:47.473201 2026] [security2:error] [pid 1034096:tid 1034328] [client 158.23.147.79:48356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK9gy04twRPFuquKD2YfgAAANI"]
[Sat Aug 29 05:07:47.487137 2026] [security2:error] [pid 1028675:tid 1028825] [client 158.23.147.79:11343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK9g9dHPfW2QFvhmL77BQAAAA8"]
[Sat Aug 29 05:07:47.490497 2026] [security2:error] [pid 1028675:tid 1028935] [client 20.203.141.11:12676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/xda.php"] [unique_id "apK9g9dHPfW2QFvhmL77CAAAAH0"]
[Sat Aug 29 05:07:47.490942 2026] [security2:error] [pid 1028675:tid 1028873] [client 93.123.109.228:42542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flicklister.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK9g9dHPfW2QFvhmL77BwAAAD8"]
[Sat Aug 29 05:07:47.494036 2026] [autoindex:error] [pid 1028675:tid 1028862] [client 20.104.104.62:0] AH01276: Cannot serve directory /home1/thrbikes/public_html/kevinhenley/wp-includes/images/crystal/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:07:47.501882 2026] [security2:error] [pid 1028675:tid 1028858] [client 128.90.161.20:60076] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1609"] [id "900942"] [msg "Invalid WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.path=///"] [hostname "cpcontacts.doorrepairdubuque.com"] [uri "/___proxy_subdomain_cpcontacts/"] [unique_id "apK9g9dHPfW2QFvhmL77CgAAADA"]
[Sat Aug 29 05:07:47.517229 2026] [security2:error] [pid 1028675:tid 1028920] [client 213.209.159.223:30046] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/src/.env"] [unique_id "apK9g9dHPfW2QFvhmL77DAAAAG4"]
[Sat Aug 29 05:07:47.517307 2026] [security2:error] [pid 1028675:tid 1028916] [client 20.104.104.62:28551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.johngibsondrawings.com"] [uri "/ms-edit.php"] [unique_id "apK9g9dHPfW2QFvhmL77DQAAAGo"]
[Sat Aug 29 05:07:47.524217 2026] [security2:error] [pid 1028675:tid 1028708] [remote 93.123.109.228:46162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flowerfh.com"] [uri "/info.php"] [unique_id "apK9g9dHPfW2QFvhmL77DgAAUhs"]
[Sat Aug 29 05:07:47.541486 2026] [security2:error] [pid 1028675:tid 1028824] [client 20.63.81.20:20736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/kjyehoxl.php"] [unique_id "apK9g9dHPfW2QFvhmL77EQAAAA4"]
[Sat Aug 29 05:07:47.541777 2026] [security2:error] [pid 1028675:tid 1028807] [remote 93.123.109.228:46162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flowerfh.com"] [uri "/infophp.php"] [unique_id "apK9g9dHPfW2QFvhmL77EgAAUn4"]
[Sat Aug 29 05:07:47.543008 2026] [security2:error] [pid 1028675:tid 1028832] [client 45.148.10.62:44800] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.wkm.vbd.mybluehost.me"] [uri "/.env.backup"] [unique_id "apK9g9dHPfW2QFvhmL77EwAAABY"]
[Sat Aug 29 05:07:47.544157 2026] [security2:error] [pid 1034096:tid 1034367] [client 40.83.93.50:11563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/goods.php"] [unique_id "apK9gy04twRPFuquKD2YgwAAAPk"]
[Sat Aug 29 05:07:47.552967 2026] [security2:error] [pid 1034096:tid 1034303] [client 213.209.159.223:48247] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/env/.env"] [unique_id "apK9gy04twRPFuquKD2YhAAAALk"]
[Sat Aug 29 05:07:47.554512 2026] [security2:error] [pid 1034096:tid 1034268] [client 20.151.200.44:59407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/X7T6.php"] [unique_id "apK9gy04twRPFuquKD2YhQAAAJY"]
[Sat Aug 29 05:07:47.557126 2026] [security2:error] [pid 1034096:tid 1034253] [client 20.104.18.15:36483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/tnglzqmv.php"] [unique_id "apK9gy04twRPFuquKD2YhgAAAIc"]
[Sat Aug 29 05:07:47.558703 2026] [security2:error] [pid 1028675:tid 1028779] [remote 93.123.109.228:46162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flowerfh.com"] [uri "/infos.php"] [unique_id "apK9g9dHPfW2QFvhmL77FQAAUmI"]
[Sat Aug 29 05:07:47.562905 2026] [security2:error] [pid 1028675:tid 1028866] [client 20.104.104.62:25050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinhenley.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK9g9dHPfW2QFvhmL77FwAAADg"]
[Sat Aug 29 05:07:47.594890 2026] [security2:error] [pid 1028675:tid 1028886] [client 20.104.18.15:4964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/8.php"] [unique_id "apK9g9dHPfW2QFvhmL77HAAAAEw"]
[Sat Aug 29 05:07:47.604476 2026] [security2:error] [pid 1028675:tid 1028898] [client 20.104.18.15:19410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/zoo2.php"] [unique_id "apK9g9dHPfW2QFvhmL77HQAAAFg"]
[Sat Aug 29 05:07:47.636579 2026] [security2:error] [pid 1034096:tid 1034370] [client 128.90.161.20:60078] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1609"] [id "900942"] [msg "Invalid WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.path=///"] [hostname "cpcalendars.greenfieldparts.com"] [uri "/___proxy_subdomain_cpcalendars/"] [unique_id "apK9gy04twRPFuquKD2YjgAAAPw"]
[Sat Aug 29 05:07:47.639159 2026] [security2:error] [pid 1028675:tid 1028849] [client 20.52.41.200:5370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/css.php"] [unique_id "apK9g9dHPfW2QFvhmL77IgAAACc"]
[Sat Aug 29 05:07:47.645976 2026] [security2:error] [pid 1028675:tid 1028931] [client 93.123.109.228:42454] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(\\\\/\\\\*\\\\!? ?(?:select|grant|delete|insert|drop|alter|replace|truncate|update|create|rename|describe|union|concat|group_concat))" at REQUEST_FILENAME. [file "/opt/mod_security/hg_rules.conf"] [line "1019"] [id "9000042"] [rev "2.2.2"] [msg "SQL Comment Sequence Detected."] [data "/*update"] [hostname "cpcontacts.flicklister.com"] [uri "/___proxy_subdomain_cpcontacts/*update.cgi*"] [unique_id "apK9g9dHPfW2QFvhmL77JQAAAHk"]
[Sat Aug 29 05:07:47.658135 2026] [security2:error] [pid 1034096:tid 1034283] [client 93.123.109.228:42254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK9gy04twRPFuquKD2YjwAAAKU"]
[Sat Aug 29 05:07:47.673761 2026] [security2:error] [pid 1028675:tid 1028900] [client 20.104.104.62:37613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/k8.php"] [unique_id "apK9g9dHPfW2QFvhmL77KQAAAFo"]
[Sat Aug 29 05:07:47.681894 2026] [security2:error] [pid 1034096:tid 1034332] [client 20.63.81.20:20746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/llyuxaqd.php"] [unique_id "apK9gy04twRPFuquKD2YkQAAANY"]
[Sat Aug 29 05:07:47.694640 2026] [security2:error] [pid 1028675:tid 1028888] [client 45.148.10.62:44800] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.wkm.vbd.mybluehost.me"] [uri "/.env.old"] [unique_id "apK9g9dHPfW2QFvhmL77LQAAAE4"]
[Sat Aug 29 05:07:47.696929 2026] [security2:error] [pid 1034096:tid 1034296] [client 20.104.18.15:12176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/nano.php"] [unique_id "apK9gy04twRPFuquKD2YlQAAALI"]
[Sat Aug 29 05:07:47.698382 2026] [security2:error] [pid 1028675:tid 1028815] [client 158.158.54.35:6996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "apK9g9dHPfW2QFvhmL77NQAAAAU"]
[Sat Aug 29 05:07:47.713913 2026] [security2:error] [pid 1034096:tid 1034284] [client 20.104.104.62:27696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.johngibsondrawings.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK9gy04twRPFuquKD2YmQAAAKY"]
[Sat Aug 29 05:07:47.716472 2026] [security2:error] [pid 1028675:tid 1028923] [client 20.104.104.62:40210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/ngocokpeli.php"] [unique_id "apK9g9dHPfW2QFvhmL77OwAAAHE"]
[Sat Aug 29 05:07:47.738848 2026] [security2:error] [pid 1034096:tid 1034366] [client 93.123.109.228:42324] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/admin-app/.env"] [unique_id "apK9gy04twRPFuquKD2YmgAAAPg"]
[Sat Aug 29 05:07:47.744952 2026] [security2:error] [pid 1034096:tid 1034313] [client 20.104.18.15:19344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/zoo1.php"] [unique_id "apK9gy04twRPFuquKD2YmwAAAMM"]
[Sat Aug 29 05:07:47.748095 2026] [security2:error] [pid 1034096:tid 1034349] [client 20.104.18.15:13685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/ssla.php"] [unique_id "apK9gy04twRPFuquKD2YnAAAAOc"]
[Sat Aug 29 05:07:47.763499 2026] [security2:error] [pid 1028675:tid 1028870] [client 20.104.104.62:24765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kevinhenley.com"] [uri "/wp-links.php/wp-content/plugins/wp-content/uploa/"] [unique_id "apK9g9dHPfW2QFvhmL77PwAAADw"]
[Sat Aug 29 05:07:47.782068 2026] [cgid:error] [pid 1028675:tid 1028823] [client 45.148.10.62:44786] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/ninjamov/public_html/404.shtml
[Sat Aug 29 05:07:47.790718 2026] [security2:error] [pid 1028675:tid 1028872] [client 93.123.109.228:42454] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flicklister.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/.env"] [unique_id "apK9g9dHPfW2QFvhmL77QwAAAD4"]
[Sat Aug 29 05:07:47.800306 2026] [security2:error] [pid 1034096:tid 1034307] [client 20.104.18.15:4938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/goods.php"] [unique_id "apK9gy04twRPFuquKD2YoAAAAL0"]
[Sat Aug 29 05:07:47.818394 2026] [security2:error] [pid 1028675:tid 1028812] [client 20.63.81.20:20876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/nbwxolou.php"] [unique_id "apK9g9dHPfW2QFvhmL77SQAAAAI"]
[Sat Aug 29 05:07:47.818417 2026] [security2:error] [pid 1028675:tid 1028835] [client 20.63.219.114:16033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-admin/wp-settings.php"] [unique_id "apK9g9dHPfW2QFvhmL77SAAAABk"]
[Sat Aug 29 05:07:47.821050 2026] [security2:error] [pid 1034096:tid 1034265] [client 20.104.49.130:53645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/sta.php"] [unique_id "apK9gy04twRPFuquKD2YpAAAAJM"]
[Sat Aug 29 05:07:47.825252 2026] [security2:error] [pid 1028675:tid 1028909] [client 93.123.109.228:42542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flicklister.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/laravel/app/.env"] [unique_id "apK9g9dHPfW2QFvhmL77SgAAAGM"]
[Sat Aug 29 05:07:47.841255 2026] [security2:error] [pid 1034096:tid 1034353] [client 20.104.18.15:12206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/ano.php"] [unique_id "apK9gy04twRPFuquKD2YpQAAAOs"]
[Sat Aug 29 05:07:47.845154 2026] [security2:error] [pid 1028675:tid 1028875] [client 168.107.94.195:53372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9g9dHPfW2QFvhmL77TwAAAEE"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:47.848916 2026] [security2:error] [pid 1034096:tid 1034355] [client 20.104.18.15:36520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/wefile.php"] [unique_id "apK9gy04twRPFuquKD2YpgAAAO0"]
[Sat Aug 29 05:07:47.849453 2026] [security2:error] [pid 1028675:tid 1028904] [client 158.23.147.79:25577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK9g9dHPfW2QFvhmL77UAAAAF4"]
[Sat Aug 29 05:07:47.876206 2026] [security2:error] [pid 1028675:tid 1028825] [client 93.123.109.228:42400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/admin/phpinfo.php"] [unique_id "apK9g9dHPfW2QFvhmL77VAAAAA8"]
[Sat Aug 29 05:07:47.878617 2026] [security2:error] [pid 1034096:tid 1034337] [client 20.104.18.15:13681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "apK9gy04twRPFuquKD2YqQAAANs"]
[Sat Aug 29 05:07:47.883131 2026] [security2:error] [pid 1028675:tid 1028935] [client 4.205.62.107:22057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/gecko-litespeed.php"] [unique_id "apK9g9dHPfW2QFvhmL77VQAAAH0"]
[Sat Aug 29 05:07:47.888537 2026] [security2:error] [pid 1034096:tid 1034306] [client 40.83.93.50:11562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/alumni_reg.php"] [unique_id "apK9gy04twRPFuquKD2YrAAAALw"]
[Sat Aug 29 05:07:47.888814 2026] [security2:error] [pid 1028675:tid 1028879] [client 93.123.109.228:42516] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flicklister.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK9g9dHPfW2QFvhmL77VgAAAEU"]
[Sat Aug 29 05:07:47.893270 2026] [security2:error] [pid 1034096:tid 1034295] [client 20.104.18.15:18918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/radio.php"] [unique_id "apK9gy04twRPFuquKD2YrgAAALE"]
[Sat Aug 29 05:07:47.904389 2026] [security2:error] [pid 1028675:tid 1028862] [client 93.123.109.228:42336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/admin_phpinfo.php"] [unique_id "apK9g9dHPfW2QFvhmL77WgAAADQ"]
[Sat Aug 29 05:07:47.914733 2026] [security2:error] [pid 1034096:tid 1034361] [client 93.123.109.228:42386] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/administrator/.env"] [unique_id "apK9gy04twRPFuquKD2YsQAAAPM"]
[Sat Aug 29 05:07:47.920521 2026] [security2:error] [pid 1034096:tid 1034310] [client 158.23.147.79:50023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK9gy04twRPFuquKD2YswAAAMA"]
[Sat Aug 29 05:07:47.935846 2026] [security2:error] [pid 1028675:tid 1028833] [client 213.209.159.223:30046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/config/app.php"] [unique_id "apK9g9dHPfW2QFvhmL77XgAAABc"]
[Sat Aug 29 05:07:47.939583 2026] [security2:error] [pid 1034096:tid 1034373] [client 93.123.109.228:42296] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/api-node/.env"] [unique_id "apK9gy04twRPFuquKD2YtQAAAP8"]
[Sat Aug 29 05:07:47.943063 2026] [security2:error] [pid 1028675:tid 1028833] [client 93.123.109.228:42434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/api-backend/.env"] [unique_id "apK9g9dHPfW2QFvhmL77YAAAABc"]
[Sat Aug 29 05:07:47.945892 2026] [security2:error] [pid 1034096:tid 1034373] [client 213.209.159.223:48247] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/src/.env"] [unique_id "apK9gy04twRPFuquKD2YtgAAAP8"]
[Sat Aug 29 05:07:47.949805 2026] [security2:error] [pid 1034096:tid 1034371] [client 20.203.141.11:1220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/theme.php"] [unique_id "apK9gy04twRPFuquKD2YuAAAAP0"]
[Sat Aug 29 05:07:47.956579 2026] [security2:error] [pid 1034096:tid 1034300] [client 20.203.141.11:38397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/cv.php"] [unique_id "apK9gy04twRPFuquKD2YuQAAALY"]
[Sat Aug 29 05:07:47.958773 2026] [security2:error] [pid 1028675:tid 1028916] [client 20.63.81.20:20836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/nsxeubyv.php"] [unique_id "apK9g9dHPfW2QFvhmL77YwAAAGo"]
[Sat Aug 29 05:07:47.974193 2026] [security2:error] [pid 1034096:tid 1034350] [client 20.104.104.62:48054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/alog.php"] [unique_id "apK9gy04twRPFuquKD2YugAAAOg"]
[Sat Aug 29 05:07:47.975180 2026] [security2:error] [pid 1028675:tid 1028896] [client 4.205.62.107:26633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/debug.php"] [unique_id "apK9g9dHPfW2QFvhmL77ZgAAAFY"]
[Sat Aug 29 05:07:47.976304 2026] [security2:error] [pid 1034096:tid 1034350] [client 20.104.18.15:5054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/ah.php"] [unique_id "apK9gy04twRPFuquKD2YvAAAAOg"]
[Sat Aug 29 05:07:47.976548 2026] [security2:error] [pid 1034096:tid 1034330] [client 93.123.109.228:42366] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/api/.env"] [unique_id "apK9gy04twRPFuquKD2YuwAAANQ"]
[Sat Aug 29 05:07:47.976590 2026] [cgid:error] [pid 1028675:tid 1028855] [client 45.148.10.62:44786] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/ninjamov/public_html/404.shtml
[Sat Aug 29 05:07:47.977655 2026] [security2:error] [pid 1028675:tid 1028837] [client 93.123.109.228:42542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.flicklister.com"] [uri "/___proxy_subdomain_cpcontacts/.env.backup"] [unique_id "apK9g9dHPfW2QFvhmL77ZwAAABs"]
[Sat Aug 29 05:07:47.995549 2026] [security2:error] [pid 1028675:tid 1028824] [client 45.148.10.62:44800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wkm.vbd.mybluehost.me"] [uri "/.env.php.bak"] [unique_id "apK9g9dHPfW2QFvhmL77awAAAA4"]
[Sat Aug 29 05:07:47.997407 2026] [security2:error] [pid 1028675:tid 1028832] [client 4.205.62.107:58423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/lala.php"] [unique_id "apK9g9dHPfW2QFvhmL77bgAAABY"]
[Sat Aug 29 05:07:48.003255 2026] [security2:error] [pid 1034096:tid 1034259] [client 20.104.104.62:27672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.johngibsondrawings.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK9hC04twRPFuquKD2YvwAAAI0"]
[Sat Aug 29 05:07:48.012257 2026] [security2:error] [pid 1034096:tid 1034255] [client 158.23.147.79:35791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/themes.php"] [unique_id "apK9hC04twRPFuquKD2YwAAAAIk"]
[Sat Aug 29 05:07:48.014243 2026] [security2:error] [pid 1034096:tid 1034274] [client 20.104.18.15:13596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/wp-aothait.php"] [unique_id "apK9hC04twRPFuquKD2YwQAAAJw"]
[Sat Aug 29 05:07:48.023934 2026] [security2:error] [pid 1028675:tid 1028929] [client 93.123.109.228:42518] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.flicklister.com"] [uri "/___proxy_subdomain_cpcontacts/.env.bak"] [unique_id "apK9hNdHPfW2QFvhmL77cQAAAHc"]
[Sat Aug 29 05:07:48.026307 2026] [security2:error] [pid 1028675:tid 1028814] [client 20.104.18.15:19340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/one.php"] [unique_id "apK9hNdHPfW2QFvhmL77cgAAAAQ"]
[Sat Aug 29 05:07:48.033950 2026] [security2:error] [pid 1034096:tid 1034289] [client 40.83.93.50:8757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/hehe.php"] [unique_id "apK9hC04twRPFuquKD2YwgAAAKs"]
[Sat Aug 29 05:07:48.039377 2026] [security2:error] [pid 1034096:tid 1034311] [client 128.90.161.20:46556] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1584"] [id "900939"] [msg "Invalid WordPress REST batch path"] [data "ARGS:requests.requests.path=///"] [hostname "cpcontacts.doorrepairdubuque.com"] [uri "/___proxy_subdomain_cpcontacts/wp-json/batch/v1"] [unique_id "apK9hC04twRPFuquKD2YwwAAAME"]
[Sat Aug 29 05:07:48.045615 2026] [security2:error] [pid 1034096:tid 1034291] [client 20.104.18.15:12189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/mgrr.php"] [unique_id "apK9hC04twRPFuquKD2YxQAAAK0"]
[Sat Aug 29 05:07:48.086282 2026] [security2:error] [pid 1034096:tid 1034322] [client 93.123.109.228:42296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/api/info.php"] [unique_id "apK9hC04twRPFuquKD2YzAAAAMw"]
[Sat Aug 29 05:07:48.100069 2026] [security2:error] [pid 1028675:tid 1028881] [client 20.63.81.20:20925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/zfqipfss.php"] [unique_id "apK9hNdHPfW2QFvhmL77fAAAAEc"]
[Sat Aug 29 05:07:48.101858 2026] [security2:error] [pid 1028675:tid 1028923] [client 20.104.18.15:36486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/blog.php"] [unique_id "apK9hNdHPfW2QFvhmL77fQAAAHE"]
[Sat Aug 29 05:07:48.149879 2026] [security2:error] [pid 1034096:tid 1034275] [client 158.158.54.35:6984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "apK9hC04twRPFuquKD2Y0QAAAJ0"]
[Sat Aug 29 05:07:48.152779 2026] [security2:error] [pid 1034096:tid 1034319] [client 20.104.104.62:37520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/adin.php"] [unique_id "apK9hC04twRPFuquKD2Y0gAAAMk"]
[Sat Aug 29 05:07:48.154485 2026] [security2:error] [pid 1028675:tid 1028870] [client 4.205.62.107:22078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/update.php"] [unique_id "apK9hNdHPfW2QFvhmL77ggAAADw"]
[Sat Aug 29 05:07:48.161324 2026] [security2:error] [pid 1028675:tid 1028917] [client 20.104.18.15:5008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/ws55.php"] [unique_id "apK9hNdHPfW2QFvhmL77hQAAAGs"]
[Sat Aug 29 05:07:48.161710 2026] [security2:error] [pid 1028675:tid 1028876] [client 45.148.10.62:44786] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ninjamover.com"] [uri "/stripe/.env"] [unique_id "apK9hNdHPfW2QFvhmL77gwAAAEI"]
[Sat Aug 29 05:07:48.168305 2026] [security2:error] [pid 1034096:tid 1034303] [client 20.104.18.15:13579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/wp-includes/index.php"] [unique_id "apK9hC04twRPFuquKD2Y1AAAALk"]
[Sat Aug 29 05:07:48.171256 2026] [security2:error] [pid 1028675:tid 1028931] [client 20.63.219.114:13948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-admin/wp-signup.php"] [unique_id "apK9hNdHPfW2QFvhmL77hgAAAHk"]
[Sat Aug 29 05:07:48.173877 2026] [security2:error] [pid 1034096:tid 1034287] [client 93.123.109.228:42300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/api/phpinfo.php"] [unique_id "apK9hC04twRPFuquKD2Y1gAAAKk"]
[Sat Aug 29 05:07:48.185399 2026] [security2:error] [pid 1028675:tid 1028897] [client 20.104.104.62:47602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/new_license.php"] [unique_id "apK9hNdHPfW2QFvhmL77jAAAAFc"]
[Sat Aug 29 05:07:48.188742 2026] [security2:error] [pid 1028675:tid 1028903] [client 20.104.18.15:19345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/503.php"] [unique_id "apK9hNdHPfW2QFvhmL77jgAAAF0"]
[Sat Aug 29 05:07:48.192395 2026] [security2:error] [pid 1034096:tid 1034363] [client 20.104.18.15:12269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/mac.php"] [unique_id "apK9hC04twRPFuquKD2Y2QAAAPU"]
[Sat Aug 29 05:07:48.195530 2026] [security2:error] [pid 1034096:tid 1034357] [client 158.23.147.79:26572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-includes/customize/index.php"] [unique_id "apK9hC04twRPFuquKD2Y2gAAAO8"]
[Sat Aug 29 05:07:48.203008 2026] [security2:error] [pid 1034096:tid 1034367] [client 20.104.104.62:27708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.johngibsondrawings.com"] [uri "/wp-content/about.php"] [unique_id "apK9hC04twRPFuquKD2Y2wAAAPk"]
[Sat Aug 29 05:07:48.211537 2026] [security2:error] [pid 1028675:tid 1028937] [client 213.209.159.223:7786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "apK9hNdHPfW2QFvhmL77kQAAAH8"]
[Sat Aug 29 05:07:48.211794 2026] [security2:error] [pid 1034096:tid 1034318] [client 20.151.200.44:47359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/motu.php"] [unique_id "apK9hC04twRPFuquKD2Y3QAAAMg"]
[Sat Aug 29 05:07:48.225024 2026] [security2:error] [pid 1034096:tid 1034304] [client 128.90.161.20:46556] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1609"] [id "900942"] [msg "Invalid WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.path=///"] [hostname "cpcontacts.doorrepairdubuque.com"] [uri "/___proxy_subdomain_cpcontacts/"] [unique_id "apK9hC04twRPFuquKD2Y3gAAALo"]
[Sat Aug 29 05:07:48.226480 2026] [security2:error] [pid 1028675:tid 1028928] [client 168.107.94.195:53834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9hNdHPfW2QFvhmL77lgAAAHY"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:48.228722 2026] [security2:error] [pid 1034096:tid 1034329] [client 158.23.147.79:30462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-content/x.php"] [unique_id "apK9hC04twRPFuquKD2Y4AAAANM"]
[Sat Aug 29 05:07:48.233288 2026] [security2:error] [pid 1034096:tid 1034374] [client 20.63.81.20:20901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.peakperformanceplus.com"] [uri "/zrjuyoos.php"] [unique_id "apK9hC04twRPFuquKD2Y4QAAAQA"]
[Sat Aug 29 05:07:48.262700 2026] [security2:error] [pid 1034096:tid 1034315] [client 93.123.109.228:42520] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcontacts.flicklister.com"] [uri "/___proxy_subdomain_cpcontacts/.env.old"] [unique_id "apK9hC04twRPFuquKD2Y5QAAAMU"]
[Sat Aug 29 05:07:48.275157 2026] [security2:error] [pid 1028675:tid 1028683] [remote 93.123.109.228:46162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flowerfh.com"] [uri "/php-info.php"] [unique_id "apK9hNdHPfW2QFvhmL77oQAAYQM"]
[Sat Aug 29 05:07:48.277161 2026] [security2:error] [pid 1034096:tid 1034313] [client 93.123.109.228:42386] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/apis/.env"] [unique_id "apK9hC04twRPFuquKD2Y5wAAAMM"]
[Sat Aug 29 05:07:48.300171 2026] [security2:error] [pid 1034096:tid 1034343] [client 20.104.18.15:13690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/file31.php"] [unique_id "apK9hC04twRPFuquKD2Y6AAAAOE"]
[Sat Aug 29 05:07:48.310251 2026] [security2:error] [pid 1034096:tid 1034339] [client 93.123.109.228:42496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flicklister.com"] [uri "/.env.php"] [unique_id "apK9hC04twRPFuquKD2Y6QAAAN0"]
[Sat Aug 29 05:07:48.313129 2026] [security2:error] [pid 1028675:tid 1028780] [remote 93.123.109.228:46162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flowerfh.com"] [uri "/php.php"] [unique_id "apK9hNdHPfW2QFvhmL77ogAAYWM"]
[Sat Aug 29 05:07:48.328144 2026] [security2:error] [pid 1028675:tid 1028851] [client 20.104.18.15:18881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/504.php"] [unique_id "apK9hNdHPfW2QFvhmL77pQAAACk"]
[Sat Aug 29 05:07:48.330063 2026] [security2:error] [pid 1034096:tid 1034336] [client 213.209.159.223:48247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/config/app.php"] [unique_id "apK9hC04twRPFuquKD2Y6wAAANo"]
[Sat Aug 29 05:07:48.334085 2026] [security2:error] [pid 1034096:tid 1034257] [client 20.104.18.15:12287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/simple.php"] [unique_id "apK9hC04twRPFuquKD2Y7AAAAIs"]
[Sat Aug 29 05:07:48.337547 2026] [cgid:error] [pid 1028675:tid 1028879] [client 45.148.10.62:44786] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/ninjamov/public_html/404.shtml
[Sat Aug 29 05:07:48.361737 2026] [security2:error] [pid 1028675:tid 1028791] [remote 93.123.109.228:46162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flowerfh.com"] [uri "/php_info.php"] [unique_id "apK9hNdHPfW2QFvhmL77qQAAMG4"]
[Sat Aug 29 05:07:48.372496 2026] [security2:error] [pid 1028675:tid 1028833] [client 128.90.161.20:46566] ModSecurity: Access denied with code 406 (phase 1). Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "187"] [id "900401"] [msg "PHP Spam Botnet"] [hostname "cpcalendars.greenfieldparts.com"] [uri "/"] [unique_id "apK9hNdHPfW2QFvhmL77rAAAABc"]
[Sat Aug 29 05:07:48.382206 2026] [security2:error] [pid 1034096:tid 1034265] [client 93.123.109.228:42280] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/app/.env"] [unique_id "apK9hC04twRPFuquKD2Y8QAAAJM"]
[Sat Aug 29 05:07:48.385796 2026] [security2:error] [pid 1034096:tid 1034276] [client 20.104.18.15:4997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/drykl.php"] [unique_id "apK9hC04twRPFuquKD2Y8gAAAJ4"]
[Sat Aug 29 05:07:48.385799 2026] [security2:error] [pid 1028675:tid 1028916] [client 158.23.147.79:32593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK9hNdHPfW2QFvhmL77rgAAAGo"]
[Sat Aug 29 05:07:48.389274 2026] [security2:error] [pid 1028675:tid 1028684] [remote 93.123.109.228:46162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flowerfh.com"] [uri "/phpinfo.php"] [unique_id "apK9hNdHPfW2QFvhmL77sAAAaAQ"]
[Sat Aug 29 05:07:48.400511 2026] [security2:error] [pid 1034096:tid 1034353] [client 4.205.62.107:53367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/verox.php"] [unique_id "apK9hC04twRPFuquKD2Y9AAAAOs"]
[Sat Aug 29 05:07:48.404193 2026] [security2:error] [pid 1028675:tid 1028845] [client 20.104.104.62:28561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.johngibsondrawings.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "apK9hNdHPfW2QFvhmL77sgAAACM"]
[Sat Aug 29 05:07:48.416620 2026] [security2:error] [pid 1034096:tid 1034337] [client 20.52.41.200:4550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/w.php"] [unique_id "apK9hC04twRPFuquKD2Y9wAAANs"]
[Sat Aug 29 05:07:48.423317 2026] [security2:error] [pid 1034096:tid 1034366] [client 20.203.141.11:5803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/classwithtostring.php"] [unique_id "apK9hC04twRPFuquKD2Y-AAAAPg"]
[Sat Aug 29 05:07:48.431262 2026] [security2:error] [pid 1028675:tid 1028936] [client 93.123.109.228:42516] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "cpcontacts.flicklister.com"] [uri "/___proxy_subdomain_cpcontacts/.env.swp"] [unique_id "apK9hNdHPfW2QFvhmL77tgAAAH4"]
[Sat Aug 29 05:07:48.437708 2026] [security2:error] [pid 1034096:tid 1034312] [client 40.83.93.50:8199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/colors.php"] [unique_id "apK9hC04twRPFuquKD2Y-gAAAMI"]
[Sat Aug 29 05:07:48.438806 2026] [security2:error] [pid 1028675:tid 1028828] [client 158.23.147.79:6140] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-includes/blocks/post-excerpt/alfa-rex.PHP"] [unique_id "apK9hNdHPfW2QFvhmL77uQAAABI"]
[Sat Aug 29 05:07:48.446966 2026] [security2:error] [pid 1034096:tid 1034298] [client 20.104.18.15:36659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/wp-admin/js/wp-load.php"] [unique_id "apK9hC04twRPFuquKD2Y-wAAALQ"]
[Sat Aug 29 05:07:48.450165 2026] [security2:error] [pid 1034096:tid 1034308] [client 45.148.10.62:44814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wkm.vbd.mybluehost.me"] [uri "/.env.php"] [unique_id "apK9hC04twRPFuquKD2Y_QAAAL4"]
[Sat Aug 29 05:07:48.458237 2026] [security2:error] [pid 1034096:tid 1034263] [client 20.203.141.11:27654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-content/packed.php"] [unique_id "apK9hC04twRPFuquKD2Y_wAAAJE"]
[Sat Aug 29 05:07:48.464574 2026] [security2:error] [pid 1034096:tid 1034373] [client 158.23.147.79:17444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/classwithtostring.php"] [unique_id "apK9hC04twRPFuquKD2ZAQAAAP8"]
[Sat Aug 29 05:07:48.466229 2026] [security2:error] [pid 1028675:tid 1028886] [client 20.104.18.15:13693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/dk.php"] [unique_id "apK9hNdHPfW2QFvhmL77xAAAAEw"]
[Sat Aug 29 05:07:48.466978 2026] [security2:error] [pid 1028675:tid 1028898] [client 20.104.18.15:19434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/admin.php"] [unique_id "apK9hNdHPfW2QFvhmL77xQAAAFg"]
[Sat Aug 29 05:07:48.487194 2026] [security2:error] [pid 1028675:tid 1028887] [client 20.104.68.135:19771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.samshock.com"] [uri "/sm.php"] [unique_id "apK9hNdHPfW2QFvhmL77yQAAAE0"]
[Sat Aug 29 05:07:48.488729 2026] [security2:error] [pid 1034096:tid 1034282] [client 213.202.253.4:56687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bv-place.com"] [uri "/adminfuns.php"] [unique_id "apK9hC04twRPFuquKD2ZAwAAAKQ"], referer: www.google.com
[Sat Aug 29 05:07:48.498101 2026] [security2:error] [pid 1034096:tid 1034301] [client 93.123.109.228:42462] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.flicklister.com"] [uri "/___proxy_subdomain_cpcontacts/.env~"] [unique_id "apK9hC04twRPFuquKD2ZBAAAALc"]
[Sat Aug 29 05:07:48.505659 2026] [security2:error] [pid 1034096:tid 1034297] [client 20.104.18.15:12202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/xty.php"] [unique_id "apK9hC04twRPFuquKD2ZBQAAALM"]
[Sat Aug 29 05:07:48.508304 2026] [cgid:error] [pid 1028675:tid 1028813] [client 45.148.10.62:44786] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/ninjamov/public_html/404.shtml
[Sat Aug 29 05:07:48.523445 2026] [security2:error] [pid 1028675:tid 1028763] [remote 93.123.109.228:46162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flowerfh.com"] [uri "/public/phpinfo.php"] [unique_id "apK9hNdHPfW2QFvhmL770gAAJFI"]
[Sat Aug 29 05:07:48.525721 2026] [security2:error] [pid 1034096:tid 1034314] [client 20.63.219.114:13940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-blog-header.php"] [unique_id "apK9hC04twRPFuquKD2ZCAAAAMQ"]
[Sat Aug 29 05:07:48.535529 2026] [security2:error] [pid 1034096:tid 1034321] [client 40.83.93.50:8720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/wp-admin/class-db.php"] [unique_id "apK9hC04twRPFuquKD2ZDAAAAMs"]
[Sat Aug 29 05:07:48.537200 2026] [security2:error] [pid 1034096:tid 1034344] [client 20.104.104.62:20735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/miyabajingankoe.php"] [unique_id "apK9hC04twRPFuquKD2ZDQAAAOI"]
[Sat Aug 29 05:07:48.538879 2026] [security2:error] [pid 1034096:tid 1034344] [client 4.205.62.107:55956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/edit.php"] [unique_id "apK9hC04twRPFuquKD2ZDgAAAOI"]
[Sat Aug 29 05:07:48.553427 2026] [security2:error] [pid 1028675:tid 1028816] [client 20.104.104.62:48058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/sf9.php"] [unique_id "apK9hNdHPfW2QFvhmL771gAAAAY"]
[Sat Aug 29 05:07:48.587033 2026] [security2:error] [pid 1034096:tid 1034285] [client 20.104.18.15:5115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/backup.php"] [unique_id "apK9hC04twRPFuquKD2ZEQAAAKc"]
[Sat Aug 29 05:07:48.592633 2026] [security2:error] [pid 1034096:tid 1034256] [client 158.23.147.79:48232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK9hC04twRPFuquKD2ZEwAAAIo"]
[Sat Aug 29 05:07:48.597533 2026] [security2:error] [pid 1034096:tid 1034341] [client 93.123.109.228:42558] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/application/.env"] [unique_id "apK9hC04twRPFuquKD2ZFAAAAN8"]
[Sat Aug 29 05:07:48.600204 2026] [security2:error] [pid 1034096:tid 1034340] [client 158.158.54.35:18221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/gifclass.php"] [unique_id "apK9hC04twRPFuquKD2ZFQAAAN4"]
[Sat Aug 29 05:07:48.604994 2026] [security2:error] [pid 1034096:tid 1034273] [client 213.209.159.223:44463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "apK9hC04twRPFuquKD2ZGAAAAJs"]
[Sat Aug 29 05:07:48.607249 2026] [security2:error] [pid 1034096:tid 1034273] [client 168.107.94.195:54148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9hC04twRPFuquKD2ZGQAAAJs"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:48.613246 2026] [security2:error] [pid 1028675:tid 1028860] [client 20.104.49.130:36308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/155.php"] [unique_id "apK9hNdHPfW2QFvhmL773gAAADI"]
[Sat Aug 29 05:07:48.623254 2026] [security2:error] [pid 1034096:tid 1034345] [client 158.23.147.79:11276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK9hC04twRPFuquKD2ZGwAAAOM"]
[Sat Aug 29 05:07:48.623869 2026] [security2:error] [pid 1028675:tid 1028841] [client 93.123.109.228:42566] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/apps/.env"] [unique_id "apK9hNdHPfW2QFvhmL773wAAAB8"]
[Sat Aug 29 05:07:48.631612 2026] [security2:error] [pid 1028675:tid 1028901] [client 20.104.18.15:36667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/robot.php"] [unique_id "apK9hNdHPfW2QFvhmL774gAAAFs"]
[Sat Aug 29 05:07:48.654095 2026] [security2:error] [pid 1034096:tid 1034267] [client 20.104.18.15:19454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/ws85.php"] [unique_id "apK9hC04twRPFuquKD2ZHgAAAJU"]
[Sat Aug 29 05:07:48.674013 2026] [security2:error] [pid 1034096:tid 1034287] [client 195.178.110.247:39720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lindamcvayart.com"] [uri "/index.php"] [unique_id "apK9hC04twRPFuquKD2ZIwAAAKk"]
[Sat Aug 29 05:07:48.686705 2026] [security2:error] [pid 1034096:tid 1034252] [client 61.9.8.240:7729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK9hC04twRPFuquKD2ZIQAAAIY"]
[Sat Aug 29 05:07:48.686822 2026] [security2:error] [pid 1034096:tid 1034252] [client 61.9.8.240:7729] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK9hC04twRPFuquKD2ZIQAAAIY"]
[Sat Aug 29 05:07:48.691862 2026] [security2:error] [pid 1034096:tid 1034270] [client 20.104.18.15:13686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/ta.php"] [unique_id "apK9hC04twRPFuquKD2ZJQAAAJg"]
[Sat Aug 29 05:07:48.713464 2026] [security2:error] [pid 1028675:tid 1028825] [client 20.104.18.15:12215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/sallu.php"] [unique_id "apK9hNdHPfW2QFvhmL778QAAAA8"]
[Sat Aug 29 05:07:48.719944 2026] [security2:error] [pid 1028675:tid 1028890] [client 20.104.49.130:51096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/az.php"] [unique_id "apK9hNdHPfW2QFvhmL778gAAAFA"]
[Sat Aug 29 05:07:48.736393 2026] [security2:error] [pid 1028675:tid 1028907] [client 20.104.104.62:37602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/lte7.php"] [unique_id "apK9hNdHPfW2QFvhmL77-AAAAGE"]
[Sat Aug 29 05:07:48.746482 2026] [cgid:error] [pid 1028675:tid 1028904] [client 45.148.10.62:44786] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/ninjamov/public_html/404.shtml
[Sat Aug 29 05:07:48.759282 2026] [security2:error] [pid 1028675:tid 1028858] [client 20.104.68.135:19973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.samshock.com"] [uri "/shell.php"] [unique_id "apK9hNdHPfW2QFvhmL77_AAAADA"]
[Sat Aug 29 05:07:48.771901 2026] [security2:error] [pid 1028675:tid 1028843] [client 93.123.109.228:42516] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.flicklister.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.bak"] [unique_id "apK9hNdHPfW2QFvhmL77_wAAACE"]
[Sat Aug 29 05:07:48.787714 2026] [authz_core:error] [pid 1034096:tid 1034137] [remote 34.24.28.92:0] AH01630: client denied by server configuration: /home2/iosephos/public_html/jha/.vite
[Sat Aug 29 05:07:48.790046 2026] [security2:error] [pid 1028675:tid 1028844] [client 213.209.159.223:7572] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/web/.env"] [unique_id "apK9hNdHPfW2QFvhmL78AQAAACI"]
[Sat Aug 29 05:07:48.793271 2026] [security2:error] [pid 1034096:tid 1034313] [client 20.104.104.62:20852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/done.php"] [unique_id "apK9hC04twRPFuquKD2ZMAAAAMM"]
[Sat Aug 29 05:07:48.809012 2026] [security2:error] [pid 1034096:tid 1034325] [client 93.123.109.228:42462] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.flicklister.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config~"] [unique_id "apK9hC04twRPFuquKD2ZMgAAAM8"]
[Sat Aug 29 05:07:48.825109 2026] [security2:error] [pid 1034096:tid 1034339] [client 20.104.18.15:4963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/indo.php"] [unique_id "apK9hC04twRPFuquKD2ZNAAAAN0"]
[Sat Aug 29 05:07:48.825152 2026] [security2:error] [pid 1034096:tid 1034307] [client 20.104.18.15:19419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/ffs.php"] [unique_id "apK9hC04twRPFuquKD2ZNQAAAL0"]
[Sat Aug 29 05:07:48.826255 2026] [security2:error] [pid 1034096:tid 1034319] [client 195.178.110.247:33708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lindamcvayart.com"] [uri "/index.php"] [unique_id "apK9hC04twRPFuquKD2ZNgAAAMk"]
[Sat Aug 29 05:07:48.840470 2026] [security2:error] [pid 1028675:tid 1028936] [client 93.123.109.228:42454] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.flicklister.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.old"] [unique_id "apK9hNdHPfW2QFvhmL78CAAAAH4"]
[Sat Aug 29 05:07:48.841661 2026] [security2:error] [pid 1028675:tid 1028894] [client 20.104.18.15:36547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/revo.php"] [unique_id "apK9hNdHPfW2QFvhmL78CQAAAFQ"]
[Sat Aug 29 05:07:48.873510 2026] [security2:error] [pid 1028675:tid 1028851] [client 20.52.41.200:4559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/ahax.php"] [unique_id "apK9hNdHPfW2QFvhmL78DwAAACk"]
[Sat Aug 29 05:07:48.874426 2026] [security2:error] [pid 1034096:tid 1034262] [client 57.141.14.74:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/"] [unique_id "apK9hC04twRPFuquKD2ZPwAAAJA"]
[Sat Aug 29 05:07:48.877760 2026] [security2:error] [pid 1034096:tid 1034254] [client 111.235.68.106:6485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK9hC04twRPFuquKD2ZQAAAAIg"]
[Sat Aug 29 05:07:48.877894 2026] [security2:error] [pid 1034096:tid 1034254] [client 111.235.68.106:6485] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK9hC04twRPFuquKD2ZQAAAAIg"]
[Sat Aug 29 05:07:48.890556 2026] [security2:error] [pid 1028675:tid 1028879] [client 20.203.141.11:27989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/news.php"] [unique_id "apK9hNdHPfW2QFvhmL78EgAAAEU"]
[Sat Aug 29 05:07:48.891407 2026] [security2:error] [pid 1034096:tid 1034324] [client 20.63.219.114:4235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-blogs.php"] [unique_id "apK9hC04twRPFuquKD2ZQwAAAM4"]
[Sat Aug 29 05:07:48.895212 2026] [security2:error] [pid 1034096:tid 1034351] [client 20.104.104.62:37616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/tanjiro.php"] [unique_id "apK9hC04twRPFuquKD2ZRAAAAOk"]
[Sat Aug 29 05:07:48.919156 2026] [security2:error] [pid 1034096:tid 1034308] [client 20.104.18.15:13572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/bo.php"] [unique_id "apK9hC04twRPFuquKD2ZSQAAAL4"]
[Sat Aug 29 05:07:48.930930 2026] [security2:error] [pid 1034096:tid 1034296] [client 20.203.141.11:38631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-admin/js/index.php"] [unique_id "apK9hC04twRPFuquKD2ZSgAAALI"]
[Sat Aug 29 05:07:48.931341 2026] [security2:error] [pid 1028675:tid 1028815] [client 93.123.109.228:42450] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/back-api/.env"] [unique_id "apK9hNdHPfW2QFvhmL78GwAAAAU"]
[Sat Aug 29 05:07:48.931953 2026] [security2:error] [pid 1034096:tid 1034326] [client 40.83.93.50:8435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/Js.php"] [unique_id "apK9hC04twRPFuquKD2ZSwAAANA"]
[Sat Aug 29 05:07:48.937474 2026] [security2:error] [pid 1028675:tid 1028900] [client 213.209.159.223:7572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/phpinfo.php3"] [unique_id "apK9hNdHPfW2QFvhmL78HAAAAFo"]
[Sat Aug 29 05:07:48.948568 2026] [security2:error] [pid 1034096:tid 1034293] [client 93.123.109.228:42558] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/back/.env"] [unique_id "apK9hC04twRPFuquKD2ZTQAAAK8"]
[Sat Aug 29 05:07:48.948572 2026] [security2:error] [pid 1034096:tid 1034282] [client 93.123.109.228:42270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/back-end/.env"] [unique_id "apK9hC04twRPFuquKD2ZTAAAAKQ"]
[Sat Aug 29 05:07:48.952679 2026] [security2:error] [pid 1028675:tid 1028929] [client 45.148.10.62:44786] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ninjamover.com"] [uri "/backend/.env"] [unique_id "apK9hNdHPfW2QFvhmL78HgAAAHc"]
[Sat Aug 29 05:07:48.953126 2026] [security2:error] [pid 1028675:tid 1028811] [client 93.123.109.228:42566] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/backend-api/.env"] [unique_id "apK9hNdHPfW2QFvhmL78HwAAAAE"]
[Sat Aug 29 05:07:48.955628 2026] [security2:error] [pid 1028675:tid 1028886] [client 20.104.68.135:18298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.samshock.com"] [uri "/simple.php"] [unique_id "apK9hNdHPfW2QFvhmL78IAAAAEw"]
[Sat Aug 29 05:07:48.957003 2026] [security2:error] [pid 1034096:tid 1034282] [client 158.23.147.79:25423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/ans.php"] [unique_id "apK9hC04twRPFuquKD2ZTwAAAKQ"]
[Sat Aug 29 05:07:48.957545 2026] [access_compat:error] [pid 1034096:tid 1034335] [client 67.20.76.220:11228] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:07:48.987781 2026] [security2:error] [pid 1028675:tid 1028819] [client 168.107.94.195:54530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9hNdHPfW2QFvhmL78JAAAAAk"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:48.996789 2026] [security2:error] [pid 1034096:tid 1034255] [client 93.123.109.228:42500] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK9hC04twRPFuquKD2ZUgAAAIk"]
[Sat Aug 29 05:07:49.004320 2026] [security2:error] [pid 1034096:tid 1034346] [client 20.104.104.62:27658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.johngibsondrawings.com"] [uri "/xmlrpc.php"] [unique_id "apK9hS04twRPFuquKD2ZVQAAAOQ"]
[Sat Aug 29 05:07:49.005193 2026] [security2:error] [pid 1034096:tid 1034321] [client 20.104.18.15:5020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/sign.php"] [unique_id "apK9hS04twRPFuquKD2ZVgAAAMs"]
[Sat Aug 29 05:07:49.007393 2026] [security2:error] [pid 1034096:tid 1034311] [client 20.104.18.15:12100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/codex.php"] [unique_id "apK9hS04twRPFuquKD2ZVwAAAME"]
[Sat Aug 29 05:07:49.016687 2026] [security2:error] [pid 1034096:tid 1034265] [client 40.83.93.50:11561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/wp-contentt.php"] [unique_id "apK9hS04twRPFuquKD2ZWQAAAJM"]
[Sat Aug 29 05:07:49.025660 2026] [security2:error] [pid 1034096:tid 1034364] [client 158.23.147.79:50091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apK9hS04twRPFuquKD2ZWgAAAPY"]
[Sat Aug 29 05:07:49.028268 2026] [security2:error] [pid 1028675:tid 1028884] [client 4.205.62.107:22482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/goods.php"] [unique_id "apK9hddHPfW2QFvhmL78LwAAAEo"]
[Sat Aug 29 05:07:49.028887 2026] [security2:error] [pid 1028675:tid 1028931] [client 20.104.18.15:19418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/nano.php"] [unique_id "apK9hddHPfW2QFvhmL78MAAAAHk"]
[Sat Aug 29 05:07:49.032322 2026] [security2:error] [pid 1028675:tid 1028888] [client 20.104.104.62:48029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/Rk41.php"] [unique_id "apK9hddHPfW2QFvhmL78MQAAAE4"]
[Sat Aug 29 05:07:49.054281 2026] [security2:error] [pid 1028675:tid 1028835] [client 20.104.18.15:13759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/44.php"] [unique_id "apK9hddHPfW2QFvhmL78MwAAABk"]
[Sat Aug 29 05:07:49.061292 2026] [security2:error] [pid 1028675:tid 1028901] [client 20.104.18.15:36560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/birrs.php"] [unique_id "apK9hddHPfW2QFvhmL78NwAAAFs"]
[Sat Aug 29 05:07:49.071094 2026] [security2:error] [pid 1028675:tid 1028887] [client 158.23.147.79:54359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/index/function.php"] [unique_id "apK9hddHPfW2QFvhmL78OgAAAE0"]
[Sat Aug 29 05:07:49.112081 2026] [security2:error] [pid 1034096:tid 1034342] [client 93.123.109.228:42270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/backup/.env"] [unique_id "apK9hS04twRPFuquKD2ZZgAAAOA"]
[Sat Aug 29 05:07:49.112695 2026] [security2:error] [pid 1028675:tid 1028825] [client 93.123.109.228:42566] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/beta/.env"] [unique_id "apK9hddHPfW2QFvhmL78PgAAAA8"]
[Sat Aug 29 05:07:49.113097 2026] [security2:error] [pid 1034096:tid 1034258] [client 93.123.109.228:42558] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/be/.env"] [unique_id "apK9hS04twRPFuquKD2ZZQAAAIw"]
[Sat Aug 29 05:07:49.113180 2026] [security2:error] [pid 1034096:tid 1034334] [client 4.205.62.107:26675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/nzv.php"] [unique_id "apK9hS04twRPFuquKD2ZZwAAANg"]
[Sat Aug 29 05:07:49.122910 2026] [security2:error] [pid 1028675:tid 1028904] [client 213.209.159.223:48625] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/web/.env"] [unique_id "apK9hddHPfW2QFvhmL78QQAAAF4"]
[Sat Aug 29 05:07:49.129078 2026] [security2:error] [pid 1028675:tid 1028833] [client 45.148.10.62:44786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ninjamover.com"] [uri "/test.php"] [unique_id "apK9hddHPfW2QFvhmL78QwAAABc"]
[Sat Aug 29 05:07:49.138087 2026] [security2:error] [pid 1034096:tid 1034333] [client 4.205.62.107:58474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/sdsa.php"] [unique_id "apK9hS04twRPFuquKD2ZbAAAANc"]
[Sat Aug 29 05:07:49.154406 2026] [security2:error] [pid 1028675:tid 1028812] [client 20.104.68.135:18250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.samshock.com"] [uri "/wp-admin.php"] [unique_id "apK9hddHPfW2QFvhmL78RwAAAAI"]
[Sat Aug 29 05:07:49.174193 2026] [security2:error] [pid 1028675:tid 1028914] [client 20.104.49.130:60976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/df.php"] [unique_id "apK9hddHPfW2QFvhmL78SQAAAGg"]
[Sat Aug 29 05:07:49.188105 2026] [security2:error] [pid 1028675:tid 1028844] [client 20.104.18.15:12182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/5656.php"] [unique_id "apK9hddHPfW2QFvhmL78SgAAACI"]
[Sat Aug 29 05:07:49.202623 2026] [security2:error] [pid 1034096:tid 1034278] [client 20.104.18.15:14293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/h2.php"] [unique_id "apK9hS04twRPFuquKD2ZdgAAAKA"]
[Sat Aug 29 05:07:49.203727 2026] [security2:error] [pid 1034096:tid 1034318] [client 20.104.18.15:18935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/ano.php"] [unique_id "apK9hS04twRPFuquKD2ZdwAAAMg"]
[Sat Aug 29 05:07:49.208477 2026] [security2:error] [pid 1028675:tid 1028842] [client 158.23.147.79:35737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-mail.php"] [unique_id "apK9hddHPfW2QFvhmL78TgAAACA"]
[Sat Aug 29 05:07:49.216763 2026] [security2:error] [pid 1034096:tid 1034375] [client 158.158.54.35:6982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK9hS04twRPFuquKD2ZfQAAAQE"]
[Sat Aug 29 05:07:49.218170 2026] [security2:error] [pid 1034096:tid 1034299] [client 20.104.18.15:36577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/sss.php"] [unique_id "apK9hS04twRPFuquKD2ZfwAAALU"]
[Sat Aug 29 05:07:49.221789 2026] [security2:error] [pid 1028675:tid 1028855] [client 20.104.104.62:20689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/eviltwin.php"] [unique_id "apK9hddHPfW2QFvhmL78UAAAAC0"]
[Sat Aug 29 05:07:49.223572 2026] [security2:error] [pid 1028675:tid 1028814] [client 20.104.104.62:48052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/7logs.php"] [unique_id "apK9hddHPfW2QFvhmL78UwAAAAQ"]
[Sat Aug 29 05:07:49.228678 2026] [security2:error] [pid 1028675:tid 1028900] [client 20.104.18.15:4959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/wnnjpsby.php"] [unique_id "apK9hddHPfW2QFvhmL78VAAAAFo"]
[Sat Aug 29 05:07:49.247928 2026] [security2:error] [pid 1028675:tid 1028929] [client 93.123.109.228:42284] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/client/.env"] [unique_id "apK9hddHPfW2QFvhmL78VQAAAHc"]
[Sat Aug 29 05:07:49.249814 2026] [security2:error] [pid 1034096:tid 1034348] [client 20.63.219.114:7538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-comments-post.php"] [unique_id "apK9hS04twRPFuquKD2ZggAAAOY"]
[Sat Aug 29 05:07:49.257490 2026] [security2:error] [pid 1028675:tid 1028824] [client 213.209.159.223:48625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/phpinfo.php3"] [unique_id "apK9hddHPfW2QFvhmL78XQAAAA4"]
[Sat Aug 29 05:07:49.266107 2026] [security2:error] [pid 1028675:tid 1028819] [client 93.123.109.228:42566] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/cms/.env"] [unique_id "apK9hddHPfW2QFvhmL78XgAAAAk"]
[Sat Aug 29 05:07:49.282220 2026] [security2:error] [pid 1034096:tid 1034356] [client 20.104.104.62:27674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.johngibsondrawings.com"] [uri "/test1.php"] [unique_id "apK9hS04twRPFuquKD2ZhwAAAO4"]
[Sat Aug 29 05:07:49.297373 2026] [security2:error] [pid 1034096:tid 1034262] [client 4.205.62.107:22400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/fns.php"] [unique_id "apK9hS04twRPFuquKD2ZiAAAAJA"]
[Sat Aug 29 05:07:49.312764 2026] [security2:error] [pid 1034096:tid 1034323] [client 158.23.147.79:26609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-admin/index.php"] [unique_id "apK9hS04twRPFuquKD2ZiQAAAM0"]
[Sat Aug 29 05:07:49.335001 2026] [security2:error] [pid 1028675:tid 1028888] [client 20.104.18.15:13637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/wp-content/mod/adminfuns.php"] [unique_id "apK9hddHPfW2QFvhmL78bAAAAE4"]
[Sat Aug 29 05:07:49.336780 2026] [security2:error] [pid 1034096:tid 1034254] [client 158.23.147.79:30486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK9hS04twRPFuquKD2ZiwAAAIg"]
[Sat Aug 29 05:07:49.338239 2026] [security2:error] [pid 1028675:tid 1028930] [client 20.52.41.200:5361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/shell.php"] [unique_id "apK9hddHPfW2QFvhmL78bQAAAHg"]
[Sat Aug 29 05:07:49.343784 2026] [security2:error] [pid 1034096:tid 1034268] [client 34.81.157.26:52170] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/public/.env"] [unique_id "apK9hS04twRPFuquKD2ZjAAAAJY"]
[Sat Aug 29 05:07:49.353636 2026] [security2:error] [pid 1028675:tid 1028837] [client 34.81.157.26:52178] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/.github/.env"] [unique_id "apK9hddHPfW2QFvhmL78cgAAABs"]
[Sat Aug 29 05:07:49.355969 2026] [security2:error] [pid 1034096:tid 1034257] [client 20.104.68.135:18274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.samshock.com"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "apK9hS04twRPFuquKD2ZlAAAAIs"]
[Sat Aug 29 05:07:49.356894 2026] [security2:error] [pid 1028675:tid 1028922] [client 20.104.104.62:48016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/sf.php"] [unique_id "apK9hddHPfW2QFvhmL78dgAAAHA"]
[Sat Aug 29 05:07:49.364838 2026] [security2:error] [pid 1034096:tid 1034304] [client 20.203.141.11:13374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/about/function.php"] [unique_id "apK9hS04twRPFuquKD2ZmgAAALo"]
[Sat Aug 29 05:07:49.370701 2026] [security2:error] [pid 1028675:tid 1028823] [client 168.107.94.195:54926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9hddHPfW2QFvhmL78ewAAAA0"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:49.376233 2026] [security2:error] [pid 1028675:tid 1028901] [client 93.123.109.228:42434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/config.php"] [unique_id "apK9hddHPfW2QFvhmL78fQAAAFs"]
[Sat Aug 29 05:07:49.377447 2026] [security2:error] [pid 1034096:tid 1034353] [client 52.139.37.240:33536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/contentloader1.php"] [unique_id "apK9hS04twRPFuquKD2ZnwAAAOs"]
[Sat Aug 29 05:07:49.381044 2026] [core:error] [pid 1028675:tid 1028881] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:49.381062 2026] [core:error] [pid 1028675:tid 1028881] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:49.381301 2026] [core:error] [pid 1028675:tid 1028835] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:49.381314 2026] [core:error] [pid 1028675:tid 1028835] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:49.382617 2026] [security2:error] [pid 1034096:tid 1034369] [client 20.104.18.15:19358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/mgrr.php"] [unique_id "apK9hS04twRPFuquKD2ZogAAAPs"]
[Sat Aug 29 05:07:49.401192 2026] [core:error] [pid 1034096:tid 1034282] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:49.401216 2026] [core:error] [pid 1034096:tid 1034282] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:49.401761 2026] [core:error] [pid 1034096:tid 1034300] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:49.401781 2026] [core:error] [pid 1034096:tid 1034300] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:49.402942 2026] [security2:error] [pid 1028675:tid 1028886] [client 20.203.141.11:24291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/core.php"] [unique_id "apK9hddHPfW2QFvhmL78hAAAAEw"]
[Sat Aug 29 05:07:49.403783 2026] [core:error] [pid 1028675:tid 1028876] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:49.403798 2026] [core:error] [pid 1028675:tid 1028876] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:49.406210 2026] [security2:error] [pid 1034096:tid 1034319] [client 40.83.93.50:8431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/access.php"] [unique_id "apK9hS04twRPFuquKD2ZqAAAAMk"]
[Sat Aug 29 05:07:49.413753 2026] [core:error] [pid 1028675:tid 1028857] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:49.413778 2026] [core:error] [pid 1028675:tid 1028857] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:49.413797 2026] [core:error] [pid 1028675:tid 1028872] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:49.413814 2026] [core:error] [pid 1028675:tid 1028872] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:49.415203 2026] [core:error] [pid 1028675:tid 1028841] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:49.415222 2026] [core:error] [pid 1028675:tid 1028841] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:49.415397 2026] [core:error] [pid 1028675:tid 1028937] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:49.415414 2026] [core:error] [pid 1028675:tid 1028937] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:49.415490 2026] [core:error] [pid 1028675:tid 1028935] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:49.415501 2026] [core:error] [pid 1028675:tid 1028935] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:49.415639 2026] [security2:error] [pid 1028675:tid 1028935] [client 34.81.157.26:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/index.php"] [unique_id "apK9hddHPfW2QFvhmL78iQAAAH0"]
[Sat Aug 29 05:07:49.417805 2026] [security2:error] [pid 1028675:tid 1028909] [client 34.81.157.26:52258] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/aws-credentials"] [unique_id "apK9hddHPfW2QFvhmL78egAAAGM"]
[Sat Aug 29 05:07:49.420309 2026] [core:error] [pid 1028675:tid 1028840] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:49.420322 2026] [core:error] [pid 1028675:tid 1028840] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:49.424526 2026] [core:error] [pid 1034096:tid 1034360] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:49.424545 2026] [core:error] [pid 1034096:tid 1034360] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:49.449845 2026] [security2:error] [pid 1028675:tid 1028842] [client 93.123.109.228:42450] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/config/.env"] [unique_id "apK9hddHPfW2QFvhmL78kAAAACA"]
[Sat Aug 29 05:07:49.468822 2026] [security2:error] [pid 1034096:tid 1034259] [client 20.104.18.15:12218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/w3lls.php"] [unique_id "apK9hS04twRPFuquKD2ZrQAAAI0"]
[Sat Aug 29 05:07:49.471151 2026] [security2:error] [pid 1034096:tid 1034340] [client 20.104.18.15:13608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/sao.php"] [unique_id "apK9hS04twRPFuquKD2ZrgAAAN4"]
[Sat Aug 29 05:07:49.472371 2026] [security2:error] [pid 1034096:tid 1034330] [client 52.139.37.240:62406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jobindjibouti.eastacare.com"] [uri "/07.php"] [unique_id "apK9hS04twRPFuquKD2ZrwAAANQ"]
[Sat Aug 29 05:07:49.473460 2026] [security2:error] [pid 1034096:tid 1034292] [client 20.104.18.15:4934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/gigi.php"] [unique_id "apK9hS04twRPFuquKD2ZsAAAAK4"]
[Sat Aug 29 05:07:49.479604 2026] [security2:error] [pid 1034096:tid 1034362] [client 20.104.104.62:27675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.johngibsondrawings.com"] [uri "/upload.php"] [unique_id "apK9hS04twRPFuquKD2ZswAAAPQ"]
[Sat Aug 29 05:07:49.484287 2026] [security2:error] [pid 1028675:tid 1028931] [client 40.83.93.50:8209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/theme.php"] [unique_id "apK9hddHPfW2QFvhmL78lQAAAHk"]
[Sat Aug 29 05:07:49.492652 2026] [security2:error] [pid 1028675:tid 1028811] [client 20.104.104.62:37595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/super.php"] [unique_id "apK9hddHPfW2QFvhmL78mgAAAAE"]
[Sat Aug 29 05:07:49.494681 2026] [security2:error] [pid 1034096:tid 1034358] [client 158.23.147.79:32599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-includes/plugins.php"] [unique_id "apK9hS04twRPFuquKD2ZtgAAAPA"]
[Sat Aug 29 05:07:49.503072 2026] [autoindex:error] [pid 1034096:tid 1034337] [client 52.139.37.240:16762] AH01276: Cannot serve directory /home4/fairfax6/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:07:49.509817 2026] [security2:error] [pid 1028675:tid 1028844] [client 52.139.37.240:37256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK9hddHPfW2QFvhmL78mwAAACI"]
[Sat Aug 29 05:07:49.514787 2026] [security2:error] [pid 1034096:tid 1034350] [client 93.123.109.228:42534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/config/aws.php"] [unique_id "apK9hS04twRPFuquKD2ZuQAAAOg"]
[Sat Aug 29 05:07:49.529426 2026] [security2:error] [pid 1028675:tid 1028851] [client 93.123.109.228:42486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/config/config.inc.php"] [unique_id "apK9hddHPfW2QFvhmL78oQAAACk"]
[Sat Aug 29 05:07:49.540152 2026] [security2:error] [pid 1034096:tid 1034367] [client 4.205.62.107:53368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/localconf.php"] [unique_id "apK9hS04twRPFuquKD2ZvwAAAPk"]
[Sat Aug 29 05:07:49.548661 2026] [security2:error] [pid 1034096:tid 1034348] [client 158.23.147.79:6114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK9hS04twRPFuquKD2ZwQAAAOY"]
[Sat Aug 29 05:07:49.550749 2026] [security2:error] [pid 1034096:tid 1034273] [client 20.104.68.135:19658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.samshock.com"] [uri "/wp-admin/includes/about.php"] [unique_id "apK9hS04twRPFuquKD2ZwgAAAJs"]
[Sat Aug 29 05:07:49.566870 2026] [security2:error] [pid 1028675:tid 1028884] [client 93.123.109.228:42350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/config/config.php"] [unique_id "apK9hddHPfW2QFvhmL78owAAAEo"]
[Sat Aug 29 05:07:49.568261 2026] [security2:error] [pid 1034096:tid 1034313] [client 52.139.37.240:16762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/wp-content/155.php"] [unique_id "apK9hS04twRPFuquKD2ZxQAAAMM"]
[Sat Aug 29 05:07:49.574311 2026] [security2:error] [pid 1034096:tid 1034355] [client 158.23.147.79:17528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/install.php"] [unique_id "apK9hS04twRPFuquKD2ZxwAAAO0"]
[Sat Aug 29 05:07:49.574336 2026] [security2:error] [pid 1034096:tid 1034279] [client 52.139.37.240:32852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/upfile.php"] [unique_id "apK9hS04twRPFuquKD2ZxgAAAKE"]
[Sat Aug 29 05:07:49.586017 2026] [security2:error] [pid 1028675:tid 1028930] [client 20.104.104.62:20678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/manage.php"] [unique_id "apK9hddHPfW2QFvhmL78pQAAAHg"]
[Sat Aug 29 05:07:49.595141 2026] [security2:error] [pid 1028675:tid 1028837] [client 20.104.18.15:19365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/mac.php"] [unique_id "apK9hddHPfW2QFvhmL78qgAAABs"]
[Sat Aug 29 05:07:49.609557 2026] [security2:error] [pid 1034096:tid 1034290] [client 20.63.219.114:13897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-config.php"] [unique_id "apK9hS04twRPFuquKD2ZzAAAAKw"]
[Sat Aug 29 05:07:49.630606 2026] [security2:error] [pid 1028675:tid 1028820] [client 103.162.125.59:57910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.125.162.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK9hddHPfW2QFvhmL78rgAAAAo"]
[Sat Aug 29 05:07:49.630769 2026] [security2:error] [pid 1028675:tid 1028820] [client 103.162.125.59:57910] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK9hddHPfW2QFvhmL78rgAAAAo"]
[Sat Aug 29 05:07:49.635391 2026] [security2:error] [pid 1028675:tid 1028835] [client 20.104.18.15:5058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/info.php/new.php"] [unique_id "apK9hddHPfW2QFvhmL78rwAAABk"]
[Sat Aug 29 05:07:49.636447 2026] [security2:error] [pid 1028675:tid 1028815] [client 20.104.104.62:37511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/lufix1.php"] [unique_id "apK9hddHPfW2QFvhmL78sAAAAAU"]
[Sat Aug 29 05:07:49.657204 2026] [security2:error] [pid 1034096:tid 1034371] [client 93.123.109.228:42386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/config/env.php"] [unique_id "apK9hS04twRPFuquKD2ZzgAAAP0"]
[Sat Aug 29 05:07:49.668463 2026] [security2:error] [pid 1028675:tid 1028823] [client 52.139.37.240:63598] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "jobindjibouti.eastacare.com"] [uri "/c99.php"] [unique_id "apK9hddHPfW2QFvhmL78tQAAAA0"]
[Sat Aug 29 05:07:49.673537 2026] [security2:error] [pid 1034096:tid 1034347] [client 20.104.49.130:58051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.carlosmua.com"] [uri "/abc.php"] [unique_id "apK9hS04twRPFuquKD2ZzwAAAOU"]
[Sat Aug 29 05:07:49.675297 2026] [security2:error] [pid 1028675:tid 1028936] [client 20.104.18.15:13702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/dapa.php"] [unique_id "apK9hddHPfW2QFvhmL78twAAAH4"]
[Sat Aug 29 05:07:49.680130 2026] [security2:error] [pid 1034096:tid 1034294] [client 158.158.54.35:7015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/css/index.php"] [unique_id "apK9hS04twRPFuquKD2Z0QAAALA"]
[Sat Aug 29 05:07:49.683037 2026] [security2:error] [pid 1034096:tid 1034353] [client 93.123.109.228:42366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/config/module.config.php"] [unique_id "apK9hS04twRPFuquKD2Z0gAAAOs"]
[Sat Aug 29 05:07:49.694116 2026] [security2:error] [pid 1028675:tid 1028880] [client 4.205.62.107:56044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/8.php"] [unique_id "apK9hddHPfW2QFvhmL78vAAAAEY"]
[Sat Aug 29 05:07:49.719872 2026] [security2:error] [pid 1034096:tid 1034351] [client 158.23.147.79:48145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/packed.php"] [unique_id "apK9hS04twRPFuquKD2Z2QAAAOk"]
[Sat Aug 29 05:07:49.727384 2026] [security2:error] [pid 1028675:tid 1028914] [client 93.123.109.228:42476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/config/nexmo.php"] [unique_id "apK9hddHPfW2QFvhmL78wAAAAGg"]
[Sat Aug 29 05:07:49.731501 2026] [security2:error] [pid 1028675:tid 1028890] [client 93.123.109.228:42310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/config/stripe.php"] [unique_id "apK9hddHPfW2QFvhmL78wgAAAFA"]
[Sat Aug 29 05:07:49.732473 2026] [security2:error] [pid 1028675:tid 1028842] [client 158.23.147.79:11346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/simple.php"] [unique_id "apK9hddHPfW2QFvhmL78wwAAACA"]
[Sat Aug 29 05:07:49.745123 2026] [security2:error] [pid 1034096:tid 1034373] [client 52.139.37.240:37737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/zafir1.php"] [unique_id "apK9hS04twRPFuquKD2Z2wAAAP8"]
[Sat Aug 29 05:07:49.747675 2026] [security2:error] [pid 1028675:tid 1028872] [client 20.104.68.135:19111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.samshock.com"] [uri "/wp-admin/js/index.php"] [unique_id "apK9hddHPfW2QFvhmL78xgAAAD4"]
[Sat Aug 29 05:07:49.751275 2026] [security2:error] [pid 1028675:tid 1028900] [client 168.107.94.195:55197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9hddHPfW2QFvhmL78xwAAAFo"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:49.755985 2026] [security2:error] [pid 1028675:tid 1028935] [client 52.139.37.240:16742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/wp-update.php"] [unique_id "apK9hddHPfW2QFvhmL78ywAAAH0"]
[Sat Aug 29 05:07:49.775372 2026] [security2:error] [pid 1034096:tid 1034277] [client 20.104.18.15:18887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/simple.php"] [unique_id "apK9hS04twRPFuquKD2Z4gAAAJ8"]
[Sat Aug 29 05:07:49.778633 2026] [security2:error] [pid 1028675:tid 1028909] [client 52.139.37.240:32864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/form.php"] [unique_id "apK9hddHPfW2QFvhmL78zQAAAGM"]
[Sat Aug 29 05:07:49.786395 2026] [security2:error] [pid 1034096:tid 1034278] [client 20.104.18.15:36641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/wp-includes/ID3/moon.php"] [unique_id "apK9hS04twRPFuquKD2Z5QAAAKA"]
[Sat Aug 29 05:07:49.795830 2026] [security2:error] [pid 1028675:tid 1028847] [client 20.52.41.200:5352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/elp.php"] [unique_id "apK9hddHPfW2QFvhmL78zwAAACU"]
[Sat Aug 29 05:07:49.802993 2026] [security2:error] [pid 1028675:tid 1028878] [client 20.104.18.15:12225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/fpwch.php"] [unique_id "apK9hddHPfW2QFvhmL780QAAAEQ"]
[Sat Aug 29 05:07:49.809600 2026] [security2:error] [pid 1034096:tid 1034306] [client 20.104.104.62:37611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/hack.php"] [unique_id "apK9hS04twRPFuquKD2Z6QAAALw"]
[Sat Aug 29 05:07:49.810785 2026] [security2:error] [pid 1034096:tid 1034281] [client 20.104.18.15:13638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/wp-content/l.php"] [unique_id "apK9hS04twRPFuquKD2Z6gAAAKM"]
[Sat Aug 29 05:07:49.858317 2026] [security2:error] [pid 1034096:tid 1034361] [client 20.104.49.130:51094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/bdroot.php"] [unique_id "apK9hS04twRPFuquKD2Z8AAAAPM"]
[Sat Aug 29 05:07:49.865046 2026] [security2:error] [pid 1034096:tid 1034274] [client 52.139.37.240:62211] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "jobindjibouti.eastacare.com"] [uri "/c99.php"] [unique_id "apK9hS04twRPFuquKD2Z8QAAAJw"]
[Sat Aug 29 05:07:49.870889 2026] [security2:error] [pid 1028675:tid 1028862] [client 20.104.104.62:40239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/mforh.php"] [unique_id "apK9hddHPfW2QFvhmL784QAAADQ"]
[Sat Aug 29 05:07:49.871562 2026] [security2:error] [pid 1028675:tid 1028840] [client 20.203.141.11:38155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/admin/function.php"] [unique_id "apK9hddHPfW2QFvhmL784gAAAB4"]
[Sat Aug 29 05:07:49.892179 2026] [security2:error] [pid 1034096:tid 1034342] [client 45.148.10.62:44820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wkm.vbd.mybluehost.me"] [uri "/wp-config.php"] [unique_id "apK9hS04twRPFuquKD2Z9AAAAOA"]
[Sat Aug 29 05:07:49.915037 2026] [access_compat:error] [pid 1034096:tid 1034297] [client 67.20.76.220:11242] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:07:49.919244 2026] [security2:error] [pid 1034096:tid 1034270] [client 20.104.104.62:27676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.johngibsondrawings.com"] [uri "/wp-admin/js/index.php"] [unique_id "apK9hS04twRPFuquKD2Z9wAAAJg"]
[Sat Aug 29 05:07:49.940302 2026] [security2:error] [pid 1028675:tid 1028888] [client 52.139.37.240:37139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/abc.php"] [unique_id "apK9hddHPfW2QFvhmL788AAAAE4"]
[Sat Aug 29 05:07:49.949603 2026] [security2:error] [pid 1028675:tid 1028881] [client 52.139.37.240:16704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/xmrlpc.php"] [unique_id "apK9hddHPfW2QFvhmL788gAAAEc"]
[Sat Aug 29 05:07:49.968822 2026] [security2:error] [pid 1034096:tid 1034367] [client 20.104.18.15:12166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/domvf.php"] [unique_id "apK9hS04twRPFuquKD2aAQAAAPk"]
[Sat Aug 29 05:07:49.973893 2026] [security2:error] [pid 1028675:tid 1028928] [client 20.63.219.114:7510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-configs.php"] [unique_id "apK9hddHPfW2QFvhmL789QAAAHY"]
[Sat Aug 29 05:07:49.978722 2026] [security2:error] [pid 1028675:tid 1028814] [client 20.104.18.15:19342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/xty.php"] [unique_id "apK9hddHPfW2QFvhmL789gAAAAQ"]
[Sat Aug 29 05:07:49.979577 2026] [security2:error] [pid 1028675:tid 1028857] [client 20.203.141.11:1206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-includes/admin.php"] [unique_id "apK9hddHPfW2QFvhmL789wAAAC8"]
[Sat Aug 29 05:07:49.979618 2026] [security2:error] [pid 1034096:tid 1034345] [client 52.139.37.240:33158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/wp-sigunq.php"] [unique_id "apK9hS04twRPFuquKD2aAgAAAOM"]
[Sat Aug 29 05:07:49.982985 2026] [security2:error] [pid 1028675:tid 1028876] [client 20.104.104.62:48034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/155.php"] [unique_id "apK9hddHPfW2QFvhmL78-QAAAEI"]
[Sat Aug 29 05:07:49.985092 2026] [security2:error] [pid 1034096:tid 1034331] [client 40.83.93.50:8388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/alumni_reg.php"] [unique_id "apK9hS04twRPFuquKD2aAwAAANU"]
[Sat Aug 29 05:07:49.990347 2026] [security2:error] [pid 1034096:tid 1034307] [client 20.104.18.15:13578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/wp-admin/w.php"] [unique_id "apK9hS04twRPFuquKD2aBAAAAL0"]
[Sat Aug 29 05:07:50.013617 2026] [security2:error] [pid 1028675:tid 1028823] [client 20.104.18.15:36569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/xmini4.php"] [unique_id "apK9htdHPfW2QFvhmL79AQAAAA0"]
[Sat Aug 29 05:07:50.030958 2026] [security2:error] [pid 1034096:tid 1034271] [client 20.104.68.135:19086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.samshock.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK9hi04twRPFuquKD2aBgAAAJk"]
[Sat Aug 29 05:07:50.050243 2026] [security2:error] [pid 1028675:tid 1028828] [client 20.104.18.15:5052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/w.php"] [unique_id "apK9htdHPfW2QFvhmL79BQAAABI"]
[Sat Aug 29 05:07:50.060539 2026] [security2:error] [pid 1028675:tid 1028859] [client 52.139.37.240:63582] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "jobindjibouti.eastacare.com"] [uri "/c99.php"] [unique_id "apK9htdHPfW2QFvhmL79CgAAADE"]
[Sat Aug 29 05:07:50.079669 2026] [security2:error] [pid 1034096:tid 1034254] [client 93.123.109.228:42270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/crm/.env"] [unique_id "apK9hi04twRPFuquKD2aCwAAAIg"]
[Sat Aug 29 05:07:50.098968 2026] [security2:error] [pid 1034096:tid 1034320] [client 93.123.109.228:42252] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/cron/.env"] [unique_id "apK9hi04twRPFuquKD2aDQAAAMo"]
[Sat Aug 29 05:07:50.112216 2026] [security2:error] [pid 1034096:tid 1034263] [client 20.104.18.15:19334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/sallu.php"] [unique_id "apK9hi04twRPFuquKD2aDgAAAJE"]
[Sat Aug 29 05:07:50.118566 2026] [security2:error] [pid 1028675:tid 1028846] [client 20.104.104.62:28547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.johngibsondrawings.com"] [uri "/wp-admin/post.php"] [unique_id "apK9htdHPfW2QFvhmL79EQAAACQ"]
[Sat Aug 29 05:07:50.124406 2026] [security2:error] [pid 1034096:tid 1034371] [client 20.104.18.15:14280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/wp-content/k.php"] [unique_id "apK9hi04twRPFuquKD2aDwAAAP0"]
[Sat Aug 29 05:07:50.125095 2026] [security2:error] [pid 1028675:tid 1028858] [client 93.123.109.228:42284] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/current/.env"] [unique_id "apK9htdHPfW2QFvhmL79EwAAADA"]
[Sat Aug 29 05:07:50.129748 2026] [security2:error] [pid 1028675:tid 1028911] [client 158.158.54.35:12940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-cron.php"] [unique_id "apK9htdHPfW2QFvhmL79FAAAAGU"]
[Sat Aug 29 05:07:50.131648 2026] [security2:error] [pid 1034096:tid 1034275] [client 168.107.94.195:55638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK9hi04twRPFuquKD2aEAAAAJ0"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:50.137481 2026] [security2:error] [pid 1034096:tid 1034347] [client 158.23.147.79:49844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK9hi04twRPFuquKD2aEQAAAOU"]
[Sat Aug 29 05:07:50.147946 2026] [security2:error] [pid 1028675:tid 1028904] [client 40.83.93.50:8207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/classsmtps.php"] [unique_id "apK9htdHPfW2QFvhmL79GAAAAF4"]
[Sat Aug 29 05:07:50.148283 2026] [security2:error] [pid 1034096:tid 1034302] [client 93.123.109.228:42280] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/demo/.env"] [unique_id "apK9hi04twRPFuquKD2aFAAAALg"]
[Sat Aug 29 05:07:50.160076 2026] [security2:error] [pid 1034096:tid 1034276] [client 52.139.37.240:37295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/c1.php"] [unique_id "apK9hi04twRPFuquKD2aFQAAAJ4"]
[Sat Aug 29 05:07:50.168874 2026] [security2:error] [pid 1028675:tid 1028813] [client 93.123.109.228:42566] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/dev/.env"] [unique_id "apK9htdHPfW2QFvhmL79GgAAAAM"]
[Sat Aug 29 05:07:50.171050 2026] [security2:error] [pid 1034096:tid 1034295] [client 52.139.37.240:33210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/07.php"] [unique_id "apK9hi04twRPFuquKD2aGQAAALE"]
[Sat Aug 29 05:07:50.181625 2026] [security2:error] [pid 1034096:tid 1034366] [client 4.205.62.107:22031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/loxi-o.php"] [unique_id "apK9hi04twRPFuquKD2aGgAAAPg"]
[Sat Aug 29 05:07:50.182038 2026] [security2:error] [pid 1034096:tid 1034260] [client 52.139.37.240:56106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/about/function.php"] [unique_id "apK9hi04twRPFuquKD2aHAAAAI4"]
[Sat Aug 29 05:07:50.192372 2026] [security2:error] [pid 1028675:tid 1028821] [client 20.104.18.15:36633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/gulu.php"] [unique_id "apK9htdHPfW2QFvhmL79HQAAAAs"]
[Sat Aug 29 05:07:50.200193 2026] [security2:error] [pid 1034096:tid 1034267] [client 20.104.18.15:12235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/biufile.php"] [unique_id "apK9hi04twRPFuquKD2aHwAAAJU"]
[Sat Aug 29 05:07:50.200192 2026] [security2:error] [pid 1028675:tid 1028861] [client 93.123.109.228:42542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flicklister.com"] [uri "/.wp-config.php.swp"] [unique_id "apK9htdHPfW2QFvhmL79HwAAADM"]
[Sat Aug 29 05:07:50.206485 2026] [security2:error] [pid 1034096:tid 1034273] [client 45.148.10.62:44824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "ninjamover.com"] [uri "/.env.backup"] [unique_id "apK9hi04twRPFuquKD2aIAAAAJs"]
[Sat Aug 29 05:07:50.209795 2026] [security2:error] [pid 1034096:tid 1034273] [client 93.123.109.228:42324] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/develop/.env"] [unique_id "apK9hi04twRPFuquKD2aIQAAAJs"]
[Sat Aug 29 05:07:50.215931 2026] [security2:error] [pid 1034096:tid 1034289] [client 93.123.109.228:42498] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/developer/.env"] [unique_id "apK9hi04twRPFuquKD2aIgAAAKs"]
[Sat Aug 29 05:07:50.229837 2026] [security2:error] [pid 1028675:tid 1028819] [client 20.104.68.135:19105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.samshock.com"] [uri "/wp-admin/network/admin.php"] [unique_id "apK9htdHPfW2QFvhmL79JAAAAAk"]
[Sat Aug 29 05:07:50.237800 2026] [security2:error] [pid 1034096:tid 1034277] [client 20.104.18.15:5021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/x.php"] [unique_id "apK9hi04twRPFuquKD2aJAAAAJ8"]
[Sat Aug 29 05:07:50.239542 2026] [security2:error] [pid 1034096:tid 1034265] [client 93.123.109.228:42270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/development/.env"] [unique_id "apK9hi04twRPFuquKD2aJQAAAJM"]
[Sat Aug 29 05:07:50.251085 2026] [security2:error] [pid 1034096:tid 1034257] [client 20.52.41.200:5354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-content/cong.php"] [unique_id "apK9hi04twRPFuquKD2aJgAAAIs"]
[Sat Aug 29 05:07:50.261384 2026] [security2:error] [pid 1028675:tid 1028837] [client 93.123.109.228:42518] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flicklister.com"] [uri "/___proxy_subdomain_cpcontacts/ADMIN/.env"] [unique_id "apK9htdHPfW2QFvhmL79KAAAABs"]
[Sat Aug 29 05:07:50.264464 2026] [security2:error] [pid 1028675:tid 1028856] [client 4.205.62.107:25948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/66.php"] [unique_id "apK9htdHPfW2QFvhmL79KQAAAC4"]
[Sat Aug 29 05:07:50.272248 2026] [security2:error] [pid 1028675:tid 1028896] [client 4.205.62.107:51422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/bengi.php"] [unique_id "apK9htdHPfW2QFvhmL79KgAAAFY"]
[Sat Aug 29 05:07:50.287200 2026] [security2:error] [pid 1028675:tid 1028887] [client 20.104.104.62:64736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/mygagal.php"] [unique_id "apK9htdHPfW2QFvhmL79KwAAAE0"]
[Sat Aug 29 05:07:50.300059 2026] [security2:error] [pid 1034096:tid 1034352] [client 20.104.18.15:14303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/os.php"] [unique_id "apK9hi04twRPFuquKD2aKAAAAOo"]
[Sat Aug 29 05:07:50.323190 2026] [security2:error] [pid 1034096:tid 1034333] [client 20.104.18.15:18928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/codex.php"] [unique_id "apK9hi04twRPFuquKD2aLAAAANc"]
[Sat Aug 29 05:07:50.332468 2026] [security2:error] [pid 1034096:tid 1034346] [client 20.63.219.114:7518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-conflg.php"] [unique_id "apK9hi04twRPFuquKD2aLQAAAOQ"]
[Sat Aug 29 05:07:50.341917 2026] [security2:error] [pid 1034096:tid 1034287] [client 158.23.147.79:35764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/cgi-bin/index.php"] [unique_id "apK9hi04twRPFuquKD2aLwAAAKk"]
[Sat Aug 29 05:07:50.344519 2026] [security2:error] [pid 1034096:tid 1034375] [client 20.104.18.15:12280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/blacks.php"] [unique_id "apK9hi04twRPFuquKD2aMQAAAQE"]
[Sat Aug 29 05:07:50.347130 2026] [security2:error] [pid 1028675:tid 1028860] [client 93.123.109.228:42454] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flicklister.com"] [uri "/___proxy_subdomain_cpcontacts/API/.env"] [unique_id "apK9htdHPfW2QFvhmL79MQAAADI"]
[Sat Aug 29 05:07:50.358813 2026] [security2:error] [pid 1034096:tid 1034354] [client 158.23.147.79:25370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/worksec.php"] [unique_id "apK9hi04twRPFuquKD2aMwAAAOw"]
[Sat Aug 29 05:07:50.359199 2026] [security2:error] [pid 1034096:tid 1034328] [client 52.139.37.240:36889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/index.php/feed/atom/"] [unique_id "apK9hi04twRPFuquKD2aNAAAANI"]
[Sat Aug 29 05:07:50.361092 2026] [security2:error] [pid 1034096:tid 1034340] [client 52.139.37.240:32875] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "petgrooming.penmarketing.org"] [uri "/c99.php"] [unique_id "apK9hi04twRPFuquKD2aNgAAAN4"]
[Sat Aug 29 05:07:50.374058 2026] [security2:error] [pid 1034096:tid 1034283] [client 45.148.10.62:44824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "ninjamover.com"] [uri "/.env.old"] [unique_id "apK9hi04twRPFuquKD2aOgAAAKU"]
[Sat Aug 29 05:07:50.375130 2026] [security2:error] [pid 1034096:tid 1034330] [client 52.139.37.240:56097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/an.php"] [unique_id "apK9hi04twRPFuquKD2aPAAAANQ"]
[Sat Aug 29 05:07:50.390536 2026] [security2:error] [pid 1034096:tid 1034319] [client 45.148.10.62:44834] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "mail.wkm.vbd.mybluehost.me"] [uri "/wp-config.php.old"] [unique_id "apK9hi04twRPFuquKD2aPgAAAMk"]
[Sat Aug 29 05:07:50.392222 2026] [security2:error] [pid 1034096:tid 1034311] [client 20.203.141.11:33680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/admin/index.php"] [unique_id "apK9hi04twRPFuquKD2aPwAAAME"]
[Sat Aug 29 05:07:50.402223 2026] [security2:error] [pid 1034096:tid 1034281] [client 35.194.208.44:24096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/public/.env"] [unique_id "apK9hi04twRPFuquKD2aQQAAAKM"]
[Sat Aug 29 05:07:50.402402 2026] [security2:error] [pid 1034096:tid 1034281] [client 35.194.208.44:24096] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/public/.env"] [unique_id "apK9hi04twRPFuquKD2aQQAAAKM"]
[Sat Aug 29 05:07:50.404920 2026] [security2:error] [pid 1028675:tid 1028892] [client 35.194.208.44:24110] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/.git/HEAD"] [unique_id "apK9htdHPfW2QFvhmL79PAAAAFI"]
[Sat Aug 29 05:07:50.412127 2026] [security2:error] [pid 1028675:tid 1028820] [client 35.194.208.44:24142] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/.github/.env"] [unique_id "apK9htdHPfW2QFvhmL79PgAAAAo"]
[Sat Aug 29 05:07:50.427083 2026] [security2:error] [pid 1028675:tid 1028728] [remote 93.123.109.228:46162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flowerfh.com"] [uri "/test.php"] [unique_id "apK9htdHPfW2QFvhmL79RwAAcC8"]
[Sat Aug 29 05:07:50.427182 2026] [security2:error] [pid 1028675:tid 1028876] [client 20.104.68.135:19705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.samshock.com"] [uri "/wp-conflg/function.php"] [unique_id "apK9htdHPfW2QFvhmL79SAAAAEI"]
[Sat Aug 29 05:07:50.432911 2026] [security2:error] [pid 1034096:tid 1034316] [client 35.194.208.44:24234] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/.azure/credentials"] [unique_id "apK9hi04twRPFuquKD2aTQAAAMY"]
[Sat Aug 29 05:07:50.435576 2026] [security2:error] [pid 1028675:tid 1028907] [client 4.205.62.107:22447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/25.php"] [unique_id "apK9htdHPfW2QFvhmL79SgAAAGE"]
[Sat Aug 29 05:07:50.441737 2026] [security2:error] [pid 1028675:tid 1028880] [client 158.23.147.79:30509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/log-mama/function.php"] [unique_id "apK9htdHPfW2QFvhmL79TQAAAEY"]
[Sat Aug 29 05:07:50.442817 2026] [security2:error] [pid 1034096:tid 1034251] [client 20.104.18.15:5097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/ssla.php"] [unique_id "apK9hi04twRPFuquKD2aVAAAAIU"]
[Sat Aug 29 05:07:50.446611 2026] [security2:error] [pid 1034096:tid 1034315] [client 20.104.18.15:36573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/replace.php"] [unique_id "apK9hi04twRPFuquKD2aWQAAAMU"]
[Sat Aug 29 05:07:50.456254 2026] [security2:error] [pid 1028675:tid 1028901] [client 20.104.18.15:18927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/5656.php"] [unique_id "apK9htdHPfW2QFvhmL79TwAAAFs"]
[Sat Aug 29 05:07:50.465173 2026] [security2:error] [pid 1034096:tid 1034286] [client 20.104.18.15:13712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/htio.php"] [unique_id "apK9hi04twRPFuquKD2aWwAAAKg"]
[Sat Aug 29 05:07:50.467833 2026] [security2:error] [pid 1034096:tid 1034357] [client 40.83.93.50:11582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/colors.php"] [unique_id "apK9hi04twRPFuquKD2aXAAAAO8"]
[Sat Aug 29 05:07:50.471555 2026] [security2:error] [pid 1034096:tid 1034310] [client 158.23.147.79:26613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-content/themes/index.php"] [unique_id "apK9hi04twRPFuquKD2aXgAAAMA"]
[Sat Aug 29 05:07:50.488373 2026] [security2:error] [pid 1034096:tid 1034299] [client 68.155.159.216:64386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK9hi04twRPFuquKD2aYQAAALU"]
[Sat Aug 29 05:07:50.504852 2026] [security2:error] [pid 1028675:tid 1028846] [client 93.123.109.228:42566] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/erp/.env"] [unique_id "apK9htdHPfW2QFvhmL79VgAAACQ"]
[Sat Aug 29 05:07:50.504852 2026] [security2:error] [pid 1034096:tid 1034284] [client 93.123.109.228:42520] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flicklister.com"] [uri "/___proxy_subdomain_cpcontacts/APP/.env"] [unique_id "apK9hi04twRPFuquKD2aYgAAAKY"]
[Sat Aug 29 05:07:50.512561 2026] [security2:error] [pid 1034096:tid 1034276] [client 168.107.94.195:56018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.94.107.168.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-admin/index.php"] [unique_id "apK9hi04twRPFuquKD2aYwAAAJ4"], referer: http://grizzcustomcabinets.com/wp-login.php
[Sat Aug 29 05:07:50.514745 2026] [security2:error] [pid 1034096:tid 1034324] [client 93.123.109.228:42500] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/etc/apache2/apache2.conf"] [unique_id "apK9hi04twRPFuquKD2aZAAAAM4"]
[Sat Aug 29 05:07:50.516318 2026] [security2:error] [pid 1028675:tid 1028841] [client 127.0.0.1:41612] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK9htdHPfW2QFvhmL79RAAAAB8"]
[Sat Aug 29 05:07:50.516371 2026] [security2:error] [pid 1034096:tid 1034264] [client 35.194.208.44:24150] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/.aws/credentials"] [unique_id "apK9hi04twRPFuquKD2aQgAAAJI"]
[Sat Aug 29 05:07:50.525765 2026] [security2:error] [pid 1034096:tid 1034295] [client 20.104.18.15:12127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/beck.php"] [unique_id "apK9hi04twRPFuquKD2aZQAAALE"]
[Sat Aug 29 05:07:50.529816 2026] [security2:error] [pid 1028675:tid 1028927] [client 197.219.150.206:63667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK9htdHPfW2QFvhmL79WQAAAHU"]
[Sat Aug 29 05:07:50.530085 2026] [security2:error] [pid 1028675:tid 1028927] [client 197.219.150.206:63667] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK9htdHPfW2QFvhmL79WQAAAHU"]
[Sat Aug 29 05:07:50.530256 2026] [security2:error] [pid 1034096:tid 1034305] [client 93.123.109.228:42462] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flicklister.com"] [uri "/___proxy_subdomain_cpcontacts/BACK/.env"] [unique_id "apK9hi04twRPFuquKD2aZgAAALs"]
[Sat Aug 29 05:07:50.544266 2026] [security2:error] [pid 1034096:tid 1034261] [client 93.123.109.228:42498] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/etc/boto.cfg"] [unique_id "apK9hi04twRPFuquKD2aaAAAAI8"]
[Sat Aug 29 05:07:50.545120 2026] [cgid:error] [pid 1034096:tid 1034267] [client 45.148.10.62:44824] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/ninjamov/public_html/404.shtml
[Sat Aug 29 05:07:50.553873 2026] [security2:error] [pid 1028675:tid 1028858] [client 93.123.109.228:42516] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flicklister.com"] [uri "/___proxy_subdomain_cpcontacts/Api/.env"] [unique_id "apK9htdHPfW2QFvhmL79XAAAADA"]
[Sat Aug 29 05:07:50.563676 2026] [security2:error] [pid 1034096:tid 1034301] [client 93.123.109.228:42324] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/fe/.env"] [unique_id "apK9hi04twRPFuquKD2aaQAAALc"]
[Sat Aug 29 05:07:50.563682 2026] [security2:error] [pid 1034096:tid 1034347] [client 52.139.37.240:37730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/root.php"] [unique_id "apK9hi04twRPFuquKD2aagAAAOU"]
[Sat Aug 29 05:07:50.566701 2026] [security2:error] [pid 1034096:tid 1034275] [client 52.139.37.240:33200] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "petgrooming.penmarketing.org"] [uri "/c99.php"] [unique_id "apK9hi04twRPFuquKD2aawAAAJ0"]
[Sat Aug 29 05:07:50.570133 2026] [security2:error] [pid 1034096:tid 1034302] [client 52.139.37.240:16732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/asw.php"] [unique_id "apK9hi04twRPFuquKD2abAAAALg"]
[Sat Aug 29 05:07:50.574386 2026] [security2:error] [pid 1028675:tid 1028877] [client 93.123.109.228:42548] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flicklister.com"] [uri "/___proxy_subdomain_cpcontacts/BACKEND/.env"] [unique_id "apK9htdHPfW2QFvhmL79XgAAAEM"]
[Sat Aug 29 05:07:50.575778 2026] [security2:error] [pid 1034096:tid 1034329] [client 158.158.54.35:12039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-block.php"] [unique_id "apK9hi04twRPFuquKD2abgAAANM"]
[Sat Aug 29 05:07:50.591545 2026] [security2:error] [pid 1028675:tid 1028917] [client 20.104.18.15:18892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/w3lls.php"] [unique_id "apK9htdHPfW2QFvhmL79YgAAAGs"]
[Sat Aug 29 05:07:50.601881 2026] [security2:error] [pid 1034096:tid 1034265] [client 20.203.141.11:13370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/lock360.php"] [unique_id "apK9hi04twRPFuquKD2abwAAAJM"]
[Sat Aug 29 05:07:50.603280 2026] [security2:error] [pid 1034096:tid 1034278] [client 158.23.147.79:32661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK9hi04twRPFuquKD2acAAAAKA"]
[Sat Aug 29 05:07:50.621731 2026] [security2:error] [pid 1034096:tid 1034263] [client 40.83.93.50:8219] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/contentloader1.php"] [unique_id "apK9hi04twRPFuquKD2adAAAAJE"]
[Sat Aug 29 05:07:50.627422 2026] [security2:error] [pid 1034096:tid 1034369] [client 20.104.68.135:19710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.samshock.com"] [uri "/wp-content/classwithtostring.php"] [unique_id "apK9hi04twRPFuquKD2adQAAAPs"]
[Sat Aug 29 05:07:50.644122 2026] [security2:error] [pid 1028675:tid 1028878] [client 20.104.18.15:36592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/c4.php"] [unique_id "apK9htdHPfW2QFvhmL79aAAAAEQ"]
[Sat Aug 29 05:07:50.650603 2026] [security2:error] [pid 1028675:tid 1028849] [client 20.104.18.15:13695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/dev.php"] [unique_id "apK9htdHPfW2QFvhmL79aQAAACc"]
[Sat Aug 29 05:07:50.652876 2026] [security2:error] [pid 1034096:tid 1034318] [client 20.104.18.15:5028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "apK9hi04twRPFuquKD2adwAAAMg"]
[Sat Aug 29 05:07:50.660643 2026] [security2:error] [pid 1034096:tid 1034346] [client 93.123.109.228:42520] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flicklister.com"] [uri "/___proxy_subdomain_cpcontacts/BE/.env"] [unique_id "apK9hi04twRPFuquKD2aeAAAAOQ"]
[Sat Aug 29 05:07:50.667241 2026] [security2:error] [pid 1034096:tid 1034266] [client 93.123.109.228:42280] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/front/.env"] [unique_id "apK9hi04twRPFuquKD2aeQAAAJQ"]
[Sat Aug 29 05:07:50.668503 2026] [security2:error] [pid 1034096:tid 1034287] [client 158.23.147.79:6034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-content/plugins/index.php"] [unique_id "apK9hi04twRPFuquKD2aegAAAKk"]
[Sat Aug 29 05:07:50.674798 2026] [security2:error] [pid 1034096:tid 1034354] [client 93.123.109.228:42462] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flicklister.com"] [uri "/___proxy_subdomain_cpcontacts/Backend/.env"] [unique_id "apK9hi04twRPFuquKD2afAAAAOw"]
[Sat Aug 29 05:07:50.682434 2026] [security2:error] [pid 1034096:tid 1034340] [client 20.104.18.15:12186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/t3.php"] [unique_id "apK9hi04twRPFuquKD2afQAAAN4"]
[Sat Aug 29 05:07:50.696432 2026] [security2:error] [pid 1028675:tid 1028884] [client 93.123.109.228:42566] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/frontend/.env"] [unique_id "apK9htdHPfW2QFvhmL79cQAAAEo"]
[Sat Aug 29 05:07:50.698887 2026] [security2:error] [pid 1028675:tid 1028908] [client 158.23.147.79:17524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-content/x/index.php"] [unique_id "apK9htdHPfW2QFvhmL79cgAAAGI"]
[Sat Aug 29 05:07:50.710579 2026] [security2:error] [pid 1028675:tid 1028845] [client 20.52.41.200:5369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK9htdHPfW2QFvhmL79dAAAACM"]
[Sat Aug 29 05:07:50.722652 2026] [security2:error] [pid 1034096:tid 1034269] [client 20.63.219.114:13894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-content.php"] [unique_id "apK9hi04twRPFuquKD2agAAAAJc"]
[Sat Aug 29 05:07:50.726985 2026] [security2:error] [pid 1034096:tid 1034311] [client 68.155.159.216:38584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK9hi04twRPFuquKD2agQAAAME"]
[Sat Aug 29 05:07:50.736591 2026] [security2:error] [pid 1028675:tid 1028843] [client 93.123.109.228:42516] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flicklister.com"] [uri "/___proxy_subdomain_cpcontacts/Be/.env"] [unique_id "apK9htdHPfW2QFvhmL79dQAAACE"]
[Sat Aug 29 05:07:50.741493 2026] [security2:error] [pid 1028675:tid 1028903] [client 4.205.62.107:53360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/xa.php"] [unique_id "apK9htdHPfW2QFvhmL79dgAAAF0"]
[Sat Aug 29 05:07:50.752984 2026] [security2:error] [pid 1034096:tid 1034300] [client 45.148.10.62:44824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ninjamover.com"] [uri "/.env.php.bak"] [unique_id "apK9hi04twRPFuquKD2ahQAAALY"]
[Sat Aug 29 05:07:50.762977 2026] [security2:error] [pid 1034096:tid 1034283] [client 52.139.37.240:37152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/shell.php"] [unique_id "apK9hi04twRPFuquKD2ahgAAAKU"]
[Sat Aug 29 05:07:50.765319 2026] [security2:error] [pid 1028675:tid 1028837] [client 52.139.37.240:32839] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "petgrooming.penmarketing.org"] [uri "/c99.php"] [unique_id "apK9htdHPfW2QFvhmL79eAAAABs"]
[Sat Aug 29 05:07:50.767022 2026] [security2:error] [pid 1034096:tid 1034316] [client 20.104.18.15:19373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/fpwch.php"] [unique_id "apK9hi04twRPFuquKD2ahwAAAMY"]
[Sat Aug 29 05:07:50.794999 2026] [security2:error] [pid 1034096:tid 1034330] [client 52.139.37.240:16751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/item.php"] [unique_id "apK9hi04twRPFuquKD2aiAAAANQ"]
[Sat Aug 29 05:07:50.809465 2026] [security2:error] [pid 1034096:tid 1034312] [client 20.104.18.15:13640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/gos.php"] [unique_id "apK9hi04twRPFuquKD2aiwAAAMI"]
[Sat Aug 29 05:07:50.829971 2026] [security2:error] [pid 1034096:tid 1034252] [client 4.205.62.107:55997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/thui.php"] [unique_id "apK9hi04twRPFuquKD2ajgAAAIY"]
[Sat Aug 29 05:07:50.830423 2026] [security2:error] [pid 1034096:tid 1034323] [client 93.123.109.228:42500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/infos.php"] [unique_id "apK9hi04twRPFuquKD2ajwAAAM0"]
[Sat Aug 29 05:07:50.834999 2026] [security2:error] [pid 1034096:tid 1034268] [client 20.104.18.15:12253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/wp.php"] [unique_id "apK9hi04twRPFuquKD2akAAAAJY"]
[Sat Aug 29 05:07:50.839020 2026] [security2:error] [pid 1034096:tid 1034320] [client 158.23.147.79:48225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-content/packed.php"] [unique_id "apK9hi04twRPFuquKD2akQAAAMo"]
[Sat Aug 29 05:07:50.840782 2026] [security2:error] [pid 1028675:tid 1028936] [client 93.123.109.228:42398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/infophp.php"] [unique_id "apK9htdHPfW2QFvhmL79gwAAAH4"]
[Sat Aug 29 05:07:50.857949 2026] [security2:error] [pid 1028675:tid 1028814] [client 93.123.109.228:42284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/info.php"] [unique_id "apK9htdHPfW2QFvhmL79hAAAAAQ"]
[Sat Aug 29 05:07:50.864980 2026] [security2:error] [pid 1034096:tid 1034270] [client 158.23.147.79:11413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-admin/about.php"] [unique_id "apK9hi04twRPFuquKD2alAAAAJg"]
[Sat Aug 29 05:07:50.870130 2026] [security2:error] [pid 1028675:tid 1028929] [client 93.123.109.228:42450] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/laravel/.env"] [unique_id "apK9htdHPfW2QFvhmL79hQAAAHc"]
[Sat Aug 29 05:07:50.888838 2026] [security2:error] [pid 1028675:tid 1028833] [client 20.104.18.15:5119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/wp-aothait.php"] [unique_id "apK9htdHPfW2QFvhmL79hwAAABc"]
[Sat Aug 29 05:07:50.889635 2026] [security2:error] [pid 1034096:tid 1034339] [client 20.203.141.11:22283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/storage/rip.php"] [unique_id "apK9hi04twRPFuquKD2alQAAAN0"]
[Sat Aug 29 05:07:50.905608 2026] [security2:error] [pid 1028675:tid 1028820] [client 20.104.18.15:19404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/domvf.php"] [unique_id "apK9htdHPfW2QFvhmL79iQAAAAo"]
[Sat Aug 29 05:07:50.911694 2026] [security2:error] [pid 1028675:tid 1028863] [client 20.104.18.15:36562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/rxr.php"] [unique_id "apK9htdHPfW2QFvhmL79igAAADU"]
[Sat Aug 29 05:07:50.920425 2026] [security2:error] [pid 1034096:tid 1034264] [client 93.123.109.228:42324] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/lms/.env"] [unique_id "apK9hi04twRPFuquKD2amwAAAJI"]
[Sat Aug 29 05:07:50.921338 2026] [security2:error] [pid 1034096:tid 1034280] [client 20.104.68.135:17918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.samshock.com"] [uri "/wp-content/themes/fitnessbase/404.php"] [unique_id "apK9hi04twRPFuquKD2anQAAAKI"]
[Sat Aug 29 05:07:50.922708 2026] [security2:error] [pid 1034096:tid 1034264] [client 93.123.109.228:42270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/local/.env"] [unique_id "apK9hi04twRPFuquKD2angAAAJI"]
[Sat Aug 29 05:07:50.949707 2026] [security2:error] [pid 1034096:tid 1034315] [client 45.148.10.62:44848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wkm.vbd.mybluehost.me"] [uri "/config.php"] [unique_id "apK9hi04twRPFuquKD2anwAAAMU"]
[Sat Aug 29 05:07:50.975637 2026] [security2:error] [pid 1034096:tid 1034336] [client 40.83.93.50:8414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/Js.php"] [unique_id "apK9hi04twRPFuquKD2aoQAAANo"]
[Sat Aug 29 05:07:50.983706 2026] [security2:error] [pid 1034096:tid 1034324] [client 52.139.37.240:37174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK9hi04twRPFuquKD2aowAAAM4"]
[Sat Aug 29 05:07:50.997537 2026] [security2:error] [pid 1028675:tid 1028812] [client 52.139.37.240:16735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/jga.php"] [unique_id "apK9htdHPfW2QFvhmL79jwAAAAI"]
[Sat Aug 29 05:07:51.012824 2026] [security2:error] [pid 1034096:tid 1034302] [client 20.104.18.15:13576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/132.php"] [unique_id "apK9hy04twRPFuquKD2apgAAALg"]
[Sat Aug 29 05:07:51.023795 2026] [security2:error] [pid 1034096:tid 1034298] [client 158.158.54.35:14798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-includes/fonts/admin.php"] [unique_id "apK9hy04twRPFuquKD2apwAAALQ"]
[Sat Aug 29 05:07:51.038612 2026] [security2:error] [pid 1034096:tid 1034373] [client 20.104.18.15:18893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/biufile.php"] [unique_id "apK9hy04twRPFuquKD2aqwAAAP8"]
[Sat Aug 29 05:07:51.059394 2026] [security2:error] [pid 1028675:tid 1028859] [client 93.123.109.228:42566] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/media/.env"] [unique_id "apK9h9dHPfW2QFvhmL79ngAAADE"]
[Sat Aug 29 05:07:51.071673 2026] [security2:error] [pid 1028675:tid 1028876] [client 20.203.141.11:12711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-conflg.php"] [unique_id "apK9h9dHPfW2QFvhmL79oAAAAEI"]
[Sat Aug 29 05:07:51.078618 2026] [security2:error] [pid 1034096:tid 1034265] [client 93.123.109.228:42324] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/market/.env"] [unique_id "apK9hy04twRPFuquKD2arwAAAJM"]
[Sat Aug 29 05:07:51.080678 2026] [security2:error] [pid 1034096:tid 1034278] [client 20.104.18.15:12212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/abcd.php"] [unique_id "apK9hy04twRPFuquKD2asQAAAKA"]
[Sat Aug 29 05:07:51.106168 2026] [security2:error] [pid 1034096:tid 1034257] [client 93.123.109.228:42558] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/marketing/.env"] [unique_id "apK9hy04twRPFuquKD2atQAAAIs"]
[Sat Aug 29 05:07:51.120480 2026] [security2:error] [pid 1034096:tid 1034343] [client 20.104.68.135:51331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.samshock.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK9hy04twRPFuquKD2atwAAAOE"]
[Sat Aug 29 05:07:51.134641 2026] [security2:error] [pid 1034096:tid 1034358] [client 20.104.104.62:48003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/mcd.php"] [unique_id "apK9hy04twRPFuquKD2auwAAAPA"]
[Sat Aug 29 05:07:51.144043 2026] [security2:error] [pid 1028675:tid 1028902] [client 20.104.18.15:36545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.horseweblog.com"] [uri "/reviall.php"] [unique_id "apK9h9dHPfW2QFvhmL79pwAAAFw"]
[Sat Aug 29 05:07:51.160695 2026] [security2:error] [pid 1034096:tid 1034308] [client 87.219.197.128:64135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK9hy04twRPFuquKD2avgAAAL4"]
[Sat Aug 29 05:07:51.160829 2026] [security2:error] [pid 1034096:tid 1034308] [client 87.219.197.128:64135] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK9hy04twRPFuquKD2avgAAAL4"]
[Sat Aug 29 05:07:51.171095 2026] [security2:error] [pid 1034096:tid 1034289] [client 20.52.41.200:5371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-mail.php"] [unique_id "apK9hy04twRPFuquKD2awAAAAKs"]
[Sat Aug 29 05:07:51.188145 2026] [security2:error] [pid 1028675:tid 1028815] [client 20.104.18.15:14313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/v22.php"] [unique_id "apK9h9dHPfW2QFvhmL79qgAAAAU"]
[Sat Aug 29 05:07:51.189135 2026] [security2:error] [pid 1034096:tid 1034259] [client 20.104.18.15:19359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/blacks.php"] [unique_id "apK9hy04twRPFuquKD2awwAAAI0"]
[Sat Aug 29 05:07:51.190957 2026] [security2:error] [pid 1028675:tid 1028717] [remote 93.123.109.228:46162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flowerfh.com"] [uri "/wp-config.php"] [unique_id "apK9h9dHPfW2QFvhmL79qwAAayQ"]
[Sat Aug 29 05:07:51.192075 2026] [security2:error] [pid 1028675:tid 1028877] [client 93.123.109.228:42450] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/new/.env"] [unique_id "apK9h9dHPfW2QFvhmL79rAAAAEM"]
[Sat Aug 29 05:07:51.195766 2026] [security2:error] [pid 1028675:tid 1028715] [remote 93.123.109.228:46162] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.flowerfh.com"] [uri "/wp-config.php.new"] [unique_id "apK9h9dHPfW2QFvhmL79rQAAJSI"]
[Sat Aug 29 05:07:51.195803 2026] [security2:error] [pid 1034096:tid 1034272] [client 52.139.37.240:36892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/wp-content/plugins/linkpreview/il.php"] [unique_id "apK9hy04twRPFuquKD2axAAAAJo"]
[Sat Aug 29 05:07:51.199057 2026] [security2:error] [pid 1034096:tid 1034266] [client 93.123.109.228:42280] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/node-api/.env"] [unique_id "apK9hy04twRPFuquKD2axQAAAJQ"]
[Sat Aug 29 05:07:51.208394 2026] [security2:error] [pid 1034096:tid 1034287] [client 20.104.49.130:51099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/v2.php"] [unique_id "apK9hy04twRPFuquKD2axgAAAKk"]
[Sat Aug 29 05:07:51.212660 2026] [security2:error] [pid 1034096:tid 1034354] [client 20.104.18.15:12265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/nofile.php"] [unique_id "apK9hy04twRPFuquKD2axwAAAOw"]
[Sat Aug 29 05:07:51.220927 2026] [security2:error] [pid 1028675:tid 1028756] [remote 93.123.109.228:46162] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.flowerfh.com"] [uri "/wp-config.php.bak"] [unique_id "apK9h9dHPfW2QFvhmL79rgAAZUs"]
[Sat Aug 29 05:07:51.226152 2026] [security2:error] [pid 1028675:tid 1028804] [remote 93.123.109.228:46162] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.flowerfh.com"] [uri "/wp-config.php.old"] [unique_id "apK9h9dHPfW2QFvhmL79rwAAHXs"]
[Sat Aug 29 05:07:51.226413 2026] [security2:error] [pid 1034096:tid 1034328] [client 20.63.219.114:13925] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "orthosurgeries.com"] [uri "/wp-content/1.php"] [unique_id "apK9hy04twRPFuquKD2ayAAAANI"]
[Sat Aug 29 05:07:51.226525 2026] [security2:error] [pid 1034096:tid 1034328] [client 20.63.219.114:13925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-content/1.php"] [unique_id "apK9hy04twRPFuquKD2ayAAAANI"]
[Sat Aug 29 05:07:51.234066 2026] [security2:error] [pid 1028675:tid 1028855] [client 40.83.93.50:11544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/al.php"] [unique_id "apK9h9dHPfW2QFvhmL79sAAAAC0"]
[Sat Aug 29 05:07:51.241569 2026] [security2:error] [pid 1028675:tid 1028824] [client 93.123.109.228:42566] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/node/.env"] [unique_id "apK9h9dHPfW2QFvhmL79sQAAAA4"]
[Sat Aug 29 05:07:51.247658 2026] [security2:error] [pid 1028675:tid 1028927] [client 52.139.37.240:56091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/mac.php"] [unique_id "apK9h9dHPfW2QFvhmL79sgAAAHU"]
[Sat Aug 29 05:07:51.252279 2026] [security2:error] [pid 1034096:tid 1034350] [client 158.23.147.79:50024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/dropdown.php"] [unique_id "apK9hy04twRPFuquKD2ayQAAAOg"]
[Sat Aug 29 05:07:51.253337 2026] [security2:error] [pid 1034096:tid 1034314] [client 20.104.18.15:5030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/wp-includes/index.php"] [unique_id "apK9hy04twRPFuquKD2aywAAAMQ"]
[Sat Aug 29 05:07:51.254751 2026] [security2:error] [pid 1034096:tid 1034355] [client 93.123.109.228:42324] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/node/backend/.env"] [unique_id "apK9hy04twRPFuquKD2aygAAAO0"]
[Sat Aug 29 05:07:51.256276 2026] [security2:error] [pid 1034096:tid 1034377] [client 93.123.109.228:42270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/node/api/.env"] [unique_id "apK9hy04twRPFuquKD2azAAAAQM"]
[Sat Aug 29 05:07:51.261696 2026] [security2:error] [pid 1034096:tid 1034255] [client 158.23.147.79:53801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/.well-known/content.php"] [unique_id "apK9hy04twRPFuquKD2azQAAAIk"]
[Sat Aug 29 05:07:51.285547 2026] [security2:error] [pid 1034096:tid 1034341] [client 93.123.109.228:42558] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/nodeapi/.env"] [unique_id "apK9hy04twRPFuquKD2azwAAAN8"]
[Sat Aug 29 05:07:51.289024 2026] [security2:error] [pid 1028675:tid 1028909] [client 45.148.10.62:44852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ninjamover.com"] [uri "/.env.php"] [unique_id "apK9h9dHPfW2QFvhmL79tAAAAGM"]
[Sat Aug 29 05:07:51.315900 2026] [security2:error] [pid 1034096:tid 1034340] [client 20.104.68.135:19664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.samshock.com"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "apK9hy04twRPFuquKD2a0QAAAN4"]
[Sat Aug 29 05:07:51.318252 2026] [security2:error] [pid 1034096:tid 1034326] [client 93.123.109.228:42252] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/nodeweb/.env"] [unique_id "apK9hy04twRPFuquKD2a0gAAANA"]
[Sat Aug 29 05:07:51.321565 2026] [security2:error] [pid 1034096:tid 1034252] [client 4.205.62.107:22179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/f35.php"] [unique_id "apK9hy04twRPFuquKD2a0wAAAIY"]
[Sat Aug 29 05:07:51.325185 2026] [security2:error] [pid 1034096:tid 1034349] [client 20.104.49.130:43025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/dragonshell.php"] [unique_id "apK9hy04twRPFuquKD2a1QAAAOc"]
[Sat Aug 29 05:07:51.326983 2026] [security2:error] [pid 1034096:tid 1034320] [client 68.155.159.216:6113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK9hy04twRPFuquKD2a1wAAAMo"]
[Sat Aug 29 05:07:51.327286 2026] [security2:error] [pid 1034096:tid 1034359] [client 20.104.104.62:28552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.johngibsondrawings.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK9hy04twRPFuquKD2a1gAAAPE"]
[Sat Aug 29 05:07:51.336752 2026] [security2:error] [pid 1034096:tid 1034313] [client 20.104.18.15:19424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/beck.php"] [unique_id "apK9hy04twRPFuquKD2a2AAAAMM"]
[Sat Aug 29 05:07:51.346111 2026] [security2:error] [pid 1034096:tid 1034334] [client 20.104.104.62:37604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/waw.php"] [unique_id "apK9hy04twRPFuquKD2a3AAAANg"]
[Sat Aug 29 05:07:51.346277 2026] [security2:error] [pid 1034096:tid 1034281] [client 20.104.18.15:13653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/wp-activate.php"] [unique_id "apK9hy04twRPFuquKD2a3QAAAKM"]
[Sat Aug 29 05:07:51.353136 2026] [security2:error] [pid 1034096:tid 1034339] [client 20.104.18.15:12112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/run.php"] [unique_id "apK9hy04twRPFuquKD2a3wAAAN0"]
[Sat Aug 29 05:07:51.361859 2026] [security2:error] [pid 1034096:tid 1034375] [client 20.203.141.11:27661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/zoom1.php"] [unique_id "apK9hy04twRPFuquKD2a4AAAAQE"]
[Sat Aug 29 05:07:51.390990 2026] [security2:error] [pid 1028675:tid 1028914] [client 93.123.109.228:42566] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/old/.env"] [unique_id "apK9h9dHPfW2QFvhmL79wAAAAGg"]
[Sat Aug 29 05:07:51.394538 2026] [security2:error] [pid 1034096:tid 1034253] [client 52.139.37.240:37133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/wp-header-json.php"] [unique_id "apK9hy04twRPFuquKD2a4gAAAIc"]
[Sat Aug 29 05:07:51.404339 2026] [security2:error] [pid 1034096:tid 1034261] [client 4.205.62.107:25968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/admin.php"] [unique_id "apK9hy04twRPFuquKD2a4wAAAI8"]
[Sat Aug 29 05:07:51.408026 2026] [security2:error] [pid 1028675:tid 1028844] [client 4.205.62.107:58477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/groceries/index.php"] [unique_id "apK9h9dHPfW2QFvhmL79wQAAACI"]
[Sat Aug 29 05:07:51.408701 2026] [security2:error] [pid 1034096:tid 1034336] [client 93.123.109.228:42324] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/opt/.env"] [unique_id "apK9hy04twRPFuquKD2a5AAAANo"]
[Sat Aug 29 05:07:51.446079 2026] [security2:error] [pid 1028675:tid 1028828] [client 158.23.147.79:35805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK9h9dHPfW2QFvhmL79wgAAABI"]
[Sat Aug 29 05:07:51.449265 2026] [security2:error] [pid 1028675:tid 1028819] [client 40.83.93.50:8223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/access.php"] [unique_id "apK9h9dHPfW2QFvhmL79wwAAAAk"]
[Sat Aug 29 05:07:51.457688 2026] [security2:error] [pid 1028675:tid 1028812] [client 52.139.37.240:16730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/wp-admin/images/index.php"] [unique_id "apK9h9dHPfW2QFvhmL79xQAAAAI"]
[Sat Aug 29 05:07:51.458123 2026] [security2:error] [pid 1028675:tid 1028873] [client 158.158.54.35:28108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/m.php"] [unique_id "apK9h9dHPfW2QFvhmL79xgAAAD8"]
[Sat Aug 29 05:07:51.464650 2026] [security2:error] [pid 1028675:tid 1028848] [client 158.23.147.79:25412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/x.php"] [unique_id "apK9h9dHPfW2QFvhmL79xwAAACY"]
[Sat Aug 29 05:07:51.470196 2026] [security2:error] [pid 1028675:tid 1028846] [client 93.123.109.228:42548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flicklister.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK9h9dHPfW2QFvhmL79yQAAACQ"]
[Sat Aug 29 05:07:51.488216 2026] [security2:error] [pid 1028675:tid 1028902] [client 20.104.18.15:12191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/new.php"] [unique_id "apK9h9dHPfW2QFvhmL79ywAAAFw"]
[Sat Aug 29 05:07:51.498239 2026] [security2:error] [pid 1028675:tid 1028900] [client 20.104.18.15:13629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/wp-trackback.php"] [unique_id "apK9h9dHPfW2QFvhmL79zAAAAFo"]
[Sat Aug 29 05:07:51.509117 2026] [security2:error] [pid 1028675:tid 1028917] [client 20.104.18.15:5007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/file31.php"] [unique_id "apK9h9dHPfW2QFvhmL79zgAAAGs"]
[Sat Aug 29 05:07:51.510175 2026] [security2:error] [pid 1028675:tid 1028931] [client 20.104.68.135:17448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.samshock.com"] [uri "/wp-content/uploads/de_fb_uploads/b.php"] [unique_id "apK9h9dHPfW2QFvhmL79zwAAAHk"]
[Sat Aug 29 05:07:51.522364 2026] [security2:error] [pid 1028675:tid 1028811] [client 20.104.104.62:27694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.johngibsondrawings.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "apK9h9dHPfW2QFvhmL790AAAAAE"]
[Sat Aug 29 05:07:51.525040 2026] [security2:error] [pid 1034096:tid 1034317] [client 20.104.18.15:19352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/t3.php"] [unique_id "apK9hy04twRPFuquKD2a6wAAAMc"]
[Sat Aug 29 05:07:51.536127 2026] [security2:error] [pid 1034096:tid 1034285] [client 45.148.10.62:44866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wkm.vbd.mybluehost.me"] [uri "/config.php.bak"] [unique_id "apK9hy04twRPFuquKD2a7QAAAKc"]
[Sat Aug 29 05:07:51.547625 2026] [security2:error] [pid 1028675:tid 1028813] [client 158.23.147.79:30524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/bk/index.php"] [unique_id "apK9h9dHPfW2QFvhmL790gAAAAM"]
[Sat Aug 29 05:07:51.548489 2026] [security2:error] [pid 1028675:tid 1028901] [client 20.203.141.11:43593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/123.php"] [unique_id "apK9h9dHPfW2QFvhmL790wAAAFs"]
[Sat Aug 29 05:07:51.572438 2026] [security2:error] [pid 1028675:tid 1028824] [client 4.205.62.107:21577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/public/vx.php"] [unique_id "apK9h9dHPfW2QFvhmL791gAAAA4"]
[Sat Aug 29 05:07:51.581225 2026] [security2:error] [pid 1028675:tid 1028872] [client 20.63.219.114:13946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-content/about.php"] [unique_id "apK9h9dHPfW2QFvhmL791wAAAD4"]
[Sat Aug 29 05:07:51.594429 2026] [security2:error] [pid 1034096:tid 1034263] [client 158.23.147.79:26510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/about.php"] [unique_id "apK9hy04twRPFuquKD2a8QAAAJE"]
[Sat Aug 29 05:07:51.595475 2026] [security2:error] [pid 1034096:tid 1034265] [client 52.139.37.240:37702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/zup.php"] [unique_id "apK9hy04twRPFuquKD2a8gAAAJM"]
[Sat Aug 29 05:07:51.628777 2026] [security2:error] [pid 1028675:tid 1028896] [client 20.104.18.15:12239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/inx.php"] [unique_id "apK9h9dHPfW2QFvhmL792gAAAFY"]
[Sat Aug 29 05:07:51.630102 2026] [security2:error] [pid 1034096:tid 1034329] [client 20.52.41.200:4545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-content.php"] [unique_id "apK9hy04twRPFuquKD2a9QAAANM"]
[Sat Aug 29 05:07:51.653792 2026] [security2:error] [pid 1028675:tid 1028851] [client 52.139.37.240:56083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/wp-admin/includes/index.php"] [unique_id "apK9h9dHPfW2QFvhmL793wAAACk"]
[Sat Aug 29 05:07:51.659798 2026] [security2:error] [pid 1028675:tid 1028887] [client 20.104.18.15:19367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/wp.php"] [unique_id "apK9h9dHPfW2QFvhmL794QAAAE0"]
[Sat Aug 29 05:07:51.677699 2026] [security2:error] [pid 1034096:tid 1034318] [client 93.123.109.228:42520] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flicklister.com"] [uri "/___proxy_subdomain_cpcontacts/admin-app/.env"] [unique_id "apK9hy04twRPFuquKD2a_QAAAMg"]
[Sat Aug 29 05:07:51.692294 2026] [security2:error] [pid 1034096:tid 1034289] [client 20.104.18.15:5088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/dk.php"] [unique_id "apK9hy04twRPFuquKD2a_gAAAKs"]
[Sat Aug 29 05:07:51.696916 2026] [security2:error] [pid 1028675:tid 1028903] [client 20.104.18.15:13678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/pri.php"] [unique_id "apK9h9dHPfW2QFvhmL795AAAAF0"]
[Sat Aug 29 05:07:51.707936 2026] [security2:error] [pid 1034096:tid 1034335] [client 20.104.68.135:17411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.samshock.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK9hy04twRPFuquKD2bAAAAANk"]
[Sat Aug 29 05:07:51.710463 2026] [security2:error] [pid 1028675:tid 1028835] [client 68.155.159.216:51657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK9h9dHPfW2QFvhmL795gAAABk"]
[Sat Aug 29 05:07:51.713324 2026] [security2:error] [pid 1034096:tid 1034365] [client 40.83.93.50:8423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/global.php"] [unique_id "apK9hy04twRPFuquKD2bAgAAAPc"]
[Sat Aug 29 05:07:51.739203 2026] [security2:error] [pid 1028675:tid 1028821] [client 158.23.147.79:32691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/goat1.php"] [unique_id "apK9h9dHPfW2QFvhmL795wAAAAs"]
[Sat Aug 29 05:07:51.748458 2026] [security2:error] [pid 1028675:tid 1028832] [client 20.104.49.130:53527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pvillusions.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9h9dHPfW2QFvhmL796AAAABY"]
[Sat Aug 29 05:07:51.773015 2026] [security2:error] [pid 1034096:tid 1034350] [client 68.155.159.216:65099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-includes/css/index.php"] [unique_id "apK9hy04twRPFuquKD2bBgAAAOg"]
[Sat Aug 29 05:07:51.776866 2026] [security2:error] [pid 1034096:tid 1034314] [client 158.23.147.79:6089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/simple.php"] [unique_id "apK9hy04twRPFuquKD2bBwAAAMQ"]
[Sat Aug 29 05:07:51.794103 2026] [security2:error] [pid 1028675:tid 1028857] [client 52.139.37.240:37132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/a9.php"] [unique_id "apK9h9dHPfW2QFvhmL796gAAAC8"]
[Sat Aug 29 05:07:51.810775 2026] [security2:error] [pid 1034096:tid 1034378] [client 20.104.18.15:19451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/abcd.php"] [unique_id "apK9hy04twRPFuquKD2bCQAAAQQ"]
[Sat Aug 29 05:07:51.815790 2026] [security2:error] [pid 1034096:tid 1034269] [client 20.104.18.15:12205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/vpn.php"] [unique_id "apK9hy04twRPFuquKD2bCwAAAJc"]
[Sat Aug 29 05:07:51.827239 2026] [security2:error] [pid 1028675:tid 1028863] [client 20.104.18.15:14277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/wp_blog_footer.php"] [unique_id "apK9h9dHPfW2QFvhmL797AAAADU"]
[Sat Aug 29 05:07:51.834110 2026] [security2:error] [pid 1034096:tid 1034333] [client 20.203.141.11:38159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/txets.php"] [unique_id "apK9hy04twRPFuquKD2bDAAAANc"]
[Sat Aug 29 05:07:51.834940 2026] [security2:error] [pid 1028675:tid 1028925] [client 68.155.159.216:56536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-content/cong.php"] [unique_id "apK9h9dHPfW2QFvhmL797QAAAHM"]
[Sat Aug 29 05:07:51.839124 2026] [security2:error] [pid 1034096:tid 1034296] [client 68.155.159.216:18293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/sad/about.php"] [unique_id "apK9hy04twRPFuquKD2bDQAAALI"]
[Sat Aug 29 05:07:51.845301 2026] [security2:error] [pid 1034096:tid 1034322] [client 93.123.109.228:42498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/php.php"] [unique_id "apK9hy04twRPFuquKD2bDgAAAMw"]
[Sat Aug 29 05:07:51.846896 2026] [security2:error] [pid 1028675:tid 1028890] [client 158.23.147.79:17540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK9h9dHPfW2QFvhmL797gAAAFA"]
[Sat Aug 29 05:07:51.849415 2026] [security2:error] [pid 1028675:tid 1028844] [client 93.123.109.228:42450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/php-info.php"] [unique_id "apK9h9dHPfW2QFvhmL797wAAACI"]
[Sat Aug 29 05:07:51.853040 2026] [security2:error] [pid 1034096:tid 1034368] [client 52.139.37.240:16708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/zafir1.php"] [unique_id "apK9hy04twRPFuquKD2bEAAAAPo"]
[Sat Aug 29 05:07:51.877168 2026] [cgid:error] [pid 1034096:tid 1034308] [client 45.148.10.62:44874] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/ninjamov/public_html/404.shtml
[Sat Aug 29 05:07:51.886824 2026] [security2:error] [pid 1028675:tid 1028916] [client 103.168.67.159:60218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 159.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "naturalkneads.com"] [uri "/wp/index.php"] [unique_id "apK9h9dHPfW2QFvhmL798gAAAGo"], referer: https://naturalkneads.com/wp/wp-admin/
[Sat Aug 29 05:07:51.895326 2026] [security2:error] [pid 1028675:tid 1028819] [client 20.104.18.15:5067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/ta.php"] [unique_id "apK9h9dHPfW2QFvhmL798wAAAAk"]
[Sat Aug 29 05:07:51.899114 2026] [security2:error] [pid 1034096:tid 1034307] [client 93.123.109.228:42280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/php_info.php"] [unique_id "apK9hy04twRPFuquKD2bFAAAAL0"]
[Sat Aug 29 05:07:51.903538 2026] [security2:error] [pid 1034096:tid 1034341] [client 20.104.68.135:14187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.samshock.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK9hy04twRPFuquKD2bFgAAAN8"]
[Sat Aug 29 05:07:51.920525 2026] [security2:error] [pid 1028675:tid 1028779] [remote 23.88.56.215:18636] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "nlvn.net"] [uri "/"] [unique_id "apK9h9dHPfW2QFvhmL799QAAYmI"]
[Sat Aug 29 05:07:51.922401 2026] [security2:error] [pid 1034096:tid 1034372] [client 93.123.109.228:42270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/phpinfo.php"] [unique_id "apK9hy04twRPFuquKD2bGQAAAP4"]
[Sat Aug 29 05:07:51.922998 2026] [security2:error] [pid 1034096:tid 1034354] [client 40.83.93.50:8967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/classsmtps.php"] [unique_id "apK9hy04twRPFuquKD2bGgAAAOw"]
[Sat Aug 29 05:07:51.925415 2026] [access_compat:error] [pid 1028675:tid 1028920] [client 67.20.76.220:11288] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:07:51.928085 2026] [security2:error] [pid 1034096:tid 1034301] [client 158.158.54.35:14813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "apK9hy04twRPFuquKD2bFwAAALc"]
[Sat Aug 29 05:07:51.935874 2026] [security2:error] [pid 1028675:tid 1028875] [client 20.63.219.114:7514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-content/admin-header.php"] [unique_id "apK9h9dHPfW2QFvhmL79-QAAAEE"]
[Sat Aug 29 05:07:51.944526 2026] [security2:error] [pid 1028675:tid 1028846] [client 158.23.147.79:48352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-l0gin.php"] [unique_id "apK9h9dHPfW2QFvhmL79-wAAACQ"]
[Sat Aug 29 05:07:51.955918 2026] [security2:error] [pid 1028675:tid 1028841] [client 20.104.18.15:12163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/shiny.php"] [unique_id "apK9h9dHPfW2QFvhmL79_AAAAB8"]
[Sat Aug 29 05:07:51.971732 2026] [security2:error] [pid 1034096:tid 1034323] [client 4.205.62.107:55994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/file21.php"] [unique_id "apK9hy04twRPFuquKD2bHwAAAM0"]
[Sat Aug 29 05:07:51.971923 2026] [security2:error] [pid 1034096:tid 1034169] [remote 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK9hy04twRPFuquKD2bHgAAiS8"]
[Sat Aug 29 05:07:51.972053 2026] [security2:error] [pid 1034096:tid 1034255] [client 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK9hy04twRPFuquKD2bHgAAiS8"]
[Sat Aug 29 05:07:51.978102 2026] [security2:error] [pid 1028675:tid 1028931] [client 20.104.18.15:13605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/sushi.php"] [unique_id "apK9h9dHPfW2QFvhmL79_wAAAHk"]
[Sat Aug 29 05:07:51.980110 2026] [security2:error] [pid 1034096:tid 1034349] [client 158.23.147.79:11282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK9hy04twRPFuquKD2bIAAAAOc"]
[Sat Aug 29 05:07:51.986349 2026] [security2:error] [pid 1028675:tid 1028911] [client 20.104.18.15:19438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/nofile.php"] [unique_id "apK9h9dHPfW2QFvhmL7-AQAAAGU"]
[Sat Aug 29 05:07:51.996450 2026] [security2:error] [pid 1034096:tid 1034286] [client 93.123.109.228:42558] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/portal/.env"] [unique_id "apK9hy04twRPFuquKD2bIQAAAKg"]
[Sat Aug 29 05:07:51.999894 2026] [security2:error] [pid 1028675:tid 1028816] [client 52.139.37.240:37738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/admin/index.php"] [unique_id "apK9h9dHPfW2QFvhmL7-BAAAAAY"]
[Sat Aug 29 05:07:52.016926 2026] [security2:error] [pid 1034096:tid 1034376] [client 20.203.141.11:1205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/yanz.php"] [unique_id "apK9iC04twRPFuquKD2bIwAAAQI"]
[Sat Aug 29 05:07:52.021950 2026] [security2:error] [pid 1028675:tid 1028824] [client 20.104.49.130:51334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/log.php"] [unique_id "apK9iNdHPfW2QFvhmL7-BQAAAA4"]
[Sat Aug 29 05:07:52.033836 2026] [security2:error] [pid 1034096:tid 1034299] [client 20.104.18.15:4994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/bo.php"] [unique_id "apK9iC04twRPFuquKD2bJAAAALU"]
[Sat Aug 29 05:07:52.038561 2026] [security2:error] [pid 1034096:tid 1034371] [client 4.205.62.107:9158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/maxro.php"] [unique_id "apK9iC04twRPFuquKD2bJQAAAP0"]
[Sat Aug 29 05:07:52.054175 2026] [security2:error] [pid 1034096:tid 1034359] [client 52.139.37.240:16726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/abc.php"] [unique_id "apK9iC04twRPFuquKD2bKAAAAPE"]
[Sat Aug 29 05:07:52.056104 2026] [cgid:error] [pid 1034096:tid 1034305] [client 45.148.10.62:44874] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/ninjamov/public_html/404.shtml
[Sat Aug 29 05:07:52.063107 2026] [security2:error] [pid 1034096:tid 1034366] [client 20.104.49.130:45740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/fs.php"] [unique_id "apK9iC04twRPFuquKD2bKQAAAPg"]
[Sat Aug 29 05:07:52.076011 2026] [security2:error] [pid 1034096:tid 1034348] [client 93.123.109.228:42462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flicklister.com"] [uri "/admin/phpinfo.php"] [unique_id "apK9iC04twRPFuquKD2bKwAAAOY"]
[Sat Aug 29 05:07:52.085258 2026] [security2:error] [pid 1034096:tid 1034290] [client 20.52.41.200:4552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "apK9iC04twRPFuquKD2bLAAAAKw"]
[Sat Aug 29 05:07:52.089482 2026] [security2:error] [pid 1028675:tid 1028851] [client 20.104.49.130:48568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/echkm.php"] [unique_id "apK9iNdHPfW2QFvhmL7-CQAAACk"]
[Sat Aug 29 05:07:52.100719 2026] [security2:error] [pid 1034096:tid 1034334] [client 20.104.68.135:12447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.samshock.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "apK9iC04twRPFuquKD2bLQAAANg"]
[Sat Aug 29 05:07:52.115347 2026] [security2:error] [pid 1034096:tid 1034275] [client 20.151.200.44:47390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/wefile.php"] [unique_id "apK9iC04twRPFuquKD2bLgAAAJ0"]
[Sat Aug 29 05:07:52.116336 2026] [security2:error] [pid 1034096:tid 1034267] [client 20.104.18.15:12183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/goods.php"] [unique_id "apK9iC04twRPFuquKD2bLwAAAJU"]
[Sat Aug 29 05:07:52.129660 2026] [security2:error] [pid 1034096:tid 1034302] [client 20.104.18.15:19439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/run.php"] [unique_id "apK9iC04twRPFuquKD2bMQAAALg"]
[Sat Aug 29 05:07:52.131818 2026] [security2:error] [pid 1034096:tid 1034351] [client 20.104.18.15:13648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/manga.php"] [unique_id "apK9iC04twRPFuquKD2bMgAAAOk"]
[Sat Aug 29 05:07:52.140344 2026] [security2:error] [pid 1034096:tid 1034292] [client 93.123.109.228:42324] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/production/.env"] [unique_id "apK9iC04twRPFuquKD2bMwAAAK4"]
[Sat Aug 29 05:07:52.158526 2026] [security2:error] [pid 1034096:tid 1034282] [client 93.123.109.228:42252] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/project/.env"] [unique_id "apK9iC04twRPFuquKD2bNgAAAKQ"]
[Sat Aug 29 05:07:52.172829 2026] [security2:error] [pid 1034096:tid 1034303] [client 20.104.18.15:4945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/44.php"] [unique_id "apK9iC04twRPFuquKD2bNwAAALk"]
[Sat Aug 29 05:07:52.185844 2026] [security2:error] [pid 1034096:tid 1034364] [client 114.119.159.254:50229] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.classiclightingusa.com"] [uri "/catalog/product_info.php/products_id/654/action/notify/osCsid/7hdmu1imb6qvv7fgr8p87e4n21"] [unique_id "apK9iC04twRPFuquKD2bOQAAAPY"], referer: http://www.classiclightingusa.com/catalog/product_info.php/products_id/654/osCsid/7hdmu1imb6qvv7fgr8p87e4n21
[Sat Aug 29 05:07:52.198637 2026] [security2:error] [pid 1028675:tid 1028886] [client 52.139.37.240:37703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/makeasmtp.php"] [unique_id "apK9iNdHPfW2QFvhmL7-DgAAAEw"]
[Sat Aug 29 05:07:52.199770 2026] [security2:error] [pid 1034096:tid 1034321] [client 20.48.250.41:61722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9iC04twRPFuquKD2bOwAAAMs"]
[Sat Aug 29 05:07:52.203320 2026] [security2:error] [pid 1028675:tid 1028814] [client 93.123.109.228:42454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flicklister.com"] [uri "/admin_phpinfo.php"] [unique_id "apK9iNdHPfW2QFvhmL7-DwAAAAQ"]
[Sat Aug 29 05:07:52.219438 2026] [security2:error] [pid 1034096:tid 1034327] [client 93.123.109.228:42520] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flicklister.com"] [uri "/___proxy_subdomain_cpcontacts/administrator/.env"] [unique_id "apK9iC04twRPFuquKD2bPAAAANE"]
[Sat Aug 29 05:07:52.225736 2026] [cgid:error] [pid 1034096:tid 1034318] [client 45.148.10.62:44874] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/ninjamov/public_html/404.shtml
[Sat Aug 29 05:07:52.226988 2026] [security2:error] [pid 1034096:tid 1034294] [client 40.83.93.50:11520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/update.php"] [unique_id "apK9iC04twRPFuquKD2bPgAAALA"]
[Sat Aug 29 05:07:52.236089 2026] [security2:error] [pid 1034096:tid 1034172] [remote 97.74.87.194:46852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 194.87.74.97.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bacsma.org"] [uri "/wp-login.php"] [unique_id "apK9iC04twRPFuquKD2bQQAA2zI"]
[Sat Aug 29 05:07:52.236583 2026] [security2:error] [pid 1034096:tid 1034173] [remote 97.74.87.194:46880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 194.87.74.97.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bacsma.org"] [uri "/wp-login.php"] [unique_id "apK9iC04twRPFuquKD2bQgAA9zM"]
[Sat Aug 29 05:07:52.241892 2026] [security2:error] [pid 1028675:tid 1028797] [remote 97.74.87.194:46886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 194.87.74.97.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bacsma.org"] [uri "/wp-login.php"] [unique_id "apK9iNdHPfW2QFvhmL7-EAAAPnQ"]
[Sat Aug 29 05:07:52.243968 2026] [security2:error] [pid 1034096:tid 1034325] [client 103.185.242.143:50698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK9iC04twRPFuquKD2bRAAAAM8"]
[Sat Aug 29 05:07:52.244051 2026] [security2:error] [pid 1034096:tid 1034325] [client 103.185.242.143:50698] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK9iC04twRPFuquKD2bRAAAAM8"]
[Sat Aug 29 05:07:52.249157 2026] [security2:error] [pid 1034096:tid 1034174] [remote 97.74.87.194:46854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 194.87.74.97.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bacsma.org"] [uri "/wp-login.php"] [unique_id "apK9iC04twRPFuquKD2bQwAA5DQ"]
[Sat Aug 29 05:07:52.267077 2026] [security2:error] [pid 1034096:tid 1034175] [remote 97.74.87.194:46840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 194.87.74.97.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bacsma.org"] [uri "/wp-login.php"] [unique_id "apK9iC04twRPFuquKD2bRgAAqTU"]
[Sat Aug 29 05:07:52.271832 2026] [security2:error] [pid 1028675:tid 1028855] [client 20.104.18.15:19390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/new.php"] [unique_id "apK9iNdHPfW2QFvhmL7-EQAAAC0"]
[Sat Aug 29 05:07:52.279469 2026] [security2:error] [pid 1034096:tid 1034352] [client 20.104.18.15:13688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/asdfghj.php"] [unique_id "apK9iC04twRPFuquKD2bSQAAAOo"]
[Sat Aug 29 05:07:52.284939 2026] [security2:error] [pid 1034096:tid 1034274] [client 52.139.37.240:16724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/c1.php"] [unique_id "apK9iC04twRPFuquKD2bSgAAAJw"]
[Sat Aug 29 05:07:52.290316 2026] [security2:error] [pid 1034096:tid 1034317] [client 20.63.219.114:14719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-content/admin.php"] [unique_id "apK9iC04twRPFuquKD2bTgAAAMc"]
[Sat Aug 29 05:07:52.300155 2026] [security2:error] [pid 1028675:tid 1028898] [client 93.123.109.228:42518] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flicklister.com"] [uri "/___proxy_subdomain_cpcontacts/api-backend/.env"] [unique_id "apK9iNdHPfW2QFvhmL7-EwAAAFg"]
[Sat Aug 29 05:07:52.305244 2026] [security2:error] [pid 1028675:tid 1028892] [client 20.104.18.15:12193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/alfa.php"] [unique_id "apK9iNdHPfW2QFvhmL7-FAAAAFI"]
[Sat Aug 29 05:07:52.306940 2026] [authz_core:error] [pid 1034096:tid 1034279] [client 20.203.141.11:13195] AH01630: client denied by server configuration: /home2/newfloo1/public_html/wp-admin/network/error_log
[Sat Aug 29 05:07:52.307116 2026] [security2:error] [pid 1028675:tid 1028907] [client 20.104.49.130:48612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/xmini4.php"] [unique_id "apK9iNdHPfW2QFvhmL7-FQAAAGE"]
[Sat Aug 29 05:07:52.308681 2026] [security2:error] [pid 1028675:tid 1028880] [client 20.104.18.15:4940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/h2.php"] [unique_id "apK9iNdHPfW2QFvhmL7-FgAAAEY"]
[Sat Aug 29 05:07:52.309330 2026] [security2:error] [pid 1034096:tid 1034378] [client 93.123.109.228:42558] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/public-api/.env"] [unique_id "apK9iC04twRPFuquKD2bUQAAAQQ"]
[Sat Aug 29 05:07:52.309535 2026] [security2:error] [pid 1034096:tid 1034362] [client 93.123.109.228:42252] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/prod/.env"] [unique_id "apK9iC04twRPFuquKD2bUgAAAPQ"]
[Sat Aug 29 05:07:52.320779 2026] [security2:error] [pid 1028675:tid 1028929] [client 93.123.109.228:42516] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flicklister.com"] [uri "/___proxy_subdomain_cpcontacts/api-node/.env"] [unique_id "apK9iNdHPfW2QFvhmL7-FwAAAHc"]
[Sat Aug 29 05:07:52.360476 2026] [security2:error] [pid 1034096:tid 1034322] [client 158.23.147.79:50014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/sad/about.php"] [unique_id "apK9iC04twRPFuquKD2bUwAAAMw"]
[Sat Aug 29 05:07:52.364258 2026] [security2:error] [pid 1028675:tid 1028914] [client 20.48.250.41:61756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9iNdHPfW2QFvhmL7-GAAAAGg"]
[Sat Aug 29 05:07:52.370808 2026] [security2:error] [pid 1034096:tid 1034283] [client 20.104.68.135:19110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.samshock.com"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "apK9iC04twRPFuquKD2bVAAAAKU"]
[Sat Aug 29 05:07:52.374257 2026] [security2:error] [pid 1034096:tid 1034256] [client 158.158.54.35:14793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/222.php"] [unique_id "apK9iC04twRPFuquKD2bVQAAAIo"]
[Sat Aug 29 05:07:52.376305 2026] [security2:error] [pid 1034096:tid 1034271] [client 93.123.109.228:42520] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flicklister.com"] [uri "/___proxy_subdomain_cpcontacts/api/.env"] [unique_id "apK9iC04twRPFuquKD2bVgAAAJk"]
[Sat Aug 29 05:07:52.387147 2026] [fcgid:warn] [pid 1034096:tid 1034307] (70014)End of file found: [client 199.45.154.52:48636] mod_fcgid: can't get data from http client
[Sat Aug 29 05:07:52.397350 2026] [cgid:error] [pid 1034096:tid 1034341] [client 45.148.10.62:44874] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/ninjamov/public_html/404.shtml
[Sat Aug 29 05:07:52.397692 2026] [security2:error] [pid 1034096:tid 1034367] [client 52.139.37.240:37162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/paku.php"] [unique_id "apK9iC04twRPFuquKD2bWQAAAPk"]
[Sat Aug 29 05:07:52.433746 2026] [security2:error] [pid 1034096:tid 1034254] [client 20.104.18.15:13599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/dragonshell.php"] [unique_id "apK9iC04twRPFuquKD2bWwAAAIg"]
[Sat Aug 29 05:07:52.437274 2026] [security2:error] [pid 1034096:tid 1034323] [client 20.104.18.15:18889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/inx.php"] [unique_id "apK9iC04twRPFuquKD2bXAAAAM0"]
[Sat Aug 29 05:07:52.448404 2026] [security2:error] [pid 1034096:tid 1034320] [client 20.104.18.15:12203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/33.php"] [unique_id "apK9iC04twRPFuquKD2bXQAAAMo"]
[Sat Aug 29 05:07:52.449777 2026] [security2:error] [pid 1034096:tid 1034286] [client 93.123.109.228:42324] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/public/.env"] [unique_id "apK9iC04twRPFuquKD2bXgAAAKg"]
[Sat Aug 29 05:07:52.452179 2026] [security2:error] [pid 1034096:tid 1034357] [client 68.155.159.216:6130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK9iC04twRPFuquKD2bXwAAAO8"]
[Sat Aug 29 05:07:52.453676 2026] [security2:error] [pid 1034096:tid 1034345] [client 20.104.18.15:5001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/wp-content/mod/adminfuns.php"] [unique_id "apK9iC04twRPFuquKD2bYAAAAOM"]
[Sat Aug 29 05:07:52.456584 2026] [security2:error] [pid 1034096:tid 1034270] [client 93.123.109.228:42252] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/product/.env"] [unique_id "apK9iC04twRPFuquKD2bYQAAAJg"]
[Sat Aug 29 05:07:52.460337 2026] [security2:error] [pid 1034096:tid 1034376] [client 93.123.109.228:42558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/public/phpinfo.php"] [unique_id "apK9iC04twRPFuquKD2bYgAAAQI"]
[Sat Aug 29 05:07:52.482580 2026] [security2:error] [pid 1028675:tid 1028812] [client 52.139.37.240:56103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/index.php/feed/atom/"] [unique_id "apK9iNdHPfW2QFvhmL7-HQAAAAI"]
[Sat Aug 29 05:07:52.487985 2026] [security2:error] [pid 1034096:tid 1034269] [client 20.203.141.11:45415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/autoload_classmap.php"] [unique_id "apK9iC04twRPFuquKD2bZAAAAJc"]
[Sat Aug 29 05:07:52.489553 2026] [security2:error] [pid 1028675:tid 1028885] [client 4.205.62.107:22418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/api.php"] [unique_id "apK9iNdHPfW2QFvhmL7-HgAAAEs"]
[Sat Aug 29 05:07:52.490229 2026] [security2:error] [pid 1028675:tid 1028877] [client 68.155.159.216:16133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-includes/content.php"] [unique_id "apK9iNdHPfW2QFvhmL7-HwAAAEM"]
[Sat Aug 29 05:07:52.498427 2026] [security2:error] [pid 1034096:tid 1034311] [client 40.83.93.50:11529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/contentloader1.php"] [unique_id "apK9iC04twRPFuquKD2bZQAAAME"]
[Sat Aug 29 05:07:52.543811 2026] [security2:error] [pid 1028675:tid 1028918] [client 20.52.41.200:5366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/css/wp-login.php"] [unique_id "apK9iNdHPfW2QFvhmL7-IQAAAGw"]
[Sat Aug 29 05:07:52.547225 2026] [security2:error] [pid 1034096:tid 1034290] [client 4.205.62.107:58483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/server-info.php"] [unique_id "apK9iC04twRPFuquKD2bZwAAAKw"]
[Sat Aug 29 05:07:52.553618 2026] [security2:error] [pid 1034096:tid 1034336] [client 158.23.147.79:35776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-includes/content.php"] [unique_id "apK9iC04twRPFuquKD2baAAAANo"]
[Sat Aug 29 05:07:52.568646 2026] [security2:error] [pid 1034096:tid 1034305] [client 20.104.68.135:14182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.samshock.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9iC04twRPFuquKD2baQAAALs"]
[Sat Aug 29 05:07:52.569828 2026] [security2:error] [pid 1028675:tid 1028861] [client 158.23.147.79:25496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-content/x.php"] [unique_id "apK9iNdHPfW2QFvhmL7-IwAAADM"]
[Sat Aug 29 05:07:52.570215 2026] [security2:error] [pid 1028675:tid 1028897] [client 20.104.18.15:19355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/vpn.php"] [unique_id "apK9iNdHPfW2QFvhmL7-IgAAAFc"]
[Sat Aug 29 05:07:52.576152 2026] [cgid:error] [pid 1034096:tid 1034334] [client 45.148.10.62:44874] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/ninjamov/public_html/404.shtml
[Sat Aug 29 05:07:52.581920 2026] [security2:error] [pid 1028675:tid 1028917] [client 20.48.250.41:61821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/ff1.php"] [unique_id "apK9iNdHPfW2QFvhmL7-JAAAAGs"]
[Sat Aug 29 05:07:52.584112 2026] [security2:error] [pid 1028675:tid 1028911] [client 20.104.18.15:13667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/wp-safe.php"] [unique_id "apK9iNdHPfW2QFvhmL7-JQAAAGU"]
[Sat Aug 29 05:07:52.591511 2026] [security2:error] [pid 1034096:tid 1034253] [client 52.139.37.240:37285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/rtx.php"] [unique_id "apK9iC04twRPFuquKD2bbAAAAIc"]
[Sat Aug 29 05:07:52.593510 2026] [security2:error] [pid 1034096:tid 1034347] [client 4.205.62.107:25001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/png.php"] [unique_id "apK9iC04twRPFuquKD2bbQAAAOU"]
[Sat Aug 29 05:07:52.599226 2026] [security2:error] [pid 1034096:tid 1034313] [client 20.151.200.44:46626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/EM.php"] [unique_id "apK9iC04twRPFuquKD2bbgAAAMM"]
[Sat Aug 29 05:07:52.605180 2026] [security2:error] [pid 1034096:tid 1034267] [client 68.155.159.216:64408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/goat.php"] [unique_id "apK9iC04twRPFuquKD2bbwAAAJU"]
[Sat Aug 29 05:07:52.613422 2026] [security2:error] [pid 1034096:tid 1034302] [client 93.123.109.228:42324] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/public_html/.env"] [unique_id "apK9iC04twRPFuquKD2bcAAAALg"]
[Sat Aug 29 05:07:52.622438 2026] [security2:error] [pid 1028675:tid 1028811] [client 93.123.109.228:42566] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/qa/.env"] [unique_id "apK9iNdHPfW2QFvhmL7-JgAAAAE"]
[Sat Aug 29 05:07:52.623383 2026] [fcgid:warn] [pid 1034096:tid 1034351] (70014)End of file found: [client 199.45.155.50:42722] mod_fcgid: can't get data from http client
[Sat Aug 29 05:07:52.641936 2026] [security2:error] [pid 1034096:tid 1034297] [client 20.104.18.15:12263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/133.php"] [unique_id "apK9iC04twRPFuquKD2bdAAAALM"]
[Sat Aug 29 05:07:52.645679 2026] [security2:error] [pid 1034096:tid 1034260] [client 20.63.219.114:7537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-content/autoload_classmap.php"] [unique_id "apK9iC04twRPFuquKD2bdQAAAI4"]
[Sat Aug 29 05:07:52.656294 2026] [security2:error] [pid 1034096:tid 1034370] [client 20.203.141.11:13195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-content/themes/about.php"] [unique_id "apK9iC04twRPFuquKD2bdgAAAPw"]
[Sat Aug 29 05:07:52.669382 2026] [security2:error] [pid 1028675:tid 1028927] [client 158.23.147.79:30419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "glowt-shirts.glowt-shirt.com"] [uri "/first.php"] [unique_id "apK9iNdHPfW2QFvhmL7-KgAAAHU"]
[Sat Aug 29 05:07:52.698395 2026] [security2:error] [pid 1034096:tid 1034282] [client 52.139.37.240:56098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/root.php"] [unique_id "apK9iC04twRPFuquKD2begAAAKQ"]
[Sat Aug 29 05:07:52.716645 2026] [security2:error] [pid 1028675:tid 1028894] [client 158.23.184.117:12636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/update/da222.php"] [unique_id "apK9iNdHPfW2QFvhmL7-LgAAAFQ"]
[Sat Aug 29 05:07:52.733100 2026] [security2:error] [pid 1034096:tid 1034335] [client 20.104.18.15:13743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/gjewuagf.php"] [unique_id "apK9iC04twRPFuquKD2bgQAAANk"]
[Sat Aug 29 05:07:52.735902 2026] [security2:error] [pid 1028675:tid 1028896] [client 20.48.250.41:61698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/t.php"] [unique_id "apK9iNdHPfW2QFvhmL7-MAAAAFY"]
[Sat Aug 29 05:07:52.742548 2026] [security2:error] [pid 1034096:tid 1034266] [client 4.205.62.107:21896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/333.php"] [unique_id "apK9iC04twRPFuquKD2bgwAAAJQ"]
[Sat Aug 29 05:07:52.748867 2026] [security2:error] [pid 1034096:tid 1034325] [client 20.104.18.15:4954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/sao.php"] [unique_id "apK9iC04twRPFuquKD2bhAAAAM8"]
[Sat Aug 29 05:07:52.749607 2026] [security2:error] [pid 1034096:tid 1034346] [client 45.148.10.62:44874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ninjamover.com"] [uri "/wp-config.php"] [unique_id "apK9iC04twRPFuquKD2bhQAAAOQ"]
[Sat Aug 29 05:07:52.752297 2026] [security2:error] [pid 1028675:tid 1028902] [client 40.83.93.50:8962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/blog.php"] [unique_id "apK9iNdHPfW2QFvhmL7-MQAAAFw"]
[Sat Aug 29 05:07:52.757713 2026] [security2:error] [pid 1034096:tid 1034280] [client 20.104.18.15:19413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/shiny.php"] [unique_id "apK9iC04twRPFuquKD2bhgAAAKI"]
[Sat Aug 29 05:07:52.803222 2026] [security2:error] [pid 1034096:tid 1034337] [client 52.139.37.240:37171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/update/da222.php"] [unique_id "apK9iC04twRPFuquKD2bjAAAANs"]
[Sat Aug 29 05:07:52.817875 2026] [security2:error] [pid 1034096:tid 1034319] [client 68.155.159.216:51548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK9iC04twRPFuquKD2bjQAAAMk"]
[Sat Aug 29 05:07:52.818999 2026] [security2:error] [pid 1034096:tid 1034364] [client 158.158.54.35:25854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/mini.php"] [unique_id "apK9iC04twRPFuquKD2bjgAAAPY"]
[Sat Aug 29 05:07:52.821365 2026] [security2:error] [pid 1034096:tid 1034259] [client 20.104.18.15:12221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/sym.php"] [unique_id "apK9iC04twRPFuquKD2bjwAAAI0"]
[Sat Aug 29 05:07:52.834291 2026] [security2:error] [pid 1028675:tid 1028922] [client 20.104.68.135:14174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.samshock.com"] [uri "/wp-includes/blocks/buttons/index.php"] [unique_id "apK9iNdHPfW2QFvhmL7-NwAAAHA"]
[Sat Aug 29 05:07:52.844839 2026] [security2:error] [pid 1034096:tid 1034322] [client 158.23.147.79:32690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK9iC04twRPFuquKD2bkQAAAMw"]
[Sat Aug 29 05:07:52.865192 2026] [security2:error] [pid 1034096:tid 1034362] [client 158.23.184.117:12647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/xmr.php"] [unique_id "apK9iC04twRPFuquKD2bkwAAAPQ"]
[Sat Aug 29 05:07:52.888092 2026] [security2:error] [pid 1034096:tid 1034296] [client 52.139.37.240:16754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/shell.php"] [unique_id "apK9iC04twRPFuquKD2blAAAALI"]
[Sat Aug 29 05:07:52.890371 2026] [security2:error] [pid 1034096:tid 1034367] [client 158.23.147.79:6122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-admin/about.php"] [unique_id "apK9iC04twRPFuquKD2blQAAAPk"]
[Sat Aug 29 05:07:52.891877 2026] [security2:error] [pid 1028675:tid 1028903] [client 20.104.18.15:5092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/dapa.php"] [unique_id "apK9iNdHPfW2QFvhmL7-OAAAAF0"]
[Sat Aug 29 05:07:52.898514 2026] [security2:error] [pid 1028675:tid 1028888] [client 158.23.147.79:65517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/cong.php"] [unique_id "apK9iNdHPfW2QFvhmL7-OgAAAE4"]
[Sat Aug 29 05:07:52.900692 2026] [security2:error] [pid 1034096:tid 1034331] [client 20.48.250.41:65354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/shlo.php"] [unique_id "apK9iC04twRPFuquKD2blgAAANU"]
[Sat Aug 29 05:07:52.932499 2026] [access_compat:error] [pid 1034096:tid 1034342] [client 67.20.76.220:11326] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:07:52.934112 2026] [access_compat:error] [pid 1028675:tid 1028860] [client 67.20.76.220:11310] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:07:52.944762 2026] [security2:error] [pid 1034096:tid 1034262] [client 20.48.250.41:61724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/erty.php"] [unique_id "apK9iC04twRPFuquKD2bmgAAAJA"]
[Sat Aug 29 05:07:52.945019 2026] [security2:error] [pid 1028675:tid 1028851] [client 20.203.141.11:17980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/bi.php"] [unique_id "apK9iNdHPfW2QFvhmL7-PQAAACk"]
[Sat Aug 29 05:07:52.950926 2026] [security2:error] [pid 1034096:tid 1034340] [client 68.155.159.216:18310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/admin.php"] [unique_id "apK9iC04twRPFuquKD2bmwAAAN4"]
[Sat Aug 29 05:07:52.951401 2026] [security2:error] [pid 1034096:tid 1034293] [client 158.23.147.79:17464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK9iC04twRPFuquKD2bnAAAAK8"]
[Sat Aug 29 05:07:52.953548 2026] [security2:error] [pid 1028675:tid 1028821] [client 68.155.159.216:38683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK9iNdHPfW2QFvhmL7-PgAAAAs"]
[Sat Aug 29 05:07:52.974767 2026] [security2:error] [pid 1034096:tid 1034333] [client 40.83.93.50:11538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/al.php"] [unique_id "apK9iC04twRPFuquKD2bngAAANc"]
[Sat Aug 29 05:07:52.988695 2026] [security2:error] [pid 1034096:tid 1034369] [client 20.52.41.200:5346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/images/index.php"] [unique_id "apK9iC04twRPFuquKD2bnwAAAPs"]
[Sat Aug 29 05:07:53.007218 2026] [security2:error] [pid 1034096:tid 1034341] [client 20.63.219.114:17212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-content/cache/min/1/wp-content/admin.php"] [unique_id "apK9iS04twRPFuquKD2bogAAAN8"]
[Sat Aug 29 05:07:53.009604 2026] [security2:error] [pid 1028675:tid 1028833] [client 158.23.184.117:61394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK9iddHPfW2QFvhmL7-RAAAABc"]
[Sat Aug 29 05:07:53.037201 2026] [security2:error] [pid 1028675:tid 1028844] [client 20.48.250.41:48996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/0byte.php"] [unique_id "apK9iddHPfW2QFvhmL7-RwAAACI"]
[Sat Aug 29 05:07:53.051003 2026] [security2:error] [pid 1034096:tid 1034371] [client 158.23.147.79:48154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK9iS04twRPFuquKD2bpAAAAP0"]
[Sat Aug 29 05:07:53.080407 2026] [security2:error] [pid 1028675:tid 1028863] [client 52.139.37.240:16747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/wp-admin/user/index.php"] [unique_id "apK9iddHPfW2QFvhmL7-SgAAADU"]
[Sat Aug 29 05:07:53.084094 2026] [security2:error] [pid 1028675:tid 1028842] [client 20.48.250.41:65260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/asax.php"] [unique_id "apK9iddHPfW2QFvhmL7-SwAAACA"]
[Sat Aug 29 05:07:53.084655 2026] [security2:error] [pid 1034096:tid 1034268] [client 20.104.68.135:51361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.samshock.com"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "apK9iS04twRPFuquKD2bpgAAAJY"]
[Sat Aug 29 05:07:53.085914 2026] [security2:error] [pid 1034096:tid 1034276] [client 158.23.147.79:11278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK9iS04twRPFuquKD2bpwAAAJ4"]
[Sat Aug 29 05:07:53.099639 2026] [security2:error] [pid 1028675:tid 1028932] [client 20.48.250.41:61754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/0x.php"] [unique_id "apK9iddHPfW2QFvhmL7-TgAAAHo"]
[Sat Aug 29 05:07:53.100904 2026] [security2:error] [pid 1028675:tid 1028866] [client 52.139.37.240:37743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/wp-admin/min.php"] [unique_id "apK9iddHPfW2QFvhmL7-TwAAADg"]
[Sat Aug 29 05:07:53.118925 2026] [security2:error] [pid 1034096:tid 1034366] [client 4.205.62.107:56015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/mcebraed.php"] [unique_id "apK9iS04twRPFuquKD2bqwAAAPg"]
[Sat Aug 29 05:07:53.136116 2026] [security2:error] [pid 1028675:tid 1028907] [client 20.203.141.11:33683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK9iddHPfW2QFvhmL7-UAAAAGE"]
[Sat Aug 29 05:07:53.148751 2026] [security2:error] [pid 1028675:tid 1028812] [client 20.104.49.130:48543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/amax.php"] [unique_id "apK9iddHPfW2QFvhmL7-UgAAAAI"]
[Sat Aug 29 05:07:53.153120 2026] [security2:error] [pid 1034096:tid 1034310] [client 158.23.184.117:61402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/wp-act.php"] [unique_id "apK9iS04twRPFuquKD2brAAAAMA"]
[Sat Aug 29 05:07:53.161979 2026] [security2:error] [pid 1028675:tid 1028877] [client 93.123.109.228:42518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flicklister.com"] [uri "/api/info.php"] [unique_id "apK9iddHPfW2QFvhmL7-VAAAAEM"]
[Sat Aug 29 05:07:53.163350 2026] [security2:error] [pid 1028675:tid 1028846] [client 20.151.200.44:47296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/ca4.php"] [unique_id "apK9iddHPfW2QFvhmL7-VQAAACQ"]
[Sat Aug 29 05:07:53.170656 2026] [security2:error] [pid 1028675:tid 1028876] [client 20.48.250.41:49128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/xr.php"] [unique_id "apK9iddHPfW2QFvhmL7-VgAAAEI"]
[Sat Aug 29 05:07:53.171890 2026] [security2:error] [pid 1034096:tid 1034253] [client 20.48.250.41:35336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/s1.php"] [unique_id "apK9iS04twRPFuquKD2brgAAAIc"]
[Sat Aug 29 05:07:53.205708 2026] [security2:error] [pid 1034096:tid 1034275] [client 4.205.62.107:8740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/phina.php"] [unique_id "apK9iS04twRPFuquKD2brwAAAJ0"]
[Sat Aug 29 05:07:53.213027 2026] [security2:error] [pid 1028675:tid 1028815] [client 45.148.10.62:44876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wkm.vbd.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "apK9iddHPfW2QFvhmL7-VwAAAAU"]
[Sat Aug 29 05:07:53.231343 2026] [security2:error] [pid 1028675:tid 1028861] [client 20.48.250.41:61755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/66.php"] [unique_id "apK9iddHPfW2QFvhmL7-WAAAADM"]
[Sat Aug 29 05:07:53.238298 2026] [security2:error] [pid 1028675:tid 1028916] [client 40.83.93.50:11552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/bypass.php"] [unique_id "apK9iddHPfW2QFvhmL7-WQAAAGo"]
[Sat Aug 29 05:07:53.273026 2026] [security2:error] [pid 1034096:tid 1034315] [client 158.158.54.35:28128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/aa.php"] [unique_id "apK9iS04twRPFuquKD2bswAAAMU"]
[Sat Aug 29 05:07:53.276088 2026] [security2:error] [pid 1028675:tid 1028926] [client 52.139.37.240:16729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/wp-content/plugins/linkpreview/il.php"] [unique_id "apK9iddHPfW2QFvhmL7-WgAAAHQ"]
[Sat Aug 29 05:07:53.299488 2026] [security2:error] [pid 1034096:tid 1034373] [client 158.23.184.117:12624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/fff.php"] [unique_id "apK9iS04twRPFuquKD2btQAAAP8"]
[Sat Aug 29 05:07:53.301122 2026] [security2:error] [pid 1028675:tid 1028848] [client 20.48.250.41:65399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/fetch.php"] [unique_id "apK9iddHPfW2QFvhmL7-WwAAACY"]
[Sat Aug 29 05:07:53.302836 2026] [security2:error] [pid 1034096:tid 1034351] [client 52.139.37.240:37716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/wp-admin/wp-fileesx-449.php"] [unique_id "apK9iS04twRPFuquKD2btgAAAOk"]
[Sat Aug 29 05:07:53.327040 2026] [security2:error] [pid 1034096:tid 1034285] [client 20.48.250.41:35080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/0byte.php"] [unique_id "apK9iS04twRPFuquKD2buAAAAKc"]
[Sat Aug 29 05:07:53.359754 2026] [security2:error] [pid 1034096:tid 1034263] [client 20.104.68.135:4427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.samshock.com"] [uri "/wp-includes/index.php"] [unique_id "apK9iS04twRPFuquKD2buQAAAJE"]
[Sat Aug 29 05:07:53.368462 2026] [security2:error] [pid 1028675:tid 1028823] [client 20.63.219.114:7527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-content/classwithtostring.php"] [unique_id "apK9iddHPfW2QFvhmL7-XgAAAA0"]
[Sat Aug 29 05:07:53.376566 2026] [security2:error] [pid 1034096:tid 1034348] [client 20.48.250.41:49022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/h02ugyh.php"] [unique_id "apK9iS04twRPFuquKD2bugAAAOY"]
[Sat Aug 29 05:07:53.393798 2026] [security2:error] [pid 1034096:tid 1034318] [client 20.48.250.41:61729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/f35.php"] [unique_id "apK9iS04twRPFuquKD2bvAAAAMg"]
[Sat Aug 29 05:07:53.397912 2026] [security2:error] [pid 1034096:tid 1034339] [client 158.23.147.79:17557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9iS04twRPFuquKD2bvQAAAN0"]
[Sat Aug 29 05:07:53.410472 2026] [security2:error] [pid 1028675:tid 1028811] [client 20.203.141.11:13366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/cc.php"] [unique_id "apK9iddHPfW2QFvhmL7-XwAAAAE"]
[Sat Aug 29 05:07:53.439793 2026] [security2:error] [pid 1034096:tid 1034325] [client 68.155.159.216:24564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/.well-known/content.php"] [unique_id "apK9iS04twRPFuquKD2bvgAAAM8"]
[Sat Aug 29 05:07:53.440495 2026] [security2:error] [pid 1034096:tid 1034346] [client 68.155.159.216:30671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK9iS04twRPFuquKD2bvwAAAOQ"]
[Sat Aug 29 05:07:53.448199 2026] [security2:error] [pid 1034096:tid 1034360] [client 158.23.184.117:61404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/.tmb/dropdown.php"] [unique_id "apK9iS04twRPFuquKD2bwAAAAPI"]
[Sat Aug 29 05:07:53.448481 2026] [security2:error] [pid 1034096:tid 1034352] [client 68.155.159.216:49269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/install.php"] [unique_id "apK9iS04twRPFuquKD2bwQAAAOo"]
[Sat Aug 29 05:07:53.468408 2026] [security2:error] [pid 1028675:tid 1028878] [client 40.83.93.50:8403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/global.php"] [unique_id "apK9iddHPfW2QFvhmL7-YgAAAEQ"]
[Sat Aug 29 05:07:53.469370 2026] [security2:error] [pid 1034096:tid 1034294] [client 52.139.37.240:56102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/wp-header-json.php"] [unique_id "apK9iS04twRPFuquKD2bwwAAALA"]
[Sat Aug 29 05:07:53.469373 2026] [security2:error] [pid 1028675:tid 1028930] [client 93.123.109.228:42516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.flicklister.com"] [uri "/api/phpinfo.php"] [unique_id "apK9iddHPfW2QFvhmL7-YwAAAHg"]
[Sat Aug 29 05:07:53.494839 2026] [security2:error] [pid 1034096:tid 1034266] [client 52.139.37.240:37302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/wp-content/themes/min.php"] [unique_id "apK9iS04twRPFuquKD2bxgAAAJQ"]
[Sat Aug 29 05:07:53.517589 2026] [security2:error] [pid 1034096:tid 1034260] [client 45.148.10.62:44884] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "ninjamover.com"] [uri "/wp-config.php.old"] [unique_id "apK9iS04twRPFuquKD2bygAAAI4"]
[Sat Aug 29 05:07:53.522802 2026] [security2:error] [pid 1028675:tid 1028909] [client 20.63.81.20:55534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9iddHPfW2QFvhmL7-ZgAAAGM"]
[Sat Aug 29 05:07:53.523636 2026] [security2:error] [pid 1034096:tid 1034364] [client 20.48.250.41:65277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/vx.php"] [unique_id "apK9iS04twRPFuquKD2bywAAAPY"]
[Sat Aug 29 05:07:53.526238 2026] [security2:error] [pid 1034096:tid 1034259] [client 20.48.250.41:61734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/wen.php"] [unique_id "apK9iS04twRPFuquKD2bzAAAAI0"]
[Sat Aug 29 05:07:53.535481 2026] [security2:error] [pid 1034096:tid 1034322] [client 20.48.250.41:49129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/xxw.php"] [unique_id "apK9iS04twRPFuquKD2bzQAAAMw"]
[Sat Aug 29 05:07:53.560735 2026] [security2:error] [pid 1028675:tid 1028936] [client 20.48.250.41:35502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/xr.php"] [unique_id "apK9iddHPfW2QFvhmL7-aAAAAH4"]
[Sat Aug 29 05:07:53.560818 2026] [security2:error] [pid 1034096:tid 1034264] [client 20.104.68.135:51337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.samshock.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK9iS04twRPFuquKD2b0AAAAJI"]
[Sat Aug 29 05:07:53.572647 2026] [security2:error] [pid 1034096:tid 1034256] [client 68.155.159.216:6132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK9iS04twRPFuquKD2b0QAAAIo"]
[Sat Aug 29 05:07:53.600519 2026] [security2:error] [pid 1028675:tid 1028816] [client 20.52.41.200:5325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/inputs.php"] [unique_id "apK9iddHPfW2QFvhmL7-aQAAAAY"]
[Sat Aug 29 05:07:53.610187 2026] [security2:error] [pid 1028675:tid 1028903] [client 158.23.184.117:61381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/robots.php"] [unique_id "apK9iddHPfW2QFvhmL7-agAAAF0"]
[Sat Aug 29 05:07:53.616027 2026] [security2:error] [pid 1034096:tid 1034328] [client 20.203.141.11:38351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-admin/index.php"] [unique_id "apK9iS04twRPFuquKD2b0gAAANI"]
[Sat Aug 29 05:07:53.628306 2026] [security2:error] [pid 1034096:tid 1034331] [client 4.205.62.107:22046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/temp.php"] [unique_id "apK9iS04twRPFuquKD2b1AAAANU"]
[Sat Aug 29 05:07:53.641608 2026] [security2:error] [pid 1028675:tid 1028928] [client 68.155.159.216:16258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-admin/css/index.php"] [unique_id "apK9iddHPfW2QFvhmL7-bAAAAHY"]
[Sat Aug 29 05:07:53.650525 2026] [security2:error] [pid 1034096:tid 1034301] [client 20.63.81.20:55488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9iS04twRPFuquKD2b1QAAALc"]
[Sat Aug 29 05:07:53.657967 2026] [security2:error] [pid 1034096:tid 1034307] [client 52.139.37.240:16753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/zup.php"] [unique_id "apK9iS04twRPFuquKD2b1gAAAL0"]
[Sat Aug 29 05:07:53.664194 2026] [security2:error] [pid 1034096:tid 1034326] [client 20.104.104.62:20679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/manda.php"] [unique_id "apK9iS04twRPFuquKD2b2AAAANA"]
[Sat Aug 29 05:07:53.670777 2026] [security2:error] [pid 1034096:tid 1034293] [client 20.48.250.41:49409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/global.php"] [unique_id "apK9iS04twRPFuquKD2b2gAAAK8"]
[Sat Aug 29 05:07:53.678215 2026] [security2:error] [pid 1034096:tid 1034257] [client 158.23.147.79:25430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK9iS04twRPFuquKD2b2wAAAIs"]
[Sat Aug 29 05:07:53.681854 2026] [security2:error] [pid 1028675:tid 1028825] [client 20.48.250.41:61750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/inc.php"] [unique_id "apK9iddHPfW2QFvhmL7-cAAAAA8"]
[Sat Aug 29 05:07:53.683694 2026] [security2:error] [pid 1028675:tid 1028929] [client 20.104.49.130:56216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.danesquality.com"] [uri "/ws58.php"] [unique_id "apK9iddHPfW2QFvhmL7-cQAAAHc"]
[Sat Aug 29 05:07:53.686796 2026] [security2:error] [pid 1028675:tid 1028833] [client 20.48.250.41:49103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/bolt.php"] [unique_id "apK9iddHPfW2QFvhmL7-cgAAABc"]
[Sat Aug 29 05:07:53.686807 2026] [security2:error] [pid 1034096:tid 1034273] [client 4.205.62.107:58435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/xve22.php"] [unique_id "apK9iS04twRPFuquKD2b3AAAAJs"]
[Sat Aug 29 05:07:53.687998 2026] [security2:error] [pid 1034096:tid 1034306] [client 20.48.250.41:38899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9iS04twRPFuquKD2b3QAAALw"]
[Sat Aug 29 05:07:53.693379 2026] [security2:error] [pid 1034096:tid 1034343] [client 20.151.200.44:45949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/x0x.php"] [unique_id "apK9iS04twRPFuquKD2b3gAAAOE"]
[Sat Aug 29 05:07:53.694185 2026] [security2:error] [pid 1034096:tid 1034323] [client 20.48.250.41:35020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/h02ugyh.php"] [unique_id "apK9iS04twRPFuquKD2b3wAAAM0"]
[Sat Aug 29 05:07:53.695839 2026] [security2:error] [pid 1028675:tid 1028898] [client 52.139.37.240:37129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/wp-content/themes/x/bypass.php"] [unique_id "apK9iddHPfW2QFvhmL7-dAAAAFg"]
[Sat Aug 29 05:07:53.699849 2026] [security2:error] [pid 1034096:tid 1034354] [client 158.23.147.79:35750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-admin/css/index.php"] [unique_id "apK9iS04twRPFuquKD2b4QAAAOw"]
[Sat Aug 29 05:07:53.711947 2026] [security2:error] [pid 1034096:tid 1034345] [client 68.155.159.216:63867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK9iS04twRPFuquKD2b4gAAAOM"]
[Sat Aug 29 05:07:53.717258 2026] [security2:error] [pid 1034096:tid 1034283] [client 158.158.54.35:14570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/c.php"] [unique_id "apK9iS04twRPFuquKD2b4wAAAKU"]
[Sat Aug 29 05:07:53.721403 2026] [security2:error] [pid 1028675:tid 1028832] [client 20.63.219.114:16021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-content/config.php"] [unique_id "apK9iddHPfW2QFvhmL7-dQAAABY"]
[Sat Aug 29 05:07:53.724221 2026] [security2:error] [pid 1034096:tid 1034270] [client 20.240.128.207:21028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/.trash7206/index.php"] [unique_id "apK9iS04twRPFuquKD2b5AAAAJg"]
[Sat Aug 29 05:07:53.753869 2026] [security2:error] [pid 1034096:tid 1034357] [client 213.202.253.4:54363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bv-place.com"] [uri "/adminfuns.php"] [unique_id "apK9iS04twRPFuquKD2b6AAAAO8"], referer: www.google.com
[Sat Aug 29 05:07:53.755838 2026] [security2:error] [pid 1034096:tid 1034369] [client 158.23.184.117:61432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/.well-known/install.php"] [unique_id "apK9iS04twRPFuquKD2b6QAAAPs"]
[Sat Aug 29 05:07:53.759750 2026] [security2:error] [pid 1034096:tid 1034342] [client 20.104.68.135:12452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.samshock.com"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "apK9iS04twRPFuquKD2b6gAAAOA"]
[Sat Aug 29 05:07:53.764990 2026] [security2:error] [pid 1028675:tid 1028863] [client 158.23.147.79:26437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK9iddHPfW2QFvhmL7-dgAAADU"]
[Sat Aug 29 05:07:53.778200 2026] [security2:error] [pid 1028675:tid 1028842] [client 68.155.159.216:33628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-content/banners/about.php"] [unique_id "apK9iddHPfW2QFvhmL7-dwAAACA"]
[Sat Aug 29 05:07:53.779191 2026] [security2:error] [pid 1028675:tid 1028908] [client 20.63.81.20:55515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/ser.php"] [unique_id "apK9iddHPfW2QFvhmL7-eAAAAGI"]
[Sat Aug 29 05:07:53.796601 2026] [security2:error] [pid 1034096:tid 1034253] [client 4.205.62.107:24964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/chosen.php"] [unique_id "apK9iS04twRPFuquKD2b7AAAAIc"]
[Sat Aug 29 05:07:53.804561 2026] [security2:error] [pid 1034096:tid 1034275] [client 20.48.250.41:61771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/6bcwiqwj.php"] [unique_id "apK9iS04twRPFuquKD2b7gAAAJ0"]
[Sat Aug 29 05:07:53.808269 2026] [autoindex:error] [pid 1034096:tid 1034180] [remote 45.148.10.62:44890] AH01276: Cannot serve directory /home3/wkmvbdmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:07:53.818616 2026] [security2:error] [pid 1034096:tid 1034311] [client 20.48.250.41:49062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/rtx.php"] [unique_id "apK9iS04twRPFuquKD2b7wAAAME"]
[Sat Aug 29 05:07:53.830506 2026] [security2:error] [pid 1028675:tid 1028858] [client 20.48.250.41:35036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/xxw.php"] [unique_id "apK9iddHPfW2QFvhmL7-egAAADA"]
[Sat Aug 29 05:07:53.854347 2026] [security2:error] [pid 1028675:tid 1028918] [client 20.48.250.41:38795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9iddHPfW2QFvhmL7-fAAAAGw"]
[Sat Aug 29 05:07:53.863900 2026] [security2:error] [pid 1034096:tid 1034302] [client 20.104.49.130:52541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.carlosmua.com"] [uri "/ioxi-o.php"] [unique_id "apK9iS04twRPFuquKD2b8gAAALg"]
[Sat Aug 29 05:07:53.868695 2026] [security2:error] [pid 1028675:tid 1028846] [client 20.151.200.44:47375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.rjselectricalservices.com"] [uri "/fesa.php"] [unique_id "apK9iddHPfW2QFvhmL7-fQAAACQ"]
[Sat Aug 29 05:07:53.872939 2026] [security2:error] [pid 1034096:tid 1034376] [client 20.203.141.11:6145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/files/index.php"] [unique_id "apK9iS04twRPFuquKD2b8wAAAQI"]
[Sat Aug 29 05:07:53.878975 2026] [security2:error] [pid 1034096:tid 1034320] [client 52.139.37.240:56111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/a9.php"] [unique_id "apK9iS04twRPFuquKD2b9AAAAMo"]
[Sat Aug 29 05:07:53.882214 2026] [security2:error] [pid 1034096:tid 1034315] [client 4.205.62.107:22488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/a1vx.php"] [unique_id "apK9iS04twRPFuquKD2b9QAAAMU"]
[Sat Aug 29 05:07:53.911979 2026] [security2:error] [pid 1034096:tid 1034370] [client 20.63.81.20:55546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/431.php"] [unique_id "apK9iS04twRPFuquKD2b9wAAAPw"]
[Sat Aug 29 05:07:53.928488 2026] [security2:error] [pid 1028675:tid 1028916] [client 68.155.159.216:51864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK9iddHPfW2QFvhmL7-gAAAAGo"]
[Sat Aug 29 05:07:53.931788 2026] [security2:error] [pid 1028675:tid 1028911] [client 20.48.250.41:65328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/fs.php"] [unique_id "apK9iddHPfW2QFvhmL7-gQAAAGU"]
[Sat Aug 29 05:07:53.932555 2026] [access_compat:error] [pid 1034096:tid 1034263] [client 67.20.76.220:11342] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:07:53.936376 2026] [access_compat:error] [pid 1028675:tid 1028897] [client 67.20.76.220:59962] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:07:53.952489 2026] [security2:error] [pid 1028675:tid 1028824] [client 68.155.159.216:33697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/about.php"] [unique_id "apK9iddHPfW2QFvhmL7-hQAAAA4"]
[Sat Aug 29 05:07:53.952495 2026] [security2:error] [pid 1034096:tid 1034358] [client 68.155.159.216:2017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-content/cong.php"] [unique_id "apK9iS04twRPFuquKD2b-gAAAPA"]
[Sat Aug 29 05:07:53.952519 2026] [security2:error] [pid 1028675:tid 1028927] [client 158.23.147.79:32713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-admin/network/index.php"] [unique_id "apK9iddHPfW2QFvhmL7-hgAAAHU"]
[Sat Aug 29 05:07:53.956827 2026] [security2:error] [pid 1034096:tid 1034325] [client 68.155.159.216:64492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK9iS04twRPFuquKD2b_AAAAM8"]
[Sat Aug 29 05:07:53.960875 2026] [security2:error] [pid 1028675:tid 1028848] [client 20.48.250.41:49077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/ckk.php"] [unique_id "apK9iddHPfW2QFvhmL7-hwAAACY"]
[Sat Aug 29 05:07:53.966844 2026] [security2:error] [pid 1028675:tid 1028923] [client 158.23.184.117:12668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/wp-admin/about.php"] [unique_id "apK9iddHPfW2QFvhmL7-iAAAAHE"]
[Sat Aug 29 05:07:53.967381 2026] [security2:error] [pid 1028675:tid 1028894] [client 20.48.250.41:58608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/easy.php"] [unique_id "apK9iddHPfW2QFvhmL7-iQAAAFQ"]
[Sat Aug 29 05:07:53.975155 2026] [security2:error] [pid 1034096:tid 1034294] [client 20.48.250.41:35488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/bolt.php"] [unique_id "apK9iS04twRPFuquKD2b_wAAALA"]
[Sat Aug 29 05:07:53.990329 2026] [security2:error] [pid 1028675:tid 1028902] [client 20.48.250.41:38792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/ff1.php"] [unique_id "apK9iddHPfW2QFvhmL7-jAAAAFw"]
[Sat Aug 29 05:07:54.002003 2026] [security2:error] [pid 1028675:tid 1028856] [client 52.139.37.240:37125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK9iddHPfW2QFvhmL7-jgAAAC4"]
[Sat Aug 29 05:07:54.004766 2026] [security2:error] [pid 1028675:tid 1028841] [client 40.83.93.50:8387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/extractable-loader-head.php"] [unique_id "apK9itdHPfW2QFvhmL7-jwAAAB8"]
[Sat Aug 29 05:07:54.025792 2026] [security2:error] [pid 1034096:tid 1034266] [client 20.104.68.135:19660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.samshock.com"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "apK9ii04twRPFuquKD2cAgAAAJQ"]
[Sat Aug 29 05:07:54.041600 2026] [security2:error] [pid 1034096:tid 1034260] [client 20.63.81.20:55530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/rxr.php"] [unique_id "apK9ii04twRPFuquKD2cAwAAAI4"]
[Sat Aug 29 05:07:54.059602 2026] [security2:error] [pid 1028675:tid 1028922] [client 68.155.159.216:56562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK9itdHPfW2QFvhmL7-kAAAAHA"]
[Sat Aug 29 05:07:54.061311 2026] [security2:error] [pid 1028675:tid 1028909] [client 158.23.147.79:17483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-login.php"] [unique_id "apK9itdHPfW2QFvhmL7-kQAAAGM"]
[Sat Aug 29 05:07:54.070058 2026] [security2:error] [pid 1034096:tid 1034282] [client 20.52.41.200:4544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/alfa.php"] [unique_id "apK9ii04twRPFuquKD2cBAAAAKQ"]
[Sat Aug 29 05:07:54.071204 2026] [security2:error] [pid 1034096:tid 1034337] [client 52.139.37.240:56125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/admin/index.php"] [unique_id "apK9ii04twRPFuquKD2cBQAAANs"]
[Sat Aug 29 05:07:54.081918 2026] [security2:error] [pid 1034096:tid 1034280] [client 20.63.219.114:13914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-content/cong.php"] [unique_id "apK9ii04twRPFuquKD2cBwAAAKI"]
[Sat Aug 29 05:07:54.093992 2026] [security2:error] [pid 1034096:tid 1034361] [client 20.48.250.41:48967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.grizzcustomcabinets.com"] [uri "/R57.php"] [unique_id "apK9ii04twRPFuquKD2cCAAAAPM"]
[Sat Aug 29 05:07:54.106072 2026] [security2:error] [pid 1034096:tid 1034329] [client 20.203.141.11:38169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/radio.php"] [unique_id "apK9ii04twRPFuquKD2cCgAAANM"]
[Sat Aug 29 05:07:54.115992 2026] [security2:error] [pid 1028675:tid 1028840] [client 158.23.184.117:12646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/wp-content/backup.php"] [unique_id "apK9itdHPfW2QFvhmL7-mQAAAB4"]
[Sat Aug 29 05:07:54.117601 2026] [security2:error] [pid 1028675:tid 1028813] [client 45.148.10.62:48828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ninjamover.com"] [uri "/config.php"] [unique_id "apK9itdHPfW2QFvhmL7-mgAAAAM"]
[Sat Aug 29 05:07:54.117603 2026] [security2:error] [pid 1034096:tid 1034295] [client 40.83.93.50:8396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/update.php"] [unique_id "apK9ii04twRPFuquKD2cCwAAALE"]
[Sat Aug 29 05:07:54.120142 2026] [security2:error] [pid 1028675:tid 1028910] [client 20.48.250.41:61747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/fresh3.php"] [unique_id "apK9itdHPfW2QFvhmL7-mwAAAGQ"]
[Sat Aug 29 05:07:54.127315 2026] [security2:error] [pid 1028675:tid 1028928] [client 20.48.250.41:49439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/ioxi.php"] [unique_id "apK9itdHPfW2QFvhmL7-nQAAAHY"]
[Sat Aug 29 05:07:54.141717 2026] [security2:error] [pid 1028675:tid 1028833] [client 68.155.159.216:12136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK9itdHPfW2QFvhmL7-oAAAABc"]
[Sat Aug 29 05:07:54.144629 2026] [security2:error] [pid 1028675:tid 1028872] [client 68.155.159.216:52833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/install.php"] [unique_id "apK9itdHPfW2QFvhmL7-oQAAAD4"]
[Sat Aug 29 05:07:54.157251 2026] [security2:error] [pid 1034096:tid 1034363] [client 158.158.54.35:24508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/f.php"] [unique_id "apK9ii04twRPFuquKD2cDgAAAPU"]
[Sat Aug 29 05:07:54.167945 2026] [security2:error] [pid 1034096:tid 1034316] [client 20.48.250.41:35477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/rtx.php"] [unique_id "apK9ii04twRPFuquKD2cEAAAAMY"]
[Sat Aug 29 05:07:54.169286 2026] [security2:error] [pid 1034096:tid 1034251] [client 20.63.81.20:55541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/csst.php"] [unique_id "apK9ii04twRPFuquKD2cEQAAAIU"]
[Sat Aug 29 05:07:54.189065 2026] [security2:error] [pid 1028675:tid 1028932] [client 20.48.250.41:38885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/t.php"] [unique_id "apK9itdHPfW2QFvhmL7-pAAAAHo"]
[Sat Aug 29 05:07:54.202061 2026] [security2:error] [pid 1028675:tid 1028925] [client 52.139.37.240:37287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/wp-info.php"] [unique_id "apK9itdHPfW2QFvhmL7-pQAAAHM"]
[Sat Aug 29 05:07:54.216557 2026] [security2:error] [pid 1028675:tid 1028858] [client 158.23.147.79:48129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK9itdHPfW2QFvhmL7-pgAAADA"]
[Sat Aug 29 05:07:54.223308 2026] [security2:error] [pid 1028675:tid 1028867] [client 20.240.128.207:23468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wk/index.php"] [unique_id "apK9itdHPfW2QFvhmL7-pwAAADk"]
[Sat Aug 29 05:07:54.263098 2026] [security2:error] [pid 1034096:tid 1034330] [client 20.104.104.62:20681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/pmemek.php"] [unique_id "apK9ii04twRPFuquKD2cEwAAANQ"]
[Sat Aug 29 05:07:54.263931 2026] [security2:error] [pid 1028675:tid 1028866] [client 158.23.184.117:61380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/.well-known/aa.php"] [unique_id "apK9itdHPfW2QFvhmL7-qQAAADg"]
[Sat Aug 29 05:07:54.277863 2026] [security2:error] [pid 1028675:tid 1028846] [client 4.205.62.107:53265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/server-info.php"] [unique_id "apK9itdHPfW2QFvhmL7-qgAAACQ"]
[Sat Aug 29 05:07:54.280601 2026] [security2:error] [pid 1028675:tid 1028885] [client 20.48.250.41:61794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/bgymj.php"] [unique_id "apK9itdHPfW2QFvhmL7-qwAAAEs"]
[Sat Aug 29 05:07:54.284504 2026] [security2:error] [pid 1034096:tid 1034378] [client 52.139.37.240:56089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/makeasmtp.php"] [unique_id "apK9ii04twRPFuquKD2cFAAAAQQ"]
[Sat Aug 29 05:07:54.303948 2026] [security2:error] [pid 1028675:tid 1028828] [client 20.48.250.41:65269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/bootstrap.php"] [unique_id "apK9itdHPfW2QFvhmL7-rQAAABI"]
[Sat Aug 29 05:07:54.304946 2026] [security2:error] [pid 1034096:tid 1034254] [client 20.63.81.20:55424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/wp-includes/blocks/query-title/footer.php"] [unique_id "apK9ii04twRPFuquKD2cFwAAAIg"]
[Sat Aug 29 05:07:54.306866 2026] [security2:error] [pid 1034096:tid 1034184] [remote 45.148.10.62:44890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wkm.vbd.mybluehost.me"] [uri "/wp-login.php"] [unique_id "apK9ii04twRPFuquKD2cGAAAiz4"]
[Sat Aug 29 05:07:54.320226 2026] [security2:error] [pid 1034096:tid 1034273] [client 20.48.250.41:35094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/ckk.php"] [unique_id "apK9ii04twRPFuquKD2cGQAAAJs"]
[Sat Aug 29 05:07:54.337082 2026] [security2:error] [pid 1028675:tid 1028861] [client 20.104.49.130:36792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pvillusions.com"] [uri "/coffexium.php"] [unique_id "apK9itdHPfW2QFvhmL7-rwAAADM"]
[Sat Aug 29 05:07:54.343821 2026] [security2:error] [pid 1028675:tid 1028907] [client 20.48.250.41:38853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/erty.php"] [unique_id "apK9itdHPfW2QFvhmL7-sAAAAGE"]
[Sat Aug 29 05:07:54.344327 2026] [security2:error] [pid 1028675:tid 1028863] [client 20.203.141.11:27362] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.xbdorthodontics.com"] [uri "/1.php7"] [unique_id "apK9itdHPfW2QFvhmL7-sQAAADU"]
[Sat Aug 29 05:07:54.344438 2026] [security2:error] [pid 1028675:tid 1028863] [client 20.203.141.11:27362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/1.php7"] [unique_id "apK9itdHPfW2QFvhmL7-sQAAADU"]
[Sat Aug 29 05:07:54.373942 2026] [security2:error] [pid 1028675:tid 1028848] [client 20.104.68.135:4473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.samshock.com"] [uri "/wp-links-opml.php"] [unique_id "apK9itdHPfW2QFvhmL7-sgAAACY"]
[Sat Aug 29 05:07:54.387176 2026] [security2:error] [pid 1028675:tid 1028931] [client 20.104.49.130:60790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/xwpg.php"] [unique_id "apK9itdHPfW2QFvhmL7-swAAAHk"]
[Sat Aug 29 05:07:54.387953 2026] [security2:error] [pid 1034096:tid 1034270] [client 20.104.49.130:57506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/browse.php"] [unique_id "apK9ii04twRPFuquKD2cGwAAAJg"]
[Sat Aug 29 05:07:54.402251 2026] [security2:error] [pid 1034096:tid 1034323] [client 52.139.37.240:37151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/wp-wordfence-waf.php"] [unique_id "apK9ii04twRPFuquKD2cHgAAAM0"]
[Sat Aug 29 05:07:54.405349 2026] [security2:error] [pid 1034096:tid 1034375] [client 4.205.62.107:53361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/aws_secret_config.php"] [unique_id "apK9ii04twRPFuquKD2cIAAAAQE"]
[Sat Aug 29 05:07:54.407542 2026] [security2:error] [pid 1034096:tid 1034357] [client 20.48.250.41:61745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/ws69.php"] [unique_id "apK9ii04twRPFuquKD2cIQAAAO8"]
[Sat Aug 29 05:07:54.408313 2026] [security2:error] [pid 1034096:tid 1034283] [client 158.23.184.117:61376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "apK9ii04twRPFuquKD2cIgAAAKU"]
[Sat Aug 29 05:07:54.419818 2026] [security2:error] [pid 1028675:tid 1028892] [client 20.104.49.130:57657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/init.php"] [unique_id "apK9itdHPfW2QFvhmL7-tAAAAFI"]
[Sat Aug 29 05:07:54.432771 2026] [security2:error] [pid 1028675:tid 1028883] [client 20.63.81.20:55527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/wp-content/uploads/indoex.php"] [unique_id "apK9itdHPfW2QFvhmL7-tQAAAEk"]
[Sat Aug 29 05:07:54.468708 2026] [security2:error] [pid 1034096:tid 1034354] [client 20.63.219.114:13950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-content/content.php"] [unique_id "apK9ii04twRPFuquKD2cJAAAAOw"]
[Sat Aug 29 05:07:54.484896 2026] [security2:error] [pid 1028675:tid 1028862] [client 52.139.37.240:16473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/paku.php"] [unique_id "apK9itdHPfW2QFvhmL7-tgAAADQ"]
[Sat Aug 29 05:07:54.485766 2026] [security2:error] [pid 1034096:tid 1034306] [client 40.83.93.50:9017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/defaults.php"] [unique_id "apK9ii04twRPFuquKD2cJgAAALw"]
[Sat Aug 29 05:07:54.500658 2026] [security2:error] [pid 1034096:tid 1034269] [client 93.123.109.228:42252] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/s3/.env.bak"] [unique_id "apK9ii04twRPFuquKD2cJwAAAJc"]
[Sat Aug 29 05:07:54.509554 2026] [security2:error] [pid 1034096:tid 1034353] [client 20.48.250.41:49486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/export.php"] [unique_id "apK9ii04twRPFuquKD2cKAAAAOs"]
[Sat Aug 29 05:07:54.518771 2026] [security2:error] [pid 1034096:tid 1034362] [client 20.48.250.41:35082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stoolsample.superbusy.com"] [uri "/R57.php"] [unique_id "apK9ii04twRPFuquKD2cKQAAAPQ"]
[Sat Aug 29 05:07:54.534322 2026] [security2:error] [pid 1028675:tid 1028923] [client 20.52.41.200:5358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/403.php"] [unique_id "apK9itdHPfW2QFvhmL7-uAAAAHE"]
[Sat Aug 29 05:07:54.544203 2026] [security2:error] [pid 1028675:tid 1028878] [client 68.155.159.216:30682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-content/radio.php"] [unique_id "apK9itdHPfW2QFvhmL7-uQAAAEQ"]
[Sat Aug 29 05:07:54.550933 2026] [security2:error] [pid 1028675:tid 1028930] [client 20.104.104.62:37604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/x23.php"] [unique_id "apK9itdHPfW2QFvhmL7-ugAAAHg"]
[Sat Aug 29 05:07:54.556516 2026] [security2:error] [pid 1028675:tid 1028859] [client 68.155.159.216:24490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/cong.php"] [unique_id "apK9itdHPfW2QFvhmL7-uwAAADE"]
[Sat Aug 29 05:07:54.556564 2026] [security2:error] [pid 1034096:tid 1034288] [client 158.23.184.117:12615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/wp-content/plugins/alfa-rex.php"] [unique_id "apK9ii04twRPFuquKD2cLAAAAKo"]
[Sat Aug 29 05:07:54.564175 2026] [security2:error] [pid 1034096:tid 1034312] [client 20.63.81.20:55439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK9ii04twRPFuquKD2cLQAAAMI"]
[Sat Aug 29 05:07:54.567499 2026] [security2:error] [pid 1034096:tid 1034373] [client 158.23.147.79:17433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9ii04twRPFuquKD2cLgAAAP8"]
[Sat Aug 29 05:07:54.570472 2026] [security2:error] [pid 1034096:tid 1034315] [client 57.141.14.92:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/cart/"] [unique_id "apK9ii04twRPFuquKD2cLwAAAMU"]
[Sat Aug 29 05:07:54.572013 2026] [security2:error] [pid 1028675:tid 1028935] [client 20.104.68.135:24181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.samshock.com"] [uri "/wp-signup.php"] [unique_id "apK9itdHPfW2QFvhmL7-vAAAAH0"]
[Sat Aug 29 05:07:54.584467 2026] [security2:error] [pid 1034096:tid 1034261] [client 20.203.141.11:38393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/item.php"] [unique_id "apK9ii04twRPFuquKD2cMAAAAI8"]
[Sat Aug 29 05:07:54.606087 2026] [security2:error] [pid 1034096:tid 1034324] [client 40.83.93.50:16303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/blog.php"] [unique_id "apK9ii04twRPFuquKD2cMQAAAM4"]
[Sat Aug 29 05:07:54.606878 2026] [security2:error] [pid 1028675:tid 1028897] [client 158.158.54.35:14538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/av.php"] [unique_id "apK9itdHPfW2QFvhmL7-vwAAAFc"]
[Sat Aug 29 05:07:54.608186 2026] [security2:error] [pid 1034096:tid 1034339] [client 20.48.250.41:38897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/0x.php"] [unique_id "apK9ii04twRPFuquKD2cMwAAAN0"]
[Sat Aug 29 05:07:54.621370 2026] [security2:error] [pid 1034096:tid 1034277] [client 52.139.37.240:37146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/ws49.php"] [unique_id "apK9ii04twRPFuquKD2cNAAAAJ8"]
[Sat Aug 29 05:07:54.629799 2026] [security2:error] [pid 1028675:tid 1028840] [client 20.48.250.41:61796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/ccs.php"] [unique_id "apK9itdHPfW2QFvhmL7-wQAAAB4"]
[Sat Aug 29 05:07:54.667580 2026] [security2:error] [pid 1028675:tid 1028825] [client 20.104.104.62:40243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/mmk.php"] [unique_id "apK9itdHPfW2QFvhmL7-wgAAAA8"]
[Sat Aug 29 05:07:54.674161 2026] [security2:error] [pid 1028675:tid 1028835] [client 68.155.159.216:6093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-content/radio.php"] [unique_id "apK9itdHPfW2QFvhmL7-xAAAABk"]
[Sat Aug 29 05:07:54.676308 2026] [security2:error] [pid 1028675:tid 1028936] [client 52.139.37.240:56104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/rtx.php"] [unique_id "apK9itdHPfW2QFvhmL7-xQAAAH4"]
[Sat Aug 29 05:07:54.695913 2026] [security2:error] [pid 1028675:tid 1028881] [client 20.63.81.20:55514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/haxor.php"] [unique_id "apK9itdHPfW2QFvhmL7-xgAAAEc"]
[Sat Aug 29 05:07:54.696288 2026] [security2:error] [pid 1028675:tid 1028833] [client 20.104.104.62:37577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/ws66.php"] [unique_id "apK9itdHPfW2QFvhmL7-xwAAABc"]
[Sat Aug 29 05:07:54.723316 2026] [security2:error] [pid 1034096:tid 1034320] [client 20.240.128.207:31063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/admin.php"] [unique_id "apK9ii04twRPFuquKD2cOgAAAMo"]
[Sat Aug 29 05:07:54.727698 2026] [security2:error] [pid 1028675:tid 1028821] [client 20.104.104.62:27649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.johngibsondrawings.com"] [uri "/wp-content/uploads/system_core.php"] [unique_id "apK9itdHPfW2QFvhmL7-yQAAAAs"]
[Sat Aug 29 05:07:54.742811 2026] [security2:error] [pid 1028675:tid 1028922] [client 45.148.10.62:48836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ninjamover.com"] [uri "/config.php.bak"] [unique_id "apK9itdHPfW2QFvhmL7-ygAAAHA"]
[Sat Aug 29 05:07:54.750516 2026] [security2:error] [pid 1034096:tid 1034266] [client 68.155.159.216:16254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-admin/images/index.php"] [unique_id "apK9ii04twRPFuquKD2cOwAAAJQ"]
[Sat Aug 29 05:07:54.762869 2026] [security2:error] [pid 1034096:tid 1034279] [client 20.48.250.41:61759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/mar.php"] [unique_id "apK9ii04twRPFuquKD2cPAAAAKE"]
[Sat Aug 29 05:07:54.769063 2026] [security2:error] [pid 1034096:tid 1034263] [client 20.104.68.135:19171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.samshock.com"] [uri "/xmlrpc.php"] [unique_id "apK9ii04twRPFuquKD2cPQAAAJE"]
[Sat Aug 29 05:07:54.774870 2026] [security2:error] [pid 1034096:tid 1034282] [client 20.48.250.41:38911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/66.php"] [unique_id "apK9ii04twRPFuquKD2cPgAAAKQ"]
[Sat Aug 29 05:07:54.780339 2026] [security2:error] [pid 1034096:tid 1034337] [client 4.205.62.107:22480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/fm.php"] [unique_id "apK9ii04twRPFuquKD2cPwAAANs"]
[Sat Aug 29 05:07:54.782002 2026] [security2:error] [pid 1034096:tid 1034280] [client 158.23.147.79:25480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/log-mama/function.php"] [unique_id "apK9ii04twRPFuquKD2cQAAAAKI"]
[Sat Aug 29 05:07:54.810621 2026] [security2:error] [pid 1034096:tid 1034295] [client 93.123.109.228:42520] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flicklister.com"] [uri "/___proxy_subdomain_cpcontacts/app/.env"] [unique_id "apK9ii04twRPFuquKD2cQwAAALE"]
[Sat Aug 29 05:07:54.812334 2026] [security2:error] [pid 1034096:tid 1034340] [client 20.203.141.11:28007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/disagraeosc.php"] [unique_id "apK9ii04twRPFuquKD2cRAAAAN4"]
[Sat Aug 29 05:07:54.813685 2026] [security2:error] [pid 1034096:tid 1034368] [client 20.48.250.41:65152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/gk.php"] [unique_id "apK9ii04twRPFuquKD2cRQAAAPo"]
[Sat Aug 29 05:07:54.816310 2026] [security2:error] [pid 1028675:tid 1028875] [client 158.23.147.79:35781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK9itdHPfW2QFvhmL7-zAAAAEE"]
[Sat Aug 29 05:07:54.821014 2026] [security2:error] [pid 1028675:tid 1028900] [client 158.23.184.117:61389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/test.php"] [unique_id "apK9itdHPfW2QFvhmL7-zQAAAFo"]
[Sat Aug 29 05:07:54.823200 2026] [security2:error] [pid 1028675:tid 1028877] [client 4.205.62.107:51504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/privacy.php"] [unique_id "apK9itdHPfW2QFvhmL7-zwAAAEM"]
[Sat Aug 29 05:07:54.825439 2026] [security2:error] [pid 1034096:tid 1034303] [client 20.104.104.62:37612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/Cok.php"] [unique_id "apK9ii04twRPFuquKD2cSQAAALk"]
[Sat Aug 29 05:07:54.827376 2026] [security2:error] [pid 1034096:tid 1034264] [client 20.63.81.20:55431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/google.php"] [unique_id "apK9ii04twRPFuquKD2cSgAAAJI"]
[Sat Aug 29 05:07:54.828878 2026] [security2:error] [pid 1034096:tid 1034355] [client 20.63.219.114:17157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-content/core.php"] [unique_id "apK9ii04twRPFuquKD2cSwAAAO0"]
[Sat Aug 29 05:07:54.828899 2026] [security2:error] [pid 1028675:tid 1028858] [client 52.139.37.240:37123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/xxx.php"] [unique_id "apK9itdHPfW2QFvhmL7-0AAAADA"]
[Sat Aug 29 05:07:54.847986 2026] [security2:error] [pid 1028675:tid 1028812] [client 68.155.159.216:64403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apK9itdHPfW2QFvhmL7-0gAAAAI"]
[Sat Aug 29 05:07:54.867413 2026] [security2:error] [pid 1034096:tid 1034259] [client 52.139.37.240:16731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/update/da222.php"] [unique_id "apK9ii04twRPFuquKD2cTQAAAI0"]
[Sat Aug 29 05:07:54.881952 2026] [security2:error] [pid 1028675:tid 1028876] [client 68.155.159.216:33669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK9itdHPfW2QFvhmL7-0wAAAEI"]
[Sat Aug 29 05:07:54.893024 2026] [security2:error] [pid 1034096:tid 1034338] [client 45.148.10.60:54624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "villagebooksandbears.com"] [uri "/index.php"] [unique_id "apK9ii04twRPFuquKD2cTAAAANw"]
[Sat Aug 29 05:07:54.897088 2026] [security2:error] [pid 1028675:tid 1028815] [client 158.23.147.79:26570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/themes.php"] [unique_id "apK9itdHPfW2QFvhmL7-1QAAAAU"]
[Sat Aug 29 05:07:54.931992 2026] [security2:error] [pid 1034096:tid 1034265] [client 20.104.104.62:27664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.johngibsondrawings.com"] [uri "/wp-content/uploads/users.php"] [unique_id "apK9ii04twRPFuquKD2cUQAAAJM"]
[Sat Aug 29 05:07:54.932388 2026] [access_compat:error] [pid 1034096:tid 1034378] [client 67.20.76.220:59976] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:07:54.937079 2026] [security2:error] [pid 1034096:tid 1034254] [client 20.48.250.41:38862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/f35.php"] [unique_id "apK9ii04twRPFuquKD2cUgAAAIg"]
[Sat Aug 29 05:07:54.937194 2026] [security2:error] [pid 1034096:tid 1034287] [client 180.190.5.40:39711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.5.190.180.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK9ii04twRPFuquKD2cUwAAAKk"]
[Sat Aug 29 05:07:54.937331 2026] [security2:error] [pid 1034096:tid 1034287] [client 180.190.5.40:39711] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK9ii04twRPFuquKD2cUwAAAKk"]
[Sat Aug 29 05:07:54.941566 2026] [security2:error] [pid 1028675:tid 1028907] [client 17.166.237.213:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.jobindjibouti.com"] [uri "/robots.txt"] [unique_id "apK9itdHPfW2QFvhmL7-1gAAAGE"]
[Sat Aug 29 05:07:54.952876 2026] [security2:error] [pid 1028675:tid 1028931] [client 4.205.62.107:65479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/admin-ajax.php"] [unique_id "apK9itdHPfW2QFvhmL7-1wAAAHk"]
[Sat Aug 29 05:07:54.957727 2026] [security2:error] [pid 1034096:tid 1034273] [client 20.63.81.20:55434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "apK9ii04twRPFuquKD2cVQAAAJs"]
[Sat Aug 29 05:07:54.964377 2026] [security2:error] [pid 1034096:tid 1034307] [client 20.104.68.135:8962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.samshock.com"] [uri "/yas.php"] [unique_id "apK9ii04twRPFuquKD2cVwAAAL0"]
[Sat Aug 29 05:07:54.969449 2026] [security2:error] [pid 1028675:tid 1028824] [client 158.23.184.117:12634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/wp-includes/mani.php"] [unique_id "apK9itdHPfW2QFvhmL7-2AAAAA4"]
[Sat Aug 29 05:07:54.969835 2026] [security2:error] [pid 1028675:tid 1028849] [client 20.104.104.62:48006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/X7T6.php"] [unique_id "apK9itdHPfW2QFvhmL7-2QAAACc"]
[Sat Aug 29 05:07:54.984848 2026] [security2:error] [pid 1028675:tid 1028839] [client 40.83.93.50:8966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/post.php"] [unique_id "apK9itdHPfW2QFvhmL7-2wAAAB0"]
[Sat Aug 29 05:07:54.990728 2026] [security2:error] [pid 1034096:tid 1034251] [client 20.52.41.200:5256] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webmail.neufgroup.com"] [uri "/1.php"] [unique_id "apK9ii04twRPFuquKD2cWgAAAIU"]
[Sat Aug 29 05:07:54.990803 2026] [security2:error] [pid 1034096:tid 1034251] [client 20.52.41.200:5256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/1.php"] [unique_id "apK9ii04twRPFuquKD2cWgAAAIU"]
[Sat Aug 29 05:07:54.998585 2026] [security2:error] [pid 1034096:tid 1034323] [client 20.48.250.41:65315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/logs1.php"] [unique_id "apK9ii04twRPFuquKD2cWwAAAM0"]
[Sat Aug 29 05:07:55.005275 2026] [security2:error] [pid 1034096:tid 1034375] [client 20.48.250.41:58610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/ccu.php"] [unique_id "apK9iy04twRPFuquKD2cXAAAAQE"]
[Sat Aug 29 05:07:55.016434 2026] [security2:error] [pid 1034096:tid 1034283] [client 20.104.104.62:40247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/EvilTwin.php"] [unique_id "apK9iy04twRPFuquKD2cXQAAAKU"]
[Sat Aug 29 05:07:55.020766 2026] [security2:error] [pid 1034096:tid 1034366] [client 4.205.62.107:21597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/phpsysinfo.php"] [unique_id "apK9iy04twRPFuquKD2cXgAAAPg"]
[Sat Aug 29 05:07:55.023228 2026] [security2:error] [pid 1028675:tid 1028884] [client 52.139.37.240:37155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/0x.php"] [unique_id "apK9i9dHPfW2QFvhmL7-3gAAAEo"]
[Sat Aug 29 05:07:55.037739 2026] [security2:error] [pid 1034096:tid 1034252] [client 158.23.147.79:6028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-content/uploads/index.php"] [unique_id "apK9iy04twRPFuquKD2cXwAAAIY"]
[Sat Aug 29 05:07:55.039426 2026] [security2:error] [pid 1034096:tid 1034290] [client 158.23.147.79:61589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-includes/js/index.php"] [unique_id "apK9iy04twRPFuquKD2cYAAAAKw"]
[Sat Aug 29 05:07:55.051493 2026] [security2:error] [pid 1028675:tid 1028861] [client 158.158.54.35:22027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/file.php"] [unique_id "apK9i9dHPfW2QFvhmL7-3wAAADM"]
[Sat Aug 29 05:07:55.056267 2026] [security2:error] [pid 1028675:tid 1028816] [client 68.155.159.216:33704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK9i9dHPfW2QFvhmL7-4AAAAAY"]
[Sat Aug 29 05:07:55.058450 2026] [security2:error] [pid 1028675:tid 1028847] [client 20.203.141.11:33670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/t.php"] [unique_id "apK9i9dHPfW2QFvhmL7-4QAAACU"]
[Sat Aug 29 05:07:55.058505 2026] [security2:error] [pid 1028675:tid 1028862] [client 68.155.159.216:18280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-admin/admin.php"] [unique_id "apK9i9dHPfW2QFvhmL7-4gAAADQ"]
[Sat Aug 29 05:07:55.058695 2026] [security2:error] [pid 1034096:tid 1034334] [client 158.23.147.79:32659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK9iy04twRPFuquKD2cYQAAANg"]
[Sat Aug 29 05:07:55.059695 2026] [security2:error] [pid 1028675:tid 1028819] [client 68.155.159.216:65142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-content/cong.php"] [unique_id "apK9i9dHPfW2QFvhmL7-4wAAAAk"]
[Sat Aug 29 05:07:55.064231 2026] [security2:error] [pid 1034096:tid 1034310] [client 68.155.159.216:51275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/packed.php"] [unique_id "apK9iy04twRPFuquKD2cYgAAAMA"]
[Sat Aug 29 05:07:55.072202 2026] [security2:error] [pid 1028675:tid 1028841] [client 195.178.110.247:7378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.linear-active.com"] [uri "/index.php"] [unique_id "apK9i9dHPfW2QFvhmL7-5AAAAB8"]
[Sat Aug 29 05:07:55.084418 2026] [security2:error] [pid 1034096:tid 1034276] [client 20.48.250.41:38869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/wen.php"] [unique_id "apK9iy04twRPFuquKD2cZAAAAJ4"]
[Sat Aug 29 05:07:55.089491 2026] [security2:error] [pid 1034096:tid 1034269] [client 20.63.81.20:55440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/robots.php"] [unique_id "apK9iy04twRPFuquKD2cZQAAAJc"]
[Sat Aug 29 05:07:55.107497 2026] [security2:error] [pid 1034096:tid 1034267] [client 20.104.104.62:48038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/see.php"] [unique_id "apK9iy04twRPFuquKD2cZwAAAJU"]
[Sat Aug 29 05:07:55.111942 2026] [security2:error] [pid 1028675:tid 1028894] [client 40.83.93.50:8490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/bypass.php"] [unique_id "apK9i9dHPfW2QFvhmL7-5gAAAFQ"]
[Sat Aug 29 05:07:55.122080 2026] [security2:error] [pid 1028675:tid 1028856] [client 158.23.184.117:61398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/wp-includes/Test.php"] [unique_id "apK9i9dHPfW2QFvhmL7-5wAAAC4"]
[Sat Aug 29 05:07:55.124796 2026] [autoindex:error] [pid 1034096:tid 1034357] [client 52.139.37.240:56109] AH01276: Cannot serve directory /home4/fairfax6/public_html/wp-admin/maint/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:07:55.135986 2026] [security2:error] [pid 1034096:tid 1034351] [client 93.123.109.228:42324] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/server/.env"] [unique_id "apK9iy04twRPFuquKD2cagAAAOk"]
[Sat Aug 29 05:07:55.154336 2026] [security2:error] [pid 1034096:tid 1034309] [client 20.104.104.62:27669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.johngibsondrawings.com"] [uri "/wp-content/wp-conflg.php"] [unique_id "apK9iy04twRPFuquKD2cbQAAAL8"]
[Sat Aug 29 05:07:55.165348 2026] [security2:error] [pid 1028675:tid 1028886] [client 68.155.159.216:38673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK9i9dHPfW2QFvhmL7-6gAAAEw"]
[Sat Aug 29 05:07:55.166663 2026] [security2:error] [pid 1028675:tid 1028840] [client 93.123.109.228:42566] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/server/backend/.env"] [unique_id "apK9i9dHPfW2QFvhmL7-6QAAAB4"]
[Sat Aug 29 05:07:55.170505 2026] [security2:error] [pid 1034096:tid 1034297] [client 17.166.237.213:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.jobindjibouti.com"] [uri "/hotellerie/"] [unique_id "apK9iy04twRPFuquKD2cbgAAALM"]
[Sat Aug 29 05:07:55.183132 2026] [security2:error] [pid 1034096:tid 1034327] [client 20.48.250.41:61738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/ak.php"] [unique_id "apK9iy04twRPFuquKD2cbwAAANE"]
[Sat Aug 29 05:07:55.186802 2026] [security2:error] [pid 1034096:tid 1034339] [client 52.139.37.240:56109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/wp-admin/min.php"] [unique_id "apK9iy04twRPFuquKD2ccAAAAN0"]
[Sat Aug 29 05:07:55.187537 2026] [security2:error] [pid 1028675:tid 1028904] [client 20.63.219.114:16041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-content/db-status.php"] [unique_id "apK9i9dHPfW2QFvhmL7-7AAAAF4"]
[Sat Aug 29 05:07:55.211885 2026] [security2:error] [pid 1034096:tid 1034325] [client 20.48.250.41:65153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/inege.php"] [unique_id "apK9iy04twRPFuquKD2ccgAAAM8"]
[Sat Aug 29 05:07:55.218064 2026] [security2:error] [pid 1034096:tid 1034370] [client 52.139.37.240:37159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/CDX1.php"] [unique_id "apK9iy04twRPFuquKD2ccwAAAPw"]
[Sat Aug 29 05:07:55.222195 2026] [security2:error] [pid 1028675:tid 1028929] [client 20.63.81.20:55523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/wp-content/plugins/ccx/index.php"] [unique_id "apK9i9dHPfW2QFvhmL7-7gAAAHc"]
[Sat Aug 29 05:07:55.222641 2026] [security2:error] [pid 1034096:tid 1034305] [client 20.240.128.207:7370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/php8.php"] [unique_id "apK9iy04twRPFuquKD2cdAAAALs"]
[Sat Aug 29 05:07:55.235244 2026] [security2:error] [pid 1028675:tid 1028923] [client 195.178.110.247:31394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.linear-active.com"] [uri "/index.php"] [unique_id "apK9i9dHPfW2QFvhmL7-8AAAAHE"]
[Sat Aug 29 05:07:55.244226 2026] [security2:error] [pid 1034096:tid 1034344] [client 20.48.250.41:38888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/inc.php"] [unique_id "apK9iy04twRPFuquKD2cdQAAAOI"]
[Sat Aug 29 05:07:55.251448 2026] [security2:error] [pid 1028675:tid 1028833] [client 20.104.104.62:37530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/horeg.php"] [unique_id "apK9i9dHPfW2QFvhmL7-8gAAABc"]
[Sat Aug 29 05:07:55.252509 2026] [security2:error] [pid 1028675:tid 1028872] [client 20.197.61.180:14160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/post.php"] [unique_id "apK9i9dHPfW2QFvhmL7-8wAAAD4"]
[Sat Aug 29 05:07:55.268072 2026] [security2:error] [pid 1028675:tid 1028928] [client 158.23.184.117:12663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/wp-includes/pomo.php"] [unique_id "apK9i9dHPfW2QFvhmL7-9AAAAHY"]
[Sat Aug 29 05:07:55.276544 2026] [security2:error] [pid 1034096:tid 1034288] [client 20.203.141.11:7393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-logs.php"] [unique_id "apK9iy04twRPFuquKD2cdgAAAKo"]
[Sat Aug 29 05:07:55.295436 2026] [security2:error] [pid 1034096:tid 1034367] [client 93.123.109.228:42324] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/server/api/.env"] [unique_id "apK9iy04twRPFuquKD2cdwAAAPk"]
[Sat Aug 29 05:07:55.326689 2026] [security2:error] [pid 1034096:tid 1034279] [client 158.23.147.79:48157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/ans.php"] [unique_id "apK9iy04twRPFuquKD2ceAAAAKE"]
[Sat Aug 29 05:07:55.326752 2026] [security2:error] [pid 1034096:tid 1034260] [client 20.48.250.41:61763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/lib.php"] [unique_id "apK9iy04twRPFuquKD2ceQAAAI4"]
[Sat Aug 29 05:07:55.352341 2026] [security2:error] [pid 1028675:tid 1028875] [client 20.63.81.20:55454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/wp-admin/css/colors/maro.php"] [unique_id "apK9i9dHPfW2QFvhmL7-9wAAAEE"]
[Sat Aug 29 05:07:55.352561 2026] [security2:error] [pid 1028675:tid 1028832] [client 20.104.104.62:27680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.johngibsondrawings.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK9i9dHPfW2QFvhmL7--AAAABY"]
[Sat Aug 29 05:07:55.355123 2026] [cgid:error] [pid 1034096:tid 1034277] [client 45.148.10.62:48838] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/ninjamov/public_html/404.shtml
[Sat Aug 29 05:07:55.383157 2026] [security2:error] [pid 1034096:tid 1034319] [client 52.139.37.240:16749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/wp-admin/wp-fileesx-449.php"] [unique_id "apK9iy04twRPFuquKD2cfQAAAMk"]
[Sat Aug 29 05:07:55.395418 2026] [security2:error] [pid 1034096:tid 1034300] [client 20.48.250.41:38785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/6bcwiqwj.php"] [unique_id "apK9iy04twRPFuquKD2cfwAAALY"]
[Sat Aug 29 05:07:55.408736 2026] [security2:error] [pid 1034096:tid 1034363] [client 20.104.104.62:48045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/basic.php"] [unique_id "apK9iy04twRPFuquKD2cgAAAAPU"]
[Sat Aug 29 05:07:55.415379 2026] [security2:error] [pid 1034096:tid 1034321] [client 4.205.62.107:53303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/gk.php"] [unique_id "apK9iy04twRPFuquKD2cggAAAMs"]
[Sat Aug 29 05:07:55.415887 2026] [security2:error] [pid 1034096:tid 1034278] [client 52.139.37.240:37749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/akcc.php"] [unique_id "apK9iy04twRPFuquKD2cgwAAAKA"]
[Sat Aug 29 05:07:55.438514 2026] [security2:error] [pid 1028675:tid 1028855] [client 20.48.250.41:62080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/wp-link10.php"] [unique_id "apK9i9dHPfW2QFvhmL7-_AAAAC0"]
[Sat Aug 29 05:07:55.478293 2026] [security2:error] [pid 1028675:tid 1028863] [client 20.63.81.20:55490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/wp-admin/css/colors/coffee/marijuana.php"] [unique_id "apK9i9dHPfW2QFvhmL7-_QAAADU"]
[Sat Aug 29 05:07:55.489904 2026] [security2:error] [pid 1028675:tid 1028848] [client 20.104.104.62:20838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/da111.php"] [unique_id "apK9i9dHPfW2QFvhmL7-_gAAACY"]
[Sat Aug 29 05:07:55.500309 2026] [security2:error] [pid 1034096:tid 1034280] [client 158.158.54.35:12094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK9iy04twRPFuquKD2chwAAAKI"]
[Sat Aug 29 05:07:55.500730 2026] [security2:error] [pid 1034096:tid 1034282] [client 40.83.93.50:8415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/csv.php"] [unique_id "apK9iy04twRPFuquKD2ciAAAAKQ"]
[Sat Aug 29 05:07:55.508205 2026] [security2:error] [pid 1034096:tid 1034256] [client 20.48.250.41:61817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/wp-style.php"] [unique_id "apK9iy04twRPFuquKD2ciQAAAIo"]
[Sat Aug 29 05:07:55.517676 2026] [cgid:error] [pid 1034096:tid 1034293] [client 45.148.10.62:48838] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/ninjamov/public_html/404.shtml
[Sat Aug 29 05:07:55.521414 2026] [security2:error] [pid 1034096:tid 1034328] [client 158.23.184.117:12613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/wp-admin/link-add.php"] [unique_id "apK9iy04twRPFuquKD2cjAAAANI"]
[Sat Aug 29 05:07:55.527348 2026] [security2:error] [pid 1034096:tid 1034340] [client 20.203.141.11:27675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/i.php"] [unique_id "apK9iy04twRPFuquKD2cjgAAAN4"]
[Sat Aug 29 05:07:55.531805 2026] [security2:error] [pid 1034096:tid 1034307] [client 20.48.250.41:38877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/easy.php"] [unique_id "apK9iy04twRPFuquKD2cjwAAAL0"]
[Sat Aug 29 05:07:55.541124 2026] [security2:error] [pid 1034096:tid 1034259] [client 20.63.219.114:7530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-content/disagrsxr.php"] [unique_id "apK9iy04twRPFuquKD2ckQAAAI0"]
[Sat Aug 29 05:07:55.542627 2026] [security2:error] [pid 1028675:tid 1028892] [client 20.104.104.62:37578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/monso.php"] [unique_id "apK9i9dHPfW2QFvhmL7_AAAAAFI"]
[Sat Aug 29 05:07:55.549977 2026] [security2:error] [pid 1034096:tid 1034341] [client 4.205.62.107:53412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/greem_res.php"] [unique_id "apK9iy04twRPFuquKD2ckwAAAN8"]
[Sat Aug 29 05:07:55.552925 2026] [security2:error] [pid 1034096:tid 1034281] [client 158.23.147.79:50111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/admin.php"] [unique_id "apK9iy04twRPFuquKD2clAAAAKM"]
[Sat Aug 29 05:07:55.580433 2026] [security2:error] [pid 1028675:tid 1028880] [client 52.139.37.240:56082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/wp-content/themes/min.php"] [unique_id "apK9i9dHPfW2QFvhmL7_AgAAAEY"]
[Sat Aug 29 05:07:55.600077 2026] [security2:error] [pid 1028675:tid 1028911] [client 40.83.93.50:8997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/extractable-loader-head.php"] [unique_id "apK9i9dHPfW2QFvhmL7_AwAAAGU"]
[Sat Aug 29 05:07:55.605693 2026] [security2:error] [pid 1034096:tid 1034359] [client 20.52.41.200:5335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/s.php"] [unique_id "apK9iy04twRPFuquKD2clgAAAPE"]
[Sat Aug 29 05:07:55.608409 2026] [security2:error] [pid 1034096:tid 1034299] [client 20.63.81.20:55526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/wp-admin/css/colors/coffee/mari.php"] [unique_id "apK9iy04twRPFuquKD2clwAAALU"]
[Sat Aug 29 05:07:55.614281 2026] [security2:error] [pid 1034096:tid 1034343] [client 52.139.37.240:37720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK9iy04twRPFuquKD2cmAAAAOE"]
[Sat Aug 29 05:07:55.619859 2026] [security2:error] [pid 1034096:tid 1034283] [client 20.104.49.130:63585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/kerang.php"] [unique_id "apK9iy04twRPFuquKD2cmQAAAKU"]
[Sat Aug 29 05:07:55.623025 2026] [security2:error] [pid 1028675:tid 1028823] [client 20.104.104.62:27662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.johngibsondrawings.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK9i9dHPfW2QFvhmL7_BAAAAA0"]
[Sat Aug 29 05:07:55.629507 2026] [security2:error] [pid 1034096:tid 1034304] [client 20.48.250.41:62084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/ww.php"] [unique_id "apK9iy04twRPFuquKD2cmgAAALo"]
[Sat Aug 29 05:07:55.657537 2026] [security2:error] [pid 1034096:tid 1034322] [client 68.155.159.216:24559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-includes/js/index.php"] [unique_id "apK9iy04twRPFuquKD2cngAAAMw"]
[Sat Aug 29 05:07:55.666920 2026] [security2:error] [pid 1034096:tid 1034375] [client 158.23.184.117:61424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/wp-includes/Text.php"] [unique_id "apK9iy04twRPFuquKD2cnwAAAQE"]
[Sat Aug 29 05:07:55.671344 2026] [security2:error] [pid 1034096:tid 1034192] [remote 103.164.173.46:58678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.173.164.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sednacomics.com"] [uri "/wp-login.php"] [unique_id "apK9iy04twRPFuquKD2cnAAA2kY"]
[Sat Aug 29 05:07:55.677350 2026] [security2:error] [pid 1034096:tid 1034347] [client 20.104.104.62:48025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/rce.php"] [unique_id "apK9iy04twRPFuquKD2coAAAAOU"]
[Sat Aug 29 05:07:55.680869 2026] [security2:error] [pid 1028675:tid 1028857] [client 158.23.147.79:17454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK9i9dHPfW2QFvhmL7_BgAAAC8"]
[Sat Aug 29 05:07:55.692927 2026] [cgid:error] [pid 1034096:tid 1034275] [client 45.148.10.62:48838] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/ninjamov/public_html/404.shtml
[Sat Aug 29 05:07:55.700386 2026] [security2:error] [pid 1028675:tid 1028926] [client 20.48.250.41:61720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/browse.php"] [unique_id "apK9i9dHPfW2QFvhmL7_BwAAAHQ"]
[Sat Aug 29 05:07:55.701453 2026] [security2:error] [pid 1034096:tid 1034348] [client 103.240.76.112:42885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK9iy04twRPFuquKD2cogAAAOY"]
[Sat Aug 29 05:07:55.701536 2026] [security2:error] [pid 1034096:tid 1034348] [client 103.240.76.112:42885] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK9iy04twRPFuquKD2cogAAAOY"]
[Sat Aug 29 05:07:55.729364 2026] [security2:error] [pid 1028675:tid 1028903] [client 20.48.250.41:38857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/fresh3.php"] [unique_id "apK9i9dHPfW2QFvhmL7_CgAAAF0"]
[Sat Aug 29 05:07:55.736581 2026] [security2:error] [pid 1034096:tid 1034270] [client 20.203.141.11:28000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-admin/css/about.php"] [unique_id "apK9iy04twRPFuquKD2cpQAAAJg"]
[Sat Aug 29 05:07:55.745859 2026] [security2:error] [pid 1034096:tid 1034312] [client 20.48.250.41:19511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9iy04twRPFuquKD2cpwAAAMI"]
[Sat Aug 29 05:07:55.751821 2026] [security2:error] [pid 1034096:tid 1034351] [client 20.63.81.20:55513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/wp-includes/images/crystal/option.php"] [unique_id "apK9iy04twRPFuquKD2cqAAAAOk"]
[Sat Aug 29 05:07:55.771127 2026] [security2:error] [pid 1034096:tid 1034332] [client 20.48.250.41:49432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/w1px.php"] [unique_id "apK9iy04twRPFuquKD2cqgAAANY"]
[Sat Aug 29 05:07:55.790626 2026] [security2:error] [pid 1028675:tid 1028847] [client 68.155.159.216:6019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-admin/dropdown.php"] [unique_id "apK9i9dHPfW2QFvhmL7_DAAAACU"]
[Sat Aug 29 05:07:55.791261 2026] [security2:error] [pid 1034096:tid 1034324] [client 68.155.159.216:52757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-content/x/index.php"] [unique_id "apK9iy04twRPFuquKD2cqwAAAM4"]
[Sat Aug 29 05:07:55.791472 2026] [security2:error] [pid 1034096:tid 1034362] [client 52.139.37.240:56084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/wp-content/themes/x/bypass.php"] [unique_id "apK9iy04twRPFuquKD2crAAAAPQ"]
[Sat Aug 29 05:07:55.806255 2026] [security2:error] [pid 1028675:tid 1028861] [client 52.139.37.240:37165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/s.php"] [unique_id "apK9i9dHPfW2QFvhmL7_DQAAADM"]
[Sat Aug 29 05:07:55.808604 2026] [security2:error] [pid 1034096:tid 1034327] [client 20.104.104.62:37610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/exec.php"] [unique_id "apK9iy04twRPFuquKD2crQAAANE"]
[Sat Aug 29 05:07:55.810487 2026] [security2:error] [pid 1034096:tid 1034286] [client 158.23.184.117:12661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/wp-trackback.php"] [unique_id "apK9iy04twRPFuquKD2crgAAAKg"]
[Sat Aug 29 05:07:55.834805 2026] [security2:error] [pid 1034096:tid 1034309] [client 20.104.104.62:27684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.johngibsondrawings.com"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "apK9iy04twRPFuquKD2csQAAAL8"]
[Sat Aug 29 05:07:55.841188 2026] [security2:error] [pid 1028675:tid 1028930] [client 20.48.250.41:61800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/zoo.php"] [unique_id "apK9i9dHPfW2QFvhmL7_DgAAAHg"]
[Sat Aug 29 05:07:55.863328 2026] [security2:error] [pid 1034096:tid 1034346] [client 45.148.10.62:48838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ninjamover.com"] [uri "/phpinfo.php"] [unique_id "apK9iy04twRPFuquKD2csgAAAOQ"]
[Sat Aug 29 05:07:55.870917 2026] [security2:error] [pid 1034096:tid 1034274] [client 20.151.200.44:63994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/see.php"] [unique_id "apK9iy04twRPFuquKD2cswAAAJw"]
[Sat Aug 29 05:07:55.882576 2026] [security2:error] [pid 1034096:tid 1034288] [client 20.63.81.20:55502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/wp-includes/pomo/xxx.php"] [unique_id "apK9iy04twRPFuquKD2ctAAAAKo"]
[Sat Aug 29 05:07:55.889944 2026] [security2:error] [pid 1034096:tid 1034292] [client 158.23.147.79:25349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/bk/index.php"] [unique_id "apK9iy04twRPFuquKD2ctgAAAK4"]
[Sat Aug 29 05:07:55.894585 2026] [security2:error] [pid 1034096:tid 1034285] [client 20.63.219.114:14668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-content/f35.php"] [unique_id "apK9iy04twRPFuquKD2ctwAAAKc"]
[Sat Aug 29 05:07:55.896920 2026] [security2:error] [pid 1034096:tid 1034329] [client 20.48.250.41:19471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9iy04twRPFuquKD2cuAAAANM"]
[Sat Aug 29 05:07:55.899199 2026] [security2:error] [pid 1034096:tid 1034266] [client 20.48.250.41:38910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/bgymj.php"] [unique_id "apK9iy04twRPFuquKD2cuQAAAJQ"]
[Sat Aug 29 05:07:55.919603 2026] [security2:error] [pid 1028675:tid 1028840] [client 158.23.147.79:35808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-includes/index.php"] [unique_id "apK9i9dHPfW2QFvhmL7_EAAAAB4"]
[Sat Aug 29 05:07:55.937497 2026] [security2:error] [pid 1034096:tid 1034315] [client 158.158.54.35:28123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/gmo.php"] [unique_id "apK9iy04twRPFuquKD2cuwAAAMU"]
[Sat Aug 29 05:07:55.940764 2026] [security2:error] [pid 1028675:tid 1028835] [client 20.104.104.62:37526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/dbc.php"] [unique_id "apK9i9dHPfW2QFvhmL7_EwAAABk"]
[Sat Aug 29 05:07:55.941122 2026] [security2:error] [pid 1028675:tid 1028881] [client 20.240.128.207:31054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/install.php"] [unique_id "apK9i9dHPfW2QFvhmL7_FAAAAEc"]
[Sat Aug 29 05:07:55.944229 2026] [security2:error] [pid 1034096:tid 1034360] [client 93.123.109.228:42324] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/service/.env"] [unique_id "apK9iy04twRPFuquKD2cvAAAAPI"]
[Sat Aug 29 05:07:55.956217 2026] [security2:error] [pid 1028675:tid 1028821] [client 4.205.62.107:21857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/tinyfilemanager.php"] [unique_id "apK9i9dHPfW2QFvhmL7_FQAAAAs"]
[Sat Aug 29 05:07:55.960246 2026] [security2:error] [pid 1034096:tid 1034350] [client 20.104.49.130:43784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/kgoc6awap3napxxxdCdefault.php"] [unique_id "apK9iy04twRPFuquKD2cvQAAAOg"]
[Sat Aug 29 05:07:55.965434 2026] [security2:error] [pid 1028675:tid 1028851] [client 158.23.184.117:12619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/wp-admin/maint.php"] [unique_id "apK9i9dHPfW2QFvhmL7_FgAAACk"]
[Sat Aug 29 05:07:55.973507 2026] [security2:error] [pid 1028675:tid 1028898] [client 20.48.250.41:65366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/to.php"] [unique_id "apK9i9dHPfW2QFvhmL7_FwAAAFg"]
[Sat Aug 29 05:07:55.973635 2026] [security2:error] [pid 1028675:tid 1028819] [client 40.83.93.50:8419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/fox.php"] [unique_id "apK9i9dHPfW2QFvhmL7_GAAAAAk"]
[Sat Aug 29 05:07:55.978983 2026] [security2:error] [pid 1034096:tid 1034338] [client 4.205.62.107:58368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/zaza.php"] [unique_id "apK9iy04twRPFuquKD2cvwAAANw"]
[Sat Aug 29 05:07:55.981101 2026] [security2:error] [pid 1034096:tid 1034377] [client 20.48.250.41:61798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/elp.php"] [unique_id "apK9iy04twRPFuquKD2cwAAAAQM"]
[Sat Aug 29 05:07:56.007177 2026] [security2:error] [pid 1034096:tid 1034277] [client 52.139.37.240:37137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/sagax.php"] [unique_id "apK9jC04twRPFuquKD2cwgAAAJ8"]
[Sat Aug 29 05:07:56.009099 2026] [security2:error] [pid 1034096:tid 1034287] [client 91.92.47.191:59060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.giantgardening.com"] [uri "/wp-config.php"] [unique_id "apK9jC04twRPFuquKD2cwwAAAKk"]
[Sat Aug 29 05:07:56.012153 2026] [security2:error] [pid 1034096:tid 1034358] [client 20.203.141.11:22279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/deepseek_d.php"] [unique_id "apK9jC04twRPFuquKD2cxAAAAPA"]
[Sat Aug 29 05:07:56.018569 2026] [security2:error] [pid 1034096:tid 1034280] [client 158.23.147.79:26602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-mail.php"] [unique_id "apK9jC04twRPFuquKD2cxgAAAKI"]
[Sat Aug 29 05:07:56.022407 2026] [security2:error] [pid 1034096:tid 1034256] [client 20.63.81.20:55520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/650.php"] [unique_id "apK9jC04twRPFuquKD2cxwAAAIo"]
[Sat Aug 29 05:07:56.026503 2026] [security2:error] [pid 1034096:tid 1034353] [client 20.197.61.180:11017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/flower.php"] [unique_id "apK9jC04twRPFuquKD2cyAAAAOs"]
[Sat Aug 29 05:07:56.032299 2026] [security2:error] [pid 1028675:tid 1028922] [client 20.104.104.62:27651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.johngibsondrawings.com"] [uri "/wp-includes/css/index.php"] [unique_id "apK9jNdHPfW2QFvhmL7_GgAAAHA"]
[Sat Aug 29 05:07:56.033417 2026] [security2:error] [pid 1028675:tid 1028812] [client 20.48.250.41:38883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/ws69.php"] [unique_id "apK9jNdHPfW2QFvhmL7_GwAAAAI"]
[Sat Aug 29 05:07:56.033758 2026] [autoindex:error] [pid 1034096:tid 1034254] [client 52.139.37.240:0] AH01276: Cannot serve directory /home4/fairfax6/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:07:56.043631 2026] [security2:error] [pid 1034096:tid 1034340] [client 20.104.104.62:40205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/DA.php"] [unique_id "apK9jC04twRPFuquKD2cyQAAAN4"]
[Sat Aug 29 05:07:56.046900 2026] [security2:error] [pid 1034096:tid 1034263] [client 20.52.41.200:5374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/test1.php"] [unique_id "apK9jC04twRPFuquKD2cygAAAJE"]
[Sat Aug 29 05:07:56.047012 2026] [security2:error] [pid 1034096:tid 1034341] [client 68.155.159.216:1974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK9jC04twRPFuquKD2cywAAAN8"]
[Sat Aug 29 05:07:56.047462 2026] [security2:error] [pid 1034096:tid 1034378] [client 20.104.49.130:43608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/worksec.php"] [unique_id "apK9jC04twRPFuquKD2czAAAAQQ"]
[Sat Aug 29 05:07:56.063697 2026] [security2:error] [pid 1028675:tid 1028825] [client 20.48.250.41:19516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/ff1.php"] [unique_id "apK9jNdHPfW2QFvhmL7_HQAAAA8"]
[Sat Aug 29 05:07:56.070333 2026] [security2:error] [pid 1034096:tid 1034251] [client 93.123.109.228:42252] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/services/.env"] [unique_id "apK9jC04twRPFuquKD2czQAAAIU"]
[Sat Aug 29 05:07:56.073177 2026] [security2:error] [pid 1034096:tid 1034299] [client 20.104.104.62:37630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/wp-wlx.php"] [unique_id "apK9jC04twRPFuquKD2czgAAALU"]
[Sat Aug 29 05:07:56.082526 2026] [security2:error] [pid 1034096:tid 1034337] [client 40.83.93.50:8399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/defaults.php"] [unique_id "apK9jC04twRPFuquKD2c0AAAANs"]
[Sat Aug 29 05:07:56.084638 2026] [security2:error] [pid 1034096:tid 1034361] [client 34.81.157.26:52478] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/api/config"] [unique_id "apK9jC04twRPFuquKD2c0gAAAPM"]
[Sat Aug 29 05:07:56.085143 2026] [security2:error] [pid 1034096:tid 1034303] [client 34.81.157.26:52468] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/cgi-sys/404.html"] [unique_id "apK9jC04twRPFuquKD2czwAAALk"]
[Sat Aug 29 05:07:56.095609 2026] [security2:error] [pid 1034096:tid 1034316] [client 34.81.157.26:52550] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/cgi-sys/404.html"] [unique_id "apK9jC04twRPFuquKD2c3gAAAMY"]
[Sat Aug 29 05:07:56.098830 2026] [security2:error] [pid 1028675:tid 1028876] [client 52.139.37.240:16479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK9jNdHPfW2QFvhmL7_KgAAAEI"]
[Sat Aug 29 05:07:56.100955 2026] [security2:error] [pid 1034096:tid 1034331] [client 34.81.157.26:52648] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/.ssh/id_rsa"] [unique_id "apK9jC04twRPFuquKD2c5AAAANU"]
[Sat Aug 29 05:07:56.101053 2026] [security2:error] [pid 1034096:tid 1034331] [client 34.81.157.26:52648] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/.ssh/id_rsa"] [unique_id "apK9jC04twRPFuquKD2c5AAAANU"]
[Sat Aug 29 05:07:56.107329 2026] [security2:error] [pid 1034096:tid 1034298] [client 34.81.157.26:52678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/.ssh/id_dsa"] [unique_id "apK9jC04twRPFuquKD2c5QAAALQ"]
[Sat Aug 29 05:07:56.112194 2026] [security2:error] [pid 1028675:tid 1028866] [client 158.23.184.117:12667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/wp-includes/num.php"] [unique_id "apK9jNdHPfW2QFvhmL7_MAAAADg"]
[Sat Aug 29 05:07:56.116239 2026] [core:error] [pid 1034096:tid 1034290] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:56.116256 2026] [core:error] [pid 1034096:tid 1034290] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:56.116322 2026] [core:error] [pid 1034096:tid 1034322] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:56.116340 2026] [core:error] [pid 1034096:tid 1034322] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:56.116866 2026] [core:error] [pid 1034096:tid 1034334] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:56.116877 2026] [core:error] [pid 1034096:tid 1034334] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:56.118898 2026] [core:error] [pid 1034096:tid 1034272] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:56.118910 2026] [core:error] [pid 1034096:tid 1034272] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:56.119236 2026] [core:error] [pid 1034096:tid 1034347] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:56.119247 2026] [core:error] [pid 1034096:tid 1034347] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:56.119874 2026] [core:error] [pid 1028675:tid 1028900] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:56.119887 2026] [core:error] [pid 1028675:tid 1028900] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:56.119982 2026] [security2:error] [pid 1028675:tid 1028900] [client 34.81.157.26:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/index.php"] [unique_id "apK9jNdHPfW2QFvhmL7_MQAAAFo"]
[Sat Aug 29 05:07:56.122786 2026] [security2:error] [pid 1034096:tid 1034321] [client 34.81.157.26:52516] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/api/env"] [unique_id "apK9jC04twRPFuquKD2c2gAAAMs"]
[Sat Aug 29 05:07:56.124509 2026] [security2:error] [pid 1034096:tid 1034276] [client 20.48.250.41:61708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/666.php"] [unique_id "apK9jC04twRPFuquKD2c7wAAAJ4"]
[Sat Aug 29 05:07:56.127098 2026] [security2:error] [pid 1028675:tid 1028848] [client 4.205.62.107:65448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/ms.php"] [unique_id "apK9jNdHPfW2QFvhmL7_MwAAACY"]
[Sat Aug 29 05:07:56.134301 2026] [core:error] [pid 1034096:tid 1034333] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:56.134320 2026] [core:error] [pid 1034096:tid 1034333] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:56.135630 2026] [core:error] [pid 1028675:tid 1028927] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:56.135648 2026] [core:error] [pid 1028675:tid 1028927] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:56.135770 2026] [security2:error] [pid 1028675:tid 1028927] [client 34.81.157.26:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/index.php"] [unique_id "apK9jNdHPfW2QFvhmL7_NAAAAHU"]
[Sat Aug 29 05:07:56.136603 2026] [security2:error] [pid 1028675:tid 1028892] [client 158.23.147.79:6119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK9jNdHPfW2QFvhmL7_NgAAAFI"]
[Sat Aug 29 05:07:56.137623 2026] [core:error] [pid 1028675:tid 1028931] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:56.137635 2026] [core:error] [pid 1028675:tid 1028931] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:07:56.138214 2026] [security2:error] [pid 1028675:tid 1028837] [client 34.81.157.26:52658] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/.ssh/id_ed25519"] [unique_id "apK9jNdHPfW2QFvhmL7_LgAAABs"]
[Sat Aug 29 05:07:56.153143 2026] [security2:error] [pid 1034096:tid 1034267] [client 20.63.81.20:55494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/nakrip.php"] [unique_id "apK9jC04twRPFuquKD2c8gAAAJU"]
[Sat Aug 29 05:07:56.153417 2026] [security2:error] [pid 1034096:tid 1034318] [client 158.23.147.79:53769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-content/index.php"] [unique_id "apK9jC04twRPFuquKD2c8wAAAMg"]
[Sat Aug 29 05:07:56.165524 2026] [security2:error] [pid 1028675:tid 1028884] [client 158.23.147.79:32721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/.well-knownold/index.php"] [unique_id "apK9jNdHPfW2QFvhmL7_OQAAAEo"]
[Sat Aug 29 05:07:56.165807 2026] [security2:error] [pid 1034096:tid 1034327] [client 68.155.159.216:18388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK9jC04twRPFuquKD2c9QAAANE"]
[Sat Aug 29 05:07:56.168181 2026] [security2:error] [pid 1034096:tid 1034286] [client 68.155.159.216:51299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-content/packed.php"] [unique_id "apK9jC04twRPFuquKD2c9gAAAKg"]
[Sat Aug 29 05:07:56.181789 2026] [security2:error] [pid 1034096:tid 1034258] [client 68.155.159.216:33558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/themes.php"] [unique_id "apK9jC04twRPFuquKD2c9wAAAIw"]
[Sat Aug 29 05:07:56.187021 2026] [security2:error] [pid 1028675:tid 1028903] [client 20.48.250.41:65394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/thui.php"] [unique_id "apK9jNdHPfW2QFvhmL7_OgAAAF0"]
[Sat Aug 29 05:07:56.194389 2026] [security2:error] [pid 1028675:tid 1028902] [client 4.205.62.107:21599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/koiy.php"] [unique_id "apK9jNdHPfW2QFvhmL7_OwAAAFw"]
[Sat Aug 29 05:07:56.201883 2026] [security2:error] [pid 1028675:tid 1028816] [client 20.104.104.62:48041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/attack.php"] [unique_id "apK9jNdHPfW2QFvhmL7_PAAAAAY"]
[Sat Aug 29 05:07:56.204053 2026] [security2:error] [pid 1034096:tid 1034259] [client 20.203.141.11:17967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/system_log.php"] [unique_id "apK9jC04twRPFuquKD2c-AAAAI0"]
[Sat Aug 29 05:07:56.209823 2026] [security2:error] [pid 1034096:tid 1034346] [client 20.48.250.41:38796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/ccs.php"] [unique_id "apK9jC04twRPFuquKD2c-QAAAOQ"]
[Sat Aug 29 05:07:56.218307 2026] [security2:error] [pid 1028675:tid 1028824] [client 158.23.147.79:11326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/chosen.php"] [unique_id "apK9jNdHPfW2QFvhmL7_PgAAAA4"]
[Sat Aug 29 05:07:56.222716 2026] [security2:error] [pid 1028675:tid 1028847] [client 20.48.250.41:19526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/t.php"] [unique_id "apK9jNdHPfW2QFvhmL7_PwAAACU"]
[Sat Aug 29 05:07:56.227744 2026] [security2:error] [pid 1028675:tid 1028841] [client 68.155.159.216:65047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK9jNdHPfW2QFvhmL7_QAAAAB8"]
[Sat Aug 29 05:07:56.248025 2026] [security2:error] [pid 1028675:tid 1028907] [client 20.63.219.114:19305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-content/index.php"] [unique_id "apK9jNdHPfW2QFvhmL7_QgAAAGE"]
[Sat Aug 29 05:07:56.260205 2026] [security2:error] [pid 1034096:tid 1034317] [client 158.23.184.117:12641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/identity.php"] [unique_id "apK9jC04twRPFuquKD2c-wAAAMc"]
[Sat Aug 29 05:07:56.271106 2026] [security2:error] [pid 1028675:tid 1028839] [client 20.48.250.41:61701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/knmt.php"] [unique_id "apK9jNdHPfW2QFvhmL7_QwAAAB0"]
[Sat Aug 29 05:07:56.276902 2026] [security2:error] [pid 1028675:tid 1028908] [client 68.155.159.216:38532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-content/radio.php"] [unique_id "apK9jNdHPfW2QFvhmL7_RQAAAGI"]
[Sat Aug 29 05:07:56.284122 2026] [security2:error] [pid 1034096:tid 1034296] [client 20.63.81.20:55442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/wp-includes/interactivity-api/flower.php"] [unique_id "apK9jC04twRPFuquKD2c_QAAALI"]
[Sat Aug 29 05:07:56.289142 2026] [security2:error] [pid 1028675:tid 1028875] [client 52.139.37.240:37120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/wp-content/plugins/ftde.php"] [unique_id "apK9jNdHPfW2QFvhmL7_RgAAAEE"]
[Sat Aug 29 05:07:56.292910 2026] [security2:error] [pid 1028675:tid 1028887] [client 52.139.37.240:16740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/wp-info.php"] [unique_id "apK9jNdHPfW2QFvhmL7_RwAAAE0"]
[Sat Aug 29 05:07:56.317047 2026] [security2:error] [pid 1028675:tid 1028832] [client 20.104.104.62:28573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.johngibsondrawings.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK9jNdHPfW2QFvhmL7_SAAAABY"]
[Sat Aug 29 05:07:56.346995 2026] [security2:error] [pid 1028675:tid 1028825] [client 20.104.104.62:35736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/file66.php"] [unique_id "apK9jNdHPfW2QFvhmL7_SQAAAA8"]
[Sat Aug 29 05:07:56.354494 2026] [security2:error] [pid 1034096:tid 1034377] [client 20.48.250.41:19524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/erty.php"] [unique_id "apK9jC04twRPFuquKD2dAAAAAQM"]
[Sat Aug 29 05:07:56.355318 2026] [security2:error] [pid 1034096:tid 1034372] [client 20.48.250.41:65170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/Jcrop.php"] [unique_id "apK9jC04twRPFuquKD2dAQAAAP4"]
[Sat Aug 29 05:07:56.369334 2026] [security2:error] [pid 1028675:tid 1028861] [client 158.158.54.35:24451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/classwithtostring.php"] [unique_id "apK9jNdHPfW2QFvhmL7_SwAAADM"]
[Sat Aug 29 05:07:56.378183 2026] [security2:error] [pid 1034096:tid 1034287] [client 20.48.250.41:38855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/mar.php"] [unique_id "apK9jC04twRPFuquKD2dAgAAAKk"]
[Sat Aug 29 05:07:56.414013 2026] [security2:error] [pid 1028675:tid 1028828] [client 20.63.81.20:55507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/xcc.php"] [unique_id "apK9jNdHPfW2QFvhmL7_TAAAABI"]
[Sat Aug 29 05:07:56.426144 2026] [security2:error] [pid 1034096:tid 1034262] [client 93.123.109.228:42324] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/shared/.env"] [unique_id "apK9jC04twRPFuquKD2dBwAAAJA"]
[Sat Aug 29 05:07:56.431751 2026] [security2:error] [pid 1034096:tid 1034340] [client 20.48.250.41:58611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/sbhu.php"] [unique_id "apK9jC04twRPFuquKD2dCAAAAN4"]
[Sat Aug 29 05:07:56.431774 2026] [security2:error] [pid 1034096:tid 1034307] [client 158.23.147.79:48245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/worksec.php"] [unique_id "apK9jC04twRPFuquKD2dCQAAAL0"]
[Sat Aug 29 05:07:56.439397 2026] [security2:error] [pid 1028675:tid 1028815] [client 93.123.109.228:42566] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/shop/.env"] [unique_id "apK9jNdHPfW2QFvhmL7_TQAAAAU"]
[Sat Aug 29 05:07:56.441820 2026] [security2:error] [pid 1028675:tid 1028904] [client 20.240.128.207:24757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/ioxi-o.php"] [unique_id "apK9jNdHPfW2QFvhmL7_TgAAAF4"]
[Sat Aug 29 05:07:56.457434 2026] [security2:error] [pid 1034096:tid 1034378] [client 158.23.184.117:12610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/Radio.php"] [unique_id "apK9jC04twRPFuquKD2dDAAAAQQ"]
[Sat Aug 29 05:07:56.480416 2026] [security2:error] [pid 1034096:tid 1034293] [client 52.139.37.240:56115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/wp-wordfence-waf.php"] [unique_id "apK9jC04twRPFuquKD2dDwAAAK8"]
[Sat Aug 29 05:07:56.485624 2026] [security2:error] [pid 1034096:tid 1034254] [client 52.139.37.240:37249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "apK9jC04twRPFuquKD2dEAAAAIg"]
[Sat Aug 29 05:07:56.501643 2026] [security2:error] [pid 1034096:tid 1034303] [client 20.104.104.62:37586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/zafir1.php"] [unique_id "apK9jC04twRPFuquKD2dEQAAALk"]
[Sat Aug 29 05:07:56.505797 2026] [security2:error] [pid 1034096:tid 1034325] [client 20.52.41.200:5344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/ws.php"] [unique_id "apK9jC04twRPFuquKD2dEwAAAM8"]
[Sat Aug 29 05:07:56.513887 2026] [security2:error] [pid 1028675:tid 1028916] [client 20.48.250.41:19506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/0x.php"] [unique_id "apK9jNdHPfW2QFvhmL7_UAAAAGo"]
[Sat Aug 29 05:07:56.514898 2026] [security2:error] [pid 1034096:tid 1034263] [client 20.104.104.62:28572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.johngibsondrawings.com"] [uri "/wp-links.php/wp-content/plugins/wp-content/uploa/"] [unique_id "apK9jC04twRPFuquKD2dFAAAAJE"]
[Sat Aug 29 05:07:56.520370 2026] [security2:error] [pid 1028675:tid 1028843] [client 20.48.250.41:65386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/ws58.php"] [unique_id "apK9jNdHPfW2QFvhmL7_UgAAACE"]
[Sat Aug 29 05:07:56.523607 2026] [security2:error] [pid 1028675:tid 1028922] [client 40.83.93.50:8991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/disagraeosc.php"] [unique_id "apK9jNdHPfW2QFvhmL7_UwAAAHA"]
[Sat Aug 29 05:07:56.543051 2026] [security2:error] [pid 1034096:tid 1034311] [client 20.63.81.20:55537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/wp-includes/Text/Diff/Engine/aaa.php"] [unique_id "apK9jC04twRPFuquKD2dFQAAAME"]
[Sat Aug 29 05:07:56.552918 2026] [security2:error] [pid 1034096:tid 1034331] [client 4.205.62.107:56039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/god.php"] [unique_id "apK9jC04twRPFuquKD2dFgAAANU"]
[Sat Aug 29 05:07:56.563396 2026] [security2:error] [pid 1034096:tid 1034330] [client 20.48.250.41:61723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/a332.php"] [unique_id "apK9jC04twRPFuquKD2dFwAAANQ"]
[Sat Aug 29 05:07:56.569913 2026] [security2:error] [pid 1034096:tid 1034256] [client 40.83.93.50:9210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/post.php"] [unique_id "apK9jC04twRPFuquKD2dGAAAAIo"]
[Sat Aug 29 05:07:56.586046 2026] [security2:error] [pid 1028675:tid 1028872] [client 20.48.250.41:38826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/ccu.php"] [unique_id "apK9jNdHPfW2QFvhmL7_VAAAAD4"]
[Sat Aug 29 05:07:56.606931 2026] [security2:error] [pid 1034096:tid 1034359] [client 20.63.219.114:19322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-content/install.php"] [unique_id "apK9jC04twRPFuquKD2dHAAAAPE"]
[Sat Aug 29 05:07:56.641113 2026] [security2:error] [pid 1028675:tid 1028892] [client 68.155.159.216:12119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/ans.php"] [unique_id "apK9jNdHPfW2QFvhmL7_VwAAAFI"]
[Sat Aug 29 05:07:56.661485 2026] [security2:error] [pid 1028675:tid 1028880] [client 20.203.141.11:18214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "apK9jNdHPfW2QFvhmL7_WQAAAEY"]
[Sat Aug 29 05:07:56.661485 2026] [security2:error] [pid 1034096:tid 1034269] [client 20.48.250.41:19459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/66.php"] [unique_id "apK9jC04twRPFuquKD2dIAAAAJc"]
[Sat Aug 29 05:07:56.663114 2026] [security2:error] [pid 1034096:tid 1034369] [client 20.104.104.62:37571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/console.php"] [unique_id "apK9jC04twRPFuquKD2dIgAAAPs"]
[Sat Aug 29 05:07:56.663150 2026] [security2:error] [pid 1034096:tid 1034308] [client 158.23.184.117:12655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/wp-includes/Requests/Exception/file.php"] [unique_id "apK9jC04twRPFuquKD2dIQAAAL4"]
[Sat Aug 29 05:07:56.670666 2026] [security2:error] [pid 1028675:tid 1028855] [client 20.203.141.11:39507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/24.php"] [unique_id "apK9jNdHPfW2QFvhmL7_WgAAAC0"]
[Sat Aug 29 05:07:56.674429 2026] [security2:error] [pid 1028675:tid 1028909] [client 52.139.37.240:16718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/ws49.php"] [unique_id "apK9jNdHPfW2QFvhmL7_WwAAAGM"]
[Sat Aug 29 05:07:56.674878 2026] [security2:error] [pid 1028675:tid 1028931] [client 158.23.147.79:50093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-admin/admin.php"] [unique_id "apK9jNdHPfW2QFvhmL7_XAAAAHk"]
[Sat Aug 29 05:07:56.675829 2026] [security2:error] [pid 1028675:tid 1028837] [client 20.63.81.20:55507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/wp-includes/style-engine/gecko-new.php"] [unique_id "apK9jNdHPfW2QFvhmL7_XQAAABs"]
[Sat Aug 29 05:07:56.676170 2026] [http2:warn] [pid 1018003:tid 1018249] [client 57.141.14.32:35046] h2_stream(1018003-215-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:07:56.690559 2026] [security2:error] [pid 1028675:tid 1028823] [client 20.48.250.41:49511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/xs.php"] [unique_id "apK9jNdHPfW2QFvhmL7_XgAAAA0"]
[Sat Aug 29 05:07:56.696951 2026] [security2:error] [pid 1034096:tid 1034357] [client 20.48.250.41:61752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/ws66.php"] [unique_id "apK9jC04twRPFuquKD2dJAAAAO8"]
[Sat Aug 29 05:07:56.718436 2026] [security2:error] [pid 1028675:tid 1028901] [client 4.205.62.107:53427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/app/Helpers/bladeHelpers.php"] [unique_id "apK9jNdHPfW2QFvhmL7_XwAAAFs"]
[Sat Aug 29 05:07:56.735136 2026] [security2:error] [pid 1034096:tid 1034261] [client 20.48.250.41:38871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/ak.php"] [unique_id "apK9jC04twRPFuquKD2dJwAAAI8"]
[Sat Aug 29 05:07:56.751118 2026] [security2:error] [pid 1034096:tid 1034300] [client 20.197.61.180:11021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/meta.php"] [unique_id "apK9jC04twRPFuquKD2dKAAAALY"]
[Sat Aug 29 05:07:56.757448 2026] [security2:error] [pid 1034096:tid 1034336] [client 20.104.104.62:20688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/bismilah.php"] [unique_id "apK9jC04twRPFuquKD2dKQAAANo"]
[Sat Aug 29 05:07:56.771495 2026] [security2:error] [pid 1034096:tid 1034318] [client 68.155.159.216:24540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-content/index.php"] [unique_id "apK9jC04twRPFuquKD2dKgAAAMg"]
[Sat Aug 29 05:07:56.784076 2026] [security2:error] [pid 1034096:tid 1034327] [client 52.139.37.240:36882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/z.php"] [unique_id "apK9jC04twRPFuquKD2dKwAAANE"]
[Sat Aug 29 05:07:56.796386 2026] [security2:error] [pid 1034096:tid 1034258] [client 158.23.147.79:17549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-admin/images/about.php"] [unique_id "apK9jC04twRPFuquKD2dLAAAAIw"]
[Sat Aug 29 05:07:56.808656 2026] [security2:error] [pid 1034096:tid 1034321] [client 158.158.54.35:25797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/404.php"] [unique_id "apK9jC04twRPFuquKD2dLQAAAMs"]
[Sat Aug 29 05:07:56.812940 2026] [security2:error] [pid 1028675:tid 1028845] [client 20.63.81.20:55498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/wp-settings.php"] [unique_id "apK9jNdHPfW2QFvhmL7_YAAAACM"]
[Sat Aug 29 05:07:56.823598 2026] [security2:error] [pid 1034096:tid 1034259] [client 20.104.104.62:48040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/blnux.php"] [unique_id "apK9jC04twRPFuquKD2dLwAAAI0"]
[Sat Aug 29 05:07:56.836424 2026] [security2:error] [pid 1028675:tid 1028862] [client 20.48.250.41:19538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/f35.php"] [unique_id "apK9jNdHPfW2QFvhmL7_YQAAADQ"]
[Sat Aug 29 05:07:56.858509 2026] [security2:error] [pid 1034096:tid 1034278] [client 195.178.110.247:7406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cpsl-ggc-org.lowfatdinnermenus.com"] [uri "/index.php"] [unique_id "apK9jC04twRPFuquKD2dMQAAAKA"]
[Sat Aug 29 05:07:56.863895 2026] [security2:error] [pid 1034096:tid 1034372] [client 158.23.184.117:61383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/wp-admin/add.php"] [unique_id "apK9jC04twRPFuquKD2dMgAAAP4"]
[Sat Aug 29 05:07:56.870799 2026] [security2:error] [pid 1034096:tid 1034370] [client 52.139.37.240:16744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/xxx.php"] [unique_id "apK9jC04twRPFuquKD2dMwAAAPw"]
[Sat Aug 29 05:07:56.891201 2026] [security2:error] [pid 1034096:tid 1034307] [client 20.48.250.41:57669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/ws68.php"] [unique_id "apK9jC04twRPFuquKD2dNAAAAL0"]
[Sat Aug 29 05:07:56.894053 2026] [security2:error] [pid 1028675:tid 1028894] [client 20.48.250.41:38797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/lib.php"] [unique_id "apK9jNdHPfW2QFvhmL7_YgAAAFQ"]
[Sat Aug 29 05:07:56.900193 2026] [cgid:error] [pid 1028675:tid 1028721] [remote 45.148.10.62:48842] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/ninjamov/public_html/404.shtml
[Sat Aug 29 05:07:56.929862 2026] [security2:error] [pid 1034096:tid 1034302] [client 20.48.250.41:49473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/zu.php"] [unique_id "apK9jC04twRPFuquKD2dNQAAALg"]
[Sat Aug 29 05:07:56.940401 2026] [security2:error] [pid 1034096:tid 1034345] [client 68.155.159.216:65118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK9jC04twRPFuquKD2dOAAAAOM"]
[Sat Aug 29 05:07:56.943920 2026] [security2:error] [pid 1034096:tid 1034251] [client 20.63.81.20:55463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/wp-signup.php"] [unique_id "apK9jC04twRPFuquKD2dOQAAAIU"]
[Sat Aug 29 05:07:56.957556 2026] [security2:error] [pid 1034096:tid 1034362] [client 20.240.128.207:24765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/xmlrpc.php"] [unique_id "apK9jC04twRPFuquKD2dNwAAAPQ"]
[Sat Aug 29 05:07:56.959296 2026] [security2:error] [pid 1034096:tid 1034343] [client 20.104.104.62:48043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/pentest.php"] [unique_id "apK9jC04twRPFuquKD2dOgAAAOE"]
[Sat Aug 29 05:07:56.962464 2026] [security2:error] [pid 1034096:tid 1034305] [client 20.52.41.200:5329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-themes.php"] [unique_id "apK9jC04twRPFuquKD2dOwAAALs"]
[Sat Aug 29 05:07:56.983338 2026] [security2:error] [pid 1028675:tid 1028840] [client 52.139.37.240:37156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/f35.php"] [unique_id "apK9jNdHPfW2QFvhmL7_ZQAAAB4"]
[Sat Aug 29 05:07:56.983589 2026] [security2:error] [pid 1028675:tid 1028851] [client 20.48.250.41:19456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/wen.php"] [unique_id "apK9jNdHPfW2QFvhmL7_ZgAAACk"]
[Sat Aug 29 05:07:57.000150 2026] [security2:error] [pid 1034096:tid 1034320] [client 158.23.147.79:25530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mjallenbooks.com"] [uri "/first.php"] [unique_id "apK9jC04twRPFuquKD2dPwAAAMo"]
[Sat Aug 29 05:07:57.010268 2026] [security2:error] [pid 1034096:tid 1034329] [client 40.83.93.50:9015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/about.php525"] [unique_id "apK9jS04twRPFuquKD2dQAAAANM"]
[Sat Aug 29 05:07:57.020744 2026] [security2:error] [pid 1034096:tid 1034311] [client 158.23.147.79:35794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/mah.php"] [unique_id "apK9jS04twRPFuquKD2dQQAAAME"]
[Sat Aug 29 05:07:57.021376 2026] [security2:error] [pid 1034096:tid 1034317] [client 195.178.110.247:31396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cpsl-ggc-org.lowfatdinnermenus.com"] [uri "/index.php"] [unique_id "apK9jS04twRPFuquKD2dQwAAAMc"]
[Sat Aug 29 05:07:57.021988 2026] [security2:error] [pid 1034096:tid 1034330] [client 20.48.250.41:61700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/users.php"] [unique_id "apK9jS04twRPFuquKD2dRAAAANQ"]
[Sat Aug 29 05:07:57.022738 2026] [security2:error] [pid 1034096:tid 1034256] [client 68.155.159.216:33756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/asd.php"] [unique_id "apK9jS04twRPFuquKD2dRQAAAIo"]
[Sat Aug 29 05:07:57.030858 2026] [security2:error] [pid 1034096:tid 1034284] [client 60.243.207.176:65166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK9jS04twRPFuquKD2dRgAAAKY"]
[Sat Aug 29 05:07:57.030948 2026] [security2:error] [pid 1034096:tid 1034284] [client 60.243.207.176:65166] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK9jS04twRPFuquKD2dRgAAAKY"]
[Sat Aug 29 05:07:57.035113 2026] [security2:error] [pid 1028675:tid 1028839] [client 158.23.184.117:61403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/wp-includes/assets/about.php"] [unique_id "apK9jddHPfW2QFvhmL7_ZwAAAB0"]
[Sat Aug 29 05:07:57.044834 2026] [security2:error] [pid 1034096:tid 1034328] [client 40.83.93.50:9215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/csv.php"] [unique_id "apK9jS04twRPFuquKD2dRwAAANI"]
[Sat Aug 29 05:07:57.060270 2026] [security2:error] [pid 1028675:tid 1028860] [client 158.23.147.79:17536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK9jddHPfW2QFvhmL7_aAAAADI"]
[Sat Aug 29 05:07:57.062627 2026] [security2:error] [pid 1034096:tid 1034360] [client 93.123.109.228:42324] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/src/.env"] [unique_id "apK9jS04twRPFuquKD2dSQAAAPI"]
[Sat Aug 29 05:07:57.064213 2026] [security2:error] [pid 1028675:tid 1028821] [client 20.48.250.41:38809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/wp-style.php"] [unique_id "apK9jddHPfW2QFvhmL7_aQAAAAs"]
[Sat Aug 29 05:07:57.067120 2026] [security2:error] [pid 1034096:tid 1034374] [client 52.139.37.240:16707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/0x.php"] [unique_id "apK9jS04twRPFuquKD2dSwAAAQA"]
[Sat Aug 29 05:07:57.076645 2026] [security2:error] [pid 1028675:tid 1028887] [client 20.63.81.20:55516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/wp-conffg.php"] [unique_id "apK9jddHPfW2QFvhmL7_awAAAE0"]
[Sat Aug 29 05:07:57.079353 2026] [security2:error] [pid 1034096:tid 1034196] [remote 103.164.173.46:58678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.173.164.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sednacomics.com"] [uri "/wp-login.php"] [unique_id "apK9jS04twRPFuquKD2dTAAA7Eo"], referer: https://sednacomics.com/wp-login.php
[Sat Aug 29 05:07:57.079963 2026] [cgid:error] [pid 1028675:tid 1028782] [remote 45.148.10.62:48842] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/ninjamov/public_html/404.shtml
[Sat Aug 29 05:07:57.090860 2026] [security2:error] [pid 1034096:tid 1034355] [client 4.205.62.107:22022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/05.php"] [unique_id "apK9jS04twRPFuquKD2dTgAAAO0"]
[Sat Aug 29 05:07:57.102679 2026] [security2:error] [pid 1028675:tid 1028825] [client 20.104.104.62:48057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/6y7t.php"] [unique_id "apK9jddHPfW2QFvhmL7_bQAAAA8"]
[Sat Aug 29 05:07:57.116483 2026] [security2:error] [pid 1034096:tid 1034270] [client 4.205.62.107:58421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/wp-config.backup.php"] [unique_id "apK9jS04twRPFuquKD2dTwAAAJg"]
[Sat Aug 29 05:07:57.118974 2026] [security2:error] [pid 1034096:tid 1034357] [client 20.63.219.114:7499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK9jS04twRPFuquKD2dUQAAAO8"]
[Sat Aug 29 05:07:57.126068 2026] [security2:error] [pid 1034096:tid 1034306] [client 158.23.147.79:26530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/cgi-bin/index.php"] [unique_id "apK9jS04twRPFuquKD2dUgAAALw"]
[Sat Aug 29 05:07:57.152925 2026] [security2:error] [pid 1028675:tid 1028914] [client 20.48.250.41:49487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/lanka.php"] [unique_id "apK9jddHPfW2QFvhmL7_bwAAAGg"]
[Sat Aug 29 05:07:57.162177 2026] [security2:error] [pid 1028675:tid 1028861] [client 20.48.250.41:61739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/bzjdlofz.php"] [unique_id "apK9jddHPfW2QFvhmL7_cAAAADM"]
[Sat Aug 29 05:07:57.168204 2026] [security2:error] [pid 1034096:tid 1034310] [client 103.171.189.88:60260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9jS04twRPFuquKD2dVwAAAMA"]
[Sat Aug 29 05:07:57.168331 2026] [security2:error] [pid 1034096:tid 1034310] [client 103.171.189.88:60260] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9jS04twRPFuquKD2dVwAAAMA"]
[Sat Aug 29 05:07:57.179593 2026] [security2:error] [pid 1028675:tid 1028936] [client 52.139.37.240:37176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/file61.php"] [unique_id "apK9jddHPfW2QFvhmL7_cQAAAH4"]
[Sat Aug 29 05:07:57.183281 2026] [security2:error] [pid 1028675:tid 1028844] [client 158.23.184.117:12635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/wp-content/themes/twentytwentythree.php"] [unique_id "apK9jddHPfW2QFvhmL7_cgAAACI"]
[Sat Aug 29 05:07:57.208805 2026] [security2:error] [pid 1034096:tid 1034309] [client 20.63.81.20:55497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/wp-validate.php"] [unique_id "apK9jS04twRPFuquKD2dWAAAAL8"]
[Sat Aug 29 05:07:57.244318 2026] [security2:error] [pid 1028675:tid 1028863] [client 158.23.147.79:6134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/chosen.php"] [unique_id "apK9jddHPfW2QFvhmL7_dAAAADU"]
[Sat Aug 29 05:07:57.249414 2026] [security2:error] [pid 1034096:tid 1034297] [client 20.104.104.62:20682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/.dha.php"] [unique_id "apK9jS04twRPFuquKD2dWgAAALM"]
[Sat Aug 29 05:07:57.256643 2026] [security2:error] [pid 1034096:tid 1034269] [client 158.158.54.35:13060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/php.php"] [unique_id "apK9jS04twRPFuquKD2dWwAAAJc"]
[Sat Aug 29 05:07:57.272126 2026] [security2:error] [pid 1034096:tid 1034258] [client 52.139.37.240:16760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/CDX1.php"] [unique_id "apK9jS04twRPFuquKD2dXAAAAIw"]
[Sat Aug 29 05:07:57.277337 2026] [security2:error] [pid 1034096:tid 1034295] [client 4.205.62.107:26627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/fucku.php"] [unique_id "apK9jS04twRPFuquKD2dXQAAALE"]
[Sat Aug 29 05:07:57.278593 2026] [security2:error] [pid 1034096:tid 1034265] [client 158.23.147.79:59880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/about/function.php"] [unique_id "apK9jS04twRPFuquKD2dXgAAAJM"]
[Sat Aug 29 05:07:57.281422 2026] [security2:error] [pid 1034096:tid 1034377] [client 68.155.159.216:18426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/classwithtostring.php"] [unique_id "apK9jS04twRPFuquKD2dXwAAAQM"]
[Sat Aug 29 05:07:57.286908 2026] [security2:error] [pid 1028675:tid 1028705] [remote 45.148.10.62:48842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ninjamover.com"] [uri "/wp-login.php"] [unique_id "apK9jddHPfW2QFvhmL7_dQAAIRg"]
[Sat Aug 29 05:07:57.288097 2026] [security2:error] [pid 1034096:tid 1034287] [client 158.23.147.79:32762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK9jS04twRPFuquKD2dYAAAAKk"]
[Sat Aug 29 05:07:57.289582 2026] [security2:error] [pid 1034096:tid 1034262] [client 20.203.141.11:5775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK9jS04twRPFuquKD2dYQAAAJA"]
[Sat Aug 29 05:07:57.329322 2026] [security2:error] [pid 1034096:tid 1034345] [client 158.23.147.79:11344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/goods.php"] [unique_id "apK9jS04twRPFuquKD2dZQAAAOM"]
[Sat Aug 29 05:07:57.340369 2026] [security2:error] [pid 1034096:tid 1034343] [client 4.205.62.107:21851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/test1.php"] [unique_id "apK9jS04twRPFuquKD2dagAAAOE"]
[Sat Aug 29 05:07:57.344250 2026] [security2:error] [pid 1028675:tid 1028920] [client 68.155.159.216:64472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK9jddHPfW2QFvhmL7_dgAAAG4"]
[Sat Aug 29 05:07:57.344275 2026] [security2:error] [pid 1034096:tid 1034305] [client 20.63.81.20:55471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/700.php"] [unique_id "apK9jS04twRPFuquKD2dawAAALs"]
[Sat Aug 29 05:07:57.379148 2026] [security2:error] [pid 1034096:tid 1034320] [client 68.155.159.216:56547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-admin/dropdown.php"] [unique_id "apK9jS04twRPFuquKD2dbwAAAMo"]
[Sat Aug 29 05:07:57.387121 2026] [security2:error] [pid 1034096:tid 1034301] [client 158.23.184.117:61390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/wp-content/languages/themes/num.php"] [unique_id "apK9jS04twRPFuquKD2dcQAAALc"]
[Sat Aug 29 05:07:57.409506 2026] [security2:error] [pid 1028675:tid 1028846] [client 35.194.208.44:12324] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/.ssh/id_rsa"] [unique_id "apK9jddHPfW2QFvhmL7_fAAAACQ"]
[Sat Aug 29 05:07:57.409926 2026] [security2:error] [pid 1028675:tid 1028814] [client 20.52.41.200:4587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-trackback.php"] [unique_id "apK9jddHPfW2QFvhmL7_fQAAAAQ"]
[Sat Aug 29 05:07:57.414172 2026] [security2:error] [pid 1034096:tid 1034252] [client 35.194.208.44:12304] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/.ssh/id_dsa"] [unique_id "apK9jS04twRPFuquKD2dhAAAAIY"]
[Sat Aug 29 05:07:57.415204 2026] [security2:error] [pid 1034096:tid 1034296] [client 35.194.208.44:12274] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/key.json"] [unique_id "apK9jS04twRPFuquKD2digAAALI"]
[Sat Aug 29 05:07:57.415426 2026] [security2:error] [pid 1034096:tid 1034252] [client 35.194.208.44:12304] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/.ssh/id_dsa"] [unique_id "apK9jS04twRPFuquKD2dhAAAAIY"]
[Sat Aug 29 05:07:57.416317 2026] [security2:error] [pid 1034096:tid 1034328] [client 20.203.141.11:38148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-content/themes/pridmag/il.php"] [unique_id "apK9jS04twRPFuquKD2djQAAANI"]
[Sat Aug 29 05:07:57.416441 2026] [security2:error] [pid 1034096:tid 1034278] [client 35.194.208.44:12336] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/.ssh/id_ecdsa"] [unique_id "apK9jS04twRPFuquKD2djgAAAKA"]
[Sat Aug 29 05:07:57.417266 2026] [security2:error] [pid 1028675:tid 1028892] [client 52.139.37.240:37756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/mah.php"] [unique_id "apK9jddHPfW2QFvhmL7_gAAAAFI"]
[Sat Aug 29 05:07:57.420554 2026] [security2:error] [pid 1028675:tid 1028916] [client 35.194.208.44:12366] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/api/v1/settings"] [unique_id "apK9jddHPfW2QFvhmL7_ggAAAGo"]
[Sat Aug 29 05:07:57.462529 2026] [security2:error] [pid 1028675:tid 1028872] [client 20.240.128.207:31074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/filemanager.php"] [unique_id "apK9jddHPfW2QFvhmL7_iwAAAD4"]
[Sat Aug 29 05:07:57.479510 2026] [security2:error] [pid 1028675:tid 1028815] [client 20.197.61.180:1716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/randkeyword.php"] [unique_id "apK9jddHPfW2QFvhmL7_jAAAAAU"]
[Sat Aug 29 05:07:57.480371 2026] [security2:error] [pid 1034096:tid 1034300] [client 20.63.81.20:55501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/c4.php"] [unique_id "apK9jS04twRPFuquKD2doAAAALY"]
[Sat Aug 29 05:07:57.480941 2026] [security2:error] [pid 1034096:tid 1034263] [client 20.63.219.114:19312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-content/languages/chosen.php"] [unique_id "apK9jS04twRPFuquKD2doQAAAJE"]
[Sat Aug 29 05:07:57.492886 2026] [security2:error] [pid 1034096:tid 1034283] [client 52.139.37.240:16720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/akcc.php"] [unique_id "apK9jS04twRPFuquKD2dowAAAKU"]
[Sat Aug 29 05:07:57.503844 2026] [security2:error] [pid 1034096:tid 1034271] [client 40.83.93.50:16303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/spip.php"] [unique_id "apK9jS04twRPFuquKD2dpAAAAJk"]
[Sat Aug 29 05:07:57.510706 2026] [security2:error] [pid 1034096:tid 1034329] [client 127.0.0.1:29358] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK9jS04twRPFuquKD2dcwAAANM"]
[Sat Aug 29 05:07:57.510759 2026] [security2:error] [pid 1028675:tid 1028900] [client 35.194.208.44:12172] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/config.js"] [unique_id "apK9jddHPfW2QFvhmL7_eAAAAFo"]
[Sat Aug 29 05:07:57.536363 2026] [security2:error] [pid 1034096:tid 1034267] [client 158.23.147.79:48390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/x.php"] [unique_id "apK9jS04twRPFuquKD2dpQAAAJU"]
[Sat Aug 29 05:07:57.541208 2026] [security2:error] [pid 1034096:tid 1034336] [client 158.23.184.117:12616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/wp.php"] [unique_id "apK9jS04twRPFuquKD2dpgAAANo"]
[Sat Aug 29 05:07:57.564254 2026] [security2:error] [pid 1034096:tid 1034282] [client 40.83.93.50:9180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/fox.php"] [unique_id "apK9jS04twRPFuquKD2dpwAAAKQ"]
[Sat Aug 29 05:07:57.601841 2026] [security2:error] [pid 1034096:tid 1034295] [client 91.92.47.191:44552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.giantgardening.com"] [uri "/config.php"] [unique_id "apK9jS04twRPFuquKD2dqAAAALE"]
[Sat Aug 29 05:07:57.609544 2026] [security2:error] [pid 1028675:tid 1028816] [client 20.63.81.20:55432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/wp-tymanage.php"] [unique_id "apK9jddHPfW2QFvhmL7_kAAAAAY"]
[Sat Aug 29 05:07:57.616923 2026] [security2:error] [pid 1034096:tid 1034318] [client 52.139.37.240:37753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/mini.php"] [unique_id "apK9jS04twRPFuquKD2dqwAAAMg"]
[Sat Aug 29 05:07:57.660834 2026] [security2:error] [pid 1034096:tid 1034342] [client 127.0.0.1:29426] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK9jS04twRPFuquKD2dggAAAOA"]
[Sat Aug 29 05:07:57.661069 2026] [security2:error] [pid 1034096:tid 1034285] [client 35.194.208.44:12216] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/settings.json"] [unique_id "apK9jS04twRPFuquKD2dewAAAKc"]
[Sat Aug 29 05:07:57.689605 2026] [security2:error] [pid 1034096:tid 1034341] [client 52.139.37.240:16764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK9jS04twRPFuquKD2drQAAAN8"]
[Sat Aug 29 05:07:57.693025 2026] [security2:error] [pid 1034096:tid 1034343] [client 4.205.62.107:55974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/fff.php"] [unique_id "apK9jS04twRPFuquKD2drwAAAOE"]
[Sat Aug 29 05:07:57.702815 2026] [security2:error] [pid 1034096:tid 1034305] [client 20.104.104.62:47571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/cpanel.php"] [unique_id "apK9jS04twRPFuquKD2dsAAAALs"]
[Sat Aug 29 05:07:57.703872 2026] [security2:error] [pid 1028675:tid 1028927] [client 158.158.54.35:24495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/init.php"] [unique_id "apK9jddHPfW2QFvhmL7_kwAAAHU"]
[Sat Aug 29 05:07:57.728665 2026] [security2:error] [pid 1028675:tid 1028894] [client 93.123.109.228:42566] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/srv/.env"] [unique_id "apK9jddHPfW2QFvhmL7_lAAAAFQ"]
[Sat Aug 29 05:07:57.741068 2026] [security2:error] [pid 1034096:tid 1034266] [client 158.23.184.117:12648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/xmlrpc.php"] [unique_id "apK9jS04twRPFuquKD2drgAAAJQ"]
[Sat Aug 29 05:07:57.747222 2026] [security2:error] [pid 1034096:tid 1034320] [client 20.63.81.20:55528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/ajfto.php"] [unique_id "apK9jS04twRPFuquKD2dsgAAAMo"]
[Sat Aug 29 05:07:57.756986 2026] [security2:error] [pid 1028675:tid 1028835] [client 68.155.159.216:12221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/worksec.php"] [unique_id "apK9jddHPfW2QFvhmL7_lwAAABk"]
[Sat Aug 29 05:07:57.770748 2026] [security2:error] [pid 1034096:tid 1034296] [client 93.123.109.228:42324] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.flexsportsmassagetherapy.com"] [uri "/___proxy_subdomain_cpcontacts/stage/.env"] [unique_id "apK9jS04twRPFuquKD2dtgAAALI"]
[Sat Aug 29 05:07:57.801922 2026] [security2:error] [pid 1034096:tid 1034354] [client 158.23.147.79:49831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK9jS04twRPFuquKD2duQAAAOw"]
[Sat Aug 29 05:07:57.814147 2026] [security2:error] [pid 1034096:tid 1034347] [client 127.0.0.1:29502] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK9jS04twRPFuquKD2dkwAAAOU"]
[Sat Aug 29 05:07:57.814173 2026] [security2:error] [pid 1034096:tid 1034277] [client 35.194.208.44:12432] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/firebase-config.json"] [unique_id "apK9jS04twRPFuquKD2dkgAAAJ8"]
[Sat Aug 29 05:07:57.825721 2026] [security2:error] [pid 1028675:tid 1028881] [client 52.139.37.240:37183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/v.php"] [unique_id "apK9jddHPfW2QFvhmL7_mAAAAEc"]
[Sat Aug 29 05:07:57.853206 2026] [security2:error] [pid 1034096:tid 1034377] [client 114.119.146.159:39815] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.isbcharterschool.org"] [uri "/events/2017-10-26"] [unique_id "apK9jS04twRPFuquKD2dugAAAQM"], referer: https://www.isbcharterschool.org/events/2017-10-27
[Sat Aug 29 05:07:57.856114 2026] [security2:error] [pid 1028675:tid 1028849] [client 127.0.0.1:29524] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK9jddHPfW2QFvhmL7_hgAAACc"]
[Sat Aug 29 05:07:57.856253 2026] [security2:error] [pid 1028675:tid 1028813] [client 35.194.208.44:12376] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/credentials.json"] [unique_id "apK9jddHPfW2QFvhmL7_hAAAAAM"]
[Sat Aug 29 05:07:57.867418 2026] [security2:error] [pid 1034096:tid 1034255] [client 202.71.25.11:52477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.25.71.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK9jS04twRPFuquKD2dvAAAAIk"]
[Sat Aug 29 05:07:57.867434 2026] [security2:error] [pid 1028675:tid 1028910] [client 20.63.219.114:19308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-content/languages/index.php"] [unique_id "apK9jddHPfW2QFvhmL7_mQAAAGQ"]
[Sat Aug 29 05:07:57.867557 2026] [security2:error] [pid 1034096:tid 1034255] [client 202.71.25.11:52477] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK9jS04twRPFuquKD2dvAAAAIk"]
[Sat Aug 29 05:07:57.876023 2026] [security2:error] [pid 1034096:tid 1034263] [client 20.63.81.20:55492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/wp_KwIW0U5F.php"] [unique_id "apK9jS04twRPFuquKD2dvQAAAJE"]
[Sat Aug 29 05:07:57.887333 2026] [security2:error] [pid 1034096:tid 1034329] [client 4.205.62.107:9207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/wp-jufsis.php"] [unique_id "apK9jS04twRPFuquKD2dvgAAANM"]
[Sat Aug 29 05:07:57.887564 2026] [security2:error] [pid 1034096:tid 1034336] [client 68.155.159.216:24331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/about/function.php"] [unique_id "apK9jS04twRPFuquKD2dvwAAANo"]
[Sat Aug 29 05:07:57.889685 2026] [security2:error] [pid 1028675:tid 1028839] [client 158.23.184.117:12570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/app.php"] [unique_id "apK9jddHPfW2QFvhmL7_mgAAAB0"]
[Sat Aug 29 05:07:57.889851 2026] [security2:error] [pid 1028675:tid 1028873] [client 52.139.37.240:16706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/s.php"] [unique_id "apK9jddHPfW2QFvhmL7_mwAAAD8"]
[Sat Aug 29 05:07:57.890278 2026] [security2:error] [pid 1034096:tid 1034358] [client 20.151.200.44:64673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/horeg.php"] [unique_id "apK9jS04twRPFuquKD2dwQAAAPA"]
[Sat Aug 29 05:07:57.898964 2026] [security2:error] [pid 1034096:tid 1034302] [client 20.203.141.11:33666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/assets/images/doc.php"] [unique_id "apK9jS04twRPFuquKD2dxAAAALg"]
[Sat Aug 29 05:07:57.917821 2026] [security2:error] [pid 1034096:tid 1034259] [client 158.23.147.79:17470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK9jS04twRPFuquKD2dxwAAAI0"]
[Sat Aug 29 05:07:57.951366 2026] [security2:error] [pid 1028675:tid 1028932] [client 127.0.0.1:29564] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK9jddHPfW2QFvhmL7_iQAAAHo"]
[Sat Aug 29 05:07:57.951506 2026] [security2:error] [pid 1034096:tid 1034340] [client 35.194.208.44:12416] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/.docker/config.json"] [unique_id "apK9jS04twRPFuquKD2dmAAAAN4"]
[Sat Aug 29 05:07:57.963426 2026] [security2:error] [pid 1034096:tid 1034270] [client 20.240.128.207:27550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-content/themes/admin.php"] [unique_id "apK9jS04twRPFuquKD2dywAAAJg"]
[Sat Aug 29 05:07:58.009352 2026] [security2:error] [pid 1034096:tid 1034330] [client 20.63.81.20:55441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/wp_xiPu52Ut.php"] [unique_id "apK9ji04twRPFuquKD2dzQAAANQ"]
[Sat Aug 29 05:07:58.015129 2026] [security2:error] [pid 1028675:tid 1028898] [client 40.83.93.50:9157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/backup.php"] [unique_id "apK9jtdHPfW2QFvhmL7_nQAAAFg"]
[Sat Aug 29 05:07:58.023989 2026] [security2:error] [pid 1034096:tid 1034285] [client 20.52.41.200:5332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/222.php"] [unique_id "apK9ji04twRPFuquKD2dzgAAAKc"]
[Sat Aug 29 05:07:58.033926 2026] [security2:error] [pid 1034096:tid 1034331] [client 52.139.37.240:37724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK9ji04twRPFuquKD2dzwAAANU"]
[Sat Aug 29 05:07:58.034706 2026] [security2:error] [pid 1034096:tid 1034260] [client 20.104.104.62:20684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/devill.php"] [unique_id "apK9ji04twRPFuquKD2d0AAAAI4"]
[Sat Aug 29 05:07:58.038135 2026] [security2:error] [pid 1034096:tid 1034356] [client 158.23.184.117:61435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/aaa.php"] [unique_id "apK9ji04twRPFuquKD2d0QAAAO4"]
[Sat Aug 29 05:07:58.048605 2026] [security2:error] [pid 1034096:tid 1034271] [client 40.83.93.50:8438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/disagraeosc.php"] [unique_id "apK9ji04twRPFuquKD2d0gAAAJk"]
[Sat Aug 29 05:07:58.072686 2026] [security2:error] [pid 1034096:tid 1034323] [client 149.34.210.141:11191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9ji04twRPFuquKD2d1AAAAM0"]
[Sat Aug 29 05:07:58.072846 2026] [security2:error] [pid 1034096:tid 1034323] [client 149.34.210.141:11191] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9ji04twRPFuquKD2d1AAAAM0"]
[Sat Aug 29 05:07:58.095305 2026] [security2:error] [pid 1034096:tid 1034272] [client 20.203.141.11:10010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK9ji04twRPFuquKD2d1QAAAJo"]
[Sat Aug 29 05:07:58.105178 2026] [security2:error] [pid 1034096:tid 1034348] [client 52.139.37.240:56119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/sagax.php"] [unique_id "apK9ji04twRPFuquKD2d1gAAAOY"]
[Sat Aug 29 05:07:58.138237 2026] [security2:error] [pid 1028675:tid 1028843] [client 20.63.81.20:55496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/wp_n5VD7XDh.php"] [unique_id "apK9jtdHPfW2QFvhmL7_oAAAACE"]
[Sat Aug 29 05:07:58.167965 2026] [security2:error] [pid 1034096:tid 1034251] [client 158.158.54.35:14580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "apK9ji04twRPFuquKD2d2AAAAIU"]
[Sat Aug 29 05:07:58.169592 2026] [security2:error] [pid 1034096:tid 1034287] [client 158.23.147.79:35745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-blog-header.php"] [unique_id "apK9ji04twRPFuquKD2d2QAAAKk"]
[Sat Aug 29 05:07:58.170906 2026] [security2:error] [pid 1028675:tid 1028920] [client 68.155.159.216:33613] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "isasi.com"] [uri "/1.php"] [unique_id "apK9jtdHPfW2QFvhmL7_ogAAAG4"]
[Sat Aug 29 05:07:58.170929 2026] [security2:error] [pid 1028675:tid 1028923] [client 20.48.250.41:19502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/inc.php"] [unique_id "apK9jtdHPfW2QFvhmL7_oQAAAHE"]
[Sat Aug 29 05:07:58.170971 2026] [security2:error] [pid 1028675:tid 1028920] [client 68.155.159.216:33613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/1.php"] [unique_id "apK9jtdHPfW2QFvhmL7_ogAAAG4"]
[Sat Aug 29 05:07:58.218929 2026] [security2:error] [pid 1034096:tid 1034364] [client 20.48.250.41:38894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/browse.php"] [unique_id "apK9ji04twRPFuquKD2d3AAAAPY"]
[Sat Aug 29 05:07:58.223161 2026] [security2:error] [pid 1034096:tid 1034264] [client 20.63.219.114:7505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-content/languages/min.php"] [unique_id "apK9ji04twRPFuquKD2d3QAAAJI"]
[Sat Aug 29 05:07:58.224632 2026] [security2:error] [pid 1028675:tid 1028876] [client 20.197.61.180:1848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/goods.php"] [unique_id "apK9jtdHPfW2QFvhmL7_owAAAEI"]
[Sat Aug 29 05:07:58.231497 2026] [security2:error] [pid 1034096:tid 1034328] [client 52.139.37.240:37699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "apK9ji04twRPFuquKD2d3wAAANI"]
[Sat Aug 29 05:07:58.239149 2026] [security2:error] [pid 1034096:tid 1034351] [client 158.23.147.79:26545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK9ji04twRPFuquKD2d4AAAAOk"]
[Sat Aug 29 05:07:58.239437 2026] [security2:error] [pid 1034096:tid 1034354] [client 158.23.184.117:12670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/hehe.php"] [unique_id "apK9ji04twRPFuquKD2d4QAAAOw"]
[Sat Aug 29 05:07:58.243485 2026] [security2:error] [pid 1034096:tid 1034333] [client 4.205.62.107:21605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/wp-blog.php"] [unique_id "apK9ji04twRPFuquKD2d4gAAANc"]
[Sat Aug 29 05:07:58.253318 2026] [security2:error] [pid 1034096:tid 1034347] [client 20.104.104.62:47600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/dikne.php"] [unique_id "apK9ji04twRPFuquKD2d4wAAAOU"]
[Sat Aug 29 05:07:58.253678 2026] [security2:error] [pid 1034096:tid 1034304] [client 4.205.62.107:58401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/X57.php"] [unique_id "apK9ji04twRPFuquKD2d5AAAALo"]
[Sat Aug 29 05:07:58.281058 2026] [security2:error] [pid 1034096:tid 1034310] [client 20.63.81.20:55472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/wp-mini.php"] [unique_id "apK9ji04twRPFuquKD2d5QAAAMA"]
[Sat Aug 29 05:07:58.298995 2026] [security2:error] [pid 1034096:tid 1034319] [client 20.104.49.130:63514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pvillusions.com"] [uri "/chosen.php"] [unique_id "apK9ji04twRPFuquKD2d5gAAAMk"]
[Sat Aug 29 05:07:58.301762 2026] [security2:error] [pid 1028675:tid 1028880] [client 68.155.159.216:51563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-l0gin.php"] [unique_id "apK9jtdHPfW2QFvhmL7_pAAAAEY"]
[Sat Aug 29 05:07:58.302820 2026] [security2:error] [pid 1034096:tid 1034293] [client 68.155.159.216:33633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-mail.php"] [unique_id "apK9ji04twRPFuquKD2d5wAAAK8"]
[Sat Aug 29 05:07:58.350427 2026] [security2:error] [pid 1028675:tid 1028870] [client 158.23.147.79:6094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/goods.php"] [unique_id "apK9jtdHPfW2QFvhmL7_pgAAADw"]
[Sat Aug 29 05:07:58.376890 2026] [security2:error] [pid 1028675:tid 1028892] [client 20.203.141.11:38179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/bgymj.php"] [unique_id "apK9jtdHPfW2QFvhmL7_pwAAAFI"]
[Sat Aug 29 05:07:58.384379 2026] [security2:error] [pid 1028675:tid 1028902] [client 158.23.147.79:61570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK9jtdHPfW2QFvhmL7_qAAAAFw"]
[Sat Aug 29 05:07:58.392869 2026] [security2:error] [pid 1028675:tid 1028812] [client 68.155.159.216:18134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/install.php"] [unique_id "apK9jtdHPfW2QFvhmL7_qQAAAAI"]
[Sat Aug 29 05:07:58.393612 2026] [security2:error] [pid 1028675:tid 1028816] [client 158.23.147.79:32668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK9jtdHPfW2QFvhmL7_qgAAAAY"]
[Sat Aug 29 05:07:58.393976 2026] [security2:error] [pid 1028675:tid 1028884] [client 158.23.184.117:61400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/wp-includes/PHPMailer.php"] [unique_id "apK9jtdHPfW2QFvhmL7_qwAAAEo"]
[Sat Aug 29 05:07:58.408659 2026] [security2:error] [pid 1028675:tid 1028841] [client 20.63.81.20:55457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/xmini4.php"] [unique_id "apK9jtdHPfW2QFvhmL7_rAAAAB8"]
[Sat Aug 29 05:07:58.424816 2026] [security2:error] [pid 1028675:tid 1028886] [client 52.139.37.240:37273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9jtdHPfW2QFvhmL7_rwAAAEw"]
[Sat Aug 29 05:07:58.441011 2026] [security2:error] [pid 1028675:tid 1028856] [client 4.205.62.107:24997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/error_log.php"] [unique_id "apK9jtdHPfW2QFvhmL7_sAAAAC4"]
[Sat Aug 29 05:07:58.443156 2026] [security2:error] [pid 1028675:tid 1028909] [client 158.23.147.79:11296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK9jtdHPfW2QFvhmL7_sQAAAGM"]
[Sat Aug 29 05:07:58.455251 2026] [security2:error] [pid 1028675:tid 1028848] [client 20.104.49.130:34509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/002.php"] [unique_id "apK9jtdHPfW2QFvhmL7_swAAACY"]
[Sat Aug 29 05:07:58.470310 2026] [security2:error] [pid 1034096:tid 1034263] [client 20.240.128.207:21042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-admin/css/admin.php"] [unique_id "apK9ji04twRPFuquKD2d7wAAAJE"]
[Sat Aug 29 05:07:58.479320 2026] [security2:error] [pid 1028675:tid 1028900] [client 20.52.41.200:4572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/x.php"] [unique_id "apK9jtdHPfW2QFvhmL7_tAAAAFo"]
[Sat Aug 29 05:07:58.485602 2026] [security2:error] [pid 1028675:tid 1028837] [client 68.155.159.216:38539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/login.php"] [unique_id "apK9jtdHPfW2QFvhmL7_tQAAABs"]
[Sat Aug 29 05:07:58.498094 2026] [security2:error] [pid 1028675:tid 1028849] [client 4.205.62.107:22513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/lmfi2.php"] [unique_id "apK9jtdHPfW2QFvhmL7_tgAAACc"]
[Sat Aug 29 05:07:58.515981 2026] [security2:error] [pid 1034096:tid 1034344] [client 40.83.93.50:8995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/haiterus.php"] [unique_id "apK9ji04twRPFuquKD2d8AAAAOI"]
[Sat Aug 29 05:07:58.521796 2026] [security2:error] [pid 1028675:tid 1028887] [client 68.155.159.216:49314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-content/x/index.php"] [unique_id "apK9jtdHPfW2QFvhmL7_twAAAE0"]
[Sat Aug 29 05:07:58.525506 2026] [security2:error] [pid 1034096:tid 1034289] [client 40.83.93.50:9158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/about.php525"] [unique_id "apK9ji04twRPFuquKD2d8QAAAKs"]
[Sat Aug 29 05:07:58.537269 2026] [security2:error] [pid 1028675:tid 1028823] [client 20.63.81.20:55470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/reop3.php"] [unique_id "apK9jtdHPfW2QFvhmL7_uQAAAA0"]
[Sat Aug 29 05:07:58.540071 2026] [security2:error] [pid 1028675:tid 1028813] [client 158.23.184.117:61388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/wp-content/upgrade/alfanew.php7"] [unique_id "apK9jtdHPfW2QFvhmL7_ugAAAAM"]
[Sat Aug 29 05:07:58.556336 2026] [security2:error] [pid 1028675:tid 1028824] [client 20.203.141.11:17925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/num.php"] [unique_id "apK9jtdHPfW2QFvhmL7_uwAAAA4"]
[Sat Aug 29 05:07:58.574047 2026] [security2:error] [pid 1028675:tid 1028936] [client 20.104.49.130:39065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/browse.php"] [unique_id "apK9jtdHPfW2QFvhmL7_vAAAAH4"]
[Sat Aug 29 05:07:58.574752 2026] [security2:error] [pid 1028675:tid 1028931] [client 20.63.219.114:19273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-content/languages/pk.php"] [unique_id "apK9jtdHPfW2QFvhmL7_vQAAAHk"]
[Sat Aug 29 05:07:58.594821 2026] [security2:error] [pid 1028675:tid 1028907] [client 69.165.72.145:59279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 145.72.165.69.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enprodistributing.enproftp.com"] [uri "/index.php"] [unique_id "apK9jtdHPfW2QFvhmL7_vwAAAGE"], referer: https://enprodistributing.enproftp.com
[Sat Aug 29 05:07:58.645966 2026] [security2:error] [pid 1034096:tid 1034318] [client 158.23.147.79:48195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-content/x.php"] [unique_id "apK9ji04twRPFuquKD2d9AAAAMg"]
[Sat Aug 29 05:07:58.665120 2026] [security2:error] [pid 1034096:tid 1034280] [client 20.63.81.20:55436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/wp-mail.php"] [unique_id "apK9ji04twRPFuquKD2d9gAAAKI"]
[Sat Aug 29 05:07:58.688649 2026] [security2:error] [pid 1028675:tid 1028843] [client 158.23.184.117:12642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/admin/alfa-rex.php"] [unique_id "apK9jtdHPfW2QFvhmL7_xAAAACE"]
[Sat Aug 29 05:07:58.777450 2026] [security2:error] [pid 1028675:tid 1028880] [client 195.178.110.247:7432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lisasibony.com"] [uri "/index.php"] [unique_id "apK9jtdHPfW2QFvhmL7_ygAAAEY"]
[Sat Aug 29 05:07:58.797463 2026] [security2:error] [pid 1028675:tid 1028902] [client 20.63.81.20:55446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/wp-conffg.php"] [unique_id "apK9jtdHPfW2QFvhmL7_zAAAAFw"]
[Sat Aug 29 05:07:58.800333 2026] [security2:error] [pid 1028675:tid 1028812] [client 158.23.147.79:17478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK9jtdHPfW2QFvhmL7_zQAAAAI"]
[Sat Aug 29 05:07:58.829724 2026] [security2:error] [pid 1034096:tid 1034331] [client 4.205.62.107:3912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/autogooey.php"] [unique_id "apK9ji04twRPFuquKD2d-QAAANU"]
[Sat Aug 29 05:07:58.831247 2026] [security2:error] [pid 1034096:tid 1034307] [client 20.203.141.11:38385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK9ji04twRPFuquKD2d-gAAAL0"]
[Sat Aug 29 05:07:58.833933 2026] [security2:error] [pid 1028675:tid 1028903] [client 158.23.184.117:61436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/wp-content/export.php"] [unique_id "apK9jtdHPfW2QFvhmL7_zgAAAF0"]
[Sat Aug 29 05:07:58.862691 2026] [security2:error] [pid 1028675:tid 1028886] [client 68.155.159.216:12222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/x.php"] [unique_id "apK9jtdHPfW2QFvhmL7_0AAAAEw"]
[Sat Aug 29 05:07:58.912646 2026] [security2:error] [pid 1034096:tid 1034323] [client 68.155.159.216:52753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK9ji04twRPFuquKD2d_QAAAM0"]
[Sat Aug 29 05:07:58.932219 2026] [security2:error] [pid 1028675:tid 1028884] [client 20.63.219.114:7543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "orthosurgeries.com"] [uri "/wp-content/languages/plugins/about.php"] [unique_id "apK9jtdHPfW2QFvhmL7_0QAAAEo"]
[Sat Aug 29 05:07:58.933975 2026] [security2:error] [pid 1028675:tid 1028896] [client 20.52.41.200:4563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/new.php"] [unique_id "apK9jtdHPfW2QFvhmL7_0gAAAFY"]
[Sat Aug 29 05:07:58.934023 2026] [security2:error] [pid 1028675:tid 1028851] [client 20.63.81.20:55543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/filefuns.php"] [unique_id "apK9jtdHPfW2QFvhmL7_0wAAACk"]
[Sat Aug 29 05:07:58.938061 2026] [access_compat:error] [pid 1028675:tid 1028848] [client 67.20.76.220:60030] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:07:58.943374 2026] [security2:error] [pid 1028675:tid 1028900] [client 68.155.159.216:16237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-includes/index.php"] [unique_id "apK9jtdHPfW2QFvhmL7_1QAAAFo"]
[Sat Aug 29 05:07:58.944591 2026] [security2:error] [pid 1028675:tid 1028819] [client 158.158.54.35:24468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-content/admin.php"] [unique_id "apK9jtdHPfW2QFvhmL7_1gAAAAk"]
[Sat Aug 29 05:07:58.948317 2026] [security2:error] [pid 1028675:tid 1028870] [client 195.178.110.247:31400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lisasibony.com"] [uri "/index.php"] [unique_id "apK9jtdHPfW2QFvhmL7_1wAAADw"]
[Sat Aug 29 05:07:58.948791 2026] [security2:error] [pid 1028675:tid 1028920] [client 20.197.61.180:1723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/hehe.php"] [unique_id "apK9jtdHPfW2QFvhmL7_2AAAAG4"]
[Sat Aug 29 05:07:58.953098 2026] [security2:error] [pid 1028675:tid 1028922] [client 158.23.147.79:50123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/classwithtostring.php"] [unique_id "apK9jtdHPfW2QFvhmL7_2QAAAHA"]
[Sat Aug 29 05:07:58.965949 2026] [security2:error] [pid 1034096:tid 1034272] [client 20.104.49.130:45717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/ms-edit.php"] [unique_id "apK9ji04twRPFuquKD2eAAAAAJo"]
[Sat Aug 29 05:07:58.972289 2026] [security2:error] [pid 1028675:tid 1028816] [client 20.240.128.207:20995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/adminfuns.php"] [unique_id "apK9jtdHPfW2QFvhmL7_2gAAAAY"]
[Sat Aug 29 05:07:58.977789 2026] [security2:error] [pid 1028675:tid 1028840] [client 158.23.184.117:12631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/new.php"] [unique_id "apK9jtdHPfW2QFvhmL7_3AAAAB4"]
[Sat Aug 29 05:07:59.008139 2026] [security2:error] [pid 1034096:tid 1034260] [client 40.83.93.50:8962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/spip.php"] [unique_id "apK9jy04twRPFuquKD2eAQAAAI4"]
[Sat Aug 29 05:07:59.020935 2026] [security2:error] [pid 1034096:tid 1034356] [client 40.83.93.50:9178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/go.php"] [unique_id "apK9jy04twRPFuquKD2eAgAAAO4"]
[Sat Aug 29 05:07:59.022064 2026] [security2:error] [pid 1034096:tid 1034266] [client 158.23.147.79:17429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-admin.php"] [unique_id "apK9jy04twRPFuquKD2eAwAAAJQ"]
[Sat Aug 29 05:07:59.055825 2026] [security2:error] [pid 1034096:tid 1034352] [client 4.205.62.107:9182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/wp-content/admin.php"] [unique_id "apK9jy04twRPFuquKD2eBQAAAOo"]
[Sat Aug 29 05:07:59.062749 2026] [security2:error] [pid 1034096:tid 1034320] [client 20.63.81.20:55426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/wp-cron.php"] [unique_id "apK9jy04twRPFuquKD2eBgAAAMo"]
[Sat Aug 29 05:07:59.090365 2026] [access_compat:error] [pid 1028675:tid 1028925] [client 57.141.14.108:0] AH01797: client denied by server configuration: /home4/eastacar/public_html/djiboutifresh/pomme-de-terre-cherie-2
[Sat Aug 29 05:07:59.122301 2026] [security2:error] [pid 1028675:tid 1028839] [client 158.23.184.117:12669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/wp-content/plugins/revslider/admin.php"] [unique_id "apK9j9dHPfW2QFvhmL7_4wAAAB0"]
[Sat Aug 29 05:07:59.125913 2026] [security2:error] [pid 1028675:tid 1028738] [remote 74.7.227.189:41182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 189.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pinnacleforms.com"] [uri "/z9jzF1.php"] [unique_id "apK9j9dHPfW2QFvhmL7_5AAAMDk"], referer: https://mail.pinnacleforms.com/
[Sat Aug 29 05:07:59.195246 2026] [security2:error] [pid 1028675:tid 1028898] [client 20.63.81.20:55476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/lock360.php"] [unique_id "apK9j9dHPfW2QFvhmL7_5QAAAFg"]
[Sat Aug 29 05:07:59.268383 2026] [security2:error] [pid 1034096:tid 1034332] [client 131.226.2.208:59606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 208.2.226.131.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "cgpost.com"] [uri "/wp-login.php"] [unique_id "apK9jy04twRPFuquKD2eDgAAANY"]
[Sat Aug 29 05:07:59.269308 2026] [security2:error] [pid 1028675:tid 1028911] [client 158.23.184.117:61387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/wp-content/images/uploads/admin.php"] [unique_id "apK9j9dHPfW2QFvhmL7_5gAAAGU"]
[Sat Aug 29 05:07:59.276942 2026] [security2:error] [pid 1034096:tid 1034355] [client 68.155.159.216:33626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/ws.php"] [unique_id "apK9jy04twRPFuquKD2eEAAAAO0"]
[Sat Aug 29 05:07:59.304629 2026] [security2:error] [pid 1028675:tid 1028875] [client 213.202.253.4:58090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bv-place.com"] [uri "/memberfuns.php"] [unique_id "apK9j9dHPfW2QFvhmL7_6AAAAEE"], referer: www.google.com
[Sat Aug 29 05:07:59.304632 2026] [security2:error] [pid 1034096:tid 1034264] [client 158.23.147.79:35718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK9jy04twRPFuquKD2eEQAAAJI"]
[Sat Aug 29 05:07:59.330940 2026] [security2:error] [pid 1028675:tid 1028878] [client 20.63.81.20:55433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/wp-theme.php"] [unique_id "apK9j9dHPfW2QFvhmL7_6QAAAEQ"]
[Sat Aug 29 05:07:59.333175 2026] [security2:error] [pid 1034096:tid 1034351] [client 20.104.104.62:65272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9jy04twRPFuquKD2eEwAAAOk"]
[Sat Aug 29 05:07:59.342329 2026] [security2:error] [pid 1028675:tid 1028837] [client 61.9.8.120:4675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 120.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK9j9dHPfW2QFvhmL7_5wAAABs"]
[Sat Aug 29 05:07:59.342473 2026] [security2:error] [pid 1028675:tid 1028837] [client 61.9.8.120:4675] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK9j9dHPfW2QFvhmL7_5wAAABs"]
[Sat Aug 29 05:07:59.354576 2026] [security2:error] [pid 1034096:tid 1034333] [client 20.203.141.11:39501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "apK9jy04twRPFuquKD2eFAAAANc"]
[Sat Aug 29 05:07:59.385710 2026] [security2:error] [pid 1028675:tid 1028883] [client 20.52.41.200:4554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/menu.php"] [unique_id "apK9j9dHPfW2QFvhmL7_6gAAAEk"]
[Sat Aug 29 05:07:59.388602 2026] [security2:error] [pid 1034096:tid 1034304] [client 4.205.62.107:21895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/erty.php"] [unique_id "apK9jy04twRPFuquKD2eFQAAALo"]
[Sat Aug 29 05:07:59.389589 2026] [security2:error] [pid 1028675:tid 1028904] [client 158.158.54.35:12064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-configs.php"] [unique_id "apK9j9dHPfW2QFvhmL7_6wAAAF4"]
[Sat Aug 29 05:07:59.393192 2026] [security2:error] [pid 1034096:tid 1034261] [client 4.205.62.107:51518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/fucku.php"] [unique_id "apK9jy04twRPFuquKD2eFgAAAI8"]
[Sat Aug 29 05:07:59.413109 2026] [security2:error] [pid 1034096:tid 1034377] [client 158.23.147.79:26509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-includes/content.php"] [unique_id "apK9jy04twRPFuquKD2eFwAAAQM"]
[Sat Aug 29 05:07:59.419617 2026] [security2:error] [pid 1034096:tid 1034375] [client 68.155.159.216:33706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/cgi-bin/index.php"] [unique_id "apK9jy04twRPFuquKD2eGAAAAQE"]
[Sat Aug 29 05:07:59.421216 2026] [security2:error] [pid 1034096:tid 1034347] [client 158.23.184.117:12630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/tools.php"] [unique_id "apK9jy04twRPFuquKD2eGQAAAOU"]
[Sat Aug 29 05:07:59.429924 2026] [security2:error] [pid 1034096:tid 1034300] [client 20.63.219.114:16675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/post.php"] [unique_id "apK9jy04twRPFuquKD2eGgAAALY"]
[Sat Aug 29 05:07:59.445778 2026] [security2:error] [pid 1034096:tid 1034284] [client 111.235.68.106:28679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK9jy04twRPFuquKD2eGwAAAKY"]
[Sat Aug 29 05:07:59.445878 2026] [security2:error] [pid 1034096:tid 1034284] [client 111.235.68.106:28679] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK9jy04twRPFuquKD2eGwAAAKY"]
[Sat Aug 29 05:07:59.455783 2026] [security2:error] [pid 1034096:tid 1034319] [client 158.23.147.79:6135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK9jy04twRPFuquKD2eHAAAAMk"]
[Sat Aug 29 05:07:59.459706 2026] [security2:error] [pid 1034096:tid 1034329] [client 20.63.81.20:55458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/2d7433/index.php"] [unique_id "apK9jy04twRPFuquKD2eHQAAANM"]
[Sat Aug 29 05:07:59.469035 2026] [security2:error] [pid 1034096:tid 1034321] [client 20.104.104.62:56527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9jy04twRPFuquKD2eHgAAAMs"]
[Sat Aug 29 05:07:59.480925 2026] [security2:error] [pid 1028675:tid 1028923] [client 20.240.128.207:31099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/goods.php"] [unique_id "apK9j9dHPfW2QFvhmL7_7AAAAHE"]
[Sat Aug 29 05:07:59.489974 2026] [security2:error] [pid 1034096:tid 1034297] [client 158.23.147.79:37607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-admin/index.php"] [unique_id "apK9jy04twRPFuquKD2eHwAAALM"]
[Sat Aug 29 05:07:59.499412 2026] [security2:error] [pid 1034096:tid 1034269] [client 158.23.147.79:32696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/images/index.php"] [unique_id "apK9jy04twRPFuquKD2eIAAAAJc"]
[Sat Aug 29 05:07:59.520253 2026] [security2:error] [pid 1034096:tid 1034277] [client 40.83.93.50:8393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/backup.php"] [unique_id "apK9jy04twRPFuquKD2eIQAAAJ8"]
[Sat Aug 29 05:07:59.521511 2026] [security2:error] [pid 1034096:tid 1034339] [client 20.203.141.11:38378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-load.php"] [unique_id "apK9jy04twRPFuquKD2eIgAAAN0"]
[Sat Aug 29 05:07:59.547691 2026] [security2:error] [pid 1034096:tid 1034364] [client 20.63.219.114:15481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/flower.php"] [unique_id "apK9jy04twRPFuquKD2eIwAAAPY"]
[Sat Aug 29 05:07:59.574262 2026] [security2:error] [pid 1034096:tid 1034289] [client 4.205.62.107:65497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/phina.php"] [unique_id "apK9jy04twRPFuquKD2eJAAAAKs"]
[Sat Aug 29 05:07:59.585813 2026] [security2:error] [pid 1028675:tid 1028880] [client 20.63.81.20:55504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/wp-login.php"] [unique_id "apK9j9dHPfW2QFvhmL7_7gAAAEY"]
[Sat Aug 29 05:07:59.585834 2026] [security2:error] [pid 1034096:tid 1034344] [client 158.23.184.117:12645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/wp-content/uploads/my.php"] [unique_id "apK9jy04twRPFuquKD2eJQAAAOI"]
[Sat Aug 29 05:07:59.585838 2026] [security2:error] [pid 1028675:tid 1028918] [client 158.23.147.79:11328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK9j9dHPfW2QFvhmL7_7QAAAGw"]
[Sat Aug 29 05:07:59.591334 2026] [security2:error] [pid 1028675:tid 1028937] [client 68.155.159.216:56566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/hehehehe.php"] [unique_id "apK9j9dHPfW2QFvhmL7_7wAAAH8"]
[Sat Aug 29 05:07:59.605028 2026] [security2:error] [pid 1034096:tid 1034346] [client 20.104.104.62:53869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/baee.php"] [unique_id "apK9jy04twRPFuquKD2eJgAAAOQ"]
[Sat Aug 29 05:07:59.623148 2026] [security2:error] [pid 1034096:tid 1034340] [client 68.155.159.216:49325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK9jy04twRPFuquKD2eKgAAAN4"]
[Sat Aug 29 05:07:59.624125 2026] [security2:error] [pid 1034096:tid 1034358] [client 40.83.93.50:8446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/gecko-new.php"] [unique_id "apK9jy04twRPFuquKD2eKwAAAPA"]
[Sat Aug 29 05:07:59.645666 2026] [security2:error] [pid 1034096:tid 1034213] [remote 165.22.136.47:41400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 47.136.22.165.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ragingmagereviews.domusfennii.com"] [uri "/wp-login.php"] [unique_id "apK9jy04twRPFuquKD2eLQAA2Vs"]
[Sat Aug 29 05:07:59.649091 2026] [security2:error] [pid 1028675:tid 1028815] [client 4.205.62.107:21609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/aws_sdk_settings.php"] [unique_id "apK9j9dHPfW2QFvhmL7_8wAAAAU"]
[Sat Aug 29 05:07:59.676673 2026] [security2:error] [pid 1028675:tid 1028872] [client 20.197.61.180:11365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/wp-admin/class-db.php"] [unique_id "apK9j9dHPfW2QFvhmL7_9AAAAD4"]
[Sat Aug 29 05:07:59.715638 2026] [security2:error] [pid 1034096:tid 1034353] [client 20.63.81.20:55533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/images.php"] [unique_id "apK9jy04twRPFuquKD2eNAAAAOs"]
[Sat Aug 29 05:07:59.716844 2026] [security2:error] [pid 1034096:tid 1034331] [client 52.139.37.240:37141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/wp-index.php"] [unique_id "apK9jy04twRPFuquKD2eNQAAANU"]
[Sat Aug 29 05:07:59.730144 2026] [security2:error] [pid 1028675:tid 1028935] [client 158.23.184.117:12639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/wp-includes/themes/uploads/config.php"] [unique_id "apK9j9dHPfW2QFvhmL7_-AAAAH0"]
[Sat Aug 29 05:07:59.748642 2026] [security2:error] [pid 1028675:tid 1028856] [client 20.104.104.62:56552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/d12.php"] [unique_id "apK9j9dHPfW2QFvhmL7_-QAAAC4"]
[Sat Aug 29 05:07:59.752299 2026] [security2:error] [pid 1034096:tid 1034307] [client 158.23.147.79:48198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK9jy04twRPFuquKD2eNwAAAL0"]
[Sat Aug 29 05:07:59.808888 2026] [security2:error] [pid 1028675:tid 1028862] [client 20.203.141.11:6167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "apK9j9dHPfW2QFvhmL7_-wAAADQ"]
[Sat Aug 29 05:07:59.824233 2026] [security2:error] [pid 1028675:tid 1028872] [client 158.158.54.35:24511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-includes/index.php"] [unique_id "apK9j9dHPfW2QFvhmL7__AAAAD4"]
[Sat Aug 29 05:07:59.840371 2026] [security2:error] [pid 1034096:tid 1034215] [remote 165.22.136.47:41400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 47.136.22.165.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ragingmagereviews.domusfennii.com"] [uri "/wp-login.php"] [unique_id "apK9jy04twRPFuquKD2eOAAAml0"], referer: https://ragingmagereviews.domusfennii.com/wp-login.php
[Sat Aug 29 05:07:59.843122 2026] [security2:error] [pid 1028675:tid 1028926] [client 20.52.41.200:4562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK9j9dHPfW2QFvhmL7__gAAAHQ"]
[Sat Aug 29 05:07:59.847779 2026] [security2:error] [pid 1028675:tid 1028849] [client 20.63.81.20:55380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/ops.php"] [unique_id "apK9j9dHPfW2QFvhmL4AAAAAACc"]
[Sat Aug 29 05:07:59.878287 2026] [security2:error] [pid 1028675:tid 1028870] [client 158.23.184.117:61438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/av.php"] [unique_id "apK9j9dHPfW2QFvhmL4AAQAAADw"]
[Sat Aug 29 05:07:59.883808 2026] [security2:error] [pid 1028675:tid 1028821] [client 20.104.104.62:56557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/yyy.php"] [unique_id "apK9j9dHPfW2QFvhmL4AAgAAAAs"]
[Sat Aug 29 05:07:59.913565 2026] [security2:error] [pid 1028675:tid 1028816] [client 52.139.37.240:60596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abmac.cn"] [uri "/aged.php"] [unique_id "apK9j9dHPfW2QFvhmL4ABQAAAAY"]
[Sat Aug 29 05:07:59.917793 2026] [security2:error] [pid 1028675:tid 1028910] [client 52.139.37.240:37739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/ww2.php"] [unique_id "apK9j9dHPfW2QFvhmL4ABgAAAGQ"]
[Sat Aug 29 05:07:59.924794 2026] [security2:error] [pid 1028675:tid 1028845] [client 52.139.37.240:16491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/wp-content/plugins/ftde.php"] [unique_id "apK9j9dHPfW2QFvhmL4ABwAAACM"]
[Sat Aug 29 05:07:59.944777 2026] [security2:error] [pid 1028675:tid 1028851] [client 20.63.219.114:16686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/meta.php"] [unique_id "apK9j9dHPfW2QFvhmL4ACAAAACk"]
[Sat Aug 29 05:07:59.962932 2026] [security2:error] [pid 1034096:tid 1034352] [client 20.104.104.62:64761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/cPanel.php"] [unique_id "apK9jy04twRPFuquKD2ePAAAAOo"]
[Sat Aug 29 05:07:59.965648 2026] [security2:error] [pid 1034096:tid 1034320] [client 4.205.62.107:53125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/sdsa.php"] [unique_id "apK9jy04twRPFuquKD2ePQAAAMo"]
[Sat Aug 29 05:07:59.966535 2026] [security2:error] [pid 1034096:tid 1034367] [client 68.155.159.216:12198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-content/x.php"] [unique_id "apK9jy04twRPFuquKD2ePgAAAPk"]
[Sat Aug 29 05:07:59.985723 2026] [security2:error] [pid 1034096:tid 1034290] [client 20.63.81.20:55532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK9jy04twRPFuquKD2eQAAAAKw"]
[Sat Aug 29 05:07:59.986392 2026] [security2:error] [pid 1028675:tid 1028819] [client 20.240.128.207:22101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/css.php"] [unique_id "apK9j9dHPfW2QFvhmL4ACQAAAAk"]
[Sat Aug 29 05:08:00.007917 2026] [security2:error] [pid 1028675:tid 1028840] [client 40.83.93.50:8982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/haiterus.php"] [unique_id "apK9kNdHPfW2QFvhmL4ACwAAAB4"]
[Sat Aug 29 05:08:00.056579 2026] [security2:error] [pid 1034096:tid 1034374] [client 20.104.104.62:65263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/bgymj.php"] [unique_id "apK9kC04twRPFuquKD2eRQAAAQA"]
[Sat Aug 29 05:08:00.077700 2026] [security2:error] [pid 1034096:tid 1034268] [client 158.23.184.117:61377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/wp-includes/ID3/file.php"] [unique_id "apK9kC04twRPFuquKD2eSAAAAJY"]
[Sat Aug 29 05:08:00.089400 2026] [security2:error] [pid 1034096:tid 1034304] [client 158.23.147.79:17546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/wp-admin/about.php"] [unique_id "apK9kC04twRPFuquKD2eSQAAALo"]
[Sat Aug 29 05:08:00.096882 2026] [security2:error] [pid 1034096:tid 1034261] [client 68.155.159.216:9324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-admin/includes/index.php"] [unique_id "apK9kC04twRPFuquKD2eSgAAAI8"]
[Sat Aug 29 05:08:00.101784 2026] [security2:error] [pid 1028675:tid 1028875] [client 91.92.47.191:44558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.giantgardening.com"] [uri "/configuration.php"] [unique_id "apK9kNdHPfW2QFvhmL4ADgAAAEE"]
[Sat Aug 29 05:08:00.107313 2026] [security2:error] [pid 1034096:tid 1034266] [client 40.83.93.50:8406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/wp-admin.php"] [unique_id "apK9kC04twRPFuquKD2eTAAAAJQ"]
[Sat Aug 29 05:08:00.108384 2026] [security2:error] [pid 1034096:tid 1034301] [client 52.139.37.240:60575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abmac.cn"] [uri "/essexec.php"] [unique_id "apK9kC04twRPFuquKD2eTQAAALc"]
[Sat Aug 29 05:08:00.112877 2026] [security2:error] [pid 1034096:tid 1034361] [client 20.63.81.20:55539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK9kC04twRPFuquKD2eTgAAAPM"]
[Sat Aug 29 05:08:00.128783 2026] [security2:error] [pid 1034096:tid 1034357] [client 52.139.37.240:16453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/wp-content/uploads/admin.php"] [unique_id "apK9kC04twRPFuquKD2eTwAAAO8"]
[Sat Aug 29 05:08:00.134317 2026] [security2:error] [pid 1034096:tid 1034347] [client 158.23.147.79:17453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK9kC04twRPFuquKD2eUgAAAOU"]
[Sat Aug 29 05:08:00.142910 2026] [security2:error] [pid 1034096:tid 1034351] [client 52.139.37.240:37707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/7logs.php"] [unique_id "apK9kC04twRPFuquKD2eVAAAAOk"]
[Sat Aug 29 05:08:00.165578 2026] [security2:error] [pid 1034096:tid 1034270] [client 103.162.125.59:58443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.125.162.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK9kC04twRPFuquKD2eVQAAAJg"]
[Sat Aug 29 05:08:00.165669 2026] [security2:error] [pid 1034096:tid 1034270] [client 103.162.125.59:58443] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK9kC04twRPFuquKD2eVQAAAJg"]
[Sat Aug 29 05:08:00.185921 2026] [security2:error] [pid 1034096:tid 1034297] [client 20.100.175.163:5401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/.trash7206/index.php"] [unique_id "apK9kC04twRPFuquKD2eVgAAALM"]
[Sat Aug 29 05:08:00.202911 2026] [security2:error] [pid 1028675:tid 1028811] [client 20.203.141.11:38371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/a.php"] [unique_id "apK9kNdHPfW2QFvhmL4AEwAAAAE"]
[Sat Aug 29 05:08:00.208124 2026] [security2:error] [pid 1028675:tid 1028857] [client 4.205.62.107:9012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/124.php"] [unique_id "apK9kNdHPfW2QFvhmL4AFAAAAC8"]
[Sat Aug 29 05:08:00.208145 2026] [security2:error] [pid 1034096:tid 1034368] [client 20.104.104.62:53869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/fh26.php"] [unique_id "apK9kC04twRPFuquKD2eWgAAAPo"]
[Sat Aug 29 05:08:00.214778 2026] [security2:error] [pid 1034096:tid 1034289] [client 158.23.184.117:57824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/.dj/index.php"] [unique_id "apK9kC04twRPFuquKD2eWwAAAKs"]
[Sat Aug 29 05:08:00.220153 2026] [security2:error] [pid 1034096:tid 1034346] [client 158.23.147.79:50031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/install.php"] [unique_id "apK9kC04twRPFuquKD2eXQAAAOQ"]
[Sat Aug 29 05:08:00.222825 2026] [security2:error] [pid 1034096:tid 1034336] [client 158.23.184.117:12593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.samshock.com"] [uri "/wp-admin/css/fff.php"] [unique_id "apK9kC04twRPFuquKD2eXgAAANo"]
[Sat Aug 29 05:08:00.247553 2026] [security2:error] [pid 1034096:tid 1034370] [client 20.63.81.20:55548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/about.php"] [unique_id "apK9kC04twRPFuquKD2eYQAAAPw"]
[Sat Aug 29 05:08:00.256151 2026] [security2:error] [pid 1034096:tid 1034276] [client 20.104.104.62:35714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/0xs.php"] [unique_id "apK9kC04twRPFuquKD2eYwAAAJ4"]
[Sat Aug 29 05:08:00.279733 2026] [security2:error] [pid 1034096:tid 1034375] [client 158.158.54.35:18215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-admin/a.php"] [unique_id "apK9kC04twRPFuquKD2eZQAAAQE"]
[Sat Aug 29 05:08:00.290621 2026] [security2:error] [pid 1034096:tid 1034300] [client 20.203.141.11:43372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/gifclass.php"] [unique_id "apK9kC04twRPFuquKD2eZwAAALY"]
[Sat Aug 29 05:08:00.298798 2026] [security2:error] [pid 1034096:tid 1034365] [client 20.63.219.114:1357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/randkeyword.php"] [unique_id "apK9kC04twRPFuquKD2eaAAAAPc"]
[Sat Aug 29 05:08:00.317862 2026] [security2:error] [pid 1028675:tid 1028918] [client 52.139.37.240:63891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abmac.cn"] [uri "/fw.php"] [unique_id "apK9kNdHPfW2QFvhmL4AFwAAAGw"]
[Sat Aug 29 05:08:00.332517 2026] [security2:error] [pid 1034096:tid 1034274] [client 52.139.37.240:36866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/ac.php"] [unique_id "apK9kC04twRPFuquKD2ebAAAAJw"]
[Sat Aug 29 05:08:00.348170 2026] [security2:error] [pid 1028675:tid 1028903] [client 20.104.104.62:56515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/fgd.php"] [unique_id "apK9kNdHPfW2QFvhmL4AGAAAAF0"]
[Sat Aug 29 05:08:00.377649 2026] [security2:error] [pid 1034096:tid 1034362] [client 158.23.184.117:57821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/.info.php"] [unique_id "apK9kC04twRPFuquKD2ecAAAAPQ"]
[Sat Aug 29 05:08:00.378977 2026] [security2:error] [pid 1034096:tid 1034292] [client 20.63.81.20:55519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/admin.php/admin.php"] [unique_id "apK9kC04twRPFuquKD2ecQAAAK4"]
[Sat Aug 29 05:08:00.386351 2026] [security2:error] [pid 1034096:tid 1034299] [client 68.155.159.216:33733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-includes/css/index.php"] [unique_id "apK9kC04twRPFuquKD2ecgAAALU"]
[Sat Aug 29 05:08:00.390392 2026] [autoindex:error] [pid 1028675:tid 1028885] [client 52.139.37.240:0] AH01276: Cannot serve directory /home4/fairfax6/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:08:00.395117 2026] [security2:error] [pid 1034096:tid 1034271] [client 20.104.104.62:48010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/waf.php"] [unique_id "apK9kC04twRPFuquKD2ecwAAAJk"]
[Sat Aug 29 05:08:00.412309 2026] [security2:error] [pid 1034096:tid 1034302] [client 68.155.159.216:51842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK9kC04twRPFuquKD2edgAAALg"]
[Sat Aug 29 05:08:00.422798 2026] [security2:error] [pid 1034096:tid 1034356] [client 158.23.147.79:35731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK9kC04twRPFuquKD2edwAAAO4"]
[Sat Aug 29 05:08:00.440329 2026] [security2:error] [pid 1034096:tid 1034320] [client 20.52.41.200:5351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/lite.php"] [unique_id "apK9kC04twRPFuquKD2eeAAAAMo"]
[Sat Aug 29 05:08:00.463899 2026] [security2:error] [pid 1034096:tid 1034280] [client 52.139.37.240:16717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/z.php"] [unique_id "apK9kC04twRPFuquKD2eeQAAAKI"]
[Sat Aug 29 05:08:00.485420 2026] [security2:error] [pid 1034096:tid 1034282] [client 40.83.93.50:14723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/go.php"] [unique_id "apK9kC04twRPFuquKD2efQAAAKQ"]
[Sat Aug 29 05:08:00.498465 2026] [security2:error] [pid 1034096:tid 1034354] [client 20.104.104.62:65227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/inject.php"] [unique_id "apK9kC04twRPFuquKD2efgAAAOw"]
[Sat Aug 29 05:08:00.505299 2026] [security2:error] [pid 1034096:tid 1034264] [client 20.63.81.20:55444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/media.php"] [unique_id "apK9kC04twRPFuquKD2efwAAAJI"]
[Sat Aug 29 05:08:00.513552 2026] [security2:error] [pid 1034096:tid 1034254] [client 52.139.37.240:60571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abmac.cn"] [uri "/zwso.php"] [unique_id "apK9kC04twRPFuquKD2eggAAAIg"]
[Sat Aug 29 05:08:00.520294 2026] [security2:error] [pid 1034096:tid 1034332] [client 158.23.184.117:20516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/.trash7206/index.php"] [unique_id "apK9kC04twRPFuquKD2ehAAAANY"]
[Sat Aug 29 05:08:00.522843 2026] [security2:error] [pid 1034096:tid 1034377] [client 158.23.147.79:26535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-admin/css/index.php"] [unique_id "apK9kC04twRPFuquKD2ehQAAAQM"]
[Sat Aug 29 05:08:00.525829 2026] [security2:error] [pid 1034096:tid 1034357] [client 68.155.159.216:33770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK9kC04twRPFuquKD2ehgAAAO8"]
[Sat Aug 29 05:08:00.527747 2026] [security2:error] [pid 1034096:tid 1034278] [client 52.139.37.240:37177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/ctex1.php"] [unique_id "apK9kC04twRPFuquKD2ehwAAAKA"]
[Sat Aug 29 05:08:00.530438 2026] [security2:error] [pid 1028675:tid 1028881] [client 4.205.62.107:58374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/aws_config.php"] [unique_id "apK9kNdHPfW2QFvhmL4AHgAAAEc"]
[Sat Aug 29 05:08:00.549990 2026] [security2:error] [pid 1028675:tid 1028894] [client 20.104.104.62:37560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/bnnof6.php"] [unique_id "apK9kNdHPfW2QFvhmL4AIQAAAFQ"]
[Sat Aug 29 05:08:00.562331 2026] [security2:error] [pid 1028675:tid 1028909] [client 197.219.150.206:64220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK9kNdHPfW2QFvhmL4AIgAAAGM"]
[Sat Aug 29 05:08:00.562429 2026] [security2:error] [pid 1028675:tid 1028909] [client 197.219.150.206:64220] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK9kNdHPfW2QFvhmL4AIgAAAGM"]
[Sat Aug 29 05:08:00.563760 2026] [security2:error] [pid 1034096:tid 1034315] [client 158.23.147.79:6131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK9kC04twRPFuquKD2eiwAAAMU"]
[Sat Aug 29 05:08:00.569337 2026] [security2:error] [pid 1034096:tid 1034329] [client 4.205.62.107:21624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/wp-config.backup.php"] [unique_id "apK9kC04twRPFuquKD2ejAAAANM"]
[Sat Aug 29 05:08:00.579651 2026] [security2:error] [pid 1034096:tid 1034363] [client 20.104.104.62:20849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/cargo.php"] [unique_id "apK9kC04twRPFuquKD2ejQAAAPU"]
[Sat Aug 29 05:08:00.587367 2026] [security2:error] [pid 1034096:tid 1034297] [client 68.155.159.216:16346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/mah.php"] [unique_id "apK9kC04twRPFuquKD2ejgAAALM"]
[Sat Aug 29 05:08:00.595417 2026] [security2:error] [pid 1034096:tid 1034339] [client 158.23.147.79:60290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK9kC04twRPFuquKD2ejwAAAN0"]
[Sat Aug 29 05:08:00.633402 2026] [security2:error] [pid 1034096:tid 1034359] [client 40.83.93.50:14760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/wp-configs.php"] [unique_id "apK9kC04twRPFuquKD2elQAAAPE"]
[Sat Aug 29 05:08:00.634189 2026] [security2:error] [pid 1028675:tid 1028860] [client 20.63.81.20:55547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/mac.php"] [unique_id "apK9kNdHPfW2QFvhmL4AJAAAADI"]
[Sat Aug 29 05:08:00.641257 2026] [security2:error] [pid 1028675:tid 1028832] [client 20.104.104.62:56562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/mga.php"] [unique_id "apK9kNdHPfW2QFvhmL4AJQAAABY"]
[Sat Aug 29 05:08:00.660350 2026] [security2:error] [pid 1034096:tid 1034355] [client 20.203.141.11:27674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/u.php"] [unique_id "apK9kC04twRPFuquKD2elwAAAO0"]
[Sat Aug 29 05:08:00.675893 2026] [security2:error] [pid 1028675:tid 1028849] [client 52.139.37.240:16748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/f35.php"] [unique_id "apK9kNdHPfW2QFvhmL4AJwAAACc"]
[Sat Aug 29 05:08:00.675893 2026] [security2:error] [pid 1034096:tid 1034368] [client 158.23.184.117:20566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/.trash7206/min.php"] [unique_id "apK9kC04twRPFuquKD2emAAAAPo"]
[Sat Aug 29 05:08:00.683683 2026] [security2:error] [pid 1034096:tid 1034283] [client 20.197.61.180:1284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/wp-contentt.php"] [unique_id "apK9kC04twRPFuquKD2emgAAAKU"]
[Sat Aug 29 05:08:00.685726 2026] [security2:error] [pid 1028675:tid 1028862] [client 20.100.175.163:11022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wk/index.php"] [unique_id "apK9kNdHPfW2QFvhmL4AKAAAADQ"]
[Sat Aug 29 05:08:00.705710 2026] [security2:error] [pid 1028675:tid 1028823] [client 20.104.104.62:37508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/ah24.php"] [unique_id "apK9kNdHPfW2QFvhmL4AKQAAAA0"]
[Sat Aug 29 05:08:00.706239 2026] [security2:error] [pid 1034096:tid 1034311] [client 52.139.37.240:60593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abmac.cn"] [uri "/admin/function.php"] [unique_id "apK9kC04twRPFuquKD2emwAAAME"]
[Sat Aug 29 05:08:00.713778 2026] [security2:error] [pid 1028675:tid 1028816] [client 158.23.147.79:11426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/file.php"] [unique_id "apK9kNdHPfW2QFvhmL4AKgAAAAY"]
[Sat Aug 29 05:08:00.734967 2026] [security2:error] [pid 1028675:tid 1028928] [client 4.205.62.107:65491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/koiy.php"] [unique_id "apK9kNdHPfW2QFvhmL4ALQAAAHY"]
[Sat Aug 29 05:08:00.735081 2026] [security2:error] [pid 1028675:tid 1028845] [client 68.155.159.216:49169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK9kNdHPfW2QFvhmL4ALAAAACM"]
[Sat Aug 29 05:08:00.736831 2026] [security2:error] [pid 1034096:tid 1034293] [client 20.63.219.114:16652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/goods.php"] [unique_id "apK9kC04twRPFuquKD2enQAAAK8"]
[Sat Aug 29 05:08:00.754040 2026] [security2:error] [pid 1028675:tid 1028870] [client 52.139.37.240:36895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/defaults.php"] [unique_id "apK9kNdHPfW2QFvhmL4ALwAAADw"]
[Sat Aug 29 05:08:00.766599 2026] [security2:error] [pid 1028675:tid 1028851] [client 20.63.81.20:55489] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.luluchild.com"] [uri "/1.php"] [unique_id "apK9kNdHPfW2QFvhmL4AMAAAACk"]
[Sat Aug 29 05:08:00.766670 2026] [security2:error] [pid 1028675:tid 1028851] [client 20.63.81.20:55489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/1.php"] [unique_id "apK9kNdHPfW2QFvhmL4AMAAAACk"]
[Sat Aug 29 05:08:00.795671 2026] [security2:error] [pid 1034096:tid 1034343] [client 20.104.104.62:65262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/inwp.php"] [unique_id "apK9kC04twRPFuquKD2eoAAAAOE"]
[Sat Aug 29 05:08:00.799362 2026] [security2:error] [pid 1034096:tid 1034334] [client 4.205.62.107:22509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/mga.php"] [unique_id "apK9kC04twRPFuquKD2eoQAAANg"]
[Sat Aug 29 05:08:00.819242 2026] [security2:error] [pid 1034096:tid 1034365] [client 158.23.184.117:57846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/.well-known//index.php"] [unique_id "apK9kC04twRPFuquKD2eogAAAPc"]
[Sat Aug 29 05:08:00.840427 2026] [security2:error] [pid 1034096:tid 1034313] [client 20.104.104.62:48051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/ztv.php"] [unique_id "apK9kC04twRPFuquKD2eowAAAMM"]
[Sat Aug 29 05:08:00.847514 2026] [security2:error] [pid 1034096:tid 1034372] [client 20.104.49.130:58185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.carlosmua.com"] [uri "/bthil.php"] [unique_id "apK9kC04twRPFuquKD2epAAAAP4"]
[Sat Aug 29 05:08:00.851492 2026] [security2:error] [pid 1034096:tid 1034344] [client 20.240.128.207:27136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/w.php"] [unique_id "apK9kC04twRPFuquKD2epQAAAOI"]
[Sat Aug 29 05:08:00.856596 2026] [security2:error] [pid 1034096:tid 1034292] [client 158.23.147.79:48135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/log-mama/function.php"] [unique_id "apK9kC04twRPFuquKD2epgAAAK4"]
[Sat Aug 29 05:08:00.873177 2026] [security2:error] [pid 1028675:tid 1028901] [client 158.158.54.35:24501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK9kNdHPfW2QFvhmL4AMQAAAFs"]
[Sat Aug 29 05:08:00.888231 2026] [security2:error] [pid 1034096:tid 1034331] [client 20.52.41.200:4593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/term.php"] [unique_id "apK9kC04twRPFuquKD2epwAAANU"]
[Sat Aug 29 05:08:00.890511 2026] [security2:error] [pid 1034096:tid 1034274] [client 52.139.37.240:16448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/file61.php"] [unique_id "apK9kC04twRPFuquKD2eqAAAAJw"]
[Sat Aug 29 05:08:00.899317 2026] [security2:error] [pid 1028675:tid 1028839] [client 52.139.37.240:60590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abmac.cn"] [uri "/zoom1.php"] [unique_id "apK9kNdHPfW2QFvhmL4AMgAAAB0"]
[Sat Aug 29 05:08:00.899324 2026] [security2:error] [pid 1034096:tid 1034348] [client 20.63.81.20:55378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/classwithtostring.php"] [unique_id "apK9kC04twRPFuquKD2eqQAAAOY"]
[Sat Aug 29 05:08:00.911696 2026] [security2:error] [pid 1034096:tid 1034356] [client 20.203.141.11:11171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK9kC04twRPFuquKD2eqgAAAO4"]
[Sat Aug 29 05:08:00.937074 2026] [security2:error] [pid 1034096:tid 1034320] [client 20.104.104.62:63014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/ad1.php"] [unique_id "apK9kC04twRPFuquKD2eqwAAAMo"]
[Sat Aug 29 05:08:00.945007 2026] [security2:error] [pid 1034096:tid 1034302] [client 52.139.37.240:36887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/domains.php"] [unique_id "apK9kC04twRPFuquKD2erQAAALg"]
[Sat Aug 29 05:08:00.951815 2026] [security2:error] [pid 1034096:tid 1034291] [client 171.61.160.196:5378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.160.61.171.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK9kC04twRPFuquKD2erwAAAK0"]
[Sat Aug 29 05:08:00.952312 2026] [security2:error] [pid 1034096:tid 1034291] [client 171.61.160.196:5378] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK9kC04twRPFuquKD2erwAAAK0"]
[Sat Aug 29 05:08:00.964429 2026] [security2:error] [pid 1028675:tid 1028907] [client 158.23.184.117:57813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/.well-known/about.php"] [unique_id "apK9kNdHPfW2QFvhmL4AMwAAAGE"]
[Sat Aug 29 05:08:00.967582 2026] [security2:error] [pid 1034096:tid 1034280] [client 68.155.159.216:6052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/login.php"] [unique_id "apK9kC04twRPFuquKD2esQAAAKI"]
[Sat Aug 29 05:08:00.974976 2026] [security2:error] [pid 1034096:tid 1034287] [client 20.104.104.62:37566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/kure.php"] [unique_id "apK9kC04twRPFuquKD2etAAAAKk"]
[Sat Aug 29 05:08:00.976156 2026] [security2:error] [pid 1034096:tid 1034310] [client 35.159.28.40:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.jobindjibouti.com"] [uri "/"] [unique_id "apK9kC04twRPFuquKD2eswAAAMA"]
[Sat Aug 29 05:08:00.976224 2026] [security2:error] [pid 1034096:tid 1034306] [client 40.83.93.50:14770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/gecko-new.php"] [unique_id "apK9kC04twRPFuquKD2etQAAALw"]
[Sat Aug 29 05:08:01.000597 2026] [security2:error] [pid 1028675:tid 1028927] [client 68.155.159.216:24473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK9kNdHPfW2QFvhmL4ANQAAAHU"]
[Sat Aug 29 05:08:01.028465 2026] [security2:error] [pid 1034096:tid 1034304] [client 20.63.81.20:55521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/wp-ws68.php"] [unique_id "apK9kS04twRPFuquKD2etwAAALo"]
[Sat Aug 29 05:08:01.042220 2026] [security2:error] [pid 1034096:tid 1034361] [client 20.104.104.62:20709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/col1.php"] [unique_id "apK9kS04twRPFuquKD2euQAAAPM"]
[Sat Aug 29 05:08:01.073462 2026] [security2:error] [pid 1034096:tid 1034377] [client 68.155.159.216:12127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK9kS04twRPFuquKD2euwAAAQM"]
[Sat Aug 29 05:08:01.074645 2026] [security2:error] [pid 1034096:tid 1034357] [client 20.104.104.62:62935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/1vbqo.php"] [unique_id "apK9kS04twRPFuquKD2evAAAAO8"]
[Sat Aug 29 05:08:01.087449 2026] [security2:error] [pid 1034096:tid 1034264] [client 52.139.37.240:16492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/mah.php"] [unique_id "apK9kS04twRPFuquKD2evQAAAJI"]
[Sat Aug 29 05:08:01.092441 2026] [security2:error] [pid 1034096:tid 1034305] [client 52.139.37.240:61781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abmac.cn"] [uri "/about.php7"] [unique_id "apK9kS04twRPFuquKD2evgAAALs"]
[Sat Aug 29 05:08:01.102544 2026] [security2:error] [pid 1034096:tid 1034266] [client 4.205.62.107:3910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/sale.php"] [unique_id "apK9kS04twRPFuquKD2evwAAAJQ"]
[Sat Aug 29 05:08:01.116595 2026] [security2:error] [pid 1034096:tid 1034315] [client 20.104.104.62:37507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/cafe.php"] [unique_id "apK9kS04twRPFuquKD2ewgAAAMU"]
[Sat Aug 29 05:08:01.125166 2026] [security2:error] [pid 1034096:tid 1034328] [client 20.63.219.114:15874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/hehe.php"] [unique_id "apK9kS04twRPFuquKD2ewwAAANI"]
[Sat Aug 29 05:08:01.126255 2026] [security2:error] [pid 1034096:tid 1034251] [client 20.203.141.11:22288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/r.php"] [unique_id "apK9kS04twRPFuquKD2exAAAAIU"]
[Sat Aug 29 05:08:01.143969 2026] [security2:error] [pid 1028675:tid 1028814] [client 52.139.37.240:37124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/dropdown.php"] [unique_id "apK9kddHPfW2QFvhmL4ANwAAAAQ"]
[Sat Aug 29 05:08:01.161995 2026] [security2:error] [pid 1028675:tid 1028904] [client 20.63.81.20:55427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/simple.php"] [unique_id "apK9kddHPfW2QFvhmL4AOAAAAF4"]
[Sat Aug 29 05:08:01.163218 2026] [security2:error] [pid 1034096:tid 1034252] [client 40.83.93.50:14721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/essexec.php"] [unique_id "apK9kS04twRPFuquKD2exgAAAIY"]
[Sat Aug 29 05:08:01.179996 2026] [security2:error] [pid 1034096:tid 1034354] [client 20.100.175.163:48200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/admin.php"] [unique_id "apK9kS04twRPFuquKD2exwAAAOw"]
[Sat Aug 29 05:08:01.205657 2026] [security2:error] [pid 1034096:tid 1034336] [client 20.104.104.62:2482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/h02ugyh.php"] [unique_id "apK9kS04twRPFuquKD2eyAAAANo"]
[Sat Aug 29 05:08:01.246250 2026] [security2:error] [pid 1034096:tid 1034368] [client 158.23.147.79:17414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK9kS04twRPFuquKD2eywAAAPo"]
[Sat Aug 29 05:08:01.247001 2026] [security2:error] [pid 1034096:tid 1034283] [client 158.23.147.79:17522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/lock.php"] [unique_id "apK9kS04twRPFuquKD2ezAAAAKU"]
[Sat Aug 29 05:08:01.255874 2026] [security2:error] [pid 1034096:tid 1034281] [client 68.155.159.216:52851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-login.php"] [unique_id "apK9kS04twRPFuquKD2ezQAAAKM"]
[Sat Aug 29 05:08:01.258040 2026] [security2:error] [pid 1034096:tid 1034311] [client 20.104.104.62:37568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/eval.php"] [unique_id "apK9kS04twRPFuquKD2ezgAAAME"]
[Sat Aug 29 05:08:01.278145 2026] [security2:error] [pid 1034096:tid 1034253] [client 158.23.184.117:20537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK9kS04twRPFuquKD2ezwAAAIc"]
[Sat Aug 29 05:08:01.283527 2026] [security2:error] [pid 1028675:tid 1028811] [client 52.139.37.240:56116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/mini.php"] [unique_id "apK9kddHPfW2QFvhmL4APAAAAAE"]
[Sat Aug 29 05:08:01.299670 2026] [security2:error] [pid 1028675:tid 1028902] [client 20.63.81.20:55529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/aaa.php"] [unique_id "apK9kddHPfW2QFvhmL4APQAAAFw"]
[Sat Aug 29 05:08:01.304545 2026] [security2:error] [pid 1028675:tid 1028918] [client 20.104.104.62:40219] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/coli.php"] [unique_id "apK9kddHPfW2QFvhmL4APgAAAGw"]
[Sat Aug 29 05:08:01.310265 2026] [security2:error] [pid 1034096:tid 1034370] [client 52.139.37.240:60563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abmac.cn"] [uri "/cron.php"] [unique_id "apK9kS04twRPFuquKD2e1AAAAPw"]
[Sat Aug 29 05:08:01.310396 2026] [security2:error] [pid 1028675:tid 1028903] [client 20.48.250.41:19534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/6bcwiqwj.php"] [unique_id "apK9kddHPfW2QFvhmL4APwAAAF0"]
[Sat Aug 29 05:08:01.312868 2026] [security2:error] [pid 1028675:tid 1028883] [client 158.158.54.35:12969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "traditionalslateroofing.com"] [uri "/wp-admin.php"] [unique_id "apK9kddHPfW2QFvhmL4AQAAAAEk"]
[Sat Aug 29 05:08:01.336434 2026] [security2:error] [pid 1028675:tid 1028815] [client 35.159.28.40:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.jobindjibouti.com"] [uri "/jobs/"] [unique_id "apK9kddHPfW2QFvhmL4AQQAAAAU"]
[Sat Aug 29 05:08:01.342470 2026] [security2:error] [pid 1034096:tid 1034286] [client 52.139.37.240:37286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/files/index.php"] [unique_id "apK9kS04twRPFuquKD2e2AAAAKg"]
[Sat Aug 29 05:08:01.342930 2026] [security2:error] [pid 1034096:tid 1034292] [client 20.104.104.62:62961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/shelp.php"] [unique_id "apK9kS04twRPFuquKD2e2QAAAK4"]
[Sat Aug 29 05:08:01.347476 2026] [security2:error] [pid 1028675:tid 1028898] [client 37.139.53.7:56517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.53.139.37.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.edwardjindovina.com"] [uri "/wp-comments-post.php"] [unique_id "apK9kddHPfW2QFvhmL4AQgAAAFg"], referer: https://www.edwardjindovina.com/2018/11/13/stan-lee-the-ultimate-comic-book-huckster-a-pun-on-the-ultimate-nullifier/
[Sat Aug 29 05:08:01.347575 2026] [security2:error] [pid 1028675:tid 1028898] [client 37.139.53.7:56517] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "409"] [hostname "www.edwardjindovina.com"] [uri "/wp-comments-post.php"] [unique_id "apK9kddHPfW2QFvhmL4AQgAAAFg"], referer: https://www.edwardjindovina.com/2018/11/13/stan-lee-the-ultimate-comic-book-huckster-a-pun-on-the-ultimate-nullifier/
[Sat Aug 29 05:08:01.349850 2026] [security2:error] [pid 1034096:tid 1034340] [client 20.52.41.200:4553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/config.php"] [unique_id "apK9kS04twRPFuquKD2e2wAAAN4"]
[Sat Aug 29 05:08:01.350197 2026] [security2:error] [pid 1028675:tid 1028846] [client 20.240.128.207:31064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/ahax.php"] [unique_id "apK9kddHPfW2QFvhmL4AQwAAACQ"]
[Sat Aug 29 05:08:01.366017 2026] [security2:error] [pid 1034096:tid 1034271] [client 4.205.62.107:53353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/cu.php"] [unique_id "apK9kS04twRPFuquKD2e3QAAAJk"]
[Sat Aug 29 05:08:01.380807 2026] [security2:error] [pid 1034096:tid 1034330] [client 20.48.250.41:38851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/zoo.php"] [unique_id "apK9kS04twRPFuquKD2e3gAAANQ"]
[Sat Aug 29 05:08:01.385990 2026] [security2:error] [pid 1028675:tid 1028937] [client 20.203.141.11:1631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/css/index.php"] [unique_id "apK9kddHPfW2QFvhmL4ARgAAAH8"]
[Sat Aug 29 05:08:01.394591 2026] [security2:error] [pid 1028675:tid 1028876] [client 20.104.104.62:48050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/sao.php"] [unique_id "apK9kddHPfW2QFvhmL4ARwAAAEI"]
[Sat Aug 29 05:08:01.421989 2026] [security2:error] [pid 1034096:tid 1034285] [client 158.23.184.117:20492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/.well-known/acme-challenge/content.php"] [unique_id "apK9kS04twRPFuquKD2e4QAAAKc"]
[Sat Aug 29 05:08:01.423183 2026] [security2:error] [pid 1028675:tid 1028833] [client 20.197.61.180:11382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/theme.php"] [unique_id "apK9kddHPfW2QFvhmL4ASAAAABc"]
[Sat Aug 29 05:08:01.452319 2026] [security2:error] [pid 1034096:tid 1034367] [client 20.48.250.41:19527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/easy.php"] [unique_id "apK9kS04twRPFuquKD2e4gAAAPk"]
[Sat Aug 29 05:08:01.471417 2026] [security2:error] [pid 1034096:tid 1034291] [client 20.104.104.62:40229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/cylul.php"] [unique_id "apK9kS04twRPFuquKD2e4wAAAK0"]
[Sat Aug 29 05:08:01.483181 2026] [security2:error] [pid 1034096:tid 1034356] [client 52.139.37.240:16450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/v.php"] [unique_id "apK9kS04twRPFuquKD2e5QAAAO4"]
[Sat Aug 29 05:08:01.483640 2026] [security2:error] [pid 1028675:tid 1028909] [client 158.23.147.79:50154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-content/x/index.php"] [unique_id "apK9kddHPfW2QFvhmL4ASwAAAGM"]
[Sat Aug 29 05:08:01.484018 2026] [security2:error] [pid 1034096:tid 1034334] [client 40.83.93.50:8979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/wp-admin.php"] [unique_id "apK9kS04twRPFuquKD2e5gAAANg"]
[Sat Aug 29 05:08:01.503893 2026] [security2:error] [pid 1034096:tid 1034275] [client 20.63.219.114:16671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/wp-admin/class-db.php"] [unique_id "apK9kS04twRPFuquKD2e5wAAAJ0"]
[Sat Aug 29 05:08:01.507336 2026] [security2:error] [pid 1028675:tid 1028860] [client 20.104.104.62:46450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/13ede.php"] [unique_id "apK9kddHPfW2QFvhmL4ATQAAADI"]
[Sat Aug 29 05:08:01.508467 2026] [security2:error] [pid 1034096:tid 1034310] [client 68.155.159.216:18387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-content/x/index.php"] [unique_id "apK9kS04twRPFuquKD2e6AAAAMA"]
[Sat Aug 29 05:08:01.513071 2026] [security2:error] [pid 1034096:tid 1034320] [client 52.139.37.240:63898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abmac.cn"] [uri "/wp-2019.php"] [unique_id "apK9kS04twRPFuquKD2e6QAAAMo"]
[Sat Aug 29 05:08:01.535375 2026] [security2:error] [pid 1034096:tid 1034364] [client 20.48.250.41:38861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/elp.php"] [unique_id "apK9kS04twRPFuquKD2e6gAAAPY"]
[Sat Aug 29 05:08:01.549771 2026] [security2:error] [pid 1028675:tid 1028894] [client 52.139.37.240:37182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.inmotionmotors.com"] [uri "/flower.php"] [unique_id "apK9kddHPfW2QFvhmL4AUQAAAFQ"]
[Sat Aug 29 05:08:01.550913 2026] [security2:error] [pid 1034096:tid 1034325] [client 158.23.147.79:35218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-includes/plugins.php"] [unique_id "apK9kS04twRPFuquKD2e7AAAAM8"]
[Sat Aug 29 05:08:01.558485 2026] [security2:error] [pid 1028675:tid 1028825] [client 20.104.104.62:37563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/uuu.php"] [unique_id "apK9kddHPfW2QFvhmL4AUgAAAA8"]
[Sat Aug 29 05:08:01.592743 2026] [security2:error] [pid 1028675:tid 1028936] [client 20.203.141.11:33686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-blog.php"] [unique_id "apK9kddHPfW2QFvhmL4AVAAAAH4"]
[Sat Aug 29 05:08:01.593961 2026] [security2:error] [pid 1028675:tid 1028888] [client 20.63.81.20:55493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/shiny.php"] [unique_id "apK9kddHPfW2QFvhmL4AVQAAAE4"]
[Sat Aug 29 05:08:01.597653 2026] [core:error] [pid 1034096:tid 1034301] [client 158.23.184.117:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:01.597668 2026] [core:error] [pid 1034096:tid 1034301] [client 158.23.184.117:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:01.617159 2026] [security2:error] [pid 1034096:tid 1034278] [client 20.48.250.41:19496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/fresh3.php"] [unique_id "apK9kS04twRPFuquKD2e8AAAAKA"]
[Sat Aug 29 05:08:01.629028 2026] [security2:error] [pid 1034096:tid 1034266] [client 158.23.147.79:26612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-admin/images/index.php"] [unique_id "apK9kS04twRPFuquKD2e8QAAAJQ"]
[Sat Aug 29 05:08:01.645758 2026] [security2:error] [pid 1034096:tid 1034256] [client 68.155.159.216:33726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-includes/content.php"] [unique_id "apK9kS04twRPFuquKD2e8wAAAIo"]
[Sat Aug 29 05:08:01.650086 2026] [security2:error] [pid 1028675:tid 1028841] [client 40.83.93.50:14724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/hello.php"] [unique_id "apK9kddHPfW2QFvhmL4AVwAAAB8"]
[Sat Aug 29 05:08:01.651348 2026] [security2:error] [pid 1028675:tid 1028824] [client 20.104.104.62:65275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/k8.php"] [unique_id "apK9kddHPfW2QFvhmL4AWAAAAA4"]
[Sat Aug 29 05:08:01.656292 2026] [security2:error] [pid 1028675:tid 1028812] [client 87.219.197.128:64710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK9kddHPfW2QFvhmL4AWQAAAAI"]
[Sat Aug 29 05:08:01.656378 2026] [security2:error] [pid 1028675:tid 1028812] [client 87.219.197.128:64710] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK9kddHPfW2QFvhmL4AWQAAAAI"]
[Sat Aug 29 05:08:01.664915 2026] [security2:error] [pid 1028675:tid 1028931] [client 20.104.104.62:20719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/Cylul007.php"] [unique_id "apK9kddHPfW2QFvhmL4AWwAAAHk"]
[Sat Aug 29 05:08:01.668086 2026] [security2:error] [pid 1034096:tid 1034369] [client 4.205.62.107:51509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/fraro.php"] [unique_id "apK9kS04twRPFuquKD2e9gAAAPs"]
[Sat Aug 29 05:08:01.671036 2026] [security2:error] [pid 1028675:tid 1028901] [client 158.23.147.79:6113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/file.php"] [unique_id "apK9kddHPfW2QFvhmL4AXAAAAFs"]
[Sat Aug 29 05:08:01.675982 2026] [security2:error] [pid 1028675:tid 1028832] [client 20.100.175.163:6137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/php8.php"] [unique_id "apK9kddHPfW2QFvhmL4AXQAAABY"]
[Sat Aug 29 05:08:01.691156 2026] [security2:error] [pid 1034096:tid 1034297] [client 20.48.250.41:38863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/666.php"] [unique_id "apK9kS04twRPFuquKD2e9wAAALM"]
[Sat Aug 29 05:08:01.701162 2026] [security2:error] [pid 1028675:tid 1028859] [client 158.23.147.79:65500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/about.php"] [unique_id "apK9kddHPfW2QFvhmL4AXwAAADE"]
[Sat Aug 29 05:08:01.704003 2026] [security2:error] [pid 1034096:tid 1034279] [client 52.139.37.240:16709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/wp-admin/images/admin.php"] [unique_id "apK9kS04twRPFuquKD2e-AAAAKE"]
[Sat Aug 29 05:08:01.707830 2026] [security2:error] [pid 1028675:tid 1028927] [client 20.104.104.62:37536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/private.php"] [unique_id "apK9kddHPfW2QFvhmL4AYAAAAHU"]
[Sat Aug 29 05:08:01.716638 2026] [security2:error] [pid 1028675:tid 1028855] [client 4.205.62.107:21590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/edit.php"] [unique_id "apK9kddHPfW2QFvhmL4AYQAAAC0"]
[Sat Aug 29 05:08:01.720250 2026] [security2:error] [pid 1028675:tid 1028861] [client 52.139.37.240:63880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abmac.cn"] [uri "/gecko-new.php"] [unique_id "apK9kddHPfW2QFvhmL4AYgAAADM"]
[Sat Aug 29 05:08:01.727966 2026] [security2:error] [pid 1034096:tid 1034252] [client 20.63.81.20:55468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/goods.php"] [unique_id "apK9kS04twRPFuquKD2e-QAAAIY"]
[Sat Aug 29 05:08:01.745899 2026] [security2:error] [pid 1028675:tid 1028820] [client 158.23.184.117:57810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK9kddHPfW2QFvhmL4AYwAAAAo"]
[Sat Aug 29 05:08:01.801142 2026] [security2:error] [pid 1034096:tid 1034254] [client 20.196.209.81:9044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-admin/network/xmrlpc.php"] [unique_id "apK9kS04twRPFuquKD2e-gAAAIg"]
[Sat Aug 29 05:08:01.803165 2026] [security2:error] [pid 1028675:tid 1028813] [client 20.52.41.200:5312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK9kddHPfW2QFvhmL4AZQAAAAM"]
[Sat Aug 29 05:08:01.805186 2026] [security2:error] [pid 1028675:tid 1028902] [client 20.104.104.62:63039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/alog.php"] [unique_id "apK9kddHPfW2QFvhmL4AZgAAAFw"]
[Sat Aug 29 05:08:01.838364 2026] [security2:error] [pid 1034096:tid 1034351] [client 68.155.159.216:49199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-login.php"] [unique_id "apK9kS04twRPFuquKD2e-wAAAOk"]
[Sat Aug 29 05:08:01.842378 2026] [security2:error] [pid 1028675:tid 1028828] [client 20.104.104.62:48001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/lfi.php"] [unique_id "apK9kddHPfW2QFvhmL4AZwAAABI"]
[Sat Aug 29 05:08:01.850183 2026] [security2:error] [pid 1028675:tid 1028840] [client 20.240.128.207:22100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/shell.php"] [unique_id "apK9kddHPfW2QFvhmL4AaAAAAB4"]
[Sat Aug 29 05:08:01.853491 2026] [security2:error] [pid 1028675:tid 1028907] [client 20.203.141.11:45439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-cron.php"] [unique_id "apK9kddHPfW2QFvhmL4AaQAAAGE"]
[Sat Aug 29 05:08:01.855106 2026] [security2:error] [pid 1034096:tid 1034270] [client 20.104.49.130:60760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/berlin.php"] [unique_id "apK9kS04twRPFuquKD2e_AAAAJg"]
[Sat Aug 29 05:08:01.859614 2026] [security2:error] [pid 1028675:tid 1028835] [client 20.63.219.114:16669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/wp-contentt.php"] [unique_id "apK9kddHPfW2QFvhmL4AagAAABk"]
[Sat Aug 29 05:08:01.876335 2026] [security2:error] [pid 1028675:tid 1028898] [client 20.63.81.20:55388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/000.php/index.php"] [unique_id "apK9kddHPfW2QFvhmL4AawAAAFg"]
[Sat Aug 29 05:08:01.891640 2026] [security2:error] [pid 1034096:tid 1034312] [client 158.23.184.117:20519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/.well-known/acme-challenge/sx.php"] [unique_id "apK9kS04twRPFuquKD2e_QAAAMI"]
[Sat Aug 29 05:08:01.892691 2026] [security2:error] [pid 1034096:tid 1034308] [client 158.23.184.117:55634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/update/da222.php"] [unique_id "apK9kS04twRPFuquKD2e_gAAAL4"]
[Sat Aug 29 05:08:01.912428 2026] [security2:error] [pid 1034096:tid 1034323] [client 4.205.62.107:24974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/queue.php"] [unique_id "apK9kS04twRPFuquKD2e_wAAAM0"]
[Sat Aug 29 05:08:01.915235 2026] [security2:error] [pid 1028675:tid 1028903] [client 52.139.37.240:16906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "apK9kddHPfW2QFvhmL4AbAAAAF0"]
[Sat Aug 29 05:08:01.935856 2026] [security2:error] [pid 1034096:tid 1034311] [client 52.139.37.240:61776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abmac.cn"] [uri "/add_actualites.php"] [unique_id "apK9kS04twRPFuquKD2fAAAAAME"]
[Sat Aug 29 05:08:01.939720 2026] [security2:error] [pid 1034096:tid 1034313] [client 20.104.104.62:53163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/adin.php"] [unique_id "apK9kS04twRPFuquKD2fAgAAAMM"]
[Sat Aug 29 05:08:01.943262 2026] [security2:error] [pid 1034096:tid 1034362] [client 4.205.62.107:22174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/konfig.php"] [unique_id "apK9kS04twRPFuquKD2fAwAAAPQ"]
[Sat Aug 29 05:08:01.950042 2026] [security2:error] [pid 1034096:tid 1034353] [client 158.23.147.79:48265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/bk/index.php"] [unique_id "apK9kS04twRPFuquKD2fBQAAAOs"]
[Sat Aug 29 05:08:01.959978 2026] [security2:error] [pid 1034096:tid 1034292] [client 20.104.104.62:47563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/cgi-alfa.php"] [unique_id "apK9kS04twRPFuquKD2fBgAAAK4"]
[Sat Aug 29 05:08:01.975329 2026] [security2:error] [pid 1034096:tid 1034358] [client 40.83.93.50:9155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/wp-configs.php"] [unique_id "apK9kS04twRPFuquKD2fBwAAAPA"]
[Sat Aug 29 05:08:01.985249 2026] [security2:error] [pid 1034096:tid 1034271] [client 20.104.104.62:37591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/quoys.php"] [unique_id "apK9kS04twRPFuquKD2fCAAAAJk"]
[Sat Aug 29 05:08:02.008371 2026] [security2:error] [pid 1034096:tid 1034260] [client 20.63.81.20:55448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/Jcrop.php"] [unique_id "apK9ki04twRPFuquKD2fCQAAAI4"]
[Sat Aug 29 05:08:02.031482 2026] [security2:error] [pid 1034096:tid 1034346] [client 51.68.236.92:28233] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.thegrowingplace.ca"] [uri "/robots.txt"] [unique_id "apK9ki04twRPFuquKD2fCgAAAOQ"]
[Sat Aug 29 05:08:02.031610 2026] [security2:error] [pid 1034096:tid 1034346] [client 51.68.236.92:28233] ModSecurity: Warning. Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.thegrowingplace.ca"] [uri "/robots.txt"] [unique_id "apK9ki04twRPFuquKD2fCgAAAOQ"]
[Sat Aug 29 05:08:02.037899 2026] [security2:error] [pid 1034096:tid 1034330] [client 158.23.184.117:55646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/xmr.php"] [unique_id "apK9ki04twRPFuquKD2fCwAAANQ"]
[Sat Aug 29 05:08:02.037901 2026] [security2:error] [pid 1028675:tid 1028935] [client 158.23.184.117:20494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/.well-known/admin.php"] [unique_id "apK9ktdHPfW2QFvhmL4AbwAAAH0"]
[Sat Aug 29 05:08:02.069689 2026] [security2:error] [pid 1034096:tid 1034296] [client 20.203.141.11:18231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/xxx.php"] [unique_id "apK9ki04twRPFuquKD2fDwAAALI"]
[Sat Aug 29 05:08:02.072662 2026] [security2:error] [pid 1034096:tid 1034334] [client 68.155.159.216:6094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/hehehehe.php"] [unique_id "apK9ki04twRPFuquKD2fEwAAANg"]
[Sat Aug 29 05:08:02.091654 2026] [security2:error] [pid 1034096:tid 1034290] [client 20.104.104.62:2460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/sf9.php"] [unique_id "apK9ki04twRPFuquKD2fFAAAAKw"]
[Sat Aug 29 05:08:02.104598 2026] [security2:error] [pid 1034096:tid 1034299] [client 38.159.108.16:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/en/categorie-produit/vegetables/"] [unique_id "apK9ki04twRPFuquKD2fFQAAALU"]
[Sat Aug 29 05:08:02.110752 2026] [security2:error] [pid 1034096:tid 1034367] [client 52.139.37.240:16452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9ki04twRPFuquKD2fFgAAAPk"]
[Sat Aug 29 05:08:02.119142 2026] [security2:error] [pid 1034096:tid 1034253] [client 20.197.61.180:11372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/alumni_reg.php"] [unique_id "apK9ki04twRPFuquKD2fFwAAAIc"]
[Sat Aug 29 05:08:02.128307 2026] [security2:error] [pid 1028675:tid 1028879] [client 20.104.104.62:48063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/vbbn.php"] [unique_id "apK9ktdHPfW2QFvhmL4AdAAAAEU"]
[Sat Aug 29 05:08:02.131215 2026] [security2:error] [pid 1034096:tid 1034302] [client 52.139.37.240:61797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abmac.cn"] [uri "/browse.php"] [unique_id "apK9ki04twRPFuquKD2fGQAAALg"]
[Sat Aug 29 05:08:02.147963 2026] [security2:error] [pid 1028675:tid 1028837] [client 20.63.81.20:55535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/35iDq8NAjLu.php"] [unique_id "apK9ktdHPfW2QFvhmL4AdQAAABs"]
[Sat Aug 29 05:08:02.152402 2026] [security2:error] [pid 1028675:tid 1028872] [client 40.83.93.50:9198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/fi2.php"] [unique_id "apK9ktdHPfW2QFvhmL4AdgAAAD4"]
[Sat Aug 29 05:08:02.180531 2026] [security2:error] [pid 1028675:tid 1028920] [client 68.155.159.216:12206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/log-mama/function.php"] [unique_id "apK9ktdHPfW2QFvhmL4AeAAAAG4"]
[Sat Aug 29 05:08:02.182153 2026] [security2:error] [pid 1034096:tid 1034306] [client 158.23.184.117:20482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/.well-known/api.php"] [unique_id "apK9ki04twRPFuquKD2fGwAAALw"]
[Sat Aug 29 05:08:02.192259 2026] [security2:error] [pid 1028675:tid 1028862] [client 158.23.184.117:2779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK9ktdHPfW2QFvhmL4AeQAAADQ"]
[Sat Aug 29 05:08:02.198194 2026] [security2:error] [pid 1034096:tid 1034327] [client 20.196.209.81:17314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-admin/options-general.php"] [unique_id "apK9ki04twRPFuquKD2fHQAAANE"]
[Sat Aug 29 05:08:02.231414 2026] [security2:error] [pid 1034096:tid 1034325] [client 20.104.104.62:56531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/lte7.php"] [unique_id "apK9ki04twRPFuquKD2fHgAAAM8"]
[Sat Aug 29 05:08:02.240595 2026] [security2:error] [pid 1034096:tid 1034261] [client 4.205.62.107:56028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-class.php"] [unique_id "apK9ki04twRPFuquKD2fHwAAAI8"]
[Sat Aug 29 05:08:02.257883 2026] [security2:error] [pid 1028675:tid 1028849] [client 20.52.41.200:5363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-good.php"] [unique_id "apK9ktdHPfW2QFvhmL4AegAAACc"]
[Sat Aug 29 05:08:02.272285 2026] [security2:error] [pid 1034096:tid 1034274] [client 20.104.104.62:48011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/rfi.php"] [unique_id "apK9ki04twRPFuquKD2fIgAAAJw"]
[Sat Aug 29 05:08:02.280367 2026] [security2:error] [pid 1028675:tid 1028887] [client 20.104.49.130:48524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/wen.php"] [unique_id "apK9ktdHPfW2QFvhmL4AewAAAE0"]
[Sat Aug 29 05:08:02.285204 2026] [security2:error] [pid 1034096:tid 1034301] [client 20.63.81.20:55443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/btx25.php"] [unique_id "apK9ki04twRPFuquKD2fJAAAALc"]
[Sat Aug 29 05:08:02.295224 2026] [security2:error] [pid 1028675:tid 1028917] [client 20.63.219.114:18512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/theme.php"] [unique_id "apK9ktdHPfW2QFvhmL4AfAAAAGs"]
[Sat Aug 29 05:08:02.315719 2026] [security2:error] [pid 1028675:tid 1028931] [client 20.104.104.62:20682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/cok.php"] [unique_id "apK9ktdHPfW2QFvhmL4AfgAAAHk"]
[Sat Aug 29 05:08:02.318769 2026] [security2:error] [pid 1028675:tid 1028894] [client 20.203.141.11:35208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-block.php"] [unique_id "apK9ktdHPfW2QFvhmL4AfwAAAFQ"]
[Sat Aug 29 05:08:02.324633 2026] [security2:error] [pid 1034096:tid 1034361] [client 158.23.184.117:57841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/.well-known/chosen.php"] [unique_id "apK9ki04twRPFuquKD2fJgAAAPM"]
[Sat Aug 29 05:08:02.325298 2026] [security2:error] [pid 1034096:tid 1034304] [client 52.139.37.240:61786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abmac.cn"] [uri "/contentloader1.php"] [unique_id "apK9ki04twRPFuquKD2fJwAAALo"]
[Sat Aug 29 05:08:02.339170 2026] [security2:error] [pid 1028675:tid 1028825] [client 20.240.128.207:24704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/elp.php"] [unique_id "apK9ktdHPfW2QFvhmL4AgAAAAA8"]
[Sat Aug 29 05:08:02.342164 2026] [security2:error] [pid 1034096:tid 1034264] [client 158.23.184.117:55636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/wp-act.php"] [unique_id "apK9ki04twRPFuquKD2fKQAAAJI"]
[Sat Aug 29 05:08:02.344399 2026] [security2:error] [pid 1028675:tid 1028925] [client 20.104.104.62:37669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9ktdHPfW2QFvhmL4AgQAAAHM"]
[Sat Aug 29 05:08:02.350382 2026] [autoindex:error] [pid 1034096:tid 1034309] [client 52.139.37.240:0] AH01276: Cannot serve directory /home4/fairfax6/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:08:02.372144 2026] [security2:error] [pid 1034096:tid 1034363] [client 20.100.175.163:1178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/install.php"] [unique_id "apK9ki04twRPFuquKD2fKgAAAPU"]
[Sat Aug 29 05:08:02.386522 2026] [security2:error] [pid 1034096:tid 1034371] [client 158.23.147.79:17496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/index/function.php"] [unique_id "apK9ki04twRPFuquKD2fKwAAAP0"]
[Sat Aug 29 05:08:02.391916 2026] [security2:error] [pid 1028675:tid 1028855] [client 20.104.104.62:2492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/tanjiro.php"] [unique_id "apK9ktdHPfW2QFvhmL4AggAAAC0"]
[Sat Aug 29 05:08:02.399632 2026] [security2:error] [pid 1028675:tid 1028867] [client 158.23.147.79:17480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK9ktdHPfW2QFvhmL4AhQAAADk"]
[Sat Aug 29 05:08:02.409431 2026] [security2:error] [pid 1028675:tid 1028892] [client 20.104.104.62:48023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/tajj.php"] [unique_id "apK9ktdHPfW2QFvhmL4AhgAAAFI"]
[Sat Aug 29 05:08:02.410299 2026] [security2:error] [pid 1034096:tid 1034258] [client 20.104.49.130:45723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9ki04twRPFuquKD2fLgAAAIw"]
[Sat Aug 29 05:08:02.412843 2026] [security2:error] [pid 1034096:tid 1034252] [client 20.63.81.20:55500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/radio.php"] [unique_id "apK9ki04twRPFuquKD2fLwAAAIY"]
[Sat Aug 29 05:08:02.416338 2026] [security2:error] [pid 1034096:tid 1034289] [client 52.139.37.240:16474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/wp-index.php"] [unique_id "apK9ki04twRPFuquKD2fMAAAAKs"]
[Sat Aug 29 05:08:02.433028 2026] [security2:error] [pid 1034096:tid 1034322] [client 34.81.157.26:55530] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/id_rsa"] [unique_id "apK9ki04twRPFuquKD2fMgAAAMw"]
[Sat Aug 29 05:08:02.433413 2026] [security2:error] [pid 1034096:tid 1034357] [client 34.81.157.26:55550] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/id_dsa"] [unique_id "apK9ki04twRPFuquKD2fMwAAAO8"]
[Sat Aug 29 05:08:02.441052 2026] [security2:error] [pid 1034096:tid 1034347] [client 34.81.157.26:55566] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/key.pem"] [unique_id "apK9ki04twRPFuquKD2fNQAAAOU"]
[Sat Aug 29 05:08:02.442838 2026] [security2:error] [pid 1034096:tid 1034318] [client 40.83.93.50:14728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/essexec.php"] [unique_id "apK9ki04twRPFuquKD2fNwAAAMg"]
[Sat Aug 29 05:08:02.444168 2026] [security2:error] [pid 1028675:tid 1028824] [client 34.81.157.26:55578] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/privatekey.key"] [unique_id "apK9ktdHPfW2QFvhmL4AiQAAAA4"]
[Sat Aug 29 05:08:02.444780 2026] [security2:error] [pid 1028675:tid 1028908] [client 34.81.157.26:55616] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/wp-config.php.bak"] [unique_id "apK9ktdHPfW2QFvhmL4AigAAAGI"]
[Sat Aug 29 05:08:02.448889 2026] [security2:error] [pid 1028675:tid 1028819] [client 34.81.157.26:55628] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/wp-config.php.old"] [unique_id "apK9ktdHPfW2QFvhmL4AiwAAAAk"]
[Sat Aug 29 05:08:02.450499 2026] [security2:error] [pid 1034096:tid 1034315] [client 34.81.157.26:55606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.157.81.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/wp-config.php"] [unique_id "apK9ki04twRPFuquKD2fOgAAAMU"]
[Sat Aug 29 05:08:02.456072 2026] [security2:error] [pid 1028675:tid 1028901] [client 34.81.157.26:55636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.157.81.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/config.php"] [unique_id "apK9ktdHPfW2QFvhmL4AjQAAAFs"]
[Sat Aug 29 05:08:02.458033 2026] [security2:error] [pid 1028675:tid 1028832] [client 34.81.157.26:55650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.157.81.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/config.php.bak"] [unique_id "apK9ktdHPfW2QFvhmL4AjgAAABY"]
[Sat Aug 29 05:08:02.467753 2026] [security2:error] [pid 1034096:tid 1034277] [client 158.23.184.117:57809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/.well-known/config.php"] [unique_id "apK9ki04twRPFuquKD2fQAAAAJ8"]
[Sat Aug 29 05:08:02.487179 2026] [security2:error] [pid 1028675:tid 1028904] [client 158.23.184.117:2808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/fff.php"] [unique_id "apK9ktdHPfW2QFvhmL4AkgAAAF4"]
[Sat Aug 29 05:08:02.493261 2026] [security2:error] [pid 1034096:tid 1034378] [client 20.104.104.62:40073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9ki04twRPFuquKD2fQQAAAQQ"]
[Sat Aug 29 05:08:02.521815 2026] [security2:error] [pid 1028675:tid 1028923] [client 52.139.37.240:63872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abmac.cn"] [uri "/upfile.php"] [unique_id "apK9ktdHPfW2QFvhmL4AkwAAAHE"]
[Sat Aug 29 05:08:02.522802 2026] [security2:error] [pid 1028675:tid 1028918] [client 20.104.104.62:62926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/Rk41.php"] [unique_id "apK9ktdHPfW2QFvhmL4AlAAAAGw"]
[Sat Aug 29 05:08:02.542539 2026] [security2:error] [pid 1034096:tid 1034370] [client 20.63.81.20:55518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/dex.php"] [unique_id "apK9ki04twRPFuquKD2fRAAAAPw"]
[Sat Aug 29 05:08:02.549919 2026] [security2:error] [pid 1028675:tid 1028840] [client 68.155.159.216:33763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK9ktdHPfW2QFvhmL4AlQAAAB4"]
[Sat Aug 29 05:08:02.561231 2026] [security2:error] [pid 1034096:tid 1034313] [client 4.205.62.107:9194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/ok.php"] [unique_id "apK9ki04twRPFuquKD2fSAAAAMM"]
[Sat Aug 29 05:08:02.565324 2026] [security2:error] [pid 1034096:tid 1034353] [client 20.104.104.62:48062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/grsiuk.php"] [unique_id "apK9ki04twRPFuquKD2fSQAAAOs"]
[Sat Aug 29 05:08:02.575499 2026] [core:error] [pid 1028675:tid 1028839] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:02.575517 2026] [core:error] [pid 1028675:tid 1028839] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:02.578407 2026] [core:error] [pid 1034096:tid 1034365] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:02.578423 2026] [core:error] [pid 1034096:tid 1034365] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:02.584211 2026] [core:error] [pid 1034096:tid 1034292] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:02.584226 2026] [core:error] [pid 1034096:tid 1034292] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:02.585853 2026] [security2:error] [pid 1034096:tid 1034348] [client 158.23.147.79:50034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK9ki04twRPFuquKD2fTgAAAOY"]
[Sat Aug 29 05:08:02.589872 2026] [security2:error] [pid 1034096:tid 1034351] [client 20.196.209.81:9086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-admin/options.php"] [unique_id "apK9ki04twRPFuquKD2fUAAAAOk"]
[Sat Aug 29 05:08:02.589979 2026] [core:error] [pid 1034096:tid 1034339] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:02.589990 2026] [core:error] [pid 1034096:tid 1034339] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:02.590726 2026] [core:error] [pid 1028675:tid 1028846] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:02.590740 2026] [core:error] [pid 1028675:tid 1028846] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:02.590994 2026] [core:error] [pid 1034096:tid 1034340] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:02.591003 2026] [core:error] [pid 1034096:tid 1034340] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:02.602311 2026] [core:error] [pid 1028675:tid 1028898] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:02.602331 2026] [core:error] [pid 1028675:tid 1028898] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:02.611278 2026] [security2:error] [pid 1028675:tid 1028916] [client 158.23.184.117:57817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/.well-known/core.php"] [unique_id "apK9ktdHPfW2QFvhmL4AmwAAAGo"]
[Sat Aug 29 05:08:02.616141 2026] [security2:error] [pid 1034096:tid 1034321] [client 68.155.159.216:18384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK9ki04twRPFuquKD2fUgAAAMs"]
[Sat Aug 29 05:08:02.618327 2026] [security2:error] [pid 1034096:tid 1034311] [client 52.139.37.240:16465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/ww2.php"] [unique_id "apK9ki04twRPFuquKD2fVAAAAME"]
[Sat Aug 29 05:08:02.623591 2026] [security2:error] [pid 1034096:tid 1034262] [client 40.83.93.50:9208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/1p.php"] [unique_id "apK9ki04twRPFuquKD2fVQAAAJA"]
[Sat Aug 29 05:08:02.632171 2026] [security2:error] [pid 1034096:tid 1034331] [client 158.23.184.117:2762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/.tmb/dropdown.php"] [unique_id "apK9ki04twRPFuquKD2fVgAAANU"]
[Sat Aug 29 05:08:02.633993 2026] [security2:error] [pid 1034096:tid 1034320] [client 20.104.104.62:40097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/baee.php"] [unique_id "apK9ki04twRPFuquKD2fVwAAAMo"]
[Sat Aug 29 05:08:02.652393 2026] [security2:error] [pid 1034096:tid 1034298] [client 158.23.147.79:35658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK9ki04twRPFuquKD2fWAAAALQ"]
[Sat Aug 29 05:08:02.655314 2026] [security2:error] [pid 1028675:tid 1028737] [remote 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK9ktdHPfW2QFvhmL4AnAAARjg"]
[Sat Aug 29 05:08:02.655434 2026] [security2:error] [pid 1028675:tid 1028880] [client 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK9ktdHPfW2QFvhmL4AnAAARjg"]
[Sat Aug 29 05:08:02.672938 2026] [core:error] [pid 1034096:tid 1034287] [client 68.155.159.216:51220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:02.672951 2026] [core:error] [pid 1034096:tid 1034287] [client 68.155.159.216:51220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:02.683712 2026] [security2:error] [pid 1034096:tid 1034327] [client 20.63.81.20:55512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/giodywky.php"] [unique_id "apK9ki04twRPFuquKD2fXAAAANE"]
[Sat Aug 29 05:08:02.683748 2026] [security2:error] [pid 1034096:tid 1034255] [client 20.63.219.114:1796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/alumni_reg.php"] [unique_id "apK9ki04twRPFuquKD2fWwAAAIk"]
[Sat Aug 29 05:08:02.695678 2026] [security2:error] [pid 1034096:tid 1034374] [client 20.104.104.62:62959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/7logs.php"] [unique_id "apK9ki04twRPFuquKD2fXQAAAQA"]
[Sat Aug 29 05:08:02.705077 2026] [security2:error] [pid 1034096:tid 1034301] [client 68.155.159.216:56516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK9ki04twRPFuquKD2fYAAAALc"]
[Sat Aug 29 05:08:02.708681 2026] [security2:error] [pid 1028675:tid 1028828] [client 62.60.130.128:52735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.130.60.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dseaver.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "apK9ktdHPfW2QFvhmL4AngAAABI"]
[Sat Aug 29 05:08:02.713585 2026] [security2:error] [pid 1034096:tid 1034362] [client 20.52.41.200:5330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "apK9ki04twRPFuquKD2fYQAAAPQ"]
[Sat Aug 29 05:08:02.718775 2026] [security2:error] [pid 1034096:tid 1034304] [client 68.155.159.216:16291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-blog-header.php"] [unique_id "apK9ki04twRPFuquKD2fYgAAALo"]
[Sat Aug 29 05:08:02.719838 2026] [security2:error] [pid 1034096:tid 1034284] [client 52.139.37.240:61788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abmac.cn"] [uri "/form.php"] [unique_id "apK9ki04twRPFuquKD2fYwAAAKY"]
[Sat Aug 29 05:08:02.720201 2026] [security2:error] [pid 1028675:tid 1028920] [client 68.155.159.216:51467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK9ktdHPfW2QFvhmL4AnwAAAG4"]
[Sat Aug 29 05:08:02.743969 2026] [security2:error] [pid 1028675:tid 1028821] [client 20.104.104.62:20850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/cgipro.php"] [unique_id "apK9ktdHPfW2QFvhmL4AoAAAAAs"]
[Sat Aug 29 05:08:02.750755 2026] [security2:error] [pid 1034096:tid 1034268] [client 20.104.104.62:37599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/ahy66.php"] [unique_id "apK9ki04twRPFuquKD2fZQAAAJY"]
[Sat Aug 29 05:08:02.755792 2026] [security2:error] [pid 1034096:tid 1034278] [client 158.23.184.117:20573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/.well-known/data.php"] [unique_id "apK9ki04twRPFuquKD2fZgAAAKA"]
[Sat Aug 29 05:08:02.767270 2026] [security2:error] [pid 1034096:tid 1034322] [client 20.104.104.62:40120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/d12.php"] [unique_id "apK9ki04twRPFuquKD2fZwAAAMw"]
[Sat Aug 29 05:08:02.774697 2026] [security2:error] [pid 1034096:tid 1034347] [client 20.48.250.41:19465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/bgymj.php"] [unique_id "apK9ki04twRPFuquKD2faQAAAOU"]
[Sat Aug 29 05:08:02.774722 2026] [security2:error] [pid 1034096:tid 1034264] [client 158.23.184.117:55623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/robots.php"] [unique_id "apK9ki04twRPFuquKD2faAAAAJI"]
[Sat Aug 29 05:08:02.778670 2026] [security2:error] [pid 1028675:tid 1028860] [client 20.203.141.11:43353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-includes/fonts/admin.php"] [unique_id "apK9ktdHPfW2QFvhmL4AoQAAADI"]
[Sat Aug 29 05:08:02.779622 2026] [security2:error] [pid 1034096:tid 1034364] [client 103.185.242.143:51265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK9ki04twRPFuquKD2fagAAAPY"]
[Sat Aug 29 05:08:02.779702 2026] [security2:error] [pid 1034096:tid 1034364] [client 103.185.242.143:51265] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK9ki04twRPFuquKD2fagAAAPY"]
[Sat Aug 29 05:08:02.788092 2026] [security2:error] [pid 1034096:tid 1034315] [client 158.23.147.79:6087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/file17.php"] [unique_id "apK9ki04twRPFuquKD2fawAAAMU"]
[Sat Aug 29 05:08:02.804900 2026] [security2:error] [pid 1034096:tid 1034283] [client 158.23.147.79:26381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-includes/index.php"] [unique_id "apK9ki04twRPFuquKD2fbAAAAKU"]
[Sat Aug 29 05:08:02.807657 2026] [security2:error] [pid 1034096:tid 1034378] [client 4.205.62.107:58399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/lm15.php"] [unique_id "apK9ki04twRPFuquKD2fbgAAAQQ"]
[Sat Aug 29 05:08:02.811593 2026] [security2:error] [pid 1034096:tid 1034324] [client 20.63.81.20:55483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/wp-kz.php"] [unique_id "apK9ki04twRPFuquKD2fcAAAAM4"]
[Sat Aug 29 05:08:02.822680 2026] [security2:error] [pid 1028675:tid 1028849] [client 52.139.37.240:16741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/7logs.php"] [unique_id "apK9ktdHPfW2QFvhmL4AogAAACc"]
[Sat Aug 29 05:08:02.823121 2026] [security2:error] [pid 1034096:tid 1034306] [client 20.240.128.207:31052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-content/cong.php"] [unique_id "apK9ki04twRPFuquKD2fcgAAALw"]
[Sat Aug 29 05:08:02.829877 2026] [security2:error] [pid 1034096:tid 1034272] [client 20.197.61.180:1695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/colors.php"] [unique_id "apK9ki04twRPFuquKD2fcwAAAJo"]
[Sat Aug 29 05:08:02.839026 2026] [security2:error] [pid 1034096:tid 1034280] [client 20.48.250.41:38876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/knmt.php"] [unique_id "apK9ki04twRPFuquKD2fdAAAAKI"]
[Sat Aug 29 05:08:02.845424 2026] [security2:error] [pid 1028675:tid 1028858] [client 20.104.49.130:58090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.carlosmua.com"] [uri "/xwx1.php"] [unique_id "apK9ktdHPfW2QFvhmL4ApAAAADA"]
[Sat Aug 29 05:08:02.856760 2026] [security2:error] [pid 1034096:tid 1034292] [client 158.23.147.79:54360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK9ki04twRPFuquKD2fdQAAAK4"]
[Sat Aug 29 05:08:02.863200 2026] [security2:error] [pid 1028675:tid 1028825] [client 4.205.62.107:21926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/8.php"] [unique_id "apK9ktdHPfW2QFvhmL4ApQAAAA8"]
[Sat Aug 29 05:08:02.867082 2026] [security2:error] [pid 1034096:tid 1034274] [client 20.100.175.163:29996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/ioxi-o.php"] [unique_id "apK9ki04twRPFuquKD2fdgAAAJw"]
[Sat Aug 29 05:08:02.876110 2026] [security2:error] [pid 1034096:tid 1034346] [client 20.104.104.62:53839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/sf.php"] [unique_id "apK9ki04twRPFuquKD2fdwAAAOQ"]
[Sat Aug 29 05:08:02.882459 2026] [security2:error] [pid 1028675:tid 1028812] [client 158.23.147.79:11309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/file17.php"] [unique_id "apK9ktdHPfW2QFvhmL4ApgAAAAI"]
[Sat Aug 29 05:08:02.893454 2026] [security2:error] [pid 1028675:tid 1028855] [client 20.104.104.62:37622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/gaje.php"] [unique_id "apK9ktdHPfW2QFvhmL4AqAAAAC0"]
[Sat Aug 29 05:08:02.902576 2026] [security2:error] [pid 1034096:tid 1034271] [client 158.23.184.117:57854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/.well-known/db-status.php"] [unique_id "apK9ki04twRPFuquKD2feQAAAJk"]
[Sat Aug 29 05:08:02.909601 2026] [security2:error] [pid 1034096:tid 1034330] [client 20.104.104.62:40085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/yyy.php"] [unique_id "apK9ki04twRPFuquKD2fewAAANQ"]
[Sat Aug 29 05:08:02.913953 2026] [security2:error] [pid 1034096:tid 1034296] [client 20.48.250.41:19501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/ws69.php"] [unique_id "apK9ki04twRPFuquKD2ffAAAALI"]
[Sat Aug 29 05:08:02.921548 2026] [security2:error] [pid 1034096:tid 1034359] [client 40.83.93.50:14729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/hello.php"] [unique_id "apK9ki04twRPFuquKD2ffQAAAPE"]
[Sat Aug 29 05:08:02.926048 2026] [security2:error] [pid 1028675:tid 1028931] [client 52.139.37.240:61794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abmac.cn"] [uri "/wp-sigunq.php"] [unique_id "apK9ktdHPfW2QFvhmL4AqQAAAHk"]
[Sat Aug 29 05:08:02.926353 2026] [security2:error] [pid 1034096:tid 1034345] [client 158.23.184.117:55625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/.well-known/install.php"] [unique_id "apK9ki04twRPFuquKD2ffgAAAOM"]
[Sat Aug 29 05:08:02.945774 2026] [security2:error] [pid 1034096:tid 1034276] [client 68.155.159.216:49220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK9ki04twRPFuquKD2fgQAAAJ4"]
[Sat Aug 29 05:08:02.956846 2026] [security2:error] [pid 1034096:tid 1034300] [client 20.63.81.20:55481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/wp-includes/ID3/getid.php"] [unique_id "apK9ki04twRPFuquKD2fhAAAALY"]
[Sat Aug 29 05:08:02.971188 2026] [core:error] [pid 1034096:tid 1034270] [client 45.148.10.166:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:02.971212 2026] [core:error] [pid 1034096:tid 1034270] [client 45.148.10.166:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:02.995195 2026] [security2:error] [pid 1028675:tid 1028914] [client 20.48.250.41:38850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/sbhu.php"] [unique_id "apK9ktdHPfW2QFvhmL4ArQAAAGg"]
[Sat Aug 29 05:08:03.011562 2026] [security2:error] [pid 1028675:tid 1028859] [client 20.196.209.81:9040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-admin/panel.php"] [unique_id "apK9k9dHPfW2QFvhmL4ArgAAADE"]
[Sat Aug 29 05:08:03.015464 2026] [security2:error] [pid 1028675:tid 1028844] [client 20.104.104.62:56524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/super.php"] [unique_id "apK9k9dHPfW2QFvhmL4ArwAAACI"]
[Sat Aug 29 05:08:03.022005 2026] [security2:error] [pid 1034096:tid 1034294] [client 52.139.37.240:56100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/ac.php"] [unique_id "apK9ky04twRPFuquKD2fiQAAALA"]
[Sat Aug 29 05:08:03.041176 2026] [security2:error] [pid 1028675:tid 1028845] [client 20.63.219.114:18525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/colors.php"] [unique_id "apK9k9dHPfW2QFvhmL4AsAAAACM"]
[Sat Aug 29 05:08:03.048027 2026] [security2:error] [pid 1034096:tid 1034321] [client 158.23.184.117:57834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/.well-known/f35.php"] [unique_id "apK9ky04twRPFuquKD2figAAAMs"]
[Sat Aug 29 05:08:03.056863 2026] [security2:error] [pid 1028675:tid 1028811] [client 158.23.147.79:48339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/first.php"] [unique_id "apK9k9dHPfW2QFvhmL4AsQAAAAE"]
[Sat Aug 29 05:08:03.094122 2026] [security2:error] [pid 1034096:tid 1034305] [client 4.205.62.107:22504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/nw.php"] [unique_id "apK9ky04twRPFuquKD2flAAAALs"]
[Sat Aug 29 05:08:03.094787 2026] [security2:error] [pid 1034096:tid 1034362] [client 20.63.81.20:55509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/session.php"] [unique_id "apK9ky04twRPFuquKD2flQAAAPQ"]
[Sat Aug 29 05:08:03.098527 2026] [security2:error] [pid 1028675:tid 1028780] [remote 74.7.227.154:37794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK9k9dHPfW2QFvhmL4AsgAAXGM"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwp-easycart%2Fadmin%2Felementor
[Sat Aug 29 05:08:03.115416 2026] [security2:error] [pid 1028675:tid 1028900] [client 20.104.49.130:45738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/tool.php"] [unique_id "apK9k9dHPfW2QFvhmL4AswAAAFo"]
[Sat Aug 29 05:08:03.123584 2026] [security2:error] [pid 1034096:tid 1034288] [client 40.83.93.50:8405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/Njima.php"] [unique_id "apK9ky04twRPFuquKD2flwAAAKo"]
[Sat Aug 29 05:08:03.124126 2026] [security2:error] [pid 1034096:tid 1034320] [client 52.139.37.240:63895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abmac.cn"] [uri "/07.php"] [unique_id "apK9ky04twRPFuquKD2fmAAAAMo"]
[Sat Aug 29 05:08:03.127472 2026] [security2:error] [pid 1034096:tid 1034309] [client 158.23.184.117:2798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/wp-admin/about.php"] [unique_id "apK9ky04twRPFuquKD2fmQAAAL8"]
[Sat Aug 29 05:08:03.149903 2026] [security2:error] [pid 1034096:tid 1034282] [client 4.205.62.107:26641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/doc.php"] [unique_id "apK9ky04twRPFuquKD2fmgAAAKQ"]
[Sat Aug 29 05:08:03.154802 2026] [security2:error] [pid 1034096:tid 1034342] [client 20.52.41.200:5345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/abcd.php"] [unique_id "apK9ky04twRPFuquKD2fmwAAAOA"]
[Sat Aug 29 05:08:03.166866 2026] [security2:error] [pid 1034096:tid 1034268] [client 68.155.159.216:24507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-admin/index.php"] [unique_id "apK9ky04twRPFuquKD2fnAAAAJY"]
[Sat Aug 29 05:08:03.191728 2026] [security2:error] [pid 1034096:tid 1034344] [client 158.23.184.117:20512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK9ky04twRPFuquKD2fnQAAAOI"]
[Sat Aug 29 05:08:03.222108 2026] [security2:error] [pid 1034096:tid 1034277] [client 20.63.81.20:55499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/eagle.php"] [unique_id "apK9ky04twRPFuquKD2fngAAAJ8"]
[Sat Aug 29 05:08:03.222725 2026] [security2:error] [pid 1034096:tid 1034363] [client 52.139.37.240:56117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/ctex1.php"] [unique_id "apK9ky04twRPFuquKD2fnwAAAPU"]
[Sat Aug 29 05:08:03.243234 2026] [security2:error] [pid 1034096:tid 1034301] [client 20.203.141.11:23669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/m.php"] [unique_id "apK9ky04twRPFuquKD2foQAAALc"]
[Sat Aug 29 05:08:03.261928 2026] [security2:error] [pid 1028675:tid 1028833] [client 68.155.159.216:33711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-admin/css/index.php"] [unique_id "apK9k9dHPfW2QFvhmL4AtAAAABc"]
[Sat Aug 29 05:08:03.273571 2026] [security2:error] [pid 1028675:tid 1028847] [client 158.23.184.117:55647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/wp-content/backup.php"] [unique_id "apK9k9dHPfW2QFvhmL4AtQAAACU"]
[Sat Aug 29 05:08:03.287079 2026] [security2:error] [pid 1034096:tid 1034280] [client 68.155.159.216:12133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/bk/index.php"] [unique_id "apK9ky04twRPFuquKD2fowAAAKI"]
[Sat Aug 29 05:08:03.320034 2026] [security2:error] [pid 1034096:tid 1034303] [client 52.139.37.240:60601] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "abmac.cn"] [uri "/c99.php"] [unique_id "apK9ky04twRPFuquKD2fpAAAALk"]
[Sat Aug 29 05:08:03.321368 2026] [security2:error] [pid 1034096:tid 1034360] [client 20.240.128.207:22080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK9ky04twRPFuquKD2fpQAAAPI"]
[Sat Aug 29 05:08:03.334786 2026] [security2:error] [pid 1028675:tid 1028878] [client 158.23.184.117:20499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/.well-known/home.php"] [unique_id "apK9k9dHPfW2QFvhmL4AtgAAAEQ"]
[Sat Aug 29 05:08:03.356386 2026] [security2:error] [pid 1028675:tid 1028898] [client 20.63.81.20:55376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/up-kon.php"] [unique_id "apK9k9dHPfW2QFvhmL4AtwAAAFg"]
[Sat Aug 29 05:08:03.375543 2026] [security2:error] [pid 1034096:tid 1034359] [client 4.205.62.107:53179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/database.php"] [unique_id "apK9ky04twRPFuquKD2fqAAAAPE"]
[Sat Aug 29 05:08:03.394095 2026] [security2:error] [pid 1028675:tid 1028937] [client 195.178.110.247:3918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lisakayguitar.com"] [uri "/index.php"] [unique_id "apK9k9dHPfW2QFvhmL4AuQAAAH8"]
[Sat Aug 29 05:08:03.409849 2026] [security2:error] [pid 1028675:tid 1028932] [client 20.196.209.81:9045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-admin/pk.php"] [unique_id "apK9k9dHPfW2QFvhmL4AugAAAHo"]
[Sat Aug 29 05:08:03.415304 2026] [security2:error] [pid 1034096:tid 1034329] [client 20.63.219.114:18549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/Js.php"] [unique_id "apK9ky04twRPFuquKD2fqQAAANM"]
[Sat Aug 29 05:08:03.421128 2026] [security2:error] [pid 1028675:tid 1028841] [client 20.100.175.163:5501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/xmlrpc.php"] [unique_id "apK9k9dHPfW2QFvhmL4AuAAAAB8"]
[Sat Aug 29 05:08:03.439569 2026] [security2:error] [pid 1034096:tid 1034296] [client 52.139.37.240:16766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/defaults.php"] [unique_id "apK9ky04twRPFuquKD2fqwAAALI"]
[Sat Aug 29 05:08:03.454647 2026] [security2:error] [pid 1034096:tid 1034337] [client 40.83.93.50:11317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/fi2.php"] [unique_id "apK9ky04twRPFuquKD2frAAAANs"]
[Sat Aug 29 05:08:03.457454 2026] [security2:error] [pid 1034096:tid 1034286] [client 158.23.184.117:2796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/.well-known/aa.php"] [unique_id "apK9ky04twRPFuquKD2frQAAAKg"]
[Sat Aug 29 05:08:03.479473 2026] [security2:error] [pid 1034096:tid 1034291] [client 158.23.184.117:57834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/.well-known/index.php"] [unique_id "apK9ky04twRPFuquKD2frgAAAK0"]
[Sat Aug 29 05:08:03.481487 2026] [security2:error] [pid 1034096:tid 1034376] [client 195.178.110.247:3932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.liserpro.com"] [uri "/index.php"] [unique_id "apK9ky04twRPFuquKD2frwAAAQI"]
[Sat Aug 29 05:08:03.485416 2026] [security2:error] [pid 1034096:tid 1034270] [client 20.63.81.20:55474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/tinny.php"] [unique_id "apK9ky04twRPFuquKD2fsAAAAJg"]
[Sat Aug 29 05:08:03.509927 2026] [security2:error] [pid 1034096:tid 1034299] [client 158.23.147.79:17649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/.well-known/content.php"] [unique_id "apK9ky04twRPFuquKD2fsQAAALU"]
[Sat Aug 29 05:08:03.523084 2026] [security2:error] [pid 1034096:tid 1034375] [client 52.139.37.240:63877] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "abmac.cn"] [uri "/c99.php"] [unique_id "apK9ky04twRPFuquKD2fsgAAAQE"]
[Sat Aug 29 05:08:03.546790 2026] [security2:error] [pid 1034096:tid 1034274] [client 20.197.61.180:9853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/Js.php"] [unique_id "apK9ky04twRPFuquKD2ftAAAAJw"]
[Sat Aug 29 05:08:03.556326 2026] [security2:error] [pid 1034096:tid 1034276] [client 195.178.110.247:61542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lisakayguitar.com"] [uri "/index.php"] [unique_id "apK9ky04twRPFuquKD2ftgAAAJ4"]
[Sat Aug 29 05:08:03.604616 2026] [security2:error] [pid 1028675:tid 1028835] [client 158.23.184.117:55649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "apK9k9dHPfW2QFvhmL4AvAAAABk"]
[Sat Aug 29 05:08:03.605699 2026] [security2:error] [pid 1028675:tid 1028821] [client 158.23.147.79:17495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/goods.php"] [unique_id "apK9k9dHPfW2QFvhmL4AvQAAAAs"]
[Sat Aug 29 05:08:03.616662 2026] [security2:error] [pid 1034096:tid 1034377] [client 20.52.41.200:5342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-access.php"] [unique_id "apK9ky04twRPFuquKD2fuAAAAQM"]
[Sat Aug 29 05:08:03.623293 2026] [security2:error] [pid 1034096:tid 1034310] [client 158.23.184.117:20495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/.well-known/login.php"] [unique_id "apK9ky04twRPFuquKD2fuQAAAMA"]
[Sat Aug 29 05:08:03.634060 2026] [security2:error] [pid 1028675:tid 1028920] [client 52.139.37.240:16913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/domains.php"] [unique_id "apK9k9dHPfW2QFvhmL4AvwAAAG4"]
[Sat Aug 29 05:08:03.638585 2026] [security2:error] [pid 1034096:tid 1034317] [client 20.203.141.11:24216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/tool.php"] [unique_id "apK9ky04twRPFuquKD2fuwAAAMc"]
[Sat Aug 29 05:08:03.643642 2026] [security2:error] [pid 1028675:tid 1028879] [client 40.83.93.50:8427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/configs.php"] [unique_id "apK9k9dHPfW2QFvhmL4AwgAAAEU"]
[Sat Aug 29 05:08:03.644429 2026] [security2:error] [pid 1028675:tid 1028887] [client 20.63.81.20:55460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/wp-easy.php"] [unique_id "apK9k9dHPfW2QFvhmL4AwwAAAE0"]
[Sat Aug 29 05:08:03.654203 2026] [security2:error] [pid 1034096:tid 1034290] [client 195.178.110.247:61546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.liserpro.com"] [uri "/index.php"] [unique_id "apK9ky04twRPFuquKD2fvAAAAKw"]
[Sat Aug 29 05:08:03.692847 2026] [security2:error] [pid 1034096:tid 1034327] [client 158.23.147.79:50063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK9ky04twRPFuquKD2fvQAAANE"]
[Sat Aug 29 05:08:03.718285 2026] [security2:error] [pid 1034096:tid 1034256] [client 4.205.62.107:53341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/test.config.php"] [unique_id "apK9ky04twRPFuquKD2fwQAAAIo"]
[Sat Aug 29 05:08:03.722760 2026] [security2:error] [pid 1034096:tid 1034340] [client 20.203.141.11:1229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "apK9ky04twRPFuquKD2fwwAAAN4"]
[Sat Aug 29 05:08:03.737005 2026] [security2:error] [pid 1034096:tid 1034284] [client 68.155.159.216:18399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK9ky04twRPFuquKD2fxgAAAKY"]
[Sat Aug 29 05:08:03.741124 2026] [security2:error] [pid 1028675:tid 1028858] [client 52.139.37.240:60579] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "abmac.cn"] [uri "/c99.php"] [unique_id "apK9k9dHPfW2QFvhmL4AxAAAADA"]
[Sat Aug 29 05:08:03.750412 2026] [security2:error] [pid 1028675:tid 1028931] [client 158.23.184.117:2754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/wp-content/plugins/alfa-rex.php"] [unique_id "apK9k9dHPfW2QFvhmL4AxgAAAHk"]
[Sat Aug 29 05:08:03.765167 2026] [security2:error] [pid 1034096:tid 1034251] [client 20.104.49.130:43636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/002.php"] [unique_id "apK9ky04twRPFuquKD2fxwAAAIU"]
[Sat Aug 29 05:08:03.767165 2026] [security2:error] [pid 1034096:tid 1034305] [client 158.23.184.117:57836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/.well-known/logs233/index.php"] [unique_id "apK9ky04twRPFuquKD2fyAAAALs"]
[Sat Aug 29 05:08:03.769127 2026] [security2:error] [pid 1028675:tid 1028851] [client 20.63.219.114:18500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/access.php"] [unique_id "apK9k9dHPfW2QFvhmL4AywAAACk"]
[Sat Aug 29 05:08:03.774952 2026] [security2:error] [pid 1028675:tid 1028844] [client 20.63.81.20:55456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/d7.php"] [unique_id "apK9k9dHPfW2QFvhmL4AzAAAACI"]
[Sat Aug 29 05:08:03.806892 2026] [security2:error] [pid 1028675:tid 1028825] [client 20.196.209.81:9028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-admin/plugin-install.php"] [unique_id "apK9k9dHPfW2QFvhmL4AzgAAAA8"]
[Sat Aug 29 05:08:03.808517 2026] [security2:error] [pid 1028675:tid 1028860] [client 20.240.128.207:27155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-mail.php"] [unique_id "apK9k9dHPfW2QFvhmL4AzwAAADI"]
[Sat Aug 29 05:08:03.813793 2026] [security2:error] [pid 1034096:tid 1034341] [client 68.155.159.216:38587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-content/admin.php"] [unique_id "apK9ky04twRPFuquKD2fyQAAAN8"]
[Sat Aug 29 05:08:03.819476 2026] [security2:error] [pid 1034096:tid 1034268] [client 158.23.184.117:31683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/.dj/index.php"] [unique_id "apK9ky04twRPFuquKD2fygAAAJY"]
[Sat Aug 29 05:08:03.824253 2026] [security2:error] [pid 1028675:tid 1028845] [client 68.155.159.216:16369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK9k9dHPfW2QFvhmL4A0AAAACM"]
[Sat Aug 29 05:08:03.828213 2026] [security2:error] [pid 1028675:tid 1028823] [client 52.139.37.240:16725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/dropdown.php"] [unique_id "apK9k9dHPfW2QFvhmL4A0QAAAA0"]
[Sat Aug 29 05:08:03.852100 2026] [security2:error] [pid 1034096:tid 1034252] [client 68.155.159.216:51566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/ans.php"] [unique_id "apK9ky04twRPFuquKD2fywAAAIY"]
[Sat Aug 29 05:08:03.885840 2026] [security2:error] [pid 1028675:tid 1028811] [client 158.23.147.79:6018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/file5.php"] [unique_id "apK9k9dHPfW2QFvhmL4A1AAAAAE"]
[Sat Aug 29 05:08:03.886326 2026] [security2:error] [pid 1028675:tid 1028784] [remote 69.6.212.140:54518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 140.212.6.69.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "greenfieldstone.com"] [uri "/wp-login.php"] [unique_id "apK9k9dHPfW2QFvhmL4A0gAAAmc"]
[Sat Aug 29 05:08:03.912990 2026] [security2:error] [pid 1034096:tid 1034322] [client 158.23.184.117:57793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/.well-known/maintenance.php"] [unique_id "apK9ky04twRPFuquKD2fzAAAAMw"]
[Sat Aug 29 05:08:03.929784 2026] [security2:error] [pid 1028675:tid 1028901] [client 40.83.93.50:8963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/1p.php"] [unique_id "apK9k9dHPfW2QFvhmL4A1gAAAFs"]
[Sat Aug 29 05:08:03.930324 2026] [security2:error] [pid 1028675:tid 1028816] [client 20.100.175.163:48196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/filemanager.php"] [unique_id "apK9k9dHPfW2QFvhmL4A1wAAAAY"]
[Sat Aug 29 05:08:03.944026 2026] [security2:error] [pid 1034096:tid 1034283] [client 20.63.81.20:55485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/v5.php"] [unique_id "apK9ky04twRPFuquKD2fzgAAAKU"]
[Sat Aug 29 05:08:03.958491 2026] [security2:error] [pid 1028675:tid 1028863] [client 158.23.184.117:2596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/test.php"] [unique_id "apK9k9dHPfW2QFvhmL4A2AAAADU"]
[Sat Aug 29 05:08:03.974034 2026] [security2:error] [pid 1034096:tid 1034364] [client 158.23.184.117:31512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/.info.php"] [unique_id "apK9ky04twRPFuquKD2f0AAAAPY"]
[Sat Aug 29 05:08:03.985174 2026] [security2:error] [pid 1034096:tid 1034316] [client 158.23.147.79:11339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/file5.php"] [unique_id "apK9ky04twRPFuquKD2f0gAAAMY"]
[Sat Aug 29 05:08:03.986622 2026] [security2:error] [pid 1034096:tid 1034261] [client 158.23.147.79:59890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/themes.php"] [unique_id "apK9ky04twRPFuquKD2f0wAAAI8"]
[Sat Aug 29 05:08:03.987822 2026] [security2:error] [pid 1028675:tid 1028840] [client 158.23.147.79:26574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/mah.php"] [unique_id "apK9k9dHPfW2QFvhmL4A2gAAAB4"]
[Sat Aug 29 05:08:03.996230 2026] [security2:error] [pid 1028675:tid 1028839] [client 4.205.62.107:22516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/thui.php"] [unique_id "apK9k9dHPfW2QFvhmL4A2wAAAB0"]
[Sat Aug 29 05:08:04.016231 2026] [security2:error] [pid 1034096:tid 1034301] [client 52.139.37.240:16752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/files/index.php"] [unique_id "apK9lC04twRPFuquKD2f1AAAALc"]
[Sat Aug 29 05:08:04.033426 2026] [security2:error] [pid 1034096:tid 1034370] [client 4.205.62.107:58427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/nzv.php"] [unique_id "apK9lC04twRPFuquKD2f1QAAAPw"]
[Sat Aug 29 05:08:04.049510 2026] [security2:error] [pid 1028675:tid 1028856] [client 20.104.104.62:37585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/wp-admin/zwso.php"] [unique_id "apK9lNdHPfW2QFvhmL4A3gAAAC4"]
[Sat Aug 29 05:08:04.054761 2026] [security2:error] [pid 1028675:tid 1028898] [client 20.104.104.62:40100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/bgymj.php"] [unique_id "apK9lNdHPfW2QFvhmL4A3wAAAFg"]
[Sat Aug 29 05:08:04.065100 2026] [security2:error] [pid 1034096:tid 1034333] [client 213.202.253.4:57503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bv-place.com"] [uri "/memberfuns.php"] [unique_id "apK9lC04twRPFuquKD2f1gAAANc"], referer: www.google.com
[Sat Aug 29 05:08:04.072910 2026] [security2:error] [pid 1028675:tid 1028900] [client 20.52.41.200:4558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-content/uploads/min.php"] [unique_id "apK9lNdHPfW2QFvhmL4A4AAAAFo"]
[Sat Aug 29 05:08:04.073964 2026] [security2:error] [pid 1028675:tid 1028837] [client 20.104.104.62:47566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/css.php"] [unique_id "apK9lNdHPfW2QFvhmL4A4QAAABs"]
[Sat Aug 29 05:08:04.077135 2026] [security2:error] [pid 1028675:tid 1028814] [client 158.23.184.117:21093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/.well-known/min.php"] [unique_id "apK9lNdHPfW2QFvhmL4A4wAAAAQ"]
[Sat Aug 29 05:08:04.081629 2026] [security2:error] [pid 1034096:tid 1034365] [client 20.63.81.20:55435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/az.php"] [unique_id "apK9lC04twRPFuquKD2f2AAAAPc"]
[Sat Aug 29 05:08:04.120316 2026] [security2:error] [pid 1028675:tid 1028828] [client 158.23.184.117:31540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/.trash7206/index.php"] [unique_id "apK9lNdHPfW2QFvhmL4A5QAAABI"]
[Sat Aug 29 05:08:04.123079 2026] [security2:error] [pid 1028675:tid 1028880] [client 158.23.184.117:55651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/wp-includes/mani.php"] [unique_id "apK9lNdHPfW2QFvhmL4A5gAAAEY"]
[Sat Aug 29 05:08:04.136266 2026] [security2:error] [pid 1034096:tid 1034352] [client 20.63.219.114:15885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/classsmtps.php"] [unique_id "apK9lC04twRPFuquKD2f2QAAAOo"]
[Sat Aug 29 05:08:04.140863 2026] [security2:error] [pid 1034096:tid 1034314] [client 40.83.93.50:9174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/disagraeed.php"] [unique_id "apK9lC04twRPFuquKD2f2gAAAMQ"]
[Sat Aug 29 05:08:04.172896 2026] [security2:error] [pid 1028675:tid 1028903] [client 20.203.141.11:27683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/k.php"] [unique_id "apK9lNdHPfW2QFvhmL4A5wAAAF0"]
[Sat Aug 29 05:08:04.193687 2026] [security2:error] [pid 1034096:tid 1034363] [client 150.241.237.150:14852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 150.237.241.150.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/cron.php"] [unique_id "apK9lC04twRPFuquKD2f2wAAAPU"], referer: https://abantiquo.aldergate.net/
[Sat Aug 29 05:08:04.195107 2026] [security2:error] [pid 1034096:tid 1034359] [client 20.104.104.62:37674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/fh26.php"] [unique_id "apK9lC04twRPFuquKD2f3AAAAPE"]
[Sat Aug 29 05:08:04.204451 2026] [security2:error] [pid 1028675:tid 1028922] [client 20.203.141.11:9018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/222.php"] [unique_id "apK9lNdHPfW2QFvhmL4A6AAAAHA"]
[Sat Aug 29 05:08:04.216213 2026] [security2:error] [pid 1034096:tid 1034329] [client 20.104.104.62:37620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/Contrller.php"] [unique_id "apK9lC04twRPFuquKD2f3QAAANM"]
[Sat Aug 29 05:08:04.223012 2026] [security2:error] [pid 1028675:tid 1028855] [client 158.23.184.117:20485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/.well-known/module.php"] [unique_id "apK9lNdHPfW2QFvhmL4A6QAAAC0"]
[Sat Aug 29 05:08:04.227305 2026] [security2:error] [pid 1034096:tid 1034337] [client 20.63.81.20:55469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/js.php"] [unique_id "apK9lC04twRPFuquKD2f3gAAANs"]
[Sat Aug 29 05:08:04.231903 2026] [security2:error] [pid 1028675:tid 1028835] [client 20.196.209.81:13449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-admin/plugins/img/themes/plugins/maintenance.php"] [unique_id "apK9lNdHPfW2QFvhmL4A6gAAABk"]
[Sat Aug 29 05:08:04.232667 2026] [security2:error] [pid 1028675:tid 1028832] [client 4.205.62.107:22388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/myfile.php"] [unique_id "apK9lNdHPfW2QFvhmL4A6wAAABY"]
[Sat Aug 29 05:08:04.265571 2026] [security2:error] [pid 1034096:tid 1034291] [client 68.155.159.216:6020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK9lC04twRPFuquKD2f4AAAAK0"]
[Sat Aug 29 05:08:04.267519 2026] [security2:error] [pid 1034096:tid 1034334] [client 158.23.184.117:31684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/.trash7206/min.php"] [unique_id "apK9lC04twRPFuquKD2f4QAAANg"]
[Sat Aug 29 05:08:04.268778 2026] [security2:error] [pid 1028675:tid 1028884] [client 20.197.61.180:12384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/access.php"] [unique_id "apK9lNdHPfW2QFvhmL4A7AAAAEo"]
[Sat Aug 29 05:08:04.269266 2026] [security2:error] [pid 1034096:tid 1034296] [client 158.23.184.117:2804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/wp-includes/Test.php"] [unique_id "apK9lC04twRPFuquKD2f4wAAALI"]
[Sat Aug 29 05:08:04.273905 2026] [security2:error] [pid 1034096:tid 1034270] [client 68.155.159.216:24485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK9lC04twRPFuquKD2f5AAAAJg"]
[Sat Aug 29 05:08:04.282853 2026] [security2:error] [pid 1034096:tid 1034336] [client 20.104.104.62:62962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/lufix1.php"] [unique_id "apK9lC04twRPFuquKD2f5QAAANo"]
[Sat Aug 29 05:08:04.313803 2026] [security2:error] [pid 1034096:tid 1034260] [client 20.240.128.207:31092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-content.php"] [unique_id "apK9lC04twRPFuquKD2f5gAAAI4"]
[Sat Aug 29 05:08:04.318732 2026] [security2:error] [pid 1034096:tid 1034259] [client 4.205.62.107:26656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/css.php"] [unique_id "apK9lC04twRPFuquKD2f5wAAAI0"]
[Sat Aug 29 05:08:04.325063 2026] [security2:error] [pid 1028675:tid 1028875] [client 35.194.208.44:12500] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/id_dsa"] [unique_id "apK9lNdHPfW2QFvhmL4A7QAAAEE"]
[Sat Aug 29 05:08:04.328685 2026] [security2:error] [pid 1034096:tid 1034350] [client 35.194.208.44:12462] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/id_rsa"] [unique_id "apK9lC04twRPFuquKD2f6AAAAOg"]
[Sat Aug 29 05:08:04.330127 2026] [security2:error] [pid 1034096:tid 1034330] [client 35.194.208.44:12506] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/key.pem"] [unique_id "apK9lC04twRPFuquKD2f6gAAANQ"]
[Sat Aug 29 05:08:04.361326 2026] [security2:error] [pid 1034096:tid 1034331] [client 20.63.81.20:55364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/hd.php"] [unique_id "apK9lC04twRPFuquKD2f6wAAANU"]
[Sat Aug 29 05:08:04.367721 2026] [security2:error] [pid 1034096:tid 1034276] [client 158.23.184.117:57812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/.well-known/options.php"] [unique_id "apK9lC04twRPFuquKD2f7AAAAJ4"]
[Sat Aug 29 05:08:04.367976 2026] [security2:error] [pid 1028675:tid 1028823] [client 68.155.159.216:33632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK9lNdHPfW2QFvhmL4A8QAAAA0"]
[Sat Aug 29 05:08:04.408848 2026] [security2:error] [pid 1028675:tid 1028858] [client 40.83.93.50:8422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/Njima.php"] [unique_id "apK9lNdHPfW2QFvhmL4A9AAAADA"]
[Sat Aug 29 05:08:04.409392 2026] [security2:error] [pid 1034096:tid 1034266] [client 20.104.49.130:45732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9lC04twRPFuquKD2f7wAAAJQ"]
[Sat Aug 29 05:08:04.410297 2026] [security2:error] [pid 1034096:tid 1034287] [client 68.155.159.216:52740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK9lC04twRPFuquKD2f8AAAAKk"]
[Sat Aug 29 05:08:04.411397 2026] [security2:error] [pid 1028675:tid 1028929] [client 158.23.184.117:31740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/.well-known//index.php"] [unique_id "apK9lNdHPfW2QFvhmL4A9QAAAHc"]
[Sat Aug 29 05:08:04.414189 2026] [security2:error] [pid 1028675:tid 1028845] [client 158.23.184.117:2758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/wp-includes/pomo.php"] [unique_id "apK9lNdHPfW2QFvhmL4A9gAAACM"]
[Sat Aug 29 05:08:04.432828 2026] [security2:error] [pid 1034096:tid 1034300] [client 20.100.175.163:11050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-content/themes/admin.php"] [unique_id "apK9lC04twRPFuquKD2f8wAAALY"]
[Sat Aug 29 05:08:04.468289 2026] [security2:error] [pid 1034096:tid 1034354] [client 35.194.208.44:12462] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/privatekey.key"] [unique_id "apK9lC04twRPFuquKD2f9QAAAOw"]
[Sat Aug 29 05:08:04.483049 2026] [security2:error] [pid 1034096:tid 1034293] [client 35.194.208.44:12512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.208.194.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/wp-config.php"] [unique_id "apK9lC04twRPFuquKD2f-AAAAK8"]
[Sat Aug 29 05:08:04.495896 2026] [security2:error] [pid 1034096:tid 1034305] [client 20.63.81.20:55531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/xl2023.php"] [unique_id "apK9lC04twRPFuquKD2f-QAAALs"]
[Sat Aug 29 05:08:04.497826 2026] [security2:error] [pid 1034096:tid 1034377] [client 35.194.208.44:12526] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/wp-config.php.bak"] [unique_id "apK9lC04twRPFuquKD2f-gAAAQM"]
[Sat Aug 29 05:08:04.513169 2026] [security2:error] [pid 1028675:tid 1028911] [client 20.52.41.200:5359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK9lNdHPfW2QFvhmL4A-QAAAGU"]
[Sat Aug 29 05:08:04.513171 2026] [security2:error] [pid 1034096:tid 1034362] [client 158.23.184.117:57839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/.well-known/panel.php"] [unique_id "apK9lC04twRPFuquKD2f-wAAAPQ"]
[Sat Aug 29 05:08:04.519766 2026] [security2:error] [pid 1034096:tid 1034297] [client 4.205.62.107:53135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/atex1.php"] [unique_id "apK9lC04twRPFuquKD2f_QAAALM"]
[Sat Aug 29 05:08:04.527570 2026] [security2:error] [pid 1034096:tid 1034319] [client 20.63.219.114:8835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/contentloader1.php"] [unique_id "apK9lC04twRPFuquKD2gAAAAAMk"]
[Sat Aug 29 05:08:04.531750 2026] [security2:error] [pid 1028675:tid 1028812] [client 35.194.208.44:12528] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/wp-config.php.old"] [unique_id "apK9lNdHPfW2QFvhmL4A-wAAAAI"]
[Sat Aug 29 05:08:04.549979 2026] [security2:error] [pid 1034096:tid 1034375] [client 35.194.208.44:12530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.208.194.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/config.php"] [unique_id "apK9lC04twRPFuquKD2gAQAAAQE"]
[Sat Aug 29 05:08:04.554647 2026] [security2:error] [pid 1028675:tid 1028918] [client 158.23.184.117:30923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/.well-known/about.php"] [unique_id "apK9lNdHPfW2QFvhmL4A_gAAAGw"]
[Sat Aug 29 05:08:04.597070 2026] [security2:error] [pid 1034096:tid 1034348] [client 35.194.208.44:12542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.208.194.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/config.php.bak"] [unique_id "apK9lC04twRPFuquKD2gBAAAAOY"]
[Sat Aug 29 05:08:04.618764 2026] [security2:error] [pid 1034096:tid 1034277] [client 20.104.18.15:39930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9lC04twRPFuquKD2gCQAAAJ8"]
[Sat Aug 29 05:08:04.620553 2026] [security2:error] [pid 1028675:tid 1028846] [client 68.155.159.216:49235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-admin/images/about.php"] [unique_id "apK9lNdHPfW2QFvhmL4BAAAAACQ"]
[Sat Aug 29 05:08:04.623892 2026] [security2:error] [pid 1034096:tid 1034378] [client 20.63.81.20:55428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/V2.php"] [unique_id "apK9lC04twRPFuquKD2gDQAAAQQ"]
[Sat Aug 29 05:08:04.634340 2026] [security2:error] [pid 1028675:tid 1028816] [client 20.196.209.81:9031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-admin/security.php"] [unique_id "apK9lNdHPfW2QFvhmL4BAQAAAAY"]
[Sat Aug 29 05:08:04.639290 2026] [security2:error] [pid 1034096:tid 1034308] [client 158.23.147.79:32638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK9lC04twRPFuquKD2gEQAAAL4"]
[Sat Aug 29 05:08:04.649442 2026] [security2:error] [pid 1034096:tid 1034272] [client 158.23.147.79:17555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/cong.php"] [unique_id "apK9lC04twRPFuquKD2gEwAAAJo"]
[Sat Aug 29 05:08:04.658308 2026] [security2:error] [pid 1028675:tid 1028876] [client 158.23.184.117:57852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/.well-known/pki-validation/mariju.php"] [unique_id "apK9lNdHPfW2QFvhmL4BAgAAAEI"]
[Sat Aug 29 05:08:04.678486 2026] [security2:error] [pid 1028675:tid 1028883] [client 20.203.141.11:20232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/mini.php"] [unique_id "apK9lNdHPfW2QFvhmL4BAwAAAEk"]
[Sat Aug 29 05:08:04.686150 2026] [security2:error] [pid 1034096:tid 1034320] [client 20.203.141.11:17862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/root.php"] [unique_id "apK9lC04twRPFuquKD2gFQAAAMo"]
[Sat Aug 29 05:08:04.697175 2026] [security2:error] [pid 1034096:tid 1034352] [client 158.23.184.117:2811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/wp-admin/link-add.php"] [unique_id "apK9lC04twRPFuquKD2gFgAAAOo"]
[Sat Aug 29 05:08:04.703315 2026] [security2:error] [pid 1034096:tid 1034256] [client 40.83.93.50:14772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/add_actualites.php"] [unique_id "apK9lC04twRPFuquKD2gGAAAAIo"]
[Sat Aug 29 05:08:04.738925 2026] [autoindex:error] [pid 1034096:tid 1034363] [client 158.23.184.117:0] AH01276: Cannot serve directory /home1/lancasta/public_html/.well-known/acme-challenge/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:08:04.748960 2026] [security2:error] [pid 1034096:tid 1034291] [client 20.104.18.15:39904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9lC04twRPFuquKD2gHQAAAK0"]
[Sat Aug 29 05:08:04.759705 2026] [security2:error] [pid 1034096:tid 1034254] [client 158.23.147.79:17437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK9lC04twRPFuquKD2gHgAAAIg"]
[Sat Aug 29 05:08:04.766387 2026] [security2:error] [pid 1034096:tid 1034367] [client 20.63.81.20:55430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/mad.php"] [unique_id "apK9lC04twRPFuquKD2gHwAAAPk"]
[Sat Aug 29 05:08:04.794734 2026] [security2:error] [pid 1034096:tid 1034274] [client 158.23.184.117:31522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK9lC04twRPFuquKD2gIQAAAJw"]
[Sat Aug 29 05:08:04.808263 2026] [security2:error] [pid 1034096:tid 1034376] [client 158.23.184.117:57797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/.well-known/pki-validation/pl.php"] [unique_id "apK9lC04twRPFuquKD2gIwAAAQI"]
[Sat Aug 29 05:08:04.824318 2026] [security2:error] [pid 1034096:tid 1034306] [client 20.240.128.207:7415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "apK9lC04twRPFuquKD2gJAAAALw"]
[Sat Aug 29 05:08:04.840797 2026] [security2:error] [pid 1034096:tid 1034295] [client 158.23.184.117:2792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/wp-includes/Text.php"] [unique_id "apK9lC04twRPFuquKD2gJgAAALE"]
[Sat Aug 29 05:08:04.872545 2026] [security2:error] [pid 1034096:tid 1034300] [client 4.205.62.107:9013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/apikeys.php"] [unique_id "apK9lC04twRPFuquKD2gJwAAALY"]
[Sat Aug 29 05:08:04.888014 2026] [security2:error] [pid 1034096:tid 1034351] [client 40.83.93.50:14735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/configs.php"] [unique_id "apK9lC04twRPFuquKD2gKQAAAOk"]
[Sat Aug 29 05:08:04.890522 2026] [security2:error] [pid 1028675:tid 1028805] [remote 162.55.89.48:36942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 48.89.55.162.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ypp.yox.mybluehost.me"] [uri "/wp-login.php"] [unique_id "apK9lNdHPfW2QFvhmL4BBwAAdHw"]
[Sat Aug 29 05:08:04.891154 2026] [security2:error] [pid 1034096:tid 1034304] [client 20.104.18.15:39905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/adminfuns.php"] [unique_id "apK9lC04twRPFuquKD2gKgAAALo"]
[Sat Aug 29 05:08:04.897057 2026] [security2:error] [pid 1028675:tid 1028920] [client 20.63.81.20:55505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/st.php"] [unique_id "apK9lNdHPfW2QFvhmL4BCAAAAG4"]
[Sat Aug 29 05:08:04.908744 2026] [fcgid:warn] [pid 1028675:tid 1028897] (70014)End of file found: [client 66.132.195.47:43148] mod_fcgid: can't get data from http client
[Sat Aug 29 05:08:04.923453 2026] [security2:error] [pid 1034096:tid 1034298] [client 68.155.159.216:18357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-login.php"] [unique_id "apK9lC04twRPFuquKD2gLAAAALQ"]
[Sat Aug 29 05:08:04.924563 2026] [security2:error] [pid 1034096:tid 1034323] [client 68.155.159.216:38665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/xmlrpc.php"] [unique_id "apK9lC04twRPFuquKD2gLQAAAM0"]
[Sat Aug 29 05:08:04.938924 2026] [security2:error] [pid 1034096:tid 1034262] [client 20.63.219.114:16649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/al.php"] [unique_id "apK9lC04twRPFuquKD2gLwAAAJA"]
[Sat Aug 29 05:08:04.938967 2026] [security2:error] [pid 1034096:tid 1034284] [client 158.23.184.117:31518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/.well-known/acme-challenge/content.php"] [unique_id "apK9lC04twRPFuquKD2gLgAAAKY"]
[Sat Aug 29 05:08:04.944034 2026] [security2:error] [pid 1034096:tid 1034270] [client 20.100.175.163:18082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-admin/css/admin.php"] [unique_id "apK9lC04twRPFuquKD2gMAAAAJg"]
[Sat Aug 29 05:08:04.952747 2026] [security2:error] [pid 1028675:tid 1028910] [client 158.23.184.117:57818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/.well-known/pki-validation/x.php"] [unique_id "apK9lNdHPfW2QFvhmL4BCgAAAGQ"]
[Sat Aug 29 05:08:04.969636 2026] [security2:error] [pid 1034096:tid 1034260] [client 20.52.41.200:4560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/bthil.php"] [unique_id "apK9lC04twRPFuquKD2gMQAAAI4"]
[Sat Aug 29 05:08:04.988048 2026] [security2:error] [pid 1028675:tid 1028870] [client 158.23.184.117:55667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/wp-trackback.php"] [unique_id "apK9lNdHPfW2QFvhmL4BDQAAADw"]
[Sat Aug 29 05:08:04.992639 2026] [security2:error] [pid 1028675:tid 1028880] [client 158.23.147.79:6030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/file88.php"] [unique_id "apK9lNdHPfW2QFvhmL4BDgAAAEY"]
[Sat Aug 29 05:08:04.999104 2026] [security2:error] [pid 1034096:tid 1034296] [client 20.197.61.180:1672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/classsmtps.php"] [unique_id "apK9lC04twRPFuquKD2gMwAAALI"]
[Sat Aug 29 05:08:05.015413 2026] [security2:error] [pid 1028675:tid 1028927] [client 68.155.159.216:16261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-admin/user/index.php"] [unique_id "apK9lddHPfW2QFvhmL4BDwAAAHU"]
[Sat Aug 29 05:08:05.028830 2026] [security2:error] [pid 1034096:tid 1034325] [client 20.196.209.81:9067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK9lS04twRPFuquKD2gNwAAAM8"]
[Sat Aug 29 05:08:05.035573 2026] [security2:error] [pid 1034096:tid 1034357] [client 20.104.18.15:39894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/goods.php"] [unique_id "apK9lS04twRPFuquKD2gOAAAAO8"]
[Sat Aug 29 05:08:05.049542 2026] [security2:error] [pid 1034096:tid 1034315] [client 20.63.81.20:55363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/alfanew.php"] [unique_id "apK9lS04twRPFuquKD2gOgAAAMU"]
[Sat Aug 29 05:08:05.087736 2026] [security2:error] [pid 1034096:tid 1034308] [client 158.23.147.79:26511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-blog-header.php"] [unique_id "apK9lS04twRPFuquKD2gPQAAAL4"]
[Sat Aug 29 05:08:05.090521 2026] [security2:error] [pid 1034096:tid 1034308] [client 158.23.147.79:11337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/file88.php"] [unique_id "apK9lS04twRPFuquKD2gPwAAAL4"]
[Sat Aug 29 05:08:05.093251 2026] [security2:error] [pid 1034096:tid 1034372] [client 91.92.47.191:44572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.giantgardening.com"] [uri "/settings.php"] [unique_id "apK9lS04twRPFuquKD2gQAAAAP4"]
[Sat Aug 29 05:08:05.096299 2026] [security2:error] [pid 1034096:tid 1034349] [client 158.23.184.117:57802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/.well-known/pki-validation/xmrlpc.php"] [unique_id "apK9lS04twRPFuquKD2gQQAAAOc"]
[Sat Aug 29 05:08:05.100137 2026] [security2:error] [pid 1034096:tid 1034365] [client 158.23.147.79:53129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-mail.php"] [unique_id "apK9lS04twRPFuquKD2gQgAAAPc"]
[Sat Aug 29 05:08:05.119660 2026] [security2:error] [pid 1034096:tid 1034281] [client 20.104.49.130:63566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/makeasmtp.php"] [unique_id "apK9lS04twRPFuquKD2gRgAAAKM"]
[Sat Aug 29 05:08:05.135029 2026] [security2:error] [pid 1034096:tid 1034324] [client 158.23.184.117:2795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/wp-admin/maint.php"] [unique_id "apK9lS04twRPFuquKD2gRwAAAM4"]
[Sat Aug 29 05:08:05.138441 2026] [security2:error] [pid 1034096:tid 1034314] [client 4.205.62.107:22429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/file21.php"] [unique_id "apK9lS04twRPFuquKD2gSQAAAMQ"]
[Sat Aug 29 05:08:05.155862 2026] [security2:error] [pid 1028675:tid 1028917] [client 20.203.141.11:5807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/aa.php"] [unique_id "apK9lddHPfW2QFvhmL4BEQAAAGs"]
[Sat Aug 29 05:08:05.158177 2026] [security2:error] [pid 1028675:tid 1028887] [client 20.203.141.11:27655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/p.php"] [unique_id "apK9lddHPfW2QFvhmL4BEgAAAE0"]
[Sat Aug 29 05:08:05.167733 2026] [security2:error] [pid 1034096:tid 1034364] [client 4.205.62.107:58490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/pouhg.php"] [unique_id "apK9lS04twRPFuquKD2gSwAAAPY"]
[Sat Aug 29 05:08:05.173338 2026] [security2:error] [pid 1034096:tid 1034332] [client 20.104.18.15:39917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/100.php"] [unique_id "apK9lS04twRPFuquKD2gTQAAANY"]
[Sat Aug 29 05:08:05.178481 2026] [security2:error] [pid 1028675:tid 1028884] [client 20.63.81.20:55511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/ioxi.php"] [unique_id "apK9lddHPfW2QFvhmL4BEwAAAEo"]
[Sat Aug 29 05:08:05.179985 2026] [security2:error] [pid 1028675:tid 1028903] [client 40.83.93.50:9177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/alfanew.php7"] [unique_id "apK9lddHPfW2QFvhmL4BFAAAAF0"]
[Sat Aug 29 05:08:05.215821 2026] [security2:error] [pid 1034096:tid 1034328] [client 52.139.37.240:16464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fairfaxcollege.org"] [uri "/flower.php"] [unique_id "apK9lS04twRPFuquKD2gTgAAANI"]
[Sat Aug 29 05:08:05.244597 2026] [security2:error] [pid 1028675:tid 1028875] [client 158.23.184.117:20515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/.well-known/security.php"] [unique_id "apK9lddHPfW2QFvhmL4BFQAAAEE"]
[Sat Aug 29 05:08:05.268290 2026] [security2:error] [pid 1034096:tid 1034360] [client 158.23.184.117:31706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK9lS04twRPFuquKD2gUAAAAPI"]
[Sat Aug 29 05:08:05.281060 2026] [security2:error] [pid 1034096:tid 1034344] [client 158.23.184.117:2814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/wp-includes/num.php"] [unique_id "apK9lS04twRPFuquKD2gUgAAAOI"]
[Sat Aug 29 05:08:05.299226 2026] [security2:error] [pid 1028675:tid 1028877] [client 20.63.219.114:16661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/global.php"] [unique_id "apK9lddHPfW2QFvhmL4BFgAAAEM"]
[Sat Aug 29 05:08:05.307825 2026] [security2:error] [pid 1034096:tid 1034376] [client 20.63.81.20:55503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/TNT.php"] [unique_id "apK9lS04twRPFuquKD2gVAAAAQI"]
[Sat Aug 29 05:08:05.309855 2026] [security2:error] [pid 1034096:tid 1034336] [client 20.104.18.15:39932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/about.php"] [unique_id "apK9lS04twRPFuquKD2gVQAAANo"]
[Sat Aug 29 05:08:05.314486 2026] [security2:error] [pid 1034096:tid 1034335] [client 20.240.128.207:23438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/css/wp-login.php"] [unique_id "apK9lS04twRPFuquKD2gVgAAANk"]
[Sat Aug 29 05:08:05.335697 2026] [security2:error] [pid 1034096:tid 1034302] [client 20.104.104.62:37657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/fgd.php"] [unique_id "apK9lS04twRPFuquKD2gWQAAALg"]
[Sat Aug 29 05:08:05.361095 2026] [security2:error] [pid 1034096:tid 1034345] [client 20.104.104.62:37623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/Zeiss.php"] [unique_id "apK9lS04twRPFuquKD2gWgAAAOM"]
[Sat Aug 29 05:08:05.379845 2026] [security2:error] [pid 1034096:tid 1034304] [client 68.155.159.216:24498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/about.php"] [unique_id "apK9lS04twRPFuquKD2gXwAAALo"]
[Sat Aug 29 05:08:05.380462 2026] [security2:error] [pid 1034096:tid 1034359] [client 40.83.93.50:8430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/disagraeed.php"] [unique_id "apK9lS04twRPFuquKD2gYAAAAPE"]
[Sat Aug 29 05:08:05.389548 2026] [security2:error] [pid 1034096:tid 1034276] [client 158.23.184.117:57825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/.well-known/system.php"] [unique_id "apK9lS04twRPFuquKD2gYQAAAJ4"]
[Sat Aug 29 05:08:05.393456 2026] [security2:error] [pid 1034096:tid 1034284] [client 68.155.159.216:6129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-content/admin.php"] [unique_id "apK9lS04twRPFuquKD2gYgAAAKY"]
[Sat Aug 29 05:08:05.401651 2026] [security2:error] [pid 1034096:tid 1034377] [client 4.205.62.107:21900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/thui.php"] [unique_id "apK9lS04twRPFuquKD2gZAAAAQM"]
[Sat Aug 29 05:08:05.401904 2026] [security2:error] [pid 1034096:tid 1034350] [client 52.139.37.240:36844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/ahax.php"] [unique_id "apK9lS04twRPFuquKD2gZQAAAOg"]
[Sat Aug 29 05:08:05.404840 2026] [security2:error] [pid 1034096:tid 1034371] [client 68.155.159.216:12120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.corralestractor.org"] [uri "/first.php"] [unique_id "apK9lS04twRPFuquKD2gZgAAAP0"]
[Sat Aug 29 05:08:05.411244 2026] [security2:error] [pid 1034096:tid 1034287] [client 158.23.184.117:31721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/.well-known/acme-challenge/sx.php"] [unique_id "apK9lS04twRPFuquKD2gagAAAKk"]
[Sat Aug 29 05:08:05.411475 2026] [security2:error] [pid 1034096:tid 1034280] [client 66.248.203.2:52014] ModSecurity: Warning. Matched phrase "Sucuri" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "cheerfulmonk.com"] [uri "/index.php"] [unique_id "apK9lS04twRPFuquKD2gSAAAAKI"]
[Sat Aug 29 05:08:05.425169 2026] [security2:error] [pid 1034096:tid 1034351] [client 158.23.184.117:55645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/identity.php"] [unique_id "apK9lS04twRPFuquKD2gawAAAOk"]
[Sat Aug 29 05:08:05.436219 2026] [security2:error] [pid 1034096:tid 1034330] [client 20.63.81.20:55475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/cd.php"] [unique_id "apK9lS04twRPFuquKD2gbQAAANQ"]
[Sat Aug 29 05:08:05.436367 2026] [security2:error] [pid 1034096:tid 1034258] [client 20.104.18.15:16879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9lS04twRPFuquKD2gbgAAAIw"]
[Sat Aug 29 05:08:05.439223 2026] [security2:error] [pid 1034096:tid 1034296] [client 20.104.104.62:65228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/hack.php"] [unique_id "apK9lS04twRPFuquKD2gbwAAALI"]
[Sat Aug 29 05:08:05.440959 2026] [security2:error] [pid 1034096:tid 1034291] [client 20.100.175.163:6131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/adminfuns.php"] [unique_id "apK9lS04twRPFuquKD2gcAAAAK0"]
[Sat Aug 29 05:08:05.449978 2026] [security2:error] [pid 1034096:tid 1034294] [client 20.196.209.81:10459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-admin/system.php"] [unique_id "apK9lS04twRPFuquKD2gcgAAALA"]
[Sat Aug 29 05:08:05.454692 2026] [security2:error] [pid 1034096:tid 1034318] [client 4.205.62.107:26648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/php_info.php"] [unique_id "apK9lS04twRPFuquKD2gcwAAAMg"]
[Sat Aug 29 05:08:05.458171 2026] [security2:error] [pid 1028675:tid 1028728] [remote 74.7.227.154:37794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK9lddHPfW2QFvhmL4BGQAAAi8"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwp-file-manager%2Finc
[Sat Aug 29 05:08:05.476635 2026] [security2:error] [pid 1034096:tid 1034347] [client 20.104.104.62:37638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/inject.php"] [unique_id "apK9lS04twRPFuquKD2gdAAAAOU"]
[Sat Aug 29 05:08:05.482894 2026] [security2:error] [pid 1028675:tid 1028904] [client 68.155.159.216:33702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-includes/index.php"] [unique_id "apK9lddHPfW2QFvhmL4BGwAAAF4"]
[Sat Aug 29 05:08:05.494197 2026] [security2:error] [pid 1028675:tid 1028839] [client 20.104.49.130:53648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/js.php"] [unique_id "apK9lddHPfW2QFvhmL4BHAAAAB0"]
[Sat Aug 29 05:08:05.500898 2026] [security2:error] [pid 1034096:tid 1034313] [client 20.104.104.62:64752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/cp.php"] [unique_id "apK9lS04twRPFuquKD2gdgAAAMM"]
[Sat Aug 29 05:08:05.510751 2026] [security2:error] [pid 1028675:tid 1028918] [client 20.104.104.62:37582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/ww2.php"] [unique_id "apK9lddHPfW2QFvhmL4BHQAAAGw"]
[Sat Aug 29 05:08:05.532454 2026] [security2:error] [pid 1034096:tid 1034370] [client 158.23.184.117:57845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/.well-known/users.php"] [unique_id "apK9lS04twRPFuquKD2geQAAAPw"]
[Sat Aug 29 05:08:05.534007 2026] [security2:error] [pid 1034096:tid 1034309] [client 68.155.159.216:9358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-admin/images/about.php"] [unique_id "apK9lS04twRPFuquKD2gegAAAL8"]
[Sat Aug 29 05:08:05.539290 2026] [security2:error] [pid 1034096:tid 1034307] [client 20.104.18.15:39897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/about.php"] [unique_id "apK9lS04twRPFuquKD2gewAAAL0"]
[Sat Aug 29 05:08:05.545284 2026] [security2:error] [pid 1034096:tid 1034314] [client 57.141.14.63:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/"] [unique_id "apK9lS04twRPFuquKD2gfAAAAMQ"]
[Sat Aug 29 05:08:05.552104 2026] [security2:error] [pid 1034096:tid 1034365] [client 158.23.184.117:31548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/.well-known/admin.php"] [unique_id "apK9lS04twRPFuquKD2gfQAAAPc"]
[Sat Aug 29 05:08:05.566334 2026] [security2:error] [pid 1028675:tid 1028843] [client 20.104.18.15:16883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9lddHPfW2QFvhmL4BHwAAACE"]
[Sat Aug 29 05:08:05.570233 2026] [security2:error] [pid 1028675:tid 1028936] [client 20.63.81.20:55399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/luuf.php"] [unique_id "apK9lddHPfW2QFvhmL4BIAAAAH4"]
[Sat Aug 29 05:08:05.575315 2026] [security2:error] [pid 1028675:tid 1028847] [client 20.104.104.62:62916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/155.php"] [unique_id "apK9lddHPfW2QFvhmL4BIQAAACU"]
[Sat Aug 29 05:08:05.586974 2026] [security2:error] [pid 1034096:tid 1034342] [client 20.52.41.200:4578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/cv.php"] [unique_id "apK9lS04twRPFuquKD2gfwAAAOA"]
[Sat Aug 29 05:08:05.614852 2026] [security2:error] [pid 1034096:tid 1034360] [client 20.104.104.62:40101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/mga.php"] [unique_id "apK9lS04twRPFuquKD2ggQAAAPI"]
[Sat Aug 29 05:08:05.623551 2026] [security2:error] [pid 1034096:tid 1034315] [client 20.203.141.11:1659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/c.php"] [unique_id "apK9lS04twRPFuquKD2gggAAAMU"]
[Sat Aug 29 05:08:05.623600 2026] [security2:error] [pid 1034096:tid 1034288] [client 52.139.37.240:36834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/breads1.php"] [unique_id "apK9lS04twRPFuquKD2ggwAAAKo"]
[Sat Aug 29 05:08:05.626585 2026] [security2:error] [pid 1034096:tid 1034334] [client 158.23.184.117:55674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/Radio.php"] [unique_id "apK9lS04twRPFuquKD2ghAAAANg"]
[Sat Aug 29 05:08:05.645837 2026] [security2:error] [pid 1034096:tid 1034274] [client 68.155.159.216:33755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-content/cong.php"] [unique_id "apK9lS04twRPFuquKD2ghQAAAJw"]
[Sat Aug 29 05:08:05.655291 2026] [security2:error] [pid 1034096:tid 1034306] [client 4.205.62.107:53148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/aws_sdk_settings.php"] [unique_id "apK9lS04twRPFuquKD2ghwAAALw"]
[Sat Aug 29 05:08:05.656829 2026] [security2:error] [pid 1034096:tid 1034324] [client 20.63.219.114:8880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/update.php"] [unique_id "apK9lS04twRPFuquKD2giAAAAM4"]
[Sat Aug 29 05:08:05.675266 2026] [security2:error] [pid 1034096:tid 1034254] [client 158.23.184.117:20513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/.well-known/wp-blog-header.php"] [unique_id "apK9lS04twRPFuquKD2gigAAAIg"]
[Sat Aug 29 05:08:05.680941 2026] [security2:error] [pid 1034096:tid 1034353] [client 20.203.141.11:33690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/a1.php"] [unique_id "apK9lS04twRPFuquKD2gjAAAAOs"]
[Sat Aug 29 05:08:05.689601 2026] [security2:error] [pid 1034096:tid 1034308] [client 40.83.93.50:9190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/xmlrpc.php0"] [unique_id "apK9lS04twRPFuquKD2ghgAAAL4"]
[Sat Aug 29 05:08:05.692015 2026] [security2:error] [pid 1034096:tid 1034304] [client 20.104.104.62:37600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/anz.php"] [unique_id "apK9lS04twRPFuquKD2gjQAAALo"]
[Sat Aug 29 05:08:05.694593 2026] [security2:error] [pid 1034096:tid 1034336] [client 158.23.184.117:31689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/.well-known/api.php"] [unique_id "apK9lS04twRPFuquKD2gjgAAANo"]
[Sat Aug 29 05:08:05.701930 2026] [security2:error] [pid 1028675:tid 1028932] [client 20.63.81.20:55437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/fex.php"] [unique_id "apK9lddHPfW2QFvhmL4BJAAAAHo"]
[Sat Aug 29 05:08:05.705895 2026] [security2:error] [pid 1034096:tid 1034295] [client 20.104.18.15:16892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/ap.php"] [unique_id "apK9lS04twRPFuquKD2gkAAAALE"]
[Sat Aug 29 05:08:05.716503 2026] [security2:error] [pid 1034096:tid 1034323] [client 20.104.104.62:65251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/mcd.php"] [unique_id "apK9lS04twRPFuquKD2gkQAAAM0"]
[Sat Aug 29 05:08:05.721297 2026] [security2:error] [pid 1034096:tid 1034278] [client 20.104.18.15:39826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/admin.php"] [unique_id "apK9lS04twRPFuquKD2gkwAAAKA"]
[Sat Aug 29 05:08:05.725923 2026] [security2:error] [pid 1034096:tid 1034270] [client 68.155.159.216:49261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK9lS04twRPFuquKD2glQAAAJg"]
[Sat Aug 29 05:08:05.762174 2026] [security2:error] [pid 1028675:tid 1028820] [client 158.23.147.79:32665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK9lddHPfW2QFvhmL4BJQAAAAo"]
[Sat Aug 29 05:08:05.788844 2026] [security2:error] [pid 1034096:tid 1034291] [client 158.23.147.79:17479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-includes/js/index.php"] [unique_id "apK9lS04twRPFuquKD2gmQAAAK0"]
[Sat Aug 29 05:08:05.790669 2026] [security2:error] [pid 1034096:tid 1034352] [client 20.197.61.180:1678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/contentloader1.php"] [unique_id "apK9lS04twRPFuquKD2gmwAAAOo"]
[Sat Aug 29 05:08:05.813889 2026] [security2:error] [pid 1034096:tid 1034376] [client 20.240.128.207:31066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/images/index.php"] [unique_id "apK9lS04twRPFuquKD2gnAAAAQI"]
[Sat Aug 29 05:08:05.818646 2026] [security2:error] [pid 1028675:tid 1028886] [client 158.23.184.117:57801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/.well-known/wp-links-opml.php"] [unique_id "apK9lddHPfW2QFvhmL4BJgAAAEw"]
[Sat Aug 29 05:08:05.831965 2026] [security2:error] [pid 1034096:tid 1034341] [client 52.139.37.240:36861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/must.php"] [unique_id "apK9lS04twRPFuquKD2gngAAAN8"]
[Sat Aug 29 05:08:05.831980 2026] [security2:error] [pid 1034096:tid 1034283] [client 158.23.184.117:2955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/wp-includes/Requests/Exception/file.php"] [unique_id "apK9lS04twRPFuquKD2gnwAAAKU"]
[Sat Aug 29 05:08:05.834497 2026] [security2:error] [pid 1034096:tid 1034361] [client 20.104.18.15:16872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/media.php"] [unique_id "apK9lS04twRPFuquKD2goAAAAPM"]
[Sat Aug 29 05:08:05.838950 2026] [security2:error] [pid 1034096:tid 1034310] [client 158.23.184.117:31491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/.well-known/chosen.php"] [unique_id "apK9lS04twRPFuquKD2goQAAAMA"]
[Sat Aug 29 05:08:05.839458 2026] [security2:error] [pid 1028675:tid 1028824] [client 20.63.81.20:55373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/l.php"] [unique_id "apK9lddHPfW2QFvhmL4BJwAAAA4"]
[Sat Aug 29 05:08:05.845921 2026] [security2:error] [pid 1034096:tid 1034289] [client 20.196.209.81:10439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-admin/test.php"] [unique_id "apK9lS04twRPFuquKD2gogAAAKs"]
[Sat Aug 29 05:08:05.862061 2026] [security2:error] [pid 1034096:tid 1034349] [client 158.23.147.79:49824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-login.php"] [unique_id "apK9lS04twRPFuquKD2gpAAAAOc"]
[Sat Aug 29 05:08:05.891329 2026] [security2:error] [pid 1034096:tid 1034362] [client 45.148.10.62:55734] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.worldofboardcraft.com"] [uri "/.env"] [unique_id "apK9lS04twRPFuquKD2gpQAAAPQ"]
[Sat Aug 29 05:08:05.893535 2026] [security2:error] [pid 1034096:tid 1034359] [client 40.83.93.50:8977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/add_actualites.php"] [unique_id "apK9lS04twRPFuquKD2gpgAAAPE"]
[Sat Aug 29 05:08:05.906781 2026] [security2:error] [pid 1034096:tid 1034285] [client 213.209.159.223:18337] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/.env"] [unique_id "apK9lS04twRPFuquKD2gpwAAAKc"]
[Sat Aug 29 05:08:05.923510 2026] [security2:error] [pid 1028675:tid 1028898] [client 20.100.175.163:5490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/goods.php"] [unique_id "apK9lddHPfW2QFvhmL4BKQAAAFg"]
[Sat Aug 29 05:08:05.961228 2026] [security2:error] [pid 1028675:tid 1028920] [client 20.104.18.15:39913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/admin.php"] [unique_id "apK9lddHPfW2QFvhmL4BKgAAAG4"]
[Sat Aug 29 05:08:05.963583 2026] [security2:error] [pid 1034096:tid 1034317] [client 20.104.18.15:16862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/adminfuns.php"] [unique_id "apK9lS04twRPFuquKD2grQAAAMc"]
[Sat Aug 29 05:08:05.984699 2026] [security2:error] [pid 1034096:tid 1034314] [client 158.23.184.117:31494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/.well-known/config.php"] [unique_id "apK9lS04twRPFuquKD2gsAAAAMQ"]
[Sat Aug 29 05:08:05.988367 2026] [security2:error] [pid 1034096:tid 1034256] [client 158.23.184.117:21246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/.well-known/wp-load.php"] [unique_id "apK9lS04twRPFuquKD2gsQAAAIo"]
[Sat Aug 29 05:08:05.998397 2026] [security2:error] [pid 1028675:tid 1028910] [client 20.63.81.20:55411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/xr.php"] [unique_id "apK9lddHPfW2QFvhmL4BLQAAAGQ"]
[Sat Aug 29 05:08:06.025150 2026] [security2:error] [pid 1034096:tid 1034322] [client 52.139.37.240:36801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/up.php"] [unique_id "apK9li04twRPFuquKD2gtAAAAMw"]
[Sat Aug 29 05:08:06.036433 2026] [security2:error] [pid 1028675:tid 1028870] [client 158.23.184.117:2777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/wp-admin/add.php"] [unique_id "apK9ltdHPfW2QFvhmL4BLwAAADw"]
[Sat Aug 29 05:08:06.037073 2026] [security2:error] [pid 1028675:tid 1028837] [client 68.155.159.216:56531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/atomlib.php"] [unique_id "apK9ltdHPfW2QFvhmL4BMAAAABs"]
[Sat Aug 29 05:08:06.042127 2026] [security2:error] [pid 1034096:tid 1034251] [client 213.209.159.223:18337] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/api/.env"] [unique_id "apK9li04twRPFuquKD2gtgAAAIU"]
[Sat Aug 29 05:08:06.043903 2026] [security2:error] [pid 1034096:tid 1034320] [client 20.52.41.200:4555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-content/packed.php"] [unique_id "apK9li04twRPFuquKD2gtwAAAMo"]
[Sat Aug 29 05:08:06.056284 2026] [security2:error] [pid 1034096:tid 1034356] [client 68.155.159.216:18418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK9li04twRPFuquKD2guAAAAO4"]
[Sat Aug 29 05:08:06.079672 2026] [security2:error] [pid 1034096:tid 1034365] [client 20.63.219.114:18531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/blog.php"] [unique_id "apK9li04twRPFuquKD2guQAAAPc"]
[Sat Aug 29 05:08:06.091037 2026] [security2:error] [pid 1034096:tid 1034261] [client 20.203.141.11:6643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/f.php"] [unique_id "apK9li04twRPFuquKD2gugAAAI8"]
[Sat Aug 29 05:08:06.095576 2026] [security2:error] [pid 1028675:tid 1028908] [client 20.104.18.15:16782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/classwithtostring.php"] [unique_id "apK9ltdHPfW2QFvhmL4BMgAAAGI"]
[Sat Aug 29 05:08:06.101211 2026] [security2:error] [pid 1028675:tid 1028819] [client 20.104.18.15:39898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/themes.php"] [unique_id "apK9ltdHPfW2QFvhmL4BMwAAAAk"]
[Sat Aug 29 05:08:06.111498 2026] [security2:error] [pid 1028675:tid 1028821] [client 158.23.147.79:6126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/NewFile.php/"] [unique_id "apK9ltdHPfW2QFvhmL4BNAAAAAs"]
[Sat Aug 29 05:08:06.129614 2026] [security2:error] [pid 1034096:tid 1034298] [client 68.155.159.216:16218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-includes/plugins.php"] [unique_id "apK9li04twRPFuquKD2gvwAAALQ"]
[Sat Aug 29 05:08:06.131970 2026] [security2:error] [pid 1034096:tid 1034335] [client 158.23.184.117:31525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/.well-known/core.php"] [unique_id "apK9li04twRPFuquKD2gwAAAANk"]
[Sat Aug 29 05:08:06.132706 2026] [security2:error] [pid 1034096:tid 1034292] [client 158.23.184.117:57807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/.well-known/wp-mail.php"] [unique_id "apK9li04twRPFuquKD2gwQAAAK4"]
[Sat Aug 29 05:08:06.144619 2026] [security2:error] [pid 1034096:tid 1034331] [client 4.205.62.107:8711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/god.php"] [unique_id "apK9li04twRPFuquKD2gwwAAANU"]
[Sat Aug 29 05:08:06.145002 2026] [security2:error] [pid 1034096:tid 1034284] [client 20.63.81.20:55508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/Q3.php"] [unique_id "apK9li04twRPFuquKD2gxAAAAKY"]
[Sat Aug 29 05:08:06.152716 2026] [security2:error] [pid 1028675:tid 1028856] [client 103.240.76.112:43474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK9ltdHPfW2QFvhmL4BNgAAAC4"]
[Sat Aug 29 05:08:06.152807 2026] [security2:error] [pid 1028675:tid 1028856] [client 103.240.76.112:43474] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK9ltdHPfW2QFvhmL4BNgAAAC4"]
[Sat Aug 29 05:08:06.177044 2026] [security2:error] [pid 1034096:tid 1034270] [client 213.209.159.223:18337] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/backend/.env"] [unique_id "apK9li04twRPFuquKD2gyQAAAJg"]
[Sat Aug 29 05:08:06.178256 2026] [security2:error] [pid 1034096:tid 1034295] [client 158.23.184.117:2607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/wp-includes/assets/about.php"] [unique_id "apK9li04twRPFuquKD2gygAAALE"]
[Sat Aug 29 05:08:06.190169 2026] [security2:error] [pid 1034096:tid 1034337] [client 40.83.93.50:8443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/content.php"] [unique_id "apK9li04twRPFuquKD2gywAAANs"]
[Sat Aug 29 05:08:06.201294 2026] [security2:error] [pid 1028675:tid 1028855] [client 158.23.147.79:26379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK9ltdHPfW2QFvhmL4BOAAAAC0"]
[Sat Aug 29 05:08:06.203042 2026] [security2:error] [pid 1028675:tid 1028835] [client 158.23.147.79:11341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/NewFile.php/"] [unique_id "apK9ltdHPfW2QFvhmL4BOQAAABk"]
[Sat Aug 29 05:08:06.209062 2026] [security2:error] [pid 1034096:tid 1034344] [client 158.23.147.79:37778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/cgi-bin/index.php"] [unique_id "apK9li04twRPFuquKD2gzAAAAOI"]
[Sat Aug 29 05:08:06.215899 2026] [security2:error] [pid 1028675:tid 1028897] [client 20.203.141.11:33720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9ltdHPfW2QFvhmL4BOgAAAFc"]
[Sat Aug 29 05:08:06.217892 2026] [http2:warn] [pid 1017536:tid 1017681] [client 74.7.241.38:60088] h2_stream(1017536-31-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:08:06.217916 2026] [http2:warn] [pid 1017536:tid 1017681] [client 74.7.241.38:60088] h2_stream(1017536-31-3,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:08:06.230191 2026] [security2:error] [pid 1034096:tid 1034279] [client 20.104.18.15:16839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK9li04twRPFuquKD2gzgAAAKE"]
[Sat Aug 29 05:08:06.269212 2026] [security2:error] [pid 1034096:tid 1034352] [client 213.209.159.223:7479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.greatdecisionsofcharlevoix.com"] [uri "/phpinfo.php"] [unique_id "apK9li04twRPFuquKD2g0AAAAOo"]
[Sat Aug 29 05:08:06.269981 2026] [security2:error] [pid 1034096:tid 1034348] [client 4.205.62.107:21925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/mcebraed.php"] [unique_id "apK9li04twRPFuquKD2g0QAAAOY"]
[Sat Aug 29 05:08:06.277732 2026] [security2:error] [pid 1034096:tid 1034343] [client 158.23.184.117:31687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/.well-known/data.php"] [unique_id "apK9li04twRPFuquKD2g0gAAAOE"]
[Sat Aug 29 05:08:06.283898 2026] [security2:error] [pid 1034096:tid 1034376] [client 20.104.18.15:39884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/biufile.php"] [unique_id "apK9li04twRPFuquKD2g0wAAAQI"]
[Sat Aug 29 05:08:06.285511 2026] [security2:error] [pid 1034096:tid 1034358] [client 158.23.184.117:21115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/.well-known/wp-settings.php"] [unique_id "apK9li04twRPFuquKD2g1wAAAPA"]
[Sat Aug 29 05:08:06.286011 2026] [security2:error] [pid 1034096:tid 1034376] [client 213.209.159.223:62269] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/.env"] [unique_id "apK9li04twRPFuquKD2g1gAAAQI"]
[Sat Aug 29 05:08:06.287110 2026] [security2:error] [pid 1034096:tid 1034318] [client 45.148.10.62:55734] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.worldofboardcraft.com"] [uri "/.env"] [unique_id "apK9li04twRPFuquKD2g1AAAAMg"]
[Sat Aug 29 05:08:06.287185 2026] [security2:error] [pid 1034096:tid 1034341] [client 20.63.81.20:55402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/Q1.php"] [unique_id "apK9li04twRPFuquKD2g2AAAAN8"]
[Sat Aug 29 05:08:06.288064 2026] [security2:error] [pid 1034096:tid 1034283] [client 52.139.37.240:36820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/wp-content/155.php"] [unique_id "apK9li04twRPFuquKD2g2QAAAKU"]
[Sat Aug 29 05:08:06.311966 2026] [security2:error] [pid 1034096:tid 1034277] [client 213.209.159.223:18337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/phpinfo.php"] [unique_id "apK9li04twRPFuquKD2g2wAAAJ8"]
[Sat Aug 29 05:08:06.315601 2026] [security2:error] [pid 1034096:tid 1034347] [client 4.205.62.107:51460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/environment.php"] [unique_id "apK9li04twRPFuquKD2g3QAAAOU"]
[Sat Aug 29 05:08:06.320596 2026] [security2:error] [pid 1034096:tid 1034357] [client 158.23.184.117:2562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/wp-content/themes/twentytwentythree.php"] [unique_id "apK9li04twRPFuquKD2g3gAAAO8"]
[Sat Aug 29 05:08:06.361950 2026] [security2:error] [pid 1028675:tid 1028887] [client 20.104.18.15:16852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/5PJcpMFsD8B.php"] [unique_id "apK9ltdHPfW2QFvhmL4BPAAAAE0"]
[Sat Aug 29 05:08:06.375677 2026] [security2:error] [pid 1034096:tid 1034256] [client 20.104.49.130:52537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.carlosmua.com"] [uri "/cilus.php"] [unique_id "apK9li04twRPFuquKD2g4gAAAIo"]
[Sat Aug 29 05:08:06.413224 2026] [security2:error] [pid 1034096:tid 1034340] [client 40.83.93.50:9159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/alfanew.php7"] [unique_id "apK9li04twRPFuquKD2g5wAAAN4"]
[Sat Aug 29 05:08:06.414164 2026] [security2:error] [pid 1034096:tid 1034356] [client 20.63.81.20:55452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/nz.php"] [unique_id "apK9li04twRPFuquKD2g6AAAAO4"]
[Sat Aug 29 05:08:06.418349 2026] [security2:error] [pid 1034096:tid 1034332] [client 20.196.209.81:17337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-admin/user/f35.php"] [unique_id "apK9li04twRPFuquKD2g6QAAANY"]
[Sat Aug 29 05:08:06.422085 2026] [security2:error] [pid 1034096:tid 1034378] [client 213.209.159.223:62269] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/api/.env"] [unique_id "apK9li04twRPFuquKD2g6gAAAQQ"]
[Sat Aug 29 05:08:06.422819 2026] [security2:error] [pid 1034096:tid 1034363] [client 158.23.184.117:31682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/.well-known/db-status.php"] [unique_id "apK9li04twRPFuquKD2g6wAAAPU"]
[Sat Aug 29 05:08:06.425323 2026] [security2:error] [pid 1034096:tid 1034302] [client 20.104.18.15:39823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/coffexium.php"] [unique_id "apK9li04twRPFuquKD2g7QAAALg"]
[Sat Aug 29 05:08:06.426256 2026] [security2:error] [pid 1034096:tid 1034291] [client 20.100.175.163:11018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/css.php"] [unique_id "apK9li04twRPFuquKD2g7gAAAK0"]
[Sat Aug 29 05:08:06.426943 2026] [security2:error] [pid 1034096:tid 1034316] [client 158.23.184.117:57837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/.well-known/wp-signup.php"] [unique_id "apK9li04twRPFuquKD2g7wAAAMY"]
[Sat Aug 29 05:08:06.434517 2026] [security2:error] [pid 1034096:tid 1034259] [client 20.63.219.114:18526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/bypass.php"] [unique_id "apK9li04twRPFuquKD2g8AAAAI0"]
[Sat Aug 29 05:08:06.486236 2026] [security2:error] [pid 1028675:tid 1028857] [client 52.139.37.240:36862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/wp-update.php"] [unique_id "apK9ltdHPfW2QFvhmL4BPwAAAC8"]
[Sat Aug 29 05:08:06.487282 2026] [security2:error] [pid 1034096:tid 1034359] [client 20.52.41.200:5331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-admin/js/index.php"] [unique_id "apK9li04twRPFuquKD2g9QAAAPE"]
[Sat Aug 29 05:08:06.487296 2026] [security2:error] [pid 1028675:tid 1028858] [client 68.155.159.216:24508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK9ltdHPfW2QFvhmL4BQAAAADA"]
[Sat Aug 29 05:08:06.489523 2026] [security2:error] [pid 1034096:tid 1034331] [client 20.104.18.15:16789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK9li04twRPFuquKD2g9gAAANU"]
[Sat Aug 29 05:08:06.513630 2026] [security2:error] [pid 1034096:tid 1034255] [client 20.240.128.207:27541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/inputs.php"] [unique_id "apK9li04twRPFuquKD2g-QAAAIk"]
[Sat Aug 29 05:08:06.517694 2026] [security2:error] [pid 1034096:tid 1034287] [client 158.23.184.117:2770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/wp-content/languages/themes/num.php"] [unique_id "apK9li04twRPFuquKD2g-gAAAKk"]
[Sat Aug 29 05:08:06.527417 2026] [security2:error] [pid 1034096:tid 1034262] [client 20.197.61.180:12354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/al.php"] [unique_id "apK9li04twRPFuquKD2g-wAAAJA"]
[Sat Aug 29 05:08:06.530107 2026] [security2:error] [pid 1034096:tid 1034351] [client 68.155.159.216:6031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/xmlrpc.php"] [unique_id "apK9li04twRPFuquKD2g_QAAAOk"]
[Sat Aug 29 05:08:06.545030 2026] [security2:error] [pid 1034096:tid 1034360] [client 20.203.141.11:25348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/av.php"] [unique_id "apK9li04twRPFuquKD2g_wAAAPI"]
[Sat Aug 29 05:08:06.547115 2026] [security2:error] [pid 1028675:tid 1028863] [client 20.63.81.20:55402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/sg.php"] [unique_id "apK9ltdHPfW2QFvhmL4BQgAAADU"]
[Sat Aug 29 05:08:06.558750 2026] [security2:error] [pid 1034096:tid 1034258] [client 213.209.159.223:62269] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/backend/.env"] [unique_id "apK9li04twRPFuquKD2hAQAAAIw"]
[Sat Aug 29 05:08:06.561782 2026] [security2:error] [pid 1034096:tid 1034320] [client 49.13.167.123:56340] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.goldenage-wtic.org"] [uri "/index.html"] [unique_id "apK9li04twRPFuquKD2hAAAAAMo"], referer: https://www.goldenage-wtic.org/
[Sat Aug 29 05:08:06.565954 2026] [security2:error] [pid 1034096:tid 1034337] [client 158.23.184.117:31709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/.well-known/f35.php"] [unique_id "apK9li04twRPFuquKD2hAgAAANs"]
[Sat Aug 29 05:08:06.570085 2026] [security2:error] [pid 1028675:tid 1028813] [client 158.23.184.117:57815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/002.php"] [unique_id "apK9ltdHPfW2QFvhmL4BQwAAAAM"]
[Sat Aug 29 05:08:06.570652 2026] [security2:error] [pid 1034096:tid 1034333] [client 4.205.62.107:21912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/public/bnn_.php.php"] [unique_id "apK9li04twRPFuquKD2hAwAAANc"]
[Sat Aug 29 05:08:06.620192 2026] [security2:error] [pid 1028675:tid 1028812] [client 20.104.18.15:16835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/wsd.php"] [unique_id "apK9ltdHPfW2QFvhmL4BRAAAAAI"]
[Sat Aug 29 05:08:06.624604 2026] [security2:error] [pid 1028675:tid 1028918] [client 4.205.62.107:24988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/session.php"] [unique_id "apK9ltdHPfW2QFvhmL4BRQAAAGw"]
[Sat Aug 29 05:08:06.661045 2026] [security2:error] [pid 1034096:tid 1034361] [client 20.104.18.15:39909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/coffee.php"] [unique_id "apK9li04twRPFuquKD2hBgAAAPM"]
[Sat Aug 29 05:08:06.663695 2026] [security2:error] [pid 1034096:tid 1034336] [client 158.23.184.117:2794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/wp.php"] [unique_id "apK9li04twRPFuquKD2hBwAAANo"]
[Sat Aug 29 05:08:06.668156 2026] [security2:error] [pid 1034096:tid 1034295] [client 40.83.93.50:14767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/wxo.php"] [unique_id "apK9li04twRPFuquKD2hCAAAALE"]
[Sat Aug 29 05:08:06.675502 2026] [security2:error] [pid 1034096:tid 1034304] [client 68.155.159.216:52820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK9li04twRPFuquKD2hCgAAALo"]
[Sat Aug 29 05:08:06.680672 2026] [security2:error] [pid 1028675:tid 1028896] [client 20.63.81.20:55461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/hypo.php"] [unique_id "apK9ltdHPfW2QFvhmL4BRwAAAFY"]
[Sat Aug 29 05:08:06.688807 2026] [security2:error] [pid 1028675:tid 1028839] [client 52.139.37.240:36838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/xmrlpc.php"] [unique_id "apK9ltdHPfW2QFvhmL4BSAAAAB0"]
[Sat Aug 29 05:08:06.694809 2026] [security2:error] [pid 1034096:tid 1034300] [client 213.209.159.223:62269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/phpinfo.php"] [unique_id "apK9li04twRPFuquKD2hCwAAALY"]
[Sat Aug 29 05:08:06.709319 2026] [security2:error] [pid 1034096:tid 1034311] [client 158.23.184.117:31532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK9li04twRPFuquKD2hDAAAAME"]
[Sat Aug 29 05:08:06.712810 2026] [security2:error] [pid 1034096:tid 1034276] [client 158.23.184.117:20491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/0x.php"] [unique_id "apK9li04twRPFuquKD2hDQAAAJ4"]
[Sat Aug 29 05:08:06.723953 2026] [security2:error] [pid 1028675:tid 1028815] [client 20.203.141.11:13200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/alfa-rex.php7"] [unique_id "apK9ltdHPfW2QFvhmL4BSQAAAAU"]
[Sat Aug 29 05:08:06.750316 2026] [security2:error] [pid 1034096:tid 1034307] [client 20.104.18.15:16881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/bulet.php"] [unique_id "apK9li04twRPFuquKD2hEgAAAL0"]
[Sat Aug 29 05:08:06.756508 2026] [security2:error] [pid 1034096:tid 1034289] [client 20.104.104.62:40112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/inwp.php"] [unique_id "apK9li04twRPFuquKD2hEwAAAKs"]
[Sat Aug 29 05:08:06.760584 2026] [security2:error] [pid 1034096:tid 1034256] [client 158.23.184.117:2755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/update/da222.php"] [unique_id "apK9li04twRPFuquKD2hFAAAAIo"]
[Sat Aug 29 05:08:06.791955 2026] [security2:error] [pid 1034096:tid 1034277] [client 20.63.219.114:8863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/extractable-loader-head.php"] [unique_id "apK9li04twRPFuquKD2hFwAAAJ8"]
[Sat Aug 29 05:08:06.792660 2026] [security2:error] [pid 1034096:tid 1034315] [client 4.205.62.107:53278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/setup-config.php"] [unique_id "apK9li04twRPFuquKD2hGAAAAMU"]
[Sat Aug 29 05:08:06.807586 2026] [security2:error] [pid 1034096:tid 1034314] [client 158.23.184.117:2766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/xmlrpc.php"] [unique_id "apK9li04twRPFuquKD2hGQAAAMQ"]
[Sat Aug 29 05:08:06.808992 2026] [security2:error] [pid 1034096:tid 1034288] [client 20.63.81.20:55368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/Hd.php"] [unique_id "apK9li04twRPFuquKD2hGgAAAKo"]
[Sat Aug 29 05:08:06.827045 2026] [security2:error] [pid 1034096:tid 1034316] [client 20.104.18.15:39877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/classwithtostring.php"] [unique_id "apK9li04twRPFuquKD2hGwAAAMY"]
[Sat Aug 29 05:08:06.828877 2026] [security2:error] [pid 1028675:tid 1028825] [client 20.104.104.62:37587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/bge.php"] [unique_id "apK9ltdHPfW2QFvhmL4BTQAAAA8"]
[Sat Aug 29 05:08:06.832454 2026] [security2:error] [pid 1034096:tid 1034254] [client 68.155.159.216:49262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-admin.php"] [unique_id "apK9li04twRPFuquKD2hHAAAAIg"]
[Sat Aug 29 05:08:06.841714 2026] [security2:error] [pid 1034096:tid 1034357] [client 20.196.209.81:17302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-admin/user/min.php"] [unique_id "apK9li04twRPFuquKD2hHQAAAO8"]
[Sat Aug 29 05:08:06.856492 2026] [security2:error] [pid 1034096:tid 1034265] [client 158.23.184.117:57804] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "rebecca.4callum.net"] [uri "/1.php"] [unique_id "apK9li04twRPFuquKD2hHgAAAJM"]
[Sat Aug 29 05:08:06.856559 2026] [security2:error] [pid 1034096:tid 1034265] [client 158.23.184.117:57804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/1.php"] [unique_id "apK9li04twRPFuquKD2hHgAAAJM"]
[Sat Aug 29 05:08:06.856683 2026] [security2:error] [pid 1028675:tid 1028876] [client 158.23.184.117:31681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/.well-known/home.php"] [unique_id "apK9ltdHPfW2QFvhmL4BTgAAAEI"]
[Sat Aug 29 05:08:06.867163 2026] [security2:error] [pid 1034096:tid 1034312] [client 158.23.147.79:32641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK9li04twRPFuquKD2hIAAAAMI"]
[Sat Aug 29 05:08:06.880868 2026] [security2:error] [pid 1034096:tid 1034308] [client 20.104.18.15:16794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/av.php"] [unique_id "apK9li04twRPFuquKD2hIQAAAL4"]
[Sat Aug 29 05:08:06.883422 2026] [security2:error] [pid 1034096:tid 1034332] [client 52.139.37.240:36731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/about/function.php"] [unique_id "apK9li04twRPFuquKD2hIgAAANY"]
[Sat Aug 29 05:08:06.892075 2026] [security2:error] [pid 1034096:tid 1034284] [client 158.23.147.79:17578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-content/index.php"] [unique_id "apK9li04twRPFuquKD2hIwAAAKY"]
[Sat Aug 29 05:08:06.901409 2026] [security2:error] [pid 1034096:tid 1034327] [client 45.148.10.62:55734] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.worldofboardcraft.com"] [uri "/api/.env"] [unique_id "apK9li04twRPFuquKD2hJAAAANE"]
[Sat Aug 29 05:08:06.904041 2026] [security2:error] [pid 1034096:tid 1034370] [client 40.83.93.50:9153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/xmlrpc.php0"] [unique_id "apK9li04twRPFuquKD2hJQAAAPw"]
[Sat Aug 29 05:08:06.924490 2026] [core:error] [pid 1034096:tid 1034309] [client 20.100.175.163:18110] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:06.924515 2026] [core:error] [pid 1034096:tid 1034309] [client 20.100.175.163:18110] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:06.927910 2026] [security2:error] [pid 1034096:tid 1034263] [client 158.23.184.117:2797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/xmr.php"] [unique_id "apK9li04twRPFuquKD2hJwAAAJE"]
[Sat Aug 29 05:08:06.941731 2026] [security2:error] [pid 1034096:tid 1034351] [client 20.63.81.20:55479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/im.php"] [unique_id "apK9li04twRPFuquKD2hKQAAAOk"]
[Sat Aug 29 05:08:06.943658 2026] [security2:error] [pid 1034096:tid 1034271] [client 20.52.41.200:5278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/core.php"] [unique_id "apK9li04twRPFuquKD2hKgAAAJk"]
[Sat Aug 29 05:08:06.958853 2026] [security2:error] [pid 1028675:tid 1028873] [client 158.23.184.117:55644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/app.php"] [unique_id "apK9ltdHPfW2QFvhmL4BTwAAAD8"]
[Sat Aug 29 05:08:06.968867 2026] [security2:error] [pid 1034096:tid 1034330] [client 213.209.159.223:2301] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_whm/.env"] [unique_id "apK9li04twRPFuquKD2hKwAAANQ"]
[Sat Aug 29 05:08:06.989198 2026] [security2:error] [pid 1034096:tid 1034337] [client 68.155.159.216:51706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/worksec.php"] [unique_id "apK9li04twRPFuquKD2hLAAAANs"]
[Sat Aug 29 05:08:06.999547 2026] [security2:error] [pid 1034096:tid 1034252] [client 158.23.184.117:31539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/.well-known/index.php"] [unique_id "apK9li04twRPFuquKD2hLQAAAIY"]
[Sat Aug 29 05:08:07.001959 2026] [security2:error] [pid 1028675:tid 1028878] [client 158.23.184.117:21214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/10.php"] [unique_id "apK9l9dHPfW2QFvhmL4BUQAAAEQ"]
[Sat Aug 29 05:08:07.004560 2026] [security2:error] [pid 1034096:tid 1034333] [client 213.209.159.223:50436] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/laravel/.env"] [unique_id "apK9ly04twRPFuquKD2hLgAAANc"]
[Sat Aug 29 05:08:07.010136 2026] [security2:error] [pid 1034096:tid 1034345] [client 20.240.128.207:27179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/alfa.php"] [unique_id "apK9ly04twRPFuquKD2hMAAAAOM"]
[Sat Aug 29 05:08:07.011398 2026] [security2:error] [pid 1028675:tid 1028937] [client 20.104.18.15:16842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/images.php"] [unique_id "apK9l9dHPfW2QFvhmL4BUwAAAH8"]
[Sat Aug 29 05:08:07.023544 2026] [security2:error] [pid 1034096:tid 1034356] [client 20.203.141.11:23665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/file.php"] [unique_id "apK9ly04twRPFuquKD2hMQAAAO4"]
[Sat Aug 29 05:08:07.033007 2026] [security2:error] [pid 1034096:tid 1034368] [client 45.148.10.60:21912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "villagebooksandbears.com"] [uri "/index.php"] [unique_id "apK9ly04twRPFuquKD2hMgAAAPo"]
[Sat Aug 29 05:08:07.049865 2026] [security2:error] [pid 1034096:tid 1034343] [client 45.148.10.62:55734] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.worldofboardcraft.com"] [uri "/.env.bak"] [unique_id "apK9ly04twRPFuquKD2hNQAAAOE"]
[Sat Aug 29 05:08:07.054082 2026] [security2:error] [pid 1034096:tid 1034374] [client 20.104.18.15:39915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/wp-ws68.php"] [unique_id "apK9ly04twRPFuquKD2hNgAAAQA"]
[Sat Aug 29 05:08:07.070075 2026] [security2:error] [pid 1028675:tid 1028916] [client 158.23.184.117:55638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK9l9dHPfW2QFvhmL4BVQAAAGo"]
[Sat Aug 29 05:08:07.078744 2026] [security2:error] [pid 1028675:tid 1028814] [client 52.139.37.240:36841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/an.php"] [unique_id "apK9l9dHPfW2QFvhmL4BVgAAAAQ"]
[Sat Aug 29 05:08:07.099092 2026] [security2:error] [pid 1034096:tid 1034350] [client 20.63.81.20:55522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/fc.php"] [unique_id "apK9ly04twRPFuquKD2hNwAAAOg"]
[Sat Aug 29 05:08:07.105010 2026] [security2:error] [pid 1034096:tid 1034335] [client 213.209.159.223:2301] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_whm/api/.env"] [unique_id "apK9ly04twRPFuquKD2hOQAAANk"]
[Sat Aug 29 05:08:07.106729 2026] [security2:error] [pid 1028675:tid 1028920] [client 158.23.184.117:55658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/aaa.php"] [unique_id "apK9l9dHPfW2QFvhmL4BVwAAAG4"]
[Sat Aug 29 05:08:07.141537 2026] [security2:error] [pid 1034096:tid 1034336] [client 213.209.159.223:50436] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/core/.env"] [unique_id "apK9ly04twRPFuquKD2hOgAAANo"]
[Sat Aug 29 05:08:07.146484 2026] [security2:error] [pid 1034096:tid 1034278] [client 68.155.159.216:38656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/lv.php"] [unique_id "apK9ly04twRPFuquKD2hOwAAAKA"]
[Sat Aug 29 05:08:07.146900 2026] [security2:error] [pid 1028675:tid 1028925] [client 20.104.18.15:16858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/ops.php"] [unique_id "apK9l9dHPfW2QFvhmL4BWQAAAHM"]
[Sat Aug 29 05:08:07.154871 2026] [security2:error] [pid 1028675:tid 1028922] [client 68.155.159.216:18184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-admin/images/about.php"] [unique_id "apK9l9dHPfW2QFvhmL4BWgAAAHA"]
[Sat Aug 29 05:08:07.165327 2026] [security2:error] [pid 1034096:tid 1034377] [client 20.63.219.114:16690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/defaults.php"] [unique_id "apK9ly04twRPFuquKD2hPAAAAQM"]
[Sat Aug 29 05:08:07.183241 2026] [security2:error] [pid 1034096:tid 1034355] [client 20.104.18.15:39861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/mgrr.php"] [unique_id "apK9ly04twRPFuquKD2hPQAAAO0"]
[Sat Aug 29 05:08:07.221076 2026] [security2:error] [pid 1028675:tid 1028930] [client 158.23.147.79:6033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/dropdown.php"] [unique_id "apK9l9dHPfW2QFvhmL4BXAAAAHg"]
[Sat Aug 29 05:08:07.222237 2026] [security2:error] [pid 1034096:tid 1034299] [client 20.203.141.11:24245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "apK9ly04twRPFuquKD2hQAAAALU"]
[Sat Aug 29 05:08:07.223703 2026] [security2:error] [pid 1034096:tid 1034320] [client 40.83.93.50:14722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/as.php"] [unique_id "apK9ly04twRPFuquKD2hQQAAAMo"]
[Sat Aug 29 05:08:07.231911 2026] [security2:error] [pid 1034096:tid 1034283] [client 20.196.209.81:10477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-admin/users.php"] [unique_id "apK9ly04twRPFuquKD2hQgAAAKU"]
[Sat Aug 29 05:08:07.232866 2026] [security2:error] [pid 1034096:tid 1034276] [client 20.63.81.20:55392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/ke.php"] [unique_id "apK9ly04twRPFuquKD2hQwAAAJ4"]
[Sat Aug 29 05:08:07.240717 2026] [security2:error] [pid 1034096:tid 1034353] [client 213.209.159.223:2301] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_whm/backend/.env"] [unique_id "apK9ly04twRPFuquKD2hRAAAAOs"]
[Sat Aug 29 05:08:07.252998 2026] [security2:error] [pid 1034096:tid 1034348] [client 68.155.159.216:16158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK9ly04twRPFuquKD2hRgAAAOY"]
[Sat Aug 29 05:08:07.278802 2026] [security2:error] [pid 1034096:tid 1034300] [client 52.139.37.240:36694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/asw.php"] [unique_id "apK9ly04twRPFuquKD2hSAAAALY"]
[Sat Aug 29 05:08:07.280520 2026] [security2:error] [pid 1034096:tid 1034313] [client 20.104.18.15:16793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/coffexium.php"] [unique_id "apK9ly04twRPFuquKD2hSQAAAMM"]
[Sat Aug 29 05:08:07.310157 2026] [security2:error] [pid 1028675:tid 1028910] [client 20.197.61.180:9841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/global.php"] [unique_id "apK9l9dHPfW2QFvhmL4BXwAAAGQ"]
[Sat Aug 29 05:08:07.322148 2026] [security2:error] [pid 1034096:tid 1034315] [client 20.104.18.15:39929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/55.php"] [unique_id "apK9ly04twRPFuquKD2hTQAAAMU"]
[Sat Aug 29 05:08:07.349818 2026] [security2:error] [pid 1034096:tid 1034340] [client 213.209.159.223:58320] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/.env"] [unique_id "apK9ly04twRPFuquKD2hTwAAAN4"]
[Sat Aug 29 05:08:07.359768 2026] [security2:error] [pid 1034096:tid 1034363] [client 20.63.81.20:55549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/tf.php"] [unique_id "apK9ly04twRPFuquKD2hUQAAAPU"]
[Sat Aug 29 05:08:07.362548 2026] [security2:error] [pid 1034096:tid 1034316] [client 4.205.62.107:8747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/fleen.php"] [unique_id "apK9ly04twRPFuquKD2hUgAAAMY"]
[Sat Aug 29 05:08:07.366880 2026] [security2:error] [pid 1034096:tid 1034259] [client 158.23.147.79:26585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-admin/user/index.php"] [unique_id "apK9ly04twRPFuquKD2hUwAAAI0"]
[Sat Aug 29 05:08:07.375932 2026] [security2:error] [pid 1034096:tid 1034254] [client 213.209.159.223:2301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/phpinfo.php"] [unique_id "apK9ly04twRPFuquKD2hVAAAAIg"]
[Sat Aug 29 05:08:07.378853 2026] [security2:error] [pid 1034096:tid 1034321] [client 213.209.159.223:15691] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/laravel/.env"] [unique_id "apK9ly04twRPFuquKD2hVQAAAMs"]
[Sat Aug 29 05:08:07.384434 2026] [security2:error] [pid 1034096:tid 1034373] [client 20.52.41.200:4548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/admin/function.php"] [unique_id "apK9ly04twRPFuquKD2hVgAAAP8"]
[Sat Aug 29 05:08:07.398835 2026] [security2:error] [pid 1034096:tid 1034293] [client 40.83.93.50:8391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/content.php"] [unique_id "apK9ly04twRPFuquKD2hVwAAAK8"]
[Sat Aug 29 05:08:07.424897 2026] [security2:error] [pid 1034096:tid 1034308] [client 4.205.62.107:22522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/server-info.php"] [unique_id "apK9ly04twRPFuquKD2hWwAAAL4"]
[Sat Aug 29 05:08:07.425314 2026] [security2:error] [pid 1034096:tid 1034284] [client 20.104.18.15:16874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/BDKR28WP.php"] [unique_id "apK9ly04twRPFuquKD2hXAAAAKY"]
[Sat Aug 29 05:08:07.426875 2026] [core:error] [pid 1034096:tid 1034372] [client 20.100.175.163:6100] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:07.426889 2026] [core:error] [pid 1034096:tid 1034372] [client 20.100.175.163:6100] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:07.454178 2026] [security2:error] [pid 1034096:tid 1034287] [client 4.205.62.107:58380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/koiy.php"] [unique_id "apK9ly04twRPFuquKD2hYgAAAKk"]
[Sat Aug 29 05:08:07.455790 2026] [security2:error] [pid 1034096:tid 1034263] [client 68.155.159.216:64400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK9ly04twRPFuquKD2hYwAAAJE"]
[Sat Aug 29 05:08:07.482131 2026] [security2:error] [pid 1034096:tid 1034351] [client 20.104.18.15:39754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/yj09.php"] [unique_id "apK9ly04twRPFuquKD2hZQAAAOk"]
[Sat Aug 29 05:08:07.483346 2026] [security2:error] [pid 1028675:tid 1028862] [client 20.63.81.20:55466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/px.php"] [unique_id "apK9l9dHPfW2QFvhmL4BYwAAADQ"]
[Sat Aug 29 05:08:07.488334 2026] [security2:error] [pid 1034096:tid 1034360] [client 158.23.147.79:17568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK9ly04twRPFuquKD2hZgAAAPI"]
[Sat Aug 29 05:08:07.488911 2026] [security2:error] [pid 1034096:tid 1034328] [client 20.203.141.11:22433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK9ly04twRPFuquKD2hZwAAANI"]
[Sat Aug 29 05:08:07.495475 2026] [security2:error] [pid 1034096:tid 1034330] [client 158.23.147.79:50116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK9ly04twRPFuquKD2haAAAANQ"]
[Sat Aug 29 05:08:07.505451 2026] [security2:error] [pid 1034096:tid 1034279] [client 45.148.10.62:55734] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.worldofboardcraft.com"] [uri "/stripe/.env"] [unique_id "apK9ly04twRPFuquKD2haQAAAKE"]
[Sat Aug 29 05:08:07.507376 2026] [security2:error] [pid 1034096:tid 1034251] [client 20.240.128.207:24737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/403.php"] [unique_id "apK9ly04twRPFuquKD2hagAAAIU"]
[Sat Aug 29 05:08:07.517464 2026] [security2:error] [pid 1034096:tid 1034378] [client 213.209.159.223:50732] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/.env"] [unique_id "apK9ly04twRPFuquKD2hawAAAQQ"]
[Sat Aug 29 05:08:07.523807 2026] [security2:error] [pid 1034096:tid 1034333] [client 213.209.159.223:15691] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/core/.env"] [unique_id "apK9ly04twRPFuquKD2hbAAAANc"]
[Sat Aug 29 05:08:07.547978 2026] [security2:error] [pid 1034096:tid 1034329] [client 213.209.159.223:58320] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/api/.env"] [unique_id "apK9ly04twRPFuquKD2hbQAAANM"]
[Sat Aug 29 05:08:07.567086 2026] [security2:error] [pid 1034096:tid 1034318] [client 20.104.18.15:16885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/sf.php"] [unique_id "apK9ly04twRPFuquKD2hbwAAAMg"]
[Sat Aug 29 05:08:07.572344 2026] [security2:error] [pid 1034096:tid 1034309] [client 20.63.219.114:18514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/post.php"] [unique_id "apK9ly04twRPFuquKD2hcAAAAL8"]
[Sat Aug 29 05:08:07.585111 2026] [security2:error] [pid 1034096:tid 1034335] [client 213.209.159.223:50436] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/app/.env"] [unique_id "apK9ly04twRPFuquKD2hcQAAANk"]
[Sat Aug 29 05:08:07.610845 2026] [security2:error] [pid 1028675:tid 1028887] [client 20.63.81.20:55473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/jg.php"] [unique_id "apK9l9dHPfW2QFvhmL4BZAAAAE0"]
[Sat Aug 29 05:08:07.626440 2026] [security2:error] [pid 1034096:tid 1034354] [client 20.196.209.81:10455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-admin/wp-cron.php"] [unique_id "apK9ly04twRPFuquKD2heAAAAOw"]
[Sat Aug 29 05:08:07.639460 2026] [security2:error] [pid 1034096:tid 1034355] [client 68.155.159.216:6111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/atomlib.php"] [unique_id "apK9ly04twRPFuquKD2heQAAAO0"]
[Sat Aug 29 05:08:07.657998 2026] [security2:error] [pid 1034096:tid 1034311] [client 20.104.18.15:39812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/scxy.php"] [unique_id "apK9ly04twRPFuquKD2hfgAAAME"]
[Sat Aug 29 05:08:07.658611 2026] [security2:error] [pid 1034096:tid 1034297] [client 213.209.159.223:50732] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/api/.env"] [unique_id "apK9ly04twRPFuquKD2hfAAAALM"]
[Sat Aug 29 05:08:07.669167 2026] [security2:error] [pid 1034096:tid 1034349] [client 195.178.110.247:3954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lisakaydeeter.com"] [uri "/index.php"] [unique_id "apK9ly04twRPFuquKD2hggAAAOc"]
[Sat Aug 29 05:08:07.697034 2026] [security2:error] [pid 1034096:tid 1034307] [client 20.104.18.15:16895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/k.php"] [unique_id "apK9ly04twRPFuquKD2hhAAAAL0"]
[Sat Aug 29 05:08:07.699246 2026] [security2:error] [pid 1034096:tid 1034317] [client 213.209.159.223:58320] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/backend/.env"] [unique_id "apK9ly04twRPFuquKD2hhQAAAMc"]
[Sat Aug 29 05:08:07.708183 2026] [security2:error] [pid 1034096:tid 1034310] [client 103.171.189.88:60929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9ly04twRPFuquKD2hhgAAAMA"]
[Sat Aug 29 05:08:07.708304 2026] [security2:error] [pid 1034096:tid 1034310] [client 103.171.189.88:60929] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9ly04twRPFuquKD2hhgAAAMA"]
[Sat Aug 29 05:08:07.722100 2026] [security2:error] [pid 1034096:tid 1034323] [client 213.209.159.223:50436] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/dev/.env"] [unique_id "apK9ly04twRPFuquKD2hiAAAAM0"]
[Sat Aug 29 05:08:07.730285 2026] [security2:error] [pid 1034096:tid 1034341] [client 40.83.93.50:9171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/room.php"] [unique_id "apK9ly04twRPFuquKD2hiQAAAN8"]
[Sat Aug 29 05:08:07.736608 2026] [security2:error] [pid 1034096:tid 1034345] [client 20.203.141.11:18216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/upload.php"] [unique_id "apK9ly04twRPFuquKD2higAAAOM"]
[Sat Aug 29 05:08:07.739510 2026] [security2:error] [pid 1028675:tid 1028845] [client 20.63.81.20:55389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/yj.php"] [unique_id "apK9l9dHPfW2QFvhmL4BaQAAACM"]
[Sat Aug 29 05:08:07.748860 2026] [security2:error] [pid 1034096:tid 1034315] [client 68.155.159.216:33751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK9ly04twRPFuquKD2hiwAAAMU"]
[Sat Aug 29 05:08:07.751552 2026] [security2:error] [pid 1028675:tid 1028828] [client 4.205.62.107:22021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/php_info.php"] [unique_id "apK9l9dHPfW2QFvhmL4BagAAABI"]
[Sat Aug 29 05:08:07.777076 2026] [security2:error] [pid 1034096:tid 1034316] [client 4.205.62.107:26671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/h.php"] [unique_id "apK9ly04twRPFuquKD2hkQAAAMY"]
[Sat Aug 29 05:08:07.778410 2026] [security2:error] [pid 1034096:tid 1034259] [client 68.155.159.216:52742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-admin.php"] [unique_id "apK9ly04twRPFuquKD2hkwAAAI0"]
[Sat Aug 29 05:08:07.790578 2026] [security2:error] [pid 1034096:tid 1034270] [client 60.243.207.176:49368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK9ly04twRPFuquKD2hlQAAAJg"]
[Sat Aug 29 05:08:07.790678 2026] [security2:error] [pid 1034096:tid 1034270] [client 60.243.207.176:49368] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK9ly04twRPFuquKD2hlQAAAJg"]
[Sat Aug 29 05:08:07.795402 2026] [security2:error] [pid 1034096:tid 1034373] [client 213.209.159.223:50732] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/backend/.env"] [unique_id "apK9ly04twRPFuquKD2hlgAAAP8"]
[Sat Aug 29 05:08:07.825833 2026] [security2:error] [pid 1028675:tid 1028918] [client 20.104.18.15:39906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/ws13.php"] [unique_id "apK9l9dHPfW2QFvhmL4BbgAAAGw"]
[Sat Aug 29 05:08:07.828442 2026] [security2:error] [pid 1034096:tid 1034372] [client 213.209.159.223:48102] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/.env"] [unique_id "apK9ly04twRPFuquKD2hnQAAAP4"]
[Sat Aug 29 05:08:07.833151 2026] [security2:error] [pid 1034096:tid 1034301] [client 195.178.110.247:61574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lisakaydeeter.com"] [uri "/index.php"] [unique_id "apK9ly04twRPFuquKD2hngAAALc"]
[Sat Aug 29 05:08:07.833736 2026] [security2:error] [pid 1034096:tid 1034331] [client 20.104.49.130:30328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/coffexium.php"] [unique_id "apK9ly04twRPFuquKD2hnwAAANU"]
[Sat Aug 29 05:08:07.835743 2026] [security2:error] [pid 1034096:tid 1034263] [client 20.104.18.15:16798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/82.php"] [unique_id "apK9ly04twRPFuquKD2hoAAAAJE"]
[Sat Aug 29 05:08:07.838011 2026] [security2:error] [pid 1034096:tid 1034351] [client 213.209.159.223:58320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/phpinfo.php"] [unique_id "apK9ly04twRPFuquKD2hoQAAAOk"]
[Sat Aug 29 05:08:07.839444 2026] [security2:error] [pid 1034096:tid 1034360] [client 158.23.147.79:35778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/goat1.php"] [unique_id "apK9ly04twRPFuquKD2howAAAPI"]
[Sat Aug 29 05:08:07.840823 2026] [security2:error] [pid 1034096:tid 1034313] [client 20.52.41.200:5254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/admin/index.php"] [unique_id "apK9ly04twRPFuquKD2hpAAAAMM"]
[Sat Aug 29 05:08:07.842371 2026] [http2:warn] [pid 1017536:tid 1017690] [client 57.141.14.59:50242] h2_stream(1017536-275-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:08:07.895084 2026] [security2:error] [pid 1034096:tid 1034298] [client 20.63.81.20:55304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/zi.php"] [unique_id "apK9ly04twRPFuquKD2hqgAAALQ"]
[Sat Aug 29 05:08:07.935480 2026] [security2:error] [pid 1028675:tid 1028833] [client 4.205.62.107:53293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-admin/sc.php"] [unique_id "apK9l9dHPfW2QFvhmL4BcwAAABc"]
[Sat Aug 29 05:08:07.937889 2026] [security2:error] [pid 1034096:tid 1034374] [client 213.209.159.223:50732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/phpinfo.php"] [unique_id "apK9ly04twRPFuquKD2hrAAAAQA"]
[Sat Aug 29 05:08:07.939424 2026] [security2:error] [pid 1028675:tid 1028839] [client 20.104.18.15:14294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/wefile.php"] [unique_id "apK9l9dHPfW2QFvhmL4BdAAAAB0"]
[Sat Aug 29 05:08:07.939619 2026] [security2:error] [pid 1034096:tid 1034358] [client 213.209.159.223:15691] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/app/.env"] [unique_id "apK9ly04twRPFuquKD2hrQAAAPA"]
[Sat Aug 29 05:08:07.942847 2026] [security2:error] [pid 1034096:tid 1034275] [client 68.155.159.216:49205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK9ly04twRPFuquKD2hrwAAAJ0"]
[Sat Aug 29 05:08:07.943954 2026] [security2:error] [pid 1034096:tid 1034363] [client 20.100.175.163:29516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/w.php"] [unique_id "apK9ly04twRPFuquKD2hsAAAAPU"]
[Sat Aug 29 05:08:07.950497 2026] [security2:error] [pid 1034096:tid 1034253] [client 40.83.93.50:8989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/wxo.php"] [unique_id "apK9ly04twRPFuquKD2hsQAAAIc"]
[Sat Aug 29 05:08:07.952594 2026] [security2:error] [pid 1028675:tid 1028901] [client 20.63.219.114:15479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/csv.php"] [unique_id "apK9l9dHPfW2QFvhmL4BdgAAAFs"]
[Sat Aug 29 05:08:07.957511 2026] [security2:error] [pid 1034096:tid 1034265] [client 20.203.141.11:25351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/gmo.php"] [unique_id "apK9ly04twRPFuquKD2hswAAAJM"]
[Sat Aug 29 05:08:07.965581 2026] [security2:error] [pid 1034096:tid 1034350] [client 213.209.159.223:48102] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/api/.env"] [unique_id "apK9ly04twRPFuquKD2htQAAAOg"]
[Sat Aug 29 05:08:07.968431 2026] [security2:error] [pid 1034096:tid 1034335] [client 20.104.18.15:16877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/dex.php"] [unique_id "apK9ly04twRPFuquKD2htgAAANk"]
[Sat Aug 29 05:08:07.994534 2026] [security2:error] [pid 1034096:tid 1034361] [client 20.104.18.15:39892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/btx25.php"] [unique_id "apK9ly04twRPFuquKD2huAAAAPM"]
[Sat Aug 29 05:08:07.997382 2026] [security2:error] [pid 1034096:tid 1034304] [client 213.209.159.223:50436] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/server/.env"] [unique_id "apK9ly04twRPFuquKD2hugAAALo"]
[Sat Aug 29 05:08:07.999652 2026] [security2:error] [pid 1034096:tid 1034314] [client 158.23.147.79:17432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/about/function.php"] [unique_id "apK9ly04twRPFuquKD2hvAAAAMQ"]
[Sat Aug 29 05:08:08.001936 2026] [security2:error] [pid 1034096:tid 1034274] [client 27.34.67.175:43279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.67.34.27.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "re-alignpilates.com"] [uri "/xmlrpc.php"] [unique_id "apK9ly04twRPFuquKD2htwAAAJw"]
[Sat Aug 29 05:08:08.002004 2026] [security2:error] [pid 1034096:tid 1034274] [client 27.34.67.175:43279] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "re-alignpilates.com"] [uri "/xmlrpc.php"] [unique_id "apK9ly04twRPFuquKD2htwAAAJw"]
[Sat Aug 29 05:08:08.002750 2026] [security2:error] [pid 1034096:tid 1034271] [client 20.240.128.207:7416] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/1.php"] [unique_id "apK9mC04twRPFuquKD2hvQAAAJk"]
[Sat Aug 29 05:08:08.002814 2026] [security2:error] [pid 1034096:tid 1034271] [client 20.240.128.207:7416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/1.php"] [unique_id "apK9mC04twRPFuquKD2hvQAAAJk"]
[Sat Aug 29 05:08:08.003575 2026] [security2:error] [pid 1034096:tid 1034355] [client 20.104.18.15:18897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/alfa.php"] [unique_id "apK9mC04twRPFuquKD2hvgAAAO0"]
[Sat Aug 29 05:08:08.024699 2026] [security2:error] [pid 1034096:tid 1034261] [client 20.63.81.20:55312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/ue.php"] [unique_id "apK9mC04twRPFuquKD2hwAAAAI8"]
[Sat Aug 29 05:08:08.026623 2026] [security2:error] [pid 1034096:tid 1034327] [client 20.196.209.81:9047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-admin/wp-links-opml.php"] [unique_id "apK9mC04twRPFuquKD2hwQAAANE"]
[Sat Aug 29 05:08:08.038633 2026] [access_compat:error] [pid 1034096:tid 1034138] [remote 20.237.206.27:0] AH01797: client denied by server configuration: /home1/giantsfa/public_html/message_board/index.php
[Sat Aug 29 05:08:08.040188 2026] [access_compat:error] [pid 1034096:tid 1034140] [remote 20.237.206.27:0] AH01797: client denied by server configuration: /home1/giantsfa/public_html/message_board/index.php
[Sat Aug 29 05:08:08.064747 2026] [security2:error] [pid 1034096:tid 1034264] [client 103.168.67.159:60224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 159.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "naturalkneads.com"] [uri "/wordpress/index.php"] [unique_id "apK9mC04twRPFuquKD2hxAAAAJI"]
[Sat Aug 29 05:08:08.066724 2026] [security2:error] [pid 1028675:tid 1028904] [client 20.197.61.180:9826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/update.php"] [unique_id "apK9mNdHPfW2QFvhmL4BeAAAAF4"]
[Sat Aug 29 05:08:08.074178 2026] [security2:error] [pid 1034096:tid 1034317] [client 213.209.159.223:15691] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/dev/.env"] [unique_id "apK9mC04twRPFuquKD2hxQAAAMc"]
[Sat Aug 29 05:08:08.078605 2026] [security2:error] [pid 1034096:tid 1034281] [client 146.70.36.124:51188] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.mcrl.tech"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "apK9mC04twRPFuquKD2hxgAAAKM"]
[Sat Aug 29 05:08:08.083496 2026] [security2:error] [pid 1034096:tid 1034319] [client 213.209.159.223:54765] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_whm/laravel/.env"] [unique_id "apK9mC04twRPFuquKD2hxwAAAMk"]
[Sat Aug 29 05:08:08.099828 2026] [security2:error] [pid 1034096:tid 1034256] [client 20.104.18.15:16840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/inso.php"] [unique_id "apK9mC04twRPFuquKD2hyAAAAIo"]
[Sat Aug 29 05:08:08.102897 2026] [security2:error] [pid 1034096:tid 1034276] [client 213.209.159.223:48102] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/backend/.env"] [unique_id "apK9mC04twRPFuquKD2hyQAAAJ4"]
[Sat Aug 29 05:08:08.129775 2026] [security2:error] [pid 1028675:tid 1028886] [client 20.104.18.15:5059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/wp-admin/w.php"] [unique_id "apK9mNdHPfW2QFvhmL4BegAAAEw"]
[Sat Aug 29 05:08:08.129935 2026] [security2:error] [pid 1034096:tid 1034334] [client 20.104.18.15:12247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/goods.php"] [unique_id "apK9mC04twRPFuquKD2hygAAANg"]
[Sat Aug 29 05:08:08.138430 2026] [security2:error] [pid 1034096:tid 1034291] [client 20.104.18.15:13610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/blog.php"] [unique_id "apK9mC04twRPFuquKD2hzAAAAK0"]
[Sat Aug 29 05:08:08.147674 2026] [security2:error] [pid 1034096:tid 1034316] [client 20.104.18.15:39815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/SDsadqwrf.php"] [unique_id "apK9mC04twRPFuquKD2hzQAAAMY"]
[Sat Aug 29 05:08:08.156234 2026] [security2:error] [pid 1034096:tid 1034259] [client 45.148.10.62:55734] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.worldofboardcraft.com"] [uri "/backend/.env"] [unique_id "apK9mC04twRPFuquKD2hzgAAAI0"]
[Sat Aug 29 05:08:08.156850 2026] [security2:error] [pid 1034096:tid 1034254] [client 20.63.81.20:55382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/nv.php"] [unique_id "apK9mC04twRPFuquKD2hzwAAAIg"]
[Sat Aug 29 05:08:08.159085 2026] [access_compat:error] [pid 1034096:tid 1034139] [remote 20.237.206.27:0] AH01797: client denied by server configuration: /home1/giantsfa/public_html/message_board/index.php
[Sat Aug 29 05:08:08.201581 2026] [security2:error] [pid 1034096:tid 1034293] [client 20.104.18.15:18911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/33.php"] [unique_id "apK9mC04twRPFuquKD2h0wAAAK8"]
[Sat Aug 29 05:08:08.218395 2026] [security2:error] [pid 1034096:tid 1034372] [client 213.209.159.223:54765] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_whm/core/.env"] [unique_id "apK9mC04twRPFuquKD2h1QAAAP4"]
[Sat Aug 29 05:08:08.220296 2026] [security2:error] [pid 1034096:tid 1034336] [client 40.83.93.50:8397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/class-wp-cmd.php"] [unique_id "apK9mC04twRPFuquKD2h1gAAANo"]
[Sat Aug 29 05:08:08.230148 2026] [security2:error] [pid 1034096:tid 1034263] [client 20.104.18.15:16851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/aa.php"] [unique_id "apK9mC04twRPFuquKD2h1wAAAJE"]
[Sat Aug 29 05:08:08.239772 2026] [security2:error] [pid 1034096:tid 1034351] [client 213.209.159.223:48102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/phpinfo.php"] [unique_id "apK9mC04twRPFuquKD2h2AAAAOk"]
[Sat Aug 29 05:08:08.258534 2026] [security2:error] [pid 1028675:tid 1028937] [client 68.155.159.216:18321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK9mNdHPfW2QFvhmL4BfAAAAH8"]
[Sat Aug 29 05:08:08.271806 2026] [security2:error] [pid 1034096:tid 1034258] [client 132.166.183.166:39380] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "obd2toolz.com"] [uri "/image/cache/data/D1209-01-152x152.jpg"] [unique_id "apK9mC04twRPFuquKD2h2gAAAIw"]
[Sat Aug 29 05:08:08.280831 2026] [security2:error] [pid 1034096:tid 1034378] [client 20.104.18.15:12145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/ah.php"] [unique_id "apK9mC04twRPFuquKD2h3AAAAQQ"]
[Sat Aug 29 05:08:08.283211 2026] [security2:error] [pid 1034096:tid 1034289] [client 20.52.41.200:4573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/storage/rip.php"] [unique_id "apK9mC04twRPFuquKD2h3QAAAKs"]
[Sat Aug 29 05:08:08.286728 2026] [security2:error] [pid 1028675:tid 1028816] [client 20.63.81.20:55394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/jw.php"] [unique_id "apK9mNdHPfW2QFvhmL4BfgAAAAY"]
[Sat Aug 29 05:08:08.303811 2026] [security2:error] [pid 1034096:tid 1034298] [client 45.148.10.62:55734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.worldofboardcraft.com"] [uri "/test.php"] [unique_id "apK9mC04twRPFuquKD2h3gAAALQ"]
[Sat Aug 29 05:08:08.318668 2026] [security2:error] [pid 1034096:tid 1034360] [client 52.139.37.240:36846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/item.php"] [unique_id "apK9mC04twRPFuquKD2h4QAAAPI"]
[Sat Aug 29 05:08:08.326010 2026] [security2:error] [pid 1034096:tid 1034329] [client 158.23.147.79:6132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/.well-known/index.php"] [unique_id "apK9mC04twRPFuquKD2h4wAAANM"]
[Sat Aug 29 05:08:08.332003 2026] [security2:error] [pid 1028675:tid 1028883] [client 20.104.18.15:39902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/BDKR28WP.php"] [unique_id "apK9mNdHPfW2QFvhmL4BgAAAAEk"]
[Sat Aug 29 05:08:08.338296 2026] [security2:error] [pid 1034096:tid 1034284] [client 20.63.219.114:18519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/fox.php"] [unique_id "apK9mC04twRPFuquKD2h5QAAAKY"]
[Sat Aug 29 05:08:08.338581 2026] [security2:error] [pid 1028675:tid 1028920] [client 20.104.18.15:13571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/wp-admin/js/wp-load.php"] [unique_id "apK9mNdHPfW2QFvhmL4BgQAAAG4"]
[Sat Aug 29 05:08:08.346281 2026] [security2:error] [pid 1034096:tid 1034363] [client 213.209.159.223:15691] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/server/.env"] [unique_id "apK9mC04twRPFuquKD2h6AAAAPU"]
[Sat Aug 29 05:08:08.350329 2026] [security2:error] [pid 1028675:tid 1028922] [client 158.23.147.79:11275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/dropdown.php"] [unique_id "apK9mNdHPfW2QFvhmL4BggAAAHA"]
[Sat Aug 29 05:08:08.351191 2026] [security2:error] [pid 1034096:tid 1034253] [client 158.23.147.79:61620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK9mC04twRPFuquKD2h6QAAAIc"]
[Sat Aug 29 05:08:08.356590 2026] [security2:error] [pid 1034096:tid 1034357] [client 64.89.161.160:58180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 160.161.89.64.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "timportlock.net"] [uri "/assets/js/file-uploader/server/php/index.php"] [unique_id "apK9mC04twRPFuquKD2h5wAAAO8"]
[Sat Aug 29 05:08:08.360625 2026] [security2:error] [pid 1034096:tid 1034265] [client 20.104.18.15:16795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/img.php"] [unique_id "apK9mC04twRPFuquKD2h6wAAAJM"]
[Sat Aug 29 05:08:08.364133 2026] [security2:error] [pid 1034096:tid 1034309] [client 20.104.18.15:4877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/wp-content/k.php"] [unique_id "apK9mC04twRPFuquKD2h7AAAAL8"]
[Sat Aug 29 05:08:08.365800 2026] [security2:error] [pid 1034096:tid 1034335] [client 20.104.18.15:19341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/133.php"] [unique_id "apK9mC04twRPFuquKD2h7gAAANk"]
[Sat Aug 29 05:08:08.366411 2026] [access_compat:error] [pid 1034096:tid 1034142] [remote 20.237.206.27:0] AH01797: client denied by server configuration: /home1/giantsfa/public_html/message_board/index.php
[Sat Aug 29 05:08:08.376560 2026] [security2:error] [pid 1028675:tid 1028872] [client 146.70.36.124:51194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 124.36.70.146.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "cpanel.mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK9mNdHPfW2QFvhmL4BhQAAAD4"]
[Sat Aug 29 05:08:08.395424 2026] [security2:error] [pid 1034096:tid 1034361] [client 68.155.159.216:16297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/goat1.php"] [unique_id "apK9mC04twRPFuquKD2h8AAAAPM"]
[Sat Aug 29 05:08:08.401252 2026] [security2:error] [pid 1034096:tid 1034314] [client 20.151.200.44:60184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/basic.php"] [unique_id "apK9mC04twRPFuquKD2h8gAAAMQ"]
[Sat Aug 29 05:08:08.413165 2026] [security2:error] [pid 1028675:tid 1028880] [client 20.63.81.20:55296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/or.php"] [unique_id "apK9mNdHPfW2QFvhmL4BhgAAAEY"]
[Sat Aug 29 05:08:08.413522 2026] [security2:error] [pid 1034096:tid 1034355] [client 20.104.49.130:58205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/abc.php"] [unique_id "apK9mC04twRPFuquKD2h9AAAAO0"]
[Sat Aug 29 05:08:08.414111 2026] [security2:error] [pid 1034096:tid 1034272] [client 213.209.159.223:50436] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/staging/.env"] [unique_id "apK9mC04twRPFuquKD2h8wAAAJo"]
[Sat Aug 29 05:08:08.417239 2026] [security2:error] [pid 1028675:tid 1028898] [client 40.83.93.50:8462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/as.php"] [unique_id "apK9mNdHPfW2QFvhmL4BhwAAAFg"]
[Sat Aug 29 05:08:08.427552 2026] [security2:error] [pid 1034096:tid 1034313] [client 20.203.141.11:24415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/classwithtostring.php"] [unique_id "apK9mC04twRPFuquKD2h9QAAAMM"]
[Sat Aug 29 05:08:08.434624 2026] [security2:error] [pid 1034096:tid 1034308] [client 20.100.175.163:6117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/ahax.php"] [unique_id "apK9mC04twRPFuquKD2h9gAAAL4"]
[Sat Aug 29 05:08:08.436619 2026] [security2:error] [pid 1028675:tid 1028910] [client 20.104.18.15:12138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/ws55.php"] [unique_id "apK9mNdHPfW2QFvhmL4BiQAAAGQ"]
[Sat Aug 29 05:08:08.451599 2026] [security2:error] [pid 1034096:tid 1034356] [client 20.196.209.81:10435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-admin/wp-load.php"] [unique_id "apK9mC04twRPFuquKD2h9wAAAO4"]
[Sat Aug 29 05:08:08.452729 2026] [security2:error] [pid 1034096:tid 1034348] [client 45.148.10.62:55746] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.worldofboardcraft.com"] [uri "/.env.backup"] [unique_id "apK9mC04twRPFuquKD2h-AAAAOY"]
[Sat Aug 29 05:08:08.478203 2026] [security2:error] [pid 1034096:tid 1034317] [client 158.23.147.79:26519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-includes/plugins.php"] [unique_id "apK9mC04twRPFuquKD2h-gAAAMc"]
[Sat Aug 29 05:08:08.479649 2026] [security2:error] [pid 1028675:tid 1028862] [client 20.104.18.15:13675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/robot.php"] [unique_id "apK9mNdHPfW2QFvhmL4BiwAAADQ"]
[Sat Aug 29 05:08:08.480137 2026] [security2:error] [pid 1034096:tid 1034281] [client 158.23.147.79:32595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK9mC04twRPFuquKD2h-wAAAKM"]
[Sat Aug 29 05:08:08.495572 2026] [security2:error] [pid 1034096:tid 1034367] [client 20.104.18.15:39817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/sky.php"] [unique_id "apK9mC04twRPFuquKD2h_QAAAPk"]
[Sat Aug 29 05:08:08.497641 2026] [security2:error] [pid 1028675:tid 1028900] [client 20.104.18.15:16792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/222.php"] [unique_id "apK9mNdHPfW2QFvhmL4BjAAAAFo"]
[Sat Aug 29 05:08:08.512588 2026] [security2:error] [pid 1028675:tid 1028887] [client 20.104.18.15:5026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/os.php"] [unique_id "apK9mNdHPfW2QFvhmL4BjQAAAE0"]
[Sat Aug 29 05:08:08.512753 2026] [security2:error] [pid 1028675:tid 1028847] [client 180.190.5.40:50518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.5.190.180.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK9mNdHPfW2QFvhmL4BjgAAACU"]
[Sat Aug 29 05:08:08.512832 2026] [security2:error] [pid 1028675:tid 1028847] [client 180.190.5.40:50518] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK9mNdHPfW2QFvhmL4BjgAAACU"]
[Sat Aug 29 05:08:08.513671 2026] [security2:error] [pid 1034096:tid 1034305] [client 52.139.37.240:36833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/jga.php"] [unique_id "apK9mC04twRPFuquKD2h_wAAALs"]
[Sat Aug 29 05:08:08.537045 2026] [security2:error] [pid 1028675:tid 1028851] [client 66.248.203.2:35162] ModSecurity: Warning. Matched phrase "Sucuri" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "cheerfulmonk.com"] [uri "/index.php"] [unique_id "apK9mNdHPfW2QFvhmL4BigAAACk"]
[Sat Aug 29 05:08:08.541853 2026] [security2:error] [pid 1028675:tid 1028860] [client 4.205.62.107:9010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/phpinfo01.php"] [unique_id "apK9mNdHPfW2QFvhmL4BkAAAADI"]
[Sat Aug 29 05:08:08.549305 2026] [security2:error] [pid 1034096:tid 1034365] [client 20.63.81.20:55484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/ile56.php"] [unique_id "apK9mC04twRPFuquKD2iBAAAAPc"]
[Sat Aug 29 05:08:08.549680 2026] [security2:error] [pid 1034096:tid 1034334] [client 213.209.159.223:2796] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/laravel/.env"] [unique_id "apK9mC04twRPFuquKD2iAwAAANg"]
[Sat Aug 29 05:08:08.578626 2026] [security2:error] [pid 1034096:tid 1034254] [client 20.104.18.15:18901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/sym.php"] [unique_id "apK9mC04twRPFuquKD2iCAAAAIg"]
[Sat Aug 29 05:08:08.587817 2026] [security2:error] [pid 1034096:tid 1034269] [client 68.155.159.216:65042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-content/radio.php"] [unique_id "apK9mC04twRPFuquKD2iEgAAAJc"]
[Sat Aug 29 05:08:08.590229 2026] [security2:error] [pid 1028675:tid 1028892] [client 20.203.141.11:33685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-content/file.php"] [unique_id "apK9mNdHPfW2QFvhmL4BmAAAAFI"]
[Sat Aug 29 05:08:08.590620 2026] [security2:error] [pid 1034096:tid 1034372] [client 132.166.183.166:39390] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "obd2toolz.com"] [uri "/image/cache/data/D1209-01-152x152.jpg"] [unique_id "apK9mC04twRPFuquKD2iFAAAAP4"]
[Sat Aug 29 05:08:08.592575 2026] [security2:error] [pid 1028675:tid 1028813] [client 4.205.62.107:58395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/gk.php"] [unique_id "apK9mNdHPfW2QFvhmL4BmQAAAAM"]
[Sat Aug 29 05:08:08.596460 2026] [security2:error] [pid 1034096:tid 1034301] [client 149.34.210.141:51901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9mC04twRPFuquKD2iFgAAALc"]
[Sat Aug 29 05:08:08.596599 2026] [security2:error] [pid 1034096:tid 1034301] [client 149.34.210.141:51901] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9mC04twRPFuquKD2iFgAAALc"]
[Sat Aug 29 05:08:08.600756 2026] [security2:error] [pid 1034096:tid 1034279] [client 45.148.10.62:55746] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.worldofboardcraft.com"] [uri "/.env.old"] [unique_id "apK9mC04twRPFuquKD2iGgAAAKE"]
[Sat Aug 29 05:08:08.602607 2026] [security2:error] [pid 1034096:tid 1034258] [client 4.205.62.107:22036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/gk.php"] [unique_id "apK9mC04twRPFuquKD2iHQAAAIw"]
[Sat Aug 29 05:08:08.604393 2026] [security2:error] [pid 1028675:tid 1028812] [client 20.104.18.15:12097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/drykl.php"] [unique_id "apK9mNdHPfW2QFvhmL4BmwAAAAI"]
[Sat Aug 29 05:08:08.606747 2026] [security2:error] [pid 1034096:tid 1034289] [client 68.155.159.216:24457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/themes.php"] [unique_id "apK9mC04twRPFuquKD2iHwAAAKs"]
[Sat Aug 29 05:08:08.628254 2026] [security2:error] [pid 1034096:tid 1034337] [client 20.104.18.15:14307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/revo.php"] [unique_id "apK9mC04twRPFuquKD2iJgAAANs"]
[Sat Aug 29 05:08:08.630247 2026] [security2:error] [pid 1034096:tid 1034284] [client 20.104.18.15:16861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/key.php"] [unique_id "apK9mC04twRPFuquKD2iJwAAAKY"]
[Sat Aug 29 05:08:08.640674 2026] [security2:error] [pid 1034096:tid 1034363] [client 213.209.159.223:54765] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_whm/app/.env"] [unique_id "apK9mC04twRPFuquKD2iKQAAAPU"]
[Sat Aug 29 05:08:08.645078 2026] [security2:error] [pid 1034096:tid 1034253] [client 20.104.18.15:4984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/htio.php"] [unique_id "apK9mC04twRPFuquKD2iKgAAAIc"]
[Sat Aug 29 05:08:08.647810 2026] [security2:error] [pid 1034096:tid 1034346] [client 20.104.18.15:39882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/file5.php"] [unique_id "apK9mC04twRPFuquKD2iKwAAAOQ"]
[Sat Aug 29 05:08:08.663429 2026] [security2:error] [pid 1034096:tid 1034335] [client 158.23.147.79:50130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-admin/images/about.php"] [unique_id "apK9mC04twRPFuquKD2iLAAAANk"]
[Sat Aug 29 05:08:08.680028 2026] [security2:error] [pid 1034096:tid 1034343] [client 158.23.147.79:17589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/file.php"] [unique_id "apK9mC04twRPFuquKD2iLgAAAOE"]
[Sat Aug 29 05:08:08.680063 2026] [security2:error] [pid 1028675:tid 1028833] [client 20.63.81.20:55465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/emmh.php"] [unique_id "apK9mNdHPfW2QFvhmL4BoQAAABc"]
[Sat Aug 29 05:08:08.689471 2026] [security2:error] [pid 1034096:tid 1034295] [client 20.240.128.207:24734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/s.php"] [unique_id "apK9mC04twRPFuquKD2iMAAAALE"]
[Sat Aug 29 05:08:08.700695 2026] [security2:error] [pid 1034096:tid 1034268] [client 202.71.25.11:53084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.25.71.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK9mC04twRPFuquKD2iMgAAAJY"]
[Sat Aug 29 05:08:08.700786 2026] [security2:error] [pid 1034096:tid 1034268] [client 202.71.25.11:53084] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK9mC04twRPFuquKD2iMgAAAJY"]
[Sat Aug 29 05:08:08.711384 2026] [security2:error] [pid 1034096:tid 1034357] [client 52.139.37.240:36821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/mac.php"] [unique_id "apK9mC04twRPFuquKD2iMwAAAO8"]
[Sat Aug 29 05:08:08.713953 2026] [security2:error] [pid 1034096:tid 1034274] [client 213.209.159.223:2796] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/core/.env"] [unique_id "apK9mC04twRPFuquKD2iNQAAAJw"]
[Sat Aug 29 05:08:08.723197 2026] [security2:error] [pid 1028675:tid 1028846] [client 20.104.18.15:19450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/8.php"] [unique_id "apK9mNdHPfW2QFvhmL4BpAAAACQ"]
[Sat Aug 29 05:08:08.732445 2026] [security2:error] [pid 1034096:tid 1034263] [client 20.63.219.114:8883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/disagraeosc.php"] [unique_id "apK9mC04twRPFuquKD2iOAAAAJE"]
[Sat Aug 29 05:08:08.740297 2026] [security2:error] [pid 1028675:tid 1028931] [client 40.83.93.50:8448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/disagreed.php"] [unique_id "apK9mNdHPfW2QFvhmL4BpgAAAHk"]
[Sat Aug 29 05:08:08.744731 2026] [security2:error] [pid 1028675:tid 1028857] [client 20.52.41.200:5261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/zoom1.php"] [unique_id "apK9mNdHPfW2QFvhmL4BpwAAAC8"]
[Sat Aug 29 05:08:08.764387 2026] [security2:error] [pid 1034096:tid 1034314] [client 45.148.10.60:21924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "villagebooksandbears.com"] [uri "/wp-login.php"] [unique_id "apK9mC04twRPFuquKD2iNAAAAMQ"]
[Sat Aug 29 05:08:08.771506 2026] [security2:error] [pid 1034096:tid 1034353] [client 20.104.18.15:13625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/birrs.php"] [unique_id "apK9mC04twRPFuquKD2iPAAAAOs"]
[Sat Aug 29 05:08:08.776017 2026] [security2:error] [pid 1034096:tid 1034333] [client 68.155.159.216:6105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/lv.php"] [unique_id "apK9mC04twRPFuquKD2iPQAAANc"]
[Sat Aug 29 05:08:08.779397 2026] [security2:error] [pid 1034096:tid 1034348] [client 213.209.159.223:54765] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_whm/dev/.env"] [unique_id "apK9mC04twRPFuquKD2iPwAAAOY"]
[Sat Aug 29 05:08:08.783617 2026] [security2:error] [pid 1034096:tid 1034307] [client 213.209.159.223:15691] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/staging/.env"] [unique_id "apK9mC04twRPFuquKD2iQQAAAL0"]
[Sat Aug 29 05:08:08.789247 2026] [security2:error] [pid 1034096:tid 1034264] [client 20.104.18.15:16779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/chosen.php"] [unique_id "apK9mC04twRPFuquKD2iQgAAAJI"]
[Sat Aug 29 05:08:08.791113 2026] [security2:error] [pid 1034096:tid 1034302] [client 20.197.61.180:11351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/blog.php"] [unique_id "apK9mC04twRPFuquKD2iQwAAALg"]
[Sat Aug 29 05:08:08.794613 2026] [core:error] [pid 1028675:tid 1028932] [client 158.158.54.35:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:08.794626 2026] [core:error] [pid 1028675:tid 1028932] [client 158.158.54.35:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:08.795928 2026] [security2:error] [pid 1034096:tid 1034299] [client 20.104.18.15:5017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/dev.php"] [unique_id "apK9mC04twRPFuquKD2iRAAAALU"]
[Sat Aug 29 05:08:08.811502 2026] [security2:error] [pid 1034096:tid 1034317] [client 20.63.81.20:55302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/em.php"] [unique_id "apK9mC04twRPFuquKD2iRQAAAMc"]
[Sat Aug 29 05:08:08.847817 2026] [security2:error] [pid 1028675:tid 1028936] [client 20.196.209.81:17325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-admin/wp-mail.php"] [unique_id "apK9mNdHPfW2QFvhmL4BrQAAAH4"]
[Sat Aug 29 05:08:08.854743 2026] [security2:error] [pid 1034096:tid 1034286] [client 20.104.18.15:39934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/xyn.php"] [unique_id "apK9mC04twRPFuquKD2iSAAAAKg"]
[Sat Aug 29 05:08:08.867161 2026] [security2:error] [pid 1034096:tid 1034316] [client 20.104.18.15:12250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/backup.php"] [unique_id "apK9mC04twRPFuquKD2iSgAAAMY"]
[Sat Aug 29 05:08:08.878445 2026] [security2:error] [pid 1034096:tid 1034300] [client 213.202.253.4:53065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bv-place.com"] [uri "/delpaths.php"] [unique_id "apK9mC04twRPFuquKD2iTQAAALY"], referer: www.google.com
[Sat Aug 29 05:08:08.884073 2026] [security2:error] [pid 1034096:tid 1034272] [client 40.83.93.50:9164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/room.php"] [unique_id "apK9mC04twRPFuquKD2iTgAAAJo"]
[Sat Aug 29 05:08:08.886263 2026] [security2:error] [pid 1034096:tid 1034259] [client 20.104.18.15:19400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/goods.php"] [unique_id "apK9mC04twRPFuquKD2iTwAAAI0"]
[Sat Aug 29 05:08:08.886742 2026] [security2:error] [pid 1034096:tid 1034321] [client 68.155.159.216:52767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-includes/assets/index.php"] [unique_id "apK9mC04twRPFuquKD2iUAAAAMs"]
[Sat Aug 29 05:08:08.889779 2026] [security2:error] [pid 1034096:tid 1034313] [client 20.203.141.11:11140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/404.php"] [unique_id "apK9mC04twRPFuquKD2iUQAAAMM"]
[Sat Aug 29 05:08:08.894989 2026] [security2:error] [pid 1028675:tid 1028824] [client 4.205.62.107:22377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/broadcasting.php"] [unique_id "apK9mNdHPfW2QFvhmL4BrgAAAA4"]
[Sat Aug 29 05:08:08.900246 2026] [security2:error] [pid 1034096:tid 1034262] [client 20.104.18.15:13602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/sss.php"] [unique_id "apK9mC04twRPFuquKD2iUgAAAJA"]
[Sat Aug 29 05:08:08.905369 2026] [security2:error] [pid 1028675:tid 1028840] [client 52.139.37.240:36856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK9mNdHPfW2QFvhmL4BrwAAAB4"]
[Sat Aug 29 05:08:08.907917 2026] [security2:error] [pid 1034096:tid 1034269] [client 45.148.10.62:55746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.worldofboardcraft.com"] [uri "/.env.php.bak"] [unique_id "apK9mC04twRPFuquKD2iVAAAAJc"]
[Sat Aug 29 05:08:08.925775 2026] [security2:error] [pid 1034096:tid 1034315] [client 20.104.18.15:16890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/file1221.php"] [unique_id "apK9mC04twRPFuquKD2iVwAAAMU"]
[Sat Aug 29 05:08:08.935026 2026] [security2:error] [pid 1028675:tid 1028876] [client 20.100.175.163:11021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/shell.php"] [unique_id "apK9mNdHPfW2QFvhmL4BsQAAAEI"]
[Sat Aug 29 05:08:08.939658 2026] [security2:error] [pid 1034096:tid 1034258] [client 20.104.18.15:5062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/gos.php"] [unique_id "apK9mC04twRPFuquKD2iWQAAAIw"]
[Sat Aug 29 05:08:08.940056 2026] [security2:error] [pid 1034096:tid 1034279] [client 4.205.62.107:65471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/bootstrap.php"] [unique_id "apK9mC04twRPFuquKD2iWAAAAKE"]
[Sat Aug 29 05:08:08.945662 2026] [security2:error] [pid 1034096:tid 1034289] [client 20.63.81.20:55453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/dvve.php"] [unique_id "apK9mC04twRPFuquKD2iWgAAAKs"]
[Sat Aug 29 05:08:08.947513 2026] [security2:error] [pid 1028675:tid 1028916] [client 158.23.147.79:35660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK9mNdHPfW2QFvhmL4BsgAAAGo"]
[Sat Aug 29 05:08:08.966273 2026] [security2:error] [pid 1034096:tid 1034358] [client 20.104.49.130:39060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/jp.php"] [unique_id "apK9mC04twRPFuquKD2iXQAAAPA"]
[Sat Aug 29 05:08:08.991764 2026] [security2:error] [pid 1034096:tid 1034362] [client 20.104.18.15:39824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/inso.php"] [unique_id "apK9mC04twRPFuquKD2iXwAAAPQ"]
[Sat Aug 29 05:08:09.001076 2026] [ssl:error] [pid 1034096:tid 1034339] [client 98.84.1.175:36364] AH02032: Hostname host2038.hostmonster.com (default host as no SNI was provided) and hostname cpcalendars.stq.bzn.mybluehost.me provided via HTTP have no compatible SSL setup for policy 'secure'
[Sat Aug 29 05:08:09.001619 2026] [security2:error] [pid 1034096:tid 1034307] [client 20.104.49.130:36346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/simple.php"] [unique_id "apK9mS04twRPFuquKD2iYgAAAL0"]
[Sat Aug 29 05:08:09.018994 2026] [security2:error] [pid 1034096:tid 1034368] [client 20.104.18.15:19348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/ah.php"] [unique_id "apK9mS04twRPFuquKD2iYwAAAPo"]
[Sat Aug 29 05:08:09.047601 2026] [security2:error] [pid 1034096:tid 1034254] [client 20.203.141.11:38399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/files.php"] [unique_id "apK9mS04twRPFuquKD2iaQAAAIg"]
[Sat Aug 29 05:08:09.059107 2026] [security2:error] [pid 1034096:tid 1034286] [client 20.104.18.15:16837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/nox.php"] [unique_id "apK9mS04twRPFuquKD2iagAAAKg"]
[Sat Aug 29 05:08:09.068562 2026] [security2:error] [pid 1028675:tid 1028835] [client 4.205.62.107:55999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/debug.php"] [unique_id "apK9mddHPfW2QFvhmL4BtQAAABk"]
[Sat Aug 29 05:08:09.071925 2026] [security2:error] [pid 1028675:tid 1028910] [client 20.63.81.20:55451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/doo.php"] [unique_id "apK9mddHPfW2QFvhmL4BtgAAAGQ"]
[Sat Aug 29 05:08:09.076145 2026] [security2:error] [pid 1028675:tid 1028841] [client 20.104.18.15:5081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/132.php"] [unique_id "apK9mddHPfW2QFvhmL4BtwAAAB8"]
[Sat Aug 29 05:08:09.076561 2026] [security2:error] [pid 1034096:tid 1034334] [client 146.70.36.124:51200] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.mcrl.tech"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "apK9mS04twRPFuquKD2ibAAAANg"]
[Sat Aug 29 05:08:09.077154 2026] [security2:error] [pid 1034096:tid 1034376] [client 195.178.110.247:3978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.littlefieldfamilylaw.com"] [uri "/index.php"] [unique_id "apK9mS04twRPFuquKD2ibQAAAQI"]
[Sat Aug 29 05:08:09.097885 2026] [security2:error] [pid 1028675:tid 1028832] [client 20.104.18.15:12250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/indo.php"] [unique_id "apK9mddHPfW2QFvhmL4BuAAAABY"]
[Sat Aug 29 05:08:09.102326 2026] [security2:error] [pid 1034096:tid 1034267] [client 52.139.37.240:36807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK9mS04twRPFuquKD2ibgAAAJU"]
[Sat Aug 29 05:08:09.105578 2026] [security2:error] [pid 1034096:tid 1034300] [client 158.23.147.79:17567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK9mS04twRPFuquKD2ibwAAALY"]
[Sat Aug 29 05:08:09.119713 2026] [security2:error] [pid 1028675:tid 1028861] [client 34.81.157.26:61456] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/cgi-sys/404.html"] [unique_id "apK9mddHPfW2QFvhmL4BuQAAADM"]
[Sat Aug 29 05:08:09.119957 2026] [security2:error] [pid 1028675:tid 1028922] [client 34.81.157.26:61474] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/.openclaw/.env"] [unique_id "apK9mddHPfW2QFvhmL4BuwAAAHA"]
[Sat Aug 29 05:08:09.126924 2026] [security2:error] [pid 1034096:tid 1034355] [client 34.81.157.26:61564] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/cgi-sys/404.html"] [unique_id "apK9mS04twRPFuquKD2iegAAAO0"]
[Sat Aug 29 05:08:09.130673 2026] [security2:error] [pid 1034096:tid 1034356] [client 20.104.18.15:39816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/puc.php"] [unique_id "apK9mS04twRPFuquKD2ihgAAAO4"]
[Sat Aug 29 05:08:09.131117 2026] [security2:error] [pid 1034096:tid 1034282] [client 34.81.157.26:61594] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/health"] [unique_id "apK9mS04twRPFuquKD2ihwAAAKQ"]
[Sat Aug 29 05:08:09.131322 2026] [security2:error] [pid 1034096:tid 1034261] [client 34.81.157.26:61446] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/.hermes/.env"] [unique_id "apK9mS04twRPFuquKD2iggAAAI8"]
[Sat Aug 29 05:08:09.136228 2026] [security2:error] [pid 1034096:tid 1034263] [client 34.81.157.26:61458] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/cgi-sys/404.html"] [unique_id "apK9mS04twRPFuquKD2ifwAAAJE"]
[Sat Aug 29 05:08:09.139125 2026] [security2:error] [pid 1034096:tid 1034296] [client 45.148.10.62:55760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.worldofboardcraft.com"] [uri "/.env.php"] [unique_id "apK9mS04twRPFuquKD2ikAAAALI"]
[Sat Aug 29 05:08:09.144887 2026] [security2:error] [pid 1034096:tid 1034258] [client 213.209.159.223:50436] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/source/.env"] [unique_id "apK9mS04twRPFuquKD2ikQAAAIw"]
[Sat Aug 29 05:08:09.149079 2026] [security2:error] [pid 1034096:tid 1034349] [client 20.63.219.114:10481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/about.php525"] [unique_id "apK9mS04twRPFuquKD2ikwAAAOc"]
[Sat Aug 29 05:08:09.149673 2026] [core:error] [pid 1034096:tid 1034359] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:09.149690 2026] [core:error] [pid 1034096:tid 1034359] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:09.150963 2026] [security2:error] [pid 1034096:tid 1034359] [client 34.81.157.26:0] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/index.php"] [unique_id "apK9mS04twRPFuquKD2ikgAAAPE"]
[Sat Aug 29 05:08:09.157710 2026] [security2:error] [pid 1034096:tid 1034252] [client 34.81.157.26:61596] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/metrics"] [unique_id "apK9mS04twRPFuquKD2icgAAAIY"]
[Sat Aug 29 05:08:09.171243 2026] [security2:error] [pid 1034096:tid 1034287] [client 213.209.159.223:2796] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/app/.env"] [unique_id "apK9mS04twRPFuquKD2ilgAAAKk"]
[Sat Aug 29 05:08:09.174856 2026] [security2:error] [pid 1034096:tid 1034299] [client 20.240.128.207:27553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/test1.php"] [unique_id "apK9mS04twRPFuquKD2imQAAALU"]
[Sat Aug 29 05:08:09.179462 2026] [core:error] [pid 1028675:tid 1028812] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:09.179491 2026] [core:error] [pid 1028675:tid 1028812] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:09.179551 2026] [core:error] [pid 1028675:tid 1028844] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:09.179558 2026] [core:error] [pid 1028675:tid 1028844] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:09.179593 2026] [core:error] [pid 1028675:tid 1028833] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:09.179611 2026] [core:error] [pid 1028675:tid 1028833] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:09.180048 2026] [core:error] [pid 1028675:tid 1028813] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:09.180064 2026] [core:error] [pid 1034096:tid 1034275] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:09.180072 2026] [core:error] [pid 1028675:tid 1028813] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:09.180077 2026] [core:error] [pid 1034096:tid 1034275] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:09.180235 2026] [security2:error] [pid 1028675:tid 1028813] [client 34.81.157.26:0] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/index.php"] [unique_id "apK9mddHPfW2QFvhmL4BywAAAAM"]
[Sat Aug 29 05:08:09.180278 2026] [core:error] [pid 1034096:tid 1034346] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:09.180286 2026] [core:error] [pid 1034096:tid 1034346] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:09.181879 2026] [core:error] [pid 1028675:tid 1028914] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:09.181896 2026] [core:error] [pid 1028675:tid 1028914] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:09.181926 2026] [core:error] [pid 1028675:tid 1028896] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:09.181936 2026] [core:error] [pid 1028675:tid 1028896] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:09.182767 2026] [core:error] [pid 1028675:tid 1028846] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:09.182783 2026] [core:error] [pid 1028675:tid 1028846] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:09.182866 2026] [core:error] [pid 1034096:tid 1034358] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:09.182883 2026] [core:error] [pid 1034096:tid 1034358] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:09.183382 2026] [core:error] [pid 1034096:tid 1034265] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:09.183399 2026] [core:error] [pid 1034096:tid 1034265] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:09.183549 2026] [security2:error] [pid 1034096:tid 1034265] [client 34.81.157.26:0] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/index.php"] [unique_id "apK9mS04twRPFuquKD2imgAAAJM"]
[Sat Aug 29 05:08:09.183949 2026] [core:error] [pid 1034096:tid 1034331] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:09.183960 2026] [core:error] [pid 1034096:tid 1034331] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:09.184282 2026] [security2:error] [pid 1034096:tid 1034295] [client 34.81.157.26:61334] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/docker-compose.yml"] [unique_id "apK9mS04twRPFuquKD2icQAAALE"]
[Sat Aug 29 05:08:09.185394 2026] [security2:error] [pid 1028675:tid 1028931] [client 213.209.159.223:40234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/laravel/.env"] [unique_id "apK9mddHPfW2QFvhmL4B0gAAAHk"]
[Sat Aug 29 05:08:09.185987 2026] [security2:error] [pid 1034096:tid 1034331] [client 34.81.157.26:0] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/index.php"] [unique_id "apK9mS04twRPFuquKD2ilAAAANU"]
[Sat Aug 29 05:08:09.186174 2026] [security2:error] [pid 1028675:tid 1028925] [client 34.81.157.26:61336] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/docker-compose.yaml"] [unique_id "apK9mddHPfW2QFvhmL4BugAAAHM"]
[Sat Aug 29 05:08:09.186744 2026] [security2:error] [pid 1034096:tid 1034335] [client 34.81.157.26:61352] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/actuator/env"] [unique_id "apK9mS04twRPFuquKD2icAAAANk"]
[Sat Aug 29 05:08:09.187404 2026] [core:error] [pid 1034096:tid 1034309] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:09.188662 2026] [core:error] [pid 1034096:tid 1034309] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:09.192093 2026] [security2:error] [pid 1028675:tid 1028816] [client 20.104.18.15:19420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/ws55.php"] [unique_id "apK9mddHPfW2QFvhmL4B0wAAAAY"]
[Sat Aug 29 05:08:09.196051 2026] [security2:error] [pid 1034096:tid 1034278] [client 20.104.18.15:16889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/akismet.php"] [unique_id "apK9mS04twRPFuquKD2inwAAAKA"]
[Sat Aug 29 05:08:09.204944 2026] [security2:error] [pid 1034096:tid 1034256] [client 20.52.41.200:5340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/txets.php"] [unique_id "apK9mS04twRPFuquKD2ioAAAAIo"]
[Sat Aug 29 05:08:09.206393 2026] [security2:error] [pid 1034096:tid 1034286] [client 20.63.81.20:55467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/adminer-4.6.6.php"] [unique_id "apK9mS04twRPFuquKD2ioQAAAKg"]
[Sat Aug 29 05:08:09.208919 2026] [security2:error] [pid 1028675:tid 1028840] [client 20.104.18.15:5027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/v22.php"] [unique_id "apK9mddHPfW2QFvhmL4B1AAAAB4"]
[Sat Aug 29 05:08:09.239797 2026] [security2:error] [pid 1028675:tid 1028883] [client 20.104.18.15:12175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/sign.php"] [unique_id "apK9mddHPfW2QFvhmL4B1gAAAEk"]
[Sat Aug 29 05:08:09.240842 2026] [security2:error] [pid 1028675:tid 1028819] [client 195.178.110.247:61576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.littlefieldfamilylaw.com"] [uri "/index.php"] [unique_id "apK9mddHPfW2QFvhmL4B1wAAAAk"]
[Sat Aug 29 05:08:09.246667 2026] [security2:error] [pid 1034096:tid 1034272] [client 20.196.209.81:17295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-admin/wp-settings.php"] [unique_id "apK9mS04twRPFuquKD2ipQAAAJo"]
[Sat Aug 29 05:08:09.250175 2026] [security2:error] [pid 1034096:tid 1034316] [client 40.83.93.50:8390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/class_api.php"] [unique_id "apK9mS04twRPFuquKD2ipgAAAMY"]
[Sat Aug 29 05:08:09.299324 2026] [security2:error] [pid 1034096:tid 1034314] [client 20.104.18.15:39891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/19.php"] [unique_id "apK9mS04twRPFuquKD2iqQAAAMQ"]
[Sat Aug 29 05:08:09.305977 2026] [security2:error] [pid 1028675:tid 1028916] [client 52.139.37.240:36843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/zafir1.php"] [unique_id "apK9mddHPfW2QFvhmL4B2QAAAGo"]
[Sat Aug 29 05:08:09.320665 2026] [security2:error] [pid 1028675:tid 1028881] [client 20.104.18.15:19283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/drykl.php"] [unique_id "apK9mddHPfW2QFvhmL4B2wAAAEc"]
[Sat Aug 29 05:08:09.326341 2026] [security2:error] [pid 1034096:tid 1034337] [client 20.104.18.15:16777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/ajax.php"] [unique_id "apK9mS04twRPFuquKD2iqwAAANs"]
[Sat Aug 29 05:08:09.329771 2026] [security2:error] [pid 1028675:tid 1028832] [client 213.209.159.223:40234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/core/.env"] [unique_id "apK9mddHPfW2QFvhmL4B3QAAABY"]
[Sat Aug 29 05:08:09.346059 2026] [security2:error] [pid 1028675:tid 1028926] [client 20.63.81.20:55401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/gelap1.php"] [unique_id "apK9mddHPfW2QFvhmL4B3gAAAHQ"]
[Sat Aug 29 05:08:09.347790 2026] [security2:error] [pid 1028675:tid 1028861] [client 20.104.18.15:5018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/wp-activate.php"] [unique_id "apK9mddHPfW2QFvhmL4B3wAAADM"]
[Sat Aug 29 05:08:09.353051 2026] [security2:error] [pid 1034096:tid 1034358] [client 213.209.159.223:54765] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_whm/server/.env"] [unique_id "apK9mS04twRPFuquKD2irQAAAPA"]
[Sat Aug 29 05:08:09.359552 2026] [security2:error] [pid 1034096:tid 1034319] [client 20.203.141.11:1166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/php.php"] [unique_id "apK9mS04twRPFuquKD2irwAAAMk"]
[Sat Aug 29 05:08:09.360146 2026] [security2:error] [pid 1034096:tid 1034254] [client 40.83.93.50:9161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/class-wp-cmd.php"] [unique_id "apK9mS04twRPFuquKD2isAAAAIg"]
[Sat Aug 29 05:08:09.365238 2026] [security2:error] [pid 1034096:tid 1034265] [client 68.155.159.216:18317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-admin.php"] [unique_id "apK9mS04twRPFuquKD2isQAAAJM"]
[Sat Aug 29 05:08:09.375007 2026] [security2:error] [pid 1034096:tid 1034295] [client 213.209.159.223:2796] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/dev/.env"] [unique_id "apK9mS04twRPFuquKD2iswAAALE"]
[Sat Aug 29 05:08:09.377899 2026] [security2:error] [pid 1034096:tid 1034262] [client 146.70.36.124:51206] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.mcrl.tech"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "apK9mS04twRPFuquKD2itAAAAJA"]
[Sat Aug 29 05:08:09.391959 2026] [security2:error] [pid 1034096:tid 1034357] [client 20.104.18.15:12286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/wnnjpsby.php"] [unique_id "apK9mS04twRPFuquKD2itgAAAO8"]
[Sat Aug 29 05:08:09.435469 2026] [security2:error] [pid 1028675:tid 1028887] [client 158.23.147.79:6046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-content/themes/too.php"] [unique_id "apK9mddHPfW2QFvhmL4B4gAAAE0"]
[Sat Aug 29 05:08:09.436104 2026] [security2:error] [pid 1034096:tid 1034313] [client 20.104.18.15:39911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/133.php"] [unique_id "apK9mS04twRPFuquKD2itwAAAMM"]
[Sat Aug 29 05:08:09.451962 2026] [security2:error] [pid 1034096:tid 1034331] [client 213.209.159.223:50436] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/framework/.env"] [unique_id "apK9mS04twRPFuquKD2iuAAAANU"]
[Sat Aug 29 05:08:09.452316 2026] [security2:error] [pid 1034096:tid 1034297] [client 20.104.18.15:19394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/backup.php"] [unique_id "apK9mS04twRPFuquKD2iuQAAALM"]
[Sat Aug 29 05:08:09.454051 2026] [security2:error] [pid 1034096:tid 1034355] [client 20.100.175.163:5386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/elp.php"] [unique_id "apK9mS04twRPFuquKD2iugAAAO0"]
[Sat Aug 29 05:08:09.457379 2026] [security2:error] [pid 1034096:tid 1034281] [client 20.104.18.15:16887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/atomlib.php"] [unique_id "apK9mS04twRPFuquKD2iuwAAAKM"]
[Sat Aug 29 05:08:09.459991 2026] [security2:error] [pid 1028675:tid 1028851] [client 127.0.0.1:14018] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "127.0.0.1"] [uri "/cgi-sys/autoconfig.cgi"] [unique_id "apK9mddHPfW2QFvhmL4B4AAAACk"]
[Sat Aug 29 05:08:09.460151 2026] [security2:error] [pid 1034096:tid 1034252] [client 74.7.175.133:35392] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "autoconfig.excellentpublicity1.com"] [uri "/robots.txt"] [unique_id "apK9mS04twRPFuquKD2isgAAhn0"]
[Sat Aug 29 05:08:09.462137 2026] [security2:error] [pid 1034096:tid 1034354] [client 158.23.147.79:58714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-includes/content.php"] [unique_id "apK9mS04twRPFuquKD2ivAAAAOw"]
[Sat Aug 29 05:08:09.465777 2026] [security2:error] [pid 1034096:tid 1034277] [client 213.209.159.223:23517] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/laravel/.env"] [unique_id "apK9mS04twRPFuquKD2ivQAAAJ8"]
[Sat Aug 29 05:08:09.474097 2026] [security2:error] [pid 1034096:tid 1034335] [client 20.63.81.20:55545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/rsjlrria.php"] [unique_id "apK9mS04twRPFuquKD2ivgAAANk"]
[Sat Aug 29 05:08:09.488222 2026] [security2:error] [pid 1034096:tid 1034278] [client 20.104.18.15:4876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/wp-trackback.php"] [unique_id "apK9mS04twRPFuquKD2iwAAAAKA"]
[Sat Aug 29 05:08:09.502103 2026] [security2:error] [pid 1034096:tid 1034368] [client 52.139.37.240:36675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/abc.php"] [unique_id "apK9mS04twRPFuquKD2iwgAAAPo"]
[Sat Aug 29 05:08:09.504109 2026] [security2:error] [pid 1034096:tid 1034305] [client 213.209.159.223:15691] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/source/.env"] [unique_id "apK9mS04twRPFuquKD2iwwAAALs"]
[Sat Aug 29 05:08:09.504930 2026] [security2:error] [pid 1034096:tid 1034264] [client 20.63.219.114:16688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/spip.php"] [unique_id "apK9mS04twRPFuquKD2ixAAAAJI"]
[Sat Aug 29 05:08:09.521981 2026] [security2:error] [pid 1034096:tid 1034339] [client 20.203.141.11:13201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/o.php"] [unique_id "apK9mS04twRPFuquKD2ixwAAAN0"]
[Sat Aug 29 05:08:09.531393 2026] [security2:error] [pid 1034096:tid 1034356] [client 20.197.61.180:12132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/bypass.php"] [unique_id "apK9mS04twRPFuquKD2iyAAAAO4"]
[Sat Aug 29 05:08:09.542967 2026] [security2:error] [pid 1028675:tid 1028914] [client 20.104.49.130:57721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/kerang.php"] [unique_id "apK9mddHPfW2QFvhmL4B5QAAAGg"]
[Sat Aug 29 05:08:09.544858 2026] [security2:error] [pid 1028675:tid 1028896] [client 68.155.159.216:16344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK9mddHPfW2QFvhmL4B5gAAAFY"]
[Sat Aug 29 05:08:09.561604 2026] [security2:error] [pid 1034096:tid 1034376] [client 68.155.159.216:30678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-admin/dropdown.php"] [unique_id "apK9mS04twRPFuquKD2iyQAAAQI"]
[Sat Aug 29 05:08:09.562749 2026] [security2:error] [pid 1028675:tid 1028846] [client 158.23.147.79:11320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/.well-known/index.php"] [unique_id "apK9mddHPfW2QFvhmL4B5wAAACQ"]
[Sat Aug 29 05:08:09.577209 2026] [security2:error] [pid 1034096:tid 1034261] [client 20.104.18.15:12274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/gigi.php"] [unique_id "apK9mS04twRPFuquKD2iygAAAI8"]
[Sat Aug 29 05:08:09.579937 2026] [security2:error] [pid 1034096:tid 1034314] [client 20.104.18.15:39827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/1xmomo.php"] [unique_id "apK9mS04twRPFuquKD2iywAAAMQ"]
[Sat Aug 29 05:08:09.581697 2026] [security2:error] [pid 1034096:tid 1034283] [client 68.155.159.216:49222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/lock.php"] [unique_id "apK9mS04twRPFuquKD2izAAAAKU"]
[Sat Aug 29 05:08:09.589614 2026] [security2:error] [pid 1034096:tid 1034367] [client 20.104.18.15:16814] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.mcerta.com"] [uri "/1.php"] [unique_id "apK9mS04twRPFuquKD2izQAAAPk"]
[Sat Aug 29 05:08:09.589702 2026] [security2:error] [pid 1034096:tid 1034367] [client 20.104.18.15:16814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/1.php"] [unique_id "apK9mS04twRPFuquKD2izQAAAPk"]
[Sat Aug 29 05:08:09.591268 2026] [security2:error] [pid 1034096:tid 1034263] [client 20.104.18.15:18921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/indo.php"] [unique_id "apK9mS04twRPFuquKD2izgAAAJE"]
[Sat Aug 29 05:08:09.594892 2026] [security2:error] [pid 1034096:tid 1034324] [client 158.23.147.79:26487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK9mS04twRPFuquKD2izwAAAM4"]
[Sat Aug 29 05:08:09.600618 2026] [security2:error] [pid 1034096:tid 1034315] [client 158.23.147.79:32578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/nf_tracking.php"] [unique_id "apK9mS04twRPFuquKD2i0AAAAMU"]
[Sat Aug 29 05:08:09.602938 2026] [security2:error] [pid 1034096:tid 1034296] [client 20.63.81.20:55425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/AxAo.php"] [unique_id "apK9mS04twRPFuquKD2i0QAAALI"]
[Sat Aug 29 05:08:09.605301 2026] [security2:error] [pid 1034096:tid 1034353] [client 213.209.159.223:50436] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/ikiwiki/.env"] [unique_id "apK9mS04twRPFuquKD2i0gAAAOs"]
[Sat Aug 29 05:08:09.622620 2026] [security2:error] [pid 1034096:tid 1034253] [client 20.104.18.15:4909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/pri.php"] [unique_id "apK9mS04twRPFuquKD2i1AAAAIc"]
[Sat Aug 29 05:08:09.640834 2026] [security2:error] [pid 1028675:tid 1028812] [client 20.196.209.81:10471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-admin/wp-signup.php"] [unique_id "apK9mddHPfW2QFvhmL4B6wAAAAI"]
[Sat Aug 29 05:08:09.645701 2026] [core:error] [pid 1034096:tid 1034332] [client 20.100.175.163:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:09.645717 2026] [core:error] [pid 1034096:tid 1034332] [client 20.100.175.163:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:09.660335 2026] [security2:error] [pid 1034096:tid 1034275] [client 213.209.159.223:23517] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/core/.env"] [unique_id "apK9mS04twRPFuquKD2i2gAAAJ0"]
[Sat Aug 29 05:08:09.661209 2026] [security2:error] [pid 1034096:tid 1034333] [client 213.209.159.223:2796] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/server/.env"] [unique_id "apK9mS04twRPFuquKD2i2wAAANc"]
[Sat Aug 29 05:08:09.673793 2026] [security2:error] [pid 1028675:tid 1028844] [client 20.240.128.207:24763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/ws.php"] [unique_id "apK9mddHPfW2QFvhmL4B7AAAACI"]
[Sat Aug 29 05:08:09.684846 2026] [security2:error] [pid 1028675:tid 1028847] [client 146.70.36.124:51216] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.mcrl.tech"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "apK9mddHPfW2QFvhmL4B7QAAACU"]
[Sat Aug 29 05:08:09.699499 2026] [security2:error] [pid 1034096:tid 1034359] [client 52.139.37.240:36681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/c1.php"] [unique_id "apK9mS04twRPFuquKD2i3gAAAPE"]
[Sat Aug 29 05:08:09.720795 2026] [security2:error] [pid 1034096:tid 1034350] [client 20.104.18.15:12187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/info.php/new.php"] [unique_id "apK9mS04twRPFuquKD2i3wAAAOg"]
[Sat Aug 29 05:08:09.724024 2026] [security2:error] [pid 1034096:tid 1034262] [client 20.104.18.15:39879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/mosty.php"] [unique_id "apK9mS04twRPFuquKD2i4AAAAJA"]
[Sat Aug 29 05:08:09.725813 2026] [security2:error] [pid 1028675:tid 1028907] [client 20.104.18.15:25566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/samll.php"] [unique_id "apK9mddHPfW2QFvhmL4B7gAAAGE"]
[Sat Aug 29 05:08:09.726819 2026] [security2:error] [pid 1028675:tid 1028904] [client 68.155.159.216:24531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-mail.php"] [unique_id "apK9mddHPfW2QFvhmL4B7wAAAF4"]
[Sat Aug 29 05:08:09.732166 2026] [security2:error] [pid 1028675:tid 1028886] [client 4.205.62.107:58462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/services.php"] [unique_id "apK9mddHPfW2QFvhmL4B8gAAAEw"]
[Sat Aug 29 05:08:09.733009 2026] [security2:error] [pid 1034096:tid 1034280] [client 20.63.81.20:55459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/class17.php"] [unique_id "apK9mS04twRPFuquKD2i4QAAAKI"]
[Sat Aug 29 05:08:09.740777 2026] [security2:error] [pid 1034096:tid 1034357] [client 4.205.62.107:53395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/wp-info.php"] [unique_id "apK9mS04twRPFuquKD2i4gAAAO8"]
[Sat Aug 29 05:08:09.742023 2026] [security2:error] [pid 1034096:tid 1034306] [client 40.83.93.50:8434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/aksinet.php"] [unique_id "apK9mS04twRPFuquKD2i4wAAALw"]
[Sat Aug 29 05:08:09.750125 2026] [security2:error] [pid 1034096:tid 1034341] [client 4.205.62.107:21928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/god.php"] [unique_id "apK9mS04twRPFuquKD2i5AAAAN8"]
[Sat Aug 29 05:08:09.753852 2026] [security2:error] [pid 1034096:tid 1034372] [client 213.209.159.223:50436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/config.inc.php"] [unique_id "apK9mS04twRPFuquKD2i5QAAAP4"]
[Sat Aug 29 05:08:09.757425 2026] [security2:error] [pid 1034096:tid 1034271] [client 20.104.18.15:18922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/sign.php"] [unique_id "apK9mS04twRPFuquKD2i5gAAAJk"]
[Sat Aug 29 05:08:09.757440 2026] [security2:error] [pid 1034096:tid 1034302] [client 20.104.18.15:5036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/wp_blog_footer.php"] [unique_id "apK9mS04twRPFuquKD2i5wAAALg"]
[Sat Aug 29 05:08:09.777860 2026] [security2:error] [pid 1034096:tid 1034331] [client 158.23.147.79:49808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK9mS04twRPFuquKD2i6AAAANU"]
[Sat Aug 29 05:08:09.792206 2026] [security2:error] [pid 1034096:tid 1034304] [client 213.209.159.223:15691] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/framework/.env"] [unique_id "apK9mS04twRPFuquKD2i6QAAALo"]
[Sat Aug 29 05:08:09.812800 2026] [security2:error] [pid 1034096:tid 1034278] [client 213.209.159.223:54765] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_whm/staging/.env"] [unique_id "apK9mS04twRPFuquKD2i7AAAAKA"]
[Sat Aug 29 05:08:09.829030 2026] [security2:error] [pid 1034096:tid 1034254] [client 20.203.141.11:1839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/init.php"] [unique_id "apK9mS04twRPFuquKD2i7gAAAIg"]
[Sat Aug 29 05:08:09.840799 2026] [security2:error] [pid 1034096:tid 1034256] [client 158.23.147.79:17512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/file17.php"] [unique_id "apK9mS04twRPFuquKD2i8AAAAIo"]
[Sat Aug 29 05:08:09.854198 2026] [security2:error] [pid 1034096:tid 1034268] [client 40.83.93.50:9203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/disagreed.php"] [unique_id "apK9mS04twRPFuquKD2i9AAAAJY"]
[Sat Aug 29 05:08:09.864012 2026] [security2:error] [pid 1034096:tid 1034272] [client 20.63.81.20:55322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/okxoby.php"] [unique_id "apK9mS04twRPFuquKD2i9QAAAJo"]
[Sat Aug 29 05:08:09.875311 2026] [security2:error] [pid 1028675:tid 1028816] [client 20.104.18.15:16859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/she11.php"] [unique_id "apK9mddHPfW2QFvhmL4B9wAAAAY"]
[Sat Aug 29 05:08:09.883328 2026] [security2:error] [pid 1034096:tid 1034334] [client 68.155.159.216:6018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9mS04twRPFuquKD2i9wAAANg"]
[Sat Aug 29 05:08:09.887950 2026] [security2:error] [pid 1034096:tid 1034269] [client 20.63.219.114:10483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/backup.php"] [unique_id "apK9mS04twRPFuquKD2i-AAAAJc"]
[Sat Aug 29 05:08:09.890278 2026] [security2:error] [pid 1034096:tid 1034368] [client 52.139.37.240:36842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/index.php/feed/atom/"] [unique_id "apK9mS04twRPFuquKD2i-QAAAPo"]
[Sat Aug 29 05:08:09.894725 2026] [security2:error] [pid 1034096:tid 1034339] [client 20.104.18.15:19332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/wnnjpsby.php"] [unique_id "apK9mS04twRPFuquKD2i-gAAAN0"]
[Sat Aug 29 05:08:09.901699 2026] [security2:error] [pid 1028675:tid 1028819] [client 20.104.18.15:39842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/blurbs.php"] [unique_id "apK9mddHPfW2QFvhmL4B-gAAAAk"]
[Sat Aug 29 05:08:09.914522 2026] [security2:error] [pid 1034096:tid 1034259] [client 20.104.49.130:46189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/red.php"] [unique_id "apK9mS04twRPFuquKD2i_AAAAI0"]
[Sat Aug 29 05:08:09.934490 2026] [security2:error] [pid 1034096:tid 1034311] [client 61.9.8.120:5202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 120.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK9mS04twRPFuquKD2i_QAAAME"]
[Sat Aug 29 05:08:09.934687 2026] [security2:error] [pid 1034096:tid 1034311] [client 61.9.8.120:5202] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK9mS04twRPFuquKD2i_QAAAME"]
[Sat Aug 29 05:08:09.960887 2026] [security2:error] [pid 1034096:tid 1034297] [client 20.100.175.163:48251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-content/cong.php"] [unique_id "apK9mS04twRPFuquKD2i_wAAALM"]
[Sat Aug 29 05:08:09.962109 2026] [security2:error] [pid 1028675:tid 1028879] [client 213.209.159.223:40234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/app/.env"] [unique_id "apK9mddHPfW2QFvhmL4B_QAAAEU"]
[Sat Aug 29 05:08:09.967984 2026] [security2:error] [pid 1034096:tid 1034276] [client 20.52.41.200:5365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-content/themes/about.php"] [unique_id "apK9mS04twRPFuquKD2jAAAAAJ4"]
[Sat Aug 29 05:08:09.975076 2026] [security2:error] [pid 1034096:tid 1034348] [client 111.235.68.106:39194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK9mS04twRPFuquKD2jAQAAAOY"]
[Sat Aug 29 05:08:09.975216 2026] [security2:error] [pid 1034096:tid 1034348] [client 111.235.68.106:39194] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK9mS04twRPFuquKD2jAQAAAOY"]
[Sat Aug 29 05:08:09.980841 2026] [security2:error] [pid 1034096:tid 1034367] [client 213.209.159.223:15691] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/ikiwiki/.env"] [unique_id "apK9mS04twRPFuquKD2jAgAAAPk"]
[Sat Aug 29 05:08:09.983690 2026] [security2:error] [pid 1028675:tid 1028855] [client 146.70.36.124:51226] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.mcrl.tech"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "apK9mddHPfW2QFvhmL4B_wAAAC0"]
[Sat Aug 29 05:08:09.983792 2026] [security2:error] [pid 1028675:tid 1028926] [client 213.209.159.223:42620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.greatdecisionsofcharlevoix.com"] [uri "/config.inc.php"] [unique_id "apK9mddHPfW2QFvhmL4B_gAAAHQ"]
[Sat Aug 29 05:08:09.996382 2026] [security2:error] [pid 1028675:tid 1028821] [client 20.104.18.15:4991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/sushi.php"] [unique_id "apK9mddHPfW2QFvhmL4CAAAAAAs"]
[Sat Aug 29 05:08:09.997123 2026] [security2:error] [pid 1028675:tid 1028922] [client 20.63.81.20:55418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/esuutzzx.php"] [unique_id "apK9mddHPfW2QFvhmL4CAQAAAHA"]
[Sat Aug 29 05:08:10.012845 2026] [security2:error] [pid 1034096:tid 1034358] [client 20.104.18.15:16882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/kerang.php"] [unique_id "apK9mi04twRPFuquKD2jBQAAAPA"]
[Sat Aug 29 05:08:10.031106 2026] [security2:error] [pid 1034096:tid 1034319] [client 20.104.18.15:19411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/gigi.php"] [unique_id "apK9mi04twRPFuquKD2jBgAAAMk"]
[Sat Aug 29 05:08:10.041149 2026] [security2:error] [pid 1028675:tid 1028860] [client 4.205.62.107:22495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/v4.php"] [unique_id "apK9mtdHPfW2QFvhmL4CAgAAADI"]
[Sat Aug 29 05:08:10.044660 2026] [security2:error] [pid 1034096:tid 1034356] [client 20.196.209.81:10480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-blog-header.php"] [unique_id "apK9mi04twRPFuquKD2jBwAAAO4"]
[Sat Aug 29 05:08:10.051676 2026] [security2:error] [pid 1034096:tid 1034323] [client 20.104.18.15:39819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/h.php"] [unique_id "apK9mi04twRPFuquKD2jCAAAAM0"]
[Sat Aug 29 05:08:10.060986 2026] [security2:error] [pid 1028675:tid 1028883] [client 20.203.141.11:24251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/file2.php"] [unique_id "apK9mtdHPfW2QFvhmL4CAwAAAEk"]
[Sat Aug 29 05:08:10.071560 2026] [security2:error] [pid 1034096:tid 1034288] [client 4.205.62.107:65507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/333.php"] [unique_id "apK9mi04twRPFuquKD2jCQAAAKo"]
[Sat Aug 29 05:08:10.075564 2026] [security2:error] [pid 1028675:tid 1028902] [client 158.23.147.79:35771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-admin/network/index.php"] [unique_id "apK9mtdHPfW2QFvhmL4CBAAAAFw"]
[Sat Aug 29 05:08:10.080672 2026] [security2:error] [pid 1034096:tid 1034359] [client 20.48.250.41:19577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/ccs.php"] [unique_id "apK9mi04twRPFuquKD2jCgAAAPE"]
[Sat Aug 29 05:08:10.087100 2026] [security2:error] [pid 1034096:tid 1034333] [client 52.139.37.240:36840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/root.php"] [unique_id "apK9mi04twRPFuquKD2jCwAAANc"]
[Sat Aug 29 05:08:10.120014 2026] [security2:error] [pid 1034096:tid 1034327] [client 68.155.159.216:51534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/x.php"] [unique_id "apK9mi04twRPFuquKD2jDgAAANE"]
[Sat Aug 29 05:08:10.123106 2026] [security2:error] [pid 1028675:tid 1028833] [client 213.209.159.223:40234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/dev/.env"] [unique_id "apK9mtdHPfW2QFvhmL4CBQAAABc"]
[Sat Aug 29 05:08:10.127298 2026] [security2:error] [pid 1034096:tid 1034355] [client 20.63.81.20:55491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/replace.php"] [unique_id "apK9mi04twRPFuquKD2jDwAAAO0"]
[Sat Aug 29 05:08:10.130973 2026] [security2:error] [pid 1028675:tid 1028932] [client 20.104.18.15:4971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/manga.php"] [unique_id "apK9mtdHPfW2QFvhmL4CBgAAAHo"]
[Sat Aug 29 05:08:10.135799 2026] [security2:error] [pid 1034096:tid 1034377] [client 45.148.10.62:55744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.worldofboardcraft.com"] [uri "/wp-config.php"] [unique_id "apK9mi04twRPFuquKD2jEQAAAQM"]
[Sat Aug 29 05:08:10.145385 2026] [security2:error] [pid 1034096:tid 1034281] [client 213.209.159.223:2796] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/staging/.env"] [unique_id "apK9mi04twRPFuquKD2jEgAAAKM"]
[Sat Aug 29 05:08:10.155727 2026] [security2:error] [pid 1028675:tid 1028909] [client 20.104.18.15:16850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/m.php"] [unique_id "apK9mtdHPfW2QFvhmL4CBwAAAGM"]
[Sat Aug 29 05:08:10.165731 2026] [security2:error] [pid 1028675:tid 1028844] [client 20.104.18.15:19428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/info.php/new.php"] [unique_id "apK9mtdHPfW2QFvhmL4CCQAAACI"]
[Sat Aug 29 05:08:10.168413 2026] [security2:error] [pid 1028675:tid 1028894] [client 20.240.128.207:23486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-themes.php"] [unique_id "apK9mtdHPfW2QFvhmL4CCgAAAFQ"]
[Sat Aug 29 05:08:10.173484 2026] [security2:error] [pid 1034096:tid 1034277] [client 213.209.159.223:15691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/config.inc.php"] [unique_id "apK9mi04twRPFuquKD2jFAAAAJ8"]
[Sat Aug 29 05:08:10.195458 2026] [security2:error] [pid 1028675:tid 1028858] [client 20.48.250.41:38734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/a332.php"] [unique_id "apK9mtdHPfW2QFvhmL4CCwAAADA"]
[Sat Aug 29 05:08:10.200385 2026] [security2:error] [pid 1034096:tid 1034305] [client 20.104.18.15:39825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/ano.php"] [unique_id "apK9mi04twRPFuquKD2jFQAAALs"]
[Sat Aug 29 05:08:10.206217 2026] [security2:error] [pid 1034096:tid 1034256] [client 4.205.62.107:53171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/nzv.php"] [unique_id "apK9mi04twRPFuquKD2jFwAAAIo"]
[Sat Aug 29 05:08:10.212333 2026] [access_compat:error] [pid 1034096:tid 1034262] [client 20.104.18.15:12273] AH01797: client denied by server configuration: /home1/protypeg/public_html/printingbyjoe/wp-content/uploads/ast-block-templates-json/
[Sat Aug 29 05:08:10.217332 2026] [security2:error] [pid 1034096:tid 1034360] [client 40.83.93.50:9869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/alfa-rex1.php"] [unique_id "apK9mi04twRPFuquKD2jGAAAAPI"]
[Sat Aug 29 05:08:10.225306 2026] [security2:error] [pid 1034096:tid 1034272] [client 158.23.147.79:17510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-admin/index.php"] [unique_id "apK9mi04twRPFuquKD2jGgAAAJo"]
[Sat Aug 29 05:08:10.225874 2026] [security2:error] [pid 1034096:tid 1034350] [client 213.209.159.223:2167] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/system/.env"] [unique_id "apK9mi04twRPFuquKD2jGQAAAOg"]
[Sat Aug 29 05:08:10.239207 2026] [security2:error] [pid 1028675:tid 1028908] [client 20.48.250.41:19532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/mar.php"] [unique_id "apK9mtdHPfW2QFvhmL4CDAAAAGI"]
[Sat Aug 29 05:08:10.246239 2026] [security2:error] [pid 1028675:tid 1028931] [client 68.155.159.216:56530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9mtdHPfW2QFvhmL4CDQAAAHk"]
[Sat Aug 29 05:08:10.259864 2026] [security2:error] [pid 1034096:tid 1034275] [client 20.197.61.180:9798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/extractable-loader-head.php"] [unique_id "apK9mi04twRPFuquKD2jGwAAAJ0"]
[Sat Aug 29 05:08:10.264248 2026] [security2:error] [pid 1034096:tid 1034300] [client 20.63.81.20:55538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/gulu.php"] [unique_id "apK9mi04twRPFuquKD2jHAAAALY"]
[Sat Aug 29 05:08:10.267085 2026] [security2:error] [pid 1034096:tid 1034361] [client 20.104.18.15:13580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/wp-includes/ID3/moon.php"] [unique_id "apK9mi04twRPFuquKD2jHgAAAPM"]
[Sat Aug 29 05:08:10.273280 2026] [security2:error] [pid 1034096:tid 1034376] [client 20.104.18.15:4932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/asdfghj.php"] [unique_id "apK9mi04twRPFuquKD2jHwAAAQI"]
[Sat Aug 29 05:08:10.277692 2026] [security2:error] [pid 1034096:tid 1034264] [client 52.139.37.240:36800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/shell.php"] [unique_id "apK9mi04twRPFuquKD2jIAAAAJI"]
[Sat Aug 29 05:08:10.280993 2026] [security2:error] [pid 1028675:tid 1028825] [client 20.63.219.114:8879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/haiterus.php"] [unique_id "apK9mtdHPfW2QFvhmL4CDgAAAA8"]
[Sat Aug 29 05:08:10.284500 2026] [security2:error] [pid 1034096:tid 1034283] [client 146.70.36.124:51230] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.mcrl.tech"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "apK9mi04twRPFuquKD2jIwAAAKU"]
[Sat Aug 29 05:08:10.297282 2026] [security2:error] [pid 1034096:tid 1034294] [client 20.104.18.15:16876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/fling.php"] [unique_id "apK9mi04twRPFuquKD2jJAAAALA"]
[Sat Aug 29 05:08:10.331132 2026] [security2:error] [pid 1034096:tid 1034278] [client 20.203.141.11:23639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "apK9mi04twRPFuquKD2jJwAAAKA"]
[Sat Aug 29 05:08:10.331807 2026] [security2:error] [pid 1028675:tid 1028930] [client 40.83.93.50:9883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/class_api.php"] [unique_id "apK9mtdHPfW2QFvhmL4CEgAAAHg"]
[Sat Aug 29 05:08:10.337871 2026] [security2:error] [pid 1034096:tid 1034308] [client 20.104.18.15:39873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/ai.php"] [unique_id "apK9mi04twRPFuquKD2jKAAAAL4"]
[Sat Aug 29 05:08:10.343653 2026] [security2:error] [pid 1028675:tid 1028862] [client 20.104.18.15:12118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/w.php"] [unique_id "apK9mtdHPfW2QFvhmL4CEwAAADQ"]
[Sat Aug 29 05:08:10.364167 2026] [security2:error] [pid 1034096:tid 1034253] [client 213.209.159.223:2167] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/wp-config.php.backup"] [unique_id "apK9mi04twRPFuquKD2jKQAAAIc"]
[Sat Aug 29 05:08:10.368402 2026] [proxy_http:error] [pid 1017536:tid 1017676] (70007)The timeout specified has expired: [client 127.0.0.1:33084] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:08:10.368427 2026] [proxy:error] [pid 1017536:tid 1017676] [client 127.0.0.1:33084] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:08:10.374398 2026] [security2:error] [pid 1034096:tid 1034337] [client 20.48.250.41:38901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/ws66.php"] [unique_id "apK9mi04twRPFuquKD2jKgAAANs"]
[Sat Aug 29 05:08:10.380167 2026] [security2:error] [pid 1028675:tid 1028920] [client 20.104.18.15:19370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/w.php"] [unique_id "apK9mtdHPfW2QFvhmL4CFgAAAG4"]
[Sat Aug 29 05:08:10.392986 2026] [security2:error] [pid 1034096:tid 1034287] [client 20.63.81.20:55506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/gtghklk.php"] [unique_id "apK9mi04twRPFuquKD2jLAAAAKk"]
[Sat Aug 29 05:08:10.394411 2026] [security2:error] [pid 1034096:tid 1034310] [client 20.48.250.41:19503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/ccu.php"] [unique_id "apK9mi04twRPFuquKD2jLQAAAMA"]
[Sat Aug 29 05:08:10.421657 2026] [security2:error] [pid 1034096:tid 1034260] [client 20.52.41.200:4584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK9mi04twRPFuquKD2jMQAAAI4"]
[Sat Aug 29 05:08:10.425404 2026] [proxy_http:error] [pid 1017536:tid 1017697] (70007)The timeout specified has expired: [client 127.0.0.1:10310] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:08:10.425434 2026] [proxy:error] [pid 1017536:tid 1017697] [client 127.0.0.1:10310] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:08:10.431081 2026] [proxy_http:error] [pid 1017536:tid 1017701] (70007)The timeout specified has expired: [client 127.0.0.1:10318] AH01102: error reading status line from remote server 50.6.92.44:8443, referer: https://guraonline.com/shop/?orderby=price-desc&product_brand=aco,ldb,possess,la-roche-posay,scope,versace,cerave,locobase
[Sat Aug 29 05:08:10.431098 2026] [proxy:error] [pid 1017536:tid 1017701] [client 127.0.0.1:10318] AH00898: Error reading from remote server returned by /502.shtml, referer: https://guraonline.com/shop/?orderby=price-desc&product_brand=aco,ldb,possess,la-roche-posay,scope,versace,cerave,locobase
[Sat Aug 29 05:08:10.432166 2026] [security2:error] [pid 1034096:tid 1034317] [client 20.104.18.15:16806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/btyuio.php"] [unique_id "apK9mi04twRPFuquKD2jNAAAAMc"]
[Sat Aug 29 05:08:10.440434 2026] [security2:error] [pid 1034096:tid 1034348] [client 20.196.209.81:9182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-blogs.php"] [unique_id "apK9mi04twRPFuquKD2jNgAAAOY"]
[Sat Aug 29 05:08:10.442863 2026] [security2:error] [pid 1034096:tid 1034288] [client 20.104.18.15:14282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/xmini4.php"] [unique_id "apK9mi04twRPFuquKD2jNwAAAKo"]
[Sat Aug 29 05:08:10.456120 2026] [security2:error] [pid 1034096:tid 1034307] [client 20.104.18.15:4949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/dragonshell.php"] [unique_id "apK9mi04twRPFuquKD2jOAAAAL0"]
[Sat Aug 29 05:08:10.471070 2026] [security2:error] [pid 1034096:tid 1034327] [client 68.155.159.216:18420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK9mi04twRPFuquKD2jPAAAANE"]
[Sat Aug 29 05:08:10.473224 2026] [security2:error] [pid 1034096:tid 1034276] [client 20.100.175.163:48212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK9mi04twRPFuquKD2jPQAAAJ4"]
[Sat Aug 29 05:08:10.474052 2026] [security2:error] [pid 1034096:tid 1034331] [client 20.104.49.130:53818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/about.php"] [unique_id "apK9mi04twRPFuquKD2jPgAAANU"]
[Sat Aug 29 05:08:10.474784 2026] [security2:error] [pid 1034096:tid 1034332] [client 52.139.37.240:36684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK9mi04twRPFuquKD2jPwAAANY"]
[Sat Aug 29 05:08:10.481026 2026] [security2:error] [pid 1034096:tid 1034355] [client 20.104.49.130:47951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/jp.php"] [unique_id "apK9mi04twRPFuquKD2jQAAAAO0"]
[Sat Aug 29 05:08:10.518325 2026] [security2:error] [pid 1028675:tid 1028835] [client 213.209.159.223:40234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/server/.env"] [unique_id "apK9mtdHPfW2QFvhmL4CGQAAABk"]
[Sat Aug 29 05:08:10.522147 2026] [security2:error] [pid 1034096:tid 1034306] [client 68.155.159.216:14316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9mi04twRPFuquKD2jQgAAALw"]
[Sat Aug 29 05:08:10.523073 2026] [security2:error] [pid 1034096:tid 1034274] [client 158.23.147.79:6139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9mi04twRPFuquKD2jRAAAAJw"]
[Sat Aug 29 05:08:10.523104 2026] [security2:error] [pid 1034096:tid 1034267] [client 20.104.18.15:19383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/x.php"] [unique_id "apK9mi04twRPFuquKD2jQwAAAJU"]
[Sat Aug 29 05:08:10.535703 2026] [security2:error] [pid 1034096:tid 1034360] [client 20.63.81.20:55381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/comand.php"] [unique_id "apK9mi04twRPFuquKD2jRQAAAPI"]
[Sat Aug 29 05:08:10.539346 2026] [security2:error] [pid 1034096:tid 1034350] [client 158.23.147.79:6086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/radio.php"] [unique_id "apK9mi04twRPFuquKD2jRgAAAOg"]
[Sat Aug 29 05:08:10.544907 2026] [security2:error] [pid 1034096:tid 1034279] [client 20.203.141.11:38357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK9mi04twRPFuquKD2jRwAAAKE"]
[Sat Aug 29 05:08:10.545722 2026] [security2:error] [pid 1034096:tid 1034334] [client 20.48.250.41:19482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/ak.php"] [unique_id "apK9mi04twRPFuquKD2jSAAAANg"]
[Sat Aug 29 05:08:10.548192 2026] [security2:error] [pid 1034096:tid 1034320] [client 20.104.18.15:39908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/sf.php"] [unique_id "apK9mi04twRPFuquKD2jSQAAAMo"]
[Sat Aug 29 05:08:10.548628 2026] [security2:error] [pid 1028675:tid 1028841] [client 213.209.159.223:64957] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "webdisk.greatdecisionsofcharlevoix.com"] [uri "/wp-config.php.backup"] [unique_id "apK9mtdHPfW2QFvhmL4CGgAAAB8"]
[Sat Aug 29 05:08:10.552857 2026] [security2:error] [pid 1034096:tid 1034368] [client 213.209.159.223:54765] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_whm/source/.env"] [unique_id "apK9mi04twRPFuquKD2jSgAAAPo"]
[Sat Aug 29 05:08:10.569293 2026] [security2:error] [pid 1034096:tid 1034339] [client 158.23.147.79:59887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-admin/css/index.php"] [unique_id "apK9mi04twRPFuquKD2jSwAAAN0"]
[Sat Aug 29 05:08:10.571718 2026] [security2:error] [pid 1034096:tid 1034361] [client 145.239.10.137:53245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.10.239.145.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kntadvocates.com"] [uri "/ultra.php"] [unique_id "apK9mi04twRPFuquKD2jTAAAAPM"], referer: http://kntadvocates.com/ultra.php
[Sat Aug 29 05:08:10.588686 2026] [security2:error] [pid 1034096:tid 1034283] [client 146.70.36.124:51240] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.mcrl.tech"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "apK9mi04twRPFuquKD2jTQAAAKU"]
[Sat Aug 29 05:08:10.592036 2026] [security2:error] [pid 1028675:tid 1028881] [client 213.209.159.223:59719] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/system/.env"] [unique_id "apK9mtdHPfW2QFvhmL4CGwAAAEc"]
[Sat Aug 29 05:08:10.610240 2026] [security2:error] [pid 1034096:tid 1034353] [client 20.48.250.41:38898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/ws68.php"] [unique_id "apK9mi04twRPFuquKD2jUAAAAOs"]
[Sat Aug 29 05:08:10.615529 2026] [security2:error] [pid 1034096:tid 1034313] [client 45.148.10.62:55768] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "mail.worldofboardcraft.com"] [uri "/wp-config.php.old"] [unique_id "apK9mi04twRPFuquKD2jUgAAAMM"]
[Sat Aug 29 05:08:10.633889 2026] [security2:error] [pid 1034096:tid 1034258] [client 57.141.14.15:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/cart/"] [unique_id "apK9mi04twRPFuquKD2jUwAAAIw"]
[Sat Aug 29 05:08:10.664631 2026] [security2:error] [pid 1034096:tid 1034272] [client 20.63.219.114:16678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/go.php"] [unique_id "apK9mi04twRPFuquKD2jVQAAAJo"]
[Sat Aug 29 05:08:10.666087 2026] [security2:error] [pid 1034096:tid 1034354] [client 20.240.128.207:31065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-trackback.php"] [unique_id "apK9mi04twRPFuquKD2jVgAAAOw"]
[Sat Aug 29 05:08:10.667980 2026] [security2:error] [pid 1034096:tid 1034286] [client 68.155.159.216:16301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-admin/network/index.php"] [unique_id "apK9mi04twRPFuquKD2jVwAAAKg"]
[Sat Aug 29 05:08:10.668594 2026] [security2:error] [pid 1034096:tid 1034260] [client 20.63.81.20:55544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/wp_motu_myk3v.php"] [unique_id "apK9mi04twRPFuquKD2jWAAAAI4"]
[Sat Aug 29 05:08:10.682812 2026] [security2:error] [pid 1028675:tid 1028861] [client 52.139.37.240:36677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/wp-content/plugins/linkpreview/il.php"] [unique_id "apK9mtdHPfW2QFvhmL4CHgAAADM"]
[Sat Aug 29 05:08:10.684279 2026] [security2:error] [pid 1034096:tid 1034291] [client 68.155.159.216:30668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/login.php"] [unique_id "apK9mi04twRPFuquKD2jWQAAAK0"]
[Sat Aug 29 05:08:10.688391 2026] [security2:error] [pid 1034096:tid 1034256] [client 94.154.32.99:55378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 99.32.154.94.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "youthspeakoutint.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "apK9mi04twRPFuquKD2jWgAAAIo"]
[Sat Aug 29 05:08:10.689164 2026] [security2:error] [pid 1028675:tid 1028821] [client 68.155.159.216:49289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/index/function.php"] [unique_id "apK9mtdHPfW2QFvhmL4CHwAAAAs"]
[Sat Aug 29 05:08:10.689611 2026] [security2:error] [pid 1034096:tid 1034268] [client 40.83.93.50:8981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/headerg.php"] [unique_id "apK9mi04twRPFuquKD2jXAAAAJY"]
[Sat Aug 29 05:08:10.689616 2026] [security2:error] [pid 1028675:tid 1028922] [client 20.48.250.41:19549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/lib.php"] [unique_id "apK9mtdHPfW2QFvhmL4CIAAAAHA"]
[Sat Aug 29 05:08:10.719310 2026] [security2:error] [pid 1028675:tid 1028860] [client 68.155.159.216:65121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-admin/dropdown.php"] [unique_id "apK9mtdHPfW2QFvhmL4CJAAAADI"]
[Sat Aug 29 05:08:10.739743 2026] [security2:error] [pid 1028675:tid 1028883] [client 213.209.159.223:59719] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/wp-config.php.backup"] [unique_id "apK9mtdHPfW2QFvhmL4CJQAAAEk"]
[Sat Aug 29 05:08:10.781374 2026] [authz_core:error] [pid 1034096:tid 1034309] [client 43.130.60.195:51772] AH01630: client denied by server configuration: /home3/davidbai/public_html/bailie/error_log, referer: http://bailie.org
[Sat Aug 29 05:08:10.782557 2026] [security2:error] [pid 1034096:tid 1034302] [client 158.23.147.79:26457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/goat1.php"] [unique_id "apK9mi04twRPFuquKD2jYgAAALg"]
[Sat Aug 29 05:08:10.801459 2026] [security2:error] [pid 1028675:tid 1028902] [client 20.63.81.20:55462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/wp_motu_ypdat.php"] [unique_id "apK9mtdHPfW2QFvhmL4CJgAAAFw"]
[Sat Aug 29 05:08:10.830380 2026] [security2:error] [pid 1034096:tid 1034358] [client 40.83.93.50:8444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/aksinet.php"] [unique_id "apK9mi04twRPFuquKD2jZQAAAPA"]
[Sat Aug 29 05:08:10.832928 2026] [security2:error] [pid 1034096:tid 1034252] [client 213.209.159.223:54765] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_whm/framework/.env"] [unique_id "apK9mi04twRPFuquKD2jZgAAAIY"]
[Sat Aug 29 05:08:10.834192 2026] [security2:error] [pid 1034096:tid 1034319] [client 20.196.209.81:10495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-comments-post.php"] [unique_id "apK9mi04twRPFuquKD2jZwAAAMk"]
[Sat Aug 29 05:08:10.834501 2026] [security2:error] [pid 1034096:tid 1034277] [client 68.155.159.216:24487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/cgi-bin/index.php"] [unique_id "apK9mi04twRPFuquKD2jaAAAAJ8"]
[Sat Aug 29 05:08:10.865235 2026] [security2:error] [pid 1034096:tid 1034254] [client 4.205.62.107:58492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/log.php"] [unique_id "apK9mi04twRPFuquKD2jagAAAIg"]
[Sat Aug 29 05:08:10.871336 2026] [security2:error] [pid 1028675:tid 1028867] [client 20.52.41.200:4546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-admin/index.php"] [unique_id "apK9mtdHPfW2QFvhmL4CKAAAADk"]
[Sat Aug 29 05:08:10.880794 2026] [security2:error] [pid 1028675:tid 1028901] [client 52.139.37.240:36711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/wp-header-json.php"] [unique_id "apK9mtdHPfW2QFvhmL4CKQAAAFs"]
[Sat Aug 29 05:08:10.895501 2026] [security2:error] [pid 1034096:tid 1034262] [client 213.209.159.223:2796] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/source/.env"] [unique_id "apK9mi04twRPFuquKD2jbQAAAJA"]
[Sat Aug 29 05:08:10.897079 2026] [security2:error] [pid 1034096:tid 1034350] [client 146.70.36.124:51248] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.mcrl.tech"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "apK9mi04twRPFuquKD2jbgAAAOg"]
[Sat Aug 29 05:08:10.899085 2026] [security2:error] [pid 1034096:tid 1034324] [client 103.162.125.59:58985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.125.162.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK9mi04twRPFuquKD2jbwAAAM4"]
[Sat Aug 29 05:08:10.899165 2026] [security2:error] [pid 1034096:tid 1034324] [client 103.162.125.59:58985] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK9mi04twRPFuquKD2jbwAAAM4"]
[Sat Aug 29 05:08:10.900813 2026] [security2:error] [pid 1034096:tid 1034320] [client 158.23.147.79:49842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-admin.php"] [unique_id "apK9mi04twRPFuquKD2jcAAAAMo"]
[Sat Aug 29 05:08:10.905878 2026] [security2:error] [pid 1034096:tid 1034284] [client 4.205.62.107:8979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/infos.php"] [unique_id "apK9mi04twRPFuquKD2jcQAAAKY"]
[Sat Aug 29 05:08:10.919879 2026] [security2:error] [pid 1028675:tid 1028812] [client 4.205.62.107:22060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/fff.php"] [unique_id "apK9mtdHPfW2QFvhmL4CKgAAAAI"]
[Sat Aug 29 05:08:10.929723 2026] [security2:error] [pid 1034096:tid 1034276] [client 213.209.159.223:7548] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/app/.env"] [unique_id "apK9mi04twRPFuquKD2jcgAAAJ4"]
[Sat Aug 29 05:08:10.951787 2026] [security2:error] [pid 1034096:tid 1034311] [client 20.63.81.20:55379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/edit.php"] [unique_id "apK9mi04twRPFuquKD2jdAAAAME"]
[Sat Aug 29 05:08:10.962515 2026] [security2:error] [pid 1028675:tid 1028929] [client 20.197.61.180:12383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/defaults.php"] [unique_id "apK9mtdHPfW2QFvhmL4CLQAAAHc"]
[Sat Aug 29 05:08:10.963777 2026] [access_compat:error] [pid 1034096:tid 1034312] [client 67.20.76.220:54590] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:08:10.969028 2026] [security2:error] [pid 1028675:tid 1028887] [client 20.100.175.163:5468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-mail.php"] [unique_id "apK9mtdHPfW2QFvhmL4CLwAAAE0"]
[Sat Aug 29 05:08:10.972038 2026] [security2:error] [pid 1034096:tid 1034264] [client 213.209.159.223:54765] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_whm/ikiwiki/.env"] [unique_id "apK9mi04twRPFuquKD2jdwAAAJI"]
[Sat Aug 29 05:08:10.988829 2026] [security2:error] [pid 1034096:tid 1034294] [client 158.23.147.79:17515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/file5.php"] [unique_id "apK9mi04twRPFuquKD2jegAAALA"]
[Sat Aug 29 05:08:10.997934 2026] [security2:error] [pid 1028675:tid 1028898] [client 20.48.250.41:19504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/wp-style.php"] [unique_id "apK9mtdHPfW2QFvhmL4CMAAAAFg"]
[Sat Aug 29 05:08:11.001252 2026] [security2:error] [pid 1028675:tid 1028847] [client 68.155.159.216:6142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/content.php"] [unique_id "apK9mtdHPfW2QFvhmL4CMQAAACU"]
[Sat Aug 29 05:08:11.020634 2026] [security2:error] [pid 1034096:tid 1034349] [client 20.48.250.41:38870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/users.php"] [unique_id "apK9my04twRPFuquKD2jfAAAAOc"]
[Sat Aug 29 05:08:11.022579 2026] [security2:error] [pid 1028675:tid 1028923] [client 20.63.219.114:16660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/gecko-new.php"] [unique_id "apK9m9dHPfW2QFvhmL4CMgAAAHE"]
[Sat Aug 29 05:08:11.042330 2026] [security2:error] [pid 1028675:tid 1028904] [client 68.155.159.216:52775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/lock.php"] [unique_id "apK9m9dHPfW2QFvhmL4CMwAAAF4"]
[Sat Aug 29 05:08:11.047384 2026] [http2:warn] [pid 1018003:tid 1018214] [client 57.141.14.83:32086] h2_stream(1018003-136-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:08:11.054427 2026] [proxy_http:error] [pid 1017536:tid 1017559] (70007)The timeout specified has expired: [remote 57.141.14.6:58642] AH01102: error reading status line from remote server 127.0.0.1:8443
[Sat Aug 29 05:08:11.054468 2026] [proxy:error] [pid 1017536:tid 1017559] [remote 57.141.14.6:58642] AH00898: Error reading from remote server returned by /shop/
[Sat Aug 29 05:08:11.055923 2026] [security2:error] [pid 1028675:tid 1028908] [client 20.104.104.62:22751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sellmylike.millionairebuildersclub.com"] [uri "/term.php"] [unique_id "apK9m9dHPfW2QFvhmL4CNAAAAGI"]
[Sat Aug 29 05:08:11.067599 2026] [security2:error] [pid 1034096:tid 1034299] [client 213.209.159.223:7548] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/dev/.env"] [unique_id "apK9my04twRPFuquKD2jfwAAALU"]
[Sat Aug 29 05:08:11.068560 2026] [security2:error] [pid 1028675:tid 1028866] [client 68.155.159.216:1965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK9m9dHPfW2QFvhmL4CNwAAADg"]
[Sat Aug 29 05:08:11.076981 2026] [proxy_http:error] [pid 1017536:tid 1017762] (70007)The timeout specified has expired: [client 127.0.0.1:10618] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:08:11.077004 2026] [proxy:error] [pid 1017536:tid 1017762] [client 127.0.0.1:10618] AH00898: Error reading from remote server returned by /shop/
[Sat Aug 29 05:08:11.081396 2026] [security2:error] [pid 1028675:tid 1028820] [client 20.63.81.20:55398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/tqkdqbbv.php"] [unique_id "apK9m9dHPfW2QFvhmL4COAAAAAo"]
[Sat Aug 29 05:08:11.085050 2026] [security2:error] [pid 1034096:tid 1034258] [client 52.139.37.240:36691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/zup.php"] [unique_id "apK9my04twRPFuquKD2jgQAAAIw"]
[Sat Aug 29 05:08:11.108454 2026] [security2:error] [pid 1034096:tid 1034301] [client 213.209.159.223:54765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/config.inc.php"] [unique_id "apK9my04twRPFuquKD2jgwAAALc"]
[Sat Aug 29 05:08:11.136597 2026] [proxy_http:error] [pid 1017536:tid 1017560] (70007)The timeout specified has expired: [remote 74.7.241.38:60088] AH01102: error reading status line from remote server 127.0.0.1:8443, referer: https://guraonline.com/shop/?orderby=date&product_brand=la-roche-posay,the-one,dr-ceuracle,aco,locobase,possess,oncolour,ldb,scope
[Sat Aug 29 05:08:11.136619 2026] [proxy:error] [pid 1017536:tid 1017560] [remote 74.7.241.38:60088] AH00898: Error reading from remote server returned by /shop/, referer: https://guraonline.com/shop/?orderby=date&product_brand=la-roche-posay,the-one,dr-ceuracle,aco,locobase,possess,oncolour,ldb,scope
[Sat Aug 29 05:08:11.137475 2026] [security2:error] [pid 1034096:tid 1034348] [client 20.203.141.11:23616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-content/admin.php"] [unique_id "apK9my04twRPFuquKD2jhgAAAOY"]
[Sat Aug 29 05:08:11.146410 2026] [security2:error] [pid 1028675:tid 1028920] [client 114.119.152.221:36847] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.classiclightingusa.com"] [uri "/catalog/product_info.php/products_id/605/action/notify/osCsid/7kkmvdh3rllrpj6n2mo6g3rgo6"] [unique_id "apK9m9dHPfW2QFvhmL4COQAAAG4"], referer: http://www.classiclightingusa.com/catalog/product_info.php/products_id/605/osCsid/7kkmvdh3rllrpj6n2mo6g3rgo6
[Sat Aug 29 05:08:11.148083 2026] [security2:error] [pid 1034096:tid 1034363] [client 20.48.250.41:19475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/browse.php"] [unique_id "apK9my04twRPFuquKD2jiAAAAPU"]
[Sat Aug 29 05:08:11.166951 2026] [security2:error] [pid 1028675:tid 1028884] [client 20.203.141.11:24222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/xda.php"] [unique_id "apK9m9dHPfW2QFvhmL4COgAAAEo"]
[Sat Aug 29 05:08:11.173577 2026] [proxy_http:error] [pid 1017536:tid 1017718] (70007)The timeout specified has expired: [client 127.0.0.1:10644] AH01102: error reading status line from remote server 50.6.92.44:8443, referer: https://guraonline.com/shop/?orderby=date&product_brand=la-roche-posay,the-one,dr-ceuracle,aco,locobase,possess,oncolour,ldb,scope
[Sat Aug 29 05:08:11.173600 2026] [proxy:error] [pid 1017536:tid 1017718] [client 127.0.0.1:10644] AH00898: Error reading from remote server returned by /shop/, referer: https://guraonline.com/shop/?orderby=date&product_brand=la-roche-posay,the-one,dr-ceuracle,aco,locobase,possess,oncolour,ldb,scope
[Sat Aug 29 05:08:11.175175 2026] [security2:error] [pid 1034096:tid 1034310] [client 158.23.147.79:35233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK9my04twRPFuquKD2jiwAAAMA"]
[Sat Aug 29 05:08:11.182188 2026] [security2:error] [pid 1034096:tid 1034313] [client 94.154.32.99:55474] ModSecurity: Access denied with code 406 (phase 1). Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "187"] [id "900401"] [msg "PHP Spam Botnet"] [hostname "youthspeakoutint.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "apK9my04twRPFuquKD2jjQAAAMM"]
[Sat Aug 29 05:08:11.182851 2026] [security2:error] [pid 1034096:tid 1034307] [client 213.209.159.223:2796] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/framework/.env"] [unique_id "apK9my04twRPFuquKD2jjAAAAL0"]
[Sat Aug 29 05:08:11.191911 2026] [security2:error] [pid 1034096:tid 1034289] [client 146.70.36.124:51262] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.mcrl.tech"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "apK9my04twRPFuquKD2jkAAAAKs"]
[Sat Aug 29 05:08:11.194883 2026] [security2:error] [pid 1028675:tid 1028907] [client 40.83.93.50:9865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/meta.php"] [unique_id "apK9m9dHPfW2QFvhmL4CPQAAAGE"]
[Sat Aug 29 05:08:11.208533 2026] [security2:error] [pid 1034096:tid 1034377] [client 4.205.62.107:26645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/G-in.php"] [unique_id "apK9my04twRPFuquKD2jlAAAAQM"]
[Sat Aug 29 05:08:11.210252 2026] [security2:error] [pid 1034096:tid 1034260] [client 45.148.10.62:55774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.worldofboardcraft.com"] [uri "/config.php"] [unique_id "apK9my04twRPFuquKD2jlQAAAI4"]
[Sat Aug 29 05:08:11.215888 2026] [security2:error] [pid 1028675:tid 1028863] [client 20.63.81.20:55477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/kjyehoxl.php"] [unique_id "apK9m9dHPfW2QFvhmL4CPgAAADU"]
[Sat Aug 29 05:08:11.229080 2026] [security2:error] [pid 1034096:tid 1034277] [client 4.205.62.107:22149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/debuggen.php"] [unique_id "apK9my04twRPFuquKD2jlgAAAJ8"]
[Sat Aug 29 05:08:11.229836 2026] [security2:error] [pid 1034096:tid 1034319] [client 213.209.159.223:10693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/app_dev.php/_profiler/open"] [unique_id "apK9my04twRPFuquKD2jlwAAAMk"]
[Sat Aug 29 05:08:11.230309 2026] [security2:error] [pid 1034096:tid 1034285] [client 68.155.159.216:51227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-content/x.php"] [unique_id "apK9my04twRPFuquKD2jmAAAAKc"]
[Sat Aug 29 05:08:11.243444 2026] [security2:error] [pid 1028675:tid 1028876] [client 213.209.159.223:40234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/staging/.env"] [unique_id "apK9m9dHPfW2QFvhmL4CQAAAAEI"]
[Sat Aug 29 05:08:11.254001 2026] [security2:error] [pid 1034096:tid 1034271] [client 20.104.104.62:29188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sellmylike.millionairebuildersclub.com"] [uri "/ms-edit.php"] [unique_id "apK9my04twRPFuquKD2jmQAAAJk"]
[Sat Aug 29 05:08:11.259313 2026] [security2:error] [pid 1028675:tid 1028878] [client 20.196.209.81:9024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-config.php"] [unique_id "apK9m9dHPfW2QFvhmL4CQQAAAEQ"]
[Sat Aug 29 05:08:11.278090 2026] [security2:error] [pid 1034096:tid 1034267] [client 20.48.250.41:19531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/zoo.php"] [unique_id "apK9my04twRPFuquKD2jmwAAAJU"]
[Sat Aug 29 05:08:11.302957 2026] [security2:error] [pid 1034096:tid 1034252] [client 52.139.37.240:36678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/a9.php"] [unique_id "apK9my04twRPFuquKD2jnQAAAIY"]
[Sat Aug 29 05:08:11.322493 2026] [security2:error] [pid 1034096:tid 1034324] [client 213.209.159.223:2796] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/ikiwiki/.env"] [unique_id "apK9my04twRPFuquKD2jngAAAM4"]
[Sat Aug 29 05:08:11.328615 2026] [security2:error] [pid 1034096:tid 1034372] [client 20.52.41.200:5258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/item.php"] [unique_id "apK9my04twRPFuquKD2jnwAAAP4"]
[Sat Aug 29 05:08:11.336863 2026] [security2:error] [pid 1034096:tid 1034368] [client 158.23.147.79:17535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK9my04twRPFuquKD2joAAAAPo"]
[Sat Aug 29 05:08:11.344019 2026] [security2:error] [pid 1034096:tid 1034275] [client 4.205.62.107:56011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/66.php"] [unique_id "apK9my04twRPFuquKD2jogAAAJ0"]
[Sat Aug 29 05:08:11.344298 2026] [security2:error] [pid 1034096:tid 1034344] [client 20.240.128.207:23453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/222.php"] [unique_id "apK9my04twRPFuquKD2jowAAAOI"]
[Sat Aug 29 05:08:11.365994 2026] [security2:error] [pid 1034096:tid 1034321] [client 20.63.81.20:55410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/llyuxaqd.php"] [unique_id "apK9my04twRPFuquKD2jpAAAAMs"]
[Sat Aug 29 05:08:11.371299 2026] [security2:error] [pid 1034096:tid 1034276] [client 20.48.250.41:38881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/bzjdlofz.php"] [unique_id "apK9my04twRPFuquKD2jpQAAAJ4"]
[Sat Aug 29 05:08:11.381734 2026] [security2:error] [pid 1028675:tid 1028916] [client 40.83.93.50:9897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/alfa-rex1.php"] [unique_id "apK9m9dHPfW2QFvhmL4CRAAAAGo"]
[Sat Aug 29 05:08:11.426072 2026] [security2:error] [pid 1034096:tid 1034297] [client 213.209.159.223:44197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.greatdecisionsofcharlevoix.com"] [uri "/app_dev.php/_profiler/open"] [unique_id "apK9my04twRPFuquKD2jqAAAALM"]
[Sat Aug 29 05:08:11.429421 2026] [security2:error] [pid 1028675:tid 1028892] [client 20.48.250.41:19558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/elp.php"] [unique_id "apK9m9dHPfW2QFvhmL4CRgAAAFI"]
[Sat Aug 29 05:08:11.455203 2026] [security2:error] [pid 1034096:tid 1034294] [client 20.104.104.62:22752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sellmylike.millionairebuildersclub.com"] [uri "/admin.php"] [unique_id "apK9my04twRPFuquKD2jqgAAALA"]
[Sat Aug 29 05:08:11.460541 2026] [security2:error] [pid 1034096:tid 1034286] [client 213.209.159.223:2796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/config.inc.php"] [unique_id "apK9my04twRPFuquKD2jqwAAAKg"]
[Sat Aug 29 05:08:11.477175 2026] [security2:error] [pid 1028675:tid 1028848] [client 68.155.159.216:33716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK9m9dHPfW2QFvhmL4CRwAAACY"]
[Sat Aug 29 05:08:11.478930 2026] [security2:error] [pid 1034096:tid 1034334] [client 20.100.175.163:5451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-content.php"] [unique_id "apK9my04twRPFuquKD2jrAAAANg"]
[Sat Aug 29 05:08:11.491973 2026] [security2:error] [pid 1028675:tid 1028926] [client 20.63.219.114:18534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/wp-admin.php"] [unique_id "apK9m9dHPfW2QFvhmL4CSAAAAHQ"]
[Sat Aug 29 05:08:11.493927 2026] [security2:error] [pid 1034096:tid 1034258] [client 20.63.81.20:55445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/nbwxolou.php"] [unique_id "apK9my04twRPFuquKD2jrQAAAIw"]
[Sat Aug 29 05:08:11.495290 2026] [security2:error] [pid 1034096:tid 1034337] [client 52.139.37.240:36809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/admin/index.php"] [unique_id "apK9my04twRPFuquKD2jrgAAANs"]
[Sat Aug 29 05:08:11.497190 2026] [security2:error] [pid 1034096:tid 1034291] [client 146.70.36.124:51276] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.mcrl.tech"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "apK9my04twRPFuquKD2jrwAAAK0"]
[Sat Aug 29 05:08:11.521420 2026] [security2:error] [pid 1034096:tid 1034311] [client 213.209.159.223:53817] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_whm/system/.env"] [unique_id "apK9my04twRPFuquKD2jsAAAAME"]
[Sat Aug 29 05:08:11.570353 2026] [security2:error] [pid 1034096:tid 1034307] [client 213.209.159.223:1897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/app_dev.php/_profiler/open"] [unique_id "apK9my04twRPFuquKD2jtgAAAL0"]
[Sat Aug 29 05:08:11.571815 2026] [security2:error] [pid 1034096:tid 1034327] [client 20.48.250.41:19520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/666.php"] [unique_id "apK9my04twRPFuquKD2jtwAAANE"]
[Sat Aug 29 05:08:11.576854 2026] [security2:error] [pid 1028675:tid 1028859] [client 68.155.159.216:18428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/lock.php"] [unique_id "apK9m9dHPfW2QFvhmL4CUQAAADE"]
[Sat Aug 29 05:08:11.623627 2026] [security2:error] [pid 1028675:tid 1028844] [client 20.63.81.20:55344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/nsxeubyv.php"] [unique_id "apK9m9dHPfW2QFvhmL4CUgAAACI"]
[Sat Aug 29 05:08:11.626149 2026] [security2:error] [pid 1028675:tid 1028902] [client 20.203.141.11:6704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-configs.php"] [unique_id "apK9m9dHPfW2QFvhmL4CUwAAAFw"]
[Sat Aug 29 05:08:11.631856 2026] [security2:error] [pid 1034096:tid 1034358] [client 158.23.147.79:6026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9my04twRPFuquKD2juAAAAPA"]
[Sat Aug 29 05:08:11.636342 2026] [security2:error] [pid 1034096:tid 1034277] [client 68.155.159.216:14334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9my04twRPFuquKD2juQAAAJ8"]
[Sat Aug 29 05:08:11.650796 2026] [security2:error] [pid 1034096:tid 1034362] [client 158.23.147.79:6021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK9my04twRPFuquKD2jvAAAAPQ"]
[Sat Aug 29 05:08:11.653472 2026] [security2:error] [pid 1034096:tid 1034332] [client 20.104.104.62:22720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sellmylike.millionairebuildersclub.com"] [uri "/index.php"] [unique_id "apK9my04twRPFuquKD2jvQAAANY"]
[Sat Aug 29 05:08:11.658525 2026] [security2:error] [pid 1034096:tid 1034274] [client 213.209.159.223:53817] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/wp-config.php.backup"] [unique_id "apK9my04twRPFuquKD2jvgAAAJw"]
[Sat Aug 29 05:08:11.668227 2026] [security2:error] [pid 1034096:tid 1034348] [client 213.209.159.223:47284] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/wp-content/mysql.sql"] [unique_id "apK9my04twRPFuquKD2jvwAAAOY"]
[Sat Aug 29 05:08:11.670095 2026] [security2:error] [pid 1034096:tid 1034317] [client 158.23.147.79:11416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-content/themes/too.php"] [unique_id "apK9my04twRPFuquKD2jwAAAAMc"]
[Sat Aug 29 05:08:11.683651 2026] [security2:error] [pid 1034096:tid 1034363] [client 20.196.209.81:10475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-configs.php"] [unique_id "apK9my04twRPFuquKD2jwgAAAPU"]
[Sat Aug 29 05:08:11.689627 2026] [security2:error] [pid 1028675:tid 1028898] [client 20.48.250.41:38786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/selesai.php"] [unique_id "apK9m9dHPfW2QFvhmL4CVQAAAFg"]
[Sat Aug 29 05:08:11.693785 2026] [security2:error] [pid 1034096:tid 1034260] [client 52.139.37.240:36848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/makeasmtp.php"] [unique_id "apK9my04twRPFuquKD2jwwAAAI4"]
[Sat Aug 29 05:08:11.699043 2026] [security2:error] [pid 1034096:tid 1034354] [client 20.197.61.180:9826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/post.php"] [unique_id "apK9my04twRPFuquKD2jxAAAAOw"]
[Sat Aug 29 05:08:11.704130 2026] [security2:error] [pid 1034096:tid 1034265] [client 40.83.93.50:9888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/dxc.php"] [unique_id "apK9my04twRPFuquKD2jxQAAAJM"]
[Sat Aug 29 05:08:11.731628 2026] [security2:error] [pid 1028675:tid 1028833] [client 45.148.10.62:55780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.worldofboardcraft.com"] [uri "/config.php.bak"] [unique_id "apK9m9dHPfW2QFvhmL4CVgAAABc"]
[Sat Aug 29 05:08:11.737290 2026] [security2:error] [pid 1034096:tid 1034323] [client 20.203.141.11:18228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/theme.php"] [unique_id "apK9my04twRPFuquKD2jxgAAAM0"]
[Sat Aug 29 05:08:11.737484 2026] [security2:error] [pid 1034096:tid 1034279] [client 20.48.250.41:19474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/knmt.php"] [unique_id "apK9my04twRPFuquKD2jxwAAAKE"]
[Sat Aug 29 05:08:11.742262 2026] [security2:error] [pid 1028675:tid 1028909] [client 158.23.147.79:32752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wzy.php"] [unique_id "apK9m9dHPfW2QFvhmL4CVwAAAGM"]
[Sat Aug 29 05:08:11.744988 2026] [security2:error] [pid 1028675:tid 1028819] [client 171.61.160.196:23916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.160.61.171.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK9m9dHPfW2QFvhmL4CWAAAAAk"]
[Sat Aug 29 05:08:11.745067 2026] [security2:error] [pid 1028675:tid 1028819] [client 171.61.160.196:23916] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK9m9dHPfW2QFvhmL4CWAAAAAk"]
[Sat Aug 29 05:08:11.752729 2026] [security2:error] [pid 1034096:tid 1034269] [client 20.63.81.20:55438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/zfqipfss.php"] [unique_id "apK9my04twRPFuquKD2jyAAAAJc"]
[Sat Aug 29 05:08:11.765791 2026] [security2:error] [pid 1028675:tid 1028894] [client 213.209.159.223:58595] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/server/.env"] [unique_id "apK9m9dHPfW2QFvhmL4CWQAAAFQ"]
[Sat Aug 29 05:08:11.771382 2026] [security2:error] [pid 1028675:tid 1028886] [client 158.23.147.79:53150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK9m9dHPfW2QFvhmL4CWgAAAEw"]
[Sat Aug 29 05:08:11.778544 2026] [security2:error] [pid 1034096:tid 1034335] [client 20.52.41.200:5349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/t.php"] [unique_id "apK9my04twRPFuquKD2jzAAAANk"]
[Sat Aug 29 05:08:11.805907 2026] [security2:error] [pid 1034096:tid 1034365] [client 146.70.36.124:51288] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.mcrl.tech"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "apK9my04twRPFuquKD2jzgAAAPc"]
[Sat Aug 29 05:08:11.825906 2026] [security2:error] [pid 1034096:tid 1034300] [client 68.155.159.216:30628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/hehehehe.php"] [unique_id "apK9my04twRPFuquKD2j0AAAALY"]
[Sat Aug 29 05:08:11.826904 2026] [security2:error] [pid 1034096:tid 1034321] [client 68.155.159.216:65104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/login.php"] [unique_id "apK9my04twRPFuquKD2j0QAAAMs"]
[Sat Aug 29 05:08:11.838252 2026] [security2:error] [pid 1028675:tid 1028887] [client 20.240.128.207:22124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/x.php"] [unique_id "apK9m9dHPfW2QFvhmL4CYQAAAE0"]
[Sat Aug 29 05:08:11.848805 2026] [security2:error] [pid 1028675:tid 1028839] [client 20.104.104.62:22759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sellmylike.millionairebuildersclub.com"] [uri "/about.php"] [unique_id "apK9m9dHPfW2QFvhmL4CZQAAAB0"]
[Sat Aug 29 05:08:11.857770 2026] [security2:error] [pid 1028675:tid 1028923] [client 40.83.93.50:8505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/headerg.php"] [unique_id "apK9m9dHPfW2QFvhmL4CZgAAAHE"]
[Sat Aug 29 05:08:11.878202 2026] [security2:error] [pid 1034096:tid 1034252] [client 20.63.219.114:15451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/wp-configs.php"] [unique_id "apK9my04twRPFuquKD2j2AAAAIY"]
[Sat Aug 29 05:08:11.880166 2026] [security2:error] [pid 1034096:tid 1034308] [client 20.63.81.20:55241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.luluchild.com"] [uri "/zrjuyoos.php"] [unique_id "apK9my04twRPFuquKD2j2QAAAL4"]
[Sat Aug 29 05:08:11.887373 2026] [security2:error] [pid 1028675:tid 1028904] [client 213.209.159.223:33329] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/system/.env"] [unique_id "apK9m9dHPfW2QFvhmL4CaQAAAF4"]
[Sat Aug 29 05:08:11.891011 2026] [security2:error] [pid 1028675:tid 1028866] [client 52.139.37.240:36707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/paku.php"] [unique_id "apK9m9dHPfW2QFvhmL4CagAAADg"]
[Sat Aug 29 05:08:11.899137 2026] [security2:error] [pid 1028675:tid 1028926] [client 20.48.250.41:19507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/sbhu.php"] [unique_id "apK9m9dHPfW2QFvhmL4CawAAAHQ"]
[Sat Aug 29 05:08:11.901692 2026] [security2:error] [pid 1028675:tid 1028937] [client 195.178.110.247:16970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.litwornia.com"] [uri "/index.php"] [unique_id "apK9m9dHPfW2QFvhmL4CbAAAAH8"]
[Sat Aug 29 05:08:11.936734 2026] [security2:error] [pid 1028675:tid 1028840] [client 158.23.147.79:26600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK9m9dHPfW2QFvhmL4CbwAAAB4"]
[Sat Aug 29 05:08:11.943437 2026] [security2:error] [pid 1034096:tid 1034327] [client 68.155.159.216:24429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK9my04twRPFuquKD2j2gAAANE"]
[Sat Aug 29 05:08:11.952576 2026] [security2:error] [pid 1034096:tid 1034358] [client 213.209.159.223:47284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/php-info.php"] [unique_id "apK9my04twRPFuquKD2j2wAAAPA"]
[Sat Aug 29 05:08:11.959588 2026] [security2:error] [pid 1034096:tid 1034284] [client 20.100.175.163:18049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "apK9my04twRPFuquKD2j3AAAAKY"]
[Sat Aug 29 05:08:11.970471 2026] [security2:error] [pid 1028675:tid 1028883] [client 68.155.159.216:64482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/dropdown.php"] [unique_id "apK9m9dHPfW2QFvhmL4CcgAAAEk"]
[Sat Aug 29 05:08:11.975822 2026] [security2:error] [pid 1034096:tid 1034285] [client 20.104.49.130:63601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/bdroot.php"] [unique_id "apK9my04twRPFuquKD2j3QAAAKc"]
[Sat Aug 29 05:08:11.986341 2026] [security2:error] [pid 1028675:tid 1028876] [client 35.194.208.44:52176] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/.anthropic/config.json"] [unique_id "apK9m9dHPfW2QFvhmL4CdgAAAEI"]
[Sat Aug 29 05:08:11.990760 2026] [security2:error] [pid 1028675:tid 1028880] [client 213.209.159.223:43143] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/wp-content/mysql.sql"] [unique_id "apK9m9dHPfW2QFvhmL4CewAAAEY"]
[Sat Aug 29 05:08:11.994423 2026] [security2:error] [pid 1034096:tid 1034297] [client 35.194.208.44:52244] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/.openclaw/.env"] [unique_id "apK9my04twRPFuquKD2j4gAAALM"]
[Sat Aug 29 05:08:11.996148 2026] [security2:error] [pid 1034096:tid 1034286] [client 35.194.208.44:52210] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/.hermes/config.yaml"] [unique_id "apK9my04twRPFuquKD2j6AAAAKg"]
[Sat Aug 29 05:08:12.000618 2026] [security2:error] [pid 1028675:tid 1028857] [client 35.194.208.44:52200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/.hermes/.env"] [unique_id "apK9m9dHPfW2QFvhmL4CgQAAAC8"]
[Sat Aug 29 05:08:12.001458 2026] [security2:error] [pid 1028675:tid 1028857] [client 35.194.208.44:52200] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/.hermes/.env"] [unique_id "apK9m9dHPfW2QFvhmL4CgQAAAC8"]
[Sat Aug 29 05:08:12.008116 2026] [security2:error] [pid 1028675:tid 1028856] [client 158.23.147.79:50013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK9nNdHPfW2QFvhmL4CiAAAAC4"]
[Sat Aug 29 05:08:12.024061 2026] [security2:error] [pid 1028675:tid 1028858] [client 213.209.159.223:33329] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/wp-config.php.backup"] [unique_id "apK9nNdHPfW2QFvhmL4CkAAAADA"]
[Sat Aug 29 05:08:12.025192 2026] [security2:error] [pid 1034096:tid 1034350] [client 4.205.62.107:58488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/btx25.php"] [unique_id "apK9nC04twRPFuquKD2j_AAAAOg"]
[Sat Aug 29 05:08:12.029726 2026] [security2:error] [pid 1034096:tid 1034269] [client 20.48.250.41:19539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/a332.php"] [unique_id "apK9nC04twRPFuquKD2kAQAAAJc"]
[Sat Aug 29 05:08:12.067186 2026] [security2:error] [pid 1028675:tid 1028896] [client 195.178.110.247:33670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.litwornia.com"] [uri "/index.php"] [unique_id "apK9nNdHPfW2QFvhmL4CkQAAAFY"]
[Sat Aug 29 05:08:12.073073 2026] [security2:error] [pid 1034096:tid 1034271] [client 20.104.104.62:22757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sellmylike.millionairebuildersclub.com"] [uri "/vx.php"] [unique_id "apK9nC04twRPFuquKD2kBQAAAJk"]
[Sat Aug 29 05:08:12.081075 2026] [security2:error] [pid 1034096:tid 1034281] [client 20.196.209.81:17332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-conflg.php"] [unique_id "apK9nC04twRPFuquKD2kBgAAAKM"]
[Sat Aug 29 05:08:12.101221 2026] [security2:error] [pid 1034096:tid 1034255] [client 20.203.141.11:17922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-includes/index.php"] [unique_id "apK9nC04twRPFuquKD2kCQAAAIk"]
[Sat Aug 29 05:08:12.107245 2026] [security2:error] [pid 1034096:tid 1034264] [client 146.70.36.124:51290] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.mcrl.tech"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "apK9nC04twRPFuquKD2kCgAAAJI"]
[Sat Aug 29 05:08:12.108626 2026] [security2:error] [pid 1034096:tid 1034372] [client 52.139.37.240:36710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/rtx.php"] [unique_id "apK9nC04twRPFuquKD2kCwAAAP4"]
[Sat Aug 29 05:08:12.115791 2026] [security2:error] [pid 1034096:tid 1034299] [client 68.155.159.216:6016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK9nC04twRPFuquKD2kDQAAALU"]
[Sat Aug 29 05:08:12.116819 2026] [security2:error] [pid 1034096:tid 1034332] [client 127.0.0.1:14140] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK9my04twRPFuquKD2j5QAAANY"]
[Sat Aug 29 05:08:12.116895 2026] [security2:error] [pid 1028675:tid 1028920] [client 35.194.208.44:52134] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/actuator/configprops"] [unique_id "apK9m9dHPfW2QFvhmL4CdAAAAG4"]
[Sat Aug 29 05:08:12.139176 2026] [security2:error] [pid 1028675:tid 1028825] [client 213.209.159.223:51021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.greatdecisionsofcharlevoix.com"] [uri "/php-info.php"] [unique_id "apK9nNdHPfW2QFvhmL4CkwAAAA8"]
[Sat Aug 29 05:08:12.149743 2026] [security2:error] [pid 1034096:tid 1034153] [remote 116.179.32.175:5182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 175.32.179.116.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/index.php"] [unique_id "apK9nC04twRPFuquKD2kDAAA5x8"]
[Sat Aug 29 05:08:12.161380 2026] [security2:error] [pid 1034096:tid 1034362] [client 87.219.197.128:65502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK9nC04twRPFuquKD2kDgAAAPQ"]
[Sat Aug 29 05:08:12.161503 2026] [security2:error] [pid 1034096:tid 1034362] [client 87.219.197.128:65502] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK9nC04twRPFuquKD2kDgAAAPQ"]
[Sat Aug 29 05:08:12.164523 2026] [security2:error] [pid 1028675:tid 1028887] [client 20.48.250.41:19488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/ws66.php"] [unique_id "apK9nNdHPfW2QFvhmL4ClAAAAE0"]
[Sat Aug 29 05:08:12.165091 2026] [security2:error] [pid 1034096:tid 1034263] [client 158.23.147.79:17564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/file88.php"] [unique_id "apK9nC04twRPFuquKD2kDwAAAJE"]
[Sat Aug 29 05:08:12.172165 2026] [security2:error] [pid 1034096:tid 1034252] [client 68.155.159.216:2038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK9nC04twRPFuquKD2kEAAAAIY"]
[Sat Aug 29 05:08:12.174239 2026] [security2:error] [pid 1034096:tid 1034346] [client 4.205.62.107:9009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/vx.php"] [unique_id "apK9nC04twRPFuquKD2kEQAAAOQ"]
[Sat Aug 29 05:08:12.181128 2026] [security2:error] [pid 1034096:tid 1034310] [client 4.205.62.107:22501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/autogooey.php"] [unique_id "apK9nC04twRPFuquKD2kEgAAAMA"]
[Sat Aug 29 05:08:12.188795 2026] [security2:error] [pid 1034096:tid 1034324] [client 40.83.93.50:9207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/wp-2019.php"] [unique_id "apK9nC04twRPFuquKD2kFAAAAM4"]
[Sat Aug 29 05:08:12.232156 2026] [security2:error] [pid 1034096:tid 1034339] [client 20.52.41.200:5253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/i.php"] [unique_id "apK9nC04twRPFuquKD2kFwAAAN0"]
[Sat Aug 29 05:08:12.236802 2026] [security2:error] [pid 1034096:tid 1034284] [client 20.48.250.41:38800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/shlo.php"] [unique_id "apK9nC04twRPFuquKD2kGAAAAKY"]
[Sat Aug 29 05:08:12.247263 2026] [security2:error] [pid 1028675:tid 1028820] [client 20.63.219.114:1345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/essexec.php"] [unique_id "apK9nNdHPfW2QFvhmL4ClgAAAAo"]
[Sat Aug 29 05:08:12.252364 2026] [security2:error] [pid 1028675:tid 1028908] [client 20.203.141.11:38360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/classwithtostring.php"] [unique_id "apK9nNdHPfW2QFvhmL4ClwAAAGI"]
[Sat Aug 29 05:08:12.271721 2026] [security2:error] [pid 1034096:tid 1034315] [client 20.104.104.62:22749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sellmylike.millionairebuildersclub.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK9nC04twRPFuquKD2kGQAAAMU"]
[Sat Aug 29 05:08:12.279230 2026] [security2:error] [pid 1028675:tid 1028866] [client 213.209.159.223:43143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/php-info.php"] [unique_id "apK9nNdHPfW2QFvhmL4CmAAAADg"]
[Sat Aug 29 05:08:12.297776 2026] [security2:error] [pid 1028675:tid 1028937] [client 158.23.147.79:35723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/.well-knownold/index.php"] [unique_id "apK9nNdHPfW2QFvhmL4CmQAAAH8"]
[Sat Aug 29 05:08:12.306851 2026] [security2:error] [pid 1034096:tid 1034274] [client 52.139.37.240:36709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/update/da222.php"] [unique_id "apK9nC04twRPFuquKD2kGwAAAJw"]
[Sat Aug 29 05:08:12.322945 2026] [security2:error] [pid 1034096:tid 1034276] [client 20.48.250.41:19555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/ws68.php"] [unique_id "apK9nC04twRPFuquKD2kHAAAAJ4"]
[Sat Aug 29 05:08:12.335501 2026] [security2:error] [pid 1028675:tid 1028816] [client 20.240.128.207:22120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/new.php"] [unique_id "apK9nNdHPfW2QFvhmL4CmgAAAAY"]
[Sat Aug 29 05:08:12.342349 2026] [security2:error] [pid 1034096:tid 1034376] [client 68.155.159.216:51451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK9nC04twRPFuquKD2kHQAAAQI"]
[Sat Aug 29 05:08:12.347596 2026] [security2:error] [pid 1034096:tid 1034342] [client 68.155.159.216:38682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/content.php"] [unique_id "apK9nC04twRPFuquKD2kHwAAAOA"]
[Sat Aug 29 05:08:12.360951 2026] [security2:error] [pid 1034096:tid 1034372] [client 20.48.250.41:61805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/shlo.php"] [unique_id "apK9nC04twRPFuquKD2kIAAAAP4"]
[Sat Aug 29 05:08:12.360951 2026] [security2:error] [pid 1028675:tid 1028857] [client 4.205.62.107:65454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/apikeys.php"] [unique_id "apK9nNdHPfW2QFvhmL4CmwAAAC8"]
[Sat Aug 29 05:08:12.367160 2026] [security2:error] [pid 1028675:tid 1028873] [client 127.0.0.1:14310] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK9nNdHPfW2QFvhmL4CiwAAAD8"]
[Sat Aug 29 05:08:12.367196 2026] [security2:error] [pid 1034096:tid 1034337] [client 35.194.208.44:52316] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/awsConfig.js"] [unique_id "apK9my04twRPFuquKD2j6gAAANs"]
[Sat Aug 29 05:08:12.373400 2026] [security2:error] [pid 1034096:tid 1034334] [client 4.205.62.107:22458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/wp-admin/sc.php"] [unique_id "apK9nC04twRPFuquKD2kIgAAANg"]
[Sat Aug 29 05:08:12.399138 2026] [security2:error] [pid 1034096:tid 1034368] [client 40.83.93.50:16277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/meta.php"] [unique_id "apK9nC04twRPFuquKD2kJQAAAPo"]
[Sat Aug 29 05:08:12.404015 2026] [security2:error] [pid 1028675:tid 1028930] [client 20.197.61.180:11334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/csv.php"] [unique_id "apK9nNdHPfW2QFvhmL4CngAAAHg"]
[Sat Aug 29 05:08:12.410619 2026] [security2:error] [pid 1034096:tid 1034308] [client 146.70.36.124:51300] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.mcrl.tech"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "apK9nC04twRPFuquKD2kJgAAAL4"]
[Sat Aug 29 05:08:12.471808 2026] [security2:error] [pid 1034096:tid 1034263] [client 20.104.104.62:22744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sellmylike.millionairebuildersclub.com"] [uri "/goods.php"] [unique_id "apK9nC04twRPFuquKD2kKAAAAJE"]
[Sat Aug 29 05:08:12.472592 2026] [security2:error] [pid 1028675:tid 1028925] [client 158.23.147.79:17511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/about.php"] [unique_id "apK9nNdHPfW2QFvhmL4CnwAAAHM"]
[Sat Aug 29 05:08:12.475861 2026] [security2:error] [pid 1034096:tid 1034255] [client 20.196.209.81:17307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-content.php"] [unique_id "apK9nC04twRPFuquKD2kKQAAAIk"]
[Sat Aug 29 05:08:12.483109 2026] [security2:error] [pid 1028675:tid 1028876] [client 4.205.62.107:56060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/admin.php"] [unique_id "apK9nNdHPfW2QFvhmL4CoAAAAEI"]
[Sat Aug 29 05:08:12.487060 2026] [security2:error] [pid 1034096:tid 1034335] [client 20.48.250.41:19535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/users.php"] [unique_id "apK9nC04twRPFuquKD2kKgAAANk"]
[Sat Aug 29 05:08:12.494640 2026] [security2:error] [pid 1028675:tid 1028935] [client 20.48.250.41:61792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/asax.php"] [unique_id "apK9nNdHPfW2QFvhmL4CoQAAAH0"]
[Sat Aug 29 05:08:12.517187 2026] [security2:error] [pid 1034096:tid 1034365] [client 213.209.159.223:25490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/app_dev.php/_profiler/open"] [unique_id "apK9nC04twRPFuquKD2kLgAAAPc"]
[Sat Aug 29 05:08:12.532503 2026] [security2:error] [pid 1028675:tid 1028851] [client 20.100.175.163:11017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/css/wp-login.php"] [unique_id "apK9nNdHPfW2QFvhmL4CpgAAACk"]
[Sat Aug 29 05:08:12.551845 2026] [security2:error] [pid 1034096:tid 1034260] [client 68.155.159.216:64009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9nC04twRPFuquKD2kMAAAAI4"]
[Sat Aug 29 05:08:12.571521 2026] [security2:error] [pid 1034096:tid 1034269] [client 20.48.250.41:38882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/asax.php"] [unique_id "apK9nC04twRPFuquKD2kMQAAAJc"]
[Sat Aug 29 05:08:12.573048 2026] [security2:error] [pid 1028675:tid 1028911] [client 52.139.37.240:36689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/wp-admin/min.php"] [unique_id "apK9nNdHPfW2QFvhmL4CpwAAAGU"]
[Sat Aug 29 05:08:12.581313 2026] [security2:error] [pid 1034096:tid 1034252] [client 20.203.141.11:35233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-admin/a.php"] [unique_id "apK9nC04twRPFuquKD2kMwAAAIY"]
[Sat Aug 29 05:08:12.602282 2026] [security2:error] [pid 1034096:tid 1034271] [client 68.155.159.216:33772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK9nC04twRPFuquKD2kNAAAAJk"]
[Sat Aug 29 05:08:12.622729 2026] [security2:error] [pid 1034096:tid 1034363] [client 68.155.159.216:33644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/mah.php"] [unique_id "apK9nC04twRPFuquKD2kNgAAAPU"]
[Sat Aug 29 05:08:12.625760 2026] [security2:error] [pid 1034096:tid 1034276] [client 20.48.250.41:19468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/bzjdlofz.php"] [unique_id "apK9nC04twRPFuquKD2kNwAAAJ4"]
[Sat Aug 29 05:08:12.627001 2026] [security2:error] [pid 1028675:tid 1028887] [client 20.63.219.114:15431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/hello.php"] [unique_id "apK9nNdHPfW2QFvhmL4CqAAAAE0"]
[Sat Aug 29 05:08:12.649176 2026] [security2:error] [pid 1034096:tid 1034375] [client 213.209.159.223:17157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/info.php.bak"] [unique_id "apK9nC04twRPFuquKD2kOgAAAQE"]
[Sat Aug 29 05:08:12.651922 2026] [security2:error] [pid 1034096:tid 1034376] [client 68.155.159.216:9236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/index/function.php"] [unique_id "apK9nC04twRPFuquKD2kOwAAAQI"]
[Sat Aug 29 05:08:12.666293 2026] [security2:error] [pid 1034096:tid 1034377] [client 20.104.49.130:53666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/x1da.php"] [unique_id "apK9nC04twRPFuquKD2kPAAAAQM"]
[Sat Aug 29 05:08:12.667088 2026] [security2:error] [pid 1034096:tid 1034377] [client 20.48.250.41:61705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/fetch.php"] [unique_id "apK9nC04twRPFuquKD2kPQAAAQM"]
[Sat Aug 29 05:08:12.670494 2026] [security2:error] [pid 1028675:tid 1028916] [client 20.104.104.62:22756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sellmylike.millionairebuildersclub.com"] [uri "/wp-access.php"] [unique_id "apK9nNdHPfW2QFvhmL4CqQAAAGo"]
[Sat Aug 29 05:08:12.679904 2026] [security2:error] [pid 1028675:tid 1028929] [client 20.52.41.200:5348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/deepseek_d.php"] [unique_id "apK9nNdHPfW2QFvhmL4CqwAAAHc"]
[Sat Aug 29 05:08:12.684820 2026] [security2:error] [pid 1028675:tid 1028881] [client 68.155.159.216:18355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/index/function.php"] [unique_id "apK9nNdHPfW2QFvhmL4CrAAAAEc"]
[Sat Aug 29 05:08:12.703712 2026] [security2:error] [pid 1034096:tid 1034368] [client 45.148.10.62:55784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.worldofboardcraft.com"] [uri "/phpinfo.php"] [unique_id "apK9nC04twRPFuquKD2kQAAAAPo"]
[Sat Aug 29 05:08:12.706513 2026] [security2:error] [pid 1028675:tid 1028907] [client 146.70.36.124:51314] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.mcrl.tech"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "apK9nNdHPfW2QFvhmL4CrgAAAGE"]
[Sat Aug 29 05:08:12.754148 2026] [security2:error] [pid 1028675:tid 1028880] [client 158.23.147.79:6098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/makeasmtp.php"] [unique_id "apK9nNdHPfW2QFvhmL4CsQAAAEY"]
[Sat Aug 29 05:08:12.760203 2026] [security2:error] [pid 1034096:tid 1034265] [client 20.48.250.41:19473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/selesai.php"] [unique_id "apK9nC04twRPFuquKD2kQwAAAJM"]
[Sat Aug 29 05:08:12.767409 2026] [security2:error] [pid 1034096:tid 1034344] [client 20.203.141.11:27275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/news.php"] [unique_id "apK9nC04twRPFuquKD2kRAAAAOI"]
[Sat Aug 29 05:08:12.771501 2026] [security2:error] [pid 1028675:tid 1028937] [client 52.139.37.240:36814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/wp-admin/wp-fileesx-449.php"] [unique_id "apK9nNdHPfW2QFvhmL4CsgAAAH8"]
[Sat Aug 29 05:08:12.791149 2026] [security2:error] [pid 1034096:tid 1034263] [client 158.23.147.79:6037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK9nC04twRPFuquKD2kRQAAAJE"]
[Sat Aug 29 05:08:12.808874 2026] [security2:error] [pid 1028675:tid 1028861] [client 40.83.93.50:9172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/menu.php"] [unique_id "apK9nNdHPfW2QFvhmL4CtQAAADM"]
[Sat Aug 29 05:08:12.811068 2026] [security2:error] [pid 1034096:tid 1034314] [client 158.23.147.79:11295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/radio.php"] [unique_id "apK9nC04twRPFuquKD2kRgAAAMQ"]
[Sat Aug 29 05:08:12.830299 2026] [security2:error] [pid 1028675:tid 1028821] [client 68.155.159.216:16325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK9nNdHPfW2QFvhmL4CtgAAAAs"]
[Sat Aug 29 05:08:12.832031 2026] [security2:error] [pid 1034096:tid 1034334] [client 20.240.128.207:7364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/menu.php"] [unique_id "apK9nC04twRPFuquKD2kRwAAANg"]
[Sat Aug 29 05:08:12.840533 2026] [security2:error] [pid 1028675:tid 1028840] [client 68.155.159.216:14225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK9nNdHPfW2QFvhmL4CtwAAAB4"]
[Sat Aug 29 05:08:12.842596 2026] [security2:error] [pid 1028675:tid 1028886] [client 158.23.147.79:32586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK9nNdHPfW2QFvhmL4CuAAAAEw"]
[Sat Aug 29 05:08:12.850278 2026] [security2:error] [pid 1028675:tid 1028930] [client 20.48.250.41:61809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/vx.php"] [unique_id "apK9nNdHPfW2QFvhmL4CugAAAHg"]
[Sat Aug 29 05:08:12.850942 2026] [security2:error] [pid 1028675:tid 1028812] [client 213.209.159.223:40234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/source/.env"] [unique_id "apK9nNdHPfW2QFvhmL4CuQAAAAI"]
[Sat Aug 29 05:08:12.851601 2026] [security2:error] [pid 1034096:tid 1034357] [client 213.209.159.223:59585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.greatdecisionsofcharlevoix.com"] [uri "/info.php.bak"] [unique_id "apK9nC04twRPFuquKD2kSQAAAO8"]
[Sat Aug 29 05:08:12.867605 2026] [security2:error] [pid 1028675:tid 1028857] [client 20.104.104.62:28842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sellmylike.millionairebuildersclub.com"] [uri "/autoload_classmap/function.php"] [unique_id "apK9nNdHPfW2QFvhmL4CuwAAAC8"]
[Sat Aug 29 05:08:12.884560 2026] [security2:error] [pid 1034096:tid 1034294] [client 20.104.104.62:65242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/waw.php"] [unique_id "apK9nC04twRPFuquKD2kSwAAALA"]
[Sat Aug 29 05:08:12.886852 2026] [security2:error] [pid 1028675:tid 1028932] [client 40.83.93.50:11093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/dxc.php"] [unique_id "apK9nNdHPfW2QFvhmL4CvQAAAHo"]
[Sat Aug 29 05:08:12.898707 2026] [security2:error] [pid 1034096:tid 1034339] [client 213.209.159.223:43983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/app_dev.php/_profiler/open"] [unique_id "apK9nC04twRPFuquKD2kTAAAAN0"]
[Sat Aug 29 05:08:12.908800 2026] [security2:error] [pid 1028675:tid 1028814] [client 20.48.250.41:38904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/fetch.php"] [unique_id "apK9nNdHPfW2QFvhmL4CvwAAAAQ"]
[Sat Aug 29 05:08:12.912166 2026] [security2:error] [pid 1028675:tid 1028833] [client 20.48.250.41:19547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/shlo.php"] [unique_id "apK9nNdHPfW2QFvhmL4CwAAAABc"]
[Sat Aug 29 05:08:12.937769 2026] [security2:error] [pid 1028675:tid 1028824] [client 68.155.159.216:64474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/hehehehe.php"] [unique_id "apK9nNdHPfW2QFvhmL4CwwAAAA4"]
[Sat Aug 29 05:08:12.938895 2026] [security2:error] [pid 1028675:tid 1028844] [client 213.209.159.223:4081] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_whm/wp-content/mysql.sql"] [unique_id "apK9nNdHPfW2QFvhmL4CwgAAACI"]
[Sat Aug 29 05:08:12.952144 2026] [security2:error] [pid 1028675:tid 1028884] [client 68.155.159.216:30674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK9nNdHPfW2QFvhmL4CxAAAAEo"]
[Sat Aug 29 05:08:12.967581 2026] [security2:error] [pid 1034096:tid 1034319] [client 52.139.37.240:36688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/wp-content/themes/min.php"] [unique_id "apK9nC04twRPFuquKD2kTwAAAMk"]
[Sat Aug 29 05:08:12.975031 2026] [security2:error] [pid 1034096:tid 1034295] [client 197.219.150.206:64939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK9nC04twRPFuquKD2kUAAAALE"]
[Sat Aug 29 05:08:12.975177 2026] [security2:error] [pid 1034096:tid 1034295] [client 197.219.150.206:64939] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK9nC04twRPFuquKD2kUAAAALE"]
[Sat Aug 29 05:08:12.976114 2026] [security2:error] [pid 1034096:tid 1034278] [client 213.209.159.223:34883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/info.php.bak"] [unique_id "apK9nC04twRPFuquKD2kUQAAAKA"]
[Sat Aug 29 05:08:13.003762 2026] [security2:error] [pid 1034096:tid 1034355] [client 20.48.250.41:58593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/global.php"] [unique_id "apK9nS04twRPFuquKD2kVAAAAO0"]
[Sat Aug 29 05:08:13.011222 2026] [security2:error] [pid 1028675:tid 1028928] [client 20.196.209.81:9086] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-content/1.php"] [unique_id "apK9nddHPfW2QFvhmL4CxgAAAHY"]
[Sat Aug 29 05:08:13.011602 2026] [security2:error] [pid 1028675:tid 1028928] [client 20.196.209.81:9086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-content/1.php"] [unique_id "apK9nddHPfW2QFvhmL4CxgAAAHY"]
[Sat Aug 29 05:08:13.020095 2026] [security2:error] [pid 1034096:tid 1034254] [client 20.63.219.114:15442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/fi2.php"] [unique_id "apK9nS04twRPFuquKD2kVQAAAIg"]
[Sat Aug 29 05:08:13.038103 2026] [security2:error] [pid 1034096:tid 1034291] [client 20.100.175.163:1171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/images/index.php"] [unique_id "apK9nS04twRPFuquKD2kVgAAAK0"]
[Sat Aug 29 05:08:13.045951 2026] [security2:error] [pid 1034096:tid 1034271] [client 158.23.147.79:26402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-admin/network/index.php"] [unique_id "apK9nS04twRPFuquKD2kVwAAAJk"]
[Sat Aug 29 05:08:13.047483 2026] [security2:error] [pid 1028675:tid 1028877] [client 68.155.159.216:24394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-includes/content.php"] [unique_id "apK9nddHPfW2QFvhmL4CyAAAAEM"]
[Sat Aug 29 05:08:13.060936 2026] [security2:error] [pid 1028675:tid 1028929] [client 20.48.250.41:38789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/vx.php"] [unique_id "apK9nddHPfW2QFvhmL4CyQAAAHc"]
[Sat Aug 29 05:08:13.067427 2026] [security2:error] [pid 1034096:tid 1034316] [client 20.104.104.62:29189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sellmylike.millionairebuildersclub.com"] [uri "/ms.php"] [unique_id "apK9nS04twRPFuquKD2kWgAAAMY"]
[Sat Aug 29 05:08:13.081622 2026] [security2:error] [pid 1028675:tid 1028848] [client 20.48.250.41:19500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/asax.php"] [unique_id "apK9nddHPfW2QFvhmL4CywAAACY"]
[Sat Aug 29 05:08:13.084755 2026] [security2:error] [pid 1028675:tid 1028832] [client 213.209.159.223:29485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/phpinfo.php.bak"] [unique_id "apK9nddHPfW2QFvhmL4CzAAAABY"]
[Sat Aug 29 05:08:13.086622 2026] [security2:error] [pid 1034096:tid 1034271] [client 68.155.159.216:65092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/sad/about.php"] [unique_id "apK9nS04twRPFuquKD2kWwAAAJk"]
[Sat Aug 29 05:08:13.142852 2026] [security2:error] [pid 1034096:tid 1034358] [client 20.197.61.180:12126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/fox.php"] [unique_id "apK9nS04twRPFuquKD2kXgAAAPA"]
[Sat Aug 29 05:08:13.153844 2026] [security2:error] [pid 1034096:tid 1034311] [client 20.48.250.41:61813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/fs.php"] [unique_id "apK9nS04twRPFuquKD2kXwAAAME"]
[Sat Aug 29 05:08:13.159267 2026] [security2:error] [pid 1034096:tid 1034274] [client 4.205.62.107:51494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/guk.php"] [unique_id "apK9nS04twRPFuquKD2kYAAAAJw"]
[Sat Aug 29 05:08:13.169030 2026] [security2:error] [pid 1028675:tid 1028904] [client 52.139.37.240:36808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/wp-content/themes/x/bypass.php"] [unique_id "apK9nddHPfW2QFvhmL4C0gAAAF4"]
[Sat Aug 29 05:08:13.169177 2026] [security2:error] [pid 1028675:tid 1028862] [client 213.209.159.223:46119] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/staging/.env"] [unique_id "apK9nddHPfW2QFvhmL4C0QAAADQ"]
[Sat Aug 29 05:08:13.215226 2026] [security2:error] [pid 1034096:tid 1034284] [client 68.155.159.216:6133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/goat.php"] [unique_id "apK9nS04twRPFuquKD2kZQAAAKY"]
[Sat Aug 29 05:08:13.231926 2026] [security2:error] [pid 1028675:tid 1028861] [client 213.209.159.223:40234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/framework/.env"] [unique_id "apK9nddHPfW2QFvhmL4C1AAAADM"]
[Sat Aug 29 05:08:13.231981 2026] [security2:error] [pid 1028675:tid 1028856] [client 213.209.159.223:4081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/php-info.php"] [unique_id "apK9nddHPfW2QFvhmL4C1QAAAC4"]
[Sat Aug 29 05:08:13.232603 2026] [security2:error] [pid 1028675:tid 1028909] [client 20.48.250.41:19486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/fetch.php"] [unique_id "apK9nddHPfW2QFvhmL4C1gAAAGM"]
[Sat Aug 29 05:08:13.233270 2026] [security2:error] [pid 1028675:tid 1028858] [client 20.203.141.11:27711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/about/function.php"] [unique_id "apK9nddHPfW2QFvhmL4C1wAAADA"]
[Sat Aug 29 05:08:13.260640 2026] [security2:error] [pid 1034096:tid 1034308] [client 20.48.250.41:38909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/global.php"] [unique_id "apK9nS04twRPFuquKD2kZwAAAL4"]
[Sat Aug 29 05:08:13.261090 2026] [security2:error] [pid 1028675:tid 1028821] [client 20.104.104.62:65223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/x23.php"] [unique_id "apK9nddHPfW2QFvhmL4C2QAAAAs"]
[Sat Aug 29 05:08:13.263075 2026] [security2:error] [pid 1028675:tid 1028907] [client 213.209.159.223:9991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.greatdecisionsofcharlevoix.com"] [uri "/phpinfo.php.bak"] [unique_id "apK9nddHPfW2QFvhmL4C2wAAAGE"]
[Sat Aug 29 05:08:13.278249 2026] [security2:error] [pid 1028675:tid 1028894] [client 68.155.159.216:2042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-content/radio.php"] [unique_id "apK9nddHPfW2QFvhmL4C3AAAAFQ"]
[Sat Aug 29 05:08:13.289568 2026] [security2:error] [pid 1028675:tid 1028747] [remote 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK9nddHPfW2QFvhmL4C3QAAOEI"]
[Sat Aug 29 05:08:13.289740 2026] [security2:error] [pid 1028675:tid 1028866] [client 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK9nddHPfW2QFvhmL4C3QAAOEI"]
[Sat Aug 29 05:08:13.295118 2026] [security2:error] [pid 1034096:tid 1034280] [client 20.52.41.200:4607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "apK9nS04twRPFuquKD2kaAAAAKI"]
[Sat Aug 29 05:08:13.298053 2026] [security2:error] [pid 1034096:tid 1034275] [client 20.48.250.41:61783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/ioxi.php"] [unique_id "apK9nS04twRPFuquKD2kaQAAAJ0"]
[Sat Aug 29 05:08:13.299613 2026] [security2:error] [pid 1034096:tid 1034337] [client 40.83.93.50:8436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/alfa.php"] [unique_id "apK9nS04twRPFuquKD2kagAAANs"]
[Sat Aug 29 05:08:13.302989 2026] [security2:error] [pid 1028675:tid 1028859] [client 213.209.159.223:10979] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/wp-content/mysql.sql"] [unique_id "apK9nddHPfW2QFvhmL4C3gAAADE"]
[Sat Aug 29 05:08:13.329039 2026] [security2:error] [pid 1034096:tid 1034324] [client 158.23.147.79:17487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/NewFile.php/"] [unique_id "apK9nS04twRPFuquKD2kbAAAAM4"]
[Sat Aug 29 05:08:13.329979 2026] [security2:error] [pid 1034096:tid 1034377] [client 20.240.128.207:22092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK9nS04twRPFuquKD2kbQAAAQM"]
[Sat Aug 29 05:08:13.335891 2026] [security2:error] [pid 1028675:tid 1028857] [client 20.48.250.41:49488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/35.php"] [unique_id "apK9nddHPfW2QFvhmL4C4AAAAC8"]
[Sat Aug 29 05:08:13.342768 2026] [security2:error] [pid 1028675:tid 1028872] [client 20.104.104.62:22750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sellmylike.millionairebuildersclub.com"] [uri "/adminfuns.php"] [unique_id "apK9nddHPfW2QFvhmL4C4QAAAD4"]
[Sat Aug 29 05:08:13.352439 2026] [security2:error] [pid 1034096:tid 1034335] [client 4.205.62.107:22028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/sdsa.php"] [unique_id "apK9nS04twRPFuquKD2kbgAAANk"]
[Sat Aug 29 05:08:13.366392 2026] [proxy_http:error] [pid 1018003:tid 1018237] (70007)The timeout specified has expired: [client 127.0.0.1:11138] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:08:13.366411 2026] [proxy:error] [pid 1018003:tid 1018237] [client 127.0.0.1:11138] AH00898: Error reading from remote server returned by /shop-cart/
[Sat Aug 29 05:08:13.366570 2026] [security2:error] [pid 1034096:tid 1034362] [client 40.83.93.50:9893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/wp-2019.php"] [unique_id "apK9nS04twRPFuquKD2kbwAAAPQ"]
[Sat Aug 29 05:08:13.370218 2026] [security2:error] [pid 1028675:tid 1028901] [client 213.209.159.223:40234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/ikiwiki/.env"] [unique_id "apK9nddHPfW2QFvhmL4C4gAAAFs"]
[Sat Aug 29 05:08:13.373505 2026] [security2:error] [pid 1034096:tid 1034327] [client 20.203.141.11:43336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK9nS04twRPFuquKD2kcAAAANE"]
[Sat Aug 29 05:08:13.377888 2026] [security2:error] [pid 1034096:tid 1034348] [client 20.63.219.114:16677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/1p.php"] [unique_id "apK9nS04twRPFuquKD2kcgAAAOY"]
[Sat Aug 29 05:08:13.381471 2026] [security2:error] [pid 1034096:tid 1034282] [client 213.209.159.223:24693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/phpinfo.php.bak"] [unique_id "apK9nS04twRPFuquKD2kcwAAAKQ"]
[Sat Aug 29 05:08:13.387975 2026] [security2:error] [pid 1028675:tid 1028825] [client 4.205.62.107:8713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/radio.php"] [unique_id "apK9nddHPfW2QFvhmL4C5AAAAA8"]
[Sat Aug 29 05:08:13.389810 2026] [security2:error] [pid 1034096:tid 1034357] [client 20.48.250.41:19510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/vx.php"] [unique_id "apK9nS04twRPFuquKD2kdAAAAO8"]
[Sat Aug 29 05:08:13.399385 2026] [proxy_http:error] [pid 1018003:tid 1018110] (70007)The timeout specified has expired: [remote 57.141.14.67:61602] AH01102: error reading status line from remote server 127.0.0.1:8443
[Sat Aug 29 05:08:13.399406 2026] [proxy:error] [pid 1018003:tid 1018110] [remote 57.141.14.67:61602] AH00898: Error reading from remote server returned by /shop-cart/
[Sat Aug 29 05:08:13.401606 2026] [security2:error] [pid 1034096:tid 1034302] [client 158.23.147.79:35797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK9nS04twRPFuquKD2kdQAAALg"]
[Sat Aug 29 05:08:13.403584 2026] [security2:error] [pid 1028675:tid 1028922] [client 20.196.209.81:9058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-content/about.php"] [unique_id "apK9nddHPfW2QFvhmL4C5wAAAHA"]
[Sat Aug 29 05:08:13.418336 2026] [security2:error] [pid 1034096:tid 1034339] [client 20.48.250.41:38733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/fs.php"] [unique_id "apK9nS04twRPFuquKD2keQAAAN0"]
[Sat Aug 29 05:08:13.432194 2026] [security2:error] [pid 1034096:tid 1034350] [client 158.23.147.79:53803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-includes/index.php"] [unique_id "apK9nS04twRPFuquKD2kewAAAOg"]
[Sat Aug 29 05:08:13.441073 2026] [security2:error] [pid 1034096:tid 1034278] [client 52.139.37.240:36722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK9nS04twRPFuquKD2kfAAAAKA"]
[Sat Aug 29 05:08:13.455127 2026] [security2:error] [pid 1034096:tid 1034359] [client 103.185.242.143:51846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK9nS04twRPFuquKD2kfgAAAPE"]
[Sat Aug 29 05:08:13.455211 2026] [security2:error] [pid 1034096:tid 1034359] [client 103.185.242.143:51846] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK9nS04twRPFuquKD2kfgAAAPE"]
[Sat Aug 29 05:08:13.487344 2026] [security2:error] [pid 1034096:tid 1034306] [client 20.48.250.41:61803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/bootstrap.php"] [unique_id "apK9nS04twRPFuquKD2kgAAAALw"]
[Sat Aug 29 05:08:13.500389 2026] [security2:error] [pid 1034096:tid 1034281] [client 4.205.62.107:26638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/motu.php"] [unique_id "apK9nS04twRPFuquKD2kgQAAAKM"]
[Sat Aug 29 05:08:13.501947 2026] [security2:error] [pid 1034096:tid 1034363] [client 20.48.250.41:65333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/maraz.php"] [unique_id "apK9nS04twRPFuquKD2kggAAAPU"]
[Sat Aug 29 05:08:13.506984 2026] [security2:error] [pid 1028675:tid 1028892] [client 213.209.159.223:40234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/config.inc.php"] [unique_id "apK9nddHPfW2QFvhmL4C7QAAAFI"]
[Sat Aug 29 05:08:13.519170 2026] [security2:error] [pid 1034096:tid 1034283] [client 4.205.62.107:21898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/application.config.php"] [unique_id "apK9nS04twRPFuquKD2kgwAAAKU"]
[Sat Aug 29 05:08:13.526205 2026] [security2:error] [pid 1028675:tid 1028916] [client 20.48.250.41:19487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/global.php"] [unique_id "apK9nddHPfW2QFvhmL4C7gAAAGo"]
[Sat Aug 29 05:08:13.540237 2026] [security2:error] [pid 1034096:tid 1034323] [client 20.104.104.62:22721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sellmylike.millionairebuildersclub.com"] [uri "/wp-content/about.php"] [unique_id "apK9nS04twRPFuquKD2khAAAAM0"]
[Sat Aug 29 05:08:13.552246 2026] [core:error] [pid 1034096:tid 1034334] [client 20.100.175.163:7051] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:13.552260 2026] [core:error] [pid 1034096:tid 1034334] [client 20.100.175.163:7051] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:13.575498 2026] [security2:error] [pid 1028675:tid 1028878] [client 213.209.159.223:10979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/php-info.php"] [unique_id "apK9nddHPfW2QFvhmL4C8gAAAEQ"]
[Sat Aug 29 05:08:13.577096 2026] [security2:error] [pid 1034096:tid 1034372] [client 158.23.147.79:17440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK9nS04twRPFuquKD2kiAAAAP4"]
[Sat Aug 29 05:08:13.635393 2026] [security2:error] [pid 1034096:tid 1034376] [client 52.139.37.240:36806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/wp-info.php"] [unique_id "apK9nS04twRPFuquKD2kjAAAAQI"]
[Sat Aug 29 05:08:13.635436 2026] [security2:error] [pid 1034096:tid 1034272] [client 4.205.62.107:55959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/png.php"] [unique_id "apK9nS04twRPFuquKD2kjQAAAJo"]
[Sat Aug 29 05:08:13.640397 2026] [security2:error] [pid 1028675:tid 1028883] [client 20.48.250.41:38865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/ioxi.php"] [unique_id "apK9nddHPfW2QFvhmL4C9AAAAEk"]
[Sat Aug 29 05:08:13.641581 2026] [security2:error] [pid 1034096:tid 1034346] [client 20.48.250.41:61726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/export.php"] [unique_id "apK9nS04twRPFuquKD2kjgAAAOQ"]
[Sat Aug 29 05:08:13.669227 2026] [security2:error] [pid 1034096:tid 1034275] [client 20.104.49.130:34556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/Jcrop.php"] [unique_id "apK9nS04twRPFuquKD2kkAAAAJ0"]
[Sat Aug 29 05:08:13.681571 2026] [security2:error] [pid 1034096:tid 1034268] [client 20.48.250.41:19588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/fs.php"] [unique_id "apK9nS04twRPFuquKD2kkgAAAJY"]
[Sat Aug 29 05:08:13.737263 2026] [security2:error] [pid 1034096:tid 1034337] [client 20.104.104.62:29222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sellmylike.millionairebuildersclub.com"] [uri "/66.php"] [unique_id "apK9nS04twRPFuquKD2kkwAAANs"]
[Sat Aug 29 05:08:13.737808 2026] [security2:error] [pid 1034096:tid 1034312] [client 68.155.159.216:33688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-content/radio.php"] [unique_id "apK9nS04twRPFuquKD2klAAAAMI"]
[Sat Aug 29 05:08:13.737840 2026] [security2:error] [pid 1028675:tid 1028752] [remote 45.148.10.62:55786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.worldofboardcraft.com"] [uri "/wp-login.php"] [unique_id "apK9nddHPfW2QFvhmL4C9gAAf0c"]
[Sat Aug 29 05:08:13.745764 2026] [security2:error] [pid 1034096:tid 1034327] [client 68.155.159.216:33690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-blog-header.php"] [unique_id "apK9nS04twRPFuquKD2klQAAANE"]
[Sat Aug 29 05:08:13.770414 2026] [security2:error] [pid 1028675:tid 1028909] [client 213.209.159.223:24773] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/env/.env"] [unique_id "apK9nddHPfW2QFvhmL4C-AAAAGM"]
[Sat Aug 29 05:08:13.774901 2026] [security2:error] [pid 1034096:tid 1034308] [client 20.63.219.114:8854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/Njima.php"] [unique_id "apK9nS04twRPFuquKD2klwAAAL4"]
[Sat Aug 29 05:08:13.776242 2026] [security2:error] [pid 1028675:tid 1028907] [client 20.104.104.62:20673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/cyto.php"] [unique_id "apK9nddHPfW2QFvhmL4C-wAAAGE"]
[Sat Aug 29 05:08:13.795090 2026] [security2:error] [pid 1034096:tid 1034332] [client 20.196.209.81:9037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-content/admin-header.php"] [unique_id "apK9nS04twRPFuquKD2kmQAAANY"]
[Sat Aug 29 05:08:13.799515 2026] [security2:error] [pid 1034096:tid 1034367] [client 40.83.93.50:8461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/feed-rss2-queue.php"] [unique_id "apK9nS04twRPFuquKD2knAAAAPk"]
[Sat Aug 29 05:08:13.803781 2026] [security2:error] [pid 1028675:tid 1028894] [client 68.155.159.216:49265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/.well-known/content.php"] [unique_id "apK9nddHPfW2QFvhmL4DAAAAAFQ"]
[Sat Aug 29 05:08:13.810412 2026] [security2:error] [pid 1034096:tid 1034339] [client 20.48.250.41:38902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/bootstrap.php"] [unique_id "apK9nS04twRPFuquKD2knQAAAN0"]
[Sat Aug 29 05:08:13.811169 2026] [authz_core:error] [pid 1034096:tid 1034354] [client 20.203.141.11:17431] AH01630: client denied by server configuration: /home2/newfloo1/public_html/wp-admin/user/error_log
[Sat Aug 29 05:08:13.811840 2026] [security2:error] [pid 1028675:tid 1028859] [client 20.48.250.41:19477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/ioxi.php"] [unique_id "apK9nddHPfW2QFvhmL4DAQAAADE"]
[Sat Aug 29 05:08:13.821229 2026] [security2:error] [pid 1028675:tid 1028840] [client 20.48.250.41:58569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/gk.php"] [unique_id "apK9nddHPfW2QFvhmL4DAgAAAB4"]
[Sat Aug 29 05:08:13.828612 2026] [security2:error] [pid 1034096:tid 1034265] [client 52.139.37.240:36673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/wp-wordfence-waf.php"] [unique_id "apK9nS04twRPFuquKD2koQAAAJM"]
[Sat Aug 29 05:08:13.843376 2026] [security2:error] [pid 1034096:tid 1034258] [client 40.83.93.50:9202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/menu.php"] [unique_id "apK9nS04twRPFuquKD2kowAAAIw"]
[Sat Aug 29 05:08:13.852262 2026] [security2:error] [pid 1034096:tid 1034260] [client 20.203.141.11:24097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xbdorthodontics.com"] [uri "/wp-admin.php"] [unique_id "apK9nS04twRPFuquKD2kpAAAAI4"]
[Sat Aug 29 05:08:13.877289 2026] [security2:error] [pid 1034096:tid 1034355] [client 158.23.147.79:6081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK9nS04twRPFuquKD2kpwAAAO0"]
[Sat Aug 29 05:08:13.903619 2026] [security2:error] [pid 1034096:tid 1034307] [client 20.52.41.200:4594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-content/themes/pridmag/il.php"] [unique_id "apK9nS04twRPFuquKD2kqAAAAL0"]
[Sat Aug 29 05:08:13.915715 2026] [security2:error] [pid 1034096:tid 1034306] [client 20.48.250.41:65337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/kbfr.php"] [unique_id "apK9nS04twRPFuquKD2kqgAAALw"]
[Sat Aug 29 05:08:13.917526 2026] [security2:error] [pid 1034096:tid 1034315] [client 158.23.147.79:6072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-content/plugins/index.php"] [unique_id "apK9nS04twRPFuquKD2kqwAAAMU"]
[Sat Aug 29 05:08:13.919605 2026] [security2:error] [pid 1034096:tid 1034309] [client 213.209.159.223:27669] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/system/.env"] [unique_id "apK9nS04twRPFuquKD2kqQAAAL8"]
[Sat Aug 29 05:08:13.923629 2026] [security2:error] [pid 1028675:tid 1028814] [client 20.104.104.62:37660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/ad1.php"] [unique_id "apK9nddHPfW2QFvhmL4DCQAAAAQ"]
[Sat Aug 29 05:08:13.930994 2026] [security2:error] [pid 1028675:tid 1028812] [client 20.104.104.62:29202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sellmylike.millionairebuildersclub.com"] [uri "/elp.php"] [unique_id "apK9nddHPfW2QFvhmL4DCgAAAAI"]
[Sat Aug 29 05:08:13.933142 2026] [security2:error] [pid 1034096:tid 1034286] [client 213.209.159.223:46127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/info.php.bak"] [unique_id "apK9nS04twRPFuquKD2krQAAAKg"]
[Sat Aug 29 05:08:13.936349 2026] [security2:error] [pid 1034096:tid 1034344] [client 20.197.61.180:1809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/disagraeosc.php"] [unique_id "apK9nS04twRPFuquKD2krgAAAOI"]
[Sat Aug 29 05:08:13.944048 2026] [security2:error] [pid 1028675:tid 1028825] [client 20.48.250.41:19480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/bootstrap.php"] [unique_id "apK9nddHPfW2QFvhmL4DDAAAAA8"]
[Sat Aug 29 05:08:13.956883 2026] [security2:error] [pid 1034096:tid 1034323] [client 68.155.159.216:16265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/.well-knownold/index.php"] [unique_id "apK9nS04twRPFuquKD2ksAAAAM0"]
[Sat Aug 29 05:08:13.974341 2026] [security2:error] [pid 1028675:tid 1028884] [client 68.155.159.216:14214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK9nddHPfW2QFvhmL4DDgAAAEo"]
[Sat Aug 29 05:08:13.979162 2026] [security2:error] [pid 1034096:tid 1034358] [client 20.203.141.11:17431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-includes/admin.php"] [unique_id "apK9nS04twRPFuquKD2ktAAAAPA"]
[Sat Aug 29 05:08:13.982515 2026] [security2:error] [pid 1028675:tid 1028863] [client 158.23.147.79:32605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK9nddHPfW2QFvhmL4DDwAAADU"]
[Sat Aug 29 05:08:13.992753 2026] [security2:error] [pid 1034096:tid 1034284] [client 20.104.104.62:48002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/wp-ana.php"] [unique_id "apK9nS04twRPFuquKD2kuAAAAKY"]
[Sat Aug 29 05:08:14.022082 2026] [security2:error] [pid 1028675:tid 1028911] [client 20.104.104.62:62973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/ws66.php"] [unique_id "apK9ntdHPfW2QFvhmL4DEQAAAGU"]
[Sat Aug 29 05:08:14.029953 2026] [security2:error] [pid 1034096:tid 1034268] [client 20.240.128.207:24746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/lite.php"] [unique_id "apK9ni04twRPFuquKD2kuQAAAJY"]
[Sat Aug 29 05:08:14.039901 2026] [security2:error] [pid 1034096:tid 1034267] [client 68.155.159.216:64436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK9ni04twRPFuquKD2kugAAAJU"]
[Sat Aug 29 05:08:14.045085 2026] [security2:error] [pid 1028675:tid 1028844] [client 52.139.37.240:35841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/ws49.php"] [unique_id "apK9ntdHPfW2QFvhmL4DEgAAACI"]
[Sat Aug 29 05:08:14.049077 2026] [security2:error] [pid 1028675:tid 1028860] [client 20.100.175.163:7061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/inputs.php"] [unique_id "apK9ntdHPfW2QFvhmL4DEwAAADI"]
[Sat Aug 29 05:08:14.052992 2026] [security2:error] [pid 1028675:tid 1028928] [client 103.168.67.159:22968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 159.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "naturalkneads.com"] [uri "/wordpress/index.php"] [unique_id "apK9ntdHPfW2QFvhmL4DFAAAAHY"]
[Sat Aug 29 05:08:14.053020 2026] [security2:error] [pid 1028675:tid 1028916] [client 68.155.159.216:30717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-content/admin.php"] [unique_id "apK9ntdHPfW2QFvhmL4DFQAAAGo"]
[Sat Aug 29 05:08:14.054061 2026] [security2:error] [pid 1034096:tid 1034349] [client 213.209.159.223:27669] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/wp-config.php.backup"] [unique_id "apK9ni04twRPFuquKD2kuwAAAOc"]
[Sat Aug 29 05:08:14.057144 2026] [security2:error] [pid 1034096:tid 1034295] [client 20.104.104.62:37672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/1vbqo.php"] [unique_id "apK9ni04twRPFuquKD2kvAAAALE"]
[Sat Aug 29 05:08:14.058259 2026] [security2:error] [pid 1028675:tid 1028929] [client 213.209.159.223:24773] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/src/.env"] [unique_id "apK9ntdHPfW2QFvhmL4DFgAAAHc"]
[Sat Aug 29 05:08:14.061515 2026] [security2:error] [pid 1034096:tid 1034311] [client 68.155.159.216:23516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9ni04twRPFuquKD2kvQAAAME"]
[Sat Aug 29 05:08:14.070163 2026] [security2:error] [pid 1034096:tid 1034266] [client 20.48.250.41:61697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/logs1.php"] [unique_id "apK9ni04twRPFuquKD2kwQAAAJQ"]
[Sat Aug 29 05:08:14.087608 2026] [security2:error] [pid 1028675:tid 1028824] [client 213.209.159.223:55707] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/env/.env"] [unique_id "apK9ntdHPfW2QFvhmL4DHQAAAA4"]
[Sat Aug 29 05:08:14.089410 2026] [security2:error] [pid 1034096:tid 1034337] [client 20.48.250.41:19470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/export.php"] [unique_id "apK9ni04twRPFuquKD2kwwAAANs"]
[Sat Aug 29 05:08:14.131533 2026] [security2:error] [pid 1028675:tid 1028820] [client 20.104.104.62:29209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sellmylike.millionairebuildersclub.com"] [uri "/ioxi-o.php"] [unique_id "apK9ntdHPfW2QFvhmL4DIQAAAAo"]
[Sat Aug 29 05:08:14.143478 2026] [security2:error] [pid 1034096:tid 1034362] [client 20.48.250.41:38811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/export.php"] [unique_id "apK9ni04twRPFuquKD2kxQAAAPQ"]
[Sat Aug 29 05:08:14.145371 2026] [security2:error] [pid 1028675:tid 1028930] [client 20.104.104.62:37597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/secret.php"] [unique_id "apK9ntdHPfW2QFvhmL4DIgAAAHg"]
[Sat Aug 29 05:08:14.174864 2026] [security2:error] [pid 1028675:tid 1028813] [client 158.23.184.117:31534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/.well-known/login.php"] [unique_id "apK9ntdHPfW2QFvhmL4DIwAAAAM"]
[Sat Aug 29 05:08:14.175163 2026] [security2:error] [pid 1028675:tid 1028903] [client 158.23.147.79:50127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/lock.php"] [unique_id "apK9ntdHPfW2QFvhmL4DJAAAAF0"]
[Sat Aug 29 05:08:14.176364 2026] [security2:error] [pid 1028675:tid 1028862] [client 158.23.184.117:57838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/100.php"] [unique_id "apK9ntdHPfW2QFvhmL4DJQAAADQ"]
[Sat Aug 29 05:08:14.180968 2026] [security2:error] [pid 1028675:tid 1028848] [client 20.63.219.114:18509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/configs.php"] [unique_id "apK9ntdHPfW2QFvhmL4DJgAAACY"]
[Sat Aug 29 05:08:14.180968 2026] [security2:error] [pid 1034096:tid 1034368] [client 158.23.147.79:26522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK9ni04twRPFuquKD2kyAAAAPo"]
[Sat Aug 29 05:08:14.192717 2026] [security2:error] [pid 1028675:tid 1028816] [client 20.104.104.62:40082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/h02ugyh.php"] [unique_id "apK9ntdHPfW2QFvhmL4DJwAAAAY"]
[Sat Aug 29 05:08:14.193835 2026] [security2:error] [pid 1034096:tid 1034324] [client 20.196.209.81:10473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-content/admin.php"] [unique_id "apK9ni04twRPFuquKD2kyQAAAM4"]
[Sat Aug 29 05:08:14.203219 2026] [security2:error] [pid 1034096:tid 1034253] [client 20.48.250.41:49427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/wp-act.php"] [unique_id "apK9ni04twRPFuquKD2kygAAAIc"]
[Sat Aug 29 05:08:14.210149 2026] [http2:warn] [pid 1017536:tid 1017791] [client 57.141.14.6:58642] h2_stream(1017536-30-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:08:14.223823 2026] [security2:error] [pid 1028675:tid 1028857] [client 20.48.250.41:19517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/gk.php"] [unique_id "apK9ntdHPfW2QFvhmL4DKQAAAC8"]
[Sat Aug 29 05:08:14.236033 2026] [security2:error] [pid 1034096:tid 1034319] [client 158.23.184.117:2772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/wp-act.php"] [unique_id "apK9ni04twRPFuquKD2kywAAAMk"]
[Sat Aug 29 05:08:14.245104 2026] [security2:error] [pid 1028675:tid 1028904] [client 52.139.37.240:36706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/xxx.php"] [unique_id "apK9ntdHPfW2QFvhmL4DKwAAAF4"]
[Sat Aug 29 05:08:14.271560 2026] [security2:error] [pid 1028675:tid 1028888] [client 213.209.159.223:9147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/info.php.bak"] [unique_id "apK9ntdHPfW2QFvhmL4DLAAAAE4"]
[Sat Aug 29 05:08:14.291209 2026] [security2:error] [pid 1028675:tid 1028815] [client 20.48.250.41:38832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/gk.php"] [unique_id "apK9ntdHPfW2QFvhmL4DLgAAAAU"]
[Sat Aug 29 05:08:14.298404 2026] [security2:error] [pid 1028675:tid 1028911] [client 20.104.104.62:37584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/pro.php"] [unique_id "apK9ntdHPfW2QFvhmL4DMAAAAGU"]
[Sat Aug 29 05:08:14.300019 2026] [security2:error] [pid 1028675:tid 1028897] [client 4.205.62.107:58403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/7.php"] [unique_id "apK9ntdHPfW2QFvhmL4DMQAAAFc"]
[Sat Aug 29 05:08:14.301487 2026] [security2:error] [pid 1028675:tid 1028935] [client 213.202.253.4:55777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bv-place.com"] [uri "/delpaths.php"] [unique_id "apK9ntdHPfW2QFvhmL4DMgAAAH0"], referer: www.google.com
[Sat Aug 29 05:08:14.307802 2026] [security2:error] [pid 1034096:tid 1034339] [client 40.83.93.50:9881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/inputs.php"] [unique_id "apK9ni04twRPFuquKD2kzwAAAN0"]
[Sat Aug 29 05:08:14.319308 2026] [security2:error] [pid 1034096:tid 1034353] [client 40.83.93.50:9858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/alfa.php"] [unique_id "apK9ni04twRPFuquKD2k0AAAAOs"]
[Sat Aug 29 05:08:14.320222 2026] [security2:error] [pid 1034096:tid 1034315] [client 158.23.184.117:31533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/.well-known/logs233/index.php"] [unique_id "apK9ni04twRPFuquKD2k0QAAAMU"]
[Sat Aug 29 05:08:14.325275 2026] [security2:error] [pid 1034096:tid 1034252] [client 68.155.159.216:6068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK9ni04twRPFuquKD2k0gAAAIY"]
[Sat Aug 29 05:08:14.335736 2026] [security2:error] [pid 1034096:tid 1034259] [client 158.23.184.117:2787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/hehe.php"] [unique_id "apK9ni04twRPFuquKD2k1AAAAI0"]
[Sat Aug 29 05:08:14.336884 2026] [security2:error] [pid 1028675:tid 1028892] [client 213.209.159.223:24773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/config/app.php"] [unique_id "apK9ntdHPfW2QFvhmL4DNAAAAFI"]
[Sat Aug 29 05:08:14.344159 2026] [security2:error] [pid 1034096:tid 1034372] [client 20.48.250.41:58568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/inege.php"] [unique_id "apK9ni04twRPFuquKD2k1QAAAP4"]
[Sat Aug 29 05:08:14.345398 2026] [security2:error] [pid 1034096:tid 1034359] [client 213.209.159.223:54024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/phpinfo.php.bak"] [unique_id "apK9ni04twRPFuquKD2k1gAAAPE"]
[Sat Aug 29 05:08:14.349024 2026] [security2:error] [pid 1034096:tid 1034358] [client 20.104.104.62:37640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/shelp.php"] [unique_id "apK9ni04twRPFuquKD2k1wAAAPA"]
[Sat Aug 29 05:08:14.355664 2026] [security2:error] [pid 1034096:tid 1034302] [client 20.52.41.200:5290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/assets/images/doc.php"] [unique_id "apK9ni04twRPFuquKD2k2AAAALg"]
[Sat Aug 29 05:08:14.361111 2026] [security2:error] [pid 1028675:tid 1028877] [client 20.48.250.41:19541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/logs1.php"] [unique_id "apK9ntdHPfW2QFvhmL4DNQAAAEM"]
[Sat Aug 29 05:08:14.372458 2026] [security2:error] [pid 1028675:tid 1028929] [client 213.209.159.223:55707] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/src/.env"] [unique_id "apK9ntdHPfW2QFvhmL4DNgAAAHc"]
[Sat Aug 29 05:08:14.385068 2026] [security2:error] [pid 1034096:tid 1034376] [client 68.155.159.216:1969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-admin/dropdown.php"] [unique_id "apK9ni04twRPFuquKD2k2gAAAQI"]
[Sat Aug 29 05:08:14.396311 2026] [security2:error] [pid 1028675:tid 1028926] [client 20.104.104.62:29201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sellmylike.millionairebuildersclub.com"] [uri "/wp-links-opml.php"] [unique_id "apK9ntdHPfW2QFvhmL4DNwAAAHQ"]
[Sat Aug 29 05:08:14.396476 2026] [security2:error] [pid 1034096:tid 1034325] [client 20.48.250.41:65275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/24.php"] [unique_id "apK9ni04twRPFuquKD2k2wAAAM8"]
[Sat Aug 29 05:08:14.428472 2026] [security2:error] [pid 1034096:tid 1034280] [client 195.178.110.247:16996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.livingthecode.org"] [uri "/index.php"] [unique_id "apK9ni04twRPFuquKD2k3QAAAKI"]
[Sat Aug 29 05:08:14.437611 2026] [security2:error] [pid 1028675:tid 1028879] [client 52.139.37.240:35895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/0x.php"] [unique_id "apK9ntdHPfW2QFvhmL4DOAAAAEU"]
[Sat Aug 29 05:08:14.455229 2026] [security2:error] [pid 1028675:tid 1028828] [client 68.155.159.216:38540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK9ntdHPfW2QFvhmL4DOwAAABI"]
[Sat Aug 29 05:08:14.476619 2026] [security2:error] [pid 1034096:tid 1034263] [client 20.104.104.62:48026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/999.php"] [unique_id "apK9ni04twRPFuquKD2k4gAAAJE"]
[Sat Aug 29 05:08:14.493961 2026] [security2:error] [pid 1034096:tid 1034350] [client 158.23.147.79:17517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/dropdown.php"] [unique_id "apK9ni04twRPFuquKD2k5AAAAOg"]
[Sat Aug 29 05:08:14.506563 2026] [security2:error] [pid 1034096:tid 1034332] [client 4.205.62.107:21911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/sale.php"] [unique_id "apK9ni04twRPFuquKD2k-wAAANY"]
[Sat Aug 29 05:08:14.515210 2026] [security2:error] [pid 1034096:tid 1034306] [client 20.48.250.41:19537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/inege.php"] [unique_id "apK9ni04twRPFuquKD2lAwAAALw"]
[Sat Aug 29 05:08:14.520881 2026] [security2:error] [pid 1028675:tid 1028880] [client 20.48.250.41:61742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/wp-link10.php"] [unique_id "apK9ntdHPfW2QFvhmL4DPwAAAEY"]
[Sat Aug 29 05:08:14.524572 2026] [security2:error] [pid 1028675:tid 1028894] [client 158.23.147.79:35241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK9ntdHPfW2QFvhmL4DQAAAAFQ"]
[Sat Aug 29 05:08:14.529263 2026] [security2:error] [pid 1028675:tid 1028910] [client 20.240.128.207:23477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/term.php"] [unique_id "apK9ntdHPfW2QFvhmL4DQQAAAGQ"]
[Sat Aug 29 05:08:14.529781 2026] [security2:error] [pid 1034096:tid 1034344] [client 4.205.62.107:53436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/BDKR28WP.php"] [unique_id "apK9ni04twRPFuquKD2lBwAAAOI"]
[Sat Aug 29 05:08:14.531700 2026] [security2:error] [pid 1034096:tid 1034339] [client 20.48.250.41:38849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/logs1.php"] [unique_id "apK9ni04twRPFuquKD2lCQAAAN0"]
[Sat Aug 29 05:08:14.538315 2026] [security2:error] [pid 1034096:tid 1034252] [client 158.23.147.79:53835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/mah.php"] [unique_id "apK9ni04twRPFuquKD2lCgAAAIY"]
[Sat Aug 29 05:08:14.568509 2026] [security2:error] [pid 1034096:tid 1034358] [client 213.209.159.223:63513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.greatdecisionsofcharlevoix.com"] [uri "/config/app.php"] [unique_id "apK9ni04twRPFuquKD2lCwAAAPA"]
[Sat Aug 29 05:08:14.574285 2026] [security2:error] [pid 1028675:tid 1028843] [client 20.48.250.41:65256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/155.php"] [unique_id "apK9ntdHPfW2QFvhmL4DQwAAACE"]
[Sat Aug 29 05:08:14.574990 2026] [security2:error] [pid 1028675:tid 1028824] [client 20.100.175.163:7073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/alfa.php"] [unique_id "apK9ntdHPfW2QFvhmL4DRAAAAA4"]
[Sat Aug 29 05:08:14.583141 2026] [security2:error] [pid 1028675:tid 1028925] [client 20.63.219.114:8882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/disagraeed.php"] [unique_id "apK9ntdHPfW2QFvhmL4DRQAAAHM"]
[Sat Aug 29 05:08:14.592352 2026] [security2:error] [pid 1028675:tid 1028845] [client 20.196.209.81:13502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-content/autoload_classmap.php"] [unique_id "apK9ntdHPfW2QFvhmL4DRgAAACM"]
[Sat Aug 29 05:08:14.593787 2026] [security2:error] [pid 1034096:tid 1034373] [client 195.178.110.247:33686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.livingthecode.org"] [uri "/index.php"] [unique_id "apK9ni04twRPFuquKD2lDQAAAP8"]
[Sat Aug 29 05:08:14.619180 2026] [security2:error] [pid 1028675:tid 1028820] [client 20.203.141.11:18219] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/lock360.php"] [unique_id "apK9ntdHPfW2QFvhmL4DRwAAAAo"]
[Sat Aug 29 05:08:14.630670 2026] [security2:error] [pid 1034096:tid 1034359] [client 52.139.37.240:36837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/CDX1.php"] [unique_id "apK9ni04twRPFuquKD2lDgAAAPE"]
[Sat Aug 29 05:08:14.652325 2026] [security2:error] [pid 1028675:tid 1028813] [client 213.209.159.223:55707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/config/app.php"] [unique_id "apK9ntdHPfW2QFvhmL4DSAAAAAM"]
[Sat Aug 29 05:08:14.653686 2026] [security2:error] [pid 1028675:tid 1028903] [client 4.205.62.107:65482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/public/mah.php.php"] [unique_id "apK9ntdHPfW2QFvhmL4DSQAAAF0"]
[Sat Aug 29 05:08:14.654093 2026] [security2:error] [pid 1034096:tid 1034280] [client 20.48.250.41:58576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/ww.php"] [unique_id "apK9ni04twRPFuquKD2lDwAAAKI"]
[Sat Aug 29 05:08:14.663257 2026] [security2:error] [pid 1034096:tid 1034316] [client 20.197.61.180:12097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/about.php525"] [unique_id "apK9ni04twRPFuquKD2lEAAAAMY"]
[Sat Aug 29 05:08:14.668885 2026] [security2:error] [pid 1028675:tid 1028862] [client 4.205.62.107:22464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/v2.php"] [unique_id "apK9ntdHPfW2QFvhmL4DSgAAADQ"]
[Sat Aug 29 05:08:14.683979 2026] [security2:error] [pid 1028675:tid 1028848] [client 20.48.250.41:19599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/wp-link10.php"] [unique_id "apK9ntdHPfW2QFvhmL4DSwAAACY"]
[Sat Aug 29 05:08:14.684285 2026] [security2:error] [pid 1034096:tid 1034259] [client 213.209.159.223:15254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/phpinfo.php.bak"] [unique_id "apK9ni04twRPFuquKD2lEgAAAI0"]
[Sat Aug 29 05:08:14.687376 2026] [security2:error] [pid 1028675:tid 1028873] [client 158.23.147.79:17460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/themes.php"] [unique_id "apK9ntdHPfW2QFvhmL4DTQAAAD8"]
[Sat Aug 29 05:08:14.747940 2026] [security2:error] [pid 1028675:tid 1028886] [client 213.209.159.223:19687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "apK9ntdHPfW2QFvhmL4DTgAAAEw"]
[Sat Aug 29 05:08:14.774142 2026] [security2:error] [pid 1034096:tid 1034337] [client 4.205.62.107:53140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/chosen.php"] [unique_id "apK9ni04twRPFuquKD2lFAAAANs"]
[Sat Aug 29 05:08:14.784695 2026] [security2:error] [pid 1028675:tid 1028904] [client 20.48.250.41:61807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/w1px.php"] [unique_id "apK9ntdHPfW2QFvhmL4DUQAAAF4"]
[Sat Aug 29 05:08:14.784701 2026] [security2:error] [pid 1028675:tid 1028876] [client 40.83.93.50:8996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/class-walker-category-dropdown-class.php"] [unique_id "apK9ntdHPfW2QFvhmL4DUAAAAEI"]
[Sat Aug 29 05:08:14.793968 2026] [security2:error] [pid 1034096:tid 1034346] [client 40.83.93.50:9166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/feed-rss2-queue.php"] [unique_id "apK9ni04twRPFuquKD2lFgAAAOQ"]
[Sat Aug 29 05:08:14.802105 2026] [security2:error] [pid 1034096:tid 1034296] [client 20.48.250.41:65201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/file.php"] [unique_id "apK9ni04twRPFuquKD2lFwAAALI"]
[Sat Aug 29 05:08:14.807001 2026] [security2:error] [pid 1034096:tid 1034336] [client 20.52.41.200:5373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/bgymj.php"] [unique_id "apK9ni04twRPFuquKD2lGAAAANo"]
[Sat Aug 29 05:08:14.814755 2026] [security2:error] [pid 1028675:tid 1028851] [client 68.155.159.216:18328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/.well-known/content.php"] [unique_id "apK9ntdHPfW2QFvhmL4DVAAAACk"]
[Sat Aug 29 05:08:14.834460 2026] [security2:error] [pid 1034096:tid 1034327] [client 20.48.250.41:19515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/ww.php"] [unique_id "apK9ni04twRPFuquKD2lGQAAANE"]
[Sat Aug 29 05:08:14.841851 2026] [security2:error] [pid 1034096:tid 1034290] [client 52.139.37.240:36813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/akcc.php"] [unique_id "apK9ni04twRPFuquKD2lGgAAAKw"]
[Sat Aug 29 05:08:14.852460 2026] [security2:error] [pid 1028675:tid 1028823] [client 68.155.159.216:33777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-admin/dropdown.php"] [unique_id "apK9ntdHPfW2QFvhmL4DVQAAAA0"]
[Sat Aug 29 05:08:14.915205 2026] [security2:error] [pid 1028675:tid 1028901] [client 68.155.159.216:49263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/cong.php"] [unique_id "apK9ntdHPfW2QFvhmL4DVwAAAFs"]
[Sat Aug 29 05:08:14.926641 2026] [security2:error] [pid 1028675:tid 1028846] [client 20.48.250.41:61773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/to.php"] [unique_id "apK9ntdHPfW2QFvhmL4DWQAAACQ"]
[Sat Aug 29 05:08:14.948321 2026] [security2:error] [pid 1028675:tid 1028844] [client 158.23.147.79:11291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK9ntdHPfW2QFvhmL4DWgAAACI"]
[Sat Aug 29 05:08:14.969999 2026] [security2:error] [pid 1034096:tid 1034340] [client 20.63.219.114:8845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/add_actualites.php"] [unique_id "apK9ni04twRPFuquKD2lHQAAAN4"]
[Sat Aug 29 05:08:14.971342 2026] [security2:error] [pid 1034096:tid 1034351] [client 20.48.250.41:38802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/inege.php"] [unique_id "apK9ni04twRPFuquKD2lHgAAAOk"]
[Sat Aug 29 05:08:14.974261 2026] [security2:error] [pid 1034096:tid 1034371] [client 213.209.159.223:19589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.greatdecisionsofcharlevoix.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "apK9ni04twRPFuquKD2lHwAAAP0"]
[Sat Aug 29 05:08:14.978009 2026] [security2:error] [pid 1034096:tid 1034332] [client 20.48.250.41:65359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK9ni04twRPFuquKD2lIAAAANY"]
[Sat Aug 29 05:08:14.982331 2026] [security2:error] [pid 1028675:tid 1028896] [client 158.23.147.79:6024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK9ntdHPfW2QFvhmL4DXQAAAFY"]
[Sat Aug 29 05:08:14.985425 2026] [security2:error] [pid 1034096:tid 1034282] [client 20.196.209.81:17283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-content/cache/min/1/wp-content/admin.php"] [unique_id "apK9ni04twRPFuquKD2lIQAAAKQ"]
[Sat Aug 29 05:08:14.991873 2026] [security2:error] [pid 1034096:tid 1034251] [client 20.48.250.41:19490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/w1px.php"] [unique_id "apK9ni04twRPFuquKD2lIgAAAIU"]
[Sat Aug 29 05:08:15.019726 2026] [security2:error] [pid 1034096:tid 1034375] [client 20.240.128.207:24747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/config.php"] [unique_id "apK9ny04twRPFuquKD2lJAAAAQE"]
[Sat Aug 29 05:08:15.030247 2026] [security2:error] [pid 1034096:tid 1034348] [client 158.23.147.79:6073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/simple.php"] [unique_id "apK9ny04twRPFuquKD2lJQAAAOY"]
[Sat Aug 29 05:08:15.036698 2026] [security2:error] [pid 1034096:tid 1034270] [client 52.139.37.240:36708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK9ny04twRPFuquKD2lJgAAAJg"]
[Sat Aug 29 05:08:15.061462 2026] [security2:error] [pid 1034096:tid 1034328] [client 68.155.159.216:16269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK9ny04twRPFuquKD2lKQAAANI"]
[Sat Aug 29 05:08:15.061874 2026] [security2:error] [pid 1034096:tid 1034357] [client 20.48.250.41:61778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/thui.php"] [unique_id "apK9ny04twRPFuquKD2lKgAAAO8"]
[Sat Aug 29 05:08:15.062554 2026] [security2:error] [pid 1028675:tid 1028870] [client 213.209.159.223:33702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_whm/env/.env"] [unique_id "apK9n9dHPfW2QFvhmL4DXwAAADw"]
[Sat Aug 29 05:08:15.065291 2026] [security2:error] [pid 1028675:tid 1028892] [client 213.209.159.223:23355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "apK9n9dHPfW2QFvhmL4DYAAAAFI"]
[Sat Aug 29 05:08:15.079294 2026] [security2:error] [pid 1028675:tid 1028856] [client 68.155.159.216:14247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/simple.php"] [unique_id "apK9n9dHPfW2QFvhmL4DYQAAAC4"]
[Sat Aug 29 05:08:15.087900 2026] [security2:error] [pid 1028675:tid 1028847] [client 20.203.141.11:17454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-conflg.php"] [unique_id "apK9n9dHPfW2QFvhmL4DYgAAACU"]
[Sat Aug 29 05:08:15.099260 2026] [security2:error] [pid 1034096:tid 1034277] [client 158.23.147.79:32700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK9ny04twRPFuquKD2lLAAAAJ8"]
[Sat Aug 29 05:08:15.135885 2026] [security2:error] [pid 1028675:tid 1028887] [client 20.48.250.41:19619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/to.php"] [unique_id "apK9n9dHPfW2QFvhmL4DZgAAAE0"]
[Sat Aug 29 05:08:15.137575 2026] [security2:error] [pid 1034096:tid 1034281] [client 20.48.250.41:65183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/06.php"] [unique_id "apK9ny04twRPFuquKD2lLQAAAKM"]
[Sat Aug 29 05:08:15.140310 2026] [security2:error] [pid 1034096:tid 1034300] [client 20.100.175.163:7088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/403.php"] [unique_id "apK9ny04twRPFuquKD2lLgAAALY"]
[Sat Aug 29 05:08:15.148634 2026] [security2:error] [pid 1034096:tid 1034339] [client 213.209.159.223:6389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/app_dev.php/_profiler/open"] [unique_id "apK9ny04twRPFuquKD2lLwAAAN0"]
[Sat Aug 29 05:08:15.161705 2026] [security2:error] [pid 1034096:tid 1034353] [client 20.104.49.130:57613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/berlin.php"] [unique_id "apK9ny04twRPFuquKD2lMAAAAOs"]
[Sat Aug 29 05:08:15.181817 2026] [security2:error] [pid 1034096:tid 1034253] [client 68.155.159.216:30664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/xmlrpc.php"] [unique_id "apK9ny04twRPFuquKD2lMQAAAIc"]
[Sat Aug 29 05:08:15.194201 2026] [security2:error] [pid 1034096:tid 1034309] [client 20.48.250.41:61732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/Jcrop.php"] [unique_id "apK9ny04twRPFuquKD2lMgAAAL8"]
[Sat Aug 29 05:08:15.219890 2026] [security2:error] [pid 1034096:tid 1034252] [client 20.48.250.41:38821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/wp-link10.php"] [unique_id "apK9ny04twRPFuquKD2lNAAAAIY"]
[Sat Aug 29 05:08:15.231563 2026] [security2:error] [pid 1034096:tid 1034358] [client 68.155.159.216:23519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9ny04twRPFuquKD2lNQAAAPA"]
[Sat Aug 29 05:08:15.234797 2026] [security2:error] [pid 1034096:tid 1034292] [client 52.139.37.240:36810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/s.php"] [unique_id "apK9ny04twRPFuquKD2lNgAAAK4"]
[Sat Aug 29 05:08:15.261248 2026] [security2:error] [pid 1034096:tid 1034362] [client 20.52.41.200:5251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK9ny04twRPFuquKD2lNwAAAPQ"]
[Sat Aug 29 05:08:15.268433 2026] [security2:error] [pid 1028675:tid 1028927] [client 40.83.93.50:8472] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "royalryder.com"] [uri "/1.php7"] [unique_id "apK9n9dHPfW2QFvhmL4DagAAAHU"]
[Sat Aug 29 05:08:15.268531 2026] [security2:error] [pid 1028675:tid 1028927] [client 40.83.93.50:8472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/1.php7"] [unique_id "apK9n9dHPfW2QFvhmL4DagAAAHU"]
[Sat Aug 29 05:08:15.275774 2026] [security2:error] [pid 1034096:tid 1034284] [client 20.48.250.41:19589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/thui.php"] [unique_id "apK9ny04twRPFuquKD2lOQAAAKY"]
[Sat Aug 29 05:08:15.277834 2026] [security2:error] [pid 1034096:tid 1034324] [client 213.209.159.223:12164] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/source/.env"] [unique_id "apK9ny04twRPFuquKD2lOgAAAM4"]
[Sat Aug 29 05:08:15.278179 2026] [security2:error] [pid 1034096:tid 1034272] [client 158.23.147.79:49812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/index/function.php"] [unique_id "apK9ny04twRPFuquKD2lOwAAAJo"]
[Sat Aug 29 05:08:15.300348 2026] [security2:error] [pid 1028675:tid 1028859] [client 213.209.159.223:18163] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/web/.env"] [unique_id "apK9n9dHPfW2QFvhmL4DawAAADE"]
[Sat Aug 29 05:08:15.319326 2026] [security2:error] [pid 1028675:tid 1028843] [client 158.23.147.79:26514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/.well-knownold/index.php"] [unique_id "apK9n9dHPfW2QFvhmL4DbAAAACE"]
[Sat Aug 29 05:08:15.342664 2026] [security2:error] [pid 1028675:tid 1028840] [client 213.209.159.223:33702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_whm/src/.env"] [unique_id "apK9n9dHPfW2QFvhmL4DbQAAAB4"]
[Sat Aug 29 05:08:15.351719 2026] [security2:error] [pid 1034096:tid 1034377] [client 20.48.250.41:58613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/ws58.php"] [unique_id "apK9ny04twRPFuquKD2lPAAAAQM"]
[Sat Aug 29 05:08:15.364689 2026] [security2:error] [pid 1028675:tid 1028820] [client 20.48.250.41:65340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/class.php"] [unique_id "apK9n9dHPfW2QFvhmL4DbwAAAAo"]
[Sat Aug 29 05:08:15.379129 2026] [security2:error] [pid 1028675:tid 1028902] [client 213.209.159.223:24893] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/env/.env"] [unique_id "apK9n9dHPfW2QFvhmL4DcAAAAFw"]
[Sat Aug 29 05:08:15.380707 2026] [security2:error] [pid 1034096:tid 1034285] [client 20.63.219.114:18511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/alfanew.php7"] [unique_id "apK9ny04twRPFuquKD2lPQAAAKc"]
[Sat Aug 29 05:08:15.381941 2026] [security2:error] [pid 1028675:tid 1028821] [client 20.196.209.81:17311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-content/classwithtostring.php"] [unique_id "apK9n9dHPfW2QFvhmL4DcQAAAAs"]
[Sat Aug 29 05:08:15.390933 2026] [security2:error] [pid 1034096:tid 1034268] [client 40.83.93.50:8441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/inputs.php"] [unique_id "apK9ny04twRPFuquKD2lPwAAAJY"]
[Sat Aug 29 05:08:15.411968 2026] [security2:error] [pid 1034096:tid 1034314] [client 20.48.250.41:38896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/ww.php"] [unique_id "apK9ny04twRPFuquKD2lQAAAAMQ"]
[Sat Aug 29 05:08:15.426183 2026] [security2:error] [pid 1034096:tid 1034295] [client 52.139.37.240:36690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/sagax.php"] [unique_id "apK9ny04twRPFuquKD2lRAAAALE"]
[Sat Aug 29 05:08:15.434629 2026] [security2:error] [pid 1028675:tid 1028848] [client 213.209.159.223:18163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "pop.greatdecisionsofcharlevoix.com"] [uri "/phpinfo.php3"] [unique_id "apK9n9dHPfW2QFvhmL4DcgAAACY"]
[Sat Aug 29 05:08:15.452905 2026] [security2:error] [pid 1028675:tid 1028873] [client 4.205.62.107:58424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "apK9n9dHPfW2QFvhmL4DcwAAAD8"]
[Sat Aug 29 05:08:15.467020 2026] [security2:error] [pid 1034096:tid 1034310] [client 68.155.159.216:6120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apK9ny04twRPFuquKD2lRgAAAMA"]
[Sat Aug 29 05:08:15.474246 2026] [security2:error] [pid 1034096:tid 1034308] [client 20.104.49.130:57670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/classwithtostring.php"] [unique_id "apK9ny04twRPFuquKD2lRwAAAL4"]
[Sat Aug 29 05:08:15.486474 2026] [security2:error] [pid 1034096:tid 1034255] [client 20.104.104.62:40096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/13ede.php"] [unique_id "apK9ny04twRPFuquKD2lSAAAAIk"]
[Sat Aug 29 05:08:15.500500 2026] [security2:error] [pid 1028675:tid 1028833] [client 68.155.159.216:51891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/log-mama/function.php"] [unique_id "apK9n9dHPfW2QFvhmL4DeAAAABc"]
[Sat Aug 29 05:08:15.520401 2026] [security2:error] [pid 1028675:tid 1028867] [client 20.240.128.207:22113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK9n9dHPfW2QFvhmL4DegAAADk"]
[Sat Aug 29 05:08:15.524281 2026] [security2:error] [pid 1034096:tid 1034320] [client 20.48.250.41:19580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/Jcrop.php"] [unique_id "apK9ny04twRPFuquKD2lSQAAAMo"]
[Sat Aug 29 05:08:15.533822 2026] [security2:error] [pid 1034096:tid 1034271] [client 20.197.61.180:1494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/spip.php"] [unique_id "apK9ny04twRPFuquKD2lSwAAAJk"]
[Sat Aug 29 05:08:15.553677 2026] [security2:error] [pid 1034096:tid 1034352] [client 20.203.141.11:38398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/123.php"] [unique_id "apK9ny04twRPFuquKD2lTQAAAOo"]
[Sat Aug 29 05:08:15.554763 2026] [security2:error] [pid 1034096:tid 1034368] [client 68.155.159.216:56573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/goat.php"] [unique_id "apK9ny04twRPFuquKD2lTgAAAPo"]
[Sat Aug 29 05:08:15.562090 2026] [security2:error] [pid 1034096:tid 1034371] [client 20.48.250.41:38873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/w1px.php"] [unique_id "apK9ny04twRPFuquKD2lTwAAAP0"]
[Sat Aug 29 05:08:15.565410 2026] [security2:error] [pid 1034096:tid 1034374] [client 213.209.159.223:49582] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/wp-content/mysql.sql"] [unique_id "apK9ny04twRPFuquKD2lUAAAAQA"]
[Sat Aug 29 05:08:15.571019 2026] [security2:error] [pid 1034096:tid 1034332] [client 20.104.49.130:45716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/chosen.php"] [unique_id "apK9ny04twRPFuquKD2lUQAAANY"]
[Sat Aug 29 05:08:15.601192 2026] [security2:error] [pid 1034096:tid 1034293] [client 20.104.104.62:22741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sellmylike.millionairebuildersclub.com"] [uri "/feokc.php"] [unique_id "apK9ny04twRPFuquKD2lUgAAAK8"]
[Sat Aug 29 05:08:15.619932 2026] [security2:error] [pid 1034096:tid 1034375] [client 20.104.49.130:43602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/classwithtostring.php"] [unique_id "apK9ny04twRPFuquKD2lVQAAAQE"]
[Sat Aug 29 05:08:15.620381 2026] [security2:error] [pid 1028675:tid 1028922] [client 213.209.159.223:41320] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/web/.env"] [unique_id "apK9n9dHPfW2QFvhmL4DewAAAHA"]
[Sat Aug 29 05:08:15.620666 2026] [security2:error] [pid 1028675:tid 1028904] [client 213.209.159.223:33702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/config/app.php"] [unique_id "apK9n9dHPfW2QFvhmL4DfAAAAF4"]
[Sat Aug 29 05:08:15.621077 2026] [security2:error] [pid 1034096:tid 1034348] [client 20.48.250.41:61725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/xs.php"] [unique_id "apK9ny04twRPFuquKD2lVwAAAOY"]
[Sat Aug 29 05:08:15.632991 2026] [security2:error] [pid 1034096:tid 1034321] [client 158.23.147.79:35225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/images/index.php"] [unique_id "apK9ny04twRPFuquKD2lWAAAAMs"]
[Sat Aug 29 05:08:15.644245 2026] [security2:error] [pid 1028675:tid 1028881] [client 4.205.62.107:21923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/wp-class.php"] [unique_id "apK9n9dHPfW2QFvhmL4DfgAAAEc"]
[Sat Aug 29 05:08:15.645117 2026] [security2:error] [pid 1034096:tid 1034262] [client 158.23.147.79:17542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/.well-known/index.php"] [unique_id "apK9ny04twRPFuquKD2lWQAAAJA"]
[Sat Aug 29 05:08:15.645482 2026] [security2:error] [pid 1034096:tid 1034357] [client 158.23.147.79:58743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-blog-header.php"] [unique_id "apK9ny04twRPFuquKD2lWgAAAO8"]
[Sat Aug 29 05:08:15.656445 2026] [security2:error] [pid 1028675:tid 1028872] [client 213.209.159.223:24893] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/src/.env"] [unique_id "apK9n9dHPfW2QFvhmL4DfwAAAD4"]
[Sat Aug 29 05:08:15.662394 2026] [security2:error] [pid 1028675:tid 1028812] [client 20.100.175.163:5481] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "annetteanddanny.strangeworx.com"] [uri "/1.php"] [unique_id "apK9n9dHPfW2QFvhmL4DgAAAAAI"]
[Sat Aug 29 05:08:15.662482 2026] [security2:error] [pid 1028675:tid 1028812] [client 20.100.175.163:5481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/1.php"] [unique_id "apK9n9dHPfW2QFvhmL4DgAAAAAI"]
[Sat Aug 29 05:08:15.672574 2026] [security2:error] [pid 1034096:tid 1034291] [client 213.209.159.223:62878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.greatdecisionsofcharlevoix.com"] [uri "/phpinfo.php3"] [unique_id "apK9ny04twRPFuquKD2lXAAAAK0"]
[Sat Aug 29 05:08:15.677659 2026] [security2:error] [pid 1028675:tid 1028915] [client 20.48.250.41:49462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/8.php"] [unique_id "apK9n9dHPfW2QFvhmL4DgQAAAGk"]
[Sat Aug 29 05:08:15.683685 2026] [security2:error] [pid 1028675:tid 1028851] [client 68.155.159.216:64018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9n9dHPfW2QFvhmL4DggAAACk"]
[Sat Aug 29 05:08:15.685036 2026] [security2:error] [pid 1034096:tid 1034289] [client 52.139.37.240:36687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/wp-content/plugins/ftde.php"] [unique_id "apK9ny04twRPFuquKD2lXQAAAKs"]
[Sat Aug 29 05:08:15.689733 2026] [security2:error] [pid 1028675:tid 1028823] [client 4.205.62.107:9161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/_js.jpg..bk.php"] [unique_id "apK9n9dHPfW2QFvhmL4DgwAAAA0"]
[Sat Aug 29 05:08:15.712444 2026] [security2:error] [pid 1028675:tid 1028911] [client 20.48.250.41:38798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/to.php"] [unique_id "apK9n9dHPfW2QFvhmL4DhQAAAGU"]
[Sat Aug 29 05:08:15.740870 2026] [security2:error] [pid 1034096:tid 1034339] [client 20.48.250.41:19513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/ws58.php"] [unique_id "apK9ny04twRPFuquKD2lYAAAAN0"]
[Sat Aug 29 05:08:15.743295 2026] [security2:error] [pid 1034096:tid 1034303] [client 40.83.93.50:9887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/ds.php"] [unique_id "apK9ny04twRPFuquKD2lYQAAALk"]
[Sat Aug 29 05:08:15.747601 2026] [security2:error] [pid 1034096:tid 1034353] [client 68.155.159.216:52804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/.well-known/content.php"] [unique_id "apK9ny04twRPFuquKD2lYgAAAOs"]
[Sat Aug 29 05:08:15.757779 2026] [security2:error] [pid 1028675:tid 1028878] [client 213.209.159.223:41320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ftp.greatdecisionsofcharlevoix.com"] [uri "/phpinfo.php3"] [unique_id "apK9n9dHPfW2QFvhmL4DhgAAAEQ"]
[Sat Aug 29 05:08:15.760126 2026] [security2:error] [pid 1028675:tid 1028892] [client 20.48.250.41:61714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/zu.php"] [unique_id "apK9n9dHPfW2QFvhmL4DhwAAAFI"]
[Sat Aug 29 05:08:15.785581 2026] [security2:error] [pid 1034096:tid 1034274] [client 20.196.209.81:10452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-content/config.php"] [unique_id "apK9ny04twRPFuquKD2lZQAAAJw"]
[Sat Aug 29 05:08:15.789878 2026] [security2:error] [pid 1034096:tid 1034283] [client 20.63.219.114:18527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/post.php"] [unique_id "apK9ny04twRPFuquKD2lZgAAAKU"]
[Sat Aug 29 05:08:15.791347 2026] [security2:error] [pid 1034096:tid 1034318] [client 158.23.147.79:17445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-mail.php"] [unique_id "apK9ny04twRPFuquKD2lZwAAAMg"]
[Sat Aug 29 05:08:15.799250 2026] [security2:error] [pid 1034096:tid 1034328] [client 20.63.219.114:15429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/xmlrpc.php0"] [unique_id "apK9ny04twRPFuquKD2lYwAAANI"]
[Sat Aug 29 05:08:15.831684 2026] [security2:error] [pid 1034096:tid 1034372] [client 4.205.62.107:25967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/zaza.php"] [unique_id "apK9ny04twRPFuquKD2laQAAAP4"]
[Sat Aug 29 05:08:15.846178 2026] [security2:error] [pid 1034096:tid 1034263] [client 4.205.62.107:21824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/cli_bootstrap.php"] [unique_id "apK9ny04twRPFuquKD2lagAAAJE"]
[Sat Aug 29 05:08:15.855123 2026] [security2:error] [pid 1028675:tid 1028935] [client 34.81.157.26:61620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.157.81.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/i.php"] [unique_id "apK9n9dHPfW2QFvhmL4DjQAAAH0"]
[Sat Aug 29 05:08:15.858421 2026] [security2:error] [pid 1034096:tid 1034360] [client 34.81.157.26:61706] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/application.env"] [unique_id "apK9ny04twRPFuquKD2lawAAAPI"]
[Sat Aug 29 05:08:15.859594 2026] [security2:error] [pid 1034096:tid 1034329] [client 34.81.157.26:61634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.157.81.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/pi.php"] [unique_id "apK9ny04twRPFuquKD2lbgAAANM"]
[Sat Aug 29 05:08:15.860225 2026] [security2:error] [pid 1028675:tid 1028896] [client 34.81.157.26:61718] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/.env"] [unique_id "apK9n9dHPfW2QFvhmL4DkQAAAFY"]
[Sat Aug 29 05:08:15.860671 2026] [security2:error] [pid 1034096:tid 1034306] [client 34.81.157.26:61694] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/.env~"] [unique_id "apK9ny04twRPFuquKD2lbAAAALw"]
[Sat Aug 29 05:08:15.862808 2026] [security2:error] [pid 1034096:tid 1034344] [client 34.81.157.26:61652] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/cgi-sys/404.html"] [unique_id "apK9ny04twRPFuquKD2lcAAAAOI"]
[Sat Aug 29 05:08:15.865342 2026] [security2:error] [pid 1028675:tid 1028879] [client 34.81.157.26:61734] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/_next/.env"] [unique_id "apK9n9dHPfW2QFvhmL4DkwAAAEU"]
[Sat Aug 29 05:08:15.865560 2026] [security2:error] [pid 1034096:tid 1034300] [client 34.81.157.26:61738] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.bash_history"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/.bash_history"] [unique_id "apK9ny04twRPFuquKD2lcgAAALY"]
[Sat Aug 29 05:08:15.869031 2026] [security2:error] [pid 1028675:tid 1028923] [client 40.83.93.50:9006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/class-walker-category-dropdown-class.php"] [unique_id "apK9n9dHPfW2QFvhmL4DlgAAAHE"]
[Sat Aug 29 05:08:15.872929 2026] [security2:error] [pid 1034096:tid 1034373] [client 20.48.250.41:38886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/thui.php"] [unique_id "apK9ny04twRPFuquKD2ldgAAAP8"]
[Sat Aug 29 05:08:15.882305 2026] [security2:error] [pid 1034096:tid 1034323] [client 52.139.37.240:36811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "apK9ny04twRPFuquKD2leAAAAM0"]
[Sat Aug 29 05:08:15.882702 2026] [core:error] [pid 1034096:tid 1034325] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:15.882717 2026] [core:error] [pid 1034096:tid 1034325] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:15.889867 2026] [security2:error] [pid 1034096:tid 1034280] [client 20.48.250.41:19533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/xs.php"] [unique_id "apK9ny04twRPFuquKD2leQAAAKI"]
[Sat Aug 29 05:08:15.906040 2026] [core:error] [pid 1034096:tid 1034378] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:15.906059 2026] [core:error] [pid 1034096:tid 1034378] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:15.915025 2026] [security2:error] [pid 1028675:tid 1028880] [client 4.205.62.107:53304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/admin-ajax.php"] [unique_id "apK9n9dHPfW2QFvhmL4DmQAAAEY"]
[Sat Aug 29 05:08:15.924072 2026] [security2:error] [pid 1034096:tid 1034268] [client 20.48.250.41:65168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/0x0x.php"] [unique_id "apK9ny04twRPFuquKD2lewAAAJY"]
[Sat Aug 29 05:08:15.926759 2026] [security2:error] [pid 1034096:tid 1034268] [client 213.209.159.223:49582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/php-info.php"] [unique_id "apK9ny04twRPFuquKD2lfAAAAJY"]
[Sat Aug 29 05:08:15.931325 2026] [security2:error] [pid 1034096:tid 1034350] [client 68.155.159.216:18256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/cong.php"] [unique_id "apK9ny04twRPFuquKD2lfgAAAOg"]
[Sat Aug 29 05:08:15.932845 2026] [core:error] [pid 1028675:tid 1028914] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:15.932863 2026] [core:error] [pid 1028675:tid 1028914] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:15.934969 2026] [security2:error] [pid 1028675:tid 1028910] [client 213.209.159.223:24893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/config/app.php"] [unique_id "apK9n9dHPfW2QFvhmL4DmwAAAGQ"]
[Sat Aug 29 05:08:15.935896 2026] [core:error] [pid 1034096:tid 1034314] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:15.935915 2026] [core:error] [pid 1034096:tid 1034314] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:15.936070 2026] [security2:error] [pid 1034096:tid 1034314] [client 34.81.157.26:0] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/index.php"] [unique_id "apK9ny04twRPFuquKD2lfQAAAMQ"]
[Sat Aug 29 05:08:15.938055 2026] [core:error] [pid 1034096:tid 1034285] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:15.938071 2026] [core:error] [pid 1034096:tid 1034285] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:15.938309 2026] [security2:error] [pid 1028675:tid 1028898] [client 34.81.157.26:61678] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/.env.prod"] [unique_id "apK9n9dHPfW2QFvhmL4DkgAAAFg"]
[Sat Aug 29 05:08:15.938692 2026] [core:error] [pid 1034096:tid 1034302] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:15.938710 2026] [core:error] [pid 1034096:tid 1034302] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:15.955083 2026] [security2:error] [pid 1034096:tid 1034347] [client 68.155.159.216:33636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/login.php"] [unique_id "apK9ny04twRPFuquKD2lggAAAOU"]
[Sat Aug 29 05:08:15.962617 2026] [core:error] [pid 1034096:tid 1034320] [client 47.79.13.164:49052] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:15.962630 2026] [core:error] [pid 1034096:tid 1034320] [client 47.79.13.164:49052] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:16.009197 2026] [security2:error] [pid 1034096:tid 1034294] [client 20.240.128.207:27547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-good.php"] [unique_id "apK9oC04twRPFuquKD2lhQAAALA"]
[Sat Aug 29 05:08:16.016469 2026] [security2:error] [pid 1034096:tid 1034316] [client 68.155.159.216:49298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-includes/js/index.php"] [unique_id "apK9oC04twRPFuquKD2lhgAAAMY"]
[Sat Aug 29 05:08:16.019673 2026] [security2:error] [pid 1034096:tid 1034371] [client 20.48.250.41:61806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/lanka.php"] [unique_id "apK9oC04twRPFuquKD2lhwAAAP0"]
[Sat Aug 29 05:08:16.020544 2026] [security2:error] [pid 1034096:tid 1034374] [client 20.48.250.41:19554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/zu.php"] [unique_id "apK9oC04twRPFuquKD2liAAAAQA"]
[Sat Aug 29 05:08:16.033709 2026] [security2:error] [pid 1028675:tid 1028918] [client 213.209.159.223:51916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "apK9oNdHPfW2QFvhmL4DnQAAAGw"]
[Sat Aug 29 05:08:16.037546 2026] [security2:error] [pid 1034096:tid 1034264] [client 213.209.159.223:12164] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/framework/.env"] [unique_id "apK9oC04twRPFuquKD2liQAAAJI"]
[Sat Aug 29 05:08:16.042987 2026] [security2:error] [pid 1034096:tid 1034293] [client 20.52.41.200:5275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-load.php"] [unique_id "apK9oC04twRPFuquKD2ligAAAK8"]
[Sat Aug 29 05:08:16.050247 2026] [security2:error] [pid 1034096:tid 1034251] [client 158.23.147.79:11348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/makeasmtp.php"] [unique_id "apK9oC04twRPFuquKD2liwAAAIU"]
[Sat Aug 29 05:08:16.055234 2026] [security2:error] [pid 1034096:tid 1034324] [client 20.203.141.11:24246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/yanz.php"] [unique_id "apK9oC04twRPFuquKD2ljAAAAM4"]
[Sat Aug 29 05:08:16.084805 2026] [security2:error] [pid 1034096:tid 1034265] [client 20.48.250.41:38854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/Jcrop.php"] [unique_id "apK9oC04twRPFuquKD2ljgAAAJM"]
[Sat Aug 29 05:08:16.095174 2026] [security2:error] [pid 1028675:tid 1028835] [client 20.48.250.41:65155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/166.php"] [unique_id "apK9oNdHPfW2QFvhmL4DngAAABk"]
[Sat Aug 29 05:08:16.099331 2026] [security2:error] [pid 1034096:tid 1034319] [client 158.23.147.79:6123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-content/languages/about.php"] [unique_id "apK9oC04twRPFuquKD2ljwAAAMk"]
[Sat Aug 29 05:08:16.136858 2026] [security2:error] [pid 1034096:tid 1034356] [client 158.23.147.79:5958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-admin/about.php"] [unique_id "apK9oC04twRPFuquKD2lkAAAAO4"]
[Sat Aug 29 05:08:16.138690 2026] [security2:error] [pid 1034096:tid 1034291] [client 20.104.49.130:52324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/ioxi-o.php"] [unique_id "apK9oC04twRPFuquKD2lkQAAAK0"]
[Sat Aug 29 05:08:16.154821 2026] [security2:error] [pid 1034096:tid 1034275] [client 20.48.250.41:61784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/gettest.php"] [unique_id "apK9oC04twRPFuquKD2lkwAAAJ0"]
[Sat Aug 29 05:08:16.154950 2026] [security2:error] [pid 1034096:tid 1034282] [client 20.63.219.114:10491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/content.php"] [unique_id "apK9oC04twRPFuquKD2llAAAAKQ"]
[Sat Aug 29 05:08:16.163653 2026] [security2:error] [pid 1034096:tid 1034363] [client 20.48.250.41:19495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/lanka.php"] [unique_id "apK9oC04twRPFuquKD2llQAAAPU"]
[Sat Aug 29 05:08:16.164697 2026] [security2:error] [pid 1034096:tid 1034361] [client 68.155.159.216:65035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-content/admin.php"] [unique_id "apK9oC04twRPFuquKD2llgAAAPM"]
[Sat Aug 29 05:08:16.167428 2026] [security2:error] [pid 1028675:tid 1028814] [client 68.155.159.216:16264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK9oNdHPfW2QFvhmL4DoQAAAAQ"]
[Sat Aug 29 05:08:16.172588 2026] [security2:error] [pid 1028675:tid 1028928] [client 20.63.219.114:15444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/flower.php"] [unique_id "apK9oNdHPfW2QFvhmL4DowAAAHY"]
[Sat Aug 29 05:08:16.173957 2026] [security2:error] [pid 1034096:tid 1034303] [client 213.209.159.223:12164] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/ikiwiki/.env"] [unique_id "apK9oC04twRPFuquKD2llwAAALk"]
[Sat Aug 29 05:08:16.179045 2026] [security2:error] [pid 1028675:tid 1028886] [client 52.139.37.240:36735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/z.php"] [unique_id "apK9oNdHPfW2QFvhmL4DpAAAAEw"]
[Sat Aug 29 05:08:16.184485 2026] [security2:error] [pid 1034096:tid 1034315] [client 68.155.159.216:14298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-admin/about.php"] [unique_id "apK9oC04twRPFuquKD2lmAAAAMU"]
[Sat Aug 29 05:08:16.208518 2026] [security2:error] [pid 1034096:tid 1034354] [client 158.23.147.79:32763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK9oC04twRPFuquKD2lmQAAAOw"]
[Sat Aug 29 05:08:16.208536 2026] [security2:error] [pid 1034096:tid 1034269] [client 20.196.209.81:13446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-content/cong.php"] [unique_id "apK9oC04twRPFuquKD2lmgAAAJc"]
[Sat Aug 29 05:08:16.211981 2026] [security2:error] [pid 1028675:tid 1028867] [client 68.155.159.216:65107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/admin.php"] [unique_id "apK9oNdHPfW2QFvhmL4DpQAAADk"]
[Sat Aug 29 05:08:16.218488 2026] [security2:error] [pid 1034096:tid 1034375] [client 40.83.93.50:9173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/GOD.php"] [unique_id "apK9oC04twRPFuquKD2lmwAAAQE"]
[Sat Aug 29 05:08:16.252918 2026] [security2:error] [pid 1034096:tid 1034358] [client 20.48.250.41:38891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/ws58.php"] [unique_id "apK9oC04twRPFuquKD2lnQAAAPA"]
[Sat Aug 29 05:08:16.285379 2026] [security2:error] [pid 1034096:tid 1034360] [client 68.155.159.216:30596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/atomlib.php"] [unique_id "apK9oC04twRPFuquKD2lnwAAAPI"]
[Sat Aug 29 05:08:16.309630 2026] [security2:error] [pid 1034096:tid 1034300] [client 213.209.159.223:12164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/config.inc.php"] [unique_id "apK9oC04twRPFuquKD2loAAAALY"]
[Sat Aug 29 05:08:16.316804 2026] [security2:error] [pid 1034096:tid 1034373] [client 20.48.250.41:19481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/gettest.php"] [unique_id "apK9oC04twRPFuquKD2loQAAAP8"]
[Sat Aug 29 05:08:16.333860 2026] [security2:error] [pid 1034096:tid 1034259] [client 20.48.250.41:61712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/35.php"] [unique_id "apK9oC04twRPFuquKD2logAAAI0"]
[Sat Aug 29 05:08:16.335264 2026] [security2:error] [pid 1034096:tid 1034332] [client 20.197.61.180:10666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/backup.php"] [unique_id "apK9oC04twRPFuquKD2lowAAANY"]
[Sat Aug 29 05:08:16.340761 2026] [security2:error] [pid 1028675:tid 1028832] [client 213.209.159.223:17392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "apK9oNdHPfW2QFvhmL4DpwAAABY"]
[Sat Aug 29 05:08:16.342398 2026] [core:error] [pid 1034096:tid 1034262] [client 20.100.175.163:29911] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:16.342409 2026] [core:error] [pid 1034096:tid 1034262] [client 20.100.175.163:29911] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:16.345374 2026] [security2:error] [pid 1034096:tid 1034284] [client 20.104.49.130:53821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/666.php"] [unique_id "apK9oC04twRPFuquKD2lpwAAAKY"]
[Sat Aug 29 05:08:16.375933 2026] [security2:error] [pid 1034096:tid 1034253] [client 40.83.93.50:9867] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "davidseaver.com"] [uri "/1.php7"] [unique_id "apK9oC04twRPFuquKD2lqQAAAIc"]
[Sat Aug 29 05:08:16.376012 2026] [security2:error] [pid 1034096:tid 1034253] [client 40.83.93.50:9867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/1.php7"] [unique_id "apK9oC04twRPFuquKD2lqQAAAIc"]
[Sat Aug 29 05:08:16.385874 2026] [security2:error] [pid 1034096:tid 1034325] [client 52.139.37.240:36830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/f35.php"] [unique_id "apK9oC04twRPFuquKD2lqwAAAM8"]
[Sat Aug 29 05:08:16.388102 2026] [security2:error] [pid 1034096:tid 1034346] [client 20.48.250.41:38878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/xs.php"] [unique_id "apK9oC04twRPFuquKD2lrAAAAOQ"]
[Sat Aug 29 05:08:16.401654 2026] [security2:error] [pid 1034096:tid 1034299] [client 158.23.147.79:49796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/.well-known/content.php"] [unique_id "apK9oC04twRPFuquKD2lrgAAALU"]
[Sat Aug 29 05:08:16.431138 2026] [security2:error] [pid 1034096:tid 1034290] [client 68.155.159.216:23507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK9oC04twRPFuquKD2lsAAAAKw"]
[Sat Aug 29 05:08:16.463048 2026] [security2:error] [pid 1034096:tid 1034359] [client 20.48.250.41:19556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/35.php"] [unique_id "apK9oC04twRPFuquKD2lsgAAAPE"]
[Sat Aug 29 05:08:16.470683 2026] [security2:error] [pid 1028675:tid 1028915] [client 20.48.250.41:61713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/maraz.php"] [unique_id "apK9oNdHPfW2QFvhmL4DqwAAAGk"]
[Sat Aug 29 05:08:16.472753 2026] [security2:error] [pid 1034096:tid 1034266] [client 158.23.147.79:26567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK9oC04twRPFuquKD2ltAAAAJQ"]
[Sat Aug 29 05:08:16.475744 2026] [security2:error] [pid 1034096:tid 1034347] [client 20.48.250.41:62125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/h2a2ck.php"] [unique_id "apK9oC04twRPFuquKD2ltQAAAOU"]
[Sat Aug 29 05:08:16.504191 2026] [security2:error] [pid 1034096:tid 1034367] [client 20.240.128.207:22107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "apK9oC04twRPFuquKD2ltwAAAPk"]
[Sat Aug 29 05:08:16.511679 2026] [security2:error] [pid 1034096:tid 1034267] [client 20.63.219.114:10459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/wxo.php"] [unique_id "apK9oC04twRPFuquKD2luAAAAJU"]
[Sat Aug 29 05:08:16.528831 2026] [security2:error] [pid 1034096:tid 1034297] [client 20.63.219.114:15480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/meta.php"] [unique_id "apK9oC04twRPFuquKD2luQAAALM"]
[Sat Aug 29 05:08:16.549316 2026] [security2:error] [pid 1034096:tid 1034374] [client 68.155.159.216:1952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/login.php"] [unique_id "apK9oC04twRPFuquKD2lugAAAQA"]
[Sat Aug 29 05:08:16.553640 2026] [security2:error] [pid 1034096:tid 1034264] [client 20.48.250.41:38830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/zu.php"] [unique_id "apK9oC04twRPFuquKD2luwAAAJI"]
[Sat Aug 29 05:08:16.566696 2026] [security2:error] [pid 1034096:tid 1034327] [client 20.203.141.11:27271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/autoload_classmap.php"] [unique_id "apK9oC04twRPFuquKD2lvQAAANE"]
[Sat Aug 29 05:08:16.569539 2026] [security2:error] [pid 1034096:tid 1034324] [client 68.155.159.216:6046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK9oC04twRPFuquKD2lvgAAAM4"]
[Sat Aug 29 05:08:16.581283 2026] [security2:error] [pid 1028675:tid 1028888] [client 52.139.37.240:35846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/file61.php"] [unique_id "apK9oNdHPfW2QFvhmL4DrQAAAE4"]
[Sat Aug 29 05:08:16.586779 2026] [security2:error] [pid 1034096:tid 1034270] [client 213.209.159.223:57536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/___proxy_subdomain_whm/web/.env"] [unique_id "apK9oC04twRPFuquKD2lvwAAAJg"]
[Sat Aug 29 05:08:16.588918 2026] [security2:error] [pid 1034096:tid 1034298] [client 4.205.62.107:58453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/app.default.php"] [unique_id "apK9oC04twRPFuquKD2lwAAAALQ"]
[Sat Aug 29 05:08:16.603905 2026] [security2:error] [pid 1034096:tid 1034286] [client 20.196.209.81:17327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-content/content.php"] [unique_id "apK9oC04twRPFuquKD2lwQAAAKg"]
[Sat Aug 29 05:08:16.626486 2026] [security2:error] [pid 1028675:tid 1028937] [client 103.240.76.112:49666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK9oNdHPfW2QFvhmL4DrgAAAH8"]
[Sat Aug 29 05:08:16.626604 2026] [security2:error] [pid 1028675:tid 1028937] [client 103.240.76.112:49666] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK9oNdHPfW2QFvhmL4DrgAAAH8"]
[Sat Aug 29 05:08:16.639063 2026] [security2:error] [pid 1034096:tid 1034345] [client 20.104.104.62:37646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/k8.php"] [unique_id "apK9oC04twRPFuquKD2lwgAAAOM"]
[Sat Aug 29 05:08:16.643855 2026] [security2:error] [pid 1028675:tid 1028892] [client 20.48.250.41:61735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/kbfr.php"] [unique_id "apK9oNdHPfW2QFvhmL4DsAAAAFI"]
[Sat Aug 29 05:08:16.644610 2026] [security2:error] [pid 1034096:tid 1034356] [client 20.52.41.200:5375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/a.php"] [unique_id "apK9oC04twRPFuquKD2lwwAAAO4"]
[Sat Aug 29 05:08:16.644849 2026] [security2:error] [pid 1034096:tid 1034319] [client 20.48.250.41:19485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/maraz.php"] [unique_id "apK9oC04twRPFuquKD2lxAAAAMk"]
[Sat Aug 29 05:08:16.662287 2026] [security2:error] [pid 1034096:tid 1034258] [client 68.155.159.216:38691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK9oC04twRPFuquKD2lxQAAAIw"]
[Sat Aug 29 05:08:16.682784 2026] [security2:error] [pid 1028675:tid 1028860] [client 20.48.250.41:38794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/lanka.php"] [unique_id "apK9oNdHPfW2QFvhmL4DsQAAADI"]
[Sat Aug 29 05:08:16.686478 2026] [security2:error] [pid 1034096:tid 1034304] [client 40.83.93.50:11095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/ggfi.php"] [unique_id "apK9oC04twRPFuquKD2lxwAAALo"]
[Sat Aug 29 05:08:16.719482 2026] [security2:error] [pid 1034096:tid 1034340] [client 213.209.159.223:28170] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/system/.env"] [unique_id "apK9oC04twRPFuquKD2lyAAAAN4"]
[Sat Aug 29 05:08:16.721668 2026] [security2:error] [pid 1034096:tid 1034269] [client 213.209.159.223:57536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whm.greatdecisionsofcharlevoix.com"] [uri "/phpinfo.php3"] [unique_id "apK9oC04twRPFuquKD2lyQAAAJc"]
[Sat Aug 29 05:08:16.750709 2026] [security2:error] [pid 1034096:tid 1034365] [client 158.23.147.79:53140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK9oC04twRPFuquKD2lywAAAPc"]
[Sat Aug 29 05:08:16.756292 2026] [security2:error] [pid 1028675:tid 1028901] [client 20.48.250.41:65285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/error_log.php"] [unique_id "apK9oNdHPfW2QFvhmL4DswAAAFs"]
[Sat Aug 29 05:08:16.769594 2026] [security2:error] [pid 1034096:tid 1034362] [client 20.104.104.62:40105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/alog.php"] [unique_id "apK9oC04twRPFuquKD2lzwAAAPQ"]
[Sat Aug 29 05:08:16.771051 2026] [security2:error] [pid 1034096:tid 1034329] [client 213.209.159.223:1830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/info.php.bak"] [unique_id "apK9oC04twRPFuquKD2l0AAAANM"]
[Sat Aug 29 05:08:16.775113 2026] [security2:error] [pid 1034096:tid 1034354] [client 52.139.37.240:36679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/mah.php"] [unique_id "apK9oC04twRPFuquKD2l0QAAAOw"]
[Sat Aug 29 05:08:16.775500 2026] [security2:error] [pid 1028675:tid 1028883] [client 20.48.250.41:61793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/wp-act.php"] [unique_id "apK9oNdHPfW2QFvhmL4DtAAAAEk"]
[Sat Aug 29 05:08:16.783438 2026] [security2:error] [pid 1034096:tid 1034323] [client 20.48.250.41:19457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/kbfr.php"] [unique_id "apK9oC04twRPFuquKD2l0gAAAM0"]
[Sat Aug 29 05:08:16.785536 2026] [security2:error] [pid 1034096:tid 1034373] [client 158.23.147.79:35215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK9oC04twRPFuquKD2l0wAAAP8"]
[Sat Aug 29 05:08:16.801825 2026] [security2:error] [pid 1034096:tid 1034284] [client 20.48.160.90:65318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9oC04twRPFuquKD2l1QAAAKY"]
[Sat Aug 29 05:08:16.822811 2026] [security2:error] [pid 1034096:tid 1034253] [client 4.205.62.107:22450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/database.php"] [unique_id "apK9oC04twRPFuquKD2l1gAAAIc"]
[Sat Aug 29 05:08:16.828140 2026] [security2:error] [pid 1028675:tid 1028880] [client 20.104.104.62:28952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sellmylike.millionairebuildersclub.com"] [uri "/k.php"] [unique_id "apK9oNdHPfW2QFvhmL4DtgAAAEY"]
[Sat Aug 29 05:08:16.836607 2026] [security2:error] [pid 1028675:tid 1028849] [client 20.48.250.41:38799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/gettest.php"] [unique_id "apK9oNdHPfW2QFvhmL4DtwAAACc"]
[Sat Aug 29 05:08:16.847723 2026] [security2:error] [pid 1034096:tid 1034281] [client 158.23.147.79:17501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/radio.php"] [unique_id "apK9oC04twRPFuquKD2l2QAAAKM"]
[Sat Aug 29 05:08:16.854186 2026] [security2:error] [pid 1034096:tid 1034308] [client 213.209.159.223:28170] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/wp-config.php.backup"] [unique_id "apK9oC04twRPFuquKD2l2gAAAL4"]
[Sat Aug 29 05:08:16.873511 2026] [security2:error] [pid 1034096:tid 1034306] [client 4.205.62.107:8751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/setup-config.php"] [unique_id "apK9oC04twRPFuquKD2l2wAAALw"]
[Sat Aug 29 05:08:16.879300 2026] [security2:error] [pid 1028675:tid 1028930] [client 40.83.93.50:8421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/ds.php"] [unique_id "apK9oNdHPfW2QFvhmL4DuQAAAHg"]
[Sat Aug 29 05:08:16.891159 2026] [security2:error] [pid 1034096:tid 1034378] [client 213.209.159.223:42571] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/web/.env"] [unique_id "apK9oC04twRPFuquKD2l3wAAAQQ"]
[Sat Aug 29 05:08:16.900767 2026] [security2:error] [pid 1028675:tid 1028902] [client 158.23.147.79:17586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/cgi-bin/index.php"] [unique_id "apK9oNdHPfW2QFvhmL4DuwAAAFw"]
[Sat Aug 29 05:08:16.912942 2026] [security2:error] [pid 1028675:tid 1028813] [client 20.104.104.62:37651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/adin.php"] [unique_id "apK9oNdHPfW2QFvhmL4DvAAAAAM"]
[Sat Aug 29 05:08:16.922665 2026] [security2:error] [pid 1034096:tid 1034358] [client 20.100.175.163:1197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/s.php"] [unique_id "apK9oC04twRPFuquKD2l4gAAAPA"]
[Sat Aug 29 05:08:16.928594 2026] [security2:error] [pid 1028675:tid 1028903] [client 57.141.14.83:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/page/29/"] [unique_id "apK9oNdHPfW2QFvhmL4DvgAAAF0"]
[Sat Aug 29 05:08:16.945946 2026] [security2:error] [pid 1028675:tid 1028833] [client 20.48.250.41:19476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/wp-act.php"] [unique_id "apK9oNdHPfW2QFvhmL4DvwAAABc"]
[Sat Aug 29 05:08:16.948419 2026] [security2:error] [pid 1028675:tid 1028928] [client 20.48.160.90:65302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9oNdHPfW2QFvhmL4DwAAAAHY"]
[Sat Aug 29 05:08:16.949255 2026] [security2:error] [pid 1028675:tid 1028863] [client 20.48.250.41:65161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/403.php"] [unique_id "apK9oNdHPfW2QFvhmL4DwQAAADU"]
[Sat Aug 29 05:08:16.963240 2026] [security2:error] [pid 1034096:tid 1034278] [client 4.205.62.107:65417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/u88.php"] [unique_id "apK9oC04twRPFuquKD2l5AAAAKA"]
[Sat Aug 29 05:08:16.970079 2026] [security2:error] [pid 1034096:tid 1034267] [client 52.139.37.240:36697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/mini.php"] [unique_id "apK9oC04twRPFuquKD2l5gAAAJU"]
[Sat Aug 29 05:08:16.979629 2026] [security2:error] [pid 1034096:tid 1034324] [client 20.48.250.41:61767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/24.php"] [unique_id "apK9oC04twRPFuquKD2l5wAAAM4"]
[Sat Aug 29 05:08:16.981586 2026] [security2:error] [pid 1034096:tid 1034349] [client 20.63.219.114:10440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/as.php"] [unique_id "apK9oC04twRPFuquKD2l6AAAAOc"]
[Sat Aug 29 05:08:16.986880 2026] [security2:error] [pid 1034096:tid 1034286] [client 4.205.62.107:22159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/wander.php"] [unique_id "apK9oC04twRPFuquKD2l6QAAAKg"]
[Sat Aug 29 05:08:16.997409 2026] [security2:error] [pid 1034096:tid 1034344] [client 20.196.209.81:9075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-content/core.php"] [unique_id "apK9oC04twRPFuquKD2l6gAAAOI"]
[Sat Aug 29 05:08:17.000052 2026] [security2:error] [pid 1034096:tid 1034330] [client 20.63.219.114:15441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/randkeyword.php"] [unique_id "apK9oC04twRPFuquKD2l6wAAANQ"]
[Sat Aug 29 05:08:17.002253 2026] [security2:error] [pid 1034096:tid 1034299] [client 20.240.128.207:31066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/abcd.php"] [unique_id "apK9oS04twRPFuquKD2l7AAAALU"]
[Sat Aug 29 05:08:17.024479 2026] [security2:error] [pid 1034096:tid 1034371] [client 52.139.37.240:23821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/alfa.php"] [unique_id "apK9oS04twRPFuquKD2l7QAAAP0"]
[Sat Aug 29 05:08:17.027238 2026] [security2:error] [pid 1034096:tid 1034374] [client 20.104.104.62:28827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sellmylike.millionairebuildersclub.com"] [uri "/tx78.php"] [unique_id "apK9oS04twRPFuquKD2l7gAAAQA"]
[Sat Aug 29 05:08:17.028592 2026] [security2:error] [pid 1034096:tid 1034291] [client 213.209.159.223:42571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "smtp.greatdecisionsofcharlevoix.com"] [uri "/phpinfo.php3"] [unique_id "apK9oS04twRPFuquKD2l7wAAAK0"]
[Sat Aug 29 05:08:17.041552 2026] [security2:error] [pid 1034096:tid 1034319] [client 20.48.250.41:38842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/35.php"] [unique_id "apK9oS04twRPFuquKD2l8AAAAMk"]
[Sat Aug 29 05:08:17.042766 2026] [security2:error] [pid 1034096:tid 1034277] [client 20.104.104.62:37673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/sf9.php"] [unique_id "apK9oS04twRPFuquKD2l8QAAAJ8"]
[Sat Aug 29 05:08:17.048723 2026] [security2:error] [pid 1034096:tid 1034258] [client 4.205.62.107:53272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/ms.php"] [unique_id "apK9oS04twRPFuquKD2l8gAAAIw"]
[Sat Aug 29 05:08:17.060071 2026] [security2:error] [pid 1034096:tid 1034377] [client 20.197.61.180:9255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/haiterus.php"] [unique_id "apK9oS04twRPFuquKD2l9AAAAQM"]
[Sat Aug 29 05:08:17.070130 2026] [security2:error] [pid 1034096:tid 1034361] [client 68.155.159.216:33652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/hehehehe.php"] [unique_id "apK9oS04twRPFuquKD2l9QAAAPM"]
[Sat Aug 29 05:08:17.086305 2026] [security2:error] [pid 1028675:tid 1028835] [client 20.203.141.11:17876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/bi.php"] [unique_id "apK9oddHPfW2QFvhmL4DxQAAABk"]
[Sat Aug 29 05:08:17.088099 2026] [security2:error] [pid 1034096:tid 1034272] [client 20.48.250.41:65362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/cytyr.php"] [unique_id "apK9oS04twRPFuquKD2l9gAAAJo"]
[Sat Aug 29 05:08:17.093865 2026] [security2:error] [pid 1028675:tid 1028825] [client 20.48.250.41:19595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/24.php"] [unique_id "apK9oddHPfW2QFvhmL4DxgAAAA8"]
[Sat Aug 29 05:08:17.097807 2026] [security2:error] [pid 1028675:tid 1028884] [client 20.52.41.200:4569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/u.php"] [unique_id "apK9oddHPfW2QFvhmL4DxwAAAEo"]
[Sat Aug 29 05:08:17.113694 2026] [security2:error] [pid 1034096:tid 1034342] [client 20.48.160.90:64133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/ap.php"] [unique_id "apK9oS04twRPFuquKD2l9wAAAOA"]
[Sat Aug 29 05:08:17.117175 2026] [security2:error] [pid 1034096:tid 1034360] [client 68.155.159.216:49315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-content/index.php"] [unique_id "apK9oS04twRPFuquKD2l-AAAAPI"]
[Sat Aug 29 05:08:17.138670 2026] [security2:error] [pid 1034096:tid 1034297] [client 62.60.130.128:61671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.130.60.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "apK9oS04twRPFuquKD2l-QAAALM"]
[Sat Aug 29 05:08:17.151547 2026] [security2:error] [pid 1028675:tid 1028888] [client 68.155.159.216:18241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-includes/js/index.php"] [unique_id "apK9oddHPfW2QFvhmL4DyQAAAE4"]
[Sat Aug 29 05:08:17.161348 2026] [security2:error] [pid 1034096:tid 1034293] [client 40.83.93.50:8478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/alfa-rex.php"] [unique_id "apK9oS04twRPFuquKD2l-gAAAK8"]
[Sat Aug 29 05:08:17.164081 2026] [security2:error] [pid 1034096:tid 1034332] [client 20.104.49.130:43782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/ops.php"] [unique_id "apK9oS04twRPFuquKD2l-wAAANY"]
[Sat Aug 29 05:08:17.166931 2026] [security2:error] [pid 1034096:tid 1034283] [client 52.139.37.240:36857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/v.php"] [unique_id "apK9oS04twRPFuquKD2l_AAAAKU"]
[Sat Aug 29 05:08:17.180965 2026] [security2:error] [pid 1034096:tid 1034312] [client 213.209.159.223:12222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/phpinfo.php.bak"] [unique_id "apK9oS04twRPFuquKD2l_QAAAMI"]
[Sat Aug 29 05:08:17.184701 2026] [security2:error] [pid 1034096:tid 1034295] [client 158.23.147.79:11462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK9oS04twRPFuquKD2l_wAAALE"]
[Sat Aug 29 05:08:17.189293 2026] [security2:error] [pid 1034096:tid 1034350] [client 20.104.104.62:37637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/lte7.php"] [unique_id "apK9oS04twRPFuquKD2mAAAAAOg"]
[Sat Aug 29 05:08:17.198915 2026] [security2:error] [pid 1034096:tid 1034310] [client 158.23.147.79:6117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-content/banners/about.php"] [unique_id "apK9oS04twRPFuquKD2mAQAAAMA"]
[Sat Aug 29 05:08:17.203423 2026] [security2:error] [pid 1034096:tid 1034328] [client 20.48.250.41:61791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/155.php"] [unique_id "apK9oS04twRPFuquKD2mAgAAANI"]
[Sat Aug 29 05:08:17.216393 2026] [security2:error] [pid 1034096:tid 1034281] [client 20.48.250.41:38803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/maraz.php"] [unique_id "apK9oS04twRPFuquKD2mAwAAAKM"]
[Sat Aug 29 05:08:17.219995 2026] [security2:error] [pid 1034096:tid 1034373] [client 20.104.104.62:29195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sellmylike.millionairebuildersclub.com"] [uri "/wp-content/themes/admin.php"] [unique_id "apK9oS04twRPFuquKD2mBAAAAP8"]
[Sat Aug 29 05:08:17.222392 2026] [security2:error] [pid 1034096:tid 1034280] [client 52.139.37.240:23937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/admin/controller/extension/extension/ultra.php"] [unique_id "apK9oS04twRPFuquKD2mBQAAAKI"]
[Sat Aug 29 05:08:17.246147 2026] [security2:error] [pid 1034096:tid 1034255] [client 68.155.159.216:24420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-admin/css/index.php"] [unique_id "apK9oS04twRPFuquKD2mBgAAAIk"]
[Sat Aug 29 05:08:17.256983 2026] [security2:error] [pid 1034096:tid 1034266] [client 20.48.250.41:19521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/155.php"] [unique_id "apK9oS04twRPFuquKD2mBwAAAJQ"]
[Sat Aug 29 05:08:17.259664 2026] [security2:error] [pid 1028675:tid 1028811] [client 158.23.147.79:6141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-content/uploads/index.php"] [unique_id "apK9oddHPfW2QFvhmL4D2AAAAAE"]
[Sat Aug 29 05:08:17.265419 2026] [security2:error] [pid 1034096:tid 1034309] [client 68.155.159.216:64489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/xmlrpc.php"] [unique_id "apK9oS04twRPFuquKD2mCAAAAL8"]
[Sat Aug 29 05:08:17.273747 2026] [security2:error] [pid 1034096:tid 1034378] [client 68.155.159.216:16140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/images/index.php"] [unique_id "apK9oS04twRPFuquKD2mCgAAAQQ"]
[Sat Aug 29 05:08:17.311136 2026] [security2:error] [pid 1028675:tid 1028846] [client 68.155.159.216:65078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-admin/admin.php"] [unique_id "apK9oddHPfW2QFvhmL4D2wAAACQ"]
[Sat Aug 29 05:08:17.314114 2026] [security2:error] [pid 1034096:tid 1034278] [client 158.23.147.79:32587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK9oS04twRPFuquKD2mDQAAAKA"]
[Sat Aug 29 05:08:17.326624 2026] [security2:error] [pid 1028675:tid 1028897] [client 20.48.160.90:64191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/media.php"] [unique_id "apK9oddHPfW2QFvhmL4D3AAAAFc"]
[Sat Aug 29 05:08:17.334241 2026] [security2:error] [pid 1034096:tid 1034335] [client 158.23.184.117:57803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/2.php"] [unique_id "apK9oS04twRPFuquKD2mDgAAANk"]
[Sat Aug 29 05:08:17.337519 2026] [security2:error] [pid 1028675:tid 1028896] [client 20.104.104.62:37671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/tanjiro.php"] [unique_id "apK9oddHPfW2QFvhmL4D3QAAAFY"]
[Sat Aug 29 05:08:17.350968 2026] [core:error] [pid 1034096:tid 1034161] [remote 74.7.241.191:41578] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:17.350987 2026] [core:error] [pid 1034096:tid 1034161] [remote 74.7.241.191:41578] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:17.351021 2026] [security2:error] [pid 1034096:tid 1034285] [client 20.63.219.114:18530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/room.php"] [unique_id "apK9oS04twRPFuquKD2mEAAAAKc"]
[Sat Aug 29 05:08:17.351146 2026] [security2:error] [pid 1034096:tid 1034294] [client 74.7.241.191:41578] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "www.jennyandneil.strangeworx.com"] [uri "/index.php"] [unique_id "apK9oS04twRPFuquKD2mDwAAsCc"]
[Sat Aug 29 05:08:17.354995 2026] [security2:error] [pid 1028675:tid 1028908] [client 20.48.250.41:38859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/kbfr.php"] [unique_id "apK9oddHPfW2QFvhmL4D3gAAAGI"]
[Sat Aug 29 05:08:17.355613 2026] [security2:error] [pid 1034096:tid 1034376] [client 40.83.93.50:9204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/GOD.php"] [unique_id "apK9oS04twRPFuquKD2mEQAAAQI"]
[Sat Aug 29 05:08:17.356373 2026] [security2:error] [pid 1034096:tid 1034357] [client 195.178.110.247:17010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lizgoodwintherapy.com"] [uri "/index.php"] [unique_id "apK9oS04twRPFuquKD2mEgAAAO8"]
[Sat Aug 29 05:08:17.362573 2026] [security2:error] [pid 1034096:tid 1034352] [client 52.139.37.240:35884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK9oS04twRPFuquKD2mFAAAAOo"]
[Sat Aug 29 05:08:17.368596 2026] [security2:error] [pid 1028675:tid 1028877] [client 68.155.159.216:9242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/cong.php"] [unique_id "apK9oddHPfW2QFvhmL4D3wAAAEM"]
[Sat Aug 29 05:08:17.370623 2026] [security2:error] [pid 1034096:tid 1034263] [client 20.48.250.41:61719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/file.php"] [unique_id "apK9oS04twRPFuquKD2mFQAAAJE"]
[Sat Aug 29 05:08:17.382082 2026] [security2:error] [pid 1034096:tid 1034355] [client 20.48.250.41:65171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/galer.php"] [unique_id "apK9oS04twRPFuquKD2mFgAAAO0"]
[Sat Aug 29 05:08:17.385209 2026] [security2:error] [pid 1034096:tid 1034344] [client 68.155.159.216:30683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/lv.php"] [unique_id "apK9oS04twRPFuquKD2mFwAAAOI"]
[Sat Aug 29 05:08:17.392660 2026] [security2:error] [pid 1034096:tid 1034347] [client 20.63.219.114:8836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/goods.php"] [unique_id "apK9oS04twRPFuquKD2mGAAAAOU"]
[Sat Aug 29 05:08:17.405597 2026] [security2:error] [pid 1028675:tid 1028923] [client 158.23.184.117:55673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/fff.php"] [unique_id "apK9oddHPfW2QFvhmL4D4gAAAHE"]
[Sat Aug 29 05:08:17.406986 2026] [security2:error] [pid 1028675:tid 1028887] [client 20.196.209.81:10447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-content/db-status.php"] [unique_id "apK9oddHPfW2QFvhmL4D4wAAAE0"]
[Sat Aug 29 05:08:17.414915 2026] [security2:error] [pid 1034096:tid 1034268] [client 20.104.104.62:22782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sellmylike.millionairebuildersclub.com"] [uri "/wp-content/sallu.php"] [unique_id "apK9oS04twRPFuquKD2mGgAAAJY"]
[Sat Aug 29 05:08:17.419786 2026] [security2:error] [pid 1028675:tid 1028860] [client 20.100.175.163:1200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/test1.php"] [unique_id "apK9oddHPfW2QFvhmL4D5gAAADI"]
[Sat Aug 29 05:08:17.420879 2026] [security2:error] [pid 1034096:tid 1034349] [client 52.139.37.240:23863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/lock360.php"] [unique_id "apK9oS04twRPFuquKD2mGwAAAOc"]
[Sat Aug 29 05:08:17.432702 2026] [security2:error] [pid 1034096:tid 1034356] [client 20.48.250.41:19544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/file.php"] [unique_id "apK9oS04twRPFuquKD2mHAAAAO4"]
[Sat Aug 29 05:08:17.476072 2026] [security2:error] [pid 1028675:tid 1028898] [client 158.23.184.117:31693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/.well-known/maintenance.php"] [unique_id "apK9oddHPfW2QFvhmL4D5wAAAFg"]
[Sat Aug 29 05:08:17.476825 2026] [security2:error] [pid 1034096:tid 1034345] [client 158.23.184.117:20541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/222.php"] [unique_id "apK9oS04twRPFuquKD2mIAAAAOM"]
[Sat Aug 29 05:08:17.496716 2026] [security2:error] [pid 1034096:tid 1034324] [client 20.240.128.207:23462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-access.php"] [unique_id "apK9oS04twRPFuquKD2mIgAAAM4"]
[Sat Aug 29 05:08:17.497859 2026] [security2:error] [pid 1028675:tid 1028866] [client 20.104.104.62:64311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/Rk41.php"] [unique_id "apK9oddHPfW2QFvhmL4D6AAAADg"]
[Sat Aug 29 05:08:17.500717 2026] [security2:error] [pid 1028675:tid 1028927] [client 20.48.250.41:38846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/wp-act.php"] [unique_id "apK9oddHPfW2QFvhmL4D6QAAAHU"]
[Sat Aug 29 05:08:17.510784 2026] [security2:error] [pid 1034096:tid 1034282] [client 158.23.184.117:2752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/wp-includes/PHPMailer.php"] [unique_id "apK9oS04twRPFuquKD2mJAAAAKQ"]
[Sat Aug 29 05:08:17.519622 2026] [security2:error] [pid 1034096:tid 1034286] [client 195.178.110.247:33726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lizgoodwintherapy.com"] [uri "/index.php"] [unique_id "apK9oS04twRPFuquKD2mJQAAAKg"]
[Sat Aug 29 05:08:17.539218 2026] [security2:error] [pid 1034096:tid 1034321] [client 158.23.147.79:49799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/cong.php"] [unique_id "apK9oS04twRPFuquKD2mJgAAAMs"]
[Sat Aug 29 05:08:17.547125 2026] [security2:error] [pid 1034096:tid 1034340] [client 68.155.159.216:23537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK9oS04twRPFuquKD2mJwAAAN4"]
[Sat Aug 29 05:08:17.551407 2026] [security2:error] [pid 1034096:tid 1034371] [client 20.52.41.200:5279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/r.php"] [unique_id "apK9oS04twRPFuquKD2mKAAAAP0"]
[Sat Aug 29 05:08:17.552899 2026] [security2:error] [pid 1034096:tid 1034272] [client 158.23.184.117:2756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/.tmb/dropdown.php"] [unique_id "apK9oS04twRPFuquKD2mKQAAAJo"]
[Sat Aug 29 05:08:17.557365 2026] [security2:error] [pid 1034096:tid 1034303] [client 52.139.37.240:35871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "apK9oS04twRPFuquKD2mKgAAALk"]
[Sat Aug 29 05:08:17.565375 2026] [security2:error] [pid 1034096:tid 1034299] [client 20.203.141.11:12584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/cc.php"] [unique_id "apK9oS04twRPFuquKD2mKwAAALU"]
[Sat Aug 29 05:08:17.580843 2026] [security2:error] [pid 1034096:tid 1034297] [client 20.104.104.62:53829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/Cok.php"] [unique_id "apK9oS04twRPFuquKD2mLQAAALM"]
[Sat Aug 29 05:08:17.591529 2026] [security2:error] [pid 1034096:tid 1034293] [client 20.48.160.90:65296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/adminfuns.php"] [unique_id "apK9oS04twRPFuquKD2mLwAAAK8"]
[Sat Aug 29 05:08:17.606982 2026] [security2:error] [pid 1034096:tid 1034342] [client 20.104.104.62:22732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sellmylike.millionairebuildersclub.com"] [uri "/0.php"] [unique_id "apK9oS04twRPFuquKD2mMQAAAOA"]
[Sat Aug 29 05:08:17.612925 2026] [security2:error] [pid 1034096:tid 1034301] [client 158.23.147.79:26549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK9oS04twRPFuquKD2mMgAAALc"]
[Sat Aug 29 05:08:17.617059 2026] [security2:error] [pid 1034096:tid 1034292] [client 52.139.37.240:23964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/flower.php"] [unique_id "apK9oS04twRPFuquKD2mMwAAAK4"]
[Sat Aug 29 05:08:17.617180 2026] [security2:error] [pid 1034096:tid 1034354] [client 158.23.184.117:31489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/.well-known/min.php"] [unique_id "apK9oS04twRPFuquKD2mNAAAAOw"]
[Sat Aug 29 05:08:17.618778 2026] [security2:error] [pid 1028675:tid 1028918] [client 158.23.184.117:20538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/24.php"] [unique_id "apK9oddHPfW2QFvhmL4D6wAAAGw"]
[Sat Aug 29 05:08:17.630193 2026] [security2:error] [pid 1028675:tid 1028930] [client 20.104.104.62:48036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/sef.php"] [unique_id "apK9oddHPfW2QFvhmL4D7QAAAHg"]
[Sat Aug 29 05:08:17.650366 2026] [security2:error] [pid 1028675:tid 1028902] [client 20.104.104.62:37653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/7logs.php"] [unique_id "apK9oddHPfW2QFvhmL4D7gAAAFw"]
[Sat Aug 29 05:08:17.657252 2026] [security2:error] [pid 1034096:tid 1034284] [client 158.23.184.117:55655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/wp-content/upgrade/alfanew.php7"] [unique_id "apK9oS04twRPFuquKD2mNQAAAKY"]
[Sat Aug 29 05:08:17.660519 2026] [security2:error] [pid 1034096:tid 1034315] [client 40.83.93.50:8974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/cookie.php"] [unique_id "apK9oS04twRPFuquKD2mNgAAAMU"]
[Sat Aug 29 05:08:17.676250 2026] [security2:error] [pid 1034096:tid 1034252] [client 68.155.159.216:6042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/dropdown.php"] [unique_id "apK9oS04twRPFuquKD2mNwAAAIY"]
[Sat Aug 29 05:08:17.727569 2026] [security2:error] [pid 1028675:tid 1028928] [client 4.205.62.107:51468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/8.php"] [unique_id "apK9oddHPfW2QFvhmL4D7wAAAHY"]
[Sat Aug 29 05:08:17.748238 2026] [security2:error] [pid 1034096:tid 1034262] [client 20.63.219.114:16694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/class-wp-cmd.php"] [unique_id "apK9oS04twRPFuquKD2mOwAAAJA"]
[Sat Aug 29 05:08:17.756817 2026] [security2:error] [pid 1028675:tid 1028867] [client 68.155.159.216:56527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apK9oddHPfW2QFvhmL4D8AAAADk"]
[Sat Aug 29 05:08:17.763105 2026] [security2:error] [pid 1028675:tid 1028858] [client 20.104.104.62:65244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/X7T6.php"] [unique_id "apK9oddHPfW2QFvhmL4D8QAAADA"]
[Sat Aug 29 05:08:17.768839 2026] [security2:error] [pid 1034096:tid 1034325] [client 20.63.219.114:10485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/hehe.php"] [unique_id "apK9oS04twRPFuquKD2mPwAAAM8"]
[Sat Aug 29 05:08:17.774927 2026] [security2:error] [pid 1028675:tid 1028857] [client 20.104.104.62:48042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/admin123.php"] [unique_id "apK9oddHPfW2QFvhmL4D8gAAAC8"]
[Sat Aug 29 05:08:17.776348 2026] [security2:error] [pid 1034096:tid 1034255] [client 52.139.37.240:36734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9oS04twRPFuquKD2mQAAAAIk"]
[Sat Aug 29 05:08:17.792253 2026] [security2:error] [pid 1034096:tid 1034317] [client 20.104.104.62:37634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/sf.php"] [unique_id "apK9oS04twRPFuquKD2mQQAAAMc"]
[Sat Aug 29 05:08:17.793113 2026] [security2:error] [pid 1034096:tid 1034316] [client 20.48.160.90:65334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/classwithtostring.php"] [unique_id "apK9oS04twRPFuquKD2mQgAAAMY"]
[Sat Aug 29 05:08:17.798889 2026] [security2:error] [pid 1028675:tid 1028863] [client 20.104.104.62:22770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sellmylike.millionairebuildersclub.com"] [uri "/aa.php"] [unique_id "apK9oddHPfW2QFvhmL4D9AAAADU"]
[Sat Aug 29 05:08:17.805272 2026] [security2:error] [pid 1034096:tid 1034360] [client 20.197.61.180:10669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/go.php"] [unique_id "apK9oS04twRPFuquKD2mQwAAAPI"]
[Sat Aug 29 05:08:17.812954 2026] [security2:error] [pid 1028675:tid 1028824] [client 52.139.37.240:23852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/13.php"] [unique_id "apK9oddHPfW2QFvhmL4D9QAAAA4"]
[Sat Aug 29 05:08:17.832521 2026] [security2:error] [pid 1034096:tid 1034308] [client 20.196.209.81:17321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-content/disagrsxr.php"] [unique_id "apK9oS04twRPFuquKD2mRQAAAL4"]
[Sat Aug 29 05:08:17.860836 2026] [security2:error] [pid 1028675:tid 1028851] [client 158.23.147.79:37799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK9oddHPfW2QFvhmL4D9wAAACk"]
[Sat Aug 29 05:08:17.884069 2026] [security2:error] [pid 1034096:tid 1034367] [client 40.83.93.50:9163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/ggfi.php"] [unique_id "apK9oS04twRPFuquKD2mRgAAAPk"]
[Sat Aug 29 05:08:17.887570 2026] [security2:error] [pid 1034096:tid 1034346] [client 20.104.49.130:53670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/1xmomo.php"] [unique_id "apK9oS04twRPFuquKD2mRwAAAOQ"]
[Sat Aug 29 05:08:17.914480 2026] [security2:error] [pid 1034096:tid 1034320] [client 20.100.175.163:5460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/ws.php"] [unique_id "apK9oS04twRPFuquKD2mSAAAAMo"]
[Sat Aug 29 05:08:17.927129 2026] [security2:error] [pid 1034096:tid 1034349] [client 158.23.147.79:35751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK9oS04twRPFuquKD2mSwAAAOc"]
[Sat Aug 29 05:08:17.932695 2026] [security2:error] [pid 1034096:tid 1034268] [client 20.104.104.62:37523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/7h.php"] [unique_id "apK9oS04twRPFuquKD2mTQAAAJY"]
[Sat Aug 29 05:08:17.935666 2026] [security2:error] [pid 1028675:tid 1028872] [client 20.104.49.130:60977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/wpxml.php"] [unique_id "apK9oddHPfW2QFvhmL4D-gAAAD4"]
[Sat Aug 29 05:08:17.938274 2026] [security2:error] [pid 1028675:tid 1028888] [client 20.104.104.62:40081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/super.php"] [unique_id "apK9oddHPfW2QFvhmL4D-wAAAE4"]
[Sat Aug 29 05:08:17.958400 2026] [security2:error] [pid 1028675:tid 1028813] [client 20.48.160.90:65300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK9oddHPfW2QFvhmL4D_QAAAAM"]
[Sat Aug 29 05:08:17.969376 2026] [security2:error] [pid 1034096:tid 1034277] [client 4.205.62.107:21612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/atex1.php"] [unique_id "apK9oS04twRPFuquKD2mTwAAAJ8"]
[Sat Aug 29 05:08:17.982379 2026] [security2:error] [pid 1034096:tid 1034345] [client 20.104.104.62:63023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/see.php"] [unique_id "apK9oS04twRPFuquKD2mUQAAAOM"]
[Sat Aug 29 05:08:17.998059 2026] [security2:error] [pid 1028675:tid 1028847] [client 20.240.128.207:7409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-content/uploads/min.php"] [unique_id "apK9oddHPfW2QFvhmL4D_wAAACU"]
[Sat Aug 29 05:08:18.002203 2026] [security2:error] [pid 1034096:tid 1034339] [client 158.23.147.79:17505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK9oi04twRPFuquKD2mUgAAAN0"]
[Sat Aug 29 05:08:18.006616 2026] [cgid:error] [pid 1028675:tid 1028884] [client 20.104.104.62:29197] AH01265: stderr from /home4/million4/public_html/sellmylike/cgi-bin/: attempt to invoke directory as script
[Sat Aug 29 05:08:18.008003 2026] [security2:error] [pid 1034096:tid 1034296] [client 52.139.37.240:23975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/cc.php"] [unique_id "apK9oi04twRPFuquKD2mUwAAALI"]
[Sat Aug 29 05:08:18.010206 2026] [security2:error] [pid 1034096:tid 1034298] [client 20.52.41.200:5273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-blog.php"] [unique_id "apK9oi04twRPFuquKD2mVAAAALQ"]
[Sat Aug 29 05:08:18.023859 2026] [security2:error] [pid 1034096:tid 1034285] [client 20.203.141.11:12593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/files/index.php"] [unique_id "apK9oi04twRPFuquKD2mVwAAAKc"]
[Sat Aug 29 05:08:18.029240 2026] [security2:error] [pid 1034096:tid 1034286] [client 213.209.159.223:43917] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/env/.env"] [unique_id "apK9oi04twRPFuquKD2mWAAAAKg"]
[Sat Aug 29 05:08:18.039578 2026] [security2:error] [pid 1034096:tid 1034340] [client 4.205.62.107:8984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/phpversion.php"] [unique_id "apK9oi04twRPFuquKD2mWQAAAN4"]
[Sat Aug 29 05:08:18.039611 2026] [security2:error] [pid 1034096:tid 1034371] [client 52.139.37.240:36831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/wp-index.php"] [unique_id "apK9oi04twRPFuquKD2mWgAAAP0"]
[Sat Aug 29 05:08:18.062407 2026] [security2:error] [pid 1034096:tid 1034344] [client 35.194.208.44:1106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.208.194.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/i.php"] [unique_id "apK9oi04twRPFuquKD2mXgAAAOI"]
[Sat Aug 29 05:08:18.070916 2026] [security2:error] [pid 1028675:tid 1028892] [client 20.104.104.62:29197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sellmylike.millionairebuildersclub.com"] [uri "/file.php"] [unique_id "apK9otdHPfW2QFvhmL4EAwAAAFI"]
[Sat Aug 29 05:08:18.078379 2026] [security2:error] [pid 1034096:tid 1034292] [client 20.104.104.62:37626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/wp-gzone.php"] [unique_id "apK9oi04twRPFuquKD2mYAAAAK4"]
[Sat Aug 29 05:08:18.087708 2026] [security2:error] [pid 1034096:tid 1034354] [client 20.48.160.90:65398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/5PJcpMFsD8B.php"] [unique_id "apK9oi04twRPFuquKD2mYQAAAOw"]
[Sat Aug 29 05:08:18.087739 2026] [security2:error] [pid 1034096:tid 1034274] [client 20.104.104.62:20699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/con7.php"] [unique_id "apK9oi04twRPFuquKD2mYgAAAJw"]
[Sat Aug 29 05:08:18.094329 2026] [security2:error] [pid 1034096:tid 1034312] [client 4.205.62.107:24999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/config/laravolt/css/index.php"] [unique_id "apK9oi04twRPFuquKD2mYwAAAMI"]
[Sat Aug 29 05:08:18.102203 2026] [security2:error] [pid 1034096:tid 1034300] [client 20.104.104.62:37664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/lufix1.php"] [unique_id "apK9oi04twRPFuquKD2mZAAAALY"]
[Sat Aug 29 05:08:18.110553 2026] [security2:error] [pid 1034096:tid 1034361] [client 20.63.219.114:10480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/disagreed.php"] [unique_id "apK9oi04twRPFuquKD2mZQAAAPM"]
[Sat Aug 29 05:08:18.127800 2026] [security2:error] [pid 1028675:tid 1028885] [client 4.205.62.107:22144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sitestage.biz"] [uri "/ah25.php"] [unique_id "apK9otdHPfW2QFvhmL4EBQAAAEs"]
[Sat Aug 29 05:08:18.144207 2026] [security2:error] [pid 1034096:tid 1034336] [client 35.194.208.44:1118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.208.194.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/pi.php"] [unique_id "apK9oi04twRPFuquKD2mZgAAANo"]
[Sat Aug 29 05:08:18.157645 2026] [security2:error] [pid 1034096:tid 1034319] [client 40.83.93.50:8965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/NewFile.php"] [unique_id "apK9oi04twRPFuquKD2maAAAAMk"]
[Sat Aug 29 05:08:18.172050 2026] [security2:error] [pid 1028675:tid 1028839] [client 20.63.219.114:18498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/wp-admin/class-db.php"] [unique_id "apK9otdHPfW2QFvhmL4ECQAAAB0"]
[Sat Aug 29 05:08:18.178101 2026] [security2:error] [pid 1028675:tid 1028894] [client 20.104.104.62:2472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/horeg.php"] [unique_id "apK9otdHPfW2QFvhmL4ECwAAAFQ"]
[Sat Aug 29 05:08:18.188009 2026] [security2:error] [pid 1028675:tid 1028926] [client 4.205.62.107:53286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/fucku.php"] [unique_id "apK9otdHPfW2QFvhmL4EDAAAAHQ"]
[Sat Aug 29 05:08:18.207614 2026] [security2:error] [pid 1034096:tid 1034293] [client 35.194.208.44:1162] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/.env~"] [unique_id "apK9oi04twRPFuquKD2mbwAAAK8"]
[Sat Aug 29 05:08:18.213742 2026] [security2:error] [pid 1028675:tid 1028907] [client 52.139.37.240:23955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/gecko-new.php"] [unique_id "apK9otdHPfW2QFvhmL4EDwAAAGE"]
[Sat Aug 29 05:08:18.229598 2026] [security2:error] [pid 1034096:tid 1034284] [client 20.196.209.81:9069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-content/f35.php"] [unique_id "apK9oi04twRPFuquKD2mcQAAAKY"]
[Sat Aug 29 05:08:18.235000 2026] [security2:error] [pid 1028675:tid 1028859] [client 20.104.104.62:40107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/hack.php"] [unique_id "apK9otdHPfW2QFvhmL4EEgAAADE"]
[Sat Aug 29 05:08:18.235246 2026] [security2:error] [pid 1028675:tid 1028881] [client 52.139.37.240:36819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/ww2.php"] [unique_id "apK9otdHPfW2QFvhmL4EEwAAAEc"]
[Sat Aug 29 05:08:18.237407 2026] [security2:error] [pid 1034096:tid 1034262] [client 68.155.159.216:49246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/about/function.php"] [unique_id "apK9oi04twRPFuquKD2mcgAAAJA"]
[Sat Aug 29 05:08:18.240965 2026] [security2:error] [pid 1034096:tid 1034287] [client 103.171.189.88:61670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9oi04twRPFuquKD2mdAAAAKk"]
[Sat Aug 29 05:08:18.241053 2026] [security2:error] [pid 1034096:tid 1034287] [client 103.171.189.88:61670] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9oi04twRPFuquKD2mdAAAAKk"]
[Sat Aug 29 05:08:18.251916 2026] [security2:error] [pid 1028675:tid 1028930] [client 20.104.104.62:37631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/str.php"] [unique_id "apK9otdHPfW2QFvhmL4EFAAAAHg"]
[Sat Aug 29 05:08:18.264970 2026] [security2:error] [pid 1028675:tid 1028866] [client 20.104.104.62:28816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sellmylike.millionairebuildersclub.com"] [uri "/sc.php"] [unique_id "apK9otdHPfW2QFvhmL4EFQAAADg"]
[Sat Aug 29 05:08:18.276210 2026] [security2:error] [pid 1028675:tid 1028908] [client 35.194.208.44:1166] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/.env"] [unique_id "apK9otdHPfW2QFvhmL4EFgAAAGI"]
[Sat Aug 29 05:08:18.291565 2026] [security2:error] [pid 1034096:tid 1034278] [client 158.23.147.79:11292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK9oi04twRPFuquKD2mdwAAAKA"]
[Sat Aug 29 05:08:18.312848 2026] [security2:error] [pid 1028675:tid 1028860] [client 35.194.208.44:1174] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.bash_history"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/.bash_history"] [unique_id "apK9otdHPfW2QFvhmL4EGAAAADI"]
[Sat Aug 29 05:08:18.365045 2026] [security2:error] [pid 1034096:tid 1034367] [client 158.23.147.79:5993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK9oi04twRPFuquKD2mfAAAAPk"]
[Sat Aug 29 05:08:18.370575 2026] [security2:error] [pid 1028675:tid 1028872] [client 20.104.104.62:40122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/155.php"] [unique_id "apK9otdHPfW2QFvhmL4EGwAAAD4"]
[Sat Aug 29 05:08:18.370615 2026] [security2:error] [pid 1028675:tid 1028825] [client 68.155.159.216:64457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/atomlib.php"] [unique_id "apK9otdHPfW2QFvhmL4EGgAAAA8"]
[Sat Aug 29 05:08:18.382213 2026] [security2:error] [pid 1028675:tid 1028840] [client 35.194.208.44:1196] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/_next/.env"] [unique_id "apK9otdHPfW2QFvhmL4EHAAAAB4"]
[Sat Aug 29 05:08:18.382706 2026] [security2:error] [pid 1028675:tid 1028813] [client 68.155.159.216:16372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK9otdHPfW2QFvhmL4EHgAAAAM"]
[Sat Aug 29 05:08:18.387480 2026] [security2:error] [pid 1028675:tid 1028847] [client 20.48.160.90:64152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK9otdHPfW2QFvhmL4EHwAAACU"]
[Sat Aug 29 05:08:18.389216 2026] [security2:error] [pid 1028675:tid 1028844] [client 40.83.93.50:9183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/alfa-rex.php"] [unique_id "apK9otdHPfW2QFvhmL4EIAAAACI"]
[Sat Aug 29 05:08:18.396890 2026] [security2:error] [pid 1028675:tid 1028820] [client 20.104.104.62:35731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/mega.php"] [unique_id "apK9otdHPfW2QFvhmL4EIQAAAAo"]
[Sat Aug 29 05:08:18.409781 2026] [security2:error] [pid 1034096:tid 1034363] [client 20.100.175.163:29522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-themes.php"] [unique_id "apK9oi04twRPFuquKD2mfgAAAPU"]
[Sat Aug 29 05:08:18.413642 2026] [security2:error] [pid 1034096:tid 1034268] [client 213.209.159.223:43917] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/src/.env"] [unique_id "apK9oi04twRPFuquKD2mfwAAAJY"]
[Sat Aug 29 05:08:18.418750 2026] [security2:error] [pid 1034096:tid 1034347] [client 68.155.159.216:65138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK9oi04twRPFuquKD2mgAAAAOU"]
[Sat Aug 29 05:08:18.424630 2026] [security2:error] [pid 1034096:tid 1034374] [client 158.23.147.79:32694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/packed.php"] [unique_id "apK9oi04twRPFuquKD2mgQAAAQA"]
[Sat Aug 29 05:08:18.428798 2026] [security2:error] [pid 1028675:tid 1028861] [client 52.139.37.240:23820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/wp-content.php.php"] [unique_id "apK9otdHPfW2QFvhmL4EIgAAADM"]
[Sat Aug 29 05:08:18.433686 2026] [security2:error] [pid 1028675:tid 1028835] [client 52.139.37.240:36686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/7logs.php"] [unique_id "apK9otdHPfW2QFvhmL4EJAAAABk"]
[Sat Aug 29 05:08:18.453914 2026] [security2:error] [pid 1034096:tid 1034306] [client 60.243.207.176:49959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK9oi04twRPFuquKD2mgwAAALw"]
[Sat Aug 29 05:08:18.454014 2026] [security2:error] [pid 1034096:tid 1034306] [client 60.243.207.176:49959] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK9oi04twRPFuquKD2mgwAAALw"]
[Sat Aug 29 05:08:18.458504 2026] [security2:error] [pid 1028675:tid 1028937] [client 20.104.104.62:22781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sellmylike.millionairebuildersclub.com"] [uri "/tinyfilemanager.php"] [unique_id "apK9otdHPfW2QFvhmL4EJgAAAH8"]
[Sat Aug 29 05:08:18.461974 2026] [security2:error] [pid 1028675:tid 1028863] [client 20.52.41.200:4581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/xxx.php"] [unique_id "apK9otdHPfW2QFvhmL4EJwAAADU"]
[Sat Aug 29 05:08:18.464069 2026] [security2:error] [pid 1028675:tid 1028816] [client 127.0.0.1:14230] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK9otdHPfW2QFvhmL4EHQAAAAY"]
[Sat Aug 29 05:08:18.464115 2026] [security2:error] [pid 1034096:tid 1034368] [client 35.194.208.44:1180] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/.env.prod"] [unique_id "apK9oi04twRPFuquKD2mfQAAAPo"]
[Sat Aug 29 05:08:18.481026 2026] [security2:error] [pid 1028675:tid 1028887] [client 68.155.159.216:9229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-includes/js/index.php"] [unique_id "apK9otdHPfW2QFvhmL4EKAAAAE0"]
[Sat Aug 29 05:08:18.486560 2026] [security2:error] [pid 1034096:tid 1034291] [client 20.104.104.62:53827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/basic.php"] [unique_id "apK9oi04twRPFuquKD2mhgAAAK0"]
[Sat Aug 29 05:08:18.493969 2026] [security2:error] [pid 1028675:tid 1028915] [client 20.240.128.207:22117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK9otdHPfW2QFvhmL4EKQAAAGk"]
[Sat Aug 29 05:08:18.520784 2026] [security2:error] [pid 1034096:tid 1034371] [client 20.104.104.62:40064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/mcd.php"] [unique_id "apK9oi04twRPFuquKD2miQAAAP0"]
[Sat Aug 29 05:08:18.530670 2026] [security2:error] [pid 1034096:tid 1034349] [client 20.63.219.114:15448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/wp-contentt.php"] [unique_id "apK9oi04twRPFuquKD2migAAAOc"]
[Sat Aug 29 05:08:18.530676 2026] [security2:error] [pid 1028675:tid 1028898] [client 195.178.110.247:17022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.livestockcattle.com"] [uri "/index.php"] [unique_id "apK9otdHPfW2QFvhmL4EKwAAAFg"]
[Sat Aug 29 05:08:18.532981 2026] [security2:error] [pid 1028675:tid 1028888] [client 20.203.141.11:26179] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.newflooringhawaii.com"] [uri "/1.php7"] [unique_id "apK9otdHPfW2QFvhmL4ELAAAAE4"]
[Sat Aug 29 05:08:18.533096 2026] [security2:error] [pid 1028675:tid 1028888] [client 20.203.141.11:26179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/1.php7"] [unique_id "apK9otdHPfW2QFvhmL4ELAAAAE4"]
[Sat Aug 29 05:08:18.539520 2026] [security2:error] [pid 1034096:tid 1034327] [client 20.197.61.180:10631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/gecko-new.php"] [unique_id "apK9oi04twRPFuquKD2miwAAANE"]
[Sat Aug 29 05:08:18.555494 2026] [security2:error] [pid 1028675:tid 1028907] [client 20.104.104.62:37627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/ww3.php"] [unique_id "apK9otdHPfW2QFvhmL4ELQAAAGE"]
[Sat Aug 29 05:08:18.571764 2026] [security2:error] [pid 1028675:tid 1028819] [client 20.48.160.90:65341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/wsd.php"] [unique_id "apK9otdHPfW2QFvhmL4ELgAAAAk"]
[Sat Aug 29 05:08:18.603655 2026] [security2:error] [pid 1034096:tid 1034298] [client 20.63.219.114:16664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/class_api.php"] [unique_id "apK9oi04twRPFuquKD2mkAAAALQ"]
[Sat Aug 29 05:08:18.615141 2026] [security2:error] [pid 1034096:tid 1034354] [client 68.155.159.216:51406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/bk/index.php"] [unique_id "apK9oi04twRPFuquKD2mkQAAAOw"]
[Sat Aug 29 05:08:18.623770 2026] [security2:error] [pid 1028675:tid 1028843] [client 52.139.37.240:23828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/link.php"] [unique_id "apK9otdHPfW2QFvhmL4EMAAAACE"]
[Sat Aug 29 05:08:18.625609 2026] [security2:error] [pid 1034096:tid 1034286] [client 20.196.209.81:10434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-content/index.php"] [unique_id "apK9oi04twRPFuquKD2mkgAAAKg"]
[Sat Aug 29 05:08:18.637184 2026] [security2:error] [pid 1034096:tid 1034339] [client 40.83.93.50:16268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/config.php"] [unique_id "apK9oi04twRPFuquKD2mkwAAAN0"]
[Sat Aug 29 05:08:18.641582 2026] [security2:error] [pid 1028675:tid 1028823] [client 52.139.37.240:36812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/ac.php"] [unique_id "apK9otdHPfW2QFvhmL4EMgAAAA0"]
[Sat Aug 29 05:08:18.655575 2026] [security2:error] [pid 1028675:tid 1028862] [client 158.23.147.79:49806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-includes/js/index.php"] [unique_id "apK9otdHPfW2QFvhmL4EMwAAADQ"]
[Sat Aug 29 05:08:18.655619 2026] [security2:error] [pid 1028675:tid 1028859] [client 20.104.104.62:22777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sellmylike.millionairebuildersclub.com"] [uri "/upload.php"] [unique_id "apK9otdHPfW2QFvhmL4ENAAAADE"]
[Sat Aug 29 05:08:18.657085 2026] [security2:error] [pid 1028675:tid 1028908] [client 20.104.104.62:64259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/waw.php"] [unique_id "apK9otdHPfW2QFvhmL4ENQAAAGI"]
[Sat Aug 29 05:08:18.695128 2026] [security2:error] [pid 1034096:tid 1034362] [client 195.178.110.247:33728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.livestockcattle.com"] [uri "/index.php"] [unique_id "apK9oi04twRPFuquKD2mlQAAAPQ"]
[Sat Aug 29 05:08:18.700236 2026] [security2:error] [pid 1034096:tid 1034320] [client 20.104.104.62:48037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/sko.php"] [unique_id "apK9oi04twRPFuquKD2mlgAAAMo"]
[Sat Aug 29 05:08:18.708148 2026] [security2:error] [pid 1028675:tid 1028903] [client 158.23.184.117:55632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/robots.php"] [unique_id "apK9otdHPfW2QFvhmL4ENwAAAF0"]
[Sat Aug 29 05:08:18.721232 2026] [security2:error] [pid 1028675:tid 1028922] [client 20.48.160.90:64215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/bulet.php"] [unique_id "apK9otdHPfW2QFvhmL4EOAAAAHA"]
[Sat Aug 29 05:08:18.732607 2026] [security2:error] [pid 1034096:tid 1034309] [client 20.104.104.62:65238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/monso.php"] [unique_id "apK9oi04twRPFuquKD2mlwAAAL8"]
[Sat Aug 29 05:08:18.770344 2026] [security2:error] [pid 1034096:tid 1034280] [client 213.209.159.223:43917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/config/app.php"] [unique_id "apK9oi04twRPFuquKD2mmQAAAKI"]
[Sat Aug 29 05:08:18.771512 2026] [security2:error] [pid 1034096:tid 1034293] [client 158.23.184.117:57811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/3pjcpmfsd8b.php"] [unique_id "apK9oi04twRPFuquKD2mmgAAAK8"]
[Sat Aug 29 05:08:18.772904 2026] [security2:error] [pid 1034096:tid 1034378] [client 158.23.184.117:31501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/.well-known/module.php"] [unique_id "apK9oi04twRPFuquKD2mmwAAAQQ"]
[Sat Aug 29 05:08:18.781424 2026] [security2:error] [pid 1034096:tid 1034307] [client 68.155.159.216:6014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/sad/about.php"] [unique_id "apK9oi04twRPFuquKD2mnAAAAL0"]
[Sat Aug 29 05:08:18.782704 2026] [security2:error] [pid 1028675:tid 1028866] [client 213.209.159.223:11886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/app_dev.php/_profiler/open"] [unique_id "apK9otdHPfW2QFvhmL4EPAAAADg"]
[Sat Aug 29 05:08:18.804439 2026] [security2:error] [pid 1028675:tid 1028851] [client 158.23.184.117:2757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/admin/alfa-rex.php"] [unique_id "apK9otdHPfW2QFvhmL4EPQAAACk"]
[Sat Aug 29 05:08:18.816633 2026] [security2:error] [pid 1034096:tid 1034295] [client 52.139.37.240:23942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/wp-fmfile.php"] [unique_id "apK9oi04twRPFuquKD2mnQAAALE"]
[Sat Aug 29 05:08:18.816962 2026] [security2:error] [pid 1034096:tid 1034310] [client 158.23.147.79:26598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/images/index.php"] [unique_id "apK9oi04twRPFuquKD2mngAAAMA"]
[Sat Aug 29 05:08:18.830821 2026] [security2:error] [pid 1034096:tid 1034321] [client 20.104.104.62:40123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/x23.php"] [unique_id "apK9oi04twRPFuquKD2moAAAAMs"]
[Sat Aug 29 05:08:18.834766 2026] [security2:error] [pid 1034096:tid 1034266] [client 68.155.159.216:18424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-content/index.php"] [unique_id "apK9oi04twRPFuquKD2moQAAAJQ"]
[Sat Aug 29 05:08:18.838091 2026] [security2:error] [pid 1034096:tid 1034317] [client 52.139.37.240:36715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/ctex1.php"] [unique_id "apK9oi04twRPFuquKD2mogAAAMc"]
[Sat Aug 29 05:08:18.849674 2026] [security2:error] [pid 1034096:tid 1034375] [client 20.104.104.62:29233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sellmylike.millionairebuildersclub.com"] [uri "/wp-act.php"] [unique_id "apK9oi04twRPFuquKD2mpAAAAQE"]
[Sat Aug 29 05:08:18.850937 2026] [security2:error] [pid 1034096:tid 1034348] [client 158.23.184.117:55679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/.well-known/install.php"] [unique_id "apK9oi04twRPFuquKD2mpQAAAOY"]
[Sat Aug 29 05:08:18.857798 2026] [security2:error] [pid 1034096:tid 1034294] [client 68.155.159.216:38679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK9oi04twRPFuquKD2mpgAAALA"]
[Sat Aug 29 05:08:18.869363 2026] [security2:error] [pid 1034096:tid 1034315] [client 4.205.62.107:58392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/agg.php"] [unique_id "apK9oi04twRPFuquKD2mqwAAAMU"]
[Sat Aug 29 05:08:18.872256 2026] [security2:error] [pid 1034096:tid 1034337] [client 68.155.159.216:24509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK9oi04twRPFuquKD2mrgAAANs"]
[Sat Aug 29 05:08:18.876757 2026] [security2:error] [pid 1034096:tid 1034318] [client 20.48.160.90:64162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/av.php"] [unique_id "apK9oi04twRPFuquKD2mtAAAAMg"]
[Sat Aug 29 05:08:18.880674 2026] [security2:error] [pid 1028675:tid 1028928] [client 40.83.93.50:8395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/cookie.php"] [unique_id "apK9otdHPfW2QFvhmL4EQgAAAHY"]
[Sat Aug 29 05:08:18.890807 2026] [security2:error] [pid 1028675:tid 1028918] [client 20.63.219.114:18513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/theme.php"] [unique_id "apK9otdHPfW2QFvhmL4ERQAAAGw"]
[Sat Aug 29 05:08:18.896229 2026] [security2:error] [pid 1028675:tid 1028929] [client 20.104.49.130:43599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/amax.php"] [unique_id "apK9otdHPfW2QFvhmL4ERgAAAHc"]
[Sat Aug 29 05:08:18.898665 2026] [core:error] [pid 1034096:tid 1034306] [client 34.177.83.167:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:18.898684 2026] [core:error] [pid 1034096:tid 1034306] [client 34.177.83.167:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:18.901362 2026] [core:error] [pid 1034096:tid 1034368] [client 34.177.83.167:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:18.901382 2026] [core:error] [pid 1034096:tid 1034368] [client 34.177.83.167:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:18.902029 2026] [core:error] [pid 1034096:tid 1034324] [client 34.177.83.167:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:18.902039 2026] [core:error] [pid 1034096:tid 1034324] [client 34.177.83.167:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:18.902925 2026] [core:error] [pid 1034096:tid 1034291] [client 34.177.83.167:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:18.902941 2026] [core:error] [pid 1034096:tid 1034291] [client 34.177.83.167:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:18.904938 2026] [core:error] [pid 1028675:tid 1028835] [client 34.177.83.167:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:18.904954 2026] [core:error] [pid 1028675:tid 1028835] [client 34.177.83.167:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:18.913472 2026] [core:error] [pid 1034096:tid 1034340] [client 34.177.83.167:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:18.913499 2026] [core:error] [pid 1034096:tid 1034340] [client 34.177.83.167:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:18.919093 2026] [security2:error] [pid 1034096:tid 1034251] [client 158.23.184.117:20707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rebecca.4callum.net"] [uri "/403.php"] [unique_id "apK9oi04twRPFuquKD2myAAAAIU"]
[Sat Aug 29 05:08:18.919189 2026] [security2:error] [pid 1034096:tid 1034352] [client 158.23.184.117:63147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/.well-known/options.php"] [unique_id "apK9oi04twRPFuquKD2myQAAAOo"]
[Sat Aug 29 05:08:18.919479 2026] [security2:error] [pid 1034096:tid 1034260] [client 20.100.175.163:29519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-trackback.php"] [unique_id "apK9oi04twRPFuquKD2mygAAAI4"]
[Sat Aug 29 05:08:18.920341 2026] [core:error] [pid 1028675:tid 1028846] [client 34.177.83.167:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:18.920366 2026] [core:error] [pid 1028675:tid 1028846] [client 34.177.83.167:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:18.922207 2026] [core:error] [pid 1034096:tid 1034292] [client 34.177.83.167:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:18.922224 2026] [core:error] [pid 1034096:tid 1034292] [client 34.177.83.167:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:18.931655 2026] [core:error] [pid 1034096:tid 1034371] [client 34.177.83.167:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:18.931680 2026] [core:error] [pid 1034096:tid 1034371] [client 34.177.83.167:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:18.940533 2026] [core:error] [pid 1034096:tid 1034355] [client 34.177.83.167:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:18.940558 2026] [core:error] [pid 1034096:tid 1034355] [client 34.177.83.167:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:18.948192 2026] [security2:error] [pid 1034096:tid 1034372] [client 158.23.184.117:55642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/wp-content/export.php"] [unique_id "apK9oi04twRPFuquKD2mzwAAAP4"]
[Sat Aug 29 05:08:18.950677 2026] [core:error] [pid 1034096:tid 1034298] [client 34.177.83.167:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:18.950695 2026] [core:error] [pid 1034096:tid 1034298] [client 34.177.83.167:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:18.950803 2026] [core:error] [pid 1034096:tid 1034332] [client 34.177.83.167:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:18.950811 2026] [core:error] [pid 1034096:tid 1034332] [client 34.177.83.167:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:18.965279 2026] [security2:error] [pid 1034096:tid 1034270] [client 20.63.219.114:8837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/aksinet.php"] [unique_id "apK9oi04twRPFuquKD2m0QAAAJg"]
[Sat Aug 29 05:08:18.988444 2026] [security2:error] [pid 1028675:tid 1028825] [client 20.240.128.207:21015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/bthil.php"] [unique_id "apK9otdHPfW2QFvhmL4ESgAAAA8"]
[Sat Aug 29 05:08:18.991862 2026] [security2:error] [pid 1028675:tid 1028881] [client 158.23.147.79:59868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-includes/plugins.php"] [unique_id "apK9otdHPfW2QFvhmL4ESwAAAEc"]
[Sat Aug 29 05:08:19.004784 2026] [security2:error] [pid 1034096:tid 1034376] [client 20.203.141.11:11799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/disagraeosc.php"] [unique_id "apK9oy04twRPFuquKD2m0wAAAQI"]
[Sat Aug 29 05:08:19.012970 2026] [security2:error] [pid 1034096:tid 1034323] [client 52.139.37.240:23867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/wi.php"] [unique_id "apK9oy04twRPFuquKD2m1AAAAM0"]
[Sat Aug 29 05:08:19.015515 2026] [security2:error] [pid 1034096:tid 1034307] [client 20.104.104.62:20677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/locale.php"] [unique_id "apK9oy04twRPFuquKD2m1QAAAL0"]
[Sat Aug 29 05:08:19.021506 2026] [security2:error] [pid 1034096:tid 1034377] [client 20.196.209.81:17341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-content/install.php"] [unique_id "apK9oy04twRPFuquKD2m1gAAAQM"]
[Sat Aug 29 05:08:19.022353 2026] [security2:error] [pid 1034096:tid 1034253] [client 20.48.160.90:64210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/images.php"] [unique_id "apK9oy04twRPFuquKD2m1wAAAIc"]
[Sat Aug 29 05:08:19.047259 2026] [security2:error] [pid 1034096:tid 1034308] [client 158.23.147.79:17477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK9oy04twRPFuquKD2m2gAAAL4"]
[Sat Aug 29 05:08:19.052276 2026] [security2:error] [pid 1034096:tid 1034321] [client 158.23.147.79:35714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK9oy04twRPFuquKD2m3AAAAMs"]
[Sat Aug 29 05:08:19.055314 2026] [security2:error] [pid 1034096:tid 1034317] [client 158.23.184.117:55621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/wp-admin/about.php"] [unique_id "apK9oy04twRPFuquKD2m3QAAAMc"]
[Sat Aug 29 05:08:19.059940 2026] [security2:error] [pid 1034096:tid 1034316] [client 52.139.37.240:35845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/defaults.php"] [unique_id "apK9oy04twRPFuquKD2m3gAAAMY"]
[Sat Aug 29 05:08:19.063476 2026] [security2:error] [pid 1034096:tid 1034360] [client 158.23.184.117:31499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/.well-known/panel.php"] [unique_id "apK9oy04twRPFuquKD2m3wAAAPI"]
[Sat Aug 29 05:08:19.091999 2026] [security2:error] [pid 1034096:tid 1034282] [client 158.23.184.117:55643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/new.php"] [unique_id "apK9oy04twRPFuquKD2m4AAAAKQ"]
[Sat Aug 29 05:08:19.109899 2026] [security2:error] [pid 1034096:tid 1034368] [client 158.23.147.79:17532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-includes/content.php"] [unique_id "apK9oy04twRPFuquKD2m4gAAAPo"]
[Sat Aug 29 05:08:19.117798 2026] [security2:error] [pid 1034096:tid 1034267] [client 4.205.62.107:22524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/aws_sdk_settings.php"] [unique_id "apK9oy04twRPFuquKD2m4wAAAJU"]
[Sat Aug 29 05:08:19.122232 2026] [security2:error] [pid 1028675:tid 1028766] [remote 162.240.171.12:46892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.171.240.162.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fellowsofmythgar.com"] [uri "/wp-login.php"] [unique_id "apK9o9dHPfW2QFvhmL4ETgAAH1U"]
[Sat Aug 29 05:08:19.122331 2026] [security2:error] [pid 1028675:tid 1028878] [client 149.34.210.141:52132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9o9dHPfW2QFvhmL4ETwAAAEQ"]
[Sat Aug 29 05:08:19.122434 2026] [security2:error] [pid 1028675:tid 1028878] [client 149.34.210.141:52132] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9o9dHPfW2QFvhmL4ETwAAAEQ"]
[Sat Aug 29 05:08:19.122542 2026] [security2:error] [pid 1034096:tid 1034172] [remote 74.7.227.189:33406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 189.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pinnacleforms.com"] [uri "/m_AR222.php"] [unique_id "apK9oy04twRPFuquKD2m5AAAxTI"], referer: https://mail.pinnacleforms.com/
[Sat Aug 29 05:08:19.158515 2026] [security2:error] [pid 1034096:tid 1034314] [client 20.48.160.90:64250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/ops.php"] [unique_id "apK9oy04twRPFuquKD2m5gAAAMQ"]
[Sat Aug 29 05:08:19.181554 2026] [security2:error] [pid 1028675:tid 1028930] [client 213.209.159.223:44086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "apK9o9dHPfW2QFvhmL4EUQAAAHg"]
[Sat Aug 29 05:08:19.196626 2026] [security2:error] [pid 1034096:tid 1034310] [client 213.209.159.223:21262] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/wp-content/mysql.sql"] [unique_id "apK9oy04twRPFuquKD2m6QAAAMA"]
[Sat Aug 29 05:08:19.202983 2026] [security2:error] [pid 1034096:tid 1034355] [client 4.205.62.107:8916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/hiquido.com/index.php"] [unique_id "apK9oy04twRPFuquKD2m6gAAAO0"]
[Sat Aug 29 05:08:19.205835 2026] [security2:error] [pid 1034096:tid 1034352] [client 158.23.184.117:31692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/.well-known/pki-validation/mariju.php"] [unique_id "apK9oy04twRPFuquKD2m6wAAAOo"]
[Sat Aug 29 05:08:19.209027 2026] [security2:error] [pid 1034096:tid 1034351] [client 52.139.37.240:23832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/function.php"] [unique_id "apK9oy04twRPFuquKD2m7AAAAOk"]
[Sat Aug 29 05:08:19.211081 2026] [security2:error] [pid 1034096:tid 1034350] [client 158.23.184.117:2995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/wp-content/backup.php"] [unique_id "apK9oy04twRPFuquKD2m7QAAAOg"]
[Sat Aug 29 05:08:19.224939 2026] [security2:error] [pid 1034096:tid 1034303] [client 68.155.159.216:23503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/simple.php"] [unique_id "apK9oy04twRPFuquKD2m7gAAALk"]
[Sat Aug 29 05:08:19.232012 2026] [security2:error] [pid 1034096:tid 1034375] [client 40.83.93.50:8386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/22.php"] [unique_id "apK9oy04twRPFuquKD2m8AAAAQE"]
[Sat Aug 29 05:08:19.237785 2026] [security2:error] [pid 1034096:tid 1034320] [client 158.23.184.117:2765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/wp-content/plugins/revslider/admin.php"] [unique_id "apK9oy04twRPFuquKD2m8QAAAMo"]
[Sat Aug 29 05:08:19.246347 2026] [security2:error] [pid 1034096:tid 1034311] [client 20.63.219.114:10484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/alumni_reg.php"] [unique_id "apK9oy04twRPFuquKD2m8gAAAME"]
[Sat Aug 29 05:08:19.246607 2026] [security2:error] [pid 1034096:tid 1034309] [client 4.205.62.107:24987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/87.php"] [unique_id "apK9oy04twRPFuquKD2m8wAAAL8"]
[Sat Aug 29 05:08:19.261312 2026] [security2:error] [pid 1034096:tid 1034346] [client 20.52.41.200:4596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/tool.php"] [unique_id "apK9oy04twRPFuquKD2m-AAAAOQ"]
[Sat Aug 29 05:08:19.261525 2026] [proxy_http:error] [pid 1034096:tid 1034345] (20014)Internal error (specific information not available): [client 34.177.83.167:42004] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:08:19.261536 2026] [proxy:error] [pid 1034096:tid 1034345] [client 34.177.83.167:42004] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/htdocs/.git/config
[Sat Aug 29 05:08:19.262320 2026] [security2:error] [pid 1028675:tid 1028908] [client 52.139.37.240:36732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/domains.php"] [unique_id "apK9o9dHPfW2QFvhmL4EUgAAAGI"]
[Sat Aug 29 05:08:19.267152 2026] [proxy_http:error] [pid 1034096:tid 1034284] (20014)Internal error (specific information not available): [client 34.177.83.167:41994] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:08:19.267164 2026] [proxy:error] [pid 1034096:tid 1034284] [client 34.177.83.167:41994] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/var/www/.git/config
[Sat Aug 29 05:08:19.285290 2026] [proxy_http:error] [pid 1034096:tid 1034373] (20014)Internal error (specific information not available): [client 34.177.83.167:42032] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:08:19.285307 2026] [proxy:error] [pid 1034096:tid 1034373] [client 34.177.83.167:42032] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/public/.git/config
[Sat Aug 29 05:08:19.299644 2026] [security2:error] [pid 1034096:tid 1034376] [client 68.155.159.216:14196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK9oy04twRPFuquKD2nBAAAAQI"]
[Sat Aug 29 05:08:19.300038 2026] [proxy_http:error] [pid 1034096:tid 1034278] (20014)Internal error (specific information not available): [client 34.177.83.167:42054] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:08:19.300048 2026] [proxy:error] [pid 1034096:tid 1034278] [client 34.177.83.167:42054] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/wordpress/.git/config
[Sat Aug 29 05:08:19.301309 2026] [security2:error] [pid 1028675:tid 1028925] [client 20.197.61.180:1463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/wp-admin.php"] [unique_id "apK9o9dHPfW2QFvhmL4EVAAAAHM"]
[Sat Aug 29 05:08:19.302981 2026] [security2:error] [pid 1028675:tid 1028815] [client 202.71.25.11:53670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.25.71.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK9o9dHPfW2QFvhmL4EVQAAAAU"]
[Sat Aug 29 05:08:19.303069 2026] [security2:error] [pid 1028675:tid 1028815] [client 202.71.25.11:53670] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK9o9dHPfW2QFvhmL4EVQAAAAU"]
[Sat Aug 29 05:08:19.324799 2026] [security2:error] [pid 1034096:tid 1034316] [client 4.205.62.107:55970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/error_log.php"] [unique_id "apK9oy04twRPFuquKD2nBgAAAMY"]
[Sat Aug 29 05:08:19.338644 2026] [security2:error] [pid 1034096:tid 1034268] [client 20.48.160.90:64144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/coffexium.php"] [unique_id "apK9oy04twRPFuquKD2nCQAAAJY"]
[Sat Aug 29 05:08:19.344593 2026] [security2:error] [pid 1028675:tid 1028926] [client 40.83.93.50:9186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/NewFile.php"] [unique_id "apK9o9dHPfW2QFvhmL4EVgAAAHQ"]
[Sat Aug 29 05:08:19.346654 2026] [security2:error] [pid 1034096:tid 1034260] [client 20.63.219.114:10438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/alfa-rex1.php"] [unique_id "apK9oy04twRPFuquKD2nCgAAAI4"]
[Sat Aug 29 05:08:19.348066 2026] [security2:error] [pid 1034096:tid 1034330] [client 158.23.184.117:63137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/.well-known/pki-validation/pl.php"] [unique_id "apK9oy04twRPFuquKD2nCwAAANQ"]
[Sat Aug 29 05:08:19.351286 2026] [security2:error] [pid 1034096:tid 1034347] [client 68.155.159.216:49241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK9oy04twRPFuquKD2nDAAAAOU"]
[Sat Aug 29 05:08:19.353633 2026] [security2:error] [pid 1034096:tid 1034307] [client 158.23.184.117:2800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/.well-known/aa.php"] [unique_id "apK9oy04twRPFuquKD2nDQAAAL0"]
[Sat Aug 29 05:08:19.356974 2026] [security2:error] [pid 1034096:tid 1034258] [client 158.23.147.79:6103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-includes/Text/about.php"] [unique_id "apK9oy04twRPFuquKD2nDgAAAIw"]
[Sat Aug 29 05:08:19.384788 2026] [security2:error] [pid 1034096:tid 1034283] [client 158.23.184.117:55622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/wp-content/images/uploads/admin.php"] [unique_id "apK9oy04twRPFuquKD2nDwAAAKU"]
[Sat Aug 29 05:08:19.388402 2026] [security2:error] [pid 1028675:tid 1028876] [client 40.83.93.50:1431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-admin/network/xmrlpc.php"] [unique_id "apK9o9dHPfW2QFvhmL4EVwAAAEI"]
[Sat Aug 29 05:08:19.400991 2026] [security2:error] [pid 1034096:tid 1034337] [client 52.139.37.240:23940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/wp-includes/about.php"] [unique_id "apK9oy04twRPFuquKD2nEwAAANs"]
[Sat Aug 29 05:08:19.403267 2026] [security2:error] [pid 1034096:tid 1034368] [client 158.23.147.79:11330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK9oy04twRPFuquKD2nFQAAAPo"]
[Sat Aug 29 05:08:19.434804 2026] [core:error] [pid 1034096:tid 1034259] [client 20.100.175.163:18104] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:19.434818 2026] [core:error] [pid 1034096:tid 1034259] [client 20.100.175.163:18104] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:19.459275 2026] [security2:error] [pid 1034096:tid 1034285] [client 52.139.37.240:35842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/dropdown.php"] [unique_id "apK9oy04twRPFuquKD2nGwAAAKc"]
[Sat Aug 29 05:08:19.471380 2026] [security2:error] [pid 1034096:tid 1034354] [client 158.23.147.79:6020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/chosen.php"] [unique_id "apK9oy04twRPFuquKD2nHQAAAOw"]
[Sat Aug 29 05:08:19.471394 2026] [security2:error] [pid 1034096:tid 1034308] [client 20.203.141.11:11831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-logs.php"] [unique_id "apK9oy04twRPFuquKD2nHgAAAL4"]
[Sat Aug 29 05:08:19.490052 2026] [security2:error] [pid 1034096:tid 1034297] [client 158.23.184.117:31515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/.well-known/pki-validation/x.php"] [unique_id "apK9oy04twRPFuquKD2nIAAAALM"]
[Sat Aug 29 05:08:19.501565 2026] [security2:error] [pid 1028675:tid 1028851] [client 158.23.184.117:55631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "apK9o9dHPfW2QFvhmL4EYwAAACk"]
[Sat Aug 29 05:08:19.527045 2026] [security2:error] [pid 1034096:tid 1034355] [client 68.155.159.216:65084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/classwithtostring.php"] [unique_id "apK9oy04twRPFuquKD2nIgAAAO0"]
[Sat Aug 29 05:08:19.531145 2026] [security2:error] [pid 1034096:tid 1034304] [client 158.23.184.117:55669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/tools.php"] [unique_id "apK9oy04twRPFuquKD2nIwAAALo"]
[Sat Aug 29 05:08:19.531145 2026] [security2:error] [pid 1028675:tid 1028918] [client 158.23.147.79:32635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-content/packed.php"] [unique_id "apK9o9dHPfW2QFvhmL4EZAAAAGw"]
[Sat Aug 29 05:08:19.541154 2026] [security2:error] [pid 1034096:tid 1034303] [client 68.155.159.216:65122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/lv.php"] [unique_id "apK9oy04twRPFuquKD2nJAAAALk"]
[Sat Aug 29 05:08:19.554640 2026] [security2:error] [pid 1034096:tid 1034359] [client 20.196.209.81:9050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK9oy04twRPFuquKD2nJQAAAPE"]
[Sat Aug 29 05:08:19.583776 2026] [security2:error] [pid 1034096:tid 1034274] [client 68.155.159.216:30650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9oy04twRPFuquKD2nJgAAAJw"]
[Sat Aug 29 05:08:19.606865 2026] [security2:error] [pid 1034096:tid 1034280] [client 52.139.37.240:23974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/.well-known/classwithtostring.php"] [unique_id "apK9oy04twRPFuquKD2nKQAAAKI"]
[Sat Aug 29 05:08:19.630642 2026] [security2:error] [pid 1034096:tid 1034251] [client 20.63.219.114:8875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/colors.php"] [unique_id "apK9oy04twRPFuquKD2nKgAAAIU"]
[Sat Aug 29 05:08:19.635493 2026] [security2:error] [pid 1034096:tid 1034362] [client 158.23.184.117:63105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/.well-known/pki-validation/xmrlpc.php"] [unique_id "apK9oy04twRPFuquKD2nKwAAAPQ"]
[Sat Aug 29 05:08:19.647396 2026] [security2:error] [pid 1034096:tid 1034309] [client 158.23.184.117:2965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/wp-content/plugins/alfa-rex.php"] [unique_id "apK9oy04twRPFuquKD2nLAAAAL8"]
[Sat Aug 29 05:08:19.648339 2026] [security2:error] [pid 1034096:tid 1034262] [client 20.48.160.90:64209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/BDKR28WP.php"] [unique_id "apK9oy04twRPFuquKD2nLQAAAJA"]
[Sat Aug 29 05:08:19.656447 2026] [security2:error] [pid 1034096:tid 1034346] [client 20.240.128.207:24720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/cv.php"] [unique_id "apK9oy04twRPFuquKD2nLgAAAOQ"]
[Sat Aug 29 05:08:19.663098 2026] [security2:error] [pid 1034096:tid 1034371] [client 52.139.37.240:36698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/files/index.php"] [unique_id "apK9oy04twRPFuquKD2nLwAAAP0"]
[Sat Aug 29 05:08:19.679292 2026] [security2:error] [pid 1034096:tid 1034255] [client 158.23.184.117:2894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/wp-content/uploads/my.php"] [unique_id "apK9oy04twRPFuquKD2nMAAAAIk"]
[Sat Aug 29 05:08:19.710238 2026] [security2:error] [pid 1034096:tid 1034292] [client 20.52.41.200:4602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/k.php"] [unique_id "apK9oy04twRPFuquKD2nMwAAAK4"]
[Sat Aug 29 05:08:19.718102 2026] [security2:error] [pid 1034096:tid 1034276] [client 40.83.93.50:8990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/bak.phps"] [unique_id "apK9oy04twRPFuquKD2nNAAAAJ4"]
[Sat Aug 29 05:08:19.722189 2026] [security2:error] [pid 1034096:tid 1034290] [client 68.155.159.216:51573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julieandmartin.strangeworx.com"] [uri "/first.php"] [unique_id "apK9oy04twRPFuquKD2nNQAAAKw"]
[Sat Aug 29 05:08:19.767255 2026] [security2:error] [pid 1028675:tid 1028887] [client 20.104.49.130:47989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/wpxml.php"] [unique_id "apK9o9dHPfW2QFvhmL4EZwAAAE0"]
[Sat Aug 29 05:08:19.770479 2026] [security2:error] [pid 1034096:tid 1034260] [client 158.23.147.79:50011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-content/index.php"] [unique_id "apK9oy04twRPFuquKD2nOAAAAI4"]
[Sat Aug 29 05:08:19.782599 2026] [security2:error] [pid 1034096:tid 1034293] [client 158.23.184.117:63112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/.well-known/security.php"] [unique_id "apK9oy04twRPFuquKD2nOQAAAK8"]
[Sat Aug 29 05:08:19.784459 2026] [security2:error] [pid 1034096:tid 1034258] [client 20.48.160.90:65328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/sf.php"] [unique_id "apK9oy04twRPFuquKD2nOgAAAIw"]
[Sat Aug 29 05:08:19.797235 2026] [security2:error] [pid 1028675:tid 1028846] [client 20.63.219.114:10463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/headerg.php"] [unique_id "apK9o9dHPfW2QFvhmL4EaAAAACQ"]
[Sat Aug 29 05:08:19.813845 2026] [security2:error] [pid 1034096:tid 1034291] [client 213.209.159.223:3620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/php-info.php"] [unique_id "apK9oy04twRPFuquKD2nOwAAAK0"]
[Sat Aug 29 05:08:19.815798 2026] [security2:error] [pid 1034096:tid 1034265] [client 213.209.159.223:1947] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/web/.env"] [unique_id "apK9oy04twRPFuquKD2nPAAAAJM"]
[Sat Aug 29 05:08:19.817201 2026] [security2:error] [pid 1028675:tid 1028855] [client 40.83.93.50:16298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/config.php"] [unique_id "apK9o9dHPfW2QFvhmL4EagAAAC0"]
[Sat Aug 29 05:08:19.842820 2026] [security2:error] [pid 1034096:tid 1034269] [client 20.104.104.62:48000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/zoz.php"] [unique_id "apK9oy04twRPFuquKD2nPQAAAJc"]
[Sat Aug 29 05:08:19.858766 2026] [security2:error] [pid 1034096:tid 1034295] [client 52.139.37.240:36824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "block-clothing.glowt-shirt.com"] [uri "/flower.php"] [unique_id "apK9oy04twRPFuquKD2nPgAAALE"]
[Sat Aug 29 05:08:19.885847 2026] [security2:error] [pid 1034096:tid 1034298] [client 40.83.93.50:2036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-admin/options-general.php"] [unique_id "apK9oy04twRPFuquKD2nPwAAALQ"]
[Sat Aug 29 05:08:19.888718 2026] [security2:error] [pid 1034096:tid 1034348] [client 68.155.159.216:5958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/admin.php"] [unique_id "apK9oy04twRPFuquKD2nQAAAAOY"]
[Sat Aug 29 05:08:19.889898 2026] [security2:error] [pid 1034096:tid 1034367] [client 20.104.104.62:20844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/enter.php"] [unique_id "apK9oy04twRPFuquKD2nQQAAAPk"]
[Sat Aug 29 05:08:19.890841 2026] [security2:error] [pid 1028675:tid 1028897] [client 52.139.37.240:23844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/403.php"] [unique_id "apK9o9dHPfW2QFvhmL4EbQAAAFc"]
[Sat Aug 29 05:08:19.945499 2026] [security2:error] [pid 1034096:tid 1034374] [client 20.203.141.11:2724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-admin/css/about.php"] [unique_id "apK9oy04twRPFuquKD2nQgAAAQA"]
[Sat Aug 29 05:08:19.951924 2026] [security2:error] [pid 1028675:tid 1028907] [client 158.23.147.79:26448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK9o9dHPfW2QFvhmL4EbgAAAGE"]
[Sat Aug 29 05:08:19.953466 2026] [security2:error] [pid 1034096:tid 1034268] [client 20.100.175.163:48193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/222.php"] [unique_id "apK9oy04twRPFuquKD2nRAAAAJY"]
[Sat Aug 29 05:08:19.953500 2026] [security2:error] [pid 1034096:tid 1034327] [client 213.209.159.223:1947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autoconfig.greatdecisionsofcharlevoix.com"] [uri "/phpinfo.php3"] [unique_id "apK9oy04twRPFuquKD2nQwAAANE"]
[Sat Aug 29 05:08:19.960563 2026] [security2:error] [pid 1034096:tid 1034302] [client 20.48.160.90:64219] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/k.php"] [unique_id "apK9oy04twRPFuquKD2nRQAAALg"]
[Sat Aug 29 05:08:19.966434 2026] [security2:error] [pid 1028675:tid 1028825] [client 68.155.159.216:38659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/dropdown.php"] [unique_id "apK9o9dHPfW2QFvhmL4EbwAAAA8"]
[Sat Aug 29 05:08:19.969033 2026] [security2:error] [pid 1028675:tid 1028914] [client 20.196.209.81:9039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-content/languages/chosen.php"] [unique_id "apK9o9dHPfW2QFvhmL4EcAAAAGg"]
[Sat Aug 29 05:08:19.985598 2026] [security2:error] [pid 1028675:tid 1028847] [client 68.155.159.216:24555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-includes/index.php"] [unique_id "apK9o9dHPfW2QFvhmL4EcgAAACU"]
[Sat Aug 29 05:08:19.989700 2026] [security2:error] [pid 1034096:tid 1034308] [client 20.104.104.62:37641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/ws66.php"] [unique_id "apK9oy04twRPFuquKD2nRgAAAL4"]
[Sat Aug 29 05:08:20.004789 2026] [security2:error] [pid 1034096:tid 1034297] [client 68.155.159.216:18330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/about/function.php"] [unique_id "apK9pC04twRPFuquKD2nRwAAALM"]
[Sat Aug 29 05:08:20.009724 2026] [security2:error] [pid 1028675:tid 1028862] [client 20.104.104.62:48019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/mmm.php"] [unique_id "apK9pNdHPfW2QFvhmL4EcwAAADQ"]
[Sat Aug 29 05:08:20.014631 2026] [security2:error] [pid 1034096:tid 1034294] [client 20.63.219.114:18552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/Js.php"] [unique_id "apK9pC04twRPFuquKD2nSAAAALA"]
[Sat Aug 29 05:08:20.018472 2026] [security2:error] [pid 1034096:tid 1034317] [client 4.205.62.107:58402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/cp2.php"] [unique_id "apK9pC04twRPFuquKD2nSQAAAMc"]
[Sat Aug 29 05:08:20.031169 2026] [security2:error] [pid 1034096:tid 1034275] [client 20.197.61.180:1259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/wp-configs.php"] [unique_id "apK9pC04twRPFuquKD2nSgAAAJ0"]
[Sat Aug 29 05:08:20.049102 2026] [security2:error] [pid 1028675:tid 1028877] [client 20.104.104.62:22779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sellmylike.millionairebuildersclub.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK9pNdHPfW2QFvhmL4EdQAAAEM"]
[Sat Aug 29 05:08:20.050446 2026] [autoindex:error] [pid 1028675:tid 1028879] [client 31.135.15.61:49864] AH01276: Cannot serve directory /home3/oxrdvzmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://mail.oxr.dvz.mybluehost.me/
[Sat Aug 29 05:08:20.069136 2026] [security2:error] [pid 1034096:tid 1034182] [remote 34.139.86.26:58240] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ptstmobile.ztxcloud.com"] [uri "/@fs/app/.env"] [unique_id "apK9pC04twRPFuquKD2nTQAAwDw"]
[Sat Aug 29 05:08:20.084186 2026] [security2:error] [pid 1034096:tid 1034319] [client 52.139.37.240:23818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/input.php"] [unique_id "apK9pC04twRPFuquKD2nTwAAAMk"]
[Sat Aug 29 05:08:20.108118 2026] [security2:error] [pid 1028675:tid 1028937] [client 158.23.147.79:53839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK9pNdHPfW2QFvhmL4EdgAAAH8"]
[Sat Aug 29 05:08:20.131182 2026] [security2:error] [pid 1034096:tid 1034340] [client 20.104.104.62:40084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/Cok.php"] [unique_id "apK9pC04twRPFuquKD2nUQAAAN4"]
[Sat Aug 29 05:08:20.135643 2026] [security2:error] [pid 1034096:tid 1034359] [client 20.48.160.90:65325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/82.php"] [unique_id "apK9pC04twRPFuquKD2nUwAAAPE"]
[Sat Aug 29 05:08:20.153070 2026] [security2:error] [pid 1028675:tid 1028880] [client 20.63.219.114:10448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/meta.php"] [unique_id "apK9pNdHPfW2QFvhmL4EeAAAAEY"]
[Sat Aug 29 05:08:20.153600 2026] [security2:error] [pid 1028675:tid 1028902] [client 20.240.128.207:31084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-content/packed.php"] [unique_id "apK9pNdHPfW2QFvhmL4EeQAAAFw"]
[Sat Aug 29 05:08:20.163590 2026] [security2:error] [pid 1028675:tid 1028859] [client 20.52.41.200:4597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/root.php"] [unique_id "apK9pNdHPfW2QFvhmL4EegAAADE"]
[Sat Aug 29 05:08:20.168948 2026] [security2:error] [pid 1028675:tid 1028932] [client 158.23.147.79:35235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK9pNdHPfW2QFvhmL4EfAAAAHo"]
[Sat Aug 29 05:08:20.176889 2026] [security2:error] [pid 1028675:tid 1028888] [client 180.190.5.40:39866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.5.190.180.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK9pNdHPfW2QFvhmL4EewAAAE4"]
[Sat Aug 29 05:08:20.176995 2026] [security2:error] [pid 1028675:tid 1028888] [client 180.190.5.40:39866] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK9pNdHPfW2QFvhmL4EewAAAE4"]
[Sat Aug 29 05:08:20.186103 2026] [security2:error] [pid 1034096:tid 1034186] [remote 34.139.86.26:58240] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ptstmobile.ztxcloud.com"] [uri "/@fs/src/.env"] [unique_id "apK9pC04twRPFuquKD2nWAAAhUA"]
[Sat Aug 29 05:08:20.186193 2026] [security2:error] [pid 1034096:tid 1034301] [client 40.83.93.50:8432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/install.php"] [unique_id "apK9pC04twRPFuquKD2nWQAAALc"]
[Sat Aug 29 05:08:20.202748 2026] [security2:error] [pid 1034096:tid 1034365] [client 158.23.147.79:17491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/makeasmtp.php"] [unique_id "apK9pC04twRPFuquKD2nWgAAAPc"]
[Sat Aug 29 05:08:20.207951 2026] [security2:error] [pid 1034096:tid 1034345] [client 68.155.159.216:33496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK9pC04twRPFuquKD2nWwAAAOM"]
[Sat Aug 29 05:08:20.229984 2026] [security2:error] [pid 1028675:tid 1028832] [client 110.249.201.177:62348] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "wticalumni.com"] [uri "/robots.txt"] [unique_id "apK9pNdHPfW2QFvhmL4EfQAAABY"]
[Sat Aug 29 05:08:20.246613 2026] [security2:error] [pid 1028675:tid 1028925] [client 158.23.147.79:17541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-admin/css/index.php"] [unique_id "apK9pNdHPfW2QFvhmL4EfwAAAHM"]
[Sat Aug 29 05:08:20.259272 2026] [security2:error] [pid 1028675:tid 1028815] [client 4.205.62.107:21858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/setup-config.php"] [unique_id "apK9pNdHPfW2QFvhmL4EgAAAAAU"]
[Sat Aug 29 05:08:20.279751 2026] [security2:error] [pid 1028675:tid 1028911] [client 52.139.37.240:23577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "apK9pNdHPfW2QFvhmL4EgQAAAGU"]
[Sat Aug 29 05:08:20.284258 2026] [security2:error] [pid 1034096:tid 1034373] [client 20.48.160.90:64172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/dex.php"] [unique_id "apK9pC04twRPFuquKD2nXgAAAP8"]
[Sat Aug 29 05:08:20.317904 2026] [security2:error] [pid 1034096:tid 1034270] [client 20.104.49.130:45733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.carlosmua.com"] [uri "/ws78.php"] [unique_id "apK9pC04twRPFuquKD2nXwAAAJg"]
[Sat Aug 29 05:08:20.338040 2026] [security2:error] [pid 1034096:tid 1034323] [client 68.155.159.216:23488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-admin/about.php"] [unique_id "apK9pC04twRPFuquKD2nYAAAAM0"]
[Sat Aug 29 05:08:20.350819 2026] [security2:error] [pid 1034096:tid 1034328] [client 40.83.93.50:2028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-admin/options.php"] [unique_id "apK9pC04twRPFuquKD2nYQAAANI"]
[Sat Aug 29 05:08:20.364798 2026] [security2:error] [pid 1034096:tid 1034292] [client 20.196.209.81:9068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-content/languages/index.php"] [unique_id "apK9pC04twRPFuquKD2nYgAAAK4"]
[Sat Aug 29 05:08:20.365833 2026] [security2:error] [pid 1034096:tid 1034321] [client 4.205.62.107:8960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/app_local.php"] [unique_id "apK9pC04twRPFuquKD2nYwAAAMs"]
[Sat Aug 29 05:08:20.374550 2026] [security2:error] [pid 1034096:tid 1034276] [client 20.63.219.114:16696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/access.php"] [unique_id "apK9pC04twRPFuquKD2nZAAAAJ4"]
[Sat Aug 29 05:08:20.380041 2026] [security2:error] [pid 1034096:tid 1034316] [client 4.205.62.107:25013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/plss3.php"] [unique_id "apK9pC04twRPFuquKD2nZQAAAMY"]
[Sat Aug 29 05:08:20.383213 2026] [security2:error] [pid 1028675:tid 1028858] [client 40.83.93.50:8392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/22.php"] [unique_id "apK9pNdHPfW2QFvhmL4EhAAAADA"]
[Sat Aug 29 05:08:20.397400 2026] [security2:error] [pid 1034096:tid 1034330] [client 195.178.110.247:17038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.liznichols.com"] [uri "/index.php"] [unique_id "apK9pC04twRPFuquKD2nZgAAANQ"]
[Sat Aug 29 05:08:20.406824 2026] [security2:error] [pid 1028675:tid 1028918] [client 68.155.159.216:14276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK9pNdHPfW2QFvhmL4EhQAAAGw"]
[Sat Aug 29 05:08:20.432754 2026] [security2:error] [pid 1028675:tid 1028857] [client 20.203.141.11:17426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/system_log.php"] [unique_id "apK9pNdHPfW2QFvhmL4EigAAAC8"]
[Sat Aug 29 05:08:20.439228 2026] [security2:error] [pid 1034096:tid 1034263] [client 20.100.175.163:48234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/x.php"] [unique_id "apK9pC04twRPFuquKD2naAAAAJE"]
[Sat Aug 29 05:08:20.452485 2026] [security2:error] [pid 1028675:tid 1028811] [client 158.23.147.79:6104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/asd.php"] [unique_id "apK9pNdHPfW2QFvhmL4EiwAAAAE"]
[Sat Aug 29 05:08:20.476860 2026] [security2:error] [pid 1028675:tid 1028835] [client 52.139.37.240:23835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/wp-content/themes/twentytwenty/404.php"] [unique_id "apK9pNdHPfW2QFvhmL4EjQAAABk"]
[Sat Aug 29 05:08:20.478537 2026] [security2:error] [pid 1034096:tid 1034283] [client 4.205.62.107:53158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/phina.php"] [unique_id "apK9pC04twRPFuquKD2nagAAAKU"]
[Sat Aug 29 05:08:20.514183 2026] [security2:error] [pid 1034096:tid 1034260] [client 20.63.219.114:1345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/dxc.php"] [unique_id "apK9pC04twRPFuquKD2nawAAAI4"]
[Sat Aug 29 05:08:20.515641 2026] [security2:error] [pid 1028675:tid 1028849] [client 20.48.160.90:64225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/inso.php"] [unique_id "apK9pNdHPfW2QFvhmL4EjwAAACc"]
[Sat Aug 29 05:08:20.524865 2026] [security2:error] [pid 1028675:tid 1028916] [client 111.235.68.106:46235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK9pNdHPfW2QFvhmL4EkAAAAGo"]
[Sat Aug 29 05:08:20.524989 2026] [security2:error] [pid 1028675:tid 1028916] [client 111.235.68.106:46235] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK9pNdHPfW2QFvhmL4EkAAAAGo"]
[Sat Aug 29 05:08:20.526748 2026] [security2:error] [pid 1028675:tid 1028848] [client 158.23.147.79:11265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-content/banners/about.php"] [unique_id "apK9pNdHPfW2QFvhmL4EkQAAACY"]
[Sat Aug 29 05:08:20.535335 2026] [security2:error] [pid 1028675:tid 1028908] [client 61.9.8.52:16254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 52.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK9pNdHPfW2QFvhmL4EkgAAAGI"]
[Sat Aug 29 05:08:20.535426 2026] [security2:error] [pid 1028675:tid 1028908] [client 61.9.8.52:16254] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK9pNdHPfW2QFvhmL4EkgAAAGI"]
[Sat Aug 29 05:08:20.549752 2026] [security2:error] [pid 1034096:tid 1034264] [client 68.155.159.216:1925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9pC04twRPFuquKD2nbAAAAJI"]
[Sat Aug 29 05:08:20.559308 2026] [security2:error] [pid 1034096:tid 1034347] [client 195.178.110.247:33746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.liznichols.com"] [uri "/index.php"] [unique_id "apK9pC04twRPFuquKD2nbQAAAOU"]
[Sat Aug 29 05:08:20.633221 2026] [security2:error] [pid 1034096:tid 1034282] [client 20.52.41.200:4570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/p.php"] [unique_id "apK9pC04twRPFuquKD2ndAAAAKQ"]
[Sat Aug 29 05:08:20.635821 2026] [security2:error] [pid 1034096:tid 1034285] [client 158.23.147.79:32710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-l0gin.php"] [unique_id "apK9pC04twRPFuquKD2ndQAAAKc"]
[Sat Aug 29 05:08:20.638634 2026] [security2:error] [pid 1034096:tid 1034318] [client 68.155.159.216:52737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-content/index.php"] [unique_id "apK9pC04twRPFuquKD2ndgAAAMg"]
[Sat Aug 29 05:08:20.639074 2026] [security2:error] [pid 1034096:tid 1034268] [client 68.155.159.216:65083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/install.php"] [unique_id "apK9pC04twRPFuquKD2ndwAAAJY"]
[Sat Aug 29 05:08:20.652108 2026] [security2:error] [pid 1028675:tid 1028860] [client 20.240.128.207:7368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-admin/js/index.php"] [unique_id "apK9pNdHPfW2QFvhmL4EkwAAADI"]
[Sat Aug 29 05:08:20.652802 2026] [security2:error] [pid 1028675:tid 1028923] [client 40.83.93.50:8460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/colour.php"] [unique_id "apK9pNdHPfW2QFvhmL4ElAAAAHE"]
[Sat Aug 29 05:08:20.674537 2026] [security2:error] [pid 1034096:tid 1034368] [client 52.139.37.240:23555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/01.php"] [unique_id "apK9pC04twRPFuquKD2neAAAAPo"]
[Sat Aug 29 05:08:20.754965 2026] [security2:error] [pid 1034096:tid 1034298] [client 20.63.219.114:18557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/classsmtps.php"] [unique_id "apK9pC04twRPFuquKD2neQAAALQ"]
[Sat Aug 29 05:08:20.767520 2026] [security2:error] [pid 1034096:tid 1034315] [client 20.196.209.81:17320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-content/languages/min.php"] [unique_id "apK9pC04twRPFuquKD2negAAAMU"]
[Sat Aug 29 05:08:20.784960 2026] [security2:error] [pid 1028675:tid 1028825] [client 20.48.160.90:65350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/aa.php"] [unique_id "apK9pNdHPfW2QFvhmL4ElQAAAA8"]
[Sat Aug 29 05:08:20.821069 2026] [security2:error] [pid 1028675:tid 1028887] [client 20.197.61.180:10625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/essexec.php"] [unique_id "apK9pNdHPfW2QFvhmL4ElgAAAE0"]
[Sat Aug 29 05:08:20.822668 2026] [security2:error] [pid 1028675:tid 1028861] [client 40.83.93.50:2016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-admin/panel.php"] [unique_id "apK9pNdHPfW2QFvhmL4ElwAAADM"]
[Sat Aug 29 05:08:20.838011 2026] [security2:error] [pid 1034096:tid 1034275] [client 20.197.61.180:1467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/post.php"] [unique_id "apK9pC04twRPFuquKD2nfQAAAJ0"]
[Sat Aug 29 05:08:20.841438 2026] [security2:error] [pid 1034096:tid 1034344] [client 158.23.184.117:2887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/wp-includes/themes/uploads/config.php"] [unique_id "apK9pC04twRPFuquKD2nfgAAAOI"]
[Sat Aug 29 05:08:20.845116 2026] [security2:error] [pid 1034096:tid 1034300] [client 158.23.184.117:2929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/test.php"] [unique_id "apK9pC04twRPFuquKD2nfwAAALY"]
[Sat Aug 29 05:08:20.855190 2026] [security2:error] [pid 1034096:tid 1034302] [client 40.83.93.50:9010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/bak.phps"] [unique_id "apK9pC04twRPFuquKD2ngQAAALg"]
[Sat Aug 29 05:08:20.869154 2026] [security2:error] [pid 1028675:tid 1028847] [client 52.139.37.240:23848] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcalendars.docpepper.net"] [uri "/1.php"] [unique_id "apK9pNdHPfW2QFvhmL4EmQAAACU"]
[Sat Aug 29 05:08:20.869229 2026] [security2:error] [pid 1028675:tid 1028847] [client 52.139.37.240:23848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/1.php"] [unique_id "apK9pNdHPfW2QFvhmL4EmQAAACU"]
[Sat Aug 29 05:08:20.871092 2026] [security2:error] [pid 1028675:tid 1028878] [client 20.63.81.20:63036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9pNdHPfW2QFvhmL4EmgAAAEQ"]
[Sat Aug 29 05:08:20.900310 2026] [security2:error] [pid 1034096:tid 1034352] [client 20.104.104.62:20686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-enter.php"] [unique_id "apK9pC04twRPFuquKD2nggAAAOo"]
[Sat Aug 29 05:08:20.936781 2026] [security2:error] [pid 1034096:tid 1034297] [client 20.100.175.163:48241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/new.php"] [unique_id "apK9pC04twRPFuquKD2nhQAAALM"]
[Sat Aug 29 05:08:20.938565 2026] [security2:error] [pid 1034096:tid 1034312] [client 158.23.184.117:31520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/.well-known/system.php"] [unique_id "apK9pC04twRPFuquKD2nhgAAAMI"]
[Sat Aug 29 05:08:20.957888 2026] [security2:error] [pid 1034096:tid 1034308] [client 20.63.219.114:18537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/wp-2019.php"] [unique_id "apK9pC04twRPFuquKD2nhwAAAL4"]
[Sat Aug 29 05:08:20.958233 2026] [security2:error] [pid 1034096:tid 1034294] [client 20.203.141.11:26232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/24.php"] [unique_id "apK9pC04twRPFuquKD2niAAAALA"]
[Sat Aug 29 05:08:20.964672 2026] [security2:error] [pid 1034096:tid 1034350] [client 68.155.159.216:49259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-admin/index.php"] [unique_id "apK9pC04twRPFuquKD2niQAAAOg"]
[Sat Aug 29 05:08:20.971736 2026] [security2:error] [pid 1034096:tid 1034340] [client 20.48.160.90:64190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/img.php"] [unique_id "apK9pC04twRPFuquKD2nigAAAN4"]
[Sat Aug 29 05:08:20.976796 2026] [security2:error] [pid 1034096:tid 1034192] [remote 34.139.86.26:58240] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ptstmobile.ztxcloud.com"] [uri "/.env"] [unique_id "apK9pC04twRPFuquKD2niwABAUY"]
[Sat Aug 29 05:08:20.986597 2026] [security2:error] [pid 1034096:tid 1034193] [remote 34.139.86.26:58240] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "ptstmobile.ztxcloud.com"] [uri "/@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ"] [unique_id "apK9pC04twRPFuquKD2njAAAnEc"]
[Sat Aug 29 05:08:21.004161 2026] [security2:error] [pid 1034096:tid 1034363] [client 20.63.81.20:63031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9pS04twRPFuquKD2njQAAAPU"]
[Sat Aug 29 05:08:21.026011 2026] [security2:error] [pid 1028675:tid 1028883] [client 158.23.184.117:2903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/av.php"] [unique_id "apK9pddHPfW2QFvhmL4EnwAAAEk"]
[Sat Aug 29 05:08:21.035155 2026] [security2:error] [pid 1034096:tid 1034309] [client 93.123.109.102:56076] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "cpcalendars.grafine.mx"] [uri "/___proxy_subdomain_cpcalendars/.svn/entries"] [unique_id "apK9pS04twRPFuquKD2nkQAAAL8"]
[Sat Aug 29 05:08:21.065374 2026] [security2:error] [pid 1034096:tid 1034301] [client 158.23.184.117:2917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/wp-includes/mani.php"] [unique_id "apK9pS04twRPFuquKD2nkgAAALc"]
[Sat Aug 29 05:08:21.065416 2026] [security2:error] [pid 1034096:tid 1034311] [client 52.139.37.240:23570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/lv.php"] [unique_id "apK9pS04twRPFuquKD2nkwAAAME"]
[Sat Aug 29 05:08:21.072324 2026] [security2:error] [pid 1034096:tid 1034262] [client 68.155.159.216:56571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/sad/about.php"] [unique_id "apK9pS04twRPFuquKD2nlAAAAJA"]
[Sat Aug 29 05:08:21.075083 2026] [security2:error] [pid 1034096:tid 1034329] [client 158.23.147.79:26481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK9pS04twRPFuquKD2nlQAAANM"]
[Sat Aug 29 05:08:21.084714 2026] [security2:error] [pid 1034096:tid 1034255] [client 158.23.147.79:6130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/goods.php"] [unique_id "apK9pS04twRPFuquKD2nlgAAAIk"]
[Sat Aug 29 05:08:21.086103 2026] [security2:error] [pid 1034096:tid 1034339] [client 20.52.41.200:5338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/a1.php"] [unique_id "apK9pS04twRPFuquKD2nlwAAAN0"]
[Sat Aug 29 05:08:21.087665 2026] [security2:error] [pid 1034096:tid 1034365] [client 68.155.159.216:24459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/mah.php"] [unique_id "apK9pS04twRPFuquKD2nmAAAAPc"]
[Sat Aug 29 05:08:21.089996 2026] [security2:error] [pid 1028675:tid 1028840] [client 158.23.184.117:63167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/.well-known/users.php"] [unique_id "apK9pddHPfW2QFvhmL4EoQAAAB4"]
[Sat Aug 29 05:08:21.108046 2026] [security2:error] [pid 1034096:tid 1034289] [client 68.155.159.216:18261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK9pS04twRPFuquKD2nmQAAAKs"]
[Sat Aug 29 05:08:21.115565 2026] [security2:error] [pid 1034096:tid 1034280] [client 20.63.219.114:1353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/contentloader1.php"] [unique_id "apK9pS04twRPFuquKD2nmgAAAKI"]
[Sat Aug 29 05:08:21.134349 2026] [security2:error] [pid 1034096:tid 1034359] [client 40.83.93.50:16306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/OK.php"] [unique_id "apK9pS04twRPFuquKD2nmwAAAPE"]
[Sat Aug 29 05:08:21.148051 2026] [security2:error] [pid 1028675:tid 1028902] [client 20.240.128.207:24716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/core.php"] [unique_id "apK9pddHPfW2QFvhmL4EowAAAFw"]
[Sat Aug 29 05:08:21.155196 2026] [security2:error] [pid 1034096:tid 1034335] [client 20.63.81.20:57945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/ap.php"] [unique_id "apK9pS04twRPFuquKD2nnAAAANk"]
[Sat Aug 29 05:08:21.157310 2026] [security2:error] [pid 1034096:tid 1034276] [client 4.205.62.107:58409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/error_log.php"] [unique_id "apK9pS04twRPFuquKD2nnQAAAJ4"]
[Sat Aug 29 05:08:21.169911 2026] [security2:error] [pid 1034096:tid 1034342] [client 20.196.209.81:17288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-content/languages/pk.php"] [unique_id "apK9pS04twRPFuquKD2nngAAAOA"]
[Sat Aug 29 05:08:21.188813 2026] [security2:error] [pid 1028675:tid 1028843] [client 20.104.104.62:37514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/advanced.php"] [unique_id "apK9pddHPfW2QFvhmL4EpQAAACE"]
[Sat Aug 29 05:08:21.207020 2026] [security2:error] [pid 1034096:tid 1034263] [client 20.48.160.90:64175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/222.php"] [unique_id "apK9pS04twRPFuquKD2nnwAAAJE"]
[Sat Aug 29 05:08:21.209233 2026] [security2:error] [pid 1034096:tid 1034265] [client 158.23.147.79:58750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/goat1.php"] [unique_id "apK9pS04twRPFuquKD2noAAAAJM"]
[Sat Aug 29 05:08:21.209542 2026] [http2:warn] [pid 1018003:tid 1018272] [client 57.141.14.67:61602] h2_stream(1018003-14-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:08:21.210904 2026] [security2:error] [pid 1034096:tid 1034316] [client 158.23.184.117:2925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/wp-includes/Test.php"] [unique_id "apK9pS04twRPFuquKD2noQAAAMY"]
[Sat Aug 29 05:08:21.227641 2026] [security2:error] [pid 1028675:tid 1028911] [client 158.23.184.117:2881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/wp-includes/ID3/file.php"] [unique_id "apK9pddHPfW2QFvhmL4EpgAAAGU"]
[Sat Aug 29 05:08:21.232222 2026] [security2:error] [pid 1034096:tid 1034293] [client 158.23.184.117:63139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/.well-known/wp-blog-header.php"] [unique_id "apK9pS04twRPFuquKD2nogAAAK8"]
[Sat Aug 29 05:08:21.249084 2026] [security2:error] [pid 1034096:tid 1034330] [client 20.104.104.62:22767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sellmylike.millionairebuildersclub.com"] [uri "/wp-content/index.php"] [unique_id "apK9pS04twRPFuquKD2npAAAANQ"]
[Sat Aug 29 05:08:21.258832 2026] [security2:error] [pid 1034096:tid 1034258] [client 52.139.37.240:23837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/gecko.php"] [unique_id "apK9pS04twRPFuquKD2npQAAAIw"]
[Sat Aug 29 05:08:21.281253 2026] [security2:error] [pid 1028675:tid 1028894] [client 20.104.104.62:37652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/X7T6.php"] [unique_id "apK9pddHPfW2QFvhmL4EqQAAAFQ"]
[Sat Aug 29 05:08:21.293596 2026] [security2:error] [pid 1034096:tid 1034356] [client 20.63.81.20:63056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/media.php"] [unique_id "apK9pS04twRPFuquKD2nqAAAAO4"]
[Sat Aug 29 05:08:21.294122 2026] [security2:error] [pid 1034096:tid 1034259] [client 20.104.49.130:58216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/sym.php"] [unique_id "apK9pS04twRPFuquKD2nqQAAAI0"]
[Sat Aug 29 05:08:21.317954 2026] [security2:error] [pid 1034096:tid 1034328] [client 40.83.93.50:1441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-admin/pk.php"] [unique_id "apK9pS04twRPFuquKD2nqgAAANI"]
[Sat Aug 29 05:08:21.337930 2026] [security2:error] [pid 1034096:tid 1034354] [client 20.104.104.62:37521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/blox.php"] [unique_id "apK9pS04twRPFuquKD2nqwAAAOw"]
[Sat Aug 29 05:08:21.343952 2026] [security2:error] [pid 1034096:tid 1034337] [client 68.155.159.216:33696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-content/admin.php"] [unique_id "apK9pS04twRPFuquKD2nrAAAANs"]
[Sat Aug 29 05:08:21.357045 2026] [security2:error] [pid 1034096:tid 1034268] [client 158.23.184.117:55617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/wp-includes/pomo.php"] [unique_id "apK9pS04twRPFuquKD2nrQAAAJY"]
[Sat Aug 29 05:08:21.368731 2026] [security2:error] [pid 1034096:tid 1034357] [client 158.23.147.79:17563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK9pS04twRPFuquKD2nrgAAAO8"]
[Sat Aug 29 05:08:21.373522 2026] [security2:error] [pid 1028675:tid 1028851] [client 158.23.184.117:2782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.capturephoto.net"] [uri "/wp-admin/css/fff.php"] [unique_id "apK9pddHPfW2QFvhmL4EqwAAACk"]
[Sat Aug 29 05:08:21.373946 2026] [security2:error] [pid 1034096:tid 1034275] [client 158.23.147.79:17617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK9pS04twRPFuquKD2nsQAAAJ0"]
[Sat Aug 29 05:08:21.374628 2026] [security2:error] [pid 1028675:tid 1028824] [client 158.23.184.117:31527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/.well-known/wp-links-opml.php"] [unique_id "apK9pddHPfW2QFvhmL4ErAAAAA4"]
[Sat Aug 29 05:08:21.379882 2026] [autoindex:error] [pid 1034096:tid 1034283] [client 205.210.31.141:65438] AH01276: Cannot serve directory /home3/oovyqemy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:08:21.386465 2026] [security2:error] [pid 1034096:tid 1034360] [client 40.83.93.50:8458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/install.php"] [unique_id "apK9pS04twRPFuquKD2nswAAAPI"]
[Sat Aug 29 05:08:21.390918 2026] [autoindex:error] [pid 1034096:tid 1034269] [client 205.210.31.141:65444] AH01276: Cannot serve directory /home3/xxzaslmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:08:21.396193 2026] [security2:error] [pid 1028675:tid 1028811] [client 4.205.62.107:22380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/wp-admin/sc.php"] [unique_id "apK9pddHPfW2QFvhmL4ErQAAAAE"]
[Sat Aug 29 05:08:21.397103 2026] [security2:error] [pid 1028675:tid 1028909] [client 158.23.147.79:49851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/about/function.php"] [unique_id "apK9pddHPfW2QFvhmL4ErgAAAGM"]
[Sat Aug 29 05:08:21.400750 2026] [security2:error] [pid 1028675:tid 1028835] [client 20.48.160.90:63306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/key.php"] [unique_id "apK9pddHPfW2QFvhmL4EsAAAABk"]
[Sat Aug 29 05:08:21.427104 2026] [security2:error] [pid 1028675:tid 1028922] [client 20.100.175.163:5503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/menu.php"] [unique_id "apK9pddHPfW2QFvhmL4EsQAAAHA"]
[Sat Aug 29 05:08:21.435940 2026] [security2:error] [pid 1028675:tid 1028916] [client 20.63.81.20:57967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/adminfuns.php"] [unique_id "apK9pddHPfW2QFvhmL4EtQAAAGo"]
[Sat Aug 29 05:08:21.438167 2026] [security2:error] [pid 1028675:tid 1028848] [client 68.155.159.216:23406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK9pddHPfW2QFvhmL4EtgAAACY"]
[Sat Aug 29 05:08:21.438184 2026] [security2:error] [pid 1028675:tid 1028844] [client 20.63.219.114:18533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/menu.php"] [unique_id "apK9pddHPfW2QFvhmL4EtwAAACI"]
[Sat Aug 29 05:08:21.442263 2026] [security2:error] [pid 1034096:tid 1034344] [client 20.104.104.62:22775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sellmylike.millionairebuildersclub.com"] [uri "/wp-content/uploads/wpr-addons/forms/b1ack.php"] [unique_id "apK9pS04twRPFuquKD2ntQAAAOI"]
[Sat Aug 29 05:08:21.462782 2026] [security2:error] [pid 1034096:tid 1034314] [client 52.139.37.240:23594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/new.php"] [unique_id "apK9pS04twRPFuquKD2ntgAAAMQ"]
[Sat Aug 29 05:08:21.463152 2026] [security2:error] [pid 1028675:tid 1028775] [remote 162.240.171.12:46892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.171.240.162.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fellowsofmythgar.com"] [uri "/wp-login.php"] [unique_id "apK9pddHPfW2QFvhmL4EuAAAJF4"], referer: https://fellowsofmythgar.com/wp-login.php
[Sat Aug 29 05:08:21.468686 2026] [security2:error] [pid 1028675:tid 1028892] [client 20.63.219.114:15901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/al.php"] [unique_id "apK9pddHPfW2QFvhmL4EuQAAAFI"]
[Sat Aug 29 05:08:21.477792 2026] [security2:error] [pid 1034096:tid 1034304] [client 20.104.104.62:40080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/see.php"] [unique_id "apK9pS04twRPFuquKD2ntwAAALo"]
[Sat Aug 29 05:08:21.500234 2026] [security2:error] [pid 1034096:tid 1034271] [client 20.104.104.62:37513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/kcs.php"] [unique_id "apK9pS04twRPFuquKD2nuQAAAJk"]
[Sat Aug 29 05:08:21.504344 2026] [security2:error] [pid 1034096:tid 1034317] [client 213.209.159.223:48389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/info.php.bak"] [unique_id "apK9pS04twRPFuquKD2nugAAAMc"]
[Sat Aug 29 05:08:21.511181 2026] [security2:error] [pid 1034096:tid 1034197] [remote 34.139.86.26:36612] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ptstmobile.ztxcloud.com"] [uri "/media../.env"] [unique_id "apK9pS04twRPFuquKD2nvQAA6Es"]
[Sat Aug 29 05:08:21.511193 2026] [security2:error] [pid 1034096:tid 1034198] [remote 34.139.86.26:36612] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ptstmobile.ztxcloud.com"] [uri "/files../.env"] [unique_id "apK9pS04twRPFuquKD2nvAAA6Ew"]
[Sat Aug 29 05:08:21.511341 2026] [security2:error] [pid 1034096:tid 1034201] [remote 34.139.86.26:36612] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ptstmobile.ztxcloud.com"] [uri "/static/app/.env"] [unique_id "apK9pS04twRPFuquKD2nvgAA6E8"]
[Sat Aug 29 05:08:21.511610 2026] [security2:error] [pid 1034096:tid 1034200] [remote 34.139.86.26:36612] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ptstmobile.ztxcloud.com"] [uri "/static/home/user/.env"] [unique_id "apK9pS04twRPFuquKD2nvwAA6E4"]
[Sat Aug 29 05:08:21.511768 2026] [security2:error] [pid 1028675:tid 1028927] [client 68.155.159.216:14328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/chosen.php"] [unique_id "apK9pddHPfW2QFvhmL4EvgAAAHU"]
[Sat Aug 29 05:08:21.511968 2026] [security2:error] [pid 1034096:tid 1034199] [remote 34.139.86.26:36612] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ptstmobile.ztxcloud.com"] [uri "/static/.env"] [unique_id "apK9pS04twRPFuquKD2nwAAA6E0"]
[Sat Aug 29 05:08:21.513421 2026] [security2:error] [pid 1034096:tid 1034202] [remote 34.139.86.26:36612] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ptstmobile.ztxcloud.com"] [uri "/.env"] [unique_id "apK9pS04twRPFuquKD2nwgAA6FA"]
[Sat Aug 29 05:08:21.515824 2026] [security2:error] [pid 1034096:tid 1034340] [client 4.205.62.107:26636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/aws.php"] [unique_id "apK9pS04twRPFuquKD2nwwAAAN4"]
[Sat Aug 29 05:08:21.517375 2026] [security2:error] [pid 1028675:tid 1028814] [client 20.104.104.62:40246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/cakt.php"] [unique_id "apK9pddHPfW2QFvhmL4EvwAAAAQ"]
[Sat Aug 29 05:08:21.518343 2026] [security2:error] [pid 1028675:tid 1028821] [client 158.23.184.117:31509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/.well-known/wp-load.php"] [unique_id "apK9pddHPfW2QFvhmL4EwAAAAAs"]
[Sat Aug 29 05:08:21.524468 2026] [security2:error] [pid 1028675:tid 1028877] [client 103.162.125.59:59523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.125.162.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK9pddHPfW2QFvhmL4EwQAAAEM"]
[Sat Aug 29 05:08:21.524541 2026] [security2:error] [pid 1028675:tid 1028877] [client 103.162.125.59:59523] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK9pddHPfW2QFvhmL4EwQAAAEM"]
[Sat Aug 29 05:08:21.536565 2026] [security2:error] [pid 1028675:tid 1028872] [client 20.52.41.200:5318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9pddHPfW2QFvhmL4EwgAAAD4"]
[Sat Aug 29 05:08:21.538296 2026] [security2:error] [pid 1028675:tid 1028900] [client 20.197.61.180:11767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/flower.php"] [unique_id "apK9pddHPfW2QFvhmL4EwwAAAFo"]
[Sat Aug 29 05:08:21.550590 2026] [security2:error] [pid 1034096:tid 1034318] [client 20.197.61.180:11763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/hello.php"] [unique_id "apK9pS04twRPFuquKD2nxQAAAMg"]
[Sat Aug 29 05:08:21.563873 2026] [security2:error] [pid 1028675:tid 1028849] [client 20.196.209.81:10486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-content/languages/plugins/about.php"] [unique_id "apK9pddHPfW2QFvhmL4ExAAAACc"]
[Sat Aug 29 05:08:21.565293 2026] [security2:error] [pid 1028675:tid 1028819] [client 158.23.147.79:6022] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/1.php"] [unique_id "apK9pddHPfW2QFvhmL4ExQAAAAk"]
[Sat Aug 29 05:08:21.565388 2026] [security2:error] [pid 1028675:tid 1028819] [client 158.23.147.79:6022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/1.php"] [unique_id "apK9pddHPfW2QFvhmL4ExQAAAAk"]
[Sat Aug 29 05:08:21.573632 2026] [security2:error] [pid 1034096:tid 1034277] [client 20.63.81.20:57916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/classwithtostring.php"] [unique_id "apK9pS04twRPFuquKD2nyAAAAJ8"]
[Sat Aug 29 05:08:21.593786 2026] [security2:error] [pid 1028675:tid 1028861] [client 20.48.160.90:62166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/chosen.php"] [unique_id "apK9pddHPfW2QFvhmL4EyAAAADM"]
[Sat Aug 29 05:08:21.595820 2026] [security2:error] [pid 1028675:tid 1028847] [client 20.203.141.11:12604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK9pddHPfW2QFvhmL4EyQAAACU"]
[Sat Aug 29 05:08:21.613737 2026] [security2:error] [pid 1034096:tid 1034365] [client 4.205.62.107:53320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/xqq.php"] [unique_id "apK9pS04twRPFuquKD2nywAAAPc"]
[Sat Aug 29 05:08:21.617167 2026] [security2:error] [pid 1028675:tid 1028878] [client 4.205.62.107:53267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/koiy.php"] [unique_id "apK9pddHPfW2QFvhmL4EygAAAEQ"]
[Sat Aug 29 05:08:21.623489 2026] [security2:error] [pid 1028675:tid 1028937] [client 158.23.184.117:55660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/wp-admin/link-add.php"] [unique_id "apK9pddHPfW2QFvhmL4EzgAAAH8"]
[Sat Aug 29 05:08:21.644582 2026] [security2:error] [pid 1028675:tid 1028860] [client 20.240.128.207:7402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/admin/function.php"] [unique_id "apK9pddHPfW2QFvhmL4EzwAAADI"]
[Sat Aug 29 05:08:21.657503 2026] [security2:error] [pid 1028675:tid 1028887] [client 52.139.37.240:23601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/f35.php"] [unique_id "apK9pddHPfW2QFvhmL4E0AAAAE0"]
[Sat Aug 29 05:08:21.665915 2026] [security2:error] [pid 1034096:tid 1034251] [client 158.23.184.117:63145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/.well-known/wp-mail.php"] [unique_id "apK9pS04twRPFuquKD2nzAAAAIU"]
[Sat Aug 29 05:08:21.670887 2026] [security2:error] [pid 1028675:tid 1028932] [client 158.23.147.79:11376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK9pddHPfW2QFvhmL4E0QAAAHo"]
[Sat Aug 29 05:08:21.707273 2026] [security2:error] [pid 1034096:tid 1034358] [client 20.63.81.20:57919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK9pS04twRPFuquKD2nzQAAAPA"]
[Sat Aug 29 05:08:21.708663 2026] [core:error] [pid 1028675:tid 1028867] [client 47.79.13.164:49056] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:21.708679 2026] [core:error] [pid 1028675:tid 1028867] [client 47.79.13.164:49056] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:21.726819 2026] [security2:error] [pid 1034096:tid 1034278] [client 68.155.159.216:30685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/content.php"] [unique_id "apK9pS04twRPFuquKD2nzgAAAKA"]
[Sat Aug 29 05:08:21.748624 2026] [security2:error] [pid 1034096:tid 1034323] [client 20.48.160.90:63312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/file1221.php"] [unique_id "apK9pS04twRPFuquKD2n0AAAAM0"]
[Sat Aug 29 05:08:21.758616 2026] [security2:error] [pid 1028675:tid 1028926] [client 158.23.147.79:32614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK9pddHPfW2QFvhmL4E1AAAAHQ"]
[Sat Aug 29 05:08:21.777025 2026] [security2:error] [pid 1028675:tid 1028843] [client 158.23.184.117:2931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/wp-includes/Text.php"] [unique_id "apK9pddHPfW2QFvhmL4E1QAAACE"]
[Sat Aug 29 05:08:21.777651 2026] [security2:error] [pid 1028675:tid 1028863] [client 40.83.93.50:8402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "royalryder.com"] [uri "/aaa.php"] [unique_id "apK9pddHPfW2QFvhmL4E1gAAADU"]
[Sat Aug 29 05:08:21.799373 2026] [security2:error] [pid 1028675:tid 1028881] [client 20.63.219.114:8877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/alfa.php"] [unique_id "apK9pddHPfW2QFvhmL4E1wAAAEc"]
[Sat Aug 29 05:08:21.800365 2026] [security2:error] [pid 1034096:tid 1034342] [client 158.23.147.79:35769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/nf_tracking.php"] [unique_id "apK9pS04twRPFuquKD2n0gAAAOA"]
[Sat Aug 29 05:08:21.809951 2026] [security2:error] [pid 1028675:tid 1028876] [client 158.23.184.117:63109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/.well-known/wp-settings.php"] [unique_id "apK9pddHPfW2QFvhmL4E2AAAAEI"]
[Sat Aug 29 05:08:21.820575 2026] [security2:error] [pid 1028675:tid 1028925] [client 20.63.219.114:8847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/global.php"] [unique_id "apK9pddHPfW2QFvhmL4E2QAAAHM"]
[Sat Aug 29 05:08:21.824114 2026] [security2:error] [pid 1028675:tid 1028883] [client 40.83.93.50:2037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-admin/plugin-install.php"] [unique_id "apK9pddHPfW2QFvhmL4E2gAAAEk"]
[Sat Aug 29 05:08:21.854884 2026] [security2:error] [pid 1034096:tid 1034335] [client 52.139.37.240:23556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/NewFile.php"] [unique_id "apK9pS04twRPFuquKD2n1QAAANk"]
[Sat Aug 29 05:08:21.861117 2026] [security2:error] [pid 1034096:tid 1034287] [client 20.63.81.20:63063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/5PJcpMFsD8B.php"] [unique_id "apK9pS04twRPFuquKD2n1wAAAKk"]
[Sat Aug 29 05:08:21.872138 2026] [security2:error] [pid 1028675:tid 1028902] [client 40.83.93.50:8960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/colour.php"] [unique_id "apK9pddHPfW2QFvhmL4E2wAAAFw"]
[Sat Aug 29 05:08:21.875401 2026] [security2:error] [pid 1028675:tid 1028683] [remote 47.128.18.209:22648] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "sarasotaorthotics.com"] [uri "/robots.txt"] [unique_id "apK9pddHPfW2QFvhmL4E3AAAcAM"]
[Sat Aug 29 05:08:21.879224 2026] [security2:error] [pid 1034096:tid 1034264] [client 20.48.160.90:64231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/nox.php"] [unique_id "apK9pS04twRPFuquKD2n2AAAAJI"]
[Sat Aug 29 05:08:21.910049 2026] [security2:error] [pid 1034096:tid 1034324] [client 91.92.47.191:46674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "corrigansbasement.com"] [uri "/wp-config.php"] [unique_id "apK9pS04twRPFuquKD2n2gAAAM4"]
[Sat Aug 29 05:08:21.918177 2026] [security2:error] [pid 1034096:tid 1034292] [client 213.209.159.223:7922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/phpinfo.php.bak"] [unique_id "apK9pS04twRPFuquKD2n3QAAAK4"]
[Sat Aug 29 05:08:21.922735 2026] [security2:error] [pid 1028675:tid 1028879] [client 20.100.175.163:1209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK9pddHPfW2QFvhmL4E3wAAAEU"]
[Sat Aug 29 05:08:21.925724 2026] [security2:error] [pid 1028675:tid 1028837] [client 158.23.184.117:2803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/wp-trackback.php"] [unique_id "apK9pddHPfW2QFvhmL4E4QAAABs"]
[Sat Aug 29 05:08:21.952929 2026] [core:error] [pid 1034096:tid 1034212] [remote 34.139.86.26:36612] AH10244: invalid URI path (/%2e%2e/.env)
[Sat Aug 29 05:08:21.952980 2026] [security2:error] [pid 1034096:tid 1034210] [remote 34.139.86.26:36612] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ptstmobile.ztxcloud.com"] [uri "/.env"] [unique_id "apK9pS04twRPFuquKD2n3wAAjVg"]
[Sat Aug 29 05:08:21.953083 2026] [security2:error] [pid 1034096:tid 1034211] [remote 34.139.86.26:36612] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ptstmobile.ztxcloud.com"] [uri "/api/.env/public/.env"] [unique_id "apK9pS04twRPFuquKD2n4AAAjVk"]
[Sat Aug 29 05:08:21.953544 2026] [security2:error] [pid 1034096:tid 1034349] [client 158.23.184.117:31498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/.well-known/wp-signup.php"] [unique_id "apK9pS04twRPFuquKD2n4gAAAOc"]
[Sat Aug 29 05:08:21.958953 2026] [security2:error] [pid 1034096:tid 1034213] [remote 34.139.86.26:36612] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ptstmobile.ztxcloud.com"] [uri "/.env"] [unique_id "apK9pS04twRPFuquKD2n4wAA-ls"]
[Sat Aug 29 05:08:21.992097 2026] [security2:error] [pid 1028675:tid 1028857] [client 20.52.41.200:5263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/alfa-rex.php7"] [unique_id "apK9pddHPfW2QFvhmL4E4wAAAC8"]
[Sat Aug 29 05:08:22.018559 2026] [security2:error] [pid 1034096:tid 1034214] [remote 34.139.86.26:36612] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ptstmobile.ztxcloud.com"] [uri "/uploads../.env"] [unique_id "apK9pi04twRPFuquKD2n5gAAnVw"]
[Sat Aug 29 05:08:22.025988 2026] [security2:error] [pid 1034096:tid 1034291] [client 20.63.81.20:63070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK9pi04twRPFuquKD2n5wAAAK0"]
[Sat Aug 29 05:08:22.039497 2026] [security2:error] [pid 1034096:tid 1034215] [remote 34.139.86.26:36612] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ptstmobile.ztxcloud.com"] [uri "/images../.env"] [unique_id "apK9pi04twRPFuquKD2n6QAAtl0"]
[Sat Aug 29 05:08:22.058432 2026] [security2:error] [pid 1034096:tid 1034268] [client 52.139.37.240:23859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK9pi04twRPFuquKD2n6gAAAJY"]
[Sat Aug 29 05:08:22.072049 2026] [security2:error] [pid 1034096:tid 1034283] [client 158.23.184.117:2799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/wp-admin/maint.php"] [unique_id "apK9pi04twRPFuquKD2n7AAAAKU"]
[Sat Aug 29 05:08:22.077988 2026] [security2:error] [pid 1028675:tid 1028900] [client 68.155.159.216:49174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK9ptdHPfW2QFvhmL4E6wAAAFo"]
[Sat Aug 29 05:08:22.083284 2026] [security2:error] [pid 1034096:tid 1034352] [client 57.141.14.15:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/"] [unique_id "apK9pi04twRPFuquKD2n7QAAAOo"]
[Sat Aug 29 05:08:22.094230 2026] [security2:error] [pid 1034096:tid 1034216] [remote 34.139.86.26:36612] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ptstmobile.ztxcloud.com"] [uri "/img../.env"] [unique_id "apK9pi04twRPFuquKD2n7wAAmV4"]
[Sat Aug 29 05:08:22.095436 2026] [security2:error] [pid 1034096:tid 1034217] [remote 34.139.86.26:36612] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ptstmobile.ztxcloud.com"] [uri "/assets../.env"] [unique_id "apK9pi04twRPFuquKD2n8AAAmV8"]
[Sat Aug 29 05:08:22.095519 2026] [security2:error] [pid 1034096:tid 1034310] [client 158.23.184.117:31500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/002.php"] [unique_id "apK9pi04twRPFuquKD2n8QAAAMA"]
[Sat Aug 29 05:08:22.114470 2026] [security2:error] [pid 1034096:tid 1034294] [client 20.48.160.90:64154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/akismet.php"] [unique_id "apK9pi04twRPFuquKD2n8wAAALA"]
[Sat Aug 29 05:08:22.129113 2026] [security2:error] [pid 1034096:tid 1034348] [client 20.240.128.207:17764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/admin/index.php"] [unique_id "apK9pi04twRPFuquKD2n9AAAAOY"]
[Sat Aug 29 05:08:22.173709 2026] [security2:error] [pid 1034096:tid 1034309] [client 68.155.159.216:56541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/admin.php"] [unique_id "apK9pi04twRPFuquKD2n-AAAAL8"]
[Sat Aug 29 05:08:22.176028 2026] [security2:error] [pid 1034096:tid 1034314] [client 20.63.219.114:15457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/update.php"] [unique_id "apK9pi04twRPFuquKD2n-QAAAMQ"]
[Sat Aug 29 05:08:22.176135 2026] [security2:error] [pid 1034096:tid 1034301] [client 20.63.81.20:57879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/wsd.php"] [unique_id "apK9pi04twRPFuquKD2n-gAAALc"]
[Sat Aug 29 05:08:22.180826 2026] [security2:error] [pid 1034096:tid 1034346] [client 158.23.147.79:26400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK9pi04twRPFuquKD2n-wAAAOQ"]
[Sat Aug 29 05:08:22.188955 2026] [security2:error] [pid 1028675:tid 1028877] [client 20.63.219.114:15474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/feed-rss2-queue.php"] [unique_id "apK9ptdHPfW2QFvhmL4E7gAAAEM"]
[Sat Aug 29 05:08:22.200797 2026] [security2:error] [pid 1028675:tid 1028930] [client 68.155.159.216:24560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-blog-header.php"] [unique_id "apK9ptdHPfW2QFvhmL4E7wAAAHg"]
[Sat Aug 29 05:08:22.208662 2026] [security2:error] [pid 1028675:tid 1028878] [client 158.23.147.79:6105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK9ptdHPfW2QFvhmL4E8AAAAEQ"]
[Sat Aug 29 05:08:22.214632 2026] [security2:error] [pid 1034096:tid 1034339] [client 68.155.159.216:18309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-admin/index.php"] [unique_id "apK9pi04twRPFuquKD2oAAAAAN0"]
[Sat Aug 29 05:08:22.220781 2026] [security2:error] [pid 1034096:tid 1034372] [client 158.23.184.117:2759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/wp-includes/num.php"] [unique_id "apK9pi04twRPFuquKD2oAgAAAP4"]
[Sat Aug 29 05:08:22.237039 2026] [security2:error] [pid 1034096:tid 1034303] [client 158.23.184.117:63136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/0x.php"] [unique_id "apK9pi04twRPFuquKD2oBgAAALk"]
[Sat Aug 29 05:08:22.237275 2026] [security2:error] [pid 1034096:tid 1034251] [client 68.155.159.216:52760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/about/function.php"] [unique_id "apK9pi04twRPFuquKD2oBwAAAIU"]
[Sat Aug 29 05:08:22.238127 2026] [security2:error] [pid 1028675:tid 1028937] [client 68.155.159.216:64474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-content/x/index.php"] [unique_id "apK9ptdHPfW2QFvhmL4E8QAAAH8"]
[Sat Aug 29 05:08:22.253386 2026] [security2:error] [pid 1034096:tid 1034329] [client 52.139.37.240:23586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/xx.php"] [unique_id "apK9pi04twRPFuquKD2oCAAAANM"]
[Sat Aug 29 05:08:22.291793 2026] [security2:error] [pid 1034096:tid 1034360] [client 20.197.61.180:1760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/meta.php"] [unique_id "apK9pi04twRPFuquKD2oCgAAAPI"]
[Sat Aug 29 05:08:22.297773 2026] [security2:error] [pid 1028675:tid 1028862] [client 40.83.93.50:1457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-admin/plugins/img/themes/plugins/maintenance.php"] [unique_id "apK9ptdHPfW2QFvhmL4E9AAAADQ"]
[Sat Aug 29 05:08:22.299094 2026] [security2:error] [pid 1034096:tid 1034321] [client 4.205.62.107:51519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/config/laravolt/css/index.php"] [unique_id "apK9pi04twRPFuquKD2oDAAAAMs"]
[Sat Aug 29 05:08:22.299811 2026] [security2:error] [pid 1034096:tid 1034359] [client 45.148.10.60:11020] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.body.requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1600"] [id "900941"] [msg "Invalid nested WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.body.requests.requests.path=///"] [hostname "villagebooksandbears.com"] [uri "/"] [unique_id "apK9pi04twRPFuquKD2oCwAAAPE"]
[Sat Aug 29 05:08:22.306610 2026] [security2:error] [pid 1034096:tid 1034266] [client 20.48.160.90:63304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/ajax.php"] [unique_id "apK9pi04twRPFuquKD2oDQAAAJQ"]
[Sat Aug 29 05:08:22.316283 2026] [security2:error] [pid 1028675:tid 1028928] [client 158.23.147.79:59867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK9ptdHPfW2QFvhmL4E9QAAAHY"]
[Sat Aug 29 05:08:22.331082 2026] [security2:error] [pid 1034096:tid 1034272] [client 20.63.81.20:57982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/bulet.php"] [unique_id "apK9pi04twRPFuquKD2oDwAAAJo"]
[Sat Aug 29 05:08:22.339466 2026] [security2:error] [pid 1034096:tid 1034277] [client 40.83.93.50:9212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/OK.php"] [unique_id "apK9pi04twRPFuquKD2oEAAAAJ8"]
[Sat Aug 29 05:08:22.348283 2026] [security2:error] [pid 1034096:tid 1034356] [client 20.104.49.130:57614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/menu.php"] [unique_id "apK9pi04twRPFuquKD2oEQAAAO4"]
[Sat Aug 29 05:08:22.365086 2026] [security2:error] [pid 1028675:tid 1028925] [client 158.23.184.117:55618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/identity.php"] [unique_id "apK9ptdHPfW2QFvhmL4E9wAAAHM"]
[Sat Aug 29 05:08:22.379638 2026] [security2:error] [pid 1034096:tid 1034374] [client 158.23.184.117:31718] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "lancastaluminum.com"] [uri "/1.php"] [unique_id "apK9pi04twRPFuquKD2oEgAAAQA"]
[Sat Aug 29 05:08:22.379713 2026] [security2:error] [pid 1034096:tid 1034374] [client 158.23.184.117:31718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/1.php"] [unique_id "apK9pi04twRPFuquKD2oEgAAAQA"]
[Sat Aug 29 05:08:22.416194 2026] [core:error] [pid 1034096:tid 1034267] [client 20.100.175.163:29907] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:22.416211 2026] [core:error] [pid 1034096:tid 1034267] [client 20.100.175.163:29907] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:22.423778 2026] [security2:error] [pid 1034096:tid 1034316] [client 20.104.49.130:57486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/666.php"] [unique_id "apK9pi04twRPFuquKD2oGwAAAMY"]
[Sat Aug 29 05:08:22.442310 2026] [security2:error] [pid 1028675:tid 1028901] [client 34.81.157.26:13330] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/gcp-service-account.json"] [unique_id "apK9ptdHPfW2QFvhmL4E-wAAAFs"]
[Sat Aug 29 05:08:22.442882 2026] [security2:error] [pid 1034096:tid 1034323] [client 20.52.41.200:4557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "apK9pi04twRPFuquKD2oHgAAAM0"]
[Sat Aug 29 05:08:22.445292 2026] [security2:error] [pid 1028675:tid 1028859] [client 34.81.157.26:13348] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/config/master.key"] [unique_id "apK9ptdHPfW2QFvhmL4E_gAAADE"]
[Sat Aug 29 05:08:22.448313 2026] [security2:error] [pid 1034096:tid 1034377] [client 34.81.157.26:13464] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/client/.env"] [unique_id "apK9pi04twRPFuquKD2oJAAAAQM"]
[Sat Aug 29 05:08:22.449312 2026] [security2:error] [pid 1028675:tid 1028813] [client 34.81.157.26:13508] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/dev/.env"] [unique_id "apK9ptdHPfW2QFvhmL4FAQAAAAM"]
[Sat Aug 29 05:08:22.451605 2026] [security2:error] [pid 1028675:tid 1028843] [client 34.81.157.26:13398] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/anthropic.json"] [unique_id "apK9ptdHPfW2QFvhmL4FBQAAACE"]
[Sat Aug 29 05:08:22.454408 2026] [security2:error] [pid 1028675:tid 1028851] [client 34.81.157.26:13498] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/production/.env"] [unique_id "apK9ptdHPfW2QFvhmL4FBgAAACk"]
[Sat Aug 29 05:08:22.455580 2026] [security2:error] [pid 1028675:tid 1028904] [client 52.139.37.240:23809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/k.php"] [unique_id "apK9ptdHPfW2QFvhmL4FCgAAAF4"]
[Sat Aug 29 05:08:22.455652 2026] [security2:error] [pid 1034096:tid 1034293] [client 34.81.157.26:13518] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/staging/.env"] [unique_id "apK9pi04twRPFuquKD2oMAAAAK8"]
[Sat Aug 29 05:08:22.455791 2026] [security2:error] [pid 1034096:tid 1034293] [client 34.81.157.26:13518] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/staging/.env"] [unique_id "apK9pi04twRPFuquKD2oMAAAAK8"]
[Sat Aug 29 05:08:22.459165 2026] [security2:error] [pid 1034096:tid 1034258] [client 34.81.157.26:13484] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/backup/.env"] [unique_id "apK9pi04twRPFuquKD2oNAAAAIw"]
[Sat Aug 29 05:08:22.469432 2026] [core:error] [pid 1028675:tid 1028857] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:22.469448 2026] [core:error] [pid 1028675:tid 1028857] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:22.471391 2026] [core:error] [pid 1028675:tid 1028855] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:22.471408 2026] [core:error] [pid 1028675:tid 1028855] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:22.473285 2026] [security2:error] [pid 1028675:tid 1028935] [client 20.48.160.90:63314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/atomlib.php"] [unique_id "apK9ptdHPfW2QFvhmL4FEgAAAH0"]
[Sat Aug 29 05:08:22.473300 2026] [core:error] [pid 1028675:tid 1028856] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:22.473308 2026] [core:error] [pid 1028675:tid 1028856] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:22.475496 2026] [core:error] [pid 1034096:tid 1034283] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:22.475508 2026] [core:error] [pid 1034096:tid 1034283] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:22.477106 2026] [core:error] [pid 1034096:tid 1034352] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:22.477117 2026] [core:error] [pid 1034096:tid 1034352] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:22.477155 2026] [core:error] [pid 1034096:tid 1034304] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:22.477164 2026] [core:error] [pid 1034096:tid 1034304] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:22.479598 2026] [core:error] [pid 1034096:tid 1034271] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:22.479613 2026] [core:error] [pid 1034096:tid 1034271] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:22.482063 2026] [security2:error] [pid 1034096:tid 1034327] [client 20.63.81.20:57929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/av.php"] [unique_id "apK9pi04twRPFuquKD2oPgAAANE"]
[Sat Aug 29 05:08:22.483174 2026] [core:error] [pid 1034096:tid 1034294] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:22.483186 2026] [core:error] [pid 1034096:tid 1034294] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:22.512730 2026] [core:error] [pid 1028675:tid 1028825] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:22.512744 2026] [core:error] [pid 1028675:tid 1028825] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:22.512838 2026] [security2:error] [pid 1028675:tid 1028825] [client 34.81.157.26:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/index.php"] [unique_id "apK9ptdHPfW2QFvhmL4FEwAAAA8"]
[Sat Aug 29 05:08:22.521341 2026] [security2:error] [pid 1028675:tid 1028929] [client 158.23.184.117:31686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/10.php"] [unique_id "apK9ptdHPfW2QFvhmL4FFAAAAHc"]
[Sat Aug 29 05:08:22.523745 2026] [security2:error] [pid 1028675:tid 1028861] [client 158.23.147.79:17466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK9ptdHPfW2QFvhmL4FFQAAADM"]
[Sat Aug 29 05:08:22.525665 2026] [security2:error] [pid 1028675:tid 1028824] [client 34.81.157.26:13560] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/.github/workflows/deploy.yml"] [unique_id "apK9ptdHPfW2QFvhmL4FCwAAAA4"]
[Sat Aug 29 05:08:22.527961 2026] [core:error] [pid 1028675:tid 1028828] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:22.527973 2026] [core:error] [pid 1028675:tid 1028828] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:22.528968 2026] [core:error] [pid 1034096:tid 1034317] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:22.528980 2026] [core:error] [pid 1034096:tid 1034317] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:22.538596 2026] [security2:error] [pid 1028675:tid 1028902] [client 20.63.219.114:8890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/blog.php"] [unique_id "apK9ptdHPfW2QFvhmL4FGAAAAFw"]
[Sat Aug 29 05:08:22.541036 2026] [security2:error] [pid 1028675:tid 1028867] [client 20.197.61.180:8414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/fi2.php"] [unique_id "apK9ptdHPfW2QFvhmL4FGQAAADk"]
[Sat Aug 29 05:08:22.550756 2026] [security2:error] [pid 1034096:tid 1034372] [client 4.205.62.107:22510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/debug.php"] [unique_id "apK9pi04twRPFuquKD2oRQAAAP4"]
[Sat Aug 29 05:08:22.553305 2026] [core:error] [pid 1034096:tid 1034255] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:22.553318 2026] [core:error] [pid 1034096:tid 1034255] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:22.554551 2026] [core:error] [pid 1028675:tid 1028814] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:22.554568 2026] [core:error] [pid 1028675:tid 1028814] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:22.556618 2026] [security2:error] [pid 1028675:tid 1028897] [client 68.155.159.216:23522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK9ptdHPfW2QFvhmL4FGwAAAFc"]
[Sat Aug 29 05:08:22.556859 2026] [security2:error] [pid 1034096:tid 1034370] [client 158.23.147.79:50004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK9pi04twRPFuquKD2oRgAAAPw"]
[Sat Aug 29 05:08:22.561910 2026] [security2:error] [pid 1034096:tid 1034329] [client 158.23.184.117:55654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/Radio.php"] [unique_id "apK9pi04twRPFuquKD2oSAAAANM"]
[Sat Aug 29 05:08:22.613577 2026] [security2:error] [pid 1034096:tid 1034278] [client 20.63.81.20:57970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/images.php"] [unique_id "apK9pi04twRPFuquKD2oSgAAAKA"]
[Sat Aug 29 05:08:22.618943 2026] [security2:error] [pid 1034096:tid 1034321] [client 68.155.159.216:14327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/goods.php"] [unique_id "apK9pi04twRPFuquKD2oSwAAAMs"]
[Sat Aug 29 05:08:22.624949 2026] [security2:error] [pid 1034096:tid 1034347] [client 20.240.128.207:27555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/storage/rip.php"] [unique_id "apK9pi04twRPFuquKD2oTAAAAOU"]
[Sat Aug 29 05:08:22.654239 2026] [security2:error] [pid 1034096:tid 1034286] [client 4.205.62.107:26652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/app.default.php"] [unique_id "apK9pi04twRPFuquKD2oTQAAAKg"]
[Sat Aug 29 05:08:22.655453 2026] [security2:error] [pid 1034096:tid 1034325] [client 20.48.160.90:64245] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/1.php"] [unique_id "apK9pi04twRPFuquKD2oTgAAAM8"]
[Sat Aug 29 05:08:22.655538 2026] [security2:error] [pid 1034096:tid 1034325] [client 20.48.160.90:64245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/1.php"] [unique_id "apK9pi04twRPFuquKD2oTgAAAM8"]
[Sat Aug 29 05:08:22.661244 2026] [security2:error] [pid 1028675:tid 1028832] [client 158.23.184.117:63143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/100.php"] [unique_id "apK9ptdHPfW2QFvhmL4FHgAAABY"]
[Sat Aug 29 05:08:22.665936 2026] [security2:error] [pid 1034096:tid 1034349] [client 158.23.147.79:6023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/ws.php"] [unique_id "apK9pi04twRPFuquKD2oTwAAAOc"]
[Sat Aug 29 05:08:22.667440 2026] [security2:error] [pid 1028675:tid 1028858] [client 52.139.37.240:23817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/plugins.php"] [unique_id "apK9ptdHPfW2QFvhmL4FHwAAADA"]
[Sat Aug 29 05:08:22.699797 2026] [security2:error] [pid 1028675:tid 1028888] [client 20.63.219.114:18507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/inputs.php"] [unique_id "apK9ptdHPfW2QFvhmL4FIAAAAE4"]
[Sat Aug 29 05:08:22.750610 2026] [security2:error] [pid 1028675:tid 1028841] [client 87.219.197.128:49773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK9ptdHPfW2QFvhmL4FPAAAAB8"]
[Sat Aug 29 05:08:22.750703 2026] [security2:error] [pid 1028675:tid 1028841] [client 87.219.197.128:49773] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK9ptdHPfW2QFvhmL4FPAAAAB8"]
[Sat Aug 29 05:08:22.751216 2026] [security2:error] [pid 1028675:tid 1028845] [client 20.203.141.11:11830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK9ptdHPfW2QFvhmL4FPQAAACM"]
[Sat Aug 29 05:08:22.753649 2026] [security2:error] [pid 1034096:tid 1034264] [client 4.205.62.107:56002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/queue.php"] [unique_id "apK9pi04twRPFuquKD2oVwAAAJI"]
[Sat Aug 29 05:08:22.761773 2026] [security2:error] [pid 1034096:tid 1034258] [client 158.23.184.117:2973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/wp-includes/Requests/Exception/file.php"] [unique_id "apK9pi04twRPFuquKD2oWAAAAIw"]
[Sat Aug 29 05:08:22.781910 2026] [security2:error] [pid 1034096:tid 1034271] [client 4.205.62.107:9156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/or.php"] [unique_id "apK9pi04twRPFuquKD2oXwAAAJk"]
[Sat Aug 29 05:08:22.791751 2026] [security2:error] [pid 1034096:tid 1034327] [client 20.48.160.90:62173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/samll.php"] [unique_id "apK9pi04twRPFuquKD2oYwAAANE"]
[Sat Aug 29 05:08:22.793311 2026] [security2:error] [pid 1034096:tid 1034294] [client 20.63.81.20:63079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/ops.php"] [unique_id "apK9pi04twRPFuquKD2oZAAAALA"]
[Sat Aug 29 05:08:22.798653 2026] [security2:error] [pid 1034096:tid 1034266] [client 40.83.93.50:19465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-admin/security.php"] [unique_id "apK9pi04twRPFuquKD2oZQAAAJQ"]
[Sat Aug 29 05:08:22.801953 2026] [security2:error] [pid 1034096:tid 1034287] [client 158.23.184.117:63114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/2.php"] [unique_id "apK9pi04twRPFuquKD2oZgAAAKk"]
[Sat Aug 29 05:08:22.844374 2026] [security2:error] [pid 1034096:tid 1034295] [client 40.83.93.50:9201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "davidseaver.com"] [uri "/aaa.php"] [unique_id "apK9pi04twRPFuquKD2oawAAALE"]
[Sat Aug 29 05:08:22.851558 2026] [security2:error] [pid 1034096:tid 1034357] [client 68.155.159.216:30680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK9pi04twRPFuquKD2obAAAAO8"]
[Sat Aug 29 05:08:22.862133 2026] [security2:error] [pid 1028675:tid 1028935] [client 52.139.37.240:23605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/xxx.php"] [unique_id "apK9ptdHPfW2QFvhmL4FRQAAAH0"]
[Sat Aug 29 05:08:22.895415 2026] [security2:error] [pid 1028675:tid 1028886] [client 20.63.219.114:16659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/bypass.php"] [unique_id "apK9ptdHPfW2QFvhmL4FRgAAAEw"]
[Sat Aug 29 05:08:22.898655 2026] [security2:error] [pid 1028675:tid 1028851] [client 20.52.41.200:4590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/upload.php"] [unique_id "apK9ptdHPfW2QFvhmL4FSAAAACk"]
[Sat Aug 29 05:08:22.911445 2026] [security2:error] [pid 1028675:tid 1028861] [client 158.23.147.79:35774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wzy.php"] [unique_id "apK9ptdHPfW2QFvhmL4FSQAAADM"]
[Sat Aug 29 05:08:22.911445 2026] [security2:error] [pid 1034096:tid 1034377] [client 20.100.175.163:7089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/lite.php"] [unique_id "apK9pi04twRPFuquKD2odQAAAQM"]
[Sat Aug 29 05:08:22.940525 2026] [security2:error] [pid 1028675:tid 1028828] [client 20.63.81.20:63067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/coffexium.php"] [unique_id "apK9ptdHPfW2QFvhmL4FTQAAABI"]
[Sat Aug 29 05:08:22.945095 2026] [security2:error] [pid 1028675:tid 1028884] [client 158.23.184.117:63104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/222.php"] [unique_id "apK9ptdHPfW2QFvhmL4FTwAAAEo"]
[Sat Aug 29 05:08:22.953314 2026] [security2:error] [pid 1034096:tid 1034253] [client 20.48.160.90:64165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/she11.php"] [unique_id "apK9pi04twRPFuquKD2odgAAAIc"]
[Sat Aug 29 05:08:22.969092 2026] [security2:error] [pid 1034096:tid 1034251] [client 158.23.184.117:2591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/wp-admin/add.php"] [unique_id "apK9pi04twRPFuquKD2oeAAAAIU"]
[Sat Aug 29 05:08:23.004058 2026] [security2:error] [pid 1034096:tid 1034296] [client 68.155.159.216:6065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-admin/admin.php"] [unique_id "apK9py04twRPFuquKD2oeQAAALI"]
[Sat Aug 29 05:08:23.033032 2026] [security2:error] [pid 1028675:tid 1028872] [client 20.197.61.180:14417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/randkeyword.php"] [unique_id "apK9p9dHPfW2QFvhmL4FUQAAAD4"]
[Sat Aug 29 05:08:23.057005 2026] [security2:error] [pid 1028675:tid 1028926] [client 52.139.37.240:23849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/css.php"] [unique_id "apK9p9dHPfW2QFvhmL4FUgAAAHQ"]
[Sat Aug 29 05:08:23.070228 2026] [security2:error] [pid 1034096:tid 1034270] [client 20.63.81.20:57966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/BDKR28WP.php"] [unique_id "apK9py04twRPFuquKD2oewAAAJg"]
[Sat Aug 29 05:08:23.084677 2026] [security2:error] [pid 1034096:tid 1034353] [client 20.63.219.114:8876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/class-walker-category-dropdown-class.php"] [unique_id "apK9py04twRPFuquKD2ofAAAAOs"]
[Sat Aug 29 05:08:23.085778 2026] [security2:error] [pid 1034096:tid 1034358] [client 158.23.184.117:63166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/24.php"] [unique_id "apK9py04twRPFuquKD2ofgAAAPA"]
[Sat Aug 29 05:08:23.086693 2026] [security2:error] [pid 1034096:tid 1034278] [client 20.48.160.90:64189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/kerang.php"] [unique_id "apK9py04twRPFuquKD2ofwAAAKA"]
[Sat Aug 29 05:08:23.087162 2026] [security2:error] [pid 1034096:tid 1034371] [client 74.7.244.9:57342] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.shop.greatvalleyvineyards.com"] [uri "/robots.txt"] [unique_id "apK9py04twRPFuquKD2ofQAA_XA"]
[Sat Aug 29 05:08:23.117281 2026] [security2:error] [pid 1034096:tid 1034376] [client 158.23.184.117:2921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/wp-includes/assets/about.php"] [unique_id "apK9py04twRPFuquKD2ogAAAAQI"]
[Sat Aug 29 05:08:23.122099 2026] [security2:error] [pid 1034096:tid 1034339] [client 20.240.128.207:22110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/zoom1.php"] [unique_id "apK9py04twRPFuquKD2ogQAAAN0"]
[Sat Aug 29 05:08:23.177334 2026] [security2:error] [pid 1034096:tid 1034259] [client 68.155.159.216:49182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/about.php"] [unique_id "apK9py04twRPFuquKD2oggAAAI0"]
[Sat Aug 29 05:08:23.203684 2026] [security2:error] [pid 1034096:tid 1034299] [client 20.203.141.11:17919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/num.php"] [unique_id "apK9py04twRPFuquKD2ogwAAALU"]
[Sat Aug 29 05:08:23.212589 2026] [security2:error] [pid 1028675:tid 1028840] [client 20.63.81.20:63073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/sf.php"] [unique_id "apK9p9dHPfW2QFvhmL4FVQAAAB4"]
[Sat Aug 29 05:08:23.221881 2026] [security2:error] [pid 1034096:tid 1034336] [client 20.48.160.90:64197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/m.php"] [unique_id "apK9py04twRPFuquKD2ohAAAANo"]
[Sat Aug 29 05:08:23.226562 2026] [security2:error] [pid 1034096:tid 1034290] [client 20.104.49.130:57512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/ty.php"] [unique_id "apK9py04twRPFuquKD2ohQAAAKw"]
[Sat Aug 29 05:08:23.240117 2026] [security2:error] [pid 1034096:tid 1034349] [client 158.23.184.117:63131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/3pjcpmfsd8b.php"] [unique_id "apK9py04twRPFuquKD2ohwAAAOc"]
[Sat Aug 29 05:08:23.251231 2026] [security2:error] [pid 1028675:tid 1028916] [client 52.139.37.240:23822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/wp-includes/customize/chosen.php"] [unique_id "apK9p9dHPfW2QFvhmL4FVwAAAGo"]
[Sat Aug 29 05:08:23.263720 2026] [security2:error] [pid 1034096:tid 1034267] [client 20.104.49.130:39080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/init.php"] [unique_id "apK9py04twRPFuquKD2oiAAAAJU"]
[Sat Aug 29 05:08:23.264810 2026] [security2:error] [pid 1028675:tid 1028932] [client 20.63.219.114:16655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/extractable-loader-head.php"] [unique_id "apK9p9dHPfW2QFvhmL4FWAAAAHo"]
[Sat Aug 29 05:08:23.270310 2026] [security2:error] [pid 1028675:tid 1028927] [client 40.83.93.50:1436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK9p9dHPfW2QFvhmL4FWQAAAHU"]
[Sat Aug 29 05:08:23.278546 2026] [security2:error] [pid 1034096:tid 1034378] [client 158.23.147.79:11300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/asd.php"] [unique_id "apK9py04twRPFuquKD2oigAAAQQ"]
[Sat Aug 29 05:08:23.284879 2026] [security2:error] [pid 1034096:tid 1034252] [client 68.155.159.216:38558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-admin/admin.php"] [unique_id "apK9py04twRPFuquKD2oiwAAAIY"]
[Sat Aug 29 05:08:23.285277 2026] [security2:error] [pid 1034096:tid 1034362] [client 20.197.61.180:11754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/1p.php"] [unique_id "apK9py04twRPFuquKD2ojAAAAPQ"]
[Sat Aug 29 05:08:23.289047 2026] [security2:error] [pid 1034096:tid 1034361] [client 158.23.184.117:2936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/wp-content/themes/twentytwentythree.php"] [unique_id "apK9py04twRPFuquKD2ojQAAAPM"]
[Sat Aug 29 05:08:23.306618 2026] [security2:error] [pid 1034096:tid 1034350] [client 158.23.147.79:26474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK9py04twRPFuquKD2ojwAAAOg"]
[Sat Aug 29 05:08:23.306633 2026] [security2:error] [pid 1034096:tid 1034269] [client 68.155.159.216:24391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK9py04twRPFuquKD2okAAAAJc"]
[Sat Aug 29 05:08:23.321028 2026] [security2:error] [pid 1028675:tid 1028898] [client 68.155.159.216:18224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK9p9dHPfW2QFvhmL4FWwAAAFg"]
[Sat Aug 29 05:08:23.326426 2026] [security2:error] [pid 1034096:tid 1034344] [client 158.23.147.79:6019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK9py04twRPFuquKD2omwAAAOI"]
[Sat Aug 29 05:08:23.355772 2026] [security2:error] [pid 1034096:tid 1034335] [client 20.63.81.20:63025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/k.php"] [unique_id "apK9py04twRPFuquKD2onAAAANk"]
[Sat Aug 29 05:08:23.381363 2026] [security2:error] [pid 1028675:tid 1028813] [client 158.23.184.117:63107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lancastaluminum.com"] [uri "/403.php"] [unique_id "apK9p9dHPfW2QFvhmL4FXgAAAAM"]
[Sat Aug 29 05:08:23.381938 2026] [security2:error] [pid 1034096:tid 1034367] [client 20.48.160.90:64239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/fling.php"] [unique_id "apK9py04twRPFuquKD2onwAAAPk"]
[Sat Aug 29 05:08:23.388698 2026] [security2:error] [pid 1028675:tid 1028862] [client 20.100.175.163:1169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/term.php"] [unique_id "apK9p9dHPfW2QFvhmL4FXwAAADQ"]
[Sat Aug 29 05:08:23.392226 2026] [security2:error] [pid 1028675:tid 1028820] [client 68.155.159.216:9294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-includes/customize/index.php"] [unique_id "apK9p9dHPfW2QFvhmL4FYAAAAAo"]
[Sat Aug 29 05:08:23.403308 2026] [security2:error] [pid 1028675:tid 1028849] [client 68.155.159.216:65103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK9p9dHPfW2QFvhmL4FYQAAACc"]
[Sat Aug 29 05:08:23.408988 2026] [security2:error] [pid 1034096:tid 1034316] [client 213.209.159.223:5757] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/env/.env"] [unique_id "apK9py04twRPFuquKD2ooQAAAMY"]
[Sat Aug 29 05:08:23.448532 2026] [security2:error] [pid 1028675:tid 1028914] [client 20.63.219.114:18505] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "bctcoffee.com"] [uri "/1.php7"] [unique_id "apK9p9dHPfW2QFvhmL4FbwAAAGg"]
[Sat Aug 29 05:08:23.448640 2026] [security2:error] [pid 1028675:tid 1028914] [client 20.63.219.114:18505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/1.php7"] [unique_id "apK9p9dHPfW2QFvhmL4FbwAAAGg"]
[Sat Aug 29 05:08:23.456372 2026] [security2:error] [pid 1034096:tid 1034265] [client 4.205.62.107:58372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/database.php"] [unique_id "apK9py04twRPFuquKD2orAAAAJM"]
[Sat Aug 29 05:08:23.492227 2026] [security2:error] [pid 1028675:tid 1028879] [client 20.63.81.20:57951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/82.php"] [unique_id "apK9p9dHPfW2QFvhmL4FdgAAAEU"]
[Sat Aug 29 05:08:23.519096 2026] [security2:error] [pid 1034096:tid 1034301] [client 68.155.159.216:16198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK9py04twRPFuquKD2otAAAALc"]
[Sat Aug 29 05:08:23.520312 2026] [security2:error] [pid 1028675:tid 1028855] [client 20.48.160.90:65404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/btyuio.php"] [unique_id "apK9p9dHPfW2QFvhmL4FeQAAAC0"]
[Sat Aug 29 05:08:23.523808 2026] [security2:error] [pid 1034096:tid 1034274] [client 52.139.37.240:23612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/buy.php"] [unique_id "apK9py04twRPFuquKD2otQAAAJw"]
[Sat Aug 29 05:08:23.564775 2026] [security2:error] [pid 1034096:tid 1034280] [client 158.23.184.117:55664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/wp-content/languages/themes/num.php"] [unique_id "apK9py04twRPFuquKD2otwAAAKI"]
[Sat Aug 29 05:08:23.622168 2026] [security2:error] [pid 1034096:tid 1034319] [client 20.240.128.207:7400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/txets.php"] [unique_id "apK9py04twRPFuquKD2ougAAAMk"]
[Sat Aug 29 05:08:23.625592 2026] [security2:error] [pid 1028675:tid 1028878] [client 20.63.219.114:10460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/defaults.php"] [unique_id "apK9p9dHPfW2QFvhmL4FfAAAAEQ"]
[Sat Aug 29 05:08:23.649784 2026] [security2:error] [pid 1034096:tid 1034312] [client 20.63.81.20:57968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/dex.php"] [unique_id "apK9py04twRPFuquKD2owAAAAMI"]
[Sat Aug 29 05:08:23.664131 2026] [security2:error] [pid 1028675:tid 1028819] [client 20.52.41.200:4599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-content/file.php"] [unique_id "apK9p9dHPfW2QFvhmL4FfwAAAAk"]
[Sat Aug 29 05:08:23.666575 2026] [security2:error] [pid 1034096:tid 1034299] [client 68.155.159.216:23436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/chosen.php"] [unique_id "apK9py04twRPFuquKD2owgAAALU"]
[Sat Aug 29 05:08:23.673537 2026] [security2:error] [pid 1028675:tid 1028883] [client 158.23.147.79:50125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-admin/index.php"] [unique_id "apK9p9dHPfW2QFvhmL4FgAAAAEk"]
[Sat Aug 29 05:08:23.698057 2026] [security2:error] [pid 1028675:tid 1028840] [client 4.205.62.107:6961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9p9dHPfW2QFvhmL4FgQAAAB4"]
[Sat Aug 29 05:08:23.705483 2026] [security2:error] [pid 1034096:tid 1034272] [client 4.205.62.107:22422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/nzv.php"] [unique_id "apK9py04twRPFuquKD2oxwAAAJo"]
[Sat Aug 29 05:08:23.709370 2026] [security2:error] [pid 1034096:tid 1034259] [client 158.23.184.117:2940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/wp.php"] [unique_id "apK9py04twRPFuquKD2oyAAAAI0"]
[Sat Aug 29 05:08:23.738263 2026] [security2:error] [pid 1034096:tid 1034330] [client 20.48.160.90:65356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/dehnl.php"] [unique_id "apK9py04twRPFuquKD2oyQAAANQ"]
[Sat Aug 29 05:08:23.738312 2026] [security2:error] [pid 1028675:tid 1028843] [client 40.83.93.50:19459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-admin/system.php"] [unique_id "apK9p9dHPfW2QFvhmL4FggAAACE"]
[Sat Aug 29 05:08:23.739154 2026] [security2:error] [pid 1028675:tid 1028848] [client 158.23.147.79:17449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK9p9dHPfW2QFvhmL4FgwAAACY"]
[Sat Aug 29 05:08:23.750604 2026] [security2:error] [pid 1028675:tid 1028923] [client 52.139.37.240:23853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/item.php"] [unique_id "apK9p9dHPfW2QFvhmL4FhAAAAHE"]
[Sat Aug 29 05:08:23.751420 2026] [security2:error] [pid 1028675:tid 1028927] [client 68.155.159.216:14209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK9p9dHPfW2QFvhmL4FhQAAAHU"]
[Sat Aug 29 05:08:23.791481 2026] [security2:error] [pid 1034096:tid 1034375] [client 4.205.62.107:26658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/app_local.php"] [unique_id "apK9py04twRPFuquKD2ozAAAAQE"]
[Sat Aug 29 05:08:23.794013 2026] [security2:error] [pid 1034096:tid 1034268] [client 20.63.81.20:63027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/inso.php"] [unique_id "apK9py04twRPFuquKD2ozQAAAJY"]
[Sat Aug 29 05:08:23.829821 2026] [security2:error] [pid 1034096:tid 1034315] [client 20.63.219.114:8832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/ds.php"] [unique_id "apK9py04twRPFuquKD2ozgAAAMU"]
[Sat Aug 29 05:08:23.874033 2026] [security2:error] [pid 1028675:tid 1028815] [client 158.23.184.117:55619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/xmlrpc.php"] [unique_id "apK9p9dHPfW2QFvhmL4FigAAAAU"]
[Sat Aug 29 05:08:23.881921 2026] [security2:error] [pid 1034096:tid 1034286] [client 20.197.61.180:14419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/goods.php"] [unique_id "apK9py04twRPFuquKD2ozwAAAKg"]
[Sat Aug 29 05:08:23.886658 2026] [security2:error] [pid 1034096:tid 1034137] [remote 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK9py04twRPFuquKD2o0AABBA8"]
[Sat Aug 29 05:08:23.886767 2026] [security2:error] [pid 1034096:tid 1034378] [client 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK9py04twRPFuquKD2o0AABBA8"]
[Sat Aug 29 05:08:23.908413 2026] [security2:error] [pid 1034096:tid 1034335] [client 45.205.1.124:52310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 124.1.205.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "adillice.com"] [uri "/assets/plugins/file-uploader/server/php/index.php"] [unique_id "apK9py04twRPFuquKD2o0gAAANk"]
[Sat Aug 29 05:08:23.927066 2026] [security2:error] [pid 1028675:tid 1028845] [client 4.205.62.107:9152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/i.php"] [unique_id "apK9p9dHPfW2QFvhmL4FjAAAACM"]
[Sat Aug 29 05:08:23.942818 2026] [security2:error] [pid 1034096:tid 1034342] [client 103.168.67.159:53068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 159.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "naturalkneads.com"] [uri "/wordpress/index.php"] [unique_id "apK9py04twRPFuquKD2o0wAAAOA"], referer: https://naturalkneads.com/wordpress/wp-admin/
[Sat Aug 29 05:08:23.943734 2026] [security2:error] [pid 1034096:tid 1034262] [client 20.63.81.20:62976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/aa.php"] [unique_id "apK9py04twRPFuquKD2o1AAAAJA"]
[Sat Aug 29 05:08:23.945150 2026] [security2:error] [pid 1034096:tid 1034276] [client 52.139.37.240:23604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/02.php"] [unique_id "apK9py04twRPFuquKD2o1QAAAJ4"]
[Sat Aug 29 05:08:23.951234 2026] [security2:error] [pid 1034096:tid 1034328] [client 20.100.175.163:7041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/config.php"] [unique_id "apK9py04twRPFuquKD2o1wAAANI"]
[Sat Aug 29 05:08:23.958910 2026] [security2:error] [pid 1034096:tid 1034310] [client 103.185.242.143:52413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK9py04twRPFuquKD2o2AAAAMA"]
[Sat Aug 29 05:08:23.959033 2026] [security2:error] [pid 1034096:tid 1034310] [client 103.185.242.143:52413] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK9py04twRPFuquKD2o2AAAAMA"]
[Sat Aug 29 05:08:23.962985 2026] [security2:error] [pid 1028675:tid 1028849] [client 20.48.160.90:63322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/zoo2.php"] [unique_id "apK9p9dHPfW2QFvhmL4FkAAAACc"]
[Sat Aug 29 05:08:23.973878 2026] [security2:error] [pid 1034096:tid 1034365] [client 4.205.62.107:53269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/doc.php"] [unique_id "apK9py04twRPFuquKD2o2QAAAPc"]
[Sat Aug 29 05:08:23.978736 2026] [security2:error] [pid 1034096:tid 1034141] [remote 34.139.86.26:36612] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "ptstmobile.ztxcloud.com"] [uri "/api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ"] [unique_id "apK9py04twRPFuquKD2o3QAAxhM"]
[Sat Aug 29 05:08:23.979276 2026] [security2:error] [pid 1034096:tid 1034139] [remote 34.139.86.26:36612] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ptstmobile.ztxcloud.com"] [uri "/@fs/var/task/.env"] [unique_id "apK9py04twRPFuquKD2o3AAAxhE"]
[Sat Aug 29 05:08:23.980388 2026] [security2:error] [pid 1034096:tid 1034285] [client 20.63.219.114:15434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/post.php"] [unique_id "apK9py04twRPFuquKD2o3wAAAKc"]
[Sat Aug 29 05:08:24.013206 2026] [security2:error] [pid 1028675:tid 1028885] [client 20.197.61.180:1777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/Njima.php"] [unique_id "apK9qNdHPfW2QFvhmL4FlAAAAEs"]
[Sat Aug 29 05:08:24.018598 2026] [security2:error] [pid 1028675:tid 1028884] [client 158.23.184.117:2907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/app.php"] [unique_id "apK9qNdHPfW2QFvhmL4FlQAAAEo"]
[Sat Aug 29 05:08:24.078838 2026] [security2:error] [pid 1034096:tid 1034265] [client 20.63.81.20:63064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/img.php"] [unique_id "apK9qC04twRPFuquKD2o4QAAAJM"]
[Sat Aug 29 05:08:24.086978 2026] [security2:error] [pid 1028675:tid 1028860] [client 158.23.147.79:35732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK9qNdHPfW2QFvhmL4FngAAADI"]
[Sat Aug 29 05:08:24.098546 2026] [security2:error] [pid 1028675:tid 1028866] [client 20.48.160.90:65394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/zoo1.php"] [unique_id "apK9qNdHPfW2QFvhmL4FnwAAADg"]
[Sat Aug 29 05:08:24.104128 2026] [security2:error] [pid 1034096:tid 1034284] [client 20.52.41.200:5314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/files.php"] [unique_id "apK9qC04twRPFuquKD2o4gAAAKY"]
[Sat Aug 29 05:08:24.142116 2026] [security2:error] [pid 1028675:tid 1028897] [client 52.139.37.240:23855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/x.php"] [unique_id "apK9qNdHPfW2QFvhmL4FoQAAAFc"]
[Sat Aug 29 05:08:24.147105 2026] [security2:error] [pid 1028675:tid 1028867] [client 68.155.159.216:6033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK9qNdHPfW2QFvhmL4FogAAADk"]
[Sat Aug 29 05:08:24.164231 2026] [security2:error] [pid 1028675:tid 1028876] [client 158.23.184.117:2932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/aaa.php"] [unique_id "apK9qNdHPfW2QFvhmL4FpQAAAEI"]
[Sat Aug 29 05:08:24.178820 2026] [http2:warn] [pid 1018003:tid 1018194] [client 57.141.14.53:57820] h2_stream(1018003-367-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:08:24.186084 2026] [security2:error] [pid 1028675:tid 1028846] [client 20.63.219.114:10492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/GOD.php"] [unique_id "apK9qNdHPfW2QFvhmL4FpgAAACQ"]
[Sat Aug 29 05:08:24.208735 2026] [security2:error] [pid 1034096:tid 1034263] [client 40.83.93.50:1426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-admin/test.php"] [unique_id "apK9qC04twRPFuquKD2o4wAAAJE"]
[Sat Aug 29 05:08:24.239282 2026] [security2:error] [pid 1034096:tid 1034353] [client 20.63.81.20:57959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/222.php"] [unique_id "apK9qC04twRPFuquKD2o5AAAAOs"]
[Sat Aug 29 05:08:24.257868 2026] [security2:error] [pid 1034096:tid 1034293] [client 20.48.160.90:64155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/radio.php"] [unique_id "apK9qC04twRPFuquKD2o5QAAAK8"]
[Sat Aug 29 05:08:24.285011 2026] [security2:error] [pid 1034096:tid 1034312] [client 158.23.147.79:5956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-includes/css/index.php"] [unique_id "apK9qC04twRPFuquKD2o6AAAAMI"]
[Sat Aug 29 05:08:24.289553 2026] [security2:error] [pid 1034096:tid 1034277] [client 68.155.159.216:49226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK9qC04twRPFuquKD2o6QAAAJ8"]
[Sat Aug 29 05:08:24.336325 2026] [security2:error] [pid 1034096:tid 1034360] [client 20.63.219.114:8841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/csv.php"] [unique_id "apK9qC04twRPFuquKD2o6wAAAPI"]
[Sat Aug 29 05:08:24.338917 2026] [security2:error] [pid 1028675:tid 1028904] [client 52.139.37.240:23866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/php8.php"] [unique_id "apK9qNdHPfW2QFvhmL4FqQAAAF4"]
[Sat Aug 29 05:08:24.366802 2026] [security2:error] [pid 1034096:tid 1034267] [client 158.23.184.117:2768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/hehe.php"] [unique_id "apK9qC04twRPFuquKD2o7AAAAJU"]
[Sat Aug 29 05:08:24.381643 2026] [security2:error] [pid 1028675:tid 1028844] [client 20.203.141.11:27318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "apK9qNdHPfW2QFvhmL4FqgAAACI"]
[Sat Aug 29 05:08:24.395419 2026] [security2:error] [pid 1034096:tid 1034272] [client 20.104.18.15:15240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9qC04twRPFuquKD2o7QAAAJo"]
[Sat Aug 29 05:08:24.398530 2026] [security2:error] [pid 1034096:tid 1034258] [client 20.63.81.20:57962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/key.php"] [unique_id "apK9qC04twRPFuquKD2o7gAAAIw"]
[Sat Aug 29 05:08:24.405383 2026] [security2:error] [pid 1028675:tid 1028937] [client 213.209.159.223:58456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/src/.env"] [unique_id "apK9qNdHPfW2QFvhmL4FqwAAAH8"]
[Sat Aug 29 05:08:24.413811 2026] [security2:error] [pid 1034096:tid 1034376] [client 20.48.160.90:65297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/one.php"] [unique_id "apK9qC04twRPFuquKD2o7wAAAQI"]
[Sat Aug 29 05:08:24.428536 2026] [security2:error] [pid 1034096:tid 1034329] [client 52.139.37.240:21398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/ahax.php"] [unique_id "apK9qC04twRPFuquKD2o8AAAANM"]
[Sat Aug 29 05:08:24.429052 2026] [security2:error] [pid 1034096:tid 1034252] [client 68.155.159.216:24504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK9qC04twRPFuquKD2o8QAAAIY"]
[Sat Aug 29 05:08:24.435183 2026] [security2:error] [pid 1034096:tid 1034327] [client 158.23.147.79:6084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/file.php"] [unique_id "apK9qC04twRPFuquKD2o8gAAANE"]
[Sat Aug 29 05:08:24.451001 2026] [security2:error] [pid 1028675:tid 1028923] [client 20.240.128.207:24724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-content/themes/about.php"] [unique_id "apK9qNdHPfW2QFvhmL4FrQAAAHE"]
[Sat Aug 29 05:08:24.455083 2026] [security2:error] [pid 1034096:tid 1034298] [client 158.23.147.79:26562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/nf_tracking.php"] [unique_id "apK9qC04twRPFuquKD2o9AAAALQ"]
[Sat Aug 29 05:08:24.461748 2026] [security2:error] [pid 1034096:tid 1034281] [client 20.100.175.163:5513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK9qC04twRPFuquKD2o9QAAAKM"]
[Sat Aug 29 05:08:24.478036 2026] [security2:error] [pid 1034096:tid 1034270] [client 158.23.147.79:37775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-admin/network/index.php"] [unique_id "apK9qC04twRPFuquKD2o9wAAAJg"]
[Sat Aug 29 05:08:24.518027 2026] [security2:error] [pid 1028675:tid 1028812] [client 68.155.159.216:18370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/about.php"] [unique_id "apK9qNdHPfW2QFvhmL4FsQAAAAI"]
[Sat Aug 29 05:08:24.526773 2026] [security2:error] [pid 1034096:tid 1034286] [client 20.104.18.15:15232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9qC04twRPFuquKD2o-AAAAKg"]
[Sat Aug 29 05:08:24.532291 2026] [security2:error] [pid 1034096:tid 1034357] [client 52.139.37.240:23816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/fix.php"] [unique_id "apK9qC04twRPFuquKD2o-QAAAO8"]
[Sat Aug 29 05:08:24.538953 2026] [security2:error] [pid 1034096:tid 1034348] [client 158.23.184.117:2943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/wp-includes/PHPMailer.php"] [unique_id "apK9qC04twRPFuquKD2o-gAAAOY"]
[Sat Aug 29 05:08:24.541095 2026] [security2:error] [pid 1028675:tid 1028851] [client 20.63.81.20:57979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/chosen.php"] [unique_id "apK9qNdHPfW2QFvhmL4FsgAAACk"]
[Sat Aug 29 05:08:24.558007 2026] [security2:error] [pid 1028675:tid 1028877] [client 197.219.150.206:49277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK9qNdHPfW2QFvhmL4FtQAAAEM"]
[Sat Aug 29 05:08:24.558091 2026] [security2:error] [pid 1028675:tid 1028877] [client 197.219.150.206:49277] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK9qNdHPfW2QFvhmL4FtQAAAEM"]
[Sat Aug 29 05:08:24.559154 2026] [security2:error] [pid 1034096:tid 1034259] [client 20.52.41.200:5321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/o.php"] [unique_id "apK9qC04twRPFuquKD2o-wAAAI0"]
[Sat Aug 29 05:08:24.567618 2026] [security2:error] [pid 1034096:tid 1034362] [client 20.63.219.114:15452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/ggfi.php"] [unique_id "apK9qC04twRPFuquKD2o_AAAAPQ"]
[Sat Aug 29 05:08:24.594704 2026] [security2:error] [pid 1034096:tid 1034275] [client 20.48.160.90:65324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/503.php"] [unique_id "apK9qC04twRPFuquKD2o_QAAAJ0"]
[Sat Aug 29 05:08:24.603499 2026] [security2:error] [pid 1034096:tid 1034144] [remote 52.167.144.136:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantsfans.net"] [uri "/message_board/index.php"] [unique_id "apK9qC04twRPFuquKD2o_gABBBY"]
[Sat Aug 29 05:08:24.615833 2026] [security2:error] [pid 1028675:tid 1028749] [remote 34.139.86.26:36618] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "ptstmobile.ztxcloud.com"] [uri "/icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ"] [unique_id "apK9qNdHPfW2QFvhmL4FuQAAAUQ"]
[Sat Aug 29 05:08:24.616146 2026] [security2:error] [pid 1034096:tid 1034371] [client 20.197.61.180:11744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/hehe.php"] [unique_id "apK9qC04twRPFuquKD2pAAAAAP0"]
[Sat Aug 29 05:08:24.620703 2026] [security2:error] [pid 1034096:tid 1034310] [client 4.205.62.107:58456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/png.php"] [unique_id "apK9qC04twRPFuquKD2pAgAAAMA"]
[Sat Aug 29 05:08:24.623400 2026] [security2:error] [pid 1028675:tid 1028888] [client 52.139.37.240:20756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/breads1.php"] [unique_id "apK9qNdHPfW2QFvhmL4FuwAAAE4"]
[Sat Aug 29 05:08:24.638714 2026] [security2:error] [pid 1034096:tid 1034285] [client 20.104.49.130:58075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/fling.php"] [unique_id "apK9qC04twRPFuquKD2pAwAAAKc"]
[Sat Aug 29 05:08:24.660331 2026] [security2:error] [pid 1034096:tid 1034255] [client 20.104.18.15:15324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/ap.php"] [unique_id "apK9qC04twRPFuquKD2pBAAAAIk"]
[Sat Aug 29 05:08:24.694283 2026] [security2:error] [pid 1034096:tid 1034292] [client 20.63.81.20:63088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/file1221.php"] [unique_id "apK9qC04twRPFuquKD2pBQAAAK4"]
[Sat Aug 29 05:08:24.704214 2026] [security2:error] [pid 1028675:tid 1028857] [client 158.23.184.117:2884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/wp-content/upgrade/alfanew.php7"] [unique_id "apK9qNdHPfW2QFvhmL4FvQAAAC8"]
[Sat Aug 29 05:08:24.710370 2026] [security2:error] [pid 1028675:tid 1028932] [client 20.63.219.114:10453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/fox.php"] [unique_id "apK9qNdHPfW2QFvhmL4FvgAAAHo"]
[Sat Aug 29 05:08:24.727314 2026] [security2:error] [pid 1028675:tid 1028849] [client 20.48.160.90:65380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/504.php"] [unique_id "apK9qNdHPfW2QFvhmL4FwAAAACc"]
[Sat Aug 29 05:08:24.728947 2026] [security2:error] [pid 1034096:tid 1034323] [client 52.139.37.240:23977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/tes.php"] [unique_id "apK9qC04twRPFuquKD2pBwAAAM0"]
[Sat Aug 29 05:08:24.731062 2026] [security2:error] [pid 1028675:tid 1028903] [client 20.197.61.180:8442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/configs.php"] [unique_id "apK9qNdHPfW2QFvhmL4FwQAAAF0"]
[Sat Aug 29 05:08:24.734857 2026] [security2:error] [pid 1034096:tid 1034274] [client 68.155.159.216:1953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9qC04twRPFuquKD2pCQAAAJw"]
[Sat Aug 29 05:08:24.780211 2026] [security2:error] [pid 1028675:tid 1028820] [client 158.23.147.79:50085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK9qNdHPfW2QFvhmL4FxAAAAAo"]
[Sat Aug 29 05:08:24.791797 2026] [security2:error] [pid 1034096:tid 1034272] [client 20.104.18.15:15349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/media.php"] [unique_id "apK9qC04twRPFuquKD2pCwAAAJo"]
[Sat Aug 29 05:08:24.818992 2026] [security2:error] [pid 1028675:tid 1028914] [client 52.139.37.240:21172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/must.php"] [unique_id "apK9qNdHPfW2QFvhmL4FxwAAAGg"]
[Sat Aug 29 05:08:24.841104 2026] [security2:error] [pid 1034096:tid 1034330] [client 4.205.62.107:6912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9qC04twRPFuquKD2pDwAAANQ"]
[Sat Aug 29 05:08:24.850906 2026] [security2:error] [pid 1034096:tid 1034376] [client 158.23.184.117:2908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/admin/alfa-rex.php"] [unique_id "apK9qC04twRPFuquKD2pEAAAAQI"]
[Sat Aug 29 05:08:24.852185 2026] [security2:error] [pid 1034096:tid 1034300] [client 20.203.141.11:12597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "apK9qC04twRPFuquKD2pEQAAALY"]
[Sat Aug 29 05:08:24.860196 2026] [security2:error] [pid 1028675:tid 1028837] [client 4.205.62.107:21613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/66.php"] [unique_id "apK9qNdHPfW2QFvhmL4FyAAAABs"]
[Sat Aug 29 05:08:24.876335 2026] [security2:error] [pid 1028675:tid 1028840] [client 20.63.81.20:63061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/nox.php"] [unique_id "apK9qNdHPfW2QFvhmL4FygAAAB4"]
[Sat Aug 29 05:08:24.895135 2026] [security2:error] [pid 1034096:tid 1034339] [client 158.23.147.79:17561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/wp-content/banners/about.php"] [unique_id "apK9qC04twRPFuquKD2pFAAAAN0"]
[Sat Aug 29 05:08:24.908163 2026] [security2:error] [pid 1028675:tid 1028915] [client 35.194.208.44:1236] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/google-cloud-key.json"] [unique_id "apK9qNdHPfW2QFvhmL4FywAAAGk"]
[Sat Aug 29 05:08:24.913679 2026] [security2:error] [pid 1034096:tid 1034373] [client 35.194.208.44:1232] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/.gcp/service-account.json"] [unique_id "apK9qC04twRPFuquKD2pGwAAAP8"]
[Sat Aug 29 05:08:24.925192 2026] [security2:error] [pid 1034096:tid 1034337] [client 35.194.208.44:1506] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/.azure/accessTokens.json"] [unique_id "apK9qC04twRPFuquKD2pKQAAANs"]
[Sat Aug 29 05:08:24.926536 2026] [security2:error] [pid 1034096:tid 1034282] [client 52.139.37.240:23564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/headers.php"] [unique_id "apK9qC04twRPFuquKD2pKwAAAKQ"]
[Sat Aug 29 05:08:24.929320 2026] [security2:error] [pid 1034096:tid 1034318] [client 35.194.208.44:1340] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/openai.json"] [unique_id "apK9qC04twRPFuquKD2pLwAAAMg"]
[Sat Aug 29 05:08:24.929938 2026] [security2:error] [pid 1034096:tid 1034336] [client 20.48.160.90:63310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/admin.php"] [unique_id "apK9qC04twRPFuquKD2pMAAAANo"]
[Sat Aug 29 05:08:24.930302 2026] [security2:error] [pid 1028675:tid 1028883] [client 20.63.219.114:15895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/alfa-rex.php"] [unique_id "apK9qNdHPfW2QFvhmL4F1gAAAEk"]
[Sat Aug 29 05:08:24.936246 2026] [security2:error] [pid 1034096:tid 1034358] [client 20.104.18.15:15237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/adminfuns.php"] [unique_id "apK9qC04twRPFuquKD2pNQAAAPA"]
[Sat Aug 29 05:08:24.936924 2026] [security2:error] [pid 1034096:tid 1034283] [client 35.194.208.44:1452] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/dev/.env"] [unique_id "apK9qC04twRPFuquKD2pJAAAAKU"]
[Sat Aug 29 05:08:24.937704 2026] [security2:error] [pid 1028675:tid 1028935] [client 35.194.208.44:1450] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/production/.env"] [unique_id "apK9qNdHPfW2QFvhmL4F1QAAAH0"]
[Sat Aug 29 05:08:24.939324 2026] [security2:error] [pid 1028675:tid 1028902] [client 4.205.62.107:24963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/ws62.php"] [unique_id "apK9qNdHPfW2QFvhmL4F1wAAAFw"]
[Sat Aug 29 05:08:24.947776 2026] [security2:error] [pid 1034096:tid 1034360] [client 35.194.208.44:1440] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/backup/.env"] [unique_id "apK9qC04twRPFuquKD2pKAAAAPI"]
[Sat Aug 29 05:08:24.953905 2026] [security2:error] [pid 1034096:tid 1034299] [client 20.240.128.207:31055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK9qC04twRPFuquKD2pPAAAALU"]
[Sat Aug 29 05:08:24.953906 2026] [security2:error] [pid 1034096:tid 1034347] [client 35.194.208.44:1470] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/staging/.env"] [unique_id "apK9qC04twRPFuquKD2pNAAAAOU"]
[Sat Aug 29 05:08:24.953987 2026] [security2:error] [pid 1034096:tid 1034374] [client 35.194.208.44:1428] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/client/.env"] [unique_id "apK9qC04twRPFuquKD2pJQAAAQA"]
[Sat Aug 29 05:08:25.000852 2026] [security2:error] [pid 1034096:tid 1034271] [client 20.100.175.163:10797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-good.php"] [unique_id "apK9qC04twRPFuquKD2pQAAAAJk"]
[Sat Aug 29 05:08:25.003173 2026] [security2:error] [pid 1028675:tid 1028923] [client 158.23.184.117:2928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/wp-content/export.php"] [unique_id "apK9qddHPfW2QFvhmL4F4QAAAHE"]
[Sat Aug 29 05:08:25.012337 2026] [security2:error] [pid 1034096:tid 1034371] [client 20.63.81.20:63042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/akismet.php"] [unique_id "apK9qS04twRPFuquKD2pQgAAAP0"]
[Sat Aug 29 05:08:25.013126 2026] [security2:error] [pid 1028675:tid 1028922] [client 20.52.41.200:4390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/file2.php"] [unique_id "apK9qddHPfW2QFvhmL4F4gAAAHA"]
[Sat Aug 29 05:08:25.021386 2026] [security2:error] [pid 1034096:tid 1034357] [client 52.139.37.240:20913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/up.php"] [unique_id "apK9qS04twRPFuquKD2pQwAAAO8"]
[Sat Aug 29 05:08:25.031866 2026] [security2:error] [pid 1028675:tid 1028756] [remote 34.139.86.26:36624] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "ptstmobile.ztxcloud.com"] [uri "/wp-config.php.bak"] [unique_id "apK9qddHPfW2QFvhmL4F4wAAF0s"]
[Sat Aug 29 05:08:25.061397 2026] [security2:error] [pid 1028675:tid 1028786] [remote 34.139.86.26:36624] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ptstmobile.ztxcloud.com"] [uri "/@fs/.env"] [unique_id "apK9qddHPfW2QFvhmL4F5QAAWGk"]
[Sat Aug 29 05:08:25.061735 2026] [security2:error] [pid 1028675:tid 1028761] [remote 34.139.86.26:36624] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "ptstmobile.ztxcloud.com"] [uri "/wp-config.php.old"] [unique_id "apK9qddHPfW2QFvhmL4F5wAAWFA"]
[Sat Aug 29 05:08:25.062390 2026] [security2:error] [pid 1028675:tid 1028708] [remote 34.139.86.26:36624] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ptstmobile.ztxcloud.com"] [uri "/laravel/.env"] [unique_id "apK9qddHPfW2QFvhmL4F5gAAWBs"]
[Sat Aug 29 05:08:25.073862 2026] [security2:error] [pid 1028675:tid 1028779] [remote 34.139.86.26:36624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.86.139.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ptstmobile.ztxcloud.com"] [uri "/config/.env.php"] [unique_id "apK9qddHPfW2QFvhmL4F6AAAWGI"]
[Sat Aug 29 05:08:25.107649 2026] [security2:error] [pid 1028675:tid 1028815] [client 20.48.160.90:65390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/ws85.php"] [unique_id "apK9qddHPfW2QFvhmL4F6gAAAAU"]
[Sat Aug 29 05:08:25.111940 2026] [security2:error] [pid 1034096:tid 1034270] [client 127.0.0.1:15446] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK9qC04twRPFuquKD2pMwAAAJg"]
[Sat Aug 29 05:08:25.112118 2026] [security2:error] [pid 1028675:tid 1028860] [client 35.194.208.44:1374] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/config/anthropic.json"] [unique_id "apK9qNdHPfW2QFvhmL4FzgAAADI"]
[Sat Aug 29 05:08:25.116336 2026] [security2:error] [pid 1034096:tid 1034332] [client 20.104.18.15:15326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/classwithtostring.php"] [unique_id "apK9qS04twRPFuquKD2pRQAAANY"]
[Sat Aug 29 05:08:25.121477 2026] [security2:error] [pid 1034096:tid 1034340] [client 52.139.37.240:58659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/xpw.php"] [unique_id "apK9qS04twRPFuquKD2pRgAAAN4"]
[Sat Aug 29 05:08:25.126024 2026] [security2:error] [pid 1028675:tid 1028811] [client 4.205.62.107:53352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/aww.php"] [unique_id "apK9qddHPfW2QFvhmL4F6wAAAAE"]
[Sat Aug 29 05:08:25.128132 2026] [security2:error] [pid 1034096:tid 1034323] [client 4.205.62.107:53143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/css.php"] [unique_id "apK9qS04twRPFuquKD2pRwAAAM0"]
[Sat Aug 29 05:08:25.153529 2026] [security2:error] [pid 1034096:tid 1034296] [client 158.23.184.117:2890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/new.php"] [unique_id "apK9qS04twRPFuquKD2pSAAAALI"]
[Sat Aug 29 05:08:25.156725 2026] [security2:error] [pid 1034096:tid 1034296] [client 20.63.81.20:57944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/ajax.php"] [unique_id "apK9qS04twRPFuquKD2pSQAAALI"]
[Sat Aug 29 05:08:25.183168 2026] [security2:error] [pid 1034096:tid 1034359] [client 158.23.147.79:35740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK9qS04twRPFuquKD2pSgAAAPE"]
[Sat Aug 29 05:08:25.186721 2026] [security2:error] [pid 1034096:tid 1034286] [client 20.63.219.114:18532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/disagraeosc.php"] [unique_id "apK9qS04twRPFuquKD2pTAAAAKg"]
[Sat Aug 29 05:08:25.212613 2026] [security2:error] [pid 1034096:tid 1034330] [client 20.104.49.130:52493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.carlosmua.com"] [uri "/ws45.php"] [unique_id "apK9qS04twRPFuquKD2pTQAAANQ"]
[Sat Aug 29 05:08:25.241151 2026] [security2:error] [pid 1034096:tid 1034339] [client 20.48.160.90:65305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/ffs.php"] [unique_id "apK9qS04twRPFuquKD2pTwAAAN0"]
[Sat Aug 29 05:08:25.264144 2026] [security2:error] [pid 1028675:tid 1028884] [client 20.104.18.15:15321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK9qddHPfW2QFvhmL4F7gAAAEo"]
[Sat Aug 29 05:08:25.268495 2026] [http2:warn] [pid 1017536:tid 1017764] [client 57.141.14.63:59328] h2_stream(1017536-342-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:08:25.289120 2026] [security2:error] [pid 1034096:tid 1034282] [client 52.139.37.240:21162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/wp-content/155.php"] [unique_id "apK9qS04twRPFuquKD2pUAAAAKQ"]
[Sat Aug 29 05:08:25.289321 2026] [security2:error] [pid 1028675:tid 1028825] [client 20.63.81.20:57883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/atomlib.php"] [unique_id "apK9qddHPfW2QFvhmL4F7wAAAA8"]
[Sat Aug 29 05:08:25.302529 2026] [security2:error] [pid 1034096:tid 1034361] [client 158.23.184.117:55637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/wp-content/plugins/revslider/admin.php"] [unique_id "apK9qS04twRPFuquKD2pUgAAAPM"]
[Sat Aug 29 05:08:25.311626 2026] [security2:error] [pid 1028675:tid 1028856] [client 20.203.141.11:11838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/gifclass.php"] [unique_id "apK9qddHPfW2QFvhmL4F8AAAAC4"]
[Sat Aug 29 05:08:25.317184 2026] [security2:error] [pid 1034096:tid 1034374] [client 158.23.147.79:32620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK9qS04twRPFuquKD2pUwAAAQA"]
[Sat Aug 29 05:08:25.320686 2026] [security2:error] [pid 1028675:tid 1028903] [client 52.139.37.240:23811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/array.php"] [unique_id "apK9qddHPfW2QFvhmL4F8QAAAF0"]
[Sat Aug 29 05:08:25.338189 2026] [security2:error] [pid 1034096:tid 1034295] [client 20.197.61.180:8415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/wp-admin/class-db.php"] [unique_id "apK9qS04twRPFuquKD2pVAAAALE"]
[Sat Aug 29 05:08:25.375732 2026] [security2:error] [pid 1034096:tid 1034262] [client 20.48.160.90:64173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/nano.php"] [unique_id "apK9qS04twRPFuquKD2pVQAAAJA"]
[Sat Aug 29 05:08:25.378397 2026] [security2:error] [pid 1034096:tid 1034335] [client 127.0.0.1:15560] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK9qC04twRPFuquKD2pPQAAANk"]
[Sat Aug 29 05:08:25.378482 2026] [security2:error] [pid 1034096:tid 1034303] [client 35.194.208.44:1376] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/config.env"] [unique_id "apK9qC04twRPFuquKD2pLQAAALk"]
[Sat Aug 29 05:08:25.384578 2026] [security2:error] [pid 1028675:tid 1028828] [client 158.23.147.79:6083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK9qddHPfW2QFvhmL4F8gAAABI"]
[Sat Aug 29 05:08:25.403624 2026] [security2:error] [pid 1034096:tid 1034378] [client 20.104.18.15:15355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/5PJcpMFsD8B.php"] [unique_id "apK9qS04twRPFuquKD2pVgAAAQQ"]
[Sat Aug 29 05:08:25.409652 2026] [security2:error] [pid 1034096:tid 1034337] [client 20.63.219.114:18542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/cookie.php"] [unique_id "apK9qS04twRPFuquKD2pVwAAANs"]
[Sat Aug 29 05:08:25.449326 2026] [security2:error] [pid 1028675:tid 1028846] [client 158.23.184.117:2923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/wp-content/images/uploads/admin.php"] [unique_id "apK9qddHPfW2QFvhmL4F-AAAACQ"]
[Sat Aug 29 05:08:25.451826 2026] [security2:error] [pid 1028675:tid 1028916] [client 20.240.128.207:31043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-admin/index.php"] [unique_id "apK9qddHPfW2QFvhmL4F-QAAAGo"]
[Sat Aug 29 05:08:25.451845 2026] [security2:error] [pid 1034096:tid 1034316] [client 20.63.81.20:62998] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcontacts.horseweblog.com"] [uri "/1.php"] [unique_id "apK9qS04twRPFuquKD2pWQAAAMY"]
[Sat Aug 29 05:08:25.451931 2026] [security2:error] [pid 1034096:tid 1034316] [client 20.63.81.20:62998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/1.php"] [unique_id "apK9qS04twRPFuquKD2pWQAAAMY"]
[Sat Aug 29 05:08:25.462207 2026] [security2:error] [pid 1028675:tid 1028932] [client 20.197.61.180:1784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/disagraeed.php"] [unique_id "apK9qddHPfW2QFvhmL4F-gAAAHo"]
[Sat Aug 29 05:08:25.470226 2026] [security2:error] [pid 1028675:tid 1028897] [client 20.52.41.200:5313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK9qddHPfW2QFvhmL4F-wAAAFc"]
[Sat Aug 29 05:08:25.490989 2026] [core:error] [pid 1028675:tid 1028841] [client 57.141.14.71:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:25.491003 2026] [core:error] [pid 1028675:tid 1028841] [client 57.141.14.71:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:25.500078 2026] [security2:error] [pid 1028675:tid 1028885] [client 20.100.175.163:5529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "apK9qddHPfW2QFvhmL4F_QAAAEs"]
[Sat Aug 29 05:08:25.500686 2026] [security2:error] [pid 1034096:tid 1034321] [client 52.139.37.240:20782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/wp-update.php"] [unique_id "apK9qS04twRPFuquKD2pXAAAAMs"]
[Sat Aug 29 05:08:25.517794 2026] [security2:error] [pid 1034096:tid 1034357] [client 52.139.37.240:23580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.docpepper.net"] [uri "/wp-cron.php"] [unique_id "apK9qS04twRPFuquKD2pXgAAAO8"]
[Sat Aug 29 05:08:25.528158 2026] [security2:error] [pid 1028675:tid 1028808] [remote 34.139.86.26:36624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.86.139.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ptstmobile.ztxcloud.com"] [uri "/config.php.bak"] [unique_id "apK9qddHPfW2QFvhmL4GAAAAFn8"]
[Sat Aug 29 05:08:25.531119 2026] [security2:error] [pid 1034096:tid 1034275] [client 213.209.159.223:27435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/config/app.php"] [unique_id "apK9qS04twRPFuquKD2pXwAAAJ0"]
[Sat Aug 29 05:08:25.537393 2026] [security2:error] [pid 1034096:tid 1034367] [client 20.104.18.15:15296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK9qS04twRPFuquKD2pYAAAAPk"]
[Sat Aug 29 05:08:25.538684 2026] [security2:error] [pid 1034096:tid 1034260] [client 20.48.160.90:65357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/ano.php"] [unique_id "apK9qS04twRPFuquKD2pYQAAAI4"]
[Sat Aug 29 05:08:25.541200 2026] [security2:error] [pid 1034096:tid 1034344] [client 20.63.219.114:10434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/about.php525"] [unique_id "apK9qS04twRPFuquKD2pYgAAAOI"]
[Sat Aug 29 05:08:25.544563 2026] [security2:error] [pid 1034096:tid 1034292] [client 158.23.147.79:6017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/file17.php"] [unique_id "apK9qS04twRPFuquKD2pYwAAAK4"]
[Sat Aug 29 05:08:25.547501 2026] [security2:error] [pid 1028675:tid 1028687] [remote 34.139.86.26:36624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.86.139.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ptstmobile.ztxcloud.com"] [uri "/.env.php.bak"] [unique_id "apK9qddHPfW2QFvhmL4GAgAAFwc"]
[Sat Aug 29 05:08:25.549242 2026] [security2:error] [pid 1028675:tid 1028801] [remote 34.139.86.26:36624] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ptstmobile.ztxcloud.com"] [uri "/core/.env"] [unique_id "apK9qddHPfW2QFvhmL4GAwAAF3g"]
[Sat Aug 29 05:08:25.552313 2026] [security2:error] [pid 1034096:tid 1034360] [client 107.145.13.164:58403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 164.13.145.107.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK9qS04twRPFuquKD2pXQAAAPI"]
[Sat Aug 29 05:08:25.552395 2026] [security2:error] [pid 1034096:tid 1034360] [client 107.145.13.164:58403] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK9qS04twRPFuquKD2pXQAAAPI"]
[Sat Aug 29 05:08:25.573013 2026] [security2:error] [pid 1034096:tid 1034291] [client 158.23.147.79:17422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-includes/index.php"] [unique_id "apK9qS04twRPFuquKD2pZAAAAK0"]
[Sat Aug 29 05:08:25.594969 2026] [security2:error] [pid 1034096:tid 1034308] [client 158.23.184.117:2560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/tools.php"] [unique_id "apK9qS04twRPFuquKD2pZgAAAL4"]
[Sat Aug 29 05:08:25.597254 2026] [security2:error] [pid 1034096:tid 1034270] [client 20.104.18.15:13703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/replace.php"] [unique_id "apK9qS04twRPFuquKD2paAAAAJg"]
[Sat Aug 29 05:08:25.597456 2026] [security2:error] [pid 1034096:tid 1034340] [client 158.23.147.79:53149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK9qS04twRPFuquKD2pZwAAAN4"]
[Sat Aug 29 05:08:25.598572 2026] [security2:error] [pid 1028675:tid 1028909] [client 158.23.147.79:26541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wzy.php"] [unique_id "apK9qddHPfW2QFvhmL4GBAAAAGM"]
[Sat Aug 29 05:08:25.611955 2026] [security2:error] [pid 1034096:tid 1034274] [client 20.104.18.15:16855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/zoo2.php"] [unique_id "apK9qS04twRPFuquKD2pagAAAJw"]
[Sat Aug 29 05:08:25.612478 2026] [security2:error] [pid 1028675:tid 1028726] [remote 34.139.86.26:58244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.86.139.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ztxcloud.com"] [uri "/ptstmobile/w_api/Handler.php"] [unique_id "apK9qddHPfW2QFvhmL4GBQAAeC0"], referer: https://ptstmobile.ztxcloud.com/auth.json
[Sat Aug 29 05:08:25.612700 2026] [security2:error] [pid 1034096:tid 1034268] [client 20.104.18.15:12181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/ssla.php"] [unique_id "apK9qS04twRPFuquKD2pbAAAAJY"]
[Sat Aug 29 05:08:25.620828 2026] [security2:error] [pid 1034096:tid 1034353] [client 20.63.81.20:57030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/samll.php"] [unique_id "apK9qS04twRPFuquKD2pbQAAAOs"]
[Sat Aug 29 05:08:25.622756 2026] [security2:error] [pid 1034096:tid 1034319] [client 20.104.18.15:4889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/gjewuagf.php"] [unique_id "apK9qS04twRPFuquKD2pbgAAAMk"]
[Sat Aug 29 05:08:25.636194 2026] [security2:error] [pid 1028675:tid 1028783] [remote 34.139.86.26:36624] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "ptstmobile.ztxcloud.com"] [uri "/.env.swp"] [unique_id "apK9qddHPfW2QFvhmL4GCAAAWGY"]
[Sat Aug 29 05:08:25.639587 2026] [security2:error] [pid 1028675:tid 1028789] [remote 34.139.86.26:36624] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ptstmobile.ztxcloud.com"] [uri "/public/.env"] [unique_id "apK9qddHPfW2QFvhmL4GCQAABWw"]
[Sat Aug 29 05:08:25.664724 2026] [security2:error] [pid 1028675:tid 1028681] [remote 34.139.86.26:36624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.86.139.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ptstmobile.ztxcloud.com"] [uri "/configuration.php.bak"] [unique_id "apK9qddHPfW2QFvhmL4GCgAATAE"]
[Sat Aug 29 05:08:25.670600 2026] [security2:error] [pid 1028675:tid 1028824] [client 20.48.160.90:64145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/mgrr.php"] [unique_id "apK9qddHPfW2QFvhmL4GCwAAAA4"]
[Sat Aug 29 05:08:25.671048 2026] [security2:error] [pid 1028675:tid 1028879] [client 20.104.18.15:15251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/wsd.php"] [unique_id "apK9qddHPfW2QFvhmL4GDAAAAEU"]
[Sat Aug 29 05:08:25.694341 2026] [security2:error] [pid 1034096:tid 1034314] [client 52.139.37.240:20769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/xmrlpc.php"] [unique_id "apK9qS04twRPFuquKD2pcQAAAMQ"]
[Sat Aug 29 05:08:25.719612 2026] [security2:error] [pid 1034096:tid 1034251] [client 20.104.18.15:19375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "apK9qS04twRPFuquKD2pcgAAAIU"]
[Sat Aug 29 05:08:25.722384 2026] [security2:error] [pid 1034096:tid 1034294] [client 20.104.18.15:39835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/uwu.php"] [unique_id "apK9qS04twRPFuquKD2pcwAAALA"]
[Sat Aug 29 05:08:25.739579 2026] [security2:error] [pid 1028675:tid 1028866] [client 20.104.18.15:13729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/c4.php"] [unique_id "apK9qddHPfW2QFvhmL4GDQAAADg"]
[Sat Aug 29 05:08:25.741188 2026] [security2:error] [pid 1028675:tid 1028839] [client 158.23.184.117:2897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/wp-content/uploads/my.php"] [unique_id "apK9qddHPfW2QFvhmL4GDgAAAB0"]
[Sat Aug 29 05:08:25.742446 2026] [security2:error] [pid 1034096:tid 1034287] [client 20.104.18.15:16784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/zoo1.php"] [unique_id "apK9qS04twRPFuquKD2pdAAAAKk"]
[Sat Aug 29 05:08:25.745337 2026] [security2:error] [pid 1034096:tid 1034339] [client 20.104.18.15:12237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "apK9qS04twRPFuquKD2pdQAAAN0"]
[Sat Aug 29 05:08:25.752652 2026] [security2:error] [pid 1028675:tid 1028904] [client 20.63.81.20:63083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/she11.php"] [unique_id "apK9qddHPfW2QFvhmL4GDwAAAF4"]
[Sat Aug 29 05:08:25.775577 2026] [security2:error] [pid 1028675:tid 1028908] [client 4.205.62.107:58429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/wp-tem.php"] [unique_id "apK9qddHPfW2QFvhmL4GEAAAAGI"]
[Sat Aug 29 05:08:25.779901 2026] [security2:error] [pid 1034096:tid 1034346] [client 20.63.219.114:16662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/NewFile.php"] [unique_id "apK9qS04twRPFuquKD2pdgAAAOQ"]
[Sat Aug 29 05:08:25.804376 2026] [security2:error] [pid 1034096:tid 1034306] [client 20.48.160.90:64182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/mac.php"] [unique_id "apK9qS04twRPFuquKD2peAAAALw"]
[Sat Aug 29 05:08:25.819075 2026] [security2:error] [pid 1028675:tid 1028844] [client 20.104.18.15:15357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/bulet.php"] [unique_id "apK9qddHPfW2QFvhmL4GEQAAACI"]
[Sat Aug 29 05:08:25.838182 2026] [security2:error] [pid 1034096:tid 1034358] [client 20.104.18.15:5032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/tnglzqmv.php"] [unique_id "apK9qS04twRPFuquKD2peQAAAPA"]
[Sat Aug 29 05:08:25.873457 2026] [security2:error] [pid 1034096:tid 1034283] [client 20.104.18.15:13630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/rxr.php"] [unique_id "apK9qS04twRPFuquKD2pegAAAKU"]
[Sat Aug 29 05:08:25.876309 2026] [security2:error] [pid 1034096:tid 1034347] [client 20.104.18.15:16863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/radio.php"] [unique_id "apK9qS04twRPFuquKD2pewAAAOU"]
[Sat Aug 29 05:08:25.879820 2026] [security2:error] [pid 1034096:tid 1034299] [client 20.104.18.15:19388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/wp-aothait.php"] [unique_id "apK9qS04twRPFuquKD2pfAAAALU"]
[Sat Aug 29 05:08:25.886561 2026] [security2:error] [pid 1034096:tid 1034368] [client 158.23.147.79:50153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/about.php"] [unique_id "apK9qS04twRPFuquKD2pfQAAAPo"]
[Sat Aug 29 05:08:25.887997 2026] [security2:error] [pid 1034096:tid 1034259] [client 20.63.81.20:57905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/kerang.php"] [unique_id "apK9qS04twRPFuquKD2pfgAAAI0"]
[Sat Aug 29 05:08:25.888033 2026] [security2:error] [pid 1028675:tid 1028873] [client 52.139.37.240:20786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/about/function.php"] [unique_id "apK9qddHPfW2QFvhmL4GEgAAAD8"]
[Sat Aug 29 05:08:25.891094 2026] [security2:error] [pid 1034096:tid 1034267] [client 20.104.18.15:12146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/wp-aothait.php"] [unique_id "apK9qS04twRPFuquKD2pfwAAAJU"]
[Sat Aug 29 05:08:25.891425 2026] [security2:error] [pid 1034096:tid 1034295] [client 20.104.18.15:39899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/signon.php"] [unique_id "apK9qS04twRPFuquKD2pgAAAALE"]
[Sat Aug 29 05:08:25.894078 2026] [security2:error] [pid 1028675:tid 1028911] [client 158.23.184.117:2802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/wp-includes/themes/uploads/config.php"] [unique_id "apK9qddHPfW2QFvhmL4GEwAAAGU"]
[Sat Aug 29 05:08:25.919308 2026] [security2:error] [pid 1028675:tid 1028823] [client 20.63.219.114:8889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/spip.php"] [unique_id "apK9qddHPfW2QFvhmL4GFQAAAA0"]
[Sat Aug 29 05:08:25.928128 2026] [security2:error] [pid 1034096:tid 1034269] [client 20.52.41.200:5337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/xda.php"] [unique_id "apK9qS04twRPFuquKD2pgQAAAJc"]
[Sat Aug 29 05:08:25.937567 2026] [fcgid:warn] [pid 1034096:tid 1034342] (70014)End of file found: [client 199.45.154.73:47324] mod_fcgid: can't get data from http client
[Sat Aug 29 05:08:25.941811 2026] [security2:error] [pid 1028675:tid 1028849] [client 213.209.159.223:49873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "apK9qddHPfW2QFvhmL4GFwAAACc"]
[Sat Aug 29 05:08:25.946322 2026] [security2:error] [pid 1034096:tid 1034303] [client 20.203.141.11:27294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK9qS04twRPFuquKD2phAAAALk"]
[Sat Aug 29 05:08:25.952421 2026] [security2:error] [pid 1028675:tid 1028814] [client 20.240.128.207:31041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/radio.php"] [unique_id "apK9qddHPfW2QFvhmL4GGAAAAAQ"]
[Sat Aug 29 05:08:25.975827 2026] [security2:error] [pid 1034096:tid 1034310] [client 4.205.62.107:6933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/cloud.php"] [unique_id "apK9qS04twRPFuquKD2piAAAAMA"]
[Sat Aug 29 05:08:25.982169 2026] [security2:error] [pid 1034096:tid 1034316] [client 114.119.155.223:29779] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "capturephoto.net"] [uri "/photocart/pc_access_gallery.php"] [unique_id "apK9qS04twRPFuquKD2piQAAAMY"], referer: http://capturephoto.net/photocart/index.php?viewFullSite=1
[Sat Aug 29 05:08:25.992197 2026] [security2:error] [pid 1034096:tid 1034285] [client 20.104.18.15:15319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/av.php"] [unique_id "apK9qS04twRPFuquKD2pigAAAKc"]
[Sat Aug 29 05:08:25.992566 2026] [security2:error] [pid 1028675:tid 1028774] [remote 34.139.86.26:36624] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ptstmobile.ztxcloud.com"] [uri "/wp/.env"] [unique_id "apK9qddHPfW2QFvhmL4GGgAAXV0"]
[Sat Aug 29 05:08:25.998248 2026] [security2:error] [pid 1034096:tid 1034355] [client 4.205.62.107:21579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/admin.php"] [unique_id "apK9qS04twRPFuquKD2piwAAAO0"]
[Sat Aug 29 05:08:26.004816 2026] [security2:error] [pid 1034096:tid 1034255] [client 20.104.18.15:16875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/one.php"] [unique_id "apK9qi04twRPFuquKD2pjAAAAIk"]
[Sat Aug 29 05:08:26.011589 2026] [security2:error] [pid 1028675:tid 1028742] [remote 34.139.86.26:36624] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ptstmobile.ztxcloud.com"] [uri "/storage/.env"] [unique_id "apK9qtdHPfW2QFvhmL4GGwAAOT0"]
[Sat Aug 29 05:08:26.016641 2026] [security2:error] [pid 1034096:tid 1034351] [client 20.104.18.15:14289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lunar-festival.com"] [uri "/reviall.php"] [unique_id "apK9qi04twRPFuquKD2pjQAAAOk"]
[Sat Aug 29 05:08:26.025831 2026] [security2:error] [pid 1034096:tid 1034321] [client 20.63.81.20:57923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/m.php"] [unique_id "apK9qi04twRPFuquKD2pjgAAAMs"]
[Sat Aug 29 05:08:26.030327 2026] [security2:error] [pid 1028675:tid 1028894] [client 20.104.18.15:39814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/file61.php"] [unique_id "apK9qtdHPfW2QFvhmL4GHAAAAFQ"]
[Sat Aug 29 05:08:26.031710 2026] [security2:error] [pid 1034096:tid 1034375] [client 20.104.18.15:12151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/wp-includes/index.php"] [unique_id "apK9qi04twRPFuquKD2pjwAAAQE"]
[Sat Aug 29 05:08:26.038325 2026] [security2:error] [pid 1034096:tid 1034302] [client 158.23.184.117:55665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/av.php"] [unique_id "apK9qi04twRPFuquKD2pkAAAALg"]
[Sat Aug 29 05:08:26.055534 2026] [security2:error] [pid 1034096:tid 1034265] [client 20.104.18.15:5029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/wefile.php"] [unique_id "apK9qi04twRPFuquKD2pkQAAAJM"]
[Sat Aug 29 05:08:26.058142 2026] [security2:error] [pid 1034096:tid 1034265] [client 20.104.18.15:18885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/wp-includes/index.php"] [unique_id "apK9qi04twRPFuquKD2pkgAAAJM"]
[Sat Aug 29 05:08:26.063715 2026] [security2:error] [pid 1034096:tid 1034260] [client 20.48.160.90:64233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/simple.php"] [unique_id "apK9qi04twRPFuquKD2pkwAAAI4"]
[Sat Aug 29 05:08:26.069716 2026] [security2:error] [pid 1034096:tid 1034344] [client 158.23.147.79:17526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK9qi04twRPFuquKD2plAAAAOI"]
[Sat Aug 29 05:08:26.071739 2026] [security2:error] [pid 1028675:tid 1028880] [client 4.205.62.107:24971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/grsiuk.php"] [unique_id "apK9qtdHPfW2QFvhmL4GHQAAAEY"]
[Sat Aug 29 05:08:26.074026 2026] [security2:error] [pid 1028675:tid 1028813] [client 20.197.61.180:14433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/wp-contentt.php"] [unique_id "apK9qtdHPfW2QFvhmL4GHwAAAAM"]
[Sat Aug 29 05:08:26.085933 2026] [security2:error] [pid 1028675:tid 1028819] [client 52.139.37.240:20918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/an.php"] [unique_id "apK9qtdHPfW2QFvhmL4GIAAAAAk"]
[Sat Aug 29 05:08:26.091341 2026] [security2:error] [pid 1028675:tid 1028751] [remote 34.139.86.26:36624] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "ptstmobile.ztxcloud.com"] [uri "/web/.env"] [unique_id "apK9qtdHPfW2QFvhmL4GIQAAQkY"]
[Sat Aug 29 05:08:26.106927 2026] [security2:error] [pid 1028675:tid 1028847] [client 20.100.175.163:29950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/abcd.php"] [unique_id "apK9qtdHPfW2QFvhmL4GIgAAACU"]
[Sat Aug 29 05:08:26.128603 2026] [security2:error] [pid 1028675:tid 1028837] [client 20.104.18.15:15300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/images.php"] [unique_id "apK9qtdHPfW2QFvhmL4GIwAAABs"]
[Sat Aug 29 05:08:26.130507 2026] [security2:error] [pid 1028675:tid 1028766] [remote 34.139.86.26:36624] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "ptstmobile.ztxcloud.com"] [uri "/wp-config.php~"] [unique_id "apK9qtdHPfW2QFvhmL4GJAAAYVU"]
[Sat Aug 29 05:08:26.133508 2026] [security2:error] [pid 1034096:tid 1034263] [client 20.104.18.15:45965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9qi04twRPFuquKD2plQAAAJE"]
[Sat Aug 29 05:08:26.136818 2026] [security2:error] [pid 1028675:tid 1028846] [client 20.104.18.15:25552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/503.php"] [unique_id "apK9qtdHPfW2QFvhmL4GJQAAACQ"]
[Sat Aug 29 05:08:26.155183 2026] [security2:error] [pid 1034096:tid 1034272] [client 20.63.81.20:62981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/fling.php"] [unique_id "apK9qi04twRPFuquKD2plgAAAJo"]
[Sat Aug 29 05:08:26.166483 2026] [security2:error] [pid 1034096:tid 1034328] [client 20.104.18.15:12285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/file31.php"] [unique_id "apK9qi04twRPFuquKD2plwAAANI"]
[Sat Aug 29 05:08:26.167963 2026] [security2:error] [pid 1028675:tid 1028702] [remote 34.139.86.26:36624] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "ptstmobile.ztxcloud.com"] [uri "/wp-config.old"] [unique_id "apK9qtdHPfW2QFvhmL4GJgAAaRU"]
[Sat Aug 29 05:08:26.171491 2026] [security2:error] [pid 1028675:tid 1028914] [client 20.63.219.114:15475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/config.php"] [unique_id "apK9qtdHPfW2QFvhmL4GJwAAAGg"]
[Sat Aug 29 05:08:26.178301 2026] [security2:error] [pid 1028675:tid 1028932] [client 20.104.18.15:39931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/copypaths.php"] [unique_id "apK9qtdHPfW2QFvhmL4GKAAAAHo"]
[Sat Aug 29 05:08:26.182501 2026] [security2:error] [pid 1034096:tid 1034271] [client 20.197.61.180:14405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/add_actualites.php"] [unique_id "apK9qi04twRPFuquKD2pmQAAAJk"]
[Sat Aug 29 05:08:26.207022 2026] [security2:error] [pid 1028675:tid 1028841] [client 20.104.18.15:5043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/blog.php"] [unique_id "apK9qtdHPfW2QFvhmL4GKQAAAB8"]
[Sat Aug 29 05:08:26.236668 2026] [security2:error] [pid 1034096:tid 1034251] [client 158.23.184.117:2909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/wp-includes/ID3/file.php"] [unique_id "apK9qi04twRPFuquKD2pmgAAAIU"]
[Sat Aug 29 05:08:26.264023 2026] [security2:error] [pid 1034096:tid 1034287] [client 20.104.18.15:19329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/file31.php"] [unique_id "apK9qi04twRPFuquKD2pnAAAAKk"]
[Sat Aug 29 05:08:26.269836 2026] [security2:error] [pid 1028675:tid 1028923] [client 20.104.18.15:25589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/504.php"] [unique_id "apK9qtdHPfW2QFvhmL4GKwAAAHE"]
[Sat Aug 29 05:08:26.273288 2026] [security2:error] [pid 1028675:tid 1028885] [client 20.48.160.90:65338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/xty.php"] [unique_id "apK9qtdHPfW2QFvhmL4GLAAAAEs"]
[Sat Aug 29 05:08:26.278118 2026] [security2:error] [pid 1028675:tid 1028851] [client 4.205.62.107:53285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/php_info.php"] [unique_id "apK9qtdHPfW2QFvhmL4GLQAAACk"]
[Sat Aug 29 05:08:26.283202 2026] [security2:error] [pid 1034096:tid 1034286] [client 20.63.219.114:16668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/backup.php"] [unique_id "apK9qi04twRPFuquKD2pnQAAAKg"]
[Sat Aug 29 05:08:26.285309 2026] [security2:error] [pid 1028675:tid 1028937] [client 52.139.37.240:20778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/asw.php"] [unique_id "apK9qtdHPfW2QFvhmL4GLgAAAH8"]
[Sat Aug 29 05:08:26.290121 2026] [security2:error] [pid 1034096:tid 1034348] [client 20.63.81.20:57024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/btyuio.php"] [unique_id "apK9qi04twRPFuquKD2pngAAAOY"]
[Sat Aug 29 05:08:26.300333 2026] [security2:error] [pid 1034096:tid 1034311] [client 20.104.18.15:15252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/ops.php"] [unique_id "apK9qi04twRPFuquKD2poAAAAME"]
[Sat Aug 29 05:08:26.301406 2026] [security2:error] [pid 1034096:tid 1034346] [client 158.23.147.79:35766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK9qi04twRPFuquKD2poQAAAOQ"]
[Sat Aug 29 05:08:26.315149 2026] [security2:error] [pid 1034096:tid 1034306] [client 91.92.47.191:46678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "corrigansbasement.com"] [uri "/config.php"] [unique_id "apK9qi04twRPFuquKD2pogAAALw"]
[Sat Aug 29 05:08:26.327057 2026] [security2:error] [pid 1028675:tid 1028909] [client 20.104.18.15:12136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/dk.php"] [unique_id "apK9qtdHPfW2QFvhmL4GMAAAAGM"]
[Sat Aug 29 05:08:26.328020 2026] [security2:error] [pid 1028675:tid 1028758] [remote 34.139.86.26:36624] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "ptstmobile.ztxcloud.com"] [uri "/wp-config.php.swp"] [unique_id "apK9qtdHPfW2QFvhmL4GMQAAQ00"]
[Sat Aug 29 05:08:26.334438 2026] [security2:error] [pid 1034096:tid 1034356] [client 20.104.18.15:39924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/bless6.php"] [unique_id "apK9qi04twRPFuquKD2powAAAO4"]
[Sat Aug 29 05:08:26.343755 2026] [security2:error] [pid 1034096:tid 1034304] [client 4.205.62.107:9209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/sgd.php"] [unique_id "apK9qi04twRPFuquKD2ppAAAALo"]
[Sat Aug 29 05:08:26.381653 2026] [security2:error] [pid 1028675:tid 1028835] [client 158.23.184.117:55668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sebrecords.mikeycunningham.com"] [uri "/wp-admin/css/fff.php"] [unique_id "apK9qtdHPfW2QFvhmL4GNAAAABk"]
[Sat Aug 29 05:08:26.383932 2026] [security2:error] [pid 1034096:tid 1034289] [client 20.52.41.200:5276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/theme.php"] [unique_id "apK9qi04twRPFuquKD2ppQAAAKs"]
[Sat Aug 29 05:08:26.398900 2026] [security2:error] [pid 1034096:tid 1034358] [client 20.104.18.15:16808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/admin.php"] [unique_id "apK9qi04twRPFuquKD2ppgAAAPA"]
[Sat Aug 29 05:08:26.410678 2026] [security2:error] [pid 1028675:tid 1028861] [client 20.203.141.11:2721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/css/index.php"] [unique_id "apK9qtdHPfW2QFvhmL4GNwAAADM"]
[Sat Aug 29 05:08:26.411891 2026] [security2:error] [pid 1034096:tid 1034299] [client 68.155.159.216:38667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK9qi04twRPFuquKD2pqAAAALU"]
[Sat Aug 29 05:08:26.417831 2026] [security2:error] [pid 1034096:tid 1034374] [client 20.104.18.15:4942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/wp-admin/js/wp-load.php"] [unique_id "apK9qi04twRPFuquKD2pqQAAAQA"]
[Sat Aug 29 05:08:26.424189 2026] [security2:error] [pid 1028675:tid 1028843] [client 20.104.18.15:18886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/dk.php"] [unique_id "apK9qtdHPfW2QFvhmL4GOQAAACE"]
[Sat Aug 29 05:08:26.450652 2026] [security2:error] [pid 1034096:tid 1034368] [client 158.23.147.79:11293] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.drabigailseaver.com"] [uri "/1.php"] [unique_id "apK9qi04twRPFuquKD2pqgAAAPo"]
[Sat Aug 29 05:08:26.450757 2026] [security2:error] [pid 1034096:tid 1034368] [client 158.23.147.79:11293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/1.php"] [unique_id "apK9qi04twRPFuquKD2pqgAAAPo"]
[Sat Aug 29 05:08:26.453373 2026] [security2:error] [pid 1028675:tid 1028857] [client 20.63.81.20:57932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/dehnl.php"] [unique_id "apK9qtdHPfW2QFvhmL4GOgAAAC8"]
[Sat Aug 29 05:08:26.458756 2026] [security2:error] [pid 1034096:tid 1034267] [client 20.48.160.90:65343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/sallu.php"] [unique_id "apK9qi04twRPFuquKD2pqwAAAJU"]
[Sat Aug 29 05:08:26.473298 2026] [security2:error] [pid 1034096:tid 1034269] [client 40.83.93.50:2047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-admin/user/f35.php"] [unique_id "apK9qi04twRPFuquKD2prAAAAJc"]
[Sat Aug 29 05:08:26.479837 2026] [security2:error] [pid 1034096:tid 1034258] [client 20.240.128.207:27554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/item.php"] [unique_id "apK9qi04twRPFuquKD2prQAAAIw"]
[Sat Aug 29 05:08:26.489667 2026] [security2:error] [pid 1034096:tid 1034342] [client 20.104.18.15:15301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/coffexium.php"] [unique_id "apK9qi04twRPFuquKD2prgAAAOA"]
[Sat Aug 29 05:08:26.493248 2026] [security2:error] [pid 1034096:tid 1034370] [client 20.104.18.15:39809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/special.php"] [unique_id "apK9qi04twRPFuquKD2prwAAAPw"]
[Sat Aug 29 05:08:26.499325 2026] [security2:error] [pid 1034096:tid 1034290] [client 52.139.37.240:21129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/item.php"] [unique_id "apK9qi04twRPFuquKD2psAAAAKw"]
[Sat Aug 29 05:08:26.508750 2026] [security2:error] [pid 1028675:tid 1028888] [client 158.23.147.79:6035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-content/cong.php"] [unique_id "apK9qtdHPfW2QFvhmL4GPwAAAE4"]
[Sat Aug 29 05:08:26.526736 2026] [security2:error] [pid 1028675:tid 1028863] [client 20.104.18.15:16834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/ws85.php"] [unique_id "apK9qtdHPfW2QFvhmL4GQQAAADU"]
[Sat Aug 29 05:08:26.527436 2026] [cgid:error] [pid 1034096:tid 1034150] [remote 84.250.151.86:39769] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/jasonsju/public_html/glamrus/404.shtml
[Sat Aug 29 05:08:26.533260 2026] [security2:error] [pid 1028675:tid 1028844] [client 20.104.18.15:12122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/ta.php"] [unique_id "apK9qtdHPfW2QFvhmL4GQgAAACI"]
[Sat Aug 29 05:08:26.575618 2026] [security2:error] [pid 1034096:tid 1034259] [client 20.63.219.114:18541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/22.php"] [unique_id "apK9qi04twRPFuquKD2psgAAAI0"]
[Sat Aug 29 05:08:26.593388 2026] [security2:error] [pid 1034096:tid 1034355] [client 20.63.81.20:57868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/zoo2.php"] [unique_id "apK9qi04twRPFuquKD2pswAAAO0"]
[Sat Aug 29 05:08:26.613586 2026] [security2:error] [pid 1034096:tid 1034351] [client 20.104.49.130:34511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/dk.php"] [unique_id "apK9qi04twRPFuquKD2ptAAAAOk"]
[Sat Aug 29 05:08:26.631223 2026] [security2:error] [pid 1034096:tid 1034375] [client 20.104.18.15:19362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/ta.php"] [unique_id "apK9qi04twRPFuquKD2ptQAAAQE"]
[Sat Aug 29 05:08:26.634939 2026] [security2:error] [pid 1028675:tid 1028823] [client 20.104.18.15:5038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/robot.php"] [unique_id "apK9qtdHPfW2QFvhmL4GQwAAAA0"]
[Sat Aug 29 05:08:26.639838 2026] [security2:error] [pid 1034096:tid 1034293] [client 20.104.18.15:39832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/fz.php"] [unique_id "apK9qi04twRPFuquKD2ptgAAAK8"]
[Sat Aug 29 05:08:26.643115 2026] [security2:error] [pid 1034096:tid 1034253] [client 20.63.219.114:16679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/haiterus.php"] [unique_id "apK9qi04twRPFuquKD2ptwAAAIc"]
[Sat Aug 29 05:08:26.648399 2026] [security2:error] [pid 1028675:tid 1028820] [client 158.23.147.79:6036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/file5.php"] [unique_id "apK9qtdHPfW2QFvhmL4GRAAAAAo"]
[Sat Aug 29 05:08:26.648418 2026] [security2:error] [pid 1034096:tid 1034302] [client 20.48.160.90:62104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/codex.php"] [unique_id "apK9qi04twRPFuquKD2puAAAALg"]
[Sat Aug 29 05:08:26.653968 2026] [security2:error] [pid 1028675:tid 1028849] [client 20.104.18.15:15299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/BDKR28WP.php"] [unique_id "apK9qtdHPfW2QFvhmL4GRQAAACc"]
[Sat Aug 29 05:08:26.656970 2026] [security2:error] [pid 1028675:tid 1028896] [client 20.104.18.15:16886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/ffs.php"] [unique_id "apK9qtdHPfW2QFvhmL4GRgAAAFY"]
[Sat Aug 29 05:08:26.664113 2026] [security2:error] [pid 1034096:tid 1034303] [client 20.100.175.163:1152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-access.php"] [unique_id "apK9qi04twRPFuquKD2puQAAALk"]
[Sat Aug 29 05:08:26.679537 2026] [security2:error] [pid 1034096:tid 1034367] [client 158.23.147.79:17558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/mah.php"] [unique_id "apK9qi04twRPFuquKD2pugAAAPk"]
[Sat Aug 29 05:08:26.692649 2026] [security2:error] [pid 1034096:tid 1034321] [client 52.139.37.240:20753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/jga.php"] [unique_id "apK9qi04twRPFuquKD2pvAAAAMs"]
[Sat Aug 29 05:08:26.696008 2026] [security2:error] [pid 1034096:tid 1034284] [client 158.23.147.79:53771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/.well-knownold/index.php"] [unique_id "apK9qi04twRPFuquKD2pvQAAAKY"]
[Sat Aug 29 05:08:26.702750 2026] [security2:error] [pid 1034096:tid 1034340] [client 20.104.18.15:12207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/bo.php"] [unique_id "apK9qi04twRPFuquKD2pvgAAAN4"]
[Sat Aug 29 05:08:26.725560 2026] [security2:error] [pid 1034096:tid 1034324] [client 20.63.81.20:57938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/zoo1.php"] [unique_id "apK9qi04twRPFuquKD2pwQAAAM4"]
[Sat Aug 29 05:08:26.730967 2026] [security2:error] [pid 1028675:tid 1028813] [client 158.23.147.79:26484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-admin/setup-config.php"] [unique_id "apK9qtdHPfW2QFvhmL4GRwAAAAM"]
[Sat Aug 29 05:08:26.777554 2026] [security2:error] [pid 1034096:tid 1034271] [client 20.104.18.15:19333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/bo.php"] [unique_id "apK9qi04twRPFuquKD2pwwAAAJk"]
[Sat Aug 29 05:08:26.789080 2026] [security2:error] [pid 1034096:tid 1034319] [client 20.104.18.15:25558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/nano.php"] [unique_id "apK9qi04twRPFuquKD2pxAAAAMk"]
[Sat Aug 29 05:08:26.791061 2026] [security2:error] [pid 1034096:tid 1034323] [client 20.48.160.90:65284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/5656.php"] [unique_id "apK9qi04twRPFuquKD2pxQAAAM0"]
[Sat Aug 29 05:08:26.796485 2026] [security2:error] [pid 1034096:tid 1034315] [client 20.104.18.15:15354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/sf.php"] [unique_id "apK9qi04twRPFuquKD2pxgAAAMU"]
[Sat Aug 29 05:08:26.807687 2026] [security2:error] [pid 1028675:tid 1028928] [client 20.104.18.15:39774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/clque.php"] [unique_id "apK9qtdHPfW2QFvhmL4GSQAAAHY"]
[Sat Aug 29 05:08:26.807729 2026] [security2:error] [pid 1028675:tid 1028825] [client 20.197.61.180:11771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/theme.php"] [unique_id "apK9qtdHPfW2QFvhmL4GSgAAAA8"]
[Sat Aug 29 05:08:26.827532 2026] [security2:error] [pid 1034096:tid 1034292] [client 20.52.41.200:5333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/classwithtostring.php"] [unique_id "apK9qi04twRPFuquKD2pxwAAAK4"]
[Sat Aug 29 05:08:26.839654 2026] [security2:error] [pid 1034096:tid 1034298] [client 213.209.159.223:29661] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/web/.env"] [unique_id "apK9qi04twRPFuquKD2pyAAAALQ"]
[Sat Aug 29 05:08:26.862866 2026] [security2:error] [pid 1034096:tid 1034251] [client 20.63.81.20:57902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/radio.php"] [unique_id "apK9qi04twRPFuquKD2pyQAAAIU"]
[Sat Aug 29 05:08:26.900047 2026] [security2:error] [pid 1034096:tid 1034277] [client 52.139.37.240:20870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/mac.php"] [unique_id "apK9qi04twRPFuquKD2pzQAAAJ8"]
[Sat Aug 29 05:08:26.905006 2026] [security2:error] [pid 1034096:tid 1034286] [client 20.104.49.130:57521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/users.php"] [unique_id "apK9qi04twRPFuquKD2pzwAAAKg"]
[Sat Aug 29 05:08:26.914183 2026] [security2:error] [pid 1028675:tid 1028903] [client 20.197.61.180:11756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/alfanew.php7"] [unique_id "apK9qtdHPfW2QFvhmL4GTQAAAF0"]
[Sat Aug 29 05:08:26.914814 2026] [security2:error] [pid 1034096:tid 1034263] [client 20.203.141.11:25060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-cron.php"] [unique_id "apK9qi04twRPFuquKD2p0QAAAJE"]
[Sat Aug 29 05:08:26.918565 2026] [security2:error] [pid 1028675:tid 1028846] [client 20.104.18.15:19350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/44.php"] [unique_id "apK9qtdHPfW2QFvhmL4GTgAAACQ"]
[Sat Aug 29 05:08:26.921544 2026] [security2:error] [pid 1028675:tid 1028916] [client 20.104.18.15:16841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/ano.php"] [unique_id "apK9qtdHPfW2QFvhmL4GTwAAAGo"]
[Sat Aug 29 05:08:26.931558 2026] [security2:error] [pid 1034096:tid 1034346] [client 4.205.62.107:51466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/bootstrap.php"] [unique_id "apK9qi04twRPFuquKD2p0gAAAOQ"]
[Sat Aug 29 05:08:26.935722 2026] [security2:error] [pid 1028675:tid 1028876] [client 20.63.219.114:8861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/bak.phps"] [unique_id "apK9qtdHPfW2QFvhmL4GUAAAAEI"]
[Sat Aug 29 05:08:26.952400 2026] [security2:error] [pid 1028675:tid 1028914] [client 20.104.18.15:39831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/nano.php"] [unique_id "apK9qtdHPfW2QFvhmL4GUgAAAGg"]
[Sat Aug 29 05:08:26.954885 2026] [security2:error] [pid 1034096:tid 1034373] [client 20.104.18.15:15316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/k.php"] [unique_id "apK9qi04twRPFuquKD2p1AAAAP8"]
[Sat Aug 29 05:08:26.960270 2026] [security2:error] [pid 1028675:tid 1028925] [client 40.83.93.50:19468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-admin/user/min.php"] [unique_id "apK9qtdHPfW2QFvhmL4GUwAAAHM"]
[Sat Aug 29 05:08:26.972485 2026] [security2:error] [pid 1034096:tid 1034304] [client 20.48.160.90:62206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/w3lls.php"] [unique_id "apK9qi04twRPFuquKD2p1gAAALo"]
[Sat Aug 29 05:08:26.978221 2026] [security2:error] [pid 1034096:tid 1034354] [client 213.209.159.223:29661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.159.209.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.greatdecisionsofcharlevoix.com"] [uri "/phpinfo.php3"] [unique_id "apK9qi04twRPFuquKD2p1wAAAOw"]
[Sat Aug 29 05:08:26.987333 2026] [security2:error] [pid 1028675:tid 1028932] [client 20.104.18.15:4937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/revo.php"] [unique_id "apK9qtdHPfW2QFvhmL4GVAAAAHo"]
[Sat Aug 29 05:08:26.991595 2026] [security2:error] [pid 1034096:tid 1034273] [client 20.63.81.20:57974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/one.php"] [unique_id "apK9qi04twRPFuquKD2p2AAAAJs"]
[Sat Aug 29 05:08:27.012903 2026] [security2:error] [pid 1028675:tid 1028828] [client 20.240.128.207:21030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/t.php"] [unique_id "apK9q9dHPfW2QFvhmL4GVQAAABI"]
[Sat Aug 29 05:08:27.029657 2026] [security2:error] [pid 1034096:tid 1034287] [client 20.63.219.114:1382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/go.php"] [unique_id "apK9qy04twRPFuquKD2p2QAAAKk"]
[Sat Aug 29 05:08:27.050395 2026] [security2:error] [pid 1034096:tid 1034299] [client 20.104.49.130:56236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.danesquality.com"] [uri "/ortasekerli1.php"] [unique_id "apK9qy04twRPFuquKD2p2gAAALU"]
[Sat Aug 29 05:08:27.056182 2026] [security2:error] [pid 1034096:tid 1034374] [client 20.104.18.15:16802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/mgrr.php"] [unique_id "apK9qy04twRPFuquKD2p2wAAAQA"]
[Sat Aug 29 05:08:27.057718 2026] [security2:error] [pid 1034096:tid 1034368] [client 158.23.147.79:50044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK9qy04twRPFuquKD2p3AAAAPo"]
[Sat Aug 29 05:08:27.088321 2026] [security2:error] [pid 1034096:tid 1034345] [client 20.104.18.15:12135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/44.php"] [unique_id "apK9qy04twRPFuquKD2p3QAAAOM"]
[Sat Aug 29 05:08:27.114651 2026] [security2:error] [pid 1034096:tid 1034342] [client 4.205.62.107:6974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/kerang.php"] [unique_id "apK9qy04twRPFuquKD2p3gAAAOA"]
[Sat Aug 29 05:08:27.114669 2026] [security2:error] [pid 1034096:tid 1034377] [client 20.104.18.15:15298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/82.php"] [unique_id "apK9qy04twRPFuquKD2p3wAAAQM"]
[Sat Aug 29 05:08:27.115162 2026] [security2:error] [pid 1034096:tid 1034278] [client 20.104.18.15:39872] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/\\\\.[a-z0-9]{4}\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "784"] [id "900080"] [msg "PHP Mailer Access Attempt"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/.mopj.php"] [unique_id "apK9qy04twRPFuquKD2p4AAAAKA"]
[Sat Aug 29 05:08:27.116328 2026] [security2:error] [pid 1034096:tid 1034290] [client 20.48.160.90:65311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/fpwch.php"] [unique_id "apK9qy04twRPFuquKD2p4QAAAKw"]
[Sat Aug 29 05:08:27.119762 2026] [security2:error] [pid 1034096:tid 1034358] [client 52.139.37.240:20742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK9qy04twRPFuquKD2p4gAAAPA"]
[Sat Aug 29 05:08:27.131101 2026] [security2:error] [pid 1034096:tid 1034325] [client 20.63.81.20:63029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/503.php"] [unique_id "apK9qy04twRPFuquKD2p4wAAAM8"]
[Sat Aug 29 05:08:27.136107 2026] [security2:error] [pid 1034096:tid 1034285] [client 20.104.18.15:18891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/h2.php"] [unique_id "apK9qy04twRPFuquKD2p5AAAAKc"]
[Sat Aug 29 05:08:27.136479 2026] [security2:error] [pid 1034096:tid 1034255] [client 103.240.76.112:42928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK9qy04twRPFuquKD2p5QAAAIk"]
[Sat Aug 29 05:08:27.136549 2026] [security2:error] [pid 1034096:tid 1034255] [client 103.240.76.112:42928] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK9qy04twRPFuquKD2p5QAAAIk"]
[Sat Aug 29 05:08:27.189426 2026] [security2:error] [pid 1034096:tid 1034265] [client 20.104.18.15:16819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/mac.php"] [unique_id "apK9qy04twRPFuquKD2p6AAAAJM"]
[Sat Aug 29 05:08:27.207885 2026] [security2:error] [pid 1028675:tid 1028833] [client 4.205.62.107:65423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/paypal.php"] [unique_id "apK9q9dHPfW2QFvhmL4GVwAAABc"]
[Sat Aug 29 05:08:27.209743 2026] [security2:error] [pid 1034096:tid 1034289] [client 20.100.175.163:29576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-content/uploads/min.php"] [unique_id "apK9qy04twRPFuquKD2p6QAAAKs"]
[Sat Aug 29 05:08:27.220426 2026] [security2:error] [pid 1034096:tid 1034270] [client 20.151.200.44:61515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9qy04twRPFuquKD2p6gAAAJg"]
[Sat Aug 29 05:08:27.227837 2026] [security2:error] [pid 1034096:tid 1034317] [client 4.205.62.107:62739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9qy04twRPFuquKD2p6wAAAMc"]
[Sat Aug 29 05:08:27.237837 2026] [security2:error] [pid 1034096:tid 1034352] [client 20.104.18.15:12107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/h2.php"] [unique_id "apK9qy04twRPFuquKD2p7AAAAOo"]
[Sat Aug 29 05:08:27.239409 2026] [security2:error] [pid 1034096:tid 1034301] [client 4.205.62.107:22053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/png.php"] [unique_id "apK9qy04twRPFuquKD2p7QAAALc"]
[Sat Aug 29 05:08:27.259432 2026] [security2:error] [pid 1034096:tid 1034329] [client 20.48.160.90:64138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/domvf.php"] [unique_id "apK9qy04twRPFuquKD2p7gAAANM"]
[Sat Aug 29 05:08:27.261778 2026] [security2:error] [pid 1034096:tid 1034328] [client 20.104.18.15:39844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/bengi.php"] [unique_id "apK9qy04twRPFuquKD2p7wAAANI"]
[Sat Aug 29 05:08:27.267282 2026] [security2:error] [pid 1034096:tid 1034252] [client 20.104.18.15:15239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/dex.php"] [unique_id "apK9qy04twRPFuquKD2p8QAAAIY"]
[Sat Aug 29 05:08:27.268425 2026] [security2:error] [pid 1028675:tid 1028892] [client 20.63.81.20:57927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/504.php"] [unique_id "apK9q9dHPfW2QFvhmL4GWAAAAFI"]
[Sat Aug 29 05:08:27.287952 2026] [security2:error] [pid 1034096:tid 1034292] [client 20.104.18.15:19357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/wp-content/mod/adminfuns.php"] [unique_id "apK9qy04twRPFuquKD2p9AAAAK4"]
[Sat Aug 29 05:08:27.288546 2026] [security2:error] [pid 1034096:tid 1034259] [client 20.52.41.200:5255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/news.php"] [unique_id "apK9qy04twRPFuquKD2p9QAAAI0"]
[Sat Aug 29 05:08:27.300928 2026] [security2:error] [pid 1034096:tid 1034293] [client 20.63.219.114:8866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/install.php"] [unique_id "apK9qy04twRPFuquKD2p-AAAAK8"]
[Sat Aug 29 05:08:27.313489 2026] [security2:error] [pid 1034096:tid 1034324] [client 52.139.37.240:20877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK9qy04twRPFuquKD2p-QAAAM4"]
[Sat Aug 29 05:08:27.319110 2026] [security2:error] [pid 1028675:tid 1028860] [client 20.104.18.15:25561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/simple.php"] [unique_id "apK9q9dHPfW2QFvhmL4GWQAAADI"]
[Sat Aug 29 05:08:27.322169 2026] [security2:error] [pid 1028675:tid 1028886] [client 20.48.250.41:19451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9q9dHPfW2QFvhmL4GWgAAAEw"]
[Sat Aug 29 05:08:27.372579 2026] [security2:error] [pid 1028675:tid 1028862] [client 20.104.18.15:12184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/wp-content/mod/adminfuns.php"] [unique_id "apK9q9dHPfW2QFvhmL4GXAAAADQ"]
[Sat Aug 29 05:08:27.375299 2026] [security2:error] [pid 1034096:tid 1034309] [client 20.104.18.15:46027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9qy04twRPFuquKD2p-wAAAL8"]
[Sat Aug 29 05:08:27.379413 2026] [security2:error] [pid 1034096:tid 1034284] [client 20.203.141.11:2711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-block.php"] [unique_id "apK9qy04twRPFuquKD2p_AAAAKY"]
[Sat Aug 29 05:08:27.391662 2026] [security2:error] [pid 1034096:tid 1034327] [client 20.63.219.114:1083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/gecko-new.php"] [unique_id "apK9qy04twRPFuquKD2p_QAAANE"]
[Sat Aug 29 05:08:27.406586 2026] [security2:error] [pid 1034096:tid 1034282] [client 20.104.49.130:39100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/Jcrop.php"] [unique_id "apK9qy04twRPFuquKD2p_wAAAKQ"]
[Sat Aug 29 05:08:27.408806 2026] [security2:error] [pid 1034096:tid 1034280] [client 158.23.147.79:35229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK9qy04twRPFuquKD2qAAAAAKI"]
[Sat Aug 29 05:08:27.411144 2026] [security2:error] [pid 1028675:tid 1028811] [client 20.63.81.20:63092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/admin.php"] [unique_id "apK9q9dHPfW2QFvhmL4GXwAAAAE"]
[Sat Aug 29 05:08:27.413065 2026] [security2:error] [pid 1034096:tid 1034354] [client 20.104.18.15:39918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/file2.php"] [unique_id "apK9qy04twRPFuquKD2qAgAAAOw"]
[Sat Aug 29 05:08:27.416248 2026] [security2:error] [pid 1028675:tid 1028839] [client 4.205.62.107:53129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/session.php"] [unique_id "apK9q9dHPfW2QFvhmL4GYAAAAB0"]
[Sat Aug 29 05:08:27.421878 2026] [security2:error] [pid 1034096:tid 1034318] [client 158.23.147.79:32706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/ans.php"] [unique_id "apK9qy04twRPFuquKD2qBAAAAMg"]
[Sat Aug 29 05:08:27.424413 2026] [security2:error] [pid 1028675:tid 1028888] [client 20.104.18.15:15245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/inso.php"] [unique_id "apK9q9dHPfW2QFvhmL4GYQAAAE4"]
[Sat Aug 29 05:08:27.439214 2026] [security2:error] [pid 1028675:tid 1028815] [client 40.83.93.50:19497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-admin/users.php"] [unique_id "apK9q9dHPfW2QFvhmL4GYgAAAAU"]
[Sat Aug 29 05:08:27.442003 2026] [security2:error] [pid 1028675:tid 1028835] [client 192.185.176.170:41106] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "mihpmovewell.mihp.net"] [uri "/wp-login.php"] [unique_id "apK9q9dHPfW2QFvhmL4GWwAAGRg"], referer: https://mihpmovewell.mihp.net/wp-login.php
[Sat Aug 29 05:08:27.444852 2026] [security2:error] [pid 1034096:tid 1034373] [client 192.185.176.170:41116] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "mihpmovewell.mihp.net"] [uri "/wp-login.php"] [unique_id "apK9qy04twRPFuquKD2p-gAA_x4"], referer: https://mihpmovewell.mihp.net/wp-login.php
[Sat Aug 29 05:08:27.449573 2026] [security2:error] [pid 1034096:tid 1034348] [client 20.104.18.15:16772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/xty.php"] [unique_id "apK9qy04twRPFuquKD2qBwAAAOY"]
[Sat Aug 29 05:08:27.456835 2026] [security2:error] [pid 1034096:tid 1034368] [client 57.141.14.24:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/page/25/"] [unique_id "apK9qy04twRPFuquKD2qCAAAAPo"]
[Sat Aug 29 05:08:27.460949 2026] [security2:error] [pid 1028675:tid 1028848] [client 20.48.160.90:63237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/biufile.php"] [unique_id "apK9q9dHPfW2QFvhmL4GYwAAACY"]
[Sat Aug 29 05:08:27.468441 2026] [security2:error] [pid 1034096:tid 1034345] [client 20.48.250.41:49367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9qy04twRPFuquKD2qCQAAAOM"]
[Sat Aug 29 05:08:27.495982 2026] [security2:error] [pid 1034096:tid 1034337] [client 20.104.18.15:19443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/sao.php"] [unique_id "apK9qy04twRPFuquKD2qCgAAANs"]
[Sat Aug 29 05:08:27.508416 2026] [security2:error] [pid 1034096:tid 1034260] [client 20.104.18.15:5093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/birrs.php"] [unique_id "apK9qy04twRPFuquKD2qCwAAAI4"]
[Sat Aug 29 05:08:27.515283 2026] [security2:error] [pid 1034096:tid 1034274] [client 20.240.128.207:24742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/i.php"] [unique_id "apK9qy04twRPFuquKD2qDAAAAJw"]
[Sat Aug 29 05:08:27.519333 2026] [security2:error] [pid 1028675:tid 1028908] [client 52.139.37.240:20784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/zafir1.php"] [unique_id "apK9q9dHPfW2QFvhmL4GZAAAAGI"]
[Sat Aug 29 05:08:27.550252 2026] [security2:error] [pid 1034096:tid 1034276] [client 20.197.61.180:11717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/alumni_reg.php"] [unique_id "apK9qy04twRPFuquKD2qDQAAAJ4"]
[Sat Aug 29 05:08:27.554531 2026] [security2:error] [pid 1034096:tid 1034316] [client 20.63.81.20:56996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/ws85.php"] [unique_id "apK9qy04twRPFuquKD2qDgAAAMY"]
[Sat Aug 29 05:08:27.559667 2026] [security2:error] [pid 1028675:tid 1028887] [client 20.151.200.44:23566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9q9dHPfW2QFvhmL4GZQAAAE0"]
[Sat Aug 29 05:08:27.560585 2026] [security2:error] [pid 1034096:tid 1034285] [client 20.104.18.15:15339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/aa.php"] [unique_id "apK9qy04twRPFuquKD2qDwAAAKc"]
[Sat Aug 29 05:08:27.565323 2026] [security2:error] [pid 1028675:tid 1028858] [client 20.104.18.15:39901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/gm.php"] [unique_id "apK9q9dHPfW2QFvhmL4GZgAAADA"]
[Sat Aug 29 05:08:27.569372 2026] [security2:error] [pid 1028675:tid 1028873] [client 158.23.147.79:11429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/ws.php"] [unique_id "apK9q9dHPfW2QFvhmL4GZwAAAD8"]
[Sat Aug 29 05:08:27.580444 2026] [security2:error] [pid 1028675:tid 1028855] [client 20.104.18.15:16822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/sallu.php"] [unique_id "apK9q9dHPfW2QFvhmL4GaAAAAC0"]
[Sat Aug 29 05:08:27.592120 2026] [security2:error] [pid 1028675:tid 1028820] [client 20.104.18.15:12104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/sao.php"] [unique_id "apK9q9dHPfW2QFvhmL4GaQAAAAo"]
[Sat Aug 29 05:08:27.595442 2026] [security2:error] [pid 1028675:tid 1028896] [client 20.48.160.90:65377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/blacks.php"] [unique_id "apK9q9dHPfW2QFvhmL4GagAAAFY"]
[Sat Aug 29 05:08:27.608415 2026] [security2:error] [pid 1034096:tid 1034253] [client 20.48.250.41:19396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/ff1.php"] [unique_id "apK9qy04twRPFuquKD2qEgAAAIc"]
[Sat Aug 29 05:08:27.613435 2026] [security2:error] [pid 1028675:tid 1028821] [client 158.23.147.79:5961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK9q9dHPfW2QFvhmL4GawAAAAs"]
[Sat Aug 29 05:08:27.617691 2026] [security2:error] [pid 1034096:tid 1034302] [client 4.205.62.107:9191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/gecko-litespeed.php"] [unique_id "apK9qy04twRPFuquKD2qEwAAALg"]
[Sat Aug 29 05:08:27.656982 2026] [security2:error] [pid 1028675:tid 1028866] [client 20.197.61.180:11725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/xmlrpc.php0"] [unique_id "apK9q9dHPfW2QFvhmL4GbAAAADg"]
[Sat Aug 29 05:08:27.675194 2026] [security2:error] [pid 1034096:tid 1034365] [client 20.104.18.15:4928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/sss.php"] [unique_id "apK9qy04twRPFuquKD2qFAAAAPc"]
[Sat Aug 29 05:08:27.691548 2026] [security2:error] [pid 1034096:tid 1034289] [client 20.104.18.15:19338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/dapa.php"] [unique_id "apK9qy04twRPFuquKD2qFQAAAKs"]
[Sat Aug 29 05:08:27.693716 2026] [security2:error] [pid 1034096:tid 1034270] [client 20.63.81.20:63030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/ffs.php"] [unique_id "apK9qy04twRPFuquKD2qFgAAAJg"]
[Sat Aug 29 05:08:27.693985 2026] [security2:error] [pid 1034096:tid 1034340] [client 20.104.18.15:15253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/img.php"] [unique_id "apK9qy04twRPFuquKD2qFwAAAN4"]
[Sat Aug 29 05:08:27.703697 2026] [security2:error] [pid 1034096:tid 1034310] [client 20.100.175.163:8794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK9qy04twRPFuquKD2qGAAAAMA"]
[Sat Aug 29 05:08:27.707654 2026] [security2:error] [pid 1034096:tid 1034358] [client 20.63.219.114:8840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/colour.php"] [unique_id "apK9qy04twRPFuquKD2qGQAAAPA"]
[Sat Aug 29 05:08:27.713742 2026] [security2:error] [pid 1034096:tid 1034352] [client 20.104.18.15:16888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/codex.php"] [unique_id "apK9qy04twRPFuquKD2qGgAAAOo"]
[Sat Aug 29 05:08:27.713907 2026] [security2:error] [pid 1034096:tid 1034303] [client 52.139.37.240:20874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/abc.php"] [unique_id "apK9qy04twRPFuquKD2qGwAAALk"]
[Sat Aug 29 05:08:27.729826 2026] [security2:error] [pid 1034096:tid 1034296] [client 20.104.18.15:12162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/dapa.php"] [unique_id "apK9qy04twRPFuquKD2qHAAAALI"]
[Sat Aug 29 05:08:27.737430 2026] [security2:error] [pid 1034096:tid 1034301] [client 20.104.18.15:39935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/ws55.php"] [unique_id "apK9qy04twRPFuquKD2qHQAAALc"]
[Sat Aug 29 05:08:27.739894 2026] [security2:error] [pid 1028675:tid 1028928] [client 20.48.250.41:49394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/t.php"] [unique_id "apK9q9dHPfW2QFvhmL4GbQAAAHY"]
[Sat Aug 29 05:08:27.746329 2026] [security2:error] [pid 1028675:tid 1028849] [client 20.52.41.200:4561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/about/function.php"] [unique_id "apK9q9dHPfW2QFvhmL4GbgAAACc"]
[Sat Aug 29 05:08:27.757902 2026] [security2:error] [pid 1034096:tid 1034329] [client 158.23.147.79:6080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/file88.php"] [unique_id "apK9qy04twRPFuquKD2qHwAAANM"]
[Sat Aug 29 05:08:27.773066 2026] [security2:error] [pid 1034096:tid 1034323] [client 40.83.93.50:18919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/post.php"] [unique_id "apK9qy04twRPFuquKD2qIgAAAM0"]
[Sat Aug 29 05:08:27.787902 2026] [security2:error] [pid 1028675:tid 1028816] [client 158.23.147.79:17600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-blog-header.php"] [unique_id "apK9q9dHPfW2QFvhmL4GbwAAAAY"]
[Sat Aug 29 05:08:27.787922 2026] [security2:error] [pid 1028675:tid 1028847] [client 158.23.147.79:17553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/asd.php"] [unique_id "apK9q9dHPfW2QFvhmL4GcAAAACU"]
[Sat Aug 29 05:08:27.791134 2026] [security2:error] [pid 1034096:tid 1034300] [client 20.48.160.90:64223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/beck.php"] [unique_id "apK9qy04twRPFuquKD2qJAAAALY"]
[Sat Aug 29 05:08:27.795896 2026] [security2:error] [pid 1034096:tid 1034360] [client 20.63.219.114:18520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/wp-admin.php"] [unique_id "apK9qy04twRPFuquKD2qJQAAAPI"]
[Sat Aug 29 05:08:27.801490 2026] [security2:error] [pid 1034096:tid 1034293] [client 158.23.147.79:61596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK9qy04twRPFuquKD2qJgAAAK8"]
[Sat Aug 29 05:08:27.836582 2026] [security2:error] [pid 1034096:tid 1034298] [client 103.168.67.159:53080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 159.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "naturalkneads.com"] [uri "/wordpress/index.php"] [unique_id "apK9qy04twRPFuquKD2qKQAAALQ"], referer: https://naturalkneads.com/wordpress/wp-admin/
[Sat Aug 29 05:08:27.840091 2026] [security2:error] [pid 1034096:tid 1034350] [client 20.104.49.130:60768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/ty.php"] [unique_id "apK9qy04twRPFuquKD2qKgAAAOg"]
[Sat Aug 29 05:08:27.841017 2026] [security2:error] [pid 1034096:tid 1034277] [client 20.104.18.15:15340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/222.php"] [unique_id "apK9qy04twRPFuquKD2qKwAAAJ8"]
[Sat Aug 29 05:08:27.844431 2026] [security2:error] [pid 1034096:tid 1034308] [client 20.203.141.11:2080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-includes/fonts/admin.php"] [unique_id "apK9qy04twRPFuquKD2qLAAAAL4"]
[Sat Aug 29 05:08:27.847167 2026] [security2:error] [pid 1028675:tid 1028916] [client 20.104.18.15:16778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/5656.php"] [unique_id "apK9q9dHPfW2QFvhmL4GcgAAAGo"]
[Sat Aug 29 05:08:27.857738 2026] [security2:error] [pid 1034096:tid 1034309] [client 20.63.81.20:63087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/nano.php"] [unique_id "apK9qy04twRPFuquKD2qLQAAAL8"]
[Sat Aug 29 05:08:27.869588 2026] [security2:error] [pid 1034096:tid 1034304] [client 158.23.147.79:26505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK9qy04twRPFuquKD2qLwAAALo"]
[Sat Aug 29 05:08:27.869917 2026] [security2:error] [pid 1034096:tid 1034282] [client 20.104.18.15:39811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/m.php"] [unique_id "apK9qy04twRPFuquKD2qMAAAAKQ"]
[Sat Aug 29 05:08:27.882496 2026] [security2:error] [pid 1034096:tid 1034283] [client 20.48.250.41:49348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/erty.php"] [unique_id "apK9qy04twRPFuquKD2qMQAAAKU"]
[Sat Aug 29 05:08:27.883074 2026] [security2:error] [pid 1028675:tid 1028876] [client 20.104.18.15:12244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/wp-content/l.php"] [unique_id "apK9q9dHPfW2QFvhmL4GcwAAAEI"]
[Sat Aug 29 05:08:27.902851 2026] [security2:error] [pid 1034096:tid 1034287] [client 20.104.18.15:19414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/wp-content/l.php"] [unique_id "apK9qy04twRPFuquKD2qMgAAAKk"]
[Sat Aug 29 05:08:27.910950 2026] [security2:error] [pid 1034096:tid 1034263] [client 52.139.37.240:21411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/c1.php"] [unique_id "apK9qy04twRPFuquKD2qMwAAAJE"]
[Sat Aug 29 05:08:27.925928 2026] [security2:error] [pid 1034096:tid 1034320] [client 40.83.93.50:9374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-admin/wp-cron.php"] [unique_id "apK9qy04twRPFuquKD2qNAAAAMo"]
[Sat Aug 29 05:08:27.933928 2026] [security2:error] [pid 1028675:tid 1028902] [client 20.151.200.44:61521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/baee.php"] [unique_id "apK9q9dHPfW2QFvhmL4GdgAAAFw"]
[Sat Aug 29 05:08:27.964846 2026] [security2:error] [pid 1034096:tid 1034345] [client 20.104.18.15:5105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/wp-includes/ID3/moon.php"] [unique_id "apK9qy04twRPFuquKD2qNgAAAOM"]
[Sat Aug 29 05:08:27.968568 2026] [security2:error] [pid 1034096:tid 1034297] [client 20.104.49.130:47862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/echkm.php"] [unique_id "apK9qy04twRPFuquKD2qNwAAALM"]
[Sat Aug 29 05:08:27.974382 2026] [security2:error] [pid 1034096:tid 1034342] [client 20.104.18.15:16773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/w3lls.php"] [unique_id "apK9qy04twRPFuquKD2qOAAAAOA"]
[Sat Aug 29 05:08:27.983112 2026] [security2:error] [pid 1028675:tid 1028841] [client 20.48.160.90:64220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/t3.php"] [unique_id "apK9q9dHPfW2QFvhmL4GdwAAAB8"]
[Sat Aug 29 05:08:27.986674 2026] [security2:error] [pid 1034096:tid 1034371] [client 20.104.49.130:43779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/bthil.php"] [unique_id "apK9qy04twRPFuquKD2qOQAAAP0"]
[Sat Aug 29 05:08:27.987578 2026] [security2:error] [pid 1034096:tid 1034290] [client 20.63.81.20:63028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/ano.php"] [unique_id "apK9qy04twRPFuquKD2qOgAAAKw"]
[Sat Aug 29 05:08:28.006336 2026] [security2:error] [pid 1028675:tid 1028929] [client 20.104.18.15:15328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/key.php"] [unique_id "apK9rNdHPfW2QFvhmL4GeAAAAHc"]
[Sat Aug 29 05:08:28.014743 2026] [security2:error] [pid 1034096:tid 1034311] [client 20.240.128.207:27167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/deepseek_d.php"] [unique_id "apK9rC04twRPFuquKD2qOwAAAME"]
[Sat Aug 29 05:08:28.020591 2026] [security2:error] [pid 1034096:tid 1034316] [client 20.104.18.15:39828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/33.php"] [unique_id "apK9rC04twRPFuquKD2qPAAAAMY"]
[Sat Aug 29 05:08:28.032167 2026] [security2:error] [pid 1034096:tid 1034285] [client 20.104.18.15:12119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/wp-admin/w.php"] [unique_id "apK9rC04twRPFuquKD2qPQAAAKc"]
[Sat Aug 29 05:08:28.035418 2026] [security2:error] [pid 1034096:tid 1034351] [client 20.104.18.15:19381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/wp-admin/w.php"] [unique_id "apK9rC04twRPFuquKD2qPgAAAOk"]
[Sat Aug 29 05:08:28.066455 2026] [security2:error] [pid 1034096:tid 1034275] [client 4.205.62.107:58422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/wo.php"] [unique_id "apK9rC04twRPFuquKD2qPwAAAJ0"]
[Sat Aug 29 05:08:28.086814 2026] [security2:error] [pid 1028675:tid 1028851] [client 20.48.250.41:49387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/0x.php"] [unique_id "apK9rNdHPfW2QFvhmL4GegAAACk"]
[Sat Aug 29 05:08:28.092371 2026] [http2:warn] [pid 1017536:tid 1017714] [client 57.141.14.73:47554] h2_stream(1017536-369-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:08:28.093205 2026] [security2:error] [pid 1034096:tid 1034265] [client 20.104.18.15:5086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/xmini4.php"] [unique_id "apK9rC04twRPFuquKD2qQAAAAJM"]
[Sat Aug 29 05:08:28.095337 2026] [security2:error] [pid 1034096:tid 1034335] [client 20.63.219.114:18502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/OK.php"] [unique_id "apK9rC04twRPFuquKD2qQQAAANk"]
[Sat Aug 29 05:08:28.102640 2026] [security2:error] [pid 1034096:tid 1034264] [client 20.104.18.15:25577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/fpwch.php"] [unique_id "apK9rC04twRPFuquKD2qQgAAAJI"]
[Sat Aug 29 05:08:28.103902 2026] [security2:error] [pid 1034096:tid 1034272] [client 52.139.37.240:20885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/index.php/feed/atom/"] [unique_id "apK9rC04twRPFuquKD2qQwAAAJo"]
[Sat Aug 29 05:08:28.116095 2026] [security2:error] [pid 1028675:tid 1028937] [client 20.104.49.130:52481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.carlosmua.com"] [uri "/ortasekerli1.php"] [unique_id "apK9rNdHPfW2QFvhmL4GewAAAH8"]
[Sat Aug 29 05:08:28.123692 2026] [security2:error] [pid 1034096:tid 1034289] [client 20.104.18.15:43287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9rC04twRPFuquKD2qRAAAAKs"]
[Sat Aug 29 05:08:28.134606 2026] [security2:error] [pid 1028675:tid 1028832] [client 20.63.81.20:63038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/mgrr.php"] [unique_id "apK9rNdHPfW2QFvhmL4GfAAAABY"]
[Sat Aug 29 05:08:28.156655 2026] [security2:error] [pid 1034096:tid 1034352] [client 20.104.18.15:15309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/chosen.php"] [unique_id "apK9rC04twRPFuquKD2qRgAAAOo"]
[Sat Aug 29 05:08:28.182508 2026] [security2:error] [pid 1034096:tid 1034329] [client 20.104.18.15:19385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/wp-content/k.php"] [unique_id "apK9rC04twRPFuquKD2qRwAAANM"]
[Sat Aug 29 05:08:28.190060 2026] [security2:error] [pid 1028675:tid 1028909] [client 20.104.18.15:39745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/packed.php"] [unique_id "apK9rNdHPfW2QFvhmL4GgQAAAGM"]
[Sat Aug 29 05:08:28.192757 2026] [security2:error] [pid 1034096:tid 1034307] [client 20.63.219.114:10473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/wp-configs.php"] [unique_id "apK9rC04twRPFuquKD2qSAAAAL0"]
[Sat Aug 29 05:08:28.194942 2026] [security2:error] [pid 1028675:tid 1028877] [client 20.104.18.15:12036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/wp-content/k.php"] [unique_id "apK9rNdHPfW2QFvhmL4GhQAAAEM"]
[Sat Aug 29 05:08:28.216287 2026] [security2:error] [pid 1028675:tid 1028860] [client 158.23.147.79:49837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/themes.php"] [unique_id "apK9rNdHPfW2QFvhmL4GhgAAADI"]
[Sat Aug 29 05:08:28.216371 2026] [security2:error] [pid 1028675:tid 1028886] [client 20.48.160.90:63271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/wp.php"] [unique_id "apK9rNdHPfW2QFvhmL4GhwAAAEw"]
[Sat Aug 29 05:08:28.217487 2026] [security2:error] [pid 1034096:tid 1034357] [client 20.100.175.163:8792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/bthil.php"] [unique_id "apK9rC04twRPFuquKD2qSQAAAO8"]
[Sat Aug 29 05:08:28.218721 2026] [security2:error] [pid 1034096:tid 1034315] [client 20.48.250.41:49294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/66.php"] [unique_id "apK9rC04twRPFuquKD2qSgAAAMU"]
[Sat Aug 29 05:08:28.228602 2026] [security2:error] [pid 1028675:tid 1028879] [client 20.104.18.15:16821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/domvf.php"] [unique_id "apK9rNdHPfW2QFvhmL4GiAAAAEU"]
[Sat Aug 29 05:08:28.232046 2026] [security2:error] [pid 1034096:tid 1034317] [client 20.104.18.15:5107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/gulu.php"] [unique_id "apK9rC04twRPFuquKD2qTAAAAMc"]
[Sat Aug 29 05:08:28.241963 2026] [security2:error] [pid 1028675:tid 1028901] [client 20.151.200.44:62988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/d12.php"] [unique_id "apK9rNdHPfW2QFvhmL4GigAAAFs"]
[Sat Aug 29 05:08:28.248510 2026] [access_compat:error] [pid 1028675:tid 1028857] [client 57.141.14.62:0] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/shop
[Sat Aug 29 05:08:28.262823 2026] [security2:error] [pid 1028675:tid 1028835] [client 20.63.81.20:57870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/mac.php"] [unique_id "apK9rNdHPfW2QFvhmL4GjQAAABk"]
[Sat Aug 29 05:08:28.265560 2026] [security2:error] [pid 1034096:tid 1034273] [client 20.197.61.180:11730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/colors.php"] [unique_id "apK9rC04twRPFuquKD2qTgAAAJs"]
[Sat Aug 29 05:08:28.271775 2026] [security2:error] [pid 1028675:tid 1028863] [client 20.104.18.15:43970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9rNdHPfW2QFvhmL4GjgAAADU"]
[Sat Aug 29 05:08:28.295098 2026] [security2:error] [pid 1034096:tid 1034358] [client 20.203.141.11:2752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/m.php"] [unique_id "apK9rC04twRPFuquKD2qTwAAAPA"]
[Sat Aug 29 05:08:28.296077 2026] [security2:error] [pid 1028675:tid 1028861] [client 52.139.37.240:20869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/root.php"] [unique_id "apK9rNdHPfW2QFvhmL4GjwAAADM"]
[Sat Aug 29 05:08:28.319137 2026] [security2:error] [pid 1034096:tid 1034251] [client 4.205.62.107:6498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/rem.php"] [unique_id "apK9rC04twRPFuquKD2qUAAAAIU"]
[Sat Aug 29 05:08:28.345608 2026] [security2:error] [pid 1034096:tid 1034298] [client 4.205.62.107:24983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/userfuns.php"] [unique_id "apK9rC04twRPFuquKD2qUQAAALQ"]
[Sat Aug 29 05:08:28.348083 2026] [security2:error] [pid 1028675:tid 1028935] [client 20.52.41.200:5269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-includes/admin.php"] [unique_id "apK9rNdHPfW2QFvhmL4GkAAAAH0"]
[Sat Aug 29 05:08:28.366048 2026] [security2:error] [pid 1034096:tid 1034340] [client 20.197.61.180:8412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/content.php"] [unique_id "apK9rC04twRPFuquKD2qUgAAAN4"]
[Sat Aug 29 05:08:28.367061 2026] [security2:error] [pid 1028675:tid 1028911] [client 4.205.62.107:62912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9rNdHPfW2QFvhmL4GkQAAAGU"]
[Sat Aug 29 05:08:28.378675 2026] [security2:error] [pid 1028675:tid 1028855] [client 20.48.250.41:49402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/f35.php"] [unique_id "apK9rNdHPfW2QFvhmL4GkgAAAC0"]
[Sat Aug 29 05:08:28.384168 2026] [security2:error] [pid 1028675:tid 1028898] [client 40.83.93.50:18938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/flower.php"] [unique_id "apK9rNdHPfW2QFvhmL4GkwAAAFg"]
[Sat Aug 29 05:08:28.389765 2026] [security2:error] [pid 1034096:tid 1034309] [client 20.48.160.90:65329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/abcd.php"] [unique_id "apK9rC04twRPFuquKD2qUwAAAL8"]
[Sat Aug 29 05:08:28.392717 2026] [security2:error] [pid 1034096:tid 1034284] [client 4.205.62.107:21585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/chosen.php"] [unique_id "apK9rC04twRPFuquKD2qVAAAAKY"]
[Sat Aug 29 05:08:28.393676 2026] [security2:error] [pid 1028675:tid 1028682] [remote 74.7.227.154:37794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK9rNdHPfW2QFvhmL4GlAAADQI"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwp-easycart%2Fadmin%2Felementor
[Sat Aug 29 05:08:28.397398 2026] [security2:error] [pid 1034096:tid 1034262] [client 40.83.93.50:19469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-admin/wp-links-opml.php"] [unique_id "apK9rC04twRPFuquKD2qVQAAAJA"]
[Sat Aug 29 05:08:28.398627 2026] [security2:error] [pid 1028675:tid 1028820] [client 114.119.136.146:37249] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.classiclightingusa.com"] [uri "/catalog/product_info.php/cPath/1/products_id/733/osCsid/62b9885a43393f72c80b6cb47ad61a3d"] [unique_id "apK9rNdHPfW2QFvhmL4GlQAAAAo"], referer: http://www.classiclightingusa.com/catalog/product_info.php/products_id/733/osCsid/62b9885a43393f72c80b6cb47ad61a3d
[Sat Aug 29 05:08:28.454493 2026] [security2:error] [pid 1034096:tid 1034287] [client 20.63.81.20:57977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/simple.php"] [unique_id "apK9rC04twRPFuquKD2qWAAAAKk"]
[Sat Aug 29 05:08:28.490848 2026] [security2:error] [pid 1034096:tid 1034372] [client 40.83.93.50:4094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/post.php"] [unique_id "apK9rC04twRPFuquKD2qWgAAAP4"]
[Sat Aug 29 05:08:28.491908 2026] [security2:error] [pid 1034096:tid 1034304] [client 52.139.37.240:20796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/shell.php"] [unique_id "apK9rC04twRPFuquKD2qWwAAALo"]
[Sat Aug 29 05:08:28.495349 2026] [security2:error] [pid 1034096:tid 1034346] [client 20.63.219.114:10461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bctcoffee.com"] [uri "/aaa.php"] [unique_id "apK9rC04twRPFuquKD2qXAAAAOQ"]
[Sat Aug 29 05:08:28.524072 2026] [security2:error] [pid 1028675:tid 1028866] [client 20.48.160.90:64227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/nofile.php"] [unique_id "apK9rNdHPfW2QFvhmL4GmgAAADg"]
[Sat Aug 29 05:08:28.524490 2026] [security2:error] [pid 1034096:tid 1034320] [client 158.23.147.79:32683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/worksec.php"] [unique_id "apK9rC04twRPFuquKD2qXwAAAMo"]
[Sat Aug 29 05:08:28.540539 2026] [security2:error] [pid 1034096:tid 1034319] [client 20.48.250.41:49300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/wen.php"] [unique_id "apK9rC04twRPFuquKD2qYgAAAMk"]
[Sat Aug 29 05:08:28.545512 2026] [security2:error] [pid 1028675:tid 1028928] [client 158.23.147.79:35670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK9rNdHPfW2QFvhmL4GnAAAAHY"]
[Sat Aug 29 05:08:28.553649 2026] [security2:error] [pid 1028675:tid 1028849] [client 4.205.62.107:53252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/h.php"] [unique_id "apK9rNdHPfW2QFvhmL4GnQAAACc"]
[Sat Aug 29 05:08:28.556870 2026] [security2:error] [pid 1028675:tid 1028825] [client 20.151.200.44:62999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/yyy.php"] [unique_id "apK9rNdHPfW2QFvhmL4GngAAAA8"]
[Sat Aug 29 05:08:28.577342 2026] [security2:error] [pid 1028675:tid 1028816] [client 20.104.49.130:48533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/echkm.php"] [unique_id "apK9rNdHPfW2QFvhmL4GoAAAAAY"]
[Sat Aug 29 05:08:28.580632 2026] [security2:error] [pid 1034096:tid 1034283] [client 20.63.219.114:12553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/essexec.php"] [unique_id "apK9rC04twRPFuquKD2qZQAAAKU"]
[Sat Aug 29 05:08:28.618061 2026] [security2:error] [pid 1034096:tid 1034342] [client 20.63.81.20:57861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/xty.php"] [unique_id "apK9rC04twRPFuquKD2qZgAAAOA"]
[Sat Aug 29 05:08:28.648874 2026] [security2:error] [pid 1028675:tid 1028925] [client 158.23.184.117:53703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/wk/admin.php"] [unique_id "apK9rNdHPfW2QFvhmL4GogAAAHM"]
[Sat Aug 29 05:08:28.680886 2026] [security2:error] [pid 1034096:tid 1034311] [client 20.48.250.41:49307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/inc.php"] [unique_id "apK9rC04twRPFuquKD2qZwAAAME"]
[Sat Aug 29 05:08:28.684709 2026] [security2:error] [pid 1034096:tid 1034278] [client 52.139.37.240:21143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK9rC04twRPFuquKD2qaAAAAKA"]
[Sat Aug 29 05:08:28.698910 2026] [security2:error] [pid 1028675:tid 1028812] [client 91.92.47.191:42850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "corrigansbasement.com"] [uri "/configuration.php"] [unique_id "apK9rNdHPfW2QFvhmL4GowAAAAI"]
[Sat Aug 29 05:08:28.700944 2026] [security2:error] [pid 1028675:tid 1028929] [client 20.48.160.90:62115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/run.php"] [unique_id "apK9rNdHPfW2QFvhmL4GpAAAAHc"]
[Sat Aug 29 05:08:28.702637 2026] [core:error] [pid 1034096:tid 1034362] [client 20.100.175.163:1175] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:28.702652 2026] [core:error] [pid 1034096:tid 1034362] [client 20.100.175.163:1175] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:28.705112 2026] [security2:error] [pid 1034096:tid 1034286] [client 20.240.128.207:9178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "apK9rC04twRPFuquKD2qagAAAKg"]
[Sat Aug 29 05:08:28.774009 2026] [security2:error] [pid 1034096:tid 1034296] [client 20.63.81.20:57042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/sallu.php"] [unique_id "apK9rC04twRPFuquKD2qbgAAALI"]
[Sat Aug 29 05:08:28.776279 2026] [security2:error] [pid 1028675:tid 1028683] [remote 34.139.86.26:36624] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "ptstmobile.ztxcloud.com"] [uri "/static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ"] [unique_id "apK9rNdHPfW2QFvhmL4GqgAAfwM"]
[Sat Aug 29 05:08:28.791152 2026] [security2:error] [pid 1028675:tid 1028851] [client 158.23.184.117:64524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/admin.php"] [unique_id "apK9rNdHPfW2QFvhmL4GqwAAACk"]
[Sat Aug 29 05:08:28.800671 2026] [security2:error] [pid 1034096:tid 1034307] [client 4.205.62.107:53376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/motu.php"] [unique_id "apK9rC04twRPFuquKD2qcAAAAL0"]
[Sat Aug 29 05:08:28.804632 2026] [security2:error] [pid 1034096:tid 1034337] [client 20.203.141.11:2081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "apK9rC04twRPFuquKD2qawAAANs"]
[Sat Aug 29 05:08:28.831261 2026] [security2:error] [pid 1034096:tid 1034268] [client 103.171.189.88:61978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9rC04twRPFuquKD2qcQAAAJY"]
[Sat Aug 29 05:08:28.831370 2026] [security2:error] [pid 1034096:tid 1034268] [client 103.171.189.88:61978] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9rC04twRPFuquKD2qcQAAAJY"]
[Sat Aug 29 05:08:28.834708 2026] [security2:error] [pid 1034096:tid 1034351] [client 34.81.157.26:8660] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/aws-credentials.json"] [unique_id "apK9rC04twRPFuquKD2qcwAAAOk"]
[Sat Aug 29 05:08:28.841789 2026] [security2:error] [pid 1034096:tid 1034321] [client 34.81.157.26:8762] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/firebase-admin.json"] [unique_id "apK9rC04twRPFuquKD2qdgAAAMs"]
[Sat Aug 29 05:08:28.844853 2026] [security2:error] [pid 1034096:tid 1034253] [client 34.81.157.26:8708] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/cgi-sys/404.html"] [unique_id "apK9rC04twRPFuquKD2qdwAAAIc"]
[Sat Aug 29 05:08:28.845879 2026] [security2:error] [pid 1034096:tid 1034275] [client 34.81.157.26:8746] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/cgi-sys/404.html"] [unique_id "apK9rC04twRPFuquKD2qeQAAAJ0"]
[Sat Aug 29 05:08:28.848979 2026] [security2:error] [pid 1034096:tid 1034302] [client 34.81.157.26:8690] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/cgi-sys/404.html"] [unique_id "apK9rC04twRPFuquKD2qfQAAALg"]
[Sat Aug 29 05:08:28.853734 2026] [security2:error] [pid 1034096:tid 1034323] [client 20.48.250.41:49324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/6bcwiqwj.php"] [unique_id "apK9rC04twRPFuquKD2qfgAAAM0"]
[Sat Aug 29 05:08:28.860485 2026] [security2:error] [pid 1034096:tid 1034291] [client 34.81.157.26:8772] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/api-keys.json"] [unique_id "apK9rC04twRPFuquKD2qgAAAAK0"]
[Sat Aug 29 05:08:28.862117 2026] [security2:error] [pid 1034096:tid 1034293] [client 158.23.147.79:5994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/NewFile.php/"] [unique_id "apK9rC04twRPFuquKD2qgQAAAK8"]
[Sat Aug 29 05:08:28.862214 2026] [security2:error] [pid 1034096:tid 1034265] [client 34.81.157.26:8780] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/cgi-sys/404.html"] [unique_id "apK9rC04twRPFuquKD2qfwAAAJM"]
[Sat Aug 29 05:08:28.864738 2026] [security2:error] [pid 1034096:tid 1034289] [client 40.83.93.50:9360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-admin/wp-load.php"] [unique_id "apK9rC04twRPFuquKD2qggAAAKs"]
[Sat Aug 29 05:08:28.864756 2026] [security2:error] [pid 1034096:tid 1034335] [client 40.83.93.50:18884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/meta.php"] [unique_id "apK9rC04twRPFuquKD2qgwAAANk"]
[Sat Aug 29 05:08:28.880424 2026] [security2:error] [pid 1034096:tid 1034376] [client 52.139.37.240:21133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/wp-content/plugins/linkpreview/il.php"] [unique_id "apK9rC04twRPFuquKD2qhAAAAQI"]
[Sat Aug 29 05:08:28.900267 2026] [security2:error] [pid 1034096:tid 1034314] [client 20.63.81.20:63086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/codex.php"] [unique_id "apK9rC04twRPFuquKD2qhwAAAMQ"]
[Sat Aug 29 05:08:28.901999 2026] [security2:error] [pid 1028675:tid 1028892] [client 158.23.147.79:17582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK9rNdHPfW2QFvhmL4GswAAAFI"]
[Sat Aug 29 05:08:28.909479 2026] [security2:error] [pid 1028675:tid 1028793] [remote 74.7.227.154:37794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK9rNdHPfW2QFvhmL4GtAAAR3A"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwp-easycart%2Fadmin%2Felementor
[Sat Aug 29 05:08:28.917675 2026] [security2:error] [pid 1028675:tid 1028860] [client 20.48.160.90:64178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/new.php"] [unique_id "apK9rNdHPfW2QFvhmL4GtQAAADI"]
[Sat Aug 29 05:08:28.921114 2026] [security2:error] [pid 1028675:tid 1028886] [client 158.23.147.79:53812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK9rNdHPfW2QFvhmL4GtgAAAEw"]
[Sat Aug 29 05:08:28.932200 2026] [security2:error] [pid 1028675:tid 1028877] [client 158.23.184.117:38278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/goods.php"] [unique_id "apK9rNdHPfW2QFvhmL4GuAAAAEM"]
[Sat Aug 29 05:08:28.942417 2026] [security2:error] [pid 1034096:tid 1034357] [client 20.63.219.114:16670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/hello.php"] [unique_id "apK9rC04twRPFuquKD2qjAAAAO8"]
[Sat Aug 29 05:08:28.962231 2026] [security2:error] [pid 1028675:tid 1028879] [client 20.52.41.200:5266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/lock360.php"] [unique_id "apK9rNdHPfW2QFvhmL4GvgAAAEU"]
[Sat Aug 29 05:08:28.980570 2026] [security2:error] [pid 1034096:tid 1034295] [client 40.83.93.50:14596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/flower.php"] [unique_id "apK9rC04twRPFuquKD2qjgAAALE"]
[Sat Aug 29 05:08:28.991883 2026] [security2:error] [pid 1034096:tid 1034361] [client 20.48.250.41:49288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/easy.php"] [unique_id "apK9rC04twRPFuquKD2qkAAAAPM"]
[Sat Aug 29 05:08:29.007832 2026] [security2:error] [pid 1034096:tid 1034287] [client 158.23.147.79:17411] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "kaletainc.com"] [uri "/1.php"] [unique_id "apK9rS04twRPFuquKD2qkQAAAKk"]
[Sat Aug 29 05:08:29.007963 2026] [security2:error] [pid 1034096:tid 1034287] [client 158.23.147.79:17411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/1.php"] [unique_id "apK9rS04twRPFuquKD2qkQAAAKk"]
[Sat Aug 29 05:08:29.031695 2026] [security2:error] [pid 1034096:tid 1034374] [client 20.63.81.20:57892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/5656.php"] [unique_id "apK9rS04twRPFuquKD2qkgAAAQA"]
[Sat Aug 29 05:08:29.068455 2026] [security2:error] [pid 1034096:tid 1034269] [client 20.48.160.90:65367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/inx.php"] [unique_id "apK9rS04twRPFuquKD2qkwAAAJc"]
[Sat Aug 29 05:08:29.075675 2026] [security2:error] [pid 1034096:tid 1034320] [client 158.23.184.117:38292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/w.php"] [unique_id "apK9rS04twRPFuquKD2qlAAAAMo"]
[Sat Aug 29 05:08:29.075675 2026] [security2:error] [pid 1028675:tid 1028839] [client 52.139.37.240:21152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/wp-header-json.php"] [unique_id "apK9rddHPfW2QFvhmL4GwAAAAB0"]
[Sat Aug 29 05:08:29.116640 2026] [security2:error] [pid 1034096:tid 1034339] [client 20.197.61.180:1222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/Js.php"] [unique_id "apK9rS04twRPFuquKD2qlQAAAN0"]
[Sat Aug 29 05:08:29.124069 2026] [security2:error] [pid 1028675:tid 1028909] [client 60.243.207.176:54550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK9rddHPfW2QFvhmL4GwQAAAGM"]
[Sat Aug 29 05:08:29.124131 2026] [security2:error] [pid 1028675:tid 1028909] [client 60.243.207.176:54550] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK9rddHPfW2QFvhmL4GwQAAAGM"]
[Sat Aug 29 05:08:29.128159 2026] [security2:error] [pid 1034096:tid 1034330] [client 20.197.61.180:8398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/wxo.php"] [unique_id "apK9rS04twRPFuquKD2qlgAAANQ"]
[Sat Aug 29 05:08:29.131941 2026] [security2:error] [pid 1034096:tid 1034276] [client 20.48.250.41:19417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/fresh3.php"] [unique_id "apK9rS04twRPFuquKD2qlwAAAJ4"]
[Sat Aug 29 05:08:29.146143 2026] [security2:error] [pid 1034096:tid 1034299] [client 20.104.49.130:30032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/amax.php"] [unique_id "apK9rS04twRPFuquKD2qmAAAALU"]
[Sat Aug 29 05:08:29.176176 2026] [security2:error] [pid 1034096:tid 1034362] [client 20.63.81.20:62989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/w3lls.php"] [unique_id "apK9rS04twRPFuquKD2qmwAAAPQ"]
[Sat Aug 29 05:08:29.207139 2026] [security2:error] [pid 1034096:tid 1034272] [client 4.205.62.107:58378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/xza.php"] [unique_id "apK9rS04twRPFuquKD2qnAAAAJo"]
[Sat Aug 29 05:08:29.216142 2026] [security2:error] [pid 1028675:tid 1028904] [client 20.100.175.163:29572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/cv.php"] [unique_id "apK9rddHPfW2QFvhmL4GwwAAAF4"]
[Sat Aug 29 05:08:29.220012 2026] [security2:error] [pid 1028675:tid 1028887] [client 158.23.184.117:38300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/new.php"] [unique_id "apK9rddHPfW2QFvhmL4GxAAAAE0"]
[Sat Aug 29 05:08:29.240133 2026] [security2:error] [pid 1034096:tid 1034353] [client 20.48.160.90:65335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/vpn.php"] [unique_id "apK9rS04twRPFuquKD2qnQAAAOs"]
[Sat Aug 29 05:08:29.269294 2026] [security2:error] [pid 1028675:tid 1028833] [client 20.48.250.41:19418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/bgymj.php"] [unique_id "apK9rddHPfW2QFvhmL4GxQAAABc"]
[Sat Aug 29 05:08:29.270011 2026] [security2:error] [pid 1034096:tid 1034286] [client 52.139.37.240:21156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/zup.php"] [unique_id "apK9rS04twRPFuquKD2qnwAAAKg"]
[Sat Aug 29 05:08:29.277392 2026] [security2:error] [pid 1034096:tid 1034342] [client 20.203.141.11:38496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/222.php"] [unique_id "apK9rS04twRPFuquKD2qoAAAAOA"]
[Sat Aug 29 05:08:29.303191 2026] [security2:error] [pid 1034096:tid 1034325] [client 20.63.81.20:63047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/fpwch.php"] [unique_id "apK9rS04twRPFuquKD2qpQAAAM8"]
[Sat Aug 29 05:08:29.317018 2026] [security2:error] [pid 1034096:tid 1034253] [client 158.158.54.35:1839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/.trash7206/index.php"] [unique_id "apK9rS04twRPFuquKD2qpwAAAIc"]
[Sat Aug 29 05:08:29.334447 2026] [security2:error] [pid 1028675:tid 1028896] [client 158.23.147.79:49853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-mail.php"] [unique_id "apK9rddHPfW2QFvhmL4GxgAAAFY"]
[Sat Aug 29 05:08:29.337586 2026] [security2:error] [pid 1034096:tid 1034355] [client 40.83.93.50:1872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-admin/wp-mail.php"] [unique_id "apK9rS04twRPFuquKD2qqgAAAO0"]
[Sat Aug 29 05:08:29.346819 2026] [security2:error] [pid 1028675:tid 1028858] [client 40.83.93.50:18937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/randkeyword.php"] [unique_id "apK9rddHPfW2QFvhmL4GxwAAADA"]
[Sat Aug 29 05:08:29.365013 2026] [security2:error] [pid 1028675:tid 1028894] [client 20.240.128.207:7372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-content/themes/pridmag/il.php"] [unique_id "apK9rddHPfW2QFvhmL4GyAAAAFQ"]
[Sat Aug 29 05:08:29.365014 2026] [security2:error] [pid 1034096:tid 1034275] [client 158.23.184.117:53747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/php8.php"] [unique_id "apK9rS04twRPFuquKD2qrAAAAJ0"]
[Sat Aug 29 05:08:29.383782 2026] [security2:error] [pid 1034096:tid 1034289] [client 20.48.160.90:65319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/shiny.php"] [unique_id "apK9rS04twRPFuquKD2qrwAAAKs"]
[Sat Aug 29 05:08:29.413243 2026] [security2:error] [pid 1034096:tid 1034252] [client 20.52.41.200:5347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-conflg.php"] [unique_id "apK9rS04twRPFuquKD2qsgAAAIY"]
[Sat Aug 29 05:08:29.442417 2026] [security2:error] [pid 1034096:tid 1034375] [client 20.63.219.114:16680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/fi2.php"] [unique_id "apK9rS04twRPFuquKD2qtQAAAQE"]
[Sat Aug 29 05:08:29.447603 2026] [security2:error] [pid 1034096:tid 1034327] [client 20.48.250.41:49310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/ws69.php"] [unique_id "apK9rS04twRPFuquKD2qtgAAANE"]
[Sat Aug 29 05:08:29.461963 2026] [security2:error] [pid 1034096:tid 1034361] [client 4.205.62.107:6954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/min.php"] [unique_id "apK9rS04twRPFuquKD2quAAAAPM"]
[Sat Aug 29 05:08:29.466120 2026] [security2:error] [pid 1028675:tid 1028784] [remote 34.139.86.26:58244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.86.139.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ztxcloud.com"] [uri "/ptstmobile/w_api/Handler.php"] [unique_id "apK9rddHPfW2QFvhmL4GygAACWc"], referer: https://ptstmobile.ztxcloud.com/appsettings.json
[Sat Aug 29 05:08:29.466824 2026] [security2:error] [pid 1034096:tid 1034367] [client 52.139.37.240:20481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/a9.php"] [unique_id "apK9rS04twRPFuquKD2qugAAAPk"]
[Sat Aug 29 05:08:29.472555 2026] [security2:error] [pid 1034096:tid 1034309] [client 20.63.81.20:57910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/domvf.php"] [unique_id "apK9rS04twRPFuquKD2quwAAAL8"]
[Sat Aug 29 05:08:29.477165 2026] [security2:error] [pid 1028675:tid 1028898] [client 40.83.93.50:4053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/meta.php"] [unique_id "apK9rddHPfW2QFvhmL4GywAAAFg"]
[Sat Aug 29 05:08:29.485181 2026] [security2:error] [pid 1034096:tid 1034346] [client 4.205.62.107:25934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/mamzi.php"] [unique_id "apK9rS04twRPFuquKD2qwAAAAOQ"]
[Sat Aug 29 05:08:29.507651 2026] [security2:error] [pid 1034096:tid 1034295] [client 158.23.184.117:53706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/wp-content/themes/admin.php"] [unique_id "apK9rS04twRPFuquKD2qwwAAALE"]
[Sat Aug 29 05:08:29.519033 2026] [security2:error] [pid 1034096:tid 1034259] [client 4.205.62.107:62761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/cloud.php"] [unique_id "apK9rS04twRPFuquKD2qxAAAAI0"]
[Sat Aug 29 05:08:29.523587 2026] [security2:error] [pid 1034096:tid 1034368] [client 20.104.104.62:25052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fasikafresno.oncesocial.com"] [uri "/wp-content/index.php"] [unique_id "apK9rS04twRPFuquKD2qxgAAAPo"]
[Sat Aug 29 05:08:29.525943 2026] [security2:error] [pid 1034096:tid 1034350] [client 20.48.160.90:62201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/goods.php"] [unique_id "apK9rS04twRPFuquKD2qxwAAAOg"]
[Sat Aug 29 05:08:29.541771 2026] [security2:error] [pid 1028675:tid 1028816] [client 4.205.62.107:22518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/admin-ajax.php"] [unique_id "apK9rddHPfW2QFvhmL4GzAAAAAY"]
[Sat Aug 29 05:08:29.578537 2026] [security2:error] [pid 1028675:tid 1028791] [remote 34.139.86.26:58244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.86.139.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ztxcloud.com"] [uri "/ptstmobile/w_api/Handler.php"] [unique_id "apK9rddHPfW2QFvhmL4GzQAAdG4"], referer: https://ptstmobile.ztxcloud.com/appsettings.Development.json
[Sat Aug 29 05:08:29.578592 2026] [security2:error] [pid 1028675:tid 1028768] [remote 34.139.86.26:58244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.86.139.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ztxcloud.com"] [uri "/ptstmobile/w_api/Handler.php"] [unique_id "apK9rddHPfW2QFvhmL4GzgAAdFc"], referer: https://ptstmobile.ztxcloud.com/local.settings.json
[Sat Aug 29 05:08:29.578955 2026] [security2:error] [pid 1028675:tid 1028805] [remote 34.139.86.26:58244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.86.139.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ztxcloud.com"] [uri "/ptstmobile/w_api/Handler.php"] [unique_id "apK9rddHPfW2QFvhmL4GzwAAdHw"], referer: https://ptstmobile.ztxcloud.com/appsettings.Production.json
[Sat Aug 29 05:08:29.614190 2026] [security2:error] [pid 1028675:tid 1028916] [client 20.63.81.20:57946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/biufile.php"] [unique_id "apK9rddHPfW2QFvhmL4G0QAAAGo"]
[Sat Aug 29 05:08:29.615824 2026] [security2:error] [pid 1034096:tid 1034175] [remote 34.139.86.26:40016] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "ptstmobile.ztxcloud.com"] [uri "/web.config"] [unique_id "apK9rS04twRPFuquKD2qzgAAlDU"]
[Sat Aug 29 05:08:29.619047 2026] [security2:error] [pid 1034096:tid 1034362] [client 20.48.250.41:19402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/ccs.php"] [unique_id "apK9rS04twRPFuquKD2qzwAAAPQ"]
[Sat Aug 29 05:08:29.629532 2026] [security2:error] [pid 1034096:tid 1034264] [client 158.23.147.79:32619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/x.php"] [unique_id "apK9rS04twRPFuquKD2q0AAAAJI"]
[Sat Aug 29 05:08:29.650278 2026] [security2:error] [pid 1034096:tid 1034278] [client 158.23.184.117:53723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/txets.php"] [unique_id "apK9rS04twRPFuquKD2q0gAAAKA"]
[Sat Aug 29 05:08:29.653934 2026] [security2:error] [pid 1028675:tid 1028932] [client 158.23.147.79:35759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/packed.php"] [unique_id "apK9rddHPfW2QFvhmL4G0wAAAHo"]
[Sat Aug 29 05:08:29.658407 2026] [security2:error] [pid 1034096:tid 1034317] [client 149.34.210.141:17186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9rS04twRPFuquKD2q1AAAAMc"]
[Sat Aug 29 05:08:29.658525 2026] [security2:error] [pid 1034096:tid 1034317] [client 149.34.210.141:17186] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9rS04twRPFuquKD2q1AAAAMc"]
[Sat Aug 29 05:08:29.677145 2026] [security2:error] [pid 1034096:tid 1034328] [client 20.48.160.90:64222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/alfa.php"] [unique_id "apK9rS04twRPFuquKD2q1wAAANI"]
[Sat Aug 29 05:08:29.689797 2026] [security2:error] [pid 1028675:tid 1028847] [client 52.139.37.240:20770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/admin/index.php"] [unique_id "apK9rddHPfW2QFvhmL4G1AAAACU"]
[Sat Aug 29 05:08:29.692238 2026] [security2:error] [pid 1034096:tid 1034320] [client 20.100.175.163:48208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-content/packed.php"] [unique_id "apK9rS04twRPFuquKD2q2QAAAMo"]
[Sat Aug 29 05:08:29.694327 2026] [security2:error] [pid 1034096:tid 1034342] [client 4.205.62.107:56055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/bootstrap.php"] [unique_id "apK9rS04twRPFuquKD2q2gAAAOA"]
[Sat Aug 29 05:08:29.725740 2026] [security2:error] [pid 1034096:tid 1034255] [client 158.23.147.79:6118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK9rS04twRPFuquKD2q3gAAAIk"]
[Sat Aug 29 05:08:29.732862 2026] [security2:error] [pid 1034096:tid 1034274] [client 20.203.141.11:12557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/mini.php"] [unique_id "apK9rS04twRPFuquKD2q3wAAAJw"]
[Sat Aug 29 05:08:29.757465 2026] [security2:error] [pid 1028675:tid 1028923] [client 20.63.81.20:63091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/blacks.php"] [unique_id "apK9rddHPfW2QFvhmL4G1gAAAHE"]
[Sat Aug 29 05:08:29.789080 2026] [security2:error] [pid 1028675:tid 1028922] [client 20.104.104.62:24764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fasikafresno.oncesocial.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "apK9rddHPfW2QFvhmL4G2AAAAHA"]
[Sat Aug 29 05:08:29.793286 2026] [security2:error] [pid 1034096:tid 1034323] [client 158.23.184.117:53758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/adminfuns.php"] [unique_id "apK9rS04twRPFuquKD2q4AAAAM0"]
[Sat Aug 29 05:08:29.799402 2026] [security2:error] [pid 1034096:tid 1034307] [client 20.63.219.114:15892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/1p.php"] [unique_id "apK9rS04twRPFuquKD2q4gAAAL0"]
[Sat Aug 29 05:08:29.802224 2026] [security2:error] [pid 1028675:tid 1028937] [client 20.48.250.41:19415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/mar.php"] [unique_id "apK9rddHPfW2QFvhmL4G2gAAAH8"]
[Sat Aug 29 05:08:29.804404 2026] [fcgid:warn] [pid 1034096:tid 1034289] (70014)End of file found: [client 167.94.146.54:56886] mod_fcgid: can't get data from http client
[Sat Aug 29 05:08:29.805022 2026] [security2:error] [pid 1028675:tid 1028914] [client 158.158.54.35:31622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wk/index.php"] [unique_id "apK9rddHPfW2QFvhmL4G2wAAAGg"]
[Sat Aug 29 05:08:29.805510 2026] [security2:error] [pid 1034096:tid 1034352] [client 40.83.93.50:9386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-admin/wp-settings.php"] [unique_id "apK9rS04twRPFuquKD2q5AAAAOo"]
[Sat Aug 29 05:08:29.818850 2026] [security2:error] [pid 1034096:tid 1034258] [client 20.48.160.90:64183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/33.php"] [unique_id "apK9rS04twRPFuquKD2q5wAAAIw"]
[Sat Aug 29 05:08:29.830134 2026] [security2:error] [pid 1034096:tid 1034296] [client 40.83.93.50:11954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/goods.php"] [unique_id "apK9rS04twRPFuquKD2q6AAAALI"]
[Sat Aug 29 05:08:29.835436 2026] [security2:error] [pid 1034096:tid 1034276] [client 20.197.61.180:1425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/access.php"] [unique_id "apK9rS04twRPFuquKD2q6gAAAJ4"]
[Sat Aug 29 05:08:29.854058 2026] [security2:error] [pid 1034096:tid 1034286] [client 20.240.128.207:7421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/assets/images/doc.php"] [unique_id "apK9rS04twRPFuquKD2q6wAAAKg"]
[Sat Aug 29 05:08:29.858091 2026] [security2:error] [pid 1028675:tid 1028903] [client 20.197.61.180:14415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/as.php"] [unique_id "apK9rddHPfW2QFvhmL4G3AAAAF0"]
[Sat Aug 29 05:08:29.870582 2026] [security2:error] [pid 1034096:tid 1034344] [client 20.52.41.200:4577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/123.php"] [unique_id "apK9rS04twRPFuquKD2q7gAAAOI"]
[Sat Aug 29 05:08:29.884076 2026] [security2:error] [pid 1034096:tid 1034252] [client 52.139.37.240:20899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/makeasmtp.php"] [unique_id "apK9rS04twRPFuquKD2q8AAAAIY"]
[Sat Aug 29 05:08:29.903245 2026] [security2:error] [pid 1034096:tid 1034356] [client 20.63.81.20:62985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/beck.php"] [unique_id "apK9rS04twRPFuquKD2q8QAAAO4"]
[Sat Aug 29 05:08:29.937559 2026] [security2:error] [pid 1034096:tid 1034306] [client 158.23.184.117:53710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/403.php"] [unique_id "apK9rS04twRPFuquKD2q8gAAALw"]
[Sat Aug 29 05:08:29.954013 2026] [security2:error] [pid 1034096:tid 1034324] [client 202.71.25.11:54262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.25.71.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK9rS04twRPFuquKD2q9QAAAM4"]
[Sat Aug 29 05:08:29.954116 2026] [security2:error] [pid 1034096:tid 1034324] [client 202.71.25.11:54262] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK9rS04twRPFuquKD2q9QAAAM4"]
[Sat Aug 29 05:08:29.969874 2026] [security2:error] [pid 1034096:tid 1034373] [client 158.23.147.79:6110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/dropdown.php"] [unique_id "apK9rS04twRPFuquKD2q-AAAAP8"]
[Sat Aug 29 05:08:29.979463 2026] [security2:error] [pid 1034096:tid 1034358] [client 20.104.104.62:43131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9rS04twRPFuquKD2q-gAAAPA"]
[Sat Aug 29 05:08:29.992597 2026] [security2:error] [pid 1028675:tid 1028927] [client 40.83.93.50:12488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/randkeyword.php"] [unique_id "apK9rddHPfW2QFvhmL4G3gAAAHU"]
[Sat Aug 29 05:08:29.997207 2026] [security2:error] [pid 1034096:tid 1034378] [client 20.48.250.41:49356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/ccu.php"] [unique_id "apK9rS04twRPFuquKD2q_AAAAQQ"]
[Sat Aug 29 05:08:30.001325 2026] [security2:error] [pid 1034096:tid 1034283] [client 20.48.160.90:62185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/133.php"] [unique_id "apK9ri04twRPFuquKD2q_QAAAKU"]
[Sat Aug 29 05:08:30.015147 2026] [security2:error] [pid 1034096:tid 1034310] [client 20.48.250.41:33894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9ri04twRPFuquKD2q_gAAAMA"]
[Sat Aug 29 05:08:30.029282 2026] [security2:error] [pid 1034096:tid 1034299] [client 158.23.147.79:59888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/images/index.php"] [unique_id "apK9ri04twRPFuquKD2q_wAAALU"]
[Sat Aug 29 05:08:30.044371 2026] [security2:error] [pid 1034096:tid 1034317] [client 20.63.81.20:57031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/t3.php"] [unique_id "apK9ri04twRPFuquKD2rAQAAAMc"]
[Sat Aug 29 05:08:30.061514 2026] [security2:error] [pid 1034096:tid 1034272] [client 158.23.147.79:26393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK9ri04twRPFuquKD2rBQAAAJo"]
[Sat Aug 29 05:08:30.066233 2026] [security2:error] [pid 1028675:tid 1028862] [client 158.23.147.79:17513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK9rtdHPfW2QFvhmL4G3wAAADQ"]
[Sat Aug 29 05:08:30.077904 2026] [security2:error] [pid 1028675:tid 1028811] [client 52.139.37.240:20875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/paku.php"] [unique_id "apK9rtdHPfW2QFvhmL4G4AAAAAE"]
[Sat Aug 29 05:08:30.129522 2026] [security2:error] [pid 1034096:tid 1034316] [client 20.104.104.62:25075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fasikafresno.oncesocial.com"] [uri "/403.php"] [unique_id "apK9ri04twRPFuquKD2rDAAAAMY"]
[Sat Aug 29 05:08:30.152411 2026] [security2:error] [pid 1034096:tid 1034307] [client 20.104.104.62:42844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9ri04twRPFuquKD2rDQAAAL0"]
[Sat Aug 29 05:08:30.154616 2026] [security2:error] [pid 1034096:tid 1034352] [client 158.23.184.117:38284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/.trash7206/index.php"] [unique_id "apK9ri04twRPFuquKD2rDgAAAOo"]
[Sat Aug 29 05:08:30.155402 2026] [security2:error] [pid 1034096:tid 1034289] [client 20.48.250.41:19392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/ak.php"] [unique_id "apK9ri04twRPFuquKD2rDwAAAKs"]
[Sat Aug 29 05:08:30.169526 2026] [security2:error] [pid 1034096:tid 1034258] [client 20.48.250.41:34260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9ri04twRPFuquKD2rEAAAAIw"]
[Sat Aug 29 05:08:30.174901 2026] [security2:error] [pid 1034096:tid 1034276] [client 158.23.147.79:17426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/ws.php"] [unique_id "apK9ri04twRPFuquKD2rEgAAAJ4"]
[Sat Aug 29 05:08:30.185642 2026] [security2:error] [pid 1034096:tid 1034298] [client 4.205.62.107:9211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/rpk.php"] [unique_id "apK9ri04twRPFuquKD2rEwAAALQ"]
[Sat Aug 29 05:08:30.187149 2026] [security2:error] [pid 1034096:tid 1034271] [client 20.100.175.163:1194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-admin/js/index.php"] [unique_id "apK9ri04twRPFuquKD2rFAAAAJk"]
[Sat Aug 29 05:08:30.188937 2026] [security2:error] [pid 1034096:tid 1034329] [client 20.48.160.90:65320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/sym.php"] [unique_id "apK9ri04twRPFuquKD2rFQAAANM"]
[Sat Aug 29 05:08:30.189837 2026] [security2:error] [pid 1028675:tid 1028915] [client 20.63.219.114:8870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/Njima.php"] [unique_id "apK9rtdHPfW2QFvhmL4G5AAAAGk"]
[Sat Aug 29 05:08:30.197973 2026] [security2:error] [pid 1034096:tid 1034278] [client 20.203.141.11:11590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/aa.php"] [unique_id "apK9ri04twRPFuquKD2rFgAAAKA"]
[Sat Aug 29 05:08:30.205802 2026] [security2:error] [pid 1034096:tid 1034321] [client 20.63.81.20:63102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/wp.php"] [unique_id "apK9ri04twRPFuquKD2rGAAAAMs"]
[Sat Aug 29 05:08:30.273716 2026] [security2:error] [pid 1034096:tid 1034281] [client 52.139.37.240:20765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/rtx.php"] [unique_id "apK9ri04twRPFuquKD2rIAAAAKM"]
[Sat Aug 29 05:08:30.278878 2026] [security2:error] [pid 1034096:tid 1034291] [client 40.83.93.50:9391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-admin/wp-signup.php"] [unique_id "apK9ri04twRPFuquKD2rIQAAAK0"]
[Sat Aug 29 05:08:30.298678 2026] [security2:error] [pid 1034096:tid 1034354] [client 158.23.184.117:38308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/.trash7206/admin.php"] [unique_id "apK9ri04twRPFuquKD2rIgAAAOw"]
[Sat Aug 29 05:08:30.304829 2026] [security2:error] [pid 1034096:tid 1034293] [client 40.83.93.50:18836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/hehe.php"] [unique_id "apK9ri04twRPFuquKD2rIwAAAK8"]
[Sat Aug 29 05:08:30.307684 2026] [security2:error] [pid 1034096:tid 1034285] [client 158.158.54.35:31639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/admin.php"] [unique_id "apK9ri04twRPFuquKD2rJAAAAKc"]
[Sat Aug 29 05:08:30.317840 2026] [security2:error] [pid 1028675:tid 1028887] [client 20.48.250.41:49336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/lib.php"] [unique_id "apK9rtdHPfW2QFvhmL4G6wAAAE0"]
[Sat Aug 29 05:08:30.319772 2026] [security2:error] [pid 1034096:tid 1034296] [client 20.52.41.200:4372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/yanz.php"] [unique_id "apK9ri04twRPFuquKD2rJQAAALI"]
[Sat Aug 29 05:08:30.324460 2026] [security2:error] [pid 1034096:tid 1034306] [client 20.104.104.62:25493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fasikafresno.oncesocial.com"] [uri "/ava.php"] [unique_id "apK9ri04twRPFuquKD2rJgAAALw"]
[Sat Aug 29 05:08:30.337406 2026] [security2:error] [pid 1034096:tid 1034295] [client 20.63.81.20:57862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/abcd.php"] [unique_id "apK9ri04twRPFuquKD2rJwAAALE"]
[Sat Aug 29 05:08:30.348487 2026] [security2:error] [pid 1028675:tid 1028873] [client 4.205.62.107:51475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/var/www/wallet/index.php"] [unique_id "apK9rtdHPfW2QFvhmL4G7QAAAD8"]
[Sat Aug 29 05:08:30.361453 2026] [security2:error] [pid 1034096:tid 1034365] [client 20.240.128.207:23460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/bgymj.php"] [unique_id "apK9ri04twRPFuquKD2rKAAAAPc"]
[Sat Aug 29 05:08:30.363602 2026] [security2:error] [pid 1028675:tid 1028911] [client 20.48.160.90:62146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/8.php"] [unique_id "apK9rtdHPfW2QFvhmL4G7gAAAGU"]
[Sat Aug 29 05:08:30.371904 2026] [security2:error] [pid 1034096:tid 1034350] [client 20.48.250.41:33856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/ff1.php"] [unique_id "apK9ri04twRPFuquKD2rKQAAAOg"]
[Sat Aug 29 05:08:30.380972 2026] [security2:error] [pid 1034096:tid 1034332] [client 20.104.104.62:43376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/baee.php"] [unique_id "apK9ri04twRPFuquKD2rKwAAANY"]
[Sat Aug 29 05:08:30.443813 2026] [security2:error] [pid 1028675:tid 1028855] [client 158.23.184.117:53726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/wp-content/admin.php"] [unique_id "apK9rtdHPfW2QFvhmL4G7wAAAC0"]
[Sat Aug 29 05:08:30.459151 2026] [security2:error] [pid 1028675:tid 1028930] [client 158.23.147.79:49804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/cgi-bin/index.php"] [unique_id "apK9rtdHPfW2QFvhmL4G8AAAAHg"]
[Sat Aug 29 05:08:30.469582 2026] [security2:error] [pid 1034096:tid 1034312] [client 52.139.37.240:20900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/update/da222.php"] [unique_id "apK9ri04twRPFuquKD2rLwAAAMI"]
[Sat Aug 29 05:08:30.472099 2026] [security2:error] [pid 1034096:tid 1034268] [client 20.48.250.41:49345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/wp-style.php"] [unique_id "apK9ri04twRPFuquKD2rMAAAAJY"]
[Sat Aug 29 05:08:30.483527 2026] [security2:error] [pid 1034096:tid 1034347] [client 40.83.93.50:12499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/goods.php"] [unique_id "apK9ri04twRPFuquKD2rMQAAAOU"]
[Sat Aug 29 05:08:30.494242 2026] [security2:error] [pid 1034096:tid 1034267] [client 20.63.81.20:62999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/nofile.php"] [unique_id "apK9ri04twRPFuquKD2rMwAAAJU"]
[Sat Aug 29 05:08:30.504129 2026] [security2:error] [pid 1034096:tid 1034361] [client 20.48.250.41:33874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/t.php"] [unique_id "apK9ri04twRPFuquKD2rNAAAAPM"]
[Sat Aug 29 05:08:30.523866 2026] [security2:error] [pid 1028675:tid 1028867] [client 20.104.104.62:24731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fasikafresno.oncesocial.com"] [uri "/info.php"] [unique_id "apK9rtdHPfW2QFvhmL4G8QAAADk"]
[Sat Aug 29 05:08:30.536383 2026] [security2:error] [pid 1034096:tid 1034294] [client 20.48.160.90:65287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/goods.php"] [unique_id "apK9ri04twRPFuquKD2rNQAAALA"]
[Sat Aug 29 05:08:30.565679 2026] [security2:error] [pid 1034096:tid 1034302] [client 20.104.104.62:43351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/d12.php"] [unique_id "apK9ri04twRPFuquKD2rNgAAALg"]
[Sat Aug 29 05:08:30.569952 2026] [security2:error] [pid 1028675:tid 1028820] [client 20.63.219.114:18517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/configs.php"] [unique_id "apK9rtdHPfW2QFvhmL4G8gAAAAo"]
[Sat Aug 29 05:08:30.584885 2026] [security2:error] [pid 1034096:tid 1034255] [client 158.23.184.117:38281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/wp-mail.php"] [unique_id "apK9ri04twRPFuquKD2rNwAAAIk"]
[Sat Aug 29 05:08:30.586931 2026] [security2:error] [pid 1034096:tid 1034373] [client 20.197.61.180:1217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/room.php"] [unique_id "apK9ri04twRPFuquKD2rOAAAAP8"]
[Sat Aug 29 05:08:30.593687 2026] [security2:error] [pid 1034096:tid 1034363] [client 4.205.62.107:6946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/saiga.php"] [unique_id "apK9ri04twRPFuquKD2rOQAAAPU"]
[Sat Aug 29 05:08:30.604614 2026] [security2:error] [pid 1028675:tid 1028878] [client 20.48.250.41:49302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/browse.php"] [unique_id "apK9rtdHPfW2QFvhmL4G9AAAAEQ"]
[Sat Aug 29 05:08:30.612179 2026] [security2:error] [pid 1034096:tid 1034337] [client 20.197.61.180:1253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/classsmtps.php"] [unique_id "apK9ri04twRPFuquKD2rOwAAANs"]
[Sat Aug 29 05:08:30.618613 2026] [security2:error] [pid 1028675:tid 1028928] [client 4.205.62.107:26640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/public/rip.php.php"] [unique_id "apK9rtdHPfW2QFvhmL4G9gAAAHY"]
[Sat Aug 29 05:08:30.621683 2026] [security2:error] [pid 1028675:tid 1028849] [client 20.63.81.20:62983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/run.php"] [unique_id "apK9rtdHPfW2QFvhmL4G9wAAACc"]
[Sat Aug 29 05:08:30.636815 2026] [security2:error] [pid 1028675:tid 1028825] [client 20.48.250.41:33900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/erty.php"] [unique_id "apK9rtdHPfW2QFvhmL4G-AAAAA8"]
[Sat Aug 29 05:08:30.650853 2026] [security2:error] [pid 1034096:tid 1034301] [client 20.203.141.11:25036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/c.php"] [unique_id "apK9ri04twRPFuquKD2rPQAAALc"]
[Sat Aug 29 05:08:30.659793 2026] [security2:error] [pid 1034096:tid 1034298] [client 4.205.62.107:62741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/kerang.php"] [unique_id "apK9ri04twRPFuquKD2rPwAAALQ"]
[Sat Aug 29 05:08:30.666338 2026] [security2:error] [pid 1034096:tid 1034320] [client 20.100.175.163:5517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/core.php"] [unique_id "apK9ri04twRPFuquKD2rQQAAAMo"]
[Sat Aug 29 05:08:30.682320 2026] [security2:error] [pid 1034096:tid 1034329] [client 4.205.62.107:21628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/ms.php"] [unique_id "apK9ri04twRPFuquKD2rQgAAANM"]
[Sat Aug 29 05:08:30.685187 2026] [security2:error] [pid 1034096:tid 1034323] [client 20.48.160.90:65349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/ah.php"] [unique_id "apK9ri04twRPFuquKD2rQwAAAM0"]
[Sat Aug 29 05:08:30.719775 2026] [security2:error] [pid 1034096:tid 1034276] [client 20.104.104.62:24727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fasikafresno.oncesocial.com"] [uri "/wp-admin/admin.php"] [unique_id "apK9ri04twRPFuquKD2rRAAAAJ4"]
[Sat Aug 29 05:08:30.730083 2026] [security2:error] [pid 1034096:tid 1034321] [client 20.104.104.62:43358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/yyy.php"] [unique_id "apK9ri04twRPFuquKD2rRQAAAMs"]
[Sat Aug 29 05:08:30.736132 2026] [security2:error] [pid 1034096:tid 1034308] [client 52.139.37.240:21167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/wp-admin/min.php"] [unique_id "apK9ri04twRPFuquKD2rRgAAAL4"]
[Sat Aug 29 05:08:30.752956 2026] [security2:error] [pid 1034096:tid 1034262] [client 20.48.250.41:19362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/zoo.php"] [unique_id "apK9ri04twRPFuquKD2rRwAAAJA"]
[Sat Aug 29 05:08:30.763113 2026] [security2:error] [pid 1028675:tid 1028898] [client 20.52.41.200:4565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/autoload_classmap.php"] [unique_id "apK9rtdHPfW2QFvhmL4G_AAAAFg"]
[Sat Aug 29 05:08:30.766171 2026] [security2:error] [pid 1034096:tid 1034300] [client 20.63.81.20:63016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/new.php"] [unique_id "apK9ri04twRPFuquKD2rSAAAALY"]
[Sat Aug 29 05:08:30.768982 2026] [security2:error] [pid 1034096:tid 1034369] [client 158.23.147.79:32728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-content/x.php"] [unique_id "apK9ri04twRPFuquKD2rSQAAAPs"]
[Sat Aug 29 05:08:30.777352 2026] [security2:error] [pid 1034096:tid 1034376] [client 158.23.147.79:35239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-content/packed.php"] [unique_id "apK9ri04twRPFuquKD2rSgAAAQI"]
[Sat Aug 29 05:08:30.778884 2026] [security2:error] [pid 1028675:tid 1028816] [client 35.194.208.44:56906] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/creds.json"] [unique_id "apK9rtdHPfW2QFvhmL4G_wAAAAY"]
[Sat Aug 29 05:08:30.779367 2026] [security2:error] [pid 1034096:tid 1034275] [client 40.83.93.50:1887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-blog-header.php"] [unique_id "apK9ri04twRPFuquKD2rSwAAAJ0"]
[Sat Aug 29 05:08:30.779959 2026] [security2:error] [pid 1028675:tid 1028929] [client 158.23.184.117:53721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/3.php"] [unique_id "apK9rtdHPfW2QFvhmL4HAAAAAHc"]
[Sat Aug 29 05:08:30.783105 2026] [security2:error] [pid 1034096:tid 1034307] [client 35.194.208.44:56946] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/appsettings.json"] [unique_id "apK9ri04twRPFuquKD2rTgAAAL0"]
[Sat Aug 29 05:08:30.799902 2026] [security2:error] [pid 1034096:tid 1034277] [client 40.83.93.50:18882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/wp-admin/class-db.php"] [unique_id "apK9ri04twRPFuquKD2rWAAAAJ8"]
[Sat Aug 29 05:08:30.808129 2026] [security2:error] [pid 1034096:tid 1034306] [client 20.104.49.130:29978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/init.php"] [unique_id "apK9ri04twRPFuquKD2rWQAAALw"]
[Sat Aug 29 05:08:30.829026 2026] [security2:error] [pid 1034096:tid 1034360] [client 158.158.54.35:13022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/php8.php"] [unique_id "apK9ri04twRPFuquKD2rWwAAAPI"]
[Sat Aug 29 05:08:30.829568 2026] [security2:error] [pid 1034096:tid 1034350] [client 4.205.62.107:53306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/333.php"] [unique_id "apK9ri04twRPFuquKD2rXAAAAOg"]
[Sat Aug 29 05:08:30.854033 2026] [security2:error] [pid 1034096:tid 1034332] [client 158.23.147.79:5962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK9ri04twRPFuquKD2rXQAAANY"]
[Sat Aug 29 05:08:30.862058 2026] [security2:error] [pid 1034096:tid 1034324] [client 127.0.0.1:15688] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK9ri04twRPFuquKD2rTwAAAM4"]
[Sat Aug 29 05:08:30.862102 2026] [security2:error] [pid 1034096:tid 1034335] [client 35.194.208.44:56918] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/secret.json"] [unique_id "apK9ri04twRPFuquKD2rTQAAANk"]
[Sat Aug 29 05:08:30.870412 2026] [security2:error] [pid 1028675:tid 1028932] [client 20.240.128.207:24760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK9rtdHPfW2QFvhmL4HCgAAAHo"]
[Sat Aug 29 05:08:30.870891 2026] [security2:error] [pid 1034096:tid 1034287] [client 20.48.160.90:64158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/ws55.php"] [unique_id "apK9ri04twRPFuquKD2rYAAAAKk"]
[Sat Aug 29 05:08:30.877373 2026] [http2:warn] [pid 1028675:tid 1028913] [client 57.141.14.3:24616] h2_stream(1028675-217-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:08:30.882103 2026] [security2:error] [pid 1034096:tid 1034286] [client 158.23.147.79:11305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-includes/css/index.php"] [unique_id "apK9ri04twRPFuquKD2rYQAAAKg"]
[Sat Aug 29 05:08:30.893729 2026] [security2:error] [pid 1028675:tid 1028840] [client 20.48.250.41:19450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/elp.php"] [unique_id "apK9rtdHPfW2QFvhmL4HCwAAAB4"]
[Sat Aug 29 05:08:30.915745 2026] [security2:error] [pid 1034096:tid 1034266] [client 20.104.104.62:43114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/bgymj.php"] [unique_id "apK9ri04twRPFuquKD2raAAAAJQ"]
[Sat Aug 29 05:08:30.920615 2026] [security2:error] [pid 1034096:tid 1034371] [client 57.141.14.67:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.jobindjibouti.com"] [uri "/sitemap-5.xml"] [unique_id "apK9ri04twRPFuquKD2raQAAAP0"]
[Sat Aug 29 05:08:30.924560 2026] [security2:error] [pid 1034096:tid 1034283] [client 158.23.184.117:53734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "apK9ri04twRPFuquKD2rawAAAKU"]
[Sat Aug 29 05:08:30.924762 2026] [security2:error] [pid 1028675:tid 1028902] [client 20.104.104.62:25495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fasikafresno.oncesocial.com"] [uri "/wp-content/plugins/about.php"] [unique_id "apK9rtdHPfW2QFvhmL4HDAAAAFw"]
[Sat Aug 29 05:08:30.931540 2026] [security2:error] [pid 1034096:tid 1034273] [client 20.63.81.20:57911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/inx.php"] [unique_id "apK9ri04twRPFuquKD2rbQAAAJs"]
[Sat Aug 29 05:08:30.940180 2026] [security2:error] [pid 1034096:tid 1034263] [client 20.63.219.114:10475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/disagraeed.php"] [unique_id "apK9ri04twRPFuquKD2rbgAAAJE"]
[Sat Aug 29 05:08:30.943674 2026] [security2:error] [pid 1034096:tid 1034357] [client 52.139.37.240:21389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/wp-admin/wp-fileesx-449.php"] [unique_id "apK9ri04twRPFuquKD2rbwAAAO8"]
[Sat Aug 29 05:08:30.951992 2026] [security2:error] [pid 1028675:tid 1028877] [client 20.48.250.41:33908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/0x.php"] [unique_id "apK9rtdHPfW2QFvhmL4HDwAAAEM"]
[Sat Aug 29 05:08:31.000467 2026] [security2:error] [pid 1034096:tid 1034295] [client 40.83.93.50:4070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/hehe.php"] [unique_id "apK9ri04twRPFuquKD2rdAAAALE"]
[Sat Aug 29 05:08:31.014606 2026] [security2:error] [pid 1034096:tid 1034353] [client 20.48.160.90:64204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/drykl.php"] [unique_id "apK9ry04twRPFuquKD2rdgAAAOs"]
[Sat Aug 29 05:08:31.032288 2026] [security2:error] [pid 1034096:tid 1034271] [client 20.48.250.41:49314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/666.php"] [unique_id "apK9ry04twRPFuquKD2rdwAAAJk"]
[Sat Aug 29 05:08:31.046186 2026] [security2:error] [pid 1028675:tid 1028866] [client 111.235.68.106:28014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK9r9dHPfW2QFvhmL4HFwAAADg"]
[Sat Aug 29 05:08:31.046292 2026] [security2:error] [pid 1028675:tid 1028866] [client 111.235.68.106:28014] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK9r9dHPfW2QFvhmL4HFwAAADg"]
[Sat Aug 29 05:08:31.076113 2026] [security2:error] [pid 1034096:tid 1034351] [client 158.23.147.79:6085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/.well-known/index.php"] [unique_id "apK9ry04twRPFuquKD2rfQAAAOk"]
[Sat Aug 29 05:08:31.085313 2026] [security2:error] [pid 1034096:tid 1034376] [client 20.63.81.20:63013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/vpn.php"] [unique_id "apK9ry04twRPFuquKD2rfgAAAQI"]
[Sat Aug 29 05:08:31.096661 2026] [security2:error] [pid 1034096:tid 1034342] [client 127.0.0.1:15776] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK9ri04twRPFuquKD2rcgAAAOA"]
[Sat Aug 29 05:08:31.096994 2026] [security2:error] [pid 1034096:tid 1034296] [client 35.194.208.44:57030] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.bridlingtonpremierleaguedarts.com"] [uri "/api/keys.json"] [unique_id "apK9ri04twRPFuquKD2rcQAAALI"]
[Sat Aug 29 05:08:31.097926 2026] [security2:error] [pid 1034096:tid 1034252] [client 20.104.104.62:43133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/fh26.php"] [unique_id "apK9ry04twRPFuquKD2rgQAAAIY"]
[Sat Aug 29 05:08:31.115706 2026] [security2:error] [pid 1028675:tid 1028879] [client 20.203.141.11:38497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/f.php"] [unique_id "apK9r9dHPfW2QFvhmL4HGAAAAEU"]
[Sat Aug 29 05:08:31.126487 2026] [security2:error] [pid 1028675:tid 1028824] [client 20.104.104.62:25496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fasikafresno.oncesocial.com"] [uri "/wp-content/plugins/plugin/index.php"] [unique_id "apK9r9dHPfW2QFvhmL4HGwAAAA4"]
[Sat Aug 29 05:08:31.142413 2026] [security2:error] [pid 1034096:tid 1034282] [client 158.23.184.117:53758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/wp-admin/css/admin.php"] [unique_id "apK9ry04twRPFuquKD2rhQAAAKQ"]
[Sat Aug 29 05:08:31.150624 2026] [security2:error] [pid 1028675:tid 1028839] [client 20.48.160.90:65289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/backup.php"] [unique_id "apK9r9dHPfW2QFvhmL4HHAAAAB0"]
[Sat Aug 29 05:08:31.152930 2026] [security2:error] [pid 1028675:tid 1028888] [client 20.100.175.163:5298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/admin/function.php"] [unique_id "apK9r9dHPfW2QFvhmL4HHQAAAE4"]
[Sat Aug 29 05:08:31.154083 2026] [security2:error] [pid 1034096:tid 1034291] [client 52.139.37.240:21155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/wp-content/themes/min.php"] [unique_id "apK9ry04twRPFuquKD2rhgAAAK0"]
[Sat Aug 29 05:08:31.155247 2026] [security2:error] [pid 1034096:tid 1034370] [client 20.151.200.44:63614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/bgymj.php"] [unique_id "apK9ry04twRPFuquKD2rhwAAAPw"]
[Sat Aug 29 05:08:31.156882 2026] [security2:error] [pid 1034096:tid 1034335] [client 158.23.147.79:54379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK9ry04twRPFuquKD2riAAAANk"]
[Sat Aug 29 05:08:31.166820 2026] [core:error] [pid 1034096:tid 1034327] [client 20.196.209.81:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:31.166833 2026] [core:error] [pid 1034096:tid 1034327] [client 20.196.209.81:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:31.170320 2026] [security2:error] [pid 1028675:tid 1028861] [client 158.23.147.79:17625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-includes/plugins.php"] [unique_id "apK9r9dHPfW2QFvhmL4HHgAAADM"]
[Sat Aug 29 05:08:31.174756 2026] [security2:error] [pid 1028675:tid 1028884] [client 158.23.147.79:26417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK9r9dHPfW2QFvhmL4HHwAAAEo"]
[Sat Aug 29 05:08:31.188761 2026] [security2:error] [pid 1028675:tid 1028908] [client 20.48.250.41:49293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/knmt.php"] [unique_id "apK9r9dHPfW2QFvhmL4HIAAAAGI"]
[Sat Aug 29 05:08:31.196587 2026] [security2:error] [pid 1034096:tid 1034346] [client 61.9.8.35:14327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK9ry04twRPFuquKD2rjAAAAOQ"]
[Sat Aug 29 05:08:31.196688 2026] [security2:error] [pid 1034096:tid 1034346] [client 61.9.8.35:14327] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK9ry04twRPFuquKD2rjAAAAOQ"]
[Sat Aug 29 05:08:31.218444 2026] [security2:error] [pid 1034096:tid 1034308] [client 20.52.41.200:4547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/bi.php"] [unique_id "apK9ry04twRPFuquKD2rkQAAAL4"]
[Sat Aug 29 05:08:31.226328 2026] [security2:error] [pid 1034096:tid 1034328] [client 20.63.81.20:57960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/shiny.php"] [unique_id "apK9ry04twRPFuquKD2rkgAAANI"]
[Sat Aug 29 05:08:31.282005 2026] [security2:error] [pid 1034096:tid 1034368] [client 40.83.93.50:9356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-blogs.php"] [unique_id "apK9ry04twRPFuquKD2rlgAAAPo"]
[Sat Aug 29 05:08:31.285592 2026] [security2:error] [pid 1028675:tid 1028911] [client 158.23.184.117:64527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/bthil.php"] [unique_id "apK9r9dHPfW2QFvhmL4HIgAAAGU"]
[Sat Aug 29 05:08:31.287850 2026] [security2:error] [pid 1034096:tid 1034275] [client 180.190.5.40:39809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.5.190.180.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK9ry04twRPFuquKD2rlwAAAJ0"]
[Sat Aug 29 05:08:31.287946 2026] [security2:error] [pid 1034096:tid 1034275] [client 180.190.5.40:39809] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK9ry04twRPFuquKD2rlwAAAJ0"]
[Sat Aug 29 05:08:31.289504 2026] [security2:error] [pid 1034096:tid 1034270] [client 20.48.160.90:65293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/indo.php"] [unique_id "apK9ry04twRPFuquKD2rmAAAAJg"]
[Sat Aug 29 05:08:31.305627 2026] [security2:error] [pid 1034096:tid 1034375] [client 20.197.61.180:8424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/class-wp-cmd.php"] [unique_id "apK9ry04twRPFuquKD2rmQAAAQE"]
[Sat Aug 29 05:08:31.319632 2026] [security2:error] [pid 1034096:tid 1034315] [client 20.104.104.62:43094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/fgd.php"] [unique_id "apK9ry04twRPFuquKD2rnAAAAMU"]
[Sat Aug 29 05:08:31.321878 2026] [security2:error] [pid 1028675:tid 1028896] [client 20.104.104.62:24755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fasikafresno.oncesocial.com"] [uri "/wp-content/uploads/index.php/wp-includes/Text/"] [unique_id "apK9r9dHPfW2QFvhmL4HJQAAAFY"]
[Sat Aug 29 05:08:31.323603 2026] [security2:error] [pid 1028675:tid 1028848] [client 20.63.219.114:15428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/add_actualites.php"] [unique_id "apK9r9dHPfW2QFvhmL4HJgAAACY"]
[Sat Aug 29 05:08:31.330144 2026] [security2:error] [pid 1034096:tid 1034196] [remote 34.73.62.26:32938] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.strangeworx.com"] [uri "/storage/.env"] [unique_id "apK9ry04twRPFuquKD2roAAAnko"]
[Sat Aug 29 05:08:31.330311 2026] [security2:error] [pid 1034096:tid 1034360] [client 40.83.93.50:11945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/wp-contentt.php"] [unique_id "apK9ry04twRPFuquKD2roQAAAPI"]
[Sat Aug 29 05:08:31.344640 2026] [security2:error] [pid 1034096:tid 1034351] [client 20.48.250.41:49360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/sbhu.php"] [unique_id "apK9ry04twRPFuquKD2rogAAAOk"]
[Sat Aug 29 05:08:31.353027 2026] [authz_core:error] [pid 1034096:tid 1034202] [remote 34.139.86.26:40016] AH01630: client denied by server configuration: /home4/dkpainti/public_html/ptstmobile/.htpasswd
[Sat Aug 29 05:08:31.354546 2026] [security2:error] [pid 1034096:tid 1034293] [client 20.197.61.180:14400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/contentloader1.php"] [unique_id "apK9ry04twRPFuquKD2rpQAAAK8"]
[Sat Aug 29 05:08:31.357629 2026] [security2:error] [pid 1028675:tid 1028828] [client 20.63.81.20:57933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/goods.php"] [unique_id "apK9r9dHPfW2QFvhmL4HKAAAABI"]
[Sat Aug 29 05:08:31.357689 2026] [security2:error] [pid 1028675:tid 1028813] [client 20.48.250.41:33917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/66.php"] [unique_id "apK9r9dHPfW2QFvhmL4HKQAAAAM"]
[Sat Aug 29 05:08:31.372646 2026] [security2:error] [pid 1028675:tid 1028928] [client 52.139.37.240:21426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/wp-content/themes/x/bypass.php"] [unique_id "apK9r9dHPfW2QFvhmL4HKgAAAHY"]
[Sat Aug 29 05:08:31.400094 2026] [security2:error] [pid 1034096:tid 1034207] [remote 104.219.248.8:59716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 8.248.219.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "burlingtonyaroslavl.davidseaver.com"] [uri "/wp-login.php"] [unique_id "apK9ry04twRPFuquKD2rqgABAlU"]
[Sat Aug 29 05:08:31.403111 2026] [security2:error] [pid 1034096:tid 1034208] [remote 104.219.248.8:59722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 8.248.219.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "burlingtonyaroslavl.davidseaver.com"] [uri "/wp-login.php"] [unique_id "apK9ry04twRPFuquKD2rqwAAyFY"]
[Sat Aug 29 05:08:31.403831 2026] [security2:error] [pid 1028675:tid 1028776] [remote 104.219.248.8:59730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 8.248.219.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "burlingtonyaroslavl.davidseaver.com"] [uri "/wp-login.php"] [unique_id "apK9r9dHPfW2QFvhmL4HKwAAS18"]
[Sat Aug 29 05:08:31.427443 2026] [cgid:error] [pid 1034096:tid 1034209] [remote 34.73.62.26:32938] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:31.429690 2026] [security2:error] [pid 1034096:tid 1034307] [client 158.23.184.117:38279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/file.php"] [unique_id "apK9ry04twRPFuquKD2rsAAAAL0"]
[Sat Aug 29 05:08:31.434553 2026] [security2:error] [pid 1028675:tid 1028815] [client 35.221.212.112:64432] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/@fs/app/.env"] [unique_id "apK9r9dHPfW2QFvhmL4HLAAAAAU"]
[Sat Aug 29 05:08:31.434583 2026] [security2:error] [pid 1028675:tid 1028867] [client 35.221.212.112:64436] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/@fs/src/.env"] [unique_id "apK9r9dHPfW2QFvhmL4HLQAAADk"]
[Sat Aug 29 05:08:31.436151 2026] [security2:error] [pid 1034096:tid 1034294] [client 35.221.212.112:64458] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "autodiscover.beraluzarchive.org"] [uri "/@fs/proc/self/environ"] [unique_id "apK9ry04twRPFuquKD2rtAAAALA"]
[Sat Aug 29 05:08:31.438327 2026] [security2:error] [pid 1028675:tid 1028820] [client 35.221.212.112:64424] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/@fs/.env"] [unique_id "apK9r9dHPfW2QFvhmL4HLgAAAAo"]
[Sat Aug 29 05:08:31.438864 2026] [security2:error] [pid 1034096:tid 1034370] [client 4.205.62.107:8755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/ms.php"] [unique_id "apK9ry04twRPFuquKD2ruwAAAPw"]
[Sat Aug 29 05:08:31.439749 2026] [core:error] [pid 1034096:tid 1034255] [client 35.221.212.112:64516] AH10244: invalid URI path (/@fs/../../.env?raw??)
[Sat Aug 29 05:08:31.442632 2026] [security2:error] [pid 1034096:tid 1034327] [client 158.158.54.35:31535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/install.php"] [unique_id "apK9ry04twRPFuquKD2rwgAAANE"]
[Sat Aug 29 05:08:31.442693 2026] [security2:error] [pid 1034096:tid 1034373] [client 35.221.212.112:64486] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "autodiscover.beraluzarchive.org"] [uri "/@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ"] [unique_id "apK9ry04twRPFuquKD2rwwAAAP8"]
[Sat Aug 29 05:08:31.442764 2026] [security2:error] [pid 1034096:tid 1034253] [client 35.221.212.112:64496] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "autodiscover.beraluzarchive.org"] [uri "/@fs/..%252f..%252f..%252f..%252f..%252fapp/.env"] [unique_id "apK9ry04twRPFuquKD2rxAAAAIc"]
[Sat Aug 29 05:08:31.443074 2026] [security2:error] [pid 1028675:tid 1028880] [client 35.221.212.112:64472] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2froot/.env"] [unique_id "apK9r9dHPfW2QFvhmL4HMQAAAEY"]
[Sat Aug 29 05:08:31.444171 2026] [security2:error] [pid 1028675:tid 1028821] [client 35.221.212.112:64502] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/.env"] [unique_id "apK9r9dHPfW2QFvhmL4HMgAAAAs"]
[Sat Aug 29 05:08:31.445044 2026] [security2:error] [pid 1028675:tid 1028878] [client 35.221.212.112:64558] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/@fs/root/.aws/credentials.backup"] [unique_id "apK9r9dHPfW2QFvhmL4HMwAAAEQ"]
[Sat Aug 29 05:08:31.445844 2026] [security2:error] [pid 1028675:tid 1028849] [client 35.221.212.112:64574] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/@fs/root/.aws/credentials.bak"] [unique_id "apK9r9dHPfW2QFvhmL4HNAAAACc"]
[Sat Aug 29 05:08:31.447852 2026] [security2:error] [pid 1034096:tid 1034302] [client 35.221.212.112:64442] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/@fs/root/.env"] [unique_id "apK9ry04twRPFuquKD2rvgAAALg"]
[Sat Aug 29 05:08:31.449083 2026] [security2:error] [pid 1034096:tid 1034330] [client 35.221.212.112:64650] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "autodiscover.beraluzarchive.org"] [uri "/@fs/home/ec2-user/.aws/credentials"] [unique_id "apK9ry04twRPFuquKD2rzgAAANQ"]
[Sat Aug 29 05:08:31.455683 2026] [security2:error] [pid 1028675:tid 1028846] [client 35.221.212.112:64628] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "autodiscover.beraluzarchive.org"] [uri "/@fs/home/ubuntu/.aws/config"] [unique_id "apK9r9dHPfW2QFvhmL4HRAAAACQ"]
[Sat Aug 29 05:08:31.455798 2026] [security2:error] [pid 1028675:tid 1028816] [client 35.221.212.112:64666] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "autodiscover.beraluzarchive.org"] [uri "/@fs/home/debian/.aws/credentials"] [unique_id "apK9r9dHPfW2QFvhmL4HRQAAAAY"]
[Sat Aug 29 05:08:31.456922 2026] [security2:error] [pid 1034096:tid 1034271] [client 35.221.212.112:64680] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "autodiscover.beraluzarchive.org"] [uri "/@fs/var/www/.aws/credentials"] [unique_id "apK9ry04twRPFuquKD2r1QAAAJk"]
[Sat Aug 29 05:08:31.457862 2026] [security2:error] [pid 1034096:tid 1034278] [client 35.221.212.112:64682] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "autodiscover.beraluzarchive.org"] [uri "/@fs/app/.aws/credentials"] [unique_id "apK9ry04twRPFuquKD2r1wAAAKA"]
[Sat Aug 29 05:08:31.491337 2026] [security2:error] [pid 1034096:tid 1034368] [client 20.48.160.90:64156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/sign.php"] [unique_id "apK9ry04twRPFuquKD2r3wAAAPo"]
[Sat Aug 29 05:08:31.493107 2026] [security2:error] [pid 1034096:tid 1034323] [client 40.83.93.50:13204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/wp-admin/class-db.php"] [unique_id "apK9ry04twRPFuquKD2r4AAAAM0"]
[Sat Aug 29 05:08:31.500098 2026] [security2:error] [pid 1028675:tid 1028900] [client 4.205.62.107:58455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/xp.php"] [unique_id "apK9r9dHPfW2QFvhmL4HTQAAAFo"]
[Sat Aug 29 05:08:31.520487 2026] [security2:error] [pid 1028675:tid 1028918] [client 20.63.81.20:57952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/alfa.php"] [unique_id "apK9r9dHPfW2QFvhmL4HTgAAAGw"]
[Sat Aug 29 05:08:31.526851 2026] [security2:error] [pid 1034096:tid 1034311] [client 20.48.250.41:49375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/a332.php"] [unique_id "apK9ry04twRPFuquKD2r4wAAAME"]
[Sat Aug 29 05:08:31.541459 2026] [security2:error] [pid 1028675:tid 1028915] [client 20.104.104.62:43377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/inject.php"] [unique_id "apK9r9dHPfW2QFvhmL4HUAAAAGk"]
[Sat Aug 29 05:08:31.557509 2026] [security2:error] [pid 1028675:tid 1028926] [client 127.0.0.1:15926] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK9r9dHPfW2QFvhmL4HNwAAAHQ"]
[Sat Aug 29 05:08:31.557537 2026] [security2:error] [pid 1034096:tid 1034352] [client 127.0.0.1:15858] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.beraluzarchive.org"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK9ry04twRPFuquKD2rxwAAAOo"]
[Sat Aug 29 05:08:31.557563 2026] [security2:error] [pid 1034096:tid 1034255] [client 35.221.212.112:64516] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.beraluzarchive.org"] [uri "/400.shtml"] [unique_id "apK9ry04twRPFuquKD2rvQAAAIk"]
[Sat Aug 29 05:08:31.562188 2026] [security2:error] [pid 1028675:tid 1028925] [client 158.23.147.79:49937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK9r9dHPfW2QFvhmL4HUgAAAHM"]
[Sat Aug 29 05:08:31.568597 2026] [security2:error] [pid 1034096:tid 1034360] [client 20.240.128.207:22118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-load.php"] [unique_id "apK9ry04twRPFuquKD2r5AAAAPI"]
[Sat Aug 29 05:08:31.575213 2026] [security2:error] [pid 1028675:tid 1028839] [client 158.23.184.117:38283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/lock360.php"] [unique_id "apK9r9dHPfW2QFvhmL4HUwAAAB0"]
[Sat Aug 29 05:08:31.576557 2026] [security2:error] [pid 1034096:tid 1034216] [remote 34.73.62.26:32938] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.strangeworx.com"] [uri "/wp/.env"] [unique_id "apK9ry04twRPFuquKD2r5gAAr14"]
[Sat Aug 29 05:08:31.584166 2026] [security2:error] [pid 1034096:tid 1034316] [client 20.203.141.11:2203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/av.php"] [unique_id "apK9ry04twRPFuquKD2r6AAAAMY"]
[Sat Aug 29 05:08:31.608995 2026] [security2:error] [pid 1034096:tid 1034337] [client 20.104.49.130:39058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/menu.php"] [unique_id "apK9ry04twRPFuquKD2r6QAAANs"]
[Sat Aug 29 05:08:31.638596 2026] [security2:error] [pid 1034096:tid 1034348] [client 52.139.37.240:21179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK9ry04twRPFuquKD2r6wAAAOY"]
[Sat Aug 29 05:08:31.639594 2026] [security2:error] [pid 1028675:tid 1028855] [client 20.48.160.90:65326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/wnnjpsby.php"] [unique_id "apK9r9dHPfW2QFvhmL4HVAAAAC0"]
[Sat Aug 29 05:08:31.645807 2026] [security2:error] [pid 1034096:tid 1034300] [client 20.100.175.163:48205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/admin/index.php"] [unique_id "apK9ry04twRPFuquKD2r7AAAALY"]
[Sat Aug 29 05:08:31.663045 2026] [security2:error] [pid 1034096:tid 1034251] [client 20.63.81.20:57949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/33.php"] [unique_id "apK9ry04twRPFuquKD2r7gAAAIU"]
[Sat Aug 29 05:08:31.672393 2026] [security2:error] [pid 1034096:tid 1034259] [client 158.23.147.79:17585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/wp-includes/css/index.php"] [unique_id "apK9ry04twRPFuquKD2r7wAAAI0"]
[Sat Aug 29 05:08:31.675250 2026] [security2:error] [pid 1034096:tid 1034332] [client 20.48.250.41:49405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/ws66.php"] [unique_id "apK9ry04twRPFuquKD2r8AAAANY"]
[Sat Aug 29 05:08:31.680468 2026] [security2:error] [pid 1028675:tid 1028888] [client 20.63.219.114:8869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/alfanew.php7"] [unique_id "apK9r9dHPfW2QFvhmL4HVgAAAE4"]
[Sat Aug 29 05:08:31.684629 2026] [security2:error] [pid 1028675:tid 1028812] [client 20.52.41.200:4585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/cc.php"] [unique_id "apK9r9dHPfW2QFvhmL4HWAAAAAI"]
[Sat Aug 29 05:08:31.695139 2026] [security2:error] [pid 1034096:tid 1034327] [client 20.104.104.62:43098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/mga.php"] [unique_id "apK9ry04twRPFuquKD2r8QAAANE"]
[Sat Aug 29 05:08:31.713825 2026] [security2:error] [pid 1034096:tid 1034302] [client 91.92.47.191:42864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "corrigansbasement.com"] [uri "/settings.php"] [unique_id "apK9ry04twRPFuquKD2r8gAAALg"]
[Sat Aug 29 05:08:31.719445 2026] [security2:error] [pid 1034096:tid 1034350] [client 158.23.184.117:38329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/fpwch.php"] [unique_id "apK9ry04twRPFuquKD2r8wAAAOg"]
[Sat Aug 29 05:08:31.722792 2026] [security2:error] [pid 1034096:tid 1034218] [remote 34.73.62.26:32938] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.strangeworx.com"] [uri "/web/.env"] [unique_id "apK9ry04twRPFuquKD2r9wAAmWA"]
[Sat Aug 29 05:08:31.722816 2026] [security2:error] [pid 1034096:tid 1034219] [remote 34.73.62.26:32938] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.strangeworx.com"] [uri "/public/.env"] [unique_id "apK9ry04twRPFuquKD2r9QAAmWE"]
[Sat Aug 29 05:08:31.730676 2026] [security2:error] [pid 1034096:tid 1034319] [client 4.205.62.107:6913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/ammika.php"] [unique_id "apK9ry04twRPFuquKD2r-AAAAMk"]
[Sat Aug 29 05:08:31.747223 2026] [cgid:error] [pid 1034096:tid 1034223] [remote 34.73.62.26:32938] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:31.747223 2026] [cgid:error] [pid 1034096:tid 1034227] [remote 34.73.62.26:32938] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:31.747230 2026] [cgid:error] [pid 1034096:tid 1034226] [remote 34.73.62.26:32938] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:31.747230 2026] [cgid:error] [pid 1034096:tid 1034220] [remote 34.73.62.26:32938] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:31.748537 2026] [cgid:error] [pid 1034096:tid 1034194] [remote 34.73.62.26:32938] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:31.760505 2026] [security2:error] [pid 1034096:tid 1034286] [client 4.205.62.107:25960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/environment.php"] [unique_id "apK9ry04twRPFuquKD2r_wAAAKg"]
[Sat Aug 29 05:08:31.768196 2026] [security2:error] [pid 1028675:tid 1028901] [client 40.83.93.50:1043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-comments-post.php"] [unique_id "apK9r9dHPfW2QFvhmL4HWQAAAFs"]
[Sat Aug 29 05:08:31.770502 2026] [security2:error] [pid 1034096:tid 1034340] [client 20.48.160.90:63302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/gigi.php"] [unique_id "apK9ry04twRPFuquKD2sAQAAAN4"]
[Sat Aug 29 05:08:31.801001 2026] [security2:error] [pid 1034096:tid 1034351] [client 4.205.62.107:62924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/rem.php"] [unique_id "apK9ry04twRPFuquKD2sBQAAAOk"]
[Sat Aug 29 05:08:31.802222 2026] [security2:error] [pid 1034096:tid 1034354] [client 20.104.104.62:25487] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "fasikafresno.oncesocial.com"] [uri "/1.php"] [unique_id "apK9ry04twRPFuquKD2sBgAAAOw"]
[Sat Aug 29 05:08:31.802309 2026] [security2:error] [pid 1034096:tid 1034354] [client 20.104.104.62:25487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fasikafresno.oncesocial.com"] [uri "/1.php"] [unique_id "apK9ry04twRPFuquKD2sBgAAAOw"]
[Sat Aug 29 05:08:31.823517 2026] [security2:error] [pid 1034096:tid 1034285] [client 20.63.81.20:63040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/133.php"] [unique_id "apK9ry04twRPFuquKD2sCgAAAKc"]
[Sat Aug 29 05:08:31.838806 2026] [security2:error] [pid 1028675:tid 1028930] [client 40.83.93.50:11955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/theme.php"] [unique_id "apK9r9dHPfW2QFvhmL4HWgAAAHg"]
[Sat Aug 29 05:08:31.845321 2026] [security2:error] [pid 1034096:tid 1034352] [client 52.139.37.240:21131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/wp-info.php"] [unique_id "apK9ry04twRPFuquKD2sDQAAAOo"]
[Sat Aug 29 05:08:31.854782 2026] [security2:error] [pid 1034096:tid 1034266] [client 4.205.62.107:22241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/fucku.php"] [unique_id "apK9ry04twRPFuquKD2sDwAAAJQ"]
[Sat Aug 29 05:08:31.867334 2026] [security2:error] [pid 1034096:tid 1034377] [client 20.48.250.41:49281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/ws68.php"] [unique_id "apK9ry04twRPFuquKD2sEAAAAQM"]
[Sat Aug 29 05:08:31.882614 2026] [security2:error] [pid 1034096:tid 1034355] [client 158.23.147.79:35736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-l0gin.php"] [unique_id "apK9ry04twRPFuquKD2sFwAAAO0"]
[Sat Aug 29 05:08:31.884614 2026] [security2:error] [pid 1034096:tid 1034274] [client 158.23.184.117:38287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/storage/index.php"] [unique_id "apK9ry04twRPFuquKD2sGQAAAJw"]
[Sat Aug 29 05:08:31.892369 2026] [security2:error] [pid 1034096:tid 1034276] [client 158.158.54.35:31540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/ioxi-o.php"] [unique_id "apK9ry04twRPFuquKD2sHgAAAJ4"]
[Sat Aug 29 05:08:31.910815 2026] [security2:error] [pid 1034096:tid 1034234] [remote 47.128.31.237:10056] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.djiboutihomes.com"] [uri "/boats"] [unique_id "apK9ry04twRPFuquKD2sIQAAtnA"]
[Sat Aug 29 05:08:31.922969 2026] [security2:error] [pid 1034096:tid 1034259] [client 20.104.104.62:43369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/inwp.php"] [unique_id "apK9ry04twRPFuquKD2sJQAAAI0"]
[Sat Aug 29 05:08:31.934377 2026] [security2:error] [pid 1028675:tid 1028820] [client 20.48.160.90:64176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/info.php/new.php"] [unique_id "apK9r9dHPfW2QFvhmL4HYgAAAAo"]
[Sat Aug 29 05:08:31.966785 2026] [security2:error] [pid 1028675:tid 1028821] [client 20.63.81.20:63022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/sym.php"] [unique_id "apK9r9dHPfW2QFvhmL4HYwAAAAs"]
[Sat Aug 29 05:08:31.967121 2026] [security2:error] [pid 1028675:tid 1028849] [client 158.23.147.79:6108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-content/radio.php"] [unique_id "apK9r9dHPfW2QFvhmL4HZAAAACc"]
[Sat Aug 29 05:08:31.969093 2026] [security2:error] [pid 1034096:tid 1034327] [client 4.205.62.107:53256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/G-in.php"] [unique_id "apK9ry04twRPFuquKD2sJgAAANE"]
[Sat Aug 29 05:08:31.969863 2026] [security2:error] [pid 1034096:tid 1034293] [client 40.83.93.50:12505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/wp-contentt.php"] [unique_id "apK9ry04twRPFuquKD2sJwAAAK8"]
[Sat Aug 29 05:08:32.003648 2026] [security2:error] [pid 1034096:tid 1034332] [client 20.104.104.62:25042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fasikafresno.oncesocial.com"] [uri "/admin/function.php"] [unique_id "apK9sC04twRPFuquKD2sKAAAANY"]
[Sat Aug 29 05:08:32.007889 2026] [security2:error] [pid 1034096:tid 1034350] [client 20.48.250.41:49304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/users.php"] [unique_id "apK9sC04twRPFuquKD2sKQAAAOg"]
[Sat Aug 29 05:08:32.022612 2026] [security2:error] [pid 1034096:tid 1034278] [client 20.48.250.41:33878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/f35.php"] [unique_id "apK9sC04twRPFuquKD2sKgAAAKA"]
[Sat Aug 29 05:08:32.032949 2026] [security2:error] [pid 1034096:tid 1034270] [client 103.162.125.59:60057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.125.162.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK9sC04twRPFuquKD2sLAAAAJg"]
[Sat Aug 29 05:08:32.033031 2026] [security2:error] [pid 1034096:tid 1034270] [client 103.162.125.59:60057] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK9sC04twRPFuquKD2sLAAAAJg"]
[Sat Aug 29 05:08:32.041827 2026] [security2:error] [pid 1034096:tid 1034283] [client 52.139.37.240:20904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/wp-wordfence-waf.php"] [unique_id "apK9sC04twRPFuquKD2sLQAAAKU"]
[Sat Aug 29 05:08:32.056450 2026] [security2:error] [pid 1028675:tid 1028867] [client 20.203.141.11:2108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/file.php"] [unique_id "apK9sNdHPfW2QFvhmL4HZwAAADk"]
[Sat Aug 29 05:08:32.067816 2026] [security2:error] [pid 1034096:tid 1034292] [client 20.63.219.114:16658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/xmlrpc.php0"] [unique_id "apK9sC04twRPFuquKD2sLgAAAK4"]
[Sat Aug 29 05:08:32.075279 2026] [security2:error] [pid 1028675:tid 1028861] [client 158.23.147.79:11340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK9sNdHPfW2QFvhmL4HaAAAADM"]
[Sat Aug 29 05:08:32.075553 2026] [security2:error] [pid 1034096:tid 1034297] [client 45.83.178.43:63498] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "goodtogo.store"] [uri "/webapp/xmlrpc.php"] [unique_id "apK9ry04twRPFuquKD2rrgAAALM"]
[Sat Aug 29 05:08:32.085787 2026] [security2:error] [pid 1028675:tid 1028925] [client 158.23.184.117:38321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/wp-includes/blocks/search/index.php"] [unique_id "apK9sNdHPfW2QFvhmL4HaQAAAHM"]
[Sat Aug 29 05:08:32.092709 2026] [security2:error] [pid 1034096:tid 1034296] [client 20.197.61.180:8432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/al.php"] [unique_id "apK9sC04twRPFuquKD2sMQAAALI"]
[Sat Aug 29 05:08:32.094044 2026] [security2:error] [pid 1034096:tid 1034286] [client 20.104.104.62:43342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/ad1.php"] [unique_id "apK9sC04twRPFuquKD2sMgAAAKg"]
[Sat Aug 29 05:08:32.108294 2026] [security2:error] [pid 1028675:tid 1028828] [client 20.197.61.180:1230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/disagreed.php"] [unique_id "apK9sNdHPfW2QFvhmL4HagAAABI"]
[Sat Aug 29 05:08:32.110399 2026] [security2:error] [pid 1034096:tid 1034340] [client 20.63.81.20:63069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/8.php"] [unique_id "apK9sC04twRPFuquKD2sNAAAAN4"]
[Sat Aug 29 05:08:32.136461 2026] [security2:error] [pid 1028675:tid 1028846] [client 20.52.41.200:5372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/files/index.php"] [unique_id "apK9sNdHPfW2QFvhmL4HawAAACQ"]
[Sat Aug 29 05:08:32.146737 2026] [security2:error] [pid 1034096:tid 1034362] [client 20.100.175.163:29593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/storage/rip.php"] [unique_id "apK9sC04twRPFuquKD2sNgAAAPQ"]
[Sat Aug 29 05:08:32.168839 2026] [security2:error] [pid 1034096:tid 1034312] [client 20.48.250.41:19436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/bzjdlofz.php"] [unique_id "apK9sC04twRPFuquKD2sNwAAAMI"]
[Sat Aug 29 05:08:32.183582 2026] [security2:error] [pid 1028675:tid 1028908] [client 158.23.147.79:6044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-content/themes/too.php"] [unique_id "apK9sNdHPfW2QFvhmL4HbAAAAGI"]
[Sat Aug 29 05:08:32.198816 2026] [security2:error] [pid 1034096:tid 1034320] [client 20.104.104.62:24766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fasikafresno.oncesocial.com"] [uri "/autoload_classmap.php"] [unique_id "apK9sC04twRPFuquKD2sOAAAAMo"]
[Sat Aug 29 05:08:32.201365 2026] [security2:error] [pid 1034096:tid 1034273] [client 20.48.160.90:65316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/w.php"] [unique_id "apK9sC04twRPFuquKD2sOQAAAJs"]
[Sat Aug 29 05:08:32.230014 2026] [security2:error] [pid 1028675:tid 1028909] [client 158.23.184.117:64515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/wp-signup.php"] [unique_id "apK9sNdHPfW2QFvhmL4HbgAAAGM"]
[Sat Aug 29 05:08:32.239049 2026] [security2:error] [pid 1034096:tid 1034351] [client 52.139.37.240:21168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/ws49.php"] [unique_id "apK9sC04twRPFuquKD2sOgAAAOk"]
[Sat Aug 29 05:08:32.249529 2026] [security2:error] [pid 1034096:tid 1034314] [client 40.83.93.50:1858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-config.php"] [unique_id "apK9sC04twRPFuquKD2sOwAAAMQ"]
[Sat Aug 29 05:08:32.256929 2026] [security2:error] [pid 1034096:tid 1034285] [client 20.63.81.20:63094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/goods.php"] [unique_id "apK9sC04twRPFuquKD2sPAAAAKc"]
[Sat Aug 29 05:08:32.261704 2026] [security2:error] [pid 1034096:tid 1034281] [client 20.104.104.62:43328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/1vbqo.php"] [unique_id "apK9sC04twRPFuquKD2sPQAAAKM"]
[Sat Aug 29 05:08:32.276264 2026] [security2:error] [pid 1034096:tid 1034266] [client 158.23.147.79:61593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK9sC04twRPFuquKD2sPgAAAJQ"]
[Sat Aug 29 05:08:32.278692 2026] [security2:error] [pid 1034096:tid 1034346] [client 20.240.128.207:24728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/a.php"] [unique_id "apK9sC04twRPFuquKD2sPwAAAOQ"]
[Sat Aug 29 05:08:32.322633 2026] [security2:error] [pid 1034096:tid 1034355] [client 20.104.49.130:51090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/srontol.php"] [unique_id "apK9sC04twRPFuquKD2sQAAAAO0"]
[Sat Aug 29 05:08:32.338984 2026] [security2:error] [pid 1034096:tid 1034318] [client 20.48.250.41:49386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/selesai.php"] [unique_id "apK9sC04twRPFuquKD2sQQAAAMg"]
[Sat Aug 29 05:08:32.343856 2026] [security2:error] [pid 1034096:tid 1034251] [client 20.48.160.90:63307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/x.php"] [unique_id "apK9sC04twRPFuquKD2sQgAAAIU"]
[Sat Aug 29 05:08:32.357487 2026] [security2:error] [pid 1034096:tid 1034259] [client 20.48.250.41:33870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/wen.php"] [unique_id "apK9sC04twRPFuquKD2sQwAAAI0"]
[Sat Aug 29 05:08:32.369117 2026] [security2:error] [pid 1034096:tid 1034272] [client 158.158.54.35:31498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/xmlrpc.php"] [unique_id "apK9sC04twRPFuquKD2sRAAAAJo"]
[Sat Aug 29 05:08:32.372916 2026] [security2:error] [pid 1034096:tid 1034276] [client 158.23.184.117:38317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/404.php"] [unique_id "apK9sC04twRPFuquKD2sRQAAAJ4"]
[Sat Aug 29 05:08:32.386341 2026] [security2:error] [pid 1034096:tid 1034284] [client 20.63.81.20:57882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/ah.php"] [unique_id "apK9sC04twRPFuquKD2sRgAAAKY"]
[Sat Aug 29 05:08:32.395254 2026] [security2:error] [pid 1034096:tid 1034262] [client 20.104.104.62:24709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fasikafresno.oncesocial.com"] [uri "/classwithtostring.php"] [unique_id "apK9sC04twRPFuquKD2sSAAAAJA"]
[Sat Aug 29 05:08:32.407701 2026] [security2:error] [pid 1034096:tid 1034255] [client 158.23.147.79:26621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK9sC04twRPFuquKD2sSQAAAIk"]
[Sat Aug 29 05:08:32.414036 2026] [security2:error] [pid 1034096:tid 1034327] [client 158.23.147.79:32618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK9sC04twRPFuquKD2sSgAAANE"]
[Sat Aug 29 05:08:32.418249 2026] [security2:error] [pid 1034096:tid 1034329] [client 20.63.219.114:1029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/content.php"] [unique_id "apK9sC04twRPFuquKD2sSwAAANM"]
[Sat Aug 29 05:08:32.423003 2026] [security2:error] [pid 1028675:tid 1028811] [client 40.83.93.50:11933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/alumni_reg.php"] [unique_id "apK9sNdHPfW2QFvhmL4HcQAAAAE"]
[Sat Aug 29 05:08:32.432018 2026] [security2:error] [pid 1034096:tid 1034357] [client 52.139.37.240:20750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/xxx.php"] [unique_id "apK9sC04twRPFuquKD2sTAAAAO8"]
[Sat Aug 29 05:08:32.466834 2026] [security2:error] [pid 1034096:tid 1034378] [client 40.83.93.50:14593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/theme.php"] [unique_id "apK9sC04twRPFuquKD2sTQAAAQQ"]
[Sat Aug 29 05:08:32.467525 2026] [security2:error] [pid 1034096:tid 1034267] [client 20.104.104.62:43355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/h02ugyh.php"] [unique_id "apK9sC04twRPFuquKD2sTgAAAJU"]
[Sat Aug 29 05:08:32.475957 2026] [security2:error] [pid 1034096:tid 1034328] [client 20.48.160.90:64196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/ssla.php"] [unique_id "apK9sC04twRPFuquKD2sTwAAANI"]
[Sat Aug 29 05:08:32.479003 2026] [security2:error] [pid 1034096:tid 1034373] [client 20.48.250.41:49295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/shlo.php"] [unique_id "apK9sC04twRPFuquKD2sUAAAAP8"]
[Sat Aug 29 05:08:32.512727 2026] [security2:error] [pid 1034096:tid 1034290] [client 20.63.81.20:57891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/ws55.php"] [unique_id "apK9sC04twRPFuquKD2sUgAAAKw"]
[Sat Aug 29 05:08:32.518635 2026] [security2:error] [pid 1034096:tid 1034270] [client 158.23.184.117:64521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/as.php"] [unique_id "apK9sC04twRPFuquKD2sUwAAAJg"]
[Sat Aug 29 05:08:32.523127 2026] [security2:error] [pid 1034096:tid 1034269] [client 20.203.141.11:25078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK9sC04twRPFuquKD2sVwAAAJc"]
[Sat Aug 29 05:08:32.585302 2026] [security2:error] [pid 1034096:tid 1034345] [client 20.48.250.41:33890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/inc.php"] [unique_id "apK9sC04twRPFuquKD2sZAAAAOM"]
[Sat Aug 29 05:08:32.589392 2026] [security2:error] [pid 1034096:tid 1034308] [client 20.48.250.41:19463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/06.php"] [unique_id "apK9sC04twRPFuquKD2sZQAAAL4"]
[Sat Aug 29 05:08:32.595294 2026] [security2:error] [pid 1034096:tid 1034330] [client 197.219.150.206:49926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK9sC04twRPFuquKD2sZgAAANQ"]
[Sat Aug 29 05:08:32.595435 2026] [security2:error] [pid 1034096:tid 1034330] [client 197.219.150.206:49926] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK9sC04twRPFuquKD2sZgAAANQ"]
[Sat Aug 29 05:08:32.597839 2026] [security2:error] [pid 1034096:tid 1034367] [client 20.52.41.200:5267] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webmail.neufgroup.com"] [uri "/1.php7"] [unique_id "apK9sC04twRPFuquKD2sZwAAAPk"]
[Sat Aug 29 05:08:32.597981 2026] [security2:error] [pid 1034096:tid 1034367] [client 20.52.41.200:5267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/1.php7"] [unique_id "apK9sC04twRPFuquKD2sZwAAAPk"]
[Sat Aug 29 05:08:32.608921 2026] [security2:error] [pid 1028675:tid 1028897] [client 20.104.104.62:25048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fasikafresno.oncesocial.com"] [uri "/content.php"] [unique_id "apK9sNdHPfW2QFvhmL4HdAAAAFc"]
[Sat Aug 29 05:08:32.613682 2026] [security2:error] [pid 1034096:tid 1034362] [client 20.48.250.41:49369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/asax.php"] [unique_id "apK9sC04twRPFuquKD2saQAAAPQ"]
[Sat Aug 29 05:08:32.618071 2026] [security2:error] [pid 1034096:tid 1034312] [client 4.205.62.107:9190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/ccou.php"] [unique_id "apK9sC04twRPFuquKD2sagAAAMI"]
[Sat Aug 29 05:08:32.627179 2026] [security2:error] [pid 1034096:tid 1034349] [client 52.139.37.240:20916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/0x.php"] [unique_id "apK9sC04twRPFuquKD2sawAAAOc"]
[Sat Aug 29 05:08:32.631226 2026] [security2:error] [pid 1034096:tid 1034351] [client 20.48.160.90:63303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "apK9sC04twRPFuquKD2sbAAAAOk"]
[Sat Aug 29 05:08:32.634209 2026] [security2:error] [pid 1034096:tid 1034314] [client 4.205.62.107:58420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/wp-konfig.backup.php"] [unique_id "apK9sC04twRPFuquKD2sbwAAAMQ"]
[Sat Aug 29 05:08:32.634853 2026] [security2:error] [pid 1034096:tid 1034285] [client 20.104.104.62:42851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/shelp.php"] [unique_id "apK9sC04twRPFuquKD2scAAAAKc"]
[Sat Aug 29 05:08:32.646036 2026] [security2:error] [pid 1034096:tid 1034337] [client 20.100.175.163:7509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/zoom1.php"] [unique_id "apK9sC04twRPFuquKD2scQAAANs"]
[Sat Aug 29 05:08:32.662335 2026] [security2:error] [pid 1034096:tid 1034361] [client 158.23.184.117:64557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/php.php"] [unique_id "apK9sC04twRPFuquKD2scwAAAPM"]
[Sat Aug 29 05:08:32.665395 2026] [security2:error] [pid 1028675:tid 1028916] [client 20.63.81.20:56991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/drykl.php"] [unique_id "apK9sNdHPfW2QFvhmL4HdQAAAGo"]
[Sat Aug 29 05:08:32.685162 2026] [security2:error] [pid 1034096:tid 1034377] [client 20.104.49.130:57677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK9sC04twRPFuquKD2sdgAAAQM"]
[Sat Aug 29 05:08:32.685636 2026] [security2:error] [pid 1034096:tid 1034287] [client 158.23.147.79:49847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-includes/content.php"] [unique_id "apK9sC04twRPFuquKD2sdwAAAKk"]
[Sat Aug 29 05:08:32.693805 2026] [security2:error] [pid 1034096:tid 1034344] [client 20.48.250.41:38903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/155.php"] [unique_id "apK9sC04twRPFuquKD2seQAAAOI"]
[Sat Aug 29 05:08:32.720747 2026] [security2:error] [pid 1028675:tid 1028856] [client 20.48.250.41:19569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/class.php"] [unique_id "apK9sNdHPfW2QFvhmL4HdgAAAC4"]
[Sat Aug 29 05:08:32.744786 2026] [security2:error] [pid 1034096:tid 1034294] [client 40.83.93.50:1862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-configs.php"] [unique_id "apK9sC04twRPFuquKD2sewAAALA"]
[Sat Aug 29 05:08:32.747248 2026] [security2:error] [pid 1028675:tid 1028863] [client 20.48.250.41:19423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/fetch.php"] [unique_id "apK9sNdHPfW2QFvhmL4HdwAAADU"]
[Sat Aug 29 05:08:32.761147 2026] [security2:error] [pid 1034096:tid 1034316] [client 20.48.160.90:65323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/wp-aothait.php"] [unique_id "apK9sC04twRPFuquKD2sfAAAAMY"]
[Sat Aug 29 05:08:32.776049 2026] [security2:error] [pid 1034096:tid 1034315] [client 20.240.128.207:21023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/u.php"] [unique_id "apK9sC04twRPFuquKD2sfQAAAMU"]
[Sat Aug 29 05:08:32.777705 2026] [security2:error] [pid 1034096:tid 1034281] [client 20.63.219.114:16656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/wxo.php"] [unique_id "apK9sC04twRPFuquKD2sfgAAAKM"]
[Sat Aug 29 05:08:32.796709 2026] [security2:error] [pid 1034096:tid 1034350] [client 20.48.250.41:33899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/6bcwiqwj.php"] [unique_id "apK9sC04twRPFuquKD2sgQAAAOg"]
[Sat Aug 29 05:08:32.805448 2026] [security2:error] [pid 1028675:tid 1028825] [client 20.104.104.62:24760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fasikafresno.oncesocial.com"] [uri "/function/function.php"] [unique_id "apK9sNdHPfW2QFvhmL4HeQAAAA8"]
[Sat Aug 29 05:08:32.805562 2026] [security2:error] [pid 1034096:tid 1034278] [client 57.141.14.29:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/"] [unique_id "apK9sC04twRPFuquKD2sggAAAKA"]
[Sat Aug 29 05:08:32.806023 2026] [security2:error] [pid 1034096:tid 1034293] [client 158.23.184.117:53732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/term.php"] [unique_id "apK9sC04twRPFuquKD2sgwAAAK8"]
[Sat Aug 29 05:08:32.812864 2026] [security2:error] [pid 1028675:tid 1028903] [client 158.158.54.35:1803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/filemanager.php"] [unique_id "apK9sNdHPfW2QFvhmL4HegAAAF0"]
[Sat Aug 29 05:08:32.813801 2026] [security2:error] [pid 1034096:tid 1034289] [client 20.197.61.180:1409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/global.php"] [unique_id "apK9sC04twRPFuquKD2shAAAAKs"]
[Sat Aug 29 05:08:32.816326 2026] [security2:error] [pid 1034096:tid 1034328] [client 20.63.81.20:57912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/backup.php"] [unique_id "apK9sC04twRPFuquKD2shgAAANI"]
[Sat Aug 29 05:08:32.817403 2026] [security2:error] [pid 1034096:tid 1034373] [client 20.104.104.62:43099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/13ede.php"] [unique_id "apK9sC04twRPFuquKD2shwAAAP8"]
[Sat Aug 29 05:08:32.821971 2026] [security2:error] [pid 1034096:tid 1034255] [client 52.139.37.240:21165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/CDX1.php"] [unique_id "apK9sC04twRPFuquKD2siAAAAIk"]
[Sat Aug 29 05:08:32.830509 2026] [security2:error] [pid 1034096:tid 1034317] [client 20.48.250.41:58571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/06.php"] [unique_id "apK9sC04twRPFuquKD2sigAAAMc"]
[Sat Aug 29 05:08:32.874047 2026] [security2:error] [pid 1034096:tid 1034306] [client 4.205.62.107:6473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/broadcasting.php"] [unique_id "apK9sC04twRPFuquKD2sjQAAALw"]
[Sat Aug 29 05:08:32.874610 2026] [security2:error] [pid 1034096:tid 1034323] [client 20.48.250.41:19518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/8.php"] [unique_id "apK9sC04twRPFuquKD2skgAAAM0"]
[Sat Aug 29 05:08:32.896077 2026] [security2:error] [pid 1034096:tid 1034362] [client 20.48.160.90:64251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/wp-includes/index.php"] [unique_id "apK9sC04twRPFuquKD2slwAAAPQ"]
[Sat Aug 29 05:08:32.898884 2026] [security2:error] [pid 1028675:tid 1028930] [client 4.205.62.107:26657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/aws_secret_config.php"] [unique_id "apK9sNdHPfW2QFvhmL4HfgAAAHg"]
[Sat Aug 29 05:08:32.905899 2026] [security2:error] [pid 1034096:tid 1034309] [client 20.48.250.41:49287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/vx.php"] [unique_id "apK9sC04twRPFuquKD2smAAAAL8"]
[Sat Aug 29 05:08:32.909054 2026] [security2:error] [pid 1034096:tid 1034309] [client 158.23.147.79:17500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK9sC04twRPFuquKD2smQAAAL8"]
[Sat Aug 29 05:08:32.909335 2026] [security2:error] [pid 1034096:tid 1034320] [client 20.48.250.41:38790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/file.php"] [unique_id "apK9sC04twRPFuquKD2smgAAAMo"]
[Sat Aug 29 05:08:32.930766 2026] [security2:error] [pid 1034096:tid 1034356] [client 40.83.93.50:10091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/colors.php"] [unique_id "apK9sC04twRPFuquKD2soQAAAO4"]
[Sat Aug 29 05:08:32.941905 2026] [security2:error] [pid 1034096:tid 1034352] [client 158.23.147.79:17547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK9sC04twRPFuquKD2sogAAAOo"]
[Sat Aug 29 05:08:32.941951 2026] [security2:error] [pid 1034096:tid 1034340] [client 20.197.61.180:1233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/class_api.php"] [unique_id "apK9sC04twRPFuquKD2sowAAAN4"]
[Sat Aug 29 05:08:32.944418 2026] [security2:error] [pid 1034096:tid 1034346] [client 4.205.62.107:62925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/min.php"] [unique_id "apK9sC04twRPFuquKD2spAAAAOQ"]
[Sat Aug 29 05:08:32.945627 2026] [security2:error] [pid 1034096:tid 1034377] [client 20.63.81.20:57941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/indo.php"] [unique_id "apK9sC04twRPFuquKD2spQAAAQM"]
[Sat Aug 29 05:08:32.946425 2026] [security2:error] [pid 1034096:tid 1034287] [client 20.48.250.41:34245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/easy.php"] [unique_id "apK9sC04twRPFuquKD2spgAAAKk"]
[Sat Aug 29 05:08:32.946860 2026] [security2:error] [pid 1034096:tid 1034274] [client 20.48.250.41:49437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/ava.php"] [unique_id "apK9sC04twRPFuquKD2spwAAAJw"]
[Sat Aug 29 05:08:32.949420 2026] [security2:error] [pid 1034096:tid 1034307] [client 20.104.104.62:43105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/k8.php"] [unique_id "apK9sC04twRPFuquKD2sqAAAAL0"]
[Sat Aug 29 05:08:32.958145 2026] [security2:error] [pid 1034096:tid 1034349] [client 158.23.184.117:38304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/Ov-Simple1.php"] [unique_id "apK9sC04twRPFuquKD2sqQAAAOc"]
[Sat Aug 29 05:08:32.964083 2026] [security2:error] [pid 1034096:tid 1034318] [client 20.104.104.62:39358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.lifeandmemorycenter.barhashing.com"] [uri "/term.php"] [unique_id "apK9sC04twRPFuquKD2sqwAAAMg"]
[Sat Aug 29 05:08:32.966727 2026] [security2:error] [pid 1034096:tid 1034378] [client 40.83.93.50:4046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/alumni_reg.php"] [unique_id "apK9sC04twRPFuquKD2srAAAAQQ"]
[Sat Aug 29 05:08:32.975639 2026] [security2:error] [pid 1028675:tid 1028707] [remote 74.7.227.154:37794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK9sNdHPfW2QFvhmL4HgAAACho"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwp-easycart-pro%2Finc%2Famfphp%2FAmfphp%2FServices
[Sat Aug 29 05:08:32.989882 2026] [security2:error] [pid 1028675:tid 1028922] [client 158.23.147.79:35212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK9sNdHPfW2QFvhmL4HgQAAAHA"]
[Sat Aug 29 05:08:33.007782 2026] [security2:error] [pid 1028675:tid 1028880] [client 4.205.62.107:21878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/error_log.php"] [unique_id "apK9sddHPfW2QFvhmL4HggAAAEY"]
[Sat Aug 29 05:08:33.012864 2026] [security2:error] [pid 1034096:tid 1034361] [client 20.104.104.62:25044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fasikafresno.oncesocial.com"] [uri "/item.php"] [unique_id "apK9sS04twRPFuquKD2srQAAAPM"]
[Sat Aug 29 05:08:33.019034 2026] [security2:error] [pid 1028675:tid 1028932] [client 52.139.37.240:21382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/akcc.php"] [unique_id "apK9sddHPfW2QFvhmL4HgwAAAHo"]
[Sat Aug 29 05:08:33.024015 2026] [security2:error] [pid 1034096:tid 1034329] [client 20.48.250.41:19499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/0x0x.php"] [unique_id "apK9sS04twRPFuquKD2srwAAANM"]
[Sat Aug 29 05:08:33.026156 2026] [security2:error] [pid 1028675:tid 1028847] [client 20.203.141.11:2217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/gmo.php"] [unique_id "apK9sddHPfW2QFvhmL4HhAAAACU"]
[Sat Aug 29 05:08:33.028305 2026] [security2:error] [pid 1034096:tid 1034355] [client 20.104.104.62:39302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.lifeandmemorycenter.barhashing.com"] [uri "/ms-edit.php"] [unique_id "apK9sS04twRPFuquKD2ssAAAAO0"]
[Sat Aug 29 05:08:33.039974 2026] [security2:error] [pid 1028675:tid 1028835] [client 20.48.160.90:64132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/file31.php"] [unique_id "apK9sddHPfW2QFvhmL4HhQAAABk"]
[Sat Aug 29 05:08:33.047331 2026] [security2:error] [pid 1028675:tid 1028896] [client 20.52.41.200:4586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/disagraeosc.php"] [unique_id "apK9sddHPfW2QFvhmL4HhwAAAFY"]
[Sat Aug 29 05:08:33.079593 2026] [security2:error] [pid 1034096:tid 1034371] [client 20.48.250.41:19416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/global.php"] [unique_id "apK9sS04twRPFuquKD2ssQAAAP0"]
[Sat Aug 29 05:08:33.084931 2026] [security2:error] [pid 1034096:tid 1034277] [client 20.63.81.20:57925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/sign.php"] [unique_id "apK9sS04twRPFuquKD2ssgAAAJ8"]
[Sat Aug 29 05:08:33.085943 2026] [security2:error] [pid 1034096:tid 1034275] [client 20.48.250.41:58510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/class.php"] [unique_id "apK9sS04twRPFuquKD2sswAAAJ0"]
[Sat Aug 29 05:08:33.102251 2026] [security2:error] [pid 1028675:tid 1028929] [client 158.23.184.117:38276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/atomlib.php"] [unique_id "apK9sddHPfW2QFvhmL4HiAAAAHc"]
[Sat Aug 29 05:08:33.106271 2026] [security2:error] [pid 1028675:tid 1028885] [client 20.48.250.41:38887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK9sddHPfW2QFvhmL4HiQAAAEs"]
[Sat Aug 29 05:08:33.108767 2026] [security2:error] [pid 1034096:tid 1034306] [client 4.205.62.107:53165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/apikeys.php"] [unique_id "apK9sS04twRPFuquKD2stAAAALw"]
[Sat Aug 29 05:08:33.130742 2026] [security2:error] [pid 1034096:tid 1034264] [client 20.104.104.62:43379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/alog.php"] [unique_id "apK9sS04twRPFuquKD2stgAAAJI"]
[Sat Aug 29 05:08:33.137574 2026] [security2:error] [pid 1034096:tid 1034251] [client 20.100.175.163:8803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/txets.php"] [unique_id "apK9sS04twRPFuquKD2stwAAAIU"]
[Sat Aug 29 05:08:33.142254 2026] [security2:error] [pid 1034096:tid 1034299] [client 20.63.219.114:16645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/as.php"] [unique_id "apK9sS04twRPFuquKD2suAAAALU"]
[Sat Aug 29 05:08:33.143175 2026] [security2:error] [pid 1034096:tid 1034310] [client 20.104.49.130:58215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.carlosmua.com"] [uri "/t.php"] [unique_id "apK9sS04twRPFuquKD2suQAAAMA"]
[Sat Aug 29 05:08:33.165648 2026] [security2:error] [pid 1034096:tid 1034312] [client 20.104.49.130:30314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/xwx1.php"] [unique_id "apK9sS04twRPFuquKD2sugAAAMI"]
[Sat Aug 29 05:08:33.169417 2026] [security2:error] [pid 1034096:tid 1034362] [client 20.48.250.41:33858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/fresh3.php"] [unique_id "apK9sS04twRPFuquKD2suwAAAPQ"]
[Sat Aug 29 05:08:33.171465 2026] [security2:error] [pid 1034096:tid 1034359] [client 20.48.160.90:65372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/dk.php"] [unique_id "apK9sS04twRPFuquKD2svAAAAPE"]
[Sat Aug 29 05:08:33.189787 2026] [security2:error] [pid 1028675:tid 1028926] [client 20.48.250.41:19575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/166.php"] [unique_id "apK9sddHPfW2QFvhmL4HiwAAAHQ"]
[Sat Aug 29 05:08:33.208662 2026] [security2:error] [pid 1034096:tid 1034297] [client 20.104.104.62:25316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fasikafresno.oncesocial.com"] [uri "/ms-edit.php"] [unique_id "apK9sS04twRPFuquKD2svgAAALM"]
[Sat Aug 29 05:08:33.216341 2026] [security2:error] [pid 1028675:tid 1028877] [client 52.139.37.240:20484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK9sddHPfW2QFvhmL4HjQAAAEM"]
[Sat Aug 29 05:08:33.219722 2026] [security2:error] [pid 1034096:tid 1034328] [client 40.83.93.50:1082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-conflg.php"] [unique_id "apK9sS04twRPFuquKD2svwAAANI"]
[Sat Aug 29 05:08:33.226419 2026] [security2:error] [pid 1034096:tid 1034367] [client 20.104.104.62:39313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.lifeandmemorycenter.barhashing.com"] [uri "/admin.php"] [unique_id "apK9sS04twRPFuquKD2swAAAAPk"]
[Sat Aug 29 05:08:33.239385 2026] [security2:error] [pid 1034096:tid 1034325] [client 20.63.81.20:57033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/wnnjpsby.php"] [unique_id "apK9sS04twRPFuquKD2swQAAAM8"]
[Sat Aug 29 05:08:33.242310 2026] [security2:error] [pid 1034096:tid 1034301] [client 20.48.250.41:49319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/fs.php"] [unique_id "apK9sS04twRPFuquKD2swgAAALc"]
[Sat Aug 29 05:08:33.244166 2026] [security2:error] [pid 1028675:tid 1028925] [client 158.23.184.117:38280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/edit.php"] [unique_id "apK9sddHPfW2QFvhmL4HjgAAAHM"]
[Sat Aug 29 05:08:33.256822 2026] [security2:error] [pid 1028675:tid 1028881] [client 158.158.54.35:13055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-content/themes/admin.php"] [unique_id "apK9sddHPfW2QFvhmL4HjwAAAEc"]
[Sat Aug 29 05:08:33.270485 2026] [security2:error] [pid 1028675:tid 1028923] [client 171.61.160.196:8515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.160.61.171.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK9sddHPfW2QFvhmL4HkAAAAHE"]
[Sat Aug 29 05:08:33.270597 2026] [security2:error] [pid 1028675:tid 1028923] [client 171.61.160.196:8515] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK9sddHPfW2QFvhmL4HkAAAAHE"]
[Sat Aug 29 05:08:33.277471 2026] [security2:error] [pid 1034096:tid 1034353] [client 20.240.128.207:23443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/r.php"] [unique_id "apK9sS04twRPFuquKD2sxAAAAOs"]
[Sat Aug 29 05:08:33.289119 2026] [security2:error] [pid 1034096:tid 1034346] [client 158.23.147.79:6093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/radio.php"] [unique_id "apK9sS04twRPFuquKD2sxQAAAOQ"]
[Sat Aug 29 05:08:33.292634 2026] [security2:error] [pid 1034096:tid 1034287] [client 20.104.104.62:43380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/adin.php"] [unique_id "apK9sS04twRPFuquKD2sxgAAAKk"]
[Sat Aug 29 05:08:33.300769 2026] [security2:error] [pid 1028675:tid 1028900] [client 20.48.250.41:38839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/06.php"] [unique_id "apK9sddHPfW2QFvhmL4HkgAAAFo"]
[Sat Aug 29 05:08:33.306956 2026] [security2:error] [pid 1028675:tid 1028935] [client 158.23.147.79:11280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-content/cong.php"] [unique_id "apK9sddHPfW2QFvhmL4HkwAAAH0"]
[Sat Aug 29 05:08:33.315293 2026] [security2:error] [pid 1028675:tid 1028902] [client 87.219.197.128:50353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK9sddHPfW2QFvhmL4HlAAAAFw"]
[Sat Aug 29 05:08:33.315379 2026] [security2:error] [pid 1028675:tid 1028902] [client 87.219.197.128:50353] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK9sddHPfW2QFvhmL4HlAAAAFw"]
[Sat Aug 29 05:08:33.322035 2026] [security2:error] [pid 1034096:tid 1034357] [client 20.48.250.41:58570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/8.php"] [unique_id "apK9sS04twRPFuquKD2szAAAAO8"]
[Sat Aug 29 05:08:33.338487 2026] [security2:error] [pid 1028675:tid 1028887] [client 20.48.250.41:19616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/h2a2ck.php"] [unique_id "apK9sddHPfW2QFvhmL4HlgAAAE0"]
[Sat Aug 29 05:08:33.341682 2026] [security2:error] [pid 1028675:tid 1028873] [client 20.48.160.90:65331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/ta.php"] [unique_id "apK9sddHPfW2QFvhmL4HlwAAAD8"]
[Sat Aug 29 05:08:33.376727 2026] [security2:error] [pid 1034096:tid 1034363] [client 74.248.24.12:5731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/.trash7206/index.php"] [unique_id "apK9sS04twRPFuquKD2szQAAAPU"]
[Sat Aug 29 05:08:33.385966 2026] [security2:error] [pid 1028675:tid 1028843] [client 20.63.81.20:57965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/gigi.php"] [unique_id "apK9sddHPfW2QFvhmL4HmAAAACE"]
[Sat Aug 29 05:08:33.386020 2026] [security2:error] [pid 1028675:tid 1028907] [client 158.23.184.117:53709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/7.php"] [unique_id "apK9sddHPfW2QFvhmL4HmQAAAGE"]
[Sat Aug 29 05:08:33.392738 2026] [security2:error] [pid 1034096:tid 1034361] [client 20.48.250.41:49335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/ioxi.php"] [unique_id "apK9sS04twRPFuquKD2szgAAAPM"]
[Sat Aug 29 05:08:33.393402 2026] [security2:error] [pid 1034096:tid 1034253] [client 158.23.147.79:37790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK9sS04twRPFuquKD2szwAAAIc"]
[Sat Aug 29 05:08:33.399499 2026] [security2:error] [pid 1034096:tid 1034316] [client 20.104.49.130:57716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/amax.php"] [unique_id "apK9sS04twRPFuquKD2s0QAAAMY"]
[Sat Aug 29 05:08:33.405762 2026] [security2:error] [pid 1034096:tid 1034360] [client 20.104.104.62:25065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fasikafresno.oncesocial.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK9sS04twRPFuquKD2s0gAAAPI"]
[Sat Aug 29 05:08:33.406115 2026] [security2:error] [pid 1028675:tid 1028823] [client 20.48.250.41:33896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/bgymj.php"] [unique_id "apK9sddHPfW2QFvhmL4HmgAAAA0"]
[Sat Aug 29 05:08:33.411323 2026] [security2:error] [pid 1034096:tid 1034369] [client 52.139.37.240:21149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/s.php"] [unique_id "apK9sS04twRPFuquKD2s1AAAAPs"]
[Sat Aug 29 05:08:33.423064 2026] [security2:error] [pid 1028675:tid 1028866] [client 20.48.250.41:49474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/gdn.php"] [unique_id "apK9sddHPfW2QFvhmL4HmwAAADg"]
[Sat Aug 29 05:08:33.423843 2026] [security2:error] [pid 1034096:tid 1034262] [client 20.104.104.62:39317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.lifeandmemorycenter.barhashing.com"] [uri "/index.php"] [unique_id "apK9sS04twRPFuquKD2s1gAAAJA"]
[Sat Aug 29 05:08:33.440059 2026] [security2:error] [pid 1034096:tid 1034252] [client 40.83.93.50:11930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/Js.php"] [unique_id "apK9sS04twRPFuquKD2s2AAAAIY"]
[Sat Aug 29 05:08:33.442746 2026] [security2:error] [pid 1034096:tid 1034309] [client 20.48.250.41:38903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/class.php"] [unique_id "apK9sS04twRPFuquKD2s2QAAAL8"]
[Sat Aug 29 05:08:33.448542 2026] [security2:error] [pid 1028675:tid 1028884] [client 40.83.93.50:13197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/colors.php"] [unique_id "apK9sddHPfW2QFvhmL4HnAAAAEo"]
[Sat Aug 29 05:08:33.461513 2026] [security2:error] [pid 1034096:tid 1034350] [client 20.104.104.62:43370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/sf9.php"] [unique_id "apK9sS04twRPFuquKD2s2gAAAOg"]
[Sat Aug 29 05:08:33.471112 2026] [security2:error] [pid 1034096:tid 1034289] [client 20.48.250.41:19478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/error_log.php"] [unique_id "apK9sS04twRPFuquKD2s2wAAAKs"]
[Sat Aug 29 05:08:33.481266 2026] [security2:error] [pid 1034096:tid 1034266] [client 20.203.141.11:2787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/classwithtostring.php"] [unique_id "apK9sS04twRPFuquKD2s3AAAAJQ"]
[Sat Aug 29 05:08:33.503619 2026] [security2:error] [pid 1028675:tid 1028928] [client 20.52.41.200:5320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-logs.php"] [unique_id "apK9sddHPfW2QFvhmL4HngAAAHY"]
[Sat Aug 29 05:08:33.505918 2026] [http2:warn] [pid 1018003:tid 1018269] [client 57.141.14.38:38056] h2_stream(1018003-201-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:08:33.525719 2026] [security2:error] [pid 1028675:tid 1028788] [remote 74.7.227.154:37794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK9sddHPfW2QFvhmL4HoAAATGs"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwp-easycart-pro%2Finc%2Famfphp%2FAmfphp%2FCore%2FCommon
[Sat Aug 29 05:08:33.528835 2026] [security2:error] [pid 1028675:tid 1028883] [client 158.23.184.117:64522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/black.php"] [unique_id "apK9sddHPfW2QFvhmL4HoQAAAEk"]
[Sat Aug 29 05:08:33.530416 2026] [security2:error] [pid 1028675:tid 1028845] [client 158.23.147.79:26607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/packed.php"] [unique_id "apK9sddHPfW2QFvhmL4HogAAACM"]
[Sat Aug 29 05:08:33.531244 2026] [security2:error] [pid 1034096:tid 1034275] [client 20.63.81.20:57858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/info.php/new.php"] [unique_id "apK9sS04twRPFuquKD2s4wAAAJ0"]
[Sat Aug 29 05:08:33.537534 2026] [security2:error] [pid 1034096:tid 1034349] [client 20.197.61.180:14401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/update.php"] [unique_id "apK9sS04twRPFuquKD2s5AAAAOc"]
[Sat Aug 29 05:08:33.538643 2026] [security2:error] [pid 1034096:tid 1034269] [client 20.48.250.41:19437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/bootstrap.php"] [unique_id "apK9sS04twRPFuquKD2s5QAAAJc"]
[Sat Aug 29 05:08:33.545724 2026] [security2:error] [pid 1034096:tid 1034311] [client 20.48.160.90:63309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/bo.php"] [unique_id "apK9sS04twRPFuquKD2s5gAAAME"]
[Sat Aug 29 05:08:33.583665 2026] [security2:error] [pid 1034096:tid 1034330] [client 158.23.147.79:32517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/log-mama/function.php"] [unique_id "apK9sS04twRPFuquKD2s6QAAANQ"]
[Sat Aug 29 05:08:33.590082 2026] [security2:error] [pid 1034096:tid 1034362] [client 20.48.250.41:61719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/0x0x.php"] [unique_id "apK9sS04twRPFuquKD2s6wAAAPQ"]
[Sat Aug 29 05:08:33.603498 2026] [security2:error] [pid 1034096:tid 1034314] [client 20.104.49.130:53806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK9sS04twRPFuquKD2s7QAAAMQ"]
[Sat Aug 29 05:08:33.604921 2026] [security2:error] [pid 1034096:tid 1034358] [client 52.139.37.240:20761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/sagax.php"] [unique_id "apK9sS04twRPFuquKD2s7gAAAPA"]
[Sat Aug 29 05:08:33.608800 2026] [security2:error] [pid 1034096:tid 1034347] [client 20.48.250.41:19484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/403.php"] [unique_id "apK9sS04twRPFuquKD2s7wAAAOU"]
[Sat Aug 29 05:08:33.610312 2026] [security2:error] [pid 1028675:tid 1028930] [client 20.104.104.62:43334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/lte7.php"] [unique_id "apK9sddHPfW2QFvhmL4HpQAAAHg"]
[Sat Aug 29 05:08:33.621985 2026] [security2:error] [pid 1028675:tid 1028825] [client 20.104.104.62:39347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.lifeandmemorycenter.barhashing.com"] [uri "/about.php"] [unique_id "apK9sddHPfW2QFvhmL4HpgAAAA8"]
[Sat Aug 29 05:08:33.628121 2026] [security2:error] [pid 1028675:tid 1028815] [client 20.48.250.41:38843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/8.php"] [unique_id "apK9sddHPfW2QFvhmL4HpwAAAAU"]
[Sat Aug 29 05:08:33.642580 2026] [core:error] [pid 1028675:tid 1028897] [client 20.100.175.163:5562] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:33.642598 2026] [core:error] [pid 1028675:tid 1028897] [client 20.100.175.163:5562] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:33.657530 2026] [security2:error] [pid 1034096:tid 1034356] [client 20.48.250.41:33866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/ws69.php"] [unique_id "apK9sS04twRPFuquKD2s8gAAAO4"]
[Sat Aug 29 05:08:33.666332 2026] [security2:error] [pid 1034096:tid 1034306] [client 20.63.219.114:10470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/room.php"] [unique_id "apK9sS04twRPFuquKD2s9AAAALw"]
[Sat Aug 29 05:08:33.669281 2026] [security2:error] [pid 1034096:tid 1034282] [client 20.197.61.180:1466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/aksinet.php"] [unique_id "apK9sS04twRPFuquKD2s9QAAAKQ"]
[Sat Aug 29 05:08:33.671647 2026] [security2:error] [pid 1034096:tid 1034367] [client 158.23.184.117:38285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/wp-blog-header.php"] [unique_id "apK9sS04twRPFuquKD2s9gAAAPk"]
[Sat Aug 29 05:08:33.693097 2026] [security2:error] [pid 1034096:tid 1034378] [client 20.104.104.62:25049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fasikafresno.oncesocial.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK9sS04twRPFuquKD2s-AAAAQQ"]
[Sat Aug 29 05:08:33.696702 2026] [security2:error] [pid 1034096:tid 1034263] [client 40.83.93.50:1863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-content.php"] [unique_id "apK9sS04twRPFuquKD2s-gAAAJE"]
[Sat Aug 29 05:08:33.697508 2026] [security2:error] [pid 1028675:tid 1028932] [client 20.48.160.90:65282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/44.php"] [unique_id "apK9sddHPfW2QFvhmL4HqQAAAHo"]
[Sat Aug 29 05:08:33.699090 2026] [security2:error] [pid 1034096:tid 1034308] [client 158.158.54.35:34661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-admin/css/admin.php"] [unique_id "apK9sS04twRPFuquKD2s_AAAAL4"]
[Sat Aug 29 05:08:33.699127 2026] [security2:error] [pid 1034096:tid 1034294] [client 20.48.250.41:49315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/export.php"] [unique_id "apK9sS04twRPFuquKD2s-wAAALA"]
[Sat Aug 29 05:08:33.733881 2026] [security2:error] [pid 1028675:tid 1028816] [client 20.48.250.41:61776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/166.php"] [unique_id "apK9sddHPfW2QFvhmL4HqwAAAAY"]
[Sat Aug 29 05:08:33.746512 2026] [security2:error] [pid 1034096:tid 1034377] [client 52.139.37.240:19385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/ahax.php"] [unique_id "apK9sS04twRPFuquKD2s_gAAAQM"]
[Sat Aug 29 05:08:33.754718 2026] [security2:error] [pid 1034096:tid 1034253] [client 20.63.81.20:56963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/w.php"] [unique_id "apK9sS04twRPFuquKD2s_wAAAIc"]
[Sat Aug 29 05:08:33.755352 2026] [security2:error] [pid 1028675:tid 1028848] [client 20.48.250.41:19548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/cytyr.php"] [unique_id "apK9sddHPfW2QFvhmL4HrAAAACY"]
[Sat Aug 29 05:08:33.759590 2026] [security2:error] [pid 1034096:tid 1034327] [client 20.104.104.62:43084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/tanjiro.php"] [unique_id "apK9sS04twRPFuquKD2tAAAAANE"]
[Sat Aug 29 05:08:33.762790 2026] [security2:error] [pid 1028675:tid 1028814] [client 20.240.128.207:21046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-blog.php"] [unique_id "apK9sddHPfW2QFvhmL4HrQAAAAQ"]
[Sat Aug 29 05:08:33.775517 2026] [security2:error] [pid 1034096:tid 1034309] [client 4.205.62.107:58384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK9sS04twRPFuquKD2tAQAAAL8"]
[Sat Aug 29 05:08:33.815296 2026] [security2:error] [pid 1034096:tid 1034371] [client 158.23.147.79:49818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-admin/css/index.php"] [unique_id "apK9sS04twRPFuquKD2tBAAAAP0"]
[Sat Aug 29 05:08:33.826402 2026] [security2:error] [pid 1028675:tid 1028896] [client 20.104.104.62:39049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.lifeandmemorycenter.barhashing.com"] [uri "/vx.php"] [unique_id "apK9sddHPfW2QFvhmL4HrwAAAFY"]
[Sat Aug 29 05:08:33.831617 2026] [security2:error] [pid 1034096:tid 1034323] [client 20.48.250.41:38868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/0x0x.php"] [unique_id "apK9sS04twRPFuquKD2tBgAAAM0"]
[Sat Aug 29 05:08:33.832950 2026] [security2:error] [pid 1034096:tid 1034311] [client 20.48.250.41:49384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/gk.php"] [unique_id "apK9sS04twRPFuquKD2tBwAAAME"]
[Sat Aug 29 05:08:33.867641 2026] [security2:error] [pid 1034096:tid 1034272] [client 52.139.37.240:21183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/wp-content/plugins/ftde.php"] [unique_id "apK9sS04twRPFuquKD2tCQAAAJo"]
[Sat Aug 29 05:08:33.875635 2026] [security2:error] [pid 1034096:tid 1034297] [client 20.48.250.41:61779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/h2a2ck.php"] [unique_id "apK9sS04twRPFuquKD2tCwAAALM"]
[Sat Aug 29 05:08:33.875793 2026] [security2:error] [pid 1028675:tid 1028918] [client 20.48.160.90:65336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/h2.php"] [unique_id "apK9sddHPfW2QFvhmL4HsQAAAGw"]
[Sat Aug 29 05:08:33.882107 2026] [security2:error] [pid 1028675:tid 1028915] [client 20.63.81.20:57955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/x.php"] [unique_id "apK9sddHPfW2QFvhmL4HsgAAAGk"]
[Sat Aug 29 05:08:33.887667 2026] [security2:error] [pid 1028675:tid 1028821] [client 158.23.184.117:38325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/2.php"] [unique_id "apK9sddHPfW2QFvhmL4HtAAAAAs"]
[Sat Aug 29 05:08:33.888756 2026] [security2:error] [pid 1034096:tid 1034277] [client 20.104.104.62:25085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fasikafresno.oncesocial.com"] [uri "/wp-content/about.php"] [unique_id "apK9sS04twRPFuquKD2tEgAAAJ8"]
[Sat Aug 29 05:08:33.888877 2026] [security2:error] [pid 1034096:tid 1034363] [client 74.248.24.12:5463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wk/index.php"] [unique_id "apK9sS04twRPFuquKD2tEQAAAPU"]
[Sat Aug 29 05:08:33.890845 2026] [security2:error] [pid 1034096:tid 1034137] [remote 34.73.62.26:32940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.62.73.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "strangeworx.com"] [uri "/wp-login.php"] [unique_id "apK9sS04twRPFuquKD2tDAAAmw8"], referer: https://strangeworx.com/login
[Sat Aug 29 05:08:33.897440 2026] [security2:error] [pid 1034096:tid 1034315] [client 20.48.250.41:19469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/galer.php"] [unique_id "apK9sS04twRPFuquKD2tGAAAAMU"]
[Sat Aug 29 05:08:33.898472 2026] [security2:error] [pid 1034096:tid 1034315] [client 20.104.104.62:43072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/Rk41.php"] [unique_id "apK9sS04twRPFuquKD2tGQAAAMU"]
[Sat Aug 29 05:08:33.902955 2026] [security2:error] [pid 1034096:tid 1034356] [client 20.48.250.41:34255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/ccs.php"] [unique_id "apK9sS04twRPFuquKD2tHQAAAO4"]
[Sat Aug 29 05:08:33.903608 2026] [security2:error] [pid 1034096:tid 1034324] [client 20.48.250.41:65184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/f2.php"] [unique_id "apK9sS04twRPFuquKD2tHgAAAM4"]
[Sat Aug 29 05:08:33.917943 2026] [security2:error] [pid 1034096:tid 1034340] [client 4.205.62.107:53428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/66.php"] [unique_id "apK9sS04twRPFuquKD2tIQAAAN4"]
[Sat Aug 29 05:08:33.923716 2026] [security2:error] [pid 1028675:tid 1028837] [client 40.83.93.50:11958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/access.php"] [unique_id "apK9sddHPfW2QFvhmL4HtwAAABs"]
[Sat Aug 29 05:08:33.943122 2026] [security2:error] [pid 1028675:tid 1028885] [client 52.139.37.240:19268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/breads1.php"] [unique_id "apK9sddHPfW2QFvhmL4HvQAAAEs"]
[Sat Aug 29 05:08:33.950124 2026] [security2:error] [pid 1034096:tid 1034373] [client 20.203.141.11:2780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/404.php"] [unique_id "apK9sS04twRPFuquKD2tJQAAAP8"]
[Sat Aug 29 05:08:33.955131 2026] [security2:error] [pid 1034096:tid 1034266] [client 20.52.41.200:4603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-admin/css/about.php"] [unique_id "apK9sS04twRPFuquKD2tJwAAAJQ"]
[Sat Aug 29 05:08:34.004094 2026] [security2:error] [pid 1034096:tid 1034330] [client 40.83.93.50:4093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/Js.php"] [unique_id "apK9si04twRPFuquKD2tKwAAANQ"]
[Sat Aug 29 05:08:34.007610 2026] [security2:error] [pid 1034096:tid 1034298] [client 20.48.250.41:19432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/logs1.php"] [unique_id "apK9si04twRPFuquKD2tLQAAALQ"]
[Sat Aug 29 05:08:34.016746 2026] [security2:error] [pid 1028675:tid 1028927] [client 20.48.250.41:38866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/166.php"] [unique_id "apK9stdHPfW2QFvhmL4HwAAAAHU"]
[Sat Aug 29 05:08:34.021335 2026] [security2:error] [pid 1028675:tid 1028935] [client 20.104.104.62:39041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.lifeandmemorycenter.barhashing.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK9stdHPfW2QFvhmL4HwQAAAH0"]
[Sat Aug 29 05:08:34.022050 2026] [security2:error] [pid 1028675:tid 1028907] [client 4.205.62.107:6936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/aws_config.php"] [unique_id "apK9stdHPfW2QFvhmL4HwwAAAGE"]
[Sat Aug 29 05:08:34.022161 2026] [security2:error] [pid 1028675:tid 1028867] [client 20.63.219.114:15433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/class-wp-cmd.php"] [unique_id "apK9stdHPfW2QFvhmL4HwgAAADk"]
[Sat Aug 29 05:08:34.033221 2026] [security2:error] [pid 1034096:tid 1034263] [client 4.205.62.107:26649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/snq.php"] [unique_id "apK9si04twRPFuquKD2tLgAAAJE"]
[Sat Aug 29 05:08:34.033797 2026] [security2:error] [pid 1028675:tid 1028887] [client 158.23.184.117:64519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/index/function.php"] [unique_id "apK9stdHPfW2QFvhmL4HxAAAAE0"]
[Sat Aug 29 05:08:34.034250 2026] [security2:error] [pid 1034096:tid 1034276] [client 20.48.250.41:19494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/baixy.php"] [unique_id "apK9si04twRPFuquKD2tLwAAAJ4"]
[Sat Aug 29 05:08:34.040608 2026] [security2:error] [pid 1034096:tid 1034370] [client 20.63.81.20:57937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/ssla.php"] [unique_id "apK9si04twRPFuquKD2tMAAAAPw"]
[Sat Aug 29 05:08:34.051166 2026] [security2:error] [pid 1028675:tid 1028812] [client 20.104.104.62:43343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/7logs.php"] [unique_id "apK9stdHPfW2QFvhmL4HxQAAAAI"]
[Sat Aug 29 05:08:34.052955 2026] [security2:error] [pid 1028675:tid 1028884] [client 20.48.160.90:63299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/wp-content/mod/adminfuns.php"] [unique_id "apK9stdHPfW2QFvhmL4HxwAAAEo"]
[Sat Aug 29 05:08:34.054049 2026] [security2:error] [pid 1028675:tid 1028860] [client 20.104.49.130:29971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/wen.php"] [unique_id "apK9stdHPfW2QFvhmL4HyAAAADI"]
[Sat Aug 29 05:08:34.059325 2026] [security2:error] [pid 1034096:tid 1034360] [client 20.48.250.41:34273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/mar.php"] [unique_id "apK9si04twRPFuquKD2tMgAAAPI"]
[Sat Aug 29 05:08:34.063498 2026] [security2:error] [pid 1034096:tid 1034284] [client 52.139.37.240:20898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "apK9si04twRPFuquKD2tMwAAAKY"]
[Sat Aug 29 05:08:34.065170 2026] [security2:error] [pid 1034096:tid 1034262] [client 158.23.147.79:6027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-admin/dropdown.php"] [unique_id "apK9si04twRPFuquKD2tNAAAAJA"]
[Sat Aug 29 05:08:34.077650 2026] [security2:error] [pid 1028675:tid 1028844] [client 20.48.250.41:61812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/error_log.php"] [unique_id "apK9stdHPfW2QFvhmL4HyQAAACI"]
[Sat Aug 29 05:08:34.084520 2026] [security2:error] [pid 1034096:tid 1034307] [client 20.104.104.62:25508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fasikafresno.oncesocial.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "apK9si04twRPFuquKD2tNQAAAL0"]
[Sat Aug 29 05:08:34.087422 2026] [security2:error] [pid 1034096:tid 1034281] [client 4.205.62.107:62941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/saiga.php"] [unique_id "apK9si04twRPFuquKD2tNgAAAKM"]
[Sat Aug 29 05:08:34.106875 2026] [security2:error] [pid 1028675:tid 1028930] [client 158.23.147.79:17516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/goat1.php"] [unique_id "apK9stdHPfW2QFvhmL4HywAAAHg"]
[Sat Aug 29 05:08:34.140419 2026] [security2:error] [pid 1034096:tid 1034252] [client 52.139.37.240:19327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/must.php"] [unique_id "apK9si04twRPFuquKD2tPQAAAIY"]
[Sat Aug 29 05:08:34.142134 2026] [core:error] [pid 1028675:tid 1028909] [client 20.100.175.163:7496] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:34.142149 2026] [core:error] [pid 1028675:tid 1028909] [client 20.100.175.163:7496] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:34.143768 2026] [security2:error] [pid 1028675:tid 1028856] [client 158.23.147.79:35835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK9stdHPfW2QFvhmL4HzgAAAC4"]
[Sat Aug 29 05:08:34.143907 2026] [security2:error] [pid 1034096:tid 1034283] [client 20.48.250.41:49309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/inege.php"] [unique_id "apK9si04twRPFuquKD2tPgAAAKU"]
[Sat Aug 29 05:08:34.148785 2026] [security2:error] [pid 1028675:tid 1028873] [client 158.158.54.35:31671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/adminfuns.php"] [unique_id "apK9stdHPfW2QFvhmL4H0AAAAD8"]
[Sat Aug 29 05:08:34.154700 2026] [security2:error] [pid 1034096:tid 1034271] [client 4.205.62.107:22476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/phina.php"] [unique_id "apK9si04twRPFuquKD2tSQAAAJk"]
[Sat Aug 29 05:08:34.166510 2026] [security2:error] [pid 1034096:tid 1034245] [remote 34.73.62.26:32938] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "www.strangeworx.com"] [uri "/wp-config.php~"] [unique_id "apK9si04twRPFuquKD2tSwAA1ns"]
[Sat Aug 29 05:08:34.175223 2026] [security2:error] [pid 1028675:tid 1028857] [client 20.104.104.62:62975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/exec.php"] [unique_id "apK9stdHPfW2QFvhmL4H1QAAAC8"]
[Sat Aug 29 05:08:34.176292 2026] [security2:error] [pid 1034096:tid 1034258] [client 158.23.184.117:38330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/wp-admin/maint/repair.php"] [unique_id "apK9si04twRPFuquKD2tTQAAAIw"]
[Sat Aug 29 05:08:34.187464 2026] [security2:error] [pid 1028675:tid 1028824] [client 20.63.81.20:56422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "apK9stdHPfW2QFvhmL4H2QAAAA4"]
[Sat Aug 29 05:08:34.192659 2026] [security2:error] [pid 1028675:tid 1028896] [client 20.104.104.62:42842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/sf.php"] [unique_id "apK9stdHPfW2QFvhmL4H2gAAAFY"]
[Sat Aug 29 05:08:34.198049 2026] [security2:error] [pid 1034096:tid 1034152] [remote 34.73.62.26:32938] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "www.strangeworx.com"] [uri "/wp-config.old"] [unique_id "apK9si04twRPFuquKD2tTwAA1h4"]
[Sat Aug 29 05:08:34.199615 2026] [security2:error] [pid 1034096:tid 1034282] [client 20.48.250.41:19528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/ava.php"] [unique_id "apK9si04twRPFuquKD2tUAAAAKQ"]
[Sat Aug 29 05:08:34.203609 2026] [security2:error] [pid 1034096:tid 1034321] [client 20.48.250.41:33871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/ccu.php"] [unique_id "apK9si04twRPFuquKD2tUQAAAMs"]
[Sat Aug 29 05:08:34.210029 2026] [security2:error] [pid 1034096:tid 1034373] [client 20.48.160.90:65333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/sao.php"] [unique_id "apK9si04twRPFuquKD2tUgAAAP8"]
[Sat Aug 29 05:08:34.215657 2026] [security2:error] [pid 1034096:tid 1034314] [client 20.104.104.62:39342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.lifeandmemorycenter.barhashing.com"] [uri "/goods.php"] [unique_id "apK9si04twRPFuquKD2tUwAAAMQ"]
[Sat Aug 29 05:08:34.250908 2026] [security2:error] [pid 1028675:tid 1028902] [client 4.205.62.107:53264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/motu.php"] [unique_id "apK9stdHPfW2QFvhmL4H3QAAAFw"]
[Sat Aug 29 05:08:34.253379 2026] [security2:error] [pid 1028675:tid 1028863] [client 20.240.128.207:7396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/xxx.php"] [unique_id "apK9stdHPfW2QFvhmL4H3gAAADU"]
[Sat Aug 29 05:08:34.254764 2026] [security2:error] [pid 1034096:tid 1034353] [client 20.104.49.130:60764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/run.php"] [unique_id "apK9si04twRPFuquKD2tVgAAAOs"]
[Sat Aug 29 05:08:34.256778 2026] [security2:error] [pid 1034096:tid 1034375] [client 20.48.250.41:38820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/h2a2ck.php"] [unique_id "apK9si04twRPFuquKD2tVwAAAQE"]
[Sat Aug 29 05:08:34.279876 2026] [security2:error] [pid 1034096:tid 1034263] [client 20.48.250.41:49363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/wp-link10.php"] [unique_id "apK9si04twRPFuquKD2tWgAAAJE"]
[Sat Aug 29 05:08:34.280325 2026] [security2:error] [pid 1028675:tid 1028811] [client 20.197.61.180:1274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/blog.php"] [unique_id "apK9stdHPfW2QFvhmL4H4wAAAAE"]
[Sat Aug 29 05:08:34.280607 2026] [security2:error] [pid 1034096:tid 1034328] [client 20.48.250.41:49455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/grsiuk.php"] [unique_id "apK9si04twRPFuquKD2tXAAAANI"]
[Sat Aug 29 05:08:34.306114 2026] [security2:error] [pid 1034096:tid 1034327] [client 20.104.104.62:65254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/dbc.php"] [unique_id "apK9si04twRPFuquKD2tXgAAANE"]
[Sat Aug 29 05:08:34.319547 2026] [security2:error] [pid 1028675:tid 1028866] [client 158.23.147.79:17412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/wp-content/cong.php"] [unique_id "apK9stdHPfW2QFvhmL4H5QAAADg"]
[Sat Aug 29 05:08:34.324320 2026] [security2:error] [pid 1034096:tid 1034284] [client 20.104.104.62:43123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/super.php"] [unique_id "apK9si04twRPFuquKD2tYAAAAKY"]
[Sat Aug 29 05:08:34.326554 2026] [security2:error] [pid 1034096:tid 1034301] [client 20.63.81.20:57058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/wp-aothait.php"] [unique_id "apK9si04twRPFuquKD2tYQAAALc"]
[Sat Aug 29 05:08:34.326556 2026] [security2:error] [pid 1028675:tid 1028923] [client 52.139.37.240:20914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/z.php"] [unique_id "apK9stdHPfW2QFvhmL4H5wAAAHE"]
[Sat Aug 29 05:08:34.337487 2026] [security2:error] [pid 1034096:tid 1034330] [client 52.139.37.240:19272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/up.php"] [unique_id "apK9si04twRPFuquKD2tYgAAANQ"]
[Sat Aug 29 05:08:34.355829 2026] [security2:error] [pid 1034096:tid 1034325] [client 20.48.250.41:19519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/gdn.php"] [unique_id "apK9si04twRPFuquKD2tZAAAAM8"]
[Sat Aug 29 05:08:34.359692 2026] [security2:error] [pid 1034096:tid 1034155] [remote 34.73.62.26:32938] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "www.strangeworx.com"] [uri "/wp-config.php.swp"] [unique_id "apK9si04twRPFuquKD2tZgAApyE"]
[Sat Aug 29 05:08:34.374827 2026] [security2:error] [pid 1028675:tid 1028862] [client 20.48.160.90:64244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/dapa.php"] [unique_id "apK9stdHPfW2QFvhmL4H6QAAADQ"]
[Sat Aug 29 05:08:34.376749 2026] [security2:error] [pid 1028675:tid 1028851] [client 158.23.184.117:64517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK9stdHPfW2QFvhmL4H6gAAACk"]
[Sat Aug 29 05:08:34.389167 2026] [security2:error] [pid 1034096:tid 1034357] [client 20.63.219.114:10576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/disagreed.php"] [unique_id "apK9si04twRPFuquKD2taQAAAO8"]
[Sat Aug 29 05:08:34.397033 2026] [security2:error] [pid 1034096:tid 1034350] [client 158.23.147.79:6066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK9si04twRPFuquKD2tagAAAOg"]
[Sat Aug 29 05:08:34.403038 2026] [security2:error] [pid 1034096:tid 1034355] [client 20.52.41.200:4567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/system_log.php"] [unique_id "apK9si04twRPFuquKD2tawAAAO0"]
[Sat Aug 29 05:08:34.407525 2026] [security2:error] [pid 1028675:tid 1028916] [client 40.83.93.50:1870] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.twrebar.com"] [uri "/wp-content/1.php"] [unique_id "apK9stdHPfW2QFvhmL4H6wAAAGo"]
[Sat Aug 29 05:08:34.407604 2026] [security2:error] [pid 1028675:tid 1028916] [client 40.83.93.50:1870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-content/1.php"] [unique_id "apK9stdHPfW2QFvhmL4H6wAAAGo"]
[Sat Aug 29 05:08:34.408116 2026] [security2:error] [pid 1034096:tid 1034337] [client 20.104.104.62:39354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.lifeandmemorycenter.barhashing.com"] [uri "/wp-access.php"] [unique_id "apK9si04twRPFuquKD2tbAAAANs"]
[Sat Aug 29 05:08:34.408271 2026] [security2:error] [pid 1034096:tid 1034319] [client 74.248.24.12:37873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/admin.php"] [unique_id "apK9si04twRPFuquKD2tbQAAAMk"]
[Sat Aug 29 05:08:34.412695 2026] [security2:error] [pid 1034096:tid 1034317] [client 20.197.61.180:1437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/alfa-rex1.php"] [unique_id "apK9si04twRPFuquKD2tbgAAAMc"]
[Sat Aug 29 05:08:34.417769 2026] [security2:error] [pid 1028675:tid 1028828] [client 20.203.141.11:11636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/php.php"] [unique_id "apK9stdHPfW2QFvhmL4H7AAAABI"]
[Sat Aug 29 05:08:34.437275 2026] [security2:error] [pid 1028675:tid 1028914] [client 20.104.104.62:62971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/wp-wlx.php"] [unique_id "apK9stdHPfW2QFvhmL4H7QAAAGg"]
[Sat Aug 29 05:08:34.444008 2026] [security2:error] [pid 1034096:tid 1034348] [client 20.48.250.41:49399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/ww.php"] [unique_id "apK9si04twRPFuquKD2tcgAAAOY"]
[Sat Aug 29 05:08:34.456255 2026] [security2:error] [pid 1034096:tid 1034371] [client 20.63.81.20:63099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/wp-includes/index.php"] [unique_id "apK9si04twRPFuquKD2tcwAAAP0"]
[Sat Aug 29 05:08:34.463091 2026] [security2:error] [pid 1034096:tid 1034275] [client 20.104.104.62:43333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/lufix1.php"] [unique_id "apK9si04twRPFuquKD2tdAAAAJ0"]
[Sat Aug 29 05:08:34.467795 2026] [security2:error] [pid 1034096:tid 1034159] [remote 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK9si04twRPFuquKD2teAAAwiU"]
[Sat Aug 29 05:08:34.467981 2026] [security2:error] [pid 1034096:tid 1034312] [client 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK9si04twRPFuquKD2teAAAwiU"]
[Sat Aug 29 05:08:34.468140 2026] [security2:error] [pid 1034096:tid 1034161] [remote 40.77.167.35:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.167.77.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantsfans.net"] [uri "/message_board/index.php"] [unique_id "apK9si04twRPFuquKD2teQAAvyc"]
[Sat Aug 29 05:08:34.476749 2026] [security2:error] [pid 1028675:tid 1028845] [client 20.48.250.41:34272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/ak.php"] [unique_id "apK9stdHPfW2QFvhmL4H7gAAACM"]
[Sat Aug 29 05:08:34.478729 2026] [security2:error] [pid 1028675:tid 1028812] [client 40.83.93.50:12506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/access.php"] [unique_id "apK9stdHPfW2QFvhmL4H7wAAAAI"]
[Sat Aug 29 05:08:34.493565 2026] [security2:error] [pid 1034096:tid 1034298] [client 40.83.93.50:11923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/classsmtps.php"] [unique_id "apK9si04twRPFuquKD2tggAAALQ"]
[Sat Aug 29 05:08:34.496116 2026] [security2:error] [pid 1034096:tid 1034271] [client 20.48.250.41:19491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/f2.php"] [unique_id "apK9si04twRPFuquKD2tgwAAAJk"]
[Sat Aug 29 05:08:34.498519 2026] [security2:error] [pid 1028675:tid 1028898] [client 158.23.147.79:11306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK9stdHPfW2QFvhmL4H8gAAAFg"]
[Sat Aug 29 05:08:34.513283 2026] [security2:error] [pid 1028675:tid 1028930] [client 20.48.160.90:64212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/wp-content/l.php"] [unique_id "apK9stdHPfW2QFvhmL4H9QAAAHg"]
[Sat Aug 29 05:08:34.519749 2026] [security2:error] [pid 1034096:tid 1034310] [client 158.23.184.117:64512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/xda.php"] [unique_id "apK9si04twRPFuquKD2thgAAAMA"]
[Sat Aug 29 05:08:34.521104 2026] [security2:error] [pid 1034096:tid 1034291] [client 52.139.37.240:20883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/f35.php"] [unique_id "apK9si04twRPFuquKD2thwAAAK0"]
[Sat Aug 29 05:08:34.523612 2026] [security2:error] [pid 1034096:tid 1034349] [client 45.83.178.43:64100] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "goodtogo.store"] [uri "/webapp/xmlrpc.php"] [unique_id "apK9si04twRPFuquKD2tLAAAAOc"]
[Sat Aug 29 05:08:34.565787 2026] [security2:error] [pid 1034096:tid 1034274] [client 20.104.104.62:46460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/attack.php"] [unique_id "apK9si04twRPFuquKD2tigAAAJw"]
[Sat Aug 29 05:08:34.594089 2026] [security2:error] [pid 1034096:tid 1034344] [client 20.48.250.41:49395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/w1px.php"] [unique_id "apK9si04twRPFuquKD2tjQAAAOI"]
[Sat Aug 29 05:08:34.595335 2026] [security2:error] [pid 1034096:tid 1034289] [client 158.158.54.35:31636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/goods.php"] [unique_id "apK9si04twRPFuquKD2tjgAAAKs"]
[Sat Aug 29 05:08:34.595784 2026] [security2:error] [pid 1034096:tid 1034353] [client 20.48.250.41:38827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/error_log.php"] [unique_id "apK9si04twRPFuquKD2tjwAAAOs"]
[Sat Aug 29 05:08:34.598844 2026] [security2:error] [pid 1028675:tid 1028856] [client 20.63.81.20:57981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/file31.php"] [unique_id "apK9stdHPfW2QFvhmL4H-AAAAC4"]
[Sat Aug 29 05:08:34.600876 2026] [security2:error] [pid 1034096:tid 1034367] [client 20.104.104.62:39327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.lifeandmemorycenter.barhashing.com"] [uri "/autoload_classmap/function.php"] [unique_id "apK9si04twRPFuquKD2tkAAAAPk"]
[Sat Aug 29 05:08:34.614752 2026] [security2:error] [pid 1034096:tid 1034345] [client 20.104.104.62:24763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fasikafresno.oncesocial.com"] [uri "/xmlrpc.php"] [unique_id "apK9si04twRPFuquKD2tkQAAAOM"]
[Sat Aug 29 05:08:34.614811 2026] [security2:error] [pid 1034096:tid 1034363] [client 20.48.250.41:58586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/403.php"] [unique_id "apK9si04twRPFuquKD2tkgAAAPU"]
[Sat Aug 29 05:08:34.624912 2026] [security2:error] [pid 1034096:tid 1034328] [client 20.104.104.62:43362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/hack.php"] [unique_id "apK9si04twRPFuquKD2tkwAAANI"]
[Sat Aug 29 05:08:34.625949 2026] [security2:error] [pid 1028675:tid 1028849] [client 20.48.250.41:19493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/grsiuk.php"] [unique_id "apK9stdHPfW2QFvhmL4H-QAAACc"]
[Sat Aug 29 05:08:34.627676 2026] [security2:error] [pid 1034096:tid 1034358] [client 52.139.37.240:19346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/wp-content/155.php"] [unique_id "apK9si04twRPFuquKD2tlAAAAPA"]
[Sat Aug 29 05:08:34.635516 2026] [security2:error] [pid 1034096:tid 1034323] [client 20.100.175.163:5528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-content/themes/about.php"] [unique_id "apK9si04twRPFuquKD2tlQAAAM0"]
[Sat Aug 29 05:08:34.650195 2026] [security2:error] [pid 1028675:tid 1028840] [client 20.48.160.90:63341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/wp-admin/w.php"] [unique_id "apK9stdHPfW2QFvhmL4H-gAAAB4"]
[Sat Aug 29 05:08:34.651328 2026] [security2:error] [pid 1028675:tid 1028903] [client 103.185.242.143:52984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK9stdHPfW2QFvhmL4H-wAAAF0"]
[Sat Aug 29 05:08:34.651457 2026] [security2:error] [pid 1028675:tid 1028903] [client 103.185.242.143:52984] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK9stdHPfW2QFvhmL4H-wAAAF0"]
[Sat Aug 29 05:08:34.663242 2026] [security2:error] [pid 1034096:tid 1034308] [client 158.23.184.117:53715] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "doozytrack.com"] [uri "/1.php"] [unique_id "apK9si04twRPFuquKD2tlgAAAL4"]
[Sat Aug 29 05:08:34.663327 2026] [security2:error] [pid 1034096:tid 1034308] [client 158.23.184.117:53715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/1.php"] [unique_id "apK9si04twRPFuquKD2tlgAAAL4"]
[Sat Aug 29 05:08:34.664524 2026] [security2:error] [pid 1034096:tid 1034318] [client 20.48.250.41:49523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/wp-scr1pts.php"] [unique_id "apK9si04twRPFuquKD2tlwAAAMg"]
[Sat Aug 29 05:08:34.690177 2026] [security2:error] [pid 1034096:tid 1034350] [client 158.23.147.79:32669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/bk/index.php"] [unique_id "apK9si04twRPFuquKD2tmAAAAOg"]
[Sat Aug 29 05:08:34.701703 2026] [security2:error] [pid 1034096:tid 1034319] [client 20.104.104.62:62925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/file66.php"] [unique_id "apK9si04twRPFuquKD2tmQAAAMk"]
[Sat Aug 29 05:08:34.716270 2026] [security2:error] [pid 1028675:tid 1028896] [client 52.139.37.240:20881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/file61.php"] [unique_id "apK9stdHPfW2QFvhmL4H_AAAAFY"]
[Sat Aug 29 05:08:34.742477 2026] [security2:error] [pid 1028675:tid 1028922] [client 20.63.81.20:57863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/dk.php"] [unique_id "apK9stdHPfW2QFvhmL4H_gAAAHA"]
[Sat Aug 29 05:08:34.751731 2026] [security2:error] [pid 1034096:tid 1034309] [client 20.48.250.41:49407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/to.php"] [unique_id "apK9si04twRPFuquKD2tnQAAAL8"]
[Sat Aug 29 05:08:34.755788 2026] [security2:error] [pid 1028675:tid 1028858] [client 20.48.250.41:19509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/wp-scr1pts.php"] [unique_id "apK9stdHPfW2QFvhmL4IAAAAADA"]
[Sat Aug 29 05:08:34.774901 2026] [security2:error] [pid 1028675:tid 1028927] [client 20.104.104.62:42834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/155.php"] [unique_id "apK9stdHPfW2QFvhmL4IAQAAAHU"]
[Sat Aug 29 05:08:34.781727 2026] [security2:error] [pid 1028675:tid 1028813] [client 20.48.160.90:64242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/wp-content/k.php"] [unique_id "apK9stdHPfW2QFvhmL4IAwAAAAM"]
[Sat Aug 29 05:08:34.798902 2026] [security2:error] [pid 1034096:tid 1034348] [client 20.104.104.62:39346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.lifeandmemorycenter.barhashing.com"] [uri "/ms.php"] [unique_id "apK9si04twRPFuquKD2tqQAAAOY"]
[Sat Aug 29 05:08:34.806330 2026] [security2:error] [pid 1034096:tid 1034291] [client 20.48.250.41:33876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/lib.php"] [unique_id "apK9si04twRPFuquKD2tqwAAAK0"]
[Sat Aug 29 05:08:34.807439 2026] [security2:error] [pid 1028675:tid 1028902] [client 158.23.184.117:38297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK9stdHPfW2QFvhmL4IBAAAAFw"]
[Sat Aug 29 05:08:34.823569 2026] [security2:error] [pid 1034096:tid 1034278] [client 20.63.219.114:10602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/class_api.php"] [unique_id "apK9si04twRPFuquKD2trQAAAKA"]
[Sat Aug 29 05:08:34.829393 2026] [security2:error] [pid 1034096:tid 1034283] [client 52.139.37.240:19322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/wp-update.php"] [unique_id "apK9si04twRPFuquKD2trgAAAKU"]
[Sat Aug 29 05:08:34.834550 2026] [security2:error] [pid 1034096:tid 1034375] [client 173.239.211.231:44873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 231.211.239.173.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "currieinsurance.com"] [uri "/wp-login.php"] [unique_id "apK9si04twRPFuquKD2tqgAAAQE"]
[Sat Aug 29 05:08:34.835989 2026] [security2:error] [pid 1034096:tid 1034282] [client 20.104.104.62:56519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/zafir1.php"] [unique_id "apK9si04twRPFuquKD2trwAAAKQ"]
[Sat Aug 29 05:08:34.836491 2026] [security2:error] [pid 1028675:tid 1028879] [client 102.253.10.25:26474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.10.253.102.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gavirestaurant.com"] [uri "/xmlrpc.php"] [unique_id "apK9stdHPfW2QFvhmL4IBgAAAEU"]
[Sat Aug 29 05:08:34.836593 2026] [security2:error] [pid 1028675:tid 1028879] [client 102.253.10.25:26474] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gavirestaurant.com"] [uri "/xmlrpc.php"] [unique_id "apK9stdHPfW2QFvhmL4IBgAAAEU"]
[Sat Aug 29 05:08:34.840981 2026] [security2:error] [pid 1034096:tid 1034296] [client 20.52.41.200:5250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/24.php"] [unique_id "apK9si04twRPFuquKD2tsAAAALI"]
[Sat Aug 29 05:08:34.851774 2026] [security2:error] [pid 1034096:tid 1034329] [client 20.48.250.41:61777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/cytyr.php"] [unique_id "apK9si04twRPFuquKD2tsQAAANM"]
[Sat Aug 29 05:08:34.877414 2026] [security2:error] [pid 1028675:tid 1028877] [client 20.104.104.62:24725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fasikafresno.oncesocial.com"] [uri "/test1.php"] [unique_id "apK9stdHPfW2QFvhmL4ICQAAAEM"]
[Sat Aug 29 05:08:34.883221 2026] [security2:error] [pid 1034096:tid 1034293] [client 20.203.141.11:26909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/init.php"] [unique_id "apK9si04twRPFuquKD2tswAAAK8"]
[Sat Aug 29 05:08:34.888642 2026] [security2:error] [pid 1034096:tid 1034332] [client 20.63.81.20:57940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/ta.php"] [unique_id "apK9si04twRPFuquKD2ttQAAANY"]
[Sat Aug 29 05:08:34.898350 2026] [security2:error] [pid 1028675:tid 1028866] [client 20.48.250.41:38889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/403.php"] [unique_id "apK9stdHPfW2QFvhmL4ICgAAADg"]
[Sat Aug 29 05:08:34.911711 2026] [security2:error] [pid 1028675:tid 1028923] [client 20.48.250.41:49285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/thui.php"] [unique_id "apK9stdHPfW2QFvhmL4ICwAAAHE"]
[Sat Aug 29 05:08:34.911990 2026] [security2:error] [pid 1034096:tid 1034373] [client 52.139.37.240:20794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/mah.php"] [unique_id "apK9si04twRPFuquKD2ttgAAAP8"]
[Sat Aug 29 05:08:34.912535 2026] [security2:error] [pid 1034096:tid 1034281] [client 20.104.104.62:42816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/mcd.php"] [unique_id "apK9si04twRPFuquKD2ttwAAAKM"]
[Sat Aug 29 05:08:34.925338 2026] [security2:error] [pid 1034096:tid 1034339] [client 74.248.24.12:37871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/php8.php"] [unique_id "apK9si04twRPFuquKD2twAAAAN0"]
[Sat Aug 29 05:08:34.928298 2026] [security2:error] [pid 1028675:tid 1028885] [client 4.205.62.107:51467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/nlnub.php"] [unique_id "apK9stdHPfW2QFvhmL4IDAAAAEs"]
[Sat Aug 29 05:08:34.948607 2026] [security2:error] [pid 1028675:tid 1028844] [client 20.48.160.90:65391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/os.php"] [unique_id "apK9stdHPfW2QFvhmL4IDQAAACI"]
[Sat Aug 29 05:08:34.960677 2026] [security2:error] [pid 1034096:tid 1034258] [client 40.83.93.50:13247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/classsmtps.php"] [unique_id "apK9si04twRPFuquKD2txQAAAIw"]
[Sat Aug 29 05:08:34.970827 2026] [security2:error] [pid 1028675:tid 1028886] [client 20.104.104.62:2864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/console.php"] [unique_id "apK9stdHPfW2QFvhmL4IEAAAAEw"]
[Sat Aug 29 05:08:35.011201 2026] [security2:error] [pid 1034096:tid 1034252] [client 20.197.61.180:12316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/bypass.php"] [unique_id "apK9sy04twRPFuquKD2tygAAAIY"]
[Sat Aug 29 05:08:35.011797 2026] [security2:error] [pid 1034096:tid 1034314] [client 40.83.93.50:18853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/contentloader1.php"] [unique_id "apK9sy04twRPFuquKD2tywAAAMQ"]
[Sat Aug 29 05:08:35.017593 2026] [security2:error] [pid 1028675:tid 1028883] [client 158.23.184.117:64526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/wp-includes/admin.php"] [unique_id "apK9s9dHPfW2QFvhmL4IEwAAAEk"]
[Sat Aug 29 05:08:35.018570 2026] [security2:error] [pid 1034096:tid 1034374] [client 40.83.93.50:21284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-content/about.php"] [unique_id "apK9sy04twRPFuquKD2tzgAAAQA"]
[Sat Aug 29 05:08:35.024056 2026] [security2:error] [pid 1034096:tid 1034263] [client 52.139.37.240:18841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/xmrlpc.php"] [unique_id "apK9sy04twRPFuquKD2tzwAAAJE"]
[Sat Aug 29 05:08:35.047266 2026] [security2:error] [pid 1034096:tid 1034354] [client 20.48.250.41:38793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/cytyr.php"] [unique_id "apK9sy04twRPFuquKD2t0AAAAOw"]
[Sat Aug 29 05:08:35.049772 2026] [security2:error] [pid 1028675:tid 1028812] [client 20.63.81.20:57964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/bo.php"] [unique_id "apK9s9dHPfW2QFvhmL4IFAAAAAI"]
[Sat Aug 29 05:08:35.051735 2026] [security2:error] [pid 1034096:tid 1034289] [client 158.158.54.35:31542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/css.php"] [unique_id "apK9sy04twRPFuquKD2t0QAAAKs"]
[Sat Aug 29 05:08:35.052994 2026] [security2:error] [pid 1028675:tid 1028926] [client 4.205.62.107:8717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/wp-act.php"] [unique_id "apK9s9dHPfW2QFvhmL4IFQAAAHQ"]
[Sat Aug 29 05:08:35.056260 2026] [security2:error] [pid 1034096:tid 1034355] [client 20.48.250.41:19536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/num.php"] [unique_id "apK9sy04twRPFuquKD2t0gAAAO0"]
[Sat Aug 29 05:08:35.058604 2026] [security2:error] [pid 1028675:tid 1028815] [client 20.104.104.62:43095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/waw.php"] [unique_id "apK9s9dHPfW2QFvhmL4IFgAAAAU"]
[Sat Aug 29 05:08:35.060775 2026] [security2:error] [pid 1034096:tid 1034337] [client 20.48.250.41:49377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/Jcrop.php"] [unique_id "apK9sy04twRPFuquKD2t0wAAANs"]
[Sat Aug 29 05:08:35.073459 2026] [security2:error] [pid 1034096:tid 1034308] [client 20.104.104.62:25501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fasikafresno.oncesocial.com"] [uri "/upload.php"] [unique_id "apK9sy04twRPFuquKD2t1gAAAL4"]
[Sat Aug 29 05:08:35.087064 2026] [security2:error] [pid 1034096:tid 1034295] [client 20.48.250.41:33862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/wp-style.php"] [unique_id "apK9sy04twRPFuquKD2t2gAAALE"]
[Sat Aug 29 05:08:35.106736 2026] [security2:error] [pid 1028675:tid 1028901] [client 20.104.104.62:62922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/blnux.php"] [unique_id "apK9s9dHPfW2QFvhmL4IFwAAAFs"]
[Sat Aug 29 05:08:35.122677 2026] [security2:error] [pid 1034096:tid 1034298] [client 20.48.160.90:64146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/htio.php"] [unique_id "apK9sy04twRPFuquKD2t3AAAALQ"]
[Sat Aug 29 05:08:35.123259 2026] [security2:error] [pid 1034096:tid 1034266] [client 52.139.37.240:20901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/mini.php"] [unique_id "apK9sy04twRPFuquKD2t4AAAAJQ"]
[Sat Aug 29 05:08:35.129232 2026] [security2:error] [pid 1034096:tid 1034268] [client 20.197.61.180:14451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/headerg.php"] [unique_id "apK9sy04twRPFuquKD2t4QAAAJY"]
[Sat Aug 29 05:08:35.137623 2026] [security2:error] [pid 1034096:tid 1034328] [client 20.100.175.163:7045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK9sy04twRPFuquKD2t4gAAANI"]
[Sat Aug 29 05:08:35.143751 2026] [security2:error] [pid 1034096:tid 1034284] [client 20.240.128.207:21001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/tool.php"] [unique_id "apK9sy04twRPFuquKD2t5AAAAKY"]
[Sat Aug 29 05:08:35.158698 2026] [security2:error] [pid 1034096:tid 1034320] [client 4.205.62.107:6924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/dialog.php"] [unique_id "apK9sy04twRPFuquKD2t5gAAAMo"]
[Sat Aug 29 05:08:35.162812 2026] [security2:error] [pid 1034096:tid 1034359] [client 158.23.184.117:53725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/wp-themes.php"] [unique_id "apK9sy04twRPFuquKD2t5wAAAPE"]
[Sat Aug 29 05:08:35.183918 2026] [security2:error] [pid 1034096:tid 1034310] [client 4.205.62.107:25921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/wp-access.php"] [unique_id "apK9sy04twRPFuquKD2t6AAAAMA"]
[Sat Aug 29 05:08:35.193352 2026] [security2:error] [pid 1028675:tid 1028824] [client 20.63.81.20:57917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/44.php"] [unique_id "apK9s9dHPfW2QFvhmL4IGQAAAA4"]
[Sat Aug 29 05:08:35.193712 2026] [security2:error] [pid 1028675:tid 1028840] [client 20.48.250.41:49363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/ws58.php"] [unique_id "apK9s9dHPfW2QFvhmL4IGgAAAB4"]
[Sat Aug 29 05:08:35.200811 2026] [security2:error] [pid 1028675:tid 1028903] [client 20.48.250.41:19652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/a4.php"] [unique_id "apK9s9dHPfW2QFvhmL4IGwAAAF0"]
[Sat Aug 29 05:08:35.213553 2026] [security2:error] [pid 1034096:tid 1034296] [client 20.104.104.62:43109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/x23.php"] [unique_id "apK9sy04twRPFuquKD2t7wAAALI"]
[Sat Aug 29 05:08:35.224818 2026] [security2:error] [pid 1028675:tid 1028897] [client 20.104.104.62:39297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.lifeandmemorycenter.barhashing.com"] [uri "/adminfuns.php"] [unique_id "apK9s9dHPfW2QFvhmL4IHAAAAFc"]
[Sat Aug 29 05:08:35.226001 2026] [security2:error] [pid 1034096:tid 1034329] [client 4.205.62.107:62760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/ammika.php"] [unique_id "apK9sy04twRPFuquKD2t8AAAANM"]
[Sat Aug 29 05:08:35.231938 2026] [security2:error] [pid 1034096:tid 1034319] [client 20.63.219.114:18545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/aksinet.php"] [unique_id "apK9sy04twRPFuquKD2t8QAAAMk"]
[Sat Aug 29 05:08:35.233428 2026] [security2:error] [pid 1028675:tid 1028847] [client 52.139.37.240:18821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/about/function.php"] [unique_id "apK9s9dHPfW2QFvhmL4IHQAAACU"]
[Sat Aug 29 05:08:35.238784 2026] [security2:error] [pid 1034096:tid 1034342] [client 20.104.104.62:65277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/pentest.php"] [unique_id "apK9sy04twRPFuquKD2t9AAAAOA"]
[Sat Aug 29 05:08:35.240957 2026] [security2:error] [pid 1028675:tid 1028872] [client 20.48.250.41:38872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/galer.php"] [unique_id "apK9s9dHPfW2QFvhmL4IHgAAAD4"]
[Sat Aug 29 05:08:35.241825 2026] [security2:error] [pid 1034096:tid 1034344] [client 20.48.250.41:33907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/browse.php"] [unique_id "apK9sy04twRPFuquKD2t9QAAAOI"]
[Sat Aug 29 05:08:35.247019 2026] [security2:error] [pid 1028675:tid 1028825] [client 158.23.147.79:35204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/ans.php"] [unique_id "apK9s9dHPfW2QFvhmL4IHwAAAA8"]
[Sat Aug 29 05:08:35.261252 2026] [security2:error] [pid 1034096:tid 1034251] [client 20.48.250.41:61760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/galer.php"] [unique_id "apK9sy04twRPFuquKD2t9wAAAIU"]
[Sat Aug 29 05:08:35.267908 2026] [security2:error] [pid 1028675:tid 1028915] [client 20.48.160.90:65332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/dev.php"] [unique_id "apK9s9dHPfW2QFvhmL4IIAAAAGk"]
[Sat Aug 29 05:08:35.284225 2026] [security2:error] [pid 1034096:tid 1034226] [remote 34.73.62.26:32940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.62.73.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "strangeworx.com"] [uri "/wp-login.php"] [unique_id "apK9sy04twRPFuquKD2t_wAAn2g"], referer: https://strangeworx.com/wp-admin/
[Sat Aug 29 05:08:35.284238 2026] [security2:error] [pid 1034096:tid 1034194] [remote 34.73.62.26:32940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.62.73.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "strangeworx.com"] [uri "/wp-login.php"] [unique_id "apK9sy04twRPFuquKD2uAAAAn0g"], referer: https://strangeworx.com/wp-admin/
[Sat Aug 29 05:08:35.292337 2026] [security2:error] [pid 1034096:tid 1034290] [client 4.205.62.107:21934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/koiy.php"] [unique_id "apK9sy04twRPFuquKD2uAgAAAKw"]
[Sat Aug 29 05:08:35.297644 2026] [security2:error] [pid 1034096:tid 1034222] [remote 93.123.109.228:60596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/.env.php"] [unique_id "apK9sy04twRPFuquKD2uBgAA-WQ"]
[Sat Aug 29 05:08:35.310136 2026] [security2:error] [pid 1028675:tid 1028929] [client 158.23.184.117:53008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/adminfuns.php/.well-known/acme-challenge/file.php"] [unique_id "apK9s9dHPfW2QFvhmL4IIgAAAHc"]
[Sat Aug 29 05:08:35.318385 2026] [security2:error] [pid 1034096:tid 1034368] [client 52.139.37.240:21136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/v.php"] [unique_id "apK9sy04twRPFuquKD2uCwAAAPo"]
[Sat Aug 29 05:08:35.326064 2026] [security2:error] [pid 1028675:tid 1028863] [client 20.48.250.41:49334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/xs.php"] [unique_id "apK9s9dHPfW2QFvhmL4IIwAAADU"]
[Sat Aug 29 05:08:35.333695 2026] [security2:error] [pid 1034096:tid 1034255] [client 20.63.81.20:62996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/h2.php"] [unique_id "apK9sy04twRPFuquKD2uDQAAAIk"]
[Sat Aug 29 05:08:35.346838 2026] [security2:error] [pid 1034096:tid 1034252] [client 20.104.104.62:43372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/ws66.php"] [unique_id "apK9sy04twRPFuquKD2uDwAAAIY"]
[Sat Aug 29 05:08:35.365876 2026] [security2:error] [pid 1034096:tid 1034349] [client 20.203.141.11:2799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "apK9sy04twRPFuquKD2uEwAAAOc"]
[Sat Aug 29 05:08:35.369413 2026] [security2:error] [pid 1034096:tid 1034267] [client 20.48.250.41:62144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/num.php"] [unique_id "apK9sy04twRPFuquKD2uFAAAAJU"]
[Sat Aug 29 05:08:35.369965 2026] [security2:error] [pid 1034096:tid 1034354] [client 20.104.104.62:2451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/6y7t.php"] [unique_id "apK9sy04twRPFuquKD2uFQAAAOw"]
[Sat Aug 29 05:08:35.377660 2026] [security2:error] [pid 1034096:tid 1034253] [client 173.239.211.216:54321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.211.239.173.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "currieinsurance.com"] [uri "/administrator/"] [unique_id "apK9sy04twRPFuquKD2uEgAAAIc"]
[Sat Aug 29 05:08:35.377733 2026] [security2:error] [pid 1034096:tid 1034357] [client 20.48.250.41:19462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/tfm.php"] [unique_id "apK9sy04twRPFuquKD2uFwAAAO8"]
[Sat Aug 29 05:08:35.399281 2026] [security2:error] [pid 1034096:tid 1034289] [client 4.205.62.107:53270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/public/mah.php.php"] [unique_id "apK9sy04twRPFuquKD2uGAAAAKs"]
[Sat Aug 29 05:08:35.400127 2026] [security2:error] [pid 1034096:tid 1034311] [client 20.48.250.41:38833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/baixy.php"] [unique_id "apK9sy04twRPFuquKD2uGQAAAME"]
[Sat Aug 29 05:08:35.423836 2026] [security2:error] [pid 1034096:tid 1034318] [client 20.104.104.62:39319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.lifeandmemorycenter.barhashing.com"] [uri "/wp-content/about.php"] [unique_id "apK9sy04twRPFuquKD2uJAAAAMg"]
[Sat Aug 29 05:08:35.425175 2026] [security2:error] [pid 1028675:tid 1028832] [client 52.139.37.240:19276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/an.php"] [unique_id "apK9s9dHPfW2QFvhmL4IJgAAABY"]
[Sat Aug 29 05:08:35.436985 2026] [security2:error] [pid 1028675:tid 1028819] [client 91.92.47.191:34806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.edwardjindovina.com"] [uri "/xmlrpc.php"] [unique_id "apK9s9dHPfW2QFvhmL4IJQAAAAk"]
[Sat Aug 29 05:08:35.438964 2026] [security2:error] [pid 1028675:tid 1028851] [client 20.48.160.90:63338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/gos.php"] [unique_id "apK9s9dHPfW2QFvhmL4IKAAAACk"]
[Sat Aug 29 05:08:35.444051 2026] [security2:error] [pid 1034096:tid 1034287] [client 40.83.93.50:13221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/contentloader1.php"] [unique_id "apK9sy04twRPFuquKD2uJQAAAKk"]
[Sat Aug 29 05:08:35.453978 2026] [security2:error] [pid 1034096:tid 1034361] [client 20.52.41.200:5282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK9sy04twRPFuquKD2uJwAAAPM"]
[Sat Aug 29 05:08:35.466241 2026] [security2:error] [pid 1034096:tid 1034316] [client 20.48.250.41:49392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/zu.php"] [unique_id "apK9sy04twRPFuquKD2uKgAAAMY"]
[Sat Aug 29 05:08:35.476499 2026] [security2:error] [pid 1034096:tid 1034360] [client 20.63.81.20:62978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/wp-content/mod/adminfuns.php"] [unique_id "apK9sy04twRPFuquKD2uKwAAAPI"]
[Sat Aug 29 05:08:35.492770 2026] [security2:error] [pid 1034096:tid 1034376] [client 158.23.147.79:17622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK9sy04twRPFuquKD2uMQAAAQI"]
[Sat Aug 29 05:08:35.493042 2026] [security2:error] [pid 1034096:tid 1034370] [client 20.104.104.62:43101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/Cok.php"] [unique_id "apK9sy04twRPFuquKD2uMgAAAPw"]
[Sat Aug 29 05:08:35.497134 2026] [security2:error] [pid 1034096:tid 1034353] [client 20.104.104.62:24710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fasikafresno.oncesocial.com"] [uri "/wp-admin/js/index.php"] [unique_id "apK9sy04twRPFuquKD2uMwAAAOs"]
[Sat Aug 29 05:08:35.498693 2026] [security2:error] [pid 1034096:tid 1034260] [client 40.83.93.50:16544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-content/admin-header.php"] [unique_id "apK9sy04twRPFuquKD2uNAAAAI4"]
[Sat Aug 29 05:08:35.500284 2026] [security2:error] [pid 1034096:tid 1034260] [client 20.48.250.41:61808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/baixy.php"] [unique_id "apK9sy04twRPFuquKD2uNQAAAI4"]
[Sat Aug 29 05:08:35.505061 2026] [security2:error] [pid 1028675:tid 1028886] [client 20.104.104.62:2464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/0xs.php"] [unique_id "apK9s9dHPfW2QFvhmL4IKgAAAEw"]
[Sat Aug 29 05:08:35.506703 2026] [security2:error] [pid 1034096:tid 1034251] [client 158.23.147.79:6029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/makeasmtp.php"] [unique_id "apK9sy04twRPFuquKD2uNgAAAIU"]
[Sat Aug 29 05:08:35.513651 2026] [security2:error] [pid 1034096:tid 1034268] [client 52.139.37.240:20889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK9sy04twRPFuquKD2uOAAAAJY"]
[Sat Aug 29 05:08:35.516456 2026] [security2:error] [pid 1034096:tid 1034258] [client 158.23.184.117:38322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "apK9sy04twRPFuquKD2uOQAAAIw"]
[Sat Aug 29 05:08:35.532371 2026] [security2:error] [pid 1034096:tid 1034325] [client 40.83.93.50:11965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/al.php"] [unique_id "apK9sy04twRPFuquKD2uPAAAAM8"]
[Sat Aug 29 05:08:35.534887 2026] [security2:error] [pid 1034096:tid 1034272] [client 20.48.250.41:33914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/zoo.php"] [unique_id "apK9sy04twRPFuquKD2uPQAAAJo"]
[Sat Aug 29 05:08:35.542020 2026] [proxy_http:error] [pid 1017536:tid 1017771] (70007)The timeout specified has expired: [client 127.0.0.1:15024] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:08:35.542036 2026] [proxy:error] [pid 1017536:tid 1017771] [client 127.0.0.1:15024] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:08:35.552436 2026] [security2:error] [pid 1028675:tid 1028914] [client 158.23.147.79:53796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK9s9dHPfW2QFvhmL4ILAAAAGg"]
[Sat Aug 29 05:08:35.553961 2026] [security2:error] [pid 1028675:tid 1028821] [client 20.48.250.41:38816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/ava.php"] [unique_id "apK9s9dHPfW2QFvhmL4ILQAAAAs"]
[Sat Aug 29 05:08:35.554493 2026] [security2:error] [pid 1034096:tid 1034368] [client 20.48.250.41:19590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/Geforce.php"] [unique_id "apK9sy04twRPFuquKD2uQAAAAPo"]
[Sat Aug 29 05:08:35.556874 2026] [security2:error] [pid 1028675:tid 1028843] [client 34.81.157.26:8872] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/config/firebase-admin.json"] [unique_id "apK9s9dHPfW2QFvhmL4IMAAAACE"]
[Sat Aug 29 05:08:35.557637 2026] [security2:error] [pid 1034096:tid 1034317] [client 34.81.157.26:8816] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/cgi-sys/404.html"] [unique_id "apK9sy04twRPFuquKD2uPwAAAMc"]
[Sat Aug 29 05:08:35.564809 2026] [security2:error] [pid 1028675:tid 1028848] [client 34.81.157.26:8832] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/cgi-sys/404.html"] [unique_id "apK9s9dHPfW2QFvhmL4IMwAAACY"]
[Sat Aug 29 05:08:35.565656 2026] [security2:error] [pid 1028675:tid 1028867] [client 34.81.157.26:8880] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/secrets/aws.json"] [unique_id "apK9s9dHPfW2QFvhmL4INQAAADk"]
[Sat Aug 29 05:08:35.565861 2026] [security2:error] [pid 1028675:tid 1028900] [client 34.81.157.26:8848] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/backend/service-account.json"] [unique_id "apK9s9dHPfW2QFvhmL4INwAAAFo"]
[Sat Aug 29 05:08:35.567994 2026] [security2:error] [pid 1034096:tid 1034300] [client 34.81.157.26:8900] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/config/application.yml"] [unique_id "apK9sy04twRPFuquKD2uSAAAALY"]
[Sat Aug 29 05:08:35.572010 2026] [security2:error] [pid 1028675:tid 1028887] [client 34.81.157.26:8998] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/secrets.yml"] [unique_id "apK9s9dHPfW2QFvhmL4IOwAAAE0"]
[Sat Aug 29 05:08:35.573449 2026] [security2:error] [pid 1028675:tid 1028823] [client 34.81.157.26:9088] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/local.settings.json"] [unique_id "apK9s9dHPfW2QFvhmL4IQwAAAA0"]
[Sat Aug 29 05:08:35.596070 2026] [core:error] [pid 1028675:tid 1028860] [client 138.246.253.24:55458] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:35.596091 2026] [core:error] [pid 1028675:tid 1028860] [client 138.246.253.24:55458] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:35.599557 2026] [security2:error] [pid 1034096:tid 1034284] [client 20.63.219.114:18522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/alfa-rex1.php"] [unique_id "apK9sy04twRPFuquKD2uWAAAAKY"]
[Sat Aug 29 05:08:35.604828 2026] [security2:error] [pid 1034096:tid 1034363] [client 20.63.81.20:57045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/sao.php"] [unique_id "apK9sy04twRPFuquKD2uWQAAAPU"]
[Sat Aug 29 05:08:35.605105 2026] [security2:error] [pid 1034096:tid 1034264] [client 20.48.250.41:49361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/lanka.php"] [unique_id "apK9sy04twRPFuquKD2uWgAAAJI"]
[Sat Aug 29 05:08:35.614831 2026] [security2:error] [pid 1034096:tid 1034327] [client 20.48.160.90:64205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/132.php"] [unique_id "apK9sy04twRPFuquKD2uXAAAANE"]
[Sat Aug 29 05:08:35.616560 2026] [security2:error] [pid 1028675:tid 1028926] [client 74.248.24.12:29790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/install.php"] [unique_id "apK9s9dHPfW2QFvhmL4ITAAAAHQ"]
[Sat Aug 29 05:08:35.619237 2026] [security2:error] [pid 1034096:tid 1034330] [client 20.104.104.62:39056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.lifeandmemorycenter.barhashing.com"] [uri "/66.php"] [unique_id "apK9sy04twRPFuquKD2uXgAAANQ"]
[Sat Aug 29 05:08:35.619444 2026] [security2:error] [pid 1028675:tid 1028828] [client 52.139.37.240:19347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/asw.php"] [unique_id "apK9s9dHPfW2QFvhmL4ITQAAABI"]
[Sat Aug 29 05:08:35.627595 2026] [security2:error] [pid 1034096:tid 1034271] [client 20.104.104.62:43384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/X7T6.php"] [unique_id "apK9sy04twRPFuquKD2uYAAAAJk"]
[Sat Aug 29 05:08:35.637075 2026] [security2:error] [pid 1034096:tid 1034360] [client 20.104.104.62:2851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/waf.php"] [unique_id "apK9sy04twRPFuquKD2uYgAAAPI"]
[Sat Aug 29 05:08:35.639762 2026] [core:error] [pid 1034096:tid 1034311] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:35.639781 2026] [core:error] [pid 1034096:tid 1034311] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:35.640850 2026] [security2:error] [pid 1028675:tid 1028925] [client 20.100.175.163:12809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-admin/index.php"] [unique_id "apK9s9dHPfW2QFvhmL4ITgAAAHM"]
[Sat Aug 29 05:08:35.643195 2026] [security2:error] [pid 1034096:tid 1034320] [client 20.240.128.207:27534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/k.php"] [unique_id "apK9sy04twRPFuquKD2uZAAAAMo"]
[Sat Aug 29 05:08:35.644462 2026] [core:error] [pid 1034096:tid 1034308] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:35.644488 2026] [core:error] [pid 1034096:tid 1034308] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:35.647978 2026] [core:error] [pid 1034096:tid 1034283] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:35.647994 2026] [core:error] [pid 1034096:tid 1034283] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:35.648457 2026] [core:error] [pid 1034096:tid 1034348] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:35.648476 2026] [core:error] [pid 1034096:tid 1034348] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:35.648861 2026] [core:error] [pid 1034096:tid 1034359] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:35.648868 2026] [core:error] [pid 1034096:tid 1034359] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:35.649003 2026] [core:error] [pid 1034096:tid 1034315] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:35.649013 2026] [core:error] [pid 1034096:tid 1034315] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:35.649081 2026] [core:error] [pid 1034096:tid 1034356] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:35.649091 2026] [core:error] [pid 1034096:tid 1034356] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:35.649183 2026] [security2:error] [pid 1034096:tid 1034356] [client 34.81.157.26:0] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/index.php"] [unique_id "apK9sy04twRPFuquKD2uagAAAO4"]
[Sat Aug 29 05:08:35.649560 2026] [core:error] [pid 1028675:tid 1028815] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:35.649571 2026] [core:error] [pid 1028675:tid 1028815] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:35.650428 2026] [core:error] [pid 1034096:tid 1034282] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:35.650442 2026] [core:error] [pid 1034096:tid 1034282] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:35.650624 2026] [core:error] [pid 1034096:tid 1034291] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:35.650633 2026] [core:error] [pid 1034096:tid 1034291] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:35.651153 2026] [core:error] [pid 1034096:tid 1034274] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:35.651161 2026] [core:error] [pid 1034096:tid 1034274] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:35.652204 2026] [core:error] [pid 1034096:tid 1034269] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:35.652218 2026] [core:error] [pid 1034096:tid 1034269] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:35.653054 2026] [core:error] [pid 1034096:tid 1034310] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:35.653075 2026] [core:error] [pid 1034096:tid 1034310] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:35.653382 2026] [core:error] [pid 1028675:tid 1028916] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:35.653393 2026] [core:error] [pid 1028675:tid 1028916] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:35.653500 2026] [security2:error] [pid 1028675:tid 1028916] [client 34.81.157.26:0] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/index.php"] [unique_id "apK9s9dHPfW2QFvhmL4IUAAAAGo"]
[Sat Aug 29 05:08:35.656410 2026] [core:error] [pid 1028675:tid 1028901] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:35.656427 2026] [core:error] [pid 1028675:tid 1028901] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:35.660916 2026] [security2:error] [pid 1034096:tid 1034297] [client 158.23.184.117:53742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doozytrack.com"] [uri "/11.php"] [unique_id "apK9sy04twRPFuquKD2ucAAAALM"]
[Sat Aug 29 05:08:35.678566 2026] [security2:error] [pid 1028675:tid 1028909] [client 158.23.147.79:6055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/login.php"] [unique_id "apK9s9dHPfW2QFvhmL4IUwAAAGM"]
[Sat Aug 29 05:08:35.683680 2026] [security2:error] [pid 1034096:tid 1034136] [remote 34.73.62.26:32938] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "www.strangeworx.com"] [uri "/static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ"] [unique_id "apK9sy04twRPFuquKD2ufgAArw4"]
[Sat Aug 29 05:08:35.685597 2026] [core:error] [pid 1028675:tid 1028820] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:35.685616 2026] [core:error] [pid 1028675:tid 1028820] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:35.689675 2026] [security2:error] [pid 1034096:tid 1034340] [client 34.81.157.26:8962] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/config.yml"] [unique_id "apK9sy04twRPFuquKD2uRgAAAN4"]
[Sat Aug 29 05:08:35.689882 2026] [security2:error] [pid 1028675:tid 1028877] [client 34.81.157.26:9000] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "webdisk.samueljamesmcgrath.com"] [uri "/___proxy_subdomain_webdisk/secrets.yaml"] [unique_id "apK9s9dHPfW2QFvhmL4IPgAAAEM"]
[Sat Aug 29 05:08:35.691542 2026] [security2:error] [pid 1034096:tid 1034361] [client 20.104.104.62:24748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fasikafresno.oncesocial.com"] [uri "/wp-admin/post.php"] [unique_id "apK9sy04twRPFuquKD2ugAAAAPM"]
[Sat Aug 29 05:08:35.693401 2026] [core:error] [pid 1034096:tid 1034344] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:35.693417 2026] [core:error] [pid 1034096:tid 1034344] [client 34.81.157.26:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:35.701733 2026] [security2:error] [pid 1034096:tid 1034317] [client 20.104.49.130:58068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/bolt.php"] [unique_id "apK9sy04twRPFuquKD2uhQAAAMc"]
[Sat Aug 29 05:08:35.710856 2026] [security2:error] [pid 1034096:tid 1034329] [client 52.139.37.240:21169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "apK9sy04twRPFuquKD2uhgAAANM"]
[Sat Aug 29 05:08:35.726109 2026] [security2:error] [pid 1028675:tid 1028832] [client 20.48.250.41:19613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/click.php"] [unique_id "apK9s9dHPfW2QFvhmL4IVgAAABY"]
[Sat Aug 29 05:08:35.732181 2026] [security2:error] [pid 1034096:tid 1034278] [client 20.197.61.180:1452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/extractable-loader-head.php"] [unique_id "apK9sy04twRPFuquKD2uiAAAAKA"]
[Sat Aug 29 05:08:35.735788 2026] [security2:error] [pid 1034096:tid 1034300] [client 20.63.81.20:56992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/dapa.php"] [unique_id "apK9sy04twRPFuquKD2uiQAAALY"]
[Sat Aug 29 05:08:35.743822 2026] [security2:error] [pid 1034096:tid 1034362] [client 20.48.250.41:38748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/gdn.php"] [unique_id "apK9sy04twRPFuquKD2uigAAAPQ"]
[Sat Aug 29 05:08:35.748996 2026] [security2:error] [pid 1028675:tid 1028932] [client 20.48.250.41:61795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/ava.php"] [unique_id "apK9s9dHPfW2QFvhmL4IVwAAAHo"]
[Sat Aug 29 05:08:35.751043 2026] [security2:error] [pid 1028675:tid 1028844] [client 20.48.250.41:19414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/gettest.php"] [unique_id "apK9s9dHPfW2QFvhmL4IWAAAACI"]
[Sat Aug 29 05:08:35.771975 2026] [security2:error] [pid 1034096:tid 1034277] [client 20.104.104.62:62997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/bnnof6.php"] [unique_id "apK9sy04twRPFuquKD2ujQAAAJ8"]
[Sat Aug 29 05:08:35.775307 2026] [security2:error] [pid 1034096:tid 1034273] [client 20.104.104.62:42838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/see.php"] [unique_id "apK9sy04twRPFuquKD2ukAAAAJs"]
[Sat Aug 29 05:08:35.785826 2026] [security2:error] [pid 1028675:tid 1028914] [client 20.48.160.90:64240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/v22.php"] [unique_id "apK9s9dHPfW2QFvhmL4IXAAAAGg"]
[Sat Aug 29 05:08:35.788245 2026] [security2:error] [pid 1028675:tid 1028907] [client 20.48.250.41:34280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/elp.php"] [unique_id "apK9s9dHPfW2QFvhmL4IXgAAAGE"]
[Sat Aug 29 05:08:35.797671 2026] [security2:error] [pid 1028675:tid 1028811] [client 158.23.147.79:26496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-content/packed.php"] [unique_id "apK9s9dHPfW2QFvhmL4IYAAAAAE"]
[Sat Aug 29 05:08:35.806824 2026] [security2:error] [pid 1034096:tid 1034292] [client 158.23.147.79:32708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "database.rfsoftware.com"] [uri "/first.php"] [unique_id "apK9sy04twRPFuquKD2ulgAAAK4"]
[Sat Aug 29 05:08:35.813647 2026] [security2:error] [pid 1028675:tid 1028861] [client 158.158.54.35:31508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/w.php"] [unique_id "apK9s9dHPfW2QFvhmL4IYwAAADM"]
[Sat Aug 29 05:08:35.813668 2026] [security2:error] [pid 1028675:tid 1028819] [client 52.139.37.240:19309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/item.php"] [unique_id "apK9s9dHPfW2QFvhmL4IZAAAAAk"]
[Sat Aug 29 05:08:35.816851 2026] [security2:error] [pid 1028675:tid 1028932] [client 20.104.104.62:39351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.lifeandmemorycenter.barhashing.com"] [uri "/elp.php"] [unique_id "apK9s9dHPfW2QFvhmL4IZQAAAHo"]
[Sat Aug 29 05:08:35.869320 2026] [security2:error] [pid 1028675:tid 1028884] [client 20.63.81.20:56438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/wp-content/l.php"] [unique_id "apK9s9dHPfW2QFvhmL4IaAAAAEo"]
[Sat Aug 29 05:08:35.882320 2026] [security2:error] [pid 1028675:tid 1028885] [client 20.48.250.41:19596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/ms.php"] [unique_id "apK9s9dHPfW2QFvhmL4IaQAAAEs"]
[Sat Aug 29 05:08:35.885210 2026] [security2:error] [pid 1028675:tid 1028930] [client 20.104.104.62:25066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fasikafresno.oncesocial.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK9s9dHPfW2QFvhmL4IagAAAHg"]
[Sat Aug 29 05:08:35.901128 2026] [security2:error] [pid 1034096:tid 1034346] [client 20.48.250.41:19430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/35.php"] [unique_id "apK9sy04twRPFuquKD2unQAAAOQ"]
[Sat Aug 29 05:08:35.904099 2026] [security2:error] [pid 1034096:tid 1034369] [client 20.197.61.180:1416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/meta.php"] [unique_id "apK9sy04twRPFuquKD2ungAAAPs"]
[Sat Aug 29 05:08:35.910447 2026] [security2:error] [pid 1028675:tid 1028903] [client 52.139.37.240:20920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9s9dHPfW2QFvhmL4IawAAAF0"]
[Sat Aug 29 05:08:35.924071 2026] [security2:error] [pid 1034096:tid 1034310] [client 20.48.250.41:49421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/a4.php"] [unique_id "apK9sy04twRPFuquKD2uowAAAMA"]
[Sat Aug 29 05:08:35.924954 2026] [security2:error] [pid 1034096:tid 1034376] [client 20.48.160.90:64211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/wp-activate.php"] [unique_id "apK9sy04twRPFuquKD2upAAAAQI"]
[Sat Aug 29 05:08:35.926094 2026] [security2:error] [pid 1034096:tid 1034335] [client 20.48.250.41:34473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/666.php"] [unique_id "apK9sy04twRPFuquKD2upQAAANk"]
[Sat Aug 29 05:08:35.933992 2026] [security2:error] [pid 1034096:tid 1034284] [client 40.83.93.50:12520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/al.php"] [unique_id "apK9sy04twRPFuquKD2upwAAAKY"]
[Sat Aug 29 05:08:35.957919 2026] [security2:error] [pid 1034096:tid 1034351] [client 158.23.147.79:50094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK9sy04twRPFuquKD2uqgAAAOk"]
[Sat Aug 29 05:08:35.958366 2026] [security2:error] [pid 1028675:tid 1028937] [client 20.48.250.41:38907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/f2.php"] [unique_id "apK9s9dHPfW2QFvhmL4IbgAAAH8"]
[Sat Aug 29 05:08:35.969993 2026] [security2:error] [pid 1028675:tid 1028894] [client 20.48.250.41:61785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/gdn.php"] [unique_id "apK9s9dHPfW2QFvhmL4IbwAAAFQ"]
[Sat Aug 29 05:08:35.988118 2026] [security2:error] [pid 1028675:tid 1028925] [client 40.83.93.50:1902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-content/admin.php"] [unique_id "apK9s9dHPfW2QFvhmL4IcAAAAHM"]
[Sat Aug 29 05:08:35.998920 2026] [security2:error] [pid 1028675:tid 1028862] [client 20.63.81.20:63005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/wp-admin/w.php"] [unique_id "apK9s9dHPfW2QFvhmL4IcQAAADQ"]
[Sat Aug 29 05:08:36.013264 2026] [security2:error] [pid 1034096:tid 1034319] [client 52.139.37.240:19329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/jga.php"] [unique_id "apK9tC04twRPFuquKD2usQAAAMk"]
[Sat Aug 29 05:08:36.061402 2026] [security2:error] [pid 1034096:tid 1034274] [client 40.83.93.50:11951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/global.php"] [unique_id "apK9tC04twRPFuquKD2uswAAAJw"]
[Sat Aug 29 05:08:36.070814 2026] [security2:error] [pid 1028675:tid 1028863] [client 20.48.160.90:61000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/wp-trackback.php"] [unique_id "apK9tNdHPfW2QFvhmL4IdQAAADU"]
[Sat Aug 29 05:08:36.079467 2026] [security2:error] [pid 1028675:tid 1028833] [client 4.205.62.107:51425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/wpver.php"] [unique_id "apK9tNdHPfW2QFvhmL4IdgAAABc"]
[Sat Aug 29 05:08:36.131520 2026] [security2:error] [pid 1028675:tid 1028877] [client 20.240.128.207:21031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/root.php"] [unique_id "apK9tNdHPfW2QFvhmL4IeQAAAEM"]
[Sat Aug 29 05:08:36.135077 2026] [security2:error] [pid 1034096:tid 1034378] [client 74.248.24.12:22889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/ioxi-o.php"] [unique_id "apK9tC04twRPFuquKD2uugAAAQQ"]
[Sat Aug 29 05:08:36.137280 2026] [security2:error] [pid 1028675:tid 1028835] [client 20.100.175.163:5530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/radio.php"] [unique_id "apK9tNdHPfW2QFvhmL4IegAAABk"]
[Sat Aug 29 05:08:36.149399 2026] [security2:error] [pid 1034096:tid 1034298] [client 20.63.81.20:62977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/wp-content/k.php"] [unique_id "apK9tC04twRPFuquKD2uuwAAALQ"]
[Sat Aug 29 05:08:36.163210 2026] [security2:error] [pid 1028675:tid 1028928] [client 20.203.141.11:9595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-content/admin.php"] [unique_id "apK9tNdHPfW2QFvhmL4IfAAAAHY"]
[Sat Aug 29 05:08:36.167389 2026] [proxy_http:error] [pid 1017536:tid 1017657] (70007)The timeout specified has expired: [remote 74.7.241.38:60088] AH01102: error reading status line from remote server 127.0.0.1:8443, referer: https://guraonline.com/shop/?orderby=price-desc&product_brand=aco,possess,la-roche-posay,the-one,scope,locobase,ldb,oncolour
[Sat Aug 29 05:08:36.167411 2026] [proxy:error] [pid 1017536:tid 1017657] [remote 74.7.241.38:60088] AH00898: Error reading from remote server returned by /shop/, referer: https://guraonline.com/shop/?orderby=price-desc&product_brand=aco,possess,la-roche-posay,the-one,scope,locobase,ldb,oncolour
[Sat Aug 29 05:08:36.176383 2026] [proxy_http:error] [pid 1017536:tid 1017666] (70007)The timeout specified has expired: [client 127.0.0.1:15036] AH01102: error reading status line from remote server 50.6.92.44:8443, referer: https://guraonline.com/shop/?orderby=price-desc&product_brand=aco,possess,la-roche-posay,the-one,scope,locobase,ldb,oncolour
[Sat Aug 29 05:08:36.176405 2026] [proxy:error] [pid 1017536:tid 1017666] [client 127.0.0.1:15036] AH00898: Error reading from remote server returned by /shop/, referer: https://guraonline.com/shop/?orderby=price-desc&product_brand=aco,possess,la-roche-posay,the-one,scope,locobase,ldb,oncolour
[Sat Aug 29 05:08:36.197720 2026] [security2:error] [pid 1028675:tid 1028857] [client 52.139.37.240:21174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/wp-index.php"] [unique_id "apK9tNdHPfW2QFvhmL4IfgAAAC8"]
[Sat Aug 29 05:08:36.211117 2026] [security2:error] [pid 1034096:tid 1034253] [client 52.139.37.240:19332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/mac.php"] [unique_id "apK9tC04twRPFuquKD2uvgAAAIc"]
[Sat Aug 29 05:08:36.211123 2026] [security2:error] [pid 1034096:tid 1034340] [client 4.205.62.107:53439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/samll.php"] [unique_id "apK9tC04twRPFuquKD2uvwAAAN4"]
[Sat Aug 29 05:08:36.244102 2026] [security2:error] [pid 1034096:tid 1034297] [client 20.63.219.114:18538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/headerg.php"] [unique_id "apK9tC04twRPFuquKD2uwwAAALM"]
[Sat Aug 29 05:08:36.244984 2026] [security2:error] [pid 1028675:tid 1028900] [client 20.52.41.200:4588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK9tNdHPfW2QFvhmL4IgQAAAFo"]
[Sat Aug 29 05:08:36.245663 2026] [security2:error] [pid 1034096:tid 1034314] [client 20.48.160.90:65290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/pri.php"] [unique_id "apK9tC04twRPFuquKD2uxAAAAMQ"]
[Sat Aug 29 05:08:36.293859 2026] [security2:error] [pid 1034096:tid 1034374] [client 20.63.81.20:56964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/os.php"] [unique_id "apK9tC04twRPFuquKD2uzQAAAQA"]
[Sat Aug 29 05:08:36.300460 2026] [security2:error] [pid 1034096:tid 1034367] [client 4.205.62.107:6940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/phpinfo01.php"] [unique_id "apK9tC04twRPFuquKD2u0AAAAPk"]
[Sat Aug 29 05:08:36.329991 2026] [security2:error] [pid 1028675:tid 1028860] [client 4.205.62.107:24972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/otuz1.php"] [unique_id "apK9tNdHPfW2QFvhmL4IhAAAADI"]
[Sat Aug 29 05:08:36.341080 2026] [security2:error] [pid 1028675:tid 1028892] [client 20.104.49.130:52330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/samll.php"] [unique_id "apK9tNdHPfW2QFvhmL4IhgAAAFI"]
[Sat Aug 29 05:08:36.345420 2026] [security2:error] [pid 1034096:tid 1034190] [remote 93.123.109.228:60596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/.wp-config.php.swp"] [unique_id "apK9tC04twRPFuquKD2u1QAAokQ"]
[Sat Aug 29 05:08:36.345584 2026] [http2:warn] [pid 1017536:tid 1017719] [client 57.141.14.14:64940] h2_stream(1017536-392-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:08:36.347388 2026] [security2:error] [pid 1034096:tid 1034306] [client 158.158.54.35:1796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/ahax.php"] [unique_id "apK9tC04twRPFuquKD2u1wAAALw"]
[Sat Aug 29 05:08:36.354987 2026] [security2:error] [pid 1034096:tid 1034278] [client 158.23.147.79:35792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/worksec.php"] [unique_id "apK9tC04twRPFuquKD2u2QAAAKA"]
[Sat Aug 29 05:08:36.362895 2026] [security2:error] [pid 1034096:tid 1034273] [client 4.205.62.107:62932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/broadcasting.php"] [unique_id "apK9tC04twRPFuquKD2u2wAAAJs"]
[Sat Aug 29 05:08:36.393690 2026] [cgid:error] [pid 1034096:tid 1034185] [remote 34.73.62.26:53596] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:36.402865 2026] [security2:error] [pid 1034096:tid 1034199] [remote 34.73.62.26:53596] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "www.strangeworx.com"] [uri "/web.config"] [unique_id "apK9tC04twRPFuquKD2u4QAA8k0"]
[Sat Aug 29 05:08:36.404623 2026] [cgid:error] [pid 1034096:tid 1034164] [remote 34.73.62.26:53596] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:36.404965 2026] [cgid:error] [pid 1034096:tid 1034189] [remote 34.73.62.26:53596] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:36.408177 2026] [security2:error] [pid 1034096:tid 1034303] [client 52.139.37.240:20882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/ww2.php"] [unique_id "apK9tC04twRPFuquKD2u5QAAALk"]
[Sat Aug 29 05:08:36.409416 2026] [security2:error] [pid 1034096:tid 1034287] [client 52.139.37.240:19343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK9tC04twRPFuquKD2u5gAAAKk"]
[Sat Aug 29 05:08:36.417587 2026] [security2:error] [pid 1034096:tid 1034344] [client 40.83.93.50:12541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/global.php"] [unique_id "apK9tC04twRPFuquKD2u5wAAAOI"]
[Sat Aug 29 05:08:36.430084 2026] [security2:error] [pid 1028675:tid 1028873] [client 4.205.62.107:21574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/queue.php"] [unique_id "apK9tNdHPfW2QFvhmL4IiAAAAD8"]
[Sat Aug 29 05:08:36.436695 2026] [security2:error] [pid 1034096:tid 1034283] [client 20.63.81.20:57027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/htio.php"] [unique_id "apK9tC04twRPFuquKD2u6QAAAKU"]
[Sat Aug 29 05:08:36.459572 2026] [security2:error] [pid 1034096:tid 1034267] [client 20.197.61.180:1440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/defaults.php"] [unique_id "apK9tC04twRPFuquKD2u7QAAAJU"]
[Sat Aug 29 05:08:36.472241 2026] [security2:error] [pid 1034096:tid 1034324] [client 40.83.93.50:21270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-content/autoload_classmap.php"] [unique_id "apK9tC04twRPFuquKD2u7gAAAM4"]
[Sat Aug 29 05:08:36.521519 2026] [security2:error] [pid 1034096:tid 1034318] [client 20.48.160.90:63305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/wp_blog_footer.php"] [unique_id "apK9tC04twRPFuquKD2u8gAAAMg"]
[Sat Aug 29 05:08:36.535921 2026] [security2:error] [pid 1034096:tid 1034302] [client 4.205.62.107:3919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/zaza.php"] [unique_id "apK9tC04twRPFuquKD2u9QAAALg"]
[Sat Aug 29 05:08:36.544464 2026] [security2:error] [pid 1034096:tid 1034211] [remote 47.128.36.159:59392] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.sarasotaorthotics.com"] [uri "/robots.txt"] [unique_id "apK9tC04twRPFuquKD2u-gAA2Vk"]
[Sat Aug 29 05:08:36.582744 2026] [security2:error] [pid 1028675:tid 1028930] [client 20.63.81.20:57886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/dev.php"] [unique_id "apK9tNdHPfW2QFvhmL4IigAAAHg"]
[Sat Aug 29 05:08:36.601015 2026] [security2:error] [pid 1034096:tid 1034310] [client 52.139.37.240:21401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/7logs.php"] [unique_id "apK9tC04twRPFuquKD2vBgAAAMA"]
[Sat Aug 29 05:08:36.601643 2026] [security2:error] [pid 1034096:tid 1034328] [client 20.197.61.180:1246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/dxc.php"] [unique_id "apK9tC04twRPFuquKD2vBwAAANI"]
[Sat Aug 29 05:08:36.607778 2026] [security2:error] [pid 1028675:tid 1028883] [client 52.139.37.240:19313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK9tNdHPfW2QFvhmL4IjgAAAEk"]
[Sat Aug 29 05:08:36.626987 2026] [security2:error] [pid 1034096:tid 1034293] [client 158.23.147.79:6051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK9tC04twRPFuquKD2vDQAAAK8"]
[Sat Aug 29 05:08:36.630175 2026] [security2:error] [pid 1034096:tid 1034315] [client 20.240.128.207:7414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/p.php"] [unique_id "apK9tC04twRPFuquKD2vDgAAAMU"]
[Sat Aug 29 05:08:36.638839 2026] [security2:error] [pid 1034096:tid 1034352] [client 158.23.147.79:11266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK9tC04twRPFuquKD2vDwAAAOo"]
[Sat Aug 29 05:08:36.639719 2026] [security2:error] [pid 1034096:tid 1034291] [client 20.203.141.11:38240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-configs.php"] [unique_id "apK9tC04twRPFuquKD2vEAAAAK0"]
[Sat Aug 29 05:08:36.652498 2026] [security2:error] [pid 1028675:tid 1028884] [client 20.100.175.163:28274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/item.php"] [unique_id "apK9tNdHPfW2QFvhmL4IkAAAAEo"]
[Sat Aug 29 05:08:36.652668 2026] [security2:error] [pid 1028675:tid 1028872] [client 40.83.93.50:11947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/update.php"] [unique_id "apK9tNdHPfW2QFvhmL4IjwAAAD4"]
[Sat Aug 29 05:08:36.655016 2026] [security2:error] [pid 1028675:tid 1028894] [client 158.23.147.79:17529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK9tNdHPfW2QFvhmL4IkgAAAFQ"]
[Sat Aug 29 05:08:36.671662 2026] [security2:error] [pid 1034096:tid 1034298] [client 20.48.160.90:65360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/sushi.php"] [unique_id "apK9tC04twRPFuquKD2vFQAAALQ"]
[Sat Aug 29 05:08:36.672877 2026] [security2:error] [pid 1034096:tid 1034290] [client 158.23.147.79:59864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/nf_tracking.php"] [unique_id "apK9tC04twRPFuquKD2vGAAAAKw"]
[Sat Aug 29 05:08:36.680648 2026] [security2:error] [pid 1034096:tid 1034259] [client 20.104.104.62:40121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/basic.php"] [unique_id "apK9tC04twRPFuquKD2vGwAAAI0"]
[Sat Aug 29 05:08:36.701451 2026] [security2:error] [pid 1028675:tid 1028879] [client 74.248.24.12:19463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/xmlrpc.php"] [unique_id "apK9tNdHPfW2QFvhmL4IkQAAAEU"]
[Sat Aug 29 05:08:36.716766 2026] [security2:error] [pid 1034096:tid 1034276] [client 20.52.41.200:4385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/num.php"] [unique_id "apK9tC04twRPFuquKD2vIAAAAJ4"]
[Sat Aug 29 05:08:36.719365 2026] [cgid:error] [pid 1034096:tid 1034223] [remote 34.73.62.26:53596] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:36.727937 2026] [security2:error] [pid 1034096:tid 1034312] [client 20.63.219.114:10493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/meta.php"] [unique_id "apK9tC04twRPFuquKD2vIgAAAMI"]
[Sat Aug 29 05:08:36.734416 2026] [security2:error] [pid 1028675:tid 1028859] [client 20.63.81.20:63070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/gos.php"] [unique_id "apK9tNdHPfW2QFvhmL4IkwAAADE"]
[Sat Aug 29 05:08:36.737098 2026] [security2:error] [pid 1034096:tid 1034357] [client 20.104.104.62:37579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/msy.php"] [unique_id "apK9tC04twRPFuquKD2vJwAAAO8"]
[Sat Aug 29 05:08:36.785280 2026] [security2:error] [pid 1028675:tid 1028821] [client 158.23.147.79:5998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/hehehehe.php"] [unique_id "apK9tNdHPfW2QFvhmL4IlgAAAAs"]
[Sat Aug 29 05:08:36.796290 2026] [security2:error] [pid 1034096:tid 1034251] [client 158.158.54.35:13037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/shell.php"] [unique_id "apK9tC04twRPFuquKD2vLwAAAIU"]
[Sat Aug 29 05:08:36.797432 2026] [security2:error] [pid 1034096:tid 1034314] [client 52.139.37.240:20890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/ac.php"] [unique_id "apK9tC04twRPFuquKD2vMAAAAMQ"]
[Sat Aug 29 05:08:36.804427 2026] [security2:error] [pid 1034096:tid 1034355] [client 52.139.37.240:19278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/zafir1.php"] [unique_id "apK9tC04twRPFuquKD2vMQAAAO0"]
[Sat Aug 29 05:08:36.812285 2026] [security2:error] [pid 1028675:tid 1028837] [client 20.104.104.62:40086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/monso.php"] [unique_id "apK9tNdHPfW2QFvhmL4IlwAAABs"]
[Sat Aug 29 05:08:36.815365 2026] [security2:error] [pid 1034096:tid 1034289] [client 20.48.160.90:65388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/manga.php"] [unique_id "apK9tC04twRPFuquKD2vNQAAAKs"]
[Sat Aug 29 05:08:36.871703 2026] [security2:error] [pid 1034096:tid 1034294] [client 20.63.81.20:56998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/132.php"] [unique_id "apK9tC04twRPFuquKD2vPwAAALA"]
[Sat Aug 29 05:08:36.873089 2026] [security2:error] [pid 1028675:tid 1028863] [client 20.104.104.62:48061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/siln.php"] [unique_id "apK9tNdHPfW2QFvhmL4ImAAAADU"]
[Sat Aug 29 05:08:36.892048 2026] [security2:error] [pid 1034096:tid 1034344] [client 20.104.104.62:40208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/ccc.php"] [unique_id "apK9tC04twRPFuquKD2vRQAAAOI"]
[Sat Aug 29 05:08:36.897251 2026] [security2:error] [pid 1034096:tid 1034295] [client 158.23.147.79:26552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-l0gin.php"] [unique_id "apK9tC04twRPFuquKD2vRgAAALE"]
[Sat Aug 29 05:08:36.910391 2026] [security2:error] [pid 1028675:tid 1028925] [client 40.83.93.50:14598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/update.php"] [unique_id "apK9tNdHPfW2QFvhmL4ImgAAAHM"]
[Sat Aug 29 05:08:36.915630 2026] [security2:error] [pid 1028675:tid 1028855] [client 107.145.13.164:58947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 164.13.145.107.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK9tNdHPfW2QFvhmL4ImwAAAC0"]
[Sat Aug 29 05:08:36.915749 2026] [security2:error] [pid 1028675:tid 1028855] [client 107.145.13.164:58947] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK9tNdHPfW2QFvhmL4ImwAAAC0"]
[Sat Aug 29 05:08:36.916257 2026] [security2:error] [pid 1028675:tid 1028929] [client 20.104.104.62:43092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/horeg.php"] [unique_id "apK9tNdHPfW2QFvhmL4InAAAAHc"]
[Sat Aug 29 05:08:36.940702 2026] [security2:error] [pid 1034096:tid 1034308] [client 20.104.104.62:65225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/ah24.php"] [unique_id "apK9tC04twRPFuquKD2vSgAAAL4"]
[Sat Aug 29 05:08:36.943375 2026] [security2:error] [pid 1028675:tid 1028898] [client 40.83.93.50:1866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-content/cache/min/1/wp-content/admin.php"] [unique_id "apK9tNdHPfW2QFvhmL4InQAAAFg"]
[Sat Aug 29 05:08:36.946612 2026] [security2:error] [pid 1034096:tid 1034346] [client 103.168.67.159:38872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 159.67.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "naturalkneads.com"] [uri "/wordpress/index.php"] [unique_id "apK9tC04twRPFuquKD2vSwAAAOQ"], referer: https://naturalkneads.com/wordpress/wp-admin/
[Sat Aug 29 05:08:36.947670 2026] [security2:error] [pid 1034096:tid 1034324] [client 20.104.104.62:37675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/rce.php"] [unique_id "apK9tC04twRPFuquKD2vTAAAAM4"]
[Sat Aug 29 05:08:36.978756 2026] [security2:error] [pid 1028675:tid 1028926] [client 20.48.160.90:64234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/asdfghj.php"] [unique_id "apK9tNdHPfW2QFvhmL4IngAAAHQ"]
[Sat Aug 29 05:08:36.978785 2026] [security2:error] [pid 1028675:tid 1028844] [client 20.104.49.130:30000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/Jcrop.php"] [unique_id "apK9tNdHPfW2QFvhmL4InwAAACI"]
[Sat Aug 29 05:08:36.992724 2026] [security2:error] [pid 1034096:tid 1034238] [remote 93.123.109.228:60596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK9tC04twRPFuquKD2vTwAA_HQ"]
[Sat Aug 29 05:08:36.996937 2026] [security2:error] [pid 1028675:tid 1028835] [client 52.139.37.240:21141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/ctex1.php"] [unique_id "apK9tNdHPfW2QFvhmL4IoQAAABk"]
[Sat Aug 29 05:08:37.012308 2026] [security2:error] [pid 1034096:tid 1034310] [client 20.63.81.20:56969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/v22.php"] [unique_id "apK9tS04twRPFuquKD2vUwAAAMA"]
[Sat Aug 29 05:08:37.016141 2026] [security2:error] [pid 1034096:tid 1034359] [client 52.139.37.240:19383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/abc.php"] [unique_id "apK9tS04twRPFuquKD2vWAAAAPE"]
[Sat Aug 29 05:08:37.080624 2026] [security2:error] [pid 1028675:tid 1028860] [client 158.23.147.79:50101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-includes/index.php"] [unique_id "apK9tddHPfW2QFvhmL4IowAAADI"]
[Sat Aug 29 05:08:37.104212 2026] [security2:error] [pid 1034096:tid 1034269] [client 20.203.141.11:33630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-includes/index.php"] [unique_id "apK9tS04twRPFuquKD2vZAAAAJc"]
[Sat Aug 29 05:08:37.123028 2026] [security2:error] [pid 1028675:tid 1028914] [client 20.63.219.114:16647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/dxc.php"] [unique_id "apK9tddHPfW2QFvhmL4IpAAAAGg"]
[Sat Aug 29 05:08:37.137196 2026] [security2:error] [pid 1028675:tid 1028901] [client 20.48.160.90:65384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/dragonshell.php"] [unique_id "apK9tddHPfW2QFvhmL4IpQAAAFs"]
[Sat Aug 29 05:08:37.139657 2026] [security2:error] [pid 1034096:tid 1034351] [client 20.240.128.207:23466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/a1.php"] [unique_id "apK9tS04twRPFuquKD2vaQAAAOk"]
[Sat Aug 29 05:08:37.141156 2026] [security2:error] [pid 1034096:tid 1034332] [client 20.100.175.163:7548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/t.php"] [unique_id "apK9tS04twRPFuquKD2vagAAANY"]
[Sat Aug 29 05:08:37.150604 2026] [security2:error] [pid 1028675:tid 1028814] [client 20.63.81.20:56988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/wp-activate.php"] [unique_id "apK9tddHPfW2QFvhmL4IpwAAAAQ"]
[Sat Aug 29 05:08:37.177781 2026] [security2:error] [pid 1034096:tid 1034307] [client 40.83.93.50:48006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/blog.php"] [unique_id "apK9tS04twRPFuquKD2vbgAAAL0"]
[Sat Aug 29 05:08:37.179389 2026] [proxy_http:error] [pid 1017536:tid 1017543] (70007)The timeout specified has expired: [remote 57.141.14.32:63142] AH01102: error reading status line from remote server 127.0.0.1:8443
[Sat Aug 29 05:08:37.179413 2026] [proxy:error] [pid 1017536:tid 1017543] [remote 57.141.14.32:63142] AH00898: Error reading from remote server returned by /shop/
[Sat Aug 29 05:08:37.187566 2026] [proxy_http:error] [pid 1017536:tid 1017671] (70007)The timeout specified has expired: [client 127.0.0.1:15096] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:08:37.187580 2026] [proxy:error] [pid 1017536:tid 1017671] [client 127.0.0.1:15096] AH00898: Error reading from remote server returned by /shop/
[Sat Aug 29 05:08:37.201784 2026] [security2:error] [pid 1034096:tid 1034302] [client 20.197.61.180:1256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/post.php"] [unique_id "apK9tS04twRPFuquKD2vcAAAALg"]
[Sat Aug 29 05:08:37.211016 2026] [security2:error] [pid 1028675:tid 1028845] [client 52.139.37.240:21135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/defaults.php"] [unique_id "apK9tddHPfW2QFvhmL4IqQAAACM"]
[Sat Aug 29 05:08:37.213136 2026] [security2:error] [pid 1034096:tid 1034291] [client 52.139.37.240:19301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/c1.php"] [unique_id "apK9tS04twRPFuquKD2vdAAAAK0"]
[Sat Aug 29 05:08:37.217604 2026] [security2:error] [pid 1028675:tid 1028900] [client 74.248.24.12:29780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/filemanager.php"] [unique_id "apK9tddHPfW2QFvhmL4IqgAAAFo"]
[Sat Aug 29 05:08:37.237493 2026] [security2:error] [pid 1034096:tid 1034304] [client 158.23.147.79:17552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK9tS04twRPFuquKD2veAAAALo"]
[Sat Aug 29 05:08:37.239709 2026] [security2:error] [pid 1034096:tid 1034149] [remote 93.123.109.228:60596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/admin/phpinfo.php"] [unique_id "apK9tS04twRPFuquKD2veQAA9xs"]
[Sat Aug 29 05:08:37.246332 2026] [security2:error] [pid 1034096:tid 1034378] [client 4.205.62.107:58495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/autogooey.php"] [unique_id "apK9tS04twRPFuquKD2vewAAAQQ"]
[Sat Aug 29 05:08:37.258467 2026] [security2:error] [pid 1028675:tid 1028916] [client 158.158.54.35:31506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/elp.php"] [unique_id "apK9tddHPfW2QFvhmL4IqwAAAGo"]
[Sat Aug 29 05:08:37.264756 2026] [security2:error] [pid 1034096:tid 1034246] [remote 93.123.109.228:60596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/admin_phpinfo.php"] [unique_id "apK9tS04twRPFuquKD2vfgAA93w"]
[Sat Aug 29 05:08:37.270933 2026] [security2:error] [pid 1034096:tid 1034290] [client 20.48.160.90:64221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/wp-safe.php"] [unique_id "apK9tS04twRPFuquKD2vgAAAAKw"]
[Sat Aug 29 05:08:37.281569 2026] [security2:error] [pid 1034096:tid 1034340] [client 20.63.81.20:57936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/wp-trackback.php"] [unique_id "apK9tS04twRPFuquKD2vgwAAAN4"]
[Sat Aug 29 05:08:37.323832 2026] [security2:error] [pid 1034096:tid 1034293] [client 20.197.61.180:14429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/wp-2019.php"] [unique_id "apK9tS04twRPFuquKD2viAAAAK8"]
[Sat Aug 29 05:08:37.382093 2026] [security2:error] [pid 1034096:tid 1034337] [client 4.205.62.107:9155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/pass4.php"] [unique_id "apK9tS04twRPFuquKD2vjwAAANs"]
[Sat Aug 29 05:08:37.405972 2026] [security2:error] [pid 1034096:tid 1034300] [client 52.139.37.240:20894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/domains.php"] [unique_id "apK9tS04twRPFuquKD2vkwAAALY"]
[Sat Aug 29 05:08:37.406972 2026] [security2:error] [pid 1034096:tid 1034319] [client 40.83.93.50:4083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/blog.php"] [unique_id "apK9tS04twRPFuquKD2vlAAAAMk"]
[Sat Aug 29 05:08:37.413892 2026] [security2:error] [pid 1028675:tid 1028918] [client 52.139.37.240:19336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/index.php/feed/atom/"] [unique_id "apK9tddHPfW2QFvhmL4IrQAAAGw"]
[Sat Aug 29 05:08:37.415904 2026] [security2:error] [pid 1028675:tid 1028888] [client 20.63.81.20:62979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/pri.php"] [unique_id "apK9tddHPfW2QFvhmL4IrgAAAE4"]
[Sat Aug 29 05:08:37.420496 2026] [security2:error] [pid 1028675:tid 1028897] [client 40.83.93.50:1914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-content/classwithtostring.php"] [unique_id "apK9tddHPfW2QFvhmL4IrwAAAFc"]
[Sat Aug 29 05:08:37.420582 2026] [security2:error] [pid 1028675:tid 1028884] [client 68.155.159.216:33683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/xmlrpc.php"] [unique_id "apK9tddHPfW2QFvhmL4IsAAAAEo"]
[Sat Aug 29 05:08:37.436709 2026] [security2:error] [pid 1028675:tid 1028872] [client 4.205.62.107:6916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/cxc.php"] [unique_id "apK9tddHPfW2QFvhmL4IsgAAAD4"]
[Sat Aug 29 05:08:37.437961 2026] [security2:error] [pid 1034096:tid 1034276] [client 35.221.212.112:29142] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/@fs/home/ubuntu/.env"] [unique_id "apK9tS04twRPFuquKD2vmwAAAJ4"]
[Sat Aug 29 05:08:37.444253 2026] [security2:error] [pid 1034096:tid 1034317] [client 35.221.212.112:29180] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/@fs/usr/src/app/.env"] [unique_id "apK9tS04twRPFuquKD2vnwAAAMc"]
[Sat Aug 29 05:08:37.447796 2026] [security2:error] [pid 1034096:tid 1034357] [client 35.221.212.112:29170] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/@fs/var/www/html/.env"] [unique_id "apK9tS04twRPFuquKD2voAAAAO8"]
[Sat Aug 29 05:08:37.447796 2026] [security2:error] [pid 1028675:tid 1028819] [client 35.221.212.112:29164] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/@fs/var/www/.env"] [unique_id "apK9tddHPfW2QFvhmL4ItwAAAAk"]
[Sat Aug 29 05:08:37.463898 2026] [security2:error] [pid 1034096:tid 1034321] [client 45.148.10.60:6608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:(?:truncate|truncate|rename)[[:space:]]+[a-z| |0-9|\\\\*|\\\\.|\\\\,|\\\$|\\\$|_|\\\\-]+[[:space:]]+(?:into|from|table|database|index|view)[[:space:]]+[a-z|0-9|\\\\*| |\\\\{|\\\\.|\\\\,|\\\$|\\\$|_|\\\\-]|\\\\bunion\\\\b.{1,256}?select.{1,256}[a-z0-9\\\$\\\$].{1,256}(?:from|#| ..." at ARGS:author_exclude. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "296"] [id "340016"] [rev "46"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  SQL injection attempt detected"] [data "union all select 999999,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x7075626c697368,concat(0x7c7c,hex(cast((0x4f4b)as char)),0x7c7c),0x30,0x7075626c697368,0x30,0x30,0x30,0x30,0x30,0x30,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x30,0x30,0x30,0x30,0x706f7374,0x30,0x30--"] [severity "CRITICAL"] [tag "SQLi"] [hostname "villagebooksandbears.com"] [uri "/wp/v2/posts/999999"] [unique_id "apK9tS04twRPFuquKD2vowAAAMs"]
[Sat Aug 29 05:08:37.465646 2026] [security2:error] [pid 1034096:tid 1034303] [client 4.205.62.107:24980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/update.php"] [unique_id "apK9tS04twRPFuquKD2vpAAAALk"]
[Sat Aug 29 05:08:37.468195 2026] [security2:error] [pid 1028675:tid 1028862] [client 158.23.147.79:35739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/x.php"] [unique_id "apK9tddHPfW2QFvhmL4IvgAAADQ"]
[Sat Aug 29 05:08:37.478415 2026] [security2:error] [pid 1034096:tid 1034344] [client 20.52.41.200:5272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "apK9tS04twRPFuquKD2vqwAAAOI"]
[Sat Aug 29 05:08:37.504083 2026] [security2:error] [pid 1034096:tid 1034296] [client 4.205.62.107:62723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/aws_config.php"] [unique_id "apK9tS04twRPFuquKD2vrgAAALI"]
[Sat Aug 29 05:08:37.517863 2026] [security2:error] [pid 1034096:tid 1034184] [remote 93.123.109.228:60596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/api/info.php"] [unique_id "apK9tS04twRPFuquKD2vsAAA9z4"]
[Sat Aug 29 05:08:37.533644 2026] [security2:error] [pid 1034096:tid 1034273] [client 20.63.219.114:18515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/wp-2019.php"] [unique_id "apK9tS04twRPFuquKD2vtQAAAJs"]
[Sat Aug 29 05:08:37.565804 2026] [security2:error] [pid 1034096:tid 1034169] [remote 93.123.109.228:60596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/api/phpinfo.php"] [unique_id "apK9tS04twRPFuquKD2vugAA9y8"]
[Sat Aug 29 05:08:37.568692 2026] [security2:error] [pid 1028675:tid 1028816] [client 20.203.141.11:2224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-admin/a.php"] [unique_id "apK9tddHPfW2QFvhmL4I0gAAAAY"]
[Sat Aug 29 05:08:37.569536 2026] [security2:error] [pid 1034096:tid 1034346] [client 20.63.81.20:57972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/wp_blog_footer.php"] [unique_id "apK9tS04twRPFuquKD2vvAAAAOQ"]
[Sat Aug 29 05:08:37.580886 2026] [fcgid:warn] [pid 1034096:tid 1034318] (70014)End of file found: [client 199.45.155.58:41966] mod_fcgid: can't get data from http client
[Sat Aug 29 05:08:37.585015 2026] [security2:error] [pid 1028675:tid 1028932] [client 20.48.160.90:64252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/gjewuagf.php"] [unique_id "apK9tddHPfW2QFvhmL4I0wAAAHo"]
[Sat Aug 29 05:08:37.602401 2026] [security2:error] [pid 1028675:tid 1028907] [client 52.139.37.240:20917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/dropdown.php"] [unique_id "apK9tddHPfW2QFvhmL4I1AAAAGE"]
[Sat Aug 29 05:08:37.603901 2026] [security2:error] [pid 1028675:tid 1028859] [client 127.0.0.1:18376] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK9tddHPfW2QFvhmL4IvAAAADE"]
[Sat Aug 29 05:08:37.603901 2026] [security2:error] [pid 1028675:tid 1028813] [client 127.0.0.1:18348] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.beraluzarchive.org"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK9tddHPfW2QFvhmL4IuQAAAAM"]
[Sat Aug 29 05:08:37.604123 2026] [security2:error] [pid 1034096:tid 1034297] [client 35.221.212.112:29162] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.beraluzarchive.org"] [uri "/@fs/app/.env.local"] [unique_id "apK9tS04twRPFuquKD2vngAAALM"]
[Sat Aug 29 05:08:37.611565 2026] [security2:error] [pid 1034096:tid 1034253] [client 52.139.37.240:18820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/root.php"] [unique_id "apK9tS04twRPFuquKD2vwQAAAIc"]
[Sat Aug 29 05:08:37.616098 2026] [security2:error] [pid 1034096:tid 1034342] [client 45.148.10.60:6608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:(?:truncate|truncate|rename)[[:space:]]+[a-z| |0-9|\\\\*|\\\\.|\\\\,|\\\$|\\\$|_|\\\\-]+[[:space:]]+(?:into|from|table|database|index|view)[[:space:]]+[a-z|0-9|\\\\*| |\\\\{|\\\\.|\\\\,|\\\$|\\\$|_|\\\\-]|\\\\bunion\\\\b.{1,256}?select.{1,256}[a-z0-9\\\$\\\$].{1,256}(?:from|#| ..." at ARGS:author_exclude. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "296"] [id "340016"] [rev "46"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  SQL injection attempt detected"] [data "union all select 999999,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x7075626c697368,concat(0x7c7c,hex(cast((0x4f4b)as char)),0x7c7c),0x30,0x7075626c697368,0x30,0x30,0x30,0x30,0x30,0x30,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x30,0x30,0x30,0x30,0x706f7374,0x30--"] [severity "CRITICAL"] [tag "SQLi"] [hostname "villagebooksandbears.com"] [uri "/wp/v2/posts/999999"] [unique_id "apK9tS04twRPFuquKD2vwgAAAOA"]
[Sat Aug 29 05:08:37.629877 2026] [security2:error] [pid 1034096:tid 1034287] [client 20.240.128.207:24712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9tS04twRPFuquKD2vxQAAAKk"]
[Sat Aug 29 05:08:37.641765 2026] [security2:error] [pid 1028675:tid 1028837] [client 20.100.175.163:1202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/i.php"] [unique_id "apK9tddHPfW2QFvhmL4I1gAAABs"]
[Sat Aug 29 05:08:37.646450 2026] [security2:error] [pid 1028675:tid 1028866] [client 40.83.93.50:18889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/bypass.php"] [unique_id "apK9tddHPfW2QFvhmL4I1wAAADg"]
[Sat Aug 29 05:08:37.677579 2026] [security2:error] [pid 1034096:tid 1034274] [client 4.205.62.107:55979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/u88.php"] [unique_id "apK9tS04twRPFuquKD2v0AAAAJw"]
[Sat Aug 29 05:08:37.699753 2026] [security2:error] [pid 1034096:tid 1034189] [remote 68.65.123.210:32808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 210.123.65.68.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mcrl.tech"] [uri "/wp-login.php"] [unique_id "apK9tS04twRPFuquKD2v0QAAl0M"]
[Sat Aug 29 05:08:37.705245 2026] [security2:error] [pid 1034096:tid 1034302] [client 20.63.81.20:57856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/sushi.php"] [unique_id "apK9tS04twRPFuquKD2v1gAAALg"]
[Sat Aug 29 05:08:37.711164 2026] [security2:error] [pid 1034096:tid 1034291] [client 4.205.62.107:22173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/doc.php"] [unique_id "apK9tS04twRPFuquKD2v2gAAAK0"]
[Sat Aug 29 05:08:37.714922 2026] [security2:error] [pid 1028675:tid 1028861] [client 158.158.54.35:1693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-content/cong.php"] [unique_id "apK9tddHPfW2QFvhmL4I2AAAADM"]
[Sat Aug 29 05:08:37.733672 2026] [security2:error] [pid 1028675:tid 1028823] [client 74.248.24.12:19518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-content/themes/admin.php"] [unique_id "apK9tddHPfW2QFvhmL4I2QAAAA0"]
[Sat Aug 29 05:08:37.736657 2026] [security2:error] [pid 1034096:tid 1034259] [client 158.23.147.79:5989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK9tS04twRPFuquKD2v4AAAAI0"]
[Sat Aug 29 05:08:37.749121 2026] [security2:error] [pid 1028675:tid 1028847] [client 185.104.184.230:49988] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "www.enprocontracting.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "apK9tddHPfW2QFvhmL4I2gAAACU"]
[Sat Aug 29 05:08:37.767108 2026] [security2:error] [pid 1034096:tid 1034329] [client 45.148.10.60:6608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:(?:truncate|truncate|rename)[[:space:]]+[a-z| |0-9|\\\\*|\\\\.|\\\\,|\\\$|\\\$|_|\\\\-]+[[:space:]]+(?:into|from|table|database|index|view)[[:space:]]+[a-z|0-9|\\\\*| |\\\\{|\\\\.|\\\\,|\\\$|\\\$|_|\\\\-]|\\\\bunion\\\\b.{1,256}?select.{1,256}[a-z0-9\\\$\\\$].{1,256}(?:from|#| ..." at ARGS:author_exclude. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "296"] [id "340016"] [rev "46"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  SQL injection attempt detected"] [data "union all select 999999,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x7075626c697368,concat(0x7c7c,hex(cast((0x4f4b)as char)),0x7c7c),0x30,0x7075626c697368,0x30,0x30,0x30,0x30,0x30,0x30,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x30,0x30,0x30,0x30,0x706f7374,0x30,0x30,0x30--"] [severity "CRITICAL"] [tag "SQLi"] [hostname "villagebooksandbears.com"] [uri "/wp/v2/posts/999999"] [unique_id "apK9tS04twRPFuquKD2v5AAAANM"]
[Sat Aug 29 05:08:37.778288 2026] [security2:error] [pid 1034096:tid 1034367] [client 158.23.147.79:61580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wzy.php"] [unique_id "apK9tS04twRPFuquKD2v5gAAAPk"]
[Sat Aug 29 05:08:37.786202 2026] [security2:error] [pid 1034096:tid 1034293] [client 158.23.147.79:11398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK9tS04twRPFuquKD2v6AAAAK8"]
[Sat Aug 29 05:08:37.789458 2026] [security2:error] [pid 1034096:tid 1034197] [remote 66.29.148.71:49002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.148.29.66.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "malibuvetclinic.com"] [uri "/wp-login.php"] [unique_id "apK9tS04twRPFuquKD2v5QABBEs"]
[Sat Aug 29 05:08:37.793649 2026] [security2:error] [pid 1034096:tid 1034210] [remote 66.29.148.71:48988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.148.29.66.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "malibuvetclinic.com"] [uri "/wp-login.php"] [unique_id "apK9tS04twRPFuquKD2v4wAAulg"]
[Sat Aug 29 05:08:37.798638 2026] [security2:error] [pid 1034096:tid 1034301] [client 52.139.37.240:20878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/files/index.php"] [unique_id "apK9tS04twRPFuquKD2v6gAAALc"]
[Sat Aug 29 05:08:37.804833 2026] [security2:error] [pid 1034096:tid 1034372] [client 158.23.184.117:23242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/.dj/index.php"] [unique_id "apK9tS04twRPFuquKD2v6wAAAP4"]
[Sat Aug 29 05:08:37.811681 2026] [security2:error] [pid 1034096:tid 1034363] [client 20.48.160.90:63311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/tnglzqmv.php"] [unique_id "apK9tS04twRPFuquKD2v7AAAAPU"]
[Sat Aug 29 05:08:37.832162 2026] [security2:error] [pid 1034096:tid 1034286] [client 52.139.37.240:19275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/shell.php"] [unique_id "apK9tS04twRPFuquKD2v7wAAAKg"]
[Sat Aug 29 05:08:37.850017 2026] [security2:error] [pid 1028675:tid 1028918] [client 20.63.81.20:57954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/manga.php"] [unique_id "apK9tddHPfW2QFvhmL4I3QAAAGw"]
[Sat Aug 29 05:08:37.853432 2026] [security2:error] [pid 1034096:tid 1034321] [client 158.23.184.117:23264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/.info.php"] [unique_id "apK9tS04twRPFuquKD2v8gAAAMs"]
[Sat Aug 29 05:08:37.894304 2026] [security2:error] [pid 1034096:tid 1034290] [client 40.83.93.50:1084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-content/config.php"] [unique_id "apK9tS04twRPFuquKD2v-QAAAKw"]
[Sat Aug 29 05:08:37.908191 2026] [security2:error] [pid 1028675:tid 1028862] [client 158.23.147.79:6125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK9tddHPfW2QFvhmL4I4AAAADQ"]
[Sat Aug 29 05:08:37.922477 2026] [security2:error] [pid 1034096:tid 1034375] [client 45.148.10.60:6608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:(?:truncate|truncate|rename)[[:space:]]+[a-z| |0-9|\\\\*|\\\\.|\\\\,|\\\$|\\\$|_|\\\\-]+[[:space:]]+(?:into|from|table|database|index|view)[[:space:]]+[a-z|0-9|\\\\*| |\\\\{|\\\\.|\\\\,|\\\$|\\\$|_|\\\\-]|\\\\bunion\\\\b.{1,256}?select.{1,256}[a-z0-9\\\$\\\$].{1,256}(?:from|#| ..." at ARGS:author_exclude. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "296"] [id "340016"] [rev "46"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  SQL injection attempt detected"] [data "union all select 999999,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x7075626c697368,concat(0x7c7c,hex(cast((0x4f4b)as char)),0x7c7c),0x30,0x7075626c697368,0x30,0x30,0x30,0x30,0x30,0x30,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x30,0x30,0x30,0x30,0x706f7374--"] [severity "CRITICAL"] [tag "SQLi"] [hostname "villagebooksandbears.com"] [uri "/wp/v2/posts/999999"] [unique_id "apK9tS04twRPFuquKD2v-gAAAQE"]
[Sat Aug 29 05:08:37.924347 2026] [security2:error] [pid 1034096:tid 1034351] [client 20.197.61.180:10653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/csv.php"] [unique_id "apK9tS04twRPFuquKD2v_AAAAOk"]
[Sat Aug 29 05:08:37.930183 2026] [security2:error] [pid 1034096:tid 1034358] [client 20.52.41.200:4629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "apK9tS04twRPFuquKD2v_gAAAPA"]
[Sat Aug 29 05:08:37.957087 2026] [security2:error] [pid 1034096:tid 1034353] [client 20.48.160.90:65344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/wefile.php"] [unique_id "apK9tS04twRPFuquKD2wAQAAAOs"]
[Sat Aug 29 05:08:37.959618 2026] [security2:error] [pid 1034096:tid 1034317] [client 20.63.219.114:8881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/menu.php"] [unique_id "apK9tS04twRPFuquKD2wAgAAAMc"]
[Sat Aug 29 05:08:37.994682 2026] [security2:error] [pid 1028675:tid 1028855] [client 52.139.37.240:20495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "twistedr.com"] [uri "/flower.php"] [unique_id "apK9tddHPfW2QFvhmL4I4gAAAC0"]
[Sat Aug 29 05:08:37.995949 2026] [security2:error] [pid 1034096:tid 1034280] [client 20.63.81.20:63090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/asdfghj.php"] [unique_id "apK9tS04twRPFuquKD2wCQAAAKI"]
[Sat Aug 29 05:08:38.011332 2026] [security2:error] [pid 1034096:tid 1034255] [client 158.23.184.117:23256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/.trash7206/index.php"] [unique_id "apK9ti04twRPFuquKD2wDwAAAIk"]
[Sat Aug 29 05:08:38.017751 2026] [security2:error] [pid 1034096:tid 1034314] [client 178.211.139.240:49763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.139.211.178.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "santarosairis.org"] [uri "/images/images/cache.php"] [unique_id "apK9ti04twRPFuquKD2wEAAAAMQ"], referer: www.google.com
[Sat Aug 29 05:08:38.032766 2026] [security2:error] [pid 1034096:tid 1034306] [client 40.83.93.50:12501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/bypass.php"] [unique_id "apK9ti04twRPFuquKD2wGAAAALw"]
[Sat Aug 29 05:08:38.038537 2026] [security2:error] [pid 1034096:tid 1034260] [client 52.139.37.240:18847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK9ti04twRPFuquKD2wGQAAAI4"]
[Sat Aug 29 05:08:38.048080 2026] [security2:error] [pid 1034096:tid 1034266] [client 20.197.61.180:1408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/menu.php"] [unique_id "apK9ti04twRPFuquKD2wHAAAAJQ"]
[Sat Aug 29 05:08:38.073967 2026] [security2:error] [pid 1034096:tid 1034340] [client 45.148.10.60:6608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:(?:truncate|truncate|rename)[[:space:]]+[a-z| |0-9|\\\\*|\\\\.|\\\\,|\\\$|\\\$|_|\\\\-]+[[:space:]]+(?:into|from|table|database|index|view)[[:space:]]+[a-z|0-9|\\\\*| |\\\\{|\\\\.|\\\\,|\\\$|\\\$|_|\\\\-]|\\\\bunion\\\\b.{1,256}?select.{1,256}[a-z0-9\\\$\\\$].{1,256}(?:from|#| ..." at ARGS:author_exclude. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "296"] [id "340016"] [rev "46"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  SQL injection attempt detected"] [data "union all select 999999,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x7075626c697368,concat(0x7c7c,hex(cast((0x4f4b)as char)),0x7c7c),0x30,0x7075626c697368,0x30,0x30,0x30,0x30,0x30,0x30,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x30,0x30,0x30,0x30,0x706f7374,0x30,0x30,0x30,0x30--"] [severity "CRITICAL"] [tag "SQLi"] [hostname "villagebooksandbears.com"] [uri "/wp/v2/posts/999999"] [unique_id "apK9ti04twRPFuquKD2wIAAAAN4"]
[Sat Aug 29 05:08:38.094394 2026] [security2:error] [pid 1034096:tid 1034325] [client 20.48.160.90:64177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/blog.php"] [unique_id "apK9ti04twRPFuquKD2wIQAAAM8"]
[Sat Aug 29 05:08:38.124328 2026] [security2:error] [pid 1034096:tid 1034360] [client 20.100.175.163:48234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/deepseek_d.php"] [unique_id "apK9ti04twRPFuquKD2wJwAAAPI"]
[Sat Aug 29 05:08:38.131306 2026] [security2:error] [pid 1034096:tid 1034368] [client 20.240.128.207:22114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/alfa-rex.php7"] [unique_id "apK9ti04twRPFuquKD2wKQAAAPo"]
[Sat Aug 29 05:08:38.134434 2026] [security2:error] [pid 1034096:tid 1034373] [client 20.63.81.20:63060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/dragonshell.php"] [unique_id "apK9ti04twRPFuquKD2wKgAAAP8"]
[Sat Aug 29 05:08:38.148565 2026] [security2:error] [pid 1034096:tid 1034362] [client 20.104.49.130:58189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/cilus.php"] [unique_id "apK9ti04twRPFuquKD2wLQAAAPQ"]
[Sat Aug 29 05:08:38.158125 2026] [security2:error] [pid 1034096:tid 1034374] [client 158.23.184.117:23112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/.trash7206/min.php"] [unique_id "apK9ti04twRPFuquKD2wLgAAAQA"]
[Sat Aug 29 05:08:38.158559 2026] [security2:error] [pid 1034096:tid 1034274] [client 158.158.54.35:1801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK9ti04twRPFuquKD2wLwAAAJw"]
[Sat Aug 29 05:08:38.202181 2026] [security2:error] [pid 1034096:tid 1034304] [client 158.23.147.79:49856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/mah.php"] [unique_id "apK9ti04twRPFuquKD2wMwAAALo"]
[Sat Aug 29 05:08:38.215407 2026] [security2:error] [pid 1028675:tid 1028837] [client 20.203.141.11:11630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK9ttdHPfW2QFvhmL4I7QAAABs"]
[Sat Aug 29 05:08:38.225220 2026] [security2:error] [pid 1034096:tid 1034327] [client 45.148.10.60:6608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:(?:truncate|truncate|rename)[[:space:]]+[a-z| |0-9|\\\\*|\\\\.|\\\\,|\\\$|\\\$|_|\\\\-]+[[:space:]]+(?:into|from|table|database|index|view)[[:space:]]+[a-z|0-9|\\\\*| |\\\\{|\\\\.|\\\\,|\\\$|\\\$|_|\\\\-]|\\\\bunion\\\\b.{1,256}?select.{1,256}[a-z0-9\\\$\\\$].{1,256}(?:from|#| ..." at ARGS:author_exclude. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "296"] [id "340016"] [rev "46"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  SQL injection attempt detected"] [data "union all select 999999,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x7075626c697368,concat(0x7c7c,hex(cast((0x4f4b)as char)),0x7c7c),0x30,0x7075626c697368,0x30,0x30,0x30,0x30,0x30,0x30,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x30,0x30,0x30,0x30,0x706f7374,0x30,0x30,0x30,0x30,0x30--"] [severity "CRITICAL"] [tag "SQLi"] [hostname "villagebooksandbears.com"] [uri "/wp/v2/posts/999999"] [unique_id "apK9ti04twRPFuquKD2wNgAAANE"]
[Sat Aug 29 05:08:38.243396 2026] [security2:error] [pid 1034096:tid 1034349] [client 52.139.37.240:19352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/wp-content/plugins/linkpreview/il.php"] [unique_id "apK9ti04twRPFuquKD2wOQAAAOc"]
[Sat Aug 29 05:08:38.245555 2026] [security2:error] [pid 1034096:tid 1034355] [client 74.248.24.12:29778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-admin/css/admin.php"] [unique_id "apK9ti04twRPFuquKD2wOgAAAO0"]
[Sat Aug 29 05:08:38.246895 2026] [security2:error] [pid 1028675:tid 1028867] [client 20.48.160.90:64238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/wp-admin/js/wp-load.php"] [unique_id "apK9ttdHPfW2QFvhmL4I7gAAADk"]
[Sat Aug 29 05:08:38.250843 2026] [security2:error] [pid 1034096:tid 1034361] [client 40.83.93.50:18936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/extractable-loader-head.php"] [unique_id "apK9ti04twRPFuquKD2wOwAAAPM"]
[Sat Aug 29 05:08:38.277996 2026] [security2:error] [pid 1028675:tid 1028866] [client 20.63.81.20:63049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/wp-safe.php"] [unique_id "apK9ttdHPfW2QFvhmL4I7wAAADg"]
[Sat Aug 29 05:08:38.300223 2026] [security2:error] [pid 1028675:tid 1028892] [client 158.23.184.117:23126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/.well-known//index.php"] [unique_id "apK9ttdHPfW2QFvhmL4I8AAAAFI"]
[Sat Aug 29 05:08:38.349377 2026] [security2:error] [pid 1028675:tid 1028833] [client 158.23.147.79:17560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-admin/network/index.php"] [unique_id "apK9ttdHPfW2QFvhmL4I8wAAABc"]
[Sat Aug 29 05:08:38.356234 2026] [security2:error] [pid 1034096:tid 1034350] [client 20.63.219.114:15485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/alfa.php"] [unique_id "apK9ti04twRPFuquKD2wTAAAAOg"]
[Sat Aug 29 05:08:38.376031 2026] [security2:error] [pid 1034096:tid 1034321] [client 45.148.10.60:6608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:(?:truncate|truncate|rename)[[:space:]]+[a-z| |0-9|\\\\*|\\\\.|\\\\,|\\\$|\\\$|_|\\\\-]+[[:space:]]+(?:into|from|table|database|index|view)[[:space:]]+[a-z|0-9|\\\\*| |\\\\{|\\\\.|\\\\,|\\\$|\\\$|_|\\\\-]|\\\\bunion\\\\b.{1,256}?select.{1,256}[a-z0-9\\\$\\\$].{1,256}(?:from|#| ..." at ARGS:author_exclude. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "296"] [id "340016"] [rev "46"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  SQL injection attempt detected"] [data "union all select 999999,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x7075626c697368,concat(0x7c7c,hex(cast((0x4f4b)as char)),0x7c7c),0x30,0x7075626c697368,0x30,0x30,0x30,0x30,0x30,0x30,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x30,0x30,0x30,0x30--"] [severity "CRITICAL"] [tag "SQLi"] [hostname "villagebooksandbears.com"] [uri "/wp/v2/posts/999999"] [unique_id "apK9ti04twRPFuquKD2wTwAAAMs"]
[Sat Aug 29 05:08:38.382566 2026] [security2:error] [pid 1034096:tid 1034286] [client 20.52.41.200:4564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/gifclass.php"] [unique_id "apK9ti04twRPFuquKD2wUwAAAKg"]
[Sat Aug 29 05:08:38.384962 2026] [security2:error] [pid 1028675:tid 1028814] [client 4.205.62.107:58408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/aws_keys.php"] [unique_id "apK9ttdHPfW2QFvhmL4I9AAAAAQ"]
[Sat Aug 29 05:08:38.390278 2026] [security2:error] [pid 1034096:tid 1034300] [client 40.83.93.50:1066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-content/cong.php"] [unique_id "apK9ti04twRPFuquKD2wVgAAALY"]
[Sat Aug 29 05:08:38.390592 2026] [security2:error] [pid 1034096:tid 1034298] [client 185.104.184.230:49992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.184.104.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.enprocontracting.com"] [uri "/xmlrpc.php"] [unique_id "apK9ti04twRPFuquKD2wUAAAALQ"]
[Sat Aug 29 05:08:38.415581 2026] [security2:error] [pid 1034096:tid 1034376] [client 20.63.81.20:57930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/gjewuagf.php"] [unique_id "apK9ti04twRPFuquKD2wWwAAAQI"]
[Sat Aug 29 05:08:38.429038 2026] [security2:error] [pid 1034096:tid 1034335] [client 20.48.160.90:64241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/robot.php"] [unique_id "apK9ti04twRPFuquKD2wXQAAANk"]
[Sat Aug 29 05:08:38.442419 2026] [security2:error] [pid 1034096:tid 1034310] [client 52.139.37.240:19269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/wp-header-json.php"] [unique_id "apK9ti04twRPFuquKD2wXwAAAMA"]
[Sat Aug 29 05:08:38.446431 2026] [security2:error] [pid 1028675:tid 1028903] [client 158.23.184.117:23246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/.well-known/about.php"] [unique_id "apK9ttdHPfW2QFvhmL4I9QAAAF0"]
[Sat Aug 29 05:08:38.528373 2026] [security2:error] [pid 1034096:tid 1034255] [client 45.148.10.60:6608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:(?:truncate|truncate|rename)[[:space:]]+[a-z| |0-9|\\\\*|\\\\.|\\\\,|\\\$|\\\$|_|\\\\-]+[[:space:]]+(?:into|from|table|database|index|view)[[:space:]]+[a-z|0-9|\\\\*| |\\\\{|\\\\.|\\\\,|\\\$|\\\$|_|\\\\-]|\\\\bunion\\\\b.{1,256}?select.{1,256}[a-z0-9\\\$\\\$].{1,256}(?:from|#| ..." at ARGS:author_exclude. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "296"] [id "340016"] [rev "46"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  SQL injection attempt detected"] [data "union all select 999999,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x7075626c697368,concat(0x7c7c,hex(cast((0x4f4b)as char)),0x7c7c),0x30,0x7075626c697368,0x30,0x30,0x30,0x30,0x30,0x30,0x323032302d30312d30312030303a30303a3030,0x323032302d30312d30312030303a30303a3030,0x30,0x30,0x30,0x30,0x706f7374,0x30,0x30,0x30,0x30,0x30,0x30--"] [severity "CRITICAL"] [tag "SQLi"] [hostname "villagebooksandbears.com"] [uri "/wp/v2/posts/999999"] [unique_id "apK9ti04twRPFuquKD2wZgAAAIk"]
[Sat Aug 29 05:08:38.532337 2026] [security2:error] [pid 1028675:tid 1028840] [client 68.155.159.216:33713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/atomlib.php"] [unique_id "apK9ttdHPfW2QFvhmL4I-QAAAB4"]
[Sat Aug 29 05:08:38.532346 2026] [security2:error] [pid 1028675:tid 1028832] [client 40.83.93.50:4091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/extractable-loader-head.php"] [unique_id "apK9ttdHPfW2QFvhmL4I-gAAABY"]
[Sat Aug 29 05:08:38.551187 2026] [security2:error] [pid 1034096:tid 1034295] [client 4.205.62.107:53317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/dd.php"] [unique_id "apK9ti04twRPFuquKD2wbgAAALE"]
[Sat Aug 29 05:08:38.568631 2026] [security2:error] [pid 1034096:tid 1034373] [client 20.63.81.20:63093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/tnglzqmv.php"] [unique_id "apK9ti04twRPFuquKD2wcQAAAP8"]
[Sat Aug 29 05:08:38.575989 2026] [security2:error] [pid 1028675:tid 1028900] [client 4.205.62.107:6939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/oiko6u.php"] [unique_id "apK9ttdHPfW2QFvhmL4I_AAAAFo"]
[Sat Aug 29 05:08:38.579259 2026] [security2:error] [pid 1034096:tid 1034324] [client 57.141.14.6:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/cart/"] [unique_id "apK9ti04twRPFuquKD2wcgAAAM4"]
[Sat Aug 29 05:08:38.582147 2026] [security2:error] [pid 1034096:tid 1034378] [client 20.48.160.90:63239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/revo.php"] [unique_id "apK9ti04twRPFuquKD2wdAAAAQQ"]
[Sat Aug 29 05:08:38.590285 2026] [security2:error] [pid 1034096:tid 1034161] [remote 34.73.62.26:53596] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.strangeworx.com"] [uri "/dev/.env"] [unique_id "apK9ti04twRPFuquKD2wdgAA0ic"]
[Sat Aug 29 05:08:38.591117 2026] [security2:error] [pid 1034096:tid 1034147] [remote 34.73.62.26:53596] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.strangeworx.com"] [uri "/src/.env"] [unique_id "apK9ti04twRPFuquKD2wdwAA0hk"]
[Sat Aug 29 05:08:38.591957 2026] [security2:error] [pid 1034096:tid 1034161] [remote 34.73.62.26:53596] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.strangeworx.com"] [uri "/server/.env"] [unique_id "apK9ti04twRPFuquKD2weAAA0ic"]
[Sat Aug 29 05:08:38.592016 2026] [security2:error] [pid 1034096:tid 1034145] [remote 34.73.62.26:53596] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.strangeworx.com"] [uri "/app/.env"] [unique_id "apK9ti04twRPFuquKD2weQAA0hc"]
[Sat Aug 29 05:08:38.595780 2026] [security2:error] [pid 1034096:tid 1034157] [remote 34.73.62.26:53596] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.strangeworx.com"] [uri "/frontend/.env"] [unique_id "apK9ti04twRPFuquKD2wewAAzSM"]
[Sat Aug 29 05:08:38.606425 2026] [security2:error] [pid 1034096:tid 1034372] [client 4.205.62.107:24993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/channels.php"] [unique_id "apK9ti04twRPFuquKD2wfgAAAP4"]
[Sat Aug 29 05:08:38.611957 2026] [security2:error] [pid 1034096:tid 1034178] [remote 34.73.62.26:53596] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.strangeworx.com"] [uri "/production/.env"] [unique_id "apK9ti04twRPFuquKD2wfwAA0Tg"]
[Sat Aug 29 05:08:38.618324 2026] [core:error] [pid 1028675:tid 1028823] [client 20.100.175.163:5558] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:38.618346 2026] [core:error] [pid 1028675:tid 1028823] [client 20.100.175.163:5558] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:38.625728 2026] [security2:error] [pid 1028675:tid 1028847] [client 158.158.54.35:1793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-mail.php"] [unique_id "apK9ttdHPfW2QFvhmL4I_wAAACU"]
[Sat Aug 29 05:08:38.631544 2026] [security2:error] [pid 1034096:tid 1034342] [client 20.240.128.207:22121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "apK9ti04twRPFuquKD2whAAAAOA"]
[Sat Aug 29 05:08:38.631565 2026] [security2:error] [pid 1028675:tid 1028863] [client 20.197.61.180:12331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/fox.php"] [unique_id "apK9ttdHPfW2QFvhmL4JAAAAADU"]
[Sat Aug 29 05:08:38.636183 2026] [autoindex:error] [pid 1034096:tid 1034337] [client 158.23.184.117:0] AH01276: Cannot serve directory /home3/rushpcbc/public_html/foxmart/.well-known/acme-challenge/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:08:38.640143 2026] [security2:error] [pid 1034096:tid 1034303] [client 4.205.62.107:62944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/dialog.php"] [unique_id "apK9ti04twRPFuquKD2whQAAALk"]
[Sat Aug 29 05:08:38.641673 2026] [security2:error] [pid 1034096:tid 1034374] [client 52.139.37.240:19355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/zup.php"] [unique_id "apK9ti04twRPFuquKD2whgAAAQA"]
[Sat Aug 29 05:08:38.669810 2026] [security2:error] [pid 1034096:tid 1034344] [client 20.104.49.130:46576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/menu.php"] [unique_id "apK9ti04twRPFuquKD2wiwAAAOI"]
[Sat Aug 29 05:08:38.680245 2026] [security2:error] [pid 1034096:tid 1034321] [client 45.148.10.60:6608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\w ?(?:user|and)(\\\\w+)char ?\\\\([0-9]| \\\\b(?:execute|convert) ?\\\\(|; ?\\\\bdelete\\\\b.{1,100}?; ?(?:insert|declare @|varchar) ?|\\\\bdrop\\\\b .{1,100} table |(?:declare|convert) .{1,100} varchar\\\\(|null ?, ?null ?, ?(?:accesslevel|user_?name) ?,|\\\\bconcat ..." at ARGS:author_exclude. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "395"] [id "340157"] [rev "38"] [msg "Atomicorp.com WAF Rules: Generic SQL inline command protection"] [data "concat(,ARGS:author_exclude"] [severity "CRITICAL"] [tag "SQLi"] [hostname "villagebooksandbears.com"] [uri "/wp/v2/posts/999999"] [unique_id "apK9ti04twRPFuquKD2wjQAAAMs"]
[Sat Aug 29 05:08:38.682758 2026] [security2:error] [pid 1034096:tid 1034314] [client 20.203.141.11:2570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.141.203.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.newflooringhawaii.com"] [uri "/wp-admin.php"] [unique_id "apK9ti04twRPFuquKD2wkAAAAMQ"]
[Sat Aug 29 05:08:38.721820 2026] [security2:error] [pid 1028675:tid 1028824] [client 20.63.81.20:57906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/wefile.php"] [unique_id "apK9ttdHPfW2QFvhmL4JAgAAAA4"]
[Sat Aug 29 05:08:38.745333 2026] [security2:error] [pid 1028675:tid 1028928] [client 20.63.219.114:10462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/feed-rss2-queue.php"] [unique_id "apK9ttdHPfW2QFvhmL4JAwAAAHY"]
[Sat Aug 29 05:08:38.761290 2026] [security2:error] [pid 1034096:tid 1034356] [client 20.48.160.90:62119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/birrs.php"] [unique_id "apK9ti04twRPFuquKD2wlwAAAO4"]
[Sat Aug 29 05:08:38.765061 2026] [security2:error] [pid 1034096:tid 1034283] [client 74.248.24.12:10348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/adminfuns.php"] [unique_id "apK9ti04twRPFuquKD2wmQAAAKU"]
[Sat Aug 29 05:08:38.765061 2026] [security2:error] [pid 1034096:tid 1034280] [client 20.197.61.180:10657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/alfa.php"] [unique_id "apK9ti04twRPFuquKD2wmAAAAKI"]
[Sat Aug 29 05:08:38.767899 2026] [security2:error] [pid 1034096:tid 1034274] [client 40.83.93.50:18925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/defaults.php"] [unique_id "apK9ti04twRPFuquKD2wmgAAAJw"]
[Sat Aug 29 05:08:38.785574 2026] [security2:error] [pid 1034096:tid 1034172] [remote 34.73.62.26:53596] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.strangeworx.com"] [uri "/v2/.env"] [unique_id "apK9ti04twRPFuquKD2wnQAA8TI"]
[Sat Aug 29 05:08:38.827956 2026] [security2:error] [pid 1034096:tid 1034297] [client 4.205.62.107:53160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/config/laravolt/css/index.php"] [unique_id "apK9ti04twRPFuquKD2wogAAALM"]
[Sat Aug 29 05:08:38.828959 2026] [security2:error] [pid 1034096:tid 1034189] [remote 34.73.62.26:53596] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.strangeworx.com"] [uri "/v1/.env"] [unique_id "apK9ti04twRPFuquKD2wpQABAkM"]
[Sat Aug 29 05:08:38.829013 2026] [security2:error] [pid 1034096:tid 1034165] [remote 34.73.62.26:53596] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.strangeworx.com"] [uri "/staging/.env"] [unique_id "apK9ti04twRPFuquKD2wpAABAis"]
[Sat Aug 29 05:08:38.829016 2026] [security2:error] [pid 1034096:tid 1034185] [remote 34.73.62.26:53596] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.strangeworx.com"] [uri "/old/.env"] [unique_id "apK9ti04twRPFuquKD2wowABAj8"]
[Sat Aug 29 05:08:38.829695 2026] [security2:error] [pid 1034096:tid 1034335] [client 45.148.10.60:6608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:procedure\\\\s+analyse\\\\s.{0,100}\\\$|create\\\\s+(procedure|function)\\\\s.{0,100}\\\\w+\\\\s.{0,100}\\\\(\\\\s.{0,200}\\\$\\\\s.{0,100}declare[^\\\\w]+[@#]\\\\s.{0,100}\\\\w+|exec\\\\s.{0,100}\\\\(\\\\s.{0,200}@|\\\\b(?:sleep|benchmark)\\\\b ?\\\\( ?[0-9])" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "273"] [id "380122"] [rev "5"] [msg "Atomicorp.com WAF Rules: MySQL and PostgreSQL stored procedure/function injections"] [data "sleep(0"] [severity "CRITICAL"] [tag "SQLi"] [hostname "villagebooksandbears.com"] [uri "/wp/v2/posts/999999"] [unique_id "apK9ti04twRPFuquKD2wpgAAANk"]
[Sat Aug 29 05:08:38.839598 2026] [security2:error] [pid 1034096:tid 1034332] [client 52.139.37.240:18839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/a9.php"] [unique_id "apK9ti04twRPFuquKD2wpwAAANY"]
[Sat Aug 29 05:08:38.839693 2026] [security2:error] [pid 1034096:tid 1034292] [client 158.23.147.79:6109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-content/languages/about.php"] [unique_id "apK9ti04twRPFuquKD2wqAAAAK4"]
[Sat Aug 29 05:08:38.844535 2026] [security2:error] [pid 1034096:tid 1034202] [remote 34.73.62.26:53596] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.strangeworx.com"] [uri "/apps/.env"] [unique_id "apK9ti04twRPFuquKD2wqgAAm1A"]
[Sat Aug 29 05:08:38.854035 2026] [security2:error] [pid 1028675:tid 1028914] [client 20.63.81.20:57921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/blog.php"] [unique_id "apK9ttdHPfW2QFvhmL4JBAAAAGg"]
[Sat Aug 29 05:08:38.858877 2026] [security2:error] [pid 1028675:tid 1028846] [client 40.83.93.50:1024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-content/content.php"] [unique_id "apK9ttdHPfW2QFvhmL4JCQAAACQ"]
[Sat Aug 29 05:08:38.870897 2026] [security2:error] [pid 1028675:tid 1028925] [client 4.205.62.107:21631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/css.php"] [unique_id "apK9ttdHPfW2QFvhmL4JCgAAAHM"]
[Sat Aug 29 05:08:38.879404 2026] [security2:error] [pid 1028675:tid 1028848] [client 158.23.147.79:53794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK9ttdHPfW2QFvhmL4JCwAAACY"]
[Sat Aug 29 05:08:38.897129 2026] [security2:error] [pid 1034096:tid 1034317] [client 68.155.159.216:64024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK9ti04twRPFuquKD2wsAAAAMc"]
[Sat Aug 29 05:08:38.900517 2026] [security2:error] [pid 1028675:tid 1028937] [client 158.23.147.79:11394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-content/radio.php"] [unique_id "apK9ttdHPfW2QFvhmL4JDAAAAH8"]
[Sat Aug 29 05:08:38.914758 2026] [security2:error] [pid 1034096:tid 1034210] [remote 34.73.62.26:53596] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.strangeworx.com"] [uri "/docker/.env"] [unique_id "apK9ti04twRPFuquKD2wsQAAl1g"]
[Sat Aug 29 05:08:38.921623 2026] [security2:error] [pid 1028675:tid 1028908] [client 20.48.160.90:64201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/sss.php"] [unique_id "apK9ttdHPfW2QFvhmL4JDQAAAGI"]
[Sat Aug 29 05:08:38.945404 2026] [security2:error] [pid 1034096:tid 1034207] [remote 93.123.109.228:60596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/config.php"] [unique_id "apK9ti04twRPFuquKD2wtQAAuFU"]
[Sat Aug 29 05:08:38.962594 2026] [security2:error] [pid 1034096:tid 1034340] [client 158.23.184.117:23287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK9ti04twRPFuquKD2wuQAAAN4"]
[Sat Aug 29 05:08:38.980252 2026] [security2:error] [pid 1034096:tid 1034369] [client 45.148.10.60:6608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:procedure\\\\s+analyse\\\\s.{0,100}\\\$|create\\\\s+(procedure|function)\\\\s.{0,100}\\\\w+\\\\s.{0,100}\\\\(\\\\s.{0,200}\\\$\\\\s.{0,100}declare[^\\\\w]+[@#]\\\\s.{0,100}\\\\w+|exec\\\\s.{0,100}\\\\(\\\\s.{0,200}@|\\\\b(?:sleep|benchmark)\\\\b ?\\\\( ?[0-9])" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "273"] [id "380122"] [rev "5"] [msg "Atomicorp.com WAF Rules: MySQL and PostgreSQL stored procedure/function injections"] [data "sleep(3"] [severity "CRITICAL"] [tag "SQLi"] [hostname "villagebooksandbears.com"] [uri "/wp/v2/posts/999999"] [unique_id "apK9ti04twRPFuquKD2wvgAAAPs"]
[Sat Aug 29 05:08:38.995977 2026] [security2:error] [pid 1028675:tid 1028860] [client 20.63.81.20:63081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/wp-admin/js/wp-load.php"] [unique_id "apK9ttdHPfW2QFvhmL4JDgAAADI"]
[Sat Aug 29 05:08:38.996451 2026] [security2:error] [pid 1034096:tid 1034325] [client 20.52.41.200:4604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK9ti04twRPFuquKD2wwQAAAM8"]
[Sat Aug 29 05:08:39.037837 2026] [security2:error] [pid 1034096:tid 1034214] [remote 93.123.109.228:60596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/config/aws.php"] [unique_id "apK9ty04twRPFuquKD2wxAAAuFw"]
[Sat Aug 29 05:08:39.037838 2026] [security2:error] [pid 1028675:tid 1028694] [remote 74.7.227.154:37794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK9t9dHPfW2QFvhmL4JEQAAGw4"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwp-easycart%2Fadmin%2Felementor
[Sat Aug 29 05:08:39.060136 2026] [security2:error] [pid 1028675:tid 1028813] [client 52.139.37.240:19335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/admin/index.php"] [unique_id "apK9t9dHPfW2QFvhmL4JFAAAAAM"]
[Sat Aug 29 05:08:39.066086 2026] [security2:error] [pid 1028675:tid 1028894] [client 40.83.93.50:12516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/defaults.php"] [unique_id "apK9t9dHPfW2QFvhmL4JFgAAAFQ"]
[Sat Aug 29 05:08:39.073862 2026] [security2:error] [pid 1034096:tid 1034367] [client 158.23.147.79:26614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK9ty04twRPFuquKD2wxwAAAPk"]
[Sat Aug 29 05:08:39.074654 2026] [security2:error] [pid 1028675:tid 1028842] [client 158.158.54.35:18914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-content.php"] [unique_id "apK9t9dHPfW2QFvhmL4JFwAAACA"]
[Sat Aug 29 05:08:39.092061 2026] [security2:error] [pid 1034096:tid 1034215] [remote 34.73.62.26:53596] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.strangeworx.com"] [uri "/site/.env"] [unique_id "apK9ty04twRPFuquKD2wyAAA8l0"]
[Sat Aug 29 05:08:39.097298 2026] [security2:error] [pid 1034096:tid 1034223] [remote 34.73.62.26:53596] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.strangeworx.com"] [uri "/env.bak"] [unique_id "apK9ty04twRPFuquKD2wyQAA_2U"]
[Sat Aug 29 05:08:39.103158 2026] [security2:error] [pid 1034096:tid 1034227] [remote 34.73.62.26:53596] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "www.strangeworx.com"] [uri "/env.old"] [unique_id "apK9ty04twRPFuquKD2wygAAoGk"]
[Sat Aug 29 05:08:39.103454 2026] [security2:error] [pid 1034096:tid 1034234] [remote 93.123.109.228:60596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/config/config.inc.php"] [unique_id "apK9ty04twRPFuquKD2wzQAAr3A"]
[Sat Aug 29 05:08:39.104403 2026] [security2:error] [pid 1034096:tid 1034229] [remote 34.73.62.26:53596] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.strangeworx.com"] [uri "/.docker/.env"] [unique_id "apK9ty04twRPFuquKD2wywAAoGs"]
[Sat Aug 29 05:08:39.111293 2026] [security2:error] [pid 1034096:tid 1034285] [client 158.23.184.117:23252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/.well-known/acme-challenge/content.php"] [unique_id "apK9ty04twRPFuquKD2w0AAAAKc"]
[Sat Aug 29 05:08:39.111450 2026] [security2:error] [pid 1034096:tid 1034200] [remote 34.73.62.26:53596] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.strangeworx.com"] [uri "/portal/.env"] [unique_id "apK9ty04twRPFuquKD2wzgAAt04"]
[Sat Aug 29 05:08:39.111642 2026] [security2:error] [pid 1028675:tid 1028835] [client 20.100.175.163:28733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "apK9t9dHPfW2QFvhmL4JGAAAABk"]
[Sat Aug 29 05:08:39.125135 2026] [security2:error] [pid 1034096:tid 1034307] [client 20.63.219.114:17078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/inputs.php"] [unique_id "apK9ty04twRPFuquKD2w0wAAAL0"]
[Sat Aug 29 05:08:39.132966 2026] [security2:error] [pid 1034096:tid 1034304] [client 45.148.10.60:6608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:procedure\\\\s+analyse\\\\s.{0,100}\\\$|create\\\\s+(procedure|function)\\\\s.{0,100}\\\\w+\\\\s.{0,100}\\\\(\\\\s.{0,200}\\\$\\\\s.{0,100}declare[^\\\\w]+[@#]\\\\s.{0,100}\\\\w+|exec\\\\s.{0,100}\\\\(\\\\s.{0,200}@|\\\\b(?:sleep|benchmark)\\\\b ?\\\\( ?[0-9])" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "273"] [id "380122"] [rev "5"] [msg "Atomicorp.com WAF Rules: MySQL and PostgreSQL stored procedure/function injections"] [data "sleep(0"] [severity "CRITICAL"] [tag "SQLi"] [hostname "villagebooksandbears.com"] [uri "/wp/v2/posts/999999"] [unique_id "apK9ty04twRPFuquKD2w1AAAALo"]
[Sat Aug 29 05:08:39.133025 2026] [security2:error] [pid 1034096:tid 1034225] [remote 93.123.109.228:60596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/config/config.php"] [unique_id "apK9ty04twRPFuquKD2w1QAAr2c"]
[Sat Aug 29 05:08:39.135427 2026] [security2:error] [pid 1034096:tid 1034306] [client 20.63.81.20:57872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/robot.php"] [unique_id "apK9ty04twRPFuquKD2w1gAAALw"]
[Sat Aug 29 05:08:39.145031 2026] [security2:error] [pid 1028675:tid 1028833] [client 20.48.160.90:63337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/wp-includes/ID3/moon.php"] [unique_id "apK9t9dHPfW2QFvhmL4JGgAAABc"]
[Sat Aug 29 05:08:39.145148 2026] [security2:error] [pid 1034096:tid 1034221] [remote 34.73.62.26:53596] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.strangeworx.com"] [uri "/api/.env.bak"] [unique_id "apK9ty04twRPFuquKD2w2AAA0mM"]
[Sat Aug 29 05:08:39.172504 2026] [security2:error] [pid 1034096:tid 1034262] [client 20.240.128.207:24754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/upload.php"] [unique_id "apK9ty04twRPFuquKD2w3AAAAJA"]
[Sat Aug 29 05:08:39.188017 2026] [security2:error] [pid 1034096:tid 1034241] [remote 93.123.109.228:60596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/config/env.php"] [unique_id "apK9ty04twRPFuquKD2w3gAArHc"]
[Sat Aug 29 05:08:39.193425 2026] [security2:error] [pid 1034096:tid 1034228] [remote 74.7.227.189:59584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 189.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pinnacleforms.com"] [uri "/OeShipInfoUD.php"] [unique_id "apK9ty04twRPFuquKD2w3wAA0Wo"], referer: https://mail.pinnacleforms.com/
[Sat Aug 29 05:08:39.230922 2026] [security2:error] [pid 1034096:tid 1034122] [remote 93.123.109.228:60596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/config/module.config.php"] [unique_id "apK9ty04twRPFuquKD2w4wAAuQA"]
[Sat Aug 29 05:08:39.230961 2026] [security2:error] [pid 1034096:tid 1034125] [remote 93.123.109.228:60596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/config/nexmo.php"] [unique_id "apK9ty04twRPFuquKD2w5AAAuQM"]
[Sat Aug 29 05:08:39.267134 2026] [security2:error] [pid 1034096:tid 1034362] [client 74.248.24.12:5466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/goods.php"] [unique_id "apK9ty04twRPFuquKD2w6gAAAPQ"]
[Sat Aug 29 05:08:39.276044 2026] [security2:error] [pid 1034096:tid 1034231] [remote 93.123.109.228:60596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/config/stripe.php"] [unique_id "apK9ty04twRPFuquKD2w6wAA6G0"]
[Sat Aug 29 05:08:39.277897 2026] [security2:error] [pid 1028675:tid 1028841] [client 20.63.81.20:57926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/revo.php"] [unique_id "apK9t9dHPfW2QFvhmL4JIAAAAB8"]
[Sat Aug 29 05:08:39.278642 2026] [security2:error] [pid 1034096:tid 1034276] [client 52.139.37.240:18816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/makeasmtp.php"] [unique_id "apK9ty04twRPFuquKD2w7AAAAJ4"]
[Sat Aug 29 05:08:39.283351 2026] [security2:error] [pid 1034096:tid 1034363] [client 45.148.10.60:6608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:procedure\\\\s+analyse\\\\s.{0,100}\\\$|create\\\\s+(procedure|function)\\\\s.{0,100}\\\\w+\\\\s.{0,100}\\\\(\\\\s.{0,200}\\\$\\\\s.{0,100}declare[^\\\\w]+[@#]\\\\s.{0,100}\\\\w+|exec\\\\s.{0,100}\\\\(\\\\s.{0,200}@|\\\\b(?:sleep|benchmark)\\\\b ?\\\\( ?[0-9])" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "273"] [id "380122"] [rev "5"] [msg "Atomicorp.com WAF Rules: MySQL and PostgreSQL stored procedure/function injections"] [data "sleep(3"] [severity "CRITICAL"] [tag "SQLi"] [hostname "villagebooksandbears.com"] [uri "/wp/v2/posts/999999"] [unique_id "apK9ty04twRPFuquKD2w7gAAAPU"]
[Sat Aug 29 05:08:39.301843 2026] [security2:error] [pid 1028675:tid 1028900] [client 20.48.160.90:64167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/xmini4.php"] [unique_id "apK9t9dHPfW2QFvhmL4JIgAAAFo"]
[Sat Aug 29 05:08:39.305729 2026] [security2:error] [pid 1034096:tid 1034320] [client 103.171.189.88:62143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9ty04twRPFuquKD2w8AAAAMo"]
[Sat Aug 29 05:08:39.305811 2026] [security2:error] [pid 1034096:tid 1034320] [client 103.171.189.88:62143] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9ty04twRPFuquKD2w8AAAAMo"]
[Sat Aug 29 05:08:39.306325 2026] [security2:error] [pid 1034096:tid 1034267] [client 158.23.147.79:49795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-blog-header.php"] [unique_id "apK9ty04twRPFuquKD2w8QAAAJU"]
[Sat Aug 29 05:08:39.319584 2026] [security2:error] [pid 1028675:tid 1028922] [client 39.44.3.46:50080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.3.44.39.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mihpmovewell.com"] [uri "/xmlrpc.php"] [unique_id "apK9t9dHPfW2QFvhmL4JIwAAAHA"]
[Sat Aug 29 05:08:39.319694 2026] [security2:error] [pid 1028675:tid 1028922] [client 39.44.3.46:50080] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mihpmovewell.com"] [uri "/xmlrpc.php"] [unique_id "apK9t9dHPfW2QFvhmL4JIwAAAHA"]
[Sat Aug 29 05:08:39.319843 2026] [security2:error] [pid 1028675:tid 1028916] [client 20.104.49.130:58069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/ws78.php"] [unique_id "apK9t9dHPfW2QFvhmL4JJQAAAGo"]
[Sat Aug 29 05:08:39.334146 2026] [security2:error] [pid 1034096:tid 1034342] [client 40.83.93.50:21260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-content/core.php"] [unique_id "apK9ty04twRPFuquKD2w9QAAAOA"]
[Sat Aug 29 05:08:39.352549 2026] [security2:error] [pid 1034096:tid 1034324] [client 20.197.61.180:1432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/disagraeosc.php"] [unique_id "apK9ty04twRPFuquKD2w-AAAAM4"]
[Sat Aug 29 05:08:39.381300 2026] [security2:error] [pid 1034096:tid 1034139] [remote 34.73.62.26:53596] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "www.strangeworx.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK9ty04twRPFuquKD2w-wAAnBE"]
[Sat Aug 29 05:08:39.385175 2026] [security2:error] [pid 1034096:tid 1034282] [client 39.44.3.46:50079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.3.44.39.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mihpmovewell.com"] [uri "/xmlrpc.php"] [unique_id "apK9ty04twRPFuquKD2w_AAAAKQ"]
[Sat Aug 29 05:08:39.385321 2026] [security2:error] [pid 1034096:tid 1034282] [client 39.44.3.46:50079] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mihpmovewell.com"] [uri "/xmlrpc.php"] [unique_id "apK9ty04twRPFuquKD2w_AAAAKQ"]
[Sat Aug 29 05:08:39.434117 2026] [security2:error] [pid 1034096:tid 1034359] [client 45.148.10.60:6608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:procedure\\\\s+analyse\\\\s.{0,100}\\\$|create\\\\s+(procedure|function)\\\\s.{0,100}\\\\w+\\\\s.{0,100}\\\\(\\\\s.{0,200}\\\$\\\\s.{0,100}declare[^\\\\w]+[@#]\\\\s.{0,100}\\\\w+|exec\\\\s.{0,100}\\\\(\\\\s.{0,200}@|\\\\b(?:sleep|benchmark)\\\\b ?\\\\( ?[0-9])" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "273"] [id "380122"] [rev "5"] [msg "Atomicorp.com WAF Rules: MySQL and PostgreSQL stored procedure/function injections"] [data "sleep(0"] [severity "CRITICAL"] [tag "SQLi"] [hostname "villagebooksandbears.com"] [uri "/wp/v2/posts/999999"] [unique_id "apK9ty04twRPFuquKD2xAwAAAPE"]
[Sat Aug 29 05:08:39.437944 2026] [security2:error] [pid 1034096:tid 1034355] [client 20.63.81.20:63018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/birrs.php"] [unique_id "apK9ty04twRPFuquKD2xBAAAAO0"]
[Sat Aug 29 05:08:39.448760 2026] [autoindex:error] [pid 1034096:tid 1034300] [client 45.148.10.62:59026] AH01276: Cannot serve directory /home3/wxervymy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:08:39.456050 2026] [security2:error] [pid 1034096:tid 1034268] [client 40.83.93.50:18907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/post.php"] [unique_id "apK9ty04twRPFuquKD2xCAAAAJY"]
[Sat Aug 29 05:08:39.457138 2026] [security2:error] [pid 1028675:tid 1028844] [client 20.52.41.200:5355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/css/index.php"] [unique_id "apK9t9dHPfW2QFvhmL4JKgAAACI"]
[Sat Aug 29 05:08:39.468736 2026] [security2:error] [pid 1028675:tid 1028918] [client 158.23.147.79:17499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK9t9dHPfW2QFvhmL4JLAAAAGw"]
[Sat Aug 29 05:08:39.475095 2026] [security2:error] [pid 1028675:tid 1028930] [client 52.139.37.240:19366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/paku.php"] [unique_id "apK9t9dHPfW2QFvhmL4JLgAAAHg"]
[Sat Aug 29 05:08:39.480816 2026] [autoindex:error] [pid 1028675:tid 1028851] [client 45.148.10.62:59034] AH01276: Cannot serve directory /home3/wxguhfmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:08:39.482242 2026] [security2:error] [pid 1028675:tid 1028928] [client 20.48.160.90:62184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/gulu.php"] [unique_id "apK9t9dHPfW2QFvhmL4JMAAAAHY"]
[Sat Aug 29 05:08:39.486233 2026] [security2:error] [pid 1028675:tid 1028823] [client 20.63.219.114:1059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/class-walker-category-dropdown-class.php"] [unique_id "apK9t9dHPfW2QFvhmL4JMQAAAA0"]
[Sat Aug 29 05:08:39.486934 2026] [autoindex:error] [pid 1028675:tid 1028923] [client 45.148.10.62:59044] AH01276: Cannot serve directory /home3/wxdmejmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:08:39.489651 2026] [security2:error] [pid 1034096:tid 1034321] [client 20.197.61.180:14421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/feed-rss2-queue.php"] [unique_id "apK9ty04twRPFuquKD2xDAAAAMs"]
[Sat Aug 29 05:08:39.521278 2026] [security2:error] [pid 1034096:tid 1034280] [client 158.158.54.35:1799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "apK9ty04twRPFuquKD2xDwAAAKI"]
[Sat Aug 29 05:08:39.537734 2026] [security2:error] [pid 1028675:tid 1028896] [client 4.205.62.107:58426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/adminer-4.7.6-en.php"] [unique_id "apK9t9dHPfW2QFvhmL4JNAAAAFY"]
[Sat Aug 29 05:08:39.546691 2026] [security2:error] [pid 1034096:tid 1034251] [client 20.151.200.44:63884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9ty04twRPFuquKD2xFAAAAIU"]
[Sat Aug 29 05:08:39.568308 2026] [security2:error] [pid 1034096:tid 1034332] [client 158.23.147.79:35250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-content/x.php"] [unique_id "apK9ty04twRPFuquKD2xGAAAANY"]
[Sat Aug 29 05:08:39.583187 2026] [security2:error] [pid 1028675:tid 1028888] [client 68.155.159.216:52778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-content/themes/index.php"] [unique_id "apK9t9dHPfW2QFvhmL4JOgAAAE4"]
[Sat Aug 29 05:08:39.585324 2026] [security2:error] [pid 1034096:tid 1034273] [client 45.148.10.60:6608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:procedure\\\\s+analyse\\\\s.{0,100}\\\$|create\\\\s+(procedure|function)\\\\s.{0,100}\\\\w+\\\\s.{0,100}\\\\(\\\\s.{0,200}\\\$\\\\s.{0,100}declare[^\\\\w]+[@#]\\\\s.{0,100}\\\\w+|exec\\\\s.{0,100}\\\\(\\\\s.{0,200}@|\\\\b(?:sleep|benchmark)\\\\b ?\\\\( ?[0-9])" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "273"] [id "380122"] [rev "5"] [msg "Atomicorp.com WAF Rules: MySQL and PostgreSQL stored procedure/function injections"] [data "sleep(3"] [severity "CRITICAL"] [tag "SQLi"] [hostname "villagebooksandbears.com"] [uri "/wp/v2/posts/999999"] [unique_id "apK9ty04twRPFuquKD2xGgAAAJs"]
[Sat Aug 29 05:08:39.591311 2026] [security2:error] [pid 1034096:tid 1034347] [client 40.83.93.50:13193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/post.php"] [unique_id "apK9ty04twRPFuquKD2xGwAAAOU"]
[Sat Aug 29 05:08:39.591796 2026] [security2:error] [pid 1034096:tid 1034259] [client 68.155.159.216:64428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-login.php"] [unique_id "apK9ty04twRPFuquKD2xHAAAAI0"]
[Sat Aug 29 05:08:39.596154 2026] [security2:error] [pid 1028675:tid 1028914] [client 20.63.81.20:57005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/sss.php"] [unique_id "apK9t9dHPfW2QFvhmL4JPAAAAGg"]
[Sat Aug 29 05:08:39.597850 2026] [core:error] [pid 1028675:tid 1028857] [client 20.100.175.163:7507] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:39.597863 2026] [core:error] [pid 1028675:tid 1028857] [client 20.100.175.163:7507] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:39.598097 2026] [security2:error] [pid 1034096:tid 1034353] [client 45.148.10.62:59026] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.wxe.rvy.mybluehost.me"] [uri "/.env"] [unique_id "apK9ty04twRPFuquKD2xHgAAAOs"]
[Sat Aug 29 05:08:39.607462 2026] [security2:error] [pid 1028675:tid 1028884] [client 158.23.184.117:23291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK9t9dHPfW2QFvhmL4JPwAAAEo"]
[Sat Aug 29 05:08:39.647257 2026] [security2:error] [pid 1034096:tid 1034260] [client 68.155.159.216:30631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK9ty04twRPFuquKD2xIwAAAI4"]
[Sat Aug 29 05:08:39.650672 2026] [security2:error] [pid 1034096:tid 1034294] [client 68.155.159.216:33538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/lv.php"] [unique_id "apK9ty04twRPFuquKD2xJAAAALA"]
[Sat Aug 29 05:08:39.681807 2026] [security2:error] [pid 1028675:tid 1028937] [client 45.148.10.62:59034] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.wxg.uhf.mybluehost.me"] [uri "/.env"] [unique_id "apK9t9dHPfW2QFvhmL4JQAAAAH8"]
[Sat Aug 29 05:08:39.684576 2026] [security2:error] [pid 1028675:tid 1028877] [client 45.148.10.62:59044] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.wxd.mej.mybluehost.me"] [uri "/.env"] [unique_id "apK9t9dHPfW2QFvhmL4JQQAAAEM"]
[Sat Aug 29 05:08:39.685289 2026] [security2:error] [pid 1028675:tid 1028908] [client 20.48.160.90:64147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/replace.php"] [unique_id "apK9t9dHPfW2QFvhmL4JQgAAAGI"]
[Sat Aug 29 05:08:39.690945 2026] [security2:error] [pid 1034096:tid 1034365] [client 52.139.37.240:18830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/rtx.php"] [unique_id "apK9ty04twRPFuquKD2xLQAAAPc"]
[Sat Aug 29 05:08:39.695340 2026] [security2:error] [pid 1028675:tid 1028876] [client 20.104.49.130:58099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.carlosmua.com"] [uri "/as.php"] [unique_id "apK9t9dHPfW2QFvhmL4JQwAAAEI"]
[Sat Aug 29 05:08:39.710743 2026] [security2:error] [pid 1028675:tid 1028837] [client 4.205.62.107:6918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/fraro.php"] [unique_id "apK9t9dHPfW2QFvhmL4JSAAAABs"]
[Sat Aug 29 05:08:39.712719 2026] [security2:error] [pid 1028675:tid 1028870] [client 68.155.159.216:16340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK9t9dHPfW2QFvhmL4JSQAAADw"]
[Sat Aug 29 05:08:39.733403 2026] [security2:error] [pid 1034096:tid 1034263] [client 4.205.62.107:8716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/doc.php"] [unique_id "apK9ty04twRPFuquKD2xMwAAAJE"]
[Sat Aug 29 05:08:39.737095 2026] [security2:error] [pid 1034096:tid 1034367] [client 45.148.10.60:6608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:procedure\\\\s+analyse\\\\s.{0,100}\\\$|create\\\\s+(procedure|function)\\\\s.{0,100}\\\\w+\\\\s.{0,100}\\\\(\\\\s.{0,200}\\\$\\\\s.{0,100}declare[^\\\\w]+[@#]\\\\s.{0,100}\\\\w+|exec\\\\s.{0,100}\\\\(\\\\s.{0,200}@|\\\\b(?:sleep|benchmark)\\\\b ?\\\\( ?[0-9])" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "273"] [id "380122"] [rev "5"] [msg "Atomicorp.com WAF Rules: MySQL and PostgreSQL stored procedure/function injections"] [data "sleep(0"] [severity "CRITICAL"] [tag "SQLi"] [hostname "villagebooksandbears.com"] [uri "/wp/v2/posts/999999"] [unique_id "apK9ty04twRPFuquKD2xNAAAAPk"]
[Sat Aug 29 05:08:39.743778 2026] [security2:error] [pid 1034096:tid 1034360] [client 4.205.62.107:26650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/zz.php"] [unique_id "apK9ty04twRPFuquKD2xNwAAAPI"]
[Sat Aug 29 05:08:39.745556 2026] [security2:error] [pid 1034096:tid 1034373] [client 45.148.10.62:59026] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.wxe.rvy.mybluehost.me"] [uri "/.env"] [unique_id "apK9ty04twRPFuquKD2xOAAAAP8"]
[Sat Aug 29 05:08:39.758175 2026] [security2:error] [pid 1028675:tid 1028880] [client 158.23.184.117:23235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/.well-known/acme-challenge/sx.php"] [unique_id "apK9t9dHPfW2QFvhmL4JTQAAAEY"]
[Sat Aug 29 05:08:39.783886 2026] [security2:error] [pid 1034096:tid 1034289] [client 74.248.24.12:22908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/css.php"] [unique_id "apK9ty04twRPFuquKD2xPgAAAKs"]
[Sat Aug 29 05:08:39.791685 2026] [security2:error] [pid 1034096:tid 1034372] [client 4.205.62.107:62755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/phpinfo01.php"] [unique_id "apK9ty04twRPFuquKD2xPwAAAP4"]
[Sat Aug 29 05:08:39.813423 2026] [security2:error] [pid 1034096:tid 1034309] [client 40.83.93.50:21271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-content/db-status.php"] [unique_id "apK9ty04twRPFuquKD2xQgAAAL8"]
[Sat Aug 29 05:08:39.815719 2026] [security2:error] [pid 1028675:tid 1028927] [client 158.23.147.79:17570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK9t9dHPfW2QFvhmL4JTgAAAHU"]
[Sat Aug 29 05:08:39.829047 2026] [security2:error] [pid 1028675:tid 1028816] [client 40.83.93.50:12960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-admin/network/xmrlpc.php"] [unique_id "apK9t9dHPfW2QFvhmL4JTwAAAAY"]
[Sat Aug 29 05:08:39.829610 2026] [security2:error] [pid 1028675:tid 1028904] [client 20.48.160.90:62088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/c4.php"] [unique_id "apK9t9dHPfW2QFvhmL4JUAAAAF4"]
[Sat Aug 29 05:08:39.831519 2026] [security2:error] [pid 1028675:tid 1028816] [client 45.148.10.62:59034] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.wxg.uhf.mybluehost.me"] [uri "/.env"] [unique_id "apK9t9dHPfW2QFvhmL4JUQAAAAY"]
[Sat Aug 29 05:08:39.833839 2026] [security2:error] [pid 1034096:tid 1034361] [client 20.63.81.20:56982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/wp-includes/ID3/moon.php"] [unique_id "apK9ty04twRPFuquKD2xRQAAAPM"]
[Sat Aug 29 05:08:39.835503 2026] [security2:error] [pid 1028675:tid 1028903] [client 45.148.10.62:59044] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.wxd.mej.mybluehost.me"] [uri "/.env"] [unique_id "apK9t9dHPfW2QFvhmL4JUgAAAF0"]
[Sat Aug 29 05:08:39.839515 2026] [security2:error] [pid 1028675:tid 1028909] [client 68.155.159.216:23539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK9t9dHPfW2QFvhmL4JUwAAAGM"]
[Sat Aug 29 05:08:39.848951 2026] [security2:error] [pid 1034096:tid 1034329] [client 20.63.219.114:8864] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/1.php7"] [unique_id "apK9ty04twRPFuquKD2xRwAAANM"]
[Sat Aug 29 05:08:39.849030 2026] [security2:error] [pid 1034096:tid 1034329] [client 20.63.219.114:8864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/1.php7"] [unique_id "apK9ty04twRPFuquKD2xRwAAANM"]
[Sat Aug 29 05:08:39.869546 2026] [autoindex:error] [pid 1028675:tid 1028860] [client 45.148.10.62:59046] AH01276: Cannot serve directory /home3/wxktizmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:08:39.887596 2026] [security2:error] [pid 1034096:tid 1034270] [client 45.148.10.60:6608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:procedure\\\\s+analyse\\\\s.{0,100}\\\$|create\\\\s+(procedure|function)\\\\s.{0,100}\\\\w+\\\\s.{0,100}\\\\(\\\\s.{0,200}\\\$\\\\s.{0,100}declare[^\\\\w]+[@#]\\\\s.{0,100}\\\\w+|exec\\\\s.{0,100}\\\\(\\\\s.{0,200}@|\\\\b(?:sleep|benchmark)\\\\b ?\\\\( ?[0-9])" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "273"] [id "380122"] [rev "5"] [msg "Atomicorp.com WAF Rules: MySQL and PostgreSQL stored procedure/function injections"] [data "sleep(3"] [severity "CRITICAL"] [tag "SQLi"] [hostname "villagebooksandbears.com"] [uri "/wp/v2/posts/999999"] [unique_id "apK9ty04twRPFuquKD2xTgAAAJg"]
[Sat Aug 29 05:08:39.891256 2026] [security2:error] [pid 1028675:tid 1028881] [client 52.139.37.240:19316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/update/da222.php"] [unique_id "apK9t9dHPfW2QFvhmL4JVwAAAEc"]
[Sat Aug 29 05:08:39.905223 2026] [security2:error] [pid 1028675:tid 1028932] [client 158.23.184.117:23267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/.well-known/admin.php"] [unique_id "apK9t9dHPfW2QFvhmL4JWgAAAHo"]
[Sat Aug 29 05:08:39.932459 2026] [security2:error] [pid 1028675:tid 1028761] [remote 93.123.109.228:60660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/.env.php"] [unique_id "apK9t9dHPfW2QFvhmL4JXQAARFA"]
[Sat Aug 29 05:08:39.937774 2026] [security2:error] [pid 1034096:tid 1034307] [client 20.52.41.200:4576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-cron.php"] [unique_id "apK9ty04twRPFuquKD2xVQAAAL0"]
[Sat Aug 29 05:08:39.944275 2026] [security2:error] [pid 1028675:tid 1028819] [client 60.243.207.176:55126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK9t9dHPfW2QFvhmL4JXwAAAAk"]
[Sat Aug 29 05:08:39.944463 2026] [security2:error] [pid 1028675:tid 1028819] [client 60.243.207.176:55126] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK9t9dHPfW2QFvhmL4JXwAAAAk"]
[Sat Aug 29 05:08:39.951214 2026] [security2:error] [pid 1034096:tid 1034306] [client 40.83.93.50:11931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/csv.php"] [unique_id "apK9ty04twRPFuquKD2xVwAAALw"]
[Sat Aug 29 05:08:39.951233 2026] [security2:error] [pid 1034096:tid 1034275] [client 158.23.147.79:5985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-content/banners/about.php"] [unique_id "apK9ty04twRPFuquKD2xVgAAAJ0"]
[Sat Aug 29 05:08:39.952387 2026] [proxy_http:error] [pid 1017536:tid 1017756] (70007)The timeout specified has expired: [client 127.0.0.1:15366] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:08:39.952405 2026] [proxy:error] [pid 1017536:tid 1017756] [client 127.0.0.1:15366] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:08:39.965611 2026] [security2:error] [pid 1034096:tid 1034363] [client 4.205.62.107:3946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/87.php"] [unique_id "apK9ty04twRPFuquKD2xWAAAAPU"]
[Sat Aug 29 05:08:39.973295 2026] [security2:error] [pid 1034096:tid 1034358] [client 158.158.54.35:31623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/css/wp-login.php"] [unique_id "apK9ty04twRPFuquKD2xXAAAAPA"]
[Sat Aug 29 05:08:39.978086 2026] [security2:error] [pid 1034096:tid 1034350] [client 20.48.160.90:63324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/rxr.php"] [unique_id "apK9ty04twRPFuquKD2xXQAAAOg"]
[Sat Aug 29 05:08:39.982616 2026] [security2:error] [pid 1028675:tid 1028824] [client 20.63.81.20:57948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/xmini4.php"] [unique_id "apK9t9dHPfW2QFvhmL4JYgAAAA4"]
[Sat Aug 29 05:08:39.991983 2026] [security2:error] [pid 1028675:tid 1028928] [client 158.23.147.79:53813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK9t9dHPfW2QFvhmL4JZgAAAHY"]
[Sat Aug 29 05:08:40.018734 2026] [security2:error] [pid 1028675:tid 1028923] [client 45.148.10.62:59046] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.wxk.tiz.mybluehost.me"] [uri "/.env"] [unique_id "apK9uNdHPfW2QFvhmL4JZwAAAHE"]
[Sat Aug 29 05:08:40.028485 2026] [security2:error] [pid 1028675:tid 1028896] [client 4.205.62.107:21904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/php_info.php"] [unique_id "apK9uNdHPfW2QFvhmL4JaQAAAFY"]
[Sat Aug 29 05:08:40.032583 2026] [cgid:error] [pid 1028675:tid 1028708] [remote 34.73.62.26:53606] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:40.033267 2026] [security2:error] [pid 1034096:tid 1034274] [client 158.23.147.79:6101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-content/admin.php"] [unique_id "apK9uC04twRPFuquKD2xYwAAAJw"]
[Sat Aug 29 05:08:40.033532 2026] [security2:error] [pid 1034096:tid 1034173] [remote 93.123.109.228:60596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/info.php"] [unique_id "apK9uC04twRPFuquKD2xZAAAsTM"]
[Sat Aug 29 05:08:40.038371 2026] [security2:error] [pid 1034096:tid 1034282] [client 45.148.10.60:6608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:procedure\\\\s+analyse\\\\s.{0,100}\\\$|create\\\\s+(procedure|function)\\\\s.{0,100}\\\\w+\\\\s.{0,100}\\\\(\\\\s.{0,200}\\\$\\\\s.{0,100}declare[^\\\\w]+[@#]\\\\s.{0,100}\\\\w+|exec\\\\s.{0,100}\\\\(\\\\s.{0,200}@|\\\\b(?:sleep|benchmark)\\\\b ?\\\\( ?[0-9])" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "273"] [id "380122"] [rev "5"] [msg "Atomicorp.com WAF Rules: MySQL and PostgreSQL stored procedure/function injections"] [data "sleep(0"] [severity "CRITICAL"] [tag "SQLi"] [hostname "villagebooksandbears.com"] [uri "/wp/v2/posts/999999"] [unique_id "apK9uC04twRPFuquKD2xZQAAAKQ"]
[Sat Aug 29 05:08:40.044239 2026] [security2:error] [pid 1034096:tid 1034190] [remote 93.123.109.228:60596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/infophp.php"] [unique_id "apK9uC04twRPFuquKD2xZwAAsUQ"]
[Sat Aug 29 05:08:40.051148 2026] [autoindex:error] [pid 1034096:tid 1034346] [client 45.148.10.62:59026] AH01276: Cannot serve directory /home3/wxervymy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:08:40.051598 2026] [cgid:error] [pid 1028675:tid 1028779] [remote 34.73.62.26:53606] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:40.055619 2026] [security2:error] [pid 1028675:tid 1028888] [client 68.155.159.216:64023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK9uNdHPfW2QFvhmL4JbAAAAE4"]
[Sat Aug 29 05:08:40.055633 2026] [security2:error] [pid 1034096:tid 1034356] [client 158.23.184.117:23265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/.well-known/api.php"] [unique_id "apK9uC04twRPFuquKD2xaAAAAO4"]
[Sat Aug 29 05:08:40.063562 2026] [security2:error] [pid 1034096:tid 1034160] [remote 93.123.109.228:60596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/infos.php"] [unique_id "apK9uC04twRPFuquKD2xaQAAsSY"]
[Sat Aug 29 05:08:40.064205 2026] [security2:error] [pid 1034096:tid 1034311] [client 20.197.61.180:1239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/about.php525"] [unique_id "apK9uC04twRPFuquKD2xagAAAME"]
[Sat Aug 29 05:08:40.082058 2026] [security2:error] [pid 1034096:tid 1034318] [client 158.23.147.79:11303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-admin/dropdown.php"] [unique_id "apK9uC04twRPFuquKD2xbAAAAMg"]
[Sat Aug 29 05:08:40.087906 2026] [security2:error] [pid 1034096:tid 1034337] [client 20.240.128.207:7386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-content/file.php"] [unique_id "apK9uC04twRPFuquKD2xbQAAANs"]
[Sat Aug 29 05:08:40.092096 2026] [cgid:error] [pid 1028675:tid 1028713] [remote 34.73.62.26:53606] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:40.116628 2026] [security2:error] [pid 1028675:tid 1028811] [client 20.63.81.20:63077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/gulu.php"] [unique_id "apK9uNdHPfW2QFvhmL4JdAAAAAE"]
[Sat Aug 29 05:08:40.118996 2026] [security2:error] [pid 1028675:tid 1028887] [client 20.100.175.163:9924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-content/themes/pridmag/il.php"] [unique_id "apK9uNdHPfW2QFvhmL4JdQAAAE0"]
[Sat Aug 29 05:08:40.128668 2026] [cgid:error] [pid 1028675:tid 1028801] [remote 34.73.62.26:53606] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:40.131064 2026] [cgid:error] [pid 1028675:tid 1028726] [remote 34.73.62.26:53606] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:40.132183 2026] [cgid:error] [pid 1028675:tid 1028795] [remote 34.73.62.26:53606] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:40.139258 2026] [autoindex:error] [pid 1028675:tid 1028898] [client 45.148.10.62:59034] AH01276: Cannot serve directory /home3/wxguhfmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:08:40.140485 2026] [security2:error] [pid 1028675:tid 1028877] [client 20.48.160.90:63339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenergybangladesh.com"] [uri "/reviall.php"] [unique_id "apK9uNdHPfW2QFvhmL4JewAAAEM"]
[Sat Aug 29 05:08:40.143573 2026] [autoindex:error] [pid 1028675:tid 1028937] [client 45.148.10.62:59044] AH01276: Cannot serve directory /home3/wxdmejmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:08:40.144786 2026] [security2:error] [pid 1028675:tid 1028908] [client 4.232.148.111:18848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/.trash7206/index.php"] [unique_id "apK9uNdHPfW2QFvhmL4JfAAAAGI"]
[Sat Aug 29 05:08:40.151329 2026] [security2:error] [pid 1034096:tid 1034342] [client 40.83.93.50:12493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/csv.php"] [unique_id "apK9uC04twRPFuquKD2xdAAAAOA"]
[Sat Aug 29 05:08:40.153909 2026] [security2:error] [pid 1028675:tid 1028835] [client 149.34.210.141:22835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9uNdHPfW2QFvhmL4JfQAAABk"]
[Sat Aug 29 05:08:40.154076 2026] [security2:error] [pid 1028675:tid 1028835] [client 149.34.210.141:22835] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9uNdHPfW2QFvhmL4JfQAAABk"]
[Sat Aug 29 05:08:40.166943 2026] [security2:error] [pid 1028675:tid 1028876] [client 45.148.10.62:59046] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.wxk.tiz.mybluehost.me"] [uri "/.env"] [unique_id "apK9uNdHPfW2QFvhmL4JfgAAAEI"]
[Sat Aug 29 05:08:40.178241 2026] [security2:error] [pid 1028675:tid 1028872] [client 52.139.37.240:18825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/wp-admin/min.php"] [unique_id "apK9uNdHPfW2QFvhmL4JfwAAAD4"]
[Sat Aug 29 05:08:40.189334 2026] [security2:error] [pid 1034096:tid 1034296] [client 45.148.10.60:6608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:procedure\\\\s+analyse\\\\s.{0,100}\\\$|create\\\\s+(procedure|function)\\\\s.{0,100}\\\\w+\\\\s.{0,100}\\\\(\\\\s.{0,200}\\\$\\\\s.{0,100}declare[^\\\\w]+[@#]\\\\s.{0,100}\\\\w+|exec\\\\s.{0,100}\\\\(\\\\s.{0,200}@|\\\\b(?:sleep|benchmark)\\\\b ?\\\\( ?[0-9])" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "273"] [id "380122"] [rev "5"] [msg "Atomicorp.com WAF Rules: MySQL and PostgreSQL stored procedure/function injections"] [data "sleep(3"] [severity "CRITICAL"] [tag "SQLi"] [hostname "villagebooksandbears.com"] [uri "/wp/v2/posts/999999"] [unique_id "apK9uC04twRPFuquKD2xdwAAALI"]
[Sat Aug 29 05:08:40.209897 2026] [security2:error] [pid 1028675:tid 1028839] [client 158.23.184.117:23258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/.well-known/chosen.php"] [unique_id "apK9uNdHPfW2QFvhmL4JhAAAAB0"]
[Sat Aug 29 05:08:40.214105 2026] [security2:error] [pid 1028675:tid 1028783] [remote 34.73.62.26:53606] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:href. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "/../,ARGS:href"] [severity "CRITICAL"] [hostname "www.strangeworx.com"] [uri "/_image"] [unique_id "apK9uNdHPfW2QFvhmL4JhQAAIGY"]
[Sat Aug 29 05:08:40.215988 2026] [cgid:error] [pid 1028675:tid 1028789] [remote 34.73.62.26:53606] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:40.216135 2026] [security2:error] [pid 1028675:tid 1028797] [remote 34.73.62.26:53606] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "www.strangeworx.com"] [uri "/_image"] [unique_id "apK9uNdHPfW2QFvhmL4JiAAAIHQ"]
[Sat Aug 29 05:08:40.217865 2026] [security2:error] [pid 1028675:tid 1028918] [client 20.197.61.180:14978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/inputs.php"] [unique_id "apK9uNdHPfW2QFvhmL4JiQAAAGw"]
[Sat Aug 29 05:08:40.245788 2026] [security2:error] [pid 1028675:tid 1028903] [client 158.23.147.79:26564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK9uNdHPfW2QFvhmL4JjAAAAF0"]
[Sat Aug 29 05:08:40.253370 2026] [security2:error] [pid 1028675:tid 1028855] [client 20.63.219.114:18497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/ds.php"] [unique_id "apK9uNdHPfW2QFvhmL4JjgAAAC0"]
[Sat Aug 29 05:08:40.286912 2026] [security2:error] [pid 1034096:tid 1034277] [client 40.83.93.50:1078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-content/disagrsxr.php"] [unique_id "apK9uC04twRPFuquKD2xgwAAAJ8"]
[Sat Aug 29 05:08:40.288185 2026] [security2:error] [pid 1034096:tid 1034266] [client 20.63.81.20:56420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/replace.php"] [unique_id "apK9uC04twRPFuquKD2xhQAAAJQ"]
[Sat Aug 29 05:08:40.297045 2026] [security2:error] [pid 1034096:tid 1034332] [client 40.83.93.50:12969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-admin/options-general.php"] [unique_id "apK9uC04twRPFuquKD2xiQAAANY"]
[Sat Aug 29 05:08:40.340641 2026] [security2:error] [pid 1034096:tid 1034312] [client 45.148.10.60:6608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:procedure\\\\s+analyse\\\\s.{0,100}\\\$|create\\\\s+(procedure|function)\\\\s.{0,100}\\\\w+\\\\s.{0,100}\\\\(\\\\s.{0,200}\\\$\\\\s.{0,100}declare[^\\\\w]+[@#]\\\\s.{0,100}\\\\w+|exec\\\\s.{0,100}\\\\(\\\\s.{0,200}@|\\\\b(?:sleep|benchmark)\\\\b ?\\\\( ?[0-9])" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "273"] [id "380122"] [rev "5"] [msg "Atomicorp.com WAF Rules: MySQL and PostgreSQL stored procedure/function injections"] [data "sleep(0"] [severity "CRITICAL"] [tag "SQLi"] [hostname "villagebooksandbears.com"] [uri "/wp/v2/posts/999999"] [unique_id "apK9uC04twRPFuquKD2xjQAAAMI"]
[Sat Aug 29 05:08:40.350072 2026] [security2:error] [pid 1034096:tid 1034325] [client 45.148.10.62:59026] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.wxe.rvy.mybluehost.me"] [uri "/api/.env"] [unique_id "apK9uC04twRPFuquKD2xjgAAAM8"]
[Sat Aug 29 05:08:40.354331 2026] [security2:error] [pid 1034096:tid 1034376] [client 20.151.200.44:64491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9uC04twRPFuquKD2xjwAAAQI"]
[Sat Aug 29 05:08:40.360744 2026] [security2:error] [pid 1034096:tid 1034368] [client 158.23.184.117:23271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/.well-known/config.php"] [unique_id "apK9uC04twRPFuquKD2xkQAAAPo"]
[Sat Aug 29 05:08:40.378309 2026] [security2:error] [pid 1028675:tid 1028927] [client 20.52.41.200:5322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-block.php"] [unique_id "apK9uNdHPfW2QFvhmL4JmAAAAHU"]
[Sat Aug 29 05:08:40.385052 2026] [security2:error] [pid 1034096:tid 1034340] [client 52.139.37.240:19337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/wp-admin/wp-fileesx-449.php"] [unique_id "apK9uC04twRPFuquKD2xlAAAAN4"]
[Sat Aug 29 05:08:40.416320 2026] [security2:error] [pid 1034096:tid 1034253] [client 158.158.54.35:31503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/images/index.php"] [unique_id "apK9uC04twRPFuquKD2xmwAAAIc"]
[Sat Aug 29 05:08:40.416944 2026] [security2:error] [pid 1028675:tid 1028824] [client 68.155.159.216:14325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/file.php"] [unique_id "apK9uNdHPfW2QFvhmL4JnAAAAA4"]
[Sat Aug 29 05:08:40.418774 2026] [security2:error] [pid 1028675:tid 1028930] [client 158.23.147.79:49986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK9uNdHPfW2QFvhmL4JnQAAAHg"]
[Sat Aug 29 05:08:40.430741 2026] [security2:error] [pid 1034096:tid 1034278] [client 20.63.81.20:57961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/c4.php"] [unique_id "apK9uC04twRPFuquKD2xnwAAAKA"]
[Sat Aug 29 05:08:40.433487 2026] [security2:error] [pid 1034096:tid 1034322] [client 185.104.184.230:47086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.184.104.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.enprocontracting.com"] [uri "/xmlrpc.php"] [unique_id "apK9uC04twRPFuquKD2xoAAAAMw"]
[Sat Aug 29 05:08:40.433602 2026] [security2:error] [pid 1034096:tid 1034322] [client 185.104.184.230:47086] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "www.enprocontracting.com"] [uri "/xmlrpc.php"] [unique_id "apK9uC04twRPFuquKD2xoAAAAMw"]
[Sat Aug 29 05:08:40.442291 2026] [security2:error] [pid 1028675:tid 1028896] [client 45.148.10.62:59034] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.wxg.uhf.mybluehost.me"] [uri "/api/.env"] [unique_id "apK9uNdHPfW2QFvhmL4JngAAAFY"]
[Sat Aug 29 05:08:40.459432 2026] [security2:error] [pid 1028675:tid 1028932] [client 40.83.93.50:11927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/fox.php"] [unique_id "apK9uNdHPfW2QFvhmL4JoAAAAHo"]
[Sat Aug 29 05:08:40.465401 2026] [security2:error] [pid 1028675:tid 1028888] [client 45.148.10.62:59044] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.wxd.mej.mybluehost.me"] [uri "/api/.env"] [unique_id "apK9uNdHPfW2QFvhmL4JogAAAE4"]
[Sat Aug 29 05:08:40.478863 2026] [autoindex:error] [pid 1028675:tid 1028879] [client 45.148.10.62:59046] AH01276: Cannot serve directory /home3/wxktizmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:08:40.479832 2026] [security2:error] [pid 1034096:tid 1034327] [client 68.155.159.216:49244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-mail.php"] [unique_id "apK9uC04twRPFuquKD2xpgAAANE"]
[Sat Aug 29 05:08:40.491876 2026] [security2:error] [pid 1034096:tid 1034290] [client 45.148.10.60:6608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:procedure\\\\s+analyse\\\\s.{0,100}\\\$|create\\\\s+(procedure|function)\\\\s.{0,100}\\\\w+\\\\s.{0,100}\\\\(\\\\s.{0,200}\\\$\\\\s.{0,100}declare[^\\\\w]+[@#]\\\\s.{0,100}\\\\w+|exec\\\\s.{0,100}\\\\(\\\\s.{0,200}@|\\\\b(?:sleep|benchmark)\\\\b ?\\\\( ?[0-9])" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "273"] [id "380122"] [rev "5"] [msg "Atomicorp.com WAF Rules: MySQL and PostgreSQL stored procedure/function injections"] [data "sleep(3"] [severity "CRITICAL"] [tag "SQLi"] [hostname "villagebooksandbears.com"] [uri "/wp/v2/posts/999999"] [unique_id "apK9uC04twRPFuquKD2xpwAAAKw"]
[Sat Aug 29 05:08:40.497932 2026] [security2:error] [pid 1034096:tid 1034270] [client 45.148.10.62:59026] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.wxe.rvy.mybluehost.me"] [uri "/.env.bak"] [unique_id "apK9uC04twRPFuquKD2xqQAAAJg"]
[Sat Aug 29 05:08:40.508097 2026] [security2:error] [pid 1034096:tid 1034309] [client 158.23.184.117:23253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/.well-known/core.php"] [unique_id "apK9uC04twRPFuquKD2xqwAAAL8"]
[Sat Aug 29 05:08:40.536288 2026] [security2:error] [pid 1028675:tid 1028823] [client 202.71.25.11:54860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.25.71.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK9uNdHPfW2QFvhmL4JpAAAAA0"]
[Sat Aug 29 05:08:40.536452 2026] [security2:error] [pid 1028675:tid 1028823] [client 202.71.25.11:54860] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK9uNdHPfW2QFvhmL4JpAAAAA0"]
[Sat Aug 29 05:08:40.577818 2026] [security2:error] [pid 1028675:tid 1028859] [client 20.63.81.20:63103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/rxr.php"] [unique_id "apK9uNdHPfW2QFvhmL4JpwAAADE"]
[Sat Aug 29 05:08:40.581025 2026] [security2:error] [pid 1034096:tid 1034323] [client 52.139.37.240:18832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/wp-content/themes/min.php"] [unique_id "apK9uC04twRPFuquKD2xsQAAAM0"]
[Sat Aug 29 05:08:40.591488 2026] [security2:error] [pid 1028675:tid 1028886] [client 45.148.10.62:59034] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.wxg.uhf.mybluehost.me"] [uri "/.env.bak"] [unique_id "apK9uNdHPfW2QFvhmL4JqAAAAEw"]
[Sat Aug 29 05:08:40.600571 2026] [security2:error] [pid 1028675:tid 1028928] [client 20.100.175.163:28236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/assets/images/doc.php"] [unique_id "apK9uNdHPfW2QFvhmL4JqQAAAHY"]
[Sat Aug 29 05:08:40.604502 2026] [security2:error] [pid 1034096:tid 1034373] [client 20.240.128.207:8474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/files.php"] [unique_id "apK9uC04twRPFuquKD2xtQAAAP8"]
[Sat Aug 29 05:08:40.619625 2026] [security2:error] [pid 1034096:tid 1034301] [client 20.63.219.114:8842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/GOD.php"] [unique_id "apK9uC04twRPFuquKD2xuQAAALc"]
[Sat Aug 29 05:08:40.620892 2026] [security2:error] [pid 1028675:tid 1028877] [client 45.148.10.62:59044] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.wxd.mej.mybluehost.me"] [uri "/.env.bak"] [unique_id "apK9uNdHPfW2QFvhmL4JqgAAAEM"]
[Sat Aug 29 05:08:40.623166 2026] [security2:error] [pid 1028675:tid 1028908] [client 68.155.159.216:24455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK9uNdHPfW2QFvhmL4JrAAAAGI"]
[Sat Aug 29 05:08:40.630361 2026] [security2:error] [pid 1034096:tid 1034291] [client 40.83.93.50:12523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/fox.php"] [unique_id "apK9uC04twRPFuquKD2xuwAAAK0"]
[Sat Aug 29 05:08:40.632313 2026] [security2:error] [pid 1034096:tid 1034361] [client 4.232.148.111:24613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wk/index.php"] [unique_id "apK9uC04twRPFuquKD2xvAAAAPM"]
[Sat Aug 29 05:08:40.643008 2026] [security2:error] [pid 1034096:tid 1034125] [remote 93.123.109.228:60596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/php-info.php"] [unique_id "apK9uC04twRPFuquKD2xvgAA5QM"]
[Sat Aug 29 05:08:40.648940 2026] [security2:error] [pid 1034096:tid 1034272] [client 74.248.24.12:19496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/w.php"] [unique_id "apK9uC04twRPFuquKD2xwAAAAJo"]
[Sat Aug 29 05:08:40.656322 2026] [security2:error] [pid 1034096:tid 1034220] [remote 93.123.109.228:60596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/php.php"] [unique_id "apK9uC04twRPFuquKD2xwgAA5WI"]
[Sat Aug 29 05:08:40.656971 2026] [security2:error] [pid 1034096:tid 1034306] [client 158.23.184.117:23128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/.well-known/data.php"] [unique_id "apK9uC04twRPFuquKD2xwwAAALw"]
[Sat Aug 29 05:08:40.670560 2026] [security2:error] [pid 1034096:tid 1034346] [client 68.155.159.216:1927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK9uC04twRPFuquKD2xxQAAAOQ"]
[Sat Aug 29 05:08:40.670967 2026] [security2:error] [pid 1034096:tid 1034287] [client 103.240.76.112:42890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK9uC04twRPFuquKD2xxAAAAKk"]
[Sat Aug 29 05:08:40.671083 2026] [security2:error] [pid 1034096:tid 1034287] [client 103.240.76.112:42890] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK9uC04twRPFuquKD2xxAAAAKk"]
[Sat Aug 29 05:08:40.672998 2026] [security2:error] [pid 1034096:tid 1034243] [remote 93.123.109.228:60596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/php_info.php"] [unique_id "apK9uC04twRPFuquKD2xxgAA5Xk"]
[Sat Aug 29 05:08:40.685514 2026] [cgid:error] [pid 1034096:tid 1034231] [remote 34.73.62.26:53612] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:40.689750 2026] [cgid:error] [pid 1034096:tid 1034219] [remote 34.73.62.26:53612] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:40.689809 2026] [cgid:error] [pid 1034096:tid 1034242] [remote 34.73.62.26:53612] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:40.689838 2026] [cgid:error] [pid 1034096:tid 1034233] [remote 34.73.62.26:53612] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:40.689888 2026] [cgid:error] [pid 1034096:tid 1034127] [remote 34.73.62.26:53612] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:40.691373 2026] [security2:error] [pid 1034096:tid 1034355] [client 4.205.62.107:58377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/api.php"] [unique_id "apK9uC04twRPFuquKD2xzwAAAO0"]
[Sat Aug 29 05:08:40.691938 2026] [security2:error] [pid 1034096:tid 1034238] [remote 93.123.109.228:60596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/phpinfo.php"] [unique_id "apK9uC04twRPFuquKD2x0AAA5XQ"]
[Sat Aug 29 05:08:40.692660 2026] [cgid:error] [pid 1034096:tid 1034194] [remote 34.73.62.26:53612] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:40.729560 2026] [security2:error] [pid 1034096:tid 1034297] [client 20.63.81.20:62980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.horseweblog.com"] [uri "/reviall.php"] [unique_id "apK9uC04twRPFuquKD2x0gAAALM"]
[Sat Aug 29 05:08:40.735573 2026] [security2:error] [pid 1034096:tid 1034335] [client 68.155.159.216:18244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/themes.php"] [unique_id "apK9uC04twRPFuquKD2x1AAAANk"]
[Sat Aug 29 05:08:40.749409 2026] [security2:error] [pid 1034096:tid 1034284] [client 20.151.200.44:64491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/baee.php"] [unique_id "apK9uC04twRPFuquKD2x1wAAAKY"]
[Sat Aug 29 05:08:40.766539 2026] [security2:error] [pid 1034096:tid 1034275] [client 40.83.93.50:21254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-content/f35.php"] [unique_id "apK9uC04twRPFuquKD2x2gAAAJ0"]
[Sat Aug 29 05:08:40.776644 2026] [security2:error] [pid 1034096:tid 1034268] [client 52.139.37.240:18835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/wp-content/themes/x/bypass.php"] [unique_id "apK9uC04twRPFuquKD2x3AAAAJY"]
[Sat Aug 29 05:08:40.777346 2026] [security2:error] [pid 1028675:tid 1028898] [client 40.83.93.50:16695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-admin/options.php"] [unique_id "apK9uNdHPfW2QFvhmL4JtAAAAFg"]
[Sat Aug 29 05:08:40.779346 2026] [security2:error] [pid 1028675:tid 1028842] [client 45.148.10.62:59046] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.wxk.tiz.mybluehost.me"] [uri "/api/.env"] [unique_id "apK9uNdHPfW2QFvhmL4JtQAAACA"]
[Sat Aug 29 05:08:40.804517 2026] [security2:error] [pid 1028675:tid 1028867] [client 158.23.184.117:23288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/.well-known/db-status.php"] [unique_id "apK9uNdHPfW2QFvhmL4JuAAAADk"]
[Sat Aug 29 05:08:40.811534 2026] [security2:error] [pid 1034096:tid 1034314] [client 20.197.61.180:14442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/spip.php"] [unique_id "apK9uC04twRPFuquKD2x4gAAAMQ"]
[Sat Aug 29 05:08:40.825943 2026] [security2:error] [pid 1028675:tid 1028925] [client 68.155.159.216:16226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/nf_tracking.php"] [unique_id "apK9uNdHPfW2QFvhmL4JuQAAAHM"]
[Sat Aug 29 05:08:40.831196 2026] [security2:error] [pid 1034096:tid 1034317] [client 45.148.10.60:6608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:procedure\\\\s+analyse\\\\s.{0,100}\\\$|create\\\\s+(procedure|function)\\\\s.{0,100}\\\\w+\\\\s.{0,100}\\\\(\\\\s.{0,200}\\\$\\\\s.{0,100}declare[^\\\\w]+[@#]\\\\s.{0,100}\\\\w+|exec\\\\s.{0,100}\\\\(\\\\s.{0,200}@|\\\\b(?:sleep|benchmark)\\\\b ?\\\\( ?[0-9])" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "273"] [id "380122"] [rev "5"] [msg "Atomicorp.com WAF Rules: MySQL and PostgreSQL stored procedure/function injections"] [data "benchmark(3"] [severity "CRITICAL"] [tag "SQLi"] [hostname "villagebooksandbears.com"] [uri "/wp/v2/posts/999999"] [unique_id "apK9uC04twRPFuquKD2x5wAAAMc"]
[Sat Aug 29 05:08:40.842225 2026] [security2:error] [pid 1034096:tid 1034311] [client 20.52.41.200:5367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-includes/fonts/admin.php"] [unique_id "apK9uC04twRPFuquKD2x6AAAAME"]
[Sat Aug 29 05:08:40.842724 2026] [security2:error] [pid 1034096:tid 1034152] [remote 93.123.109.228:60596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/public/phpinfo.php"] [unique_id "apK9uC04twRPFuquKD2x6gAAyx4"]
[Sat Aug 29 05:08:40.850158 2026] [security2:error] [pid 1028675:tid 1028816] [client 4.205.62.107:6922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/thui.php"] [unique_id "apK9uNdHPfW2QFvhmL4JugAAAAY"]
[Sat Aug 29 05:08:40.898193 2026] [security2:error] [pid 1034096:tid 1034253] [client 4.205.62.107:65459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/test.php"] [unique_id "apK9uC04twRPFuquKD2x7gAAAIc"]
[Sat Aug 29 05:08:40.918752 2026] [cgid:error] [pid 1034096:tid 1034141] [remote 34.73.62.26:53612] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:40.928050 2026] [security2:error] [pid 1034096:tid 1034339] [client 68.155.159.216:1942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK9uC04twRPFuquKD2x9AAAAN0"]
[Sat Aug 29 05:08:40.928372 2026] [security2:error] [pid 1034096:tid 1034289] [client 4.205.62.107:9157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/fun.php"] [unique_id "apK9uC04twRPFuquKD2x9QAAAKs"]
[Sat Aug 29 05:08:40.932659 2026] [cgid:error] [pid 1034096:tid 1034124] [remote 34.73.62.26:53612] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:40.937680 2026] [security2:error] [pid 1028675:tid 1028900] [client 4.205.62.107:62753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/cxc.php"] [unique_id "apK9uNdHPfW2QFvhmL4JwAAAAFo"]
[Sat Aug 29 05:08:40.939087 2026] [cgid:error] [pid 1034096:tid 1034248] [remote 34.73.62.26:53612] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:40.942692 2026] [security2:error] [pid 1034096:tid 1034318] [client 20.197.61.180:1279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/class-walker-category-dropdown-class.php"] [unique_id "apK9uC04twRPFuquKD2x-QAAAMg"]
[Sat Aug 29 05:08:40.943474 2026] [cgid:error] [pid 1034096:tid 1034149] [remote 34.73.62.26:53612] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:40.943681 2026] [security2:error] [pid 1028675:tid 1028884] [client 45.148.10.62:59046] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.wxk.tiz.mybluehost.me"] [uri "/.env.bak"] [unique_id "apK9uNdHPfW2QFvhmL4JwQAAAEo"]
[Sat Aug 29 05:08:40.944178 2026] [cgid:error] [pid 1034096:tid 1034246] [remote 34.73.62.26:53612] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:40.946328 2026] [security2:error] [pid 1028675:tid 1028819] [client 68.155.159.216:23551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK9uNdHPfW2QFvhmL4JwgAAAAk"]
[Sat Aug 29 05:08:40.947473 2026] [cgid:error] [pid 1034096:tid 1034132] [remote 34.73.62.26:53612] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:40.950162 2026] [security2:error] [pid 1034096:tid 1034270] [client 45.148.10.62:59026] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.wxe.rvy.mybluehost.me"] [uri "/stripe/.env"] [unique_id "apK9uC04twRPFuquKD2x_QAAAJg"]
[Sat Aug 29 05:08:40.951819 2026] [security2:error] [pid 1028675:tid 1028922] [client 158.23.184.117:23156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/.well-known/f35.php"] [unique_id "apK9uNdHPfW2QFvhmL4JwwAAAHA"]
[Sat Aug 29 05:08:40.961611 2026] [security2:error] [pid 1034096:tid 1034255] [client 40.83.93.50:11949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/disagraeosc.php"] [unique_id "apK9uC04twRPFuquKD2x_wAAAIk"]
[Sat Aug 29 05:08:40.980436 2026] [security2:error] [pid 1028675:tid 1028903] [client 20.63.219.114:10585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/ggfi.php"] [unique_id "apK9uNdHPfW2QFvhmL4JxgAAAF0"]
[Sat Aug 29 05:08:41.018174 2026] [security2:error] [pid 1028675:tid 1028745] [remote 93.123.109.228:60774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK9uddHPfW2QFvhmL4JygAAKUA"]
[Sat Aug 29 05:08:41.022813 2026] [security2:error] [pid 1034096:tid 1034276] [client 158.158.54.35:34667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/inputs.php"] [unique_id "apK9uS04twRPFuquKD2yBgAAAJ4"]
[Sat Aug 29 05:08:41.039675 2026] [security2:error] [pid 1028675:tid 1028825] [client 45.148.10.62:59034] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.wxg.uhf.mybluehost.me"] [uri "/stripe/.env"] [unique_id "apK9uddHPfW2QFvhmL4J0AAAAA8"]
[Sat Aug 29 05:08:41.049313 2026] [core:error] [pid 1034096:tid 1034291] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.049330 2026] [core:error] [pid 1034096:tid 1034291] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.049807 2026] [core:error] [pid 1034096:tid 1034301] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.049823 2026] [core:error] [pid 1034096:tid 1034301] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.051049 2026] [security2:error] [pid 1034096:tid 1034351] [client 185.104.184.230:47092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.184.104.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.enprocontracting.com"] [uri "/xmlrpc.php"] [unique_id "apK9uS04twRPFuquKD2yGQAAAOk"]
[Sat Aug 29 05:08:41.051145 2026] [security2:error] [pid 1034096:tid 1034351] [client 185.104.184.230:47092] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "www.enprocontracting.com"] [uri "/xmlrpc.php"] [unique_id "apK9uS04twRPFuquKD2yGQAAAOk"]
[Sat Aug 29 05:08:41.051314 2026] [core:error] [pid 1034096:tid 1034350] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.051325 2026] [core:error] [pid 1034096:tid 1034350] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.052177 2026] [core:error] [pid 1034096:tid 1034272] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.052568 2026] [core:error] [pid 1034096:tid 1034272] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.052740 2026] [core:error] [pid 1034096:tid 1034308] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.052749 2026] [core:error] [pid 1034096:tid 1034308] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.056387 2026] [security2:error] [pid 1028675:tid 1028833] [client 158.23.147.79:6045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-includes/Text/about.php"] [unique_id "apK9uddHPfW2QFvhmL4J0gAAABc"]
[Sat Aug 29 05:08:41.057260 2026] [core:error] [pid 1034096:tid 1034269] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.057281 2026] [core:error] [pid 1034096:tid 1034269] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.070486 2026] [security2:error] [pid 1028675:tid 1028880] [client 52.139.37.240:18824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK9uddHPfW2QFvhmL4J1AAAAEY"]
[Sat Aug 29 05:08:41.088346 2026] [security2:error] [pid 1034096:tid 1034285] [client 20.100.175.163:7521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/bgymj.php"] [unique_id "apK9uS04twRPFuquKD2yHgAAAKc"]
[Sat Aug 29 05:08:41.091686 2026] [security2:error] [pid 1028675:tid 1028923] [client 45.148.10.62:59044] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.wxd.mej.mybluehost.me"] [uri "/stripe/.env"] [unique_id "apK9uddHPfW2QFvhmL4J1QAAAHE"]
[Sat Aug 29 05:08:41.094114 2026] [core:error] [pid 1034096:tid 1034319] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.094134 2026] [core:error] [pid 1034096:tid 1034319] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.095885 2026] [security2:error] [pid 1028675:tid 1028858] [client 158.23.147.79:53139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK9uddHPfW2QFvhmL4J1wAAADA"]
[Sat Aug 29 05:08:41.096750 2026] [security2:error] [pid 1034096:tid 1034306] [client 158.23.184.117:23125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK9uS04twRPFuquKD2yIAAAALw"]
[Sat Aug 29 05:08:41.104425 2026] [security2:error] [pid 1034096:tid 1034273] [client 4.205.62.107:53292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/plss3.php"] [unique_id "apK9uS04twRPFuquKD2yIgAAAJs"]
[Sat Aug 29 05:08:41.105235 2026] [security2:error] [pid 1034096:tid 1034327] [client 20.240.128.207:27533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/o.php"] [unique_id "apK9uS04twRPFuquKD2yIwAAANE"]
[Sat Aug 29 05:08:41.112085 2026] [security2:error] [pid 1034096:tid 1034303] [client 4.232.148.111:25242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/admin.php"] [unique_id "apK9uS04twRPFuquKD2yJwAAALk"]
[Sat Aug 29 05:08:41.139566 2026] [security2:error] [pid 1034096:tid 1034309] [client 40.83.93.50:13217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/disagraeosc.php"] [unique_id "apK9uS04twRPFuquKD2yKwAAAL8"]
[Sat Aug 29 05:08:41.146504 2026] [security2:error] [pid 1028675:tid 1028879] [client 158.23.147.79:6090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/xmlrpc.php"] [unique_id "apK9uddHPfW2QFvhmL4J2gAAAEU"]
[Sat Aug 29 05:08:41.164011 2026] [security2:error] [pid 1028675:tid 1028735] [remote 93.123.109.228:60774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK9uddHPfW2QFvhmL4J5AAAJjY"]
[Sat Aug 29 05:08:41.164586 2026] [security2:error] [pid 1028675:tid 1028780] [remote 93.123.109.228:60774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(\\\\/\\\\*\\\\!? ?(?:select|grant|delete|insert|drop|alter|replace|truncate|update|create|rename|describe|union|concat|group_concat))" at REQUEST_FILENAME. [file "/opt/mod_security/hg_rules.conf"] [line "1019"] [id "9000042"] [rev "2.2.2"] [msg "SQL Comment Sequence Detected."] [data "/*update"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/*update.cgi*"] [unique_id "apK9uddHPfW2QFvhmL4J3gAAJmM"]
[Sat Aug 29 05:08:41.167555 2026] [core:error] [pid 1028675:tid 1028769] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.167572 2026] [core:error] [pid 1028675:tid 1028769] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.168712 2026] [security2:error] [pid 1034096:tid 1034286] [client 74.248.24.12:5493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/ahax.php"] [unique_id "apK9uS04twRPFuquKD2yLgAAAKg"]
[Sat Aug 29 05:08:41.171459 2026] [security2:error] [pid 1028675:tid 1028823] [client 158.23.147.79:35698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK9uddHPfW2QFvhmL4J5wAAAA0"]
[Sat Aug 29 05:08:41.176882 2026] [security2:error] [pid 1034096:tid 1034286] [client 4.205.62.107:22195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/session.php"] [unique_id "apK9uS04twRPFuquKD2yNwAAAKg"]
[Sat Aug 29 05:08:41.180615 2026] [security2:error] [pid 1034096:tid 1034260] [client 45.148.10.60:6608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:procedure\\\\s+analyse\\\\s.{0,100}\\\$|create\\\\s+(procedure|function)\\\\s.{0,100}\\\\w+\\\\s.{0,100}\\\\(\\\\s.{0,200}\\\$\\\\s.{0,100}declare[^\\\\w]+[@#]\\\\s.{0,100}\\\\w+|exec\\\\s.{0,100}\\\\(\\\\s.{0,200}@|\\\\b(?:sleep|benchmark)\\\\b ?\\\\( ?[0-9])" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "273"] [id "380122"] [rev "5"] [msg "Atomicorp.com WAF Rules: MySQL and PostgreSQL stored procedure/function injections"] [data "benchmark(3"] [severity "CRITICAL"] [tag "SQLi"] [hostname "villagebooksandbears.com"] [uri "/wp/v2/posts/999999"] [unique_id "apK9uS04twRPFuquKD2yOAAAAI4"]
[Sat Aug 29 05:08:41.190759 2026] [core:error] [pid 1034096:tid 1034311] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.190780 2026] [core:error] [pid 1034096:tid 1034311] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.191714 2026] [core:error] [pid 1034096:tid 1034253] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.191731 2026] [core:error] [pid 1034096:tid 1034253] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.194345 2026] [core:error] [pid 1034096:tid 1034339] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.194372 2026] [core:error] [pid 1034096:tid 1034339] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.195399 2026] [core:error] [pid 1028675:tid 1028820] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.195431 2026] [core:error] [pid 1028675:tid 1028820] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.197845 2026] [core:error] [pid 1034096:tid 1034321] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.197860 2026] [core:error] [pid 1034096:tid 1034321] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.204221 2026] [security2:error] [pid 1028675:tid 1028805] [remote 93.123.109.228:60774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/laravel/app/.env"] [unique_id "apK9uddHPfW2QFvhmL4J6wAAJnw"]
[Sat Aug 29 05:08:41.204221 2026] [security2:error] [pid 1028675:tid 1028791] [remote 93.123.109.228:60774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/.env"] [unique_id "apK9uddHPfW2QFvhmL4J7AAAJm4"]
[Sat Aug 29 05:08:41.205652 2026] [core:error] [pid 1028675:tid 1028768] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.205663 2026] [core:error] [pid 1028675:tid 1028768] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.206203 2026] [core:error] [pid 1028675:tid 1028727] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.206213 2026] [core:error] [pid 1028675:tid 1028727] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.207533 2026] [security2:error] [pid 1034096:tid 1034325] [client 158.23.147.79:11269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/login.php"] [unique_id "apK9uS04twRPFuquKD2yQAAAAM8"]
[Sat Aug 29 05:08:41.210477 2026] [core:error] [pid 1034096:tid 1034368] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.210490 2026] [core:error] [pid 1034096:tid 1034368] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.235422 2026] [security2:error] [pid 1028675:tid 1028892] [client 40.83.93.50:21275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-content/index.php"] [unique_id "apK9uddHPfW2QFvhmL4J8QAAAFI"]
[Sat Aug 29 05:08:41.242916 2026] [security2:error] [pid 1034096:tid 1034328] [client 158.23.184.117:23115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/.well-known/home.php"] [unique_id "apK9uS04twRPFuquKD2yRQAAANI"]
[Sat Aug 29 05:08:41.258486 2026] [security2:error] [pid 1034096:tid 1034342] [client 40.83.93.50:20822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-admin/panel.php"] [unique_id "apK9uS04twRPFuquKD2yRwAAAOA"]
[Sat Aug 29 05:08:41.264924 2026] [security2:error] [pid 1034096:tid 1034255] [client 52.139.37.240:18842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/wp-info.php"] [unique_id "apK9uS04twRPFuquKD2ySQAAAIk"]
[Sat Aug 29 05:08:41.267596 2026] [security2:error] [pid 1034096:tid 1034369] [client 68.155.159.216:33647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9uS04twRPFuquKD2ySgAAAPs"]
[Sat Aug 29 05:08:41.270522 2026] [security2:error] [pid 1034096:tid 1034361] [client 158.23.147.79:17565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/wp-content/radio.php"] [unique_id "apK9uS04twRPFuquKD2yTAAAAPM"]
[Sat Aug 29 05:08:41.272703 2026] [security2:error] [pid 1034096:tid 1034291] [client 68.155.159.216:30598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apK9uS04twRPFuquKD2yTQAAAK0"]
[Sat Aug 29 05:08:41.276748 2026] [security2:error] [pid 1028675:tid 1028876] [client 68.155.159.216:64083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/simple.php"] [unique_id "apK9uddHPfW2QFvhmL4J9QAAAEI"]
[Sat Aug 29 05:08:41.278807 2026] [core:error] [pid 1028675:tid 1028835] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.278824 2026] [core:error] [pid 1028675:tid 1028835] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.284769 2026] [security2:error] [pid 1034096:tid 1034283] [client 91.92.47.191:42874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "corrigansbasement.rocworx.com"] [uri "/wp-config.php"] [unique_id "apK9uS04twRPFuquKD2yUAAAAKU"]
[Sat Aug 29 05:08:41.295268 2026] [security2:error] [pid 1034096:tid 1034375] [client 20.52.41.200:4362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/m.php"] [unique_id "apK9uS04twRPFuquKD2yUgAAAQE"]
[Sat Aug 29 05:08:41.320030 2026] [security2:error] [pid 1028675:tid 1028771] [remote 93.123.109.228:60774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK9uddHPfW2QFvhmL4J-QAAG1o"]
[Sat Aug 29 05:08:41.325578 2026] [security2:error] [pid 1028675:tid 1028684] [remote 93.123.109.228:60774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/.env.backup"] [unique_id "apK9uddHPfW2QFvhmL4J-wAAGwQ"]
[Sat Aug 29 05:08:41.339586 2026] [security2:error] [pid 1028675:tid 1028883] [client 20.63.219.114:17076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/alfa-rex.php"] [unique_id "apK9uddHPfW2QFvhmL4J_wAAAEk"]
[Sat Aug 29 05:08:41.358147 2026] [core:error] [pid 1028675:tid 1028907] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.358173 2026] [core:error] [pid 1028675:tid 1028907] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.370571 2026] [core:error] [pid 1028675:tid 1028898] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.370588 2026] [core:error] [pid 1028675:tid 1028898] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.378509 2026] [security2:error] [pid 1028675:tid 1028740] [remote 93.123.109.228:60774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/.env.bak"] [unique_id "apK9uddHPfW2QFvhmL4KBAAAGzs"]
[Sat Aug 29 05:08:41.391078 2026] [security2:error] [pid 1034096:tid 1034295] [client 158.23.184.117:23105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/.well-known/index.php"] [unique_id "apK9uS04twRPFuquKD2yYQAAALE"]
[Sat Aug 29 05:08:41.422859 2026] [security2:error] [pid 1028675:tid 1028909] [client 45.148.10.62:59046] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.wxk.tiz.mybluehost.me"] [uri "/stripe/.env"] [unique_id "apK9uddHPfW2QFvhmL4KDwAAAGM"]
[Sat Aug 29 05:08:41.447611 2026] [core:error] [pid 1028675:tid 1028816] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.447625 2026] [core:error] [pid 1028675:tid 1028816] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.453871 2026] [security2:error] [pid 1028675:tid 1028915] [client 40.83.93.50:11905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/about.php525"] [unique_id "apK9uddHPfW2QFvhmL4KFwAAAGk"]
[Sat Aug 29 05:08:41.458776 2026] [security2:error] [pid 1028675:tid 1028925] [client 52.139.37.240:18868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/wp-wordfence-waf.php"] [unique_id "apK9uddHPfW2QFvhmL4KGAAAAHM"]
[Sat Aug 29 05:08:41.470874 2026] [security2:error] [pid 1028675:tid 1028894] [client 158.158.54.35:13017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/alfa.php"] [unique_id "apK9uddHPfW2QFvhmL4KGwAAAFQ"]
[Sat Aug 29 05:08:41.472118 2026] [core:error] [pid 1028675:tid 1028922] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.472137 2026] [core:error] [pid 1028675:tid 1028922] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.479248 2026] [security2:error] [pid 1028675:tid 1028903] [client 20.104.49.130:60933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/dk.php"] [unique_id "apK9uddHPfW2QFvhmL4KHAAAAF0"]
[Sat Aug 29 05:08:41.486210 2026] [security2:error] [pid 1028675:tid 1028901] [client 20.151.200.44:64470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/d12.php"] [unique_id "apK9uddHPfW2QFvhmL4KHQAAAFs"]
[Sat Aug 29 05:08:41.495506 2026] [security2:error] [pid 1034096:tid 1034277] [client 158.23.147.79:26540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/ans.php"] [unique_id "apK9uS04twRPFuquKD2yegAAAJ8"]
[Sat Aug 29 05:08:41.501129 2026] [security2:error] [pid 1028675:tid 1028733] [remote 93.123.109.228:60774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/.env.php"] [unique_id "apK9uddHPfW2QFvhmL4KHgAAGzQ"]
[Sat Aug 29 05:08:41.504261 2026] [security2:error] [pid 1028675:tid 1028802] [remote 93.123.109.228:60774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/.env.old"] [unique_id "apK9uddHPfW2QFvhmL4KHwAAG3k"]
[Sat Aug 29 05:08:41.522381 2026] [security2:error] [pid 1034096:tid 1034260] [client 45.148.10.60:6608] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.body.requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1600"] [id "900941"] [msg "Invalid nested WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.body.requests.requests.path=///"] [hostname "villagebooksandbears.com"] [uri "/"] [unique_id "apK9uS04twRPFuquKD2yewAAAI4"]
[Sat Aug 29 05:08:41.528552 2026] [security2:error] [pid 1028675:tid 1028860] [client 68.155.159.216:14333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/file17.php"] [unique_id "apK9uddHPfW2QFvhmL4KIQAAADI"]
[Sat Aug 29 05:08:41.529696 2026] [security2:error] [pid 1028675:tid 1028878] [client 20.197.61.180:14991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/backup.php"] [unique_id "apK9uddHPfW2QFvhmL4KIgAAAEQ"]
[Sat Aug 29 05:08:41.534594 2026] [core:error] [pid 1028675:tid 1028930] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.534610 2026] [core:error] [pid 1028675:tid 1028930] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.540213 2026] [security2:error] [pid 1034096:tid 1034266] [client 158.23.184.117:23163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/.well-known/login.php"] [unique_id "apK9uS04twRPFuquKD2yfgAAAJQ"]
[Sat Aug 29 05:08:41.543944 2026] [core:error] [pid 1034096:tid 1034314] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.543964 2026] [core:error] [pid 1034096:tid 1034314] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.545292 2026] [core:error] [pid 1034096:tid 1034372] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.545308 2026] [core:error] [pid 1034096:tid 1034372] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.545672 2026] [core:error] [pid 1028675:tid 1028923] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.545690 2026] [core:error] [pid 1028675:tid 1028923] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.546926 2026] [core:error] [pid 1034096:tid 1034290] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.546945 2026] [core:error] [pid 1034096:tid 1034290] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.549318 2026] [core:error] [pid 1028675:tid 1028896] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.549336 2026] [core:error] [pid 1028675:tid 1028896] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.550579 2026] [core:alert] [pid 1034096:tid 1034286] [client 66.249.92.140:57081] /home2/dhronnet/public_html/.htaccess: The specified network mask is invalid.
[Sat Aug 29 05:08:41.553483 2026] [security2:error] [pid 1034096:tid 1034370] [client 20.104.49.130:36284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.carlosmua.com"] [uri "/mh.php"] [unique_id "apK9uS04twRPFuquKD2yggAAAPw"]
[Sat Aug 29 05:08:41.557735 2026] [core:error] [pid 1034096:tid 1034353] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.557749 2026] [core:error] [pid 1034096:tid 1034353] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.561146 2026] [security2:error] [pid 1034096:tid 1034298] [client 111.235.68.106:28378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK9uS04twRPFuquKD2yhgAAALQ"]
[Sat Aug 29 05:08:41.561244 2026] [security2:error] [pid 1034096:tid 1034298] [client 111.235.68.106:28378] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK9uS04twRPFuquKD2yhgAAALQ"]
[Sat Aug 29 05:08:41.562618 2026] [core:error] [pid 1034096:tid 1034372] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.562631 2026] [core:error] [pid 1034096:tid 1034372] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.571553 2026] [security2:error] [pid 1034096:tid 1034319] [client 20.100.175.163:5291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK9uS04twRPFuquKD2yiwAAAMk"]
[Sat Aug 29 05:08:41.576378 2026] [core:error] [pid 1034096:tid 1034325] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.576401 2026] [core:error] [pid 1034096:tid 1034325] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.586442 2026] [security2:error] [pid 1034096:tid 1034373] [client 158.23.147.79:17525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/.well-knownold/index.php"] [unique_id "apK9uS04twRPFuquKD2yjwAAAP8"]
[Sat Aug 29 05:08:41.594196 2026] [security2:error] [pid 1034096:tid 1034273] [client 4.232.148.111:31006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/php8.php"] [unique_id "apK9uS04twRPFuquKD2ylwAAAJs"]
[Sat Aug 29 05:08:41.594664 2026] [security2:error] [pid 1034096:tid 1034369] [client 45.148.10.62:59026] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.wxe.rvy.mybluehost.me"] [uri "/backend/.env"] [unique_id "apK9uS04twRPFuquKD2ylgAAAPs"]
[Sat Aug 29 05:08:41.599995 2026] [security2:error] [pid 1034096:tid 1034327] [client 20.240.128.207:27523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/file2.php"] [unique_id "apK9uS04twRPFuquKD2ymAAAANE"]
[Sat Aug 29 05:08:41.633364 2026] [security2:error] [pid 1034096:tid 1034323] [client 40.83.93.50:12490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/about.php525"] [unique_id "apK9uS04twRPFuquKD2ymgAAAM0"]
[Sat Aug 29 05:08:41.657684 2026] [security2:error] [pid 1034096:tid 1034373] [client 52.139.37.240:19388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/ws49.php"] [unique_id "apK9uS04twRPFuquKD2ynwAAAP8"]
[Sat Aug 29 05:08:41.673112 2026] [core:error] [pid 1034096:tid 1034378] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.673136 2026] [core:error] [pid 1034096:tid 1034378] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.674478 2026] [security2:error] [pid 1034096:tid 1034356] [client 45.148.10.60:6608] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.body.requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1600"] [id "900941"] [msg "Invalid nested WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.body.requests.requests.path=///"] [hostname "villagebooksandbears.com"] [uri "/"] [unique_id "apK9uS04twRPFuquKD2ypQAAAO4"]
[Sat Aug 29 05:08:41.681631 2026] [security2:error] [pid 1028675:tid 1028911] [client 74.248.24.12:37878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/shell.php"] [unique_id "apK9uddHPfW2QFvhmL4KNAAAAGU"]
[Sat Aug 29 05:08:41.684611 2026] [security2:error] [pid 1028675:tid 1028929] [client 20.197.61.180:1265] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/1.php7"] [unique_id "apK9uddHPfW2QFvhmL4KNQAAAHc"]
[Sat Aug 29 05:08:41.684723 2026] [security2:error] [pid 1028675:tid 1028929] [client 20.197.61.180:1265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/1.php7"] [unique_id "apK9uddHPfW2QFvhmL4KNQAAAHc"]
[Sat Aug 29 05:08:41.691204 2026] [security2:error] [pid 1034096:tid 1034287] [client 158.23.184.117:23282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/.well-known/logs233/index.php"] [unique_id "apK9uS04twRPFuquKD2ypwAAAKk"]
[Sat Aug 29 05:08:41.706730 2026] [security2:error] [pid 1034096:tid 1034316] [client 20.63.219.114:10437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/cookie.php"] [unique_id "apK9uS04twRPFuquKD2yqgAAAMY"]
[Sat Aug 29 05:08:41.711143 2026] [core:error] [pid 1028675:tid 1028886] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.711161 2026] [core:error] [pid 1028675:tid 1028886] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.711176 2026] [core:error] [pid 1034096:tid 1034352] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.711187 2026] [core:error] [pid 1034096:tid 1034352] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.717920 2026] [security2:error] [pid 1034096:tid 1034321] [client 40.83.93.50:21595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-content/install.php"] [unique_id "apK9uS04twRPFuquKD2yrQAAAMs"]
[Sat Aug 29 05:08:41.723088 2026] [security2:error] [pid 1028675:tid 1028908] [client 68.155.159.216:24467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/goat1.php"] [unique_id "apK9uddHPfW2QFvhmL4KQgAAAGI"]
[Sat Aug 29 05:08:41.723237 2026] [security2:error] [pid 1028675:tid 1028744] [remote 93.123.109.228:60774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/.env.swp"] [unique_id "apK9uddHPfW2QFvhmL4KPQAAGz8"]
[Sat Aug 29 05:08:41.723250 2026] [security2:error] [pid 1028675:tid 1028794] [remote 93.123.109.228:60774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/.env~"] [unique_id "apK9uddHPfW2QFvhmL4KPgAAG3E"]
[Sat Aug 29 05:08:41.736137 2026] [security2:error] [pid 1034096:tid 1034328] [client 40.83.93.50:20824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-admin/pk.php"] [unique_id "apK9uS04twRPFuquKD2ysQAAANI"]
[Sat Aug 29 05:08:41.741065 2026] [security2:error] [pid 1034096:tid 1034280] [client 45.148.10.62:59026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wxe.rvy.mybluehost.me"] [uri "/test.php"] [unique_id "apK9uS04twRPFuquKD2yswAAAKI"]
[Sat Aug 29 05:08:41.744384 2026] [core:error] [pid 1028675:tid 1028847] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.744404 2026] [core:error] [pid 1028675:tid 1028847] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.744912 2026] [core:error] [pid 1028675:tid 1028883] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.744922 2026] [core:error] [pid 1028675:tid 1028883] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.745533 2026] [core:error] [pid 1034096:tid 1034294] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.745546 2026] [core:error] [pid 1034096:tid 1034294] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.746299 2026] [security2:error] [pid 1028675:tid 1028842] [client 45.148.10.62:59044] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.wxd.mej.mybluehost.me"] [uri "/backend/.env"] [unique_id "apK9uddHPfW2QFvhmL4KTQAAACA"]
[Sat Aug 29 05:08:41.746468 2026] [security2:error] [pid 1028675:tid 1028828] [client 45.148.10.62:59034] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.wxg.uhf.mybluehost.me"] [uri "/backend/.env"] [unique_id "apK9uddHPfW2QFvhmL4KTAAAABI"]
[Sat Aug 29 05:08:41.752682 2026] [security2:error] [pid 1028675:tid 1028811] [client 20.52.41.200:5299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "apK9uddHPfW2QFvhmL4KTgAAAAE"]
[Sat Aug 29 05:08:41.757453 2026] [security2:error] [pid 1034096:tid 1034272] [client 68.155.159.216:9254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/about.php"] [unique_id "apK9uS04twRPFuquKD2ytgAAAJo"]
[Sat Aug 29 05:08:41.758386 2026] [security2:error] [pid 1034096:tid 1034268] [client 68.155.159.216:65146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK9uS04twRPFuquKD2ytwAAAJY"]
[Sat Aug 29 05:08:41.760979 2026] [security2:error] [pid 1034096:tid 1034304] [client 61.9.8.250:2168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 250.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK9uS04twRPFuquKD2ysgAAALo"]
[Sat Aug 29 05:08:41.761079 2026] [security2:error] [pid 1034096:tid 1034304] [client 61.9.8.250:2168] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK9uS04twRPFuquKD2ysgAAALo"]
[Sat Aug 29 05:08:41.766545 2026] [security2:error] [pid 1028675:tid 1028918] [client 68.155.159.216:1922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-content/admin.php"] [unique_id "apK9uddHPfW2QFvhmL4KTwAAAGw"]
[Sat Aug 29 05:08:41.774848 2026] [core:error] [pid 1034096:tid 1034260] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.774865 2026] [core:error] [pid 1034096:tid 1034260] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.792021 2026] [core:error] [pid 1028675:tid 1028885] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.792036 2026] [core:error] [pid 1028675:tid 1028885] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.800079 2026] [security2:error] [pid 1028675:tid 1028819] [client 20.104.49.130:30027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK9uddHPfW2QFvhmL4KVAAAAAk"]
[Sat Aug 29 05:08:41.804363 2026] [core:error] [pid 1034096:tid 1034266] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.804380 2026] [core:error] [pid 1034096:tid 1034266] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.804383 2026] [core:error] [pid 1034096:tid 1034307] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.804394 2026] [core:error] [pid 1034096:tid 1034307] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.807319 2026] [core:error] [pid 1034096:tid 1034253] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.807332 2026] [core:error] [pid 1034096:tid 1034253] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.822804 2026] [core:error] [pid 1034096:tid 1034315] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.822822 2026] [core:error] [pid 1034096:tid 1034315] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.823090 2026] [core:error] [pid 1034096:tid 1034344] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.823104 2026] [core:error] [pid 1034096:tid 1034344] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.840175 2026] [security2:error] [pid 1034096:tid 1034311] [client 158.23.184.117:23120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/.well-known/maintenance.php"] [unique_id "apK9uS04twRPFuquKD2yyAAAAME"]
[Sat Aug 29 05:08:41.847675 2026] [security2:error] [pid 1028675:tid 1028903] [client 4.205.62.107:51407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/txets.php"] [unique_id "apK9uddHPfW2QFvhmL4KVgAAAF0"]
[Sat Aug 29 05:08:41.848834 2026] [security2:error] [pid 1034096:tid 1034372] [client 68.155.159.216:18190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-mail.php"] [unique_id "apK9uS04twRPFuquKD2yygAAAP4"]
[Sat Aug 29 05:08:41.849816 2026] [core:error] [pid 1034096:tid 1034332] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.849840 2026] [core:error] [pid 1034096:tid 1034332] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.854203 2026] [security2:error] [pid 1028675:tid 1028813] [client 52.139.37.240:19374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/xxx.php"] [unique_id "apK9uddHPfW2QFvhmL4KVwAAAAM"]
[Sat Aug 29 05:08:41.857484 2026] [security2:error] [pid 1034096:tid 1034325] [client 195.178.110.247:9542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.logosignshop.net"] [uri "/index.php"] [unique_id "apK9uS04twRPFuquKD2yywAAAM8"]
[Sat Aug 29 05:08:41.894953 2026] [security2:error] [pid 1028675:tid 1028860] [client 45.148.10.62:59034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wxg.uhf.mybluehost.me"] [uri "/test.php"] [unique_id "apK9uddHPfW2QFvhmL4KWwAAADI"]
[Sat Aug 29 05:08:41.895943 2026] [security2:error] [pid 1028675:tid 1028878] [client 45.148.10.62:59044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wxd.mej.mybluehost.me"] [uri "/test.php"] [unique_id "apK9uddHPfW2QFvhmL4KXAAAAEQ"]
[Sat Aug 29 05:08:41.901575 2026] [cgid:error] [pid 1034096:tid 1034220] [remote 34.73.62.26:53612] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:41.901621 2026] [cgid:error] [pid 1034096:tid 1034243] [remote 34.73.62.26:53612] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:41.901621 2026] [cgid:error] [pid 1034096:tid 1034244] [remote 34.73.62.26:53612] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:41.921239 2026] [security2:error] [pid 1034096:tid 1034310] [client 158.158.54.35:31625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/403.php"] [unique_id "apK9uS04twRPFuquKD2y1AAAAMA"]
[Sat Aug 29 05:08:41.948757 2026] [cgid:error] [pid 1034096:tid 1034219] [remote 34.73.62.26:53612] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:41.949343 2026] [security2:error] [pid 1034096:tid 1034356] [client 68.155.159.216:16366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wzy.php"] [unique_id "apK9uS04twRPFuquKD2y2AAAAO4"]
[Sat Aug 29 05:08:41.959770 2026] [security2:error] [pid 1034096:tid 1034318] [client 40.83.93.50:18881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/spip.php"] [unique_id "apK9uS04twRPFuquKD2y4QAAAMg"]
[Sat Aug 29 05:08:41.960993 2026] [security2:error] [pid 1028675:tid 1028757] [remote 93.123.109.228:60774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.bak"] [unique_id "apK9uddHPfW2QFvhmL4KYAAAF0w"]
[Sat Aug 29 05:08:41.961573 2026] [security2:error] [pid 1028675:tid 1028734] [remote 93.123.109.228:60774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config~"] [unique_id "apK9uddHPfW2QFvhmL4KZQAAFzU"]
[Sat Aug 29 05:08:41.962009 2026] [security2:error] [pid 1028675:tid 1028739] [remote 93.123.109.228:60774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.old"] [unique_id "apK9uddHPfW2QFvhmL4KYQAAFzo"]
[Sat Aug 29 05:08:41.962675 2026] [cgid:error] [pid 1034096:tid 1034237] [remote 34.73.62.26:53612] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:41.980604 2026] [core:error] [pid 1034096:tid 1034355] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.980628 2026] [core:error] [pid 1034096:tid 1034355] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.992027 2026] [security2:error] [pid 1034096:tid 1034294] [client 4.205.62.107:6950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/lala.php"] [unique_id "apK9uS04twRPFuquKD2y8AAAALA"]
[Sat Aug 29 05:08:41.997330 2026] [core:error] [pid 1034096:tid 1034285] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.997363 2026] [core:error] [pid 1034096:tid 1034285] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.997385 2026] [core:error] [pid 1034096:tid 1034252] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.997397 2026] [core:error] [pid 1034096:tid 1034252] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.997414 2026] [core:error] [pid 1034096:tid 1034280] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:41.997429 2026] [core:error] [pid 1034096:tid 1034280] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.002740 2026] [security2:error] [pid 1034096:tid 1034373] [client 158.23.184.117:23289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/.well-known/min.php"] [unique_id "apK9ui04twRPFuquKD2y9AAAAP8"]
[Sat Aug 29 05:08:42.006640 2026] [core:error] [pid 1034096:tid 1034272] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.006653 2026] [core:error] [pid 1034096:tid 1034272] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.008184 2026] [security2:error] [pid 1034096:tid 1034275] [client 195.178.110.247:33072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.logosignshop.net"] [uri "/index.php"] [unique_id "apK9ui04twRPFuquKD2y9wAAAJ0"]
[Sat Aug 29 05:08:42.027687 2026] [core:error] [pid 1034096:tid 1034350] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.027711 2026] [core:error] [pid 1034096:tid 1034350] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.028334 2026] [core:error] [pid 1028675:tid 1028846] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.028348 2026] [core:error] [pid 1028675:tid 1028846] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.034316 2026] [core:error] [pid 1028675:tid 1028867] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.034337 2026] [core:error] [pid 1028675:tid 1028867] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.034976 2026] [security2:error] [pid 1034096:tid 1034266] [client 4.205.62.107:65495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/cloud.php"] [unique_id "apK9ui04twRPFuquKD2y_gAAAJQ"]
[Sat Aug 29 05:08:42.035450 2026] [security2:error] [pid 1034096:tid 1034339] [client 68.155.159.216:1978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK9ui04twRPFuquKD2zAAAAAN0"]
[Sat Aug 29 05:08:42.036427 2026] [core:error] [pid 1034096:tid 1034358] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.036437 2026] [core:error] [pid 1034096:tid 1034358] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.044086 2026] [security2:error] [pid 1028675:tid 1028887] [client 45.148.10.62:59046] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.wxk.tiz.mybluehost.me"] [uri "/backend/.env"] [unique_id "apK9utdHPfW2QFvhmL4KdgAAAE0"]
[Sat Aug 29 05:08:42.053451 2026] [security2:error] [pid 1028675:tid 1028851] [client 52.139.37.240:19373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/0x.php"] [unique_id "apK9utdHPfW2QFvhmL4KdwAAACk"]
[Sat Aug 29 05:08:42.067529 2026] [core:error] [pid 1034096:tid 1034270] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.067551 2026] [core:error] [pid 1034096:tid 1034270] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.068634 2026] [core:error] [pid 1034096:tid 1034301] [client 20.100.175.163:28238] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.068653 2026] [core:error] [pid 1034096:tid 1034301] [client 20.100.175.163:28238] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.073109 2026] [core:error] [pid 1028675:tid 1028929] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.073133 2026] [core:error] [pid 1028675:tid 1028929] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.073943 2026] [core:error] [pid 1034096:tid 1034308] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.073955 2026] [core:error] [pid 1034096:tid 1034308] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.074145 2026] [core:error] [pid 1028675:tid 1028886] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.074156 2026] [core:error] [pid 1028675:tid 1028886] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.075941 2026] [security2:error] [pid 1034096:tid 1034297] [client 20.63.219.114:18499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/NewFile.php"] [unique_id "apK9ui04twRPFuquKD2zBwAAALM"]
[Sat Aug 29 05:08:42.082219 2026] [security2:error] [pid 1034096:tid 1034353] [client 4.205.62.107:62923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/oiko6u.php"] [unique_id "apK9ui04twRPFuquKD2zCAAAAOs"]
[Sat Aug 29 05:08:42.092805 2026] [security2:error] [pid 1034096:tid 1034312] [client 20.151.200.44:63891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/yyy.php"] [unique_id "apK9ui04twRPFuquKD2zCQAAAMI"]
[Sat Aug 29 05:08:42.113076 2026] [security2:error] [pid 1034096:tid 1034377] [client 20.240.128.207:24706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK9ui04twRPFuquKD2zDAAAAQM"]
[Sat Aug 29 05:08:42.135661 2026] [security2:error] [pid 1034096:tid 1034265] [client 40.83.93.50:9705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/spip.php"] [unique_id "apK9ui04twRPFuquKD2zEQAAAJM"]
[Sat Aug 29 05:08:42.139958 2026] [security2:error] [pid 1034096:tid 1034247] [remote 87.250.224.236:42640] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Mozilla\\\\/5\\\\.0 \\\$compatible; YandexBot\\\\/3\\\\.0; \\\\+http:\\\\/\\\\/yandex\\\\.com\\\\/bots\\\$" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/othercrawler.conf"] [line "3"] [id "901008"] [msg "Yandex Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "cloud9walkers.com"] [uri "/SweetTater.htm"] [unique_id "apK9ui04twRPFuquKD2zEgAAwH0"]
[Sat Aug 29 05:08:42.148175 2026] [security2:error] [pid 1034096:tid 1034311] [client 158.23.184.117:23259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/.well-known/module.php"] [unique_id "apK9ui04twRPFuquKD2zFAAAAME"]
[Sat Aug 29 05:08:42.169443 2026] [security2:error] [pid 1034096:tid 1034369] [client 4.205.62.107:9018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/06.php"] [unique_id "apK9ui04twRPFuquKD2zGQAAAPs"]
[Sat Aug 29 05:08:42.174976 2026] [security2:error] [pid 1034096:tid 1034259] [client 158.23.147.79:5973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/asd.php"] [unique_id "apK9ui04twRPFuquKD2zHAAAAI0"]
[Sat Aug 29 05:08:42.176605 2026] [core:error] [pid 1034096:tid 1034273] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.176626 2026] [core:error] [pid 1034096:tid 1034302] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.176629 2026] [core:error] [pid 1034096:tid 1034273] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.176638 2026] [core:error] [pid 1034096:tid 1034302] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.178997 2026] [core:error] [pid 1028675:tid 1028872] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.179010 2026] [core:error] [pid 1028675:tid 1028872] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.179806 2026] [core:error] [pid 1034096:tid 1034361] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.179821 2026] [core:error] [pid 1034096:tid 1034361] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.191520 2026] [security2:error] [pid 1028675:tid 1028839] [client 45.148.10.62:59046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wxk.tiz.mybluehost.me"] [uri "/test.php"] [unique_id "apK9utdHPfW2QFvhmL4KgwAAAB0"]
[Sat Aug 29 05:08:42.193771 2026] [security2:error] [pid 1028675:tid 1028863] [client 74.248.24.12:7223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/elp.php"] [unique_id "apK9utdHPfW2QFvhmL4KhAAAADU"]
[Sat Aug 29 05:08:42.201726 2026] [security2:error] [pid 1034096:tid 1034280] [client 158.23.147.79:59861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK9ui04twRPFuquKD2zIgAAAKI"]
[Sat Aug 29 05:08:42.210573 2026] [security2:error] [pid 1028675:tid 1028911] [client 20.52.41.200:5301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/222.php"] [unique_id "apK9utdHPfW2QFvhmL4KhgAAAGU"]
[Sat Aug 29 05:08:42.236897 2026] [security2:error] [pid 1034096:tid 1034344] [client 40.83.93.50:13601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-admin/plugin-install.php"] [unique_id "apK9ui04twRPFuquKD2zJwAAAOI"]
[Sat Aug 29 05:08:42.238369 2026] [security2:error] [pid 1034096:tid 1034347] [client 4.232.148.111:7520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/install.php"] [unique_id "apK9ui04twRPFuquKD2zKAAAAOU"]
[Sat Aug 29 05:08:42.239693 2026] [security2:error] [pid 1034096:tid 1034289] [client 195.178.110.247:9558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.logowrapshop.com"] [uri "/index.php"] [unique_id "apK9ui04twRPFuquKD2zKQAAAKs"]
[Sat Aug 29 05:08:42.248226 2026] [security2:error] [pid 1034096:tid 1034304] [client 20.197.61.180:14410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/haiterus.php"] [unique_id "apK9ui04twRPFuquKD2zKgAAALo"]
[Sat Aug 29 05:08:42.249420 2026] [security2:error] [pid 1034096:tid 1034251] [client 52.139.37.240:18826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/CDX1.php"] [unique_id "apK9ui04twRPFuquKD2zKwAAAIU"]
[Sat Aug 29 05:08:42.254419 2026] [security2:error] [pid 1028675:tid 1028892] [client 158.23.147.79:5984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/atomlib.php"] [unique_id "apK9utdHPfW2QFvhmL4KjQAAAFI"]
[Sat Aug 29 05:08:42.257061 2026] [security2:error] [pid 1034096:tid 1034314] [client 4.205.62.107:3930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/aws.php"] [unique_id "apK9ui04twRPFuquKD2zLQAAAMQ"]
[Sat Aug 29 05:08:42.284160 2026] [security2:error] [pid 1034096:tid 1034335] [client 45.148.10.62:59054] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.wxe.rvy.mybluehost.me"] [uri "/.env.backup"] [unique_id "apK9ui04twRPFuquKD2zLgAAANk"]
[Sat Aug 29 05:08:42.289712 2026] [security2:error] [pid 1034096:tid 1034262] [client 31.77.204.227:52884] ModSecurity: Access denied with code 406 (phase 1). IPmatchFromFile: "31.77.204.227" matched at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1090"] [id "999022"] [msg "Blacklisted IP Address for POST data StopForumSpam List"] [hostname "utahtsa.org"] [uri "/wp-comments-post.php"] [unique_id "apK9ui04twRPFuquKD2zMAAAAJA"], referer: https://utahtsa.org/hello-world/
[Sat Aug 29 05:08:42.289795 2026] [security2:error] [pid 1034096:tid 1034262] [client 31.77.204.227:52884] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "406"] [hostname "utahtsa.org"] [uri "/wp-comments-post.php"] [unique_id "apK9ui04twRPFuquKD2zMAAAAJA"], referer: https://utahtsa.org/hello-world/
[Sat Aug 29 05:08:42.291669 2026] [cgid:error] [pid 1034096:tid 1034142] [remote 34.73.62.26:53612] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:42.294432 2026] [security2:error] [pid 1034096:tid 1034321] [client 158.23.184.117:23109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/.well-known/options.php"] [unique_id "apK9ui04twRPFuquKD2zNAAAAMs"]
[Sat Aug 29 05:08:42.297046 2026] [cgid:error] [pid 1034096:tid 1034124] [remote 34.73.62.26:53612] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:42.297986 2026] [cgid:error] [pid 1034096:tid 1034141] [remote 34.73.62.26:53612] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:42.298792 2026] [cgid:error] [pid 1034096:tid 1034248] [remote 34.73.62.26:53612] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:42.318586 2026] [core:error] [pid 1028675:tid 1028900] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.318609 2026] [core:error] [pid 1028675:tid 1028900] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.318658 2026] [security2:error] [pid 1028675:tid 1028918] [client 20.151.200.44:64533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/bgymj.php"] [unique_id "apK9utdHPfW2QFvhmL4KkAAAAGw"]
[Sat Aug 29 05:08:42.324031 2026] [core:error] [pid 1028675:tid 1028816] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.324054 2026] [core:error] [pid 1028675:tid 1028816] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.325225 2026] [security2:error] [pid 1028675:tid 1028925] [client 20.104.49.130:58098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/ws58.php"] [unique_id "apK9utdHPfW2QFvhmL4KlQAAAHM"]
[Sat Aug 29 05:08:42.350117 2026] [security2:error] [pid 1028675:tid 1028894] [client 4.205.62.107:21949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/h.php"] [unique_id "apK9utdHPfW2QFvhmL4KoQAAAFQ"]
[Sat Aug 29 05:08:42.356942 2026] [security2:error] [pid 1028675:tid 1028828] [client 158.158.54.35:1689] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.alexandermint.com"] [uri "/1.php"] [unique_id "apK9utdHPfW2QFvhmL4KogAAABI"]
[Sat Aug 29 05:08:42.357048 2026] [security2:error] [pid 1028675:tid 1028828] [client 158.158.54.35:1689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/1.php"] [unique_id "apK9utdHPfW2QFvhmL4KogAAABI"]
[Sat Aug 29 05:08:42.365559 2026] [security2:error] [pid 1028675:tid 1028901] [client 158.23.147.79:11321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/hehehehe.php"] [unique_id "apK9utdHPfW2QFvhmL4KpAAAAFs"]
[Sat Aug 29 05:08:42.366911 2026] [core:error] [pid 1028675:tid 1028927] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.366934 2026] [core:error] [pid 1028675:tid 1028927] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.375221 2026] [security2:error] [pid 1028675:tid 1028856] [client 68.155.159.216:33601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/content.php"] [unique_id "apK9utdHPfW2QFvhmL4KpQAAAC4"]
[Sat Aug 29 05:08:42.379969 2026] [security2:error] [pid 1034096:tid 1034312] [client 68.155.159.216:30698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK9ui04twRPFuquKD2zSgAAAMI"]
[Sat Aug 29 05:08:42.384638 2026] [core:error] [pid 1034096:tid 1034300] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.384660 2026] [core:error] [pid 1034096:tid 1034300] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.385707 2026] [cgid:error] [pid 1034096:tid 1034147] [remote 34.73.62.26:53612] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:42.387482 2026] [core:error] [pid 1028675:tid 1028825] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.387503 2026] [core:error] [pid 1028675:tid 1028825] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.388972 2026] [core:error] [pid 1028675:tid 1028930] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.388990 2026] [core:error] [pid 1028675:tid 1028930] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.393892 2026] [core:error] [pid 1028675:tid 1028858] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.393909 2026] [core:error] [pid 1028675:tid 1028858] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.394898 2026] [core:error] [pid 1028675:tid 1028878] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.394925 2026] [core:error] [pid 1028675:tid 1028878] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.395448 2026] [core:error] [pid 1034096:tid 1034306] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.395461 2026] [core:error] [pid 1034096:tid 1034306] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.396442 2026] [core:error] [pid 1028675:tid 1028888] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.396456 2026] [core:error] [pid 1028675:tid 1028888] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.398015 2026] [core:error] [pid 1028675:tid 1028923] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.398035 2026] [core:error] [pid 1028675:tid 1028923] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.399733 2026] [core:error] [pid 1034096:tid 1034372] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.399748 2026] [core:error] [pid 1034096:tid 1034372] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.401945 2026] [security2:error] [pid 1034096:tid 1034267] [client 195.178.110.247:33076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.logowrapshop.com"] [uri "/index.php"] [unique_id "apK9ui04twRPFuquKD2zUgAAAJU"]
[Sat Aug 29 05:08:42.413952 2026] [security2:error] [pid 1028675:tid 1028914] [client 68.155.159.216:64100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-admin/about.php"] [unique_id "apK9utdHPfW2QFvhmL4KtQAAAGg"]
[Sat Aug 29 05:08:42.416689 2026] [core:error] [pid 1028675:tid 1028859] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.416715 2026] [core:error] [pid 1028675:tid 1028859] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.419870 2026] [core:error] [pid 1034096:tid 1034327] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.419890 2026] [core:error] [pid 1034096:tid 1034327] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.420491 2026] [core:error] [pid 1028675:tid 1028851] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.420512 2026] [core:error] [pid 1028675:tid 1028851] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.421256 2026] [core:error] [pid 1034096:tid 1034369] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.421266 2026] [core:error] [pid 1034096:tid 1034369] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.436706 2026] [security2:error] [pid 1034096:tid 1034273] [client 45.148.10.62:59054] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.wxe.rvy.mybluehost.me"] [uri "/.env.old"] [unique_id "apK9ui04twRPFuquKD2zVgAAAJs"]
[Sat Aug 29 05:08:42.441094 2026] [security2:error] [pid 1028675:tid 1028915] [client 20.63.219.114:17046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/config.php"] [unique_id "apK9utdHPfW2QFvhmL4KuAAAAGk"]
[Sat Aug 29 05:08:42.443222 2026] [security2:error] [pid 1034096:tid 1034284] [client 158.23.184.117:22823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/.well-known/panel.php"] [unique_id "apK9ui04twRPFuquKD2zVwAAAKY"]
[Sat Aug 29 05:08:42.445776 2026] [security2:error] [pid 1034096:tid 1034298] [client 52.139.37.240:19331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/akcc.php"] [unique_id "apK9ui04twRPFuquKD2zWQAAALQ"]
[Sat Aug 29 05:08:42.447234 2026] [security2:error] [pid 1034096:tid 1034266] [client 45.148.10.62:59066] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.wxd.mej.mybluehost.me"] [uri "/.env.backup"] [unique_id "apK9ui04twRPFuquKD2zWAAAAJQ"]
[Sat Aug 29 05:08:42.447235 2026] [security2:error] [pid 1034096:tid 1034358] [client 45.148.10.62:59076] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.wxg.uhf.mybluehost.me"] [uri "/.env.backup"] [unique_id "apK9ui04twRPFuquKD2zWgAAAPA"]
[Sat Aug 29 05:08:42.455893 2026] [security2:error] [pid 1028675:tid 1028909] [client 40.83.93.50:48035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/backup.php"] [unique_id "apK9utdHPfW2QFvhmL4KuQAAAGM"]
[Sat Aug 29 05:08:42.471575 2026] [security2:error] [pid 1034096:tid 1034159] [remote 93.123.109.228:60596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/test.php"] [unique_id "apK9ui04twRPFuquKD2zXAAAvSU"]
[Sat Aug 29 05:08:42.526026 2026] [security2:error] [pid 1034096:tid 1034316] [client 158.23.147.79:50124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK9ui04twRPFuquKD2zYQAAAMY"]
[Sat Aug 29 05:08:42.538331 2026] [security2:error] [pid 1034096:tid 1034339] [client 20.197.61.180:14596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/ds.php"] [unique_id "apK9ui04twRPFuquKD2zYwAAAN0"]
[Sat Aug 29 05:08:42.555409 2026] [security2:error] [pid 1034096:tid 1034365] [client 45.148.10.60:6608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "villagebooksandbears.com"] [uri "/index.php"] [unique_id "apK9ui04twRPFuquKD2zZgAAAPc"]
[Sat Aug 29 05:08:42.561538 2026] [security2:error] [pid 1034096:tid 1034359] [client 20.100.175.163:12805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-load.php"] [unique_id "apK9ui04twRPFuquKD2zZwAAAPE"]
[Sat Aug 29 05:08:42.578723 2026] [security2:error] [pid 1034096:tid 1034292] [client 103.162.125.59:60603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.125.162.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK9ui04twRPFuquKD2zbQAAAK4"]
[Sat Aug 29 05:08:42.578855 2026] [security2:error] [pid 1034096:tid 1034292] [client 103.162.125.59:60603] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK9ui04twRPFuquKD2zbQAAAK4"]
[Sat Aug 29 05:08:42.595839 2026] [security2:error] [pid 1034096:tid 1034340] [client 68.155.159.216:23550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/file.php"] [unique_id "apK9ui04twRPFuquKD2zbgAAAN4"]
[Sat Aug 29 05:08:42.603626 2026] [security2:error] [pid 1034096:tid 1034370] [client 45.148.10.62:59066] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.wxd.mej.mybluehost.me"] [uri "/.env.old"] [unique_id "apK9ui04twRPFuquKD2zcAAAAPw"]
[Sat Aug 29 05:08:42.606956 2026] [security2:error] [pid 1034096:tid 1034315] [client 45.148.10.62:59076] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.wxg.uhf.mybluehost.me"] [uri "/.env.old"] [unique_id "apK9ui04twRPFuquKD2zcQAAAMU"]
[Sat Aug 29 05:08:42.611050 2026] [security2:error] [pid 1034096:tid 1034289] [client 158.23.184.117:23277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/.well-known/pki-validation/mariju.php"] [unique_id "apK9ui04twRPFuquKD2zcwAAAKs"]
[Sat Aug 29 05:08:42.613707 2026] [security2:error] [pid 1028675:tid 1028902] [client 20.240.128.207:27141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/xda.php"] [unique_id "apK9utdHPfW2QFvhmL4KzQAAAFw"]
[Sat Aug 29 05:08:42.615414 2026] [security2:error] [pid 1034096:tid 1034297] [client 20.151.200.44:63255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/fh26.php"] [unique_id "apK9ui04twRPFuquKD2zdgAAALM"]
[Sat Aug 29 05:08:42.621897 2026] [cgid:error] [pid 1034096:tid 1034182] [remote 34.73.62.26:53612] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:42.626633 2026] [core:error] [pid 1034096:tid 1034328] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.626653 2026] [core:error] [pid 1034096:tid 1034328] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.627008 2026] [core:error] [pid 1034096:tid 1034260] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.627021 2026] [core:error] [pid 1034096:tid 1034260] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.640901 2026] [security2:error] [pid 1034096:tid 1034371] [client 68.155.159.216:14223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/file5.php"] [unique_id "apK9ui04twRPFuquKD2zfgAAAP0"]
[Sat Aug 29 05:08:42.641514 2026] [security2:error] [pid 1034096:tid 1034274] [client 52.139.37.240:19379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK9ui04twRPFuquKD2zfwAAAJw"]
[Sat Aug 29 05:08:42.656526 2026] [core:error] [pid 1034096:tid 1034357] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.656545 2026] [core:error] [pid 1034096:tid 1034357] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.657392 2026] [security2:error] [pid 1034096:tid 1034275] [client 68.155.159.216:49337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/cgi-bin/index.php"] [unique_id "apK9ui04twRPFuquKD2zgwAAAJ0"]
[Sat Aug 29 05:08:42.658458 2026] [security2:error] [pid 1034096:tid 1034272] [client 20.52.41.200:4353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/mini.php"] [unique_id "apK9ui04twRPFuquKD2zhQAAAJo"]
[Sat Aug 29 05:08:42.663939 2026] [core:error] [pid 1028675:tid 1028730] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.663972 2026] [core:error] [pid 1028675:tid 1028730] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.664838 2026] [core:error] [pid 1028675:tid 1028870] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.664858 2026] [core:error] [pid 1028675:tid 1028870] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.667598 2026] [core:error] [pid 1028675:tid 1028832] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.667613 2026] [core:error] [pid 1028675:tid 1028832] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.669406 2026] [security2:error] [pid 1034096:tid 1034320] [client 158.23.147.79:26512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/worksec.php"] [unique_id "apK9ui04twRPFuquKD2zjgAAAMo"]
[Sat Aug 29 05:08:42.672337 2026] [core:error] [pid 1034096:tid 1034270] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.672352 2026] [core:error] [pid 1034096:tid 1034270] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.673220 2026] [cgid:error] [pid 1034096:tid 1034169] [remote 34.73.62.26:53612] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:42.673565 2026] [core:error] [pid 1028675:tid 1028925] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.673580 2026] [core:error] [pid 1028675:tid 1028925] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.673699 2026] [core:error] [pid 1028675:tid 1028894] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.673715 2026] [core:error] [pid 1028675:tid 1028894] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.677896 2026] [core:error] [pid 1034096:tid 1034306] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.677921 2026] [core:error] [pid 1034096:tid 1034306] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.677979 2026] [core:error] [pid 1034096:tid 1034296] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.677990 2026] [core:error] [pid 1034096:tid 1034296] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.680753 2026] [core:error] [pid 1034096:tid 1034308] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.680770 2026] [core:error] [pid 1034096:tid 1034308] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.681758 2026] [core:error] [pid 1034096:tid 1034372] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.681772 2026] [core:error] [pid 1034096:tid 1034372] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.686590 2026] [core:error] [pid 1034096:tid 1034302] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.686607 2026] [core:error] [pid 1034096:tid 1034302] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.687239 2026] [security2:error] [pid 1034096:tid 1034282] [client 40.83.93.50:12485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/backup.php"] [unique_id "apK9ui04twRPFuquKD2zlgAAAKQ"]
[Sat Aug 29 05:08:42.692883 2026] [security2:error] [pid 1034096:tid 1034378] [client 158.23.147.79:17438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK9ui04twRPFuquKD2zlwAAAQQ"]
[Sat Aug 29 05:08:42.706726 2026] [security2:error] [pid 1034096:tid 1034290] [client 40.83.93.50:23446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK9ui04twRPFuquKD2zmAAAAKw"]
[Sat Aug 29 05:08:42.707296 2026] [security2:error] [pid 1034096:tid 1034318] [client 91.92.47.191:58862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "corrigansbasement.rocworx.com"] [uri "/config.php"] [unique_id "apK9ui04twRPFuquKD2zmQAAAMg"]
[Sat Aug 29 05:08:42.715658 2026] [core:error] [pid 1034096:tid 1034332] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.715679 2026] [core:error] [pid 1034096:tid 1034332] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.716660 2026] [core:error] [pid 1034096:tid 1034368] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.716677 2026] [core:error] [pid 1034096:tid 1034368] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.718665 2026] [security2:error] [pid 1028675:tid 1028883] [client 74.248.24.12:22904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-content/cong.php"] [unique_id "apK9utdHPfW2QFvhmL4K3AAAAEk"]
[Sat Aug 29 05:08:42.732409 2026] [security2:error] [pid 1034096:tid 1034314] [client 40.83.93.50:16662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-admin/plugins/img/themes/plugins/maintenance.php"] [unique_id "apK9ui04twRPFuquKD2zoAAAAMQ"]
[Sat Aug 29 05:08:42.758297 2026] [security2:error] [pid 1034096:tid 1034365] [client 45.148.10.62:59054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wxe.rvy.mybluehost.me"] [uri "/.env.php.bak"] [unique_id "apK9ui04twRPFuquKD2zpQAAAPc"]
[Sat Aug 29 05:08:42.759023 2026] [security2:error] [pid 1028675:tid 1028932] [client 158.23.184.117:22789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/.well-known/pki-validation/pl.php"] [unique_id "apK9utdHPfW2QFvhmL4K3gAAAHo"]
[Sat Aug 29 05:08:42.799371 2026] [security2:error] [pid 1034096:tid 1034273] [client 20.63.219.114:8886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/22.php"] [unique_id "apK9ui04twRPFuquKD2zqwAAAJs"]
[Sat Aug 29 05:08:42.816044 2026] [security2:error] [pid 1034096:tid 1034350] [client 4.232.148.111:34711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/ioxi-o.php"] [unique_id "apK9ui04twRPFuquKD2zrQAAAOg"]
[Sat Aug 29 05:08:42.820323 2026] [security2:error] [pid 1028675:tid 1028685] [remote 93.123.109.228:60774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/.wp-config.php.swp"] [unique_id "apK9utdHPfW2QFvhmL4K5QAARAU"]
[Sat Aug 29 05:08:42.830139 2026] [security2:error] [pid 1034096:tid 1034292] [client 68.155.159.216:24549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK9ui04twRPFuquKD2zsQAAAK4"]
[Sat Aug 29 05:08:42.838219 2026] [security2:error] [pid 1028675:tid 1028825] [client 52.139.37.240:18827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/s.php"] [unique_id "apK9utdHPfW2QFvhmL4K5wAAAA8"]
[Sat Aug 29 05:08:42.846504 2026] [core:error] [pid 1034096:tid 1034271] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.846527 2026] [core:error] [pid 1034096:tid 1034271] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.848549 2026] [security2:error] [pid 1028675:tid 1028712] [remote 93.123.109.228:60774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/API/.env"] [unique_id "apK9utdHPfW2QFvhmL4K7AAARB8"]
[Sat Aug 29 05:08:42.848747 2026] [security2:error] [pid 1028675:tid 1028684] [remote 93.123.109.228:60774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/ADMIN/.env"] [unique_id "apK9utdHPfW2QFvhmL4K6wAARAQ"]
[Sat Aug 29 05:08:42.850226 2026] [core:error] [pid 1028675:tid 1028841] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.850242 2026] [core:error] [pid 1028675:tid 1028841] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.852609 2026] [core:error] [pid 1028675:tid 1028712] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.852622 2026] [core:error] [pid 1028675:tid 1028712] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.852761 2026] [core:error] [pid 1028675:tid 1028704] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.852770 2026] [core:error] [pid 1028675:tid 1028704] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.854872 2026] [core:error] [pid 1028675:tid 1028743] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.854888 2026] [core:error] [pid 1028675:tid 1028743] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.854988 2026] [core:error] [pid 1028675:tid 1028740] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.855000 2026] [core:error] [pid 1028675:tid 1028740] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.857299 2026] [core:error] [pid 1034096:tid 1034370] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.857311 2026] [core:error] [pid 1034096:tid 1034370] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.861763 2026] [core:error] [pid 1034096:tid 1034315] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.861792 2026] [core:error] [pid 1034096:tid 1034315] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.874467 2026] [security2:error] [pid 1034096:tid 1034260] [client 68.155.159.216:2043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/xmlrpc.php"] [unique_id "apK9ui04twRPFuquKD2ztwAAAI4"]
[Sat Aug 29 05:08:42.875715 2026] [security2:error] [pid 1028675:tid 1028884] [client 68.155.159.216:9240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK9utdHPfW2QFvhmL4K9QAAAEo"]
[Sat Aug 29 05:08:42.877302 2026] [security2:error] [pid 1028675:tid 1028849] [client 68.155.159.216:64495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-admin/images/about.php"] [unique_id "apK9utdHPfW2QFvhmL4K9gAAACc"]
[Sat Aug 29 05:08:42.890640 2026] [core:error] [pid 1028675:tid 1028820] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.890656 2026] [core:error] [pid 1028675:tid 1028820] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.890840 2026] [core:error] [pid 1034096:tid 1034277] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.890853 2026] [core:error] [pid 1034096:tid 1034277] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.892644 2026] [core:error] [pid 1028675:tid 1028788] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.892661 2026] [core:error] [pid 1028675:tid 1028788] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.892725 2026] [core:error] [pid 1028675:tid 1028725] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.892736 2026] [core:error] [pid 1028675:tid 1028725] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.893539 2026] [core:error] [pid 1028675:tid 1028879] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.893557 2026] [core:error] [pid 1028675:tid 1028879] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:42.911524 2026] [security2:error] [pid 1028675:tid 1028887] [client 158.23.184.117:23249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/.well-known/pki-validation/x.php"] [unique_id "apK9utdHPfW2QFvhmL4K-wAAAE0"]
[Sat Aug 29 05:08:42.915391 2026] [security2:error] [pid 1034096:tid 1034347] [client 45.148.10.62:59066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wxd.mej.mybluehost.me"] [uri "/.env.php.bak"] [unique_id "apK9ui04twRPFuquKD2zuwAAAOU"]
[Sat Aug 29 05:08:42.931263 2026] [security2:error] [pid 1034096:tid 1034359] [client 45.148.10.62:59090] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.wxk.tiz.mybluehost.me"] [uri "/.env.backup"] [unique_id "apK9ui04twRPFuquKD2zvQAAAPE"]
[Sat Aug 29 05:08:42.931312 2026] [security2:error] [pid 1028675:tid 1028928] [client 20.104.49.130:46540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/ws85.php"] [unique_id "apK9utdHPfW2QFvhmL4K_wAAAHY"]
[Sat Aug 29 05:08:42.931312 2026] [security2:error] [pid 1034096:tid 1034272] [client 45.148.10.62:59076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wxg.uhf.mybluehost.me"] [uri "/.env.php.bak"] [unique_id "apK9ui04twRPFuquKD2zvgAAAJo"]
[Sat Aug 29 05:08:42.934025 2026] [security2:error] [pid 1028675:tid 1028845] [client 158.23.147.79:17503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/wp-admin/dropdown.php"] [unique_id "apK9utdHPfW2QFvhmL4LAAAAACM"]
[Sat Aug 29 05:08:42.939139 2026] [security2:error] [pid 1034096:tid 1034357] [client 20.104.18.15:41959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9ui04twRPFuquKD2zvwAAAO8"]
[Sat Aug 29 05:08:42.943074 2026] [security2:error] [pid 1034096:tid 1034367] [client 158.158.54.35:31495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/s.php"] [unique_id "apK9ui04twRPFuquKD2zwAAAAPk"]
[Sat Aug 29 05:08:42.949809 2026] [security2:error] [pid 1028675:tid 1028860] [client 20.197.61.180:14427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/go.php"] [unique_id "apK9utdHPfW2QFvhmL4LAgAAADI"]
[Sat Aug 29 05:08:42.950817 2026] [security2:error] [pid 1028675:tid 1028814] [client 40.83.93.50:48028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/haiterus.php"] [unique_id "apK9utdHPfW2QFvhmL4LAwAAAAQ"]
[Sat Aug 29 05:08:42.974787 2026] [security2:error] [pid 1034096:tid 1034198] [remote 110.249.201.12:65374] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "wticalumni.com"] [uri "/robots.txt"] [unique_id "apK9ui04twRPFuquKD2zxgAA4kw"]
[Sat Aug 29 05:08:42.983105 2026] [security2:error] [pid 1034096:tid 1034259] [client 68.155.159.216:6091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/install.php"] [unique_id "apK9ui04twRPFuquKD2zxwAAAI0"]
[Sat Aug 29 05:08:43.010696 2026] [security2:error] [pid 1034096:tid 1034361] [client 4.205.62.107:51499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/public/mah.php.php"] [unique_id "apK9uy04twRPFuquKD2zzAAAAPM"]
[Sat Aug 29 05:08:43.011118 2026] [security2:error] [pid 1028675:tid 1028776] [remote 93.123.109.228:60774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/APP/.env"] [unique_id "apK9u9dHPfW2QFvhmL4LBQAAYl8"]
[Sat Aug 29 05:08:43.016200 2026] [security2:error] [pid 1028675:tid 1028770] [remote 93.123.109.228:60774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/BE/.env"] [unique_id "apK9u9dHPfW2QFvhmL4LBgAAJVk"]
[Sat Aug 29 05:08:43.016236 2026] [security2:error] [pid 1028675:tid 1028706] [remote 93.123.109.228:60774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/BACK/.env"] [unique_id "apK9u9dHPfW2QFvhmL4LBwAAJRk"]
[Sat Aug 29 05:08:43.016239 2026] [security2:error] [pid 1028675:tid 1028762] [remote 93.123.109.228:60774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/BACKEND/.env"] [unique_id "apK9u9dHPfW2QFvhmL4LCQAAJVE"]
[Sat Aug 29 05:08:43.016240 2026] [security2:error] [pid 1028675:tid 1028719] [remote 93.123.109.228:60774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/Backend/.env"] [unique_id "apK9u9dHPfW2QFvhmL4LCAAAJSY"]
[Sat Aug 29 05:08:43.016389 2026] [security2:error] [pid 1028675:tid 1028707] [remote 93.123.109.228:60774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/Be/.env"] [unique_id "apK9u9dHPfW2QFvhmL4LCgAAJRo"]
[Sat Aug 29 05:08:43.018007 2026] [security2:error] [pid 1028675:tid 1028773] [remote 93.123.109.228:60774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/Api/.env"] [unique_id "apK9u9dHPfW2QFvhmL4LDAAAJVw"]
[Sat Aug 29 05:08:43.020640 2026] [security2:error] [pid 1034096:tid 1034342] [client 31.77.204.227:52918] ModSecurity: Access denied with code 406 (phase 1). IPmatchFromFile: "31.77.204.227" matched at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1090"] [id "999022"] [msg "Blacklisted IP Address for POST data StopForumSpam List"] [hostname "utahtsa.org"] [uri "/wp-comments-post.php"] [unique_id "apK9uy04twRPFuquKD2z0AAAAOA"], referer: https://utahtsa.org/hello-world/
[Sat Aug 29 05:08:43.020735 2026] [security2:error] [pid 1034096:tid 1034342] [client 31.77.204.227:52918] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "406"] [hostname "utahtsa.org"] [uri "/wp-comments-post.php"] [unique_id "apK9uy04twRPFuquKD2z0AAAAOA"], referer: https://utahtsa.org/hello-world/
[Sat Aug 29 05:08:43.022781 2026] [core:error] [pid 1028675:tid 1028728] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.022799 2026] [core:error] [pid 1028675:tid 1028728] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.035341 2026] [security2:error] [pid 1034096:tid 1034356] [client 52.139.37.240:19302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/sagax.php"] [unique_id "apK9uy04twRPFuquKD2z1wAAAO4"]
[Sat Aug 29 05:08:43.047646 2026] [core:error] [pid 1028675:tid 1028848] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.047668 2026] [core:error] [pid 1028675:tid 1028848] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.047738 2026] [core:error] [pid 1028675:tid 1028862] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.047749 2026] [core:error] [pid 1028675:tid 1028862] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.047792 2026] [core:error] [pid 1034096:tid 1034306] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.047803 2026] [core:error] [pid 1034096:tid 1034306] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.056299 2026] [security2:error] [pid 1028675:tid 1028846] [client 158.23.184.117:23281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/.well-known/pki-validation/xmrlpc.php"] [unique_id "apK9u9dHPfW2QFvhmL4LGgAAACQ"]
[Sat Aug 29 05:08:43.057470 2026] [core:error] [pid 1028675:tid 1028876] [client 20.100.175.163:28263] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.057489 2026] [core:error] [pid 1028675:tid 1028876] [client 20.100.175.163:28263] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.057504 2026] [security2:error] [pid 1034096:tid 1034372] [client 20.104.49.130:58061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/images.php"] [unique_id "apK9uy04twRPFuquKD2z3QAAAP4"]
[Sat Aug 29 05:08:43.059001 2026] [cgid:error] [pid 1034096:tid 1034213] [remote 34.73.62.26:53612] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:43.064750 2026] [cgid:error] [pid 1034096:tid 1034208] [remote 34.73.62.26:53612] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:43.082849 2026] [core:error] [pid 1028675:tid 1028828] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.082869 2026] [core:error] [pid 1028675:tid 1028828] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.082874 2026] [core:error] [pid 1028675:tid 1028842] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.082883 2026] [core:error] [pid 1028675:tid 1028842] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.083470 2026] [core:error] [pid 1034096:tid 1034263] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.083486 2026] [core:error] [pid 1034096:tid 1034263] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.088094 2026] [security2:error] [pid 1034096:tid 1034294] [client 45.148.10.62:59090] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.wxk.tiz.mybluehost.me"] [uri "/.env.old"] [unique_id "apK9uy04twRPFuquKD2z5wAAALA"]
[Sat Aug 29 05:08:43.089845 2026] [core:error] [pid 1028675:tid 1028837] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.089874 2026] [core:error] [pid 1028675:tid 1028837] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.090590 2026] [core:error] [pid 1028675:tid 1028832] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.090603 2026] [core:error] [pid 1028675:tid 1028832] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.116236 2026] [security2:error] [pid 1028675:tid 1028844] [client 20.52.41.200:4568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/aa.php"] [unique_id "apK9u9dHPfW2QFvhmL4LIgAAACI"]
[Sat Aug 29 05:08:43.128755 2026] [security2:error] [pid 1034096:tid 1034287] [client 20.104.18.15:41956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9uy04twRPFuquKD2z6wAAAKk"]
[Sat Aug 29 05:08:43.131597 2026] [security2:error] [pid 1034096:tid 1034287] [client 4.205.62.107:6966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/public/bnn_.php.php"] [unique_id "apK9uy04twRPFuquKD2z7AAAAKk"]
[Sat Aug 29 05:08:43.132621 2026] [security2:error] [pid 1034096:tid 1034278] [client 20.240.128.207:24758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/theme.php"] [unique_id "apK9uy04twRPFuquKD2z7QAAAKA"]
[Sat Aug 29 05:08:43.145656 2026] [security2:error] [pid 1034096:tid 1034307] [client 68.155.159.216:1900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/simple.php"] [unique_id "apK9uy04twRPFuquKD2z7wAAAL0"]
[Sat Aug 29 05:08:43.163049 2026] [security2:error] [pid 1028675:tid 1028866] [client 20.63.219.114:10597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/bak.phps"] [unique_id "apK9u9dHPfW2QFvhmL4LJgAAADg"]
[Sat Aug 29 05:08:43.170322 2026] [security2:error] [pid 1034096:tid 1034218] [remote 93.123.109.228:60596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/wp-config.php"] [unique_id "apK9uy04twRPFuquKD2z8gAAlmA"]
[Sat Aug 29 05:08:43.173696 2026] [security2:error] [pid 1034096:tid 1034251] [client 4.205.62.107:24968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/asdf.php"] [unique_id "apK9uy04twRPFuquKD2z9AAAAIU"]
[Sat Aug 29 05:08:43.175089 2026] [security2:error] [pid 1034096:tid 1034327] [client 40.83.93.50:21589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-content/languages/chosen.php"] [unique_id "apK9uy04twRPFuquKD2z9QAAANE"]
[Sat Aug 29 05:08:43.176209 2026] [security2:error] [pid 1034096:tid 1034226] [remote 93.123.109.228:60596] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/wp-config.php.bak"] [unique_id "apK9uy04twRPFuquKD2z-AAAlmg"]
[Sat Aug 29 05:08:43.189558 2026] [security2:error] [pid 1034096:tid 1034225] [remote 93.123.109.228:60596] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/wp-config.php.new"] [unique_id "apK9uy04twRPFuquKD2z-gAAlmc"]
[Sat Aug 29 05:08:43.198329 2026] [core:error] [pid 1028675:tid 1028932] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.198349 2026] [core:error] [pid 1028675:tid 1028932] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.200279 2026] [core:error] [pid 1034096:tid 1034292] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.200301 2026] [core:error] [pid 1034096:tid 1034292] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.200863 2026] [core:error] [pid 1034096:tid 1034350] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.200889 2026] [core:error] [pid 1034096:tid 1034350] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.200991 2026] [core:error] [pid 1034096:tid 1034269] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.201003 2026] [core:error] [pid 1034096:tid 1034269] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.201989 2026] [security2:error] [pid 1028675:tid 1028824] [client 158.23.184.117:23295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/.well-known/security.php"] [unique_id "apK9u9dHPfW2QFvhmL4LNQAAAA4"]
[Sat Aug 29 05:08:43.202539 2026] [core:error] [pid 1034096:tid 1034271] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.202553 2026] [core:error] [pid 1034096:tid 1034271] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.203121 2026] [security2:error] [pid 1028675:tid 1028902] [client 40.83.93.50:12515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/haiterus.php"] [unique_id "apK9u9dHPfW2QFvhmL4LNgAAAFw"]
[Sat Aug 29 05:08:43.208855 2026] [security2:error] [pid 1034096:tid 1034201] [remote 93.123.109.228:60596] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/wp-config.php.old"] [unique_id "apK9uy04twRPFuquKD20AAAAlk8"]
[Sat Aug 29 05:08:43.212434 2026] [core:error] [pid 1028675:tid 1028885] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.212449 2026] [core:error] [pid 1028675:tid 1028885] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.213540 2026] [core:error] [pid 1034096:tid 1034373] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.213556 2026] [core:error] [pid 1034096:tid 1034373] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.216482 2026] [security2:error] [pid 1028675:tid 1028858] [client 20.151.200.44:63926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/fgd.php"] [unique_id "apK9u9dHPfW2QFvhmL4LOwAAADA"]
[Sat Aug 29 05:08:43.216841 2026] [core:error] [pid 1028675:tid 1028888] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.216853 2026] [core:error] [pid 1028675:tid 1028888] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.222917 2026] [security2:error] [pid 1028675:tid 1028815] [client 4.205.62.107:62748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/fraro.php"] [unique_id "apK9u9dHPfW2QFvhmL4LPAAAAAU"]
[Sat Aug 29 05:08:43.230241 2026] [security2:error] [pid 1034096:tid 1034324] [client 40.83.93.50:22830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-admin/security.php"] [unique_id "apK9uy04twRPFuquKD20AgAAAM4"]
[Sat Aug 29 05:08:43.234537 2026] [core:error] [pid 1034096:tid 1034274] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.234556 2026] [core:error] [pid 1034096:tid 1034274] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.242424 2026] [security2:error] [pid 1028675:tid 1028922] [client 74.248.24.12:5494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK9u9dHPfW2QFvhmL4LPQAAAHA"]
[Sat Aug 29 05:08:43.245392 2026] [core:error] [pid 1034096:tid 1034359] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.245410 2026] [core:error] [pid 1034096:tid 1034359] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.246629 2026] [core:error] [pid 1028675:tid 1028729] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.246644 2026] [core:error] [pid 1028675:tid 1028729] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.249279 2026] [core:error] [pid 1028675:tid 1028689] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.249300 2026] [core:error] [pid 1028675:tid 1028689] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.250024 2026] [core:error] [pid 1034096:tid 1034357] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.250039 2026] [core:error] [pid 1034096:tid 1034357] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.261777 2026] [security2:error] [pid 1028675:tid 1028821] [client 20.197.61.180:1082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/GOD.php"] [unique_id "apK9u9dHPfW2QFvhmL4LQgAAAAs"]
[Sat Aug 29 05:08:43.266945 2026] [core:error] [pid 1028675:tid 1028757] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.266967 2026] [core:error] [pid 1028675:tid 1028757] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.279385 2026] [core:error] [pid 1028675:tid 1028928] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.279407 2026] [core:error] [pid 1028675:tid 1028928] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.281092 2026] [security2:error] [pid 1034096:tid 1034339] [client 158.23.147.79:6100] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webmail.penmarketing.org"] [uri "/1.php"] [unique_id "apK9uy04twRPFuquKD20CgAAAN0"]
[Sat Aug 29 05:08:43.281231 2026] [security2:error] [pid 1034096:tid 1034339] [client 158.23.147.79:6100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/1.php"] [unique_id "apK9uy04twRPFuquKD20CgAAAN0"]
[Sat Aug 29 05:08:43.312917 2026] [security2:error] [pid 1034096:tid 1034252] [client 4.205.62.107:9017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/otuz1.php"] [unique_id "apK9uy04twRPFuquKD20EgAAAIY"]
[Sat Aug 29 05:08:43.319134 2026] [security2:error] [pid 1028675:tid 1028896] [client 158.23.147.79:59869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK9u9dHPfW2QFvhmL4LSgAAAFY"]
[Sat Aug 29 05:08:43.324875 2026] [cgid:error] [pid 1034096:tid 1034243] [remote 34.73.62.26:53612] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/strangew/public_html/404.shtml
[Sat Aug 29 05:08:43.329274 2026] [security2:error] [pid 1028675:tid 1028835] [client 52.139.37.240:19267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/wp-content/plugins/ftde.php"] [unique_id "apK9u9dHPfW2QFvhmL4LTAAAABk"]
[Sat Aug 29 05:08:43.337443 2026] [security2:error] [pid 1028675:tid 1028908] [client 20.104.18.15:15294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/nox.php"] [unique_id "apK9u9dHPfW2QFvhmL4LTgAAAGI"]
[Sat Aug 29 05:08:43.339884 2026] [security2:error] [pid 1034096:tid 1034312] [client 4.232.148.111:25235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/xmlrpc.php"] [unique_id "apK9uy04twRPFuquKD20DgAAAMI"]
[Sat Aug 29 05:08:43.353055 2026] [security2:error] [pid 1034096:tid 1034332] [client 20.104.18.15:19389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/htio.php"] [unique_id "apK9uy04twRPFuquKD20GAAAANY"]
[Sat Aug 29 05:08:43.356868 2026] [security2:error] [pid 1034096:tid 1034378] [client 158.23.184.117:22798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/.well-known/system.php"] [unique_id "apK9uy04twRPFuquKD20GQAAAQQ"]
[Sat Aug 29 05:08:43.360938 2026] [security2:error] [pid 1028675:tid 1028846] [client 158.23.147.79:6137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/lv.php"] [unique_id "apK9u9dHPfW2QFvhmL4LUgAAACQ"]
[Sat Aug 29 05:08:43.372734 2026] [security2:error] [pid 1028675:tid 1028736] [remote 93.123.109.228:60774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK9u9dHPfW2QFvhmL4LVwAAJjc"]
[Sat Aug 29 05:08:43.374401 2026] [proxy_http:error] [pid 1017536:tid 1017702] (70007)The timeout specified has expired: [client 127.0.0.1:15644] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:08:43.374425 2026] [proxy:error] [pid 1017536:tid 1017702] [client 127.0.0.1:15644] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:08:43.382622 2026] [security2:error] [pid 1028675:tid 1028878] [client 158.158.54.35:1834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/test1.php"] [unique_id "apK9u9dHPfW2QFvhmL4LXgAAAEQ"]
[Sat Aug 29 05:08:43.383762 2026] [security2:error] [pid 1034096:tid 1034275] [client 45.148.10.62:59104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wxe.rvy.mybluehost.me"] [uri "/.env.php"] [unique_id "apK9uy04twRPFuquKD20LQAAAJ0"]
[Sat Aug 29 05:08:43.386192 2026] [security2:error] [pid 1034096:tid 1034301] [client 20.104.18.15:41967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/adminfuns.php"] [unique_id "apK9uy04twRPFuquKD20LwAAALc"]
[Sat Aug 29 05:08:43.391616 2026] [security2:error] [pid 1034096:tid 1034370] [client 20.104.18.15:4935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/c4.php"] [unique_id "apK9uy04twRPFuquKD20NAAAAPw"]
[Sat Aug 29 05:08:43.392349 2026] [core:error] [pid 1034096:tid 1034275] [client 34.175.185.194:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.392382 2026] [core:error] [pid 1034096:tid 1034275] [client 34.175.185.194:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.392631 2026] [core:error] [pid 1034096:tid 1034291] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.392644 2026] [core:error] [pid 1034096:tid 1034291] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.394243 2026] [security2:error] [pid 1034096:tid 1034321] [client 20.104.18.15:12270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/htio.php"] [unique_id "apK9uy04twRPFuquKD20NgAAAMs"]
[Sat Aug 29 05:08:43.394503 2026] [security2:error] [pid 1034096:tid 1034289] [client 45.148.10.62:59090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wxk.tiz.mybluehost.me"] [uri "/.env.php.bak"] [unique_id "apK9uy04twRPFuquKD20NwAAAKs"]
[Sat Aug 29 05:08:43.400781 2026] [core:error] [pid 1034096:tid 1034292] [client 34.175.185.194:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.400804 2026] [core:error] [pid 1034096:tid 1034292] [client 34.175.185.194:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.401993 2026] [core:error] [pid 1028675:tid 1028925] [client 34.175.185.194:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.402015 2026] [core:error] [pid 1028675:tid 1028925] [client 34.175.185.194:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.402286 2026] [core:error] [pid 1034096:tid 1034280] [client 34.175.185.194:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.402300 2026] [core:error] [pid 1034096:tid 1034280] [client 34.175.185.194:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.403805 2026] [core:error] [pid 1034096:tid 1034269] [client 34.175.185.194:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.403822 2026] [core:error] [pid 1034096:tid 1034269] [client 34.175.185.194:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.404470 2026] [core:error] [pid 1034096:tid 1034304] [client 34.175.185.194:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.404484 2026] [core:error] [pid 1034096:tid 1034304] [client 34.175.185.194:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.406509 2026] [core:error] [pid 1034096:tid 1034353] [client 34.175.185.194:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.406528 2026] [core:error] [pid 1034096:tid 1034353] [client 34.175.185.194:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.406872 2026] [core:error] [pid 1028675:tid 1028897] [client 34.175.185.194:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.406895 2026] [core:error] [pid 1028675:tid 1028897] [client 34.175.185.194:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.407225 2026] [core:error] [pid 1034096:tid 1034328] [client 34.175.185.194:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.407237 2026] [core:error] [pid 1034096:tid 1034328] [client 34.175.185.194:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.409087 2026] [security2:error] [pid 1028675:tid 1028807] [remote 93.123.109.228:60774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/admin-app/.env"] [unique_id "apK9u9dHPfW2QFvhmL4LZQAAJn4"]
[Sat Aug 29 05:08:43.409974 2026] [security2:error] [pid 1028675:tid 1028816] [client 4.205.62.107:53183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/app.default.php"] [unique_id "apK9u9dHPfW2QFvhmL4LZwAAAAY"]
[Sat Aug 29 05:08:43.412405 2026] [core:error] [pid 1034096:tid 1034260] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.412422 2026] [core:error] [pid 1034096:tid 1034260] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.412510 2026] [security2:error] [pid 1034096:tid 1034304] [client 20.104.18.15:16838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/blacks.php"] [unique_id "apK9uy04twRPFuquKD20QQAAALo"]
[Sat Aug 29 05:08:43.412818 2026] [core:error] [pid 1028675:tid 1028901] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.412829 2026] [core:error] [pid 1028675:tid 1028901] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.413817 2026] [core:error] [pid 1028675:tid 1028847] [client 34.175.185.194:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.413838 2026] [core:error] [pid 1028675:tid 1028847] [client 34.175.185.194:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.415186 2026] [core:error] [pid 1028675:tid 1028927] [client 34.175.185.194:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.415200 2026] [core:error] [pid 1028675:tid 1028927] [client 34.175.185.194:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.415712 2026] [core:error] [pid 1034096:tid 1034273] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.415726 2026] [core:error] [pid 1034096:tid 1034273] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.416305 2026] [core:error] [pid 1034096:tid 1034300] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.416319 2026] [core:error] [pid 1034096:tid 1034300] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.416527 2026] [core:error] [pid 1034096:tid 1034369] [client 34.175.185.194:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.416543 2026] [core:error] [pid 1034096:tid 1034369] [client 34.175.185.194:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.426365 2026] [security2:error] [pid 1028675:tid 1028845] [client 40.83.93.50:11935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/go.php"] [unique_id "apK9u9dHPfW2QFvhmL4LbwAAACM"]
[Sat Aug 29 05:08:43.431909 2026] [security2:error] [pid 1034096:tid 1034362] [client 45.148.10.62:59120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wxg.uhf.mybluehost.me"] [uri "/.env.php"] [unique_id "apK9uy04twRPFuquKD20RwAAAPQ"]
[Sat Aug 29 05:08:43.434206 2026] [security2:error] [pid 1028675:tid 1028885] [client 20.104.18.15:43319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/media.php"] [unique_id "apK9u9dHPfW2QFvhmL4LcwAAAEs"]
[Sat Aug 29 05:08:43.435761 2026] [core:error] [pid 1028675:tid 1028713] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.435780 2026] [core:error] [pid 1028675:tid 1028713] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.436194 2026] [core:error] [pid 1034096:tid 1034323] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.436206 2026] [core:error] [pid 1034096:tid 1034323] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.438347 2026] [core:error] [pid 1028675:tid 1028726] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.438376 2026] [core:error] [pid 1028675:tid 1028726] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.439829 2026] [core:error] [pid 1028675:tid 1028823] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.439845 2026] [core:error] [pid 1028675:tid 1028823] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.447012 2026] [core:error] [pid 1028675:tid 1028857] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.447032 2026] [core:error] [pid 1028675:tid 1028857] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.447073 2026] [core:error] [pid 1034096:tid 1034263] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.447085 2026] [core:error] [pid 1034096:tid 1034263] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.451775 2026] [core:error] [pid 1034096:tid 1034303] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.451796 2026] [core:error] [pid 1034096:tid 1034303] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.454635 2026] [core:error] [pid 1034096:tid 1034318] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.454649 2026] [core:error] [pid 1034096:tid 1034318] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.471108 2026] [core:error] [pid 1028675:tid 1028880] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.471126 2026] [core:error] [pid 1028675:tid 1028880] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.479633 2026] [security2:error] [pid 1028675:tid 1028815] [client 68.155.159.216:33680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK9u9dHPfW2QFvhmL4LeQAAAAU"]
[Sat Aug 29 05:08:43.487024 2026] [security2:error] [pid 1028675:tid 1028922] [client 68.155.159.216:30684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/dropdown.php"] [unique_id "apK9u9dHPfW2QFvhmL4LfAAAAHA"]
[Sat Aug 29 05:08:43.489400 2026] [security2:error] [pid 1028675:tid 1028887] [client 20.104.18.15:15331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/akismet.php"] [unique_id "apK9u9dHPfW2QFvhmL4LfgAAAE0"]
[Sat Aug 29 05:08:43.491560 2026] [security2:error] [pid 1028675:tid 1028898] [client 93.123.109.228:48578] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK9u9dHPfW2QFvhmL4LgAAAAFg"]
[Sat Aug 29 05:08:43.492699 2026] [security2:error] [pid 1028675:tid 1028783] [remote 93.123.109.228:60660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/.wp-config.php.swp"] [unique_id "apK9u9dHPfW2QFvhmL4LgQAAC2Y"]
[Sat Aug 29 05:08:43.495320 2026] [security2:error] [pid 1028675:tid 1028856] [client 4.205.62.107:22290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/bootstrap.php"] [unique_id "apK9u9dHPfW2QFvhmL4LggAAAC4"]
[Sat Aug 29 05:08:43.498240 2026] [security2:error] [pid 1034096:tid 1034371] [client 197.219.150.206:50505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK9uy04twRPFuquKD20TQAAAP0"]
[Sat Aug 29 05:08:43.498399 2026] [security2:error] [pid 1034096:tid 1034371] [client 197.219.150.206:50505] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK9uy04twRPFuquKD20TQAAAP0"]
[Sat Aug 29 05:08:43.499583 2026] [security2:error] [pid 1028675:tid 1028849] [client 158.23.184.117:23237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/.well-known/users.php"] [unique_id "apK9u9dHPfW2QFvhmL4LgwAAACc"]
[Sat Aug 29 05:08:43.510338 2026] [security2:error] [pid 1034096:tid 1034376] [client 45.148.10.62:59136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wxd.mej.mybluehost.me"] [uri "/.env.php"] [unique_id "apK9uy04twRPFuquKD20TgAAAQI"]
[Sat Aug 29 05:08:43.510790 2026] [security2:error] [pid 1034096:tid 1034363] [client 20.151.200.44:63248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/inject.php"] [unique_id "apK9uy04twRPFuquKD20TwAAAPU"]
[Sat Aug 29 05:08:43.513074 2026] [security2:error] [pid 1028675:tid 1028904] [client 93.123.109.228:48632] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK9u9dHPfW2QFvhmL4LhQAAAF4"]
[Sat Aug 29 05:08:43.519952 2026] [security2:error] [pid 1028675:tid 1028909] [client 20.104.18.15:19363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/dev.php"] [unique_id "apK9u9dHPfW2QFvhmL4LhgAAAGM"]
[Sat Aug 29 05:08:43.526088 2026] [security2:error] [pid 1034096:tid 1034370] [client 52.139.37.240:18837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "apK9uy04twRPFuquKD20UAAAAPw"]
[Sat Aug 29 05:08:43.536153 2026] [security2:error] [pid 1028675:tid 1028851] [client 68.155.159.216:64030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK9u9dHPfW2QFvhmL4LjQAAACk"]
[Sat Aug 29 05:08:43.539507 2026] [core:error] [pid 1028675:tid 1028751] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.539522 2026] [core:error] [pid 1028675:tid 1028751] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.543246 2026] [security2:error] [pid 1034096:tid 1034253] [client 20.104.18.15:16856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/beck.php"] [unique_id "apK9uy04twRPFuquKD20UgAAAIc"]
[Sat Aug 29 05:08:43.543268 2026] [security2:error] [pid 1034096:tid 1034316] [client 20.100.175.163:26012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/a.php"] [unique_id "apK9uy04twRPFuquKD20UwAAAMY"]
[Sat Aug 29 05:08:43.544940 2026] [security2:error] [pid 1028675:tid 1028832] [client 20.104.18.15:39804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/w.php"] [unique_id "apK9u9dHPfW2QFvhmL4LkAAAABY"]
[Sat Aug 29 05:08:43.551823 2026] [security2:error] [pid 1034096:tid 1034314] [client 93.123.109.228:48666] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(\\\\/\\\\*\\\\!? ?(?:select|grant|delete|insert|drop|alter|replace|truncate|update|create|rename|describe|union|concat|group_concat))" at REQUEST_FILENAME. [file "/opt/mod_security/hg_rules.conf"] [line "1019"] [id "9000042"] [rev "2.2.2"] [msg "SQL Comment Sequence Detected."] [data "/*update"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/*update.cgi*"] [unique_id "apK9uy04twRPFuquKD20VAAAAMQ"]
[Sat Aug 29 05:08:43.558799 2026] [security2:error] [pid 1034096:tid 1034311] [client 20.52.41.200:5252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/c.php"] [unique_id "apK9uy04twRPFuquKD20VgAAAME"]
[Sat Aug 29 05:08:43.560052 2026] [core:error] [pid 1028675:tid 1028702] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.560074 2026] [core:error] [pid 1028675:tid 1028702] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.561537 2026] [security2:error] [pid 1028675:tid 1028872] [client 20.104.18.15:12196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/dev.php"] [unique_id "apK9u9dHPfW2QFvhmL4LkgAAAD4"]
[Sat Aug 29 05:08:43.562093 2026] [security2:error] [pid 1028675:tid 1028742] [remote 93.123.109.228:60774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/admin/phpinfo.php"] [unique_id "apK9u9dHPfW2QFvhmL4LlAAAAz0"]
[Sat Aug 29 05:08:43.566450 2026] [core:error] [pid 1028675:tid 1028766] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.566468 2026] [core:error] [pid 1028675:tid 1028766] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.574606 2026] [core:error] [pid 1028675:tid 1028746] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.574623 2026] [core:error] [pid 1028675:tid 1028746] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.575107 2026] [security2:error] [pid 1034096:tid 1034337] [client 20.63.219.114:10482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/install.php"] [unique_id "apK9uy04twRPFuquKD20WAAAANs"]
[Sat Aug 29 05:08:43.575516 2026] [core:error] [pid 1028675:tid 1028718] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.575531 2026] [core:error] [pid 1028675:tid 1028718] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.581954 2026] [security2:error] [pid 1034096:tid 1034320] [client 20.104.18.15:43275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/adminfuns.php"] [unique_id "apK9uy04twRPFuquKD20WQAAAMo"]
[Sat Aug 29 05:08:43.584114 2026] [security2:error] [pid 1028675:tid 1028697] [remote 93.123.109.228:60774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/admin_phpinfo.php"] [unique_id "apK9u9dHPfW2QFvhmL4LmgAAAxE"]
[Sat Aug 29 05:08:43.589432 2026] [security2:error] [pid 1034096:tid 1034353] [client 20.104.18.15:5044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/rxr.php"] [unique_id "apK9uy04twRPFuquKD20WwAAAOs"]
[Sat Aug 29 05:08:43.599271 2026] [security2:error] [pid 1028675:tid 1028774] [remote 93.123.109.228:60774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/administrator/.env"] [unique_id "apK9u9dHPfW2QFvhmL4LnAAAA10"]
[Sat Aug 29 05:08:43.600299 2026] [core:error] [pid 1028675:tid 1028705] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.600317 2026] [core:error] [pid 1028675:tid 1028705] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.600620 2026] [core:error] [pid 1034096:tid 1034355] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.600634 2026] [core:error] [pid 1034096:tid 1034355] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.603107 2026] [security2:error] [pid 1028675:tid 1028750] [remote 93.123.109.228:60774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/api-node/.env"] [unique_id "apK9u9dHPfW2QFvhmL4LnwAAA0U"]
[Sat Aug 29 05:08:43.603113 2026] [security2:error] [pid 1028675:tid 1028785] [remote 93.123.109.228:60774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/api-backend/.env"] [unique_id "apK9u9dHPfW2QFvhmL4LnQAAA2g"]
[Sat Aug 29 05:08:43.608948 2026] [security2:error] [pid 1028675:tid 1028758] [remote 93.123.109.228:60774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/api/.env"] [unique_id "apK9u9dHPfW2QFvhmL4LoAAAA00"]
[Sat Aug 29 05:08:43.620680 2026] [security2:error] [pid 1028675:tid 1028870] [client 171.61.160.196:5976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.160.61.171.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK9u9dHPfW2QFvhmL4LpAAAADw"]
[Sat Aug 29 05:08:43.620771 2026] [security2:error] [pid 1028675:tid 1028870] [client 171.61.160.196:5976] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK9u9dHPfW2QFvhmL4LpAAAADw"]
[Sat Aug 29 05:08:43.626701 2026] [core:error] [pid 1028675:tid 1028799] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.626714 2026] [core:error] [pid 1028675:tid 1028799] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.628840 2026] [security2:error] [pid 1034096:tid 1034297] [client 20.240.128.207:21033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/classwithtostring.php"] [unique_id "apK9uy04twRPFuquKD20YAAAALM"]
[Sat Aug 29 05:08:43.641120 2026] [core:error] [pid 1034096:tid 1034342] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.641138 2026] [core:error] [pid 1034096:tid 1034342] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.647879 2026] [security2:error] [pid 1034096:tid 1034347] [client 158.23.184.117:23141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/.well-known/wp-blog-header.php"] [unique_id "apK9uy04twRPFuquKD20YgAAAOU"]
[Sat Aug 29 05:08:43.649702 2026] [core:error] [pid 1028675:tid 1028927] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.649718 2026] [core:error] [pid 1028675:tid 1028927] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.660030 2026] [security2:error] [pid 1028675:tid 1028881] [client 93.123.109.228:48714] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/.env"] [unique_id "apK9u9dHPfW2QFvhmL4LsAAAAEc"]
[Sat Aug 29 05:08:43.661020 2026] [security2:error] [pid 1028675:tid 1028857] [client 93.123.109.228:48632] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/laravel/app/.env"] [unique_id "apK9u9dHPfW2QFvhmL4LsQAAAC8"]
[Sat Aug 29 05:08:43.661493 2026] [security2:error] [pid 1028675:tid 1028884] [client 20.104.18.15:15358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/ajax.php"] [unique_id "apK9u9dHPfW2QFvhmL4LsgAAAEo"]
[Sat Aug 29 05:08:43.672087 2026] [security2:error] [pid 1034096:tid 1034322] [client 20.104.18.15:41938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/goods.php"] [unique_id "apK9uy04twRPFuquKD20ZAAAAMw"]
[Sat Aug 29 05:08:43.674065 2026] [security2:error] [pid 1028675:tid 1028937] [client 40.83.93.50:21297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-content/languages/index.php"] [unique_id "apK9u9dHPfW2QFvhmL4LtQAAAH8"]
[Sat Aug 29 05:08:43.675413 2026] [security2:error] [pid 1028675:tid 1028839] [client 20.104.18.15:39896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/ccc.php"] [unique_id "apK9u9dHPfW2QFvhmL4LtgAAAB0"]
[Sat Aug 29 05:08:43.676718 2026] [security2:error] [pid 1034096:tid 1034360] [client 20.104.18.15:16844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/t3.php"] [unique_id "apK9uy04twRPFuquKD20ZwAAAPI"]
[Sat Aug 29 05:08:43.683129 2026] [security2:error] [pid 1034096:tid 1034352] [client 20.104.18.15:18942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/gos.php"] [unique_id "apK9uy04twRPFuquKD20awAAAOo"]
[Sat Aug 29 05:08:43.691482 2026] [security2:error] [pid 1034096:tid 1034322] [client 158.23.147.79:49926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-includes/plugins.php"] [unique_id "apK9uy04twRPFuquKD20cAAAAMw"]
[Sat Aug 29 05:08:43.698066 2026] [core:error] [pid 1028675:tid 1028721] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.698808 2026] [core:error] [pid 1028675:tid 1028721] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.703895 2026] [security2:error] [pid 1034096:tid 1034368] [client 93.123.109.228:48666] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK9uy04twRPFuquKD20cgAAAPo"]
[Sat Aug 29 05:08:43.712963 2026] [security2:error] [pid 1034096:tid 1034267] [client 40.83.93.50:20844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK9uy04twRPFuquKD20cwAAAJU"]
[Sat Aug 29 05:08:43.714376 2026] [security2:error] [pid 1028675:tid 1028856] [client 20.104.18.15:43983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/classwithtostring.php"] [unique_id "apK9u9dHPfW2QFvhmL4LvgAAAC4"]
[Sat Aug 29 05:08:43.716584 2026] [security2:error] [pid 1028675:tid 1028863] [client 40.83.93.50:12498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/go.php"] [unique_id "apK9u9dHPfW2QFvhmL4LwAAAADU"]
[Sat Aug 29 05:08:43.718891 2026] [core:error] [pid 1028675:tid 1028790] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.718915 2026] [core:error] [pid 1028675:tid 1028790] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.720708 2026] [core:error] [pid 1028675:tid 1028680] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.720722 2026] [core:error] [pid 1028675:tid 1028769] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.720726 2026] [core:error] [pid 1028675:tid 1028680] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.720727 2026] [core:error] [pid 1028675:tid 1028769] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.725304 2026] [core:error] [pid 1028675:tid 1028738] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.725322 2026] [core:error] [pid 1028675:tid 1028738] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.727027 2026] [security2:error] [pid 1028675:tid 1028849] [client 93.123.109.228:48652] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/.env.backup"] [unique_id "apK9u9dHPfW2QFvhmL4LxgAAACc"]
[Sat Aug 29 05:08:43.736557 2026] [security2:error] [pid 1034096:tid 1034303] [client 93.123.109.228:48682] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/.env.bak"] [unique_id "apK9uy04twRPFuquKD20dAAAALk"]
[Sat Aug 29 05:08:43.738720 2026] [security2:error] [pid 1034096:tid 1034332] [client 20.104.18.15:4878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.enveso.com"] [uri "/reviall.php"] [unique_id "apK9uy04twRPFuquKD20dQAAANY"]
[Sat Aug 29 05:08:43.754479 2026] [security2:error] [pid 1034096:tid 1034377] [client 68.155.159.216:14221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/file88.php"] [unique_id "apK9uy04twRPFuquKD20dgAAAQM"]
[Sat Aug 29 05:08:43.759250 2026] [security2:error] [pid 1034096:tid 1034307] [client 68.155.159.216:49251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK9uy04twRPFuquKD20dwAAAL0"]
[Sat Aug 29 05:08:43.770671 2026] [security2:error] [pid 1028675:tid 1028866] [client 74.248.24.12:5706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-mail.php"] [unique_id "apK9u9dHPfW2QFvhmL4LygAAADg"]
[Sat Aug 29 05:08:43.773559 2026] [security2:error] [pid 1034096:tid 1034296] [client 20.104.18.15:12230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/gos.php"] [unique_id "apK9uy04twRPFuquKD20eQAAALI"]
[Sat Aug 29 05:08:43.776439 2026] [core:error] [pid 1034096:tid 1034378] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.776459 2026] [core:error] [pid 1034096:tid 1034378] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.794722 2026] [security2:error] [pid 1028675:tid 1028775] [remote 93.123.109.228:60774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/api/info.php"] [unique_id "apK9u9dHPfW2QFvhmL4LzwAAdl4"]
[Sat Aug 29 05:08:43.797495 2026] [security2:error] [pid 1028675:tid 1028732] [remote 93.123.109.228:60774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/api/phpinfo.php"] [unique_id "apK9u9dHPfW2QFvhmL4L0AAAdjM"]
[Sat Aug 29 05:08:43.798176 2026] [security2:error] [pid 1028675:tid 1028878] [client 158.23.147.79:17493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK9u9dHPfW2QFvhmL4L0QAAAEQ"]
[Sat Aug 29 05:08:43.798379 2026] [security2:error] [pid 1034096:tid 1034318] [client 158.23.184.117:23127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/.well-known/wp-links-opml.php"] [unique_id "apK9uy04twRPFuquKD20ewAAAMg"]
[Sat Aug 29 05:08:43.800910 2026] [core:error] [pid 1028675:tid 1028800] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.800929 2026] [core:error] [pid 1028675:tid 1028800] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.802202 2026] [core:error] [pid 1028675:tid 1028745] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.802218 2026] [core:error] [pid 1028675:tid 1028745] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.803738 2026] [core:error] [pid 1028675:tid 1028828] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.803751 2026] [core:error] [pid 1028675:tid 1028828] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.806216 2026] [security2:error] [pid 1028675:tid 1028926] [client 20.104.18.15:16774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/wp.php"] [unique_id "apK9u9dHPfW2QFvhmL4L1AAAAHQ"]
[Sat Aug 29 05:08:43.808759 2026] [security2:error] [pid 1034096:tid 1034304] [client 20.197.61.180:14426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/gecko-new.php"] [unique_id "apK9uy04twRPFuquKD20fAAAALo"]
[Sat Aug 29 05:08:43.814227 2026] [core:error] [pid 1028675:tid 1028780] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.814242 2026] [core:error] [pid 1028675:tid 1028780] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.817853 2026] [security2:error] [pid 1034096:tid 1034321] [client 20.104.18.15:15334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/atomlib.php"] [unique_id "apK9uy04twRPFuquKD20fQAAAMs"]
[Sat Aug 29 05:08:43.818468 2026] [security2:error] [pid 1028675:tid 1028858] [client 4.232.148.111:25253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/filemanager.php"] [unique_id "apK9u9dHPfW2QFvhmL4L4AAAADA"]
[Sat Aug 29 05:08:43.818661 2026] [core:error] [pid 1028675:tid 1028720] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.818673 2026] [core:error] [pid 1028675:tid 1028720] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.819233 2026] [security2:error] [pid 1028675:tid 1028908] [client 52.139.37.240:19380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/z.php"] [unique_id "apK9u9dHPfW2QFvhmL4L4gAAAGI"]
[Sat Aug 29 05:08:43.819261 2026] [security2:error] [pid 1028675:tid 1028880] [client 158.158.54.35:31663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/ws.php"] [unique_id "apK9u9dHPfW2QFvhmL4L4QAAAEY"]
[Sat Aug 29 05:08:43.819371 2026] [core:error] [pid 1028675:tid 1028711] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.819384 2026] [core:error] [pid 1028675:tid 1028711] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.819633 2026] [core:error] [pid 1028675:tid 1028781] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.819641 2026] [core:error] [pid 1028675:tid 1028781] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.825376 2026] [security2:error] [pid 1028675:tid 1028867] [client 20.104.18.15:39900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/file15.php"] [unique_id "apK9u9dHPfW2QFvhmL4L4wAAADk"]
[Sat Aug 29 05:08:43.838818 2026] [security2:error] [pid 1034096:tid 1034371] [client 20.104.18.15:19361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/132.php"] [unique_id "apK9uy04twRPFuquKD20fwAAAP0"]
[Sat Aug 29 05:08:43.840940 2026] [core:error] [pid 1034096:tid 1034283] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.840958 2026] [core:error] [pid 1034096:tid 1034283] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.844987 2026] [security2:error] [pid 1034096:tid 1034376] [client 68.155.159.216:63820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/content.php"] [unique_id "apK9uy04twRPFuquKD20gQAAAQI"]
[Sat Aug 29 05:08:43.849250 2026] [security2:error] [pid 1034096:tid 1034324] [client 20.151.200.44:63872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/mga.php"] [unique_id "apK9uy04twRPFuquKD20ggAAAM4"]
[Sat Aug 29 05:08:43.872002 2026] [security2:error] [pid 1028675:tid 1028883] [client 20.104.18.15:46032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/goods.php"] [unique_id "apK9u9dHPfW2QFvhmL4L6wAAAEk"]
[Sat Aug 29 05:08:43.877018 2026] [security2:error] [pid 1028675:tid 1028884] [client 93.123.109.228:48652] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/.env.old"] [unique_id "apK9u9dHPfW2QFvhmL4L7wAAAEo"]
[Sat Aug 29 05:08:43.882236 2026] [core:error] [pid 1028675:tid 1028847] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.882253 2026] [core:error] [pid 1028675:tid 1028847] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.884552 2026] [security2:error] [pid 1034096:tid 1034265] [client 20.104.18.15:41978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/100.php"] [unique_id "apK9uy04twRPFuquKD20hQAAAJM"]
[Sat Aug 29 05:08:43.909047 2026] [security2:error] [pid 1028675:tid 1028814] [client 40.83.93.50:18908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/gecko-new.php"] [unique_id "apK9u9dHPfW2QFvhmL4L9QAAAAQ"]
[Sat Aug 29 05:08:43.914554 2026] [security2:error] [pid 1034096:tid 1034357] [client 93.123.109.228:48682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/.env.php"] [unique_id "apK9uy04twRPFuquKD20igAAAO8"]
[Sat Aug 29 05:08:43.916318 2026] [core:error] [pid 1034096:tid 1034314] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.916340 2026] [core:error] [pid 1034096:tid 1034314] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.932444 2026] [security2:error] [pid 1034096:tid 1034337] [client 20.104.18.15:43979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK9uy04twRPFuquKD20iwAAANs"]
[Sat Aug 29 05:08:43.938389 2026] [security2:error] [pid 1034096:tid 1034361] [client 87.219.197.128:50933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK9uy04twRPFuquKD20jQAAAPM"]
[Sat Aug 29 05:08:43.938534 2026] [security2:error] [pid 1034096:tid 1034361] [client 87.219.197.128:50933] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK9uy04twRPFuquKD20jQAAAPM"]
[Sat Aug 29 05:08:43.938668 2026] [security2:error] [pid 1034096:tid 1034286] [client 20.104.18.15:16781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/abcd.php"] [unique_id "apK9uy04twRPFuquKD20jAAAAKg"]
[Sat Aug 29 05:08:43.940389 2026] [core:error] [pid 1028675:tid 1028861] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.940416 2026] [core:error] [pid 1028675:tid 1028861] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.941958 2026] [core:error] [pid 1028675:tid 1028855] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.941977 2026] [core:error] [pid 1028675:tid 1028855] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.944746 2026] [security2:error] [pid 1028675:tid 1028848] [client 158.23.184.117:22827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/.well-known/wp-load.php"] [unique_id "apK9u9dHPfW2QFvhmL4L-wAAACY"]
[Sat Aug 29 05:08:43.945825 2026] [core:error] [pid 1028675:tid 1028845] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.945843 2026] [core:error] [pid 1028675:tid 1028845] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.946044 2026] [security2:error] [pid 1028675:tid 1028872] [client 20.63.219.114:10472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/colour.php"] [unique_id "apK9u9dHPfW2QFvhmL4L_wAAAD4"]
[Sat Aug 29 05:08:43.954898 2026] [security2:error] [pid 1028675:tid 1028916] [client 45.148.10.62:40042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wxk.tiz.mybluehost.me"] [uri "/.env.php"] [unique_id "apK9u9dHPfW2QFvhmL4MBQAAAGo"]
[Sat Aug 29 05:08:43.955433 2026] [security2:error] [pid 1028675:tid 1028704] [remote 93.123.109.228:60774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/apis/.env"] [unique_id "apK9u9dHPfW2QFvhmL4MBAAAPBc"]
[Sat Aug 29 05:08:43.956449 2026] [security2:error] [pid 1034096:tid 1034273] [client 68.155.159.216:24437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-admin/network/index.php"] [unique_id "apK9uy04twRPFuquKD20kQAAAJs"]
[Sat Aug 29 05:08:43.957186 2026] [security2:error] [pid 1034096:tid 1034294] [client 20.104.18.15:15293] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/1.php"] [unique_id "apK9uy04twRPFuquKD20kgAAALA"]
[Sat Aug 29 05:08:43.957254 2026] [security2:error] [pid 1034096:tid 1034294] [client 20.104.18.15:15293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/1.php"] [unique_id "apK9uy04twRPFuquKD20kgAAALA"]
[Sat Aug 29 05:08:43.964077 2026] [security2:error] [pid 1028675:tid 1028851] [client 20.104.18.15:39818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/jp.php"] [unique_id "apK9u9dHPfW2QFvhmL4MCQAAACk"]
[Sat Aug 29 05:08:43.965431 2026] [core:error] [pid 1028675:tid 1028743] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.965447 2026] [core:error] [pid 1028675:tid 1028743] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.966142 2026] [security2:error] [pid 1028675:tid 1028820] [client 52.139.37.240:12530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/ahax.php"] [unique_id "apK9u9dHPfW2QFvhmL4MCgAAAAo"]
[Sat Aug 29 05:08:43.971794 2026] [core:error] [pid 1034096:tid 1034342] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.971817 2026] [core:error] [pid 1034096:tid 1034342] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.971879 2026] [core:error] [pid 1028675:tid 1028740] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.971891 2026] [core:error] [pid 1028675:tid 1028740] [remote 93.123.109.228:60774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.979335 2026] [security2:error] [pid 1028675:tid 1028828] [client 68.155.159.216:2001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/atomlib.php"] [unique_id "apK9u9dHPfW2QFvhmL4MFQAAABI"]
[Sat Aug 29 05:08:43.982063 2026] [core:error] [pid 1028675:tid 1028896] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.982081 2026] [core:error] [pid 1028675:tid 1028896] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:43.992904 2026] [security2:error] [pid 1028675:tid 1028859] [client 20.197.61.180:14437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/ggfi.php"] [unique_id "apK9u9dHPfW2QFvhmL4MGAAAADE"]
[Sat Aug 29 05:08:43.993892 2026] [security2:error] [pid 1028675:tid 1028846] [client 93.123.109.228:48714] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/.env.swp"] [unique_id "apK9u9dHPfW2QFvhmL4MFwAAACQ"]
[Sat Aug 29 05:08:43.999496 2026] [security2:error] [pid 1028675:tid 1028908] [client 20.104.18.15:19382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/v22.php"] [unique_id "apK9u9dHPfW2QFvhmL4MGQAAAGI"]
[Sat Aug 29 05:08:44.008792 2026] [security2:error] [pid 1028675:tid 1028867] [client 20.104.18.15:45960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/100.php"] [unique_id "apK9vNdHPfW2QFvhmL4MGwAAADk"]
[Sat Aug 29 05:08:44.012315 2026] [security2:error] [pid 1028675:tid 1028825] [client 20.52.41.200:4579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/f.php"] [unique_id "apK9vNdHPfW2QFvhmL4MHAAAAA8"]
[Sat Aug 29 05:08:44.019539 2026] [security2:error] [pid 1034096:tid 1034367] [client 52.139.37.240:19358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/f35.php"] [unique_id "apK9vC04twRPFuquKD20lwAAAPk"]
[Sat Aug 29 05:08:44.019598 2026] [security2:error] [pid 1028675:tid 1028901] [client 158.23.147.79:11332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK9vNdHPfW2QFvhmL4MHgAAAFs"]
[Sat Aug 29 05:08:44.021120 2026] [security2:error] [pid 1034096:tid 1034272] [client 93.123.109.228:48666] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/.env~"] [unique_id "apK9vC04twRPFuquKD20mQAAAJo"]
[Sat Aug 29 05:08:44.022515 2026] [security2:error] [pid 1028675:tid 1028897] [client 57.141.14.68:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/cart/"] [unique_id "apK9vNdHPfW2QFvhmL4MIAAAAFc"]
[Sat Aug 29 05:08:44.028144 2026] [security2:error] [pid 1028675:tid 1028923] [client 20.104.18.15:12110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/132.php"] [unique_id "apK9vNdHPfW2QFvhmL4MIwAAAHE"]
[Sat Aug 29 05:08:44.030256 2026] [core:error] [pid 1028675:tid 1028928] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.030274 2026] [core:error] [pid 1028675:tid 1028928] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.032165 2026] [security2:error] [pid 1028675:tid 1028904] [client 20.104.49.130:54814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/wp-the.php"] [unique_id "apK9vNdHPfW2QFvhmL4MJAAAAF4"]
[Sat Aug 29 05:08:44.032802 2026] [security2:error] [pid 1028675:tid 1028883] [client 68.155.159.216:64437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK9vNdHPfW2QFvhmL4MJQAAAEk"]
[Sat Aug 29 05:08:44.038056 2026] [core:error] [pid 1028675:tid 1028843] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.038076 2026] [core:error] [pid 1028675:tid 1028843] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.046233 2026] [core:error] [pid 1034096:tid 1034347] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.046254 2026] [core:error] [pid 1034096:tid 1034347] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.047289 2026] [core:error] [pid 1028675:tid 1028900] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.047307 2026] [core:error] [pid 1028675:tid 1028900] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.050115 2026] [core:error] [pid 1028675:tid 1028839] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.050130 2026] [core:error] [pid 1028675:tid 1028839] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.056727 2026] [security2:error] [pid 1028675:tid 1028927] [client 20.100.175.163:26016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/u.php"] [unique_id "apK9vNdHPfW2QFvhmL4MLAAAAHU"]
[Sat Aug 29 05:08:44.077699 2026] [security2:error] [pid 1028675:tid 1028733] [remote 93.123.109.228:60774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/app/.env"] [unique_id "apK9vNdHPfW2QFvhmL4MLgAALTQ"]
[Sat Aug 29 05:08:44.080459 2026] [security2:error] [pid 1028675:tid 1028848] [client 20.104.18.15:16847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/nofile.php"] [unique_id "apK9vNdHPfW2QFvhmL4MLwAAACY"]
[Sat Aug 29 05:08:44.088690 2026] [security2:error] [pid 1034096:tid 1034266] [client 20.104.18.15:15242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/samll.php"] [unique_id "apK9vC04twRPFuquKD20nwAAAJQ"]
[Sat Aug 29 05:08:44.092212 2026] [security2:error] [pid 1034096:tid 1034352] [client 158.23.184.117:23104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/.well-known/wp-mail.php"] [unique_id "apK9vC04twRPFuquKD20oAAAAOo"]
[Sat Aug 29 05:08:44.094754 2026] [security2:error] [pid 1034096:tid 1034352] [client 20.104.18.15:39921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/f35.php"] [unique_id "apK9vC04twRPFuquKD20oQAAAOo"]
[Sat Aug 29 05:08:44.115332 2026] [core:error] [pid 1034096:tid 1034282] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.115364 2026] [core:error] [pid 1034096:tid 1034282] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.125229 2026] [security2:error] [pid 1034096:tid 1034297] [client 20.240.128.207:22086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/news.php"] [unique_id "apK9vC04twRPFuquKD20pQAAALM"]
[Sat Aug 29 05:08:44.134238 2026] [security2:error] [pid 1028675:tid 1028833] [client 158.23.147.79:17559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/login.php"] [unique_id "apK9vNdHPfW2QFvhmL4MPwAAABc"]
[Sat Aug 29 05:08:44.134384 2026] [core:error] [pid 1034096:tid 1034308] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.134401 2026] [core:error] [pid 1034096:tid 1034308] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.136442 2026] [core:error] [pid 1034096:tid 1034378] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.136457 2026] [core:error] [pid 1034096:tid 1034378] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.137798 2026] [security2:error] [pid 1034096:tid 1034362] [client 20.104.18.15:18899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/wp-activate.php"] [unique_id "apK9vC04twRPFuquKD20qgAAAPQ"]
[Sat Aug 29 05:08:44.138741 2026] [core:error] [pid 1034096:tid 1034252] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.138756 2026] [core:error] [pid 1034096:tid 1034252] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.141683 2026] [core:error] [pid 1034096:tid 1034310] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.141696 2026] [core:error] [pid 1034096:tid 1034310] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.143178 2026] [core:error] [pid 1034096:tid 1034325] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.143230 2026] [core:error] [pid 1034096:tid 1034325] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.143936 2026] [security2:error] [pid 1034096:tid 1034268] [client 20.104.18.15:46066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9vC04twRPFuquKD20rQAAAJY"]
[Sat Aug 29 05:08:44.146408 2026] [core:error] [pid 1034096:tid 1034271] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.146430 2026] [core:error] [pid 1034096:tid 1034271] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.146861 2026] [security2:error] [pid 1028675:tid 1028841] [client 40.83.93.50:21292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-content/languages/min.php"] [unique_id "apK9vNdHPfW2QFvhmL4MQAAAAB8"]
[Sat Aug 29 05:08:44.150431 2026] [security2:error] [pid 1034096:tid 1034283] [client 20.104.18.15:43987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/5PJcpMFsD8B.php"] [unique_id "apK9vC04twRPFuquKD20rgAAAKU"]
[Sat Aug 29 05:08:44.161231 2026] [security2:error] [pid 1034096:tid 1034376] [client 20.104.18.15:12255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/v22.php"] [unique_id "apK9vC04twRPFuquKD20rwAAAQI"]
[Sat Aug 29 05:08:44.163090 2026] [security2:error] [pid 1028675:tid 1028903] [client 52.139.37.240:12897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/breads1.php"] [unique_id "apK9vNdHPfW2QFvhmL4MQQAAAF0"]
[Sat Aug 29 05:08:44.171091 2026] [security2:error] [pid 1034096:tid 1034317] [client 20.104.18.15:46041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/about.php"] [unique_id "apK9vC04twRPFuquKD20sQAAAMc"]
[Sat Aug 29 05:08:44.172639 2026] [security2:error] [pid 1034096:tid 1034269] [client 93.123.109.228:48666] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config~"] [unique_id "apK9vC04twRPFuquKD20sAAAAJc"]
[Sat Aug 29 05:08:44.173340 2026] [security2:error] [pid 1034096:tid 1034253] [client 4.205.62.107:58398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/linusadmin-phpinfo.php"] [unique_id "apK9vC04twRPFuquKD20sgAAAIc"]
[Sat Aug 29 05:08:44.201078 2026] [security2:error] [pid 1028675:tid 1028811] [client 40.83.93.50:12935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-admin/system.php"] [unique_id "apK9vNdHPfW2QFvhmL4MQgAAAAE"]
[Sat Aug 29 05:08:44.207715 2026] [security2:error] [pid 1034096:tid 1034320] [client 91.92.47.191:58880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "corrigansbasement.rocworx.com"] [uri "/configuration.php"] [unique_id "apK9vC04twRPFuquKD20tAAAAMo"]
[Sat Aug 29 05:08:44.213346 2026] [security2:error] [pid 1034096:tid 1034351] [client 20.104.18.15:16873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/run.php"] [unique_id "apK9vC04twRPFuquKD20tQAAAOk"]
[Sat Aug 29 05:08:44.218129 2026] [security2:error] [pid 1034096:tid 1034363] [client 52.139.37.240:19391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/file61.php"] [unique_id "apK9vC04twRPFuquKD20tgAAAPU"]
[Sat Aug 29 05:08:44.219450 2026] [security2:error] [pid 1034096:tid 1034260] [client 20.104.18.15:15332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/she11.php"] [unique_id "apK9vC04twRPFuquKD20twAAAI4"]
[Sat Aug 29 05:08:44.231572 2026] [security2:error] [pid 1028675:tid 1028863] [client 40.83.93.50:13516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/gecko-new.php"] [unique_id "apK9vNdHPfW2QFvhmL4MQwAAADU"]
[Sat Aug 29 05:08:44.236340 2026] [security2:error] [pid 1034096:tid 1034356] [client 20.104.18.15:39875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/shiny.php"] [unique_id "apK9vC04twRPFuquKD20uQAAAO4"]
[Sat Aug 29 05:08:44.238112 2026] [security2:error] [pid 1034096:tid 1034316] [client 158.23.184.117:23116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/.well-known/wp-settings.php"] [unique_id "apK9vC04twRPFuquKD20ugAAAMY"]
[Sat Aug 29 05:08:44.250670 2026] [security2:error] [pid 1034096:tid 1034339] [client 158.158.54.35:36929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-themes.php"] [unique_id "apK9vC04twRPFuquKD20uwAAAN0"]
[Sat Aug 29 05:08:44.268556 2026] [security2:error] [pid 1034096:tid 1034355] [client 20.104.18.15:41924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/about.php"] [unique_id "apK9vC04twRPFuquKD20vAAAAO0"]
[Sat Aug 29 05:08:44.277569 2026] [security2:error] [pid 1034096:tid 1034278] [client 4.205.62.107:6949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/wsws.php"] [unique_id "apK9vC04twRPFuquKD20vQAAAKA"]
[Sat Aug 29 05:08:44.280489 2026] [security2:error] [pid 1034096:tid 1034340] [client 74.248.24.12:22875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-content.php"] [unique_id "apK9vC04twRPFuquKD20vgAAAN4"]
[Sat Aug 29 05:08:44.284254 2026] [security2:error] [pid 1034096:tid 1034332] [client 93.123.109.228:48724] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.bak"] [unique_id "apK9vC04twRPFuquKD20vwAAANY"]
[Sat Aug 29 05:08:44.294030 2026] [security2:error] [pid 1034096:tid 1034378] [client 158.23.147.79:35811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/log-mama/function.php"] [unique_id "apK9vC04twRPFuquKD20wAAAAQQ"]
[Sat Aug 29 05:08:44.297310 2026] [security2:error] [pid 1034096:tid 1034284] [client 20.104.18.15:46070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9vC04twRPFuquKD20wQAAAKY"]
[Sat Aug 29 05:08:44.298774 2026] [security2:error] [pid 1034096:tid 1034318] [client 4.232.148.111:29809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-content/themes/admin.php"] [unique_id "apK9vC04twRPFuquKD20wgAAAMg"]
[Sat Aug 29 05:08:44.304277 2026] [security2:error] [pid 1034096:tid 1034362] [client 20.104.18.15:12241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/wp-activate.php"] [unique_id "apK9vC04twRPFuquKD20wwAAAPQ"]
[Sat Aug 29 05:08:44.306727 2026] [security2:error] [pid 1034096:tid 1034304] [client 20.104.18.15:18884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/wp-trackback.php"] [unique_id "apK9vC04twRPFuquKD20xQAAALo"]
[Sat Aug 29 05:08:44.311495 2026] [security2:error] [pid 1034096:tid 1034290] [client 4.205.62.107:26637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/app/Helpers/bladeHelpers.php"] [unique_id "apK9vC04twRPFuquKD20xwAAAKw"]
[Sat Aug 29 05:08:44.316134 2026] [security2:error] [pid 1034096:tid 1034321] [client 20.104.18.15:46034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/about.php"] [unique_id "apK9vC04twRPFuquKD20yAAAAMs"]
[Sat Aug 29 05:08:44.319683 2026] [security2:error] [pid 1034096:tid 1034310] [client 20.104.18.15:43265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK9vC04twRPFuquKD20yQAAAMA"]
[Sat Aug 29 05:08:44.325199 2026] [security2:error] [pid 1034096:tid 1034302] [client 35.221.212.112:60498] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/@fs/root/.ssh/id_rsa"] [unique_id "apK9vC04twRPFuquKD20ygAAALg"]
[Sat Aug 29 05:08:44.330009 2026] [security2:error] [pid 1034096:tid 1034311] [client 20.63.219.114:10591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/OK.php"] [unique_id "apK9vC04twRPFuquKD20ywAAAME"]
[Sat Aug 29 05:08:44.341418 2026] [security2:error] [pid 1034096:tid 1034371] [client 20.104.18.15:16865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/new.php"] [unique_id "apK9vC04twRPFuquKD200QAAAP0"]
[Sat Aug 29 05:08:44.343237 2026] [security2:error] [pid 1034096:tid 1034361] [client 35.221.212.112:60560] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "autodiscover.beraluzarchive.org"] [uri "/@fs/var/www/html/wp-config.php"] [unique_id "apK9vC04twRPFuquKD201QAAAPM"]
[Sat Aug 29 05:08:44.347760 2026] [security2:error] [pid 1034096:tid 1034375] [client 35.221.212.112:60582] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "autodiscover.beraluzarchive.org"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2fproc/self/environ"] [unique_id "apK9vC04twRPFuquKD203QAAAQE"]
[Sat Aug 29 05:08:44.351383 2026] [security2:error] [pid 1034096:tid 1034277] [client 20.104.18.15:15274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/kerang.php"] [unique_id "apK9vC04twRPFuquKD204AAAAJ8"]
[Sat Aug 29 05:08:44.358935 2026] [security2:error] [pid 1034096:tid 1034308] [client 52.139.37.240:12499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/must.php"] [unique_id "apK9vC04twRPFuquKD205gAAAL4"]
[Sat Aug 29 05:08:44.359771 2026] [security2:error] [pid 1034096:tid 1034374] [client 4.205.62.107:62744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/thui.php"] [unique_id "apK9vC04twRPFuquKD205wAAAQA"]
[Sat Aug 29 05:08:44.362243 2026] [security2:error] [pid 1034096:tid 1034294] [client 35.221.212.112:60606] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "autodiscover.beraluzarchive.org"] [uri "/@fs/../../../../../proc/self/environ"] [unique_id "apK9vC04twRPFuquKD206QAAALA"]
[Sat Aug 29 05:08:44.363424 2026] [core:error] [pid 1034096:tid 1034342] [client 35.221.212.112:60626] AH10244: invalid URI path (/@fs/../../../../../root/.env?raw??)
[Sat Aug 29 05:08:44.365069 2026] [core:error] [pid 1034096:tid 1034274] [client 35.221.212.112:60610] AH10244: invalid URI path (/@fs/../../../../../app/.env?raw??)
[Sat Aug 29 05:08:44.379083 2026] [security2:error] [pid 1034096:tid 1034289] [client 35.221.212.112:60668] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "autodiscover.beraluzarchive.org"] [uri "/@fs/root/.azure/accessTokens.json"] [unique_id "apK9vC04twRPFuquKD21AgAAAKs"]
[Sat Aug 29 05:08:44.381105 2026] [security2:error] [pid 1034096:tid 1034362] [client 158.23.147.79:6142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/ws.php"] [unique_id "apK9vC04twRPFuquKD21BAAAAPQ"]
[Sat Aug 29 05:08:44.394883 2026] [security2:error] [pid 1034096:tid 1034300] [client 40.83.93.50:11914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/wp-admin.php"] [unique_id "apK9vC04twRPFuquKD21EAAAALY"]
[Sat Aug 29 05:08:44.397096 2026] [security2:error] [pid 1034096:tid 1034253] [client 158.23.184.117:23117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/.well-known/wp-signup.php"] [unique_id "apK9vC04twRPFuquKD21FQAAAIc"]
[Sat Aug 29 05:08:44.402779 2026] [security2:error] [pid 1034096:tid 1034361] [client 20.104.18.15:39813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/images.php"] [unique_id "apK9vC04twRPFuquKD21FwAAAPM"]
[Sat Aug 29 05:08:44.416976 2026] [security2:error] [pid 1034096:tid 1034315] [client 52.139.37.240:18875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/mah.php"] [unique_id "apK9vC04twRPFuquKD21IAAAAMU"]
[Sat Aug 29 05:08:44.435585 2026] [security2:error] [pid 1034096:tid 1034275] [client 127.0.0.1:46110] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.beraluzarchive.org"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK9vC04twRPFuquKD20zgAAAJ0"]
[Sat Aug 29 05:08:44.435587 2026] [security2:error] [pid 1034096:tid 1034370] [client 127.0.0.1:46134] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK9vC04twRPFuquKD201gAAAPw"]
[Sat Aug 29 05:08:44.435768 2026] [security2:error] [pid 1034096:tid 1034265] [client 35.221.212.112:60514] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.beraluzarchive.org"] [uri "/@fs/root/.ssh/id_ed25519"] [unique_id "apK9vC04twRPFuquKD20zAAAAJM"]
[Sat Aug 29 05:08:44.443453 2026] [security2:error] [pid 1034096:tid 1034318] [client 20.104.18.15:46037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/adminfuns.php"] [unique_id "apK9vC04twRPFuquKD21LQAAAMg"]
[Sat Aug 29 05:08:44.466758 2026] [security2:error] [pid 1034096:tid 1034307] [client 20.52.41.200:5350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/av.php"] [unique_id "apK9vC04twRPFuquKD21NAAAAL0"]
[Sat Aug 29 05:08:44.482796 2026] [security2:error] [pid 1034096:tid 1034357] [client 20.104.18.15:25556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/inx.php"] [unique_id "apK9vC04twRPFuquKD21NwAAAO8"]
[Sat Aug 29 05:08:44.493435 2026] [security2:error] [pid 1034096:tid 1034350] [client 158.23.147.79:53174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/packed.php"] [unique_id "apK9vC04twRPFuquKD21OQAAAOg"]
[Sat Aug 29 05:08:44.505736 2026] [security2:error] [pid 1034096:tid 1034376] [client 93.123.109.228:48802] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.old"] [unique_id "apK9vC04twRPFuquKD21PQAAAQI"]
[Sat Aug 29 05:08:44.532762 2026] [security2:error] [pid 1034096:tid 1034327] [client 20.197.61.180:14997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/wp-admin.php"] [unique_id "apK9vC04twRPFuquKD21QwAAANE"]
[Sat Aug 29 05:08:44.559063 2026] [security2:error] [pid 1034096:tid 1034319] [client 20.104.18.15:41973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/about.php"] [unique_id "apK9vC04twRPFuquKD21SAAAAMk"]
[Sat Aug 29 05:08:44.559684 2026] [security2:error] [pid 1034096:tid 1034359] [client 20.104.18.15:46054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/admin.php"] [unique_id "apK9vC04twRPFuquKD21SQAAAPE"]
[Sat Aug 29 05:08:44.561887 2026] [security2:error] [pid 1034096:tid 1034327] [client 20.104.18.15:19429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/pri.php"] [unique_id "apK9vC04twRPFuquKD21SgAAANE"]
[Sat Aug 29 05:08:44.565090 2026] [http2:info] [pid 1041789:tid 1041789] h2_workers: created with min=128 max=192 idle_ms=600000
[Sat Aug 29 05:08:44.584394 2026] [proxy_http:error] [pid 1018003:tid 1018253] (70007)The timeout specified has expired: [client 127.0.0.1:49504] AH01102: error reading status line from remote server 50.6.92.44:8443, referer: https://guraonline.com/
[Sat Aug 29 05:08:44.584415 2026] [proxy:error] [pid 1018003:tid 1018253] [client 127.0.0.1:49504] AH00898: Error reading from remote server returned by /502.shtml, referer: https://guraonline.com/
[Sat Aug 29 05:08:44.593560 2026] [security2:error] [pid 1034096:tid 1034303] [client 20.100.175.163:8797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/r.php"] [unique_id "apK9vC04twRPFuquKD21TQAAALk"]
[Sat Aug 29 05:08:44.609333 2026] [security2:error] [pid 1034096:tid 1034293] [client 20.104.49.130:53675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/static.php"] [unique_id "apK9vC04twRPFuquKD21UAAAAK8"]
[Sat Aug 29 05:08:44.612551 2026] [security2:error] [pid 1034096:tid 1034265] [client 4.205.62.107:56033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/app_local.php"] [unique_id "apK9vC04twRPFuquKD21UQAAAJM"]
[Sat Aug 29 05:08:44.613125 2026] [security2:error] [pid 1034096:tid 1034375] [client 20.104.18.15:43975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/wsd.php"] [unique_id "apK9vC04twRPFuquKD21UgAAAQE"]
[Sat Aug 29 05:08:44.613135 2026] [security2:error] [pid 1034096:tid 1034363] [client 180.190.5.40:39704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.5.190.180.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK9vC04twRPFuquKD21UwAAAPU"]
[Sat Aug 29 05:08:44.613216 2026] [security2:error] [pid 1034096:tid 1034363] [client 180.190.5.40:39704] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK9vC04twRPFuquKD21UwAAAPU"]
[Sat Aug 29 05:08:44.614002 2026] [security2:error] [pid 1034096:tid 1034372] [client 20.104.18.15:39845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/82.php"] [unique_id "apK9vC04twRPFuquKD21VAAAAP4"]
[Sat Aug 29 05:08:44.615381 2026] [security2:error] [pid 1034096:tid 1034337] [client 20.104.18.15:12067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/wp-trackback.php"] [unique_id "apK9vC04twRPFuquKD21VQAAANs"]
[Sat Aug 29 05:08:44.615750 2026] [security2:error] [pid 1041789:tid 1041934] [client 20.104.18.15:15265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/m.php"] [unique_id "apK9vIv3RhPI65jTFG7TiQAAAyE"]
[Sat Aug 29 05:08:44.615756 2026] [security2:error] [pid 1041789:tid 1041931] [client 158.23.147.79:6060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9vIv3RhPI65jTFG7TiAAAAx4"]
[Sat Aug 29 05:08:44.615778 2026] [security2:error] [pid 1034096:tid 1034373] [client 20.151.200.44:63182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/inwp.php"] [unique_id "apK9vC04twRPFuquKD21VgAAAP8"]
[Sat Aug 29 05:08:44.619165 2026] [security2:error] [pid 1034096:tid 1034273] [client 68.155.159.216:33742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/goat.php"] [unique_id "apK9vC04twRPFuquKD21VwAAAJs"]
[Sat Aug 29 05:08:44.619165 2026] [security2:error] [pid 1041789:tid 1041944] [client 4.205.62.107:9019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/filesystems.php"] [unique_id "apK9vIv3RhPI65jTFG7TigAAAys"]
[Sat Aug 29 05:08:44.619416 2026] [security2:error] [pid 1034096:tid 1034353] [client 20.104.18.15:16864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/vpn.php"] [unique_id "apK9vC04twRPFuquKD21WAAAAOs"]
[Sat Aug 29 05:08:44.622467 2026] [security2:error] [pid 1041789:tid 1041947] [client 20.104.18.15:46040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/goods.php"] [unique_id "apK9vIv3RhPI65jTFG7TiwAAAy4"]
[Sat Aug 29 05:08:44.648159 2026] [security2:error] [pid 1034096:tid 1034316] [client 68.155.159.216:56572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/install.php"] [unique_id "apK9vC04twRPFuquKD21XAAAAMY"]
[Sat Aug 29 05:08:44.648809 2026] [security2:error] [pid 1041789:tid 1041976] [client 68.155.159.216:64022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK9vIv3RhPI65jTFG7TjgAAA0s"]
[Sat Aug 29 05:08:44.659177 2026] [security2:error] [pid 1041789:tid 1041805] [remote 68.65.123.210:57614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 210.123.65.68.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "greathairkc.com"] [uri "/wp-login.php"] [unique_id "apK9vIv3RhPI65jTFG7TkQADPQM"]
[Sat Aug 29 05:08:44.676039 2026] [security2:error] [pid 1041789:tid 1041954] [client 158.23.184.117:22806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/002.php"] [unique_id "apK9vIv3RhPI65jTFG7TkgAAAzU"]
[Sat Aug 29 05:08:44.681591 2026] [core:error] [pid 1034096:tid 1034126] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.681616 2026] [core:error] [pid 1034096:tid 1034126] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.682096 2026] [core:error] [pid 1034096:tid 1034140] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.682112 2026] [core:error] [pid 1034096:tid 1034140] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.686040 2026] [security2:error] [pid 1034096:tid 1034360] [client 4.205.62.107:22527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/333.php"] [unique_id "apK9vC04twRPFuquKD21cAAAAPI"]
[Sat Aug 29 05:08:44.688228 2026] [core:error] [pid 1034096:tid 1034239] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.688250 2026] [core:error] [pid 1034096:tid 1034239] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.690381 2026] [core:error] [pid 1034096:tid 1034126] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.690403 2026] [core:error] [pid 1034096:tid 1034126] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.697241 2026] [security2:error] [pid 1041789:tid 1041955] [client 52.139.37.240:12864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/up.php"] [unique_id "apK9vIv3RhPI65jTFG7TlQAAAzY"]
[Sat Aug 29 05:08:44.705689 2026] [security2:error] [pid 1034096:tid 1034294] [client 20.104.18.15:41941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/admin.php"] [unique_id "apK9vC04twRPFuquKD21eAAAALA"]
[Sat Aug 29 05:08:44.709274 2026] [security2:error] [pid 1041789:tid 1041958] [client 52.139.37.240:18844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/mini.php"] [unique_id "apK9vIv3RhPI65jTFG7TlgAAAzk"]
[Sat Aug 29 05:08:44.712933 2026] [security2:error] [pid 1034096:tid 1034372] [client 20.104.18.15:19268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/wp_blog_footer.php"] [unique_id "apK9vC04twRPFuquKD21fQAAAP4"]
[Sat Aug 29 05:08:44.713764 2026] [core:error] [pid 1034096:tid 1034365] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.713781 2026] [core:error] [pid 1034096:tid 1034365] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.713808 2026] [core:error] [pid 1034096:tid 1034368] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.713818 2026] [core:error] [pid 1034096:tid 1034368] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.718020 2026] [core:error] [pid 1041789:tid 1041993] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.718035 2026] [core:error] [pid 1041789:tid 1041993] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.719270 2026] [core:error] [pid 1041789:tid 1041992] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.719324 2026] [core:error] [pid 1041789:tid 1041992] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.722496 2026] [security2:error] [pid 1041789:tid 1041996] [client 20.104.18.15:46024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/admin.php"] [unique_id "apK9vIv3RhPI65jTFG7TmQAAA18"]
[Sat Aug 29 05:08:44.748640 2026] [security2:error] [pid 1034096:tid 1034359] [client 20.104.18.15:15269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/fling.php"] [unique_id "apK9vC04twRPFuquKD21gQAAAPE"]
[Sat Aug 29 05:08:44.750284 2026] [security2:error] [pid 1041789:tid 1041961] [client 20.63.219.114:18506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.uma1.thewaltongroupinc.com"] [uri "/aaa.php"] [unique_id "apK9vIv3RhPI65jTFG7TmgAAAzw"]
[Sat Aug 29 05:08:44.750811 2026] [security2:error] [pid 1034096:tid 1034353] [client 20.104.18.15:16836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/shiny.php"] [unique_id "apK9vC04twRPFuquKD21gwAAAOs"]
[Sat Aug 29 05:08:44.761853 2026] [security2:error] [pid 1034096:tid 1034372] [client 20.104.18.15:12211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/pri.php"] [unique_id "apK9vC04twRPFuquKD21hQAAAP4"]
[Sat Aug 29 05:08:44.770002 2026] [security2:error] [pid 1034096:tid 1034151] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/application/.env"] [unique_id "apK9vC04twRPFuquKD21kQAA9x0"]
[Sat Aug 29 05:08:44.770931 2026] [security2:error] [pid 1034096:tid 1034249] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/apps/.env"] [unique_id "apK9vC04twRPFuquKD21kwAA938"]
[Sat Aug 29 05:08:44.775311 2026] [core:error] [pid 1034096:tid 1034246] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.775330 2026] [core:error] [pid 1034096:tid 1034246] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.776624 2026] [core:error] [pid 1034096:tid 1034152] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.776647 2026] [core:error] [pid 1034096:tid 1034152] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.777123 2026] [security2:error] [pid 1041789:tid 1041956] [client 158.158.54.35:13046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-trackback.php"] [unique_id "apK9vIv3RhPI65jTFG7TnAAAAzc"]
[Sat Aug 29 05:08:44.778521 2026] [security2:error] [pid 1034096:tid 1034251] [client 20.104.18.15:45910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/100.php"] [unique_id "apK9vC04twRPFuquKD21nAAAAIU"]
[Sat Aug 29 05:08:44.778841 2026] [security2:error] [pid 1034096:tid 1034316] [client 20.104.18.15:39755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/files.php/new.php"] [unique_id "apK9vC04twRPFuquKD21nQAAAMY"]
[Sat Aug 29 05:08:44.779951 2026] [security2:error] [pid 1034096:tid 1034356] [client 20.197.61.180:12765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/post.php"] [unique_id "apK9vC04twRPFuquKD21ngAAAO4"]
[Sat Aug 29 05:08:44.780000 2026] [security2:error] [pid 1041789:tid 1041945] [client 40.83.93.50:21311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-content/languages/pk.php"] [unique_id "apK9vIv3RhPI65jTFG7TnQAAAyw"]
[Sat Aug 29 05:08:44.781738 2026] [security2:error] [pid 1041789:tid 1041957] [client 40.83.93.50:12975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-admin/test.php"] [unique_id "apK9vIv3RhPI65jTFG7TngAAAzg"]
[Sat Aug 29 05:08:44.788723 2026] [security2:error] [pid 1041789:tid 1041948] [client 20.240.128.207:7422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/about/function.php"] [unique_id "apK9vIv3RhPI65jTFG7TnwAAAy8"]
[Sat Aug 29 05:08:44.798240 2026] [core:error] [pid 1041789:tid 1041985] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.798256 2026] [core:error] [pid 1041789:tid 1041985] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.800120 2026] [security2:error] [pid 1041789:tid 1041972] [client 158.23.147.79:26477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/x.php"] [unique_id "apK9vIv3RhPI65jTFG7TogAAA0c"]
[Sat Aug 29 05:08:44.801692 2026] [core:error] [pid 1034096:tid 1034270] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.801724 2026] [core:error] [pid 1034096:tid 1034270] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.802070 2026] [security2:error] [pid 1034096:tid 1034319] [client 74.248.24.12:5491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "apK9vC04twRPFuquKD21oQAAAMk"]
[Sat Aug 29 05:08:44.803217 2026] [core:error] [pid 1041789:tid 1041986] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.803237 2026] [core:error] [pid 1041789:tid 1041986] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.805824 2026] [security2:error] [pid 1041789:tid 1041975] [client 4.232.148.111:35323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-admin/css/admin.php"] [unique_id "apK9vIv3RhPI65jTFG7TpAAAA0o"]
[Sat Aug 29 05:08:44.808801 2026] [core:error] [pid 1041789:tid 1041965] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.808818 2026] [core:error] [pid 1041789:tid 1041965] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.822824 2026] [security2:error] [pid 1034096:tid 1034317] [client 158.23.147.79:50005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK9vC04twRPFuquKD21pAAAAMc"]
[Sat Aug 29 05:08:44.825956 2026] [security2:error] [pid 1034096:tid 1034278] [client 158.23.184.117:23234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/0x.php"] [unique_id "apK9vC04twRPFuquKD21pgAAAKA"]
[Sat Aug 29 05:08:44.833477 2026] [core:error] [pid 1034096:tid 1034245] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.833495 2026] [core:error] [pid 1034096:tid 1034245] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.837666 2026] [security2:error] [pid 1041789:tid 1042016] [client 20.104.18.15:41960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/admin.php"] [unique_id "apK9vIv3RhPI65jTFG7TpgAAA3M"]
[Sat Aug 29 05:08:44.838831 2026] [core:error] [pid 1034096:tid 1034154] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.838848 2026] [core:error] [pid 1034096:tid 1034154] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.839223 2026] [core:error] [pid 1034096:tid 1034149] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.839234 2026] [core:error] [pid 1034096:tid 1034149] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.840424 2026] [core:error] [pid 1034096:tid 1034146] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.840438 2026] [core:error] [pid 1034096:tid 1034146] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.843951 2026] [security2:error] [pid 1041789:tid 1042017] [client 20.104.18.15:43270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/bulet.php"] [unique_id "apK9vIv3RhPI65jTFG7TpwAAA3Q"]
[Sat Aug 29 05:08:44.844980 2026] [security2:error] [pid 1034096:tid 1034340] [client 20.104.18.15:18888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/sushi.php"] [unique_id "apK9vC04twRPFuquKD21rgAAAN4"]
[Sat Aug 29 05:08:44.862666 2026] [security2:error] [pid 1041789:tid 1041960] [client 40.83.93.50:12518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/wp-admin.php"] [unique_id "apK9vIv3RhPI65jTFG7TqAAAAzs"]
[Sat Aug 29 05:08:44.863370 2026] [core:error] [pid 1034096:tid 1034150] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.863383 2026] [core:error] [pid 1034096:tid 1034150] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.866598 2026] [security2:error] [pid 1041789:tid 1042019] [client 68.155.159.216:49276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-includes/content.php"] [unique_id "apK9vIv3RhPI65jTFG7TqQAAA3Y"]
[Sat Aug 29 05:08:44.868314 2026] [security2:error] [pid 1041789:tid 1042020] [client 20.151.200.44:64523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/ad1.php"] [unique_id "apK9vIv3RhPI65jTFG7TqgAAA3c"]
[Sat Aug 29 05:08:44.870706 2026] [security2:error] [pid 1041789:tid 1041953] [client 20.197.61.180:12746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/alfa-rex.php"] [unique_id "apK9vIv3RhPI65jTFG7TqwAAAzQ"]
[Sat Aug 29 05:08:44.877156 2026] [security2:error] [pid 1034096:tid 1034274] [client 40.83.93.50:48032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/wp-configs.php"] [unique_id "apK9vC04twRPFuquKD21twAAAJw"]
[Sat Aug 29 05:08:44.881151 2026] [security2:error] [pid 1034096:tid 1034377] [client 20.104.18.15:15295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/btyuio.php"] [unique_id "apK9vC04twRPFuquKD21uAAAAQM"]
[Sat Aug 29 05:08:44.881619 2026] [security2:error] [pid 1034096:tid 1034284] [client 20.104.18.15:16891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/goods.php"] [unique_id "apK9vC04twRPFuquKD21uQAAAKY"]
[Sat Aug 29 05:08:44.905169 2026] [security2:error] [pid 1034096:tid 1034327] [client 20.104.18.15:12153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/wp_blog_footer.php"] [unique_id "apK9vC04twRPFuquKD21vwAAANE"]
[Sat Aug 29 05:08:44.908754 2026] [security2:error] [pid 1041789:tid 1042021] [client 158.23.147.79:17520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/images/index.php"] [unique_id "apK9vIv3RhPI65jTFG7TrAAAA3g"]
[Sat Aug 29 05:08:44.909899 2026] [security2:error] [pid 1041789:tid 1042004] [client 20.52.41.200:4571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/file.php"] [unique_id "apK9vIv3RhPI65jTFG7TrQAAA2c"]
[Sat Aug 29 05:08:44.911678 2026] [security2:error] [pid 1034096:tid 1034251] [client 52.139.37.240:18880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/v.php"] [unique_id "apK9vC04twRPFuquKD21wgAAAIU"]
[Sat Aug 29 05:08:44.914670 2026] [security2:error] [pid 1034096:tid 1034251] [client 20.104.18.15:45966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/about.php"] [unique_id "apK9vC04twRPFuquKD21xAAAAIU"]
[Sat Aug 29 05:08:44.919405 2026] [security2:error] [pid 1034096:tid 1034253] [client 20.104.18.15:39771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/mghnhykio.php/new.php"] [unique_id "apK9vC04twRPFuquKD21xgAAAIc"]
[Sat Aug 29 05:08:44.945001 2026] [core:error] [pid 1034096:tid 1034178] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.945026 2026] [core:error] [pid 1034096:tid 1034178] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.946528 2026] [security2:error] [pid 1034096:tid 1034268] [client 20.104.18.15:46050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/themes.php"] [unique_id "apK9vC04twRPFuquKD21zgAAAJY"]
[Sat Aug 29 05:08:44.950188 2026] [core:error] [pid 1034096:tid 1034181] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.950209 2026] [core:error] [pid 1034096:tid 1034181] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.962111 2026] [security2:error] [pid 1034096:tid 1034269] [client 52.139.37.240:12527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/wp-content/155.php"] [unique_id "apK9vC04twRPFuquKD211QAAAJc"]
[Sat Aug 29 05:08:44.968998 2026] [security2:error] [pid 1041789:tid 1042036] [client 20.104.49.130:52345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/ws45.php"] [unique_id "apK9vIv3RhPI65jTFG7TsgAAA4c"]
[Sat Aug 29 05:08:44.969641 2026] [core:error] [pid 1034096:tid 1034252] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.969659 2026] [core:error] [pid 1034096:tid 1034252] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.970135 2026] [core:error] [pid 1034096:tid 1034316] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.970147 2026] [core:error] [pid 1034096:tid 1034316] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.971527 2026] [core:error] [pid 1034096:tid 1034340] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.971541 2026] [core:error] [pid 1034096:tid 1034340] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.974235 2026] [core:error] [pid 1034096:tid 1034363] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.974262 2026] [core:error] [pid 1034096:tid 1034363] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.974721 2026] [security2:error] [pid 1041789:tid 1042025] [client 158.23.184.117:23276] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "fox-mart.com"] [uri "/1.php"] [unique_id "apK9vIv3RhPI65jTFG7TswAAA3w"]
[Sat Aug 29 05:08:44.974842 2026] [security2:error] [pid 1041789:tid 1042025] [client 158.23.184.117:23276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/1.php"] [unique_id "apK9vIv3RhPI65jTFG7TswAAA3w"]
[Sat Aug 29 05:08:44.977991 2026] [security2:error] [pid 1041789:tid 1041974] [client 178.211.139.240:60290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.139.211.178.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "santarosairis.org"] [uri "/images/images/cache.php"] [unique_id "apK9vIv3RhPI65jTFG7TtAAAA0k"], referer: www.google.com
[Sat Aug 29 05:08:44.980192 2026] [security2:error] [pid 1041789:tid 1042039] [client 20.104.18.15:18920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/manga.php"] [unique_id "apK9vIv3RhPI65jTFG7TtQAAA4o"]
[Sat Aug 29 05:08:44.982464 2026] [core:error] [pid 1034096:tid 1034367] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.982479 2026] [core:error] [pid 1034096:tid 1034367] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.988618 2026] [security2:error] [pid 1034096:tid 1034280] [client 20.104.18.15:41866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/themes.php"] [unique_id "apK9vC04twRPFuquKD214AAAAKI"]
[Sat Aug 29 05:08:44.992863 2026] [core:error] [pid 1034096:tid 1034188] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.992881 2026] [core:error] [pid 1034096:tid 1034188] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.996967 2026] [core:error] [pid 1034096:tid 1034186] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:44.996986 2026] [core:error] [pid 1034096:tid 1034186] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.004250 2026] [security2:error] [pid 1034096:tid 1034327] [client 20.104.49.130:43587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/ws85.php"] [unique_id "apK9vS04twRPFuquKD217wAAANE"]
[Sat Aug 29 05:08:45.011242 2026] [security2:error] [pid 1034096:tid 1034357] [client 20.104.18.15:15168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/dehnl.php"] [unique_id "apK9vS04twRPFuquKD218gAAAO8"]
[Sat Aug 29 05:08:45.011648 2026] [security2:error] [pid 1041789:tid 1042042] [client 20.104.18.15:16771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/alfa.php"] [unique_id "apK9vYv3RhPI65jTFG7TuAAAA40"]
[Sat Aug 29 05:08:45.013677 2026] [http2:warn] [pid 1017536:tid 1017739] [client 57.141.14.32:63142] h2_stream(1017536-172-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:08:45.022935 2026] [core:error] [pid 1034096:tid 1034368] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.022958 2026] [core:error] [pid 1034096:tid 1034368] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.022988 2026] [security2:error] [pid 1034096:tid 1034376] [client 68.155.159.216:52748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/themes.php"] [unique_id "apK9vS04twRPFuquKD219gAAAQI"]
[Sat Aug 29 05:08:45.024823 2026] [core:error] [pid 1041789:tid 1042045] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.024848 2026] [core:error] [pid 1041789:tid 1042045] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.027809 2026] [security2:error] [pid 1034096:tid 1034232] [remote 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK9vS04twRPFuquKD219wAA6G4"]
[Sat Aug 29 05:08:45.028883 2026] [security2:error] [pid 1034096:tid 1034350] [client 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK9vS04twRPFuquKD219wAA6G4"]
[Sat Aug 29 05:08:45.031885 2026] [core:error] [pid 1034096:tid 1034360] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.031898 2026] [core:error] [pid 1034096:tid 1034360] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.032142 2026] [core:error] [pid 1041789:tid 1042044] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.032156 2026] [core:error] [pid 1041789:tid 1042044] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.032902 2026] [core:error] [pid 1034096:tid 1034253] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.032917 2026] [core:error] [pid 1034096:tid 1034253] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.037190 2026] [core:error] [pid 1041789:tid 1042047] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.037203 2026] [core:error] [pid 1041789:tid 1042047] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.051520 2026] [core:error] [pid 1041789:tid 1042057] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.051541 2026] [core:error] [pid 1041789:tid 1042057] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.058407 2026] [security2:error] [pid 1034096:tid 1034294] [client 20.104.18.15:39888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/admin.php/nope.php"] [unique_id "apK9vS04twRPFuquKD21_wAAALA"]
[Sat Aug 29 05:08:45.061955 2026] [security2:error] [pid 1034096:tid 1034262] [client 93.123.109.228:48824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/.wp-config.php.swp"] [unique_id "apK9vS04twRPFuquKD22AAAAAJA"]
[Sat Aug 29 05:08:45.072175 2026] [security2:error] [pid 1034096:tid 1034273] [client 68.155.159.216:24436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK9vS04twRPFuquKD22AwAAAJs"]
[Sat Aug 29 05:08:45.086739 2026] [security2:error] [pid 1034096:tid 1034272] [client 68.155.159.216:1871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/lv.php"] [unique_id "apK9vS04twRPFuquKD22BwAAAJo"]
[Sat Aug 29 05:08:45.087427 2026] [security2:error] [pid 1034096:tid 1034373] [client 20.104.18.15:46056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/about.php"] [unique_id "apK9vS04twRPFuquKD22CAAAAP8"]
[Sat Aug 29 05:08:45.089075 2026] [security2:error] [pid 1034096:tid 1034307] [client 127.0.0.1:46648] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK9vC04twRPFuquKD21PAAAAL0"]
[Sat Aug 29 05:08:45.089318 2026] [security2:error] [pid 1034096:tid 1034291] [client 127.0.0.1:46612] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.beraluzarchive.org"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK9vC04twRPFuquKD21MAAAAK0"]
[Sat Aug 29 05:08:45.089490 2026] [security2:error] [pid 1034096:tid 1034266] [client 35.221.212.112:60734] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.beraluzarchive.org"] [uri "/@fs/root/.config/gcloud/credentials.db"] [unique_id "apK9vC04twRPFuquKD21IwAAAJQ"]
[Sat Aug 29 05:08:45.093868 2026] [security2:error] [pid 1041789:tid 1042014] [client 20.100.175.163:5292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-blog.php"] [unique_id "apK9vYv3RhPI65jTFG7TvgAAA3E"]
[Sat Aug 29 05:08:45.107517 2026] [security2:error] [pid 1034096:tid 1034297] [client 20.104.18.15:43320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/av.php"] [unique_id "apK9vS04twRPFuquKD22DwAAALM"]
[Sat Aug 29 05:08:45.113911 2026] [security2:error] [pid 1041789:tid 1041964] [client 20.104.18.15:19447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/asdfghj.php"] [unique_id "apK9vYv3RhPI65jTFG7TwgAAAz8"]
[Sat Aug 29 05:08:45.120235 2026] [security2:error] [pid 1034096:tid 1034369] [client 158.23.184.117:23250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/10.php"] [unique_id "apK9vS04twRPFuquKD22EAAAAPs"]
[Sat Aug 29 05:08:45.121914 2026] [security2:error] [pid 1034096:tid 1034322] [client 20.104.18.15:46068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/biufile.php"] [unique_id "apK9vS04twRPFuquKD22EgAAAMw"]
[Sat Aug 29 05:08:45.122589 2026] [security2:error] [pid 1034096:tid 1034357] [client 93.123.109.228:48724] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/ADMIN/.env"] [unique_id "apK9vS04twRPFuquKD22EQAAAO8"]
[Sat Aug 29 05:08:45.123275 2026] [security2:error] [pid 1034096:tid 1034265] [client 52.139.37.240:19271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK9vS04twRPFuquKD22FQAAAJM"]
[Sat Aug 29 05:08:45.125799 2026] [core:error] [pid 1034096:tid 1034199] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.125816 2026] [core:error] [pid 1034096:tid 1034199] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.139339 2026] [security2:error] [pid 1034096:tid 1034189] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/back-api/.env"] [unique_id "apK9vS04twRPFuquKD22HQAAokM"]
[Sat Aug 29 05:08:45.140560 2026] [security2:error] [pid 1034096:tid 1034177] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/back-end/.env"] [unique_id "apK9vS04twRPFuquKD22HgAAojc"]
[Sat Aug 29 05:08:45.142619 2026] [core:error] [pid 1034096:tid 1034355] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.142635 2026] [core:error] [pid 1034096:tid 1034355] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.143685 2026] [core:error] [pid 1041789:tid 1041980] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.143705 2026] [core:error] [pid 1041789:tid 1041980] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.145394 2026] [security2:error] [pid 1034096:tid 1034350] [client 20.104.18.15:16776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/33.php"] [unique_id "apK9vS04twRPFuquKD22IAAAAOg"]
[Sat Aug 29 05:08:45.147514 2026] [security2:error] [pid 1041789:tid 1041981] [client 20.104.18.15:15356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/zoo2.php"] [unique_id "apK9vYv3RhPI65jTFG7TxQAAA1A"]
[Sat Aug 29 05:08:45.148811 2026] [security2:error] [pid 1034096:tid 1034278] [client 93.123.109.228:48758] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/API/.env"] [unique_id "apK9vS04twRPFuquKD22IQAAAKA"]
[Sat Aug 29 05:08:45.155096 2026] [security2:error] [pid 1034096:tid 1034285] [client 20.151.200.44:63850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/1vbqo.php"] [unique_id "apK9vS04twRPFuquKD22IwAAAKc"]
[Sat Aug 29 05:08:45.155903 2026] [security2:error] [pid 1034096:tid 1034175] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/backend-api/.env"] [unique_id "apK9vS04twRPFuquKD22JAAAojU"]
[Sat Aug 29 05:08:45.155930 2026] [security2:error] [pid 1034096:tid 1034211] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/back/.env"] [unique_id "apK9vS04twRPFuquKD22IgAAolk"]
[Sat Aug 29 05:08:45.157630 2026] [security2:error] [pid 1034096:tid 1034302] [client 52.139.37.240:12909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/wp-update.php"] [unique_id "apK9vS04twRPFuquKD22JgAAALg"]
[Sat Aug 29 05:08:45.157920 2026] [security2:error] [pid 1034096:tid 1034268] [client 20.104.18.15:41921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/biufile.php"] [unique_id "apK9vS04twRPFuquKD22JwAAAJY"]
[Sat Aug 29 05:08:45.163783 2026] [security2:error] [pid 1034096:tid 1034329] [client 45.148.10.62:40058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wxg.uhf.mybluehost.me"] [uri "/wp-config.php"] [unique_id "apK9vS04twRPFuquKD22KgAAANM"]
[Sat Aug 29 05:08:45.172034 2026] [core:error] [pid 1041789:tid 1041955] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.172054 2026] [core:error] [pid 1041789:tid 1041955] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.176636 2026] [security2:error] [pid 1034096:tid 1034207] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK9vS04twRPFuquKD22LAAAolU"]
[Sat Aug 29 05:08:45.179425 2026] [core:error] [pid 1034096:tid 1034283] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.179448 2026] [core:error] [pid 1034096:tid 1034283] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.180245 2026] [core:error] [pid 1034096:tid 1034208] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.180257 2026] [core:error] [pid 1034096:tid 1034208] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.186494 2026] [core:error] [pid 1034096:tid 1034197] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.186518 2026] [core:error] [pid 1034096:tid 1034197] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.190713 2026] [core:error] [pid 1034096:tid 1034210] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.190729 2026] [core:error] [pid 1034096:tid 1034210] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.193255 2026] [core:error] [pid 1034096:tid 1034197] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.193271 2026] [core:error] [pid 1034096:tid 1034197] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.204987 2026] [security2:error] [pid 1041789:tid 1041996] [client 20.104.18.15:39874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/lib.php/new.php"] [unique_id "apK9vYv3RhPI65jTFG7TxwAAA18"]
[Sat Aug 29 05:08:45.206224 2026] [core:error] [pid 1034096:tid 1034216] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.206237 2026] [core:error] [pid 1034096:tid 1034216] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.208376 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.104.18.15:12161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/sushi.php"] [unique_id "apK9vYv3RhPI65jTFG7TyAAAA2Q"]
[Sat Aug 29 05:08:45.208928 2026] [core:error] [pid 1034096:tid 1034218] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.208938 2026] [core:error] [pid 1034096:tid 1034218] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.221788 2026] [security2:error] [pid 1041789:tid 1042005] [client 158.23.147.79:11470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-content/admin.php"] [unique_id "apK9vYv3RhPI65jTFG7TygAAA2g"]
[Sat Aug 29 05:08:45.240375 2026] [security2:error] [pid 1034096:tid 1034353] [client 93.123.109.228:48746] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/APP/.env"] [unique_id "apK9vS04twRPFuquKD22OwAAAOs"]
[Sat Aug 29 05:08:45.245350 2026] [security2:error] [pid 1034096:tid 1034344] [client 20.104.18.15:46052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/admin.php"] [unique_id "apK9vS04twRPFuquKD22PAAAAOI"]
[Sat Aug 29 05:08:45.252771 2026] [security2:error] [pid 1034096:tid 1034273] [client 93.123.109.228:48688] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/Api/.env"] [unique_id "apK9vS04twRPFuquKD22PQAAAJs"]
[Sat Aug 29 05:08:45.257584 2026] [security2:error] [pid 1034096:tid 1034226] [remote 93.123.109.228:42974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK9vS04twRPFuquKD22PgAA2Wg"]
[Sat Aug 29 05:08:45.259032 2026] [security2:error] [pid 1034096:tid 1034356] [client 45.148.10.62:40064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wxd.mej.mybluehost.me"] [uri "/wp-config.php"] [unique_id "apK9vS04twRPFuquKD22PwAAAO4"]
[Sat Aug 29 05:08:45.264522 2026] [security2:error] [pid 1041789:tid 1041931] [client 20.104.18.15:18908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/dragonshell.php"] [unique_id "apK9vYv3RhPI65jTFG7TywAAAx4"]
[Sat Aug 29 05:08:45.264547 2026] [security2:error] [pid 1041789:tid 1041932] [client 158.23.184.117:23275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/100.php"] [unique_id "apK9vYv3RhPI65jTFG7TzAAAAx8"]
[Sat Aug 29 05:08:45.266896 2026] [security2:error] [pid 1034096:tid 1034306] [client 103.185.242.143:53556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK9vS04twRPFuquKD22RAAAALw"]
[Sat Aug 29 05:08:45.266981 2026] [security2:error] [pid 1034096:tid 1034277] [client 20.197.61.180:1878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/wp-configs.php"] [unique_id "apK9vS04twRPFuquKD22QgAAAJ8"]
[Sat Aug 29 05:08:45.266987 2026] [security2:error] [pid 1034096:tid 1034306] [client 103.185.242.143:53556] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK9vS04twRPFuquKD22RAAAALw"]
[Sat Aug 29 05:08:45.267575 2026] [security2:error] [pid 1034096:tid 1034298] [client 40.83.93.50:21595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.twrebar.com"] [uri "/wp-content/languages/plugins/about.php"] [unique_id "apK9vS04twRPFuquKD22RQAAALQ"]
[Sat Aug 29 05:08:45.267768 2026] [security2:error] [pid 1034096:tid 1034365] [client 20.197.61.180:15030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/flower.php"] [unique_id "apK9vS04twRPFuquKD22QwAAAPc"]
[Sat Aug 29 05:08:45.267786 2026] [security2:error] [pid 1034096:tid 1034328] [client 93.123.109.228:48836] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/BACK/.env"] [unique_id "apK9vS04twRPFuquKD22QQAAANI"]
[Sat Aug 29 05:08:45.276245 2026] [core:error] [pid 1034096:tid 1034215] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.276263 2026] [core:error] [pid 1034096:tid 1034215] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.277472 2026] [security2:error] [pid 1041789:tid 1041950] [client 20.104.18.15:16775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/133.php"] [unique_id "apK9vYv3RhPI65jTFG7TzgAAAzE"]
[Sat Aug 29 05:08:45.279188 2026] [security2:error] [pid 1041789:tid 1041939] [client 158.23.147.79:17571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/hehehehe.php"] [unique_id "apK9vYv3RhPI65jTFG7TzwAAAyY"]
[Sat Aug 29 05:08:45.279849 2026] [security2:error] [pid 1034096:tid 1034378] [client 93.123.109.228:48742] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/BACKEND/.env"] [unique_id "apK9vS04twRPFuquKD22SAAAAQQ"]
[Sat Aug 29 05:08:45.280589 2026] [security2:error] [pid 1034096:tid 1034312] [client 20.104.18.15:43314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/images.php"] [unique_id "apK9vS04twRPFuquKD22SgAAAMI"]
[Sat Aug 29 05:08:45.281399 2026] [security2:error] [pid 1041789:tid 1041935] [client 68.155.159.216:64483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-admin.php"] [unique_id "apK9vYv3RhPI65jTFG7T0QAAAyI"]
[Sat Aug 29 05:08:45.284771 2026] [security2:error] [pid 1034096:tid 1034275] [client 45.148.10.62:40072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wxe.rvy.mybluehost.me"] [uri "/wp-config.php"] [unique_id "apK9vS04twRPFuquKD22SwAAAJ0"]
[Sat Aug 29 05:08:45.285200 2026] [security2:error] [pid 1034096:tid 1034266] [client 20.104.18.15:46060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/coffexium.php"] [unique_id "apK9vS04twRPFuquKD22TQAAAJQ"]
[Sat Aug 29 05:08:45.285608 2026] [security2:error] [pid 1034096:tid 1034289] [client 4.232.148.111:30994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/adminfuns.php"] [unique_id "apK9vS04twRPFuquKD22TgAAAKs"]
[Sat Aug 29 05:08:45.287698 2026] [core:error] [pid 1034096:tid 1034212] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.287716 2026] [core:error] [pid 1034096:tid 1034212] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.289395 2026] [security2:error] [pid 1034096:tid 1034371] [client 93.123.109.228:48724] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/BE/.env"] [unique_id "apK9vS04twRPFuquKD22UQAAAP0"]
[Sat Aug 29 05:08:45.291234 2026] [core:error] [pid 1034096:tid 1034201] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.291249 2026] [core:error] [pid 1034096:tid 1034201] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.296640 2026] [security2:error] [pid 1034096:tid 1034284] [client 20.104.18.15:15246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/zoo1.php"] [unique_id "apK9vS04twRPFuquKD22VAAAAKY"]
[Sat Aug 29 05:08:45.314490 2026] [security2:error] [pid 1034096:tid 1034260] [client 4.205.62.107:58417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/routes.php"] [unique_id "apK9vS04twRPFuquKD22VgAAAI4"]
[Sat Aug 29 05:08:45.318050 2026] [security2:error] [pid 1034096:tid 1034375] [client 20.104.18.15:41950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/coffexium.php"] [unique_id "apK9vS04twRPFuquKD22WQAAAQE"]
[Sat Aug 29 05:08:45.319292 2026] [security2:error] [pid 1034096:tid 1034319] [client 52.139.37.240:18903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "apK9vS04twRPFuquKD22XAAAAMk"]
[Sat Aug 29 05:08:45.319547 2026] [security2:error] [pid 1034096:tid 1034309] [client 93.123.109.228:48808] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/Backend/.env"] [unique_id "apK9vS04twRPFuquKD22WwAAAL8"]
[Sat Aug 29 05:08:45.319920 2026] [core:error] [pid 1034096:tid 1034229] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.319936 2026] [core:error] [pid 1034096:tid 1034229] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.320606 2026] [security2:error] [pid 1034096:tid 1034200] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/backup/.env"] [unique_id "apK9vS04twRPFuquKD22XQAAs04"]
[Sat Aug 29 05:08:45.321162 2026] [core:error] [pid 1034096:tid 1034234] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.321170 2026] [core:error] [pid 1034096:tid 1034234] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.327104 2026] [security2:error] [pid 1034096:tid 1034304] [client 93.123.109.228:48758] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/Be/.env"] [unique_id "apK9vS04twRPFuquKD22XgAAALo"]
[Sat Aug 29 05:08:45.336281 2026] [security2:error] [pid 1034096:tid 1034241] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/be/.env"] [unique_id "apK9vS04twRPFuquKD22YgAAync"]
[Sat Aug 29 05:08:45.337685 2026] [security2:error] [pid 1034096:tid 1034222] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/beta/.env"] [unique_id "apK9vS04twRPFuquKD22ZAAAymQ"]
[Sat Aug 29 05:08:45.347856 2026] [security2:error] [pid 1034096:tid 1034252] [client 74.248.24.12:10331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/css/wp-login.php"] [unique_id "apK9vS04twRPFuquKD22bQAAAIY"]
[Sat Aug 29 05:08:45.354009 2026] [security2:error] [pid 1041789:tid 1041995] [client 40.83.93.50:4042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/wp-configs.php"] [unique_id "apK9vYv3RhPI65jTFG7T1gAAA14"]
[Sat Aug 29 05:08:45.357091 2026] [security2:error] [pid 1041789:tid 1041961] [client 20.52.41.200:4595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK9vYv3RhPI65jTFG7T1wAAAzw"]
[Sat Aug 29 05:08:45.358456 2026] [security2:error] [pid 1034096:tid 1034263] [client 20.104.18.15:39760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/info.php/new.php"] [unique_id "apK9vS04twRPFuquKD22eAAAAJE"]
[Sat Aug 29 05:08:45.360454 2026] [security2:error] [pid 1034096:tid 1034274] [client 52.139.37.240:12888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/xmrlpc.php"] [unique_id "apK9vS04twRPFuquKD22eQAAAJw"]
[Sat Aug 29 05:08:45.383316 2026] [security2:error] [pid 1041789:tid 1042002] [client 40.83.93.50:48007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/essexec.php"] [unique_id "apK9vYv3RhPI65jTFG7T2gAAA2U"]
[Sat Aug 29 05:08:45.383512 2026] [security2:error] [pid 1034096:tid 1034267] [client 158.158.54.35:1705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/222.php"] [unique_id "apK9vS04twRPFuquKD22ggAAAJU"]
[Sat Aug 29 05:08:45.404614 2026] [security2:error] [pid 1034096:tid 1034358] [client 20.104.18.15:19391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/wp-safe.php"] [unique_id "apK9vS04twRPFuquKD22hwAAAPA"]
[Sat Aug 29 05:08:45.404911 2026] [security2:error] [pid 1034096:tid 1034292] [client 158.23.147.79:35735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/bk/index.php"] [unique_id "apK9vS04twRPFuquKD22iAAAAK4"]
[Sat Aug 29 05:08:45.406598 2026] [core:error] [pid 1034096:tid 1034301] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.406611 2026] [core:error] [pid 1034096:tid 1034301] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.409444 2026] [core:error] [pid 1034096:tid 1034282] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.409463 2026] [core:error] [pid 1034096:tid 1034282] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.410314 2026] [core:error] [pid 1034096:tid 1034325] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.410330 2026] [core:error] [pid 1034096:tid 1034325] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.411433 2026] [core:error] [pid 1034096:tid 1034283] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.411453 2026] [core:error] [pid 1034096:tid 1034283] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.412286 2026] [security2:error] [pid 1041789:tid 1041982] [client 20.104.18.15:43986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/ops.php"] [unique_id "apK9vYv3RhPI65jTFG7T3AAAA1E"]
[Sat Aug 29 05:08:45.414803 2026] [security2:error] [pid 1034096:tid 1034324] [client 20.104.18.15:16869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/sym.php"] [unique_id "apK9vS04twRPFuquKD22jQAAAM4"]
[Sat Aug 29 05:08:45.415995 2026] [core:error] [pid 1041789:tid 1042000] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.416012 2026] [core:error] [pid 1041789:tid 1042000] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.416633 2026] [core:error] [pid 1041789:tid 1041985] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.416644 2026] [core:error] [pid 1041789:tid 1041985] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.417616 2026] [security2:error] [pid 1034096:tid 1034278] [client 158.23.184.117:23279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/2.php"] [unique_id "apK9vS04twRPFuquKD22jgAAAKA"]
[Sat Aug 29 05:08:45.420137 2026] [security2:error] [pid 1041789:tid 1041968] [client 4.205.62.107:6942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/localconf.php"] [unique_id "apK9vYv3RhPI65jTFG7T3wAAA0M"]
[Sat Aug 29 05:08:45.421183 2026] [security2:error] [pid 1041789:tid 1041952] [client 20.104.18.15:46016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/admin.php"] [unique_id "apK9vYv3RhPI65jTFG7T4AAAAzM"]
[Sat Aug 29 05:08:45.429399 2026] [core:error] [pid 1034096:tid 1034294] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.429417 2026] [core:error] [pid 1034096:tid 1034294] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.430038 2026] [core:error] [pid 1034096:tid 1034280] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.430052 2026] [core:error] [pid 1034096:tid 1034280] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.451664 2026] [security2:error] [pid 1041789:tid 1042011] [client 40.83.93.50:20804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-admin/user/f35.php"] [unique_id "apK9vYv3RhPI65jTFG7T4wAAA24"]
[Sat Aug 29 05:08:45.453023 2026] [security2:error] [pid 1041789:tid 1041965] [client 4.205.62.107:25940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/hochladen.form.php"] [unique_id "apK9vYv3RhPI65jTFG7T5AAAA0A"]
[Sat Aug 29 05:08:45.455845 2026] [security2:error] [pid 1034096:tid 1034328] [client 20.240.128.207:31072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-includes/admin.php"] [unique_id "apK9vS04twRPFuquKD22lwAAANI"]
[Sat Aug 29 05:08:45.475201 2026] [security2:error] [pid 1034096:tid 1034133] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/client/.env"] [unique_id "apK9vS04twRPFuquKD22ngAAwgs"]
[Sat Aug 29 05:08:45.477664 2026] [core:error] [pid 1034096:tid 1034240] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.477686 2026] [core:error] [pid 1034096:tid 1034240] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.478314 2026] [security2:error] [pid 1034096:tid 1034231] [remote 93.123.109.228:42974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/admin/phpinfo.php"] [unique_id "apK9vS04twRPFuquKD22ogAA2W0"]
[Sat Aug 29 05:08:45.499409 2026] [security2:error] [pid 1034096:tid 1034309] [client 4.205.62.107:60326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/lala.php"] [unique_id "apK9vS04twRPFuquKD22rAAAAL8"]
[Sat Aug 29 05:08:45.500664 2026] [security2:error] [pid 1034096:tid 1034249] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/cms/.env"] [unique_id "apK9vS04twRPFuquKD22qwAAwn8"]
[Sat Aug 29 05:08:45.505677 2026] [core:error] [pid 1034096:tid 1034152] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.505692 2026] [core:error] [pid 1034096:tid 1034152] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.516374 2026] [security2:error] [pid 1034096:tid 1034306] [client 52.139.37.240:19378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9vS04twRPFuquKD22sAAAALw"]
[Sat Aug 29 05:08:45.520269 2026] [security2:error] [pid 1034096:tid 1034194] [remote 93.123.109.228:42974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/admin_phpinfo.php"] [unique_id "apK9vS04twRPFuquKD22swAA2Ug"]
[Sat Aug 29 05:08:45.521868 2026] [core:error] [pid 1034096:tid 1034304] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.521888 2026] [core:error] [pid 1034096:tid 1034304] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.525915 2026] [core:error] [pid 1034096:tid 1034357] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.525934 2026] [core:error] [pid 1034096:tid 1034357] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.527474 2026] [core:error] [pid 1041789:tid 1042021] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.527492 2026] [core:error] [pid 1041789:tid 1042021] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.533782 2026] [core:error] [pid 1041789:tid 1042004] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.533802 2026] [core:error] [pid 1041789:tid 1042004] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.560713 2026] [security2:error] [pid 1034096:tid 1034260] [client 52.139.37.240:12448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/about/function.php"] [unique_id "apK9vS04twRPFuquKD22uAAAAI4"]
[Sat Aug 29 05:08:45.564468 2026] [security2:error] [pid 1034096:tid 1034320] [client 158.23.184.117:23124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/222.php"] [unique_id "apK9vS04twRPFuquKD22uQAAAMo"]
[Sat Aug 29 05:08:45.571955 2026] [security2:error] [pid 1034096:tid 1034285] [client 20.104.49.130:45700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/ano.php"] [unique_id "apK9vS04twRPFuquKD22uwAAAKc"]
[Sat Aug 29 05:08:45.591961 2026] [security2:error] [pid 1034096:tid 1034282] [client 20.104.49.130:47851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/155.php"] [unique_id "apK9vS04twRPFuquKD22xAAAAKQ"]
[Sat Aug 29 05:08:45.593775 2026] [security2:error] [pid 1034096:tid 1034317] [client 20.104.68.135:11731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.east-town.org"] [uri "/sm.php"] [unique_id "apK9vS04twRPFuquKD22xQAAAMc"]
[Sat Aug 29 05:08:45.593907 2026] [security2:error] [pid 1041789:tid 1042010] [client 20.100.175.163:5304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/xxx.php"] [unique_id "apK9vYv3RhPI65jTFG7T7gAAA20"]
[Sat Aug 29 05:08:45.599278 2026] [security2:error] [pid 1041789:tid 1041941] [client 20.197.61.180:1907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/cookie.php"] [unique_id "apK9vYv3RhPI65jTFG7T8AAAAyg"]
[Sat Aug 29 05:08:45.608096 2026] [security2:error] [pid 1041789:tid 1042035] [client 45.148.10.62:40066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wxk.tiz.mybluehost.me"] [uri "/wp-config.php"] [unique_id "apK9vYv3RhPI65jTFG7T8QAAA4Y"]
[Sat Aug 29 05:08:45.609091 2026] [core:error] [pid 1034096:tid 1034340] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.609112 2026] [core:error] [pid 1034096:tid 1034340] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.609957 2026] [core:error] [pid 1034096:tid 1034363] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.609974 2026] [core:error] [pid 1034096:tid 1034363] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.612871 2026] [core:error] [pid 1034096:tid 1034255] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.612888 2026] [core:error] [pid 1034096:tid 1034255] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.613172 2026] [security2:error] [pid 1034096:tid 1034146] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/config.php"] [unique_id "apK9vS04twRPFuquKD220AAAhxg"]
[Sat Aug 29 05:08:45.615173 2026] [security2:error] [pid 1041789:tid 1041984] [client 74.7.230.0:41156] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "muggoentertainment.com"] [uri "/robots.txt"] [unique_id "apK9vYv3RhPI65jTFG7T6gADUwg"]
[Sat Aug 29 05:08:45.617868 2026] [core:error] [pid 1034096:tid 1034324] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.617885 2026] [core:error] [pid 1034096:tid 1034324] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.618004 2026] [core:error] [pid 1034096:tid 1034149] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.618011 2026] [core:error] [pid 1034096:tid 1034149] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.626304 2026] [security2:error] [pid 1034096:tid 1034353] [client 93.123.109.228:48746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK9vS04twRPFuquKD221wAAAOs"]
[Sat Aug 29 05:08:45.635508 2026] [core:error] [pid 1034096:tid 1034265] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.635525 2026] [core:error] [pid 1034096:tid 1034265] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.644751 2026] [security2:error] [pid 1041789:tid 1042042] [client 158.23.147.79:37792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-content/packed.php"] [unique_id "apK9vYv3RhPI65jTFG7T8gAAA40"]
[Sat Aug 29 05:08:45.660387 2026] [security2:error] [pid 1041789:tid 1042043] [client 20.197.61.180:12769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/post.php"] [unique_id "apK9vYv3RhPI65jTFG7T9AAAA44"]
[Sat Aug 29 05:08:45.662910 2026] [security2:error] [pid 1034096:tid 1034144] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/config/.env"] [unique_id "apK9vS04twRPFuquKD224AAAshY"]
[Sat Aug 29 05:08:45.675691 2026] [security2:error] [pid 1034096:tid 1034236] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/config/aws.php"] [unique_id "apK9vS04twRPFuquKD225QAAsnI"]
[Sat Aug 29 05:08:45.681239 2026] [core:error] [pid 1034096:tid 1034132] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.681259 2026] [core:error] [pid 1034096:tid 1034132] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.693967 2026] [core:error] [pid 1034096:tid 1034287] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.693987 2026] [core:error] [pid 1034096:tid 1034287] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.694761 2026] [core:error] [pid 1041789:tid 1042050] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.694779 2026] [core:error] [pid 1041789:tid 1042050] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.705952 2026] [security2:error] [pid 1034096:tid 1034365] [client 68.155.159.216:23432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/file17.php"] [unique_id "apK9vS04twRPFuquKD228AAAAPc"]
[Sat Aug 29 05:08:45.708831 2026] [core:error] [pid 1034096:tid 1034145] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.708851 2026] [core:error] [pid 1034096:tid 1034145] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.711721 2026] [security2:error] [pid 1041789:tid 1042049] [client 158.23.184.117:23121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/24.php"] [unique_id "apK9vYv3RhPI65jTFG7T9wAAA5Q"]
[Sat Aug 29 05:08:45.721171 2026] [security2:error] [pid 1034096:tid 1034368] [client 93.123.109.228:48770] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/admin-app/.env"] [unique_id "apK9vS04twRPFuquKD229wAAAPo"]
[Sat Aug 29 05:08:45.721782 2026] [security2:error] [pid 1034096:tid 1034359] [client 20.151.200.44:64502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/h02ugyh.php"] [unique_id "apK9vS04twRPFuquKD22-AAAAPE"]
[Sat Aug 29 05:08:45.723443 2026] [security2:error] [pid 1034096:tid 1034188] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/config/config.inc.php"] [unique_id "apK9vS04twRPFuquKD22-wAAv0I"]
[Sat Aug 29 05:08:45.726831 2026] [core:error] [pid 1034096:tid 1034137] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.726857 2026] [core:error] [pid 1034096:tid 1034137] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.734594 2026] [security2:error] [pid 1034096:tid 1034327] [client 158.23.147.79:6012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/content.php"] [unique_id "apK9vS04twRPFuquKD22_AAAANE"]
[Sat Aug 29 05:08:45.746531 2026] [core:error] [pid 1034096:tid 1034369] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.746551 2026] [core:error] [pid 1034096:tid 1034369] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.752367 2026] [security2:error] [pid 1034096:tid 1034306] [client 4.205.62.107:56016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/ws62.php"] [unique_id "apK9vS04twRPFuquKD22_gAAALw"]
[Sat Aug 29 05:08:45.759321 2026] [security2:error] [pid 1034096:tid 1034232] [remote 93.123.109.228:42974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/api/info.php"] [unique_id "apK9vS04twRPFuquKD23AgAA6W4"]
[Sat Aug 29 05:08:45.762197 2026] [security2:error] [pid 1034096:tid 1034332] [client 68.155.159.216:33576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK9vS04twRPFuquKD23BAAAANY"]
[Sat Aug 29 05:08:45.764200 2026] [core:error] [pid 1034096:tid 1034131] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.764215 2026] [core:error] [pid 1034096:tid 1034131] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.766078 2026] [core:error] [pid 1034096:tid 1034181] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.766096 2026] [core:error] [pid 1034096:tid 1034181] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.768193 2026] [security2:error] [pid 1034096:tid 1034263] [client 195.178.110.247:32960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lmdogs.com"] [uri "/index.php"] [unique_id "apK9vS04twRPFuquKD23CAAAAJE"]
[Sat Aug 29 05:08:45.769456 2026] [security2:error] [pid 1034096:tid 1034190] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/config/config.php"] [unique_id "apK9vS04twRPFuquKD23CQAAzEQ"]
[Sat Aug 29 05:08:45.772267 2026] [core:error] [pid 1034096:tid 1034180] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.772285 2026] [core:error] [pid 1034096:tid 1034180] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.772602 2026] [security2:error] [pid 1041789:tid 1042052] [client 52.139.37.240:12488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/an.php"] [unique_id "apK9vYv3RhPI65jTFG7T_AAAA5c"]
[Sat Aug 29 05:08:45.774245 2026] [security2:error] [pid 1041789:tid 1042025] [client 45.148.10.62:40092] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "mail.wxd.mej.mybluehost.me"] [uri "/wp-config.php.old"] [unique_id "apK9vYv3RhPI65jTFG7T_QAAA3w"]
[Sat Aug 29 05:08:45.787081 2026] [security2:error] [pid 1034096:tid 1034315] [client 45.148.10.62:40078] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "mail.wxg.uhf.mybluehost.me"] [uri "/wp-config.php.old"] [unique_id "apK9vS04twRPFuquKD23DQAAAMU"]
[Sat Aug 29 05:08:45.794585 2026] [security2:error] [pid 1041789:tid 1042045] [client 20.52.41.200:4583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/gmo.php"] [unique_id "apK9vYv3RhPI65jTFG7T_wAAA5A"]
[Sat Aug 29 05:08:45.799732 2026] [security2:error] [pid 1041789:tid 1041977] [client 20.104.68.135:3066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.east-town.org"] [uri "/shell.php"] [unique_id "apK9vYv3RhPI65jTFG7UAAAAA0w"]
[Sat Aug 29 05:08:45.799970 2026] [core:error] [pid 1034096:tid 1034155] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.799984 2026] [core:error] [pid 1034096:tid 1034155] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.802203 2026] [core:error] [pid 1034096:tid 1034173] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.802222 2026] [core:error] [pid 1034096:tid 1034173] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.829872 2026] [security2:error] [pid 1041789:tid 1041964] [client 52.139.37.240:19350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/wp-index.php"] [unique_id "apK9vYv3RhPI65jTFG7UAQAAAz8"]
[Sat Aug 29 05:08:45.833321 2026] [security2:error] [pid 1034096:tid 1034307] [client 158.158.54.35:31646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/x.php"] [unique_id "apK9vS04twRPFuquKD23EwAAAL0"]
[Sat Aug 29 05:08:45.833726 2026] [security2:error] [pid 1034096:tid 1034323] [client 93.123.109.228:48836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/admin/phpinfo.php"] [unique_id "apK9vS04twRPFuquKD23FAAAAM0"]
[Sat Aug 29 05:08:45.840958 2026] [security2:error] [pid 1041789:tid 1041980] [client 4.205.62.107:22168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/G-in.php"] [unique_id "apK9vYv3RhPI65jTFG7UAgAAA08"]
[Sat Aug 29 05:08:45.853491 2026] [security2:error] [pid 1041789:tid 1041991] [client 40.83.93.50:13226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/essexec.php"] [unique_id "apK9vYv3RhPI65jTFG7UBAAAA1o"]
[Sat Aug 29 05:08:45.854734 2026] [security2:error] [pid 1034096:tid 1034193] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/config/env.php"] [unique_id "apK9vS04twRPFuquKD23FwAA_kc"]
[Sat Aug 29 05:08:45.855865 2026] [security2:error] [pid 1034096:tid 1034274] [client 68.155.159.216:33689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK9vS04twRPFuquKD23GQAAAJw"]
[Sat Aug 29 05:08:45.858114 2026] [security2:error] [pid 1034096:tid 1034134] [remote 93.123.109.228:42974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/api/phpinfo.php"] [unique_id "apK9vS04twRPFuquKD23GwAA2Qw"]
[Sat Aug 29 05:08:45.858921 2026] [security2:error] [pid 1034096:tid 1034371] [client 74.248.24.12:22896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/images/index.php"] [unique_id "apK9vS04twRPFuquKD23HAAAAP0"]
[Sat Aug 29 05:08:45.860489 2026] [core:error] [pid 1034096:tid 1034170] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.860514 2026] [core:error] [pid 1034096:tid 1034170] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.861794 2026] [security2:error] [pid 1034096:tid 1034310] [client 40.83.93.50:48040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/hello.php"] [unique_id "apK9vS04twRPFuquKD23HgAAAMA"]
[Sat Aug 29 05:08:45.863669 2026] [security2:error] [pid 1034096:tid 1034329] [client 158.23.184.117:23243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/3pjcpmfsd8b.php"] [unique_id "apK9vS04twRPFuquKD23IQAAANM"]
[Sat Aug 29 05:08:45.872928 2026] [security2:error] [pid 1034096:tid 1034342] [client 93.123.109.228:48808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/admin_phpinfo.php"] [unique_id "apK9vS04twRPFuquKD23IgAAAOA"]
[Sat Aug 29 05:08:45.883713 2026] [security2:error] [pid 1041789:tid 1042040] [client 4.232.148.111:35325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/goods.php"] [unique_id "apK9vYv3RhPI65jTFG7UBQAAA4s"]
[Sat Aug 29 05:08:45.892535 2026] [security2:error] [pid 1034096:tid 1034340] [client 93.123.109.228:48758] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/administrator/.env"] [unique_id "apK9vS04twRPFuquKD23JAAAAN4"]
[Sat Aug 29 05:08:45.893978 2026] [security2:error] [pid 1034096:tid 1034269] [client 93.123.109.228:48770] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/api-backend/.env"] [unique_id "apK9vS04twRPFuquKD23JQAAAJc"]
[Sat Aug 29 05:08:45.900473 2026] [security2:error] [pid 1034096:tid 1034363] [client 4.205.62.107:8905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/server_info.php"] [unique_id "apK9vS04twRPFuquKD23JgAAAPU"]
[Sat Aug 29 05:08:45.911928 2026] [security2:error] [pid 1034096:tid 1034311] [client 93.123.109.228:48736] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/api-node/.env"] [unique_id "apK9vS04twRPFuquKD23JwAAAME"]
[Sat Aug 29 05:08:45.922912 2026] [security2:error] [pid 1034096:tid 1034177] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/config/module.config.php"] [unique_id "apK9vS04twRPFuquKD23KwAA8zc"]
[Sat Aug 29 05:08:45.924596 2026] [security2:error] [pid 1034096:tid 1034177] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/config/nexmo.php"] [unique_id "apK9vS04twRPFuquKD23LAAA8zc"]
[Sat Aug 29 05:08:45.929039 2026] [security2:error] [pid 1041789:tid 1041946] [client 40.83.93.50:12950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-admin/user/min.php"] [unique_id "apK9vYv3RhPI65jTFG7UCAAAAy0"]
[Sat Aug 29 05:08:45.930931 2026] [security2:error] [pid 1041789:tid 1042056] [client 195.178.110.247:51720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lmdogs.com"] [uri "/index.php"] [unique_id "apK9vYv3RhPI65jTFG7UCQAAA5s"]
[Sat Aug 29 05:08:45.936022 2026] [security2:error] [pid 1041789:tid 1042005] [client 158.23.147.79:26586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-content/x.php"] [unique_id "apK9vYv3RhPI65jTFG7UCgAAA2g"]
[Sat Aug 29 05:08:45.936807 2026] [security2:error] [pid 1034096:tid 1034266] [client 45.148.10.62:40094] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "mail.wxe.rvy.mybluehost.me"] [uri "/wp-config.php.old"] [unique_id "apK9vS04twRPFuquKD23LgAAAJQ"]
[Sat Aug 29 05:08:45.939063 2026] [core:error] [pid 1034096:tid 1034160] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.939088 2026] [core:error] [pid 1034096:tid 1034160] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.946158 2026] [core:error] [pid 1034096:tid 1034189] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.946184 2026] [core:error] [pid 1034096:tid 1034189] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.947391 2026] [security2:error] [pid 1041789:tid 1041949] [client 158.23.147.79:50073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/goat1.php"] [unique_id "apK9vYv3RhPI65jTFG7UCwAAAzA"]
[Sat Aug 29 05:08:45.951584 2026] [security2:error] [pid 1034096:tid 1034259] [client 93.123.109.228:48754] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/api/.env"] [unique_id "apK9vS04twRPFuquKD23NAAAAI0"]
[Sat Aug 29 05:08:45.964049 2026] [security2:error] [pid 1034096:tid 1034272] [client 20.197.61.180:12785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/essexec.php"] [unique_id "apK9vS04twRPFuquKD23PQAAAJo"]
[Sat Aug 29 05:08:45.964582 2026] [core:error] [pid 1041789:tid 1042009] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.964601 2026] [core:error] [pid 1041789:tid 1042009] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.966192 2026] [security2:error] [pid 1034096:tid 1034272] [client 68.155.159.216:65068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK9vS04twRPFuquKD23QgAAAJo"]
[Sat Aug 29 05:08:45.970975 2026] [core:error] [pid 1034096:tid 1034204] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.970994 2026] [core:error] [pid 1034096:tid 1034204] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.971837 2026] [security2:error] [pid 1041789:tid 1041935] [client 68.155.159.216:49268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-admin/css/index.php"] [unique_id "apK9vYv3RhPI65jTFG7UDwAAAyI"]
[Sat Aug 29 05:08:45.974420 2026] [security2:error] [pid 1034096:tid 1034197] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/config/stripe.php"] [unique_id "apK9vS04twRPFuquKD23RgAA80s"]
[Sat Aug 29 05:08:45.980182 2026] [core:error] [pid 1034096:tid 1034216] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.980199 2026] [core:error] [pid 1034096:tid 1034216] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.985709 2026] [core:error] [pid 1034096:tid 1034344] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.985727 2026] [core:error] [pid 1034096:tid 1034344] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.988142 2026] [security2:error] [pid 1034096:tid 1034347] [client 91.92.47.191:58872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.corrigansbasement.com"] [uri "/wp-config.php"] [unique_id "apK9vS04twRPFuquKD23TAAAAOU"]
[Sat Aug 29 05:08:45.988316 2026] [core:error] [pid 1041789:tid 1041956] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.988330 2026] [core:error] [pid 1041789:tid 1041956] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.989717 2026] [core:error] [pid 1041789:tid 1041957] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.989732 2026] [core:error] [pid 1041789:tid 1041957] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.990729 2026] [core:error] [pid 1034096:tid 1034353] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.990745 2026] [core:error] [pid 1034096:tid 1034353] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:45.995323 2026] [security2:error] [pid 1041789:tid 1041993] [client 52.139.37.240:12526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/asw.php"] [unique_id "apK9vYv3RhPI65jTFG7UFAAAA1w"]
[Sat Aug 29 05:08:46.001025 2026] [security2:error] [pid 1041789:tid 1041990] [client 20.104.68.135:3023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.east-town.org"] [uri "/simple.php"] [unique_id "apK9vYv3RhPI65jTFG7UFQAAA1k"]
[Sat Aug 29 05:08:46.002351 2026] [core:error] [pid 1034096:tid 1034218] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.002380 2026] [core:error] [pid 1034096:tid 1034218] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.003313 2026] [core:error] [pid 1034096:tid 1034164] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.003323 2026] [core:error] [pid 1034096:tid 1034164] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.012525 2026] [security2:error] [pid 1034096:tid 1034293] [client 158.23.184.117:23106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fox-mart.com"] [uri "/403.php"] [unique_id "apK9vi04twRPFuquKD23VQAAAK8"]
[Sat Aug 29 05:08:46.017889 2026] [core:error] [pid 1034096:tid 1034370] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.017910 2026] [core:error] [pid 1034096:tid 1034370] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.019646 2026] [security2:error] [pid 1041789:tid 1042054] [client 20.197.61.180:1058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/meta.php"] [unique_id "apK9vov3RhPI65jTFG7UFgAAA5k"]
[Sat Aug 29 05:08:46.026667 2026] [security2:error] [pid 1041789:tid 1041968] [client 158.23.147.79:17572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK9vov3RhPI65jTFG7UGAAAA0M"]
[Sat Aug 29 05:08:46.039397 2026] [security2:error] [pid 1034096:tid 1034301] [client 52.139.37.240:19367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/ww2.php"] [unique_id "apK9vi04twRPFuquKD23XQAAALc"]
[Sat Aug 29 05:08:46.041319 2026] [security2:error] [pid 1034096:tid 1034298] [client 93.123.109.228:48758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/api/info.php"] [unique_id "apK9vi04twRPFuquKD23XgAAALQ"]
[Sat Aug 29 05:08:46.046664 2026] [security2:error] [pid 1034096:tid 1034319] [client 68.155.159.216:18422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/cgi-bin/index.php"] [unique_id "apK9vi04twRPFuquKD23YQAAAMk"]
[Sat Aug 29 05:08:46.048522 2026] [security2:error] [pid 1041789:tid 1041962] [client 20.151.200.44:63837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/shelp.php"] [unique_id "apK9vov3RhPI65jTFG7UGgAAAz0"]
[Sat Aug 29 05:08:46.058598 2026] [core:error] [pid 1034096:tid 1034309] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.058627 2026] [core:error] [pid 1034096:tid 1034309] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.086051 2026] [security2:error] [pid 1034096:tid 1034332] [client 91.92.47.191:58900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "corrigansbasement.rocworx.com"] [uri "/settings.php"] [unique_id "apK9vi04twRPFuquKD23ZAAAANY"]
[Sat Aug 29 05:08:46.091747 2026] [core:error] [pid 1041789:tid 1042001] [client 20.100.175.163:12802] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.091763 2026] [core:error] [pid 1041789:tid 1042001] [client 20.100.175.163:12802] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.101378 2026] [security2:error] [pid 1041789:tid 1042013] [client 68.155.159.216:6044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-content/x/index.php"] [unique_id "apK9vov3RhPI65jTFG7UHgAAA3A"]
[Sat Aug 29 05:08:46.131222 2026] [security2:error] [pid 1034096:tid 1034374] [client 68.155.159.216:9248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-mail.php"] [unique_id "apK9vi04twRPFuquKD23bwAAAQA"]
[Sat Aug 29 05:08:46.131298 2026] [security2:error] [pid 1034096:tid 1034265] [client 45.148.10.62:40108] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "mail.wxk.tiz.mybluehost.me"] [uri "/wp-config.php.old"] [unique_id "apK9vi04twRPFuquKD23cAAAAJM"]
[Sat Aug 29 05:08:46.141672 2026] [core:error] [pid 1041789:tid 1042018] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.141689 2026] [core:error] [pid 1041789:tid 1042018] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.146513 2026] [security2:error] [pid 1034096:tid 1034307] [client 93.123.109.228:48802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/api/phpinfo.php"] [unique_id "apK9vi04twRPFuquKD23dQAAAL0"]
[Sat Aug 29 05:08:46.159706 2026] [security2:error] [pid 1034096:tid 1034323] [client 20.240.128.207:7389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/lock360.php"] [unique_id "apK9vi04twRPFuquKD23egAAAM0"]
[Sat Aug 29 05:08:46.161075 2026] [core:error] [pid 1034096:tid 1034200] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.161090 2026] [core:error] [pid 1034096:tid 1034200] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.161849 2026] [core:error] [pid 1034096:tid 1034229] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.161868 2026] [core:error] [pid 1034096:tid 1034229] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.162968 2026] [security2:error] [pid 1034096:tid 1034241] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/crm/.env"] [unique_id "apK9vi04twRPFuquKD23fAAAyHc"]
[Sat Aug 29 05:08:46.174996 2026] [security2:error] [pid 1034096:tid 1034243] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/cron/.env"] [unique_id "apK9vi04twRPFuquKD23ggAAyHk"]
[Sat Aug 29 05:08:46.175713 2026] [security2:error] [pid 1041789:tid 1042023] [client 68.155.159.216:24451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/.well-knownold/index.php"] [unique_id "apK9vov3RhPI65jTFG7UJAAAA3o"]
[Sat Aug 29 05:08:46.177194 2026] [core:error] [pid 1034096:tid 1034372] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.177212 2026] [core:error] [pid 1034096:tid 1034372] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.179765 2026] [core:error] [pid 1034096:tid 1034221] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.179784 2026] [core:error] [pid 1034096:tid 1034221] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.197150 2026] [security2:error] [pid 1041789:tid 1042017] [client 20.104.68.135:3035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.east-town.org"] [uri "/wp-admin.php"] [unique_id "apK9vov3RhPI65jTFG7UJgAAA3Q"]
[Sat Aug 29 05:08:46.208650 2026] [core:error] [pid 1034096:tid 1034233] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.208668 2026] [core:error] [pid 1034096:tid 1034233] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.209877 2026] [security2:error] [pid 1034096:tid 1034320] [client 52.139.37.240:12457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/item.php"] [unique_id "apK9vi04twRPFuquKD23jwAAAMo"]
[Sat Aug 29 05:08:46.211219 2026] [core:error] [pid 1034096:tid 1034224] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.211234 2026] [core:error] [pid 1034096:tid 1034224] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.212842 2026] [core:error] [pid 1041789:tid 1042015] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.212856 2026] [core:error] [pid 1041789:tid 1042015] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.218180 2026] [core:error] [pid 1041789:tid 1042024] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.218201 2026] [core:error] [pid 1041789:tid 1042024] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.219613 2026] [security2:error] [pid 1034096:tid 1034220] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/current/.env"] [unique_id "apK9vi04twRPFuquKD23kwAAyGI"]
[Sat Aug 29 05:08:46.223599 2026] [core:error] [pid 1041789:tid 1042026] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.223614 2026] [core:error] [pid 1041789:tid 1042026] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.232657 2026] [security2:error] [pid 1034096:tid 1034355] [client 20.52.41.200:4598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/classwithtostring.php"] [unique_id "apK9vi04twRPFuquKD23lwAAAO0"]
[Sat Aug 29 05:08:46.236535 2026] [security2:error] [pid 1034096:tid 1034274] [client 52.139.37.240:19298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/7logs.php"] [unique_id "apK9vi04twRPFuquKD23mwAAAJw"]
[Sat Aug 29 05:08:46.261398 2026] [security2:error] [pid 1034096:tid 1034316] [client 93.123.109.228:48770] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/apis/.env"] [unique_id "apK9vi04twRPFuquKD23nwAAAMY"]
[Sat Aug 29 05:08:46.269177 2026] [core:error] [pid 1041789:tid 1042035] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.269195 2026] [core:error] [pid 1041789:tid 1042035] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.278473 2026] [security2:error] [pid 1034096:tid 1034315] [client 158.158.54.35:34683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/new.php"] [unique_id "apK9vi04twRPFuquKD23owAAAMU"]
[Sat Aug 29 05:08:46.282756 2026] [core:error] [pid 1041789:tid 1042031] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.282776 2026] [core:error] [pid 1041789:tid 1042031] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.288421 2026] [security2:error] [pid 1034096:tid 1034353] [client 68.155.159.216:1988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-admin/about.php"] [unique_id "apK9vi04twRPFuquKD23pgAAAOs"]
[Sat Aug 29 05:08:46.289203 2026] [core:error] [pid 1034096:tid 1034321] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.289219 2026] [core:error] [pid 1034096:tid 1034321] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.292003 2026] [security2:error] [pid 1034096:tid 1034128] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/demo/.env"] [unique_id "apK9vi04twRPFuquKD23pwAAyAY"]
[Sat Aug 29 05:08:46.309971 2026] [security2:error] [pid 1034096:tid 1034152] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/dev/.env"] [unique_id "apK9vi04twRPFuquKD23rgAAhx4"]
[Sat Aug 29 05:08:46.314267 2026] [core:error] [pid 1034096:tid 1034238] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.314282 2026] [core:error] [pid 1034096:tid 1034238] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.321078 2026] [security2:error] [pid 1034096:tid 1034133] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/develop/.env"] [unique_id "apK9vi04twRPFuquKD23sAAAhws"]
[Sat Aug 29 05:08:46.333970 2026] [security2:error] [pid 1034096:tid 1034194] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/developer/.env"] [unique_id "apK9vi04twRPFuquKD23sgAAh0g"]
[Sat Aug 29 05:08:46.335282 2026] [security2:error] [pid 1034096:tid 1034325] [client 20.151.200.44:63825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/13ede.php"] [unique_id "apK9vi04twRPFuquKD23tAAAAM8"]
[Sat Aug 29 05:08:46.337049 2026] [security2:error] [pid 1034096:tid 1034126] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/development/.env"] [unique_id "apK9vi04twRPFuquKD23tQAAhwQ"]
[Sat Aug 29 05:08:46.339765 2026] [core:error] [pid 1034096:tid 1034365] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.339786 2026] [core:error] [pid 1034096:tid 1034365] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.341666 2026] [security2:error] [pid 1034096:tid 1034262] [client 93.123.109.228:48854] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/app/.env"] [unique_id "apK9vi04twRPFuquKD23twAAAJA"]
[Sat Aug 29 05:08:46.355199 2026] [security2:error] [pid 1041789:tid 1042008] [client 40.83.93.50:48012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/fi2.php"] [unique_id "apK9vov3RhPI65jTFG7UMAAAA2s"]
[Sat Aug 29 05:08:46.356112 2026] [security2:error] [pid 1034096:tid 1034269] [client 4.232.148.111:18855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/css.php"] [unique_id "apK9vi04twRPFuquKD23vAAAAJc"]
[Sat Aug 29 05:08:46.369312 2026] [security2:error] [pid 1034096:tid 1034266] [client 45.148.10.62:40112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wxg.uhf.mybluehost.me"] [uri "/config.php"] [unique_id "apK9vi04twRPFuquKD23vgAAAJQ"]
[Sat Aug 29 05:08:46.371512 2026] [security2:error] [pid 1034096:tid 1034319] [client 158.23.147.79:11277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/xmlrpc.php"] [unique_id "apK9vi04twRPFuquKD23vQAAAMk"]
[Sat Aug 29 05:08:46.378218 2026] [security2:error] [pid 1034096:tid 1034255] [client 40.83.93.50:14618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/hello.php"] [unique_id "apK9vi04twRPFuquKD23xAAAAIk"]
[Sat Aug 29 05:08:46.382902 2026] [security2:error] [pid 1041789:tid 1042041] [client 68.155.159.216:65117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK9vov3RhPI65jTFG7UMwAAA4w"]
[Sat Aug 29 05:08:46.385418 2026] [core:error] [pid 1034096:tid 1034162] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.385443 2026] [core:error] [pid 1034096:tid 1034162] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.397175 2026] [security2:error] [pid 1034096:tid 1034296] [client 20.104.68.135:11721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.east-town.org"] [uri "/wp-admin/includes/about.php"] [unique_id "apK9vi04twRPFuquKD23ywAAALI"]
[Sat Aug 29 05:08:46.400061 2026] [core:error] [pid 1034096:tid 1034328] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.400076 2026] [core:error] [pid 1034096:tid 1034328] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.400497 2026] [core:error] [pid 1034096:tid 1034263] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.400523 2026] [core:error] [pid 1034096:tid 1034263] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.405192 2026] [security2:error] [pid 1034096:tid 1034283] [client 52.139.37.240:12517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/jga.php"] [unique_id "apK9vi04twRPFuquKD230QAAAKU"]
[Sat Aug 29 05:08:46.409574 2026] [security2:error] [pid 1034096:tid 1034339] [client 40.83.93.50:12946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-admin/users.php"] [unique_id "apK9vi04twRPFuquKD230gAAAN0"]
[Sat Aug 29 05:08:46.437068 2026] [core:error] [pid 1034096:tid 1034260] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.437082 2026] [core:error] [pid 1034096:tid 1034260] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.442650 2026] [security2:error] [pid 1034096:tid 1034297] [client 52.139.37.240:19266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/ac.php"] [unique_id "apK9vi04twRPFuquKD232gAAALM"]
[Sat Aug 29 05:08:46.447166 2026] [security2:error] [pid 1034096:tid 1034367] [client 45.148.10.62:40116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wxd.mej.mybluehost.me"] [uri "/config.php"] [unique_id "apK9vi04twRPFuquKD232wAAAPk"]
[Sat Aug 29 05:08:46.451485 2026] [core:error] [pid 1034096:tid 1034346] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.451508 2026] [core:error] [pid 1034096:tid 1034346] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.457619 2026] [security2:error] [pid 1034096:tid 1034310] [client 20.63.219.114:19864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/post.php"] [unique_id "apK9vi04twRPFuquKD233wAAAMA"]
[Sat Aug 29 05:08:46.466759 2026] [security2:error] [pid 1041789:tid 1042048] [client 4.205.62.107:58407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/fm.php"] [unique_id "apK9vov3RhPI65jTFG7UNgAAA5M"]
[Sat Aug 29 05:08:46.467799 2026] [security2:error] [pid 1041789:tid 1041999] [client 20.197.61.180:1992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/NewFile.php"] [unique_id "apK9vov3RhPI65jTFG7UNwAAA2I"]
[Sat Aug 29 05:08:46.471435 2026] [core:error] [pid 1034096:tid 1034143] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.471452 2026] [core:error] [pid 1034096:tid 1034143] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.493085 2026] [security2:error] [pid 1034096:tid 1034272] [client 20.197.61.180:1885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/flower.php"] [unique_id "apK9vi04twRPFuquKD238wAAAJo"]
[Sat Aug 29 05:08:46.493806 2026] [security2:error] [pid 1034096:tid 1034344] [client 158.23.147.79:17602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK9vi04twRPFuquKD239AAAAOI"]
[Sat Aug 29 05:08:46.498683 2026] [core:error] [pid 1034096:tid 1034145] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.498698 2026] [core:error] [pid 1034096:tid 1034145] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.518568 2026] [core:error] [pid 1041789:tid 1042057] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.518587 2026] [core:error] [pid 1041789:tid 1042057] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.529894 2026] [core:error] [pid 1034096:tid 1034350] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.529921 2026] [core:error] [pid 1034096:tid 1034350] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.531115 2026] [core:error] [pid 1034096:tid 1034363] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.531139 2026] [core:error] [pid 1034096:tid 1034363] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.533521 2026] [core:error] [pid 1034096:tid 1034356] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.533537 2026] [core:error] [pid 1034096:tid 1034356] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.534260 2026] [core:error] [pid 1034096:tid 1034324] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.534272 2026] [core:error] [pid 1034096:tid 1034324] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.534703 2026] [core:error] [pid 1041789:tid 1042045] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.534718 2026] [core:error] [pid 1041789:tid 1042045] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.534972 2026] [core:error] [pid 1034096:tid 1034321] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.534981 2026] [core:error] [pid 1034096:tid 1034321] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.535974 2026] [core:error] [pid 1034096:tid 1034303] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.535992 2026] [core:error] [pid 1034096:tid 1034303] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.537126 2026] [core:error] [pid 1034096:tid 1034251] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.537146 2026] [core:error] [pid 1034096:tid 1034251] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.555991 2026] [security2:error] [pid 1034096:tid 1034270] [client 4.205.62.107:6955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/bengi.php"] [unique_id "apK9vi04twRPFuquKD24AgAAAJg"]
[Sat Aug 29 05:08:46.557582 2026] [security2:error] [pid 1034096:tid 1034293] [client 158.23.147.79:35220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "website-e6f9789b.mcconnellsweb.com"] [uri "/first.php"] [unique_id "apK9vi04twRPFuquKD24AwAAAK8"]
[Sat Aug 29 05:08:46.558558 2026] [security2:error] [pid 1041789:tid 1041991] [client 74.248.24.12:5702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/inputs.php"] [unique_id "apK9vov3RhPI65jTFG7UQAAAA1o"]
[Sat Aug 29 05:08:46.558677 2026] [security2:error] [pid 1041789:tid 1041976] [client 158.23.147.79:6133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-includes/css/index.php"] [unique_id "apK9vov3RhPI65jTFG7UQQAAA0s"]
[Sat Aug 29 05:08:46.561511 2026] [security2:error] [pid 1041789:tid 1042014] [client 93.123.109.228:48868] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/application/.env"] [unique_id "apK9vov3RhPI65jTFG7UQgAAA3E"]
[Sat Aug 29 05:08:46.574057 2026] [security2:error] [pid 1034096:tid 1034287] [client 93.123.109.228:48742] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/apps/.env"] [unique_id "apK9vi04twRPFuquKD24BQAAAKk"]
[Sat Aug 29 05:08:46.594751 2026] [security2:error] [pid 1034096:tid 1034282] [client 45.148.10.62:40132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wxe.rvy.mybluehost.me"] [uri "/config.php"] [unique_id "apK9vi04twRPFuquKD24BwAAAKQ"]
[Sat Aug 29 05:08:46.595746 2026] [security2:error] [pid 1041789:tid 1041977] [client 20.104.68.135:24273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.east-town.org"] [uri "/wp-admin/js/index.php"] [unique_id "apK9vov3RhPI65jTFG7UQwAAA0w"]
[Sat Aug 29 05:08:46.600304 2026] [security2:error] [pid 1034096:tid 1034328] [client 4.205.62.107:25970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/debuggen.php"] [unique_id "apK9vi04twRPFuquKD24CQAAANI"]
[Sat Aug 29 05:08:46.602578 2026] [core:error] [pid 1034096:tid 1034265] [client 20.100.175.163:5293] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.602595 2026] [core:error] [pid 1034096:tid 1034265] [client 20.100.175.163:5293] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.610200 2026] [security2:error] [pid 1041789:tid 1041980] [client 52.139.37.240:12908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/mac.php"] [unique_id "apK9vov3RhPI65jTFG7URAAAA08"]
[Sat Aug 29 05:08:46.637122 2026] [security2:error] [pid 1041789:tid 1041946] [client 4.205.62.107:62746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/public/bnn_.php.php"] [unique_id "apK9vov3RhPI65jTFG7URgAAAy0"]
[Sat Aug 29 05:08:46.648452 2026] [security2:error] [pid 1034096:tid 1034176] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/erp/.env"] [unique_id "apK9vi04twRPFuquKD24EQAApzY"]
[Sat Aug 29 05:08:46.659340 2026] [security2:error] [pid 1041789:tid 1041955] [client 52.139.37.240:19353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/ctex1.php"] [unique_id "apK9vov3RhPI65jTFG7USQAAAzY"]
[Sat Aug 29 05:08:46.660315 2026] [security2:error] [pid 1041789:tid 1041933] [client 20.240.128.207:27526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-conflg.php"] [unique_id "apK9vov3RhPI65jTFG7USgAAAyA"]
[Sat Aug 29 05:08:46.664441 2026] [core:error] [pid 1034096:tid 1034369] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.664461 2026] [core:error] [pid 1034096:tid 1034369] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.676089 2026] [security2:error] [pid 1034096:tid 1034155] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/etc/apache2/apache2.conf"] [unique_id "apK9vi04twRPFuquKD24HwAApyE"]
[Sat Aug 29 05:08:46.676115 2026] [security2:error] [pid 1034096:tid 1034372] [client 20.197.61.180:1036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/hello.php"] [unique_id "apK9vi04twRPFuquKD24IQAAAP4"]
[Sat Aug 29 05:08:46.681142 2026] [security2:error] [pid 1041789:tid 1041964] [client 20.52.41.200:4398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/404.php"] [unique_id "apK9vov3RhPI65jTFG7UTQAAAz8"]
[Sat Aug 29 05:08:46.691512 2026] [core:error] [pid 1041789:tid 1042006] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.691529 2026] [core:error] [pid 1041789:tid 1042006] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.695199 2026] [security2:error] [pid 1034096:tid 1034161] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/front/.env"] [unique_id "apK9vi04twRPFuquKD24JQAApyc"]
[Sat Aug 29 05:08:46.702851 2026] [core:error] [pid 1034096:tid 1034307] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.702872 2026] [core:error] [pid 1034096:tid 1034307] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.706028 2026] [security2:error] [pid 1034096:tid 1034166] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/frontend/.env"] [unique_id "apK9vi04twRPFuquKD24KgAApyw"]
[Sat Aug 29 05:08:46.706833 2026] [core:error] [pid 1041789:tid 1041978] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.706849 2026] [core:error] [pid 1041789:tid 1041978] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.712194 2026] [security2:error] [pid 1034096:tid 1034170] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/etc/boto.cfg"] [unique_id "apK9vi04twRPFuquKD24LQAA0zA"]
[Sat Aug 29 05:08:46.714892 2026] [security2:error] [pid 1034096:tid 1034286] [client 45.148.10.62:40148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wxk.tiz.mybluehost.me"] [uri "/config.php"] [unique_id "apK9vi04twRPFuquKD24LgAAAKg"]
[Sat Aug 29 05:08:46.718445 2026] [security2:error] [pid 1034096:tid 1034172] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/fe/.env"] [unique_id "apK9vi04twRPFuquKD24MAAAwDI"]
[Sat Aug 29 05:08:46.722964 2026] [security2:error] [pid 1041789:tid 1042040] [client 158.158.54.35:1840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/menu.php"] [unique_id "apK9vov3RhPI65jTFG7UVQAAA4s"]
[Sat Aug 29 05:08:46.744841 2026] [security2:error] [pid 1041789:tid 1041986] [client 68.155.159.216:38703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-content/x/index.php"] [unique_id "apK9vov3RhPI65jTFG7UWgAAA1U"]
[Sat Aug 29 05:08:46.747171 2026] [core:error] [pid 1041789:tid 1041945] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.747191 2026] [core:error] [pid 1041789:tid 1041945] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.750745 2026] [core:error] [pid 1041789:tid 1041994] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.750761 2026] [core:error] [pid 1041789:tid 1041994] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.751968 2026] [core:error] [pid 1034096:tid 1034272] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.751988 2026] [core:error] [pid 1034096:tid 1034272] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.753494 2026] [core:error] [pid 1041789:tid 1041962] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.753518 2026] [core:error] [pid 1041789:tid 1041962] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.753609 2026] [core:error] [pid 1034096:tid 1034316] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.753617 2026] [core:error] [pid 1034096:tid 1034316] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.760290 2026] [security2:error] [pid 1041789:tid 1042042] [client 20.197.61.180:1909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/randkeyword.php"] [unique_id "apK9vov3RhPI65jTFG7UXgAAA40"]
[Sat Aug 29 05:08:46.768946 2026] [core:error] [pid 1041789:tid 1042012] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.768967 2026] [core:error] [pid 1041789:tid 1042012] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.772147 2026] [security2:error] [pid 1034096:tid 1034271] [client 158.23.147.79:59853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-l0gin.php"] [unique_id "apK9vi04twRPFuquKD24RQAAAJk"]
[Sat Aug 29 05:08:46.780323 2026] [security2:error] [pid 1034096:tid 1034324] [client 20.151.200.44:63876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/k8.php"] [unique_id "apK9vi04twRPFuquKD24RwAAAM4"]
[Sat Aug 29 05:08:46.807780 2026] [security2:error] [pid 1041789:tid 1041952] [client 52.139.37.240:12915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK9vov3RhPI65jTFG7UYQAAAzM"]
[Sat Aug 29 05:08:46.814353 2026] [security2:error] [pid 1041789:tid 1042016] [client 68.155.159.216:23547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/file5.php"] [unique_id "apK9vov3RhPI65jTFG7UYgAAA3M"]
[Sat Aug 29 05:08:46.854633 2026] [security2:error] [pid 1041789:tid 1042023] [client 158.23.147.79:6041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK9vov3RhPI65jTFG7UZAAAA3o"]
[Sat Aug 29 05:08:46.864091 2026] [security2:error] [pid 1034096:tid 1034308] [client 68.155.159.216:33693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apK9vi04twRPFuquKD24UAAAAL4"]
[Sat Aug 29 05:08:46.866089 2026] [security2:error] [pid 1041789:tid 1041956] [client 40.83.93.50:48037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/1p.php"] [unique_id "apK9vov3RhPI65jTFG7UZQAAAzc"]
[Sat Aug 29 05:08:46.867941 2026] [security2:error] [pid 1041789:tid 1042015] [client 114.119.138.239:32133] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.classiclightingusa.com"] [uri "/catalog/product_info.php/cPath/1/products_id/612/osCsid/eddfb51e459b98059648b9564dc917be"] [unique_id "apK9vov3RhPI65jTFG7UZgAAA3I"], referer: http://www.classiclightingusa.com/catalog/product_info.php/products_id/612/osCsid/eddfb51e459b98059648b9564dc917be
[Sat Aug 29 05:08:46.869807 2026] [security2:error] [pid 1041789:tid 1042024] [client 20.104.68.135:3012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.east-town.org"] [uri "/wp-admin/maint/index.php"] [unique_id "apK9vov3RhPI65jTFG7UaAAAA3s"]
[Sat Aug 29 05:08:46.870093 2026] [security2:error] [pid 1034096:tid 1034359] [client 52.139.37.240:19370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/defaults.php"] [unique_id "apK9vi04twRPFuquKD24UQAAAPE"]
[Sat Aug 29 05:08:46.871726 2026] [security2:error] [pid 1034096:tid 1034335] [client 20.63.219.114:10528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/flower.php"] [unique_id "apK9vi04twRPFuquKD24UgAAANk"]
[Sat Aug 29 05:08:46.874342 2026] [core:error] [pid 1041789:tid 1042022] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.874371 2026] [core:error] [pid 1041789:tid 1042022] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.875673 2026] [core:error] [pid 1034096:tid 1034177] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.875693 2026] [core:error] [pid 1034096:tid 1034177] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.884568 2026] [security2:error] [pid 1041789:tid 1041950] [client 40.83.93.50:4081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/fi2.php"] [unique_id "apK9vov3RhPI65jTFG7UagAAAzE"]
[Sat Aug 29 05:08:46.886478 2026] [security2:error] [pid 1034096:tid 1034370] [client 68.155.159.216:14243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/NewFile.php/"] [unique_id "apK9vi04twRPFuquKD24VwAAAPw"]
[Sat Aug 29 05:08:46.887907 2026] [security2:error] [pid 1034096:tid 1034269] [client 4.205.62.107:56038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/grsiuk.php"] [unique_id "apK9vi04twRPFuquKD24WAAAAJc"]
[Sat Aug 29 05:08:46.896004 2026] [security2:error] [pid 1041789:tid 1042033] [client 40.83.93.50:20831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-admin/wp-cron.php"] [unique_id "apK9vov3RhPI65jTFG7UbAAAA4Q"]
[Sat Aug 29 05:08:46.898455 2026] [security2:error] [pid 1034096:tid 1034252] [client 93.123.109.228:48724] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/back-api/.env"] [unique_id "apK9vi04twRPFuquKD24WQAAAIY"]
[Sat Aug 29 05:08:46.901301 2026] [security2:error] [pid 1041789:tid 1042010] [client 93.123.109.228:48868] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/back-end/.env"] [unique_id "apK9vov3RhPI65jTFG7UbQAAA20"]
[Sat Aug 29 05:08:46.918260 2026] [security2:error] [pid 1034096:tid 1034292] [client 93.123.109.228:48688] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/back/.env"] [unique_id "apK9vi04twRPFuquKD24WwAAAK4"]
[Sat Aug 29 05:08:46.920971 2026] [security2:error] [pid 1034096:tid 1034361] [client 93.123.109.228:48742] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/backend-api/.env"] [unique_id "apK9vi04twRPFuquKD24XQAAAPM"]
[Sat Aug 29 05:08:46.926158 2026] [security2:error] [pid 1034096:tid 1034183] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/local/.env"] [unique_id "apK9vi04twRPFuquKD24WgAAlD0"]
[Sat Aug 29 05:08:46.932778 2026] [security2:error] [pid 1034096:tid 1034210] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/info.php"] [unique_id "apK9vi04twRPFuquKD24ZwAAlFg"]
[Sat Aug 29 05:08:46.933253 2026] [security2:error] [pid 1034096:tid 1034226] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/infophp.php"] [unique_id "apK9vi04twRPFuquKD24aAAAlGg"]
[Sat Aug 29 05:08:46.933940 2026] [security2:error] [pid 1034096:tid 1034210] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/infos.php"] [unique_id "apK9vi04twRPFuquKD24aQAAlFg"]
[Sat Aug 29 05:08:46.934177 2026] [security2:error] [pid 1034096:tid 1034171] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/market/.env"] [unique_id "apK9vi04twRPFuquKD24ZgAAlDE"]
[Sat Aug 29 05:08:46.934705 2026] [security2:error] [pid 1034096:tid 1034213] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/laravel/.env"] [unique_id "apK9vi04twRPFuquKD24agAAlFs"]
[Sat Aug 29 05:08:46.936854 2026] [security2:error] [pid 1034096:tid 1034210] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/lms/.env"] [unique_id "apK9vi04twRPFuquKD24bgAAlFg"]
[Sat Aug 29 05:08:46.939395 2026] [security2:error] [pid 1034096:tid 1034255] [client 93.123.109.228:48666] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK9vi04twRPFuquKD24ZQAAAIk"]
[Sat Aug 29 05:08:46.954669 2026] [security2:error] [pid 1034096:tid 1034229] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/marketing/.env"] [unique_id "apK9vi04twRPFuquKD24cgAAlGs"]
[Sat Aug 29 05:08:46.956701 2026] [core:error] [pid 1041789:tid 1041998] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.956719 2026] [core:error] [pid 1041789:tid 1041998] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.969227 2026] [core:error] [pid 1041789:tid 1042039] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.969245 2026] [core:error] [pid 1041789:tid 1042039] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.969467 2026] [core:error] [pid 1041789:tid 1042008] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.969484 2026] [core:error] [pid 1041789:tid 1042008] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.972849 2026] [core:error] [pid 1034096:tid 1034296] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.972862 2026] [core:error] [pid 1034096:tid 1034296] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.979014 2026] [security2:error] [pid 1034096:tid 1034263] [client 68.155.159.216:33478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-includes/plugins.php"] [unique_id "apK9vi04twRPFuquKD24egAAAJE"]
[Sat Aug 29 05:08:46.981303 2026] [core:error] [pid 1034096:tid 1034328] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.981324 2026] [core:error] [pid 1034096:tid 1034328] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.990205 2026] [security2:error] [pid 1034096:tid 1034314] [client 4.205.62.107:21829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/apikeys.php"] [unique_id "apK9vi04twRPFuquKD24fQAAAMQ"]
[Sat Aug 29 05:08:46.991077 2026] [core:error] [pid 1034096:tid 1034327] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:46.991095 2026] [core:error] [pid 1034096:tid 1034327] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.011253 2026] [security2:error] [pid 1041789:tid 1042031] [client 52.139.37.240:12437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK9v4v3RhPI65jTFG7UdwAAA4I"]
[Sat Aug 29 05:08:47.044814 2026] [security2:error] [pid 1034096:tid 1034376] [client 158.23.147.79:26557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK9vy04twRPFuquKD24iAAAAQI"]
[Sat Aug 29 05:08:47.050671 2026] [security2:error] [pid 1041789:tid 1041967] [client 45.148.10.62:40162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wxg.uhf.mybluehost.me"] [uri "/config.php.bak"] [unique_id "apK9v4v3RhPI65jTFG7UeQAAA0I"]
[Sat Aug 29 05:08:47.054879 2026] [security2:error] [pid 1034096:tid 1034285] [client 93.123.109.228:48876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/backup/.env"] [unique_id "apK9vy04twRPFuquKD24igAAAKc"]
[Sat Aug 29 05:08:47.061961 2026] [security2:error] [pid 1034096:tid 1034286] [client 93.123.109.228:48724] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/be/.env"] [unique_id "apK9vy04twRPFuquKD24jAAAAKg"]
[Sat Aug 29 05:08:47.068254 2026] [security2:error] [pid 1034096:tid 1034362] [client 74.248.24.12:5756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/alfa.php"] [unique_id "apK9vy04twRPFuquKD24jwAAAPQ"]
[Sat Aug 29 05:08:47.068472 2026] [security2:error] [pid 1034096:tid 1034320] [client 93.123.109.228:48688] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/beta/.env"] [unique_id "apK9vy04twRPFuquKD24jgAAAMo"]
[Sat Aug 29 05:08:47.069010 2026] [security2:error] [pid 1034096:tid 1034357] [client 20.104.68.135:18246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.east-town.org"] [uri "/wp-admin/network/admin.php"] [unique_id "apK9vy04twRPFuquKD24kAAAAO8"]
[Sat Aug 29 05:08:47.071525 2026] [security2:error] [pid 1041789:tid 1041991] [client 68.155.159.216:49229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK9v4v3RhPI65jTFG7UfQAAA1o"]
[Sat Aug 29 05:08:47.081250 2026] [security2:error] [pid 1034096:tid 1034220] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/media/.env"] [unique_id "apK9vy04twRPFuquKD24kgAAjmI"]
[Sat Aug 29 05:08:47.088705 2026] [security2:error] [pid 1034096:tid 1034300] [client 52.139.37.240:18857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/domains.php"] [unique_id "apK9vy04twRPFuquKD24lAAAALY"]
[Sat Aug 29 05:08:47.092647 2026] [security2:error] [pid 1034096:tid 1034358] [client 4.205.62.107:8967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/87.php"] [unique_id "apK9vy04twRPFuquKD24lwAAAPA"]
[Sat Aug 29 05:08:47.102430 2026] [security2:error] [pid 1034096:tid 1034235] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/new/.env"] [unique_id "apK9vy04twRPFuquKD24mAAAjnE"]
[Sat Aug 29 05:08:47.112180 2026] [security2:error] [pid 1034096:tid 1034347] [client 158.23.147.79:49809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK9vy04twRPFuquKD24mgAAAOU"]
[Sat Aug 29 05:08:47.116973 2026] [security2:error] [pid 1041789:tid 1042032] [client 20.100.175.163:16138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/tool.php"] [unique_id "apK9v4v3RhPI65jTFG7UgwAAA4M"]
[Sat Aug 29 05:08:47.118304 2026] [security2:error] [pid 1034096:tid 1034217] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/node-api/.env"] [unique_id "apK9vy04twRPFuquKD24mwAAjl8"]
[Sat Aug 29 05:08:47.128208 2026] [security2:error] [pid 1034096:tid 1034125] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/node/.env"] [unique_id "apK9vy04twRPFuquKD24ngAAjgM"]
[Sat Aug 29 05:08:47.132424 2026] [security2:error] [pid 1034096:tid 1034230] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/node/api/.env"] [unique_id "apK9vy04twRPFuquKD24oQAAjmw"]
[Sat Aug 29 05:08:47.132943 2026] [core:error] [pid 1034096:tid 1034272] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.132955 2026] [core:error] [pid 1034096:tid 1034272] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.133205 2026] [security2:error] [pid 1034096:tid 1034290] [client 158.23.147.79:17579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK9vy04twRPFuquKD24ogAAAKw"]
[Sat Aug 29 05:08:47.134647 2026] [security2:error] [pid 1034096:tid 1034283] [client 20.52.41.200:4352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/php.php"] [unique_id "apK9vy04twRPFuquKD24owAAAKU"]
[Sat Aug 29 05:08:47.135771 2026] [security2:error] [pid 1041789:tid 1041999] [client 45.148.10.62:40178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wxd.mej.mybluehost.me"] [uri "/config.php.bak"] [unique_id "apK9v4v3RhPI65jTFG7UhAAAA2I"]
[Sat Aug 29 05:08:47.157106 2026] [security2:error] [pid 1034096:tid 1034128] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/node/backend/.env"] [unique_id "apK9vy04twRPFuquKD24pwAAjgY"]
[Sat Aug 29 05:08:47.158192 2026] [security2:error] [pid 1034096:tid 1034369] [client 20.240.128.207:24715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/123.php"] [unique_id "apK9vy04twRPFuquKD24qAAAAPs"]
[Sat Aug 29 05:08:47.160166 2026] [security2:error] [pid 1034096:tid 1034297] [client 158.158.54.35:13043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK9vy04twRPFuquKD24qQAAALM"]
[Sat Aug 29 05:08:47.161761 2026] [security2:error] [pid 1034096:tid 1034242] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/nodeapi/.env"] [unique_id "apK9vy04twRPFuquKD24qgAAjng"]
[Sat Aug 29 05:08:47.163578 2026] [core:error] [pid 1034096:tid 1034312] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.163592 2026] [core:error] [pid 1034096:tid 1034312] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.166424 2026] [security2:error] [pid 1034096:tid 1034238] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/nodeweb/.env"] [unique_id "apK9vy04twRPFuquKD24rgAAjnQ"]
[Sat Aug 29 05:08:47.174082 2026] [core:error] [pid 1034096:tid 1034316] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.174097 2026] [core:error] [pid 1034096:tid 1034316] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.186081 2026] [core:error] [pid 1041789:tid 1041949] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.186100 2026] [core:error] [pid 1041789:tid 1041949] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.187561 2026] [core:error] [pid 1041789:tid 1041931] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.187579 2026] [core:error] [pid 1041789:tid 1041931] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.198251 2026] [security2:error] [pid 1041789:tid 1041957] [client 93.123.109.228:48884] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/client/.env"] [unique_id "apK9v4v3RhPI65jTFG7UiAAAAzg"]
[Sat Aug 29 05:08:47.204380 2026] [security2:error] [pid 1034096:tid 1034355] [client 52.139.37.240:12927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/zafir1.php"] [unique_id "apK9vy04twRPFuquKD24uwAAAO0"]
[Sat Aug 29 05:08:47.206791 2026] [security2:error] [pid 1034096:tid 1034278] [client 20.197.61.180:2008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/config.php"] [unique_id "apK9vy04twRPFuquKD24vAAAAKA"]
[Sat Aug 29 05:08:47.213120 2026] [security2:error] [pid 1034096:tid 1034317] [client 93.123.109.228:48834] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/cms/.env"] [unique_id "apK9vy04twRPFuquKD24vQAAAMc"]
[Sat Aug 29 05:08:47.223558 2026] [security2:error] [pid 1034096:tid 1034194] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/old/.env"] [unique_id "apK9vy04twRPFuquKD24vwAAjkg"]
[Sat Aug 29 05:08:47.224113 2026] [security2:error] [pid 1041789:tid 1041948] [client 68.155.159.216:6103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK9v4v3RhPI65jTFG7UiQAAAy8"]
[Sat Aug 29 05:08:47.229884 2026] [security2:error] [pid 1041789:tid 1042055] [client 45.148.10.62:40192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wxe.rvy.mybluehost.me"] [uri "/config.php.bak"] [unique_id "apK9v4v3RhPI65jTFG7UigAAA5o"]
[Sat Aug 29 05:08:47.255468 2026] [core:error] [pid 1034096:tid 1034252] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.255483 2026] [core:error] [pid 1034096:tid 1034252] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.263034 2026] [security2:error] [pid 1034096:tid 1034274] [client 68.155.159.216:1977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9vy04twRPFuquKD24ywAAAJw"]
[Sat Aug 29 05:08:47.263214 2026] [core:error] [pid 1034096:tid 1034293] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.263227 2026] [core:error] [pid 1034096:tid 1034293] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.270574 2026] [security2:error] [pid 1034096:tid 1034259] [client 20.104.68.135:18287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.east-town.org"] [uri "/wp-conflg/function.php"] [unique_id "apK9vy04twRPFuquKD24zwAAAI0"]
[Sat Aug 29 05:08:47.283441 2026] [security2:error] [pid 1034096:tid 1034363] [client 20.63.219.114:19857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/meta.php"] [unique_id "apK9vy04twRPFuquKD240QAAAPU"]
[Sat Aug 29 05:08:47.287016 2026] [security2:error] [pid 1041789:tid 1041993] [client 68.155.159.216:24431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK9v4v3RhPI65jTFG7UjgAAA1w"]
[Sat Aug 29 05:08:47.289897 2026] [security2:error] [pid 1034096:tid 1034313] [client 4.232.148.111:18870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/w.php"] [unique_id "apK9vy04twRPFuquKD240gAAAMM"]
[Sat Aug 29 05:08:47.290300 2026] [security2:error] [pid 1034096:tid 1034309] [client 68.155.159.216:52812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/cgi-bin/index.php"] [unique_id "apK9vy04twRPFuquKD240wAAAL8"]
[Sat Aug 29 05:08:47.291860 2026] [security2:error] [pid 1034096:tid 1034277] [client 20.197.61.180:1872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/meta.php"] [unique_id "apK9vy04twRPFuquKD241AAAAJ8"]
[Sat Aug 29 05:08:47.297381 2026] [core:error] [pid 1034096:tid 1034273] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.297400 2026] [core:error] [pid 1034096:tid 1034273] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.298711 2026] [security2:error] [pid 1034096:tid 1034325] [client 52.139.37.240:19364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/dropdown.php"] [unique_id "apK9vy04twRPFuquKD241gAAAM8"]
[Sat Aug 29 05:08:47.302340 2026] [security2:error] [pid 1034096:tid 1034296] [client 93.123.109.228:48842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/config.php"] [unique_id "apK9vy04twRPFuquKD241wAAALI"]
[Sat Aug 29 05:08:47.307564 2026] [security2:error] [pid 1034096:tid 1034328] [client 20.151.200.44:64456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/alog.php"] [unique_id "apK9vy04twRPFuquKD242gAAANI"]
[Sat Aug 29 05:08:47.314235 2026] [security2:error] [pid 1034096:tid 1034153] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/opt/.env"] [unique_id "apK9vy04twRPFuquKD243AAAqR8"]
[Sat Aug 29 05:08:47.348486 2026] [core:error] [pid 1041789:tid 1041945] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.348513 2026] [core:error] [pid 1041789:tid 1041945] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.379690 2026] [security2:error] [pid 1034096:tid 1034320] [client 93.123.109.228:48972] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/config/.env"] [unique_id "apK9vy04twRPFuquKD245gAAAMo"]
[Sat Aug 29 05:08:47.382870 2026] [core:error] [pid 1034096:tid 1034362] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.382886 2026] [core:error] [pid 1034096:tid 1034362] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.383915 2026] [security2:error] [pid 1034096:tid 1034335] [client 40.83.93.50:13225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/1p.php"] [unique_id "apK9vy04twRPFuquKD246AAAANk"]
[Sat Aug 29 05:08:47.386157 2026] [security2:error] [pid 1041789:tid 1041995] [client 40.83.93.50:12941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-admin/wp-links-opml.php"] [unique_id "apK9v4v3RhPI65jTFG7UkwAAA14"]
[Sat Aug 29 05:08:47.391008 2026] [core:error] [pid 1034096:tid 1034357] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.391023 2026] [core:error] [pid 1034096:tid 1034357] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.398027 2026] [security2:error] [pid 1034096:tid 1034365] [client 40.83.93.50:18927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/Njima.php"] [unique_id "apK9vy04twRPFuquKD247QAAAPc"]
[Sat Aug 29 05:08:47.401742 2026] [security2:error] [pid 1034096:tid 1034375] [client 52.139.37.240:12423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/abc.php"] [unique_id "apK9vy04twRPFuquKD247gAAAQE"]
[Sat Aug 29 05:08:47.405766 2026] [security2:error] [pid 1041789:tid 1042003] [client 20.197.61.180:12758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/fi2.php"] [unique_id "apK9v4v3RhPI65jTFG7UlAAAA2Y"]
[Sat Aug 29 05:08:47.406615 2026] [security2:error] [pid 1034096:tid 1034350] [client 93.123.109.228:48724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/config/aws.php"] [unique_id "apK9vy04twRPFuquKD248wAAAOg"]
[Sat Aug 29 05:08:47.420142 2026] [security2:error] [pid 1034096:tid 1034312] [client 93.123.109.228:48770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/config/config.inc.php"] [unique_id "apK9vy04twRPFuquKD24-AAAAMI"]
[Sat Aug 29 05:08:47.445221 2026] [core:error] [pid 1041789:tid 1041959] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.445241 2026] [core:error] [pid 1041789:tid 1041959] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.445282 2026] [core:error] [pid 1041789:tid 1042001] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.445286 2026] [core:error] [pid 1041789:tid 1042012] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.445293 2026] [core:error] [pid 1041789:tid 1042001] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.445295 2026] [core:error] [pid 1041789:tid 1042012] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.469638 2026] [core:error] [pid 1041789:tid 1042024] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.469656 2026] [core:error] [pid 1041789:tid 1042024] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.470390 2026] [core:error] [pid 1041789:tid 1042015] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.470411 2026] [core:error] [pid 1041789:tid 1042015] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.475102 2026] [security2:error] [pid 1034096:tid 1034317] [client 93.123.109.228:48786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/config/config.php"] [unique_id "apK9vy04twRPFuquKD25DwAAAMc"]
[Sat Aug 29 05:08:47.475229 2026] [security2:error] [pid 1041789:tid 1041962] [client 20.104.68.135:51700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.east-town.org"] [uri "/wp-content/classwithtostring.php"] [unique_id "apK9v4v3RhPI65jTFG7UowAAAz0"]
[Sat Aug 29 05:08:47.481605 2026] [security2:error] [pid 1034096:tid 1034269] [client 20.197.61.180:12751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/goods.php"] [unique_id "apK9vy04twRPFuquKD25EAAAAJc"]
[Sat Aug 29 05:08:47.485034 2026] [security2:error] [pid 1034096:tid 1034270] [client 158.23.147.79:11290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/atomlib.php"] [unique_id "apK9vy04twRPFuquKD25EgAAAJg"]
[Sat Aug 29 05:08:47.487594 2026] [core:error] [pid 1041789:tid 1041944] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.487611 2026] [core:error] [pid 1041789:tid 1041944] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.490497 2026] [core:error] [pid 1041789:tid 1042030] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.490518 2026] [core:error] [pid 1041789:tid 1042030] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.490651 2026] [security2:error] [pid 1034096:tid 1034340] [client 68.155.159.216:65085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/lock.php"] [unique_id "apK9vy04twRPFuquKD25FQAAAN4"]
[Sat Aug 29 05:08:47.490889 2026] [core:error] [pid 1034096:tid 1034252] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.490898 2026] [core:error] [pid 1034096:tid 1034252] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.491213 2026] [core:error] [pid 1041789:tid 1041963] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.491223 2026] [core:error] [pid 1041789:tid 1041963] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.492331 2026] [core:error] [pid 1041789:tid 1041950] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.492346 2026] [core:error] [pid 1041789:tid 1041950] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.493097 2026] [core:error] [pid 1034096:tid 1034298] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.493113 2026] [core:error] [pid 1034096:tid 1034298] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.494376 2026] [security2:error] [pid 1034096:tid 1034356] [client 52.139.37.240:18853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/files/index.php"] [unique_id "apK9vy04twRPFuquKD25FwAAAO4"]
[Sat Aug 29 05:08:47.494613 2026] [core:error] [pid 1034096:tid 1034275] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.494623 2026] [core:error] [pid 1034096:tid 1034275] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.499094 2026] [security2:error] [pid 1034096:tid 1034232] [remote 93.123.109.228:42974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/config.php"] [unique_id "apK9vy04twRPFuquKD25GgAA-24"]
[Sat Aug 29 05:08:47.500853 2026] [core:error] [pid 1034096:tid 1034159] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.500865 2026] [core:error] [pid 1034096:tid 1034159] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.521931 2026] [core:error] [pid 1034096:tid 1034255] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.521946 2026] [core:error] [pid 1034096:tid 1034255] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.522241 2026] [security2:error] [pid 1034096:tid 1034307] [client 45.148.10.62:40202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wxk.tiz.mybluehost.me"] [uri "/config.php.bak"] [unique_id "apK9vy04twRPFuquKD25HQAAAL0"]
[Sat Aug 29 05:08:47.527336 2026] [security2:error] [pid 1034096:tid 1034309] [client 93.123.109.228:48972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/config/env.php"] [unique_id "apK9vy04twRPFuquKD25IAAAAL8"]
[Sat Aug 29 05:08:47.542291 2026] [security2:error] [pid 1034096:tid 1034166] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/php-info.php"] [unique_id "apK9vy04twRPFuquKD25JwAAnyw"]
[Sat Aug 29 05:08:47.544976 2026] [security2:error] [pid 1041789:tid 1042008] [client 20.151.200.44:64504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/adin.php"] [unique_id "apK9v4v3RhPI65jTFG7UqgAAA2s"]
[Sat Aug 29 05:08:47.564064 2026] [core:error] [pid 1034096:tid 1034322] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.564080 2026] [core:error] [pid 1034096:tid 1034322] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.570183 2026] [security2:error] [pid 1041789:tid 1042011] [client 74.248.24.12:7178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/403.php"] [unique_id "apK9v4v3RhPI65jTFG7UrAAAA24"]
[Sat Aug 29 05:08:47.576110 2026] [security2:error] [pid 1034096:tid 1034332] [client 93.123.109.228:48754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/config/module.config.php"] [unique_id "apK9vy04twRPFuquKD25OAAAANY"]
[Sat Aug 29 05:08:47.579537 2026] [security2:error] [pid 1034096:tid 1034314] [client 93.123.109.228:48876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/config/nexmo.php"] [unique_id "apK9vy04twRPFuquKD25OgAAAMQ"]
[Sat Aug 29 05:08:47.589950 2026] [security2:error] [pid 1041789:tid 1042013] [client 20.52.41.200:5334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/init.php"] [unique_id "apK9v4v3RhPI65jTFG7UsAAAA3A"]
[Sat Aug 29 05:08:47.590410 2026] [security2:error] [pid 1041789:tid 1042050] [client 178.211.139.240:57272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.139.211.178.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doggettaction.com"] [uri "/images/images/cache.php"] [unique_id "apK9v4v3RhPI65jTFG7UsQAAA5U"], referer: www.google.com
[Sat Aug 29 05:08:47.599809 2026] [security2:error] [pid 1041789:tid 1042048] [client 4.205.62.107:51392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/pinfo.php"] [unique_id "apK9v4v3RhPI65jTFG7UtAAAA5M"]
[Sat Aug 29 05:08:47.601857 2026] [security2:error] [pid 1034096:tid 1034134] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/php.php"] [unique_id "apK9vy04twRPFuquKD25QAAApww"]
[Sat Aug 29 05:08:47.601855 2026] [security2:error] [pid 1034096:tid 1034179] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/php_info.php"] [unique_id "apK9vy04twRPFuquKD25PwAApzk"]
[Sat Aug 29 05:08:47.602768 2026] [security2:error] [pid 1034096:tid 1034189] [remote 93.123.109.228:42974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/config/aws.php"] [unique_id "apK9vy04twRPFuquKD25QgAAz0M"]
[Sat Aug 29 05:08:47.608434 2026] [autoindex:error] [pid 1041789:tid 1041996] [client 45.148.10.166:42860] AH01276: Cannot serve directory /home3/tfqmwumy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:08:47.610043 2026] [security2:error] [pid 1034096:tid 1034377] [client 20.100.175.163:21876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/k.php"] [unique_id "apK9vy04twRPFuquKD25RwAAAQM"]
[Sat Aug 29 05:08:47.619572 2026] [security2:error] [pid 1034096:tid 1034328] [client 52.139.37.240:12513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/c1.php"] [unique_id "apK9vy04twRPFuquKD25SQAAANI"]
[Sat Aug 29 05:08:47.634830 2026] [security2:error] [pid 1034096:tid 1034362] [client 93.123.109.228:48742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/config/stripe.php"] [unique_id "apK9vy04twRPFuquKD25SwAAAPQ"]
[Sat Aug 29 05:08:47.657152 2026] [security2:error] [pid 1041789:tid 1041972] [client 20.240.128.207:31078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/yanz.php"] [unique_id "apK9v4v3RhPI65jTFG7UtgAAA0c"]
[Sat Aug 29 05:08:47.676107 2026] [security2:error] [pid 1041789:tid 1042029] [client 158.23.147.79:6048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK9v4v3RhPI65jTFG7UuAAAA4A"]
[Sat Aug 29 05:08:47.686705 2026] [security2:error] [pid 1034096:tid 1034315] [client 158.23.147.79:17609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/wp-content/admin.php"] [unique_id "apK9vy04twRPFuquKD25UgAAAMU"]
[Sat Aug 29 05:08:47.695639 2026] [security2:error] [pid 1041789:tid 1042057] [client 4.205.62.107:6927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/i.php"] [unique_id "apK9v4v3RhPI65jTFG7UuwAAA5w"]
[Sat Aug 29 05:08:47.697648 2026] [security2:error] [pid 1034096:tid 1034267] [client 52.139.37.240:18836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.icelandic-sunland.com"] [uri "/flower.php"] [unique_id "apK9vy04twRPFuquKD25VAAAAJU"]
[Sat Aug 29 05:08:47.700270 2026] [security2:error] [pid 1041789:tid 1042025] [client 91.92.47.191:44194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.corrigansbasement.com"] [uri "/config.php"] [unique_id "apK9v4v3RhPI65jTFG7UvAAAA3w"]
[Sat Aug 29 05:08:47.740477 2026] [security2:error] [pid 1034096:tid 1034253] [client 4.205.62.107:25959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/pouhg.php"] [unique_id "apK9vy04twRPFuquKD25WgAAAIc"]
[Sat Aug 29 05:08:47.741037 2026] [security2:error] [pid 1034096:tid 1034216] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/project/.env"] [unique_id "apK9vy04twRPFuquKD25WQAAxl4"]
[Sat Aug 29 05:08:47.742046 2026] [security2:error] [pid 1034096:tid 1034317] [client 20.151.200.44:63903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/sf9.php"] [unique_id "apK9vy04twRPFuquKD25WwAAAMc"]
[Sat Aug 29 05:08:47.742273 2026] [security2:error] [pid 1034096:tid 1034175] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/phpinfo.php"] [unique_id "apK9vy04twRPFuquKD25XQAAxjU"]
[Sat Aug 29 05:08:47.744015 2026] [security2:error] [pid 1034096:tid 1034196] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/portal/.env"] [unique_id "apK9vy04twRPFuquKD25XwAAxko"]
[Sat Aug 29 05:08:47.744084 2026] [security2:error] [pid 1034096:tid 1034269] [client 20.104.68.135:18402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.east-town.org"] [uri "/wp-content/themes/fitnessbase/404.php"] [unique_id "apK9vy04twRPFuquKD25YAAAAJc"]
[Sat Aug 29 05:08:47.746585 2026] [core:error] [pid 1034096:tid 1034185] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.746601 2026] [core:error] [pid 1034096:tid 1034185] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.758514 2026] [security2:error] [pid 1034096:tid 1034274] [client 158.158.54.35:31660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/lite.php"] [unique_id "apK9vy04twRPFuquKD25ZgAAAJw"]
[Sat Aug 29 05:08:47.766839 2026] [security2:error] [pid 1034096:tid 1034213] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/prod/.env"] [unique_id "apK9vy04twRPFuquKD25aAAAxls"]
[Sat Aug 29 05:08:47.770236 2026] [security2:error] [pid 1034096:tid 1034229] [remote 93.123.109.228:42974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/config/module.config.php"] [unique_id "apK9vy04twRPFuquKD25bQAAmGs"]
[Sat Aug 29 05:08:47.773701 2026] [security2:error] [pid 1034096:tid 1034229] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/public-api/.env"] [unique_id "apK9vy04twRPFuquKD25bgAAxms"]
[Sat Aug 29 05:08:47.774191 2026] [security2:error] [pid 1034096:tid 1034368] [client 4.205.62.107:62724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/wsws.php"] [unique_id "apK9vy04twRPFuquKD25cAAAAPo"]
[Sat Aug 29 05:08:47.775105 2026] [security2:error] [pid 1034096:tid 1034226] [remote 93.123.109.228:42974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/config/config.inc.php"] [unique_id "apK9vy04twRPFuquKD25cwAAmGg"]
[Sat Aug 29 05:08:47.775632 2026] [security2:error] [pid 1034096:tid 1034164] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/public/.env"] [unique_id "apK9vy04twRPFuquKD25bwAAxio"]
[Sat Aug 29 05:08:47.775958 2026] [security2:error] [pid 1034096:tid 1034198] [remote 93.123.109.228:42974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/config/config.php"] [unique_id "apK9vy04twRPFuquKD25eAAAmEw"]
[Sat Aug 29 05:08:47.777791 2026] [security2:error] [pid 1034096:tid 1034320] [client 20.63.219.114:2438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/randkeyword.php"] [unique_id "apK9vy04twRPFuquKD25eQAAAMo"]
[Sat Aug 29 05:08:47.780301 2026] [core:error] [pid 1034096:tid 1034361] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.780324 2026] [core:error] [pid 1034096:tid 1034361] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.780351 2026] [security2:error] [pid 1034096:tid 1034208] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/product/.env"] [unique_id "apK9vy04twRPFuquKD25ewAAxlY"]
[Sat Aug 29 05:08:47.780407 2026] [security2:error] [pid 1034096:tid 1034215] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/production/.env"] [unique_id "apK9vy04twRPFuquKD25fAAAxl0"]
[Sat Aug 29 05:08:47.783290 2026] [core:error] [pid 1034096:tid 1034241] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.783309 2026] [core:error] [pid 1034096:tid 1034241] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.783580 2026] [core:error] [pid 1034096:tid 1034259] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.783594 2026] [core:error] [pid 1034096:tid 1034259] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.784730 2026] [core:error] [pid 1034096:tid 1034370] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.784744 2026] [core:error] [pid 1034096:tid 1034370] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.796766 2026] [security2:error] [pid 1041789:tid 1041961] [client 103.142.163.170:51668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 170.163.142.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mgbeats.com"] [uri "/xmlrpc.php"] [unique_id "apK9v4v3RhPI65jTFG7UwgAAAzw"]
[Sat Aug 29 05:08:47.796907 2026] [security2:error] [pid 1041789:tid 1041961] [client 103.142.163.170:51668] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mgbeats.com"] [uri "/xmlrpc.php"] [unique_id "apK9v4v3RhPI65jTFG7UwgAAAzw"]
[Sat Aug 29 05:08:47.809892 2026] [core:error] [pid 1034096:tid 1034293] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.809908 2026] [core:error] [pid 1034096:tid 1034293] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.819092 2026] [security2:error] [pid 1034096:tid 1034275] [client 52.139.37.240:12487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/index.php/feed/atom/"] [unique_id "apK9vy04twRPFuquKD25iAAAAJ0"]
[Sat Aug 29 05:08:47.827169 2026] [security2:error] [pid 1034096:tid 1034220] [remote 93.123.109.228:42974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/config/env.php"] [unique_id "apK9vy04twRPFuquKD25jAAAmGI"]
[Sat Aug 29 05:08:47.838972 2026] [security2:error] [pid 1034096:tid 1034227] [remote 93.123.109.228:42974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/config/nexmo.php"] [unique_id "apK9vy04twRPFuquKD25jQAAmGk"]
[Sat Aug 29 05:08:47.849723 2026] [security2:error] [pid 1034096:tid 1034342] [client 68.155.159.216:38675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK9vy04twRPFuquKD25kgAAAOA"]
[Sat Aug 29 05:08:47.850301 2026] [core:error] [pid 1041789:tid 1041933] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.850310 2026] [core:error] [pid 1041789:tid 1041933] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.862324 2026] [security2:error] [pid 1041789:tid 1041943] [client 40.83.93.50:12963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-admin/wp-load.php"] [unique_id "apK9v4v3RhPI65jTFG7UyQAAAyo"]
[Sat Aug 29 05:08:47.873539 2026] [security2:error] [pid 1041789:tid 1041931] [client 93.123.109.228:48884] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/crm/.env"] [unique_id "apK9v4v3RhPI65jTFG7UywAAAx4"]
[Sat Aug 29 05:08:47.875133 2026] [core:error] [pid 1034096:tid 1034285] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.875153 2026] [core:error] [pid 1034096:tid 1034285] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.881648 2026] [security2:error] [pid 1034096:tid 1034371] [client 4.232.148.111:24583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/ahax.php"] [unique_id "apK9vy04twRPFuquKD25lQAAAP0"]
[Sat Aug 29 05:08:47.884775 2026] [security2:error] [pid 1034096:tid 1034310] [client 93.123.109.228:48666] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/cron/.env"] [unique_id "apK9vy04twRPFuquKD25lgAAAMA"]
[Sat Aug 29 05:08:47.887463 2026] [security2:error] [pid 1034096:tid 1034268] [client 93.123.109.228:48930] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/current/.env"] [unique_id "apK9vy04twRPFuquKD25lwAAAJY"]
[Sat Aug 29 05:08:47.888709 2026] [security2:error] [pid 1034096:tid 1034125] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/public/phpinfo.php"] [unique_id "apK9vy04twRPFuquKD25mAAA0gM"]
[Sat Aug 29 05:08:47.890284 2026] [security2:error] [pid 1034096:tid 1034355] [client 40.83.93.50:13192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/Njima.php"] [unique_id "apK9vy04twRPFuquKD25mgAAAO0"]
[Sat Aug 29 05:08:47.892182 2026] [core:error] [pid 1034096:tid 1034234] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.892199 2026] [core:error] [pid 1034096:tid 1034234] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.892831 2026] [security2:error] [pid 1034096:tid 1034230] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/public_html/.env"] [unique_id "apK9vy04twRPFuquKD25mwAA0mw"]
[Sat Aug 29 05:08:47.921343 2026] [security2:error] [pid 1034096:tid 1034128] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/qa/.env"] [unique_id "apK9vy04twRPFuquKD25oAAA0gY"]
[Sat Aug 29 05:08:47.936419 2026] [security2:error] [pid 1041789:tid 1041951] [client 93.123.109.228:48910] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/demo/.env"] [unique_id "apK9v4v3RhPI65jTFG7UzAAAAzI"]
[Sat Aug 29 05:08:47.939213 2026] [security2:error] [pid 1034096:tid 1034284] [client 20.197.61.180:1057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/22.php"] [unique_id "apK9vy04twRPFuquKD25pQAAAKY"]
[Sat Aug 29 05:08:47.939770 2026] [security2:error] [pid 1034096:tid 1034359] [client 40.83.93.50:48020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/configs.php"] [unique_id "apK9vy04twRPFuquKD25pAAAAPE"]
[Sat Aug 29 05:08:47.945133 2026] [security2:error] [pid 1034096:tid 1034224] [remote 93.123.109.228:42974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/config/stripe.php"] [unique_id "apK9vy04twRPFuquKD25pwAAmGY"]
[Sat Aug 29 05:08:47.949693 2026] [security2:error] [pid 1041789:tid 1041939] [client 93.123.109.228:48868] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/develop/.env"] [unique_id "apK9v4v3RhPI65jTFG7UzgAAAyY"]
[Sat Aug 29 05:08:47.952539 2026] [security2:error] [pid 1034096:tid 1034375] [client 93.123.109.228:48688] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/dev/.env"] [unique_id "apK9vy04twRPFuquKD25qQAAAQE"]
[Sat Aug 29 05:08:47.953419 2026] [security2:error] [pid 1034096:tid 1034339] [client 20.104.68.135:18294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.east-town.org"] [uri "/wp-content/themes/index.php"] [unique_id "apK9vy04twRPFuquKD25qgAAAN0"]
[Sat Aug 29 05:08:47.954704 2026] [core:error] [pid 1041789:tid 1041948] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.954724 2026] [core:error] [pid 1041789:tid 1041948] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.958371 2026] [security2:error] [pid 1034096:tid 1034358] [client 93.123.109.228:48834] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/developer/.env"] [unique_id "apK9vy04twRPFuquKD25sgAAAPA"]
[Sat Aug 29 05:08:47.962224 2026] [security2:error] [pid 1041789:tid 1041973] [client 68.155.159.216:23440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/file88.php"] [unique_id "apK9v4v3RhPI65jTFG7U0gAAA0g"]
[Sat Aug 29 05:08:47.969532 2026] [security2:error] [pid 1041789:tid 1041993] [client 68.155.159.216:33776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK9v4v3RhPI65jTFG7U1AAAA1w"]
[Sat Aug 29 05:08:47.973071 2026] [security2:error] [pid 1034096:tid 1034312] [client 93.123.109.228:48960] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/development/.env"] [unique_id "apK9vy04twRPFuquKD25uwAAAMI"]
[Sat Aug 29 05:08:47.982603 2026] [core:error] [pid 1034096:tid 1034283] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.982618 2026] [core:error] [pid 1034096:tid 1034283] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.986309 2026] [core:error] [pid 1034096:tid 1034302] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.986327 2026] [core:error] [pid 1034096:tid 1034302] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.989615 2026] [security2:error] [pid 1041789:tid 1041945] [client 158.23.147.79:6078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/goat.php"] [unique_id "apK9v4v3RhPI65jTFG7U1gAAAyw"]
[Sat Aug 29 05:08:47.991095 2026] [core:error] [pid 1034096:tid 1034315] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.991115 2026] [core:error] [pid 1034096:tid 1034315] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.992254 2026] [core:error] [pid 1041789:tid 1041975] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.992265 2026] [core:error] [pid 1041789:tid 1041975] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.994082 2026] [core:error] [pid 1034096:tid 1034344] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.994101 2026] [core:error] [pid 1034096:tid 1034344] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.994337 2026] [core:error] [pid 1034096:tid 1034267] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.994346 2026] [core:error] [pid 1034096:tid 1034267] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.994491 2026] [core:error] [pid 1034096:tid 1034294] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.994512 2026] [core:error] [pid 1034096:tid 1034294] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.994545 2026] [core:error] [pid 1034096:tid 1034378] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.994555 2026] [core:error] [pid 1034096:tid 1034378] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.994944 2026] [core:error] [pid 1034096:tid 1034278] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.994951 2026] [core:error] [pid 1034096:tid 1034278] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:47.998449 2026] [security2:error] [pid 1041789:tid 1042005] [client 107.145.13.164:59671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 164.13.145.107.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK9v4v3RhPI65jTFG7U2AAAA2g"]
[Sat Aug 29 05:08:48.003541 2026] [security2:error] [pid 1041789:tid 1042005] [client 107.145.13.164:59671] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK9v4v3RhPI65jTFG7U2AAAA2g"]
[Sat Aug 29 05:08:48.018260 2026] [security2:error] [pid 1034096:tid 1034374] [client 52.139.37.240:12450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/root.php"] [unique_id "apK9wC04twRPFuquKD25zAAAAQA"]
[Sat Aug 29 05:08:48.023310 2026] [security2:error] [pid 1041789:tid 1041946] [client 20.197.61.180:2018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/randkeyword.php"] [unique_id "apK9wIv3RhPI65jTFG7U3AAAAy0"]
[Sat Aug 29 05:08:48.025132 2026] [security2:error] [pid 1041789:tid 1042012] [client 4.205.62.107:53131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/paypal.php"] [unique_id "apK9wIv3RhPI65jTFG7U3QAAA28"]
[Sat Aug 29 05:08:48.046005 2026] [security2:error] [pid 1034096:tid 1034323] [client 20.52.41.200:4575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "apK9wC04twRPFuquKD250wAAAM0"]
[Sat Aug 29 05:08:48.070795 2026] [core:error] [pid 1034096:tid 1034309] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.070814 2026] [core:error] [pid 1034096:tid 1034309] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.071969 2026] [core:error] [pid 1034096:tid 1034301] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.071983 2026] [core:error] [pid 1034096:tid 1034301] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.087162 2026] [security2:error] [pid 1041789:tid 1041957] [client 74.248.24.12:5444] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webmail.ej207.com"] [uri "/1.php"] [unique_id "apK9wIv3RhPI65jTFG7U5AAAAzg"]
[Sat Aug 29 05:08:48.087266 2026] [security2:error] [pid 1041789:tid 1041957] [client 74.248.24.12:5444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/1.php"] [unique_id "apK9wIv3RhPI65jTFG7U5AAAAzg"]
[Sat Aug 29 05:08:48.087294 2026] [security2:error] [pid 1041789:tid 1041821] [remote 74.7.227.154:54326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK9wIv3RhPI65jTFG7U4wADchM"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwp-easycart%2Finc%2Fclasses%2Fstore
[Sat Aug 29 05:08:48.090090 2026] [security2:error] [pid 1034096:tid 1034304] [client 20.151.200.44:63871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/lte7.php"] [unique_id "apK9wC04twRPFuquKD252wAAALo"]
[Sat Aug 29 05:08:48.111854 2026] [security2:error] [pid 1034096:tid 1034314] [client 68.155.159.216:33760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK9wC04twRPFuquKD253QAAAMQ"]
[Sat Aug 29 05:08:48.123266 2026] [core:error] [pid 1034096:tid 1034282] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.123283 2026] [core:error] [pid 1034096:tid 1034282] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.128733 2026] [security2:error] [pid 1041789:tid 1042030] [client 4.205.62.107:22519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/motu.php"] [unique_id "apK9wIv3RhPI65jTFG7U6wAAA4E"]
[Sat Aug 29 05:08:48.138413 2026] [security2:error] [pid 1034096:tid 1034377] [client 68.155.159.216:18392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK9wC04twRPFuquKD256wAAAQM"]
[Sat Aug 29 05:08:48.138742 2026] [security2:error] [pid 1041789:tid 1041936] [client 20.197.61.180:1997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/1p.php"] [unique_id "apK9wIv3RhPI65jTFG7U7AAAAyM"]
[Sat Aug 29 05:08:48.140143 2026] [security2:error] [pid 1041789:tid 1042054] [client 20.100.175.163:16931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/root.php"] [unique_id "apK9wIv3RhPI65jTFG7U7QAAA5k"]
[Sat Aug 29 05:08:48.144517 2026] [security2:error] [pid 1041789:tid 1041959] [client 20.63.219.114:15390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/goods.php"] [unique_id "apK9wIv3RhPI65jTFG7U7gAAAzo"]
[Sat Aug 29 05:08:48.154345 2026] [core:error] [pid 1041789:tid 1042033] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.154369 2026] [core:error] [pid 1041789:tid 1042033] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.154526 2026] [core:error] [pid 1034096:tid 1034362] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.154537 2026] [core:error] [pid 1034096:tid 1034362] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.156465 2026] [security2:error] [pid 1034096:tid 1034321] [client 20.240.128.207:27529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/autoload_classmap.php"] [unique_id "apK9wC04twRPFuquKD257QAAAMs"]
[Sat Aug 29 05:08:48.157767 2026] [security2:error] [pid 1041789:tid 1041985] [client 158.23.147.79:26461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/log-mama/function.php"] [unique_id "apK9wIv3RhPI65jTFG7U8AAAA1Q"]
[Sat Aug 29 05:08:48.159166 2026] [core:error] [pid 1034096:tid 1034268] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.159178 2026] [core:error] [pid 1034096:tid 1034268] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.159876 2026] [security2:error] [pid 1041789:tid 1041987] [client 68.155.159.216:65096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/goat.php"] [unique_id "apK9wIv3RhPI65jTFG7U8QAAA1Y"]
[Sat Aug 29 05:08:48.164077 2026] [security2:error] [pid 1034096:tid 1034375] [client 93.123.109.228:48906] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/erp/.env"] [unique_id "apK9wC04twRPFuquKD257wAAAQE"]
[Sat Aug 29 05:08:48.165092 2026] [security2:error] [pid 1034096:tid 1034320] [client 20.104.68.135:18285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.east-town.org"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "apK9wC04twRPFuquKD258QAAAMo"]
[Sat Aug 29 05:08:48.177123 2026] [security2:error] [pid 1034096:tid 1034358] [client 20.104.49.130:52522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/ortasekerli1.php"] [unique_id "apK9wC04twRPFuquKD258wAAAPA"]
[Sat Aug 29 05:08:48.178341 2026] [security2:error] [pid 1034096:tid 1034325] [client 45.148.10.62:40212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wxg.uhf.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "apK9wC04twRPFuquKD259AAAAM8"]
[Sat Aug 29 05:08:48.185160 2026] [security2:error] [pid 1041789:tid 1042028] [client 68.155.159.216:49207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-includes/index.php"] [unique_id "apK9wIv3RhPI65jTFG7U9QAAA38"]
[Sat Aug 29 05:08:48.187726 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.196.209.81:13065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/post.php"] [unique_id "apK9wIv3RhPI65jTFG7U9gAAA3o"]
[Sat Aug 29 05:08:48.189954 2026] [security2:error] [pid 1041789:tid 1041998] [client 93.123.109.228:48944] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/etc/apache2/apache2.conf"] [unique_id "apK9wIv3RhPI65jTFG7U9wAAA2E"]
[Sat Aug 29 05:08:48.197649 2026] [security2:error] [pid 1034096:tid 1034346] [client 103.240.76.112:49922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK9wC04twRPFuquKD25_AAAAOQ"]
[Sat Aug 29 05:08:48.197755 2026] [security2:error] [pid 1034096:tid 1034346] [client 103.240.76.112:49922] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK9wC04twRPFuquKD25_AAAAOQ"]
[Sat Aug 29 05:08:48.198968 2026] [security2:error] [pid 1041789:tid 1042009] [client 20.197.61.180:1876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/hehe.php"] [unique_id "apK9wIv3RhPI65jTFG7U-AAAA2w"]
[Sat Aug 29 05:08:48.200780 2026] [security2:error] [pid 1041789:tid 1042027] [client 93.123.109.228:48884] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/etc/boto.cfg"] [unique_id "apK9wIv3RhPI65jTFG7U-QAAA34"]
[Sat Aug 29 05:08:48.205955 2026] [security2:error] [pid 1034096:tid 1034313] [client 158.158.54.35:31643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/term.php"] [unique_id "apK9wC04twRPFuquKD26AgAAAMM"]
[Sat Aug 29 05:08:48.212050 2026] [core:error] [pid 1041789:tid 1042019] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.212067 2026] [core:error] [pid 1041789:tid 1042019] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.216300 2026] [security2:error] [pid 1034096:tid 1034378] [client 93.123.109.228:48854] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/fe/.env"] [unique_id "apK9wC04twRPFuquKD26CAAAAQQ"]
[Sat Aug 29 05:08:48.220938 2026] [security2:error] [pid 1041789:tid 1041956] [client 52.139.37.240:12871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/shell.php"] [unique_id "apK9wIv3RhPI65jTFG7U_QAAAzc"]
[Sat Aug 29 05:08:48.222647 2026] [security2:error] [pid 1034096:tid 1034269] [client 158.23.147.79:50038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-admin/network/index.php"] [unique_id "apK9wC04twRPFuquKD26CQAAAJc"]
[Sat Aug 29 05:08:48.239782 2026] [security2:error] [pid 1034096:tid 1034306] [client 158.23.147.79:17530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK9wC04twRPFuquKD26EAAAALw"]
[Sat Aug 29 05:08:48.246254 2026] [core:error] [pid 1041789:tid 1042004] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.246271 2026] [core:error] [pid 1041789:tid 1042004] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.253246 2026] [core:error] [pid 1034096:tid 1034319] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.253264 2026] [core:error] [pid 1034096:tid 1034319] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.256307 2026] [core:error] [pid 1034096:tid 1034373] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.256327 2026] [core:error] [pid 1034096:tid 1034373] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.257395 2026] [core:error] [pid 1034096:tid 1034286] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.257413 2026] [core:error] [pid 1034096:tid 1034286] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.257791 2026] [core:error] [pid 1034096:tid 1034274] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.257802 2026] [core:error] [pid 1034096:tid 1034274] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.259608 2026] [core:error] [pid 1034096:tid 1034328] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.259620 2026] [core:error] [pid 1034096:tid 1034328] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.259987 2026] [core:error] [pid 1041789:tid 1042048] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.260007 2026] [core:error] [pid 1041789:tid 1042048] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.266853 2026] [core:error] [pid 1034096:tid 1034340] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.266867 2026] [core:error] [pid 1034096:tid 1034340] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.268733 2026] [core:error] [pid 1034096:tid 1034301] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.268747 2026] [core:error] [pid 1034096:tid 1034301] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.269339 2026] [core:error] [pid 1041789:tid 1041972] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.269351 2026] [core:error] [pid 1041789:tid 1041972] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.286236 2026] [security2:error] [pid 1041789:tid 1042046] [client 93.123.109.228:48868] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/front/.env"] [unique_id "apK9wIv3RhPI65jTFG7VBQAAA5E"]
[Sat Aug 29 05:08:48.289668 2026] [security2:error] [pid 1034096:tid 1034304] [client 93.123.109.228:48688] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/frontend/.env"] [unique_id "apK9wC04twRPFuquKD26JgAAALo"]
[Sat Aug 29 05:08:48.299090 2026] [core:error] [pid 1034096:tid 1034270] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.299106 2026] [core:error] [pid 1034096:tid 1034270] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.311654 2026] [security2:error] [pid 1034096:tid 1034273] [client 45.148.10.62:40226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wxe.rvy.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "apK9wC04twRPFuquKD26LAAAAJs"]
[Sat Aug 29 05:08:48.331703 2026] [security2:error] [pid 1041789:tid 1041991] [client 45.148.10.62:40218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wxd.mej.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "apK9wIv3RhPI65jTFG7VCgAAA1o"]
[Sat Aug 29 05:08:48.336689 2026] [security2:error] [pid 1034096:tid 1034377] [client 4.205.62.107:53349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/kedi.php"] [unique_id "apK9wC04twRPFuquKD26MQAAAQM"]
[Sat Aug 29 05:08:48.342161 2026] [security2:error] [pid 1041789:tid 1041989] [client 93.123.109.228:48928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/info.php"] [unique_id "apK9wIv3RhPI65jTFG7VDAAAA1g"]
[Sat Aug 29 05:08:48.342788 2026] [security2:error] [pid 1041789:tid 1042034] [client 40.83.93.50:12939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-admin/wp-mail.php"] [unique_id "apK9wIv3RhPI65jTFG7VDgAAA4U"]
[Sat Aug 29 05:08:48.353209 2026] [security2:error] [pid 1041789:tid 1041999] [client 93.123.109.228:48884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/infophp.php"] [unique_id "apK9wIv3RhPI65jTFG7VEAAAA2I"]
[Sat Aug 29 05:08:48.364075 2026] [security2:error] [pid 1041789:tid 1041955] [client 68.155.159.216:6126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK9wIv3RhPI65jTFG7VEgAAAzY"]
[Sat Aug 29 05:08:48.364114 2026] [security2:error] [pid 1041789:tid 1042044] [client 20.104.68.135:51685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.east-town.org"] [uri "/wp-content/uploads/de_fb_uploads/b.php"] [unique_id "apK9wIv3RhPI65jTFG7VEwAAA48"]
[Sat Aug 29 05:08:48.367106 2026] [security2:error] [pid 1034096:tid 1034267] [client 40.83.93.50:13187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/configs.php"] [unique_id "apK9wC04twRPFuquKD26OAAAAJU"]
[Sat Aug 29 05:08:48.367488 2026] [core:error] [pid 1041789:tid 1042045] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.367513 2026] [core:error] [pid 1041789:tid 1042045] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.372630 2026] [security2:error] [pid 1034096:tid 1034342] [client 93.123.109.228:48854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/infos.php"] [unique_id "apK9wC04twRPFuquKD26OQAAAOA"]
[Sat Aug 29 05:08:48.373534 2026] [security2:error] [pid 1041789:tid 1042052] [client 68.155.159.216:1861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/content.php"] [unique_id "apK9wIv3RhPI65jTFG7VFAAAA5c"]
[Sat Aug 29 05:08:48.376219 2026] [security2:error] [pid 1034096:tid 1034278] [client 4.232.148.111:35780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/shell.php"] [unique_id "apK9wC04twRPFuquKD26OgAAAKA"]
[Sat Aug 29 05:08:48.389474 2026] [core:error] [pid 1041789:tid 1041981] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.389478 2026] [core:error] [pid 1041789:tid 1041933] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.389490 2026] [core:error] [pid 1041789:tid 1041981] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.389494 2026] [core:error] [pid 1041789:tid 1041933] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.391664 2026] [core:error] [pid 1034096:tid 1034284] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.391677 2026] [core:error] [pid 1034096:tid 1034284] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.414114 2026] [security2:error] [pid 1041789:tid 1041961] [client 52.139.37.240:12895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK9wIv3RhPI65jTFG7VGAAAAzw"]
[Sat Aug 29 05:08:48.420423 2026] [security2:error] [pid 1041789:tid 1041997] [client 68.155.159.216:2023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK9wIv3RhPI65jTFG7VGQAAA2A"]
[Sat Aug 29 05:08:48.446262 2026] [security2:error] [pid 1041789:tid 1041982] [client 93.123.109.228:48868] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/laravel/.env"] [unique_id "apK9wIv3RhPI65jTFG7VGwAAA1E"]
[Sat Aug 29 05:08:48.455347 2026] [security2:error] [pid 1041789:tid 1042042] [client 93.123.109.228:48910] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/lms/.env"] [unique_id "apK9wIv3RhPI65jTFG7VHwAAA40"]
[Sat Aug 29 05:08:48.457718 2026] [security2:error] [pid 1034096:tid 1034169] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/s3/.env.bak"] [unique_id "apK9wC04twRPFuquKD26TgAApS8"]
[Sat Aug 29 05:08:48.473572 2026] [core:error] [pid 1041789:tid 1042012] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.473590 2026] [core:error] [pid 1041789:tid 1042012] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.473811 2026] [core:error] [pid 1041789:tid 1041946] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.473824 2026] [core:error] [pid 1041789:tid 1041946] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.475134 2026] [security2:error] [pid 1041789:tid 1042020] [client 93.123.109.228:48894] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/local/.env"] [unique_id "apK9wIv3RhPI65jTFG7VJQAAA3c"]
[Sat Aug 29 05:08:48.475352 2026] [core:error] [pid 1041789:tid 1041964] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.475374 2026] [core:error] [pid 1041789:tid 1041964] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.475547 2026] [core:error] [pid 1041789:tid 1041995] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.475564 2026] [core:error] [pid 1041789:tid 1041995] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.476125 2026] [core:error] [pid 1034096:tid 1034346] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.476597 2026] [core:error] [pid 1034096:tid 1034346] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.476678 2026] [core:error] [pid 1034096:tid 1034313] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.476685 2026] [core:error] [pid 1034096:tid 1034313] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.481319 2026] [core:error] [pid 1034096:tid 1034180] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.481332 2026] [core:error] [pid 1034096:tid 1034180] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.485771 2026] [core:error] [pid 1034096:tid 1034372] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.485800 2026] [core:error] [pid 1034096:tid 1034372] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.490578 2026] [security2:error] [pid 1034096:tid 1034134] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/server/.env"] [unique_id "apK9wC04twRPFuquKD26VQAApQw"]
[Sat Aug 29 05:08:48.490846 2026] [core:error] [pid 1034096:tid 1034363] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.490859 2026] [core:error] [pid 1034096:tid 1034363] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.497179 2026] [security2:error] [pid 1034096:tid 1034252] [client 40.83.93.50:18887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/disagraeed.php"] [unique_id "apK9wC04twRPFuquKD26XQAAAIY"]
[Sat Aug 29 05:08:48.518079 2026] [security2:error] [pid 1041789:tid 1042017] [client 93.123.109.228:48944] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/market/.env"] [unique_id "apK9wIv3RhPI65jTFG7VMAAAA3Q"]
[Sat Aug 29 05:08:48.519001 2026] [security2:error] [pid 1034096:tid 1034309] [client 93.123.109.228:48906] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/marketing/.env"] [unique_id "apK9wC04twRPFuquKD26ZAAAAL8"]
[Sat Aug 29 05:08:48.519468 2026] [security2:error] [pid 1034096:tid 1034294] [client 93.123.109.228:48902] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/media/.env"] [unique_id "apK9wC04twRPFuquKD26ZgAAALA"]
[Sat Aug 29 05:08:48.530447 2026] [security2:error] [pid 1034096:tid 1034213] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/server/api/.env"] [unique_id "apK9wC04twRPFuquKD26agAA-1s"]
[Sat Aug 29 05:08:48.540806 2026] [security2:error] [pid 1034096:tid 1034316] [client 20.63.219.114:15419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/hehe.php"] [unique_id "apK9wC04twRPFuquKD26bwAAAMY"]
[Sat Aug 29 05:08:48.546897 2026] [core:error] [pid 1034096:tid 1034164] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.546916 2026] [core:error] [pid 1034096:tid 1034164] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.561444 2026] [security2:error] [pid 1034096:tid 1034344] [client 20.104.68.135:14133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.east-town.org"] [uri "/wp-content/uploads/index.php"] [unique_id "apK9wC04twRPFuquKD26cQAAAOI"]
[Sat Aug 29 05:08:48.580775 2026] [security2:error] [pid 1034096:tid 1034200] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/server/backend/.env"] [unique_id "apK9wC04twRPFuquKD26cwAAuk4"]
[Sat Aug 29 05:08:48.584472 2026] [security2:error] [pid 1041789:tid 1041987] [client 93.123.109.228:48858] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/new/.env"] [unique_id "apK9wIv3RhPI65jTFG7VMgAAA1Y"]
[Sat Aug 29 05:08:48.591349 2026] [core:error] [pid 1034096:tid 1034241] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.591381 2026] [core:error] [pid 1034096:tid 1034241] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.605652 2026] [security2:error] [pid 1034096:tid 1034273] [client 93.123.109.228:48930] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/node-api/.env"] [unique_id "apK9wC04twRPFuquKD26fAAAAJs"]
[Sat Aug 29 05:08:48.608300 2026] [security2:error] [pid 1034096:tid 1034324] [client 68.155.159.216:30637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/sad/about.php"] [unique_id "apK9wC04twRPFuquKD26fQAAAM4"]
[Sat Aug 29 05:08:48.609236 2026] [security2:error] [pid 1034096:tid 1034266] [client 52.139.37.240:12438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/wp-content/plugins/linkpreview/il.php"] [unique_id "apK9wC04twRPFuquKD26fgAAAJQ"]
[Sat Aug 29 05:08:48.616240 2026] [security2:error] [pid 1041789:tid 1041938] [client 93.123.109.228:48910] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/node/.env"] [unique_id "apK9wIv3RhPI65jTFG7VMwAAAyU"]
[Sat Aug 29 05:08:48.618126 2026] [core:error] [pid 1034096:tid 1034201] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.618141 2026] [core:error] [pid 1034096:tid 1034201] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.623038 2026] [security2:error] [pid 1041789:tid 1041825] [remote 74.7.227.154:54326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK9wIv3RhPI65jTFG7VNAADMRc"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwp-easycart%2Finc%2Fclasses%2Fstore
[Sat Aug 29 05:08:48.623331 2026] [core:error] [pid 1034096:tid 1034210] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.623342 2026] [core:error] [pid 1034096:tid 1034210] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.624824 2026] [security2:error] [pid 1041789:tid 1042016] [client 93.123.109.228:48868] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/node/api/.env"] [unique_id "apK9wIv3RhPI65jTFG7VNQAAA3M"]
[Sat Aug 29 05:08:48.625467 2026] [core:error] [pid 1034096:tid 1034208] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.625480 2026] [core:error] [pid 1034096:tid 1034208] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.627333 2026] [security2:error] [pid 1041789:tid 1042028] [client 20.151.200.44:64563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/tanjiro.php"] [unique_id "apK9wIv3RhPI65jTFG7VNgAAA38"]
[Sat Aug 29 05:08:48.628706 2026] [core:error] [pid 1034096:tid 1034223] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.628718 2026] [core:error] [pid 1034096:tid 1034223] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.630375 2026] [core:error] [pid 1034096:tid 1034221] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.630388 2026] [core:error] [pid 1034096:tid 1034221] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.635576 2026] [security2:error] [pid 1041789:tid 1041942] [client 20.100.175.163:28683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/p.php"] [unique_id "apK9wIv3RhPI65jTFG7VNwAAAyk"]
[Sat Aug 29 05:08:48.638487 2026] [security2:error] [pid 1041789:tid 1042023] [client 45.148.10.62:40240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wxk.tiz.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "apK9wIv3RhPI65jTFG7VOAAAA3o"]
[Sat Aug 29 05:08:48.641849 2026] [security2:error] [pid 1034096:tid 1034233] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/services/.env"] [unique_id "apK9wC04twRPFuquKD26jAAA1m8"]
[Sat Aug 29 05:08:48.641934 2026] [security2:error] [pid 1034096:tid 1034214] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/service/.env"] [unique_id "apK9wC04twRPFuquKD26igAA1lw"]
[Sat Aug 29 05:08:48.644100 2026] [security2:error] [pid 1041789:tid 1041998] [client 93.123.109.228:48894] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/node/backend/.env"] [unique_id "apK9wIv3RhPI65jTFG7VOgAAA2E"]
[Sat Aug 29 05:08:48.645176 2026] [security2:error] [pid 1034096:tid 1034265] [client 158.23.147.79:11444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/lv.php"] [unique_id "apK9wC04twRPFuquKD26jwAAAJM"]
[Sat Aug 29 05:08:48.655762 2026] [security2:error] [pid 1034096:tid 1034255] [client 158.158.54.35:31669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/config.php"] [unique_id "apK9wC04twRPFuquKD26kgAAAIk"]
[Sat Aug 29 05:08:48.655866 2026] [security2:error] [pid 1034096:tid 1034362] [client 93.123.109.228:48688] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/nodeapi/.env"] [unique_id "apK9wC04twRPFuquKD26kQAAAPQ"]
[Sat Aug 29 05:08:48.658501 2026] [core:error] [pid 1041789:tid 1041983] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.658522 2026] [core:error] [pid 1041789:tid 1041983] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.659511 2026] [core:error] [pid 1034096:tid 1034357] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.659529 2026] [core:error] [pid 1034096:tid 1034357] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.661905 2026] [security2:error] [pid 1034096:tid 1034319] [client 20.240.128.207:23429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/bi.php"] [unique_id "apK9wC04twRPFuquKD26lAAAAMk"]
[Sat Aug 29 05:08:48.662535 2026] [security2:error] [pid 1041789:tid 1041945] [client 20.197.61.180:1882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/bak.phps"] [unique_id "apK9wIv3RhPI65jTFG7VPQAAAyw"]
[Sat Aug 29 05:08:48.666649 2026] [security2:error] [pid 1034096:tid 1034300] [client 93.123.109.228:48834] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/nodeweb/.env"] [unique_id "apK9wC04twRPFuquKD26lQAAALY"]
[Sat Aug 29 05:08:48.672934 2026] [core:error] [pid 1041789:tid 1042036] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.672954 2026] [core:error] [pid 1041789:tid 1042036] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.673116 2026] [core:error] [pid 1041789:tid 1042027] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.673133 2026] [core:error] [pid 1041789:tid 1042027] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.678327 2026] [core:error] [pid 1034096:tid 1034268] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.678347 2026] [core:error] [pid 1034096:tid 1034268] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.695563 2026] [security2:error] [pid 1034096:tid 1034325] [client 93.123.109.228:48736] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/old/.env"] [unique_id "apK9wC04twRPFuquKD26nAAAAM8"]
[Sat Aug 29 05:08:48.699974 2026] [core:error] [pid 1034096:tid 1034125] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.699991 2026] [core:error] [pid 1034096:tid 1034125] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.705769 2026] [security2:error] [pid 1034096:tid 1034378] [client 93.123.109.228:48666] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/opt/.env"] [unique_id "apK9wC04twRPFuquKD26ogAAAQQ"]
[Sat Aug 29 05:08:48.707239 2026] [security2:error] [pid 1034096:tid 1034367] [client 20.196.209.81:11391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/flower.php"] [unique_id "apK9wC04twRPFuquKD26owAAAPk"]
[Sat Aug 29 05:08:48.712518 2026] [core:error] [pid 1034096:tid 1034327] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.712535 2026] [core:error] [pid 1034096:tid 1034327] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.742660 2026] [security2:error] [pid 1034096:tid 1034306] [client 4.205.62.107:51420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/admin-ajax.php"] [unique_id "apK9wC04twRPFuquKD26qgAAALw"]
[Sat Aug 29 05:08:48.759441 2026] [security2:error] [pid 1034096:tid 1034318] [client 20.104.68.135:3028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.east-town.org"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK9wC04twRPFuquKD26sQAAAMg"]
[Sat Aug 29 05:08:48.770044 2026] [security2:error] [pid 1041789:tid 1042043] [client 20.48.251.3:14107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9wIv3RhPI65jTFG7VRwAAA44"]
[Sat Aug 29 05:08:48.777002 2026] [security2:error] [pid 1034096:tid 1034323] [client 20.104.49.130:60780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/ccc.php"] [unique_id "apK9wC04twRPFuquKD26uQAAAM0"]
[Sat Aug 29 05:08:48.777269 2026] [security2:error] [pid 1034096:tid 1034228] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/shop/.env"] [unique_id "apK9wC04twRPFuquKD26twAAxWo"]
[Sat Aug 29 05:08:48.777567 2026] [security2:error] [pid 1034096:tid 1034373] [client 74.248.24.12:37830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/s.php"] [unique_id "apK9wC04twRPFuquKD26ugAAAP8"]
[Sat Aug 29 05:08:48.781858 2026] [security2:error] [pid 1041789:tid 1042035] [client 158.23.147.79:5894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-content/cong.php"] [unique_id "apK9wIv3RhPI65jTFG7VUgAAA4Y"]
[Sat Aug 29 05:08:48.781959 2026] [security2:error] [pid 1034096:tid 1034122] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/shared/.env"] [unique_id "apK9wC04twRPFuquKD26vgAAxQA"]
[Sat Aug 29 05:08:48.782522 2026] [security2:error] [pid 1034096:tid 1034291] [client 20.197.61.180:1042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/goods.php"] [unique_id "apK9wC04twRPFuquKD26vwAAAK0"]
[Sat Aug 29 05:08:48.784582 2026] [core:error] [pid 1041789:tid 1042031] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.784596 2026] [core:error] [pid 1041789:tid 1042031] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.785384 2026] [core:error] [pid 1041789:tid 1042029] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.785398 2026] [core:error] [pid 1041789:tid 1042029] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.795963 2026] [security2:error] [pid 1034096:tid 1034359] [client 20.52.41.200:4606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-content/admin.php"] [unique_id "apK9wC04twRPFuquKD26wwAAAPE"]
[Sat Aug 29 05:08:48.799534 2026] [autoindex:error] [pid 1034096:tid 1034206] [remote 45.148.10.62:40242] AH01276: Cannot serve directory /home3/wxguhfmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:08:48.803705 2026] [core:error] [pid 1041789:tid 1042034] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.803723 2026] [core:error] [pid 1041789:tid 1042034] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.804940 2026] [core:error] [pid 1041789:tid 1041980] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.804955 2026] [core:error] [pid 1041789:tid 1041980] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.806248 2026] [security2:error] [pid 1034096:tid 1034297] [client 52.139.37.240:12426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/wp-header-json.php"] [unique_id "apK9wC04twRPFuquKD26xQAAALM"]
[Sat Aug 29 05:08:48.810899 2026] [security2:error] [pid 1034096:tid 1034285] [client 40.83.93.50:12959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-admin/wp-settings.php"] [unique_id "apK9wC04twRPFuquKD26xgAAAKc"]
[Sat Aug 29 05:08:48.814074 2026] [core:error] [pid 1041789:tid 1041955] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.814092 2026] [core:error] [pid 1041789:tid 1041955] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.816607 2026] [core:error] [pid 1041789:tid 1041977] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.816620 2026] [core:error] [pid 1041789:tid 1041977] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.817925 2026] [security2:error] [pid 1034096:tid 1034205] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/src/.env"] [unique_id "apK9wC04twRPFuquKD26yQAAxVM"]
[Sat Aug 29 05:08:48.819334 2026] [core:error] [pid 1041789:tid 1042014] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.819350 2026] [core:error] [pid 1041789:tid 1042014] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.823850 2026] [core:error] [pid 1034096:tid 1034237] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.823864 2026] [core:error] [pid 1034096:tid 1034237] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.834179 2026] [security2:error] [pid 1041789:tid 1041968] [client 4.205.62.107:6931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/guk.php"] [unique_id "apK9wIv3RhPI65jTFG7VYQAAA0M"]
[Sat Aug 29 05:08:48.838778 2026] [autoindex:error] [pid 1041789:tid 1041827] [remote 45.148.10.62:40258] AH01276: Cannot serve directory /home3/wxervymy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:08:48.841819 2026] [security2:error] [pid 1034096:tid 1034272] [client 4.232.148.111:35803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/elp.php"] [unique_id "apK9wC04twRPFuquKD26zgAAAJo"]
[Sat Aug 29 05:08:48.856965 2026] [core:error] [pid 1034096:tid 1034240] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.856980 2026] [core:error] [pid 1034096:tid 1034240] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.859648 2026] [security2:error] [pid 1034096:tid 1034140] [remote 93.123.109.228:42974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/info.php"] [unique_id "apK9wC04twRPFuquKD261AAAshI"]
[Sat Aug 29 05:08:48.864842 2026] [security2:error] [pid 1034096:tid 1034231] [remote 93.123.109.228:42974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/infophp.php"] [unique_id "apK9wC04twRPFuquKD261gAAsm0"]
[Sat Aug 29 05:08:48.879621 2026] [core:error] [pid 1034096:tid 1034298] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.879642 2026] [core:error] [pid 1034096:tid 1034298] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.882818 2026] [core:error] [pid 1034096:tid 1034247] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.882835 2026] [core:error] [pid 1034096:tid 1034247] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.883011 2026] [core:error] [pid 1034096:tid 1034141] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.883024 2026] [core:error] [pid 1034096:tid 1034141] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.883567 2026] [core:error] [pid 1034096:tid 1034162] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.883599 2026] [core:error] [pid 1034096:tid 1034162] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.887526 2026] [security2:error] [pid 1034096:tid 1034135] [remote 93.123.109.228:42974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/infos.php"] [unique_id "apK9wC04twRPFuquKD263gAAzg0"]
[Sat Aug 29 05:08:48.889141 2026] [security2:error] [pid 1034096:tid 1034267] [client 20.197.61.180:1041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/Njima.php"] [unique_id "apK9wC04twRPFuquKD263wAAAJU"]
[Sat Aug 29 05:08:48.891379 2026] [security2:error] [pid 1034096:tid 1034260] [client 158.23.147.79:59903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK9wC04twRPFuquKD264AAAAI4"]
[Sat Aug 29 05:08:48.893537 2026] [autoindex:error] [pid 1034096:tid 1034139] [remote 45.148.10.62:40264] AH01276: Cannot serve directory /home3/wxdmejmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:08:48.902139 2026] [security2:error] [pid 1034096:tid 1034265] [client 20.48.251.3:14036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9wC04twRPFuquKD264gAAAJM"]
[Sat Aug 29 05:08:48.903412 2026] [security2:error] [pid 1041789:tid 1041932] [client 4.205.62.107:65462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/phpversion.php"] [unique_id "apK9wIv3RhPI65jTFG7VYwAAAx8"]
[Sat Aug 29 05:08:48.904124 2026] [security2:error] [pid 1041789:tid 1041956] [client 20.197.61.180:2024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/wp-admin/class-db.php"] [unique_id "apK9wIv3RhPI65jTFG7VZAAAAzc"]
[Sat Aug 29 05:08:48.919424 2026] [security2:error] [pid 1034096:tid 1034376] [client 4.205.62.107:62954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/localconf.php"] [unique_id "apK9wC04twRPFuquKD265gAAAQI"]
[Sat Aug 29 05:08:48.921593 2026] [security2:error] [pid 1034096:tid 1034255] [client 93.123.109.228:48892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/php-info.php"] [unique_id "apK9wC04twRPFuquKD266AAAAIk"]
[Sat Aug 29 05:08:48.923667 2026] [security2:error] [pid 1041789:tid 1041982] [client 93.123.109.228:48858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/php.php"] [unique_id "apK9wIv3RhPI65jTFG7VZQAAA1E"]
[Sat Aug 29 05:08:48.928147 2026] [security2:error] [pid 1034096:tid 1034357] [client 93.123.109.228:48930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/php_info.php"] [unique_id "apK9wC04twRPFuquKD266QAAAO8"]
[Sat Aug 29 05:08:48.943581 2026] [core:error] [pid 1034096:tid 1034246] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.943602 2026] [core:error] [pid 1034096:tid 1034246] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.943945 2026] [security2:error] [pid 1041789:tid 1042001] [client 93.123.109.228:48868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/phpinfo.php"] [unique_id "apK9wIv3RhPI65jTFG7VZwAAA2Q"]
[Sat Aug 29 05:08:48.957899 2026] [security2:error] [pid 1041789:tid 1041966] [client 20.104.68.135:18196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.east-town.org"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "apK9wIv3RhPI65jTFG7VaAAAA0E"]
[Sat Aug 29 05:08:48.959746 2026] [core:error] [pid 1034096:tid 1034148] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.959772 2026] [core:error] [pid 1034096:tid 1034148] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.969304 2026] [core:error] [pid 1034096:tid 1034147] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.969318 2026] [core:error] [pid 1034096:tid 1034147] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.971767 2026] [security2:error] [pid 1034096:tid 1034136] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/srv/.env"] [unique_id "apK9wC04twRPFuquKD268wAAnQ4"]
[Sat Aug 29 05:08:48.973028 2026] [core:error] [pid 1034096:tid 1034123] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.973041 2026] [core:error] [pid 1034096:tid 1034123] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.973050 2026] [core:error] [pid 1034096:tid 1034143] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.973059 2026] [core:error] [pid 1034096:tid 1034143] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.983861 2026] [security2:error] [pid 1034096:tid 1034158] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/staging/.env"] [unique_id "apK9wC04twRPFuquKD269wAAnSQ"]
[Sat Aug 29 05:08:48.983970 2026] [security2:error] [pid 1034096:tid 1034137] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/stage/.env"] [unique_id "apK9wC04twRPFuquKD269gAAnQ8"]
[Sat Aug 29 05:08:48.985100 2026] [core:error] [pid 1034096:tid 1034151] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.985111 2026] [core:error] [pid 1034096:tid 1034151] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:48.992523 2026] [security2:error] [pid 1034096:tid 1034316] [client 40.83.93.50:13186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/disagraeed.php"] [unique_id "apK9wC04twRPFuquKD26-wAAAMY"]
[Sat Aug 29 05:08:48.997956 2026] [security2:error] [pid 1041789:tid 1041952] [client 93.123.109.228:48894] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/portal/.env"] [unique_id "apK9wIv3RhPI65jTFG7VaQAAAzM"]
[Sat Aug 29 05:08:49.001546 2026] [core:error] [pid 1034096:tid 1034236] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.001560 2026] [core:error] [pid 1034096:tid 1034236] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.003413 2026] [security2:error] [pid 1034096:tid 1034278] [client 52.139.37.240:12511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/zup.php"] [unique_id "apK9wS04twRPFuquKD26_wAAAKA"]
[Sat Aug 29 05:08:49.007189 2026] [core:error] [pid 1034096:tid 1034176] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.007200 2026] [core:error] [pid 1034096:tid 1034176] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.012079 2026] [security2:error] [pid 1034096:tid 1034269] [client 20.48.250.41:49928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9wS04twRPFuquKD27AwAAAJc"]
[Sat Aug 29 05:08:49.023297 2026] [security2:error] [pid 1034096:tid 1034325] [client 93.123.109.228:48960] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/prod/.env"] [unique_id "apK9wS04twRPFuquKD27BgAAAM8"]
[Sat Aug 29 05:08:49.024105 2026] [security2:error] [pid 1041789:tid 1041940] [client 20.151.200.44:63175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/Rk41.php"] [unique_id "apK9wYv3RhPI65jTFG7VbQAAAyc"]
[Sat Aug 29 05:08:49.024651 2026] [core:error] [pid 1041789:tid 1042020] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.024664 2026] [core:error] [pid 1041789:tid 1042020] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.031698 2026] [security2:error] [pid 1034096:tid 1034253] [client 20.48.251.3:14326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/cloud.php"] [unique_id "apK9wS04twRPFuquKD27CAAAAIc"]
[Sat Aug 29 05:08:49.043661 2026] [security2:error] [pid 1034096:tid 1034306] [client 93.123.109.228:48736] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/product/.env"] [unique_id "apK9wS04twRPFuquKD27CQAAALw"]
[Sat Aug 29 05:08:49.049256 2026] [security2:error] [pid 1034096:tid 1034290] [client 40.83.93.50:11904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/add_actualites.php"] [unique_id "apK9wS04twRPFuquKD27DQAAAKw"]
[Sat Aug 29 05:08:49.052497 2026] [security2:error] [pid 1034096:tid 1034150] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/stg/.env"] [unique_id "apK9wS04twRPFuquKD27DgAA9Rw"]
[Sat Aug 29 05:08:49.054082 2026] [core:error] [pid 1034096:tid 1034182] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.054095 2026] [core:error] [pid 1034096:tid 1034182] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.054407 2026] [core:error] [pid 1034096:tid 1034166] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.054418 2026] [core:error] [pid 1034096:tid 1034166] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.055756 2026] [core:error] [pid 1034096:tid 1034156] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.055769 2026] [core:error] [pid 1034096:tid 1034156] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.059592 2026] [security2:error] [pid 1034096:tid 1034274] [client 68.155.159.216:14246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/dropdown.php"] [unique_id "apK9wS04twRPFuquKD27EwAAAJw"]
[Sat Aug 29 05:08:49.061080 2026] [security2:error] [pid 1034096:tid 1034361] [client 93.123.109.228:48666] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/production/.env"] [unique_id "apK9wS04twRPFuquKD27FAAAAPM"]
[Sat Aug 29 05:08:49.073472 2026] [security2:error] [pid 1034096:tid 1034317] [client 68.155.159.216:23549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/NewFile.php/"] [unique_id "apK9wS04twRPFuquKD27FQAAAMc"]
[Sat Aug 29 05:08:49.076587 2026] [security2:error] [pid 1041789:tid 1042015] [client 68.155.159.216:33712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/dropdown.php"] [unique_id "apK9wYv3RhPI65jTFG7VbgAAA3I"]
[Sat Aug 29 05:08:49.091421 2026] [security2:error] [pid 1034096:tid 1034291] [client 93.123.109.228:48906] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/project/.env"] [unique_id "apK9wS04twRPFuquKD27GQAAAK0"]
[Sat Aug 29 05:08:49.094059 2026] [core:error] [pid 1034096:tid 1034199] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.094072 2026] [core:error] [pid 1034096:tid 1034199] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.106825 2026] [security2:error] [pid 1034096:tid 1034320] [client 158.158.54.35:11979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK9wS04twRPFuquKD27HQAAAMo"]
[Sat Aug 29 05:08:49.111750 2026] [security2:error] [pid 1034096:tid 1034308] [client 20.48.250.41:45351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9wS04twRPFuquKD27HwAAAL4"]
[Sat Aug 29 05:08:49.119186 2026] [security2:error] [pid 1034096:tid 1034312] [client 20.196.209.81:1417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/meta.php"] [unique_id "apK9wS04twRPFuquKD27IwAAAMI"]
[Sat Aug 29 05:08:49.119553 2026] [core:error] [pid 1034096:tid 1034190] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.119567 2026] [core:error] [pid 1034096:tid 1034190] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.122620 2026] [security2:error] [pid 1034096:tid 1034187] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/stripe/.env"] [unique_id "apK9wS04twRPFuquKD27JAAAwUE"]
[Sat Aug 29 05:08:49.122837 2026] [security2:error] [pid 1034096:tid 1034284] [client 20.100.175.163:7541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/a1.php"] [unique_id "apK9wS04twRPFuquKD27JgAAAKY"]
[Sat Aug 29 05:08:49.131596 2026] [security2:error] [pid 1034096:tid 1034301] [client 93.123.109.228:48898] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/public-api/.env"] [unique_id "apK9wS04twRPFuquKD27KAAAALc"]
[Sat Aug 29 05:08:49.134866 2026] [core:error] [pid 1034096:tid 1034169] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.134884 2026] [core:error] [pid 1034096:tid 1034169] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.145003 2026] [security2:error] [pid 1034096:tid 1034378] [client 20.63.219.114:19893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/wp-admin/class-db.php"] [unique_id "apK9wS04twRPFuquKD27LgAAAQQ"]
[Sat Aug 29 05:08:49.145777 2026] [security2:error] [pid 1041789:tid 1042018] [client 20.240.128.207:7421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/cc.php"] [unique_id "apK9wYv3RhPI65jTFG7VcwAAA3U"]
[Sat Aug 29 05:08:49.152713 2026] [core:error] [pid 1041789:tid 1041936] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.152735 2026] [core:error] [pid 1041789:tid 1041936] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.157801 2026] [autoindex:error] [pid 1034096:tid 1034192] [remote 45.148.10.62:40276] AH01276: Cannot serve directory /home3/wxktizmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:08:49.158277 2026] [security2:error] [pid 1034096:tid 1034369] [client 93.123.109.228:48834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/public/phpinfo.php"] [unique_id "apK9wS04twRPFuquKD27NgAAAPs"]
[Sat Aug 29 05:08:49.159399 2026] [core:error] [pid 1034096:tid 1034293] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.159412 2026] [core:error] [pid 1034096:tid 1034293] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.159468 2026] [core:error] [pid 1041789:tid 1041965] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.159479 2026] [core:error] [pid 1041789:tid 1041965] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.161129 2026] [security2:error] [pid 1041789:tid 1041959] [client 20.48.251.3:14073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/kerang.php"] [unique_id "apK9wYv3RhPI65jTFG7VeAAAAzo"]
[Sat Aug 29 05:08:49.161327 2026] [security2:error] [pid 1041789:tid 1042056] [client 93.123.109.228:48894] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/public/.env"] [unique_id "apK9wYv3RhPI65jTFG7VdwAAA5s"]
[Sat Aug 29 05:08:49.162855 2026] [security2:error] [pid 1041789:tid 1041963] [client 4.205.62.107:56004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/userfuns.php"] [unique_id "apK9wYv3RhPI65jTFG7VegAAAz4"]
[Sat Aug 29 05:08:49.165406 2026] [core:error] [pid 1034096:tid 1034375] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.165429 2026] [core:error] [pid 1034096:tid 1034375] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.165791 2026] [security2:error] [pid 1041789:tid 1041951] [client 20.48.250.41:50041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9wYv3RhPI65jTFG7VewAAAzI"]
[Sat Aug 29 05:08:49.178019 2026] [core:error] [pid 1034096:tid 1034296] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.178038 2026] [core:error] [pid 1034096:tid 1034296] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.178310 2026] [security2:error] [pid 1041789:tid 1041939] [client 93.123.109.228:48944] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/public_html/.env"] [unique_id "apK9wYv3RhPI65jTFG7VfAAAAyY"]
[Sat Aug 29 05:08:49.185292 2026] [core:error] [pid 1034096:tid 1034298] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.185307 2026] [core:error] [pid 1034096:tid 1034298] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.198724 2026] [security2:error] [pid 1041789:tid 1041970] [client 52.139.37.240:12491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/a9.php"] [unique_id "apK9wYv3RhPI65jTFG7VfQAAA0U"]
[Sat Aug 29 05:08:49.201110 2026] [security2:error] [pid 1034096:tid 1034193] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/terraform.tfstate.backup"] [unique_id "apK9wS04twRPFuquKD27QQAAwUc"]
[Sat Aug 29 05:08:49.202885 2026] [security2:error] [pid 1034096:tid 1034352] [client 93.123.109.228:48902] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/qa/.env"] [unique_id "apK9wS04twRPFuquKD27RAAAAOo"]
[Sat Aug 29 05:08:49.204181 2026] [core:error] [pid 1034096:tid 1034213] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.204200 2026] [core:error] [pid 1034096:tid 1034213] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.209965 2026] [core:error] [pid 1041789:tid 1041948] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.209981 2026] [core:error] [pid 1041789:tid 1041948] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.215984 2026] [security2:error] [pid 1034096:tid 1034196] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/test.php"] [unique_id "apK9wS04twRPFuquKD27TAAAwUo"]
[Sat Aug 29 05:08:49.221598 2026] [security2:error] [pid 1034096:tid 1034342] [client 20.104.68.135:23559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.east-town.org"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "apK9wS04twRPFuquKD27TgAAAOA"]
[Sat Aug 29 05:08:49.235755 2026] [security2:error] [pid 1034096:tid 1034310] [client 68.155.159.216:33678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/goat1.php"] [unique_id "apK9wS04twRPFuquKD27UAAAAMA"]
[Sat Aug 29 05:08:49.241673 2026] [security2:error] [pid 1034096:tid 1034304] [client 20.48.250.41:45328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9wS04twRPFuquKD27UwAAALo"]
[Sat Aug 29 05:08:49.243202 2026] [security2:error] [pid 1034096:tid 1034314] [client 68.155.159.216:18380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-includes/content.php"] [unique_id "apK9wS04twRPFuquKD27VAAAAMQ"]
[Sat Aug 29 05:08:49.250482 2026] [security2:error] [pid 1034096:tid 1034229] [remote 45.148.10.62:40242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wxg.uhf.mybluehost.me"] [uri "/wp-login.php"] [unique_id "apK9wS04twRPFuquKD27VQAA2Ws"]
[Sat Aug 29 05:08:49.253032 2026] [security2:error] [pid 1034096:tid 1034365] [client 20.52.41.200:5370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-configs.php"] [unique_id "apK9wS04twRPFuquKD27VwAAAPc"]
[Sat Aug 29 05:08:49.255483 2026] [core:error] [pid 1034096:tid 1034287] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.255502 2026] [core:error] [pid 1034096:tid 1034287] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.259460 2026] [core:error] [pid 1041789:tid 1042023] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.259479 2026] [core:error] [pid 1041789:tid 1042023] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.260447 2026] [security2:error] [pid 1034096:tid 1034321] [client 68.155.159.216:64504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK9wS04twRPFuquKD27WgAAAMs"]
[Sat Aug 29 05:08:49.263721 2026] [security2:error] [pid 1034096:tid 1034300] [client 4.205.62.107:21915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/public/mah.php.php"] [unique_id "apK9wS04twRPFuquKD27WwAAALY"]
[Sat Aug 29 05:08:49.267274 2026] [security2:error] [pid 1034096:tid 1034226] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/test/.env"] [unique_id "apK9wS04twRPFuquKD27XAAAwWg"]
[Sat Aug 29 05:08:49.273630 2026] [security2:error] [pid 1041789:tid 1042036] [client 158.23.147.79:26494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/bk/index.php"] [unique_id "apK9wYv3RhPI65jTFG7VhAAAA4c"]
[Sat Aug 29 05:08:49.288310 2026] [security2:error] [pid 1034096:tid 1034307] [client 74.248.24.12:5455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/test1.php"] [unique_id "apK9wS04twRPFuquKD27ZwAAAL0"]
[Sat Aug 29 05:08:49.290949 2026] [security2:error] [pid 1034096:tid 1034275] [client 20.48.251.3:14303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/rem.php"] [unique_id "apK9wS04twRPFuquKD27aAAAAJ0"]
[Sat Aug 29 05:08:49.295899 2026] [security2:error] [pid 1041789:tid 1042004] [client 20.48.250.41:49940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/ff1.php"] [unique_id "apK9wYv3RhPI65jTFG7VhQAAA2c"]
[Sat Aug 29 05:08:49.300107 2026] [core:error] [pid 1041789:tid 1042027] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.300124 2026] [core:error] [pid 1041789:tid 1042027] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.303209 2026] [core:error] [pid 1034096:tid 1034253] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.303224 2026] [core:error] [pid 1034096:tid 1034253] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.311983 2026] [security2:error] [pid 1041789:tid 1041925] [remote 45.148.10.62:40258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wxe.rvy.mybluehost.me"] [uri "/wp-login.php"] [unique_id "apK9wYv3RhPI65jTFG7VhwADlXs"]
[Sat Aug 29 05:08:49.315266 2026] [security2:error] [pid 1034096:tid 1034368] [client 40.83.93.50:20836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-admin/wp-signup.php"] [unique_id "apK9wS04twRPFuquKD27awAAAPo"]
[Sat Aug 29 05:08:49.318934 2026] [core:error] [pid 1041789:tid 1042013] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.318958 2026] [core:error] [pid 1041789:tid 1042013] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.333667 2026] [security2:error] [pid 1034096:tid 1034207] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/user/.env"] [unique_id "apK9wS04twRPFuquKD27bgAAuFU"]
[Sat Aug 29 05:08:49.334446 2026] [security2:error] [pid 1034096:tid 1034323] [client 158.23.147.79:50156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK9wS04twRPFuquKD27bwAAAM0"]
[Sat Aug 29 05:08:49.346536 2026] [security2:error] [pid 1034096:tid 1034220] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/v1/.env"] [unique_id "apK9wS04twRPFuquKD27dAAA_2I"]
[Sat Aug 29 05:08:49.347787 2026] [security2:error] [pid 1034096:tid 1034292] [client 158.23.147.79:17651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK9wS04twRPFuquKD27dwAAAK4"]
[Sat Aug 29 05:08:49.363065 2026] [security2:error] [pid 1034096:tid 1034168] [remote 45.148.10.62:40264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wxd.mej.mybluehost.me"] [uri "/wp-login.php"] [unique_id "apK9wS04twRPFuquKD27fQAAsC4"]
[Sat Aug 29 05:08:49.366525 2026] [security2:error] [pid 1034096:tid 1034297] [client 20.197.61.180:1061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/install.php"] [unique_id "apK9wS04twRPFuquKD27fwAAALM"]
[Sat Aug 29 05:08:49.371027 2026] [core:error] [pid 1034096:tid 1034359] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.371044 2026] [core:error] [pid 1034096:tid 1034359] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.371065 2026] [security2:error] [pid 1034096:tid 1034277] [client 4.232.148.111:24582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-content/cong.php"] [unique_id "apK9wS04twRPFuquKD27ggAAAJ8"]
[Sat Aug 29 05:08:49.373866 2026] [security2:error] [pid 1034096:tid 1034171] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/v2/.env"] [unique_id "apK9wS04twRPFuquKD27gwAA_zE"]
[Sat Aug 29 05:08:49.377495 2026] [security2:error] [pid 1034096:tid 1034211] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/v3/.env"] [unique_id "apK9wS04twRPFuquKD27hQAA_1k"]
[Sat Aug 29 05:08:49.381997 2026] [security2:error] [pid 1041789:tid 1041992] [client 20.48.250.41:46021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/ff1.php"] [unique_id "apK9wYv3RhPI65jTFG7VjwAAA1s"]
[Sat Aug 29 05:08:49.387796 2026] [core:error] [pid 1034096:tid 1034284] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.387818 2026] [core:error] [pid 1034096:tid 1034284] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.388880 2026] [core:error] [pid 1034096:tid 1034230] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.388897 2026] [core:error] [pid 1034096:tid 1034230] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.404525 2026] [security2:error] [pid 1041789:tid 1042038] [client 52.139.37.240:12884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/admin/index.php"] [unique_id "apK9wYv3RhPI65jTFG7VkgAAA4k"]
[Sat Aug 29 05:08:49.414627 2026] [core:error] [pid 1041789:tid 1042041] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.414648 2026] [core:error] [pid 1041789:tid 1042041] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.415186 2026] [core:error] [pid 1041789:tid 1042025] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.415199 2026] [core:error] [pid 1041789:tid 1042025] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.418000 2026] [core:error] [pid 1034096:tid 1034340] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.418015 2026] [core:error] [pid 1034096:tid 1034340] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.418263 2026] [security2:error] [pid 1041789:tid 1042049] [client 20.104.68.135:18466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.east-town.org"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9wYv3RhPI65jTFG7VlgAAA5Q"]
[Sat Aug 29 05:08:49.432605 2026] [security2:error] [pid 1041789:tid 1042034] [client 20.48.251.3:14032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/min.php"] [unique_id "apK9wYv3RhPI65jTFG7VmgAAA4U"]
[Sat Aug 29 05:08:49.436935 2026] [security2:error] [pid 1034096:tid 1034129] [remote 93.123.109.228:42974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/php-info.php"] [unique_id "apK9wS04twRPFuquKD27mAAAkAc"]
[Sat Aug 29 05:08:49.437502 2026] [core:error] [pid 1034096:tid 1034219] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.437533 2026] [core:error] [pid 1034096:tid 1034219] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.439452 2026] [security2:error] [pid 1041789:tid 1042044] [client 68.155.159.216:52783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK9wYv3RhPI65jTFG7VnAAAA48"]
[Sat Aug 29 05:08:49.441897 2026] [security2:error] [pid 1034096:tid 1034344] [client 68.155.159.216:24496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK9wS04twRPFuquKD27mQAAAOI"]
[Sat Aug 29 05:08:49.443326 2026] [security2:error] [pid 1034096:tid 1034194] [remote 93.123.109.228:42974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/php.php"] [unique_id "apK9wS04twRPFuquKD27mgAAkEg"]
[Sat Aug 29 05:08:49.450344 2026] [core:error] [pid 1034096:tid 1034296] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.450370 2026] [core:error] [pid 1034096:tid 1034296] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.451795 2026] [core:error] [pid 1034096:tid 1034298] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.451816 2026] [core:error] [pid 1034096:tid 1034298] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.463062 2026] [security2:error] [pid 1034096:tid 1034249] [remote 93.123.109.228:42974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/php_info.php"] [unique_id "apK9wS04twRPFuquKD27ogAAkH8"]
[Sat Aug 29 05:08:49.468843 2026] [security2:error] [pid 1034096:tid 1034322] [client 68.155.159.216:6096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-login.php"] [unique_id "apK9wS04twRPFuquKD27pAAAAMw"]
[Sat Aug 29 05:08:49.472436 2026] [security2:error] [pid 1034096:tid 1034255] [client 158.23.147.79:17553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/xmlrpc.php"] [unique_id "apK9wS04twRPFuquKD27pQAAAIk"]
[Sat Aug 29 05:08:49.477048 2026] [security2:error] [pid 1041789:tid 1041960] [client 40.83.93.50:14645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/add_actualites.php"] [unique_id "apK9wYv3RhPI65jTFG7VngAAAzs"]
[Sat Aug 29 05:08:49.480212 2026] [security2:error] [pid 1034096:tid 1034357] [client 68.155.159.216:1937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK9wS04twRPFuquKD27qAAAAO8"]
[Sat Aug 29 05:08:49.482631 2026] [core:error] [pid 1034096:tid 1034237] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.482650 2026] [core:error] [pid 1034096:tid 1034237] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.483554 2026] [security2:error] [pid 1034096:tid 1034244] [remote 93.123.109.228:42974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/phpinfo.php"] [unique_id "apK9wS04twRPFuquKD27qwAAkHo"]
[Sat Aug 29 05:08:49.490613 2026] [security2:error] [pid 1034096:tid 1034314] [client 20.48.250.41:50036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/t.php"] [unique_id "apK9wS04twRPFuquKD27rQAAAMQ"]
[Sat Aug 29 05:08:49.499887 2026] [core:error] [pid 1034096:tid 1034362] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.499902 2026] [core:error] [pid 1034096:tid 1034362] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.507471 2026] [security2:error] [pid 1034096:tid 1034316] [client 20.197.61.180:2005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/hehe.php"] [unique_id "apK9wS04twRPFuquKD27sQAAAMY"]
[Sat Aug 29 05:08:49.509056 2026] [core:error] [pid 1034096:tid 1034240] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.509073 2026] [core:error] [pid 1034096:tid 1034240] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.510802 2026] [core:error] [pid 1034096:tid 1034266] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.510818 2026] [core:error] [pid 1034096:tid 1034266] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.511244 2026] [core:error] [pid 1041789:tid 1042014] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.511255 2026] [core:error] [pid 1041789:tid 1042014] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.511437 2026] [security2:error] [pid 1034096:tid 1034365] [client 57.141.14.79:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/page/35/"] [unique_id "apK9wS04twRPFuquKD27swAAAPc"]
[Sat Aug 29 05:08:49.515903 2026] [security2:error] [pid 1034096:tid 1034278] [client 20.48.250.41:46025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/t.php"] [unique_id "apK9wS04twRPFuquKD27tgAAAKA"]
[Sat Aug 29 05:08:49.521013 2026] [core:error] [pid 1034096:tid 1034126] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.521026 2026] [core:error] [pid 1034096:tid 1034126] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.528773 2026] [security2:error] [pid 1034096:tid 1034325] [client 68.155.159.216:2033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK9wS04twRPFuquKD27vAAAAM8"]
[Sat Aug 29 05:08:49.532308 2026] [security2:error] [pid 1034096:tid 1034370] [client 20.196.209.81:1429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/randkeyword.php"] [unique_id "apK9wS04twRPFuquKD27vQAAAPw"]
[Sat Aug 29 05:08:49.533605 2026] [security2:error] [pid 1041789:tid 1041968] [client 20.151.200.44:63873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/7logs.php"] [unique_id "apK9wYv3RhPI65jTFG7VpAAAA0M"]
[Sat Aug 29 05:08:49.543097 2026] [security2:error] [pid 1034096:tid 1034350] [client 93.123.109.228:48902] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/s3/.env.bak"] [unique_id "apK9wS04twRPFuquKD27xAAAAOg"]
[Sat Aug 29 05:08:49.543735 2026] [core:error] [pid 1034096:tid 1034139] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.543754 2026] [core:error] [pid 1034096:tid 1034139] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.544195 2026] [security2:error] [pid 1041789:tid 1041999] [client 20.63.219.114:15400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/wp-contentt.php"] [unique_id "apK9wYv3RhPI65jTFG7VpQAAA2I"]
[Sat Aug 29 05:08:49.552134 2026] [security2:error] [pid 1034096:tid 1034153] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/var/www/.env"] [unique_id "apK9wS04twRPFuquKD27xgAAnR8"]
[Sat Aug 29 05:08:49.554126 2026] [security2:error] [pid 1034096:tid 1034309] [client 158.158.54.35:1691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-good.php"] [unique_id "apK9wS04twRPFuquKD27xwAAAL8"]
[Sat Aug 29 05:08:49.555048 2026] [security2:error] [pid 1034096:tid 1034378] [client 40.83.93.50:48021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/alfanew.php7"] [unique_id "apK9wS04twRPFuquKD27yAAAAQQ"]
[Sat Aug 29 05:08:49.560775 2026] [core:error] [pid 1034096:tid 1034269] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.560790 2026] [core:error] [pid 1034096:tid 1034269] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.563116 2026] [security2:error] [pid 1034096:tid 1034246] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/var/www/html/.env"] [unique_id "apK9wS04twRPFuquKD27zAAAnXw"]
[Sat Aug 29 05:08:49.566383 2026] [core:error] [pid 1034096:tid 1034138] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.566398 2026] [core:error] [pid 1034096:tid 1034138] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.576550 2026] [core:error] [pid 1034096:tid 1034368] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.576570 2026] [core:error] [pid 1034096:tid 1034368] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.584190 2026] [security2:error] [pid 1034096:tid 1034147] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/web/.env"] [unique_id "apK9wS04twRPFuquKD271gAAnRk"]
[Sat Aug 29 05:08:49.593594 2026] [core:error] [pid 1041789:tid 1041986] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.593612 2026] [core:error] [pid 1041789:tid 1041986] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.598567 2026] [security2:error] [pid 1034096:tid 1034355] [client 20.197.61.180:1050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/wp-contentt.php"] [unique_id "apK9wS04twRPFuquKD271wAAAO0"]
[Sat Aug 29 05:08:49.603263 2026] [core:error] [pid 1034096:tid 1034123] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.603284 2026] [core:error] [pid 1034096:tid 1034123] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.608153 2026] [security2:error] [pid 1041789:tid 1041934] [client 52.139.37.240:12489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/makeasmtp.php"] [unique_id "apK9wYv3RhPI65jTFG7VrAAAAyE"]
[Sat Aug 29 05:08:49.608923 2026] [core:error] [pid 1034096:tid 1034245] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.608943 2026] [core:error] [pid 1034096:tid 1034245] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.609818 2026] [security2:error] [pid 1034096:tid 1034158] [remote 45.148.10.62:40276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wxk.tiz.mybluehost.me"] [uri "/wp-login.php"] [unique_id "apK9wS04twRPFuquKD273AAAnyQ"]
[Sat Aug 29 05:08:49.614907 2026] [security2:error] [pid 1041789:tid 1041990] [client 20.48.251.3:14016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/saiga.php"] [unique_id "apK9wYv3RhPI65jTFG7VrQAAA1k"]
[Sat Aug 29 05:08:49.620091 2026] [security2:error] [pid 1041789:tid 1041978] [client 20.104.49.130:57636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/kj.php"] [unique_id "apK9wYv3RhPI65jTFG7VrgAAA00"]
[Sat Aug 29 05:08:49.623646 2026] [security2:error] [pid 1034096:tid 1034259] [client 20.100.175.163:8822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9wS04twRPFuquKD273gAAAI0"]
[Sat Aug 29 05:08:49.630281 2026] [security2:error] [pid 1041789:tid 1042047] [client 20.197.61.180:1990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/configs.php"] [unique_id "apK9wYv3RhPI65jTFG7VrwAAA5I"]
[Sat Aug 29 05:08:49.633231 2026] [security2:error] [pid 1034096:tid 1034369] [client 4.205.62.107:8937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/wp-content/maintenance.php"] [unique_id "apK9wS04twRPFuquKD275AAAAPs"]
[Sat Aug 29 05:08:49.642898 2026] [security2:error] [pid 1034096:tid 1034283] [client 68.155.159.216:64421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/index/function.php"] [unique_id "apK9wS04twRPFuquKD275gAAAKU"]
[Sat Aug 29 05:08:49.646266 2026] [security2:error] [pid 1041789:tid 1041956] [client 20.48.250.41:50014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/erty.php"] [unique_id "apK9wYv3RhPI65jTFG7VsgAAAzc"]
[Sat Aug 29 05:08:49.646818 2026] [security2:error] [pid 1034096:tid 1034342] [client 20.240.128.207:23459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/files/index.php"] [unique_id "apK9wS04twRPFuquKD275wAAAOA"]
[Sat Aug 29 05:08:49.647563 2026] [security2:error] [pid 1041789:tid 1041982] [client 20.48.250.41:45350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/erty.php"] [unique_id "apK9wYv3RhPI65jTFG7VswAAA1E"]
[Sat Aug 29 05:08:49.652916 2026] [security2:error] [pid 1041789:tid 1042001] [client 93.123.109.228:49038] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/server/.env"] [unique_id "apK9wYv3RhPI65jTFG7VtAAAA2Q"]
[Sat Aug 29 05:08:49.659726 2026] [core:error] [pid 1034096:tid 1034236] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.659742 2026] [core:error] [pid 1034096:tid 1034236] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.665126 2026] [core:error] [pid 1034096:tid 1034176] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.665142 2026] [core:error] [pid 1034096:tid 1034176] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.668521 2026] [core:error] [pid 1034096:tid 1034178] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.668550 2026] [core:error] [pid 1034096:tid 1034178] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.670352 2026] [security2:error] [pid 1034096:tid 1034154] [remote 93.123.109.228:42974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/public/phpinfo.php"] [unique_id "apK9wS04twRPFuquKD277AAArCA"]
[Sat Aug 29 05:08:49.672744 2026] [core:error] [pid 1034096:tid 1034232] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.672762 2026] [core:error] [pid 1034096:tid 1034232] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.691964 2026] [security2:error] [pid 1034096:tid 1034340] [client 20.104.68.135:51703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.east-town.org"] [uri "/wp-includes/blocks/buttons/index.php"] [unique_id "apK9wS04twRPFuquKD278gAAAN4"]
[Sat Aug 29 05:08:49.698016 2026] [security2:error] [pid 1041789:tid 1042020] [client 93.123.109.228:49058] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/server/api/.env"] [unique_id "apK9wYv3RhPI65jTFG7VtwAAA3c"]
[Sat Aug 29 05:08:49.705495 2026] [security2:error] [pid 1041789:tid 1041994] [client 20.52.41.200:4393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-includes/index.php"] [unique_id "apK9wYv3RhPI65jTFG7VuAAAA10"]
[Sat Aug 29 05:08:49.707737 2026] [core:error] [pid 1034096:tid 1034301] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.707758 2026] [core:error] [pid 1034096:tid 1034301] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.709018 2026] [core:error] [pid 1034096:tid 1034328] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.709041 2026] [core:error] [pid 1034096:tid 1034328] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.717877 2026] [security2:error] [pid 1034096:tid 1034260] [client 93.123.109.228:49084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/server/backend/.env"] [unique_id "apK9wS04twRPFuquKD27-QAAAI4"]
[Sat Aug 29 05:08:49.720751 2026] [security2:error] [pid 1041789:tid 1042018] [client 68.155.159.216:30715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/admin.php"] [unique_id "apK9wYv3RhPI65jTFG7VuwAAA3U"]
[Sat Aug 29 05:08:49.730846 2026] [security2:error] [pid 1034096:tid 1034184] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/website/.env"] [unique_id "apK9wS04twRPFuquKD28AQAAwj4"]
[Sat Aug 29 05:08:49.731958 2026] [core:error] [pid 1034096:tid 1034199] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.731974 2026] [core:error] [pid 1034096:tid 1034199] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.732642 2026] [core:error] [pid 1041789:tid 1041936] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.732661 2026] [core:error] [pid 1041789:tid 1041936] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.732726 2026] [core:error] [pid 1041789:tid 1042005] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.732733 2026] [core:error] [pid 1041789:tid 1042005] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.740161 2026] [security2:error] [pid 1034096:tid 1034187] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/wp-config.php"] [unique_id "apK9wS04twRPFuquKD28CQAAwkE"]
[Sat Aug 29 05:08:49.749659 2026] [security2:error] [pid 1034096:tid 1034316] [client 158.23.147.79:11347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9wS04twRPFuquKD28DAAAAMY"]
[Sat Aug 29 05:08:49.760301 2026] [core:error] [pid 1041789:tid 1041931] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.760317 2026] [core:error] [pid 1041789:tid 1041931] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.762030 2026] [security2:error] [pid 1034096:tid 1034173] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/wp-config.php.bak"] [unique_id "apK9wS04twRPFuquKD28DwAAwjM"]
[Sat Aug 29 05:08:49.763122 2026] [security2:error] [pid 1041789:tid 1041985] [client 103.171.189.88:63076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9wYv3RhPI65jTFG7VwAAAA1Q"]
[Sat Aug 29 05:08:49.763216 2026] [security2:error] [pid 1041789:tid 1041985] [client 103.171.189.88:63076] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9wYv3RhPI65jTFG7VwAAAA1Q"]
[Sat Aug 29 05:08:49.769922 2026] [security2:error] [pid 1034096:tid 1034161] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/wp-config.php.new"] [unique_id "apK9wS04twRPFuquKD28EQAAwic"]
[Sat Aug 29 05:08:49.771692 2026] [core:error] [pid 1041789:tid 1041958] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.771706 2026] [core:error] [pid 1041789:tid 1041958] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.780562 2026] [security2:error] [pid 1034096:tid 1034351] [client 20.48.250.41:45374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/0x.php"] [unique_id "apK9wS04twRPFuquKD28FAAAAOk"]
[Sat Aug 29 05:08:49.783256 2026] [security2:error] [pid 1034096:tid 1034285] [client 40.83.93.50:20814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-blog-header.php"] [unique_id "apK9wS04twRPFuquKD28FQAAAKc"]
[Sat Aug 29 05:08:49.783348 2026] [security2:error] [pid 1034096:tid 1034189] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/wp-config.php.old"] [unique_id "apK9wS04twRPFuquKD28FgAA_UM"]
[Sat Aug 29 05:08:49.797085 2026] [security2:error] [pid 1034096:tid 1034358] [client 20.48.250.41:49985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/0x.php"] [unique_id "apK9wS04twRPFuquKD28GgAAAPA"]
[Sat Aug 29 05:08:49.803317 2026] [security2:error] [pid 1034096:tid 1034284] [client 74.248.24.12:22855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/ws.php"] [unique_id "apK9wS04twRPFuquKD28GwAAAKY"]
[Sat Aug 29 05:08:49.803524 2026] [security2:error] [pid 1034096:tid 1034307] [client 20.48.251.3:14072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/ammika.php"] [unique_id "apK9wS04twRPFuquKD28HAAAAL0"]
[Sat Aug 29 05:08:49.804619 2026] [security2:error] [pid 1034096:tid 1034357] [client 52.139.37.240:12452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/paku.php"] [unique_id "apK9wS04twRPFuquKD28HgAAAO8"]
[Sat Aug 29 05:08:49.810579 2026] [security2:error] [pid 1041789:tid 1042002] [client 93.123.109.228:48910] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/services/.env"] [unique_id "apK9wYv3RhPI65jTFG7VxAAAA2U"]
[Sat Aug 29 05:08:49.810901 2026] [security2:error] [pid 1034096:tid 1034325] [client 93.123.109.228:48898] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/service/.env"] [unique_id "apK9wS04twRPFuquKD28HwAAAM8"]
[Sat Aug 29 05:08:49.817820 2026] [core:error] [pid 1034096:tid 1034160] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.817839 2026] [core:error] [pid 1034096:tid 1034160] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.819798 2026] [security2:error] [pid 1034096:tid 1034202] [remote 93.123.109.228:43084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/wp-content/mysql.sql"] [unique_id "apK9wS04twRPFuquKD28IwAAllA"]
[Sat Aug 29 05:08:49.820960 2026] [core:error] [pid 1034096:tid 1034180] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.820976 2026] [core:error] [pid 1034096:tid 1034180] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.832467 2026] [core:error] [pid 1034096:tid 1034213] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.832488 2026] [core:error] [pid 1034096:tid 1034213] [remote 93.123.109.228:43084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.869124 2026] [security2:error] [pid 1034096:tid 1034296] [client 4.232.148.111:18824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK9wS04twRPFuquKD28LQAAALI"]
[Sat Aug 29 05:08:49.881389 2026] [security2:error] [pid 1041789:tid 1042016] [client 4.205.62.107:51508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/wdf.php"] [unique_id "apK9wYv3RhPI65jTFG7VyQAAA3M"]
[Sat Aug 29 05:08:49.889348 2026] [security2:error] [pid 1034096:tid 1034350] [client 20.104.68.135:18297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.east-town.org"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "apK9wS04twRPFuquKD28LwAAAOg"]
[Sat Aug 29 05:08:49.889930 2026] [security2:error] [pid 1034096:tid 1034372] [client 158.23.147.79:6038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK9wS04twRPFuquKD28MAAAAP4"]
[Sat Aug 29 05:08:49.891274 2026] [core:error] [pid 1041789:tid 1041998] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.891293 2026] [core:error] [pid 1041789:tid 1041998] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:49.903432 2026] [security2:error] [pid 1034096:tid 1034373] [client 20.63.219.114:2457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/theme.php"] [unique_id "apK9wS04twRPFuquKD28NQAAAP8"]
[Sat Aug 29 05:08:49.929820 2026] [security2:error] [pid 1034096:tid 1034291] [client 93.123.109.228:48688] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/shared/.env"] [unique_id "apK9wS04twRPFuquKD28NwAAAK0"]
[Sat Aug 29 05:08:49.933790 2026] [security2:error] [pid 1041789:tid 1042009] [client 20.48.251.3:14086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/broadcasting.php"] [unique_id "apK9wYv3RhPI65jTFG7VzgAAA2w"]
[Sat Aug 29 05:08:49.935895 2026] [security2:error] [pid 1041789:tid 1042027] [client 20.48.250.41:46026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/66.php"] [unique_id "apK9wYv3RhPI65jTFG7VzQAAA34"]
[Sat Aug 29 05:08:49.936256 2026] [security2:error] [pid 1041789:tid 1042021] [client 20.48.250.41:49925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/66.php"] [unique_id "apK9wYv3RhPI65jTFG7V0AAAA3g"]
[Sat Aug 29 05:08:49.943837 2026] [security2:error] [pid 1041789:tid 1042009] [client 93.123.109.228:48976] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/shop/.env"] [unique_id "apK9wYv3RhPI65jTFG7VzwAAA2w"]
[Sat Aug 29 05:08:49.969609 2026] [security2:error] [pid 1034096:tid 1034283] [client 4.205.62.107:6928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/config_dev.php"] [unique_id "apK9wS04twRPFuquKD28PgAAAKU"]
[Sat Aug 29 05:08:49.976340 2026] [security2:error] [pid 1034096:tid 1034253] [client 20.196.209.81:11333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/goods.php"] [unique_id "apK9wS04twRPFuquKD28QwAAAIc"]
[Sat Aug 29 05:08:49.978258 2026] [security2:error] [pid 1034096:tid 1034320] [client 93.123.109.228:48898] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/src/.env"] [unique_id "apK9wS04twRPFuquKD28RAAAAMo"]
[Sat Aug 29 05:08:49.979045 2026] [security2:error] [pid 1034096:tid 1034358] [client 40.83.93.50:12508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/alfanew.php7"] [unique_id "apK9wS04twRPFuquKD28RQAAAPA"]
[Sat Aug 29 05:08:50.005713 2026] [security2:error] [pid 1041789:tid 1042013] [client 52.139.37.240:12419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/rtx.php"] [unique_id "apK9wov3RhPI65jTFG7V2QAAA3A"]
[Sat Aug 29 05:08:50.022689 2026] [security2:error] [pid 1034096:tid 1034363] [client 158.158.54.35:34643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "apK9wi04twRPFuquKD28TQAAAPU"]
[Sat Aug 29 05:08:50.031188 2026] [security2:error] [pid 1041789:tid 1042032] [client 93.123.109.228:49136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK9wov3RhPI65jTFG7V2wAAA4M"]
[Sat Aug 29 05:08:50.047545 2026] [security2:error] [pid 1041789:tid 1041983] [client 40.83.93.50:48055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/xmlrpc.php0"] [unique_id "apK9wov3RhPI65jTFG7V3wAAA1I"]
[Sat Aug 29 05:08:50.053145 2026] [security2:error] [pid 1041789:tid 1041980] [client 4.205.62.107:62754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/bengi.php"] [unique_id "apK9wov3RhPI65jTFG7V4QAAA08"]
[Sat Aug 29 05:08:50.059932 2026] [security2:error] [pid 1041789:tid 1041935] [client 158.23.147.79:54345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK9wov3RhPI65jTFG7V4gAAAyI"]
[Sat Aug 29 05:08:50.062634 2026] [security2:error] [pid 1041789:tid 1041954] [client 4.205.62.107:65498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/adminfus.php"] [unique_id "apK9wov3RhPI65jTFG7V4wAAAzU"]
[Sat Aug 29 05:08:50.064923 2026] [security2:error] [pid 1041789:tid 1041960] [client 20.48.251.3:14319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/aws_config.php"] [unique_id "apK9wov3RhPI65jTFG7V5AAAAzs"]
[Sat Aug 29 05:08:50.078050 2026] [security2:error] [pid 1041789:tid 1041933] [client 93.123.109.228:49184] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK9wov3RhPI65jTFG7V5QAAAyA"]
[Sat Aug 29 05:08:50.088896 2026] [security2:error] [pid 1041789:tid 1042006] [client 20.48.250.41:49991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/f35.php"] [unique_id "apK9wov3RhPI65jTFG7V5gAAA2k"]
[Sat Aug 29 05:08:50.102822 2026] [security2:error] [pid 1041789:tid 1042033] [client 20.197.61.180:1066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/colour.php"] [unique_id "apK9wov3RhPI65jTFG7V6QAAA4Q"]
[Sat Aug 29 05:08:50.103816 2026] [security2:error] [pid 1034096:tid 1034318] [client 20.48.250.41:45335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/f35.php"] [unique_id "apK9wi04twRPFuquKD28VgAAAMg"]
[Sat Aug 29 05:08:50.121867 2026] [security2:error] [pid 1041789:tid 1041971] [client 20.100.175.163:8770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/alfa-rex.php7"] [unique_id "apK9wov3RhPI65jTFG7V7AAAA0Y"]
[Sat Aug 29 05:08:50.127022 2026] [security2:error] [pid 1041789:tid 1041986] [client 93.123.109.228:49230] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(\\\\/\\\\*\\\\!? ?(?:select|grant|delete|insert|drop|alter|replace|truncate|update|create|rename|describe|union|concat|group_concat))" at REQUEST_FILENAME. [file "/opt/mod_security/hg_rules.conf"] [line "1019"] [id "9000042"] [rev "2.2.2"] [msg "SQL Comment Sequence Detected."] [data "/*update"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/*update.cgi*"] [unique_id "apK9wov3RhPI65jTFG7V7QAAA1U"]
[Sat Aug 29 05:08:50.142818 2026] [security2:error] [pid 1041789:tid 1041990] [client 158.23.147.79:6039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK9wov3RhPI65jTFG7V7gAAA1k"]
[Sat Aug 29 05:08:50.143868 2026] [security2:error] [pid 1041789:tid 1041978] [client 93.123.109.228:48910] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/srv/.env"] [unique_id "apK9wov3RhPI65jTFG7V7wAAA00"]
[Sat Aug 29 05:08:50.152340 2026] [security2:error] [pid 1034096:tid 1034316] [client 93.123.109.228:48752] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/stage/.env"] [unique_id "apK9wi04twRPFuquKD28WAAAAMY"]
[Sat Aug 29 05:08:50.154705 2026] [security2:error] [pid 1041789:tid 1042007] [client 20.240.128.207:21006] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/1.php7"] [unique_id "apK9wov3RhPI65jTFG7V8AAAA2o"]
[Sat Aug 29 05:08:50.154806 2026] [security2:error] [pid 1041789:tid 1042007] [client 20.240.128.207:21006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/1.php7"] [unique_id "apK9wov3RhPI65jTFG7V8AAAA2o"]
[Sat Aug 29 05:08:50.156505 2026] [security2:error] [pid 1034096:tid 1034266] [client 93.123.109.228:48906] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/staging/.env"] [unique_id "apK9wi04twRPFuquKD28WQAAAJQ"]
[Sat Aug 29 05:08:50.162992 2026] [security2:error] [pid 1041789:tid 1041932] [client 20.104.68.135:18241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.east-town.org"] [uri "/wp-includes/index.php"] [unique_id "apK9wov3RhPI65jTFG7V8gAAAx8"]
[Sat Aug 29 05:08:50.168347 2026] [security2:error] [pid 1041789:tid 1042049] [client 20.52.41.200:4399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-admin/a.php"] [unique_id "apK9wov3RhPI65jTFG7V8wAAA5Q"]
[Sat Aug 29 05:08:50.183163 2026] [security2:error] [pid 1041789:tid 1041956] [client 68.155.159.216:33664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/sad/about.php"] [unique_id "apK9wov3RhPI65jTFG7V9QAAAzc"]
[Sat Aug 29 05:08:50.187063 2026] [security2:error] [pid 1034096:tid 1034351] [client 93.123.109.228:48960] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/stg/.env"] [unique_id "apK9wi04twRPFuquKD28YAAAAOk"]
[Sat Aug 29 05:08:50.195091 2026] [security2:error] [pid 1041789:tid 1042042] [client 68.155.159.216:14300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/.well-known/index.php"] [unique_id "apK9wov3RhPI65jTFG7V9wAAA40"]
[Sat Aug 29 05:08:50.201093 2026] [security2:error] [pid 1041789:tid 1041966] [client 20.48.251.3:33304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/cxc.php"] [unique_id "apK9wov3RhPI65jTFG7V-QAAA0E"]
[Sat Aug 29 05:08:50.201662 2026] [security2:error] [pid 1041789:tid 1042000] [client 68.155.159.216:23442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/dropdown.php"] [unique_id "apK9wov3RhPI65jTFG7V-gAAA2M"]
[Sat Aug 29 05:08:50.208183 2026] [security2:error] [pid 1041789:tid 1041934] [client 52.139.37.240:12446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/update/da222.php"] [unique_id "apK9wov3RhPI65jTFG7V-wAAAyE"]
[Sat Aug 29 05:08:50.233949 2026] [security2:error] [pid 1041789:tid 1042011] [client 20.197.61.180:1862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/wp-admin/class-db.php"] [unique_id "apK9wov3RhPI65jTFG7V_gAAA24"]
[Sat Aug 29 05:08:50.241468 2026] [security2:error] [pid 1034096:tid 1034339] [client 20.48.250.41:45319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/wen.php"] [unique_id "apK9wi04twRPFuquKD28ZwAAAN0"]
[Sat Aug 29 05:08:50.241864 2026] [security2:error] [pid 1034096:tid 1034347] [client 93.123.109.228:49130] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/.env"] [unique_id "apK9wi04twRPFuquKD28ZgAAAOU"]
[Sat Aug 29 05:08:50.243464 2026] [security2:error] [pid 1034096:tid 1034284] [client 20.48.250.41:49929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/wen.php"] [unique_id "apK9wi04twRPFuquKD28agAAAKY"]
[Sat Aug 29 05:08:50.271907 2026] [security2:error] [pid 1034096:tid 1034325] [client 93.123.109.228:49172] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/laravel/app/.env"] [unique_id "apK9wi04twRPFuquKD28bAAAAM8"]
[Sat Aug 29 05:08:50.282349 2026] [security2:error] [pid 1041789:tid 1041999] [client 40.83.93.50:16679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-blogs.php"] [unique_id "apK9wov3RhPI65jTFG7WAAAAA2I"]
[Sat Aug 29 05:08:50.295627 2026] [security2:error] [pid 1034096:tid 1034352] [client 20.63.219.114:15376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/alumni_reg.php"] [unique_id "apK9wi04twRPFuquKD28bgAAAOo"]
[Sat Aug 29 05:08:50.298190 2026] [security2:error] [pid 1041789:tid 1042054] [client 93.123.109.228:49158] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK9wov3RhPI65jTFG7WAwAAA5k"]
[Sat Aug 29 05:08:50.305615 2026] [security2:error] [pid 1034096:tid 1034315] [client 74.248.24.12:19491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-themes.php"] [unique_id "apK9wi04twRPFuquKD28cAAAAMU"]
[Sat Aug 29 05:08:50.305966 2026] [security2:error] [pid 1041789:tid 1041941] [client 4.205.62.107:53150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/mamzi.php"] [unique_id "apK9wov3RhPI65jTFG7WBQAAAyg"]
[Sat Aug 29 05:08:50.308464 2026] [security2:error] [pid 1034096:tid 1034269] [client 93.123.109.228:49084] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/stripe/.env"] [unique_id "apK9wi04twRPFuquKD28cQAAAJc"]
[Sat Aug 29 05:08:50.315861 2026] [security2:error] [pid 1041789:tid 1042030] [client 93.123.109.228:49160] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/.env.backup"] [unique_id "apK9wov3RhPI65jTFG7WCQAAA4E"]
[Sat Aug 29 05:08:50.331396 2026] [security2:error] [pid 1034096:tid 1034302] [client 93.123.109.228:49262] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/.env.bak"] [unique_id "apK9wi04twRPFuquKD28eAAAALg"]
[Sat Aug 29 05:08:50.333534 2026] [security2:error] [pid 1034096:tid 1034312] [client 4.232.148.111:18831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-mail.php"] [unique_id "apK9wi04twRPFuquKD28eQAAAMI"]
[Sat Aug 29 05:08:50.334183 2026] [security2:error] [pid 1041789:tid 1041944] [client 68.155.159.216:49266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/mah.php"] [unique_id "apK9wov3RhPI65jTFG7WDAAAAys"]
[Sat Aug 29 05:08:50.334804 2026] [security2:error] [pid 1041789:tid 1041939] [client 68.155.159.216:33740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK9wov3RhPI65jTFG7WDQAAAyY"]
[Sat Aug 29 05:08:50.343683 2026] [security2:error] [pid 1041789:tid 1041970] [client 20.48.251.3:33289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/fraro.php"] [unique_id "apK9wov3RhPI65jTFG7WDgAAA0U"]
[Sat Aug 29 05:08:50.350875 2026] [security2:error] [pid 1034096:tid 1034374] [client 20.197.61.180:12756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/disagraeed.php"] [unique_id "apK9wi04twRPFuquKD28fgAAAQA"]
[Sat Aug 29 05:08:50.353289 2026] [security2:error] [pid 1034096:tid 1034367] [client 93.123.109.228:48902] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/terraform.tfstate.backup"] [unique_id "apK9wi04twRPFuquKD28fwAAAPk"]
[Sat Aug 29 05:08:50.361608 2026] [security2:error] [pid 1034096:tid 1034268] [client 20.104.68.135:18378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.east-town.org"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK9wi04twRPFuquKD28hAAAAJY"]
[Sat Aug 29 05:08:50.363032 2026] [security2:error] [pid 1034096:tid 1034377] [client 20.197.61.180:1999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/theme.php"] [unique_id "apK9wi04twRPFuquKD28hwAAAQM"]
[Sat Aug 29 05:08:50.368551 2026] [security2:error] [pid 1041789:tid 1041964] [client 35.221.212.112:60800] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "autodiscover.beraluzarchive.org"] [uri "/@fs/home/ubuntu/.anthropic/config.json"] [unique_id "apK9wov3RhPI65jTFG7WEQAAAz8"]
[Sat Aug 29 05:08:50.382609 2026] [security2:error] [pid 1041789:tid 1042012] [client 20.196.209.81:1090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/hehe.php"] [unique_id "apK9wov3RhPI65jTFG7WEwAAA28"]
[Sat Aug 29 05:08:50.397799 2026] [security2:error] [pid 1034096:tid 1034286] [client 158.23.147.79:26550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.olker.us"] [uri "/first.php"] [unique_id "apK9wi04twRPFuquKD28lAAAAKg"]
[Sat Aug 29 05:08:50.399690 2026] [security2:error] [pid 1041789:tid 1041937] [client 68.155.159.216:64412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apK9wov3RhPI65jTFG7WFgAAAyQ"]
[Sat Aug 29 05:08:50.400425 2026] [security2:error] [pid 1034096:tid 1034369] [client 20.48.250.41:49938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/inc.php"] [unique_id "apK9wi04twRPFuquKD28lgAAAPs"]
[Sat Aug 29 05:08:50.402761 2026] [security2:error] [pid 1041789:tid 1042027] [client 4.205.62.107:21575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/zaza.php"] [unique_id "apK9wov3RhPI65jTFG7WFwAAA34"]
[Sat Aug 29 05:08:50.440213 2026] [security2:error] [pid 1041789:tid 1042050] [client 93.123.109.228:48944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/test.php"] [unique_id "apK9wov3RhPI65jTFG7WGgAAA5U"]
[Sat Aug 29 05:08:50.444932 2026] [security2:error] [pid 1041789:tid 1042010] [client 20.48.250.41:45323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/inc.php"] [unique_id "apK9wov3RhPI65jTFG7WGwAAA20"]
[Sat Aug 29 05:08:50.454426 2026] [security2:error] [pid 1034096:tid 1034309] [client 40.83.93.50:12495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/xmlrpc.php0"] [unique_id "apK9wi04twRPFuquKD28oQAAAL8"]
[Sat Aug 29 05:08:50.466873 2026] [security2:error] [pid 1034096:tid 1034340] [client 158.23.147.79:50070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/.well-knownold/index.php"] [unique_id "apK9wi04twRPFuquKD28owAAAN4"]
[Sat Aug 29 05:08:50.467627 2026] [security2:error] [pid 1034096:tid 1034270] [client 93.123.109.228:48688] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/test/.env"] [unique_id "apK9wi04twRPFuquKD28ogAAAJg"]
[Sat Aug 29 05:08:50.471085 2026] [security2:error] [pid 1041789:tid 1041963] [client 158.158.54.35:1847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/abcd.php"] [unique_id "apK9wov3RhPI65jTFG7WIgAAAz4"]
[Sat Aug 29 05:08:50.471774 2026] [security2:error] [pid 1034096:tid 1034363] [client 93.123.109.228:49200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/.env.old"] [unique_id "apK9wi04twRPFuquKD28pAAAAPU"]
[Sat Aug 29 05:08:50.478220 2026] [security2:error] [pid 1041789:tid 1042045] [client 93.123.109.228:49152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/.env.php"] [unique_id "apK9wov3RhPI65jTFG7WJAAAA5A"]
[Sat Aug 29 05:08:50.478377 2026] [security2:error] [pid 1041789:tid 1042035] [client 20.48.251.3:33303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/thui.php"] [unique_id "apK9wov3RhPI65jTFG7WJQAAA4Y"]
[Sat Aug 29 05:08:50.478453 2026] [security2:error] [pid 1041789:tid 1042032] [client 52.139.37.240:12540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/wp-admin/min.php"] [unique_id "apK9wov3RhPI65jTFG7WJgAAA4M"]
[Sat Aug 29 05:08:50.489824 2026] [security2:error] [pid 1041789:tid 1041935] [client 158.23.147.79:17575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/nf_tracking.php"] [unique_id "apK9wov3RhPI65jTFG7WKAAAAyI"]
[Sat Aug 29 05:08:50.512215 2026] [security2:error] [pid 1041789:tid 1042046] [client 93.123.109.228:48982] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/user/.env"] [unique_id "apK9wov3RhPI65jTFG7WKwAAA5E"]
[Sat Aug 29 05:08:50.528581 2026] [security2:error] [pid 1034096:tid 1034275] [client 40.83.93.50:11908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/content.php"] [unique_id "apK9wi04twRPFuquKD28rwAAAJ0"]
[Sat Aug 29 05:08:50.546323 2026] [security2:error] [pid 1034096:tid 1034332] [client 68.155.159.216:24522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/images/index.php"] [unique_id "apK9wi04twRPFuquKD28sQAAANY"]
[Sat Aug 29 05:08:50.555525 2026] [security2:error] [pid 1034096:tid 1034322] [client 68.155.159.216:9235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-includes/content.php"] [unique_id "apK9wi04twRPFuquKD28swAAAMw"]
[Sat Aug 29 05:08:50.557161 2026] [security2:error] [pid 1034096:tid 1034316] [client 93.123.109.228:48736] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/v2/.env"] [unique_id "apK9wi04twRPFuquKD28sgAAAMY"]
[Sat Aug 29 05:08:50.576893 2026] [security2:error] [pid 1034096:tid 1034266] [client 68.155.159.216:6024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK9wi04twRPFuquKD28tQAAAJQ"]
[Sat Aug 29 05:08:50.577025 2026] [security2:error] [pid 1034096:tid 1034273] [client 20.104.68.135:18395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.east-town.org"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "apK9wi04twRPFuquKD28twAAAJs"]
[Sat Aug 29 05:08:50.585733 2026] [security2:error] [pid 1034096:tid 1034290] [client 20.151.200.44:63811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/sf.php"] [unique_id "apK9wi04twRPFuquKD28ugAAAKw"]
[Sat Aug 29 05:08:50.588452 2026] [security2:error] [pid 1034096:tid 1034300] [client 93.123.109.228:48906] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/v1/.env"] [unique_id "apK9wi04twRPFuquKD28uwAAALY"]
[Sat Aug 29 05:08:50.590065 2026] [security2:error] [pid 1034096:tid 1034351] [client 93.123.109.228:49114] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/v3/.env"] [unique_id "apK9wi04twRPFuquKD28vQAAAOk"]
[Sat Aug 29 05:08:50.591017 2026] [security2:error] [pid 1034096:tid 1034285] [client 20.48.250.41:46028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/6bcwiqwj.php"] [unique_id "apK9wi04twRPFuquKD28vgAAAKc"]
[Sat Aug 29 05:08:50.613285 2026] [security2:error] [pid 1034096:tid 1034310] [client 20.48.251.3:33333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/lala.php"] [unique_id "apK9wi04twRPFuquKD28wgAAAMA"]
[Sat Aug 29 05:08:50.626426 2026] [security2:error] [pid 1041789:tid 1042025] [client 20.100.175.163:9977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "apK9wov3RhPI65jTFG7WNwAAA3w"]
[Sat Aug 29 05:08:50.628816 2026] [security2:error] [pid 1041789:tid 1041997] [client 158.23.147.79:17566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/atomlib.php"] [unique_id "apK9wov3RhPI65jTFG7WOAAAA2A"]
[Sat Aug 29 05:08:50.657656 2026] [security2:error] [pid 1041789:tid 1041976] [client 20.240.128.207:21012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/disagraeosc.php"] [unique_id "apK9wov3RhPI65jTFG7WOgAAA0s"]
[Sat Aug 29 05:08:50.660478 2026] [security2:error] [pid 1041789:tid 1041932] [client 20.48.250.41:49923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/6bcwiqwj.php"] [unique_id "apK9wov3RhPI65jTFG7WPAAAAx8"]
[Sat Aug 29 05:08:50.662103 2026] [security2:error] [pid 1034096:tid 1034268] [client 93.123.109.228:49202] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/.env~"] [unique_id "apK9wi04twRPFuquKD28zAAAAJY"]
[Sat Aug 29 05:08:50.665598 2026] [security2:error] [pid 1041789:tid 1042047] [client 93.123.109.228:49184] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/.env.swp"] [unique_id "apK9wov3RhPI65jTFG7WPQAAA5I"]
[Sat Aug 29 05:08:50.676872 2026] [security2:error] [pid 1034096:tid 1034284] [client 52.139.37.240:12869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/wp-admin/wp-fileesx-449.php"] [unique_id "apK9wi04twRPFuquKD28zgAAAKY"]
[Sat Aug 29 05:08:50.677936 2026] [security2:error] [pid 1041789:tid 1042006] [client 35.221.212.112:60858] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "autodiscover.beraluzarchive.org"] [uri "/@fs/root/.config/openai/config.json"] [unique_id "apK9wov3RhPI65jTFG7WQQAAA2k"]
[Sat Aug 29 05:08:50.679793 2026] [security2:error] [pid 1034096:tid 1034260] [client 20.63.219.114:2489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/colors.php"] [unique_id "apK9wi04twRPFuquKD280gAAAI4"]
[Sat Aug 29 05:08:50.685841 2026] [security2:error] [pid 1041789:tid 1042052] [client 35.221.212.112:60862] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/@fs/proc/self/cwd/.env"] [unique_id "apK9wov3RhPI65jTFG7WRAAAA5c"]
[Sat Aug 29 05:08:50.688896 2026] [security2:error] [pid 1041789:tid 1042048] [client 60.243.207.176:55704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK9wov3RhPI65jTFG7WRgAAA5M"]
[Sat Aug 29 05:08:50.689022 2026] [security2:error] [pid 1041789:tid 1042048] [client 60.243.207.176:55704] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK9wov3RhPI65jTFG7WRgAAA5M"]
[Sat Aug 29 05:08:50.689020 2026] [security2:error] [pid 1034096:tid 1034344] [client 35.221.212.112:60848] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/@fs/var/task/.env"] [unique_id "apK9wi04twRPFuquKD280wAAAOI"]
[Sat Aug 29 05:08:50.704037 2026] [security2:error] [pid 1034096:tid 1034359] [client 68.155.159.216:1939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/chosen.php"] [unique_id "apK9wi04twRPFuquKD281wAAAPE"]
[Sat Aug 29 05:08:50.738347 2026] [security2:error] [pid 1034096:tid 1034308] [client 20.48.250.41:45318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/easy.php"] [unique_id "apK9wi04twRPFuquKD285gAAAL4"]
[Sat Aug 29 05:08:50.745724 2026] [security2:error] [pid 1034096:tid 1034277] [client 20.48.251.3:14293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/public/bnn_.php.php"] [unique_id "apK9wi04twRPFuquKD286QAAAJ8"]
[Sat Aug 29 05:08:50.760305 2026] [security2:error] [pid 1041789:tid 1041998] [client 149.34.210.141:16258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9wov3RhPI65jTFG7WSgAAA2E"]
[Sat Aug 29 05:08:50.760474 2026] [security2:error] [pid 1041789:tid 1041998] [client 149.34.210.141:16258] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9wov3RhPI65jTFG7WSgAAA2E"]
[Sat Aug 29 05:08:50.763253 2026] [security2:error] [pid 1041789:tid 1041999] [client 20.52.41.200:5260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK9wov3RhPI65jTFG7WSwAAA2I"]
[Sat Aug 29 05:08:50.771738 2026] [security2:error] [pid 1034096:tid 1034298] [client 93.123.109.228:49254] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.bak"] [unique_id "apK9wi04twRPFuquKD286wAAALQ"]
[Sat Aug 29 05:08:50.787052 2026] [security2:error] [pid 1034096:tid 1034352] [client 40.83.93.50:20802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-comments-post.php"] [unique_id "apK9wi04twRPFuquKD287gAAAOo"]
[Sat Aug 29 05:08:50.787688 2026] [security2:error] [pid 1041789:tid 1041995] [client 93.123.109.228:49038] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/var/www/.env"] [unique_id "apK9wov3RhPI65jTFG7WTQAAA14"]
[Sat Aug 29 05:08:50.787709 2026] [security2:error] [pid 1041789:tid 1041978] [client 35.221.212.112:60874] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "autodiscover.beraluzarchive.org"] [uri "/@fs/proc/self/environ"] [unique_id "apK9wov3RhPI65jTFG7WTwAAA00"]
[Sat Aug 29 05:08:50.799277 2026] [security2:error] [pid 1034096:tid 1034322] [client 4.205.62.107:8985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/upload.form.php"] [unique_id "apK9wi04twRPFuquKD288wAAAMw"]
[Sat Aug 29 05:08:50.810218 2026] [security2:error] [pid 1034096:tid 1034323] [client 4.232.148.111:35796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-content.php"] [unique_id "apK9wi04twRPFuquKD289gAAAM0"]
[Sat Aug 29 05:08:50.813684 2026] [security2:error] [pid 1034096:tid 1034323] [client 93.123.109.228:49202] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.old"] [unique_id "apK9wi04twRPFuquKD289wAAAM0"]
[Sat Aug 29 05:08:50.813737 2026] [security2:error] [pid 1041789:tid 1041949] [client 93.123.109.228:48910] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/var/www/html/.env"] [unique_id "apK9wov3RhPI65jTFG7WUQAAAzA"]
[Sat Aug 29 05:08:50.815688 2026] [security2:error] [pid 1034096:tid 1034273] [client 20.48.250.41:49920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/easy.php"] [unique_id "apK9wi04twRPFuquKD28-AAAAJs"]
[Sat Aug 29 05:08:50.821701 2026] [security2:error] [pid 1034096:tid 1034367] [client 74.248.24.12:37887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-trackback.php"] [unique_id "apK9wi04twRPFuquKD28-QAAAPk"]
[Sat Aug 29 05:08:50.824106 2026] [security2:error] [pid 1041789:tid 1041958] [client 68.155.159.216:30669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-admin/admin.php"] [unique_id "apK9wov3RhPI65jTFG7WVQAAAzk"]
[Sat Aug 29 05:08:50.825058 2026] [security2:error] [pid 1041789:tid 1042005] [client 93.123.109.228:49184] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config~"] [unique_id "apK9wov3RhPI65jTFG7WVAAAA2g"]
[Sat Aug 29 05:08:50.837404 2026] [security2:error] [pid 1034096:tid 1034303] [client 20.197.61.180:1037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/OK.php"] [unique_id "apK9wi04twRPFuquKD29AAAAALk"]
[Sat Aug 29 05:08:50.849776 2026] [security2:error] [pid 1034096:tid 1034351] [client 20.104.68.135:51679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.east-town.org"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "apK9wi04twRPFuquKD29AwAAAOk"]
[Sat Aug 29 05:08:50.850004 2026] [security2:error] [pid 1041789:tid 1041983] [client 178.211.139.240:52967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.139.211.178.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "doggettaction.com"] [uri "/images/images/cache.php"] [unique_id "apK9wov3RhPI65jTFG7WWgAAA1I"], referer: www.google.com
[Sat Aug 29 05:08:50.852471 2026] [security2:error] [pid 1041789:tid 1041975] [client 20.196.209.81:1425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/wp-admin/class-db.php"] [unique_id "apK9wov3RhPI65jTFG7WWwAAA0o"]
[Sat Aug 29 05:08:50.862444 2026] [security2:error] [pid 1034096:tid 1034347] [client 158.23.147.79:11273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/content.php"] [unique_id "apK9wi04twRPFuquKD29CQAAAOU"]
[Sat Aug 29 05:08:50.870731 2026] [security2:error] [pid 1041789:tid 1041985] [client 20.48.250.41:45355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/fresh3.php"] [unique_id "apK9wov3RhPI65jTFG7WXgAAA1Q"]
[Sat Aug 29 05:08:50.873002 2026] [security2:error] [pid 1034096:tid 1034267] [client 52.139.37.240:12294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/wp-content/themes/min.php"] [unique_id "apK9wi04twRPFuquKD29DAAAAJU"]
[Sat Aug 29 05:08:50.883569 2026] [security2:error] [pid 1034096:tid 1034307] [client 20.48.251.3:13964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/wsws.php"] [unique_id "apK9wi04twRPFuquKD29DQAAAL0"]
[Sat Aug 29 05:08:50.894990 2026] [security2:error] [pid 1034096:tid 1034297] [client 93.123.109.228:48898] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/web/.env"] [unique_id "apK9wi04twRPFuquKD29DwAAALM"]
[Sat Aug 29 05:08:50.925147 2026] [security2:error] [pid 1034096:tid 1034324] [client 158.158.54.35:34656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-access.php"] [unique_id "apK9wi04twRPFuquKD29FQAAAM4"]
[Sat Aug 29 05:08:50.932158 2026] [security2:error] [pid 1034096:tid 1034346] [client 35.221.212.112:60912] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "autodiscover.beraluzarchive.org"] [uri "/@fs/proc/self/environ"] [unique_id "apK9wi04twRPFuquKD29FgAAAOQ"]
[Sat Aug 29 05:08:50.947934 2026] [security2:error] [pid 1034096:tid 1034353] [client 20.197.61.180:2029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/wp-contentt.php"] [unique_id "apK9wi04twRPFuquKD29GgAAAOs"]
[Sat Aug 29 05:08:50.949234 2026] [security2:error] [pid 1041789:tid 1042044] [client 68.155.159.216:38531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK9wov3RhPI65jTFG7WZwAAA48"]
[Sat Aug 29 05:08:50.986625 2026] [security2:error] [pid 1034096:tid 1034274] [client 91.92.47.191:38318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.edwardjindovina.com"] [uri "/xmlrpc.php"] [unique_id "apK9wi04twRPFuquKD29JQAAAJw"]
[Sat Aug 29 05:08:50.997691 2026] [security2:error] [pid 1041789:tid 1042028] [client 158.23.147.79:6115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK9wov3RhPI65jTFG7WbwAAA38"]
[Sat Aug 29 05:08:51.008782 2026] [security2:error] [pid 1034096:tid 1034313] [client 93.123.109.228:48906] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/website/.env"] [unique_id "apK9wy04twRPFuquKD29KQAAAMM"]
[Sat Aug 29 05:08:51.012653 2026] [security2:error] [pid 1041789:tid 1041938] [client 40.83.93.50:11925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/wxo.php"] [unique_id "apK9w4v3RhPI65jTFG7WcQAAAyU"]
[Sat Aug 29 05:08:51.012653 2026] [security2:error] [pid 1034096:tid 1034277] [client 20.48.250.41:49939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/fresh3.php"] [unique_id "apK9wy04twRPFuquKD29KgAAAJ8"]
[Sat Aug 29 05:08:51.012941 2026] [security2:error] [pid 1041789:tid 1042033] [client 20.48.251.3:14024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/localconf.php"] [unique_id "apK9w4v3RhPI65jTFG7WcgAAA4Q"]
[Sat Aug 29 05:08:51.017951 2026] [security2:error] [pid 1041789:tid 1041961] [client 4.205.62.107:51462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/snq.php"] [unique_id "apK9w4v3RhPI65jTFG7WcwAAAzw"]
[Sat Aug 29 05:08:51.018953 2026] [security2:error] [pid 1041789:tid 1042016] [client 40.83.93.50:4037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/content.php"] [unique_id "apK9w4v3RhPI65jTFG7WdAAAA3M"]
[Sat Aug 29 05:08:51.033367 2026] [security2:error] [pid 1034096:tid 1034298] [client 20.48.250.41:45329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/bgymj.php"] [unique_id "apK9wy04twRPFuquKD29LQAAALQ"]
[Sat Aug 29 05:08:51.050379 2026] [security2:error] [pid 1034096:tid 1034284] [client 20.63.219.114:11912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/Js.php"] [unique_id "apK9wy04twRPFuquKD29MQAAAKY"]
[Sat Aug 29 05:08:51.056271 2026] [security2:error] [pid 1034096:tid 1034352] [client 68.155.159.216:16294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-admin/setup-config.php"] [unique_id "apK9wy04twRPFuquKD29MwAAAOo"]
[Sat Aug 29 05:08:51.068431 2026] [security2:error] [pid 1034096:tid 1034308] [client 52.139.37.240:12914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/wp-content/themes/x/bypass.php"] [unique_id "apK9wy04twRPFuquKD29NAAAAL4"]
[Sat Aug 29 05:08:51.072191 2026] [security2:error] [pid 1041789:tid 1041994] [client 35.221.212.112:60904] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "autodiscover.beraluzarchive.org"] [uri "/@fs/proc/self/environ"] [unique_id "apK9w4v3RhPI65jTFG7WdwAAA10"]
[Sat Aug 29 05:08:51.084784 2026] [autoindex:error] [pid 1041789:tid 1041835] [remote 87.58.197.202:65090] AH01276: Cannot serve directory /home3/ausguimy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:08:51.086037 2026] [security2:error] [pid 1034096:tid 1034300] [client 20.197.61.180:1073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/add_actualites.php"] [unique_id "apK9wy04twRPFuquKD29NgAAALY"]
[Sat Aug 29 05:08:51.088560 2026] [security2:error] [pid 1034096:tid 1034252] [client 20.48.250.41:19514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/init.php"] [unique_id "apK9wy04twRPFuquKD29NwAAAIY"]
[Sat Aug 29 05:08:51.096551 2026] [security2:error] [pid 1041789:tid 1042056] [client 20.197.61.180:1864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/alumni_reg.php"] [unique_id "apK9w4v3RhPI65jTFG7WeQAAA5s"]
[Sat Aug 29 05:08:51.109173 2026] [security2:error] [pid 1034096:tid 1034362] [client 4.205.62.107:6483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/aws_credentials.php"] [unique_id "apK9wy04twRPFuquKD29OAAAAPQ"]
[Sat Aug 29 05:08:51.113474 2026] [security2:error] [pid 1034096:tid 1034314] [client 20.48.250.41:33909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/sbhu.php"] [unique_id "apK9wy04twRPFuquKD29OQAAAMQ"]
[Sat Aug 29 05:08:51.122384 2026] [security2:error] [pid 1034096:tid 1034323] [client 20.48.250.41:49376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/kbfr.php"] [unique_id "apK9wy04twRPFuquKD29OgAAAM0"]
[Sat Aug 29 05:08:51.124404 2026] [security2:error] [pid 1034096:tid 1034255] [client 20.100.175.163:7547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/upload.php"] [unique_id "apK9wy04twRPFuquKD29OwAAAIk"]
[Sat Aug 29 05:08:51.142875 2026] [security2:error] [pid 1034096:tid 1034290] [client 20.48.250.41:38860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/wp-scr1pts.php"] [unique_id "apK9wy04twRPFuquKD29PQAAAKw"]
[Sat Aug 29 05:08:51.149584 2026] [security2:error] [pid 1034096:tid 1034319] [client 20.48.251.3:13974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/bengi.php"] [unique_id "apK9wy04twRPFuquKD29PgAAAMk"]
[Sat Aug 29 05:08:51.161329 2026] [security2:error] [pid 1034096:tid 1034351] [client 20.48.250.41:49994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/bgymj.php"] [unique_id "apK9wy04twRPFuquKD29PwAAAOk"]
[Sat Aug 29 05:08:51.167832 2026] [security2:error] [pid 1034096:tid 1034347] [client 158.23.147.79:61605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/ans.php"] [unique_id "apK9wy04twRPFuquKD29QAAAAOU"]
[Sat Aug 29 05:08:51.179583 2026] [security2:error] [pid 1041789:tid 1042034] [client 20.240.128.207:27520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-logs.php"] [unique_id "apK9w4v3RhPI65jTFG7WegAAA4U"]
[Sat Aug 29 05:08:51.180572 2026] [security2:error] [pid 1041789:tid 1041990] [client 20.48.250.41:46020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/ws69.php"] [unique_id "apK9w4v3RhPI65jTFG7WewAAA1k"]
[Sat Aug 29 05:08:51.192917 2026] [security2:error] [pid 1034096:tid 1034263] [client 4.205.62.107:62749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/i.php"] [unique_id "apK9wy04twRPFuquKD29QQAAAJE"]
[Sat Aug 29 05:08:51.200255 2026] [security2:error] [pid 1034096:tid 1034325] [client 20.104.68.135:51673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.east-town.org"] [uri "/wp-links-opml.php"] [unique_id "apK9wy04twRPFuquKD29QgAAAM8"]
[Sat Aug 29 05:08:51.203096 2026] [security2:error] [pid 1034096:tid 1034292] [client 4.205.62.107:24992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/avim.php"] [unique_id "apK9wy04twRPFuquKD29QwAAAK4"]
[Sat Aug 29 05:08:51.204981 2026] [security2:error] [pid 1041789:tid 1042031] [client 20.52.41.200:5368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.neufgroup.com"] [uri "/wp-admin.php"] [unique_id "apK9w4v3RhPI65jTFG7WfAAAA4I"]
[Sat Aug 29 05:08:51.211387 2026] [security2:error] [pid 1041789:tid 1042032] [client 35.221.212.112:60914] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "autodiscover.beraluzarchive.org"] [uri "/@fs/proc/self/environ"] [unique_id "apK9w4v3RhPI65jTFG7WfQAAA4M"]
[Sat Aug 29 05:08:51.218826 2026] [security2:error] [pid 1034096:tid 1034329] [client 20.48.250.41:19553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/term.php"] [unique_id "apK9wy04twRPFuquKD29RgAAANM"]
[Sat Aug 29 05:08:51.226422 2026] [security2:error] [pid 1034096:tid 1034253] [client 202.71.25.11:55453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.25.71.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK9wy04twRPFuquKD29RQAAAIc"]
[Sat Aug 29 05:08:51.226559 2026] [security2:error] [pid 1034096:tid 1034253] [client 202.71.25.11:55453] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK9wy04twRPFuquKD29RQAAAIc"]
[Sat Aug 29 05:08:51.227901 2026] [security2:error] [pid 1041789:tid 1042007] [client 20.48.250.41:61733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/grsiuk.php"] [unique_id "apK9w4v3RhPI65jTFG7WfwAAA2o"]
[Sat Aug 29 05:08:51.251389 2026] [security2:error] [pid 1041789:tid 1042048] [client 158.23.147.79:6071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-content/uploads/about.php"] [unique_id "apK9w4v3RhPI65jTFG7WgAAAA5M"]
[Sat Aug 29 05:08:51.258605 2026] [security2:error] [pid 1034096:tid 1034294] [client 40.83.93.50:16689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-config.php"] [unique_id "apK9wy04twRPFuquKD29RwAAALA"]
[Sat Aug 29 05:08:51.279250 2026] [security2:error] [pid 1034096:tid 1034335] [client 20.48.251.3:14094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/i.php"] [unique_id "apK9wy04twRPFuquKD29SQAAANk"]
[Sat Aug 29 05:08:51.283114 2026] [security2:error] [pid 1041789:tid 1042029] [client 20.48.250.41:49342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/wp-act.php"] [unique_id "apK9w4v3RhPI65jTFG7WgQAAA4A"]
[Sat Aug 29 05:08:51.294210 2026] [security2:error] [pid 1041789:tid 1042015] [client 20.48.250.41:33864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/a332.php"] [unique_id "apK9w4v3RhPI65jTFG7WggAAA3I"]
[Sat Aug 29 05:08:51.306568 2026] [security2:error] [pid 1041789:tid 1042011] [client 68.155.159.216:33619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/admin.php"] [unique_id "apK9w4v3RhPI65jTFG7WgwAAA24"]
[Sat Aug 29 05:08:51.310405 2026] [security2:error] [pid 1034096:tid 1034286] [client 20.48.250.41:49935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/ws69.php"] [unique_id "apK9wy04twRPFuquKD29SgAAAKg"]
[Sat Aug 29 05:08:51.310929 2026] [security2:error] [pid 1041789:tid 1042051] [client 213.202.253.4:62125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bv-place.com"] [uri "/schallfuns.php"] [unique_id "apK9w4v3RhPI65jTFG7WhAAAA5Y"], referer: www.google.com
[Sat Aug 29 05:08:51.314274 2026] [security2:error] [pid 1034096:tid 1034310] [client 20.196.209.81:1801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/wp-contentt.php"] [unique_id "apK9wy04twRPFuquKD29SwAAAMA"]
[Sat Aug 29 05:08:51.317497 2026] [security2:error] [pid 1034096:tid 1034303] [client 4.232.148.111:18862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "apK9wy04twRPFuquKD29TAAAALk"]
[Sat Aug 29 05:08:51.347918 2026] [security2:error] [pid 1041789:tid 1041962] [client 20.48.250.41:19540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/aaa.php"] [unique_id "apK9w4v3RhPI65jTFG7WhgAAAz0"]
[Sat Aug 29 05:08:51.350783 2026] [security2:error] [pid 1034096:tid 1034320] [client 35.221.212.112:60848] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "autodiscover.beraluzarchive.org"] [uri "/@fs/proc/self/environ"] [unique_id "apK9wy04twRPFuquKD29TQAAAMo"]
[Sat Aug 29 05:08:51.350897 2026] [security2:error] [pid 1041789:tid 1041980] [client 20.48.250.41:65387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/Geforce.php"] [unique_id "apK9w4v3RhPI65jTFG7WhwAAA08"]
[Sat Aug 29 05:08:51.355161 2026] [security2:error] [pid 1041789:tid 1041966] [client 20.48.250.41:61751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/wp-scr1pts.php"] [unique_id "apK9w4v3RhPI65jTFG7WiQAAA0E"]
[Sat Aug 29 05:08:51.358124 2026] [security2:error] [pid 1034096:tid 1034304] [client 68.155.159.216:18254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-admin/css/index.php"] [unique_id "apK9wy04twRPFuquKD29TwAAALo"]
[Sat Aug 29 05:08:51.358430 2026] [security2:error] [pid 1034096:tid 1034357] [client 20.48.250.41:45358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/ccs.php"] [unique_id "apK9wy04twRPFuquKD29UAAAAO8"]
[Sat Aug 29 05:08:51.361439 2026] [security2:error] [pid 1034096:tid 1034287] [client 52.139.37.240:12528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK9wy04twRPFuquKD29UQAAAKk"]
[Sat Aug 29 05:08:51.366644 2026] [security2:error] [pid 1034096:tid 1034276] [client 20.48.250.41:38808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/num.php"] [unique_id "apK9wy04twRPFuquKD29UgAAAJ4"]
[Sat Aug 29 05:08:51.376341 2026] [security2:error] [pid 1041789:tid 1042052] [client 158.158.54.35:34644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-content/uploads/min.php"] [unique_id "apK9w4v3RhPI65jTFG7WiwAAA5c"]
[Sat Aug 29 05:08:51.404640 2026] [security2:error] [pid 1041789:tid 1042020] [client 20.104.68.135:3017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.east-town.org"] [uri "/wp-signup.php"] [unique_id "apK9w4v3RhPI65jTFG7WjQAAA3c"]
[Sat Aug 29 05:08:51.410163 2026] [security2:error] [pid 1034096:tid 1034262] [client 20.48.251.3:14125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/guk.php"] [unique_id "apK9wy04twRPFuquKD29VAAAAJA"]
[Sat Aug 29 05:08:51.418152 2026] [security2:error] [pid 1034096:tid 1034321] [client 20.48.250.41:49292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/24.php"] [unique_id "apK9wy04twRPFuquKD29VQAAAMs"]
[Sat Aug 29 05:08:51.442726 2026] [security2:error] [pid 1034096:tid 1034346] [client 68.155.159.216:49245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-blog-header.php"] [unique_id "apK9wy04twRPFuquKD29WAAAAOQ"]
[Sat Aug 29 05:08:51.449097 2026] [security2:error] [pid 1034096:tid 1034272] [client 20.48.250.41:50008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/ccs.php"] [unique_id "apK9wy04twRPFuquKD29WQAAAJo"]
[Sat Aug 29 05:08:51.450229 2026] [security2:error] [pid 1041789:tid 1042024] [client 4.205.62.107:3411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/public/rip.php.php"] [unique_id "apK9w4v3RhPI65jTFG7WjgAAA3s"]
[Sat Aug 29 05:08:51.450276 2026] [security2:error] [pid 1034096:tid 1034284] [client 68.155.159.216:33781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-admin/network/index.php"] [unique_id "apK9wy04twRPFuquKD29WgAAAKY"]
[Sat Aug 29 05:08:51.491822 2026] [security2:error] [pid 1041789:tid 1041944] [client 20.48.250.41:34463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/ws66.php"] [unique_id "apK9w4v3RhPI65jTFG7WjwAAAys"]
[Sat Aug 29 05:08:51.494591 2026] [security2:error] [pid 1034096:tid 1034252] [client 20.104.49.130:43014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/wp-the.php"] [unique_id "apK9wy04twRPFuquKD29XQAAAIY"]
[Sat Aug 29 05:08:51.499624 2026] [security2:error] [pid 1034096:tid 1034355] [client 20.48.250.41:19464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/xsox.php"] [unique_id "apK9wy04twRPFuquKD29XgAAAO0"]
[Sat Aug 29 05:08:51.501535 2026] [security2:error] [pid 1034096:tid 1034316] [client 20.48.250.41:61823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/num.php"] [unique_id "apK9wy04twRPFuquKD29XwAAAMY"]
[Sat Aug 29 05:08:51.504546 2026] [security2:error] [pid 1041789:tid 1042004] [client 40.83.93.50:48045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/as.php"] [unique_id "apK9w4v3RhPI65jTFG7WkAAAA2c"]
[Sat Aug 29 05:08:51.508530 2026] [security2:error] [pid 1041789:tid 1042005] [client 20.48.250.41:45349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/mar.php"] [unique_id "apK9w4v3RhPI65jTFG7WkQAAA2g"]
[Sat Aug 29 05:08:51.513457 2026] [security2:error] [pid 1041789:tid 1041964] [client 74.248.24.12:19474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/222.php"] [unique_id "apK9w4v3RhPI65jTFG7WkwAAAz8"]
[Sat Aug 29 05:08:51.514051 2026] [security2:error] [pid 1041789:tid 1041970] [client 93.123.109.228:48976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/wp-config.php"] [unique_id "apK9w4v3RhPI65jTFG7WlAAAA0U"]
[Sat Aug 29 05:08:51.519422 2026] [security2:error] [pid 1041789:tid 1041975] [client 93.123.109.228:48982] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/wp-config.php.old"] [unique_id "apK9w4v3RhPI65jTFG7WlQAAA0o"]
[Sat Aug 29 05:08:51.522002 2026] [security2:error] [pid 1034096:tid 1034306] [client 93.123.109.228:49100] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/wp-config.php.new"] [unique_id "apK9wy04twRPFuquKD29YAAAALw"]
[Sat Aug 29 05:08:51.526937 2026] [security2:error] [pid 1034096:tid 1034314] [client 68.155.159.216:65066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK9wy04twRPFuquKD29YQAAAMQ"]
[Sat Aug 29 05:08:51.527837 2026] [security2:error] [pid 1041789:tid 1042042] [client 40.83.93.50:4078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/wxo.php"] [unique_id "apK9w4v3RhPI65jTFG7WlgAAA40"]
[Sat Aug 29 05:08:51.541429 2026] [security2:error] [pid 1041789:tid 1042009] [client 20.63.219.114:2433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/access.php"] [unique_id "apK9w4v3RhPI65jTFG7WlwAAA2w"]
[Sat Aug 29 05:08:51.551144 2026] [security2:error] [pid 1041789:tid 1042027] [client 93.123.109.228:48910] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/___proxy_subdomain_cpcontacts/wp-content/mysql.sql"] [unique_id "apK9w4v3RhPI65jTFG7WmgAAA34"]
[Sat Aug 29 05:08:51.552490 2026] [security2:error] [pid 1034096:tid 1034255] [client 20.48.250.41:38867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/a4.php"] [unique_id "apK9wy04twRPFuquKD29ZQAAAIk"]
[Sat Aug 29 05:08:51.559897 2026] [security2:error] [pid 1034096:tid 1034375] [client 52.139.37.240:12312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/wp-info.php"] [unique_id "apK9wy04twRPFuquKD29aAAAAQE"]
[Sat Aug 29 05:08:51.562062 2026] [security2:error] [pid 1041789:tid 1042002] [client 20.48.250.41:49391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/155.php"] [unique_id "apK9w4v3RhPI65jTFG7WmwAAA2U"]
[Sat Aug 29 05:08:51.566900 2026] [security2:error] [pid 1034096:tid 1034342] [client 4.205.62.107:21931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/u88.php"] [unique_id "apK9wy04twRPFuquKD29aQAAAOA"]
[Sat Aug 29 05:08:51.566930 2026] [security2:error] [pid 1034096:tid 1034358] [client 20.197.61.180:14414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.evaandcraig.strangeworx.com"] [uri "/aaa.php"] [unique_id "apK9wy04twRPFuquKD29agAAAPA"]
[Sat Aug 29 05:08:51.590463 2026] [security2:error] [pid 1034096:tid 1034289] [client 158.23.147.79:17634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wzy.php"] [unique_id "apK9wy04twRPFuquKD29bAAAAKs"]
[Sat Aug 29 05:08:51.614924 2026] [security2:error] [pid 1034096:tid 1034275] [client 68.155.159.216:2028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/goat.php"] [unique_id "apK9wy04twRPFuquKD29bgAAAJ0"]
[Sat Aug 29 05:08:51.619278 2026] [security2:error] [pid 1034096:tid 1034328] [client 93.123.109.228:49114] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.gbcbdesigns.com"] [uri "/wp-config.php.bak"] [unique_id "apK9wy04twRPFuquKD29cQAAANI"]
[Sat Aug 29 05:08:51.622232 2026] [core:error] [pid 1034096:tid 1034259] [client 20.100.175.163:25996] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:51.622251 2026] [core:error] [pid 1034096:tid 1034259] [client 20.100.175.163:25996] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:51.639010 2026] [security2:error] [pid 1034096:tid 1034323] [client 20.104.68.135:11713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.east-town.org"] [uri "/xmlrpc.php"] [unique_id "apK9wy04twRPFuquKD29bQAAAM0"]
[Sat Aug 29 05:08:51.639022 2026] [security2:error] [pid 1034096:tid 1034376] [client 20.48.250.41:45362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/ccu.php"] [unique_id "apK9wy04twRPFuquKD29cgAAAQI"]
[Sat Aug 29 05:08:51.647128 2026] [security2:error] [pid 1041789:tid 1042038] [client 20.48.250.41:61768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/a4.php"] [unique_id "apK9w4v3RhPI65jTFG7WngAAA4k"]
[Sat Aug 29 05:08:51.650761 2026] [security2:error] [pid 1041789:tid 1041978] [client 20.48.251.3:33302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/aws_credentials.php"] [unique_id "apK9w4v3RhPI65jTFG7WnwAAA00"]
[Sat Aug 29 05:08:51.658134 2026] [security2:error] [pid 1034096:tid 1034260] [client 20.197.61.180:1052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/theme.php"] [unique_id "apK9wy04twRPFuquKD29dQAAAI4"]
[Sat Aug 29 05:08:51.658560 2026] [security2:error] [pid 1034096:tid 1034329] [client 20.48.250.41:19565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/lkui.php"] [unique_id "apK9wy04twRPFuquKD29dwAAANM"]
[Sat Aug 29 05:08:51.662058 2026] [security2:error] [pid 1034096:tid 1034317] [client 68.155.159.216:52749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-admin/css/index.php"] [unique_id "apK9wy04twRPFuquKD29eAAAAMc"]
[Sat Aug 29 05:08:51.670624 2026] [security2:error] [pid 1041789:tid 1042045] [client 20.48.250.41:33865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/ws68.php"] [unique_id "apK9w4v3RhPI65jTFG7WoAAAA5A"]
[Sat Aug 29 05:08:51.672010 2026] [security2:error] [pid 1041789:tid 1042050] [client 20.48.250.41:49936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/mar.php"] [unique_id "apK9w4v3RhPI65jTFG7WoQAAA5U"]
[Sat Aug 29 05:08:51.677241 2026] [security2:error] [pid 1034096:tid 1034362] [client 20.240.128.207:22094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-admin/css/about.php"] [unique_id "apK9wy04twRPFuquKD29eQAAAPQ"]
[Sat Aug 29 05:08:51.714042 2026] [security2:error] [pid 1041789:tid 1042010] [client 52.139.37.240:63875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehulbertfamily.com"] [uri "/aged.php"] [unique_id "apK9w4v3RhPI65jTFG7WpQAAA20"]
[Sat Aug 29 05:08:51.723103 2026] [security2:error] [pid 1034096:tid 1034351] [client 20.196.209.81:1306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/theme.php"] [unique_id "apK9wy04twRPFuquKD29ewAAAOk"]
[Sat Aug 29 05:08:51.735646 2026] [security2:error] [pid 1041789:tid 1041936] [client 20.104.49.130:36245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/t.php"] [unique_id "apK9w4v3RhPI65jTFG7WqAAAAyM"]
[Sat Aug 29 05:08:51.746037 2026] [security2:error] [pid 1034096:tid 1034310] [client 68.155.159.216:5963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-admin/images/about.php"] [unique_id "apK9wy04twRPFuquKD29fQAAAMA"]
[Sat Aug 29 05:08:51.746641 2026] [security2:error] [pid 1034096:tid 1034372] [client 40.83.93.50:13579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-configs.php"] [unique_id "apK9wy04twRPFuquKD29fgAAAP4"]
[Sat Aug 29 05:08:51.755772 2026] [security2:error] [pid 1041789:tid 1041992] [client 52.139.37.240:12300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/wp-wordfence-waf.php"] [unique_id "apK9w4v3RhPI65jTFG7WqgAAA1s"]
[Sat Aug 29 05:08:51.763526 2026] [security2:error] [pid 1034096:tid 1034263] [client 35.221.212.112:60928] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "autodiscover.beraluzarchive.org"] [uri "/@fs/proc/self/environ"] [unique_id "apK9wy04twRPFuquKD29fwAAAJE"]
[Sat Aug 29 05:08:51.768585 2026] [security2:error] [pid 1034096:tid 1034353] [client 20.48.250.41:38728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/tfm.php"] [unique_id "apK9wy04twRPFuquKD29gQAAAOs"]
[Sat Aug 29 05:08:51.771010 2026] [security2:error] [pid 1034096:tid 1034315] [client 20.48.250.41:49298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/file.php"] [unique_id "apK9wy04twRPFuquKD29gwAAAMU"]
[Sat Aug 29 05:08:51.772933 2026] [security2:error] [pid 1034096:tid 1034370] [client 68.155.159.216:65082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/.well-known/content.php"] [unique_id "apK9wy04twRPFuquKD29hAAAAPw"]
[Sat Aug 29 05:08:51.787481 2026] [security2:error] [pid 1034096:tid 1034276] [client 20.48.250.41:57706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/tfm.php"] [unique_id "apK9wy04twRPFuquKD29hwAAAJ4"]
[Sat Aug 29 05:08:51.792749 2026] [security2:error] [pid 1041789:tid 1041950] [client 4.232.148.111:3834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/css/wp-login.php"] [unique_id "apK9w4v3RhPI65jTFG7WqwAAAzE"]
[Sat Aug 29 05:08:51.794633 2026] [security2:error] [pid 1041789:tid 1042016] [client 20.48.250.41:45326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/ak.php"] [unique_id "apK9w4v3RhPI65jTFG7WrAAAA3M"]
[Sat Aug 29 05:08:51.795262 2026] [security2:error] [pid 1041789:tid 1041993] [client 158.23.147.79:17504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/lv.php"] [unique_id "apK9w4v3RhPI65jTFG7WrQAAA1w"]
[Sat Aug 29 05:08:51.816424 2026] [security2:error] [pid 1034096:tid 1034327] [client 20.48.250.41:19663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "apK9wy04twRPFuquKD29iQAAANE"]
[Sat Aug 29 05:08:51.824200 2026] [security2:error] [pid 1034096:tid 1034321] [client 20.48.250.41:50021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/ccu.php"] [unique_id "apK9wy04twRPFuquKD29iwAAAMs"]
[Sat Aug 29 05:08:51.828789 2026] [security2:error] [pid 1034096:tid 1034298] [client 20.48.250.41:49410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/click.php"] [unique_id "apK9wy04twRPFuquKD29jAAAALQ"]
[Sat Aug 29 05:08:51.828894 2026] [security2:error] [pid 1041789:tid 1041935] [client 158.158.54.35:31496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK9w4v3RhPI65jTFG7WrwAAAyI"]
[Sat Aug 29 05:08:51.833245 2026] [security2:error] [pid 1034096:tid 1034283] [client 45.148.10.60:5818] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.body.requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1600"] [id "900941"] [msg "Invalid nested WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.body.requests.requests.path=///"] [hostname "villagebooksandbears.com"] [uri "/wp/"] [unique_id "apK9wy04twRPFuquKD29jgAAAKU"]
[Sat Aug 29 05:08:51.835272 2026] [security2:error] [pid 1034096:tid 1034312] [client 20.104.68.135:18247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.east-town.org"] [uri "/yas.php"] [unique_id "apK9wy04twRPFuquKD29jwAAAMI"]
[Sat Aug 29 05:08:51.852366 2026] [security2:error] [pid 1041789:tid 1042057] [client 68.155.159.216:1876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/goods.php"] [unique_id "apK9w4v3RhPI65jTFG7WsAAAA5w"]
[Sat Aug 29 05:08:51.853769 2026] [security2:error] [pid 1041789:tid 1041955] [client 20.151.200.44:64483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/super.php"] [unique_id "apK9w4v3RhPI65jTFG7WsQAAAzY"]
[Sat Aug 29 05:08:51.878287 2026] [security2:error] [pid 1034096:tid 1034271] [client 20.48.250.41:33906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/users.php"] [unique_id "apK9wy04twRPFuquKD29kgAAAJk"]
[Sat Aug 29 05:08:51.887524 2026] [security2:error] [pid 1041789:tid 1041942] [client 20.197.61.180:1033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/alfanew.php7"] [unique_id "apK9w4v3RhPI65jTFG7WswAAAyk"]
[Sat Aug 29 05:08:51.904019 2026] [security2:error] [pid 1034096:tid 1034304] [client 20.63.219.114:2486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/classsmtps.php"] [unique_id "apK9wy04twRPFuquKD29lAAAALo"]
[Sat Aug 29 05:08:51.922278 2026] [security2:error] [pid 1041789:tid 1042025] [client 52.139.37.240:39194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehulbertfamily.com"] [uri "/essexec.php"] [unique_id "apK9w4v3RhPI65jTFG7WugAAA3w"]
[Sat Aug 29 05:08:51.929868 2026] [security2:error] [pid 1041789:tid 1041959] [client 68.155.159.216:30595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK9w4v3RhPI65jTFG7WuwAAAzo"]
[Sat Aug 29 05:08:51.935601 2026] [security2:error] [pid 1034096:tid 1034268] [client 20.197.61.180:2009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/colors.php"] [unique_id "apK9wy04twRPFuquKD29lwAAAJY"]
[Sat Aug 29 05:08:51.938068 2026] [security2:error] [pid 1041789:tid 1041932] [client 20.48.250.41:38825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/Geforce.php"] [unique_id "apK9w4v3RhPI65jTFG7WvAAAAx8"]
[Sat Aug 29 05:08:51.939865 2026] [security2:error] [pid 1041789:tid 1041991] [client 20.48.250.41:46022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/lib.php"] [unique_id "apK9w4v3RhPI65jTFG7WvgAAA1o"]
[Sat Aug 29 05:08:51.944548 2026] [security2:error] [pid 1034096:tid 1034306] [client 20.48.251.3:13847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/4563.php"] [unique_id "apK9wy04twRPFuquKD29mQAAALw"]
[Sat Aug 29 05:08:51.952245 2026] [security2:error] [pid 1041789:tid 1042034] [client 4.205.62.107:53403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/v3.php"] [unique_id "apK9w4v3RhPI65jTFG7WwAAAA4U"]
[Sat Aug 29 05:08:51.955464 2026] [security2:error] [pid 1041789:tid 1041969] [client 52.139.37.240:12497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/ws49.php"] [unique_id "apK9w4v3RhPI65jTFG7WwQAAA0Q"]
[Sat Aug 29 05:08:51.966118 2026] [security2:error] [pid 1041789:tid 1041990] [client 20.48.250.41:49380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK9w4v3RhPI65jTFG7WwgAAA1k"]
[Sat Aug 29 05:08:51.970127 2026] [security2:error] [pid 1034096:tid 1034340] [client 20.48.250.41:19523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/motu.php"] [unique_id "apK9wy04twRPFuquKD29mwAAAN4"]
[Sat Aug 29 05:08:51.975244 2026] [security2:error] [pid 1041789:tid 1041984] [client 40.83.93.50:11959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/room.php"] [unique_id "apK9w4v3RhPI65jTFG7WwwAAA1M"]
[Sat Aug 29 05:08:51.996923 2026] [security2:error] [pid 1034096:tid 1034358] [client 20.48.250.41:50038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/ak.php"] [unique_id "apK9wy04twRPFuquKD29ngAAAPA"]
[Sat Aug 29 05:08:52.015422 2026] [security2:error] [pid 1041789:tid 1042037] [client 40.83.93.50:13203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/as.php"] [unique_id "apK9xIv3RhPI65jTFG7WxAAAA4g"]
[Sat Aug 29 05:08:52.028009 2026] [security2:error] [pid 1041789:tid 1041997] [client 74.248.24.12:29806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/x.php"] [unique_id "apK9xIv3RhPI65jTFG7WxQAAA2A"]
[Sat Aug 29 05:08:52.030333 2026] [security2:error] [pid 1034096:tid 1034367] [client 20.48.250.41:58589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/Geforce.php"] [unique_id "apK9xC04twRPFuquKD29oAAAAPk"]
[Sat Aug 29 05:08:52.038009 2026] [security2:error] [pid 1041789:tid 1042051] [client 158.23.147.79:11366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK9xIv3RhPI65jTFG7WxgAAA5Y"]
[Sat Aug 29 05:08:52.051821 2026] [security2:error] [pid 1034096:tid 1034267] [client 20.48.250.41:62147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/ms.php"] [unique_id "apK9xC04twRPFuquKD29oQAAAJU"]
[Sat Aug 29 05:08:52.054406 2026] [security2:error] [pid 1034096:tid 1034347] [client 20.104.104.62:37567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/hq.php"] [unique_id "apK9xC04twRPFuquKD29ogAAAOU"]
[Sat Aug 29 05:08:52.056536 2026] [security2:error] [pid 1034096:tid 1034285] [client 93.123.109.228:49172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/.wp-config.php.swp"] [unique_id "apK9xC04twRPFuquKD29owAAAKc"]
[Sat Aug 29 05:08:52.084068 2026] [security2:error] [pid 1034096:tid 1034275] [client 20.48.250.41:45322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/wp-style.php"] [unique_id "apK9xC04twRPFuquKD29pQAAAJ0"]
[Sat Aug 29 05:08:52.099760 2026] [security2:error] [pid 1034096:tid 1034290] [client 111.235.68.106:19165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK9xC04twRPFuquKD29pgAAAKw"]
[Sat Aug 29 05:08:52.099889 2026] [security2:error] [pid 1034096:tid 1034290] [client 111.235.68.106:19165] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK9xC04twRPFuquKD29pgAAAKw"]
[Sat Aug 29 05:08:52.104058 2026] [security2:error] [pid 1034096:tid 1034325] [client 20.104.104.62:43116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/monso.php"] [unique_id "apK9xC04twRPFuquKD29pwAAAM8"]
[Sat Aug 29 05:08:52.107916 2026] [security2:error] [pid 1034096:tid 1034292] [client 20.48.250.41:38817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/click.php"] [unique_id "apK9xC04twRPFuquKD29qAAAAK4"]
[Sat Aug 29 05:08:52.117179 2026] [security2:error] [pid 1034096:tid 1034344] [client 52.139.37.240:63922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehulbertfamily.com"] [uri "/fw.php"] [unique_id "apK9xC04twRPFuquKD29qQAAAOI"]
[Sat Aug 29 05:08:52.119190 2026] [security2:error] [pid 1034096:tid 1034282] [client 20.48.251.3:14070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/cp2.php"] [unique_id "apK9xC04twRPFuquKD29qgAAAKQ"]
[Sat Aug 29 05:08:52.126793 2026] [security2:error] [pid 1034096:tid 1034374] [client 20.48.250.41:19602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/Ov-Simple1.php"] [unique_id "apK9xC04twRPFuquKD29qwAAAQA"]
[Sat Aug 29 05:08:52.127417 2026] [security2:error] [pid 1034096:tid 1034371] [client 20.104.104.62:40088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/dbc.php"] [unique_id "apK9xC04twRPFuquKD29rAAAAP0"]
[Sat Aug 29 05:08:52.132604 2026] [security2:error] [pid 1034096:tid 1034342] [client 20.196.209.81:1815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/alumni_reg.php"] [unique_id "apK9xC04twRPFuquKD29rgAAAOA"]
[Sat Aug 29 05:08:52.133498 2026] [security2:error] [pid 1034096:tid 1034329] [client 20.48.250.41:49389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/06.php"] [unique_id "apK9xC04twRPFuquKD29rwAAANM"]
[Sat Aug 29 05:08:52.135121 2026] [security2:error] [pid 1034096:tid 1034378] [client 20.104.104.62:65261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/kure.php"] [unique_id "apK9xC04twRPFuquKD29sAAAAQQ"]
[Sat Aug 29 05:08:52.135582 2026] [security2:error] [pid 1034096:tid 1034317] [client 20.48.250.41:50039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/lib.php"] [unique_id "apK9xC04twRPFuquKD29sQAAAMc"]
[Sat Aug 29 05:08:52.143213 2026] [security2:error] [pid 1041789:tid 1041966] [client 93.123.109.228:49160] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/ADMIN/.env"] [unique_id "apK9xIv3RhPI65jTFG7WygAAA0E"]
[Sat Aug 29 05:08:52.150540 2026] [security2:error] [pid 1034096:tid 1034339] [client 52.139.37.240:12462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/xxx.php"] [unique_id "apK9xC04twRPFuquKD29sgAAAN0"]
[Sat Aug 29 05:08:52.156602 2026] [security2:error] [pid 1034096:tid 1034362] [client 4.205.62.107:58432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/aws_credentials.php"] [unique_id "apK9xC04twRPFuquKD29tAAAAPQ"]
[Sat Aug 29 05:08:52.157530 2026] [security2:error] [pid 1034096:tid 1034356] [client 93.123.109.228:49130] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/API/.env"] [unique_id "apK9xC04twRPFuquKD29tgAAAO4"]
[Sat Aug 29 05:08:52.158295 2026] [security2:error] [pid 1034096:tid 1034253] [client 45.148.10.60:5818] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.body.requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1600"] [id "900941"] [msg "Invalid nested WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.body.requests.requests.path=///"] [hostname "villagebooksandbears.com"] [uri "/wordpress/"] [unique_id "apK9xC04twRPFuquKD29swAAAIc"]
[Sat Aug 29 05:08:52.159930 2026] [core:error] [pid 1041789:tid 1042047] [client 20.100.175.163:28229] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:52.159947 2026] [core:error] [pid 1041789:tid 1042047] [client 20.100.175.163:28229] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:52.161803 2026] [security2:error] [pid 1041789:tid 1042020] [client 68.155.159.216:16135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK9xIv3RhPI65jTFG7WzgAAA3c"]
[Sat Aug 29 05:08:52.168477 2026] [security2:error] [pid 1034096:tid 1034361] [client 20.48.250.41:58566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/click.php"] [unique_id "apK9xC04twRPFuquKD29twAAAPM"]
[Sat Aug 29 05:08:52.175852 2026] [security2:error] [pid 1041789:tid 1042015] [client 20.240.128.207:21022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/system_log.php"] [unique_id "apK9xIv3RhPI65jTFG7W0QAAA3I"]
[Sat Aug 29 05:08:52.181691 2026] [security2:error] [pid 1034096:tid 1034368] [client 93.123.109.228:49200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/Api/.env"] [unique_id "apK9xC04twRPFuquKD29uQAAAPo"]
[Sat Aug 29 05:08:52.182033 2026] [security2:error] [pid 1034096:tid 1034286] [client 93.123.109.228:49240] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/APP/.env"] [unique_id "apK9xC04twRPFuquKD29ugAAAKg"]
[Sat Aug 29 05:08:52.189720 2026] [security2:error] [pid 1041789:tid 1041949] [client 93.123.109.228:49266] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/BACK/.env"] [unique_id "apK9xIv3RhPI65jTFG7W0wAAAzA"]
[Sat Aug 29 05:08:52.192446 2026] [security2:error] [pid 1034096:tid 1034372] [client 20.104.49.130:39079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/155.php"] [unique_id "apK9xC04twRPFuquKD29uwAAAP4"]
[Sat Aug 29 05:08:52.201570 2026] [security2:error] [pid 1034096:tid 1034269] [client 20.104.104.62:48060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/mh.php"] [unique_id "apK9xC04twRPFuquKD29vQAAAJc"]
[Sat Aug 29 05:08:52.212397 2026] [security2:error] [pid 1034096:tid 1034277] [client 40.83.93.50:20842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-conflg.php"] [unique_id "apK9xC04twRPFuquKD29vgAAAJ8"]
[Sat Aug 29 05:08:52.220834 2026] [security2:error] [pid 1034096:tid 1034265] [client 93.123.109.228:49262] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/BACKEND/.env"] [unique_id "apK9xC04twRPFuquKD29vwAAAJM"]
[Sat Aug 29 05:08:52.227341 2026] [security2:error] [pid 1034096:tid 1034283] [client 20.48.250.41:45321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/browse.php"] [unique_id "apK9xC04twRPFuquKD29wAAAAKU"]
[Sat Aug 29 05:08:52.236853 2026] [security2:error] [pid 1034096:tid 1034320] [client 158.23.147.79:50088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK9xC04twRPFuquKD29wQAAAMo"]
[Sat Aug 29 05:08:52.248996 2026] [security2:error] [pid 1041789:tid 1041983] [client 20.48.250.41:38893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/ms.php"] [unique_id "apK9xIv3RhPI65jTFG7W1QAAA1I"]
[Sat Aug 29 05:08:52.250012 2026] [security2:error] [pid 1034096:tid 1034293] [client 20.104.104.62:43129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/rce.php"] [unique_id "apK9xC04twRPFuquKD29wgAAAK8"]
[Sat Aug 29 05:08:52.252817 2026] [security2:error] [pid 1041789:tid 1041964] [client 93.123.109.228:49230] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/BE/.env"] [unique_id "apK9xIv3RhPI65jTFG7W1gAAAz8"]
[Sat Aug 29 05:08:52.256046 2026] [security2:error] [pid 1034096:tid 1034346] [client 20.48.250.41:33889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/bzjdlofz.php"] [unique_id "apK9xC04twRPFuquKD29wwAAAOQ"]
[Sat Aug 29 05:08:52.258202 2026] [security2:error] [pid 1041789:tid 1041970] [client 4.205.62.107:6944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/aws-credentials.php"] [unique_id "apK9xIv3RhPI65jTFG7W1wAAA0U"]
[Sat Aug 29 05:08:52.263852 2026] [security2:error] [pid 1041789:tid 1041975] [client 20.48.250.41:50025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/wp-style.php"] [unique_id "apK9xIv3RhPI65jTFG7W2AAAA0o"]
[Sat Aug 29 05:08:52.274184 2026] [security2:error] [pid 1034096:tid 1034291] [client 20.104.104.62:40065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/wp-wlx.php"] [unique_id "apK9xC04twRPFuquKD29xAAAAK0"]
[Sat Aug 29 05:08:52.275143 2026] [security2:error] [pid 1034096:tid 1034278] [client 4.232.148.111:20436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/images/index.php"] [unique_id "apK9xC04twRPFuquKD29xQAAAKA"]
[Sat Aug 29 05:08:52.276418 2026] [security2:error] [pid 1034096:tid 1034271] [client 20.48.250.41:49535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/zxekqlxb.php"] [unique_id "apK9xC04twRPFuquKD29xwAAAJk"]
[Sat Aug 29 05:08:52.276655 2026] [security2:error] [pid 1034096:tid 1034308] [client 20.104.104.62:20846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/constant.php"] [unique_id "apK9xC04twRPFuquKD29xgAAAL4"]
[Sat Aug 29 05:08:52.280782 2026] [security2:error] [pid 1034096:tid 1034296] [client 20.104.104.62:62913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/cafe.php"] [unique_id "apK9xC04twRPFuquKD29yAAAALI"]
[Sat Aug 29 05:08:52.282556 2026] [security2:error] [pid 1034096:tid 1034313] [client 20.48.250.41:19542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/wp-blogs.php"] [unique_id "apK9xC04twRPFuquKD29yQAAAMM"]
[Sat Aug 29 05:08:52.293758 2026] [security2:error] [pid 1034096:tid 1034287] [client 91.92.47.191:44210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.corrigansbasement.com"] [uri "/configuration.php"] [unique_id "apK9xC04twRPFuquKD29ygAAAKk"]
[Sat Aug 29 05:08:52.296126 2026] [security2:error] [pid 1034096:tid 1034300] [client 20.151.200.44:63813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/lufix1.php"] [unique_id "apK9xC04twRPFuquKD29ywAAALY"]
[Sat Aug 29 05:08:52.297199 2026] [security2:error] [pid 1041789:tid 1041945] [client 20.48.250.41:61766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/ms.php"] [unique_id "apK9xIv3RhPI65jTFG7W2QAAAyw"]
[Sat Aug 29 05:08:52.302899 2026] [security2:error] [pid 1034096:tid 1034349] [client 20.48.251.3:14063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/xda.php"] [unique_id "apK9xC04twRPFuquKD29zAAAAOc"]
[Sat Aug 29 05:08:52.303633 2026] [security2:error] [pid 1041789:tid 1041946] [client 20.104.49.130:65232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/static.php"] [unique_id "apK9xIv3RhPI65jTFG7W2gAAAy0"]
[Sat Aug 29 05:08:52.304791 2026] [security2:error] [pid 1034096:tid 1034355] [client 93.123.109.228:49254] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/Backend/.env"] [unique_id "apK9xC04twRPFuquKD29zQAAAO0"]
[Sat Aug 29 05:08:52.308184 2026] [security2:error] [pid 1041789:tid 1042009] [client 93.123.109.228:49184] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/Be/.env"] [unique_id "apK9xIv3RhPI65jTFG7W3AAAA2w"]
[Sat Aug 29 05:08:52.310045 2026] [security2:error] [pid 1041789:tid 1042005] [client 52.139.37.240:53096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehulbertfamily.com"] [uri "/zwso.php"] [unique_id "apK9xIv3RhPI65jTFG7W3QAAA2g"]
[Sat Aug 29 05:08:52.312433 2026] [security2:error] [pid 1041789:tid 1042027] [client 20.104.49.130:54786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/fs.php"] [unique_id "apK9xIv3RhPI65jTFG7W3gAAA34"]
[Sat Aug 29 05:08:52.323886 2026] [security2:error] [pid 1034096:tid 1034359] [client 20.48.250.41:19436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/class.php"] [unique_id "apK9xC04twRPFuquKD290QAAAPE"]
[Sat Aug 29 05:08:52.324963 2026] [security2:error] [pid 1041789:tid 1042024] [client 20.63.219.114:19842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/contentloader1.php"] [unique_id "apK9xIv3RhPI65jTFG7W4AAAA3s"]
[Sat Aug 29 05:08:52.325780 2026] [security2:error] [pid 1034096:tid 1034255] [client 4.205.62.107:62743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/guk.php"] [unique_id "apK9xC04twRPFuquKD290gAAAIk"]
[Sat Aug 29 05:08:52.335170 2026] [security2:error] [pid 1034096:tid 1034314] [client 4.205.62.107:26663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/nw.php"] [unique_id "apK9xC04twRPFuquKD291QAAAMQ"]
[Sat Aug 29 05:08:52.335240 2026] [security2:error] [pid 1041789:tid 1042007] [client 61.9.8.5:14228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 5.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK9xIv3RhPI65jTFG7W3wAAA2o"]
[Sat Aug 29 05:08:52.335347 2026] [security2:error] [pid 1041789:tid 1042007] [client 61.9.8.5:14228] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK9xIv3RhPI65jTFG7W3wAAA2o"]
[Sat Aug 29 05:08:52.336560 2026] [security2:error] [pid 1034096:tid 1034375] [client 20.104.104.62:37615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/f2r4.php"] [unique_id "apK9xC04twRPFuquKD291gAAAQE"]
[Sat Aug 29 05:08:52.361561 2026] [security2:error] [pid 1034096:tid 1034327] [client 158.158.54.35:31520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/bthil.php"] [unique_id "apK9xC04twRPFuquKD292AAAANE"]
[Sat Aug 29 05:08:52.363021 2026] [security2:error] [pid 1041789:tid 1042044] [client 20.48.250.41:46036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/zoo.php"] [unique_id "apK9xIv3RhPI65jTFG7W5QAAA48"]
[Sat Aug 29 05:08:52.371666 2026] [security2:error] [pid 1041789:tid 1041941] [client 158.23.147.79:6121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-admin/maint/index.php"] [unique_id "apK9xIv3RhPI65jTFG7W5wAAAyg"]
[Sat Aug 29 05:08:52.385275 2026] [security2:error] [pid 1034096:tid 1034373] [client 20.104.104.62:42822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/exec.php"] [unique_id "apK9xC04twRPFuquKD292gAAAP8"]
[Sat Aug 29 05:08:52.386312 2026] [security2:error] [pid 1041789:tid 1042052] [client 20.197.61.180:12796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/alumni_reg.php"] [unique_id "apK9xIv3RhPI65jTFG7W6AAAA5c"]
[Sat Aug 29 05:08:52.388039 2026] [security2:error] [pid 1034096:tid 1034275] [client 20.48.250.41:38874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/zxekqlxb.php"] [unique_id "apK9xC04twRPFuquKD293AAAAJ0"]
[Sat Aug 29 05:08:52.389683 2026] [security2:error] [pid 1034096:tid 1034304] [client 52.139.37.240:12923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/0x.php"] [unique_id "apK9xC04twRPFuquKD293QAAALo"]
[Sat Aug 29 05:08:52.406755 2026] [security2:error] [pid 1034096:tid 1034376] [client 20.48.250.41:50006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/browse.php"] [unique_id "apK9xC04twRPFuquKD293gAAAQI"]
[Sat Aug 29 05:08:52.422571 2026] [security2:error] [pid 1034096:tid 1034323] [client 20.104.104.62:37680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/attack.php"] [unique_id "apK9xC04twRPFuquKD293wAAAM0"]
[Sat Aug 29 05:08:52.437909 2026] [security2:error] [pid 1041789:tid 1042028] [client 20.48.251.3:14281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/pinfo.php"] [unique_id "apK9xIv3RhPI65jTFG7W6gAAA38"]
[Sat Aug 29 05:08:52.440650 2026] [security2:error] [pid 1034096:tid 1034378] [client 68.155.159.216:33666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-admin/admin.php"] [unique_id "apK9xC04twRPFuquKD294AAAAQQ"]
[Sat Aug 29 05:08:52.440807 2026] [security2:error] [pid 1034096:tid 1034317] [client 20.104.104.62:56537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/eval.php"] [unique_id "apK9xC04twRPFuquKD294QAAAMc"]
[Sat Aug 29 05:08:52.447059 2026] [security2:error] [pid 1034096:tid 1034322] [client 40.83.93.50:17239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/class-wp-cmd.php"] [unique_id "apK9xC04twRPFuquKD294gAAAMw"]
[Sat Aug 29 05:08:52.449396 2026] [security2:error] [pid 1034096:tid 1034260] [client 20.48.250.41:19585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/mini.php"] [unique_id "apK9xC04twRPFuquKD294wAAAI4"]
[Sat Aug 29 05:08:52.463863 2026] [security2:error] [pid 1041789:tid 1041931] [client 20.48.250.41:58564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/zxekqlxb.php"] [unique_id "apK9xIv3RhPI65jTFG7W6wAAAx4"]
[Sat Aug 29 05:08:52.472371 2026] [security2:error] [pid 1034096:tid 1034253] [client 20.104.104.62:48028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/sadis.php"] [unique_id "apK9xC04twRPFuquKD295QAAAIc"]
[Sat Aug 29 05:08:52.472813 2026] [security2:error] [pid 1034096:tid 1034361] [client 68.155.159.216:18319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK9xC04twRPFuquKD295gAAAPM"]
[Sat Aug 29 05:08:52.481862 2026] [security2:error] [pid 1034096:tid 1034377] [client 45.148.10.60:5818] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.body.requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1600"] [id "900941"] [msg "Invalid nested WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.body.requests.requests.path=///"] [hostname "villagebooksandbears.com"] [uri "/blog/"] [unique_id "apK9xC04twRPFuquKD295wAAAQM"]
[Sat Aug 29 05:08:52.482421 2026] [security2:error] [pid 1041789:tid 1041954] [client 20.104.49.130:57500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/wp-the.php"] [unique_id "apK9xIv3RhPI65jTFG7W7AAAAzU"]
[Sat Aug 29 05:08:52.492310 2026] [security2:error] [pid 1041789:tid 1041936] [client 20.48.250.41:34278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/selesai.php"] [unique_id "apK9xIv3RhPI65jTFG7W7QAAAyM"]
[Sat Aug 29 05:08:52.503421 2026] [security2:error] [pid 1041789:tid 1042041] [client 52.139.37.240:60587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehulbertfamily.com"] [uri "/admin/function.php"] [unique_id "apK9xIv3RhPI65jTFG7W7gAAA4w"]
[Sat Aug 29 05:08:52.517509 2026] [security2:error] [pid 1041789:tid 1041992] [client 20.104.104.62:43128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/dbc.php"] [unique_id "apK9xIv3RhPI65jTFG7W8AAAA1s"]
[Sat Aug 29 05:08:52.527119 2026] [security2:error] [pid 1034096:tid 1034277] [client 20.48.250.41:49404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/8.php"] [unique_id "apK9xC04twRPFuquKD296wAAAJ8"]
[Sat Aug 29 05:08:52.530233 2026] [security2:error] [pid 1034096:tid 1034367] [client 74.248.24.12:19508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/new.php"] [unique_id "apK9xC04twRPFuquKD297AAAAPk"]
[Sat Aug 29 05:08:52.535125 2026] [security2:error] [pid 1034096:tid 1034298] [client 20.48.250.41:45345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/elp.php"] [unique_id "apK9xC04twRPFuquKD297QAAALQ"]
[Sat Aug 29 05:08:52.547870 2026] [security2:error] [pid 1041789:tid 1041971] [client 20.48.250.41:38824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/init.php"] [unique_id "apK9xIv3RhPI65jTFG7W9AAAA0Y"]
[Sat Aug 29 05:08:52.548984 2026] [security2:error] [pid 1041789:tid 1041935] [client 20.104.49.130:58206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/wp-good.php"] [unique_id "apK9xIv3RhPI65jTFG7W9QAAAyI"]
[Sat Aug 29 05:08:52.552232 2026] [security2:error] [pid 1041789:tid 1041968] [client 20.48.250.41:50032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/zoo.php"] [unique_id "apK9xIv3RhPI65jTFG7W9gAAA0M"]
[Sat Aug 29 05:08:52.562907 2026] [security2:error] [pid 1041789:tid 1041987] [client 20.196.209.81:1330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/colors.php"] [unique_id "apK9xIv3RhPI65jTFG7W-AAAA1Y"]
[Sat Aug 29 05:08:52.568318 2026] [security2:error] [pid 1041789:tid 1041942] [client 20.48.251.3:14043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/X57.php"] [unique_id "apK9xIv3RhPI65jTFG7W-QAAAyk"]
[Sat Aug 29 05:08:52.574440 2026] [security2:error] [pid 1041789:tid 1041989] [client 158.23.147.79:61630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/worksec.php"] [unique_id "apK9xIv3RhPI65jTFG7W-gAAA1g"]
[Sat Aug 29 05:08:52.583508 2026] [security2:error] [pid 1034096:tid 1034282] [client 40.83.93.50:4060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/room.php"] [unique_id "apK9xC04twRPFuquKD298wAAAKQ"]
[Sat Aug 29 05:08:52.584988 2026] [security2:error] [pid 1041789:tid 1041938] [client 52.139.37.240:12461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/CDX1.php"] [unique_id "apK9xIv3RhPI65jTFG7W-wAAAyU"]
[Sat Aug 29 05:08:52.588216 2026] [security2:error] [pid 1041789:tid 1042025] [client 20.104.104.62:40099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/file66.php"] [unique_id "apK9xIv3RhPI65jTFG7W_AAAA3w"]
[Sat Aug 29 05:08:52.588938 2026] [security2:error] [pid 1034096:tid 1034303] [client 20.104.104.62:2470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/sao.php"] [unique_id "apK9xC04twRPFuquKD299AAAALk"]
[Sat Aug 29 05:08:52.590694 2026] [security2:error] [pid 1034096:tid 1034346] [client 4.205.62.107:55998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/environment.php"] [unique_id "apK9xC04twRPFuquKD299QAAAOQ"]
[Sat Aug 29 05:08:52.595920 2026] [security2:error] [pid 1034096:tid 1034365] [client 20.48.250.41:61797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/init.php"] [unique_id "apK9xC04twRPFuquKD299gAAAPc"]
[Sat Aug 29 05:08:52.602608 2026] [security2:error] [pid 1034096:tid 1034308] [client 20.104.104.62:48024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/xcre1.php"] [unique_id "apK9xC04twRPFuquKD299wAAAL4"]
[Sat Aug 29 05:08:52.609407 2026] [security2:error] [pid 1034096:tid 1034318] [client 20.48.250.41:19561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/amp.php"] [unique_id "apK9xC04twRPFuquKD29-gAAAMg"]
[Sat Aug 29 05:08:52.614698 2026] [security2:error] [pid 1034096:tid 1034332] [client 93.123.109.228:49314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK9xC04twRPFuquKD29-wAAANY"]
[Sat Aug 29 05:08:52.634019 2026] [security2:error] [pid 1041789:tid 1041967] [client 68.155.159.216:64476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/dropdown.php"] [unique_id "apK9xIv3RhPI65jTFG7W_wAAA0I"]
[Sat Aug 29 05:08:52.646588 2026] [security2:error] [pid 1034096:tid 1034335] [client 20.100.175.163:28239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-content/file.php"] [unique_id "apK9xC04twRPFuquKD2-AAAAANk"]
[Sat Aug 29 05:08:52.657040 2026] [security2:error] [pid 1041789:tid 1041988] [client 20.104.104.62:43085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/wp-wlx.php"] [unique_id "apK9xIv3RhPI65jTFG7XAQAAA1c"]
[Sat Aug 29 05:08:52.672418 2026] [security2:error] [pid 1034096:tid 1034353] [client 20.240.128.207:27537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/24.php"] [unique_id "apK9xC04twRPFuquKD2-AgAAAOs"]
[Sat Aug 29 05:08:52.673890 2026] [security2:error] [pid 1034096:tid 1034301] [client 20.197.61.180:1048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/xmlrpc.php0"] [unique_id "apK9xC04twRPFuquKD2-AwAAALc"]
[Sat Aug 29 05:08:52.676474 2026] [security2:error] [pid 1041789:tid 1042029] [client 20.48.250.41:38737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/term.php"] [unique_id "apK9xIv3RhPI65jTFG7XAwAAA4A"]
[Sat Aug 29 05:08:52.688795 2026] [security2:error] [pid 1041789:tid 1041950] [client 40.83.93.50:16657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-content.php"] [unique_id "apK9xIv3RhPI65jTFG7XBAAAAzE"]
[Sat Aug 29 05:08:52.690671 2026] [security2:error] [pid 1041789:tid 1042006] [client 20.48.250.41:45368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/666.php"] [unique_id "apK9xIv3RhPI65jTFG7XBQAAA2k"]
[Sat Aug 29 05:08:52.697264 2026] [security2:error] [pid 1041789:tid 1041969] [client 52.139.37.240:61800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehulbertfamily.com"] [uri "/zoom1.php"] [unique_id "apK9xIv3RhPI65jTFG7XBwAAA0Q"]
[Sat Aug 29 05:08:52.708894 2026] [security2:error] [pid 1041789:tid 1042051] [client 20.48.250.41:50043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/elp.php"] [unique_id "apK9xIv3RhPI65jTFG7XCQAAA5Y"]
[Sat Aug 29 05:08:52.710268 2026] [security2:error] [pid 1041789:tid 1042043] [client 4.205.62.107:21892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/config/laravolt/css/index.php"] [unique_id "apK9xIv3RhPI65jTFG7XCgAAA44"]
[Sat Aug 29 05:08:52.715574 2026] [security2:error] [pid 1041789:tid 1041973] [client 20.48.250.41:34262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/shlo.php"] [unique_id "apK9xIv3RhPI65jTFG7XCwAAA0g"]
[Sat Aug 29 05:08:52.720401 2026] [security2:error] [pid 1041789:tid 1041962] [client 68.155.159.216:1991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK9xIv3RhPI65jTFG7XDAAAAz0"]
[Sat Aug 29 05:08:52.725102 2026] [security2:error] [pid 1034096:tid 1034319] [client 20.48.250.41:61804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/term.php"] [unique_id "apK9xC04twRPFuquKD2-CQAAAMk"]
[Sat Aug 29 05:08:52.727687 2026] [security2:error] [pid 1041789:tid 1042018] [client 158.23.147.79:17497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK9xIv3RhPI65jTFG7XDQAAA3U"]
[Sat Aug 29 05:08:52.727874 2026] [security2:error] [pid 1034096:tid 1034327] [client 20.104.104.62:64707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/celeng.php"] [unique_id "apK9xC04twRPFuquKD2-CgAAANE"]
[Sat Aug 29 05:08:52.733059 2026] [security2:error] [pid 1041789:tid 1041998] [client 20.104.104.62:37661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/zafir1.php"] [unique_id "apK9xIv3RhPI65jTFG7XDwAAA2E"]
[Sat Aug 29 05:08:52.734792 2026] [security2:error] [pid 1041789:tid 1042011] [client 20.48.251.3:14030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/register.php"] [unique_id "apK9xIv3RhPI65jTFG7XCAAAA24"]
[Sat Aug 29 05:08:52.740232 2026] [security2:error] [pid 1041789:tid 1042047] [client 20.104.104.62:48035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/motu.php"] [unique_id "apK9xIv3RhPI65jTFG7XEAAAA5I"]
[Sat Aug 29 05:08:52.743293 2026] [security2:error] [pid 1041789:tid 1042054] [client 20.48.250.41:65223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/init.php"] [unique_id "apK9xIv3RhPI65jTFG7XEQAAA5k"]
[Sat Aug 29 05:08:52.743401 2026] [security2:error] [pid 1034096:tid 1034342] [client 20.197.61.180:1995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/Js.php"] [unique_id "apK9xC04twRPFuquKD2-CwAAAOA"]
[Sat Aug 29 05:08:52.758264 2026] [security2:error] [pid 1034096:tid 1034291] [client 20.63.219.114:19869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/al.php"] [unique_id "apK9xC04twRPFuquKD2-EQAAAK0"]
[Sat Aug 29 05:08:52.759558 2026] [security2:error] [pid 1034096:tid 1034347] [client 93.123.109.228:49320] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/admin-app/.env"] [unique_id "apK9xC04twRPFuquKD2-EgAAAOU"]
[Sat Aug 29 05:08:52.763351 2026] [security2:error] [pid 1041789:tid 1041949] [client 20.48.250.41:19594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/cc13.php"] [unique_id "apK9xIv3RhPI65jTFG7XEgAAAzA"]
[Sat Aug 29 05:08:52.765703 2026] [security2:error] [pid 1034096:tid 1034373] [client 68.155.159.216:52846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-admin/images/index.php"] [unique_id "apK9xC04twRPFuquKD2-EwAAAP8"]
[Sat Aug 29 05:08:52.781583 2026] [security2:error] [pid 1041789:tid 1041940] [client 52.139.37.240:12420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/akcc.php"] [unique_id "apK9xIv3RhPI65jTFG7XFAAAAyc"]
[Sat Aug 29 05:08:52.789301 2026] [security2:error] [pid 1041789:tid 1042030] [client 20.48.250.41:49358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/0x0x.php"] [unique_id "apK9xIv3RhPI65jTFG7XFQAAA4E"]
[Sat Aug 29 05:08:52.790089 2026] [security2:error] [pid 1034096:tid 1034259] [client 20.104.104.62:41923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/attack.php"] [unique_id "apK9xC04twRPFuquKD2-FQAAAI0"]
[Sat Aug 29 05:08:52.790291 2026] [security2:error] [pid 1034096:tid 1034304] [client 20.104.104.62:62937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/uuu.php"] [unique_id "apK9xC04twRPFuquKD2-FgAAALo"]
[Sat Aug 29 05:08:52.826220 2026] [security2:error] [pid 1034096:tid 1034323] [client 20.48.250.41:38805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/aaa.php"] [unique_id "apK9xC04twRPFuquKD2-FwAAAM0"]
[Sat Aug 29 05:08:52.829418 2026] [security2:error] [pid 1034096:tid 1034374] [client 20.48.250.41:46041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/knmt.php"] [unique_id "apK9xC04twRPFuquKD2-GAAAAQA"]
[Sat Aug 29 05:08:52.840823 2026] [security2:error] [pid 1034096:tid 1034317] [client 20.151.200.44:63904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/hack.php"] [unique_id "apK9xC04twRPFuquKD2-GQAAAMc"]
[Sat Aug 29 05:08:52.876468 2026] [security2:error] [pid 1041789:tid 1041946] [client 20.104.104.62:40074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/console.php"] [unique_id "apK9xIv3RhPI65jTFG7XFwAAAy0"]
[Sat Aug 29 05:08:52.876468 2026] [security2:error] [pid 1034096:tid 1034351] [client 20.48.250.41:61820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/aaa.php"] [unique_id "apK9xC04twRPFuquKD2-GwAAAOk"]
[Sat Aug 29 05:08:52.879121 2026] [security2:error] [pid 1034096:tid 1034377] [client 20.48.251.3:13841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/xqq.php"] [unique_id "apK9xC04twRPFuquKD2-HAAAAQM"]
[Sat Aug 29 05:08:52.879699 2026] [security2:error] [pid 1034096:tid 1034324] [client 20.48.250.41:49950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/666.php"] [unique_id "apK9xC04twRPFuquKD2-HQAAAM4"]
[Sat Aug 29 05:08:52.887796 2026] [security2:error] [pid 1034096:tid 1034376] [client 52.139.37.240:60595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehulbertfamily.com"] [uri "/about.php7"] [unique_id "apK9xC04twRPFuquKD2-HgAAAQI"]
[Sat Aug 29 05:08:52.917267 2026] [security2:error] [pid 1041789:tid 1042024] [client 20.104.104.62:37506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/wefile.php"] [unique_id "apK9xIv3RhPI65jTFG7XGQAAA3s"]
[Sat Aug 29 05:08:52.920425 2026] [security2:error] [pid 1034096:tid 1034269] [client 4.232.148.111:18863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/inputs.php"] [unique_id "apK9xC04twRPFuquKD2-HwAAAJc"]
[Sat Aug 29 05:08:52.921983 2026] [security2:error] [pid 1034096:tid 1034277] [client 93.123.109.228:49320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/admin/phpinfo.php"] [unique_id "apK9xC04twRPFuquKD2-IAAAAJ8"]
[Sat Aug 29 05:08:52.922549 2026] [security2:error] [pid 1041789:tid 1041937] [client 20.104.104.62:42832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/file66.php"] [unique_id "apK9xIv3RhPI65jTFG7XGgAAAyQ"]
[Sat Aug 29 05:08:52.932835 2026] [security2:error] [pid 1041789:tid 1042026] [client 40.83.93.50:48043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/disagreed.php"] [unique_id "apK9xIv3RhPI65jTFG7XGwAAA30"]
[Sat Aug 29 05:08:52.934177 2026] [security2:error] [pid 1041789:tid 1042038] [client 20.104.104.62:65233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/private.php"] [unique_id "apK9xIv3RhPI65jTFG7XHAAAA4k"]
[Sat Aug 29 05:08:52.938099 2026] [security2:error] [pid 1041789:tid 1041960] [client 20.48.250.41:33901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/asax.php"] [unique_id "apK9xIv3RhPI65jTFG7XHQAAAzs"]
[Sat Aug 29 05:08:52.939525 2026] [security2:error] [pid 1041789:tid 1042036] [client 20.48.250.41:19551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/aa.php"] [unique_id "apK9xIv3RhPI65jTFG7XHgAAA4c"]
[Sat Aug 29 05:08:52.946813 2026] [security2:error] [pid 1041789:tid 1042044] [client 20.48.250.41:62099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/term.php"] [unique_id "apK9xIv3RhPI65jTFG7XHwAAA48"]
[Sat Aug 29 05:08:52.959012 2026] [security2:error] [pid 1041789:tid 1042050] [client 20.48.250.41:49378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/166.php"] [unique_id "apK9xIv3RhPI65jTFG7XIAAAA5U"]
[Sat Aug 29 05:08:52.965068 2026] [security2:error] [pid 1034096:tid 1034371] [client 20.196.209.81:1285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/Js.php"] [unique_id "apK9xC04twRPFuquKD2-JAAAAP0"]
[Sat Aug 29 05:08:52.971304 2026] [security2:error] [pid 1041789:tid 1041978] [client 93.123.109.228:49230] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/administrator/.env"] [unique_id "apK9xIv3RhPI65jTFG7XIQAAA00"]
[Sat Aug 29 05:08:52.982454 2026] [security2:error] [pid 1041789:tid 1042007] [client 52.139.37.240:12290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK9xIv3RhPI65jTFG7XIgAAA2o"]
[Sat Aug 29 05:08:52.996503 2026] [security2:error] [pid 1041789:tid 1041943] [client 158.158.54.35:1813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/cv.php"] [unique_id "apK9xIv3RhPI65jTFG7XIwAAAyo"]
[Sat Aug 29 05:08:53.012441 2026] [security2:error] [pid 1034096:tid 1034313] [client 158.23.147.79:17592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9xS04twRPFuquKD2-JgAAAMM"]
[Sat Aug 29 05:08:53.021169 2026] [security2:error] [pid 1034096:tid 1034297] [client 20.104.104.62:40089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/blnux.php"] [unique_id "apK9xS04twRPFuquKD2-KAAAALM"]
[Sat Aug 29 05:08:53.021717 2026] [security2:error] [pid 1041789:tid 1042010] [client 20.48.251.3:14031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/a1vx.php"] [unique_id "apK9xYv3RhPI65jTFG7XJQAAA20"]
[Sat Aug 29 05:08:53.024508 2026] [security2:error] [pid 1034096:tid 1034300] [client 93.123.109.228:49302] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/api-backend/.env"] [unique_id "apK9xS04twRPFuquKD2-KQAAALY"]
[Sat Aug 29 05:08:53.035610 2026] [security2:error] [pid 1034096:tid 1034335] [client 68.155.159.216:1940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK9xS04twRPFuquKD2-KgAAANk"]
[Sat Aug 29 05:08:53.049474 2026] [security2:error] [pid 1034096:tid 1034361] [client 74.248.24.12:29775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/menu.php"] [unique_id "apK9xS04twRPFuquKD2-LAAAAPM"]
[Sat Aug 29 05:08:53.051427 2026] [security2:error] [pid 1041789:tid 1041954] [client 68.155.159.216:30662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/classwithtostring.php"] [unique_id "apK9xYv3RhPI65jTFG7XKAAAAzU"]
[Sat Aug 29 05:08:53.059690 2026] [security2:error] [pid 1034096:tid 1034359] [client 20.104.104.62:60679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/zafir1.php"] [unique_id "apK9xS04twRPFuquKD2-LgAAAPE"]
[Sat Aug 29 05:08:53.064569 2026] [security2:error] [pid 1034096:tid 1034255] [client 20.104.104.62:37518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/EM.php"] [unique_id "apK9xS04twRPFuquKD2-MAAAAIk"]
[Sat Aug 29 05:08:53.075025 2026] [security2:error] [pid 1041789:tid 1042012] [client 40.83.93.50:19542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/class-wp-cmd.php"] [unique_id "apK9xYv3RhPI65jTFG7XKQAAA28"]
[Sat Aug 29 05:08:53.081602 2026] [security2:error] [pid 1034096:tid 1034355] [client 20.104.104.62:62939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/lfi.php"] [unique_id "apK9xS04twRPFuquKD2-MQAAAO0"]
[Sat Aug 29 05:08:53.082146 2026] [security2:error] [pid 1034096:tid 1034318] [client 52.139.37.240:61801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehulbertfamily.com"] [uri "/cron.php"] [unique_id "apK9xS04twRPFuquKD2-MgAAAMg"]
[Sat Aug 29 05:08:53.093876 2026] [security2:error] [pid 1034096:tid 1034319] [client 93.123.109.228:49286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/admin_phpinfo.php"] [unique_id "apK9xS04twRPFuquKD2-MwAAAMk"]
[Sat Aug 29 05:08:53.120981 2026] [security2:error] [pid 1041789:tid 1041992] [client 4.205.62.107:9011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/sale.php"] [unique_id "apK9xYv3RhPI65jTFG7XLAAAA1s"]
[Sat Aug 29 05:08:53.136160 2026] [security2:error] [pid 1034096:tid 1034303] [client 20.100.175.163:1229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/files.php"] [unique_id "apK9xS04twRPFuquKD2-NwAAALk"]
[Sat Aug 29 05:08:53.137470 2026] [security2:error] [pid 1041789:tid 1042053] [client 20.104.104.62:20628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/bypassing.php"] [unique_id "apK9xYv3RhPI65jTFG7XLgAAA5g"]
[Sat Aug 29 05:08:53.139118 2026] [security2:error] [pid 1034096:tid 1034259] [client 20.151.200.44:64544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/155.php"] [unique_id "apK9xS04twRPFuquKD2-OAAAAI0"]
[Sat Aug 29 05:08:53.139319 2026] [security2:error] [pid 1041789:tid 1042040] [client 93.123.109.228:49266] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/api-node/.env"] [unique_id "apK9xYv3RhPI65jTFG7XLwAAA4s"]
[Sat Aug 29 05:08:53.152980 2026] [security2:error] [pid 1034096:tid 1034292] [client 20.48.251.3:33327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/public/vx.php"] [unique_id "apK9xS04twRPFuquKD2-OQAAAK4"]
[Sat Aug 29 05:08:53.173457 2026] [security2:error] [pid 1034096:tid 1034328] [client 20.104.104.62:64303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/pentest.php"] [unique_id "apK9xS04twRPFuquKD2-PAAAANI"]
[Sat Aug 29 05:08:53.186673 2026] [security2:error] [pid 1034096:tid 1034320] [client 52.139.37.240:12297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/s.php"] [unique_id "apK9xS04twRPFuquKD2-PQAAAMo"]
[Sat Aug 29 05:08:53.197043 2026] [security2:error] [pid 1034096:tid 1034268] [client 20.63.219.114:2455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/global.php"] [unique_id "apK9xS04twRPFuquKD2-PgAAAJY"]
[Sat Aug 29 05:08:53.203625 2026] [security2:error] [pid 1034096:tid 1034323] [client 20.104.104.62:41923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/console.php"] [unique_id "apK9xS04twRPFuquKD2-PwAAAM0"]
[Sat Aug 29 05:08:53.214326 2026] [security2:error] [pid 1034096:tid 1034374] [client 68.155.159.216:24547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK9xS04twRPFuquKD2-QAAAAQA"]
[Sat Aug 29 05:08:53.220981 2026] [security2:error] [pid 1034096:tid 1034294] [client 93.123.109.228:49202] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/api/.env"] [unique_id "apK9xS04twRPFuquKD2-QQAAALA"]
[Sat Aug 29 05:08:53.222584 2026] [security2:error] [pid 1041789:tid 1041986] [client 103.162.125.59:61136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.125.162.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK9xYv3RhPI65jTFG7XMAAAA1U"]
[Sat Aug 29 05:08:53.222701 2026] [security2:error] [pid 1041789:tid 1041986] [client 103.162.125.59:61136] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK9xYv3RhPI65jTFG7XMAAAA1U"]
[Sat Aug 29 05:08:53.228338 2026] [security2:error] [pid 1041789:tid 1041942] [client 20.104.104.62:48007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/ca4.php"] [unique_id "apK9xYv3RhPI65jTFG7XNAAAAyk"]
[Sat Aug 29 05:08:53.235683 2026] [security2:error] [pid 1041789:tid 1041989] [client 20.104.104.62:62992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/quoys.php"] [unique_id "apK9xYv3RhPI65jTFG7XNQAAA1g"]
[Sat Aug 29 05:08:53.238342 2026] [security2:error] [pid 1034096:tid 1034365] [client 20.197.61.180:12774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/colors.php"] [unique_id "apK9xS04twRPFuquKD2-QwAAAPc"]
[Sat Aug 29 05:08:53.244973 2026] [security2:error] [pid 1034096:tid 1034339] [client 158.23.147.79:11354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/goat.php"] [unique_id "apK9xS04twRPFuquKD2-RAAAAN0"]
[Sat Aug 29 05:08:53.278042 2026] [security2:error] [pid 1041789:tid 1042016] [client 52.139.37.240:63714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehulbertfamily.com"] [uri "/wp-2019.php"] [unique_id "apK9xYv3RhPI65jTFG7XNwAAA3M"]
[Sat Aug 29 05:08:53.284820 2026] [security2:error] [pid 1034096:tid 1034368] [client 20.48.251.3:13967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/log.php"] [unique_id "apK9xS04twRPFuquKD2-SAAAAPo"]
[Sat Aug 29 05:08:53.286020 2026] [security2:error] [pid 1034096:tid 1034286] [client 68.155.159.216:16272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK9xS04twRPFuquKD2-SQAAAKg"]
[Sat Aug 29 05:08:53.292880 2026] [security2:error] [pid 1034096:tid 1034311] [client 4.205.62.107:51395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/v1.php"] [unique_id "apK9xS04twRPFuquKD2-VAAAAME"]
[Sat Aug 29 05:08:53.316710 2026] [security2:error] [pid 1034096:tid 1034283] [client 40.83.93.50:16640] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-content/1.php"] [unique_id "apK9xS04twRPFuquKD2-VgAAAKU"]
[Sat Aug 29 05:08:53.316833 2026] [security2:error] [pid 1034096:tid 1034283] [client 40.83.93.50:16640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-content/1.php"] [unique_id "apK9xS04twRPFuquKD2-VgAAAKU"]
[Sat Aug 29 05:08:53.333799 2026] [security2:error] [pid 1034096:tid 1034363] [client 20.104.104.62:64297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/6y7t.php"] [unique_id "apK9xS04twRPFuquKD2-WAAAAPU"]
[Sat Aug 29 05:08:53.340539 2026] [security2:error] [pid 1034096:tid 1034367] [client 20.240.128.207:21029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK9xS04twRPFuquKD2-WwAAAPk"]
[Sat Aug 29 05:08:53.345242 2026] [security2:error] [pid 1034096:tid 1034325] [client 158.23.147.79:49834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK9xS04twRPFuquKD2-XAAAAM8"]
[Sat Aug 29 05:08:53.345243 2026] [security2:error] [pid 1041789:tid 1041991] [client 20.104.104.62:43388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/blnux.php"] [unique_id "apK9xYv3RhPI65jTFG7XOQAAA1o"]
[Sat Aug 29 05:08:53.365422 2026] [security2:error] [pid 1041789:tid 1042046] [client 20.104.104.62:37505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/x0x.php"] [unique_id "apK9xYv3RhPI65jTFG7XOwAAA5E"]
[Sat Aug 29 05:08:53.390823 2026] [security2:error] [pid 1041789:tid 1041952] [client 20.196.209.81:1840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/access.php"] [unique_id "apK9xYv3RhPI65jTFG7XPQAAAzM"]
[Sat Aug 29 05:08:53.392094 2026] [security2:error] [pid 1034096:tid 1034262] [client 20.104.104.62:53856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/vbbn.php"] [unique_id "apK9xS04twRPFuquKD2-XgAAAJA"]
[Sat Aug 29 05:08:53.393692 2026] [security2:error] [pid 1041789:tid 1042001] [client 93.123.109.228:49266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/api/info.php"] [unique_id "apK9xYv3RhPI65jTFG7XPgAAA2Q"]
[Sat Aug 29 05:08:53.394064 2026] [security2:error] [pid 1034096:tid 1034344] [client 20.197.61.180:1056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/content.php"] [unique_id "apK9xS04twRPFuquKD2-YAAAAOI"]
[Sat Aug 29 05:08:53.400203 2026] [security2:error] [pid 1034096:tid 1034372] [client 4.205.62.107:6957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/4563.php"] [unique_id "apK9xS04twRPFuquKD2-YQAAAP4"]
[Sat Aug 29 05:08:53.404429 2026] [security2:error] [pid 1041789:tid 1042035] [client 20.151.200.44:63828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/mcd.php"] [unique_id "apK9xYv3RhPI65jTFG7XPwAAA4Y"]
[Sat Aug 29 05:08:53.405098 2026] [security2:error] [pid 1034096:tid 1034267] [client 4.232.148.111:7546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/alfa.php"] [unique_id "apK9xS04twRPFuquKD2-YgAAAJU"]
[Sat Aug 29 05:08:53.407079 2026] [security2:error] [pid 1034096:tid 1034342] [client 146.70.36.124:51250] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "narrowgate-electrical.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "apK9xS04twRPFuquKD2-YwAAAOA"]
[Sat Aug 29 05:08:53.407570 2026] [security2:error] [pid 1034096:tid 1034282] [client 52.139.37.240:12510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/sagax.php"] [unique_id "apK9xS04twRPFuquKD2-ZAAAAKQ"]
[Sat Aug 29 05:08:53.412589 2026] [security2:error] [pid 1034096:tid 1034351] [client 40.83.93.50:17228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/class_api.php"] [unique_id "apK9xS04twRPFuquKD2-ZQAAAOk"]
[Sat Aug 29 05:08:53.413806 2026] [security2:error] [pid 1041789:tid 1042031] [client 68.155.159.216:23498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/.well-known/index.php"] [unique_id "apK9xYv3RhPI65jTFG7XQAAAA4I"]
[Sat Aug 29 05:08:53.440037 2026] [security2:error] [pid 1034096:tid 1034310] [client 158.158.54.35:1696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-content/packed.php"] [unique_id "apK9xS04twRPFuquKD2-awAAAMA"]
[Sat Aug 29 05:08:53.440626 2026] [security2:error] [pid 1034096:tid 1034335] [client 20.48.251.3:33299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/ebahvhhh.php"] [unique_id "apK9xS04twRPFuquKD2-bAAAANk"]
[Sat Aug 29 05:08:53.461456 2026] [security2:error] [pid 1041789:tid 1041955] [client 20.197.61.180:2043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/access.php"] [unique_id "apK9xYv3RhPI65jTFG7XQgAAAzY"]
[Sat Aug 29 05:08:53.464068 2026] [security2:error] [pid 1034096:tid 1034255] [client 4.205.62.107:62942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/config_dev.php"] [unique_id "apK9xS04twRPFuquKD2-bQAAAIk"]
[Sat Aug 29 05:08:53.471413 2026] [security2:error] [pid 1041789:tid 1042029] [client 158.23.147.79:6069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/dropdown.php"] [unique_id "apK9xYv3RhPI65jTFG7XQwAAA4A"]
[Sat Aug 29 05:08:53.474424 2026] [security2:error] [pid 1041789:tid 1042049] [client 20.104.104.62:42840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/pentest.php"] [unique_id "apK9xYv3RhPI65jTFG7XRAAAA5Q"]
[Sat Aug 29 05:08:53.479738 2026] [security2:error] [pid 1041789:tid 1042055] [client 52.139.37.240:60560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehulbertfamily.com"] [uri "/gecko-new.php"] [unique_id "apK9xYv3RhPI65jTFG7XRQAAA5o"]
[Sat Aug 29 05:08:53.483294 2026] [security2:error] [pid 1034096:tid 1034375] [client 4.205.62.107:26686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/product.php"] [unique_id "apK9xS04twRPFuquKD2-cQAAAQE"]
[Sat Aug 29 05:08:53.492556 2026] [security2:error] [pid 1034096:tid 1034327] [client 20.104.104.62:40079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/0xs.php"] [unique_id "apK9xS04twRPFuquKD2-cgAAANE"]
[Sat Aug 29 05:08:53.511468 2026] [security2:error] [pid 1034096:tid 1034251] [client 20.104.104.62:37533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/fesa.php"] [unique_id "apK9xS04twRPFuquKD2-cwAAAIU"]
[Sat Aug 29 05:08:53.520293 2026] [security2:error] [pid 1034096:tid 1034303] [client 20.104.104.62:40236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/bypshell.php"] [unique_id "apK9xS04twRPFuquKD2-dAAAALk"]
[Sat Aug 29 05:08:53.536381 2026] [security2:error] [pid 1034096:tid 1034285] [client 68.155.159.216:49271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK9xS04twRPFuquKD2-dQAAAKc"]
[Sat Aug 29 05:08:53.550392 2026] [security2:error] [pid 1034096:tid 1034268] [client 20.104.104.62:63028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/rfi.php"] [unique_id "apK9xS04twRPFuquKD2-eAAAAJY"]
[Sat Aug 29 05:08:53.558040 2026] [security2:error] [pid 1041789:tid 1041967] [client 40.83.93.50:4071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/disagreed.php"] [unique_id "apK9xYv3RhPI65jTFG7XRwAAA0I"]
[Sat Aug 29 05:08:53.569308 2026] [security2:error] [pid 1034096:tid 1034332] [client 74.248.24.12:37884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK9xS04twRPFuquKD2-eQAAANY"]
[Sat Aug 29 05:08:53.573994 2026] [security2:error] [pid 1034096:tid 1034260] [client 20.104.49.130:60756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/crgio.php"] [unique_id "apK9xS04twRPFuquKD2-egAAAI4"]
[Sat Aug 29 05:08:53.575694 2026] [security2:error] [pid 1034096:tid 1034361] [client 20.63.219.114:10156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/update.php"] [unique_id "apK9xS04twRPFuquKD2-ewAAAPM"]
[Sat Aug 29 05:08:53.579820 2026] [security2:error] [pid 1041789:tid 1041966] [client 68.155.159.216:33631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK9xYv3RhPI65jTFG7XSAAAA0E"]
[Sat Aug 29 05:08:53.610421 2026] [security2:error] [pid 1034096:tid 1034253] [client 20.104.104.62:42823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/6y7t.php"] [unique_id "apK9xS04twRPFuquKD2-fAAAAIc"]
[Sat Aug 29 05:08:53.614675 2026] [security2:error] [pid 1034096:tid 1034349] [client 20.100.175.163:25989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/o.php"] [unique_id "apK9xS04twRPFuquKD2-fQAAAOc"]
[Sat Aug 29 05:08:53.626898 2026] [security2:error] [pid 1041789:tid 1041983] [client 20.104.49.130:57712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/new.php"] [unique_id "apK9xYv3RhPI65jTFG7XSQAAA1I"]
[Sat Aug 29 05:08:53.655341 2026] [security2:error] [pid 1034096:tid 1034276] [client 20.104.104.62:40127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/waf.php"] [unique_id "apK9xS04twRPFuquKD2-hgAAAJ4"]
[Sat Aug 29 05:08:53.669610 2026] [security2:error] [pid 1034096:tid 1034175] [remote 93.123.109.228:42974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/test.php"] [unique_id "apK9xS04twRPFuquKD2-jgAAlzU"]
[Sat Aug 29 05:08:53.675068 2026] [security2:error] [pid 1034096:tid 1034377] [client 52.139.37.240:60586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehulbertfamily.com"] [uri "/add_actualites.php"] [unique_id "apK9xS04twRPFuquKD2-kQAAAQM"]
[Sat Aug 29 05:08:53.679544 2026] [security2:error] [pid 1034096:tid 1034298] [client 158.23.147.79:65499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/x.php"] [unique_id "apK9xS04twRPFuquKD2-kgAAALQ"]
[Sat Aug 29 05:08:53.682597 2026] [security2:error] [pid 1034096:tid 1034367] [client 52.139.37.240:12455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/wp-content/plugins/ftde.php"] [unique_id "apK9xS04twRPFuquKD2-kwAAAPk"]
[Sat Aug 29 05:08:53.715385 2026] [security2:error] [pid 1034096:tid 1034371] [client 20.104.104.62:65268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/tajj.php"] [unique_id "apK9xS04twRPFuquKD2-lwAAAP0"]
[Sat Aug 29 05:08:53.731878 2026] [security2:error] [pid 1041789:tid 1041946] [client 4.205.62.107:53154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/aws_secret_config.php"] [unique_id "apK9xYv3RhPI65jTFG7XTAAAAy0"]
[Sat Aug 29 05:08:53.736623 2026] [security2:error] [pid 1041789:tid 1042024] [client 68.155.159.216:64450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/sad/about.php"] [unique_id "apK9xYv3RhPI65jTFG7XTQAAA3s"]
[Sat Aug 29 05:08:53.743041 2026] [security2:error] [pid 1034096:tid 1034344] [client 20.104.104.62:43091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/0xs.php"] [unique_id "apK9xS04twRPFuquKD2-mAAAAOI"]
[Sat Aug 29 05:08:53.785981 2026] [security2:error] [pid 1041789:tid 1041945] [client 40.83.93.50:12991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-content/about.php"] [unique_id "apK9xYv3RhPI65jTFG7XTgAAAyw"]
[Sat Aug 29 05:08:53.791695 2026] [security2:error] [pid 1034096:tid 1034306] [client 20.104.104.62:40117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/bnnof6.php"] [unique_id "apK9xS04twRPFuquKD2-mgAAALw"]
[Sat Aug 29 05:08:53.807740 2026] [security2:error] [pid 1041789:tid 1042007] [client 20.151.200.44:64515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/waw.php"] [unique_id "apK9xYv3RhPI65jTFG7XUQAAA2o"]
[Sat Aug 29 05:08:53.829488 2026] [security2:error] [pid 1034096:tid 1034314] [client 68.155.159.216:1874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apK9xS04twRPFuquKD2-nAAAAMQ"]
[Sat Aug 29 05:08:53.857284 2026] [security2:error] [pid 1041789:tid 1042045] [client 158.23.147.79:17605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK9xYv3RhPI65jTFG7XUwAAA5A"]
[Sat Aug 29 05:08:53.861935 2026] [security2:error] [pid 1034096:tid 1034358] [client 20.48.251.3:14015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/radio.php"] [unique_id "apK9xS04twRPFuquKD2-ngAAAPA"]
[Sat Aug 29 05:08:53.863473 2026] [security2:error] [pid 1034096:tid 1034327] [client 4.205.62.107:21930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/87.php"] [unique_id "apK9xS04twRPFuquKD2-nwAAANE"]
[Sat Aug 29 05:08:53.866293 2026] [security2:error] [pid 1034096:tid 1034319] [client 20.104.104.62:63001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/grsiuk.php"] [unique_id "apK9xS04twRPFuquKD2-oAAAAMk"]
[Sat Aug 29 05:08:53.872481 2026] [security2:error] [pid 1034096:tid 1034273] [client 52.139.37.240:63720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehulbertfamily.com"] [uri "/browse.php"] [unique_id "apK9xS04twRPFuquKD2-ogAAAJs"]
[Sat Aug 29 05:08:53.874306 2026] [security2:error] [pid 1041789:tid 1042027] [client 4.232.148.111:20477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/403.php"] [unique_id "apK9xYv3RhPI65jTFG7XVQAAA34"]
[Sat Aug 29 05:08:53.875456 2026] [security2:error] [pid 1034096:tid 1034347] [client 68.155.159.216:52835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-includes/index.php"] [unique_id "apK9xS04twRPFuquKD2-owAAAOU"]
[Sat Aug 29 05:08:53.876624 2026] [security2:error] [pid 1034096:tid 1034300] [client 20.104.104.62:43078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/waf.php"] [unique_id "apK9xS04twRPFuquKD2-pAAAALY"]
[Sat Aug 29 05:08:53.881591 2026] [security2:error] [pid 1034096:tid 1034355] [client 52.139.37.240:12518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "apK9xS04twRPFuquKD2-pgAAAO0"]
[Sat Aug 29 05:08:53.885074 2026] [security2:error] [pid 1034096:tid 1034312] [client 158.158.54.35:31499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-admin/js/index.php"] [unique_id "apK9xS04twRPFuquKD2-pwAAAMI"]
[Sat Aug 29 05:08:53.896255 2026] [security2:error] [pid 1041789:tid 1041937] [client 20.196.209.81:1308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/classsmtps.php"] [unique_id "apK9xYv3RhPI65jTFG7XVgAAAyQ"]
[Sat Aug 29 05:08:53.918084 2026] [security2:error] [pid 1034096:tid 1034267] [client 40.83.93.50:48060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/aksinet.php"] [unique_id "apK9xS04twRPFuquKD2-qQAAAJU"]
[Sat Aug 29 05:08:53.933217 2026] [security2:error] [pid 1041789:tid 1042033] [client 20.104.104.62:64258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/ah24.php"] [unique_id "apK9xYv3RhPI65jTFG7XWAAAA4Q"]
[Sat Aug 29 05:08:53.982460 2026] [security2:error] [pid 1034096:tid 1034318] [client 20.63.219.114:19844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/blog.php"] [unique_id "apK9xS04twRPFuquKD2-qwAAAMg"]
[Sat Aug 29 05:08:53.991264 2026] [security2:error] [pid 1034096:tid 1034356] [client 93.123.109.228:49236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/api/phpinfo.php"] [unique_id "apK9xS04twRPFuquKD2-rAAAAO4"]
[Sat Aug 29 05:08:54.008277 2026] [security2:error] [pid 1034096:tid 1034365] [client 20.104.104.62:41927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/bnnof6.php"] [unique_id "apK9xi04twRPFuquKD2-rQAAAPc"]
[Sat Aug 29 05:08:54.016979 2026] [security2:error] [pid 1034096:tid 1034332] [client 20.104.104.62:62963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/ahy66.php"] [unique_id "apK9xi04twRPFuquKD2-rgAAANY"]
[Sat Aug 29 05:08:54.039193 2026] [security2:error] [pid 1034096:tid 1034321] [client 146.70.36.124:51260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 124.36.70.146.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "narrowgate-electrical.com"] [uri "/xmlrpc.php"] [unique_id "apK9xi04twRPFuquKD2-rwAAAMs"]
[Sat Aug 29 05:08:54.047706 2026] [security2:error] [pid 1034096:tid 1034259] [client 40.83.93.50:12484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/class_api.php"] [unique_id "apK9xi04twRPFuquKD2-swAAAI0"]
[Sat Aug 29 05:08:54.059218 2026] [security2:error] [pid 1034096:tid 1034346] [client 20.197.61.180:15022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/Js.php"] [unique_id "apK9xi04twRPFuquKD2-tAAAAOQ"]
[Sat Aug 29 05:08:54.067742 2026] [security2:error] [pid 1041789:tid 1041971] [client 52.139.37.240:63925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehulbertfamily.com"] [uri "/contentloader1.php"] [unique_id "apK9xov3RhPI65jTFG7XXQAAA0Y"]
[Sat Aug 29 05:08:54.069891 2026] [security2:error] [pid 1034096:tid 1034349] [client 20.104.104.62:37692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/ztv.php"] [unique_id "apK9xi04twRPFuquKD2-tQAAAOc"]
[Sat Aug 29 05:08:54.109350 2026] [security2:error] [pid 1041789:tid 1042046] [client 20.104.104.62:64764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/bingo.php"] [unique_id "apK9xov3RhPI65jTFG7XYAAAA5E"]
[Sat Aug 29 05:08:54.110973 2026] [security2:error] [pid 1034096:tid 1034378] [client 20.100.175.163:16398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/file2.php"] [unique_id "apK9xi04twRPFuquKD2-ugAAAQQ"]
[Sat Aug 29 05:08:54.131722 2026] [security2:error] [pid 1034096:tid 1034276] [client 158.23.147.79:5953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK9xi04twRPFuquKD2-uwAAAJ4"]
[Sat Aug 29 05:08:54.136421 2026] [security2:error] [pid 1034096:tid 1034363] [client 20.104.104.62:42841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/ah24.php"] [unique_id "apK9xi04twRPFuquKD2-vQAAAPU"]
[Sat Aug 29 05:08:54.141892 2026] [security2:error] [pid 1034096:tid 1034377] [client 20.48.251.3:14129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/xa.php"] [unique_id "apK9xi04twRPFuquKD2-vwAAAQM"]
[Sat Aug 29 05:08:54.147598 2026] [security2:error] [pid 1034096:tid 1034325] [client 20.104.104.62:53142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/gaje.php"] [unique_id "apK9xi04twRPFuquKD2-wQAAAM8"]
[Sat Aug 29 05:08:54.148997 2026] [security2:error] [pid 1041789:tid 1042001] [client 52.139.37.240:12325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/z.php"] [unique_id "apK9xov3RhPI65jTFG7XYQAAA2Q"]
[Sat Aug 29 05:08:54.154059 2026] [security2:error] [pid 1041789:tid 1041844] [remote 74.7.227.154:54326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK9xov3RhPI65jTFG7XYgADcSo"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwp-easycart%2Finc%2Fclasses%2Fcore
[Sat Aug 29 05:08:54.158460 2026] [security2:error] [pid 1041789:tid 1042013] [client 20.197.61.180:12736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/wxo.php"] [unique_id "apK9xov3RhPI65jTFG7XYwAAA3A"]
[Sat Aug 29 05:08:54.159279 2026] [security2:error] [pid 1034096:tid 1034262] [client 68.155.159.216:1923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK9xi04twRPFuquKD2-xAAAAJA"]
[Sat Aug 29 05:08:54.164996 2026] [security2:error] [pid 1034096:tid 1034269] [client 158.23.147.79:17507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/content.php"] [unique_id "apK9xi04twRPFuquKD2-yAAAAJc"]
[Sat Aug 29 05:08:54.165741 2026] [security2:error] [pid 1034096:tid 1034342] [client 93.123.109.228:49130] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/apis/.env"] [unique_id "apK9xi04twRPFuquKD2-xwAAAOA"]
[Sat Aug 29 05:08:54.189566 2026] [security2:error] [pid 1034096:tid 1034329] [client 20.197.61.180:2046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/classsmtps.php"] [unique_id "apK9xi04twRPFuquKD2-ygAAANM"]
[Sat Aug 29 05:08:54.199942 2026] [security2:error] [pid 1041789:tid 1041955] [client 20.104.104.62:37683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/kure.php"] [unique_id "apK9xov3RhPI65jTFG7XaQAAAzY"]
[Sat Aug 29 05:08:54.238130 2026] [security2:error] [pid 1041789:tid 1042019] [client 20.104.49.130:34529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/memberfuns.php"] [unique_id "apK9xov3RhPI65jTFG7XbAAAA3Y"]
[Sat Aug 29 05:08:54.239622 2026] [security2:error] [pid 1041789:tid 1042006] [client 128.85.72.129:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.jobindjibouti.com"] [uri "/"] [unique_id "apK9xov3RhPI65jTFG7XawAAA2k"]
[Sat Aug 29 05:08:54.254863 2026] [security2:error] [pid 1034096:tid 1034286] [client 40.83.93.50:12928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-content/admin-header.php"] [unique_id "apK9xi04twRPFuquKD2-0AAAAKg"]
[Sat Aug 29 05:08:54.262400 2026] [security2:error] [pid 1041789:tid 1041988] [client 52.139.37.240:61796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehulbertfamily.com"] [uri "/upfile.php"] [unique_id "apK9xov3RhPI65jTFG7XbwAAA1c"]
[Sat Aug 29 05:08:54.262699 2026] [security2:error] [pid 1034096:tid 1034373] [client 4.205.62.107:8946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/wp-content/themes/luJMF.php"] [unique_id "apK9xi04twRPFuquKD2-0QAAAP8"]
[Sat Aug 29 05:08:54.270088 2026] [security2:error] [pid 1034096:tid 1034355] [client 74.248.24.12:5739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/lite.php"] [unique_id "apK9xi04twRPFuquKD2-0wAAAO0"]
[Sat Aug 29 05:08:54.287128 2026] [security2:error] [pid 1041789:tid 1041962] [client 20.104.104.62:42826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/ztv.php"] [unique_id "apK9xov3RhPI65jTFG7XcQAAAz0"]
[Sat Aug 29 05:08:54.292268 2026] [security2:error] [pid 1041789:tid 1041980] [client 20.104.104.62:63024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/wp-admin/zwso.php"] [unique_id "apK9xov3RhPI65jTFG7XcgAAA08"]
[Sat Aug 29 05:08:54.302098 2026] [security2:error] [pid 1041789:tid 1042034] [client 93.123.109.228:49230] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/app/.env"] [unique_id "apK9xov3RhPI65jTFG7XcwAAA4U"]
[Sat Aug 29 05:08:54.305313 2026] [security2:error] [pid 1034096:tid 1034304] [client 20.151.200.44:64509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/x23.php"] [unique_id "apK9xi04twRPFuquKD2-1gAAALo"]
[Sat Aug 29 05:08:54.350784 2026] [security2:error] [pid 1041789:tid 1041956] [client 52.139.37.240:12476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/f35.php"] [unique_id "apK9xov3RhPI65jTFG7XdQAAAzc"]
[Sat Aug 29 05:08:54.356207 2026] [security2:error] [pid 1034096:tid 1034266] [client 158.158.54.35:31514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/core.php"] [unique_id "apK9xi04twRPFuquKD2-3QAAAJQ"]
[Sat Aug 29 05:08:54.357458 2026] [security2:error] [pid 1034096:tid 1034268] [client 68.155.159.216:24571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK9xi04twRPFuquKD2-3wAAAJY"]
[Sat Aug 29 05:08:54.363571 2026] [security2:error] [pid 1034096:tid 1034317] [client 20.240.128.207:27562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK9xi04twRPFuquKD2-4AAAAMc"]
[Sat Aug 29 05:08:54.363931 2026] [security2:error] [pid 1034096:tid 1034278] [client 20.104.104.62:40071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/cafe.php"] [unique_id "apK9xi04twRPFuquKD2-4QAAAKA"]
[Sat Aug 29 05:08:54.373821 2026] [security2:error] [pid 1034096:tid 1034362] [client 20.104.49.130:53656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/crgio.php"] [unique_id "apK9xi04twRPFuquKD2-4gAAAPQ"]
[Sat Aug 29 05:08:54.389788 2026] [security2:error] [pid 1034096:tid 1034300] [client 20.196.209.81:1431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/contentloader1.php"] [unique_id "apK9xi04twRPFuquKD2-4wAAALY"]
[Sat Aug 29 05:08:54.392218 2026] [security2:error] [pid 1041789:tid 1041966] [client 195.178.110.247:11380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steeldrumflavor.com"] [uri "/index.php"] [unique_id "apK9xov3RhPI65jTFG7XdwAAA0E"]
[Sat Aug 29 05:08:54.392306 2026] [security2:error] [pid 1034096:tid 1034271] [client 40.83.93.50:11911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/alfa-rex1.php"] [unique_id "apK9xi04twRPFuquKD2-5AAAAJk"]
[Sat Aug 29 05:08:54.402585 2026] [security2:error] [pid 1041789:tid 1042051] [client 4.232.148.111:35821] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "movriders.com"] [uri "/1.php"] [unique_id "apK9xov3RhPI65jTFG7XeQAAA5Y"]
[Sat Aug 29 05:08:54.402662 2026] [security2:error] [pid 1041789:tid 1042051] [client 4.232.148.111:35821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/1.php"] [unique_id "apK9xov3RhPI65jTFG7XeQAAA5Y"]
[Sat Aug 29 05:08:54.415742 2026] [security2:error] [pid 1041789:tid 1041949] [client 68.155.159.216:16277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK9xov3RhPI65jTFG7XegAAAzA"]
[Sat Aug 29 05:08:54.416640 2026] [security2:error] [pid 1041789:tid 1042000] [client 20.104.104.62:42868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/kure.php"] [unique_id "apK9xov3RhPI65jTFG7XewAAA2M"]
[Sat Aug 29 05:08:54.432393 2026] [security2:error] [pid 1034096:tid 1034349] [client 20.104.104.62:62947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/Contrller.php"] [unique_id "apK9xi04twRPFuquKD2-5wAAAOc"]
[Sat Aug 29 05:08:54.446998 2026] [security2:error] [pid 1041789:tid 1041940] [client 20.48.251.3:13883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/ws61.php"] [unique_id "apK9xov3RhPI65jTFG7XfAAAAyc"]
[Sat Aug 29 05:08:54.454398 2026] [security2:error] [pid 1041789:tid 1042011] [client 20.63.219.114:10158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/bypass.php"] [unique_id "apK9xov3RhPI65jTFG7XfQAAA24"]
[Sat Aug 29 05:08:54.455059 2026] [security2:error] [pid 1041789:tid 1042004] [client 4.205.62.107:51478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/olfclass.php"] [unique_id "apK9xov3RhPI65jTFG7XfgAAA2c"]
[Sat Aug 29 05:08:54.457475 2026] [security2:error] [pid 1041789:tid 1042015] [client 52.139.37.240:60573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehulbertfamily.com"] [uri "/form.php"] [unique_id "apK9xov3RhPI65jTFG7XfwAAA3I"]
[Sat Aug 29 05:08:54.490699 2026] [security2:error] [pid 1034096:tid 1034315] [client 87.219.197.128:51507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK9xi04twRPFuquKD2-8gAAAMU"]
[Sat Aug 29 05:08:54.490784 2026] [security2:error] [pid 1034096:tid 1034315] [client 87.219.197.128:51507] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK9xi04twRPFuquKD2-8gAAAMU"]
[Sat Aug 29 05:08:54.498525 2026] [security2:error] [pid 1041789:tid 1042032] [client 20.104.104.62:37689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/eval.php"] [unique_id "apK9xov3RhPI65jTFG7XggAAA4M"]
[Sat Aug 29 05:08:54.509548 2026] [security2:error] [pid 1041789:tid 1042026] [client 158.23.147.79:11360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK9xov3RhPI65jTFG7XhQAAA30"]
[Sat Aug 29 05:08:54.513622 2026] [security2:error] [pid 1034096:tid 1034292] [client 197.219.150.206:51074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK9xi04twRPFuquKD2-8wAAAK4"]
[Sat Aug 29 05:08:54.513737 2026] [security2:error] [pid 1034096:tid 1034292] [client 197.219.150.206:51074] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK9xi04twRPFuquKD2-8wAAAK4"]
[Sat Aug 29 05:08:54.518721 2026] [security2:error] [pid 1034096:tid 1034374] [client 40.83.93.50:4041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/aksinet.php"] [unique_id "apK9xi04twRPFuquKD2-9QAAAQA"]
[Sat Aug 29 05:08:54.531089 2026] [security2:error] [pid 1041789:tid 1042050] [client 68.155.159.216:23452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-content/themes/too.php"] [unique_id "apK9xov3RhPI65jTFG7XhwAAA5U"]
[Sat Aug 29 05:08:54.531711 2026] [security2:error] [pid 1041789:tid 1042044] [client 158.23.147.79:49855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/images/index.php"] [unique_id "apK9xov3RhPI65jTFG7XiAAAA48"]
[Sat Aug 29 05:08:54.540514 2026] [security2:error] [pid 1034096:tid 1034316] [client 4.205.62.107:6489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/cp2.php"] [unique_id "apK9xi04twRPFuquKD2--AAAAMY"]
[Sat Aug 29 05:08:54.546988 2026] [security2:error] [pid 1034096:tid 1034287] [client 20.104.104.62:43083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/cafe.php"] [unique_id "apK9xi04twRPFuquKD2--QAAAKk"]
[Sat Aug 29 05:08:54.557309 2026] [security2:error] [pid 1034096:tid 1034323] [client 195.178.110.247:27238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "steeldrumflavor.com"] [uri "/index.php"] [unique_id "apK9xi04twRPFuquKD2--gAAAM0"]
[Sat Aug 29 05:08:54.574798 2026] [security2:error] [pid 1041789:tid 1041963] [client 20.104.104.62:2479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/Zeiss.php"] [unique_id "apK9xov3RhPI65jTFG7XigAAAz4"]
[Sat Aug 29 05:08:54.574837 2026] [security2:error] [pid 1041789:tid 1042038] [client 52.139.37.240:12911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/file61.php"] [unique_id "apK9xov3RhPI65jTFG7XiwAAA4k"]
[Sat Aug 29 05:08:54.597898 2026] [security2:error] [pid 1041789:tid 1042027] [client 20.48.251.3:14075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/xza.php"] [unique_id "apK9xov3RhPI65jTFG7XjQAAA34"]
[Sat Aug 29 05:08:54.602076 2026] [security2:error] [pid 1034096:tid 1034351] [client 4.205.62.107:62747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/aws_credentials.php"] [unique_id "apK9xi04twRPFuquKD2--wAAAOk"]
[Sat Aug 29 05:08:54.612707 2026] [security2:error] [pid 1034096:tid 1034302] [client 20.100.175.163:9965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK9xi04twRPFuquKD2-_AAAALg"]
[Sat Aug 29 05:08:54.629385 2026] [security2:error] [pid 1041789:tid 1041959] [client 171.61.160.196:10296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.160.61.171.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK9xov3RhPI65jTFG7XjwAAAzo"]
[Sat Aug 29 05:08:54.629487 2026] [security2:error] [pid 1041789:tid 1041959] [client 171.61.160.196:10296] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK9xov3RhPI65jTFG7XjwAAAzo"]
[Sat Aug 29 05:08:54.631373 2026] [security2:error] [pid 1034096:tid 1034255] [client 20.104.104.62:37632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/sao.php"] [unique_id "apK9xi04twRPFuquKD2-_wAAAIk"]
[Sat Aug 29 05:08:54.635442 2026] [security2:error] [pid 1034096:tid 1034301] [client 68.155.159.216:18198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-includes/index.php"] [unique_id "apK9xi04twRPFuquKD2_AAAAALc"]
[Sat Aug 29 05:08:54.639168 2026] [security2:error] [pid 1034096:tid 1034375] [client 20.104.104.62:47594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/backd00rshit.php"] [unique_id "apK9xi04twRPFuquKD2_AQAAAQE"]
[Sat Aug 29 05:08:54.641644 2026] [security2:error] [pid 1034096:tid 1034344] [client 4.205.62.107:26681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/fun.php"] [unique_id "apK9xi04twRPFuquKD2_AgAAAOI"]
[Sat Aug 29 05:08:54.651205 2026] [security2:error] [pid 1034096:tid 1034282] [client 52.139.37.240:63691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehulbertfamily.com"] [uri "/wp-sigunq.php"] [unique_id "apK9xi04twRPFuquKD2_AwAAAKQ"]
[Sat Aug 29 05:08:54.653994 2026] [security2:error] [pid 1034096:tid 1034327] [client 57.141.14.13:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/page/5/"] [unique_id "apK9xi04twRPFuquKD2_BAAAANE"]
[Sat Aug 29 05:08:54.687728 2026] [security2:error] [pid 1034096:tid 1034355] [client 20.104.104.62:43115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/eval.php"] [unique_id "apK9xi04twRPFuquKD2_CAAAAO0"]
[Sat Aug 29 05:08:54.692445 2026] [security2:error] [pid 1041789:tid 1041848] [remote 74.7.227.154:54326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK9xov3RhPI65jTFG7XkAADly4"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwp-easycart%2Finc%2Fclasses%2Fcore
[Sat Aug 29 05:08:54.711224 2026] [security2:error] [pid 1034096:tid 1034371] [client 45.125.67.3:48266] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/penci-data-migrator/readme.txt"] [unique_id "apK9xi04twRPFuquKD2_DAAAAP0"]
[Sat Aug 29 05:08:54.724791 2026] [security2:error] [pid 1041789:tid 1041936] [client 20.151.200.44:63886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/ws66.php"] [unique_id "apK9xov3RhPI65jTFG7XkwAAAyM"]
[Sat Aug 29 05:08:54.727148 2026] [security2:error] [pid 1034096:tid 1034356] [client 20.48.251.3:33288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/ms-edit.php"] [unique_id "apK9xi04twRPFuquKD2_DwAAAO4"]
[Sat Aug 29 05:08:54.729200 2026] [security2:error] [pid 1041789:tid 1042007] [client 40.83.93.50:16656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-content/admin.php"] [unique_id "apK9xov3RhPI65jTFG7XlAAAA2o"]
[Sat Aug 29 05:08:54.735101 2026] [security2:error] [pid 1034096:tid 1034251] [client 20.104.104.62:65231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/ww2.php"] [unique_id "apK9xi04twRPFuquKD2_EAAAAIU"]
[Sat Aug 29 05:08:54.741025 2026] [security2:error] [pid 1034096:tid 1034297] [client 45.125.67.3:48272] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/wp-staging/readme.txt"] [unique_id "apK9xi04twRPFuquKD2_EQAAALM"]
[Sat Aug 29 05:08:54.744007 2026] [security2:error] [pid 1034096:tid 1034263] [client 45.125.67.3:48276] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/yotuwp-easy-youtube-embed/readme.txt"] [unique_id "apK9xi04twRPFuquKD2_EgAAAJE"]
[Sat Aug 29 05:08:54.750757 2026] [security2:error] [pid 1041789:tid 1042033] [client 93.123.109.228:49230] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/application/.env"] [unique_id "apK9xov3RhPI65jTFG7XlQAAA4Q"]
[Sat Aug 29 05:08:54.770776 2026] [security2:error] [pid 1034096:tid 1034252] [client 45.125.67.3:48320] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/zoho-marketinghub/readme.txt"] [unique_id "apK9xi04twRPFuquKD2_HQAAAIY"]
[Sat Aug 29 05:08:54.770776 2026] [security2:error] [pid 1034096:tid 1034376] [client 45.125.67.3:48342] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/woo-order-export-lite/readme.txt"] [unique_id "apK9xi04twRPFuquKD2_HAAAAQI"]
[Sat Aug 29 05:08:54.771138 2026] [security2:error] [pid 1034096:tid 1034313] [client 52.139.37.240:12885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/mah.php"] [unique_id "apK9xi04twRPFuquKD2_HgAAAMM"]
[Sat Aug 29 05:08:54.771271 2026] [security2:error] [pid 1041789:tid 1042010] [client 45.125.67.3:48354] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/startklar-elmentor-forms-extwidgets/readme.txt"] [unique_id "apK9xov3RhPI65jTFG7XlgAAA20"]
[Sat Aug 29 05:08:54.772003 2026] [security2:error] [pid 1034096:tid 1034346] [client 68.155.159.216:64118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/chosen.php"] [unique_id "apK9xi04twRPFuquKD2_HwAAAOQ"]
[Sat Aug 29 05:08:54.773220 2026] [security2:error] [pid 1034096:tid 1034253] [client 20.104.104.62:37691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/uuu.php"] [unique_id "apK9xi04twRPFuquKD2_IgAAAIc"]
[Sat Aug 29 05:08:54.787968 2026] [security2:error] [pid 1041789:tid 1042037] [client 45.125.67.3:48364] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/wp-dummy-content-generator/readme.txt"] [unique_id "apK9xov3RhPI65jTFG7XmAAAA4g"]
[Sat Aug 29 05:08:54.790857 2026] [security2:error] [pid 1034096:tid 1034269] [client 45.125.67.3:48304] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/chatbot-chatgpt/readme.txt"] [unique_id "apK9xi04twRPFuquKD2_JQAAAJc"]
[Sat Aug 29 05:08:54.791461 2026] [security2:error] [pid 1034096:tid 1034353] [client 74.248.24.12:19495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/term.php"] [unique_id "apK9xi04twRPFuquKD2_JgAAAOs"]
[Sat Aug 29 05:08:54.792012 2026] [security2:error] [pid 1034096:tid 1034372] [client 45.125.67.3:48288] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/learnpress-import-export/readme.txt"] [unique_id "apK9xi04twRPFuquKD2_JwAAAP4"]
[Sat Aug 29 05:08:54.807945 2026] [security2:error] [pid 1034096:tid 1034285] [client 146.70.36.124:51268] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "narrowgate-electrical.com"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "apK9xi04twRPFuquKD2_KAAAAKc"]
[Sat Aug 29 05:08:54.808157 2026] [security2:error] [pid 1034096:tid 1034262] [client 20.197.61.180:1993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/access.php"] [unique_id "apK9xi04twRPFuquKD2_KQAAAJA"]
[Sat Aug 29 05:08:54.811010 2026] [security2:error] [pid 1041789:tid 1041965] [client 45.125.67.3:48382] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/search-and-replace/readme.txt"] [unique_id "apK9xov3RhPI65jTFG7XmQAAA0A"]
[Sat Aug 29 05:08:54.811242 2026] [security2:error] [pid 1034096:tid 1034294] [client 45.125.67.3:48368] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/tutor/readme.txt"] [unique_id "apK9xi04twRPFuquKD2_KgAAALA"]
[Sat Aug 29 05:08:54.813239 2026] [security2:error] [pid 1034096:tid 1034296] [client 158.23.147.79:65512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-content/x.php"] [unique_id "apK9xi04twRPFuquKD2_KwAAALI"]
[Sat Aug 29 05:08:54.826976 2026] [security2:error] [pid 1041789:tid 1041939] [client 20.196.209.81:1853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/al.php"] [unique_id "apK9xov3RhPI65jTFG7XmgAAAyY"]
[Sat Aug 29 05:08:54.834147 2026] [security2:error] [pid 1034096:tid 1034324] [client 20.63.219.114:19880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/extractable-loader-head.php"] [unique_id "apK9xi04twRPFuquKD2_LQAAAM4"]
[Sat Aug 29 05:08:54.836484 2026] [security2:error] [pid 1034096:tid 1034303] [client 158.158.54.35:31672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/admin/function.php"] [unique_id "apK9xi04twRPFuquKD2_LgAAALk"]
[Sat Aug 29 05:08:54.841494 2026] [security2:error] [pid 1041789:tid 1041997] [client 68.155.159.216:65130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/admin.php"] [unique_id "apK9xov3RhPI65jTFG7XnAAAA2A"]
[Sat Aug 29 05:08:54.843533 2026] [security2:error] [pid 1041789:tid 1042005] [client 20.104.104.62:43106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/sao.php"] [unique_id "apK9xov3RhPI65jTFG7XnQAAA2g"]
[Sat Aug 29 05:08:54.845301 2026] [security2:error] [pid 1041789:tid 1041942] [client 68.155.159.216:6029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK9xov3RhPI65jTFG7XngAAAyk"]
[Sat Aug 29 05:08:54.849551 2026] [security2:error] [pid 1034096:tid 1034320] [client 52.139.37.240:63909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.thehulbertfamily.com"] [uri "/07.php"] [unique_id "apK9xi04twRPFuquKD2_LwAAAMo"]
[Sat Aug 29 05:08:54.857704 2026] [security2:error] [pid 1041789:tid 1041981] [client 20.48.251.3:33285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/lmfi2.php"] [unique_id "apK9xov3RhPI65jTFG7XnwAAA1A"]
[Sat Aug 29 05:08:54.860103 2026] [security2:error] [pid 1034096:tid 1034291] [client 20.240.128.207:23424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/num.php"] [unique_id "apK9xi04twRPFuquKD2_MQAAAK0"]
[Sat Aug 29 05:08:54.860663 2026] [security2:error] [pid 1034096:tid 1034374] [client 20.104.49.130:60951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/txets.php"] [unique_id "apK9xi04twRPFuquKD2_MgAAAQA"]
[Sat Aug 29 05:08:54.863313 2026] [security2:error] [pid 1034096:tid 1034328] [client 40.83.93.50:17223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/headerg.php"] [unique_id "apK9xi04twRPFuquKD2_MwAAANI"]
[Sat Aug 29 05:08:54.864260 2026] [security2:error] [pid 1041789:tid 1041938] [client 93.123.109.228:49160] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/apps/.env"] [unique_id "apK9xov3RhPI65jTFG7XoAAAAyU"]
[Sat Aug 29 05:08:54.872120 2026] [security2:error] [pid 1034096:tid 1034369] [client 4.205.62.107:56027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/snq.php"] [unique_id "apK9xi04twRPFuquKD2_NAAAAPs"]
[Sat Aug 29 05:08:54.879041 2026] [security2:error] [pid 1034096:tid 1034314] [client 20.104.104.62:56549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/anz.php"] [unique_id "apK9xi04twRPFuquKD2_NgAAAMQ"]
[Sat Aug 29 05:08:54.886949 2026] [security2:error] [pid 1034096:tid 1034358] [client 20.197.61.180:1914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/as.php"] [unique_id "apK9xi04twRPFuquKD2_NwAAAPA"]
[Sat Aug 29 05:08:54.891089 2026] [cgid:error] [pid 1034096:tid 1034363] [client 52.2.88.173:52440] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/penmarke/public_html/dachshund/404.shtml
[Sat Aug 29 05:08:54.906110 2026] [security2:error] [pid 1041789:tid 1042014] [client 20.104.104.62:20817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/ichi.php"] [unique_id "apK9xov3RhPI65jTFG7XpAAAA3E"]
[Sat Aug 29 05:08:54.906341 2026] [security2:error] [pid 1041789:tid 1041991] [client 68.155.159.216:64491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/cong.php"] [unique_id "apK9xov3RhPI65jTFG7XowAAA1o"]
[Sat Aug 29 05:08:54.923828 2026] [security2:error] [pid 1034096:tid 1034286] [client 20.197.61.180:1883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/contentloader1.php"] [unique_id "apK9xi04twRPFuquKD2_OwAAAKg"]
[Sat Aug 29 05:08:54.927696 2026] [security2:error] [pid 1034096:tid 1034362] [client 20.104.104.62:40114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/private.php"] [unique_id "apK9xi04twRPFuquKD2_OgAAAPQ"]
[Sat Aug 29 05:08:54.937281 2026] [security2:error] [pid 1041789:tid 1041968] [client 68.155.159.216:2034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK9xov3RhPI65jTFG7XpQAAA0M"]
[Sat Aug 29 05:08:54.962107 2026] [security2:error] [pid 1041789:tid 1041955] [client 158.23.147.79:17519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK9xov3RhPI65jTFG7XpgAAAzY"]
[Sat Aug 29 05:08:54.973373 2026] [security2:error] [pid 1041789:tid 1041994] [client 52.139.37.240:12907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/mini.php"] [unique_id "apK9xov3RhPI65jTFG7XpwAAA10"]
[Sat Aug 29 05:08:54.983059 2026] [security2:error] [pid 1034096:tid 1034375] [client 68.155.159.216:52758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/mah.php"] [unique_id "apK9xi04twRPFuquKD2_PQAAAQE"]
[Sat Aug 29 05:08:54.986948 2026] [security2:error] [pid 1034096:tid 1034361] [client 20.104.104.62:42863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/uuu.php"] [unique_id "apK9xi04twRPFuquKD2_PgAAAPM"]
[Sat Aug 29 05:08:54.992552 2026] [security2:error] [pid 1034096:tid 1034282] [client 20.48.251.3:33324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/wpver.php"] [unique_id "apK9xi04twRPFuquKD2_PwAAAKQ"]
[Sat Aug 29 05:08:55.000502 2026] [security2:error] [pid 1034096:tid 1034298] [client 40.83.93.50:19555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/alfa-rex1.php"] [unique_id "apK9xi04twRPFuquKD2_QQAAALQ"]
[Sat Aug 29 05:08:55.004604 2026] [security2:error] [pid 1041789:tid 1042056] [client 4.205.62.107:21946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/plss3.php"] [unique_id "apK9x4v3RhPI65jTFG7XqQAAA5s"]
[Sat Aug 29 05:08:55.007982 2026] [security2:error] [pid 1034096:tid 1034239] [remote 93.123.109.228:42974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/wp-config.php"] [unique_id "apK9xy04twRPFuquKD2_SQAAwHU"]
[Sat Aug 29 05:08:55.008173 2026] [security2:error] [pid 1034096:tid 1034140] [remote 93.123.109.228:42974] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.gcomradio.com"] [uri "/wp-config.php.new"] [unique_id "apK9xy04twRPFuquKD2_SgAAwBI"]
[Sat Aug 29 05:08:55.008192 2026] [security2:error] [pid 1034096:tid 1034239] [remote 93.123.109.228:42974] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.gcomradio.com"] [uri "/wp-config.php.bak"] [unique_id "apK9xy04twRPFuquKD2_SwAAwHU"]
[Sat Aug 29 05:08:55.019691 2026] [security2:error] [pid 1034096:tid 1034308] [client 20.104.104.62:63019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/bge.php"] [unique_id "apK9xy04twRPFuquKD2_TAAAAL4"]
[Sat Aug 29 05:08:55.031479 2026] [security2:error] [pid 1034096:tid 1034284] [client 20.151.200.44:64453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/Cok.php"] [unique_id "apK9xy04twRPFuquKD2_TQAAAKY"]
[Sat Aug 29 05:08:55.046346 2026] [security2:error] [pid 1034096:tid 1034301] [client 52.139.37.240:63892] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.thehulbertfamily.com"] [uri "/c99.php"] [unique_id "apK9xy04twRPFuquKD2_TgAAALc"]
[Sat Aug 29 05:08:55.068276 2026] [security2:error] [pid 1034096:tid 1034312] [client 20.104.104.62:64305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/lfi.php"] [unique_id "apK9xy04twRPFuquKD2_TwAAAMI"]
[Sat Aug 29 05:08:55.097954 2026] [security2:error] [pid 1034096:tid 1034266] [client 158.23.147.79:5888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/sad/about.php"] [unique_id "apK9xy04twRPFuquKD2_UQAAAJQ"]
[Sat Aug 29 05:08:55.102338 2026] [security2:error] [pid 1034096:tid 1034318] [client 4.232.148.111:18851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/s.php"] [unique_id "apK9xy04twRPFuquKD2_UwAAAMg"]
[Sat Aug 29 05:08:55.103693 2026] [security2:error] [pid 1034096:tid 1034153] [remote 93.123.109.228:42974] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.gcomradio.com"] [uri "/wp-config.php.old"] [unique_id "apK9xy04twRPFuquKD2_VQAA9x8"]
[Sat Aug 29 05:08:55.107156 2026] [security2:error] [pid 1041789:tid 1041952] [client 20.100.175.163:28248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/xda.php"] [unique_id "apK9x4v3RhPI65jTFG7XqgAAAzM"]
[Sat Aug 29 05:08:55.125678 2026] [security2:error] [pid 1034096:tid 1034332] [client 20.104.104.62:41958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/private.php"] [unique_id "apK9xy04twRPFuquKD2_WQAAANY"]
[Sat Aug 29 05:08:55.126779 2026] [security2:error] [pid 1034096:tid 1034259] [client 20.48.251.3:13846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/ah25.php"] [unique_id "apK9xy04twRPFuquKD2_WgAAAI0"]
[Sat Aug 29 05:08:55.133826 2026] [security2:error] [pid 1041789:tid 1041957] [client 68.155.159.216:38669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-login.php"] [unique_id "apK9x4v3RhPI65jTFG7XrQAAAzg"]
[Sat Aug 29 05:08:55.148196 2026] [security2:error] [pid 1034096:tid 1034349] [client 20.104.104.62:56570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/wp-ana.php"] [unique_id "apK9xy04twRPFuquKD2_XAAAAOc"]
[Sat Aug 29 05:08:55.172153 2026] [security2:error] [pid 1034096:tid 1034262] [client 68.155.159.216:49313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK9xy04twRPFuquKD2_XwAAAJA"]
[Sat Aug 29 05:08:55.176008 2026] [security2:error] [pid 1041789:tid 1041980] [client 52.139.37.240:12480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/v.php"] [unique_id "apK9x4v3RhPI65jTFG7XrwAAA08"]
[Sat Aug 29 05:08:55.196978 2026] [security2:error] [pid 1041789:tid 1041988] [client 40.83.93.50:12970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-content/autoload_classmap.php"] [unique_id "apK9x4v3RhPI65jTFG7XsAAAA1c"]
[Sat Aug 29 05:08:55.202080 2026] [security2:error] [pid 1041789:tid 1041967] [client 91.92.47.191:44212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.corrigansbasement.com"] [uri "/settings.php"] [unique_id "apK9x4v3RhPI65jTFG7XsQAAA0I"]
[Sat Aug 29 05:08:55.204629 2026] [security2:error] [pid 1041789:tid 1041993] [client 20.104.104.62:37681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/quoys.php"] [unique_id "apK9x4v3RhPI65jTFG7XsgAAA1w"]
[Sat Aug 29 05:08:55.217253 2026] [security2:error] [pid 1034096:tid 1034278] [client 20.63.219.114:19874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/defaults.php"] [unique_id "apK9xy04twRPFuquKD2_YAAAAKA"]
[Sat Aug 29 05:08:55.233379 2026] [security2:error] [pid 1034096:tid 1034292] [client 158.23.147.79:5995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-content/radio.php"] [unique_id "apK9xy04twRPFuquKD2_YQAAAK4"]
[Sat Aug 29 05:08:55.240830 2026] [security2:error] [pid 1034096:tid 1034294] [client 52.139.37.240:63914] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.thehulbertfamily.com"] [uri "/c99.php"] [unique_id "apK9xy04twRPFuquKD2_YgAAALA"]
[Sat Aug 29 05:08:55.246961 2026] [security2:error] [pid 1034096:tid 1034320] [client 20.151.200.44:63811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/X7T6.php"] [unique_id "apK9xy04twRPFuquKD2_YwAAAMo"]
[Sat Aug 29 05:08:55.256695 2026] [security2:error] [pid 1034096:tid 1034328] [client 20.48.251.3:14014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/groceries/index.php"] [unique_id "apK9xy04twRPFuquKD2_ZAAAANI"]
[Sat Aug 29 05:08:55.262046 2026] [security2:error] [pid 1034096:tid 1034369] [client 20.104.104.62:20663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/~.php"] [unique_id "apK9xy04twRPFuquKD2_ZQAAAPs"]
[Sat Aug 29 05:08:55.268886 2026] [security2:error] [pid 1034096:tid 1034377] [client 20.104.104.62:43125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/lfi.php"] [unique_id "apK9xy04twRPFuquKD2_ZgAAAQM"]
[Sat Aug 29 05:08:55.276061 2026] [security2:error] [pid 1034096:tid 1034314] [client 20.104.104.62:56551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/secret.php"] [unique_id "apK9xy04twRPFuquKD2_ZwAAAMQ"]
[Sat Aug 29 05:08:55.305403 2026] [security2:error] [pid 1034096:tid 1034313] [client 74.248.24.12:5700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/config.php"] [unique_id "apK9xy04twRPFuquKD2_bQAAAMM"]
[Sat Aug 29 05:08:55.310916 2026] [security2:error] [pid 1034096:tid 1034274] [client 158.158.54.35:31490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/admin/index.php"] [unique_id "apK9xy04twRPFuquKD2_bgAAAJw"]
[Sat Aug 29 05:08:55.328443 2026] [security2:error] [pid 1034096:tid 1034323] [client 68.155.159.216:14265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-content/themes/too.php"] [unique_id "apK9xy04twRPFuquKD2_cAAAAM0"]
[Sat Aug 29 05:08:55.342381 2026] [security2:error] [pid 1034096:tid 1034306] [client 20.104.104.62:40119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/vbbn.php"] [unique_id "apK9xy04twRPFuquKD2_cgAAALw"]
[Sat Aug 29 05:08:55.343997 2026] [security2:error] [pid 1041789:tid 1041998] [client 20.196.209.81:11829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/global.php"] [unique_id "apK9x4v3RhPI65jTFG7XtgAAA2E"]
[Sat Aug 29 05:08:55.377622 2026] [security2:error] [pid 1034096:tid 1034293] [client 52.139.37.240:12313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK9xy04twRPFuquKD2_dAAAAK8"]
[Sat Aug 29 05:08:55.386760 2026] [security2:error] [pid 1041789:tid 1041940] [client 20.48.251.3:14040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/konfig.php"] [unique_id "apK9x4v3RhPI65jTFG7XuQAAAyc"]
[Sat Aug 29 05:08:55.407784 2026] [security2:error] [pid 1041789:tid 1042015] [client 4.205.62.107:9204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/packed.php"] [unique_id "apK9x4v3RhPI65jTFG7XuwAAA3I"]
[Sat Aug 29 05:08:55.409798 2026] [security2:error] [pid 1034096:tid 1034298] [client 20.104.104.62:56546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/pro.php"] [unique_id "apK9xy04twRPFuquKD2_dwAAALQ"]
[Sat Aug 29 05:08:55.416711 2026] [security2:error] [pid 1034096:tid 1034141] [remote 91.234.194.249:35180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 249.194.234.91.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jmdental.com.au"] [uri "/wp-login.php"] [unique_id "apK9xy04twRPFuquKD2_eAAA-hM"]
[Sat Aug 29 05:08:55.422982 2026] [security2:error] [pid 1034096:tid 1034273] [client 20.104.104.62:43089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/quoys.php"] [unique_id "apK9xy04twRPFuquKD2_fAAAAJs"]
[Sat Aug 29 05:08:55.424929 2026] [security2:error] [pid 1034096:tid 1034272] [client 146.70.36.124:51280] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "narrowgate-electrical.com"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "apK9xy04twRPFuquKD2_fQAAAJo"]
[Sat Aug 29 05:08:55.427798 2026] [security2:error] [pid 1034096:tid 1034248] [remote 91.234.194.249:35164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 249.194.234.91.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jmdental.com.au"] [uri "/wp-login.php"] [unique_id "apK9xy04twRPFuquKD2_egAA-X4"]
[Sat Aug 29 05:08:55.435670 2026] [security2:error] [pid 1034096:tid 1034255] [client 52.139.37.240:63913] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.thehulbertfamily.com"] [uri "/c99.php"] [unique_id "apK9xy04twRPFuquKD2_fwAAAIk"]
[Sat Aug 29 05:08:55.455173 2026] [security2:error] [pid 1034096:tid 1034275] [client 40.83.93.50:48049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/meta.php"] [unique_id "apK9xy04twRPFuquKD2_gAAAAJ0"]
[Sat Aug 29 05:08:55.459284 2026] [security2:error] [pid 1034096:tid 1034342] [client 45.125.67.3:48298] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/quiz-master-next/readme.txt"] [unique_id "apK9xy04twRPFuquKD2_gQAAAOA"]
[Sat Aug 29 05:08:55.469251 2026] [security2:error] [pid 1034096:tid 1034267] [client 20.104.104.62:40067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/rfi.php"] [unique_id "apK9xy04twRPFuquKD2_ggAAAJU"]
[Sat Aug 29 05:08:55.477782 2026] [security2:error] [pid 1041789:tid 1041949] [client 40.83.93.50:12533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/headerg.php"] [unique_id "apK9x4v3RhPI65jTFG7XvgAAAzA"]
[Sat Aug 29 05:08:55.493597 2026] [security2:error] [pid 1041789:tid 1042032] [client 20.104.49.130:65259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/reop3.php"] [unique_id "apK9x4v3RhPI65jTFG7XvwAAA4M"]
[Sat Aug 29 05:08:55.499290 2026] [security2:error] [pid 1041789:tid 1041946] [client 20.151.200.44:64467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/see.php"] [unique_id "apK9x4v3RhPI65jTFG7XwAAAAy0"]
[Sat Aug 29 05:08:55.540389 2026] [security2:error] [pid 1041789:tid 1042022] [client 20.197.61.180:1054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/classsmtps.php"] [unique_id "apK9x4v3RhPI65jTFG7XwgAAA3k"]
[Sat Aug 29 05:08:55.553227 2026] [security2:error] [pid 1034096:tid 1034266] [client 20.48.251.3:14038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/paths.php"] [unique_id "apK9xy04twRPFuquKD2_hwAAAJQ"]
[Sat Aug 29 05:08:55.556591 2026] [security2:error] [pid 1041789:tid 1042050] [client 20.104.104.62:43335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/vbbn.php"] [unique_id "apK9x4v3RhPI65jTFG7XxAAAA5U"]
[Sat Aug 29 05:08:55.557193 2026] [security2:error] [pid 1041789:tid 1042044] [client 20.104.104.62:65229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/999.php"] [unique_id "apK9x4v3RhPI65jTFG7XxQAAA48"]
[Sat Aug 29 05:08:55.590047 2026] [security2:error] [pid 1041789:tid 1041990] [client 20.63.219.114:2074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/post.php"] [unique_id "apK9x4v3RhPI65jTFG7XxgAAA1k"]
[Sat Aug 29 05:08:55.591222 2026] [security2:error] [pid 1041789:tid 1042038] [client 91.92.47.191:38312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.edwardjindovina.com"] [uri "/wp-login.php"] [unique_id "apK9x4v3RhPI65jTFG7XxwAAA4k"]
[Sat Aug 29 05:08:55.591972 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.104.104.62:64726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/lock360.php"] [unique_id "apK9x4v3RhPI65jTFG7XyAAAA3o"]
[Sat Aug 29 05:08:55.595319 2026] [security2:error] [pid 1041789:tid 1042024] [client 52.139.37.240:12515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "apK9x4v3RhPI65jTFG7XygAAA3s"]
[Sat Aug 29 05:08:55.602127 2026] [security2:error] [pid 1041789:tid 1041944] [client 4.232.148.111:31028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/test1.php"] [unique_id "apK9x4v3RhPI65jTFG7XywAAAys"]
[Sat Aug 29 05:08:55.605735 2026] [security2:error] [pid 1034096:tid 1034269] [client 20.104.104.62:37649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/tajj.php"] [unique_id "apK9xy04twRPFuquKD2_jAAAAJc"]
[Sat Aug 29 05:08:55.613559 2026] [security2:error] [pid 1034096:tid 1034260] [client 20.100.175.163:29761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/theme.php"] [unique_id "apK9xy04twRPFuquKD2_jQAAAI4"]
[Sat Aug 29 05:08:55.631303 2026] [security2:error] [pid 1034096:tid 1034124] [remote 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK9xy04twRPFuquKD2_kAAAnwI"]
[Sat Aug 29 05:08:55.631509 2026] [security2:error] [pid 1034096:tid 1034277] [client 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK9xy04twRPFuquKD2_kAAAnwI"]
[Sat Aug 29 05:08:55.648478 2026] [security2:error] [pid 1041789:tid 1041954] [client 68.155.159.216:33565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK9x4v3RhPI65jTFG7X0AAAAzU"]
[Sat Aug 29 05:08:55.659179 2026] [security2:error] [pid 1034096:tid 1034359] [client 20.197.61.180:12738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/al.php"] [unique_id "apK9xy04twRPFuquKD2_lgAAAPE"]
[Sat Aug 29 05:08:55.685742 2026] [security2:error] [pid 1041789:tid 1041951] [client 40.83.93.50:20821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-content/cache/min/1/wp-content/admin.php"] [unique_id "apK9x4v3RhPI65jTFG7X0QAAAzI"]
[Sat Aug 29 05:08:55.688990 2026] [security2:error] [pid 1041789:tid 1041964] [client 20.197.61.180:1276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/room.php"] [unique_id "apK9x4v3RhPI65jTFG7X0gAAAz8"]
[Sat Aug 29 05:08:55.690017 2026] [security2:error] [pid 1034096:tid 1034294] [client 20.104.104.62:43074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/rfi.php"] [unique_id "apK9xy04twRPFuquKD2_lwAAALA"]
[Sat Aug 29 05:08:55.692880 2026] [security2:error] [pid 1041789:tid 1042020] [client 45.125.67.3:48306] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/login-as-users/readme.txt"] [unique_id "apK9x4v3RhPI65jTFG7X0wAAA3c"]
[Sat Aug 29 05:08:55.711300 2026] [security2:error] [pid 1034096:tid 1034328] [client 68.155.159.216:33738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/classwithtostring.php"] [unique_id "apK9xy04twRPFuquKD2_mAAAANI"]
[Sat Aug 29 05:08:55.713590 2026] [security2:error] [pid 1041789:tid 1042007] [client 20.104.104.62:2477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/sef.php"] [unique_id "apK9x4v3RhPI65jTFG7X1AAAA2o"]
[Sat Aug 29 05:08:55.714420 2026] [security2:error] [pid 1034096:tid 1034369] [client 4.205.62.107:6471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/xda.php"] [unique_id "apK9xy04twRPFuquKD2_mQAAAPs"]
[Sat Aug 29 05:08:55.741953 2026] [security2:error] [pid 1041789:tid 1042033] [client 4.205.62.107:62971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/aws-credentials.php"] [unique_id "apK9x4v3RhPI65jTFG7X1gAAA4Q"]
[Sat Aug 29 05:08:55.742532 2026] [security2:error] [pid 1034096:tid 1034314] [client 20.104.104.62:40078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/grsiuk.php"] [unique_id "apK9xy04twRPFuquKD2_mgAAAMQ"]
[Sat Aug 29 05:08:55.744158 2026] [security2:error] [pid 1034096:tid 1034358] [client 158.23.147.79:49950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK9xy04twRPFuquKD2_mwAAAPA"]
[Sat Aug 29 05:08:55.755509 2026] [security2:error] [pid 1041789:tid 1042037] [client 20.151.200.44:63909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/horeg.php"] [unique_id "apK9x4v3RhPI65jTFG7X1wAAA4g"]
[Sat Aug 29 05:08:55.757330 2026] [security2:error] [pid 1041789:tid 1042053] [client 158.23.147.79:11272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apK9x4v3RhPI65jTFG7X2AAAA5g"]
[Sat Aug 29 05:08:55.764227 2026] [security2:error] [pid 1041789:tid 1041943] [client 20.196.209.81:11827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/update.php"] [unique_id "apK9x4v3RhPI65jTFG7X2QAAAyo"]
[Sat Aug 29 05:08:55.765411 2026] [security2:error] [pid 1034096:tid 1034349] [client 158.158.54.35:34657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/storage/rip.php"] [unique_id "apK9xy04twRPFuquKD2_nQAAAOc"]
[Sat Aug 29 05:08:55.772102 2026] [security2:error] [pid 1034096:tid 1034362] [client 20.240.128.207:7373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "apK9xy04twRPFuquKD2_ngAAAPQ"]
[Sat Aug 29 05:08:55.772855 2026] [security2:error] [pid 1041789:tid 1041965] [client 4.205.62.107:65421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/kedi.php"] [unique_id "apK9x4v3RhPI65jTFG7X2gAAA0A"]
[Sat Aug 29 05:08:55.820684 2026] [security2:error] [pid 1041789:tid 1041982] [client 74.248.24.12:37827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK9x4v3RhPI65jTFG7X3AAAA1E"]
[Sat Aug 29 05:08:55.822343 2026] [security2:error] [pid 1034096:tid 1034316] [client 52.139.37.240:12521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9xy04twRPFuquKD2_nwAAAMY"]
[Sat Aug 29 05:08:55.832067 2026] [security2:error] [pid 1034096:tid 1034303] [client 20.104.104.62:43110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/tajj.php"] [unique_id "apK9xy04twRPFuquKD2_oAAAALk"]
[Sat Aug 29 05:08:55.846305 2026] [security2:error] [pid 1034096:tid 1034272] [client 93.123.109.228:51406] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK9xy04twRPFuquKD2_owAAAJo"]
[Sat Aug 29 05:08:55.851651 2026] [security2:error] [pid 1034096:tid 1034255] [client 20.104.104.62:53878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/admin123.php"] [unique_id "apK9xy04twRPFuquKD2_pQAAAIk"]
[Sat Aug 29 05:08:55.853239 2026] [security2:error] [pid 1041789:tid 1042029] [client 93.123.109.228:51390] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(\\\\/\\\\*\\\\!? ?(?:select|grant|delete|insert|drop|alter|replace|truncate|update|create|rename|describe|union|concat|group_concat))" at REQUEST_FILENAME. [file "/opt/mod_security/hg_rules.conf"] [line "1019"] [id "9000042"] [rev "2.2.2"] [msg "SQL Comment Sequence Detected."] [data "/*update"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/*update.cgi*"] [unique_id "apK9x4v3RhPI65jTFG7X4AAAA4A"]
[Sat Aug 29 05:08:55.854131 2026] [security2:error] [pid 1041789:tid 1042026] [client 31.77.204.227:53472] ModSecurity: Access denied with code 406 (phase 1). IPmatchFromFile: "31.77.204.227" matched at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1090"] [id "999022"] [msg "Blacklisted IP Address for POST data StopForumSpam List"] [hostname "vatecreative.com"] [uri "/wp-comments-post.php"] [unique_id "apK9x4v3RhPI65jTFG7X4gAAA30"], referer: https://vatecreative.com/hello-world/
[Sat Aug 29 05:08:55.854226 2026] [security2:error] [pid 1041789:tid 1042026] [client 31.77.204.227:53472] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "406"] [hostname "vatecreative.com"] [uri "/wp-comments-post.php"] [unique_id "apK9x4v3RhPI65jTFG7X4gAAA30"], referer: https://vatecreative.com/hello-world/
[Sat Aug 29 05:08:55.854706 2026] [security2:error] [pid 1041789:tid 1041950] [client 4.205.62.107:51458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/abcd.php"] [unique_id "apK9x4v3RhPI65jTFG7X4wAAAzE"]
[Sat Aug 29 05:08:55.863744 2026] [security2:error] [pid 1041789:tid 1042049] [client 20.48.251.3:14058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/olfclass.php"] [unique_id "apK9x4v3RhPI65jTFG7X5AAAA5Q"]
[Sat Aug 29 05:08:55.882934 2026] [security2:error] [pid 1034096:tid 1034268] [client 20.104.104.62:40076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/ahy66.php"] [unique_id "apK9xy04twRPFuquKD2_qAAAAJY"]
[Sat Aug 29 05:08:55.901805 2026] [security2:error] [pid 1034096:tid 1034335] [client 103.185.242.143:54125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK9xy04twRPFuquKD2_qwAAANk"]
[Sat Aug 29 05:08:55.901910 2026] [security2:error] [pid 1034096:tid 1034335] [client 103.185.242.143:54125] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK9xy04twRPFuquKD2_qwAAANk"]
[Sat Aug 29 05:08:55.910848 2026] [security2:error] [pid 1041789:tid 1041957] [client 158.23.147.79:53818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK9x4v3RhPI65jTFG7X5gAAAzg"]
[Sat Aug 29 05:08:55.940713 2026] [security2:error] [pid 1034096:tid 1034353] [client 93.123.109.228:49240] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/back-api/.env"] [unique_id "apK9xy04twRPFuquKD2_rQAAAOs"]
[Sat Aug 29 05:08:55.942407 2026] [security2:error] [pid 1034096:tid 1034252] [client 20.220.204.93:64175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9xy04twRPFuquKD2_rgAAAIY"]
[Sat Aug 29 05:08:55.946502 2026] [security2:error] [pid 1034096:tid 1034297] [client 93.123.109.228:49254] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/back-end/.env"] [unique_id "apK9xy04twRPFuquKD2_rwAAALM"]
[Sat Aug 29 05:08:55.949559 2026] [security2:error] [pid 1041789:tid 1041967] [client 93.123.109.228:49230] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/back/.env"] [unique_id "apK9x4v3RhPI65jTFG7X6AAAA0I"]
[Sat Aug 29 05:08:55.950785 2026] [security2:error] [pid 1041789:tid 1041988] [client 93.123.109.228:51448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK9x4v3RhPI65jTFG7X6QAAA1c"]
[Sat Aug 29 05:08:55.952332 2026] [security2:error] [pid 1034096:tid 1034283] [client 20.151.200.44:63901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/basic.php"] [unique_id "apK9xy04twRPFuquKD2_sQAAAKU"]
[Sat Aug 29 05:08:55.953364 2026] [security2:error] [pid 1041789:tid 1041987] [client 93.123.109.228:49218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/backend-api/.env"] [unique_id "apK9x4v3RhPI65jTFG7X6wAAA1Y"]
[Sat Aug 29 05:08:55.956532 2026] [security2:error] [pid 1041789:tid 1041981] [client 40.83.93.50:11957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/dxc.php"] [unique_id "apK9x4v3RhPI65jTFG7X7AAAA1A"]
[Sat Aug 29 05:08:55.966088 2026] [security2:error] [pid 1034096:tid 1034277] [client 20.104.104.62:42848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/grsiuk.php"] [unique_id "apK9xy04twRPFuquKD2_sgAAAJ8"]
[Sat Aug 29 05:08:55.982630 2026] [security2:error] [pid 1034096:tid 1034302] [client 40.83.93.50:12529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/meta.php"] [unique_id "apK9xy04twRPFuquKD2_wwAAALg"]
[Sat Aug 29 05:08:55.985118 2026] [security2:error] [pid 1034096:tid 1034278] [client 93.123.109.228:49200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK9xy04twRPFuquKD2_xAAAAKA"]
[Sat Aug 29 05:08:55.998662 2026] [security2:error] [pid 1041789:tid 1041995] [client 20.104.104.62:65258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/7h.php"] [unique_id "apK9x4v3RhPI65jTFG7X7QAAA14"]
[Sat Aug 29 05:08:56.003179 2026] [security2:error] [pid 1041789:tid 1041977] [client 20.104.104.62:20718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/licensi.php"] [unique_id "apK9yIv3RhPI65jTFG7X7gAAA0w"]
[Sat Aug 29 05:08:56.004878 2026] [security2:error] [pid 1041789:tid 1042000] [client 4.205.62.107:53299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-access.php"] [unique_id "apK9yIv3RhPI65jTFG7X7wAAA2M"]
[Sat Aug 29 05:08:56.005955 2026] [security2:error] [pid 1034096:tid 1034356] [client 20.63.219.114:10141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/csv.php"] [unique_id "apK9yC04twRPFuquKD2_xQAAAO4"]
[Sat Aug 29 05:08:56.013245 2026] [security2:error] [pid 1034096:tid 1034359] [client 20.104.104.62:37667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/gaje.php"] [unique_id "apK9yC04twRPFuquKD2_xwAAAPE"]
[Sat Aug 29 05:08:56.030086 2026] [security2:error] [pid 1034096:tid 1034377] [client 146.70.36.124:51292] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "narrowgate-electrical.com"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "apK9yC04twRPFuquKD2_ygAAAQM"]
[Sat Aug 29 05:08:56.036494 2026] [security2:error] [pid 1034096:tid 1034369] [client 20.48.251.3:33330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/btx25.php"] [unique_id "apK9yC04twRPFuquKD2_ywAAAPs"]
[Sat Aug 29 05:08:56.080862 2026] [security2:error] [pid 1041789:tid 1041960] [client 20.220.204.93:62275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9yIv3RhPI65jTFG7X8gAAAzs"]
[Sat Aug 29 05:08:56.080994 2026] [security2:error] [pid 1034096:tid 1034301] [client 45.125.67.3:45134] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/job-board-light/readme.txt"] [unique_id "apK9yC04twRPFuquKD2_1QAAALc"]
[Sat Aug 29 05:08:56.086663 2026] [security2:error] [pid 1034096:tid 1034265] [client 52.139.37.240:12924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/wp-index.php"] [unique_id "apK9yC04twRPFuquKD2_1gAAAJM"]
[Sat Aug 29 05:08:56.092654 2026] [security2:error] [pid 1034096:tid 1034355] [client 45.125.67.3:45174] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/wp-user-frontend/readme.txt"] [unique_id "apK9yC04twRPFuquKD2_2AAAAO0"]
[Sat Aug 29 05:08:56.092654 2026] [security2:error] [pid 1034096:tid 1034342] [client 45.125.67.3:45152] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/uipress-lite/readme.txt"] [unique_id "apK9yC04twRPFuquKD2_1wAAAOA"]
[Sat Aug 29 05:08:56.096143 2026] [security2:error] [pid 1034096:tid 1034267] [client 45.125.67.3:45118] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/aikit-wordpress-ai-writing-assistant-using-gpt3/readme.txt"] [unique_id "apK9yC04twRPFuquKD2_2QAAAJU"]
[Sat Aug 29 05:08:56.098732 2026] [security2:error] [pid 1034096:tid 1034290] [client 20.104.104.62:43338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/ahy66.php"] [unique_id "apK9yC04twRPFuquKD2_2wAAAKw"]
[Sat Aug 29 05:08:56.104409 2026] [security2:error] [pid 1041789:tid 1042044] [client 158.23.147.79:17652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK9yIv3RhPI65jTFG7X9QAAA48"]
[Sat Aug 29 05:08:56.105987 2026] [security2:error] [pid 1034096:tid 1034322] [client 20.100.175.163:1227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/classwithtostring.php"] [unique_id "apK9yC04twRPFuquKD2_3AAAAMw"]
[Sat Aug 29 05:08:56.108540 2026] [security2:error] [pid 1034096:tid 1034363] [client 45.125.67.3:45122] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/import-xml-feed/readme.txt"] [unique_id "apK9yC04twRPFuquKD2_3gAAAPU"]
[Sat Aug 29 05:08:56.108540 2026] [security2:error] [pid 1034096:tid 1034275] [client 45.125.67.3:45128] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/woocommerce-simple-registration/readme.txt"] [unique_id "apK9yC04twRPFuquKD2_3QAAAJ0"]
[Sat Aug 29 05:08:56.109107 2026] [security2:error] [pid 1034096:tid 1034373] [client 45.125.67.3:45136] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/last-viewed-posts/readme.txt"] [unique_id "apK9yC04twRPFuquKD2_3wAAAP8"]
[Sat Aug 29 05:08:56.115981 2026] [security2:error] [pid 1041789:tid 1042016] [client 45.125.67.3:45108] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/woozone/readme.txt"] [unique_id "apK9yIv3RhPI65jTFG7X9wAAA3M"]
[Sat Aug 29 05:08:56.131313 2026] [security2:error] [pid 1034096:tid 1034352] [client 45.125.67.3:45280] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/woolementor/readme.txt"] [unique_id "apK9yC04twRPFuquKD2_4gAAAOo"]
[Sat Aug 29 05:08:56.131314 2026] [security2:error] [pid 1041789:tid 1042006] [client 45.125.67.3:45248] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/user-activity-log/readme.txt"] [unique_id "apK9yIv3RhPI65jTFG7X-AAAA2k"]
[Sat Aug 29 05:08:56.131322 2026] [security2:error] [pid 1041789:tid 1042005] [client 45.125.67.3:45114] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/shariff/readme.txt"] [unique_id "apK9yIv3RhPI65jTFG7X-QAAA2g"]
[Sat Aug 29 05:08:56.131330 2026] [security2:error] [pid 1041789:tid 1041969] [client 45.125.67.3:45228] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/insert-php/readme.txt"] [unique_id "apK9yIv3RhPI65jTFG7X-wAAA0Q"]
[Sat Aug 29 05:08:56.131345 2026] [security2:error] [pid 1041789:tid 1041973] [client 45.125.67.3:45204] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/indeed-membership-pro/readme.txt"] [unique_id "apK9yIv3RhPI65jTFG7X-gAAA0g"]
[Sat Aug 29 05:08:56.131379 2026] [security2:error] [pid 1034096:tid 1034317] [client 45.125.67.3:45214] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/phpsword-favicon-manager/readme.txt"] [unique_id "apK9yC04twRPFuquKD2_4wAAAMc"]
[Sat Aug 29 05:08:56.131390 2026] [security2:error] [pid 1034096:tid 1034282] [client 45.125.67.3:45056] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/edd-recent-purchases/readme.txt"] [unique_id "apK9yC04twRPFuquKD2_5AAAAKQ"]
[Sat Aug 29 05:08:56.131401 2026] [security2:error] [pid 1041789:tid 1042009] [client 45.125.67.3:45090] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/stm-megamenu/readme.txt"] [unique_id "apK9yIv3RhPI65jTFG7X_AAAA2w"]
[Sat Aug 29 05:08:56.131619 2026] [security2:error] [pid 1041789:tid 1041962] [client 45.125.67.3:45300] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/sp-client-document-manager/readme.txt"] [unique_id "apK9yIv3RhPI65jTFG7X_QAAAz0"]
[Sat Aug 29 05:08:56.131645 2026] [security2:error] [pid 1034096:tid 1034371] [client 45.125.67.3:45238] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/disable-comments-wpz/readme.txt"] [unique_id "apK9yC04twRPFuquKD2_5QAAAP0"]
[Sat Aug 29 05:08:56.131645 2026] [security2:error] [pid 1034096:tid 1034310] [client 45.125.67.3:45250] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/greenshiftwoo/readme.txt"] [unique_id "apK9yC04twRPFuquKD2_5gAAAMA"]
[Sat Aug 29 05:08:56.131822 2026] [security2:error] [pid 1034096:tid 1034306] [client 45.125.67.3:48326] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/auto-poster/readme.txt"] [unique_id "apK9yC04twRPFuquKD2_5wAAALw"]
[Sat Aug 29 05:08:56.131957 2026] [security2:error] [pid 1041789:tid 1042019] [client 45.125.67.3:45190] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/purple-xmls-google-product-feed-for-woocommerce/readme.txt"] [unique_id "apK9yIv3RhPI65jTFG7X_gAAA3Y"]
[Sat Aug 29 05:08:56.133751 2026] [security2:error] [pid 1041789:tid 1041935] [client 45.125.67.3:45078] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/mailster/readme.txt"] [unique_id "apK9yIv3RhPI65jTFG7X_wAAAyI"]
[Sat Aug 29 05:08:56.135567 2026] [security2:error] [pid 1041789:tid 1042011] [client 20.104.104.62:62923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/wp-gzone.php"] [unique_id "apK9yIv3RhPI65jTFG7YAAAAA24"]
[Sat Aug 29 05:08:56.141221 2026] [security2:error] [pid 1034096:tid 1034365] [client 45.125.67.3:45302] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/bp-cover/readme.txt"] [unique_id "apK9yC04twRPFuquKD2_6AAAAPc"]
[Sat Aug 29 05:08:56.142546 2026] [security2:error] [pid 1034096:tid 1034253] [client 45.125.67.3:45288] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/enl-newsletter/readme.txt"] [unique_id "apK9yC04twRPFuquKD2_6QAAAIc"]
[Sat Aug 29 05:08:56.142546 2026] [security2:error] [pid 1034096:tid 1034321] [client 45.125.67.3:45252] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/cost-calculator-builder/readme.txt"] [unique_id "apK9yC04twRPFuquKD2_6gAAAMs"]
[Sat Aug 29 05:08:56.143544 2026] [security2:error] [pid 1041789:tid 1041991] [client 45.125.67.3:45096] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/woocommerce-multilingual/readme.txt"] [unique_id "apK9yIv3RhPI65jTFG7YAQAAA1o"]
[Sat Aug 29 05:08:56.148657 2026] [security2:error] [pid 1034096:tid 1034316] [client 20.104.104.62:40098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/wp-admin/zwso.php"] [unique_id "apK9yC04twRPFuquKD2_6wAAAMY"]
[Sat Aug 29 05:08:56.165551 2026] [security2:error] [pid 1034096:tid 1034291] [client 40.83.93.50:13607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-content/classwithtostring.php"] [unique_id "apK9yC04twRPFuquKD2_7AAAAK0"]
[Sat Aug 29 05:08:56.168040 2026] [security2:error] [pid 1034096:tid 1034325] [client 20.151.200.44:64519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/monso.php"] [unique_id "apK9yC04twRPFuquKD2_7QAAAM8"]
[Sat Aug 29 05:08:56.168151 2026] [security2:error] [pid 1034096:tid 1034346] [client 45.125.67.3:45266] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/unite-gallery-lite/readme.txt"] [unique_id "apK9yC04twRPFuquKD2_7gAAAOQ"]
[Sat Aug 29 05:08:56.168192 2026] [security2:error] [pid 1034096:tid 1034376] [client 45.125.67.3:45276] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/compute-links/readme.txt"] [unique_id "apK9yC04twRPFuquKD2_7wAAAQI"]
[Sat Aug 29 05:08:56.168567 2026] [security2:error] [pid 1041789:tid 1042034] [client 45.125.67.3:45246] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/newspack-blocks/readme.txt"] [unique_id "apK9yIv3RhPI65jTFG7YAwAAA4U"]
[Sat Aug 29 05:08:56.182078 2026] [security2:error] [pid 1034096:tid 1034340] [client 93.123.109.228:51372] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/.env"] [unique_id "apK9yC04twRPFuquKD2_8QAAAN4"]
[Sat Aug 29 05:08:56.185839 2026] [security2:error] [pid 1034096:tid 1034292] [client 45.125.67.3:45304] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/wpdatatables/readme.txt"] [unique_id "apK9yC04twRPFuquKD2_8gAAAK4"]
[Sat Aug 29 05:08:56.189535 2026] [security2:error] [pid 1034096:tid 1034349] [client 20.196.209.81:1851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/blog.php"] [unique_id "apK9yC04twRPFuquKD2_8wAAAOc"]
[Sat Aug 29 05:08:56.192551 2026] [security2:error] [pid 1034096:tid 1034332] [client 4.205.62.107:21849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/aws.php"] [unique_id "apK9yC04twRPFuquKD2_9QAAANY"]
[Sat Aug 29 05:08:56.195137 2026] [security2:error] [pid 1034096:tid 1034308] [client 93.123.109.228:51416] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/laravel/app/.env"] [unique_id "apK9yC04twRPFuquKD2_9gAAAL4"]
[Sat Aug 29 05:08:56.213265 2026] [security2:error] [pid 1041789:tid 1042021] [client 158.158.54.35:31537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/zoom1.php"] [unique_id "apK9yIv3RhPI65jTFG7YBwAAA3g"]
[Sat Aug 29 05:08:56.215477 2026] [security2:error] [pid 1034096:tid 1034300] [client 158.23.147.79:6032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/admin.php"] [unique_id "apK9yC04twRPFuquKD2_-AAAALY"]
[Sat Aug 29 05:08:56.215936 2026] [security2:error] [pid 1041789:tid 1041934] [client 20.220.204.93:62284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/ff1.php"] [unique_id "apK9yIv3RhPI65jTFG7YCAAAAyE"]
[Sat Aug 29 05:08:56.236777 2026] [security2:error] [pid 1041789:tid 1041959] [client 20.104.49.130:63587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/f35.update.php"] [unique_id "apK9yIv3RhPI65jTFG7YCwAAAzo"]
[Sat Aug 29 05:08:56.242334 2026] [security2:error] [pid 1041789:tid 1041986] [client 20.104.104.62:42860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/gaje.php"] [unique_id "apK9yIv3RhPI65jTFG7YDQAAA1U"]
[Sat Aug 29 05:08:56.248548 2026] [security2:error] [pid 1041789:tid 1042031] [client 20.48.251.3:14055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/app_dev.php"] [unique_id "apK9yIv3RhPI65jTFG7YDgAAA4I"]
[Sat Aug 29 05:08:56.252630 2026] [security2:error] [pid 1041789:tid 1041940] [client 20.197.61.180:2003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/contentloader1.php"] [unique_id "apK9yIv3RhPI65jTFG7YDwAAAyc"]
[Sat Aug 29 05:08:56.265464 2026] [security2:error] [pid 1034096:tid 1034339] [client 20.240.128.207:27169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "apK9yC04twRPFuquKD2_-QAAAN0"]
[Sat Aug 29 05:08:56.276978 2026] [security2:error] [pid 1034096:tid 1034309] [client 45.125.67.3:45160] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/woocommerce-openpos/readme.txt"] [unique_id "apK9yC04twRPFuquKD2_-gAAAL8"]
[Sat Aug 29 05:08:56.277329 2026] [security2:error] [pid 1041789:tid 1042012] [client 20.104.104.62:2448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/str.php"] [unique_id "apK9yIv3RhPI65jTFG7YEAAAA28"]
[Sat Aug 29 05:08:56.284420 2026] [security2:error] [pid 1034096:tid 1034297] [client 93.123.109.228:49200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/backup/.env"] [unique_id "apK9yC04twRPFuquKD2__AAAALM"]
[Sat Aug 29 05:08:56.284952 2026] [security2:error] [pid 1041789:tid 1042027] [client 52.139.37.240:12903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/ww2.php"] [unique_id "apK9yIv3RhPI65jTFG7YEQAAA34"]
[Sat Aug 29 05:08:56.292897 2026] [security2:error] [pid 1034096:tid 1034263] [client 93.123.109.228:51446] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK9yC04twRPFuquKD2__QAAAJE"]
[Sat Aug 29 05:08:56.295239 2026] [security2:error] [pid 1041789:tid 1042040] [client 45.125.67.3:45054] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/paid-memberships-pro/readme.txt"] [unique_id "apK9yIv3RhPI65jTFG7YEgAAA4s"]
[Sat Aug 29 05:08:56.306856 2026] [security2:error] [pid 1041789:tid 1042020] [client 20.104.104.62:40125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/Contrller.php"] [unique_id "apK9yIv3RhPI65jTFG7YEwAAA3c"]
[Sat Aug 29 05:08:56.309624 2026] [security2:error] [pid 1034096:tid 1034303] [client 4.232.148.111:35807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/ws.php"] [unique_id "apK9yC04twRPFuquKD2__gAAALk"]
[Sat Aug 29 05:08:56.318410 2026] [security2:error] [pid 1041789:tid 1042056] [client 45.125.67.3:45130] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/school-management-pro/readme.txt"] [unique_id "apK9yIv3RhPI65jTFG7YFAAAA5s"]
[Sat Aug 29 05:08:56.320976 2026] [security2:error] [pid 1041789:tid 1042036] [client 74.248.24.12:37845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-good.php"] [unique_id "apK9yIv3RhPI65jTFG7YFQAAA4c"]
[Sat Aug 29 05:08:56.340617 2026] [security2:error] [pid 1034096:tid 1034356] [client 158.23.147.79:6052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-admin/dropdown.php"] [unique_id "apK9yC04twRPFuquKD2__wAAAO4"]
[Sat Aug 29 05:08:56.349436 2026] [security2:error] [pid 1034096:tid 1034359] [client 93.123.109.228:49240] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/be/.env"] [unique_id "apK9yC04twRPFuquKD3AAAAAAPE"]
[Sat Aug 29 05:08:56.360453 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.220.204.93:64179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/t.php"] [unique_id "apK9yIv3RhPI65jTFG7YGAAAA2Q"]
[Sat Aug 29 05:08:56.389763 2026] [security2:error] [pid 1041789:tid 1042013] [client 20.104.104.62:42852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/wp-admin/zwso.php"] [unique_id "apK9yIv3RhPI65jTFG7YGgAAA3A"]
[Sat Aug 29 05:08:56.391000 2026] [security2:error] [pid 1034096:tid 1034327] [client 20.197.61.180:12763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/global.php"] [unique_id "apK9yC04twRPFuquKD3ABAAAANE"]
[Sat Aug 29 05:08:56.400698 2026] [security2:error] [pid 1034096:tid 1034358] [client 93.123.109.228:51452] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/.env.backup"] [unique_id "apK9yC04twRPFuquKD3ABQAAAPA"]
[Sat Aug 29 05:08:56.413221 2026] [security2:error] [pid 1041789:tid 1042041] [client 20.63.219.114:10138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/fox.php"] [unique_id "apK9yIv3RhPI65jTFG7YHAAAA4w"]
[Sat Aug 29 05:08:56.426566 2026] [security2:error] [pid 1034096:tid 1034304] [client 20.197.61.180:2013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/class-wp-cmd.php"] [unique_id "apK9yC04twRPFuquKD3ABgAAALo"]
[Sat Aug 29 05:08:56.426566 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.104.104.62:63027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/mega.php"] [unique_id "apK9yIv3RhPI65jTFG7YHgAAA30"]
[Sat Aug 29 05:08:56.444181 2026] [security2:error] [pid 1041789:tid 1041951] [client 40.83.93.50:11940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/wp-2019.php"] [unique_id "apK9yIv3RhPI65jTFG7YHwAAAzI"]
[Sat Aug 29 05:08:56.445051 2026] [security2:error] [pid 1041789:tid 1041968] [client 20.104.104.62:37642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/Zeiss.php"] [unique_id "apK9yIv3RhPI65jTFG7YIAAAA0M"]
[Sat Aug 29 05:08:56.477389 2026] [security2:error] [pid 1041789:tid 1041964] [client 40.83.93.50:12500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/dxc.php"] [unique_id "apK9yIv3RhPI65jTFG7YIQAAAz8"]
[Sat Aug 29 05:08:56.483272 2026] [security2:error] [pid 1041789:tid 1042029] [client 52.139.37.240:12303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/7logs.php"] [unique_id "apK9yIv3RhPI65jTFG7YIwAAA4A"]
[Sat Aug 29 05:08:56.490655 2026] [security2:error] [pid 1034096:tid 1034286] [client 20.220.204.93:64136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/erty.php"] [unique_id "apK9yC04twRPFuquKD3ABwAAAKg"]
[Sat Aug 29 05:08:56.493863 2026] [security2:error] [pid 1041789:tid 1042018] [client 20.48.251.3:14037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/infos.php"] [unique_id "apK9yIv3RhPI65jTFG7YJAAAA3U"]
[Sat Aug 29 05:08:56.526112 2026] [security2:error] [pid 1034096:tid 1034355] [client 20.104.104.62:41929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/Contrller.php"] [unique_id "apK9yC04twRPFuquKD3ACQAAAO0"]
[Sat Aug 29 05:08:56.529640 2026] [security2:error] [pid 1034096:tid 1034267] [client 93.123.109.228:49200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/beta/.env"] [unique_id "apK9yC04twRPFuquKD3ACwAAAJU"]
[Sat Aug 29 05:08:56.554679 2026] [security2:error] [pid 1034096:tid 1034370] [client 4.205.62.107:8739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/phpi.php"] [unique_id "apK9yC04twRPFuquKD3ADQAAAPw"]
[Sat Aug 29 05:08:56.560081 2026] [security2:error] [pid 1034096:tid 1034363] [client 93.123.109.228:51438] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/.env.bak"] [unique_id "apK9yC04twRPFuquKD3ADgAAAPU"]
[Sat Aug 29 05:08:56.560566 2026] [security2:error] [pid 1034096:tid 1034373] [client 20.104.104.62:65250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/ww3.php"] [unique_id "apK9yC04twRPFuquKD3ADwAAAP8"]
[Sat Aug 29 05:08:56.577753 2026] [security2:error] [pid 1034096:tid 1034344] [client 20.104.104.62:40090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/ww2.php"] [unique_id "apK9yC04twRPFuquKD3AEAAAAOI"]
[Sat Aug 29 05:08:56.593270 2026] [security2:error] [pid 1034096:tid 1034314] [client 31.77.204.227:53512] ModSecurity: Access denied with code 406 (phase 1). IPmatchFromFile: "31.77.204.227" matched at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1090"] [id "999022"] [msg "Blacklisted IP Address for POST data StopForumSpam List"] [hostname "vatecreative.com"] [uri "/wp-comments-post.php"] [unique_id "apK9yC04twRPFuquKD3AEwAAAMQ"], referer: https://vatecreative.com/hello-world/
[Sat Aug 29 05:08:56.593365 2026] [security2:error] [pid 1034096:tid 1034314] [client 31.77.204.227:53512] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "406"] [hostname "vatecreative.com"] [uri "/wp-comments-post.php"] [unique_id "apK9yC04twRPFuquKD3AEwAAAMQ"], referer: https://vatecreative.com/hello-world/
[Sat Aug 29 05:08:56.598654 2026] [security2:error] [pid 1034096:tid 1034310] [client 20.104.104.62:20811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/Marvins.php"] [unique_id "apK9yC04twRPFuquKD3AFQAAAMA"]
[Sat Aug 29 05:08:56.617263 2026] [security2:error] [pid 1041789:tid 1042025] [client 20.100.175.163:29784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/news.php"] [unique_id "apK9yIv3RhPI65jTFG7YLAAAA3w"]
[Sat Aug 29 05:08:56.620165 2026] [security2:error] [pid 1041789:tid 1041939] [client 146.70.36.124:51304] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "narrowgate-electrical.com"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "apK9yIv3RhPI65jTFG7YLQAAAyY"]
[Sat Aug 29 05:08:56.622234 2026] [security2:error] [pid 1034096:tid 1034253] [client 20.48.251.3:13998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/env.php"] [unique_id "apK9yC04twRPFuquKD3AFgAAAIc"]
[Sat Aug 29 05:08:56.629203 2026] [security2:error] [pid 1034096:tid 1034361] [client 20.220.204.93:61797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/0x.php"] [unique_id "apK9yC04twRPFuquKD3AFwAAAPM"]
[Sat Aug 29 05:08:56.638994 2026] [security2:error] [pid 1034096:tid 1034272] [client 20.151.200.44:63266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/rce.php"] [unique_id "apK9yC04twRPFuquKD3AGAAAAJo"]
[Sat Aug 29 05:08:56.643099 2026] [security2:error] [pid 1041789:tid 1041994] [client 40.83.93.50:16660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-content/config.php"] [unique_id "apK9yIv3RhPI65jTFG7YLwAAA10"]
[Sat Aug 29 05:08:56.663077 2026] [security2:error] [pid 1034096:tid 1034273] [client 20.104.104.62:43330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/Zeiss.php"] [unique_id "apK9yC04twRPFuquKD3AGwAAAJs"]
[Sat Aug 29 05:08:56.665304 2026] [security2:error] [pid 1034096:tid 1034296] [client 158.158.54.35:34680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/txets.php"] [unique_id "apK9yC04twRPFuquKD3AHAAAALI"]
[Sat Aug 29 05:08:56.676252 2026] [http2:warn] [pid 1018003:tid 1018249] [client 57.141.14.32:35046] h2_stream(1018003-215-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:08:56.678033 2026] [security2:error] [pid 1034096:tid 1034365] [client 52.139.37.240:12890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/ac.php"] [unique_id "apK9yC04twRPFuquKD3AHgAAAPc"]
[Sat Aug 29 05:08:56.690142 2026] [security2:error] [pid 1034096:tid 1034349] [client 20.104.104.62:53831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/sko.php"] [unique_id "apK9yC04twRPFuquKD3AHwAAAOc"]
[Sat Aug 29 05:08:56.707540 2026] [autoindex:error] [pid 1034096:tid 1034315] [client 169.58.198.242:58579] AH01276: Cannot serve directory /var/www/html/.well-known/: No matching DirectoryIndex (index.cgi,index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Aug 29 05:08:56.708421 2026] [security2:error] [pid 1034096:tid 1034307] [client 20.104.104.62:37693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/anz.php"] [unique_id "apK9yC04twRPFuquKD3AIQAAAL0"]
[Sat Aug 29 05:08:56.713895 2026] [security2:error] [pid 1034096:tid 1034351] [client 20.196.209.81:11795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/bypass.php"] [unique_id "apK9yC04twRPFuquKD3AIgAAAOk"]
[Sat Aug 29 05:08:56.722307 2026] [security2:error] [pid 1034096:tid 1034325] [client 52.139.37.240:1871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jaimiegellerjewelry.com"] [uri "/aged.php"] [unique_id "apK9yC04twRPFuquKD3AIwAAAM8"]
[Sat Aug 29 05:08:56.741726 2026] [security2:error] [pid 1034096:tid 1034252] [client 20.104.49.130:60964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/term.php"] [unique_id "apK9yC04twRPFuquKD3AJAAAAIY"]
[Sat Aug 29 05:08:56.751646 2026] [security2:error] [pid 1034096:tid 1034309] [client 20.48.251.3:33309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/xve22.php"] [unique_id "apK9yC04twRPFuquKD3AJQAAAL8"]
[Sat Aug 29 05:08:56.763877 2026] [security2:error] [pid 1034096:tid 1034371] [client 20.240.128.207:27143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/gifclass.php"] [unique_id "apK9yC04twRPFuquKD3AJwAAAP0"]
[Sat Aug 29 05:08:56.774940 2026] [security2:error] [pid 1034096:tid 1034262] [client 93.123.109.228:51452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/.env.php"] [unique_id "apK9yC04twRPFuquKD3AKQAAAJA"]
[Sat Aug 29 05:08:56.786913 2026] [security2:error] [pid 1034096:tid 1034316] [client 4.232.148.111:30978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-themes.php"] [unique_id "apK9yC04twRPFuquKD3AKwAAAMY"]
[Sat Aug 29 05:08:56.796434 2026] [security2:error] [pid 1041789:tid 1042015] [client 213.202.253.4:64112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bv-place.com"] [uri "/schallfuns.php"] [unique_id "apK9yIv3RhPI65jTFG7YMwAAA3I"], referer: www.google.com
[Sat Aug 29 05:08:56.801976 2026] [security2:error] [pid 1034096:tid 1034359] [client 93.123.109.228:49130] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/client/.env"] [unique_id "apK9yC04twRPFuquKD3ALgAAAPE"]
[Sat Aug 29 05:08:56.813278 2026] [security2:error] [pid 1034096:tid 1034320] [client 20.104.104.62:42828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/ww2.php"] [unique_id "apK9yC04twRPFuquKD3AMAAAAMo"]
[Sat Aug 29 05:08:56.820036 2026] [security2:error] [pid 1034096:tid 1034271] [client 20.151.200.44:62634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/exec.php"] [unique_id "apK9yC04twRPFuquKD3AMQAAAJk"]
[Sat Aug 29 05:08:56.820221 2026] [security2:error] [pid 1034096:tid 1034332] [client 20.63.219.114:10121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/disagraeosc.php"] [unique_id "apK9yC04twRPFuquKD3AMgAAANY"]
[Sat Aug 29 05:08:56.827511 2026] [security2:error] [pid 1034096:tid 1034313] [client 20.104.104.62:53828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/zoz.php"] [unique_id "apK9yC04twRPFuquKD3AMwAAAMM"]
[Sat Aug 29 05:08:56.832369 2026] [security2:error] [pid 1034096:tid 1034312] [client 74.248.24.12:12798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "apK9yC04twRPFuquKD3ANAAAAMI"]
[Sat Aug 29 05:08:56.845705 2026] [security2:error] [pid 1034096:tid 1034318] [client 20.104.104.62:64318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/bge.php"] [unique_id "apK9yC04twRPFuquKD3ANgAAAMg"]
[Sat Aug 29 05:08:56.859568 2026] [security2:error] [pid 1034096:tid 1034286] [client 4.205.62.107:6917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/pinfo.php"] [unique_id "apK9yC04twRPFuquKD3ANwAAAKg"]
[Sat Aug 29 05:08:56.868801 2026] [security2:error] [pid 1034096:tid 1034301] [client 158.23.147.79:50152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK9yC04twRPFuquKD3AOAAAALc"]
[Sat Aug 29 05:08:56.876179 2026] [security2:error] [pid 1034096:tid 1034370] [client 4.205.62.107:62730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/4563.php"] [unique_id "apK9yC04twRPFuquKD3AOQAAAPw"]
[Sat Aug 29 05:08:56.880555 2026] [security2:error] [pid 1034096:tid 1034373] [client 20.48.251.3:13886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/06.php"] [unique_id "apK9yC04twRPFuquKD3AOgAAAP8"]
[Sat Aug 29 05:08:56.887258 2026] [security2:error] [pid 1041789:tid 1042019] [client 93.123.109.228:51480] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/.env.old"] [unique_id "apK9yIv3RhPI65jTFG7YNwAAA3Y"]
[Sat Aug 29 05:08:56.890140 2026] [security2:error] [pid 1034096:tid 1034358] [client 52.139.37.240:12444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/ctex1.php"] [unique_id "apK9yC04twRPFuquKD3AOwAAAPA"]
[Sat Aug 29 05:08:56.892369 2026] [security2:error] [pid 1034096:tid 1034319] [client 93.123.109.228:49240] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/cms/.env"] [unique_id "apK9yC04twRPFuquKD3APAAAAMk"]
[Sat Aug 29 05:08:56.898666 2026] [security2:error] [pid 1034096:tid 1034317] [client 20.220.204.93:62313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/66.php"] [unique_id "apK9yC04twRPFuquKD3APQAAAMc"]
[Sat Aug 29 05:08:56.900515 2026] [security2:error] [pid 1034096:tid 1034268] [client 180.190.5.40:39823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.5.190.180.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK9yC04twRPFuquKD3APgAAAJY"]
[Sat Aug 29 05:08:56.900605 2026] [security2:error] [pid 1034096:tid 1034268] [client 180.190.5.40:39823] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK9yC04twRPFuquKD3APgAAAJY"]
[Sat Aug 29 05:08:56.913881 2026] [security2:error] [pid 1034096:tid 1034282] [client 4.205.62.107:24967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/oc460l3x.php"] [unique_id "apK9yC04twRPFuquKD3AQAAAAKQ"]
[Sat Aug 29 05:08:56.914404 2026] [security2:error] [pid 1034096:tid 1034321] [client 158.23.147.79:11352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK9yC04twRPFuquKD3AQQAAAMs"]
[Sat Aug 29 05:08:56.915471 2026] [security2:error] [pid 1034096:tid 1034323] [client 52.139.37.240:1402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jaimiegellerjewelry.com"] [uri "/essexec.php"] [unique_id "apK9yC04twRPFuquKD3AQgAAAM0"]
[Sat Aug 29 05:08:56.930228 2026] [security2:error] [pid 1034096:tid 1034311] [client 40.83.93.50:17244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/menu.php"] [unique_id "apK9yC04twRPFuquKD3ARAAAAME"]
[Sat Aug 29 05:08:56.944023 2026] [security2:error] [pid 1034096:tid 1034376] [client 20.104.104.62:43119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/anz.php"] [unique_id "apK9yC04twRPFuquKD3ARgAAAQI"]
[Sat Aug 29 05:08:56.963286 2026] [security2:error] [pid 1034096:tid 1034260] [client 40.83.93.50:4033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/wp-2019.php"] [unique_id "apK9yC04twRPFuquKD3ARwAAAI4"]
[Sat Aug 29 05:08:56.980535 2026] [security2:error] [pid 1034096:tid 1034339] [client 20.197.61.180:12744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/al.php"] [unique_id "apK9yC04twRPFuquKD3ASQAAAN0"]
[Sat Aug 29 05:08:56.982516 2026] [security2:error] [pid 1041789:tid 1041954] [client 93.123.109.228:49230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/config.php"] [unique_id "apK9yIv3RhPI65jTFG7YPgAAAzU"]
[Sat Aug 29 05:08:56.987715 2026] [security2:error] [pid 1041789:tid 1042012] [client 20.104.104.62:64301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/wp-ana.php"] [unique_id "apK9yIv3RhPI65jTFG7YPwAAA28"]
[Sat Aug 29 05:08:56.988869 2026] [security2:error] [pid 1041789:tid 1041992] [client 20.104.104.62:56563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/mmm.php"] [unique_id "apK9yIv3RhPI65jTFG7YQAAAA1s"]
[Sat Aug 29 05:08:56.992421 2026] [security2:error] [pid 1041789:tid 1042040] [client 4.205.62.107:51432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/userfuns.php"] [unique_id "apK9yIv3RhPI65jTFG7YQgAAA4s"]
[Sat Aug 29 05:08:56.997994 2026] [security2:error] [pid 1034096:tid 1034309] [client 93.123.109.228:51386] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/.env.swp"] [unique_id "apK9yC04twRPFuquKD3ATAAAAL8"]
[Sat Aug 29 05:08:57.015953 2026] [security2:error] [pid 1041789:tid 1042020] [client 158.23.147.79:37809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/log-mama/function.php"] [unique_id "apK9yYv3RhPI65jTFG7YQwAAA3c"]
[Sat Aug 29 05:08:57.017229 2026] [security2:error] [pid 1034096:tid 1034285] [client 20.48.251.3:14078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/xin1.php"] [unique_id "apK9yS04twRPFuquKD3ATQAAAKc"]
[Sat Aug 29 05:08:57.041131 2026] [security2:error] [pid 1034096:tid 1034262] [client 20.220.204.93:64233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/f35.php"] [unique_id "apK9yS04twRPFuquKD3ATgAAAJA"]
[Sat Aug 29 05:08:57.080388 2026] [security2:error] [pid 1034096:tid 1034278] [client 20.104.104.62:43086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/bge.php"] [unique_id "apK9yS04twRPFuquKD3AUQAAAKA"]
[Sat Aug 29 05:08:57.089499 2026] [security2:error] [pid 1034096:tid 1034289] [client 52.139.37.240:12433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/defaults.php"] [unique_id "apK9yS04twRPFuquKD3AUgAAAKs"]
[Sat Aug 29 05:08:57.109140 2026] [security2:error] [pid 1034096:tid 1034349] [client 40.83.93.50:12985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-content/cong.php"] [unique_id "apK9yS04twRPFuquKD3AUwAAAOc"]
[Sat Aug 29 05:08:57.111012 2026] [security2:error] [pid 1034096:tid 1034355] [client 20.197.61.180:12755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/update.php"] [unique_id "apK9yS04twRPFuquKD3AVAAAAO0"]
[Sat Aug 29 05:08:57.111729 2026] [security2:error] [pid 1034096:tid 1034303] [client 52.139.37.240:1395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jaimiegellerjewelry.com"] [uri "/fw.php"] [unique_id "apK9yS04twRPFuquKD3AVQAAALk"]
[Sat Aug 29 05:08:57.113863 2026] [security2:error] [pid 1041789:tid 1041943] [client 93.123.109.228:51344] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/.env~"] [unique_id "apK9yYv3RhPI65jTFG7YRwAAAyo"]
[Sat Aug 29 05:08:57.117457 2026] [security2:error] [pid 1034096:tid 1034332] [client 20.104.104.62:2441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/advanced.php"] [unique_id "apK9yS04twRPFuquKD3AVgAAANY"]
[Sat Aug 29 05:08:57.120630 2026] [security2:error] [pid 1041789:tid 1042053] [client 20.104.104.62:37688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/secret.php"] [unique_id "apK9yYv3RhPI65jTFG7YSAAAA5g"]
[Sat Aug 29 05:08:57.124464 2026] [security2:error] [pid 1034096:tid 1034292] [client 20.100.175.163:9949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/about/function.php"] [unique_id "apK9yS04twRPFuquKD3AWAAAAK4"]
[Sat Aug 29 05:08:57.132290 2026] [security2:error] [pid 1034096:tid 1034313] [client 20.104.104.62:40211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/lolz.php"] [unique_id "apK9yS04twRPFuquKD3AWQAAAMM"]
[Sat Aug 29 05:08:57.135093 2026] [security2:error] [pid 1034096:tid 1034312] [client 4.205.62.107:53295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/otuz1.php"] [unique_id "apK9yS04twRPFuquKD3AWwAAAMI"]
[Sat Aug 29 05:08:57.146987 2026] [security2:error] [pid 1034096:tid 1034318] [client 20.48.251.3:14060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/sadd.php"] [unique_id "apK9yS04twRPFuquKD3AXAAAAMg"]
[Sat Aug 29 05:08:57.170381 2026] [security2:error] [pid 1034096:tid 1034324] [client 20.196.209.81:1808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/extractable-loader-head.php"] [unique_id "apK9yS04twRPFuquKD3AXgAAAM4"]
[Sat Aug 29 05:08:57.183430 2026] [security2:error] [pid 1034096:tid 1034342] [client 20.220.204.93:64231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/wen.php"] [unique_id "apK9yS04twRPFuquKD3AXwAAAOA"]
[Sat Aug 29 05:08:57.184486 2026] [security2:error] [pid 1034096:tid 1034346] [client 20.197.61.180:1868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/disagreed.php"] [unique_id "apK9yS04twRPFuquKD3AYAAAAOQ"]
[Sat Aug 29 05:08:57.188691 2026] [security2:error] [pid 1041789:tid 1042037] [client 20.63.219.114:15417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/about.php525"] [unique_id "apK9yYv3RhPI65jTFG7YSwAAA4g"]
[Sat Aug 29 05:08:57.214536 2026] [security2:error] [pid 1034096:tid 1034344] [client 20.104.104.62:43349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/wp-ana.php"] [unique_id "apK9yS04twRPFuquKD3AYgAAAOI"]
[Sat Aug 29 05:08:57.233362 2026] [security2:error] [pid 1041789:tid 1041947] [client 146.70.36.124:52794] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "narrowgate-electrical.com"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "apK9yYv3RhPI65jTFG7YTQAAAy4"]
[Sat Aug 29 05:08:57.237984 2026] [security2:error] [pid 1041789:tid 1042004] [client 93.123.109.228:49160] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/config/.env"] [unique_id "apK9yYv3RhPI65jTFG7YTgAAA2c"]
[Sat Aug 29 05:08:57.244301 2026] [security2:error] [pid 1041789:tid 1041971] [client 20.151.200.44:64448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/dbc.php"] [unique_id "apK9yYv3RhPI65jTFG7YTwAAA0Y"]
[Sat Aug 29 05:08:57.254292 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.104.104.62:62989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/blox.php"] [unique_id "apK9yYv3RhPI65jTFG7YUAAAA2Q"]
[Sat Aug 29 05:08:57.266863 2026] [security2:error] [pid 1041789:tid 1041982] [client 20.104.104.62:37648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/pro.php"] [unique_id "apK9yYv3RhPI65jTFG7YUQAAA1E"]
[Sat Aug 29 05:08:57.273947 2026] [security2:error] [pid 1034096:tid 1034271] [client 4.232.148.111:35635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-trackback.php"] [unique_id "apK9yS04twRPFuquKD3AaAAAAJk"]
[Sat Aug 29 05:08:57.277887 2026] [security2:error] [pid 1034096:tid 1034282] [client 20.48.251.3:14012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/application.config.php"] [unique_id "apK9yS04twRPFuquKD3AaQAAAKQ"]
[Sat Aug 29 05:08:57.285454 2026] [security2:error] [pid 1041789:tid 1041997] [client 52.139.37.240:12508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/domains.php"] [unique_id "apK9yYv3RhPI65jTFG7YVQAAA2A"]
[Sat Aug 29 05:08:57.306624 2026] [security2:error] [pid 1034096:tid 1034294] [client 114.119.131.180:23605] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "bellwoar.dhron.net"] [uri "/"] [unique_id "apK9yS04twRPFuquKD3AawAAALA"], referer: https://bellwoar.dhron.net
[Sat Aug 29 05:08:57.309195 2026] [security2:error] [pid 1034096:tid 1034375] [client 52.139.37.240:1357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jaimiegellerjewelry.com"] [uri "/zwso.php"] [unique_id "apK9yS04twRPFuquKD3AbAAAAQE"]
[Sat Aug 29 05:08:57.327176 2026] [security2:error] [pid 1041789:tid 1041951] [client 158.23.147.79:17544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK9yYv3RhPI65jTFG7YVgAAAzI"]
[Sat Aug 29 05:08:57.328529 2026] [security2:error] [pid 1034096:tid 1034296] [client 4.205.62.107:21910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/app.default.php"] [unique_id "apK9yS04twRPFuquKD3AbQAAALI"]
[Sat Aug 29 05:08:57.331957 2026] [security2:error] [pid 1034096:tid 1034329] [client 74.248.24.12:2718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/abcd.php"] [unique_id "apK9yS04twRPFuquKD3AbgAAANM"]
[Sat Aug 29 05:08:57.362350 2026] [security2:error] [pid 1034096:tid 1034306] [client 20.220.204.93:64143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/inc.php"] [unique_id "apK9yS04twRPFuquKD3AcgAAALw"]
[Sat Aug 29 05:08:57.364833 2026] [security2:error] [pid 1034096:tid 1034340] [client 66.249.70.67:0] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Googlebot[\\\\/-]" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/google.conf"] [line "3"] [id "901003"] [msg "Googlebot Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "guraonline.com"] [uri "/robots.txt"] [unique_id "apK9yS04twRPFuquKD3AcQAAAN4"]
[Sat Aug 29 05:08:57.396838 2026] [security2:error] [pid 1041789:tid 1041980] [client 93.123.109.228:49184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/config/aws.php"] [unique_id "apK9yYv3RhPI65jTFG7YVwAAA08"]
[Sat Aug 29 05:08:57.413411 2026] [security2:error] [pid 1041789:tid 1042035] [client 40.83.93.50:17262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/alfa.php"] [unique_id "apK9yYv3RhPI65jTFG7YWgAAA4Y"]
[Sat Aug 29 05:08:57.416186 2026] [security2:error] [pid 1041789:tid 1041931] [client 20.48.251.3:14312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/xp.php"] [unique_id "apK9yYv3RhPI65jTFG7YWwAAAx4"]
[Sat Aug 29 05:08:57.419937 2026] [security2:error] [pid 1034096:tid 1034351] [client 158.158.54.35:1841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-content/themes/about.php"] [unique_id "apK9yS04twRPFuquKD3AcwAAAOk"]
[Sat Aug 29 05:08:57.421206 2026] [security2:error] [pid 1034096:tid 1034259] [client 20.151.200.44:63261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/wp-wlx.php"] [unique_id "apK9yS04twRPFuquKD3AdAAAAI0"]
[Sat Aug 29 05:08:57.428986 2026] [security2:error] [pid 1034096:tid 1034353] [client 93.123.109.228:51372] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.bak"] [unique_id "apK9yS04twRPFuquKD3AdQAAAOs"]
[Sat Aug 29 05:08:57.438636 2026] [security2:error] [pid 1041789:tid 1041981] [client 158.23.147.79:5955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/login.php"] [unique_id "apK9yYv3RhPI65jTFG7YXgAAA1A"]
[Sat Aug 29 05:08:57.465554 2026] [security2:error] [pid 1034096:tid 1034284] [client 40.83.93.50:19547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/menu.php"] [unique_id "apK9yS04twRPFuquKD3AeAAAAKY"]
[Sat Aug 29 05:08:57.465828 2026] [security2:error] [pid 1041789:tid 1042047] [client 20.240.128.207:31101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK9yYv3RhPI65jTFG7YYAAAA5I"]
[Sat Aug 29 05:08:57.497941 2026] [security2:error] [pid 1041789:tid 1042045] [client 52.139.37.240:12898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/dropdown.php"] [unique_id "apK9yYv3RhPI65jTFG7YYQAAA5A"]
[Sat Aug 29 05:08:57.504764 2026] [security2:error] [pid 1041789:tid 1042054] [client 52.139.37.240:1856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jaimiegellerjewelry.com"] [uri "/admin/function.php"] [unique_id "apK9yYv3RhPI65jTFG7YYgAAA5k"]
[Sat Aug 29 05:08:57.530335 2026] [security2:error] [pid 1034096:tid 1034302] [client 20.104.49.130:57498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/155.php"] [unique_id "apK9yS04twRPFuquKD3AfQAAALg"]
[Sat Aug 29 05:08:57.553759 2026] [security2:error] [pid 1034096:tid 1034328] [client 20.220.204.93:64223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/6bcwiqwj.php"] [unique_id "apK9yS04twRPFuquKD3AfwAAANI"]
[Sat Aug 29 05:08:57.579059 2026] [security2:error] [pid 1041789:tid 1042030] [client 20.48.251.3:13885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/wp-konfig.php"] [unique_id "apK9yYv3RhPI65jTFG7YZQAAA4E"]
[Sat Aug 29 05:08:57.589304 2026] [security2:error] [pid 1041789:tid 1041958] [client 40.83.93.50:13574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-content/content.php"] [unique_id "apK9yYv3RhPI65jTFG7YZgAAAzk"]
[Sat Aug 29 05:08:57.593887 2026] [security2:error] [pid 1034096:tid 1034283] [client 20.196.209.81:11796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/defaults.php"] [unique_id "apK9yS04twRPFuquKD3AgwAAAKU"]
[Sat Aug 29 05:08:57.598758 2026] [security2:error] [pid 1041789:tid 1041995] [client 20.63.219.114:10146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/spip.php"] [unique_id "apK9yYv3RhPI65jTFG7YaAAAA14"]
[Sat Aug 29 05:08:57.603037 2026] [autoindex:error] [pid 1034096:tid 1034251] [client 45.148.10.62:44876] AH01276: Cannot serve directory /home3/xeypwxmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:08:57.609236 2026] [security2:error] [pid 1041789:tid 1042005] [client 93.123.109.228:49136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/config/config.php"] [unique_id "apK9yYv3RhPI65jTFG7YawAAA2g"]
[Sat Aug 29 05:08:57.617876 2026] [core:error] [pid 1041789:tid 1041989] [client 20.100.175.163:16435] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:57.617889 2026] [core:error] [pid 1041789:tid 1041989] [client 20.100.175.163:16435] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:57.678185 2026] [security2:error] [pid 1034096:tid 1034301] [client 20.196.209.81:18283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-admin/network/xmrlpc.php"] [unique_id "apK9yS04twRPFuquKD3AiQAAALc"]
[Sat Aug 29 05:08:57.699876 2026] [security2:error] [pid 1034096:tid 1034347] [client 52.139.37.240:1387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jaimiegellerjewelry.com"] [uri "/zoom1.php"] [unique_id "apK9yS04twRPFuquKD3AigAAAOU"]
[Sat Aug 29 05:08:57.708682 2026] [security2:error] [pid 1034096:tid 1034322] [client 4.205.62.107:9016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/config_dev.php"] [unique_id "apK9yS04twRPFuquKD3AiwAAAMw"]
[Sat Aug 29 05:08:57.710351 2026] [security2:error] [pid 1041789:tid 1042000] [client 20.197.61.180:1912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/global.php"] [unique_id "apK9yYv3RhPI65jTFG7YbwAAA2M"]
[Sat Aug 29 05:08:57.711867 2026] [security2:error] [pid 1034096:tid 1034274] [client 52.139.37.240:12479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/files/index.php"] [unique_id "apK9yS04twRPFuquKD3AjAAAAJw"]
[Sat Aug 29 05:08:57.718507 2026] [security2:error] [pid 1034096:tid 1034290] [client 20.104.49.130:53862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/fs.php"] [unique_id "apK9yS04twRPFuquKD3AjQAAAKw"]
[Sat Aug 29 05:08:57.728350 2026] [security2:error] [pid 1034096:tid 1034363] [client 93.123.109.228:51464] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.old"] [unique_id "apK9yS04twRPFuquKD3AkAAAAPU"]
[Sat Aug 29 05:08:57.738363 2026] [security2:error] [pid 1041789:tid 1041990] [client 93.123.109.228:51480] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config~"] [unique_id "apK9yYv3RhPI65jTFG7YcQAAA1k"]
[Sat Aug 29 05:08:57.749266 2026] [security2:error] [pid 1041789:tid 1041934] [client 20.220.204.93:64157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/easy.php"] [unique_id "apK9yYv3RhPI65jTFG7YcwAAAyE"]
[Sat Aug 29 05:08:57.754614 2026] [security2:error] [pid 1034096:tid 1034289] [client 82.38.180.154:41862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.180.38.82.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/wordpress/index.php"] [unique_id "apK9yS04twRPFuquKD3AkgAAAKs"]
[Sat Aug 29 05:08:57.754771 2026] [security2:error] [pid 1034096:tid 1034276] [client 45.148.10.62:44876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.xey.pwx.mybluehost.me"] [uri "/.env"] [unique_id "apK9yS04twRPFuquKD3AkwAAAJ4"]
[Sat Aug 29 05:08:57.760346 2026] [security2:error] [pid 1034096:tid 1034317] [client 93.123.109.228:49202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/config/config.inc.php"] [unique_id "apK9yS04twRPFuquKD3AlAAAAMc"]
[Sat Aug 29 05:08:57.780689 2026] [autoindex:error] [pid 1041789:tid 1041945] [client 45.148.10.62:44878] AH01276: Cannot serve directory /home3/xfefmemy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:08:57.816921 2026] [security2:error] [pid 1041789:tid 1041954] [client 20.151.200.44:64545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/attack.php"] [unique_id "apK9yYv3RhPI65jTFG7YfAAAAzU"]
[Sat Aug 29 05:08:57.832887 2026] [security2:error] [pid 1034096:tid 1034273] [client 93.123.109.228:49254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/config/env.php"] [unique_id "apK9yS04twRPFuquKD3AmQAAAJs"]
[Sat Aug 29 05:08:57.834175 2026] [security2:error] [pid 1041789:tid 1042015] [client 20.197.61.180:12743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/blog.php"] [unique_id "apK9yYv3RhPI65jTFG7YfQAAA3I"]
[Sat Aug 29 05:08:57.847326 2026] [security2:error] [pid 1041789:tid 1041961] [client 146.70.36.124:52800] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "narrowgate-electrical.com"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "apK9yYv3RhPI65jTFG7YfgAAAzw"]
[Sat Aug 29 05:08:57.847736 2026] [security2:error] [pid 1034096:tid 1034265] [client 74.248.24.12:14986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-access.php"] [unique_id "apK9yS04twRPFuquKD3AmwAAAJM"]
[Sat Aug 29 05:08:57.852050 2026] [security2:error] [pid 1034096:tid 1034329] [client 93.123.109.228:49302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/config/nexmo.php"] [unique_id "apK9yS04twRPFuquKD3AnAAAANM"]
[Sat Aug 29 05:08:57.854870 2026] [security2:error] [pid 1041789:tid 1041986] [client 93.123.109.228:49282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/config/module.config.php"] [unique_id "apK9yYv3RhPI65jTFG7YfwAAA1U"]
[Sat Aug 29 05:08:57.893813 2026] [security2:error] [pid 1041789:tid 1041935] [client 20.197.61.180:1906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/class_api.php"] [unique_id "apK9yYv3RhPI65jTFG7YgQAAAyI"]
[Sat Aug 29 05:08:57.896467 2026] [security2:error] [pid 1041789:tid 1042012] [client 52.139.37.240:1360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jaimiegellerjewelry.com"] [uri "/about.php7"] [unique_id "apK9yYv3RhPI65jTFG7YggAAA28"]
[Sat Aug 29 05:08:57.897277 2026] [security2:error] [pid 1034096:tid 1034260] [client 45.125.67.3:45370] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/spiffy-calendar/readme.txt"] [unique_id "apK9yS04twRPFuquKD3AnwAAAI4"]
[Sat Aug 29 05:08:57.904836 2026] [security2:error] [pid 1034096:tid 1034255] [client 45.148.10.62:44876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.xey.pwx.mybluehost.me"] [uri "/.env"] [unique_id "apK9yS04twRPFuquKD3AoAAAAIk"]
[Sat Aug 29 05:08:57.909895 2026] [security2:error] [pid 1034096:tid 1034296] [client 52.139.37.240:12289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "solija.com"] [uri "/flower.php"] [unique_id "apK9yS04twRPFuquKD3AoQAAALI"]
[Sat Aug 29 05:08:57.914500 2026] [security2:error] [pid 1034096:tid 1034323] [client 20.48.251.3:33325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/25.php"] [unique_id "apK9yS04twRPFuquKD3AogAAAM0"]
[Sat Aug 29 05:08:57.914501 2026] [security2:error] [pid 1041789:tid 1041937] [client 4.232.148.111:35632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/222.php"] [unique_id "apK9yYv3RhPI65jTFG7YgwAAAyQ"]
[Sat Aug 29 05:08:57.916633 2026] [security2:error] [pid 1034096:tid 1034319] [client 158.158.54.35:31518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK9yS04twRPFuquKD3AowAAAMk"]
[Sat Aug 29 05:08:57.932613 2026] [security2:error] [pid 1041789:tid 1042033] [client 45.148.10.62:44878] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.xfe.fme.mybluehost.me"] [uri "/.env"] [unique_id "apK9yYv3RhPI65jTFG7YhAAAA4Q"]
[Sat Aug 29 05:08:57.944551 2026] [security2:error] [pid 1034096:tid 1034361] [client 40.83.93.50:13206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/alfa.php"] [unique_id "apK9yS04twRPFuquKD3ApwAAAPM"]
[Sat Aug 29 05:08:57.968298 2026] [security2:error] [pid 1041789:tid 1042028] [client 20.240.128.207:24731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/css/index.php"] [unique_id "apK9yYv3RhPI65jTFG7YhgAAA38"]
[Sat Aug 29 05:08:58.007468 2026] [security2:error] [pid 1034096:tid 1034372] [client 4.205.62.107:6486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/X57.php"] [unique_id "apK9yi04twRPFuquKD3ArQAAAP4"]
[Sat Aug 29 05:08:58.008201 2026] [security2:error] [pid 1034096:tid 1034375] [client 40.83.93.50:19060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/feed-rss2-queue.php"] [unique_id "apK9yi04twRPFuquKD3ArgAAAQE"]
[Sat Aug 29 05:08:58.016329 2026] [security2:error] [pid 1034096:tid 1034285] [client 20.104.49.130:30033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/kgoc6awap3napxxxdCdefault.php"] [unique_id "apK9yi04twRPFuquKD3AsAAAAKc"]
[Sat Aug 29 05:08:58.017157 2026] [security2:error] [pid 1041789:tid 1042004] [client 4.205.62.107:62957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/cp2.php"] [unique_id "apK9yov3RhPI65jTFG7YigAAA2c"]
[Sat Aug 29 05:08:58.034169 2026] [security2:error] [pid 1034096:tid 1034376] [client 20.196.209.81:1255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/post.php"] [unique_id "apK9yi04twRPFuquKD3AtAAAAQI"]
[Sat Aug 29 05:08:58.045866 2026] [core:error] [pid 1034096:tid 1034167] [remote 45.148.10.64:54742] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:58.047491 2026] [security2:error] [pid 1034096:tid 1034349] [client 4.205.62.107:26680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/drykl.php"] [unique_id "apK9yi04twRPFuquKD3AtwAAAOc"]
[Sat Aug 29 05:08:58.055400 2026] [security2:error] [pid 1041789:tid 1041944] [client 20.63.219.114:2466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/backup.php"] [unique_id "apK9yov3RhPI65jTFG7YjAAAAys"]
[Sat Aug 29 05:08:58.060970 2026] [security2:error] [pid 1041789:tid 1042014] [client 158.23.147.79:49826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK9yov3RhPI65jTFG7YjQAAA3E"]
[Sat Aug 29 05:08:58.064830 2026] [security2:error] [pid 1041789:tid 1041982] [client 20.48.251.3:33313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/nlnub.php"] [unique_id "apK9yov3RhPI65jTFG7YjwAAA1E"]
[Sat Aug 29 05:08:58.071798 2026] [security2:error] [pid 1034096:tid 1034272] [client 40.83.93.50:13629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-content/core.php"] [unique_id "apK9yi04twRPFuquKD3AuQAAAJo"]
[Sat Aug 29 05:08:58.087685 2026] [security2:error] [pid 1041789:tid 1042041] [client 20.220.204.93:62211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/fresh3.php"] [unique_id "apK9yov3RhPI65jTFG7YkAAAA4w"]
[Sat Aug 29 05:08:58.092889 2026] [security2:error] [pid 1034096:tid 1034302] [client 52.139.37.240:53830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jaimiegellerjewelry.com"] [uri "/cron.php"] [unique_id "apK9yi04twRPFuquKD3AvAAAALg"]
[Sat Aug 29 05:08:58.094188 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.104.49.130:60932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/sd.php"] [unique_id "apK9yov3RhPI65jTFG7YkQAAA30"]
[Sat Aug 29 05:08:58.100169 2026] [security2:error] [pid 1041789:tid 1041936] [client 20.196.209.81:18285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-admin/options-general.php"] [unique_id "apK9yov3RhPI65jTFG7YkwAAAyM"]
[Sat Aug 29 05:08:58.126609 2026] [security2:error] [pid 1041789:tid 1042053] [client 20.100.175.163:28240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-includes/admin.php"] [unique_id "apK9yov3RhPI65jTFG7YlgAAA5g"]
[Sat Aug 29 05:08:58.145708 2026] [security2:error] [pid 1034096:tid 1034267] [client 45.125.67.3:45434] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/mage-eventpress/readme.txt"] [unique_id "apK9yi04twRPFuquKD3AvwAAAJU"]
[Sat Aug 29 05:08:58.146099 2026] [security2:error] [pid 1041789:tid 1041968] [client 195.178.110.247:11388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lordshipsalvation.org"] [uri "/index.php"] [unique_id "apK9yov3RhPI65jTFG7YmAAAA0M"]
[Sat Aug 29 05:08:58.152304 2026] [security2:error] [pid 1034096:tid 1034374] [client 20.104.49.130:52338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/as.php"] [unique_id "apK9yi04twRPFuquKD3AwAAAAQA"]
[Sat Aug 29 05:08:58.157033 2026] [security2:error] [pid 1041789:tid 1042049] [client 4.205.62.107:58397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/register.php"] [unique_id "apK9yov3RhPI65jTFG7YlwAAA5Q"]
[Sat Aug 29 05:08:58.171249 2026] [security2:error] [pid 1041789:tid 1041967] [client 45.148.10.62:44878] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.xfe.fme.mybluehost.me"] [uri "/.env"] [unique_id "apK9yov3RhPI65jTFG7YmgAAA0I"]
[Sat Aug 29 05:08:58.206309 2026] [security2:error] [pid 1034096:tid 1034289] [client 93.123.109.228:49240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/config/stripe.php"] [unique_id "apK9yi04twRPFuquKD3AxQAAAKs"]
[Sat Aug 29 05:08:58.219049 2026] [core:error] [pid 1034096:tid 1034172] [remote 45.148.10.64:54742] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:58.219064 2026] [core:error] [pid 1034096:tid 1034172] [remote 45.148.10.64:54742] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:58.229753 2026] [security2:error] [pid 1041789:tid 1041981] [client 20.104.49.130:36281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/mac.php"] [unique_id "apK9yov3RhPI65jTFG7YmwAAA1A"]
[Sat Aug 29 05:08:58.252911 2026] [security2:error] [pid 1034096:tid 1034282] [client 20.48.251.3:14052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/mga.php"] [unique_id "apK9yi04twRPFuquKD3AyAAAAKQ"]
[Sat Aug 29 05:08:58.285305 2026] [security2:error] [pid 1034096:tid 1034311] [client 158.23.147.79:17455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK9yi04twRPFuquKD3AywAAAME"]
[Sat Aug 29 05:08:58.286720 2026] [security2:error] [pid 1034096:tid 1034273] [client 4.205.62.107:3958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/update.php"] [unique_id "apK9yi04twRPFuquKD3AzAAAAJs"]
[Sat Aug 29 05:08:58.287754 2026] [security2:error] [pid 1034096:tid 1034309] [client 52.139.37.240:1887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jaimiegellerjewelry.com"] [uri "/wp-2019.php"] [unique_id "apK9yi04twRPFuquKD3AzQAAAL8"]
[Sat Aug 29 05:08:58.302873 2026] [security2:error] [pid 1041789:tid 1041983] [client 20.151.200.44:64546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/file66.php"] [unique_id "apK9yov3RhPI65jTFG7YngAAA1I"]
[Sat Aug 29 05:08:58.310669 2026] [autoindex:error] [pid 1034096:tid 1034265] [client 45.148.10.62:44876] AH01276: Cannot serve directory /home3/xeypwxmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:08:58.311032 2026] [security2:error] [pid 1041789:tid 1042048] [client 195.178.110.247:27258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lordshipsalvation.org"] [uri "/index.php"] [unique_id "apK9yov3RhPI65jTFG7YoAAAA5M"]
[Sat Aug 29 05:08:58.334470 2026] [security2:error] [pid 1034096:tid 1034368] [client 158.23.147.79:6079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-admin/admin.php"] [unique_id "apK9yi04twRPFuquKD3A0QAAAPo"]
[Sat Aug 29 05:08:58.354981 2026] [security2:error] [pid 1041789:tid 1042005] [client 20.220.204.93:64140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/bgymj.php"] [unique_id "apK9yov3RhPI65jTFG7YpAAAA2g"]
[Sat Aug 29 05:08:58.361305 2026] [security2:error] [pid 1041789:tid 1042018] [client 74.248.24.12:22866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-content/uploads/min.php"] [unique_id "apK9yov3RhPI65jTFG7YpQAAA3U"]
[Sat Aug 29 05:08:58.393420 2026] [security2:error] [pid 1041789:tid 1042050] [client 20.104.49.130:30061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/ms-edit.php"] [unique_id "apK9yov3RhPI65jTFG7YpwAAA5U"]
[Sat Aug 29 05:08:58.401122 2026] [security2:error] [pid 1034096:tid 1034377] [client 45.125.67.3:45400] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/event-post/readme.txt"] [unique_id "apK9yi04twRPFuquKD3A1QAAAQM"]
[Sat Aug 29 05:08:58.404865 2026] [security2:error] [pid 1034096:tid 1034190] [remote 45.148.10.64:54742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 64.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "andyandkirsty.strangeworx.com"] [uri "/wp-login.php"] [unique_id "apK9yi04twRPFuquKD3A0wAAtkQ"]
[Sat Aug 29 05:08:58.408920 2026] [security2:error] [pid 1041789:tid 1042047] [client 4.232.148.111:35634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/x.php"] [unique_id "apK9yov3RhPI65jTFG7YqAAAA5I"]
[Sat Aug 29 05:08:58.416837 2026] [security2:error] [pid 1041789:tid 1041970] [client 20.63.219.114:19870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/haiterus.php"] [unique_id "apK9yov3RhPI65jTFG7YqQAAA0U"]
[Sat Aug 29 05:08:58.424510 2026] [security2:error] [pid 1034096:tid 1034344] [client 158.158.54.35:34666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-admin/index.php"] [unique_id "apK9yi04twRPFuquKD3A1wAAAOI"]
[Sat Aug 29 05:08:58.424549 2026] [security2:error] [pid 1034096:tid 1034327] [client 40.83.93.50:12510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/feed-rss2-queue.php"] [unique_id "apK9yi04twRPFuquKD3A1gAAANE"]
[Sat Aug 29 05:08:58.430451 2026] [security2:error] [pid 1034096:tid 1034370] [client 20.197.61.180:12778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/update.php"] [unique_id "apK9yi04twRPFuquKD3A2AAAAPw"]
[Sat Aug 29 05:08:58.433682 2026] [security2:error] [pid 1041789:tid 1041985] [client 195.178.110.247:11400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goldenage-wtic.org"] [uri "/index.php"] [unique_id "apK9yov3RhPI65jTFG7YqgAAA1Q"]
[Sat Aug 29 05:08:58.441623 2026] [security2:error] [pid 1041789:tid 1042038] [client 20.48.251.3:33281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/ccou.php"] [unique_id "apK9yov3RhPI65jTFG7YrQAAA4k"]
[Sat Aug 29 05:08:58.442636 2026] [security2:error] [pid 1041789:tid 1041964] [client 146.70.36.124:52808] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "narrowgate-electrical.com"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "apK9yov3RhPI65jTFG7YrgAAAz8"]
[Sat Aug 29 05:08:58.465896 2026] [security2:error] [pid 1041789:tid 1042042] [client 20.240.128.207:31088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-cron.php"] [unique_id "apK9yov3RhPI65jTFG7YsQAAA40"]
[Sat Aug 29 05:08:58.471700 2026] [autoindex:error] [pid 1041789:tid 1041966] [client 45.148.10.62:44878] AH01276: Cannot serve directory /home3/xfefmemy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:08:58.489912 2026] [security2:error] [pid 1041789:tid 1042019] [client 52.139.37.240:1879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jaimiegellerjewelry.com"] [uri "/gecko-new.php"] [unique_id "apK9yov3RhPI65jTFG7YswAAA3Y"]
[Sat Aug 29 05:08:58.494303 2026] [security2:error] [pid 1034096:tid 1034323] [client 20.196.209.81:18257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-admin/options.php"] [unique_id "apK9yi04twRPFuquKD3A3AAAAM0"]
[Sat Aug 29 05:08:58.495421 2026] [security2:error] [pid 1041789:tid 1041976] [client 4.205.62.107:21865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/app_local.php"] [unique_id "apK9yov3RhPI65jTFG7YtQAAA0s"]
[Sat Aug 29 05:08:58.495663 2026] [security2:error] [pid 1041789:tid 1041939] [client 45.125.67.3:45488] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/gallery-album/readme.txt"] [unique_id "apK9yov3RhPI65jTFG7YtgAAAyY"]
[Sat Aug 29 05:08:58.495796 2026] [security2:error] [pid 1034096:tid 1034308] [client 40.83.93.50:17248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/inputs.php"] [unique_id "apK9yi04twRPFuquKD3A3QAAAL4"]
[Sat Aug 29 05:08:58.500531 2026] [security2:error] [pid 1041789:tid 1041977] [client 45.125.67.3:45706] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/wpforo/readme.txt"] [unique_id "apK9yov3RhPI65jTFG7YtwAAA0w"]
[Sat Aug 29 05:08:58.539173 2026] [security2:error] [pid 1041789:tid 1041969] [client 20.196.209.81:1468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/csv.php"] [unique_id "apK9yov3RhPI65jTFG7YugAAA0Q"]
[Sat Aug 29 05:08:58.551325 2026] [security2:error] [pid 1034096:tid 1034350] [client 158.23.147.79:6092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/hehehehe.php"] [unique_id "apK9yi04twRPFuquKD3A4gAAAOg"]
[Sat Aug 29 05:08:58.558530 2026] [security2:error] [pid 1034096:tid 1034294] [client 20.197.61.180:12776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/bypass.php"] [unique_id "apK9yi04twRPFuquKD3A5AAAALA"]
[Sat Aug 29 05:08:58.572389 2026] [security2:error] [pid 1041789:tid 1042009] [client 40.83.93.50:13613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-content/db-status.php"] [unique_id "apK9yov3RhPI65jTFG7YvAAAA2w"]
[Sat Aug 29 05:08:58.582282 2026] [security2:error] [pid 1034096:tid 1034356] [client 20.48.251.3:33295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/rum.or.php"] [unique_id "apK9yi04twRPFuquKD3A5gAAAO4"]
[Sat Aug 29 05:08:58.582748 2026] [cgid:error] [pid 1041789:tid 1042020] [client 167.94.146.56:0] AH01265: stderr from /home2/ironriv2/public_html/new/cgi-bin/: attempt to invoke directory as script, referer: http://www.new.ironriver.com:80/cgi-bin
[Sat Aug 29 05:08:58.586137 2026] [security2:error] [pid 1034096:tid 1034355] [client 20.220.204.93:64155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/ws69.php"] [unique_id "apK9yi04twRPFuquKD3A5wAAAO0"]
[Sat Aug 29 05:08:58.587656 2026] [security2:error] [pid 1041789:tid 1041993] [client 45.125.67.3:45504] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/wp-sendgrid-mailer/readme.txt"] [unique_id "apK9yov3RhPI65jTFG7YvgAAA1w"]
[Sat Aug 29 05:08:58.590012 2026] [security2:error] [pid 1041789:tid 1041941] [client 195.178.110.247:27266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goldenage-wtic.org"] [uri "/index.php"] [unique_id "apK9yov3RhPI65jTFG7YvwAAAyg"]
[Sat Aug 29 05:08:58.592099 2026] [security2:error] [pid 1041789:tid 1042032] [client 45.125.67.3:45494] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/woocommerce-pdf-vouchers/readme.txt"] [unique_id "apK9yov3RhPI65jTFG7YwAAAA4M"]
[Sat Aug 29 05:08:58.611860 2026] [core:error] [pid 1034096:tid 1034269] [client 20.100.175.163:16440] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:58.611879 2026] [core:error] [pid 1034096:tid 1034269] [client 20.100.175.163:16440] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:08:58.615164 2026] [security2:error] [pid 1034096:tid 1034324] [client 45.148.10.62:44876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.xey.pwx.mybluehost.me"] [uri "/api/.env"] [unique_id "apK9yi04twRPFuquKD3A6gAAAM4"]
[Sat Aug 29 05:08:58.621725 2026] [security2:error] [pid 1034096:tid 1034275] [client 45.125.67.3:45448] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/registrations-for-the-events-calendar/readme.txt"] [unique_id "apK9yi04twRPFuquKD3A6wAAAJ0"]
[Sat Aug 29 05:08:58.625612 2026] [security2:error] [pid 1041789:tid 1041938] [client 45.125.67.3:45336] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/social-connect/readme.txt"] [unique_id "apK9yov3RhPI65jTFG7YxQAAAyU"]
[Sat Aug 29 05:08:58.627495 2026] [security2:error] [pid 1034096:tid 1034362] [client 103.240.76.112:43491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK9yi04twRPFuquKD3A7AAAAPQ"]
[Sat Aug 29 05:08:58.627588 2026] [security2:error] [pid 1034096:tid 1034362] [client 103.240.76.112:43491] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK9yi04twRPFuquKD3A7AAAAPQ"]
[Sat Aug 29 05:08:58.662724 2026] [security2:error] [pid 1041789:tid 1042013] [client 45.125.67.3:45062] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/bdthemes-element-pack/readme.txt"] [unique_id "apK9yov3RhPI65jTFG7YyAAAA3A"]
[Sat Aug 29 05:08:58.663075 2026] [security2:error] [pid 1041789:tid 1041962] [client 20.197.61.180:1868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/aksinet.php"] [unique_id "apK9yov3RhPI65jTFG7YyQAAAz0"]
[Sat Aug 29 05:08:58.663133 2026] [security2:error] [pid 1034096:tid 1034304] [client 45.125.67.3:45340] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/woocommerce-checkout-field-editor-pro/readme.txt"] [unique_id "apK9yi04twRPFuquKD3A7gAAALo"]
[Sat Aug 29 05:08:58.683394 2026] [security2:error] [pid 1034096:tid 1034302] [client 52.139.37.240:1384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jaimiegellerjewelry.com"] [uri "/add_actualites.php"] [unique_id "apK9yi04twRPFuquKD3A8AAAALg"]
[Sat Aug 29 05:08:58.716564 2026] [security2:error] [pid 1034096:tid 1034314] [client 20.48.251.3:13962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/xmy.php"] [unique_id "apK9yi04twRPFuquKD3A8gAAAMQ"]
[Sat Aug 29 05:08:58.722014 2026] [security2:error] [pid 1041789:tid 1041858] [remote 74.7.227.154:54326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK9yov3RhPI65jTFG7YygADcTg"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwp-easycart%2Finc%2Faws%2FJmesPath
[Sat Aug 29 05:08:58.754923 2026] [autoindex:error] [pid 1041789:tid 1041937] [client 45.148.10.62:44884] AH01276: Cannot serve directory /home3/xfsrxfmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:08:58.768792 2026] [security2:error] [pid 1041789:tid 1042053] [client 45.148.10.62:44878] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.xfe.fme.mybluehost.me"] [uri "/api/.env"] [unique_id "apK9yov3RhPI65jTFG7YzAAAA5g"]
[Sat Aug 29 05:08:58.772508 2026] [security2:error] [pid 1034096:tid 1034309] [client 45.148.10.62:44876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.xey.pwx.mybluehost.me"] [uri "/.env.bak"] [unique_id "apK9yi04twRPFuquKD3A9AAAAL8"]
[Sat Aug 29 05:08:58.785084 2026] [security2:error] [pid 1041789:tid 1041951] [client 20.220.204.93:64221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/ccs.php"] [unique_id "apK9yov3RhPI65jTFG7YzQAAAzI"]
[Sat Aug 29 05:08:58.785930 2026] [security2:error] [pid 1041789:tid 1041952] [client 45.125.67.3:45366] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/propovoice-pro/readme.txt"] [unique_id "apK9yov3RhPI65jTFG7YzgAAAzM"]
[Sat Aug 29 05:08:58.786841 2026] [security2:error] [pid 1034096:tid 1034346] [client 20.63.219.114:2472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/go.php"] [unique_id "apK9yi04twRPFuquKD3A9gAAAOQ"]
[Sat Aug 29 05:08:58.820936 2026] [security2:error] [pid 1034096:tid 1034371] [client 45.125.67.3:45398] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/cbxwpbookmark/readme.txt"] [unique_id "apK9yi04twRPFuquKD3A-AAAAP0"]
[Sat Aug 29 05:08:58.820936 2026] [security2:error] [pid 1034096:tid 1034263] [client 45.125.67.3:45320] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/wd-google-maps/readme.txt"] [unique_id "apK9yi04twRPFuquKD3A-QAAAJE"]
[Sat Aug 29 05:08:58.839364 2026] [security2:error] [pid 1034096:tid 1034315] [client 20.151.200.44:64495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/zafir1.php"] [unique_id "apK9yi04twRPFuquKD3A-wAAAMU"]
[Sat Aug 29 05:08:58.841088 2026] [security2:error] [pid 1034096:tid 1034292] [client 45.125.67.3:45374] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/vikrentcar/readme.txt"] [unique_id "apK9yi04twRPFuquKD3A_AAAAK4"]
[Sat Aug 29 05:08:58.844063 2026] [security2:error] [pid 1034096:tid 1034251] [client 45.125.67.3:45414] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/wp-auto-affiliate-links/readme.txt"] [unique_id "apK9yi04twRPFuquKD3A_QAAAIU"]
[Sat Aug 29 05:08:58.848211 2026] [security2:error] [pid 1041789:tid 1042048] [client 20.48.251.3:33320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/ms-edit.php"] [unique_id "apK9yov3RhPI65jTFG7Y0gAAA5M"]
[Sat Aug 29 05:08:58.853756 2026] [security2:error] [pid 1034096:tid 1034300] [client 4.205.62.107:8994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/oc460l3x.php"] [unique_id "apK9yi04twRPFuquKD3A_gAAALY"]
[Sat Aug 29 05:08:58.858721 2026] [security2:error] [pid 1041789:tid 1041949] [client 93.123.109.228:51494] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/crm/.env"] [unique_id "apK9yov3RhPI65jTFG7Y0wAAAzA"]
[Sat Aug 29 05:08:58.868616 2026] [autoindex:error] [pid 1034096:tid 1034276] [client 45.148.10.62:44896] AH01276: Cannot serve directory /home3/xgazdxmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:08:58.869527 2026] [security2:error] [pid 1034096:tid 1034313] [client 45.125.67.3:45876] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/woo-producttables-pro/readme.txt"] [unique_id "apK9yi04twRPFuquKD3BAQAAAMM"]
[Sat Aug 29 05:08:58.869530 2026] [security2:error] [pid 1041789:tid 1041942] [client 45.125.67.3:45856] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/visualizer/readme.txt"] [unique_id "apK9yov3RhPI65jTFG7Y1QAAAyk"]
[Sat Aug 29 05:08:58.869539 2026] [security2:error] [pid 1034096:tid 1034307] [client 45.125.67.3:45878] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/import-spreadsheets-from-microsoft-excel/readme.txt"] [unique_id "apK9yi04twRPFuquKD3BAgAAAL0"]
[Sat Aug 29 05:08:58.872886 2026] [security2:error] [pid 1034096:tid 1034327] [client 20.63.219.114:19894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/post.php"] [unique_id "apK9yi04twRPFuquKD3BAwAAANE"]
[Sat Aug 29 05:08:58.873165 2026] [security2:error] [pid 1034096:tid 1034289] [client 74.248.24.12:15028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK9yi04twRPFuquKD3BBAAAAKs"]
[Sat Aug 29 05:08:58.875274 2026] [security2:error] [pid 1041789:tid 1041982] [client 158.158.54.35:13004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/radio.php"] [unique_id "apK9yov3RhPI65jTFG7Y1gAAA1E"]
[Sat Aug 29 05:08:58.881199 2026] [security2:error] [pid 1034096:tid 1034365] [client 45.125.67.3:45356] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/payplus-payment-gateway/readme.txt"] [unique_id "apK9yi04twRPFuquKD3BBgAAAPc"]
[Sat Aug 29 05:08:58.881408 2026] [security2:error] [pid 1041789:tid 1042050] [client 93.123.109.228:51508] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/cron/.env"] [unique_id "apK9yov3RhPI65jTFG7Y1wAAA5U"]
[Sat Aug 29 05:08:58.881495 2026] [security2:error] [pid 1041789:tid 1041980] [client 52.139.37.240:51295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jaimiegellerjewelry.com"] [uri "/browse.php"] [unique_id "apK9yov3RhPI65jTFG7Y2AAAA08"]
[Sat Aug 29 05:08:58.883205 2026] [security2:error] [pid 1034096:tid 1034352] [client 4.232.148.111:7529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/new.php"] [unique_id "apK9yi04twRPFuquKD3BBwAAAOo"]
[Sat Aug 29 05:08:58.889548 2026] [security2:error] [pid 1041789:tid 1041984] [client 20.196.209.81:7476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-admin/panel.php"] [unique_id "apK9yov3RhPI65jTFG7Y2QAAA1M"]
[Sat Aug 29 05:08:58.899466 2026] [security2:error] [pid 1041789:tid 1042037] [client 45.125.67.3:45860] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/copymatic/readme.txt"] [unique_id "apK9yov3RhPI65jTFG7Y2gAAA4g"]
[Sat Aug 29 05:08:58.907047 2026] [security2:error] [pid 1041789:tid 1041997] [client 40.83.93.50:4056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/inputs.php"] [unique_id "apK9yov3RhPI65jTFG7Y2wAAA2A"]
[Sat Aug 29 05:08:58.920950 2026] [security2:error] [pid 1034096:tid 1034308] [client 20.104.49.130:60771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/wp-blog-header.php"] [unique_id "apK9yi04twRPFuquKD3BCAAAAL4"]
[Sat Aug 29 05:08:58.921737 2026] [security2:error] [pid 1034096:tid 1034339] [client 20.220.204.93:64167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/mar.php"] [unique_id "apK9yi04twRPFuquKD3BCQAAAN0"]
[Sat Aug 29 05:08:58.923602 2026] [security2:error] [pid 1041789:tid 1042038] [client 45.148.10.62:44878] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.xfe.fme.mybluehost.me"] [uri "/.env.bak"] [unique_id "apK9yov3RhPI65jTFG7Y3AAAA4k"]
[Sat Aug 29 05:08:58.923779 2026] [security2:error] [pid 1041789:tid 1041964] [client 45.148.10.62:44884] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.xfs.rxf.mybluehost.me"] [uri "/.env"] [unique_id "apK9yov3RhPI65jTFG7Y3QAAAz8"]
[Sat Aug 29 05:08:58.925101 2026] [security2:error] [pid 1034096:tid 1034286] [client 45.125.67.3:45904] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/searchpro/readme.txt"] [unique_id "apK9yi04twRPFuquKD3BCwAAAKg"]
[Sat Aug 29 05:08:58.940756 2026] [security2:error] [pid 1041789:tid 1042006] [client 52.139.37.240:9124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rjrusticfurniture.com"] [uri "/aged.php"] [unique_id "apK9yov3RhPI65jTFG7Y3gAAA2k"]
[Sat Aug 29 05:08:58.941281 2026] [security2:error] [pid 1034096:tid 1034296] [client 20.196.209.81:11798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/fox.php"] [unique_id "apK9yi04twRPFuquKD3BDQAAALI"]
[Sat Aug 29 05:08:58.948325 2026] [security2:error] [pid 1034096:tid 1034316] [client 45.125.67.3:45384] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/edwiser-bridge/readme.txt"] [unique_id "apK9yi04twRPFuquKD3BDgAAAMY"]
[Sat Aug 29 05:08:58.954382 2026] [security2:error] [pid 1034096:tid 1034329] [client 20.240.128.207:27576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-block.php"] [unique_id "apK9yi04twRPFuquKD3BDwAAANM"]
[Sat Aug 29 05:08:58.957686 2026] [security2:error] [pid 1034096:tid 1034290] [client 45.125.67.3:45460] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/ba-book-everything/readme.txt"] [unique_id "apK9yi04twRPFuquKD3BEAAAAKw"]
[Sat Aug 29 05:08:58.967564 2026] [security2:error] [pid 1041789:tid 1041957] [client 40.83.93.50:17520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/class-walker-category-dropdown-class.php"] [unique_id "apK9yov3RhPI65jTFG7Y3wAAAzg"]
[Sat Aug 29 05:08:58.971793 2026] [security2:error] [pid 1041789:tid 1042003] [client 107.145.13.164:60233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 164.13.145.107.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK9yov3RhPI65jTFG7Y4AAAA2Y"]
[Sat Aug 29 05:08:58.971889 2026] [security2:error] [pid 1041789:tid 1042003] [client 107.145.13.164:60233] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK9yov3RhPI65jTFG7Y4AAAA2Y"]
[Sat Aug 29 05:08:58.975453 2026] [security2:error] [pid 1041789:tid 1042011] [client 45.125.67.3:45418] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/zita-site-library/readme.txt"] [unique_id "apK9yov3RhPI65jTFG7Y4QAAA24"]
[Sat Aug 29 05:08:58.980689 2026] [security2:error] [pid 1034096:tid 1034268] [client 45.125.67.3:45524] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/easy-real-estate/readme.txt"] [unique_id "apK9yi04twRPFuquKD3BEwAAAJY"]
[Sat Aug 29 05:08:58.981431 2026] [security2:error] [pid 1034096:tid 1034262] [client 93.123.109.228:51534] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/current/.env"] [unique_id "apK9yi04twRPFuquKD3BEgAAAJA"]
[Sat Aug 29 05:08:58.981836 2026] [security2:error] [pid 1034096:tid 1034376] [client 20.48.251.3:33301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/sys.php"] [unique_id "apK9yi04twRPFuquKD3BFAAAAQI"]
[Sat Aug 29 05:08:59.015436 2026] [security2:error] [pid 1041789:tid 1042019] [client 20.104.49.130:57503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/wen.php"] [unique_id "apK9y4v3RhPI65jTFG7Y4wAAA3Y"]
[Sat Aug 29 05:08:59.018223 2026] [security2:error] [pid 1034096:tid 1034272] [client 45.148.10.62:44896] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.xga.zdx.mybluehost.me"] [uri "/.env"] [unique_id "apK9yy04twRPFuquKD3BFwAAAJo"]
[Sat Aug 29 05:08:59.023952 2026] [security2:error] [pid 1041789:tid 1041959] [client 45.125.67.3:45490] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/wishlist-member-x/readme.txt"] [unique_id "apK9y4v3RhPI65jTFG7Y5gAAAzo"]
[Sat Aug 29 05:08:59.024318 2026] [security2:error] [pid 1034096:tid 1034374] [client 45.125.67.3:45894] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/ai-engine/readme.txt"] [unique_id "apK9yy04twRPFuquKD3BGAAAAQA"]
[Sat Aug 29 05:08:59.030936 2026] [security2:error] [pid 1034096:tid 1034298] [client 146.70.36.124:52812] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "narrowgate-electrical.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "apK9yy04twRPFuquKD3BGQAAALQ"]
[Sat Aug 29 05:08:59.037953 2026] [security2:error] [pid 1041789:tid 1042015] [client 158.23.147.79:11338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/dropdown.php"] [unique_id "apK9y4v3RhPI65jTFG7Y5wAAA3I"]
[Sat Aug 29 05:08:59.038160 2026] [security2:error] [pid 1041789:tid 1042026] [client 45.125.67.3:45436] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/ti-woocommerce-wishlist/readme.txt"] [unique_id "apK9y4v3RhPI65jTFG7Y6AAAA30"]
[Sat Aug 29 05:08:59.038161 2026] [security2:error] [pid 1034096:tid 1034253] [client 45.125.67.3:45522] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/wp-hotel-booking/readme.txt"] [unique_id "apK9yy04twRPFuquKD3BGgAAAIc"]
[Sat Aug 29 05:08:59.038160 2026] [security2:error] [pid 1034096:tid 1034291] [client 45.125.67.3:45482] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/wp-ticket-ultra/readme.txt"] [unique_id "apK9yy04twRPFuquKD3BGwAAAK0"]
[Sat Aug 29 05:08:59.038279 2026] [security2:error] [pid 1041789:tid 1041948] [client 45.125.67.3:45548] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/customify-sites/readme.txt"] [unique_id "apK9y4v3RhPI65jTFG7Y6QAAAy8"]
[Sat Aug 29 05:08:59.038451 2026] [security2:error] [pid 1034096:tid 1034342] [client 45.125.67.3:45538] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/ali2woo-lite/readme.txt"] [unique_id "apK9yy04twRPFuquKD3BHAAAAOA"]
[Sat Aug 29 05:08:59.044919 2026] [security2:error] [pid 1034096:tid 1034353] [client 45.125.67.3:45428] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/z-downloads/readme.txt"] [unique_id "apK9yy04twRPFuquKD3BHQAAAOs"]
[Sat Aug 29 05:08:59.048777 2026] [security2:error] [pid 1041789:tid 1041970] [client 40.83.93.50:20848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-content/disagrsxr.php"] [unique_id "apK9y4v3RhPI65jTFG7Y6gAAA0U"]
[Sat Aug 29 05:08:59.061477 2026] [security2:error] [pid 1034096:tid 1034319] [client 45.125.67.3:45554] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/mp-timetable/readme.txt"] [unique_id "apK9yy04twRPFuquKD3BHwAAAMk"]
[Sat Aug 29 05:08:59.061480 2026] [security2:error] [pid 1041789:tid 1041988] [client 45.125.67.3:45578] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/activedemand/readme.txt"] [unique_id "apK9y4v3RhPI65jTFG7Y6wAAA1c"]
[Sat Aug 29 05:08:59.061494 2026] [security2:error] [pid 1034096:tid 1034361] [client 45.125.67.3:45928] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/chauffeur-booking-system/readme.txt"] [unique_id "apK9yy04twRPFuquKD3BIAAAAPM"]
[Sat Aug 29 05:08:59.061972 2026] [security2:error] [pid 1041789:tid 1042054] [client 45.125.67.3:45576] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/parcelpanel/readme.txt"] [unique_id "apK9y4v3RhPI65jTFG7Y7AAAA5k"]
[Sat Aug 29 05:08:59.062009 2026] [security2:error] [pid 1041789:tid 1041981] [client 45.125.67.3:45570] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/slideshow-gallery/readme.txt"] [unique_id "apK9y4v3RhPI65jTFG7Y7gAAA1A"]
[Sat Aug 29 05:08:59.062238 2026] [security2:error] [pid 1041789:tid 1042049] [client 45.125.67.3:45922] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/easy-form-builder/readme.txt"] [unique_id "apK9y4v3RhPI65jTFG7Y7wAAA5Q"]
[Sat Aug 29 05:08:59.063852 2026] [security2:error] [pid 1041789:tid 1042041] [client 45.125.67.3:45464] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/superstorefinder-wp/readme.txt"] [unique_id "apK9y4v3RhPI65jTFG7Y8AAAA4w"]
[Sat Aug 29 05:08:59.065249 2026] [security2:error] [pid 1041789:tid 1042031] [client 158.23.147.79:17554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/goat.php"] [unique_id "apK9y4v3RhPI65jTFG7Y8QAAA4I"]
[Sat Aug 29 05:08:59.073027 2026] [security2:error] [pid 1041789:tid 1041940] [client 45.148.10.62:44884] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.xfs.rxf.mybluehost.me"] [uri "/.env"] [unique_id "apK9y4v3RhPI65jTFG7Y8wAAAyc"]
[Sat Aug 29 05:08:59.078740 2026] [security2:error] [pid 1041789:tid 1041945] [client 52.139.37.240:1917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jaimiegellerjewelry.com"] [uri "/contentloader1.php"] [unique_id "apK9y4v3RhPI65jTFG7Y9AAAAyw"]
[Sat Aug 29 05:08:59.087368 2026] [security2:error] [pid 1041789:tid 1042012] [client 93.123.109.228:51432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/.wp-config.php.swp"] [unique_id "apK9y4v3RhPI65jTFG7Y9QAAA28"]
[Sat Aug 29 05:08:59.104989 2026] [security2:error] [pid 1034096:tid 1034285] [client 20.100.175.163:1275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/lock360.php"] [unique_id "apK9yy04twRPFuquKD3BIwAAAKc"]
[Sat Aug 29 05:08:59.111100 2026] [security2:error] [pid 1041789:tid 1042032] [client 20.48.251.3:14121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/phpsysinfo.php"] [unique_id "apK9y4v3RhPI65jTFG7Y-AAAA4M"]
[Sat Aug 29 05:08:59.116428 2026] [security2:error] [pid 1034096:tid 1034277] [client 93.123.109.228:49262] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/development/.env"] [unique_id "apK9yy04twRPFuquKD3BJAAAAJ8"]
[Sat Aug 29 05:08:59.122573 2026] [security2:error] [pid 1041789:tid 1041960] [client 45.125.67.3:45646] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/country-state-city-auto-dropdown/readme.txt"] [unique_id "apK9y4v3RhPI65jTFG7Y-gAAAzs"]
[Sat Aug 29 05:08:59.126266 2026] [security2:error] [pid 1041789:tid 1041860] [remote 74.7.227.189:46136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 189.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pinnacleforms.com"] [uri "/Dates4Me.php"] [unique_id "apK9y4v3RhPI65jTFG7Y-wADIjo"], referer: https://mail.pinnacleforms.com/
[Sat Aug 29 05:08:59.135480 2026] [security2:error] [pid 1041789:tid 1041946] [client 93.123.109.228:51480] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/ADMIN/.env"] [unique_id "apK9y4v3RhPI65jTFG7Y_AAAAy0"]
[Sat Aug 29 05:08:59.136001 2026] [security2:error] [pid 1034096:tid 1034347] [client 52.139.37.240:63984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rjrusticfurniture.com"] [uri "/essexec.php"] [unique_id "apK9yy04twRPFuquKD3BJQAAAOU"]
[Sat Aug 29 05:08:59.138051 2026] [security2:error] [pid 1034096:tid 1034317] [client 4.205.62.107:6487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/register.php"] [unique_id "apK9yy04twRPFuquKD3BJgAAAMc"]
[Sat Aug 29 05:08:59.138659 2026] [security2:error] [pid 1041789:tid 1042000] [client 20.197.61.180:1888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/blog.php"] [unique_id "apK9y4v3RhPI65jTFG7Y_QAAA2M"]
[Sat Aug 29 05:08:59.166511 2026] [security2:error] [pid 1034096:tid 1034273] [client 45.148.10.62:44896] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.xga.zdx.mybluehost.me"] [uri "/.env"] [unique_id "apK9yy04twRPFuquKD3BKwAAAJs"]
[Sat Aug 29 05:08:59.174556 2026] [security2:error] [pid 1034096:tid 1034265] [client 4.205.62.107:62734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/xda.php"] [unique_id "apK9yy04twRPFuquKD3BLQAAAJM"]
[Sat Aug 29 05:08:59.184025 2026] [security2:error] [pid 1041789:tid 1041944] [client 4.205.62.107:25941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/rpk.php"] [unique_id "apK9y4v3RhPI65jTFG7ZAgAAAys"]
[Sat Aug 29 05:08:59.184753 2026] [security2:error] [pid 1034096:tid 1034271] [client 20.220.204.93:64238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/ccu.php"] [unique_id "apK9yy04twRPFuquKD3BLgAAAJk"]
[Sat Aug 29 05:08:59.185270 2026] [security2:error] [pid 1041789:tid 1041971] [client 93.123.109.228:49160] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/demo/.env"] [unique_id "apK9y4v3RhPI65jTFG7ZAQAAA0Y"]
[Sat Aug 29 05:08:59.192839 2026] [security2:error] [pid 1034096:tid 1034263] [client 93.123.109.228:51490] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/developer/.env"] [unique_id "apK9yy04twRPFuquKD3BMAAAAJE"]
[Sat Aug 29 05:08:59.203783 2026] [security2:error] [pid 1034096:tid 1034306] [client 158.23.147.79:50161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK9yy04twRPFuquKD3BMQAAALw"]
[Sat Aug 29 05:08:59.206036 2026] [security2:error] [pid 1034096:tid 1034292] [client 20.104.49.130:39052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/kgoc6awap3napxxxdCdefault.php"] [unique_id "apK9yy04twRPFuquKD3BMgAAAK4"]
[Sat Aug 29 05:08:59.209967 2026] [security2:error] [pid 1041789:tid 1042024] [client 45.125.67.3:45476] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/demo-my-wordpress/readme.txt"] [unique_id "apK9y4v3RhPI65jTFG7ZBQAAA3s"]
[Sat Aug 29 05:08:59.214719 2026] [security2:error] [pid 1041789:tid 1041936] [client 93.123.109.228:51510] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/dev/.env"] [unique_id "apK9y4v3RhPI65jTFG7ZBgAAAyM"]
[Sat Aug 29 05:08:59.249730 2026] [security2:error] [pid 1034096:tid 1034351] [client 20.48.251.3:33334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/sgd.php"] [unique_id "apK9yy04twRPFuquKD3BNQAAAOk"]
[Sat Aug 29 05:08:59.251205 2026] [security2:error] [pid 1034096:tid 1034325] [client 45.148.10.62:44876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.xey.pwx.mybluehost.me"] [uri "/stripe/.env"] [unique_id "apK9yy04twRPFuquKD3BNgAAAM8"]
[Sat Aug 29 05:08:59.259536 2026] [security2:error] [pid 1034096:tid 1034363] [client 93.123.109.228:49130] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/develop/.env"] [unique_id "apK9yy04twRPFuquKD3BNwAAAPU"]
[Sat Aug 29 05:08:59.265904 2026] [security2:error] [pid 1034096:tid 1034310] [client 20.63.219.114:19862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/flower.php"] [unique_id "apK9yy04twRPFuquKD3BOQAAAMA"]
[Sat Aug 29 05:08:59.273581 2026] [security2:error] [pid 1041789:tid 1041989] [client 45.125.67.3:45580] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/real-estate-listing-realtyna-wpl/readme.txt"] [unique_id "apK9y4v3RhPI65jTFG7ZDAAAA1g"]
[Sat Aug 29 05:08:59.274478 2026] [security2:error] [pid 1041789:tid 1042018] [client 45.125.67.3:45958] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/web-directory-free/readme.txt"] [unique_id "apK9y4v3RhPI65jTFG7ZDQAAA3U"]
[Sat Aug 29 05:08:59.274617 2026] [security2:error] [pid 1041789:tid 1041934] [client 45.125.67.3:45518] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/product-designer/readme.txt"] [unique_id "apK9y4v3RhPI65jTFG7ZDgAAAyE"]
[Sat Aug 29 05:08:59.275110 2026] [security2:error] [pid 1034096:tid 1034314] [client 20.63.219.114:15369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/gecko-new.php"] [unique_id "apK9yy04twRPFuquKD3BPQAAAMQ"]
[Sat Aug 29 05:08:59.277999 2026] [security2:error] [pid 1034096:tid 1034372] [client 93.123.109.228:51372] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/API/.env"] [unique_id "apK9yy04twRPFuquKD3BPgAAAP4"]
[Sat Aug 29 05:08:59.280296 2026] [security2:error] [pid 1034096:tid 1034313] [client 52.139.37.240:1396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jaimiegellerjewelry.com"] [uri "/upfile.php"] [unique_id "apK9yy04twRPFuquKD3BPwAAAMM"]
[Sat Aug 29 05:08:59.286872 2026] [security2:error] [pid 1041789:tid 1041969] [client 20.197.61.180:14438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/extractable-loader-head.php"] [unique_id "apK9y4v3RhPI65jTFG7ZDwAAA0Q"]
[Sat Aug 29 05:08:59.287482 2026] [security2:error] [pid 1034096:tid 1034321] [client 20.196.209.81:7483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-admin/pk.php"] [unique_id "apK9yy04twRPFuquKD3BQQAAAMs"]
[Sat Aug 29 05:08:59.299771 2026] [security2:error] [pid 1034096:tid 1034268] [client 4.205.62.107:51476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/php-info.php"] [unique_id "apK9yy04twRPFuquKD3BQwAAAJY"]
[Sat Aug 29 05:08:59.319962 2026] [security2:error] [pid 1034096:tid 1034284] [client 45.125.67.3:45664] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/admin-and-client-message-after-order-for-woocommerce/readme.txt"] [unique_id "apK9yy04twRPFuquKD3BRwAAAKY"]
[Sat Aug 29 05:08:59.319962 2026] [security2:error] [pid 1034096:tid 1034252] [client 45.125.67.3:45966] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/s2member/readme.txt"] [unique_id "apK9yy04twRPFuquKD3BRgAAAIY"]
[Sat Aug 29 05:08:59.321052 2026] [security2:error] [pid 1034096:tid 1034309] [client 158.158.54.35:34665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/item.php"] [unique_id "apK9yy04twRPFuquKD3BSAAAAL8"]
[Sat Aug 29 05:08:59.329986 2026] [security2:error] [pid 1041789:tid 1041932] [client 45.125.67.3:45610] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/wp-tripadvisor-review-slider/readme.txt"] [unique_id "apK9y4v3RhPI65jTFG7ZEAAAAx8"]
[Sat Aug 29 05:08:59.332665 2026] [security2:error] [pid 1041789:tid 1042046] [client 52.139.37.240:8509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rjrusticfurniture.com"] [uri "/fw.php"] [unique_id "apK9y4v3RhPI65jTFG7ZEQAAA5E"]
[Sat Aug 29 05:08:59.333662 2026] [security2:error] [pid 1034096:tid 1034320] [client 20.151.200.44:63819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/console.php"] [unique_id "apK9yy04twRPFuquKD3BSQAAAMo"]
[Sat Aug 29 05:08:59.365894 2026] [security2:error] [pid 1041789:tid 1042030] [client 45.148.10.62:44878] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.xfe.fme.mybluehost.me"] [uri "/stripe/.env"] [unique_id "apK9y4v3RhPI65jTFG7ZEgAAA4E"]
[Sat Aug 29 05:08:59.366163 2026] [security2:error] [pid 1034096:tid 1034361] [client 20.220.204.93:64152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/ak.php"] [unique_id "apK9yy04twRPFuquKD3BSgAAAPM"]
[Sat Aug 29 05:08:59.369416 2026] [security2:error] [pid 1041789:tid 1041937] [client 20.196.209.81:1095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/disagraeosc.php"] [unique_id "apK9y4v3RhPI65jTFG7ZEwAAAyQ"]
[Sat Aug 29 05:08:59.380736 2026] [security2:error] [pid 1034096:tid 1034346] [client 20.48.251.3:14278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/fleen.php"] [unique_id "apK9yy04twRPFuquKD3BTAAAAOQ"]
[Sat Aug 29 05:08:59.385639 2026] [autoindex:error] [pid 1041789:tid 1041997] [client 45.148.10.62:44884] AH01276: Cannot serve directory /home3/xfsrxfmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:08:59.387842 2026] [security2:error] [pid 1034096:tid 1034276] [client 74.248.24.12:15026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/bthil.php"] [unique_id "apK9yy04twRPFuquKD3BTQAAAJ4"]
[Sat Aug 29 05:08:59.395545 2026] [security2:error] [pid 1034096:tid 1034365] [client 40.83.93.50:12540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/class-walker-category-dropdown-class.php"] [unique_id "apK9yy04twRPFuquKD3BTgAAAPc"]
[Sat Aug 29 05:08:59.396421 2026] [security2:error] [pid 1041789:tid 1041977] [client 45.125.67.3:45800] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/geodirectory/readme.txt"] [unique_id "apK9y4v3RhPI65jTFG7ZFgAAA0w"]
[Sat Aug 29 05:08:59.397012 2026] [security2:error] [pid 1041789:tid 1042043] [client 45.125.67.3:45986] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/woo-social-login/readme.txt"] [unique_id "apK9y4v3RhPI65jTFG7ZFwAAA44"]
[Sat Aug 29 05:08:59.399432 2026] [security2:error] [pid 1041789:tid 1042047] [client 45.125.67.3:45676] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/wp-recall/readme.txt"] [unique_id "apK9y4v3RhPI65jTFG7ZGAAAA5I"]
[Sat Aug 29 05:08:59.403584 2026] [security2:error] [pid 1041789:tid 1042003] [client 20.104.49.130:60958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/dragonshell.php"] [unique_id "apK9y4v3RhPI65jTFG7ZGQAAA2Y"]
[Sat Aug 29 05:08:59.404839 2026] [security2:error] [pid 1041789:tid 1042045] [client 45.125.67.3:45614] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/user-activity-log-pro/readme.txt"] [unique_id "apK9y4v3RhPI65jTFG7ZGgAAA5A"]
[Sat Aug 29 05:08:59.429499 2026] [security2:error] [pid 1034096:tid 1034351] [client 158.23.147.79:17648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/packed.php"] [unique_id "apK9yy04twRPFuquKD3BUQAAAOk"]
[Sat Aug 29 05:08:59.436445 2026] [security2:error] [pid 1041789:tid 1042017] [client 4.232.148.111:35266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/menu.php"] [unique_id "apK9y4v3RhPI65jTFG7ZIAAAA3Q"]
[Sat Aug 29 05:08:59.438391 2026] [security2:error] [pid 1034096:tid 1034310] [client 158.23.147.79:6070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK9yy04twRPFuquKD3BUwAAAMA"]
[Sat Aug 29 05:08:59.440155 2026] [security2:error] [pid 1041789:tid 1042036] [client 20.197.61.180:1046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/alfa-rex1.php"] [unique_id "apK9y4v3RhPI65jTFG7ZIQAAA4c"]
[Sat Aug 29 05:08:59.450434 2026] [security2:error] [pid 1041789:tid 1042015] [client 4.205.62.107:3400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/channels.php"] [unique_id "apK9y4v3RhPI65jTFG7ZIgAAA3I"]
[Sat Aug 29 05:08:59.453168 2026] [security2:error] [pid 1034096:tid 1034350] [client 20.240.128.207:23472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-includes/fonts/admin.php"] [unique_id "apK9yy04twRPFuquKD3BVAAAAOg"]
[Sat Aug 29 05:08:59.473044 2026] [autoindex:error] [pid 1034096:tid 1034372] [client 45.148.10.62:44896] AH01276: Cannot serve directory /home3/xgazdxmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:08:59.478175 2026] [security2:error] [pid 1041789:tid 1041986] [client 45.125.67.3:45686] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/blog2social/readme.txt"] [unique_id "apK9y4v3RhPI65jTFG7ZJQAAA1U"]
[Sat Aug 29 05:08:59.480341 2026] [security2:error] [pid 1034096:tid 1034304] [client 45.125.67.3:45746] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/woocommerce-products-filter/readme.txt"] [unique_id "apK9yy04twRPFuquKD3BWAAAALo"]
[Sat Aug 29 05:08:59.480488 2026] [security2:error] [pid 1034096:tid 1034344] [client 52.139.37.240:1403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jaimiegellerjewelry.com"] [uri "/form.php"] [unique_id "apK9yy04twRPFuquKD3BVwAAAOI"]
[Sat Aug 29 05:08:59.481588 2026] [security2:error] [pid 1034096:tid 1034275] [client 45.125.67.3:45754] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/shortcode-addons/readme.txt"] [unique_id "apK9yy04twRPFuquKD3BWQAAAJ0"]
[Sat Aug 29 05:08:59.481588 2026] [security2:error] [pid 1041789:tid 1041992] [client 45.125.67.3:45702] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/embedpress/readme.txt"] [unique_id "apK9y4v3RhPI65jTFG7ZJgAAA1s"]
[Sat Aug 29 05:08:59.481819 2026] [security2:error] [pid 1034096:tid 1034312] [client 45.125.67.3:45714] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/buddyforms/readme.txt"] [unique_id "apK9yy04twRPFuquKD3BWgAAAMI"]
[Sat Aug 29 05:08:59.489775 2026] [security2:error] [pid 1041789:tid 1041968] [client 40.83.93.50:11932] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/1.php7"] [unique_id "apK9y4v3RhPI65jTFG7ZKAAAA0M"]
[Sat Aug 29 05:08:59.489863 2026] [security2:error] [pid 1041789:tid 1041968] [client 40.83.93.50:11932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/1.php7"] [unique_id "apK9y4v3RhPI65jTFG7ZKAAAA0M"]
[Sat Aug 29 05:08:59.497062 2026] [security2:error] [pid 1034096:tid 1034252] [client 93.123.109.228:51464] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/APP/.env"] [unique_id "apK9yy04twRPFuquKD3BWwAAAIY"]
[Sat Aug 29 05:08:59.497539 2026] [security2:error] [pid 1034096:tid 1034253] [client 35.221.212.112:37812] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/.env"] [unique_id "apK9yy04twRPFuquKD3BXAAAAIc"]
[Sat Aug 29 05:08:59.497649 2026] [security2:error] [pid 1034096:tid 1034253] [client 35.221.212.112:37812] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "autodiscover.beraluzarchive.org"] [uri "/.env"] [unique_id "apK9yy04twRPFuquKD3BXAAAAIc"]
[Sat Aug 29 05:08:59.499048 2026] [security2:error] [pid 1034096:tid 1034284] [client 93.123.109.228:51416] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/Api/.env"] [unique_id "apK9yy04twRPFuquKD3BXQAAAKY"]
[Sat Aug 29 05:08:59.499058 2026] [security2:error] [pid 1034096:tid 1034342] [client 35.221.212.112:37832] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "autodiscover.beraluzarchive.org"] [uri "/assets../.env"] [unique_id "apK9yy04twRPFuquKD3BYAAAAOA"]
[Sat Aug 29 05:08:59.499451 2026] [security2:error] [pid 1041789:tid 1041994] [client 35.221.212.112:37816] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/uploads../.env"] [unique_id "apK9y4v3RhPI65jTFG7ZKQAAA10"]
[Sat Aug 29 05:08:59.500657 2026] [security2:error] [pid 1034096:tid 1034301] [client 35.221.212.112:37840] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/v1/.env"] [unique_id "apK9yy04twRPFuquKD3BYgAAALc"]
[Sat Aug 29 05:08:59.502100 2026] [security2:error] [pid 1041789:tid 1041942] [client 35.221.212.112:37850] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/v2/.env"] [unique_id "apK9y4v3RhPI65jTFG7ZKwAAAyk"]
[Sat Aug 29 05:08:59.502100 2026] [security2:error] [pid 1041789:tid 1042005] [client 35.221.212.112:37842] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/.env"] [unique_id "apK9y4v3RhPI65jTFG7ZKgAAA2g"]
[Sat Aug 29 05:08:59.503215 2026] [security2:error] [pid 1034096:tid 1034324] [client 35.221.212.112:37864] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/.docker/.env"] [unique_id "apK9yy04twRPFuquKD3BYwAAAM4"]
[Sat Aug 29 05:08:59.504533 2026] [security2:error] [pid 1034096:tid 1034374] [client 93.123.109.228:49262] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/erp/.env"] [unique_id "apK9yy04twRPFuquKD3BZAAAAQA"]
[Sat Aug 29 05:08:59.504840 2026] [security2:error] [pid 1034096:tid 1034287] [client 35.221.212.112:37830] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/img../.env"] [unique_id "apK9yy04twRPFuquKD3BZgAAAKk"]
[Sat Aug 29 05:08:59.507804 2026] [security2:error] [pid 1034096:tid 1034322] [client 35.221.212.112:37838] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/images../.env"] [unique_id "apK9yy04twRPFuquKD3BagAAAMw"]
[Sat Aug 29 05:08:59.510017 2026] [security2:error] [pid 1041789:tid 1041980] [client 35.221.212.112:37924] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/.env.backup"] [unique_id "apK9y4v3RhPI65jTFG7ZMAAAA08"]
[Sat Aug 29 05:08:59.510735 2026] [security2:error] [pid 1034096:tid 1034347] [client 35.221.212.112:37940] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/.env.swp"] [unique_id "apK9yy04twRPFuquKD3BbAAAAOU"]
[Sat Aug 29 05:08:59.512229 2026] [security2:error] [pid 1034096:tid 1034332] [client 35.221.212.112:38070] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "autodiscover.beraluzarchive.org"] [uri "/server/.env"] [unique_id "apK9yy04twRPFuquKD3BcwAAANY"]
[Sat Aug 29 05:08:59.513067 2026] [security2:error] [pid 1034096:tid 1034361] [client 35.221.212.112:37906] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "autodiscover.beraluzarchive.org"] [uri "/.env.bak"] [unique_id "apK9yy04twRPFuquKD3BdwAAAPM"]
[Sat Aug 29 05:08:59.513133 2026] [security2:error] [pid 1034096:tid 1034285] [client 35.221.212.112:37962] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/.env.old"] [unique_id "apK9yy04twRPFuquKD3BbgAAAKc"]
[Sat Aug 29 05:08:59.513259 2026] [security2:error] [pid 1034096:tid 1034285] [client 35.221.212.112:37962] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "autodiscover.beraluzarchive.org"] [uri "/.env.old"] [unique_id "apK9yy04twRPFuquKD3BbgAAAKc"]
[Sat Aug 29 05:08:59.513310 2026] [security2:error] [pid 1034096:tid 1034293] [client 35.221.212.112:38054] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/web/.env"] [unique_id "apK9yy04twRPFuquKD3BbQAAAK8"]
[Sat Aug 29 05:08:59.513539 2026] [security2:error] [pid 1034096:tid 1034317] [client 35.221.212.112:38014] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/app/.env"] [unique_id "apK9yy04twRPFuquKD3BcQAAAMc"]
[Sat Aug 29 05:08:59.513663 2026] [security2:error] [pid 1034096:tid 1034282] [client 35.221.212.112:37978] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/backend/.env"] [unique_id "apK9yy04twRPFuquKD3BdQAAAKQ"]
[Sat Aug 29 05:08:59.513835 2026] [security2:error] [pid 1034096:tid 1034340] [client 35.221.212.112:38062] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/core/.env"] [unique_id "apK9yy04twRPFuquKD3BeQAAAN4"]
[Sat Aug 29 05:08:59.513850 2026] [security2:error] [pid 1034096:tid 1034282] [client 35.221.212.112:37978] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "autodiscover.beraluzarchive.org"] [uri "/backend/.env"] [unique_id "apK9yy04twRPFuquKD3BdQAAAKQ"]
[Sat Aug 29 05:08:59.516562 2026] [security2:error] [pid 1034096:tid 1034373] [client 35.221.212.112:37994] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/api/.env"] [unique_id "apK9yy04twRPFuquKD3BfQAAAP8"]
[Sat Aug 29 05:08:59.516655 2026] [security2:error] [pid 1034096:tid 1034318] [client 35.221.212.112:38020] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/laravel/.env"] [unique_id "apK9yy04twRPFuquKD3BegAAAMg"]
[Sat Aug 29 05:08:59.516658 2026] [security2:error] [pid 1034096:tid 1034297] [client 35.221.212.112:38004] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/config/.env"] [unique_id "apK9yy04twRPFuquKD3BewAAALM"]
[Sat Aug 29 05:08:59.516897 2026] [security2:error] [pid 1041789:tid 1042032] [client 93.123.109.228:51358] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/BACK/.env"] [unique_id "apK9y4v3RhPI65jTFG7ZNwAAA4M"]
[Sat Aug 29 05:08:59.517637 2026] [security2:error] [pid 1034096:tid 1034265] [client 35.221.212.112:38032] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/src/.env"] [unique_id "apK9yy04twRPFuquKD3BfgAAAJM"]
[Sat Aug 29 05:08:59.518162 2026] [security2:error] [pid 1034096:tid 1034368] [client 35.221.212.112:38042] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/docker/.env"] [unique_id "apK9yy04twRPFuquKD3BfwAAAPo"]
[Sat Aug 29 05:08:59.519670 2026] [security2:error] [pid 1034096:tid 1034271] [client 35.221.212.112:38050] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/frontend/.env"] [unique_id "apK9yy04twRPFuquKD3BgAAAAJk"]
[Sat Aug 29 05:08:59.520233 2026] [security2:error] [pid 1034096:tid 1034271] [client 35.221.212.112:38050] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "autodiscover.beraluzarchive.org"] [uri "/frontend/.env"] [unique_id "apK9yy04twRPFuquKD3BgAAAAJk"]
[Sat Aug 29 05:08:59.528341 2026] [security2:error] [pid 1034096:tid 1034314] [client 52.139.37.240:8480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rjrusticfurniture.com"] [uri "/zwso.php"] [unique_id "apK9yy04twRPFuquKD3BgwAAAMQ"]
[Sat Aug 29 05:08:59.528391 2026] [security2:error] [pid 1041789:tid 1042050] [client 40.83.93.50:16642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-content/f35.php"] [unique_id "apK9y4v3RhPI65jTFG7ZOwAAA5U"]
[Sat Aug 29 05:08:59.529306 2026] [security2:error] [pid 1041789:tid 1042022] [client 93.123.109.228:51480] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/BACKEND/.env"] [unique_id "apK9y4v3RhPI65jTFG7ZPAAAA3k"]
[Sat Aug 29 05:08:59.541631 2026] [security2:error] [pid 1041789:tid 1041935] [client 93.123.109.228:51390] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/BE/.env"] [unique_id "apK9y4v3RhPI65jTFG7ZPgAAAyI"]
[Sat Aug 29 05:08:59.548809 2026] [security2:error] [pid 1041789:tid 1042000] [client 20.220.204.93:64181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/lib.php"] [unique_id "apK9y4v3RhPI65jTFG7ZQAAAA2M"]
[Sat Aug 29 05:08:59.549170 2026] [security2:error] [pid 1034096:tid 1034255] [client 93.123.109.228:51406] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/Be/.env"] [unique_id "apK9yy04twRPFuquKD3BhAAAAIk"]
[Sat Aug 29 05:08:59.574784 2026] [security2:error] [pid 1034096:tid 1034263] [client 93.123.109.228:51372] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/Backend/.env"] [unique_id "apK9yy04twRPFuquKD3BhgAAAJE"]
[Sat Aug 29 05:08:59.579575 2026] [security2:error] [pid 1034096:tid 1034300] [client 20.48.251.3:14019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/upload.form.php"] [unique_id "apK9yy04twRPFuquKD3BiAAAALY"]
[Sat Aug 29 05:08:59.584061 2026] [security2:error] [pid 1034096:tid 1034251] [client 93.123.109.228:49130] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/etc/apache2/apache2.conf"] [unique_id "apK9yy04twRPFuquKD3BiQAAAIU"]
[Sat Aug 29 05:08:59.587374 2026] [security2:error] [pid 1034096:tid 1034289] [client 20.100.175.163:29806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-conflg.php"] [unique_id "apK9yy04twRPFuquKD3BiwAAAKs"]
[Sat Aug 29 05:08:59.624838 2026] [security2:error] [pid 1034096:tid 1034320] [client 20.63.219.114:15368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/meta.php"] [unique_id "apK9yy04twRPFuquKD3BjgAAAMo"]
[Sat Aug 29 05:08:59.632127 2026] [security2:error] [pid 1041789:tid 1041954] [client 4.205.62.107:21615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/ws62.php"] [unique_id "apK9y4v3RhPI65jTFG7ZQQAAAzU"]
[Sat Aug 29 05:08:59.641805 2026] [security2:error] [pid 1034096:tid 1034335] [client 146.70.36.124:52826] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "narrowgate-electrical.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "apK9yy04twRPFuquKD3BjwAAANk"]
[Sat Aug 29 05:08:59.668731 2026] [security2:error] [pid 1041789:tid 1041946] [client 20.63.219.114:2451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/wp-admin.php"] [unique_id "apK9y4v3RhPI65jTFG7ZQwAAAy0"]
[Sat Aug 29 05:08:59.669395 2026] [security2:error] [pid 1034096:tid 1034358] [client 45.125.67.3:45804] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/contact-form-to-db/readme.txt"] [unique_id "apK9yy04twRPFuquKD3BkAAAAPA"]
[Sat Aug 29 05:08:59.678700 2026] [security2:error] [pid 1034096:tid 1034304] [client 158.23.147.79:5975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK9yy04twRPFuquKD3BkQAAALo"]
[Sat Aug 29 05:08:59.679924 2026] [security2:error] [pid 1041789:tid 1042014] [client 93.123.109.228:51522] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/fe/.env"] [unique_id "apK9y4v3RhPI65jTFG7ZRQAAA3E"]
[Sat Aug 29 05:08:59.681653 2026] [security2:error] [pid 1041789:tid 1041958] [client 20.196.209.81:18262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-admin/plugin-install.php"] [unique_id "apK9y4v3RhPI65jTFG7ZRgAAAzk"]
[Sat Aug 29 05:08:59.695751 2026] [security2:error] [pid 1034096:tid 1034325] [client 52.139.37.240:1864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jaimiegellerjewelry.com"] [uri "/wp-sigunq.php"] [unique_id "apK9yy04twRPFuquKD3BkgAAAM8"]
[Sat Aug 29 05:08:59.696431 2026] [security2:error] [pid 1041789:tid 1042052] [client 45.148.10.62:44884] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.xfs.rxf.mybluehost.me"] [uri "/api/.env"] [unique_id "apK9y4v3RhPI65jTFG7ZRwAAA5c"]
[Sat Aug 29 05:08:59.700064 2026] [security2:error] [pid 1041789:tid 1041978] [client 20.151.200.44:62588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/blnux.php"] [unique_id "apK9y4v3RhPI65jTFG7ZSAAAA00"]
[Sat Aug 29 05:08:59.716838 2026] [security2:error] [pid 1041789:tid 1042055] [client 20.104.49.130:51103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/albin.php"] [unique_id "apK9y4v3RhPI65jTFG7ZSQAAA5o"]
[Sat Aug 29 05:08:59.728126 2026] [security2:error] [pid 1034096:tid 1034268] [client 52.139.37.240:8617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rjrusticfurniture.com"] [uri "/admin/function.php"] [unique_id "apK9yy04twRPFuquKD3BkwAAAJY"]
[Sat Aug 29 05:08:59.756878 2026] [security2:error] [pid 1041789:tid 1042020] [client 45.125.67.3:45708] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/droip/readme.txt"] [unique_id "apK9y4v3RhPI65jTFG7ZSwAAA3c"]
[Sat Aug 29 05:08:59.757493 2026] [security2:error] [pid 1034096:tid 1034374] [client 20.220.204.93:62307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/wp-style.php"] [unique_id "apK9yy04twRPFuquKD3BlwAAAQA"]
[Sat Aug 29 05:08:59.766989 2026] [security2:error] [pid 1034096:tid 1034351] [client 158.158.54.35:34627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/t.php"] [unique_id "apK9yy04twRPFuquKD3BmQAAAOk"]
[Sat Aug 29 05:08:59.786318 2026] [security2:error] [pid 1034096:tid 1034367] [client 20.196.209.81:1834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/about.php525"] [unique_id "apK9yy04twRPFuquKD3BmwAAAPk"]
[Sat Aug 29 05:08:59.786596 2026] [security2:error] [pid 1034096:tid 1034293] [client 45.148.10.62:44896] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.xga.zdx.mybluehost.me"] [uri "/api/.env"] [unique_id "apK9yy04twRPFuquKD3BmgAAAK8"]
[Sat Aug 29 05:08:59.844286 2026] [security2:error] [pid 1041789:tid 1041964] [client 93.123.109.228:51494] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/front/.env"] [unique_id "apK9y4v3RhPI65jTFG7ZTwAAAz8"]
[Sat Aug 29 05:08:59.846853 2026] [security2:error] [pid 1041789:tid 1042006] [client 45.148.10.62:44884] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.xfs.rxf.mybluehost.me"] [uri "/.env.bak"] [unique_id "apK9y4v3RhPI65jTFG7ZUAAAA2k"]
[Sat Aug 29 05:08:59.853577 2026] [security2:error] [pid 1034096:tid 1034309] [client 93.123.109.228:49294] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/frontend/.env"] [unique_id "apK9yy04twRPFuquKD3BngAAAL8"]
[Sat Aug 29 05:08:59.864881 2026] [security2:error] [pid 1034096:tid 1034255] [client 20.104.49.130:60762] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/1.php"] [unique_id "apK9yy04twRPFuquKD3BoAAAAIk"]
[Sat Aug 29 05:08:59.864974 2026] [security2:error] [pid 1034096:tid 1034255] [client 20.104.49.130:60762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/1.php"] [unique_id "apK9yy04twRPFuquKD3BoAAAAIk"]
[Sat Aug 29 05:08:59.873320 2026] [security2:error] [pid 1034096:tid 1034310] [client 20.197.61.180:12302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/bypass.php"] [unique_id "apK9yy04twRPFuquKD3BoQAAAMA"]
[Sat Aug 29 05:08:59.890737 2026] [security2:error] [pid 1041789:tid 1041985] [client 52.139.37.240:56368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.jaimiegellerjewelry.com"] [uri "/07.php"] [unique_id "apK9y4v3RhPI65jTFG7ZUgAAA1Q"]
[Sat Aug 29 05:08:59.894142 2026] [security2:error] [pid 1034096:tid 1034292] [client 45.148.10.62:44876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.xey.pwx.mybluehost.me"] [uri "/backend/.env"] [unique_id "apK9yy04twRPFuquKD3BowAAAK4"]
[Sat Aug 29 05:08:59.896062 2026] [security2:error] [pid 1041789:tid 1042051] [client 93.123.109.228:49160] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/etc/boto.cfg"] [unique_id "apK9y4v3RhPI65jTFG7ZUwAAA5Y"]
[Sat Aug 29 05:08:59.901032 2026] [security2:error] [pid 1041789:tid 1041989] [client 40.83.93.50:13515] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webmail.transportesorion.net"] [uri "/1.php7"] [unique_id "apK9y4v3RhPI65jTFG7ZVQAAA1g"]
[Sat Aug 29 05:08:59.901138 2026] [security2:error] [pid 1041789:tid 1041989] [client 40.83.93.50:13515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/1.php7"] [unique_id "apK9y4v3RhPI65jTFG7ZVQAAA1g"]
[Sat Aug 29 05:08:59.918740 2026] [security2:error] [pid 1034096:tid 1034324] [client 4.232.148.111:31025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK9yy04twRPFuquKD3BpgAAAM4"]
[Sat Aug 29 05:08:59.931348 2026] [security2:error] [pid 1034096:tid 1034355] [client 20.220.204.93:64217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/browse.php"] [unique_id "apK9yy04twRPFuquKD3BpwAAAO0"]
[Sat Aug 29 05:08:59.945234 2026] [security2:error] [pid 1034096:tid 1034371] [client 52.139.37.240:8597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rjrusticfurniture.com"] [uri "/zoom1.php"] [unique_id "apK9yy04twRPFuquKD3BqAAAAP0"]
[Sat Aug 29 05:08:59.948960 2026] [security2:error] [pid 1034096:tid 1034365] [client 20.151.200.44:63242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/pentest.php"] [unique_id "apK9yy04twRPFuquKD3BqQAAAPc"]
[Sat Aug 29 05:08:59.952997 2026] [security2:error] [pid 1034096:tid 1034361] [client 20.240.128.207:27183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/m.php"] [unique_id "apK9yy04twRPFuquKD3BqwAAAPM"]
[Sat Aug 29 05:08:59.953082 2026] [security2:error] [pid 1034096:tid 1034260] [client 45.148.10.62:44896] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.xga.zdx.mybluehost.me"] [uri "/.env.bak"] [unique_id "apK9yy04twRPFuquKD3BqgAAAI4"]
[Sat Aug 29 05:08:59.965307 2026] [security2:error] [pid 1041789:tid 1041998] [client 45.148.10.62:44878] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.xfe.fme.mybluehost.me"] [uri "/backend/.env"] [unique_id "apK9y4v3RhPI65jTFG7ZWQAAA2E"]
[Sat Aug 29 05:08:59.971723 2026] [security2:error] [pid 1034096:tid 1034340] [client 40.83.93.50:17861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/ds.php"] [unique_id "apK9yy04twRPFuquKD3BrgAAAN4"]
[Sat Aug 29 05:08:59.991115 2026] [autoindex:error] [pid 1041789:tid 1041997] [client 20.63.219.114:10443] AH01276: Cannot serve directory /home1/thrbikes/public_html/deargabriel/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:09:00.000858 2026] [security2:error] [pid 1034096:tid 1034339] [client 4.205.62.107:9163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/wp-content/plugin-install.php"] [unique_id "apK9yy04twRPFuquKD3BrwAAAN0"]
[Sat Aug 29 05:09:00.007429 2026] [security2:error] [pid 1041789:tid 1041999] [client 20.63.219.114:10126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/randkeyword.php"] [unique_id "apK9zIv3RhPI65jTFG7ZXAAAA2I"]
[Sat Aug 29 05:09:00.009363 2026] [security2:error] [pid 1041789:tid 1041990] [client 40.83.93.50:20849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-content/index.php"] [unique_id "apK9zIv3RhPI65jTFG7ZXQAAA1k"]
[Sat Aug 29 05:09:00.012210 2026] [security2:error] [pid 1034096:tid 1034285] [client 20.197.61.180:12766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/defaults.php"] [unique_id "apK9zC04twRPFuquKD3BsAAAAKc"]
[Sat Aug 29 05:09:00.047063 2026] [security2:error] [pid 1034096:tid 1034372] [client 45.148.10.62:44876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xey.pwx.mybluehost.me"] [uri "/test.php"] [unique_id "apK9zC04twRPFuquKD3BsgAAAP4"]
[Sat Aug 29 05:09:00.047173 2026] [proxy_http:error] [pid 1017536:tid 1017566] (70007)The timeout specified has expired: [remote 57.141.14.59:50242] AH01102: error reading status line from remote server 127.0.0.1:8443
[Sat Aug 29 05:09:00.047193 2026] [proxy:error] [pid 1017536:tid 1017566] [remote 57.141.14.59:50242] AH00898: Error reading from remote server returned by /shop-cart/
[Sat Aug 29 05:09:00.056385 2026] [proxy_http:error] [pid 1018003:tid 1018181] (70007)The timeout specified has expired: [client 127.0.0.1:14142] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:09:00.056403 2026] [proxy:error] [pid 1018003:tid 1018181] [client 127.0.0.1:14142] AH00898: Error reading from remote server returned by /shop-cart/
[Sat Aug 29 05:09:00.063808 2026] [security2:error] [pid 1041789:tid 1041988] [client 20.48.251.3:33337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/aws_auth.php"] [unique_id "apK9zIv3RhPI65jTFG7ZYQAAA1c"]
[Sat Aug 29 05:09:00.067001 2026] [security2:error] [pid 1034096:tid 1034346] [client 93.123.109.228:49130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/infophp.php"] [unique_id "apK9zC04twRPFuquKD3BswAAAOQ"]
[Sat Aug 29 05:09:00.075511 2026] [security2:error] [pid 1041789:tid 1042011] [client 20.196.209.81:18272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-admin/plugins/img/themes/plugins/maintenance.php"] [unique_id "apK9zIv3RhPI65jTFG7ZYwAAA24"]
[Sat Aug 29 05:09:00.087284 2026] [security2:error] [pid 1034096:tid 1034370] [client 20.63.219.114:2469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/wp-configs.php"] [unique_id "apK9zC04twRPFuquKD3BtQAAAPw"]
[Sat Aug 29 05:09:00.091324 2026] [security2:error] [pid 1034096:tid 1034296] [client 74.248.24.12:22849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/cv.php"] [unique_id "apK9zC04twRPFuquKD3BtgAAALI"]
[Sat Aug 29 05:09:00.104423 2026] [security2:error] [pid 1034096:tid 1034313] [client 52.139.37.240:1400] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.jaimiegellerjewelry.com"] [uri "/c99.php"] [unique_id "apK9zC04twRPFuquKD3BuQAAAMM"]
[Sat Aug 29 05:09:00.109282 2026] [security2:error] [pid 1041789:tid 1042049] [client 45.148.10.62:44878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xfe.fme.mybluehost.me"] [uri "/test.php"] [unique_id "apK9zIv3RhPI65jTFG7ZZAAAA5Q"]
[Sat Aug 29 05:09:00.111023 2026] [security2:error] [pid 1041789:tid 1042003] [client 20.100.175.163:16396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/123.php"] [unique_id "apK9zIv3RhPI65jTFG7ZZQAAA2Y"]
[Sat Aug 29 05:09:00.131271 2026] [security2:error] [pid 1034096:tid 1034277] [client 158.23.147.79:37611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/bk/index.php"] [unique_id "apK9zC04twRPFuquKD3BuwAAAJ8"]
[Sat Aug 29 05:09:00.143589 2026] [security2:error] [pid 1041789:tid 1041981] [client 52.139.37.240:8485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rjrusticfurniture.com"] [uri "/about.php7"] [unique_id "apK9zIv3RhPI65jTFG7ZaAAAA1A"]
[Sat Aug 29 05:09:00.148941 2026] [security2:error] [pid 1041789:tid 1041948] [client 20.220.204.93:64251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/zoo.php"] [unique_id "apK9zIv3RhPI65jTFG7ZaQAAAy8"]
[Sat Aug 29 05:09:00.152484 2026] [security2:error] [pid 1041789:tid 1042021] [client 158.23.147.79:11279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/sad/about.php"] [unique_id "apK9zIv3RhPI65jTFG7ZagAAA3g"]
[Sat Aug 29 05:09:00.161985 2026] [security2:error] [pid 1034096:tid 1034307] [client 20.197.61.180:1893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/headerg.php"] [unique_id "apK9zC04twRPFuquKD3BvQAAAL0"]
[Sat Aug 29 05:09:00.172488 2026] [core:error] [pid 1041789:tid 1042005] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:00.172505 2026] [core:error] [pid 1041789:tid 1042005] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:00.192467 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.196.209.81:1231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/spip.php"] [unique_id "apK9zIv3RhPI65jTFG7ZbwAAA30"]
[Sat Aug 29 05:09:00.211479 2026] [security2:error] [pid 1041789:tid 1041970] [client 158.158.54.35:31515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/i.php"] [unique_id "apK9zIv3RhPI65jTFG7ZcAAAA0U"]
[Sat Aug 29 05:09:00.236737 2026] [security2:error] [pid 1041789:tid 1041956] [client 103.171.189.88:63970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9zIv3RhPI65jTFG7ZcwAAAzc"]
[Sat Aug 29 05:09:00.236871 2026] [security2:error] [pid 1041789:tid 1041956] [client 103.171.189.88:63970] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9zIv3RhPI65jTFG7ZcwAAAzc"]
[Sat Aug 29 05:09:00.243620 2026] [security2:error] [pid 1034096:tid 1034294] [client 45.125.67.3:45628] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/zynith-seo/readme.txt"] [unique_id "apK9zC04twRPFuquKD3BwgAAALA"]
[Sat Aug 29 05:09:00.247915 2026] [security2:error] [pid 1041789:tid 1042045] [client 146.70.36.124:52834] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "narrowgate-electrical.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "apK9zIv3RhPI65jTFG7ZdQAAA5A"]
[Sat Aug 29 05:09:00.268769 2026] [security2:error] [pid 1041789:tid 1042028] [client 20.151.200.44:63258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/6y7t.php"] [unique_id "apK9zIv3RhPI65jTFG7ZdgAAA38"]
[Sat Aug 29 05:09:00.290121 2026] [security2:error] [pid 1041789:tid 1041982] [client 4.205.62.107:6970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/xqq.php"] [unique_id "apK9zIv3RhPI65jTFG7ZdwAAA1E"]
[Sat Aug 29 05:09:00.290145 2026] [security2:error] [pid 1041789:tid 1041955] [client 20.104.49.130:57651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/fs.php"] [unique_id "apK9zIv3RhPI65jTFG7ZeAAAAzY"]
[Sat Aug 29 05:09:00.301330 2026] [security2:error] [pid 1041789:tid 1042027] [client 52.139.37.240:1857] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.jaimiegellerjewelry.com"] [uri "/c99.php"] [unique_id "apK9zIv3RhPI65jTFG7ZeQAAA34"]
[Sat Aug 29 05:09:00.304387 2026] [security2:error] [pid 1034096:tid 1034180] [remote 103.190.47.42:41942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 42.47.190.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fieldsstudios.com"] [uri "/wp-login.php"] [unique_id "apK9zC04twRPFuquKD3BxAAAyDo"]
[Sat Aug 29 05:09:00.322456 2026] [security2:error] [pid 1041789:tid 1041944] [client 45.148.10.62:44884] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.xfs.rxf.mybluehost.me"] [uri "/stripe/.env"] [unique_id "apK9zIv3RhPI65jTFG7ZfAAAAys"]
[Sat Aug 29 05:09:00.323554 2026] [security2:error] [pid 1034096:tid 1034292] [client 4.205.62.107:62913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/pinfo.php"] [unique_id "apK9zC04twRPFuquKD3BxwAAAK4"]
[Sat Aug 29 05:09:00.324829 2026] [security2:error] [pid 1034096:tid 1034300] [client 20.104.49.130:52517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/ccc.php"] [unique_id "apK9zC04twRPFuquKD3ByAAAALY"]
[Sat Aug 29 05:09:00.332813 2026] [security2:error] [pid 1041789:tid 1042023] [client 158.23.147.79:50141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/nf_tracking.php"] [unique_id "apK9zIv3RhPI65jTFG7ZfQAAA3o"]
[Sat Aug 29 05:09:00.335878 2026] [core:error] [pid 1034096:tid 1034251] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:00.335888 2026] [security2:error] [pid 1041789:tid 1042014] [client 4.205.62.107:26654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/saml.php"] [unique_id "apK9zIv3RhPI65jTFG7ZfgAAA3E"]
[Sat Aug 29 05:09:00.335898 2026] [core:error] [pid 1034096:tid 1034251] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:00.344917 2026] [security2:error] [pid 1034096:tid 1034316] [client 93.123.109.228:51564] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/local/.env"] [unique_id "apK9zC04twRPFuquKD3BywAAAMY"]
[Sat Aug 29 05:09:00.346824 2026] [security2:error] [pid 1034096:tid 1034298] [client 93.123.109.228:51548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/info.php"] [unique_id "apK9zC04twRPFuquKD3BzAAAALQ"]
[Sat Aug 29 05:09:00.347334 2026] [security2:error] [pid 1041789:tid 1041947] [client 52.139.37.240:8600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rjrusticfurniture.com"] [uri "/cron.php"] [unique_id "apK9zIv3RhPI65jTFG7ZggAAAy4"]
[Sat Aug 29 05:09:00.348630 2026] [security2:error] [pid 1034096:tid 1034315] [client 20.220.204.93:64229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/elp.php"] [unique_id "apK9zC04twRPFuquKD3BzgAAAMU"]
[Sat Aug 29 05:09:00.348742 2026] [security2:error] [pid 1041789:tid 1042057] [client 20.104.49.130:65242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/wp-blogs.php"] [unique_id "apK9zIv3RhPI65jTFG7ZgwAAA5w"]
[Sat Aug 29 05:09:00.360311 2026] [security2:error] [pid 1034096:tid 1034352] [client 93.123.109.228:49262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/infos.php"] [unique_id "apK9zC04twRPFuquKD3B1AAAAOo"]
[Sat Aug 29 05:09:00.371578 2026] [security2:error] [pid 1041789:tid 1041965] [client 20.63.219.114:10168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/goods.php"] [unique_id "apK9zIv3RhPI65jTFG7ZhAAAA0A"]
[Sat Aug 29 05:09:00.375396 2026] [security2:error] [pid 1041789:tid 1042055] [client 93.123.109.228:51448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK9zIv3RhPI65jTFG7ZhgAAA5o"]
[Sat Aug 29 05:09:00.376000 2026] [security2:error] [pid 1041789:tid 1042007] [client 93.123.109.228:51494] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/market/.env"] [unique_id "apK9zIv3RhPI65jTFG7ZhQAAA2o"]
[Sat Aug 29 05:09:00.403068 2026] [security2:error] [pid 1041789:tid 1042044] [client 40.83.93.50:19576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/ds.php"] [unique_id "apK9zIv3RhPI65jTFG7ZiAAAA48"]
[Sat Aug 29 05:09:00.416155 2026] [security2:error] [pid 1041789:tid 1041969] [client 93.123.109.228:49160] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/lms/.env"] [unique_id "apK9zIv3RhPI65jTFG7ZigAAA0Q"]
[Sat Aug 29 05:09:00.416298 2026] [security2:error] [pid 1034096:tid 1034329] [client 93.123.109.228:49200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/laravel/.env"] [unique_id "apK9zC04twRPFuquKD3B1wAAANM"]
[Sat Aug 29 05:09:00.428370 2026] [security2:error] [pid 1034096:tid 1034321] [client 93.123.109.228:51534] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/marketing/.env"] [unique_id "apK9zC04twRPFuquKD3B2QAAAMs"]
[Sat Aug 29 05:09:00.435601 2026] [security2:error] [pid 1041789:tid 1041949] [client 93.123.109.228:51390] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/admin-app/.env"] [unique_id "apK9zIv3RhPI65jTFG7ZkAAAAzA"]
[Sat Aug 29 05:09:00.443135 2026] [security2:error] [pid 1034096:tid 1034376] [client 45.148.10.62:44896] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.xga.zdx.mybluehost.me"] [uri "/stripe/.env"] [unique_id "apK9zC04twRPFuquKD3B2wAAAQI"]
[Sat Aug 29 05:09:00.455012 2026] [security2:error] [pid 1034096:tid 1034296] [client 4.205.62.107:58410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/xin1.php"] [unique_id "apK9zC04twRPFuquKD3B3AAAALI"]
[Sat Aug 29 05:09:00.457841 2026] [security2:error] [pid 1034096:tid 1034353] [client 20.104.18.15:15323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/one.php"] [unique_id "apK9zC04twRPFuquKD3B3gAAAOs"]
[Sat Aug 29 05:09:00.470111 2026] [security2:error] [pid 1041789:tid 1042024] [client 20.196.209.81:18395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-admin/security.php"] [unique_id "apK9zIv3RhPI65jTFG7ZkQAAA3s"]
[Sat Aug 29 05:09:00.471618 2026] [security2:error] [pid 1034096:tid 1034355] [client 20.63.219.114:2955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/essexec.php"] [unique_id "apK9zC04twRPFuquKD3B3wAAAO0"]
[Sat Aug 29 05:09:00.473621 2026] [security2:error] [pid 1034096:tid 1034317] [client 20.240.128.207:21037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "apK9zC04twRPFuquKD3B3QAAAMc"]
[Sat Aug 29 05:09:00.473755 2026] [security2:error] [pid 1041789:tid 1041991] [client 93.123.109.228:49218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/media/.env"] [unique_id "apK9zIv3RhPI65jTFG7ZkgAAA1o"]
[Sat Aug 29 05:09:00.477751 2026] [security2:error] [pid 1034096:tid 1034269] [client 20.104.18.15:45954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/classwithtostring.php"] [unique_id "apK9zC04twRPFuquKD3B4QAAAJc"]
[Sat Aug 29 05:09:00.488111 2026] [security2:error] [pid 1041789:tid 1041989] [client 20.220.204.93:62329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/666.php"] [unique_id "apK9zIv3RhPI65jTFG7ZlQAAA1g"]
[Sat Aug 29 05:09:00.492293 2026] [security2:error] [pid 1041789:tid 1042001] [client 40.83.93.50:17276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/GOD.php"] [unique_id "apK9zIv3RhPI65jTFG7ZlgAAA2Q"]
[Sat Aug 29 05:09:00.494254 2026] [security2:error] [pid 1041789:tid 1041984] [client 40.83.93.50:20853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-content/install.php"] [unique_id "apK9zIv3RhPI65jTFG7ZlwAAA1M"]
[Sat Aug 29 05:09:00.510427 2026] [security2:error] [pid 1034096:tid 1034370] [client 52.139.37.240:1880] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.jaimiegellerjewelry.com"] [uri "/c99.php"] [unique_id "apK9zC04twRPFuquKD3B5wAAAPw"]
[Sat Aug 29 05:09:00.513583 2026] [security2:error] [pid 1041789:tid 1041998] [client 93.123.109.228:51522] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/new/.env"] [unique_id "apK9zIv3RhPI65jTFG7ZmQAAA2E"]
[Sat Aug 29 05:09:00.524132 2026] [security2:error] [pid 1034096:tid 1034339] [client 45.148.10.62:44900] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.xey.pwx.mybluehost.me"] [uri "/.env.backup"] [unique_id "apK9zC04twRPFuquKD3B6QAAAN0"]
[Sat Aug 29 05:09:00.529485 2026] [security2:error] [pid 1041789:tid 1041997] [client 20.48.251.3:14000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/hiquido.com/index.php"] [unique_id "apK9zIv3RhPI65jTFG7ZmgAAA2A"]
[Sat Aug 29 05:09:00.533977 2026] [security2:error] [pid 1041789:tid 1041999] [client 93.123.109.228:51494] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/node-api/.env"] [unique_id "apK9zIv3RhPI65jTFG7ZnAAAA2I"]
[Sat Aug 29 05:09:00.534131 2026] [core:error] [pid 1041789:tid 1042047] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:00.534142 2026] [core:error] [pid 1041789:tid 1042047] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:00.535425 2026] [security2:error] [pid 1034096:tid 1034294] [client 93.123.109.228:51490] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/node/.env"] [unique_id "apK9zC04twRPFuquKD3B7AAAALA"]
[Sat Aug 29 05:09:00.536838 2026] [security2:error] [pid 1041789:tid 1041990] [client 20.104.18.15:39820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/kuda.php"] [unique_id "apK9zIv3RhPI65jTFG7ZnQAAA1k"]
[Sat Aug 29 05:09:00.545285 2026] [security2:error] [pid 1034096:tid 1034277] [client 52.139.37.240:8606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rjrusticfurniture.com"] [uri "/wp-2019.php"] [unique_id "apK9zC04twRPFuquKD3B7gAAAJ8"]
[Sat Aug 29 05:09:00.553277 2026] [security2:error] [pid 1041789:tid 1042036] [client 158.23.147.79:6097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/classwithtostring.php"] [unique_id "apK9zIv3RhPI65jTFG7ZngAAA4c"]
[Sat Aug 29 05:09:00.566322 2026] [security2:error] [pid 1041789:tid 1041961] [client 93.123.109.228:49160] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/node/backend/.env"] [unique_id "apK9zIv3RhPI65jTFG7ZnwAAAzw"]
[Sat Aug 29 05:09:00.566608 2026] [security2:error] [pid 1041789:tid 1041986] [client 158.23.147.79:17580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-content/packed.php"] [unique_id "apK9zIv3RhPI65jTFG7ZoAAAA1U"]
[Sat Aug 29 05:09:00.582380 2026] [security2:error] [pid 1034096:tid 1034367] [client 20.104.18.15:12116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/asdfghj.php"] [unique_id "apK9zC04twRPFuquKD3B8AAAAPk"]
[Sat Aug 29 05:09:00.584181 2026] [security2:error] [pid 1034096:tid 1034302] [client 93.123.109.228:49294] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/node/api/.env"] [unique_id "apK9zC04twRPFuquKD3B8gAAALg"]
[Sat Aug 29 05:09:00.584400 2026] [security2:error] [pid 1034096:tid 1034282] [client 93.123.109.228:51598] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/nodeapi/.env"] [unique_id "apK9zC04twRPFuquKD3B9AAAAKQ"]
[Sat Aug 29 05:09:00.587607 2026] [security2:error] [pid 1041789:tid 1042003] [client 4.232.148.111:7533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/lite.php"] [unique_id "apK9zIv3RhPI65jTFG7ZowAAA2Y"]
[Sat Aug 29 05:09:00.588374 2026] [security2:error] [pid 1034096:tid 1034368] [client 20.104.18.15:15220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/503.php"] [unique_id "apK9zC04twRPFuquKD3B9gAAAPo"]
[Sat Aug 29 05:09:00.589275 2026] [security2:error] [pid 1034096:tid 1034271] [client 4.205.62.107:53178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/zz.php"] [unique_id "apK9zC04twRPFuquKD3B9wAAAJk"]
[Sat Aug 29 05:09:00.589676 2026] [security2:error] [pid 1034096:tid 1034309] [client 20.104.18.15:16820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/goods.php"] [unique_id "apK9zC04twRPFuquKD3B-AAAAL8"]
[Sat Aug 29 05:09:00.596049 2026] [security2:error] [pid 1034096:tid 1034304] [client 20.196.209.81:1088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/backup.php"] [unique_id "apK9zC04twRPFuquKD3B-gAAALo"]
[Sat Aug 29 05:09:00.602573 2026] [security2:error] [pid 1041789:tid 1041966] [client 45.125.67.3:45654] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/wp-testimonial-widget/readme.txt"] [unique_id "apK9zIv3RhPI65jTFG7ZpAAAA0E"]
[Sat Aug 29 05:09:00.602579 2026] [security2:error] [pid 1034096:tid 1034359] [client 45.125.67.3:45632] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/epoll-wp-voting/readme.txt"] [unique_id "apK9zC04twRPFuquKD3B_AAAAPE"]
[Sat Aug 29 05:09:00.603983 2026] [security2:error] [pid 1034096:tid 1034306] [client 93.123.109.228:51534] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/nodeweb/.env"] [unique_id "apK9zC04twRPFuquKD3B-wAAALw"]
[Sat Aug 29 05:09:00.608686 2026] [security2:error] [pid 1034096:tid 1034259] [client 20.100.175.163:28282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/yanz.php"] [unique_id "apK9zC04twRPFuquKD3B_QAAAI0"]
[Sat Aug 29 05:09:00.609224 2026] [security2:error] [pid 1034096:tid 1034292] [client 20.104.18.15:45967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/wp-ws68.php"] [unique_id "apK9zC04twRPFuquKD3B_gAAAK4"]
[Sat Aug 29 05:09:00.614182 2026] [security2:error] [pid 1034096:tid 1034251] [client 93.123.109.228:51438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/admin/phpinfo.php"] [unique_id "apK9zC04twRPFuquKD3B_wAAAIU"]
[Sat Aug 29 05:09:00.618177 2026] [security2:error] [pid 1041789:tid 1041941] [client 20.104.18.15:43988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/BDKR28WP.php"] [unique_id "apK9zIv3RhPI65jTFG7ZqAAAAyg"]
[Sat Aug 29 05:09:00.624171 2026] [security2:error] [pid 1034096:tid 1034308] [client 20.197.61.180:1051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/extractable-loader-head.php"] [unique_id "apK9zC04twRPFuquKD3CAgAAAL4"]
[Sat Aug 29 05:09:00.628002 2026] [security2:error] [pid 1041789:tid 1042022] [client 93.123.109.228:49158] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/old/.env"] [unique_id "apK9zIv3RhPI65jTFG7ZqgAAA3k"]
[Sat Aug 29 05:09:00.628680 2026] [security2:error] [pid 1034096:tid 1034312] [client 20.104.18.15:18898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/tnglzqmv.php"] [unique_id "apK9zC04twRPFuquKD3CBAAAAMI"]
[Sat Aug 29 05:09:00.631963 2026] [security2:error] [pid 1041789:tid 1041960] [client 93.123.109.228:51358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/admin_phpinfo.php"] [unique_id "apK9zIv3RhPI65jTFG7ZrAAAAzs"]
[Sat Aug 29 05:09:00.637261 2026] [security2:error] [pid 1034096:tid 1034320] [client 20.104.18.15:41983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/classwithtostring.php"] [unique_id "apK9zC04twRPFuquKD3CBQAAAMo"]
[Sat Aug 29 05:09:00.645403 2026] [security2:error] [pid 1041789:tid 1042043] [client 158.158.54.35:1724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/deepseek_d.php"] [unique_id "apK9zIv3RhPI65jTFG7ZrgAAA44"]
[Sat Aug 29 05:09:00.645891 2026] [security2:error] [pid 1034096:tid 1034362] [client 93.123.109.228:51386] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/administrator/.env"] [unique_id "apK9zC04twRPFuquKD3CBwAAAPQ"]
[Sat Aug 29 05:09:00.658801 2026] [security2:error] [pid 1034096:tid 1034285] [client 93.123.109.228:51614] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/opt/.env"] [unique_id "apK9zC04twRPFuquKD3CCgAAAKc"]
[Sat Aug 29 05:09:00.664041 2026] [security2:error] [pid 1034096:tid 1034376] [client 20.220.204.93:64130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/knmt.php"] [unique_id "apK9zC04twRPFuquKD3CCwAAAQI"]
[Sat Aug 29 05:09:00.670778 2026] [security2:error] [pid 1041789:tid 1041952] [client 20.48.251.3:13827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/ws79.php"] [unique_id "apK9zIv3RhPI65jTFG7ZrwAAAzM"]
[Sat Aug 29 05:09:00.672212 2026] [security2:error] [pid 1041789:tid 1042034] [client 45.125.67.3:45598] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/dokan-pro/readme.txt"] [unique_id "apK9zIv3RhPI65jTFG7ZsAAAA4U"]
[Sat Aug 29 05:09:00.673463 2026] [security2:error] [pid 1034096:tid 1034314] [client 45.148.10.62:44900] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.xey.pwx.mybluehost.me"] [uri "/.env.old"] [unique_id "apK9zC04twRPFuquKD3CDAAAAMQ"]
[Sat Aug 29 05:09:00.694179 2026] [security2:error] [pid 1034096:tid 1034290] [client 45.125.67.3:45780] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/podlove-podcasting-plugin-for-wordpress/readme.txt"] [unique_id "apK9zC04twRPFuquKD3CDgAAAKw"]
[Sat Aug 29 05:09:00.705587 2026] [security2:error] [pid 1034096:tid 1034346] [client 20.104.18.15:46010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/biufile.php"] [unique_id "apK9zC04twRPFuquKD3CDwAAAOQ"]
[Sat Aug 29 05:09:00.707200 2026] [security2:error] [pid 1041789:tid 1041963] [client 45.125.67.3:45592] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/canvasio3d-light/readme.txt"] [unique_id "apK9zIv3RhPI65jTFG7ZswAAAz4"]
[Sat Aug 29 05:09:00.710897 2026] [security2:error] [pid 1041789:tid 1041957] [client 45.148.10.62:44902] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.xfe.fme.mybluehost.me"] [uri "/.env.backup"] [unique_id "apK9zIv3RhPI65jTFG7ZtAAAAzg"]
[Sat Aug 29 05:09:00.716180 2026] [security2:error] [pid 1034096:tid 1034317] [client 93.123.109.228:51416] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/api-backend/.env"] [unique_id "apK9zC04twRPFuquKD3CEQAAAMc"]
[Sat Aug 29 05:09:00.723969 2026] [security2:error] [pid 1041789:tid 1041962] [client 20.104.18.15:16893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/ah.php"] [unique_id "apK9zIv3RhPI65jTFG7ZtgAAAz0"]
[Sat Aug 29 05:09:00.725370 2026] [security2:error] [pid 1041789:tid 1041946] [client 20.104.18.15:15312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/504.php"] [unique_id "apK9zIv3RhPI65jTFG7ZtwAAAy0"]
[Sat Aug 29 05:09:00.727689 2026] [security2:error] [pid 1034096:tid 1034352] [client 52.139.37.240:1388] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.jaimiegellerjewelry.com"] [uri "/c99.php"] [unique_id "apK9zC04twRPFuquKD3CEwAAAOo"]
[Sat Aug 29 05:09:00.727781 2026] [security2:error] [pid 1041789:tid 1042051] [client 20.197.61.180:1859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/post.php"] [unique_id "apK9zIv3RhPI65jTFG7ZuAAAA5Y"]
[Sat Aug 29 05:09:00.727987 2026] [security2:error] [pid 1034096:tid 1034267] [client 93.123.109.228:51446] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/api/.env"] [unique_id "apK9zC04twRPFuquKD3CEgAAAJU"]
[Sat Aug 29 05:09:00.742916 2026] [security2:error] [pid 1034096:tid 1034372] [client 52.139.37.240:8487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rjrusticfurniture.com"] [uri "/gecko-new.php"] [unique_id "apK9zC04twRPFuquKD3CFwAAAP4"]
[Sat Aug 29 05:09:00.747856 2026] [security2:error] [pid 1034096:tid 1034272] [client 20.104.49.130:57701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/tiny2.php"] [unique_id "apK9zC04twRPFuquKD3CGgAAAJo"]
[Sat Aug 29 05:09:00.754793 2026] [core:error] [pid 1034096:tid 1034253] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:00.754808 2026] [core:error] [pid 1034096:tid 1034253] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:00.754832 2026] [security2:error] [pid 1034096:tid 1034351] [client 93.123.109.228:51382] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/api-node/.env"] [unique_id "apK9zC04twRPFuquKD3CHwAAAOk"]
[Sat Aug 29 05:09:00.758593 2026] [security2:error] [pid 1034096:tid 1034284] [client 20.104.18.15:39751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/sure.php"] [unique_id "apK9zC04twRPFuquKD3CIQAAAKY"]
[Sat Aug 29 05:09:00.768910 2026] [security2:error] [pid 1034096:tid 1034293] [client 20.104.18.15:18913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/wefile.php"] [unique_id "apK9zC04twRPFuquKD3CIwAAAK8"]
[Sat Aug 29 05:09:00.769984 2026] [security2:error] [pid 1041789:tid 1041958] [client 4.205.62.107:22499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/grsiuk.php"] [unique_id "apK9zIv3RhPI65jTFG7ZvgAAAzk"]
[Sat Aug 29 05:09:00.771131 2026] [security2:error] [pid 1041789:tid 1041980] [client 20.63.219.114:2077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/hehe.php"] [unique_id "apK9zIv3RhPI65jTFG7ZvwAAA08"]
[Sat Aug 29 05:09:00.771396 2026] [security2:error] [pid 1041789:tid 1041933] [client 20.104.49.130:43794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/mh.php"] [unique_id "apK9zIv3RhPI65jTFG7ZwAAAAyA"]
[Sat Aug 29 05:09:00.772218 2026] [security2:error] [pid 1041789:tid 1042052] [client 20.151.200.44:63916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/0xs.php"] [unique_id "apK9zIv3RhPI65jTFG7ZwQAAA5c"]
[Sat Aug 29 05:09:00.783617 2026] [security2:error] [pid 1041789:tid 1041965] [client 20.104.18.15:43313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/sf.php"] [unique_id "apK9zIv3RhPI65jTFG7ZwwAAA0A"]
[Sat Aug 29 05:09:00.789226 2026] [security2:error] [pid 1041789:tid 1042007] [client 158.23.147.79:6129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-content/admin.php"] [unique_id "apK9zIv3RhPI65jTFG7ZxAAAA2o"]
[Sat Aug 29 05:09:00.794084 2026] [security2:error] [pid 1034096:tid 1034255] [client 74.248.24.12:15038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-content/packed.php"] [unique_id "apK9zC04twRPFuquKD3CJgAAAIk"]
[Sat Aug 29 05:09:00.794191 2026] [security2:error] [pid 1041789:tid 1041951] [client 20.220.204.93:62306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/sbhu.php"] [unique_id "apK9zIv3RhPI65jTFG7ZxgAAAzI"]
[Sat Aug 29 05:09:00.800650 2026] [security2:error] [pid 1041789:tid 1041949] [client 20.48.251.3:14274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/public/wp-blog.php"] [unique_id "apK9zIv3RhPI65jTFG7ZyAAAAzA"]
[Sat Aug 29 05:09:00.801842 2026] [security2:error] [pid 1034096:tid 1034318] [client 20.104.18.15:45971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/mgrr.php"] [unique_id "apK9zC04twRPFuquKD3CJwAAAMg"]
[Sat Aug 29 05:09:00.843787 2026] [security2:error] [pid 1034096:tid 1034260] [client 57.141.14.75:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/cart/"] [unique_id "apK9zC04twRPFuquKD3CMAAAAI4"]
[Sat Aug 29 05:09:00.853352 2026] [security2:error] [pid 1034096:tid 1034322] [client 146.70.36.124:52836] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "narrowgate-electrical.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "apK9zC04twRPFuquKD3CMQAAAMw"]
[Sat Aug 29 05:09:00.856140 2026] [security2:error] [pid 1041789:tid 1041964] [client 20.104.18.15:15241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/admin.php"] [unique_id "apK9zIv3RhPI65jTFG7ZywAAAz8"]
[Sat Aug 29 05:09:00.860233 2026] [security2:error] [pid 1041789:tid 1041977] [client 20.104.18.15:16849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/ws55.php"] [unique_id "apK9zIv3RhPI65jTFG7ZzQAAA0w"]
[Sat Aug 29 05:09:00.860921 2026] [security2:error] [pid 1041789:tid 1042006] [client 45.148.10.62:44902] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.xfe.fme.mybluehost.me"] [uri "/.env.old"] [unique_id "apK9zIv3RhPI65jTFG7ZzAAAA2k"]
[Sat Aug 29 05:09:00.863487 2026] [security2:error] [pid 1034096:tid 1034286] [client 20.104.18.15:22519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9zC04twRPFuquKD3CMwAAAKg"]
[Sat Aug 29 05:09:00.866434 2026] [security2:error] [pid 1034096:tid 1034328] [client 20.196.209.81:18407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK9zC04twRPFuquKD3CNAAAANI"]
[Sat Aug 29 05:09:00.870271 2026] [security2:error] [pid 1034096:tid 1034358] [client 93.123.109.228:51490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/php-info.php"] [unique_id "apK9zC04twRPFuquKD3CNQAAAPA"]
[Sat Aug 29 05:09:00.870953 2026] [security2:error] [pid 1041789:tid 1041985] [client 93.123.109.228:51522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/php.php"] [unique_id "apK9zIv3RhPI65jTFG7ZzwAAA1Q"]
[Sat Aug 29 05:09:00.874557 2026] [security2:error] [pid 1034096:tid 1034335] [client 93.123.109.228:51416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/api/info.php"] [unique_id "apK9zC04twRPFuquKD3CNgAAANk"]
[Sat Aug 29 05:09:00.881416 2026] [security2:error] [pid 1034096:tid 1034371] [client 20.197.61.180:14458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/meta.php"] [unique_id "apK9zC04twRPFuquKD3COAAAAP0"]
[Sat Aug 29 05:09:00.885190 2026] [security2:error] [pid 1041789:tid 1041998] [client 93.123.109.228:49160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/php_info.php"] [unique_id "apK9zIv3RhPI65jTFG7Z0QAAA2E"]
[Sat Aug 29 05:09:00.895396 2026] [security2:error] [pid 1034096:tid 1034363] [client 45.125.67.3:45988] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/bitformpro/readme.txt"] [unique_id "apK9zC04twRPFuquKD3COgAAAPU"]
[Sat Aug 29 05:09:00.911714 2026] [security2:error] [pid 1034096:tid 1034269] [client 20.104.18.15:12134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/dragonshell.php"] [unique_id "apK9zC04twRPFuquKD3CPAAAAJc"]
[Sat Aug 29 05:09:00.913785 2026] [security2:error] [pid 1034096:tid 1034342] [client 40.83.93.50:19568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/GOD.php"] [unique_id "apK9zC04twRPFuquKD3CPQAAAOA"]
[Sat Aug 29 05:09:00.921078 2026] [security2:error] [pid 1041789:tid 1042047] [client 93.123.109.228:51648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/phpinfo.php"] [unique_id "apK9zIv3RhPI65jTFG7Z0wAAA5I"]
[Sat Aug 29 05:09:00.921542 2026] [security2:error] [pid 1041789:tid 1041976] [client 20.104.18.15:39914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/gray.php"] [unique_id "apK9zIv3RhPI65jTFG7Z0gAAA0s"]
[Sat Aug 29 05:09:00.928056 2026] [security2:error] [pid 1034096:tid 1034272] [client 20.104.18.15:19351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/blog.php"] [unique_id "apK9zC04twRPFuquKD3CPwAAAJo"]
[Sat Aug 29 05:09:00.929217 2026] [security2:error] [pid 1034096:tid 1034370] [client 20.48.251.3:14093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/php-details.php"] [unique_id "apK9zC04twRPFuquKD3CQQAAAPw"]
[Sat Aug 29 05:09:00.937635 2026] [security2:error] [pid 1034096:tid 1034268] [client 20.104.18.15:43278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/k.php"] [unique_id "apK9zC04twRPFuquKD3CQwAAAJY"]
[Sat Aug 29 05:09:00.940606 2026] [security2:error] [pid 1041789:tid 1041986] [client 93.123.109.228:51390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/api/phpinfo.php"] [unique_id "apK9zIv3RhPI65jTFG7Z1QAAA1U"]
[Sat Aug 29 05:09:00.946342 2026] [security2:error] [pid 1041789:tid 1042003] [client 20.220.204.93:62289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/a332.php"] [unique_id "apK9zIv3RhPI65jTFG7Z1gAAA2Y"]
[Sat Aug 29 05:09:00.949435 2026] [security2:error] [pid 1041789:tid 1041992] [client 45.148.10.62:44884] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.xfs.rxf.mybluehost.me"] [uri "/backend/.env"] [unique_id "apK9zIv3RhPI65jTFG7Z1wAAA1s"]
[Sat Aug 29 05:09:00.953837 2026] [security2:error] [pid 1041789:tid 1042042] [client 52.139.37.240:8483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rjrusticfurniture.com"] [uri "/add_actualites.php"] [unique_id "apK9zIv3RhPI65jTFG7Z2AAAA40"]
[Sat Aug 29 05:09:00.958550 2026] [security2:error] [pid 1034096:tid 1034356] [client 45.125.67.3:45854] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/barcode-scanner-lite-pos-to-manage-products-inventory-and-orders/readme.txt"] [unique_id "apK9zC04twRPFuquKD3CRwAAAO4"]
[Sat Aug 29 05:09:00.968168 2026] [security2:error] [pid 1034096:tid 1034310] [client 40.83.93.50:17234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/ggfi.php"] [unique_id "apK9zC04twRPFuquKD3CSwAAAMA"]
[Sat Aug 29 05:09:00.968682 2026] [security2:error] [pid 1034096:tid 1034266] [client 93.123.109.228:49200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/portal/.env"] [unique_id "apK9zC04twRPFuquKD3CSgAAAJQ"]
[Sat Aug 29 05:09:00.971597 2026] [security2:error] [pid 1034096:tid 1034368] [client 45.148.10.62:44900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xey.pwx.mybluehost.me"] [uri "/.env.php.bak"] [unique_id "apK9zC04twRPFuquKD3CTAAAAPo"]
[Sat Aug 29 05:09:00.976809 2026] [security2:error] [pid 1041789:tid 1041994] [client 20.104.18.15:41932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/wp-ws68.php"] [unique_id "apK9zIv3RhPI65jTFG7Z2wAAA10"]
[Sat Aug 29 05:09:00.986101 2026] [security2:error] [pid 1034096:tid 1034316] [client 20.240.128.207:7392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/222.php"] [unique_id "apK9zC04twRPFuquKD3CUQAAAMY"]
[Sat Aug 29 05:09:00.993478 2026] [security2:error] [pid 1034096:tid 1034332] [client 93.123.109.228:51534] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/prod/.env"] [unique_id "apK9zC04twRPFuquKD3CUwAAANY"]
[Sat Aug 29 05:09:00.997498 2026] [security2:error] [pid 1041789:tid 1042022] [client 20.104.18.15:16817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/drykl.php"] [unique_id "apK9zIv3RhPI65jTFG7Z3AAAA3k"]
[Sat Aug 29 05:09:00.999748 2026] [security2:error] [pid 1034096:tid 1034308] [client 20.104.18.15:46073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/55.php"] [unique_id "apK9zC04twRPFuquKD3CVQAAAL4"]
[Sat Aug 29 05:09:01.011299 2026] [security2:error] [pid 1034096:tid 1034319] [client 45.125.67.3:46054] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/youzify/readme.txt"] [unique_id "apK9zS04twRPFuquKD3CVgAAAMk"]
[Sat Aug 29 05:09:01.018541 2026] [security2:error] [pid 1034096:tid 1034262] [client 20.104.18.15:15258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/ws85.php"] [unique_id "apK9zS04twRPFuquKD3CVwAAAJA"]
[Sat Aug 29 05:09:01.020191 2026] [security2:error] [pid 1034096:tid 1034271] [client 93.123.109.228:51574] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/product/.env"] [unique_id "apK9zS04twRPFuquKD3CWAAAAJk"]
[Sat Aug 29 05:09:01.029865 2026] [security2:error] [pid 1041789:tid 1041983] [client 45.125.67.3:45944] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/wp-time-capsule/readme.txt"] [unique_id "apK9zYv3RhPI65jTFG7Z4wAAA1I"]
[Sat Aug 29 05:09:01.032611 2026] [security2:error] [pid 1034096:tid 1034307] [client 93.123.109.228:51614] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/project/.env"] [unique_id "apK9zS04twRPFuquKD3CWwAAAL0"]
[Sat Aug 29 05:09:01.037777 2026] [security2:error] [pid 1034096:tid 1034359] [client 20.104.18.15:22411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9zS04twRPFuquKD3CXQAAAPE"]
[Sat Aug 29 05:09:01.040479 2026] [security2:error] [pid 1034096:tid 1034315] [client 3.70.159.81:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.jobindjibouti.com"] [uri "/"] [unique_id "apK9zS04twRPFuquKD3CXgAAAMU"]
[Sat Aug 29 05:09:01.048289 2026] [security2:error] [pid 1034096:tid 1034286] [client 93.123.109.228:51658] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/production/.env"] [unique_id "apK9zS04twRPFuquKD3CXwAAAKg"]
[Sat Aug 29 05:09:01.050568 2026] [security2:error] [pid 1034096:tid 1034314] [client 20.104.18.15:12099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/wp-safe.php"] [unique_id "apK9zS04twRPFuquKD3CYAAAAMQ"]
[Sat Aug 29 05:09:01.052861 2026] [security2:error] [pid 1034096:tid 1034290] [client 20.104.18.15:39910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/puki.php"] [unique_id "apK9zS04twRPFuquKD3CYgAAAKw"]
[Sat Aug 29 05:09:01.053643 2026] [security2:error] [pid 1034096:tid 1034358] [client 45.148.10.62:44896] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.xga.zdx.mybluehost.me"] [uri "/backend/.env"] [unique_id "apK9zS04twRPFuquKD3CZQAAAPA"]
[Sat Aug 29 05:09:01.054593 2026] [security2:error] [pid 1041789:tid 1041999] [client 20.196.209.81:1276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/haiterus.php"] [unique_id "apK9zYv3RhPI65jTFG7Z5AAAA2I"]
[Sat Aug 29 05:09:01.059731 2026] [security2:error] [pid 1041789:tid 1042056] [client 20.104.18.15:46055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/coffexium.php"] [unique_id "apK9zYv3RhPI65jTFG7Z5QAAA5s"]
[Sat Aug 29 05:09:01.059855 2026] [security2:error] [pid 1034096:tid 1034335] [client 93.123.109.228:51612] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/public-api/.env"] [unique_id "apK9zS04twRPFuquKD3CZgAAANk"]
[Sat Aug 29 05:09:01.068558 2026] [security2:error] [pid 1041789:tid 1042034] [client 20.48.251.3:13866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/routes.php"] [unique_id "apK9zYv3RhPI65jTFG7Z5gAAA4U"]
[Sat Aug 29 05:09:01.089978 2026] [fcgid:warn] [pid 1034096:tid 1034269] (70014)End of file found: [client 199.45.155.51:37128] mod_fcgid: can't get data from http client
[Sat Aug 29 05:09:01.090176 2026] [security2:error] [pid 1034096:tid 1034342] [client 20.104.18.15:43302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/82.php"] [unique_id "apK9zS04twRPFuquKD3CagAAAOA"]
[Sat Aug 29 05:09:01.093615 2026] [security2:error] [pid 1034096:tid 1034272] [client 93.123.109.228:51622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/public/phpinfo.php"] [unique_id "apK9zS04twRPFuquKD3CawAAAJo"]
[Sat Aug 29 05:09:01.099096 2026] [security2:error] [pid 1041789:tid 1041993] [client 45.148.10.62:44884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xfs.rxf.mybluehost.me"] [uri "/test.php"] [unique_id "apK9zYv3RhPI65jTFG7Z6QAAA1w"]
[Sat Aug 29 05:09:01.101594 2026] [security2:error] [pid 1034096:tid 1034268] [client 93.123.109.228:51760] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/apis/.env"] [unique_id "apK9zS04twRPFuquKD3CbAAAAJY"]
[Sat Aug 29 05:09:01.102434 2026] [security2:error] [pid 1034096:tid 1034362] [client 93.123.109.228:51624] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/public/.env"] [unique_id "apK9zS04twRPFuquKD3CbQAAAPQ"]
[Sat Aug 29 05:09:01.102589 2026] [security2:error] [pid 1034096:tid 1034356] [client 20.104.18.15:18902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/wp-admin/js/wp-load.php"] [unique_id "apK9zS04twRPFuquKD3CbgAAAO4"]
[Sat Aug 29 05:09:01.107556 2026] [security2:error] [pid 1041789:tid 1042053] [client 45.125.67.3:46040] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/advanced-page-visit-counter/readme.txt"] [unique_id "apK9zYv3RhPI65jTFG7Z7AAAA5g"]
[Sat Aug 29 05:09:01.107912 2026] [security2:error] [pid 1041789:tid 1041968] [client 4.232.148.111:35837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/term.php"] [unique_id "apK9zYv3RhPI65jTFG7Z6wAAA0M"]
[Sat Aug 29 05:09:01.114769 2026] [security2:error] [pid 1034096:tid 1034274] [client 20.100.175.163:9961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/autoload_classmap.php"] [unique_id "apK9zS04twRPFuquKD3CcQAAAJw"]
[Sat Aug 29 05:09:01.116022 2026] [security2:error] [pid 1034096:tid 1034301] [client 20.220.204.93:64196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/ws66.php"] [unique_id "apK9zS04twRPFuquKD3CcgAAALc"]
[Sat Aug 29 05:09:01.117309 2026] [security2:error] [pid 1034096:tid 1034327] [client 45.125.67.3:45730] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/booking-ultra-pro/readme.txt"] [unique_id "apK9zS04twRPFuquKD3CdAAAANE"]
[Sat Aug 29 05:09:01.134717 2026] [security2:error] [pid 1041789:tid 1042051] [client 20.104.18.15:25578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/backup.php"] [unique_id "apK9zYv3RhPI65jTFG7Z7wAAA5Y"]
[Sat Aug 29 05:09:01.135799 2026] [security2:error] [pid 1034096:tid 1034323] [client 20.63.219.114:15399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/wp-admin/class-db.php"] [unique_id "apK9zS04twRPFuquKD3CdQAAAM0"]
[Sat Aug 29 05:09:01.141812 2026] [security2:error] [pid 1034096:tid 1034267] [client 40.83.93.50:16691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK9zS04twRPFuquKD3CdwAAAJU"]
[Sat Aug 29 05:09:01.142436 2026] [security2:error] [pid 1034096:tid 1034374] [client 93.123.109.228:51534] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/public_html/.env"] [unique_id "apK9zS04twRPFuquKD3CdgAAAQA"]
[Sat Aug 29 05:09:01.146179 2026] [security2:error] [pid 1034096:tid 1034260] [client 20.63.219.114:15386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/hello.php"] [unique_id "apK9zS04twRPFuquKD3CeAAAAI4"]
[Sat Aug 29 05:09:01.146214 2026] [security2:error] [pid 1034096:tid 1034275] [client 20.104.18.15:41977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/mgrr.php"] [unique_id "apK9zS04twRPFuquKD3CeQAAAJ0"]
[Sat Aug 29 05:09:01.149958 2026] [security2:error] [pid 1034096:tid 1034300] [client 93.123.109.228:51382] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/app/.env"] [unique_id "apK9zS04twRPFuquKD3CewAAALY"]
[Sat Aug 29 05:09:01.151114 2026] [security2:error] [pid 1041789:tid 1042028] [client 52.139.37.240:9111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rjrusticfurniture.com"] [uri "/browse.php"] [unique_id "apK9zYv3RhPI65jTFG7Z8AAAA38"]
[Sat Aug 29 05:09:01.158982 2026] [security2:error] [pid 1041789:tid 1041947] [client 45.148.10.62:44902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xfe.fme.mybluehost.me"] [uri "/.env.php.bak"] [unique_id "apK9zYv3RhPI65jTFG7Z8QAAAy4"]
[Sat Aug 29 05:09:01.174061 2026] [security2:error] [pid 1041789:tid 1042031] [client 20.104.18.15:15243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/ffs.php"] [unique_id "apK9zYv3RhPI65jTFG7Z8wAAA4I"]
[Sat Aug 29 05:09:01.176902 2026] [security2:error] [pid 1041789:tid 1041980] [client 20.104.18.15:45956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/yj09.php"] [unique_id "apK9zYv3RhPI65jTFG7Z9QAAA08"]
[Sat Aug 29 05:09:01.181190 2026] [security2:error] [pid 1041789:tid 1042052] [client 4.205.62.107:8730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/paypal.php"] [unique_id "apK9zYv3RhPI65jTFG7Z9wAAA5c"]
[Sat Aug 29 05:09:01.181662 2026] [security2:error] [pid 1034096:tid 1034282] [client 45.125.67.3:45530] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/master-slider/readme.txt"] [unique_id "apK9zS04twRPFuquKD3CfQAAAKQ"]
[Sat Aug 29 05:09:01.182118 2026] [security2:error] [pid 1041789:tid 1042037] [client 45.125.67.3:46004] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/newsletters-lite/readme.txt"] [unique_id "apK9zYv3RhPI65jTFG7Z-AAAA4g"]
[Sat Aug 29 05:09:01.184323 2026] [security2:error] [pid 1041789:tid 1041936] [client 93.123.109.228:49158] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/qa/.env"] [unique_id "apK9zYv3RhPI65jTFG7Z-QAAAyM"]
[Sat Aug 29 05:09:01.200482 2026] [security2:error] [pid 1034096:tid 1034340] [client 45.148.10.62:44896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xga.zdx.mybluehost.me"] [uri "/test.php"] [unique_id "apK9zS04twRPFuquKD3CgwAAAN4"]
[Sat Aug 29 05:09:01.212504 2026] [security2:error] [pid 1041789:tid 1042007] [client 20.48.251.3:33336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/aww.php"] [unique_id "apK9zYv3RhPI65jTFG7Z_AAAA2o"]
[Sat Aug 29 05:09:01.222893 2026] [security2:error] [pid 1041789:tid 1041932] [client 20.104.18.15:12169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/gjewuagf.php"] [unique_id "apK9zYv3RhPI65jTFG7Z_QAAAx8"]
[Sat Aug 29 05:09:01.240936 2026] [security2:error] [pid 1041789:tid 1042020] [client 20.104.18.15:39779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/sonic.php"] [unique_id "apK9zYv3RhPI65jTFG7Z_gAAA3c"]
[Sat Aug 29 05:09:01.244822 2026] [security2:error] [pid 1041789:tid 1042010] [client 20.104.18.15:22479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/ap.php"] [unique_id "apK9zYv3RhPI65jTFG7Z_wAAA20"]
[Sat Aug 29 05:09:01.249202 2026] [security2:error] [pid 1041789:tid 1042046] [client 158.158.54.35:31517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "apK9zYv3RhPI65jTFG7aAAAAA5E"]
[Sat Aug 29 05:09:01.259313 2026] [security2:error] [pid 1034096:tid 1034290] [client 20.104.18.15:43266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/dex.php"] [unique_id "apK9zS04twRPFuquKD3CkAAAAKw"]
[Sat Aug 29 05:09:01.261148 2026] [security2:error] [pid 1034096:tid 1034276] [client 20.196.209.81:21034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-admin/system.php"] [unique_id "apK9zS04twRPFuquKD3CkgAAAJ4"]
[Sat Aug 29 05:09:01.267954 2026] [security2:error] [pid 1034096:tid 1034293] [client 158.23.147.79:53172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.sunflowerorganicsupply.com"] [uri "/first.php"] [unique_id "apK9zS04twRPFuquKD3ClAAAAK8"]
[Sat Aug 29 05:09:01.271698 2026] [security2:error] [pid 1041789:tid 1042030] [client 20.104.18.15:25508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/indo.php"] [unique_id "apK9zYv3RhPI65jTFG7aAwAAA4E"]
[Sat Aug 29 05:09:01.278030 2026] [security2:error] [pid 1034096:tid 1034355] [client 149.34.210.141:10026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9zS04twRPFuquKD3ClQAAAO0"]
[Sat Aug 29 05:09:01.278134 2026] [security2:error] [pid 1034096:tid 1034355] [client 149.34.210.141:10026] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK9zS04twRPFuquKD3ClQAAAO0"]
[Sat Aug 29 05:09:01.279260 2026] [security2:error] [pid 1034096:tid 1034317] [client 158.23.147.79:17587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK9zS04twRPFuquKD3ClgAAAMc"]
[Sat Aug 29 05:09:01.284207 2026] [security2:error] [pid 1034096:tid 1034342] [client 20.104.18.15:18900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/robot.php"] [unique_id "apK9zS04twRPFuquKD3CmAAAAOA"]
[Sat Aug 29 05:09:01.291140 2026] [security2:error] [pid 1034096:tid 1034375] [client 20.104.18.15:46067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/coffee.php"] [unique_id "apK9zS04twRPFuquKD3CmQAAAQE"]
[Sat Aug 29 05:09:01.295589 2026] [security2:error] [pid 1041789:tid 1041942] [client 20.220.204.93:62229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/ws68.php"] [unique_id "apK9zYv3RhPI65jTFG7aBwAAAyk"]
[Sat Aug 29 05:09:01.299818 2026] [security2:error] [pid 1034096:tid 1034268] [client 3.70.159.81:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.jobindjibouti.com"] [uri "/jobs/"] [unique_id "apK9zS04twRPFuquKD3CmwAAAJY"]
[Sat Aug 29 05:09:01.307862 2026] [security2:error] [pid 1041789:tid 1042014] [client 74.248.24.12:12778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-admin/js/index.php"] [unique_id "apK9zYv3RhPI65jTFG7aCQAAA3E"]
[Sat Aug 29 05:09:01.309278 2026] [security2:error] [pid 1034096:tid 1034310] [client 20.104.18.15:41926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/55.php"] [unique_id "apK9zS04twRPFuquKD3CngAAAMA"]
[Sat Aug 29 05:09:01.329303 2026] [security2:error] [pid 1034096:tid 1034323] [client 158.23.147.79:11318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/admin.php"] [unique_id "apK9zS04twRPFuquKD3CoQAAAM0"]
[Sat Aug 29 05:09:01.333938 2026] [security2:error] [pid 1034096:tid 1034267] [client 20.104.18.15:15344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/nano.php"] [unique_id "apK9zS04twRPFuquKD3CogAAAJU"]
[Sat Aug 29 05:09:01.341026 2026] [security2:error] [pid 1034096:tid 1034353] [client 20.197.61.180:15004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/defaults.php"] [unique_id "apK9zS04twRPFuquKD3CpAAAAOs"]
[Sat Aug 29 05:09:01.343674 2026] [security2:error] [pid 1041789:tid 1042019] [client 20.48.251.3:33294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/maxro.php"] [unique_id "apK9zYv3RhPI65jTFG7aDAAAA3Y"]
[Sat Aug 29 05:09:01.352290 2026] [security2:error] [pid 1034096:tid 1034269] [client 52.139.37.240:8596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rjrusticfurniture.com"] [uri "/contentloader1.php"] [unique_id "apK9zS04twRPFuquKD3CpgAAAJc"]
[Sat Aug 29 05:09:01.373146 2026] [security2:error] [pid 1041789:tid 1042047] [client 20.104.18.15:45962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/scxy.php"] [unique_id "apK9zYv3RhPI65jTFG7aDgAAA5I"]
[Sat Aug 29 05:09:01.402800 2026] [security2:error] [pid 1034096:tid 1034319] [client 20.104.18.15:16830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/sign.php"] [unique_id "apK9zS04twRPFuquKD3CqgAAAMk"]
[Sat Aug 29 05:09:01.411434 2026] [security2:error] [pid 1034096:tid 1034253] [client 91.92.47.191:53278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.giantgardening.com"] [uri "/wp-config.php"] [unique_id "apK9zS04twRPFuquKD3CqwAAAIc"]
[Sat Aug 29 05:09:01.417372 2026] [security2:error] [pid 1034096:tid 1034286] [client 20.104.18.15:19349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/revo.php"] [unique_id "apK9zS04twRPFuquKD3CrQAAAKg"]
[Sat Aug 29 05:09:01.425415 2026] [security2:error] [pid 1034096:tid 1034276] [client 20.104.18.15:22517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/media.php"] [unique_id "apK9zS04twRPFuquKD3CrwAAAJ4"]
[Sat Aug 29 05:09:01.431465 2026] [security2:error] [pid 1034096:tid 1034321] [client 40.83.93.50:19528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/ggfi.php"] [unique_id "apK9zS04twRPFuquKD3CsQAAAMs"]
[Sat Aug 29 05:09:01.439884 2026] [security2:error] [pid 1034096:tid 1034312] [client 4.205.62.107:6963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/a1vx.php"] [unique_id "apK9zS04twRPFuquKD3CswAAAMI"]
[Sat Aug 29 05:09:01.440500 2026] [security2:error] [pid 1034096:tid 1034359] [client 45.148.10.62:44904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xey.pwx.mybluehost.me"] [uri "/.env.php"] [unique_id "apK9zS04twRPFuquKD3CtAAAAPE"]
[Sat Aug 29 05:09:01.442511 2026] [security2:error] [pid 1041789:tid 1042015] [client 20.220.204.93:64245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/users.php"] [unique_id "apK9zYv3RhPI65jTFG7aDwAAA3I"]
[Sat Aug 29 05:09:01.447733 2026] [security2:error] [pid 1041789:tid 1041982] [client 146.70.36.124:52852] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "narrowgate-electrical.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "apK9zYv3RhPI65jTFG7aEAAAA1E"]
[Sat Aug 29 05:09:01.447829 2026] [security2:error] [pid 1034096:tid 1034272] [client 40.83.93.50:18841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/alfa-rex.php"] [unique_id "apK9zS04twRPFuquKD3CtgAAAJo"]
[Sat Aug 29 05:09:01.448593 2026] [security2:error] [pid 1041789:tid 1041981] [client 20.104.18.15:43277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/inso.php"] [unique_id "apK9zYv3RhPI65jTFG7aEgAAA1A"]
[Sat Aug 29 05:09:01.450950 2026] [security2:error] [pid 1041789:tid 1042018] [client 20.197.61.180:1065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/csv.php"] [unique_id "apK9zYv3RhPI65jTFG7aEwAAA3U"]
[Sat Aug 29 05:09:01.452836 2026] [security2:error] [pid 1041789:tid 1042041] [client 20.104.18.15:39840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/pop.php"] [unique_id "apK9zYv3RhPI65jTFG7aFAAAA4w"]
[Sat Aug 29 05:09:01.453000 2026] [security2:error] [pid 1041789:tid 1041934] [client 60.243.207.176:56494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK9zYv3RhPI65jTFG7aFQAAAyE"]
[Sat Aug 29 05:09:01.453100 2026] [security2:error] [pid 1041789:tid 1041934] [client 60.243.207.176:56494] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK9zYv3RhPI65jTFG7aFQAAAyE"]
[Sat Aug 29 05:09:01.456441 2026] [security2:error] [pid 1034096:tid 1034373] [client 45.125.67.3:46026] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/forms-to-zapier/readme.txt"] [unique_id "apK9zS04twRPFuquKD3CtwAAAP8"]
[Sat Aug 29 05:09:01.463497 2026] [security2:error] [pid 1034096:tid 1034370] [client 4.205.62.107:62947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/X57.php"] [unique_id "apK9zS04twRPFuquKD3CuQAAAPw"]
[Sat Aug 29 05:09:01.466398 2026] [security2:error] [pid 1041789:tid 1041941] [client 20.151.200.44:63928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/waf.php"] [unique_id "apK9zYv3RhPI65jTFG7aGAAAAyg"]
[Sat Aug 29 05:09:01.468952 2026] [security2:error] [pid 1041789:tid 1042022] [client 158.23.147.79:50164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wzy.php"] [unique_id "apK9zYv3RhPI65jTFG7aGQAAA3k"]
[Sat Aug 29 05:09:01.473561 2026] [security2:error] [pid 1041789:tid 1042032] [client 20.48.251.3:13856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/brc.php"] [unique_id "apK9zYv3RhPI65jTFG7aGgAAA4M"]
[Sat Aug 29 05:09:01.481182 2026] [security2:error] [pid 1041789:tid 1042035] [client 45.125.67.3:45788] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/advanced-custom-fields-pro/readme.txt"] [unique_id "apK9zYv3RhPI65jTFG7aHAAAA4Y"]
[Sat Aug 29 05:09:01.481318 2026] [security2:error] [pid 1041789:tid 1041960] [client 4.205.62.107:25004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/aws_settings.php"] [unique_id "apK9zYv3RhPI65jTFG7aGwAAAzs"]
[Sat Aug 29 05:09:01.481559 2026] [security2:error] [pid 1034096:tid 1034266] [client 20.240.128.207:22091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/mini.php"] [unique_id "apK9zS04twRPFuquKD3CugAAAJQ"]
[Sat Aug 29 05:09:01.485025 2026] [security2:error] [pid 1034096:tid 1034332] [client 20.196.209.81:1423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/go.php"] [unique_id "apK9zS04twRPFuquKD3CuwAAANY"]
[Sat Aug 29 05:09:01.491575 2026] [security2:error] [pid 1041789:tid 1042033] [client 93.123.109.228:51676] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/application/.env"] [unique_id "apK9zYv3RhPI65jTFG7aHQAAA4Q"]
[Sat Aug 29 05:09:01.494741 2026] [security2:error] [pid 1034096:tid 1034310] [client 93.123.109.228:51464] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/apps/.env"] [unique_id "apK9zS04twRPFuquKD3CvgAAAMA"]
[Sat Aug 29 05:09:01.497803 2026] [security2:error] [pid 1034096:tid 1034294] [client 20.104.18.15:45958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/classwithtostring.php"] [unique_id "apK9zS04twRPFuquKD3CvwAAALA"]
[Sat Aug 29 05:09:01.500504 2026] [security2:error] [pid 1034096:tid 1034365] [client 20.104.18.15:15191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/ano.php"] [unique_id "apK9zS04twRPFuquKD3CwAAAAPc"]
[Sat Aug 29 05:09:01.506273 2026] [security2:error] [pid 1041789:tid 1042036] [client 20.63.219.114:10174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/wp-contentt.php"] [unique_id "apK9zYv3RhPI65jTFG7aHgAAA4c"]
[Sat Aug 29 05:09:01.509248 2026] [security2:error] [pid 1034096:tid 1034352] [client 20.63.219.114:2445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/fi2.php"] [unique_id "apK9zS04twRPFuquKD3CwgAAAOo"]
[Sat Aug 29 05:09:01.534594 2026] [security2:error] [pid 1034096:tid 1034323] [client 20.104.18.15:41969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/yj09.php"] [unique_id "apK9zS04twRPFuquKD3CxQAAAM0"]
[Sat Aug 29 05:09:01.538925 2026] [security2:error] [pid 1034096:tid 1034252] [client 45.125.67.3:45990] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/formlift/readme.txt"] [unique_id "apK9zS04twRPFuquKD3CxgAAAIY"]
[Sat Aug 29 05:09:01.539029 2026] [security2:error] [pid 1041789:tid 1042013] [client 45.125.67.3:45886] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/music-store/readme.txt"] [unique_id "apK9zYv3RhPI65jTFG7aIQAAA3A"]
[Sat Aug 29 05:09:01.548948 2026] [security2:error] [pid 1041789:tid 1041935] [client 52.139.37.240:8612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rjrusticfurniture.com"] [uri "/upfile.php"] [unique_id "apK9zYv3RhPI65jTFG7aIgAAAyI"]
[Sat Aug 29 05:09:01.550166 2026] [security2:error] [pid 1041789:tid 1041957] [client 20.104.18.15:46071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/ws13.php"] [unique_id "apK9zYv3RhPI65jTFG7aIwAAAzg"]
[Sat Aug 29 05:09:01.552595 2026] [security2:error] [pid 1034096:tid 1034322] [client 20.104.18.15:12109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/tnglzqmv.php"] [unique_id "apK9zS04twRPFuquKD3CyQAAAMw"]
[Sat Aug 29 05:09:01.553798 2026] [security2:error] [pid 1041789:tid 1041993] [client 20.104.18.15:16803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/wnnjpsby.php"] [unique_id "apK9zYv3RhPI65jTFG7aJAAAA1w"]
[Sat Aug 29 05:09:01.569315 2026] [security2:error] [pid 1034096:tid 1034309] [client 45.148.10.62:44910] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.xfs.rxf.mybluehost.me"] [uri "/.env.backup"] [unique_id "apK9zS04twRPFuquKD3CywAAAL8"]
[Sat Aug 29 05:09:01.572915 2026] [security2:error] [pid 1041789:tid 1042054] [client 20.104.18.15:18894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/birrs.php"] [unique_id "apK9zYv3RhPI65jTFG7aJQAAA5k"]
[Sat Aug 29 05:09:01.573201 2026] [security2:error] [pid 1034096:tid 1034286] [client 4.232.148.111:35832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/config.php"] [unique_id "apK9zS04twRPFuquKD3CzgAAAKg"]
[Sat Aug 29 05:09:01.590568 2026] [security2:error] [pid 1034096:tid 1034376] [client 20.220.204.93:64165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/bzjdlofz.php"] [unique_id "apK9zS04twRPFuquKD3C0QAAAQI"]
[Sat Aug 29 05:09:01.593073 2026] [autoindex:error] [pid 1041789:tid 1041952] [client 34.9.218.0:57304] AH01276: Cannot serve directory /home3/aknsvwmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:09:01.595188 2026] [security2:error] [pid 1034096:tid 1034308] [client 20.104.18.15:22413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/adminfuns.php"] [unique_id "apK9zS04twRPFuquKD3C0gAAAL4"]
[Sat Aug 29 05:09:01.597863 2026] [security2:error] [pid 1034096:tid 1034298] [client 20.104.18.15:43969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/aa.php"] [unique_id "apK9zS04twRPFuquKD3C0wAAALQ"]
[Sat Aug 29 05:09:01.600165 2026] [security2:error] [pid 1034096:tid 1034340] [client 4.205.62.107:51503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/adminfus.php"] [unique_id "apK9zS04twRPFuquKD3C1AAAAN4"]
[Sat Aug 29 05:09:01.607936 2026] [security2:error] [pid 1041789:tid 1042029] [client 20.197.61.180:1030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/dxc.php"] [unique_id "apK9zYv3RhPI65jTFG7aLAAAA4A"]
[Sat Aug 29 05:09:01.608319 2026] [security2:error] [pid 1041789:tid 1042011] [client 40.83.93.50:20841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-content/languages/chosen.php"] [unique_id "apK9zYv3RhPI65jTFG7aLQAAA24"]
[Sat Aug 29 05:09:01.610199 2026] [security2:error] [pid 1034096:tid 1034307] [client 20.100.175.163:25988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/bi.php"] [unique_id "apK9zS04twRPFuquKD3C1QAAAL0"]
[Sat Aug 29 05:09:01.612981 2026] [security2:error] [pid 1034096:tid 1034317] [client 45.148.10.62:44916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xfe.fme.mybluehost.me"] [uri "/.env.php"] [unique_id "apK9zS04twRPFuquKD3C1gAAAMc"]
[Sat Aug 29 05:09:01.616100 2026] [security2:error] [pid 1041789:tid 1041956] [client 93.123.109.228:51494] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/s3/.env.bak"] [unique_id "apK9zYv3RhPI65jTFG7aLwAAAzc"]
[Sat Aug 29 05:09:01.619829 2026] [security2:error] [pid 1041789:tid 1041947] [client 20.48.251.3:33317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/phpi.php"] [unique_id "apK9zYv3RhPI65jTFG7aMAAAAy4"]
[Sat Aug 29 05:09:01.631415 2026] [security2:error] [pid 1034096:tid 1034283] [client 45.125.67.3:45758] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/directorypress/readme.txt"] [unique_id "apK9zS04twRPFuquKD3C2AAAAKU"]
[Sat Aug 29 05:09:01.640605 2026] [security2:error] [pid 1034096:tid 1034271] [client 20.104.18.15:15335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/mgrr.php"] [unique_id "apK9zS04twRPFuquKD3C2QAAAJk"]
[Sat Aug 29 05:09:01.653880 2026] [security2:error] [pid 1041789:tid 1041933] [client 20.104.18.15:39841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/503.php"] [unique_id "apK9zYv3RhPI65jTFG7aMgAAAyA"]
[Sat Aug 29 05:09:01.657671 2026] [security2:error] [pid 1041789:tid 1041943] [client 20.196.209.81:21036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-admin/test.php"] [unique_id "apK9zYv3RhPI65jTFG7aMwAAAyo"]
[Sat Aug 29 05:09:01.657731 2026] [security2:error] [pid 1041789:tid 1042012] [client 20.104.49.130:60765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/kj.php"] [unique_id "apK9zYv3RhPI65jTFG7aNAAAA28"]
[Sat Aug 29 05:09:01.662636 2026] [security2:error] [pid 1034096:tid 1034373] [client 158.23.147.79:5991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/install.php"] [unique_id "apK9zS04twRPFuquKD3C3wAAAP8"]
[Sat Aug 29 05:09:01.669983 2026] [security2:error] [pid 1034096:tid 1034324] [client 45.148.10.62:44932] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.xga.zdx.mybluehost.me"] [uri "/.env.backup"] [unique_id "apK9zS04twRPFuquKD3C4gAAAM4"]
[Sat Aug 29 05:09:01.703063 2026] [security2:error] [pid 1034096:tid 1034266] [client 20.104.18.15:25576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/gigi.php"] [unique_id "apK9zS04twRPFuquKD3C4wAAAJQ"]
[Sat Aug 29 05:09:01.703457 2026] [security2:error] [pid 1034096:tid 1034274] [client 20.104.18.15:45968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/wp-ws68.php"] [unique_id "apK9zS04twRPFuquKD3C5AAAAJw"]
[Sat Aug 29 05:09:01.708061 2026] [fcgid:warn] [pid 1034096:tid 1034284] (70014)End of file found: [client 199.45.155.15:52872] mod_fcgid: can't get data from http client
[Sat Aug 29 05:09:01.709174 2026] [security2:error] [pid 1034096:tid 1034377] [client 45.125.67.3:45918] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/bwl-advanced-faq-manager/readme.txt"] [unique_id "apK9zS04twRPFuquKD3C5wAAAQM"]
[Sat Aug 29 05:09:01.717806 2026] [security2:error] [pid 1034096:tid 1034294] [client 45.148.10.62:44910] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.xfs.rxf.mybluehost.me"] [uri "/.env.old"] [unique_id "apK9zS04twRPFuquKD3C6QAAALA"]
[Sat Aug 29 05:09:01.727380 2026] [security2:error] [pid 1034096:tid 1034371] [client 20.104.18.15:19408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/sss.php"] [unique_id "apK9zS04twRPFuquKD3C6gAAAP0"]
[Sat Aug 29 05:09:01.727750 2026] [security2:error] [pid 1034096:tid 1034339] [client 20.104.18.15:46017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/btx25.php"] [unique_id "apK9zS04twRPFuquKD3C6wAAAN0"]
[Sat Aug 29 05:09:01.729136 2026] [security2:error] [pid 1034096:tid 1034352] [client 4.205.62.107:3960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/test.php"] [unique_id "apK9zS04twRPFuquKD3C7AAAAOo"]
[Sat Aug 29 05:09:01.730339 2026] [security2:error] [pid 1034096:tid 1034365] [client 20.104.18.15:12123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/wefile.php"] [unique_id "apK9zS04twRPFuquKD3C7QAAAPc"]
[Sat Aug 29 05:09:01.748341 2026] [security2:error] [pid 1034096:tid 1034301] [client 52.139.37.240:8639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rjrusticfurniture.com"] [uri "/form.php"] [unique_id "apK9zS04twRPFuquKD3C8AAAALc"]
[Sat Aug 29 05:09:01.756623 2026] [security2:error] [pid 1034096:tid 1034267] [client 20.104.18.15:43291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/img.php"] [unique_id "apK9zS04twRPFuquKD3C8QAAAJU"]
[Sat Aug 29 05:09:01.770310 2026] [security2:error] [pid 1034096:tid 1034372] [client 45.125.67.3:45816] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/wp-meta-data-filter-and-taxonomy-filter/readme.txt"] [unique_id "apK9zS04twRPFuquKD3C9AAAAP4"]
[Sat Aug 29 05:09:01.784130 2026] [security2:error] [pid 1034096:tid 1034340] [client 20.104.18.15:15273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/mac.php"] [unique_id "apK9zS04twRPFuquKD3C9gAAAN4"]
[Sat Aug 29 05:09:01.784351 2026] [security2:error] [pid 1034096:tid 1034307] [client 20.220.204.93:64187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/selesai.php"] [unique_id "apK9zS04twRPFuquKD3C9wAAAL0"]
[Sat Aug 29 05:09:01.788743 2026] [security2:error] [pid 1041789:tid 1042006] [client 20.104.18.15:22521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/classwithtostring.php"] [unique_id "apK9zYv3RhPI65jTFG7aPQAAA2k"]
[Sat Aug 29 05:09:01.795994 2026] [security2:error] [pid 1034096:tid 1034169] [remote 40.77.167.35:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.167.77.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantsfans.net"] [uri "/message_board/index.php"] [unique_id "apK9zS04twRPFuquKD3C-AAA6y8"]
[Sat Aug 29 05:09:01.814582 2026] [security2:error] [pid 1034096:tid 1034362] [client 74.248.24.12:29818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/core.php"] [unique_id "apK9zS04twRPFuquKD3C-wAAAPQ"]
[Sat Aug 29 05:09:01.820077 2026] [security2:error] [pid 1034096:tid 1034283] [client 45.148.10.62:44932] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.xga.zdx.mybluehost.me"] [uri "/.env.old"] [unique_id "apK9zS04twRPFuquKD3C_AAAAKU"]
[Sat Aug 29 05:09:01.832569 2026] [security2:error] [pid 1041789:tid 1041985] [client 20.104.18.15:16846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/info.php/new.php"] [unique_id "apK9zYv3RhPI65jTFG7aQwAAA1Q"]
[Sat Aug 29 05:09:01.836848 2026] [security2:error] [pid 1034096:tid 1034273] [client 93.123.109.228:51612] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/server/api/.env"] [unique_id "apK9zS04twRPFuquKD3C_gAAAJs"]
[Sat Aug 29 05:09:01.845569 2026] [security2:error] [pid 1034096:tid 1034320] [client 93.123.109.228:51574] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/server/.env"] [unique_id "apK9zS04twRPFuquKD3DAAAAAMo"]
[Sat Aug 29 05:09:01.847830 2026] [security2:error] [pid 1034096:tid 1034363] [client 20.104.18.15:39876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/fxp.php"] [unique_id "apK9zS04twRPFuquKD3DAQAAAPU"]
[Sat Aug 29 05:09:01.853568 2026] [security2:error] [pid 1041789:tid 1042017] [client 158.158.54.35:31541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-content/themes/pridmag/il.php"] [unique_id "apK9zYv3RhPI65jTFG7aRAAAA3Q"]
[Sat Aug 29 05:09:01.853784 2026] [security2:error] [pid 1041789:tid 1042027] [client 20.63.81.20:62917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK9zYv3RhPI65jTFG7aRQAAA34"]
[Sat Aug 29 05:09:01.863765 2026] [security2:error] [pid 1041789:tid 1042047] [client 20.104.18.15:12143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/blog.php"] [unique_id "apK9zYv3RhPI65jTFG7aRwAAA5I"]
[Sat Aug 29 05:09:01.865961 2026] [security2:error] [pid 1034096:tid 1034367] [client 20.63.219.114:10133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/theme.php"] [unique_id "apK9zS04twRPFuquKD3DBgAAAPk"]
[Sat Aug 29 05:09:01.868685 2026] [security2:error] [pid 1041789:tid 1041990] [client 20.104.18.15:41864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/scxy.php"] [unique_id "apK9zYv3RhPI65jTFG7aSAAAA1k"]
[Sat Aug 29 05:09:01.889414 2026] [security2:error] [pid 1034096:tid 1034325] [client 158.23.147.79:5981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/xmlrpc.php"] [unique_id "apK9zS04twRPFuquKD3DBwAAAM8"]
[Sat Aug 29 05:09:01.895299 2026] [security2:error] [pid 1034096:tid 1034300] [client 20.63.219.114:19853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/1p.php"] [unique_id "apK9zS04twRPFuquKD3DCQAAALY"]
[Sat Aug 29 05:09:01.898952 2026] [security2:error] [pid 1034096:tid 1034274] [client 20.104.18.15:46026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/mgrr.php"] [unique_id "apK9zS04twRPFuquKD3DCgAAAJw"]
[Sat Aug 29 05:09:01.902605 2026] [security2:error] [pid 1034096:tid 1034284] [client 93.123.109.228:51598] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/server/backend/.env"] [unique_id "apK9zS04twRPFuquKD3DCwAAAKY"]
[Sat Aug 29 05:09:01.912371 2026] [security2:error] [pid 1034096:tid 1034287] [client 40.83.93.50:4038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/alfa-rex.php"] [unique_id "apK9zS04twRPFuquKD3DDgAAAKk"]
[Sat Aug 29 05:09:01.913079 2026] [security2:error] [pid 1041789:tid 1041995] [client 20.104.18.15:45955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/SDsadqwrf.php"] [unique_id "apK9zYv3RhPI65jTFG7aTAAAA14"]
[Sat Aug 29 05:09:01.913896 2026] [security2:error] [pid 1034096:tid 1034289] [client 20.104.18.15:43293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/222.php"] [unique_id "apK9zS04twRPFuquKD3DDwAAAKs"]
[Sat Aug 29 05:09:01.917236 2026] [security2:error] [pid 1034096:tid 1034286] [client 20.196.209.81:1092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/gecko-new.php"] [unique_id "apK9zS04twRPFuquKD3DEAAAAKg"]
[Sat Aug 29 05:09:01.928889 2026] [security2:error] [pid 1034096:tid 1034368] [client 4.205.62.107:22526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/paypal.php"] [unique_id "apK9zS04twRPFuquKD3DEwAAAPo"]
[Sat Aug 29 05:09:01.934105 2026] [security2:error] [pid 1034096:tid 1034303] [client 40.83.93.50:17233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/cookie.php"] [unique_id "apK9zS04twRPFuquKD3DFQAAALk"]
[Sat Aug 29 05:09:01.934812 2026] [security2:error] [pid 1034096:tid 1034368] [client 20.220.204.93:64147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/shlo.php"] [unique_id "apK9zS04twRPFuquKD3DFAAAAPo"]
[Sat Aug 29 05:09:01.940805 2026] [security2:error] [pid 1034096:tid 1034351] [client 20.104.18.15:19448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/wp-includes/ID3/moon.php"] [unique_id "apK9zS04twRPFuquKD3DGQAAAOk"]
[Sat Aug 29 05:09:01.946157 2026] [security2:error] [pid 1034096:tid 1034303] [client 20.104.18.15:15261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/simple.php"] [unique_id "apK9zS04twRPFuquKD3DGgAAALk"]
[Sat Aug 29 05:09:01.954500 2026] [security2:error] [pid 1034096:tid 1034296] [client 52.139.37.240:8470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rjrusticfurniture.com"] [uri "/wp-sigunq.php"] [unique_id "apK9zS04twRPFuquKD3DGwAAALI"]
[Sat Aug 29 05:09:01.976365 2026] [security2:error] [pid 1034096:tid 1034318] [client 45.125.67.3:45830] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/wp-photo-album-plus/readme.txt"] [unique_id "apK9zS04twRPFuquKD3DIAAAAMg"]
[Sat Aug 29 05:09:01.982805 2026] [security2:error] [pid 1041789:tid 1041984] [client 20.240.128.207:27196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/aa.php"] [unique_id "apK9zYv3RhPI65jTFG7aUQAAA1M"]
[Sat Aug 29 05:09:01.988177 2026] [security2:error] [pid 1041789:tid 1041939] [client 45.125.67.3:45774] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/woocommerce-product-addon/readme.txt"] [unique_id "apK9zYv3RhPI65jTFG7aUgAAAyY"]
[Sat Aug 29 05:09:01.999902 2026] [security2:error] [pid 1034096:tid 1034315] [client 20.104.18.15:39848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/vv.php"] [unique_id "apK9zS04twRPFuquKD3DJAAAAMU"]
[Sat Aug 29 05:09:02.012148 2026] [security2:error] [pid 1034096:tid 1034347] [client 20.63.81.20:62853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK9zi04twRPFuquKD3DJwAAAOU"]
[Sat Aug 29 05:09:02.013664 2026] [security2:error] [pid 1041789:tid 1041934] [client 20.104.18.15:22480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK9zov3RhPI65jTFG7aUwAAAyE"]
[Sat Aug 29 05:09:02.015574 2026] [security2:error] [pid 1034096:tid 1034293] [client 45.148.10.62:44910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xfs.rxf.mybluehost.me"] [uri "/.env.php.bak"] [unique_id "apK9zi04twRPFuquKD3DKAAAAK8"]
[Sat Aug 29 05:09:02.016746 2026] [security2:error] [pid 1041789:tid 1041994] [client 93.123.109.228:51480] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/back-api/.env"] [unique_id "apK9zov3RhPI65jTFG7aVAAAA10"]
[Sat Aug 29 05:09:02.021677 2026] [security2:error] [pid 1034096:tid 1034262] [client 20.104.49.130:60948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/wp.php"] [unique_id "apK9zi04twRPFuquKD3DKgAAAJA"]
[Sat Aug 29 05:09:02.022778 2026] [security2:error] [pid 1034096:tid 1034321] [client 93.123.109.228:51446] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/back-end/.env"] [unique_id "apK9zi04twRPFuquKD3DLQAAAMs"]
[Sat Aug 29 05:09:02.037445 2026] [security2:error] [pid 1034096:tid 1034323] [client 146.70.36.124:52866] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "narrowgate-electrical.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "apK9zi04twRPFuquKD3DLgAAAM0"]
[Sat Aug 29 05:09:02.039735 2026] [security2:error] [pid 1034096:tid 1034312] [client 20.104.18.15:25472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/w.php"] [unique_id "apK9zi04twRPFuquKD3DLwAAAMI"]
[Sat Aug 29 05:09:02.053120 2026] [security2:error] [pid 1034096:tid 1034266] [client 4.232.148.111:7512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK9zi04twRPFuquKD3DMAAAAJQ"]
[Sat Aug 29 05:09:02.059722 2026] [security2:error] [pid 1041789:tid 1041966] [client 93.123.109.228:51676] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/back/.env"] [unique_id "apK9zov3RhPI65jTFG7aVgAAA0E"]
[Sat Aug 29 05:09:02.061984 2026] [security2:error] [pid 1034096:tid 1034370] [client 93.123.109.228:51592] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/backend-api/.env"] [unique_id "apK9zi04twRPFuquKD3DMQAAAPw"]
[Sat Aug 29 05:09:02.079156 2026] [security2:error] [pid 1034096:tid 1034339] [client 40.83.93.50:20816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-content/languages/index.php"] [unique_id "apK9zi04twRPFuquKD3DNAAAAN0"]
[Sat Aug 29 05:09:02.085034 2026] [security2:error] [pid 1034096:tid 1034325] [client 93.123.109.228:51598] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/services/.env"] [unique_id "apK9zi04twRPFuquKD3DNgAAAM8"]
[Sat Aug 29 05:09:02.085766 2026] [security2:error] [pid 1034096:tid 1034300] [client 93.123.109.228:51614] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/service/.env"] [unique_id "apK9zi04twRPFuquKD3DNQAAALY"]
[Sat Aug 29 05:09:02.091658 2026] [security2:error] [pid 1034096:tid 1034284] [client 20.104.18.15:18912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/xmini4.php"] [unique_id "apK9zi04twRPFuquKD3DNwAAAKY"]
[Sat Aug 29 05:09:02.092190 2026] [security2:error] [pid 1041789:tid 1041948] [client 20.104.18.15:43304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/key.php"] [unique_id "apK9zov3RhPI65jTFG7aVwAAAy8"]
[Sat Aug 29 05:09:02.098830 2026] [security2:error] [pid 1034096:tid 1034374] [client 20.104.18.15:12133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/wp-admin/js/wp-load.php"] [unique_id "apK9zi04twRPFuquKD3DOQAAAQA"]
[Sat Aug 29 05:09:02.099174 2026] [security2:error] [pid 1034096:tid 1034289] [client 20.104.18.15:46021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/55.php"] [unique_id "apK9zi04twRPFuquKD3DOAAAAKs"]
[Sat Aug 29 05:09:02.101035 2026] [security2:error] [pid 1034096:tid 1034374] [client 20.104.18.15:15171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/xty.php"] [unique_id "apK9zi04twRPFuquKD3DOgAAAQA"]
[Sat Aug 29 05:09:02.113782 2026] [security2:error] [pid 1034096:tid 1034271] [client 20.197.61.180:1869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/post.php"] [unique_id "apK9zi04twRPFuquKD3DPAAAAJk"]
[Sat Aug 29 05:09:02.114284 2026] [security2:error] [pid 1034096:tid 1034322] [client 20.100.175.163:29098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/cc.php"] [unique_id "apK9zi04twRPFuquKD3DPQAAAMw"]
[Sat Aug 29 05:09:02.129413 2026] [security2:error] [pid 1034096:tid 1034301] [client 20.220.204.93:64204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/asax.php"] [unique_id "apK9zi04twRPFuquKD3DPgAAALc"]
[Sat Aug 29 05:09:02.134210 2026] [security2:error] [pid 1034096:tid 1034252] [client 20.48.251.3:13842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/temp.php"] [unique_id "apK9zi04twRPFuquKD3DQAAAAIY"]
[Sat Aug 29 05:09:02.142809 2026] [security2:error] [pid 1034096:tid 1034316] [client 20.63.81.20:62968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/adminfuns.php"] [unique_id "apK9zi04twRPFuquKD3DQgAAAMY"]
[Sat Aug 29 05:09:02.142822 2026] [security2:error] [pid 1034096:tid 1034309] [client 20.104.18.15:46047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/BDKR28WP.php"] [unique_id "apK9zi04twRPFuquKD3DQwAAAL8"]
[Sat Aug 29 05:09:02.143640 2026] [security2:error] [pid 1034096:tid 1034318] [client 20.104.49.130:57634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/kgoc6awap3napxxxdCdefault.php"] [unique_id "apK9zi04twRPFuquKD3DRAAAAMg"]
[Sat Aug 29 05:09:02.147284 2026] [security2:error] [pid 1034096:tid 1034282] [client 45.148.10.62:44932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xga.zdx.mybluehost.me"] [uri "/.env.php.bak"] [unique_id "apK9zi04twRPFuquKD3DRwAAAKQ"]
[Sat Aug 29 05:09:02.152543 2026] [security2:error] [pid 1034096:tid 1034274] [client 52.139.37.240:8471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rjrusticfurniture.com"] [uri "/07.php"] [unique_id "apK9zi04twRPFuquKD3DSQAAAJw"]
[Sat Aug 29 05:09:02.154618 2026] [security2:error] [pid 1034096:tid 1034376] [client 93.123.109.228:51680] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK9zi04twRPFuquKD3DSgAAAQI"]
[Sat Aug 29 05:09:02.165976 2026] [security2:error] [pid 1034096:tid 1034315] [client 20.104.18.15:39821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/bossu.php"] [unique_id "apK9zi04twRPFuquKD3DTQAAAMU"]
[Sat Aug 29 05:09:02.173312 2026] [security2:error] [pid 1041789:tid 1042013] [client 20.104.18.15:25546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/x.php"] [unique_id "apK9zov3RhPI65jTFG7aXgAAA3A"]
[Sat Aug 29 05:09:02.182579 2026] [security2:error] [pid 1034096:tid 1034286] [client 20.197.61.180:1861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/fox.php"] [unique_id "apK9zi04twRPFuquKD3DTgAAAKg"]
[Sat Aug 29 05:09:02.183391 2026] [security2:error] [pid 1041789:tid 1041935] [client 20.104.18.15:22418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/5PJcpMFsD8B.php"] [unique_id "apK9zov3RhPI65jTFG7aYAAAAyI"]
[Sat Aug 29 05:09:02.190388 2026] [security2:error] [pid 1041789:tid 1042054] [client 93.123.109.228:49158] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/shared/.env"] [unique_id "apK9zov3RhPI65jTFG7aYQAAA5k"]
[Sat Aug 29 05:09:02.211511 2026] [security2:error] [pid 1034096:tid 1034312] [client 20.196.209.81:21019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-admin/user/f35.php"] [unique_id "apK9zi04twRPFuquKD3DUgAAAMI"]
[Sat Aug 29 05:09:02.212147 2026] [security2:error] [pid 1034096:tid 1034323] [client 93.123.109.228:49294] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/shop/.env"] [unique_id "apK9zi04twRPFuquKD3DUQAAAM0"]
[Sat Aug 29 05:09:02.225735 2026] [security2:error] [pid 1041789:tid 1042028] [client 20.104.18.15:41966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/ws13.php"] [unique_id "apK9zov3RhPI65jTFG7aYwAAA38"]
[Sat Aug 29 05:09:02.243346 2026] [security2:error] [pid 1034096:tid 1034356] [client 202.71.25.11:56059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.25.71.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK9zi04twRPFuquKD3DWAAAAO4"]
[Sat Aug 29 05:09:02.243513 2026] [security2:error] [pid 1034096:tid 1034356] [client 202.71.25.11:56059] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK9zi04twRPFuquKD3DWAAAAO4"]
[Sat Aug 29 05:09:02.244273 2026] [security2:error] [pid 1034096:tid 1034306] [client 20.104.18.15:15346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/sallu.php"] [unique_id "apK9zi04twRPFuquKD3DWQAAALw"]
[Sat Aug 29 05:09:02.251684 2026] [security2:error] [pid 1041789:tid 1042031] [client 20.104.18.15:18907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/gulu.php"] [unique_id "apK9zov3RhPI65jTFG7aZQAAA4I"]
[Sat Aug 29 05:09:02.272438 2026] [security2:error] [pid 1041789:tid 1042011] [client 20.63.81.20:62852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/goods.php"] [unique_id "apK9zov3RhPI65jTFG7aZwAAA24"]
[Sat Aug 29 05:09:02.283148 2026] [security2:error] [pid 1041789:tid 1041933] [client 20.104.18.15:45963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/yj09.php"] [unique_id "apK9zov3RhPI65jTFG7aaAAAAyA"]
[Sat Aug 29 05:09:02.285907 2026] [security2:error] [pid 1041789:tid 1042012] [client 20.104.18.15:43305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/chosen.php"] [unique_id "apK9zov3RhPI65jTFG7aaQAAA28"]
[Sat Aug 29 05:09:02.290934 2026] [security2:error] [pid 1034096:tid 1034260] [client 158.158.54.35:1842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/assets/images/doc.php"] [unique_id "apK9zi04twRPFuquKD3DXwAAAI4"]
[Sat Aug 29 05:09:02.291083 2026] [security2:error] [pid 1034096:tid 1034289] [client 20.151.200.44:63845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/bnnof6.php"] [unique_id "apK9zi04twRPFuquKD3DYAAAAKs"]
[Sat Aug 29 05:09:02.300332 2026] [security2:error] [pid 1034096:tid 1034374] [client 20.220.204.93:64135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/fetch.php"] [unique_id "apK9zi04twRPFuquKD3DYQAAAQA"]
[Sat Aug 29 05:09:02.304813 2026] [security2:error] [pid 1034096:tid 1034352] [client 20.48.251.3:13860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/fm.php"] [unique_id "apK9zi04twRPFuquKD3DYgAAAOo"]
[Sat Aug 29 05:09:02.309814 2026] [security2:error] [pid 1034096:tid 1034344] [client 45.125.67.3:46082] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/acf-frontend-form-element/readme.txt"] [unique_id "apK9zi04twRPFuquKD3DZAAAAOI"]
[Sat Aug 29 05:09:02.310835 2026] [security2:error] [pid 1034096:tid 1034368] [client 93.123.109.228:51534] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/src/.env"] [unique_id "apK9zi04twRPFuquKD3DYwAAAPo"]
[Sat Aug 29 05:09:02.313534 2026] [security2:error] [pid 1041789:tid 1042040] [client 45.125.67.3:45844] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/userpro/readme.txt"] [unique_id "apK9zov3RhPI65jTFG7aawAAA4s"]
[Sat Aug 29 05:09:02.315276 2026] [security2:error] [pid 1041789:tid 1041957] [client 20.63.219.114:10137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/Njima.php"] [unique_id "apK9zov3RhPI65jTFG7abAAAAzg"]
[Sat Aug 29 05:09:02.318635 2026] [security2:error] [pid 1034096:tid 1034322] [client 4.205.62.107:8963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/chosen.php"] [unique_id "apK9zi04twRPFuquKD3DZQAAAMw"]
[Sat Aug 29 05:09:02.324314 2026] [security2:error] [pid 1041789:tid 1042007] [client 93.123.109.228:51594] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/backup/.env"] [unique_id "apK9zov3RhPI65jTFG7abwAAA2o"]
[Sat Aug 29 05:09:02.328407 2026] [security2:error] [pid 1034096:tid 1034301] [client 20.104.18.15:16799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/ssla.php"] [unique_id "apK9zi04twRPFuquKD3DaQAAALc"]
[Sat Aug 29 05:09:02.330130 2026] [security2:error] [pid 1041789:tid 1042057] [client 20.104.18.15:39863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/504.php"] [unique_id "apK9zov3RhPI65jTFG7acAAAA5w"]
[Sat Aug 29 05:09:02.331931 2026] [security2:error] [pid 1041789:tid 1042034] [client 74.248.24.12:2321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/admin/function.php"] [unique_id "apK9zov3RhPI65jTFG7acQAAA4U"]
[Sat Aug 29 05:09:02.334665 2026] [security2:error] [pid 1034096:tid 1034252] [client 93.123.109.228:51386] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/be/.env"] [unique_id "apK9zi04twRPFuquKD3DagAAAIY"]
[Sat Aug 29 05:09:02.337824 2026] [security2:error] [pid 1041789:tid 1041969] [client 20.104.18.15:22497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK9zov3RhPI65jTFG7acwAAA0Q"]
[Sat Aug 29 05:09:02.338034 2026] [security2:error] [pid 1041789:tid 1042044] [client 20.104.18.15:12254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/robot.php"] [unique_id "apK9zov3RhPI65jTFG7adQAAA48"]
[Sat Aug 29 05:09:02.340350 2026] [security2:error] [pid 1034096:tid 1034377] [client 20.197.61.180:1916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/wp-2019.php"] [unique_id "apK9zi04twRPFuquKD3DawAAAQM"]
[Sat Aug 29 05:09:02.341271 2026] [security2:error] [pid 1041789:tid 1041932] [client 20.104.18.15:45964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/sky.php"] [unique_id "apK9zov3RhPI65jTFG7adgAAAx8"]
[Sat Aug 29 05:09:02.347905 2026] [security2:error] [pid 1041789:tid 1041965] [client 52.139.37.240:8591] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "cpanel.rjrusticfurniture.com"] [uri "/c99.php"] [unique_id "apK9zov3RhPI65jTFG7aeAAAA0A"]
[Sat Aug 29 05:09:02.355918 2026] [security2:error] [pid 1034096:tid 1034335] [client 20.196.209.81:1114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/wp-admin.php"] [unique_id "apK9zi04twRPFuquKD3DbgAAANk"]
[Sat Aug 29 05:09:02.357965 2026] [security2:error] [pid 1041789:tid 1042014] [client 93.123.109.228:51480] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/beta/.env"] [unique_id "apK9zov3RhPI65jTFG7aeQAAA3E"]
[Sat Aug 29 05:09:02.380507 2026] [security2:error] [pid 1034096:tid 1034317] [client 20.104.18.15:15186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/codex.php"] [unique_id "apK9zi04twRPFuquKD3DcQAAAMc"]
[Sat Aug 29 05:09:02.386740 2026] [security2:error] [pid 1034096:tid 1034315] [client 20.104.18.15:18890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/replace.php"] [unique_id "apK9zi04twRPFuquKD3DdAAAAMU"]
[Sat Aug 29 05:09:02.389736 2026] [security2:error] [pid 1041789:tid 1042004] [client 40.83.93.50:4074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/cookie.php"] [unique_id "apK9zov3RhPI65jTFG7afAAAA2c"]
[Sat Aug 29 05:09:02.401971 2026] [security2:error] [pid 1034096:tid 1034358] [client 20.63.81.20:62857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/100.php"] [unique_id "apK9zi04twRPFuquKD3DdgAAAPA"]
[Sat Aug 29 05:09:02.411492 2026] [security2:error] [pid 1034096:tid 1034339] [client 40.83.93.50:19030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/NewFile.php"] [unique_id "apK9zi04twRPFuquKD3DeAAAAN0"]
[Sat Aug 29 05:09:02.434134 2026] [security2:error] [pid 1034096:tid 1034277] [client 20.48.251.3:33297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/tinyfilemanager.php"] [unique_id "apK9zi04twRPFuquKD3DewAAAJ8"]
[Sat Aug 29 05:09:02.437027 2026] [security2:error] [pid 1034096:tid 1034262] [client 20.104.18.15:46004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/scxy.php"] [unique_id "apK9zi04twRPFuquKD3DfQAAAJA"]
[Sat Aug 29 05:09:02.437845 2026] [security2:error] [pid 1041789:tid 1041975] [client 20.220.204.93:64212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/vx.php"] [unique_id "apK9zov3RhPI65jTFG7afQAAA0o"]
[Sat Aug 29 05:09:02.446416 2026] [security2:error] [pid 1041789:tid 1041998] [client 20.104.18.15:41871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/btx25.php"] [unique_id "apK9zov3RhPI65jTFG7afgAAA2E"]
[Sat Aug 29 05:09:02.451294 2026] [security2:error] [pid 1041789:tid 1041989] [client 158.23.147.79:17408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apK9zov3RhPI65jTFG7afwAAA1g"]
[Sat Aug 29 05:09:02.458116 2026] [security2:error] [pid 1034096:tid 1034292] [client 20.104.18.15:16791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "apK9zi04twRPFuquKD3DgQAAAK4"]
[Sat Aug 29 05:09:02.467950 2026] [security2:error] [pid 1034096:tid 1034350] [client 20.63.219.114:2442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/alumni_reg.php"] [unique_id "apK9zi04twRPFuquKD3DggAAAOg"]
[Sat Aug 29 05:09:02.478726 2026] [security2:error] [pid 1034096:tid 1034370] [client 20.104.18.15:12275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/revo.php"] [unique_id "apK9zi04twRPFuquKD3DhgAAAPw"]
[Sat Aug 29 05:09:02.480171 2026] [security2:error] [pid 1034096:tid 1034373] [client 20.104.18.15:22405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/wsd.php"] [unique_id "apK9zi04twRPFuquKD3DhwAAAP8"]
[Sat Aug 29 05:09:02.481342 2026] [security2:error] [pid 1041789:tid 1042027] [client 20.104.18.15:39797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/nice.php"] [unique_id "apK9zov3RhPI65jTFG7agAAAA34"]
[Sat Aug 29 05:09:02.483815 2026] [security2:error] [pid 1034096:tid 1034271] [client 20.240.128.207:27578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/c.php"] [unique_id "apK9zi04twRPFuquKD3DiQAAAJk"]
[Sat Aug 29 05:09:02.492491 2026] [security2:error] [pid 1041789:tid 1041988] [client 93.123.109.228:51594] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/client/.env"] [unique_id "apK9zov3RhPI65jTFG7agQAAA1c"]
[Sat Aug 29 05:09:02.495596 2026] [security2:error] [pid 1034096:tid 1034351] [client 158.23.147.79:11264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-admin/admin.php"] [unique_id "apK9zi04twRPFuquKD3DjAAAAOk"]
[Sat Aug 29 05:09:02.496955 2026] [security2:error] [pid 1041789:tid 1041978] [client 93.123.109.228:51494] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/srv/.env"] [unique_id "apK9zov3RhPI65jTFG7aggAAA00"]
[Sat Aug 29 05:09:02.507004 2026] [security2:error] [pid 1041789:tid 1041992] [client 93.123.109.228:49218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/stage/.env"] [unique_id "apK9zov3RhPI65jTFG7agwAAA1s"]
[Sat Aug 29 05:09:02.508781 2026] [security2:error] [pid 1041789:tid 1041995] [client 93.123.109.228:51508] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/staging/.env"] [unique_id "apK9zov3RhPI65jTFG7ahAAAA14"]
[Sat Aug 29 05:09:02.510685 2026] [security2:error] [pid 1041789:tid 1042015] [client 20.104.18.15:43274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/file1221.php"] [unique_id "apK9zov3RhPI65jTFG7ahQAAA3I"]
[Sat Aug 29 05:09:02.513063 2026] [security2:error] [pid 1034096:tid 1034294] [client 93.123.109.228:51386] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/cms/.env"] [unique_id "apK9zi04twRPFuquKD3DjwAAALA"]
[Sat Aug 29 05:09:02.519556 2026] [security2:error] [pid 1041789:tid 1041944] [client 20.104.18.15:15345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/5656.php"] [unique_id "apK9zov3RhPI65jTFG7aiAAAAys"]
[Sat Aug 29 05:09:02.520451 2026] [security2:error] [pid 1034096:tid 1034290] [client 4.232.148.111:35306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-good.php"] [unique_id "apK9zi04twRPFuquKD3DkAAAAKw"]
[Sat Aug 29 05:09:02.548201 2026] [security2:error] [pid 1041789:tid 1042017] [client 52.139.37.240:8602] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "cpanel.rjrusticfurniture.com"] [uri "/c99.php"] [unique_id "apK9zov3RhPI65jTFG7aigAAA3Q"]
[Sat Aug 29 05:09:02.550664 2026] [security2:error] [pid 1041789:tid 1042030] [client 40.83.93.50:12971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-content/languages/min.php"] [unique_id "apK9zov3RhPI65jTFG7aiwAAA4E"]
[Sat Aug 29 05:09:02.563392 2026] [security2:error] [pid 1034096:tid 1034322] [client 20.63.81.20:62923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/about.php"] [unique_id "apK9zi04twRPFuquKD3DkwAAAMw"]
[Sat Aug 29 05:09:02.566121 2026] [security2:error] [pid 1034096:tid 1034322] [client 20.48.251.3:14275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/05.php"] [unique_id "apK9zi04twRPFuquKD3DlAAAAMw"]
[Sat Aug 29 05:09:02.579991 2026] [security2:error] [pid 1034096:tid 1034362] [client 45.148.10.62:44962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xfs.rxf.mybluehost.me"] [uri "/.env.php"] [unique_id "apK9zi04twRPFuquKD3DmAAAAPQ"]
[Sat Aug 29 05:09:02.595223 2026] [security2:error] [pid 1034096:tid 1034335] [client 4.205.62.107:6968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/public/vx.php"] [unique_id "apK9zi04twRPFuquKD3DmgAAANk"]
[Sat Aug 29 05:09:02.600624 2026] [security2:error] [pid 1041789:tid 1041960] [client 111.235.68.106:4903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK9zov3RhPI65jTFG7ajgAAAzs"]
[Sat Aug 29 05:09:02.600760 2026] [security2:error] [pid 1041789:tid 1041960] [client 111.235.68.106:4903] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK9zov3RhPI65jTFG7ajgAAAzs"]
[Sat Aug 29 05:09:02.601099 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.100.175.163:20975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/files/index.php"] [unique_id "apK9zov3RhPI65jTFG7ajwAAA2Q"]
[Sat Aug 29 05:09:02.610141 2026] [security2:error] [pid 1034096:tid 1034355] [client 93.123.109.228:51662] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/stg/.env"] [unique_id "apK9zi04twRPFuquKD3DmwAAAO0"]
[Sat Aug 29 05:09:02.617149 2026] [security2:error] [pid 1041789:tid 1041942] [client 4.205.62.107:24982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/wp-konfig.backup.php"] [unique_id "apK9zov3RhPI65jTFG7akQAAAyk"]
[Sat Aug 29 05:09:02.617580 2026] [security2:error] [pid 1041789:tid 1042047] [client 20.196.209.81:21038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-admin/user/min.php"] [unique_id "apK9zov3RhPI65jTFG7akgAAA5I"]
[Sat Aug 29 05:09:02.637311 2026] [security2:error] [pid 1034096:tid 1034340] [client 4.205.62.107:62752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/register.php"] [unique_id "apK9zi04twRPFuquKD3DnwAAAN4"]
[Sat Aug 29 05:09:02.653748 2026] [security2:error] [pid 1034096:tid 1034339] [client 20.104.49.130:52303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/press.php"] [unique_id "apK9zi04twRPFuquKD3DoQAAAN0"]
[Sat Aug 29 05:09:02.656103 2026] [security2:error] [pid 1041789:tid 1041962] [client 146.70.36.124:52876] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "narrowgate-electrical.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "apK9zov3RhPI65jTFG7akwAAAz0"]
[Sat Aug 29 05:09:02.681554 2026] [security2:error] [pid 1034096:tid 1034312] [client 20.220.204.93:62308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/global.php"] [unique_id "apK9zi04twRPFuquKD3DowAAAMI"]
[Sat Aug 29 05:09:02.689460 2026] [security2:error] [pid 1034096:tid 1034323] [client 93.123.109.228:51386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/config.php"] [unique_id "apK9zi04twRPFuquKD3DpgAAAM0"]
[Sat Aug 29 05:09:02.702029 2026] [security2:error] [pid 1041789:tid 1042032] [client 20.63.81.20:62944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/about.php"] [unique_id "apK9zov3RhPI65jTFG7algAAA4M"]
[Sat Aug 29 05:09:02.704471 2026] [security2:error] [pid 1034096:tid 1034370] [client 91.92.47.191:53280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.giantgardening.com"] [uri "/config.php"] [unique_id "apK9zi04twRPFuquKD3DqQAAAPw"]
[Sat Aug 29 05:09:02.717842 2026] [security2:error] [pid 1034096:tid 1034373] [client 45.148.10.62:44942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xey.pwx.mybluehost.me"] [uri "/wp-config.php"] [unique_id "apK9zi04twRPFuquKD3DqwAAAP8"]
[Sat Aug 29 05:09:02.723714 2026] [security2:error] [pid 1041789:tid 1042045] [client 93.123.109.228:51676] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/config/.env"] [unique_id "apK9zov3RhPI65jTFG7amAAAA5A"]
[Sat Aug 29 05:09:02.731228 2026] [security2:error] [pid 1034096:tid 1034318] [client 20.48.251.3:13958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/wp-blog.php"] [unique_id "apK9zi04twRPFuquKD3DrgAAAMg"]
[Sat Aug 29 05:09:02.731783 2026] [security2:error] [pid 1034096:tid 1034294] [client 93.123.109.228:51612] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/stripe/.env"] [unique_id "apK9zi04twRPFuquKD3DrQAAALA"]
[Sat Aug 29 05:09:02.743274 2026] [security2:error] [pid 1034096:tid 1034308] [client 158.158.54.35:34636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/bgymj.php"] [unique_id "apK9zi04twRPFuquKD3DsAAAAL4"]
[Sat Aug 29 05:09:02.745473 2026] [security2:error] [pid 1034096:tid 1034282] [client 4.205.62.107:58485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/env.php"] [unique_id "apK9zi04twRPFuquKD3DsQAAAKQ"]
[Sat Aug 29 05:09:02.746570 2026] [security2:error] [pid 1034096:tid 1034277] [client 52.139.37.240:8592] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "cpanel.rjrusticfurniture.com"] [uri "/c99.php"] [unique_id "apK9zi04twRPFuquKD3DsgAAAJ8"]
[Sat Aug 29 05:09:02.747737 2026] [security2:error] [pid 1034096:tid 1034309] [client 20.63.219.114:10527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/configs.php"] [unique_id "apK9zi04twRPFuquKD3DswAAAL8"]
[Sat Aug 29 05:09:02.752265 2026] [security2:error] [pid 1041789:tid 1041931] [client 45.148.10.62:44976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xga.zdx.mybluehost.me"] [uri "/.env.php"] [unique_id "apK9zov3RhPI65jTFG7amwAAAx4"]
[Sat Aug 29 05:09:02.753075 2026] [security2:error] [pid 1041789:tid 1041999] [client 158.23.147.79:17603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-l0gin.php"] [unique_id "apK9zov3RhPI65jTFG7anAAAA2I"]
[Sat Aug 29 05:09:02.773162 2026] [security2:error] [pid 1034096:tid 1034273] [client 158.23.147.79:6102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-content/x/index.php"] [unique_id "apK9zi04twRPFuquKD3DtwAAAJs"]
[Sat Aug 29 05:09:02.785070 2026] [security2:error] [pid 1041789:tid 1041997] [client 45.125.67.3:46088] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/greenshiftquery/readme.txt"] [unique_id "apK9zov3RhPI65jTFG7anQAAA2A"]
[Sat Aug 29 05:09:02.835889 2026] [security2:error] [pid 1041789:tid 1041983] [client 20.63.219.114:2051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/colors.php"] [unique_id "apK9zov3RhPI65jTFG7aogAAA1I"]
[Sat Aug 29 05:09:02.842488 2026] [security2:error] [pid 1041789:tid 1041941] [client 20.197.61.180:1894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/csv.php"] [unique_id "apK9zov3RhPI65jTFG7apAAAAyg"]
[Sat Aug 29 05:09:02.843666 2026] [security2:error] [pid 1034096:tid 1034252] [client 20.220.204.93:62305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/fs.php"] [unique_id "apK9zi04twRPFuquKD3DvQAAAIY"]
[Sat Aug 29 05:09:02.845995 2026] [security2:error] [pid 1034096:tid 1034325] [client 74.248.24.12:37874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/admin/index.php"] [unique_id "apK9zi04twRPFuquKD3DvgAAAM8"]
[Sat Aug 29 05:09:02.846142 2026] [security2:error] [pid 1034096:tid 1034377] [client 20.63.81.20:62919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/admin.php"] [unique_id "apK9zi04twRPFuquKD3DwAAAAQM"]
[Sat Aug 29 05:09:02.852301 2026] [security2:error] [pid 1034096:tid 1034363] [client 93.123.109.228:51592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/config/aws.php"] [unique_id "apK9zi04twRPFuquKD3DwgAAAPU"]
[Sat Aug 29 05:09:02.866394 2026] [security2:error] [pid 1034096:tid 1034335] [client 4.205.62.107:56017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/cloud.php"] [unique_id "apK9zi04twRPFuquKD3DxAAAANk"]
[Sat Aug 29 05:09:02.870727 2026] [security2:error] [pid 1034096:tid 1034263] [client 20.48.251.3:13852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/erty.php"] [unique_id "apK9zi04twRPFuquKD3DxQAAAJE"]
[Sat Aug 29 05:09:02.872400 2026] [security2:error] [pid 1034096:tid 1034355] [client 93.123.109.228:51534] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/terraform.tfstate.backup"] [unique_id "apK9zi04twRPFuquKD3DxgAAAO0"]
[Sat Aug 29 05:09:02.877250 2026] [security2:error] [pid 1034096:tid 1034372] [client 40.83.93.50:12517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/NewFile.php"] [unique_id "apK9zi04twRPFuquKD3DxwAAAP4"]
[Sat Aug 29 05:09:02.878594 2026] [security2:error] [pid 1034096:tid 1034315] [client 93.123.109.228:51406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/config/config.inc.php"] [unique_id "apK9zi04twRPFuquKD3DyQAAAMU"]
[Sat Aug 29 05:09:02.888597 2026] [security2:error] [pid 1034096:tid 1034352] [client 127.0.0.1:51094] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK9zi04twRPFuquKD3DugAAAOo"]
[Sat Aug 29 05:09:02.888681 2026] [security2:error] [pid 1041789:tid 1042013] [client 74.7.241.149:53888] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.srp.uus.mybluehost.me"] [uri "/robots.txt"] [unique_id "apK9zov3RhPI65jTFG7angADcEc"]
[Sat Aug 29 05:09:02.893729 2026] [security2:error] [pid 1041789:tid 1041943] [client 93.123.109.228:51494] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/test/.env"] [unique_id "apK9zov3RhPI65jTFG7aqgAAAyo"]
[Sat Aug 29 05:09:02.895734 2026] [security2:error] [pid 1034096:tid 1034276] [client 93.123.109.228:51614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/test.php"] [unique_id "apK9zi04twRPFuquKD3DzQAAAJ4"]
[Sat Aug 29 05:09:02.896645 2026] [security2:error] [pid 1034096:tid 1034266] [client 20.196.209.81:1106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/wp-configs.php"] [unique_id "apK9zi04twRPFuquKD3DzgAAAJQ"]
[Sat Aug 29 05:09:02.908682 2026] [security2:error] [pid 1034096:tid 1034297] [client 20.197.61.180:12784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/disagraeosc.php"] [unique_id "apK9zi04twRPFuquKD3DzwAAALM"]
[Sat Aug 29 05:09:02.922006 2026] [security2:error] [pid 1034096:tid 1034262] [client 93.123.109.228:51760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/config/config.php"] [unique_id "apK9zi04twRPFuquKD3D0QAAAJA"]
[Sat Aug 29 05:09:02.955040 2026] [security2:error] [pid 1041789:tid 1041993] [client 40.83.93.50:14517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/config.php"] [unique_id "apK9zov3RhPI65jTFG7aqwAAA1w"]
[Sat Aug 29 05:09:02.958090 2026] [security2:error] [pid 1034096:tid 1034306] [client 45.148.10.62:44958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xfe.fme.mybluehost.me"] [uri "/wp-config.php"] [unique_id "apK9zi04twRPFuquKD3D1gAAALw"]
[Sat Aug 29 05:09:02.976688 2026] [security2:error] [pid 1034096:tid 1034317] [client 61.9.8.139:21047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK9zi04twRPFuquKD3D0wAAAMc"]
[Sat Aug 29 05:09:02.976828 2026] [security2:error] [pid 1034096:tid 1034317] [client 61.9.8.139:21047] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK9zi04twRPFuquKD3D0wAAAMc"]
[Sat Aug 29 05:09:02.985628 2026] [security2:error] [pid 1041789:tid 1041932] [client 20.220.204.93:64228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/ioxi.php"] [unique_id "apK9zov3RhPI65jTFG7arQAAAx8"]
[Sat Aug 29 05:09:02.986714 2026] [security2:error] [pid 1034096:tid 1034368] [client 20.240.128.207:22129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/f.php"] [unique_id "apK9zi04twRPFuquKD3D2AAAAPo"]
[Sat Aug 29 05:09:02.987140 2026] [security2:error] [pid 1041789:tid 1042044] [client 93.123.109.228:49158] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/user/.env"] [unique_id "apK9zov3RhPI65jTFG7arAAAA48"]
[Sat Aug 29 05:09:02.996718 2026] [security2:error] [pid 1034096:tid 1034287] [client 158.23.147.79:5960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/atomlib.php"] [unique_id "apK9zi04twRPFuquKD3D2gAAAKk"]
[Sat Aug 29 05:09:02.998926 2026] [security2:error] [pid 1034096:tid 1034373] [client 20.63.81.20:62934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/admin.php"] [unique_id "apK9zi04twRPFuquKD3D3AAAAP8"]
[Sat Aug 29 05:09:03.001243 2026] [security2:error] [pid 1034096:tid 1034371] [client 20.48.251.3:14044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/wp-config.backup.php"] [unique_id "apK9zy04twRPFuquKD3D3QAAAP0"]
[Sat Aug 29 05:09:03.004907 2026] [security2:error] [pid 1034096:tid 1034286] [client 4.232.148.111:3830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "apK9zy04twRPFuquKD3D3wAAAKg"]
[Sat Aug 29 05:09:03.010520 2026] [security2:error] [pid 1034096:tid 1034340] [client 20.196.209.81:18425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-admin/users.php"] [unique_id "apK9zy04twRPFuquKD3D4AAAAN4"]
[Sat Aug 29 05:09:03.013004 2026] [security2:error] [pid 1034096:tid 1034351] [client 93.123.109.228:51734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/config/env.php"] [unique_id "apK9zy04twRPFuquKD3D4QAAAOk"]
[Sat Aug 29 05:09:03.015648 2026] [security2:error] [pid 1041789:tid 1042050] [client 45.125.67.3:45890] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/osm/readme.txt"] [unique_id "apK9z4v3RhPI65jTFG7arwAAA5U"]
[Sat Aug 29 05:09:03.026146 2026] [security2:error] [pid 1034096:tid 1034274] [client 40.83.93.50:20805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-content/languages/pk.php"] [unique_id "apK9zy04twRPFuquKD3D4wAAAJw"]
[Sat Aug 29 05:09:03.033782 2026] [security2:error] [pid 1041789:tid 1041937] [client 93.123.109.228:51508] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/v1/.env"] [unique_id "apK9z4v3RhPI65jTFG7asAAAAyQ"]
[Sat Aug 29 05:09:03.038411 2026] [security2:error] [pid 1041789:tid 1042051] [client 93.123.109.228:51494] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/v2/.env"] [unique_id "apK9z4v3RhPI65jTFG7asQAAA5Y"]
[Sat Aug 29 05:09:03.040807 2026] [security2:error] [pid 1041789:tid 1042004] [client 93.123.109.228:51722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/config/module.config.php"] [unique_id "apK9z4v3RhPI65jTFG7asgAAA2c"]
[Sat Aug 29 05:09:03.042784 2026] [security2:error] [pid 1041789:tid 1041977] [client 93.123.109.228:51636] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/v3/.env"] [unique_id "apK9z4v3RhPI65jTFG7aswAAA0w"]
[Sat Aug 29 05:09:03.042951 2026] [security2:error] [pid 1041789:tid 1042024] [client 93.123.109.228:51676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/config/nexmo.php"] [unique_id "apK9z4v3RhPI65jTFG7atAAAA3s"]
[Sat Aug 29 05:09:03.044815 2026] [security2:error] [pid 1034096:tid 1034344] [client 20.197.61.180:2033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/menu.php"] [unique_id "apK9zy04twRPFuquKD3D5gAAAOI"]
[Sat Aug 29 05:09:03.067352 2026] [security2:error] [pid 1034096:tid 1034307] [client 158.23.147.79:50059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK9zy04twRPFuquKD3D6QAAAL0"]
[Sat Aug 29 05:09:03.077344 2026] [security2:error] [pid 1034096:tid 1034255] [client 4.205.62.107:22442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/userfuns.php"] [unique_id "apK9zy04twRPFuquKD3D6wAAAIk"]
[Sat Aug 29 05:09:03.093839 2026] [security2:error] [pid 1041789:tid 1042055] [client 20.100.175.163:1253] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "annetteanddanny.strangeworx.com"] [uri "/1.php7"] [unique_id "apK9z4v3RhPI65jTFG7atgAAA5o"]
[Sat Aug 29 05:09:03.093954 2026] [security2:error] [pid 1041789:tid 1042055] [client 20.100.175.163:1253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/1.php7"] [unique_id "apK9z4v3RhPI65jTFG7atgAAA5o"]
[Sat Aug 29 05:09:03.104330 2026] [security2:error] [pid 1041789:tid 1041969] [client 20.63.219.114:15402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/disagraeed.php"] [unique_id "apK9z4v3RhPI65jTFG7auAAAA0Q"]
[Sat Aug 29 05:09:03.127619 2026] [security2:error] [pid 1034096:tid 1034377] [client 93.123.109.228:51372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/config/stripe.php"] [unique_id "apK9zy04twRPFuquKD3D7gAAAQM"]
[Sat Aug 29 05:09:03.132898 2026] [security2:error] [pid 1034096:tid 1034292] [client 20.48.251.3:14076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/edit.php"] [unique_id "apK9zy04twRPFuquKD3D8AAAAK4"]
[Sat Aug 29 05:09:03.144538 2026] [proxy_http:error] [pid 1018003:tid 1018064] (70007)The timeout specified has expired: [remote 57.141.14.83:32086] AH01102: error reading status line from remote server 127.0.0.1:8443
[Sat Aug 29 05:09:03.144567 2026] [proxy:error] [pid 1018003:tid 1018064] [remote 57.141.14.83:32086] AH00898: Error reading from remote server returned by /shop-cart/
[Sat Aug 29 05:09:03.147714 2026] [security2:error] [pid 1041789:tid 1041987] [client 213.202.253.4:53392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bv-place.com"] [uri "/wp-content/schallfuns.php"] [unique_id "apK9z4v3RhPI65jTFG7avAAAA1Y"], referer: www.google.com
[Sat Aug 29 05:09:03.155426 2026] [security2:error] [pid 1034096:tid 1034352] [client 20.63.81.20:62966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/themes.php"] [unique_id "apK9zy04twRPFuquKD3D9AAAAOo"]
[Sat Aug 29 05:09:03.179404 2026] [proxy_http:error] [pid 1018003:tid 1018232] (70007)The timeout specified has expired: [client 127.0.0.1:14374] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:09:03.179427 2026] [proxy:error] [pid 1018003:tid 1018232] [client 127.0.0.1:14374] AH00898: Error reading from remote server returned by /shop-cart/
[Sat Aug 29 05:09:03.201772 2026] [security2:error] [pid 1034096:tid 1034296] [client 20.220.204.93:62237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/bootstrap.php"] [unique_id "apK9zy04twRPFuquKD3D-wAAALI"]
[Sat Aug 29 05:09:03.207077 2026] [security2:error] [pid 1041789:tid 1042006] [client 158.158.54.35:12994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK9z4v3RhPI65jTFG7axQAAA2k"]
[Sat Aug 29 05:09:03.214658 2026] [security2:error] [pid 1041789:tid 1041991] [client 20.63.219.114:2481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/Js.php"] [unique_id "apK9z4v3RhPI65jTFG7axgAAA1o"]
[Sat Aug 29 05:09:03.252119 2026] [security2:error] [pid 1034096:tid 1034362] [client 20.104.49.130:60954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/worksec.php"] [unique_id "apK9zy04twRPFuquKD3EAQAAAPQ"]
[Sat Aug 29 05:09:03.296709 2026] [security2:error] [pid 1034096:tid 1034294] [client 20.48.251.3:13834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/8.php"] [unique_id "apK9zy04twRPFuquKD3EBgAAALA"]
[Sat Aug 29 05:09:03.300133 2026] [security2:error] [pid 1041789:tid 1041961] [client 93.123.109.228:49158] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/var/www/.env"] [unique_id "apK9z4v3RhPI65jTFG7aygAAAzw"]
[Sat Aug 29 05:09:03.314299 2026] [security2:error] [pid 1034096:tid 1034284] [client 20.196.209.81:11261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/essexec.php"] [unique_id "apK9zy04twRPFuquKD3ECQAAAKY"]
[Sat Aug 29 05:09:03.318427 2026] [security2:error] [pid 1034096:tid 1034356] [client 45.148.10.62:44986] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "mail.xey.pwx.mybluehost.me"] [uri "/wp-config.php.old"] [unique_id "apK9zy04twRPFuquKD3ECwAAAO4"]
[Sat Aug 29 05:09:03.322010 2026] [security2:error] [pid 1041789:tid 1042030] [client 20.63.81.20:62913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/biufile.php"] [unique_id "apK9z4v3RhPI65jTFG7aywAAA4E"]
[Sat Aug 29 05:09:03.342592 2026] [security2:error] [pid 1034096:tid 1034282] [client 93.123.109.228:51534] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/var/www/html/.env"] [unique_id "apK9zy04twRPFuquKD3EDAAAAKQ"]
[Sat Aug 29 05:09:03.359038 2026] [security2:error] [pid 1034096:tid 1034317] [client 40.83.93.50:19573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/config.php"] [unique_id "apK9zy04twRPFuquKD3EEAAAAMc"]
[Sat Aug 29 05:09:03.366252 2026] [security2:error] [pid 1034096:tid 1034267] [client 74.248.24.12:14976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/storage/rip.php"] [unique_id "apK9zy04twRPFuquKD3EEQAAAJU"]
[Sat Aug 29 05:09:03.381889 2026] [security2:error] [pid 1034096:tid 1034307] [client 93.123.109.228:49200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/web/.env"] [unique_id "apK9zy04twRPFuquKD3EEgAAAL0"]
[Sat Aug 29 05:09:03.395769 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.104.49.130:51329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/222.php"] [unique_id "apK9z4v3RhPI65jTFG7a0wAAA2Q"]
[Sat Aug 29 05:09:03.406863 2026] [security2:error] [pid 1034096:tid 1034255] [client 93.123.109.228:51726] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/crm/.env"] [unique_id "apK9zy04twRPFuquKD3EFQAAAIk"]
[Sat Aug 29 05:09:03.406869 2026] [security2:error] [pid 1034096:tid 1034373] [client 20.196.209.81:18408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-admin/wp-cron.php"] [unique_id "apK9zy04twRPFuquKD3EFgAAAP8"]
[Sat Aug 29 05:09:03.417404 2026] [security2:error] [pid 1041789:tid 1042005] [client 93.123.109.228:51480] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/cron/.env"] [unique_id "apK9z4v3RhPI65jTFG7a1QAAA2g"]
[Sat Aug 29 05:09:03.428960 2026] [security2:error] [pid 1041789:tid 1042021] [client 93.123.109.228:51744] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/current/.env"] [unique_id "apK9z4v3RhPI65jTFG7a1gAAA3g"]
[Sat Aug 29 05:09:03.432610 2026] [security2:error] [pid 1034096:tid 1034321] [client 20.48.251.3:14042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/thui.php"] [unique_id "apK9zy04twRPFuquKD3EGgAAAMs"]
[Sat Aug 29 05:09:03.451209 2026] [security2:error] [pid 1034096:tid 1034377] [client 20.220.204.93:64138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/export.php"] [unique_id "apK9zy04twRPFuquKD3EHgAAAQM"]
[Sat Aug 29 05:09:03.451810 2026] [security2:error] [pid 1034096:tid 1034292] [client 20.63.81.20:62963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/coffexium.php"] [unique_id "apK9zy04twRPFuquKD3EHwAAAK4"]
[Sat Aug 29 05:09:03.454082 2026] [security2:error] [pid 1034096:tid 1034358] [client 40.83.93.50:17249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/22.php"] [unique_id "apK9zy04twRPFuquKD3EIAAAAPA"]
[Sat Aug 29 05:09:03.463133 2026] [security2:error] [pid 1034096:tid 1034335] [client 4.205.62.107:53344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/rum.or.php"] [unique_id "apK9zy04twRPFuquKD3EIgAAANk"]
[Sat Aug 29 05:09:03.477747 2026] [security2:error] [pid 1034096:tid 1034293] [client 4.232.148.111:18875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/abcd.php"] [unique_id "apK9zy04twRPFuquKD3EJAAAAK8"]
[Sat Aug 29 05:09:03.487922 2026] [security2:error] [pid 1034096:tid 1034300] [client 93.123.109.228:45316] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/demo/.env"] [unique_id "apK9zy04twRPFuquKD3EJwAAALY"]
[Sat Aug 29 05:09:03.488225 2026] [security2:error] [pid 1041789:tid 1041984] [client 20.240.128.207:22134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/av.php"] [unique_id "apK9z4v3RhPI65jTFG7a2wAAA1M"]
[Sat Aug 29 05:09:03.494597 2026] [security2:error] [pid 1041789:tid 1042018] [client 40.83.93.50:12978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinmanufacturing.com"] [uri "/wp-content/languages/plugins/about.php"] [unique_id "apK9z4v3RhPI65jTFG7a3AAAA3U"]
[Sat Aug 29 05:09:03.511201 2026] [security2:error] [pid 1034096:tid 1034272] [client 93.123.109.228:45326] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/dev/.env"] [unique_id "apK9zy04twRPFuquKD3EKQAAAJo"]
[Sat Aug 29 05:09:03.520135 2026] [security2:error] [pid 1034096:tid 1034253] [client 93.123.109.228:51680] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/develop/.env"] [unique_id "apK9zy04twRPFuquKD3ELAAAAIc"]
[Sat Aug 29 05:09:03.524687 2026] [security2:error] [pid 1034096:tid 1034260] [client 45.148.10.62:44994] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "mail.xfe.fme.mybluehost.me"] [uri "/wp-config.php.old"] [unique_id "apK9zy04twRPFuquKD3ELQAAAI4"]
[Sat Aug 29 05:09:03.525390 2026] [security2:error] [pid 1034096:tid 1034309] [client 20.63.219.114:2478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/add_actualites.php"] [unique_id "apK9zy04twRPFuquKD3ELgAAAL8"]
[Sat Aug 29 05:09:03.550631 2026] [security2:error] [pid 1034096:tid 1034329] [client 93.123.109.228:51574] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/website/.env"] [unique_id "apK9zy04twRPFuquKD3EMQAAANM"]
[Sat Aug 29 05:09:03.552419 2026] [security2:error] [pid 1041789:tid 1041986] [client 93.123.109.228:51508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/wp-config.php"] [unique_id "apK9z4v3RhPI65jTFG7a3wAAA1U"]
[Sat Aug 29 05:09:03.554238 2026] [security2:error] [pid 1034096:tid 1034339] [client 93.123.109.228:49294] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/wp-config.php.bak"] [unique_id "apK9zy04twRPFuquKD3EMwAAAN0"]
[Sat Aug 29 05:09:03.555069 2026] [security2:error] [pid 1034096:tid 1034265] [client 93.123.109.228:51726] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/developer/.env"] [unique_id "apK9zy04twRPFuquKD3EMgAAAJM"]
[Sat Aug 29 05:09:03.559504 2026] [security2:error] [pid 1034096:tid 1034297] [client 93.123.109.228:51580] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/development/.env"] [unique_id "apK9zy04twRPFuquKD3ENAAAALM"]
[Sat Aug 29 05:09:03.572557 2026] [security2:error] [pid 1034096:tid 1034294] [client 20.48.251.3:14317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/file21.php"] [unique_id "apK9zy04twRPFuquKD3ENQAAALA"]
[Sat Aug 29 05:09:03.582472 2026] [security2:error] [pid 1041789:tid 1042043] [client 93.123.109.228:51636] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/wp-config.php.new"] [unique_id "apK9z4v3RhPI65jTFG7a4QAAA44"]
[Sat Aug 29 05:09:03.588277 2026] [security2:error] [pid 1034096:tid 1034316] [client 20.197.61.180:15009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/fox.php"] [unique_id "apK9zy04twRPFuquKD3ENwAAAMY"]
[Sat Aug 29 05:09:03.594117 2026] [security2:error] [pid 1034096:tid 1034285] [client 20.104.49.130:57514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/ms-edit.php"] [unique_id "apK9zy04twRPFuquKD3EOQAAAKc"]
[Sat Aug 29 05:09:03.600695 2026] [security2:error] [pid 1034096:tid 1034262] [client 93.123.109.228:51662] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/wp-config.php.old"] [unique_id "apK9zy04twRPFuquKD3EOwAAAJA"]
[Sat Aug 29 05:09:03.603606 2026] [security2:error] [pid 1034096:tid 1034320] [client 20.63.81.20:62949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/coffee.php"] [unique_id "apK9zy04twRPFuquKD3EPAAAAMo"]
[Sat Aug 29 05:09:03.613930 2026] [security2:error] [pid 1034096:tid 1034283] [client 158.23.147.79:11307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK9zy04twRPFuquKD3EPgAAAKU"]
[Sat Aug 29 05:09:03.617241 2026] [security2:error] [pid 1041789:tid 1042009] [client 93.123.109.228:49158] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "cpcontacts.gavirestaurant.com"] [uri "/___proxy_subdomain_cpcontacts/wp-content/mysql.sql"] [unique_id "apK9z4v3RhPI65jTFG7a5AAAA2w"]
[Sat Aug 29 05:09:03.627836 2026] [security2:error] [pid 1034096:tid 1034307] [client 20.220.204.93:62225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/gk.php"] [unique_id "apK9zy04twRPFuquKD3EQQAAAL0"]
[Sat Aug 29 05:09:03.646561 2026] [security2:error] [pid 1034096:tid 1034319] [client 20.197.61.180:1080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/about.php525"] [unique_id "apK9zy04twRPFuquKD3ERQAAAMk"]
[Sat Aug 29 05:09:03.647864 2026] [security2:error] [pid 1034096:tid 1034376] [client 20.100.175.163:20990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/disagraeosc.php"] [unique_id "apK9zy04twRPFuquKD3ERgAAAQI"]
[Sat Aug 29 05:09:03.650874 2026] [security2:error] [pid 1034096:tid 1034318] [client 20.63.219.114:19853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/access.php"] [unique_id "apK9zy04twRPFuquKD3ERwAAAMg"]
[Sat Aug 29 05:09:03.729545 2026] [security2:error] [pid 1034096:tid 1034300] [client 20.48.251.3:14140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/server-info.php"] [unique_id "apK9zy04twRPFuquKD3EUQAAALY"]
[Sat Aug 29 05:09:03.736147 2026] [security2:error] [pid 1034096:tid 1034344] [client 4.205.62.107:6497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/log.php"] [unique_id "apK9zy04twRPFuquKD3EUgAAAOI"]
[Sat Aug 29 05:09:03.751279 2026] [security2:error] [pid 1034096:tid 1034271] [client 216.73.216.75:27958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 75.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thesmartpm.sortthru.com"] [uri "/apps/wp-content/plugins/wp-photo-album-plus/wppa-ajax-front.php"] [unique_id "apK9zy04twRPFuquKD3EUwAAAJk"]
[Sat Aug 29 05:09:03.754596 2026] [security2:error] [pid 1034096:tid 1034325] [client 4.205.62.107:25003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/packed.php"] [unique_id "apK9zy04twRPFuquKD3EVQAAAM8"]
[Sat Aug 29 05:09:03.758315 2026] [security2:error] [pid 1034096:tid 1034272] [client 20.63.81.20:62973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/classwithtostring.php"] [unique_id "apK9zy04twRPFuquKD3EVgAAAJo"]
[Sat Aug 29 05:09:03.764778 2026] [security2:error] [pid 1034096:tid 1034269] [client 20.220.204.93:62300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/logs1.php"] [unique_id "apK9zy04twRPFuquKD3EVwAAAJc"]
[Sat Aug 29 05:09:03.768321 2026] [security2:error] [pid 1034096:tid 1034286] [client 20.196.209.81:1443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/hello.php"] [unique_id "apK9zy04twRPFuquKD3EWAAAAKg"]
[Sat Aug 29 05:09:03.768961 2026] [security2:error] [pid 1041789:tid 1042031] [client 93.123.109.228:51744] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/erp/.env"] [unique_id "apK9z4v3RhPI65jTFG7a6gAAA4I"]
[Sat Aug 29 05:09:03.770777 2026] [security2:error] [pid 1034096:tid 1034253] [client 93.123.109.228:45372] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/etc/boto.cfg"] [unique_id "apK9zy04twRPFuquKD3EWQAAAIc"]
[Sat Aug 29 05:09:03.781898 2026] [security2:error] [pid 1041789:tid 1041980] [client 93.123.109.228:51480] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/fe/.env"] [unique_id "apK9z4v3RhPI65jTFG7a6wAAA08"]
[Sat Aug 29 05:09:03.782783 2026] [security2:error] [pid 1034096:tid 1034353] [client 93.123.109.228:51714] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/etc/apache2/apache2.conf"] [unique_id "apK9zy04twRPFuquKD3EXAAAAOs"]
[Sat Aug 29 05:09:03.787664 2026] [security2:error] [pid 1034096:tid 1034347] [client 45.148.10.62:45002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xey.pwx.mybluehost.me"] [uri "/config.php"] [unique_id "apK9zy04twRPFuquKD3EXgAAAOU"]
[Sat Aug 29 05:09:03.788522 2026] [security2:error] [pid 1034096:tid 1034375] [client 4.205.62.107:62938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/xqq.php"] [unique_id "apK9zy04twRPFuquKD3EXwAAAQE"]
[Sat Aug 29 05:09:03.792918 2026] [security2:error] [pid 1034096:tid 1034370] [client 20.151.200.44:63270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/ah24.php"] [unique_id "apK9zy04twRPFuquKD3EYAAAAPw"]
[Sat Aug 29 05:09:03.805021 2026] [security2:error] [pid 1034096:tid 1034377] [client 20.196.209.81:21053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-admin/wp-links-opml.php"] [unique_id "apK9zy04twRPFuquKD3EYgAAAQM"]
[Sat Aug 29 05:09:03.813270 2026] [security2:error] [pid 1034096:tid 1034340] [client 91.92.47.191:53286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.giantgardening.com"] [uri "/configuration.php"] [unique_id "apK9zy04twRPFuquKD3EYwAAAN4"]
[Sat Aug 29 05:09:03.826660 2026] [security2:error] [pid 1034096:tid 1034265] [client 158.158.54.35:13053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-load.php"] [unique_id "apK9zy04twRPFuquKD3EZAAAAJM"]
[Sat Aug 29 05:09:03.831273 2026] [security2:error] [pid 1034096:tid 1034368] [client 20.197.61.180:1895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/alfa.php"] [unique_id "apK9zy04twRPFuquKD3EZQAAAPo"]
[Sat Aug 29 05:09:03.837644 2026] [security2:error] [pid 1034096:tid 1034259] [client 40.83.93.50:4079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/22.php"] [unique_id "apK9zy04twRPFuquKD3EZgAAAI0"]
[Sat Aug 29 05:09:03.862701 2026] [security2:error] [pid 1034096:tid 1034323] [client 93.123.109.228:45316] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/front/.env"] [unique_id "apK9zy04twRPFuquKD3EZwAAAM0"]
[Sat Aug 29 05:09:03.872485 2026] [security2:error] [pid 1034096:tid 1034285] [client 93.123.109.228:45326] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/frontend/.env"] [unique_id "apK9zy04twRPFuquKD3EagAAAKc"]
[Sat Aug 29 05:09:03.885448 2026] [security2:error] [pid 1034096:tid 1034374] [client 20.48.251.3:14085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/gk.php"] [unique_id "apK9zy04twRPFuquKD3EbgAAAQA"]
[Sat Aug 29 05:09:03.885638 2026] [security2:error] [pid 1034096:tid 1034293] [client 74.248.24.12:37869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/zoom1.php"] [unique_id "apK9zy04twRPFuquKD3EbQAAAK8"]
[Sat Aug 29 05:09:03.886963 2026] [security2:error] [pid 1034096:tid 1034262] [client 158.23.147.79:17698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK9zy04twRPFuquKD3EbwAAAJA"]
[Sat Aug 29 05:09:03.889402 2026] [security2:error] [pid 1041789:tid 1042011] [client 4.205.62.107:51456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/ms-edit.php"] [unique_id "apK9z4v3RhPI65jTFG7a7QAAA24"]
[Sat Aug 29 05:09:03.908851 2026] [security2:error] [pid 1034096:tid 1034312] [client 20.63.219.114:2103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/alfanew.php7"] [unique_id "apK9zy04twRPFuquKD3EcAAAAMI"]
[Sat Aug 29 05:09:03.912385 2026] [security2:error] [pid 1034096:tid 1034312] [client 20.63.81.20:62786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/wp-ws68.php"] [unique_id "apK9zy04twRPFuquKD3EcQAAAMI"]
[Sat Aug 29 05:09:03.918637 2026] [security2:error] [pid 1034096:tid 1034304] [client 103.162.125.59:61676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.125.162.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK9zy04twRPFuquKD3EcwAAALo"]
[Sat Aug 29 05:09:03.918750 2026] [security2:error] [pid 1034096:tid 1034304] [client 103.162.125.59:61676] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK9zy04twRPFuquKD3EcwAAALo"]
[Sat Aug 29 05:09:03.928081 2026] [security2:error] [pid 1034096:tid 1034269] [client 40.83.93.50:48057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/bak.phps"] [unique_id "apK9zy04twRPFuquKD3EdAAAAJc"]
[Sat Aug 29 05:09:03.928446 2026] [security2:error] [pid 1041789:tid 1041943] [client 20.104.49.130:57487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/Jcrop.php"] [unique_id "apK9z4v3RhPI65jTFG7a7gAAAyo"]
[Sat Aug 29 05:09:03.944016 2026] [security2:error] [pid 1034096:tid 1034317] [client 93.123.109.228:51688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/info.php"] [unique_id "apK9zy04twRPFuquKD3EeAAAAMc"]
[Sat Aug 29 05:09:03.944655 2026] [security2:error] [pid 1041789:tid 1041933] [client 93.123.109.228:51744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/infos.php"] [unique_id "apK9z4v3RhPI65jTFG7a8QAAAyA"]
[Sat Aug 29 05:09:03.945332 2026] [security2:error] [pid 1034096:tid 1034319] [client 93.123.109.228:51714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/infophp.php"] [unique_id "apK9zy04twRPFuquKD3EeQAAAMk"]
[Sat Aug 29 05:09:03.955789 2026] [security2:error] [pid 1034096:tid 1034308] [client 20.220.204.93:64173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/inege.php"] [unique_id "apK9zy04twRPFuquKD3EegAAAL4"]
[Sat Aug 29 05:09:03.959680 2026] [security2:error] [pid 1034096:tid 1034322] [client 4.232.148.111:20441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-access.php"] [unique_id "apK9zy04twRPFuquKD3EewAAAMw"]
[Sat Aug 29 05:09:03.988671 2026] [security2:error] [pid 1041789:tid 1041956] [client 20.240.128.207:21044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/file.php"] [unique_id "apK9z4v3RhPI65jTFG7a8gAAAzc"]
[Sat Aug 29 05:09:03.993497 2026] [security2:error] [pid 1034096:tid 1034196] [remote 183.83.223.4:53188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.223.83.183.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "indemeca.com.do"] [uri "/wp-login.php"] [unique_id "apK9zy04twRPFuquKD3EfgAA0ko"]
[Sat Aug 29 05:09:03.997343 2026] [security2:error] [pid 1034096:tid 1034292] [client 93.123.109.228:51716] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/laravel/.env"] [unique_id "apK9zy04twRPFuquKD3EfwAAAK4"]
[Sat Aug 29 05:09:04.002514 2026] [security2:error] [pid 1041789:tid 1041936] [client 93.123.109.228:51704] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/lms/.env"] [unique_id "apK9z4v3RhPI65jTFG7a8wAAAyM"]
[Sat Aug 29 05:09:04.002709 2026] [security2:error] [pid 1034096:tid 1034335] [client 4.205.62.107:53277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/asdf.php"] [unique_id "apK90C04twRPFuquKD3EgAAAANk"]
[Sat Aug 29 05:09:04.018974 2026] [security2:error] [pid 1034096:tid 1034274] [client 45.148.10.62:44978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xfs.rxf.mybluehost.me"] [uri "/wp-config.php"] [unique_id "apK90C04twRPFuquKD3EggAAAJw"]
[Sat Aug 29 05:09:04.021937 2026] [security2:error] [pid 1034096:tid 1034267] [client 93.123.109.228:45326] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/local/.env"] [unique_id "apK90C04twRPFuquKD3EgwAAAJU"]
[Sat Aug 29 05:09:04.056290 2026] [security2:error] [pid 1041789:tid 1042057] [client 20.63.81.20:62975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/mgrr.php"] [unique_id "apK90Iv3RhPI65jTFG7a9QAAA5w"]
[Sat Aug 29 05:09:04.079129 2026] [security2:error] [pid 1034096:tid 1034304] [client 45.148.10.62:48512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xfe.fme.mybluehost.me"] [uri "/config.php"] [unique_id "apK90C04twRPFuquKD3EhgAAALo"]
[Sat Aug 29 05:09:04.085708 2026] [security2:error] [pid 1034096:tid 1034260] [client 20.48.251.3:14029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/god.php"] [unique_id "apK90C04twRPFuquKD3EhwAAAI4"]
[Sat Aug 29 05:09:04.088008 2026] [security2:error] [pid 1041789:tid 1042037] [client 20.63.219.114:19900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/classsmtps.php"] [unique_id "apK90Iv3RhPI65jTFG7a9gAAA4g"]
[Sat Aug 29 05:09:04.095889 2026] [security2:error] [pid 1034096:tid 1034353] [client 20.220.204.93:62309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/wp-link10.php"] [unique_id "apK90C04twRPFuquKD3EiAAAAOs"]
[Sat Aug 29 05:09:04.121822 2026] [security2:error] [pid 1034096:tid 1034370] [client 93.123.109.228:45372] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/market/.env"] [unique_id "apK90C04twRPFuquKD3EigAAAPw"]
[Sat Aug 29 05:09:04.126757 2026] [security2:error] [pid 1041789:tid 1042050] [client 93.123.109.228:51480] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/marketing/.env"] [unique_id "apK90Iv3RhPI65jTFG7a-gAAA5U"]
[Sat Aug 29 05:09:04.130440 2026] [security2:error] [pid 1034096:tid 1034301] [client 93.123.109.228:51680] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/media/.env"] [unique_id "apK90C04twRPFuquKD3EiwAAALc"]
[Sat Aug 29 05:09:04.142109 2026] [security2:error] [pid 1041789:tid 1041993] [client 20.100.175.163:29095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-logs.php"] [unique_id "apK90Iv3RhPI65jTFG7a-wAAA1w"]
[Sat Aug 29 05:09:04.148230 2026] [security2:error] [pid 1041789:tid 1041952] [client 158.23.147.79:6063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/lv.php"] [unique_id "apK90Iv3RhPI65jTFG7a_QAAAzM"]
[Sat Aug 29 05:09:04.148478 2026] [security2:error] [pid 1034096:tid 1034339] [client 93.123.109.228:51716] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/new/.env"] [unique_id "apK90C04twRPFuquKD3EkAAAAN0"]
[Sat Aug 29 05:09:04.150877 2026] [security2:error] [pid 1041789:tid 1041937] [client 93.123.109.228:51704] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/node-api/.env"] [unique_id "apK90Iv3RhPI65jTFG7a_gAAAyQ"]
[Sat Aug 29 05:09:04.171728 2026] [security2:error] [pid 1034096:tid 1034368] [client 93.123.109.228:45326] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/node/.env"] [unique_id "apK90C04twRPFuquKD3EkQAAAPo"]
[Sat Aug 29 05:09:04.173156 2026] [security2:error] [pid 1034096:tid 1034315] [client 158.23.147.79:50162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK90C04twRPFuquKD3EkgAAAMU"]
[Sat Aug 29 05:09:04.190114 2026] [security2:error] [pid 1034096:tid 1034362] [client 93.123.109.228:45316] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/node/api/.env"] [unique_id "apK90C04twRPFuquKD3ElAAAAPQ"]
[Sat Aug 29 05:09:04.191081 2026] [lsapi:warn] [pid 1034096:tid 1034363] [client 95.182.84.181:39850] [host cheapinsurance.midayins.com] Backend log: PHP Warning:  PHP Request Startup: Invalid date.timezone value 'America/New York', using 'America/Boise' instead in Unknown on line 0\n
[Sat Aug 29 05:09:04.193150 2026] [security2:error] [pid 1041789:tid 1041932] [client 20.196.209.81:1438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/fi2.php"] [unique_id "apK90Iv3RhPI65jTFG7a_wAAAx8"]
[Sat Aug 29 05:09:04.193896 2026] [security2:error] [pid 1034096:tid 1034284] [client 20.104.49.130:60738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/new.php"] [unique_id "apK90C04twRPFuquKD3ElQAAAKY"]
[Sat Aug 29 05:09:04.195138 2026] [security2:error] [pid 1034096:tid 1034316] [client 20.63.81.20:62948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/55.php"] [unique_id "apK90C04twRPFuquKD3ElgAAAMY"]
[Sat Aug 29 05:09:04.199109 2026] [security2:error] [pid 1034096:tid 1034372] [client 93.123.109.228:51464] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/node/backend/.env"] [unique_id "apK90C04twRPFuquKD3ElwAAAP4"]
[Sat Aug 29 05:09:04.205044 2026] [security2:error] [pid 1034096:tid 1034374] [client 45.148.10.62:44988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xga.zdx.mybluehost.me"] [uri "/wp-config.php"] [unique_id "apK90C04twRPFuquKD3EmAAAAQA"]
[Sat Aug 29 05:09:04.207148 2026] [security2:error] [pid 1034096:tid 1034313] [client 20.196.209.81:23960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-admin/wp-load.php"] [unique_id "apK90C04twRPFuquKD3EmQAAAMM"]
[Sat Aug 29 05:09:04.212865 2026] [security2:error] [pid 1034096:tid 1034293] [client 93.123.109.228:45364] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/nodeapi/.env"] [unique_id "apK90C04twRPFuquKD3EmgAAAK8"]
[Sat Aug 29 05:09:04.217219 2026] [security2:error] [pid 1041789:tid 1041969] [client 4.205.62.107:21933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/mamzi.php"] [unique_id "apK90Iv3RhPI65jTFG7bAAAAA0Q"]
[Sat Aug 29 05:09:04.235102 2026] [security2:error] [pid 1034096:tid 1034312] [client 93.123.109.228:45298] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/nodeweb/.env"] [unique_id "apK90C04twRPFuquKD3EmwAAAMI"]
[Sat Aug 29 05:09:04.241461 2026] [security2:error] [pid 1034096:tid 1034282] [client 20.220.204.93:61822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/ww.php"] [unique_id "apK90C04twRPFuquKD3EnAAAAKQ"]
[Sat Aug 29 05:09:04.266475 2026] [security2:error] [pid 1034096:tid 1034309] [client 20.63.219.114:10173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/xmlrpc.php0"] [unique_id "apK90C04twRPFuquKD3EngAAAL8"]
[Sat Aug 29 05:09:04.302005 2026] [security2:error] [pid 1041789:tid 1042020] [client 93.123.109.228:51480] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/old/.env"] [unique_id "apK90Iv3RhPI65jTFG7bBAAAA3c"]
[Sat Aug 29 05:09:04.308856 2026] [security2:error] [pid 1034096:tid 1034359] [client 20.104.49.130:58076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ericfenniman.com"] [uri "/edit.php"] [unique_id "apK90C04twRPFuquKD3EoQAAAPE"]
[Sat Aug 29 05:09:04.321414 2026] [security2:error] [pid 1034096:tid 1034314] [client 20.197.61.180:15027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/disagraeosc.php"] [unique_id "apK90C04twRPFuquKD3EpAAAAMQ"]
[Sat Aug 29 05:09:04.333471 2026] [security2:error] [pid 1034096:tid 1034328] [client 93.123.109.228:51680] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/opt/.env"] [unique_id "apK90C04twRPFuquKD3EpgAAANI"]
[Sat Aug 29 05:09:04.336980 2026] [security2:error] [pid 1034096:tid 1034296] [client 20.63.81.20:62927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/yj09.php"] [unique_id "apK90C04twRPFuquKD3EpwAAALI"]
[Sat Aug 29 05:09:04.351457 2026] [security2:error] [pid 1034096:tid 1034285] [client 45.148.10.62:48522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xey.pwx.mybluehost.me"] [uri "/config.php.bak"] [unique_id "apK90C04twRPFuquKD3EqAAAAKc"]
[Sat Aug 29 05:09:04.374971 2026] [security2:error] [pid 1034096:tid 1034329] [client 20.197.61.180:2035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/spip.php"] [unique_id "apK90C04twRPFuquKD3ErAAAANM"]
[Sat Aug 29 05:09:04.388337 2026] [security2:error] [pid 1034096:tid 1034358] [client 20.220.204.93:62309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/w1px.php"] [unique_id "apK90C04twRPFuquKD3EsAAAAPA"]
[Sat Aug 29 05:09:04.391227 2026] [security2:error] [pid 1034096:tid 1034262] [client 74.248.24.12:29820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/txets.php"] [unique_id "apK90C04twRPFuquKD3EsgAAAJA"]
[Sat Aug 29 05:09:04.397934 2026] [security2:error] [pid 1034096:tid 1034283] [client 40.83.93.50:13218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/bak.phps"] [unique_id "apK90C04twRPFuquKD3EswAAAKU"]
[Sat Aug 29 05:09:04.402323 2026] [security2:error] [pid 1041789:tid 1041958] [client 40.83.93.50:17225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/install.php"] [unique_id "apK90Iv3RhPI65jTFG7bCAAAAzk"]
[Sat Aug 29 05:09:04.417805 2026] [security2:error] [pid 1034096:tid 1034253] [client 20.151.200.44:64450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/ztv.php"] [unique_id "apK90C04twRPFuquKD3EtQAAAIc"]
[Sat Aug 29 05:09:04.423497 2026] [security2:error] [pid 1034096:tid 1034275] [client 4.232.148.111:35593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-content/uploads/min.php"] [unique_id "apK90C04twRPFuquKD3EtwAAAJ0"]
[Sat Aug 29 05:09:04.438972 2026] [security2:error] [pid 1034096:tid 1034375] [client 20.48.251.3:13874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/sdsa.php"] [unique_id "apK90C04twRPFuquKD3EuAAAAQE"]
[Sat Aug 29 05:09:04.454280 2026] [security2:error] [pid 1041789:tid 1042003] [client 158.158.54.35:31617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/a.php"] [unique_id "apK90Iv3RhPI65jTFG7bCwAAA2Y"]
[Sat Aug 29 05:09:04.479391 2026] [security2:error] [pid 1041789:tid 1042017] [client 20.63.81.20:62945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/scxy.php"] [unique_id "apK90Iv3RhPI65jTFG7bDQAAA3Q"]
[Sat Aug 29 05:09:04.490349 2026] [security2:error] [pid 1034096:tid 1034367] [client 20.63.219.114:19890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/contentloader1.php"] [unique_id "apK90C04twRPFuquKD3EuwAAAPk"]
[Sat Aug 29 05:09:04.504740 2026] [security2:error] [pid 1034096:tid 1034351] [client 20.240.128.207:27187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK90C04twRPFuquKD3EvAAAAOk"]
[Sat Aug 29 05:09:04.510481 2026] [security2:error] [pid 1034096:tid 1034371] [client 93.123.109.228:51580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/php-info.php"] [unique_id "apK90C04twRPFuquKD3EwAAAAP0"]
[Sat Aug 29 05:09:04.513179 2026] [security2:error] [pid 1034096:tid 1034373] [client 45.148.10.62:48528] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "mail.xfs.rxf.mybluehost.me"] [uri "/wp-config.php.old"] [unique_id "apK90C04twRPFuquKD3EwQAAAP8"]
[Sat Aug 29 05:09:04.522279 2026] [security2:error] [pid 1041789:tid 1041981] [client 93.123.109.228:51344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/php.php"] [unique_id "apK90Iv3RhPI65jTFG7bDwAAA1A"]
[Sat Aug 29 05:09:04.539166 2026] [security2:error] [pid 1041789:tid 1041954] [client 20.220.204.93:62283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/to.php"] [unique_id "apK90Iv3RhPI65jTFG7bEAAAAzU"]
[Sat Aug 29 05:09:04.547231 2026] [security2:error] [pid 1034096:tid 1034294] [client 93.123.109.228:51464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/php_info.php"] [unique_id "apK90C04twRPFuquKD3EwgAAALA"]
[Sat Aug 29 05:09:04.577281 2026] [security2:error] [pid 1034096:tid 1034313] [client 93.123.109.228:45364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/phpinfo.php"] [unique_id "apK90C04twRPFuquKD3ExAAAAMM"]
[Sat Aug 29 05:09:04.579714 2026] [security2:error] [pid 1034096:tid 1034293] [client 20.48.251.3:13871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/sale.php"] [unique_id "apK90C04twRPFuquKD3ExQAAAK8"]
[Sat Aug 29 05:09:04.591727 2026] [security2:error] [pid 1034096:tid 1034339] [client 20.196.209.81:1465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/1p.php"] [unique_id "apK90C04twRPFuquKD3ExgAAAN0"]
[Sat Aug 29 05:09:04.601646 2026] [security2:error] [pid 1041789:tid 1041944] [client 20.196.209.81:18689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-admin/wp-mail.php"] [unique_id "apK90Iv3RhPI65jTFG7bEQAAAys"]
[Sat Aug 29 05:09:04.604155 2026] [security2:error] [pid 1041789:tid 1042001] [client 93.123.109.228:45348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/portal/.env"] [unique_id "apK90Iv3RhPI65jTFG7bEgAAA2Q"]
[Sat Aug 29 05:09:04.604281 2026] [security2:error] [pid 1041789:tid 1041942] [client 4.205.62.107:8704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/loxi-o.php"] [unique_id "apK90Iv3RhPI65jTFG7bEwAAAyk"]
[Sat Aug 29 05:09:04.607482 2026] [security2:error] [pid 1034096:tid 1034342] [client 45.148.10.62:48542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xfe.fme.mybluehost.me"] [uri "/config.php.bak"] [unique_id "apK90C04twRPFuquKD3ExwAAAOA"]
[Sat Aug 29 05:09:04.610472 2026] [security2:error] [pid 1034096:tid 1034302] [client 20.63.81.20:62951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/ws13.php"] [unique_id "apK90C04twRPFuquKD3EyAAAALg"]
[Sat Aug 29 05:09:04.619972 2026] [security2:error] [pid 1034096:tid 1034308] [client 20.197.61.180:1865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/feed-rss2-queue.php"] [unique_id "apK90C04twRPFuquKD3EygAAAL4"]
[Sat Aug 29 05:09:04.622456 2026] [security2:error] [pid 1034096:tid 1034269] [client 20.151.200.44:63235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/kure.php"] [unique_id "apK90C04twRPFuquKD3EywAAAJc"]
[Sat Aug 29 05:09:04.637182 2026] [security2:error] [pid 1041789:tid 1042015] [client 20.100.175.163:20975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-admin/css/about.php"] [unique_id "apK90Iv3RhPI65jTFG7bFgAAA3I"]
[Sat Aug 29 05:09:04.638252 2026] [security2:error] [pid 1041789:tid 1042005] [client 93.123.109.228:51704] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/product/.env"] [unique_id "apK90Iv3RhPI65jTFG7bFQAAA2g"]
[Sat Aug 29 05:09:04.645744 2026] [security2:error] [pid 1034096:tid 1034359] [client 93.123.109.228:45372] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/prod/.env"] [unique_id "apK90C04twRPFuquKD3EzgAAAPE"]
[Sat Aug 29 05:09:04.648588 2026] [security2:error] [pid 1041789:tid 1041963] [client 20.63.219.114:15365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/content.php"] [unique_id "apK90Iv3RhPI65jTFG7bGAAAAz4"]
[Sat Aug 29 05:09:04.656462 2026] [security2:error] [pid 1034096:tid 1034318] [client 93.123.109.228:45326] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/production/.env"] [unique_id "apK90C04twRPFuquKD3E0AAAAMg"]
[Sat Aug 29 05:09:04.689309 2026] [security2:error] [pid 1034096:tid 1034292] [client 93.123.109.228:51382] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/project/.env"] [unique_id "apK90C04twRPFuquKD3E0wAAAK4"]
[Sat Aug 29 05:09:04.699521 2026] [security2:error] [pid 1041789:tid 1042049] [client 45.148.10.62:48552] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "mail.xga.zdx.mybluehost.me"] [uri "/wp-config.php.old"] [unique_id "apK90Iv3RhPI65jTFG7bGgAAA5Q"]
[Sat Aug 29 05:09:04.712882 2026] [security2:error] [pid 1034096:tid 1034324] [client 20.48.251.3:14279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/wp-class.php"] [unique_id "apK90C04twRPFuquKD3E2AAAAM4"]
[Sat Aug 29 05:09:04.713734 2026] [security2:error] [pid 1034096:tid 1034300] [client 93.123.109.228:45332] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/public-api/.env"] [unique_id "apK90C04twRPFuquKD3E1wAAALY"]
[Sat Aug 29 05:09:04.724904 2026] [security2:error] [pid 1041789:tid 1041966] [client 93.123.109.228:51594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/public/phpinfo.php"] [unique_id "apK90Iv3RhPI65jTFG7bGwAAA0E"]
[Sat Aug 29 05:09:04.726471 2026] [security2:error] [pid 1034096:tid 1034344] [client 93.123.109.228:45304] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/public/.env"] [unique_id "apK90C04twRPFuquKD3E2gAAAOI"]
[Sat Aug 29 05:09:04.730066 2026] [security2:error] [pid 1034096:tid 1034352] [client 158.23.147.79:11362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/classwithtostring.php"] [unique_id "apK90C04twRPFuquKD3E2wAAAOo"]
[Sat Aug 29 05:09:04.747936 2026] [security2:error] [pid 1034096:tid 1034325] [client 20.220.204.93:61779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/thui.php"] [unique_id "apK90C04twRPFuquKD3E3AAAAM8"]
[Sat Aug 29 05:09:04.763903 2026] [security2:error] [pid 1034096:tid 1034277] [client 20.63.81.20:62936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/btx25.php"] [unique_id "apK90C04twRPFuquKD3E3gAAAJ8"]
[Sat Aug 29 05:09:04.768347 2026] [security2:error] [pid 1041789:tid 1041938] [client 93.123.109.228:45348] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/public_html/.env"] [unique_id "apK90Iv3RhPI65jTFG7bHQAAAyU"]
[Sat Aug 29 05:09:04.788228 2026] [security2:error] [pid 1041789:tid 1041986] [client 93.123.109.228:51704] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/qa/.env"] [unique_id "apK90Iv3RhPI65jTFG7bHgAAA1U"]
[Sat Aug 29 05:09:04.813993 2026] [security2:error] [pid 1034096:tid 1034375] [client 91.92.47.191:53302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.giantgardening.com"] [uri "/settings.php"] [unique_id "apK90C04twRPFuquKD3E5AAAAQE"]
[Sat Aug 29 05:09:04.828165 2026] [security2:error] [pid 1041789:tid 1041970] [client 20.104.49.130:54867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/tool.php"] [unique_id "apK90Iv3RhPI65jTFG7bIQAAA0U"]
[Sat Aug 29 05:09:04.833118 2026] [security2:error] [pid 1034096:tid 1034197] [remote 183.83.223.4:53188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.223.83.183.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "indemeca.com.do"] [uri "/wp-login.php"] [unique_id "apK90C04twRPFuquKD3E5QAAjks"], referer: https://indemeca.com.do/wp-login.php
[Sat Aug 29 05:09:04.844980 2026] [security2:error] [pid 1034096:tid 1034263] [client 20.48.251.3:13881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/database.php"] [unique_id "apK90C04twRPFuquKD3E5gAAAJE"]
[Sat Aug 29 05:09:04.862632 2026] [security2:error] [pid 1034096:tid 1034346] [client 20.151.200.44:62537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/cafe.php"] [unique_id "apK90C04twRPFuquKD3E6wAAAOQ"]
[Sat Aug 29 05:09:04.875760 2026] [security2:error] [pid 1041789:tid 1041931] [client 4.205.62.107:6466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/ebahvhhh.php"] [unique_id "apK90Iv3RhPI65jTFG7bIgAAAx4"]
[Sat Aug 29 05:09:04.876182 2026] [security2:error] [pid 1034096:tid 1034368] [client 158.23.147.79:6067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK90C04twRPFuquKD3E7QAAAPo"]
[Sat Aug 29 05:09:04.893429 2026] [security2:error] [pid 1034096:tid 1034297] [client 20.63.81.20:62965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/SDsadqwrf.php"] [unique_id "apK90C04twRPFuquKD3E8AAAALM"]
[Sat Aug 29 05:09:04.900030 2026] [security2:error] [pid 1034096:tid 1034294] [client 4.205.62.107:25020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/wp-info.php"] [unique_id "apK90C04twRPFuquKD3E8QAAALA"]
[Sat Aug 29 05:09:04.901067 2026] [security2:error] [pid 1034096:tid 1034255] [client 4.232.148.111:3783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK90C04twRPFuquKD3E8gAAAIk"]
[Sat Aug 29 05:09:04.903300 2026] [security2:error] [pid 1041789:tid 1042018] [client 40.83.93.50:18916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/colour.php"] [unique_id "apK90Iv3RhPI65jTFG7bIwAAA3U"]
[Sat Aug 29 05:09:04.907722 2026] [security2:error] [pid 1041789:tid 1041998] [client 40.83.93.50:19537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/install.php"] [unique_id "apK90Iv3RhPI65jTFG7bJAAAA2E"]
[Sat Aug 29 05:09:04.916893 2026] [security2:error] [pid 1034096:tid 1034266] [client 20.63.219.114:10114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/al.php"] [unique_id "apK90C04twRPFuquKD3E8wAAAJQ"]
[Sat Aug 29 05:09:04.931660 2026] [security2:error] [pid 1034096:tid 1034283] [client 158.158.54.35:1727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/u.php"] [unique_id "apK90C04twRPFuquKD3E9AAAAKU"]
[Sat Aug 29 05:09:04.940445 2026] [security2:error] [pid 1041789:tid 1041955] [client 4.205.62.107:62738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/a1vx.php"] [unique_id "apK90Iv3RhPI65jTFG7bJgAAAzY"]
[Sat Aug 29 05:09:04.973343 2026] [security2:error] [pid 1041789:tid 1042029] [client 20.48.251.3:33331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/atex1.php"] [unique_id "apK90Iv3RhPI65jTFG7bKgAAA4A"]
[Sat Aug 29 05:09:04.980150 2026] [security2:error] [pid 1041789:tid 1042013] [client 20.220.204.93:64190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/Jcrop.php"] [unique_id "apK90Iv3RhPI65jTFG7bKwAAA3A"]
[Sat Aug 29 05:09:04.994396 2026] [security2:error] [pid 1034096:tid 1034273] [client 20.196.209.81:1329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/Njima.php"] [unique_id "apK90C04twRPFuquKD3E-wAAAJs"]
[Sat Aug 29 05:09:05.005805 2026] [security2:error] [pid 1041789:tid 1041999] [client 20.240.128.207:24722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/gmo.php"] [unique_id "apK90Yv3RhPI65jTFG7bLgAAA2I"]
[Sat Aug 29 05:09:05.006956 2026] [security2:error] [pid 1034096:tid 1034312] [client 20.104.49.130:60755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/k.php"] [unique_id "apK90S04twRPFuquKD3E_gAAAMI"]
[Sat Aug 29 05:09:05.008571 2026] [security2:error] [pid 1041789:tid 1042023] [client 87.219.197.128:52088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK90Yv3RhPI65jTFG7bLQAAA3o"]
[Sat Aug 29 05:09:05.008677 2026] [security2:error] [pid 1041789:tid 1042023] [client 87.219.197.128:52088] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK90Yv3RhPI65jTFG7bLQAAA3o"]
[Sat Aug 29 05:09:05.021158 2026] [security2:error] [pid 1034096:tid 1034365] [client 4.205.62.107:51443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/avim.php"] [unique_id "apK90S04twRPFuquKD3FAAAAAPc"]
[Sat Aug 29 05:09:05.022418 2026] [security2:error] [pid 1041789:tid 1042052] [client 20.63.81.20:62925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/BDKR28WP.php"] [unique_id "apK90Yv3RhPI65jTFG7bLwAAA5c"]
[Sat Aug 29 05:09:05.028896 2026] [security2:error] [pid 1034096:tid 1034259] [client 20.196.209.81:23945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-admin/wp-settings.php"] [unique_id "apK90S04twRPFuquKD3FAgAAAI0"]
[Sat Aug 29 05:09:05.048351 2026] [security2:error] [pid 1034096:tid 1034353] [client 20.197.61.180:12797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/about.php525"] [unique_id "apK90S04twRPFuquKD3FBQAAAOs"]
[Sat Aug 29 05:09:05.058793 2026] [security2:error] [pid 1034096:tid 1034251] [client 20.196.209.81:17619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-admin/network/xmrlpc.php"] [unique_id "apK90S04twRPFuquKD3FBwAAAIU"]
[Sat Aug 29 05:09:05.069822 2026] [security2:error] [pid 1034096:tid 1034314] [client 158.23.147.79:17551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK90S04twRPFuquKD3FCAAAAMQ"]
[Sat Aug 29 05:09:05.087313 2026] [security2:error] [pid 1034096:tid 1034266] [client 45.148.10.62:48578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xfs.rxf.mybluehost.me"] [uri "/config.php"] [unique_id "apK90S04twRPFuquKD3FCQAAAJQ"]
[Sat Aug 29 05:09:05.123316 2026] [security2:error] [pid 1034096:tid 1034300] [client 20.48.251.3:14294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/aws_sdk_settings.php"] [unique_id "apK90S04twRPFuquKD3FDAAAALY"]
[Sat Aug 29 05:09:05.133926 2026] [security2:error] [pid 1041789:tid 1042044] [client 93.123.109.228:51480] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/s3/.env.bak"] [unique_id "apK90Yv3RhPI65jTFG7bMwAAA48"]
[Sat Aug 29 05:09:05.134920 2026] [security2:error] [pid 1041789:tid 1041994] [client 4.205.62.107:53153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/app/Helpers/bladeHelpers.php"] [unique_id "apK90Yv3RhPI65jTFG7bNAAAA10"]
[Sat Aug 29 05:09:05.138341 2026] [security2:error] [pid 1034096:tid 1034339] [client 20.100.175.163:20985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/system_log.php"] [unique_id "apK90S04twRPFuquKD3FEAAAAN0"]
[Sat Aug 29 05:09:05.147137 2026] [security2:error] [pid 1041789:tid 1042007] [client 20.63.219.114:10136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/wxo.php"] [unique_id "apK90Yv3RhPI65jTFG7bNwAAA2o"]
[Sat Aug 29 05:09:05.167884 2026] [security2:error] [pid 1034096:tid 1034272] [client 20.63.81.20:62854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/sky.php"] [unique_id "apK90S04twRPFuquKD3FFQAAAJo"]
[Sat Aug 29 05:09:05.172398 2026] [security2:error] [pid 1034096:tid 1034253] [client 20.151.200.44:64557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/eval.php"] [unique_id "apK90S04twRPFuquKD3FFgAAAIc"]
[Sat Aug 29 05:09:05.175477 2026] [autoindex:error] [pid 1041789:tid 1041883] [remote 158.23.184.117:0] AH01276: Cannot serve directory /home2/sungrove/public_html/eg/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:09:05.182958 2026] [security2:error] [pid 1041789:tid 1042053] [client 20.197.61.180:12739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/backup.php"] [unique_id "apK90Yv3RhPI65jTFG7bOwAAA5g"]
[Sat Aug 29 05:09:05.207117 2026] [security2:error] [pid 1034096:tid 1034301] [client 20.220.204.93:64194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/ws58.php"] [unique_id "apK90S04twRPFuquKD3FGgAAALc"]
[Sat Aug 29 05:09:05.251392 2026] [security2:error] [pid 1034096:tid 1034297] [client 93.123.109.228:45304] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/server/.env"] [unique_id "apK90S04twRPFuquKD3FIAAAALM"]
[Sat Aug 29 05:09:05.252712 2026] [security2:error] [pid 1034096:tid 1034294] [client 20.48.251.3:13882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/setup-config.php"] [unique_id "apK90S04twRPFuquKD3FIQAAALA"]
[Sat Aug 29 05:09:05.261258 2026] [security2:error] [pid 1034096:tid 1034323] [client 93.123.109.228:51726] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/server/api/.env"] [unique_id "apK90S04twRPFuquKD3FIgAAAM0"]
[Sat Aug 29 05:09:05.274376 2026] [security2:error] [pid 1041789:tid 1042055] [client 74.248.24.12:37877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-content/themes/about.php"] [unique_id "apK90Yv3RhPI65jTFG7bPQAAA5o"]
[Sat Aug 29 05:09:05.287444 2026] [security2:error] [pid 1041789:tid 1041969] [client 158.23.147.79:6074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-includes/Text/index.php"] [unique_id "apK90Yv3RhPI65jTFG7bPgAAA0Q"]
[Sat Aug 29 05:09:05.288802 2026] [security2:error] [pid 1034096:tid 1034298] [client 93.123.109.228:51446] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/server/backend/.env"] [unique_id "apK90S04twRPFuquKD3FJAAAALQ"]
[Sat Aug 29 05:09:05.293836 2026] [security2:error] [pid 1034096:tid 1034306] [client 45.125.67.3:46132] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/sirv/readme.txt"] [unique_id "apK90S04twRPFuquKD3FJQAAALw"]
[Sat Aug 29 05:09:05.293894 2026] [security2:error] [pid 1034096:tid 1034332] [client 45.125.67.3:46060] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/listingpro-plugin/readme.txt"] [unique_id "apK90S04twRPFuquKD3FJgAAANY"]
[Sat Aug 29 05:09:05.304717 2026] [security2:error] [pid 1034096:tid 1034315] [client 45.148.10.62:48566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xey.pwx.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "apK90S04twRPFuquKD3FKAAAAMU"]
[Sat Aug 29 05:09:05.310055 2026] [security2:error] [pid 1034096:tid 1034313] [client 20.63.81.20:62950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/file5.php"] [unique_id "apK90S04twRPFuquKD3FKQAAAMM"]
[Sat Aug 29 05:09:05.318842 2026] [security2:error] [pid 1034096:tid 1034361] [client 45.125.67.3:46120] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/et-core-plugin/readme.txt"] [unique_id "apK90S04twRPFuquKD3FKgAAAPM"]
[Sat Aug 29 05:09:05.341028 2026] [security2:error] [pid 1034096:tid 1034274] [client 20.220.204.93:64215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/xs.php"] [unique_id "apK90S04twRPFuquKD3FLAAAAJw"]
[Sat Aug 29 05:09:05.344657 2026] [security2:error] [pid 1034096:tid 1034296] [client 20.197.61.180:14417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/inputs.php"] [unique_id "apK90S04twRPFuquKD3FLgAAALI"]
[Sat Aug 29 05:09:05.345789 2026] [security2:error] [pid 1034096:tid 1034350] [client 45.148.10.62:48592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xga.zdx.mybluehost.me"] [uri "/config.php"] [unique_id "apK90S04twRPFuquKD3FLwAAAOg"]
[Sat Aug 29 05:09:05.356287 2026] [security2:error] [pid 1034096:tid 1034302] [client 4.205.62.107:22273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/public/rip.php.php"] [unique_id "apK90S04twRPFuquKD3FMgAAALg"]
[Sat Aug 29 05:09:05.383468 2026] [security2:error] [pid 1041789:tid 1041989] [client 20.48.251.3:14025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/wp-admin/sc.php"] [unique_id "apK90Yv3RhPI65jTFG7bQgAAA1g"]
[Sat Aug 29 05:09:05.386600 2026] [security2:error] [pid 1034096:tid 1034290] [client 158.158.54.35:13011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/r.php"] [unique_id "apK90S04twRPFuquKD3FNAAAAKw"]
[Sat Aug 29 05:09:05.406469 2026] [security2:error] [pid 1041789:tid 1041884] [remote 162.144.20.85:44628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 85.20.144.162.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.sitestage.biz"] [uri "/wp-login.php"] [unique_id "apK90Yv3RhPI65jTFG7bQwADMVI"]
[Sat Aug 29 05:09:05.411921 2026] [security2:error] [pid 1034096:tid 1034356] [client 40.83.93.50:11952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/OK.php"] [unique_id "apK90S04twRPFuquKD3FOwAAAO4"]
[Sat Aug 29 05:09:05.414085 2026] [security2:error] [pid 1034096:tid 1034376] [client 93.123.109.228:51382] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/services/.env"] [unique_id "apK90S04twRPFuquKD3FPAAAAQI"]
[Sat Aug 29 05:09:05.420257 2026] [security2:error] [pid 1034096:tid 1034314] [client 93.123.109.228:51726] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/service/.env"] [unique_id "apK90S04twRPFuquKD3FPgAAAMQ"]
[Sat Aug 29 05:09:05.422686 2026] [security2:error] [pid 1041789:tid 1041975] [client 20.196.209.81:18379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-admin/wp-signup.php"] [unique_id "apK90Yv3RhPI65jTFG7bRAAAA0o"]
[Sat Aug 29 05:09:05.432006 2026] [security2:error] [pid 1034096:tid 1034371] [client 171.61.160.196:21057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.160.61.171.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK90S04twRPFuquKD3FQgAAAP0"]
[Sat Aug 29 05:09:05.432274 2026] [security2:error] [pid 1034096:tid 1034351] [client 40.83.93.50:14636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/colour.php"] [unique_id "apK90S04twRPFuquKD3FQQAAAOk"]
[Sat Aug 29 05:09:05.433514 2026] [security2:error] [pid 1034096:tid 1034371] [client 171.61.160.196:21057] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK90S04twRPFuquKD3FQgAAAP0"]
[Sat Aug 29 05:09:05.439324 2026] [security2:error] [pid 1034096:tid 1034284] [client 62.60.130.128:53460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.130.60.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ab-au.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "apK90S04twRPFuquKD3FQwAAAKY"]
[Sat Aug 29 05:09:05.444390 2026] [security2:error] [pid 1041789:tid 1042019] [client 45.125.67.3:46142] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/squeeze/readme.txt"] [unique_id "apK90Yv3RhPI65jTFG7bRgAAA3Y"]
[Sat Aug 29 05:09:05.450366 2026] [security2:error] [pid 1041789:tid 1042038] [client 20.63.81.20:62930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/xyn.php"] [unique_id "apK90Yv3RhPI65jTFG7bRwAAA4k"]
[Sat Aug 29 05:09:05.454537 2026] [security2:error] [pid 1034096:tid 1034273] [client 20.196.209.81:19367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-admin/options-general.php"] [unique_id "apK90S04twRPFuquKD3FRQAAAJs"]
[Sat Aug 29 05:09:05.477045 2026] [security2:error] [pid 1034096:tid 1034262] [client 197.219.150.206:51649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK90S04twRPFuquKD3FRwAAAJA"]
[Sat Aug 29 05:09:05.477189 2026] [security2:error] [pid 1034096:tid 1034262] [client 197.219.150.206:51649] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK90S04twRPFuquKD3FRwAAAJA"]
[Sat Aug 29 05:09:05.477883 2026] [security2:error] [pid 1034096:tid 1034362] [client 4.232.148.111:20430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/bthil.php"] [unique_id "apK90S04twRPFuquKD3FSAAAAPQ"]
[Sat Aug 29 05:09:05.478589 2026] [security2:error] [pid 1034096:tid 1034286] [client 20.220.204.93:64230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/zu.php"] [unique_id "apK90S04twRPFuquKD3FSQAAAKg"]
[Sat Aug 29 05:09:05.483823 2026] [security2:error] [pid 1041789:tid 1042036] [client 20.63.219.114:19879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/global.php"] [unique_id "apK90Yv3RhPI65jTFG7bSAAAA4c"]
[Sat Aug 29 05:09:05.488657 2026] [security2:error] [pid 1034096:tid 1034309] [client 20.196.209.81:1228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/configs.php"] [unique_id "apK90S04twRPFuquKD3FSgAAAL8"]
[Sat Aug 29 05:09:05.492515 2026] [security2:error] [pid 1041789:tid 1041965] [client 20.151.200.44:62639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/sao.php"] [unique_id "apK90Yv3RhPI65jTFG7bSQAAA0A"]
[Sat Aug 29 05:09:05.497843 2026] [security2:error] [pid 1034096:tid 1034275] [client 45.148.10.62:48576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xfe.fme.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "apK90S04twRPFuquKD3FSwAAAJ0"]
[Sat Aug 29 05:09:05.500494 2026] [security2:error] [pid 1041789:tid 1042026] [client 114.119.139.78:52795] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.classiclightingusa.com"] [uri "/catalog/product_info.php/cPath/1/products_id/575/osCsid/fe377311a90f0b1380b06596dceb09e3"] [unique_id "apK90Yv3RhPI65jTFG7bSwAAA30"], referer: http://www.classiclightingusa.com/catalog/product_info.php/products_id/575/osCsid/fe377311a90f0b1380b06596dceb09e3
[Sat Aug 29 05:09:05.504621 2026] [security2:error] [pid 1034096:tid 1034342] [client 20.240.128.207:8448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/classwithtostring.php"] [unique_id "apK90S04twRPFuquKD3FTAAAAOA"]
[Sat Aug 29 05:09:05.507522 2026] [security2:error] [pid 1034096:tid 1034259] [client 20.63.219.114:15362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/as.php"] [unique_id "apK90S04twRPFuquKD3FTgAAAI0"]
[Sat Aug 29 05:09:05.508157 2026] [security2:error] [pid 1034096:tid 1034370] [client 93.123.109.228:45372] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/shared/.env"] [unique_id "apK90S04twRPFuquKD3FTQAAAPw"]
[Sat Aug 29 05:09:05.516787 2026] [security2:error] [pid 1041789:tid 1042003] [client 93.123.109.228:51480] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/shop/.env"] [unique_id "apK90Yv3RhPI65jTFG7bTAAAA2Y"]
[Sat Aug 29 05:09:05.562668 2026] [security2:error] [pid 1034096:tid 1034377] [client 93.123.109.228:51382] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/src/.env"] [unique_id "apK90S04twRPFuquKD3FUwAAAQM"]
[Sat Aug 29 05:09:05.566846 2026] [security2:error] [pid 1041789:tid 1042020] [client 35.221.212.112:13998] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/public/.env"] [unique_id "apK90Yv3RhPI65jTFG7bTwAAA3c"]
[Sat Aug 29 05:09:05.573024 2026] [security2:error] [pid 1041789:tid 1042051] [client 35.221.212.112:14038] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/.github/.env"] [unique_id "apK90Yv3RhPI65jTFG7bVAAAA5Y"]
[Sat Aug 29 05:09:05.581980 2026] [security2:error] [pid 1034096:tid 1034306] [client 20.48.251.3:13850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/nzv.php"] [unique_id "apK90S04twRPFuquKD3FXAAAALw"]
[Sat Aug 29 05:09:05.583664 2026] [security2:error] [pid 1041789:tid 1041942] [client 20.63.81.20:62868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/inso.php"] [unique_id "apK90Yv3RhPI65jTFG7bXAAAAyk"]
[Sat Aug 29 05:09:05.619980 2026] [security2:error] [pid 1034096:tid 1034329] [client 20.100.175.163:16388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/24.php"] [unique_id "apK90S04twRPFuquKD3FcQAAANM"]
[Sat Aug 29 05:09:05.624579 2026] [security2:error] [pid 1034096:tid 1034269] [client 158.23.147.79:17410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK90S04twRPFuquKD3FcwAAAJc"]
[Sat Aug 29 05:09:05.666917 2026] [security2:error] [pid 1034096:tid 1034321] [client 20.220.204.93:64153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/lanka.php"] [unique_id "apK90S04twRPFuquKD3FdwAAAMs"]
[Sat Aug 29 05:09:05.709493 2026] [security2:error] [pid 1041789:tid 1041945] [client 93.123.109.228:51412] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/srv/.env"] [unique_id "apK90Yv3RhPI65jTFG7bawAAAyw"]
[Sat Aug 29 05:09:05.711497 2026] [security2:error] [pid 1034096:tid 1034275] [client 93.123.109.228:51382] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/stage/.env"] [unique_id "apK90S04twRPFuquKD3FfAAAAJ0"]
[Sat Aug 29 05:09:05.715165 2026] [security2:error] [pid 1034096:tid 1034363] [client 127.0.0.1:56842] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK90S04twRPFuquKD3FWAAAAPU"]
[Sat Aug 29 05:09:05.715333 2026] [security2:error] [pid 1041789:tid 1042006] [client 35.221.212.112:14006] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.beraluzarchive.org"] [uri "/.git/config"] [unique_id "apK90Yv3RhPI65jTFG7bUgAAA2k"]
[Sat Aug 29 05:09:05.715680 2026] [security2:error] [pid 1041789:tid 1041944] [client 127.0.0.1:56812] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.beraluzarchive.org"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK90Yv3RhPI65jTFG7bWQAAAys"]
[Sat Aug 29 05:09:05.725371 2026] [security2:error] [pid 1041789:tid 1041931] [client 20.63.81.20:62929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/puc.php"] [unique_id "apK90Yv3RhPI65jTFG7bbAAAAx4"]
[Sat Aug 29 05:09:05.730131 2026] [security2:error] [pid 1034096:tid 1034375] [client 74.7.227.59:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/sitemap.xml"] [unique_id "apK90S04twRPFuquKD3FfQAAAQE"]
[Sat Aug 29 05:09:05.731213 2026] [security2:error] [pid 1034096:tid 1034370] [client 93.123.109.228:45298] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/staging/.env"] [unique_id "apK90S04twRPFuquKD3FfgAAAPw"]
[Sat Aug 29 05:09:05.755908 2026] [security2:error] [pid 1034096:tid 1034274] [client 45.148.10.62:48606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xfs.rxf.mybluehost.me"] [uri "/config.php.bak"] [unique_id "apK90S04twRPFuquKD3FgAAAAJw"]
[Sat Aug 29 05:09:05.772406 2026] [security2:error] [pid 1041789:tid 1041961] [client 20.197.61.180:12781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/spip.php"] [unique_id "apK90Yv3RhPI65jTFG7bbQAAAzw"]
[Sat Aug 29 05:09:05.775725 2026] [security2:error] [pid 1041789:tid 1041997] [client 4.205.62.107:53383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/luJMF.php"] [unique_id "apK90Yv3RhPI65jTFG7bbgAAA2A"]
[Sat Aug 29 05:09:05.785833 2026] [security2:error] [pid 1034096:tid 1034306] [client 93.123.109.228:51726] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/stg/.env"] [unique_id "apK90S04twRPFuquKD3FgwAAALw"]
[Sat Aug 29 05:09:05.795067 2026] [security2:error] [pid 1041789:tid 1042035] [client 74.248.24.12:2731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK90Yv3RhPI65jTFG7bcQAAA4Y"]
[Sat Aug 29 05:09:05.800695 2026] [security2:error] [pid 1034096:tid 1034320] [client 158.23.147.79:50012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK90S04twRPFuquKD3FhQAAAMo"]
[Sat Aug 29 05:09:05.809945 2026] [security2:error] [pid 1041789:tid 1041955] [client 20.220.204.93:64209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/gettest.php"] [unique_id "apK90Yv3RhPI65jTFG7bcgAAAzY"]
[Sat Aug 29 05:09:05.814571 2026] [security2:error] [pid 1034096:tid 1034304] [client 20.48.251.3:14039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/66.php"] [unique_id "apK90S04twRPFuquKD3FhwAAALo"]
[Sat Aug 29 05:09:05.831601 2026] [security2:error] [pid 1034096:tid 1034319] [client 57.141.14.68:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/page/20/"] [unique_id "apK90S04twRPFuquKD3FiAAAAMk"]
[Sat Aug 29 05:09:05.834377 2026] [security2:error] [pid 1034096:tid 1034335] [client 20.151.200.44:63849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/uuu.php"] [unique_id "apK90S04twRPFuquKD3FigAAANk"]
[Sat Aug 29 05:09:05.843754 2026] [security2:error] [pid 1034096:tid 1034262] [client 158.158.54.35:1686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-blog.php"] [unique_id "apK90S04twRPFuquKD3FjQAAAJA"]
[Sat Aug 29 05:09:05.847035 2026] [security2:error] [pid 1034096:tid 1034340] [client 20.196.209.81:23966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-blog-header.php"] [unique_id "apK90S04twRPFuquKD3FjwAAAN4"]
[Sat Aug 29 05:09:05.849096 2026] [security2:error] [pid 1034096:tid 1034271] [client 20.196.209.81:17925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-admin/options.php"] [unique_id "apK90S04twRPFuquKD3FkAAAAJk"]
[Sat Aug 29 05:09:05.853505 2026] [security2:error] [pid 1034096:tid 1034259] [client 20.63.219.114:19856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/update.php"] [unique_id "apK90S04twRPFuquKD3FkQAAAI0"]
[Sat Aug 29 05:09:05.863209 2026] [security2:error] [pid 1034096:tid 1034297] [client 20.63.81.20:62933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/19.php"] [unique_id "apK90S04twRPFuquKD3FkgAAALM"]
[Sat Aug 29 05:09:05.876658 2026] [security2:error] [pid 1034096:tid 1034263] [client 20.63.219.114:10530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/room.php"] [unique_id "apK90S04twRPFuquKD3FlAAAAJE"]
[Sat Aug 29 05:09:05.880536 2026] [security2:error] [pid 1041789:tid 1041999] [client 93.123.109.228:51412] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/stripe/.env"] [unique_id "apK90Yv3RhPI65jTFG7bdAAAA2I"]
[Sat Aug 29 05:09:05.884138 2026] [security2:error] [pid 1041789:tid 1042049] [client 127.0.0.1:57004] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK90Yv3RhPI65jTFG7bZQAAA5Q"]
[Sat Aug 29 05:09:05.884254 2026] [security2:error] [pid 1041789:tid 1042047] [client 127.0.0.1:56980] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.beraluzarchive.org"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK90Yv3RhPI65jTFG7bYgAAA5I"]
[Sat Aug 29 05:09:05.884384 2026] [security2:error] [pid 1034096:tid 1034253] [client 35.221.212.112:14150] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.beraluzarchive.org"] [uri "/.azure/credentials"] [unique_id "apK90S04twRPFuquKD3FYgAAAIc"]
[Sat Aug 29 05:09:05.888906 2026] [security2:error] [pid 1041789:tid 1042022] [client 40.83.93.50:48031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.scottpresleyrealty.com"] [uri "/aaa.php"] [unique_id "apK90Yv3RhPI65jTFG7bdQAAA3k"]
[Sat Aug 29 05:09:05.902802 2026] [autoindex:error] [pid 1034096:tid 1034241] [remote 45.148.10.62:48618] AH01276: Cannot serve directory /home3/xeypwxmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:09:05.907976 2026] [security2:error] [pid 1034096:tid 1034252] [client 20.197.61.180:15012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/haiterus.php"] [unique_id "apK90S04twRPFuquKD3FmAAAAIY"]
[Sat Aug 29 05:09:05.917160 2026] [security2:error] [pid 1041789:tid 1042034] [client 158.23.147.79:11316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/install.php"] [unique_id "apK90Yv3RhPI65jTFG7bdgAAA4U"]
[Sat Aug 29 05:09:05.945810 2026] [security2:error] [pid 1034096:tid 1034332] [client 93.123.109.228:51726] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/terraform.tfstate.backup"] [unique_id "apK90S04twRPFuquKD3FmwAAANY"]
[Sat Aug 29 05:09:05.951428 2026] [security2:error] [pid 1034096:tid 1034296] [client 45.148.10.62:48624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xga.zdx.mybluehost.me"] [uri "/config.php.bak"] [unique_id "apK90S04twRPFuquKD3FngAAALI"]
[Sat Aug 29 05:09:05.954476 2026] [security2:error] [pid 1034096:tid 1034287] [client 20.104.49.130:60984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/media.php"] [unique_id "apK90S04twRPFuquKD3FnwAAAKk"]
[Sat Aug 29 05:09:05.969739 2026] [security2:error] [pid 1034096:tid 1034329] [client 20.196.209.81:1258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/disagraeed.php"] [unique_id "apK90S04twRPFuquKD3FoAAAANM"]
[Sat Aug 29 05:09:05.969800 2026] [security2:error] [pid 1034096:tid 1034361] [client 40.83.93.50:19566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/OK.php"] [unique_id "apK90S04twRPFuquKD3FoQAAAPM"]
[Sat Aug 29 05:09:06.004303 2026] [security2:error] [pid 1034096:tid 1034335] [client 20.240.128.207:27558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/404.php"] [unique_id "apK90i04twRPFuquKD3FpAAAANk"]
[Sat Aug 29 05:09:06.007144 2026] [security2:error] [pid 1034096:tid 1034294] [client 93.123.109.228:45358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/test.php"] [unique_id "apK90i04twRPFuquKD3FpgAAALA"]
[Sat Aug 29 05:09:06.007257 2026] [security2:error] [pid 1034096:tid 1034313] [client 20.63.81.20:62863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/133.php"] [unique_id "apK90i04twRPFuquKD3FpQAAAMM"]
[Sat Aug 29 05:09:06.016515 2026] [security2:error] [pid 1041789:tid 1042028] [client 4.205.62.107:6919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/asa.php"] [unique_id "apK90ov3RhPI65jTFG7beQAAA38"]
[Sat Aug 29 05:09:06.026239 2026] [security2:error] [pid 1034096:tid 1034265] [client 93.123.109.228:51680] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/test/.env"] [unique_id "apK90i04twRPFuquKD3FqAAAAJM"]
[Sat Aug 29 05:09:06.027939 2026] [autoindex:error] [pid 1034096:tid 1034164] [remote 45.148.10.62:48632] AH01276: Cannot serve directory /home3/xfefmemy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:09:06.030296 2026] [security2:error] [pid 1034096:tid 1034318] [client 4.205.62.107:25002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/fns.php"] [unique_id "apK90i04twRPFuquKD3FqQAAAMg"]
[Sat Aug 29 05:09:06.033328 2026] [security2:error] [pid 1041789:tid 1042053] [client 20.48.251.3:14088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/admin.php"] [unique_id "apK90ov3RhPI65jTFG7begAAA5g"]
[Sat Aug 29 05:09:06.037724 2026] [security2:error] [pid 1034096:tid 1034323] [client 20.220.204.93:64139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/35.php"] [unique_id "apK90i04twRPFuquKD3FqgAAAM0"]
[Sat Aug 29 05:09:06.043978 2026] [security2:error] [pid 1041789:tid 1041932] [client 93.123.109.228:51480] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/user/.env"] [unique_id "apK90ov3RhPI65jTFG7bfAAAAx8"]
[Sat Aug 29 05:09:06.065906 2026] [security2:error] [pid 1034096:tid 1034359] [client 93.123.109.228:45326] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/v1/.env"] [unique_id "apK90i04twRPFuquKD3FrwAAAPE"]
[Sat Aug 29 05:09:06.076602 2026] [security2:error] [pid 1034096:tid 1034314] [client 4.205.62.107:62720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/public/vx.php"] [unique_id "apK90i04twRPFuquKD3FsAAAAMQ"]
[Sat Aug 29 05:09:06.078447 2026] [security2:error] [pid 1034096:tid 1034355] [client 20.197.61.180:2017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/class-walker-category-dropdown-class.php"] [unique_id "apK90i04twRPFuquKD3FsQAAAO0"]
[Sat Aug 29 05:09:06.098728 2026] [security2:error] [pid 1034096:tid 1034259] [client 93.123.109.228:51726] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/v2/.env"] [unique_id "apK90i04twRPFuquKD3FsgAAAI0"]
[Sat Aug 29 05:09:06.117819 2026] [core:error] [pid 1034096:tid 1034285] [client 20.100.175.163:20983] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:06.117835 2026] [core:error] [pid 1034096:tid 1034285] [client 20.100.175.163:20983] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:06.118206 2026] [security2:error] [pid 1034096:tid 1034308] [client 93.123.109.228:45316] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/v3/.env"] [unique_id "apK90i04twRPFuquKD3FtQAAAL4"]
[Sat Aug 29 05:09:06.137339 2026] [security2:error] [pid 1034096:tid 1034290] [client 20.63.81.20:62953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/1xmomo.php"] [unique_id "apK90i04twRPFuquKD3FugAAAKw"]
[Sat Aug 29 05:09:06.160267 2026] [security2:error] [pid 1034096:tid 1034375] [client 4.232.148.111:3823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/cv.php"] [unique_id "apK90i04twRPFuquKD3FuwAAAQE"]
[Sat Aug 29 05:09:06.161670 2026] [security2:error] [pid 1034096:tid 1034252] [client 4.205.62.107:58470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/file21.php"] [unique_id "apK90i04twRPFuquKD3FvAAAAIY"]
[Sat Aug 29 05:09:06.217987 2026] [http2:warn] [pid 1017536:tid 1017681] [client 74.7.241.38:60088] h2_stream(1017536-31-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:09:06.218008 2026] [http2:warn] [pid 1017536:tid 1017681] [client 74.7.241.38:60088] h2_stream(1017536-31-3,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:09:06.225416 2026] [security2:error] [pid 1041789:tid 1042055] [client 20.63.219.114:2435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/blog.php"] [unique_id "apK90ov3RhPI65jTFG7bgwAAA5o"]
[Sat Aug 29 05:09:06.243425 2026] [security2:error] [pid 1034096:tid 1034362] [client 20.196.209.81:18177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-admin/panel.php"] [unique_id "apK90i04twRPFuquKD3FxgAAAPQ"]
[Sat Aug 29 05:09:06.245336 2026] [security2:error] [pid 1034096:tid 1034267] [client 20.196.209.81:21048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-blogs.php"] [unique_id "apK90i04twRPFuquKD3FxwAAAJU"]
[Sat Aug 29 05:09:06.245645 2026] [security2:error] [pid 1034096:tid 1034297] [client 20.63.219.114:10555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/class-wp-cmd.php"] [unique_id "apK90i04twRPFuquKD3FyAAAALM"]
[Sat Aug 29 05:09:06.258961 2026] [security2:error] [pid 1041789:tid 1042046] [client 20.220.204.93:64246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/maraz.php"] [unique_id "apK90ov3RhPI65jTFG7bhQAAA5E"]
[Sat Aug 29 05:09:06.267082 2026] [security2:error] [pid 1034096:tid 1034346] [client 20.63.81.20:62958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/mosty.php"] [unique_id "apK90i04twRPFuquKD3FywAAAOQ"]
[Sat Aug 29 05:09:06.278485 2026] [security2:error] [pid 1034096:tid 1034306] [client 4.205.62.107:53168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/hochladen.form.php"] [unique_id "apK90i04twRPFuquKD3FzQAAALw"]
[Sat Aug 29 05:09:06.281107 2026] [security2:error] [pid 1034096:tid 1034353] [client 20.151.200.44:64526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/private.php"] [unique_id "apK90i04twRPFuquKD3FzgAAAOs"]
[Sat Aug 29 05:09:06.286901 2026] [security2:error] [pid 1034096:tid 1034208] [remote 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK90i04twRPFuquKD3FzwAAwlY"]
[Sat Aug 29 05:09:06.287439 2026] [security2:error] [pid 1034096:tid 1034335] [client 93.123.109.228:45304] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/var/www/.env"] [unique_id "apK90i04twRPFuquKD3F0AAAANk"]
[Sat Aug 29 05:09:06.287794 2026] [security2:error] [pid 1034096:tid 1034312] [client 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK90i04twRPFuquKD3FzwAAwlY"]
[Sat Aug 29 05:09:06.293808 2026] [security2:error] [pid 1034096:tid 1034313] [client 93.123.109.228:45298] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/var/www/html/.env"] [unique_id "apK90i04twRPFuquKD3F0QAAAMM"]
[Sat Aug 29 05:09:06.295286 2026] [security2:error] [pid 1041789:tid 1042025] [client 158.158.54.35:1674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/xxx.php"] [unique_id "apK90ov3RhPI65jTFG7biAAAA3w"]
[Sat Aug 29 05:09:06.298020 2026] [security2:error] [pid 1034096:tid 1034263] [client 74.248.24.12:15031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-admin/index.php"] [unique_id "apK90i04twRPFuquKD3F0gAAAJE"]
[Sat Aug 29 05:09:06.330790 2026] [http2:warn] [pid 1018003:tid 1018159] [client 74.7.241.38:56118] h2_stream(1018003-350-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:09:06.330809 2026] [http2:warn] [pid 1018003:tid 1018159] [client 74.7.241.38:56118] h2_stream(1018003-350-3,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:09:06.343993 2026] [security2:error] [pid 1034096:tid 1034340] [client 93.123.109.228:45384] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/web/.env"] [unique_id "apK90i04twRPFuquKD3F2AAAAN4"]
[Sat Aug 29 05:09:06.367788 2026] [security2:error] [pid 1034096:tid 1034233] [remote 45.148.10.62:48618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xey.pwx.mybluehost.me"] [uri "/wp-login.php"] [unique_id "apK90i04twRPFuquKD3F2QAApW8"]
[Sat Aug 29 05:09:06.379737 2026] [security2:error] [pid 1041789:tid 1042048] [client 20.196.209.81:1120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/add_actualites.php"] [unique_id "apK90ov3RhPI65jTFG7bigAAA5M"]
[Sat Aug 29 05:09:06.395554 2026] [security2:error] [pid 1034096:tid 1034273] [client 20.220.204.93:62296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/kbfr.php"] [unique_id "apK90i04twRPFuquKD3F3QAAAJs"]
[Sat Aug 29 05:09:06.397251 2026] [security2:error] [pid 1041789:tid 1041993] [client 158.23.147.79:5899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/content.php"] [unique_id "apK90ov3RhPI65jTFG7biwAAA1w"]
[Sat Aug 29 05:09:06.397341 2026] [security2:error] [pid 1034096:tid 1034314] [client 20.63.81.20:62860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/blurbs.php"] [unique_id "apK90i04twRPFuquKD3F3wAAAMQ"]
[Sat Aug 29 05:09:06.399226 2026] [security2:error] [pid 1034096:tid 1034325] [client 20.104.49.130:60754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/memberfuns.php"] [unique_id "apK90i04twRPFuquKD3F4AAAAM8"]
[Sat Aug 29 05:09:06.422645 2026] [security2:error] [pid 1034096:tid 1034229] [remote 185.221.182.74:20467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.182.221.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.whisperwoodholland.net"] [uri "/wp-login.php"] [unique_id "apK90i04twRPFuquKD3F4wAAnms"]
[Sat Aug 29 05:09:06.467425 2026] [security2:error] [pid 1034096:tid 1034294] [client 40.83.93.50:18571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.transportesorion.net"] [uri "/aaa.php"] [unique_id "apK90i04twRPFuquKD3F6QAAALA"]
[Sat Aug 29 05:09:06.472504 2026] [security2:error] [pid 1034096:tid 1034309] [client 93.123.109.228:45434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/website/.env"] [unique_id "apK90i04twRPFuquKD3F6gAAAL8"]
[Sat Aug 29 05:09:06.484375 2026] [security2:error] [pid 1041789:tid 1042019] [client 20.197.61.180:1424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/backup.php"] [unique_id "apK90ov3RhPI65jTFG7bjwAAA3Y"]
[Sat Aug 29 05:09:06.489367 2026] [security2:error] [pid 1034096:tid 1034365] [client 158.23.147.79:6065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-admin/includes/index.php"] [unique_id "apK90i04twRPFuquKD3F7QAAAPc"]
[Sat Aug 29 05:09:06.493636 2026] [security2:error] [pid 1034096:tid 1034214] [remote 45.148.10.62:48632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xfe.fme.mybluehost.me"] [uri "/wp-login.php"] [unique_id "apK90i04twRPFuquKD3F7wAAt1w"]
[Sat Aug 29 05:09:06.497109 2026] [security2:error] [pid 1034096:tid 1034286] [client 93.123.109.228:45332] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.gcomradio.com"] [uri "/wp-config.php.bak"] [unique_id "apK90i04twRPFuquKD3F8QAAAKg"]
[Sat Aug 29 05:09:06.501397 2026] [security2:error] [pid 1034096:tid 1034251] [client 93.123.109.228:45384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gcomradio.com"] [uri "/wp-config.php"] [unique_id "apK90i04twRPFuquKD3F8gAAAIU"]
[Sat Aug 29 05:09:06.503992 2026] [security2:error] [pid 1034096:tid 1034296] [client 4.205.62.107:22496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/environment.php"] [unique_id "apK90i04twRPFuquKD3F9AAAALI"]
[Sat Aug 29 05:09:06.504157 2026] [security2:error] [pid 1034096:tid 1034282] [client 20.240.128.207:22125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/php.php"] [unique_id "apK90i04twRPFuquKD3F8wAAAKQ"]
[Sat Aug 29 05:09:06.527250 2026] [security2:error] [pid 1041789:tid 1041939] [client 20.63.81.20:62911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/h.php"] [unique_id "apK90ov3RhPI65jTFG7bkAAAAyY"]
[Sat Aug 29 05:09:06.531543 2026] [security2:error] [pid 1041789:tid 1042020] [client 20.48.251.3:13848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/png.php"] [unique_id "apK90ov3RhPI65jTFG7bkQAAA3c"]
[Sat Aug 29 05:09:06.539084 2026] [security2:error] [pid 1034096:tid 1034287] [client 158.23.147.79:17539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/ans.php"] [unique_id "apK90i04twRPFuquKD3F9gAAAKk"]
[Sat Aug 29 05:09:06.540501 2026] [security2:error] [pid 1034096:tid 1034362] [client 93.123.109.228:51680] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.gcomradio.com"] [uri "/wp-config.php.new"] [unique_id "apK90i04twRPFuquKD3F9wAAAPQ"]
[Sat Aug 29 05:09:06.547540 2026] [security2:error] [pid 1041789:tid 1042005] [client 93.123.109.228:51480] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.gcomradio.com"] [uri "/wp-config.php.old"] [unique_id "apK90ov3RhPI65jTFG7bkgAAA2g"]
[Sat Aug 29 05:09:06.550987 2026] [security2:error] [pid 1041789:tid 1042032] [client 20.220.204.93:64224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/wp-act.php"] [unique_id "apK90ov3RhPI65jTFG7bkwAAA4M"]
[Sat Aug 29 05:09:06.572055 2026] [security2:error] [pid 1034096:tid 1034361] [client 93.123.109.228:51446] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "cpcontacts.gcomradio.com"] [uri "/___proxy_subdomain_cpcontacts/wp-content/mysql.sql"] [unique_id "apK90i04twRPFuquKD3F-QAAAPM"]
[Sat Aug 29 05:09:06.624717 2026] [security2:error] [pid 1034096:tid 1034277] [client 4.232.148.111:29597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-content/packed.php"] [unique_id "apK90i04twRPFuquKD3F_gAAAJ8"]
[Sat Aug 29 05:09:06.642437 2026] [security2:error] [pid 1034096:tid 1034375] [client 20.100.175.163:28285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK90i04twRPFuquKD3F_wAAAQE"]
[Sat Aug 29 05:09:06.645599 2026] [security2:error] [pid 1041789:tid 1041954] [client 20.196.209.81:18187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-admin/pk.php"] [unique_id "apK90ov3RhPI65jTFG7bmAAAAzU"]
[Sat Aug 29 05:09:06.656479 2026] [security2:error] [pid 1034096:tid 1034271] [client 20.197.61.180:1034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/go.php"] [unique_id "apK90i04twRPFuquKD3GAAAAAJk"]
[Sat Aug 29 05:09:06.657575 2026] [security2:error] [pid 1034096:tid 1034317] [client 20.63.81.20:62856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/ano.php"] [unique_id "apK90i04twRPFuquKD3GAQAAAMc"]
[Sat Aug 29 05:09:06.667762 2026] [security2:error] [pid 1041789:tid 1042041] [client 20.196.209.81:20993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-comments-post.php"] [unique_id "apK90ov3RhPI65jTFG7bmQAAA4w"]
[Sat Aug 29 05:09:06.695418 2026] [security2:error] [pid 1041789:tid 1041938] [client 20.63.219.114:19891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/disagreed.php"] [unique_id "apK90ov3RhPI65jTFG7bmwAAAyU"]
[Sat Aug 29 05:09:06.717188 2026] [security2:error] [pid 1034096:tid 1034302] [client 20.48.251.3:13668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/chosen.php"] [unique_id "apK90i04twRPFuquKD3GAwAAALg"]
[Sat Aug 29 05:09:06.727836 2026] [security2:error] [pid 1041789:tid 1042042] [client 20.63.219.114:2083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/bypass.php"] [unique_id "apK90ov3RhPI65jTFG7bnQAAA40"]
[Sat Aug 29 05:09:06.793146 2026] [security2:error] [pid 1034096:tid 1034264] [client 20.63.81.20:62873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/ai.php"] [unique_id "apK90i04twRPFuquKD3GBQAAAJI"]
[Sat Aug 29 05:09:06.805901 2026] [security2:error] [pid 1034096:tid 1034297] [client 20.197.61.180:14432] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/1.php7"] [unique_id "apK90i04twRPFuquKD3GBgAAALM"]
[Sat Aug 29 05:09:06.806031 2026] [security2:error] [pid 1034096:tid 1034297] [client 20.197.61.180:14432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/1.php7"] [unique_id "apK90i04twRPFuquKD3GBgAAALM"]
[Sat Aug 29 05:09:06.814296 2026] [security2:error] [pid 1041789:tid 1042043] [client 74.248.24.12:15009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/radio.php"] [unique_id "apK90ov3RhPI65jTFG7bnwAAA44"]
[Sat Aug 29 05:09:06.865967 2026] [security2:error] [pid 1034096:tid 1034269] [client 20.196.209.81:1241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/alfanew.php7"] [unique_id "apK90i04twRPFuquKD3GCAAAAJc"]
[Sat Aug 29 05:09:06.880871 2026] [security2:error] [pid 1034096:tid 1034314] [client 20.48.251.3:13872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/admin-ajax.php"] [unique_id "apK90i04twRPFuquKD3GCgAAAMQ"]
[Sat Aug 29 05:09:06.892391 2026] [proxy_http:error] [pid 1017536:tid 1017772] (70007)The timeout specified has expired: [client 127.0.0.1:23858] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:09:06.892416 2026] [proxy:error] [pid 1017536:tid 1017772] [client 127.0.0.1:23858] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:09:06.908939 2026] [security2:error] [pid 1041789:tid 1041955] [client 20.220.204.93:64132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/24.php"] [unique_id "apK90ov3RhPI65jTFG7boQAAAzY"]
[Sat Aug 29 05:09:06.912328 2026] [security2:error] [pid 1041789:tid 1041941] [client 4.205.62.107:8975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/drykl.php"] [unique_id "apK90ov3RhPI65jTFG7bogAAAyg"]
[Sat Aug 29 05:09:06.917109 2026] [security2:error] [pid 1041789:tid 1042029] [client 45.148.10.62:48648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xfs.rxf.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "apK90ov3RhPI65jTFG7bpAAAA4A"]
[Sat Aug 29 05:09:06.924505 2026] [security2:error] [pid 1041789:tid 1042013] [client 20.63.81.20:62907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/sf.php"] [unique_id "apK90ov3RhPI65jTFG7bpQAAA3A"]
[Sat Aug 29 05:09:06.943671 2026] [security2:error] [pid 1041789:tid 1042018] [client 20.151.200.44:63860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/lfi.php"] [unique_id "apK90ov3RhPI65jTFG7bpwAAA3U"]
[Sat Aug 29 05:09:06.969403 2026] [security2:error] [pid 1034096:tid 1034255] [client 158.23.147.79:49815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK90i04twRPFuquKD3GDAAAAIk"]
[Sat Aug 29 05:09:07.000378 2026] [security2:error] [pid 1034096:tid 1034350] [client 20.240.128.207:17738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/init.php"] [unique_id "apK90i04twRPFuquKD3GDwAAAOg"]
[Sat Aug 29 05:09:07.021602 2026] [security2:error] [pid 1034096:tid 1034339] [client 20.48.251.3:14138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/ms.php"] [unique_id "apK90y04twRPFuquKD3GEAAAAN0"]
[Sat Aug 29 05:09:07.044776 2026] [security2:error] [pid 1041789:tid 1041960] [client 20.196.209.81:17953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-admin/plugin-install.php"] [unique_id "apK904v3RhPI65jTFG7bqQAAAzs"]
[Sat Aug 29 05:09:07.067062 2026] [security2:error] [pid 1041789:tid 1042031] [client 20.196.209.81:18399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-config.php"] [unique_id "apK904v3RhPI65jTFG7bqwAAA4I"]
[Sat Aug 29 05:09:07.078674 2026] [security2:error] [pid 1034096:tid 1034301] [client 20.104.49.130:39083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/ms-edit.php"] [unique_id "apK90y04twRPFuquKD3GFAAAALc"]
[Sat Aug 29 05:09:07.080044 2026] [security2:error] [pid 1041789:tid 1041968] [client 20.63.81.20:62812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/xx.php"] [unique_id "apK904v3RhPI65jTFG7brAAAA0M"]
[Sat Aug 29 05:09:07.082141 2026] [security2:error] [pid 1041789:tid 1042054] [client 158.158.54.35:1685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/tool.php"] [unique_id "apK904v3RhPI65jTFG7brQAAA5k"]
[Sat Aug 29 05:09:07.089129 2026] [security2:error] [pid 1034096:tid 1034303] [client 158.23.147.79:17645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/dropdown.php"] [unique_id "apK90y04twRPFuquKD3GFgAAALk"]
[Sat Aug 29 05:09:07.090212 2026] [security2:error] [pid 1041789:tid 1042040] [client 158.23.147.79:11374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-content/x/index.php"] [unique_id "apK904v3RhPI65jTFG7brgAAA4s"]
[Sat Aug 29 05:09:07.102677 2026] [security2:error] [pid 1041789:tid 1041936] [client 20.220.204.93:64185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/155.php"] [unique_id "apK904v3RhPI65jTFG7brwAAAyM"]
[Sat Aug 29 05:09:07.105037 2026] [security2:error] [pid 1034096:tid 1034374] [client 4.232.148.111:35300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-admin/js/index.php"] [unique_id "apK90y04twRPFuquKD3GFwAAAQA"]
[Sat Aug 29 05:09:07.142058 2026] [security2:error] [pid 1034096:tid 1034282] [client 45.148.10.62:48654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xga.zdx.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "apK90y04twRPFuquKD3GGgAAAKQ"]
[Sat Aug 29 05:09:07.142753 2026] [core:error] [pid 1034096:tid 1034355] [client 20.100.175.163:26018] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:07.142768 2026] [core:error] [pid 1034096:tid 1034355] [client 20.100.175.163:26018] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:07.163934 2026] [security2:error] [pid 1034096:tid 1034253] [client 20.63.219.114:15373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/extractable-loader-head.php"] [unique_id "apK90y04twRPFuquKD3GHAAAAIc"]
[Sat Aug 29 05:09:07.169043 2026] [security2:error] [pid 1041789:tid 1042050] [client 4.205.62.107:6481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/radio.php"] [unique_id "apK904v3RhPI65jTFG7bsAAAA5U"]
[Sat Aug 29 05:09:07.172420 2026] [security2:error] [pid 1034096:tid 1034346] [client 4.205.62.107:26653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/params.php"] [unique_id "apK90y04twRPFuquKD3GHQAAAOQ"]
[Sat Aug 29 05:09:07.175374 2026] [security2:error] [pid 1034096:tid 1034308] [client 20.63.219.114:19868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/class_api.php"] [unique_id "apK90y04twRPFuquKD3GHgAAAL4"]
[Sat Aug 29 05:09:07.180172 2026] [security2:error] [pid 1034096:tid 1034377] [client 20.48.251.3:13858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/fucku.php"] [unique_id "apK90y04twRPFuquKD3GIAAAAQM"]
[Sat Aug 29 05:09:07.196022 2026] [core:error] [pid 1034096:tid 1034361] [client 74.248.24.12:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:07.196047 2026] [core:error] [pid 1034096:tid 1034361] [client 74.248.24.12:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:07.212214 2026] [security2:error] [pid 1034096:tid 1034321] [client 20.197.61.180:12740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/haiterus.php"] [unique_id "apK90y04twRPFuquKD3GIwAAAMs"]
[Sat Aug 29 05:09:07.215001 2026] [security2:error] [pid 1034096:tid 1034313] [client 4.205.62.107:62776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/log.php"] [unique_id "apK90y04twRPFuquKD3GJAAAAMM"]
[Sat Aug 29 05:09:07.236350 2026] [security2:error] [pid 1041789:tid 1042004] [client 20.63.81.20:62926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/uwu.php"] [unique_id "apK904v3RhPI65jTFG7bswAAA2c"]
[Sat Aug 29 05:09:07.279008 2026] [security2:error] [pid 1034096:tid 1034271] [client 20.220.204.93:61791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/file.php"] [unique_id "apK90y04twRPFuquKD3GJgAAAJk"]
[Sat Aug 29 05:09:07.291763 2026] [security2:error] [pid 1034096:tid 1034376] [client 20.104.49.130:58052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/wp.php"] [unique_id "apK90y04twRPFuquKD3GJwAAAQI"]
[Sat Aug 29 05:09:07.292757 2026] [security2:error] [pid 1034096:tid 1034352] [client 167.235.143.113:52418] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "doctoranddog.com"] [uri "/"] [unique_id "apK90y04twRPFuquKD3GKAAAAOo"], referer: http://doctoranddog.com
[Sat Aug 29 05:09:07.294809 2026] [security2:error] [pid 1034096:tid 1034251] [client 20.196.209.81:1264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/xmlrpc.php0"] [unique_id "apK90y04twRPFuquKD3GJQAAAIU"]
[Sat Aug 29 05:09:07.295441 2026] [security2:error] [pid 1034096:tid 1034367] [client 103.185.242.143:54702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK90y04twRPFuquKD3GKQAAAPk"]
[Sat Aug 29 05:09:07.295520 2026] [security2:error] [pid 1034096:tid 1034367] [client 103.185.242.143:54702] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK90y04twRPFuquKD3GKQAAAPk"]
[Sat Aug 29 05:09:07.298186 2026] [security2:error] [pid 1034096:tid 1034272] [client 4.205.62.107:58383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/wsws.php"] [unique_id "apK90y04twRPFuquKD3GKgAAAJo"]
[Sat Aug 29 05:09:07.301909 2026] [security2:error] [pid 1034096:tid 1034328] [client 45.125.67.3:45480] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/consulting-elementor-widgets/readme.txt"] [unique_id "apK90y04twRPFuquKD3GKwAAANI"]
[Sat Aug 29 05:09:07.328395 2026] [security2:error] [pid 1034096:tid 1034362] [client 74.248.24.12:2696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/item.php"] [unique_id "apK90y04twRPFuquKD3GLAAAAPQ"]
[Sat Aug 29 05:09:07.329455 2026] [security2:error] [pid 1041789:tid 1041947] [client 20.48.251.3:33311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/error_log.php"] [unique_id "apK904v3RhPI65jTFG7btAAAAy4"]
[Sat Aug 29 05:09:07.341126 2026] [security2:error] [pid 1034096:tid 1034274] [client 45.125.67.3:42098] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/find-duplicates/readme.txt"] [unique_id "apK90y04twRPFuquKD3GLQAAAJw"]
[Sat Aug 29 05:09:07.375410 2026] [security2:error] [pid 1034096:tid 1034265] [client 20.63.81.20:62849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/signon.php"] [unique_id "apK90y04twRPFuquKD3GLwAAAJM"]
[Sat Aug 29 05:09:07.411483 2026] [security2:error] [pid 1041789:tid 1042055] [client 20.220.204.93:62212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK904v3RhPI65jTFG7btQAAA5o"]
[Sat Aug 29 05:09:07.413905 2026] [security2:error] [pid 1041789:tid 1042044] [client 20.197.61.180:12753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/gecko-new.php"] [unique_id "apK904v3RhPI65jTFG7btgAAA48"]
[Sat Aug 29 05:09:07.416824 2026] [security2:error] [pid 1034096:tid 1034284] [client 4.205.62.107:53261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/debuggen.php"] [unique_id "apK90y04twRPFuquKD3GMAAAAKY"]
[Sat Aug 29 05:09:07.445863 2026] [security2:error] [pid 1034096:tid 1034356] [client 20.196.209.81:12389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-admin/plugins/img/themes/plugins/maintenance.php"] [unique_id "apK90y04twRPFuquKD3GMgAAAO4"]
[Sat Aug 29 05:09:07.446047 2026] [autoindex:error] [pid 1034096:tid 1034221] [remote 45.148.10.62:48660] AH01276: Cannot serve directory /home3/xfsrxfmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:09:07.460409 2026] [security2:error] [pid 1034096:tid 1034315] [client 20.196.209.81:18419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-configs.php"] [unique_id "apK90y04twRPFuquKD3GMwAAAMU"]
[Sat Aug 29 05:09:07.476968 2026] [security2:error] [pid 1041789:tid 1041964] [client 20.48.251.3:33287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/phina.php"] [unique_id "apK904v3RhPI65jTFG7btwAAAz8"]
[Sat Aug 29 05:09:07.497137 2026] [security2:error] [pid 1034096:tid 1034372] [client 20.240.128.207:24705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "apK90y04twRPFuquKD3GNAAAAP4"]
[Sat Aug 29 05:09:07.499610 2026] [security2:error] [pid 1041789:tid 1042025] [client 158.23.147.79:6058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK904v3RhPI65jTFG7buAAAA3w"]
[Sat Aug 29 05:09:07.522739 2026] [security2:error] [pid 1034096:tid 1034342] [client 20.63.81.20:62970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/file61.php"] [unique_id "apK90y04twRPFuquKD3GNQAAAOA"]
[Sat Aug 29 05:09:07.539091 2026] [security2:error] [pid 1034096:tid 1034264] [client 158.158.54.35:12995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/k.php"] [unique_id "apK90y04twRPFuquKD3GNgAAAJI"]
[Sat Aug 29 05:09:07.542970 2026] [security2:error] [pid 1034096:tid 1034273] [client 20.63.219.114:10547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/defaults.php"] [unique_id "apK90y04twRPFuquKD3GNwAAAJs"]
[Sat Aug 29 05:09:07.550119 2026] [security2:error] [pid 1041789:tid 1041965] [client 20.220.204.93:64236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/06.php"] [unique_id "apK904v3RhPI65jTFG7buQAAA0A"]
[Sat Aug 29 05:09:07.551963 2026] [security2:error] [pid 1034096:tid 1034314] [client 20.63.219.114:19856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/aksinet.php"] [unique_id "apK90y04twRPFuquKD3GOAAAAMQ"]
[Sat Aug 29 05:09:07.606842 2026] [security2:error] [pid 1034096:tid 1034275] [client 4.232.148.111:18869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/core.php"] [unique_id "apK90y04twRPFuquKD3GPwAAAJ0"]
[Sat Aug 29 05:09:07.624591 2026] [autoindex:error] [pid 1034096:tid 1034225] [remote 45.148.10.62:48674] AH01276: Cannot serve directory /home3/xgazdxmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:09:07.652328 2026] [core:error] [pid 1034096:tid 1034307] [client 20.100.175.163:25984] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:07.652351 2026] [core:error] [pid 1034096:tid 1034307] [client 20.100.175.163:25984] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:07.653263 2026] [security2:error] [pid 1034096:tid 1034321] [client 158.23.147.79:6057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-login.php"] [unique_id "apK90y04twRPFuquKD3GRQAAAMs"]
[Sat Aug 29 05:09:07.653536 2026] [security2:error] [pid 1041789:tid 1041978] [client 20.63.81.20:62920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/copypaths.php"] [unique_id "apK904v3RhPI65jTFG7bvAAAA00"]
[Sat Aug 29 05:09:07.653839 2026] [security2:error] [pid 1034096:tid 1034313] [client 158.23.147.79:17627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/worksec.php"] [unique_id "apK90y04twRPFuquKD3GRgAAAMM"]
[Sat Aug 29 05:09:07.663720 2026] [security2:error] [pid 1034096:tid 1034269] [client 20.197.61.180:12748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/ds.php"] [unique_id "apK90y04twRPFuquKD3GRwAAAJc"]
[Sat Aug 29 05:09:07.672414 2026] [security2:error] [pid 1034096:tid 1034310] [client 4.205.62.107:21837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/aws_secret_config.php"] [unique_id "apK90y04twRPFuquKD3GSAAAAMA"]
[Sat Aug 29 05:09:07.700420 2026] [security2:error] [pid 1041789:tid 1041940] [client 20.196.209.81:16323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/content.php"] [unique_id "apK904v3RhPI65jTFG7bvgAAAyc"]
[Sat Aug 29 05:09:07.718137 2026] [security2:error] [pid 1034096:tid 1034298] [client 20.151.200.44:64549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/quoys.php"] [unique_id "apK90y04twRPFuquKD3GSQAAALQ"]
[Sat Aug 29 05:09:07.728616 2026] [security2:error] [pid 1034096:tid 1034322] [client 20.220.204.93:64131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/class.php"] [unique_id "apK90y04twRPFuquKD3GSgAAAMw"]
[Sat Aug 29 05:09:07.789517 2026] [security2:error] [pid 1034096:tid 1034319] [client 20.63.81.20:62964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/bless6.php"] [unique_id "apK90y04twRPFuquKD3GTgAAAMk"]
[Sat Aug 29 05:09:07.839341 2026] [security2:error] [pid 1034096:tid 1034367] [client 20.196.209.81:18212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-admin/security.php"] [unique_id "apK90y04twRPFuquKD3GTwAAAPk"]
[Sat Aug 29 05:09:07.842453 2026] [http2:warn] [pid 1017536:tid 1017690] [client 57.141.14.59:50242] h2_stream(1017536-275-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:09:07.843982 2026] [security2:error] [pid 1041789:tid 1041995] [client 74.248.24.12:2750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/t.php"] [unique_id "apK904v3RhPI65jTFG7bvwAAA14"]
[Sat Aug 29 05:09:07.852474 2026] [security2:error] [pid 1034096:tid 1034272] [client 20.196.209.81:18376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-conflg.php"] [unique_id "apK90y04twRPFuquKD3GUAAAAJo"]
[Sat Aug 29 05:09:07.864850 2026] [security2:error] [pid 1041789:tid 1041939] [client 20.48.251.3:14068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/koiy.php"] [unique_id "apK904v3RhPI65jTFG7bwAAAAyY"]
[Sat Aug 29 05:09:07.865157 2026] [security2:error] [pid 1041789:tid 1042020] [client 20.220.204.93:62287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/8.php"] [unique_id "apK904v3RhPI65jTFG7bwQAAA3c"]
[Sat Aug 29 05:09:07.882716 2026] [security2:error] [pid 1034096:tid 1034253] [client 167.235.143.113:63740] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "doctoranddog.com"] [uri "/index.php"] [unique_id "apK90y04twRPFuquKD3GSwAAAIc"], referer: http://doctoranddog.com
[Sat Aug 29 05:09:07.902493 2026] [security2:error] [pid 1034096:tid 1034177] [remote 45.148.10.62:48660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xfs.rxf.mybluehost.me"] [uri "/wp-login.php"] [unique_id "apK90y04twRPFuquKD3GUQAA1jc"]
[Sat Aug 29 05:09:07.912504 2026] [security2:error] [pid 1041789:tid 1042003] [client 20.197.61.180:12761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/go.php"] [unique_id "apK904v3RhPI65jTFG7bwwAAA2Y"]
[Sat Aug 29 05:09:07.917558 2026] [security2:error] [pid 1034096:tid 1034297] [client 20.63.219.114:10496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/alfa-rex1.php"] [unique_id "apK90y04twRPFuquKD3GUgAAALM"]
[Sat Aug 29 05:09:07.926424 2026] [security2:error] [pid 1041789:tid 1042056] [client 20.63.81.20:62862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/special.php"] [unique_id "apK904v3RhPI65jTFG7bxAAAA5s"]
[Sat Aug 29 05:09:07.926614 2026] [security2:error] [pid 1034096:tid 1034265] [client 20.63.219.114:10502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/post.php"] [unique_id "apK90y04twRPFuquKD3GVAAAAJM"]
[Sat Aug 29 05:09:07.988332 2026] [security2:error] [pid 1034096:tid 1034290] [client 158.158.54.35:31509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/root.php"] [unique_id "apK90y04twRPFuquKD3GVQAAAKw"]
[Sat Aug 29 05:09:08.008960 2026] [security2:error] [pid 1041789:tid 1042006] [client 20.48.250.41:46079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/a332.php"] [unique_id "apK91Iv3RhPI65jTFG7bxgAAA2k"]
[Sat Aug 29 05:09:08.010404 2026] [security2:error] [pid 1034096:tid 1034372] [client 20.220.204.93:62325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/0x0x.php"] [unique_id "apK91C04twRPFuquKD3GWAAAAP4"]
[Sat Aug 29 05:09:08.023970 2026] [security2:error] [pid 1034096:tid 1034342] [client 20.48.250.41:38905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/lkui.php"] [unique_id "apK91C04twRPFuquKD3GWQAAAOA"]
[Sat Aug 29 05:09:08.036882 2026] [security2:error] [pid 1034096:tid 1034273] [client 20.48.250.41:58607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/lkui.php"] [unique_id "apK91C04twRPFuquKD3GWgAAAJs"]
[Sat Aug 29 05:09:08.063250 2026] [security2:error] [pid 1034096:tid 1034309] [client 20.63.81.20:62924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/fz.php"] [unique_id "apK91C04twRPFuquKD3GXAAAAL8"]
[Sat Aug 29 05:09:08.074013 2026] [security2:error] [pid 1034096:tid 1034234] [remote 45.148.10.62:48674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xga.zdx.mybluehost.me"] [uri "/wp-login.php"] [unique_id "apK91C04twRPFuquKD3GXgAApHA"]
[Sat Aug 29 05:09:08.091153 2026] [security2:error] [pid 1041789:tid 1042027] [client 4.232.148.111:29630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/admin/function.php"] [unique_id "apK91Iv3RhPI65jTFG7byAAAA34"]
[Sat Aug 29 05:09:08.092260 2026] [security2:error] [pid 1034096:tid 1034355] [client 158.23.147.79:49827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK91C04twRPFuquKD3GYAAAAO0"]
[Sat Aug 29 05:09:08.097268 2026] [security2:error] [pid 1034096:tid 1034287] [client 4.205.62.107:53414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/aws.php"] [unique_id "apK91C04twRPFuquKD3GYQAAAKk"]
[Sat Aug 29 05:09:08.109489 2026] [security2:error] [pid 1034096:tid 1034315] [client 20.196.209.81:16360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/wxo.php"] [unique_id "apK91C04twRPFuquKD3GYwAAAMU"]
[Sat Aug 29 05:09:08.116123 2026] [security2:error] [pid 1034096:tid 1034286] [client 67.20.76.220:46310] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "robotdanceparty.org"] [uri "/wp-cron.php"] [unique_id "apK91C04twRPFuquKD3GYgAAAKg"]
[Sat Aug 29 05:09:08.121777 2026] [security2:error] [pid 1034096:tid 1034353] [client 20.48.250.41:19671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/0byte.php"] [unique_id "apK91C04twRPFuquKD3GZAAAAOs"]
[Sat Aug 29 05:09:08.129272 2026] [security2:error] [pid 1034096:tid 1034370] [client 20.48.250.41:50020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/sbhu.php"] [unique_id "apK91C04twRPFuquKD3GZgAAAPw"]
[Sat Aug 29 05:09:08.131340 2026] [security2:error] [pid 1041789:tid 1042005] [client 20.197.61.180:14462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/wp-admin.php"] [unique_id "apK91Iv3RhPI65jTFG7bygAAA2g"]
[Sat Aug 29 05:09:08.145656 2026] [security2:error] [pid 1034096:tid 1034292] [client 20.100.175.163:25996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK91C04twRPFuquKD3GaAAAAK4"]
[Sat Aug 29 05:09:08.146568 2026] [security2:error] [pid 1034096:tid 1034375] [client 20.48.250.41:49282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/error_log.php"] [unique_id "apK91C04twRPFuquKD3GaQAAAQE"]
[Sat Aug 29 05:09:08.163910 2026] [security2:error] [pid 1034096:tid 1034351] [client 20.151.200.44:63851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/vbbn.php"] [unique_id "apK91C04twRPFuquKD3GagAAAOk"]
[Sat Aug 29 05:09:08.165776 2026] [security2:error] [pid 1041789:tid 1041991] [client 20.220.204.93:64237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/166.php"] [unique_id "apK91Iv3RhPI65jTFG7bywAAA1o"]
[Sat Aug 29 05:09:08.191500 2026] [security2:error] [pid 1034096:tid 1034251] [client 20.48.250.41:45359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/ws66.php"] [unique_id "apK91C04twRPFuquKD3GbgAAAIU"]
[Sat Aug 29 05:09:08.217290 2026] [security2:error] [pid 1041789:tid 1042015] [client 20.48.250.41:61811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "apK91Iv3RhPI65jTFG7bzQAAA3I"]
[Sat Aug 29 05:09:08.223248 2026] [security2:error] [pid 1041789:tid 1041997] [client 20.63.81.20:62928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/clque.php"] [unique_id "apK91Iv3RhPI65jTFG7bzgAAA2A"]
[Sat Aug 29 05:09:08.224754 2026] [security2:error] [pid 1041789:tid 1041992] [client 20.48.251.3:14041] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.embcontractors.net"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "apK91Iv3RhPI65jTFG7bzwAAA1s"]
[Sat Aug 29 05:09:08.234515 2026] [security2:error] [pid 1034096:tid 1034365] [client 20.196.209.81:8931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-admin/setup-config.php"] [unique_id "apK91C04twRPFuquKD3GbwAAAPc"]
[Sat Aug 29 05:09:08.244384 2026] [security2:error] [pid 1034096:tid 1034308] [client 20.196.209.81:23988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-content.php"] [unique_id "apK91C04twRPFuquKD3GcAAAAL4"]
[Sat Aug 29 05:09:08.251744 2026] [security2:error] [pid 1041789:tid 1041946] [client 20.48.250.41:38745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "apK91Iv3RhPI65jTFG7b0AAAAy0"]
[Sat Aug 29 05:09:08.254216 2026] [security2:error] [pid 1041789:tid 1041998] [client 20.48.250.41:65272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/xsox.php"] [unique_id "apK91Iv3RhPI65jTFG7b0QAAA2E"]
[Sat Aug 29 05:09:08.276862 2026] [security2:error] [pid 1034096:tid 1034274] [client 20.48.250.41:33884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/vx.php"] [unique_id "apK91C04twRPFuquKD3GcQAAAJw"]
[Sat Aug 29 05:09:08.277884 2026] [security2:error] [pid 1034096:tid 1034318] [client 20.63.219.114:7745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/headerg.php"] [unique_id "apK91C04twRPFuquKD3GcgAAAMg"]
[Sat Aug 29 05:09:08.282841 2026] [security2:error] [pid 1041789:tid 1041941] [client 158.23.147.79:17612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/sad/about.php"] [unique_id "apK91Iv3RhPI65jTFG7b0gAAAyg"]
[Sat Aug 29 05:09:08.285087 2026] [security2:error] [pid 1034096:tid 1034302] [client 20.48.250.41:49286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/403.php"] [unique_id "apK91C04twRPFuquKD3GcwAAALg"]
[Sat Aug 29 05:09:08.285958 2026] [security2:error] [pid 1041789:tid 1042029] [client 20.48.250.41:19584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/xr.php"] [unique_id "apK91Iv3RhPI65jTFG7b0wAAA4A"]
[Sat Aug 29 05:09:08.301329 2026] [security2:error] [pid 1041789:tid 1042012] [client 20.48.250.41:49967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/a332.php"] [unique_id "apK91Iv3RhPI65jTFG7b1AAAA28"]
[Sat Aug 29 05:09:08.306513 2026] [security2:error] [pid 1041789:tid 1041934] [client 4.205.62.107:6929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/xa.php"] [unique_id "apK91Iv3RhPI65jTFG7b1QAAAyE"]
[Sat Aug 29 05:09:08.308385 2026] [security2:error] [pid 1041789:tid 1041967] [client 4.205.62.107:25932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/gjm.php"] [unique_id "apK91Iv3RhPI65jTFG7b1gAAA0I"]
[Sat Aug 29 05:09:08.328415 2026] [security2:error] [pid 1041789:tid 1042049] [client 20.48.250.41:45370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/ws68.php"] [unique_id "apK91Iv3RhPI65jTFG7b2AAAA5Q"]
[Sat Aug 29 05:09:08.343353 2026] [security2:error] [pid 1034096:tid 1034283] [client 20.151.200.44:63836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/rfi.php"] [unique_id "apK91C04twRPFuquKD3GdAAAAKU"]
[Sat Aug 29 05:09:08.345703 2026] [security2:error] [pid 1041789:tid 1042043] [client 20.63.219.114:2467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/csv.php"] [unique_id "apK91Iv3RhPI65jTFG7b2gAAA44"]
[Sat Aug 29 05:09:08.350572 2026] [security2:error] [pid 1034096:tid 1034311] [client 20.220.204.93:62334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/h2a2ck.php"] [unique_id "apK91C04twRPFuquKD3GdQAAAME"]
[Sat Aug 29 05:09:08.360990 2026] [security2:error] [pid 1034096:tid 1034376] [client 74.248.24.12:22886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/i.php"] [unique_id "apK91C04twRPFuquKD3GdgAAAQI"]
[Sat Aug 29 05:09:08.363492 2026] [security2:error] [pid 1034096:tid 1034272] [client 4.205.62.107:62926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/ebahvhhh.php"] [unique_id "apK91C04twRPFuquKD3GdwAAAJo"]
[Sat Aug 29 05:09:08.364989 2026] [security2:error] [pid 1034096:tid 1034253] [client 20.63.81.20:62875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/nano.php"] [unique_id "apK91C04twRPFuquKD3GeAAAAIc"]
[Sat Aug 29 05:09:08.374400 2026] [security2:error] [pid 1034096:tid 1034255] [client 20.240.128.207:17735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-content/admin.php"] [unique_id "apK91C04twRPFuquKD3GeQAAAIk"]
[Sat Aug 29 05:09:08.414629 2026] [security2:error] [pid 1034096:tid 1034266] [client 20.48.250.41:58580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/motu.php"] [unique_id "apK91C04twRPFuquKD3GfgAAAJQ"]
[Sat Aug 29 05:09:08.431518 2026] [security2:error] [pid 1041789:tid 1041966] [client 20.48.250.41:19654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/h02ugyh.php"] [unique_id "apK91Iv3RhPI65jTFG7b3AAAA0E"]
[Sat Aug 29 05:09:08.434068 2026] [security2:error] [pid 1041789:tid 1041943] [client 20.48.250.41:34244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/global.php"] [unique_id "apK91Iv3RhPI65jTFG7b3QAAAyo"]
[Sat Aug 29 05:09:08.434265 2026] [security2:error] [pid 1041789:tid 1042034] [client 20.48.250.41:49299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/cytyr.php"] [unique_id "apK91Iv3RhPI65jTFG7b3gAAA4U"]
[Sat Aug 29 05:09:08.436638 2026] [security2:error] [pid 1034096:tid 1034303] [client 4.205.62.107:51421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/ebahvhhh.php"] [unique_id "apK91C04twRPFuquKD3GfwAAALk"]
[Sat Aug 29 05:09:08.437784 2026] [security2:error] [pid 1034096:tid 1034296] [client 20.48.250.41:49477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/lkui.php"] [unique_id "apK91C04twRPFuquKD3GgAAAALI"]
[Sat Aug 29 05:09:08.442233 2026] [security2:error] [pid 1041789:tid 1041962] [client 158.158.54.35:1800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/p.php"] [unique_id "apK91Iv3RhPI65jTFG7b3wAAAz0"]
[Sat Aug 29 05:09:08.462686 2026] [security2:error] [pid 1041789:tid 1042050] [client 20.48.250.41:45367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/users.php"] [unique_id "apK91Iv3RhPI65jTFG7b4QAAA5U"]
[Sat Aug 29 05:09:08.467159 2026] [security2:error] [pid 1034096:tid 1034309] [client 20.48.250.41:38831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/motu.php"] [unique_id "apK91C04twRPFuquKD3GgQAAAL8"]
[Sat Aug 29 05:09:08.487837 2026] [security2:error] [pid 1034096:tid 1034342] [client 20.104.104.62:33899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.suzis-light.marketingmagicsecrets.com"] [uri "/new4.php"] [unique_id "apK91C04twRPFuquKD3GggAAAOA"]
[Sat Aug 29 05:09:08.496391 2026] [security2:error] [pid 1034096:tid 1034267] [client 20.63.81.20:62971] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/\\\\.[a-z0-9]{4}\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "784"] [id "900080"] [msg "PHP Mailer Access Attempt"] [hostname "autodiscover.thehsubox.com"] [uri "/.mopj.php"] [unique_id "apK91C04twRPFuquKD3GgwAAAJU"]
[Sat Aug 29 05:09:08.503750 2026] [security2:error] [pid 1034096:tid 1034285] [client 20.220.204.93:62303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/error_log.php"] [unique_id "apK91C04twRPFuquKD3GhAAAAKc"]
[Sat Aug 29 05:09:08.514222 2026] [security2:error] [pid 1034096:tid 1034361] [client 20.197.61.180:2036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/GOD.php"] [unique_id "apK91C04twRPFuquKD3GhQAAAPM"]
[Sat Aug 29 05:09:08.522398 2026] [security2:error] [pid 1041789:tid 1042028] [client 20.48.250.41:30673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/ws66.php"] [unique_id "apK91Iv3RhPI65jTFG7b4wAAA38"]
[Sat Aug 29 05:09:08.540906 2026] [security2:error] [pid 1034096:tid 1034294] [client 20.196.209.81:16381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/as.php"] [unique_id "apK91C04twRPFuquKD3GhgAAALA"]
[Sat Aug 29 05:09:08.542399 2026] [security2:error] [pid 1034096:tid 1034263] [client 20.48.250.41:61818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/Ov-Simple1.php"] [unique_id "apK91C04twRPFuquKD3GhwAAAJE"]
[Sat Aug 29 05:09:08.551856 2026] [security2:error] [pid 1034096:tid 1034320] [client 4.205.62.107:53253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/pouhg.php"] [unique_id "apK91C04twRPFuquKD3GiAAAAMo"]
[Sat Aug 29 05:09:08.566276 2026] [security2:error] [pid 1034096:tid 1034251] [client 20.48.250.41:49303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/galer.php"] [unique_id "apK91C04twRPFuquKD3GiQAAAIU"]
[Sat Aug 29 05:09:08.567424 2026] [security2:error] [pid 1034096:tid 1034252] [client 20.48.251.3:13634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/css.php"] [unique_id "apK91C04twRPFuquKD3GigAAAIY"]
[Sat Aug 29 05:09:08.581811 2026] [security2:error] [pid 1034096:tid 1034264] [client 4.232.148.111:7513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/admin/index.php"] [unique_id "apK91C04twRPFuquKD3GiwAAAJI"]
[Sat Aug 29 05:09:08.582060 2026] [security2:error] [pid 1041789:tid 1041977] [client 20.48.250.41:19622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/xxw.php"] [unique_id "apK91Iv3RhPI65jTFG7b5AAAA0w"]
[Sat Aug 29 05:09:08.595077 2026] [security2:error] [pid 1034096:tid 1034298] [client 20.48.250.41:45313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/bzjdlofz.php"] [unique_id "apK91C04twRPFuquKD3GjAAAALQ"]
[Sat Aug 29 05:09:08.597762 2026] [security2:error] [pid 1034096:tid 1034328] [client 20.48.250.41:33903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/fs.php"] [unique_id "apK91C04twRPFuquKD3GjQAAANI"]
[Sat Aug 29 05:09:08.613230 2026] [security2:error] [pid 1034096:tid 1034362] [client 20.48.250.41:38828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/Ov-Simple1.php"] [unique_id "apK91C04twRPFuquKD3GkAAAAPQ"]
[Sat Aug 29 05:09:08.616207 2026] [security2:error] [pid 1034096:tid 1034318] [client 158.23.147.79:5980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/goat.php"] [unique_id "apK91C04twRPFuquKD3GkQAAAMg"]
[Sat Aug 29 05:09:08.634795 2026] [security2:error] [pid 1034096:tid 1034346] [client 20.196.209.81:8920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-admin/system.php"] [unique_id "apK91C04twRPFuquKD3GkwAAAOQ"]
[Sat Aug 29 05:09:08.637537 2026] [security2:error] [pid 1034096:tid 1034265] [client 20.197.61.180:1897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/gecko-new.php"] [unique_id "apK91C04twRPFuquKD3GlQAAAJM"]
[Sat Aug 29 05:09:08.638339 2026] [security2:error] [pid 1041789:tid 1042037] [client 20.63.219.114:15369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/meta.php"] [unique_id "apK91Iv3RhPI65jTFG7b5wAAA4g"]
[Sat Aug 29 05:09:08.644941 2026] [security2:error] [pid 1034096:tid 1034359] [client 20.151.200.44:63913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/tajj.php"] [unique_id "apK91C04twRPFuquKD3GlwAAAPE"]
[Sat Aug 29 05:09:08.649750 2026] [security2:error] [pid 1034096:tid 1034284] [client 20.63.81.20:62922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/bengi.php"] [unique_id "apK91C04twRPFuquKD3GmAAAAKY"]
[Sat Aug 29 05:09:08.659455 2026] [security2:error] [pid 1034096:tid 1034315] [client 20.100.175.163:28234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/num.php"] [unique_id "apK91C04twRPFuquKD3GmQAAAMU"]
[Sat Aug 29 05:09:08.682893 2026] [security2:error] [pid 1034096:tid 1034304] [client 20.104.104.62:33871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.suzis-light.marketingmagicsecrets.com"] [uri "/pouhg.php"] [unique_id "apK91C04twRPFuquKD3GnAAAALo"]
[Sat Aug 29 05:09:08.689328 2026] [security2:error] [pid 1041789:tid 1042057] [client 20.48.250.41:49955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/ws68.php"] [unique_id "apK91Iv3RhPI65jTFG7b6gAAA5w"]
[Sat Aug 29 05:09:08.689891 2026] [security2:error] [pid 1041789:tid 1041948] [client 167.235.143.113:63752] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.doctoranddog.com"] [uri "/index.php"] [unique_id "apK91Iv3RhPI65jTFG7b5QAAAy8"], referer: http://doctoranddog.com
[Sat Aug 29 05:09:08.692443 2026] [security2:error] [pid 1041789:tid 1041964] [client 20.48.250.41:58517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/wp-blogs.php"] [unique_id "apK91Iv3RhPI65jTFG7b6wAAAz8"]
[Sat Aug 29 05:09:08.694963 2026] [security2:error] [pid 1034096:tid 1034297] [client 20.220.204.93:64214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/403.php"] [unique_id "apK91C04twRPFuquKD3GnQAAALM"]
[Sat Aug 29 05:09:08.707348 2026] [security2:error] [pid 1041789:tid 1042025] [client 20.48.251.3:14101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/php_info.php"] [unique_id "apK91Iv3RhPI65jTFG7b7AAAA3w"]
[Sat Aug 29 05:09:08.711030 2026] [security2:error] [pid 1034096:tid 1034266] [client 20.48.250.41:49321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/baixy.php"] [unique_id "apK91C04twRPFuquKD3GngAAAJQ"]
[Sat Aug 29 05:09:08.725332 2026] [security2:error] [pid 1034096:tid 1034322] [client 20.63.219.114:15404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/fox.php"] [unique_id "apK91C04twRPFuquKD3GnwAAAMw"]
[Sat Aug 29 05:09:08.730736 2026] [security2:error] [pid 1034096:tid 1034374] [client 20.48.250.41:33910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/ioxi.php"] [unique_id "apK91C04twRPFuquKD3GoAAAAQA"]
[Sat Aug 29 05:09:08.744485 2026] [security2:error] [pid 1034096:tid 1034344] [client 20.48.250.41:46052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/selesai.php"] [unique_id "apK91C04twRPFuquKD3GoQAAAOI"]
[Sat Aug 29 05:09:08.763219 2026] [security2:error] [pid 1041789:tid 1041965] [client 20.48.250.41:19623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/bolt.php"] [unique_id "apK91Iv3RhPI65jTFG7b7QAAA0A"]
[Sat Aug 29 05:09:08.765615 2026] [security2:error] [pid 1041789:tid 1042014] [client 158.23.147.79:5974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK91Iv3RhPI65jTFG7b7gAAA3E"]
[Sat Aug 29 05:09:08.784548 2026] [security2:error] [pid 1041789:tid 1041940] [client 158.23.147.79:17538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/x.php"] [unique_id "apK91Iv3RhPI65jTFG7b7wAAAyc"]
[Sat Aug 29 05:09:08.788388 2026] [security2:error] [pid 1034096:tid 1034371] [client 20.63.81.20:62912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/file2.php"] [unique_id "apK91C04twRPFuquKD3GogAAAP0"]
[Sat Aug 29 05:09:08.796250 2026] [security2:error] [pid 1034096:tid 1034353] [client 20.196.209.81:20992] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.wine-garden.com"] [uri "/wp-content/1.php"] [unique_id "apK91C04twRPFuquKD3GowAAAOs"]
[Sat Aug 29 05:09:08.796307 2026] [security2:error] [pid 1034096:tid 1034353] [client 20.196.209.81:20992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-content/1.php"] [unique_id "apK91C04twRPFuquKD3GowAAAOs"]
[Sat Aug 29 05:09:08.819180 2026] [security2:error] [pid 1041789:tid 1041939] [client 4.205.62.107:22211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/snq.php"] [unique_id "apK91Iv3RhPI65jTFG7b8AAAAyY"]
[Sat Aug 29 05:09:08.828862 2026] [security2:error] [pid 1041789:tid 1042020] [client 20.220.204.93:64133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/cytyr.php"] [unique_id "apK91Iv3RhPI65jTFG7b8QAAA3c"]
[Sat Aug 29 05:09:08.849502 2026] [security2:error] [pid 1041789:tid 1041975] [client 20.48.250.41:58592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/mini.php"] [unique_id "apK91Iv3RhPI65jTFG7b8gAAA0o"]
[Sat Aug 29 05:09:08.858413 2026] [security2:error] [pid 1034096:tid 1034310] [client 20.48.251.3:14299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/session.php"] [unique_id "apK91C04twRPFuquKD3GpwAAAMA"]
[Sat Aug 29 05:09:08.859342 2026] [security2:error] [pid 1041789:tid 1041988] [client 20.48.250.41:34284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/bootstrap.php"] [unique_id "apK91Iv3RhPI65jTFG7b8wAAA1c"]
[Sat Aug 29 05:09:08.861333 2026] [security2:error] [pid 1041789:tid 1042038] [client 74.248.24.12:5724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/deepseek_d.php"] [unique_id "apK91Iv3RhPI65jTFG7b9AAAA4k"]
[Sat Aug 29 05:09:08.861670 2026] [security2:error] [pid 1034096:tid 1034320] [client 20.48.250.41:19397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/ava.php"] [unique_id "apK91C04twRPFuquKD3GqAAAAMo"]
[Sat Aug 29 05:09:08.862406 2026] [security2:error] [pid 1034096:tid 1034352] [client 20.48.250.41:38736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/wp-blogs.php"] [unique_id "apK91C04twRPFuquKD3GqQAAAOo"]
[Sat Aug 29 05:09:08.862851 2026] [security2:error] [pid 1041789:tid 1041947] [client 20.197.61.180:12742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/wp-configs.php"] [unique_id "apK91Iv3RhPI65jTFG7b9QAAAy4"]
[Sat Aug 29 05:09:08.870120 2026] [security2:error] [pid 1034096:tid 1034252] [client 20.48.250.41:50016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/users.php"] [unique_id "apK91C04twRPFuquKD3GqgAAAIY"]
[Sat Aug 29 05:09:08.876863 2026] [security2:error] [pid 1041789:tid 1042000] [client 20.48.250.41:45373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/shlo.php"] [unique_id "apK91Iv3RhPI65jTFG7b9gAAA2M"]
[Sat Aug 29 05:09:08.879030 2026] [security2:error] [pid 1041789:tid 1041995] [client 20.104.104.62:34691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.suzis-light.marketingmagicsecrets.com"] [uri "/sbhu.php"] [unique_id "apK91Iv3RhPI65jTFG7b9wAAA14"]
[Sat Aug 29 05:09:08.895607 2026] [security2:error] [pid 1034096:tid 1034321] [client 20.240.128.207:31062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-configs.php"] [unique_id "apK91C04twRPFuquKD3GrAAAAMs"]
[Sat Aug 29 05:09:08.929836 2026] [security2:error] [pid 1034096:tid 1034329] [client 20.48.250.41:19642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/rtx.php"] [unique_id "apK91C04twRPFuquKD3GrgAAANM"]
[Sat Aug 29 05:09:08.945972 2026] [security2:error] [pid 1041789:tid 1042030] [client 20.196.209.81:16364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/room.php"] [unique_id "apK91Iv3RhPI65jTFG7b-QAAA4E"]
[Sat Aug 29 05:09:08.954457 2026] [security2:error] [pid 1041789:tid 1042011] [client 20.63.81.20:62866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/gm.php"] [unique_id "apK91Iv3RhPI65jTFG7b-gAAA24"]
[Sat Aug 29 05:09:08.961414 2026] [security2:error] [pid 1034096:tid 1034377] [client 213.202.253.4:64827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bv-place.com"] [uri "/wp-content/schallfuns.php"] [unique_id "apK91C04twRPFuquKD3GrwAAAQM"], referer: www.google.com
[Sat Aug 29 05:09:08.962300 2026] [security2:error] [pid 1034096:tid 1034361] [client 158.158.54.35:34673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/a1.php"] [unique_id "apK91C04twRPFuquKD3GsAAAAPM"]
[Sat Aug 29 05:09:08.997408 2026] [security2:error] [pid 1041789:tid 1041970] [client 20.63.219.114:2086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/dxc.php"] [unique_id "apK91Iv3RhPI65jTFG7b-wAAA0U"]
[Sat Aug 29 05:09:08.998212 2026] [security2:error] [pid 1034096:tid 1034315] [client 20.48.250.41:61781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/amp.php"] [unique_id "apK91C04twRPFuquKD3GsQAAAMU"]
[Sat Aug 29 05:09:09.015769 2026] [security2:error] [pid 1034096:tid 1034311] [client 20.48.250.41:45342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/asax.php"] [unique_id "apK91S04twRPFuquKD3GsgAAAME"]
[Sat Aug 29 05:09:09.020490 2026] [security2:error] [pid 1034096:tid 1034376] [client 20.48.251.3:14083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/h.php"] [unique_id "apK91S04twRPFuquKD3GswAAAQI"]
[Sat Aug 29 05:09:09.025846 2026] [security2:error] [pid 1041789:tid 1042003] [client 180.190.5.40:50613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.5.190.180.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK91Yv3RhPI65jTFG7b_AAAA2Y"]
[Sat Aug 29 05:09:09.025926 2026] [security2:error] [pid 1041789:tid 1042003] [client 180.190.5.40:50613] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK91Yv3RhPI65jTFG7b_AAAA2Y"]
[Sat Aug 29 05:09:09.032711 2026] [security2:error] [pid 1041789:tid 1042009] [client 20.220.204.93:64156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/galer.php"] [unique_id "apK91Yv3RhPI65jTFG7b_QAAA2w"]
[Sat Aug 29 05:09:09.048632 2026] [security2:error] [pid 1034096:tid 1034272] [client 20.48.250.41:65311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "apK91S04twRPFuquKD3GtAAAAJo"]
[Sat Aug 29 05:09:09.053213 2026] [security2:error] [pid 1034096:tid 1034293] [client 20.48.250.41:50012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/bzjdlofz.php"] [unique_id "apK91S04twRPFuquKD3GtQAAAK8"]
[Sat Aug 29 05:09:09.056710 2026] [security2:error] [pid 1041789:tid 1041954] [client 4.232.148.111:35590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/storage/rip.php"] [unique_id "apK91Yv3RhPI65jTFG7b_gAAAzU"]
[Sat Aug 29 05:09:09.058266 2026] [security2:error] [pid 1034096:tid 1034328] [client 20.196.209.81:8926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-admin/test.php"] [unique_id "apK91S04twRPFuquKD3GtgAAANI"]
[Sat Aug 29 05:09:09.060651 2026] [security2:error] [pid 1034096:tid 1034253] [client 20.48.250.41:19636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/ckk.php"] [unique_id "apK91S04twRPFuquKD3GtwAAAIc"]
[Sat Aug 29 05:09:09.078064 2026] [security2:error] [pid 1041789:tid 1041997] [client 20.48.250.41:49280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/gdn.php"] [unique_id "apK91Yv3RhPI65jTFG7b_wAAA2A"]
[Sat Aug 29 05:09:09.084027 2026] [security2:error] [pid 1041789:tid 1041938] [client 20.104.104.62:33916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.suzis-light.marketingmagicsecrets.com"] [uri "/sf.php"] [unique_id "apK91Yv3RhPI65jTFG7cAAAAAyU"]
[Sat Aug 29 05:09:09.086993 2026] [security2:error] [pid 1041789:tid 1041992] [client 20.48.250.41:33882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/export.php"] [unique_id "apK91Yv3RhPI65jTFG7cAgAAA1s"]
[Sat Aug 29 05:09:09.091431 2026] [security2:error] [pid 1041789:tid 1041946] [client 20.63.81.20:62932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/ws55.php"] [unique_id "apK91Yv3RhPI65jTFG7cAwAAAy0"]
[Sat Aug 29 05:09:09.101561 2026] [security2:error] [pid 1041789:tid 1041931] [client 20.63.219.114:2473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/disagraeosc.php"] [unique_id "apK91Yv3RhPI65jTFG7cBAAAAx4"]
[Sat Aug 29 05:09:09.108521 2026] [security2:error] [pid 1034096:tid 1034365] [client 103.240.76.112:43215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK91S04twRPFuquKD3GugAAAPc"]
[Sat Aug 29 05:09:09.108610 2026] [security2:error] [pid 1034096:tid 1034365] [client 103.240.76.112:43215] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK91S04twRPFuquKD3GugAAAPc"]
[Sat Aug 29 05:09:09.109406 2026] [security2:error] [pid 1041789:tid 1041984] [client 20.48.250.41:38829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/mini.php"] [unique_id "apK91Yv3RhPI65jTFG7cBQAAA1M"]
[Sat Aug 29 05:09:09.143961 2026] [core:error] [pid 1034096:tid 1034265] [client 20.100.175.163:16403] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:09.143975 2026] [core:error] [pid 1034096:tid 1034265] [client 20.100.175.163:16403] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:09.152041 2026] [security2:error] [pid 1041789:tid 1041963] [client 20.104.49.130:51331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/tiny2.php"] [unique_id "apK91Yv3RhPI65jTFG7cCQAAAz4"]
[Sat Aug 29 05:09:09.177593 2026] [security2:error] [pid 1041789:tid 1041933] [client 20.220.204.93:62328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/baixy.php"] [unique_id "apK91Yv3RhPI65jTFG7cCgAAAyA"]
[Sat Aug 29 05:09:09.182502 2026] [security2:error] [pid 1034096:tid 1034325] [client 20.48.251.3:33321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/bootstrap.php"] [unique_id "apK91S04twRPFuquKD3GvwAAAM8"]
[Sat Aug 29 05:09:09.188028 2026] [security2:error] [pid 1034096:tid 1034372] [client 20.48.250.41:45361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/fetch.php"] [unique_id "apK91S04twRPFuquKD3GwAAAAP4"]
[Sat Aug 29 05:09:09.190328 2026] [security2:error] [pid 1041789:tid 1042042] [client 20.196.209.81:23967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-content/about.php"] [unique_id "apK91Yv3RhPI65jTFG7cCwAAA40"]
[Sat Aug 29 05:09:09.203116 2026] [security2:error] [pid 1034096:tid 1034273] [client 20.48.250.41:49931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/selesai.php"] [unique_id "apK91S04twRPFuquKD3GwQAAAJs"]
[Sat Aug 29 05:09:09.208822 2026] [security2:error] [pid 1034096:tid 1034322] [client 20.48.250.41:19614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hocking.biz"] [uri "/R57.php"] [unique_id "apK91S04twRPFuquKD3GwgAAAMw"]
[Sat Aug 29 05:09:09.209862 2026] [security2:error] [pid 1034096:tid 1034374] [client 20.48.250.41:49355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/f2.php"] [unique_id "apK91S04twRPFuquKD3GwwAAAQA"]
[Sat Aug 29 05:09:09.210241 2026] [security2:error] [pid 1034096:tid 1034346] [client 20.197.61.180:1857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/ggfi.php"] [unique_id "apK91S04twRPFuquKD3GxAAAAOQ"]
[Sat Aug 29 05:09:09.212155 2026] [security2:error] [pid 1041789:tid 1041967] [client 20.48.250.41:61736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/cc13.php"] [unique_id "apK91Yv3RhPI65jTFG7cDAAAA0I"]
[Sat Aug 29 05:09:09.224897 2026] [security2:error] [pid 1034096:tid 1034309] [client 20.63.81.20:62918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/m.php"] [unique_id "apK91S04twRPFuquKD3GxQAAAL8"]
[Sat Aug 29 05:09:09.242732 2026] [security2:error] [pid 1034096:tid 1034301] [client 20.48.250.41:38759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/amp.php"] [unique_id "apK91S04twRPFuquKD3GxgAAALc"]
[Sat Aug 29 05:09:09.246165 2026] [security2:error] [pid 1034096:tid 1034342] [client 158.23.147.79:50007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/packed.php"] [unique_id "apK91S04twRPFuquKD3GxwAAAOA"]
[Sat Aug 29 05:09:09.247092 2026] [security2:error] [pid 1034096:tid 1034286] [client 20.48.250.41:33898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/gk.php"] [unique_id "apK91S04twRPFuquKD3GyAAAAKg"]
[Sat Aug 29 05:09:09.265109 2026] [security2:error] [pid 1034096:tid 1034262] [client 4.205.62.107:8722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/05.php"] [unique_id "apK91S04twRPFuquKD3GygAAAJA"]
[Sat Aug 29 05:09:09.278521 2026] [security2:error] [pid 1034096:tid 1034375] [client 158.23.147.79:59464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK91S04twRPFuquKD3GywAAAQE"]
[Sat Aug 29 05:09:09.278550 2026] [security2:error] [pid 1034096:tid 1034313] [client 158.23.147.79:11331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK91S04twRPFuquKD3GzAAAAMM"]
[Sat Aug 29 05:09:09.285952 2026] [security2:error] [pid 1034096:tid 1034351] [client 20.151.200.44:63241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/grsiuk.php"] [unique_id "apK91S04twRPFuquKD3GzQAAAOk"]
[Sat Aug 29 05:09:09.317044 2026] [security2:error] [pid 1034096:tid 1034352] [client 20.48.250.41:45314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/vx.php"] [unique_id "apK91S04twRPFuquKD3G0QAAAOo"]
[Sat Aug 29 05:09:09.325899 2026] [security2:error] [pid 1034096:tid 1034321] [client 20.220.204.93:62252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/ava.php"] [unique_id "apK91S04twRPFuquKD3G0gAAAMs"]
[Sat Aug 29 05:09:09.334382 2026] [security2:error] [pid 1034096:tid 1034297] [client 20.197.61.180:1880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/wp-admin.php"] [unique_id "apK91S04twRPFuquKD3G1AAAALM"]
[Sat Aug 29 05:09:09.336514 2026] [security2:error] [pid 1034096:tid 1034274] [client 20.48.251.3:13869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/333.php"] [unique_id "apK91S04twRPFuquKD3G1QAAAJw"]
[Sat Aug 29 05:09:09.347012 2026] [security2:error] [pid 1034096:tid 1034362] [client 20.48.250.41:50000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/shlo.php"] [unique_id "apK91S04twRPFuquKD3G1gAAAPQ"]
[Sat Aug 29 05:09:09.353502 2026] [security2:error] [pid 1041789:tid 1042052] [client 20.63.219.114:15374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/wp-2019.php"] [unique_id "apK91Yv3RhPI65jTFG7cDgAAA5c"]
[Sat Aug 29 05:09:09.357963 2026] [security2:error] [pid 1034096:tid 1034361] [client 20.48.250.41:49371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/grsiuk.php"] [unique_id "apK91S04twRPFuquKD3G1wAAAPM"]
[Sat Aug 29 05:09:09.380154 2026] [security2:error] [pid 1034096:tid 1034319] [client 20.48.250.41:49507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/motu.php"] [unique_id "apK91S04twRPFuquKD3G2AAAAMk"]
[Sat Aug 29 05:09:09.381261 2026] [security2:error] [pid 1041789:tid 1041936] [client 20.48.250.41:34264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/logs1.php"] [unique_id "apK91Yv3RhPI65jTFG7cDwAAAyM"]
[Sat Aug 29 05:09:09.382297 2026] [security2:error] [pid 1041789:tid 1041966] [client 20.63.81.20:62938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/33.php"] [unique_id "apK91Yv3RhPI65jTFG7cEAAAA0E"]
[Sat Aug 29 05:09:09.393333 2026] [security2:error] [pid 1034096:tid 1034282] [client 20.240.128.207:31077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-includes/index.php"] [unique_id "apK91S04twRPFuquKD3G2gAAAKQ"]
[Sat Aug 29 05:09:09.399568 2026] [security2:error] [pid 1034096:tid 1034311] [client 20.48.250.41:38815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/cc13.php"] [unique_id "apK91S04twRPFuquKD3G2wAAAME"]
[Sat Aug 29 05:09:09.407877 2026] [security2:error] [pid 1034096:tid 1034275] [client 158.158.54.35:1806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK91S04twRPFuquKD3G3AAAAJ0"]
[Sat Aug 29 05:09:09.417938 2026] [security2:error] [pid 1034096:tid 1034335] [client 20.196.209.81:1118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/class-wp-cmd.php"] [unique_id "apK91S04twRPFuquKD3G3QAAANk"]
[Sat Aug 29 05:09:09.433574 2026] [security2:error] [pid 1041789:tid 1041962] [client 158.23.147.79:17577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/admin.php"] [unique_id "apK91Yv3RhPI65jTFG7cEwAAAz0"]
[Sat Aug 29 05:09:09.445103 2026] [security2:error] [pid 1041789:tid 1042007] [client 4.205.62.107:24984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/configuration.php"] [unique_id "apK91Yv3RhPI65jTFG7cFAAAA2o"]
[Sat Aug 29 05:09:09.445720 2026] [security2:error] [pid 1034096:tid 1034253] [client 4.205.62.107:6476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/ws61.php"] [unique_id "apK91S04twRPFuquKD3G3wAAAIc"]
[Sat Aug 29 05:09:09.455244 2026] [security2:error] [pid 1041789:tid 1041983] [client 20.48.250.41:53407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK91Yv3RhPI65jTFG7cFgAAA1I"]
[Sat Aug 29 05:09:09.455265 2026] [security2:error] [pid 1041789:tid 1041952] [client 20.220.204.93:64214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/gdn.php"] [unique_id "apK91Yv3RhPI65jTFG7cFwAAAzM"]
[Sat Aug 29 05:09:09.463483 2026] [security2:error] [pid 1034096:tid 1034332] [client 20.48.250.41:61749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/aa.php"] [unique_id "apK91S04twRPFuquKD3G4wAAANY"]
[Sat Aug 29 05:09:09.468754 2026] [security2:error] [pid 1034096:tid 1034370] [client 20.48.250.41:46031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/global.php"] [unique_id "apK91S04twRPFuquKD3G5QAAAPw"]
[Sat Aug 29 05:09:09.479451 2026] [security2:error] [pid 1034096:tid 1034314] [client 20.48.250.41:49930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/asax.php"] [unique_id "apK91S04twRPFuquKD3G5gAAAMQ"]
[Sat Aug 29 05:09:09.482280 2026] [security2:error] [pid 1034096:tid 1034273] [client 20.48.251.3:14021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/G-in.php"] [unique_id "apK91S04twRPFuquKD3G5wAAAJs"]
[Sat Aug 29 05:09:09.507319 2026] [security2:error] [pid 1041789:tid 1042033] [client 4.205.62.107:62721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/asa.php"] [unique_id "apK91Yv3RhPI65jTFG7cGgAAA4Q"]
[Sat Aug 29 05:09:09.508483 2026] [security2:error] [pid 1034096:tid 1034296] [client 20.48.250.41:49323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/wp-scr1pts.php"] [unique_id "apK91S04twRPFuquKD3G6QAAALI"]
[Sat Aug 29 05:09:09.510173 2026] [security2:error] [pid 1034096:tid 1034309] [client 20.63.81.20:62974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/packed.php"] [unique_id "apK91S04twRPFuquKD3G6gAAAL8"]
[Sat Aug 29 05:09:09.518650 2026] [security2:error] [pid 1041789:tid 1042053] [client 20.48.250.41:34282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/inege.php"] [unique_id "apK91Yv3RhPI65jTFG7cGwAAA5g"]
[Sat Aug 29 05:09:09.550889 2026] [security2:error] [pid 1034096:tid 1034315] [client 4.232.148.111:20478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/zoom1.php"] [unique_id "apK91S04twRPFuquKD3G7gAAAMU"]
[Sat Aug 29 05:09:09.557087 2026] [security2:error] [pid 1034096:tid 1034306] [client 20.63.219.114:19902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/about.php525"] [unique_id "apK91S04twRPFuquKD3G7wAAALw"]
[Sat Aug 29 05:09:09.557455 2026] [security2:error] [pid 1034096:tid 1034276] [client 74.248.24.12:2708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "apK91S04twRPFuquKD3G8AAAAJ4"]
[Sat Aug 29 05:09:09.561654 2026] [security2:error] [pid 1034096:tid 1034375] [client 20.48.250.41:38732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/aa.php"] [unique_id "apK91S04twRPFuquKD3G8QAAAQE"]
[Sat Aug 29 05:09:09.572422 2026] [security2:error] [pid 1034096:tid 1034363] [client 4.205.62.107:51515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/bthil.php"] [unique_id "apK91S04twRPFuquKD3G8wAAAPU"]
[Sat Aug 29 05:09:09.584763 2026] [security2:error] [pid 1034096:tid 1034323] [client 20.196.209.81:17091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-content/admin-header.php"] [unique_id "apK91S04twRPFuquKD3G9AAAAM0"]
[Sat Aug 29 05:09:09.585951 2026] [security2:error] [pid 1034096:tid 1034251] [client 20.48.250.41:53402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK91S04twRPFuquKD3G9QAAAIU"]
[Sat Aug 29 05:09:09.594725 2026] [security2:error] [pid 1034096:tid 1034321] [client 20.196.209.81:18196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-admin/user/f35.php"] [unique_id "apK91S04twRPFuquKD3G9gAAAMs"]
[Sat Aug 29 05:09:09.595648 2026] [security2:error] [pid 1034096:tid 1034298] [client 20.220.204.93:62311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/f2.php"] [unique_id "apK91S04twRPFuquKD3G9wAAALQ"]
[Sat Aug 29 05:09:09.602032 2026] [security2:error] [pid 1034096:tid 1034318] [client 20.197.61.180:1904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/essexec.php"] [unique_id "apK91S04twRPFuquKD3G-AAAAMg"]
[Sat Aug 29 05:09:09.627325 2026] [security2:error] [pid 1041789:tid 1041901] [remote 74.7.227.154:54326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK91Yv3RhPI65jTFG7cHAADkWM"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwp-easycart%2Fadmin%2Felementor
[Sat Aug 29 05:09:09.628039 2026] [security2:error] [pid 1034096:tid 1034377] [client 20.48.250.41:58577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/s1.php"] [unique_id "apK91S04twRPFuquKD3G-QAAAQM"]
[Sat Aug 29 05:09:09.634963 2026] [core:error] [pid 1034096:tid 1034266] [client 20.100.175.163:20987] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:09.634975 2026] [core:error] [pid 1034096:tid 1034266] [client 20.100.175.163:20987] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:09.638902 2026] [security2:error] [pid 1034096:tid 1034283] [client 20.48.250.41:45354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/fs.php"] [unique_id "apK91S04twRPFuquKD3G-wAAAKU"]
[Sat Aug 29 05:09:09.660644 2026] [security2:error] [pid 1034096:tid 1034359] [client 20.63.81.20:62851] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.thehsubox.com"] [uri "/wp-content/uploads/"] [unique_id "apK91S04twRPFuquKD3G_AAAAPE"]
[Sat Aug 29 05:09:09.675226 2026] [security2:error] [pid 1034096:tid 1034282] [client 20.48.250.41:19410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/num.php"] [unique_id "apK91S04twRPFuquKD3G_QAAAKQ"]
[Sat Aug 29 05:09:09.678479 2026] [security2:error] [pid 1041789:tid 1042055] [client 20.48.250.41:33880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/wp-link10.php"] [unique_id "apK91Yv3RhPI65jTFG7cHQAAA5o"]
[Sat Aug 29 05:09:09.690410 2026] [security2:error] [pid 1034096:tid 1034311] [client 4.205.62.107:53141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/phpversion.php"] [unique_id "apK91S04twRPFuquKD3G_gAAAME"]
[Sat Aug 29 05:09:09.692462 2026] [security2:error] [pid 1034096:tid 1034376] [client 20.48.250.41:30695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/fetch.php"] [unique_id "apK91S04twRPFuquKD3G_wAAAQI"]
[Sat Aug 29 05:09:09.692523 2026] [security2:error] [pid 1034096:tid 1034339] [client 20.48.251.3:14018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/public/mah.php.php"] [unique_id "apK91S04twRPFuquKD3HAAAAAN0"]
[Sat Aug 29 05:09:09.700964 2026] [security2:error] [pid 1034096:tid 1034316] [client 20.104.104.62:33897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.suzis-light.marketingmagicsecrets.com"] [uri "/wp-content/plugins/cp-pro/js.php"] [unique_id "apK91S04twRPFuquKD3HAQAAAMY"]
[Sat Aug 29 05:09:09.712629 2026] [security2:error] [pid 1034096:tid 1034271] [client 20.63.219.114:19878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/menu.php"] [unique_id "apK91S04twRPFuquKD3HAgAAAJk"]
[Sat Aug 29 05:09:09.726801 2026] [security2:error] [pid 1034096:tid 1034332] [client 158.23.147.79:5967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK91S04twRPFuquKD3HAwAAANY"]
[Sat Aug 29 05:09:09.727812 2026] [security2:error] [pid 1034096:tid 1034307] [client 20.48.250.41:38724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/s1.php"] [unique_id "apK91S04twRPFuquKD3HBAAAAL0"]
[Sat Aug 29 05:09:09.730484 2026] [security2:error] [pid 1034096:tid 1034308] [client 20.220.204.93:64203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/grsiuk.php"] [unique_id "apK91S04twRPFuquKD3HBQAAAL4"]
[Sat Aug 29 05:09:09.743150 2026] [security2:error] [pid 1041789:tid 1042057] [client 20.48.250.41:65312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/Ov-Simple1.php"] [unique_id "apK91Yv3RhPI65jTFG7cHgAAA5w"]
[Sat Aug 29 05:09:09.753223 2026] [security2:error] [pid 1041789:tid 1041964] [client 20.48.250.41:53459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/ff1.php"] [unique_id "apK91Yv3RhPI65jTFG7cHwAAAz8"]
[Sat Aug 29 05:09:09.764706 2026] [security2:error] [pid 1034096:tid 1034277] [client 20.104.104.62:33868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.suzis-light.marketingmagicsecrets.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK91S04twRPFuquKD3HBgAAAJ8"]
[Sat Aug 29 05:09:09.770687 2026] [security2:error] [pid 1034096:tid 1034273] [client 20.48.250.41:61744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/0byte.php"] [unique_id "apK91S04twRPFuquKD3HBwAAAJs"]
[Sat Aug 29 05:09:09.771802 2026] [security2:error] [pid 1034096:tid 1034374] [client 20.48.250.41:45357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/ioxi.php"] [unique_id "apK91S04twRPFuquKD3HCAAAAQA"]
[Sat Aug 29 05:09:09.798204 2026] [security2:error] [pid 1034096:tid 1034309] [client 20.63.81.20:62861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/w.php"] [unique_id "apK91S04twRPFuquKD3HCQAAAL8"]
[Sat Aug 29 05:09:09.812095 2026] [security2:error] [pid 1034096:tid 1034301] [client 20.48.250.41:49382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/a4.php"] [unique_id "apK91S04twRPFuquKD3HCgAAALc"]
[Sat Aug 29 05:09:09.825658 2026] [security2:error] [pid 1034096:tid 1034335] [client 20.196.209.81:16351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/disagreed.php"] [unique_id "apK91S04twRPFuquKD3HCwAAANk"]
[Sat Aug 29 05:09:09.844071 2026] [security2:error] [pid 1041789:tid 1041971] [client 20.48.250.41:34251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/ww.php"] [unique_id "apK91Yv3RhPI65jTFG7cIQAAA0Y"]
[Sat Aug 29 05:09:09.850593 2026] [security2:error] [pid 1034096:tid 1034285] [client 20.48.251.3:14141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/zaza.php"] [unique_id "apK91S04twRPFuquKD3HDQAAAKc"]
[Sat Aug 29 05:09:09.871708 2026] [security2:error] [pid 1034096:tid 1034306] [client 20.220.204.93:62226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/wp-scr1pts.php"] [unique_id "apK91S04twRPFuquKD3HDgAAALw"]
[Sat Aug 29 05:09:09.872234 2026] [security2:error] [pid 1041789:tid 1041986] [client 158.23.147.79:6011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-admin/images/about.php"] [unique_id "apK91Yv3RhPI65jTFG7cIgAAA1U"]
[Sat Aug 29 05:09:09.887986 2026] [security2:error] [pid 1034096:tid 1034328] [client 20.240.128.207:27153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-admin/a.php"] [unique_id "apK91S04twRPFuquKD3HDwAAANI"]
[Sat Aug 29 05:09:09.893999 2026] [security2:error] [pid 1034096:tid 1034260] [client 158.158.54.35:1704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/alfa-rex.php7"] [unique_id "apK91S04twRPFuquKD3HEAAAAI4"]
[Sat Aug 29 05:09:09.899174 2026] [security2:error] [pid 1034096:tid 1034363] [client 20.48.250.41:38890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/0byte.php"] [unique_id "apK91S04twRPFuquKD3HEQAAAPU"]
[Sat Aug 29 05:09:09.902542 2026] [security2:error] [pid 1034096:tid 1034313] [client 20.48.250.41:53428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/t.php"] [unique_id "apK91S04twRPFuquKD3HEgAAAMM"]
[Sat Aug 29 05:09:09.906596 2026] [security2:error] [pid 1041789:tid 1041940] [client 20.48.250.41:46016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/bootstrap.php"] [unique_id "apK91Yv3RhPI65jTFG7cIwAAAyc"]
[Sat Aug 29 05:09:09.907370 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.48.250.41:49922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/vx.php"] [unique_id "apK91Yv3RhPI65jTFG7cJAAAA30"]
[Sat Aug 29 05:09:09.916555 2026] [security2:error] [pid 1041789:tid 1041981] [client 158.23.147.79:17463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-content/x.php"] [unique_id "apK91Yv3RhPI65jTFG7cJQAAA1A"]
[Sat Aug 29 05:09:09.934893 2026] [security2:error] [pid 1041789:tid 1041939] [client 20.63.81.20:62967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/ccc.php"] [unique_id "apK91Yv3RhPI65jTFG7cJgAAAyY"]
[Sat Aug 29 05:09:09.945879 2026] [security2:error] [pid 1041789:tid 1042020] [client 20.48.250.41:61770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/xr.php"] [unique_id "apK91Yv3RhPI65jTFG7cJwAAA3c"]
[Sat Aug 29 05:09:09.947263 2026] [security2:error] [pid 1034096:tid 1034367] [client 103.215.74.26:13126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.74.215.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.com"] [uri "/index.php"] [unique_id "apK91S04twRPFuquKD3HEwAAAPk"]
[Sat Aug 29 05:09:09.960908 2026] [security2:error] [pid 1034096:tid 1034310] [client 20.104.104.62:33872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.suzis-light.marketingmagicsecrets.com"] [uri "/wp-content/themes/alera/alpha.php"] [unique_id "apK91S04twRPFuquKD3HFAAAAMA"]
[Sat Aug 29 05:09:09.968506 2026] [security2:error] [pid 1041789:tid 1041999] [client 20.48.250.41:19411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/tfm.php"] [unique_id "apK91Yv3RhPI65jTFG7cKAAAA2I"]
[Sat Aug 29 05:09:09.969478 2026] [security2:error] [pid 1041789:tid 1042048] [client 20.63.219.114:10511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/spip.php"] [unique_id "apK91Yv3RhPI65jTFG7cKQAAA5M"]
[Sat Aug 29 05:09:09.974816 2026] [security2:error] [pid 1041789:tid 1042014] [client 20.196.209.81:23956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-content/admin.php"] [unique_id "apK91Yv3RhPI65jTFG7cKgAAA3E"]
[Sat Aug 29 05:09:09.976163 2026] [security2:error] [pid 1034096:tid 1034352] [client 20.48.250.41:34241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/w1px.php"] [unique_id "apK91S04twRPFuquKD3HFQAAAOo"]
[Sat Aug 29 05:09:09.976609 2026] [security2:error] [pid 1034096:tid 1034252] [client 20.197.61.180:12790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/alfa-rex.php"] [unique_id "apK91S04twRPFuquKD3HFgAAAIY"]
[Sat Aug 29 05:09:09.985466 2026] [security2:error] [pid 1034096:tid 1034321] [client 20.48.251.3:14320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/config/laravolt/css/index.php"] [unique_id "apK91S04twRPFuquKD3HFwAAAMs"]
[Sat Aug 29 05:09:09.986761 2026] [security2:error] [pid 1041789:tid 1041978] [client 20.196.209.81:9140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-admin/user/min.php"] [unique_id "apK91Yv3RhPI65jTFG7cKwAAA00"]
[Sat Aug 29 05:09:09.994004 2026] [security2:error] [pid 1041789:tid 1041990] [client 107.145.13.164:60809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 164.13.145.107.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK91Yv3RhPI65jTFG7cLAAAA1k"]
[Sat Aug 29 05:09:09.994093 2026] [security2:error] [pid 1041789:tid 1041990] [client 107.145.13.164:60809] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK91Yv3RhPI65jTFG7cLAAAA1k"]
[Sat Aug 29 05:09:10.017747 2026] [security2:error] [pid 1034096:tid 1034298] [client 4.205.62.107:22183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/wp-access.php"] [unique_id "apK91i04twRPFuquKD3HGAAAALQ"]
[Sat Aug 29 05:09:10.018513 2026] [security2:error] [pid 1041789:tid 1042038] [client 20.48.250.41:65348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/wp-blogs.php"] [unique_id "apK91ov3RhPI65jTFG7cLQAAA4k"]
[Sat Aug 29 05:09:10.032989 2026] [security2:error] [pid 1041789:tid 1041993] [client 20.220.204.93:61774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/num.php"] [unique_id "apK91ov3RhPI65jTFG7cLgAAA1w"]
[Sat Aug 29 05:09:10.034817 2026] [security2:error] [pid 1034096:tid 1034276] [client 4.232.148.111:35320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/txets.php"] [unique_id "apK91i04twRPFuquKD3HGQAAAJ4"]
[Sat Aug 29 05:09:10.035339 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.48.250.41:45343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/export.php"] [unique_id "apK91ov3RhPI65jTFG7cLwAAA2Q"]
[Sat Aug 29 05:09:10.040249 2026] [security2:error] [pid 1041789:tid 1042030] [client 20.48.250.41:38751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/xr.php"] [unique_id "apK91ov3RhPI65jTFG7cMAAAA4E"]
[Sat Aug 29 05:09:10.044185 2026] [security2:error] [pid 1041789:tid 1042006] [client 20.48.250.41:50015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/global.php"] [unique_id "apK91ov3RhPI65jTFG7cMQAAA2k"]
[Sat Aug 29 05:09:10.044441 2026] [security2:error] [pid 1034096:tid 1034287] [client 20.197.61.180:15024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/wp-configs.php"] [unique_id "apK91i04twRPFuquKD3HGgAAAKk"]
[Sat Aug 29 05:09:10.050100 2026] [security2:error] [pid 1034096:tid 1034318] [client 20.48.250.41:53421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/erty.php"] [unique_id "apK91i04twRPFuquKD3HGwAAAMg"]
[Sat Aug 29 05:09:10.078897 2026] [security2:error] [pid 1041789:tid 1042051] [client 20.63.219.114:19886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/alfa.php"] [unique_id "apK91ov3RhPI65jTFG7cMgAAA5Y"]
[Sat Aug 29 05:09:10.081504 2026] [security2:error] [pid 1041789:tid 1042011] [client 103.215.74.26:13128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.74.215.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.com"] [uri "/index.php"] [unique_id "apK91ov3RhPI65jTFG7cMwAAA24"]
[Sat Aug 29 05:09:10.094901 2026] [security2:error] [pid 1034096:tid 1034272] [client 20.48.250.41:57697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/h02ugyh.php"] [unique_id "apK91i04twRPFuquKD3HHQAAAJo"]
[Sat Aug 29 05:09:10.107750 2026] [security2:error] [pid 1041789:tid 1041991] [client 20.63.81.20:62956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/file15.php"] [unique_id "apK91ov3RhPI65jTFG7cNAAAA1o"]
[Sat Aug 29 05:09:10.108618 2026] [security2:error] [pid 1041789:tid 1041903] [remote 74.7.227.154:54326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK91ov3RhPI65jTFG7cNQADNWU"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwp-easycart%2Fadmin%2Felementor
[Sat Aug 29 05:09:10.114949 2026] [security2:error] [pid 1041789:tid 1041961] [client 20.48.250.41:19442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/Geforce.php"] [unique_id "apK91ov3RhPI65jTFG7cNgAAAzw"]
[Sat Aug 29 05:09:10.126433 2026] [security2:error] [pid 1041789:tid 1041942] [client 20.100.175.163:20972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "apK91ov3RhPI65jTFG7cNwAAAyk"]
[Sat Aug 29 05:09:10.155854 2026] [security2:error] [pid 1041789:tid 1041931] [client 20.48.250.41:33869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/to.php"] [unique_id "apK91ov3RhPI65jTFG7cOAAAAx4"]
[Sat Aug 29 05:09:10.169413 2026] [security2:error] [pid 1041789:tid 1041984] [client 195.178.110.247:55378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.love2tolt.com"] [uri "/index.php"] [unique_id "apK91ov3RhPI65jTFG7cOQAAA1M"]
[Sat Aug 29 05:09:10.171037 2026] [security2:error] [pid 1034096:tid 1034284] [client 20.48.250.41:45369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/gk.php"] [unique_id "apK91i04twRPFuquKD3HHwAAAKY"]
[Sat Aug 29 05:09:10.172552 2026] [security2:error] [pid 1034096:tid 1034359] [client 20.48.250.41:49933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/fs.php"] [unique_id "apK91i04twRPFuquKD3HIAAAAPE"]
[Sat Aug 29 05:09:10.187631 2026] [security2:error] [pid 1041789:tid 1041980] [client 20.48.250.41:38741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/h02ugyh.php"] [unique_id "apK91ov3RhPI65jTFG7cOgAAA08"]
[Sat Aug 29 05:09:10.187674 2026] [security2:error] [pid 1041789:tid 1041963] [client 20.48.251.3:14066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/87.php"] [unique_id "apK91ov3RhPI65jTFG7cOwAAAz4"]
[Sat Aug 29 05:09:10.192124 2026] [access_compat:error] [pid 1034096:tid 1034350] [client 20.104.104.62:33878] AH01797: client denied by server configuration: /home3/markeud1/public_html/suzislight/wp-content/uploads/sell_media/
[Sat Aug 29 05:09:10.202138 2026] [access_compat:error] [pid 1034096:tid 1034350] [client 20.104.104.62:33878] AH01797: client denied by server configuration: /home3/markeud1/public_html/suzislight/wp-content/uploads/wpcode-logs/
[Sat Aug 29 05:09:10.217878 2026] [authz_core:error] [pid 1034096:tid 1034350] [client 20.104.104.62:33878] AH01630: client denied by server configuration: /home3/markeud1/public_html/suzislight/wp-content/uploads/wpcf7_uploads/
[Sat Aug 29 05:09:10.228172 2026] [security2:error] [pid 1034096:tid 1034266] [client 20.196.209.81:11202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/class_api.php"] [unique_id "apK91i04twRPFuquKD3HIQAAAJQ"]
[Sat Aug 29 05:09:10.234110 2026] [access_compat:error] [pid 1034096:tid 1034350] [client 20.104.104.62:33878] AH01797: client denied by server configuration: /home3/markeud1/public_html/suzislight/wp-content/uploads/backwpup-restore/
[Sat Aug 29 05:09:10.235860 2026] [access_compat:error] [pid 1034096:tid 1034350] [client 20.104.104.62:33878] AH01797: client denied by server configuration: /home3/markeud1/public_html/suzislight/wp-content/uploads/backwpup/
[Sat Aug 29 05:09:10.236073 2026] [authz_core:error] [pid 1034096:tid 1034350] [client 20.104.104.62:33878] AH01630: client denied by server configuration: /home3/markeud1/public_html/suzislight/wp-content/uploads/wpcf7_captcha/
[Sat Aug 29 05:09:10.238130 2026] [security2:error] [pid 1034096:tid 1034376] [client 74.248.24.12:5745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-content/themes/pridmag/il.php"] [unique_id "apK91i04twRPFuquKD3HIgAAAQI"]
[Sat Aug 29 05:09:10.239937 2026] [security2:error] [pid 1034096:tid 1034339] [client 20.220.204.93:64234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/a4.php"] [unique_id "apK91i04twRPFuquKD3HIwAAAN0"]
[Sat Aug 29 05:09:10.243405 2026] [security2:error] [pid 1034096:tid 1034316] [client 20.48.250.41:49305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/click.php"] [unique_id "apK91i04twRPFuquKD3HJAAAAMY"]
[Sat Aug 29 05:09:10.249553 2026] [security2:error] [pid 1034096:tid 1034264] [client 20.63.81.20:62975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/jp.php"] [unique_id "apK91i04twRPFuquKD3HJQAAAJI"]
[Sat Aug 29 05:09:10.257251 2026] [security2:error] [pid 1034096:tid 1034293] [client 20.48.250.41:53397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/0x.php"] [unique_id "apK91i04twRPFuquKD3HJgAAAK8"]
[Sat Aug 29 05:09:10.271908 2026] [security2:error] [pid 1041789:tid 1041957] [client 93.123.109.165:22440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "microprocesos.com"] [uri "/index.php"] [unique_id "apK91ov3RhPI65jTFG7cPAAAAzg"]
[Sat Aug 29 05:09:10.281456 2026] [security2:error] [pid 1034096:tid 1034300] [client 20.48.250.41:65157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/mini.php"] [unique_id "apK91i04twRPFuquKD3HJwAAALY"]
[Sat Aug 29 05:09:10.290973 2026] [security2:error] [pid 1034096:tid 1034269] [client 20.48.250.41:33873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/thui.php"] [unique_id "apK91i04twRPFuquKD3HKAAAAJc"]
[Sat Aug 29 05:09:10.311476 2026] [security2:error] [pid 1034096:tid 1034308] [client 20.48.250.41:46073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/logs1.php"] [unique_id "apK91i04twRPFuquKD3HKgAAAL4"]
[Sat Aug 29 05:09:10.318378 2026] [security2:error] [pid 1034096:tid 1034290] [client 20.48.250.41:50005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/ioxi.php"] [unique_id "apK91i04twRPFuquKD3HKwAAAKw"]
[Sat Aug 29 05:09:10.322405 2026] [security2:error] [pid 1041789:tid 1042027] [client 20.197.61.180:12794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/hello.php"] [unique_id "apK91ov3RhPI65jTFG7cPgAAA34"]
[Sat Aug 29 05:09:10.326299 2026] [security2:error] [pid 1041789:tid 1041933] [client 20.63.219.114:2464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/backup.php"] [unique_id "apK91ov3RhPI65jTFG7cPwAAAyA"]
[Sat Aug 29 05:09:10.328106 2026] [security2:error] [pid 1041789:tid 1042031] [client 20.48.251.3:13844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/plss3.php"] [unique_id "apK91ov3RhPI65jTFG7cQAAAA4I"]
[Sat Aug 29 05:09:10.329190 2026] [security2:error] [pid 1034096:tid 1034325] [client 20.48.250.41:38820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/xxw.php"] [unique_id "apK91i04twRPFuquKD3HLAAAAM8"]
[Sat Aug 29 05:09:10.334761 2026] [security2:error] [pid 1034096:tid 1034277] [client 20.48.250.41:61748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/xxw.php"] [unique_id "apK91i04twRPFuquKD3HLQAAAJ8"]
[Sat Aug 29 05:09:10.335092 2026] [security2:error] [pid 1034096:tid 1034319] [client 195.178.110.247:61242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.love2tolt.com"] [uri "/index.php"] [unique_id "apK91i04twRPFuquKD3HLgAAAMk"]
[Sat Aug 29 05:09:10.343284 2026] [security2:error] [pid 1041789:tid 1041968] [client 158.23.184.117:25057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/.dj/index.php"] [unique_id "apK91ov3RhPI65jTFG7cQQAAA0M"]
[Sat Aug 29 05:09:10.365550 2026] [security2:error] [pid 1041789:tid 1042054] [client 158.23.147.79:49821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-content/packed.php"] [unique_id "apK91ov3RhPI65jTFG7cQgAAA5k"]
[Sat Aug 29 05:09:10.366588 2026] [security2:error] [pid 1041789:tid 1042049] [client 20.196.209.81:24971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-content/autoload_classmap.php"] [unique_id "apK91ov3RhPI65jTFG7cQwAAA5Q"]
[Sat Aug 29 05:09:10.371491 2026] [security2:error] [pid 1041789:tid 1041967] [client 158.158.54.35:12018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "apK91ov3RhPI65jTFG7cRAAAA0I"]
[Sat Aug 29 05:09:10.372664 2026] [security2:error] [pid 1041789:tid 1042040] [client 20.220.204.93:62288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/tfm.php"] [unique_id "apK91ov3RhPI65jTFG7cRQAAA4s"]
[Sat Aug 29 05:09:10.377885 2026] [security2:error] [pid 1041789:tid 1041936] [client 158.23.147.79:44525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK91ov3RhPI65jTFG7cSAAAAyM"]
[Sat Aug 29 05:09:10.378077 2026] [security2:error] [pid 1041789:tid 1042052] [client 20.48.250.41:49290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/ms.php"] [unique_id "apK91ov3RhPI65jTFG7cSQAAA5c"]
[Sat Aug 29 05:09:10.387683 2026] [security2:error] [pid 1034096:tid 1034271] [client 20.196.209.81:9130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-admin/users.php"] [unique_id "apK91i04twRPFuquKD3HMAAAAJk"]
[Sat Aug 29 05:09:10.393153 2026] [security2:error] [pid 1041789:tid 1041941] [client 68.155.159.216:1985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/file17.php"] [unique_id "apK91ov3RhPI65jTFG7cTAAAAyg"]
[Sat Aug 29 05:09:10.399256 2026] [security2:error] [pid 1034096:tid 1034335] [client 20.63.81.20:62955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/f35.php"] [unique_id "apK91i04twRPFuquKD3HMgAAANk"]
[Sat Aug 29 05:09:10.419411 2026] [security2:error] [pid 1041789:tid 1042007] [client 20.48.250.41:34270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/Jcrop.php"] [unique_id "apK91ov3RhPI65jTFG7cTQAAA2o"]
[Sat Aug 29 05:09:10.433195 2026] [security2:error] [pid 1034096:tid 1034285] [client 4.205.62.107:53410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/xmy.php"] [unique_id "apK91i04twRPFuquKD3HNAAAAKc"]
[Sat Aug 29 05:09:10.436875 2026] [security2:error] [pid 1034096:tid 1034263] [client 20.63.219.114:10534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/feed-rss2-queue.php"] [unique_id "apK91i04twRPFuquKD3HNQAAAJE"]
[Sat Aug 29 05:09:10.463144 2026] [security2:error] [pid 1041789:tid 1041932] [client 158.23.147.79:11418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK91ov3RhPI65jTFG7cTgAAAx8"]
[Sat Aug 29 05:09:10.463386 2026] [security2:error] [pid 1034096:tid 1034306] [client 20.48.250.41:65343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/amp.php"] [unique_id "apK91i04twRPFuquKD3HNgAAALw"]
[Sat Aug 29 05:09:10.472379 2026] [security2:error] [pid 1041789:tid 1042004] [client 20.48.251.3:13679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/app.default.php"] [unique_id "apK91ov3RhPI65jTFG7cTwAAA2c"]
[Sat Aug 29 05:09:10.488296 2026] [security2:error] [pid 1041789:tid 1041983] [client 158.23.184.117:25031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/.info.php"] [unique_id "apK91ov3RhPI65jTFG7cUAAAA1I"]
[Sat Aug 29 05:09:10.518410 2026] [security2:error] [pid 1034096:tid 1034313] [client 20.104.104.62:33878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.suzis-light.marketingmagicsecrets.com"] [uri "/wp-info.php"] [unique_id "apK91i04twRPFuquKD3HNwAAAMM"]
[Sat Aug 29 05:09:10.530592 2026] [security2:error] [pid 1041789:tid 1042037] [client 20.63.81.20:62891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/shiny.php"] [unique_id "apK91ov3RhPI65jTFG7cUQAAA4g"]
[Sat Aug 29 05:09:10.553490 2026] [security2:error] [pid 1034096:tid 1034372] [client 20.220.204.93:64234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/Geforce.php"] [unique_id "apK91i04twRPFuquKD3HOgAAAP4"]
[Sat Aug 29 05:09:10.570789 2026] [security2:error] [pid 1041789:tid 1042055] [client 20.240.128.207:7413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK91ov3RhPI65jTFG7cUgAAA5o"]
[Sat Aug 29 05:09:10.575672 2026] [security2:error] [pid 1041789:tid 1042010] [client 4.205.62.107:6514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/xza.php"] [unique_id "apK91ov3RhPI65jTFG7cUwAAA20"]
[Sat Aug 29 05:09:10.581793 2026] [security2:error] [pid 1041789:tid 1041948] [client 4.205.62.107:24970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/server_info.php"] [unique_id "apK91ov3RhPI65jTFG7cVAAAAy8"]
[Sat Aug 29 05:09:10.610803 2026] [security2:error] [pid 1041789:tid 1042033] [client 20.100.175.163:16394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "apK91ov3RhPI65jTFG7cVQAAA4Q"]
[Sat Aug 29 05:09:10.622624 2026] [security2:error] [pid 1034096:tid 1034322] [client 68.155.159.216:16308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/packed.php"] [unique_id "apK91i04twRPFuquKD3HOwAAAMw"]
[Sat Aug 29 05:09:10.633584 2026] [security2:error] [pid 1041789:tid 1041971] [client 20.48.251.3:14081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/app_local.php"] [unique_id "apK91ov3RhPI65jTFG7cVgAAA0Y"]
[Sat Aug 29 05:09:10.634101 2026] [security2:error] [pid 1041789:tid 1041987] [client 158.23.184.117:25053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/.trash7206/index.php"] [unique_id "apK91ov3RhPI65jTFG7cVwAAA1Y"]
[Sat Aug 29 05:09:10.636408 2026] [security2:error] [pid 1041789:tid 1041969] [client 20.196.209.81:16375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/aksinet.php"] [unique_id "apK91ov3RhPI65jTFG7cWAAAA0Q"]
[Sat Aug 29 05:09:10.640782 2026] [security2:error] [pid 1034096:tid 1034274] [client 4.205.62.107:62929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/radio.php"] [unique_id "apK91i04twRPFuquKD3HPgAAAJw"]
[Sat Aug 29 05:09:10.658782 2026] [security2:error] [pid 1034096:tid 1034329] [client 20.63.81.20:62871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/images.php"] [unique_id "apK91i04twRPFuquKD3HQAAAANM"]
[Sat Aug 29 05:09:10.679843 2026] [security2:error] [pid 1034096:tid 1034323] [client 20.63.219.114:10518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/haiterus.php"] [unique_id "apK91i04twRPFuquKD3HQgAAAM0"]
[Sat Aug 29 05:09:10.691611 2026] [security2:error] [pid 1034096:tid 1034362] [client 68.155.159.216:23520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK91i04twRPFuquKD3HRAAAAPQ"]
[Sat Aug 29 05:09:10.701791 2026] [security2:error] [pid 1034096:tid 1034262] [client 20.197.61.180:1884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/cookie.php"] [unique_id "apK91i04twRPFuquKD3HRQAAAJA"]
[Sat Aug 29 05:09:10.702376 2026] [security2:error] [pid 1034096:tid 1034318] [client 4.205.62.107:58449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/aws_auth.php"] [unique_id "apK91i04twRPFuquKD3HRgAAAMg"]
[Sat Aug 29 05:09:10.716475 2026] [security2:error] [pid 1041789:tid 1041955] [client 103.171.189.88:64641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK91ov3RhPI65jTFG7cWQAAAzY"]
[Sat Aug 29 05:09:10.716587 2026] [security2:error] [pid 1041789:tid 1041955] [client 103.171.189.88:64641] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK91ov3RhPI65jTFG7cWQAAAzY"]
[Sat Aug 29 05:09:10.720194 2026] [security2:error] [pid 1034096:tid 1034373] [client 20.104.104.62:33903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.suzis-light.marketingmagicsecrets.com"] [uri "/ws61.php"] [unique_id "apK91i04twRPFuquKD3HRwAAAP8"]
[Sat Aug 29 05:09:10.720463 2026] [security2:error] [pid 1034096:tid 1034361] [client 20.104.49.130:45708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/222.php"] [unique_id "apK91i04twRPFuquKD3HSAAAAPM"]
[Sat Aug 29 05:09:10.745836 2026] [security2:error] [pid 1034096:tid 1034260] [client 20.197.61.180:1875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/essexec.php"] [unique_id "apK91i04twRPFuquKD3HSQAAAI4"]
[Sat Aug 29 05:09:10.746336 2026] [security2:error] [pid 1041789:tid 1042057] [client 74.248.24.12:2749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/assets/images/doc.php"] [unique_id "apK91ov3RhPI65jTFG7cWgAAA5w"]
[Sat Aug 29 05:09:10.758294 2026] [security2:error] [pid 1041789:tid 1041965] [client 20.196.209.81:23957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-content/cache/min/1/wp-content/admin.php"] [unique_id "apK91ov3RhPI65jTFG7cWwAAA0A"]
[Sat Aug 29 05:09:10.774539 2026] [security2:error] [pid 1034096:tid 1034284] [client 20.48.251.3:14077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/ws62.php"] [unique_id "apK91i04twRPFuquKD3HSgAAAKY"]
[Sat Aug 29 05:09:10.782606 2026] [security2:error] [pid 1041789:tid 1041940] [client 20.196.209.81:18767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-admin/wp-cron.php"] [unique_id "apK91ov3RhPI65jTFG7cXAAAAyc"]
[Sat Aug 29 05:09:10.784136 2026] [security2:error] [pid 1041789:tid 1042020] [client 158.23.184.117:24630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/.trash7206/min.php"] [unique_id "apK91ov3RhPI65jTFG7cXQAAA3c"]
[Sat Aug 29 05:09:10.818821 2026] [security2:error] [pid 1034096:tid 1034287] [client 20.63.219.114:10553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/inputs.php"] [unique_id "apK91i04twRPFuquKD3HSwAAAKk"]
[Sat Aug 29 05:09:10.822133 2026] [security2:error] [pid 1034096:tid 1034275] [client 20.63.81.20:62943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/82.php"] [unique_id "apK91i04twRPFuquKD3HTAAAAJ0"]
[Sat Aug 29 05:09:10.830153 2026] [security2:error] [pid 1041789:tid 1042045] [client 4.205.62.107:55963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/adminfus.php"] [unique_id "apK91ov3RhPI65jTFG7cXwAAA5A"]
[Sat Aug 29 05:09:10.836901 2026] [security2:error] [pid 1034096:tid 1034368] [client 158.23.147.79:6005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-content/uploads/about.php"] [unique_id "apK91i04twRPFuquKD3HTQAAAPo"]
[Sat Aug 29 05:09:10.857593 2026] [security2:error] [pid 1034096:tid 1034293] [client 20.220.204.93:64208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/click.php"] [unique_id "apK91i04twRPFuquKD3HTwAAAK8"]
[Sat Aug 29 05:09:10.858801 2026] [security2:error] [pid 1034096:tid 1034253] [client 4.232.148.111:20434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-content/themes/about.php"] [unique_id "apK91i04twRPFuquKD3HUAAAAIc"]
[Sat Aug 29 05:09:10.891412 2026] [security2:error] [pid 1041789:tid 1041904] [remote 74.7.227.154:54326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK91ov3RhPI65jTFG7cYQADLmY"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwp-easycart%2Fadmin%2Felementor
[Sat Aug 29 05:09:10.892839 2026] [security2:error] [pid 1034096:tid 1034272] [client 158.158.54.35:36953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/upload.php"] [unique_id "apK91i04twRPFuquKD3HUgAAAJo"]
[Sat Aug 29 05:09:10.919520 2026] [security2:error] [pid 1034096:tid 1034264] [client 20.104.104.62:33905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.suzis-light.marketingmagicsecrets.com"] [uri "/ws79.php"] [unique_id "apK91i04twRPFuquKD3HUwAAAJI"]
[Sat Aug 29 05:09:10.931870 2026] [security2:error] [pid 1041789:tid 1041978] [client 158.23.184.117:25037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/.well-known//index.php"] [unique_id "apK91ov3RhPI65jTFG7cYgAAA00"]
[Sat Aug 29 05:09:10.936878 2026] [security2:error] [pid 1041789:tid 1042030] [client 20.48.251.3:13637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/grsiuk.php"] [unique_id "apK91ov3RhPI65jTFG7cYwAAA4E"]
[Sat Aug 29 05:09:10.945347 2026] [security2:error] [pid 1034096:tid 1034319] [client 68.155.159.216:64097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK91i04twRPFuquKD3HVAAAAMk"]
[Sat Aug 29 05:09:10.950136 2026] [security2:error] [pid 1034096:tid 1034346] [client 20.63.81.20:62889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/files.php/new.php"] [unique_id "apK91i04twRPFuquKD3HVQAAAOQ"]
[Sat Aug 29 05:09:11.006294 2026] [security2:error] [pid 1034096:tid 1034371] [client 68.155.159.216:65093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK91y04twRPFuquKD3HVgAAAP0"]
[Sat Aug 29 05:09:11.018014 2026] [security2:error] [pid 1034096:tid 1034353] [client 20.220.204.93:64148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/ms.php"] [unique_id "apK91y04twRPFuquKD3HVwAAAOs"]
[Sat Aug 29 05:09:11.038732 2026] [security2:error] [pid 1034096:tid 1034311] [client 20.197.61.180:1242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/fi2.php"] [unique_id "apK91y04twRPFuquKD3HWAAAAME"]
[Sat Aug 29 05:09:11.045072 2026] [security2:error] [pid 1034096:tid 1034365] [client 20.196.209.81:1268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/alfa-rex1.php"] [unique_id "apK91y04twRPFuquKD3HWQAAAPc"]
[Sat Aug 29 05:09:11.045215 2026] [security2:error] [pid 1034096:tid 1034375] [client 93.123.109.165:22452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "microprocesos.com"] [uri "/index.php"] [unique_id "apK91y04twRPFuquKD3HWgAAAQE"]
[Sat Aug 29 05:09:11.047475 2026] [http2:warn] [pid 1018003:tid 1018214] [client 57.141.14.83:32086] h2_stream(1018003-136-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:09:11.056159 2026] [security2:error] [pid 1041789:tid 1042038] [client 20.240.128.207:31081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatsaturdaythang.lifesosweet.com"] [uri "/wp-admin.php"] [unique_id "apK914v3RhPI65jTFG7cZAAAA4k"]
[Sat Aug 29 05:09:11.069209 2026] [security2:error] [pid 1034096:tid 1034363] [client 68.155.159.216:65079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-content/index.php"] [unique_id "apK91y04twRPFuquKD3HXAAAAPU"]
[Sat Aug 29 05:09:11.073233 2026] [security2:error] [pid 1041789:tid 1042005] [client 68.155.159.216:30709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/install.php"] [unique_id "apK914v3RhPI65jTFG7cZQAAA2g"]
[Sat Aug 29 05:09:11.080365 2026] [security2:error] [pid 1034096:tid 1034255] [client 158.23.184.117:24610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/.well-known/about.php"] [unique_id "apK91y04twRPFuquKD3HXQAAAIk"]
[Sat Aug 29 05:09:11.087606 2026] [security2:error] [pid 1041789:tid 1042006] [client 20.63.219.114:10529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/go.php"] [unique_id "apK914v3RhPI65jTFG7cZgAAA2k"]
[Sat Aug 29 05:09:11.089039 2026] [security2:error] [pid 1034096:tid 1034317] [client 20.63.81.20:62957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/mghnhykio.php/new.php"] [unique_id "apK91y04twRPFuquKD3HXgAAAMc"]
[Sat Aug 29 05:09:11.103330 2026] [security2:error] [pid 1034096:tid 1034314] [client 20.100.175.163:5158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/gifclass.php"] [unique_id "apK91y04twRPFuquKD3HXwAAAMQ"]
[Sat Aug 29 05:09:11.105837 2026] [security2:error] [pid 1041789:tid 1042003] [client 158.23.147.79:17521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK914v3RhPI65jTFG7cZwAAA2Y"]
[Sat Aug 29 05:09:11.122615 2026] [security2:error] [pid 1041789:tid 1041905] [remote 52.167.144.172:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantsfans.net"] [uri "/message_board/index.php"] [unique_id "apK914v3RhPI65jTFG7caAADMmc"]
[Sat Aug 29 05:09:11.124785 2026] [security2:error] [pid 1034096:tid 1034342] [client 20.48.251.3:14116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/paypal.php"] [unique_id "apK91y04twRPFuquKD3HYQAAAOA"]
[Sat Aug 29 05:09:11.135194 2026] [security2:error] [pid 1034096:tid 1034367] [client 68.155.159.216:1957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/sad/about.php"] [unique_id "apK91y04twRPFuquKD3HYgAAAPk"]
[Sat Aug 29 05:09:11.154754 2026] [security2:error] [pid 1034096:tid 1034285] [client 20.196.209.81:23962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-content/classwithtostring.php"] [unique_id "apK91y04twRPFuquKD3HYwAAAKc"]
[Sat Aug 29 05:09:11.161550 2026] [security2:error] [pid 1034096:tid 1034372] [client 20.220.204.93:64250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/zxekqlxb.php"] [unique_id "apK91y04twRPFuquKD3HZAAAAP4"]
[Sat Aug 29 05:09:11.187850 2026] [security2:error] [pid 1034096:tid 1034294] [client 20.196.209.81:4296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-admin/wp-links-opml.php"] [unique_id "apK91y04twRPFuquKD3HZQAAALA"]
[Sat Aug 29 05:09:11.221477 2026] [security2:error] [pid 1034096:tid 1034312] [client 20.63.81.20:62877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/admin.php/nope.php"] [unique_id "apK91y04twRPFuquKD3HZwAAAMI"]
[Sat Aug 29 05:09:11.225199 2026] [security2:error] [pid 1034096:tid 1034313] [client 20.63.219.114:10516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/class-walker-category-dropdown-class.php"] [unique_id "apK91y04twRPFuquKD3HaAAAAMM"]
[Sat Aug 29 05:09:11.245575 2026] [security2:error] [pid 1034096:tid 1034351] [client 4.205.62.107:22324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/otuz1.php"] [unique_id "apK91y04twRPFuquKD3HaQAAAOk"]
[Sat Aug 29 05:09:11.258467 2026] [autoindex:error] [pid 1041789:tid 1041997] [client 158.23.184.117:24584] AH01276: Cannot serve directory /home1/roycehom/public_html/ottawanodownpayment/.well-known/acme-challenge/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:09:11.264445 2026] [security2:error] [pid 1034096:tid 1034260] [client 20.48.251.3:14100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/userfuns.php"] [unique_id "apK91y04twRPFuquKD3HagAAAI4"]
[Sat Aug 29 05:09:11.286167 2026] [security2:error] [pid 1041789:tid 1041945] [client 74.248.24.12:19467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/bgymj.php"] [unique_id "apK914v3RhPI65jTFG7cagAAAyw"]
[Sat Aug 29 05:09:11.311020 2026] [security2:error] [pid 1041789:tid 1041942] [client 158.23.184.117:24584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK914v3RhPI65jTFG7cbAAAAyk"]
[Sat Aug 29 05:09:11.314532 2026] [access_compat:error] [pid 1034096:tid 1034339] [client 57.141.14.52:0] AH01797: client denied by server configuration: /home4/eastacar/public_html/djiboutifresh/cart
[Sat Aug 29 05:09:11.325614 2026] [security2:error] [pid 1034096:tid 1034307] [client 68.155.159.216:49304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK91y04twRPFuquKD3HbwAAAL0"]
[Sat Aug 29 05:09:11.336144 2026] [security2:error] [pid 1034096:tid 1034310] [client 4.232.148.111:35615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK91y04twRPFuquKD3HcAAAAMA"]
[Sat Aug 29 05:09:11.338468 2026] [security2:error] [pid 1041789:tid 1042035] [client 20.220.204.93:64211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/init.php"] [unique_id "apK914v3RhPI65jTFG7cbQAAA4Y"]
[Sat Aug 29 05:09:11.350912 2026] [security2:error] [pid 1034096:tid 1034277] [client 20.63.81.20:62793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/lib.php/new.php"] [unique_id "apK91y04twRPFuquKD3HcgAAAJ8"]
[Sat Aug 29 05:09:11.394578 2026] [security2:error] [pid 1034096:tid 1034370] [client 20.48.251.3:14079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/mamzi.php"] [unique_id "apK91y04twRPFuquKD3HeAAAAPw"]
[Sat Aug 29 05:09:11.441754 2026] [security2:error] [pid 1034096:tid 1034350] [client 20.196.209.81:1151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/headerg.php"] [unique_id "apK91y04twRPFuquKD3HeQAAAOg"]
[Sat Aug 29 05:09:11.442523 2026] [security2:error] [pid 1034096:tid 1034371] [client 20.104.104.62:33884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.suzis-light.marketingmagicsecrets.com"] [uri "/.info.php"] [unique_id "apK91y04twRPFuquKD3HegAAAP0"]
[Sat Aug 29 05:09:11.448212 2026] [security2:error] [pid 1034096:tid 1034267] [client 20.104.49.130:57623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/abc.php"] [unique_id "apK91y04twRPFuquKD3HewAAAJU"]
[Sat Aug 29 05:09:11.452465 2026] [security2:error] [pid 1034096:tid 1034325] [client 20.63.219.114:15418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/gecko-new.php"] [unique_id "apK91y04twRPFuquKD3HfAAAAM8"]
[Sat Aug 29 05:09:11.454269 2026] [security2:error] [pid 1034096:tid 1034376] [client 158.23.184.117:24622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/.well-known/acme-challenge/content.php"] [unique_id "apK91y04twRPFuquKD3HfQAAAQI"]
[Sat Aug 29 05:09:11.458876 2026] [security2:error] [pid 1034096:tid 1034311] [client 20.151.200.44:64530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/ahy66.php"] [unique_id "apK91y04twRPFuquKD3HfwAAAME"]
[Sat Aug 29 05:09:11.461837 2026] [security2:error] [pid 1034096:tid 1034302] [client 20.197.61.180:12752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/NewFile.php"] [unique_id "apK91y04twRPFuquKD3HgAAAALg"]
[Sat Aug 29 05:09:11.465105 2026] [security2:error] [pid 1034096:tid 1034318] [client 20.197.61.180:1075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/hello.php"] [unique_id "apK91y04twRPFuquKD3HgQAAAMg"]
[Sat Aug 29 05:09:11.472143 2026] [security2:error] [pid 1041789:tid 1042022] [client 20.220.204.93:62263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/term.php"] [unique_id "apK914v3RhPI65jTFG7cbwAAA3k"]
[Sat Aug 29 05:09:11.476170 2026] [security2:error] [pid 1041789:tid 1042043] [client 158.23.147.79:49989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-l0gin.php"] [unique_id "apK914v3RhPI65jTFG7ccAAAA44"]
[Sat Aug 29 05:09:11.483148 2026] [security2:error] [pid 1034096:tid 1034304] [client 20.63.81.20:62915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/info.php/new.php"] [unique_id "apK91y04twRPFuquKD3HggAAALo"]
[Sat Aug 29 05:09:11.483880 2026] [security2:error] [pid 1034096:tid 1034255] [client 158.23.147.79:5963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK91y04twRPFuquKD3HgwAAAIk"]
[Sat Aug 29 05:09:11.516284 2026] [security2:error] [pid 1034096:tid 1034251] [client 68.155.159.216:1857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/file5.php"] [unique_id "apK91y04twRPFuquKD3HhQAAAIU"]
[Sat Aug 29 05:09:11.516754 2026] [security2:error] [pid 1034096:tid 1034352] [client 68.155.159.216:14309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK91y04twRPFuquKD3HhgAAAOo"]
[Sat Aug 29 05:09:11.537206 2026] [security2:error] [pid 1034096:tid 1034276] [client 20.48.251.3:13677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/public/rip.php.php"] [unique_id "apK91y04twRPFuquKD3HhwAAAJ4"]
[Sat Aug 29 05:09:11.576542 2026] [security2:error] [pid 1041789:tid 1041963] [client 20.196.209.81:7745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-content/config.php"] [unique_id "apK914v3RhPI65jTFG7ccwAAAz4"]
[Sat Aug 29 05:09:11.589680 2026] [security2:error] [pid 1041789:tid 1041933] [client 4.205.62.107:53334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/wp-blog.php"] [unique_id "apK914v3RhPI65jTFG7cdAAAAyA"]
[Sat Aug 29 05:09:11.596073 2026] [security2:error] [pid 1041789:tid 1042031] [client 158.23.147.79:11336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-login.php"] [unique_id "apK914v3RhPI65jTFG7cdQAAA4I"]
[Sat Aug 29 05:09:11.597961 2026] [security2:error] [pid 1041789:tid 1042021] [client 20.220.204.93:62214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/aaa.php"] [unique_id "apK914v3RhPI65jTFG7cdwAAA3g"]
[Sat Aug 29 05:09:11.598584 2026] [security2:error] [pid 1041789:tid 1042029] [client 20.63.219.114:19892] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/1.php7"] [unique_id "apK914v3RhPI65jTFG7ceAAAA4A"]
[Sat Aug 29 05:09:11.598662 2026] [security2:error] [pid 1041789:tid 1042029] [client 20.63.219.114:19892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/1.php7"] [unique_id "apK914v3RhPI65jTFG7ceAAAA4A"]
[Sat Aug 29 05:09:11.600109 2026] [core:error] [pid 1041789:tid 1041980] [client 20.100.175.163:16870] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:11.600122 2026] [core:error] [pid 1041789:tid 1041980] [client 20.100.175.163:16870] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:11.614724 2026] [security2:error] [pid 1034096:tid 1034315] [client 20.196.209.81:4288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-admin/wp-load.php"] [unique_id "apK91y04twRPFuquKD3HigAAAMU"]
[Sat Aug 29 05:09:11.641750 2026] [security2:error] [pid 1041789:tid 1042027] [client 20.104.104.62:33860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.suzis-light.marketingmagicsecrets.com"] [uri "/abc.php"] [unique_id "apK914v3RhPI65jTFG7cewAAA34"]
[Sat Aug 29 05:09:11.642885 2026] [security2:error] [pid 1034096:tid 1034275] [client 158.158.54.35:31497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-content/file.php"] [unique_id "apK91y04twRPFuquKD3HiwAAAJ0"]
[Sat Aug 29 05:09:11.646288 2026] [security2:error] [pid 1041789:tid 1041995] [client 20.63.81.20:62899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/db.php/new.php"] [unique_id "apK914v3RhPI65jTFG7cfAAAA14"]
[Sat Aug 29 05:09:11.650128 2026] [security2:error] [pid 1034096:tid 1034368] [client 158.23.147.79:17615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/wp-admin/admin.php"] [unique_id "apK91y04twRPFuquKD3HjAAAAPo"]
[Sat Aug 29 05:09:11.650198 2026] [security2:error] [pid 1034096:tid 1034303] [client 158.23.184.117:25044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK91y04twRPFuquKD3HjQAAALk"]
[Sat Aug 29 05:09:11.712779 2026] [security2:error] [pid 1034096:tid 1034264] [client 4.205.62.107:6467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/ms-edit.php"] [unique_id "apK91y04twRPFuquKD3HkQAAAJI"]
[Sat Aug 29 05:09:11.719995 2026] [security2:error] [pid 1034096:tid 1034346] [client 4.205.62.107:25972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/hosty.php"] [unique_id "apK91y04twRPFuquKD3HkgAAAOQ"]
[Sat Aug 29 05:09:11.732421 2026] [security2:error] [pid 1034096:tid 1034324] [client 68.155.159.216:16363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-content/packed.php"] [unique_id "apK91y04twRPFuquKD3HkwAAAM4"]
[Sat Aug 29 05:09:11.732871 2026] [security2:error] [pid 1034096:tid 1034335] [client 20.220.204.93:64164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/xsox.php"] [unique_id "apK91y04twRPFuquKD3HlAAAANk"]
[Sat Aug 29 05:09:11.745937 2026] [security2:error] [pid 1034096:tid 1034285] [client 20.197.61.180:12759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/1p.php"] [unique_id "apK91y04twRPFuquKD3HlgAAAKc"]
[Sat Aug 29 05:09:11.774262 2026] [security2:error] [pid 1034096:tid 1034325] [client 68.155.159.216:56559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-admin/images/about.php"] [unique_id "apK91y04twRPFuquKD3HlwAAAM8"]
[Sat Aug 29 05:09:11.778960 2026] [security2:error] [pid 1041789:tid 1042018] [client 149.34.210.141:9255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK914v3RhPI65jTFG7cfwAAA3U"]
[Sat Aug 29 05:09:11.779091 2026] [security2:error] [pid 1041789:tid 1042018] [client 149.34.210.141:9255] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK914v3RhPI65jTFG7cfwAAA3U"]
[Sat Aug 29 05:09:11.783485 2026] [security2:error] [pid 1041789:tid 1041952] [client 4.205.62.107:62768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/xa.php"] [unique_id "apK914v3RhPI65jTFG7cgQAAAzM"]
[Sat Aug 29 05:09:11.799139 2026] [security2:error] [pid 1034096:tid 1034286] [client 158.23.184.117:25035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/.well-known/acme-challenge/sx.php"] [unique_id "apK91y04twRPFuquKD3HmgAAAKg"]
[Sat Aug 29 05:09:11.800891 2026] [security2:error] [pid 1034096:tid 1034306] [client 74.248.24.12:29796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK91y04twRPFuquKD3HmwAAALw"]
[Sat Aug 29 05:09:11.807544 2026] [security2:error] [pid 1034096:tid 1034301] [client 20.63.81.20:62807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/kuda.php"] [unique_id "apK91y04twRPFuquKD3HnAAAALc"]
[Sat Aug 29 05:09:11.818649 2026] [security2:error] [pid 1034096:tid 1034293] [client 4.232.148.111:7515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-admin/index.php"] [unique_id "apK91y04twRPFuquKD3HngAAAK8"]
[Sat Aug 29 05:09:11.837933 2026] [security2:error] [pid 1034096:tid 1034267] [client 20.104.104.62:33919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.suzis-light.marketingmagicsecrets.com"] [uri "/admin/function.php"] [unique_id "apK91y04twRPFuquKD3HnwAAAJU"]
[Sat Aug 29 05:09:11.846807 2026] [security2:error] [pid 1034096:tid 1034277] [client 20.196.209.81:1123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/meta.php"] [unique_id "apK91y04twRPFuquKD3HoAAAAJ8"]
[Sat Aug 29 05:09:11.846834 2026] [security2:error] [pid 1034096:tid 1034269] [client 20.48.251.3:14034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/aws_secret_config.php"] [unique_id "apK91y04twRPFuquKD3HoQAAAJc"]
[Sat Aug 29 05:09:11.852394 2026] [security2:error] [pid 1041789:tid 1042028] [client 4.205.62.107:51413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/queue.php"] [unique_id "apK914v3RhPI65jTFG7cggAAA38"]
[Sat Aug 29 05:09:11.857817 2026] [security2:error] [pid 1034096:tid 1034320] [client 68.155.159.216:33771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-content/x/index.php"] [unique_id "apK91y04twRPFuquKD3HogAAAMo"]
[Sat Aug 29 05:09:11.865065 2026] [access_compat:error] [pid 1041789:tid 1041906] [remote 43.130.9.111:0] AH01797: client denied by server configuration: /home1/giantsfa/public_html/, referer: http://www.giantsfans.net
[Sat Aug 29 05:09:11.903918 2026] [security2:error] [pid 1034096:tid 1034322] [client 20.220.204.93:62221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/lkui.php"] [unique_id "apK91y04twRPFuquKD3HowAAAMw"]
[Sat Aug 29 05:09:11.904969 2026] [security2:error] [pid 1034096:tid 1034294] [client 20.104.49.130:57629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/menu.php"] [unique_id "apK91y04twRPFuquKD3HpAAAALA"]
[Sat Aug 29 05:09:11.936570 2026] [security2:error] [pid 1034096:tid 1034374] [client 20.63.81.20:62869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/sure.php"] [unique_id "apK91y04twRPFuquKD3HpQAAAQA"]
[Sat Aug 29 05:09:11.941703 2026] [security2:error] [pid 1041789:tid 1041989] [client 158.23.147.79:6040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-admin/maint/index.php"] [unique_id "apK914v3RhPI65jTFG7chgAAA1g"]
[Sat Aug 29 05:09:11.945063 2026] [security2:error] [pid 1041789:tid 1041983] [client 158.23.184.117:24625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/.well-known/admin.php"] [unique_id "apK914v3RhPI65jTFG7chwAAA1I"]
[Sat Aug 29 05:09:11.969338 2026] [security2:error] [pid 1041789:tid 1042046] [client 4.205.62.107:3922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/avim.php"] [unique_id "apK914v3RhPI65jTFG7ciAAAA5E"]
[Sat Aug 29 05:09:11.972248 2026] [security2:error] [pid 1034096:tid 1034342] [client 20.196.209.81:7779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-content/cong.php"] [unique_id "apK91y04twRPFuquKD3HqAAAAOA"]
[Sat Aug 29 05:09:11.992437 2026] [security2:error] [pid 1041789:tid 1041932] [client 20.63.219.114:2474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/ds.php"] [unique_id "apK914v3RhPI65jTFG7ciQAAAx8"]
[Sat Aug 29 05:09:12.010224 2026] [security2:error] [pid 1041789:tid 1042004] [client 20.196.209.81:18789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-admin/wp-mail.php"] [unique_id "apK92Iv3RhPI65jTFG7cigAAA2c"]
[Sat Aug 29 05:09:12.014647 2026] [security2:error] [pid 1041789:tid 1042007] [client 20.63.219.114:15395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/wp-admin.php"] [unique_id "apK92Iv3RhPI65jTFG7cjAAAA2o"]
[Sat Aug 29 05:09:12.020557 2026] [security2:error] [pid 1034096:tid 1034359] [client 20.48.251.3:13838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/wp-access.php"] [unique_id "apK92C04twRPFuquKD3HqgAAAPE"]
[Sat Aug 29 05:09:12.037753 2026] [security2:error] [pid 1034096:tid 1034321] [client 20.104.104.62:33880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.suzis-light.marketingmagicsecrets.com"] [uri "/ak.php"] [unique_id "apK92C04twRPFuquKD3HqwAAAMs"]
[Sat Aug 29 05:09:12.037868 2026] [security2:error] [pid 1041789:tid 1041948] [client 68.155.159.216:6101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK92Iv3RhPI65jTFG7cjQAAAy8"]
[Sat Aug 29 05:09:12.086738 2026] [security2:error] [pid 1041789:tid 1042025] [client 20.63.81.20:62804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/gray.php"] [unique_id "apK92Iv3RhPI65jTFG7cjgAAA3w"]
[Sat Aug 29 05:09:12.093430 2026] [security2:error] [pid 1034096:tid 1034377] [client 158.158.54.35:29709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/files.php"] [unique_id "apK92C04twRPFuquKD3HrgAAAQM"]
[Sat Aug 29 05:09:12.095637 2026] [security2:error] [pid 1034096:tid 1034276] [client 20.100.175.163:5137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK92C04twRPFuquKD3HrwAAAJ4"]
[Sat Aug 29 05:09:12.097477 2026] [security2:error] [pid 1041789:tid 1042036] [client 158.23.184.117:24626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/.well-known/api.php"] [unique_id "apK92Iv3RhPI65jTFG7cjwAAA4c"]
[Sat Aug 29 05:09:12.106233 2026] [security2:error] [pid 1034096:tid 1034272] [client 20.104.49.130:48566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/az.php"] [unique_id "apK92C04twRPFuquKD3HsQAAAJo"]
[Sat Aug 29 05:09:12.109275 2026] [security2:error] [pid 1034096:tid 1034265] [client 20.220.204.93:64193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "apK92C04twRPFuquKD3HsgAAAJM"]
[Sat Aug 29 05:09:12.118676 2026] [security2:error] [pid 1034096:tid 1034310] [client 68.155.159.216:63846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/classwithtostring.php"] [unique_id "apK92C04twRPFuquKD3HswAAAMA"]
[Sat Aug 29 05:09:12.130503 2026] [security2:error] [pid 1041789:tid 1041994] [client 60.243.207.176:57084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK92Iv3RhPI65jTFG7ckQAAA10"]
[Sat Aug 29 05:09:12.130609 2026] [security2:error] [pid 1041789:tid 1041994] [client 60.243.207.176:57084] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK92Iv3RhPI65jTFG7ckQAAA10"]
[Sat Aug 29 05:09:12.142770 2026] [security2:error] [pid 1041789:tid 1041981] [client 20.151.200.44:63288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/gaje.php"] [unique_id "apK92Iv3RhPI65jTFG7ckgAAA1A"]
[Sat Aug 29 05:09:12.161938 2026] [security2:error] [pid 1041789:tid 1041999] [client 20.48.251.3:13884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/update.php"] [unique_id "apK92Iv3RhPI65jTFG7ckwAAA2I"]
[Sat Aug 29 05:09:12.176394 2026] [security2:error] [pid 1034096:tid 1034312] [client 20.197.61.180:12789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/config.php"] [unique_id "apK92C04twRPFuquKD3HtAAAAMI"]
[Sat Aug 29 05:09:12.176947 2026] [security2:error] [pid 1034096:tid 1034309] [client 68.155.159.216:30702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-content/x/index.php"] [unique_id "apK92C04twRPFuquKD3HtQAAAL8"]
[Sat Aug 29 05:09:12.181497 2026] [security2:error] [pid 1034096:tid 1034324] [client 68.155.159.216:65049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/about/function.php"] [unique_id "apK92C04twRPFuquKD3HtgAAAM4"]
[Sat Aug 29 05:09:12.191307 2026] [security2:error] [pid 1034096:tid 1034313] [client 20.197.61.180:2007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/fi2.php"] [unique_id "apK92C04twRPFuquKD3HtwAAAMM"]
[Sat Aug 29 05:09:12.239698 2026] [security2:error] [pid 1041789:tid 1041940] [client 20.104.104.62:34748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.suzis-light.marketingmagicsecrets.com"] [uri "/alfa-rex.php7"] [unique_id "apK92Iv3RhPI65jTFG7clQAAAyc"]
[Sat Aug 29 05:09:12.243896 2026] [security2:error] [pid 1034096:tid 1034335] [client 158.23.184.117:25062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/.well-known/chosen.php"] [unique_id "apK92C04twRPFuquKD3HuAAAANk"]
[Sat Aug 29 05:09:12.258900 2026] [security2:error] [pid 1034096:tid 1034325] [client 20.63.81.20:62886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/puki.php"] [unique_id "apK92C04twRPFuquKD3HuQAAAM8"]
[Sat Aug 29 05:09:12.260893 2026] [security2:error] [pid 1034096:tid 1034353] [client 68.155.159.216:2016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/admin.php"] [unique_id "apK92C04twRPFuquKD3HugAAAOs"]
[Sat Aug 29 05:09:12.267970 2026] [security2:error] [pid 1041789:tid 1041975] [client 20.220.204.93:62333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/motu.php"] [unique_id "apK92Iv3RhPI65jTFG7clgAAA0o"]
[Sat Aug 29 05:09:12.295344 2026] [security2:error] [pid 1034096:tid 1034264] [client 4.232.148.111:18834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/radio.php"] [unique_id "apK92C04twRPFuquKD3HuwAAAJI"]
[Sat Aug 29 05:09:12.316371 2026] [security2:error] [pid 1034096:tid 1034363] [client 20.48.251.3:13861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/zz.php"] [unique_id "apK92C04twRPFuquKD3HvAAAAPU"]
[Sat Aug 29 05:09:12.338761 2026] [security2:error] [pid 1034096:tid 1034255] [client 20.63.81.20:65226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK92C04twRPFuquKD3HvQAAAIk"]
[Sat Aug 29 05:09:12.349516 2026] [security2:error] [pid 1034096:tid 1034271] [client 20.196.209.81:13921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/dxc.php"] [unique_id "apK92C04twRPFuquKD3HvgAAAJk"]
[Sat Aug 29 05:09:12.366005 2026] [security2:error] [pid 1041789:tid 1041988] [client 20.196.209.81:23970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-content/content.php"] [unique_id "apK92Iv3RhPI65jTFG7cmAAAA1c"]
[Sat Aug 29 05:09:12.385174 2026] [security2:error] [pid 1034096:tid 1034292] [client 20.104.104.62:43118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/pro.php"] [unique_id "apK92C04twRPFuquKD3HvwAAAK4"]
[Sat Aug 29 05:09:12.388879 2026] [security2:error] [pid 1034096:tid 1034317] [client 158.23.184.117:24726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/.well-known/config.php"] [unique_id "apK92C04twRPFuquKD3HwAAAAMc"]
[Sat Aug 29 05:09:12.397836 2026] [security2:error] [pid 1041789:tid 1041978] [client 4.205.62.107:21629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/update.php"] [unique_id "apK92Iv3RhPI65jTFG7cmQAAA00"]
[Sat Aug 29 05:09:12.407098 2026] [security2:error] [pid 1034096:tid 1034375] [client 20.196.209.81:4308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-admin/wp-settings.php"] [unique_id "apK92C04twRPFuquKD3HwQAAAQE"]
[Sat Aug 29 05:09:12.435816 2026] [security2:error] [pid 1041789:tid 1042051] [client 20.104.104.62:62933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/wsz.php"] [unique_id "apK92Iv3RhPI65jTFG7cnAAAA5Y"]
[Sat Aug 29 05:09:12.436681 2026] [security2:error] [pid 1034096:tid 1034374] [client 68.155.159.216:49317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/goat1.php"] [unique_id "apK92C04twRPFuquKD3HxAAAAQA"]
[Sat Aug 29 05:09:12.438565 2026] [security2:error] [pid 1041789:tid 1042011] [client 20.63.81.20:62855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/sonic.php"] [unique_id "apK92Iv3RhPI65jTFG7cngAAA24"]
[Sat Aug 29 05:09:12.439190 2026] [security2:error] [pid 1034096:tid 1034300] [client 20.104.104.62:34732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.suzis-light.marketingmagicsecrets.com"] [uri "/alfa.php"] [unique_id "apK92C04twRPFuquKD3HxQAAALY"]
[Sat Aug 29 05:09:12.455849 2026] [security2:error] [pid 1041789:tid 1041950] [client 20.220.204.93:62222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/Ov-Simple1.php"] [unique_id "apK92Iv3RhPI65jTFG7cnwAAAzE"]
[Sat Aug 29 05:09:12.470744 2026] [security2:error] [pid 1034096:tid 1034351] [client 20.104.104.62:40102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/sef.php"] [unique_id "apK92C04twRPFuquKD3HxwAAAOk"]
[Sat Aug 29 05:09:12.472546 2026] [security2:error] [pid 1034096:tid 1034319] [client 20.197.61.180:1085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/Njima.php"] [unique_id "apK92C04twRPFuquKD3HyAAAAMk"]
[Sat Aug 29 05:09:12.479841 2026] [security2:error] [pid 1041789:tid 1042006] [client 20.48.251.3:14074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/cloud.php"] [unique_id "apK92Iv3RhPI65jTFG7cogAAA2k"]
[Sat Aug 29 05:09:12.487380 2026] [security2:error] [pid 1041789:tid 1041976] [client 20.63.81.20:65256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK92Iv3RhPI65jTFG7cowAAA0s"]
[Sat Aug 29 05:09:12.504714 2026] [security2:error] [pid 1034096:tid 1034315] [client 158.23.184.117:16605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/.dj/index.php"] [unique_id "apK92C04twRPFuquKD3HyQAAAMU"]
[Sat Aug 29 05:09:12.516019 2026] [security2:error] [pid 1041789:tid 1041992] [client 20.104.104.62:43127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/999.php"] [unique_id "apK92Iv3RhPI65jTFG7cpAAAA1s"]
[Sat Aug 29 05:09:12.517204 2026] [security2:error] [pid 1034096:tid 1034269] [client 20.63.219.114:2641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/wp-configs.php"] [unique_id "apK92C04twRPFuquKD3HygAAAJc"]
[Sat Aug 29 05:09:12.532501 2026] [security2:error] [pid 1041789:tid 1042009] [client 158.23.184.117:25028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/.well-known/core.php"] [unique_id "apK92Iv3RhPI65jTFG7cpQAAA2w"]
[Sat Aug 29 05:09:12.534177 2026] [security2:error] [pid 1034096:tid 1034277] [client 20.63.219.114:2662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/GOD.php"] [unique_id "apK92C04twRPFuquKD3HywAAAJ8"]
[Sat Aug 29 05:09:12.547723 2026] [security2:error] [pid 1041789:tid 1042030] [client 158.158.54.35:36978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/o.php"] [unique_id "apK92Iv3RhPI65jTFG7cpgAAA4E"]
[Sat Aug 29 05:09:12.568572 2026] [security2:error] [pid 1041789:tid 1042034] [client 20.63.81.20:62793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/pop.php"] [unique_id "apK92Iv3RhPI65jTFG7cpwAAA4U"]
[Sat Aug 29 05:09:12.581385 2026] [security2:error] [pid 1041789:tid 1041984] [client 20.104.104.62:62946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/msy.php"] [unique_id "apK92Iv3RhPI65jTFG7cqAAAA1M"]
[Sat Aug 29 05:09:12.592742 2026] [security2:error] [pid 1041789:tid 1042022] [client 20.220.204.93:64162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/wp-blogs.php"] [unique_id "apK92Iv3RhPI65jTFG7cqQAAA3k"]
[Sat Aug 29 05:09:12.607232 2026] [security2:error] [pid 1034096:tid 1034303] [client 68.155.159.216:24408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK92C04twRPFuquKD3HzgAAALk"]
[Sat Aug 29 05:09:12.607757 2026] [security2:error] [pid 1041789:tid 1042047] [client 20.104.104.62:37645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/admin123.php"] [unique_id "apK92Iv3RhPI65jTFG7cqgAAA5I"]
[Sat Aug 29 05:09:12.615320 2026] [security2:error] [pid 1034096:tid 1034276] [client 158.23.147.79:5969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-admin.php"] [unique_id "apK92C04twRPFuquKD3HzwAAAJ4"]
[Sat Aug 29 05:09:12.620319 2026] [security2:error] [pid 1041789:tid 1042031] [client 20.48.251.3:13875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/asdf.php"] [unique_id "apK92Iv3RhPI65jTFG7cqwAAA4I"]
[Sat Aug 29 05:09:12.624610 2026] [security2:error] [pid 1034096:tid 1034355] [client 20.63.81.20:63685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/ser.php"] [unique_id "apK92C04twRPFuquKD3H0QAAAO0"]
[Sat Aug 29 05:09:12.643644 2026] [security2:error] [pid 1041789:tid 1041942] [client 20.104.104.62:34689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.suzis-light.marketingmagicsecrets.com"] [uri "/an.php"] [unique_id "apK92Iv3RhPI65jTFG7crAAAAyk"]
[Sat Aug 29 05:09:12.647318 2026] [security2:error] [pid 1041789:tid 1041960] [client 158.23.184.117:16486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/.info.php"] [unique_id "apK92Iv3RhPI65jTFG7crQAAAzs"]
[Sat Aug 29 05:09:12.649619 2026] [security2:error] [pid 1041789:tid 1042029] [client 20.104.104.62:43356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/sef.php"] [unique_id "apK92Iv3RhPI65jTFG7crgAAA4A"]
[Sat Aug 29 05:09:12.651245 2026] [security2:error] [pid 1041789:tid 1042054] [client 68.155.159.216:14332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/makeasmtp.php"] [unique_id "apK92Iv3RhPI65jTFG7crwAAA5k"]
[Sat Aug 29 05:09:12.652242 2026] [security2:error] [pid 1041789:tid 1042003] [client 20.100.175.163:29811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/css/index.php"] [unique_id "apK92Iv3RhPI65jTFG7csAAAA2Y"]
[Sat Aug 29 05:09:12.654902 2026] [security2:error] [pid 1041789:tid 1042049] [client 68.155.159.216:1934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/file88.php"] [unique_id "apK92Iv3RhPI65jTFG7csQAAA5Q"]
[Sat Aug 29 05:09:12.676452 2026] [security2:error] [pid 1041789:tid 1042021] [client 158.23.184.117:25055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/.well-known/data.php"] [unique_id "apK92Iv3RhPI65jTFG7csgAAA3g"]
[Sat Aug 29 05:09:12.695699 2026] [security2:error] [pid 1041789:tid 1041936] [client 158.23.147.79:28084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK92Iv3RhPI65jTFG7cswAAAyM"]
[Sat Aug 29 05:09:12.716143 2026] [security2:error] [pid 1041789:tid 1041941] [client 20.63.81.20:62954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/503.php"] [unique_id "apK92Iv3RhPI65jTFG7ctAAAAyg"]
[Sat Aug 29 05:09:12.724803 2026] [security2:error] [pid 1041789:tid 1042042] [client 74.248.24.12:5711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-load.php"] [unique_id "apK92Iv3RhPI65jTFG7ctQAAA40"]
[Sat Aug 29 05:09:12.726833 2026] [security2:error] [pid 1034096:tid 1034273] [client 20.104.104.62:40252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/anu.php"] [unique_id "apK92C04twRPFuquKD3H1AAAAJs"]
[Sat Aug 29 05:09:12.741936 2026] [security2:error] [pid 1034096:tid 1034350] [client 20.151.200.44:63824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/wp-admin/zwso.php"] [unique_id "apK92C04twRPFuquKD3H1QAAAOg"]
[Sat Aug 29 05:09:12.745600 2026] [security2:error] [pid 1041789:tid 1041933] [client 20.196.209.81:16320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/wp-2019.php"] [unique_id "apK92Iv3RhPI65jTFG7ctgAAAyA"]
[Sat Aug 29 05:09:12.749239 2026] [security2:error] [pid 1034096:tid 1034335] [client 20.104.104.62:64298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/7h.php"] [unique_id "apK92C04twRPFuquKD3H1gAAANk"]
[Sat Aug 29 05:09:12.751219 2026] [security2:error] [pid 1041789:tid 1041952] [client 4.205.62.107:8764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/update.php"] [unique_id "apK92Iv3RhPI65jTFG7ctwAAAzM"]
[Sat Aug 29 05:09:12.754523 2026] [security2:error] [pid 1034096:tid 1034325] [client 20.63.81.20:65177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/431.php"] [unique_id "apK92C04twRPFuquKD3H1wAAAM8"]
[Sat Aug 29 05:09:12.757049 2026] [security2:error] [pid 1034096:tid 1034353] [client 20.48.251.3:14139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/app/Helpers/bladeHelpers.php"] [unique_id "apK92C04twRPFuquKD3H2AAAAOs"]
[Sat Aug 29 05:09:12.758581 2026] [security2:error] [pid 1034096:tid 1034308] [client 20.196.209.81:7787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-content/core.php"] [unique_id "apK92C04twRPFuquKD3H2QAAAL4"]
[Sat Aug 29 05:09:12.781444 2026] [security2:error] [pid 1034096:tid 1034377] [client 4.232.148.111:29626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/item.php"] [unique_id "apK92C04twRPFuquKD3H2gAAAQM"]
[Sat Aug 29 05:09:12.781849 2026] [security2:error] [pid 1034096:tid 1034328] [client 20.104.104.62:42843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/admin123.php"] [unique_id "apK92C04twRPFuquKD3H2wAAANI"]
[Sat Aug 29 05:09:12.786026 2026] [security2:error] [pid 1034096:tid 1034286] [client 20.220.204.93:62280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/mini.php"] [unique_id "apK92C04twRPFuquKD3H3AAAAKg"]
[Sat Aug 29 05:09:12.789460 2026] [security2:error] [pid 1034096:tid 1034264] [client 158.23.147.79:11304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK92C04twRPFuquKD3H3QAAAJI"]
[Sat Aug 29 05:09:12.792210 2026] [security2:error] [pid 1041789:tid 1042018] [client 158.23.184.117:16460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/.trash7206/index.php"] [unique_id "apK92Iv3RhPI65jTFG7cuAAAA3U"]
[Sat Aug 29 05:09:12.798662 2026] [security2:error] [pid 1034096:tid 1034306] [client 158.23.147.79:17626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK92C04twRPFuquKD3H3gAAALw"]
[Sat Aug 29 05:09:12.820239 2026] [security2:error] [pid 1034096:tid 1034302] [client 158.23.184.117:25056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/.well-known/db-status.php"] [unique_id "apK92C04twRPFuquKD3H3wAAALg"]
[Sat Aug 29 05:09:12.821244 2026] [security2:error] [pid 1034096:tid 1034339] [client 20.104.104.62:53830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/siln.php"] [unique_id "apK92C04twRPFuquKD3H4AAAAN0"]
[Sat Aug 29 05:09:12.831876 2026] [security2:error] [pid 1034096:tid 1034324] [client 20.196.209.81:8315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-admin/wp-signup.php"] [unique_id "apK92C04twRPFuquKD3H4QAAAM4"]
[Sat Aug 29 05:09:12.847852 2026] [security2:error] [pid 1034096:tid 1034376] [client 113.199.228.220:13520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 220.228.199.113.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ministeriosemanuel.org"] [uri "/xmlrpc.php"] [unique_id "apK92C04twRPFuquKD3H4gAAAQI"]
[Sat Aug 29 05:09:12.847955 2026] [security2:error] [pid 1034096:tid 1034376] [client 113.199.228.220:13520] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "ministeriosemanuel.org"] [uri "/xmlrpc.php"] [unique_id "apK92C04twRPFuquKD3H4gAAAQI"]
[Sat Aug 29 05:09:12.849277 2026] [security2:error] [pid 1041789:tid 1042037] [client 68.155.159.216:16343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-l0gin.php"] [unique_id "apK92Iv3RhPI65jTFG7cuQAAA4g"]
[Sat Aug 29 05:09:12.851653 2026] [security2:error] [pid 1041789:tid 1042032] [client 20.104.104.62:34707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.suzis-light.marketingmagicsecrets.com"] [uri "/asc.php"] [unique_id "apK92Iv3RhPI65jTFG7cugAAA4M"]
[Sat Aug 29 05:09:12.860831 2026] [security2:error] [pid 1034096:tid 1034317] [client 4.205.62.107:25944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/pass4.php"] [unique_id "apK92C04twRPFuquKD3H5AAAAMc"]
[Sat Aug 29 05:09:12.860886 2026] [security2:error] [pid 1034096:tid 1034320] [client 68.155.159.216:18270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-blog-header.php"] [unique_id "apK92C04twRPFuquKD3H5QAAAMo"]
[Sat Aug 29 05:09:12.861065 2026] [security2:error] [pid 1034096:tid 1034251] [client 68.155.159.216:23491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/makeasmtp.php"] [unique_id "apK92C04twRPFuquKD3H5gAAAIU"]
[Sat Aug 29 05:09:12.867840 2026] [security2:error] [pid 1034096:tid 1034322] [client 4.205.62.107:6971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/lmfi2.php"] [unique_id "apK92C04twRPFuquKD3H5wAAAMw"]
[Sat Aug 29 05:09:12.877224 2026] [security2:error] [pid 1034096:tid 1034272] [client 20.197.61.180:1866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/22.php"] [unique_id "apK92C04twRPFuquKD3H6AAAAJo"]
[Sat Aug 29 05:09:12.878910 2026] [security2:error] [pid 1034096:tid 1034274] [client 68.155.159.216:38305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK92C04twRPFuquKD3H6QAAAJw"]
[Sat Aug 29 05:09:12.879420 2026] [security2:error] [pid 1034096:tid 1034373] [client 20.63.81.20:62901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/fxp.php"] [unique_id "apK92C04twRPFuquKD3H6gAAAP8"]
[Sat Aug 29 05:09:12.883551 2026] [security2:error] [pid 1034096:tid 1034265] [client 20.197.61.180:1031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/1p.php"] [unique_id "apK92C04twRPFuquKD3H6wAAAJM"]
[Sat Aug 29 05:09:12.885933 2026] [security2:error] [pid 1034096:tid 1034298] [client 20.63.81.20:63702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/rxr.php"] [unique_id "apK92C04twRPFuquKD3H7AAAALQ"]
[Sat Aug 29 05:09:12.892101 2026] [security2:error] [pid 1034096:tid 1034365] [client 202.71.25.11:56664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.25.71.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK92C04twRPFuquKD3H7QAAAPc"]
[Sat Aug 29 05:09:12.892180 2026] [security2:error] [pid 1034096:tid 1034365] [client 202.71.25.11:56664] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK92C04twRPFuquKD3H7QAAAPc"]
[Sat Aug 29 05:09:12.899058 2026] [security2:error] [pid 1041789:tid 1041949] [client 20.63.219.114:2491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/essexec.php"] [unique_id "apK92Iv3RhPI65jTFG7cuwAAAzA"]
[Sat Aug 29 05:09:12.900745 2026] [security2:error] [pid 1034096:tid 1034361] [client 20.104.104.62:40126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/wp-gzone.php"] [unique_id "apK92C04twRPFuquKD3H7gAAAPM"]
[Sat Aug 29 05:09:12.916981 2026] [security2:error] [pid 1034096:tid 1034283] [client 20.104.104.62:60703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/7h.php"] [unique_id "apK92C04twRPFuquKD3H7wAAAKU"]
[Sat Aug 29 05:09:12.917814 2026] [security2:error] [pid 1034096:tid 1034260] [client 20.48.251.3:13849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/hochladen.form.php"] [unique_id "apK92C04twRPFuquKD3H8AAAAI4"]
[Sat Aug 29 05:09:12.931941 2026] [security2:error] [pid 1034096:tid 1034301] [client 20.63.219.114:19884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/ggfi.php"] [unique_id "apK92C04twRPFuquKD3H8QAAALc"]
[Sat Aug 29 05:09:12.938374 2026] [security2:error] [pid 1041789:tid 1042044] [client 158.23.184.117:16479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/.trash7206/min.php"] [unique_id "apK92Iv3RhPI65jTFG7cvQAAA48"]
[Sat Aug 29 05:09:12.940064 2026] [security2:error] [pid 1034096:tid 1034269] [client 4.205.62.107:62970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/ws61.php"] [unique_id "apK92C04twRPFuquKD3H8gAAAJc"]
[Sat Aug 29 05:09:12.941085 2026] [security2:error] [pid 1034096:tid 1034340] [client 20.220.204.93:64248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/amp.php"] [unique_id "apK92C04twRPFuquKD3H8wAAAN4"]
[Sat Aug 29 05:09:12.965863 2026] [security2:error] [pid 1041789:tid 1041948] [client 68.155.159.216:33686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK92Iv3RhPI65jTFG7cvwAAAy8"]
[Sat Aug 29 05:09:12.967425 2026] [security2:error] [pid 1034096:tid 1034319] [client 158.23.184.117:25064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/.well-known/f35.php"] [unique_id "apK92C04twRPFuquKD3H9QAAAMk"]
[Sat Aug 29 05:09:12.972913 2026] [security2:error] [pid 1034096:tid 1034316] [client 20.104.104.62:62972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/f-401.php"] [unique_id "apK92C04twRPFuquKD3H9gAAAMY"]
[Sat Aug 29 05:09:12.988185 2026] [security2:error] [pid 1034096:tid 1034296] [client 4.205.62.107:51500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/plss3.php"] [unique_id "apK92C04twRPFuquKD3H9wAAALI"]
[Sat Aug 29 05:09:13.018738 2026] [security2:error] [pid 1034096:tid 1034335] [client 20.63.81.20:65233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/csst.php"] [unique_id "apK92S04twRPFuquKD3H-AAAANk"]
[Sat Aug 29 05:09:13.026404 2026] [security2:error] [pid 1034096:tid 1034292] [client 158.158.54.35:31679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/file2.php"] [unique_id "apK92S04twRPFuquKD3H-QAAAK4"]
[Sat Aug 29 05:09:13.039677 2026] [security2:error] [pid 1034096:tid 1034286] [client 20.104.104.62:64266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/str.php"] [unique_id "apK92S04twRPFuquKD3H-wAAAKg"]
[Sat Aug 29 05:09:13.048240 2026] [security2:error] [pid 1041789:tid 1041986] [client 20.104.104.62:43331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/wp-gzone.php"] [unique_id "apK92Yv3RhPI65jTFG7cwAAAA1U"]
[Sat Aug 29 05:09:13.050857 2026] [security2:error] [pid 1034096:tid 1034363] [client 158.23.147.79:6062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/dropdown.php"] [unique_id "apK92S04twRPFuquKD3H_wAAAPU"]
[Sat Aug 29 05:09:13.083772 2026] [security2:error] [pid 1034096:tid 1034329] [client 158.23.184.117:16595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/.well-known//index.php"] [unique_id "apK92S04twRPFuquKD3IAQAAANM"]
[Sat Aug 29 05:09:13.090072 2026] [security2:error] [pid 1041789:tid 1042036] [client 20.48.251.3:13633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/debuggen.php"] [unique_id "apK92Yv3RhPI65jTFG7cwQAAA4c"]
[Sat Aug 29 05:09:13.090544 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.151.200.44:63181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/Contrller.php"] [unique_id "apK92Yv3RhPI65jTFG7cwgAAA30"]
[Sat Aug 29 05:09:13.094502 2026] [security2:error] [pid 1041789:tid 1041955] [client 20.220.204.93:61723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/cc13.php"] [unique_id "apK92Yv3RhPI65jTFG7cwwAAAzY"]
[Sat Aug 29 05:09:13.112259 2026] [security2:error] [pid 1034096:tid 1034339] [client 158.23.184.117:24596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK92S04twRPFuquKD3IAgAAAN0"]
[Sat Aug 29 05:09:13.113315 2026] [security2:error] [pid 1034096:tid 1034352] [client 4.205.62.107:53139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/nw.php"] [unique_id "apK92S04twRPFuquKD3IAwAAAOo"]
[Sat Aug 29 05:09:13.116232 2026] [security2:error] [pid 1034096:tid 1034322] [client 20.63.81.20:62959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/vv.php"] [unique_id "apK92S04twRPFuquKD3IBAAAAMw"]
[Sat Aug 29 05:09:13.125159 2026] [security2:error] [pid 1034096:tid 1034294] [client 20.104.104.62:53887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/hq.php"] [unique_id "apK92S04twRPFuquKD3IBQAAALA"]
[Sat Aug 29 05:09:13.125592 2026] [security2:error] [pid 1034096:tid 1034252] [client 158.23.147.79:49863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK92S04twRPFuquKD3IBgAAAIY"]
[Sat Aug 29 05:09:13.139077 2026] [security2:error] [pid 1034096:tid 1034262] [client 111.235.68.106:38015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK92S04twRPFuquKD3IBwAAAJA"]
[Sat Aug 29 05:09:13.139254 2026] [security2:error] [pid 1034096:tid 1034262] [client 111.235.68.106:38015] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK92S04twRPFuquKD3IBwAAAJA"]
[Sat Aug 29 05:09:13.142936 2026] [security2:error] [pid 1034096:tid 1034273] [client 20.196.209.81:1145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/menu.php"] [unique_id "apK92S04twRPFuquKD3ICAAAAJs"]
[Sat Aug 29 05:09:13.151687 2026] [security2:error] [pid 1041789:tid 1042053] [client 20.100.175.163:29817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-cron.php"] [unique_id "apK92Yv3RhPI65jTFG7cxAAAA5g"]
[Sat Aug 29 05:09:13.152383 2026] [security2:error] [pid 1034096:tid 1034353] [client 20.196.209.81:23972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-content/db-status.php"] [unique_id "apK92S04twRPFuquKD3ICQAAAOs"]
[Sat Aug 29 05:09:13.156101 2026] [security2:error] [pid 1034096:tid 1034374] [client 20.63.219.114:1399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/post.php"] [unique_id "apK92S04twRPFuquKD3ICwAAAQA"]
[Sat Aug 29 05:09:13.159491 2026] [security2:error] [pid 1041789:tid 1041935] [client 20.63.81.20:63686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/wp-includes/blocks/query-title/footer.php"] [unique_id "apK92Yv3RhPI65jTFG7cxgAAAyI"]
[Sat Aug 29 05:09:13.166541 2026] [security2:error] [pid 1041789:tid 1041940] [client 68.155.159.216:6028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/lock.php"] [unique_id "apK92Yv3RhPI65jTFG7cyQAAAyc"]
[Sat Aug 29 05:09:13.177578 2026] [security2:error] [pid 1041789:tid 1041964] [client 20.197.61.180:1917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/configs.php"] [unique_id "apK92Yv3RhPI65jTFG7cygAAAz8"]
[Sat Aug 29 05:09:13.178184 2026] [security2:error] [pid 1034096:tid 1034283] [client 20.104.104.62:42839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/str.php"] [unique_id "apK92S04twRPFuquKD3IDAAAAKU"]
[Sat Aug 29 05:09:13.185889 2026] [security2:error] [pid 1034096:tid 1034369] [client 20.104.104.62:40124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/mega.php"] [unique_id "apK92S04twRPFuquKD3IDQAAAPs"]
[Sat Aug 29 05:09:13.219058 2026] [security2:error] [pid 1041789:tid 1042045] [client 20.104.49.130:53642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/wp-login.php"] [unique_id "apK92Yv3RhPI65jTFG7cyAAAA5A"]
[Sat Aug 29 05:09:13.225004 2026] [security2:error] [pid 1041789:tid 1041988] [client 20.104.104.62:20690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/loip2.php"] [unique_id "apK92Yv3RhPI65jTFG7cywAAA1c"]
[Sat Aug 29 05:09:13.225155 2026] [security2:error] [pid 1034096:tid 1034340] [client 68.155.159.216:64503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/install.php"] [unique_id "apK92S04twRPFuquKD3IDgAAAN4"]
[Sat Aug 29 05:09:13.226611 2026] [security2:error] [pid 1041789:tid 1041971] [client 20.48.251.3:13868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/pouhg.php"] [unique_id "apK92Yv3RhPI65jTFG7czAAAA0Y"]
[Sat Aug 29 05:09:13.227890 2026] [security2:error] [pid 1041789:tid 1041947] [client 158.23.184.117:16484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/.well-known/about.php"] [unique_id "apK92Yv3RhPI65jTFG7czQAAAy4"]
[Sat Aug 29 05:09:13.230421 2026] [security2:error] [pid 1034096:tid 1034314] [client 20.196.209.81:4649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-blog-header.php"] [unique_id "apK92S04twRPFuquKD3IDwAAAMQ"]
[Sat Aug 29 05:09:13.247331 2026] [security2:error] [pid 1041789:tid 1042036] [client 4.232.148.111:35294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/t.php"] [unique_id "apK92Yv3RhPI65jTFG7czwAAA4c"]
[Sat Aug 29 05:09:13.256561 2026] [security2:error] [pid 1034096:tid 1034303] [client 20.63.81.20:62881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/bossu.php"] [unique_id "apK92S04twRPFuquKD3IEQAAALk"]
[Sat Aug 29 05:09:13.257236 2026] [security2:error] [pid 1034096:tid 1034319] [client 20.104.104.62:63016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/mh.php"] [unique_id "apK92S04twRPFuquKD3IEgAAAMk"]
[Sat Aug 29 05:09:13.258392 2026] [security2:error] [pid 1041789:tid 1041993] [client 158.23.184.117:24581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/.well-known/home.php"] [unique_id "apK92Yv3RhPI65jTFG7c0AAAA1w"]
[Sat Aug 29 05:09:13.265409 2026] [security2:error] [pid 1041789:tid 1042011] [client 20.220.204.93:62224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/aa.php"] [unique_id "apK92Yv3RhPI65jTFG7c0QAAA24"]
[Sat Aug 29 05:09:13.269040 2026] [security2:error] [pid 1034096:tid 1034276] [client 20.151.200.44:63251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/Zeiss.php"] [unique_id "apK92S04twRPFuquKD3IEwAAAJ4"]
[Sat Aug 29 05:09:13.286665 2026] [security2:error] [pid 1034096:tid 1034265] [client 20.63.219.114:2070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/hello.php"] [unique_id "apK92S04twRPFuquKD3IFAAAAJM"]
[Sat Aug 29 05:09:13.292606 2026] [security2:error] [pid 1041789:tid 1042006] [client 20.63.81.20:65206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/wp-content/uploads/indoex.php"] [unique_id "apK92Yv3RhPI65jTFG7c0gAAA2k"]
[Sat Aug 29 05:09:13.303826 2026] [security2:error] [pid 1041789:tid 1041951] [client 68.155.159.216:65065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK92Yv3RhPI65jTFG7c0wAAAzI"]
[Sat Aug 29 05:09:13.306313 2026] [security2:error] [pid 1041789:tid 1041961] [client 68.155.159.216:30538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK92Yv3RhPI65jTFG7c1AAAAzw"]
[Sat Aug 29 05:09:13.312163 2026] [security2:error] [pid 1034096:tid 1034368] [client 20.104.104.62:43093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/mega.php"] [unique_id "apK92S04twRPFuquKD3IFQAAAPo"]
[Sat Aug 29 05:09:13.315785 2026] [security2:error] [pid 1034096:tid 1034310] [client 20.104.104.62:37686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/ww3.php"] [unique_id "apK92S04twRPFuquKD3IFgAAAMA"]
[Sat Aug 29 05:09:13.345701 2026] [security2:error] [pid 1034096:tid 1034376] [client 68.155.159.216:52855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK92S04twRPFuquKD3IFwAAAQI"]
[Sat Aug 29 05:09:13.354131 2026] [security2:error] [pid 1034096:tid 1034320] [client 20.104.49.130:60744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/zoo2.php"] [unique_id "apK92S04twRPFuquKD3IGAAAAMo"]
[Sat Aug 29 05:09:13.363737 2026] [security2:error] [pid 1041789:tid 1041980] [client 20.48.251.3:14091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/adminfus.php"] [unique_id "apK92Yv3RhPI65jTFG7c1QAAA08"]
[Sat Aug 29 05:09:13.367726 2026] [security2:error] [pid 1034096:tid 1034267] [client 68.155.159.216:1949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-admin/admin.php"] [unique_id "apK92S04twRPFuquKD3IGgAAAJU"]
[Sat Aug 29 05:09:13.387345 2026] [security2:error] [pid 1034096:tid 1034352] [client 20.104.104.62:34688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.suzis-light.marketingmagicsecrets.com"] [uri "/content.php"] [unique_id "apK92S04twRPFuquKD3IHAAAAOo"]
[Sat Aug 29 05:09:13.391654 2026] [security2:error] [pid 1034096:tid 1034322] [client 20.63.81.20:62914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/504.php"] [unique_id "apK92S04twRPFuquKD3IHQAAAMw"]
[Sat Aug 29 05:09:13.399172 2026] [security2:error] [pid 1041789:tid 1042029] [client 20.104.104.62:62968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/f2r4.php"] [unique_id "apK92Yv3RhPI65jTFG7c1wAAA4A"]
[Sat Aug 29 05:09:13.401322 2026] [security2:error] [pid 1034096:tid 1034275] [client 158.23.184.117:24633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/.well-known/index.php"] [unique_id "apK92S04twRPFuquKD3IHgAAAJ0"]
[Sat Aug 29 05:09:13.409704 2026] [security2:error] [pid 1041789:tid 1041967] [client 20.104.49.130:34510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/v2.php"] [unique_id "apK92Yv3RhPI65jTFG7c2AAAA0I"]
[Sat Aug 29 05:09:13.420061 2026] [security2:error] [pid 1034096:tid 1034262] [client 20.63.81.20:65227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK92S04twRPFuquKD3IIAAAAJA"]
[Sat Aug 29 05:09:13.428243 2026] [security2:error] [pid 1041789:tid 1041936] [client 20.220.204.93:64174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/s1.php"] [unique_id "apK92Yv3RhPI65jTFG7c2QAAAyM"]
[Sat Aug 29 05:09:13.429631 2026] [security2:error] [pid 1034096:tid 1034273] [client 158.23.184.117:16592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK92S04twRPFuquKD3IIQAAAJs"]
[Sat Aug 29 05:09:13.432236 2026] [security2:error] [pid 1034096:tid 1034372] [client 74.248.24.12:12754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/a.php"] [unique_id "apK92S04twRPFuquKD3IIgAAAP4"]
[Sat Aug 29 05:09:13.434925 2026] [security2:error] [pid 1041789:tid 1042052] [client 20.104.104.62:4831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK92Yv3RhPI65jTFG7c2gAAA5c"]
[Sat Aug 29 05:09:13.444253 2026] [security2:error] [pid 1041789:tid 1041944] [client 20.104.104.62:37685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/sko.php"] [unique_id "apK92Yv3RhPI65jTFG7c2wAAAys"]
[Sat Aug 29 05:09:13.444423 2026] [security2:error] [pid 1034096:tid 1034353] [client 20.104.104.62:43082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/ww3.php"] [unique_id "apK92S04twRPFuquKD3IIwAAAOs"]
[Sat Aug 29 05:09:13.460814 2026] [security2:error] [pid 1041789:tid 1041957] [client 20.63.219.114:10536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/alfa-rex.php"] [unique_id "apK92Yv3RhPI65jTFG7c5gAAAzg"]
[Sat Aug 29 05:09:13.467274 2026] [security2:error] [pid 1041789:tid 1042022] [client 35.221.212.112:3870] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "autodiscover.beraluzarchive.org"] [uri "/.ssh/id_ecdsa"] [unique_id "apK92Yv3RhPI65jTFG7c8wAAA3k"]
[Sat Aug 29 05:09:13.469310 2026] [security2:error] [pid 1034096:tid 1034318] [client 35.221.212.112:3858] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/.ssh/id_dsa"] [unique_id "apK92S04twRPFuquKD3ILwAAAMg"]
[Sat Aug 29 05:09:13.469948 2026] [security2:error] [pid 1041789:tid 1041984] [client 35.221.212.112:3822] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/.ssh/id_rsa"] [unique_id "apK92Yv3RhPI65jTFG7c7QAAA1M"]
[Sat Aug 29 05:09:13.479827 2026] [security2:error] [pid 1034096:tid 1034304] [client 158.158.54.35:30626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK92S04twRPFuquKD3IRAAAALo"]
[Sat Aug 29 05:09:13.518707 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.48.251.3:33335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/avim.php"] [unique_id "apK92Yv3RhPI65jTFG7dCAAAA30"]
[Sat Aug 29 05:09:13.541595 2026] [security2:error] [pid 1034096:tid 1034339] [client 4.205.62.107:21924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/channels.php"] [unique_id "apK92S04twRPFuquKD3IVAAAAN0"]
[Sat Aug 29 05:09:13.547621 2026] [security2:error] [pid 1041789:tid 1042021] [client 20.196.209.81:7755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-content/disagrsxr.php"] [unique_id "apK92Yv3RhPI65jTFG7dCgAAA3g"]
[Sat Aug 29 05:09:13.549175 2026] [security2:error] [pid 1034096:tid 1034286] [client 20.104.104.62:56553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/sadis.php"] [unique_id "apK92S04twRPFuquKD3IVQAAAKg"]
[Sat Aug 29 05:09:13.549873 2026] [security2:error] [pid 1034096:tid 1034376] [client 158.23.184.117:25081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/.well-known/login.php"] [unique_id "apK92S04twRPFuquKD3IVgAAAQI"]
[Sat Aug 29 05:09:13.549873 2026] [security2:error] [pid 1041789:tid 1042027] [client 20.196.209.81:1100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/alfa.php"] [unique_id "apK92Yv3RhPI65jTFG7dCwAAA34"]
[Sat Aug 29 05:09:13.557347 2026] [security2:error] [pid 1034096:tid 1034352] [client 68.155.159.216:49231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK92S04twRPFuquKD3IVwAAAOo"]
[Sat Aug 29 05:09:13.559748 2026] [security2:error] [pid 1034096:tid 1034275] [client 20.63.81.20:62897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/nice.php"] [unique_id "apK92S04twRPFuquKD3IWAAAAJ0"]
[Sat Aug 29 05:09:13.560006 2026] [security2:error] [pid 1034096:tid 1034294] [client 20.104.104.62:40222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/json.php"] [unique_id "apK92S04twRPFuquKD3IWQAAALA"]
[Sat Aug 29 05:09:13.571162 2026] [security2:error] [pid 1041789:tid 1041981] [client 20.104.104.62:37654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/zoz.php"] [unique_id "apK92Yv3RhPI65jTFG7dDAAAA1A"]
[Sat Aug 29 05:09:13.573701 2026] [security2:error] [pid 1041789:tid 1042010] [client 158.23.184.117:16603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/.well-known/acme-challenge/content.php"] [unique_id "apK92Yv3RhPI65jTFG7dDQAAA20"]
[Sat Aug 29 05:09:13.575245 2026] [security2:error] [pid 1041789:tid 1042053] [client 20.63.81.20:65172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/haxor.php"] [unique_id "apK92Yv3RhPI65jTFG7dDgAAA5g"]
[Sat Aug 29 05:09:13.577928 2026] [security2:error] [pid 1041789:tid 1042020] [client 20.104.104.62:43063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK92Yv3RhPI65jTFG7dDwAAA3c"]
[Sat Aug 29 05:09:13.582436 2026] [security2:error] [pid 1041789:tid 1041994] [client 20.104.104.62:34697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.suzis-light.marketingmagicsecrets.com"] [uri "/hplfuns.php"] [unique_id "apK92Yv3RhPI65jTFG7dEAAAA10"]
[Sat Aug 29 05:09:13.584388 2026] [proxy_http:error] [pid 1017536:tid 1017703] (70007)The timeout specified has expired: [client 127.0.0.1:24404] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:09:13.584408 2026] [proxy:error] [pid 1017536:tid 1017703] [client 127.0.0.1:24404] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:09:13.590258 2026] [security2:error] [pid 1034096:tid 1034367] [client 20.197.61.180:12782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/bak.phps"] [unique_id "apK92S04twRPFuquKD3IWgAAAPk"]
[Sat Aug 29 05:09:13.591123 2026] [security2:error] [pid 1034096:tid 1034252] [client 20.104.104.62:41955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/sko.php"] [unique_id "apK92S04twRPFuquKD3IWwAAAIY"]
[Sat Aug 29 05:09:13.600770 2026] [security2:error] [pid 1041789:tid 1041952] [client 127.0.0.1:57130] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK92Yv3RhPI65jTFG7c9AAAAzM"]
[Sat Aug 29 05:09:13.600826 2026] [security2:error] [pid 1041789:tid 1041941] [client 127.0.0.1:57054] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.beraluzarchive.org"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK92Yv3RhPI65jTFG7c6gAAAyg"]
[Sat Aug 29 05:09:13.600847 2026] [security2:error] [pid 1034096:tid 1034296] [client 35.221.212.112:3652] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.beraluzarchive.org"] [uri "/app-config.json"] [unique_id "apK92S04twRPFuquKD3IJQAAALI"]
[Sat Aug 29 05:09:13.601251 2026] [security2:error] [pid 1034096:tid 1034251] [client 20.197.61.180:2020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/Njima.php"] [unique_id "apK92S04twRPFuquKD3IXAAAAIU"]
[Sat Aug 29 05:09:13.604106 2026] [security2:error] [pid 1034096:tid 1034303] [client 20.63.219.114:10477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/flower.php"] [unique_id "apK92S04twRPFuquKD3IXQAAALk"]
[Sat Aug 29 05:09:13.614054 2026] [security2:error] [pid 1034096:tid 1034374] [client 20.104.49.130:46569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/abc.php"] [unique_id "apK92S04twRPFuquKD3IXgAAAQA"]
[Sat Aug 29 05:09:13.622643 2026] [security2:error] [pid 1041789:tid 1042051] [client 61.9.8.240:11931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK92Yv3RhPI65jTFG7dEwAAA5Y"]
[Sat Aug 29 05:09:13.622741 2026] [security2:error] [pid 1041789:tid 1042051] [client 61.9.8.240:11931] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK92Yv3RhPI65jTFG7dEwAAA5Y"]
[Sat Aug 29 05:09:13.625109 2026] [security2:error] [pid 1034096:tid 1034271] [client 20.196.209.81:4668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-blogs.php"] [unique_id "apK92S04twRPFuquKD3IXwAAAJk"]
[Sat Aug 29 05:09:13.638713 2026] [security2:error] [pid 1034096:tid 1034263] [client 20.151.200.44:63920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/ww2.php"] [unique_id "apK92S04twRPFuquKD3IYQAAAJE"]
[Sat Aug 29 05:09:13.651284 2026] [security2:error] [pid 1034096:tid 1034323] [client 20.100.175.163:5133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-block.php"] [unique_id "apK92S04twRPFuquKD3IYwAAAM0"]
[Sat Aug 29 05:09:13.679287 2026] [security2:error] [pid 1034096:tid 1034329] [client 20.48.251.3:14007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/nw.php"] [unique_id "apK92S04twRPFuquKD3IZAAAANM"]
[Sat Aug 29 05:09:13.687760 2026] [security2:error] [pid 1034096:tid 1034320] [client 20.104.104.62:56538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/xcre1.php"] [unique_id "apK92S04twRPFuquKD3IZQAAAMo"]
[Sat Aug 29 05:09:13.694661 2026] [security2:error] [pid 1034096:tid 1034322] [client 20.63.219.114:10546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/fi2.php"] [unique_id "apK92S04twRPFuquKD3IZgAAAMw"]
[Sat Aug 29 05:09:13.695552 2026] [security2:error] [pid 1041789:tid 1042001] [client 158.23.184.117:51584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/.well-known/logs233/index.php"] [unique_id "apK92Yv3RhPI65jTFG7dFQAAA2Q"]
[Sat Aug 29 05:09:13.708119 2026] [security2:error] [pid 1034096:tid 1034267] [client 20.63.81.20:62794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/beence.php"] [unique_id "apK92S04twRPFuquKD3IZwAAAJU"]
[Sat Aug 29 05:09:13.713976 2026] [security2:error] [pid 1041789:tid 1042048] [client 158.23.147.79:6009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-includes/assets/index.php"] [unique_id "apK92Yv3RhPI65jTFG7dFgAAA5M"]
[Sat Aug 29 05:09:13.716815 2026] [security2:error] [pid 1034096:tid 1034286] [client 68.155.159.216:24486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/nf_tracking.php"] [unique_id "apK92S04twRPFuquKD3IaAAAAKg"]
[Sat Aug 29 05:09:13.719807 2026] [security2:error] [pid 1034096:tid 1034376] [client 20.63.81.20:65188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/google.php"] [unique_id "apK92S04twRPFuquKD3IaQAAAQI"]
[Sat Aug 29 05:09:13.720560 2026] [security2:error] [pid 1041789:tid 1041950] [client 20.104.104.62:4139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/baee.php"] [unique_id "apK92Yv3RhPI65jTFG7dFwAAAzE"]
[Sat Aug 29 05:09:13.722296 2026] [security2:error] [pid 1034096:tid 1034352] [client 20.104.104.62:42876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/zoz.php"] [unique_id "apK92S04twRPFuquKD3IagAAAOo"]
[Sat Aug 29 05:09:13.729287 2026] [security2:error] [pid 1034096:tid 1034294] [client 20.220.204.93:62328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/0byte.php"] [unique_id "apK92S04twRPFuquKD3IbQAAALA"]
[Sat Aug 29 05:09:13.739985 2026] [security2:error] [pid 1041789:tid 1041998] [client 4.232.148.111:3801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/i.php"] [unique_id "apK92Yv3RhPI65jTFG7dGQAAA2E"]
[Sat Aug 29 05:09:13.744192 2026] [security2:error] [pid 1034096:tid 1034367] [client 20.104.104.62:64257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/mmm.php"] [unique_id "apK92S04twRPFuquKD3IbgAAAPk"]
[Sat Aug 29 05:09:13.760542 2026] [security2:error] [pid 1041789:tid 1041991] [client 68.155.159.216:1987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/NewFile.php/"] [unique_id "apK92Yv3RhPI65jTFG7dGgAAA1o"]
[Sat Aug 29 05:09:13.775823 2026] [security2:error] [pid 1034096:tid 1034273] [client 158.23.184.117:16598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK92S04twRPFuquKD3IcAAAAJs"]
[Sat Aug 29 05:09:13.799721 2026] [security2:error] [pid 1034096:tid 1034332] [client 20.104.104.62:34705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.suzis-light.marketingmagicsecrets.com"] [uri "/iko.php"] [unique_id "apK92S04twRPFuquKD3IcQAAANY"]
[Sat Aug 29 05:09:13.809853 2026] [security2:error] [pid 1041789:tid 1041960] [client 158.23.147.79:28045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK92Yv3RhPI65jTFG7dGwAAAzs"]
[Sat Aug 29 05:09:13.811051 2026] [security2:error] [pid 1041789:tid 1041980] [client 4.232.148.111:11921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/.trash7206/index.php"] [unique_id "apK92Yv3RhPI65jTFG7dHAAAA08"]
[Sat Aug 29 05:09:13.821488 2026] [security2:error] [pid 1034096:tid 1034359] [client 127.0.0.1:57308] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK92S04twRPFuquKD3ISAAAAPE"]
[Sat Aug 29 05:09:13.821506 2026] [security2:error] [pid 1041789:tid 1042028] [client 127.0.0.1:57148] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.beraluzarchive.org"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK92Yv3RhPI65jTFG7c9gAAA38"]
[Sat Aug 29 05:09:13.821534 2026] [security2:error] [pid 1041789:tid 1041997] [client 35.221.212.112:3682] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.beraluzarchive.org"] [uri "/api/env"] [unique_id "apK92Yv3RhPI65jTFG7c4AAAA2A"]
[Sat Aug 29 05:09:13.825098 2026] [security2:error] [pid 1034096:tid 1034368] [client 20.104.104.62:65253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/motu.php"] [unique_id "apK92S04twRPFuquKD3IcgAAAPo"]
[Sat Aug 29 05:09:13.827921 2026] [security2:error] [pid 1034096:tid 1034329] [client 20.48.251.3:14307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/fun.php"] [unique_id "apK92S04twRPFuquKD3IcwAAANM"]
[Sat Aug 29 05:09:13.842443 2026] [security2:error] [pid 1041789:tid 1042011] [client 20.63.219.114:10510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/cookie.php"] [unique_id "apK92Yv3RhPI65jTFG7dHQAAA24"]
[Sat Aug 29 05:09:13.842954 2026] [security2:error] [pid 1041789:tid 1042004] [client 127.0.0.1:57382] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK92Yv3RhPI65jTFG7dAgAAA2c"]
[Sat Aug 29 05:09:13.842970 2026] [security2:error] [pid 1034096:tid 1034315] [client 127.0.0.1:57232] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.beraluzarchive.org"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK92S04twRPFuquKD3IPwAAAMU"]
[Sat Aug 29 05:09:13.843040 2026] [security2:error] [pid 1041789:tid 1042013] [client 35.221.212.112:3742] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.beraluzarchive.org"] [uri "/serviceAccountKey.json"] [unique_id "apK92Yv3RhPI65jTFG7c6AAAA3A"]
[Sat Aug 29 05:09:13.844326 2026] [security2:error] [pid 1034096:tid 1034309] [client 158.23.184.117:24716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/.well-known/maintenance.php"] [unique_id "apK92S04twRPFuquKD3IdAAAAL8"]
[Sat Aug 29 05:09:13.852550 2026] [security2:error] [pid 1034096:tid 1034313] [client 20.63.81.20:65187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "apK92S04twRPFuquKD3IdQAAAMM"]
[Sat Aug 29 05:09:13.853392 2026] [security2:error] [pid 1041789:tid 1042029] [client 20.63.81.20:62796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/222.php"] [unique_id "apK92Yv3RhPI65jTFG7dHgAAA4A"]
[Sat Aug 29 05:09:13.861150 2026] [security2:error] [pid 1034096:tid 1034267] [client 20.104.104.62:60682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/mmm.php"] [unique_id "apK92S04twRPFuquKD3IdgAAAJU"]
[Sat Aug 29 05:09:13.864475 2026] [security2:error] [pid 1034096:tid 1034292] [client 20.220.204.93:62327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/xr.php"] [unique_id "apK92S04twRPFuquKD3IdwAAAK4"]
[Sat Aug 29 05:09:13.873846 2026] [security2:error] [pid 1041789:tid 1041967] [client 20.104.104.62:43069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/d12.php"] [unique_id "apK92Yv3RhPI65jTFG7dHwAAA0I"]
[Sat Aug 29 05:09:13.874853 2026] [security2:error] [pid 1034096:tid 1034365] [client 20.104.104.62:40253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/java.php"] [unique_id "apK92S04twRPFuquKD3IeQAAAPc"]
[Sat Aug 29 05:09:13.876669 2026] [security2:error] [pid 1041789:tid 1042040] [client 20.104.104.62:37678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/advanced.php"] [unique_id "apK92Yv3RhPI65jTFG7dIAAAA4s"]
[Sat Aug 29 05:09:13.911332 2026] [security2:error] [pid 1034096:tid 1034307] [client 127.0.0.1:57346] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK92S04twRPFuquKD3ISwAAAL0"]
[Sat Aug 29 05:09:13.911498 2026] [security2:error] [pid 1041789:tid 1041977] [client 127.0.0.1:57170] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.beraluzarchive.org"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK92Yv3RhPI65jTFG7c-AAAA0w"]
[Sat Aug 29 05:09:13.911652 2026] [security2:error] [pid 1041789:tid 1041946] [client 35.221.212.112:3648] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.beraluzarchive.org"] [uri "/config.js"] [unique_id "apK92Yv3RhPI65jTFG7c3wAAAy0"]
[Sat Aug 29 05:09:13.922754 2026] [security2:error] [pid 1041789:tid 1042049] [client 158.23.184.117:16584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/.well-known/acme-challenge/sx.php"] [unique_id "apK92Yv3RhPI65jTFG7dIQAAA5Q"]
[Sat Aug 29 05:09:13.927866 2026] [security2:error] [pid 1041789:tid 1041947] [client 20.197.61.180:1029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/disagraeed.php"] [unique_id "apK92Yv3RhPI65jTFG7dIwAAAy4"]
[Sat Aug 29 05:09:13.934796 2026] [security2:error] [pid 1041789:tid 1041987] [client 4.205.62.107:8962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/fns.php"] [unique_id "apK92Yv3RhPI65jTFG7dJAAAA1Y"]
[Sat Aug 29 05:09:13.936590 2026] [security2:error] [pid 1034096:tid 1034266] [client 158.158.54.35:13024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/xda.php"] [unique_id "apK92S04twRPFuquKD3IegAAAJQ"]
[Sat Aug 29 05:09:13.950271 2026] [security2:error] [pid 1034096:tid 1034361] [client 20.196.209.81:1243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/feed-rss2-queue.php"] [unique_id "apK92S04twRPFuquKD3IewAAAPM"]
[Sat Aug 29 05:09:13.950968 2026] [security2:error] [pid 1041789:tid 1042005] [client 20.196.209.81:7752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-content/f35.php"] [unique_id "apK92Yv3RhPI65jTFG7dJgAAA2g"]
[Sat Aug 29 05:09:13.951344 2026] [security2:error] [pid 1034096:tid 1034373] [client 158.23.147.79:17632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/classwithtostring.php"] [unique_id "apK92S04twRPFuquKD3IfAAAAP8"]
[Sat Aug 29 05:09:13.967812 2026] [security2:error] [pid 1041789:tid 1041943] [client 68.155.159.216:18324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK92Yv3RhPI65jTFG7dJwAAAyo"]
[Sat Aug 29 05:09:13.968631 2026] [security2:error] [pid 1034096:tid 1034293] [client 20.63.219.114:10608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/meta.php"] [unique_id "apK92S04twRPFuquKD3IfQAAAK8"]
[Sat Aug 29 05:09:13.973037 2026] [security2:error] [pid 1041789:tid 1042042] [client 20.48.251.3:13635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/oc460l3x.php"] [unique_id "apK92Yv3RhPI65jTFG7dKAAAA40"]
[Sat Aug 29 05:09:13.974948 2026] [security2:error] [pid 1034096:tid 1034300] [client 74.248.24.12:12757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/u.php"] [unique_id "apK92S04twRPFuquKD3IfgAAALY"]
[Sat Aug 29 05:09:13.976765 2026] [security2:error] [pid 1034096:tid 1034260] [client 20.104.104.62:2439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/wefile.php"] [unique_id "apK92S04twRPFuquKD3IfwAAAI4"]
[Sat Aug 29 05:09:13.984787 2026] [security2:error] [pid 1034096:tid 1034296] [client 114.119.157.231:34253] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.mikeycunningham.com"] [uri "/blog/2017/11"] [unique_id "apK92S04twRPFuquKD3IgAAAALI"], referer: http://www.mikeycunningham.com/blog/2017/11
[Sat Aug 29 05:09:13.985351 2026] [security2:error] [pid 1034096:tid 1034344] [client 68.155.159.216:38286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-admin.php"] [unique_id "apK92S04twRPFuquKD3IgQAAAOI"]
[Sat Aug 29 05:09:13.989287 2026] [security2:error] [pid 1034096:tid 1034251] [client 20.104.104.62:43336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/advanced.php"] [unique_id "apK92S04twRPFuquKD3IggAAAIU"]
[Sat Aug 29 05:09:13.994055 2026] [security2:error] [pid 1041789:tid 1042020] [client 20.63.81.20:62870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/ops.php"] [unique_id "apK92Yv3RhPI65jTFG7dKQAAA3c"]
[Sat Aug 29 05:09:13.995125 2026] [security2:error] [pid 1041789:tid 1041955] [client 158.23.184.117:25034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/.well-known/min.php"] [unique_id "apK92Yv3RhPI65jTFG7dKgAAAzY"]
[Sat Aug 29 05:09:13.997993 2026] [security2:error] [pid 1034096:tid 1034372] [client 68.155.159.216:23427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK92S04twRPFuquKD3IgwAAAP4"]
[Sat Aug 29 05:09:13.999003 2026] [security2:error] [pid 1034096:tid 1034351] [client 4.205.62.107:65487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/cu.php"] [unique_id "apK92S04twRPFuquKD3IhAAAAOk"]
[Sat Aug 29 05:09:13.999009 2026] [security2:error] [pid 1041789:tid 1041935] [client 20.63.81.20:65269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/robots.php"] [unique_id "apK92Yv3RhPI65jTFG7dKwAAAyI"]
[Sat Aug 29 05:09:14.002160 2026] [security2:error] [pid 1034096:tid 1034273] [client 4.205.62.107:6937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/wpver.php"] [unique_id "apK92i04twRPFuquKD3IhQAAAJs"]
[Sat Aug 29 05:09:14.002855 2026] [security2:error] [pid 1034096:tid 1034298] [client 158.23.147.79:11421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-admin/images/about.php"] [unique_id "apK92i04twRPFuquKD3IhgAAALQ"]
[Sat Aug 29 05:09:14.012982 2026] [security2:error] [pid 1041789:tid 1042009] [client 20.151.200.44:64501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/anz.php"] [unique_id "apK92ov3RhPI65jTFG7dLQAAA2w"]
[Sat Aug 29 05:09:14.014246 2026] [security2:error] [pid 1041789:tid 1042056] [client 20.104.104.62:64309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/blox.php"] [unique_id "apK92ov3RhPI65jTFG7dLgAAA5s"]
[Sat Aug 29 05:09:14.026684 2026] [security2:error] [pid 1041789:tid 1042052] [client 20.196.209.81:8658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-comments-post.php"] [unique_id "apK92ov3RhPI65jTFG7dLwAAA5c"]
[Sat Aug 29 05:09:14.027539 2026] [security2:error] [pid 1034096:tid 1034371] [client 20.220.204.93:64186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/h02ugyh.php"] [unique_id "apK92i04twRPFuquKD3IiAAAAP0"]
[Sat Aug 29 05:09:14.033589 2026] [security2:error] [pid 1034096:tid 1034318] [client 20.104.104.62:43027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/yyy.php"] [unique_id "apK92i04twRPFuquKD3IiQAAAMg"]
[Sat Aug 29 05:09:14.053728 2026] [security2:error] [pid 1034096:tid 1034253] [client 127.0.0.1:57426] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK92S04twRPFuquKD3ITwAAAIc"]
[Sat Aug 29 05:09:14.053767 2026] [security2:error] [pid 1041789:tid 1042037] [client 127.0.0.1:57250] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.beraluzarchive.org"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK92Yv3RhPI65jTFG7c_AAAA4g"]
[Sat Aug 29 05:09:14.053954 2026] [security2:error] [pid 1041789:tid 1042012] [client 35.221.212.112:3718] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.beraluzarchive.org"] [uri "/api/v1/settings"] [unique_id "apK92Yv3RhPI65jTFG7c6QAAA28"]
[Sat Aug 29 05:09:14.072458 2026] [security2:error] [pid 1034096:tid 1034308] [client 158.23.184.117:16480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/.well-known/admin.php"] [unique_id "apK92i04twRPFuquKD3IigAAAL4"]
[Sat Aug 29 05:09:14.079178 2026] [security2:error] [pid 1041789:tid 1042055] [client 68.155.159.216:33759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK92ov3RhPI65jTFG7dMAAAA5o"]
[Sat Aug 29 05:09:14.085911 2026] [security2:error] [pid 1034096:tid 1034367] [client 20.63.219.114:15363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/1p.php"] [unique_id "apK92i04twRPFuquKD3IjAAAAPk"]
[Sat Aug 29 05:09:14.094219 2026] [security2:error] [pid 1041789:tid 1042036] [client 4.205.62.107:62759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/xza.php"] [unique_id "apK92ov3RhPI65jTFG7dMgAAA4c"]
[Sat Aug 29 05:09:14.116471 2026] [security2:error] [pid 1034096:tid 1034339] [client 20.104.104.62:53833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/EM.php"] [unique_id "apK92i04twRPFuquKD3IjQAAAN0"]
[Sat Aug 29 05:09:14.129373 2026] [security2:error] [pid 1034096:tid 1034302] [client 20.104.104.62:42825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/blox.php"] [unique_id "apK92i04twRPFuquKD3IjwAAALg"]
[Sat Aug 29 05:09:14.134582 2026] [security2:error] [pid 1034096:tid 1034376] [client 4.205.62.107:58493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/configuration.php"] [unique_id "apK92i04twRPFuquKD3IkAAAAQI"]
[Sat Aug 29 05:09:14.138083 2026] [security2:error] [pid 1041789:tid 1041950] [client 20.63.81.20:65164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/wp-content/plugins/ccx/index.php"] [unique_id "apK92ov3RhPI65jTFG7dMwAAAzE"]
[Sat Aug 29 05:09:14.138545 2026] [security2:error] [pid 1034096:tid 1034324] [client 20.63.81.20:62858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK92i04twRPFuquKD3IkQAAAM4"]
[Sat Aug 29 05:09:14.143733 2026] [security2:error] [pid 1041789:tid 1041971] [client 158.23.184.117:24599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/.well-known/module.php"] [unique_id "apK92ov3RhPI65jTFG7dNAAAA0Y"]
[Sat Aug 29 05:09:14.150252 2026] [security2:error] [pid 1034096:tid 1034310] [client 20.100.175.163:29099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-includes/fonts/admin.php"] [unique_id "apK92i04twRPFuquKD3IkgAAAMA"]
[Sat Aug 29 05:09:14.151974 2026] [security2:error] [pid 1034096:tid 1034255] [client 20.104.104.62:42191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/kcs.php"] [unique_id "apK92i04twRPFuquKD3IkwAAAIk"]
[Sat Aug 29 05:09:14.171699 2026] [security2:error] [pid 1034096:tid 1034321] [client 127.0.0.1:57338] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK92S04twRPFuquKD3IUwAAAMs"]
[Sat Aug 29 05:09:14.171808 2026] [security2:error] [pid 1034096:tid 1034369] [client 127.0.0.1:57200] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.beraluzarchive.org"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK92S04twRPFuquKD3IPAAAAPs"]
[Sat Aug 29 05:09:14.172154 2026] [security2:error] [pid 1034096:tid 1034306] [client 35.221.212.112:3754] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.beraluzarchive.org"] [uri "/firebase-config.json"] [unique_id "apK92S04twRPFuquKD3IMwAAALw"]
[Sat Aug 29 05:09:14.174007 2026] [security2:error] [pid 1034096:tid 1034342] [client 158.23.147.79:5940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/sad/about.php"] [unique_id "apK92i04twRPFuquKD3IlAAAAOA"]
[Sat Aug 29 05:09:14.180298 2026] [security2:error] [pid 1034096:tid 1034312] [client 20.48.251.3:13833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/app/Models/Hrm/Employee.php"] [unique_id "apK92i04twRPFuquKD3IlQAAAMI"]
[Sat Aug 29 05:09:14.209004 2026] [security2:error] [pid 1034096:tid 1034377] [client 20.104.104.62:64750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/kntl.php"] [unique_id "apK92i04twRPFuquKD3IlgAAAQM"]
[Sat Aug 29 05:09:14.210246 2026] [http2:warn] [pid 1017536:tid 1017791] [client 57.141.14.6:58642] h2_stream(1017536-30-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:09:14.210401 2026] [security2:error] [pid 1041789:tid 1041975] [client 4.232.148.111:7508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/deepseek_d.php"] [unique_id "apK92ov3RhPI65jTFG7dNQAAA0o"]
[Sat Aug 29 05:09:14.212851 2026] [security2:error] [pid 1041789:tid 1041988] [client 20.63.219.114:2625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/NewFile.php"] [unique_id "apK92ov3RhPI65jTFG7dNgAAA1c"]
[Sat Aug 29 05:09:14.215741 2026] [security2:error] [pid 1034096:tid 1034293] [client 20.104.104.62:57066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/bgymj.php"] [unique_id "apK92i04twRPFuquKD3ImAAAAK8"]
[Sat Aug 29 05:09:14.221302 2026] [security2:error] [pid 1034096:tid 1034307] [client 158.23.184.117:16461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/.well-known/api.php"] [unique_id "apK92i04twRPFuquKD3ImQAAAL0"]
[Sat Aug 29 05:09:14.240542 2026] [security2:error] [pid 1034096:tid 1034273] [client 20.220.204.93:64166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/xxw.php"] [unique_id "apK92i04twRPFuquKD3ImwAAAJs"]
[Sat Aug 29 05:09:14.253646 2026] [security2:error] [pid 1034096:tid 1034271] [client 20.104.104.62:63005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/ca4.php"] [unique_id "apK92i04twRPFuquKD3IngAAAJk"]
[Sat Aug 29 05:09:14.259702 2026] [security2:error] [pid 1034096:tid 1034332] [client 4.205.62.107:53176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/product.php"] [unique_id "apK92i04twRPFuquKD3InwAAANY"]
[Sat Aug 29 05:09:14.264069 2026] [security2:error] [pid 1034096:tid 1034318] [client 68.155.159.216:14222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK92i04twRPFuquKD3IoAAAAMg"]
[Sat Aug 29 05:09:14.269581 2026] [security2:error] [pid 1041789:tid 1041970] [client 68.155.159.216:6032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/index/function.php"] [unique_id "apK92ov3RhPI65jTFG7dOAAAA0U"]
[Sat Aug 29 05:09:14.273674 2026] [security2:error] [pid 1041789:tid 1041942] [client 20.104.104.62:43090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/kcs.php"] [unique_id "apK92ov3RhPI65jTFG7dOQAAAyk"]
[Sat Aug 29 05:09:14.275337 2026] [security2:error] [pid 1041789:tid 1041960] [client 20.63.81.20:65219] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/wp-admin/css/colors/maro.php"] [unique_id "apK92ov3RhPI65jTFG7dOgAAAzs"]
[Sat Aug 29 05:09:14.277575 2026] [security2:error] [pid 1041789:tid 1041980] [client 20.63.81.20:62797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK92ov3RhPI65jTFG7dOwAAA08"]
[Sat Aug 29 05:09:14.286018 2026] [security2:error] [pid 1041789:tid 1041997] [client 20.104.104.62:37682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/wsz.php"] [unique_id "apK92ov3RhPI65jTFG7dPQAAA2A"]
[Sat Aug 29 05:09:14.286978 2026] [security2:error] [pid 1034096:tid 1034319] [client 4.232.148.111:27554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wk/index.php"] [unique_id "apK92i04twRPFuquKD3IoQAAAMk"]
[Sat Aug 29 05:09:14.304053 2026] [security2:error] [pid 1041789:tid 1041964] [client 20.197.61.180:2022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/install.php"] [unique_id "apK92ov3RhPI65jTFG7dPgAAAz8"]
[Sat Aug 29 05:09:14.305823 2026] [security2:error] [pid 1034096:tid 1034316] [client 158.23.184.117:25515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/.well-known/options.php"] [unique_id "apK92i04twRPFuquKD3IogAAAMY"]
[Sat Aug 29 05:09:14.312884 2026] [security2:error] [pid 1041789:tid 1042013] [client 20.151.200.44:63188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/bge.php"] [unique_id "apK92ov3RhPI65jTFG7dPwAAA3A"]
[Sat Aug 29 05:09:14.325006 2026] [security2:error] [pid 1034096:tid 1034350] [client 20.48.251.3:14118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/agg.php"] [unique_id "apK92i04twRPFuquKD3IowAAAOg"]
[Sat Aug 29 05:09:14.332034 2026] [security2:error] [pid 1041789:tid 1042003] [client 68.155.159.216:65053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-content/x/index.php"] [unique_id "apK92ov3RhPI65jTFG7dQAAAA2Y"]
[Sat Aug 29 05:09:14.336267 2026] [security2:error] [pid 1041789:tid 1042050] [client 20.197.61.180:9572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/configs.php"] [unique_id "apK92ov3RhPI65jTFG7dQQAAA5U"]
[Sat Aug 29 05:09:14.346294 2026] [security2:error] [pid 1041789:tid 1041936] [client 20.104.104.62:34699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.suzis-light.marketingmagicsecrets.com"] [uri "/index/function.php"] [unique_id "apK92ov3RhPI65jTFG7dQgAAAyM"]
[Sat Aug 29 05:09:14.349973 2026] [security2:error] [pid 1034096:tid 1034251] [client 20.63.219.114:18543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/randkeyword.php"] [unique_id "apK92i04twRPFuquKD3IpAAAAIU"]
[Sat Aug 29 05:09:14.355514 2026] [security2:error] [pid 1041789:tid 1041944] [client 20.104.104.62:56342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/fh26.php"] [unique_id "apK92ov3RhPI65jTFG7dQwAAAys"]
[Sat Aug 29 05:09:14.357186 2026] [security2:error] [pid 1034096:tid 1034260] [client 20.196.209.81:16355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/inputs.php"] [unique_id "apK92i04twRPFuquKD3IpQAAAI4"]
[Sat Aug 29 05:09:14.368730 2026] [security2:error] [pid 1034096:tid 1034284] [client 158.23.184.117:16489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/.well-known/chosen.php"] [unique_id "apK92i04twRPFuquKD3IpgAAAKY"]
[Sat Aug 29 05:09:14.373972 2026] [security2:error] [pid 1041789:tid 1041946] [client 20.220.204.93:64149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/bolt.php"] [unique_id "apK92ov3RhPI65jTFG7dRAAAAy0"]
[Sat Aug 29 05:09:14.382741 2026] [security2:error] [pid 1034096:tid 1034351] [client 20.196.209.81:23998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-content/index.php"] [unique_id "apK92i04twRPFuquKD3IpwAAAOk"]
[Sat Aug 29 05:09:14.397692 2026] [security2:error] [pid 1041789:tid 1042049] [client 20.104.104.62:2463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/x0x.php"] [unique_id "apK92ov3RhPI65jTFG7dRQAAA5Q"]
[Sat Aug 29 05:09:14.402694 2026] [security2:error] [pid 1034096:tid 1034301] [client 20.63.81.20:65220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/wp-admin/css/colors/coffee/marijuana.php"] [unique_id "apK92i04twRPFuquKD3IqAAAALc"]
[Sat Aug 29 05:09:14.409551 2026] [security2:error] [pid 1034096:tid 1034315] [client 68.155.159.216:64443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-admin/index.php"] [unique_id "apK92i04twRPFuquKD3IqQAAAMU"]
[Sat Aug 29 05:09:14.409971 2026] [security2:error] [pid 1034096:tid 1034362] [client 20.63.81.20:62972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/f.php"] [unique_id "apK92i04twRPFuquKD3IqgAAAPQ"]
[Sat Aug 29 05:09:14.411205 2026] [security2:error] [pid 1034096:tid 1034367] [client 20.104.104.62:43134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/wsz.php"] [unique_id "apK92i04twRPFuquKD3IqwAAAPk"]
[Sat Aug 29 05:09:14.413380 2026] [security2:error] [pid 1034096:tid 1034309] [client 20.104.104.62:64314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/msy.php"] [unique_id "apK92i04twRPFuquKD3IrAAAAL8"]
[Sat Aug 29 05:09:14.420318 2026] [security2:error] [pid 1034096:tid 1034317] [client 68.155.159.216:30686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK92i04twRPFuquKD3IrQAAAMc"]
[Sat Aug 29 05:09:14.438251 2026] [security2:error] [pid 1041789:tid 1042031] [client 158.158.54.35:31671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/theme.php"] [unique_id "apK92ov3RhPI65jTFG7dRwAAA4I"]
[Sat Aug 29 05:09:14.446700 2026] [security2:error] [pid 1041789:tid 1042004] [client 20.196.209.81:4191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-config.php"] [unique_id "apK92ov3RhPI65jTFG7dSAAAA2c"]
[Sat Aug 29 05:09:14.448150 2026] [security2:error] [pid 1034096:tid 1034290] [client 158.23.184.117:24607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/.well-known/panel.php"] [unique_id "apK92i04twRPFuquKD3IrgAAAKw"]
[Sat Aug 29 05:09:14.462168 2026] [security2:error] [pid 1034096:tid 1034294] [client 103.162.125.59:62212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.125.162.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK92i04twRPFuquKD3IrwAAALA"]
[Sat Aug 29 05:09:14.462245 2026] [security2:error] [pid 1034096:tid 1034294] [client 103.162.125.59:62212] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK92i04twRPFuquKD3IrwAAALA"]
[Sat Aug 29 05:09:14.463665 2026] [security2:error] [pid 1041789:tid 1041968] [client 20.63.219.114:10556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/Njima.php"] [unique_id "apK92ov3RhPI65jTFG7dSQAAA0M"]
[Sat Aug 29 05:09:14.475292 2026] [security2:error] [pid 1034096:tid 1034302] [client 68.155.159.216:2015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK92i04twRPFuquKD3IsAAAALg"]
[Sat Aug 29 05:09:14.477538 2026] [security2:error] [pid 1034096:tid 1034324] [client 20.48.251.3:33339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/requirements.php"] [unique_id "apK92i04twRPFuquKD3IsQAAAM4"]
[Sat Aug 29 05:09:14.488768 2026] [security2:error] [pid 1041789:tid 1041931] [client 68.155.159.216:16321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK92ov3RhPI65jTFG7dSgAAAx4"]
[Sat Aug 29 05:09:14.497869 2026] [security2:error] [pid 1041789:tid 1042027] [client 20.104.104.62:37206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/fgd.php"] [unique_id "apK92ov3RhPI65jTFG7dSwAAA34"]
[Sat Aug 29 05:09:14.512374 2026] [security2:error] [pid 1041789:tid 1042054] [client 74.248.24.12:5699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/r.php"] [unique_id "apK92ov3RhPI65jTFG7dTAAAA5k"]
[Sat Aug 29 05:09:14.527181 2026] [security2:error] [pid 1034096:tid 1034342] [client 20.151.200.44:63174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/wp-ana.php"] [unique_id "apK92i04twRPFuquKD3IsgAAAOA"]
[Sat Aug 29 05:09:14.528021 2026] [security2:error] [pid 1034096:tid 1034376] [client 158.23.184.117:16587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/.well-known/config.php"] [unique_id "apK92i04twRPFuquKD3IswAAAQI"]
[Sat Aug 29 05:09:14.540116 2026] [security2:error] [pid 1034096:tid 1034346] [client 20.104.104.62:41976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/msy.php"] [unique_id "apK92i04twRPFuquKD3ItAAAAOQ"]
[Sat Aug 29 05:09:14.542388 2026] [security2:error] [pid 1034096:tid 1034373] [client 20.104.104.62:40092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/siln.php"] [unique_id "apK92i04twRPFuquKD3ItQAAAP8"]
[Sat Aug 29 05:09:14.548058 2026] [security2:error] [pid 1034096:tid 1034269] [client 20.104.104.62:33863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.suzis-light.marketingmagicsecrets.com"] [uri "/koiy.php"] [unique_id "apK92i04twRPFuquKD3ItgAAAJc"]
[Sat Aug 29 05:09:14.549966 2026] [security2:error] [pid 1041789:tid 1041943] [client 20.63.81.20:62843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.thehsubox.com"] [uri "/1dfcd2d08f.php"] [unique_id "apK92ov3RhPI65jTFG7dTQAAAyo"]
[Sat Aug 29 05:09:14.555053 2026] [security2:error] [pid 1034096:tid 1034282] [client 20.104.104.62:62998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dickersongrouplc.com"] [uri "/fesa.php"] [unique_id "apK92i04twRPFuquKD3ItwAAAKQ"]
[Sat Aug 29 05:09:14.565498 2026] [security2:error] [pid 1034096:tid 1034252] [client 20.63.81.20:65222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/wp-admin/css/colors/coffee/mari.php"] [unique_id "apK92i04twRPFuquKD3IuQAAAIY"]
[Sat Aug 29 05:09:14.576494 2026] [security2:error] [pid 1034096:tid 1034293] [client 20.220.204.93:64210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/rtx.php"] [unique_id "apK92i04twRPFuquKD3IuwAAAK8"]
[Sat Aug 29 05:09:14.591707 2026] [security2:error] [pid 1034096:tid 1034321] [client 158.23.184.117:25479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/.well-known/pki-validation/mariju.php"] [unique_id "apK92i04twRPFuquKD3IvAAAAMs"]
[Sat Aug 29 05:09:14.631211 2026] [security2:error] [pid 1034096:tid 1034263] [client 20.48.251.3:13828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/124.php"] [unique_id "apK92i04twRPFuquKD3IvwAAAJE"]
[Sat Aug 29 05:09:14.644767 2026] [security2:error] [pid 1034096:tid 1034311] [client 20.63.219.114:2661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/config.php"] [unique_id "apK92i04twRPFuquKD3IwAAAAME"]
[Sat Aug 29 05:09:14.658456 2026] [security2:error] [pid 1034096:tid 1034304] [client 20.104.104.62:56350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/inject.php"] [unique_id "apK92i04twRPFuquKD3IwQAAALo"]
[Sat Aug 29 05:09:14.661669 2026] [security2:error] [pid 1034096:tid 1034285] [client 68.155.159.216:49155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-admin/network/index.php"] [unique_id "apK92i04twRPFuquKD3IwwAAAKc"]
[Sat Aug 29 05:09:14.667902 2026] [security2:error] [pid 1034096:tid 1034340] [client 20.100.175.163:29078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/m.php"] [unique_id "apK92i04twRPFuquKD3IxAAAAN4"]
[Sat Aug 29 05:09:14.671475 2026] [security2:error] [pid 1041789:tid 1042005] [client 20.197.61.180:1069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/add_actualites.php"] [unique_id "apK92ov3RhPI65jTFG7dTwAAA2g"]
[Sat Aug 29 05:09:14.672255 2026] [security2:error] [pid 1034096:tid 1034277] [client 158.23.184.117:16596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/.well-known/core.php"] [unique_id "apK92i04twRPFuquKD3IxQAAAJ8"]
[Sat Aug 29 05:09:14.674235 2026] [security2:error] [pid 1034096:tid 1034359] [client 20.151.200.44:63171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/secret.php"] [unique_id "apK92i04twRPFuquKD3IxgAAAPE"]
[Sat Aug 29 05:09:14.677287 2026] [security2:error] [pid 1041789:tid 1042024] [client 20.104.104.62:40075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/f-401.php"] [unique_id "apK92ov3RhPI65jTFG7dUAAAA3s"]
[Sat Aug 29 05:09:14.680908 2026] [security2:error] [pid 1034096:tid 1034355] [client 4.205.62.107:21944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/zz.php"] [unique_id "apK92i04twRPFuquKD3IxwAAAO0"]
[Sat Aug 29 05:09:14.683601 2026] [security2:error] [pid 1034096:tid 1034283] [client 20.104.104.62:41931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/siln.php"] [unique_id "apK92i04twRPFuquKD3IyAAAAKU"]
[Sat Aug 29 05:09:14.705628 2026] [security2:error] [pid 1034096:tid 1034284] [client 20.63.81.20:65164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/wp-includes/images/crystal/option.php"] [unique_id "apK92i04twRPFuquKD3IywAAAKY"]
[Sat Aug 29 05:09:14.732575 2026] [security2:error] [pid 1034096:tid 1034251] [client 158.23.184.117:24579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/.well-known/pki-validation/pl.php"] [unique_id "apK92i04twRPFuquKD3IzwAAAIU"]
[Sat Aug 29 05:09:14.751390 2026] [security2:error] [pid 1034096:tid 1034350] [client 20.104.104.62:33858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.suzis-light.marketingmagicsecrets.com"] [uri "/lock360.php"] [unique_id "apK92i04twRPFuquKD3I0gAAAOg"]
[Sat Aug 29 05:09:14.755061 2026] [security2:error] [pid 1034096:tid 1034290] [client 20.220.204.93:64220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/ckk.php"] [unique_id "apK92i04twRPFuquKD3I0wAAAKw"]
[Sat Aug 29 05:09:14.760263 2026] [security2:error] [pid 1034096:tid 1034371] [client 20.63.219.114:1377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/goods.php"] [unique_id "apK92i04twRPFuquKD3I1AAAAP0"]
[Sat Aug 29 05:09:14.765657 2026] [security2:error] [pid 1034096:tid 1034287] [client 4.232.148.111:1364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/admin.php"] [unique_id "apK92i04twRPFuquKD3I1QAAAKk"]
[Sat Aug 29 05:09:14.774909 2026] [security2:error] [pid 1034096:tid 1034276] [client 20.196.209.81:1233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/class-walker-category-dropdown-class.php"] [unique_id "apK92i04twRPFuquKD3I1gAAAJ4"]
[Sat Aug 29 05:09:14.777213 2026] [security2:error] [pid 1034096:tid 1034286] [client 20.48.251.3:13640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/test1.php"] [unique_id "apK92i04twRPFuquKD3I1wAAAKg"]
[Sat Aug 29 05:09:14.784897 2026] [security2:error] [pid 1034096:tid 1034323] [client 20.196.209.81:7751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-content/install.php"] [unique_id "apK92i04twRPFuquKD3I2AAAAM0"]
[Sat Aug 29 05:09:14.814263 2026] [security2:error] [pid 1041789:tid 1042056] [client 20.104.104.62:42827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/f-401.php"] [unique_id "apK92ov3RhPI65jTFG7dVQAAA5s"]
[Sat Aug 29 05:09:14.817268 2026] [security2:error] [pid 1041789:tid 1041941] [client 158.23.184.117:16600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/.well-known/data.php"] [unique_id "apK92ov3RhPI65jTFG7dVgAAAyg"]
[Sat Aug 29 05:09:14.817887 2026] [security2:error] [pid 1034096:tid 1034352] [client 20.104.104.62:64679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/mga.php"] [unique_id "apK92i04twRPFuquKD3I2QAAAOo"]
[Sat Aug 29 05:09:14.825620 2026] [security2:error] [pid 1041789:tid 1042020] [client 20.63.219.114:2644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/configs.php"] [unique_id "apK92ov3RhPI65jTFG7dVwAAA3c"]
[Sat Aug 29 05:09:14.825620 2026] [security2:error] [pid 1034096:tid 1034310] [client 68.155.159.216:24461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wzy.php"] [unique_id "apK92i04twRPFuquKD3I2wAAAMA"]
[Sat Aug 29 05:09:14.829081 2026] [security2:error] [pid 1034096:tid 1034255] [client 20.104.104.62:37665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/hq.php"] [unique_id "apK92i04twRPFuquKD3I3AAAAIk"]
[Sat Aug 29 05:09:14.841387 2026] [security2:error] [pid 1041789:tid 1041955] [client 20.196.209.81:4195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-configs.php"] [unique_id "apK92ov3RhPI65jTFG7dWAAAAzY"]
[Sat Aug 29 05:09:14.847719 2026] [security2:error] [pid 1034096:tid 1034312] [client 20.63.81.20:65209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/wp-includes/pomo/xxx.php"] [unique_id "apK92i04twRPFuquKD3I3QAAAMI"]
[Sat Aug 29 05:09:14.848899 2026] [security2:error] [pid 1034096:tid 1034346] [client 4.232.148.111:35626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "apK92i04twRPFuquKD3I3gAAAOQ"]
[Sat Aug 29 05:09:14.868114 2026] [security2:error] [pid 1034096:tid 1034297] [client 68.155.159.216:1858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/dropdown.php"] [unique_id "apK92i04twRPFuquKD3I3wAAALM"]
[Sat Aug 29 05:09:14.875616 2026] [security2:error] [pid 1034096:tid 1034272] [client 68.155.159.216:33640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK92i04twRPFuquKD3I4AAAAJo"]
[Sat Aug 29 05:09:14.881161 2026] [security2:error] [pid 1041789:tid 1042052] [client 158.23.184.117:25532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/.well-known/pki-validation/x.php"] [unique_id "apK92ov3RhPI65jTFG7dWQAAA5c"]
[Sat Aug 29 05:09:14.895644 2026] [security2:error] [pid 1034096:tid 1034313] [client 158.158.54.35:34670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/classwithtostring.php"] [unique_id "apK92i04twRPFuquKD3I4gAAAMM"]
[Sat Aug 29 05:09:14.907559 2026] [security2:error] [pid 1034096:tid 1034344] [client 20.151.200.44:63892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/pro.php"] [unique_id "apK92i04twRPFuquKD3I4wAAAOI"]
[Sat Aug 29 05:09:14.910253 2026] [security2:error] [pid 1034096:tid 1034307] [client 20.48.251.3:14104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/bigdump.php"] [unique_id "apK92i04twRPFuquKD3I5AAAAL0"]
[Sat Aug 29 05:09:14.914316 2026] [security2:error] [pid 1041789:tid 1041962] [client 158.23.147.79:59459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/simple.php"] [unique_id "apK92ov3RhPI65jTFG7dWgAAAz0"]
[Sat Aug 29 05:09:14.943601 2026] [security2:error] [pid 1041789:tid 1042055] [client 20.104.104.62:60129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/hq.php"] [unique_id "apK92ov3RhPI65jTFG7dWwAAA5o"]
[Sat Aug 29 05:09:14.952873 2026] [security2:error] [pid 1034096:tid 1034311] [client 20.104.104.62:64682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/inwp.php"] [unique_id "apK92i04twRPFuquKD3I5QAAAME"]
[Sat Aug 29 05:09:14.953624 2026] [security2:error] [pid 1034096:tid 1034304] [client 20.220.204.93:64240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blog.davidseaver.com"] [uri "/R57.php"] [unique_id "apK92i04twRPFuquKD3I5wAAALo"]
[Sat Aug 29 05:09:14.965943 2026] [security2:error] [pid 1034096:tid 1034321] [client 158.23.184.117:16465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/.well-known/db-status.php"] [unique_id "apK92i04twRPFuquKD3I6QAAAMs"]
[Sat Aug 29 05:09:14.968679 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.104.104.62:40072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/mh.php"] [unique_id "apK92ov3RhPI65jTFG7dXAAAA2Q"]
[Sat Aug 29 05:09:14.975756 2026] [security2:error] [pid 1034096:tid 1034377] [client 20.104.104.62:33876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.suzis-light.marketingmagicsecrets.com"] [uri "/pp.php"] [unique_id "apK92i04twRPFuquKD3I6gAAAQM"]
[Sat Aug 29 05:09:14.982521 2026] [security2:error] [pid 1034096:tid 1034355] [client 20.63.81.20:63694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/650.php"] [unique_id "apK92i04twRPFuquKD3I6wAAAO0"]
[Sat Aug 29 05:09:14.991929 2026] [security2:error] [pid 1034096:tid 1034283] [client 213.202.253.4:65216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "timportlock.net"] [uri "/txets.php"] [unique_id "apK92i04twRPFuquKD3I7QAAAKU"], referer: www.google.com
[Sat Aug 29 05:09:15.026512 2026] [security2:error] [pid 1041789:tid 1041937] [client 158.23.184.117:24630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/.well-known/pki-validation/xmrlpc.php"] [unique_id "apK924v3RhPI65jTFG7dXgAAAyQ"]
[Sat Aug 29 05:09:15.029268 2026] [security2:error] [pid 1034096:tid 1034302] [client 20.197.61.180:9545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/colour.php"] [unique_id "apK92y04twRPFuquKD3I7wAAALg"]
[Sat Aug 29 05:09:15.035433 2026] [security2:error] [pid 1034096:tid 1034282] [client 74.248.24.12:2707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-blog.php"] [unique_id "apK92y04twRPFuquKD3I8AAAAKQ"]
[Sat Aug 29 05:09:15.053555 2026] [security2:error] [pid 1034096:tid 1034362] [client 20.48.251.3:13878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/wdf.php"] [unique_id "apK92y04twRPFuquKD3I8QAAAPQ"]
[Sat Aug 29 05:09:15.055865 2026] [security2:error] [pid 1034096:tid 1034251] [client 20.104.104.62:20643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/klee.php"] [unique_id "apK92y04twRPFuquKD3I8gAAAIU"]
[Sat Aug 29 05:09:15.058853 2026] [security2:error] [pid 1041789:tid 1042000] [client 20.63.219.114:2494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/22.php"] [unique_id "apK924v3RhPI65jTFG7dXwAAA2M"]
[Sat Aug 29 05:09:15.064704 2026] [security2:error] [pid 1034096:tid 1034317] [client 20.151.200.44:63817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/999.php"] [unique_id "apK92y04twRPFuquKD3I9AAAAMc"]
[Sat Aug 29 05:09:15.068042 2026] [security2:error] [pid 1034096:tid 1034320] [client 20.197.61.180:9551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/disagraeed.php"] [unique_id "apK92y04twRPFuquKD3I9gAAAMo"]
[Sat Aug 29 05:09:15.083794 2026] [security2:error] [pid 1034096:tid 1034290] [client 20.104.104.62:43391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/mh.php"] [unique_id "apK92y04twRPFuquKD3I-AAAAKw"]
[Sat Aug 29 05:09:15.083831 2026] [security2:error] [pid 1034096:tid 1034265] [client 68.155.159.216:38663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK92y04twRPFuquKD3I9wAAAJM"]
[Sat Aug 29 05:09:15.085036 2026] [security2:error] [pid 1034096:tid 1034363] [client 68.155.159.216:18409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK92y04twRPFuquKD3I-QAAAPU"]
[Sat Aug 29 05:09:15.094254 2026] [security2:error] [pid 1034096:tid 1034287] [client 4.205.62.107:53340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/25.php"] [unique_id "apK92y04twRPFuquKD3I-gAAAKk"]
[Sat Aug 29 05:09:15.098979 2026] [security2:error] [pid 1034096:tid 1034335] [client 20.104.104.62:64310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/f2r4.php"] [unique_id "apK92y04twRPFuquKD3I_AAAANk"]
[Sat Aug 29 05:09:15.106701 2026] [security2:error] [pid 1041789:tid 1041976] [client 20.104.104.62:56381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/ad1.php"] [unique_id "apK924v3RhPI65jTFG7dYQAAA0s"]
[Sat Aug 29 05:09:15.111590 2026] [security2:error] [pid 1034096:tid 1034322] [client 158.23.184.117:16490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/.well-known/f35.php"] [unique_id "apK92y04twRPFuquKD3I_QAAAMw"]
[Sat Aug 29 05:09:15.113048 2026] [security2:error] [pid 1034096:tid 1034267] [client 20.63.81.20:63701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/nakrip.php"] [unique_id "apK92y04twRPFuquKD3I_gAAAJU"]
[Sat Aug 29 05:09:15.122787 2026] [security2:error] [pid 1034096:tid 1034324] [client 68.155.159.216:23426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK92y04twRPFuquKD3I_wAAAM4"]
[Sat Aug 29 05:09:15.125388 2026] [security2:error] [pid 1034096:tid 1034368] [client 20.63.219.114:18321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/hehe.php"] [unique_id "apK92y04twRPFuquKD3JAAAAAPo"]
[Sat Aug 29 05:09:15.134486 2026] [security2:error] [pid 1034096:tid 1034255] [client 4.205.62.107:6920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/ah25.php"] [unique_id "apK92y04twRPFuquKD3JAQAAAIk"]
[Sat Aug 29 05:09:15.142944 2026] [security2:error] [pid 1034096:tid 1034342] [client 4.205.62.107:65519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/services.php"] [unique_id "apK92y04twRPFuquKD3JAgAAAOA"]
[Sat Aug 29 05:09:15.145163 2026] [security2:error] [pid 1041789:tid 1041981] [client 45.125.67.3:42108] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "theshoemakerstore.com"] [uri "/wp-content/plugins/woocommerce-collections/readme.txt"] [unique_id "apK924v3RhPI65jTFG7dYgAAA1A"]
[Sat Aug 29 05:09:15.177785 2026] [security2:error] [pid 1034096:tid 1034310] [client 158.23.184.117:25489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/.well-known/security.php"] [unique_id "apK92y04twRPFuquKD3JBgAAAMA"]
[Sat Aug 29 05:09:15.186825 2026] [security2:error] [pid 1034096:tid 1034260] [client 20.48.251.3:33284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/bb.php"] [unique_id "apK92y04twRPFuquKD3JCQAAAI4"]
[Sat Aug 29 05:09:15.193253 2026] [security2:error] [pid 1034096:tid 1034309] [client 20.196.209.81:1216] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "ottareahomes.roycehomesales.com"] [uri "/1.php7"] [unique_id "apK92y04twRPFuquKD3JCgAAAL8"]
[Sat Aug 29 05:09:15.193320 2026] [security2:error] [pid 1034096:tid 1034309] [client 20.196.209.81:1216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/1.php7"] [unique_id "apK92y04twRPFuquKD3JCgAAAL8"]
[Sat Aug 29 05:09:15.208881 2026] [security2:error] [pid 1034096:tid 1034253] [client 20.100.175.163:5151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "apK92y04twRPFuquKD3JBAAAAIc"]
[Sat Aug 29 05:09:15.222284 2026] [security2:error] [pid 1041789:tid 1041945] [client 20.151.200.44:63243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/sef.php"] [unique_id "apK924v3RhPI65jTFG7dYwAAAyw"]
[Sat Aug 29 05:09:15.229392 2026] [security2:error] [pid 1034096:tid 1034307] [client 20.104.104.62:64265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/sadis.php"] [unique_id "apK92y04twRPFuquKD3JDAAAAL0"]
[Sat Aug 29 05:09:15.240551 2026] [security2:error] [pid 1034096:tid 1034325] [client 20.196.209.81:8493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-conflg.php"] [unique_id "apK92y04twRPFuquKD3JDQAAAM8"]
[Sat Aug 29 05:09:15.241910 2026] [security2:error] [pid 1034096:tid 1034350] [client 4.232.148.111:11207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/php8.php"] [unique_id "apK92y04twRPFuquKD3JDgAAAOg"]
[Sat Aug 29 05:09:15.244406 2026] [security2:error] [pid 1034096:tid 1034298] [client 20.104.104.62:43352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/f2r4.php"] [unique_id "apK92y04twRPFuquKD3JDwAAALQ"]
[Sat Aug 29 05:09:15.253557 2026] [security2:error] [pid 1041789:tid 1041951] [client 20.63.81.20:65261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/wp-includes/interactivity-api/flower.php"] [unique_id "apK924v3RhPI65jTFG7dZQAAAzI"]
[Sat Aug 29 05:09:15.255202 2026] [security2:error] [pid 1041789:tid 1041957] [client 4.205.62.107:62722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/ms-edit.php"] [unique_id "apK924v3RhPI65jTFG7dZgAAAzg"]
[Sat Aug 29 05:09:15.256149 2026] [security2:error] [pid 1034096:tid 1034296] [client 158.23.184.117:16589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK92y04twRPFuquKD3JEAAAALI"]
[Sat Aug 29 05:09:15.261716 2026] [security2:error] [pid 1034096:tid 1034263] [client 158.23.147.79:11288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK92y04twRPFuquKD3JEQAAAJE"]
[Sat Aug 29 05:09:15.280223 2026] [security2:error] [pid 1041789:tid 1041954] [client 4.205.62.107:51393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/public/rip.php.php"] [unique_id "apK924v3RhPI65jTFG7dZwAAAzU"]
[Sat Aug 29 05:09:15.281884 2026] [security2:error] [pid 1041789:tid 1041961] [client 20.104.104.62:5065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/1vbqo.php"] [unique_id "apK924v3RhPI65jTFG7daAAAAzw"]
[Sat Aug 29 05:09:15.293372 2026] [security2:error] [pid 1041789:tid 1041998] [client 20.63.219.114:15415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/disagraeed.php"] [unique_id "apK924v3RhPI65jTFG7daQAAA2E"]
[Sat Aug 29 05:09:15.324764 2026] [security2:error] [pid 1034096:tid 1034304] [client 158.23.184.117:24595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/.well-known/system.php"] [unique_id "apK92y04twRPFuquKD3JEgAAALo"]
[Sat Aug 29 05:09:15.329611 2026] [security2:error] [pid 1041789:tid 1041975] [client 20.48.251.3:13836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/dd.php"] [unique_id "apK924v3RhPI65jTFG7dagAAA0o"]
[Sat Aug 29 05:09:15.353581 2026] [security2:error] [pid 1034096:tid 1034351] [client 20.196.209.81:24976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK92y04twRPFuquKD3JFAAAAOk"]
[Sat Aug 29 05:09:15.354135 2026] [security2:error] [pid 1034096:tid 1034314] [client 158.158.54.35:1854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/news.php"] [unique_id "apK92y04twRPFuquKD3JFQAAAMQ"]
[Sat Aug 29 05:09:15.365547 2026] [security2:error] [pid 1034096:tid 1034308] [client 20.104.104.62:37655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/xcre1.php"] [unique_id "apK92y04twRPFuquKD3JFgAAAL4"]
[Sat Aug 29 05:09:15.377525 2026] [security2:error] [pid 1041789:tid 1041980] [client 20.104.104.62:60673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/sadis.php"] [unique_id "apK924v3RhPI65jTFG7dawAAA08"]
[Sat Aug 29 05:09:15.380265 2026] [security2:error] [pid 1034096:tid 1034303] [client 20.197.61.180:1445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/alfanew.php7"] [unique_id "apK92y04twRPFuquKD3JGAAAALk"]
[Sat Aug 29 05:09:15.380398 2026] [security2:error] [pid 1034096:tid 1034362] [client 68.155.159.216:14083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK92y04twRPFuquKD3JFwAAAPQ"]
[Sat Aug 29 05:09:15.380841 2026] [security2:error] [pid 1041789:tid 1042028] [client 68.155.159.216:6110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/.well-known/content.php"] [unique_id "apK924v3RhPI65jTFG7dbAAAA38"]
[Sat Aug 29 05:09:15.392062 2026] [security2:error] [pid 1034096:tid 1034251] [client 20.63.81.20:65175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/xcc.php"] [unique_id "apK92y04twRPFuquKD3JGQAAAIU"]
[Sat Aug 29 05:09:15.398992 2026] [security2:error] [pid 1034096:tid 1034320] [client 4.205.62.107:55989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/fun.php"] [unique_id "apK92y04twRPFuquKD3JGgAAAMo"]
[Sat Aug 29 05:09:15.403738 2026] [security2:error] [pid 1041789:tid 1041942] [client 158.23.184.117:16503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/.well-known/home.php"] [unique_id "apK924v3RhPI65jTFG7dbQAAAyk"]
[Sat Aug 29 05:09:15.418661 2026] [security2:error] [pid 1034096:tid 1034363] [client 20.104.104.62:43058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/h02ugyh.php"] [unique_id "apK92y04twRPFuquKD3JGwAAAPU"]
[Sat Aug 29 05:09:15.432630 2026] [security2:error] [pid 1041789:tid 1042029] [client 20.151.200.44:63246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/admin123.php"] [unique_id "apK924v3RhPI65jTFG7dbgAAA4A"]
[Sat Aug 29 05:09:15.444539 2026] [security2:error] [pid 1041789:tid 1041967] [client 68.155.159.216:65135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK924v3RhPI65jTFG7dbwAAA0I"]
[Sat Aug 29 05:09:15.465628 2026] [security2:error] [pid 1041789:tid 1041995] [client 20.48.251.3:14051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/txets.php"] [unique_id "apK924v3RhPI65jTFG7dcQAAA14"]
[Sat Aug 29 05:09:15.465956 2026] [security2:error] [pid 1034096:tid 1034318] [client 158.23.184.117:25527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/.well-known/users.php"] [unique_id "apK92y04twRPFuquKD3JHQAAAMg"]
[Sat Aug 29 05:09:15.468206 2026] [security2:error] [pid 1034096:tid 1034328] [client 20.104.104.62:33889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.suzis-light.marketingmagicsecrets.com"] [uri "/wp-admin/js/wp-gwasdf2df4.php"] [unique_id "apK92y04twRPFuquKD3JHgAAANI"]
[Sat Aug 29 05:09:15.471604 2026] [security2:error] [pid 1041789:tid 1041944] [client 20.104.104.62:20675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/kalokataitusayagatauya.php"] [unique_id "apK924v3RhPI65jTFG7dcgAAAys"]
[Sat Aug 29 05:09:15.476729 2026] [security2:error] [pid 1041789:tid 1041988] [client 20.63.219.114:10544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/bak.phps"] [unique_id "apK924v3RhPI65jTFG7dcwAAA1c"]
[Sat Aug 29 05:09:15.481368 2026] [security2:error] [pid 1034096:tid 1034274] [client 20.63.219.114:18306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/wp-admin/class-db.php"] [unique_id "apK92y04twRPFuquKD3JHwAAAJw"]
[Sat Aug 29 05:09:15.506060 2026] [security2:error] [pid 1034096:tid 1034375] [client 20.104.104.62:42859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/xcre1.php"] [unique_id "apK92y04twRPFuquKD3JIAAAAQE"]
[Sat Aug 29 05:09:15.513013 2026] [security2:error] [pid 1034096:tid 1034352] [client 4.232.148.111:25233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-content/themes/pridmag/il.php"] [unique_id "apK92y04twRPFuquKD3JIQAAAOo"]
[Sat Aug 29 05:09:15.517756 2026] [security2:error] [pid 1034096:tid 1034369] [client 68.155.159.216:64387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK92y04twRPFuquKD3JIgAAAPs"]
[Sat Aug 29 05:09:15.520673 2026] [security2:error] [pid 1034096:tid 1034306] [client 20.63.81.20:65168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/wp-includes/Text/Diff/Engine/aaa.php"] [unique_id "apK92y04twRPFuquKD3JIwAAALw"]
[Sat Aug 29 05:09:15.532445 2026] [security2:error] [pid 1034096:tid 1034342] [client 20.104.104.62:64070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/motu.php"] [unique_id "apK92y04twRPFuquKD3JJAAAAOA"]
[Sat Aug 29 05:09:15.534015 2026] [security2:error] [pid 1041789:tid 1042049] [client 68.155.159.216:30708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-login.php"] [unique_id "apK924v3RhPI65jTFG7ddAAAA5Q"]
[Sat Aug 29 05:09:15.540698 2026] [security2:error] [pid 1041789:tid 1041960] [client 87.219.197.128:52663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK924v3RhPI65jTFG7ddQAAAzs"]
[Sat Aug 29 05:09:15.540792 2026] [security2:error] [pid 1041789:tid 1041960] [client 87.219.197.128:52663] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK924v3RhPI65jTFG7ddQAAAzs"]
[Sat Aug 29 05:09:15.551153 2026] [security2:error] [pid 1041789:tid 1041977] [client 158.23.184.117:16577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/.well-known/index.php"] [unique_id "apK924v3RhPI65jTFG7ddgAAA0w"]
[Sat Aug 29 05:09:15.557399 2026] [security2:error] [pid 1041789:tid 1041997] [client 74.248.24.12:19461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/xxx.php"] [unique_id "apK924v3RhPI65jTFG7ddwAAA2A"]
[Sat Aug 29 05:09:15.557399 2026] [security2:error] [pid 1034096:tid 1034367] [client 20.104.104.62:37203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/shelp.php"] [unique_id "apK92y04twRPFuquKD3JKQAAAPk"]
[Sat Aug 29 05:09:15.581438 2026] [security2:error] [pid 1041789:tid 1041969] [client 68.155.159.216:1868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/classwithtostring.php"] [unique_id "apK924v3RhPI65jTFG7deAAAA0Q"]
[Sat Aug 29 05:09:15.591051 2026] [security2:error] [pid 1034096:tid 1034340] [client 20.196.209.81:14905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/ds.php"] [unique_id "apK92y04twRPFuquKD3JLAAAAN4"]
[Sat Aug 29 05:09:15.610878 2026] [security2:error] [pid 1034096:tid 1034346] [client 158.23.184.117:24592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/.well-known/wp-blog-header.php"] [unique_id "apK92y04twRPFuquKD3JLgAAAOQ"]
[Sat Aug 29 05:09:15.611541 2026] [security2:error] [pid 1041789:tid 1042021] [client 20.151.200.44:63247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/7h.php"] [unique_id "apK924v3RhPI65jTFG7deQAAA3g"]
[Sat Aug 29 05:09:15.635691 2026] [security2:error] [pid 1041789:tid 1042022] [client 20.196.209.81:15025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-content.php"] [unique_id "apK924v3RhPI65jTFG7degAAA3k"]
[Sat Aug 29 05:09:15.636979 2026] [security2:error] [pid 1041789:tid 1041931] [client 20.104.104.62:43115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/motu.php"] [unique_id "apK924v3RhPI65jTFG7dewAAAx4"]
[Sat Aug 29 05:09:15.658858 2026] [security2:error] [pid 1034096:tid 1034271] [client 20.63.81.20:65156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/wp-includes/style-engine/gecko-new.php"] [unique_id "apK92y04twRPFuquKD3JMAAAAJk"]
[Sat Aug 29 05:09:15.663712 2026] [security2:error] [pid 1041789:tid 1042025] [client 20.104.104.62:33904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.suzis-light.marketingmagicsecrets.com"] [uri "/wp-admin/network/index.php"] [unique_id "apK924v3RhPI65jTFG7dfQAAA3w"]
[Sat Aug 29 05:09:15.671380 2026] [security2:error] [pid 1034096:tid 1034332] [client 20.104.104.62:40083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/wefile.php"] [unique_id "apK92y04twRPFuquKD3JMQAAANY"]
[Sat Aug 29 05:09:15.695386 2026] [security2:error] [pid 1041789:tid 1041965] [client 20.104.104.62:4862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/13ede.php"] [unique_id "apK924v3RhPI65jTFG7dfwAAA0A"]
[Sat Aug 29 05:09:15.697173 2026] [security2:error] [pid 1034096:tid 1034273] [client 158.23.184.117:16494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/.well-known/login.php"] [unique_id "apK92y04twRPFuquKD3JMgAAAJs"]
[Sat Aug 29 05:09:15.746307 2026] [security2:error] [pid 1034096:tid 1034309] [client 20.100.175.163:28706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/222.php"] [unique_id "apK92y04twRPFuquKD3JNQAAAL8"]
[Sat Aug 29 05:09:15.754703 2026] [security2:error] [pid 1034096:tid 1034368] [client 20.197.61.180:1454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/OK.php"] [unique_id "apK92y04twRPFuquKD3JNgAAAPo"]
[Sat Aug 29 05:09:15.755931 2026] [security2:error] [pid 1041789:tid 1042057] [client 20.196.209.81:7806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-content/languages/chosen.php"] [unique_id "apK924v3RhPI65jTFG7dgAAAA5w"]
[Sat Aug 29 05:09:15.760579 2026] [security2:error] [pid 1041789:tid 1041966] [client 158.23.184.117:25506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/.well-known/wp-links-opml.php"] [unique_id "apK924v3RhPI65jTFG7dgQAAA0E"]
[Sat Aug 29 05:09:15.769210 2026] [security2:error] [pid 1034096:tid 1034351] [client 68.155.159.216:49330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK92y04twRPFuquKD3JNwAAAOk"]
[Sat Aug 29 05:09:15.773797 2026] [security2:error] [pid 1034096:tid 1034314] [client 20.104.104.62:43124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/wefile.php"] [unique_id "apK92y04twRPFuquKD3JOAAAAMQ"]
[Sat Aug 29 05:09:15.781700 2026] [security2:error] [pid 1034096:tid 1034325] [client 20.63.219.114:10523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/add_actualites.php"] [unique_id "apK92y04twRPFuquKD3JOQAAAM8"]
[Sat Aug 29 05:09:15.793083 2026] [security2:error] [pid 1041789:tid 1042038] [client 20.197.61.180:9570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/add_actualites.php"] [unique_id "apK924v3RhPI65jTFG7dggAAA4k"]
[Sat Aug 29 05:09:15.793455 2026] [security2:error] [pid 1034096:tid 1034252] [client 20.63.81.20:63621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/wp-settings.php"] [unique_id "apK92y04twRPFuquKD3JOgAAAIY"]
[Sat Aug 29 05:09:15.794062 2026] [security2:error] [pid 1041789:tid 1041935] [client 20.48.251.3:33329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/old_phpinfo.php"] [unique_id "apK924v3RhPI65jTFG7dgwAAAyI"]
[Sat Aug 29 05:09:15.801864 2026] [security2:error] [pid 1034096:tid 1034307] [client 158.158.54.35:36982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/about/function.php"] [unique_id "apK92y04twRPFuquKD3JOwAAAL0"]
[Sat Aug 29 05:09:15.806609 2026] [security2:error] [pid 1041789:tid 1042009] [client 158.23.147.79:5979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/admin.php"] [unique_id "apK924v3RhPI65jTFG7dhAAAA2w"]
[Sat Aug 29 05:09:15.822746 2026] [security2:error] [pid 1034096:tid 1034302] [client 4.205.62.107:21618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/test.php"] [unique_id "apK92y04twRPFuquKD3JPAAAALg"]
[Sat Aug 29 05:09:15.835927 2026] [security2:error] [pid 1034096:tid 1034282] [client 20.104.104.62:37690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/EM.php"] [unique_id "apK92y04twRPFuquKD3JPQAAAKQ"]
[Sat Aug 29 05:09:15.841628 2026] [security2:error] [pid 1041789:tid 1042020] [client 20.104.104.62:5094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/k8.php"] [unique_id "apK924v3RhPI65jTFG7dhQAAA3c"]
[Sat Aug 29 05:09:15.845957 2026] [security2:error] [pid 1041789:tid 1041932] [client 158.23.184.117:16581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/.well-known/logs233/index.php"] [unique_id "apK924v3RhPI65jTFG7dhgAAAx8"]
[Sat Aug 29 05:09:15.853663 2026] [security2:error] [pid 1034096:tid 1034321] [client 20.63.219.114:15366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/install.php"] [unique_id "apK92y04twRPFuquKD3JPgAAAMs"]
[Sat Aug 29 05:09:15.856990 2026] [security2:error] [pid 1034096:tid 1034277] [client 20.63.219.114:10495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/wp-contentt.php"] [unique_id "apK92y04twRPFuquKD3JPwAAAJ8"]
[Sat Aug 29 05:09:15.863626 2026] [security2:error] [pid 1041789:tid 1041990] [client 20.104.104.62:33912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.suzis-light.marketingmagicsecrets.com"] [uri "/wp-content/admin-header.php"] [unique_id "apK924v3RhPI65jTFG7dhwAAA1k"]
[Sat Aug 29 05:09:15.869172 2026] [security2:error] [pid 1034096:tid 1034362] [client 20.151.200.44:64534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/wp-gzone.php"] [unique_id "apK92y04twRPFuquKD3JQAAAAPQ"]
[Sat Aug 29 05:09:15.871256 2026] [security2:error] [pid 1034096:tid 1034251] [client 158.23.147.79:5957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/lock.php"] [unique_id "apK92y04twRPFuquKD3JQQAAAIU"]
[Sat Aug 29 05:09:15.892514 2026] [security2:error] [pid 1034096:tid 1034365] [client 4.232.148.111:23176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/install.php"] [unique_id "apK92y04twRPFuquKD3JQgAAAPc"]
[Sat Aug 29 05:09:15.901074 2026] [security2:error] [pid 1034096:tid 1034363] [client 158.23.147.79:49848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK92y04twRPFuquKD3JQwAAAPU"]
[Sat Aug 29 05:09:15.907472 2026] [security2:error] [pid 1041789:tid 1041982] [client 158.23.184.117:25521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/.well-known/wp-load.php"] [unique_id "apK924v3RhPI65jTFG7diAAAA1E"]
[Sat Aug 29 05:09:15.908914 2026] [security2:error] [pid 1041789:tid 1042019] [client 20.104.104.62:43079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/EM.php"] [unique_id "apK924v3RhPI65jTFG7diQAAA3Y"]
[Sat Aug 29 05:09:15.922879 2026] [security2:error] [pid 1041789:tid 1042045] [client 20.104.104.62:40196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/jpg.php"] [unique_id "apK924v3RhPI65jTFG7diwAAA5A"]
[Sat Aug 29 05:09:15.933330 2026] [security2:error] [pid 1034096:tid 1034328] [client 68.155.159.216:24535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK92y04twRPFuquKD3JRQAAANI"]
[Sat Aug 29 05:09:15.936961 2026] [security2:error] [pid 1034096:tid 1034318] [client 20.63.81.20:65239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/wp-signup.php"] [unique_id "apK92y04twRPFuquKD3JRgAAAMg"]
[Sat Aug 29 05:09:15.957395 2026] [security2:error] [pid 1034096:tid 1034267] [client 20.48.251.3:13829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.embcontractors.net"] [uri "/wp-act.php"] [unique_id "apK92y04twRPFuquKD3JRwAAAJU"]
[Sat Aug 29 05:09:15.975252 2026] [security2:error] [pid 1034096:tid 1034369] [client 68.155.159.216:2045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/.well-known/index.php"] [unique_id "apK92y04twRPFuquKD3JSQAAAPs"]
[Sat Aug 29 05:09:15.983470 2026] [security2:error] [pid 1034096:tid 1034367] [client 20.104.104.62:4805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/alog.php"] [unique_id "apK92y04twRPFuquKD3JSwAAAPk"]
[Sat Aug 29 05:09:15.983691 2026] [security2:error] [pid 1034096:tid 1034353] [client 20.104.104.62:42193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/ca4.php"] [unique_id "apK92y04twRPFuquKD3JTAAAAOs"]
[Sat Aug 29 05:09:15.986441 2026] [security2:error] [pid 1041789:tid 1041955] [client 20.196.209.81:14882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/GOD.php"] [unique_id "apK924v3RhPI65jTFG7djgAAAzY"]
[Sat Aug 29 05:09:15.990050 2026] [security2:error] [pid 1034096:tid 1034274] [client 158.23.184.117:16502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/.well-known/maintenance.php"] [unique_id "apK92y04twRPFuquKD3JTQAAAJw"]
[Sat Aug 29 05:09:15.995881 2026] [security2:error] [pid 1041789:tid 1041941] [client 4.232.148.111:35293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/assets/images/doc.php"] [unique_id "apK924v3RhPI65jTFG7djwAAAyg"]
[Sat Aug 29 05:09:15.996925 2026] [security2:error] [pid 1034096:tid 1034260] [client 68.155.159.216:33714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK92y04twRPFuquKD3JTgAAAI4"]
[Sat Aug 29 05:09:16.043012 2026] [security2:error] [pid 1034096:tid 1034292] [client 158.23.147.79:44502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-admin/about.php"] [unique_id "apK93C04twRPFuquKD3JTwAAAK4"]
[Sat Aug 29 05:09:16.046096 2026] [security2:error] [pid 1034096:tid 1034298] [client 20.104.104.62:60717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/ca4.php"] [unique_id "apK93C04twRPFuquKD3JUAAAALQ"]
[Sat Aug 29 05:09:16.053823 2026] [security2:error] [pid 1034096:tid 1034300] [client 158.23.184.117:25533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/.well-known/wp-mail.php"] [unique_id "apK93C04twRPFuquKD3JUwAAALY"]
[Sat Aug 29 05:09:16.067584 2026] [security2:error] [pid 1041789:tid 1042046] [client 20.63.81.20:63682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/wp-conffg.php"] [unique_id "apK93Iv3RhPI65jTFG7dkQAAA5E"]
[Sat Aug 29 05:09:16.078572 2026] [security2:error] [pid 1034096:tid 1034297] [client 20.104.104.62:33914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.suzis-light.marketingmagicsecrets.com"] [uri "/wp-content/plugins/about.php"] [unique_id "apK93C04twRPFuquKD3JVwAAALM"]
[Sat Aug 29 05:09:16.112454 2026] [security2:error] [pid 1034096:tid 1034303] [client 20.197.61.180:1086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/xmlrpc.php0"] [unique_id "apK93C04twRPFuquKD3JWQAAALk"]
[Sat Aug 29 05:09:16.117205 2026] [security2:error] [pid 1041789:tid 1041976] [client 20.104.104.62:40111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/x0x.php"] [unique_id "apK93Iv3RhPI65jTFG7dkwAAA0s"]
[Sat Aug 29 05:09:16.128393 2026] [security2:error] [pid 1041789:tid 1041956] [client 158.23.147.79:17523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/install.php"] [unique_id "apK93Iv3RhPI65jTFG7dlAAAAzc"]
[Sat Aug 29 05:09:16.131495 2026] [security2:error] [pid 1034096:tid 1034377] [client 20.104.104.62:56369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/adin.php"] [unique_id "apK93C04twRPFuquKD3JWwAAAQM"]
[Sat Aug 29 05:09:16.133477 2026] [security2:error] [pid 1034096:tid 1034371] [client 158.23.184.117:16602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/.well-known/min.php"] [unique_id "apK93C04twRPFuquKD3JXAAAAP0"]
[Sat Aug 29 05:09:16.153165 2026] [security2:error] [pid 1034096:tid 1034253] [client 20.196.209.81:17088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-content/languages/index.php"] [unique_id "apK93C04twRPFuquKD3JXQAAAIc"]
[Sat Aug 29 05:09:16.167857 2026] [security2:error] [pid 1041789:tid 1041951] [client 20.196.209.81:8359] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-content/1.php"] [unique_id "apK93Iv3RhPI65jTFG7dlQAAAzI"]
[Sat Aug 29 05:09:16.167936 2026] [security2:error] [pid 1041789:tid 1041951] [client 20.196.209.81:8359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-content/1.php"] [unique_id "apK93Iv3RhPI65jTFG7dlQAAAzI"]
[Sat Aug 29 05:09:16.177351 2026] [security2:error] [pid 1034096:tid 1034312] [client 20.63.219.114:2624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/alfanew.php7"] [unique_id "apK93C04twRPFuquKD3JXgAAAMI"]
[Sat Aug 29 05:09:16.184739 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.104.104.62:42875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/x0x.php"] [unique_id "apK93Iv3RhPI65jTFG7dlgAAA3o"]
[Sat Aug 29 05:09:16.197044 2026] [security2:error] [pid 1041789:tid 1041954] [client 20.151.200.44:63195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/str.php"] [unique_id "apK93Iv3RhPI65jTFG7dlwAAAzU"]
[Sat Aug 29 05:09:16.197439 2026] [security2:error] [pid 1034096:tid 1034368] [client 20.63.81.20:65250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/wp-validate.php"] [unique_id "apK93C04twRPFuquKD3JXwAAAPo"]
[Sat Aug 29 05:09:16.201690 2026] [security2:error] [pid 1041789:tid 1041986] [client 158.23.184.117:25493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/.well-known/wp-settings.php"] [unique_id "apK93Iv3RhPI65jTFG7dmAAAA1U"]
[Sat Aug 29 05:09:16.237338 2026] [security2:error] [pid 1034096:tid 1034314] [client 4.205.62.107:9021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/public/vx.php"] [unique_id "apK93C04twRPFuquKD3JYgAAAMQ"]
[Sat Aug 29 05:09:16.245095 2026] [security2:error] [pid 1034096:tid 1034376] [client 20.100.175.163:1247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/mini.php"] [unique_id "apK93C04twRPFuquKD3JYwAAAQI"]
[Sat Aug 29 05:09:16.246069 2026] [security2:error] [pid 1034096:tid 1034307] [client 20.104.104.62:47606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/jak.php"] [unique_id "apK93C04twRPFuquKD3JZAAAAL0"]
[Sat Aug 29 05:09:16.248132 2026] [security2:error] [pid 1034096:tid 1034301] [client 20.104.104.62:37643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.newfweiler.com"] [uri "/fesa.php"] [unique_id "apK93C04twRPFuquKD3JZwAAALc"]
[Sat Aug 29 05:09:16.249987 2026] [security2:error] [pid 1034096:tid 1034270] [client 20.63.219.114:2055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/colour.php"] [unique_id "apK93C04twRPFuquKD3JaAAAAJg"]
[Sat Aug 29 05:09:16.250389 2026] [security2:error] [pid 1034096:tid 1034252] [client 57.141.14.105:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/cart/"] [unique_id "apK93C04twRPFuquKD3JZQAAAIY"]
[Sat Aug 29 05:09:16.254445 2026] [security2:error] [pid 1041789:tid 1041975] [client 68.155.159.216:33653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-login.php"] [unique_id "apK93Iv3RhPI65jTFG7dmQAAA0o"]
[Sat Aug 29 05:09:16.255582 2026] [security2:error] [pid 1034096:tid 1034315] [client 158.23.147.79:17556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/log-mama/function.php"] [unique_id "apK93C04twRPFuquKD3JaQAAAMU"]
[Sat Aug 29 05:09:16.260399 2026] [security2:error] [pid 1041789:tid 1041987] [client 68.155.159.216:23466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK93Iv3RhPI65jTFG7dmgAAA1Y"]
[Sat Aug 29 05:09:16.267311 2026] [security2:error] [pid 1034096:tid 1034363] [client 20.104.49.130:47858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/ioxi-o.php"] [unique_id "apK93C04twRPFuquKD3JbAAAAPU"]
[Sat Aug 29 05:09:16.268323 2026] [security2:error] [pid 1034096:tid 1034335] [client 20.104.104.62:5114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/sf9.php"] [unique_id "apK93C04twRPFuquKD3JbQAAANk"]
[Sat Aug 29 05:09:16.270629 2026] [security2:error] [pid 1034096:tid 1034276] [client 4.205.62.107:6973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/groceries/index.php"] [unique_id "apK93C04twRPFuquKD3JbgAAAJ4"]
[Sat Aug 29 05:09:16.276411 2026] [security2:error] [pid 1041789:tid 1042047] [client 4.205.62.107:25000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/filesystems.php"] [unique_id "apK93Iv3RhPI65jTFG7dmwAAA5I"]
[Sat Aug 29 05:09:16.279887 2026] [security2:error] [pid 1041789:tid 1042034] [client 158.23.184.117:63062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/.well-known/module.php"] [unique_id "apK93Iv3RhPI65jTFG7dnAAAA4U"]
[Sat Aug 29 05:09:16.312428 2026] [security2:error] [pid 1034096:tid 1034325] [client 20.104.104.62:33869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.suzis-light.marketingmagicsecrets.com"] [uri "/wp-content/themes/about.php"] [unique_id "apK93C04twRPFuquKD3JcQAAAM8"]
[Sat Aug 29 05:09:16.326588 2026] [security2:error] [pid 1034096:tid 1034329] [client 20.104.104.62:60678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "superwebtools.com"] [uri "/fesa.php"] [unique_id "apK93C04twRPFuquKD3JcwAAANM"]
[Sat Aug 29 05:09:16.328921 2026] [security2:error] [pid 1034096:tid 1034310] [client 20.63.81.20:65271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/700.php"] [unique_id "apK93C04twRPFuquKD3JdAAAAMA"]
[Sat Aug 29 05:09:16.333391 2026] [proxy_http:error] [pid 1017536:tid 1017725] (70007)The timeout specified has expired: [client 127.0.0.1:47792] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:09:16.333415 2026] [proxy:error] [pid 1017536:tid 1017725] [client 127.0.0.1:47792] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:09:16.347526 2026] [security2:error] [pid 1034096:tid 1034324] [client 158.23.184.117:25475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/.well-known/wp-signup.php"] [unique_id "apK93C04twRPFuquKD3JdQAAAM4"]
[Sat Aug 29 05:09:16.356841 2026] [security2:error] [pid 1034096:tid 1034262] [client 57.141.14.6:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.jobindjibouti.com"] [uri "/sitemap-2.xml"] [unique_id "apK93C04twRPFuquKD3JdwAAAJA"]
[Sat Aug 29 05:09:16.361740 2026] [security2:error] [pid 1034096:tid 1034292] [client 158.23.147.79:11301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-admin.php"] [unique_id "apK93C04twRPFuquKD3JeAAAAK4"]
[Sat Aug 29 05:09:16.366179 2026] [security2:error] [pid 1034096:tid 1034271] [client 20.151.200.44:62630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/mega.php"] [unique_id "apK93C04twRPFuquKD3JeQAAAJk"]
[Sat Aug 29 05:09:16.367382 2026] [security2:error] [pid 1041789:tid 1041961] [client 4.232.148.111:19900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/ioxi-o.php"] [unique_id "apK93Iv3RhPI65jTFG7dngAAAzw"]
[Sat Aug 29 05:09:16.390542 2026] [security2:error] [pid 1034096:tid 1034276] [client 20.63.219.114:18323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/theme.php"] [unique_id "apK93C04twRPFuquKD3JfAAAAJ4"]
[Sat Aug 29 05:09:16.401932 2026] [security2:error] [pid 1034096:tid 1034374] [client 4.205.62.107:62974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/lmfi2.php"] [unique_id "apK93C04twRPFuquKD3JfQAAAQA"]
[Sat Aug 29 05:09:16.405767 2026] [security2:error] [pid 1034096:tid 1034373] [client 158.158.54.35:34668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-includes/admin.php"] [unique_id "apK93C04twRPFuquKD3JfgAAAP8"]
[Sat Aug 29 05:09:16.409328 2026] [security2:error] [pid 1034096:tid 1034303] [client 20.104.104.62:56324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/lte7.php"] [unique_id "apK93C04twRPFuquKD3JgAAAALk"]
[Sat Aug 29 05:09:16.420854 2026] [security2:error] [pid 1034096:tid 1034255] [client 4.205.62.107:51498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/h.php"] [unique_id "apK93C04twRPFuquKD3JgQAAAIk"]
[Sat Aug 29 05:09:16.423772 2026] [security2:error] [pid 1034096:tid 1034253] [client 74.248.24.12:37853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/tool.php"] [unique_id "apK93C04twRPFuquKD3JggAAAIc"]
[Sat Aug 29 05:09:16.426665 2026] [security2:error] [pid 1034096:tid 1034346] [client 158.23.184.117:16458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/.well-known/options.php"] [unique_id "apK93C04twRPFuquKD3JgwAAAOQ"]
[Sat Aug 29 05:09:16.433794 2026] [security2:error] [pid 1041789:tid 1042040] [client 20.104.104.62:64710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/image.php"] [unique_id "apK93Iv3RhPI65jTFG7doAAAA4s"]
[Sat Aug 29 05:09:16.458016 2026] [security2:error] [pid 1034096:tid 1034314] [client 20.63.81.20:65208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/c4.php"] [unique_id "apK93C04twRPFuquKD3JhQAAAMQ"]
[Sat Aug 29 05:09:16.463807 2026] [security2:error] [pid 1034096:tid 1034282] [client 20.196.209.81:16335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/ggfi.php"] [unique_id "apK93C04twRPFuquKD3JhgAAAKQ"]
[Sat Aug 29 05:09:16.478193 2026] [security2:error] [pid 1041789:tid 1042011] [client 4.232.148.111:3825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/bgymj.php"] [unique_id "apK93Iv3RhPI65jTFG7doQAAA24"]
[Sat Aug 29 05:09:16.491673 2026] [security2:error] [pid 1034096:tid 1034361] [client 158.23.184.117:25481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/002.php"] [unique_id "apK93C04twRPFuquKD3JhwAAAPM"]
[Sat Aug 29 05:09:16.494445 2026] [security2:error] [pid 1034096:tid 1034264] [client 20.197.61.180:9561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sharonanddavid.strangeworx.com"] [uri "/aaa.php"] [unique_id "apK93C04twRPFuquKD3JiAAAAJI"]
[Sat Aug 29 05:09:16.510427 2026] [security2:error] [pid 1034096:tid 1034368] [client 20.104.104.62:33896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.suzis-light.marketingmagicsecrets.com"] [uri "/wp-content/themes/x/bypass.php"] [unique_id "apK93C04twRPFuquKD3JiQAAAPo"]
[Sat Aug 29 05:09:16.515474 2026] [security2:error] [pid 1034096:tid 1034328] [client 20.197.61.180:1908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/alfanew.php7"] [unique_id "apK93C04twRPFuquKD3JigAAANI"]
[Sat Aug 29 05:09:16.525661 2026] [security2:error] [pid 1034096:tid 1034309] [client 68.155.159.216:6066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/cong.php"] [unique_id "apK93C04twRPFuquKD3JiwAAAL8"]
[Sat Aug 29 05:09:16.535907 2026] [security2:error] [pid 1034096:tid 1034302] [client 4.205.62.107:3413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/kedi.php"] [unique_id "apK93C04twRPFuquKD3JjAAAALg"]
[Sat Aug 29 05:09:16.539468 2026] [security2:error] [pid 1034096:tid 1034251] [client 20.104.49.130:51361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/btyuio.php"] [unique_id "apK93C04twRPFuquKD3JjQAAAIU"]
[Sat Aug 29 05:09:16.545144 2026] [security2:error] [pid 1034096:tid 1034371] [client 20.196.209.81:25018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-content/languages/min.php"] [unique_id "apK93C04twRPFuquKD3JjgAAAP0"]
[Sat Aug 29 05:09:16.549839 2026] [security2:error] [pid 1041789:tid 1042050] [client 20.63.219.114:15388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/xmlrpc.php0"] [unique_id "apK93Iv3RhPI65jTFG7dogAAA5U"]
[Sat Aug 29 05:09:16.562770 2026] [security2:error] [pid 1034096:tid 1034283] [client 20.196.209.81:8470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-content/about.php"] [unique_id "apK93C04twRPFuquKD3JjwAAAKU"]
[Sat Aug 29 05:09:16.573477 2026] [security2:error] [pid 1034096:tid 1034277] [client 158.23.184.117:16453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/.well-known/panel.php"] [unique_id "apK93C04twRPFuquKD3JkAAAAJ8"]
[Sat Aug 29 05:09:16.580857 2026] [security2:error] [pid 1034096:tid 1034320] [client 20.151.200.44:62584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/ww3.php"] [unique_id "apK93C04twRPFuquKD3JkQAAAMo"]
[Sat Aug 29 05:09:16.595290 2026] [security2:error] [pid 1041789:tid 1042049] [client 20.63.81.20:65205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/wp-tymanage.php"] [unique_id "apK93Iv3RhPI65jTFG7dowAAA5Q"]
[Sat Aug 29 05:09:16.623044 2026] [security2:error] [pid 1034096:tid 1034369] [client 68.155.159.216:64422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/about.php"] [unique_id "apK93C04twRPFuquKD3JkwAAAPs"]
[Sat Aug 29 05:09:16.634401 2026] [security2:error] [pid 1041789:tid 1041977] [client 68.155.159.216:30601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK93Iv3RhPI65jTFG7dpAAAA0w"]
[Sat Aug 29 05:09:16.635065 2026] [security2:error] [pid 1041789:tid 1041933] [client 158.23.184.117:25502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/0x.php"] [unique_id "apK93Iv3RhPI65jTFG7dpQAAAyA"]
[Sat Aug 29 05:09:16.687154 2026] [security2:error] [pid 1041789:tid 1041931] [client 68.155.159.216:1999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/install.php"] [unique_id "apK93Iv3RhPI65jTFG7dqgAAAx4"]
[Sat Aug 29 05:09:16.718218 2026] [security2:error] [pid 1034096:tid 1034342] [client 158.23.184.117:16450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/.well-known/pki-validation/mariju.php"] [unique_id "apK93C04twRPFuquKD3JlwAAAOA"]
[Sat Aug 29 05:09:16.730059 2026] [security2:error] [pid 1041789:tid 1042041] [client 20.63.81.20:65218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/ajfto.php"] [unique_id "apK93Iv3RhPI65jTFG7dqwAAA4w"]
[Sat Aug 29 05:09:16.735257 2026] [security2:error] [pid 1034096:tid 1034252] [client 20.63.219.114:19867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/OK.php"] [unique_id "apK93C04twRPFuquKD3JmAAAAIY"]
[Sat Aug 29 05:09:16.747577 2026] [security2:error] [pid 1041789:tid 1041946] [client 20.100.175.163:29082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/aa.php"] [unique_id "apK93Iv3RhPI65jTFG7drAAAAy0"]
[Sat Aug 29 05:09:16.766686 2026] [security2:error] [pid 1041789:tid 1041939] [client 20.63.219.114:1329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/alumni_reg.php"] [unique_id "apK93Iv3RhPI65jTFG7drgAAAyY"]
[Sat Aug 29 05:09:16.778004 2026] [security2:error] [pid 1041789:tid 1042025] [client 158.23.184.117:24588] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/1.php"] [unique_id "apK93Iv3RhPI65jTFG7drwAAA3w"]
[Sat Aug 29 05:09:16.778099 2026] [security2:error] [pid 1041789:tid 1042025] [client 158.23.184.117:24588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/1.php"] [unique_id "apK93Iv3RhPI65jTFG7drwAAA3w"]
[Sat Aug 29 05:09:16.826732 2026] [security2:error] [pid 1034096:tid 1034375] [client 197.219.150.206:52285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK93C04twRPFuquKD3JmgAAAQE"]
[Sat Aug 29 05:09:16.826834 2026] [security2:error] [pid 1034096:tid 1034375] [client 197.219.150.206:52285] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK93C04twRPFuquKD3JmgAAAQE"]
[Sat Aug 29 05:09:16.826950 2026] [security2:error] [pid 1034096:tid 1034353] [client 4.232.148.111:11960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/xmlrpc.php"] [unique_id "apK93C04twRPFuquKD3JmQAAAOs"]
[Sat Aug 29 05:09:16.834647 2026] [security2:error] [pid 1041789:tid 1041984] [client 20.197.61.180:15025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/content.php"] [unique_id "apK93Iv3RhPI65jTFG7dsQAAA1M"]
[Sat Aug 29 05:09:16.861850 2026] [security2:error] [pid 1034096:tid 1034300] [client 20.63.81.20:65241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/wp_KwIW0U5F.php"] [unique_id "apK93C04twRPFuquKD3JmwAAALY"]
[Sat Aug 29 05:09:16.864282 2026] [security2:error] [pid 1041789:tid 1041965] [client 20.196.209.81:14885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/alfa-rex.php"] [unique_id "apK93Iv3RhPI65jTFG7dsgAAA0A"]
[Sat Aug 29 05:09:16.865026 2026] [security2:error] [pid 1034096:tid 1034271] [client 158.23.184.117:16462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/.well-known/pki-validation/pl.php"] [unique_id "apK93C04twRPFuquKD3JnAAAAJk"]
[Sat Aug 29 05:09:16.876666 2026] [security2:error] [pid 1041789:tid 1041934] [client 68.155.159.216:49232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/.well-knownold/index.php"] [unique_id "apK93Iv3RhPI65jTFG7dswAAAyE"]
[Sat Aug 29 05:09:16.910231 2026] [security2:error] [pid 1034096:tid 1034124] [remote 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK93C04twRPFuquKD3JnQAAmgI"]
[Sat Aug 29 05:09:16.918126 2026] [security2:error] [pid 1034096:tid 1034272] [client 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK93C04twRPFuquKD3JnQAAmgI"]
[Sat Aug 29 05:09:16.926289 2026] [security2:error] [pid 1034096:tid 1034306] [client 158.23.184.117:24580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/10.php"] [unique_id "apK93C04twRPFuquKD3JngAAALw"]
[Sat Aug 29 05:09:16.927759 2026] [security2:error] [pid 1034096:tid 1034313] [client 74.248.24.12:37863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/k.php"] [unique_id "apK93C04twRPFuquKD3JnwAAAMM"]
[Sat Aug 29 05:09:16.938346 2026] [security2:error] [pid 1034096:tid 1034367] [client 20.196.209.81:7781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-content/languages/pk.php"] [unique_id "apK93C04twRPFuquKD3JoAAAAPk"]
[Sat Aug 29 05:09:16.939429 2026] [security2:error] [pid 1034096:tid 1034292] [client 20.63.219.114:19887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/content.php"] [unique_id "apK93C04twRPFuquKD3JoQAAAK4"]
[Sat Aug 29 05:09:16.945420 2026] [security2:error] [pid 1034096:tid 1034262] [client 4.232.148.111:18825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK93C04twRPFuquKD3JogAAAJA"]
[Sat Aug 29 05:09:16.953882 2026] [security2:error] [pid 1034096:tid 1034297] [client 20.104.49.130:30039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/bthil.php"] [unique_id "apK93C04twRPFuquKD3JpAAAALM"]
[Sat Aug 29 05:09:16.971224 2026] [security2:error] [pid 1034096:tid 1034374] [client 4.205.62.107:21869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/cloud.php"] [unique_id "apK93C04twRPFuquKD3JpgAAAQA"]
[Sat Aug 29 05:09:16.983387 2026] [proxy_http:error] [pid 1017536:tid 1017742] (70007)The timeout specified has expired: [client 127.0.0.1:47850] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:09:16.983406 2026] [proxy:error] [pid 1017536:tid 1017742] [client 127.0.0.1:47850] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:09:16.986160 2026] [security2:error] [pid 1034096:tid 1034332] [client 20.196.209.81:22644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-content/admin-header.php"] [unique_id "apK93C04twRPFuquKD3JpwAAANY"]
[Sat Aug 29 05:09:16.991287 2026] [security2:error] [pid 1034096:tid 1034255] [client 20.63.81.20:65180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/wp_xiPu52Ut.php"] [unique_id "apK93C04twRPFuquKD3JqQAAAIk"]
[Sat Aug 29 05:09:17.007726 2026] [security2:error] [pid 1034096:tid 1034359] [client 158.23.147.79:50022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/ans.php"] [unique_id "apK93S04twRPFuquKD3JqgAAAPE"]
[Sat Aug 29 05:09:17.012132 2026] [security2:error] [pid 1034096:tid 1034287] [client 158.23.184.117:63096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/.well-known/pki-validation/x.php"] [unique_id "apK93S04twRPFuquKD3JqwAAAKk"]
[Sat Aug 29 05:09:17.038173 2026] [security2:error] [pid 1034096:tid 1034266] [client 68.155.159.216:24543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK93S04twRPFuquKD3JrQAAAJQ"]
[Sat Aug 29 05:09:17.076023 2026] [security2:error] [pid 1041789:tid 1041932] [client 20.151.200.44:63264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/sko.php"] [unique_id "apK93Yv3RhPI65jTFG7dtgAAAx8"]
[Sat Aug 29 05:09:17.076952 2026] [security2:error] [pid 1034096:tid 1034355] [client 158.23.184.117:25496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/100.php"] [unique_id "apK93S04twRPFuquKD3JrgAAAO0"]
[Sat Aug 29 05:09:17.081814 2026] [security2:error] [pid 1034096:tid 1034304] [client 68.155.159.216:2018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-content/themes/too.php"] [unique_id "apK93S04twRPFuquKD3JrwAAALo"]
[Sat Aug 29 05:09:17.108746 2026] [security2:error] [pid 1034096:tid 1034302] [client 68.155.159.216:33549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/images/index.php"] [unique_id "apK93S04twRPFuquKD3JsQAAALg"]
[Sat Aug 29 05:09:17.121597 2026] [security2:error] [pid 1034096:tid 1034253] [client 20.63.219.114:10622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/colors.php"] [unique_id "apK93S04twRPFuquKD3JsgAAAIc"]
[Sat Aug 29 05:09:17.130567 2026] [security2:error] [pid 1041789:tid 1041944] [client 103.48.146.148:61523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 148.146.48.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK93Yv3RhPI65jTFG7dtQAAAys"]
[Sat Aug 29 05:09:17.130719 2026] [security2:error] [pid 1041789:tid 1041944] [client 103.48.146.148:61523] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK93Yv3RhPI65jTFG7dtQAAAys"]
[Sat Aug 29 05:09:17.130939 2026] [security2:error] [pid 1034096:tid 1034298] [client 158.158.54.35:31662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/lock360.php"] [unique_id "apK93S04twRPFuquKD3JswAAALQ"]
[Sat Aug 29 05:09:17.137559 2026] [security2:error] [pid 1034096:tid 1034265] [client 20.63.81.20:63703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/wp_n5VD7XDh.php"] [unique_id "apK93S04twRPFuquKD3JtAAAAJM"]
[Sat Aug 29 05:09:17.157721 2026] [security2:error] [pid 1034096:tid 1034315] [client 158.23.184.117:16582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/.well-known/pki-validation/xmrlpc.php"] [unique_id "apK93S04twRPFuquKD3JtQAAAMU"]
[Sat Aug 29 05:09:17.158414 2026] [security2:error] [pid 1034096:tid 1034312] [client 20.63.219.114:19898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.myldspreschool.organizedchaoscomic.com"] [uri "/aaa.php"] [unique_id "apK93S04twRPFuquKD3JtgAAAMI"]
[Sat Aug 29 05:09:17.162793 2026] [security2:error] [pid 1034096:tid 1034335] [client 158.23.147.79:52325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK93S04twRPFuquKD3JtwAAANk"]
[Sat Aug 29 05:09:17.167317 2026] [security2:error] [pid 1034096:tid 1034308] [client 103.185.242.143:55271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK93S04twRPFuquKD3JuAAAAL4"]
[Sat Aug 29 05:09:17.167438 2026] [security2:error] [pid 1034096:tid 1034308] [client 103.185.242.143:55271] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK93S04twRPFuquKD3JuAAAAL4"]
[Sat Aug 29 05:09:17.214122 2026] [security2:error] [pid 1034096:tid 1034267] [client 68.155.159.216:38553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/lock.php"] [unique_id "apK93S04twRPFuquKD3JuQAAAJU"]
[Sat Aug 29 05:09:17.216090 2026] [security2:error] [pid 1034096:tid 1034311] [client 20.197.61.180:1902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/xmlrpc.php0"] [unique_id "apK93S04twRPFuquKD3JugAAAME"]
[Sat Aug 29 05:09:17.222223 2026] [security2:error] [pid 1041789:tid 1041989] [client 158.23.184.117:25519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/2.php"] [unique_id "apK93Yv3RhPI65jTFG7duAAAA1g"]
[Sat Aug 29 05:09:17.232506 2026] [security2:error] [pid 1034096:tid 1034328] [client 20.100.175.163:1274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/c.php"] [unique_id "apK93S04twRPFuquKD3JuwAAANI"]
[Sat Aug 29 05:09:17.269341 2026] [security2:error] [pid 1034096:tid 1034252] [client 20.63.81.20:63708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/wp-mini.php"] [unique_id "apK93S04twRPFuquKD3JvAAAAIY"]
[Sat Aug 29 05:09:17.277629 2026] [security2:error] [pid 1041789:tid 1041979] [client 20.196.209.81:14854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/cookie.php"] [unique_id "apK93Yv3RhPI65jTFG7duQAAA04"]
[Sat Aug 29 05:09:17.296137 2026] [security2:error] [pid 1034096:tid 1034277] [client 4.232.148.111:23203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/filemanager.php"] [unique_id "apK93S04twRPFuquKD3JvQAAAJ8"]
[Sat Aug 29 05:09:17.304435 2026] [security2:error] [pid 1041789:tid 1042018] [client 158.23.184.117:16493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/.well-known/security.php"] [unique_id "apK93Yv3RhPI65jTFG7dugAAA3U"]
[Sat Aug 29 05:09:17.340810 2026] [security2:error] [pid 1041789:tid 1041990] [client 20.196.209.81:17093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wine-garden.com"] [uri "/wp-content/languages/plugins/about.php"] [unique_id "apK93Yv3RhPI65jTFG7duwAAA1k"]
[Sat Aug 29 05:09:17.351416 2026] [proxy_http:error] [pid 1017536:tid 1017754] (70007)The timeout specified has expired: [client 127.0.0.1:47874] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:09:17.351446 2026] [proxy:error] [pid 1017536:tid 1017754] [client 127.0.0.1:47874] AH00898: Error reading from remote server returned by /shop-cart/
[Sat Aug 29 05:09:17.357346 2026] [security2:error] [pid 1041789:tid 1041992] [client 20.151.200.44:63919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/zoz.php"] [unique_id "apK93Yv3RhPI65jTFG7dvAAAA1s"]
[Sat Aug 29 05:09:17.367500 2026] [security2:error] [pid 1034096:tid 1034319] [client 158.23.147.79:17545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/bk/index.php"] [unique_id "apK93S04twRPFuquKD3JvgAAAMk"]
[Sat Aug 29 05:09:17.368470 2026] [security2:error] [pid 1034096:tid 1034362] [client 158.23.184.117:25495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/222.php"] [unique_id "apK93S04twRPFuquKD3JvwAAAPQ"]
[Sat Aug 29 05:09:17.374680 2026] [security2:error] [pid 1041789:tid 1042017] [client 4.205.62.107:53329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/333.php"] [unique_id "apK93Yv3RhPI65jTFG7dvgAAA3Q"]
[Sat Aug 29 05:09:17.383079 2026] [security2:error] [pid 1034096:tid 1034300] [client 68.155.159.216:23502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-content/banners/about.php"] [unique_id "apK93S04twRPFuquKD3JwQAAALY"]
[Sat Aug 29 05:09:17.390825 2026] [security2:error] [pid 1034096:tid 1034310] [client 20.63.219.114:19861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/wxo.php"] [unique_id "apK93S04twRPFuquKD3JwgAAAMA"]
[Sat Aug 29 05:09:17.395384 2026] [proxy_http:error] [pid 1017536:tid 1017660] (70007)The timeout specified has expired: [remote 57.141.14.63:59328] AH01102: error reading status line from remote server 127.0.0.1:8443
[Sat Aug 29 05:09:17.395397 2026] [proxy:error] [pid 1017536:tid 1017660] [remote 57.141.14.63:59328] AH00898: Error reading from remote server returned by /shop-cart/
[Sat Aug 29 05:09:17.399598 2026] [security2:error] [pid 1034096:tid 1034276] [client 20.63.81.20:65218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/xmini4.php"] [unique_id "apK93S04twRPFuquKD3JxAAAAJ4"]
[Sat Aug 29 05:09:17.406727 2026] [security2:error] [pid 1034096:tid 1034313] [client 68.155.159.216:33690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK93S04twRPFuquKD3JxQAAAMM"]
[Sat Aug 29 05:09:17.407588 2026] [security2:error] [pid 1034096:tid 1034342] [client 20.196.209.81:8477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-content/admin.php"] [unique_id "apK93S04twRPFuquKD3JxgAAAOA"]
[Sat Aug 29 05:09:17.413720 2026] [security2:error] [pid 1034096:tid 1034297] [client 4.205.62.107:6490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/konfig.php"] [unique_id "apK93S04twRPFuquKD3JyAAAALM"]
[Sat Aug 29 05:09:17.449173 2026] [security2:error] [pid 1034096:tid 1034306] [client 158.23.184.117:16612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/.well-known/system.php"] [unique_id "apK93S04twRPFuquKD3JywAAALw"]
[Sat Aug 29 05:09:17.477327 2026] [security2:error] [pid 1041789:tid 1041978] [client 158.23.147.79:5986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/index/function.php"] [unique_id "apK93Yv3RhPI65jTFG7dwgAAA00"]
[Sat Aug 29 05:09:17.478160 2026] [security2:error] [pid 1034096:tid 1034350] [client 74.248.24.12:19486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/root.php"] [unique_id "apK93S04twRPFuquKD3JzAAAAOg"]
[Sat Aug 29 05:09:17.493719 2026] [security2:error] [pid 1034096:tid 1034307] [client 4.205.62.107:65490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/tax.php"] [unique_id "apK93S04twRPFuquKD3JzQAAAL0"]
[Sat Aug 29 05:09:17.503635 2026] [security2:error] [pid 1041789:tid 1041971] [client 158.23.147.79:11298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK93Yv3RhPI65jTFG7dxQAAA0Y"]
[Sat Aug 29 05:09:17.510400 2026] [security2:error] [pid 1034096:tid 1034271] [client 20.63.219.114:18310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/Js.php"] [unique_id "apK93S04twRPFuquKD3JzgAAAJk"]
[Sat Aug 29 05:09:17.512196 2026] [security2:error] [pid 1034096:tid 1034282] [client 158.23.184.117:25523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/24.php"] [unique_id "apK93S04twRPFuquKD3JzwAAAKQ"]
[Sat Aug 29 05:09:17.532166 2026] [security2:error] [pid 1041789:tid 1041956] [client 20.63.81.20:63695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/reop3.php"] [unique_id "apK93Yv3RhPI65jTFG7dxwAAAzc"]
[Sat Aug 29 05:09:17.534782 2026] [security2:error] [pid 1034096:tid 1034264] [client 20.104.18.15:18931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/rxr.php"] [unique_id "apK93S04twRPFuquKD3J0AAAAJI"]
[Sat Aug 29 05:09:17.536154 2026] [security2:error] [pid 1034096:tid 1034321] [client 4.205.62.107:62751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/wpver.php"] [unique_id "apK93S04twRPFuquKD3J0QAAAMs"]
[Sat Aug 29 05:09:17.537076 2026] [security2:error] [pid 1034096:tid 1034368] [client 68.155.159.216:14256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK93S04twRPFuquKD3J0gAAAPo"]
[Sat Aug 29 05:09:17.562958 2026] [security2:error] [pid 1034096:tid 1034290] [client 4.205.62.107:51485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/mamzi.php"] [unique_id "apK93S04twRPFuquKD3J1QAAAKw"]
[Sat Aug 29 05:09:17.568180 2026] [security2:error] [pid 1041789:tid 1041982] [client 20.197.61.180:14989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/wxo.php"] [unique_id "apK93Yv3RhPI65jTFG7dyAAAA1E"]
[Sat Aug 29 05:09:17.583005 2026] [security2:error] [pid 1034096:tid 1034303] [client 158.158.54.35:31628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-conflg.php"] [unique_id "apK93S04twRPFuquKD3J2AAAALk"]
[Sat Aug 29 05:09:17.591132 2026] [security2:error] [pid 1041789:tid 1041991] [client 20.151.200.44:64478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/mmm.php"] [unique_id "apK93Yv3RhPI65jTFG7dywAAA1o"]
[Sat Aug 29 05:09:17.593908 2026] [security2:error] [pid 1034096:tid 1034304] [client 158.23.184.117:16468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/.well-known/users.php"] [unique_id "apK93S04twRPFuquKD3J2gAAALo"]
[Sat Aug 29 05:09:17.614729 2026] [security2:error] [pid 1034096:tid 1034335] [client 4.232.148.111:18822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-load.php"] [unique_id "apK93S04twRPFuquKD3J2wAAANk"]
[Sat Aug 29 05:09:17.622578 2026] [core:error] [pid 1034096:tid 1034308] [client 5.255.231.180:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:17.622594 2026] [core:error] [pid 1034096:tid 1034308] [client 5.255.231.180:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:17.643957 2026] [security2:error] [pid 1034096:tid 1034267] [client 20.104.18.15:25538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/wp-includes/index.php"] [unique_id "apK93S04twRPFuquKD3J3QAAAJU"]
[Sat Aug 29 05:09:17.648007 2026] [security2:error] [pid 1034096:tid 1034328] [client 20.104.18.15:43271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/akismet.php"] [unique_id "apK93S04twRPFuquKD3J3gAAANI"]
[Sat Aug 29 05:09:17.648031 2026] [security2:error] [pid 1034096:tid 1034311] [client 20.104.18.15:22408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/av.php"] [unique_id "apK93S04twRPFuquKD3J3wAAAME"]
[Sat Aug 29 05:09:17.656181 2026] [security2:error] [pid 1034096:tid 1034315] [client 158.23.184.117:25070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/3pjcpmfsd8b.php"] [unique_id "apK93S04twRPFuquKD3J4AAAAMU"]
[Sat Aug 29 05:09:17.656452 2026] [security2:error] [pid 1041789:tid 1041975] [client 68.155.159.216:6122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-includes/js/index.php"] [unique_id "apK93Yv3RhPI65jTFG7dzQAAA0o"]
[Sat Aug 29 05:09:17.664376 2026] [security2:error] [pid 1034096:tid 1034274] [client 20.63.81.20:65248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/wp-mail.php"] [unique_id "apK93S04twRPFuquKD3J4QAAAJw"]
[Sat Aug 29 05:09:17.665270 2026] [security2:error] [pid 1041789:tid 1041919] [remote 74.7.227.154:54326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK93Yv3RhPI65jTFG7dzgADknU"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwp-easycart%2Fadmin%2Felementor
[Sat Aug 29 05:09:17.669466 2026] [security2:error] [pid 1034096:tid 1034309] [client 20.104.18.15:12208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/sss.php"] [unique_id "apK93S04twRPFuquKD3J4gAAAL8"]
[Sat Aug 29 05:09:17.676999 2026] [security2:error] [pid 1034096:tid 1034276] [client 20.104.18.15:15184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/fpwch.php"] [unique_id "apK93S04twRPFuquKD3J4wAAAJ4"]
[Sat Aug 29 05:09:17.679485 2026] [security2:error] [pid 1034096:tid 1034313] [client 4.205.62.107:53157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/oc460l3x.php"] [unique_id "apK93S04twRPFuquKD3J5AAAAMM"]
[Sat Aug 29 05:09:17.692909 2026] [security2:error] [pid 1034096:tid 1034269] [client 20.104.18.15:46023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/btx25.php"] [unique_id "apK93S04twRPFuquKD3J5QAAAJc"]
[Sat Aug 29 05:09:17.703715 2026] [security2:error] [pid 1034096:tid 1034292] [client 20.104.18.15:39855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/222.php"] [unique_id "apK93S04twRPFuquKD3J5wAAAK4"]
[Sat Aug 29 05:09:17.710034 2026] [security2:error] [pid 1034096:tid 1034332] [client 20.104.18.15:19360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.kozo.com.mx"] [uri "/reviall.php"] [unique_id "apK93S04twRPFuquKD3J6AAAANY"]
[Sat Aug 29 05:09:17.734960 2026] [security2:error] [pid 1041789:tid 1041938] [client 20.196.209.81:14874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/NewFile.php"] [unique_id "apK93Yv3RhPI65jTFG7d0AAAAyU"]
[Sat Aug 29 05:09:17.741377 2026] [security2:error] [pid 1034096:tid 1034262] [client 158.23.184.117:16459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/.well-known/wp-blog-header.php"] [unique_id "apK93S04twRPFuquKD3J6QAAAJA"]
[Sat Aug 29 05:09:17.741379 2026] [security2:error] [pid 1041789:tid 1041980] [client 68.155.159.216:30621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-admin/images/about.php"] [unique_id "apK93Yv3RhPI65jTFG7d0QAAA08"]
[Sat Aug 29 05:09:17.743815 2026] [security2:error] [pid 1041789:tid 1042028] [client 20.151.200.44:64457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/advanced.php"] [unique_id "apK93Yv3RhPI65jTFG7d0gAAA38"]
[Sat Aug 29 05:09:17.751009 2026] [security2:error] [pid 1034096:tid 1034307] [client 20.104.18.15:46008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/xyn.php"] [unique_id "apK93S04twRPFuquKD3J6gAAAL0"]
[Sat Aug 29 05:09:17.754844 2026] [security2:error] [pid 1034096:tid 1034282] [client 68.155.159.216:65151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK93S04twRPFuquKD3J6wAAAKQ"]
[Sat Aug 29 05:09:17.765429 2026] [security2:error] [pid 1034096:tid 1034312] [client 4.232.148.111:26849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-content/themes/admin.php"] [unique_id "apK93S04twRPFuquKD3J7QAAAMI"]
[Sat Aug 29 05:09:17.784057 2026] [security2:error] [pid 1034096:tid 1034302] [client 20.104.18.15:16811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/file31.php"] [unique_id "apK93S04twRPFuquKD3J7gAAALg"]
[Sat Aug 29 05:09:17.796005 2026] [security2:error] [pid 1034096:tid 1034325] [client 20.63.219.114:2453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/as.php"] [unique_id "apK93S04twRPFuquKD3J7wAAAM8"]
[Sat Aug 29 05:09:17.796161 2026] [security2:error] [pid 1041789:tid 1041964] [client 20.63.81.20:65237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/wp-conffg.php"] [unique_id "apK93Yv3RhPI65jTFG7d0wAAAz8"]
[Sat Aug 29 05:09:17.799323 2026] [security2:error] [pid 1034096:tid 1034323] [client 20.100.175.163:20984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/f.php"] [unique_id "apK93S04twRPFuquKD3J8AAAAM0"]
[Sat Aug 29 05:09:17.799909 2026] [security2:error] [pid 1034096:tid 1034271] [client 158.23.184.117:24601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ottawa-nodownpayment.roycehomesales.com"] [uri "/403.php"] [unique_id "apK93S04twRPFuquKD3J8QAAAJk"]
[Sat Aug 29 05:09:17.802372 2026] [security2:error] [pid 1034096:tid 1034322] [client 20.196.209.81:8505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-content/autoload_classmap.php"] [unique_id "apK93S04twRPFuquKD3J8gAAAMw"]
[Sat Aug 29 05:09:17.835776 2026] [security2:error] [pid 1034096:tid 1034363] [client 20.104.18.15:43267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/ajax.php"] [unique_id "apK93S04twRPFuquKD3J_QAAAPU"]
[Sat Aug 29 05:09:17.852843 2026] [security2:error] [pid 1041789:tid 1042013] [client 20.104.18.15:15170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/domvf.php"] [unique_id "apK93Yv3RhPI65jTFG7d1AAAA3A"]
[Sat Aug 29 05:09:17.857718 2026] [security2:error] [pid 1041789:tid 1042029] [client 20.104.18.15:22416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/images.php"] [unique_id "apK93Yv3RhPI65jTFG7d1QAAA4A"]
[Sat Aug 29 05:09:17.871895 2026] [security2:error] [pid 1041789:tid 1041942] [client 20.63.219.114:8850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/access.php"] [unique_id "apK93Yv3RhPI65jTFG7d1gAAAyk"]
[Sat Aug 29 05:09:17.887080 2026] [security2:error] [pid 1041789:tid 1042040] [client 20.104.18.15:45900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/SDsadqwrf.php"] [unique_id "apK93Yv3RhPI65jTFG7d1wAAA4s"]
[Sat Aug 29 05:09:17.887124 2026] [security2:error] [pid 1034096:tid 1034308] [client 158.23.184.117:16597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/.well-known/wp-links-opml.php"] [unique_id "apK93S04twRPFuquKD3J_wAAAL4"]
[Sat Aug 29 05:09:17.900098 2026] [security2:error] [pid 1041789:tid 1041936] [client 20.104.18.15:41961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/BDKR28WP.php"] [unique_id "apK93Yv3RhPI65jTFG7d2QAAAyM"]
[Sat Aug 29 05:09:17.910413 2026] [security2:error] [pid 1041789:tid 1041995] [client 20.104.18.15:39822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/ops.php"] [unique_id "apK93Yv3RhPI65jTFG7d2gAAA14"]
[Sat Aug 29 05:09:17.934176 2026] [security2:error] [pid 1041789:tid 1041967] [client 20.104.18.15:16786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/dk.php"] [unique_id "apK93Yv3RhPI65jTFG7d2wAAA0I"]
[Sat Aug 29 05:09:17.936465 2026] [security2:error] [pid 1041789:tid 1041988] [client 20.63.81.20:63705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/filefuns.php"] [unique_id "apK93Yv3RhPI65jTFG7d3AAAA1c"]
[Sat Aug 29 05:09:17.954589 2026] [security2:error] [pid 1034096:tid 1034255] [client 20.197.61.180:9566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/content.php"] [unique_id "apK93S04twRPFuquKD3KCQAAAIk"]
[Sat Aug 29 05:09:17.956969 2026] [security2:error] [pid 1041789:tid 1041997] [client 20.104.18.15:46033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/inso.php"] [unique_id "apK93Yv3RhPI65jTFG7d3gAAA2A"]
[Sat Aug 29 05:09:17.983105 2026] [security2:error] [pid 1034096:tid 1034269] [client 158.23.147.79:5996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-admin/admin.php"] [unique_id "apK93S04twRPFuquKD3KDQAAAJc"]
[Sat Aug 29 05:09:17.985814 2026] [security2:error] [pid 1041789:tid 1042031] [client 20.104.49.130:54871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/xwx1.php"] [unique_id "apK93Yv3RhPI65jTFG7d3wAAA4I"]
[Sat Aug 29 05:09:17.986726 2026] [security2:error] [pid 1034096:tid 1034374] [client 20.104.18.15:15318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/biufile.php"] [unique_id "apK93S04twRPFuquKD3KDgAAAQA"]
[Sat Aug 29 05:09:17.996380 2026] [security2:error] [pid 1034096:tid 1034303] [client 74.248.24.12:5730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/p.php"] [unique_id "apK93S04twRPFuquKD3KEAAAALk"]
[Sat Aug 29 05:09:18.010192 2026] [security2:error] [pid 1041789:tid 1041946] [client 20.104.18.15:43322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/atomlib.php"] [unique_id "apK93ov3RhPI65jTFG7d4QAAAy0"]
[Sat Aug 29 05:09:18.027232 2026] [security2:error] [pid 1041789:tid 1042025] [client 20.104.18.15:45953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/BDKR28WP.php"] [unique_id "apK93ov3RhPI65jTFG7d4gAAA3w"]
[Sat Aug 29 05:09:18.032671 2026] [security2:error] [pid 1041789:tid 1041947] [client 158.23.184.117:16616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/.well-known/wp-load.php"] [unique_id "apK93ov3RhPI65jTFG7d4wAAAy4"]
[Sat Aug 29 05:09:18.037387 2026] [security2:error] [pid 1034096:tid 1034267] [client 158.158.54.35:34654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/123.php"] [unique_id "apK93i04twRPFuquKD3KFQAAAJU"]
[Sat Aug 29 05:09:18.054424 2026] [security2:error] [pid 1041789:tid 1041969] [client 20.104.18.15:39891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK93ov3RhPI65jTFG7d5AAAA0Q"]
[Sat Aug 29 05:09:18.067008 2026] [security2:error] [pid 1041789:tid 1042007] [client 20.63.81.20:65194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/wp-cron.php"] [unique_id "apK93ov3RhPI65jTFG7d5QAAA2o"]
[Sat Aug 29 05:09:18.072154 2026] [security2:error] [pid 1034096:tid 1034332] [client 20.104.18.15:41876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/sky.php"] [unique_id "apK93i04twRPFuquKD3KFgAAANY"]
[Sat Aug 29 05:09:18.078310 2026] [security2:error] [pid 1041789:tid 1042057] [client 20.104.18.15:16787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/ta.php"] [unique_id "apK93ov3RhPI65jTFG7d5gAAA5w"]
[Sat Aug 29 05:09:18.108832 2026] [security2:error] [pid 1041789:tid 1041984] [client 20.104.18.15:46048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/puc.php"] [unique_id "apK93ov3RhPI65jTFG7d6AAAA1M"]
[Sat Aug 29 05:09:18.111999 2026] [security2:error] [pid 1034096:tid 1034365] [client 158.23.147.79:50118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/worksec.php"] [unique_id "apK93i04twRPFuquKD3KGAAAAPc"]
[Sat Aug 29 05:09:18.114704 2026] [security2:error] [pid 1041789:tid 1041934] [client 4.205.62.107:21932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/asdf.php"] [unique_id "apK93ov3RhPI65jTFG7d6QAAAyE"]
[Sat Aug 29 05:09:18.129014 2026] [security2:error] [pid 1041789:tid 1042010] [client 20.151.200.44:64495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/blox.php"] [unique_id "apK93ov3RhPI65jTFG7d6gAAA20"]
[Sat Aug 29 05:09:18.129416 2026] [security2:error] [pid 1041789:tid 1041983] [client 20.104.18.15:7144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK93ov3RhPI65jTFG7d6wAAA1I"]
[Sat Aug 29 05:09:18.143546 2026] [security2:error] [pid 1041789:tid 1042043] [client 20.196.209.81:14848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/config.php"] [unique_id "apK93ov3RhPI65jTFG7d7AAAA44"]
[Sat Aug 29 05:09:18.145547 2026] [security2:error] [pid 1034096:tid 1034314] [client 68.155.159.216:24334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK93i04twRPFuquKD3KHAAAAMQ"]
[Sat Aug 29 05:09:18.161904 2026] [security2:error] [pid 1034096:tid 1034307] [client 20.104.18.15:22440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/ops.php"] [unique_id "apK93i04twRPFuquKD3KIAAAAL0"]
[Sat Aug 29 05:09:18.179873 2026] [security2:error] [pid 1034096:tid 1034262] [client 158.23.184.117:16607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/.well-known/wp-mail.php"] [unique_id "apK93i04twRPFuquKD3KJgAAAJA"]
[Sat Aug 29 05:09:18.197637 2026] [security2:error] [pid 1041789:tid 1041960] [client 20.196.209.81:8320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-content/cache/min/1/wp-content/admin.php"] [unique_id "apK93ov3RhPI65jTFG7d7gAAAzs"]
[Sat Aug 29 05:09:18.198934 2026] [security2:error] [pid 1041789:tid 1041940] [client 20.63.81.20:65215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/lock360.php"] [unique_id "apK93ov3RhPI65jTFG7d7wAAAyc"]
[Sat Aug 29 05:09:18.199670 2026] [security2:error] [pid 1041789:tid 1041999] [client 20.104.18.15:15330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/blacks.php"] [unique_id "apK93ov3RhPI65jTFG7d8AAAA2I"]
[Sat Aug 29 05:09:18.200346 2026] [security2:error] [pid 1041789:tid 1041989] [client 20.104.18.15:46043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/sky.php"] [unique_id "apK93ov3RhPI65jTFG7d8QAAA1g"]
[Sat Aug 29 05:09:18.201079 2026] [security2:error] [pid 1041789:tid 1042037] [client 68.155.159.216:18341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-includes/plugins.php"] [unique_id "apK93ov3RhPI65jTFG7d8gAAA4g"]
[Sat Aug 29 05:09:18.207035 2026] [security2:error] [pid 1041789:tid 1042009] [client 20.104.18.15:16871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/bo.php"] [unique_id "apK93ov3RhPI65jTFG7d8wAAA2w"]
[Sat Aug 29 05:09:18.220373 2026] [security2:error] [pid 1041789:tid 1041920] [remote 74.7.227.154:54326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK93ov3RhPI65jTFG7d9AADb3Y"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwp-easycart%2Finc%2Faws%2FAws
[Sat Aug 29 05:09:18.230498 2026] [security2:error] [pid 1034096:tid 1034323] [client 68.155.159.216:33475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK93i04twRPFuquKD3KKQAAAM0"]
[Sat Aug 29 05:09:18.235737 2026] [security2:error] [pid 1041789:tid 1041979] [client 20.104.18.15:39922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK93ov3RhPI65jTFG7d9QAAA04"]
[Sat Aug 29 05:09:18.240366 2026] [security2:error] [pid 1034096:tid 1034271] [client 4.232.148.111:22730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/a.php"] [unique_id "apK93i04twRPFuquKD3KKgAAAJk"]
[Sat Aug 29 05:09:18.241299 2026] [security2:error] [pid 1034096:tid 1034359] [client 4.232.148.111:1392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-admin/css/admin.php"] [unique_id "apK93i04twRPFuquKD3KKwAAAPE"]
[Sat Aug 29 05:09:18.242161 2026] [security2:error] [pid 1041789:tid 1042018] [client 20.104.49.130:60949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/xa.php"] [unique_id "apK93ov3RhPI65jTFG7d9gAAA3U"]
[Sat Aug 29 05:09:18.242220 2026] [security2:error] [pid 1034096:tid 1034287] [client 20.63.219.114:10592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/classsmtps.php"] [unique_id "apK93i04twRPFuquKD3KLAAAAKk"]
[Sat Aug 29 05:09:18.252494 2026] [security2:error] [pid 1041789:tid 1041962] [client 20.104.18.15:46057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/19.php"] [unique_id "apK93ov3RhPI65jTFG7d9wAAAz0"]
[Sat Aug 29 05:09:18.254799 2026] [security2:error] [pid 1041789:tid 1041992] [client 20.104.18.15:43281] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "gp3llc.com"] [uri "/1.php"] [unique_id "apK93ov3RhPI65jTFG7d-AAAA1s"]
[Sat Aug 29 05:09:18.254858 2026] [security2:error] [pid 1041789:tid 1041992] [client 20.104.18.15:43281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/1.php"] [unique_id "apK93ov3RhPI65jTFG7d-AAAA1s"]
[Sat Aug 29 05:09:18.271702 2026] [security2:error] [pid 1041789:tid 1041941] [client 20.104.49.130:65244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/az.php"] [unique_id "apK93ov3RhPI65jTFG7d-QAAAyg"]
[Sat Aug 29 05:09:18.276082 2026] [security2:error] [pid 1041789:tid 1042048] [client 20.104.18.15:7153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK93ov3RhPI65jTFG7d-gAAA5M"]
[Sat Aug 29 05:09:18.277302 2026] [security2:error] [pid 1041789:tid 1041993] [client 20.104.18.15:12272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/wp-includes/ID3/moon.php"] [unique_id "apK93ov3RhPI65jTFG7d-wAAA1w"]
[Sat Aug 29 05:09:18.279652 2026] [security2:error] [pid 1034096:tid 1034290] [client 158.23.147.79:55292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK93i04twRPFuquKD3KMAAAAKw"]
[Sat Aug 29 05:09:18.287437 2026] [security2:error] [pid 1041789:tid 1042021] [client 20.197.61.180:1024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/as.php"] [unique_id "apK93ov3RhPI65jTFG7d_AAAA3g"]
[Sat Aug 29 05:09:18.293650 2026] [security2:error] [pid 1034096:tid 1034273] [client 20.100.175.163:29069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/av.php"] [unique_id "apK93i04twRPFuquKD3KMQAAAJs"]
[Sat Aug 29 05:09:18.296270 2026] [security2:error] [pid 1041789:tid 1042046] [client 158.23.147.79:44488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK93ov3RhPI65jTFG7d_QAAA5E"]
[Sat Aug 29 05:09:18.303684 2026] [security2:error] [pid 1041789:tid 1042036] [client 20.104.18.15:22512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/coffexium.php"] [unique_id "apK93ov3RhPI65jTFG7d_gAAA4c"]
[Sat Aug 29 05:09:18.325744 2026] [security2:error] [pid 1041789:tid 1041956] [client 68.155.159.216:56553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/index/function.php"] [unique_id "apK93ov3RhPI65jTFG7d_wAAAzc"]
[Sat Aug 29 05:09:18.326308 2026] [security2:error] [pid 1034096:tid 1034322] [client 158.23.184.117:16630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/.well-known/wp-settings.php"] [unique_id "apK93i04twRPFuquKD3KNAAAAMw"]
[Sat Aug 29 05:09:18.328442 2026] [security2:error] [pid 1034096:tid 1034293] [client 20.63.81.20:65165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/wp-theme.php"] [unique_id "apK93i04twRPFuquKD3KNQAAAK8"]
[Sat Aug 29 05:09:18.331024 2026] [security2:error] [pid 1034096:tid 1034277] [client 20.104.18.15:15264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/beck.php"] [unique_id "apK93i04twRPFuquKD3KNgAAAJ8"]
[Sat Aug 29 05:09:18.332916 2026] [security2:error] [pid 1034096:tid 1034275] [client 20.104.18.15:41893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/file5.php"] [unique_id "apK93i04twRPFuquKD3KNwAAAJ0"]
[Sat Aug 29 05:09:18.333407 2026] [security2:error] [pid 1041789:tid 1041982] [client 20.104.18.15:16809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/44.php"] [unique_id "apK93ov3RhPI65jTFG7eAAAAA1E"]
[Sat Aug 29 05:09:18.341735 2026] [security2:error] [pid 1034096:tid 1034165] [remote 93.123.109.228:36026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/.env.php"] [unique_id "apK93i04twRPFuquKD3KOwAAjis"]
[Sat Aug 29 05:09:18.354730 2026] [security2:error] [pid 1041789:tid 1041998] [client 20.104.18.15:45997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/file5.php"] [unique_id "apK93ov3RhPI65jTFG7eAQAAA2E"]
[Sat Aug 29 05:09:18.392004 2026] [security2:error] [pid 1034096:tid 1034310] [client 20.104.49.130:48539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK93i04twRPFuquKD3KPgAAAMA"]
[Sat Aug 29 05:09:18.396944 2026] [security2:error] [pid 1034096:tid 1034372] [client 20.63.219.114:15381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/room.php"] [unique_id "apK93i04twRPFuquKD3KPwAAAP4"]
[Sat Aug 29 05:09:18.403161 2026] [security2:error] [pid 1034096:tid 1034266] [client 20.104.18.15:39881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/f.php"] [unique_id "apK93i04twRPFuquKD3KQAAAAJQ"]
[Sat Aug 29 05:09:18.427464 2026] [security2:error] [pid 1034096:tid 1034263] [client 20.104.18.15:46020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/133.php"] [unique_id "apK93i04twRPFuquKD3KQQAAAJE"]
[Sat Aug 29 05:09:18.435256 2026] [security2:error] [pid 1034096:tid 1034352] [client 20.104.18.15:22508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/BDKR28WP.php"] [unique_id "apK93i04twRPFuquKD3KRwAAAOo"]
[Sat Aug 29 05:09:18.452896 2026] [security2:error] [pid 1041789:tid 1041957] [client 20.104.18.15:7017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/ap.php"] [unique_id "apK93ov3RhPI65jTFG7eAgAAAzg"]
[Sat Aug 29 05:09:18.456686 2026] [security2:error] [pid 1034096:tid 1034329] [client 20.63.81.20:65195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/2d7433/index.php"] [unique_id "apK93i04twRPFuquKD3KSAAAANM"]
[Sat Aug 29 05:09:18.458682 2026] [security2:error] [pid 1034096:tid 1034328] [client 20.104.18.15:16868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/h2.php"] [unique_id "apK93i04twRPFuquKD3KSQAAANI"]
[Sat Aug 29 05:09:18.472561 2026] [security2:error] [pid 1034096:tid 1034286] [client 158.23.184.117:16466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/.well-known/wp-signup.php"] [unique_id "apK93i04twRPFuquKD3KSwAAAKg"]
[Sat Aug 29 05:09:18.473580 2026] [security2:error] [pid 1041789:tid 1042053] [client 68.155.159.216:9247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-admin/user/index.php"] [unique_id "apK93ov3RhPI65jTFG7eBAAAA5g"]
[Sat Aug 29 05:09:18.474928 2026] [security2:error] [pid 1041789:tid 1042035] [client 158.23.147.79:17665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.steveslivemusic.com"] [uri "/first.php"] [unique_id "apK93ov3RhPI65jTFG7eBQAAA4Y"]
[Sat Aug 29 05:09:18.476804 2026] [security2:error] [pid 1034096:tid 1034355] [client 20.104.18.15:15183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/t3.php"] [unique_id "apK93i04twRPFuquKD3KTAAAAO0"]
[Sat Aug 29 05:09:18.498815 2026] [security2:error] [pid 1034096:tid 1034276] [client 20.104.18.15:41947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/xyn.php"] [unique_id "apK93i04twRPFuquKD3KTQAAAJ4"]
[Sat Aug 29 05:09:18.508390 2026] [security2:error] [pid 1034096:tid 1034319] [client 158.158.54.35:18905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/yanz.php"] [unique_id "apK93i04twRPFuquKD3KTwAAAMk"]
[Sat Aug 29 05:09:18.510159 2026] [security2:error] [pid 1041789:tid 1041954] [client 74.248.24.12:22876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/a1.php"] [unique_id "apK93ov3RhPI65jTFG7eBwAAAzU"]
[Sat Aug 29 05:09:18.514712 2026] [security2:error] [pid 1041789:tid 1041964] [client 68.155.159.216:33754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-admin/images/about.php"] [unique_id "apK93ov3RhPI65jTFG7eCAAAAz8"]
[Sat Aug 29 05:09:18.530790 2026] [security2:error] [pid 1034096:tid 1034321] [client 20.104.18.15:46015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/xyn.php"] [unique_id "apK93i04twRPFuquKD3KUwAAAMs"]
[Sat Aug 29 05:09:18.534629 2026] [security2:error] [pid 1034096:tid 1034292] [client 20.104.18.15:43999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/samll.php"] [unique_id "apK93i04twRPFuquKD3KVQAAAK4"]
[Sat Aug 29 05:09:18.537713 2026] [security2:error] [pid 1041789:tid 1042029] [client 20.104.18.15:12106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/xmini4.php"] [unique_id "apK93ov3RhPI65jTFG7eCQAAA4A"]
[Sat Aug 29 05:09:18.539194 2026] [security2:error] [pid 1041789:tid 1042029] [client 68.155.159.216:23497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK93ov3RhPI65jTFG7eCgAAA4A"]
[Sat Aug 29 05:09:18.539959 2026] [security2:error] [pid 1034096:tid 1034294] [client 20.196.209.81:1137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/22.php"] [unique_id "apK93i04twRPFuquKD3KVwAAALA"]
[Sat Aug 29 05:09:18.568588 2026] [security2:error] [pid 1041789:tid 1041936] [client 4.205.62.107:6477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/paths.php"] [unique_id "apK93ov3RhPI65jTFG7eCwAAAyM"]
[Sat Aug 29 05:09:18.573061 2026] [security2:error] [pid 1041789:tid 1042050] [client 20.104.18.15:39771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jenniferandrussell.strangeworx.com"] [uri "/1dfcd2d08f.php"] [unique_id "apK93ov3RhPI65jTFG7eDAAAA5U"]
[Sat Aug 29 05:09:18.576688 2026] [security2:error] [pid 1041789:tid 1041967] [client 20.104.18.15:45894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/1xmomo.php"] [unique_id "apK93ov3RhPI65jTFG7eDQAAA0I"]
[Sat Aug 29 05:09:18.580792 2026] [security2:error] [pid 1034096:tid 1034365] [client 4.205.62.107:53369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/a1vx.php"] [unique_id "apK93i04twRPFuquKD3KWwAAAPc"]
[Sat Aug 29 05:09:18.591762 2026] [security2:error] [pid 1034096:tid 1034285] [client 20.104.18.15:25568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/wp-content/mod/adminfuns.php"] [unique_id "apK93i04twRPFuquKD3KXAAAAKc"]
[Sat Aug 29 05:09:18.597743 2026] [security2:error] [pid 1034096:tid 1034274] [client 20.196.209.81:8363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-content/classwithtostring.php"] [unique_id "apK93i04twRPFuquKD3KXQAAAJw"]
[Sat Aug 29 05:09:18.599832 2026] [security2:error] [pid 1034096:tid 1034314] [client 20.151.200.44:63897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/kcs.php"] [unique_id "apK93i04twRPFuquKD3KXgAAAMQ"]
[Sat Aug 29 05:09:18.607840 2026] [security2:error] [pid 1041789:tid 1041970] [client 20.63.219.114:18945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/contentloader1.php"] [unique_id "apK93ov3RhPI65jTFG7eDwAAA0U"]
[Sat Aug 29 05:09:18.609123 2026] [security2:error] [pid 1041789:tid 1042031] [client 68.155.159.216:16288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK93ov3RhPI65jTFG7eEAAAA4I"]
[Sat Aug 29 05:09:18.609223 2026] [security2:error] [pid 1034096:tid 1034344] [client 158.23.147.79:6013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/.well-known/content.php"] [unique_id "apK93i04twRPFuquKD3KYAAAAOI"]
[Sat Aug 29 05:09:18.616925 2026] [security2:error] [pid 1034096:tid 1034350] [client 68.155.159.216:64429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK93i04twRPFuquKD3KYwAAAOg"]
[Sat Aug 29 05:09:18.618508 2026] [security2:error] [pid 1041789:tid 1041995] [client 158.23.184.117:16501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/002.php"] [unique_id "apK93ov3RhPI65jTFG7eEQAAA14"]
[Sat Aug 29 05:09:18.624327 2026] [security2:error] [pid 1041789:tid 1042004] [client 20.104.18.15:7105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/media.php"] [unique_id "apK93ov3RhPI65jTFG7eEgAAA2c"]
[Sat Aug 29 05:09:18.628333 2026] [security2:error] [pid 1034096:tid 1034376] [client 4.205.62.107:65425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/linusadmin-phpinfo.php"] [unique_id "apK93i04twRPFuquKD3KZwAAAQI"]
[Sat Aug 29 05:09:18.638857 2026] [security2:error] [pid 1041789:tid 1041977] [client 20.63.81.20:63687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/wp-login.php"] [unique_id "apK93ov3RhPI65jTFG7eDgAAA0w"]
[Sat Aug 29 05:09:18.639996 2026] [security2:error] [pid 1041789:tid 1041931] [client 20.104.18.15:15311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/wp.php"] [unique_id "apK93ov3RhPI65jTFG7eFAAAAx4"]
[Sat Aug 29 05:09:18.641048 2026] [security2:error] [pid 1041789:tid 1042041] [client 20.104.18.15:41920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/inso.php"] [unique_id "apK93ov3RhPI65jTFG7eFQAAA4w"]
[Sat Aug 29 05:09:18.642325 2026] [security2:error] [pid 1041789:tid 1041943] [client 68.155.159.216:14297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-content/banners/about.php"] [unique_id "apK93ov3RhPI65jTFG7eFgAAAyo"]
[Sat Aug 29 05:09:18.661676 2026] [security2:error] [pid 1034096:tid 1034368] [client 20.104.18.15:45959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/inso.php"] [unique_id "apK93i04twRPFuquKD3KaAAAAPo"]
[Sat Aug 29 05:09:18.671566 2026] [security2:error] [pid 1034096:tid 1034325] [client 20.104.18.15:12195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/gulu.php"] [unique_id "apK93i04twRPFuquKD3KagAAAM8"]
[Sat Aug 29 05:09:18.676599 2026] [security2:error] [pid 1041789:tid 1042025] [client 4.205.62.107:62958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/ah25.php"] [unique_id "apK93ov3RhPI65jTFG7eGAAAA3w"]
[Sat Aug 29 05:09:18.691004 2026] [security2:error] [pid 1041789:tid 1042047] [client 20.197.61.180:15011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/wxo.php"] [unique_id "apK93ov3RhPI65jTFG7eGQAAA5I"]
[Sat Aug 29 05:09:18.694675 2026] [security2:error] [pid 1034096:tid 1034359] [client 4.205.62.107:58431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/admin.php"] [unique_id "apK93i04twRPFuquKD3KawAAAPE"]
[Sat Aug 29 05:09:18.701898 2026] [security2:error] [pid 1041789:tid 1042057] [client 20.104.18.15:43307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/she11.php"] [unique_id "apK93ov3RhPI65jTFG7eGwAAA5w"]
[Sat Aug 29 05:09:18.708557 2026] [security2:error] [pid 1041789:tid 1042027] [client 4.232.148.111:19896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/adminfuns.php"] [unique_id "apK93ov3RhPI65jTFG7eHAAAA34"]
[Sat Aug 29 05:09:18.717219 2026] [security2:error] [pid 1041789:tid 1041942] [client 4.232.148.111:3789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/u.php"] [unique_id "apK93ov3RhPI65jTFG7eHQAAAyk"]
[Sat Aug 29 05:09:18.720823 2026] [security2:error] [pid 1041789:tid 1041966] [client 20.104.18.15:16805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/sao.php"] [unique_id "apK93ov3RhPI65jTFG7eHgAAA0E"]
[Sat Aug 29 05:09:18.730161 2026] [security2:error] [pid 1034096:tid 1034273] [client 103.215.74.26:13142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.74.215.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.com"] [uri "/index.php"] [unique_id "apK93i04twRPFuquKD3KbQAAAJs"], referer: http://kglogisticsinc.com/wp-admin/
[Sat Aug 29 05:09:18.765336 2026] [security2:error] [pid 1041789:tid 1041934] [client 158.23.184.117:16585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/0x.php"] [unique_id "apK93ov3RhPI65jTFG7eHwAAAyE"]
[Sat Aug 29 05:09:18.771029 2026] [security2:error] [pid 1041789:tid 1042056] [client 20.104.18.15:15271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/abcd.php"] [unique_id "apK93ov3RhPI65jTFG7eIAAAA5s"]
[Sat Aug 29 05:09:18.773721 2026] [security2:error] [pid 1034096:tid 1034316] [client 68.155.159.216:6056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-content/index.php"] [unique_id "apK93i04twRPFuquKD3KcQAAAMY"]
[Sat Aug 29 05:09:18.775262 2026] [security2:error] [pid 1034096:tid 1034300] [client 20.63.81.20:65238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/images.php"] [unique_id "apK93i04twRPFuquKD3KcgAAALY"]
[Sat Aug 29 05:09:18.779414 2026] [security2:error] [pid 1041789:tid 1042015] [client 20.104.18.15:7114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/adminfuns.php"] [unique_id "apK93ov3RhPI65jTFG7eIQAAA3I"]
[Sat Aug 29 05:09:18.792926 2026] [security2:error] [pid 1041789:tid 1041944] [client 20.104.18.15:46074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/mosty.php"] [unique_id "apK93ov3RhPI65jTFG7eIgAAAys"]
[Sat Aug 29 05:09:18.804936 2026] [security2:error] [pid 1034096:tid 1034310] [client 20.104.49.130:47826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/bolt.php"] [unique_id "apK93i04twRPFuquKD3KdAAAAMA"]
[Sat Aug 29 05:09:18.808183 2026] [security2:error] [pid 1034096:tid 1034282] [client 20.100.175.163:25997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/file.php"] [unique_id "apK93i04twRPFuquKD3KdQAAAKQ"]
[Sat Aug 29 05:09:18.810137 2026] [security2:error] [pid 1034096:tid 1034304] [client 4.205.62.107:53147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/drykl.php"] [unique_id "apK93i04twRPFuquKD3KdgAAALo"]
[Sat Aug 29 05:09:18.814173 2026] [security2:error] [pid 1034096:tid 1034265] [client 20.104.18.15:41955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/puc.php"] [unique_id "apK93i04twRPFuquKD3KdwAAAJM"]
[Sat Aug 29 05:09:18.827615 2026] [security2:error] [pid 1034096:tid 1034266] [client 20.104.18.15:45961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/puc.php"] [unique_id "apK93i04twRPFuquKD3KeAAAAJQ"]
[Sat Aug 29 05:09:18.837291 2026] [security2:error] [pid 1034096:tid 1034263] [client 158.23.147.79:11414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/lock.php"] [unique_id "apK93i04twRPFuquKD3KeQAAAJE"]
[Sat Aug 29 05:09:18.854022 2026] [security2:error] [pid 1034096:tid 1034328] [client 68.155.159.216:64401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/themes.php"] [unique_id "apK93i04twRPFuquKD3KegAAANI"]
[Sat Aug 29 05:09:18.859544 2026] [security2:error] [pid 1034096:tid 1034309] [client 20.104.18.15:16826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/dapa.php"] [unique_id "apK93i04twRPFuquKD3KewAAAL8"]
[Sat Aug 29 05:09:18.869459 2026] [security2:error] [pid 1034096:tid 1034369] [client 20.63.219.114:2975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/class-wp-cmd.php"] [unique_id "apK93i04twRPFuquKD3KfAAAAPs"]
[Sat Aug 29 05:09:18.884818 2026] [security2:error] [pid 1041789:tid 1042019] [client 20.104.18.15:12216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/replace.php"] [unique_id "apK93ov3RhPI65jTFG7eIwAAA3Y"]
[Sat Aug 29 05:09:18.896542 2026] [security2:error] [pid 1034096:tid 1034318] [client 20.104.18.15:22471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/sf.php"] [unique_id "apK93i04twRPFuquKD3KfQAAAMg"]
[Sat Aug 29 05:09:18.901730 2026] [security2:error] [pid 1034096:tid 1034342] [client 20.104.18.15:15178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/nofile.php"] [unique_id "apK93i04twRPFuquKD3KfgAAAOA"]
[Sat Aug 29 05:09:18.905415 2026] [security2:error] [pid 1034096:tid 1034374] [client 20.63.81.20:63684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/ops.php"] [unique_id "apK93i04twRPFuquKD3KfwAAAQA"]
[Sat Aug 29 05:09:18.909934 2026] [security2:error] [pid 1034096:tid 1034255] [client 158.23.184.117:63075] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.photoboothvancouver.com"] [uri "/1.php"] [unique_id "apK93i04twRPFuquKD3KgAAAAIk"]
[Sat Aug 29 05:09:18.910058 2026] [security2:error] [pid 1034096:tid 1034255] [client 158.23.184.117:63075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/1.php"] [unique_id "apK93i04twRPFuquKD3KgAAAAIk"]
[Sat Aug 29 05:09:18.926619 2026] [security2:error] [pid 1041789:tid 1041963] [client 20.104.18.15:46079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/blurbs.php"] [unique_id "apK93ov3RhPI65jTFG7eJAAAAz4"]
[Sat Aug 29 05:09:18.942677 2026] [security2:error] [pid 1034096:tid 1034372] [client 20.196.209.81:14910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/bak.phps"] [unique_id "apK93i04twRPFuquKD3KggAAAP4"]
[Sat Aug 29 05:09:18.947204 2026] [security2:error] [pid 1034096:tid 1034294] [client 20.104.18.15:43997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/kerang.php"] [unique_id "apK93i04twRPFuquKD3KgwAAALA"]
[Sat Aug 29 05:09:18.949658 2026] [security2:error] [pid 1034096:tid 1034367] [client 158.158.54.35:13045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/autoload_classmap.php"] [unique_id "apK93i04twRPFuquKD3KhAAAAPk"]
[Sat Aug 29 05:09:18.952964 2026] [security2:error] [pid 1034096:tid 1034284] [client 20.151.200.44:63861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/wsz.php"] [unique_id "apK93i04twRPFuquKD3KhQAAAKY"]
[Sat Aug 29 05:09:18.959248 2026] [security2:error] [pid 1034096:tid 1034377] [client 20.104.18.15:7065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/classwithtostring.php"] [unique_id "apK93i04twRPFuquKD3KhgAAAQM"]
[Sat Aug 29 05:09:18.976117 2026] [security2:error] [pid 1034096:tid 1034274] [client 20.104.18.15:41872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/19.php"] [unique_id "apK93i04twRPFuquKD3KiAAAAJw"]
[Sat Aug 29 05:09:18.999976 2026] [security2:error] [pid 1041789:tid 1041979] [client 20.196.209.81:17989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-content/config.php"] [unique_id "apK93ov3RhPI65jTFG7eJgAAA04"]
[Sat Aug 29 05:09:19.010442 2026] [security2:error] [pid 1034096:tid 1034362] [client 20.197.61.180:9563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/room.php"] [unique_id "apK93y04twRPFuquKD3KiQAAAPQ"]
[Sat Aug 29 05:09:19.012926 2026] [security2:error] [pid 1034096:tid 1034376] [client 68.155.159.216:49223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK93y04twRPFuquKD3KigAAAQI"]
[Sat Aug 29 05:09:19.019478 2026] [security2:error] [pid 1041789:tid 1042017] [client 20.63.219.114:1282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/al.php"] [unique_id "apK934v3RhPI65jTFG7eJwAAA3Q"]
[Sat Aug 29 05:09:19.021773 2026] [security2:error] [pid 1034096:tid 1034329] [client 74.248.24.12:37701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK93y04twRPFuquKD3KiwAAANM"]
[Sat Aug 29 05:09:19.025574 2026] [security2:error] [pid 1041789:tid 1042045] [client 20.104.18.15:16785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/wp-content/l.php"] [unique_id "apK934v3RhPI65jTFG7eKAAAA5A"]
[Sat Aug 29 05:09:19.035245 2026] [security2:error] [pid 1034096:tid 1034262] [client 20.104.18.15:15353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/run.php"] [unique_id "apK93y04twRPFuquKD3KjAAAAJA"]
[Sat Aug 29 05:09:19.041627 2026] [security2:error] [pid 1041789:tid 1041993] [client 20.63.81.20:65235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK934v3RhPI65jTFG7eKQAAA1w"]
[Sat Aug 29 05:09:19.056014 2026] [security2:error] [pid 1034096:tid 1034350] [client 158.23.184.117:16500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/10.php"] [unique_id "apK93y04twRPFuquKD3KjwAAAOg"]
[Sat Aug 29 05:09:19.057165 2026] [security2:error] [pid 1034096:tid 1034302] [client 20.104.18.15:22514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/k.php"] [unique_id "apK93y04twRPFuquKD3KkAAAALg"]
[Sat Aug 29 05:09:19.061426 2026] [security2:error] [pid 1041789:tid 1041923] [remote 74.7.227.154:54326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK934v3RhPI65jTFG7eKgADeHk"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwp-easycart%2Finc%2Faws%2FAws
[Sat Aug 29 05:09:19.075684 2026] [security2:error] [pid 1041789:tid 1042046] [client 20.104.18.15:12102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/c4.php"] [unique_id "apK934v3RhPI65jTFG7eKwAAA5E"]
[Sat Aug 29 05:09:19.084627 2026] [security2:error] [pid 1041789:tid 1041978] [client 158.23.147.79:58068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK934v3RhPI65jTFG7eLAAAA00"]
[Sat Aug 29 05:09:19.088539 2026] [security2:error] [pid 1034096:tid 1034287] [client 158.23.147.79:5987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK93y04twRPFuquKD3KkgAAAKk"]
[Sat Aug 29 05:09:19.095009 2026] [security2:error] [pid 1034096:tid 1034339] [client 20.104.18.15:7054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK93y04twRPFuquKD3KkwAAAN0"]
[Sat Aug 29 05:09:19.111052 2026] [security2:error] [pid 1034096:tid 1034324] [client 20.104.18.15:46039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/h.php"] [unique_id "apK93y04twRPFuquKD3KlAAAAM4"]
[Sat Aug 29 05:09:19.123832 2026] [security2:error] [pid 1034096:tid 1034204] [remote 74.7.227.189:37550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 189.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pinnacleforms.com"] [uri "/xxTestA1.php"] [unique_id "apK93y04twRPFuquKD3KlQAAmVI"], referer: https://mail.pinnacleforms.com/
[Sat Aug 29 05:09:19.155786 2026] [security2:error] [pid 1034096:tid 1034300] [client 20.104.49.130:60955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/m.php"] [unique_id "apK93y04twRPFuquKD3KlgAAALY"]
[Sat Aug 29 05:09:19.160205 2026] [security2:error] [pid 1034096:tid 1034310] [client 20.104.18.15:41979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/133.php"] [unique_id "apK93y04twRPFuquKD3KlwAAAMA"]
[Sat Aug 29 05:09:19.169353 2026] [security2:error] [pid 1041789:tid 1041976] [client 20.104.18.15:16796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/wp-admin/w.php"] [unique_id "apK934v3RhPI65jTFG7eLQAAA0s"]
[Sat Aug 29 05:09:19.180279 2026] [security2:error] [pid 1034096:tid 1034363] [client 20.104.18.15:46013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/19.php"] [unique_id "apK93y04twRPFuquKD3KmAAAAPU"]
[Sat Aug 29 05:09:19.180715 2026] [security2:error] [pid 1034096:tid 1034277] [client 20.63.81.20:65178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK93y04twRPFuquKD3KmQAAAJ8"]
[Sat Aug 29 05:09:19.181182 2026] [security2:error] [pid 1034096:tid 1034297] [client 20.104.18.15:15266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/new.php"] [unique_id "apK93y04twRPFuquKD3KmgAAALM"]
[Sat Aug 29 05:09:19.188083 2026] [security2:error] [pid 1034096:tid 1034270] [client 4.232.148.111:19864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/goods.php"] [unique_id "apK93y04twRPFuquKD3KmwAAAJg"]
[Sat Aug 29 05:09:19.191134 2026] [security2:error] [pid 1041789:tid 1042048] [client 4.232.148.111:3784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/r.php"] [unique_id "apK934v3RhPI65jTFG7eLgAAA5M"]
[Sat Aug 29 05:09:19.194648 2026] [security2:error] [pid 1034096:tid 1034352] [client 20.104.18.15:43978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/m.php"] [unique_id "apK93y04twRPFuquKD3KnQAAAOo"]
[Sat Aug 29 05:09:19.202804 2026] [security2:error] [pid 1041789:tid 1041986] [client 158.23.184.117:17351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/100.php"] [unique_id "apK934v3RhPI65jTFG7eLwAAA1U"]
[Sat Aug 29 05:09:19.217270 2026] [security2:error] [pid 1034096:tid 1034311] [client 20.104.18.15:22483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/82.php"] [unique_id "apK93y04twRPFuquKD3KngAAAME"]
[Sat Aug 29 05:09:19.247972 2026] [security2:error] [pid 1034096:tid 1034276] [client 4.205.62.107:22042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/app/Helpers/bladeHelpers.php"] [unique_id "apK93y04twRPFuquKD3KnwAAAJ4"]
[Sat Aug 29 05:09:19.255732 2026] [security2:error] [pid 1041789:tid 1042000] [client 68.155.159.216:24389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK934v3RhPI65jTFG7eMQAAA2M"]
[Sat Aug 29 05:09:19.263307 2026] [security2:error] [pid 1034096:tid 1034253] [client 68.155.159.216:1962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/radio.php"] [unique_id "apK93y04twRPFuquKD3KoAAAAIc"]
[Sat Aug 29 05:09:19.278846 2026] [security2:error] [pid 1041789:tid 1041987] [client 20.104.18.15:12098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/rxr.php"] [unique_id "apK934v3RhPI65jTFG7eMgAAA1Y"]
[Sat Aug 29 05:09:19.290917 2026] [security2:error] [pid 1034096:tid 1034374] [client 20.104.18.15:7032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/5PJcpMFsD8B.php"] [unique_id "apK93y04twRPFuquKD3KoQAAAQA"]
[Sat Aug 29 05:09:19.291335 2026] [security2:error] [pid 1034096:tid 1034255] [client 20.151.200.44:62645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/msy.php"] [unique_id "apK93y04twRPFuquKD3KogAAAIk"]
[Sat Aug 29 05:09:19.310015 2026] [security2:error] [pid 1034096:tid 1034372] [client 20.104.18.15:16790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/wp-content/k.php"] [unique_id "apK93y04twRPFuquKD3KowAAAP4"]
[Sat Aug 29 05:09:19.313900 2026] [security2:error] [pid 1034096:tid 1034283] [client 20.63.81.20:65260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/about.php"] [unique_id "apK93y04twRPFuquKD3KpAAAAKU"]
[Sat Aug 29 05:09:19.320855 2026] [security2:error] [pid 1034096:tid 1034377] [client 20.104.49.130:47845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/cilus.php"] [unique_id "apK93y04twRPFuquKD3KpQAAAQM"]
[Sat Aug 29 05:09:19.323001 2026] [security2:error] [pid 1034096:tid 1034282] [client 20.63.219.114:19850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/disagreed.php"] [unique_id "apK93y04twRPFuquKD3KpgAAAKQ"]
[Sat Aug 29 05:09:19.347749 2026] [security2:error] [pid 1034096:tid 1034371] [client 68.155.159.216:33570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK93y04twRPFuquKD3KqAAAAP0"]
[Sat Aug 29 05:09:19.348287 2026] [security2:error] [pid 1034096:tid 1034260] [client 20.100.175.163:1272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK93y04twRPFuquKD3KqQAAAI4"]
[Sat Aug 29 05:09:19.349682 2026] [security2:error] [pid 1034096:tid 1034306] [client 20.104.18.15:15317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/inx.php"] [unique_id "apK93y04twRPFuquKD3KqgAAALw"]
[Sat Aug 29 05:09:19.351370 2026] [security2:error] [pid 1034096:tid 1034303] [client 158.23.184.117:16507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/2.php"] [unique_id "apK93y04twRPFuquKD3KqwAAALk"]
[Sat Aug 29 05:09:19.351432 2026] [security2:error] [pid 1034096:tid 1034274] [client 20.104.18.15:46035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/ano.php"] [unique_id "apK93y04twRPFuquKD3KrAAAAJw"]
[Sat Aug 29 05:09:19.367789 2026] [security2:error] [pid 1034096:tid 1034369] [client 20.196.209.81:14871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/install.php"] [unique_id "apK93y04twRPFuquKD3KrQAAAPs"]
[Sat Aug 29 05:09:19.376186 2026] [security2:error] [pid 1034096:tid 1034318] [client 20.63.219.114:10452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/global.php"] [unique_id "apK93y04twRPFuquKD3KrgAAAMg"]
[Sat Aug 29 05:09:19.376852 2026] [security2:error] [pid 1034096:tid 1034373] [client 20.104.18.15:43998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/fling.php"] [unique_id "apK93y04twRPFuquKD3KrwAAAP8"]
[Sat Aug 29 05:09:19.383322 2026] [security2:error] [pid 1041789:tid 1042053] [client 158.23.147.79:60200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK934v3RhPI65jTFG7eMwAAA5g"]
[Sat Aug 29 05:09:19.383932 2026] [security2:error] [pid 1041789:tid 1042035] [client 20.104.18.15:41874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/1xmomo.php"] [unique_id "apK934v3RhPI65jTFG7eNAAAA4Y"]
[Sat Aug 29 05:09:19.393143 2026] [security2:error] [pid 1041789:tid 1041938] [client 158.23.147.79:44526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/chosen.php"] [unique_id "apK934v3RhPI65jTFG7eNQAAAyU"]
[Sat Aug 29 05:09:19.395864 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.196.209.81:22631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-content/cong.php"] [unique_id "apK934v3RhPI65jTFG7eNgAAA3o"]
[Sat Aug 29 05:09:19.411586 2026] [security2:error] [pid 1034096:tid 1034325] [client 20.104.18.15:22404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/dex.php"] [unique_id "apK93y04twRPFuquKD3KsAAAAM8"]
[Sat Aug 29 05:09:19.418751 2026] [security2:error] [pid 1034096:tid 1034251] [client 20.104.18.15:46028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/133.php"] [unique_id "apK93y04twRPFuquKD3KsgAAAIU"]
[Sat Aug 29 05:09:19.422132 2026] [security2:error] [pid 1034096:tid 1034359] [client 20.104.18.15:7096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK93y04twRPFuquKD3KswAAAPE"]
[Sat Aug 29 05:09:19.424514 2026] [security2:error] [pid 1041789:tid 1041949] [client 158.158.54.35:31548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/bi.php"] [unique_id "apK934v3RhPI65jTFG7eNwAAAzA"]
[Sat Aug 29 05:09:19.430730 2026] [security2:error] [pid 1034096:tid 1034365] [client 68.155.159.216:38686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/.well-known/content.php"] [unique_id "apK93y04twRPFuquKD3KtAAAAPc"]
[Sat Aug 29 05:09:19.433921 2026] [security2:error] [pid 1041789:tid 1041950] [client 20.197.61.180:1074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/as.php"] [unique_id "apK934v3RhPI65jTFG7eOAAAAzE"]
[Sat Aug 29 05:09:19.437254 2026] [security2:error] [pid 1034096:tid 1034287] [client 20.104.18.15:16783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/os.php"] [unique_id "apK93y04twRPFuquKD3KtQAAAKk"]
[Sat Aug 29 05:09:19.450525 2026] [security2:error] [pid 1034096:tid 1034339] [client 20.63.81.20:63683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/admin.php/admin.php"] [unique_id "apK93y04twRPFuquKD3KtgAAAN0"]
[Sat Aug 29 05:09:19.479663 2026] [security2:error] [pid 1041789:tid 1041964] [client 20.104.18.15:46059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/ai.php"] [unique_id "apK934v3RhPI65jTFG7eOQAAAz8"]
[Sat Aug 29 05:09:19.485222 2026] [security2:error] [pid 1034096:tid 1034324] [client 20.151.200.44:63826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/siln.php"] [unique_id "apK93y04twRPFuquKD3KuAAAAM4"]
[Sat Aug 29 05:09:19.499616 2026] [security2:error] [pid 1034096:tid 1034335] [client 158.23.184.117:63058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/222.php"] [unique_id "apK93y04twRPFuquKD3KuwAAANk"]
[Sat Aug 29 05:09:19.516380 2026] [security2:error] [pid 1041789:tid 1042011] [client 20.104.18.15:41958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/mosty.php"] [unique_id "apK934v3RhPI65jTFG7ePAAAA24"]
[Sat Aug 29 05:09:19.523221 2026] [security2:error] [pid 1034096:tid 1034362] [client 74.248.24.12:37705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/alfa-rex.php7"] [unique_id "apK93y04twRPFuquKD3KvAAAAPQ"]
[Sat Aug 29 05:09:19.523928 2026] [security2:error] [pid 1041789:tid 1042050] [client 20.104.49.130:57676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/ws85.php"] [unique_id "apK934v3RhPI65jTFG7ePQAAA5U"]
[Sat Aug 29 05:09:19.524423 2026] [security2:error] [pid 1041789:tid 1041967] [client 20.104.18.15:15259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/vpn.php"] [unique_id "apK934v3RhPI65jTFG7ePgAAA0I"]
[Sat Aug 29 05:09:19.529114 2026] [security2:error] [pid 1041789:tid 1041997] [client 20.104.18.15:12171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.printingbyjoe.com"] [uri "/reviall.php"] [unique_id "apK934v3RhPI65jTFG7ePwAAA2A"]
[Sat Aug 29 05:09:19.545325 2026] [security2:error] [pid 1041789:tid 1042049] [client 20.104.18.15:22522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/inso.php"] [unique_id "apK934v3RhPI65jTFG7eQAAAA5Q"]
[Sat Aug 29 05:09:19.549339 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.104.18.15:43324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/btyuio.php"] [unique_id "apK934v3RhPI65jTFG7eQQAAA30"]
[Sat Aug 29 05:09:19.552613 2026] [security2:error] [pid 1041789:tid 1041970] [client 20.104.18.15:7121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/wsd.php"] [unique_id "apK934v3RhPI65jTFG7eQgAAA0U"]
[Sat Aug 29 05:09:19.568910 2026] [security2:error] [pid 1041789:tid 1042031] [client 20.104.18.15:25580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/htio.php"] [unique_id "apK934v3RhPI65jTFG7eQwAAA4I"]
[Sat Aug 29 05:09:19.582595 2026] [security2:error] [pid 1041789:tid 1042004] [client 68.155.159.216:9249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-includes/plugins.php"] [unique_id "apK934v3RhPI65jTFG7eRAAAA2c"]
[Sat Aug 29 05:09:19.588933 2026] [security2:error] [pid 1034096:tid 1034263] [client 20.63.81.20:65247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/media.php"] [unique_id "apK93y04twRPFuquKD3KvgAAAJE"]
[Sat Aug 29 05:09:19.597550 2026] [security2:error] [pid 1041789:tid 1042036] [client 103.240.76.112:43077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK934v3RhPI65jTFG7eRQAAA4c"]
[Sat Aug 29 05:09:19.597695 2026] [security2:error] [pid 1041789:tid 1042036] [client 103.240.76.112:43077] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK934v3RhPI65jTFG7eRQAAA4c"]
[Sat Aug 29 05:09:19.621940 2026] [security2:error] [pid 1041789:tid 1041946] [client 68.155.159.216:33540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK934v3RhPI65jTFG7eRgAAAy0"]
[Sat Aug 29 05:09:19.644828 2026] [security2:error] [pid 1034096:tid 1034317] [client 158.23.184.117:16473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/24.php"] [unique_id "apK93y04twRPFuquKD3KwQAAAMc"]
[Sat Aug 29 05:09:19.646975 2026] [security2:error] [pid 1041789:tid 1042042] [client 68.155.159.216:23508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/asd.php"] [unique_id "apK934v3RhPI65jTFG7eRwAAA40"]
[Sat Aug 29 05:09:19.653754 2026] [security2:error] [pid 1041789:tid 1042051] [client 20.151.200.44:63834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/f-401.php"] [unique_id "apK934v3RhPI65jTFG7eSAAAA5Y"]
[Sat Aug 29 05:09:19.658831 2026] [security2:error] [pid 1034096:tid 1034363] [client 4.232.148.111:17980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-blog.php"] [unique_id "apK93y04twRPFuquKD3KwgAAAPU"]
[Sat Aug 29 05:09:19.663621 2026] [security2:error] [pid 1041789:tid 1042029] [client 4.232.148.111:23213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/css.php"] [unique_id "apK934v3RhPI65jTFG7eSQAAA4A"]
[Sat Aug 29 05:09:19.679782 2026] [security2:error] [pid 1041789:tid 1042032] [client 213.202.253.4:50094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "timportlock.net"] [uri "/txets.php"] [unique_id "apK934v3RhPI65jTFG7eSgAAA4M"], referer: www.google.com
[Sat Aug 29 05:09:19.706496 2026] [security2:error] [pid 1034096:tid 1034276] [client 4.205.62.107:6507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/olfclass.php"] [unique_id "apK93y04twRPFuquKD3KwwAAAJ4"]
[Sat Aug 29 05:09:19.719443 2026] [security2:error] [pid 1034096:tid 1034253] [client 20.63.81.20:65170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/mac.php"] [unique_id "apK93y04twRPFuquKD3KxQAAAIc"]
[Sat Aug 29 05:09:19.738483 2026] [security2:error] [pid 1034096:tid 1034374] [client 68.155.159.216:63766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-login.php"] [unique_id "apK93y04twRPFuquKD3KxwAAAQA"]
[Sat Aug 29 05:09:19.745658 2026] [security2:error] [pid 1041789:tid 1042027] [client 4.205.62.107:9007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/phpsysinfo.php"] [unique_id "apK934v3RhPI65jTFG7eTAAAA34"]
[Sat Aug 29 05:09:19.746229 2026] [security2:error] [pid 1034096:tid 1034255] [client 158.23.147.79:6106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/cong.php"] [unique_id "apK93y04twRPFuquKD3KyAAAAIk"]
[Sat Aug 29 05:09:19.749817 2026] [security2:error] [pid 1034096:tid 1034294] [client 68.155.159.216:14278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK93y04twRPFuquKD3KyQAAALA"]
[Sat Aug 29 05:09:19.750367 2026] [security2:error] [pid 1041789:tid 1042041] [client 20.63.219.114:15367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/class_api.php"] [unique_id "apK934v3RhPI65jTFG7eTQAAA4w"]
[Sat Aug 29 05:09:19.751941 2026] [security2:error] [pid 1041789:tid 1042003] [client 20.197.61.180:9559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/class-wp-cmd.php"] [unique_id "apK934v3RhPI65jTFG7eTgAAA2Y"]
[Sat Aug 29 05:09:19.766389 2026] [security2:error] [pid 1034096:tid 1034367] [client 4.205.62.107:24990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/app/Models/Hrm/Employee.php"] [unique_id "apK93y04twRPFuquKD3K0wAAAPk"]
[Sat Aug 29 05:09:19.768620 2026] [security2:error] [pid 1034096:tid 1034309] [client 20.63.219.114:18965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/update.php"] [unique_id "apK93y04twRPFuquKD3K1AAAAL8"]
[Sat Aug 29 05:09:19.770589 2026] [security2:error] [pid 1034096:tid 1034283] [client 158.23.147.79:17467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK93y04twRPFuquKD3K1QAAAKU"]
[Sat Aug 29 05:09:19.787798 2026] [security2:error] [pid 1041789:tid 1041984] [client 158.23.184.117:16506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/3pjcpmfsd8b.php"] [unique_id "apK934v3RhPI65jTFG7eTwAAA1M"]
[Sat Aug 29 05:09:19.797336 2026] [security2:error] [pid 1041789:tid 1042007] [client 20.196.209.81:8363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-content/content.php"] [unique_id "apK934v3RhPI65jTFG7eUAAAA2o"]
[Sat Aug 29 05:09:19.799924 2026] [security2:error] [pid 1034096:tid 1034290] [client 20.196.209.81:14855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/colour.php"] [unique_id "apK93y04twRPFuquKD3K3AAAAKw"]
[Sat Aug 29 05:09:19.801425 2026] [security2:error] [pid 1034096:tid 1034315] [client 68.155.159.216:1995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-content/x/index.php"] [unique_id "apK93y04twRPFuquKD3K3QAAAMU"]
[Sat Aug 29 05:09:19.811906 2026] [security2:error] [pid 1041789:tid 1041966] [client 4.205.62.107:62915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/groceries/index.php"] [unique_id "apK934v3RhPI65jTFG7eUQAAA0E"]
[Sat Aug 29 05:09:19.831122 2026] [security2:error] [pid 1034096:tid 1034274] [client 4.205.62.107:58425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/g3.php"] [unique_id "apK93y04twRPFuquKD3K3gAAAJw"]
[Sat Aug 29 05:09:19.839150 2026] [security2:error] [pid 1041789:tid 1041935] [client 68.155.159.216:30718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK934v3RhPI65jTFG7eUwAAAyI"]
[Sat Aug 29 05:09:19.850669 2026] [security2:error] [pid 1041789:tid 1042005] [client 20.100.175.163:16441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/gmo.php"] [unique_id "apK934v3RhPI65jTFG7eVAAAA2g"]
[Sat Aug 29 05:09:19.857741 2026] [security2:error] [pid 1041789:tid 1042056] [client 20.63.81.20:65270] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "tntrental-biz.tntrental.com"] [uri "/1.php"] [unique_id "apK934v3RhPI65jTFG7eVQAAA5s"]
[Sat Aug 29 05:09:19.857824 2026] [security2:error] [pid 1041789:tid 1042056] [client 20.63.81.20:65270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/1.php"] [unique_id "apK934v3RhPI65jTFG7eVQAAA5s"]
[Sat Aug 29 05:09:19.858878 2026] [security2:error] [pid 1041789:tid 1042015] [client 20.151.200.44:64552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/hq.php"] [unique_id "apK934v3RhPI65jTFG7eVgAAA3I"]
[Sat Aug 29 05:09:19.871064 2026] [security2:error] [pid 1041789:tid 1041944] [client 68.155.159.216:16339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/ans.php"] [unique_id "apK934v3RhPI65jTFG7eWQAAAys"]
[Sat Aug 29 05:09:19.880445 2026] [security2:error] [pid 1034096:tid 1034314] [client 195.178.110.247:60586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lostduckllc.com"] [uri "/index.php"] [unique_id "apK93y04twRPFuquKD3K4AAAAMQ"]
[Sat Aug 29 05:09:19.890613 2026] [security2:error] [pid 1041789:tid 1042024] [client 158.158.54.35:13000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/cc.php"] [unique_id "apK934v3RhPI65jTFG7eWgAAA3s"]
[Sat Aug 29 05:09:19.891935 2026] [security2:error] [pid 1034096:tid 1034329] [client 68.155.159.216:6074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/about/function.php"] [unique_id "apK93y04twRPFuquKD3K4QAAANM"]
[Sat Aug 29 05:09:19.932843 2026] [security2:error] [pid 1034096:tid 1034369] [client 158.23.184.117:16509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.photoboothvancouver.com"] [uri "/403.php"] [unique_id "apK93y04twRPFuquKD3K4wAAAPs"]
[Sat Aug 29 05:09:19.948982 2026] [security2:error] [pid 1034096:tid 1034325] [client 4.205.62.107:53156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/rpk.php"] [unique_id "apK93y04twRPFuquKD3K5AAAAM8"]
[Sat Aug 29 05:09:19.958665 2026] [security2:error] [pid 1034096:tid 1034323] [client 68.155.159.216:65034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-mail.php"] [unique_id "apK93y04twRPFuquKD3K5QAAAM0"]
[Sat Aug 29 05:09:20.000037 2026] [security2:error] [pid 1034096:tid 1034301] [client 20.151.200.44:64473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/mh.php"] [unique_id "apK93y04twRPFuquKD3K5wAAALc"]
[Sat Aug 29 05:09:20.001629 2026] [security2:error] [pid 1034096:tid 1034287] [client 20.63.81.20:63696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/classwithtostring.php"] [unique_id "apK94C04twRPFuquKD3K6AAAAKk"]
[Sat Aug 29 05:09:20.023416 2026] [security2:error] [pid 1041789:tid 1041962] [client 138.199.19.178:47052] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "4paiges.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "apK94Iv3RhPI65jTFG7eWwAAAz0"]
[Sat Aug 29 05:09:20.035410 2026] [security2:error] [pid 1041789:tid 1041932] [client 74.248.24.12:37704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "apK94Iv3RhPI65jTFG7eXAAAAx8"]
[Sat Aug 29 05:09:20.044956 2026] [security2:error] [pid 1034096:tid 1034344] [client 195.178.110.247:32550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lostduckllc.com"] [uri "/index.php"] [unique_id "apK94C04twRPFuquKD3K6gAAAOI"]
[Sat Aug 29 05:09:20.086059 2026] [security2:error] [pid 1041789:tid 1041979] [client 103.215.74.26:30630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.74.215.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.com"] [uri "/index.php"] [unique_id "apK94Iv3RhPI65jTFG7eXQAAA04"], referer: http://kglogisticsinc.com/wp-admin/
[Sat Aug 29 05:09:20.095862 2026] [security2:error] [pid 1041789:tid 1042017] [client 158.23.147.79:11274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/index/function.php"] [unique_id "apK94Iv3RhPI65jTFG7eXgAAA3Q"]
[Sat Aug 29 05:09:20.120223 2026] [security2:error] [pid 1034096:tid 1034277] [client 68.155.159.216:49300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK94C04twRPFuquKD3K8QAAAJ8"]
[Sat Aug 29 05:09:20.135650 2026] [security2:error] [pid 1034096:tid 1034251] [client 4.232.148.111:35788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/xxx.php"] [unique_id "apK94C04twRPFuquKD3K9AAAAIU"]
[Sat Aug 29 05:09:20.139069 2026] [security2:error] [pid 1034096:tid 1034298] [client 20.63.81.20:63670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/wp-ws68.php"] [unique_id "apK94C04twRPFuquKD3K9QAAALQ"]
[Sat Aug 29 05:09:20.168698 2026] [security2:error] [pid 1041789:tid 1042037] [client 20.197.61.180:1987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/room.php"] [unique_id "apK94Iv3RhPI65jTFG7eYQAAA4g"]
[Sat Aug 29 05:09:20.191128 2026] [security2:error] [pid 1034096:tid 1034352] [client 158.23.147.79:63815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK94C04twRPFuquKD3K-AAAAOo"]
[Sat Aug 29 05:09:20.193907 2026] [security2:error] [pid 1034096:tid 1034316] [client 20.151.200.44:63931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/f2r4.php"] [unique_id "apK94C04twRPFuquKD3K-gAAAMY"]
[Sat Aug 29 05:09:20.199299 2026] [security2:error] [pid 1041789:tid 1042001] [client 158.23.147.79:6096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/classwithtostring.php"] [unique_id "apK94Iv3RhPI65jTFG7eYgAAA2Q"]
[Sat Aug 29 05:09:20.200888 2026] [security2:error] [pid 1034096:tid 1034284] [client 20.196.209.81:14849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/OK.php"] [unique_id "apK94C04twRPFuquKD3K-wAAAKY"]
[Sat Aug 29 05:09:20.201526 2026] [security2:error] [pid 1034096:tid 1034335] [client 20.196.209.81:22598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-content/core.php"] [unique_id "apK94C04twRPFuquKD3K_AAAANk"]
[Sat Aug 29 05:09:20.217413 2026] [security2:error] [pid 1034096:tid 1034266] [client 20.104.49.130:53505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pvillusions.com"] [uri "/fling.php"] [unique_id "apK94C04twRPFuquKD3K_QAAAJQ"]
[Sat Aug 29 05:09:20.217888 2026] [proxy_http:error] [pid 1017536:tid 1017555] (70007)The timeout specified has expired: [remote 57.141.14.73:47554] AH01102: error reading status line from remote server 127.0.0.1:8443
[Sat Aug 29 05:09:20.217904 2026] [proxy:error] [pid 1017536:tid 1017555] [remote 57.141.14.73:47554] AH00898: Error reading from remote server returned by /shop-cart/
[Sat Aug 29 05:09:20.218431 2026] [proxy_http:error] [pid 1017536:tid 1017688] (70007)The timeout specified has expired: [client 127.0.0.1:48340] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:09:20.218451 2026] [proxy:error] [pid 1017536:tid 1017688] [client 127.0.0.1:48340] AH00898: Error reading from remote server returned by /shop-cart/
[Sat Aug 29 05:09:20.275906 2026] [security2:error] [pid 1034096:tid 1034253] [client 20.63.81.20:65163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/simple.php"] [unique_id "apK94C04twRPFuquKD3LCgAAAIc"]
[Sat Aug 29 05:09:20.287309 2026] [security2:error] [pid 1041789:tid 1042046] [client 20.63.219.114:19881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/aksinet.php"] [unique_id "apK94Iv3RhPI65jTFG7eZQAAA5E"]
[Sat Aug 29 05:09:20.305585 2026] [security2:error] [pid 1041789:tid 1041978] [client 20.63.219.114:10617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/blog.php"] [unique_id "apK94Iv3RhPI65jTFG7eZwAAA00"]
[Sat Aug 29 05:09:20.352082 2026] [security2:error] [pid 1034096:tid 1034274] [client 68.155.159.216:18419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK94C04twRPFuquKD3LFAAAAJw"]
[Sat Aug 29 05:09:20.364948 2026] [security2:error] [pid 1034096:tid 1034328] [client 158.158.54.35:34655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/files/index.php"] [unique_id "apK94C04twRPFuquKD3LFgAAANI"]
[Sat Aug 29 05:09:20.366433 2026] [security2:error] [pid 1041789:tid 1041981] [client 20.100.175.163:28229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/classwithtostring.php"] [unique_id "apK94Iv3RhPI65jTFG7eaAAAA1A"]
[Sat Aug 29 05:09:20.371406 2026] [security2:error] [pid 1034096:tid 1034376] [client 68.155.159.216:1856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK94C04twRPFuquKD3LGAAAAQI"]
[Sat Aug 29 05:09:20.376868 2026] [security2:error] [pid 1034096:tid 1034329] [client 68.155.159.216:24532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK94C04twRPFuquKD3LGQAAANM"]
[Sat Aug 29 05:09:20.387732 2026] [security2:error] [pid 1041789:tid 1041986] [client 4.205.62.107:21951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/hochladen.form.php"] [unique_id "apK94Iv3RhPI65jTFG7eaQAAA1U"]
[Sat Aug 29 05:09:20.408770 2026] [security2:error] [pid 1041789:tid 1042000] [client 20.63.81.20:65162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/aaa.php"] [unique_id "apK94Iv3RhPI65jTFG7eawAAA2M"]
[Sat Aug 29 05:09:20.420430 2026] [security2:error] [pid 1041789:tid 1042014] [client 20.151.200.44:63179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/sadis.php"] [unique_id "apK94Iv3RhPI65jTFG7ebAAAA3E"]
[Sat Aug 29 05:09:20.437719 2026] [security2:error] [pid 1041789:tid 1042053] [client 4.232.148.111:11908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/w.php"] [unique_id "apK94Iv3RhPI65jTFG7ebQAAA5g"]
[Sat Aug 29 05:09:20.471862 2026] [security2:error] [pid 1034096:tid 1034282] [client 35.221.212.112:3878] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/id_rsa"] [unique_id "apK94C04twRPFuquKD3LGwAAAKQ"]
[Sat Aug 29 05:09:20.474951 2026] [security2:error] [pid 1041789:tid 1041945] [client 20.197.61.180:15014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/disagreed.php"] [unique_id "apK94Iv3RhPI65jTFG7ebwAAAyw"]
[Sat Aug 29 05:09:20.499144 2026] [security2:error] [pid 1034096:tid 1034252] [client 158.23.147.79:59477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/goods.php"] [unique_id "apK94C04twRPFuquKD3LIQAAAIY"]
[Sat Aug 29 05:09:20.527456 2026] [core:error] [pid 1034096:tid 1034271] [client 158.23.184.117:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:20.527476 2026] [core:error] [pid 1034096:tid 1034271] [client 158.23.184.117:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:20.548571 2026] [security2:error] [pid 1041789:tid 1041967] [client 158.23.147.79:62775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK94Iv3RhPI65jTFG7ecwAAA0I"]
[Sat Aug 29 05:09:20.548904 2026] [security2:error] [pid 1034096:tid 1034251] [client 68.155.159.216:56555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/cong.php"] [unique_id "apK94C04twRPFuquKD3LLwAAAIU"]
[Sat Aug 29 05:09:20.548943 2026] [security2:error] [pid 1034096:tid 1034318] [client 74.248.24.12:37751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/upload.php"] [unique_id "apK94C04twRPFuquKD3LMAAAAMg"]
[Sat Aug 29 05:09:20.558486 2026] [security2:error] [pid 1034096:tid 1034262] [client 35.221.212.112:3924] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/key.pem"] [unique_id "apK94C04twRPFuquKD3LMQAAAJA"]
[Sat Aug 29 05:09:20.561338 2026] [security2:error] [pid 1041789:tid 1041992] [client 35.221.212.112:3914] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/id_dsa"] [unique_id "apK94Iv3RhPI65jTFG7edAAAA1s"]
[Sat Aug 29 05:09:20.566985 2026] [security2:error] [pid 1034096:tid 1034372] [client 35.221.212.112:3942] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/privatekey.key"] [unique_id "apK94C04twRPFuquKD3LNAAAAP4"]
[Sat Aug 29 05:09:20.597675 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.196.209.81:8366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-content/db-status.php"] [unique_id "apK94Iv3RhPI65jTFG7edQAAA3o"]
[Sat Aug 29 05:09:20.611429 2026] [security2:error] [pid 1034096:tid 1034162] [remote 93.123.109.228:36026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/.wp-config.php.swp"] [unique_id "apK94C04twRPFuquKD3LOwAAmyg"]
[Sat Aug 29 05:09:20.613655 2026] [security2:error] [pid 1034096:tid 1034316] [client 35.221.212.112:3878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.212.221.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.beraluzarchive.org"] [uri "/wp-config.php"] [unique_id "apK94C04twRPFuquKD3LPQAAAMY"]
[Sat Aug 29 05:09:20.648170 2026] [security2:error] [pid 1034096:tid 1034375] [client 127.0.0.1:12138] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK94C04twRPFuquKD3LNQAAAQE"]
[Sat Aug 29 05:09:20.648272 2026] [security2:error] [pid 1034096:tid 1034298] [client 127.0.0.1:12132] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.beraluzarchive.org"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK94C04twRPFuquKD3LMwAAALQ"]
[Sat Aug 29 05:09:20.649327 2026] [security2:error] [pid 1034096:tid 1034350] [client 35.221.212.112:3930] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.beraluzarchive.org"] [uri "/server.key"] [unique_id "apK94C04twRPFuquKD3LMgAAAOg"]
[Sat Aug 29 05:09:20.654705 2026] [security2:error] [pid 1034096:tid 1034275] [client 35.221.212.112:3970] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "autodiscover.beraluzarchive.org"] [uri "/wp-config.php.bak"] [unique_id "apK94C04twRPFuquKD3LQwAAAJ0"]
[Sat Aug 29 05:09:20.661902 2026] [security2:error] [pid 1034096:tid 1034324] [client 20.196.209.81:14899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/aaa.php"] [unique_id "apK94C04twRPFuquKD3LRAAAAM4"]
[Sat Aug 29 05:09:20.662995 2026] [security2:error] [pid 1041789:tid 1042011] [client 20.63.219.114:2432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/alfa-rex1.php"] [unique_id "apK94Iv3RhPI65jTFG7eeAAAA24"]
[Sat Aug 29 05:09:20.664860 2026] [security2:error] [pid 1041789:tid 1042050] [client 20.63.219.114:10581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/bypass.php"] [unique_id "apK94Iv3RhPI65jTFG7eeQAAA5U"]
[Sat Aug 29 05:09:20.680928 2026] [security2:error] [pid 1041789:tid 1042052] [client 35.221.212.112:3984] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "autodiscover.beraluzarchive.org"] [uri "/wp-config.php.old"] [unique_id "apK94Iv3RhPI65jTFG7eegAAA5c"]
[Sat Aug 29 05:09:20.686735 2026] [security2:error] [pid 1041789:tid 1041995] [client 20.151.200.44:62611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/xcre1.php"] [unique_id "apK94Iv3RhPI65jTFG7eewAAA14"]
[Sat Aug 29 05:09:20.688921 2026] [security2:error] [pid 1034096:tid 1034270] [client 35.221.212.112:3992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.212.221.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.beraluzarchive.org"] [uri "/config.php"] [unique_id "apK94C04twRPFuquKD3LRgAAAJg"]
[Sat Aug 29 05:09:20.697612 2026] [security2:error] [pid 1034096:tid 1034362] [client 35.221.212.112:3924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.212.221.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.beraluzarchive.org"] [uri "/config.php.bak"] [unique_id "apK94C04twRPFuquKD3LRwAAAPQ"]
[Sat Aug 29 05:09:20.704732 2026] [security2:error] [pid 1034096:tid 1034296] [client 35.221.212.112:3942] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "autodiscover.beraluzarchive.org"] [uri "/config/secrets.yml"] [unique_id "apK94C04twRPFuquKD3LSAAAALI"]
[Sat Aug 29 05:09:20.726487 2026] [security2:error] [pid 1041789:tid 1041931] [client 68.155.159.216:33723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-admin.php"] [unique_id "apK94Iv3RhPI65jTFG7egAAAAx4"]
[Sat Aug 29 05:09:20.820137 2026] [security2:error] [pid 1034096:tid 1034292] [client 158.158.54.35:13013] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.alexandermint.com"] [uri "/1.php7"] [unique_id "apK94C04twRPFuquKD3LVQAAAK4"]
[Sat Aug 29 05:09:20.820246 2026] [security2:error] [pid 1034096:tid 1034292] [client 158.158.54.35:13013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/1.php7"] [unique_id "apK94C04twRPFuquKD3LVQAAAK4"]
[Sat Aug 29 05:09:20.824859 2026] [security2:error] [pid 1034096:tid 1034329] [client 20.63.81.20:63653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/shiny.php"] [unique_id "apK94C04twRPFuquKD3LVgAAANM"]
[Sat Aug 29 05:09:20.848606 2026] [security2:error] [pid 1034096:tid 1034314] [client 68.155.159.216:64454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK94C04twRPFuquKD3LVwAAAMQ"]
[Sat Aug 29 05:09:20.848623 2026] [security2:error] [pid 1034096:tid 1034325] [client 4.205.62.107:6948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/gnmlc.php"] [unique_id "apK94C04twRPFuquKD3LWAAAAM8"]
[Sat Aug 29 05:09:20.854816 2026] [security2:error] [pid 1041789:tid 1042031] [client 20.100.175.163:16419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/404.php"] [unique_id "apK94Iv3RhPI65jTFG7egwAAA4I"]
[Sat Aug 29 05:09:20.859659 2026] [security2:error] [pid 1041789:tid 1041969] [client 158.23.147.79:6049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-includes/js/index.php"] [unique_id "apK94Iv3RhPI65jTFG7ehAAAA0Q"]
[Sat Aug 29 05:09:20.900863 2026] [security2:error] [pid 1041789:tid 1041946] [client 4.232.148.111:19850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/ahax.php"] [unique_id "apK94Iv3RhPI65jTFG7ehQAAAy0"]
[Sat Aug 29 05:09:20.908538 2026] [security2:error] [pid 1034096:tid 1034365] [client 4.205.62.107:26666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/agg.php"] [unique_id "apK94C04twRPFuquKD3LYAAAAPc"]
[Sat Aug 29 05:09:20.918234 2026] [security2:error] [pid 1034096:tid 1034351] [client 20.52.41.200:4591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/.trash7206/index.php"] [unique_id "apK94C04twRPFuquKD3LYQAAAOk"]
[Sat Aug 29 05:09:20.922759 2026] [security2:error] [pid 1041789:tid 1041970] [client 20.197.61.180:9597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/class-wp-cmd.php"] [unique_id "apK94Iv3RhPI65jTFG7ehwAAA0U"]
[Sat Aug 29 05:09:20.924919 2026] [security2:error] [pid 1034096:tid 1034282] [client 20.104.49.130:60972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/002.php"] [unique_id "apK94C04twRPFuquKD3LYgAAAKQ"]
[Sat Aug 29 05:09:20.930481 2026] [security2:error] [pid 1034096:tid 1034339] [client 4.205.62.107:53438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/koiy.php"] [unique_id "apK94C04twRPFuquKD3LYwAAAN0"]
[Sat Aug 29 05:09:20.934667 2026] [security2:error] [pid 1041789:tid 1042003] [client 4.232.148.111:35279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/tool.php"] [unique_id "apK94Iv3RhPI65jTFG7eiAAAA2Y"]
[Sat Aug 29 05:09:20.937237 2026] [security2:error] [pid 1034096:tid 1034252] [client 68.155.159.216:2030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK94C04twRPFuquKD3LZAAAAIY"]
[Sat Aug 29 05:09:20.943924 2026] [security2:error] [pid 1034096:tid 1034264] [client 4.205.62.107:62951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/konfig.php"] [unique_id "apK94C04twRPFuquKD3LZQAAAJI"]
[Sat Aug 29 05:09:20.955777 2026] [security2:error] [pid 1034096:tid 1034313] [client 68.155.159.216:30553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-admin.php"] [unique_id "apK94C04twRPFuquKD3LZwAAAMM"]
[Sat Aug 29 05:09:20.963491 2026] [security2:error] [pid 1034096:tid 1034318] [client 68.155.159.216:33546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK94C04twRPFuquKD3LawAAAMg"]
[Sat Aug 29 05:09:20.974977 2026] [security2:error] [pid 1034096:tid 1034372] [client 20.63.81.20:63704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/goods.php"] [unique_id "apK94C04twRPFuquKD3LbwAAAP4"]
[Sat Aug 29 05:09:20.983827 2026] [security2:error] [pid 1034096:tid 1034298] [client 4.205.62.107:58469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/cloud.php"] [unique_id "apK94C04twRPFuquKD3LcAAAALQ"]
[Sat Aug 29 05:09:20.996416 2026] [security2:error] [pid 1041789:tid 1042029] [client 20.196.209.81:8473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-content/disagrsxr.php"] [unique_id "apK94Iv3RhPI65jTFG7eiQAAA4A"]
[Sat Aug 29 05:09:21.021604 2026] [security2:error] [pid 1034096:tid 1034270] [client 68.155.159.216:16262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/worksec.php"] [unique_id "apK94S04twRPFuquKD3LdQAAAJg"]
[Sat Aug 29 05:09:21.026655 2026] [security2:error] [pid 1034096:tid 1034322] [client 138.199.19.178:47056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 178.19.199.138.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "4paiges.com"] [uri "/xmlrpc.php"] [unique_id "apK94S04twRPFuquKD3LcwAAAMw"]
[Sat Aug 29 05:09:21.028607 2026] [security2:error] [pid 1041789:tid 1042032] [client 20.63.219.114:18975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/extractable-loader-head.php"] [unique_id "apK94Yv3RhPI65jTFG7eigAAA4M"]
[Sat Aug 29 05:09:21.053459 2026] [security2:error] [pid 1034096:tid 1034311] [client 158.23.147.79:17423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK94S04twRPFuquKD3LeAAAAME"]
[Sat Aug 29 05:09:21.075063 2026] [security2:error] [pid 1034096:tid 1034294] [client 68.155.159.216:65037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/cgi-bin/index.php"] [unique_id "apK94S04twRPFuquKD3LeQAAALA"]
[Sat Aug 29 05:09:21.081421 2026] [security2:error] [pid 1041789:tid 1042027] [client 107.145.13.164:61392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 164.13.145.107.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK94Yv3RhPI65jTFG7ejAAAA34"]
[Sat Aug 29 05:09:21.081568 2026] [security2:error] [pid 1041789:tid 1042027] [client 107.145.13.164:61392] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK94Yv3RhPI65jTFG7ejAAAA34"]
[Sat Aug 29 05:09:21.086710 2026] [security2:error] [pid 1041789:tid 1041935] [client 4.205.62.107:55977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/saml.php"] [unique_id "apK94Yv3RhPI65jTFG7ejQAAAyI"]
[Sat Aug 29 05:09:21.107791 2026] [security2:error] [pid 1034096:tid 1034287] [client 20.63.81.20:65155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/000.php/index.php"] [unique_id "apK94S04twRPFuquKD3LegAAAKk"]
[Sat Aug 29 05:09:21.119239 2026] [security2:error] [pid 1034096:tid 1034332] [client 68.155.159.216:64116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK94S04twRPFuquKD3LewAAANY"]
[Sat Aug 29 05:09:21.144606 2026] [security2:error] [pid 1041789:tid 1042015] [client 20.63.81.20:46443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK94Yv3RhPI65jTFG7ejwAAA3I"]
[Sat Aug 29 05:09:21.148588 2026] [security2:error] [pid 1041789:tid 1041942] [client 20.63.219.114:15364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/headerg.php"] [unique_id "apK94Yv3RhPI65jTFG7ekAAAAyk"]
[Sat Aug 29 05:09:21.172779 2026] [security2:error] [pid 1034096:tid 1034159] [remote 52.167.144.172:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantsfans.net"] [uri "/message_board/index.php"] [unique_id "apK94S04twRPFuquKD3LfAAAnCU"]
[Sat Aug 29 05:09:21.205329 2026] [security2:error] [pid 1034096:tid 1034317] [client 103.171.189.88:64708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK94S04twRPFuquKD3LfgAAAMc"]
[Sat Aug 29 05:09:21.205495 2026] [security2:error] [pid 1034096:tid 1034317] [client 103.171.189.88:64708] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK94S04twRPFuquKD3LfgAAAMc"]
[Sat Aug 29 05:09:21.209625 2026] [http2:warn] [pid 1018003:tid 1018272] [client 57.141.14.67:61602] h2_stream(1018003-14-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:09:21.218668 2026] [security2:error] [pid 1034096:tid 1034251] [client 20.197.61.180:1445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/class_api.php"] [unique_id "apK94S04twRPFuquKD3LhgAAAIU"]
[Sat Aug 29 05:09:21.228471 2026] [security2:error] [pid 1041789:tid 1042019] [client 158.23.147.79:50122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/x.php"] [unique_id "apK94Yv3RhPI65jTFG7ekgAAA3Y"]
[Sat Aug 29 05:09:21.239342 2026] [security2:error] [pid 1034096:tid 1034325] [client 68.155.159.216:49256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/images/index.php"] [unique_id "apK94S04twRPFuquKD3LiQAAAM8"]
[Sat Aug 29 05:09:21.240401 2026] [security2:error] [pid 1034096:tid 1034314] [client 20.63.81.20:63681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/Jcrop.php"] [unique_id "apK94S04twRPFuquKD3LigAAAMQ"]
[Sat Aug 29 05:09:21.277897 2026] [security2:error] [pid 1034096:tid 1034309] [client 20.63.81.20:46441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK94S04twRPFuquKD3LjwAAAL8"]
[Sat Aug 29 05:09:21.279813 2026] [security2:error] [pid 1034096:tid 1034297] [client 158.158.54.35:31656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/disagraeosc.php"] [unique_id "apK94S04twRPFuquKD3LkAAAALM"]
[Sat Aug 29 05:09:21.297203 2026] [autoindex:error] [pid 1041789:tid 1041944] [client 20.196.209.81:8469] AH01276: Cannot serve directory /home1/hazmapne/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:09:21.300313 2026] [security2:error] [pid 1034096:tid 1034301] [client 68.155.159.216:23544] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webmail.steeldrumflavor.com"] [uri "/1.php"] [unique_id "apK94S04twRPFuquKD3LkQAAALc"]
[Sat Aug 29 05:09:21.300435 2026] [security2:error] [pid 1034096:tid 1034301] [client 68.155.159.216:23544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/1.php"] [unique_id "apK94S04twRPFuquKD3LkQAAALc"]
[Sat Aug 29 05:09:21.323230 2026] [security2:error] [pid 1034096:tid 1034252] [client 158.23.147.79:6107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/install.php"] [unique_id "apK94S04twRPFuquKD3LkwAAAIY"]
[Sat Aug 29 05:09:21.348790 2026] [security2:error] [pid 1034096:tid 1034328] [client 20.100.175.163:1232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/php.php"] [unique_id "apK94S04twRPFuquKD3LlAAAANI"]
[Sat Aug 29 05:09:21.365071 2026] [security2:error] [pid 1034096:tid 1034369] [client 20.52.41.200:5277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wk/index.php"] [unique_id "apK94S04twRPFuquKD3LlQAAAPs"]
[Sat Aug 29 05:09:21.374905 2026] [security2:error] [pid 1041789:tid 1041955] [client 20.63.81.20:65200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/35iDq8NAjLu.php"] [unique_id "apK94Yv3RhPI65jTFG7elQAAAzY"]
[Sat Aug 29 05:09:21.377286 2026] [security2:error] [pid 1041789:tid 1041939] [client 4.232.148.111:26818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/shell.php"] [unique_id "apK94Yv3RhPI65jTFG7elgAAAyY"]
[Sat Aug 29 05:09:21.383424 2026] [security2:error] [pid 1034096:tid 1034298] [client 158.23.147.79:63864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK94S04twRPFuquKD3LlwAAALQ"]
[Sat Aug 29 05:09:21.388059 2026] [security2:error] [pid 1034096:tid 1034285] [client 68.155.159.216:14312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/asd.php"] [unique_id "apK94S04twRPFuquKD3LmAAAAKc"]
[Sat Aug 29 05:09:21.391381 2026] [security2:error] [pid 1034096:tid 1034303] [client 20.63.219.114:10606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/defaults.php"] [unique_id "apK94S04twRPFuquKD3LmQAAALk"]
[Sat Aug 29 05:09:21.394296 2026] [security2:error] [pid 1041789:tid 1041962] [client 20.196.209.81:22639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-content/f35.php"] [unique_id "apK94Yv3RhPI65jTFG7elwAAAz0"]
[Sat Aug 29 05:09:21.411146 2026] [security2:error] [pid 1034096:tid 1034323] [client 4.232.148.111:29547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/k.php"] [unique_id "apK94S04twRPFuquKD3LmgAAAM0"]
[Sat Aug 29 05:09:21.415075 2026] [security2:error] [pid 1034096:tid 1034270] [client 20.63.81.20:46404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/ser.php"] [unique_id "apK94S04twRPFuquKD3LnAAAAJg"]
[Sat Aug 29 05:09:21.417219 2026] [security2:error] [pid 1041789:tid 1042017] [client 74.248.24.12:7876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-content/file.php"] [unique_id "apK94Yv3RhPI65jTFG7emAAAA3Q"]
[Sat Aug 29 05:09:21.480306 2026] [security2:error] [pid 1041789:tid 1042021] [client 68.155.159.216:1974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/makeasmtp.php"] [unique_id "apK94Yv3RhPI65jTFG7emgAAA3g"]
[Sat Aug 29 05:09:21.480478 2026] [security2:error] [pid 1041789:tid 1042037] [client 68.155.159.216:24567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/packed.php"] [unique_id "apK94Yv3RhPI65jTFG7emwAAA4g"]
[Sat Aug 29 05:09:21.496596 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.104.49.130:47848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/ws78.php"] [unique_id "apK94Yv3RhPI65jTFG7enAAAA2Q"]
[Sat Aug 29 05:09:21.509960 2026] [security2:error] [pid 1034096:tid 1034276] [client 20.63.81.20:63707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/btx25.php"] [unique_id "apK94S04twRPFuquKD3LogAAAJ4"]
[Sat Aug 29 05:09:21.519216 2026] [security2:error] [pid 1034096:tid 1034273] [client 4.205.62.107:21607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/debuggen.php"] [unique_id "apK94S04twRPFuquKD3LpQAAAJs"]
[Sat Aug 29 05:09:21.556786 2026] [security2:error] [pid 1041789:tid 1042048] [client 20.63.81.20:46421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/431.php"] [unique_id "apK94Yv3RhPI65jTFG7eoAAAA5M"]
[Sat Aug 29 05:09:21.559639 2026] [security2:error] [pid 1034096:tid 1034306] [client 74.7.241.133:37018] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "tgf.cse.mybluehost.me"] [uri "/robots.txt"] [unique_id "apK94S04twRPFuquKD3LsQAAALw"]
[Sat Aug 29 05:09:21.576051 2026] [security2:error] [pid 1034096:tid 1034181] [remote 93.123.109.228:36026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/_profiler/phpinfo.php"] [unique_id "apK94S04twRPFuquKD3LtAAAjjs"]
[Sat Aug 29 05:09:21.579071 2026] [security2:error] [pid 1034096:tid 1034292] [client 158.23.184.117:7920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/update/da222.php"] [unique_id "apK94S04twRPFuquKD3LtgAAAK4"]
[Sat Aug 29 05:09:21.624216 2026] [security2:error] [pid 1041789:tid 1042000] [client 20.151.200.44:63933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/motu.php"] [unique_id "apK94Yv3RhPI65jTFG7eoQAAA2M"]
[Sat Aug 29 05:09:21.635861 2026] [security2:error] [pid 1034096:tid 1034375] [client 20.63.219.114:10517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/meta.php"] [unique_id "apK94S04twRPFuquKD3LuQAAAQE"]
[Sat Aug 29 05:09:21.643422 2026] [security2:error] [pid 1041789:tid 1041987] [client 158.23.147.79:53961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-content/plugins/index.php"] [unique_id "apK94Yv3RhPI65jTFG7eogAAA1Y"]
[Sat Aug 29 05:09:21.650510 2026] [security2:error] [pid 1034096:tid 1034302] [client 20.63.81.20:63698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/radio.php"] [unique_id "apK94S04twRPFuquKD3LugAAALg"]
[Sat Aug 29 05:09:21.691522 2026] [security2:error] [pid 1034096:tid 1034297] [client 20.63.81.20:46422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/rxr.php"] [unique_id "apK94S04twRPFuquKD3LuwAAALM"]
[Sat Aug 29 05:09:21.734395 2026] [security2:error] [pid 1041789:tid 1041972] [client 158.158.54.35:34659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-logs.php"] [unique_id "apK94Yv3RhPI65jTFG7epAAAA0c"]
[Sat Aug 29 05:09:21.789337 2026] [security2:error] [pid 1034096:tid 1034314] [client 158.23.184.117:7883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/xmr.php"] [unique_id "apK94S04twRPFuquKD3LwgAAAMQ"]
[Sat Aug 29 05:09:21.796460 2026] [security2:error] [pid 1034096:tid 1034369] [client 20.63.81.20:63723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/dex.php"] [unique_id "apK94S04twRPFuquKD3LwwAAAPs"]
[Sat Aug 29 05:09:21.796875 2026] [security2:error] [pid 1041789:tid 1041978] [client 20.197.61.180:14993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/disagreed.php"] [unique_id "apK94Yv3RhPI65jTFG7epQAAA00"]
[Sat Aug 29 05:09:21.820204 2026] [security2:error] [pid 1041789:tid 1041980] [client 20.63.81.20:46411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/csst.php"] [unique_id "apK94Yv3RhPI65jTFG7epgAAA08"]
[Sat Aug 29 05:09:21.821873 2026] [security2:error] [pid 1041789:tid 1041998] [client 20.52.41.200:5280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/admin.php"] [unique_id "apK94Yv3RhPI65jTFG7epwAAA2E"]
[Sat Aug 29 05:09:21.828326 2026] [security2:error] [pid 1034096:tid 1034309] [client 20.196.209.81:8356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-content/index.php"] [unique_id "apK94S04twRPFuquKD3LxAAAAL8"]
[Sat Aug 29 05:09:21.836478 2026] [security2:error] [pid 1041789:tid 1041954] [client 68.155.159.216:33782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK94Yv3RhPI65jTFG7eqAAAAzU"]
[Sat Aug 29 05:09:21.837913 2026] [security2:error] [pid 1041789:tid 1042054] [client 20.104.49.130:57488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/wp-the.php"] [unique_id "apK94Yv3RhPI65jTFG7eqQAAA5k"]
[Sat Aug 29 05:09:21.856025 2026] [security2:error] [pid 1041789:tid 1042053] [client 4.232.148.111:19864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/elp.php"] [unique_id "apK94Yv3RhPI65jTFG7eqgAAA5g"]
[Sat Aug 29 05:09:21.875196 2026] [security2:error] [pid 1041789:tid 1041949] [client 20.100.175.163:29790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/init.php"] [unique_id "apK94Yv3RhPI65jTFG7erQAAAzA"]
[Sat Aug 29 05:09:21.888539 2026] [security2:error] [pid 1041789:tid 1041945] [client 4.232.148.111:29523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/root.php"] [unique_id "apK94Yv3RhPI65jTFG7erwAAAyw"]
[Sat Aug 29 05:09:21.893781 2026] [security2:error] [pid 1034096:tid 1034303] [client 138.199.19.178:47070] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "4paiges.com"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "apK94S04twRPFuquKD3LzgAAALk"]
[Sat Aug 29 05:09:21.921313 2026] [security2:error] [pid 1034096:tid 1034368] [client 180.190.5.40:50595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.5.190.180.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK94S04twRPFuquKD3L1QAAAPo"]
[Sat Aug 29 05:09:21.921516 2026] [security2:error] [pid 1034096:tid 1034368] [client 180.190.5.40:50595] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK94S04twRPFuquKD3L1QAAAPo"]
[Sat Aug 29 05:09:21.924022 2026] [security2:error] [pid 1041789:tid 1041950] [client 20.63.219.114:1318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/post.php"] [unique_id "apK94Yv3RhPI65jTFG7etAAAAzE"]
[Sat Aug 29 05:09:21.928111 2026] [security2:error] [pid 1034096:tid 1034200] [remote 93.123.109.228:36026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/admin/phpinfo.php"] [unique_id "apK94S04twRPFuquKD3L2AAAiU4"]
[Sat Aug 29 05:09:21.933942 2026] [security2:error] [pid 1034096:tid 1034352] [client 74.248.24.12:9256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/files.php"] [unique_id "apK94S04twRPFuquKD3L2gAAAOo"]
[Sat Aug 29 05:09:21.937506 2026] [security2:error] [pid 1041789:tid 1041931] [client 20.63.81.20:65159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/giodywky.php"] [unique_id "apK94Yv3RhPI65jTFG7etgAAAx4"]
[Sat Aug 29 05:09:21.938848 2026] [security2:error] [pid 1041789:tid 1042035] [client 158.23.184.117:7924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK94Yv3RhPI65jTFG7etwAAA4Y"]
[Sat Aug 29 05:09:21.943950 2026] [security2:error] [pid 1041789:tid 1041938] [client 20.197.61.180:9548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/aksinet.php"] [unique_id "apK94Yv3RhPI65jTFG7euwAAAyU"]
[Sat Aug 29 05:09:21.950747 2026] [security2:error] [pid 1041789:tid 1042033] [client 20.63.81.20:46408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/wp-includes/blocks/query-title/footer.php"] [unique_id "apK94Yv3RhPI65jTFG7evAAAA4Q"]
[Sat Aug 29 05:09:21.964895 2026] [security2:error] [pid 1034096:tid 1034323] [client 158.23.147.79:5965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-content/index.php"] [unique_id "apK94S04twRPFuquKD3L3QAAAM0"]
[Sat Aug 29 05:09:21.984677 2026] [security2:error] [pid 1034096:tid 1034324] [client 4.205.62.107:6470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/koiy.php"] [unique_id "apK94S04twRPFuquKD3L3gAAAM4"]
[Sat Aug 29 05:09:22.045982 2026] [security2:error] [pid 1041789:tid 1041946] [client 4.205.62.107:25007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/requirements.php"] [unique_id "apK94ov3RhPI65jTFG7evQAAAy0"]
[Sat Aug 29 05:09:22.049255 2026] [security2:error] [pid 1034096:tid 1034226] [remote 93.123.109.228:36026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/admin_phpinfo.php"] [unique_id "apK94i04twRPFuquKD3L3wAA7Wg"]
[Sat Aug 29 05:09:22.056814 2026] [security2:error] [pid 1034096:tid 1034311] [client 68.155.159.216:30642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK94i04twRPFuquKD3L4AAAAME"]
[Sat Aug 29 05:09:22.074451 2026] [security2:error] [pid 1034096:tid 1034374] [client 68.155.159.216:33559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK94i04twRPFuquKD3L4QAAAQA"]
[Sat Aug 29 05:09:22.074857 2026] [security2:error] [pid 1034096:tid 1034322] [client 20.63.81.20:65228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/wp-kz.php"] [unique_id "apK94i04twRPFuquKD3L4gAAAMw"]
[Sat Aug 29 05:09:22.082825 2026] [security2:error] [pid 1041789:tid 1041965] [client 20.63.81.20:46449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/wp-content/uploads/indoex.php"] [unique_id "apK94ov3RhPI65jTFG7evwAAA0A"]
[Sat Aug 29 05:09:22.086109 2026] [security2:error] [pid 1041789:tid 1042047] [client 158.23.184.117:7425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/wp-act.php"] [unique_id "apK94ov3RhPI65jTFG7ewAAAA5I"]
[Sat Aug 29 05:09:22.099893 2026] [security2:error] [pid 1034096:tid 1034332] [client 4.205.62.107:62733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/paths.php"] [unique_id "apK94i04twRPFuquKD3L4wAAANY"]
[Sat Aug 29 05:09:22.106192 2026] [security2:error] [pid 1034096:tid 1034373] [client 20.63.219.114:2439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/dxc.php"] [unique_id "apK94i04twRPFuquKD3L5AAAAP8"]
[Sat Aug 29 05:09:22.123235 2026] [security2:error] [pid 1041789:tid 1041966] [client 4.205.62.107:51507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/f35.php"] [unique_id "apK94ov3RhPI65jTFG7ewwAAA0E"]
[Sat Aug 29 05:09:22.151723 2026] [security2:error] [pid 1034096:tid 1034273] [client 57.141.14.38:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/cart/"] [unique_id "apK94i04twRPFuquKD3L5QAAAJs"]
[Sat Aug 29 05:09:22.183817 2026] [security2:error] [pid 1041789:tid 1041936] [client 20.151.200.44:63185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/wefile.php"] [unique_id "apK94ov3RhPI65jTFG7exwAAAyM"]
[Sat Aug 29 05:09:22.187112 2026] [security2:error] [pid 1041789:tid 1041940] [client 68.155.159.216:63851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK94ov3RhPI65jTFG7eyAAAAyc"]
[Sat Aug 29 05:09:22.195489 2026] [security2:error] [pid 1034096:tid 1034342] [client 68.155.159.216:16245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/x.php"] [unique_id "apK94i04twRPFuquKD3L6QAAAOA"]
[Sat Aug 29 05:09:22.205674 2026] [security2:error] [pid 1034096:tid 1034292] [client 20.63.81.20:65166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/wp-includes/ID3/getid.php"] [unique_id "apK94i04twRPFuquKD3L6gAAAK4"]
[Sat Aug 29 05:09:22.218226 2026] [security2:error] [pid 1034096:tid 1034316] [client 20.63.81.20:46456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK94i04twRPFuquKD3L9AAAAMY"]
[Sat Aug 29 05:09:22.218826 2026] [security2:error] [pid 1041789:tid 1041968] [client 158.158.54.35:13009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-admin/css/about.php"] [unique_id "apK94ov3RhPI65jTFG7eywAAA0M"]
[Sat Aug 29 05:09:22.224913 2026] [security2:error] [pid 1041789:tid 1041984] [client 20.196.209.81:12289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-content/install.php"] [unique_id "apK94ov3RhPI65jTFG7ezAAAA1M"]
[Sat Aug 29 05:09:22.230687 2026] [security2:error] [pid 1034096:tid 1034350] [client 4.205.62.107:8738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/test1.php"] [unique_id "apK94i04twRPFuquKD3L9QAAAOg"]
[Sat Aug 29 05:09:22.232673 2026] [security2:error] [pid 1041789:tid 1042015] [client 158.23.184.117:7237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/fff.php"] [unique_id "apK94ov3RhPI65jTFG7ezQAAA3I"]
[Sat Aug 29 05:09:22.240737 2026] [security2:error] [pid 1041789:tid 1042009] [client 4.205.62.107:3963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/aws_settings.php"] [unique_id "apK94ov3RhPI65jTFG7ezgAAA2w"]
[Sat Aug 29 05:09:22.252146 2026] [security2:error] [pid 1034096:tid 1034251] [client 158.23.147.79:17599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK94i04twRPFuquKD3L9gAAAIU"]
[Sat Aug 29 05:09:22.267125 2026] [security2:error] [pid 1034096:tid 1034375] [client 68.155.159.216:64101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/file.php"] [unique_id "apK94i04twRPFuquKD3L9wAAAQE"]
[Sat Aug 29 05:09:22.279306 2026] [security2:error] [pid 1041789:tid 1042032] [client 20.52.41.200:4574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/php8.php"] [unique_id "apK94ov3RhPI65jTFG7ezwAAA4M"]
[Sat Aug 29 05:09:22.295813 2026] [security2:error] [pid 1041789:tid 1042018] [client 74.7.230.37:55488] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "goldenage-wtic.org"] [uri "/robots.txt"] [unique_id "apK94ov3RhPI65jTFG7e0AADdQI"]
[Sat Aug 29 05:09:22.303537 2026] [security2:error] [pid 1034096:tid 1034313] [client 158.23.147.79:11370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/.well-known/content.php"] [unique_id "apK94i04twRPFuquKD3L-AAAAMM"]
[Sat Aug 29 05:09:22.333795 2026] [security2:error] [pid 1041789:tid 1041935] [client 4.232.148.111:11915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-content/cong.php"] [unique_id "apK94ov3RhPI65jTFG7e0QAAAyI"]
[Sat Aug 29 05:09:22.335098 2026] [security2:error] [pid 1034096:tid 1034309] [client 158.23.147.79:49807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-content/x.php"] [unique_id "apK94i04twRPFuquKD3L-wAAAL8"]
[Sat Aug 29 05:09:22.347992 2026] [security2:error] [pid 1034096:tid 1034262] [client 20.63.81.20:65203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/session.php"] [unique_id "apK94i04twRPFuquKD3L_AAAAJA"]
[Sat Aug 29 05:09:22.348418 2026] [security2:error] [pid 1034096:tid 1034308] [client 68.155.159.216:49272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK94i04twRPFuquKD3L_QAAAL4"]
[Sat Aug 29 05:09:22.348853 2026] [security2:error] [pid 1034096:tid 1034283] [client 20.63.81.20:46462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/haxor.php"] [unique_id "apK94i04twRPFuquKD3L_gAAAKU"]
[Sat Aug 29 05:09:22.373756 2026] [security2:error] [pid 1041789:tid 1042012] [client 20.63.219.114:1323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/csv.php"] [unique_id "apK94ov3RhPI65jTFG7e0wAAA28"]
[Sat Aug 29 05:09:22.373758 2026] [security2:error] [pid 1041789:tid 1041955] [client 146.70.36.124:55880] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "johnsonsremodeling.jarrelljohnson.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "apK94ov3RhPI65jTFG7e0gAAAzY"]
[Sat Aug 29 05:09:22.375380 2026] [security2:error] [pid 1041789:tid 1042024] [client 20.100.175.163:28268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "apK94ov3RhPI65jTFG7e1AAAA3s"]
[Sat Aug 29 05:09:22.377097 2026] [security2:error] [pid 1034096:tid 1034319] [client 4.232.148.111:35313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/p.php"] [unique_id "apK94i04twRPFuquKD3L_wAAAMk"]
[Sat Aug 29 05:09:22.379036 2026] [security2:error] [pid 1034096:tid 1034351] [client 158.23.184.117:7466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/.tmb/dropdown.php"] [unique_id "apK94i04twRPFuquKD3MAAAAAOk"]
[Sat Aug 29 05:09:22.406556 2026] [security2:error] [pid 1041789:tid 1042013] [client 149.34.210.141:17494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK94ov3RhPI65jTFG7e1QAAA3A"]
[Sat Aug 29 05:09:22.407061 2026] [security2:error] [pid 1041789:tid 1042013] [client 149.34.210.141:17494] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK94ov3RhPI65jTFG7e1QAAA3A"]
[Sat Aug 29 05:09:22.437391 2026] [security2:error] [pid 1034096:tid 1034303] [client 68.155.159.216:23438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/ws.php"] [unique_id "apK94i04twRPFuquKD3MAgAAALk"]
[Sat Aug 29 05:09:22.439467 2026] [security2:error] [pid 1034096:tid 1034285] [client 158.23.147.79:6095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-content/x/index.php"] [unique_id "apK94i04twRPFuquKD3MAwAAAKc"]
[Sat Aug 29 05:09:22.446710 2026] [security2:error] [pid 1034096:tid 1034301] [client 20.104.49.130:65227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/33.php"] [unique_id "apK94i04twRPFuquKD3MBAAAALc"]
[Sat Aug 29 05:09:22.452955 2026] [security2:error] [pid 1034096:tid 1034297] [client 74.248.24.12:19497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/o.php"] [unique_id "apK94i04twRPFuquKD3MBQAAALM"]
[Sat Aug 29 05:09:22.478607 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.104.49.130:36757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pvillusions.com"] [uri "/samll.php"] [unique_id "apK94ov3RhPI65jTFG7e1gAAA30"]
[Sat Aug 29 05:09:22.482797 2026] [security2:error] [pid 1034096:tid 1034323] [client 20.63.81.20:63741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/eagle.php"] [unique_id "apK94i04twRPFuquKD3MBgAAAM0"]
[Sat Aug 29 05:09:22.490717 2026] [autoindex:error] [pid 1041789:tid 1042055] [client 45.148.10.62:56486] AH01276: Cannot serve directory /home3/xnkwjamy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:09:22.494749 2026] [security2:error] [pid 1041789:tid 1041990] [client 20.63.81.20:46458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/google.php"] [unique_id "apK94ov3RhPI65jTFG7e2AAAA1k"]
[Sat Aug 29 05:09:22.502448 2026] [security2:error] [pid 1034096:tid 1034286] [client 158.23.147.79:38736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK94i04twRPFuquKD3MBwAAAKg"]
[Sat Aug 29 05:09:22.525083 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.151.200.44:63923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/EM.php"] [unique_id "apK94ov3RhPI65jTFG7e2QAAA2Q"]
[Sat Aug 29 05:09:22.529496 2026] [security2:error] [pid 1034096:tid 1034352] [client 158.23.184.117:7432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/robots.php"] [unique_id "apK94i04twRPFuquKD3MCAAAAOo"]
[Sat Aug 29 05:09:22.544585 2026] [security2:error] [pid 1034096:tid 1034275] [client 20.63.219.114:15393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/wp-2019.php"] [unique_id "apK94i04twRPFuquKD3MDAAAAJ0"]
[Sat Aug 29 05:09:22.553514 2026] [security2:error] [pid 1034096:tid 1034287] [client 68.155.159.216:1996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK94i04twRPFuquKD3MDQAAAKk"]
[Sat Aug 29 05:09:22.585629 2026] [security2:error] [pid 1041789:tid 1042048] [client 68.155.159.216:2036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK94ov3RhPI65jTFG7e2wAAA5M"]
[Sat Aug 29 05:09:22.593087 2026] [security2:error] [pid 1034096:tid 1034277] [client 138.199.19.178:47078] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "4paiges.com"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "apK94i04twRPFuquKD3MEAAAAJ8"]
[Sat Aug 29 05:09:22.599144 2026] [security2:error] [pid 1034096:tid 1034252] [client 20.197.61.180:9581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/class_api.php"] [unique_id "apK94i04twRPFuquKD3MEQAAAIY"]
[Sat Aug 29 05:09:22.629129 2026] [security2:error] [pid 1034096:tid 1034290] [client 20.63.81.20:46344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "apK94i04twRPFuquKD3MEwAAAKw"]
[Sat Aug 29 05:09:22.636880 2026] [security2:error] [pid 1041789:tid 1041986] [client 45.148.10.62:56486] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.xnk.wja.mybluehost.me"] [uri "/.env"] [unique_id "apK94ov3RhPI65jTFG7e3gAAA1U"]
[Sat Aug 29 05:09:22.640461 2026] [security2:error] [pid 1034096:tid 1034294] [client 20.63.81.20:65169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/up-kon.php"] [unique_id "apK94i04twRPFuquKD3MFAAAALA"]
[Sat Aug 29 05:09:22.653450 2026] [security2:error] [pid 1041789:tid 1041975] [client 158.23.147.79:59502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK94ov3RhPI65jTFG7e3wAAA0o"]
[Sat Aug 29 05:09:22.658162 2026] [security2:error] [pid 1034096:tid 1034335] [client 20.197.61.180:1871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/alfa-rex1.php"] [unique_id "apK94i04twRPFuquKD3MGAAAANk"]
[Sat Aug 29 05:09:22.672145 2026] [security2:error] [pid 1034096:tid 1034300] [client 4.205.62.107:22483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/pouhg.php"] [unique_id "apK94i04twRPFuquKD3MGgAAALY"]
[Sat Aug 29 05:09:22.673930 2026] [security2:error] [pid 1034096:tid 1034228] [remote 93.123.109.228:36026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/api/info.php"] [unique_id "apK94i04twRPFuquKD3MHAAA_2o"]
[Sat Aug 29 05:09:22.675223 2026] [security2:error] [pid 1034096:tid 1034269] [client 158.23.184.117:7893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/.well-known/install.php"] [unique_id "apK94i04twRPFuquKD3MHQAAAJc"]
[Sat Aug 29 05:09:22.682342 2026] [security2:error] [pid 1034096:tid 1034273] [client 146.70.36.124:55896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 124.36.70.146.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "johnsonsremodeling.jarrelljohnson.com"] [uri "/xmlrpc.php"] [unique_id "apK94i04twRPFuquKD3MHgAAAJs"]
[Sat Aug 29 05:09:22.695464 2026] [security2:error] [pid 1041789:tid 1041956] [client 158.158.54.35:31624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/system_log.php"] [unique_id "apK94ov3RhPI65jTFG7e4AAAAzc"]
[Sat Aug 29 05:09:22.751033 2026] [security2:error] [pid 1034096:tid 1034292] [client 158.23.147.79:63289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/simple.php"] [unique_id "apK94i04twRPFuquKD3MHwAAAK4"]
[Sat Aug 29 05:09:22.758647 2026] [security2:error] [pid 1034096:tid 1034350] [client 20.63.81.20:46351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/robots.php"] [unique_id "apK94i04twRPFuquKD3MJAAAAOg"]
[Sat Aug 29 05:09:22.758799 2026] [security2:error] [pid 1034096:tid 1034317] [client 20.196.209.81:22613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-content/languages/about.php"] [unique_id "apK94i04twRPFuquKD3MJQAAAMc"]
[Sat Aug 29 05:09:22.769699 2026] [security2:error] [pid 1041789:tid 1041998] [client 20.63.81.20:65181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/tinny.php"] [unique_id "apK94ov3RhPI65jTFG7e4gAAA2E"]
[Sat Aug 29 05:09:22.786902 2026] [security2:error] [pid 1041789:tid 1041954] [client 20.63.81.20:55555] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK94ov3RhPI65jTFG7e4wAAAzU"]
[Sat Aug 29 05:09:22.801152 2026] [security2:error] [pid 1041789:tid 1041949] [client 45.148.10.62:56486] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.xnk.wja.mybluehost.me"] [uri "/.env"] [unique_id "apK94ov3RhPI65jTFG7e5AAAAzA"]
[Sat Aug 29 05:09:22.809383 2026] [security2:error] [pid 1041789:tid 1041987] [client 4.232.148.111:26837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK94ov3RhPI65jTFG7e5gAAA1Y"]
[Sat Aug 29 05:09:22.831621 2026] [security2:error] [pid 1041789:tid 1042030] [client 20.63.219.114:10567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/fox.php"] [unique_id "apK94ov3RhPI65jTFG7e6QAAA4E"]
[Sat Aug 29 05:09:22.843570 2026] [security2:error] [pid 1034096:tid 1034284] [client 4.232.148.111:31021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/a1.php"] [unique_id "apK94i04twRPFuquKD3MJwAAAKY"]
[Sat Aug 29 05:09:22.859945 2026] [security2:error] [pid 1041789:tid 1042052] [client 20.104.49.130:63575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/v2.php"] [unique_id "apK94ov3RhPI65jTFG7e6wAAA5c"]
[Sat Aug 29 05:09:22.866749 2026] [security2:error] [pid 1041789:tid 1041995] [client 158.23.184.117:7463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/wp-admin/about.php"] [unique_id "apK94ov3RhPI65jTFG7e7AAAA14"]
[Sat Aug 29 05:09:22.886922 2026] [security2:error] [pid 1041789:tid 1041943] [client 20.52.41.200:4601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/install.php"] [unique_id "apK94ov3RhPI65jTFG7e7gAAAyo"]
[Sat Aug 29 05:09:22.886958 2026] [security2:error] [pid 1034096:tid 1034274] [client 20.63.81.20:46418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/wp-content/plugins/ccx/index.php"] [unique_id "apK94i04twRPFuquKD3MKgAAAJw"]
[Sat Aug 29 05:09:22.889693 2026] [core:error] [pid 1034096:tid 1034372] [client 20.100.175.163:20934] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:22.889711 2026] [core:error] [pid 1034096:tid 1034372] [client 20.100.175.163:20934] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:22.899711 2026] [security2:error] [pid 1034096:tid 1034328] [client 20.63.81.20:63699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/wp-easy.php"] [unique_id "apK94i04twRPFuquKD3MKwAAANI"]
[Sat Aug 29 05:09:22.931050 2026] [security2:error] [pid 1041789:tid 1042014] [client 20.63.219.114:15377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/menu.php"] [unique_id "apK94ov3RhPI65jTFG7e7wAAA3E"]
[Sat Aug 29 05:09:22.944899 2026] [security2:error] [pid 1034096:tid 1034271] [client 20.63.81.20:55664] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK94i04twRPFuquKD3MLQAAAJk"]
[Sat Aug 29 05:09:22.957171 2026] [security2:error] [pid 1041789:tid 1042033] [client 68.155.159.216:33780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/lock.php"] [unique_id "apK94ov3RhPI65jTFG7e8QAAA4Q"]
[Sat Aug 29 05:09:22.960869 2026] [security2:error] [pid 1034096:tid 1034283] [client 20.104.49.130:63507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pvillusions.com"] [uri "/images.php"] [unique_id "apK94i04twRPFuquKD3MLwAAAKU"]
[Sat Aug 29 05:09:22.970763 2026] [security2:error] [pid 1041789:tid 1042054] [client 74.248.24.12:2705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/file2.php"] [unique_id "apK94ov3RhPI65jTFG7e8gAAA5k"]
[Sat Aug 29 05:09:22.975417 2026] [security2:error] [pid 1034096:tid 1034365] [client 146.70.36.124:55912] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "johnsonsremodeling.jarrelljohnson.com"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "apK94i04twRPFuquKD3MMAAAAPc"]
[Sat Aug 29 05:09:22.979114 2026] [security2:error] [pid 1034096:tid 1034321] [client 60.243.207.176:57801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK94i04twRPFuquKD3MMQAAAMs"]
[Sat Aug 29 05:09:22.979228 2026] [security2:error] [pid 1034096:tid 1034321] [client 60.243.207.176:57801] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK94i04twRPFuquKD3MMQAAAMs"]
[Sat Aug 29 05:09:23.015690 2026] [security2:error] [pid 1034096:tid 1034152] [remote 93.123.109.228:36026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/api/phpinfo.php"] [unique_id "apK94y04twRPFuquKD3MNAAAkh4"]
[Sat Aug 29 05:09:23.024951 2026] [security2:error] [pid 1034096:tid 1034285] [client 20.63.81.20:46346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/wp-admin/css/colors/maro.php"] [unique_id "apK94y04twRPFuquKD3MOAAAAKc"]
[Sat Aug 29 05:09:23.031239 2026] [security2:error] [pid 1041789:tid 1042042] [client 20.63.81.20:63654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/d7.php"] [unique_id "apK944v3RhPI65jTFG7e9QAAA40"]
[Sat Aug 29 05:09:23.068037 2026] [security2:error] [pid 1034096:tid 1034303] [client 158.23.184.117:7457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/wp-content/backup.php"] [unique_id "apK94y04twRPFuquKD3MPAAAALk"]
[Sat Aug 29 05:09:23.070259 2026] [security2:error] [pid 1034096:tid 1034270] [client 74.7.241.150:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.gqn.uih.mybluehost.me"] [uri "/cgi-sys/404.html"] [unique_id "apK94y04twRPFuquKD3MOwAAAJg"]
[Sat Aug 29 05:09:23.080172 2026] [security2:error] [pid 1034096:tid 1034324] [client 20.63.81.20:55641] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/ap.php"] [unique_id "apK94y04twRPFuquKD3MPQAAAM4"]
[Sat Aug 29 05:09:23.081627 2026] [security2:error] [pid 1034096:tid 1034263] [client 158.23.147.79:6056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/about/function.php"] [unique_id "apK94y04twRPFuquKD3MPgAAAJE"]
[Sat Aug 29 05:09:23.087623 2026] [security2:error] [pid 1041789:tid 1041946] [client 20.104.49.130:47852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/ws58.php"] [unique_id "apK944v3RhPI65jTFG7e9gAAAy0"]
[Sat Aug 29 05:09:23.087739 2026] [proxy_http:error] [pid 1018003:tid 1018257] (70007)The timeout specified has expired: [client 127.0.0.1:49850] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:09:23.087755 2026] [proxy:error] [pid 1018003:tid 1018257] [client 127.0.0.1:49850] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:09:23.109231 2026] [security2:error] [pid 1034096:tid 1034314] [client 74.7.241.150:36310] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.gqn.uih.mybluehost.me"] [uri "/robots.txt"] [unique_id "apK94y04twRPFuquKD3MNwAAxAA"]
[Sat Aug 29 05:09:23.124754 2026] [security2:error] [pid 1034096:tid 1034355] [client 4.205.62.107:6958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/w.php"] [unique_id "apK94y04twRPFuquKD3MQAAAAO0"]
[Sat Aug 29 05:09:23.153056 2026] [autoindex:error] [pid 1041789:tid 1042007] [client 45.148.10.62:56486] AH01276: Cannot serve directory /home3/xnkwjamy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:09:23.160912 2026] [security2:error] [pid 1034096:tid 1034332] [client 20.63.81.20:46447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/wp-admin/css/colors/coffee/marijuana.php"] [unique_id "apK94y04twRPFuquKD3MRgAAANY"]
[Sat Aug 29 05:09:23.160947 2026] [security2:error] [pid 1041789:tid 1042044] [client 20.196.209.81:22611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-content/languages/chosen.php"] [unique_id "apK944v3RhPI65jTFG7e-gAAA48"]
[Sat Aug 29 05:09:23.162895 2026] [security2:error] [pid 1034096:tid 1034290] [client 68.155.159.216:30663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/lock.php"] [unique_id "apK94y04twRPFuquKD3MRwAAAKw"]
[Sat Aug 29 05:09:23.165947 2026] [security2:error] [pid 1034096:tid 1034294] [client 20.63.81.20:65252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/v5.php"] [unique_id "apK94y04twRPFuquKD3MSAAAALA"]
[Sat Aug 29 05:09:23.166536 2026] [security2:error] [pid 1034096:tid 1034298] [client 158.158.54.35:1708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/24.php"] [unique_id "apK94y04twRPFuquKD3MSQAAALQ"]
[Sat Aug 29 05:09:23.182882 2026] [security2:error] [pid 1034096:tid 1034273] [client 4.205.62.107:25923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/var/www/wallet/index.php"] [unique_id "apK94y04twRPFuquKD3MSgAAAJs"]
[Sat Aug 29 05:09:23.198290 2026] [security2:error] [pid 1041789:tid 1041969] [client 20.63.219.114:18322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/disagraeosc.php"] [unique_id "apK944v3RhPI65jTFG7e-wAAA0Q"]
[Sat Aug 29 05:09:23.211363 2026] [security2:error] [pid 1041789:tid 1041942] [client 20.63.81.20:55583] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/media.php"] [unique_id "apK944v3RhPI65jTFG7e_AAAAyk"]
[Sat Aug 29 05:09:23.214349 2026] [security2:error] [pid 1034096:tid 1034335] [client 158.23.184.117:7880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/.well-known/aa.php"] [unique_id "apK94y04twRPFuquKD3MSwAAANk"]
[Sat Aug 29 05:09:23.226476 2026] [security2:error] [pid 1034096:tid 1034260] [client 68.155.159.216:33550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/nf_tracking.php"] [unique_id "apK94y04twRPFuquKD3MUgAAAI4"]
[Sat Aug 29 05:09:23.226866 2026] [security2:error] [pid 1034096:tid 1034350] [client 20.151.200.44:64568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/ca4.php"] [unique_id "apK94y04twRPFuquKD3MUwAAAOg"]
[Sat Aug 29 05:09:23.242461 2026] [security2:error] [pid 1034096:tid 1034316] [client 4.205.62.107:62916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/olfclass.php"] [unique_id "apK94y04twRPFuquKD3MVAAAAMY"]
[Sat Aug 29 05:09:23.263544 2026] [security2:error] [pid 1034096:tid 1034274] [client 4.205.62.107:58484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/params.php"] [unique_id "apK94y04twRPFuquKD3MVgAAAJw"]
[Sat Aug 29 05:09:23.270747 2026] [security2:error] [pid 1041789:tid 1041968] [client 146.70.36.124:55920] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "johnsonsremodeling.jarrelljohnson.com"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "apK944v3RhPI65jTFG7e_wAAA0M"]
[Sat Aug 29 05:09:23.282987 2026] [security2:error] [pid 1041789:tid 1041966] [client 4.232.148.111:1393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-mail.php"] [unique_id "apK944v3RhPI65jTFG7fAAAAA0E"]
[Sat Aug 29 05:09:23.294167 2026] [security2:error] [pid 1034096:tid 1034276] [client 20.63.81.20:46457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/wp-admin/css/colors/coffee/mari.php"] [unique_id "apK94y04twRPFuquKD3MVwAAAJ4"]
[Sat Aug 29 05:09:23.297803 2026] [security2:error] [pid 1034096:tid 1034313] [client 20.63.81.20:65255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/az.php"] [unique_id "apK94y04twRPFuquKD3MWAAAAMM"]
[Sat Aug 29 05:09:23.313228 2026] [security2:error] [pid 1034096:tid 1034323] [client 20.197.61.180:14424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/aksinet.php"] [unique_id "apK94y04twRPFuquKD3MXwAAAM0"]
[Sat Aug 29 05:09:23.318630 2026] [core:error] [pid 1041789:tid 1041813] [remote 45.148.10.64:52068] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:23.318846 2026] [security2:error] [pid 1034096:tid 1034266] [client 4.232.148.111:29506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK94y04twRPFuquKD3MYAAAAJQ"]
[Sat Aug 29 05:09:23.328498 2026] [security2:error] [pid 1034096:tid 1034269] [client 20.52.41.200:4589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/ioxi-o.php"] [unique_id "apK94y04twRPFuquKD3MZQAAAJc"]
[Sat Aug 29 05:09:23.356796 2026] [security2:error] [pid 1041789:tid 1041932] [client 20.63.81.20:55565] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/adminfuns.php"] [unique_id "apK944v3RhPI65jTFG7fBgAAAx8"]
[Sat Aug 29 05:09:23.360953 2026] [security2:error] [pid 1034096:tid 1034271] [client 158.23.184.117:7448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "apK94y04twRPFuquKD3MaQAAAJk"]
[Sat Aug 29 05:09:23.365646 2026] [security2:error] [pid 1034096:tid 1034365] [client 68.155.159.216:16247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/wp-content/x.php"] [unique_id "apK94y04twRPFuquKD3MawAAAPc"]
[Sat Aug 29 05:09:23.378190 2026] [security2:error] [pid 1034096:tid 1034265] [client 4.205.62.107:53309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-konfig.backup.php"] [unique_id "apK94y04twRPFuquKD3MbAAAAJM"]
[Sat Aug 29 05:09:23.380664 2026] [security2:error] [pid 1041789:tid 1041983] [client 20.197.61.180:1258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/headerg.php"] [unique_id "apK944v3RhPI65jTFG7fBwAAA1I"]
[Sat Aug 29 05:09:23.385804 2026] [core:error] [pid 1041789:tid 1041936] [client 20.100.175.163:1243] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:23.385821 2026] [core:error] [pid 1041789:tid 1041936] [client 20.100.175.163:1243] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:23.387022 2026] [security2:error] [pid 1034096:tid 1034369] [client 138.199.19.178:47082] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "4paiges.com"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "apK94y04twRPFuquKD3MbQAAAPs"]
[Sat Aug 29 05:09:23.387754 2026] [security2:error] [pid 1034096:tid 1034373] [client 20.63.219.114:10525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/alfa.php"] [unique_id "apK94y04twRPFuquKD3MbgAAAP8"]
[Sat Aug 29 05:09:23.414237 2026] [security2:error] [pid 1034096:tid 1034302] [client 4.205.62.107:9208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/lmfi2.php"] [unique_id "apK94y04twRPFuquKD3McAAAALg"]
[Sat Aug 29 05:09:23.419408 2026] [security2:error] [pid 1041789:tid 1041935] [client 158.23.147.79:11317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/cong.php"] [unique_id "apK944v3RhPI65jTFG7fCgAAAyI"]
[Sat Aug 29 05:09:23.424996 2026] [security2:error] [pid 1034096:tid 1034293] [client 20.63.81.20:46360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/wp-includes/images/crystal/option.php"] [unique_id "apK94y04twRPFuquKD3McwAAAK8"]
[Sat Aug 29 05:09:23.430179 2026] [core:error] [pid 1034096:tid 1034318] [client 138.246.253.24:58842] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:23.430195 2026] [core:error] [pid 1034096:tid 1034318] [client 138.246.253.24:58842] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:23.441744 2026] [security2:error] [pid 1034096:tid 1034285] [client 20.63.81.20:65176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/js.php"] [unique_id "apK94y04twRPFuquKD3MdQAAAKc"]
[Sat Aug 29 05:09:23.442553 2026] [security2:error] [pid 1041789:tid 1041939] [client 158.23.147.79:50002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK944v3RhPI65jTFG7fCwAAAyY"]
[Sat Aug 29 05:09:23.468039 2026] [security2:error] [pid 1041789:tid 1042024] [client 45.148.10.62:56486] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.xnk.wja.mybluehost.me"] [uri "/api/.env"] [unique_id "apK944v3RhPI65jTFG7fDAAAA3s"]
[Sat Aug 29 05:09:23.480224 2026] [core:error] [pid 1041789:tid 1041817] [remote 45.148.10.64:52068] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:23.480244 2026] [core:error] [pid 1041789:tid 1041817] [remote 45.148.10.64:52068] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:23.489994 2026] [security2:error] [pid 1041789:tid 1042043] [client 74.248.24.12:19489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK944v3RhPI65jTFG7fDgAAA44"]
[Sat Aug 29 05:09:23.505310 2026] [security2:error] [pid 1034096:tid 1034270] [client 158.23.184.117:7909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/wp-content/plugins/alfa-rex.php"] [unique_id "apK94y04twRPFuquKD3MeAAAAJg"]
[Sat Aug 29 05:09:23.511698 2026] [security2:error] [pid 1034096:tid 1034287] [client 20.63.81.20:55563] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/classwithtostring.php"] [unique_id "apK94y04twRPFuquKD3MeQAAAKk"]
[Sat Aug 29 05:09:23.552753 2026] [security2:error] [pid 1034096:tid 1034322] [client 158.23.147.79:5893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK94y04twRPFuquKD3MggAAAMw"]
[Sat Aug 29 05:09:23.553300 2026] [security2:error] [pid 1034096:tid 1034332] [client 20.151.200.44:62621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/x0x.php"] [unique_id "apK94y04twRPFuquKD3MgwAAANY"]
[Sat Aug 29 05:09:23.558325 2026] [security2:error] [pid 1034096:tid 1034310] [client 20.63.81.20:46439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/wp-includes/pomo/xxx.php"] [unique_id "apK94y04twRPFuquKD3MhAAAAMA"]
[Sat Aug 29 05:09:23.561449 2026] [security2:error] [pid 1041789:tid 1041988] [client 20.63.219.114:18325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/about.php525"] [unique_id "apK944v3RhPI65jTFG7fDwAAA1c"]
[Sat Aug 29 05:09:23.566007 2026] [security2:error] [pid 1034096:tid 1034301] [client 20.196.209.81:22646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-content/languages/index.php"] [unique_id "apK94y04twRPFuquKD3MhQAAALc"]
[Sat Aug 29 05:09:23.570754 2026] [security2:error] [pid 1041789:tid 1042017] [client 40.83.93.50:14510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/post.php"] [unique_id "apK944v3RhPI65jTFG7fEAAAA3Q"]
[Sat Aug 29 05:09:23.572904 2026] [security2:error] [pid 1034096:tid 1034359] [client 146.70.36.124:55932] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "johnsonsremodeling.jarrelljohnson.com"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "apK94y04twRPFuquKD3MhwAAAPE"]
[Sat Aug 29 05:09:23.574726 2026] [security2:error] [pid 1041789:tid 1042055] [client 68.155.159.216:14228] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/1.php"] [unique_id "apK944v3RhPI65jTFG7fEQAAA5o"]
[Sat Aug 29 05:09:23.574829 2026] [security2:error] [pid 1041789:tid 1042055] [client 68.155.159.216:14228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/1.php"] [unique_id "apK944v3RhPI65jTFG7fEQAAA5o"]
[Sat Aug 29 05:09:23.582256 2026] [security2:error] [pid 1034096:tid 1034312] [client 20.63.81.20:65278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/hd.php"] [unique_id "apK94y04twRPFuquKD3MiAAAAMI"]
[Sat Aug 29 05:09:23.597565 2026] [security2:error] [pid 1041789:tid 1041816] [remote 160.153.252.100:41734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.252.153.160.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "vineyardroots.com"] [uri "/wp-login.php"] [unique_id "apK944v3RhPI65jTFG7fEgADJQ4"]
[Sat Aug 29 05:09:23.608612 2026] [security2:error] [pid 1034096:tid 1034286] [client 202.71.25.11:57269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.25.71.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK94y04twRPFuquKD3MigAAAKg"]
[Sat Aug 29 05:09:23.608744 2026] [security2:error] [pid 1034096:tid 1034286] [client 202.71.25.11:57269] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK94y04twRPFuquKD3MigAAAKg"]
[Sat Aug 29 05:09:23.614798 2026] [security2:error] [pid 1034096:tid 1034320] [client 158.23.147.79:62717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/simple.php"] [unique_id "apK94y04twRPFuquKD3MjgAAAMo"]
[Sat Aug 29 05:09:23.615484 2026] [security2:error] [pid 1034096:tid 1034316] [client 68.155.159.216:24471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-content/packed.php"] [unique_id "apK94y04twRPFuquKD3MjwAAAMY"]
[Sat Aug 29 05:09:23.618911 2026] [security2:error] [pid 1041789:tid 1042021] [client 45.148.10.62:56486] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.xnk.wja.mybluehost.me"] [uri "/.env.bak"] [unique_id "apK944v3RhPI65jTFG7fEwAAA3g"]
[Sat Aug 29 05:09:23.647776 2026] [security2:error] [pid 1041789:tid 1042029] [client 111.235.68.106:50975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK944v3RhPI65jTFG7fFQAAA4A"]
[Sat Aug 29 05:09:23.647881 2026] [security2:error] [pid 1041789:tid 1042029] [client 111.235.68.106:50975] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK944v3RhPI65jTFG7fFQAAA4A"]
[Sat Aug 29 05:09:23.652781 2026] [security2:error] [pid 1034096:tid 1034339] [client 20.63.81.20:55659] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK94y04twRPFuquKD3MkgAAAN0"]
[Sat Aug 29 05:09:23.656489 2026] [security2:error] [pid 1041789:tid 1041818] [remote 45.148.10.64:52068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 64.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cathyandjimmy.strangeworx.com"] [uri "/wp-login.php"] [unique_id "apK944v3RhPI65jTFG7fFgADLxA"]
[Sat Aug 29 05:09:23.702553 2026] [security2:error] [pid 1034096:tid 1034308] [client 20.63.81.20:46436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/650.php"] [unique_id "apK94y04twRPFuquKD3MmAAAAL4"]
[Sat Aug 29 05:09:23.703799 2026] [security2:error] [pid 1034096:tid 1034269] [client 158.23.184.117:7426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/test.php"] [unique_id "apK94y04twRPFuquKD3MmQAAAJc"]
[Sat Aug 29 05:09:23.726696 2026] [security2:error] [pid 1034096:tid 1034373] [client 20.63.81.20:65266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/xl2023.php"] [unique_id "apK94y04twRPFuquKD3MmgAAAP8"]
[Sat Aug 29 05:09:23.746800 2026] [security2:error] [pid 1034096:tid 1034292] [client 4.232.148.111:23190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-content.php"] [unique_id "apK94y04twRPFuquKD3MmwAAAK4"]
[Sat Aug 29 05:09:23.754914 2026] [security2:error] [pid 1034096:tid 1034302] [client 158.23.147.79:28037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK94y04twRPFuquKD3MnAAAALg"]
[Sat Aug 29 05:09:23.756897 2026] [security2:error] [pid 1034096:tid 1034300] [client 20.151.200.44:61140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.alnaziria.com"] [uri "/fesa.php"] [unique_id "apK94y04twRPFuquKD3MnQAAALY"]
[Sat Aug 29 05:09:23.763980 2026] [security2:error] [pid 1034096:tid 1034293] [client 158.158.54.35:34635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK94y04twRPFuquKD3MngAAAK8"]
[Sat Aug 29 05:09:23.781793 2026] [security2:error] [pid 1034096:tid 1034371] [client 20.63.81.20:55568] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/5PJcpMFsD8B.php"] [unique_id "apK94y04twRPFuquKD3MoAAAAP0"]
[Sat Aug 29 05:09:23.799186 2026] [security2:error] [pid 1034096:tid 1034267] [client 4.232.148.111:31020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/alfa-rex.php7"] [unique_id "apK94y04twRPFuquKD3MpwAAAJU"]
[Sat Aug 29 05:09:23.813758 2026] [security2:error] [pid 1034096:tid 1034375] [client 20.52.41.200:5259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/xmlrpc.php"] [unique_id "apK94y04twRPFuquKD3MpgAAAQE"]
[Sat Aug 29 05:09:23.817040 2026] [security2:error] [pid 1041789:tid 1042000] [client 4.205.62.107:21573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/phpversion.php"] [unique_id "apK944v3RhPI65jTFG7fGQAAA2M"]
[Sat Aug 29 05:09:23.831472 2026] [security2:error] [pid 1034096:tid 1034270] [client 20.104.49.130:36753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pvillusions.com"] [uri "/ano.php"] [unique_id "apK94y04twRPFuquKD3MqwAAAJg"]
[Sat Aug 29 05:09:23.836236 2026] [security2:error] [pid 1034096:tid 1034296] [client 20.63.81.20:46356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/nakrip.php"] [unique_id "apK94y04twRPFuquKD3MrAAAALI"]
[Sat Aug 29 05:09:23.850441 2026] [security2:error] [pid 1034096:tid 1034255] [client 158.23.184.117:7478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/wp-includes/mani.php"] [unique_id "apK94y04twRPFuquKD3MrQAAAIk"]
[Sat Aug 29 05:09:23.866641 2026] [security2:error] [pid 1034096:tid 1034298] [client 114.119.135.182:55049] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.classiclightingusa.com"] [uri "/catalog/product_info.php/cPath/1/products_id/1136/osCsid/c12dc3b6ec54e5e590afc0244f2b6dc3"] [unique_id "apK94y04twRPFuquKD3MsAAAALQ"], referer: http://www.classiclightingusa.com/catalog/product_info.php/products_id/1136/osCsid/c12dc3b6ec54e5e590afc0244f2b6dc3
[Sat Aug 29 05:09:23.869810 2026] [security2:error] [pid 1034096:tid 1034310] [client 158.23.147.79:62720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-admin/about.php"] [unique_id "apK94y04twRPFuquKD3MsQAAAMA"]
[Sat Aug 29 05:09:23.873432 2026] [security2:error] [pid 1034096:tid 1034273] [client 146.70.36.124:55944] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "johnsonsremodeling.jarrelljohnson.com"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "apK94y04twRPFuquKD3MsgAAAJs"]
[Sat Aug 29 05:09:23.887504 2026] [security2:error] [pid 1034096:tid 1034265] [client 20.100.175.163:29807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-content/admin.php"] [unique_id "apK94y04twRPFuquKD3MuAAAAJM"]
[Sat Aug 29 05:09:23.896227 2026] [security2:error] [pid 1034096:tid 1034359] [client 20.48.250.41:50416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK94y04twRPFuquKD3MuQAAAPE"]
[Sat Aug 29 05:09:23.924277 2026] [security2:error] [pid 1034096:tid 1034320] [client 20.104.49.130:30072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/ws45.php"] [unique_id "apK94y04twRPFuquKD3MvAAAAMo"]
[Sat Aug 29 05:09:23.962044 2026] [security2:error] [pid 1041789:tid 1041981] [client 20.63.219.114:18974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/spip.php"] [unique_id "apK944v3RhPI65jTFG7fGwAAA1A"]
[Sat Aug 29 05:09:23.977236 2026] [security2:error] [pid 1034096:tid 1034290] [client 20.196.209.81:18043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-content/languages/min.php"] [unique_id "apK94y04twRPFuquKD3MwQAAAKw"]
[Sat Aug 29 05:09:24.003265 2026] [security2:error] [pid 1034096:tid 1034287] [client 74.248.24.12:12749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/xda.php"] [unique_id "apK95C04twRPFuquKD3MwwAAAKk"]
[Sat Aug 29 05:09:24.016744 2026] [security2:error] [pid 1034096:tid 1034282] [client 158.23.184.117:7471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/wp-includes/Test.php"] [unique_id "apK95C04twRPFuquKD3MxQAAAKQ"]
[Sat Aug 29 05:09:24.029128 2026] [security2:error] [pid 1034096:tid 1034318] [client 20.63.219.114:19899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/feed-rss2-queue.php"] [unique_id "apK95C04twRPFuquKD3MxgAAAMg"]
[Sat Aug 29 05:09:24.073290 2026] [security2:error] [pid 1034096:tid 1034306] [client 40.83.93.50:10059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/flower.php"] [unique_id "apK95C04twRPFuquKD3MzQAAALw"]
[Sat Aug 29 05:09:24.131242 2026] [security2:error] [pid 1041789:tid 1041956] [client 20.197.61.180:1991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/meta.php"] [unique_id "apK95Iv3RhPI65jTFG7fIgAAAzc"]
[Sat Aug 29 05:09:24.138068 2026] [security2:error] [pid 1034096:tid 1034377] [client 20.48.250.41:50316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK95C04twRPFuquKD3M0AAAAQM"]
[Sat Aug 29 05:09:24.150402 2026] [security2:error] [pid 1041789:tid 1041957] [client 20.197.61.180:1063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/alfa-rex1.php"] [unique_id "apK95Iv3RhPI65jTFG7fIwAAAzg"]
[Sat Aug 29 05:09:24.163209 2026] [security2:error] [pid 1034096:tid 1034374] [client 74.7.244.20:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.edwardjindovina.com"] [uri "/index.php"] [unique_id "apK94y04twRPFuquKD3MewAAAQA"]
[Sat Aug 29 05:09:24.172120 2026] [security2:error] [pid 1034096:tid 1034303] [client 74.7.244.20:52542] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.edwardjindovina.com"] [uri "/robots.txt"] [unique_id "apK94y04twRPFuquKD3MdgAAuQ8"]
[Sat Aug 29 05:09:24.178911 2026] [http2:warn] [pid 1018003:tid 1018194] [client 57.141.14.53:57820] h2_stream(1018003-367-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:09:24.179127 2026] [security2:error] [pid 1034096:tid 1034321] [client 138.199.19.178:47096] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "4paiges.com"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "apK95C04twRPFuquKD3M1QAAAMs"]
[Sat Aug 29 05:09:24.181136 2026] [security2:error] [pid 1034096:tid 1034335] [client 146.70.36.124:55946] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "johnsonsremodeling.jarrelljohnson.com"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "apK95C04twRPFuquKD3M1gAAANk"]
[Sat Aug 29 05:09:24.182251 2026] [security2:error] [pid 1034096:tid 1034312] [client 158.23.147.79:6112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-includes/customize/index.php"] [unique_id "apK95C04twRPFuquKD3M1wAAAMI"]
[Sat Aug 29 05:09:24.201971 2026] [security2:error] [pid 1034096:tid 1034255] [client 158.23.184.117:7898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/wp-includes/pomo.php"] [unique_id "apK95C04twRPFuquKD3M2AAAAIk"]
[Sat Aug 29 05:09:24.223091 2026] [security2:error] [pid 1034096:tid 1034285] [client 4.232.148.111:27527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "apK95C04twRPFuquKD3M2wAAAKc"]
[Sat Aug 29 05:09:24.237959 2026] [security2:error] [pid 1034096:tid 1034301] [client 61.9.8.108:6555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 108.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK95C04twRPFuquKD3M3QAAALc"]
[Sat Aug 29 05:09:24.238059 2026] [security2:error] [pid 1034096:tid 1034301] [client 61.9.8.108:6555] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK95C04twRPFuquKD3M3QAAALc"]
[Sat Aug 29 05:09:24.259855 2026] [security2:error] [pid 1034096:tid 1034324] [client 4.205.62.107:6941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/btx25.php"] [unique_id "apK95C04twRPFuquKD3M4QAAAM4"]
[Sat Aug 29 05:09:24.270635 2026] [security2:error] [pid 1034096:tid 1034368] [client 213.202.253.4:62624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "timportlock.net"] [uri "/wp-content/txets.php"] [unique_id "apK95C04twRPFuquKD3M5QAAAPo"], referer: www.google.com
[Sat Aug 29 05:09:24.273758 2026] [security2:error] [pid 1034096:tid 1034375] [client 20.52.41.200:5288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/filemanager.php"] [unique_id "apK95C04twRPFuquKD3M5gAAAQE"]
[Sat Aug 29 05:09:24.277260 2026] [security2:error] [pid 1034096:tid 1034309] [client 4.232.148.111:34690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "apK95C04twRPFuquKD3M5wAAAL8"]
[Sat Aug 29 05:09:24.311689 2026] [security2:error] [pid 1041789:tid 1041933] [client 45.148.10.62:56486] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.xnk.wja.mybluehost.me"] [uri "/stripe/.env"] [unique_id "apK95Iv3RhPI65jTFG7fJAAAAyA"]
[Sat Aug 29 05:09:24.316240 2026] [security2:error] [pid 1034096:tid 1034251] [client 20.48.250.41:50323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/ff1.php"] [unique_id "apK95C04twRPFuquKD3M6wAAAIU"]
[Sat Aug 29 05:09:24.321471 2026] [security2:error] [pid 1034096:tid 1034271] [client 4.205.62.107:24977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/124.php"] [unique_id "apK95C04twRPFuquKD3M7AAAAJk"]
[Sat Aug 29 05:09:24.372662 2026] [security2:error] [pid 1034096:tid 1034317] [client 20.196.209.81:18029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-content/languages/pk.php"] [unique_id "apK95C04twRPFuquKD3M8gAAAMc"]
[Sat Aug 29 05:09:24.380362 2026] [security2:error] [pid 1034096:tid 1034286] [client 20.100.175.163:16415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-configs.php"] [unique_id "apK95C04twRPFuquKD3M8wAAAKg"]
[Sat Aug 29 05:09:24.382424 2026] [security2:error] [pid 1034096:tid 1034267] [client 20.104.49.130:63592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/jp.php"] [unique_id "apK95C04twRPFuquKD3M9QAAAJU"]
[Sat Aug 29 05:09:24.386124 2026] [security2:error] [pid 1034096:tid 1034307] [client 20.63.219.114:1331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/backup.php"] [unique_id "apK95C04twRPFuquKD3M9wAAAL0"]
[Sat Aug 29 05:09:24.408787 2026] [security2:error] [pid 1034096:tid 1034264] [client 4.205.62.107:62736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/gnmlc.php"] [unique_id "apK95C04twRPFuquKD3M-QAAAJI"]
[Sat Aug 29 05:09:24.412379 2026] [security2:error] [pid 1034096:tid 1034344] [client 20.63.219.114:2441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/inputs.php"] [unique_id "apK95C04twRPFuquKD3M-gAAAOI"]
[Sat Aug 29 05:09:24.417403 2026] [security2:error] [pid 1034096:tid 1034253] [client 4.205.62.107:51480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/debug.php"] [unique_id "apK95C04twRPFuquKD3M_AAAAIc"]
[Sat Aug 29 05:09:24.448550 2026] [security2:error] [pid 1041789:tid 1042052] [client 158.23.147.79:17573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/wp-admin/images/about.php"] [unique_id "apK95Iv3RhPI65jTFG7fJQAAA5c"]
[Sat Aug 29 05:09:24.471955 2026] [security2:error] [pid 1034096:tid 1034370] [client 20.48.250.41:50422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/t.php"] [unique_id "apK95C04twRPFuquKD3NAgAAAPw"]
[Sat Aug 29 05:09:24.474450 2026] [security2:error] [pid 1034096:tid 1034285] [client 20.104.49.130:30250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/zoo2.php"] [unique_id "apK95C04twRPFuquKD3NAwAAAKc"]
[Sat Aug 29 05:09:24.474867 2026] [security2:error] [pid 1034096:tid 1034320] [client 146.70.36.124:55958] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "johnsonsremodeling.jarrelljohnson.com"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "apK95C04twRPFuquKD3NBAAAAMo"]
[Sat Aug 29 05:09:24.476484 2026] [security2:error] [pid 1034096:tid 1034284] [client 158.23.184.117:7450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/wp-admin/link-add.php"] [unique_id "apK95C04twRPFuquKD3NBgAAAKY"]
[Sat Aug 29 05:09:24.517374 2026] [security2:error] [pid 1034096:tid 1034294] [client 74.248.24.12:22864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/theme.php"] [unique_id "apK95C04twRPFuquKD3NCQAAALA"]
[Sat Aug 29 05:09:24.519198 2026] [security2:error] [pid 1034096:tid 1034274] [client 158.158.54.35:34625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK95C04twRPFuquKD3NCgAAAJw"]
[Sat Aug 29 05:09:24.519229 2026] [security2:error] [pid 1034096:tid 1034287] [client 20.104.49.130:63590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/wsd.php"] [unique_id "apK95C04twRPFuquKD3NCwAAAKk"]
[Sat Aug 29 05:09:24.523757 2026] [security2:error] [pid 1034096:tid 1034304] [client 4.205.62.107:53166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/packed.php"] [unique_id "apK95C04twRPFuquKD3NDgAAALo"]
[Sat Aug 29 05:09:24.560043 2026] [security2:error] [pid 1041789:tid 1041976] [client 4.205.62.107:8756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/aws_sdk_settings.php"] [unique_id "apK95Iv3RhPI65jTFG7fKAAAA0s"]
[Sat Aug 29 05:09:24.564353 2026] [security2:error] [pid 1041789:tid 1041931] [client 158.23.147.79:50115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/log-mama/function.php"] [unique_id "apK95Iv3RhPI65jTFG7fKQAAAx4"]
[Sat Aug 29 05:09:24.624954 2026] [security2:error] [pid 1041789:tid 1042014] [client 158.23.184.117:7458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/wp-includes/Text.php"] [unique_id "apK95Iv3RhPI65jTFG7fKwAAA3E"]
[Sat Aug 29 05:09:24.645569 2026] [security2:error] [pid 1034096:tid 1034290] [client 40.83.93.50:14520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/meta.php"] [unique_id "apK95C04twRPFuquKD3NEQAAAKw"]
[Sat Aug 29 05:09:24.655244 2026] [security2:error] [pid 1034096:tid 1034286] [client 158.23.147.79:5920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-admin/includes/index.php"] [unique_id "apK95C04twRPFuquKD3NFQAAAKg"]
[Sat Aug 29 05:09:24.666641 2026] [security2:error] [pid 1041789:tid 1041961] [client 20.48.250.41:50388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/erty.php"] [unique_id "apK95Iv3RhPI65jTFG7fLQAAAzw"]
[Sat Aug 29 05:09:24.671178 2026] [security2:error] [pid 1034096:tid 1034371] [client 127.0.0.1:46508] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK95C04twRPFuquKD3NEAAAAP0"]
[Sat Aug 29 05:09:24.671240 2026] [security2:error] [pid 1041789:tid 1042035] [client 127.0.0.1:46498] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.redtecsol.com"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK95Iv3RhPI65jTFG7fKgAAA4Y"]
[Sat Aug 29 05:09:24.671462 2026] [security2:error] [pid 1034096:tid 1034318] [client 74.7.230.13:49484] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.redtecsol.com"] [uri "/robots.txt"] [unique_id "apK95C04twRPFuquKD3NDwAAyAk"]
[Sat Aug 29 05:09:24.678048 2026] [security2:error] [pid 1041789:tid 1042004] [client 158.23.147.79:11270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-includes/js/index.php"] [unique_id "apK95Iv3RhPI65jTFG7fLwAAA2c"]
[Sat Aug 29 05:09:24.695114 2026] [security2:error] [pid 1034096:tid 1034271] [client 4.232.148.111:19876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/css/wp-login.php"] [unique_id "apK95C04twRPFuquKD3NHQAAAJk"]
[Sat Aug 29 05:09:24.704096 2026] [security2:error] [pid 1041789:tid 1041950] [client 74.7.228.10:47714] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.ift.bla.mybluehost.me"] [uri "/index.php"] [unique_id "apK95Iv3RhPI65jTFG7fMAADMRM"]
[Sat Aug 29 05:09:24.709529 2026] [security2:error] [pid 1034096:tid 1034265] [client 68.155.159.216:52769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK95C04twRPFuquKD3NHgAAAJM"]
[Sat Aug 29 05:09:24.733894 2026] [security2:error] [pid 1034096:tid 1034314] [client 20.52.41.200:5292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-content/themes/admin.php"] [unique_id "apK95C04twRPFuquKD3NIgAAAMQ"]
[Sat Aug 29 05:09:24.745636 2026] [security2:error] [pid 1041789:tid 1042054] [client 20.63.219.114:1297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/haiterus.php"] [unique_id "apK95Iv3RhPI65jTFG7fMQAAA5k"]
[Sat Aug 29 05:09:24.765212 2026] [security2:error] [pid 1041789:tid 1042053] [client 20.196.209.81:18017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.udmmeassessment.space"] [uri "/wp-content/languages/plugins/about.php"] [unique_id "apK95Iv3RhPI65jTFG7fMwAAA5g"]
[Sat Aug 29 05:09:24.768277 2026] [security2:error] [pid 1041789:tid 1042038] [client 146.70.36.124:55966] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "johnsonsremodeling.jarrelljohnson.com"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "apK95Iv3RhPI65jTFG7fNAAAA4k"]
[Sat Aug 29 05:09:24.772963 2026] [security2:error] [pid 1041789:tid 1042003] [client 158.23.184.117:7182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/wp-trackback.php"] [unique_id "apK95Iv3RhPI65jTFG7fNQAAA2Y"]
[Sat Aug 29 05:09:24.776497 2026] [security2:error] [pid 1041789:tid 1042025] [client 4.232.148.111:3779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/upload.php"] [unique_id "apK95Iv3RhPI65jTFG7fNgAAA3w"]
[Sat Aug 29 05:09:24.786981 2026] [security2:error] [pid 1034096:tid 1034303] [client 66.249.66.76:0] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Googlebot[\\\\/-]" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/google.conf"] [line "3"] [id "901003"] [msg "Googlebot Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/robots.txt"] [unique_id "apK95C04twRPFuquKD3NJwAAALk"]
[Sat Aug 29 05:09:24.794194 2026] [security2:error] [pid 1041789:tid 1041820] [remote 160.153.252.100:41734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.252.153.160.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "vineyardroots.com"] [uri "/wp-login.php"] [unique_id "apK95Iv3RhPI65jTFG7fNwADQBI"], referer: https://vineyardroots.com/wp-login.php
[Sat Aug 29 05:09:24.799270 2026] [security2:error] [pid 1034096:tid 1034298] [client 20.63.219.114:10519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/class-walker-category-dropdown-class.php"] [unique_id "apK95C04twRPFuquKD3NKAAAALQ"]
[Sat Aug 29 05:09:24.813205 2026] [security2:error] [pid 1034096:tid 1034313] [client 138.199.19.178:47098] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "4paiges.com"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "apK95C04twRPFuquKD3NKgAAAMM"]
[Sat Aug 29 05:09:24.824889 2026] [security2:error] [pid 1041789:tid 1041968] [client 66.249.66.76:0] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Googlebot[\\\\/-]" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/google.conf"] [line "3"] [id "901003"] [msg "Googlebot Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/"] [unique_id "apK95Iv3RhPI65jTFG7fOwAAA0M"]
[Sat Aug 29 05:09:24.855666 2026] [security2:error] [pid 1041789:tid 1041997] [client 20.197.61.180:12749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/headerg.php"] [unique_id "apK95Iv3RhPI65jTFG7fPwAAA2A"]
[Sat Aug 29 05:09:24.860057 2026] [security2:error] [pid 1034096:tid 1034350] [client 158.23.147.79:56963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/file.php"] [unique_id "apK95C04twRPFuquKD3NLAAAAOg"]
[Sat Aug 29 05:09:24.863930 2026] [core:error] [pid 1041789:tid 1042032] [client 158.23.184.117:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:24.863949 2026] [core:error] [pid 1041789:tid 1042032] [client 158.23.184.117:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:24.870028 2026] [security2:error] [pid 1041789:tid 1042033] [client 20.197.61.180:12780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/dxc.php"] [unique_id "apK95Iv3RhPI65jTFG7fQQAAA4Q"]
[Sat Aug 29 05:09:24.872021 2026] [security2:error] [pid 1034096:tid 1034374] [client 20.100.175.163:16404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-includes/index.php"] [unique_id "apK95C04twRPFuquKD3NMAAAAQA"]
[Sat Aug 29 05:09:24.897896 2026] [security2:error] [pid 1034096:tid 1034370] [client 20.48.250.41:50335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/0x.php"] [unique_id "apK95C04twRPFuquKD3NMwAAAPw"]
[Sat Aug 29 05:09:24.917112 2026] [security2:error] [pid 1041789:tid 1041936] [client 158.23.184.117:7227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/wp-admin/maint.php"] [unique_id "apK95Iv3RhPI65jTFG7fQwAAAyM"]
[Sat Aug 29 05:09:24.949327 2026] [security2:error] [pid 1041789:tid 1041962] [client 45.148.10.62:56486] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.xnk.wja.mybluehost.me"] [uri "/backend/.env"] [unique_id "apK95Iv3RhPI65jTFG7fRQAAAz0"]
[Sat Aug 29 05:09:24.956820 2026] [security2:error] [pid 1034096:tid 1034320] [client 4.205.62.107:21617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/adminfus.php"] [unique_id "apK95C04twRPFuquKD3NOwAAAMo"]
[Sat Aug 29 05:09:24.964302 2026] [security2:error] [pid 1041789:tid 1042005] [client 74.7.244.54:40142] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "northpolepictureco.photoboothhawaii.com"] [uri "/index.php"] [unique_id "apK944v3RhPI65jTFG7e_QADaAo"]
[Sat Aug 29 05:09:24.964319 2026] [security2:error] [pid 1041789:tid 1042026] [client 4.205.62.107:63926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK95Iv3RhPI65jTFG7fRgAAA30"]
[Sat Aug 29 05:09:24.967409 2026] [security2:error] [pid 1034096:tid 1034335] [client 158.158.54.35:13023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/num.php"] [unique_id "apK95C04twRPFuquKD3NPAAAANk"]
[Sat Aug 29 05:09:24.968147 2026] [security2:error] [pid 1034096:tid 1034297] [client 158.23.147.79:60189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-content/uploads/index.php"] [unique_id "apK95C04twRPFuquKD3NPQAAALM"]
[Sat Aug 29 05:09:25.004345 2026] [autoindex:error] [pid 1034096:tid 1034168] [remote 74.7.227.44:35394] AH01276: Cannot serve directory /home4/vincenz3/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:09:25.030593 2026] [security2:error] [pid 1034096:tid 1034255] [client 74.248.24.12:2713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/classwithtostring.php"] [unique_id "apK95S04twRPFuquKD3NSAAAAIk"]
[Sat Aug 29 05:09:25.031924 2026] [security2:error] [pid 1034096:tid 1034309] [client 103.162.125.59:62796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.125.162.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK95S04twRPFuquKD3NSQAAAL8"]
[Sat Aug 29 05:09:25.032042 2026] [security2:error] [pid 1034096:tid 1034309] [client 103.162.125.59:62796] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK95S04twRPFuquKD3NSQAAAL8"]
[Sat Aug 29 05:09:25.061863 2026] [security2:error] [pid 1034096:tid 1034317] [client 20.48.250.41:50321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/66.php"] [unique_id "apK95S04twRPFuquKD3NSwAAAMc"]
[Sat Aug 29 05:09:25.074119 2026] [security2:error] [pid 1034096:tid 1034260] [client 146.70.36.124:55976] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "johnsonsremodeling.jarrelljohnson.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "apK95S04twRPFuquKD3NTAAAAI4"]
[Sat Aug 29 05:09:25.087373 2026] [security2:error] [pid 1041789:tid 1041988] [client 158.23.184.117:7474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/wp-includes/num.php"] [unique_id "apK95Yv3RhPI65jTFG7fRwAAA1c"]
[Sat Aug 29 05:09:25.097157 2026] [security2:error] [pid 1041789:tid 1041990] [client 45.148.10.62:56486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xnk.wja.mybluehost.me"] [uri "/test.php"] [unique_id "apK95Yv3RhPI65jTFG7fSAAAA1k"]
[Sat Aug 29 05:09:25.105452 2026] [security2:error] [pid 1034096:tid 1034368] [client 20.63.219.114:10569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/go.php"] [unique_id "apK95S04twRPFuquKD3NTQAAAPo"]
[Sat Aug 29 05:09:25.115869 2026] [security2:error] [pid 1034096:tid 1034267] [client 158.23.184.117:19396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/.dj/index.php"] [unique_id "apK95S04twRPFuquKD3NTwAAAJU"]
[Sat Aug 29 05:09:25.132256 2026] [security2:error] [pid 1034096:tid 1034315] [client 40.83.93.50:10099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/randkeyword.php"] [unique_id "apK95S04twRPFuquKD3NUQAAAMU"]
[Sat Aug 29 05:09:25.139259 2026] [security2:error] [pid 1034096:tid 1034203] [remote 93.123.109.228:36026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/config.php"] [unique_id "apK95S04twRPFuquKD3NUgAAwVE"]
[Sat Aug 29 05:09:25.166934 2026] [security2:error] [pid 1034096:tid 1034270] [client 158.23.184.117:19444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/.info.php"] [unique_id "apK95S04twRPFuquKD3NVAAAAJg"]
[Sat Aug 29 05:09:25.167483 2026] [security2:error] [pid 1034096:tid 1034322] [client 20.104.49.130:34516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/ioxi-o.php"] [unique_id "apK95S04twRPFuquKD3NVQAAAMw"]
[Sat Aug 29 05:09:25.171087 2026] [security2:error] [pid 1034096:tid 1034274] [client 4.232.148.111:20886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/images/index.php"] [unique_id "apK95S04twRPFuquKD3NVgAAAJw"]
[Sat Aug 29 05:09:25.185321 2026] [security2:error] [pid 1034096:tid 1034276] [client 20.52.41.200:5368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-admin/css/admin.php"] [unique_id "apK95S04twRPFuquKD3NWgAAAJ4"]
[Sat Aug 29 05:09:25.247502 2026] [security2:error] [pid 1034096:tid 1034312] [client 20.48.250.41:50306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/f35.php"] [unique_id "apK95S04twRPFuquKD3NXAAAAMI"]
[Sat Aug 29 05:09:25.259407 2026] [security2:error] [pid 1034096:tid 1034296] [client 74.7.228.53:54264] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "northpolepictureco.com"] [uri "/index.php"] [unique_id "apK95S04twRPFuquKD3NUAAAsmo"]
[Sat Aug 29 05:09:25.263736 2026] [security2:error] [pid 1041789:tid 1042024] [client 158.173.241.137:20023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.241.173.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mikelait.com"] [uri "/suggest.php"] [unique_id "apK95Yv3RhPI65jTFG7fSwAAA3s"], referer: https://mikelait.com/suggest.php?page=Our+Family+Genealogy+Pages
[Sat Aug 29 05:09:25.268586 2026] [http2:warn] [pid 1017536:tid 1017764] [client 57.141.14.63:59328] h2_stream(1017536-342-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:09:25.286559 2026] [security2:error] [pid 1034096:tid 1034372] [client 158.23.184.117:7922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/identity.php"] [unique_id "apK95S04twRPFuquKD3NYAAAAP4"]
[Sat Aug 29 05:09:25.288196 2026] [security2:error] [pid 1034096:tid 1034292] [client 158.23.147.79:5910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-admin/index.php"] [unique_id "apK95S04twRPFuquKD3NYQAAAK4"]
[Sat Aug 29 05:09:25.299707 2026] [http2:warn] [pid 1034096:tid 1034336] [client 17.166.232.171:56598] h2_stream(1034096-46-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:09:25.313135 2026] [security2:error] [pid 1034096:tid 1034325] [client 158.23.184.117:19430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/.trash7206/index.php"] [unique_id "apK95S04twRPFuquKD3NYgAAAM8"]
[Sat Aug 29 05:09:25.314664 2026] [security2:error] [pid 1034096:tid 1034377] [client 20.63.219.114:2465] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.realestatetrifecta.com"] [uri "/1.php7"] [unique_id "apK95S04twRPFuquKD3NYwAAAQM"]
[Sat Aug 29 05:09:25.314763 2026] [security2:error] [pid 1034096:tid 1034377] [client 20.63.219.114:2465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/1.php7"] [unique_id "apK95S04twRPFuquKD3NYwAAAQM"]
[Sat Aug 29 05:09:25.317229 2026] [security2:error] [pid 1034096:tid 1034263] [client 169.58.197.254:61425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 254.197.58.169.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.kcactf4.org"] [uri "/wp-content/plugins/shell/about.php"] [unique_id "apK95S04twRPFuquKD3NZAAAAJE"], referer: www.google.com
[Sat Aug 29 05:09:25.346331 2026] [security2:error] [pid 1034096:tid 1034365] [client 68.155.159.216:64438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-includes/content.php"] [unique_id "apK95S04twRPFuquKD3NaAAAAPc"]
[Sat Aug 29 05:09:25.353544 2026] [security2:error] [pid 1034096:tid 1034306] [client 20.100.175.163:20957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-admin/a.php"] [unique_id "apK95S04twRPFuquKD3NaQAAALw"]
[Sat Aug 29 05:09:25.383268 2026] [security2:error] [pid 1034096:tid 1034319] [client 146.70.36.124:55988] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "johnsonsremodeling.jarrelljohnson.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "apK95S04twRPFuquKD3NbQAAAMk"]
[Sat Aug 29 05:09:25.384499 2026] [security2:error] [pid 1034096:tid 1034373] [client 20.48.250.41:50424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/wen.php"] [unique_id "apK95S04twRPFuquKD3NbgAAAP8"]
[Sat Aug 29 05:09:25.423968 2026] [security2:error] [pid 1034096:tid 1034302] [client 4.205.62.107:6467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/app_dev.php"] [unique_id "apK95S04twRPFuquKD3NcgAAALg"]
[Sat Aug 29 05:09:25.425552 2026] [security2:error] [pid 1034096:tid 1034122] [remote 93.123.109.228:36026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/config/aws.php"] [unique_id "apK95S04twRPFuquKD3NdAAAlwA"]
[Sat Aug 29 05:09:25.444550 2026] [security2:error] [pid 1034096:tid 1034239] [remote 93.123.109.228:36026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/config/config.inc.php"] [unique_id "apK95S04twRPFuquKD3NewAAl3U"]
[Sat Aug 29 05:09:25.453917 2026] [security2:error] [pid 1034096:tid 1034140] [remote 93.123.109.228:36026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/config/config.php"] [unique_id "apK95S04twRPFuquKD3NfQAAlxI"]
[Sat Aug 29 05:09:25.457643 2026] [security2:error] [pid 1041789:tid 1041951] [client 4.205.62.107:25010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/test1.php"] [unique_id "apK95Yv3RhPI65jTFG7fTAAAAzI"]
[Sat Aug 29 05:09:25.458449 2026] [security2:error] [pid 1034096:tid 1034301] [client 158.23.184.117:19442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/.trash7206/min.php"] [unique_id "apK95S04twRPFuquKD3NfgAAALc"]
[Sat Aug 29 05:09:25.470362 2026] [security2:error] [pid 1041789:tid 1041991] [client 20.48.250.41:53481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/f35.php"] [unique_id "apK95Yv3RhPI65jTFG7fTQAAA1o"]
[Sat Aug 29 05:09:25.495919 2026] [security2:error] [pid 1034096:tid 1034273] [client 138.199.19.178:47110] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "4paiges.com"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "apK95S04twRPFuquKD3NfwAAAJs"]
[Sat Aug 29 05:09:25.498147 2026] [security2:error] [pid 1041789:tid 1042048] [client 20.48.250.41:45312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/wp-link10.php"] [unique_id "apK95Yv3RhPI65jTFG7fTgAAA5M"]
[Sat Aug 29 05:09:25.499410 2026] [security2:error] [pid 1034096:tid 1034311] [client 20.48.250.41:38818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/rtx.php"] [unique_id "apK95S04twRPFuquKD3NgAAAAME"]
[Sat Aug 29 05:09:25.506114 2026] [security2:error] [pid 1034096:tid 1034329] [client 20.104.49.130:60772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/133.php"] [unique_id "apK95S04twRPFuquKD3NgQAAANM"]
[Sat Aug 29 05:09:25.518366 2026] [security2:error] [pid 1034096:tid 1034277] [client 20.63.219.114:18536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/gecko-new.php"] [unique_id "apK95S04twRPFuquKD3NggAAAJ8"]
[Sat Aug 29 05:09:25.525446 2026] [security2:error] [pid 1034096:tid 1034322] [client 20.48.250.41:49984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/export.php"] [unique_id "apK95S04twRPFuquKD3NgwAAAMw"]
[Sat Aug 29 05:09:25.538825 2026] [security2:error] [pid 1034096:tid 1034314] [client 20.48.250.41:50397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/inc.php"] [unique_id "apK95S04twRPFuquKD3NhAAAAMQ"]
[Sat Aug 29 05:09:25.544507 2026] [security2:error] [pid 1034096:tid 1034304] [client 74.248.24.12:22902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/news.php"] [unique_id "apK95S04twRPFuquKD3NhQAAALo"]
[Sat Aug 29 05:09:25.546389 2026] [proxy_http:error] [pid 1017536:tid 1017722] (70007)The timeout specified has expired: [client 127.0.0.1:26574] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:09:25.546406 2026] [proxy:error] [pid 1017536:tid 1017722] [client 127.0.0.1:26574] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:09:25.547665 2026] [security2:error] [pid 1034096:tid 1034253] [client 4.205.62.107:60348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/koiy.php"] [unique_id "apK95S04twRPFuquKD3NhgAAAIc"]
[Sat Aug 29 05:09:25.551498 2026] [security2:error] [pid 1034096:tid 1034303] [client 4.205.62.107:58438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/dialog.php"] [unique_id "apK95S04twRPFuquKD3NhwAAALk"]
[Sat Aug 29 05:09:25.556667 2026] [security2:error] [pid 1041789:tid 1041934] [client 158.23.184.117:7459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/Radio.php"] [unique_id "apK95Yv3RhPI65jTFG7fUQAAAyE"]
[Sat Aug 29 05:09:25.571297 2026] [security2:error] [pid 1041789:tid 1041987] [client 20.48.250.41:49316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/init.php"] [unique_id "apK95Yv3RhPI65jTFG7fUwAAA1Y"]
[Sat Aug 29 05:09:25.575917 2026] [security2:error] [pid 1034096:tid 1034285] [client 4.232.148.111:35270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-content/file.php"] [unique_id "apK95S04twRPFuquKD3NiAAAAKc"]
[Sat Aug 29 05:09:25.599748 2026] [security2:error] [pid 1034096:tid 1034369] [client 20.48.250.41:34258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/xs.php"] [unique_id "apK95S04twRPFuquKD3NjQAAAPs"]
[Sat Aug 29 05:09:25.601726 2026] [security2:error] [pid 1034096:tid 1034371] [client 158.23.147.79:17534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK95S04twRPFuquKD3NjgAAAP0"]
[Sat Aug 29 05:09:25.602577 2026] [security2:error] [pid 1034096:tid 1034328] [client 20.48.250.41:53388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/wen.php"] [unique_id "apK95S04twRPFuquKD3NjwAAANI"]
[Sat Aug 29 05:09:25.604154 2026] [security2:error] [pid 1041789:tid 1041981] [client 158.23.184.117:19452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/.well-known//index.php"] [unique_id "apK95Yv3RhPI65jTFG7fVAAAA1A"]
[Sat Aug 29 05:09:25.618713 2026] [security2:error] [pid 1034096:tid 1034307] [client 20.48.250.41:58543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/rtx.php"] [unique_id "apK95S04twRPFuquKD3NkAAAAL0"]
[Sat Aug 29 05:09:25.627911 2026] [security2:error] [pid 1034096:tid 1034342] [client 20.52.41.200:5295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/adminfuns.php"] [unique_id "apK95S04twRPFuquKD3NkQAAAOA"]
[Sat Aug 29 05:09:25.628645 2026] [security2:error] [pid 1034096:tid 1034255] [client 20.197.61.180:9595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/meta.php"] [unique_id "apK95S04twRPFuquKD3NkgAAAIk"]
[Sat Aug 29 05:09:25.628981 2026] [security2:error] [pid 1034096:tid 1034267] [client 40.83.93.50:10089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/goods.php"] [unique_id "apK95S04twRPFuquKD3NkwAAAJU"]
[Sat Aug 29 05:09:25.635037 2026] [security2:error] [pid 1034096:tid 1034222] [remote 93.123.109.228:36026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/config/env.php"] [unique_id "apK95S04twRPFuquKD3NlgAArGQ"]
[Sat Aug 29 05:09:25.651452 2026] [security2:error] [pid 1034096:tid 1034246] [remote 93.123.109.228:36026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/config/module.config.php"] [unique_id "apK95S04twRPFuquKD3NmwAArHw"]
[Sat Aug 29 05:09:25.652083 2026] [security2:error] [pid 1034096:tid 1034139] [remote 93.123.109.228:36026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/config/nexmo.php"] [unique_id "apK95S04twRPFuquKD3NnAAArBE"]
[Sat Aug 29 05:09:25.654182 2026] [security2:error] [pid 1034096:tid 1034124] [remote 93.123.109.228:36026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/config/stripe.php"] [unique_id "apK95S04twRPFuquKD3NoQAArAI"]
[Sat Aug 29 05:09:25.654549 2026] [security2:error] [pid 1034096:tid 1034374] [client 4.205.62.107:53128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-info.php"] [unique_id "apK95S04twRPFuquKD3NogAAAQA"]
[Sat Aug 29 05:09:25.654855 2026] [security2:error] [pid 1034096:tid 1034372] [client 20.48.250.41:38738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/ckk.php"] [unique_id "apK95S04twRPFuquKD3NowAAAP4"]
[Sat Aug 29 05:09:25.674217 2026] [security2:error] [pid 1034096:tid 1034292] [client 20.48.250.41:45372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/ww.php"] [unique_id "apK95S04twRPFuquKD3NpAAAAK4"]
[Sat Aug 29 05:09:25.681881 2026] [security2:error] [pid 1034096:tid 1034300] [client 146.70.36.124:55998] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "johnsonsremodeling.jarrelljohnson.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "apK95S04twRPFuquKD3NpQAAALY"]
[Sat Aug 29 05:09:25.688985 2026] [security2:error] [pid 1034096:tid 1034324] [client 158.23.147.79:49922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/bk/index.php"] [unique_id "apK95S04twRPFuquKD3NpgAAAM4"]
[Sat Aug 29 05:09:25.691163 2026] [security2:error] [pid 1034096:tid 1034260] [client 20.197.61.180:2028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/wp-2019.php"] [unique_id "apK95S04twRPFuquKD3NpwAAAI4"]
[Sat Aug 29 05:09:25.692728 2026] [security2:error] [pid 1034096:tid 1034325] [client 20.48.250.41:50371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/6bcwiqwj.php"] [unique_id "apK95S04twRPFuquKD3NqAAAAM8"]
[Sat Aug 29 05:09:25.716414 2026] [security2:error] [pid 1034096:tid 1034298] [client 20.63.219.114:15411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/ds.php"] [unique_id "apK95S04twRPFuquKD3NqwAAALQ"]
[Sat Aug 29 05:09:25.724598 2026] [security2:error] [pid 1041789:tid 1041982] [client 4.205.62.107:9205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/mga.php"] [unique_id "apK95Yv3RhPI65jTFG7fVwAAA1E"]
[Sat Aug 29 05:09:25.742565 2026] [security2:error] [pid 1034096:tid 1034265] [client 158.158.54.35:34140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "apK95S04twRPFuquKD3NrAAAAJM"]
[Sat Aug 29 05:09:25.743563 2026] [security2:error] [pid 1034096:tid 1034376] [client 20.48.250.41:34250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/zu.php"] [unique_id "apK95S04twRPFuquKD3NrgAAAQI"]
[Sat Aug 29 05:09:25.746276 2026] [security2:error] [pid 1034096:tid 1034263] [client 158.23.184.117:19422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/.well-known/about.php"] [unique_id "apK95S04twRPFuquKD3NrwAAAJE"]
[Sat Aug 29 05:09:25.748782 2026] [security2:error] [pid 1034096:tid 1034373] [client 158.23.184.117:7873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/wp-includes/Requests/Exception/file.php"] [unique_id "apK95S04twRPFuquKD3NsQAAAP8"]
[Sat Aug 29 05:09:25.752246 2026] [security2:error] [pid 1041789:tid 1042028] [client 20.48.250.41:49400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/term.php"] [unique_id "apK95Yv3RhPI65jTFG7fWQAAA38"]
[Sat Aug 29 05:09:25.761427 2026] [security2:error] [pid 1034096:tid 1034339] [client 158.23.147.79:5983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-login.php"] [unique_id "apK95S04twRPFuquKD3NsgAAAN0"]
[Sat Aug 29 05:09:25.766564 2026] [security2:error] [pid 1034096:tid 1034293] [client 20.48.250.41:53451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/inc.php"] [unique_id "apK95S04twRPFuquKD3NswAAAK8"]
[Sat Aug 29 05:09:25.792455 2026] [security2:error] [pid 1034096:tid 1034301] [client 20.48.250.41:50019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/gk.php"] [unique_id "apK95S04twRPFuquKD3NtgAAALc"]
[Sat Aug 29 05:09:25.795472 2026] [security2:error] [pid 1041789:tid 1041992] [client 158.23.147.79:62652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-admin/about.php"] [unique_id "apK95Yv3RhPI65jTFG7fWwAAA1s"]
[Sat Aug 29 05:09:25.805805 2026] [security2:error] [pid 1034096:tid 1034315] [client 20.48.250.41:46055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/w1px.php"] [unique_id "apK95S04twRPFuquKD3NtwAAAMU"]
[Sat Aug 29 05:09:25.808876 2026] [security2:error] [pid 1041789:tid 1042052] [client 4.232.148.111:11242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/inputs.php"] [unique_id "apK95Yv3RhPI65jTFG7fXAAAA5c"]
[Sat Aug 29 05:09:25.829697 2026] [security2:error] [pid 1034096:tid 1034329] [client 20.48.250.41:38757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rjselectricalservices.com"] [uri "/R57.php"] [unique_id "apK95S04twRPFuquKD3NuAAAANM"]
[Sat Aug 29 05:09:25.844253 2026] [proxy_http:error] [pid 1018003:tid 1018042] (70007)The timeout specified has expired: [remote 57.141.14.38:38056] AH01102: error reading status line from remote server 127.0.0.1:8443
[Sat Aug 29 05:09:25.844280 2026] [proxy:error] [pid 1018003:tid 1018042] [remote 57.141.14.38:38056] AH00898: Error reading from remote server returned by /shop/
[Sat Aug 29 05:09:25.849080 2026] [security2:error] [pid 1034096:tid 1034322] [client 20.48.250.41:29651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/easy.php"] [unique_id "apK95S04twRPFuquKD3NvAAAAMw"]
[Sat Aug 29 05:09:25.851417 2026] [security2:error] [pid 1034096:tid 1034276] [client 20.48.250.41:61743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/ckk.php"] [unique_id "apK95S04twRPFuquKD3NvgAAAJ4"]
[Sat Aug 29 05:09:25.854391 2026] [core:error] [pid 1034096:tid 1034318] [client 20.100.175.163:16393] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:25.854412 2026] [core:error] [pid 1034096:tid 1034318] [client 20.100.175.163:16393] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:25.873980 2026] [security2:error] [pid 1041789:tid 1041933] [client 20.63.219.114:18354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/wp-admin.php"] [unique_id "apK95Yv3RhPI65jTFG7fYgAAAyA"]
[Sat Aug 29 05:09:25.897565 2026] [security2:error] [pid 1034096:tid 1034328] [client 20.48.250.41:53406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/6bcwiqwj.php"] [unique_id "apK95S04twRPFuquKD3NwQAAANI"]
[Sat Aug 29 05:09:25.904587 2026] [security2:error] [pid 1034096:tid 1034332] [client 20.48.250.41:19425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/aaa.php"] [unique_id "apK95S04twRPFuquKD3NwwAAANY"]
[Sat Aug 29 05:09:25.917223 2026] [security2:error] [pid 1034096:tid 1034309] [client 45.148.10.62:48428] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.xnk.wja.mybluehost.me"] [uri "/.env.backup"] [unique_id "apK95S04twRPFuquKD3NxAAAAL8"]
[Sat Aug 29 05:09:25.925121 2026] [security2:error] [pid 1041789:tid 1042051] [client 20.48.250.41:65243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/aa.php"] [unique_id "apK95Yv3RhPI65jTFG7fZwAAA5Y"]
[Sat Aug 29 05:09:25.939161 2026] [security2:error] [pid 1034096:tid 1034342] [client 20.48.250.41:34433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/lanka.php"] [unique_id "apK95S04twRPFuquKD3NxwAAAOA"]
[Sat Aug 29 05:09:25.939567 2026] [proxy_http:error] [pid 1018003:tid 1018235] (70007)The timeout specified has expired: [client 127.0.0.1:26892] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:09:25.939594 2026] [proxy:error] [pid 1018003:tid 1018235] [client 127.0.0.1:26892] AH00898: Error reading from remote server returned by /shop/
[Sat Aug 29 05:09:25.942450 2026] [security2:error] [pid 1041789:tid 1041950] [client 20.48.250.41:45340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/to.php"] [unique_id "apK95Yv3RhPI65jTFG7faAAAAzE"]
[Sat Aug 29 05:09:25.947190 2026] [security2:error] [pid 1034096:tid 1034374] [client 158.23.147.79:11417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-content/index.php"] [unique_id "apK95S04twRPFuquKD3NzAAAAQA"]
[Sat Aug 29 05:09:25.948714 2026] [security2:error] [pid 1034096:tid 1034374] [client 158.23.184.117:7917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/wp-admin/add.php"] [unique_id "apK95S04twRPFuquKD3NzgAAAQA"]
[Sat Aug 29 05:09:25.959901 2026] [security2:error] [pid 1041789:tid 1041970] [client 158.23.184.117:19443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK95Yv3RhPI65jTFG7fawAAA0U"]
[Sat Aug 29 05:09:25.976923 2026] [security2:error] [pid 1041789:tid 1042054] [client 146.70.36.124:56010] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "johnsonsremodeling.jarrelljohnson.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "apK95Yv3RhPI65jTFG7fbAAAA5k"]
[Sat Aug 29 05:09:25.981563 2026] [security2:error] [pid 1034096:tid 1034324] [client 158.23.147.79:56984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/file17.php"] [unique_id "apK95S04twRPFuquKD3N0gAAAM4"]
[Sat Aug 29 05:09:26.016949 2026] [security2:error] [pid 1034096:tid 1034335] [client 20.48.250.41:50376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/fresh3.php"] [unique_id "apK95i04twRPFuquKD3N2QAAANk"]
[Sat Aug 29 05:09:26.035236 2026] [security2:error] [pid 1034096:tid 1034323] [client 20.104.49.130:47839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/ortasekerli1.php"] [unique_id "apK95i04twRPFuquKD3N3wAAAM0"]
[Sat Aug 29 05:09:26.048339 2026] [security2:error] [pid 1034096:tid 1034344] [client 74.248.24.12:5759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/about/function.php"] [unique_id "apK95i04twRPFuquKD3N4gAAAOI"]
[Sat Aug 29 05:09:26.052678 2026] [security2:error] [pid 1034096:tid 1034306] [client 20.48.250.41:61743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zenbijou.com"] [uri "/R57.php"] [unique_id "apK95i04twRPFuquKD3N4wAAALw"]
[Sat Aug 29 05:09:26.054768 2026] [security2:error] [pid 1034096:tid 1034371] [client 4.232.148.111:20453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/files.php"] [unique_id "apK95i04twRPFuquKD3N5AAAAP0"]
[Sat Aug 29 05:09:26.059329 2026] [security2:error] [pid 1034096:tid 1034294] [client 20.48.250.41:53433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/easy.php"] [unique_id "apK95i04twRPFuquKD3N5QAAALA"]
[Sat Aug 29 05:09:26.066085 2026] [security2:error] [pid 1034096:tid 1034265] [client 20.48.250.41:50022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/logs1.php"] [unique_id "apK95i04twRPFuquKD3N5gAAAJM"]
[Sat Aug 29 05:09:26.075131 2026] [security2:error] [pid 1034096:tid 1034286] [client 45.148.10.62:48428] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.xnk.wja.mybluehost.me"] [uri "/.env.old"] [unique_id "apK95i04twRPFuquKD3N6AAAAKg"]
[Sat Aug 29 05:09:26.075146 2026] [security2:error] [pid 1034096:tid 1034263] [client 158.23.147.79:55264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK95i04twRPFuquKD3N6gAAAJE"]
[Sat Aug 29 05:09:26.075167 2026] [security2:error] [pid 1034096:tid 1034373] [client 20.48.250.41:34293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/gettest.php"] [unique_id "apK95i04twRPFuquKD3N6QAAAP8"]
[Sat Aug 29 05:09:26.076806 2026] [security2:error] [pid 1034096:tid 1034284] [client 20.63.219.114:2642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/GOD.php"] [unique_id "apK95i04twRPFuquKD3N6wAAAKY"]
[Sat Aug 29 05:09:26.087635 2026] [security2:error] [pid 1041789:tid 1042004] [client 20.52.41.200:4373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/goods.php"] [unique_id "apK95ov3RhPI65jTFG7fbwAAA2c"]
[Sat Aug 29 05:09:26.088434 2026] [security2:error] [pid 1034096:tid 1034283] [client 20.48.250.41:19354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/xsox.php"] [unique_id "apK95i04twRPFuquKD3N7AAAAKU"]
[Sat Aug 29 05:09:26.095440 2026] [security2:error] [pid 1034096:tid 1034282] [client 158.23.184.117:7927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/wp-includes/assets/about.php"] [unique_id "apK95i04twRPFuquKD3N7QAAAKQ"]
[Sat Aug 29 05:09:26.098870 2026] [security2:error] [pid 1041789:tid 1042057] [client 4.205.62.107:63990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK95ov3RhPI65jTFG7fcAAAA5w"]
[Sat Aug 29 05:09:26.104929 2026] [security2:error] [pid 1034096:tid 1034262] [client 158.23.184.117:61642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/.well-known/acme-challenge/content.php"] [unique_id "apK95i04twRPFuquKD3N7gAAAJA"]
[Sat Aug 29 05:09:26.105159 2026] [security2:error] [pid 1034096:tid 1034368] [client 4.205.62.107:21929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/avim.php"] [unique_id "apK95i04twRPFuquKD3N8AAAAPo"]
[Sat Aug 29 05:09:26.105195 2026] [security2:error] [pid 1034096:tid 1034350] [client 40.83.93.50:17256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/hehe.php"] [unique_id "apK95i04twRPFuquKD3N7wAAAOg"]
[Sat Aug 29 05:09:26.116225 2026] [security2:error] [pid 1034096:tid 1034315] [client 20.48.250.41:45317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/thui.php"] [unique_id "apK95i04twRPFuquKD3N8QAAAMU"]
[Sat Aug 29 05:09:26.145957 2026] [security2:error] [pid 1041789:tid 1042041] [client 87.219.197.128:53249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK95ov3RhPI65jTFG7fcQAAA4w"]
[Sat Aug 29 05:09:26.146092 2026] [security2:error] [pid 1041789:tid 1042041] [client 87.219.197.128:53249] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK95ov3RhPI65jTFG7fcQAAA4w"]
[Sat Aug 29 05:09:26.187362 2026] [security2:error] [pid 1041789:tid 1041931] [client 138.199.19.178:47126] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "4paiges.com"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "apK95ov3RhPI65jTFG7fcgAAAx4"]
[Sat Aug 29 05:09:26.194288 2026] [security2:error] [pid 1034096:tid 1034365] [client 158.158.54.35:1827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "apK95i04twRPFuquKD3N8wAAAPc"]
[Sat Aug 29 05:09:26.197974 2026] [security2:error] [pid 1041789:tid 1041997] [client 20.48.250.41:50024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/inege.php"] [unique_id "apK95ov3RhPI65jTFG7fcwAAA2A"]
[Sat Aug 29 05:09:26.220948 2026] [security2:error] [pid 1034096:tid 1034274] [client 20.48.250.41:49516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/s1.php"] [unique_id "apK95i04twRPFuquKD3N9AAAAJw"]
[Sat Aug 29 05:09:26.223664 2026] [security2:error] [pid 1034096:tid 1034310] [client 20.48.250.41:53490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/fresh3.php"] [unique_id "apK95i04twRPFuquKD3N9gAAAMA"]
[Sat Aug 29 05:09:26.223691 2026] [security2:error] [pid 1034096:tid 1034332] [client 20.48.250.41:19405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/lkui.php"] [unique_id "apK95i04twRPFuquKD3N9QAAANY"]
[Sat Aug 29 05:09:26.240631 2026] [security2:error] [pid 1034096:tid 1034311] [client 20.63.219.114:17928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/wp-configs.php"] [unique_id "apK95i04twRPFuquKD3N-AAAAME"]
[Sat Aug 29 05:09:26.241030 2026] [security2:error] [pid 1041789:tid 1041960] [client 20.48.250.41:34248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/35.php"] [unique_id "apK95ov3RhPI65jTFG7fdAAAAzs"]
[Sat Aug 29 05:09:26.250938 2026] [security2:error] [pid 1034096:tid 1034342] [client 20.48.250.41:46023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/Jcrop.php"] [unique_id "apK95i04twRPFuquKD3N-gAAAOA"]
[Sat Aug 29 05:09:26.252856 2026] [security2:error] [pid 1041789:tid 1041998] [client 158.23.184.117:7935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/wp-content/themes/twentytwentythree.php"] [unique_id "apK95ov3RhPI65jTFG7fdQAAA2E"]
[Sat Aug 29 05:09:26.259892 2026] [security2:error] [pid 1034096:tid 1034372] [client 20.48.250.41:50426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/bgymj.php"] [unique_id "apK95i04twRPFuquKD3N_QAAAP4"]
[Sat Aug 29 05:09:26.288197 2026] [security2:error] [pid 1041789:tid 1042032] [client 146.70.36.124:56026] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "johnsonsremodeling.jarrelljohnson.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "apK95ov3RhPI65jTFG7fdwAAA4M"]
[Sat Aug 29 05:09:26.303385 2026] [security2:error] [pid 1034096:tid 1034329] [client 4.232.148.111:23185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/alfa.php"] [unique_id "apK95i04twRPFuquKD3OBAAAANM"]
[Sat Aug 29 05:09:26.334714 2026] [security2:error] [pid 1034096:tid 1034286] [client 20.48.250.41:49934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/wp-link10.php"] [unique_id "apK95i04twRPFuquKD3ODQAAAKg"]
[Sat Aug 29 05:09:26.337987 2026] [security2:error] [pid 1034096:tid 1034287] [client 20.197.61.180:9554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/dxc.php"] [unique_id "apK95i04twRPFuquKD3ODwAAAKk"]
[Sat Aug 29 05:09:26.348365 2026] [security2:error] [pid 1034096:tid 1034313] [client 20.100.175.163:16385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK95i04twRPFuquKD3OEwAAAMM"]
[Sat Aug 29 05:09:26.377802 2026] [security2:error] [pid 1041789:tid 1041944] [client 20.48.250.41:19433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "apK95ov3RhPI65jTFG7feQAAAys"]
[Sat Aug 29 05:09:26.385473 2026] [security2:error] [pid 1041789:tid 1041939] [client 20.48.250.41:53426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/bgymj.php"] [unique_id "apK95ov3RhPI65jTFG7fegAAAyY"]
[Sat Aug 29 05:09:26.386724 2026] [security2:error] [pid 1034096:tid 1034282] [client 45.148.10.62:48428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xnk.wja.mybluehost.me"] [uri "/.env.php.bak"] [unique_id "apK95i04twRPFuquKD3OFQAAAKQ"]
[Sat Aug 29 05:09:26.386725 2026] [security2:error] [pid 1041789:tid 1042012] [client 20.48.250.41:46030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/ws58.php"] [unique_id "apK95ov3RhPI65jTFG7fewAAA28"]
[Sat Aug 29 05:09:26.398329 2026] [security2:error] [pid 1034096:tid 1034262] [client 158.23.147.79:5972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-content/themes/index.php"] [unique_id "apK95i04twRPFuquKD3OFwAAAJA"]
[Sat Aug 29 05:09:26.402245 2026] [security2:error] [pid 1041789:tid 1042034] [client 20.197.61.180:14424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/menu.php"] [unique_id "apK95ov3RhPI65jTFG7ffQAAA4U"]
[Sat Aug 29 05:09:26.412394 2026] [security2:error] [pid 1034096:tid 1034350] [client 20.48.250.41:33913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/maraz.php"] [unique_id "apK95i04twRPFuquKD3OGQAAAOg"]
[Sat Aug 29 05:09:26.447778 2026] [security2:error] [pid 1034096:tid 1034271] [client 20.48.250.41:50330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/ws69.php"] [unique_id "apK95i04twRPFuquKD3OHQAAAJk"]
[Sat Aug 29 05:09:26.454147 2026] [security2:error] [pid 1034096:tid 1034277] [client 158.23.184.117:7905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/wp-content/languages/themes/num.php"] [unique_id "apK95i04twRPFuquKD3OHgAAAJ8"]
[Sat Aug 29 05:09:26.463616 2026] [security2:error] [pid 1034096:tid 1034276] [client 103.215.74.26:30644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.74.215.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.com"] [uri "/index.php"] [unique_id "apK95i04twRPFuquKD3OHwAAAJ4"], referer: http://kglogisticsinc.com/wp-admin/
[Sat Aug 29 05:09:26.473747 2026] [security2:error] [pid 1041789:tid 1042017] [client 20.48.250.41:30665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/ww.php"] [unique_id "apK95ov3RhPI65jTFG7ffgAAA3Q"]
[Sat Aug 29 05:09:26.483466 2026] [security2:error] [pid 1041789:tid 1041955] [client 20.104.49.130:48636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/js.php"] [unique_id "apK95ov3RhPI65jTFG7ffwAAAzY"]
[Sat Aug 29 05:09:26.499220 2026] [security2:error] [pid 1034096:tid 1034253] [client 158.23.184.117:61656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK95i04twRPFuquKD3OIAAAAIc"]
[Sat Aug 29 05:09:26.531515 2026] [security2:error] [pid 1034096:tid 1034283] [client 4.232.148.111:29621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/o.php"] [unique_id "apK95i04twRPFuquKD3OIQAAAKU"]
[Sat Aug 29 05:09:26.539411 2026] [security2:error] [pid 1041789:tid 1041936] [client 20.52.41.200:4580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/css.php"] [unique_id "apK95ov3RhPI65jTFG7fgQAAAyM"]
[Sat Aug 29 05:09:26.557622 2026] [security2:error] [pid 1034096:tid 1034311] [client 20.48.250.41:45360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/xs.php"] [unique_id "apK95i04twRPFuquKD3OJgAAAME"]
[Sat Aug 29 05:09:26.573553 2026] [security2:error] [pid 1041789:tid 1041938] [client 4.205.62.107:6972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/php-info.php"] [unique_id "apK95ov3RhPI65jTFG7fggAAAyU"]
[Sat Aug 29 05:09:26.579175 2026] [security2:error] [pid 1034096:tid 1034269] [client 40.83.93.50:48053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/wp-admin/class-db.php"] [unique_id "apK95i04twRPFuquKD3OKQAAAJc"]
[Sat Aug 29 05:09:26.582197 2026] [security2:error] [pid 1034096:tid 1034355] [client 20.48.250.41:50130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/ws69.php"] [unique_id "apK95i04twRPFuquKD3OKgAAAO0"]
[Sat Aug 29 05:09:26.588141 2026] [security2:error] [pid 1034096:tid 1034377] [client 20.48.250.41:49441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/0byte.php"] [unique_id "apK95i04twRPFuquKD3OLAAAAQM"]
[Sat Aug 29 05:09:26.592810 2026] [security2:error] [pid 1034096:tid 1034329] [client 146.70.36.124:56040] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "johnsonsremodeling.jarrelljohnson.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "apK95i04twRPFuquKD3OLQAAANM"]
[Sat Aug 29 05:09:26.598979 2026] [security2:error] [pid 1034096:tid 1034273] [client 20.48.250.41:49393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/motu.php"] [unique_id "apK95i04twRPFuquKD3OLgAAAJs"]
[Sat Aug 29 05:09:26.600243 2026] [security2:error] [pid 1034096:tid 1034318] [client 20.63.219.114:18972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/essexec.php"] [unique_id "apK95i04twRPFuquKD3OLwAAAMg"]
[Sat Aug 29 05:09:26.616790 2026] [security2:error] [pid 1034096:tid 1034344] [client 4.205.62.107:25982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/bigdump.php"] [unique_id "apK95i04twRPFuquKD3OMAAAAOI"]
[Sat Aug 29 05:09:26.625297 2026] [security2:error] [pid 1034096:tid 1034263] [client 20.48.250.41:49944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/w1px.php"] [unique_id "apK95i04twRPFuquKD3OMQAAAJE"]
[Sat Aug 29 05:09:26.629885 2026] [security2:error] [pid 1041789:tid 1042055] [client 158.158.54.35:11993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/gifclass.php"] [unique_id "apK95ov3RhPI65jTFG7fhAAAA5o"]
[Sat Aug 29 05:09:26.634379 2026] [security2:error] [pid 1034096:tid 1034373] [client 20.48.250.41:50423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/ccs.php"] [unique_id "apK95i04twRPFuquKD3OMgAAAP8"]
[Sat Aug 29 05:09:26.636626 2026] [security2:error] [pid 1034096:tid 1034365] [client 20.63.219.114:2454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/ggfi.php"] [unique_id "apK95i04twRPFuquKD3OMwAAAPc"]
[Sat Aug 29 05:09:26.646072 2026] [security2:error] [pid 1041789:tid 1042024] [client 158.23.184.117:61641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/.well-known/acme-challenge/sx.php"] [unique_id "apK95ov3RhPI65jTFG7fhgAAA3s"]
[Sat Aug 29 05:09:26.694475 2026] [security2:error] [pid 1034096:tid 1034316] [client 4.205.62.107:51461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/doc.php"] [unique_id "apK95i04twRPFuquKD3OPAAAAMY"]
[Sat Aug 29 05:09:26.704118 2026] [security2:error] [pid 1034096:tid 1034322] [client 20.48.250.41:45338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/zu.php"] [unique_id "apK95i04twRPFuquKD3OPQAAAMw"]
[Sat Aug 29 05:09:26.705251 2026] [ssl:error] [pid 1034096:tid 1034275] [client 3.233.59.216:32964] AH02032: Hostname host2038.hostmonster.com (default host as no SNI was provided) and hostname cpanel.needtheory.gmyer.com provided via HTTP have no compatible SSL setup for policy 'secure'
[Sat Aug 29 05:09:26.706134 2026] [security2:error] [pid 1034096:tid 1034306] [client 4.205.62.107:62936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/w.php"] [unique_id "apK95i04twRPFuquKD3OPwAAALw"]
[Sat Aug 29 05:09:26.706924 2026] [security2:error] [pid 1041789:tid 1041986] [client 158.23.184.117:7468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/wp.php"] [unique_id "apK95ov3RhPI65jTFG7fhwAAA1U"]
[Sat Aug 29 05:09:26.718751 2026] [security2:error] [pid 1041789:tid 1041987] [client 20.48.250.41:34254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/kbfr.php"] [unique_id "apK95ov3RhPI65jTFG7fiAAAA1Y"]
[Sat Aug 29 05:09:26.743987 2026] [security2:error] [pid 1034096:tid 1034253] [client 74.248.24.12:2735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-includes/admin.php"] [unique_id "apK95i04twRPFuquKD3OQQAAAIc"]
[Sat Aug 29 05:09:26.767880 2026] [security2:error] [pid 1034096:tid 1034321] [client 20.48.250.41:49927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/to.php"] [unique_id "apK95i04twRPFuquKD3ORwAAAMs"]
[Sat Aug 29 05:09:26.777918 2026] [security2:error] [pid 1034096:tid 1034294] [client 4.232.148.111:20887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/403.php"] [unique_id "apK95i04twRPFuquKD3OSAAAALA"]
[Sat Aug 29 05:09:26.787430 2026] [security2:error] [pid 1034096:tid 1034307] [client 20.48.250.41:53398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/ccs.php"] [unique_id "apK95i04twRPFuquKD3OTQAAAL0"]
[Sat Aug 29 05:09:26.789748 2026] [security2:error] [pid 1034096:tid 1034304] [client 158.23.184.117:19441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/.well-known/admin.php"] [unique_id "apK95i04twRPFuquKD3OTwAAALo"]
[Sat Aug 29 05:09:26.790504 2026] [security2:error] [pid 1034096:tid 1034372] [client 20.48.250.41:49331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/Ov-Simple1.php"] [unique_id "apK95i04twRPFuquKD3OUAAAAP4"]
[Sat Aug 29 05:09:26.793230 2026] [security2:error] [pid 1034096:tid 1034374] [client 158.23.147.79:17711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/wp-admin.php"] [unique_id "apK95i04twRPFuquKD3OUQAAAQA"]
[Sat Aug 29 05:09:26.794618 2026] [security2:error] [pid 1034096:tid 1034374] [client 158.23.147.79:49800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.samueljamesmcgrath.com"] [uri "/first.php"] [unique_id "apK95i04twRPFuquKD3OUgAAAQA"]
[Sat Aug 29 05:09:26.803785 2026] [security2:error] [pid 1034096:tid 1034267] [client 20.48.250.41:50382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/mar.php"] [unique_id "apK95i04twRPFuquKD3OUwAAAJU"]
[Sat Aug 29 05:09:26.808150 2026] [security2:error] [pid 1034096:tid 1034376] [client 4.205.62.107:3947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/fns.php"] [unique_id "apK95i04twRPFuquKD3OVAAAAQI"]
[Sat Aug 29 05:09:26.845281 2026] [security2:error] [pid 1034096:tid 1034339] [client 20.100.175.163:28731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annetteanddanny.strangeworx.com"] [uri "/wp-admin.php"] [unique_id "apK95i04twRPFuquKD3OVgAAAN0"]
[Sat Aug 29 05:09:26.853649 2026] [security2:error] [pid 1034096:tid 1034318] [client 20.48.250.41:45960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/lanka.php"] [unique_id "apK95i04twRPFuquKD3OWAAAAMg"]
[Sat Aug 29 05:09:26.858433 2026] [security2:error] [pid 1034096:tid 1034328] [client 138.199.19.178:47140] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "4paiges.com"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "apK95i04twRPFuquKD3OWQAAANI"]
[Sat Aug 29 05:09:26.869596 2026] [security2:error] [pid 1034096:tid 1034290] [client 158.23.147.79:5964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK95i04twRPFuquKD3OWgAAAKw"]
[Sat Aug 29 05:09:26.869928 2026] [security2:error] [pid 1034096:tid 1034323] [client 20.63.81.20:65279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/V2.php"] [unique_id "apK95i04twRPFuquKD3OWwAAAM0"]
[Sat Aug 29 05:09:26.871955 2026] [security2:error] [pid 1041789:tid 1042028] [client 158.23.184.117:7928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/xmlrpc.php"] [unique_id "apK95ov3RhPI65jTFG7figAAA38"]
[Sat Aug 29 05:09:26.885099 2026] [security2:error] [pid 1034096:tid 1034293] [client 4.205.62.107:53430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/konfig.php"] [unique_id "apK95i04twRPFuquKD3OYAAAAK8"]
[Sat Aug 29 05:09:26.890754 2026] [security2:error] [pid 1034096:tid 1034368] [client 20.48.250.41:65246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/xr.php"] [unique_id "apK95i04twRPFuquKD3OYwAAAPo"]
[Sat Aug 29 05:09:26.910489 2026] [security2:error] [pid 1034096:tid 1034270] [client 158.23.147.79:38727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK95i04twRPFuquKD3OZAAAAJg"]
[Sat Aug 29 05:09:26.931563 2026] [security2:error] [pid 1034096:tid 1034277] [client 20.63.81.20:55667] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK95i04twRPFuquKD3OZgAAAJ8"]
[Sat Aug 29 05:09:26.931678 2026] [security2:error] [pid 1034096:tid 1034271] [client 20.48.250.41:33859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/wp-act.php"] [unique_id "apK95i04twRPFuquKD3OZwAAAJk"]
[Sat Aug 29 05:09:26.932003 2026] [security2:error] [pid 1034096:tid 1034282] [client 158.23.184.117:19418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/.well-known/api.php"] [unique_id "apK95i04twRPFuquKD3OaAAAAKQ"]
[Sat Aug 29 05:09:26.940349 2026] [security2:error] [pid 1034096:tid 1034198] [remote 93.123.109.228:36026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/info.php"] [unique_id "apK95i04twRPFuquKD3OagAA_Ew"]
[Sat Aug 29 05:09:26.963522 2026] [security2:error] [pid 1034096:tid 1034185] [remote 93.123.109.228:36026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/infophp.php"] [unique_id "apK95i04twRPFuquKD3OawAA_D8"]
[Sat Aug 29 05:09:26.968488 2026] [security2:error] [pid 1034096:tid 1034265] [client 20.48.250.41:30657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/thui.php"] [unique_id "apK95i04twRPFuquKD3ObAAAAJM"]
[Sat Aug 29 05:09:26.975715 2026] [security2:error] [pid 1034096:tid 1034351] [client 20.48.250.41:50355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/ccu.php"] [unique_id "apK95i04twRPFuquKD3ObQAAAOk"]
[Sat Aug 29 05:09:26.977439 2026] [security2:error] [pid 1041789:tid 1042051] [client 20.48.250.41:19435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/wp-blogs.php"] [unique_id "apK95ov3RhPI65jTFG7fjQAAA5Y"]
[Sat Aug 29 05:09:26.982511 2026] [security2:error] [pid 1034096:tid 1034253] [client 20.63.81.20:46353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/wp-includes/interactivity-api/flower.php"] [unique_id "apK95i04twRPFuquKD3ObwAAAIc"]
[Sat Aug 29 05:09:26.983091 2026] [security2:error] [pid 1034096:tid 1034303] [client 20.48.250.41:53468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/mar.php"] [unique_id "apK95i04twRPFuquKD3OcAAAALk"]
[Sat Aug 29 05:09:26.984177 2026] [security2:error] [pid 1034096:tid 1034285] [client 20.48.250.41:45334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/gettest.php"] [unique_id "apK95i04twRPFuquKD3OcQAAAKc"]
[Sat Aug 29 05:09:26.999039 2026] [security2:error] [pid 1034096:tid 1034298] [client 45.148.10.62:48432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xnk.wja.mybluehost.me"] [uri "/.env.php"] [unique_id "apK95i04twRPFuquKD3OcgAAALQ"]
[Sat Aug 29 05:09:27.001694 2026] [security2:error] [pid 1034096:tid 1034251] [client 20.63.81.20:47309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/mad.php"] [unique_id "apK95y04twRPFuquKD3OcwAAAIU"]
[Sat Aug 29 05:09:27.002794 2026] [security2:error] [pid 1034096:tid 1034365] [client 20.63.219.114:15423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/alfa-rex.php"] [unique_id "apK95y04twRPFuquKD3OdAAAAPc"]
[Sat Aug 29 05:09:27.008821 2026] [security2:error] [pid 1034096:tid 1034329] [client 4.232.148.111:29617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/file2.php"] [unique_id "apK95y04twRPFuquKD3OdgAAANM"]
[Sat Aug 29 05:09:27.027231 2026] [security2:error] [pid 1034096:tid 1034255] [client 158.23.184.117:7433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/app.php"] [unique_id "apK95y04twRPFuquKD3OdwAAAIk"]
[Sat Aug 29 05:09:27.040939 2026] [security2:error] [pid 1034096:tid 1034150] [remote 93.123.109.228:36026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/infos.php"] [unique_id "apK95y04twRPFuquKD3OeAAAlRw"]
[Sat Aug 29 05:09:27.047404 2026] [security2:error] [pid 1034096:tid 1034300] [client 20.197.61.180:12745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/wp-2019.php"] [unique_id "apK95y04twRPFuquKD3OfAAAALY"]
[Sat Aug 29 05:09:27.065205 2026] [security2:error] [pid 1041789:tid 1042041] [client 20.48.250.41:33902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/24.php"] [unique_id "apK954v3RhPI65jTFG7flAAAA4w"]
[Sat Aug 29 05:09:27.075470 2026] [security2:error] [pid 1041789:tid 1041969] [client 158.23.184.117:19420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/.well-known/chosen.php"] [unique_id "apK954v3RhPI65jTFG7fmgAAA0Q"]
[Sat Aug 29 05:09:27.087188 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.63.219.114:18367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/hello.php"] [unique_id "apK954v3RhPI65jTFG7fnQAAA3o"]
[Sat Aug 29 05:09:27.090348 2026] [security2:error] [pid 1041789:tid 1042050] [client 20.63.81.20:55589] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/wsd.php"] [unique_id "apK954v3RhPI65jTFG7fnwAAA5U"]
[Sat Aug 29 05:09:27.104052 2026] [security2:error] [pid 1041789:tid 1041976] [client 158.23.147.79:60118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/file5.php"] [unique_id "apK954v3RhPI65jTFG7foAAAA0s"]
[Sat Aug 29 05:09:27.114906 2026] [security2:error] [pid 1034096:tid 1034318] [client 20.48.250.41:46054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/35.php"] [unique_id "apK95y04twRPFuquKD3OgAAAAMg"]
[Sat Aug 29 05:09:27.117552 2026] [security2:error] [pid 1041789:tid 1041943] [client 20.63.81.20:46454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/xcc.php"] [unique_id "apK954v3RhPI65jTFG7foQAAAyo"]
[Sat Aug 29 05:09:27.120914 2026] [security2:error] [pid 1041789:tid 1041931] [client 20.48.250.41:49327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/mini.php"] [unique_id "apK954v3RhPI65jTFG7fogAAAx4"]
[Sat Aug 29 05:09:27.123463 2026] [security2:error] [pid 1034096:tid 1034373] [client 20.48.250.41:30668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/Jcrop.php"] [unique_id "apK95y04twRPFuquKD3OgQAAAP8"]
[Sat Aug 29 05:09:27.123807 2026] [security2:error] [pid 1034096:tid 1034284] [client 20.197.61.180:9576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/alfa.php"] [unique_id "apK95y04twRPFuquKD3OggAAAKY"]
[Sat Aug 29 05:09:27.131304 2026] [security2:error] [pid 1034096:tid 1034308] [client 20.48.250.41:53423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/ccu.php"] [unique_id "apK95y04twRPFuquKD3OgwAAAL4"]
[Sat Aug 29 05:09:27.135970 2026] [security2:error] [pid 1041789:tid 1042005] [client 20.63.81.20:65214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/st.php"] [unique_id "apK954v3RhPI65jTFG7fpQAAA2g"]
[Sat Aug 29 05:09:27.151082 2026] [security2:error] [pid 1041789:tid 1041847] [remote 34.24.13.68:43614] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "www.mattburlick.com"] [uri "/static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ"] [unique_id "apK954v3RhPI65jTFG7fpgADdy0"]
[Sat Aug 29 05:09:27.159133 2026] [security2:error] [pid 1041789:tid 1041988] [client 20.48.250.41:50425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/ak.php"] [unique_id "apK954v3RhPI65jTFG7fqAAAA1c"]
[Sat Aug 29 05:09:27.160923 2026] [security2:error] [pid 1034096:tid 1034269] [client 20.104.49.130:63556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/one.php"] [unique_id "apK95y04twRPFuquKD3OhAAAAJc"]
[Sat Aug 29 05:09:27.166613 2026] [security2:error] [pid 1041789:tid 1041936] [client 20.48.250.41:65287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/h02ugyh.php"] [unique_id "apK954v3RhPI65jTFG7fqgAAAyM"]
[Sat Aug 29 05:09:27.174130 2026] [security2:error] [pid 1034096:tid 1034368] [client 158.23.184.117:7204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/aaa.php"] [unique_id "apK95y04twRPFuquKD3OhwAAAPo"]
[Sat Aug 29 05:09:27.203366 2026] [security2:error] [pid 1034096:tid 1034335] [client 20.48.250.41:33885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/155.php"] [unique_id "apK95y04twRPFuquKD3OiQAAANk"]
[Sat Aug 29 05:09:27.210950 2026] [security2:error] [pid 1041789:tid 1041966] [client 40.83.93.50:17222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/wp-contentt.php"] [unique_id "apK954v3RhPI65jTFG7frAAAA0E"]
[Sat Aug 29 05:09:27.211124 2026] [security2:error] [pid 1034096:tid 1034314] [client 158.158.54.35:11991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK95y04twRPFuquKD3OiwAAAMQ"]
[Sat Aug 29 05:09:27.218081 2026] [security2:error] [pid 1041789:tid 1042006] [client 20.63.81.20:55564] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/bulet.php"] [unique_id "apK954v3RhPI65jTFG7frQAAA2k"]
[Sat Aug 29 05:09:27.219815 2026] [security2:error] [pid 1034096:tid 1034301] [client 158.23.184.117:19413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/.well-known/config.php"] [unique_id "apK95y04twRPFuquKD3OjQAAALc"]
[Sat Aug 29 05:09:27.240223 2026] [security2:error] [pid 1034096:tid 1034319] [client 4.205.62.107:63967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/cloud.php"] [unique_id "apK95y04twRPFuquKD3OkgAAAMk"]
[Sat Aug 29 05:09:27.253415 2026] [security2:error] [pid 1041789:tid 1042024] [client 20.63.81.20:46338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/wp-includes/Text/Diff/Engine/aaa.php"] [unique_id "apK954v3RhPI65jTFG7frgAAA3s"]
[Sat Aug 29 05:09:27.255859 2026] [security2:error] [pid 1034096:tid 1034339] [client 4.232.148.111:1365] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mjmodeinc.com"] [uri "/1.php"] [unique_id "apK95y04twRPFuquKD3OmAAAAN0"]
[Sat Aug 29 05:09:27.255942 2026] [security2:error] [pid 1034096:tid 1034339] [client 4.232.148.111:1365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/1.php"] [unique_id "apK95y04twRPFuquKD3OmAAAAN0"]
[Sat Aug 29 05:09:27.265784 2026] [security2:error] [pid 1041789:tid 1042007] [client 35.221.212.112:55572] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "autodiscover.beraluzarchive.org"] [uri "/.openclaw/openclaw.json"] [unique_id "apK954v3RhPI65jTFG7fuAAAA2o"]
[Sat Aug 29 05:09:27.270286 2026] [security2:error] [pid 1034096:tid 1034282] [client 35.221.212.112:55686] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "autodiscover.beraluzarchive.org"] [uri "/sw.js"] [unique_id "apK95y04twRPFuquKD3OrAAAAKQ"]
[Sat Aug 29 05:09:27.270813 2026] [security2:error] [pid 1041789:tid 1041986] [client 158.23.147.79:11311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/about/function.php"] [unique_id "apK954v3RhPI65jTFG7fvgAAA1U"]
[Sat Aug 29 05:09:27.270910 2026] [security2:error] [pid 1041789:tid 1042034] [client 35.221.212.112:55690] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "autodiscover.beraluzarchive.org"] [uri "/health"] [unique_id "apK954v3RhPI65jTFG7fwAAAA4U"]
[Sat Aug 29 05:09:27.271144 2026] [security2:error] [pid 1034096:tid 1034270] [client 35.221.212.112:55504] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/.hermes/.env"] [unique_id "apK95y04twRPFuquKD3OowAAAJg"]
[Sat Aug 29 05:09:27.271441 2026] [security2:error] [pid 1041789:tid 1042033] [client 35.221.212.112:55528] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/.openclaw/.env"] [unique_id "apK954v3RhPI65jTFG7fvQAAA4Q"]
[Sat Aug 29 05:09:27.271658 2026] [security2:error] [pid 1041789:tid 1041975] [client 20.63.81.20:65179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/alfanew.php"] [unique_id "apK954v3RhPI65jTFG7fwQAAA0o"]
[Sat Aug 29 05:09:27.282215 2026] [security2:error] [pid 1034096:tid 1034374] [client 20.48.250.41:45371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/maraz.php"] [unique_id "apK95y04twRPFuquKD3OuAAAAQA"]
[Sat Aug 29 05:09:27.291499 2026] [security2:error] [pid 1034096:tid 1034373] [client 20.48.250.41:19440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/amp.php"] [unique_id "apK95y04twRPFuquKD3OwwAAAP8"]
[Sat Aug 29 05:09:27.292679 2026] [security2:error] [pid 1034096:tid 1034308] [client 4.205.62.107:22512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/nw.php"] [unique_id "apK95y04twRPFuquKD3OxQAAAL4"]
[Sat Aug 29 05:09:27.307900 2026] [security2:error] [pid 1034096:tid 1034269] [client 20.48.250.41:53436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/ak.php"] [unique_id "apK95y04twRPFuquKD3OywAAAJc"]
[Sat Aug 29 05:09:27.324445 2026] [security2:error] [pid 1041789:tid 1041853] [remote 34.24.13.68:45608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/web.config"] [unique_id "apK954v3RhPI65jTFG7f2gADkDM"]
[Sat Aug 29 05:09:27.328540 2026] [security2:error] [pid 1034096:tid 1034260] [client 20.52.41.200:5328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/w.php"] [unique_id "apK95y04twRPFuquKD3O0gAAAI4"]
[Sat Aug 29 05:09:27.328619 2026] [security2:error] [pid 1034096:tid 1034335] [client 20.48.250.41:30678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/ws58.php"] [unique_id "apK95y04twRPFuquKD3O0wAAANk"]
[Sat Aug 29 05:09:27.333880 2026] [security2:error] [pid 1034096:tid 1034370] [client 20.48.250.41:50400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/lib.php"] [unique_id "apK95y04twRPFuquKD3O1AAAAPw"]
[Sat Aug 29 05:09:27.335608 2026] [security2:error] [pid 1034096:tid 1034314] [client 20.48.250.41:34302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/file.php"] [unique_id "apK95y04twRPFuquKD3O1QAAAMQ"]
[Sat Aug 29 05:09:27.362423 2026] [security2:error] [pid 1041789:tid 1042035] [client 158.23.184.117:19431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/.well-known/core.php"] [unique_id "apK954v3RhPI65jTFG7f4AAAA4Y"]
[Sat Aug 29 05:09:27.378219 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.63.81.20:55650] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/av.php"] [unique_id "apK954v3RhPI65jTFG7f4QAAA2Q"]
[Sat Aug 29 05:09:27.385584 2026] [security2:error] [pid 1034096:tid 1034365] [client 20.63.81.20:46343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/wp-includes/style-engine/gecko-new.php"] [unique_id "apK95y04twRPFuquKD3O1wAAAPc"]
[Sat Aug 29 05:09:27.391828 2026] [security2:error] [pid 1041789:tid 1041956] [client 158.23.184.117:7447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/hehe.php"] [unique_id "apK954v3RhPI65jTFG7f5gAAAzc"]
[Sat Aug 29 05:09:27.396020 2026] [security2:error] [pid 1034096:tid 1034270] [client 20.104.49.130:57662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/js.php"] [unique_id "apK95y04twRPFuquKD3O2AAAAJg"]
[Sat Aug 29 05:09:27.414226 2026] [security2:error] [pid 1034096:tid 1034335] [client 20.48.250.41:45332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/kbfr.php"] [unique_id "apK95y04twRPFuquKD3O2gAAANk"]
[Sat Aug 29 05:09:27.416114 2026] [security2:error] [pid 1034096:tid 1034260] [client 103.215.74.26:62842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.74.215.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.com"] [uri "/index.php"] [unique_id "apK95y04twRPFuquKD3O2wAAAI4"], referer: http://kglogisticsinc.com/wp-admin/
[Sat Aug 29 05:09:27.418938 2026] [security2:error] [pid 1034096:tid 1034370] [client 74.248.24.12:37834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/lock360.php"] [unique_id "apK95y04twRPFuquKD3O3AAAAPw"]
[Sat Aug 29 05:09:27.421400 2026] [security2:error] [pid 1034096:tid 1034325] [client 20.63.219.114:2485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/cookie.php"] [unique_id "apK95y04twRPFuquKD3O3QAAAM8"]
[Sat Aug 29 05:09:27.426196 2026] [security2:error] [pid 1034096:tid 1034375] [client 197.219.150.206:52884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK95y04twRPFuquKD3O3gAAAQE"]
[Sat Aug 29 05:09:27.426298 2026] [security2:error] [pid 1034096:tid 1034375] [client 197.219.150.206:52884] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK95y04twRPFuquKD3O3gAAAQE"]
[Sat Aug 29 05:09:27.448111 2026] [security2:error] [pid 1034096:tid 1034351] [client 20.48.250.41:53435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/lib.php"] [unique_id "apK95y04twRPFuquKD3O4QAAAOk"]
[Sat Aug 29 05:09:27.455145 2026] [security2:error] [pid 1034096:tid 1034311] [client 127.0.0.1:46776] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK95y04twRPFuquKD3OsQAAAME"]
[Sat Aug 29 05:09:27.455261 2026] [security2:error] [pid 1034096:tid 1034252] [client 127.0.0.1:46618] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.beraluzarchive.org"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK95y04twRPFuquKD3OqAAAAIY"]
[Sat Aug 29 05:09:27.455366 2026] [security2:error] [pid 1041789:tid 1041960] [client 35.221.212.112:55450] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.beraluzarchive.org"] [uri "/v1/graphql"] [unique_id "apK954v3RhPI65jTFG7fsQAAAzs"]
[Sat Aug 29 05:09:27.455798 2026] [security2:error] [pid 1041789:tid 1042040] [client 20.63.219.114:18998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/fi2.php"] [unique_id "apK954v3RhPI65jTFG7f8gAAA4s"]
[Sat Aug 29 05:09:27.464107 2026] [security2:error] [pid 1041789:tid 1041984] [client 20.48.250.41:19385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/cc13.php"] [unique_id "apK954v3RhPI65jTFG7f9wAAA1M"]
[Sat Aug 29 05:09:27.481519 2026] [security2:error] [pid 1034096:tid 1034282] [client 20.48.250.41:49921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/xs.php"] [unique_id "apK95y04twRPFuquKD3O5gAAAKQ"]
[Sat Aug 29 05:09:27.484393 2026] [security2:error] [pid 1041789:tid 1042018] [client 4.232.148.111:31000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK954v3RhPI65jTFG7f-gAAA3U"]
[Sat Aug 29 05:09:27.503762 2026] [security2:error] [pid 1034096:tid 1034270] [client 158.23.147.79:6010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/about.php"] [unique_id "apK95y04twRPFuquKD3O6AAAAJg"]
[Sat Aug 29 05:09:27.506198 2026] [security2:error] [pid 1034096:tid 1034274] [client 158.23.184.117:61683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/.well-known/data.php"] [unique_id "apK95y04twRPFuquKD3O6QAAAJw"]
[Sat Aug 29 05:09:27.510308 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.48.250.41:34271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK954v3RhPI65jTFG7f_AAAA3o"]
[Sat Aug 29 05:09:27.512481 2026] [security2:error] [pid 1034096:tid 1034239] [remote 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK95y04twRPFuquKD3O7QAAuXU"]
[Sat Aug 29 05:09:27.512620 2026] [security2:error] [pid 1034096:tid 1034303] [client 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK95y04twRPFuquKD3O7QAAuXU"]
[Sat Aug 29 05:09:27.518717 2026] [security2:error] [pid 1041789:tid 1041999] [client 20.48.250.41:65306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/xxw.php"] [unique_id "apK954v3RhPI65jTFG7f_wAAA2I"]
[Sat Aug 29 05:09:27.530137 2026] [security2:error] [pid 1041789:tid 1042055] [client 138.199.19.178:47146] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "4paiges.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "apK954v3RhPI65jTFG7gBQAAA5o"]
[Sat Aug 29 05:09:27.531755 2026] [security2:error] [pid 1034096:tid 1034308] [client 20.48.250.41:50367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/wp-style.php"] [unique_id "apK95y04twRPFuquKD3O7gAAAL4"]
[Sat Aug 29 05:09:27.544612 2026] [security2:error] [pid 1034096:tid 1034251] [client 158.23.184.117:7475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/wp-includes/PHPMailer.php"] [unique_id "apK95y04twRPFuquKD3O8AAAAIU"]
[Sat Aug 29 05:09:27.546687 2026] [security2:error] [pid 1034096:tid 1034335] [client 20.48.250.41:45363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/wp-act.php"] [unique_id "apK95y04twRPFuquKD3O8QAAANk"]
[Sat Aug 29 05:09:27.591278 2026] [security2:error] [pid 1034096:tid 1034311] [client 57.141.14.64:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/page/22/"] [unique_id "apK95y04twRPFuquKD3O9QAAAME"]
[Sat Aug 29 05:09:27.599826 2026] [security2:error] [pid 1034096:tid 1034282] [client 20.48.250.41:49328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/aa.php"] [unique_id "apK95y04twRPFuquKD3O9wAAAKQ"]
[Sat Aug 29 05:09:27.602801 2026] [security2:error] [pid 1041789:tid 1042003] [client 20.48.250.41:53465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/wp-style.php"] [unique_id "apK954v3RhPI65jTFG7gDgAAA2Y"]
[Sat Aug 29 05:09:27.605674 2026] [security2:error] [pid 1041789:tid 1041894] [remote 34.24.13.68:45608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/app/.env"] [unique_id "apK954v3RhPI65jTFG7gDwADL1w"]
[Sat Aug 29 05:09:27.642714 2026] [security2:error] [pid 1041789:tid 1041991] [client 20.48.250.41:30694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/zu.php"] [unique_id "apK954v3RhPI65jTFG7gEQAAA1o"]
[Sat Aug 29 05:09:27.644510 2026] [security2:error] [pid 1041789:tid 1042007] [client 20.48.250.41:33892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/06.php"] [unique_id "apK954v3RhPI65jTFG7gEgAAA2o"]
[Sat Aug 29 05:09:27.646614 2026] [security2:error] [pid 1041789:tid 1041896] [remote 34.24.13.68:45608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/src/.env"] [unique_id "apK954v3RhPI65jTFG7gEwADSl4"]
[Sat Aug 29 05:09:27.650949 2026] [security2:error] [pid 1034096:tid 1034355] [client 158.158.54.35:36935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/css/index.php"] [unique_id "apK95y04twRPFuquKD3O_AAAAO0"]
[Sat Aug 29 05:09:27.652431 2026] [security2:error] [pid 1034096:tid 1034365] [client 158.23.184.117:19405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/.well-known/db-status.php"] [unique_id "apK95y04twRPFuquKD3O_QAAAPc"]
[Sat Aug 29 05:09:27.657153 2026] [security2:error] [pid 1041789:tid 1041893] [remote 34.24.13.68:45608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/server/.env"] [unique_id "apK954v3RhPI65jTFG7gFAADhFs"]
[Sat Aug 29 05:09:27.665701 2026] [security2:error] [pid 1041789:tid 1041897] [remote 34.24.13.68:45608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/frontend/.env"] [unique_id "apK954v3RhPI65jTFG7gFQADkF8"]
[Sat Aug 29 05:09:27.681452 2026] [security2:error] [pid 1041789:tid 1041928] [remote 34.24.13.68:45608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/docker/.env"] [unique_id "apK954v3RhPI65jTFG7gFwADMn4"]
[Sat Aug 29 05:09:27.681475 2026] [security2:error] [pid 1041789:tid 1041898] [remote 34.24.13.68:45608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/dev/.env"] [unique_id "apK954v3RhPI65jTFG7gFgADMmA"]
[Sat Aug 29 05:09:27.682923 2026] [security2:error] [pid 1041789:tid 1041899] [remote 34.24.13.68:45608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/production/.env"] [unique_id "apK954v3RhPI65jTFG7gGAADMmE"]
[Sat Aug 29 05:09:27.683770 2026] [security2:error] [pid 1034096:tid 1034269] [client 158.23.147.79:62770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/chosen.php"] [unique_id "apK95y04twRPFuquKD3O_wAAAJc"]
[Sat Aug 29 05:09:27.690996 2026] [security2:error] [pid 1041789:tid 1042042] [client 20.48.250.41:50386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/browse.php"] [unique_id "apK954v3RhPI65jTFG7gGgAAA40"]
[Sat Aug 29 05:09:27.694150 2026] [security2:error] [pid 1041789:tid 1041986] [client 158.23.184.117:7931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/wp-content/upgrade/alfanew.php7"] [unique_id "apK954v3RhPI65jTFG7gHAAAA1U"]
[Sat Aug 29 05:09:27.701323 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.104.49.130:47965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/fs.php"] [unique_id "apK954v3RhPI65jTFG7gIAAAA2Q"]
[Sat Aug 29 05:09:27.704207 2026] [security2:error] [pid 1041789:tid 1041956] [client 4.205.62.107:6894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/infos.php"] [unique_id "apK954v3RhPI65jTFG7gJAAAAzc"]
[Sat Aug 29 05:09:27.714536 2026] [security2:error] [pid 1034096:tid 1034309] [client 20.48.250.41:45331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/24.php"] [unique_id "apK95y04twRPFuquKD3PEwAAAL8"]
[Sat Aug 29 05:09:27.717750 2026] [security2:error] [pid 1034096:tid 1034287] [client 40.83.93.50:14523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/theme.php"] [unique_id "apK95y04twRPFuquKD3PGAAAAKk"]
[Sat Aug 29 05:09:27.722904 2026] [security2:error] [pid 1041789:tid 1041901] [remote 34.24.13.68:45608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/v1/.env"] [unique_id "apK954v3RhPI65jTFG7gKQADT2M"]
[Sat Aug 29 05:09:27.727733 2026] [security2:error] [pid 1041789:tid 1041903] [remote 34.24.13.68:45608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/staging/.env"] [unique_id "apK954v3RhPI65jTFG7gKgADT2U"]
[Sat Aug 29 05:09:27.727818 2026] [security2:error] [pid 1041789:tid 1041929] [remote 34.24.13.68:45608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/apps/.env"] [unique_id "apK954v3RhPI65jTFG7gKwADT38"]
[Sat Aug 29 05:09:27.735221 2026] [security2:error] [pid 1041789:tid 1041904] [remote 34.24.13.68:45608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/old/.env"] [unique_id "apK954v3RhPI65jTFG7gLAADVmY"]
[Sat Aug 29 05:09:27.752124 2026] [security2:error] [pid 1034096:tid 1034332] [client 4.205.62.107:24981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/wdf.php"] [unique_id "apK95y04twRPFuquKD3PIwAAANY"]
[Sat Aug 29 05:09:27.753041 2026] [security2:error] [pid 1041789:tid 1041905] [remote 34.24.13.68:45608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/v2/.env"] [unique_id "apK954v3RhPI65jTFG7gLQADZ2c"]
[Sat Aug 29 05:09:27.754332 2026] [security2:error] [pid 1041789:tid 1042050] [client 20.197.61.180:1903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/menu.php"] [unique_id "apK954v3RhPI65jTFG7gLgAAA5U"]
[Sat Aug 29 05:09:27.757909 2026] [security2:error] [pid 1041789:tid 1042041] [client 20.48.250.41:49388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/s1.php"] [unique_id "apK954v3RhPI65jTFG7gLwAAA4w"]
[Sat Aug 29 05:09:27.760249 2026] [security2:error] [pid 1034096:tid 1034247] [remote 93.123.109.228:36026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/php-info.php"] [unique_id "apK95y04twRPFuquKD3PJwAA4H0"]
[Sat Aug 29 05:09:27.761277 2026] [security2:error] [pid 1041789:tid 1041906] [remote 34.24.13.68:45608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/site/.env"] [unique_id "apK954v3RhPI65jTFG7gMAADi2g"]
[Sat Aug 29 05:09:27.762894 2026] [security2:error] [pid 1034096:tid 1034371] [client 127.0.0.1:46952] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK95y04twRPFuquKD3OvgAAAP0"]
[Sat Aug 29 05:09:27.762950 2026] [security2:error] [pid 1041789:tid 1041957] [client 127.0.0.1:46762] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.beraluzarchive.org"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK954v3RhPI65jTFG7fygAAAzg"]
[Sat Aug 29 05:09:27.763096 2026] [security2:error] [pid 1034096:tid 1034262] [client 35.221.212.112:55516] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.beraluzarchive.org"] [uri "/.cursor/mcp.json"] [unique_id "apK95y04twRPFuquKD3OoQAAAJA"]
[Sat Aug 29 05:09:27.764580 2026] [security2:error] [pid 1034096:tid 1034253] [client 103.185.242.143:55928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK95y04twRPFuquKD3PKAAAAIc"]
[Sat Aug 29 05:09:27.764659 2026] [security2:error] [pid 1034096:tid 1034253] [client 103.185.242.143:55928] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK95y04twRPFuquKD3PKAAAAIc"]
[Sat Aug 29 05:09:27.777675 2026] [security2:error] [pid 1041789:tid 1041907] [remote 34.24.13.68:45608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/portal/.env"] [unique_id "apK954v3RhPI65jTFG7gMwADWGk"]
[Sat Aug 29 05:09:27.778157 2026] [security2:error] [pid 1041789:tid 1042006] [client 20.52.41.200:5360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/ahax.php"] [unique_id "apK954v3RhPI65jTFG7gNAAAA2k"]
[Sat Aug 29 05:09:27.780848 2026] [security2:error] [pid 1041789:tid 1041979] [client 20.48.250.41:53404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/browse.php"] [unique_id "apK954v3RhPI65jTFG7gNQAAA04"]
[Sat Aug 29 05:09:27.784372 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.48.250.41:62162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/bolt.php"] [unique_id "apK954v3RhPI65jTFG7gNgAAA3o"]
[Sat Aug 29 05:09:27.786130 2026] [security2:error] [pid 1041789:tid 1041910] [remote 34.24.13.68:45608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/.docker/.env"] [unique_id "apK954v3RhPI65jTFG7gNwADRGw"]
[Sat Aug 29 05:09:27.787341 2026] [security2:error] [pid 1041789:tid 1041909] [remote 34.24.13.68:45608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/env.bak"] [unique_id "apK954v3RhPI65jTFG7gOAADRGs"]
[Sat Aug 29 05:09:27.793041 2026] [security2:error] [pid 1041789:tid 1041913] [remote 34.24.13.68:45608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/env.old"] [unique_id "apK954v3RhPI65jTFG7gOQADYm8"]
[Sat Aug 29 05:09:27.796444 2026] [security2:error] [pid 1041789:tid 1041998] [client 158.23.184.117:61639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/.well-known/f35.php"] [unique_id "apK954v3RhPI65jTFG7gOgAAA2E"]
[Sat Aug 29 05:09:27.804835 2026] [security2:error] [pid 1041789:tid 1042019] [client 20.48.250.41:34301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/class.php"] [unique_id "apK954v3RhPI65jTFG7gOwAAA3Y"]
[Sat Aug 29 05:09:27.816108 2026] [security2:error] [pid 1034096:tid 1034269] [client 20.63.219.114:10137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/NewFile.php"] [unique_id "apK95y04twRPFuquKD3PKQAAAJc"]
[Sat Aug 29 05:09:27.837171 2026] [security2:error] [pid 1034096:tid 1034306] [client 4.205.62.107:51410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/atex1.php"] [unique_id "apK95y04twRPFuquKD3PKgAAALw"]
[Sat Aug 29 05:09:27.841117 2026] [security2:error] [pid 1034096:tid 1034318] [client 4.205.62.107:60347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/btx25.php"] [unique_id "apK95y04twRPFuquKD3PKwAAAMg"]
[Sat Aug 29 05:09:27.845121 2026] [security2:error] [pid 1034096:tid 1034293] [client 20.197.61.180:9539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/feed-rss2-queue.php"] [unique_id "apK95y04twRPFuquKD3PLAAAAK8"]
[Sat Aug 29 05:09:27.852697 2026] [security2:error] [pid 1034096:tid 1034303] [client 158.23.184.117:7879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/admin/alfa-rex.php"] [unique_id "apK95y04twRPFuquKD3PLQAAALk"]
[Sat Aug 29 05:09:27.855639 2026] [security2:error] [pid 1034096:tid 1034283] [client 20.63.219.114:18524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/1p.php"] [unique_id "apK95y04twRPFuquKD3PLgAAAKU"]
[Sat Aug 29 05:09:27.857001 2026] [security2:error] [pid 1041789:tid 1041914] [remote 34.24.13.68:45608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/api/.env.bak"] [unique_id "apK954v3RhPI65jTFG7gPQADiHA"]
[Sat Aug 29 05:09:27.862046 2026] [security2:error] [pid 1041789:tid 1041946] [client 20.48.250.41:46032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/155.php"] [unique_id "apK954v3RhPI65jTFG7gPgAAAy0"]
[Sat Aug 29 05:09:27.865598 2026] [security2:error] [pid 1041789:tid 1041915] [remote 34.24.13.68:45608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/.env.production.bak"] [unique_id "apK954v3RhPI65jTFG7gPwADXnE"]
[Sat Aug 29 05:09:27.871394 2026] [security2:error] [pid 1034096:tid 1034127] [remote 93.123.109.228:36026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/php.php"] [unique_id "apK95y04twRPFuquKD3PLwAA4AU"]
[Sat Aug 29 05:09:27.880453 2026] [security2:error] [pid 1041789:tid 1041916] [remote 34.24.13.68:45608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/@fs/.env"] [unique_id "apK954v3RhPI65jTFG7gQgADNnI"]
[Sat Aug 29 05:09:27.881233 2026] [security2:error] [pid 1041789:tid 1041917] [remote 34.24.13.68:45608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/.env.prod.bak"] [unique_id "apK954v3RhPI65jTFG7gQAADNnM"]
[Sat Aug 29 05:09:27.887239 2026] [security2:error] [pid 1034096:tid 1034309] [client 20.48.250.41:49988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/lanka.php"] [unique_id "apK95y04twRPFuquKD3PMAAAAL8"]
[Sat Aug 29 05:09:27.894649 2026] [security2:error] [pid 1034096:tid 1034287] [client 4.232.148.111:19886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/s.php"] [unique_id "apK95y04twRPFuquKD3PNAAAAKk"]
[Sat Aug 29 05:09:27.894709 2026] [security2:error] [pid 1034096:tid 1034138] [remote 93.123.109.228:36026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/php_info.php"] [unique_id "apK95y04twRPFuquKD3PMwAA4BA"]
[Sat Aug 29 05:09:27.895013 2026] [security2:error] [pid 1034096:tid 1034148] [remote 93.123.109.228:36026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/phpinfo.php"] [unique_id "apK95y04twRPFuquKD3PNQAA4Bo"]
[Sat Aug 29 05:09:27.901499 2026] [security2:error] [pid 1034096:tid 1034286] [client 20.48.250.41:49359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/0byte.php"] [unique_id "apK95y04twRPFuquKD3PNwAAAKg"]
[Sat Aug 29 05:09:27.920268 2026] [security2:error] [pid 1041789:tid 1041918] [remote 34.24.13.68:45608] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/@fs/root/.env"] [unique_id "apK954v3RhPI65jTFG7gQwADR3Q"]
[Sat Aug 29 05:09:27.934412 2026] [security2:error] [pid 1041789:tid 1041942] [client 74.248.24.12:37728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-conflg.php"] [unique_id "apK954v3RhPI65jTFG7gRQAAAyk"]
[Sat Aug 29 05:09:27.938497 2026] [security2:error] [pid 1041789:tid 1042029] [client 158.23.184.117:19399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK954v3RhPI65jTFG7gRwAAA4A"]
[Sat Aug 29 05:09:27.942570 2026] [security2:error] [pid 1041789:tid 1041920] [remote 34.24.13.68:45608] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "www.mattburlick.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK954v3RhPI65jTFG7gSAADR3Y"]
[Sat Aug 29 05:09:27.946936 2026] [security2:error] [pid 1041789:tid 1041948] [client 4.205.62.107:3940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/params.php"] [unique_id "apK954v3RhPI65jTFG7gSQAAAy8"]
[Sat Aug 29 05:09:27.965684 2026] [security2:error] [pid 1034096:tid 1034370] [client 4.232.148.111:35304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/xda.php"] [unique_id "apK95y04twRPFuquKD3PQAAAAPw"]
[Sat Aug 29 05:09:27.975828 2026] [security2:error] [pid 1034096:tid 1034355] [client 158.23.147.79:17584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK95y04twRPFuquKD3PQwAAAO0"]
[Sat Aug 29 05:09:27.998463 2026] [security2:error] [pid 1034096:tid 1034371] [client 158.23.184.117:7211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/wp-content/export.php"] [unique_id "apK95y04twRPFuquKD3PRgAAAP0"]
[Sat Aug 29 05:09:28.064003 2026] [security2:error] [pid 1034096:tid 1034146] [remote 93.123.109.228:36026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/public/phpinfo.php"] [unique_id "apK96C04twRPFuquKD3PTQAA4Bg"]
[Sat Aug 29 05:09:28.077595 2026] [security2:error] [pid 1041789:tid 1042017] [client 103.48.146.148:62109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 148.146.48.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK96Iv3RhPI65jTFG7gSwAAA3Q"]
[Sat Aug 29 05:09:28.077696 2026] [security2:error] [pid 1041789:tid 1042017] [client 103.48.146.148:62109] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK96Iv3RhPI65jTFG7gSwAAA3Q"]
[Sat Aug 29 05:09:28.083735 2026] [security2:error] [pid 1041789:tid 1042033] [client 158.23.184.117:19397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/.well-known/home.php"] [unique_id "apK96Iv3RhPI65jTFG7gTAAAA4Q"]
[Sat Aug 29 05:09:28.087721 2026] [security2:error] [pid 1041789:tid 1041963] [client 4.205.62.107:8705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/nw.php"] [unique_id "apK96Iv3RhPI65jTFG7gTQAAAz4"]
[Sat Aug 29 05:09:28.092783 2026] [http2:warn] [pid 1017536:tid 1017714] [client 57.141.14.73:47554] h2_stream(1017536-369-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:09:28.104940 2026] [security2:error] [pid 1041789:tid 1041924] [remote 34.24.13.68:45610] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "www.mattburlick.com"] [uri "/_image"] [unique_id "apK96Iv3RhPI65jTFG7gUwADkHo"]
[Sat Aug 29 05:09:28.105916 2026] [security2:error] [pid 1041789:tid 1041926] [remote 34.24.13.68:45610] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:href. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "/../,ARGS:href"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/_image"] [unique_id "apK96Iv3RhPI65jTFG7gUgADkHw"]
[Sat Aug 29 05:09:28.128607 2026] [security2:error] [pid 1034096:tid 1034352] [client 158.158.54.35:31640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-cron.php"] [unique_id "apK96C04twRPFuquKD3PUQAAAOo"]
[Sat Aug 29 05:09:28.152423 2026] [security2:error] [pid 1041789:tid 1042028] [client 158.23.184.117:7911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/new.php"] [unique_id "apK96Iv3RhPI65jTFG7gVAAAA38"]
[Sat Aug 29 05:09:28.188285 2026] [security2:error] [pid 1041789:tid 1041975] [client 40.83.93.50:17221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/alumni_reg.php"] [unique_id "apK96Iv3RhPI65jTFG7gVQAAA0o"]
[Sat Aug 29 05:09:28.218840 2026] [security2:error] [pid 1041789:tid 1042035] [client 20.63.219.114:2092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/config.php"] [unique_id "apK96Iv3RhPI65jTFG7gVwAAA4Y"]
[Sat Aug 29 05:09:28.226995 2026] [security2:error] [pid 1041789:tid 1042038] [client 158.23.184.117:19440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/.well-known/index.php"] [unique_id "apK96Iv3RhPI65jTFG7gWAAAA4k"]
[Sat Aug 29 05:09:28.233132 2026] [security2:error] [pid 1041789:tid 1041950] [client 20.52.41.200:5304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/shell.php"] [unique_id "apK96Iv3RhPI65jTFG7gWQAAAzE"]
[Sat Aug 29 05:09:28.246580 2026] [security2:error] [pid 1041789:tid 1041970] [client 20.63.219.114:18348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/Njima.php"] [unique_id "apK96Iv3RhPI65jTFG7gWwAAA0U"]
[Sat Aug 29 05:09:28.250620 2026] [security2:error] [pid 1034096:tid 1034368] [client 158.23.147.79:28036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/file88.php"] [unique_id "apK96C04twRPFuquKD3PXQAAAPo"]
[Sat Aug 29 05:09:28.299024 2026] [security2:error] [pid 1034096:tid 1034315] [client 158.23.184.117:7445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/wp-content/plugins/revslider/admin.php"] [unique_id "apK96C04twRPFuquKD3PYwAAAMU"]
[Sat Aug 29 05:09:28.354139 2026] [security2:error] [pid 1041789:tid 1042027] [client 138.199.19.178:42218] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "4paiges.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "apK96Iv3RhPI65jTFG7gbgAAA34"]
[Sat Aug 29 05:09:28.371109 2026] [security2:error] [pid 1034096:tid 1034372] [client 158.23.184.117:19406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/.well-known/login.php"] [unique_id "apK96C04twRPFuquKD3PagAAAP4"]
[Sat Aug 29 05:09:28.372739 2026] [security2:error] [pid 1041789:tid 1041987] [client 4.232.148.111:11940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/test1.php"] [unique_id "apK96Iv3RhPI65jTFG7gcgAAA1Y"]
[Sat Aug 29 05:09:28.387818 2026] [security2:error] [pid 1034096:tid 1034262] [client 4.205.62.107:63917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/kerang.php"] [unique_id "apK96C04twRPFuquKD3PbgAAAJA"]
[Sat Aug 29 05:09:28.418422 2026] [security2:error] [pid 1041789:tid 1041942] [client 20.63.81.20:63645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/ioxi.php"] [unique_id "apK96Iv3RhPI65jTFG7ggAAAAyk"]
[Sat Aug 29 05:09:28.440830 2026] [security2:error] [pid 1041789:tid 1041961] [client 4.232.148.111:35776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/theme.php"] [unique_id "apK96Iv3RhPI65jTFG7gggAAAzw"]
[Sat Aug 29 05:09:28.442492 2026] [security2:error] [pid 1034096:tid 1034251] [client 45.148.10.62:48446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xnk.wja.mybluehost.me"] [uri "/wp-config.php"] [unique_id "apK96C04twRPFuquKD3PdgAAAIU"]
[Sat Aug 29 05:09:28.446220 2026] [security2:error] [pid 1034096:tid 1034339] [client 4.205.62.107:22502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/product.php"] [unique_id "apK96C04twRPFuquKD3PdwAAAN0"]
[Sat Aug 29 05:09:28.447916 2026] [security2:error] [pid 1034096:tid 1034350] [client 158.23.184.117:7884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/wp-content/images/uploads/admin.php"] [unique_id "apK96C04twRPFuquKD3PeAAAAOg"]
[Sat Aug 29 05:09:28.449348 2026] [security2:error] [pid 1034096:tid 1034310] [client 74.248.24.12:37857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/123.php"] [unique_id "apK96C04twRPFuquKD3PeQAAAMA"]
[Sat Aug 29 05:09:28.479011 2026] [security2:error] [pid 1041789:tid 1042041] [client 20.197.61.180:9594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/alfa.php"] [unique_id "apK96Iv3RhPI65jTFG7ghgAAA4w"]
[Sat Aug 29 05:09:28.515704 2026] [security2:error] [pid 1034096:tid 1034375] [client 158.23.184.117:19438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/.well-known/logs233/index.php"] [unique_id "apK96C04twRPFuquKD3PigAAAQE"]
[Sat Aug 29 05:09:28.522403 2026] [proxy_http:error] [pid 1017536:tid 1017617] (70007)The timeout specified has expired: [remote 57.141.14.14:64940] AH01102: error reading status line from remote server 127.0.0.1:8443
[Sat Aug 29 05:09:28.522428 2026] [proxy:error] [pid 1017536:tid 1017617] [remote 57.141.14.14:64940] AH00898: Error reading from remote server returned by /shop/
[Sat Aug 29 05:09:28.530124 2026] [proxy_http:error] [pid 1017536:tid 1017747] (70007)The timeout specified has expired: [client 127.0.0.1:27600] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:09:28.530151 2026] [proxy:error] [pid 1017536:tid 1017747] [client 127.0.0.1:27600] AH00898: Error reading from remote server returned by /shop/
[Sat Aug 29 05:09:28.531901 2026] [security2:error] [pid 1034096:tid 1034308] [client 20.63.81.20:46415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/wp-settings.php"] [unique_id "apK96C04twRPFuquKD3PjQAAAL4"]
[Sat Aug 29 05:09:28.551116 2026] [security2:error] [pid 1034096:tid 1034329] [client 20.63.81.20:63710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/TNT.php"] [unique_id "apK96C04twRPFuquKD3PkAAAANM"]
[Sat Aug 29 05:09:28.559528 2026] [security2:error] [pid 1034096:tid 1034312] [client 158.23.147.79:11286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK96C04twRPFuquKD3PlAAAAMI"]
[Sat Aug 29 05:09:28.564521 2026] [security2:error] [pid 1041789:tid 1041978] [client 20.197.61.180:2016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/inputs.php"] [unique_id "apK96Iv3RhPI65jTFG7gngAAA00"]
[Sat Aug 29 05:09:28.565867 2026] [security2:error] [pid 1034096:tid 1034311] [client 20.63.81.20:51314] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/images.php"] [unique_id "apK96C04twRPFuquKD3PlgAAAME"]
[Sat Aug 29 05:09:28.582477 2026] [security2:error] [pid 1034096:tid 1034306] [client 158.158.54.35:36985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-block.php"] [unique_id "apK96C04twRPFuquKD3PmQAAALw"]
[Sat Aug 29 05:09:28.598407 2026] [security2:error] [pid 1041789:tid 1042015] [client 158.23.184.117:7446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/tools.php"] [unique_id "apK96Iv3RhPI65jTFG7gpgAAA3I"]
[Sat Aug 29 05:09:28.599572 2026] [security2:error] [pid 1041789:tid 1042048] [client 20.63.219.114:10564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/configs.php"] [unique_id "apK96Iv3RhPI65jTFG7gpwAAA5M"]
[Sat Aug 29 05:09:28.633755 2026] [security2:error] [pid 1034096:tid 1034267] [client 47.128.99.8:38578] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "eqconsulting.site"] [uri "/robots.txt"] [unique_id "apK96C04twRPFuquKD3PogAAAJU"]
[Sat Aug 29 05:09:28.661650 2026] [security2:error] [pid 1041789:tid 1041947] [client 158.23.184.117:19432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/.well-known/maintenance.php"] [unique_id "apK96Iv3RhPI65jTFG7gsgAAAy4"]
[Sat Aug 29 05:09:28.664145 2026] [security2:error] [pid 1041789:tid 1041965] [client 20.63.81.20:46349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/wp-signup.php"] [unique_id "apK96Iv3RhPI65jTFG7gtQAAA0A"]
[Sat Aug 29 05:09:28.668563 2026] [security2:error] [pid 1034096:tid 1034300] [client 40.83.93.50:10098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/colors.php"] [unique_id "apK96C04twRPFuquKD3PqQAAALY"]
[Sat Aug 29 05:09:28.684136 2026] [security2:error] [pid 1034096:tid 1034286] [client 20.104.49.130:51082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/f35.update.php"] [unique_id "apK96C04twRPFuquKD3PqgAAAKg"]
[Sat Aug 29 05:09:28.685078 2026] [security2:error] [pid 1041789:tid 1042006] [client 20.63.81.20:65225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/cd.php"] [unique_id "apK96Iv3RhPI65jTFG7guQAAA2k"]
[Sat Aug 29 05:09:28.691270 2026] [security2:error] [pid 1034096:tid 1034344] [client 20.52.41.200:5284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/elp.php"] [unique_id "apK96C04twRPFuquKD3PrQAAAOI"]
[Sat Aug 29 05:09:28.700148 2026] [security2:error] [pid 1034096:tid 1034374] [client 20.63.81.20:55674] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/ops.php"] [unique_id "apK96C04twRPFuquKD3PrwAAAQA"]
[Sat Aug 29 05:09:28.747012 2026] [security2:error] [pid 1034096:tid 1034322] [client 158.23.184.117:7912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/wp-content/uploads/my.php"] [unique_id "apK96C04twRPFuquKD3PtAAAAMw"]
[Sat Aug 29 05:09:28.790057 2026] [security2:error] [pid 1034096:tid 1034301] [client 158.23.147.79:55286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/goods.php"] [unique_id "apK96C04twRPFuquKD3PuAAAALc"]
[Sat Aug 29 05:09:28.792547 2026] [security2:error] [pid 1041789:tid 1041957] [client 20.63.81.20:46442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/wp-conffg.php"] [unique_id "apK96Iv3RhPI65jTFG7gzAAAAzg"]
[Sat Aug 29 05:09:28.809007 2026] [security2:error] [pid 1034096:tid 1034375] [client 158.23.184.117:19395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/.well-known/min.php"] [unique_id "apK96C04twRPFuquKD3PuwAAAQE"]
[Sat Aug 29 05:09:28.819730 2026] [security2:error] [pid 1034096:tid 1034370] [client 20.63.81.20:65182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/luuf.php"] [unique_id "apK96C04twRPFuquKD3PvQAAAPw"]
[Sat Aug 29 05:09:28.840139 2026] [security2:error] [pid 1041789:tid 1041890] [remote 34.24.13.68:45626] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/backend/.env"] [unique_id "apK96Iv3RhPI65jTFG7g0gADKVg"]
[Sat Aug 29 05:09:28.843739 2026] [security2:error] [pid 1034096:tid 1034293] [client 4.205.62.107:6858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/env.php"] [unique_id "apK96C04twRPFuquKD3PvwAAAK8"]
[Sat Aug 29 05:09:28.847555 2026] [security2:error] [pid 1041789:tid 1041979] [client 4.232.148.111:23230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/ws.php"] [unique_id "apK96Iv3RhPI65jTFG7g1AAAA04"]
[Sat Aug 29 05:09:28.852393 2026] [security2:error] [pid 1034096:tid 1034252] [client 20.63.81.20:55626] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/coffexium.php"] [unique_id "apK96C04twRPFuquKD3PwQAAAIY"]
[Sat Aug 29 05:09:28.890241 2026] [security2:error] [pid 1034096:tid 1034371] [client 4.205.62.107:25947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/bb.php"] [unique_id "apK96C04twRPFuquKD3PxgAAAP0"]
[Sat Aug 29 05:09:28.908554 2026] [security2:error] [pid 1034096:tid 1034316] [client 4.232.148.111:17948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/classwithtostring.php"] [unique_id "apK96C04twRPFuquKD3PyQAAAMY"]
[Sat Aug 29 05:09:28.922093 2026] [security2:error] [pid 1041789:tid 1041968] [client 20.63.219.114:10535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/22.php"] [unique_id "apK96Iv3RhPI65jTFG7g3QAAA0M"]
[Sat Aug 29 05:09:28.927710 2026] [security2:error] [pid 1041789:tid 1041948] [client 20.63.81.20:46342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/wp-validate.php"] [unique_id "apK96Iv3RhPI65jTFG7g3wAAAy8"]
[Sat Aug 29 05:09:28.935225 2026] [security2:error] [pid 1034096:tid 1034276] [client 158.23.184.117:7460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/wp-includes/themes/uploads/config.php"] [unique_id "apK96C04twRPFuquKD3PzAAAAJ4"]
[Sat Aug 29 05:09:28.957951 2026] [security2:error] [pid 1041789:tid 1041961] [client 158.23.184.117:19447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/.well-known/module.php"] [unique_id "apK96Iv3RhPI65jTFG7g5gAAAzw"]
[Sat Aug 29 05:09:28.957979 2026] [security2:error] [pid 1041789:tid 1041906] [remote 93.123.109.228:39166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/.env.php"] [unique_id "apK96Iv3RhPI65jTFG7g5QADmWg"]
[Sat Aug 29 05:09:28.962790 2026] [security2:error] [pid 1034096:tid 1034277] [client 20.63.81.20:63739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/fex.php"] [unique_id "apK96C04twRPFuquKD3P0AAAAJ8"]
[Sat Aug 29 05:09:28.965069 2026] [security2:error] [pid 1041789:tid 1042050] [client 74.248.24.12:29814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/yanz.php"] [unique_id "apK96Iv3RhPI65jTFG7g6AAAA5U"]
[Sat Aug 29 05:09:28.967108 2026] [security2:error] [pid 1034096:tid 1034275] [client 4.205.62.107:58373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/product.php"] [unique_id "apK96C04twRPFuquKD3P0QAAAJ0"]
[Sat Aug 29 05:09:28.970047 2026] [security2:error] [pid 1034096:tid 1034323] [client 45.148.10.62:48452] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "mail.xnk.wja.mybluehost.me"] [uri "/wp-config.php.old"] [unique_id "apK96C04twRPFuquKD3P0gAAAM0"]
[Sat Aug 29 05:09:28.979586 2026] [security2:error] [pid 1034096:tid 1034269] [client 4.205.62.107:60306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/app_dev.php"] [unique_id "apK96C04twRPFuquKD3P1QAAAJc"]
[Sat Aug 29 05:09:28.983640 2026] [security2:error] [pid 1034096:tid 1034365] [client 20.63.219.114:17965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/disagraeed.php"] [unique_id "apK96C04twRPFuquKD3P1gAAAPc"]
[Sat Aug 29 05:09:29.005277 2026] [security2:error] [pid 1034096:tid 1034373] [client 20.63.81.20:51283] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/BDKR28WP.php"] [unique_id "apK96S04twRPFuquKD3P2QAAAP8"]
[Sat Aug 29 05:09:29.017829 2026] [security2:error] [pid 1034096:tid 1034284] [client 158.158.54.35:11968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-includes/fonts/admin.php"] [unique_id "apK96S04twRPFuquKD3P3AAAAKY"]
[Sat Aug 29 05:09:29.041955 2026] [security2:error] [pid 1041789:tid 1041950] [client 138.199.19.178:42228] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "4paiges.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "apK96Yv3RhPI65jTFG7g8wAAAzE"]
[Sat Aug 29 05:09:29.054764 2026] [security2:error] [pid 1034096:tid 1034335] [client 158.23.147.79:38725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK96S04twRPFuquKD3P4AAAANk"]
[Sat Aug 29 05:09:29.060047 2026] [security2:error] [pid 1034096:tid 1034376] [client 20.63.81.20:46406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/700.php"] [unique_id "apK96S04twRPFuquKD3P4QAAAQI"]
[Sat Aug 29 05:09:29.077737 2026] [security2:error] [pid 1041789:tid 1041990] [client 169.58.197.254:61936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 254.197.58.169.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.kcactf4.org"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "apK96Yv3RhPI65jTFG7g-gAAA1k"], referer: www.google.com
[Sat Aug 29 05:09:29.084290 2026] [security2:error] [pid 1034096:tid 1034251] [client 4.205.62.107:53255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/gjm.php"] [unique_id "apK96S04twRPFuquKD3P4wAAAIU"]
[Sat Aug 29 05:09:29.084410 2026] [security2:error] [pid 1034096:tid 1034274] [client 158.23.184.117:7429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/av.php"] [unique_id "apK96S04twRPFuquKD3P4gAAAJw"]
[Sat Aug 29 05:09:29.087729 2026] [security2:error] [pid 1041789:tid 1041998] [client 213.202.253.4:65264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "timportlock.net"] [uri "/wp-content/txets.php"] [unique_id "apK96Yv3RhPI65jTFG7g_AAAA2E"], referer: www.google.com
[Sat Aug 29 05:09:29.102849 2026] [security2:error] [pid 1034096:tid 1034369] [client 158.23.184.117:19437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/.well-known/options.php"] [unique_id "apK96S04twRPFuquKD3P5QAAAPs"]
[Sat Aug 29 05:09:29.110627 2026] [security2:error] [pid 1034096:tid 1034310] [client 20.63.81.20:63713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/l.php"] [unique_id "apK96S04twRPFuquKD3P5wAAAMA"]
[Sat Aug 29 05:09:29.140254 2026] [security2:error] [pid 1034096:tid 1034262] [client 40.83.93.50:17241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/Js.php"] [unique_id "apK96S04twRPFuquKD3P7AAAAJA"]
[Sat Aug 29 05:09:29.147836 2026] [security2:error] [pid 1034096:tid 1034286] [client 20.52.41.200:5257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-content/cong.php"] [unique_id "apK96S04twRPFuquKD3P7QAAAKg"]
[Sat Aug 29 05:09:29.148726 2026] [security2:error] [pid 1041789:tid 1042043] [client 20.63.81.20:55552] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/sf.php"] [unique_id "apK96Yv3RhPI65jTFG7hCAAAA44"]
[Sat Aug 29 05:09:29.162913 2026] [security2:error] [pid 1034096:tid 1034311] [client 104.199.2.114:54910] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "67.20.76.220"] [uri "/"] [unique_id "apK96S04twRPFuquKD3P7wAAAME"]
[Sat Aug 29 05:09:29.188793 2026] [security2:error] [pid 1034096:tid 1034325] [client 20.63.81.20:46413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/c4.php"] [unique_id "apK96S04twRPFuquKD3P9AAAAM8"]
[Sat Aug 29 05:09:29.210748 2026] [security2:error] [pid 1034096:tid 1034294] [client 20.197.61.180:1044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/feed-rss2-queue.php"] [unique_id "apK96S04twRPFuquKD3P-AAAALA"]
[Sat Aug 29 05:09:29.220737 2026] [security2:error] [pid 1041789:tid 1041827] [remote 34.24.13.68:45626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.13.24.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mattburlick.com"] [uri "/info.php"] [unique_id "apK96Yv3RhPI65jTFG7hEwADfxk"]
[Sat Aug 29 05:09:29.220909 2026] [security2:error] [pid 1041789:tid 1041818] [remote 34.24.13.68:45626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.13.24.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mattburlick.com"] [uri "/phpinfo.php"] [unique_id "apK96Yv3RhPI65jTFG7hFAADfxA"]
[Sat Aug 29 05:09:29.239487 2026] [security2:error] [pid 1041789:tid 1041830] [remote 34.24.13.68:45626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.13.24.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mattburlick.com"] [uri "/i.php"] [unique_id "apK96Yv3RhPI65jTFG7hFgADfBw"]
[Sat Aug 29 05:09:29.247394 2026] [security2:error] [pid 1041789:tid 1042047] [client 20.63.81.20:65189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/xr.php"] [unique_id "apK96Yv3RhPI65jTFG7hGgAAA5I"]
[Sat Aug 29 05:09:29.247416 2026] [security2:error] [pid 1034096:tid 1034375] [client 158.23.184.117:61644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/.well-known/panel.php"] [unique_id "apK96S04twRPFuquKD3P_gAAAQE"]
[Sat Aug 29 05:09:29.253287 2026] [security2:error] [pid 1041789:tid 1041925] [remote 34.24.13.68:45626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.13.24.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mattburlick.com"] [uri "/test.php"] [unique_id "apK96Yv3RhPI65jTFG7hHAADd3s"]
[Sat Aug 29 05:09:29.258066 2026] [security2:error] [pid 1041789:tid 1041834] [remote 34.24.13.68:45626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.13.24.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mattburlick.com"] [uri "/pi.php"] [unique_id "apK96Yv3RhPI65jTFG7hHgADUCA"]
[Sat Aug 29 05:09:29.279627 2026] [security2:error] [pid 1041789:tid 1041975] [client 20.63.81.20:51267] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/k.php"] [unique_id "apK96Yv3RhPI65jTFG7hHwAAA0o"]
[Sat Aug 29 05:09:29.282509 2026] [security2:error] [pid 1034096:tid 1034355] [client 158.23.184.117:7173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/wp-includes/ID3/file.php"] [unique_id "apK96S04twRPFuquKD3QAAAAAO0"]
[Sat Aug 29 05:09:29.288651 2026] [security2:error] [pid 1041789:tid 1041835] [remote 34.24.13.68:45626] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/config/.env"] [unique_id "apK96Yv3RhPI65jTFG7hIQADLiE"]
[Sat Aug 29 05:09:29.294423 2026] [security2:error] [pid 1041789:tid 1041836] [remote 34.24.13.68:45626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.13.24.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mattburlick.com"] [uri "/app_dev.php"] [unique_id "apK96Yv3RhPI65jTFG7hIwADNyI"]
[Sat Aug 29 05:09:29.303617 2026] [security2:error] [pid 1034096:tid 1034374] [client 20.197.61.180:9540] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.superprotection.com"] [uri "/1.php7"] [unique_id "apK96S04twRPFuquKD3QBAAAAQA"]
[Sat Aug 29 05:09:29.303744 2026] [security2:error] [pid 1034096:tid 1034374] [client 20.197.61.180:9540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/1.php7"] [unique_id "apK96S04twRPFuquKD3QBAAAAQA"]
[Sat Aug 29 05:09:29.315695 2026] [security2:error] [pid 1034096:tid 1034267] [client 4.205.62.107:8706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/myfile.php"] [unique_id "apK96S04twRPFuquKD3QCgAAAJU"]
[Sat Aug 29 05:09:29.319252 2026] [security2:error] [pid 1034096:tid 1034371] [client 20.63.81.20:46336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/wp-tymanage.php"] [unique_id "apK96S04twRPFuquKD3QCwAAAP0"]
[Sat Aug 29 05:09:29.319297 2026] [security2:error] [pid 1041789:tid 1041855] [remote 34.24.13.68:45626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.13.24.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mattburlick.com"] [uri "/app_dev.php/_profiler"] [unique_id "apK96Yv3RhPI65jTFG7hKAADhTU"]
[Sat Aug 29 05:09:29.321482 2026] [security2:error] [pid 1041789:tid 1042037] [client 4.232.148.111:1029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-themes.php"] [unique_id "apK96Yv3RhPI65jTFG7hKgAAA4g"]
[Sat Aug 29 05:09:29.322406 2026] [security2:error] [pid 1034096:tid 1034296] [client 20.63.219.114:2447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/bak.phps"] [unique_id "apK96S04twRPFuquKD3QDQAAALI"]
[Sat Aug 29 05:09:29.348930 2026] [security2:error] [pid 1034096:tid 1034271] [client 20.63.219.114:1330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/add_actualites.php"] [unique_id "apK96S04twRPFuquKD3QEQAAAJk"]
[Sat Aug 29 05:09:29.378425 2026] [security2:error] [pid 1041789:tid 1042046] [client 158.23.147.79:56969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/NewFile.php/"] [unique_id "apK96Yv3RhPI65jTFG7hMgAAA5E"]
[Sat Aug 29 05:09:29.383956 2026] [security2:error] [pid 1041789:tid 1041976] [client 20.63.81.20:65197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/Q3.php"] [unique_id "apK96Yv3RhPI65jTFG7hMwAAA0s"]
[Sat Aug 29 05:09:29.393661 2026] [security2:error] [pid 1034096:tid 1034276] [client 158.23.184.117:61647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/.well-known/pki-validation/mariju.php"] [unique_id "apK96S04twRPFuquKD3QFgAAAJ4"]
[Sat Aug 29 05:09:29.393663 2026] [security2:error] [pid 1041789:tid 1042001] [client 4.232.148.111:29628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/news.php"] [unique_id "apK96Yv3RhPI65jTFG7hNgAAA2Q"]
[Sat Aug 29 05:09:29.415094 2026] [security2:error] [pid 1034096:tid 1034269] [client 20.63.81.20:55576] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/82.php"] [unique_id "apK96S04twRPFuquKD3QGgAAAJc"]
[Sat Aug 29 05:09:29.431369 2026] [security2:error] [pid 1041789:tid 1041969] [client 158.23.184.117:7172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "site2.beymer.net"] [uri "/wp-admin/css/fff.php"] [unique_id "apK96Yv3RhPI65jTFG7hPwAAA0Q"]
[Sat Aug 29 05:09:29.456996 2026] [security2:error] [pid 1034096:tid 1034376] [client 20.63.81.20:46419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/ajfto.php"] [unique_id "apK96S04twRPFuquKD3QIAAAAQI"]
[Sat Aug 29 05:09:29.464584 2026] [security2:error] [pid 1041789:tid 1042038] [client 158.158.54.35:13052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/m.php"] [unique_id "apK96Yv3RhPI65jTFG7hRgAAA4k"]
[Sat Aug 29 05:09:29.474312 2026] [security2:error] [pid 1041789:tid 1041837] [remote 34.24.13.68:45626] ModSecurity: Access denied with code 406 (phase 2). Match of "ipMatch 127.0.0.1,::1" against "REMOTE_ADDR" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "724"] [id "340114"] [rev "2"] [msg "Atomicorp.com WAF Rules: Apache admin service access attempt"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/server-info"] [unique_id "apK96Yv3RhPI65jTFG7hRwADfiM"]
[Sat Aug 29 05:09:29.476593 2026] [access_compat:error] [pid 1041789:tid 1041845] [remote 34.24.13.68:45626] AH01797: client denied by server configuration: /home4/mattburl/public_html/server-status
[Sat Aug 29 05:09:29.483322 2026] [security2:error] [pid 1041789:tid 1042024] [client 74.248.24.12:37876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/autoload_classmap.php"] [unique_id "apK96Yv3RhPI65jTFG7hSQAAA3s"]
[Sat Aug 29 05:09:29.521704 2026] [security2:error] [pid 1041789:tid 1041955] [client 4.205.62.107:63994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/rem.php"] [unique_id "apK96Yv3RhPI65jTFG7hUAAAAzY"]
[Sat Aug 29 05:09:29.545210 2026] [security2:error] [pid 1041789:tid 1041949] [client 158.23.184.117:19421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/.well-known/pki-validation/pl.php"] [unique_id "apK96Yv3RhPI65jTFG7hVQAAAzA"]
[Sat Aug 29 05:09:29.574476 2026] [security2:error] [pid 1041789:tid 1041964] [client 20.104.104.62:45988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK96Yv3RhPI65jTFG7hWwAAAz8"]
[Sat Aug 29 05:09:29.576649 2026] [authz_core:error] [pid 1041789:tid 1041870] [remote 34.24.13.68:45626] AH01630: client denied by server configuration: /home4/mattburl/public_html/.htpasswd
[Sat Aug 29 05:09:29.577738 2026] [security2:error] [pid 1034096:tid 1034312] [client 20.104.49.130:46581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/t.php"] [unique_id "apK96S04twRPFuquKD3QLAAAAMI"]
[Sat Aug 29 05:09:29.589174 2026] [security2:error] [pid 1034096:tid 1034367] [client 4.205.62.107:21598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/fun.php"] [unique_id "apK96S04twRPFuquKD3QMAAAAPk"]
[Sat Aug 29 05:09:29.595430 2026] [security2:error] [pid 1041789:tid 1042000] [client 20.52.41.200:5353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK96Yv3RhPI65jTFG7hYQAAA2M"]
[Sat Aug 29 05:09:29.631671 2026] [security2:error] [pid 1041789:tid 1041887] [remote 34.24.13.68:45626] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/.github/.env"] [unique_id "apK96Yv3RhPI65jTFG7hYwADR1U"]
[Sat Aug 29 05:09:29.632347 2026] [security2:error] [pid 1034096:tid 1034282] [client 158.23.147.79:5997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK96S04twRPFuquKD3QMwAAAKQ"]
[Sat Aug 29 05:09:29.661406 2026] [security2:error] [pid 1034096:tid 1034231] [remote 93.123.109.228:36026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/test.php"] [unique_id "apK96S04twRPFuquKD3QOAAA4G0"]
[Sat Aug 29 05:09:29.679549 2026] [security2:error] [pid 1034096:tid 1034369] [client 45.148.10.62:48460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xnk.wja.mybluehost.me"] [uri "/config.php"] [unique_id "apK96S04twRPFuquKD3QOQAAAPs"]
[Sat Aug 29 05:09:29.683158 2026] [security2:error] [pid 1034096:tid 1034263] [client 20.63.219.114:15391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/install.php"] [unique_id "apK96S04twRPFuquKD3QOgAAAJE"]
[Sat Aug 29 05:09:29.691037 2026] [security2:error] [pid 1034096:tid 1034311] [client 158.23.184.117:19417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/.well-known/pki-validation/x.php"] [unique_id "apK96S04twRPFuquKD3QOwAAAME"]
[Sat Aug 29 05:09:29.694478 2026] [security2:error] [pid 1041789:tid 1041898] [remote 34.24.13.68:45626] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/.ssh/id_dsa"] [unique_id "apK96Yv3RhPI65jTFG7hbwADK2A"]
[Sat Aug 29 05:09:29.718123 2026] [security2:error] [pid 1041789:tid 1041962] [client 20.104.104.62:45990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK96Yv3RhPI65jTFG7hdwAAAz0"]
[Sat Aug 29 05:09:29.724128 2026] [security2:error] [pid 1041789:tid 1042009] [client 138.199.19.178:42242] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "4paiges.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "apK96Yv3RhPI65jTFG7hfAAAA2w"]
[Sat Aug 29 05:09:29.756491 2026] [security2:error] [pid 1041789:tid 1041928] [remote 34.24.13.68:45626] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/key.pem"] [unique_id "apK96Yv3RhPI65jTFG7hfwADj34"]
[Sat Aug 29 05:09:29.759476 2026] [security2:error] [pid 1034096:tid 1034355] [client 20.104.49.130:30214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/btyuio.php"] [unique_id "apK96S04twRPFuquKD3QQgAAAO0"]
[Sat Aug 29 05:09:29.766701 2026] [security2:error] [pid 1041789:tid 1042041] [client 20.63.219.114:10454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/alfanew.php7"] [unique_id "apK96Yv3RhPI65jTFG7hgwAAA4w"]
[Sat Aug 29 05:09:29.794970 2026] [security2:error] [pid 1041789:tid 1041841] [remote 34.24.13.68:45626] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/privatekey.key"] [unique_id "apK96Yv3RhPI65jTFG7hhQADkyc"]
[Sat Aug 29 05:09:29.798615 2026] [security2:error] [pid 1034096:tid 1034285] [client 4.232.148.111:23194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-trackback.php"] [unique_id "apK96S04twRPFuquKD3QRwAAAKc"]
[Sat Aug 29 05:09:29.801274 2026] [security2:error] [pid 1034096:tid 1034286] [client 40.83.93.50:17242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/access.php"] [unique_id "apK96S04twRPFuquKD3QSAAAAKg"]
[Sat Aug 29 05:09:29.836987 2026] [security2:error] [pid 1034096:tid 1034252] [client 158.23.184.117:19408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/.well-known/pki-validation/xmrlpc.php"] [unique_id "apK96S04twRPFuquKD3QTwAAAIY"]
[Sat Aug 29 05:09:29.858083 2026] [security2:error] [pid 1034096:tid 1034317] [client 20.104.104.62:22719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/baee.php"] [unique_id "apK96S04twRPFuquKD3QVAAAAMc"]
[Sat Aug 29 05:09:29.872240 2026] [security2:error] [pid 1041789:tid 1042052] [client 4.232.148.111:25236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/about/function.php"] [unique_id "apK96Yv3RhPI65jTFG7hlAAAA5c"]
[Sat Aug 29 05:09:29.883042 2026] [security2:error] [pid 1041789:tid 1041920] [remote 34.24.13.68:45626] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/id_rsa"] [unique_id "apK96Yv3RhPI65jTFG7hlwADd3Y"]
[Sat Aug 29 05:09:29.915413 2026] [security2:error] [pid 1041789:tid 1042037] [client 158.23.147.79:53957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK96Yv3RhPI65jTFG7hnAAAA4g"]
[Sat Aug 29 05:09:29.927153 2026] [security2:error] [pid 1041789:tid 1041900] [remote 34.24.13.68:45626] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/.ssh/id_rsa"] [unique_id "apK96Yv3RhPI65jTFG7hngADaWI"]
[Sat Aug 29 05:09:29.943139 2026] [security2:error] [pid 1034096:tid 1034321] [client 20.197.61.180:2031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/inputs.php"] [unique_id "apK96S04twRPFuquKD3QWgAAAMs"]
[Sat Aug 29 05:09:29.945513 2026] [security2:error] [pid 1041789:tid 1041817] [remote 34.24.13.68:45626] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/id_dsa"] [unique_id "apK96Yv3RhPI65jTFG7hpwADSw8"]
[Sat Aug 29 05:09:29.957416 2026] [security2:error] [pid 1041789:tid 1041810] [remote 93.123.109.228:39166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/.wp-config.php.swp"] [unique_id "apK96Yv3RhPI65jTFG7hrQADfAg"]
[Sat Aug 29 05:09:29.967521 2026] [security2:error] [pid 1041789:tid 1041824] [remote 34.24.13.68:45626] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/media../.env"] [unique_id "apK96Yv3RhPI65jTFG7hrwADXhY"]
[Sat Aug 29 05:09:29.985826 2026] [security2:error] [pid 1041789:tid 1041986] [client 20.104.104.62:41615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/d12.php"] [unique_id "apK96Yv3RhPI65jTFG7hswAAA1U"]
[Sat Aug 29 05:09:29.987884 2026] [security2:error] [pid 1041789:tid 1041935] [client 158.23.184.117:61643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/.well-known/security.php"] [unique_id "apK96Yv3RhPI65jTFG7htQAAAyI"]
[Sat Aug 29 05:09:29.991569 2026] [security2:error] [pid 1034096:tid 1034313] [client 158.158.54.35:34676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "apK96S04twRPFuquKD3QWwAAAMM"]
[Sat Aug 29 05:09:29.993400 2026] [security2:error] [pid 1041789:tid 1042043] [client 74.248.24.12:19482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/bi.php"] [unique_id "apK96Yv3RhPI65jTFG7htwAAA44"]
[Sat Aug 29 05:09:30.027177 2026] [security2:error] [pid 1041789:tid 1041949] [client 4.205.62.107:25939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/file59.php"] [unique_id "apK96ov3RhPI65jTFG7hvgAAAzA"]
[Sat Aug 29 05:09:30.033404 2026] [security2:error] [pid 1041789:tid 1041964] [client 4.205.62.107:6885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/xve22.php"] [unique_id "apK96ov3RhPI65jTFG7hxAAAAz8"]
[Sat Aug 29 05:09:30.035860 2026] [security2:error] [pid 1034096:tid 1034271] [client 159.69.158.189:20060] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.goldenage-wtic.org"] [uri "/index.html"] [unique_id "apK96i04twRPFuquKD3QXAAAAJk"], referer: https://www.goldenage-wtic.org/
[Sat Aug 29 05:09:30.044070 2026] [security2:error] [pid 1041789:tid 1042015] [client 20.197.61.180:9596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/ds.php"] [unique_id "apK96ov3RhPI65jTFG7hxwAAA3I"]
[Sat Aug 29 05:09:30.046266 2026] [security2:error] [pid 1034096:tid 1034275] [client 20.52.41.200:4365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-mail.php"] [unique_id "apK96i04twRPFuquKD3QXQAAAJ0"]
[Sat Aug 29 05:09:30.051321 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.63.219.114:15405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/colour.php"] [unique_id "apK96ov3RhPI65jTFG7hyQAAA3o"]
[Sat Aug 29 05:09:30.057599 2026] [security2:error] [pid 1034096:tid 1034322] [client 103.240.76.112:43527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK96i04twRPFuquKD3QXgAAAMw"]
[Sat Aug 29 05:09:30.057740 2026] [security2:error] [pid 1034096:tid 1034322] [client 103.240.76.112:43527] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK96i04twRPFuquKD3QXgAAAMw"]
[Sat Aug 29 05:09:30.082911 2026] [security2:error] [pid 1041789:tid 1041836] [remote 34.24.13.68:45626] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/files../.env"] [unique_id "apK96ov3RhPI65jTFG7hzAADNSI"]
[Sat Aug 29 05:09:30.083431 2026] [security2:error] [pid 1041789:tid 1041848] [remote 34.24.13.68:45626] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/@fs/app/.env"] [unique_id "apK96ov3RhPI65jTFG7hzQADNS4"]
[Sat Aug 29 05:09:30.085568 2026] [security2:error] [pid 1041789:tid 1041945] [client 158.23.184.117:38279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/wk/admin.php"] [unique_id "apK96ov3RhPI65jTFG7hzgAAAyw"]
[Sat Aug 29 05:09:30.102603 2026] [security2:error] [pid 1041789:tid 1041829] [remote 34.24.13.68:45626] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/.env"] [unique_id "apK96ov3RhPI65jTFG7h0AADYBs"]
[Sat Aug 29 05:09:30.102762 2026] [security2:error] [pid 1041789:tid 1041847] [remote 34.24.13.68:45626] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/static/.env"] [unique_id "apK96ov3RhPI65jTFG7h0QADYC0"]
[Sat Aug 29 05:09:30.108051 2026] [security2:error] [pid 1041789:tid 1042054] [client 4.205.62.107:51492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/public/wp-blog.php"] [unique_id "apK96ov3RhPI65jTFG7h0gAAA5k"]
[Sat Aug 29 05:09:30.122396 2026] [security2:error] [pid 1041789:tid 1042011] [client 20.104.104.62:41601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/yyy.php"] [unique_id "apK96ov3RhPI65jTFG7h1QAAA24"]
[Sat Aug 29 05:09:30.122616 2026] [security2:error] [pid 1041789:tid 1041991] [client 4.205.62.107:62731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/php-info.php"] [unique_id "apK96ov3RhPI65jTFG7h1AAAA1o"]
[Sat Aug 29 05:09:30.135197 2026] [security2:error] [pid 1041789:tid 1042000] [client 158.23.184.117:61652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/.well-known/system.php"] [unique_id "apK96ov3RhPI65jTFG7h1wAAA2M"]
[Sat Aug 29 05:09:30.140895 2026] [security2:error] [pid 1041789:tid 1041819] [remote 34.24.13.68:45626] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/@fs/src/.env"] [unique_id "apK96ov3RhPI65jTFG7h2QADKBE"]
[Sat Aug 29 05:09:30.144248 2026] [security2:error] [pid 1041789:tid 1041962] [client 158.23.147.79:17537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/lock.php"] [unique_id "apK96ov3RhPI65jTFG7h2gAAAz0"]
[Sat Aug 29 05:09:30.160837 2026] [security2:error] [pid 1041789:tid 1041854] [remote 34.24.13.68:45626] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/assets../.env"] [unique_id "apK96ov3RhPI65jTFG7h3gADIzQ"]
[Sat Aug 29 05:09:30.161979 2026] [core:error] [pid 1041789:tid 1041861] [remote 34.24.13.68:45626] AH10244: invalid URI path (/%2e%2e/.env)
[Sat Aug 29 05:09:30.165629 2026] [security2:error] [pid 1041789:tid 1041998] [client 158.23.147.79:38763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/chosen.php"] [unique_id "apK96ov3RhPI65jTFG7h4QAAA2E"]
[Sat Aug 29 05:09:30.167860 2026] [security2:error] [pid 1041789:tid 1041856] [remote 34.24.13.68:45626] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/.env"] [unique_id "apK96ov3RhPI65jTFG7h4gADMjY"]
[Sat Aug 29 05:09:30.177255 2026] [security2:error] [pid 1041789:tid 1042027] [client 20.63.219.114:18968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/xmlrpc.php0"] [unique_id "apK96ov3RhPI65jTFG7h1gAAA34"]
[Sat Aug 29 05:09:30.206069 2026] [security2:error] [pid 1041789:tid 1041859] [remote 34.24.13.68:45626] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/static/home/user/.env"] [unique_id "apK96ov3RhPI65jTFG7h6gADLjk"]
[Sat Aug 29 05:09:30.206298 2026] [security2:error] [pid 1041789:tid 1041858] [remote 34.24.13.68:45626] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/static/app/.env"] [unique_id "apK96ov3RhPI65jTFG7h7AADLjg"]
[Sat Aug 29 05:09:30.221480 2026] [security2:error] [pid 1041789:tid 1041995] [client 4.205.62.107:56043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/configuration.php"] [unique_id "apK96ov3RhPI65jTFG7h7gAAA14"]
[Sat Aug 29 05:09:30.226692 2026] [security2:error] [pid 1041789:tid 1041844] [remote 34.24.13.68:45626] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2froot/.env"] [unique_id "apK96ov3RhPI65jTFG7h7wADiyo"]
[Sat Aug 29 05:09:30.236692 2026] [security2:error] [pid 1041789:tid 1041857] [remote 34.24.13.68:45626] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/images../.env"] [unique_id "apK96ov3RhPI65jTFG7h8gADIjc"]
[Sat Aug 29 05:09:30.244429 2026] [security2:error] [pid 1041789:tid 1041839] [remote 34.24.13.68:45626] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/uploads../.env"] [unique_id "apK96ov3RhPI65jTFG7h8wADHiU"]
[Sat Aug 29 05:09:30.247454 2026] [security2:error] [pid 1041789:tid 1042028] [client 158.23.184.117:53731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/admin.php"] [unique_id "apK96ov3RhPI65jTFG7h9AAAA38"]
[Sat Aug 29 05:09:30.257682 2026] [security2:error] [pid 1041789:tid 1041837] [remote 34.24.13.68:45626] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/.env"] [unique_id "apK96ov3RhPI65jTFG7h9QADRCM"]
[Sat Aug 29 05:09:30.262587 2026] [security2:error] [pid 1041789:tid 1041933] [client 20.104.104.62:22662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/bgymj.php"] [unique_id "apK96ov3RhPI65jTFG7h9gAAAyA"]
[Sat Aug 29 05:09:30.266400 2026] [security2:error] [pid 1041789:tid 1041845] [remote 34.24.13.68:45626] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/.env"] [unique_id "apK96ov3RhPI65jTFG7h9wADISs"]
[Sat Aug 29 05:09:30.271842 2026] [security2:error] [pid 1041789:tid 1042050] [client 40.83.93.50:10050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/classsmtps.php"] [unique_id "apK96ov3RhPI65jTFG7h-gAAA5U"]
[Sat Aug 29 05:09:30.274202 2026] [security2:error] [pid 1041789:tid 1041867] [remote 34.24.13.68:45626] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/img../.env"] [unique_id "apK96ov3RhPI65jTFG7h-wADVkE"]
[Sat Aug 29 05:09:30.282051 2026] [security2:error] [pid 1041789:tid 1042053] [client 158.23.184.117:61632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/.well-known/users.php"] [unique_id "apK96ov3RhPI65jTFG7h_AAAA5g"]
[Sat Aug 29 05:09:30.296651 2026] [security2:error] [pid 1041789:tid 1041873] [remote 34.24.13.68:45626] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "www.mattburlick.com"] [uri "/@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ"] [unique_id "apK96ov3RhPI65jTFG7iAAADZ0c"]
[Sat Aug 29 05:09:30.325267 2026] [security2:error] [pid 1041789:tid 1041943] [client 45.148.10.62:48474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xnk.wja.mybluehost.me"] [uri "/config.php.bak"] [unique_id "apK96ov3RhPI65jTFG7iAgAAAyo"]
[Sat Aug 29 05:09:30.359673 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.104.49.130:57534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/kgoc6awap3napxxxdCdefault.php"] [unique_id "apK96ov3RhPI65jTFG7iDAAAA3o"]
[Sat Aug 29 05:09:30.371411 2026] [security2:error] [pid 1041789:tid 1041942] [client 158.23.147.79:11411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-admin/index.php"] [unique_id "apK96ov3RhPI65jTFG7iDwAAAyk"]
[Sat Aug 29 05:09:30.392081 2026] [security2:error] [pid 1041789:tid 1041980] [client 138.199.19.178:42252] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "4paiges.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "apK96ov3RhPI65jTFG7iFgAAA08"]
[Sat Aug 29 05:09:30.404667 2026] [security2:error] [pid 1041789:tid 1042003] [client 20.104.104.62:22715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/fh26.php"] [unique_id "apK96ov3RhPI65jTFG7iGAAAA2Y"]
[Sat Aug 29 05:09:30.408304 2026] [security2:error] [pid 1041789:tid 1042057] [client 20.63.219.114:2093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/OK.php"] [unique_id "apK96ov3RhPI65jTFG7iGQAAA5w"]
[Sat Aug 29 05:09:30.411168 2026] [security2:error] [pid 1041789:tid 1041939] [client 158.23.184.117:53750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/goods.php"] [unique_id "apK96ov3RhPI65jTFG7iGgAAAyY"]
[Sat Aug 29 05:09:30.427328 2026] [security2:error] [pid 1041789:tid 1041979] [client 158.23.184.117:19423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/.well-known/wp-blog-header.php"] [unique_id "apK96ov3RhPI65jTFG7iHQAAA04"]
[Sat Aug 29 05:09:30.428397 2026] [security2:error] [pid 1041789:tid 1041988] [client 4.232.148.111:27522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/222.php"] [unique_id "apK96ov3RhPI65jTFG7iHgAAA1c"]
[Sat Aug 29 05:09:30.463742 2026] [security2:error] [pid 1041789:tid 1041891] [remote 34.24.13.68:45640] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/api/.env/public/.env"] [unique_id "apK96ov3RhPI65jTFG7iJAADhVk"]
[Sat Aug 29 05:09:30.472179 2026] [security2:error] [pid 1041789:tid 1041967] [client 158.158.54.35:29704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/222.php"] [unique_id "apK96ov3RhPI65jTFG7iJgAAA0I"]
[Sat Aug 29 05:09:30.477421 2026] [security2:error] [pid 1041789:tid 1041932] [client 158.23.147.79:57017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/dropdown.php"] [unique_id "apK96ov3RhPI65jTFG7iJwAAAx8"]
[Sat Aug 29 05:09:30.478372 2026] [security2:error] [pid 1041789:tid 1041899] [remote 34.24.13.68:45640] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "www.mattburlick.com"] [uri "/public/plugins/alertlist/../../../../../../../../proc/self/environ"] [unique_id "apK96ov3RhPI65jTFG7iKQADbmE"]
[Sat Aug 29 05:09:30.478767 2026] [security2:error] [pid 1041789:tid 1041885] [remote 34.24.13.68:45640] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/@fs/proc/self/cwd/.env"] [unique_id "apK96ov3RhPI65jTFG7iKAADblM"]
[Sat Aug 29 05:09:30.480000 2026] [security2:error] [pid 1041789:tid 1041929] [remote 34.24.13.68:45640] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/static../.env"] [unique_id "apK96ov3RhPI65jTFG7iKwADbn8"]
[Sat Aug 29 05:09:30.494093 2026] [security2:error] [pid 1041789:tid 1042049] [client 4.232.148.111:35600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-includes/admin.php"] [unique_id "apK96ov3RhPI65jTFG7iNAAAA5Q"]
[Sat Aug 29 05:09:30.499676 2026] [security2:error] [pid 1041789:tid 1042015] [client 20.52.41.200:5309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-content.php"] [unique_id "apK96ov3RhPI65jTFG7iNwAAA3I"]
[Sat Aug 29 05:09:30.538831 2026] [security2:error] [pid 1041789:tid 1041990] [client 20.104.104.62:41659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/fgd.php"] [unique_id "apK96ov3RhPI65jTFG7iPAAAA1k"]
[Sat Aug 29 05:09:30.539883 2026] [security2:error] [pid 1041789:tid 1041957] [client 74.248.24.12:5726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/cc.php"] [unique_id "apK96ov3RhPI65jTFG7iPQAAAzg"]
[Sat Aug 29 05:09:30.555341 2026] [security2:error] [pid 1041789:tid 1042000] [client 158.23.184.117:38311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/w.php"] [unique_id "apK96ov3RhPI65jTFG7iQQAAA2M"]
[Sat Aug 29 05:09:30.573375 2026] [security2:error] [pid 1041789:tid 1042051] [client 158.23.184.117:19039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/.well-known/wp-links-opml.php"] [unique_id "apK96ov3RhPI65jTFG7iRwAAA5Y"]
[Sat Aug 29 05:09:30.585316 2026] [security2:error] [pid 1041789:tid 1042019] [client 20.104.49.130:43052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/abc.php"] [unique_id "apK96ov3RhPI65jTFG7iSQAAA3Y"]
[Sat Aug 29 05:09:30.594812 2026] [security2:error] [pid 1041789:tid 1042055] [client 20.63.219.114:10457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/content.php"] [unique_id "apK96ov3RhPI65jTFG7iSwAAA5o"]
[Sat Aug 29 05:09:30.600004 2026] [security2:error] [pid 1041789:tid 1041977] [client 4.205.62.107:9154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/thui.php"] [unique_id "apK96ov3RhPI65jTFG7iTAAAA0w"]
[Sat Aug 29 05:09:30.618127 2026] [security2:error] [pid 1041789:tid 1041920] [remote 93.123.109.228:39166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK96ov3RhPI65jTFG7iTgADeHY"]
[Sat Aug 29 05:09:30.636867 2026] [security2:error] [pid 1041789:tid 1041900] [remote 34.24.13.68:45650] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "www.mattburlick.com"] [uri "/api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ"] [unique_id "apK96ov3RhPI65jTFG7iVgADjGI"]
[Sat Aug 29 05:09:30.637772 2026] [security2:error] [pid 1041789:tid 1041808] [remote 34.24.13.68:45650] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/@fs/var/task/.env"] [unique_id "apK96ov3RhPI65jTFG7iVQADjAY"]
[Sat Aug 29 05:09:30.667286 2026] [security2:error] [pid 1041789:tid 1041933] [client 4.205.62.107:63922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/min.php"] [unique_id "apK96ov3RhPI65jTFG7iXAAAAyA"]
[Sat Aug 29 05:09:30.680613 2026] [security2:error] [pid 1041789:tid 1041961] [client 20.104.104.62:22670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/inject.php"] [unique_id "apK96ov3RhPI65jTFG7iYAAAAzw"]
[Sat Aug 29 05:09:30.700992 2026] [security2:error] [pid 1041789:tid 1041969] [client 158.23.184.117:64518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/new.php"] [unique_id "apK96ov3RhPI65jTFG7iYwAAA0Q"]
[Sat Aug 29 05:09:30.715401 2026] [security2:error] [pid 1041789:tid 1041934] [client 158.23.184.117:19435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/.well-known/wp-load.php"] [unique_id "apK96ov3RhPI65jTFG7iagAAAyE"]
[Sat Aug 29 05:09:30.719269 2026] [security2:error] [pid 1041789:tid 1041956] [client 20.197.61.180:18198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/class-walker-category-dropdown-class.php"] [unique_id "apK96ov3RhPI65jTFG7ibAAAAzc"]
[Sat Aug 29 05:09:30.733756 2026] [security2:error] [pid 1041789:tid 1041816] [remote 93.123.109.228:39264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/wp-config.php"] [unique_id "apK96ov3RhPI65jTFG7ibwADaA4"]
[Sat Aug 29 05:09:30.734558 2026] [security2:error] [pid 1041789:tid 1041827] [remote 93.123.109.228:39264] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.gkuhns.info"] [uri "/wp-config.php.bak"] [unique_id "apK96ov3RhPI65jTFG7icAADaBk"]
[Sat Aug 29 05:09:30.736730 2026] [security2:error] [pid 1041789:tid 1042038] [client 4.205.62.107:21868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/kedi.php"] [unique_id "apK96ov3RhPI65jTFG7icQAAA4k"]
[Sat Aug 29 05:09:30.740296 2026] [security2:error] [pid 1041789:tid 1041963] [client 158.23.147.79:6091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/themes.php"] [unique_id "apK96ov3RhPI65jTFG7icwAAAz4"]
[Sat Aug 29 05:09:30.743455 2026] [security2:error] [pid 1041789:tid 1041894] [remote 93.123.109.228:39264] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.gkuhns.info"] [uri "/wp-config.php.new"] [unique_id "apK96ov3RhPI65jTFG7idAADaFw"]
[Sat Aug 29 05:09:30.744797 2026] [security2:error] [pid 1041789:tid 1042025] [client 20.197.61.180:18197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/GOD.php"] [unique_id "apK96ov3RhPI65jTFG7idQAAA3w"]
[Sat Aug 29 05:09:30.754673 2026] [security2:error] [pid 1041789:tid 1042027] [client 40.83.93.50:17230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/contentloader1.php"] [unique_id "apK96ov3RhPI65jTFG7idgAAA34"]
[Sat Aug 29 05:09:30.763799 2026] [security2:error] [pid 1041789:tid 1042046] [client 158.23.184.117:7231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/update/da222.php"] [unique_id "apK96ov3RhPI65jTFG7ieQAAA5E"]
[Sat Aug 29 05:09:30.766443 2026] [security2:error] [pid 1041789:tid 1041848] [remote 93.123.109.228:39264] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.gkuhns.info"] [uri "/wp-config.php.old"] [unique_id "apK96ov3RhPI65jTFG7iewADaC4"]
[Sat Aug 29 05:09:30.793527 2026] [security2:error] [pid 1041789:tid 1041902] [remote 34.24.13.68:45664] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "www.mattburlick.com"] [uri "/wp-config.php.bak"] [unique_id "apK96ov3RhPI65jTFG7ihAADl2Q"]
[Sat Aug 29 05:09:30.794304 2026] [security2:error] [pid 1041789:tid 1041812] [remote 34.24.13.68:45664] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/core/.env"] [unique_id "apK96ov3RhPI65jTFG7igwADlwo"]
[Sat Aug 29 05:09:30.794660 2026] [security2:error] [pid 1041789:tid 1041861] [remote 34.24.13.68:45664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.13.24.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mattburlick.com"] [uri "/config/.env.php"] [unique_id "apK96ov3RhPI65jTFG7iiAADlzs"]
[Sat Aug 29 05:09:30.795022 2026] [security2:error] [pid 1041789:tid 1041854] [remote 34.24.13.68:45664] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/laravel/.env"] [unique_id "apK96ov3RhPI65jTFG7ihwADlzQ"]
[Sat Aug 29 05:09:30.804955 2026] [security2:error] [pid 1041789:tid 1042050] [client 20.63.219.114:2482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.realestatetrifecta.com"] [uri "/aaa.php"] [unique_id "apK96ov3RhPI65jTFG7iiQAAA5U"]
[Sat Aug 29 05:09:30.819986 2026] [security2:error] [pid 1041789:tid 1041980] [client 20.104.104.62:41613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/mga.php"] [unique_id "apK96ov3RhPI65jTFG7iiwAAA08"]
[Sat Aug 29 05:09:30.838282 2026] [security2:error] [pid 1041789:tid 1041846] [remote 93.123.109.228:39166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/admin/phpinfo.php"] [unique_id "apK96ov3RhPI65jTFG7ijgADaSw"]
[Sat Aug 29 05:09:30.842039 2026] [security2:error] [pid 1041789:tid 1041858] [remote 93.123.109.228:39166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/admin_phpinfo.php"] [unique_id "apK96ov3RhPI65jTFG7ikQADaTg"]
[Sat Aug 29 05:09:30.845262 2026] [security2:error] [pid 1041789:tid 1042052] [client 158.23.184.117:38318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/php8.php"] [unique_id "apK96ov3RhPI65jTFG7ikgAAA5c"]
[Sat Aug 29 05:09:30.848895 2026] [security2:error] [pid 1041789:tid 1041866] [remote 34.24.13.68:45664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.13.24.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mattburlick.com"] [uri "/.env.php.bak"] [unique_id "apK96ov3RhPI65jTFG7ilAADJkA"]
[Sat Aug 29 05:09:30.849761 2026] [security2:error] [pid 1041789:tid 1041840] [remote 34.24.13.68:45664] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/@fs/.env"] [unique_id "apK96ov3RhPI65jTFG7ikwADJiY"]
[Sat Aug 29 05:09:30.849835 2026] [security2:error] [pid 1041789:tid 1041844] [remote 34.24.13.68:45664] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "www.mattburlick.com"] [uri "/wp-config.php.old"] [unique_id "apK96ov3RhPI65jTFG7ilQADJio"]
[Sat Aug 29 05:09:30.862233 2026] [security2:error] [pid 1041789:tid 1042001] [client 158.23.184.117:19451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/.well-known/wp-mail.php"] [unique_id "apK96ov3RhPI65jTFG7imgAAA2Q"]
[Sat Aug 29 05:09:30.864853 2026] [security2:error] [pid 1041789:tid 1041839] [remote 34.24.13.68:45664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.13.24.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mattburlick.com"] [uri "/config.php.bak"] [unique_id "apK96ov3RhPI65jTFG7imwADVyU"]
[Sat Aug 29 05:09:30.873114 2026] [security2:error] [pid 1041789:tid 1041837] [remote 34.24.13.68:45664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.13.24.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mattburlick.com"] [uri "/configuration.php.bak"] [unique_id "apK96ov3RhPI65jTFG7inQADQyM"]
[Sat Aug 29 05:09:30.877462 2026] [http2:warn] [pid 1028675:tid 1028913] [client 57.141.14.3:24616] h2_stream(1028675-217-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:09:30.901506 2026] [security2:error] [pid 1041789:tid 1042007] [client 4.232.148.111:1357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/x.php"] [unique_id "apK96ov3RhPI65jTFG7iowAAA2o"]
[Sat Aug 29 05:09:30.917254 2026] [security2:error] [pid 1041789:tid 1041979] [client 158.23.184.117:7437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/xmr.php"] [unique_id "apK96ov3RhPI65jTFG7ipAAAA04"]
[Sat Aug 29 05:09:30.927694 2026] [security2:error] [pid 1041789:tid 1041862] [remote 34.24.13.68:45664] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/@fs/.env"] [unique_id "apK96ov3RhPI65jTFG7ipQADLzw"]
[Sat Aug 29 05:09:30.930795 2026] [security2:error] [pid 1041789:tid 1041873] [remote 34.24.13.68:45664] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/.env.swp"] [unique_id "apK96ov3RhPI65jTFG7ipgADL0c"]
[Sat Aug 29 05:09:30.930910 2026] [security2:error] [pid 1041789:tid 1041872] [remote 34.24.13.68:45664] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/@fs/.env"] [unique_id "apK96ov3RhPI65jTFG7iqQADL0Y"]
[Sat Aug 29 05:09:30.941647 2026] [security2:error] [pid 1041789:tid 1041849] [remote 34.24.13.68:45664] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/wp/.env"] [unique_id "apK96ov3RhPI65jTFG7irQADRi8"]
[Sat Aug 29 05:09:30.943077 2026] [security2:error] [pid 1041789:tid 1041860] [remote 34.24.13.68:45664] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/storage/.env"] [unique_id "apK96ov3RhPI65jTFG7irgADRjo"]
[Sat Aug 29 05:09:30.953384 2026] [security2:error] [pid 1041789:tid 1042037] [client 158.158.54.35:36966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/mini.php"] [unique_id "apK96ov3RhPI65jTFG7isQAAA4g"]
[Sat Aug 29 05:09:30.954386 2026] [security2:error] [pid 1041789:tid 1042011] [client 20.104.104.62:41604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/inwp.php"] [unique_id "apK96ov3RhPI65jTFG7iswAAA24"]
[Sat Aug 29 05:09:30.954790 2026] [security2:error] [pid 1041789:tid 1042031] [client 20.52.41.200:4363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "apK96ov3RhPI65jTFG7isgAAA4I"]
[Sat Aug 29 05:09:30.959470 2026] [security2:error] [pid 1041789:tid 1042003] [client 20.63.219.114:10568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/wxo.php"] [unique_id "apK96ov3RhPI65jTFG7itAAAA2Y"]
[Sat Aug 29 05:09:30.987260 2026] [security2:error] [pid 1041789:tid 1041932] [client 158.23.184.117:38305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/wp-content/themes/admin.php"] [unique_id "apK96ov3RhPI65jTFG7iugAAAx8"]
[Sat Aug 29 05:09:30.989034 2026] [security2:error] [pid 1041789:tid 1041990] [client 93.123.109.228:45744] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK96ov3RhPI65jTFG7ivAAAA1k"]
[Sat Aug 29 05:09:30.998889 2026] [security2:error] [pid 1041789:tid 1041875] [remote 34.24.13.68:45664] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/public/.env"] [unique_id "apK96ov3RhPI65jTFG7iwwADY0k"]
[Sat Aug 29 05:09:30.998991 2026] [security2:error] [pid 1041789:tid 1041927] [remote 34.24.13.68:45664] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/web/.env"] [unique_id "apK96ov3RhPI65jTFG7ixAADY30"]
[Sat Aug 29 05:09:31.005758 2026] [security2:error] [pid 1041789:tid 1041950] [client 158.23.184.117:19426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/.well-known/wp-settings.php"] [unique_id "apK964v3RhPI65jTFG7ixgAAAzE"]
[Sat Aug 29 05:09:31.007612 2026] [security2:error] [pid 1041789:tid 1041877] [remote 34.24.13.68:45664] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "www.mattburlick.com"] [uri "/wp-config.php~"] [unique_id "apK964v3RhPI65jTFG7iyAADYUs"]
[Sat Aug 29 05:09:31.008897 2026] [security2:error] [pid 1041789:tid 1041986] [client 20.104.49.130:63602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/red.php"] [unique_id "apK964v3RhPI65jTFG7iyQAAA1U"]
[Sat Aug 29 05:09:31.026721 2026] [security2:error] [pid 1041789:tid 1041890] [remote 93.123.109.228:39166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/api/info.php"] [unique_id "apK964v3RhPI65jTFG7izwADNlg"]
[Sat Aug 29 05:09:31.050559 2026] [security2:error] [pid 1041789:tid 1041947] [client 93.123.109.228:45774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK964v3RhPI65jTFG7i1AAAAy4"]
[Sat Aug 29 05:09:31.051312 2026] [security2:error] [pid 1041789:tid 1041940] [client 74.248.24.12:37838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/files/index.php"] [unique_id "apK964v3RhPI65jTFG7i1QAAAyc"]
[Sat Aug 29 05:09:31.053307 2026] [security2:error] [pid 1041789:tid 1041964] [client 138.199.19.178:42262] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "4paiges.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "apK964v3RhPI65jTFG7i1gAAAz8"]
[Sat Aug 29 05:09:31.064677 2026] [security2:error] [pid 1041789:tid 1041929] [remote 34.24.13.68:45664] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "www.mattburlick.com"] [uri "/wp-config.php.swp"] [unique_id "apK964v3RhPI65jTFG7i2QADRH8"]
[Sat Aug 29 05:09:31.065974 2026] [security2:error] [pid 1041789:tid 1042044] [client 158.23.184.117:7439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK964v3RhPI65jTFG7i2wAAA48"]
[Sat Aug 29 05:09:31.067883 2026] [security2:error] [pid 1041789:tid 1041961] [client 93.123.109.228:45808] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(\\\\/\\\\*\\\\!? ?(?:select|grant|delete|insert|drop|alter|replace|truncate|update|create|rename|describe|union|concat|group_concat))" at REQUEST_FILENAME. [file "/opt/mod_security/hg_rules.conf"] [line "1019"] [id "9000042"] [rev "2.2.2"] [msg "SQL Comment Sequence Detected."] [data "/*update"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/*update.cgi*"] [unique_id "apK964v3RhPI65jTFG7i2gAAAzw"]
[Sat Aug 29 05:09:31.072268 2026] [security2:error] [pid 1041789:tid 1041934] [client 20.104.104.62:42833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK964v3RhPI65jTFG7i3QAAAyE"]
[Sat Aug 29 05:09:31.085507 2026] [security2:error] [pid 1041789:tid 1042038] [client 20.104.104.62:22708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/ad1.php"] [unique_id "apK964v3RhPI65jTFG7i4AAAA4k"]
[Sat Aug 29 05:09:31.086897 2026] [security2:error] [pid 1041789:tid 1041963] [client 158.23.147.79:14274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK964v3RhPI65jTFG7i4QAAAz4"]
[Sat Aug 29 05:09:31.099171 2026] [security2:error] [pid 1041789:tid 1041905] [remote 34.24.13.68:45664] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/wp-config.old"] [unique_id "apK964v3RhPI65jTFG7i5AADhGc"]
[Sat Aug 29 05:09:31.130447 2026] [security2:error] [pid 1041789:tid 1041992] [client 158.23.184.117:53744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/txets.php"] [unique_id "apK964v3RhPI65jTFG7i6AAAA1s"]
[Sat Aug 29 05:09:31.133515 2026] [security2:error] [pid 1041789:tid 1042020] [client 4.232.148.111:35610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/lock360.php"] [unique_id "apK964v3RhPI65jTFG7i6QAAA3c"]
[Sat Aug 29 05:09:31.140333 2026] [security2:error] [pid 1041789:tid 1041898] [remote 93.123.109.228:39292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmsproductions.com"] [uri "/.env.php"] [unique_id "apK964v3RhPI65jTFG7i7AADl2A"]
[Sat Aug 29 05:09:31.145063 2026] [security2:error] [pid 1041789:tid 1041841] [remote 93.123.109.228:39166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/api/phpinfo.php"] [unique_id "apK964v3RhPI65jTFG7i8QADnCc"]
[Sat Aug 29 05:09:31.150342 2026] [security2:error] [pid 1041789:tid 1041981] [client 158.23.184.117:61634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/.well-known/wp-signup.php"] [unique_id "apK964v3RhPI65jTFG7i9AAAA1A"]
[Sat Aug 29 05:09:31.167311 2026] [security2:error] [pid 1041789:tid 1041988] [client 4.205.62.107:24962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/cli_bootstrap.php"] [unique_id "apK964v3RhPI65jTFG7i9wAAA1c"]
[Sat Aug 29 05:09:31.169560 2026] [security2:error] [pid 1041789:tid 1041938] [client 93.123.109.228:45758] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/.docker/.env"] [unique_id "apK964v3RhPI65jTFG7i-gAAAyU"]
[Sat Aug 29 05:09:31.171909 2026] [security2:error] [pid 1041789:tid 1041906] [remote 34.24.13.68:45664] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/.env"] [unique_id "apK964v3RhPI65jTFG7i_AADgGg"]
[Sat Aug 29 05:09:31.174682 2026] [security2:error] [pid 1041789:tid 1041968] [client 57.141.14.14:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.jobindjibouti.com"] [uri "/image-sitemap-2.xml"] [unique_id "apK964v3RhPI65jTFG7i_QAAA0M"]
[Sat Aug 29 05:09:31.180540 2026] [security2:error] [pid 1041789:tid 1041997] [client 4.205.62.107:6926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/06.php"] [unique_id "apK964v3RhPI65jTFG7jAgAAA2A"]
[Sat Aug 29 05:09:31.190021 2026] [security2:error] [pid 1041789:tid 1041954] [client 93.123.109.228:45842] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/.docker/laravel/app/.env"] [unique_id "apK964v3RhPI65jTFG7jBAAAAzU"]
[Sat Aug 29 05:09:31.204702 2026] [security2:error] [pid 1041789:tid 1042011] [client 20.104.104.62:42850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK964v3RhPI65jTFG7jCgAAA24"]
[Sat Aug 29 05:09:31.215603 2026] [security2:error] [pid 1041789:tid 1042001] [client 158.23.184.117:7428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/wp-act.php"] [unique_id "apK964v3RhPI65jTFG7jDQAAA2Q"]
[Sat Aug 29 05:09:31.220523 2026] [security2:error] [pid 1041789:tid 1042015] [client 20.104.104.62:45963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/1vbqo.php"] [unique_id "apK964v3RhPI65jTFG7jDgAAA3I"]
[Sat Aug 29 05:09:31.221733 2026] [security2:error] [pid 1041789:tid 1041944] [client 93.123.109.228:45768] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK964v3RhPI65jTFG7jDwAAAys"]
[Sat Aug 29 05:09:31.224718 2026] [security2:error] [pid 1041789:tid 1042004] [client 40.83.93.50:14481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/al.php"] [unique_id "apK964v3RhPI65jTFG7jEwAAA2c"]
[Sat Aug 29 05:09:31.226106 2026] [security2:error] [pid 1041789:tid 1041926] [remote 34.24.13.68:45664] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/.env.bak"] [unique_id "apK964v3RhPI65jTFG7jEgADdXw"]
[Sat Aug 29 05:09:31.231463 2026] [security2:error] [pid 1041789:tid 1041923] [remote 34.24.13.68:45664] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/.env.backup"] [unique_id "apK964v3RhPI65jTFG7jFwADMXk"]
[Sat Aug 29 05:09:31.244990 2026] [security2:error] [pid 1041789:tid 1041911] [remote 34.24.13.68:45664] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/api/.env"] [unique_id "apK964v3RhPI65jTFG7jGgADkm0"]
[Sat Aug 29 05:09:31.245724 2026] [security2:error] [pid 1041789:tid 1041962] [client 4.205.62.107:51486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/test.php"] [unique_id "apK964v3RhPI65jTFG7jGwAAAz0"]
[Sat Aug 29 05:09:31.249843 2026] [security2:error] [pid 1041789:tid 1041806] [remote 34.24.13.68:45664] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "www.mattburlick.com"] [uri "/.env.old"] [unique_id "apK964v3RhPI65jTFG7jHwADmAQ"]
[Sat Aug 29 05:09:31.254080 2026] [security2:error] [pid 1041789:tid 1041995] [client 4.205.62.107:62764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/infos.php"] [unique_id "apK964v3RhPI65jTFG7jIQAAA14"]
[Sat Aug 29 05:09:31.256413 2026] [security2:error] [pid 1041789:tid 1042003] [client 74.7.241.167:46322] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "hokkaidonewpaltz.com"] [uri "/robots.txt"] [unique_id "apK964v3RhPI65jTFG7jIAADZg8"]
[Sat Aug 29 05:09:31.260655 2026] [security2:error] [pid 1041789:tid 1041935] [client 93.123.109.228:45800] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/.env.backup"] [unique_id "apK964v3RhPI65jTFG7jIwAAAyI"]
[Sat Aug 29 05:09:31.274090 2026] [security2:error] [pid 1041789:tid 1042017] [client 158.23.184.117:38327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/adminfuns.php"] [unique_id "apK964v3RhPI65jTFG7jJQAAA3Q"]
[Sat Aug 29 05:09:31.293812 2026] [security2:error] [pid 1041789:tid 1041964] [client 93.123.109.228:45820] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/.env.bak"] [unique_id "apK964v3RhPI65jTFG7jKAAAAz8"]
[Sat Aug 29 05:09:31.294299 2026] [security2:error] [pid 1041789:tid 1041933] [client 158.23.147.79:38732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/goods.php"] [unique_id "apK964v3RhPI65jTFG7jKQAAAyA"]
[Sat Aug 29 05:09:31.295688 2026] [security2:error] [pid 1041789:tid 1042055] [client 158.23.184.117:19445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/002.php"] [unique_id "apK964v3RhPI65jTFG7jKgAAA5o"]
[Sat Aug 29 05:09:31.307945 2026] [security2:error] [pid 1041789:tid 1042044] [client 158.23.147.79:17614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/index/function.php"] [unique_id "apK964v3RhPI65jTFG7jKwAAA48"]
[Sat Aug 29 05:09:31.341889 2026] [security2:error] [pid 1041789:tid 1042028] [client 20.104.104.62:41979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/baee.php"] [unique_id "apK964v3RhPI65jTFG7jNQAAA38"]
[Sat Aug 29 05:09:31.360269 2026] [security2:error] [pid 1041789:tid 1041970] [client 4.205.62.107:53159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/server_info.php"] [unique_id "apK964v3RhPI65jTFG7jOwAAA0U"]
[Sat Aug 29 05:09:31.361616 2026] [security2:error] [pid 1041789:tid 1041931] [client 20.104.104.62:45993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/h02ugyh.php"] [unique_id "apK964v3RhPI65jTFG7jPQAAAx4"]
[Sat Aug 29 05:09:31.370874 2026] [security2:error] [pid 1041789:tid 1041934] [client 158.23.184.117:7192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/fff.php"] [unique_id "apK964v3RhPI65jTFG7jPgAAAyE"]
[Sat Aug 29 05:09:31.374982 2026] [security2:error] [pid 1041789:tid 1042040] [client 20.63.219.114:8873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/as.php"] [unique_id "apK964v3RhPI65jTFG7jPwAAA4s"]
[Sat Aug 29 05:09:31.375162 2026] [security2:error] [pid 1041789:tid 1042054] [client 4.232.148.111:19872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/new.php"] [unique_id "apK964v3RhPI65jTFG7jQAAAA5k"]
[Sat Aug 29 05:09:31.405853 2026] [security2:error] [pid 1041789:tid 1042013] [client 158.158.54.35:36975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/aa.php"] [unique_id "apK964v3RhPI65jTFG7jSAAAA3A"]
[Sat Aug 29 05:09:31.409881 2026] [security2:error] [pid 1041789:tid 1042041] [client 20.52.41.200:5248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/css/wp-login.php"] [unique_id "apK964v3RhPI65jTFG7jSgAAA4w"]
[Sat Aug 29 05:09:31.410500 2026] [security2:error] [pid 1041789:tid 1042035] [client 45.148.10.62:48490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xnk.wja.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "apK964v3RhPI65jTFG7jSwAAA4Y"]
[Sat Aug 29 05:09:31.413429 2026] [security2:error] [pid 1041789:tid 1041988] [client 93.123.109.228:45800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/.env.php"] [unique_id "apK964v3RhPI65jTFG7jTAAAA1c"]
[Sat Aug 29 05:09:31.417927 2026] [security2:error] [pid 1041789:tid 1041938] [client 93.123.109.228:45770] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/.env.old"] [unique_id "apK964v3RhPI65jTFG7jTQAAAyU"]
[Sat Aug 29 05:09:31.418669 2026] [security2:error] [pid 1041789:tid 1041946] [client 158.23.184.117:38300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/403.php"] [unique_id "apK964v3RhPI65jTFG7jTgAAAy0"]
[Sat Aug 29 05:09:31.430787 2026] [security2:error] [pid 1041789:tid 1041967] [client 20.197.61.180:9549] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/1.php7"] [unique_id "apK964v3RhPI65jTFG7jUQAAA0I"]
[Sat Aug 29 05:09:31.430870 2026] [security2:error] [pid 1041789:tid 1041967] [client 20.197.61.180:9549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/1.php7"] [unique_id "apK964v3RhPI65jTFG7jUQAAA0I"]
[Sat Aug 29 05:09:31.439292 2026] [security2:error] [pid 1041789:tid 1041955] [client 158.23.184.117:19407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/0x.php"] [unique_id "apK964v3RhPI65jTFG7jUwAAAzY"]
[Sat Aug 29 05:09:31.461447 2026] [security2:error] [pid 1041789:tid 1042031] [client 158.23.147.79:58932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK964v3RhPI65jTFG7jWQAAA4I"]
[Sat Aug 29 05:09:31.475918 2026] [security2:error] [pid 1041789:tid 1041957] [client 20.197.61.180:1870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/ggfi.php"] [unique_id "apK964v3RhPI65jTFG7jXgAAAzg"]
[Sat Aug 29 05:09:31.480853 2026] [security2:error] [pid 1041789:tid 1041983] [client 20.104.104.62:43103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/d12.php"] [unique_id "apK964v3RhPI65jTFG7jYQAAA1I"]
[Sat Aug 29 05:09:31.504809 2026] [security2:error] [pid 1041789:tid 1041932] [client 20.104.104.62:41639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/shelp.php"] [unique_id "apK964v3RhPI65jTFG7jYgAAAx8"]
[Sat Aug 29 05:09:31.504841 2026] [security2:error] [pid 1041789:tid 1041944] [client 20.104.49.130:47963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/red.php"] [unique_id "apK964v3RhPI65jTFG7jYwAAAys"]
[Sat Aug 29 05:09:31.521087 2026] [security2:error] [pid 1041789:tid 1041945] [client 158.23.184.117:7430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/.tmb/dropdown.php"] [unique_id "apK964v3RhPI65jTFG7jZAAAAyw"]
[Sat Aug 29 05:09:31.524334 2026] [security2:error] [pid 1041789:tid 1042005] [client 93.123.109.228:45744] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/.env.swp"] [unique_id "apK964v3RhPI65jTFG7jZQAAA2g"]
[Sat Aug 29 05:09:31.561233 2026] [security2:error] [pid 1041789:tid 1041975] [client 93.123.109.228:45758] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/.env~"] [unique_id "apK964v3RhPI65jTFG7jbgAAA0o"]
[Sat Aug 29 05:09:31.566507 2026] [security2:error] [pid 1041789:tid 1041965] [client 74.248.24.12:22411] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webmail.ej207.com"] [uri "/1.php7"] [unique_id "apK964v3RhPI65jTFG7jcgAAA0A"]
[Sat Aug 29 05:09:31.566642 2026] [security2:error] [pid 1041789:tid 1041965] [client 74.248.24.12:22411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/1.php7"] [unique_id "apK964v3RhPI65jTFG7jcgAAA0A"]
[Sat Aug 29 05:09:31.580923 2026] [security2:error] [pid 1041789:tid 1042043] [client 158.23.147.79:28086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/.well-known/index.php"] [unique_id "apK964v3RhPI65jTFG7jewAAA44"]
[Sat Aug 29 05:09:31.583295 2026] [security2:error] [pid 1041789:tid 1042037] [client 158.23.184.117:61681] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "docpepper.com"] [uri "/1.php"] [unique_id "apK964v3RhPI65jTFG7jfgAAA4g"]
[Sat Aug 29 05:09:31.583403 2026] [security2:error] [pid 1041789:tid 1042037] [client 158.23.184.117:61681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/1.php"] [unique_id "apK964v3RhPI65jTFG7jfgAAA4g"]
[Sat Aug 29 05:09:31.609679 2026] [security2:error] [pid 1041789:tid 1042034] [client 4.232.148.111:35646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-conflg.php"] [unique_id "apK964v3RhPI65jTFG7jgwAAA4U"]
[Sat Aug 29 05:09:31.611206 2026] [security2:error] [pid 1041789:tid 1041956] [client 158.23.184.117:38288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/.trash7206/index.php"] [unique_id "apK964v3RhPI65jTFG7jhAAAAzc"]
[Sat Aug 29 05:09:31.617111 2026] [security2:error] [pid 1041789:tid 1042046] [client 20.104.104.62:43332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/yyy.php"] [unique_id "apK964v3RhPI65jTFG7jhQAAA5E"]
[Sat Aug 29 05:09:31.628368 2026] [security2:error] [pid 1041789:tid 1042028] [client 20.104.104.62:56337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/Rk41.php"] [unique_id "apK964v3RhPI65jTFG7jhgAAA38"]
[Sat Aug 29 05:09:31.669922 2026] [security2:error] [pid 1041789:tid 1042040] [client 20.104.104.62:22702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/13ede.php"] [unique_id "apK964v3RhPI65jTFG7jiAAAA4s"]
[Sat Aug 29 05:09:31.680474 2026] [security2:error] [pid 1041789:tid 1042021] [client 103.171.189.88:269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK964v3RhPI65jTFG7jigAAA3g"]
[Sat Aug 29 05:09:31.681159 2026] [security2:error] [pid 1041789:tid 1042021] [client 103.171.189.88:269] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK964v3RhPI65jTFG7jigAAA3g"]
[Sat Aug 29 05:09:31.689904 2026] [security2:error] [pid 1041789:tid 1042009] [client 158.23.184.117:7442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/robots.php"] [unique_id "apK964v3RhPI65jTFG7jjAAAA2w"]
[Sat Aug 29 05:09:31.695044 2026] [security2:error] [pid 1041789:tid 1042056] [client 40.83.93.50:11920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/global.php"] [unique_id "apK964v3RhPI65jTFG7jjgAAA5s"]
[Sat Aug 29 05:09:31.711744 2026] [security2:error] [pid 1041789:tid 1041980] [client 138.199.19.178:42264] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "4paiges.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "apK964v3RhPI65jTFG7jlQAAA08"]
[Sat Aug 29 05:09:31.724848 2026] [security2:error] [pid 1041789:tid 1041968] [client 93.123.109.228:45786] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/.git/config.bak"] [unique_id "apK964v3RhPI65jTFG7jlwAAA0M"]
[Sat Aug 29 05:09:31.726411 2026] [security2:error] [pid 1041789:tid 1042020] [client 158.23.184.117:19428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/10.php"] [unique_id "apK964v3RhPI65jTFG7jmAAAA3c"]
[Sat Aug 29 05:09:31.732774 2026] [security2:error] [pid 1041789:tid 1042033] [client 20.63.219.114:18988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/room.php"] [unique_id "apK964v3RhPI65jTFG7jnAAAA4Q"]
[Sat Aug 29 05:09:31.732801 2026] [security2:error] [pid 1041789:tid 1041946] [client 93.123.109.228:45758] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/.git/config.old"] [unique_id "apK964v3RhPI65jTFG7jmwAAAy0"]
[Sat Aug 29 05:09:31.747413 2026] [security2:error] [pid 1041789:tid 1042031] [client 93.123.109.228:45768] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/.git/config~"] [unique_id "apK964v3RhPI65jTFG7joAAAA4I"]
[Sat Aug 29 05:09:31.754343 2026] [security2:error] [pid 1041789:tid 1041988] [client 158.23.184.117:38302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/.trash7206/admin.php"] [unique_id "apK964v3RhPI65jTFG7jogAAA1c"]
[Sat Aug 29 05:09:31.755879 2026] [security2:error] [pid 1041789:tid 1042049] [client 20.104.104.62:41935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/bgymj.php"] [unique_id "apK964v3RhPI65jTFG7jowAAA5Q"]
[Sat Aug 29 05:09:31.763252 2026] [security2:error] [pid 1041789:tid 1041979] [client 20.104.104.62:56360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/7logs.php"] [unique_id "apK964v3RhPI65jTFG7jpAAAA04"]
[Sat Aug 29 05:09:31.765454 2026] [autoindex:error] [pid 1041789:tid 1042030] [client 45.148.10.62:48498] AH01276: Cannot serve directory /home3/xqketgmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:09:31.765933 2026] [security2:error] [pid 1041789:tid 1041957] [client 20.48.160.90:50500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK964v3RhPI65jTFG7jpQAAAzg"]
[Sat Aug 29 05:09:31.804388 2026] [proxy_http:error] [pid 1018003:tid 1018082] (70007)The timeout specified has expired: [remote 57.141.14.32:35046] AH01102: error reading status line from remote server 127.0.0.1:8443
[Sat Aug 29 05:09:31.804412 2026] [proxy:error] [pid 1018003:tid 1018082] [remote 57.141.14.32:35046] AH00898: Error reading from remote server returned by /shop/
[Sat Aug 29 05:09:31.813415 2026] [security2:error] [pid 1041789:tid 1042005] [client 4.205.62.107:63975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/saiga.php"] [unique_id "apK964v3RhPI65jTFG7jswAAA2g"]
[Sat Aug 29 05:09:31.814392 2026] [proxy_http:error] [pid 1017536:tid 1017769] (70007)The timeout specified has expired: [client 127.0.0.1:27980] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:09:31.814418 2026] [proxy:error] [pid 1017536:tid 1017769] [client 127.0.0.1:27980] AH00898: Error reading from remote server returned by /shop/
[Sat Aug 29 05:09:31.825147 2026] [security2:error] [pid 1041789:tid 1041982] [client 20.104.104.62:22656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/k8.php"] [unique_id "apK964v3RhPI65jTFG7juAAAA1E"]
[Sat Aug 29 05:09:31.839316 2026] [security2:error] [pid 1041789:tid 1042014] [client 158.23.184.117:7455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/.well-known/install.php"] [unique_id "apK964v3RhPI65jTFG7jvgAAA3E"]
[Sat Aug 29 05:09:31.847231 2026] [security2:error] [pid 1041789:tid 1041962] [client 158.23.147.79:5917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-mail.php"] [unique_id "apK964v3RhPI65jTFG7jvwAAAz0"]
[Sat Aug 29 05:09:31.851569 2026] [security2:error] [pid 1041789:tid 1041981] [client 4.232.148.111:26831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/menu.php"] [unique_id "apK964v3RhPI65jTFG7jwAAAA1A"]
[Sat Aug 29 05:09:31.869394 2026] [security2:error] [pid 1041789:tid 1042006] [client 20.52.41.200:4582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/images/index.php"] [unique_id "apK964v3RhPI65jTFG7jwgAAA2k"]
[Sat Aug 29 05:09:31.870712 2026] [security2:error] [pid 1041789:tid 1041998] [client 158.23.184.117:61636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/100.php"] [unique_id "apK964v3RhPI65jTFG7jwwAAA2E"]
[Sat Aug 29 05:09:31.879871 2026] [security2:error] [pid 1041789:tid 1042048] [client 4.205.62.107:21945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/oc460l3x.php"] [unique_id "apK964v3RhPI65jTFG7jxAAAA5M"]
[Sat Aug 29 05:09:31.882822 2026] [security2:error] [pid 1041789:tid 1041964] [client 4.205.62.107:9015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/public/bnn_.php.php"] [unique_id "apK964v3RhPI65jTFG7jxQAAAz8"]
[Sat Aug 29 05:09:31.884189 2026] [security2:error] [pid 1041789:tid 1041949] [client 20.104.49.130:53861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/ioxi-o.php"] [unique_id "apK964v3RhPI65jTFG7jxgAAAzA"]
[Sat Aug 29 05:09:31.896465 2026] [security2:error] [pid 1041789:tid 1042029] [client 158.158.54.35:29720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/c.php"] [unique_id "apK964v3RhPI65jTFG7jyAAAA4A"]
[Sat Aug 29 05:09:31.898135 2026] [security2:error] [pid 1041789:tid 1041975] [client 158.23.184.117:53725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/wp-content/admin.php"] [unique_id "apK964v3RhPI65jTFG7jyQAAA0o"]
[Sat Aug 29 05:09:31.899595 2026] [security2:error] [pid 1041789:tid 1041947] [client 20.104.104.62:60110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/fh26.php"] [unique_id "apK964v3RhPI65jTFG7jygAAAy4"]
[Sat Aug 29 05:09:31.903146 2026] [security2:error] [pid 1041789:tid 1042037] [client 20.48.160.90:50488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK964v3RhPI65jTFG7jywAAA4g"]
[Sat Aug 29 05:09:31.922927 2026] [security2:error] [pid 1041789:tid 1041956] [client 45.148.10.62:48498] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.xqk.etg.mybluehost.me"] [uri "/.env"] [unique_id "apK964v3RhPI65jTFG7jzAAAAzc"]
[Sat Aug 29 05:09:31.934555 2026] [security2:error] [pid 1041789:tid 1042027] [client 20.104.104.62:4125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/sf.php"] [unique_id "apK964v3RhPI65jTFG7jzQAAA34"]
[Sat Aug 29 05:09:31.956184 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.104.104.62:41610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/alog.php"] [unique_id "apK964v3RhPI65jTFG7j2QAAA3o"]
[Sat Aug 29 05:09:31.998435 2026] [core:error] [pid 1041789:tid 1042028] [client 158.23.184.117:7929] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:31.998456 2026] [core:error] [pid 1041789:tid 1042028] [client 158.23.184.117:7929] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:32.006880 2026] [security2:error] [pid 1041789:tid 1041967] [client 158.23.147.79:11385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK97Iv3RhPI65jTFG7j5wAAA0I"]
[Sat Aug 29 05:09:32.010761 2026] [autoindex:error] [pid 1041789:tid 1041876] [remote 45.148.10.62:48500] AH01276: Cannot serve directory /home3/xnkwjamy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:09:32.016043 2026] [security2:error] [pid 1041789:tid 1041991] [client 158.23.184.117:19401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/2.php"] [unique_id "apK97Iv3RhPI65jTFG7j6QAAA1o"]
[Sat Aug 29 05:09:32.031767 2026] [security2:error] [pid 1041789:tid 1042019] [client 20.104.104.62:43073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/fgd.php"] [unique_id "apK97Iv3RhPI65jTFG7j6gAAA3Y"]
[Sat Aug 29 05:09:32.043294 2026] [security2:error] [pid 1041789:tid 1041988] [client 20.104.104.62:40221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/htdocs.php"] [unique_id "apK97Iv3RhPI65jTFG7j7QAAA1c"]
[Sat Aug 29 05:09:32.043903 2026] [security2:error] [pid 1041789:tid 1042049] [client 20.48.160.90:45377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/ser.php"] [unique_id "apK97Iv3RhPI65jTFG7j7gAAA5Q"]
[Sat Aug 29 05:09:32.069348 2026] [security2:error] [pid 1041789:tid 1042057] [client 158.23.147.79:63288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK97Iv3RhPI65jTFG7j9wAAA5w"]
[Sat Aug 29 05:09:32.071011 2026] [security2:error] [pid 1041789:tid 1041945] [client 45.148.10.62:48498] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.xqk.etg.mybluehost.me"] [uri "/.env"] [unique_id "apK97Iv3RhPI65jTFG7j-AAAAyw"]
[Sat Aug 29 05:09:32.079824 2026] [security2:error] [pid 1041789:tid 1041940] [client 74.248.24.12:22417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/disagraeosc.php"] [unique_id "apK97Iv3RhPI65jTFG7j-gAAAyc"]
[Sat Aug 29 05:09:32.085592 2026] [security2:error] [pid 1041789:tid 1041941] [client 20.104.104.62:45965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/adin.php"] [unique_id "apK97Iv3RhPI65jTFG7j-wAAAyg"]
[Sat Aug 29 05:09:32.087877 2026] [security2:error] [pid 1041789:tid 1041977] [client 4.232.148.111:35647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/123.php"] [unique_id "apK97Iv3RhPI65jTFG7j_AAAA0w"]
[Sat Aug 29 05:09:32.088421 2026] [security2:error] [pid 1041789:tid 1042018] [client 20.104.104.62:43042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/super.php"] [unique_id "apK97Iv3RhPI65jTFG7j_gAAA3U"]
[Sat Aug 29 05:09:32.094773 2026] [security2:error] [pid 1041789:tid 1042056] [client 20.63.219.114:18355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/class-wp-cmd.php"] [unique_id "apK97Iv3RhPI65jTFG7j_wAAA5s"]
[Sat Aug 29 05:09:32.162761 2026] [security2:error] [pid 1041789:tid 1042046] [client 20.197.61.180:18205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/ds.php"] [unique_id "apK97Iv3RhPI65jTFG7kCQAAA5E"]
[Sat Aug 29 05:09:32.173134 2026] [security2:error] [pid 1041789:tid 1042055] [client 20.104.104.62:43350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/inject.php"] [unique_id "apK97Iv3RhPI65jTFG7kDAAAA5o"]
[Sat Aug 29 05:09:32.173949 2026] [security2:error] [pid 1041789:tid 1042043] [client 20.48.160.90:50512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/431.php"] [unique_id "apK97Iv3RhPI65jTFG7kDQAAA44"]
[Sat Aug 29 05:09:32.191421 2026] [security2:error] [pid 1041789:tid 1041975] [client 158.23.147.79:14316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK97Iv3RhPI65jTFG7kEwAAA0o"]
[Sat Aug 29 05:09:32.215861 2026] [security2:error] [pid 1041789:tid 1041934] [client 20.104.104.62:45977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/sf9.php"] [unique_id "apK97Iv3RhPI65jTFG7kHAAAAyE"]
[Sat Aug 29 05:09:32.219808 2026] [security2:error] [pid 1041789:tid 1041992] [client 20.197.61.180:15036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/alfa-rex.php"] [unique_id "apK97Iv3RhPI65jTFG7kHwAAA1s"]
[Sat Aug 29 05:09:32.252367 2026] [security2:error] [pid 1041789:tid 1041990] [client 107.145.13.164:61975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 164.13.145.107.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK97Iv3RhPI65jTFG7kJAAAA1k"]
[Sat Aug 29 05:09:32.252479 2026] [security2:error] [pid 1041789:tid 1041990] [client 107.145.13.164:61975] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK97Iv3RhPI65jTFG7kJAAAA1k"]
[Sat Aug 29 05:09:32.255771 2026] [security2:error] [pid 1041789:tid 1041967] [client 20.104.104.62:56380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/lufix1.php"] [unique_id "apK97Iv3RhPI65jTFG7kLAAAA0I"]
[Sat Aug 29 05:09:32.274079 2026] [security2:error] [pid 1041789:tid 1041935] [client 40.83.93.50:10097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/update.php"] [unique_id "apK97Iv3RhPI65jTFG7kNAAAAyI"]
[Sat Aug 29 05:09:32.292949 2026] [security2:error] [pid 1041789:tid 1042042] [client 20.104.104.62:20691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/hello.php"] [unique_id "apK97Iv3RhPI65jTFG7kOAAAA40"]
[Sat Aug 29 05:09:32.294265 2026] [security2:error] [pid 1041789:tid 1041997] [client 20.104.49.130:52332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/xa.php"] [unique_id "apK97Iv3RhPI65jTFG7kOgAAA2A"]
[Sat Aug 29 05:09:32.304645 2026] [security2:error] [pid 1041789:tid 1041978] [client 4.205.62.107:25931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/dd.php"] [unique_id "apK97Iv3RhPI65jTFG7kPwAAA00"]
[Sat Aug 29 05:09:32.305380 2026] [security2:error] [pid 1041789:tid 1041979] [client 20.48.160.90:50452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/rxr.php"] [unique_id "apK97Iv3RhPI65jTFG7kQAAAA04"]
[Sat Aug 29 05:09:32.306389 2026] [security2:error] [pid 1041789:tid 1042030] [client 34.53.216.85:52604] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "67.20.76.220"] [uri "/"] [unique_id "apK97Iv3RhPI65jTFG7kQQAAA4E"]
[Sat Aug 29 05:09:32.309660 2026] [security2:error] [pid 1041789:tid 1042024] [client 20.104.104.62:42817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/mga.php"] [unique_id "apK97Iv3RhPI65jTFG7kQgAAA3s"]
[Sat Aug 29 05:09:32.320034 2026] [security2:error] [pid 1041789:tid 1042057] [client 4.205.62.107:6501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/xin1.php"] [unique_id "apK97Iv3RhPI65jTFG7kRgAAA5w"]
[Sat Aug 29 05:09:32.329235 2026] [security2:error] [pid 1041789:tid 1041964] [client 4.232.148.111:1080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK97Iv3RhPI65jTFG7kSAAAAz8"]
[Sat Aug 29 05:09:32.338921 2026] [security2:error] [pid 1041789:tid 1041947] [client 158.158.54.35:13008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/f.php"] [unique_id "apK97Iv3RhPI65jTFG7kSgAAAy4"]
[Sat Aug 29 05:09:32.354214 2026] [security2:error] [pid 1041789:tid 1041941] [client 20.104.104.62:22666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/lte7.php"] [unique_id "apK97Iv3RhPI65jTFG7kTAAAAyg"]
[Sat Aug 29 05:09:32.378225 2026] [autoindex:error] [pid 1041789:tid 1041995] [client 45.148.10.62:48498] AH01276: Cannot serve directory /home3/xqketgmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:09:32.384224 2026] [security2:error] [pid 1041789:tid 1041987] [client 4.205.62.107:51505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/txets.php"] [unique_id "apK97Iv3RhPI65jTFG7kVQAAA1Y"]
[Sat Aug 29 05:09:32.384650 2026] [security2:error] [pid 1041789:tid 1042017] [client 20.104.104.62:5099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/hack.php"] [unique_id "apK97Iv3RhPI65jTFG7kVgAAA3Q"]
[Sat Aug 29 05:09:32.388885 2026] [security2:error] [pid 1041789:tid 1041965] [client 93.123.109.228:45842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/.wp-config.php.swp"] [unique_id "apK97Iv3RhPI65jTFG7kVwAAA0A"]
[Sat Aug 29 05:09:32.393323 2026] [security2:error] [pid 1041789:tid 1042011] [client 4.205.62.107:62959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/env.php"] [unique_id "apK97Iv3RhPI65jTFG7kWwAAA24"]
[Sat Aug 29 05:09:32.399722 2026] [security2:error] [pid 1041789:tid 1041998] [client 93.123.109.228:45764] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/ADMIN/.env"] [unique_id "apK97Iv3RhPI65jTFG7kXgAAA2E"]
[Sat Aug 29 05:09:32.402338 2026] [security2:error] [pid 1041789:tid 1041981] [client 158.23.147.79:38720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK97Iv3RhPI65jTFG7kYQAAA1A"]
[Sat Aug 29 05:09:32.430494 2026] [security2:error] [pid 1041789:tid 1042029] [client 93.123.109.228:45820] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/API/.env"] [unique_id "apK97Iv3RhPI65jTFG7kZgAAA4A"]
[Sat Aug 29 05:09:32.432080 2026] [core:error] [pid 1041789:tid 1041949] [client 57.141.14.20:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:32.432096 2026] [core:error] [pid 1041789:tid 1041949] [client 57.141.14.20:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:32.434966 2026] [security2:error] [pid 1041789:tid 1041933] [client 20.48.160.90:50509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/csst.php"] [unique_id "apK97Iv3RhPI65jTFG7kaAAAAyA"]
[Sat Aug 29 05:09:32.442340 2026] [security2:error] [pid 1041789:tid 1042037] [client 20.104.104.62:43120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/inwp.php"] [unique_id "apK97Iv3RhPI65jTFG7kawAAA4g"]
[Sat Aug 29 05:09:32.465342 2026] [security2:error] [pid 1041789:tid 1042000] [client 158.23.147.79:17744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/.well-known/content.php"] [unique_id "apK97Iv3RhPI65jTFG7kbwAAA2M"]
[Sat Aug 29 05:09:32.490681 2026] [security2:error] [pid 1041789:tid 1041935] [client 20.52.41.200:4384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/inputs.php"] [unique_id "apK97Iv3RhPI65jTFG7kcgAAAyI"]
[Sat Aug 29 05:09:32.509304 2026] [security2:error] [pid 1041789:tid 1042042] [client 20.104.104.62:41652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/tanjiro.php"] [unique_id "apK97Iv3RhPI65jTFG7kdQAAA40"]
[Sat Aug 29 05:09:32.513115 2026] [security2:error] [pid 1041789:tid 1041997] [client 4.205.62.107:53122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/hosty.php"] [unique_id "apK97Iv3RhPI65jTFG7kdgAAA2A"]
[Sat Aug 29 05:09:32.524933 2026] [security2:error] [pid 1041789:tid 1042030] [client 93.123.109.228:45750] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/APP/.env"] [unique_id "apK97Iv3RhPI65jTFG7keQAAA4E"]
[Sat Aug 29 05:09:32.526019 2026] [security2:error] [pid 1041789:tid 1041900] [remote 93.123.109.228:39166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/config.php"] [unique_id "apK97Iv3RhPI65jTFG7kegADm2I"]
[Sat Aug 29 05:09:32.527971 2026] [security2:error] [pid 1041789:tid 1042024] [client 20.63.81.20:65192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/Q1.php"] [unique_id "apK97Iv3RhPI65jTFG7kfgAAA3s"]
[Sat Aug 29 05:09:32.532711 2026] [security2:error] [pid 1041789:tid 1041945] [client 20.104.104.62:43060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/155.php"] [unique_id "apK97Iv3RhPI65jTFG7kgAAAAyw"]
[Sat Aug 29 05:09:32.535868 2026] [security2:error] [pid 1041789:tid 1041983] [client 93.123.109.228:45840] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/Api/.env"] [unique_id "apK97Iv3RhPI65jTFG7kgQAAA1I"]
[Sat Aug 29 05:09:32.540853 2026] [security2:error] [pid 1041789:tid 1041912] [remote 45.148.10.62:48500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xnk.wja.mybluehost.me"] [uri "/wp-login.php"] [unique_id "apK97Iv3RhPI65jTFG7kcwADKW4"]
[Sat Aug 29 05:09:32.546692 2026] [security2:error] [pid 1041789:tid 1041955] [client 93.123.109.228:45768] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/BACK/.env"] [unique_id "apK97Iv3RhPI65jTFG7kggAAAzY"]
[Sat Aug 29 05:09:32.552020 2026] [security2:error] [pid 1041789:tid 1041964] [client 20.63.81.20:40061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK97Iv3RhPI65jTFG7kgwAAAz8"]
[Sat Aug 29 05:09:32.561123 2026] [security2:error] [pid 1041789:tid 1041961] [client 93.123.109.228:45764] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/BACKEND/.env"] [unique_id "apK97Iv3RhPI65jTFG7khwAAAzw"]
[Sat Aug 29 05:09:32.561819 2026] [security2:error] [pid 1041789:tid 1041972] [client 4.232.148.111:35630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/yanz.php"] [unique_id "apK97Iv3RhPI65jTFG7kiAAAA0c"]
[Sat Aug 29 05:09:32.568148 2026] [security2:error] [pid 1041789:tid 1041988] [client 20.63.81.20:55666] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/dex.php"] [unique_id "apK97Iv3RhPI65jTFG7kiQAAA1c"]
[Sat Aug 29 05:09:32.568214 2026] [security2:error] [pid 1041789:tid 1041941] [client 158.23.147.79:55904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK97Iv3RhPI65jTFG7kigAAAyg"]
[Sat Aug 29 05:09:32.569041 2026] [security2:error] [pid 1041789:tid 1041969] [client 20.63.219.114:18959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/disagreed.php"] [unique_id "apK97Iv3RhPI65jTFG7kiwAAA0Q"]
[Sat Aug 29 05:09:32.576070 2026] [security2:error] [pid 1041789:tid 1042032] [client 93.123.109.228:45852] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/BE/.env"] [unique_id "apK97Iv3RhPI65jTFG7kjAAAA4M"]
[Sat Aug 29 05:09:32.577074 2026] [security2:error] [pid 1041789:tid 1041977] [client 20.48.160.90:50450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/wp-includes/blocks/query-title/footer.php"] [unique_id "apK97Iv3RhPI65jTFG7kjQAAA0w"]
[Sat Aug 29 05:09:32.578513 2026] [security2:error] [pid 1041789:tid 1042047] [client 93.123.109.228:45758] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/Backend/.env"] [unique_id "apK97Iv3RhPI65jTFG7kjgAAA5I"]
[Sat Aug 29 05:09:32.582218 2026] [security2:error] [pid 1041789:tid 1042052] [client 93.123.109.228:45770] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/Be/.env"] [unique_id "apK97Iv3RhPI65jTFG7kkgAAA5c"]
[Sat Aug 29 05:09:32.589485 2026] [security2:error] [pid 1041789:tid 1042053] [client 74.248.24.12:37757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-logs.php"] [unique_id "apK97Iv3RhPI65jTFG7kkwAAA5g"]
[Sat Aug 29 05:09:32.591148 2026] [security2:error] [pid 1041789:tid 1041932] [client 20.104.104.62:43353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/ad1.php"] [unique_id "apK97Iv3RhPI65jTFG7klAAAAx8"]
[Sat Aug 29 05:09:32.609828 2026] [security2:error] [pid 1041789:tid 1042017] [client 20.63.81.20:46372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/wp_KwIW0U5F.php"] [unique_id "apK97Iv3RhPI65jTFG7klQAAA3Q"]
[Sat Aug 29 05:09:32.640584 2026] [security2:error] [pid 1041789:tid 1041981] [client 20.104.104.62:41651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/Rk41.php"] [unique_id "apK97Iv3RhPI65jTFG7kmAAAA1A"]
[Sat Aug 29 05:09:32.669857 2026] [security2:error] [pid 1041789:tid 1041949] [client 20.63.81.20:63720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/nz.php"] [unique_id "apK97Iv3RhPI65jTFG7kmwAAAzA"]
[Sat Aug 29 05:09:32.685712 2026] [security2:error] [pid 1041789:tid 1042041] [client 20.63.81.20:40040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK97Iv3RhPI65jTFG7knQAAA4w"]
[Sat Aug 29 05:09:32.689637 2026] [security2:error] [pid 1041789:tid 1042035] [client 20.104.104.62:64674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/mcd.php"] [unique_id "apK97Iv3RhPI65jTFG7koAAAA4Y"]
[Sat Aug 29 05:09:32.689922 2026] [security2:error] [pid 1041789:tid 1042037] [client 45.148.10.62:48498] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.xqk.etg.mybluehost.me"] [uri "/api/.env"] [unique_id "apK97Iv3RhPI65jTFG7kngAAA4g"]
[Sat Aug 29 05:09:32.689994 2026] [security2:error] [pid 1041789:tid 1042038] [client 158.23.147.79:52328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-content/themes/too.php"] [unique_id "apK97Iv3RhPI65jTFG7koQAAA4k"]
[Sat Aug 29 05:09:32.697672 2026] [security2:error] [pid 1041789:tid 1041924] [remote 93.123.109.228:39166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/config/aws.php"] [unique_id "apK97Iv3RhPI65jTFG7kpgADmXo"]
[Sat Aug 29 05:09:32.707580 2026] [security2:error] [pid 1041789:tid 1041827] [remote 93.123.109.228:39166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/config/config.inc.php"] [unique_id "apK97Iv3RhPI65jTFG7kqgADmRk"]
[Sat Aug 29 05:09:32.710443 2026] [security2:error] [pid 1041789:tid 1042050] [client 20.63.81.20:55578] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/inso.php"] [unique_id "apK97Iv3RhPI65jTFG7krAAAA5U"]
[Sat Aug 29 05:09:32.715781 2026] [security2:error] [pid 1041789:tid 1042034] [client 20.48.160.90:50543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/wp-content/uploads/indoex.php"] [unique_id "apK97Iv3RhPI65jTFG7krgAAA4U"]
[Sat Aug 29 05:09:32.729276 2026] [security2:error] [pid 1041789:tid 1041836] [remote 93.123.109.228:39166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/config/config.php"] [unique_id "apK97Iv3RhPI65jTFG7ktAADmSI"]
[Sat Aug 29 05:09:32.738267 2026] [security2:error] [pid 1041789:tid 1042005] [client 20.104.104.62:43111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/1vbqo.php"] [unique_id "apK97Iv3RhPI65jTFG7ktwAAA2g"]
[Sat Aug 29 05:09:32.739233 2026] [security2:error] [pid 1041789:tid 1042040] [client 20.63.81.20:46432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/wp_xiPu52Ut.php"] [unique_id "apK97Iv3RhPI65jTFG7kuAAAA4s"]
[Sat Aug 29 05:09:32.771944 2026] [security2:error] [pid 1041789:tid 1041948] [client 40.83.93.50:10053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/blog.php"] [unique_id "apK97Iv3RhPI65jTFG7kxAAAAy8"]
[Sat Aug 29 05:09:32.777700 2026] [security2:error] [pid 1041789:tid 1041983] [client 20.104.104.62:45985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/7logs.php"] [unique_id "apK97Iv3RhPI65jTFG7kxQAAA1I"]
[Sat Aug 29 05:09:32.786422 2026] [security2:error] [pid 1041789:tid 1042046] [client 158.158.54.35:29700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/av.php"] [unique_id "apK97Iv3RhPI65jTFG7kxwAAA5E"]
[Sat Aug 29 05:09:32.809233 2026] [security2:error] [pid 1041789:tid 1041954] [client 20.63.81.20:63666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/sg.php"] [unique_id "apK97Iv3RhPI65jTFG7kyQAAAzU"]
[Sat Aug 29 05:09:32.819631 2026] [security2:error] [pid 1041789:tid 1042007] [client 20.63.81.20:40045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/ser.php"] [unique_id "apK97Iv3RhPI65jTFG7kygAAA2o"]
[Sat Aug 29 05:09:32.822505 2026] [security2:error] [pid 1041789:tid 1042015] [client 20.104.104.62:43038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/waw.php"] [unique_id "apK97Iv3RhPI65jTFG7kzAAAA3I"]
[Sat Aug 29 05:09:32.826771 2026] [security2:error] [pid 1041789:tid 1041809] [remote 93.123.109.228:39166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/config/env.php"] [unique_id "apK97Iv3RhPI65jTFG7kzgADmQc"]
[Sat Aug 29 05:09:32.843511 2026] [security2:error] [pid 1041789:tid 1041981] [client 45.148.10.62:48498] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.xqk.etg.mybluehost.me"] [uri "/.env.bak"] [unique_id "apK97Iv3RhPI65jTFG7k2QAAA1A"]
[Sat Aug 29 05:09:32.859152 2026] [security2:error] [pid 1041789:tid 1041943] [client 20.48.160.90:50439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK97Iv3RhPI65jTFG7k3gAAAyo"]
[Sat Aug 29 05:09:32.866910 2026] [security2:error] [pid 1041789:tid 1041820] [remote 93.123.109.228:39166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/config/module.config.php"] [unique_id "apK97Iv3RhPI65jTFG7k4QADMBI"]
[Sat Aug 29 05:09:32.868818 2026] [security2:error] [pid 1041789:tid 1041833] [remote 93.123.109.228:39166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/config/nexmo.php"] [unique_id "apK97Iv3RhPI65jTFG7k4wADbR8"]
[Sat Aug 29 05:09:32.870984 2026] [security2:error] [pid 1041789:tid 1041934] [client 20.104.104.62:43093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/h02ugyh.php"] [unique_id "apK97Iv3RhPI65jTFG7k5AAAAyE"]
[Sat Aug 29 05:09:32.884998 2026] [security2:error] [pid 1041789:tid 1042028] [client 20.197.61.180:18218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/GOD.php"] [unique_id "apK97Iv3RhPI65jTFG7k5wAAA38"]
[Sat Aug 29 05:09:32.911068 2026] [security2:error] [pid 1041789:tid 1041970] [client 20.104.104.62:41641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/sf.php"] [unique_id "apK97Iv3RhPI65jTFG7k7AAAA0U"]
[Sat Aug 29 05:09:32.915284 2026] [security2:error] [pid 1041789:tid 1042057] [client 149.34.210.141:43789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK97Iv3RhPI65jTFG7k7wAAA5w"]
[Sat Aug 29 05:09:32.915448 2026] [security2:error] [pid 1041789:tid 1042057] [client 149.34.210.141:43789] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK97Iv3RhPI65jTFG7k7wAAA5w"]
[Sat Aug 29 05:09:32.920453 2026] [security2:error] [pid 1041789:tid 1041840] [remote 93.123.109.228:39166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/config/stripe.php"] [unique_id "apK97Iv3RhPI65jTFG7k8QADbSY"]
[Sat Aug 29 05:09:32.923834 2026] [security2:error] [pid 1041789:tid 1041941] [client 20.63.219.114:18338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/class_api.php"] [unique_id "apK97Iv3RhPI65jTFG7k8gAAAyg"]
[Sat Aug 29 05:09:32.929692 2026] [security2:error] [pid 1041789:tid 1042000] [client 93.123.109.228:45764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/_profiler/phpinfo.php"] [unique_id "apK97Iv3RhPI65jTFG7k9QAAA2M"]
[Sat Aug 29 05:09:32.937279 2026] [security2:error] [pid 1041789:tid 1041961] [client 20.52.41.200:5296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/alfa.php"] [unique_id "apK97Iv3RhPI65jTFG7k9wAAAzw"]
[Sat Aug 29 05:09:32.944245 2026] [security2:error] [pid 1041789:tid 1041991] [client 4.205.62.107:63889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/ammika.php"] [unique_id "apK97Iv3RhPI65jTFG7k-wAAA1o"]
[Sat Aug 29 05:09:32.945859 2026] [security2:error] [pid 1041789:tid 1041956] [client 20.197.61.180:1078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/cookie.php"] [unique_id "apK97Iv3RhPI65jTFG7k_gAAAzc"]
[Sat Aug 29 05:09:32.948001 2026] [security2:error] [pid 1041789:tid 1041976] [client 4.232.148.111:1109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/lite.php"] [unique_id "apK97Iv3RhPI65jTFG7lAgAAA0s"]
[Sat Aug 29 05:09:32.972217 2026] [security2:error] [pid 1041789:tid 1041978] [client 158.23.147.79:6124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/cgi-bin/index.php"] [unique_id "apK97Iv3RhPI65jTFG7lCQAAA00"]
[Sat Aug 29 05:09:32.972443 2026] [security2:error] [pid 1041789:tid 1041967] [client 20.104.104.62:56323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/x23.php"] [unique_id "apK97Iv3RhPI65jTFG7lCgAAA0I"]
[Sat Aug 29 05:09:32.986225 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.104.104.62:20713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/info.php"] [unique_id "apK97Iv3RhPI65jTFG7lDAAAA30"]
[Sat Aug 29 05:09:32.998762 2026] [security2:error] [pid 1041789:tid 1041979] [client 20.48.160.90:50546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/haxor.php"] [unique_id "apK97Iv3RhPI65jTFG7lEgAAA04"]
[Sat Aug 29 05:09:32.999390 2026] [security2:error] [pid 1041789:tid 1041963] [client 20.104.104.62:43383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/shelp.php"] [unique_id "apK97Iv3RhPI65jTFG7lEwAAAz4"]
[Sat Aug 29 05:09:33.018960 2026] [security2:error] [pid 1041789:tid 1042031] [client 93.123.109.228:45744] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/admin-app/.env"] [unique_id "apK97Yv3RhPI65jTFG7lGQAAA4I"]
[Sat Aug 29 05:09:33.029793 2026] [security2:error] [pid 1041789:tid 1041997] [client 4.205.62.107:21587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/drykl.php"] [unique_id "apK97Yv3RhPI65jTFG7lHwAAA2A"]
[Sat Aug 29 05:09:33.041960 2026] [security2:error] [pid 1041789:tid 1042007] [client 20.104.104.62:41626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/super.php"] [unique_id "apK97Yv3RhPI65jTFG7lIgAAA2o"]
[Sat Aug 29 05:09:33.043282 2026] [security2:error] [pid 1041789:tid 1042043] [client 4.232.148.111:14539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/autoload_classmap.php"] [unique_id "apK97Yv3RhPI65jTFG7lIwAAA44"]
[Sat Aug 29 05:09:33.054684 2026] [security2:error] [pid 1041789:tid 1041955] [client 158.23.184.117:64519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/wp-mail.php"] [unique_id "apK97Yv3RhPI65jTFG7lKQAAAzY"]
[Sat Aug 29 05:09:33.077412 2026] [security2:error] [pid 1041789:tid 1041949] [client 169.58.197.254:62790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 254.197.58.169.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.kcactf4.org"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "apK97Yv3RhPI65jTFG7lLgAAAzA"], referer: www.google.com
[Sat Aug 29 05:09:33.106402 2026] [security2:error] [pid 1041789:tid 1042044] [client 74.248.24.12:22415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-admin/css/about.php"] [unique_id "apK97Yv3RhPI65jTFG7lNAAAA48"]
[Sat Aug 29 05:09:33.117522 2026] [security2:error] [pid 1041789:tid 1042038] [client 20.104.104.62:64681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/ws66.php"] [unique_id "apK97Yv3RhPI65jTFG7lNwAAA4k"]
[Sat Aug 29 05:09:33.129450 2026] [security2:error] [pid 1041789:tid 1041950] [client 20.48.160.90:50515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/google.php"] [unique_id "apK97Yv3RhPI65jTFG7lPAAAAzE"]
[Sat Aug 29 05:09:33.140605 2026] [security2:error] [pid 1041789:tid 1041982] [client 20.104.104.62:41940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/13ede.php"] [unique_id "apK97Yv3RhPI65jTFG7lQQAAA1E"]
[Sat Aug 29 05:09:33.146729 2026] [security2:error] [pid 1041789:tid 1041956] [client 4.205.62.107:53413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/php_info.php"] [unique_id "apK97Yv3RhPI65jTFG7lQwAAAzc"]
[Sat Aug 29 05:09:33.148134 2026] [security2:error] [pid 1041789:tid 1041938] [client 158.23.184.117:7168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/wp-admin/about.php"] [unique_id "apK97Yv3RhPI65jTFG7lRQAAAyU"]
[Sat Aug 29 05:09:33.150487 2026] [security2:error] [pid 1041789:tid 1042023] [client 158.23.147.79:11361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/about.php"] [unique_id "apK97Yv3RhPI65jTFG7lRwAAA3o"]
[Sat Aug 29 05:09:33.152606 2026] [security2:error] [pid 1041789:tid 1042052] [client 93.123.109.228:45820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/admin/phpinfo.php"] [unique_id "apK97Yv3RhPI65jTFG7lSQAAA5c"]
[Sat Aug 29 05:09:33.169975 2026] [security2:error] [pid 1041789:tid 1041970] [client 20.104.104.62:22704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/lufix1.php"] [unique_id "apK97Yv3RhPI65jTFG7lUAAAA0U"]
[Sat Aug 29 05:09:33.170011 2026] [security2:error] [pid 1041789:tid 1042001] [client 158.23.184.117:19016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/222.php"] [unique_id "apK97Yv3RhPI65jTFG7lTwAAA2Q"]
[Sat Aug 29 05:09:33.173963 2026] [security2:error] [pid 1041789:tid 1042005] [client 158.23.147.79:62741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/file.php"] [unique_id "apK97Yv3RhPI65jTFG7lVAAAA2g"]
[Sat Aug 29 05:09:33.207228 2026] [security2:error] [pid 1041789:tid 1042033] [client 93.123.109.228:45744] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/administrator/.env"] [unique_id "apK97Yv3RhPI65jTFG7lXgAAA4Q"]
[Sat Aug 29 05:09:33.209324 2026] [security2:error] [pid 1041789:tid 1042011] [client 93.123.109.228:45808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/admin_phpinfo.php"] [unique_id "apK97Yv3RhPI65jTFG7lXwAAA24"]
[Sat Aug 29 05:09:33.215865 2026] [security2:error] [pid 1041789:tid 1042014] [client 68.67.112.111:16627] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "wticalumni.com"] [uri "/robots.txt"] [unique_id "apK97Yv3RhPI65jTFG7lYgAAA3E"]
[Sat Aug 29 05:09:33.218967 2026] [security2:error] [pid 1041789:tid 1042018] [client 78.142.18.40:60547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.18.142.78.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "printingbyjoe.com"] [uri "/wp-login.php"] [unique_id "apK97Yv3RhPI65jTFG7lYQAAA3U"], referer: https://duckduckgo.com/
[Sat Aug 29 05:09:33.226087 2026] [security2:error] [pid 1041789:tid 1042009] [client 93.123.109.228:45868] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/api-backend/.env"] [unique_id "apK97Yv3RhPI65jTFG7lYwAAA2w"]
[Sat Aug 29 05:09:33.235880 2026] [security2:error] [pid 1041789:tid 1042040] [client 93.123.109.228:45846] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/api-node/.env"] [unique_id "apK97Yv3RhPI65jTFG7lZwAAA4s"]
[Sat Aug 29 05:09:33.248770 2026] [security2:error] [pid 1041789:tid 1041997] [client 93.123.109.228:45788] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/api/.env"] [unique_id "apK97Yv3RhPI65jTFG7lawAAA2A"]
[Sat Aug 29 05:09:33.249953 2026] [security2:error] [pid 1041789:tid 1041977] [client 158.23.184.117:38333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/3.php"] [unique_id "apK97Yv3RhPI65jTFG7lbAAAA0w"]
[Sat Aug 29 05:09:33.251897 2026] [security2:error] [pid 1041789:tid 1041987] [client 158.158.54.35:11996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/file.php"] [unique_id "apK97Yv3RhPI65jTFG7lbgAAA1Y"]
[Sat Aug 29 05:09:33.264927 2026] [security2:error] [pid 1041789:tid 1041962] [client 40.83.93.50:17703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/bypass.php"] [unique_id "apK97Yv3RhPI65jTFG7lcwAAAz0"]
[Sat Aug 29 05:09:33.266723 2026] [security2:error] [pid 1041789:tid 1042043] [client 20.104.104.62:4811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/Cok.php"] [unique_id "apK97Yv3RhPI65jTFG7ldAAAA44"]
[Sat Aug 29 05:09:33.270906 2026] [security2:error] [pid 1041789:tid 1041939] [client 20.48.160.90:50522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "apK97Yv3RhPI65jTFG7ldwAAAyY"]
[Sat Aug 29 05:09:33.273689 2026] [security2:error] [pid 1041789:tid 1041944] [client 20.104.104.62:41961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/k8.php"] [unique_id "apK97Yv3RhPI65jTFG7leQAAAys"]
[Sat Aug 29 05:09:33.281788 2026] [security2:error] [pid 1041789:tid 1041969] [client 20.63.219.114:18962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/aksinet.php"] [unique_id "apK97Yv3RhPI65jTFG7lfQAAA0Q"]
[Sat Aug 29 05:09:33.294406 2026] [security2:error] [pid 1041789:tid 1042025] [client 158.23.184.117:7903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/wp-content/backup.php"] [unique_id "apK97Yv3RhPI65jTFG7lfwAAA3w"]
[Sat Aug 29 05:09:33.301938 2026] [security2:error] [pid 1041789:tid 1042051] [client 20.104.104.62:22694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/hack.php"] [unique_id "apK97Yv3RhPI65jTFG7lgQAAA5Y"]
[Sat Aug 29 05:09:33.312619 2026] [security2:error] [pid 1041789:tid 1041909] [remote 93.123.109.228:39364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glamrus.rocks"] [uri "/.env.php"] [unique_id "apK97Yv3RhPI65jTFG7lhwADgWs"]
[Sat Aug 29 05:09:33.316770 2026] [security2:error] [pid 1041789:tid 1041955] [client 158.23.184.117:61680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/24.php"] [unique_id "apK97Yv3RhPI65jTFG7ljQAAAzY"]
[Sat Aug 29 05:09:33.318645 2026] [security2:error] [pid 1041789:tid 1041955] [client 45.148.10.62:48498] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.xqk.etg.mybluehost.me"] [uri "/stripe/.env"] [unique_id "apK97Yv3RhPI65jTFG7ljgAAAzY"]
[Sat Aug 29 05:09:33.367395 2026] [security2:error] [pid 1041789:tid 1042038] [client 158.23.147.79:14290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK97Yv3RhPI65jTFG7lmgAAA4k"]
[Sat Aug 29 05:09:33.386832 2026] [security2:error] [pid 1041789:tid 1041960] [client 93.123.109.228:45846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/api/info.php"] [unique_id "apK97Yv3RhPI65jTFG7lqAAAAzs"]
[Sat Aug 29 05:09:33.392748 2026] [security2:error] [pid 1041789:tid 1041998] [client 20.52.41.200:4551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/403.php"] [unique_id "apK97Yv3RhPI65jTFG7lqwAAA2E"]
[Sat Aug 29 05:09:33.392809 2026] [security2:error] [pid 1041789:tid 1042005] [client 20.104.104.62:20612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/ini.php"] [unique_id "apK97Yv3RhPI65jTFG7lrAAAA2g"]
[Sat Aug 29 05:09:33.397408 2026] [security2:error] [pid 1041789:tid 1042028] [client 158.23.184.117:38313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "apK97Yv3RhPI65jTFG7lrgAAA38"]
[Sat Aug 29 05:09:33.405331 2026] [security2:error] [pid 1041789:tid 1042032] [client 20.104.104.62:57032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/X7T6.php"] [unique_id "apK97Yv3RhPI65jTFG7lsAAAA4M"]
[Sat Aug 29 05:09:33.409524 2026] [security2:error] [pid 1041789:tid 1041972] [client 20.48.160.90:50467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/robots.php"] [unique_id "apK97Yv3RhPI65jTFG7lsQAAA0c"]
[Sat Aug 29 05:09:33.412516 2026] [security2:error] [pid 1041789:tid 1042033] [client 20.104.104.62:43112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/alog.php"] [unique_id "apK97Yv3RhPI65jTFG7lsgAAA4Q"]
[Sat Aug 29 05:09:33.421911 2026] [security2:error] [pid 1041789:tid 1041961] [client 93.123.109.228:45880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/api/phpinfo.php"] [unique_id "apK97Yv3RhPI65jTFG7luAAAAzw"]
[Sat Aug 29 05:09:33.423612 2026] [security2:error] [pid 1041789:tid 1042007] [client 4.232.148.111:27549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/term.php"] [unique_id "apK97Yv3RhPI65jTFG7luQAAA2o"]
[Sat Aug 29 05:09:33.433868 2026] [security2:error] [pid 1041789:tid 1042056] [client 20.104.104.62:22660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/155.php"] [unique_id "apK97Yv3RhPI65jTFG7luwAAA5s"]
[Sat Aug 29 05:09:33.441854 2026] [security2:error] [pid 1041789:tid 1041997] [client 4.205.62.107:26674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/wp-tem.php"] [unique_id "apK97Yv3RhPI65jTFG7lwgAAA2A"]
[Sat Aug 29 05:09:33.444446 2026] [security2:error] [pid 1041789:tid 1042053] [client 158.23.184.117:7435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/.well-known/aa.php"] [unique_id "apK97Yv3RhPI65jTFG7lwwAAA5g"]
[Sat Aug 29 05:09:33.464774 2026] [security2:error] [pid 1041789:tid 1041948] [client 4.205.62.107:6947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/sadd.php"] [unique_id "apK97Yv3RhPI65jTFG7lzAAAAy8"]
[Sat Aug 29 05:09:33.469034 2026] [security2:error] [pid 1041789:tid 1041942] [client 158.23.184.117:61651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/3pjcpmfsd8b.php"] [unique_id "apK97Yv3RhPI65jTFG7lzQAAAyk"]
[Sat Aug 29 05:09:33.482869 2026] [core:alert] [pid 1041789:tid 1041968] [client 66.249.92.204:51507] /home2/dhronnet/public_html/.htaccess: The specified network mask is invalid.
[Sat Aug 29 05:09:33.493374 2026] [security2:error] [pid 1041789:tid 1042013] [client 20.104.49.130:48583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/x1da.php"] [unique_id "apK97Yv3RhPI65jTFG7l1gAAA3A"]
[Sat Aug 29 05:09:33.494001 2026] [security2:error] [pid 1041789:tid 1042025] [client 78.142.18.40:58735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.18.142.78.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "printingbyjoe.com"] [uri "/wp-login.php"] [unique_id "apK97Yv3RhPI65jTFG7l1wAAA3w"], referer: https://www.facebook.com/
[Sat Aug 29 05:09:33.502191 2026] [security2:error] [pid 1041789:tid 1042051] [client 158.23.147.79:38724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK97Yv3RhPI65jTFG7l2QAAA5Y"]
[Sat Aug 29 05:09:33.506019 2026] [http2:warn] [pid 1018003:tid 1018269] [client 57.141.14.38:38056] h2_stream(1018003-201-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:09:33.517704 2026] [security2:error] [pid 1041789:tid 1041931] [client 4.232.148.111:14588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/bi.php"] [unique_id "apK97Yv3RhPI65jTFG7l3AAAAx4"]
[Sat Aug 29 05:09:33.519960 2026] [security2:error] [pid 1041789:tid 1042015] [client 4.205.62.107:58441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/cxc.php"] [unique_id "apK97Yv3RhPI65jTFG7l3gAAA3I"]
[Sat Aug 29 05:09:33.529201 2026] [security2:error] [pid 1041789:tid 1042041] [client 4.205.62.107:62965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/xve22.php"] [unique_id "apK97Yv3RhPI65jTFG7l4gAAA4w"]
[Sat Aug 29 05:09:33.544419 2026] [security2:error] [pid 1041789:tid 1041990] [client 20.48.160.90:50556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/wp-content/plugins/ccx/index.php"] [unique_id "apK97Yv3RhPI65jTFG7l7wAAA1k"]
[Sat Aug 29 05:09:33.556054 2026] [security2:error] [pid 1041789:tid 1042031] [client 20.104.104.62:60699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/adin.php"] [unique_id "apK97Yv3RhPI65jTFG7l8wAAA4I"]
[Sat Aug 29 05:09:33.559982 2026] [security2:error] [pid 1041789:tid 1041992] [client 20.104.104.62:4107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/see.php"] [unique_id "apK97Yv3RhPI65jTFG7l9gAAA1s"]
[Sat Aug 29 05:09:33.568978 2026] [security2:error] [pid 1041789:tid 1041998] [client 20.104.104.62:41609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/mcd.php"] [unique_id "apK97Yv3RhPI65jTFG7l-QAAA2E"]
[Sat Aug 29 05:09:33.591893 2026] [security2:error] [pid 1041789:tid 1042044] [client 158.23.184.117:7175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "apK97Yv3RhPI65jTFG7mBQAAA48"]
[Sat Aug 29 05:09:33.591914 2026] [security2:error] [pid 1041789:tid 1042056] [client 158.23.184.117:53726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/wp-admin/css/admin.php"] [unique_id "apK97Yv3RhPI65jTFG7mBgAAA5s"]
[Sat Aug 29 05:09:33.592429 2026] [security2:error] [pid 1041789:tid 1042009] [client 20.104.49.130:53848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/bthil.php"] [unique_id "apK97Yv3RhPI65jTFG7mBwAAA2w"]
[Sat Aug 29 05:09:33.592768 2026] [cgid:error] [pid 1041789:tid 1041881] [remote 34.138.144.127:46106] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:33.603340 2026] [cgid:error] [pid 1041789:tid 1041876] [remote 34.138.144.127:46106] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:33.610617 2026] [security2:error] [pid 1041789:tid 1042034] [client 20.197.61.180:2037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/ggfi.php"] [unique_id "apK97Yv3RhPI65jTFG7mDQAAA4U"]
[Sat Aug 29 05:09:33.611838 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.104.49.130:53551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pvillusions.com"] [uri "/mac.php"] [unique_id "apK97Yv3RhPI65jTFG7mDwAAA2Q"]
[Sat Aug 29 05:09:33.621393 2026] [security2:error] [pid 1041789:tid 1042025] [client 57.141.14.76:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/cart/"] [unique_id "apK97Yv3RhPI65jTFG7mEQAAA3w"]
[Sat Aug 29 05:09:33.622578 2026] [security2:error] [pid 1041789:tid 1041955] [client 93.123.109.228:45744] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/apis/.env"] [unique_id "apK97Yv3RhPI65jTFG7mEgAAAzY"]
[Sat Aug 29 05:09:33.648390 2026] [security2:error] [pid 1041789:tid 1042024] [client 74.248.24.12:2621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/system_log.php"] [unique_id "apK97Yv3RhPI65jTFG7mGQAAA3s"]
[Sat Aug 29 05:09:33.650068 2026] [security2:error] [pid 1041789:tid 1042011] [client 180.190.5.40:39884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.5.190.180.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK97Yv3RhPI65jTFG7mFwAAA24"]
[Sat Aug 29 05:09:33.650203 2026] [security2:error] [pid 1041789:tid 1042011] [client 180.190.5.40:39884] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK97Yv3RhPI65jTFG7mFwAAA24"]
[Sat Aug 29 05:09:33.653885 2026] [security2:error] [pid 1041789:tid 1041946] [client 4.205.62.107:55967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/pass4.php"] [unique_id "apK97Yv3RhPI65jTFG7mHAAAAy0"]
[Sat Aug 29 05:09:33.664085 2026] [security2:error] [pid 1041789:tid 1041949] [client 20.63.219.114:18979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/alfa-rex1.php"] [unique_id "apK97Yv3RhPI65jTFG7mIQAAAzA"]
[Sat Aug 29 05:09:33.679097 2026] [security2:error] [pid 1041789:tid 1042006] [client 20.48.160.90:45380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/wp-admin/css/colors/maro.php"] [unique_id "apK97Yv3RhPI65jTFG7mJwAAA2k"]
[Sat Aug 29 05:09:33.682927 2026] [cgid:error] [pid 1041789:tid 1041865] [remote 34.138.144.127:46106] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:33.683497 2026] [security2:error] [pid 1041789:tid 1042019] [client 20.197.61.180:9555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/NewFile.php"] [unique_id "apK97Yv3RhPI65jTFG7mNQAAA3Y"]
[Sat Aug 29 05:09:33.700975 2026] [security2:error] [pid 1041789:tid 1041988] [client 20.104.104.62:4826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/horeg.php"] [unique_id "apK97Yv3RhPI65jTFG7mOQAAA1c"]
[Sat Aug 29 05:09:33.704065 2026] [security2:error] [pid 1041789:tid 1041995] [client 20.104.104.62:60707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/sf9.php"] [unique_id "apK97Yv3RhPI65jTFG7mOwAAA14"]
[Sat Aug 29 05:09:33.708033 2026] [security2:error] [pid 1041789:tid 1042042] [client 20.104.104.62:45955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/waw.php"] [unique_id "apK97Yv3RhPI65jTFG7mPAAAA40"]
[Sat Aug 29 05:09:33.712344 2026] [security2:error] [pid 1041789:tid 1041957] [client 158.23.147.79:17607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/cong.php"] [unique_id "apK97Yv3RhPI65jTFG7mPgAAAzg"]
[Sat Aug 29 05:09:33.717020 2026] [security2:error] [pid 1041789:tid 1042031] [client 158.158.54.35:31985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK97Yv3RhPI65jTFG7mRAAAA4I"]
[Sat Aug 29 05:09:33.717656 2026] [security2:error] [pid 1041789:tid 1041969] [client 60.243.207.176:58382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK97Yv3RhPI65jTFG7mRQAAA0Q"]
[Sat Aug 29 05:09:33.717757 2026] [security2:error] [pid 1041789:tid 1041969] [client 60.243.207.176:58382] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK97Yv3RhPI65jTFG7mRQAAA0Q"]
[Sat Aug 29 05:09:33.722137 2026] [security2:error] [pid 1041789:tid 1041938] [client 93.123.109.228:45750] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/app/.env"] [unique_id "apK97Yv3RhPI65jTFG7mSAAAAyU"]
[Sat Aug 29 05:09:33.739754 2026] [security2:error] [pid 1041789:tid 1041923] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(\\\\/\\\\*\\\\!? ?(?:select|grant|delete|insert|drop|alter|replace|truncate|update|create|rename|describe|union|concat|group_concat))" at REQUEST_FILENAME. [file "/opt/mod_security/hg_rules.conf"] [line "1019"] [id "9000042"] [rev "2.2.2"] [msg "SQL Comment Sequence Detected."] [data "/*update"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/*update.cgi*"] [unique_id "apK97Yv3RhPI65jTFG7mUQADR3k"]
[Sat Aug 29 05:09:33.739995 2026] [security2:error] [pid 1041789:tid 1041911] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK97Yv3RhPI65jTFG7mTwADR20"]
[Sat Aug 29 05:09:33.741464 2026] [cgid:error] [pid 1041789:tid 1041901] [remote 34.138.144.127:46106] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:33.741810 2026] [security2:error] [pid 1041789:tid 1041916] [remote 34.138.144.127:46106] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "www.studiopasa.com"] [uri "/wp-config.php~"] [unique_id "apK97Yv3RhPI65jTFG7mXwADTnI"]
[Sat Aug 29 05:09:33.741927 2026] [security2:error] [pid 1041789:tid 1041909] [remote 34.138.144.127:46106] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "www.studiopasa.com"] [uri "/wp-config.php.swp"] [unique_id "apK97Yv3RhPI65jTFG7mYQADTms"]
[Sat Aug 29 05:09:33.744567 2026] [cgid:error] [pid 1041789:tid 1041839] [remote 34.138.144.127:46106] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:33.745384 2026] [cgid:error] [pid 1041789:tid 1041923] [remote 34.138.144.127:46106] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:33.746283 2026] [security2:error] [pid 1041789:tid 1041879] [remote 34.138.144.127:46106] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/wp-config.old"] [unique_id "apK97Yv3RhPI65jTFG7mYAADTk0"]
[Sat Aug 29 05:09:33.747236 2026] [core:error] [pid 1041789:tid 1041906] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:33.747259 2026] [core:error] [pid 1041789:tid 1041906] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:33.748959 2026] [cgid:error] [pid 1041789:tid 1041920] [remote 34.138.144.127:46106] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:33.751016 2026] [security2:error] [pid 1041789:tid 1041963] [client 40.83.93.50:14480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/extractable-loader-head.php"] [unique_id "apK97Yv3RhPI65jTFG7mawAAAz4"]
[Sat Aug 29 05:09:33.760697 2026] [security2:error] [pid 1041789:tid 1041931] [client 35.221.212.112:49426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.212.221.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.beraluzarchive.org"] [uri "/pi.php"] [unique_id "apK97Yv3RhPI65jTFG7mdAAAAx4"]
[Sat Aug 29 05:09:33.761267 2026] [security2:error] [pid 1041789:tid 1042025] [client 35.221.212.112:49420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.212.221.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.beraluzarchive.org"] [uri "/i.php"] [unique_id "apK97Yv3RhPI65jTFG7mdQAAA3w"]
[Sat Aug 29 05:09:33.763969 2026] [core:error] [pid 1041789:tid 1042051] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:33.763988 2026] [core:error] [pid 1041789:tid 1042051] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:33.771969 2026] [core:error] [pid 1041789:tid 1042047] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:33.771989 2026] [core:error] [pid 1041789:tid 1042047] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:33.772519 2026] [core:error] [pid 1041789:tid 1042000] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:33.772549 2026] [core:error] [pid 1041789:tid 1042000] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:33.773118 2026] [core:error] [pid 1041789:tid 1042041] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:33.773131 2026] [core:error] [pid 1041789:tid 1042041] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:33.774988 2026] [core:error] [pid 1041789:tid 1041983] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:33.775005 2026] [core:error] [pid 1041789:tid 1041983] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:33.785062 2026] [security2:error] [pid 1041789:tid 1041936] [client 20.104.104.62:64730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/help.php"] [unique_id "apK97Yv3RhPI65jTFG7miwAAAyM"]
[Sat Aug 29 05:09:33.790887 2026] [security2:error] [pid 1041789:tid 1041988] [client 158.23.147.79:52333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/radio.php"] [unique_id "apK97Yv3RhPI65jTFG7mjwAAA1c"]
[Sat Aug 29 05:09:33.801667 2026] [security2:error] [pid 1041789:tid 1041824] [remote 93.123.109.228:39166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/info.php"] [unique_id "apK97Yv3RhPI65jTFG7mkQADNRY"]
[Sat Aug 29 05:09:33.819404 2026] [security2:error] [pid 1041789:tid 1042042] [client 20.48.160.90:50484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/wp-admin/css/colors/coffee/marijuana.php"] [unique_id "apK97Yv3RhPI65jTFG7mlAAAA40"]
[Sat Aug 29 05:09:33.842242 2026] [security2:error] [pid 1041789:tid 1042005] [client 20.104.104.62:41624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/x23.php"] [unique_id "apK97Yv3RhPI65jTFG7moAAAA2g"]
[Sat Aug 29 05:09:33.844176 2026] [security2:error] [pid 1041789:tid 1042033] [client 20.104.104.62:42849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/lte7.php"] [unique_id "apK97Yv3RhPI65jTFG7mogAAA4Q"]
[Sat Aug 29 05:09:33.845608 2026] [security2:error] [pid 1041789:tid 1042005] [client 20.104.104.62:56356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/basic.php"] [unique_id "apK97Yv3RhPI65jTFG7mpAAAA2g"]
[Sat Aug 29 05:09:33.846370 2026] [security2:error] [pid 1041789:tid 1041828] [remote 93.123.109.228:39166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/infophp.php"] [unique_id "apK97Yv3RhPI65jTFG7mpQADNRo"]
[Sat Aug 29 05:09:33.850086 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.52.41.200:5265] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.strangeworxproductions.com"] [uri "/1.php"] [unique_id "apK97Yv3RhPI65jTFG7mpgAAA30"]
[Sat Aug 29 05:09:33.850202 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.52.41.200:5265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/1.php"] [unique_id "apK97Yv3RhPI65jTFG7mpgAAA30"]
[Sat Aug 29 05:09:33.854009 2026] [security2:error] [pid 1041789:tid 1041833] [remote 93.123.109.228:39166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/infos.php"] [unique_id "apK97Yv3RhPI65jTFG7mqAADNR8"]
[Sat Aug 29 05:09:33.879212 2026] [security2:error] [pid 1041789:tid 1041918] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK97Yv3RhPI65jTFG7mtwADJnQ"]
[Sat Aug 29 05:09:33.885409 2026] [cgid:error] [pid 1041789:tid 1041918] [remote 34.138.144.127:46106] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:33.893489 2026] [security2:error] [pid 1041789:tid 1042034] [client 35.221.212.112:49474] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "autodiscover.beraluzarchive.org"] [uri "/.env~"] [unique_id "apK97Yv3RhPI65jTFG7mygAAA4U"]
[Sat Aug 29 05:09:33.902551 2026] [cgid:error] [pid 1041789:tid 1041921] [remote 34.138.144.127:46106] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:33.908444 2026] [security2:error] [pid 1041789:tid 1041829] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/.env"] [unique_id "apK97Yv3RhPI65jTFG7mxQADJhs"]
[Sat Aug 29 05:09:33.909388 2026] [security2:error] [pid 1041789:tid 1041956] [client 4.232.148.111:11220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/config.php"] [unique_id "apK97Yv3RhPI65jTFG7m0gAAAzc"]
[Sat Aug 29 05:09:33.915630 2026] [security2:error] [pid 1041789:tid 1042011] [client 35.221.212.112:49490] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/_next/.env"] [unique_id "apK97Yv3RhPI65jTFG7m0wAAA24"]
[Sat Aug 29 05:09:33.915823 2026] [security2:error] [pid 1041789:tid 1042011] [client 35.221.212.112:49490] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "autodiscover.beraluzarchive.org"] [uri "/_next/.env"] [unique_id "apK97Yv3RhPI65jTFG7m0wAAA24"]
[Sat Aug 29 05:09:33.935296 2026] [security2:error] [pid 1041789:tid 1042010] [client 35.221.212.112:49496] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.bash_history"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/.bash_history"] [unique_id "apK97Yv3RhPI65jTFG7m5AAAA20"]
[Sat Aug 29 05:09:33.937953 2026] [core:error] [pid 1041789:tid 1042006] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:33.937975 2026] [core:error] [pid 1041789:tid 1042006] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:33.941887 2026] [core:error] [pid 1041789:tid 1041834] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:33.941909 2026] [core:error] [pid 1041789:tid 1041834] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:33.951952 2026] [core:error] [pid 1041789:tid 1041936] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:33.951974 2026] [core:error] [pid 1041789:tid 1041936] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:33.958934 2026] [core:error] [pid 1041789:tid 1041949] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:33.958953 2026] [core:error] [pid 1041789:tid 1041949] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:33.964976 2026] [core:error] [pid 1041789:tid 1042011] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:33.964998 2026] [core:error] [pid 1041789:tid 1042011] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:33.970952 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.48.160.90:50453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/wp-admin/css/colors/coffee/mari.php"] [unique_id "apK97Yv3RhPI65jTFG7m-AAAA30"]
[Sat Aug 29 05:09:33.971561 2026] [core:error] [pid 1041789:tid 1041988] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:33.971583 2026] [core:error] [pid 1041789:tid 1041988] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:33.973718 2026] [core:error] [pid 1041789:tid 1041990] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:33.973735 2026] [core:error] [pid 1041789:tid 1041990] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:33.975689 2026] [core:error] [pid 1041789:tid 1041997] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:33.975710 2026] [core:error] [pid 1041789:tid 1041997] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:33.977087 2026] [security2:error] [pid 1041789:tid 1041955] [client 20.104.104.62:43108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/tanjiro.php"] [unique_id "apK97Yv3RhPI65jTFG7m-QAAAzY"]
[Sat Aug 29 05:09:33.977898 2026] [security2:error] [pid 1041789:tid 1042027] [client 20.104.104.62:22687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/ws66.php"] [unique_id "apK97Yv3RhPI65jTFG7m-wAAA34"]
[Sat Aug 29 05:09:33.979586 2026] [security2:error] [pid 1041789:tid 1041945] [client 35.221.212.112:49524] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/.env"] [unique_id "apK97Yv3RhPI65jTFG7m-gAAAyw"]
[Sat Aug 29 05:09:33.983671 2026] [cgid:error] [pid 1041789:tid 1041886] [remote 34.138.144.127:46106] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:33.983891 2026] [cgid:error] [pid 1041789:tid 1041856] [remote 34.138.144.127:46106] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:33.983961 2026] [cgid:error] [pid 1041789:tid 1041815] [remote 34.138.144.127:46106] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:33.984368 2026] [security2:error] [pid 1041789:tid 1041940] [client 20.220.204.93:52255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK97Yv3RhPI65jTFG7nBgAAAyc"]
[Sat Aug 29 05:09:33.984756 2026] [cgid:error] [pid 1041789:tid 1041884] [remote 34.138.144.127:46106] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:33.984811 2026] [cgid:error] [pid 1041789:tid 1041862] [remote 34.138.144.127:46106] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml, referer: https://www.studiopasa.com
[Sat Aug 29 05:09:33.984919 2026] [cgid:error] [pid 1041789:tid 1041865] [remote 34.138.144.127:46106] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:33.984956 2026] [cgid:error] [pid 1041789:tid 1041845] [remote 34.138.144.127:46106] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:33.986118 2026] [security2:error] [pid 1041789:tid 1041954] [client 45.148.10.62:48498] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.xqk.etg.mybluehost.me"] [uri "/backend/.env"] [unique_id "apK97Yv3RhPI65jTFG7nAgAAAzU"]
[Sat Aug 29 05:09:33.987388 2026] [security2:error] [pid 1041789:tid 1042020] [client 4.232.148.111:17938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/cc.php"] [unique_id "apK97Yv3RhPI65jTFG7nBwAAA3c"]
[Sat Aug 29 05:09:33.988383 2026] [core:error] [pid 1041789:tid 1042054] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:33.988395 2026] [core:error] [pid 1041789:tid 1042054] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.014547 2026] [security2:error] [pid 1041789:tid 1041975] [client 20.104.104.62:56325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/monso.php"] [unique_id "apK97ov3RhPI65jTFG7nDAAAA0o"]
[Sat Aug 29 05:09:34.062243 2026] [security2:error] [pid 1041789:tid 1042049] [client 93.123.109.228:45862] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/application/.env"] [unique_id "apK97ov3RhPI65jTFG7nGgAAA5Q"]
[Sat Aug 29 05:09:34.079427 2026] [core:error] [pid 1041789:tid 1041964] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.079448 2026] [core:error] [pid 1041789:tid 1041964] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.080570 2026] [security2:error] [pid 1041789:tid 1042056] [client 4.205.62.107:63966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/broadcasting.php"] [unique_id "apK97ov3RhPI65jTFG7nHgAAA5s"]
[Sat Aug 29 05:09:34.080670 2026] [security2:error] [pid 1041789:tid 1041969] [client 93.123.109.228:45770] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/apps/.env"] [unique_id "apK97ov3RhPI65jTFG7nHQAAA0Q"]
[Sat Aug 29 05:09:34.083775 2026] [security2:error] [pid 1041789:tid 1041949] [client 158.23.147.79:5930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK97ov3RhPI65jTFG7nHwAAAzA"]
[Sat Aug 29 05:09:34.099215 2026] [security2:error] [pid 1041789:tid 1041991] [client 20.63.219.114:18993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/headerg.php"] [unique_id "apK97ov3RhPI65jTFG7nIgAAA1o"]
[Sat Aug 29 05:09:34.111317 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.104.104.62:41638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/Cok.php"] [unique_id "apK97ov3RhPI65jTFG7nJwAAA30"]
[Sat Aug 29 05:09:34.112499 2026] [security2:error] [pid 1041789:tid 1041946] [client 20.104.104.62:41983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/Rk41.php"] [unique_id "apK97ov3RhPI65jTFG7nKAAAAy0"]
[Sat Aug 29 05:09:34.132707 2026] [security2:error] [pid 1041789:tid 1041963] [client 20.48.160.90:50458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/wp-includes/images/crystal/option.php"] [unique_id "apK97ov3RhPI65jTFG7nKgAAAz4"]
[Sat Aug 29 05:09:34.137938 2026] [security2:error] [pid 1041789:tid 1042027] [client 45.148.10.62:48498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xqk.etg.mybluehost.me"] [uri "/test.php"] [unique_id "apK97ov3RhPI65jTFG7nLwAAA34"]
[Sat Aug 29 05:09:34.150017 2026] [security2:error] [pid 1041789:tid 1041940] [client 20.104.104.62:4843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/rce.php"] [unique_id "apK97ov3RhPI65jTFG7nOwAAAyc"]
[Sat Aug 29 05:09:34.152280 2026] [security2:error] [pid 1041789:tid 1041961] [client 74.248.24.12:2704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/24.php"] [unique_id "apK97ov3RhPI65jTFG7nPAAAAzw"]
[Sat Aug 29 05:09:34.153763 2026] [security2:error] [pid 1041789:tid 1041954] [client 20.220.204.93:52310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK97ov3RhPI65jTFG7nPgAAAzU"]
[Sat Aug 29 05:09:34.173658 2026] [security2:error] [pid 1041789:tid 1042046] [client 4.205.62.107:21890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/rpk.php"] [unique_id "apK97ov3RhPI65jTFG7nRAAAA5E"]
[Sat Aug 29 05:09:34.189060 2026] [security2:error] [pid 1041789:tid 1041972] [client 158.158.54.35:29732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/gmo.php"] [unique_id "apK97ov3RhPI65jTFG7nSAAAA0c"]
[Sat Aug 29 05:09:34.196135 2026] [security2:error] [pid 1041789:tid 1042055] [client 111.235.68.106:31917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK97ov3RhPI65jTFG7nRwAAA5o"]
[Sat Aug 29 05:09:34.196550 2026] [security2:error] [pid 1041789:tid 1042055] [client 111.235.68.106:31917] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK97ov3RhPI65jTFG7nRwAAA5o"]
[Sat Aug 29 05:09:34.230958 2026] [security2:error] [pid 1041789:tid 1042042] [client 40.83.93.50:17670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/defaults.php"] [unique_id "apK97ov3RhPI65jTFG7nUgAAA40"]
[Sat Aug 29 05:09:34.234663 2026] [security2:error] [pid 1041789:tid 1041870] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/laravel/app/.env"] [unique_id "apK97ov3RhPI65jTFG7nUwADaUQ"]
[Sat Aug 29 05:09:34.242955 2026] [security2:error] [pid 1041789:tid 1041927] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK97ov3RhPI65jTFG7nWQADaX0"]
[Sat Aug 29 05:09:34.244075 2026] [core:error] [pid 1041789:tid 1041898] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.244097 2026] [core:error] [pid 1041789:tid 1041898] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.246803 2026] [security2:error] [pid 1041789:tid 1041936] [client 20.104.104.62:22717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/X7T6.php"] [unique_id "apK97ov3RhPI65jTFG7nXgAAAyM"]
[Sat Aug 29 05:09:34.250128 2026] [security2:error] [pid 1041789:tid 1041807] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/.env.bak"] [unique_id "apK97ov3RhPI65jTFG7nWwADaQU"]
[Sat Aug 29 05:09:34.252331 2026] [security2:error] [pid 1041789:tid 1041833] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/.env.backup"] [unique_id "apK97ov3RhPI65jTFG7nYwADaR8"]
[Sat Aug 29 05:09:34.260042 2026] [security2:error] [pid 1041789:tid 1041960] [client 20.104.104.62:43361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/7logs.php"] [unique_id "apK97ov3RhPI65jTFG7nbAAAAzs"]
[Sat Aug 29 05:09:34.260963 2026] [security2:error] [pid 1041789:tid 1041894] [remote 93.123.109.228:55834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyer.com"] [uri "/.env.php"] [unique_id "apK97ov3RhPI65jTFG7nbwADIVw"]
[Sat Aug 29 05:09:34.265531 2026] [security2:error] [pid 1041789:tid 1042056] [client 20.48.160.90:50436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/wp-includes/pomo/xxx.php"] [unique_id "apK97ov3RhPI65jTFG7ndQAAA5s"]
[Sat Aug 29 05:09:34.280145 2026] [core:error] [pid 1041789:tid 1042050] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.280167 2026] [core:error] [pid 1041789:tid 1042050] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.280333 2026] [core:error] [pid 1041789:tid 1042009] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.280346 2026] [core:error] [pid 1041789:tid 1042009] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.288990 2026] [core:error] [pid 1041789:tid 1042040] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.289012 2026] [core:error] [pid 1041789:tid 1042040] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.291426 2026] [security2:error] [pid 1041789:tid 1041951] [client 20.104.49.130:57715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/x1da.php"] [unique_id "apK97ov3RhPI65jTFG7nfQAAAzI"]
[Sat Aug 29 05:09:34.292016 2026] [security2:error] [pid 1041789:tid 1041968] [client 20.104.104.62:4810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/exec.php"] [unique_id "apK97ov3RhPI65jTFG7nfgAAA0M"]
403 (Forbidden): 403 Forbidden
Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Sat Aug 29 05:09:34.293715 2026] [core:error] [pid 1041789:tid 1041962] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.293728 2026] [core:error] [pid 1041789:tid 1041962] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.300558 2026] [security2:error] [pid 1041789:tid 1041941] [client 4.205.62.107:53409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/broadcasting.php"] [unique_id "apK97ov3RhPI65jTFG7ngwAAAyg"]
[Sat Aug 29 05:09:34.302088 2026] [security2:error] [pid 1041789:tid 1041982] [client 20.220.204.93:50705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/ff1.php"] [unique_id "apK97ov3RhPI65jTFG7nhAAAA1E"]
[Sat Aug 29 05:09:34.305675 2026] [security2:error] [pid 1041789:tid 1041965] [client 158.23.147.79:11299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK97ov3RhPI65jTFG7nhwAAA0A"]
[Sat Aug 29 05:09:34.322099 2026] [security2:error] [pid 1041789:tid 1041992] [client 202.71.25.11:57873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.25.71.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK97ov3RhPI65jTFG7njAAAA1s"]
[Sat Aug 29 05:09:34.322234 2026] [security2:error] [pid 1041789:tid 1041992] [client 202.71.25.11:57873] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK97ov3RhPI65jTFG7njAAAA1s"]
[Sat Aug 29 05:09:34.330009 2026] [security2:error] [pid 1041789:tid 1042044] [client 20.197.61.180:2012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/alfa-rex.php"] [unique_id "apK97ov3RhPI65jTFG7njQAAA48"]
[Sat Aug 29 05:09:34.330546 2026] [security2:error] [pid 1041789:tid 1041940] [client 20.104.104.62:20685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/high.php"] [unique_id "apK97ov3RhPI65jTFG7njgAAAyc"]
[Sat Aug 29 05:09:34.332264 2026] [core:error] [pid 1041789:tid 1042017] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.332285 2026] [core:error] [pid 1041789:tid 1042017] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.334802 2026] [core:error] [pid 1041789:tid 1041946] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.334822 2026] [core:error] [pid 1041789:tid 1041946] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.336361 2026] [core:error] [pid 1041789:tid 1041997] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.336384 2026] [core:error] [pid 1041789:tid 1041997] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.337120 2026] [core:error] [pid 1041789:tid 1042027] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.337134 2026] [core:error] [pid 1041789:tid 1042027] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.343178 2026] [core:error] [pid 1041789:tid 1041945] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.343201 2026] [core:error] [pid 1041789:tid 1041945] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.377414 2026] [security2:error] [pid 1041789:tid 1041951] [client 20.104.104.62:41627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/see.php"] [unique_id "apK97ov3RhPI65jTFG7nnwAAAzI"]
[Sat Aug 29 05:09:34.386366 2026] [security2:error] [pid 1041789:tid 1042029] [client 4.232.148.111:11263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK97ov3RhPI65jTFG7nogAAA4A"]
[Sat Aug 29 05:09:34.392742 2026] [security2:error] [pid 1041789:tid 1042032] [client 20.104.104.62:41928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/sf.php"] [unique_id "apK97ov3RhPI65jTFG7npAAAA4M"]
[Sat Aug 29 05:09:34.403856 2026] [security2:error] [pid 1041789:tid 1041935] [client 20.48.160.90:50478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/650.php"] [unique_id "apK97ov3RhPI65jTFG7nqAAAAyI"]
[Sat Aug 29 05:09:34.419155 2026] [security2:error] [pid 1041789:tid 1042000] [client 20.104.104.62:4105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/dbc.php"] [unique_id "apK97ov3RhPI65jTFG7nsgAAA2M"]
[Sat Aug 29 05:09:34.455287 2026] [security2:error] [pid 1041789:tid 1042057] [client 20.220.204.93:50694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/t.php"] [unique_id "apK97ov3RhPI65jTFG7nvgAAA5w"]
[Sat Aug 29 05:09:34.455666 2026] [security2:error] [pid 1041789:tid 1041947] [client 20.63.219.114:1343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/meta.php"] [unique_id "apK97ov3RhPI65jTFG7nvwAAAy4"]
[Sat Aug 29 05:09:34.461862 2026] [security2:error] [pid 1041789:tid 1041983] [client 20.197.61.180:1248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/config.php"] [unique_id "apK97ov3RhPI65jTFG7nwAAAA1I"]
[Sat Aug 29 05:09:34.463046 2026] [security2:error] [pid 1041789:tid 1041982] [client 4.232.148.111:21482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/files/index.php"] [unique_id "apK97ov3RhPI65jTFG7nwQAAA1E"]
[Sat Aug 29 05:09:34.470373 2026] [security2:error] [pid 1041789:tid 1041987] [client 20.52.41.200:5271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/s.php"] [unique_id "apK97ov3RhPI65jTFG7nxAAAA1Y"]
[Sat Aug 29 05:09:34.477320 2026] [cgid:error] [pid 1041789:tid 1041855] [remote 34.138.144.127:46106] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:34.479689 2026] [cgid:error] [pid 1041789:tid 1041853] [remote 74.7.228.53:59854] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/protypeg/public_html/xyzece/404.shtml
[Sat Aug 29 05:09:34.480027 2026] [security2:error] [pid 1041789:tid 1041963] [client 74.7.228.53:59854] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.xyzece.com"] [uri "/404.shtml"] [unique_id "apK97ov3RhPI65jTFG7nxgADPjM"]
[Sat Aug 29 05:09:34.486917 2026] [security2:error] [pid 1041789:tid 1042011] [client 158.23.147.79:14273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK97ov3RhPI65jTFG7nxwAAA24"]
[Sat Aug 29 05:09:34.516223 2026] [security2:error] [pid 1041789:tid 1041932] [client 20.104.104.62:22716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/horeg.php"] [unique_id "apK97ov3RhPI65jTFG7n0gAAAx8"]
[Sat Aug 29 05:09:34.518658 2026] [security2:error] [pid 1041789:tid 1041837] [remote 93.123.109.228:39364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glamrus.rocks"] [uri "/.wp-config.php.swp"] [unique_id "apK97ov3RhPI65jTFG7n1AADYSM"]
[Sat Aug 29 05:09:34.534381 2026] [security2:error] [pid 1041789:tid 1042048] [client 20.104.104.62:43344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/super.php"] [unique_id "apK97ov3RhPI65jTFG7n2gAAA5M"]
[Sat Aug 29 05:09:34.538969 2026] [cgid:error] [pid 1041789:tid 1041844] [remote 34.138.144.127:46106] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:34.545777 2026] [core:error] [pid 1041789:tid 1042042] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.545791 2026] [security2:error] [pid 1041789:tid 1041990] [client 20.48.160.90:50501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/nakrip.php"] [unique_id "apK97ov3RhPI65jTFG7n4wAAA1k"]
[Sat Aug 29 05:09:34.545801 2026] [core:error] [pid 1041789:tid 1042042] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.546126 2026] [security2:error] [pid 1041789:tid 1041901] [remote 93.123.109.228:39292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmsproductions.com"] [uri "/.wp-config.php.swp"] [unique_id "apK97ov3RhPI65jTFG7n5AADdWM"]
[Sat Aug 29 05:09:34.554219 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.104.104.62:56367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/wp-wlx.php"] [unique_id "apK97ov3RhPI65jTFG7n5gAAA3o"]
[Sat Aug 29 05:09:34.564170 2026] [core:error] [pid 1041789:tid 1041936] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.564190 2026] [core:error] [pid 1041789:tid 1041936] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.579559 2026] [security2:error] [pid 1041789:tid 1042029] [client 4.205.62.107:25878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/txets.php"] [unique_id "apK97ov3RhPI65jTFG7n7AAAA4A"]
[Sat Aug 29 05:09:34.598447 2026] [cgid:error] [pid 1041789:tid 1041849] [remote 34.138.144.127:46106] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml, referer: https://www.studiopasa.com
[Sat Aug 29 05:09:34.602131 2026] [security2:error] [pid 1041789:tid 1041879] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/.env.php"] [unique_id "apK97ov3RhPI65jTFG7n9wADPE0"]
[Sat Aug 29 05:09:34.603160 2026] [security2:error] [pid 1041789:tid 1041880] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/.env.old"] [unique_id "apK97ov3RhPI65jTFG7n9AADPE4"]
[Sat Aug 29 05:09:34.610235 2026] [security2:error] [pid 1041789:tid 1041969] [client 4.205.62.107:6880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/application.config.php"] [unique_id "apK97ov3RhPI65jTFG7n_QAAA0Q"]
[Sat Aug 29 05:09:34.614629 2026] [security2:error] [pid 1041789:tid 1042006] [client 158.23.147.79:63005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/file.php"] [unique_id "apK97ov3RhPI65jTFG7oBAAAA2k"]
[Sat Aug 29 05:09:34.618292 2026] [security2:error] [pid 1041789:tid 1041841] [remote 34.138.144.127:46106] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "www.studiopasa.com"] [uri "/static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ"] [unique_id "apK97ov3RhPI65jTFG7oBwADjCc"]
[Sat Aug 29 05:09:34.622248 2026] [security2:error] [pid 1041789:tid 1042042] [client 20.104.18.15:45979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/mosty.php"] [unique_id "apK97ov3RhPI65jTFG7oDgAAA40"]
[Sat Aug 29 05:09:34.622670 2026] [security2:error] [pid 1041789:tid 1042025] [client 158.23.184.117:61635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "docpepper.com"] [uri "/403.php"] [unique_id "apK97ov3RhPI65jTFG7oDwAAA3w"]
[Sat Aug 29 05:09:34.646963 2026] [security2:error] [pid 1041789:tid 1042033] [client 158.158.54.35:18942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/classwithtostring.php"] [unique_id "apK97ov3RhPI65jTFG7oFwAAA4Q"]
[Sat Aug 29 05:09:34.648372 2026] [security2:error] [pid 1041789:tid 1041949] [client 20.104.104.62:45984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/basic.php"] [unique_id "apK97ov3RhPI65jTFG7oGQAAAzA"]
[Sat Aug 29 05:09:34.651690 2026] [core:error] [pid 1041789:tid 1041971] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.651706 2026] [core:error] [pid 1041789:tid 1041971] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.651920 2026] [core:error] [pid 1041789:tid 1042049] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.651933 2026] [core:error] [pid 1041789:tid 1042049] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.652906 2026] [security2:error] [pid 1041789:tid 1041892] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/.env.swp"] [unique_id "apK97ov3RhPI65jTFG7oGwADPFo"]
[Sat Aug 29 05:09:34.655384 2026] [core:error] [pid 1041789:tid 1042040] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.655401 2026] [core:error] [pid 1041789:tid 1042040] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.659182 2026] [core:error] [pid 1041789:tid 1042033] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.659202 2026] [core:error] [pid 1041789:tid 1042033] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.661201 2026] [core:error] [pid 1041789:tid 1041962] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.661218 2026] [core:error] [pid 1041789:tid 1041962] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.661787 2026] [security2:error] [pid 1041789:tid 1042040] [client 4.205.62.107:51406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/gjm.php"] [unique_id "apK97ov3RhPI65jTFG7oIwAAA4s"]
[Sat Aug 29 05:09:34.664803 2026] [core:error] [pid 1041789:tid 1041945] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.664819 2026] [core:error] [pid 1041789:tid 1041945] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.667682 2026] [core:error] [pid 1041789:tid 1041950] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.667699 2026] [core:error] [pid 1041789:tid 1041950] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.674049 2026] [security2:error] [pid 1041789:tid 1041970] [client 20.220.204.93:50688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/erty.php"] [unique_id "apK97ov3RhPI65jTFG7oKQAAA0U"]
[Sat Aug 29 05:09:34.674060 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.104.104.62:43375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/lufix1.php"] [unique_id "apK97ov3RhPI65jTFG7oKwAAA30"]
[Sat Aug 29 05:09:34.676521 2026] [security2:error] [pid 1041789:tid 1041970] [client 20.48.160.90:50455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/wp-includes/interactivity-api/flower.php"] [unique_id "apK97ov3RhPI65jTFG7oLgAAA0U"]
[Sat Aug 29 05:09:34.685503 2026] [security2:error] [pid 1041789:tid 1042057] [client 4.205.62.107:62725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/06.php"] [unique_id "apK97ov3RhPI65jTFG7oMQAAA5w"]
[Sat Aug 29 05:09:34.691607 2026] [security2:error] [pid 1041789:tid 1042052] [client 20.104.18.15:41868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/h.php"] [unique_id "apK97ov3RhPI65jTFG7oOgAAA5c"]
[Sat Aug 29 05:09:34.698698 2026] [core:error] [pid 1041789:tid 1041988] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.698716 2026] [core:error] [pid 1041789:tid 1041988] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.705131 2026] [security2:error] [pid 1041789:tid 1042055] [client 20.104.104.62:4157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/attack.php"] [unique_id "apK97ov3RhPI65jTFG7oRAAAA5o"]
[Sat Aug 29 05:09:34.708149 2026] [security2:error] [pid 1041789:tid 1041804] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/.env~"] [unique_id "apK97ov3RhPI65jTFG7oRgADPAI"]
[Sat Aug 29 05:09:34.717845 2026] [security2:error] [pid 1041789:tid 1042041] [client 20.104.18.15:15276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/goods.php"] [unique_id "apK97ov3RhPI65jTFG7oTQAAA4w"]
[Sat Aug 29 05:09:34.719716 2026] [security2:error] [pid 1041789:tid 1042010] [client 20.104.18.15:22495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/img.php"] [unique_id "apK97ov3RhPI65jTFG7oTwAAA20"]
[Sat Aug 29 05:09:34.734735 2026] [security2:error] [pid 1041789:tid 1041972] [client 20.104.18.15:6937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/av.php"] [unique_id "apK97ov3RhPI65jTFG7oXgAAA0c"]
[Sat Aug 29 05:09:34.740210 2026] [core:error] [pid 1041789:tid 1042035] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.740229 2026] [core:error] [pid 1041789:tid 1042035] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.740239 2026] [core:error] [pid 1041789:tid 1041949] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.740257 2026] [core:error] [pid 1041789:tid 1041949] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.744925 2026] [security2:error] [pid 1041789:tid 1041965] [client 158.23.184.117:38299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/bthil.php"] [unique_id "apK97ov3RhPI65jTFG7oZwAAA0A"]
[Sat Aug 29 05:09:34.749249 2026] [security2:error] [pid 1041789:tid 1042030] [client 20.104.18.15:25480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/gos.php"] [unique_id "apK97ov3RhPI65jTFG7oawAAA4E"]
[Sat Aug 29 05:09:34.752870 2026] [security2:error] [pid 1041789:tid 1042029] [client 20.104.18.15:45952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/blurbs.php"] [unique_id "apK97ov3RhPI65jTFG7obgAAA4A"]
[Sat Aug 29 05:09:34.764023 2026] [security2:error] [pid 1041789:tid 1041979] [client 20.104.104.62:64729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/hehee.php"] [unique_id "apK97ov3RhPI65jTFG7ocAAAA04"]
[Sat Aug 29 05:09:34.788586 2026] [security2:error] [pid 1041789:tid 1042007] [client 20.104.104.62:45982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/monso.php"] [unique_id "apK97ov3RhPI65jTFG7odQAAA2o"]
[Sat Aug 29 05:09:34.805694 2026] [security2:error] [pid 1041789:tid 1042015] [client 4.205.62.107:53307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/cu.php"] [unique_id "apK97ov3RhPI65jTFG7oeQAAA3I"]
[Sat Aug 29 05:09:34.807732 2026] [security2:error] [pid 1041789:tid 1041932] [client 20.104.18.15:43991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/zoo2.php"] [unique_id "apK97ov3RhPI65jTFG7oewAAAx8"]
[Sat Aug 29 05:09:34.807961 2026] [security2:error] [pid 1041789:tid 1042057] [client 93.123.109.228:45840] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/back-api/.env"] [unique_id "apK97ov3RhPI65jTFG7oegAAA5w"]
[Sat Aug 29 05:09:34.811390 2026] [security2:error] [pid 1041789:tid 1041983] [client 20.104.104.62:43117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/hack.php"] [unique_id "apK97ov3RhPI65jTFG7ofAAAA1I"]
[Sat Aug 29 05:09:34.815017 2026] [security2:error] [pid 1041789:tid 1041967] [client 20.220.204.93:52281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/0x.php"] [unique_id "apK97ov3RhPI65jTFG7ofgAAA0I"]
[Sat Aug 29 05:09:34.826405 2026] [security2:error] [pid 1041789:tid 1041978] [client 20.63.219.114:17935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/dxc.php"] [unique_id "apK97ov3RhPI65jTFG7ogQAAA00"]
[Sat Aug 29 05:09:34.831867 2026] [security2:error] [pid 1041789:tid 1042055] [client 20.104.18.15:41867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/ano.php"] [unique_id "apK97ov3RhPI65jTFG7ohgAAA5o"]
[Sat Aug 29 05:09:34.834387 2026] [security2:error] [pid 1041789:tid 1041940] [client 40.83.93.50:14472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/post.php"] [unique_id "apK97ov3RhPI65jTFG7ohwAAAyc"]
[Sat Aug 29 05:09:34.847992 2026] [security2:error] [pid 1041789:tid 1042042] [client 20.104.104.62:4136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/file66.php"] [unique_id "apK97ov3RhPI65jTFG7okAAAA40"]
[Sat Aug 29 05:09:34.848495 2026] [security2:error] [pid 1041789:tid 1042054] [client 74.248.24.12:37829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK97ov3RhPI65jTFG7okQAAA5k"]
[Sat Aug 29 05:09:34.852168 2026] [security2:error] [pid 1041789:tid 1041931] [client 20.104.18.15:15260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/alfa.php"] [unique_id "apK97ov3RhPI65jTFG7olQAAAx4"]
[Sat Aug 29 05:09:34.864749 2026] [security2:error] [pid 1041789:tid 1041981] [client 20.104.18.15:22476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/222.php"] [unique_id "apK97ov3RhPI65jTFG7omQAAA1A"]
[Sat Aug 29 05:09:34.870093 2026] [security2:error] [pid 1041789:tid 1041975] [client 45.148.10.62:33832] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.xqk.etg.mybluehost.me"] [uri "/.env.backup"] [unique_id "apK97ov3RhPI65jTFG7omwAAA0o"]
[Sat Aug 29 05:09:34.876647 2026] [core:error] [pid 1041789:tid 1041981] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.876664 2026] [core:error] [pid 1041789:tid 1041981] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.880459 2026] [security2:error] [pid 1041789:tid 1042041] [client 4.232.148.111:23215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-good.php"] [unique_id "apK97ov3RhPI65jTFG7ongAAA4w"]
[Sat Aug 29 05:09:34.882838 2026] [security2:error] [pid 1041789:tid 1041933] [client 93.123.109.228:54882] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/back-end/.env"] [unique_id "apK97ov3RhPI65jTFG7onwAAAyA"]
[Sat Aug 29 05:09:34.885184 2026] [security2:error] [pid 1041789:tid 1041962] [client 20.104.18.15:16831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/132.php"] [unique_id "apK97ov3RhPI65jTFG7oowAAAz0"]
[Sat Aug 29 05:09:34.889686 2026] [core:error] [pid 1041789:tid 1042006] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.889704 2026] [core:error] [pid 1041789:tid 1042006] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.890531 2026] [security2:error] [pid 1041789:tid 1042000] [client 93.123.109.228:45856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/back/.env"] [unique_id "apK97ov3RhPI65jTFG7oqAAAA2M"]
[Sat Aug 29 05:09:34.893692 2026] [core:error] [pid 1041789:tid 1041961] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.893710 2026] [core:error] [pid 1041789:tid 1041961] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.894898 2026] [security2:error] [pid 1041789:tid 1042019] [client 20.48.160.90:50528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/xcc.php"] [unique_id "apK97ov3RhPI65jTFG7oqwAAA3Y"]
[Sat Aug 29 05:09:34.895615 2026] [security2:error] [pid 1041789:tid 1041943] [client 158.23.147.79:17583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/wp-includes/js/index.php"] [unique_id "apK97ov3RhPI65jTFG7orAAAAyo"]
[Sat Aug 29 05:09:34.897432 2026] [security2:error] [pid 1041789:tid 1042056] [client 61.9.8.189:11893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 189.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK97ov3RhPI65jTFG7oogAAA5s"]
[Sat Aug 29 05:09:34.897573 2026] [security2:error] [pid 1041789:tid 1042056] [client 61.9.8.189:11893] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK97ov3RhPI65jTFG7oogAAA5s"]
[Sat Aug 29 05:09:34.899024 2026] [core:error] [pid 1041789:tid 1042040] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.899039 2026] [core:error] [pid 1041789:tid 1042040] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.901915 2026] [security2:error] [pid 1041789:tid 1042040] [client 158.23.147.79:44507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK97ov3RhPI65jTFG7orgAAA4s"]
[Sat Aug 29 05:09:34.910468 2026] [security2:error] [pid 1041789:tid 1042021] [client 20.104.18.15:46011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/xx.php"] [unique_id "apK97ov3RhPI65jTFG7osgAAA3g"]
[Sat Aug 29 05:09:34.910479 2026] [security2:error] [pid 1041789:tid 1041945] [client 20.104.18.15:45994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/h.php"] [unique_id "apK97ov3RhPI65jTFG7oswAAAyw"]
[Sat Aug 29 05:09:34.921069 2026] [security2:error] [pid 1041789:tid 1042031] [client 20.104.104.62:41642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/rce.php"] [unique_id "apK97ov3RhPI65jTFG7ouQAAA4I"]
[Sat Aug 29 05:09:34.927529 2026] [security2:error] [pid 1041789:tid 1042017] [client 20.104.18.15:7029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/images.php"] [unique_id "apK97ov3RhPI65jTFG7ovQAAA3Q"]
[Sat Aug 29 05:09:34.934852 2026] [security2:error] [pid 1041789:tid 1041977] [client 20.52.41.200:5327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/test1.php"] [unique_id "apK97ov3RhPI65jTFG7ovgAAA0w"]
[Sat Aug 29 05:09:34.941156 2026] [security2:error] [pid 1041789:tid 1041831] [remote 52.167.144.136:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantsfans.net"] [uri "/message_board/index.php"] [unique_id "apK97ov3RhPI65jTFG7oxQADWR0"]
[Sat Aug 29 05:09:34.944063 2026] [security2:error] [pid 1041789:tid 1041990] [client 20.104.104.62:41975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/155.php"] [unique_id "apK97ov3RhPI65jTFG7oxwAAA1k"]
[Sat Aug 29 05:09:34.946863 2026] [security2:error] [pid 1041789:tid 1042044] [client 20.220.204.93:59089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/66.php"] [unique_id "apK97ov3RhPI65jTFG7oygAAA48"]
[Sat Aug 29 05:09:34.950282 2026] [security2:error] [pid 1041789:tid 1042026] [client 4.232.148.111:21495] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "movriders.com"] [uri "/1.php7"] [unique_id "apK97ov3RhPI65jTFG7ozAAAA30"]
[Sat Aug 29 05:09:34.950329 2026] [security2:error] [pid 1041789:tid 1041980] [client 93.123.109.228:45852] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/backend-api/.env"] [unique_id "apK97ov3RhPI65jTFG7owQAAA08"]
[Sat Aug 29 05:09:34.950401 2026] [security2:error] [pid 1041789:tid 1042026] [client 4.232.148.111:21495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/1.php7"] [unique_id "apK97ov3RhPI65jTFG7ozAAAA30"]
[Sat Aug 29 05:09:34.957280 2026] [core:error] [pid 1041789:tid 1041983] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.957302 2026] [core:error] [pid 1041789:tid 1041983] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.974219 2026] [security2:error] [pid 1041789:tid 1041938] [client 213.202.253.4:63507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "timportlock.net"] [uri "/filefuns.php"] [unique_id "apK97ov3RhPI65jTFG7o3gAAAyU"], referer: www.google.com
[Sat Aug 29 05:09:34.985422 2026] [security2:error] [pid 1041789:tid 1042035] [client 20.104.18.15:43323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/zoo1.php"] [unique_id "apK97ov3RhPI65jTFG7o4gAAA4Y"]
[Sat Aug 29 05:09:34.986516 2026] [security2:error] [pid 1041789:tid 1041949] [client 93.123.109.228:45774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK97ov3RhPI65jTFG7o4QAAAzA"]
[Sat Aug 29 05:09:34.990078 2026] [security2:error] [pid 1041789:tid 1042014] [client 57.141.14.103:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutihomes.com"] [uri "/produit/payment-for-invoice-29765-booking-29763/"] [unique_id "apK97ov3RhPI65jTFG7o5QAAA3E"]
[Sat Aug 29 05:09:34.990793 2026] [core:error] [pid 1041789:tid 1042052] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.990811 2026] [core:error] [pid 1041789:tid 1042052] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:34.994084 2026] [security2:error] [pid 1041789:tid 1041948] [client 20.104.18.15:41935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/ai.php"] [unique_id "apK97ov3RhPI65jTFG7o6AAAAy8"]
[Sat Aug 29 05:09:34.997814 2026] [security2:error] [pid 1041789:tid 1042041] [client 20.104.18.15:15342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/33.php"] [unique_id "apK97ov3RhPI65jTFG7o6QAAA4w"]
[Sat Aug 29 05:09:35.016878 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.104.104.62:4117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/zafir1.php"] [unique_id "apK974v3RhPI65jTFG7o7QAAA2Q"]
[Sat Aug 29 05:09:35.027245 2026] [security2:error] [pid 1041789:tid 1042021] [client 20.48.160.90:50506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/wp-includes/Text/Diff/Engine/aaa.php"] [unique_id "apK974v3RhPI65jTFG7o8QAAA3g"]
[Sat Aug 29 05:09:35.029028 2026] [security2:error] [pid 1041789:tid 1042021] [client 20.104.18.15:16880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/v22.php"] [unique_id "apK974v3RhPI65jTFG7o8gAAA3g"]
[Sat Aug 29 05:09:35.031344 2026] [security2:error] [pid 1041789:tid 1041942] [client 45.148.10.62:33832] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.xqk.etg.mybluehost.me"] [uri "/.env.old"] [unique_id "apK974v3RhPI65jTFG7o8wAAAyk"]
[Sat Aug 29 05:09:35.042033 2026] [security2:error] [pid 1041789:tid 1041946] [client 20.104.18.15:22486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/key.php"] [unique_id "apK974v3RhPI65jTFG7o9wAAAy0"]
[Sat Aug 29 05:09:35.043998 2026] [security2:error] [pid 1041789:tid 1042015] [client 20.104.18.15:46044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/ano.php"] [unique_id "apK974v3RhPI65jTFG7o-QAAA3I"]
[Sat Aug 29 05:09:35.057179 2026] [security2:error] [pid 1041789:tid 1041932] [client 20.104.104.62:54570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/exec.php"] [unique_id "apK974v3RhPI65jTFG7o-gAAAx8"]
[Sat Aug 29 05:09:35.058630 2026] [security2:error] [pid 1041789:tid 1041916] [remote 93.123.109.228:39166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/php-info.php"] [unique_id "apK974v3RhPI65jTFG7o-wADRnI"]
[Sat Aug 29 05:09:35.059244 2026] [security2:error] [pid 1041789:tid 1041916] [remote 93.123.109.228:39166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/php_info.php"] [unique_id "apK974v3RhPI65jTFG7o_QADRnI"]
[Sat Aug 29 05:09:35.059279 2026] [security2:error] [pid 1041789:tid 1041897] [remote 93.123.109.228:39166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/php.php"] [unique_id "apK974v3RhPI65jTFG7o_AADRl8"]
[Sat Aug 29 05:09:35.066552 2026] [security2:error] [pid 1041789:tid 1041963] [client 20.197.61.180:18208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/cookie.php"] [unique_id "apK974v3RhPI65jTFG7o_gAAAz4"]
[Sat Aug 29 05:09:35.066663 2026] [security2:error] [pid 1041789:tid 1041990] [client 20.104.18.15:7026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/ops.php"] [unique_id "apK974v3RhPI65jTFG7o_wAAA1k"]
[Sat Aug 29 05:09:35.081735 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.104.104.62:40192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/human.php"] [unique_id "apK974v3RhPI65jTFG7pAgAAA30"]
[Sat Aug 29 05:09:35.082646 2026] [security2:error] [pid 1041789:tid 1041892] [remote 93.123.109.228:39166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/phpinfo.php"] [unique_id "apK974v3RhPI65jTFG7pBAADiFo"]
[Sat Aug 29 05:09:35.085542 2026] [security2:error] [pid 1041789:tid 1041964] [client 20.104.104.62:43357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/mcd.php"] [unique_id "apK974v3RhPI65jTFG7pBgAAAz8"]
[Sat Aug 29 05:09:35.089565 2026] [security2:error] [pid 1041789:tid 1042051] [client 20.220.204.93:52323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/f35.php"] [unique_id "apK974v3RhPI65jTFG7pBwAAA5Y"]
[Sat Aug 29 05:09:35.101543 2026] [security2:error] [pid 1041789:tid 1041982] [client 158.158.54.35:29736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/404.php"] [unique_id "apK974v3RhPI65jTFG7pDwAAA1E"]
[Sat Aug 29 05:09:35.103765 2026] [security2:error] [pid 1041789:tid 1041895] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config~"] [unique_id "apK974v3RhPI65jTFG7pEQADlF0"]
[Sat Aug 29 05:09:35.104432 2026] [security2:error] [pid 1041789:tid 1041909] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.old"] [unique_id "apK974v3RhPI65jTFG7pDQADlGs"]
[Sat Aug 29 05:09:35.104610 2026] [security2:error] [pid 1041789:tid 1041825] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.bak"] [unique_id "apK974v3RhPI65jTFG7pDgADlBc"]
[Sat Aug 29 05:09:35.125840 2026] [core:error] [pid 1041789:tid 1042027] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.125858 2026] [core:error] [pid 1041789:tid 1042027] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.125949 2026] [core:error] [pid 1041789:tid 1042014] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.125960 2026] [core:error] [pid 1041789:tid 1042014] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.126130 2026] [core:error] [pid 1041789:tid 1041949] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.126141 2026] [core:error] [pid 1041789:tid 1041949] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.129923 2026] [core:error] [pid 1041789:tid 1042032] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.129941 2026] [core:error] [pid 1041789:tid 1042032] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.152085 2026] [security2:error] [pid 1041789:tid 1041960] [client 20.104.18.15:41965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/sf.php"] [unique_id "apK974v3RhPI65jTFG7pIwAAAzs"]
[Sat Aug 29 05:09:35.157505 2026] [security2:error] [pid 1041789:tid 1042019] [client 20.48.160.90:50524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/wp-includes/style-engine/gecko-new.php"] [unique_id "apK974v3RhPI65jTFG7pJQAAA3Y"]
[Sat Aug 29 05:09:35.162017 2026] [security2:error] [pid 1041789:tid 1042038] [client 20.104.104.62:4809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/console.php"] [unique_id "apK974v3RhPI65jTFG7pJgAAA4k"]
[Sat Aug 29 05:09:35.162752 2026] [security2:error] [pid 1041789:tid 1042040] [client 20.104.18.15:43923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/radio.php"] [unique_id "apK974v3RhPI65jTFG7pJwAAA4s"]
[Sat Aug 29 05:09:35.168703 2026] [core:error] [pid 1041789:tid 1041979] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.168720 2026] [core:error] [pid 1041789:tid 1041979] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.169458 2026] [security2:error] [pid 1041789:tid 1042042] [client 93.123.109.228:45852] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/backup/.env"] [unique_id "apK974v3RhPI65jTFG7pLAAAA40"]
[Sat Aug 29 05:09:35.176279 2026] [security2:error] [pid 1041789:tid 1041936] [client 93.123.109.228:45768] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/be/.env"] [unique_id "apK974v3RhPI65jTFG7pLQAAAyM"]
[Sat Aug 29 05:09:35.180251 2026] [security2:error] [pid 1041789:tid 1041954] [client 20.104.18.15:25496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/wp-activate.php"] [unique_id "apK974v3RhPI65jTFG7pLgAAAzU"]
[Sat Aug 29 05:09:35.182237 2026] [security2:error] [pid 1041789:tid 1042015] [client 20.104.18.15:15283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/133.php"] [unique_id "apK974v3RhPI65jTFG7pLwAAA3I"]
[Sat Aug 29 05:09:35.186272 2026] [security2:error] [pid 1041789:tid 1042005] [client 93.123.109.228:45774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/beta/.env"] [unique_id "apK974v3RhPI65jTFG7pMQAAA2g"]
[Sat Aug 29 05:09:35.199026 2026] [security2:error] [pid 1041789:tid 1042047] [client 20.104.104.62:45973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/dbc.php"] [unique_id "apK974v3RhPI65jTFG7pNgAAA5I"]
[Sat Aug 29 05:09:35.199967 2026] [security2:error] [pid 1041789:tid 1041978] [client 20.197.61.180:18214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/22.php"] [unique_id "apK974v3RhPI65jTFG7pNwAAA00"]
[Sat Aug 29 05:09:35.215862 2026] [security2:error] [pid 1041789:tid 1041950] [client 158.23.147.79:6050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-includes/content.php"] [unique_id "apK974v3RhPI65jTFG7pPQAAAzE"]
[Sat Aug 29 05:09:35.216240 2026] [security2:error] [pid 1041789:tid 1041988] [client 4.205.62.107:63918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/aws_config.php"] [unique_id "apK974v3RhPI65jTFG7pPgAAA1c"]
[Sat Aug 29 05:09:35.225734 2026] [security2:error] [pid 1041789:tid 1041983] [client 20.104.18.15:45957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/ai.php"] [unique_id "apK974v3RhPI65jTFG7pTAAAA1I"]
[Sat Aug 29 05:09:35.229701 2026] [core:error] [pid 1041789:tid 1041940] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.229726 2026] [core:error] [pid 1041789:tid 1041940] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.235931 2026] [security2:error] [pid 1041789:tid 1041982] [client 20.104.104.62:60700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/waw.php"] [unique_id "apK974v3RhPI65jTFG7pUwAAA1E"]
[Sat Aug 29 05:09:35.269436 2026] [security2:error] [pid 1041789:tid 1042031] [client 20.104.18.15:22485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/chosen.php"] [unique_id "apK974v3RhPI65jTFG7pYAAAA4I"]
[Sat Aug 29 05:09:35.271564 2026] [security2:error] [pid 1041789:tid 1041968] [client 20.220.204.93:50793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/wen.php"] [unique_id "apK974v3RhPI65jTFG7pYgAAA0M"]
[Sat Aug 29 05:09:35.271663 2026] [core:error] [pid 1041789:tid 1042052] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.271673 2026] [core:error] [pid 1041789:tid 1042052] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.271691 2026] [core:error] [pid 1041789:tid 1041981] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.271702 2026] [core:error] [pid 1041789:tid 1041981] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.281119 2026] [core:error] [pid 1041789:tid 1042018] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.281135 2026] [core:error] [pid 1041789:tid 1042018] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.290399 2026] [security2:error] [pid 1041789:tid 1041941] [client 20.104.18.15:7102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/coffexium.php"] [unique_id "apK974v3RhPI65jTFG7pbgAAAyg"]
[Sat Aug 29 05:09:35.291255 2026] [security2:error] [pid 1041789:tid 1042000] [client 20.104.104.62:4103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/blnux.php"] [unique_id "apK974v3RhPI65jTFG7pbwAAA2M"]
[Sat Aug 29 05:09:35.299087 2026] [security2:error] [pid 1041789:tid 1042021] [client 20.48.160.90:50438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/wp-settings.php"] [unique_id "apK974v3RhPI65jTFG7pegAAA3g"]
[Sat Aug 29 05:09:35.312929 2026] [security2:error] [pid 1041789:tid 1042053] [client 20.104.18.15:16788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/wp-trackback.php"] [unique_id "apK974v3RhPI65jTFG7piwAAA5g"]
[Sat Aug 29 05:09:35.315019 2026] [security2:error] [pid 1041789:tid 1042042] [client 20.104.49.130:57641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/ms-edit.php"] [unique_id "apK974v3RhPI65jTFG7pjAAAA40"]
[Sat Aug 29 05:09:35.316815 2026] [security2:error] [pid 1041789:tid 1041992] [client 20.104.18.15:43320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/one.php"] [unique_id "apK974v3RhPI65jTFG7pjgAAA1s"]
[Sat Aug 29 05:09:35.318496 2026] [security2:error] [pid 1041789:tid 1042042] [client 93.123.109.228:45840] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/client/.env"] [unique_id "apK974v3RhPI65jTFG7pjQAAA40"]
[Sat Aug 29 05:09:35.318870 2026] [security2:error] [pid 1041789:tid 1041830] [remote 93.123.109.228:39166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/public/phpinfo.php"] [unique_id "apK974v3RhPI65jTFG7pkAADRhw"]
[Sat Aug 29 05:09:35.319693 2026] [security2:error] [pid 1041789:tid 1042049] [client 20.104.18.15:15281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/sym.php"] [unique_id "apK974v3RhPI65jTFG7plAAAA5Q"]
[Sat Aug 29 05:09:35.320120 2026] [security2:error] [pid 1041789:tid 1041847] [remote 93.123.109.228:39364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glamrus.rocks"] [uri "/_profiler/phpinfo.php"] [unique_id "apK974v3RhPI65jTFG7plQADIy0"]
[Sat Aug 29 05:09:35.322629 2026] [security2:error] [pid 1041789:tid 1041995] [client 4.205.62.107:22500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/saml.php"] [unique_id "apK974v3RhPI65jTFG7plgAAA14"]
[Sat Aug 29 05:09:35.326037 2026] [core:error] [pid 1041789:tid 1041976] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.326054 2026] [core:error] [pid 1041789:tid 1041976] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.326660 2026] [core:error] [pid 1041789:tid 1041970] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.326676 2026] [core:error] [pid 1041789:tid 1041970] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.330207 2026] [security2:error] [pid 1041789:tid 1042047] [client 20.104.104.62:22693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/wp-wlx.php"] [unique_id "apK974v3RhPI65jTFG7pnAAAA5I"]
[Sat Aug 29 05:09:35.331408 2026] [security2:error] [pid 1041789:tid 1042007] [client 40.83.93.50:17258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/csv.php"] [unique_id "apK974v3RhPI65jTFG7pnQAAA2o"]
[Sat Aug 29 05:09:35.332213 2026] [core:error] [pid 1041789:tid 1042005] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.332224 2026] [core:error] [pid 1041789:tid 1042005] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.334137 2026] [security2:error] [pid 1041789:tid 1041963] [client 20.104.49.130:65193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/about.php"] [unique_id "apK974v3RhPI65jTFG7pnwAAAz4"]
[Sat Aug 29 05:09:35.334860 2026] [core:error] [pid 1041789:tid 1042025] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.334874 2026] [core:error] [pid 1041789:tid 1042025] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.363437 2026] [security2:error] [pid 1041789:tid 1041990] [client 4.232.148.111:1373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "apK974v3RhPI65jTFG7pugAAA1k"]
[Sat Aug 29 05:09:35.363477 2026] [security2:error] [pid 1041789:tid 1042044] [client 20.104.18.15:41859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/xx.php"] [unique_id "apK974v3RhPI65jTFG7puwAAA48"]
[Sat Aug 29 05:09:35.371470 2026] [security2:error] [pid 1041789:tid 1041965] [client 20.104.104.62:43135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/x23.php"] [unique_id "apK974v3RhPI65jTFG7pvAAAA0A"]
[Sat Aug 29 05:09:35.373633 2026] [security2:error] [pid 1041789:tid 1041949] [client 20.104.18.15:46031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/sf.php"] [unique_id "apK974v3RhPI65jTFG7pvQAAAzA"]
[Sat Aug 29 05:09:35.373962 2026] [security2:error] [pid 1041789:tid 1042055] [client 45.148.10.62:33832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xqk.etg.mybluehost.me"] [uri "/.env.php.bak"] [unique_id "apK974v3RhPI65jTFG7pvgAAA5o"]
[Sat Aug 29 05:09:35.379901 2026] [core:error] [pid 1041789:tid 1042020] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.379917 2026] [core:error] [pid 1041789:tid 1042057] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.379926 2026] [core:error] [pid 1041789:tid 1042020] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.379927 2026] [core:error] [pid 1041789:tid 1042057] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.382395 2026] [core:error] [pid 1041789:tid 1041981] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.382416 2026] [core:error] [pid 1041789:tid 1041981] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.382474 2026] [core:error] [pid 1041789:tid 1041949] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.382485 2026] [core:error] [pid 1041789:tid 1041949] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.382484 2026] [core:error] [pid 1041789:tid 1041965] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.382496 2026] [core:error] [pid 1041789:tid 1041965] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.382646 2026] [core:error] [pid 1041789:tid 1042031] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.382657 2026] [core:error] [pid 1041789:tid 1042031] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.382872 2026] [security2:error] [pid 1041789:tid 1041931] [client 93.123.109.228:45852] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/cms/.env"] [unique_id "apK974v3RhPI65jTFG7pyAAAAx4"]
[Sat Aug 29 05:09:35.384941 2026] [core:error] [pid 1041789:tid 1042032] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.384954 2026] [core:error] [pid 1041789:tid 1042032] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.389005 2026] [core:error] [pid 1041789:tid 1041939] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.389021 2026] [core:error] [pid 1041789:tid 1041939] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.393850 2026] [security2:error] [pid 1041789:tid 1042024] [client 20.52.41.200:4637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/ws.php"] [unique_id "apK974v3RhPI65jTFG7pzQAAA3s"]
[Sat Aug 29 05:09:35.399992 2026] [security2:error] [pid 1041789:tid 1041942] [client 158.23.147.79:58929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK974v3RhPI65jTFG7pzwAAAyk"]
[Sat Aug 29 05:09:35.411256 2026] [security2:error] [pid 1041789:tid 1041935] [client 20.63.219.114:1343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/wp-2019.php"] [unique_id "apK974v3RhPI65jTFG7p0AAAAyI"]
[Sat Aug 29 05:09:35.413723 2026] [security2:error] [pid 1041789:tid 1042049] [client 20.104.18.15:45981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/uwu.php"] [unique_id "apK974v3RhPI65jTFG7p0QAAA5Q"]
[Sat Aug 29 05:09:35.423868 2026] [security2:error] [pid 1041789:tid 1042027] [client 20.104.18.15:7166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/BDKR28WP.php"] [unique_id "apK974v3RhPI65jTFG7p1AAAA34"]
[Sat Aug 29 05:09:35.425152 2026] [security2:error] [pid 1041789:tid 1041951] [client 20.104.104.62:4836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/pentest.php"] [unique_id "apK974v3RhPI65jTFG7p1QAAAzI"]
[Sat Aug 29 05:09:35.427666 2026] [security2:error] [pid 1041789:tid 1042056] [client 158.23.147.79:11315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/themes.php"] [unique_id "apK974v3RhPI65jTFG7p2AAAA5s"]
[Sat Aug 29 05:09:35.430569 2026] [security2:error] [pid 1041789:tid 1041976] [client 20.48.160.90:50479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/wp-signup.php"] [unique_id "apK974v3RhPI65jTFG7p2QAAA0s"]
[Sat Aug 29 05:09:35.430644 2026] [security2:error] [pid 1041789:tid 1041980] [client 4.232.148.111:20422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/disagraeosc.php"] [unique_id "apK974v3RhPI65jTFG7p2gAAA08"]
[Sat Aug 29 05:09:35.437335 2026] [security2:error] [pid 1041789:tid 1042021] [client 20.220.204.93:52250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/inc.php"] [unique_id "apK974v3RhPI65jTFG7p3QAAA3g"]
[Sat Aug 29 05:09:35.455444 2026] [security2:error] [pid 1041789:tid 1042007] [client 4.205.62.107:9178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/v4.php"] [unique_id "apK974v3RhPI65jTFG7p4QAAA2o"]
[Sat Aug 29 05:09:35.457468 2026] [security2:error] [pid 1041789:tid 1041891] [remote 93.123.109.228:39292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmsproductions.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK974v3RhPI65jTFG7p5AADLFk"]
[Sat Aug 29 05:09:35.460149 2026] [security2:error] [pid 1041789:tid 1041963] [client 20.104.18.15:15302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/8.php"] [unique_id "apK974v3RhPI65jTFG7p6AAAAz4"]
[Sat Aug 29 05:09:35.460597 2026] [security2:error] [pid 1041789:tid 1041950] [client 20.104.104.62:22718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/attack.php"] [unique_id "apK974v3RhPI65jTFG7p6QAAAzE"]
[Sat Aug 29 05:09:35.461412 2026] [security2:error] [pid 1041789:tid 1041963] [client 20.104.18.15:16878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/pri.php"] [unique_id "apK974v3RhPI65jTFG7p6wAAAz4"]
[Sat Aug 29 05:09:35.469519 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.104.18.15:22406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/file1221.php"] [unique_id "apK974v3RhPI65jTFG7p8wAAA30"]
[Sat Aug 29 05:09:35.497852 2026] [security2:error] [pid 1041789:tid 1041933] [client 20.104.18.15:41888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/uwu.php"] [unique_id "apK974v3RhPI65jTFG7p-wAAAyA"]
[Sat Aug 29 05:09:35.501992 2026] [security2:error] [pid 1041789:tid 1041962] [client 20.104.104.62:43107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/ws66.php"] [unique_id "apK974v3RhPI65jTFG7qAQAAAz0"]
[Sat Aug 29 05:09:35.502082 2026] [security2:error] [pid 1041789:tid 1041938] [client 93.123.109.228:45868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/config.php"] [unique_id "apK974v3RhPI65jTFG7qAgAAAyU"]
[Sat Aug 29 05:09:35.502328 2026] [core:error] [pid 1041789:tid 1041975] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.502344 2026] [core:error] [pid 1041789:tid 1041975] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.522417 2026] [core:error] [pid 1041789:tid 1041968] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.522438 2026] [core:error] [pid 1041789:tid 1041968] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.522452 2026] [core:error] [pid 1041789:tid 1041965] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.522464 2026] [core:error] [pid 1041789:tid 1041965] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.522476 2026] [core:error] [pid 1041789:tid 1041962] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.522487 2026] [core:error] [pid 1041789:tid 1041962] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.538111 2026] [security2:error] [pid 1041789:tid 1041998] [client 20.104.104.62:20722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/him.php"] [unique_id "apK974v3RhPI65jTFG7qFgAAA2E"]
[Sat Aug 29 05:09:35.539827 2026] [core:error] [pid 1041789:tid 1041960] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.539847 2026] [core:error] [pid 1041789:tid 1041960] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.540838 2026] [core:error] [pid 1041789:tid 1042032] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.540855 2026] [core:error] [pid 1041789:tid 1042032] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.541457 2026] [core:error] [pid 1041789:tid 1041943] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.541475 2026] [core:error] [pid 1041789:tid 1041943] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.546988 2026] [security2:error] [pid 1041789:tid 1042043] [client 158.158.54.35:30633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/php.php"] [unique_id "apK974v3RhPI65jTFG7qHgAAA44"]
[Sat Aug 29 05:09:35.552627 2026] [core:error] [pid 1041789:tid 1041960] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.552649 2026] [core:error] [pid 1041789:tid 1041960] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.556738 2026] [security2:error] [pid 1041789:tid 1041960] [client 20.104.18.15:7107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/sf.php"] [unique_id "apK974v3RhPI65jTFG7qIAAAAzs"]
[Sat Aug 29 05:09:35.562105 2026] [security2:error] [pid 1041789:tid 1041960] [client 20.104.18.15:46000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/xx.php"] [unique_id "apK974v3RhPI65jTFG7qIgAAAzs"]
[Sat Aug 29 05:09:35.563013 2026] [security2:error] [pid 1041789:tid 1042027] [client 20.104.104.62:4129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/6y7t.php"] [unique_id "apK974v3RhPI65jTFG7qJAAAA34"]
[Sat Aug 29 05:09:35.564618 2026] [security2:error] [pid 1041789:tid 1041960] [client 20.48.160.90:50457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/wp-conffg.php"] [unique_id "apK974v3RhPI65jTFG7qJgAAAzs"]
[Sat Aug 29 05:09:35.572842 2026] [security2:error] [pid 1041789:tid 1041910] [remote 93.123.109.228:39364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glamrus.rocks"] [uri "/admin/phpinfo.php"] [unique_id "apK974v3RhPI65jTFG7qLQADI2w"]
[Sat Aug 29 05:09:35.573936 2026] [security2:error] [pid 1041789:tid 1041967] [client 20.104.18.15:44009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/503.php"] [unique_id "apK974v3RhPI65jTFG7qLgAAA0I"]
[Sat Aug 29 05:09:35.584869 2026] [security2:error] [pid 1041789:tid 1041914] [remote 93.123.109.228:39364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glamrus.rocks"] [uri "/admin_phpinfo.php"] [unique_id "apK974v3RhPI65jTFG7qMQADI3A"]
[Sat Aug 29 05:09:35.587326 2026] [security2:error] [pid 1041789:tid 1042047] [client 20.104.18.15:45970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/signon.php"] [unique_id "apK974v3RhPI65jTFG7qMgAAA5I"]
[Sat Aug 29 05:09:35.592340 2026] [security2:error] [pid 1041789:tid 1042021] [client 158.23.147.79:14333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/simple.php"] [unique_id "apK974v3RhPI65jTFG7qMwAAA3g"]
[Sat Aug 29 05:09:35.594573 2026] [security2:error] [pid 1041789:tid 1041991] [client 20.104.104.62:22677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/file66.php"] [unique_id "apK974v3RhPI65jTFG7qNAAAA1o"]
[Sat Aug 29 05:09:35.596038 2026] [security2:error] [pid 1041789:tid 1042007] [client 20.104.18.15:16769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/wp_blog_footer.php"] [unique_id "apK974v3RhPI65jTFG7qNQAAA2o"]
[Sat Aug 29 05:09:35.616703 2026] [security2:error] [pid 1041789:tid 1042005] [client 93.123.109.228:54878] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/config/.env"] [unique_id "apK974v3RhPI65jTFG7qOQAAA2g"]
[Sat Aug 29 05:09:35.620564 2026] [security2:error] [pid 1041789:tid 1041956] [client 20.220.204.93:41801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/6bcwiqwj.php"] [unique_id "apK974v3RhPI65jTFG7qPwAAAzc"]
[Sat Aug 29 05:09:35.632407 2026] [security2:error] [pid 1041789:tid 1041963] [client 20.104.18.15:15292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/goods.php"] [unique_id "apK974v3RhPI65jTFG7qQAAAAz4"]
[Sat Aug 29 05:09:35.636208 2026] [security2:error] [pid 1041789:tid 1042040] [client 20.104.104.62:43088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/Cok.php"] [unique_id "apK974v3RhPI65jTFG7qRwAAA4s"]
[Sat Aug 29 05:09:35.637685 2026] [security2:error] [pid 1041789:tid 1041948] [client 103.162.125.59:63328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.125.162.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK974v3RhPI65jTFG7qTQAAAy8"]
[Sat Aug 29 05:09:35.637811 2026] [security2:error] [pid 1041789:tid 1041948] [client 103.162.125.59:63328] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK974v3RhPI65jTFG7qTQAAAy8"]
[Sat Aug 29 05:09:35.638327 2026] [security2:error] [pid 1041789:tid 1041908] [remote 34.138.144.127:46122] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/web.config"] [unique_id "apK974v3RhPI65jTFG7qTAADj2o"]
[Sat Aug 29 05:09:35.643475 2026] [cgid:error] [pid 1041789:tid 1041817] [remote 34.138.144.127:46122] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:35.646185 2026] [cgid:error] [pid 1041789:tid 1041881] [remote 34.138.144.127:46122] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml, referer: https://www.studiopasa.com
[Sat Aug 29 05:09:35.647787 2026] [cgid:error] [pid 1041789:tid 1041830] [remote 34.138.144.127:46122] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:35.648488 2026] [security2:error] [pid 1041789:tid 1041990] [client 20.104.18.15:41972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/signon.php"] [unique_id "apK974v3RhPI65jTFG7qVwAAA1k"]
[Sat Aug 29 05:09:35.648915 2026] [cgid:error] [pid 1041789:tid 1041847] [remote 34.138.144.127:46122] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:35.651463 2026] [cgid:error] [pid 1041789:tid 1041884] [remote 34.138.144.127:46122] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:35.669881 2026] [security2:error] [pid 1041789:tid 1042033] [client 197.232.63.170:64817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 170.63.232.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK974v3RhPI65jTFG7qVQAAA4Q"]
[Sat Aug 29 05:09:35.670036 2026] [security2:error] [pid 1041789:tid 1042033] [client 197.232.63.170:64817] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK974v3RhPI65jTFG7qVQAAA4Q"]
[Sat Aug 29 05:09:35.687055 2026] [security2:error] [pid 1041789:tid 1041955] [client 93.123.109.228:45744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/config/aws.php"] [unique_id "apK974v3RhPI65jTFG7qdgAAAzY"]
[Sat Aug 29 05:09:35.690458 2026] [core:error] [pid 1041789:tid 1041972] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.690481 2026] [core:error] [pid 1041789:tid 1041972] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.692750 2026] [core:error] [pid 1041789:tid 1042048] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.692775 2026] [core:error] [pid 1041789:tid 1042048] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.693188 2026] [core:error] [pid 1041789:tid 1042031] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.693195 2026] [core:error] [pid 1041789:tid 1042031] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.694262 2026] [core:error] [pid 1041789:tid 1041941] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.694281 2026] [core:error] [pid 1041789:tid 1041941] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.696844 2026] [security2:error] [pid 1041789:tid 1042024] [client 20.104.18.15:7055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/k.php"] [unique_id "apK974v3RhPI65jTFG7qfwAAA3s"]
[Sat Aug 29 05:09:35.697762 2026] [security2:error] [pid 1041789:tid 1042053] [client 20.104.18.15:22503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/nox.php"] [unique_id "apK974v3RhPI65jTFG7qhAAAA5g"]
[Sat Aug 29 05:09:35.699737 2026] [core:error] [pid 1041789:tid 1042019] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.699753 2026] [core:error] [pid 1041789:tid 1042019] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.704664 2026] [core:error] [pid 1041789:tid 1042050] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.704682 2026] [core:error] [pid 1041789:tid 1042050] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.708998 2026] [core:error] [pid 1041789:tid 1042025] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.709028 2026] [core:error] [pid 1041789:tid 1042025] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.711003 2026] [security2:error] [pid 1041789:tid 1041988] [client 20.104.104.62:4852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/0xs.php"] [unique_id "apK974v3RhPI65jTFG7qiQAAA1c"]
[Sat Aug 29 05:09:35.714332 2026] [security2:error] [pid 1041789:tid 1042056] [client 74.248.24.12:29779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK974v3RhPI65jTFG7qigAAA5s"]
[Sat Aug 29 05:09:35.720049 2026] [security2:error] [pid 1041789:tid 1041960] [client 4.205.62.107:25911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/time.php"] [unique_id "apK974v3RhPI65jTFG7qiwAAAzs"]
[Sat Aug 29 05:09:35.722065 2026] [security2:error] [pid 1041789:tid 1041951] [client 20.48.160.90:50541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/wp-validate.php"] [unique_id "apK974v3RhPI65jTFG7qjAAAAzI"]
[Sat Aug 29 05:09:35.729999 2026] [core:error] [pid 1041789:tid 1042034] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.730020 2026] [core:error] [pid 1041789:tid 1042034] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.730258 2026] [security2:error] [pid 1041789:tid 1041967] [client 20.104.18.15:25536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/sushi.php"] [unique_id "apK974v3RhPI65jTFG7qkwAAA0I"]
[Sat Aug 29 05:09:35.730280 2026] [security2:error] [pid 1041789:tid 1041840] [remote 93.123.109.228:39292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmsproductions.com"] [uri "/admin/phpinfo.php"] [unique_id "apK974v3RhPI65jTFG7qlAADKCY"]
[Sat Aug 29 05:09:35.731397 2026] [security2:error] [pid 1041789:tid 1041947] [client 20.104.104.62:41657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/zafir1.php"] [unique_id "apK974v3RhPI65jTFG7qlgAAAy4"]
[Sat Aug 29 05:09:35.734704 2026] [security2:error] [pid 1041789:tid 1041991] [client 93.123.109.228:45840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/config/config.inc.php"] [unique_id "apK974v3RhPI65jTFG7qmAAAA1o"]
[Sat Aug 29 05:09:35.736720 2026] [security2:error] [pid 1041789:tid 1042007] [client 20.104.18.15:45917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/uwu.php"] [unique_id "apK974v3RhPI65jTFG7qmQAAA2o"]
[Sat Aug 29 05:09:35.741574 2026] [security2:error] [pid 1041789:tid 1042005] [client 20.104.18.15:43292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/504.php"] [unique_id "apK974v3RhPI65jTFG7qmgAAA2g"]
[Sat Aug 29 05:09:35.744844 2026] [security2:error] [pid 1041789:tid 1041828] [remote 93.123.109.228:55834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyer.com"] [uri "/.wp-config.php.swp"] [unique_id "apK974v3RhPI65jTFG7qnAADTRo"]
[Sat Aug 29 05:09:35.771531 2026] [security2:error] [pid 1041789:tid 1042033] [client 4.205.62.107:6952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/xp.php"] [unique_id "apK974v3RhPI65jTFG7qsAAAA4Q"]
[Sat Aug 29 05:09:35.779479 2026] [security2:error] [pid 1041789:tid 1042018] [client 93.123.109.228:45788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/config/config.php"] [unique_id "apK974v3RhPI65jTFG7qtgAAA3U"]
[Sat Aug 29 05:09:35.784367 2026] [security2:error] [pid 1041789:tid 1041895] [remote 93.123.109.228:39292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmsproductions.com"] [uri "/admin_phpinfo.php"] [unique_id "apK974v3RhPI65jTFG7quwADKF0"]
[Sat Aug 29 05:09:35.784728 2026] [security2:error] [pid 1041789:tid 1041962] [client 20.63.219.114:17968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/menu.php"] [unique_id "apK974v3RhPI65jTFG7qugAAAz0"]
[Sat Aug 29 05:09:35.789269 2026] [security2:error] [pid 1041789:tid 1041998] [client 20.104.104.62:43097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/X7T6.php"] [unique_id "apK974v3RhPI65jTFG7qxgAAA2E"]
[Sat Aug 29 05:09:35.793632 2026] [cgid:error] [pid 1041789:tid 1041863] [remote 34.138.144.127:46122] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:35.794142 2026] [security2:error] [pid 1041789:tid 1041962] [client 20.104.18.15:15248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/ah.php"] [unique_id "apK974v3RhPI65jTFG7qyQAAAz0"]
[Sat Aug 29 05:09:35.805345 2026] [security2:error] [pid 1041789:tid 1041943] [client 20.104.18.15:41879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/file61.php"] [unique_id "apK974v3RhPI65jTFG7qzQAAAyo"]
[Sat Aug 29 05:09:35.812341 2026] [security2:error] [pid 1041789:tid 1041932] [client 4.205.62.107:51477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/app/Models/Hrm/Employee.php"] [unique_id "apK974v3RhPI65jTFG7q0gAAAx8"]
[Sat Aug 29 05:09:35.814790 2026] [cgid:error] [pid 1041789:tid 1041841] [remote 34.138.144.127:46122] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:35.817026 2026] [cgid:error] [pid 1041789:tid 1041844] [remote 34.138.144.127:46122] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:35.817062 2026] [cgid:error] [pid 1041789:tid 1041877] [remote 34.138.144.127:46122] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:35.817078 2026] [cgid:error] [pid 1041789:tid 1041854] [remote 34.138.144.127:46122] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:35.824860 2026] [security2:error] [pid 1041789:tid 1042019] [client 4.205.62.107:62758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/xin1.php"] [unique_id "apK974v3RhPI65jTFG7q2AAAA3Y"]
[Sat Aug 29 05:09:35.828858 2026] [security2:error] [pid 1041789:tid 1041945] [client 20.197.61.180:1889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/NewFile.php"] [unique_id "apK974v3RhPI65jTFG7q2wAAAyw"]
[Sat Aug 29 05:09:35.842344 2026] [security2:error] [pid 1041789:tid 1041957] [client 4.232.148.111:1401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/abcd.php"] [unique_id "apK974v3RhPI65jTFG7q3wAAAzg"]
[Sat Aug 29 05:09:35.845219 2026] [security2:error] [pid 1041789:tid 1041957] [client 20.104.104.62:64695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/waf.php"] [unique_id "apK974v3RhPI65jTFG7q4QAAAzg"]
[Sat Aug 29 05:09:35.846862 2026] [security2:error] [pid 1041789:tid 1042056] [client 20.104.18.15:7060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/82.php"] [unique_id "apK974v3RhPI65jTFG7q4wAAA5s"]
[Sat Aug 29 05:09:35.847598 2026] [core:error] [pid 1041789:tid 1042037] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.847619 2026] [core:error] [pid 1041789:tid 1042037] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.848045 2026] [cgid:error] [pid 1041789:tid 1041838] [remote 34.138.144.127:46122] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:35.850633 2026] [core:error] [pid 1041789:tid 1041954] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.850652 2026] [core:error] [pid 1041789:tid 1041954] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.850704 2026] [security2:error] [pid 1041789:tid 1041878] [remote 93.123.109.228:39364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glamrus.rocks"] [uri "/api/info.php"] [unique_id "apK974v3RhPI65jTFG7q5gADI0w"]
[Sat Aug 29 05:09:35.853665 2026] [core:error] [pid 1041789:tid 1041931] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.853676 2026] [core:error] [pid 1041789:tid 1041931] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.853941 2026] [security2:error] [pid 1041789:tid 1041934] [client 40.83.93.50:17246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/fox.php"] [unique_id "apK974v3RhPI65jTFG7q6gAAAyE"]
[Sat Aug 29 05:09:35.857191 2026] [core:error] [pid 1041789:tid 1041988] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.857218 2026] [core:error] [pid 1041789:tid 1041988] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.858348 2026] [security2:error] [pid 1041789:tid 1042041] [client 20.63.81.20:55582] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/aa.php"] [unique_id "apK974v3RhPI65jTFG7q6wAAA4w"]
[Sat Aug 29 05:09:35.859716 2026] [security2:error] [pid 1041789:tid 1042050] [client 20.52.41.200:4605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-themes.php"] [unique_id "apK974v3RhPI65jTFG7q7AAAA5U"]
[Sat Aug 29 05:09:35.859742 2026] [security2:error] [pid 1041789:tid 1041967] [client 20.104.18.15:25490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/manga.php"] [unique_id "apK974v3RhPI65jTFG7q7QAAA0I"]
[Sat Aug 29 05:09:35.861375 2026] [security2:error] [pid 1041789:tid 1042041] [client 20.104.18.15:45933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/file61.php"] [unique_id "apK974v3RhPI65jTFG7q7gAAA4w"]
[Sat Aug 29 05:09:35.866703 2026] [security2:error] [pid 1041789:tid 1041991] [client 20.48.160.90:50469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/700.php"] [unique_id "apK974v3RhPI65jTFG7q7wAAA1o"]
[Sat Aug 29 05:09:35.871951 2026] [core:error] [pid 1041789:tid 1042000] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.871971 2026] [core:error] [pid 1041789:tid 1042000] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.876004 2026] [security2:error] [pid 1041789:tid 1042038] [client 20.104.18.15:22351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/akismet.php"] [unique_id "apK974v3RhPI65jTFG7q8QAAA4k"]
[Sat Aug 29 05:09:35.881589 2026] [security2:error] [pid 1041789:tid 1041963] [client 20.63.81.20:46409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/wp_n5VD7XDh.php"] [unique_id "apK974v3RhPI65jTFG7q8gAAAz4"]
[Sat Aug 29 05:09:35.881652 2026] [security2:error] [pid 1041789:tid 1042040] [client 93.123.109.228:54882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/config/env.php"] [unique_id "apK974v3RhPI65jTFG7q8wAAA4s"]
[Sat Aug 29 05:09:35.881674 2026] [security2:error] [pid 1041789:tid 1041950] [client 20.104.104.62:22668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/console.php"] [unique_id "apK974v3RhPI65jTFG7q9AAAAzE"]
[Sat Aug 29 05:09:35.895191 2026] [core:error] [pid 1041789:tid 1042046] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.895209 2026] [core:error] [pid 1041789:tid 1042046] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.895985 2026] [cgid:error] [pid 1041789:tid 1041913] [remote 34.138.144.127:46122] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:35.896742 2026] [core:error] [pid 1041789:tid 1041935] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.896932 2026] [core:error] [pid 1041789:tid 1041935] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.901348 2026] [core:error] [pid 1041789:tid 1041944] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.901531 2026] [core:error] [pid 1041789:tid 1041944] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.903999 2026] [core:error] [pid 1041789:tid 1041893] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.904015 2026] [core:error] [pid 1041789:tid 1041893] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.910890 2026] [security2:error] [pid 1041789:tid 1042030] [client 20.220.204.93:59040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/easy.php"] [unique_id "apK974v3RhPI65jTFG7rBQAAA4E"]
[Sat Aug 29 05:09:35.911608 2026] [security2:error] [pid 1041789:tid 1041942] [client 20.104.18.15:46061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/signon.php"] [unique_id "apK974v3RhPI65jTFG7rAwAAAyk"]
[Sat Aug 29 05:09:35.920242 2026] [security2:error] [pid 1041789:tid 1041987] [client 45.148.10.62:33842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xqk.etg.mybluehost.me"] [uri "/.env.php"] [unique_id "apK974v3RhPI65jTFG7rCAAAA1Y"]
[Sat Aug 29 05:09:35.924347 2026] [cgid:error] [pid 1041789:tid 1041807] [remote 34.138.144.127:46122] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:35.927195 2026] [security2:error] [pid 1041789:tid 1042019] [client 20.104.104.62:41938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/see.php"] [unique_id "apK974v3RhPI65jTFG7rCgAAA3Y"]
[Sat Aug 29 05:09:35.928322 2026] [security2:error] [pid 1041789:tid 1041964] [client 20.197.61.180:9567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/bak.phps"] [unique_id "apK974v3RhPI65jTFG7rBgAAAz8"]
[Sat Aug 29 05:09:35.943539 2026] [security2:error] [pid 1041789:tid 1042056] [client 20.104.18.15:43269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/admin.php"] [unique_id "apK974v3RhPI65jTFG7rEQAAA5s"]
[Sat Aug 29 05:09:35.947119 2026] [security2:error] [pid 1041789:tid 1042037] [client 4.205.62.107:56005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/services.php"] [unique_id "apK974v3RhPI65jTFG7rEwAAA4g"]
[Sat Aug 29 05:09:35.949670 2026] [security2:error] [pid 1041789:tid 1042043] [client 127.0.0.1:47414] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK974v3RhPI65jTFG7q2gAAA44"]
[Sat Aug 29 05:09:35.954397 2026] [security2:error] [pid 1041789:tid 1041954] [client 20.104.18.15:15257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/ws55.php"] [unique_id "apK974v3RhPI65jTFG7rFQAAAzU"]
[Sat Aug 29 05:09:35.954757 2026] [security2:error] [pid 1041789:tid 1042042] [client 74.7.230.6:44404] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.yvj.rdg.mybluehost.me"] [uri "/robots.txt"] [unique_id "apK974v3RhPI65jTFG7q1QADjVA"]
[Sat Aug 29 05:09:35.956532 2026] [security2:error] [pid 1041789:tid 1042034] [client 93.123.109.228:45768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/config/module.config.php"] [unique_id "apK974v3RhPI65jTFG7rFwAAA4U"]
[Sat Aug 29 05:09:35.972294 2026] [security2:error] [pid 1041789:tid 1041995] [client 20.104.18.15:41821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/copypaths.php"] [unique_id "apK974v3RhPI65jTFG7rHQAAA14"]
[Sat Aug 29 05:09:35.974263 2026] [security2:error] [pid 1041789:tid 1042014] [client 4.232.148.111:29611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-logs.php"] [unique_id "apK974v3RhPI65jTFG7rHgAAA3E"]
[Sat Aug 29 05:09:35.974774 2026] [cgid:error] [pid 1041789:tid 1041908] [remote 34.138.144.127:46122] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:35.976481 2026] [security2:error] [pid 1041789:tid 1041967] [client 20.63.81.20:40049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/431.php"] [unique_id "apK974v3RhPI65jTFG7rHwAAA0I"]
[Sat Aug 29 05:09:35.984863 2026] [security2:error] [pid 1041789:tid 1041970] [client 20.63.81.20:65193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/hypo.php"] [unique_id "apK974v3RhPI65jTFG7rIwAAA0U"]
[Sat Aug 29 05:09:35.986795 2026] [security2:error] [pid 1041789:tid 1041845] [remote 93.123.109.228:39364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glamrus.rocks"] [uri "/api/phpinfo.php"] [unique_id "apK974v3RhPI65jTFG7rJAADIys"]
[Sat Aug 29 05:09:35.988381 2026] [security2:error] [pid 1041789:tid 1041963] [client 93.123.109.228:45826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/config/nexmo.php"] [unique_id "apK974v3RhPI65jTFG7rIgAAAz4"]
[Sat Aug 29 05:09:35.994599 2026] [core:error] [pid 1041789:tid 1041947] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.994628 2026] [core:error] [pid 1041789:tid 1041947] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.994866 2026] [security2:error] [pid 1041789:tid 1041933] [client 20.104.18.15:16870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/asdfghj.php"] [unique_id "apK974v3RhPI65jTFG7rKwAAAyA"]
[Sat Aug 29 05:09:35.999405 2026] [core:error] [pid 1041789:tid 1042050] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:35.999425 2026] [core:error] [pid 1041789:tid 1042050] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.002873 2026] [security2:error] [pid 1041789:tid 1042013] [client 20.104.18.15:7079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/dex.php"] [unique_id "apK98Iv3RhPI65jTFG7rLwAAA3A"]
[Sat Aug 29 05:09:36.002898 2026] [security2:error] [pid 1041789:tid 1042044] [client 20.104.104.62:4863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/bnnof6.php"] [unique_id "apK98Iv3RhPI65jTFG7rMAAAA48"]
[Sat Aug 29 05:09:36.009796 2026] [core:error] [pid 1041789:tid 1041946] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.009813 2026] [core:error] [pid 1041789:tid 1041946] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.011557 2026] [security2:error] [pid 1041789:tid 1042021] [client 158.23.147.79:44493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/makeasmtp.php"] [unique_id "apK98Iv3RhPI65jTFG7rNAAAA3g"]
[Sat Aug 29 05:09:36.015985 2026] [security2:error] [pid 1041789:tid 1041977] [client 20.48.160.90:50482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/c4.php"] [unique_id "apK98Iv3RhPI65jTFG7rNQAAA0w"]
[Sat Aug 29 05:09:36.017709 2026] [security2:error] [pid 1041789:tid 1041979] [client 20.104.104.62:22710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/blnux.php"] [unique_id "apK98Iv3RhPI65jTFG7rNgAAA04"]
[Sat Aug 29 05:09:36.021175 2026] [security2:error] [pid 1041789:tid 1041980] [client 20.63.81.20:55624] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/img.php"] [unique_id "apK98Iv3RhPI65jTFG7rOQAAA08"]
[Sat Aug 29 05:09:36.021340 2026] [security2:error] [pid 1041789:tid 1041956] [client 158.158.54.35:34173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/init.php"] [unique_id "apK98Iv3RhPI65jTFG7rOAAAAzc"]
[Sat Aug 29 05:09:36.024474 2026] [security2:error] [pid 1041789:tid 1041956] [client 20.104.18.15:22487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/ajax.php"] [unique_id "apK98Iv3RhPI65jTFG7rPAAAAzc"]
[Sat Aug 29 05:09:36.032711 2026] [security2:error] [pid 1041789:tid 1041990] [client 68.155.159.216:6079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-admin/index.php"] [unique_id "apK98Iv3RhPI65jTFG7rPgAAA1k"]
[Sat Aug 29 05:09:36.049284 2026] [security2:error] [pid 1041789:tid 1042025] [client 20.220.204.93:50785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/fresh3.php"] [unique_id "apK98Iv3RhPI65jTFG7rQQAAA3w"]
[Sat Aug 29 05:09:36.053301 2026] [cgid:error] [pid 1041789:tid 1041870] [remote 34.138.144.127:46122] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:36.058269 2026] [security2:error] [pid 1041789:tid 1042051] [client 93.123.109.228:45770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/config/stripe.php"] [unique_id "apK98Iv3RhPI65jTFG7rRQAAA5Y"]
[Sat Aug 29 05:09:36.065115 2026] [security2:error] [pid 1041789:tid 1042037] [client 20.104.104.62:60704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/horeg.php"] [unique_id "apK98Iv3RhPI65jTFG7rTwAAA4g"]
[Sat Aug 29 05:09:36.066723 2026] [cgid:error] [pid 1041789:tid 1041911] [remote 34.138.144.127:46122] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:36.070650 2026] [cgid:error] [pid 1041789:tid 1041917] [remote 34.138.144.127:46122] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:36.070660 2026] [cgid:error] [pid 1041789:tid 1041873] [remote 34.138.144.127:46122] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:36.071457 2026] [security2:error] [pid 1041789:tid 1042037] [client 158.23.147.79:17685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/wp-content/index.php"] [unique_id "apK98Iv3RhPI65jTFG7rUgAAA4g"]
[Sat Aug 29 05:09:36.084305 2026] [security2:error] [pid 1041789:tid 1041968] [client 20.104.18.15:45906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/file61.php"] [unique_id "apK98Iv3RhPI65jTFG7rYAAAA0M"]
[Sat Aug 29 05:09:36.103304 2026] [cgid:error] [pid 1041789:tid 1041848] [remote 34.138.144.127:46122] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:36.107897 2026] [cgid:error] [pid 1041789:tid 1041859] [remote 34.138.144.127:46122] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:36.108807 2026] [security2:error] [pid 1041789:tid 1042029] [client 20.104.18.15:43914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/ws85.php"] [unique_id "apK98Iv3RhPI65jTFG7rbQAAA4A"]
[Sat Aug 29 05:09:36.114017 2026] [security2:error] [pid 1041789:tid 1041963] [client 20.104.18.15:15348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/drykl.php"] [unique_id "apK98Iv3RhPI65jTFG7rcAAAAz4"]
[Sat Aug 29 05:09:36.114549 2026] [security2:error] [pid 1041789:tid 1041856] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/.wp-config.php.swp"] [unique_id "apK98Iv3RhPI65jTFG7rcQADhTY"]
[Sat Aug 29 05:09:36.119194 2026] [security2:error] [pid 1041789:tid 1041803] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/ADMIN/.env"] [unique_id "apK98Iv3RhPI65jTFG7rdwADhQE"]
[Sat Aug 29 05:09:36.121022 2026] [core:error] [pid 1041789:tid 1041931] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.121039 2026] [core:error] [pid 1041789:tid 1041931] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.121155 2026] [core:error] [pid 1041789:tid 1042054] [client 157.245.66.179:43622] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://leeannandpaul.strangeworx.com/
[Sat Aug 29 05:09:36.125528 2026] [core:error] [pid 1041789:tid 1041970] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.125546 2026] [security2:error] [pid 1041789:tid 1041901] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/API/.env"] [unique_id "apK98Iv3RhPI65jTFG7reQADhWM"]
[Sat Aug 29 05:09:36.125556 2026] [core:error] [pid 1041789:tid 1041970] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.127206 2026] [core:error] [pid 1041789:tid 1041825] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.127224 2026] [core:error] [pid 1041789:tid 1041825] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.129382 2026] [security2:error] [pid 1041789:tid 1042044] [client 20.104.18.15:46077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/copypaths.php"] [unique_id "apK98Iv3RhPI65jTFG7rfQAAA48"]
[Sat Aug 29 05:09:36.131736 2026] [core:error] [pid 1041789:tid 1041895] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.131754 2026] [core:error] [pid 1041789:tid 1041895] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.138139 2026] [security2:error] [pid 1041789:tid 1041938] [client 20.104.18.15:41873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/bless6.php"] [unique_id "apK98Iv3RhPI65jTFG7rgQAAAyU"]
[Sat Aug 29 05:09:36.141166 2026] [security2:error] [pid 1041789:tid 1042041] [client 20.104.18.15:7106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/inso.php"] [unique_id "apK98Iv3RhPI65jTFG7rggAAA4w"]
[Sat Aug 29 05:09:36.142805 2026] [core:error] [pid 1041789:tid 1042044] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.142826 2026] [core:error] [pid 1041789:tid 1042044] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.143223 2026] [security2:error] [pid 1041789:tid 1041981] [client 20.104.18.15:25545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/dragonshell.php"] [unique_id "apK98Iv3RhPI65jTFG7rhAAAA1A"]
[Sat Aug 29 05:09:36.146956 2026] [core:error] [pid 1041789:tid 1042024] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.146972 2026] [core:error] [pid 1041789:tid 1042024] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.147724 2026] [security2:error] [pid 1041789:tid 1041998] [client 20.48.160.90:50489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/wp-tymanage.php"] [unique_id "apK98Iv3RhPI65jTFG7rhQAAA2E"]
[Sat Aug 29 05:09:36.150897 2026] [security2:error] [pid 1041789:tid 1041980] [client 20.104.104.62:64672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/ah24.php"] [unique_id "apK98Iv3RhPI65jTFG7rhwAAA08"]
[Sat Aug 29 05:09:36.154931 2026] [security2:error] [pid 1041789:tid 1042032] [client 20.104.104.62:22692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/pentest.php"] [unique_id "apK98Iv3RhPI65jTFG7riQAAA4M"]
[Sat Aug 29 05:09:36.158830 2026] [core:error] [pid 1041789:tid 1041977] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.158852 2026] [core:error] [pid 1041789:tid 1041977] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.161772 2026] [security2:error] [pid 1041789:tid 1041942] [client 20.63.219.114:10560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/alfa.php"] [unique_id "apK98Iv3RhPI65jTFG7riwAAAyk"]
[Sat Aug 29 05:09:36.167784 2026] [core:error] [pid 1041789:tid 1041960] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.167805 2026] [core:error] [pid 1041789:tid 1041960] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.172467 2026] [core:error] [pid 1041789:tid 1042048] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.172487 2026] [core:error] [pid 1041789:tid 1042048] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.192112 2026] [security2:error] [pid 1041789:tid 1041954] [client 20.104.18.15:22402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/atomlib.php"] [unique_id "apK98Iv3RhPI65jTFG7rjwAAAzU"]
[Sat Aug 29 05:09:36.195443 2026] [security2:error] [pid 1041789:tid 1041951] [client 20.220.204.93:52235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/bgymj.php"] [unique_id "apK98Iv3RhPI65jTFG7rkQAAAzI"]
[Sat Aug 29 05:09:36.213503 2026] [cgid:error] [pid 1041789:tid 1041925] [remote 34.138.144.127:46122] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:36.220503 2026] [security2:error] [pid 1041789:tid 1041956] [client 52.139.37.240:31093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/ahax.php"] [unique_id "apK98Iv3RhPI65jTFG7rkwAAAzc"]
[Sat Aug 29 05:09:36.222130 2026] [security2:error] [pid 1041789:tid 1042029] [client 20.104.104.62:41946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/basic.php"] [unique_id "apK98Iv3RhPI65jTFG7rlAAAA4A"]
[Sat Aug 29 05:09:36.227827 2026] [cgid:error] [pid 1041789:tid 1041897] [remote 34.138.144.127:46122] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:36.229460 2026] [security2:error] [pid 1041789:tid 1042019] [client 74.248.24.12:37843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/num.php"] [unique_id "apK98Iv3RhPI65jTFG7rmAAAA3Y"]
[Sat Aug 29 05:09:36.248183 2026] [security2:error] [pid 1041789:tid 1042031] [client 20.104.18.15:15277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/backup.php"] [unique_id "apK98Iv3RhPI65jTFG7rmgAAA4I"]
[Sat Aug 29 05:09:36.267833 2026] [security2:error] [pid 1041789:tid 1041877] [remote 34.138.144.127:46122] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/app/.env"] [unique_id "apK98Iv3RhPI65jTFG7rngADd0s"]
[Sat Aug 29 05:09:36.269469 2026] [cgid:error] [pid 1041789:tid 1041844] [remote 34.138.144.127:46122] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:36.270300 2026] [security2:error] [pid 1041789:tid 1041828] [remote 34.138.144.127:46122] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/src/.env"] [unique_id "apK98Iv3RhPI65jTFG7rnwADdxo"]
[Sat Aug 29 05:09:36.277669 2026] [security2:error] [pid 1041789:tid 1042021] [client 20.104.18.15:41931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/special.php"] [unique_id "apK98Iv3RhPI65jTFG7roQAAA3g"]
[Sat Aug 29 05:09:36.278220 2026] [security2:error] [pid 1041789:tid 1041976] [client 20.104.18.15:45978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/copypaths.php"] [unique_id "apK98Iv3RhPI65jTFG7rogAAA0s"]
[Sat Aug 29 05:09:36.278598 2026] [security2:error] [pid 1041789:tid 1041961] [client 20.104.18.15:16860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/wp-safe.php"] [unique_id "apK98Iv3RhPI65jTFG7rowAAAzw"]
[Sat Aug 29 05:09:36.282459 2026] [cgid:error] [pid 1041789:tid 1041850] [remote 74.7.241.150:36552] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/protypeg/public_html/xyzece/404.shtml
[Sat Aug 29 05:09:36.282602 2026] [security2:error] [pid 1041789:tid 1041963] [client 74.7.241.150:36552] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.xyzece.com"] [uri "/404.shtml"] [unique_id "apK98Iv3RhPI65jTFG7roAADPjA"]
[Sat Aug 29 05:09:36.287852 2026] [security2:error] [pid 1041789:tid 1041949] [client 20.104.104.62:46006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/6y7t.php"] [unique_id "apK98Iv3RhPI65jTFG7rpgAAAzA"]
[Sat Aug 29 05:09:36.289104 2026] [security2:error] [pid 1041789:tid 1041860] [remote 34.138.144.127:46122] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/frontend/.env"] [unique_id "apK98Iv3RhPI65jTFG7rpQADmDo"]
[Sat Aug 29 05:09:36.292274 2026] [security2:error] [pid 1041789:tid 1041979] [client 20.48.160.90:45429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/ajfto.php"] [unique_id "apK98Iv3RhPI65jTFG7rqAAAA04"]
[Sat Aug 29 05:09:36.293609 2026] [security2:error] [pid 1041789:tid 1041972] [client 20.104.104.62:37228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/ztv.php"] [unique_id "apK98Iv3RhPI65jTFG7rqQAAA0c"]
[Sat Aug 29 05:09:36.298911 2026] [security2:error] [pid 1041789:tid 1041969] [client 20.104.104.62:64755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/hh.php"] [unique_id "apK98Iv3RhPI65jTFG7rqgAAA0Q"]
[Sat Aug 29 05:09:36.307765 2026] [security2:error] [pid 1041789:tid 1042057] [client 20.52.41.200:5341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-trackback.php"] [unique_id "apK98Iv3RhPI65jTFG7rrwAAA5w"]
[Sat Aug 29 05:09:36.315106 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.104.18.15:7020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/aa.php"] [unique_id "apK98Iv3RhPI65jTFG7rsQAAA30"]
[Sat Aug 29 05:09:36.322729 2026] [security2:error] [pid 1041789:tid 1041990] [client 4.232.148.111:11244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-access.php"] [unique_id "apK98Iv3RhPI65jTFG7rswAAA1k"]
[Sat Aug 29 05:09:36.340231 2026] [security2:error] [pid 1041789:tid 1041909] [remote 34.138.144.127:46122] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/server/.env"] [unique_id "apK98Iv3RhPI65jTFG7ruAADfGs"]
[Sat Aug 29 05:09:36.340736 2026] [security2:error] [pid 1041789:tid 1041812] [remote 34.138.144.127:46122] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/dev/.env"] [unique_id "apK98Iv3RhPI65jTFG7ruQADfAo"]
[Sat Aug 29 05:09:36.348538 2026] [http2:warn] [pid 1017536:tid 1017719] [client 57.141.14.14:64940] h2_stream(1017536-392-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:09:36.348810 2026] [security2:error] [pid 1041789:tid 1042027] [client 40.83.93.50:14466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/disagraeosc.php"] [unique_id "apK98Iv3RhPI65jTFG7ruwAAA34"]
[Sat Aug 29 05:09:36.356156 2026] [security2:error] [pid 1041789:tid 1042033] [client 4.205.62.107:63893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/dialog.php"] [unique_id "apK98Iv3RhPI65jTFG7rvgAAA4Q"]
[Sat Aug 29 05:09:36.360302 2026] [security2:error] [pid 1041789:tid 1042034] [client 20.104.104.62:43363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/monso.php"] [unique_id "apK98Iv3RhPI65jTFG7rwwAAA4U"]
[Sat Aug 29 05:09:36.361376 2026] [security2:error] [pid 1041789:tid 1041940] [client 20.220.204.93:50766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/ws69.php"] [unique_id "apK98Iv3RhPI65jTFG7rxQAAAyc"]
[Sat Aug 29 05:09:36.389228 2026] [security2:error] [pid 1041789:tid 1041893] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/APP/.env"] [unique_id "apK98Iv3RhPI65jTFG7rzwADcVs"]
[Sat Aug 29 05:09:36.389517 2026] [security2:error] [pid 1041789:tid 1042051] [client 20.104.18.15:46030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/bless6.php"] [unique_id "apK98Iv3RhPI65jTFG7r0QAAA5Y"]
[Sat Aug 29 05:09:36.389929 2026] [security2:error] [pid 1041789:tid 1041965] [client 20.104.18.15:43297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/ffs.php"] [unique_id "apK98Iv3RhPI65jTFG7rzgAAA0A"]
[Sat Aug 29 05:09:36.390785 2026] [core:error] [pid 1041789:tid 1041892] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.390802 2026] [core:error] [pid 1041789:tid 1041892] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.391604 2026] [core:error] [pid 1041789:tid 1041864] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.391620 2026] [core:error] [pid 1041789:tid 1041864] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.391814 2026] [core:error] [pid 1041789:tid 1041815] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.391822 2026] [core:error] [pid 1041789:tid 1041815] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.393347 2026] [core:error] [pid 1041789:tid 1041839] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.393376 2026] [core:error] [pid 1041789:tid 1041839] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.402786 2026] [security2:error] [pid 1041789:tid 1042006] [client 20.104.18.15:22516] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "autodiscover.nranch.com"] [uri "/1.php"] [unique_id "apK98Iv3RhPI65jTFG7r2gAAA2k"]
[Sat Aug 29 05:09:36.402910 2026] [security2:error] [pid 1041789:tid 1042006] [client 20.104.18.15:22516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/1.php"] [unique_id "apK98Iv3RhPI65jTFG7r2gAAA2k"]
[Sat Aug 29 05:09:36.404234 2026] [security2:error] [pid 1041789:tid 1041995] [client 20.104.18.15:15238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/indo.php"] [unique_id "apK98Iv3RhPI65jTFG7r3AAAA14"]
[Sat Aug 29 05:09:36.410059 2026] [security2:error] [pid 1041789:tid 1042042] [client 20.104.18.15:25529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/gjewuagf.php"] [unique_id "apK98Iv3RhPI65jTFG7r3QAAA40"]
[Sat Aug 29 05:09:36.413997 2026] [autoindex:error] [pid 1041789:tid 1041931] [client 45.148.10.62:33860] AH01276: Cannot serve directory /home3/xtjotnmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:09:36.417851 2026] [security2:error] [pid 1041789:tid 1041933] [client 20.104.104.62:45952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/0xs.php"] [unique_id "apK98Iv3RhPI65jTFG7r4AAAAyA"]
[Sat Aug 29 05:09:36.418922 2026] [security2:error] [pid 1041789:tid 1041888] [remote 93.123.109.228:39292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmsproductions.com"] [uri "/api/info.php"] [unique_id "apK98Iv3RhPI65jTFG7r4QADY1Y"]
[Sat Aug 29 05:09:36.428265 2026] [security2:error] [pid 1041789:tid 1042018] [client 20.104.104.62:56372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/kure.php"] [unique_id "apK98Iv3RhPI65jTFG7r5AAAA3U"]
[Sat Aug 29 05:09:36.430247 2026] [security2:error] [pid 1041789:tid 1041939] [client 20.48.160.90:50537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/wp_KwIW0U5F.php"] [unique_id "apK98Iv3RhPI65jTFG7r5QAAAyY"]
[Sat Aug 29 05:09:36.433792 2026] [security2:error] [pid 1041789:tid 1041921] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/Api/.env"] [unique_id "apK98Iv3RhPI65jTFG7r5wADLHc"]
[Sat Aug 29 05:09:36.436867 2026] [security2:error] [pid 1041789:tid 1042031] [client 20.104.18.15:41858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/fz.php"] [unique_id "apK98Iv3RhPI65jTFG7r6gAAA4I"]
[Sat Aug 29 05:09:36.437721 2026] [security2:error] [pid 1041789:tid 1041835] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/BACKEND/.env"] [unique_id "apK98Iv3RhPI65jTFG7r7QADciE"]
[Sat Aug 29 05:09:36.437724 2026] [security2:error] [pid 1041789:tid 1041915] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/BACK/.env"] [unique_id "apK98Iv3RhPI65jTFG7r6wADcnE"]
[Sat Aug 29 05:09:36.438879 2026] [security2:error] [pid 1041789:tid 1041870] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/Backend/.env"] [unique_id "apK98Iv3RhPI65jTFG7r7gADckQ"]
[Sat Aug 29 05:09:36.439196 2026] [security2:error] [pid 1041789:tid 1041887] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/BE/.env"] [unique_id "apK98Iv3RhPI65jTFG7r7wADclU"]
[Sat Aug 29 05:09:36.439879 2026] [core:error] [pid 1041789:tid 1041817] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.439892 2026] [core:error] [pid 1041789:tid 1041817] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.445236 2026] [security2:error] [pid 1041789:tid 1041967] [client 52.139.37.240:31073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/breads1.php"] [unique_id "apK98Iv3RhPI65jTFG7r8QAAA0I"]
[Sat Aug 29 05:09:36.446396 2026] [security2:error] [pid 1041789:tid 1041946] [client 20.104.18.15:7036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/img.php"] [unique_id "apK98Iv3RhPI65jTFG7r8gAAAy0"]
[Sat Aug 29 05:09:36.462092 2026] [security2:error] [pid 1041789:tid 1041964] [client 4.205.62.107:22277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/aws_settings.php"] [unique_id "apK98Iv3RhPI65jTFG7r-AAAAz8"]
[Sat Aug 29 05:09:36.463493 2026] [security2:error] [pid 1041789:tid 1042052] [client 20.104.18.15:46046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/bless6.php"] [unique_id "apK98Iv3RhPI65jTFG7r-QAAA5c"]
[Sat Aug 29 05:09:36.480563 2026] [security2:error] [pid 1041789:tid 1041823] [remote 34.138.144.127:46122] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/apps/.env"] [unique_id "apK98Iv3RhPI65jTFG7r_QADjxU"]
[Sat Aug 29 05:09:36.485247 2026] [security2:error] [pid 1041789:tid 1042017] [client 4.232.148.111:35804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-admin/css/about.php"] [unique_id "apK98Iv3RhPI65jTFG7r_wAAA3Q"]
[Sat Aug 29 05:09:36.489307 2026] [security2:error] [pid 1041789:tid 1041881] [remote 93.123.109.228:39292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmsproductions.com"] [uri "/api/phpinfo.php"] [unique_id "apK98Iv3RhPI65jTFG7sAwADT08"]
[Sat Aug 29 05:09:36.489337 2026] [security2:error] [pid 1041789:tid 1041804] [remote 34.138.144.127:46122] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/production/.env"] [unique_id "apK98Iv3RhPI65jTFG7sAgADmAI"]
[Sat Aug 29 05:09:36.491202 2026] [security2:error] [pid 1041789:tid 1041859] [remote 34.138.144.127:46122] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/staging/.env"] [unique_id "apK98Iv3RhPI65jTFG7sCQADmDk"]
[Sat Aug 29 05:09:36.498166 2026] [security2:error] [pid 1041789:tid 1041856] [remote 34.138.144.127:46122] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/v1/.env"] [unique_id "apK98Iv3RhPI65jTFG7sDQADYTY"]
[Sat Aug 29 05:09:36.500307 2026] [security2:error] [pid 1041789:tid 1041856] [remote 34.138.144.127:46122] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/v2/.env"] [unique_id "apK98Iv3RhPI65jTFG7sFgADYTY"]
[Sat Aug 29 05:09:36.509984 2026] [security2:error] [pid 1041789:tid 1042047] [client 20.104.104.62:60702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/rce.php"] [unique_id "apK98Iv3RhPI65jTFG7sFwAAA5I"]
[Sat Aug 29 05:09:36.513774 2026] [security2:error] [pid 1041789:tid 1041957] [client 20.220.204.93:59129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/ccs.php"] [unique_id "apK98Iv3RhPI65jTFG7sGwAAAzg"]
[Sat Aug 29 05:09:36.532089 2026] [core:error] [pid 1041789:tid 1041951] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.532109 2026] [core:error] [pid 1041789:tid 1041951] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.533436 2026] [security2:error] [pid 1041789:tid 1041811] [remote 34.138.144.127:46122] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/docker/.env"] [unique_id "apK98Iv3RhPI65jTFG7sKgADhQk"]
[Sat Aug 29 05:09:36.538510 2026] [security2:error] [pid 1041789:tid 1042037] [client 20.104.18.15:15336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/sign.php"] [unique_id "apK98Iv3RhPI65jTFG7sLQAAA4g"]
[Sat Aug 29 05:09:36.539408 2026] [core:error] [pid 1041789:tid 1042033] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.539425 2026] [core:error] [pid 1041789:tid 1042033] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.539773 2026] [core:error] [pid 1041789:tid 1041978] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.539784 2026] [core:error] [pid 1041789:tid 1041978] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.546438 2026] [security2:error] [pid 1041789:tid 1041991] [client 93.123.109.228:45758] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/crm/.env"] [unique_id "apK98Iv3RhPI65jTFG7sMAAAA1o"]
[Sat Aug 29 05:09:36.546478 2026] [security2:error] [pid 1041789:tid 1042051] [client 20.104.18.15:25555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/tnglzqmv.php"] [unique_id "apK98Iv3RhPI65jTFG7sMQAAA5Y"]
[Sat Aug 29 05:09:36.547090 2026] [security2:error] [pid 1041789:tid 1041965] [client 158.23.147.79:60173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK98Iv3RhPI65jTFG7sMgAAA0A"]
[Sat Aug 29 05:09:36.556609 2026] [core:error] [pid 1041789:tid 1041940] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.556626 2026] [core:error] [pid 1041789:tid 1041940] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.559307 2026] [security2:error] [pid 1041789:tid 1041940] [client 20.104.18.15:44002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/nano.php"] [unique_id "apK98Iv3RhPI65jTFG7sNQAAAyc"]
[Sat Aug 29 05:09:36.560199 2026] [security2:error] [pid 1041789:tid 1041934] [client 69.63.184.1:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/ingredient/mushrooms-2/"] [unique_id "apK98Iv3RhPI65jTFG7sNAAAAyE"]
[Sat Aug 29 05:09:36.562399 2026] [security2:error] [pid 1041789:tid 1041931] [client 20.48.160.90:50491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/wp_xiPu52Ut.php"] [unique_id "apK98Iv3RhPI65jTFG7sNgAAAx4"]
[Sat Aug 29 05:09:36.566048 2026] [security2:error] [pid 1041789:tid 1042029] [client 158.158.54.35:31967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "apK98Iv3RhPI65jTFG7sOQAAA4A"]
[Sat Aug 29 05:09:36.567718 2026] [security2:error] [pid 1041789:tid 1041933] [client 45.148.10.62:33860] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.xtj.otn.mybluehost.me"] [uri "/.env"] [unique_id "apK98Iv3RhPI65jTFG7sOAAAAyA"]
[Sat Aug 29 05:09:36.567729 2026] [security2:error] [pid 1041789:tid 1042010] [client 20.104.104.62:37246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/cafe.php"] [unique_id "apK98Iv3RhPI65jTFG7sOgAAA20"]
[Sat Aug 29 05:09:36.568157 2026] [security2:error] [pid 1041789:tid 1042020] [client 20.63.219.114:1307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/feed-rss2-queue.php"] [unique_id "apK98Iv3RhPI65jTFG7sOwAAA3c"]
[Sat Aug 29 05:09:36.570123 2026] [security2:error] [pid 1041789:tid 1042019] [client 20.104.104.62:22665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/waf.php"] [unique_id "apK98Iv3RhPI65jTFG7sPQAAA3Y"]
[Sat Aug 29 05:09:36.579704 2026] [security2:error] [pid 1041789:tid 1041970] [client 20.104.18.15:6948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/222.php"] [unique_id "apK98Iv3RhPI65jTFG7sQAAAA0U"]
[Sat Aug 29 05:09:36.584710 2026] [security2:error] [pid 1041789:tid 1041846] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/Be/.env"] [unique_id "apK98Iv3RhPI65jTFG7sRAADTiw"]
[Sat Aug 29 05:09:36.595870 2026] [security2:error] [pid 1041789:tid 1042038] [client 20.104.18.15:22438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/samll.php"] [unique_id "apK98Iv3RhPI65jTFG7sTQAAA4k"]
[Sat Aug 29 05:09:36.596669 2026] [security2:error] [pid 1041789:tid 1041969] [client 93.123.109.228:45774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/current/.env"] [unique_id "apK98Iv3RhPI65jTFG7sSwAAA0Q"]
[Sat Aug 29 05:09:36.597424 2026] [security2:error] [pid 1041789:tid 1042021] [client 20.104.18.15:41892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/clque.php"] [unique_id "apK98Iv3RhPI65jTFG7sTwAAA3g"]
[Sat Aug 29 05:09:36.599886 2026] [security2:error] [pid 1041789:tid 1042011] [client 93.123.109.228:45862] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/demo/.env"] [unique_id "apK98Iv3RhPI65jTFG7sUAAAA24"]
[Sat Aug 29 05:09:36.603322 2026] [security2:error] [pid 1041789:tid 1041941] [client 20.197.61.180:18220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/config.php"] [unique_id "apK98Iv3RhPI65jTFG7sVAAAAyg"]
[Sat Aug 29 05:09:36.609595 2026] [security2:error] [pid 1041789:tid 1042017] [client 93.123.109.228:54856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/cron/.env"] [unique_id "apK98Iv3RhPI65jTFG7sVQAAA3Q"]
[Sat Aug 29 05:09:36.615638 2026] [security2:error] [pid 1041789:tid 1041842] [remote 34.138.144.127:46122] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/old/.env"] [unique_id "apK98Iv3RhPI65jTFG7sVwADRyg"]
[Sat Aug 29 05:09:36.632529 2026] [security2:error] [pid 1041789:tid 1041866] [remote 34.138.144.127:46122] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/portal/.env"] [unique_id "apK98Iv3RhPI65jTFG7sWwADH0A"]
[Sat Aug 29 05:09:36.633994 2026] [security2:error] [pid 1041789:tid 1041819] [remote 34.138.144.127:46122] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/site/.env"] [unique_id "apK98Iv3RhPI65jTFG7sXAADHxE"]
[Sat Aug 29 05:09:36.638740 2026] [security2:error] [pid 1041789:tid 1041932] [client 93.123.109.228:54826] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/dev/.env"] [unique_id "apK98Iv3RhPI65jTFG7sXQAAAx8"]
[Sat Aug 29 05:09:36.640754 2026] [security2:error] [pid 1041789:tid 1041950] [client 20.104.18.15:46064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/special.php"] [unique_id "apK98Iv3RhPI65jTFG7sYgAAAzE"]
[Sat Aug 29 05:09:36.642805 2026] [security2:error] [pid 1041789:tid 1041861] [remote 34.138.144.127:46122] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/env.bak"] [unique_id "apK98Iv3RhPI65jTFG7sXwADaDs"]
[Sat Aug 29 05:09:36.643662 2026] [security2:error] [pid 1041789:tid 1041862] [remote 34.138.144.127:46122] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/env.old"] [unique_id "apK98Iv3RhPI65jTFG7sYwADaDw"]
[Sat Aug 29 05:09:36.644732 2026] [security2:error] [pid 1041789:tid 1042015] [client 52.139.37.240:31149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/must.php"] [unique_id "apK98Iv3RhPI65jTFG7sZQAAA3I"]
[Sat Aug 29 05:09:36.645839 2026] [security2:error] [pid 1041789:tid 1041828] [remote 34.138.144.127:46122] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/.docker/.env"] [unique_id "apK98Iv3RhPI65jTFG7sZgADaBo"]
[Sat Aug 29 05:09:36.651814 2026] [security2:error] [pid 1041789:tid 1041963] [client 87.219.197.128:53830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK98Iv3RhPI65jTFG7saAAAAz4"]
[Sat Aug 29 05:09:36.651923 2026] [security2:error] [pid 1041789:tid 1041963] [client 87.219.197.128:53830] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK98Iv3RhPI65jTFG7saAAAAz4"]
[Sat Aug 29 05:09:36.657274 2026] [security2:error] [pid 1041789:tid 1041956] [client 20.197.61.180:9550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/install.php"] [unique_id "apK98Iv3RhPI65jTFG7sbAAAAzc"]
[Sat Aug 29 05:09:36.658053 2026] [security2:error] [pid 1041789:tid 1041951] [client 20.220.204.93:59045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/mar.php"] [unique_id "apK98Iv3RhPI65jTFG7sbQAAAzI"]
[Sat Aug 29 05:09:36.659655 2026] [security2:error] [pid 1041789:tid 1041942] [client 20.104.18.15:45914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/special.php"] [unique_id "apK98Iv3RhPI65jTFG7sbgAAAyk"]
[Sat Aug 29 05:09:36.671423 2026] [security2:error] [pid 1041789:tid 1041977] [client 20.104.18.15:15341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/wnnjpsby.php"] [unique_id "apK98Iv3RhPI65jTFG7scgAAA0w"]
[Sat Aug 29 05:09:36.672664 2026] [security2:error] [pid 1041789:tid 1042033] [client 68.155.159.216:61249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-includes/js/index.php"] [unique_id "apK98Iv3RhPI65jTFG7scwAAA4Q"]
[Sat Aug 29 05:09:36.678764 2026] [security2:error] [pid 1041789:tid 1042032] [client 20.104.18.15:16800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/wefile.php"] [unique_id "apK98Iv3RhPI65jTFG7sdgAAA4M"]
[Sat Aug 29 05:09:36.682412 2026] [security2:error] [pid 1041789:tid 1041968] [client 4.205.62.107:8741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/debuggen.php"] [unique_id "apK98Iv3RhPI65jTFG7seAAAA0M"]
[Sat Aug 29 05:09:36.687959 2026] [security2:error] [pid 1041789:tid 1041997] [client 93.123.109.228:54844] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/develop/.env"] [unique_id "apK98Iv3RhPI65jTFG7seQAAA2A"]
[Sat Aug 29 05:09:36.696684 2026] [security2:error] [pid 1041789:tid 1041944] [client 20.48.160.90:50502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/wp_n5VD7XDh.php"] [unique_id "apK98Iv3RhPI65jTFG7sgQAAAys"]
[Sat Aug 29 05:09:36.703310 2026] [security2:error] [pid 1041789:tid 1041990] [client 158.23.147.79:14239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-admin/about.php"] [unique_id "apK98Iv3RhPI65jTFG7siwAAA1k"]
[Sat Aug 29 05:09:36.722108 2026] [security2:error] [pid 1041789:tid 1041913] [remote 93.123.109.228:55834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyer.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK98Iv3RhPI65jTFG7smAADKm8"]
[Sat Aug 29 05:09:36.726042 2026] [security2:error] [pid 1041789:tid 1042050] [client 93.123.109.228:54878] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/developer/.env"] [unique_id "apK98Iv3RhPI65jTFG7smwAAA5U"]
[Sat Aug 29 05:09:36.726645 2026] [core:error] [pid 1041789:tid 1042018] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.726663 2026] [core:error] [pid 1041789:tid 1042018] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.731318 2026] [core:error] [pid 1041789:tid 1041982] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.731339 2026] [core:error] [pid 1041789:tid 1041982] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.736266 2026] [core:error] [pid 1041789:tid 1041964] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.736287 2026] [core:error] [pid 1041789:tid 1041964] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.739965 2026] [security2:error] [pid 1041789:tid 1042044] [client 158.23.147.79:62987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/file17.php"] [unique_id "apK98Iv3RhPI65jTFG7srwAAA48"]
[Sat Aug 29 05:09:36.741500 2026] [core:error] [pid 1041789:tid 1042038] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.741516 2026] [core:error] [pid 1041789:tid 1042038] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.743413 2026] [security2:error] [pid 1041789:tid 1042017] [client 45.148.10.62:33860] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.xtj.otn.mybluehost.me"] [uri "/.env"] [unique_id "apK98Iv3RhPI65jTFG7srgAAA3Q"]
[Sat Aug 29 05:09:36.743708 2026] [security2:error] [pid 1041789:tid 1041941] [client 20.104.18.15:22424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/she11.php"] [unique_id "apK98Iv3RhPI65jTFG7stQAAAyg"]
[Sat Aug 29 05:09:36.745409 2026] [core:error] [pid 1041789:tid 1042013] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.745428 2026] [core:error] [pid 1041789:tid 1042013] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.746077 2026] [security2:error] [pid 1041789:tid 1042053] [client 20.104.18.15:41915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/nano.php"] [unique_id "apK98Iv3RhPI65jTFG7stgAAA5g"]
[Sat Aug 29 05:09:36.746595 2026] [core:error] [pid 1041789:tid 1042021] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.746614 2026] [core:error] [pid 1041789:tid 1042021] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.748120 2026] [core:error] [pid 1041789:tid 1041979] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.748135 2026] [core:error] [pid 1041789:tid 1041979] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.751461 2026] [core:error] [pid 1041789:tid 1042011] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.751477 2026] [core:error] [pid 1041789:tid 1042011] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.751477 2026] [security2:error] [pid 1041789:tid 1042026] [client 93.123.109.228:45786] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/development/.env"] [unique_id "apK98Iv3RhPI65jTFG7sugAAA30"]
[Sat Aug 29 05:09:36.754721 2026] [security2:error] [pid 1041789:tid 1042030] [client 20.104.18.15:7136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/key.php"] [unique_id "apK98Iv3RhPI65jTFG7svAAAA4E"]
[Sat Aug 29 05:09:36.764084 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.104.18.15:43288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/ano.php"] [unique_id "apK98Iv3RhPI65jTFG7swwAAA2Q"]
[Sat Aug 29 05:09:36.765241 2026] [core:error] [pid 1041789:tid 1042030] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.765258 2026] [core:error] [pid 1041789:tid 1042030] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.765508 2026] [core:error] [pid 1041789:tid 1042046] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.765523 2026] [core:error] [pid 1041789:tid 1042046] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.789442 2026] [security2:error] [pid 1041789:tid 1042047] [client 4.232.148.111:11951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-content/uploads/min.php"] [unique_id "apK98Iv3RhPI65jTFG7sywAAA5I"]
[Sat Aug 29 05:09:36.798165 2026] [security2:error] [pid 1041789:tid 1041997] [client 20.104.18.15:46014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/fz.php"] [unique_id "apK98Iv3RhPI65jTFG7s0AAAA2A"]
[Sat Aug 29 05:09:36.800630 2026] [security2:error] [pid 1041789:tid 1042037] [client 20.104.18.15:46018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/fz.php"] [unique_id "apK98Iv3RhPI65jTFG7s0QAAA4g"]
[Sat Aug 29 05:09:36.814745 2026] [security2:error] [pid 1041789:tid 1042020] [client 20.104.18.15:25512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/blog.php"] [unique_id "apK98Iv3RhPI65jTFG7s3AAAA3c"]
[Sat Aug 29 05:09:36.816318 2026] [core:error] [pid 1041789:tid 1041934] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.816335 2026] [core:error] [pid 1041789:tid 1041934] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.824765 2026] [security2:error] [pid 1041789:tid 1042007] [client 20.220.204.93:52319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/ccu.php"] [unique_id "apK98Iv3RhPI65jTFG7s3QAAA2o"]
[Sat Aug 29 05:09:36.834416 2026] [security2:error] [pid 1041789:tid 1041995] [client 20.48.160.90:50551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/wp-mini.php"] [unique_id "apK98Iv3RhPI65jTFG7s4AAAA14"]
[Sat Aug 29 05:09:36.835423 2026] [security2:error] [pid 1041789:tid 1041978] [client 40.83.93.50:14492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/about.php525"] [unique_id "apK98Iv3RhPI65jTFG7s4QAAA00"]
[Sat Aug 29 05:09:36.844085 2026] [security2:error] [pid 1041789:tid 1042034] [client 52.139.37.240:31122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/up.php"] [unique_id "apK98Iv3RhPI65jTFG7s4gAAA4U"]
[Sat Aug 29 05:09:36.848129 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.104.18.15:15351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/gigi.php"] [unique_id "apK98Iv3RhPI65jTFG7s4wAAA3o"]
[Sat Aug 29 05:09:36.857241 2026] [security2:error] [pid 1041789:tid 1042054] [client 4.205.62.107:25875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/doc.php"] [unique_id "apK98Iv3RhPI65jTFG7s5wAAA5k"]
[Sat Aug 29 05:09:36.860142 2026] [security2:error] [pid 1041789:tid 1041960] [client 20.151.200.44:63764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK98Iv3RhPI65jTFG7s6QAAAzs"]
[Sat Aug 29 05:09:36.896687 2026] [security2:error] [pid 1041789:tid 1041939] [client 20.104.18.15:7058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/chosen.php"] [unique_id "apK98Iv3RhPI65jTFG7tAAAAAyY"]
[Sat Aug 29 05:09:36.899945 2026] [core:error] [pid 1041789:tid 1042038] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.899966 2026] [core:error] [pid 1041789:tid 1042038] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.905770 2026] [core:error] [pid 1041789:tid 1041931] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.905791 2026] [core:error] [pid 1041789:tid 1041931] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.905979 2026] [core:error] [pid 1041789:tid 1041990] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.905996 2026] [core:error] [pid 1041789:tid 1041990] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.907657 2026] [security2:error] [pid 1041789:tid 1042046] [client 4.205.62.107:6468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/g3.php"] [unique_id "apK98Iv3RhPI65jTFG7tBQAAA5E"]
[Sat Aug 29 05:09:36.910841 2026] [security2:error] [pid 1041789:tid 1042005] [client 20.104.18.15:22523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/kerang.php"] [unique_id "apK98Iv3RhPI65jTFG7tBgAAA2g"]
[Sat Aug 29 05:09:36.912233 2026] [core:error] [pid 1041789:tid 1042041] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.912253 2026] [core:error] [pid 1041789:tid 1042041] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.919271 2026] [core:error] [pid 1041789:tid 1042038] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.919299 2026] [core:error] [pid 1041789:tid 1042038] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:36.931545 2026] [security2:error] [pid 1041789:tid 1042057] [client 20.52.41.200:5270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/222.php"] [unique_id "apK98Iv3RhPI65jTFG7tDgAAA5w"]
[Sat Aug 29 05:09:36.935210 2026] [security2:error] [pid 1041789:tid 1041933] [client 20.63.219.114:19002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/inputs.php"] [unique_id "apK98Iv3RhPI65jTFG7tDwAAAyA"]
[Sat Aug 29 05:09:36.943441 2026] [security2:error] [pid 1041789:tid 1042010] [client 20.104.18.15:41803] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/\\\\.[a-z0-9]{4}\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "784"] [id "900080"] [msg "PHP Mailer Access Attempt"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/.mopj.php"] [unique_id "apK98Iv3RhPI65jTFG7tFwAAA20"]
[Sat Aug 29 05:09:36.943657 2026] [security2:error] [pid 1041789:tid 1041977] [client 20.104.49.130:53773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/xwx1.php"] [unique_id "apK98Iv3RhPI65jTFG7tFgAAA0w"]
[Sat Aug 29 05:09:36.944796 2026] [security2:error] [pid 1041789:tid 1042014] [client 20.104.18.15:43300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/mgrr.php"] [unique_id "apK98Iv3RhPI65jTFG7tGAAAA3E"]
[Sat Aug 29 05:09:36.947883 2026] [security2:error] [pid 1041789:tid 1041987] [client 4.205.62.107:4934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/bigdump.php"] [unique_id "apK98Iv3RhPI65jTFG7tGQAAA1Y"]
[Sat Aug 29 05:09:36.951946 2026] [security2:error] [pid 1041789:tid 1042014] [client 20.104.18.15:25426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/wp-admin/js/wp-load.php"] [unique_id "apK98Iv3RhPI65jTFG7tGwAAA3E"]
[Sat Aug 29 05:09:36.963722 2026] [security2:error] [pid 1041789:tid 1041945] [client 20.104.18.15:46076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/clque.php"] [unique_id "apK98Iv3RhPI65jTFG7tIgAAAyw"]
[Sat Aug 29 05:09:36.964222 2026] [security2:error] [pid 1041789:tid 1041907] [remote 34.138.144.127:46122] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/api/.env.bak"] [unique_id "apK98Iv3RhPI65jTFG7tHwADRWk"]
[Sat Aug 29 05:09:36.965022 2026] [security2:error] [pid 1041789:tid 1041983] [client 169.58.197.254:63337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 254.197.58.169.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.kcactf4.org"] [uri "/wp-content/plugins/ph-file-manager/wp-file.php"] [unique_id "apK98Iv3RhPI65jTFG7tJgAAA1I"], referer: www.google.com
[Sat Aug 29 05:09:36.965569 2026] [security2:error] [pid 1041789:tid 1041901] [remote 34.138.144.127:46122] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/.env.production.bak"] [unique_id "apK98Iv3RhPI65jTFG7tIAADRWM"]
[Sat Aug 29 05:09:36.966028 2026] [security2:error] [pid 1041789:tid 1041816] [remote 34.138.144.127:46122] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/@fs/.env"] [unique_id "apK98Iv3RhPI65jTFG7tIwADRQ4"]
[Sat Aug 29 05:09:36.967021 2026] [security2:error] [pid 1041789:tid 1041848] [remote 34.138.144.127:46122] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/.env.prod.bak"] [unique_id "apK98Iv3RhPI65jTFG7tJwADRS4"]
[Sat Aug 29 05:09:36.967186 2026] [cgid:error] [pid 1041789:tid 1041846] [remote 34.138.144.127:46122] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:36.978056 2026] [security2:error] [pid 1041789:tid 1041997] [client 4.205.62.107:62931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/sadd.php"] [unique_id "apK98Iv3RhPI65jTFG7tKQAAA2A"]
[Sat Aug 29 05:09:36.984253 2026] [security2:error] [pid 1041789:tid 1041899] [remote 34.138.144.127:46122] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/@fs/root/.env"] [unique_id "apK98Iv3RhPI65jTFG7tKwADlWE"]
[Sat Aug 29 05:09:36.994070 2026] [security2:error] [pid 1041789:tid 1041961] [client 4.232.148.111:35782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/system_log.php"] [unique_id "apK98Iv3RhPI65jTFG7tLAAAAzw"]
[Sat Aug 29 05:09:36.996113 2026] [security2:error] [pid 1041789:tid 1042018] [client 20.104.18.15:15297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/info.php/new.php"] [unique_id "apK98Iv3RhPI65jTFG7tLQAAA3U"]
[Sat Aug 29 05:09:37.016960 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.48.160.90:50498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/xmini4.php"] [unique_id "apK98Yv3RhPI65jTFG7tMwAAA3o"]
[Sat Aug 29 05:09:37.032995 2026] [security2:error] [pid 1041789:tid 1041960] [client 20.63.81.20:46438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/wp-mini.php"] [unique_id "apK98Yv3RhPI65jTFG7tPgAAAzs"]
[Sat Aug 29 05:09:37.042269 2026] [security2:error] [pid 1041789:tid 1041873] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK98Yv3RhPI65jTFG7tRAADJ0c"]
[Sat Aug 29 05:09:37.043465 2026] [core:error] [pid 1041789:tid 1041862] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.043484 2026] [core:error] [pid 1041789:tid 1041862] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.044418 2026] [core:error] [pid 1041789:tid 1041828] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.044438 2026] [core:error] [pid 1041789:tid 1041828] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.044505 2026] [core:error] [pid 1041789:tid 1041882] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.044788 2026] [core:error] [pid 1041789:tid 1041882] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.056253 2026] [core:error] [pid 1041789:tid 1041967] [client 52.139.37.240:31118] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.056269 2026] [core:error] [pid 1041789:tid 1041967] [client 52.139.37.240:31118] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.064512 2026] [autoindex:error] [pid 1041789:tid 1041980] [client 45.148.10.62:33860] AH01276: Cannot serve directory /home3/xtjotnmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:09:37.067368 2026] [security2:error] [pid 1041789:tid 1042017] [client 20.104.18.15:46045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/clque.php"] [unique_id "apK98Yv3RhPI65jTFG7tUQAAA3Q"]
[Sat Aug 29 05:09:37.074287 2026] [security2:error] [pid 1041789:tid 1042030] [client 20.104.18.15:22450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/m.php"] [unique_id "apK98Yv3RhPI65jTFG7tVgAAA4E"]
[Sat Aug 29 05:09:37.075234 2026] [core:error] [pid 1041789:tid 1041939] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.075252 2026] [core:error] [pid 1041789:tid 1041939] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.077172 2026] [core:error] [pid 1041789:tid 1042040] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.077189 2026] [core:error] [pid 1041789:tid 1042040] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.077479 2026] [core:error] [pid 1041789:tid 1041947] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.077492 2026] [core:error] [pid 1041789:tid 1041947] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.079321 2026] [core:error] [pid 1041789:tid 1041957] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.079337 2026] [core:error] [pid 1041789:tid 1041957] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.083074 2026] [security2:error] [pid 1041789:tid 1041963] [client 4.205.62.107:53120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/filesystems.php"] [unique_id "apK98Yv3RhPI65jTFG7tWgAAAz4"]
[Sat Aug 29 05:09:37.083090 2026] [security2:error] [pid 1041789:tid 1042029] [client 20.104.18.15:25501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/robot.php"] [unique_id "apK98Yv3RhPI65jTFG7tXAAAA4A"]
[Sat Aug 29 05:09:37.085059 2026] [security2:error] [pid 1041789:tid 1041956] [client 20.104.18.15:6995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/file1221.php"] [unique_id "apK98Yv3RhPI65jTFG7tYgAAAzc"]
[Sat Aug 29 05:09:37.087065 2026] [security2:error] [pid 1041789:tid 1041956] [client 93.123.109.228:45862] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/erp/.env"] [unique_id "apK98Yv3RhPI65jTFG7tZQAAAzc"]
[Sat Aug 29 05:09:37.094134 2026] [security2:error] [pid 1041789:tid 1041968] [client 20.104.18.15:41811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/bengi.php"] [unique_id "apK98Yv3RhPI65jTFG7tbgAAA0M"]
[Sat Aug 29 05:09:37.120295 2026] [security2:error] [pid 1041789:tid 1042014] [client 20.63.81.20:39945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/rxr.php"] [unique_id "apK98Yv3RhPI65jTFG7tdQAAA3E"]
[Sat Aug 29 05:09:37.124391 2026] [core:error] [pid 1041789:tid 1041954] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.124417 2026] [core:error] [pid 1041789:tid 1041954] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.124590 2026] [core:error] [pid 1041789:tid 1041987] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.124602 2026] [core:error] [pid 1041789:tid 1041987] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.128155 2026] [security2:error] [pid 1041789:tid 1042007] [client 74.248.24.12:5703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "apK98Yv3RhPI65jTFG7teAAAA2o"]
[Sat Aug 29 05:09:37.128206 2026] [security2:error] [pid 1041789:tid 1041945] [client 20.63.81.20:63690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/Hd.php"] [unique_id "apK98Yv3RhPI65jTFG7teQAAAyw"]
[Sat Aug 29 05:09:37.130173 2026] [core:error] [pid 1041789:tid 1041934] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.130189 2026] [core:error] [pid 1041789:tid 1041934] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.134649 2026] [security2:error] [pid 1041789:tid 1041965] [client 20.220.204.93:50773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/ak.php"] [unique_id "apK98Yv3RhPI65jTFG7tfAAAA0A"]
[Sat Aug 29 05:09:37.145795 2026] [security2:error] [pid 1041789:tid 1041961] [client 158.23.147.79:44504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK98Yv3RhPI65jTFG7tfwAAAzw"]
[Sat Aug 29 05:09:37.152509 2026] [security2:error] [pid 1041789:tid 1042037] [client 68.155.159.216:6059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK98Yv3RhPI65jTFG7tgAAAA4g"]
[Sat Aug 29 05:09:37.159116 2026] [security2:error] [pid 1041789:tid 1041982] [client 20.48.160.90:50459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/reop3.php"] [unique_id "apK98Yv3RhPI65jTFG7thgAAA1E"]
[Sat Aug 29 05:09:37.160073 2026] [core:error] [pid 1041789:tid 1041981] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.160090 2026] [core:error] [pid 1041789:tid 1041981] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.160953 2026] [security2:error] [pid 1041789:tid 1041892] [remote 93.123.109.228:55834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyer.com"] [uri "/admin/phpinfo.php"] [unique_id "apK98Yv3RhPI65jTFG7tigADL1o"]
[Sat Aug 29 05:09:37.168780 2026] [security2:error] [pid 1041789:tid 1041843] [remote 20.16.180.61:62231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 61.180.16.20.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "strangeworxweddingfilms.com"] [uri "/wp-login.php"] [unique_id "apK98Yv3RhPI65jTFG7tjAADfyk"]
[Sat Aug 29 05:09:37.169028 2026] [security2:error] [pid 1041789:tid 1041975] [client 20.63.81.20:46450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/xmini4.php"] [unique_id "apK98Yv3RhPI65jTFG7tkAAAA0o"]
[Sat Aug 29 05:09:37.177606 2026] [security2:error] [pid 1041789:tid 1041960] [client 20.63.81.20:55558] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/222.php"] [unique_id "apK98Yv3RhPI65jTFG7tkQAAAzs"]
[Sat Aug 29 05:09:37.178531 2026] [security2:error] [pid 1041789:tid 1041887] [remote 34.138.144.127:46122] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "www.studiopasa.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK98Yv3RhPI65jTFG7tkgADflU"]
[Sat Aug 29 05:09:37.183366 2026] [security2:error] [pid 1041789:tid 1041992] [client 93.123.109.228:45774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/fe/.env"] [unique_id "apK98Yv3RhPI65jTFG7tlAAAA1s"]
[Sat Aug 29 05:09:37.199154 2026] [security2:error] [pid 1041789:tid 1041980] [client 93.123.109.228:54856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/etc/apache2/apache2.conf"] [unique_id "apK98Yv3RhPI65jTFG7tmgAAA08"]
[Sat Aug 29 05:09:37.199816 2026] [security2:error] [pid 1041789:tid 1042015] [client 93.123.109.228:54758] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/etc/boto.cfg"] [unique_id "apK98Yv3RhPI65jTFG7tmwAAA3I"]
[Sat Aug 29 05:09:37.217269 2026] [security2:error] [pid 1041789:tid 1041876] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/admin-app/.env"] [unique_id "apK98Yv3RhPI65jTFG7tpgADQko"]
[Sat Aug 29 05:09:37.217780 2026] [security2:error] [pid 1041789:tid 1041876] [remote 93.123.109.228:55834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyer.com"] [uri "/admin_phpinfo.php"] [unique_id "apK98Yv3RhPI65jTFG7tqAADLko"]
[Sat Aug 29 05:09:37.233666 2026] [core:error] [pid 1041789:tid 1042005] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.233683 2026] [core:error] [pid 1041789:tid 1042005] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.245040 2026] [core:error] [pid 1041789:tid 1041818] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.245061 2026] [core:error] [pid 1041789:tid 1041818] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.245339 2026] [core:error] [pid 1041789:tid 1041923] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.245351 2026] [core:error] [pid 1041789:tid 1041923] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.251560 2026] [security2:error] [pid 1041789:tid 1042044] [client 20.63.81.20:40030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/csst.php"] [unique_id "apK98Yv3RhPI65jTFG7txAAAA48"]
[Sat Aug 29 05:09:37.251891 2026] [core:error] [pid 1041789:tid 1042055] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.251909 2026] [core:error] [pid 1041789:tid 1042055] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.252300 2026] [core:error] [pid 1041789:tid 1042000] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.252313 2026] [core:error] [pid 1041789:tid 1042000] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.254482 2026] [core:error] [pid 1041789:tid 1041968] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.254497 2026] [core:error] [pid 1041789:tid 1041968] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.257010 2026] [security2:error] [pid 1041789:tid 1042049] [client 52.139.37.240:31527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/wp-content/155.php"] [unique_id "apK98Yv3RhPI65jTFG7txgAAA5Q"]
[Sat Aug 29 05:09:37.257235 2026] [security2:error] [pid 1041789:tid 1041933] [client 20.63.81.20:63657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/im.php"] [unique_id "apK98Yv3RhPI65jTFG7txwAAAyA"]
[Sat Aug 29 05:09:37.266728 2026] [security2:error] [pid 1041789:tid 1042057] [client 4.232.148.111:23181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK98Yv3RhPI65jTFG7tygAAA5w"]
[Sat Aug 29 05:09:37.282847 2026] [security2:error] [pid 1041789:tid 1041987] [client 20.220.204.93:59086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/lib.php"] [unique_id "apK98Yv3RhPI65jTFG7tzQAAA1Y"]
[Sat Aug 29 05:09:37.292299 2026] [security2:error] [pid 1041789:tid 1041970] [client 20.48.160.90:50480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/wp-mail.php"] [unique_id "apK98Yv3RhPI65jTFG7tzgAAA0U"]
[Sat Aug 29 05:09:37.298306 2026] [security2:error] [pid 1041789:tid 1041950] [client 20.63.219.114:18966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/class-walker-category-dropdown-class.php"] [unique_id "apK98Yv3RhPI65jTFG7tzwAAAzE"]
[Sat Aug 29 05:09:37.301061 2026] [security2:error] [pid 1041789:tid 1041979] [client 20.63.81.20:46425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/reop3.php"] [unique_id "apK98Yv3RhPI65jTFG7t0AAAA04"]
[Sat Aug 29 05:09:37.310656 2026] [security2:error] [pid 1041789:tid 1041934] [client 93.123.109.228:45758] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/front/.env"] [unique_id "apK98Yv3RhPI65jTFG7t0wAAAyE"]
[Sat Aug 29 05:09:37.313814 2026] [security2:error] [pid 1041789:tid 1041965] [client 158.158.54.35:1567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-content/admin.php"] [unique_id "apK98Yv3RhPI65jTFG7t1wAAA0A"]
[Sat Aug 29 05:09:37.314352 2026] [security2:error] [pid 1041789:tid 1041944] [client 93.123.109.228:45786] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/frontend/.env"] [unique_id "apK98Yv3RhPI65jTFG7t1gAAAys"]
[Sat Aug 29 05:09:37.321673 2026] [proxy:warn] [pid 1041789:tid 1041995] [client 199.45.155.95:35516] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be mjglassmirrors.sortthru.com for uri /400.shtml
[Sat Aug 29 05:09:37.321701 2026] [proxy:error] [pid 1041789:tid 1041995] (70014)End of file found: [client 199.45.155.95:35516] AH01095: prefetch request body failed to 127.0.0.1:8080 (127.0.0.1) from 199.45.155.95 ()
[Sat Aug 29 05:09:37.325619 2026] [security2:error] [pid 1041789:tid 1041943] [client 20.63.81.20:55570] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/key.php"] [unique_id "apK98Yv3RhPI65jTFG7t3AAAAyo"]
[Sat Aug 29 05:09:37.332099 2026] [security2:error] [pid 1041789:tid 1042046] [client 20.197.61.180:2017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/22.php"] [unique_id "apK98Yv3RhPI65jTFG7t3QAAA5E"]
[Sat Aug 29 05:09:37.367111 2026] [core:error] [pid 1041789:tid 1041855] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.367132 2026] [core:error] [pid 1041789:tid 1041855] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.370764 2026] [security2:error] [pid 1041789:tid 1041884] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/admin/phpinfo.php"] [unique_id "apK98Yv3RhPI65jTFG7t7QADRlI"]
[Sat Aug 29 05:09:37.375075 2026] [security2:error] [pid 1041789:tid 1042019] [client 158.23.147.79:5970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-admin/css/index.php"] [unique_id "apK98Yv3RhPI65jTFG7t8AAAA3Y"]
[Sat Aug 29 05:09:37.376461 2026] [security2:error] [pid 1041789:tid 1041940] [client 68.155.159.216:18385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/goat1.php"] [unique_id "apK98Yv3RhPI65jTFG7t8QAAAyc"]
[Sat Aug 29 05:09:37.376498 2026] [core:error] [pid 1041789:tid 1041895] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.376510 2026] [core:error] [pid 1041789:tid 1041895] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.378638 2026] [core:error] [pid 1041789:tid 1041914] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.378660 2026] [core:error] [pid 1041789:tid 1041914] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.379597 2026] [core:error] [pid 1041789:tid 1041899] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.379611 2026] [core:error] [pid 1041789:tid 1041899] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.381188 2026] [security2:error] [pid 1041789:tid 1041869] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/admin_phpinfo.php"] [unique_id "apK98Yv3RhPI65jTFG7t9QADRkM"]
[Sat Aug 29 05:09:37.383944 2026] [core:error] [pid 1041789:tid 1041834] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.383961 2026] [core:error] [pid 1041789:tid 1041834] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.389798 2026] [security2:error] [pid 1041789:tid 1042027] [client 20.63.81.20:63696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/fc.php"] [unique_id "apK98Yv3RhPI65jTFG7t_QAAA34"]
[Sat Aug 29 05:09:37.395955 2026] [security2:error] [pid 1041789:tid 1041969] [client 20.52.41.200:4355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/x.php"] [unique_id "apK98Yv3RhPI65jTFG7uAwAAA0Q"]
[Sat Aug 29 05:09:37.397477 2026] [security2:error] [pid 1041789:tid 1042030] [client 45.148.10.62:33868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xqk.etg.mybluehost.me"] [uri "/wp-config.php"] [unique_id "apK98Yv3RhPI65jTFG7uBAAAA4E"]
[Sat Aug 29 05:09:37.399560 2026] [security2:error] [pid 1041789:tid 1042020] [client 20.197.61.180:18236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/colour.php"] [unique_id "apK98Yv3RhPI65jTFG7uBQAAA3c"]
[Sat Aug 29 05:09:37.406346 2026] [security2:error] [pid 1041789:tid 1041980] [client 20.63.81.20:39940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/wp-includes/blocks/query-title/footer.php"] [unique_id "apK98Yv3RhPI65jTFG7uCgAAA08"]
[Sat Aug 29 05:09:37.430935 2026] [security2:error] [pid 1041789:tid 1042042] [client 20.48.160.90:50516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/wp-conffg.php"] [unique_id "apK98Yv3RhPI65jTFG7uFQAAA40"]
[Sat Aug 29 05:09:37.433992 2026] [security2:error] [pid 1041789:tid 1042005] [client 20.63.81.20:46384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/wp-mail.php"] [unique_id "apK98Yv3RhPI65jTFG7uFwAAA2g"]
[Sat Aug 29 05:09:37.441729 2026] [security2:error] [pid 1041789:tid 1042044] [client 195.178.110.247:42560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.luluchild.com"] [uri "/index.php"] [unique_id "apK98Yv3RhPI65jTFG7uGgAAA48"]
[Sat Aug 29 05:09:37.445858 2026] [security2:error] [pid 1041789:tid 1042000] [client 93.123.109.228:45852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/info.php"] [unique_id "apK98Yv3RhPI65jTFG7uHgAAA2M"]
[Sat Aug 29 05:09:37.448316 2026] [security2:error] [pid 1041789:tid 1041942] [client 93.123.109.228:45856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/infophp.php"] [unique_id "apK98Yv3RhPI65jTFG7uIAAAAyk"]
[Sat Aug 29 05:09:37.451517 2026] [security2:error] [pid 1041789:tid 1041972] [client 93.123.109.228:54868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/infos.php"] [unique_id "apK98Yv3RhPI65jTFG7uJAAAA0c"]
[Sat Aug 29 05:09:37.452448 2026] [core:error] [pid 1041789:tid 1041957] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.452463 2026] [core:error] [pid 1041789:tid 1041957] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.459374 2026] [security2:error] [pid 1041789:tid 1041945] [client 4.232.148.111:20452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/24.php"] [unique_id "apK98Yv3RhPI65jTFG7uJgAAAyw"]
[Sat Aug 29 05:09:37.463008 2026] [security2:error] [pid 1041789:tid 1041803] [remote 34.138.144.127:46130] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:href. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "/../,ARGS:href"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/_image"] [unique_id "apK98Yv3RhPI65jTFG7uKgADTAE"]
[Sat Aug 29 05:09:37.463721 2026] [security2:error] [pid 1041789:tid 1041841] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/administrator/.env"] [unique_id "apK98Yv3RhPI65jTFG7uJwADgCc"]
[Sat Aug 29 05:09:37.467157 2026] [security2:error] [pid 1041789:tid 1042048] [client 52.139.37.240:31110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/wp-update.php"] [unique_id "apK98Yv3RhPI65jTFG7uLAAAA5M"]
[Sat Aug 29 05:09:37.472478 2026] [security2:error] [pid 1041789:tid 1042049] [client 45.148.10.62:33860] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.xtj.otn.mybluehost.me"] [uri "/api/.env"] [unique_id "apK98Yv3RhPI65jTFG7uLwAAA5Q"]
[Sat Aug 29 05:09:37.475172 2026] [security2:error] [pid 1041789:tid 1042014] [client 20.63.81.20:55670] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/chosen.php"] [unique_id "apK98Yv3RhPI65jTFG7uNQAAA3E"]
[Sat Aug 29 05:09:37.476463 2026] [security2:error] [pid 1041789:tid 1041839] [remote 93.123.109.228:55834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyer.com"] [uri "/api/info.php"] [unique_id "apK98Yv3RhPI65jTFG7uOQADhiU"]
[Sat Aug 29 05:09:37.478617 2026] [security2:error] [pid 1041789:tid 1041968] [client 93.123.109.228:54844] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/laravel/.env"] [unique_id "apK98Yv3RhPI65jTFG7uOgAAA0M"]
[Sat Aug 29 05:09:37.488244 2026] [security2:error] [pid 1041789:tid 1041892] [remote 34.138.144.127:46130] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "www.studiopasa.com"] [uri "/_image"] [unique_id "apK98Yv3RhPI65jTFG7uPQADklo"]
[Sat Aug 29 05:09:37.496399 2026] [security2:error] [pid 1041789:tid 1041967] [client 4.205.62.107:63910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/phpinfo01.php"] [unique_id "apK98Yv3RhPI65jTFG7uPwAAA0I"]
[Sat Aug 29 05:09:37.501228 2026] [security2:error] [pid 1041789:tid 1042013] [client 20.220.204.93:50753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/wp-style.php"] [unique_id "apK98Yv3RhPI65jTFG7uQAAAA3A"]
[Sat Aug 29 05:09:37.513651 2026] [security2:error] [pid 1041789:tid 1042026] [client 40.83.93.50:17676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/spip.php"] [unique_id "apK98Yv3RhPI65jTFG7uRAAAA30"]
[Sat Aug 29 05:09:37.515153 2026] [security2:error] [pid 1041789:tid 1041843] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/api-backend/.env"] [unique_id "apK98Yv3RhPI65jTFG7uQwADnCk"]
[Sat Aug 29 05:09:37.517624 2026] [core:error] [pid 1041789:tid 1041909] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.517642 2026] [core:error] [pid 1041789:tid 1041909] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.523524 2026] [security2:error] [pid 1041789:tid 1041956] [client 20.63.81.20:63620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/ke.php"] [unique_id "apK98Yv3RhPI65jTFG7uRQAAAzc"]
[Sat Aug 29 05:09:37.541331 2026] [security2:error] [pid 1041789:tid 1041970] [client 20.63.81.20:40036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/wp-content/uploads/indoex.php"] [unique_id "apK98Yv3RhPI65jTFG7uTAAAA0U"]
[Sat Aug 29 05:09:37.564393 2026] [security2:error] [pid 1041789:tid 1042050] [client 93.123.109.228:45758] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/lms/.env"] [unique_id "apK98Yv3RhPI65jTFG7uTwAAA5U"]
[Sat Aug 29 05:09:37.566102 2026] [security2:error] [pid 1041789:tid 1041943] [client 20.48.160.90:45406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/filefuns.php"] [unique_id "apK98Yv3RhPI65jTFG7uUAAAAyo"]
[Sat Aug 29 05:09:37.598041 2026] [security2:error] [pid 1041789:tid 1041872] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/api/.env"] [unique_id "apK98Yv3RhPI65jTFG7uVwADdkY"]
[Sat Aug 29 05:09:37.599592 2026] [security2:error] [pid 1041789:tid 1041870] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/api-node/.env"] [unique_id "apK98Yv3RhPI65jTFG7uWgADdkQ"]
[Sat Aug 29 05:09:37.608972 2026] [security2:error] [pid 1041789:tid 1042001] [client 195.178.110.247:65264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.luluchild.com"] [uri "/index.php"] [unique_id "apK98Yv3RhPI65jTFG7uZAAAA2Q"]
[Sat Aug 29 05:09:37.609502 2026] [security2:error] [pid 1041789:tid 1041992] [client 4.205.62.107:21861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/wp-konfig.backup.php"] [unique_id "apK98Yv3RhPI65jTFG7uZwAAA1s"]
[Sat Aug 29 05:09:37.610142 2026] [core:error] [pid 1041789:tid 1041854] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.610154 2026] [core:error] [pid 1041789:tid 1041854] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.611533 2026] [core:error] [pid 1041789:tid 1041818] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.611572 2026] [core:error] [pid 1041789:tid 1041818] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.612249 2026] [core:error] [pid 1041789:tid 1041921] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.612260 2026] [core:error] [pid 1041789:tid 1041921] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.612308 2026] [core:error] [pid 1041789:tid 1041923] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.612312 2026] [core:error] [pid 1041789:tid 1041923] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.612681 2026] [core:error] [pid 1041789:tid 1041876] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.612699 2026] [core:error] [pid 1041789:tid 1041876] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.612891 2026] [core:error] [pid 1041789:tid 1041807] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.612901 2026] [core:error] [pid 1041789:tid 1041807] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.623366 2026] [security2:error] [pid 1041789:tid 1041997] [client 45.148.10.62:33860] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.xtj.otn.mybluehost.me"] [uri "/.env.bak"] [unique_id "apK98Yv3RhPI65jTFG7ubQAAA2A"]
[Sat Aug 29 05:09:37.635583 2026] [core:error] [pid 1041789:tid 1042021] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.635604 2026] [core:error] [pid 1041789:tid 1042021] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.635993 2026] [core:error] [pid 1041789:tid 1041931] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.636008 2026] [core:error] [pid 1041789:tid 1041931] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.637756 2026] [security2:error] [pid 1041789:tid 1042017] [client 93.123.109.228:45862] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/market/.env"] [unique_id "apK98Yv3RhPI65jTFG7ucAAAA3Q"]
[Sat Aug 29 05:09:37.643620 2026] [security2:error] [pid 1041789:tid 1042051] [client 93.123.109.228:54758] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/marketing/.env"] [unique_id "apK98Yv3RhPI65jTFG7udQAAA5Y"]
[Sat Aug 29 05:09:37.644940 2026] [core:error] [pid 1041789:tid 1042044] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.644962 2026] [core:error] [pid 1041789:tid 1042044] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.645474 2026] [core:error] [pid 1041789:tid 1041871] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.645489 2026] [core:error] [pid 1041789:tid 1041871] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.645978 2026] [security2:error] [pid 1041789:tid 1041933] [client 74.248.24.12:37711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "apK98Yv3RhPI65jTFG7ueQAAAyA"]
[Sat Aug 29 05:09:37.652558 2026] [security2:error] [pid 1041789:tid 1041821] [remote 93.123.109.228:55834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyer.com"] [uri "/api/phpinfo.php"] [unique_id "apK98Yv3RhPI65jTFG7ufQADhhM"]
[Sat Aug 29 05:09:37.661791 2026] [security2:error] [pid 1041789:tid 1041963] [client 93.123.109.228:45786] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/local/.env"] [unique_id "apK98Yv3RhPI65jTFG7ufwAAAz4"]
[Sat Aug 29 05:09:37.672634 2026] [security2:error] [pid 1041789:tid 1041960] [client 52.139.37.240:31121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/xmrlpc.php"] [unique_id "apK98Yv3RhPI65jTFG7uhAAAAzs"]
[Sat Aug 29 05:09:37.678199 2026] [core:error] [pid 1041789:tid 1042048] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.678219 2026] [core:error] [pid 1041789:tid 1042048] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.686205 2026] [security2:error] [pid 1041789:tid 1042014] [client 195.178.110.247:42568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lumbeehealthinsurance.com"] [uri "/index.php"] [unique_id "apK98Yv3RhPI65jTFG7uiQAAA3E"]
[Sat Aug 29 05:09:37.686594 2026] [security2:error] [pid 1041789:tid 1041935] [client 158.23.147.79:11446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-mail.php"] [unique_id "apK98Yv3RhPI65jTFG7uigAAAyI"]
[Sat Aug 29 05:09:37.689924 2026] [security2:error] [pid 1041789:tid 1041948] [client 158.23.147.79:55884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/simple.php"] [unique_id "apK98Yv3RhPI65jTFG7ujAAAAy8"]
[Sat Aug 29 05:09:37.700321 2026] [security2:error] [pid 1041789:tid 1042041] [client 20.48.160.90:50533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/wp-cron.php"] [unique_id "apK98Yv3RhPI65jTFG7ujwAAA4w"]
[Sat Aug 29 05:09:37.709124 2026] [security2:error] [pid 1041789:tid 1041808] [remote 93.123.109.228:39166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/test.php"] [unique_id "apK98Yv3RhPI65jTFG7ulQADNwY"]
[Sat Aug 29 05:09:37.711405 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.63.219.114:10572] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "tomgrassia.com"] [uri "/1.php7"] [unique_id "apK98Yv3RhPI65jTFG7umAAAA3o"]
[Sat Aug 29 05:09:37.711510 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.63.219.114:10572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/1.php7"] [unique_id "apK98Yv3RhPI65jTFG7umAAAA3o"]
[Sat Aug 29 05:09:37.714934 2026] [security2:error] [pid 1041789:tid 1041983] [client 93.123.109.228:54816] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/media/.env"] [unique_id "apK98Yv3RhPI65jTFG7umQAAA1I"]
[Sat Aug 29 05:09:37.720866 2026] [security2:error] [pid 1041789:tid 1041987] [client 20.220.204.93:50690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/browse.php"] [unique_id "apK98Yv3RhPI65jTFG7umwAAA1Y"]
[Sat Aug 29 05:09:37.723816 2026] [security2:error] [pid 1041789:tid 1041901] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/api/info.php"] [unique_id "apK98Yv3RhPI65jTFG7uoAADMWM"]
[Sat Aug 29 05:09:37.727795 2026] [security2:error] [pid 1041789:tid 1041884] [remote 93.123.109.228:39364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glamrus.rocks"] [uri "/config.php"] [unique_id "apK98Yv3RhPI65jTFG7uogADI1I"]
[Sat Aug 29 05:09:37.754317 2026] [security2:error] [pid 1041789:tid 1042053] [client 4.232.148.111:26856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/bthil.php"] [unique_id "apK98Yv3RhPI65jTFG7urQAAA5g"]
[Sat Aug 29 05:09:37.760957 2026] [security2:error] [pid 1041789:tid 1041943] [client 93.123.109.228:54790] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/new/.env"] [unique_id "apK98Yv3RhPI65jTFG7usgAAAyo"]
[Sat Aug 29 05:09:37.763584 2026] [security2:error] [pid 1041789:tid 1041975] [client 93.123.109.228:54830] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/node-api/.env"] [unique_id "apK98Yv3RhPI65jTFG7usQAAA0o"]
[Sat Aug 29 05:09:37.770105 2026] [core:error] [pid 1041789:tid 1041907] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.770126 2026] [core:error] [pid 1041789:tid 1041907] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.772936 2026] [core:error] [pid 1041789:tid 1041858] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.772949 2026] [core:error] [pid 1041789:tid 1041858] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.774094 2026] [core:error] [pid 1041789:tid 1041824] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.774114 2026] [core:error] [pid 1041789:tid 1041824] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.783934 2026] [security2:error] [pid 1041789:tid 1041981] [client 68.155.159.216:38687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-content/index.php"] [unique_id "apK98Yv3RhPI65jTFG7uxQAAA1A"]
[Sat Aug 29 05:09:37.815588 2026] [security2:error] [pid 1041789:tid 1042029] [client 158.158.54.35:34117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-configs.php"] [unique_id "apK98Yv3RhPI65jTFG7uygAAA4A"]
[Sat Aug 29 05:09:37.815653 2026] [security2:error] [pid 1041789:tid 1042025] [client 93.123.109.228:45758] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/node/.env"] [unique_id "apK98Yv3RhPI65jTFG7uyQAAA3w"]
[Sat Aug 29 05:09:37.820179 2026] [core:error] [pid 1041789:tid 1041980] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.820196 2026] [core:error] [pid 1041789:tid 1041980] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.822142 2026] [cgid:error] [pid 1041789:tid 1041841] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:37.834139 2026] [security2:error] [pid 1041789:tid 1041940] [client 20.48.160.90:50557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/lock360.php"] [unique_id "apK98Yv3RhPI65jTFG7u0wAAAyc"]
[Sat Aug 29 05:09:37.835756 2026] [cgid:error] [pid 1041789:tid 1041819] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:37.840224 2026] [security2:error] [pid 1041789:tid 1041866] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/api/phpinfo.php"] [unique_id "apK98Yv3RhPI65jTFG7u2AADR0A"]
[Sat Aug 29 05:09:37.840649 2026] [cgid:error] [pid 1041789:tid 1041817] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:37.843546 2026] [core:error] [pid 1041789:tid 1041885] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.843560 2026] [core:error] [pid 1041789:tid 1041885] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.843893 2026] [core:error] [pid 1041789:tid 1041892] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.843906 2026] [core:error] [pid 1041789:tid 1041892] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.846657 2026] [cgid:error] [pid 1041789:tid 1041916] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:37.848578 2026] [security2:error] [pid 1041789:tid 1042052] [client 158.23.147.79:62705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/file5.php"] [unique_id "apK98Yv3RhPI65jTFG7u5gAAA5c"]
[Sat Aug 29 05:09:37.854397 2026] [security2:error] [pid 1041789:tid 1041941] [client 195.178.110.247:65276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lumbeehealthinsurance.com"] [uri "/index.php"] [unique_id "apK98Yv3RhPI65jTFG7u7gAAAyg"]
[Sat Aug 29 05:09:37.855118 2026] [security2:error] [pid 1041789:tid 1042034] [client 20.52.41.200:4624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/new.php"] [unique_id "apK98Yv3RhPI65jTFG7u8AAAA4U"]
[Sat Aug 29 05:09:37.861440 2026] [cgid:error] [pid 1041789:tid 1041877] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:37.861957 2026] [security2:error] [pid 1041789:tid 1042054] [client 93.123.109.228:45774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/node/api/.env"] [unique_id "apK98Yv3RhPI65jTFG7u8wAAA5k"]
[Sat Aug 29 05:09:37.862430 2026] [cgid:error] [pid 1041789:tid 1041829] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:37.865486 2026] [security2:error] [pid 1041789:tid 1041963] [client 93.123.109.228:45862] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/node/backend/.env"] [unique_id "apK98Yv3RhPI65jTFG7u9AAAAz4"]
[Sat Aug 29 05:09:37.872972 2026] [security2:error] [pid 1041789:tid 1041842] [remote 93.123.109.228:39364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glamrus.rocks"] [uri "/config/aws.php"] [unique_id "apK98Yv3RhPI65jTFG7u_QADIyg"]
[Sat Aug 29 05:09:37.874337 2026] [security2:error] [pid 1041789:tid 1041992] [client 52.139.37.240:31113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/about/function.php"] [unique_id "apK98Yv3RhPI65jTFG7u_wAAA1s"]
[Sat Aug 29 05:09:37.874397 2026] [core:error] [pid 1041789:tid 1041954] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.874413 2026] [core:error] [pid 1041789:tid 1041954] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.875187 2026] [core:error] [pid 1041789:tid 1042049] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.875197 2026] [core:error] [pid 1041789:tid 1042049] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.876879 2026] [core:error] [pid 1041789:tid 1041946] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.876893 2026] [core:error] [pid 1041789:tid 1041946] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.879094 2026] [security2:error] [pid 1041789:tid 1042047] [client 93.123.109.228:54774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/nodeapi/.env"] [unique_id "apK98Yv3RhPI65jTFG7vAgAAA5I"]
[Sat Aug 29 05:09:37.880199 2026] [core:error] [pid 1041789:tid 1041982] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.880214 2026] [core:error] [pid 1041789:tid 1041982] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.880741 2026] [core:error] [pid 1041789:tid 1042048] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.880755 2026] [core:error] [pid 1041789:tid 1042048] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.881351 2026] [core:error] [pid 1041789:tid 1041990] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.881378 2026] [core:error] [pid 1041789:tid 1041990] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.881646 2026] [core:error] [pid 1041789:tid 1041960] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.881657 2026] [core:error] [pid 1041789:tid 1041960] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:37.899231 2026] [security2:error] [pid 1041789:tid 1041838] [remote 93.123.109.228:39364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glamrus.rocks"] [uri "/config/config.inc.php"] [unique_id "apK98Yv3RhPI65jTFG7vCQADIyQ"]
[Sat Aug 29 05:09:37.909790 2026] [security2:error] [pid 1041789:tid 1041945] [client 158.23.184.117:53756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/file.php"] [unique_id "apK98Yv3RhPI65jTFG7vCgAAAyw"]
[Sat Aug 29 05:09:37.923681 2026] [security2:error] [pid 1041789:tid 1041965] [client 93.123.109.228:54758] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/nodeweb/.env"] [unique_id "apK98Yv3RhPI65jTFG7vDQAAA0A"]
[Sat Aug 29 05:09:37.931271 2026] [security2:error] [pid 1041789:tid 1041951] [client 4.205.62.107:8986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/wp-admin/sc.php"] [unique_id "apK98Yv3RhPI65jTFG7vDwAAAzI"]
[Sat Aug 29 05:09:37.943506 2026] [security2:error] [pid 1041789:tid 1042027] [client 45.148.10.62:33884] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "mail.xqk.etg.mybluehost.me"] [uri "/wp-config.php.old"] [unique_id "apK98Yv3RhPI65jTFG7vFQAAA34"]
[Sat Aug 29 05:09:37.947863 2026] [security2:error] [pid 1041789:tid 1042053] [client 20.220.204.93:41819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/zoo.php"] [unique_id "apK98Yv3RhPI65jTFG7vFwAAA5g"]
[Sat Aug 29 05:09:37.956255 2026] [cgid:error] [pid 1041789:tid 1041921] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:37.956461 2026] [security2:error] [pid 1041789:tid 1041975] [client 93.123.109.228:54790] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/old/.env"] [unique_id "apK98Yv3RhPI65jTFG7vHgAAA0o"]
[Sat Aug 29 05:09:37.957950 2026] [cgid:error] [pid 1041789:tid 1041889] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:37.960987 2026] [cgid:error] [pid 1041789:tid 1041923] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:37.966300 2026] [security2:error] [pid 1041789:tid 1041961] [client 197.219.150.206:53469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK98Yv3RhPI65jTFG7vIwAAAzw"]
[Sat Aug 29 05:09:37.966454 2026] [security2:error] [pid 1041789:tid 1041961] [client 197.219.150.206:53469] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK98Yv3RhPI65jTFG7vIwAAAzw"]
[Sat Aug 29 05:09:37.966529 2026] [security2:error] [pid 1041789:tid 1041874] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/apis/.env"] [unique_id "apK98Yv3RhPI65jTFG7vIgADSkg"]
[Sat Aug 29 05:09:37.973435 2026] [security2:error] [pid 1041789:tid 1041976] [client 20.48.160.90:50447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/wp-theme.php"] [unique_id "apK98Yv3RhPI65jTFG7vKAAAA0s"]
[Sat Aug 29 05:09:37.986196 2026] [security2:error] [pid 1041789:tid 1042025] [client 93.123.109.228:54844] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/opt/.env"] [unique_id "apK98Yv3RhPI65jTFG7vLAAAA3w"]
[Sat Aug 29 05:09:38.002696 2026] [core:error] [pid 1041789:tid 1041980] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.002724 2026] [core:error] [pid 1041789:tid 1041980] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.008608 2026] [security2:error] [pid 1041789:tid 1042055] [client 4.205.62.107:24960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/classsmtps.php"] [unique_id "apK98ov3RhPI65jTFG7vLwAAA5o"]
[Sat Aug 29 05:09:38.024580 2026] [security2:error] [pid 1041789:tid 1041932] [client 40.83.93.50:17692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/backup.php"] [unique_id "apK98ov3RhPI65jTFG7vMwAAAx8"]
[Sat Aug 29 05:09:38.038636 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.197.61.180:1892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/bak.phps"] [unique_id "apK98ov3RhPI65jTFG7vPgAAA2Q"]
[Sat Aug 29 05:09:38.044785 2026] [security2:error] [pid 1041789:tid 1042034] [client 4.205.62.107:6951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/wp-konfig.php"] [unique_id "apK98ov3RhPI65jTFG7vQQAAA4U"]
[Sat Aug 29 05:09:38.048244 2026] [core:error] [pid 1041789:tid 1041929] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.048264 2026] [core:error] [pid 1041789:tid 1041929] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.049406 2026] [core:error] [pid 1041789:tid 1041912] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.049425 2026] [core:error] [pid 1041789:tid 1041912] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.049907 2026] [security2:error] [pid 1041789:tid 1042035] [client 158.23.147.79:17604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/about/function.php"] [unique_id "apK98ov3RhPI65jTFG7vRgAAA4Y"]
[Sat Aug 29 05:09:38.051881 2026] [core:error] [pid 1041789:tid 1041941] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.051905 2026] [core:error] [pid 1041789:tid 1041941] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.058328 2026] [security2:error] [pid 1041789:tid 1041898] [remote 93.123.109.228:39364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glamrus.rocks"] [uri "/config/config.php"] [unique_id "apK98ov3RhPI65jTFG7vTgADPmA"]
[Sat Aug 29 05:09:38.064106 2026] [security2:error] [pid 1041789:tid 1042021] [client 158.23.184.117:64525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/lock360.php"] [unique_id "apK98ov3RhPI65jTFG7vWAAAA3g"]
[Sat Aug 29 05:09:38.075079 2026] [security2:error] [pid 1041789:tid 1041931] [client 52.139.37.240:31128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/an.php"] [unique_id "apK98ov3RhPI65jTFG7vXAAAAx4"]
[Sat Aug 29 05:09:38.087898 2026] [core:error] [pid 1041789:tid 1041957] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.087918 2026] [core:error] [pid 1041789:tid 1041957] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.088774 2026] [security2:error] [pid 1041789:tid 1042047] [client 4.205.62.107:51464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/channels.php"] [unique_id "apK98ov3RhPI65jTFG7vZAAAA5I"]
[Sat Aug 29 05:09:38.089978 2026] [core:error] [pid 1041789:tid 1041968] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.089998 2026] [core:error] [pid 1041789:tid 1041968] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.097859 2026] [security2:error] [pid 1041789:tid 1041816] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/app/.env"] [unique_id "apK98ov3RhPI65jTFG7vZgADSg4"]
[Sat Aug 29 05:09:38.102860 2026] [security2:error] [pid 1041789:tid 1042007] [client 20.63.219.114:18312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/ds.php"] [unique_id "apK98ov3RhPI65jTFG7vawAAA2o"]
[Sat Aug 29 05:09:38.105289 2026] [security2:error] [pid 1041789:tid 1041895] [remote 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK98ov3RhPI65jTFG7vcQADWl0"]
[Sat Aug 29 05:09:38.117217 2026] [security2:error] [pid 1041789:tid 1041987] [client 4.232.148.111:17964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK98ov3RhPI65jTFG7vfAAAA1Y"]
[Sat Aug 29 05:09:38.118087 2026] [security2:error] [pid 1041789:tid 1041967] [client 45.148.10.62:33860] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.xtj.otn.mybluehost.me"] [uri "/stripe/.env"] [unique_id "apK98ov3RhPI65jTFG7vewAAA0I"]
[Sat Aug 29 05:09:38.124667 2026] [security2:error] [pid 1041789:tid 1041948] [client 20.197.61.180:1886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/OK.php"] [unique_id "apK98ov3RhPI65jTFG7vfwAAAy8"]
[Sat Aug 29 05:09:38.127635 2026] [security2:error] [pid 1041789:tid 1041948] [client 4.205.62.107:62745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/application.config.php"] [unique_id "apK98ov3RhPI65jTFG7vgQAAAy8"]
[Sat Aug 29 05:09:38.127769 2026] [security2:error] [pid 1041789:tid 1041934] [client 20.48.160.90:45411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/2d7433/index.php"] [unique_id "apK98ov3RhPI65jTFG7vgAAAAyE"]
[Sat Aug 29 05:09:38.129499 2026] [security2:error] [pid 1041789:tid 1041950] [client 20.220.204.93:59121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/elp.php"] [unique_id "apK98ov3RhPI65jTFG7vgwAAAzE"]
[Sat Aug 29 05:09:38.135310 2026] [cgid:error] [pid 1041789:tid 1041848] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:38.139774 2026] [core:error] [pid 1041789:tid 1041944] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.139790 2026] [core:error] [pid 1041789:tid 1041944] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.139822 2026] [security2:error] [pid 1041789:tid 1041928] [remote 93.123.109.228:39364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glamrus.rocks"] [uri "/config/module.config.php"] [unique_id "apK98ov3RhPI65jTFG7vigADfn4"]
[Sat Aug 29 05:09:38.140143 2026] [security2:error] [pid 1041789:tid 1041896] [remote 93.123.109.228:39364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glamrus.rocks"] [uri "/config/env.php"] [unique_id "apK98ov3RhPI65jTFG7viQADfl4"]
[Sat Aug 29 05:09:38.140824 2026] [security2:error] [pid 1041789:tid 1041865] [remote 93.123.109.228:39364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glamrus.rocks"] [uri "/config/nexmo.php"] [unique_id "apK98ov3RhPI65jTFG7viwADfj8"]
[Sat Aug 29 05:09:38.146105 2026] [cgid:error] [pid 1041789:tid 1041866] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:38.148182 2026] [cgid:error] [pid 1041789:tid 1041883] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:38.148247 2026] [cgid:error] [pid 1041789:tid 1041885] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:38.155832 2026] [cgid:error] [pid 1041789:tid 1041830] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:38.161493 2026] [security2:error] [pid 1041789:tid 1042029] [client 74.248.24.12:2688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/gifclass.php"] [unique_id "apK98ov3RhPI65jTFG7vmAAAA4A"]
[Sat Aug 29 05:09:38.161786 2026] [core:error] [pid 1041789:tid 1042050] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.161797 2026] [core:error] [pid 1041789:tid 1042050] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.169615 2026] [cgid:error] [pid 1041789:tid 1041804] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:38.174878 2026] [security2:error] [pid 1041789:tid 1041868] [remote 93.123.109.228:39364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glamrus.rocks"] [uri "/config/stripe.php"] [unique_id "apK98ov3RhPI65jTFG7vngADfkI"]
[Sat Aug 29 05:09:38.184801 2026] [core:error] [pid 1041789:tid 1042032] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.184820 2026] [core:error] [pid 1041789:tid 1042032] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.185721 2026] [core:error] [pid 1041789:tid 1041951] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.185741 2026] [core:error] [pid 1041789:tid 1041951] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.187471 2026] [core:error] [pid 1041789:tid 1042055] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.187488 2026] [core:error] [pid 1041789:tid 1042055] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.187926 2026] [core:error] [pid 1041789:tid 1041997] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.187938 2026] [core:error] [pid 1041789:tid 1041997] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.188140 2026] [core:error] [pid 1041789:tid 1041943] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.188151 2026] [core:error] [pid 1041789:tid 1041943] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.191245 2026] [core:error] [pid 1041789:tid 1042046] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.191276 2026] [core:error] [pid 1041789:tid 1042046] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.209228 2026] [security2:error] [pid 1041789:tid 1042025] [client 158.23.184.117:53749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/fpwch.php"] [unique_id "apK98ov3RhPI65jTFG7vtgAAA3w"]
[Sat Aug 29 05:09:38.214339 2026] [core:error] [pid 1041789:tid 1041946] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.214366 2026] [core:error] [pid 1041789:tid 1041946] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.256137 2026] [core:error] [pid 1041789:tid 1041900] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.256157 2026] [core:error] [pid 1041789:tid 1041900] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.269487 2026] [security2:error] [pid 1041789:tid 1042057] [client 93.123.109.228:54894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/php-info.php"] [unique_id "apK98ov3RhPI65jTFG7v2gAAA5w"]
[Sat Aug 29 05:09:38.269584 2026] [security2:error] [pid 1041789:tid 1041933] [remote 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK98ov3RhPI65jTFG7vcQADWl0"]
[Sat Aug 29 05:09:38.270218 2026] [security2:error] [pid 1041789:tid 1041967] [client 68.155.159.216:6086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/about.php"] [unique_id "apK98ov3RhPI65jTFG7v3gAAA0I"]
[Sat Aug 29 05:09:38.270861 2026] [cgid:error] [pid 1041789:tid 1041861] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:38.271134 2026] [cgid:error] [pid 1041789:tid 1041825] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:38.271567 2026] [cgid:error] [pid 1041789:tid 1041870] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:38.272106 2026] [cgid:error] [pid 1041789:tid 1041878] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:38.272441 2026] [cgid:error] [pid 1041789:tid 1041806] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:38.273713 2026] [cgid:error] [pid 1041789:tid 1041811] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:38.284236 2026] [security2:error] [pid 1041789:tid 1041965] [client 158.23.147.79:52302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK98ov3RhPI65jTFG7v4AAAA0A"]
[Sat Aug 29 05:09:38.291388 2026] [security2:error] [pid 1041789:tid 1041931] [client 52.139.37.240:31142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/asw.php"] [unique_id "apK98ov3RhPI65jTFG7v4QAAAx4"]
[Sat Aug 29 05:09:38.294780 2026] [security2:error] [pid 1041789:tid 1042033] [client 93.123.109.228:54830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/php.php"] [unique_id "apK98ov3RhPI65jTFG7v5AAAA4Q"]
[Sat Aug 29 05:09:38.302227 2026] [security2:error] [pid 1041789:tid 1041944] [client 4.205.62.107:53302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/tax.php"] [unique_id "apK98ov3RhPI65jTFG7v6wAAAys"]
[Sat Aug 29 05:09:38.303965 2026] [core:error] [pid 1041789:tid 1041934] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.303985 2026] [core:error] [pid 1041789:tid 1041934] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.304019 2026] [core:error] [pid 1041789:tid 1041948] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.304030 2026] [core:error] [pid 1041789:tid 1041948] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.306076 2026] [core:error] [pid 1041789:tid 1041950] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.306095 2026] [core:error] [pid 1041789:tid 1041950] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.311087 2026] [security2:error] [pid 1041789:tid 1042053] [client 20.52.41.200:5311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/menu.php"] [unique_id "apK98ov3RhPI65jTFG7v7QAAA5g"]
[Sat Aug 29 05:09:38.313602 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.48.160.90:50554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/wp-login.php"] [unique_id "apK98ov3RhPI65jTFG7v3QAAA3o"]
[Sat Aug 29 05:09:38.322128 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.220.204.93:52276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/666.php"] [unique_id "apK98ov3RhPI65jTFG7v9gAAA30"]
[Sat Aug 29 05:09:38.336376 2026] [security2:error] [pid 1041789:tid 1041981] [client 93.123.109.228:45862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/php_info.php"] [unique_id "apK98ov3RhPI65jTFG7wAAAAA1A"]
[Sat Aug 29 05:09:38.339847 2026] [core:error] [pid 1041789:tid 1041884] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.339864 2026] [core:error] [pid 1041789:tid 1041884] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.349220 2026] [security2:error] [pid 1041789:tid 1042006] [client 158.158.54.35:17326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-includes/index.php"] [unique_id "apK98ov3RhPI65jTFG7wAgAAA2k"]
[Sat Aug 29 05:09:38.350326 2026] [ssl:error] [pid 1041789:tid 1041962] [client 18.235.110.182:36840] AH02032: Hostname host2038.hostmonster.com (default host as no SNI was provided) and hostname webmail.uew.qlp.mybluehost.me provided via HTTP have no compatible SSL setup for policy 'secure'
[Sat Aug 29 05:09:38.354157 2026] [security2:error] [pid 1041789:tid 1042031] [client 158.23.184.117:64560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/storage/index.php"] [unique_id "apK98ov3RhPI65jTFG7wBwAAA4I"]
[Sat Aug 29 05:09:38.355697 2026] [cgid:error] [pid 1041789:tid 1041810] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:38.357226 2026] [cgid:error] [pid 1041789:tid 1041837] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:38.358343 2026] [cgid:error] [pid 1041789:tid 1041835] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:38.359689 2026] [core:error] [pid 1041789:tid 1041823] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.359705 2026] [core:error] [pid 1041789:tid 1041823] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.359969 2026] [cgid:error] [pid 1041789:tid 1041810] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:38.362934 2026] [cgid:error] [pid 1041789:tid 1041888] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:38.373323 2026] [security2:error] [pid 1041789:tid 1042054] [client 93.123.109.228:54774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/phpinfo.php"] [unique_id "apK98ov3RhPI65jTFG7wEwAAA5k"]
[Sat Aug 29 05:09:38.376976 2026] [cgid:error] [pid 1041789:tid 1041875] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:38.381255 2026] [core:error] [pid 1041789:tid 1041963] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.381270 2026] [core:error] [pid 1041789:tid 1041963] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.383919 2026] [security2:error] [pid 1041789:tid 1042037] [client 4.232.148.111:19532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/cv.php"] [unique_id "apK98ov3RhPI65jTFG7wFQAAA4g"]
[Sat Aug 29 05:09:38.398206 2026] [security2:error] [pid 1041789:tid 1042049] [client 62.60.130.128:59681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.130.60.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "soldierbear.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "apK98ov3RhPI65jTFG7wHgAAA5Q"]
[Sat Aug 29 05:09:38.404714 2026] [security2:error] [pid 1041789:tid 1041946] [client 93.123.109.228:54826] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/portal/.env"] [unique_id "apK98ov3RhPI65jTFG7wIAAAAy0"]
[Sat Aug 29 05:09:38.426296 2026] [security2:error] [pid 1041789:tid 1041949] [client 103.185.242.143:56696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK98ov3RhPI65jTFG7wJQAAAzA"]
[Sat Aug 29 05:09:38.426427 2026] [security2:error] [pid 1041789:tid 1041949] [client 103.185.242.143:56696] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK98ov3RhPI65jTFG7wJQAAAzA"]
[Sat Aug 29 05:09:38.429339 2026] [security2:error] [pid 1041789:tid 1041885] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/application/.env"] [unique_id "apK98ov3RhPI65jTFG7wJgADOFM"]
[Sat Aug 29 05:09:38.430428 2026] [security2:error] [pid 1041789:tid 1041846] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/apps/.env"] [unique_id "apK98ov3RhPI65jTFG7wLQADOCw"]
[Sat Aug 29 05:09:38.431516 2026] [core:error] [pid 1041789:tid 1041808] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.431545 2026] [core:error] [pid 1041789:tid 1041808] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.431573 2026] [core:error] [pid 1041789:tid 1041899] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.431581 2026] [core:error] [pid 1041789:tid 1041899] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.431772 2026] [core:error] [pid 1041789:tid 1041830] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.431786 2026] [core:error] [pid 1041789:tid 1041830] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.441303 2026] [security2:error] [pid 1041789:tid 1041972] [client 93.123.109.228:45750] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/product/.env"] [unique_id "apK98ov3RhPI65jTFG7wMQAAA0c"]
[Sat Aug 29 05:09:38.441772 2026] [security2:error] [pid 1041789:tid 1042057] [client 93.123.109.228:54816] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/prod/.env"] [unique_id "apK98ov3RhPI65jTFG7wMgAAA5w"]
[Sat Aug 29 05:09:38.451114 2026] [security2:error] [pid 1041789:tid 1042020] [client 20.48.160.90:50463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/images.php"] [unique_id "apK98ov3RhPI65jTFG7wNQAAA3c"]
[Sat Aug 29 05:09:38.459542 2026] [security2:error] [pid 1041789:tid 1042044] [client 20.63.219.114:1338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/GOD.php"] [unique_id "apK98ov3RhPI65jTFG7wOAAAA48"]
[Sat Aug 29 05:09:38.459610 2026] [security2:error] [pid 1041789:tid 1041979] [client 20.220.204.93:50709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/knmt.php"] [unique_id "apK98ov3RhPI65jTFG7wOQAAA04"]
[Sat Aug 29 05:09:38.461712 2026] [core:error] [pid 1041789:tid 1041965] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.461729 2026] [core:error] [pid 1041789:tid 1041965] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.463593 2026] [core:error] [pid 1041789:tid 1041931] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.463610 2026] [core:error] [pid 1041789:tid 1041931] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.464264 2026] [core:error] [pid 1041789:tid 1042019] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.464273 2026] [core:error] [pid 1041789:tid 1042019] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.471397 2026] [security2:error] [pid 1041789:tid 1042050] [client 68.155.159.216:64080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/file5.php"] [unique_id "apK98ov3RhPI65jTFG7wPgAAA5U"]
[Sat Aug 29 05:09:38.482757 2026] [security2:error] [pid 1041789:tid 1041920] [remote 93.123.109.228:39292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmsproductions.com"] [uri "/config.php"] [unique_id "apK98ov3RhPI65jTFG7wRwADO3Y"]
[Sat Aug 29 05:09:38.488818 2026] [security2:error] [pid 1041789:tid 1042056] [client 93.123.109.228:54790] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/production/.env"] [unique_id "apK98ov3RhPI65jTFG7wSgAAA5s"]
[Sat Aug 29 05:09:38.491109 2026] [core:error] [pid 1041789:tid 1041863] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.491132 2026] [core:error] [pid 1041789:tid 1041863] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.492551 2026] [security2:error] [pid 1041789:tid 1041977] [client 57.141.14.28:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/cart/"] [unique_id "apK98ov3RhPI65jTFG7wSwAAA0w"]
[Sat Aug 29 05:09:38.501759 2026] [security2:error] [pid 1041789:tid 1042028] [client 52.139.37.240:31119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/item.php"] [unique_id "apK98ov3RhPI65jTFG7wUQAAA38"]
[Sat Aug 29 05:09:38.504486 2026] [core:error] [pid 1041789:tid 1041927] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.504513 2026] [core:error] [pid 1041789:tid 1041927] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.538807 2026] [security2:error] [pid 1041789:tid 1041998] [client 40.83.93.50:17666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/haiterus.php"] [unique_id "apK98ov3RhPI65jTFG7wVwAAA2E"]
[Sat Aug 29 05:09:38.546484 2026] [security2:error] [pid 1041789:tid 1042031] [client 158.23.184.117:38335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/wp-includes/blocks/search/index.php"] [unique_id "apK98ov3RhPI65jTFG7wWAAAA4I"]
[Sat Aug 29 05:09:38.564509 2026] [security2:error] [pid 1041789:tid 1042051] [client 20.63.81.20:46420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/wp-conffg.php"] [unique_id "apK98ov3RhPI65jTFG7wWwAAA5Y"]
[Sat Aug 29 05:09:38.584698 2026] [security2:error] [pid 1041789:tid 1041990] [client 20.48.160.90:50464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/ops.php"] [unique_id "apK98ov3RhPI65jTFG7wXwAAA1k"]
[Sat Aug 29 05:09:38.597528 2026] [security2:error] [pid 1041789:tid 1041945] [client 45.148.10.62:33896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xqk.etg.mybluehost.me"] [uri "/config.php"] [unique_id "apK98ov3RhPI65jTFG7wZQAAAyw"]
[Sat Aug 29 05:09:38.598207 2026] [core:error] [pid 1041789:tid 1041867] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.598218 2026] [core:error] [pid 1041789:tid 1041867] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.598233 2026] [core:error] [pid 1041789:tid 1041906] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.598242 2026] [core:error] [pid 1041789:tid 1041906] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.598271 2026] [security2:error] [pid 1041789:tid 1041982] [client 20.220.204.93:59098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/sbhu.php"] [unique_id "apK98ov3RhPI65jTFG7wZgAAA1E"]
[Sat Aug 29 05:09:38.602731 2026] [core:error] [pid 1041789:tid 1041843] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.602743 2026] [core:error] [pid 1041789:tid 1041843] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.612049 2026] [security2:error] [pid 1041789:tid 1041879] [remote 93.123.109.228:39166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/wp-config.php"] [unique_id "apK98ov3RhPI65jTFG7wbgADcU0"]
[Sat Aug 29 05:09:38.614862 2026] [security2:error] [pid 1041789:tid 1041936] [client 20.63.81.20:55642] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/file1221.php"] [unique_id "apK98ov3RhPI65jTFG7wcAAAAyM"]
[Sat Aug 29 05:09:38.618289 2026] [security2:error] [pid 1041789:tid 1041968] [client 93.123.109.228:45774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/project/.env"] [unique_id "apK98ov3RhPI65jTFG7wcgAAA0M"]
[Sat Aug 29 05:09:38.635103 2026] [core:error] [pid 1041789:tid 1041949] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.635124 2026] [core:error] [pid 1041789:tid 1041949] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.646979 2026] [security2:error] [pid 1041789:tid 1041965] [client 4.205.62.107:63898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/cxc.php"] [unique_id "apK98ov3RhPI65jTFG7wgQAAA0A"]
[Sat Aug 29 05:09:38.655138 2026] [core:error] [pid 1041789:tid 1042044] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.655165 2026] [core:error] [pid 1041789:tid 1042044] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.666178 2026] [security2:error] [pid 1041789:tid 1041948] [client 195.178.110.247:42574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lumbeesolar.com"] [uri "/index.php"] [unique_id "apK98ov3RhPI65jTFG7whwAAAy8"]
[Sat Aug 29 05:09:38.681346 2026] [security2:error] [pid 1041789:tid 1041938] [client 20.104.49.130:36314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/m.php"] [unique_id "apK98ov3RhPI65jTFG7wjQAAAyU"]
[Sat Aug 29 05:09:38.683719 2026] [security2:error] [pid 1041789:tid 1042027] [client 93.123.109.228:54856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/public-api/.env"] [unique_id "apK98ov3RhPI65jTFG7wjgAAA34"]
[Sat Aug 29 05:09:38.684693 2026] [security2:error] [pid 1041789:tid 1042042] [client 20.63.81.20:65186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/tf.php"] [unique_id "apK98ov3RhPI65jTFG7wkAAAA40"]
[Sat Aug 29 05:09:38.686038 2026] [security2:error] [pid 1041789:tid 1041977] [client 93.123.109.228:54758] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/public/.env"] [unique_id "apK98ov3RhPI65jTFG7wjwAAA0w"]
[Sat Aug 29 05:09:38.686515 2026] [security2:error] [pid 1041789:tid 1042027] [client 20.63.81.20:40048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK98ov3RhPI65jTFG7wkQAAA34"]
[Sat Aug 29 05:09:38.691082 2026] [security2:error] [pid 1041789:tid 1042056] [client 20.104.49.130:54788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/wp-good.php"] [unique_id "apK98ov3RhPI65jTFG7wkgAAA5s"]
[Sat Aug 29 05:09:38.691881 2026] [security2:error] [pid 1041789:tid 1042033] [client 158.23.184.117:53719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/wp-signup.php"] [unique_id "apK98ov3RhPI65jTFG7wkwAAA4Q"]
[Sat Aug 29 05:09:38.699232 2026] [security2:error] [pid 1041789:tid 1041956] [client 52.139.37.240:31052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/jga.php"] [unique_id "apK98ov3RhPI65jTFG7wlgAAAzc"]
[Sat Aug 29 05:09:38.699943 2026] [security2:error] [pid 1041789:tid 1041918] [remote 93.123.109.228:39166] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.glenncoad.com"] [uri "/wp-config.php.new"] [unique_id "apK98ov3RhPI65jTFG7wlwADf3Q"]
[Sat Aug 29 05:09:38.700255 2026] [security2:error] [pid 1041789:tid 1041918] [remote 93.123.109.228:39166] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.glenncoad.com"] [uri "/wp-config.php.old"] [unique_id "apK98ov3RhPI65jTFG7wmAADf3Q"]
[Sat Aug 29 05:09:38.704374 2026] [security2:error] [pid 1041789:tid 1041951] [client 20.63.81.20:46412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/filefuns.php"] [unique_id "apK98ov3RhPI65jTFG7wnAAAAzI"]
[Sat Aug 29 05:09:38.707462 2026] [security2:error] [pid 1041789:tid 1041979] [client 52.139.37.240:63565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alabamaracingrealtor.com"] [uri "/aged.php"] [unique_id "apK98ov3RhPI65jTFG7wnQAAA04"]
[Sat Aug 29 05:09:38.719857 2026] [security2:error] [pid 1041789:tid 1042015] [client 20.48.160.90:50558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK98ov3RhPI65jTFG7wngAAA3I"]
[Sat Aug 29 05:09:38.722234 2026] [security2:error] [pid 1041789:tid 1041943] [client 68.155.159.216:1943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK98ov3RhPI65jTFG7wnwAAAyo"]
[Sat Aug 29 05:09:38.733851 2026] [security2:error] [pid 1041789:tid 1041995] [client 93.123.109.228:54844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/public/phpinfo.php"] [unique_id "apK98ov3RhPI65jTFG7woAAAA14"]
[Sat Aug 29 05:09:38.743918 2026] [security2:error] [pid 1041789:tid 1042031] [client 20.220.204.93:59031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/a332.php"] [unique_id "apK98ov3RhPI65jTFG7wqAAAA4I"]
[Sat Aug 29 05:09:38.746170 2026] [security2:error] [pid 1041789:tid 1041860] [remote 93.123.109.228:39292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmsproductions.com"] [uri "/config/aws.php"] [unique_id "apK98ov3RhPI65jTFG7wqgADRzo"]
[Sat Aug 29 05:09:38.755543 2026] [cgid:error] [pid 1041789:tid 1041871] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:38.755860 2026] [cgid:error] [pid 1041789:tid 1041887] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:38.755904 2026] [cgid:error] [pid 1041789:tid 1041926] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:38.756016 2026] [security2:error] [pid 1041789:tid 1041990] [client 93.123.109.228:54790] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/public_html/.env"] [unique_id "apK98ov3RhPI65jTFG7wswAAA1k"]
[Sat Aug 29 05:09:38.757079 2026] [cgid:error] [pid 1041789:tid 1041913] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:38.757121 2026] [cgid:error] [pid 1041789:tid 1041854] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:38.757497 2026] [security2:error] [pid 1041789:tid 1041981] [client 20.197.61.180:2011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/install.php"] [unique_id "apK98ov3RhPI65jTFG7wtQAAA1A"]
[Sat Aug 29 05:09:38.758902 2026] [cgid:error] [pid 1041789:tid 1041872] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:38.765508 2026] [security2:error] [pid 1041789:tid 1041987] [client 20.63.81.20:55648] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/nox.php"] [unique_id "apK98ov3RhPI65jTFG7wugAAA1Y"]
[Sat Aug 29 05:09:38.766993 2026] [security2:error] [pid 1041789:tid 1041836] [remote 93.123.109.228:39292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmsproductions.com"] [uri "/config/config.php"] [unique_id "apK98ov3RhPI65jTFG7wvQADUSI"]
[Sat Aug 29 05:09:38.767738 2026] [security2:error] [pid 1041789:tid 1041911] [remote 93.123.109.228:39292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmsproductions.com"] [uri "/config/config.inc.php"] [unique_id "apK98ov3RhPI65jTFG7wvwADUW0"]
[Sat Aug 29 05:09:38.767774 2026] [security2:error] [pid 1041789:tid 1042032] [client 20.52.41.200:4365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK98ov3RhPI65jTFG7wvgAAA4M"]
[Sat Aug 29 05:09:38.770952 2026] [security2:error] [pid 1041789:tid 1042046] [client 45.148.10.62:33860] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.xtj.otn.mybluehost.me"] [uri "/backend/.env"] [unique_id "apK98ov3RhPI65jTFG7wwAAAA5E"]
[Sat Aug 29 05:09:38.777136 2026] [security2:error] [pid 1041789:tid 1042049] [client 4.205.62.107:21889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/packed.php"] [unique_id "apK98ov3RhPI65jTFG7wwgAAA5Q"]
[Sat Aug 29 05:09:38.780481 2026] [core:error] [pid 1041789:tid 1041936] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.780501 2026] [core:error] [pid 1041789:tid 1041936] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.794007 2026] [security2:error] [pid 1041789:tid 1042014] [client 68.155.159.216:2002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK98ov3RhPI65jTFG7wxgAAA3E"]
[Sat Aug 29 05:09:38.799094 2026] [security2:error] [pid 1041789:tid 1042040] [client 158.23.147.79:60203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-admin/about.php"] [unique_id "apK98ov3RhPI65jTFG7wyAAAA4s"]
[Sat Aug 29 05:09:38.817102 2026] [security2:error] [pid 1041789:tid 1041931] [client 20.63.81.20:63700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/px.php"] [unique_id "apK98ov3RhPI65jTFG7wywAAAx4"]
[Sat Aug 29 05:09:38.825309 2026] [security2:error] [pid 1041789:tid 1041934] [client 20.63.81.20:40032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/haxor.php"] [unique_id "apK98ov3RhPI65jTFG7wzgAAAyE"]
[Sat Aug 29 05:09:38.830525 2026] [security2:error] [pid 1041789:tid 1041961] [client 20.63.219.114:17925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/ggfi.php"] [unique_id "apK98ov3RhPI65jTFG7w1AAAAzw"]
[Sat Aug 29 05:09:38.832413 2026] [security2:error] [pid 1041789:tid 1041976] [client 195.178.110.247:65284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lumbeesolar.com"] [uri "/index.php"] [unique_id "apK98ov3RhPI65jTFG7w1QAAA0s"]
[Sat Aug 29 05:09:38.837132 2026] [security2:error] [pid 1041789:tid 1042057] [client 158.23.184.117:53699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/404.php"] [unique_id "apK98ov3RhPI65jTFG7w1wAAA5w"]
[Sat Aug 29 05:09:38.838630 2026] [security2:error] [pid 1041789:tid 1041957] [client 20.63.81.20:46341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/wp-cron.php"] [unique_id "apK98ov3RhPI65jTFG7w2AAAAzg"]
[Sat Aug 29 05:09:38.842589 2026] [security2:error] [pid 1041789:tid 1042048] [client 74.248.24.12:22856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK98ov3RhPI65jTFG7w2QAAA5M"]
[Sat Aug 29 05:09:38.846251 2026] [security2:error] [pid 1041789:tid 1041938] [client 158.23.147.79:14223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK98ov3RhPI65jTFG7w2gAAAyU"]
[Sat Aug 29 05:09:38.847389 2026] [security2:error] [pid 1041789:tid 1042023] [client 4.232.148.111:26861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-content/packed.php"] [unique_id "apK98ov3RhPI65jTFG7w2wAAA3o"]
[Sat Aug 29 05:09:38.847469 2026] [security2:error] [pid 1041789:tid 1042025] [client 20.197.61.180:18211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superprotection.com"] [uri "/aaa.php"] [unique_id "apK98ov3RhPI65jTFG7w3AAAA3w"]
[Sat Aug 29 05:09:38.849398 2026] [security2:error] [pid 1041789:tid 1042027] [client 158.23.147.79:11333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/cgi-bin/index.php"] [unique_id "apK98ov3RhPI65jTFG7w3QAAA34"]
[Sat Aug 29 05:09:38.859256 2026] [security2:error] [pid 1041789:tid 1042056] [client 20.48.160.90:50490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK98ov3RhPI65jTFG7w4gAAA5s"]
[Sat Aug 29 05:09:38.860588 2026] [core:error] [pid 1041789:tid 1041893] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.860609 2026] [core:error] [pid 1041789:tid 1041893] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.862055 2026] [core:error] [pid 1041789:tid 1041898] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.862072 2026] [core:error] [pid 1041789:tid 1041898] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.863322 2026] [security2:error] [pid 1041789:tid 1041864] [remote 93.123.109.228:39166] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.glenncoad.com"] [uri "/wp-config.php.bak"] [unique_id "apK98ov3RhPI65jTFG7w5QADWz4"]
[Sat Aug 29 05:09:38.867954 2026] [core:error] [pid 1041789:tid 1041812] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.867972 2026] [core:error] [pid 1041789:tid 1041812] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.883878 2026] [security2:error] [pid 1041789:tid 1042053] [client 20.220.204.93:52232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/ws66.php"] [unique_id "apK98ov3RhPI65jTFG7xBwAAA5g"]
[Sat Aug 29 05:09:38.886197 2026] [core:error] [pid 1041789:tid 1041846] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.886211 2026] [core:error] [pid 1041789:tid 1041846] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.893504 2026] [core:error] [pid 1041789:tid 1042029] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.893524 2026] [core:error] [pid 1041789:tid 1042029] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.894315 2026] [core:error] [pid 1041789:tid 1041943] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.894328 2026] [core:error] [pid 1041789:tid 1041943] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.898167 2026] [security2:error] [pid 1041789:tid 1042019] [client 52.139.37.240:31126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/mac.php"] [unique_id "apK98ov3RhPI65jTFG7xDQAAA3Y"]
[Sat Aug 29 05:09:38.901292 2026] [cgid:error] [pid 1041789:tid 1041886] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:38.901784 2026] [cgid:error] [pid 1041789:tid 1041904] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:38.902338 2026] [core:error] [pid 1041789:tid 1041972] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.902353 2026] [core:error] [pid 1041789:tid 1041972] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.902388 2026] [core:error] [pid 1041789:tid 1042031] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.902404 2026] [core:error] [pid 1041789:tid 1042031] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.902976 2026] [security2:error] [pid 1041789:tid 1041991] [client 52.139.37.240:63589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alabamaracingrealtor.com"] [uri "/essexec.php"] [unique_id "apK98ov3RhPI65jTFG7xEgAAA1o"]
[Sat Aug 29 05:09:38.917746 2026] [core:error] [pid 1041789:tid 1041981] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.917770 2026] [core:error] [pid 1041789:tid 1041981] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.918728 2026] [security2:error] [pid 1041789:tid 1042032] [client 4.232.148.111:14559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK98ov3RhPI65jTFG7xEwAAA4M"]
[Sat Aug 29 05:09:38.920558 2026] [core:error] [pid 1041789:tid 1042006] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.920575 2026] [core:error] [pid 1041789:tid 1042006] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.923287 2026] [core:error] [pid 1041789:tid 1041990] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.923305 2026] [core:error] [pid 1041789:tid 1041990] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.924274 2026] [cgid:error] [pid 1041789:tid 1041914] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:38.942645 2026] [security2:error] [pid 1041789:tid 1042049] [client 20.63.81.20:55593] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/akismet.php"] [unique_id "apK98ov3RhPI65jTFG7xGgAAA5Q"]
[Sat Aug 29 05:09:38.954242 2026] [security2:error] [pid 1041789:tid 1041956] [client 158.23.147.79:62681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/file88.php"] [unique_id "apK98ov3RhPI65jTFG7xHgAAAzc"]
[Sat Aug 29 05:09:38.957167 2026] [core:error] [pid 1041789:tid 1041987] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.957194 2026] [core:error] [pid 1041789:tid 1041987] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.957264 2026] [core:error] [pid 1041789:tid 1041945] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.957275 2026] [core:error] [pid 1041789:tid 1041945] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.960827 2026] [security2:error] [pid 1041789:tid 1041908] [remote 93.123.109.228:39292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmsproductions.com"] [uri "/config/env.php"] [unique_id "apK98ov3RhPI65jTFG7xJQADK2o"]
[Sat Aug 29 05:09:38.961188 2026] [security2:error] [pid 1041789:tid 1042021] [client 20.63.81.20:63721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/jg.php"] [unique_id "apK98ov3RhPI65jTFG7xJgAAA3g"]
[Sat Aug 29 05:09:38.962870 2026] [core:error] [pid 1041789:tid 1041968] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.962888 2026] [core:error] [pid 1041789:tid 1041968] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.963760 2026] [core:error] [pid 1041789:tid 1042018] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.963775 2026] [core:error] [pid 1041789:tid 1042018] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:38.965941 2026] [security2:error] [pid 1041789:tid 1042018] [client 93.123.109.228:45758] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/qa/.env"] [unique_id "apK98ov3RhPI65jTFG7xKQAAA3U"]
[Sat Aug 29 05:09:38.966806 2026] [security2:error] [pid 1041789:tid 1041927] [remote 93.123.109.228:39292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmsproductions.com"] [uri "/config/nexmo.php"] [unique_id "apK98ov3RhPI65jTFG7xKgADK30"]
[Sat Aug 29 05:09:38.967530 2026] [security2:error] [pid 1041789:tid 1041868] [remote 93.123.109.228:39292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmsproductions.com"] [uri "/config/module.config.php"] [unique_id "apK98ov3RhPI65jTFG7xKwADK0I"]
[Sat Aug 29 05:09:38.968886 2026] [security2:error] [pid 1041789:tid 1041809] [remote 93.123.109.228:39292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmsproductions.com"] [uri "/config/stripe.php"] [unique_id "apK98ov3RhPI65jTFG7xLwADKwc"]
[Sat Aug 29 05:09:38.971059 2026] [security2:error] [pid 1041789:tid 1042048] [client 20.63.81.20:46434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/lock360.php"] [unique_id "apK98ov3RhPI65jTFG7xMgAAA5M"]
[Sat Aug 29 05:09:38.976327 2026] [security2:error] [pid 1041789:tid 1042025] [client 20.63.81.20:39954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/google.php"] [unique_id "apK98ov3RhPI65jTFG7xNgAAA3w"]
[Sat Aug 29 05:09:38.977772 2026] [security2:error] [pid 1041789:tid 1042023] [client 45.148.10.62:33860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xtj.otn.mybluehost.me"] [uri "/test.php"] [unique_id "apK98ov3RhPI65jTFG7xNwAAA3o"]
[Sat Aug 29 05:09:38.981506 2026] [security2:error] [pid 1041789:tid 1042027] [client 93.123.109.228:54914] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK98ov3RhPI65jTFG7xOAAAA34"]
[Sat Aug 29 05:09:38.992017 2026] [security2:error] [pid 1041789:tid 1041935] [client 103.48.146.148:62876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 148.146.48.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK98ov3RhPI65jTFG7xPgAAAyI"]
[Sat Aug 29 05:09:38.992132 2026] [security2:error] [pid 1041789:tid 1041935] [client 103.48.146.148:62876] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK98ov3RhPI65jTFG7xPgAAAyI"]
[Sat Aug 29 05:09:38.993184 2026] [security2:error] [pid 1041789:tid 1041995] [client 20.48.160.90:45376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/about.php"] [unique_id "apK98ov3RhPI65jTFG7xPwAAA14"]
[Sat Aug 29 05:09:39.004699 2026] [security2:error] [pid 1041789:tid 1041949] [client 158.23.184.117:53739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/as.php"] [unique_id "apK984v3RhPI65jTFG7xQwAAAzA"]
[Sat Aug 29 05:09:39.016561 2026] [security2:error] [pid 1041789:tid 1041950] [client 40.83.93.50:10055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/go.php"] [unique_id "apK984v3RhPI65jTFG7xRwAAAzE"]
[Sat Aug 29 05:09:39.038482 2026] [security2:error] [pid 1041789:tid 1041981] [client 68.155.159.216:63839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK984v3RhPI65jTFG7xTQAAA1A"]
[Sat Aug 29 05:09:39.040284 2026] [security2:error] [pid 1041789:tid 1042032] [client 68.155.159.216:49293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK984v3RhPI65jTFG7xTgAAA4M"]
[Sat Aug 29 05:09:39.055891 2026] [security2:error] [pid 1041789:tid 1041879] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/back-api/.env"] [unique_id "apK984v3RhPI65jTFG7xUwADkU0"]
[Sat Aug 29 05:09:39.057719 2026] [core:error] [pid 1041789:tid 1041843] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.057737 2026] [core:error] [pid 1041789:tid 1041843] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.060956 2026] [security2:error] [pid 1041789:tid 1042055] [client 20.220.204.93:41830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/ws68.php"] [unique_id "apK984v3RhPI65jTFG7xVgAAA5o"]
[Sat Aug 29 05:09:39.076094 2026] [security2:error] [pid 1041789:tid 1041862] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/back-end/.env"] [unique_id "apK984v3RhPI65jTFG7xXAADkTw"]
[Sat Aug 29 05:09:39.082410 2026] [security2:error] [pid 1041789:tid 1042040] [client 20.63.81.20:55573] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/ajax.php"] [unique_id "apK984v3RhPI65jTFG7xXgAAA4s"]
[Sat Aug 29 05:09:39.094086 2026] [security2:error] [pid 1041789:tid 1041956] [client 20.104.49.130:55125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.danesquality.com"] [uri "/mh.php"] [unique_id "apK984v3RhPI65jTFG7xYAAAAzc"]
[Sat Aug 29 05:09:39.096343 2026] [security2:error] [pid 1041789:tid 1042031] [client 52.139.37.240:31066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/wp-admin/images/index.php"] [unique_id "apK984v3RhPI65jTFG7xYgAAA4I"]
[Sat Aug 29 05:09:39.097196 2026] [security2:error] [pid 1041789:tid 1041972] [client 52.139.37.240:63597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alabamaracingrealtor.com"] [uri "/fw.php"] [unique_id "apK984v3RhPI65jTFG7xYwAAA0c"]
[Sat Aug 29 05:09:39.100350 2026] [core:error] [pid 1041789:tid 1041983] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.100379 2026] [core:error] [pid 1041789:tid 1041983] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.102642 2026] [core:error] [pid 1041789:tid 1041951] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.102656 2026] [core:error] [pid 1041789:tid 1041951] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.110107 2026] [security2:error] [pid 1041789:tid 1042052] [client 20.63.81.20:47351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/yj.php"] [unique_id "apK984v3RhPI65jTFG7xZQAAA5c"]
[Sat Aug 29 05:09:39.114073 2026] [security2:error] [pid 1041789:tid 1042017] [client 20.63.81.20:40034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "apK984v3RhPI65jTFG7xZgAAA3Q"]
[Sat Aug 29 05:09:39.117066 2026] [security2:error] [pid 1041789:tid 1041987] [client 195.178.110.247:42588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lumbeeriversolar.com"] [uri "/index.php"] [unique_id "apK984v3RhPI65jTFG7xZwAAA1Y"]
[Sat Aug 29 05:09:39.121087 2026] [security2:error] [pid 1041789:tid 1042046] [client 20.48.160.90:45391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/admin.php/admin.php"] [unique_id "apK984v3RhPI65jTFG7xaAAAA5E"]
[Sat Aug 29 05:09:39.125912 2026] [security2:error] [pid 1041789:tid 1041971] [client 20.63.81.20:46365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/wp-theme.php"] [unique_id "apK984v3RhPI65jTFG7xaQAAA0Y"]
[Sat Aug 29 05:09:39.132984 2026] [security2:error] [pid 1041789:tid 1042057] [client 93.123.109.228:55020] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(\\\\/\\\\*\\\\!? ?(?:select|grant|delete|insert|drop|alter|replace|truncate|update|create|rename|describe|union|concat|group_concat))" at REQUEST_FILENAME. [file "/opt/mod_security/hg_rules.conf"] [line "1019"] [id "9000042"] [rev "2.2.2"] [msg "SQL Comment Sequence Detected."] [data "/*update"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/*update.cgi*"] [unique_id "apK984v3RhPI65jTFG7xbAAAA5w"]
[Sat Aug 29 05:09:39.133732 2026] [security2:error] [pid 1041789:tid 1041933] [client 93.123.109.228:54972] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK984v3RhPI65jTFG7xbQAAAyA"]
[Sat Aug 29 05:09:39.148452 2026] [security2:error] [pid 1041789:tid 1042018] [client 4.205.62.107:24978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/cache-compat.php"] [unique_id "apK984v3RhPI65jTFG7xcQAAA3U"]
[Sat Aug 29 05:09:39.154919 2026] [security2:error] [pid 1041789:tid 1042020] [client 158.23.184.117:64522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/php.php"] [unique_id "apK984v3RhPI65jTFG7xcgAAA3c"]
[Sat Aug 29 05:09:39.177382 2026] [security2:error] [pid 1041789:tid 1041936] [client 4.205.62.107:53330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/application.config.php"] [unique_id "apK984v3RhPI65jTFG7xdgAAAyM"]
[Sat Aug 29 05:09:39.194049 2026] [security2:error] [pid 1041789:tid 1042032] [client 45.148.10.62:33910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xqk.etg.mybluehost.me"] [uri "/config.php.bak"] [unique_id "apK984v3RhPI65jTFG7xewAAA4M"]
[Sat Aug 29 05:09:39.196045 2026] [security2:error] [pid 1041789:tid 1042054] [client 20.220.204.93:52337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/users.php"] [unique_id "apK984v3RhPI65jTFG7xfAAAA5k"]
[Sat Aug 29 05:09:39.196556 2026] [security2:error] [pid 1041789:tid 1041947] [client 4.205.62.107:6504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/25.php"] [unique_id "apK984v3RhPI65jTFG7xfQAAAy4"]
[Sat Aug 29 05:09:39.220172 2026] [security2:error] [pid 1041789:tid 1041948] [client 20.63.81.20:55637] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/atomlib.php"] [unique_id "apK984v3RhPI65jTFG7xggAAAy8"]
[Sat Aug 29 05:09:39.226591 2026] [security2:error] [pid 1041789:tid 1041981] [client 4.205.62.107:58419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/ws79.php"] [unique_id "apK984v3RhPI65jTFG7xiAAAA1A"]
[Sat Aug 29 05:09:39.241690 2026] [security2:error] [pid 1041789:tid 1041850] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/back/.env"] [unique_id "apK984v3RhPI65jTFG7xjwADbjA"]
[Sat Aug 29 05:09:39.242982 2026] [security2:error] [pid 1041789:tid 1041932] [client 20.63.81.20:39955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/robots.php"] [unique_id "apK984v3RhPI65jTFG7xkgAAAx8"]
[Sat Aug 29 05:09:39.246583 2026] [security2:error] [pid 1041789:tid 1041871] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK984v3RhPI65jTFG7xlgADgEU"]
[Sat Aug 29 05:09:39.246588 2026] [security2:error] [pid 1041789:tid 1041889] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/backend-api/.env"] [unique_id "apK984v3RhPI65jTFG7xlQADgFc"]
[Sat Aug 29 05:09:39.249115 2026] [security2:error] [pid 1041789:tid 1041965] [client 20.63.81.20:47323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/zi.php"] [unique_id "apK984v3RhPI65jTFG7xmAAAA0A"]
[Sat Aug 29 05:09:39.252631 2026] [security2:error] [pid 1041789:tid 1042043] [client 158.158.54.35:34174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-admin/a.php"] [unique_id "apK984v3RhPI65jTFG7xmQAAA44"]
[Sat Aug 29 05:09:39.264769 2026] [security2:error] [pid 1041789:tid 1041972] [client 20.48.160.90:45312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/media.php"] [unique_id "apK984v3RhPI65jTFG7xnAAAA0c"]
[Sat Aug 29 05:09:39.266670 2026] [security2:error] [pid 1041789:tid 1041951] [client 4.205.62.107:62769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/xp.php"] [unique_id "apK984v3RhPI65jTFG7xnQAAAzI"]
[Sat Aug 29 05:09:39.266923 2026] [security2:error] [pid 1041789:tid 1041943] [client 20.63.81.20:46366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/2d7433/index.php"] [unique_id "apK984v3RhPI65jTFG7xngAAAyo"]
[Sat Aug 29 05:09:39.279122 2026] [security2:error] [pid 1041789:tid 1041945] [client 195.178.110.247:65292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lumbeeriversolar.com"] [uri "/index.php"] [unique_id "apK984v3RhPI65jTFG7xoAAAAyw"]
[Sat Aug 29 05:09:39.289280 2026] [security2:error] [pid 1041789:tid 1042017] [client 158.23.147.79:17679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK984v3RhPI65jTFG7xoQAAA3Q"]
[Sat Aug 29 05:09:39.291480 2026] [security2:error] [pid 1041789:tid 1042037] [client 52.139.37.240:31137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/wp-admin/includes/index.php"] [unique_id "apK984v3RhPI65jTFG7xogAAA4g"]
[Sat Aug 29 05:09:39.292121 2026] [security2:error] [pid 1041789:tid 1041963] [client 52.139.37.240:63594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alabamaracingrealtor.com"] [uri "/zwso.php"] [unique_id "apK984v3RhPI65jTFG7xpAAAAz4"]
[Sat Aug 29 05:09:39.301300 2026] [security2:error] [pid 1041789:tid 1042040] [client 158.23.184.117:53720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/term.php"] [unique_id "apK984v3RhPI65jTFG7xpwAAA4s"]
[Sat Aug 29 05:09:39.311450 2026] [core:error] [pid 1041789:tid 1041860] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.311471 2026] [core:error] [pid 1041789:tid 1041860] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.311703 2026] [core:error] [pid 1041789:tid 1041913] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.311716 2026] [core:error] [pid 1041789:tid 1041913] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.315647 2026] [cgid:error] [pid 1041789:tid 1041872] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:39.317007 2026] [cgid:error] [pid 1041789:tid 1041891] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:39.317322 2026] [core:error] [pid 1041789:tid 1041836] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.317341 2026] [core:error] [pid 1041789:tid 1041836] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.317400 2026] [core:error] [pid 1041789:tid 1041911] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.317411 2026] [core:error] [pid 1041789:tid 1041911] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.317635 2026] [core:error] [pid 1041789:tid 1041839] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.317646 2026] [core:error] [pid 1041789:tid 1041839] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.317922 2026] [security2:error] [pid 1041789:tid 1042007] [client 4.232.148.111:11919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-admin/js/index.php"] [unique_id "apK984v3RhPI65jTFG7xsgAAA2o"]
[Sat Aug 29 05:09:39.319013 2026] [cgid:error] [pid 1041789:tid 1041807] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:39.320449 2026] [core:error] [pid 1041789:tid 1041833] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.320463 2026] [core:error] [pid 1041789:tid 1041833] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.321639 2026] [core:error] [pid 1041789:tid 1041844] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.321654 2026] [core:error] [pid 1041789:tid 1041844] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.322465 2026] [security2:error] [pid 1041789:tid 1042019] [client 93.123.109.228:54920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/.env"] [unique_id "apK984v3RhPI65jTFG7xuAAAA3Y"]
[Sat Aug 29 05:09:39.324334 2026] [security2:error] [pid 1041789:tid 1041842] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/backup/.env"] [unique_id "apK984v3RhPI65jTFG7xtwADeCg"]
[Sat Aug 29 05:09:39.325632 2026] [core:error] [pid 1041789:tid 1041874] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.325653 2026] [core:error] [pid 1041789:tid 1041874] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.326250 2026] [core:error] [pid 1041789:tid 1041928] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.326260 2026] [core:error] [pid 1041789:tid 1041928] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.326341 2026] [core:error] [pid 1041789:tid 1041807] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.326352 2026] [core:error] [pid 1041789:tid 1041807] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.326867 2026] [core:error] [pid 1041789:tid 1041897] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.326877 2026] [core:error] [pid 1041789:tid 1041897] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.356777 2026] [security2:error] [pid 1041789:tid 1042033] [client 20.63.219.114:18957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/alfa-rex.php"] [unique_id "apK984v3RhPI65jTFG7xxwAAA4Q"]
[Sat Aug 29 05:09:39.360115 2026] [security2:error] [pid 1041789:tid 1041990] [client 68.155.159.216:30646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/.well-known/content.php"] [unique_id "apK984v3RhPI65jTFG7xygAAA1k"]
[Sat Aug 29 05:09:39.369207 2026] [security2:error] [pid 1041789:tid 1041949] [client 74.248.24.12:37742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/css/index.php"] [unique_id "apK984v3RhPI65jTFG7xzAAAAzA"]
[Sat Aug 29 05:09:39.374397 2026] [security2:error] [pid 1041789:tid 1041935] [client 20.63.81.20:40060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/wp-content/plugins/ccx/index.php"] [unique_id "apK984v3RhPI65jTFG7xzgAAAyI"]
[Sat Aug 29 05:09:39.375673 2026] [security2:error] [pid 1041789:tid 1041995] [client 20.63.81.20:55638] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "autodiscover.fastnetus.com"] [uri "/1.php"] [unique_id "apK984v3RhPI65jTFG7xzwAAA14"]
[Sat Aug 29 05:09:39.375704 2026] [security2:error] [pid 1041789:tid 1041995] [client 20.63.81.20:55638] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/1.php"] [unique_id "apK984v3RhPI65jTFG7xzwAAA14"]
[Sat Aug 29 05:09:39.377252 2026] [security2:error] [pid 1041789:tid 1041978] [client 20.220.204.93:50764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/bzjdlofz.php"] [unique_id "apK984v3RhPI65jTFG7x0AAAA00"]
[Sat Aug 29 05:09:39.383753 2026] [security2:error] [pid 1041789:tid 1041936] [client 20.63.81.20:65213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/ue.php"] [unique_id "apK984v3RhPI65jTFG7x0QAAAyM"]
[Sat Aug 29 05:09:39.390517 2026] [security2:error] [pid 1041789:tid 1042026] [client 158.23.147.79:28033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK984v3RhPI65jTFG7x0wAAA30"]
[Sat Aug 29 05:09:39.393265 2026] [security2:error] [pid 1041789:tid 1041969] [client 68.155.159.216:6047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK984v3RhPI65jTFG7x1QAAA0Q"]
[Sat Aug 29 05:09:39.393508 2026] [security2:error] [pid 1041789:tid 1042048] [client 4.232.148.111:29560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/num.php"] [unique_id "apK984v3RhPI65jTFG7x1gAAA5M"]
[Sat Aug 29 05:09:39.394984 2026] [security2:error] [pid 1041789:tid 1042054] [client 20.48.160.90:50518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/mac.php"] [unique_id "apK984v3RhPI65jTFG7x1wAAA5k"]
[Sat Aug 29 05:09:39.396034 2026] [security2:error] [pid 1041789:tid 1041947] [client 20.52.41.200:5286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/lite.php"] [unique_id "apK984v3RhPI65jTFG7x2AAAAy4"]
[Sat Aug 29 05:09:39.400594 2026] [security2:error] [pid 1041789:tid 1042030] [client 93.123.109.228:55020] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/laravel/app/.env"] [unique_id "apK984v3RhPI65jTFG7x2QAAA4E"]
[Sat Aug 29 05:09:39.406337 2026] [security2:error] [pid 1041789:tid 1041997] [client 20.63.81.20:46407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/wp-login.php"] [unique_id "apK984v3RhPI65jTFG7x2wAAA2A"]
[Sat Aug 29 05:09:39.424507 2026] [security2:error] [pid 1041789:tid 1041965] [client 68.155.159.216:33583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK984v3RhPI65jTFG7x5QAAA0A"]
[Sat Aug 29 05:09:39.427094 2026] [security2:error] [pid 1041789:tid 1042029] [client 93.123.109.228:54998] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK984v3RhPI65jTFG7x5gAAA4A"]
[Sat Aug 29 05:09:39.454284 2026] [security2:error] [pid 1041789:tid 1042037] [client 4.205.62.107:55941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/linusadmin-phpinfo.php"] [unique_id "apK984v3RhPI65jTFG7x8gAAA4g"]
[Sat Aug 29 05:09:39.462936 2026] [security2:error] [pid 1041789:tid 1042006] [client 158.23.184.117:38296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/Ov-Simple1.php"] [unique_id "apK984v3RhPI65jTFG7x9gAAA2k"]
[Sat Aug 29 05:09:39.466864 2026] [security2:error] [pid 1041789:tid 1041931] [client 158.23.147.79:6054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-admin/images/index.php"] [unique_id "apK984v3RhPI65jTFG7x-wAAAx4"]
[Sat Aug 29 05:09:39.467523 2026] [security2:error] [pid 1041789:tid 1041838] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/be/.env"] [unique_id "apK984v3RhPI65jTFG7x9wADSiQ"]
[Sat Aug 29 05:09:39.468838 2026] [security2:error] [pid 1041789:tid 1041901] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/beta/.env"] [unique_id "apK984v3RhPI65jTFG7x_AADSmM"]
[Sat Aug 29 05:09:39.488230 2026] [security2:error] [pid 1041789:tid 1041950] [client 52.139.37.240:63577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alabamaracingrealtor.com"] [uri "/admin/function.php"] [unique_id "apK984v3RhPI65jTFG7yBAAAAzE"]
[Sat Aug 29 05:09:39.488466 2026] [cgid:error] [pid 1041789:tid 1041876] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:39.493533 2026] [cgid:error] [pid 1041789:tid 1041927] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:39.493608 2026] [cgid:error] [pid 1041789:tid 1041868] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:39.499620 2026] [core:error] [pid 1041789:tid 1042019] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.499636 2026] [core:error] [pid 1041789:tid 1042019] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.502115 2026] [core:error] [pid 1041789:tid 1042021] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.502137 2026] [core:error] [pid 1041789:tid 1042021] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.504675 2026] [security2:error] [pid 1041789:tid 1042031] [client 52.139.37.240:31063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/zafir1.php"] [unique_id "apK984v3RhPI65jTFG7yCQAAA4I"]
[Sat Aug 29 05:09:39.513321 2026] [cgid:error] [pid 1041789:tid 1041917] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:39.513371 2026] [security2:error] [pid 1041789:tid 1042018] [client 40.83.93.50:17664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/gecko-new.php"] [unique_id "apK984v3RhPI65jTFG7yDQAAA3U"]
[Sat Aug 29 05:09:39.514770 2026] [cgid:error] [pid 1041789:tid 1041808] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:39.514776 2026] [cgid:error] [pid 1041789:tid 1041809] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:39.525731 2026] [security2:error] [pid 1041789:tid 1041990] [client 20.48.160.90:50538] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.workbase.site"] [uri "/1.php"] [unique_id "apK984v3RhPI65jTFG7yEQAAA1k"]
[Sat Aug 29 05:09:39.525826 2026] [security2:error] [pid 1041789:tid 1041990] [client 20.48.160.90:50538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/1.php"] [unique_id "apK984v3RhPI65jTFG7yEQAAA1k"]
[Sat Aug 29 05:09:39.534900 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.220.204.93:52283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/selesai.php"] [unique_id "apK984v3RhPI65jTFG7yEwAAA3o"]
[Sat Aug 29 05:09:39.537212 2026] [security2:error] [pid 1041789:tid 1041935] [client 93.123.109.228:55094] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/.env.backup"] [unique_id "apK984v3RhPI65jTFG7yFgAAAyI"]
[Sat Aug 29 05:09:39.538502 2026] [security2:error] [pid 1041789:tid 1041909] [remote 93.123.109.228:39364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glamrus.rocks"] [uri "/info.php"] [unique_id "apK984v3RhPI65jTFG7yFwADhGs"]
[Sat Aug 29 05:09:39.539963 2026] [security2:error] [pid 1041789:tid 1041885] [remote 93.123.109.228:39364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glamrus.rocks"] [uri "/infos.php"] [unique_id "apK984v3RhPI65jTFG7yGwADhFM"]
[Sat Aug 29 05:09:39.539992 2026] [security2:error] [pid 1041789:tid 1041804] [remote 93.123.109.228:39364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glamrus.rocks"] [uri "/infophp.php"] [unique_id "apK984v3RhPI65jTFG7yGgADhAI"]
[Sat Aug 29 05:09:39.541117 2026] [security2:error] [pid 1041789:tid 1042032] [client 45.148.10.62:33922] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.xtj.otn.mybluehost.me"] [uri "/.env.backup"] [unique_id "apK984v3RhPI65jTFG7yHQAAA4M"]
[Sat Aug 29 05:09:39.547199 2026] [security2:error] [pid 1041789:tid 1041971] [client 93.123.109.228:55008] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/.env.bak"] [unique_id "apK984v3RhPI65jTFG7yIQAAA0Y"]
[Sat Aug 29 05:09:39.552102 2026] [security2:error] [pid 1041789:tid 1041936] [client 68.155.159.216:16284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/log-mama/function.php"] [unique_id "apK984v3RhPI65jTFG7yJwAAAyM"]
[Sat Aug 29 05:09:39.554064 2026] [security2:error] [pid 1041789:tid 1042013] [client 68.155.159.216:18250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK984v3RhPI65jTFG7yKAAAA3A"]
[Sat Aug 29 05:09:39.563214 2026] [cgid:error] [pid 1041789:tid 1041879] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:39.566257 2026] [cgid:error] [pid 1041789:tid 1041820] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:39.588053 2026] [security2:error] [pid 1041789:tid 1042020] [client 20.197.61.180:1998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/colour.php"] [unique_id "apK984v3RhPI65jTFG7yLgAAA3c"]
[Sat Aug 29 05:09:39.602066 2026] [core:error] [pid 1041789:tid 1041843] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.602085 2026] [core:error] [pid 1041789:tid 1041843] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.608759 2026] [security2:error] [pid 1041789:tid 1042030] [client 158.23.184.117:53713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/atomlib.php"] [unique_id "apK984v3RhPI65jTFG7yMgAAA4E"]
[Sat Aug 29 05:09:39.612591 2026] [security2:error] [pid 1041789:tid 1041856] [remote 93.123.109.228:55834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyer.com"] [uri "/config.php"] [unique_id "apK984v3RhPI65jTFG7yNAADKTY"]
[Sat Aug 29 05:09:39.662864 2026] [security2:error] [pid 1041789:tid 1042055] [client 20.48.160.90:50505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/classwithtostring.php"] [unique_id "apK984v3RhPI65jTFG7ySwAAA5o"]
[Sat Aug 29 05:09:39.664941 2026] [security2:error] [pid 1041789:tid 1041941] [client 93.123.109.228:54816] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/s3/.env.bak"] [unique_id "apK984v3RhPI65jTFG7yUAAAAyg"]
[Sat Aug 29 05:09:39.665875 2026] [cgid:error] [pid 1041789:tid 1041900] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:39.667218 2026] [security2:error] [pid 1041789:tid 1041829] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/client/.env"] [unique_id "apK984v3RhPI65jTFG7yUwADmBs"]
[Sat Aug 29 05:09:39.668324 2026] [cgid:error] [pid 1041789:tid 1041925] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:39.669456 2026] [cgid:error] [pid 1041789:tid 1041892] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:39.672709 2026] [security2:error] [pid 1041789:tid 1041906] [remote 20.16.180.61:62231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 61.180.16.20.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "strangeworxweddingfilms.com"] [uri "/wp-login.php"] [unique_id "apK984v3RhPI65jTFG7yRwADIWg"], referer: https://strangeworxweddingfilms.com/wp-login.php
[Sat Aug 29 05:09:39.674837 2026] [core:error] [pid 1041789:tid 1042044] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.674859 2026] [core:error] [pid 1041789:tid 1042044] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.685123 2026] [core:error] [pid 1041789:tid 1042019] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.685143 2026] [core:error] [pid 1041789:tid 1042019] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.686698 2026] [security2:error] [pid 1041789:tid 1041945] [client 52.139.37.240:62228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alabamaracingrealtor.com"] [uri "/zoom1.php"] [unique_id "apK984v3RhPI65jTFG7yXgAAAyw"]
[Sat Aug 29 05:09:39.686825 2026] [core:error] [pid 1041789:tid 1042057] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.686836 2026] [core:error] [pid 1041789:tid 1042057] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.689333 2026] [security2:error] [pid 1041789:tid 1042040] [client 45.148.10.62:33922] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.xtj.otn.mybluehost.me"] [uri "/.env.old"] [unique_id "apK984v3RhPI65jTFG7yXwAAA4s"]
[Sat Aug 29 05:09:39.691926 2026] [core:error] [pid 1041789:tid 1041979] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.691939 2026] [core:error] [pid 1041789:tid 1041979] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.694941 2026] [core:error] [pid 1041789:tid 1042021] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.694956 2026] [core:error] [pid 1041789:tid 1042021] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.695373 2026] [security2:error] [pid 1041789:tid 1042018] [client 20.220.204.93:50733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/shlo.php"] [unique_id "apK984v3RhPI65jTFG7yYwAAA3U"]
[Sat Aug 29 05:09:39.696889 2026] [core:error] [pid 1041789:tid 1042031] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.696899 2026] [core:error] [pid 1041789:tid 1042031] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.705115 2026] [security2:error] [pid 1041789:tid 1042047] [client 52.139.37.240:31503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/abc.php"] [unique_id "apK984v3RhPI65jTFG7yZAAAA5I"]
[Sat Aug 29 05:09:39.719659 2026] [security2:error] [pid 1041789:tid 1041991] [client 20.63.219.114:17927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/cookie.php"] [unique_id "apK984v3RhPI65jTFG7yaAAAA1o"]
[Sat Aug 29 05:09:39.743868 2026] [security2:error] [pid 1041789:tid 1042026] [client 68.155.159.216:14283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-includes/css/index.php"] [unique_id "apK984v3RhPI65jTFG7ycAAAA30"]
[Sat Aug 29 05:09:39.746845 2026] [cgid:error] [pid 1041789:tid 1041918] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:39.749748 2026] [cgid:error] [pid 1041789:tid 1041802] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:39.750897 2026] [cgid:error] [pid 1041789:tid 1041870] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:39.758595 2026] [security2:error] [pid 1041789:tid 1042052] [client 158.23.184.117:53036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/edit.php"] [unique_id "apK984v3RhPI65jTFG7ydwAAA5c"]
[Sat Aug 29 05:09:39.780108 2026] [core:error] [pid 1041789:tid 1042000] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.780128 2026] [core:error] [pid 1041789:tid 1042000] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.785990 2026] [security2:error] [pid 1041789:tid 1042048] [client 4.205.62.107:63896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/oiko6u.php"] [unique_id "apK984v3RhPI65jTFG7ygAAAA5M"]
[Sat Aug 29 05:09:39.792502 2026] [security2:error] [pid 1041789:tid 1042017] [client 4.232.148.111:27544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/core.php"] [unique_id "apK984v3RhPI65jTFG7yggAAA3Q"]
[Sat Aug 29 05:09:39.796444 2026] [security2:error] [pid 1041789:tid 1041891] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/cms/.env"] [unique_id "apK984v3RhPI65jTFG7ygwADgVk"]
[Sat Aug 29 05:09:39.797487 2026] [security2:error] [pid 1041789:tid 1041980] [client 20.48.160.90:45379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/wp-ws68.php"] [unique_id "apK984v3RhPI65jTFG7yhwAAA08"]
[Sat Aug 29 05:09:39.807111 2026] [security2:error] [pid 1041789:tid 1041942] [client 68.155.159.216:24533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK984v3RhPI65jTFG7yiwAAAyk"]
[Sat Aug 29 05:09:39.835312 2026] [security2:error] [pid 1041789:tid 1042055] [client 68.155.159.216:1919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-admin/images/about.php"] [unique_id "apK984v3RhPI65jTFG7yjAAAA5o"]
[Sat Aug 29 05:09:39.845950 2026] [core:error] [pid 1041789:tid 1041992] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.845977 2026] [core:error] [pid 1041789:tid 1041992] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.845988 2026] [core:error] [pid 1041789:tid 1042044] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.845997 2026] [core:error] [pid 1041789:tid 1042044] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.862760 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.52.41.200:5300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/term.php"] [unique_id "apK984v3RhPI65jTFG7ylwAAA3o"]
[Sat Aug 29 05:09:39.863338 2026] [core:error] [pid 1041789:tid 1041961] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.863350 2026] [core:error] [pid 1041789:tid 1041961] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.863753 2026] [security2:error] [pid 1041789:tid 1042057] [client 158.158.54.35:6904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK984v3RhPI65jTFG7ymAAAA5w"]
[Sat Aug 29 05:09:39.884454 2026] [security2:error] [pid 1041789:tid 1042050] [client 20.220.204.93:52249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/asax.php"] [unique_id "apK984v3RhPI65jTFG7yoAAAA5U"]
[Sat Aug 29 05:09:39.887246 2026] [cgid:error] [pid 1041789:tid 1041842] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:39.890210 2026] [security2:error] [pid 1041789:tid 1041998] [client 74.248.24.12:22899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-cron.php"] [unique_id "apK984v3RhPI65jTFG7yoQAAA2E"]
[Sat Aug 29 05:09:39.890237 2026] [security2:error] [pid 1041789:tid 1041932] [client 52.139.37.240:63583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alabamaracingrealtor.com"] [uri "/about.php7"] [unique_id "apK984v3RhPI65jTFG7yogAAAx8"]
[Sat Aug 29 05:09:39.895284 2026] [core:error] [pid 1041789:tid 1041874] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.895303 2026] [core:error] [pid 1041789:tid 1041874] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.896365 2026] [security2:error] [pid 1041789:tid 1041887] [remote 93.123.109.228:55834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyer.com"] [uri "/config/aws.php"] [unique_id "apK984v3RhPI65jTFG7yqgADeFU"]
[Sat Aug 29 05:09:39.899180 2026] [security2:error] [pid 1041789:tid 1042049] [client 93.123.109.228:45774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/server/.env"] [unique_id "apK984v3RhPI65jTFG7yrQAAA5Q"]
[Sat Aug 29 05:09:39.901519 2026] [security2:error] [pid 1041789:tid 1041941] [client 52.139.37.240:31152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/c1.php"] [unique_id "apK984v3RhPI65jTFG7yrgAAAyg"]
[Sat Aug 29 05:09:39.905572 2026] [security2:error] [pid 1041789:tid 1041963] [client 158.23.184.117:53754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/7.php"] [unique_id "apK984v3RhPI65jTFG7ysAAAAz4"]
[Sat Aug 29 05:09:39.907742 2026] [security2:error] [pid 1041789:tid 1041962] [client 158.23.147.79:62728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK984v3RhPI65jTFG7ysQAAAz0"]
[Sat Aug 29 05:09:39.923529 2026] [cgid:error] [pid 1041789:tid 1041837] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:39.924189 2026] [cgid:error] [pid 1041789:tid 1041816] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:39.939315 2026] [security2:error] [pid 1041789:tid 1042033] [client 68.155.159.216:38547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/about/function.php"] [unique_id "apK984v3RhPI65jTFG7yugAAA4Q"]
[Sat Aug 29 05:09:39.941040 2026] [security2:error] [pid 1041789:tid 1041990] [client 93.123.109.228:55134] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/server/api/.env"] [unique_id "apK984v3RhPI65jTFG7ytwAAA1k"]
[Sat Aug 29 05:09:39.943646 2026] [security2:error] [pid 1041789:tid 1041936] [client 4.205.62.107:21880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/wp-info.php"] [unique_id "apK984v3RhPI65jTFG7yuAAAAyM"]
[Sat Aug 29 05:09:39.948006 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.48.160.90:50454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/simple.php"] [unique_id "apK984v3RhPI65jTFG7yvAAAA30"]
[Sat Aug 29 05:09:39.955629 2026] [cgid:error] [pid 1041789:tid 1041929] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:39.959504 2026] [security2:error] [pid 1041789:tid 1041957] [client 158.23.147.79:14224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK984v3RhPI65jTFG7yvQAAAzg"]
[Sat Aug 29 05:09:39.962209 2026] [cgid:error] [pid 1041789:tid 1041866] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:39.963366 2026] [security2:error] [pid 1041789:tid 1041884] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/config.php"] [unique_id "apK984v3RhPI65jTFG7ywgADUlI"]
[Sat Aug 29 05:09:39.963496 2026] [cgid:error] [pid 1041789:tid 1041929] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:39.964519 2026] [security2:error] [pid 1041789:tid 1041965] [client 93.123.109.228:54998] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/.env.old"] [unique_id "apK984v3RhPI65jTFG7ywQAAA0A"]
[Sat Aug 29 05:09:39.998395 2026] [core:error] [pid 1041789:tid 1042043] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:39.998423 2026] [core:error] [pid 1041789:tid 1042043] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.000181 2026] [core:error] [pid 1041789:tid 1042017] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.000202 2026] [core:error] [pid 1041789:tid 1042017] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.000557 2026] [security2:error] [pid 1041789:tid 1042015] [client 93.123.109.228:55150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/.env.php"] [unique_id "apK984v3RhPI65jTFG7y2QAAA3I"]
[Sat Aug 29 05:09:40.000811 2026] [core:error] [pid 1041789:tid 1042048] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.000822 2026] [core:error] [pid 1041789:tid 1042048] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.000831 2026] [security2:error] [pid 1041789:tid 1041931] [client 45.148.10.62:33922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xtj.otn.mybluehost.me"] [uri "/.env.php.bak"] [unique_id "apK984v3RhPI65jTFG7y2gAAAx4"]
[Sat Aug 29 05:09:40.002796 2026] [security2:error] [pid 1041789:tid 1041914] [remote 93.123.109.228:55834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyer.com"] [uri "/config/config.inc.php"] [unique_id "apK99Iv3RhPI65jTFG7y3AADd3A"]
[Sat Aug 29 05:09:40.012043 2026] [core:error] [pid 1041789:tid 1042006] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.012065 2026] [core:error] [pid 1041789:tid 1042006] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.012545 2026] [security2:error] [pid 1041789:tid 1041932] [client 158.23.147.79:11402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK99Iv3RhPI65jTFG7y3wAAAx8"]
[Sat Aug 29 05:09:40.025609 2026] [security2:error] [pid 1041789:tid 1042033] [client 93.123.109.228:54790] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/server/backend/.env"] [unique_id "apK99Iv3RhPI65jTFG7y4QAAA4Q"]
[Sat Aug 29 05:09:40.029513 2026] [core:error] [pid 1041789:tid 1041876] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.029530 2026] [core:error] [pid 1041789:tid 1041876] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.038049 2026] [security2:error] [pid 1041789:tid 1041977] [client 20.104.49.130:57649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/bthil.php"] [unique_id "apK99Iv3RhPI65jTFG7y6AAAA0w"]
[Sat Aug 29 05:09:40.039834 2026] [security2:error] [pid 1041789:tid 1041927] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/config/.env"] [unique_id "apK99Iv3RhPI65jTFG7y6wADcX0"]
[Sat Aug 29 05:09:40.047003 2026] [security2:error] [pid 1041789:tid 1042001] [client 213.202.253.4:55439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "timportlock.net"] [uri "/filefuns.php"] [unique_id "apK99Iv3RhPI65jTFG7y-QAAA2Q"], referer: www.google.com
[Sat Aug 29 05:09:40.048277 2026] [core:error] [pid 1041789:tid 1041848] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.048296 2026] [core:error] [pid 1041789:tid 1041848] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.055125 2026] [security2:error] [pid 1041789:tid 1041934] [client 158.23.184.117:38314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/black.php"] [unique_id "apK99Iv3RhPI65jTFG7y_AAAAyE"]
[Sat Aug 29 05:09:40.060316 2026] [security2:error] [pid 1041789:tid 1041804] [remote 93.123.109.228:55834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyer.com"] [uri "/config/config.php"] [unique_id "apK99Iv3RhPI65jTFG7y_QADdwI"]
[Sat Aug 29 05:09:40.061649 2026] [security2:error] [pid 1041789:tid 1041957] [client 158.23.147.79:63812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/NewFile.php/"] [unique_id "apK99Iv3RhPI65jTFG7y_gAAAzg"]
[Sat Aug 29 05:09:40.079476 2026] [core:error] [pid 1041789:tid 1041969] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.079496 2026] [core:error] [pid 1041789:tid 1041969] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.086255 2026] [security2:error] [pid 1041789:tid 1041858] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/config/aws.php"] [unique_id "apK99Iv3RhPI65jTFG7zBwADcTg"]
[Sat Aug 29 05:09:40.086682 2026] [security2:error] [pid 1041789:tid 1041863] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/config/config.inc.php"] [unique_id "apK99Iv3RhPI65jTFG7zCgADcT0"]
[Sat Aug 29 05:09:40.089544 2026] [security2:error] [pid 1041789:tid 1041990] [client 52.139.37.240:62241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alabamaracingrealtor.com"] [uri "/cron.php"] [unique_id "apK99Iv3RhPI65jTFG7zDAAAA1k"]
[Sat Aug 29 05:09:40.089565 2026] [security2:error] [pid 1041789:tid 1042044] [client 20.48.160.90:50536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/aaa.php"] [unique_id "apK99Iv3RhPI65jTFG7zDQAAA48"]
[Sat Aug 29 05:09:40.091273 2026] [security2:error] [pid 1041789:tid 1041956] [client 20.104.49.130:57681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/1xmomo.php"] [unique_id "apK99Iv3RhPI65jTFG7zDgAAAzc"]
[Sat Aug 29 05:09:40.092393 2026] [core:error] [pid 1041789:tid 1041899] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.092417 2026] [core:error] [pid 1041789:tid 1041899] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.092422 2026] [core:error] [pid 1041789:tid 1041853] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.092428 2026] [core:error] [pid 1041789:tid 1041853] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.097295 2026] [security2:error] [pid 1041789:tid 1042054] [client 20.63.219.114:18996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/NewFile.php"] [unique_id "apK99Iv3RhPI65jTFG7zEgAAA5k"]
[Sat Aug 29 05:09:40.099159 2026] [security2:error] [pid 1041789:tid 1041936] [client 52.139.37.240:31062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/index.php/feed/atom/"] [unique_id "apK99Iv3RhPI65jTFG7zFAAAAyM"]
[Sat Aug 29 05:09:40.100748 2026] [security2:error] [pid 1041789:tid 1041948] [client 20.220.204.93:52264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/fetch.php"] [unique_id "apK99Iv3RhPI65jTFG7zFQAAAy8"]
[Sat Aug 29 05:09:40.118631 2026] [core:error] [pid 1041789:tid 1041983] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.118649 2026] [core:error] [pid 1041789:tid 1041983] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.120834 2026] [cgid:error] [pid 1041789:tid 1041908] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:40.121082 2026] [core:error] [pid 1041789:tid 1042017] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.121094 2026] [core:error] [pid 1041789:tid 1042017] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.121666 2026] [core:error] [pid 1041789:tid 1042031] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.121688 2026] [core:error] [pid 1041789:tid 1042031] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.122764 2026] [cgid:error] [pid 1041789:tid 1041843] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:40.131739 2026] [security2:error] [pid 1041789:tid 1042007] [client 93.123.109.228:55020] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/.env.swp"] [unique_id "apK99Iv3RhPI65jTFG7zHwAAA2o"]
[Sat Aug 29 05:09:40.136327 2026] [security2:error] [pid 1041789:tid 1041981] [client 35.221.212.112:49570] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "autodiscover.beraluzarchive.org"] [uri "/.gcp/service-account.json"] [unique_id "apK99Iv3RhPI65jTFG7zIAAAA1A"]
[Sat Aug 29 05:09:40.150752 2026] [security2:error] [pid 1041789:tid 1041962] [client 35.221.212.112:49800] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "autodiscover.beraluzarchive.org"] [uri "/.github/workflows/deploy.yml"] [unique_id "apK99Iv3RhPI65jTFG7zMgAAAz0"]
[Sat Aug 29 05:09:40.154556 2026] [security2:error] [pid 1041789:tid 1042057] [client 20.151.200.44:22210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK99Iv3RhPI65jTFG7zOgAAA5w"]
[Sat Aug 29 05:09:40.155205 2026] [security2:error] [pid 1041789:tid 1042054] [client 93.123.109.228:54972] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/.env~"] [unique_id "apK99Iv3RhPI65jTFG7zOAAAA5k"]
[Sat Aug 29 05:09:40.161662 2026] [security2:error] [pid 1041789:tid 1041998] [client 35.221.212.112:49732] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/client/.env"] [unique_id "apK99Iv3RhPI65jTFG7zSAAAA2E"]
[Sat Aug 29 05:09:40.161685 2026] [security2:error] [pid 1041789:tid 1041979] [client 35.221.212.112:49756] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/dev/.env"] [unique_id "apK99Iv3RhPI65jTFG7zSQAAA04"]
[Sat Aug 29 05:09:40.163535 2026] [security2:error] [pid 1041789:tid 1042010] [client 35.221.212.112:49760] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/production/.env"] [unique_id "apK99Iv3RhPI65jTFG7zSgAAA20"]
[Sat Aug 29 05:09:40.166748 2026] [security2:error] [pid 1041789:tid 1042032] [client 35.221.212.112:49768] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/staging/.env"] [unique_id "apK99Iv3RhPI65jTFG7zQQAAA4M"]
[Sat Aug 29 05:09:40.166882 2026] [security2:error] [pid 1041789:tid 1042041] [client 68.155.159.216:49337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK99Iv3RhPI65jTFG7zUgAAA4w"]
[Sat Aug 29 05:09:40.174407 2026] [security2:error] [pid 1041789:tid 1042051] [client 68.155.159.216:65032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-admin.php"] [unique_id "apK99Iv3RhPI65jTFG7zWgAAA5Y"]
[Sat Aug 29 05:09:40.175757 2026] [security2:error] [pid 1041789:tid 1041941] [client 35.221.212.112:49746] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.beraluzarchive.org"] [uri "/backup/.env"] [unique_id "apK99Iv3RhPI65jTFG7zTwAAAyg"]
[Sat Aug 29 05:09:40.192245 2026] [security2:error] [pid 1041789:tid 1041829] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/config/config.php"] [unique_id "apK99Iv3RhPI65jTFG7zawADnBs"]
[Sat Aug 29 05:09:40.193787 2026] [security2:error] [pid 1041789:tid 1041935] [client 40.83.93.50:18245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/wp-admin.php"] [unique_id "apK99Iv3RhPI65jTFG7zcAAAAyI"]
[Sat Aug 29 05:09:40.195120 2026] [core:error] [pid 1041789:tid 1041841] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.195140 2026] [core:error] [pid 1041789:tid 1041841] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.195877 2026] [core:error] [pid 1041789:tid 1041829] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.195893 2026] [core:error] [pid 1041789:tid 1041829] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.196427 2026] [core:error] [pid 1041789:tid 1041900] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.196439 2026] [core:error] [pid 1041789:tid 1041900] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.196739 2026] [security2:error] [pid 1041789:tid 1042054] [client 4.232.148.111:18452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "apK99Iv3RhPI65jTFG7zcQAAA5k"]
[Sat Aug 29 05:09:40.198155 2026] [core:error] [pid 1041789:tid 1041925] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.198176 2026] [core:error] [pid 1041789:tid 1041925] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.206453 2026] [security2:error] [pid 1041789:tid 1041895] [remote 93.123.109.228:55834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyer.com"] [uri "/config/env.php"] [unique_id "apK99Iv3RhPI65jTFG7zdwADkV0"]
[Sat Aug 29 05:09:40.206775 2026] [security2:error] [pid 1041789:tid 1041962] [client 158.23.184.117:53054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/wp-blog-header.php"] [unique_id "apK99Iv3RhPI65jTFG7zeAAAAz0"]
[Sat Aug 29 05:09:40.215386 2026] [security2:error] [pid 1041789:tid 1041819] [remote 93.123.109.228:55834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyer.com"] [uri "/config/module.config.php"] [unique_id "apK99Iv3RhPI65jTFG7zfQADkRE"]
[Sat Aug 29 05:09:40.242270 2026] [security2:error] [pid 1041789:tid 1041941] [client 93.123.109.228:55118] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/service/.env"] [unique_id "apK99Iv3RhPI65jTFG7zgwAAAyg"]
[Sat Aug 29 05:09:40.263261 2026] [security2:error] [pid 1041789:tid 1041880] [remote 93.123.109.228:55834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyer.com"] [uri "/config/nexmo.php"] [unique_id "apK99Iv3RhPI65jTFG7zhgADkU4"]
[Sat Aug 29 05:09:40.268222 2026] [security2:error] [pid 1041789:tid 1041950] [client 20.220.204.93:52280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/vx.php"] [unique_id "apK99Iv3RhPI65jTFG7ziAAAAzE"]
[Sat Aug 29 05:09:40.268608 2026] [security2:error] [pid 1041789:tid 1041967] [client 4.232.148.111:20895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/admin/function.php"] [unique_id "apK99Iv3RhPI65jTFG7ziQAAA0I"]
[Sat Aug 29 05:09:40.270388 2026] [security2:error] [pid 1041789:tid 1042041] [client 45.148.10.62:33930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xqk.etg.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "apK99Iv3RhPI65jTFG7zjAAAA4w"]
[Sat Aug 29 05:09:40.272566 2026] [cgid:error] [pid 1041789:tid 1041882] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:40.277152 2026] [cgid:error] [pid 1041789:tid 1041865] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:40.279593 2026] [cgid:error] [pid 1041789:tid 1041822] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:40.284420 2026] [cgid:error] [pid 1041789:tid 1041861] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:40.284639 2026] [security2:error] [pid 1041789:tid 1042021] [client 93.123.109.228:54790] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/services/.env"] [unique_id "apK99Iv3RhPI65jTFG7zlgAAA3g"]
[Sat Aug 29 05:09:40.288056 2026] [security2:error] [pid 1041789:tid 1041981] [client 4.205.62.107:65453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/aws_keys.php"] [unique_id "apK99Iv3RhPI65jTFG7zmgAAA1A"]
[Sat Aug 29 05:09:40.299556 2026] [core:error] [pid 1041789:tid 1041802] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.299577 2026] [core:error] [pid 1041789:tid 1041802] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.322602 2026] [security2:error] [pid 1041789:tid 1041968] [client 52.139.37.240:63603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alabamaracingrealtor.com"] [uri "/wp-2019.php"] [unique_id "apK99Iv3RhPI65jTFG7zqAAAA0M"]
[Sat Aug 29 05:09:40.329612 2026] [security2:error] [pid 1041789:tid 1041977] [client 20.52.41.200:4376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/config.php"] [unique_id "apK99Iv3RhPI65jTFG7zqwAAA0w"]
[Sat Aug 29 05:09:40.339849 2026] [security2:error] [pid 1041789:tid 1042005] [client 52.139.37.240:31068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/root.php"] [unique_id "apK99Iv3RhPI65jTFG7zswAAA2g"]
[Sat Aug 29 05:09:40.347511 2026] [security2:error] [pid 1041789:tid 1042031] [client 158.158.54.35:1540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.alexandermint.com"] [uri "/wp-admin.php"] [unique_id "apK99Iv3RhPI65jTFG7zugAAA4I"]
[Sat Aug 29 05:09:40.360161 2026] [security2:error] [pid 1041789:tid 1041995] [client 169.58.197.254:63970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 254.197.58.169.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.kcactf4.org"] [uri "/wp-content/plugins/root-file-manager/wp-file.php"] [unique_id "apK99Iv3RhPI65jTFG7zvAAAA14"], referer: www.google.com
[Sat Aug 29 05:09:40.360918 2026] [security2:error] [pid 1041789:tid 1041968] [client 4.205.62.107:6472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/nlnub.php"] [unique_id "apK99Iv3RhPI65jTFG7zvgAAA0M"]
[Sat Aug 29 05:09:40.363577 2026] [security2:error] [pid 1041789:tid 1041949] [client 20.197.61.180:18206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/OK.php"] [unique_id "apK99Iv3RhPI65jTFG7zvwAAAzA"]
[Sat Aug 29 05:09:40.365754 2026] [security2:error] [pid 1041789:tid 1041997] [client 4.205.62.107:51470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/sys.php"] [unique_id "apK99Iv3RhPI65jTFG7zwAAAA2A"]
[Sat Aug 29 05:09:40.369016 2026] [security2:error] [pid 1041789:tid 1041871] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/config/env.php"] [unique_id "apK99Iv3RhPI65jTFG7zwQADjUU"]
[Sat Aug 29 05:09:40.370767 2026] [security2:error] [pid 1041789:tid 1041923] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/config/module.config.php"] [unique_id "apK99Iv3RhPI65jTFG7zxQADjXk"]
[Sat Aug 29 05:09:40.372961 2026] [core:error] [pid 1041789:tid 1041860] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.372979 2026] [core:error] [pid 1041789:tid 1041860] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.373053 2026] [core:error] [pid 1041789:tid 1041913] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.373064 2026] [core:error] [pid 1041789:tid 1041913] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.389100 2026] [security2:error] [pid 1041789:tid 1041872] [remote 93.123.109.228:39364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glamrus.rocks"] [uri "/php-info.php"] [unique_id "apK99Iv3RhPI65jTFG7zygADQEY"]
[Sat Aug 29 05:09:40.390715 2026] [security2:error] [pid 1041789:tid 1041825] [remote 93.123.109.228:39364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glamrus.rocks"] [uri "/php_info.php"] [unique_id "apK99Iv3RhPI65jTFG7zywADQBc"]
[Sat Aug 29 05:09:40.390749 2026] [security2:error] [pid 1041789:tid 1041806] [remote 93.123.109.228:39364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glamrus.rocks"] [uri "/php.php"] [unique_id "apK99Iv3RhPI65jTFG7zzAADQAQ"]
[Sat Aug 29 05:09:40.399861 2026] [security2:error] [pid 1041789:tid 1042011] [client 4.205.62.107:62940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/g3.php"] [unique_id "apK99Iv3RhPI65jTFG7zzQAAA24"]
[Sat Aug 29 05:09:40.405641 2026] [security2:error] [pid 1041789:tid 1042057] [client 20.48.160.90:50466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/shiny.php"] [unique_id "apK99Iv3RhPI65jTFG7zzwAAA5w"]
[Sat Aug 29 05:09:40.408834 2026] [cgid:error] [pid 1041789:tid 1041878] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:40.412458 2026] [core:error] [pid 1041789:tid 1042031] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.412476 2026] [core:error] [pid 1041789:tid 1042031] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.418883 2026] [security2:error] [pid 1041789:tid 1041995] [client 20.220.204.93:52344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/global.php"] [unique_id "apK99Iv3RhPI65jTFG7z0gAAA14"]
[Sat Aug 29 05:09:40.428329 2026] [security2:error] [pid 1041789:tid 1041967] [client 158.23.184.117:53728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/2.php"] [unique_id "apK99Iv3RhPI65jTFG7z1AAAA0I"]
[Sat Aug 29 05:09:40.444013 2026] [security2:error] [pid 1041789:tid 1041842] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/config/nexmo.php"] [unique_id "apK99Iv3RhPI65jTFG7z3AADPSg"]
[Sat Aug 29 05:09:40.444600 2026] [security2:error] [pid 1041789:tid 1042013] [client 20.104.49.130:51345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/1xmomo.php"] [unique_id "apK99Iv3RhPI65jTFG7z3gAAA3A"]
[Sat Aug 29 05:09:40.445632 2026] [security2:error] [pid 1041789:tid 1041936] [client 20.104.49.130:53687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/log.php"] [unique_id "apK99Iv3RhPI65jTFG7z3wAAAyM"]
[Sat Aug 29 05:09:40.451583 2026] [security2:error] [pid 1041789:tid 1041833] [remote 93.123.109.228:55834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyer.com"] [uri "/config/stripe.php"] [unique_id "apK99Iv3RhPI65jTFG7z4wADdB8"]
[Sat Aug 29 05:09:40.454005 2026] [security2:error] [pid 1041789:tid 1042031] [client 4.205.62.107:53396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/v2.php"] [unique_id "apK99Iv3RhPI65jTFG7z5QAAA4I"]
[Sat Aug 29 05:09:40.459432 2026] [security2:error] [pid 1041789:tid 1041932] [client 158.23.147.79:17610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/wp-admin/index.php"] [unique_id "apK99Iv3RhPI65jTFG7z5gAAAx8"]
[Sat Aug 29 05:09:40.460681 2026] [security2:error] [pid 1041789:tid 1041942] [client 74.248.24.12:19743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-block.php"] [unique_id "apK99Iv3RhPI65jTFG7z5wAAAyk"]
[Sat Aug 29 05:09:40.463963 2026] [security2:error] [pid 1041789:tid 1041982] [client 93.123.109.228:54946] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.bak"] [unique_id "apK99Iv3RhPI65jTFG7z6AAAA1E"]
[Sat Aug 29 05:09:40.473371 2026] [security2:error] [pid 1041789:tid 1041941] [client 68.155.159.216:30617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/cong.php"] [unique_id "apK99Iv3RhPI65jTFG7z7QAAAyg"]
[Sat Aug 29 05:09:40.480788 2026] [security2:error] [pid 1041789:tid 1041933] [client 93.123.109.228:45758] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/shared/.env"] [unique_id "apK99Iv3RhPI65jTFG7z8QAAAyA"]
[Sat Aug 29 05:09:40.497386 2026] [security2:error] [pid 1041789:tid 1042048] [client 158.23.147.79:60154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-content/banners/about.php"] [unique_id "apK99Iv3RhPI65jTFG7z8wAAA5M"]
[Sat Aug 29 05:09:40.510246 2026] [security2:error] [pid 1041789:tid 1042037] [client 103.240.76.112:42817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK99Iv3RhPI65jTFG7z9QAAA4g"]
[Sat Aug 29 05:09:40.510364 2026] [security2:error] [pid 1041789:tid 1042037] [client 103.240.76.112:42817] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK99Iv3RhPI65jTFG7z9QAAA4g"]
[Sat Aug 29 05:09:40.522959 2026] [security2:error] [pid 1041789:tid 1042052] [client 52.139.37.240:63590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alabamaracingrealtor.com"] [uri "/gecko-new.php"] [unique_id "apK99Iv3RhPI65jTFG7z9gAAA5c"]
[Sat Aug 29 05:09:40.537329 2026] [security2:error] [pid 1041789:tid 1041990] [client 52.139.37.240:31160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/shell.php"] [unique_id "apK99Iv3RhPI65jTFG7z-gAAA1k"]
[Sat Aug 29 05:09:40.542664 2026] [security2:error] [pid 1041789:tid 1041991] [client 20.48.160.90:50472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/goods.php"] [unique_id "apK99Iv3RhPI65jTFG7z_QAAA1o"]
[Sat Aug 29 05:09:40.542978 2026] [security2:error] [pid 1041789:tid 1041968] [client 68.155.159.216:33703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK99Iv3RhPI65jTFG7z_gAAA0M"]
[Sat Aug 29 05:09:40.543671 2026] [security2:error] [pid 1041789:tid 1041897] [remote 93.123.109.228:39364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glamrus.rocks"] [uri "/phpinfo.php"] [unique_id "apK99Iv3RhPI65jTFG7z_wADYF8"]
[Sat Aug 29 05:09:40.554558 2026] [security2:error] [pid 1041789:tid 1042044] [client 20.63.219.114:18365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/config.php"] [unique_id "apK99Iv3RhPI65jTFG70BwAAA48"]
[Sat Aug 29 05:09:40.558001 2026] [security2:error] [pid 1041789:tid 1041948] [client 20.220.204.93:52280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/fs.php"] [unique_id "apK99Iv3RhPI65jTFG70CQAAAy8"]
[Sat Aug 29 05:09:40.577699 2026] [security2:error] [pid 1041789:tid 1041942] [client 158.23.184.117:38278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/index/function.php"] [unique_id "apK99Iv3RhPI65jTFG70DwAAAyk"]
[Sat Aug 29 05:09:40.585894 2026] [security2:error] [pid 1041789:tid 1042053] [client 93.123.109.228:54914] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config~"] [unique_id "apK99Iv3RhPI65jTFG70FgAAA5g"]
[Sat Aug 29 05:09:40.586224 2026] [core:error] [pid 1041789:tid 1041876] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.586238 2026] [core:error] [pid 1041789:tid 1041876] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.590730 2026] [core:error] [pid 1041789:tid 1041846] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.590752 2026] [core:error] [pid 1041789:tid 1041846] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.591858 2026] [security2:error] [pid 1041789:tid 1042048] [client 158.23.147.79:5901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-includes/index.php"] [unique_id "apK99Iv3RhPI65jTFG70GwAAA5M"]
[Sat Aug 29 05:09:40.592340 2026] [security2:error] [pid 1041789:tid 1041927] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/config/stripe.php"] [unique_id "apK99Iv3RhPI65jTFG70HAADIH0"]
[Sat Aug 29 05:09:40.600816 2026] [security2:error] [pid 1041789:tid 1041936] [client 4.205.62.107:3934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/app/Models/Hrm/Employee.php"] [unique_id "apK99Iv3RhPI65jTFG70HwAAAyM"]
[Sat Aug 29 05:09:40.608665 2026] [security2:error] [pid 1041789:tid 1042018] [client 93.123.109.228:55102] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.old"] [unique_id "apK99Iv3RhPI65jTFG70IAAAA3U"]
[Sat Aug 29 05:09:40.610337 2026] [security2:error] [pid 1041789:tid 1042047] [client 93.123.109.228:54816] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/shop/.env"] [unique_id "apK99Iv3RhPI65jTFG70IQAAA5I"]
[Sat Aug 29 05:09:40.621432 2026] [core:error] [pid 1041789:tid 1042055] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.621452 2026] [core:error] [pid 1041789:tid 1042055] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.622059 2026] [core:error] [pid 1041789:tid 1042021] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.622071 2026] [core:error] [pid 1041789:tid 1042021] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.624531 2026] [core:error] [pid 1041789:tid 1041904] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.624559 2026] [core:error] [pid 1041789:tid 1041904] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.631117 2026] [core:error] [pid 1041789:tid 1041836] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.631136 2026] [core:error] [pid 1041789:tid 1041836] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.636394 2026] [security2:error] [pid 1041789:tid 1042041] [client 93.123.109.228:45774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/src/.env"] [unique_id "apK99Iv3RhPI65jTFG70MwAAA4w"]
[Sat Aug 29 05:09:40.663805 2026] [core:error] [pid 1041789:tid 1041936] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.663830 2026] [core:error] [pid 1041789:tid 1041936] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.663944 2026] [security2:error] [pid 1041789:tid 1041949] [client 68.155.159.216:16204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/bk/index.php"] [unique_id "apK99Iv3RhPI65jTFG70RAAAAzA"]
[Sat Aug 29 05:09:40.665424 2026] [security2:error] [pid 1041789:tid 1041932] [client 68.155.159.216:18248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-admin/network/index.php"] [unique_id "apK99Iv3RhPI65jTFG70RgAAAx8"]
[Sat Aug 29 05:09:40.674057 2026] [security2:error] [pid 1041789:tid 1042040] [client 4.232.148.111:18467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "apK99Iv3RhPI65jTFG70SQAAA4s"]
[Sat Aug 29 05:09:40.675194 2026] [security2:error] [pid 1041789:tid 1041951] [client 20.48.160.90:50482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/000.php/index.php"] [unique_id "apK99Iv3RhPI65jTFG70SwAAAzI"]
[Sat Aug 29 05:09:40.679920 2026] [http2:info] [pid 1321:tid 1321] h2_workers: created with min=128 max=192 idle_ms=600000
[Sat Aug 29 05:09:40.682555 2026] [security2:error] [pid 1041789:tid 1042005] [client 45.148.10.62:33952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xtj.otn.mybluehost.me"] [uri "/.env.php"] [unique_id "apK99Iv3RhPI65jTFG70TQAAA2g"]
[Sat Aug 29 05:09:40.683847 2026] [security2:error] [pid 1041789:tid 1042031] [client 40.83.93.50:10056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/wp-configs.php"] [unique_id "apK99Iv3RhPI65jTFG70TgAAA4I"]
[Sat Aug 29 05:09:40.716712 2026] [security2:error] [pid 1041789:tid 1042048] [client 52.139.37.240:63566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alabamaracingrealtor.com"] [uri "/add_actualites.php"] [unique_id "apK99Iv3RhPI65jTFG70WgAAA5M"]
[Sat Aug 29 05:09:40.718797 2026] [security2:error] [pid 1041789:tid 1042025] [client 34.169.171.101:29558] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "forensicengineernj.com"] [uri "/@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ"] [unique_id "apK99Iv3RhPI65jTFG70WwAAA3w"]
[Sat Aug 29 05:09:40.720188 2026] [security2:error] [pid 1041789:tid 1041939] [client 34.169.171.101:29502] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/@fs/.env"] [unique_id "apK99Iv3RhPI65jTFG70XQAAAyY"]
[Sat Aug 29 05:09:40.720498 2026] [security2:error] [pid 1041789:tid 1042032] [client 34.169.171.101:29648] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "forensicengineernj.com"] [uri "/@fs/.env.development"] [unique_id "apK99Iv3RhPI65jTFG70XgAAA4M"]
[Sat Aug 29 05:09:40.721296 2026] [core:error] [pid 1041789:tid 1041934] [client 34.169.171.101:29612] AH10244: invalid URI path (/@fs/../../.env?raw??)
[Sat Aug 29 05:09:40.722843 2026] [security2:error] [pid 1041789:tid 1041991] [client 34.169.171.101:29590] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2froot/.env"] [unique_id "apK99Iv3RhPI65jTFG70YAAAA1o"]
[Sat Aug 29 05:09:40.724119 2026] [security2:error] [pid 1321:tid 1489] [client 195.178.110.247:1260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lumbeesolar.org"] [uri "/index.php"] [unique_id "apK99GjCPtor9NZ-byTT1QAABj0"]
[Sat Aug 29 05:09:40.724198 2026] [security2:error] [pid 1041789:tid 1041954] [client 34.169.171.101:29546] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/@fs/src/.env"] [unique_id "apK99Iv3RhPI65jTFG70YgAAAzU"]
[Sat Aug 29 05:09:40.724302 2026] [security2:error] [pid 1041789:tid 1041954] [client 34.169.171.101:29546] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "forensicengineernj.com"] [uri "/@fs/src/.env"] [unique_id "apK99Iv3RhPI65jTFG70YgAAAzU"]
[Sat Aug 29 05:09:40.724557 2026] [security2:error] [pid 1041789:tid 1042014] [client 158.23.184.117:38285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/wp-admin/maint/repair.php"] [unique_id "apK99Iv3RhPI65jTFG70YwAAA3E"]
[Sat Aug 29 05:09:40.727600 2026] [security2:error] [pid 1041789:tid 1042055] [client 34.169.171.101:29574] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK99Iv3RhPI65jTFG70XAAAA5o"]
[Sat Aug 29 05:09:40.731602 2026] [security2:error] [pid 1041789:tid 1041932] [client 52.139.37.240:31143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/wp-admin/user/index.php"] [unique_id "apK99Iv3RhPI65jTFG70ZgAAAx8"]
[Sat Aug 29 05:09:40.751496 2026] [security2:error] [pid 1041789:tid 1041962] [client 4.232.148.111:23208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/admin/index.php"] [unique_id "apK99Iv3RhPI65jTFG70awAAAz0"]
[Sat Aug 29 05:09:40.758465 2026] [security2:error] [pid 1041789:tid 1041931] [client 34.169.171.101:29530] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "forensicengineernj.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK99Iv3RhPI65jTFG70dQAAAx4"]
[Sat Aug 29 05:09:40.758532 2026] [security2:error] [pid 1041789:tid 1041956] [client 34.169.171.101:29494] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2fapp/.env"] [unique_id "apK99Iv3RhPI65jTFG70cgAAAzc"]
[Sat Aug 29 05:09:40.758669 2026] [security2:error] [pid 1041789:tid 1042032] [client 34.169.171.101:29502] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/@fs/app/.env"] [unique_id "apK99Iv3RhPI65jTFG70cwAAA4M"]
[Sat Aug 29 05:09:40.758727 2026] [core:error] [pid 1041789:tid 1041920] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.758740 2026] [core:error] [pid 1041789:tid 1041920] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.759044 2026] [core:error] [pid 1041789:tid 1041820] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.759055 2026] [core:error] [pid 1041789:tid 1041820] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.760244 2026] [core:error] [pid 1041789:tid 1041834] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.760261 2026] [core:error] [pid 1041789:tid 1041834] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.760753 2026] [security2:error] [pid 1041789:tid 1041995] [client 34.169.171.101:29508] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "forensicengineernj.com"] [uri "/@fs/app/rootkey.csv"] [unique_id "apK99Iv3RhPI65jTFG70eQAAA14"]
[Sat Aug 29 05:09:40.761719 2026] [security2:error] [pid 1041789:tid 1042055] [client 34.169.171.101:29590] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/.env"] [unique_id "apK99Iv3RhPI65jTFG70dAAAA5o"]
[Sat Aug 29 05:09:40.761839 2026] [security2:error] [pid 1041789:tid 1042055] [client 34.169.171.101:29590] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "forensicengineernj.com"] [uri "/.env"] [unique_id "apK99Iv3RhPI65jTFG70dAAAA5o"]
[Sat Aug 29 05:09:40.762757 2026] [core:error] [pid 1041789:tid 1041946] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.762774 2026] [core:error] [pid 1041789:tid 1041946] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.764241 2026] [security2:error] [pid 1041789:tid 1042015] [client 34.169.171.101:29604] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "forensicengineernj.com"] [uri "/@fs/root/.aws/credentials.bak"] [unique_id "apK99Iv3RhPI65jTFG70egAAA3I"]
[Sat Aug 29 05:09:40.766445 2026] [security2:error] [pid 1321:tid 1490] [client 34.169.171.101:29746] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "forensicengineernj.com"] [uri "/@fs/app/.aws/credentials"] [unique_id "apK99GjCPtor9NZ-byTT2QAABj4"]
[Sat Aug 29 05:09:40.767310 2026] [security2:error] [pid 1321:tid 1488] [client 34.169.171.101:29706] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/@fs/root/.aws/credentials.backup"] [unique_id "apK99GjCPtor9NZ-byTT1wAABjw"]
[Sat Aug 29 05:09:40.779655 2026] [security2:error] [pid 1041789:tid 1042014] [client 34.169.171.101:29574] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK99Iv3RhPI65jTFG70ewAAA3E"]
[Sat Aug 29 05:09:40.779704 2026] [security2:error] [pid 1041789:tid 1041942] [client 34.169.171.101:29626] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/@fs/root/.env"] [unique_id "apK99Iv3RhPI65jTFG70hQAAAyk"]
[Sat Aug 29 05:09:40.787986 2026] [security2:error] [pid 1041789:tid 1042007] [client 34.169.171.101:29682] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "forensicengineernj.com"] [uri "/cgi-sys/404.html"] [unique_id "apK99Iv3RhPI65jTFG70hwAAA2o"], referer: https://forensicengineernj.com/@fs/etc/passwd?raw??
[Sat Aug 29 05:09:40.789175 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.52.41.200:4380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK99Iv3RhPI65jTFG70kAAAA3o"]
[Sat Aug 29 05:09:40.801898 2026] [core:error] [pid 1041789:tid 1041910] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.801919 2026] [core:error] [pid 1041789:tid 1041910] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.809275 2026] [security2:error] [pid 1321:tid 1511] [client 20.48.160.90:50545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/Jcrop.php"] [unique_id "apK99GjCPtor9NZ-byTT4QAABlM"]
[Sat Aug 29 05:09:40.809815 2026] [core:error] [pid 1041789:tid 1042052] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.809835 2026] [core:error] [pid 1041789:tid 1042052] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.813695 2026] [security2:error] [pid 1041789:tid 1041847] [remote 93.123.109.228:39292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmsproductions.com"] [uri "/info.php"] [unique_id "apK99Iv3RhPI65jTFG70pQADkC0"]
[Sat Aug 29 05:09:40.813962 2026] [core:error] [pid 1321:tid 1503] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.813977 2026] [core:error] [pid 1321:tid 1503] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.817890 2026] [core:error] [pid 1321:tid 1507] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.817916 2026] [core:error] [pid 1321:tid 1507] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.817916 2026] [security2:error] [pid 1041789:tid 1041956] [client 34.169.171.101:29574] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "forensicengineernj.com"] [uri "/404.html"] [unique_id "apK99Iv3RhPI65jTFG70pwAAAzc"], referer: https://forensicengineernj.com/@fs/.env.staging?raw??
[Sat Aug 29 05:09:40.826568 2026] [security2:error] [pid 1321:tid 1499] [client 158.23.184.117:7462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/wp-content/plugins/alfa-rex.php"] [unique_id "apK99GjCPtor9NZ-byTT6gAABkc"]
[Sat Aug 29 05:09:40.840743 2026] [security2:error] [pid 1041789:tid 1041865] [remote 93.123.109.228:39364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glamrus.rocks"] [uri "/public/phpinfo.php"] [unique_id "apK99Iv3RhPI65jTFG70sAADWz8"]
[Sat Aug 29 05:09:40.845484 2026] [core:error] [pid 1041789:tid 1041946] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.845507 2026] [core:error] [pid 1041789:tid 1041946] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.850855 2026] [core:error] [pid 1321:tid 1527] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.850884 2026] [core:error] [pid 1321:tid 1527] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.852127 2026] [core:error] [pid 1041789:tid 1041992] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.852143 2026] [core:error] [pid 1041789:tid 1041992] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.860860 2026] [core:error] [pid 1321:tid 1523] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.860882 2026] [core:error] [pid 1321:tid 1523] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.861841 2026] [core:error] [pid 1321:tid 1524] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.861860 2026] [core:error] [pid 1321:tid 1524] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.862221 2026] [core:error] [pid 1321:tid 1527] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.862235 2026] [core:error] [pid 1321:tid 1527] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.866071 2026] [security2:error] [pid 1041789:tid 1041803] [remote 93.123.109.228:39292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmsproductions.com"] [uri "/infophp.php"] [unique_id "apK99Iv3RhPI65jTFG70vwADkAE"]
[Sat Aug 29 05:09:40.866176 2026] [security2:error] [pid 1041789:tid 1041859] [remote 93.123.109.228:39292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmsproductions.com"] [uri "/infos.php"] [unique_id "apK99Iv3RhPI65jTFG70wAADkDk"]
[Sat Aug 29 05:09:40.878518 2026] [security2:error] [pid 1041789:tid 1041936] [client 93.123.109.228:55134] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/srv/.env"] [unique_id "apK99Iv3RhPI65jTFG70xAAAAyM"]
[Sat Aug 29 05:09:40.880334 2026] [cgid:error] [pid 1041789:tid 1041851] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:40.882662 2026] [core:error] [pid 1041789:tid 1041871] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.882681 2026] [core:error] [pid 1041789:tid 1041871] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.891740 2026] [security2:error] [pid 1041789:tid 1041979] [client 93.123.109.228:54896] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/stage/.env"] [unique_id "apK99Iv3RhPI65jTFG70yAAAA04"]
[Sat Aug 29 05:09:40.909078 2026] [security2:error] [pid 1321:tid 1529] [client 52.139.37.240:63557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alabamaracingrealtor.com"] [uri "/browse.php"] [unique_id "apK99GjCPtor9NZ-byTT9gAABmU"]
[Sat Aug 29 05:09:40.915031 2026] [security2:error] [pid 1041789:tid 1041957] [client 20.63.219.114:1311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/22.php"] [unique_id "apK99Iv3RhPI65jTFG700QAAAzg"]
[Sat Aug 29 05:09:40.917875 2026] [cgid:error] [pid 1041789:tid 1041806] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:40.918988 2026] [cgid:error] [pid 1041789:tid 1041872] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:40.920510 2026] [security2:error] [pid 1041789:tid 1042018] [client 195.178.110.247:59526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lumbeesolar.org"] [uri "/index.php"] [unique_id "apK99Iv3RhPI65jTFG701gAAA3U"]
[Sat Aug 29 05:09:40.923167 2026] [cgid:error] [pid 1041789:tid 1041891] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:40.924206 2026] [cgid:error] [pid 1041789:tid 1041878] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:40.928107 2026] [security2:error] [pid 1321:tid 1536] [client 52.139.37.240:31065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/wp-content/plugins/linkpreview/il.php"] [unique_id "apK99GjCPtor9NZ-byTT9wAABmw"]
[Sat Aug 29 05:09:40.930808 2026] [security2:error] [pid 1321:tid 1553] [client 158.23.184.117:53735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK99GjCPtor9NZ-byTT-AAABnw"]
[Sat Aug 29 05:09:40.932135 2026] [security2:error] [pid 1321:tid 1552] [client 4.205.62.107:63912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/fraro.php"] [unique_id "apK99GjCPtor9NZ-byTT-QAABns"]
[Sat Aug 29 05:09:40.952427 2026] [security2:error] [pid 1041789:tid 1041839] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/crm/.env"] [unique_id "apK99Iv3RhPI65jTFG703gADfyU"]
[Sat Aug 29 05:09:40.953611 2026] [security2:error] [pid 1041789:tid 1041889] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/cron/.env"] [unique_id "apK99Iv3RhPI65jTFG704AADf1c"]
[Sat Aug 29 05:09:40.956227 2026] [autoindex:error] [pid 1041789:tid 1041911] [remote 45.148.10.62:33956] AH01276: Cannot serve directory /home3/xqketgmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:09:40.957027 2026] [security2:error] [pid 1041789:tid 1041956] [client 20.48.160.90:50451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/35iDq8NAjLu.php"] [unique_id "apK99Iv3RhPI65jTFG705AAAAzc"]
[Sat Aug 29 05:09:40.957961 2026] [security2:error] [pid 1041789:tid 1041839] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/current/.env"] [unique_id "apK99Iv3RhPI65jTFG704gADfyU"]
[Sat Aug 29 05:09:40.958982 2026] [core:error] [pid 1041789:tid 1041919] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.958995 2026] [core:error] [pid 1041789:tid 1041919] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.979758 2026] [security2:error] [pid 1041789:tid 1042054] [client 93.123.109.228:55070] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/staging/.env"] [unique_id "apK99Iv3RhPI65jTFG705wAAA5k"]
[Sat Aug 29 05:09:40.986239 2026] [core:error] [pid 1321:tid 1536] [client 158.23.184.117:7453] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.986257 2026] [core:error] [pid 1321:tid 1536] [client 158.23.184.117:7453] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:40.996848 2026] [security2:error] [pid 1041789:tid 1041998] [client 74.248.24.12:22863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-includes/fonts/admin.php"] [unique_id "apK99Iv3RhPI65jTFG706QAAA2E"]
[Sat Aug 29 05:09:40.999319 2026] [security2:error] [pid 1041789:tid 1041928] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/demo/.env"] [unique_id "apK99Iv3RhPI65jTFG706wADf34"]
[Sat Aug 29 05:09:41.005863 2026] [security2:error] [pid 1041789:tid 1041884] [remote 34.138.144.127:46132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 127.144.138.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.studiopasa.com"] [uri "/info.php"] [unique_id "apK99Yv3RhPI65jTFG708gADNVI"]
[Sat Aug 29 05:09:41.006493 2026] [security2:error] [pid 1041789:tid 1041876] [remote 34.138.144.127:46132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 127.144.138.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.studiopasa.com"] [uri "/phpinfo.php"] [unique_id "apK99Yv3RhPI65jTFG708wADNUo"]
[Sat Aug 29 05:09:41.007710 2026] [cgid:error] [pid 1041789:tid 1041916] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:41.007743 2026] [core:error] [pid 1321:tid 1563] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.007759 2026] [core:error] [pid 1321:tid 1563] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.008986 2026] [cgid:error] [pid 1041789:tid 1041873] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:41.011381 2026] [security2:error] [pid 1041789:tid 1041954] [client 158.23.147.79:60163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK99Yv3RhPI65jTFG709AAAAzU"]
[Sat Aug 29 05:09:41.028133 2026] [core:error] [pid 1041789:tid 1041942] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.028155 2026] [core:error] [pid 1041789:tid 1041942] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.030183 2026] [cgid:error] [pid 1041789:tid 1041897] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:41.043319 2026] [security2:error] [pid 1041789:tid 1041962] [client 20.104.49.130:29974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/as.php"] [unique_id "apK99Yv3RhPI65jTFG70_QAAAz0"]
[Sat Aug 29 05:09:41.060541 2026] [security2:error] [pid 1041789:tid 1041936] [client 158.23.147.79:14308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/chosen.php"] [unique_id "apK99Yv3RhPI65jTFG71DgAAAyM"]
[Sat Aug 29 05:09:41.061906 2026] [security2:error] [pid 1041789:tid 1041982] [client 20.220.204.93:52271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/ioxi.php"] [unique_id "apK99Yv3RhPI65jTFG71DwAAA1E"]
[Sat Aug 29 05:09:41.079803 2026] [security2:error] [pid 1041789:tid 1041934] [client 20.197.61.180:18196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.debbieandgraham.strangeworx.com"] [uri "/aaa.php"] [unique_id "apK99Yv3RhPI65jTFG71FgAAAyE"]
[Sat Aug 29 05:09:41.081408 2026] [security2:error] [pid 1041789:tid 1041853] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/develop/.env"] [unique_id "apK99Yv3RhPI65jTFG71FwADODM"]
[Sat Aug 29 05:09:41.082535 2026] [security2:error] [pid 1041789:tid 1041868] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/dev/.env"] [unique_id "apK99Yv3RhPI65jTFG71GgADOEI"]
[Sat Aug 29 05:09:41.083152 2026] [core:error] [pid 1041789:tid 1041810] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.083165 2026] [core:error] [pid 1041789:tid 1041810] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.084802 2026] [security2:error] [pid 1041789:tid 1042043] [client 158.23.184.117:53706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/xda.php"] [unique_id "apK99Yv3RhPI65jTFG71HQAAA44"]
[Sat Aug 29 05:09:41.094659 2026] [security2:error] [pid 1041789:tid 1041980] [client 20.48.160.90:50440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/btx25.php"] [unique_id "apK99Yv3RhPI65jTFG71IAAAA08"]
[Sat Aug 29 05:09:41.099467 2026] [security2:error] [pid 1321:tid 1535] [client 4.205.62.107:22506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/fns.php"] [unique_id "apK99WjCPtor9NZ-byTT_QAABms"]
[Sat Aug 29 05:09:41.102099 2026] [security2:error] [pid 1321:tid 1532] [client 52.139.37.240:63604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alabamaracingrealtor.com"] [uri "/contentloader1.php"] [unique_id "apK99WjCPtor9NZ-byTT_gAABmg"]
[Sat Aug 29 05:09:41.103015 2026] [cgid:error] [pid 1041789:tid 1041848] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:41.138786 2026] [security2:error] [pid 1041789:tid 1041912] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/development/.env"] [unique_id "apK99Yv3RhPI65jTFG71KQADHm4"]
[Sat Aug 29 05:09:41.139476 2026] [security2:error] [pid 1041789:tid 1041849] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/developer/.env"] [unique_id "apK99Yv3RhPI65jTFG71KAADHi8"]
[Sat Aug 29 05:09:41.139690 2026] [security2:error] [pid 1041789:tid 1041990] [client 52.139.37.240:31499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/wp-header-json.php"] [unique_id "apK99Yv3RhPI65jTFG71MQAAA1k"]
[Sat Aug 29 05:09:41.140426 2026] [security2:error] [pid 1321:tid 1568] [client 158.23.184.117:7876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/test.php"] [unique_id "apK99WjCPtor9NZ-byTT_wAABos"]
[Sat Aug 29 05:09:41.146748 2026] [security2:error] [pid 1041789:tid 1041886] [remote 34.138.144.127:46132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 127.144.138.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.studiopasa.com"] [uri "/pi.php"] [unique_id "apK99Yv3RhPI65jTFG71MgADYVQ"]
[Sat Aug 29 05:09:41.147391 2026] [security2:error] [pid 1041789:tid 1041890] [remote 34.138.144.127:46132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 127.144.138.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.studiopasa.com"] [uri "/test.php"] [unique_id "apK99Yv3RhPI65jTFG71MwADYVg"]
[Sat Aug 29 05:09:41.148331 2026] [core:error] [pid 1041789:tid 1041820] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.148345 2026] [core:error] [pid 1041789:tid 1041820] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.148603 2026] [security2:error] [pid 1041789:tid 1041877] [remote 34.138.144.127:46132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 127.144.138.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.studiopasa.com"] [uri "/i.php"] [unique_id "apK99Yv3RhPI65jTFG71NAADYUs"]
[Sat Aug 29 05:09:41.153459 2026] [cgid:error] [pid 1041789:tid 1041880] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:41.153822 2026] [security2:error] [pid 1041789:tid 1042017] [client 4.232.148.111:29531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/gifclass.php"] [unique_id "apK99Yv3RhPI65jTFG71OAAAA3Q"]
[Sat Aug 29 05:09:41.175926 2026] [security2:error] [pid 1321:tid 1576] [client 68.155.159.216:33561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/.well-known/content.php"] [unique_id "apK99WjCPtor9NZ-byTUBAAABpM"]
[Sat Aug 29 05:09:41.177648 2026] [security2:error] [pid 1041789:tid 1041971] [client 93.123.109.228:54950] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/stg/.env"] [unique_id "apK99Yv3RhPI65jTFG71PAAAA0Y"]
[Sat Aug 29 05:09:41.179530 2026] [security2:error] [pid 1321:tid 1577] [client 158.23.147.79:58101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/dropdown.php"] [unique_id "apK99WjCPtor9NZ-byTUBQAABpQ"]
[Sat Aug 29 05:09:41.192368 2026] [security2:error] [pid 1041789:tid 1041969] [client 40.83.93.50:10063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/essexec.php"] [unique_id "apK99Yv3RhPI65jTFG71QgAAA0Q"]
[Sat Aug 29 05:09:41.224364 2026] [core:error] [pid 1041789:tid 1042046] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.224388 2026] [core:error] [pid 1041789:tid 1042046] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.226986 2026] [core:error] [pid 1321:tid 1558] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.227000 2026] [core:error] [pid 1321:tid 1558] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.230233 2026] [security2:error] [pid 1041789:tid 1041979] [client 4.232.148.111:26879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/storage/rip.php"] [unique_id "apK99Yv3RhPI65jTFG71TwAAA04"]
[Sat Aug 29 05:09:41.232506 2026] [core:error] [pid 1041789:tid 1042053] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.232523 2026] [core:error] [pid 1041789:tid 1042053] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.233610 2026] [security2:error] [pid 1041789:tid 1041938] [client 158.23.184.117:64520] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "dtechstudios.com"] [uri "/1.php"] [unique_id "apK99Yv3RhPI65jTFG71UwAAAyU"]
[Sat Aug 29 05:09:41.233723 2026] [security2:error] [pid 1041789:tid 1041938] [client 158.23.184.117:64520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/1.php"] [unique_id "apK99Yv3RhPI65jTFG71UwAAAyU"]
[Sat Aug 29 05:09:41.234172 2026] [core:error] [pid 1321:tid 1580] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.234187 2026] [core:error] [pid 1321:tid 1580] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.236624 2026] [core:error] [pid 1041789:tid 1041983] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.236642 2026] [core:error] [pid 1041789:tid 1041983] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.236641 2026] [core:error] [pid 1041789:tid 1041936] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.236652 2026] [core:error] [pid 1041789:tid 1041936] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.237005 2026] [core:error] [pid 1041789:tid 1042028] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.237015 2026] [core:error] [pid 1041789:tid 1042028] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.242333 2026] [security2:error] [pid 1041789:tid 1041931] [client 20.48.160.90:50493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/radio.php"] [unique_id "apK99Yv3RhPI65jTFG71VAAAAx4"]
[Sat Aug 29 05:09:41.244293 2026] [security2:error] [pid 1041789:tid 1041997] [client 20.52.41.200:5308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-good.php"] [unique_id "apK99Yv3RhPI65jTFG71VQAAA2A"]
[Sat Aug 29 05:09:41.261018 2026] [security2:error] [pid 1321:tid 1593] [client 20.220.204.93:52256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/bootstrap.php"] [unique_id "apK99WjCPtor9NZ-byTUCgAABqQ"]
[Sat Aug 29 05:09:41.266290 2026] [security2:error] [pid 1041789:tid 1041956] [client 68.155.159.216:49183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/nf_tracking.php"] [unique_id "apK99Yv3RhPI65jTFG71WwAAAzc"]
[Sat Aug 29 05:09:41.285689 2026] [security2:error] [pid 1041789:tid 1042052] [client 20.63.219.114:1319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/install.php"] [unique_id "apK99Yv3RhPI65jTFG71YwAAA5c"]
[Sat Aug 29 05:09:41.288461 2026] [security2:error] [pid 1041789:tid 1041991] [client 158.23.184.117:7908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/wp-includes/mani.php"] [unique_id "apK99Yv3RhPI65jTFG71ZAAAA1o"]
[Sat Aug 29 05:09:41.295901 2026] [security2:error] [pid 1041789:tid 1041948] [client 52.139.37.240:63570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alabamaracingrealtor.com"] [uri "/upfile.php"] [unique_id "apK99Yv3RhPI65jTFG71ZQAAAy8"]
[Sat Aug 29 05:09:41.337870 2026] [security2:error] [pid 1041789:tid 1042015] [client 52.139.37.240:31089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/zup.php"] [unique_id "apK99Yv3RhPI65jTFG71bgAAA3I"]
[Sat Aug 29 05:09:41.346825 2026] [core:error] [pid 1041789:tid 1041819] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.346842 2026] [core:error] [pid 1041789:tid 1041819] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.351337 2026] [core:error] [pid 1041789:tid 1041845] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.351374 2026] [core:error] [pid 1041789:tid 1041845] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.355641 2026] [core:error] [pid 1321:tid 1598] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.355664 2026] [core:error] [pid 1321:tid 1598] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.365671 2026] [core:error] [pid 1041789:tid 1042007] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.365693 2026] [core:error] [pid 1041789:tid 1042007] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.373669 2026] [security2:error] [pid 1041789:tid 1041854] [remote 34.138.144.127:46132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 127.144.138.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.studiopasa.com"] [uri "/app_dev.php/_profiler"] [unique_id "apK99Yv3RhPI65jTFG71ewADcTQ"]
[Sat Aug 29 05:09:41.381508 2026] [core:error] [pid 1321:tid 1599] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.381525 2026] [core:error] [pid 1321:tid 1599] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.398200 2026] [security2:error] [pid 1041789:tid 1042030] [client 158.23.184.117:38328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK99Yv3RhPI65jTFG71gQAAA4E"]
[Sat Aug 29 05:09:41.405886 2026] [security2:error] [pid 1041789:tid 1041941] [client 20.220.204.93:50760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/export.php"] [unique_id "apK99Yv3RhPI65jTFG71hQAAAyg"]
[Sat Aug 29 05:09:41.410741 2026] [security2:error] [pid 1041789:tid 1042040] [client 20.48.160.90:50511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/dex.php"] [unique_id "apK99Yv3RhPI65jTFG71hwAAA4s"]
[Sat Aug 29 05:09:41.414811 2026] [security2:error] [pid 1041789:tid 1041839] [remote 45.148.10.62:33956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xqk.etg.mybluehost.me"] [uri "/wp-login.php"] [unique_id "apK99Yv3RhPI65jTFG71iQADUiU"]
[Sat Aug 29 05:09:41.414879 2026] [security2:error] [pid 1041789:tid 1042050] [client 68.155.159.216:14232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK99Yv3RhPI65jTFG71fAAAA5U"]
[Sat Aug 29 05:09:41.422047 2026] [security2:error] [pid 1041789:tid 1042010] [client 4.205.62.107:25957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/umgebung.php"] [unique_id "apK99Yv3RhPI65jTFG71iwAAA20"]
[Sat Aug 29 05:09:41.424295 2026] [security2:error] [pid 1041789:tid 1042028] [client 93.123.109.228:54950] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/stripe/.env"] [unique_id "apK99Yv3RhPI65jTFG71igAAA38"]
[Sat Aug 29 05:09:41.451920 2026] [security2:error] [pid 1041789:tid 1041977] [client 158.23.184.117:7181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/wp-includes/Test.php"] [unique_id "apK99Yv3RhPI65jTFG71lQAAA0w"]
[Sat Aug 29 05:09:41.462015 2026] [security2:error] [pid 1041789:tid 1042054] [client 68.155.159.216:1960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK99Yv3RhPI65jTFG71nAAAA5k"]
[Sat Aug 29 05:09:41.480880 2026] [security2:error] [pid 1041789:tid 1041870] [remote 34.138.144.127:46132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 127.144.138.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.studiopasa.com"] [uri "/app_dev.php"] [unique_id "apK99Yv3RhPI65jTFG71qAADd0Q"]
[Sat Aug 29 05:09:41.485169 2026] [core:error] [pid 1041789:tid 1041991] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.485174 2026] [cgid:error] [pid 1041789:tid 1041894] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:41.485189 2026] [core:error] [pid 1041789:tid 1041991] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.489119 2026] [cgid:error] [pid 1041789:tid 1041897] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:41.491269 2026] [security2:error] [pid 1041789:tid 1042018] [client 52.139.37.240:63575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alabamaracingrealtor.com"] [uri "/form.php"] [unique_id "apK99Yv3RhPI65jTFG71sgAAA3U"]
[Sat Aug 29 05:09:41.493718 2026] [security2:error] [pid 1041789:tid 1041835] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/erp/.env"] [unique_id "apK99Yv3RhPI65jTFG71tAADYCE"]
[Sat Aug 29 05:09:41.494882 2026] [cgid:error] [pid 1041789:tid 1041811] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:41.501201 2026] [security2:error] [pid 1041789:tid 1042034] [client 4.205.62.107:51402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/dragonshell.php"] [unique_id "apK99Yv3RhPI65jTFG71uwAAA4U"]
[Sat Aug 29 05:09:41.515128 2026] [security2:error] [pid 1321:tid 1610] [client 74.248.24.12:26337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/.trash7206/index.php"] [unique_id "apK99WjCPtor9NZ-byTUFAAABrU"]
[Sat Aug 29 05:09:41.515777 2026] [security2:error] [pid 1321:tid 1596] [client 74.248.24.12:37885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/m.php"] [unique_id "apK99WjCPtor9NZ-byTUFQAABqc"]
[Sat Aug 29 05:09:41.517639 2026] [cgid:error] [pid 1041789:tid 1041915] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:41.519411 2026] [cgid:error] [pid 1041789:tid 1041914] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:41.525184 2026] [security2:error] [pid 1041789:tid 1042007] [client 4.205.62.107:6485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/mga.php"] [unique_id "apK99Yv3RhPI65jTFG71wwAAA2o"]
[Sat Aug 29 05:09:41.535141 2026] [security2:error] [pid 1321:tid 1611] [client 68.155.159.216:6048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/themes.php"] [unique_id "apK99WjCPtor9NZ-byTUFgAABrY"]
[Sat Aug 29 05:09:41.538666 2026] [security2:error] [pid 1041789:tid 1042047] [client 52.139.37.240:31069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/a9.php"] [unique_id "apK99Yv3RhPI65jTFG71xwAAA5I"]
[Sat Aug 29 05:09:41.544433 2026] [security2:error] [pid 1041789:tid 1041949] [client 4.205.62.107:62777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/wp-konfig.php"] [unique_id "apK99Yv3RhPI65jTFG71ygAAAzA"]
[Sat Aug 29 05:09:41.548793 2026] [core:error] [pid 1041789:tid 1041945] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.548808 2026] [core:error] [pid 1041789:tid 1041945] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.553269 2026] [security2:error] [pid 1041789:tid 1042000] [client 20.48.160.90:50519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/giodywky.php"] [unique_id "apK99Yv3RhPI65jTFG71zgAAA2M"]
[Sat Aug 29 05:09:41.556220 2026] [security2:error] [pid 1041789:tid 1041810] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/fe/.env"] [unique_id "apK99Yv3RhPI65jTFG711AADYAg"]
[Sat Aug 29 05:09:41.556220 2026] [security2:error] [pid 1041789:tid 1041853] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/etc/apache2/apache2.conf"] [unique_id "apK99Yv3RhPI65jTFG710gADYDM"]
[Sat Aug 29 05:09:41.556761 2026] [security2:error] [pid 1041789:tid 1041868] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/etc/boto.cfg"] [unique_id "apK99Yv3RhPI65jTFG71zwADYEI"]
[Sat Aug 29 05:09:41.557137 2026] [core:error] [pid 1041789:tid 1042021] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.557148 2026] [core:error] [pid 1041789:tid 1042021] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.578995 2026] [security2:error] [pid 1041789:tid 1041950] [client 68.155.159.216:56567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK99Yv3RhPI65jTFG715QAAAzE"]
[Sat Aug 29 05:09:41.581839 2026] [security2:error] [pid 1321:tid 1613] [client 68.155.159.216:30613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-includes/js/index.php"] [unique_id "apK99WjCPtor9NZ-byTUGAAABrg"]
[Sat Aug 29 05:09:41.590387 2026] [core:error] [pid 1041789:tid 1041967] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.590405 2026] [core:error] [pid 1041789:tid 1041967] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.591617 2026] [core:error] [pid 1321:tid 1613] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.591637 2026] [core:error] [pid 1321:tid 1613] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.594730 2026] [security2:error] [pid 1041789:tid 1042041] [client 158.23.184.117:64516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/wp-includes/admin.php"] [unique_id "apK99Yv3RhPI65jTFG718AAAA4w"]
[Sat Aug 29 05:09:41.597694 2026] [security2:error] [pid 1041789:tid 1042032] [client 158.23.147.79:44514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK99Yv3RhPI65jTFG718wAAA4M"]
[Sat Aug 29 05:09:41.599148 2026] [core:error] [pid 1321:tid 1612] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.599164 2026] [core:error] [pid 1321:tid 1612] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.599928 2026] [core:error] [pid 1321:tid 1491] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.599945 2026] [core:error] [pid 1321:tid 1491] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.603339 2026] [security2:error] [pid 1041789:tid 1041982] [client 68.155.159.216:7129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/file88.php"] [unique_id "apK99Yv3RhPI65jTFG719QAAA1E"]
[Sat Aug 29 05:09:41.633026 2026] [security2:error] [pid 1321:tid 1494] [client 4.205.62.107:8731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/cli_bootstrap.php"] [unique_id "apK99WjCPtor9NZ-byTUHAAABkI"]
[Sat Aug 29 05:09:41.641686 2026] [security2:error] [pid 1041789:tid 1041856] [remote 34.74.130.21:35732] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/backend/.env"] [unique_id "apK99Yv3RhPI65jTFG71-gADIDY"]
[Sat Aug 29 05:09:41.650492 2026] [security2:error] [pid 1041789:tid 1042007] [client 93.123.109.228:54950] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/terraform.tfstate.backup"] [unique_id "apK99Yv3RhPI65jTFG71_QAAA2o"]
[Sat Aug 29 05:09:41.661237 2026] [security2:error] [pid 1041789:tid 1041998] [client 20.63.219.114:17967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/colour.php"] [unique_id "apK99Yv3RhPI65jTFG72AAAAA2E"]
[Sat Aug 29 05:09:41.665821 2026] [security2:error] [pid 1041789:tid 1041900] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/frontend/.env"] [unique_id "apK99Yv3RhPI65jTFG72BQADW2I"]
[Sat Aug 29 05:09:41.666030 2026] [security2:error] [pid 1041789:tid 1041858] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/front/.env"] [unique_id "apK99Yv3RhPI65jTFG72AwADWzg"]
[Sat Aug 29 05:09:41.684799 2026] [security2:error] [pid 1041789:tid 1041954] [client 20.48.160.90:50530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/wp-kz.php"] [unique_id "apK99Yv3RhPI65jTFG72EwAAAzU"]
[Sat Aug 29 05:09:41.686564 2026] [security2:error] [pid 1041789:tid 1042051] [client 40.83.93.50:14497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/hello.php"] [unique_id "apK99Yv3RhPI65jTFG72FQAAA5Y"]
[Sat Aug 29 05:09:41.688277 2026] [security2:error] [pid 1041789:tid 1042017] [client 52.139.37.240:63595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alabamaracingrealtor.com"] [uri "/wp-sigunq.php"] [unique_id "apK99Yv3RhPI65jTFG72FwAAA3Q"]
[Sat Aug 29 05:09:41.688854 2026] [cgid:error] [pid 1041789:tid 1041834] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:41.696745 2026] [core:error] [pid 1321:tid 1495] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.696766 2026] [core:error] [pid 1321:tid 1495] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.699454 2026] [security2:error] [pid 1321:tid 1615] [client 20.52.41.200:5274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "apK99WjCPtor9NZ-byTUIAAABro"]
[Sat Aug 29 05:09:41.701815 2026] [core:error] [pid 1321:tid 1500] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.701838 2026] [core:error] [pid 1321:tid 1500] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.706156 2026] [security2:error] [pid 1041789:tid 1041903] [remote 34.138.144.127:46132] ModSecurity: Access denied with code 406 (phase 2). Match of "ipMatch 127.0.0.1,::1" against "REMOTE_ADDR" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "724"] [id "340114"] [rev "2"] [msg "Atomicorp.com WAF Rules: Apache admin service access attempt"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/server-info"] [unique_id "apK99Yv3RhPI65jTFG72HQADjmU"]
[Sat Aug 29 05:09:41.710782 2026] [security2:error] [pid 1041789:tid 1042027] [client 4.232.148.111:23182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/zoom1.php"] [unique_id "apK99Yv3RhPI65jTFG72HgAAA34"]
[Sat Aug 29 05:09:41.718125 2026] [security2:error] [pid 1041789:tid 1041895] [remote 34.74.130.21:35732] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/config/.env"] [unique_id "apK99Yv3RhPI65jTFG72HwADbV0"]
[Sat Aug 29 05:09:41.731529 2026] [cgid:error] [pid 1041789:tid 1041905] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:41.733492 2026] [security2:error] [pid 1321:tid 1497] [client 158.23.147.79:17659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK99WjCPtor9NZ-byTUIQAABkU"]
[Sat Aug 29 05:09:41.735477 2026] [cgid:error] [pid 1041789:tid 1041829] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:41.737328 2026] [security2:error] [pid 1041789:tid 1041803] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/info.php"] [unique_id "apK99Yv3RhPI65jTFG72LAADWwE"]
[Sat Aug 29 05:09:41.739553 2026] [security2:error] [pid 1321:tid 1503] [client 52.139.37.240:31103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/admin/index.php"] [unique_id "apK99WjCPtor9NZ-byTUIgAABks"]
[Sat Aug 29 05:09:41.740763 2026] [core:error] [pid 1041789:tid 1041829] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.740780 2026] [core:error] [pid 1041789:tid 1041829] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.743372 2026] [security2:error] [pid 1321:tid 1519] [client 158.23.184.117:64570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/wp-themes.php"] [unique_id "apK99WjCPtor9NZ-byTUIwAABls"]
[Sat Aug 29 05:09:41.750277 2026] [security2:error] [pid 1041789:tid 1041976] [client 20.220.204.93:59050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/gk.php"] [unique_id "apK99Yv3RhPI65jTFG72NgAAA0s"]
[Sat Aug 29 05:09:41.753431 2026] [security2:error] [pid 1321:tid 1523] [client 4.205.62.107:3945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/agg.php"] [unique_id "apK99WjCPtor9NZ-byTUJgAABl8"]
[Sat Aug 29 05:09:41.764472 2026] [cgid:error] [pid 1041789:tid 1041854] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:41.765810 2026] [access_compat:error] [pid 1041789:tid 1041906] [remote 34.138.144.127:46132] AH01797: client denied by server configuration: /home3/zenicane/public_html/studiopasa/server-status
[Sat Aug 29 05:09:41.768703 2026] [security2:error] [pid 1321:tid 1527] [client 68.155.159.216:18424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK99WjCPtor9NZ-byTUJwAABmM"]
[Sat Aug 29 05:09:41.776919 2026] [security2:error] [pid 1041789:tid 1041891] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/infophp.php"] [unique_id "apK99Yv3RhPI65jTFG72PgADW1k"]
[Sat Aug 29 05:09:41.777440 2026] [security2:error] [pid 1041789:tid 1042033] [client 93.123.109.228:45750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/test.php"] [unique_id "apK99Yv3RhPI65jTFG72PwAAA4Q"]
[Sat Aug 29 05:09:41.780611 2026] [security2:error] [pid 1041789:tid 1041925] [remote 93.123.109.228:55834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyer.com"] [uri "/info.php"] [unique_id "apK99Yv3RhPI65jTFG72QQADlHs"]
[Sat Aug 29 05:09:41.783392 2026] [security2:error] [pid 1041789:tid 1042035] [client 93.123.109.228:45786] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/test/.env"] [unique_id "apK99Yv3RhPI65jTFG72QgAAA4Y"]
[Sat Aug 29 05:09:41.792029 2026] [security2:error] [pid 1041789:tid 1041878] [remote 93.123.109.228:55834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyer.com"] [uri "/infophp.php"] [unique_id "apK99Yv3RhPI65jTFG72RwADlEw"]
[Sat Aug 29 05:09:41.793969 2026] [security2:error] [pid 1041789:tid 1041839] [remote 93.123.109.228:55834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyer.com"] [uri "/infos.php"] [unique_id "apK99Yv3RhPI65jTFG72SAADlCU"]
[Sat Aug 29 05:09:41.794397 2026] [security2:error] [pid 1041789:tid 1041997] [client 4.232.148.111:28842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK99Yv3RhPI65jTFG72SQAAA2A"]
[Sat Aug 29 05:09:41.823302 2026] [security2:error] [pid 1321:tid 1513] [client 20.48.160.90:45314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/wp-includes/ID3/getid.php"] [unique_id "apK99WjCPtor9NZ-byTUKAAABlU"]
[Sat Aug 29 05:09:41.829883 2026] [core:error] [pid 1041789:tid 1042006] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.829905 2026] [core:error] [pid 1041789:tid 1042006] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.830325 2026] [security2:error] [pid 1321:tid 1542] [client 68.155.159.216:16353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "familytrade.ca"] [uri "/first.php"] [unique_id "apK99WjCPtor9NZ-byTUKgAABnI"]
[Sat Aug 29 05:09:41.834424 2026] [core:error] [pid 1041789:tid 1041942] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.834449 2026] [core:error] [pid 1041789:tid 1041942] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.836193 2026] [core:error] [pid 1041789:tid 1041980] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.836213 2026] [core:error] [pid 1041789:tid 1041980] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.847062 2026] [security2:error] [pid 1041789:tid 1042051] [client 93.123.109.228:55070] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/user/.env"] [unique_id "apK99Yv3RhPI65jTFG72YQAAA5Y"]
[Sat Aug 29 05:09:41.847368 2026] [core:error] [pid 1041789:tid 1041956] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.847382 2026] [core:error] [pid 1041789:tid 1041956] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.848496 2026] [core:error] [pid 1041789:tid 1041943] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.848517 2026] [core:error] [pid 1041789:tid 1041943] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.878778 2026] [security2:error] [pid 1041789:tid 1041934] [client 93.123.109.228:54950] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/v1/.env"] [unique_id "apK99Yv3RhPI65jTFG72ZwAAAyE"]
[Sat Aug 29 05:09:41.882065 2026] [security2:error] [pid 1321:tid 1547] [client 20.220.204.93:50751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/logs1.php"] [unique_id "apK99WjCPtor9NZ-byTULgAABnY"]
[Sat Aug 29 05:09:41.884309 2026] [security2:error] [pid 1041789:tid 1041971] [client 52.139.37.240:56334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alabamaracingrealtor.com"] [uri "/07.php"] [unique_id "apK99Yv3RhPI65jTFG72aQAAA0Y"]
[Sat Aug 29 05:09:41.889329 2026] [security2:error] [pid 1321:tid 1529] [client 158.23.147.79:6059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-admin/images/about.php"] [unique_id "apK99WjCPtor9NZ-byTUMAAABmU"]
[Sat Aug 29 05:09:41.892931 2026] [security2:error] [pid 1041789:tid 1042026] [client 158.23.184.117:38316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/adminfuns.php/.well-known/acme-challenge/file.php"] [unique_id "apK99Yv3RhPI65jTFG72agAAA30"]
[Sat Aug 29 05:09:41.920599 2026] [security2:error] [pid 1041789:tid 1041960] [client 93.123.109.228:54758] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/v2/.env"] [unique_id "apK99Yv3RhPI65jTFG72cwAAAzs"]
[Sat Aug 29 05:09:41.921144 2026] [security2:error] [pid 1041789:tid 1041824] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/infos.php"] [unique_id "apK99Yv3RhPI65jTFG72dAADeBY"]
[Sat Aug 29 05:09:41.926077 2026] [security2:error] [pid 1041789:tid 1041960] [client 93.123.109.228:54816] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/v3/.env"] [unique_id "apK99Yv3RhPI65jTFG72dgAAAzs"]
[Sat Aug 29 05:09:41.928678 2026] [security2:error] [pid 1041789:tid 1041864] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/laravel/.env"] [unique_id "apK99Yv3RhPI65jTFG72dQADeD4"]
[Sat Aug 29 05:09:41.941329 2026] [security2:error] [pid 1321:tid 1518] [client 52.139.37.240:31070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/makeasmtp.php"] [unique_id "apK99WjCPtor9NZ-byTUMgAABlo"]
[Sat Aug 29 05:09:41.944504 2026] [core:error] [pid 1041789:tid 1041965] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.944523 2026] [core:error] [pid 1041789:tid 1041965] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.948215 2026] [core:error] [pid 1041789:tid 1041982] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.948237 2026] [core:error] [pid 1041789:tid 1041982] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:41.953678 2026] [security2:error] [pid 1041789:tid 1041810] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/lms/.env"] [unique_id "apK99Yv3RhPI65jTFG72hQADeAg"]
[Sat Aug 29 05:09:41.959163 2026] [security2:error] [pid 1321:tid 1557] [client 20.48.160.90:50526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/session.php"] [unique_id "apK99WjCPtor9NZ-byTUNQAABoA"]
[Sat Aug 29 05:09:41.983853 2026] [security2:error] [pid 1041789:tid 1041926] [remote 93.123.109.228:39292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmsproductions.com"] [uri "/php-info.php"] [unique_id "apK99Yv3RhPI65jTFG72jgADjHw"]
[Sat Aug 29 05:09:41.984887 2026] [security2:error] [pid 1041789:tid 1041818] [remote 93.123.109.228:39292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmsproductions.com"] [uri "/php.php"] [unique_id "apK99Yv3RhPI65jTFG72jwADjBA"]
[Sat Aug 29 05:09:41.987933 2026] [security2:error] [pid 1041789:tid 1041831] [remote 93.123.109.228:39292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmsproductions.com"] [uri "/phpinfo.php"] [unique_id "apK99Yv3RhPI65jTFG72kwADjB0"]
[Sat Aug 29 05:09:41.987959 2026] [security2:error] [pid 1041789:tid 1041802] [remote 93.123.109.228:39292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmsproductions.com"] [uri "/php_info.php"] [unique_id "apK99Yv3RhPI65jTFG72kQADjAA"]
[Sat Aug 29 05:09:41.997647 2026] [security2:error] [pid 1041789:tid 1041977] [client 20.104.49.130:51375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/reviall.php"] [unique_id "apK99Yv3RhPI65jTFG72lgAAA0w"]
[Sat Aug 29 05:09:42.001952 2026] [security2:error] [pid 1041789:tid 1041948] [client 93.123.109.228:54900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/.wp-config.php.swp"] [unique_id "apK99Yv3RhPI65jTFG72lwAAAy8"]
[Sat Aug 29 05:09:42.017323 2026] [security2:error] [pid 1041789:tid 1042034] [client 74.248.24.12:4395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wk/index.php"] [unique_id "apK99ov3RhPI65jTFG72mAAAA4U"]
[Sat Aug 29 05:09:42.022913 2026] [security2:error] [pid 1321:tid 1554] [client 20.63.219.114:1285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/OK.php"] [unique_id "apK99mjCPtor9NZ-byTUNwAABn0"]
[Sat Aug 29 05:09:42.036286 2026] [security2:error] [pid 1041789:tid 1042028] [client 74.248.24.12:22435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "apK99ov3RhPI65jTFG72nwAAA38"]
[Sat Aug 29 05:09:42.043111 2026] [security2:error] [pid 1041789:tid 1041806] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/local/.env"] [unique_id "apK99ov3RhPI65jTFG72ogADcQQ"]
[Sat Aug 29 05:09:42.050218 2026] [security2:error] [pid 1041789:tid 1041981] [client 68.155.159.216:64501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK99ov3RhPI65jTFG72pQAAA1A"]
[Sat Aug 29 05:09:42.053435 2026] [security2:error] [pid 1041789:tid 1041807] [remote 34.138.144.127:46132] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/backend/.env"] [unique_id "apK99ov3RhPI65jTFG72pwADmgU"]
[Sat Aug 29 05:09:42.055916 2026] [cgid:error] [pid 1041789:tid 1041804] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:42.057021 2026] [cgid:error] [pid 1041789:tid 1041904] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:42.057067 2026] [cgid:error] [pid 1041789:tid 1041880] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:42.069953 2026] [core:error] [pid 1321:tid 1532] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.069976 2026] [core:error] [pid 1321:tid 1532] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.080589 2026] [security2:error] [pid 1321:tid 1565] [client 52.139.37.240:62240] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "alabamaracingrealtor.com"] [uri "/c99.php"] [unique_id "apK99mjCPtor9NZ-byTUQQAABog"]
[Sat Aug 29 05:09:42.086240 2026] [security2:error] [pid 1041789:tid 1042000] [client 93.123.109.228:55020] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/ADMIN/.env"] [unique_id "apK99ov3RhPI65jTFG72swAAA2M"]
[Sat Aug 29 05:09:42.089418 2026] [security2:error] [pid 1041789:tid 1041975] [client 4.205.62.107:63976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/thui.php"] [unique_id "apK99ov3RhPI65jTFG72twAAA0o"]
[Sat Aug 29 05:09:42.094152 2026] [security2:error] [pid 1321:tid 1517] [client 158.23.184.117:53716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "apK99mjCPtor9NZ-byTUQwAABlk"]
[Sat Aug 29 05:09:42.096100 2026] [security2:error] [pid 1041789:tid 1041972] [client 20.48.160.90:50534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/eagle.php"] [unique_id "apK99ov3RhPI65jTFG72uwAAA0c"]
[Sat Aug 29 05:09:42.098647 2026] [security2:error] [pid 1041789:tid 1041875] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/market/.env"] [unique_id "apK99ov3RhPI65jTFG72uQADcUk"]
[Sat Aug 29 05:09:42.102890 2026] [security2:error] [pid 1041789:tid 1041856] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/marketing/.env"] [unique_id "apK99ov3RhPI65jTFG72vwADcTY"]
[Sat Aug 29 05:09:42.104737 2026] [core:error] [pid 1321:tid 1577] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.104755 2026] [core:error] [pid 1321:tid 1577] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.133561 2026] [security2:error] [pid 1041789:tid 1041858] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/media/.env"] [unique_id "apK99ov3RhPI65jTFG72ygADcTg"]
[Sat Aug 29 05:09:42.133721 2026] [security2:error] [pid 1041789:tid 1041916] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/new/.env"] [unique_id "apK99ov3RhPI65jTFG72zgADcXI"]
[Sat Aug 29 05:09:42.136139 2026] [security2:error] [pid 1041789:tid 1042043] [client 20.220.204.93:50704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/inege.php"] [unique_id "apK99ov3RhPI65jTFG722AAAA44"]
[Sat Aug 29 05:09:42.136178 2026] [core:error] [pid 1041789:tid 1041938] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.136187 2026] [core:error] [pid 1041789:tid 1041938] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.136577 2026] [cgid:error] [pid 1041789:tid 1041855] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:42.139587 2026] [security2:error] [pid 1041789:tid 1042032] [client 20.52.41.200:4367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/abcd.php"] [unique_id "apK99ov3RhPI65jTFG723AAAA4M"]
[Sat Aug 29 05:09:42.140983 2026] [cgid:error] [pid 1041789:tid 1041903] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:42.142046 2026] [security2:error] [pid 1041789:tid 1041963] [client 52.139.37.240:31515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/paku.php"] [unique_id "apK99ov3RhPI65jTFG723gAAAz4"]
[Sat Aug 29 05:09:42.143641 2026] [core:error] [pid 1041789:tid 1042037] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.143656 2026] [core:error] [pid 1041789:tid 1042037] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.147236 2026] [security2:error] [pid 1321:tid 1490] [client 103.171.189.88:593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK99mjCPtor9NZ-byTURwAABj4"]
[Sat Aug 29 05:09:42.147386 2026] [security2:error] [pid 1321:tid 1490] [client 103.171.189.88:593] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK99mjCPtor9NZ-byTURwAABj4"]
[Sat Aug 29 05:09:42.162626 2026] [security2:error] [pid 1041789:tid 1041865] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/node/.env"] [unique_id "apK99ov3RhPI65jTFG725QADcT8"]
[Sat Aug 29 05:09:42.163703 2026] [security2:error] [pid 1041789:tid 1041849] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/node/api/.env"] [unique_id "apK99ov3RhPI65jTFG725wADcS8"]
[Sat Aug 29 05:09:42.166392 2026] [core:error] [pid 1041789:tid 1042006] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.166410 2026] [core:error] [pid 1041789:tid 1042006] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.167113 2026] [core:error] [pid 1321:tid 1585] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.167127 2026] [core:error] [pid 1321:tid 1585] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.167752 2026] [security2:error] [pid 1041789:tid 1041905] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/node-api/.env"] [unique_id "apK99ov3RhPI65jTFG726AADcWc"]
[Sat Aug 29 05:09:42.169189 2026] [core:error] [pid 1041789:tid 1042034] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.169203 2026] [core:error] [pid 1041789:tid 1042034] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.170834 2026] [security2:error] [pid 1041789:tid 1041950] [client 158.23.147.79:14212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/goods.php"] [unique_id "apK99ov3RhPI65jTFG728gAAAzE"]
[Sat Aug 29 05:09:42.171067 2026] [security2:error] [pid 1041789:tid 1041969] [client 93.123.109.228:54922] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/API/.env"] [unique_id "apK99ov3RhPI65jTFG728AAAA0Q"]
[Sat Aug 29 05:09:42.176145 2026] [core:error] [pid 1321:tid 1571] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.176164 2026] [core:error] [pid 1321:tid 1571] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.181522 2026] [security2:error] [pid 1321:tid 1590] [client 45.148.10.62:33970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xtj.otn.mybluehost.me"] [uri "/wp-config.php"] [unique_id "apK99mjCPtor9NZ-byTUSwAABqE"]
[Sat Aug 29 05:09:42.183006 2026] [security2:error] [pid 1321:tid 1564] [client 40.83.93.50:17690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/fi2.php"] [unique_id "apK99mjCPtor9NZ-byTUTAAABoc"]
[Sat Aug 29 05:09:42.188472 2026] [security2:error] [pid 1041789:tid 1041942] [client 4.232.148.111:20894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/txets.php"] [unique_id "apK99ov3RhPI65jTFG729gAAAyk"]
[Sat Aug 29 05:09:42.230836 2026] [security2:error] [pid 1321:tid 1594] [client 20.48.160.90:50465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/up-kon.php"] [unique_id "apK99mjCPtor9NZ-byTUTQAABqU"]
[Sat Aug 29 05:09:42.239127 2026] [security2:error] [pid 1041789:tid 1042055] [client 158.23.184.117:38280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dtechstudios.com"] [uri "/11.php"] [unique_id "apK99ov3RhPI65jTFG73AQAAA5o"]
[Sat Aug 29 05:09:42.246440 2026] [security2:error] [pid 1321:tid 1573] [client 4.205.62.107:22309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/params.php"] [unique_id "apK99mjCPtor9NZ-byTUTgAABpA"]
[Sat Aug 29 05:09:42.251203 2026] [security2:error] [pid 1041789:tid 1041878] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/node/backend/.env"] [unique_id "apK99ov3RhPI65jTFG73BQADakw"]
[Sat Aug 29 05:09:42.274241 2026] [security2:error] [pid 1321:tid 1593] [client 52.139.37.240:62247] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "alabamaracingrealtor.com"] [uri "/c99.php"] [unique_id "apK99mjCPtor9NZ-byTUUQAABqQ"]
[Sat Aug 29 05:09:42.275700 2026] [security2:error] [pid 1041789:tid 1041933] [client 4.232.148.111:18471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/css/index.php"] [unique_id "apK99ov3RhPI65jTFG73EwAAAyA"]
[Sat Aug 29 05:09:42.277010 2026] [security2:error] [pid 1041789:tid 1042001] [client 68.155.159.216:33553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK99ov3RhPI65jTFG73FAAAA2Q"]
[Sat Aug 29 05:09:42.287878 2026] [security2:error] [pid 1041789:tid 1041851] [remote 34.138.144.127:46132] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/.env"] [unique_id "apK99ov3RhPI65jTFG73DwADOzE"]
[Sat Aug 29 05:09:42.288666 2026] [cgid:error] [pid 1041789:tid 1041907] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:42.288950 2026] [cgid:error] [pid 1041789:tid 1041842] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:42.293797 2026] [cgid:error] [pid 1041789:tid 1041852] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:42.295465 2026] [security2:error] [pid 1041789:tid 1041911] [remote 93.123.109.228:39292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmsproductions.com"] [uri "/public/phpinfo.php"] [unique_id "apK99ov3RhPI65jTFG73KAADfW0"]
[Sat Aug 29 05:09:42.299907 2026] [cgid:error] [pid 1041789:tid 1041825] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:42.302589 2026] [security2:error] [pid 1041789:tid 1042052] [client 158.23.147.79:63870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/.well-known/index.php"] [unique_id "apK99ov3RhPI65jTFG73LAAAA5c"]
[Sat Aug 29 05:09:42.303797 2026] [security2:error] [pid 1041789:tid 1042033] [client 68.155.159.216:64418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK99ov3RhPI65jTFG73LQAAA4Q"]
[Sat Aug 29 05:09:42.309114 2026] [security2:error] [pid 1041789:tid 1041946] [client 93.123.109.165:44840] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "microprocesos.com"] [uri "/livewire/update"] [unique_id "apK99ov3RhPI65jTFG73LgAAAy0"]
[Sat Aug 29 05:09:42.344615 2026] [security2:error] [pid 1041789:tid 1041894] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/nodeweb/.env"] [unique_id "apK99ov3RhPI65jTFG73OQADflw"]
[Sat Aug 29 05:09:42.347238 2026] [security2:error] [pid 1041789:tid 1042011] [client 52.139.37.240:31135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/rtx.php"] [unique_id "apK99ov3RhPI65jTFG73QgAAA24"]
[Sat Aug 29 05:09:42.366739 2026] [security2:error] [pid 1041789:tid 1041979] [client 93.123.109.228:55082] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/var/www/.env"] [unique_id "apK99ov3RhPI65jTFG73RwAAA04"]
[Sat Aug 29 05:09:42.367496 2026] [security2:error] [pid 1041789:tid 1041897] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/nodeapi/.env"] [unique_id "apK99ov3RhPI65jTFG73RgADfl8"]
[Sat Aug 29 05:09:42.370783 2026] [security2:error] [pid 1041789:tid 1042056] [client 20.48.160.90:50449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/tinny.php"] [unique_id "apK99ov3RhPI65jTFG73SQAAA5s"]
[Sat Aug 29 05:09:42.371022 2026] [security2:error] [pid 1041789:tid 1041932] [client 68.155.159.216:49299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wzy.php"] [unique_id "apK99ov3RhPI65jTFG73SAAAAx8"]
[Sat Aug 29 05:09:42.380286 2026] [security2:error] [pid 1321:tid 1600] [client 20.63.219.114:1296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tomgrassia.com"] [uri "/aaa.php"] [unique_id "apK99mjCPtor9NZ-byTUVgAABqs"]
[Sat Aug 29 05:09:42.382962 2026] [security2:error] [pid 1041789:tid 1041934] [client 93.123.109.228:55102] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/APP/.env"] [unique_id "apK99ov3RhPI65jTFG73SgAAAyE"]
[Sat Aug 29 05:09:42.384068 2026] [core:error] [pid 1041789:tid 1041979] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.384085 2026] [core:error] [pid 1041789:tid 1041979] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.387064 2026] [security2:error] [pid 1321:tid 1596] [client 20.220.204.93:50754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/wp-link10.php"] [unique_id "apK99mjCPtor9NZ-byTUWAAABqc"]
[Sat Aug 29 05:09:42.390964 2026] [core:error] [pid 1321:tid 1610] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.390985 2026] [core:error] [pid 1321:tid 1610] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.395428 2026] [security2:error] [pid 1041789:tid 1041936] [client 93.123.109.228:54920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/Api/.env"] [unique_id "apK99ov3RhPI65jTFG73TwAAAyM"]
[Sat Aug 29 05:09:42.403375 2026] [security2:error] [pid 1041789:tid 1042010] [client 93.123.109.228:54878] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/var/www/html/.env"] [unique_id "apK99ov3RhPI65jTFG73UQAAA20"]
[Sat Aug 29 05:09:42.405103 2026] [security2:error] [pid 1041789:tid 1041828] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/old/.env"] [unique_id "apK99ov3RhPI65jTFG73UAADKRo"]
[Sat Aug 29 05:09:42.405216 2026] [security2:error] [pid 1041789:tid 1041983] [client 93.123.109.228:54972] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/BACK/.env"] [unique_id "apK99ov3RhPI65jTFG73UgAAA1I"]
[Sat Aug 29 05:09:42.417683 2026] [security2:error] [pid 1041789:tid 1042017] [client 93.123.109.228:54914] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/BACKEND/.env"] [unique_id "apK99ov3RhPI65jTFG73VQAAA3Q"]
[Sat Aug 29 05:09:42.427226 2026] [security2:error] [pid 1041789:tid 1041831] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/opt/.env"] [unique_id "apK99ov3RhPI65jTFG73WwADKR0"]
[Sat Aug 29 05:09:42.427758 2026] [security2:error] [pid 1041789:tid 1042007] [client 93.123.109.228:55008] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/BE/.env"] [unique_id "apK99ov3RhPI65jTFG73XQAAA2o"]
[Sat Aug 29 05:09:42.445913 2026] [core:error] [pid 1321:tid 1502] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.445933 2026] [core:error] [pid 1321:tid 1502] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.457819 2026] [core:error] [pid 1041789:tid 1042046] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.457841 2026] [core:error] [pid 1041789:tid 1042046] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.469185 2026] [security2:error] [pid 1041789:tid 1041990] [client 93.123.109.228:54946] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/Backend/.env"] [unique_id "apK99ov3RhPI65jTFG73bwAAA1k"]
[Sat Aug 29 05:09:42.475304 2026] [core:error] [pid 1041789:tid 1041946] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.475303 2026] [core:error] [pid 1321:tid 1506] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.475321 2026] [core:error] [pid 1041789:tid 1041946] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.475326 2026] [core:error] [pid 1321:tid 1506] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.476569 2026] [security2:error] [pid 1321:tid 1613] [client 52.139.37.240:62231] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "alabamaracingrealtor.com"] [uri "/c99.php"] [unique_id "apK99mjCPtor9NZ-byTUYwAABrg"]
[Sat Aug 29 05:09:42.476645 2026] [core:error] [pid 1321:tid 1612] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.476656 2026] [core:error] [pid 1321:tid 1612] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.483687 2026] [core:error] [pid 1041789:tid 1042042] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.483702 2026] [core:error] [pid 1041789:tid 1042042] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.498307 2026] [security2:error] [pid 1041789:tid 1041997] [client 93.123.109.228:55160] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/Be/.env"] [unique_id "apK99ov3RhPI65jTFG73dAAAA2A"]
[Sat Aug 29 05:09:42.515430 2026] [security2:error] [pid 1041789:tid 1042029] [client 93.123.109.228:55070] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/web/.env"] [unique_id "apK99ov3RhPI65jTFG73fAAAA4A"]
[Sat Aug 29 05:09:42.516326 2026] [security2:error] [pid 1041789:tid 1041991] [client 20.48.160.90:50446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/wp-easy.php"] [unique_id "apK99ov3RhPI65jTFG73gAAAA1o"]
[Sat Aug 29 05:09:42.518549 2026] [core:error] [pid 1041789:tid 1042045] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.518568 2026] [core:error] [pid 1041789:tid 1042045] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.519477 2026] [security2:error] [pid 1321:tid 1540] [client 68.155.159.216:14320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-content/cong.php"] [unique_id "apK99mjCPtor9NZ-byTUZQAABnA"]
[Sat Aug 29 05:09:42.523844 2026] [security2:error] [pid 1321:tid 1541] [client 20.220.204.93:50704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/ww.php"] [unique_id "apK99mjCPtor9NZ-byTUaAAABnE"]
[Sat Aug 29 05:09:42.523864 2026] [core:error] [pid 1321:tid 1538] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.523880 2026] [core:error] [pid 1321:tid 1538] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.528267 2026] [security2:error] [pid 1041789:tid 1042028] [client 74.248.24.12:28752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/admin.php"] [unique_id "apK99ov3RhPI65jTFG73gwAAA38"]
[Sat Aug 29 05:09:42.531562 2026] [security2:error] [pid 1041789:tid 1042051] [client 20.63.81.20:65160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/nv.php"] [unique_id "apK99ov3RhPI65jTFG73iwAAA5Y"]
[Sat Aug 29 05:09:42.533044 2026] [core:error] [pid 1041789:tid 1041948] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.533061 2026] [core:error] [pid 1041789:tid 1041948] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.536956 2026] [security2:error] [pid 1041789:tid 1041938] [client 20.63.81.20:39948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/wp-admin/css/colors/maro.php"] [unique_id "apK99ov3RhPI65jTFG73jwAAAyU"]
[Sat Aug 29 05:09:42.544923 2026] [security2:error] [pid 1041789:tid 1041934] [client 20.63.81.20:55646] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/samll.php"] [unique_id "apK99ov3RhPI65jTFG73kQAAAyE"]
[Sat Aug 29 05:09:42.545652 2026] [security2:error] [pid 1041789:tid 1041916] [remote 34.138.144.127:46132] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/.env.backup"] [unique_id "apK99ov3RhPI65jTFG73kAADS3I"]
[Sat Aug 29 05:09:42.559376 2026] [security2:error] [pid 1321:tid 1524] [client 52.139.37.240:31522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/update/da222.php"] [unique_id "apK99mjCPtor9NZ-byTUaQAABmA"]
[Sat Aug 29 05:09:42.563127 2026] [security2:error] [pid 1041789:tid 1041935] [client 4.205.62.107:25018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/old_phpinfo.php"] [unique_id "apK99ov3RhPI65jTFG73lgAAAyI"]
[Sat Aug 29 05:09:42.565880 2026] [security2:error] [pid 1321:tid 1514] [client 20.63.81.20:46363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/images.php"] [unique_id "apK99mjCPtor9NZ-byTUagAABlY"]
[Sat Aug 29 05:09:42.601375 2026] [security2:error] [pid 1041789:tid 1041981] [client 74.248.24.12:37849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/222.php"] [unique_id "apK99ov3RhPI65jTFG73nQAAA1A"]
[Sat Aug 29 05:09:42.606971 2026] [security2:error] [pid 1321:tid 1508] [client 20.52.41.200:4364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-access.php"] [unique_id "apK99mjCPtor9NZ-byTUawAABlA"]
[Sat Aug 29 05:09:42.640795 2026] [security2:error] [pid 1321:tid 1518] [client 4.205.62.107:51398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/ws61.php"] [unique_id "apK99mjCPtor9NZ-byTUbAAABlo"]
[Sat Aug 29 05:09:42.641228 2026] [security2:error] [pid 1321:tid 1555] [client 114.119.151.233:27385] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.classiclightingusa.com"] [uri "/catalog/index.php/cPath/8/osCsid/595dd66ebf8976b41151e2510ff298df"] [unique_id "apK99mjCPtor9NZ-byTUbQAABn4"], referer: http://www.classiclightingusa.com/catalog/index.php/cPath/3/osCsid/595dd66ebf8976b41151e2510ff298df
[Sat Aug 29 05:09:42.652510 2026] [security2:error] [pid 1041789:tid 1041995] [client 68.155.159.216:5984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-mail.php"] [unique_id "apK99ov3RhPI65jTFG73rAAAA14"]
[Sat Aug 29 05:09:42.657136 2026] [security2:error] [pid 1041789:tid 1041949] [client 20.48.160.90:50559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/d7.php"] [unique_id "apK99ov3RhPI65jTFG73sAAAAzA"]
[Sat Aug 29 05:09:42.658344 2026] [security2:error] [pid 1041789:tid 1042052] [client 4.205.62.107:6965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/ccou.php"] [unique_id "apK99ov3RhPI65jTFG73swAAA5c"]
[Sat Aug 29 05:09:42.663758 2026] [security2:error] [pid 1321:tid 1549] [client 20.63.81.20:63711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/jw.php"] [unique_id "apK99mjCPtor9NZ-byTUcAAABng"]
[Sat Aug 29 05:09:42.668749 2026] [security2:error] [pid 1041789:tid 1042046] [client 20.63.81.20:39877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/wp-admin/css/colors/coffee/marijuana.php"] [unique_id "apK99ov3RhPI65jTFG73tgAAA5E"]
[Sat Aug 29 05:09:42.677567 2026] [security2:error] [pid 1041789:tid 1041946] [client 20.151.200.44:63695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/baee.php"] [unique_id "apK99ov3RhPI65jTFG73xAAAAy0"]
[Sat Aug 29 05:09:42.680609 2026] [security2:error] [pid 1321:tid 1561] [client 4.205.62.107:62756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/25.php"] [unique_id "apK99mjCPtor9NZ-byTUcwAABoQ"]
[Sat Aug 29 05:09:42.688064 2026] [security2:error] [pid 1041789:tid 1042042] [client 20.63.81.20:55676] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/she11.php"] [unique_id "apK99ov3RhPI65jTFG730gAAA40"]
[Sat Aug 29 05:09:42.693525 2026] [security2:error] [pid 1041789:tid 1041997] [client 68.155.159.216:38591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-admin/index.php"] [unique_id "apK99ov3RhPI65jTFG731QAAA2A"]
[Sat Aug 29 05:09:42.696220 2026] [security2:error] [pid 1321:tid 1554] [client 20.63.81.20:46431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/ops.php"] [unique_id "apK99mjCPtor9NZ-byTUdQAABn0"]
[Sat Aug 29 05:09:42.698438 2026] [cgid:error] [pid 1041789:tid 1041817] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:42.701337 2026] [security2:error] [pid 1321:tid 1534] [client 20.220.204.93:50744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/w1px.php"] [unique_id "apK99mjCPtor9NZ-byTUdgAABmo"]
[Sat Aug 29 05:09:42.709741 2026] [security2:error] [pid 1321:tid 1517] [client 158.23.147.79:28078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/asd.php"] [unique_id "apK99mjCPtor9NZ-byTUeAAABlk"]
[Sat Aug 29 05:09:42.712259 2026] [core:error] [pid 1041789:tid 1042029] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.712279 2026] [core:error] [pid 1041789:tid 1042029] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.713320 2026] [security2:error] [pid 1041789:tid 1042028] [client 68.155.159.216:64093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/NewFile.php/"] [unique_id "apK99ov3RhPI65jTFG733wAAA38"]
[Sat Aug 29 05:09:42.714012 2026] [core:error] [pid 1321:tid 1536] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.714028 2026] [core:error] [pid 1321:tid 1536] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.715174 2026] [security2:error] [pid 1041789:tid 1041906] [remote 34.74.130.21:35732] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/.github/.env"] [unique_id "apK99ov3RhPI65jTFG733gADkGg"]
[Sat Aug 29 05:09:42.719973 2026] [core:error] [pid 1321:tid 1532] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.719991 2026] [core:error] [pid 1321:tid 1532] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.721166 2026] [core:error] [pid 1041789:tid 1042056] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.721180 2026] [core:error] [pid 1041789:tid 1042056] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.721315 2026] [core:error] [pid 1321:tid 1566] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.721332 2026] [core:error] [pid 1321:tid 1566] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.722016 2026] [core:error] [pid 1321:tid 1511] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.722032 2026] [core:error] [pid 1321:tid 1511] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.723890 2026] [core:error] [pid 1321:tid 1579] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.723904 2026] [core:error] [pid 1321:tid 1579] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.741695 2026] [security2:error] [pid 1041789:tid 1041992] [client 4.232.148.111:29770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-cron.php"] [unique_id "apK99ov3RhPI65jTFG739AAAA1s"]
[Sat Aug 29 05:09:42.763097 2026] [core:error] [pid 1321:tid 1567] [client 52.139.37.240:31044] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.763115 2026] [core:error] [pid 1321:tid 1567] [client 52.139.37.240:31044] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.763885 2026] [core:error] [pid 1321:tid 1586] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.763904 2026] [core:error] [pid 1321:tid 1586] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.774816 2026] [security2:error] [pid 1041789:tid 1041888] [remote 93.123.109.228:55834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyer.com"] [uri "/php-info.php"] [unique_id "apK99ov3RhPI65jTFG73-QADUFY"]
[Sat Aug 29 05:09:42.775218 2026] [security2:error] [pid 1041789:tid 1041917] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/php-info.php"] [unique_id "apK99ov3RhPI65jTFG73_AADk3M"]
[Sat Aug 29 05:09:42.775492 2026] [security2:error] [pid 1041789:tid 1041888] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/php.php"] [unique_id "apK99ov3RhPI65jTFG73_gADk1Y"]
[Sat Aug 29 05:09:42.782674 2026] [core:error] [pid 1041789:tid 1041901] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.782694 2026] [core:error] [pid 1041789:tid 1041901] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.789848 2026] [security2:error] [pid 1321:tid 1569] [client 20.48.160.90:50532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/v5.php"] [unique_id "apK99mjCPtor9NZ-byTUiQAABow"]
[Sat Aug 29 05:09:42.792720 2026] [security2:error] [pid 1041789:tid 1041894] [remote 93.123.109.228:55834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyer.com"] [uri "/php.php"] [unique_id "apK99ov3RhPI65jTFG74AQADUFw"]
[Sat Aug 29 05:09:42.794002 2026] [security2:error] [pid 1041789:tid 1041883] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/php_info.php"] [unique_id "apK99ov3RhPI65jTFG74AgADk1E"]
[Sat Aug 29 05:09:42.794707 2026] [security2:error] [pid 1041789:tid 1041902] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/phpinfo.php"] [unique_id "apK99ov3RhPI65jTFG74BAADk2Q"]
[Sat Aug 29 05:09:42.799225 2026] [security2:error] [pid 1041789:tid 1041897] [remote 93.123.109.228:55834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyer.com"] [uri "/php_info.php"] [unique_id "apK99ov3RhPI65jTFG74BgADRl8"]
[Sat Aug 29 05:09:42.803089 2026] [core:error] [pid 1041789:tid 1041981] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.803104 2026] [core:error] [pid 1041789:tid 1041981] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.803136 2026] [security2:error] [pid 1041789:tid 1041979] [client 93.123.109.228:54950] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/website/.env"] [unique_id "apK99ov3RhPI65jTFG74CQAAA04"]
[Sat Aug 29 05:09:42.808549 2026] [security2:error] [pid 1321:tid 1571] [client 4.205.62.107:9000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/wander.php"] [unique_id "apK99mjCPtor9NZ-byTUiwAABo4"]
[Sat Aug 29 05:09:42.810622 2026] [core:error] [pid 1321:tid 1588] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.810640 2026] [core:error] [pid 1321:tid 1588] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.813385 2026] [security2:error] [pid 1321:tid 1591] [client 20.104.49.130:57725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/tool.php"] [unique_id "apK99mjCPtor9NZ-byTUjAAABqI"]
[Sat Aug 29 05:09:42.827665 2026] [security2:error] [pid 1041789:tid 1042035] [client 93.123.109.228:55118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gkuhns.info"] [uri "/wp-config.php"] [unique_id "apK99ov3RhPI65jTFG74DAAAA4Y"]
[Sat Aug 29 05:09:42.829960 2026] [core:error] [pid 1321:tid 1564] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.829977 2026] [core:error] [pid 1321:tid 1564] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.848780 2026] [security2:error] [pid 1321:tid 1601] [client 20.220.204.93:50724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/to.php"] [unique_id "apK99mjCPtor9NZ-byTUjwAABqw"]
[Sat Aug 29 05:09:42.851516 2026] [security2:error] [pid 1321:tid 1563] [client 40.83.93.50:17672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/1p.php"] [unique_id "apK99mjCPtor9NZ-byTUkAAABoY"]
[Sat Aug 29 05:09:42.853559 2026] [security2:error] [pid 1041789:tid 1041910] [remote 93.123.109.228:55834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyer.com"] [uri "/phpinfo.php"] [unique_id "apK99ov3RhPI65jTFG74EAADjWw"]
[Sat Aug 29 05:09:42.867949 2026] [security2:error] [pid 1041789:tid 1041972] [client 93.123.109.228:55082] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.gkuhns.info"] [uri "/wp-config.php.bak"] [unique_id "apK99ov3RhPI65jTFG74FQAAA0c"]
[Sat Aug 29 05:09:42.877582 2026] [security2:error] [pid 1041789:tid 1041810] [remote 93.123.109.228:39364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glamrus.rocks"] [uri "/test.php"] [unique_id "apK99ov3RhPI65jTFG74HgADLQg"]
[Sat Aug 29 05:09:42.897153 2026] [security2:error] [pid 1321:tid 1598] [client 68.155.159.216:18265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/.well-knownold/index.php"] [unique_id "apK99mjCPtor9NZ-byTUkwAABqk"]
[Sat Aug 29 05:09:42.898106 2026] [security2:error] [pid 1321:tid 1609] [client 4.205.62.107:3408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/requirements.php"] [unique_id "apK99mjCPtor9NZ-byTUlAAABrQ"]
[Sat Aug 29 05:09:42.900117 2026] [security2:error] [pid 1041789:tid 1042056] [client 93.123.109.228:54816] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.gkuhns.info"] [uri "/wp-config.php.new"] [unique_id "apK99ov3RhPI65jTFG74JQAAA5s"]
[Sat Aug 29 05:09:42.909201 2026] [security2:error] [pid 1041789:tid 1041936] [client 93.123.109.228:54790] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.gkuhns.info"] [uri "/wp-config.php.old"] [unique_id "apK99ov3RhPI65jTFG74JgAAAyM"]
[Sat Aug 29 05:09:42.915526 2026] [security2:error] [pid 1321:tid 1490] [client 45.148.10.62:33998] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "mail.xtj.otn.mybluehost.me"] [uri "/wp-config.php.old"] [unique_id "apK99mjCPtor9NZ-byTUlQAABj4"]
[Sat Aug 29 05:09:42.925196 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.48.160.90:50433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/az.php"] [unique_id "apK99ov3RhPI65jTFG74KwAAA30"]
[Sat Aug 29 05:09:42.927002 2026] [security2:error] [pid 1041789:tid 1041976] [client 158.23.147.79:17494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/about.php"] [unique_id "apK99ov3RhPI65jTFG74LAAAA0s"]
[Sat Aug 29 05:09:42.944609 2026] [security2:error] [pid 1041789:tid 1041957] [client 20.48.250.41:53419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/elp.php"] [unique_id "apK99ov3RhPI65jTFG74MQAAAzg"]
[Sat Aug 29 05:09:42.949504 2026] [core:error] [pid 1041789:tid 1041866] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.949527 2026] [core:error] [pid 1041789:tid 1041866] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:42.949674 2026] [security2:error] [pid 1321:tid 1560] [client 20.48.250.41:50311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/elp.php"] [unique_id "apK99mjCPtor9NZ-byTUlwAABoM"]
[Sat Aug 29 05:09:42.950309 2026] [security2:error] [pid 1041789:tid 1041836] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/portal/.env"] [unique_id "apK99ov3RhPI65jTFG74MwADViI"]
[Sat Aug 29 05:09:42.950963 2026] [security2:error] [pid 1041789:tid 1041957] [client 68.155.159.216:9261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK99ov3RhPI65jTFG74NwAAAzg"]
[Sat Aug 29 05:09:42.958847 2026] [security2:error] [pid 1041789:tid 1041844] [remote 198.54.126.229:34034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 229.126.54.198.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/wp-login.php"] [unique_id "apK99ov3RhPI65jTFG74LQADdio"]
[Sat Aug 29 05:09:42.960214 2026] [security2:error] [pid 1041789:tid 1041868] [remote 34.138.144.127:46132] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/config/.env"] [unique_id "apK99ov3RhPI65jTFG74PAADH0I"]
[Sat Aug 29 05:09:42.960670 2026] [security2:error] [pid 1041789:tid 1041922] [remote 34.138.144.127:46132] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/api/.env"] [unique_id "apK99ov3RhPI65jTFG74OgADH3g"]
[Sat Aug 29 05:09:42.961296 2026] [security2:error] [pid 1041789:tid 1041853] [remote 34.138.144.127:46132] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/.env.old"] [unique_id "apK99ov3RhPI65jTFG74OwADHzM"]
[Sat Aug 29 05:09:42.962283 2026] [security2:error] [pid 1321:tid 1607] [client 52.139.37.240:31140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/wp-admin/min.php"] [unique_id "apK99mjCPtor9NZ-byTUmAAABrI"]
[Sat Aug 29 05:09:42.963425 2026] [cgid:error] [pid 1041789:tid 1041822] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:42.963867 2026] [security2:error] [pid 1041789:tid 1041935] [client 103.215.74.26:59370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.74.215.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.com"] [uri "/index.php"] [unique_id "apK99ov3RhPI65jTFG74PgAAAyI"]
[Sat Aug 29 05:09:42.965803 2026] [security2:error] [pid 1041789:tid 1041904] [remote 34.138.144.127:46132] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/.env.bak"] [unique_id "apK99ov3RhPI65jTFG74QQADH2Y"]
[Sat Aug 29 05:09:42.978399 2026] [security2:error] [pid 1321:tid 1610] [client 4.232.148.111:11914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-content/themes/about.php"] [unique_id "apK99mjCPtor9NZ-byTUmgAABrU"]
[Sat Aug 29 05:09:42.985050 2026] [security2:error] [pid 1321:tid 1488] [client 20.48.250.41:33879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/0x0x.php"] [unique_id "apK99mjCPtor9NZ-byTUmwAABjw"]
[Sat Aug 29 05:09:43.007240 2026] [security2:error] [pid 1041789:tid 1042006] [client 158.23.147.79:6053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK994v3RhPI65jTFG74SQAAA2k"]
[Sat Aug 29 05:09:43.024756 2026] [security2:error] [pid 1041789:tid 1041830] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/prod/.env"] [unique_id "apK994v3RhPI65jTFG74UwADlBw"]
[Sat Aug 29 05:09:43.035328 2026] [security2:error] [pid 1041789:tid 1041876] [remote 93.123.109.228:55834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyer.com"] [uri "/public/phpinfo.php"] [unique_id "apK994v3RhPI65jTFG74XAADjUo"]
[Sat Aug 29 05:09:43.041422 2026] [security2:error] [pid 1041789:tid 1041834] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/project/.env"] [unique_id "apK994v3RhPI65jTFG74YgADlCA"]
[Sat Aug 29 05:09:43.042429 2026] [security2:error] [pid 1041789:tid 1041827] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/public/phpinfo.php"] [unique_id "apK994v3RhPI65jTFG74ZwADlBk"]
[Sat Aug 29 05:09:43.042657 2026] [security2:error] [pid 1041789:tid 1041812] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/production/.env"] [unique_id "apK994v3RhPI65jTFG74YQADlAo"]
[Sat Aug 29 05:09:43.042658 2026] [security2:error] [pid 1041789:tid 1041885] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/public-api/.env"] [unique_id "apK994v3RhPI65jTFG74ZQADlFM"]
[Sat Aug 29 05:09:43.042863 2026] [security2:error] [pid 1041789:tid 1041918] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/product/.env"] [unique_id "apK994v3RhPI65jTFG74ZAADlHQ"]
[Sat Aug 29 05:09:43.046273 2026] [core:error] [pid 1041789:tid 1041850] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.046292 2026] [core:error] [pid 1041789:tid 1041850] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.048740 2026] [core:error] [pid 1041789:tid 1041817] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.048759 2026] [core:error] [pid 1041789:tid 1041817] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.049342 2026] [security2:error] [pid 1041789:tid 1041874] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/public/.env"] [unique_id "apK994v3RhPI65jTFG74awADlEg"]
[Sat Aug 29 05:09:43.050946 2026] [security2:error] [pid 1041789:tid 1041951] [client 93.123.109.228:55134] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "cpcontacts.gkuhns.info"] [uri "/___proxy_subdomain_cpcontacts/wp-content/mysql.sql"] [unique_id "apK994v3RhPI65jTFG74cgAAAzI"]
[Sat Aug 29 05:09:43.052419 2026] [security2:error] [pid 1321:tid 1605] [client 74.248.24.12:26331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/php8.php"] [unique_id "apK992jCPtor9NZ-byTUpgAABrA"]
[Sat Aug 29 05:09:43.053892 2026] [security2:error] [pid 1321:tid 1500] [client 20.220.204.93:50805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/thui.php"] [unique_id "apK992jCPtor9NZ-byTUpwAABkg"]
[Sat Aug 29 05:09:43.055271 2026] [security2:error] [pid 1321:tid 1605] [client 20.48.250.41:45320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK992jCPtor9NZ-byTUqAAABrA"]
[Sat Aug 29 05:09:43.067789 2026] [security2:error] [pid 1321:tid 1600] [client 20.52.41.200:5283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-content/uploads/min.php"] [unique_id "apK992jCPtor9NZ-byTUqwAABqs"]
[Sat Aug 29 05:09:43.071347 2026] [cgid:error] [pid 1041789:tid 1041845] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:43.071847 2026] [security2:error] [pid 1041789:tid 1041819] [remote 47.128.32.211:53858] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.ab-mac.com"] [uri "/label/transfer-logo-printing-machine/"] [unique_id "apK994v3RhPI65jTFG74fAADhhE"]
[Sat Aug 29 05:09:43.074709 2026] [core:error] [pid 1321:tid 1496] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.074732 2026] [core:error] [pid 1321:tid 1496] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.075019 2026] [core:error] [pid 1041789:tid 1042046] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.075033 2026] [core:error] [pid 1041789:tid 1042046] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.075238 2026] [core:error] [pid 1321:tid 1531] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.075250 2026] [core:error] [pid 1321:tid 1531] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.075895 2026] [security2:error] [pid 1041789:tid 1042020] [client 20.48.250.41:49332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/h02ugyh.php"] [unique_id "apK994v3RhPI65jTFG74fwAAA3c"]
[Sat Aug 29 05:09:43.076076 2026] [security2:error] [pid 1041789:tid 1042034] [client 20.48.160.90:45385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/js.php"] [unique_id "apK994v3RhPI65jTFG74gAAAA4U"]
[Sat Aug 29 05:09:43.078046 2026] [security2:error] [pid 1321:tid 1519] [client 20.104.49.130:60747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/pfm.php"] [unique_id "apK992jCPtor9NZ-byTUrQAABls"]
[Sat Aug 29 05:09:43.079780 2026] [core:error] [pid 1321:tid 1504] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.079804 2026] [core:error] [pid 1321:tid 1504] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.080052 2026] [core:error] [pid 1041789:tid 1042030] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.080064 2026] [core:error] [pid 1041789:tid 1042030] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.089765 2026] [security2:error] [pid 1321:tid 1528] [client 20.48.250.41:50033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/35.php"] [unique_id "apK992jCPtor9NZ-byTUrgAABmQ"]
[Sat Aug 29 05:09:43.095733 2026] [security2:error] [pid 1041789:tid 1041961] [client 93.123.109.228:55008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK994v3RhPI65jTFG74hgAAAzw"]
[Sat Aug 29 05:09:43.102902 2026] [security2:error] [pid 1041789:tid 1041998] [client 20.48.250.41:65274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/ckk.php"] [unique_id "apK994v3RhPI65jTFG74igAAA2E"]
[Sat Aug 29 05:09:43.104869 2026] [security2:error] [pid 1041789:tid 1041911] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/public_html/.env"] [unique_id "apK994v3RhPI65jTFG74iAADRG0"]
[Sat Aug 29 05:09:43.109168 2026] [security2:error] [pid 1321:tid 1544] [client 20.48.250.41:50429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/666.php"] [unique_id "apK992jCPtor9NZ-byTUrwAABnQ"]
[Sat Aug 29 05:09:43.132635 2026] [security2:error] [pid 1321:tid 1545] [client 158.23.147.79:11357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-includes/content.php"] [unique_id "apK992jCPtor9NZ-byTUsgAABnU"]
[Sat Aug 29 05:09:43.135573 2026] [security2:error] [pid 1321:tid 1551] [client 158.23.147.79:62722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/chosen.php"] [unique_id "apK992jCPtor9NZ-byTUswAABno"]
[Sat Aug 29 05:09:43.136758 2026] [security2:error] [pid 1041789:tid 1041950] [client 74.248.24.12:37738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/mini.php"] [unique_id "apK994v3RhPI65jTFG74lgAAAzE"]
[Sat Aug 29 05:09:43.137678 2026] [core:error] [pid 1041789:tid 1042014] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.137695 2026] [core:error] [pid 1041789:tid 1042014] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.151338 2026] [security2:error] [pid 1041789:tid 1042056] [client 20.48.250.41:53392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/666.php"] [unique_id "apK994v3RhPI65jTFG74mwAAA5s"]
[Sat Aug 29 05:09:43.159102 2026] [security2:error] [pid 1041789:tid 1041990] [client 52.139.37.240:31116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/wp-admin/wp-fileesx-449.php"] [unique_id "apK994v3RhPI65jTFG74nQAAA1k"]
[Sat Aug 29 05:09:43.167322 2026] [security2:error] [pid 1321:tid 1555] [client 68.155.159.216:65045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-includes/index.php"] [unique_id "apK992jCPtor9NZ-byTUtAAABn4"]
[Sat Aug 29 05:09:43.185255 2026] [security2:error] [pid 1041789:tid 1041821] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/qa/.env"] [unique_id "apK994v3RhPI65jTFG74owADOBM"]
[Sat Aug 29 05:09:43.195781 2026] [cgid:error] [pid 1041789:tid 1041891] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:43.199806 2026] [cgid:error] [pid 1041789:tid 1041865] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:43.200040 2026] [cgid:error] [pid 1041789:tid 1041860] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:43.214001 2026] [security2:error] [pid 1321:tid 1517] [client 20.48.160.90:50460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/hd.php"] [unique_id "apK992jCPtor9NZ-byTUuAAABlk"]
[Sat Aug 29 05:09:43.219587 2026] [security2:error] [pid 1041789:tid 1042057] [client 20.48.250.41:45366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/06.php"] [unique_id "apK994v3RhPI65jTFG74vAAAA5w"]
[Sat Aug 29 05:09:43.230423 2026] [security2:error] [pid 1321:tid 1503] [client 4.232.148.111:30980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-block.php"] [unique_id "apK992jCPtor9NZ-byTUuwAABks"]
[Sat Aug 29 05:09:43.232204 2026] [security2:error] [pid 1321:tid 1584] [client 4.205.62.107:61697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/lala.php"] [unique_id "apK992jCPtor9NZ-byTUvAAABps"]
[Sat Aug 29 05:09:43.243530 2026] [core:error] [pid 1041789:tid 1042032] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.243559 2026] [core:error] [pid 1041789:tid 1042032] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.246734 2026] [core:error] [pid 1321:tid 1583] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.246756 2026] [core:error] [pid 1321:tid 1583] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.246781 2026] [core:error] [pid 1041789:tid 1042017] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.246795 2026] [core:error] [pid 1041789:tid 1042017] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.247990 2026] [core:error] [pid 1321:tid 1553] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.248008 2026] [core:error] [pid 1321:tid 1553] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.248279 2026] [core:error] [pid 1321:tid 1582] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.248291 2026] [core:error] [pid 1321:tid 1582] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.253202 2026] [core:error] [pid 1321:tid 1567] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.253220 2026] [core:error] [pid 1321:tid 1567] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.253645 2026] [core:error] [pid 1321:tid 1587] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.253662 2026] [core:error] [pid 1321:tid 1587] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.272841 2026] [core:error] [pid 1041789:tid 1042006] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.272863 2026] [core:error] [pid 1041789:tid 1042006] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.274340 2026] [security2:error] [pid 1041789:tid 1041971] [client 20.48.250.41:19421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/xxw.php"] [unique_id "apK994v3RhPI65jTFG740QAAA0Y"]
[Sat Aug 29 05:09:43.275435 2026] [security2:error] [pid 1321:tid 1572] [client 20.48.250.41:49436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.betwixtpodcast.com"] [uri "/R57.php"] [unique_id "apK992jCPtor9NZ-byTUwwAABo8"]
[Sat Aug 29 05:09:43.277109 2026] [security2:error] [pid 1041789:tid 1042040] [client 20.48.250.41:34444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/166.php"] [unique_id "apK994v3RhPI65jTFG741AAAA4s"]
[Sat Aug 29 05:09:43.278630 2026] [security2:error] [pid 1041789:tid 1041975] [client 93.123.109.228:54998] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/admin-app/.env"] [unique_id "apK994v3RhPI65jTFG741QAAA0o"]
[Sat Aug 29 05:09:43.288411 2026] [security2:error] [pid 1321:tid 1563] [client 20.48.250.41:50328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/knmt.php"] [unique_id "apK992jCPtor9NZ-byTUxAAABoY"]
[Sat Aug 29 05:09:43.289465 2026] [security2:error] [pid 1041789:tid 1041944] [client 20.220.204.93:50791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/Jcrop.php"] [unique_id "apK994v3RhPI65jTFG743wAAAys"]
[Sat Aug 29 05:09:43.303499 2026] [core:error] [pid 1041789:tid 1042051] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.303521 2026] [core:error] [pid 1041789:tid 1042051] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.309433 2026] [cgid:error] [pid 1041789:tid 1041925] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:43.312212 2026] [core:error] [pid 1041789:tid 1041991] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.312234 2026] [core:error] [pid 1041789:tid 1041991] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.316775 2026] [security2:error] [pid 1321:tid 1602] [client 20.48.250.41:53463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/knmt.php"] [unique_id "apK992jCPtor9NZ-byTUxQAABq0"]
[Sat Aug 29 05:09:43.323215 2026] [core:error] [pid 1041789:tid 1041998] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.323236 2026] [core:error] [pid 1041789:tid 1041998] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.324393 2026] [core:error] [pid 1041789:tid 1042027] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.324415 2026] [core:error] [pid 1041789:tid 1042027] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.328413 2026] [security2:error] [pid 1321:tid 1581] [client 68.155.159.216:33623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/cong.php"] [unique_id "apK992jCPtor9NZ-byTUxgAABpg"]
[Sat Aug 29 05:09:43.329394 2026] [core:error] [pid 1041789:tid 1042033] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.329421 2026] [core:error] [pid 1041789:tid 1042033] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.335973 2026] [security2:error] [pid 1041789:tid 1041987] [client 40.83.93.50:17677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/Njima.php"] [unique_id "apK994v3RhPI65jTFG74-QAAA1Y"]
[Sat Aug 29 05:09:43.343424 2026] [core:error] [pid 1041789:tid 1041950] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.343440 2026] [core:error] [pid 1041789:tid 1041950] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.345934 2026] [security2:error] [pid 1041789:tid 1042011] [client 20.48.160.90:45400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/xl2023.php"] [unique_id "apK994v3RhPI65jTFG74_wAAA24"]
[Sat Aug 29 05:09:43.354476 2026] [cgid:error] [pid 1041789:tid 1041836] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:43.355725 2026] [cgid:error] [pid 1041789:tid 1041803] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:43.356100 2026] [security2:error] [pid 1041789:tid 1042000] [client 52.139.37.240:31495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/wp-content/themes/min.php"] [unique_id "apK994v3RhPI65jTFG75CQAAA2M"]
[Sat Aug 29 05:09:43.356136 2026] [security2:error] [pid 1041789:tid 1041918] [remote 34.138.144.127:46132] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/.github/.env"] [unique_id "apK994v3RhPI65jTFG75BwADIXQ"]
[Sat Aug 29 05:09:43.356506 2026] [security2:error] [pid 1321:tid 1560] [client 20.48.250.41:45957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/class.php"] [unique_id "apK992jCPtor9NZ-byTUzwAABoM"]
[Sat Aug 29 05:09:43.358381 2026] [cgid:error] [pid 1041789:tid 1041812] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:43.359010 2026] [cgid:error] [pid 1041789:tid 1041830] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:43.360972 2026] [core:error] [pid 1321:tid 1593] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.360993 2026] [core:error] [pid 1321:tid 1593] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.388924 2026] [security2:error] [pid 1321:tid 1574] [client 68.155.159.216:33552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK992jCPtor9NZ-byTU0wAABpE"]
[Sat Aug 29 05:09:43.388934 2026] [security2:error] [pid 1321:tid 1607] [client 4.205.62.107:21853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/gjm.php"] [unique_id "apK992jCPtor9NZ-byTU1AAABrI"]
[Sat Aug 29 05:09:43.390451 2026] [core:error] [pid 1321:tid 1611] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.390472 2026] [core:error] [pid 1321:tid 1611] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.396469 2026] [security2:error] [pid 1041789:tid 1042032] [client 20.48.250.41:50013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/maraz.php"] [unique_id "apK994v3RhPI65jTFG75FwAAA4M"]
[Sat Aug 29 05:09:43.408306 2026] [security2:error] [pid 1041789:tid 1042010] [client 93.123.109.165:44834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "microprocesos.com"] [uri "/index.php"] [unique_id "apK994v3RhPI65jTFG75HgAAA20"]
[Sat Aug 29 05:09:43.412895 2026] [security2:error] [pid 1321:tid 1491] [client 20.48.250.41:34469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/h2a2ck.php"] [unique_id "apK992jCPtor9NZ-byTU1QAABj8"]
[Sat Aug 29 05:09:43.421014 2026] [security2:error] [pid 1041789:tid 1041956] [client 68.155.159.216:65033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/lock.php"] [unique_id "apK994v3RhPI65jTFG75HwAAAzc"]
[Sat Aug 29 05:09:43.424117 2026] [security2:error] [pid 1321:tid 1507] [client 20.48.250.41:50320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/sbhu.php"] [unique_id "apK992jCPtor9NZ-byTU1wAABk8"]
[Sat Aug 29 05:09:43.440825 2026] [core:error] [pid 1321:tid 1500] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.440848 2026] [core:error] [pid 1321:tid 1500] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.443549 2026] [security2:error] [pid 1321:tid 1558] [client 4.232.148.111:26824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK992jCPtor9NZ-byTU3QAABoE"]
[Sat Aug 29 05:09:43.445340 2026] [core:error] [pid 1321:tid 1605] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.445373 2026] [core:error] [pid 1321:tid 1605] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.447868 2026] [security2:error] [pid 1321:tid 1531] [client 20.48.250.41:49398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/bolt.php"] [unique_id "apK992jCPtor9NZ-byTU3wAABmc"]
[Sat Aug 29 05:09:43.454016 2026] [security2:error] [pid 1041789:tid 1041947] [client 93.123.109.228:54972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/admin/phpinfo.php"] [unique_id "apK994v3RhPI65jTFG75MQAAAy4"]
[Sat Aug 29 05:09:43.458545 2026] [security2:error] [pid 1041789:tid 1041972] [client 158.23.147.79:62711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-content/themes/too.php"] [unique_id "apK994v3RhPI65jTFG75NAAAA0c"]
[Sat Aug 29 05:09:43.484149 2026] [security2:error] [pid 1321:tid 1598] [client 68.155.159.216:49221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK992jCPtor9NZ-byTU4QAABqk"]
[Sat Aug 29 05:09:43.486639 2026] [security2:error] [pid 1321:tid 1519] [client 20.220.204.93:50693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/ws58.php"] [unique_id "apK992jCPtor9NZ-byTU4gAABls"]
[Sat Aug 29 05:09:43.496891 2026] [core:error] [pid 1041789:tid 1042005] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.496914 2026] [core:error] [pid 1041789:tid 1042005] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.505174 2026] [core:error] [pid 1321:tid 1504] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.505198 2026] [core:error] [pid 1321:tid 1504] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.512495 2026] [core:error] [pid 1041789:tid 1042034] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.512512 2026] [core:error] [pid 1041789:tid 1042034] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.512866 2026] [core:error] [pid 1041789:tid 1041967] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.512880 2026] [core:error] [pid 1041789:tid 1041967] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.513094 2026] [security2:error] [pid 1041789:tid 1041965] [client 20.48.250.41:45316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/8.php"] [unique_id "apK994v3RhPI65jTFG75SwAAA0A"]
[Sat Aug 29 05:09:43.513311 2026] [security2:error] [pid 1321:tid 1514] [client 149.34.210.141:61666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK992jCPtor9NZ-byTU5wAABlY"]
[Sat Aug 29 05:09:43.513431 2026] [security2:error] [pid 1321:tid 1514] [client 149.34.210.141:61666] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK992jCPtor9NZ-byTU5wAABlY"]
[Sat Aug 29 05:09:43.513809 2026] [core:error] [pid 1041789:tid 1042049] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.513820 2026] [core:error] [pid 1041789:tid 1042049] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.514932 2026] [security2:error] [pid 1041789:tid 1042021] [client 107.145.13.164:62550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 164.13.145.107.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK994v3RhPI65jTFG75TQAAA3g"]
[Sat Aug 29 05:09:43.515064 2026] [security2:error] [pid 1041789:tid 1042021] [client 107.145.13.164:62550] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK994v3RhPI65jTFG75TQAAA3g"]
[Sat Aug 29 05:09:43.516799 2026] [core:error] [pid 1321:tid 1494] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.516813 2026] [core:error] [pid 1321:tid 1494] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.517433 2026] [security2:error] [pid 1321:tid 1512] [client 20.48.250.41:53422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/sbhu.php"] [unique_id "apK992jCPtor9NZ-byTU6AAABlQ"]
[Sat Aug 29 05:09:43.517796 2026] [security2:error] [pid 1041789:tid 1042055] [client 20.48.160.90:50492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/V2.php"] [unique_id "apK994v3RhPI65jTFG75TgAAA5o"]
[Sat Aug 29 05:09:43.538775 2026] [authz_core:error] [pid 1041789:tid 1041878] [remote 34.138.144.127:46132] AH01630: client denied by server configuration: /home3/zenicane/public_html/studiopasa/.htpasswd
[Sat Aug 29 05:09:43.538993 2026] [core:error] [pid 1041789:tid 1041987] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.539007 2026] [core:error] [pid 1041789:tid 1041987] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.540372 2026] [core:error] [pid 1041789:tid 1041940] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.540403 2026] [core:error] [pid 1041789:tid 1041940] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.542969 2026] [core:error] [pid 1041789:tid 1042056] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.542988 2026] [core:error] [pid 1041789:tid 1042056] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.544440 2026] [security2:error] [pid 1041789:tid 1041980] [client 20.52.41.200:4392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK994v3RhPI65jTFG75WgAAA08"]
[Sat Aug 29 05:09:43.546156 2026] [cgid:error] [pid 1041789:tid 1041851] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:43.546345 2026] [core:error] [pid 1041789:tid 1042007] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.546368 2026] [core:error] [pid 1041789:tid 1042007] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.546772 2026] [cgid:error] [pid 1041789:tid 1041882] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:43.550897 2026] [cgid:error] [pid 1041789:tid 1041808] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:43.553204 2026] [security2:error] [pid 1321:tid 1518] [client 93.123.109.228:46720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/admin_phpinfo.php"] [unique_id "apK992jCPtor9NZ-byTU6gAABlo"]
[Sat Aug 29 05:09:43.558672 2026] [cgid:error] [pid 1041789:tid 1041895] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:43.560366 2026] [security2:error] [pid 1321:tid 1513] [client 52.139.37.240:31516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/wp-content/themes/x/bypass.php"] [unique_id "apK992jCPtor9NZ-byTU7AAABlU"]
[Sat Aug 29 05:09:43.560733 2026] [cgid:error] [pid 1041789:tid 1041871] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:43.576256 2026] [core:error] [pid 1041789:tid 1041945] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.576276 2026] [core:error] [pid 1041789:tid 1041945] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.591970 2026] [security2:error] [pid 1041789:tid 1042001] [client 93.123.109.228:55066] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/api-backend/.env"] [unique_id "apK994v3RhPI65jTFG75cAAAA2Q"]
[Sat Aug 29 05:09:43.593295 2026] [security2:error] [pid 1041789:tid 1042047] [client 20.48.250.41:33883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/error_log.php"] [unique_id "apK994v3RhPI65jTFG75cQAAA5I"]
[Sat Aug 29 05:09:43.593639 2026] [security2:error] [pid 1041789:tid 1041948] [client 20.48.250.41:19310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/rtx.php"] [unique_id "apK994v3RhPI65jTFG75cgAAAy8"]
[Sat Aug 29 05:09:43.595771 2026] [autoindex:error] [pid 1041789:tid 1041954] [client 74.248.24.12:15953] AH01276: Cannot serve directory /home4/myplumgr/public_html/.well-known/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:09:43.609835 2026] [security2:error] [pid 1041789:tid 1041837] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/s3/.env.bak"] [unique_id "apK994v3RhPI65jTFG75cwADJSM"]
[Sat Aug 29 05:09:43.612376 2026] [security2:error] [pid 1041789:tid 1041975] [client 45.148.10.62:34020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xtj.otn.mybluehost.me"] [uri "/config.php"] [unique_id "apK994v3RhPI65jTFG75dwAAA0o"]
[Sat Aug 29 05:09:43.613724 2026] [security2:error] [pid 1321:tid 1366] [remote 74.7.228.15:41596] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.hwe.tdes64.com"] [uri "/index.php"] [unique_id "apK992jCPtor9NZ-byTU7gAGeAg"]
[Sat Aug 29 05:09:43.617726 2026] [security2:error] [pid 1321:tid 1554] [client 93.123.109.228:46694] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/api-node/.env"] [unique_id "apK992jCPtor9NZ-byTU7wAABn0"]
[Sat Aug 29 05:09:43.627290 2026] [security2:error] [pid 1041789:tid 1042025] [client 68.155.159.216:23439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK994v3RhPI65jTFG75fAAAA3w"]
[Sat Aug 29 05:09:43.630126 2026] [security2:error] [pid 1041789:tid 1041935] [client 20.220.204.93:50771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/xs.php"] [unique_id "apK994v3RhPI65jTFG75fgAAAyI"]
[Sat Aug 29 05:09:43.634002 2026] [core:error] [pid 1041789:tid 1042052] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.634020 2026] [core:error] [pid 1041789:tid 1042052] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.634798 2026] [security2:error] [pid 1041789:tid 1041992] [client 93.123.109.228:54920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/administrator/.env"] [unique_id "apK994v3RhPI65jTFG75bAAAA1s"]
[Sat Aug 29 05:09:43.643482 2026] [security2:error] [pid 1041789:tid 1042035] [client 93.123.109.228:54946] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/api/.env"] [unique_id "apK994v3RhPI65jTFG75ggAAA4Y"]
[Sat Aug 29 05:09:43.647825 2026] [core:error] [pid 1321:tid 1566] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.647846 2026] [core:error] [pid 1321:tid 1566] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.647994 2026] [core:error] [pid 1321:tid 1532] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.648744 2026] [core:error] [pid 1321:tid 1532] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.651991 2026] [security2:error] [pid 1041789:tid 1042017] [client 68.155.159.216:14180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK994v3RhPI65jTFG75hQAAA3Q"]
[Sat Aug 29 05:09:43.656904 2026] [security2:error] [pid 1321:tid 1540] [client 74.248.24.12:5723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/aa.php"] [unique_id "apK992jCPtor9NZ-byTU8gAABnA"]
[Sat Aug 29 05:09:43.657790 2026] [security2:error] [pid 1321:tid 1503] [client 20.48.160.90:50443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/mad.php"] [unique_id "apK992jCPtor9NZ-byTU8wAABks"]
[Sat Aug 29 05:09:43.669732 2026] [security2:error] [pid 1321:tid 1586] [client 20.48.250.41:50010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/kbfr.php"] [unique_id "apK992jCPtor9NZ-byTU9QAABp0"]
[Sat Aug 29 05:09:43.672397 2026] [security2:error] [pid 1321:tid 1584] [client 20.48.250.41:45375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/0x0x.php"] [unique_id "apK992jCPtor9NZ-byTU9AAABps"]
[Sat Aug 29 05:09:43.683194 2026] [core:error] [pid 1321:tid 1534] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.683216 2026] [core:error] [pid 1321:tid 1534] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.687189 2026] [security2:error] [pid 1321:tid 1583] [client 68.155.159.216:2047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-admin.php"] [unique_id "apK992jCPtor9NZ-byTU-AAABpo"]
[Sat Aug 29 05:09:43.689493 2026] [security2:error] [pid 1321:tid 1580] [client 20.48.250.41:53410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/a332.php"] [unique_id "apK992jCPtor9NZ-byTU-QAABpc"]
[Sat Aug 29 05:09:43.700894 2026] [security2:error] [pid 1041789:tid 1042021] [client 4.205.62.107:65485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.body-benefits.net"] [uri "/wp-act.php"] [unique_id "apK994v3RhPI65jTFG75jwAAA3g"]
[Sat Aug 29 05:09:43.707853 2026] [security2:error] [pid 1321:tid 1578] [client 20.48.250.41:50381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/a332.php"] [unique_id "apK992jCPtor9NZ-byTU-gAABpU"]
[Sat Aug 29 05:09:43.711586 2026] [security2:error] [pid 1041789:tid 1041977] [client 68.155.159.216:30611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-content/index.php"] [unique_id "apK994v3RhPI65jTFG75lAAAA0w"]
[Sat Aug 29 05:09:43.714709 2026] [cgid:error] [pid 1041789:tid 1041907] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:43.718341 2026] [security2:error] [pid 1321:tid 1555] [client 4.232.148.111:28838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-includes/fonts/admin.php"] [unique_id "apK992jCPtor9NZ-byTU-wAABn4"]
[Sat Aug 29 05:09:43.726575 2026] [security2:error] [pid 1041789:tid 1041997] [client 20.48.250.41:49406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/ckk.php"] [unique_id "apK994v3RhPI65jTFG75mAAAA2A"]
[Sat Aug 29 05:09:43.736998 2026] [security2:error] [pid 1321:tid 1571] [client 158.23.147.79:6001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/mah.php"] [unique_id "apK992jCPtor9NZ-byTU_AAABo4"]
[Sat Aug 29 05:09:43.742321 2026] [cgid:error] [pid 1041789:tid 1041908] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:43.746164 2026] [cgid:error] [pid 1041789:tid 1041853] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:43.747450 2026] [security2:error] [pid 1041789:tid 1041872] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/server/api/.env"] [unique_id "apK994v3RhPI65jTFG75rQADUUY"]
[Sat Aug 29 05:09:43.747477 2026] [security2:error] [pid 1041789:tid 1041831] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/server/.env"] [unique_id "apK994v3RhPI65jTFG75rAADUR0"]
[Sat Aug 29 05:09:43.748305 2026] [core:error] [pid 1041789:tid 1041844] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.748314 2026] [core:error] [pid 1041789:tid 1041844] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.756660 2026] [cgid:error] [pid 1041789:tid 1041834] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:43.757803 2026] [cgid:error] [pid 1041789:tid 1041839] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:43.758267 2026] [security2:error] [pid 1321:tid 1579] [client 68.155.159.216:5974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/cgi-bin/index.php"] [unique_id "apK992jCPtor9NZ-byTVBAAABpY"]
[Sat Aug 29 05:09:43.760032 2026] [cgid:error] [pid 1041789:tid 1041822] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:43.762992 2026] [security2:error] [pid 1041789:tid 1041980] [client 93.123.109.228:55098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/api/info.php"] [unique_id "apK994v3RhPI65jTFG75tAAAA08"]
[Sat Aug 29 05:09:43.765730 2026] [security2:error] [pid 1041789:tid 1041881] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/server/backend/.env"] [unique_id "apK994v3RhPI65jTFG75tQADUU8"]
[Sat Aug 29 05:09:43.765809 2026] [security2:error] [pid 1041789:tid 1041949] [client 74.248.24.12:15953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/install.php"] [unique_id "apK994v3RhPI65jTFG75tgAAAzA"]
[Sat Aug 29 05:09:43.767962 2026] [security2:error] [pid 1041789:tid 1041802] [remote 93.123.109.228:39364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glamrus.rocks"] [uri "/wp-config.php"] [unique_id "apK994v3RhPI65jTFG75uAADLQA"]
[Sat Aug 29 05:09:43.769814 2026] [core:error] [pid 1041789:tid 1041870] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.769829 2026] [core:error] [pid 1041789:tid 1041870] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.774261 2026] [security2:error] [pid 1321:tid 1577] [client 20.220.204.93:59023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/zu.php"] [unique_id "apK992jCPtor9NZ-byTVCAAABpQ"]
[Sat Aug 29 05:09:43.778845 2026] [security2:error] [pid 1041789:tid 1041962] [client 4.205.62.107:51424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/w.php"] [unique_id "apK994v3RhPI65jTFG75vQAAAz0"]
[Sat Aug 29 05:09:43.779868 2026] [core:error] [pid 1321:tid 1563] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.779887 2026] [core:error] [pid 1321:tid 1563] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.780138 2026] [security2:error] [pid 1041789:tid 1041926] [remote 93.123.109.228:39364] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.glamrus.rocks"] [uri "/wp-config.php.new"] [unique_id "apK994v3RhPI65jTFG75vgADLXw"]
[Sat Aug 29 05:09:43.780758 2026] [security2:error] [pid 1041789:tid 1041892] [remote 93.123.109.228:39364] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.glamrus.rocks"] [uri "/wp-config.php.bak"] [unique_id "apK994v3RhPI65jTFG75vwADLVo"]
[Sat Aug 29 05:09:43.781950 2026] [core:error] [pid 1321:tid 1602] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.781967 2026] [core:error] [pid 1321:tid 1602] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.782068 2026] [core:error] [pid 1321:tid 1601] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.782078 2026] [core:error] [pid 1321:tid 1601] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.782461 2026] [core:error] [pid 1041789:tid 1042026] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.782476 2026] [core:error] [pid 1041789:tid 1042026] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.782852 2026] [core:error] [pid 1041789:tid 1041951] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.782865 2026] [core:error] [pid 1041789:tid 1041951] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.784249 2026] [core:error] [pid 1041789:tid 1041912] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.784264 2026] [core:error] [pid 1041789:tid 1041912] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.784802 2026] [core:error] [pid 1041789:tid 1042011] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.784817 2026] [core:error] [pid 1041789:tid 1042011] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.790384 2026] [security2:error] [pid 1041789:tid 1041840] [remote 93.123.109.228:39364] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.glamrus.rocks"] [uri "/wp-config.php.old"] [unique_id "apK994v3RhPI65jTFG75yAADLSY"]
[Sat Aug 29 05:09:43.791781 2026] [core:error] [pid 1041789:tid 1041829] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.791796 2026] [core:error] [pid 1041789:tid 1041829] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.799053 2026] [core:error] [pid 1321:tid 1488] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.799073 2026] [core:error] [pid 1321:tid 1488] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.801874 2026] [security2:error] [pid 1041789:tid 1042037] [client 20.48.250.41:49937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/wp-act.php"] [unique_id "apK994v3RhPI65jTFG750AAAA4g"]
[Sat Aug 29 05:09:43.804935 2026] [security2:error] [pid 1321:tid 1582] [client 68.155.159.216:38698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK992jCPtor9NZ-byTVDQAABpk"]
[Sat Aug 29 05:09:43.805494 2026] [security2:error] [pid 1321:tid 1614] [client 20.48.160.90:50485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/st.php"] [unique_id "apK992jCPtor9NZ-byTVDgAABrk"]
[Sat Aug 29 05:09:43.805965 2026] [core:error] [pid 1041789:tid 1041890] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.805979 2026] [core:error] [pid 1041789:tid 1041890] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.807160 2026] [core:error] [pid 1041789:tid 1041850] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.807174 2026] [core:error] [pid 1041789:tid 1041850] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.807401 2026] [security2:error] [pid 1321:tid 1614] [client 20.48.250.41:46037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/166.php"] [unique_id "apK992jCPtor9NZ-byTVDwAABrk"]
[Sat Aug 29 05:09:43.812014 2026] [security2:error] [pid 1321:tid 1497] [client 4.205.62.107:6857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/rum.or.php"] [unique_id "apK992jCPtor9NZ-byTVEAAABkU"]
[Sat Aug 29 05:09:43.820222 2026] [security2:error] [pid 1041789:tid 1042041] [client 4.205.62.107:60288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/nlnub.php"] [unique_id "apK994v3RhPI65jTFG751gAAA4w"]
[Sat Aug 29 05:09:43.822892 2026] [security2:error] [pid 1041789:tid 1041983] [client 158.23.147.79:44489] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.adillice.com"] [uri "/1.php"] [unique_id "apK994v3RhPI65jTFG751wAAA1I"]
[Sat Aug 29 05:09:43.822980 2026] [security2:error] [pid 1041789:tid 1041983] [client 158.23.147.79:44489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/1.php"] [unique_id "apK994v3RhPI65jTFG751wAAA1I"]
[Sat Aug 29 05:09:43.823346 2026] [security2:error] [pid 1041789:tid 1041932] [client 93.123.109.228:55094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/api/phpinfo.php"] [unique_id "apK994v3RhPI65jTFG752QAAAx8"]
[Sat Aug 29 05:09:43.823425 2026] [security2:error] [pid 1041789:tid 1042032] [client 20.48.250.41:33881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/403.php"] [unique_id "apK994v3RhPI65jTFG752AAAA4M"]
[Sat Aug 29 05:09:43.838686 2026] [security2:error] [pid 1041789:tid 1041936] [client 68.155.159.216:24572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK994v3RhPI65jTFG753QAAAyM"]
[Sat Aug 29 05:09:43.838689 2026] [security2:error] [pid 1321:tid 1558] [client 68.155.159.216:64004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/dropdown.php"] [unique_id "apK992jCPtor9NZ-byTVEgAABoE"]
[Sat Aug 29 05:09:43.843476 2026] [core:error] [pid 1041789:tid 1041893] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.843494 2026] [core:error] [pid 1041789:tid 1041893] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.848253 2026] [security2:error] [pid 1041789:tid 1041960] [client 40.83.93.50:14500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/configs.php"] [unique_id "apK994v3RhPI65jTFG754QAAAzs"]
[Sat Aug 29 05:09:43.868598 2026] [security2:error] [pid 1041789:tid 1041975] [client 20.48.250.41:50373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/ws66.php"] [unique_id "apK994v3RhPI65jTFG755QAAA0o"]
[Sat Aug 29 05:09:43.869640 2026] [security2:error] [pid 1041789:tid 1042044] [client 20.48.250.41:53445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/ws66.php"] [unique_id "apK994v3RhPI65jTFG755gAAA48"]
[Sat Aug 29 05:09:43.874230 2026] [security2:error] [pid 1041789:tid 1042053] [client 20.48.250.41:49373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "_dc-mx.5ccf3b27832c.jha.digital"] [uri "/R57.php"] [unique_id "apK994v3RhPI65jTFG756QAAA5g"]
[Sat Aug 29 05:09:43.906343 2026] [security2:error] [pid 1041789:tid 1042035] [client 68.155.159.216:1924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-content/banners/about.php"] [unique_id "apK994v3RhPI65jTFG758wAAA4Y"]
[Sat Aug 29 05:09:43.908809 2026] [security2:error] [pid 1321:tid 1539] [client 20.220.204.93:50769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/lanka.php"] [unique_id "apK992jCPtor9NZ-byTVFAAABm8"]
[Sat Aug 29 05:09:43.920826 2026] [security2:error] [pid 1321:tid 1564] [client 4.232.148.111:20905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-admin/index.php"] [unique_id "apK992jCPtor9NZ-byTVFQAABoc"]
[Sat Aug 29 05:09:43.931750 2026] [core:error] [pid 1041789:tid 1041808] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.931786 2026] [core:error] [pid 1041789:tid 1041808] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.954013 2026] [security2:error] [pid 1041789:tid 1041971] [client 20.104.49.130:46551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/mh.php"] [unique_id "apK994v3RhPI65jTFG76CwAAA0Y"]
[Sat Aug 29 05:09:43.958325 2026] [security2:error] [pid 1041789:tid 1041809] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/shared/.env"] [unique_id "apK994v3RhPI65jTFG76DAADPAc"]
[Sat Aug 29 05:09:43.959730 2026] [security2:error] [pid 1321:tid 1599] [client 20.48.250.41:45954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/h2a2ck.php"] [unique_id "apK992jCPtor9NZ-byTVGwAABqo"]
[Sat Aug 29 05:09:43.960527 2026] [security2:error] [pid 1041789:tid 1041947] [client 20.48.160.90:50553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/alfanew.php"] [unique_id "apK994v3RhPI65jTFG76DgAAAy4"]
[Sat Aug 29 05:09:43.962747 2026] [security2:error] [pid 1041789:tid 1041862] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/services/.env"] [unique_id "apK994v3RhPI65jTFG76AQADPDw"]
[Sat Aug 29 05:09:43.962949 2026] [security2:error] [pid 1041789:tid 1041827] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/service/.env"] [unique_id "apK994v3RhPI65jTFG76AAADPBk"]
[Sat Aug 29 05:09:43.967464 2026] [core:error] [pid 1321:tid 1490] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.967480 2026] [core:error] [pid 1321:tid 1490] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.968165 2026] [security2:error] [pid 1041789:tid 1041886] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/shop/.env"] [unique_id "apK994v3RhPI65jTFG76DQADPFQ"]
[Sat Aug 29 05:09:43.969376 2026] [security2:error] [pid 1041789:tid 1041965] [client 4.205.62.107:8737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.barkerpubliclibrary.com"] [uri "/ah25.php"] [unique_id "apK994v3RhPI65jTFG76EQAAA0A"]
[Sat Aug 29 05:09:43.970047 2026] [core:error] [pid 1041789:tid 1041817] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.970059 2026] [core:error] [pid 1041789:tid 1041817] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.971409 2026] [security2:error] [pid 1041789:tid 1041991] [client 93.123.109.228:55066] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/apis/.env"] [unique_id "apK994v3RhPI65jTFG76EgAAA1o"]
[Sat Aug 29 05:09:43.979958 2026] [security2:error] [pid 1321:tid 1512] [client 169.58.197.254:64599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 254.197.58.169.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.kcactf4.org"] [uri "/wp-content/plugins/wp-help/mini.php"] [unique_id "apK992jCPtor9NZ-byTVIgAABlQ"], referer: www.google.com
[Sat Aug 29 05:09:43.980614 2026] [core:error] [pid 1321:tid 1492] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.980633 2026] [core:error] [pid 1321:tid 1492] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.980863 2026] [core:error] [pid 1041789:tid 1041938] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.980875 2026] [core:error] [pid 1041789:tid 1041938] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.983559 2026] [core:error] [pid 1041789:tid 1042055] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.983574 2026] [core:error] [pid 1041789:tid 1042055] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:43.994529 2026] [security2:error] [pid 1041789:tid 1042047] [client 20.52.41.200:4566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/bthil.php"] [unique_id "apK994v3RhPI65jTFG76GwAAA5I"]
[Sat Aug 29 05:09:43.998454 2026] [security2:error] [pid 1321:tid 1608] [client 20.48.250.41:49963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/24.php"] [unique_id "apK992jCPtor9NZ-byTVIwAABrM"]
[Sat Aug 29 05:09:44.003499 2026] [core:error] [pid 1041789:tid 1041931] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.003521 2026] [core:error] [pid 1041789:tid 1041931] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.003549 2026] [core:error] [pid 1041789:tid 1041987] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.003558 2026] [core:error] [pid 1041789:tid 1041987] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.006870 2026] [core:error] [pid 1041789:tid 1042046] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.006886 2026] [core:error] [pid 1041789:tid 1042046] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.008930 2026] [security2:error] [pid 1321:tid 1525] [client 20.48.250.41:50081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/ws68.php"] [unique_id "apK9-GjCPtor9NZ-byTVJgAABmE"]
[Sat Aug 29 05:09:44.010367 2026] [core:error] [pid 1041789:tid 1042028] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.010382 2026] [core:error] [pid 1041789:tid 1042028] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.011220 2026] [core:error] [pid 1041789:tid 1041979] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.011232 2026] [core:error] [pid 1041789:tid 1041979] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.014708 2026] [security2:error] [pid 1321:tid 1521] [client 20.48.250.41:34447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/cytyr.php"] [unique_id "apK9-GjCPtor9NZ-byTVJwAABl0"]
[Sat Aug 29 05:09:44.017464 2026] [security2:error] [pid 1321:tid 1537] [client 68.155.159.216:18376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK9-GjCPtor9NZ-byTVKAAABm0"]
[Sat Aug 29 05:09:44.023368 2026] [security2:error] [pid 1041789:tid 1041972] [client 52.139.37.240:31525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK9-Iv3RhPI65jTFG76KQAAA0c"]
[Sat Aug 29 05:09:44.035028 2026] [security2:error] [pid 1321:tid 1518] [client 4.205.62.107:53301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/var/www/wallet/index.php"] [unique_id "apK9-GjCPtor9NZ-byTVKQAABlo"]
[Sat Aug 29 05:09:44.038403 2026] [security2:error] [pid 1041789:tid 1042014] [client 93.123.109.228:54922] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/app/.env"] [unique_id "apK9-Iv3RhPI65jTFG76LgAAA3E"]
[Sat Aug 29 05:09:44.039079 2026] [core:error] [pid 1041789:tid 1041990] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.039093 2026] [core:error] [pid 1041789:tid 1041990] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.043282 2026] [security2:error] [pid 1321:tid 1495] [client 20.220.204.93:41740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/gettest.php"] [unique_id "apK9-GjCPtor9NZ-byTVKgAABkM"]
[Sat Aug 29 05:09:44.055293 2026] [security2:error] [pid 1321:tid 1542] [client 68.155.159.216:52796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-admin/network/index.php"] [unique_id "apK9-GjCPtor9NZ-byTVKwAABnI"]
[Sat Aug 29 05:09:44.094854 2026] [security2:error] [pid 1041789:tid 1042013] [client 20.48.160.90:45398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/ioxi.php"] [unique_id "apK9-Iv3RhPI65jTFG76NwAAA3A"]
[Sat Aug 29 05:09:44.100677 2026] [security2:error] [pid 1041789:tid 1041934] [client 20.48.250.41:50309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/ws68.php"] [unique_id "apK9-Iv3RhPI65jTFG76OAAAAyE"]
[Sat Aug 29 05:09:44.103135 2026] [security2:error] [pid 1041789:tid 1041969] [client 20.48.250.41:46065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/error_log.php"] [unique_id "apK9-Iv3RhPI65jTFG76OQAAA0Q"]
[Sat Aug 29 05:09:44.117969 2026] [security2:error] [pid 1041789:tid 1041848] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/src/.env"] [unique_id "apK9-Iv3RhPI65jTFG76PQADUi4"]
[Sat Aug 29 05:09:44.127292 2026] [core:error] [pid 1041789:tid 1041810] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.127321 2026] [core:error] [pid 1041789:tid 1041810] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.139999 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.48.250.41:50034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/155.php"] [unique_id "apK9-Iv3RhPI65jTFG76SwAAA2Q"]
[Sat Aug 29 05:09:44.151801 2026] [core:error] [pid 1041789:tid 1042010] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.151826 2026] [core:error] [pid 1041789:tid 1042010] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.154748 2026] [core:error] [pid 1041789:tid 1042006] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.154770 2026] [core:error] [pid 1041789:tid 1042006] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.155115 2026] [core:error] [pid 1041789:tid 1041946] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.155128 2026] [core:error] [pid 1041789:tid 1041946] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.157184 2026] [core:error] [pid 1041789:tid 1041950] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.157199 2026] [core:error] [pid 1041789:tid 1041950] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.157599 2026] [core:error] [pid 1041789:tid 1041929] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.157614 2026] [core:error] [pid 1041789:tid 1041929] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.163040 2026] [security2:error] [pid 1041789:tid 1041935] [client 20.48.250.41:53438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/users.php"] [unique_id "apK9-Iv3RhPI65jTFG76WQAAAyI"]
[Sat Aug 29 05:09:44.164167 2026] [core:error] [pid 1041789:tid 1041864] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.164186 2026] [core:error] [pid 1041789:tid 1041864] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.164435 2026] [core:error] [pid 1041789:tid 1041865] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.164449 2026] [core:error] [pid 1041789:tid 1041865] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.179714 2026] [core:error] [pid 1041789:tid 1041924] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.179736 2026] [core:error] [pid 1041789:tid 1041924] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.180620 2026] [security2:error] [pid 1321:tid 1583] [client 20.48.250.41:33860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/galer.php"] [unique_id "apK9-GjCPtor9NZ-byTVMgAABpo"]
[Sat Aug 29 05:09:44.183292 2026] [core:error] [pid 1041789:tid 1041839] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.183312 2026] [core:error] [pid 1041789:tid 1041839] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.183785 2026] [core:error] [pid 1041789:tid 1041831] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.183806 2026] [core:error] [pid 1041789:tid 1041831] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.184050 2026] [core:error] [pid 1041789:tid 1041910] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.184067 2026] [core:error] [pid 1041789:tid 1041910] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.188644 2026] [security2:error] [pid 1041789:tid 1041995] [client 74.248.24.12:15008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/c.php"] [unique_id "apK9-Iv3RhPI65jTFG76ZQAAA14"]
[Sat Aug 29 05:09:44.188889 2026] [core:error] [pid 1041789:tid 1041902] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.188901 2026] [core:error] [pid 1041789:tid 1041902] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.194992 2026] [core:error] [pid 1041789:tid 1041902] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.195010 2026] [core:error] [pid 1041789:tid 1041902] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.196154 2026] [security2:error] [pid 1321:tid 1513] [client 4.232.148.111:17960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/m.php"] [unique_id "apK9-GjCPtor9NZ-byTVNAAABlU"]
[Sat Aug 29 05:09:44.221963 2026] [security2:error] [pid 1321:tid 1540] [client 52.139.37.240:31164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/wp-info.php"] [unique_id "apK9-GjCPtor9NZ-byTVNQAABnA"]
[Sat Aug 29 05:09:44.222083 2026] [security2:error] [pid 1041789:tid 1041947] [client 158.23.147.79:17591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK9-Iv3RhPI65jTFG76cgAAAy4"]
[Sat Aug 29 05:09:44.226272 2026] [security2:error] [pid 1041789:tid 1041943] [client 20.48.160.90:45408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/TNT.php"] [unique_id "apK9-Iv3RhPI65jTFG76dAAAAyo"]
[Sat Aug 29 05:09:44.234285 2026] [security2:error] [pid 1041789:tid 1041963] [client 158.23.147.79:58891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/goods.php"] [unique_id "apK9-Iv3RhPI65jTFG76dQAAAz4"]
[Sat Aug 29 05:09:44.247031 2026] [security2:error] [pid 1321:tid 1587] [client 20.104.49.130:63530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pvillusions.com"] [uri "/ccc.php"] [unique_id "apK9-GjCPtor9NZ-byTVNgAABp4"]
[Sat Aug 29 05:09:44.251652 2026] [security2:error] [pid 1321:tid 1555] [client 20.48.250.41:50343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/users.php"] [unique_id "apK9-GjCPtor9NZ-byTVNwAABn4"]
[Sat Aug 29 05:09:44.251778 2026] [security2:error] [pid 1321:tid 1552] [client 20.48.250.41:46039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/403.php"] [unique_id "apK9-GjCPtor9NZ-byTVOAAABns"]
[Sat Aug 29 05:09:44.269047 2026] [core:error] [pid 1041789:tid 1042049] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.269069 2026] [core:error] [pid 1041789:tid 1042049] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.271049 2026] [security2:error] [pid 1041789:tid 1041836] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/srv/.env"] [unique_id "apK9-Iv3RhPI65jTFG76fwADdyI"]
[Sat Aug 29 05:09:44.272534 2026] [security2:error] [pid 1321:tid 1590] [client 158.23.147.79:11312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-admin/css/index.php"] [unique_id "apK9-GjCPtor9NZ-byTVOQAABqE"]
[Sat Aug 29 05:09:44.272714 2026] [security2:error] [pid 1041789:tid 1042055] [client 68.155.159.216:65038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/mah.php"] [unique_id "apK9-Iv3RhPI65jTFG76gAAAA5o"]
[Sat Aug 29 05:09:44.276604 2026] [security2:error] [pid 1041789:tid 1041874] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/stage/.env"] [unique_id "apK9-Iv3RhPI65jTFG76gQADd0g"]
[Sat Aug 29 05:09:44.276792 2026] [security2:error] [pid 1041789:tid 1041942] [client 93.123.109.228:55154] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/application/.env"] [unique_id "apK9-Iv3RhPI65jTFG76ggAAAyk"]
[Sat Aug 29 05:09:44.278521 2026] [security2:error] [pid 1041789:tid 1042018] [client 158.23.147.79:14331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK9-Iv3RhPI65jTFG76hAAAA3U"]
[Sat Aug 29 05:09:44.280551 2026] [security2:error] [pid 1321:tid 1575] [client 93.123.109.228:46694] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/apps/.env"] [unique_id "apK9-GjCPtor9NZ-byTVOgAABpI"]
[Sat Aug 29 05:09:44.285525 2026] [security2:error] [pid 1321:tid 1566] [client 74.248.24.12:4379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/ioxi-o.php"] [unique_id "apK9-GjCPtor9NZ-byTVOwAABok"]
[Sat Aug 29 05:09:44.309425 2026] [cgid:error] [pid 1041789:tid 1041813] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:44.309634 2026] [ssl:error] [pid 1041789:tid 1042023] [client 54.86.115.253:34546] AH02032: Hostname host2038.hostmonster.com (default host as no SNI was provided) and hostname autodiscover.winowspatcher.com provided via HTTP have no compatible SSL setup for policy 'secure'
[Sat Aug 29 05:09:44.309739 2026] [cgid:error] [pid 1041789:tid 1041829] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:44.314098 2026] [security2:error] [pid 1041789:tid 1041854] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/staging/.env"] [unique_id "apK9-Iv3RhPI65jTFG76jQADYDQ"]
[Sat Aug 29 05:09:44.317589 2026] [security2:error] [pid 1321:tid 1563] [client 20.48.250.41:30680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/file.php"] [unique_id "apK9-GjCPtor9NZ-byTVPQAABoY"]
[Sat Aug 29 05:09:44.324229 2026] [security2:error] [pid 1321:tid 1585] [client 40.83.93.50:17713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/disagraeed.php"] [unique_id "apK9-GjCPtor9NZ-byTVPgAABpw"]
[Sat Aug 29 05:09:44.329593 2026] [security2:error] [pid 1041789:tid 1041904] [remote 93.123.109.228:39292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmsproductions.com"] [uri "/test.php"] [unique_id "apK9-Iv3RhPI65jTFG76lAADcmY"]
[Sat Aug 29 05:09:44.329765 2026] [security2:error] [pid 1041789:tid 1041830] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/stg/.env"] [unique_id "apK9-Iv3RhPI65jTFG76kwADeBw"]
[Sat Aug 29 05:09:44.330349 2026] [security2:error] [pid 1321:tid 1588] [client 20.48.250.41:53441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/bzjdlofz.php"] [unique_id "apK9-GjCPtor9NZ-byTVPwAABp8"]
[Sat Aug 29 05:09:44.330520 2026] [core:error] [pid 1041789:tid 1041850] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.330530 2026] [core:error] [pid 1041789:tid 1041850] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.331662 2026] [core:error] [pid 1041789:tid 1041922] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.331677 2026] [core:error] [pid 1041789:tid 1041922] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.332722 2026] [core:error] [pid 1041789:tid 1041835] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.332746 2026] [core:error] [pid 1041789:tid 1041835] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.333344 2026] [core:error] [pid 1041789:tid 1041866] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.333368 2026] [core:error] [pid 1041789:tid 1041866] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.333418 2026] [core:error] [pid 1041789:tid 1041830] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.333427 2026] [core:error] [pid 1041789:tid 1041830] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.333941 2026] [core:error] [pid 1041789:tid 1041904] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.333947 2026] [cgid:error] [pid 1041789:tid 1041873] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:44.333956 2026] [core:error] [pid 1041789:tid 1041904] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.334457 2026] [security2:error] [pid 1041789:tid 1041868] [remote 34.138.144.127:46132] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/.ssh/id_rsa"] [unique_id "apK9-Iv3RhPI65jTFG76mgADPUI"]
[Sat Aug 29 05:09:44.337622 2026] [cgid:error] [pid 1041789:tid 1041843] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:44.337846 2026] [cgid:error] [pid 1041789:tid 1041920] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:44.339644 2026] [core:error] [pid 1041789:tid 1041884] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.339660 2026] [core:error] [pid 1041789:tid 1041884] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.343775 2026] [core:error] [pid 1041789:tid 1041916] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.343792 2026] [core:error] [pid 1041789:tid 1041916] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.344244 2026] [security2:error] [pid 1321:tid 1560] [client 20.220.204.93:52259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/35.php"] [unique_id "apK9-GjCPtor9NZ-byTVQgAABoM"]
[Sat Aug 29 05:09:44.346282 2026] [security2:error] [pid 1321:tid 1550] [client 195.178.110.247:1268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lumbeehealth.com"] [uri "/index.php"] [unique_id "apK9-GjCPtor9NZ-byTVQwAABnk"]
[Sat Aug 29 05:09:44.356640 2026] [security2:error] [pid 1041789:tid 1041919] [remote 34.74.130.21:35732] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/.ssh/id_rsa"] [unique_id "apK9-Iv3RhPI65jTFG76qQADcXU"]
[Sat Aug 29 05:09:44.360800 2026] [security2:error] [pid 1041789:tid 1041905] [remote 34.74.130.21:35732] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/.ssh/id_dsa"] [unique_id "apK9-Iv3RhPI65jTFG76sAADcWc"]
[Sat Aug 29 05:09:44.366872 2026] [security2:error] [pid 1321:tid 1569] [client 45.148.10.62:40228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xtj.otn.mybluehost.me"] [uri "/config.php.bak"] [unique_id "apK9-GjCPtor9NZ-byTVRgAABow"]
[Sat Aug 29 05:09:44.370792 2026] [security2:error] [pid 1041789:tid 1042013] [client 4.205.62.107:61714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/public/bnn_.php.php"] [unique_id "apK9-Iv3RhPI65jTFG76tAAAA3A"]
[Sat Aug 29 05:09:44.378648 2026] [security2:error] [pid 1041789:tid 1042041] [client 20.48.160.90:45383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/cd.php"] [unique_id "apK9-Iv3RhPI65jTFG76twAAA4w"]
[Sat Aug 29 05:09:44.378679 2026] [security2:error] [pid 1041789:tid 1041862] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/stripe/.env"] [unique_id "apK9-Iv3RhPI65jTFG76tgADeDw"]
[Sat Aug 29 05:09:44.386104 2026] [cgid:error] [pid 1041789:tid 1041827] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:44.392325 2026] [core:error] [pid 1041789:tid 1041933] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.392341 2026] [core:error] [pid 1041789:tid 1041933] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.393613 2026] [security2:error] [pid 1041789:tid 1041965] [client 4.232.148.111:20884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/radio.php"] [unique_id "apK9-Iv3RhPI65jTFG76vQAAA0A"]
[Sat Aug 29 05:09:44.394730 2026] [core:error] [pid 1041789:tid 1042000] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.394746 2026] [core:error] [pid 1041789:tid 1042000] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.408402 2026] [security2:error] [pid 1321:tid 1574] [client 20.48.250.41:46071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/cytyr.php"] [unique_id "apK9-GjCPtor9NZ-byTVRwAABpE"]
[Sat Aug 29 05:09:44.409209 2026] [security2:error] [pid 1041789:tid 1041828] [remote 34.138.144.127:46132] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/.ssh/id_dsa"] [unique_id "apK9-Iv3RhPI65jTFG76wQADaRo"]
[Sat Aug 29 05:09:44.415502 2026] [security2:error] [pid 1041789:tid 1041961] [client 52.139.37.240:31161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/wp-wordfence-waf.php"] [unique_id "apK9-Iv3RhPI65jTFG76yAAAAzw"]
[Sat Aug 29 05:09:44.417244 2026] [security2:error] [pid 1041789:tid 1042050] [client 20.48.250.41:34277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/baixy.php"] [unique_id "apK9-Iv3RhPI65jTFG76yQAAA5U"]
[Sat Aug 29 05:09:44.429497 2026] [core:error] [pid 1041789:tid 1041845] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.429518 2026] [core:error] [pid 1041789:tid 1041845] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.442217 2026] [security2:error] [pid 1321:tid 1570] [client 20.48.250.41:50385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/bzjdlofz.php"] [unique_id "apK9-GjCPtor9NZ-byTVSgAABo0"]
[Sat Aug 29 05:09:44.443062 2026] [security2:error] [pid 1041789:tid 1042052] [client 68.155.159.216:33565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-includes/js/index.php"] [unique_id "apK9-Iv3RhPI65jTFG760AAAA5c"]
[Sat Aug 29 05:09:44.462573 2026] [security2:error] [pid 1041789:tid 1042051] [client 60.243.207.176:58969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK9-Iv3RhPI65jTFG761QAAA5Y"]
[Sat Aug 29 05:09:44.462678 2026] [security2:error] [pid 1041789:tid 1042051] [client 60.243.207.176:58969] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK9-Iv3RhPI65jTFG761QAAA5Y"]
[Sat Aug 29 05:09:44.466760 2026] [security2:error] [pid 1321:tid 1506] [client 20.48.250.41:53427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/selesai.php"] [unique_id "apK9-GjCPtor9NZ-byTVSwAABk4"]
[Sat Aug 29 05:09:44.481387 2026] [security2:error] [pid 1041789:tid 1041882] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/terraform.tfstate.backup"] [unique_id "apK9-Iv3RhPI65jTFG762wADNVA"]
[Sat Aug 29 05:09:44.481858 2026] [core:error] [pid 1041789:tid 1042043] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.481872 2026] [core:error] [pid 1041789:tid 1042043] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.482199 2026] [core:error] [pid 1321:tid 1614] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.482212 2026] [core:error] [pid 1321:tid 1614] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.491075 2026] [security2:error] [pid 1041789:tid 1041906] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/test.php"] [unique_id "apK9-Iv3RhPI65jTFG766QADNWg"]
[Sat Aug 29 05:09:44.492999 2026] [security2:error] [pid 1041789:tid 1041991] [client 20.48.250.41:30687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK9-Iv3RhPI65jTFG767AAAA1o"]
[Sat Aug 29 05:09:44.496682 2026] [core:error] [pid 1041789:tid 1041896] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.496698 2026] [core:error] [pid 1041789:tid 1041896] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.499408 2026] [security2:error] [pid 1041789:tid 1041848] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/test/.env"] [unique_id "apK9-Iv3RhPI65jTFG768gADNS4"]
[Sat Aug 29 05:09:44.503588 2026] [security2:error] [pid 1041789:tid 1041998] [client 195.178.110.247:59540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lumbeehealth.com"] [uri "/index.php"] [unique_id "apK9-Iv3RhPI65jTFG769AAAA2E"]
[Sat Aug 29 05:09:44.511760 2026] [security2:error] [pid 1321:tid 1510] [client 20.48.160.90:50486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/luuf.php"] [unique_id "apK9-GjCPtor9NZ-byTVUgAABlI"]
[Sat Aug 29 05:09:44.524952 2026] [security2:error] [pid 1321:tid 1612] [client 4.205.62.107:21918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/configuration.php"] [unique_id "apK9-GjCPtor9NZ-byTVUwAABrc"]
[Sat Aug 29 05:09:44.526914 2026] [security2:error] [pid 1321:tid 1589] [client 68.155.159.216:64390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/index/function.php"] [unique_id "apK9-GjCPtor9NZ-byTVVAAABqA"]
[Sat Aug 29 05:09:44.543792 2026] [core:error] [pid 1321:tid 1562] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.543813 2026] [core:error] [pid 1321:tid 1562] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.544159 2026] [core:error] [pid 1321:tid 1604] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.544172 2026] [core:error] [pid 1321:tid 1604] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.557574 2026] [security2:error] [pid 1041789:tid 1041938] [client 20.48.250.41:46072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/galer.php"] [unique_id "apK9-Iv3RhPI65jTFG77BAAAAyU"]
[Sat Aug 29 05:09:44.563963 2026] [security2:error] [pid 1041789:tid 1041865] [remote 34.138.144.127:46132] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/id_rsa"] [unique_id "apK9-Iv3RhPI65jTFG77BgADkD8"]
[Sat Aug 29 05:09:44.564501 2026] [core:error] [pid 1321:tid 1539] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.564518 2026] [core:error] [pid 1321:tid 1539] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.575814 2026] [core:error] [pid 1321:tid 1514] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.575832 2026] [core:error] [pid 1321:tid 1514] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.576853 2026] [core:error] [pid 1041789:tid 1041997] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.576871 2026] [core:error] [pid 1041789:tid 1041997] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.581303 2026] [security2:error] [pid 1321:tid 1492] [client 20.220.204.93:50808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/maraz.php"] [unique_id "apK9-GjCPtor9NZ-byTVWwAABkA"]
[Sat Aug 29 05:09:44.586801 2026] [security2:error] [pid 1041789:tid 1041910] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/user/.env"] [unique_id "apK9-Iv3RhPI65jTFG77EwADNWw"]
[Sat Aug 29 05:09:44.590865 2026] [security2:error] [pid 1041789:tid 1041982] [client 158.23.147.79:58048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/radio.php"] [unique_id "apK9-Iv3RhPI65jTFG77FwAAA1E"]
[Sat Aug 29 05:09:44.594399 2026] [core:error] [pid 1041789:tid 1041962] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.594421 2026] [core:error] [pid 1041789:tid 1041962] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.599135 2026] [security2:error] [pid 1321:tid 1600] [client 20.48.250.41:50327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/selesai.php"] [unique_id "apK9-GjCPtor9NZ-byTVXAAABqs"]
[Sat Aug 29 05:09:44.605759 2026] [access_compat:error] [pid 1321:tid 1524] [client 57.141.14.82:0] AH01797: client denied by server configuration: /home4/eastacar/public_html/djiboutifresh/acheter
[Sat Aug 29 05:09:44.609483 2026] [core:error] [pid 1321:tid 1535] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.609502 2026] [core:error] [pid 1321:tid 1535] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.613258 2026] [core:error] [pid 1321:tid 1576] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.613277 2026] [core:error] [pid 1321:tid 1576] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.613493 2026] [security2:error] [pid 1041789:tid 1041939] [client 52.139.37.240:31081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/ws49.php"] [unique_id "apK9-Iv3RhPI65jTFG77IgAAAyY"]
[Sat Aug 29 05:09:44.618186 2026] [security2:error] [pid 1041789:tid 1041972] [client 20.48.250.41:33918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/ava.php"] [unique_id "apK9-Iv3RhPI65jTFG77JAAAA0c"]
[Sat Aug 29 05:09:44.621783 2026] [security2:error] [pid 1041789:tid 1042056] [client 20.48.250.41:53437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/shlo.php"] [unique_id "apK9-Iv3RhPI65jTFG77JgAAA5s"]
[Sat Aug 29 05:09:44.622652 2026] [security2:error] [pid 1041789:tid 1042010] [client 93.123.109.228:54946] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/back-api/.env"] [unique_id "apK9-Iv3RhPI65jTFG77JQAAA20"]
[Sat Aug 29 05:09:44.624469 2026] [security2:error] [pid 1041789:tid 1041933] [client 93.123.109.228:55160] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/back-end/.env"] [unique_id "apK9-Iv3RhPI65jTFG77JwAAAyA"]
[Sat Aug 29 05:09:44.631258 2026] [security2:error] [pid 1321:tid 1525] [client 20.52.41.200:5315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/cv.php"] [unique_id "apK9-GjCPtor9NZ-byTVYwAABmE"]
[Sat Aug 29 05:09:44.639748 2026] [security2:error] [pid 1321:tid 1541] [client 93.123.109.228:46718] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/back/.env"] [unique_id "apK9-GjCPtor9NZ-byTVZAAABnE"]
[Sat Aug 29 05:09:44.642409 2026] [security2:error] [pid 1321:tid 1533] [client 20.48.250.41:49975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/06.php"] [unique_id "apK9-GjCPtor9NZ-byTVZQAABmk"]
[Sat Aug 29 05:09:44.642516 2026] [security2:error] [pid 1041789:tid 1041841] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/v1/.env"] [unique_id "apK9-Iv3RhPI65jTFG77KgADNSc"]
[Sat Aug 29 05:09:44.645027 2026] [security2:error] [pid 1041789:tid 1041936] [client 93.123.109.228:54914] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/backend-api/.env"] [unique_id "apK9-Iv3RhPI65jTFG77LQAAAyM"]
[Sat Aug 29 05:09:44.647784 2026] [core:error] [pid 1041789:tid 1042001] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.647804 2026] [core:error] [pid 1041789:tid 1042001] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.648570 2026] [security2:error] [pid 1041789:tid 1041834] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/v2/.env"] [unique_id "apK9-Iv3RhPI65jTFG77LwADNSA"]
[Sat Aug 29 05:09:44.649127 2026] [security2:error] [pid 1041789:tid 1041822] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/v3/.env"] [unique_id "apK9-Iv3RhPI65jTFG77MAADNRQ"]
[Sat Aug 29 05:09:44.653400 2026] [security2:error] [pid 1321:tid 1551] [client 20.48.160.90:50444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/fex.php"] [unique_id "apK9-GjCPtor9NZ-byTVZgAABno"]
[Sat Aug 29 05:09:44.667458 2026] [security2:error] [pid 1041789:tid 1042000] [client 93.123.109.228:54964] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK9-Iv3RhPI65jTFG77NwAAA2M"]
[Sat Aug 29 05:09:44.675830 2026] [security2:error] [pid 1041789:tid 1041977] [client 4.232.148.111:21469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "apK9-Iv3RhPI65jTFG77OAAAA0w"]
[Sat Aug 29 05:09:44.685375 2026] [security2:error] [pid 1041789:tid 1041870] [remote 34.138.144.127:46132] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/id_dsa"] [unique_id "apK9-Iv3RhPI65jTFG77OwADK0Q"]
[Sat Aug 29 05:09:44.696834 2026] [cgid:error] [pid 1041789:tid 1041915] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:44.704009 2026] [core:error] [pid 1321:tid 1508] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.704030 2026] [core:error] [pid 1321:tid 1508] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.711426 2026] [security2:error] [pid 1321:tid 1609] [client 20.48.250.41:45958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/baixy.php"] [unique_id "apK9-GjCPtor9NZ-byTVagAABrQ"]
[Sat Aug 29 05:09:44.715371 2026] [core:error] [pid 1321:tid 1548] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.715389 2026] [core:error] [pid 1321:tid 1548] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.718995 2026] [security2:error] [pid 1041789:tid 1042054] [client 74.248.24.12:29773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/f.php"] [unique_id "apK9-Iv3RhPI65jTFG77RQAAA5k"]
[Sat Aug 29 05:09:44.720445 2026] [security2:error] [pid 1321:tid 1580] [client 111.235.68.106:6007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK9-GjCPtor9NZ-byTVbAAABpc"]
[Sat Aug 29 05:09:44.720569 2026] [security2:error] [pid 1321:tid 1580] [client 111.235.68.106:6007] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK9-GjCPtor9NZ-byTVbAAABpc"]
[Sat Aug 29 05:09:44.723087 2026] [core:error] [pid 1041789:tid 1041892] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.723102 2026] [core:error] [pid 1041789:tid 1041892] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.734313 2026] [security2:error] [pid 1321:tid 1554] [client 68.155.159.216:23545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-content/cong.php"] [unique_id "apK9-GjCPtor9NZ-byTVbgAABn0"]
[Sat Aug 29 05:09:44.736910 2026] [core:error] [pid 1041789:tid 1041975] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.736935 2026] [core:error] [pid 1041789:tid 1041975] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.741923 2026] [cgid:error] [pid 1041789:tid 1041866] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:44.751379 2026] [core:error] [pid 1041789:tid 1041830] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.751397 2026] [core:error] [pid 1041789:tid 1041830] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.760273 2026] [core:error] [pid 1041789:tid 1042049] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.760295 2026] [core:error] [pid 1041789:tid 1042049] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.766348 2026] [core:error] [pid 1041789:tid 1041920] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.766393 2026] [core:error] [pid 1041789:tid 1041920] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.766763 2026] [security2:error] [pid 1321:tid 1606] [client 68.155.159.216:14290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK9-GjCPtor9NZ-byTVcQAABrE"]
[Sat Aug 29 05:09:44.767292 2026] [core:error] [pid 1321:tid 1511] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.767306 2026] [core:error] [pid 1321:tid 1511] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.767561 2026] [core:error] [pid 1041789:tid 1041983] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.767578 2026] [core:error] [pid 1041789:tid 1041983] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.773657 2026] [security2:error] [pid 1321:tid 1534] [client 20.48.250.41:50421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/shlo.php"] [unique_id "apK9-GjCPtor9NZ-byTVcgAABmo"]
[Sat Aug 29 05:09:44.780900 2026] [security2:error] [pid 1041789:tid 1041963] [client 20.220.204.93:52263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/kbfr.php"] [unique_id "apK9-Iv3RhPI65jTFG77ZQAAAz4"]
[Sat Aug 29 05:09:44.784662 2026] [core:error] [pid 1041789:tid 1042030] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.784677 2026] [core:error] [pid 1041789:tid 1042030] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.785220 2026] [core:error] [pid 1041789:tid 1041931] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.785232 2026] [core:error] [pid 1041789:tid 1041931] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.786843 2026] [security2:error] [pid 1041789:tid 1042055] [client 20.48.250.41:53401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/asax.php"] [unique_id "apK9-Iv3RhPI65jTFG77awAAA5o"]
[Sat Aug 29 05:09:44.787957 2026] [security2:error] [pid 1321:tid 1540] [client 93.123.109.228:46694] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/backup/.env"] [unique_id "apK9-GjCPtor9NZ-byTVcwAABnA"]
[Sat Aug 29 05:09:44.793662 2026] [security2:error] [pid 1041789:tid 1042028] [client 20.48.160.90:45417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/l.php"] [unique_id "apK9-Iv3RhPI65jTFG77bgAAA38"]
[Sat Aug 29 05:09:44.804646 2026] [security2:error] [pid 1041789:tid 1041948] [client 20.48.250.41:34436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/gdn.php"] [unique_id "apK9-Iv3RhPI65jTFG77cQAAAy8"]
[Sat Aug 29 05:09:44.805543 2026] [security2:error] [pid 1321:tid 1587] [client 93.123.109.228:46718] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/be/.env"] [unique_id "apK9-GjCPtor9NZ-byTVdAAABp4"]
[Sat Aug 29 05:09:44.807815 2026] [security2:error] [pid 1041789:tid 1042011] [client 20.104.49.130:34498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/xwx1.php"] [unique_id "apK9-Iv3RhPI65jTFG77cwAAA24"]
[Sat Aug 29 05:09:44.812078 2026] [security2:error] [pid 1041789:tid 1041945] [client 52.139.37.240:31148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/xxx.php"] [unique_id "apK9-Iv3RhPI65jTFG77dQAAAyw"]
[Sat Aug 29 05:09:44.814925 2026] [security2:error] [pid 1041789:tid 1041933] [client 74.248.24.12:4297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/xmlrpc.php"] [unique_id "apK9-Iv3RhPI65jTFG77bwAAAyA"]
[Sat Aug 29 05:09:44.815884 2026] [core:error] [pid 1041789:tid 1041876] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.815899 2026] [core:error] [pid 1041789:tid 1041876] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.816122 2026] [core:error] [pid 1041789:tid 1041840] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.816131 2026] [core:error] [pid 1041789:tid 1041840] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.816420 2026] [core:error] [pid 1041789:tid 1041980] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.816436 2026] [core:error] [pid 1041789:tid 1041980] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.819844 2026] [security2:error] [pid 1041789:tid 1041960] [client 93.123.109.228:54914] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/beta/.env"] [unique_id "apK9-Iv3RhPI65jTFG77egAAAzs"]
[Sat Aug 29 05:09:44.820652 2026] [security2:error] [pid 1041789:tid 1041972] [client 68.155.159.216:30572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/about/function.php"] [unique_id "apK9-Iv3RhPI65jTFG77ewAAA0c"]
[Sat Aug 29 05:09:44.822469 2026] [security2:error] [pid 1041789:tid 1041949] [client 20.48.250.41:49946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/class.php"] [unique_id "apK9-Iv3RhPI65jTFG77fAAAAzA"]
[Sat Aug 29 05:09:44.827759 2026] [security2:error] [pid 1321:tid 1575] [client 68.155.159.216:1998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK9-GjCPtor9NZ-byTVdQAABpI"]
[Sat Aug 29 05:09:44.830322 2026] [security2:error] [pid 1041789:tid 1041862] [remote 93.123.109.228:55834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyer.com"] [uri "/test.php"] [unique_id "apK9-Iv3RhPI65jTFG77fgADjTw"]
[Sat Aug 29 05:09:44.834760 2026] [security2:error] [pid 1041789:tid 1041961] [client 40.83.93.50:10082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/add_actualites.php"] [unique_id "apK9-Iv3RhPI65jTFG77gAAAAzw"]
[Sat Aug 29 05:09:44.845628 2026] [security2:error] [pid 1041789:tid 1041842] [remote 34.74.130.21:35732] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/id_rsa"] [unique_id "apK9-Iv3RhPI65jTFG77hQADaSg"]
[Sat Aug 29 05:09:44.845628 2026] [security2:error] [pid 1041789:tid 1041807] [remote 34.74.130.21:35732] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/id_dsa"] [unique_id "apK9-Iv3RhPI65jTFG77hAADaQU"]
[Sat Aug 29 05:09:44.846577 2026] [security2:error] [pid 1041789:tid 1041936] [client 20.48.250.41:45341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/ava.php"] [unique_id "apK9-Iv3RhPI65jTFG77iAAAAyM"]
[Sat Aug 29 05:09:44.858861 2026] [security2:error] [pid 1041789:tid 1042032] [client 158.23.147.79:6075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-blog-header.php"] [unique_id "apK9-Iv3RhPI65jTFG77iwAAA4M"]
[Sat Aug 29 05:09:44.868028 2026] [security2:error] [pid 1321:tid 1595] [client 4.232.148.111:1076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/item.php"] [unique_id "apK9-GjCPtor9NZ-byTVdwAABqY"]
[Sat Aug 29 05:09:44.871562 2026] [core:error] [pid 1041789:tid 1041849] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.871584 2026] [core:error] [pid 1041789:tid 1041849] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.872563 2026] [core:error] [pid 1321:tid 1566] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.872587 2026] [core:error] [pid 1321:tid 1566] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.880009 2026] [security2:error] [pid 1321:tid 1596] [client 68.155.159.216:5953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK9-GjCPtor9NZ-byTVegAABqc"]
[Sat Aug 29 05:09:44.886337 2026] [security2:error] [pid 1041789:tid 1041817] [remote 34.138.144.127:46132] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/privatekey.key"] [unique_id "apK9-Iv3RhPI65jTFG77lgADKA8"]
[Sat Aug 29 05:09:44.887720 2026] [cgid:error] [pid 1041789:tid 1041863] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:44.890037 2026] [security2:error] [pid 1041789:tid 1041837] [remote 34.138.144.127:46132] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/key.pem"] [unique_id "apK9-Iv3RhPI65jTFG77lQADKCM"]
[Sat Aug 29 05:09:44.895704 2026] [core:error] [pid 1041789:tid 1042040] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.895720 2026] [core:error] [pid 1041789:tid 1042040] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.897134 2026] [security2:error] [pid 1041789:tid 1041806] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/var/www/.env"] [unique_id "apK9-Iv3RhPI65jTFG77nAADcAQ"]
[Sat Aug 29 05:09:44.897609 2026] [security2:error] [pid 1321:tid 1592] [client 158.23.184.117:7571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/wp-includes/pomo.php"] [unique_id "apK9-GjCPtor9NZ-byTVfQAABqM"]
[Sat Aug 29 05:09:44.898290 2026] [security2:error] [pid 1041789:tid 1041917] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/var/www/html/.env"] [unique_id "apK9-Iv3RhPI65jTFG77ngADcHM"]
[Sat Aug 29 05:09:44.902395 2026] [core:error] [pid 1041789:tid 1041882] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.902411 2026] [core:error] [pid 1041789:tid 1041882] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.902708 2026] [cgid:error] [pid 1041789:tid 1041846] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:44.902926 2026] [cgid:error] [pid 1041789:tid 1041816] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:44.908391 2026] [security2:error] [pid 1321:tid 1598] [client 180.190.5.40:33489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.5.190.180.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK9-GjCPtor9NZ-byTVfgAABqk"]
[Sat Aug 29 05:09:44.908552 2026] [security2:error] [pid 1321:tid 1598] [client 180.190.5.40:33489] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK9-GjCPtor9NZ-byTVfgAABqk"]
[Sat Aug 29 05:09:44.916658 2026] [security2:error] [pid 1321:tid 1573] [client 68.155.159.216:38543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/about.php"] [unique_id "apK9-GjCPtor9NZ-byTVfwAABpA"]
[Sat Aug 29 05:09:44.922015 2026] [security2:error] [pid 1321:tid 1588] [client 4.205.62.107:51516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/u88.php"] [unique_id "apK9-GjCPtor9NZ-byTVgAAABp8"]
[Sat Aug 29 05:09:44.923306 2026] [security2:error] [pid 1321:tid 1585] [client 20.48.250.41:53447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/fetch.php"] [unique_id "apK9-GjCPtor9NZ-byTVgQAABpw"]
[Sat Aug 29 05:09:44.924462 2026] [security2:error] [pid 1041789:tid 1041899] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/web/.env"] [unique_id "apK9-Iv3RhPI65jTFG77pwADN2E"]
[Sat Aug 29 05:09:44.943967 2026] [core:error] [pid 1041789:tid 1041878] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.943990 2026] [core:error] [pid 1041789:tid 1041878] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.951992 2026] [core:error] [pid 1041789:tid 1041819] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.952011 2026] [core:error] [pid 1041789:tid 1041819] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.952954 2026] [security2:error] [pid 1321:tid 1569] [client 4.205.62.107:6862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/xmy.php"] [unique_id "apK9-GjCPtor9NZ-byTVhgAABow"]
[Sat Aug 29 05:09:44.958518 2026] [security2:error] [pid 1041789:tid 1041975] [client 93.123.109.228:54946] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/client/.env"] [unique_id "apK9-Iv3RhPI65jTFG77tgAAA0o"]
[Sat Aug 29 05:09:44.959756 2026] [security2:error] [pid 1321:tid 1616] [client 4.205.62.107:60318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/mga.php"] [unique_id "apK9-GjCPtor9NZ-byTVigAABrs"]
[Sat Aug 29 05:09:44.963071 2026] [cgid:error] [pid 1041789:tid 1041851] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:44.963618 2026] [security2:error] [pid 1321:tid 1574] [client 20.48.250.41:34249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/f2.php"] [unique_id "apK9-GjCPtor9NZ-byTViwAABpE"]
[Sat Aug 29 05:09:44.968342 2026] [security2:error] [pid 1041789:tid 1041991] [client 20.48.160.90:45412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/xr.php"] [unique_id "apK9-Iv3RhPI65jTFG77ugAAA1o"]
[Sat Aug 29 05:09:44.968664 2026] [core:error] [pid 1041789:tid 1041927] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.968679 2026] [core:error] [pid 1041789:tid 1041927] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.974250 2026] [core:error] [pid 1041789:tid 1041819] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.974267 2026] [core:error] [pid 1041789:tid 1041819] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.974331 2026] [core:error] [pid 1041789:tid 1041823] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.974347 2026] [core:error] [pid 1041789:tid 1041823] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.975725 2026] [core:error] [pid 1041789:tid 1041927] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.975737 2026] [core:error] [pid 1041789:tid 1041927] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.977596 2026] [security2:error] [pid 1041789:tid 1042049] [client 93.123.109.228:55102] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/cms/.env"] [unique_id "apK9-Iv3RhPI65jTFG77wAAAA5Q"]
[Sat Aug 29 05:09:44.979061 2026] [security2:error] [pid 1041789:tid 1041856] [remote 93.123.109.228:39292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmsproductions.com"] [uri "/wp-config.php"] [unique_id "apK9-Iv3RhPI65jTFG77xAADcjY"]
[Sat Aug 29 05:09:44.979752 2026] [core:error] [pid 1041789:tid 1042014] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.979766 2026] [core:error] [pid 1041789:tid 1042014] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:44.981917 2026] [security2:error] [pid 1041789:tid 1041983] [client 20.48.250.41:45909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/gdn.php"] [unique_id "apK9-Iv3RhPI65jTFG77xQAAA1I"]
[Sat Aug 29 05:09:44.990738 2026] [security2:error] [pid 1041789:tid 1041910] [remote 34.74.130.21:35732] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/privatekey.key"] [unique_id "apK9-Iv3RhPI65jTFG77xwADTmw"]
[Sat Aug 29 05:09:44.992854 2026] [security2:error] [pid 1041789:tid 1041898] [remote 93.123.109.228:39292] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.gmsproductions.com"] [uri "/wp-config.php.bak"] [unique_id "apK9-Iv3RhPI65jTFG77yAADcmA"]
[Sat Aug 29 05:09:44.999416 2026] [security2:error] [pid 1041789:tid 1041976] [client 202.71.25.11:58473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.25.71.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK9-Iv3RhPI65jTFG77ywAAA0s"]
[Sat Aug 29 05:09:44.999585 2026] [security2:error] [pid 1041789:tid 1041976] [client 202.71.25.11:58473] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK9-Iv3RhPI65jTFG77ywAAA0s"]
[Sat Aug 29 05:09:45.000816 2026] [security2:error] [pid 1041789:tid 1041939] [client 20.48.250.41:50411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/asax.php"] [unique_id "apK9-Iv3RhPI65jTFG77zAAAAyY"]
[Sat Aug 29 05:09:45.002593 2026] [core:error] [pid 1041789:tid 1041942] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:45.002610 2026] [core:error] [pid 1041789:tid 1041942] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:45.006851 2026] [security2:error] [pid 1041789:tid 1041838] [remote 34.74.130.21:35732] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/key.pem"] [unique_id "apK9-Yv3RhPI65jTFG77zwADTiQ"]
[Sat Aug 29 05:09:45.006985 2026] [security2:error] [pid 1041789:tid 1041931] [client 20.48.250.41:50003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/8.php"] [unique_id "apK9-Yv3RhPI65jTFG770AAAAx4"]
[Sat Aug 29 05:09:45.010637 2026] [security2:error] [pid 1041789:tid 1041821] [remote 93.123.109.228:39292] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.gmsproductions.com"] [uri "/wp-config.php.new"] [unique_id "apK9-Yv3RhPI65jTFG770wADchM"]
[Sat Aug 29 05:09:45.016384 2026] [http2:warn] [pid 1017536:tid 1017739] [client 57.141.14.32:63142] h2_stream(1017536-172-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:09:45.016662 2026] [security2:error] [pid 1041789:tid 1041982] [client 68.155.159.216:1864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK9-Yv3RhPI65jTFG771QAAA1E"]
[Sat Aug 29 05:09:45.017803 2026] [security2:error] [pid 1041789:tid 1041962] [client 158.23.184.117:13015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/update/da222.php"] [unique_id "apK9-Yv3RhPI65jTFG771gAAAz0"]
[Sat Aug 29 05:09:45.023233 2026] [security2:error] [pid 1041789:tid 1042018] [client 74.7.244.44:42530] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "pondhollowchesapeakes.com"] [uri "/robots.txt"] [unique_id "apK9-Yv3RhPI65jTFG772AADdWU"]
[Sat Aug 29 05:09:45.023710 2026] [security2:error] [pid 1041789:tid 1041825] [remote 93.123.109.228:39292] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.gmsproductions.com"] [uri "/wp-config.php.old"] [unique_id "apK9-Yv3RhPI65jTFG772gADchc"]
[Sat Aug 29 05:09:45.023785 2026] [core:error] [pid 1041789:tid 1042045] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:45.023793 2026] [core:error] [pid 1041789:tid 1042045] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:45.039291 2026] [security2:error] [pid 1041789:tid 1041967] [client 52.139.37.240:31054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/0x.php"] [unique_id "apK9-Yv3RhPI65jTFG774QAAA0I"]
[Sat Aug 29 05:09:45.053869 2026] [security2:error] [pid 1041789:tid 1042048] [client 93.123.109.228:55154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/config.php"] [unique_id "apK9-Yv3RhPI65jTFG775QAAA5M"]
[Sat Aug 29 05:09:45.065166 2026] [security2:error] [pid 1041789:tid 1041803] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/website/.env"] [unique_id "apK9-Yv3RhPI65jTFG776wADTwE"]
[Sat Aug 29 05:09:45.065897 2026] [core:error] [pid 1041789:tid 1041839] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:45.065912 2026] [core:error] [pid 1041789:tid 1041839] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:45.066512 2026] [security2:error] [pid 1321:tid 1531] [client 20.48.250.41:53399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/vx.php"] [unique_id "apK9-WjCPtor9NZ-byTVkwAABmc"]
[Sat Aug 29 05:09:45.085241 2026] [security2:error] [pid 1041789:tid 1041870] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/wp-config.php"] [unique_id "apK9-Yv3RhPI65jTFG778wADT0Q"]
[Sat Aug 29 05:09:45.085996 2026] [core:error] [pid 1321:tid 1603] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:45.086015 2026] [core:error] [pid 1321:tid 1603] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:45.086080 2026] [core:error] [pid 1041789:tid 1041997] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:45.086090 2026] [core:error] [pid 1041789:tid 1041997] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:45.091503 2026] [security2:error] [pid 1321:tid 1571] [client 213.202.253.4:63193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "timportlock.net"] [uri "/wp-content/postnews.php"] [unique_id "apK9-WjCPtor9NZ-byTVlQAABo4"], referer: www.google.com
[Sat Aug 29 05:09:45.091696 2026] [security2:error] [pid 1041789:tid 1042006] [client 20.220.204.93:52347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/wp-act.php"] [unique_id "apK9-Yv3RhPI65jTFG779AAAA2k"]
[Sat Aug 29 05:09:45.093349 2026] [security2:error] [pid 1041789:tid 1041915] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/wp-config.php.bak"] [unique_id "apK9-Yv3RhPI65jTFG779QADT3E"]
[Sat Aug 29 05:09:45.103735 2026] [core:error] [pid 1321:tid 1589] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:45.103756 2026] [core:error] [pid 1321:tid 1589] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:45.104657 2026] [security2:error] [pid 1041789:tid 1042032] [client 20.48.160.90:50470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/Q3.php"] [unique_id "apK9-Yv3RhPI65jTFG779gAAA4M"]
[Sat Aug 29 05:09:45.111765 2026] [security2:error] [pid 1041789:tid 1041965] [client 20.48.250.41:45971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/f2.php"] [unique_id "apK9-Yv3RhPI65jTFG77-AAAA0A"]
[Sat Aug 29 05:09:45.112460 2026] [security2:error] [pid 1041789:tid 1042054] [client 20.52.41.200:4358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-content/packed.php"] [unique_id "apK9-Yv3RhPI65jTFG77-QAAA5k"]
[Sat Aug 29 05:09:45.115016 2026] [security2:error] [pid 1041789:tid 1041902] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/wp-config.php.new"] [unique_id "apK9-Yv3RhPI65jTFG77-gADT2Q"]
[Sat Aug 29 05:09:45.116529 2026] [security2:error] [pid 1041789:tid 1041867] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/wp-config.php.old"] [unique_id "apK9-Yv3RhPI65jTFG77-wADT0E"]
[Sat Aug 29 05:09:45.121868 2026] [core:error] [pid 1041789:tid 1042019] [client 158.23.184.117:7485] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:45.121882 2026] [core:error] [pid 1041789:tid 1042019] [client 158.23.184.117:7485] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:45.122586 2026] [core:error] [pid 1041789:tid 1041969] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:45.122602 2026] [core:error] [pid 1041789:tid 1041969] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:45.130041 2026] [security2:error] [pid 1041789:tid 1041944] [client 93.123.109.228:55020] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/config/.env"] [unique_id "apK9-Yv3RhPI65jTFG78AQAAAys"]
[Sat Aug 29 05:09:45.135386 2026] [security2:error] [pid 1041789:tid 1041892] [remote 93.123.109.228:55988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "cpcontacts.gmyerdesign.com"] [uri "/___proxy_subdomain_cpcontacts/wp-content/mysql.sql"] [unique_id "apK9-Yv3RhPI65jTFG78BgADT1o"]
[Sat Aug 29 05:09:45.135876 2026] [security2:error] [pid 1321:tid 1504] [client 68.155.159.216:18312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK9-WjCPtor9NZ-byTVmAAABkw"]
[Sat Aug 29 05:09:45.136447 2026] [cgid:error] [pid 1041789:tid 1041897] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:45.136805 2026] [core:error] [pid 1041789:tid 1041907] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:45.136817 2026] [core:error] [pid 1041789:tid 1041907] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:45.140592 2026] [core:error] [pid 1041789:tid 1041887] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:45.140607 2026] [core:error] [pid 1041789:tid 1041887] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:45.144706 2026] [core:error] [pid 1041789:tid 1041813] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:45.144720 2026] [core:error] [pid 1041789:tid 1041813] [remote 93.123.109.228:55988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:45.151215 2026] [cgid:error] [pid 1041789:tid 1041813] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:45.151242 2026] [cgid:error] [pid 1041789:tid 1041836] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:45.152457 2026] [cgid:error] [pid 1041789:tid 1041866] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:45.153818 2026] [security2:error] [pid 1041789:tid 1042013] [client 20.48.250.41:49948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/0x0x.php"] [unique_id "apK9-Yv3RhPI65jTFG78EQAAA3A"]
[Sat Aug 29 05:09:45.156016 2026] [security2:error] [pid 1041789:tid 1041943] [client 4.232.148.111:21473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/222.php"] [unique_id "apK9-Yv3RhPI65jTFG78EgAAAyo"]
[Sat Aug 29 05:09:45.156420 2026] [cgid:error] [pid 1041789:tid 1041830] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:45.156437 2026] [cgid:error] [pid 1041789:tid 1041802] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:45.160644 2026] [security2:error] [pid 1041789:tid 1042023] [client 68.155.159.216:52862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK9-Yv3RhPI65jTFG78EwAAA3o"]
[Sat Aug 29 05:09:45.162819 2026] [security2:error] [pid 1321:tid 1516] [client 20.104.49.130:46558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/press.php"] [unique_id "apK9-WjCPtor9NZ-byTVmgAABlg"]
[Sat Aug 29 05:09:45.164463 2026] [security2:error] [pid 1041789:tid 1042044] [client 93.123.109.228:54914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/config/aws.php"] [unique_id "apK9-Yv3RhPI65jTFG78FAAAA48"]
[Sat Aug 29 05:09:45.174066 2026] [security2:error] [pid 1321:tid 1490] [client 4.205.62.107:53146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/124.php"] [unique_id "apK9-WjCPtor9NZ-byTVmwAABj4"]
[Sat Aug 29 05:09:45.183771 2026] [security2:error] [pid 1041789:tid 1042052] [client 158.23.147.79:5845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-admin.php"] [unique_id "apK9-Yv3RhPI65jTFG78GgAAA5c"]
[Sat Aug 29 05:09:45.197517 2026] [security2:error] [pid 1041789:tid 1041998] [client 20.48.250.41:34266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/grsiuk.php"] [unique_id "apK9-Yv3RhPI65jTFG78IAAAA2E"]
[Sat Aug 29 05:09:45.214349 2026] [security2:error] [pid 1041789:tid 1042009] [client 158.23.184.117:12420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/xmr.php"] [unique_id "apK9-Yv3RhPI65jTFG78IwAAA2w"]
[Sat Aug 29 05:09:45.223607 2026] [security2:error] [pid 1041789:tid 1041976] [client 20.48.250.41:53396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/global.php"] [unique_id "apK9-Yv3RhPI65jTFG78JQAAA0s"]
[Sat Aug 29 05:09:45.225887 2026] [core:error] [pid 1321:tid 1514] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:45.225903 2026] [core:error] [pid 1321:tid 1514] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:45.226098 2026] [security2:error] [pid 1321:tid 1613] [client 20.48.250.41:50353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/fetch.php"] [unique_id "apK9-WjCPtor9NZ-byTVnQAABrg"]
[Sat Aug 29 05:09:45.230550 2026] [security2:error] [pid 1321:tid 1582] [client 74.248.24.12:37755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/av.php"] [unique_id "apK9-WjCPtor9NZ-byTVngAABpk"]
[Sat Aug 29 05:09:45.232235 2026] [security2:error] [pid 1321:tid 1509] [client 93.123.109.228:46736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/config/config.inc.php"] [unique_id "apK9-WjCPtor9NZ-byTVnwAABlE"]
[Sat Aug 29 05:09:45.240976 2026] [security2:error] [pid 1321:tid 1600] [client 20.48.160.90:45381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/Q1.php"] [unique_id "apK9-WjCPtor9NZ-byTVoAAABqs"]
[Sat Aug 29 05:09:45.242958 2026] [security2:error] [pid 1321:tid 1524] [client 20.48.250.41:46038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/grsiuk.php"] [unique_id "apK9-WjCPtor9NZ-byTVoQAABmA"]
[Sat Aug 29 05:09:45.255699 2026] [security2:error] [pid 1041789:tid 1041995] [client 52.139.37.240:31151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/CDX1.php"] [unique_id "apK9-Yv3RhPI65jTFG78KgAAA14"]
[Sat Aug 29 05:09:45.271109 2026] [security2:error] [pid 1321:tid 1512] [client 158.23.184.117:7485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/wp-admin/link-add.php"] [unique_id "apK9-WjCPtor9NZ-byTVowAABlQ"]
[Sat Aug 29 05:09:45.271596 2026] [security2:error] [pid 1041789:tid 1042047] [client 20.104.49.130:39078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/bolt.php"] [unique_id "apK9-Yv3RhPI65jTFG78LQAAA5I"]
[Sat Aug 29 05:09:45.279049 2026] [security2:error] [pid 1041789:tid 1042026] [client 93.123.109.228:55160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/config/config.php"] [unique_id "apK9-Yv3RhPI65jTFG78MgAAA30"]
[Sat Aug 29 05:09:45.285432 2026] [security2:error] [pid 1041789:tid 1042011] [client 93.123.109.228:55066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/config/env.php"] [unique_id "apK9-Yv3RhPI65jTFG78MwAAA24"]
[Sat Aug 29 05:09:45.297391 2026] [security2:error] [pid 1041789:tid 1041933] [client 20.220.204.93:41848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/24.php"] [unique_id "apK9-Yv3RhPI65jTFG78NAAAAyA"]
[Sat Aug 29 05:09:45.298416 2026] [security2:error] [pid 1041789:tid 1042020] [client 20.48.250.41:50035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/166.php"] [unique_id "apK9-Yv3RhPI65jTFG78NQAAA3c"]
[Sat Aug 29 05:09:45.318680 2026] [security2:error] [pid 1041789:tid 1041987] [client 93.123.109.228:54922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/config/module.config.php"] [unique_id "apK9-Yv3RhPI65jTFG78OQAAA1Y"]
[Sat Aug 29 05:09:45.323748 2026] [security2:error] [pid 1321:tid 1496] [client 93.123.109.228:46694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/config/nexmo.php"] [unique_id "apK9-WjCPtor9NZ-byTVpQAABkQ"]
[Sat Aug 29 05:09:45.342745 2026] [security2:error] [pid 1041789:tid 1041997] [client 20.48.250.41:34475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/wp-scr1pts.php"] [unique_id "apK9-Yv3RhPI65jTFG78PgAAA2A"]
[Sat Aug 29 05:09:45.343302 2026] [security2:error] [pid 1321:tid 1541] [client 158.23.147.79:63259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK9-WjCPtor9NZ-byTVpgAABnE"]
[Sat Aug 29 05:09:45.344566 2026] [security2:error] [pid 1041789:tid 1041992] [client 4.232.148.111:26835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/t.php"] [unique_id "apK9-Yv3RhPI65jTFG78PwAAA1s"]
[Sat Aug 29 05:09:45.352278 2026] [security2:error] [pid 1041789:tid 1042035] [client 74.248.24.12:15974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/filemanager.php"] [unique_id "apK9-Yv3RhPI65jTFG78QQAAA4Y"]
[Sat Aug 29 05:09:45.360438 2026] [security2:error] [pid 1321:tid 1576] [client 158.23.184.117:12435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK9-WjCPtor9NZ-byTVpwAABpM"]
[Sat Aug 29 05:09:45.375429 2026] [security2:error] [pid 1321:tid 1508] [client 158.23.147.79:14217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK9-WjCPtor9NZ-byTVrgAABlA"]
[Sat Aug 29 05:09:45.382161 2026] [security2:error] [pid 1321:tid 1542] [client 68.155.159.216:63871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-blog-header.php"] [unique_id "apK9-WjCPtor9NZ-byTVsAAABnI"]
[Sat Aug 29 05:09:45.383178 2026] [security2:error] [pid 1321:tid 1605] [client 20.48.250.41:50394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/vx.php"] [unique_id "apK9-WjCPtor9NZ-byTVsQAABrA"]
[Sat Aug 29 05:09:45.384901 2026] [security2:error] [pid 1041789:tid 1042032] [client 20.48.160.90:45410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/nz.php"] [unique_id "apK9-Yv3RhPI65jTFG78SwAAA4M"]
[Sat Aug 29 05:09:45.406858 2026] [security2:error] [pid 1041789:tid 1041965] [client 20.48.250.41:46027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/wp-scr1pts.php"] [unique_id "apK9-Yv3RhPI65jTFG78UAAAA0A"]
[Sat Aug 29 05:09:45.410687 2026] [security2:error] [pid 1041789:tid 1041949] [client 20.48.250.41:53385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/fs.php"] [unique_id "apK9-Yv3RhPI65jTFG78UgAAAzA"]
[Sat Aug 29 05:09:45.418068 2026] [security2:error] [pid 1041789:tid 1042015] [client 93.123.109.228:46710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/config/stripe.php"] [unique_id "apK9-Yv3RhPI65jTFG78VAAAA3I"]
[Sat Aug 29 05:09:45.421046 2026] [security2:error] [pid 1041789:tid 1042018] [client 40.83.93.50:17697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/alfanew.php7"] [unique_id "apK9-Yv3RhPI65jTFG78VgAAA3U"]
[Sat Aug 29 05:09:45.441289 2026] [security2:error] [pid 1321:tid 1517] [client 68.155.159.216:24472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/ans.php"] [unique_id "apK9-WjCPtor9NZ-byTVtAAABlk"]
[Sat Aug 29 05:09:45.441642 2026] [security2:error] [pid 1321:tid 1557] [client 143.198.192.137:52945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.192.198.143.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sortthrusolutions.com"] [uri "/wp-admin/install.php"] [unique_id "apK9-WjCPtor9NZ-byTVtQAABoA"]
[Sat Aug 29 05:09:45.449643 2026] [security2:error] [pid 1041789:tid 1041950] [client 20.220.204.93:52329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/155.php"] [unique_id "apK9-Yv3RhPI65jTFG78WwAAAzE"]
[Sat Aug 29 05:09:45.453153 2026] [security2:error] [pid 1041789:tid 1041979] [client 52.139.37.240:31510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/akcc.php"] [unique_id "apK9-Yv3RhPI65jTFG78XQAAA04"]
[Sat Aug 29 05:09:45.475030 2026] [security2:error] [pid 1321:tid 1527] [client 158.23.184.117:7461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/wp-includes/Text.php"] [unique_id "apK9-WjCPtor9NZ-byTVuAAABmM"]
[Sat Aug 29 05:09:45.485387 2026] [security2:error] [pid 1041789:tid 1041863] [remote 93.123.109.228:55834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.gmyer.com"] [uri "/wp-config.php"] [unique_id "apK9-Yv3RhPI65jTFG78YgADjT0"]
[Sat Aug 29 05:09:45.487263 2026] [security2:error] [pid 1041789:tid 1041809] [remote 93.123.109.228:55834] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.gmyer.com"] [uri "/wp-config.php.bak"] [unique_id "apK9-Yv3RhPI65jTFG78YwADjQc"]
[Sat Aug 29 05:09:45.490788 2026] [security2:error] [pid 1041789:tid 1042044] [client 68.155.159.216:64077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/.well-known/index.php"] [unique_id "apK9-Yv3RhPI65jTFG78ZAAAA48"]
[Sat Aug 29 05:09:45.495317 2026] [security2:error] [pid 1041789:tid 1041837] [remote 93.123.109.228:55834] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.gmyer.com"] [uri "/wp-config.php.new"] [unique_id "apK9-Yv3RhPI65jTFG78ZgADjSM"]
[Sat Aug 29 05:09:45.506929 2026] [security2:error] [pid 1041789:tid 1042040] [client 4.205.62.107:63872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/wsws.php"] [unique_id "apK9-Yv3RhPI65jTFG78ZwAAA4s"]
[Sat Aug 29 05:09:45.507393 2026] [security2:error] [pid 1041789:tid 1041806] [remote 93.123.109.228:55834] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.gmyer.com"] [uri "/wp-config.php.old"] [unique_id "apK9-Yv3RhPI65jTFG78aQADjQQ"]
[Sat Aug 29 05:09:45.514267 2026] [security2:error] [pid 1041789:tid 1042050] [client 158.23.184.117:13029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/wp-act.php"] [unique_id "apK9-Yv3RhPI65jTFG78agAAA5U"]
[Sat Aug 29 05:09:45.529692 2026] [security2:error] [pid 1041789:tid 1042052] [client 20.48.250.41:34464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/num.php"] [unique_id "apK9-Yv3RhPI65jTFG78bQAAA5c"]
[Sat Aug 29 05:09:45.538376 2026] [security2:error] [pid 1041789:tid 1041963] [client 20.48.160.90:50504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/sg.php"] [unique_id "apK9-Yv3RhPI65jTFG78cQAAAz4"]
[Sat Aug 29 05:09:45.548386 2026] [security2:error] [pid 1041789:tid 1041983] [client 61.9.8.250:5469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 250.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK9-Yv3RhPI65jTFG78cAAAA1I"]
[Sat Aug 29 05:09:45.548511 2026] [security2:error] [pid 1041789:tid 1041983] [client 61.9.8.250:5469] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK9-Yv3RhPI65jTFG78cAAAA1I"]
[Sat Aug 29 05:09:45.557011 2026] [security2:error] [pid 1041789:tid 1041939] [client 20.48.250.41:45339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/num.php"] [unique_id "apK9-Yv3RhPI65jTFG78dAAAAyY"]
[Sat Aug 29 05:09:45.573893 2026] [security2:error] [pid 1321:tid 1561] [client 20.52.41.200:4616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-admin/js/index.php"] [unique_id "apK9-WjCPtor9NZ-byTVuQAABoQ"]
[Sat Aug 29 05:09:45.576839 2026] [cgid:error] [pid 1041789:tid 1041816] [remote 34.138.144.127:46132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:09:45.585308 2026] [security2:error] [pid 1041789:tid 1042045] [client 20.48.250.41:49951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/h2a2ck.php"] [unique_id "apK9-Yv3RhPI65jTFG78egAAA5A"]
[Sat Aug 29 05:09:45.609023 2026] [security2:error] [pid 1321:tid 1587] [client 20.48.250.41:50384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/global.php"] [unique_id "apK9-WjCPtor9NZ-byTVuwAABp4"]
[Sat Aug 29 05:09:45.622104 2026] [security2:error] [pid 1041789:tid 1042014] [client 158.23.184.117:7223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/wp-trackback.php"] [unique_id "apK9-Yv3RhPI65jTFG78fQAAA3E"]
[Sat Aug 29 05:09:45.624863 2026] [security2:error] [pid 1321:tid 1586] [client 4.232.148.111:18433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/mini.php"] [unique_id "apK9-WjCPtor9NZ-byTVvQAABp0"]
[Sat Aug 29 05:09:45.631454 2026] [security2:error] [pid 1041789:tid 1041933] [client 68.155.159.216:49306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK9-Yv3RhPI65jTFG78fwAAAyA"]
[Sat Aug 29 05:09:45.634222 2026] [security2:error] [pid 1321:tid 1556] [client 34.169.171.101:29864] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "forensicengineernj.com"] [uri "/@fs/home/ubuntu/.env"] [unique_id "apK9-WjCPtor9NZ-byTVvwAABn8"]
[Sat Aug 29 05:09:45.642343 2026] [security2:error] [pid 1041789:tid 1042041] [client 34.169.171.101:29884] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK9-Yv3RhPI65jTFG78gQAAA4w"]
[Sat Aug 29 05:09:45.647011 2026] [security2:error] [pid 1321:tid 1536] [client 68.155.159.216:64466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/.well-known/content.php"] [unique_id "apK9-WjCPtor9NZ-byTVwwAABmw"]
[Sat Aug 29 05:09:45.649190 2026] [security2:error] [pid 1321:tid 1575] [client 34.169.171.101:29894] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/@fs/usr/src/app/.env"] [unique_id "apK9-WjCPtor9NZ-byTVxQAABpI"]
[Sat Aug 29 05:09:45.651568 2026] [security2:error] [pid 1041789:tid 1042028] [client 52.139.37.240:31082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK9-Yv3RhPI65jTFG78hQAAA38"]
[Sat Aug 29 05:09:45.652297 2026] [security2:error] [pid 1321:tid 1595] [client 34.169.171.101:29892] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "forensicengineernj.com"] [uri "/@fs/var/www/.env"] [unique_id "apK9-WjCPtor9NZ-byTVxgAABqY"]
[Sat Aug 29 05:09:45.654107 2026] [security2:error] [pid 1321:tid 1579] [client 34.169.171.101:29926] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/@fs/var/www/html/.env"] [unique_id "apK9-WjCPtor9NZ-byTVxwAABpY"]
[Sat Aug 29 05:09:45.655778 2026] [security2:error] [pid 1041789:tid 1042026] [client 34.169.171.101:29956] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "forensicengineernj.com"] [uri "/@fs/app/.terraform/terraform.tfstate"] [unique_id "apK9-Yv3RhPI65jTFG78hwAAA30"]
[Sat Aug 29 05:09:45.657332 2026] [security2:error] [pid 1321:tid 1552] [client 158.23.184.117:12663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/fff.php"] [unique_id "apK9-WjCPtor9NZ-byTVygAABns"]
[Sat Aug 29 05:09:45.658801 2026] [security2:error] [pid 1041789:tid 1041948] [client 34.169.171.101:29932] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK9-Yv3RhPI65jTFG78hgAAAy8"]
[Sat Aug 29 05:09:45.669018 2026] [security2:error] [pid 1321:tid 1598] [client 20.48.250.41:53393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/ioxi.php"] [unique_id "apK9-WjCPtor9NZ-byTVywAABqk"]
[Sat Aug 29 05:09:45.677321 2026] [security2:error] [pid 1321:tid 1593] [client 4.205.62.107:21843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/server_info.php"] [unique_id "apK9-WjCPtor9NZ-byTVzQAABqQ"]
[Sat Aug 29 05:09:45.677709 2026] [security2:error] [pid 1041789:tid 1041936] [client 20.48.160.90:50499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/hypo.php"] [unique_id "apK9-Yv3RhPI65jTFG78kAAAAyM"]
[Sat Aug 29 05:09:45.681150 2026] [security2:error] [pid 1041789:tid 1042006] [client 34.169.171.101:29884] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "forensicengineernj.com"] [uri "/404.html"] [unique_id "apK9-Yv3RhPI65jTFG78kgAAA2k"], referer: https://forensicengineernj.com/@fs/app/.env.local?raw??
[Sat Aug 29 05:09:45.694677 2026] [security2:error] [pid 1041789:tid 1042019] [client 158.23.147.79:63832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK9-Yv3RhPI65jTFG78lwAAA3Y"]
[Sat Aug 29 05:09:45.697522 2026] [security2:error] [pid 1041789:tid 1041965] [client 34.169.171.101:29932] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "forensicengineernj.com"] [uri "/404.html"] [unique_id "apK9-Yv3RhPI65jTFG78lgAAA0A"], referer: https://forensicengineernj.com/@fs/root/terraform.tfstate?raw??
[Sat Aug 29 05:09:45.714191 2026] [security2:error] [pid 1321:tid 1610] [client 20.48.250.41:46078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/a4.php"] [unique_id "apK9-WjCPtor9NZ-byTV0QAABrU"]
[Sat Aug 29 05:09:45.718444 2026] [security2:error] [pid 1041789:tid 1042053] [client 20.220.204.93:52279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/file.php"] [unique_id "apK9-Yv3RhPI65jTFG78mwAAA5g"]
[Sat Aug 29 05:09:45.733344 2026] [security2:error] [pid 1321:tid 1583] [client 74.248.24.12:2695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/file.php"] [unique_id "apK9-WjCPtor9NZ-byTV0gAABpo"]
[Sat Aug 29 05:09:45.735112 2026] [security2:error] [pid 1321:tid 1570] [client 45.148.10.62:40230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xtj.otn.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "apK9-WjCPtor9NZ-byTV0wAABo0"]
[Sat Aug 29 05:09:45.750405 2026] [security2:error] [pid 1041789:tid 1042013] [client 20.48.250.41:34452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/a4.php"] [unique_id "apK9-Yv3RhPI65jTFG78oAAAA3A"]
[Sat Aug 29 05:09:45.773075 2026] [security2:error] [pid 1041789:tid 1041980] [client 158.23.184.117:7890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/wp-admin/maint.php"] [unique_id "apK9-Yv3RhPI65jTFG78oQAAA08"]
[Sat Aug 29 05:09:45.783886 2026] [security2:error] [pid 1041789:tid 1041975] [client 93.123.109.228:54920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/crm/.env"] [unique_id "apK9-Yv3RhPI65jTFG78ogAAA0o"]
[Sat Aug 29 05:09:45.805319 2026] [security2:error] [pid 1321:tid 1530] [client 158.23.184.117:13025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/.tmb/dropdown.php"] [unique_id "apK9-WjCPtor9NZ-byTV1QAABmY"]
[Sat Aug 29 05:09:45.807585 2026] [security2:error] [pid 1041789:tid 1042057] [client 93.123.109.228:55020] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/cron/.env"] [unique_id "apK9-Yv3RhPI65jTFG78owAAA5w"]
[Sat Aug 29 05:09:45.816408 2026] [security2:error] [pid 1041789:tid 1042031] [client 20.48.160.90:45414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/Hd.php"] [unique_id "apK9-Yv3RhPI65jTFG78pAAAA4I"]
[Sat Aug 29 05:09:45.817869 2026] [security2:error] [pid 1321:tid 1500] [client 20.63.81.20:65153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/or.php"] [unique_id "apK9-WjCPtor9NZ-byTV1gAABkg"]
[Sat Aug 29 05:09:45.820723 2026] [security2:error] [pid 1041789:tid 1042029] [client 20.48.250.41:50334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/fs.php"] [unique_id "apK9-Yv3RhPI65jTFG78pQAAA4A"]
[Sat Aug 29 05:09:45.825321 2026] [security2:error] [pid 1321:tid 1565] [client 20.63.81.20:40000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/wp-admin/css/colors/coffee/mari.php"] [unique_id "apK9-WjCPtor9NZ-byTV1wAABog"]
[Sat Aug 29 05:09:45.827914 2026] [security2:error] [pid 1321:tid 1573] [client 4.232.148.111:26869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/i.php"] [unique_id "apK9-WjCPtor9NZ-byTV2AAABpA"]
[Sat Aug 29 05:09:45.832718 2026] [security2:error] [pid 1041789:tid 1041963] [client 93.123.109.228:55102] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/current/.env"] [unique_id "apK9-Yv3RhPI65jTFG78pgAAAz4"]
[Sat Aug 29 05:09:45.833966 2026] [security2:error] [pid 1041789:tid 1042042] [client 20.63.81.20:51272] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/kerang.php"] [unique_id "apK9-Yv3RhPI65jTFG78pwAAA40"]
[Sat Aug 29 05:09:45.835651 2026] [security2:error] [pid 1041789:tid 1041983] [client 20.48.250.41:53453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/bootstrap.php"] [unique_id "apK9-Yv3RhPI65jTFG78qAAAA1I"]
[Sat Aug 29 05:09:45.837917 2026] [security2:error] [pid 1041789:tid 1042037] [client 68.155.159.216:23509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK9-Yv3RhPI65jTFG78qQAAA4g"]
[Sat Aug 29 05:09:45.848438 2026] [security2:error] [pid 1041789:tid 1041939] [client 93.123.109.228:54998] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/demo/.env"] [unique_id "apK9-Yv3RhPI65jTFG78qwAAAyY"]
[Sat Aug 29 05:09:45.848712 2026] [security2:error] [pid 1041789:tid 1041954] [client 52.139.37.240:31539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/s.php"] [unique_id "apK9-Yv3RhPI65jTFG78rAAAAzU"]
[Sat Aug 29 05:09:45.851474 2026] [security2:error] [pid 1041789:tid 1042049] [client 20.63.81.20:46272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK9-Yv3RhPI65jTFG78rQAAA5Q"]
[Sat Aug 29 05:09:45.857198 2026] [security2:error] [pid 1041789:tid 1041995] [client 20.220.204.93:50774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK9-Yv3RhPI65jTFG78rgAAA14"]
[Sat Aug 29 05:09:45.870911 2026] [security2:error] [pid 1041789:tid 1041942] [client 20.48.250.41:46049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/tfm.php"] [unique_id "apK9-Yv3RhPI65jTFG78sAAAAyk"]
[Sat Aug 29 05:09:45.895045 2026] [security2:error] [pid 1321:tid 1531] [client 20.48.250.41:33861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/tfm.php"] [unique_id "apK9-WjCPtor9NZ-byTV2gAABmc"]
[Sat Aug 29 05:09:45.919738 2026] [security2:error] [pid 1041789:tid 1041914] [remote 34.74.130.21:35732] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/@fs/src/.env"] [unique_id "apK9-Yv3RhPI65jTFG78tQADN3A"]
[Sat Aug 29 05:09:45.920408 2026] [security2:error] [pid 1041789:tid 1041919] [remote 34.74.130.21:35732] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/@fs/app/.env"] [unique_id "apK9-Yv3RhPI65jTFG78tAADN3U"]
[Sat Aug 29 05:09:45.921968 2026] [security2:error] [pid 1041789:tid 1041950] [client 74.248.24.12:10972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-content/themes/admin.php"] [unique_id "apK9-Yv3RhPI65jTFG78uAAAAzE"]
[Sat Aug 29 05:09:45.923250 2026] [security2:error] [pid 1041789:tid 1041851] [remote 34.74.130.21:35732] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/.env"] [unique_id "apK9-Yv3RhPI65jTFG78swADNzE"]
[Sat Aug 29 05:09:45.926735 2026] [security2:error] [pid 1041789:tid 1041967] [client 93.123.109.228:54984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/dev/.env"] [unique_id "apK9-Yv3RhPI65jTFG78twAAA0I"]
[Sat Aug 29 05:09:45.927332 2026] [security2:error] [pid 1321:tid 1569] [client 20.151.200.44:22226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/d12.php"] [unique_id "apK9-WjCPtor9NZ-byTV2wAABow"]
[Sat Aug 29 05:09:45.936093 2026] [security2:error] [pid 1041789:tid 1041991] [client 158.23.184.117:7919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/wp-includes/num.php"] [unique_id "apK9-Yv3RhPI65jTFG78uwAAA1o"]
[Sat Aug 29 05:09:45.941052 2026] [security2:error] [pid 1041789:tid 1041987] [client 93.123.109.228:54920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/develop/.env"] [unique_id "apK9-Yv3RhPI65jTFG78uQAAA1Y"]
[Sat Aug 29 05:09:45.944814 2026] [security2:error] [pid 1041789:tid 1042051] [client 68.155.159.216:30563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK9-Yv3RhPI65jTFG78vQAAA5Y"]
[Sat Aug 29 05:09:45.945338 2026] [security2:error] [pid 1321:tid 1491] [client 40.83.93.50:14514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/xmlrpc.php0"] [unique_id "apK9-WjCPtor9NZ-byTV3AAABj8"]
[Sat Aug 29 05:09:45.946100 2026] [security2:error] [pid 1321:tid 1523] [client 20.48.250.41:30704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/error_log.php"] [unique_id "apK9-WjCPtor9NZ-byTV3QAABl8"]
[Sat Aug 29 05:09:45.950332 2026] [security2:error] [pid 1321:tid 1603] [client 20.48.160.90:50527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/im.php"] [unique_id "apK9-WjCPtor9NZ-byTV3wAABq4"]
[Sat Aug 29 05:09:45.953067 2026] [security2:error] [pid 1041789:tid 1042047] [client 158.23.184.117:12440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/robots.php"] [unique_id "apK9-Yv3RhPI65jTFG78vgAAA5I"]
[Sat Aug 29 05:09:45.958695 2026] [security2:error] [pid 1041789:tid 1042028] [client 20.63.81.20:40028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/wp-includes/images/crystal/option.php"] [unique_id "apK9-Yv3RhPI65jTFG78vwAAA38"]
[Sat Aug 29 05:09:45.962633 2026] [security2:error] [pid 1041789:tid 1042025] [client 20.63.81.20:63676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/ile56.php"] [unique_id "apK9-Yv3RhPI65jTFG78wQAAA3w"]
[Sat Aug 29 05:09:45.962953 2026] [security2:error] [pid 1041789:tid 1041948] [client 93.123.109.228:55020] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/developer/.env"] [unique_id "apK9-Yv3RhPI65jTFG78wAAAAy8"]
[Sat Aug 29 05:09:45.966273 2026] [security2:error] [pid 1321:tid 1571] [client 68.155.159.216:1867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/lock.php"] [unique_id "apK9-WjCPtor9NZ-byTV4AAABo4"]
[Sat Aug 29 05:09:45.966327 2026] [security2:error] [pid 1321:tid 1533] [client 197.232.63.170:49775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 170.63.232.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK9-WjCPtor9NZ-byTV4QAABmk"]
[Sat Aug 29 05:09:45.966436 2026] [security2:error] [pid 1321:tid 1533] [client 197.232.63.170:49775] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK9-WjCPtor9NZ-byTV4QAABmk"]
[Sat Aug 29 05:09:45.967286 2026] [security2:error] [pid 1041789:tid 1042020] [client 20.48.250.41:50383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/ioxi.php"] [unique_id "apK9-Yv3RhPI65jTFG78wgAAA3c"]
[Sat Aug 29 05:09:45.976938 2026] [security2:error] [pid 1321:tid 1589] [client 93.123.109.228:46718] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/development/.env"] [unique_id "apK9-WjCPtor9NZ-byTV4gAABqA"]
[Sat Aug 29 05:09:45.977740 2026] [security2:error] [pid 1321:tid 1488] [client 20.63.81.20:55608] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/m.php"] [unique_id "apK9-WjCPtor9NZ-byTV4wAABjw"]
[Sat Aug 29 05:09:45.979124 2026] [security2:error] [pid 1321:tid 1564] [client 158.23.147.79:6143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK9-WjCPtor9NZ-byTV5AAABoc"]
[Sat Aug 29 05:09:45.987122 2026] [security2:error] [pid 1321:tid 1506] [client 20.63.81.20:46416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK9-WjCPtor9NZ-byTV5QAABk4"]
[Sat Aug 29 05:09:46.005970 2026] [security2:error] [pid 1321:tid 1504] [client 20.220.204.93:50707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/06.php"] [unique_id "apK9-mjCPtor9NZ-byTV5gAABkw"]
[Sat Aug 29 05:09:46.008061 2026] [security2:error] [pid 1321:tid 1599] [client 20.48.250.41:53449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/export.php"] [unique_id "apK9-mjCPtor9NZ-byTV5wAABqo"]
[Sat Aug 29 05:09:46.018219 2026] [security2:error] [pid 1041789:tid 1041934] [client 68.155.159.216:61260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK9-ov3RhPI65jTFG78xwAAAyE"]
[Sat Aug 29 05:09:46.033649 2026] [security2:error] [pid 1041789:tid 1042053] [client 20.48.250.41:45974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/Geforce.php"] [unique_id "apK9-ov3RhPI65jTFG78ygAAA5g"]
[Sat Aug 29 05:09:46.034088 2026] [security2:error] [pid 1041789:tid 1042005] [client 20.52.41.200:4620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/core.php"] [unique_id "apK9-ov3RhPI65jTFG78ywAAA2g"]
[Sat Aug 29 05:09:46.048397 2026] [security2:error] [pid 1041789:tid 1042017] [client 52.139.37.240:31163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/sagax.php"] [unique_id "apK9-ov3RhPI65jTFG78zQAAA3Q"]
[Sat Aug 29 05:09:46.054379 2026] [security2:error] [pid 1041789:tid 1042007] [client 20.48.250.41:34449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/click.php"] [unique_id "apK9-ov3RhPI65jTFG78zwAAA2o"]
[Sat Aug 29 05:09:46.069485 2026] [security2:error] [pid 1321:tid 1514] [client 4.205.62.107:58482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/mcebraed.php"] [unique_id "apK9-mjCPtor9NZ-byTV6AAABlY"]
[Sat Aug 29 05:09:46.070429 2026] [security2:error] [pid 1041789:tid 1041823] [remote 34.74.130.21:35732] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/.env"] [unique_id "apK9-ov3RhPI65jTFG780gADKhU"]
[Sat Aug 29 05:09:46.079506 2026] [security2:error] [pid 1041789:tid 1041949] [client 158.23.184.117:7901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/identity.php"] [unique_id "apK9-ov3RhPI65jTFG781AAAAzA"]
[Sat Aug 29 05:09:46.084017 2026] [security2:error] [pid 1041789:tid 1041997] [client 20.48.160.90:45421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/fc.php"] [unique_id "apK9-ov3RhPI65jTFG781QAAA2A"]
[Sat Aug 29 05:09:46.090063 2026] [security2:error] [pid 1321:tid 1524] [client 4.205.62.107:6938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/ms-edit.php"] [unique_id "apK9-mjCPtor9NZ-byTV6wAABmA"]
[Sat Aug 29 05:09:46.094345 2026] [security2:error] [pid 1321:tid 1512] [client 20.63.81.20:40043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/wp-includes/pomo/xxx.php"] [unique_id "apK9-mjCPtor9NZ-byTV7QAABlQ"]
[Sat Aug 29 05:09:46.095364 2026] [security2:error] [pid 1041789:tid 1041975] [client 4.205.62.107:62771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/ccou.php"] [unique_id "apK9-ov3RhPI65jTFG781wAAA0o"]
[Sat Aug 29 05:09:46.102009 2026] [security2:error] [pid 1321:tid 1535] [client 20.48.250.41:50406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/bootstrap.php"] [unique_id "apK9-mjCPtor9NZ-byTV7gAABms"]
[Sat Aug 29 05:09:46.102997 2026] [security2:error] [pid 1321:tid 1613] [client 158.23.184.117:12997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/.well-known/install.php"] [unique_id "apK9-mjCPtor9NZ-byTV7wAABrg"]
[Sat Aug 29 05:09:46.104185 2026] [security2:error] [pid 1321:tid 1550] [client 4.232.148.111:28831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/aa.php"] [unique_id "apK9-mjCPtor9NZ-byTV8AAABnk"]
[Sat Aug 29 05:09:46.106312 2026] [security2:error] [pid 1321:tid 1502] [client 20.63.81.20:55617] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/fling.php"] [unique_id "apK9-mjCPtor9NZ-byTV8QAABko"]
[Sat Aug 29 05:09:46.108691 2026] [security2:error] [pid 1041789:tid 1041960] [client 20.63.81.20:65190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/emmh.php"] [unique_id "apK9-ov3RhPI65jTFG782gAAAzs"]
[Sat Aug 29 05:09:46.121147 2026] [security2:error] [pid 1321:tid 1597] [client 68.155.159.216:1892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/asd.php"] [unique_id "apK9-mjCPtor9NZ-byTV8gAABqg"]
[Sat Aug 29 05:09:46.133919 2026] [security2:error] [pid 1321:tid 1541] [client 20.63.81.20:46354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/about.php"] [unique_id "apK9-mjCPtor9NZ-byTV9AAABnE"]
[Sat Aug 29 05:09:46.137019 2026] [security2:error] [pid 1041789:tid 1042037] [client 20.220.204.93:50746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/class.php"] [unique_id "apK9-ov3RhPI65jTFG782wAAA4g"]
[Sat Aug 29 05:09:46.143240 2026] [security2:error] [pid 1041789:tid 1041998] [client 20.48.250.41:49941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/403.php"] [unique_id "apK9-ov3RhPI65jTFG783AAAA2E"]
[Sat Aug 29 05:09:46.154371 2026] [security2:error] [pid 1041789:tid 1041954] [client 20.48.250.41:53420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/gk.php"] [unique_id "apK9-ov3RhPI65jTFG783gAAAzU"]
[Sat Aug 29 05:09:46.166415 2026] [security2:error] [pid 1041789:tid 1041819] [remote 34.74.130.21:35732] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/media../.env"] [unique_id "apK9-ov3RhPI65jTFG784AADXhE"]
[Sat Aug 29 05:09:46.182085 2026] [security2:error] [pid 1041789:tid 1041927] [remote 34.74.130.21:35732] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2froot/.env"] [unique_id "apK9-ov3RhPI65jTFG784gADH30"]
[Sat Aug 29 05:09:46.196263 2026] [security2:error] [pid 1041789:tid 1042032] [client 103.162.125.59:63863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.125.162.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK9-ov3RhPI65jTFG785AAAA4M"]
[Sat Aug 29 05:09:46.196401 2026] [security2:error] [pid 1041789:tid 1042032] [client 103.162.125.59:63863] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK9-ov3RhPI65jTFG785AAAA4M"]
[Sat Aug 29 05:09:46.215715 2026] [autoindex:error] [pid 1041789:tid 1041856] [remote 45.148.10.62:40236] AH01276: Cannot serve directory /home3/xtjotnmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:09:46.216506 2026] [security2:error] [pid 1321:tid 1557] [client 20.48.160.90:50476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/ke.php"] [unique_id "apK9-mjCPtor9NZ-byTV9QAABoA"]
[Sat Aug 29 05:09:46.223901 2026] [security2:error] [pid 1041789:tid 1042051] [client 20.48.250.41:45995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/click.php"] [unique_id "apK9-ov3RhPI65jTFG785gAAA5Y"]
[Sat Aug 29 05:09:46.232106 2026] [core:error] [pid 1041789:tid 1041931] [client 158.23.184.117:7891] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:46.232134 2026] [core:error] [pid 1041789:tid 1041931] [client 158.23.184.117:7891] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:46.237030 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.63.81.20:55628] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/btyuio.php"] [unique_id "apK9-ov3RhPI65jTFG786QAAA30"]
[Sat Aug 29 05:09:46.239635 2026] [security2:error] [pid 1041789:tid 1042025] [client 68.155.159.216:18368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/images/index.php"] [unique_id "apK9-ov3RhPI65jTFG786gAAA3w"]
[Sat Aug 29 05:09:46.244110 2026] [security2:error] [pid 1321:tid 1551] [client 20.63.81.20:40002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/650.php"] [unique_id "apK9-mjCPtor9NZ-byTV9wAABno"]
[Sat Aug 29 05:09:46.250495 2026] [security2:error] [pid 1041789:tid 1042056] [client 20.63.81.20:65191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/em.php"] [unique_id "apK9-ov3RhPI65jTFG787QAAA5s"]
[Sat Aug 29 05:09:46.252273 2026] [security2:error] [pid 1041789:tid 1041948] [client 173.252.82.73:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/cuisine/cuisine-africaine/"] [unique_id "apK9-ov3RhPI65jTFG787AAAAy8"]
[Sat Aug 29 05:09:46.254740 2026] [security2:error] [pid 1321:tid 1545] [client 20.48.250.41:50412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/export.php"] [unique_id "apK9-mjCPtor9NZ-byTV-AAABnU"]
[Sat Aug 29 05:09:46.256079 2026] [security2:error] [pid 1041789:tid 1042044] [client 74.248.24.12:5750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK9-ov3RhPI65jTFG787wAAA48"]
[Sat Aug 29 05:09:46.259015 2026] [security2:error] [pid 1041789:tid 1041940] [client 20.48.250.41:33882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/ms.php"] [unique_id "apK9-ov3RhPI65jTFG788AAAAyc"]
[Sat Aug 29 05:09:46.264055 2026] [security2:error] [pid 1041789:tid 1042009] [client 20.63.81.20:46396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/admin.php/admin.php"] [unique_id "apK9-ov3RhPI65jTFG788gAAA2w"]
[Sat Aug 29 05:09:46.273156 2026] [core:error] [pid 1041789:tid 1042006] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:46.273176 2026] [core:error] [pid 1041789:tid 1042006] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:46.276127 2026] [core:error] [pid 1041789:tid 1042047] [client 158.23.184.117:12992] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:46.276144 2026] [core:error] [pid 1041789:tid 1042047] [client 158.23.184.117:12992] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:46.279189 2026] [security2:error] [pid 1041789:tid 1042035] [client 93.123.109.228:55020] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/erp/.env"] [unique_id "apK9-ov3RhPI65jTFG789wAAA4Y"]
[Sat Aug 29 05:09:46.281754 2026] [security2:error] [pid 1041789:tid 1041956] [client 68.155.159.216:52782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/.well-knownold/index.php"] [unique_id "apK9-ov3RhPI65jTFG78-AAAAzc"]
[Sat Aug 29 05:09:46.296317 2026] [security2:error] [pid 1041789:tid 1042053] [client 158.23.147.79:6127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-includes/assets/index.php"] [unique_id "apK9-ov3RhPI65jTFG78-QAAA5g"]
[Sat Aug 29 05:09:46.303945 2026] [security2:error] [pid 1041789:tid 1042005] [client 20.48.250.41:53377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/logs1.php"] [unique_id "apK9-ov3RhPI65jTFG78-gAAA2g"]
[Sat Aug 29 05:09:46.310731 2026] [security2:error] [pid 1041789:tid 1041939] [client 4.232.148.111:23223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/deepseek_d.php"] [unique_id "apK9-ov3RhPI65jTFG78-wAAAyY"]
[Sat Aug 29 05:09:46.326427 2026] [security2:error] [pid 1041789:tid 1041968] [client 4.205.62.107:53310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/test1.php"] [unique_id "apK9-ov3RhPI65jTFG78_AAAA0M"]
[Sat Aug 29 05:09:46.348768 2026] [security2:error] [pid 1041789:tid 1041945] [client 20.48.250.41:30605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/cytyr.php"] [unique_id "apK9-ov3RhPI65jTFG78_QAAAyw"]
[Sat Aug 29 05:09:46.355521 2026] [security2:error] [pid 1041789:tid 1042050] [client 20.48.160.90:50507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/tf.php"] [unique_id "apK9-ov3RhPI65jTFG78_gAAA5U"]
[Sat Aug 29 05:09:46.359209 2026] [security2:error] [pid 1041789:tid 1042040] [client 20.48.250.41:46017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/ms.php"] [unique_id "apK9-ov3RhPI65jTFG78_wAAA4s"]
[Sat Aug 29 05:09:46.373571 2026] [security2:error] [pid 1321:tid 1561] [client 20.63.81.20:55655] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/dehnl.php"] [unique_id "apK9-mjCPtor9NZ-byTV-wAABoQ"]
[Sat Aug 29 05:09:46.373632 2026] [security2:error] [pid 1321:tid 1507] [client 20.63.81.20:40021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/nakrip.php"] [unique_id "apK9-mjCPtor9NZ-byTV-gAABk8"]
[Sat Aug 29 05:09:46.381723 2026] [security2:error] [pid 1041789:tid 1042057] [client 20.220.204.93:52291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/8.php"] [unique_id "apK9-ov3RhPI65jTFG79AgAAA5w"]
[Sat Aug 29 05:09:46.381791 2026] [security2:error] [pid 1041789:tid 1042029] [client 93.123.109.228:46708] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/etc/apache2/apache2.conf"] [unique_id "apK9-ov3RhPI65jTFG79AQAAA4A"]
[Sat Aug 29 05:09:46.383109 2026] [security2:error] [pid 1041789:tid 1042046] [client 93.123.109.228:54946] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/etc/boto.cfg"] [unique_id "apK9-ov3RhPI65jTFG79AwAAA5E"]
[Sat Aug 29 05:09:46.384592 2026] [security2:error] [pid 1041789:tid 1041963] [client 20.63.81.20:47344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/dvve.php"] [unique_id "apK9-ov3RhPI65jTFG79BAAAAz4"]
[Sat Aug 29 05:09:46.392491 2026] [security2:error] [pid 1321:tid 1553] [client 158.23.147.79:11310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK9-mjCPtor9NZ-byTV_AAABnw"]
[Sat Aug 29 05:09:46.405407 2026] [security2:error] [pid 1041789:tid 1042037] [client 20.63.81.20:46433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/media.php"] [unique_id "apK9-ov3RhPI65jTFG79BgAAA4g"]
[Sat Aug 29 05:09:46.424731 2026] [security2:error] [pid 1041789:tid 1041938] [client 158.23.184.117:12416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/wp-admin/about.php"] [unique_id "apK9-ov3RhPI65jTFG79CAAAAyU"]
[Sat Aug 29 05:09:46.427298 2026] [security2:error] [pid 1041789:tid 1042055] [client 93.123.109.228:55102] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/fe/.env"] [unique_id "apK9-ov3RhPI65jTFG79CgAAA5o"]
[Sat Aug 29 05:09:46.429411 2026] [security2:error] [pid 1321:tid 1527] [client 40.83.93.50:10060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/content.php"] [unique_id "apK9-mjCPtor9NZ-byTV_QAABmM"]
[Sat Aug 29 05:09:46.440780 2026] [security2:error] [pid 1041789:tid 1041979] [client 20.48.250.41:50318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/gk.php"] [unique_id "apK9-ov3RhPI65jTFG79DAAAA04"]
[Sat Aug 29 05:09:46.441711 2026] [security2:error] [pid 1041789:tid 1042019] [client 74.248.24.12:4380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-admin/css/admin.php"] [unique_id "apK9-ov3RhPI65jTFG79DQAAA3Y"]
[Sat Aug 29 05:09:46.454036 2026] [security2:error] [pid 1041789:tid 1042034] [client 20.48.250.41:53446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/inege.php"] [unique_id "apK9-ov3RhPI65jTFG79DwAAA4U"]
[Sat Aug 29 05:09:46.455425 2026] [security2:error] [pid 1041789:tid 1041950] [client 158.23.147.79:62736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK9-ov3RhPI65jTFG79EAAAAzE"]
[Sat Aug 29 05:09:46.458923 2026] [security2:error] [pid 1041789:tid 1041967] [client 20.48.250.41:33875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/zxekqlxb.php"] [unique_id "apK9-ov3RhPI65jTFG79EQAAA0I"]
[Sat Aug 29 05:09:46.472331 2026] [security2:error] [pid 1321:tid 1549] [client 52.139.37.240:31115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/wp-content/plugins/ftde.php"] [unique_id "apK9-mjCPtor9NZ-byTV_gAABng"]
[Sat Aug 29 05:09:46.479793 2026] [security2:error] [pid 1041789:tid 1041941] [client 20.52.41.200:4592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/admin/function.php"] [unique_id "apK9-ov3RhPI65jTFG79EgAAAyg"]
[Sat Aug 29 05:09:46.487252 2026] [security2:error] [pid 1041789:tid 1042028] [client 93.123.109.228:54920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/front/.env"] [unique_id "apK9-ov3RhPI65jTFG79EwAAA38"]
[Sat Aug 29 05:09:46.489259 2026] [security2:error] [pid 1321:tid 1590] [client 93.123.109.228:46718] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/frontend/.env"] [unique_id "apK9-mjCPtor9NZ-byTV_wAABqE"]
[Sat Aug 29 05:09:46.490898 2026] [security2:error] [pid 1041789:tid 1042025] [client 68.155.159.216:63746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK9-ov3RhPI65jTFG79FAAAA3w"]
[Sat Aug 29 05:09:46.491934 2026] [security2:error] [pid 1041789:tid 1042056] [client 20.48.160.90:45423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/px.php"] [unique_id "apK9-ov3RhPI65jTFG79FQAAA5s"]
[Sat Aug 29 05:09:46.497810 2026] [security2:error] [pid 1041789:tid 1041948] [client 68.155.159.216:33651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK9-ov3RhPI65jTFG79FgAAAy8"]
[Sat Aug 29 05:09:46.513823 2026] [security2:error] [pid 1041789:tid 1042030] [client 20.63.81.20:40008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/wp-includes/interactivity-api/flower.php"] [unique_id "apK9-ov3RhPI65jTFG79FwAAA4E"]
[Sat Aug 29 05:09:46.514281 2026] [security2:error] [pid 1041789:tid 1041940] [client 20.63.81.20:63714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/doo.php"] [unique_id "apK9-ov3RhPI65jTFG79GAAAAyc"]
[Sat Aug 29 05:09:46.527305 2026] [security2:error] [pid 1041789:tid 1042020] [client 20.63.81.20:55559] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/zoo2.php"] [unique_id "apK9-ov3RhPI65jTFG79GQAAA3c"]
[Sat Aug 29 05:09:46.530336 2026] [security2:error] [pid 1321:tid 1579] [client 20.220.204.93:50755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/0x0x.php"] [unique_id "apK9-mjCPtor9NZ-byTWAAAABpY"]
[Sat Aug 29 05:09:46.530731 2026] [security2:error] [pid 1041789:tid 1041990] [client 20.48.250.41:46018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/zxekqlxb.php"] [unique_id "apK9-ov3RhPI65jTFG79GgAAA1k"]
[Sat Aug 29 05:09:46.547134 2026] [security2:error] [pid 1041789:tid 1041808] [remote 34.74.130.21:35732] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/static/.env"] [unique_id "apK9-ov3RhPI65jTFG79GwADMgY"]
[Sat Aug 29 05:09:46.564344 2026] [security2:error] [pid 1041789:tid 1041992] [client 20.48.250.41:50037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/galer.php"] [unique_id "apK9-ov3RhPI65jTFG79HgAAA1s"]
[Sat Aug 29 05:09:46.566996 2026] [security2:error] [pid 1041789:tid 1041935] [client 4.232.148.111:21454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/c.php"] [unique_id "apK9-ov3RhPI65jTFG79HwAAAyI"]
[Sat Aug 29 05:09:46.570478 2026] [security2:error] [pid 1041789:tid 1042006] [client 158.23.184.117:13011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/wp-content/backup.php"] [unique_id "apK9-ov3RhPI65jTFG79IAAAA2k"]
[Sat Aug 29 05:09:46.590658 2026] [security2:error] [pid 1041789:tid 1041968] [client 20.48.250.41:50322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/logs1.php"] [unique_id "apK9-ov3RhPI65jTFG79JQAAA0M"]
[Sat Aug 29 05:09:46.594558 2026] [security2:error] [pid 1041789:tid 1041943] [client 20.48.250.41:53409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/wp-link10.php"] [unique_id "apK9-ov3RhPI65jTFG79JgAAAyo"]
[Sat Aug 29 05:09:46.599762 2026] [security2:error] [pid 1041789:tid 1041949] [client 68.155.159.216:64125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-content/themes/too.php"] [unique_id "apK9-ov3RhPI65jTFG79JwAAAzA"]
[Sat Aug 29 05:09:46.629498 2026] [security2:error] [pid 1041789:tid 1042052] [client 20.104.49.130:57625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/bolt.php"] [unique_id "apK9-ov3RhPI65jTFG79KwAAA5c"]
[Sat Aug 29 05:09:46.637629 2026] [security2:error] [pid 1321:tid 1585] [client 93.123.109.228:46718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/infophp.php"] [unique_id "apK9-mjCPtor9NZ-byTWAgAABpw"]
[Sat Aug 29 05:09:46.637634 2026] [security2:error] [pid 1041789:tid 1042046] [client 93.123.109.228:54920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/info.php"] [unique_id "apK9-ov3RhPI65jTFG79LQAAA5E"]
[Sat Aug 29 05:09:46.644365 2026] [security2:error] [pid 1041789:tid 1041963] [client 4.205.62.107:63913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/localconf.php"] [unique_id "apK9-ov3RhPI65jTFG79LgAAAz4"]
[Sat Aug 29 05:09:46.649799 2026] [security2:error] [pid 1321:tid 1593] [client 20.48.160.90:50481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/jg.php"] [unique_id "apK9-mjCPtor9NZ-byTWAwAABqQ"]
[Sat Aug 29 05:09:46.649931 2026] [security2:error] [pid 1041789:tid 1041875] [remote 34.74.130.21:35732] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ"] [unique_id "apK9-ov3RhPI65jTFG79LwADjUk"]
[Sat Aug 29 05:09:46.668700 2026] [security2:error] [pid 1041789:tid 1041976] [client 20.104.49.130:29955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.likesareus.com"] [uri "/edit.php"] [unique_id "apK9-ov3RhPI65jTFG79MgAAA0s"]
[Sat Aug 29 05:09:46.670190 2026] [security2:error] [pid 1041789:tid 1041947] [client 20.48.250.41:45959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/init.php"] [unique_id "apK9-ov3RhPI65jTFG79MwAAAy4"]
[Sat Aug 29 05:09:46.673011 2026] [security2:error] [pid 1041789:tid 1041938] [client 20.220.204.93:50746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/166.php"] [unique_id "apK9-ov3RhPI65jTFG79NAAAAyU"]
[Sat Aug 29 05:09:46.687136 2026] [security2:error] [pid 1041789:tid 1042050] [client 52.139.37.240:31549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/wp-content/uploads/admin.php"] [unique_id "apK9-ov3RhPI65jTFG79NQAAA5U"]
[Sat Aug 29 05:09:46.717246 2026] [security2:error] [pid 1321:tid 1607] [client 158.23.184.117:13046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/.well-known/aa.php"] [unique_id "apK9-mjCPtor9NZ-byTWBQAABrI"]
[Sat Aug 29 05:09:46.722383 2026] [security2:error] [pid 1041789:tid 1042054] [client 20.48.250.41:50011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/baixy.php"] [unique_id "apK9-ov3RhPI65jTFG79NwAAA5k"]
[Sat Aug 29 05:09:46.730092 2026] [security2:error] [pid 1041789:tid 1042034] [client 20.48.250.41:34443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/init.php"] [unique_id "apK9-ov3RhPI65jTFG79OQAAA4U"]
[Sat Aug 29 05:09:46.735079 2026] [security2:error] [pid 1041789:tid 1041950] [client 68.155.159.216:49168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK9-ov3RhPI65jTFG79OgAAAzE"]
[Sat Aug 29 05:09:46.739793 2026] [security2:error] [pid 1041789:tid 1041998] [client 20.48.250.41:53475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/ww.php"] [unique_id "apK9-ov3RhPI65jTFG79OwAAA2E"]
[Sat Aug 29 05:09:46.744292 2026] [security2:error] [pid 1041789:tid 1041886] [remote 45.148.10.62:40236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xtj.otn.mybluehost.me"] [uri "/wp-login.php"] [unique_id "apK9-ov3RhPI65jTFG79PAADcVQ"]
[Sat Aug 29 05:09:46.771710 2026] [security2:error] [pid 1041789:tid 1041997] [client 74.248.24.12:22420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/gmo.php"] [unique_id "apK9-ov3RhPI65jTFG79PgAAA2A"]
[Sat Aug 29 05:09:46.779981 2026] [security2:error] [pid 1041789:tid 1042051] [client 20.48.160.90:45393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/yj.php"] [unique_id "apK9-ov3RhPI65jTFG79PwAAA5Y"]
[Sat Aug 29 05:09:46.786154 2026] [security2:error] [pid 1041789:tid 1041931] [client 93.123.109.228:46708] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/laravel/.env"] [unique_id "apK9-ov3RhPI65jTFG79QAAAAx4"]
[Sat Aug 29 05:09:46.792806 2026] [security2:error] [pid 1041789:tid 1042015] [client 158.23.147.79:38762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/makeasmtp.php"] [unique_id "apK9-ov3RhPI65jTFG79QQAAA3I"]
[Sat Aug 29 05:09:46.793746 2026] [security2:error] [pid 1321:tid 1568] [client 20.48.250.41:50395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/inege.php"] [unique_id "apK9-mjCPtor9NZ-byTWBwAABos"]
[Sat Aug 29 05:09:46.794047 2026] [security2:error] [pid 1041789:tid 1042026] [client 93.123.109.228:54964] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/lms/.env"] [unique_id "apK9-ov3RhPI65jTFG79QgAAA30"]
[Sat Aug 29 05:09:46.811603 2026] [security2:error] [pid 1321:tid 1610] [client 52.139.37.240:34136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/ahax.php"] [unique_id "apK9-mjCPtor9NZ-byTWCgAABrU"]
[Sat Aug 29 05:09:46.813415 2026] [security2:error] [pid 1041789:tid 1042020] [client 4.205.62.107:22276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/hosty.php"] [unique_id "apK9-ov3RhPI65jTFG79SwAAA3c"]
[Sat Aug 29 05:09:46.816936 2026] [security2:error] [pid 1041789:tid 1042000] [client 93.123.109.228:55102] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/local/.env"] [unique_id "apK9-ov3RhPI65jTFG79TgAAA2M"]
[Sat Aug 29 05:09:46.823582 2026] [security2:error] [pid 1041789:tid 1042006] [client 20.48.250.41:46053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/term.php"] [unique_id "apK9-ov3RhPI65jTFG79VAAAA2k"]
[Sat Aug 29 05:09:46.871014 2026] [security2:error] [pid 1321:tid 1572] [client 158.23.184.117:12437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "apK9-mjCPtor9NZ-byTWDwAABo8"]
[Sat Aug 29 05:09:46.871459 2026] [security2:error] [pid 1321:tid 1500] [client 20.48.250.41:50169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/w1px.php"] [unique_id "apK9-mjCPtor9NZ-byTWEAAABkg"]
[Sat Aug 29 05:09:46.873835 2026] [security2:error] [pid 1321:tid 1563] [client 20.48.250.41:33919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/term.php"] [unique_id "apK9-mjCPtor9NZ-byTWEQAABoY"]
[Sat Aug 29 05:09:46.890938 2026] [security2:error] [pid 1041789:tid 1041954] [client 20.48.250.41:30682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/ava.php"] [unique_id "apK9-ov3RhPI65jTFG79WQAAAzU"]
[Sat Aug 29 05:09:46.896495 2026] [security2:error] [pid 1041789:tid 1041965] [client 93.123.109.228:54946] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/marketing/.env"] [unique_id "apK9-ov3RhPI65jTFG79WwAAA0A"]
[Sat Aug 29 05:09:46.913531 2026] [security2:error] [pid 1321:tid 1581] [client 68.155.159.216:14210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK9-mjCPtor9NZ-byTWEgAABpg"]
[Sat Aug 29 05:09:46.928426 2026] [security2:error] [pid 1041789:tid 1041971] [client 20.52.41.200:5287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/admin/index.php"] [unique_id "apK9-ov3RhPI65jTFG79XQAAA0Y"]
[Sat Aug 29 05:09:46.930760 2026] [security2:error] [pid 1321:tid 1560] [client 40.83.93.50:18280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/wxo.php"] [unique_id "apK9-mjCPtor9NZ-byTWFwAABoM"]
[Sat Aug 29 05:09:46.932975 2026] [security2:error] [pid 1321:tid 1591] [client 158.23.147.79:44537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/ws.php"] [unique_id "apK9-mjCPtor9NZ-byTWGAAABqI"]
[Sat Aug 29 05:09:46.934330 2026] [security2:error] [pid 1321:tid 1578] [client 20.48.160.90:50461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/zi.php"] [unique_id "apK9-mjCPtor9NZ-byTWFAAABpU"]
[Sat Aug 29 05:09:46.934580 2026] [security2:error] [pid 1321:tid 1558] [client 4.232.148.111:26859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "apK9-mjCPtor9NZ-byTWGQAABoE"]
[Sat Aug 29 05:09:46.941893 2026] [security2:error] [pid 1041789:tid 1042040] [client 93.123.109.228:46708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/infos.php"] [unique_id "apK9-ov3RhPI65jTFG79YAAAA4s"]
[Sat Aug 29 05:09:46.942609 2026] [security2:error] [pid 1041789:tid 1041960] [client 20.48.250.41:50339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/wp-link10.php"] [unique_id "apK9-ov3RhPI65jTFG79YQAAAzs"]
[Sat Aug 29 05:09:46.943992 2026] [core:error] [pid 1321:tid 1614] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:46.944013 2026] [core:error] [pid 1321:tid 1614] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:46.950669 2026] [security2:error] [pid 1041789:tid 1041969] [client 20.220.204.93:50731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/h2a2ck.php"] [unique_id "apK9-ov3RhPI65jTFG79ZAAAA0Q"]
[Sat Aug 29 05:09:46.958195 2026] [security2:error] [pid 1041789:tid 1042041] [client 74.248.24.12:28792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/adminfuns.php"] [unique_id "apK9-ov3RhPI65jTFG79ZQAAA4w"]
[Sat Aug 29 05:09:46.962559 2026] [security2:error] [pid 1321:tid 1506] [client 20.48.250.41:46077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/aaa.php"] [unique_id "apK9-mjCPtor9NZ-byTWHgAABk4"]
[Sat Aug 29 05:09:46.973776 2026] [security2:error] [pid 1041789:tid 1041976] [client 93.123.109.228:55020] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/market/.env"] [unique_id "apK9-ov3RhPI65jTFG79ZwAAA0s"]
[Sat Aug 29 05:09:46.988408 2026] [security2:error] [pid 1041789:tid 1041947] [client 93.123.109.228:54984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/media/.env"] [unique_id "apK9-ov3RhPI65jTFG79aQAAAy4"]
[Sat Aug 29 05:09:47.003841 2026] [security2:error] [pid 1041789:tid 1041935] [client 127.0.0.1:43092] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK9-ov3RhPI65jTFG79UgAAAyI"]
[Sat Aug 29 05:09:47.003864 2026] [security2:error] [pid 1041789:tid 1041933] [client 127.0.0.1:43064] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.beraluzarchive.org"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK9-ov3RhPI65jTFG79TwAAAyA"]
[Sat Aug 29 05:09:47.003951 2026] [security2:error] [pid 1041789:tid 1041942] [client 35.221.212.112:16308] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.beraluzarchive.org"] [uri "/appsettings.Development.json"] [unique_id "apK9-ov3RhPI65jTFG79TQAAAyk"]
[Sat Aug 29 05:09:47.008938 2026] [security2:error] [pid 1041789:tid 1041932] [client 20.48.250.41:50117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/to.php"] [unique_id "apK9-4v3RhPI65jTFG79cgAAAx8"]
[Sat Aug 29 05:09:47.013776 2026] [security2:error] [pid 1321:tid 1493] [client 52.139.37.240:34330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/breads1.php"] [unique_id "apK9-2jCPtor9NZ-byTWIAAABkE"]
[Sat Aug 29 05:09:47.016089 2026] [security2:error] [pid 1041789:tid 1042034] [client 20.48.250.41:34242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/aaa.php"] [unique_id "apK9-4v3RhPI65jTFG79cwAAA4U"]
[Sat Aug 29 05:09:47.017427 2026] [security2:error] [pid 1321:tid 1562] [client 158.23.184.117:12445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/wp-content/plugins/alfa-rex.php"] [unique_id "apK9-2jCPtor9NZ-byTWIQAABoU"]
[Sat Aug 29 05:09:47.042254 2026] [security2:error] [pid 1041789:tid 1041967] [client 68.155.159.216:5894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-includes/content.php"] [unique_id "apK9-4v3RhPI65jTFG79dgAAA0I"]
[Sat Aug 29 05:09:47.059692 2026] [security2:error] [pid 1041789:tid 1041975] [client 4.232.148.111:28857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/f.php"] [unique_id "apK9-4v3RhPI65jTFG79eAAAA0o"]
[Sat Aug 29 05:09:47.070512 2026] [security2:error] [pid 1321:tid 1603] [client 127.0.0.1:43176] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK9-mjCPtor9NZ-byTWHAAABq4"]
[Sat Aug 29 05:09:47.070711 2026] [security2:error] [pid 1321:tid 1523] [client 127.0.0.1:43166] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.beraluzarchive.org"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK9-mjCPtor9NZ-byTWGgAABl8"]
[Sat Aug 29 05:09:47.071504 2026] [security2:error] [pid 1321:tid 1539] [client 68.155.159.216:1982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/index/function.php"] [unique_id "apK9-2jCPtor9NZ-byTWIwAABm8"]
[Sat Aug 29 05:09:47.072859 2026] [security2:error] [pid 1041789:tid 1041987] [client 35.221.212.112:16352] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.beraluzarchive.org"] [uri "/service_account.json"] [unique_id "apK9-ov3RhPI65jTFG79XgAAA1Y"]
[Sat Aug 29 05:09:47.073916 2026] [security2:error] [pid 1041789:tid 1041991] [client 68.155.159.216:24454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/worksec.php"] [unique_id "apK9-4v3RhPI65jTFG79ewAAA1o"]
[Sat Aug 29 05:09:47.083051 2026] [security2:error] [pid 1041789:tid 1042028] [client 20.48.250.41:50351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/ww.php"] [unique_id "apK9-4v3RhPI65jTFG79fQAAA38"]
[Sat Aug 29 05:09:47.083730 2026] [security2:error] [pid 1041789:tid 1042025] [client 20.220.204.93:50717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/error_log.php"] [unique_id "apK9-4v3RhPI65jTFG79fgAAA3w"]
[Sat Aug 29 05:09:47.087257 2026] [security2:error] [pid 1041789:tid 1042056] [client 20.48.160.90:45407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/ue.php"] [unique_id "apK9-4v3RhPI65jTFG79fwAAA5s"]
[Sat Aug 29 05:09:47.088331 2026] [security2:error] [pid 1041789:tid 1042026] [client 158.23.147.79:6138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-admin/user/index.php"] [unique_id "apK9-4v3RhPI65jTFG79gAAAA30"]
[Sat Aug 29 05:09:47.094474 2026] [security2:error] [pid 1321:tid 1589] [client 35.221.212.112:16432] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "autodiscover.beraluzarchive.org"] [uri "/api/keys.json"] [unique_id "apK9-2jCPtor9NZ-byTWJwAABqA"]
[Sat Aug 29 05:09:47.098501 2026] [security2:error] [pid 1321:tid 1535] [client 20.48.250.41:46035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/xsox.php"] [unique_id "apK9-2jCPtor9NZ-byTWKAAABms"]
[Sat Aug 29 05:09:47.124669 2026] [security2:error] [pid 1041789:tid 1041990] [client 68.155.159.216:38331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/themes.php"] [unique_id "apK9-4v3RhPI65jTFG79ggAAA1k"]
[Sat Aug 29 05:09:47.127223 2026] [security2:error] [pid 1041789:tid 1041957] [client 93.123.109.228:55020] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/new/.env"] [unique_id "apK9-4v3RhPI65jTFG79gwAAAzg"]
[Sat Aug 29 05:09:47.130995 2026] [security2:error] [pid 1041789:tid 1041944] [client 93.123.109.228:54964] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/node-api/.env"] [unique_id "apK9-4v3RhPI65jTFG79hAAAAys"]
[Sat Aug 29 05:09:47.134229 2026] [security2:error] [pid 1041789:tid 1041938] [client 20.151.200.44:65176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/yyy.php"] [unique_id "apK9-4v3RhPI65jTFG79hQAAAyU"]
[Sat Aug 29 05:09:47.138318 2026] [security2:error] [pid 1321:tid 1477] [remote 34.74.130.21:52896] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/static/app/.env"] [unique_id "apK9-2jCPtor9NZ-byTWKQAGRHY"]
[Sat Aug 29 05:09:47.146201 2026] [security2:error] [pid 1041789:tid 1041931] [client 52.139.37.240:31080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/z.php"] [unique_id "apK9-4v3RhPI65jTFG79hwAAAx4"]
[Sat Aug 29 05:09:47.147146 2026] [security2:error] [pid 1041789:tid 1041949] [client 93.123.109.228:54984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/node/.env"] [unique_id "apK9-4v3RhPI65jTFG79hgAAAzA"]
[Sat Aug 29 05:09:47.151830 2026] [security2:error] [pid 1041789:tid 1041965] [client 93.123.109.228:55102] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/node/api/.env"] [unique_id "apK9-4v3RhPI65jTFG79iAAAA0A"]
[Sat Aug 29 05:09:47.151846 2026] [security2:error] [pid 1321:tid 1475] [remote 34.74.130.21:52896] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/static/home/user/.env"] [unique_id "apK9-2jCPtor9NZ-byTWKwAGYXQ"]
[Sat Aug 29 05:09:47.152289 2026] [security2:error] [pid 1321:tid 1375] [remote 34.74.130.21:52896] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/.env"] [unique_id "apK9-2jCPtor9NZ-byTWLAAGYRE"]
[Sat Aug 29 05:09:47.152498 2026] [security2:error] [pid 1321:tid 1374] [remote 34.74.130.21:52896] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/files../.env"] [unique_id "apK9-2jCPtor9NZ-byTWKgAGYRA"]
[Sat Aug 29 05:09:47.152898 2026] [security2:error] [pid 1321:tid 1376] [remote 34.74.130.21:52896] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/.env"] [unique_id "apK9-2jCPtor9NZ-byTWLQAGYRI"]
[Sat Aug 29 05:09:47.152934 2026] [security2:error] [pid 1321:tid 1475] [remote 34.74.130.21:52896] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/api/.env/public/.env"] [unique_id "apK9-2jCPtor9NZ-byTWLgAGYXQ"]
[Sat Aug 29 05:09:47.166352 2026] [security2:error] [pid 1041789:tid 1041971] [client 20.48.250.41:30659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/gdn.php"] [unique_id "apK9-4v3RhPI65jTFG79iQAAA0Y"]
[Sat Aug 29 05:09:47.168525 2026] [security2:error] [pid 1041789:tid 1042040] [client 20.48.250.41:34253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/xsox.php"] [unique_id "apK9-4v3RhPI65jTFG79iwAAA4s"]
[Sat Aug 29 05:09:47.171944 2026] [core:error] [pid 1041789:tid 1042006] [client 158.23.184.117:13013] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:47.171959 2026] [core:error] [pid 1041789:tid 1042006] [client 158.23.184.117:13013] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:47.173250 2026] [security2:error] [pid 1321:tid 1576] [client 20.104.49.130:63299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/classwithtostring.php"] [unique_id "apK9-2jCPtor9NZ-byTWLwAABpM"]
[Sat Aug 29 05:09:47.174077 2026] [security2:error] [pid 1321:tid 1508] [client 20.48.250.41:53491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/thui.php"] [unique_id "apK9-2jCPtor9NZ-byTWMAAABlA"]
[Sat Aug 29 05:09:47.210000 2026] [security2:error] [pid 1041789:tid 1041943] [client 52.139.37.240:34342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/must.php"] [unique_id "apK9-4v3RhPI65jTFG79jAAAAyo"]
[Sat Aug 29 05:09:47.216069 2026] [security2:error] [pid 1041789:tid 1042018] [client 4.205.62.107:51490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/verox.php"] [unique_id "apK9-4v3RhPI65jTFG79jgAAA3U"]
[Sat Aug 29 05:09:47.224765 2026] [security2:error] [pid 1041789:tid 1041976] [client 93.123.109.228:54946] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/node/backend/.env"] [unique_id "apK9-4v3RhPI65jTFG79jwAAA0s"]
[Sat Aug 29 05:09:47.225092 2026] [security2:error] [pid 1041789:tid 1042031] [client 20.48.160.90:45422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/nv.php"] [unique_id "apK9-4v3RhPI65jTFG79kAAAA4I"]
[Sat Aug 29 05:09:47.226061 2026] [security2:error] [pid 1041789:tid 1041982] [client 87.219.197.128:54413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK9-4v3RhPI65jTFG79kQAAA1E"]
[Sat Aug 29 05:09:47.226414 2026] [security2:error] [pid 1041789:tid 1041982] [client 87.219.197.128:54413] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK9-4v3RhPI65jTFG79kQAAA1E"]
[Sat Aug 29 05:09:47.228159 2026] [security2:error] [pid 1321:tid 1519] [client 68.155.159.216:1889] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcontacts.soldierbear.com"] [uri "/1.php"] [unique_id "apK9-2jCPtor9NZ-byTWMQAABls"]
[Sat Aug 29 05:09:47.228244 2026] [security2:error] [pid 1321:tid 1519] [client 68.155.159.216:1889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/1.php"] [unique_id "apK9-2jCPtor9NZ-byTWMQAABls"]
[Sat Aug 29 05:09:47.229343 2026] [security2:error] [pid 1041789:tid 1042057] [client 4.205.62.107:6475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/sys.php"] [unique_id "apK9-4v3RhPI65jTFG79kgAAA5w"]
[Sat Aug 29 05:09:47.230864 2026] [security2:error] [pid 1041789:tid 1041933] [client 4.205.62.107:60305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/rum.or.php"] [unique_id "apK9-4v3RhPI65jTFG79kwAAAyA"]
[Sat Aug 29 05:09:47.246910 2026] [security2:error] [pid 1041789:tid 1041932] [client 20.48.250.41:50401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/w1px.php"] [unique_id "apK9-4v3RhPI65jTFG79lQAAAx8"]
[Sat Aug 29 05:09:47.258110 2026] [security2:error] [pid 1041789:tid 1041956] [client 20.220.204.93:50752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/403.php"] [unique_id "apK9-4v3RhPI65jTFG79lgAAAzc"]
[Sat Aug 29 05:09:47.278453 2026] [security2:error] [pid 1041789:tid 1041967] [client 93.123.109.228:55020] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/nodeapi/.env"] [unique_id "apK9-4v3RhPI65jTFG79mAAAA0I"]
[Sat Aug 29 05:09:47.287938 2026] [security2:error] [pid 1041789:tid 1042000] [client 74.248.24.12:19720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/classwithtostring.php"] [unique_id "apK9-4v3RhPI65jTFG79mQAAA2M"]
[Sat Aug 29 05:09:47.298497 2026] [security2:error] [pid 1041789:tid 1042051] [client 93.123.109.228:54964] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/nodeweb/.env"] [unique_id "apK9-4v3RhPI65jTFG79mgAAA5Y"]
[Sat Aug 29 05:09:47.344937 2026] [security2:error] [pid 1041789:tid 1041998] [client 52.139.37.240:31536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/f35.php"] [unique_id "apK9-4v3RhPI65jTFG79ngAAA2E"]
[Sat Aug 29 05:09:47.347528 2026] [security2:error] [pid 1041789:tid 1041990] [client 68.155.159.216:18258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK9-4v3RhPI65jTFG79nwAAA1k"]
[Sat Aug 29 05:09:47.349568 2026] [security2:error] [pid 1041789:tid 1041935] [client 158.23.184.117:13033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/test.php"] [unique_id "apK9-4v3RhPI65jTFG79oAAAAyI"]
[Sat Aug 29 05:09:47.364250 2026] [security2:error] [pid 1041789:tid 1041939] [client 20.48.160.90:50508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/jw.php"] [unique_id "apK9-4v3RhPI65jTFG79oQAAAyY"]
[Sat Aug 29 05:09:47.379191 2026] [security2:error] [pid 1041789:tid 1042046] [client 20.52.41.200:4615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/storage/rip.php"] [unique_id "apK9-4v3RhPI65jTFG79ogAAA5E"]
[Sat Aug 29 05:09:47.402585 2026] [security2:error] [pid 1041789:tid 1042009] [client 52.139.37.240:34324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/up.php"] [unique_id "apK9-4v3RhPI65jTFG79pQAAA2w"]
[Sat Aug 29 05:09:47.403739 2026] [security2:error] [pid 1041789:tid 1041946] [client 68.155.159.216:9328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK9-4v3RhPI65jTFG79pgAAAy0"]
[Sat Aug 29 05:09:47.414534 2026] [security2:error] [pid 1321:tid 1518] [client 40.83.93.50:10064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/as.php"] [unique_id "apK9-2jCPtor9NZ-byTWMgAABlo"]
[Sat Aug 29 05:09:47.415897 2026] [security2:error] [pid 1041789:tid 1042053] [client 158.23.147.79:5912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/lock.php"] [unique_id "apK9-4v3RhPI65jTFG79pwAAA5g"]
[Sat Aug 29 05:09:47.432226 2026] [security2:error] [pid 1041789:tid 1041931] [client 158.23.147.79:17595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/themes.php"] [unique_id "apK9-4v3RhPI65jTFG79qAAAAx4"]
[Sat Aug 29 05:09:47.437806 2026] [security2:error] [pid 1041789:tid 1041980] [client 93.123.109.228:55020] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/old/.env"] [unique_id "apK9-4v3RhPI65jTFG79qQAAA08"]
[Sat Aug 29 05:09:47.438214 2026] [security2:error] [pid 1041789:tid 1041949] [client 45.148.10.62:40252] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.xyzece.com"] [uri "/.env"] [unique_id "apK9-4v3RhPI65jTFG79qgAAAzA"]
[Sat Aug 29 05:09:47.446207 2026] [core:error] [pid 1041789:tid 1041944] [client 158.23.184.117:7891] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:47.446220 2026] [core:error] [pid 1041789:tid 1041944] [client 158.23.184.117:7891] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:47.450613 2026] [security2:error] [pid 1041789:tid 1041965] [client 68.155.159.216:23447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK9-4v3RhPI65jTFG79rQAAA0A"]
[Sat Aug 29 05:09:47.454384 2026] [security2:error] [pid 1041789:tid 1042011] [client 20.220.204.93:52245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/cytyr.php"] [unique_id "apK9-4v3RhPI65jTFG79rgAAA24"]
[Sat Aug 29 05:09:47.463328 2026] [security2:error] [pid 1041789:tid 1042055] [client 4.205.62.107:3929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/bigdump.php"] [unique_id "apK9-4v3RhPI65jTFG79rwAAA5o"]
[Sat Aug 29 05:09:47.469192 2026] [security2:error] [pid 1041789:tid 1041934] [client 93.123.109.228:55102] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/opt/.env"] [unique_id "apK9-4v3RhPI65jTFG79sgAAAyE"]
[Sat Aug 29 05:09:47.484720 2026] [security2:error] [pid 1041789:tid 1042015] [client 74.248.24.12:20015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/goods.php"] [unique_id "apK9-4v3RhPI65jTFG79tAAAA3I"]
[Sat Aug 29 05:09:47.508187 2026] [security2:error] [pid 1041789:tid 1041951] [client 20.48.160.90:40283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/or.php"] [unique_id "apK9-4v3RhPI65jTFG79uAAAAzI"]
[Sat Aug 29 05:09:47.522183 2026] [security2:error] [pid 1041789:tid 1042049] [client 198.154.94.36:60488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 36.94.154.198.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "isbcharterschool.org"] [uri "/wp-login.php"] [unique_id "apK9-4v3RhPI65jTFG79twAAA5Q"]
[Sat Aug 29 05:09:47.523479 2026] [security2:error] [pid 1041789:tid 1042041] [client 158.23.147.79:11267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-includes/index.php"] [unique_id "apK9-4v3RhPI65jTFG79uQAAA4w"]
[Sat Aug 29 05:09:47.533580 2026] [security2:error] [pid 1321:tid 1379] [remote 34.74.130.21:52896] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/.env"] [unique_id "apK9-2jCPtor9NZ-byTWNgAGXRU"]
[Sat Aug 29 05:09:47.538000 2026] [core:error] [pid 1321:tid 1380] [remote 34.74.130.21:52896] AH10244: invalid URI path (/%2e%2e/.env)
[Sat Aug 29 05:09:47.539376 2026] [security2:error] [pid 1321:tid 1532] [client 52.139.37.240:31124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/file61.php"] [unique_id "apK9-2jCPtor9NZ-byTWOgAABmg"]
[Sat Aug 29 05:09:47.540289 2026] [security2:error] [pid 1321:tid 1381] [remote 34.74.130.21:52896] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/assets../.env"] [unique_id "apK9-2jCPtor9NZ-byTWOAAGlxc"]
[Sat Aug 29 05:09:47.540447 2026] [security2:error] [pid 1041789:tid 1042017] [client 4.232.148.111:29522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/av.php"] [unique_id "apK9-4v3RhPI65jTFG79ugAAA3Q"]
[Sat Aug 29 05:09:47.540820 2026] [security2:error] [pid 1321:tid 1382] [remote 34.74.130.21:52896] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/images../.env"] [unique_id "apK9-2jCPtor9NZ-byTWOQAGlxg"]
[Sat Aug 29 05:09:47.547318 2026] [security2:error] [pid 1041789:tid 1042029] [client 158.23.184.117:13030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/wp-includes/mani.php"] [unique_id "apK9-4v3RhPI65jTFG79vgAAA4A"]
[Sat Aug 29 05:09:47.553888 2026] [security2:error] [pid 1041789:tid 1041956] [client 158.23.147.79:58917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/file.php"] [unique_id "apK9-4v3RhPI65jTFG79wQAAAzc"]
[Sat Aug 29 05:09:47.553970 2026] [security2:error] [pid 1041789:tid 1041942] [client 68.155.159.216:30594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-admin/index.php"] [unique_id "apK9-4v3RhPI65jTFG79wgAAAyk"]
[Sat Aug 29 05:09:47.598281 2026] [security2:error] [pid 1321:tid 1584] [client 4.232.148.111:11956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-content/themes/pridmag/il.php"] [unique_id "apK9-2jCPtor9NZ-byTWPQAABps"]
[Sat Aug 29 05:09:47.599585 2026] [cgid:error] [pid 1041789:tid 1042031] [client 52.139.37.240:34134] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/airviewc/public_html/404.shtml
[Sat Aug 29 05:09:47.606493 2026] [security2:error] [pid 1041789:tid 1041987] [client 20.220.204.93:52229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/galer.php"] [unique_id "apK9-4v3RhPI65jTFG79yQAAA1Y"]
[Sat Aug 29 05:09:47.622877 2026] [security2:error] [pid 1321:tid 1600] [client 157.245.66.179:43990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.66.245.157.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "midayins.com"] [uri "/LifeIns/index.php"] [unique_id "apK9-2jCPtor9NZ-byTWPAAABqs"], referer: https://life.midayins.com/
[Sat Aug 29 05:09:47.648138 2026] [core:error] [pid 1041789:tid 1041968] [client 158.23.184.117:7201] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:47.648158 2026] [core:error] [pid 1041789:tid 1041968] [client 158.23.184.117:7201] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:47.650042 2026] [security2:error] [pid 1041789:tid 1042020] [client 20.48.160.90:45353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/ile56.php"] [unique_id "apK9-4v3RhPI65jTFG790QAAA3c"]
[Sat Aug 29 05:09:47.656735 2026] [security2:error] [pid 1041789:tid 1041990] [client 68.155.159.216:33699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/packed.php"] [unique_id "apK9-4v3RhPI65jTFG790gAAA1k"]
[Sat Aug 29 05:09:47.667338 2026] [security2:error] [pid 1041789:tid 1041939] [client 52.139.37.240:34134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/wp-content/155.php"] [unique_id "apK9-4v3RhPI65jTFG791AAAAyY"]
[Sat Aug 29 05:09:47.701961 2026] [security2:error] [pid 1041789:tid 1041977] [client 158.23.184.117:12445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/wp-includes/Test.php"] [unique_id "apK9-4v3RhPI65jTFG791QAAA0w"]
[Sat Aug 29 05:09:47.707119 2026] [security2:error] [pid 1321:tid 1384] [remote 34.74.130.21:52896] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/img../.env"] [unique_id "apK9-2jCPtor9NZ-byTWPgAGgho"]
[Sat Aug 29 05:09:47.720786 2026] [security2:error] [pid 1321:tid 1386] [remote 34.74.130.21:52896] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/uploads../.env"] [unique_id "apK9-2jCPtor9NZ-byTWQAAGhBw"]
[Sat Aug 29 05:09:47.737290 2026] [security2:error] [pid 1321:tid 1609] [client 52.139.37.240:31060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/mah.php"] [unique_id "apK9-2jCPtor9NZ-byTWQQAABrQ"]
[Sat Aug 29 05:09:47.740196 2026] [security2:error] [pid 1041789:tid 1041931] [client 20.220.204.93:50710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/baixy.php"] [unique_id "apK9-4v3RhPI65jTFG792QAAAx4"]
[Sat Aug 29 05:09:47.783691 2026] [security2:error] [pid 1321:tid 1555] [client 4.205.62.107:63988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/bengi.php"] [unique_id "apK9-2jCPtor9NZ-byTWRAAABn4"]
[Sat Aug 29 05:09:47.790174 2026] [security2:error] [pid 1041789:tid 1042030] [client 74.248.24.12:19767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/404.php"] [unique_id "apK9-4v3RhPI65jTFG793wAAA4E"]
[Sat Aug 29 05:09:47.803232 2026] [security2:error] [pid 1041789:tid 1041944] [client 158.23.184.117:7904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/wp-admin/add.php"] [unique_id "apK9-4v3RhPI65jTFG794AAAAys"]
[Sat Aug 29 05:09:47.805027 2026] [security2:error] [pid 1041789:tid 1041960] [client 45.148.10.62:40252] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.xyzece.com"] [uri "/.env"] [unique_id "apK9-4v3RhPI65jTFG794QAAAzs"]
[Sat Aug 29 05:09:47.806509 2026] [security2:error] [pid 1321:tid 1389] [remote 34.74.130.21:52896] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/@fs/proc/self/cwd/.env"] [unique_id "apK9-2jCPtor9NZ-byTWRQAGhB8"]
[Sat Aug 29 05:09:47.809250 2026] [security2:error] [pid 1321:tid 1390] [remote 34.74.130.21:52896] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/public/plugins/alertlist/../../../../../../../../proc/self/environ"] [unique_id "apK9-2jCPtor9NZ-byTWRgAGhCA"]
[Sat Aug 29 05:09:47.814374 2026] [security2:error] [pid 1041789:tid 1042015] [client 20.48.160.90:45342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/emmh.php"] [unique_id "apK9-4v3RhPI65jTFG795AAAA3I"]
[Sat Aug 29 05:09:47.834162 2026] [security2:error] [pid 1321:tid 1529] [client 20.52.41.200:4379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/zoom1.php"] [unique_id "apK9-2jCPtor9NZ-byTWRwAABmU"]
[Sat Aug 29 05:09:47.845279 2026] [security2:error] [pid 1041789:tid 1042013] [client 158.23.184.117:13041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/wp-includes/pomo.php"] [unique_id "apK9-4v3RhPI65jTFG796QAAA3A"]
[Sat Aug 29 05:09:47.848098 2026] [security2:error] [pid 1041789:tid 1042013] [client 68.155.159.216:49201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK9-4v3RhPI65jTFG796gAAA3A"]
[Sat Aug 29 05:09:47.892119 2026] [security2:error] [pid 1321:tid 1586] [client 52.139.37.240:34157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/wp-update.php"] [unique_id "apK9-2jCPtor9NZ-byTWSAAABp0"]
[Sat Aug 29 05:09:47.931030 2026] [security2:error] [pid 1321:tid 1575] [client 158.23.147.79:63024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK9-2jCPtor9NZ-byTWSQAABpI"]
[Sat Aug 29 05:09:47.933102 2026] [security2:error] [pid 1321:tid 1553] [client 40.83.93.50:14469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/room.php"] [unique_id "apK9-2jCPtor9NZ-byTWSgAABnw"]
[Sat Aug 29 05:09:47.934616 2026] [security2:error] [pid 1041789:tid 1042042] [client 20.220.204.93:41838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/ava.php"] [unique_id "apK9-4v3RhPI65jTFG797QAAA40"]
[Sat Aug 29 05:09:47.936238 2026] [security2:error] [pid 1321:tid 1536] [client 52.139.37.240:31114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/mini.php"] [unique_id "apK9-2jCPtor9NZ-byTWSwAABmw"]
[Sat Aug 29 05:09:47.946060 2026] [security2:error] [pid 1041789:tid 1042029] [client 20.48.160.90:50513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/em.php"] [unique_id "apK9-4v3RhPI65jTFG797gAAA4A"]
[Sat Aug 29 05:09:47.949708 2026] [security2:error] [pid 1041789:tid 1041950] [client 158.23.184.117:7565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/wp-includes/assets/about.php"] [unique_id "apK9-4v3RhPI65jTFG797wAAAzE"]
[Sat Aug 29 05:09:48.000748 2026] [security2:error] [pid 1321:tid 1522] [client 4.205.62.107:22286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/pass4.php"] [unique_id "apK9-2jCPtor9NZ-byTWTAAABl4"]
[Sat Aug 29 05:09:48.005115 2026] [security2:error] [pid 1041789:tid 1041969] [client 74.248.24.12:20024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/css.php"] [unique_id "apK9_Iv3RhPI65jTFG799gAAA0Q"]
[Sat Aug 29 05:09:48.005147 2026] [security2:error] [pid 1041789:tid 1042007] [client 93.123.109.228:55102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/php-info.php"] [unique_id "apK9_Iv3RhPI65jTFG799QAAA2o"]
[Sat Aug 29 05:09:48.013710 2026] [security2:error] [pid 1321:tid 1549] [client 4.232.148.111:30509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/file.php"] [unique_id "apK9_GjCPtor9NZ-byTWTQAABng"]
[Sat Aug 29 05:09:48.020017 2026] [security2:error] [pid 1041789:tid 1041975] [client 93.123.109.228:54984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/php.php"] [unique_id "apK9_Iv3RhPI65jTFG799wAAA0o"]
[Sat Aug 29 05:09:48.031759 2026] [security2:error] [pid 1041789:tid 1041967] [client 68.155.159.216:14252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-content/radio.php"] [unique_id "apK9_Iv3RhPI65jTFG79-AAAA0I"]
[Sat Aug 29 05:09:48.062215 2026] [core:error] [pid 1041789:tid 1042005] [client 158.23.184.117:13002] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:48.062227 2026] [core:error] [pid 1041789:tid 1042005] [client 158.23.184.117:13002] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:48.062488 2026] [security2:error] [pid 1041789:tid 1041932] [client 158.23.147.79:44523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-includes/css/index.php"] [unique_id "apK9_Iv3RhPI65jTFG79-gAAAx8"]
[Sat Aug 29 05:09:48.063483 2026] [security2:error] [pid 1041789:tid 1042056] [client 93.123.109.228:54946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/php_info.php"] [unique_id "apK9_Iv3RhPI65jTFG79-wAAA5s"]
[Sat Aug 29 05:09:48.076329 2026] [security2:error] [pid 1321:tid 1593] [client 20.220.204.93:50691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/gdn.php"] [unique_id "apK9_GjCPtor9NZ-byTWTgAABqQ"]
[Sat Aug 29 05:09:48.077109 2026] [security2:error] [pid 1041789:tid 1041978] [client 20.48.160.90:45435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/dvve.php"] [unique_id "apK9_Iv3RhPI65jTFG79_AAAA00"]
[Sat Aug 29 05:09:48.085121 2026] [security2:error] [pid 1321:tid 1592] [client 4.232.148.111:11936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/assets/images/doc.php"] [unique_id "apK9_GjCPtor9NZ-byTWTwAABqM"]
[Sat Aug 29 05:09:48.095007 2026] [security2:error] [pid 1041789:tid 1041991] [client 158.23.184.117:7191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/wp-content/themes/twentytwentythree.php"] [unique_id "apK9_Iv3RhPI65jTFG79_wAAA1o"]
[Sat Aug 29 05:09:48.109285 2026] [security2:error] [pid 1041789:tid 1041961] [client 52.139.37.240:34340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/xmrlpc.php"] [unique_id "apK9_Iv3RhPI65jTFG7-AgAAAzw"]
[Sat Aug 29 05:09:48.143804 2026] [security2:error] [pid 1041789:tid 1042025] [client 52.139.37.240:31055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/v.php"] [unique_id "apK9_Iv3RhPI65jTFG7-BAAAA3w"]
[Sat Aug 29 05:09:48.145634 2026] [security2:error] [pid 1041789:tid 1042009] [client 93.123.109.228:54998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/phpinfo.php"] [unique_id "apK9_Iv3RhPI65jTFG7-BQAAA2w"]
[Sat Aug 29 05:09:48.158758 2026] [security2:error] [pid 1041789:tid 1042044] [client 93.123.109.228:54964] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/portal/.env"] [unique_id "apK9_Iv3RhPI65jTFG7-BgAAA48"]
[Sat Aug 29 05:09:48.176372 2026] [security2:error] [pid 1041789:tid 1042030] [client 68.155.159.216:1920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/.well-known/content.php"] [unique_id "apK9_Iv3RhPI65jTFG7-CAAAA4E"]
[Sat Aug 29 05:09:48.179871 2026] [security2:error] [pid 1321:tid 1568] [client 68.155.159.216:24346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/x.php"] [unique_id "apK9_GjCPtor9NZ-byTWUQAABos"]
[Sat Aug 29 05:09:48.187266 2026] [security2:error] [pid 1321:tid 1577] [client 158.23.147.79:29594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/file17.php"] [unique_id "apK9_GjCPtor9NZ-byTWUgAABpQ"]
[Sat Aug 29 05:09:48.194569 2026] [security2:error] [pid 1041789:tid 1041980] [client 20.104.49.130:52347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/33.php"] [unique_id "apK9_Iv3RhPI65jTFG7-CgAAA08"]
[Sat Aug 29 05:09:48.208859 2026] [security2:error] [pid 1321:tid 1500] [client 158.23.147.79:6064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-includes/plugins.php"] [unique_id "apK9_GjCPtor9NZ-byTWUwAABkg"]
[Sat Aug 29 05:09:48.209404 2026] [security2:error] [pid 1321:tid 1598] [client 158.23.184.117:13002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/wp-admin/link-add.php"] [unique_id "apK9_GjCPtor9NZ-byTWVAAABqk"]
[Sat Aug 29 05:09:48.213148 2026] [security2:error] [pid 1321:tid 1565] [client 20.48.160.90:45438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/doo.php"] [unique_id "apK9_GjCPtor9NZ-byTWVQAABog"]
[Sat Aug 29 05:09:48.230915 2026] [security2:error] [pid 1321:tid 1563] [client 68.155.159.216:38281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-mail.php"] [unique_id "apK9_GjCPtor9NZ-byTWVgAABoY"]
[Sat Aug 29 05:09:48.248405 2026] [core:error] [pid 1321:tid 1530] [client 158.23.184.117:7449] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:48.248424 2026] [core:error] [pid 1321:tid 1530] [client 158.23.184.117:7449] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:48.285911 2026] [security2:error] [pid 1041789:tid 1042018] [client 93.123.109.228:55020] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/prod/.env"] [unique_id "apK9_Iv3RhPI65jTFG7-DQAAA3U"]
[Sat Aug 29 05:09:48.288673 2026] [security2:error] [pid 1321:tid 1607] [client 20.52.41.200:4770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/txets.php"] [unique_id "apK9_GjCPtor9NZ-byTWWQAABrI"]
[Sat Aug 29 05:09:48.291907 2026] [security2:error] [pid 1041789:tid 1042046] [client 74.248.24.12:22461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/php.php"] [unique_id "apK9_Iv3RhPI65jTFG7-DgAAA5E"]
[Sat Aug 29 05:09:48.306467 2026] [security2:error] [pid 1041789:tid 1042014] [client 20.220.204.93:50799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/f2.php"] [unique_id "apK9_Iv3RhPI65jTFG7-DwAAA3E"]
[Sat Aug 29 05:09:48.306920 2026] [security2:error] [pid 1321:tid 1501] [client 52.139.37.240:34322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/about/function.php"] [unique_id "apK9_GjCPtor9NZ-byTWWgAABkk"]
[Sat Aug 29 05:09:48.318303 2026] [security2:error] [pid 1041789:tid 1041947] [client 68.155.159.216:63827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/cong.php"] [unique_id "apK9_Iv3RhPI65jTFG7-EAAAAy4"]
[Sat Aug 29 05:09:48.340123 2026] [cgid:error] [pid 1041789:tid 1041987] [client 45.148.10.62:40252] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/protypeg/public_html/xyzece/404.shtml
[Sat Aug 29 05:09:48.344835 2026] [security2:error] [pid 1041789:tid 1042035] [client 20.48.160.90:45357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/adminer-4.6.6.php"] [unique_id "apK9_Iv3RhPI65jTFG7-EgAAA4Y"]
[Sat Aug 29 05:09:48.344856 2026] [security2:error] [pid 1041789:tid 1041950] [client 20.104.49.130:34542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/cilus.php"] [unique_id "apK9_Iv3RhPI65jTFG7-EwAAAzE"]
[Sat Aug 29 05:09:48.356573 2026] [security2:error] [pid 1041789:tid 1041945] [client 52.139.37.240:31533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/wp-admin/images/admin.php"] [unique_id "apK9_Iv3RhPI65jTFG7-FAAAAyw"]
[Sat Aug 29 05:09:48.357695 2026] [security2:error] [pid 1041789:tid 1041934] [client 158.23.184.117:12427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/wp-includes/Text.php"] [unique_id "apK9_Iv3RhPI65jTFG7-FQAAAyE"]
[Sat Aug 29 05:09:48.360222 2026] [security2:error] [pid 1041789:tid 1041942] [client 93.123.109.228:54964] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/product/.env"] [unique_id "apK9_Iv3RhPI65jTFG7-FgAAAyk"]
[Sat Aug 29 05:09:48.361973 2026] [security2:error] [pid 1041789:tid 1041981] [client 4.205.62.107:51428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/localconf.php"] [unique_id "apK9_Iv3RhPI65jTFG7-FwAAA1A"]
[Sat Aug 29 05:09:48.364412 2026] [security2:error] [pid 1041789:tid 1042054] [client 68.155.159.216:1873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/ws.php"] [unique_id "apK9_Iv3RhPI65jTFG7-GAAAA5k"]
[Sat Aug 29 05:09:48.366261 2026] [security2:error] [pid 1321:tid 1604] [client 4.205.62.107:6524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/phpsysinfo.php"] [unique_id "apK9_GjCPtor9NZ-byTWWwAABq8"]
[Sat Aug 29 05:09:48.370672 2026] [security2:error] [pid 1041789:tid 1042032] [client 4.205.62.107:62950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/xmy.php"] [unique_id "apK9_Iv3RhPI65jTFG7-GQAAA4M"]
[Sat Aug 29 05:09:48.396582 2026] [security2:error] [pid 1041789:tid 1041962] [client 158.23.184.117:7929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/wp-content/languages/themes/num.php"] [unique_id "apK9_Iv3RhPI65jTFG7-GgAAAz0"]
[Sat Aug 29 05:09:48.415521 2026] [security2:error] [pid 1321:tid 1558] [client 40.83.93.50:10072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/class-wp-cmd.php"] [unique_id "apK9_GjCPtor9NZ-byTWXQAABoE"]
[Sat Aug 29 05:09:48.441975 2026] [security2:error] [pid 1041789:tid 1042005] [client 20.220.204.93:52269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/grsiuk.php"] [unique_id "apK9_Iv3RhPI65jTFG7-HAAAA2g"]
[Sat Aug 29 05:09:48.456634 2026] [security2:error] [pid 1041789:tid 1041978] [client 93.123.109.228:55020] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/production/.env"] [unique_id "apK9_Iv3RhPI65jTFG7-HQAAA00"]
[Sat Aug 29 05:09:48.486297 2026] [security2:error] [pid 1321:tid 1523] [client 20.48.160.90:45401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/gelap1.php"] [unique_id "apK9_GjCPtor9NZ-byTWYQAABl8"]
[Sat Aug 29 05:09:48.488744 2026] [security2:error] [pid 1041789:tid 1042028] [client 4.232.148.111:21456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK9_Iv3RhPI65jTFG7-HwAAA38"]
[Sat Aug 29 05:09:48.491292 2026] [security2:error] [pid 1041789:tid 1041940] [client 45.148.10.62:40252] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.xyzece.com"] [uri "/api/.env"] [unique_id "apK9_Iv3RhPI65jTFG7-IQAAAyc"]
[Sat Aug 29 05:09:48.503460 2026] [security2:error] [pid 1041789:tid 1042051] [client 52.139.37.240:34127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/an.php"] [unique_id "apK9_Iv3RhPI65jTFG7-IwAAA5Y"]
[Sat Aug 29 05:09:48.507813 2026] [security2:error] [pid 1321:tid 1490] [client 158.23.184.117:12994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/wp-trackback.php"] [unique_id "apK9_GjCPtor9NZ-byTWYgAABj4"]
[Sat Aug 29 05:09:48.512042 2026] [security2:error] [pid 1321:tid 1524] [client 68.155.159.216:52799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK9_GjCPtor9NZ-byTWZAAABmA"]
[Sat Aug 29 05:09:48.519779 2026] [security2:error] [pid 1041789:tid 1041982] [client 197.219.150.206:54067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK9_Iv3RhPI65jTFG7-JQAAA1E"]
[Sat Aug 29 05:09:48.519879 2026] [security2:error] [pid 1041789:tid 1041982] [client 197.219.150.206:54067] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK9_Iv3RhPI65jTFG7-JQAAA1E"]
[Sat Aug 29 05:09:48.529853 2026] [security2:error] [pid 1321:tid 1509] [client 158.23.147.79:5976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/index/function.php"] [unique_id "apK9_GjCPtor9NZ-byTWZQAABlE"]
[Sat Aug 29 05:09:48.543366 2026] [security2:error] [pid 1041789:tid 1042043] [client 158.23.184.117:7484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/wp.php"] [unique_id "apK9_Iv3RhPI65jTFG7-KAAAA44"]
[Sat Aug 29 05:09:48.549422 2026] [security2:error] [pid 1041789:tid 1041906] [remote 34.74.130.21:52904] ModSecurity: Access denied with code 500 (phase 1) (Error: Connection drop requested but failed to close the  socket). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ"] [unique_id "apK9_Iv3RhPI65jTFG7-LQADl2g"]
[Sat Aug 29 05:09:48.549444 2026] [security2:error] [pid 1041789:tid 1041803] [remote 34.74.130.21:52904] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ"] [unique_id "apK9_Iv3RhPI65jTFG7-KwADlwE"]
[Sat Aug 29 05:09:48.556028 2026] [security2:error] [pid 1321:tid 1539] [client 52.139.37.240:31118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "apK9_GjCPtor9NZ-byTWagAABm8"]
[Sat Aug 29 05:09:48.558135 2026] [security2:error] [pid 1321:tid 1526] [client 4.232.148.111:11963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/bgymj.php"] [unique_id "apK9_GjCPtor9NZ-byTWawAABmI"]
[Sat Aug 29 05:09:48.573516 2026] [security2:error] [pid 1041789:tid 1042050] [client 20.220.204.93:59122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/wp-scr1pts.php"] [unique_id "apK9_Iv3RhPI65jTFG7-NQAAA5U"]
[Sat Aug 29 05:09:48.602488 2026] [security2:error] [pid 1041789:tid 1041997] [client 4.205.62.107:55951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wdf.php"] [unique_id "apK9_Iv3RhPI65jTFG7-OQAAA2A"]
[Sat Aug 29 05:09:48.615512 2026] [security2:error] [pid 1041789:tid 1041949] [client 68.155.159.216:23514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK9_Iv3RhPI65jTFG7-OwAAAzA"]
[Sat Aug 29 05:09:48.622324 2026] [security2:error] [pid 1041789:tid 1041948] [client 20.48.160.90:45413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/rsjlrria.php"] [unique_id "apK9_Iv3RhPI65jTFG7-PQAAAy8"]
[Sat Aug 29 05:09:48.623483 2026] [security2:error] [pid 1041789:tid 1042055] [client 169.58.197.254:65091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 254.197.58.169.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.kcactf4.org"] [uri "/wp-content/themes/travel/issue.php"] [unique_id "apK9_Iv3RhPI65jTFG7-PwAAA5o"], referer: www.google.com
[Sat Aug 29 05:09:48.645048 2026] [security2:error] [pid 1041789:tid 1041941] [client 45.148.10.62:40252] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.xyzece.com"] [uri "/.env.bak"] [unique_id "apK9_Iv3RhPI65jTFG7-QAAAAyg"]
[Sat Aug 29 05:09:48.662616 2026] [security2:error] [pid 1321:tid 1496] [client 68.155.159.216:30623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK9_GjCPtor9NZ-byTWbgAABkQ"]
[Sat Aug 29 05:09:48.663676 2026] [security2:error] [pid 1041789:tid 1041976] [client 158.23.147.79:55288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/file17.php"] [unique_id "apK9_Iv3RhPI65jTFG7-QQAAA0s"]
[Sat Aug 29 05:09:48.691984 2026] [security2:error] [pid 1041789:tid 1042041] [client 158.23.184.117:7477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/xmlrpc.php"] [unique_id "apK9_Iv3RhPI65jTFG7-RQAAA4w"]
[Sat Aug 29 05:09:48.699160 2026] [security2:error] [pid 1041789:tid 1042049] [client 52.139.37.240:34154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/asw.php"] [unique_id "apK9_Iv3RhPI65jTFG7-RgAAA5Q"]
[Sat Aug 29 05:09:48.706768 2026] [security2:error] [pid 1321:tid 1508] [client 20.220.204.93:50725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/num.php"] [unique_id "apK9_GjCPtor9NZ-byTWbwAABlA"]
[Sat Aug 29 05:09:48.707633 2026] [security2:error] [pid 1321:tid 1494] [client 158.23.147.79:11334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/mah.php"] [unique_id "apK9_GjCPtor9NZ-byTWcAAABkI"]
[Sat Aug 29 05:09:48.721607 2026] [security2:error] [pid 1041789:tid 1041947] [client 158.23.184.117:13035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/wp-admin/maint.php"] [unique_id "apK9_Iv3RhPI65jTFG7-SQAAAy4"]
[Sat Aug 29 05:09:48.754061 2026] [security2:error] [pid 1041789:tid 1041951] [client 20.48.160.90:45338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/AxAo.php"] [unique_id "apK9_Iv3RhPI65jTFG7-TAAAAzI"]
[Sat Aug 29 05:09:48.758227 2026] [security2:error] [pid 1041789:tid 1042048] [client 68.155.159.216:33575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-content/packed.php"] [unique_id "apK9_Iv3RhPI65jTFG7-TgAAA5M"]
[Sat Aug 29 05:09:48.758488 2026] [security2:error] [pid 1041789:tid 1041890] [remote 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK9_Iv3RhPI65jTFG7-TQADgVg"]
[Sat Aug 29 05:09:48.758606 2026] [security2:error] [pid 1041789:tid 1042030] [client 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK9_Iv3RhPI65jTFG7-TQADgVg"]
[Sat Aug 29 05:09:48.766939 2026] [security2:error] [pid 1321:tid 1519] [client 68.155.159.216:64002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/radio.php"] [unique_id "apK9_GjCPtor9NZ-byTWcgAABls"]
[Sat Aug 29 05:09:48.774186 2026] [security2:error] [pid 1041789:tid 1041945] [client 52.139.37.240:31162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/wp-includes/Text/index.php"] [unique_id "apK9_Iv3RhPI65jTFG7-TwAAAyw"]
[Sat Aug 29 05:09:48.796201 2026] [security2:error] [pid 1041789:tid 1041967] [client 93.123.109.228:55020] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/project/.env"] [unique_id "apK9_Iv3RhPI65jTFG7-UAAAA0I"]
[Sat Aug 29 05:09:48.798307 2026] [security2:error] [pid 1041789:tid 1042015] [client 74.248.24.12:22459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/init.php"] [unique_id "apK9_Iv3RhPI65jTFG7-UQAAA3I"]
[Sat Aug 29 05:09:48.815131 2026] [cgid:error] [pid 1041789:tid 1042029] [client 45.148.10.62:40252] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/protypeg/public_html/xyzece/404.shtml
[Sat Aug 29 05:09:48.846218 2026] [security2:error] [pid 1041789:tid 1042031] [client 158.23.184.117:7217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/app.php"] [unique_id "apK9_Iv3RhPI65jTFG7-VAAAA4I"]
[Sat Aug 29 05:09:48.847783 2026] [security2:error] [pid 1041789:tid 1042028] [client 20.220.204.93:52260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/a4.php"] [unique_id "apK9_Iv3RhPI65jTFG7-VQAAA38"]
[Sat Aug 29 05:09:48.869344 2026] [security2:error] [pid 1321:tid 1548] [client 158.23.184.117:12418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/wp-includes/num.php"] [unique_id "apK9_GjCPtor9NZ-byTWcwAABnc"]
[Sat Aug 29 05:09:48.890107 2026] [security2:error] [pid 1041789:tid 1042000] [client 158.23.147.79:17642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/wp-mail.php"] [unique_id "apK9_Iv3RhPI65jTFG7-VwAAA2M"]
[Sat Aug 29 05:09:48.893171 2026] [security2:error] [pid 1321:tid 1492] [client 40.83.93.50:18268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/disagreed.php"] [unique_id "apK9_GjCPtor9NZ-byTWdAAABkA"]
[Sat Aug 29 05:09:48.915711 2026] [security2:error] [pid 1041789:tid 1041940] [client 52.139.37.240:34155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/item.php"] [unique_id "apK9_Iv3RhPI65jTFG7-WwAAAyc"]
[Sat Aug 29 05:09:48.921721 2026] [security2:error] [pid 1321:tid 1503] [client 4.205.62.107:61723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/i.php"] [unique_id "apK9_GjCPtor9NZ-byTWdQAABks"]
[Sat Aug 29 05:09:48.929412 2026] [security2:error] [pid 1041789:tid 1041948] [client 20.48.160.90:50539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/class17.php"] [unique_id "apK9_Iv3RhPI65jTFG7-XQAAAy8"]
[Sat Aug 29 05:09:48.956001 2026] [security2:error] [pid 1041789:tid 1042057] [client 4.232.148.111:18439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/gmo.php"] [unique_id "apK9_Iv3RhPI65jTFG7-XgAAA5w"]
[Sat Aug 29 05:09:48.966482 2026] [security2:error] [pid 1041789:tid 1041938] [client 93.123.109.228:55020] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/public-api/.env"] [unique_id "apK9_Iv3RhPI65jTFG7-XwAAAyU"]
[Sat Aug 29 05:09:48.971894 2026] [cgid:error] [pid 1041789:tid 1041983] [client 45.148.10.62:40252] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/protypeg/public_html/xyzece/404.shtml
[Sat Aug 29 05:09:48.976949 2026] [security2:error] [pid 1321:tid 1551] [client 20.220.204.93:50757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/tfm.php"] [unique_id "apK9_GjCPtor9NZ-byTWdwAABno"]
[Sat Aug 29 05:09:48.984338 2026] [security2:error] [pid 1041789:tid 1042037] [client 103.185.242.143:57338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK9_Iv3RhPI65jTFG7-aAAAA4g"]
[Sat Aug 29 05:09:48.984449 2026] [security2:error] [pid 1041789:tid 1042037] [client 103.185.242.143:57338] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK9_Iv3RhPI65jTFG7-aAAAA4g"]
[Sat Aug 29 05:09:49.006153 2026] [core:error] [pid 1041789:tid 1041990] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:49.006170 2026] [core:error] [pid 1041789:tid 1041990] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:49.019121 2026] [security2:error] [pid 1041789:tid 1042044] [client 158.23.184.117:13021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/identity.php"] [unique_id "apK9_Yv3RhPI65jTFG7-awAAA48"]
[Sat Aug 29 05:09:49.034016 2026] [security2:error] [pid 1041789:tid 1042010] [client 4.232.148.111:23231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK9_Yv3RhPI65jTFG7-bAAAA20"]
[Sat Aug 29 05:09:49.043373 2026] [security2:error] [pid 1041789:tid 1042046] [client 158.23.184.117:7169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/aaa.php"] [unique_id "apK9_Yv3RhPI65jTFG7-bQAAA5E"]
[Sat Aug 29 05:09:49.049294 2026] [security2:error] [pid 1041789:tid 1041931] [client 158.23.147.79:63866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK9_Yv3RhPI65jTFG7-bgAAAx4"]
[Sat Aug 29 05:09:49.059307 2026] [security2:error] [pid 1041789:tid 1041963] [client 20.48.160.90:45428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/okxoby.php"] [unique_id "apK9_Yv3RhPI65jTFG7-bwAAAz4"]
[Sat Aug 29 05:09:49.077631 2026] [security2:error] [pid 1041789:tid 1042054] [client 20.52.41.200:4631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-content/themes/about.php"] [unique_id "apK9_Yv3RhPI65jTFG7-cAAAA5k"]
[Sat Aug 29 05:09:49.108599 2026] [security2:error] [pid 1321:tid 1397] [remote 34.74.130.21:52916] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/wp-config.php.bak"] [unique_id "apK9_WjCPtor9NZ-byTWfAAGdSc"]
[Sat Aug 29 05:09:49.109420 2026] [security2:error] [pid 1321:tid 1393] [remote 34.74.130.21:52916] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/@fs/.env"] [unique_id "apK9_WjCPtor9NZ-byTWeQAGdSM"]
[Sat Aug 29 05:09:49.109422 2026] [security2:error] [pid 1321:tid 1396] [remote 34.74.130.21:52916] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/@fs/.env"] [unique_id "apK9_WjCPtor9NZ-byTWegAGdSY"]
[Sat Aug 29 05:09:49.109503 2026] [security2:error] [pid 1321:tid 1394] [remote 34.74.130.21:52916] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/@fs/.env"] [unique_id "apK9_WjCPtor9NZ-byTWewAGdSQ"]
[Sat Aug 29 05:09:49.117951 2026] [security2:error] [pid 1041789:tid 1041954] [client 52.139.37.240:34354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/jga.php"] [unique_id "apK9_Yv3RhPI65jTFG7-dgAAAzU"]
[Sat Aug 29 05:09:49.127794 2026] [security2:error] [pid 1041789:tid 1042015] [client 45.148.10.62:40252] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.xyzece.com"] [uri "/stripe/.env"] [unique_id "apK9_Yv3RhPI65jTFG7-eQAAA3I"]
[Sat Aug 29 05:09:49.136452 2026] [security2:error] [pid 1041789:tid 1042026] [client 4.205.62.107:22469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/cu.php"] [unique_id "apK9_Yv3RhPI65jTFG7-fQAAA30"]
[Sat Aug 29 05:09:49.138478 2026] [security2:error] [pid 1041789:tid 1042029] [client 128.140.106.114:2812] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "porelpuroantojo.com"] [uri "/"] [unique_id "apK9_Yv3RhPI65jTFG7-egAAA4A"], referer: http://porelpuroantojo.com
[Sat Aug 29 05:09:49.162279 2026] [core:error] [pid 1041789:tid 1042028] [client 20.104.104.62:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:49.162299 2026] [core:error] [pid 1041789:tid 1042028] [client 20.104.104.62:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:49.167677 2026] [core:error] [pid 1041789:tid 1041945] [client 158.23.184.117:12442] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:49.167699 2026] [core:error] [pid 1041789:tid 1041945] [client 158.23.184.117:12442] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:49.171805 2026] [security2:error] [pid 1041789:tid 1042047] [client 68.155.159.216:14215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-admin/dropdown.php"] [unique_id "apK9_Yv3RhPI65jTFG7-gQAAA5I"]
[Sat Aug 29 05:09:49.175761 2026] [security2:error] [pid 1041789:tid 1041977] [client 158.23.147.79:60131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK9_Yv3RhPI65jTFG7-ggAAA0w"]
[Sat Aug 29 05:09:49.177768 2026] [security2:error] [pid 1041789:tid 1041957] [client 20.220.204.93:41767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/Geforce.php"] [unique_id "apK9_Yv3RhPI65jTFG7-gwAAAzg"]
[Sat Aug 29 05:09:49.190344 2026] [security2:error] [pid 1041789:tid 1042000] [client 20.48.160.90:45419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/esuutzzx.php"] [unique_id "apK9_Yv3RhPI65jTFG7-hAAAA2M"]
[Sat Aug 29 05:09:49.204711 2026] [core:error] [pid 1321:tid 1606] [client 158.23.184.117:7604] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:49.204732 2026] [core:error] [pid 1321:tid 1606] [client 158.23.184.117:7604] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:49.205811 2026] [security2:error] [pid 1041789:tid 1041979] [client 20.104.49.130:36760] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.pvillusions.com"] [uri "/1.php"] [unique_id "apK9_Yv3RhPI65jTFG7-hQAAA04"]
[Sat Aug 29 05:09:49.205900 2026] [security2:error] [pid 1041789:tid 1041979] [client 20.104.49.130:36760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pvillusions.com"] [uri "/1.php"] [unique_id "apK9_Yv3RhPI65jTFG7-hQAAA04"]
[Sat Aug 29 05:09:49.221318 2026] [security2:error] [pid 1041789:tid 1041961] [client 52.139.37.240:31109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/wp-index.php"] [unique_id "apK9_Yv3RhPI65jTFG7-hgAAAzw"]
[Sat Aug 29 05:09:49.263075 2026] [security2:error] [pid 1041789:tid 1042017] [client 93.123.109.228:54964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.glenncoad.com"] [uri "/public/phpinfo.php"] [unique_id "apK9_Yv3RhPI65jTFG7-hwAAA3Q"]
[Sat Aug 29 05:09:49.281037 2026] [security2:error] [pid 1041789:tid 1042011] [client 68.155.159.216:1813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/cong.php"] [unique_id "apK9_Yv3RhPI65jTFG7-iAAAA24"]
[Sat Aug 29 05:09:49.296289 2026] [security2:error] [pid 1321:tid 1527] [client 158.23.147.79:55883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/file5.php"] [unique_id "apK9_WjCPtor9NZ-byTWgAAABmM"]
[Sat Aug 29 05:09:49.310021 2026] [security2:error] [pid 1041789:tid 1042021] [client 74.248.24.12:2711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "apK9_Yv3RhPI65jTFG7-iwAAA3g"]
[Sat Aug 29 05:09:49.311677 2026] [cgid:error] [pid 1041789:tid 1041998] [client 45.148.10.62:40252] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/protypeg/public_html/xyzece/404.shtml
[Sat Aug 29 05:09:49.313029 2026] [security2:error] [pid 1321:tid 1609] [client 158.23.184.117:12443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/Radio.php"] [unique_id "apK9_WjCPtor9NZ-byTWggAABrQ"]
[Sat Aug 29 05:09:49.313370 2026] [security2:error] [pid 1321:tid 1580] [client 52.139.37.240:34346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/mac.php"] [unique_id "apK9_WjCPtor9NZ-byTWgwAABpc"]
[Sat Aug 29 05:09:49.314449 2026] [security2:error] [pid 1041789:tid 1042005] [client 20.220.204.93:41817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/click.php"] [unique_id "apK9_Yv3RhPI65jTFG7-jQAAA2g"]
[Sat Aug 29 05:09:49.324235 2026] [security2:error] [pid 1041789:tid 1042056] [client 20.48.160.90:45322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/replace.php"] [unique_id "apK9_Yv3RhPI65jTFG7-jwAAA5s"]
[Sat Aug 29 05:09:49.337199 2026] [security2:error] [pid 1041789:tid 1042037] [client 68.155.159.216:56565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/cgi-bin/index.php"] [unique_id "apK9_Yv3RhPI65jTFG7-kAAAA4g"]
[Sat Aug 29 05:09:49.353281 2026] [security2:error] [pid 1321:tid 1555] [client 158.23.184.117:7875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/hehe.php"] [unique_id "apK9_WjCPtor9NZ-byTWhAAABn4"]
[Sat Aug 29 05:09:49.361590 2026] [security2:error] [pid 1321:tid 1575] [client 158.23.147.79:5916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK9_WjCPtor9NZ-byTWhQAABpI"]
[Sat Aug 29 05:09:49.364932 2026] [security2:error] [pid 1321:tid 1399] [remote 34.74.130.21:52916] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/core/.env"] [unique_id "apK9_WjCPtor9NZ-byTWhgAGfCk"]
[Sat Aug 29 05:09:49.376050 2026] [security2:error] [pid 1321:tid 1600] [client 40.83.93.50:18246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/class_api.php"] [unique_id "apK9_WjCPtor9NZ-byTWhwAABqs"]
[Sat Aug 29 05:09:49.379530 2026] [security2:error] [pid 1321:tid 1400] [remote 34.74.130.21:52916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 21.130.74.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/.env.php.bak"] [unique_id "apK9_WjCPtor9NZ-byTWiAAGoSo"]
[Sat Aug 29 05:09:49.383685 2026] [security2:error] [pid 1321:tid 1441] [remote 34.74.130.21:52916] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/laravel/.env"] [unique_id "apK9_WjCPtor9NZ-byTWiQAGllM"]
[Sat Aug 29 05:09:49.385771 2026] [security2:error] [pid 1321:tid 1402] [remote 34.74.130.21:52916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 21.130.74.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/config/.env.php"] [unique_id "apK9_WjCPtor9NZ-byTWiwAGliw"]
[Sat Aug 29 05:09:49.388204 2026] [security2:error] [pid 1321:tid 1403] [remote 34.74.130.21:52916] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/wp-config.php.old"] [unique_id "apK9_WjCPtor9NZ-byTWjAAGli0"]
[Sat Aug 29 05:09:49.410938 2026] [security2:error] [pid 1041789:tid 1041991] [client 20.104.49.130:43604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/cilus.php"] [unique_id "apK9_Yv3RhPI65jTFG7-kwAAA1o"]
[Sat Aug 29 05:09:49.415902 2026] [security2:error] [pid 1321:tid 1561] [client 52.139.37.240:31158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/ww2.php"] [unique_id "apK9_WjCPtor9NZ-byTWjgAABoQ"]
[Sat Aug 29 05:09:49.431673 2026] [security2:error] [pid 1321:tid 1507] [client 4.232.148.111:28808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/classwithtostring.php"] [unique_id "apK9_WjCPtor9NZ-byTWjwAABk8"]
[Sat Aug 29 05:09:49.443950 2026] [security2:error] [pid 1321:tid 1549] [client 68.155.159.216:65081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-includes/js/index.php"] [unique_id "apK9_WjCPtor9NZ-byTWkQAABng"]
[Sat Aug 29 05:09:49.448064 2026] [security2:error] [pid 1321:tid 1518] [client 103.48.146.148:63457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 148.146.48.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK9_WjCPtor9NZ-byTWkgAABlo"]
[Sat Aug 29 05:09:49.448168 2026] [security2:error] [pid 1321:tid 1518] [client 103.48.146.148:63457] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK9_WjCPtor9NZ-byTWkgAABlo"]
[Sat Aug 29 05:09:49.453255 2026] [security2:error] [pid 1041789:tid 1041950] [client 93.123.109.228:55020] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.glenncoad.com"] [uri "/___proxy_subdomain_cpcontacts/qa/.env"] [unique_id "apK9_Yv3RhPI65jTFG7-lAAAAzE"]
[Sat Aug 29 05:09:49.456201 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.48.160.90:45313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/gulu.php"] [unique_id "apK9_Yv3RhPI65jTFG7-lQAAA2Q"]
[Sat Aug 29 05:09:49.464818 2026] [core:error] [pid 1321:tid 1522] [client 158.23.184.117:13003] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:49.464833 2026] [core:error] [pid 1321:tid 1522] [client 158.23.184.117:13003] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:49.482233 2026] [cgid:error] [pid 1041789:tid 1041963] [client 45.148.10.62:40252] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/protypeg/public_html/xyzece/404.shtml
[Sat Aug 29 05:09:49.500289 2026] [security2:error] [pid 1321:tid 1583] [client 4.205.62.107:58430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/xa.php"] [unique_id "apK9_WjCPtor9NZ-byTWlAAABpo"]
[Sat Aug 29 05:09:49.501704 2026] [security2:error] [pid 1041789:tid 1042009] [client 158.23.184.117:7921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/wp-includes/PHPMailer.php"] [unique_id "apK9_Yv3RhPI65jTFG7-mQAAA2w"]
[Sat Aug 29 05:09:49.508978 2026] [security2:error] [pid 1041789:tid 1041965] [client 4.205.62.107:62943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/ms-edit.php"] [unique_id "apK9_Yv3RhPI65jTFG7-mgAAA0A"]
[Sat Aug 29 05:09:49.521222 2026] [security2:error] [pid 1041789:tid 1041982] [client 52.139.37.240:34113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK9_Yv3RhPI65jTFG7-nAAAA1E"]
[Sat Aug 29 05:09:49.529240 2026] [security2:error] [pid 1041789:tid 1042054] [client 4.205.62.107:6866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/sgd.php"] [unique_id "apK9_Yv3RhPI65jTFG7-nQAAA5k"]
[Sat Aug 29 05:09:49.536681 2026] [security2:error] [pid 1321:tid 1610] [client 68.155.159.216:2025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-includes/css/index.php"] [unique_id "apK9_WjCPtor9NZ-byTWlwAABrU"]
[Sat Aug 29 05:09:49.540803 2026] [security2:error] [pid 1041789:tid 1041990] [client 20.52.41.200:5343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK9_Yv3RhPI65jTFG7-ngAAA1k"]
[Sat Aug 29 05:09:49.565775 2026] [security2:error] [pid 1041789:tid 1041995] [client 20.63.81.20:46285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/mac.php"] [unique_id "apK9_Yv3RhPI65jTFG7-oQAAA14"]
[Sat Aug 29 05:09:49.594266 2026] [security2:error] [pid 1321:tid 1565] [client 20.48.160.90:45361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/gtghklk.php"] [unique_id "apK9_WjCPtor9NZ-byTWmQAABog"]
[Sat Aug 29 05:09:49.602324 2026] [security2:error] [pid 1041789:tid 1042028] [client 68.155.159.216:64492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK9_Yv3RhPI65jTFG7-pAAAA38"]
[Sat Aug 29 05:09:49.610139 2026] [security2:error] [pid 1041789:tid 1042032] [client 52.139.37.240:31084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/7logs.php"] [unique_id "apK9_Yv3RhPI65jTFG7-pgAAA4M"]
[Sat Aug 29 05:09:49.612277 2026] [security2:error] [pid 1041789:tid 1042007] [client 158.23.184.117:13053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/wp-includes/Requests/Exception/file.php"] [unique_id "apK9_Yv3RhPI65jTFG7-pwAAA2o"]
[Sat Aug 29 05:09:49.622961 2026] [security2:error] [pid 1041789:tid 1041945] [client 68.155.159.216:52761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/images/index.php"] [unique_id "apK9_Yv3RhPI65jTFG7-qQAAAyw"]
[Sat Aug 29 05:09:49.632306 2026] [security2:error] [pid 1321:tid 1563] [client 158.23.147.79:6068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/.well-known/content.php"] [unique_id "apK9_WjCPtor9NZ-byTWmgAABoY"]
[Sat Aug 29 05:09:49.636951 2026] [security2:error] [pid 1321:tid 1404] [remote 34.74.130.21:52916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 21.130.74.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/configuration.php.bak"] [unique_id "apK9_WjCPtor9NZ-byTWmwAGmC4"]
[Sat Aug 29 05:09:49.638026 2026] [security2:error] [pid 1041789:tid 1042043] [client 20.220.204.93:41796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/ms.php"] [unique_id "apK9_Yv3RhPI65jTFG7-qwAAA44"]
[Sat Aug 29 05:09:49.638866 2026] [cgid:error] [pid 1041789:tid 1041957] [client 45.148.10.62:40252] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/protypeg/public_html/xyzece/404.shtml
[Sat Aug 29 05:09:49.648193 2026] [security2:error] [pid 1321:tid 1573] [client 158.23.184.117:7451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/wp-content/upgrade/alfanew.php7"] [unique_id "apK9_WjCPtor9NZ-byTWnAAABpA"]
[Sat Aug 29 05:09:49.656654 2026] [security2:error] [pid 1321:tid 1560] [client 4.232.148.111:19888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-load.php"] [unique_id "apK9_WjCPtor9NZ-byTWnQAABoM"]
[Sat Aug 29 05:09:49.657985 2026] [security2:error] [pid 1041789:tid 1042050] [client 20.63.81.20:63717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/adminer-4.6.6.php"] [unique_id "apK9_Yv3RhPI65jTFG7-rAAAA5U"]
[Sat Aug 29 05:09:49.659001 2026] [security2:error] [pid 1321:tid 1405] [remote 34.74.130.21:52916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 21.130.74.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/config.php.bak"] [unique_id "apK9_WjCPtor9NZ-byTWnwAGPy8"]
[Sat Aug 29 05:09:49.660822 2026] [security2:error] [pid 1321:tid 1405] [remote 34.74.130.21:52916] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/.env.swp"] [unique_id "apK9_WjCPtor9NZ-byTWoAAGPy8"]
[Sat Aug 29 05:09:49.665914 2026] [security2:error] [pid 1041789:tid 1041961] [client 20.63.81.20:39974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/xcc.php"] [unique_id "apK9_Yv3RhPI65jTFG7-rwAAAzw"]
[Sat Aug 29 05:09:49.697511 2026] [security2:error] [pid 1321:tid 1543] [client 20.63.81.20:55651] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/zoo1.php"] [unique_id "apK9_WjCPtor9NZ-byTWowAABnM"]
[Sat Aug 29 05:09:49.703034 2026] [security2:error] [pid 1321:tid 1607] [client 20.63.81.20:46448] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webmail.proaider.com"] [uri "/1.php"] [unique_id "apK9_WjCPtor9NZ-byTWpAAABrI"]
[Sat Aug 29 05:09:49.703176 2026] [security2:error] [pid 1321:tid 1607] [client 20.63.81.20:46448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/1.php"] [unique_id "apK9_WjCPtor9NZ-byTWpAAABrI"]
[Sat Aug 29 05:09:49.731401 2026] [security2:error] [pid 1321:tid 1574] [client 20.48.160.90:45327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/comand.php"] [unique_id "apK9_WjCPtor9NZ-byTWpgAABpE"]
[Sat Aug 29 05:09:49.734213 2026] [security2:error] [pid 1041789:tid 1041936] [client 52.139.37.240:34314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK9_Yv3RhPI65jTFG7-swAAAyM"]
[Sat Aug 29 05:09:49.739212 2026] [security2:error] [pid 1321:tid 1493] [client 68.155.159.216:23425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-content/radio.php"] [unique_id "apK9_WjCPtor9NZ-byTWqAAABkE"]
[Sat Aug 29 05:09:49.758306 2026] [security2:error] [pid 1321:tid 1512] [client 57.141.14.69:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/cart/"] [unique_id "apK9_WjCPtor9NZ-byTWqQAABlQ"]
[Sat Aug 29 05:09:49.766707 2026] [security2:error] [pid 1321:tid 1533] [client 68.155.159.216:30710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/about.php"] [unique_id "apK9_WjCPtor9NZ-byTWqgAABmk"]
[Sat Aug 29 05:09:49.781565 2026] [security2:error] [pid 1041789:tid 1042037] [client 158.23.147.79:63279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/file5.php"] [unique_id "apK9_Yv3RhPI65jTFG7-twAAA4g"]
[Sat Aug 29 05:09:49.781898 2026] [core:error] [pid 1041789:tid 1041948] [client 158.23.184.117:12621] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:49.781908 2026] [core:error] [pid 1041789:tid 1041948] [client 158.23.184.117:12621] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:49.791237 2026] [security2:error] [pid 1041789:tid 1041933] [client 45.148.10.62:40252] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.xyzece.com"] [uri "/backend/.env"] [unique_id "apK9_Yv3RhPI65jTFG7-uAAAAyA"]
[Sat Aug 29 05:09:49.792549 2026] [security2:error] [pid 1321:tid 1523] [client 158.23.184.117:7872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/admin/alfa-rex.php"] [unique_id "apK9_WjCPtor9NZ-byTWqwAABl8"]
[Sat Aug 29 05:09:49.794160 2026] [security2:error] [pid 1041789:tid 1041976] [client 20.63.81.20:39943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/wp-includes/Text/Diff/Engine/aaa.php"] [unique_id "apK9_Yv3RhPI65jTFG7-uQAAA0s"]
[Sat Aug 29 05:09:49.794954 2026] [security2:error] [pid 1041789:tid 1041941] [client 20.63.81.20:63715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/gelap1.php"] [unique_id "apK9_Yv3RhPI65jTFG7-ugAAAyg"]
[Sat Aug 29 05:09:49.806695 2026] [security2:error] [pid 1321:tid 1516] [client 52.139.37.240:31492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/ac.php"] [unique_id "apK9_WjCPtor9NZ-byTWrAAABlg"]
[Sat Aug 29 05:09:49.828025 2026] [security2:error] [pid 1041789:tid 1042044] [client 20.63.81.20:55572] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/radio.php"] [unique_id "apK9_Yv3RhPI65jTFG7-vAAAA48"]
[Sat Aug 29 05:09:49.830563 2026] [security2:error] [pid 1041789:tid 1042053] [client 20.63.81.20:46273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/classwithtostring.php"] [unique_id "apK9_Yv3RhPI65jTFG7-vQAAA5g"]
[Sat Aug 29 05:09:49.851886 2026] [security2:error] [pid 1041789:tid 1041950] [client 20.220.204.93:50716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/zxekqlxb.php"] [unique_id "apK9_Yv3RhPI65jTFG7-vgAAAzE"]
[Sat Aug 29 05:09:49.863585 2026] [security2:error] [pid 1321:tid 1501] [client 40.83.93.50:10061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/aksinet.php"] [unique_id "apK9_WjCPtor9NZ-byTWrgAABkk"]
[Sat Aug 29 05:09:49.866440 2026] [security2:error] [pid 1041789:tid 1042046] [client 68.155.159.216:33660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-l0gin.php"] [unique_id "apK9_Yv3RhPI65jTFG7-wAAAA5E"]
[Sat Aug 29 05:09:49.869885 2026] [security2:error] [pid 1041789:tid 1042049] [client 20.48.160.90:50529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/wp_motu_myk3v.php"] [unique_id "apK9_Yv3RhPI65jTFG7-wQAAA5Q"]
[Sat Aug 29 05:09:49.895225 2026] [security2:error] [pid 1321:tid 1562] [client 4.232.148.111:29563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/404.php"] [unique_id "apK9_WjCPtor9NZ-byTWrwAABoU"]
[Sat Aug 29 05:09:49.924764 2026] [security2:error] [pid 1321:tid 1496] [client 158.23.147.79:11322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-blog-header.php"] [unique_id "apK9_WjCPtor9NZ-byTWsAAABkQ"]
[Sat Aug 29 05:09:49.929648 2026] [security2:error] [pid 1041789:tid 1042009] [client 158.23.184.117:12431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/wp-admin/add.php"] [unique_id "apK9_Yv3RhPI65jTFG7-wgAAA2w"]
[Sat Aug 29 05:09:49.930821 2026] [security2:error] [pid 1321:tid 1589] [client 52.139.37.240:34348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/zafir1.php"] [unique_id "apK9_WjCPtor9NZ-byTWsQAABqA"]
[Sat Aug 29 05:09:49.931312 2026] [security2:error] [pid 1041789:tid 1042031] [client 20.63.81.20:47306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/rsjlrria.php"] [unique_id "apK9_Yv3RhPI65jTFG7-wwAAA4I"]
[Sat Aug 29 05:09:49.938742 2026] [security2:error] [pid 1041789:tid 1041982] [client 158.23.184.117:7892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/wp-content/export.php"] [unique_id "apK9_Yv3RhPI65jTFG7-xAAAA1E"]
[Sat Aug 29 05:09:49.941157 2026] [security2:error] [pid 1041789:tid 1042032] [client 45.148.10.62:40252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xyzece.com"] [uri "/test.php"] [unique_id "apK9_Yv3RhPI65jTFG7-xQAAA4M"]
[Sat Aug 29 05:09:49.943297 2026] [security2:error] [pid 1321:tid 1410] [remote 34.74.130.21:52916] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/public/.env"] [unique_id "apK9_WjCPtor9NZ-byTWsgAGrjQ"]
[Sat Aug 29 05:09:49.975444 2026] [security2:error] [pid 1321:tid 1411] [remote 34.74.130.21:52916] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/storage/.env"] [unique_id "apK9_WjCPtor9NZ-byTWswAGcTU"]
[Sat Aug 29 05:09:49.981006 2026] [security2:error] [pid 1041789:tid 1041977] [client 20.220.204.93:52274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/init.php"] [unique_id "apK9_Yv3RhPI65jTFG7-xwAAA0w"]
[Sat Aug 29 05:09:49.985658 2026] [security2:error] [pid 1321:tid 1412] [remote 34.74.130.21:52916] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/web/.env"] [unique_id "apK9_WjCPtor9NZ-byTWtAAGYTY"]
[Sat Aug 29 05:09:50.003435 2026] [security2:error] [pid 1041789:tid 1042028] [client 52.139.37.240:31507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/ctex1.php"] [unique_id "apK9_ov3RhPI65jTFG7-yQAAA38"]
[Sat Aug 29 05:09:50.006839 2026] [security2:error] [pid 1321:tid 1413] [remote 34.74.130.21:52916] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/wp-config.php~"] [unique_id "apK9_mjCPtor9NZ-byTWtQAGUDc"]
[Sat Aug 29 05:09:50.011131 2026] [security2:error] [pid 1321:tid 1414] [remote 34.74.130.21:52916] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/wp/.env"] [unique_id "apK9_mjCPtor9NZ-byTWtgAGQjg"]
[Sat Aug 29 05:09:50.018840 2026] [security2:error] [pid 1321:tid 1415] [remote 34.74.130.21:52916] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/wp-config.old"] [unique_id "apK9_mjCPtor9NZ-byTWtwAGRjk"]
[Sat Aug 29 05:09:50.018985 2026] [security2:error] [pid 1041789:tid 1041957] [client 20.48.160.90:45425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/wp_motu_ypdat.php"] [unique_id "apK9_ov3RhPI65jTFG7-ywAAAzg"]
[Sat Aug 29 05:09:50.040124 2026] [security2:error] [pid 1041789:tid 1041965] [client 20.52.41.200:5307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-admin/index.php"] [unique_id "apK9_ov3RhPI65jTFG7-zQAAA0A"]
[Sat Aug 29 05:09:50.057327 2026] [security2:error] [pid 1041789:tid 1042030] [client 4.205.62.107:63906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/guk.php"] [unique_id "apK9_ov3RhPI65jTFG7-0AAAA4E"]
[Sat Aug 29 05:09:50.073128 2026] [security2:error] [pid 1041789:tid 1041951] [client 158.23.184.117:12474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/wp-includes/assets/about.php"] [unique_id "apK9_ov3RhPI65jTFG7-0QAAAzI"]
[Sat Aug 29 05:09:50.080534 2026] [security2:error] [pid 1041789:tid 1042013] [client 158.23.184.117:7486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/new.php"] [unique_id "apK9_ov3RhPI65jTFG7-0gAAA3A"]
[Sat Aug 29 05:09:50.094783 2026] [security2:error] [pid 1041789:tid 1042019] [client 45.148.10.62:40270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.xyzece.com"] [uri "/.env.backup"] [unique_id "apK9_ov3RhPI65jTFG7-0wAAA3Y"]
[Sat Aug 29 05:09:50.123720 2026] [security2:error] [pid 1041789:tid 1041968] [client 20.220.204.93:50722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/term.php"] [unique_id "apK9_ov3RhPI65jTFG7-2AAAA0M"]
[Sat Aug 29 05:09:50.127559 2026] [security2:error] [pid 1041789:tid 1041940] [client 52.139.37.240:34304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/abc.php"] [unique_id "apK9_ov3RhPI65jTFG7-2QAAAyc"]
[Sat Aug 29 05:09:50.136096 2026] [security2:error] [pid 1321:tid 1451] [remote 34.74.130.21:52916] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/wp-config.php.swp"] [unique_id "apK9_mjCPtor9NZ-byTWuwAGclw"]
[Sat Aug 29 05:09:50.137740 2026] [security2:error] [pid 1041789:tid 1041983] [client 158.23.147.79:17671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/cgi-bin/index.php"] [unique_id "apK9_ov3RhPI65jTFG7-2wAAA1I"]
[Sat Aug 29 05:09:50.146636 2026] [security2:error] [pid 1041789:tid 1041960] [client 68.155.159.216:6084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-admin/css/index.php"] [unique_id "apK9_ov3RhPI65jTFG7-4AAAAzs"]
[Sat Aug 29 05:09:50.147210 2026] [security2:error] [pid 1041789:tid 1041946] [client 20.48.160.90:45317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/edit.php"] [unique_id "apK9_ov3RhPI65jTFG7-4QAAAy0"]
[Sat Aug 29 05:09:50.152456 2026] [security2:error] [pid 1321:tid 1544] [client 158.23.147.79:62702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK9_mjCPtor9NZ-byTWvwAABnQ"]
[Sat Aug 29 05:09:50.181103 2026] [security2:error] [pid 1041789:tid 1041991] [client 74.248.24.12:2322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-content/admin.php"] [unique_id "apK9_ov3RhPI65jTFG7-5QAAA1o"]
[Sat Aug 29 05:09:50.216845 2026] [security2:error] [pid 1041789:tid 1041978] [client 52.139.37.240:31094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/defaults.php"] [unique_id "apK9_ov3RhPI65jTFG7-5gAAA00"]
[Sat Aug 29 05:09:50.218267 2026] [security2:error] [pid 1041789:tid 1041972] [client 158.23.184.117:12449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/wp-content/themes/twentytwentythree.php"] [unique_id "apK9_ov3RhPI65jTFG7-5wAAA0c"]
[Sat Aug 29 05:09:50.226547 2026] [security2:error] [pid 1321:tid 1548] [client 158.23.184.117:7183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/wp-content/plugins/revslider/admin.php"] [unique_id "apK9_mjCPtor9NZ-byTWwgAABnc"]
[Sat Aug 29 05:09:50.250750 2026] [security2:error] [pid 1041789:tid 1041950] [client 45.148.10.62:40270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.xyzece.com"] [uri "/.env.old"] [unique_id "apK9_ov3RhPI65jTFG7-6QAAAzE"]
[Sat Aug 29 05:09:50.277950 2026] [security2:error] [pid 1041789:tid 1042049] [client 4.232.148.111:27557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/a.php"] [unique_id "apK9_ov3RhPI65jTFG7-6gAAA5Q"]
[Sat Aug 29 05:09:50.278106 2026] [security2:error] [pid 1321:tid 1515] [client 4.205.62.107:53308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/bb.php"] [unique_id "apK9_mjCPtor9NZ-byTWwwAABlc"]
[Sat Aug 29 05:09:50.280568 2026] [security2:error] [pid 1041789:tid 1042046] [client 20.48.160.90:45433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/tqkdqbbv.php"] [unique_id "apK9_ov3RhPI65jTFG7-6wAAA5E"]
[Sat Aug 29 05:09:50.282861 2026] [security2:error] [pid 1041789:tid 1042054] [client 74.248.24.12:4316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/w.php"] [unique_id "apK9_ov3RhPI65jTFG7-7AAAA5k"]
[Sat Aug 29 05:09:50.291947 2026] [security2:error] [pid 1041789:tid 1042033] [client 4.205.62.107:22306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/services.php"] [unique_id "apK9_ov3RhPI65jTFG7-7QAAA4Q"]
[Sat Aug 29 05:09:50.306166 2026] [security2:error] [pid 1041789:tid 1041956] [client 68.155.159.216:24405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-content/x.php"] [unique_id "apK9_ov3RhPI65jTFG7-7wAAAzc"]
[Sat Aug 29 05:09:50.323875 2026] [security2:error] [pid 1321:tid 1582] [client 52.139.37.240:34116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/c1.php"] [unique_id "apK9_mjCPtor9NZ-byTWxQAABpk"]
[Sat Aug 29 05:09:50.330103 2026] [security2:error] [pid 1041789:tid 1041976] [client 40.83.93.50:10083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/alfa-rex1.php"] [unique_id "apK9_ov3RhPI65jTFG7-8gAAA0s"]
[Sat Aug 29 05:09:50.339898 2026] [security2:error] [pid 1041789:tid 1041941] [client 20.220.204.93:50708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/aaa.php"] [unique_id "apK9_ov3RhPI65jTFG7-9AAAAyg"]
[Sat Aug 29 05:09:50.367969 2026] [core:error] [pid 1041789:tid 1041975] [client 158.23.184.117:12447] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:50.367986 2026] [core:error] [pid 1041789:tid 1041975] [client 158.23.184.117:12447] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:50.369772 2026] [security2:error] [pid 1041789:tid 1042006] [client 4.232.148.111:14581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/php.php"] [unique_id "apK9_ov3RhPI65jTFG7-9gAAA2k"]
[Sat Aug 29 05:09:50.372418 2026] [security2:error] [pid 1321:tid 1511] [client 158.23.184.117:7916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/wp-content/images/uploads/admin.php"] [unique_id "apK9_mjCPtor9NZ-byTWxgAABlM"]
[Sat Aug 29 05:09:50.404400 2026] [cgid:error] [pid 1041789:tid 1042032] [client 45.148.10.62:40270] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/protypeg/public_html/xyzece/404.shtml
[Sat Aug 29 05:09:50.411778 2026] [security2:error] [pid 1041789:tid 1042051] [client 20.48.160.90:45378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/kjyehoxl.php"] [unique_id "apK9_ov3RhPI65jTFG7--AAAA5Y"]
[Sat Aug 29 05:09:50.418479 2026] [security2:error] [pid 1041789:tid 1042015] [client 52.139.37.240:31059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/domains.php"] [unique_id "apK9_ov3RhPI65jTFG7--QAAA3I"]
[Sat Aug 29 05:09:50.449308 2026] [security2:error] [pid 1041789:tid 1041931] [client 20.104.49.130:57480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/abc.php"] [unique_id "apK9_ov3RhPI65jTFG7--wAAAx4"]
[Sat Aug 29 05:09:50.469007 2026] [security2:error] [pid 1321:tid 1587] [client 158.23.147.79:5959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/goat1.php"] [unique_id "apK9_mjCPtor9NZ-byTWzAAABp4"]
[Sat Aug 29 05:09:50.478605 2026] [security2:error] [pid 1041789:tid 1042013] [client 68.155.159.216:18373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK9_ov3RhPI65jTFG7_AAAAA3A"]
[Sat Aug 29 05:09:50.489418 2026] [security2:error] [pid 1321:tid 1499] [client 20.52.41.200:5264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/radio.php"] [unique_id "apK9_mjCPtor9NZ-byTWzQAABkc"]
[Sat Aug 29 05:09:50.512458 2026] [security2:error] [pid 1041789:tid 1041965] [client 158.23.184.117:12426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/wp-content/languages/themes/num.php"] [unique_id "apK9_ov3RhPI65jTFG7_AQAAA0A"]
[Sat Aug 29 05:09:50.518553 2026] [security2:error] [pid 1041789:tid 1041939] [client 52.139.37.240:34361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/index.php/feed/atom/"] [unique_id "apK9_ov3RhPI65jTFG7_AwAAAyY"]
[Sat Aug 29 05:09:50.518777 2026] [security2:error] [pid 1041789:tid 1041979] [client 158.23.184.117:7560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/tools.php"] [unique_id "apK9_ov3RhPI65jTFG7_AgAAA04"]
[Sat Aug 29 05:09:50.523604 2026] [security2:error] [pid 1041789:tid 1042057] [client 20.220.204.93:50711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/xsox.php"] [unique_id "apK9_ov3RhPI65jTFG7_BAAAA5w"]
[Sat Aug 29 05:09:50.544107 2026] [security2:error] [pid 1321:tid 1580] [client 20.48.160.90:45325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/llyuxaqd.php"] [unique_id "apK9_mjCPtor9NZ-byTWzgAABpc"]
[Sat Aug 29 05:09:50.563760 2026] [security2:error] [pid 1041789:tid 1041980] [client 45.148.10.62:40270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xyzece.com"] [uri "/.env.php.bak"] [unique_id "apK9_ov3RhPI65jTFG7_BQAAA08"]
[Sat Aug 29 05:09:50.634482 2026] [security2:error] [pid 1041789:tid 1041935] [client 52.139.37.240:31529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/dropdown.php"] [unique_id "apK9_ov3RhPI65jTFG7_DwAAAyI"]
[Sat Aug 29 05:09:50.638272 2026] [security2:error] [pid 1321:tid 1600] [client 4.205.62.107:58489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/maxro.php"] [unique_id "apK9_mjCPtor9NZ-byTW0wAABqs"]
[Sat Aug 29 05:09:50.648454 2026] [security2:error] [pid 1321:tid 1536] [client 4.205.62.107:60289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/sys.php"] [unique_id "apK9_mjCPtor9NZ-byTW1AAABmw"]
[Sat Aug 29 05:09:50.650871 2026] [security2:error] [pid 1041789:tid 1041934] [client 213.202.253.4:65001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "timportlock.net"] [uri "/wp-content/postnews.php"] [unique_id "apK9_ov3RhPI65jTFG7_EAAAAyE"], referer: www.google.com
[Sat Aug 29 05:09:50.656447 2026] [security2:error] [pid 1321:tid 1555] [client 158.23.184.117:13001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/wp.php"] [unique_id "apK9_mjCPtor9NZ-byTW1QAABn4"]
[Sat Aug 29 05:09:50.663127 2026] [security2:error] [pid 1041789:tid 1042041] [client 158.23.184.117:7438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/wp-content/uploads/my.php"] [unique_id "apK9_ov3RhPI65jTFG7_EwAAA4w"]
[Sat Aug 29 05:09:50.684437 2026] [security2:error] [pid 1041789:tid 1042010] [client 20.48.160.90:45439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/nbwxolou.php"] [unique_id "apK9_ov3RhPI65jTFG7_FwAAA20"]
[Sat Aug 29 05:09:50.692231 2026] [security2:error] [pid 1321:tid 1423] [remote 34.74.130.21:52916] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ"] [unique_id "apK9_mjCPtor9NZ-byTW1wAGakE"]
[Sat Aug 29 05:09:50.694307 2026] [security2:error] [pid 1321:tid 1547] [client 4.205.62.107:6932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/fleen.php"] [unique_id "apK9_mjCPtor9NZ-byTW2AAABnY"]
[Sat Aug 29 05:09:50.694733 2026] [security2:error] [pid 1041789:tid 1042019] [client 74.248.24.12:19466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-configs.php"] [unique_id "apK9_ov3RhPI65jTFG7_GAAAA3Y"]
[Sat Aug 29 05:09:50.700702 2026] [security2:error] [pid 1041789:tid 1042005] [client 20.220.204.93:59077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/lkui.php"] [unique_id "apK9_ov3RhPI65jTFG7_GQAAA2g"]
[Sat Aug 29 05:09:50.705133 2026] [security2:error] [pid 1321:tid 1549] [client 68.155.159.216:65137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-includes/plugins.php"] [unique_id "apK9_mjCPtor9NZ-byTW2gAABng"]
[Sat Aug 29 05:09:50.712675 2026] [security2:error] [pid 1321:tid 1595] [client 52.139.37.240:34331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/root.php"] [unique_id "apK9_mjCPtor9NZ-byTW2wAABqY"]
[Sat Aug 29 05:09:50.714270 2026] [security2:error] [pid 1041789:tid 1042023] [client 45.148.10.62:40254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xyzece.com"] [uri "/.env.php"] [unique_id "apK9_ov3RhPI65jTFG7_GwAAA3o"]
[Sat Aug 29 05:09:50.729613 2026] [security2:error] [pid 1321:tid 1518] [client 68.155.159.216:52773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK9_mjCPtor9NZ-byTW3AAABlo"]
[Sat Aug 29 05:09:50.751127 2026] [security2:error] [pid 1041789:tid 1041956] [client 158.23.147.79:6004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/cong.php"] [unique_id "apK9_ov3RhPI65jTFG7_HAAAAzc"]
[Sat Aug 29 05:09:50.753264 2026] [security2:error] [pid 1321:tid 1529] [client 4.232.148.111:26840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/u.php"] [unique_id "apK9_mjCPtor9NZ-byTW3QAABmU"]
[Sat Aug 29 05:09:50.796967 2026] [security2:error] [pid 1041789:tid 1041978] [client 74.248.24.12:15936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/ahax.php"] [unique_id "apK9_ov3RhPI65jTFG7_HQAAA00"]
[Sat Aug 29 05:09:50.811106 2026] [security2:error] [pid 1321:tid 1593] [client 158.23.184.117:7881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/wp-includes/themes/uploads/config.php"] [unique_id "apK9_mjCPtor9NZ-byTW3gAABqQ"]
[Sat Aug 29 05:09:50.813950 2026] [security2:error] [pid 1041789:tid 1041971] [client 40.83.93.50:18278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/headerg.php"] [unique_id "apK9_ov3RhPI65jTFG7_HwAAA0Y"]
[Sat Aug 29 05:09:50.832807 2026] [security2:error] [pid 1041789:tid 1041995] [client 52.139.37.240:31649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/files/index.php"] [unique_id "apK9_ov3RhPI65jTFG7_IAAAA14"]
[Sat Aug 29 05:09:50.834366 2026] [security2:error] [pid 1041789:tid 1042014] [client 158.23.184.117:13028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/xmlrpc.php"] [unique_id "apK9_ov3RhPI65jTFG7_IQAAA3E"]
[Sat Aug 29 05:09:50.835716 2026] [security2:error] [pid 1321:tid 1513] [client 20.48.160.90:50549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/nsxeubyv.php"] [unique_id "apK9_mjCPtor9NZ-byTW3wAABlU"]
[Sat Aug 29 05:09:50.839594 2026] [security2:error] [pid 1321:tid 1489] [client 158.23.147.79:60107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-content/cong.php"] [unique_id "apK9_mjCPtor9NZ-byTW4AAABj0"]
[Sat Aug 29 05:09:50.864103 2026] [security2:error] [pid 1321:tid 1590] [client 4.232.148.111:22055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/init.php"] [unique_id "apK9_mjCPtor9NZ-byTW4QAABqE"]
[Sat Aug 29 05:09:50.873155 2026] [security2:error] [pid 1041789:tid 1042029] [client 20.220.204.93:52286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "apK9_ov3RhPI65jTFG7_IgAAA4A"]
[Sat Aug 29 05:09:50.873376 2026] [security2:error] [pid 1041789:tid 1041982] [client 68.155.159.216:30679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK9_ov3RhPI65jTFG7_IwAAA1E"]
[Sat Aug 29 05:09:50.907288 2026] [security2:error] [pid 1321:tid 1572] [client 158.23.147.79:60220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/file88.php"] [unique_id "apK9_mjCPtor9NZ-byTW4gAABo8"]
[Sat Aug 29 05:09:50.908174 2026] [security2:error] [pid 1041789:tid 1042009] [client 52.139.37.240:34317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/shell.php"] [unique_id "apK9_ov3RhPI65jTFG7_JQAAA2w"]
[Sat Aug 29 05:09:50.934824 2026] [security2:error] [pid 1041789:tid 1041977] [client 68.155.159.216:61273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK9_ov3RhPI65jTFG7_JgAAA0w"]
[Sat Aug 29 05:09:50.938627 2026] [security2:error] [pid 1041789:tid 1041954] [client 20.52.41.200:5302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/item.php"] [unique_id "apK9_ov3RhPI65jTFG7_JwAAAzU"]
[Sat Aug 29 05:09:50.960123 2026] [security2:error] [pid 1321:tid 1572] [client 158.23.184.117:7900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/av.php"] [unique_id "apK9_mjCPtor9NZ-byTW4wAABo8"]
[Sat Aug 29 05:09:50.971188 2026] [security2:error] [pid 1041789:tid 1041949] [client 68.155.159.216:33696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK9_ov3RhPI65jTFG7_KQAAAzA"]
[Sat Aug 29 05:09:50.971592 2026] [security2:error] [pid 1041789:tid 1042030] [client 20.48.160.90:50520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/zfqipfss.php"] [unique_id "apK9_ov3RhPI65jTFG7_KgAAA4E"]
[Sat Aug 29 05:09:50.971970 2026] [security2:error] [pid 1041789:tid 1042017] [client 68.155.159.216:49188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK9_ov3RhPI65jTFG7_KwAAA3Q"]
[Sat Aug 29 05:09:50.991239 2026] [security2:error] [pid 1321:tid 1602] [client 68.155.159.216:64012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK9_mjCPtor9NZ-byTW5QAABq0"]
[Sat Aug 29 05:09:50.997410 2026] [security2:error] [pid 1041789:tid 1042028] [client 158.23.184.117:12999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/app.php"] [unique_id "apK9_ov3RhPI65jTFG7_LgAAA38"]
[Sat Aug 29 05:09:51.004552 2026] [security2:error] [pid 1041789:tid 1041938] [client 20.220.204.93:41824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/motu.php"] [unique_id "apK9_4v3RhPI65jTFG7_LwAAAyU"]
[Sat Aug 29 05:09:51.031618 2026] [security2:error] [pid 1041789:tid 1042052] [client 52.139.37.240:31112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.driversity.co.uk"] [uri "/flower.php"] [unique_id "apK9_4v3RhPI65jTFG7_MQAAA5c"]
[Sat Aug 29 05:09:51.049020 2026] [security2:error] [pid 1041789:tid 1042000] [client 103.240.76.112:43428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK9_4v3RhPI65jTFG7_MgAAA2M"]
[Sat Aug 29 05:09:51.049142 2026] [security2:error] [pid 1041789:tid 1042000] [client 103.240.76.112:43428] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK9_4v3RhPI65jTFG7_MgAAA2M"]
[Sat Aug 29 05:09:51.061518 2026] [security2:error] [pid 1321:tid 1564] [client 158.23.147.79:11367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK9_2jCPtor9NZ-byTW5gAABoc"]
[Sat Aug 29 05:09:51.102685 2026] [security2:error] [pid 1321:tid 1578] [client 52.139.37.240:34162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK9_2jCPtor9NZ-byTW5wAABpU"]
[Sat Aug 29 05:09:51.114077 2026] [security2:error] [pid 1041789:tid 1041963] [client 20.48.160.90:45418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.workbase.site"] [uri "/zrjuyoos.php"] [unique_id "apK9_4v3RhPI65jTFG7_NAAAAz4"]
[Sat Aug 29 05:09:51.115888 2026] [core:error] [pid 1041789:tid 1041961] [client 158.23.184.117:7902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:51.115902 2026] [core:error] [pid 1041789:tid 1041961] [client 158.23.184.117:7902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:51.133737 2026] [security2:error] [pid 1041789:tid 1041935] [client 34.169.171.101:8780] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "forensicengineernj.com"] [uri "/@fs/var/www/html/wp-config.php"] [unique_id "apK9_4v3RhPI65jTFG7_NwAAAyI"]
[Sat Aug 29 05:09:51.135113 2026] [security2:error] [pid 1041789:tid 1042020] [client 34.169.171.101:8734] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/@fs/root/.ssh/id_rsa"] [unique_id "apK9_4v3RhPI65jTFG7_NgAAA3c"]
[Sat Aug 29 05:09:51.138772 2026] [security2:error] [pid 1041789:tid 1041992] [client 34.169.171.101:8832] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "forensicengineernj.com"] [uri "/@fs/../../../../../proc/self/environ"] [unique_id "apK9_4v3RhPI65jTFG7_PAAAA1s"]
[Sat Aug 29 05:09:51.138775 2026] [core:error] [pid 1321:tid 1574] [client 34.169.171.101:8842] AH10244: invalid URI path (/@fs/../../../../../root/.env?raw??)
[Sat Aug 29 05:09:51.141232 2026] [security2:error] [pid 1041789:tid 1041934] [client 34.169.171.101:8768] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK9_4v3RhPI65jTFG7_OQAAAyE"]
[Sat Aug 29 05:09:51.143270 2026] [security2:error] [pid 1041789:tid 1041991] [client 34.169.171.101:8938] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK9_4v3RhPI65jTFG7_OwAAA1o"]
[Sat Aug 29 05:09:51.145810 2026] [security2:error] [pid 1041789:tid 1042044] [client 158.23.184.117:13027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/aaa.php"] [unique_id "apK9_4v3RhPI65jTFG7_QgAAA48"]
[Sat Aug 29 05:09:51.146105 2026] [security2:error] [pid 1041789:tid 1041960] [client 34.169.171.101:8818] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "forensicengineernj.com"] [uri "/@fs/../../../../../app/.env"] [unique_id "apK9_4v3RhPI65jTFG7_RAAAAzs"]
[Sat Aug 29 05:09:51.147421 2026] [security2:error] [pid 1041789:tid 1042048] [client 20.220.204.93:50804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/Ov-Simple1.php"] [unique_id "apK9_4v3RhPI65jTFG7_RQAAA5M"]
[Sat Aug 29 05:09:51.151212 2026] [security2:error] [pid 1321:tid 1531] [client 34.169.171.101:9018] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "forensicengineernj.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2fproc/self/environ"] [unique_id "apK9_2jCPtor9NZ-byTW8wAABmc"]
[Sat Aug 29 05:09:51.179228 2026] [security2:error] [pid 1041789:tid 1041956] [client 34.169.171.101:8768] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "forensicengineernj.com"] [uri "/404.html"] [unique_id "apK9_4v3RhPI65jTFG7_TAAAAzc"], referer: https://forensicengineernj.com/@fs/proc/self/cmdline?raw??
[Sat Aug 29 05:09:51.182946 2026] [security2:error] [pid 1041789:tid 1041976] [client 34.169.171.101:8938] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "forensicengineernj.com"] [uri "/404.html"] [unique_id "apK9_4v3RhPI65jTFG7_TQAAA0s"], referer: https://forensicengineernj.com/@fs/root/.ovh.conf?raw??
[Sat Aug 29 05:09:51.194410 2026] [security2:error] [pid 1041789:tid 1041982] [client 4.205.62.107:63989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/config_dev.php"] [unique_id "apK9_4v3RhPI65jTFG7_VgAAA1E"]
[Sat Aug 29 05:09:51.208875 2026] [security2:error] [pid 1041789:tid 1042034] [client 74.248.24.12:29771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-includes/index.php"] [unique_id "apK9_4v3RhPI65jTFG7_VwAAA4U"]
[Sat Aug 29 05:09:51.224670 2026] [security2:error] [pid 1041789:tid 1041998] [client 4.232.148.111:23218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/r.php"] [unique_id "apK9_4v3RhPI65jTFG7_WAAAA2E"]
[Sat Aug 29 05:09:51.225688 2026] [security2:error] [pid 1321:tid 1613] [client 20.104.49.130:43009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/ws78.php"] [unique_id "apK9_2jCPtor9NZ-byTW-QAABrg"]
[Sat Aug 29 05:09:51.263424 2026] [security2:error] [pid 1041789:tid 1042051] [client 158.23.147.79:62997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-content/banners/about.php"] [unique_id "apK9_4v3RhPI65jTFG7_WQAAA5Y"]
[Sat Aug 29 05:09:51.282865 2026] [security2:error] [pid 1321:tid 1516] [client 20.220.204.93:50756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/wp-blogs.php"] [unique_id "apK9_2jCPtor9NZ-byTW-gAABlg"]
[Sat Aug 29 05:09:51.295582 2026] [security2:error] [pid 1321:tid 1506] [client 40.83.93.50:18299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/meta.php"] [unique_id "apK9_2jCPtor9NZ-byTW-wAABk4"]
[Sat Aug 29 05:09:51.295697 2026] [core:error] [pid 1041789:tid 1042032] [client 158.23.184.117:13036] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:51.295706 2026] [core:error] [pid 1041789:tid 1042032] [client 158.23.184.117:13036] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:51.298086 2026] [security2:error] [pid 1041789:tid 1042007] [client 158.23.184.117:7878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/wp-includes/ID3/file.php"] [unique_id "apK9_4v3RhPI65jTFG7_WwAAA2o"]
[Sat Aug 29 05:09:51.299179 2026] [security2:error] [pid 1321:tid 1504] [client 52.139.37.240:34334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/wp-content/plugins/linkpreview/il.php"] [unique_id "apK9_2jCPtor9NZ-byTW_AAABkw"]
[Sat Aug 29 05:09:51.309803 2026] [security2:error] [pid 1041789:tid 1042023] [client 74.248.24.12:10865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/shell.php"] [unique_id "apK9_4v3RhPI65jTFG7_XAAAA3o"]
[Sat Aug 29 05:09:51.326054 2026] [security2:error] [pid 1041789:tid 1041943] [client 68.155.159.216:14195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/login.php"] [unique_id "apK9_4v3RhPI65jTFG7_XgAAAyo"]
[Sat Aug 29 05:09:51.345735 2026] [security2:error] [pid 1041789:tid 1041971] [client 4.232.148.111:28827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "apK9_4v3RhPI65jTFG7_YAAAA0Y"]
[Sat Aug 29 05:09:51.375928 2026] [security2:error] [pid 1041789:tid 1042017] [client 158.23.147.79:17661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kaletainc.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK9_4v3RhPI65jTFG7_YgAAA3Q"]
[Sat Aug 29 05:09:51.395940 2026] [security2:error] [pid 1321:tid 1612] [client 20.52.41.200:4611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/t.php"] [unique_id "apK9_2jCPtor9NZ-byTW_gAABrc"]
[Sat Aug 29 05:09:51.414470 2026] [security2:error] [pid 1041789:tid 1041951] [client 4.205.62.107:3961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/file59.php"] [unique_id "apK9_4v3RhPI65jTFG7_YwAAAzI"]
[Sat Aug 29 05:09:51.431746 2026] [security2:error] [pid 1321:tid 1599] [client 68.155.159.216:24545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK9_2jCPtor9NZ-byTW_wAABqo"]
[Sat Aug 29 05:09:51.444224 2026] [security2:error] [pid 1321:tid 1501] [client 4.205.62.107:22330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/filesystems.php"] [unique_id "apK9_2jCPtor9NZ-byTXAAAABkk"]
[Sat Aug 29 05:09:51.444658 2026] [security2:error] [pid 1321:tid 1550] [client 158.23.184.117:7578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theriffreshers.strangeworx.com"] [uri "/wp-admin/css/fff.php"] [unique_id "apK9_2jCPtor9NZ-byTXAQAABnk"]
[Sat Aug 29 05:09:51.445793 2026] [security2:error] [pid 1041789:tid 1041979] [client 158.23.184.117:13022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/hehe.php"] [unique_id "apK9_4v3RhPI65jTFG7_ZAAAA04"]
[Sat Aug 29 05:09:51.454600 2026] [security2:error] [pid 1041789:tid 1042035] [client 158.23.147.79:63285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/file88.php"] [unique_id "apK9_4v3RhPI65jTFG7_ZQAAA4Y"]
[Sat Aug 29 05:09:51.461351 2026] [security2:error] [pid 1321:tid 1615] [client 195.178.110.247:40836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lunar-festival.com"] [uri "/index.php"] [unique_id "apK9_2jCPtor9NZ-byTXAgAABro"]
[Sat Aug 29 05:09:51.483579 2026] [security2:error] [pid 1041789:tid 1041940] [client 20.220.204.93:50802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/mini.php"] [unique_id "apK9_4v3RhPI65jTFG7_aAAAAyc"]
[Sat Aug 29 05:09:51.521258 2026] [security2:error] [pid 1041789:tid 1041944] [client 52.139.37.240:34130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/wp-header-json.php"] [unique_id "apK9_4v3RhPI65jTFG7_aQAAAys"]
[Sat Aug 29 05:09:51.595646 2026] [security2:error] [pid 1041789:tid 1041933] [client 158.23.184.117:13008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/wp-includes/PHPMailer.php"] [unique_id "apK9_4v3RhPI65jTFG7_bAAAAyA"]
[Sat Aug 29 05:09:51.620236 2026] [security2:error] [pid 1041789:tid 1041992] [client 68.155.159.216:18304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK9_4v3RhPI65jTFG7_bgAAA1s"]
[Sat Aug 29 05:09:51.622913 2026] [cgid:error] [pid 1321:tid 1505] [client 45.148.10.62:40342] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/protypeg/public_html/xyzece/404.shtml
[Sat Aug 29 05:09:51.635382 2026] [security2:error] [pid 1041789:tid 1041969] [client 195.178.110.247:44964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lunar-festival.com"] [uri "/index.php"] [unique_id "apK9_4v3RhPI65jTFG7_bwAAA0Q"]
[Sat Aug 29 05:09:51.669233 2026] [security2:error] [pid 1321:tid 1554] [client 20.104.104.62:43126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/dbc.php"] [unique_id "apK9_2jCPtor9NZ-byTXCQAABn0"]
[Sat Aug 29 05:09:51.675148 2026] [security2:error] [pid 1321:tid 1605] [client 20.104.104.62:64738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/here.php"] [unique_id "apK9_2jCPtor9NZ-byTXCgAABrA"]
[Sat Aug 29 05:09:51.690305 2026] [security2:error] [pid 1321:tid 1541] [client 4.232.148.111:23198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-blog.php"] [unique_id "apK9_2jCPtor9NZ-byTXCwAABnE"]
[Sat Aug 29 05:09:51.714759 2026] [security2:error] [pid 1321:tid 1611] [client 52.139.37.240:34725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/zup.php"] [unique_id "apK9_2jCPtor9NZ-byTXDAAABrY"]
[Sat Aug 29 05:09:51.719693 2026] [security2:error] [pid 1041789:tid 1042025] [client 74.248.24.12:22867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-admin/a.php"] [unique_id "apK9_4v3RhPI65jTFG7_cQAAA3w"]
[Sat Aug 29 05:09:51.741085 2026] [security2:error] [pid 1321:tid 1548] [client 158.23.184.117:13054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/wp-content/upgrade/alfanew.php7"] [unique_id "apK9_2jCPtor9NZ-byTXDQAABnc"]
[Sat Aug 29 05:09:51.743521 2026] [security2:error] [pid 1321:tid 1594] [client 20.104.104.62:46001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/ah24.php"] [unique_id "apK9_2jCPtor9NZ-byTXDgAABqU"]
[Sat Aug 29 05:09:51.753346 2026] [security2:error] [pid 1041789:tid 1042048] [client 20.104.104.62:56355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/sao.php"] [unique_id "apK9_4v3RhPI65jTFG7_cgAAA5M"]
[Sat Aug 29 05:09:51.772386 2026] [security2:error] [pid 1041789:tid 1041946] [client 40.83.93.50:18276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/dxc.php"] [unique_id "apK9_4v3RhPI65jTFG7_cwAAAy0"]
[Sat Aug 29 05:09:51.776268 2026] [security2:error] [pid 1321:tid 1515] [client 4.205.62.107:58446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/phina.php"] [unique_id "apK9_2jCPtor9NZ-byTXEAAABlc"]
[Sat Aug 29 05:09:51.777970 2026] [cgid:error] [pid 1321:tid 1503] [client 45.148.10.62:40342] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/protypeg/public_html/xyzece/404.shtml
[Sat Aug 29 05:09:51.783131 2026] [security2:error] [pid 1321:tid 1511] [client 4.205.62.107:62948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/phpsysinfo.php"] [unique_id "apK9_2jCPtor9NZ-byTXEQAABlM"]
[Sat Aug 29 05:09:51.793635 2026] [security2:error] [pid 1321:tid 1532] [client 20.151.200.44:63716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/bgymj.php"] [unique_id "apK9_2jCPtor9NZ-byTXEgAABmg"]
[Sat Aug 29 05:09:51.800640 2026] [security2:error] [pid 1041789:tid 1041948] [client 20.104.104.62:43378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/wp-wlx.php"] [unique_id "apK9_4v3RhPI65jTFG7_dAAAAy8"]
[Sat Aug 29 05:09:51.819397 2026] [security2:error] [pid 1321:tid 1544] [client 74.248.24.12:4553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/elp.php"] [unique_id "apK9_2jCPtor9NZ-byTXEwAABnQ"]
[Sat Aug 29 05:09:51.826329 2026] [security2:error] [pid 1041789:tid 1041981] [client 68.155.159.216:64498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK9_4v3RhPI65jTFG7_dQAAA1A"]
[Sat Aug 29 05:09:51.839395 2026] [security2:error] [pid 1321:tid 1492] [client 20.52.41.200:4609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/i.php"] [unique_id "apK9_2jCPtor9NZ-byTXFQAABkA"]
[Sat Aug 29 05:09:51.840866 2026] [security2:error] [pid 1321:tid 1527] [client 68.155.159.216:52790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK9_2jCPtor9NZ-byTXFgAABmM"]
[Sat Aug 29 05:09:51.845387 2026] [security2:error] [pid 1321:tid 1600] [client 4.205.62.107:6495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/upload.form.php"] [unique_id "apK9_2jCPtor9NZ-byTXFwAABqs"]
[Sat Aug 29 05:09:51.848502 2026] [security2:error] [pid 1041789:tid 1041975] [client 68.155.159.216:23521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-admin/dropdown.php"] [unique_id "apK9_4v3RhPI65jTFG7_dgAAA0o"]
[Sat Aug 29 05:09:51.859650 2026] [security2:error] [pid 1041789:tid 1042006] [client 158.23.147.79:5895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-includes/js/index.php"] [unique_id "apK9_4v3RhPI65jTFG7_dwAAA2k"]
[Sat Aug 29 05:09:51.884401 2026] [security2:error] [pid 1321:tid 1609] [client 158.23.184.117:12424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/admin/alfa-rex.php"] [unique_id "apK9_2jCPtor9NZ-byTXGAAABrQ"]
[Sat Aug 29 05:09:51.889036 2026] [security2:error] [pid 1041789:tid 1042034] [client 20.104.104.62:22685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/ztv.php"] [unique_id "apK9_4v3RhPI65jTFG7_eAAAA4U"]
[Sat Aug 29 05:09:51.908166 2026] [security2:error] [pid 1321:tid 1553] [client 52.139.37.240:34335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/a9.php"] [unique_id "apK9_2jCPtor9NZ-byTXGQAABnw"]
[Sat Aug 29 05:09:51.918721 2026] [security2:error] [pid 1041789:tid 1042011] [client 20.104.104.62:4114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/uuu.php"] [unique_id "apK9_4v3RhPI65jTFG7_eQAAA24"]
[Sat Aug 29 05:09:51.931193 2026] [security2:error] [pid 1041789:tid 1042047] [client 20.104.104.62:42818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/attack.php"] [unique_id "apK9_4v3RhPI65jTFG7_ewAAA5I"]
[Sat Aug 29 05:09:51.943594 2026] [security2:error] [pid 1041789:tid 1041892] [remote 57.129.136.36:60340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 36.136.129.57.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ducabsafety.com.mx"] [uri "/wp-login.php"] [unique_id "apK9_4v3RhPI65jTFG7_egADi1o"]
[Sat Aug 29 05:09:51.983757 2026] [cgid:error] [pid 1321:tid 1549] [client 45.148.10.62:40342] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/protypeg/public_html/xyzece/404.shtml
[Sat Aug 29 05:09:51.990271 2026] [security2:error] [pid 1041789:tid 1042057] [client 158.23.147.79:28093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK9_4v3RhPI65jTFG7_fgAAA5w"]
[Sat Aug 29 05:09:51.997120 2026] [security2:error] [pid 1321:tid 1529] [client 68.155.159.216:30643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/themes.php"] [unique_id "apK9_2jCPtor9NZ-byTXHQAABmU"]
[Sat Aug 29 05:09:52.002182 2026] [security2:error] [pid 1041789:tid 1041954] [client 20.104.104.62:20727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/hxh.php"] [unique_id "apK-AIv3RhPI65jTFG7_gAAAAzU"]
[Sat Aug 29 05:09:52.012623 2026] [security2:error] [pid 1041789:tid 1042013] [client 158.23.147.79:63253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/NewFile.php/"] [unique_id "apK-AIv3RhPI65jTFG7_ggAAA3A"]
[Sat Aug 29 05:09:52.027669 2026] [security2:error] [pid 1041789:tid 1041997] [client 20.104.104.62:45987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/kure.php"] [unique_id "apK-AIv3RhPI65jTFG7_gwAAA2A"]
[Sat Aug 29 05:09:52.029457 2026] [security2:error] [pid 1041789:tid 1041936] [client 158.23.184.117:12993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/wp-content/export.php"] [unique_id "apK-AIv3RhPI65jTFG7_hAAAAyM"]
[Sat Aug 29 05:09:52.040455 2026] [security2:error] [pid 1041789:tid 1042055] [client 68.155.159.216:38672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-includes/content.php"] [unique_id "apK-AIv3RhPI65jTFG7_hgAAA5o"]
[Sat Aug 29 05:09:52.068863 2026] [security2:error] [pid 1321:tid 1601] [client 20.104.104.62:42819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/file66.php"] [unique_id "apK-AGjCPtor9NZ-byTXHwAABqw"]
[Sat Aug 29 05:09:52.071134 2026] [security2:error] [pid 1041789:tid 1041979] [client 20.104.104.62:4841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/private.php"] [unique_id "apK-AIv3RhPI65jTFG7_hwAAA04"]
[Sat Aug 29 05:09:52.077874 2026] [security2:error] [pid 1041789:tid 1042035] [client 158.23.147.79:6006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK-AIv3RhPI65jTFG7_iAAAA4Y"]
[Sat Aug 29 05:09:52.080380 2026] [security2:error] [pid 1041789:tid 1041968] [client 68.155.159.216:49363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/packed.php"] [unique_id "apK-AIv3RhPI65jTFG7_iQAAA0M"]
[Sat Aug 29 05:09:52.098707 2026] [security2:error] [pid 1321:tid 1596] [client 68.155.159.216:64080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/makeasmtp.php"] [unique_id "apK-AGjCPtor9NZ-byTXIAAABqc"]
[Sat Aug 29 05:09:52.105167 2026] [security2:error] [pid 1321:tid 1522] [client 52.139.37.240:34726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/admin/index.php"] [unique_id "apK-AGjCPtor9NZ-byTXIQAABl4"]
[Sat Aug 29 05:09:52.108933 2026] [security2:error] [pid 1041789:tid 1041940] [client 68.155.159.216:33757] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/ioxi002.PhP7"] [unique_id "apK-AIv3RhPI65jTFG7_igAAAyc"]
[Sat Aug 29 05:09:52.137145 2026] [cgid:error] [pid 1321:tid 1583] [client 45.148.10.62:40342] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/protypeg/public_html/xyzece/404.shtml
[Sat Aug 29 05:09:52.146517 2026] [security2:error] [pid 1321:tid 1489] [client 4.232.148.111:17961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-content/admin.php"] [unique_id "apK-AGjCPtor9NZ-byTXJAAABj0"]
[Sat Aug 29 05:09:52.150557 2026] [security2:error] [pid 1321:tid 1431] [remote 34.74.130.21:52920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/web.config"] [unique_id "apK-AGjCPtor9NZ-byTXKQAGVUk"]
[Sat Aug 29 05:09:52.156628 2026] [security2:error] [pid 1321:tid 1598] [client 20.104.18.15:15315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/w.php"] [unique_id "apK-AGjCPtor9NZ-byTXLwAABqk"]
[Sat Aug 29 05:09:52.164383 2026] [security2:error] [pid 1321:tid 1565] [client 20.104.104.62:41618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/cafe.php"] [unique_id "apK-AGjCPtor9NZ-byTXMQAABog"]
[Sat Aug 29 05:09:52.167117 2026] [security2:error] [pid 1041789:tid 1041991] [client 158.23.147.79:11355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK-AIv3RhPI65jTFG7_jwAAA1o"]
[Sat Aug 29 05:09:52.168102 2026] [security2:error] [pid 1041789:tid 1042053] [client 4.232.148.111:19523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/xxx.php"] [unique_id "apK-AIv3RhPI65jTFG7_kAAAA5g"]
[Sat Aug 29 05:09:52.177165 2026] [security2:error] [pid 1321:tid 1591] [client 20.104.18.15:43280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/simple.php"] [unique_id "apK-AGjCPtor9NZ-byTXNQAABqI"]
[Sat Aug 29 05:09:52.214400 2026] [security2:error] [pid 1321:tid 1564] [client 20.104.104.62:43122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/zafir1.php"] [unique_id "apK-AGjCPtor9NZ-byTXOQAABoc"]
[Sat Aug 29 05:09:52.217749 2026] [security2:error] [pid 1321:tid 1581] [client 158.23.184.117:12627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/new.php"] [unique_id "apK-AGjCPtor9NZ-byTXOgAABpg"]
[Sat Aug 29 05:09:52.223160 2026] [security2:error] [pid 1041789:tid 1042025] [client 20.104.104.62:4807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/lfi.php"] [unique_id "apK-AIv3RhPI65jTFG7_lAAAA3w"]
[Sat Aug 29 05:09:52.253649 2026] [security2:error] [pid 1041789:tid 1042048] [client 20.104.18.15:16827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/birrs.php"] [unique_id "apK-AIv3RhPI65jTFG7_lQAAA5M"]
[Sat Aug 29 05:09:52.264673 2026] [security2:error] [pid 1041789:tid 1042005] [client 20.104.18.15:7123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/akismet.php"] [unique_id "apK-AIv3RhPI65jTFG7_lgAAA2g"]
[Sat Aug 29 05:09:52.280058 2026] [security2:error] [pid 1041789:tid 1042050] [client 40.83.93.50:18267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/wp-2019.php"] [unique_id "apK-AIv3RhPI65jTFG7_lwAAA5U"]
[Sat Aug 29 05:09:52.292109 2026] [security2:error] [pid 1041789:tid 1041933] [client 20.104.18.15:15359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/x.php"] [unique_id "apK-AIv3RhPI65jTFG7_mAAAAyA"]
[Sat Aug 29 05:09:52.293517 2026] [cgid:error] [pid 1321:tid 1526] [client 45.148.10.62:40342] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/protypeg/public_html/xyzece/404.shtml
[Sat Aug 29 05:09:52.295450 2026] [security2:error] [pid 1321:tid 1520] [client 20.104.18.15:22520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/btyuio.php"] [unique_id "apK-AGjCPtor9NZ-byTXPQAABlw"]
[Sat Aug 29 05:09:52.298320 2026] [security2:error] [pid 1041789:tid 1041987] [client 20.104.18.15:41857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/gm.php"] [unique_id "apK-AIv3RhPI65jTFG7_mQAAA1Y"]
[Sat Aug 29 05:09:52.300124 2026] [security2:error] [pid 1041789:tid 1042041] [client 52.139.37.240:34143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/makeasmtp.php"] [unique_id "apK-AIv3RhPI65jTFG7_mgAAA4w"]
[Sat Aug 29 05:09:52.301487 2026] [security2:error] [pid 1041789:tid 1041944] [client 20.52.41.200:4357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/deepseek_d.php"] [unique_id "apK-AIv3RhPI65jTFG7_mwAAAys"]
[Sat Aug 29 05:09:52.307287 2026] [security2:error] [pid 1321:tid 1533] [client 20.104.104.62:45974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/eval.php"] [unique_id "apK-AGjCPtor9NZ-byTXPgAABmk"]
[Sat Aug 29 05:09:52.324586 2026] [security2:error] [pid 1041789:tid 1041969] [client 74.248.24.12:10970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-content/cong.php"] [unique_id "apK-AIv3RhPI65jTFG7_nAAAA0Q"]
[Sat Aug 29 05:09:52.333338 2026] [security2:error] [pid 1041789:tid 1042037] [client 4.205.62.107:63950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/aws_credentials.php"] [unique_id "apK-AIv3RhPI65jTFG7_nQAAA4g"]
[Sat Aug 29 05:09:52.337691 2026] [security2:error] [pid 1041789:tid 1041967] [client 20.104.18.15:43992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/xty.php"] [unique_id "apK-AIv3RhPI65jTFG7_ngAAA0I"]
[Sat Aug 29 05:09:52.341439 2026] [security2:error] [pid 1041789:tid 1041941] [client 20.104.18.15:45892] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/\\\\.[a-z0-9]{4}\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "784"] [id "900080"] [msg "PHP Mailer Access Attempt"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/.mopj.php"] [unique_id "apK-AIv3RhPI65jTFG7_nwAAAyg"]
[Sat Aug 29 05:09:52.352029 2026] [security2:error] [pid 1041789:tid 1041978] [client 20.104.104.62:4154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/quoys.php"] [unique_id "apK-AIv3RhPI65jTFG7_oAAAA00"]
[Sat Aug 29 05:09:52.353012 2026] [security2:error] [pid 1041789:tid 1041976] [client 20.104.104.62:42820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/console.php"] [unique_id "apK-AIv3RhPI65jTFG7_oQAAA0s"]
[Sat Aug 29 05:09:52.355018 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.104.18.15:45897] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/\\\\.[a-z0-9]{4}\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "784"] [id "900080"] [msg "PHP Mailer Access Attempt"] [hostname "healthinsurance.midayins.com"] [uri "/.mopj.php"] [unique_id "apK-AIv3RhPI65jTFG7_ogAAA30"]
[Sat Aug 29 05:09:52.363044 2026] [security2:error] [pid 1041789:tid 1042014] [client 158.23.147.79:63811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK-AIv3RhPI65jTFG7_owAAA3E"]
[Sat Aug 29 05:09:52.364527 2026] [security2:error] [pid 1041789:tid 1042046] [client 158.23.184.117:13004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/wp-content/plugins/revslider/admin.php"] [unique_id "apK-AIv3RhPI65jTFG7_pAAAA5E"]
[Sat Aug 29 05:09:52.387194 2026] [security2:error] [pid 1041789:tid 1042006] [client 20.104.18.15:25503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/sss.php"] [unique_id "apK-AIv3RhPI65jTFG7_pQAAA2k"]
[Sat Aug 29 05:09:52.391872 2026] [security2:error] [pid 1321:tid 1570] [client 20.104.49.130:42213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/ws78.php"] [unique_id "apK-AGjCPtor9NZ-byTXPwAABo0"]
[Sat Aug 29 05:09:52.396687 2026] [security2:error] [pid 1321:tid 1504] [client 68.155.159.216:2009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-includes/js/index.php"] [unique_id "apK-AGjCPtor9NZ-byTXQAAABkw"]
[Sat Aug 29 05:09:52.420570 2026] [security2:error] [pid 1321:tid 1559] [client 74.248.24.12:37735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK-AGjCPtor9NZ-byTXQgAABoI"]
[Sat Aug 29 05:09:52.425247 2026] [security2:error] [pid 1321:tid 1612] [client 68.155.159.216:14274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/hehehehe.php"] [unique_id "apK-AGjCPtor9NZ-byTXRQAABrc"]
[Sat Aug 29 05:09:52.425735 2026] [security2:error] [pid 1041789:tid 1042032] [client 20.104.18.15:7037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/ajax.php"] [unique_id "apK-AIv3RhPI65jTFG7_pgAAA4M"]
[Sat Aug 29 05:09:52.426850 2026] [security2:error] [pid 1041789:tid 1042040] [client 20.104.18.15:15196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/ssla.php"] [unique_id "apK-AIv3RhPI65jTFG7_pwAAA4s"]
[Sat Aug 29 05:09:52.451673 2026] [security2:error] [pid 1321:tid 1599] [client 45.148.10.62:40342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xyzece.com"] [uri "/wp-config.php"] [unique_id "apK-AGjCPtor9NZ-byTXSAAABqo"]
[Sat Aug 29 05:09:52.457308 2026] [security2:error] [pid 1321:tid 1502] [client 20.104.104.62:41619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/sao.php"] [unique_id "apK-AGjCPtor9NZ-byTXSQAABko"]
[Sat Aug 29 05:09:52.458820 2026] [security2:error] [pid 1041789:tid 1042030] [client 20.104.18.15:22511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/dehnl.php"] [unique_id "apK-AIv3RhPI65jTFG7_rwAAA4E"]
[Sat Aug 29 05:09:52.479587 2026] [security2:error] [pid 1321:tid 1496] [client 20.104.18.15:41891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/ws55.php"] [unique_id "apK-AGjCPtor9NZ-byTXSgAABkQ"]
[Sat Aug 29 05:09:52.484038 2026] [security2:error] [pid 1321:tid 1603] [client 20.104.104.62:47575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/FX.php"] [unique_id "apK-AGjCPtor9NZ-byTXSwAABq4"]
[Sat Aug 29 05:09:52.493618 2026] [security2:error] [pid 1041789:tid 1041977] [client 52.139.37.240:34199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/paku.php"] [unique_id "apK-AIv3RhPI65jTFG7_sAAAA0w"]
[Sat Aug 29 05:09:52.496339 2026] [security2:error] [pid 1321:tid 1514] [client 20.104.104.62:41962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/blnux.php"] [unique_id "apK-AGjCPtor9NZ-byTXTAAABlY"]
[Sat Aug 29 05:09:52.502217 2026] [security2:error] [pid 1041789:tid 1042018] [client 20.104.104.62:4109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/vbbn.php"] [unique_id "apK-AIv3RhPI65jTFG7_sQAAA3U"]
[Sat Aug 29 05:09:52.506008 2026] [security2:error] [pid 1041789:tid 1041951] [client 20.104.18.15:45977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/bengi.php"] [unique_id "apK-AIv3RhPI65jTFG7_sgAAAzI"]
[Sat Aug 29 05:09:52.507790 2026] [security2:error] [pid 1041789:tid 1041951] [client 20.104.18.15:43310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/sallu.php"] [unique_id "apK-AIv3RhPI65jTFG7_tAAAAzI"]
[Sat Aug 29 05:09:52.511346 2026] [security2:error] [pid 1041789:tid 1042055] [client 158.23.184.117:12458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/wp-content/images/uploads/admin.php"] [unique_id "apK-AIv3RhPI65jTFG7_tQAAA5o"]
[Sat Aug 29 05:09:52.541823 2026] [security2:error] [pid 1321:tid 1505] [client 68.155.159.216:24390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/log-mama/function.php"] [unique_id "apK-AGjCPtor9NZ-byTXTwAABk0"]
[Sat Aug 29 05:09:52.550692 2026] [security2:error] [pid 1321:tid 1508] [client 158.23.147.79:58906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/NewFile.php/"] [unique_id "apK-AGjCPtor9NZ-byTXUAAABlA"]
[Sat Aug 29 05:09:52.552312 2026] [security2:error] [pid 1041789:tid 1041968] [client 4.205.62.107:53259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/cli_bootstrap.php"] [unique_id "apK-AIv3RhPI65jTFG7_uAAAA0M"]
[Sat Aug 29 05:09:52.555406 2026] [security2:error] [pid 1321:tid 1494] [client 20.104.18.15:7124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/atomlib.php"] [unique_id "apK-AGjCPtor9NZ-byTXUQAABkI"]
[Sat Aug 29 05:09:52.571707 2026] [security2:error] [pid 1041789:tid 1041957] [client 20.104.18.15:15250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "apK-AIv3RhPI65jTFG7_uQAAAzg"]
[Sat Aug 29 05:09:52.589586 2026] [security2:error] [pid 1041789:tid 1042010] [client 20.104.18.15:16815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/wp-includes/ID3/moon.php"] [unique_id "apK-AIv3RhPI65jTFG7_ugAAA20"]
[Sat Aug 29 05:09:52.599521 2026] [security2:error] [pid 1041789:tid 1041992] [client 20.104.104.62:55011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/uuu.php"] [unique_id "apK-AIv3RhPI65jTFG7_uwAAA1s"]
[Sat Aug 29 05:09:52.619515 2026] [security2:error] [pid 1041789:tid 1041949] [client 103.171.189.88:1034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-AIv3RhPI65jTFG7_vQAAAzA"]
[Sat Aug 29 05:09:52.619623 2026] [security2:error] [pid 1041789:tid 1041949] [client 103.171.189.88:1034] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-AIv3RhPI65jTFG7_vQAAAzA"]
[Sat Aug 29 05:09:52.625716 2026] [security2:error] [pid 1321:tid 1615] [client 4.232.148.111:21457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-configs.php"] [unique_id "apK-AGjCPtor9NZ-byTXVAAABro"]
[Sat Aug 29 05:09:52.631609 2026] [security2:error] [pid 1321:tid 1517] [client 20.104.104.62:42870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/pentest.php"] [unique_id "apK-AGjCPtor9NZ-byTXVQAABlk"]
[Sat Aug 29 05:09:52.634537 2026] [security2:error] [pid 1041789:tid 1041961] [client 20.104.104.62:4827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/rfi.php"] [unique_id "apK-AIv3RhPI65jTFG7_vgAAAzw"]
[Sat Aug 29 05:09:52.646575 2026] [security2:error] [pid 1321:tid 1511] [client 20.104.18.15:22477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/zoo2.php"] [unique_id "apK-AGjCPtor9NZ-byTXVgAABlM"]
[Sat Aug 29 05:09:52.652264 2026] [security2:error] [pid 1041789:tid 1041960] [client 20.104.18.15:41898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/m.php"] [unique_id "apK-AIv3RhPI65jTFG7_vwAAAzs"]
[Sat Aug 29 05:09:52.652396 2026] [security2:error] [pid 1321:tid 1521] [client 4.205.62.107:21920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/tax.php"] [unique_id "apK-AGjCPtor9NZ-byTXWAAABl0"]
[Sat Aug 29 05:09:52.661228 2026] [security2:error] [pid 1041789:tid 1041991] [client 158.23.184.117:12609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/tools.php"] [unique_id "apK-AIv3RhPI65jTFG7_wAAAA1o"]
[Sat Aug 29 05:09:52.684436 2026] [security2:error] [pid 1041789:tid 1041963] [client 20.104.18.15:46006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/file2.php"] [unique_id "apK-AIv3RhPI65jTFG7_wQAAAz4"]
[Sat Aug 29 05:09:52.690682 2026] [security2:error] [pid 1041789:tid 1041935] [client 20.104.18.15:43925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/codex.php"] [unique_id "apK-AIv3RhPI65jTFG7_wgAAAyI"]
[Sat Aug 29 05:09:52.693874 2026] [security2:error] [pid 1321:tid 1582] [client 52.139.37.240:34337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/rtx.php"] [unique_id "apK-AGjCPtor9NZ-byTXWQAABpk"]
[Sat Aug 29 05:09:52.725169 2026] [security2:error] [pid 1041789:tid 1041946] [client 20.104.18.15:15272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/wp-aothait.php"] [unique_id "apK-AIv3RhPI65jTFG7_wwAAAy0"]
[Sat Aug 29 05:09:52.726433 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.104.18.15:16853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/xmini4.php"] [unique_id "apK-AIv3RhPI65jTFG7_xAAAA3o"]
[Sat Aug 29 05:09:52.733196 2026] [security2:error] [pid 1041789:tid 1042028] [client 68.155.159.216:18278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK-AIv3RhPI65jTFG7_xQAAA38"]
[Sat Aug 29 05:09:52.740155 2026] [security2:error] [pid 1041789:tid 1042050] [client 20.104.104.62:22667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/private.php"] [unique_id "apK-AIv3RhPI65jTFG7_xgAAA5U"]
[Sat Aug 29 05:09:52.754731 2026] [security2:error] [pid 1041789:tid 1042049] [client 20.104.18.15:7085] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "just-gov.scottewen.org"] [uri "/1.php"] [unique_id "apK-AIv3RhPI65jTFG7_xwAAA5Q"]
[Sat Aug 29 05:09:52.754823 2026] [security2:error] [pid 1041789:tid 1042049] [client 20.104.18.15:7085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/1.php"] [unique_id "apK-AIv3RhPI65jTFG7_xwAAA5Q"]
[Sat Aug 29 05:09:52.770012 2026] [security2:error] [pid 1041789:tid 1041987] [client 20.104.104.62:64690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/tajj.php"] [unique_id "apK-AIv3RhPI65jTFG7_yAAAA1Y"]
[Sat Aug 29 05:09:52.773977 2026] [security2:error] [pid 1041789:tid 1042041] [client 20.104.104.62:60672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/6y7t.php"] [unique_id "apK-AIv3RhPI65jTFG7_yQAAA4w"]
[Sat Aug 29 05:09:52.787778 2026] [security2:error] [pid 1321:tid 1580] [client 20.104.18.15:46025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/bengi.php"] [unique_id "apK-AGjCPtor9NZ-byTXWwAABpc"]
[Sat Aug 29 05:09:52.800157 2026] [security2:error] [pid 1041789:tid 1041956] [client 20.104.18.15:41802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/33.php"] [unique_id "apK-AIv3RhPI65jTFG7_ygAAAzc"]
[Sat Aug 29 05:09:52.807670 2026] [security2:error] [pid 1321:tid 1606] [client 158.23.184.117:12468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/wp-content/uploads/my.php"] [unique_id "apK-AGjCPtor9NZ-byTXXAAABrE"]
[Sat Aug 29 05:09:52.811759 2026] [security2:error] [pid 1041789:tid 1041978] [client 20.104.18.15:22435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/zoo1.php"] [unique_id "apK-AIv3RhPI65jTFG7_ywAAA00"]
[Sat Aug 29 05:09:52.832071 2026] [security2:error] [pid 1321:tid 1515] [client 40.83.93.50:18300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/menu.php"] [unique_id "apK-AGjCPtor9NZ-byTXXgAABlc"]
[Sat Aug 29 05:09:52.840332 2026] [security2:error] [pid 1041789:tid 1042006] [client 158.23.184.117:21772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/.dj/index.php"] [unique_id "apK-AIv3RhPI65jTFG7_zAAAA2k"]
[Sat Aug 29 05:09:52.854646 2026] [security2:error] [pid 1041789:tid 1041982] [client 20.104.18.15:25588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/gulu.php"] [unique_id "apK-AIv3RhPI65jTFG7_zQAAA1E"]
[Sat Aug 29 05:09:52.855834 2026] [security2:error] [pid 1041789:tid 1042042] [client 20.104.18.15:43326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/5656.php"] [unique_id "apK-AIv3RhPI65jTFG7_zgAAA40"]
[Sat Aug 29 05:09:52.859583 2026] [security2:error] [pid 1041789:tid 1042048] [client 74.248.24.12:10873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK-AIv3RhPI65jTFG7_zwAAA5M"]
[Sat Aug 29 05:09:52.873222 2026] [security2:error] [pid 1041789:tid 1041962] [client 20.104.18.15:15285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/wp-includes/index.php"] [unique_id "apK-AIv3RhPI65jTFG7_0AAAAz0"]
[Sat Aug 29 05:09:52.877191 2026] [security2:error] [pid 1041789:tid 1042011] [client 20.104.104.62:22669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/lfi.php"] [unique_id "apK-AIv3RhPI65jTFG7_0QAAA24"]
[Sat Aug 29 05:09:52.888460 2026] [security2:error] [pid 1041789:tid 1041995] [client 52.139.37.240:34126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/update/da222.php"] [unique_id "apK-AIv3RhPI65jTFG7_0gAAA14"]
[Sat Aug 29 05:09:52.890249 2026] [security2:error] [pid 1041789:tid 1042032] [client 20.104.18.15:7115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/samll.php"] [unique_id "apK-AIv3RhPI65jTFG7_0wAAA4M"]
[Sat Aug 29 05:09:52.910451 2026] [security2:error] [pid 1321:tid 1509] [client 20.104.104.62:42830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/0xs.php"] [unique_id "apK-AGjCPtor9NZ-byTXXwAABlE"]
[Sat Aug 29 05:09:52.913247 2026] [security2:error] [pid 1321:tid 1553] [client 20.104.104.62:47560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/ga.php"] [unique_id "apK-AGjCPtor9NZ-byTXYAAABnw"]
[Sat Aug 29 05:09:52.918369 2026] [security2:error] [pid 1321:tid 1556] [client 20.52.41.200:4401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "apK-AGjCPtor9NZ-byTXYQAABn8"]
[Sat Aug 29 05:09:52.922717 2026] [security2:error] [pid 1321:tid 1561] [client 4.205.62.107:62964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/sgd.php"] [unique_id "apK-AGjCPtor9NZ-byTXYgAABoQ"]
[Sat Aug 29 05:09:52.923701 2026] [security2:error] [pid 1041789:tid 1041936] [client 20.104.18.15:45974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/gm.php"] [unique_id "apK-AIv3RhPI65jTFG7_1AAAAyM"]
[Sat Aug 29 05:09:52.926457 2026] [security2:error] [pid 1321:tid 1507] [client 68.155.159.216:65080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/goat1.php"] [unique_id "apK-AGjCPtor9NZ-byTXYwAABk8"]
[Sat Aug 29 05:09:52.928333 2026] [security2:error] [pid 1321:tid 1585] [client 4.205.62.107:51493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/aws_secret_config.php"] [unique_id "apK-AGjCPtor9NZ-byTXZAAABpw"]
[Sat Aug 29 05:09:52.944754 2026] [security2:error] [pid 1321:tid 1595] [client 20.104.104.62:43037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/grsiuk.php"] [unique_id "apK-AGjCPtor9NZ-byTXaAAABqY"]
[Sat Aug 29 05:09:52.948427 2026] [security2:error] [pid 1041789:tid 1042018] [client 20.104.18.15:41981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/packed.php"] [unique_id "apK-AIv3RhPI65jTFG7_1QAAA3U"]
[Sat Aug 29 05:09:52.952377 2026] [security2:error] [pid 1041789:tid 1041942] [client 74.248.24.12:37743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ej207.com"] [uri "/wp-admin.php"] [unique_id "apK-AIv3RhPI65jTFG7_1gAAAyk"]
[Sat Aug 29 05:09:52.952973 2026] [security2:error] [pid 1041789:tid 1041939] [client 20.63.81.20:39941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/wp-includes/style-engine/gecko-new.php"] [unique_id "apK-AIv3RhPI65jTFG7_1wAAAyY"]
[Sat Aug 29 05:09:52.959761 2026] [security2:error] [pid 1041789:tid 1042013] [client 158.23.184.117:13039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/wp-includes/themes/uploads/config.php"] [unique_id "apK-AIv3RhPI65jTFG7_2AAAA3A"]
[Sat Aug 29 05:09:52.966810 2026] [security2:error] [pid 1321:tid 1540] [client 20.104.18.15:22288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/radio.php"] [unique_id "apK-AGjCPtor9NZ-byTXagAABnA"]
[Sat Aug 29 05:09:52.967112 2026] [security2:error] [pid 1321:tid 1579] [client 158.23.147.79:5931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-content/index.php"] [unique_id "apK-AGjCPtor9NZ-byTXawAABpY"]
[Sat Aug 29 05:09:52.969800 2026] [security2:error] [pid 1321:tid 1601] [client 4.232.148.111:27526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/tool.php"] [unique_id "apK-AGjCPtor9NZ-byTXbAAABqw"]
[Sat Aug 29 05:09:52.976467 2026] [security2:error] [pid 1321:tid 1588] [client 20.63.81.20:55590] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/one.php"] [unique_id "apK-AGjCPtor9NZ-byTXbQAABp8"]
[Sat Aug 29 05:09:52.979667 2026] [security2:error] [pid 1041789:tid 1041951] [client 20.63.81.20:46339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/wp-ws68.php"] [unique_id "apK-AIv3RhPI65jTFG7_2QAAAzI"]
[Sat Aug 29 05:09:52.986402 2026] [security2:error] [pid 1041789:tid 1042017] [client 158.23.184.117:21818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/.info.php"] [unique_id "apK-AIv3RhPI65jTFG7_2gAAA3Q"]
[Sat Aug 29 05:09:52.994335 2026] [security2:error] [pid 1321:tid 1607] [client 4.205.62.107:6943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/aws_auth.php"] [unique_id "apK-AGjCPtor9NZ-byTXcwAABrI"]
[Sat Aug 29 05:09:52.997408 2026] [security2:error] [pid 1041789:tid 1041981] [client 20.104.18.15:16824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/replace.php"] [unique_id "apK-AIv3RhPI65jTFG7_3wAAA1A"]
[Sat Aug 29 05:09:53.005867 2026] [security2:error] [pid 1041789:tid 1041968] [client 20.104.104.62:41630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/quoys.php"] [unique_id "apK-AYv3RhPI65jTFG7_4AAAA0M"]
[Sat Aug 29 05:09:53.010485 2026] [security2:error] [pid 1041789:tid 1042031] [client 20.104.18.15:43976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/w3lls.php"] [unique_id "apK-AYv3RhPI65jTFG7_4QAAA4I"]
[Sat Aug 29 05:09:53.015761 2026] [security2:error] [pid 1041789:tid 1041940] [client 20.104.18.15:15329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/file31.php"] [unique_id "apK-AYv3RhPI65jTFG7_4gAAAyc"]
[Sat Aug 29 05:09:53.043752 2026] [security2:error] [pid 1321:tid 1614] [client 20.104.104.62:43385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/waf.php"] [unique_id "apK-AWjCPtor9NZ-byTXegAABrk"]
[Sat Aug 29 05:09:53.077498 2026] [security2:error] [pid 1321:tid 1526] [client 20.104.18.15:46029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/ws55.php"] [unique_id "apK-AWjCPtor9NZ-byTXfAAABmI"]
[Sat Aug 29 05:09:53.078110 2026] [security2:error] [pid 1321:tid 1520] [client 20.104.18.15:7113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/she11.php"] [unique_id "apK-AWjCPtor9NZ-byTXfQAABlw"]
[Sat Aug 29 05:09:53.084192 2026] [security2:error] [pid 1041789:tid 1042015] [client 20.104.18.15:45999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/file2.php"] [unique_id "apK-AYv3RhPI65jTFG7_4wAAA3I"]
[Sat Aug 29 05:09:53.084958 2026] [security2:error] [pid 1041789:tid 1041947] [client 20.63.81.20:47328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/AxAo.php"] [unique_id "apK-AYv3RhPI65jTFG7_5AAAAy4"]
[Sat Aug 29 05:09:53.085572 2026] [security2:error] [pid 1041789:tid 1042050] [client 20.63.81.20:40047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/wp-settings.php"] [unique_id "apK-AYv3RhPI65jTFG7_5QAAA5U"]
[Sat Aug 29 05:09:53.087733 2026] [cgid:error] [pid 1321:tid 1577] [client 52.139.37.240:34173] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/airviewc/public_html/404.shtml
[Sat Aug 29 05:09:53.088587 2026] [security2:error] [pid 1041789:tid 1041971] [client 20.104.104.62:42804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/ahy66.php"] [unique_id "apK-AYv3RhPI65jTFG7_5gAAA0Y"]
[Sat Aug 29 05:09:53.098608 2026] [security2:error] [pid 1321:tid 1549] [client 4.232.148.111:14552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-includes/index.php"] [unique_id "apK-AWjCPtor9NZ-byTXfwAABng"]
[Sat Aug 29 05:09:53.103467 2026] [security2:error] [pid 1321:tid 1537] [client 45.148.10.62:40356] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "mail.xyzece.com"] [uri "/wp-config.php.old"] [unique_id "apK-AWjCPtor9NZ-byTXgAAABm0"]
[Sat Aug 29 05:09:53.106075 2026] [security2:error] [pid 1321:tid 1581] [client 158.23.184.117:13006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/av.php"] [unique_id "apK-AWjCPtor9NZ-byTXgQAABpg"]
[Sat Aug 29 05:09:53.115113 2026] [security2:error] [pid 1041789:tid 1042047] [client 158.23.147.79:56994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK-AYv3RhPI65jTFG7_5wAAA5I"]
[Sat Aug 29 05:09:53.118299 2026] [security2:error] [pid 1041789:tid 1041931] [client 68.155.159.216:30641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-mail.php"] [unique_id "apK-AYv3RhPI65jTFG7_6AAAAx4"]
[Sat Aug 29 05:09:53.121647 2026] [security2:error] [pid 1321:tid 1516] [client 20.63.81.20:46377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/simple.php"] [unique_id "apK-AWjCPtor9NZ-byTXgwAABlg"]
[Sat Aug 29 05:09:53.129815 2026] [security2:error] [pid 1321:tid 1510] [client 20.63.81.20:55592] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/503.php"] [unique_id "apK-AWjCPtor9NZ-byTXhAAABlI"]
[Sat Aug 29 05:09:53.132227 2026] [security2:error] [pid 1321:tid 1504] [client 20.104.18.15:25594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/c4.php"] [unique_id "apK-AWjCPtor9NZ-byTXhQAABkw"]
[Sat Aug 29 05:09:53.141347 2026] [security2:error] [pid 1041789:tid 1041933] [client 158.23.184.117:21812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/.trash7206/index.php"] [unique_id "apK-AYv3RhPI65jTFG7_6QAAAyA"]
[Sat Aug 29 05:09:53.143537 2026] [security2:error] [pid 1041789:tid 1041969] [client 20.104.104.62:41660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/vbbn.php"] [unique_id "apK-AYv3RhPI65jTFG7_6gAAA0Q"]
[Sat Aug 29 05:09:53.151328 2026] [security2:error] [pid 1321:tid 1562] [client 52.139.37.240:34173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/wp-admin/min.php"] [unique_id "apK-AWjCPtor9NZ-byTXigAABoU"]
[Sat Aug 29 05:09:53.152185 2026] [security2:error] [pid 1321:tid 1442] [remote 34.74.130.21:52920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.philadelphialawworks.org"] [uri "/.env"] [unique_id "apK-AWjCPtor9NZ-byTXiQAGglQ"]
[Sat Aug 29 05:09:53.152665 2026] [security2:error] [pid 1041789:tid 1041978] [client 20.104.18.15:43294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/fpwch.php"] [unique_id "apK-AYv3RhPI65jTFG7_6wAAA00"]
[Sat Aug 29 05:09:53.161296 2026] [security2:error] [pid 1041789:tid 1041938] [client 20.104.18.15:15135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/dk.php"] [unique_id "apK-AYv3RhPI65jTFG7_7wAAAyU"]
[Sat Aug 29 05:09:53.174721 2026] [security2:error] [pid 1041789:tid 1042042] [client 20.104.18.15:22434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/one.php"] [unique_id "apK-AYv3RhPI65jTFG7_8QAAA40"]
[Sat Aug 29 05:09:53.183414 2026] [security2:error] [pid 1321:tid 1496] [client 158.23.147.79:5827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-admin/network/index.php"] [unique_id "apK-AWjCPtor9NZ-byTXjAAABkQ"]
[Sat Aug 29 05:09:53.186395 2026] [security2:error] [pid 1041789:tid 1042048] [client 20.104.104.62:41965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/bnnof6.php"] [unique_id "apK-AYv3RhPI65jTFG7_8gAAA5M"]
[Sat Aug 29 05:09:53.192306 2026] [security2:error] [pid 1321:tid 1514] [client 20.104.104.62:64741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/ganz.php"] [unique_id "apK-AWjCPtor9NZ-byTXjQAABlY"]
[Sat Aug 29 05:09:53.209996 2026] [security2:error] [pid 1321:tid 1508] [client 20.104.18.15:7116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/kerang.php"] [unique_id "apK-AWjCPtor9NZ-byTXmAAABlA"]
[Sat Aug 29 05:09:53.212878 2026] [security2:error] [pid 1321:tid 1494] [client 20.104.18.15:45896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/m.php"] [unique_id "apK-AWjCPtor9NZ-byTXmwAABkI"]
[Sat Aug 29 05:09:53.218759 2026] [security2:error] [pid 1041789:tid 1042019] [client 35.221.212.112:8950] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "autodiscover.beraluzarchive.org"] [uri "/config.yml"] [unique_id "apK-AYv3RhPI65jTFG4ACwAAA3Y"]
[Sat Aug 29 05:09:53.221907 2026] [security2:error] [pid 1041789:tid 1042013] [client 68.155.159.216:33691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK-AYv3RhPI65jTFG4AEQAAA3A"]
[Sat Aug 29 05:09:53.225456 2026] [security2:error] [pid 1041789:tid 1042000] [client 20.104.104.62:4141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/gaje.php"] [unique_id "apK-AYv3RhPI65jTFG4AGAAAA2M"]
[Sat Aug 29 05:09:53.226277 2026] [security2:error] [pid 1041789:tid 1041977] [client 20.63.81.20:40062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/wp-signup.php"] [unique_id "apK-AYv3RhPI65jTFG4AGgAAA0w"]
[Sat Aug 29 05:09:53.237039 2026] [security2:error] [pid 1041789:tid 1042007] [client 20.63.81.20:46788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/class17.php"] [unique_id "apK-AYv3RhPI65jTFG4AIgAAA2o"]
[Sat Aug 29 05:09:53.243593 2026] [core:error] [pid 1041789:tid 1041981] [client 34.45.234.226:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:53.243624 2026] [core:error] [pid 1041789:tid 1041981] [client 34.45.234.226:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:53.255247 2026] [security2:error] [pid 1041789:tid 1041954] [client 20.63.81.20:46459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/aaa.php"] [unique_id "apK-AYv3RhPI65jTFG4AKwAAAzU"]
[Sat Aug 29 05:09:53.263417 2026] [security2:error] [pid 1321:tid 1547] [client 20.63.81.20:55630] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/504.php"] [unique_id "apK-AWjCPtor9NZ-byTXvAAABnY"]
[Sat Aug 29 05:09:53.279761 2026] [security2:error] [pid 1321:tid 1509] [client 158.23.147.79:11423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-includes/plugins.php"] [unique_id "apK-AWjCPtor9NZ-byTXvQAABlE"]
[Sat Aug 29 05:09:53.281603 2026] [security2:error] [pid 1041789:tid 1042033] [client 20.104.104.62:54977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/rfi.php"] [unique_id "apK-AYv3RhPI65jTFG4ALAAAA4Q"]
[Sat Aug 29 05:09:53.286523 2026] [security2:error] [pid 1321:tid 1515] [client 158.23.184.117:21807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/.trash7206/min.php"] [unique_id "apK-AWjCPtor9NZ-byTXvgAABlc"]
[Sat Aug 29 05:09:53.286671 2026] [security2:error] [pid 1321:tid 1556] [client 20.104.18.15:16807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/rxr.php"] [unique_id "apK-AWjCPtor9NZ-byTXvwAABn8"]
[Sat Aug 29 05:09:53.300933 2026] [core:error] [pid 1321:tid 1575] [client 158.23.184.117:61379] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:53.300955 2026] [core:error] [pid 1321:tid 1575] [client 158.23.184.117:61379] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:53.308412 2026] [security2:error] [pid 1321:tid 1507] [client 20.104.18.15:15254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/ta.php"] [unique_id "apK-AWjCPtor9NZ-byTXwQAABk8"]
[Sat Aug 29 05:09:53.323901 2026] [security2:error] [pid 1321:tid 1616] [client 20.104.104.62:43113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/ah24.php"] [unique_id "apK-AWjCPtor9NZ-byTXwgAABrs"]
[Sat Aug 29 05:09:53.330149 2026] [security2:error] [pid 1041789:tid 1041982] [client 40.83.93.50:17684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/alfa.php"] [unique_id "apK-AYv3RhPI65jTFG4ALQAAA1E"]
[Sat Aug 29 05:09:53.346913 2026] [security2:error] [pid 1321:tid 1566] [client 52.139.37.240:34148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/wp-admin/wp-fileesx-449.php"] [unique_id "apK-AWjCPtor9NZ-byTXxAAABok"]
[Sat Aug 29 05:09:53.346959 2026] [security2:error] [pid 1041789:tid 1041938] [client 20.104.18.15:7051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/m.php"] [unique_id "apK-AYv3RhPI65jTFG4ALgAAAyU"]
[Sat Aug 29 05:09:53.361495 2026] [security2:error] [pid 1321:tid 1522] [client 20.63.81.20:40024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/wp-conffg.php"] [unique_id "apK-AWjCPtor9NZ-byTXxQAABl4"]
[Sat Aug 29 05:09:53.366239 2026] [security2:error] [pid 1321:tid 1588] [client 20.104.104.62:4855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/wp-admin/zwso.php"] [unique_id "apK-AWjCPtor9NZ-byTXxgAABp8"]
[Sat Aug 29 05:09:53.369839 2026] [security2:error] [pid 1321:tid 1607] [client 20.104.18.15:43952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/domvf.php"] [unique_id "apK-AWjCPtor9NZ-byTXxwAABrI"]
[Sat Aug 29 05:09:53.374060 2026] [security2:error] [pid 1041789:tid 1042048] [client 20.104.18.15:22482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/503.php"] [unique_id "apK-AYv3RhPI65jTFG4ALwAAA5M"]
[Sat Aug 29 05:09:53.380594 2026] [security2:error] [pid 1041789:tid 1041932] [client 74.248.24.12:20030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-mail.php"] [unique_id "apK-AYv3RhPI65jTFG4AMQAAAx8"]
[Sat Aug 29 05:09:53.380594 2026] [security2:error] [pid 1321:tid 1598] [client 20.63.81.20:63688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/okxoby.php"] [unique_id "apK-AWjCPtor9NZ-byTXyAAABqk"]
[Sat Aug 29 05:09:53.398256 2026] [security2:error] [pid 1321:tid 1591] [client 20.104.18.15:41934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/w.php"] [unique_id "apK-AWjCPtor9NZ-byTXyQAABqI"]
[Sat Aug 29 05:09:53.410504 2026] [security2:error] [pid 1041789:tid 1041968] [client 20.104.18.15:45990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/33.php"] [unique_id "apK-AYv3RhPI65jTFG4AMwAAA0M"]
[Sat Aug 29 05:09:53.415313 2026] [security2:error] [pid 1041789:tid 1041977] [client 20.104.18.15:25579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/reviall.php"] [unique_id "apK-AYv3RhPI65jTFG4ANAAAA0w"]
[Sat Aug 29 05:09:53.424422 2026] [security2:error] [pid 1321:tid 1518] [client 20.104.104.62:41634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/tajj.php"] [unique_id "apK-AWjCPtor9NZ-byTXygAABlo"]
[Sat Aug 29 05:09:53.426127 2026] [security2:error] [pid 1321:tid 1602] [client 20.63.81.20:55554] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/admin.php"] [unique_id "apK-AWjCPtor9NZ-byTXywAABq0"]
[Sat Aug 29 05:09:53.430811 2026] [security2:error] [pid 1041789:tid 1042034] [client 158.23.184.117:21669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/.well-known//index.php"] [unique_id "apK-AYv3RhPI65jTFG4ANQAAA4U"]
[Sat Aug 29 05:09:53.439079 2026] [security2:error] [pid 1321:tid 1553] [client 4.232.148.111:26868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/k.php"] [unique_id "apK-AWjCPtor9NZ-byTXzAAABnw"]
[Sat Aug 29 05:09:53.439904 2026] [security2:error] [pid 1041789:tid 1042050] [client 20.104.18.15:46075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/gm.php"] [unique_id "apK-AYv3RhPI65jTFG4ANgAAA5U"]
[Sat Aug 29 05:09:53.446320 2026] [security2:error] [pid 1321:tid 1526] [client 20.104.18.15:15320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/bo.php"] [unique_id "apK-AWjCPtor9NZ-byTXzgAABmI"]
[Sat Aug 29 05:09:53.460270 2026] [security2:error] [pid 1041789:tid 1041975] [client 68.155.159.216:52797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK-AYv3RhPI65jTFG4AOAAAA0o"]
[Sat Aug 29 05:09:53.466799 2026] [security2:error] [pid 1041789:tid 1042013] [client 158.23.184.117:12554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/wp-includes/ID3/file.php"] [unique_id "apK-AYv3RhPI65jTFG4AOgAAA3A"]
[Sat Aug 29 05:09:53.471873 2026] [security2:error] [pid 1041789:tid 1042014] [client 4.205.62.107:63935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/aws-credentials.php"] [unique_id "apK-AYv3RhPI65jTFG4AOwAAA3E"]
[Sat Aug 29 05:09:53.472607 2026] [security2:error] [pid 1041789:tid 1042009] [client 158.23.147.79:38779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/asd.php"] [unique_id "apK-AYv3RhPI65jTFG4APAAAA2w"]
[Sat Aug 29 05:09:53.477885 2026] [security2:error] [pid 1041789:tid 1042033] [client 20.104.104.62:43354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/ztv.php"] [unique_id "apK-AYv3RhPI65jTFG4APQAAA4Q"]
[Sat Aug 29 05:09:53.487927 2026] [security2:error] [pid 1321:tid 1537] [client 20.104.18.15:7131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/fling.php"] [unique_id "apK-AWjCPtor9NZ-byTX0AAABm0"]
[Sat Aug 29 05:09:53.494648 2026] [security2:error] [pid 1321:tid 1513] [client 20.63.81.20:39951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/wp-validate.php"] [unique_id "apK-AWjCPtor9NZ-byTX0QAABlU"]
[Sat Aug 29 05:09:53.509614 2026] [security2:error] [pid 1321:tid 1510] [client 20.104.18.15:22419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/504.php"] [unique_id "apK-AWjCPtor9NZ-byTX0gAABlI"]
[Sat Aug 29 05:09:53.513132 2026] [security2:error] [pid 1321:tid 1593] [client 20.104.104.62:4131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/Contrller.php"] [unique_id "apK-AWjCPtor9NZ-byTX0wAABqQ"]
[Sat Aug 29 05:09:53.518400 2026] [security2:error] [pid 1041789:tid 1042037] [client 169.58.197.254:49458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 254.197.58.169.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.kcactf4.org"] [uri "/wp-content/themes/jaida/lang.php"] [unique_id "apK-AYv3RhPI65jTFG4AQAAAA4g"], referer: www.google.com
[Sat Aug 29 05:09:53.526310 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.63.81.20:65248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/esuutzzx.php"] [unique_id "apK-AYv3RhPI65jTFG4AQQAAA30"]
[Sat Aug 29 05:09:53.530211 2026] [security2:error] [pid 1041789:tid 1042029] [client 20.104.104.62:64742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/gas.php"] [unique_id "apK-AYv3RhPI65jTFG4AQwAAA4A"]
[Sat Aug 29 05:09:53.531081 2026] [security2:error] [pid 1041789:tid 1041972] [client 68.155.159.216:14279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK-AYv3RhPI65jTFG4ARAAAA0c"]
[Sat Aug 29 05:09:53.531775 2026] [security2:error] [pid 1041789:tid 1042006] [client 68.155.159.216:1893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-content/index.php"] [unique_id "apK-AYv3RhPI65jTFG4ARQAAA2k"]
[Sat Aug 29 05:09:53.532799 2026] [security2:error] [pid 1041789:tid 1041992] [client 20.52.41.200:4413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-content/themes/pridmag/il.php"] [unique_id "apK-AYv3RhPI65jTFG4ARgAAA1s"]
[Sat Aug 29 05:09:53.535463 2026] [security2:error] [pid 1041789:tid 1042042] [client 20.63.81.20:46274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/shiny.php"] [unique_id "apK-AYv3RhPI65jTFG4ASAAAA40"]
[Sat Aug 29 05:09:53.539669 2026] [security2:error] [pid 1041789:tid 1042047] [client 52.139.37.240:34146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/wp-content/themes/min.php"] [unique_id "apK-AYv3RhPI65jTFG4ASQAAA5I"]
[Sat Aug 29 05:09:53.547675 2026] [security2:error] [pid 1041789:tid 1042017] [client 20.104.18.15:46012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/packed.php"] [unique_id "apK-AYv3RhPI65jTFG4ASgAAA3Q"]
[Sat Aug 29 05:09:53.554683 2026] [security2:error] [pid 1041789:tid 1041995] [client 20.104.18.15:43994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/biufile.php"] [unique_id "apK-AYv3RhPI65jTFG4ASwAAA14"]
[Sat Aug 29 05:09:53.555915 2026] [security2:error] [pid 1321:tid 1502] [client 20.104.18.15:41946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/ccc.php"] [unique_id "apK-AWjCPtor9NZ-byTX1gAABko"]
[Sat Aug 29 05:09:53.570755 2026] [security2:error] [pid 1321:tid 1543] [client 20.104.104.62:54999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/grsiuk.php"] [unique_id "apK-AWjCPtor9NZ-byTX1wAABnM"]
[Sat Aug 29 05:09:53.573084 2026] [security2:error] [pid 1321:tid 1572] [client 4.232.148.111:22070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-admin/a.php"] [unique_id "apK-AWjCPtor9NZ-byTX2AAABo8"]
[Sat Aug 29 05:09:53.573200 2026] [security2:error] [pid 1321:tid 1496] [client 20.63.81.20:55560] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/ws85.php"] [unique_id "apK-AWjCPtor9NZ-byTX2QAABkQ"]
[Sat Aug 29 05:09:53.577209 2026] [security2:error] [pid 1321:tid 1558] [client 158.23.184.117:21780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/.well-known/about.php"] [unique_id "apK-AWjCPtor9NZ-byTX2gAABoE"]
[Sat Aug 29 05:09:53.579036 2026] [security2:error] [pid 1321:tid 1615] [client 20.104.18.15:15194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/44.php"] [unique_id "apK-AWjCPtor9NZ-byTX2wAABro"]
[Sat Aug 29 05:09:53.588458 2026] [security2:error] [pid 1321:tid 1506] [client 195.178.110.247:40846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.luxurytravelvip.com"] [uri "/index.php"] [unique_id "apK-AWjCPtor9NZ-byTX3AAABk4"]
[Sat Aug 29 05:09:53.610128 2026] [security2:error] [pid 1041789:tid 1041945] [client 20.104.18.15:45841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/ws55.php"] [unique_id "apK-AYv3RhPI65jTFG4ATQAAAyw"]
[Sat Aug 29 05:09:53.613448 2026] [security2:error] [pid 1321:tid 1569] [client 158.23.184.117:12470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jennyandperen.perenlopez.com"] [uri "/wp-admin/css/fff.php"] [unique_id "apK-AWjCPtor9NZ-byTX3QAABow"]
[Sat Aug 29 05:09:53.624710 2026] [security2:error] [pid 1041789:tid 1041936] [client 20.104.104.62:42855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/kure.php"] [unique_id "apK-AYv3RhPI65jTFG4ATgAAAyM"]
[Sat Aug 29 05:09:53.635418 2026] [security2:error] [pid 1321:tid 1550] [client 20.63.81.20:40037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/700.php"] [unique_id "apK-AWjCPtor9NZ-byTX3gAABnk"]
[Sat Aug 29 05:09:53.640633 2026] [security2:error] [pid 1321:tid 1545] [client 127.0.0.1:44660] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK-AWjCPtor9NZ-byTXsQAABnU"]
[Sat Aug 29 05:09:53.640829 2026] [security2:error] [pid 1041789:tid 1041951] [client 127.0.0.1:44468] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.beraluzarchive.org"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK-AYv3RhPI65jTFG4AEgAAAzI"]
[Sat Aug 29 05:09:53.640890 2026] [security2:error] [pid 1321:tid 1531] [client 35.221.212.112:8824] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.beraluzarchive.org"] [uri "/backend/aws.json"] [unique_id "apK-AWjCPtor9NZ-byTXmgAABmc"]
[Sat Aug 29 05:09:53.648847 2026] [security2:error] [pid 1041789:tid 1042013] [client 68.155.159.216:38548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-admin/css/index.php"] [unique_id "apK-AYv3RhPI65jTFG4ATwAAA3A"]
[Sat Aug 29 05:09:53.652029 2026] [security2:error] [pid 1321:tid 1556] [client 20.104.104.62:64648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/Zeiss.php"] [unique_id "apK-AWjCPtor9NZ-byTX3wAABn8"]
[Sat Aug 29 05:09:53.654535 2026] [security2:error] [pid 1321:tid 1515] [client 20.104.18.15:7049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/btyuio.php"] [unique_id "apK-AWjCPtor9NZ-byTX4AAABlc"]
[Sat Aug 29 05:09:53.657904 2026] [security2:error] [pid 1321:tid 1561] [client 158.23.147.79:63251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/dropdown.php"] [unique_id "apK-AWjCPtor9NZ-byTX4QAABoQ"]
[Sat Aug 29 05:09:53.660586 2026] [security2:error] [pid 1321:tid 1575] [client 20.63.81.20:65232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/replace.php"] [unique_id "apK-AWjCPtor9NZ-byTX4gAABpI"]
[Sat Aug 29 05:09:53.664662 2026] [security2:error] [pid 1041789:tid 1041971] [client 20.63.81.20:46340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/goods.php"] [unique_id "apK-AYv3RhPI65jTFG4AUAAAA0Y"]
[Sat Aug 29 05:09:53.680946 2026] [security2:error] [pid 1321:tid 1585] [client 20.104.49.130:60781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/100.php"] [unique_id "apK-AWjCPtor9NZ-byTX4wAABpw"]
[Sat Aug 29 05:09:53.682985 2026] [security2:error] [pid 1041789:tid 1041969] [client 20.104.18.15:22491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/admin.php"] [unique_id "apK-AYv3RhPI65jTFG4AUQAAA0Q"]
[Sat Aug 29 05:09:53.691206 2026] [security2:error] [pid 1321:tid 1595] [client 4.205.62.107:56051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/dd.php"] [unique_id "apK-AWjCPtor9NZ-byTX5AAABqY"]
[Sat Aug 29 05:09:53.692793 2026] [fcgid:warn] [pid 1041789:tid 1041954] (70014)End of file found: [client 66.132.195.33:54118] mod_fcgid: can't get data from http client
[Sat Aug 29 05:09:53.707021 2026] [security2:error] [pid 1041789:tid 1041982] [client 20.104.104.62:41640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/ahy66.php"] [unique_id "apK-AYv3RhPI65jTFG4AVAAAA1E"]
[Sat Aug 29 05:09:53.711320 2026] [security2:error] [pid 1321:tid 1601] [client 185.104.184.230:33312] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.bjx.okj.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "apK-AWjCPtor9NZ-byTX5QAABqw"]
[Sat Aug 29 05:09:53.715771 2026] [security2:error] [pid 1041789:tid 1042032] [client 20.104.18.15:41796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/file15.php"] [unique_id "apK-AYv3RhPI65jTFG4AVQAAA4M"]
[Sat Aug 29 05:09:53.719109 2026] [security2:error] [pid 1041789:tid 1042011] [client 20.63.81.20:51279] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/ffs.php"] [unique_id "apK-AYv3RhPI65jTFG4AVgAAA24"]
[Sat Aug 29 05:09:53.726676 2026] [security2:error] [pid 1321:tid 1498] [client 45.148.10.62:40368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xyzece.com"] [uri "/config.php"] [unique_id "apK-AWjCPtor9NZ-byTX5gAABkY"]
[Sat Aug 29 05:09:53.734755 2026] [security2:error] [pid 1321:tid 1588] [client 20.104.18.15:15270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/h2.php"] [unique_id "apK-AWjCPtor9NZ-byTX6AAABp8"]
[Sat Aug 29 05:09:53.737435 2026] [security2:error] [pid 1041789:tid 1041950] [client 52.139.37.240:34222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/wp-content/themes/x/bypass.php"] [unique_id "apK-AYv3RhPI65jTFG4AVwAAAzE"]
[Sat Aug 29 05:09:53.749855 2026] [security2:error] [pid 1321:tid 1587] [client 127.0.0.1:44664] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK-AWjCPtor9NZ-byTXswAABp4"]
[Sat Aug 29 05:09:53.749974 2026] [security2:error] [pid 1321:tid 1521] [client 127.0.0.1:44598] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.beraluzarchive.org"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK-AWjCPtor9NZ-byTXrAAABl0"]
[Sat Aug 29 05:09:53.750046 2026] [security2:error] [pid 1041789:tid 1041943] [client 35.221.212.112:8970] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.beraluzarchive.org"] [uri "/config/prod.exs"] [unique_id "apK-AYv3RhPI65jTFG4ADwAAAyo"]
[Sat Aug 29 05:09:53.756786 2026] [security2:error] [pid 1041789:tid 1042053] [client 195.178.110.247:44974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.luxurytravelvip.com"] [uri "/index.php"] [unique_id "apK-AYv3RhPI65jTFG4AWAAAA5g"]
[Sat Aug 29 05:09:53.765402 2026] [security2:error] [pid 1321:tid 1607] [client 20.104.104.62:43360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/cafe.php"] [unique_id "apK-AWjCPtor9NZ-byTX6QAABrI"]
[Sat Aug 29 05:09:53.765428 2026] [security2:error] [pid 1321:tid 1605] [client 20.104.18.15:44027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/blacks.php"] [unique_id "apK-AWjCPtor9NZ-byTX6gAABrA"]
[Sat Aug 29 05:09:53.768662 2026] [security2:error] [pid 1041789:tid 1042042] [client 20.63.81.20:40018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/c4.php"] [unique_id "apK-AYv3RhPI65jTFG4AWgAAA40"]
[Sat Aug 29 05:09:53.769332 2026] [security2:error] [pid 1321:tid 1563] [client 20.104.18.15:45888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/m.php"] [unique_id "apK-AWjCPtor9NZ-byTX6wAABoY"]
[Sat Aug 29 05:09:53.783538 2026] [security2:error] [pid 1041789:tid 1041979] [client 4.205.62.107:21630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/linusadmin-phpinfo.php"] [unique_id "apK-AYv3RhPI65jTFG4AWwAAA04"]
[Sat Aug 29 05:09:53.785463 2026] [security2:error] [pid 1321:tid 1591] [client 158.23.184.117:21796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK-AWjCPtor9NZ-byTX7AAABqI"]
[Sat Aug 29 05:09:53.796843 2026] [security2:error] [pid 1041789:tid 1041998] [client 20.63.81.20:46277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/000.php/index.php"] [unique_id "apK-AYv3RhPI65jTFG4AXAAAA2E"]
[Sat Aug 29 05:09:53.809428 2026] [security2:error] [pid 1321:tid 1505] [client 20.63.81.20:65201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/gulu.php"] [unique_id "apK-AWjCPtor9NZ-byTX7QAABk0"]
[Sat Aug 29 05:09:53.817198 2026] [security2:error] [pid 1321:tid 1560] [client 20.104.104.62:4833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/ww2.php"] [unique_id "apK-AWjCPtor9NZ-byTX7gAABoM"]
[Sat Aug 29 05:09:53.817660 2026] [security2:error] [pid 1041789:tid 1042014] [client 40.83.93.50:10099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/feed-rss2-queue.php"] [unique_id "apK-AYv3RhPI65jTFG4AXQAAA3E"]
[Sat Aug 29 05:09:53.832608 2026] [security2:error] [pid 1041789:tid 1041946] [client 20.104.18.15:6991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/dehnl.php"] [unique_id "apK-AYv3RhPI65jTFG4AXwAAAy0"]
[Sat Aug 29 05:09:53.832790 2026] [security2:error] [pid 1041789:tid 1041968] [client 20.104.18.15:22481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/ws85.php"] [unique_id "apK-AYv3RhPI65jTFG4AYAAAA0M"]
[Sat Aug 29 05:09:53.837657 2026] [security2:error] [pid 1321:tid 1590] [client 20.104.104.62:45960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/gaje.php"] [unique_id "apK-AWjCPtor9NZ-byTX7wAABqE"]
[Sat Aug 29 05:09:53.842982 2026] [security2:error] [pid 1321:tid 1548] [client 68.155.159.216:18354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/nf_tracking.php"] [unique_id "apK-AWjCPtor9NZ-byTX8QAABnc"]
[Sat Aug 29 05:09:53.865346 2026] [security2:error] [pid 1321:tid 1611] [client 20.104.18.15:41937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/jp.php"] [unique_id "apK-AWjCPtor9NZ-byTX8gAABrY"]
[Sat Aug 29 05:09:53.885367 2026] [security2:error] [pid 1041789:tid 1041947] [client 20.104.18.15:15174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/wp-content/mod/adminfuns.php"] [unique_id "apK-AYv3RhPI65jTFG4AYgAAAy4"]
[Sat Aug 29 05:09:53.890895 2026] [security2:error] [pid 1041789:tid 1042056] [client 20.63.81.20:51277] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/nano.php"] [unique_id "apK-AYv3RhPI65jTFG4AYwAAA5s"]
[Sat Aug 29 05:09:53.900200 2026] [security2:error] [pid 1321:tid 1516] [client 20.104.104.62:43075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/eval.php"] [unique_id "apK-AWjCPtor9NZ-byTX9AAABlg"]
[Sat Aug 29 05:09:53.900577 2026] [security2:error] [pid 1321:tid 1554] [client 74.248.24.12:4378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-content.php"] [unique_id "apK-AWjCPtor9NZ-byTX9QAABn0"]
[Sat Aug 29 05:09:53.909228 2026] [security2:error] [pid 1321:tid 1510] [client 20.63.81.20:40011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/wp-tymanage.php"] [unique_id "apK-AWjCPtor9NZ-byTX9gAABlI"]
[Sat Aug 29 05:09:53.918334 2026] [security2:error] [pid 1041789:tid 1042006] [client 4.232.148.111:1349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/root.php"] [unique_id "apK-AYv3RhPI65jTFG4AZAAAA2k"]
[Sat Aug 29 05:09:53.928805 2026] [security2:error] [pid 1041789:tid 1042013] [client 20.63.81.20:46424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/Jcrop.php"] [unique_id "apK-AYv3RhPI65jTFG4AZQAAA3A"]
[Sat Aug 29 05:09:53.936398 2026] [security2:error] [pid 1041789:tid 1041931] [client 158.23.184.117:21822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/.well-known/acme-challenge/content.php"] [unique_id "apK-AYv3RhPI65jTFG4AZwAAAx4"]
[Sat Aug 29 05:09:53.941947 2026] [security2:error] [pid 1321:tid 1541] [client 20.104.18.15:43272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/beck.php"] [unique_id "apK-AWjCPtor9NZ-byTX9wAABnE"]
[Sat Aug 29 05:09:53.944110 2026] [security2:error] [pid 1321:tid 1568] [client 20.104.18.15:45969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/33.php"] [unique_id "apK-AWjCPtor9NZ-byTX-QAABos"]
[Sat Aug 29 05:09:53.947217 2026] [security2:error] [pid 1321:tid 1593] [client 20.63.81.20:63725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/gtghklk.php"] [unique_id "apK-AWjCPtor9NZ-byTX-gAABqQ"]
[Sat Aug 29 05:09:53.949458 2026] [lsapi:warn] [pid 1041789:tid 1041981] [client 20.104.18.15:46024] [host healthinsurance.midayins.com] Backend log: PHP Warning:  PHP Request Startup: Invalid date.timezone value 'America/New York', using 'America/Boise' instead in Unknown on line 0\n
[Sat Aug 29 05:09:53.953099 2026] [cgid:error] [pid 1321:tid 1594] [client 52.139.37.240:34151] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/airviewc/public_html/404.shtml
[Sat Aug 29 05:09:53.960403 2026] [security2:error] [pid 1321:tid 1489] [client 20.104.104.62:4159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/anz.php"] [unique_id "apK-AWjCPtor9NZ-byTX-wAABj0"]
[Sat Aug 29 05:09:53.967229 2026] [security2:error] [pid 1321:tid 1604] [client 20.104.104.62:45978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/wp-admin/zwso.php"] [unique_id "apK-AWjCPtor9NZ-byTX_AAABq8"]
[Sat Aug 29 05:09:53.976435 2026] [security2:error] [pid 1321:tid 1496] [client 20.104.18.15:7135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/zoo2.php"] [unique_id "apK-AWjCPtor9NZ-byTX_QAABkQ"]
[Sat Aug 29 05:09:53.989920 2026] [security2:error] [pid 1041789:tid 1042007] [client 20.52.41.200:4361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/assets/images/doc.php"] [unique_id "apK-AYv3RhPI65jTFG4AbAAAA2o"]
[Sat Aug 29 05:09:54.001488 2026] [security2:error] [pid 1041789:tid 1041982] [client 20.104.18.15:22410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/ffs.php"] [unique_id "apK-Aov3RhPI65jTFG4AbQAAA1E"]
[Sat Aug 29 05:09:54.003527 2026] [security2:error] [pid 1041789:tid 1041942] [client 20.104.104.62:64723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/gg.php"] [unique_id "apK-Aov3RhPI65jTFG4AbgAAAyk"]
[Sat Aug 29 05:09:54.008746 2026] [security2:error] [pid 1041789:tid 1042029] [client 20.104.18.15:41823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/f35.php"] [unique_id "apK-Aov3RhPI65jTFG4AcAAAA4A"]
[Sat Aug 29 05:09:54.016004 2026] [security2:error] [pid 1321:tid 1528] [client 52.139.37.240:34151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK-AmjCPtor9NZ-byTX_wAABmQ"]
[Sat Aug 29 05:09:54.021612 2026] [security2:error] [pid 1041789:tid 1041943] [client 20.104.18.15:45998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/w.php"] [unique_id "apK-Aov3RhPI65jTFG4AcQAAAyo"]
[Sat Aug 29 05:09:54.023290 2026] [security2:error] [pid 1041789:tid 1041940] [client 185.104.184.230:33320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.184.104.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "webmail.bjx.okj.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "apK-Aov3RhPI65jTFG4AbwAAAyc"]
[Sat Aug 29 05:09:54.034548 2026] [security2:error] [pid 1321:tid 1616] [client 149.34.210.141:31822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-AmjCPtor9NZ-byTYAAAABrs"]
[Sat Aug 29 05:09:54.034653 2026] [security2:error] [pid 1321:tid 1616] [client 149.34.210.141:31822] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-AmjCPtor9NZ-byTYAAAABrs"]
[Sat Aug 29 05:09:54.035025 2026] [security2:error] [pid 1041789:tid 1042047] [client 20.104.104.62:42845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/sao.php"] [unique_id "apK-Aov3RhPI65jTFG4AcgAAA5I"]
[Sat Aug 29 05:09:54.040451 2026] [security2:error] [pid 1041789:tid 1041980] [client 20.104.18.15:15247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/sao.php"] [unique_id "apK-Aov3RhPI65jTFG4AcwAAA08"]
[Sat Aug 29 05:09:54.043584 2026] [security2:error] [pid 1041789:tid 1041935] [client 20.63.81.20:51274] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/ano.php"] [unique_id "apK-Aov3RhPI65jTFG4AdAAAAyI"]
[Sat Aug 29 05:09:54.043991 2026] [security2:error] [pid 1321:tid 1559] [client 68.155.159.216:64509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK-AmjCPtor9NZ-byTYAQAABoI"]
[Sat Aug 29 05:09:54.047945 2026] [security2:error] [pid 1041789:tid 1042042] [client 20.63.81.20:39961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/ajfto.php"] [unique_id "apK-Aov3RhPI65jTFG4AdQAAA40"]
[Sat Aug 29 05:09:54.056988 2026] [security2:error] [pid 1041789:tid 1042048] [client 20.63.81.20:46379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/35iDq8NAjLu.php"] [unique_id "apK-Aov3RhPI65jTFG4AdwAAA5M"]
[Sat Aug 29 05:09:54.070034 2026] [security2:error] [pid 1041789:tid 1042057] [client 4.205.62.107:51427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/greem_res.php"] [unique_id "apK-Aov3RhPI65jTFG4AeAAAA5w"]
[Sat Aug 29 05:09:54.072232 2026] [security2:error] [pid 1041789:tid 1042030] [client 4.205.62.107:62928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/fleen.php"] [unique_id "apK-Aov3RhPI65jTFG4AeQAAA4E"]
[Sat Aug 29 05:09:54.075210 2026] [security2:error] [pid 1041789:tid 1042020] [client 158.23.147.79:6047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/about/function.php"] [unique_id "apK-Aov3RhPI65jTFG4AegAAA3c"]
[Sat Aug 29 05:09:54.082582 2026] [security2:error] [pid 1041789:tid 1041965] [client 20.63.81.20:65157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/comand.php"] [unique_id "apK-Aov3RhPI65jTFG4AewAAA0A"]
[Sat Aug 29 05:09:54.100613 2026] [security2:error] [pid 1041789:tid 1041946] [client 20.104.104.62:45957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/Contrller.php"] [unique_id "apK-Aov3RhPI65jTFG4AfgAAAy0"]
[Sat Aug 29 05:09:54.109255 2026] [security2:error] [pid 1041789:tid 1042049] [client 20.104.18.15:7109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/zoo1.php"] [unique_id "apK-Aov3RhPI65jTFG4AfwAAA5Q"]
[Sat Aug 29 05:09:54.119892 2026] [security2:error] [pid 1321:tid 1511] [client 20.104.104.62:37235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/bge.php"] [unique_id "apK-AmjCPtor9NZ-byTYAgAABlM"]
[Sat Aug 29 05:09:54.140079 2026] [security2:error] [pid 1321:tid 1544] [client 4.205.62.107:6511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/hiquido.com/index.php"] [unique_id "apK-AmjCPtor9NZ-byTYAwAABnQ"]
[Sat Aug 29 05:09:54.142052 2026] [security2:error] [pid 1321:tid 1569] [client 20.104.18.15:43974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/t3.php"] [unique_id "apK-AmjCPtor9NZ-byTYBAAABow"]
[Sat Aug 29 05:09:54.150065 2026] [security2:error] [pid 1321:tid 1552] [client 20.104.18.15:41869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/shiny.php"] [unique_id "apK-AmjCPtor9NZ-byTYBgAABns"]
[Sat Aug 29 05:09:54.154008 2026] [security2:error] [pid 1041789:tid 1041933] [client 158.23.184.117:21789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK-Aov3RhPI65jTFG4AgQAAAyA"]
[Sat Aug 29 05:09:54.169563 2026] [security2:error] [pid 1321:tid 1600] [client 20.104.104.62:60686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/uuu.php"] [unique_id "apK-AmjCPtor9NZ-byTYCQAABqs"]
[Sat Aug 29 05:09:54.179380 2026] [security2:error] [pid 1041789:tid 1041967] [client 20.104.18.15:46049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/ccc.php"] [unique_id "apK-Aov3RhPI65jTFG4AgwAAA0I"]
[Sat Aug 29 05:09:54.190151 2026] [security2:error] [pid 1321:tid 1545] [client 20.63.81.20:39949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/wp_KwIW0U5F.php"] [unique_id "apK-AmjCPtor9NZ-byTYCgAABnU"]
[Sat Aug 29 05:09:54.197155 2026] [security2:error] [pid 1041789:tid 1042033] [client 20.63.81.20:46373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/btx25.php"] [unique_id "apK-Aov3RhPI65jTFG4AhAAAA4Q"]
[Sat Aug 29 05:09:54.206373 2026] [security2:error] [pid 1041789:tid 1041945] [client 68.155.159.216:49197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-content/packed.php"] [unique_id "apK-Aov3RhPI65jTFG4AhQAAAyw"]
[Sat Aug 29 05:09:54.206392 2026] [security2:error] [pid 1041789:tid 1041941] [client 68.155.159.216:64085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK-Aov3RhPI65jTFG4AhgAAAyg"]
[Sat Aug 29 05:09:54.210562 2026] [security2:error] [pid 1041789:tid 1042021] [client 4.232.148.111:29596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK-Aov3RhPI65jTFG4AhwAAA3g"]
[Sat Aug 29 05:09:54.210588 2026] [security2:error] [pid 1041789:tid 1042009] [client 52.139.37.240:34318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/wp-info.php"] [unique_id "apK-Aov3RhPI65jTFG4AiAAAA2w"]
[Sat Aug 29 05:09:54.214683 2026] [security2:error] [pid 1321:tid 1578] [client 20.104.18.15:15256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/dapa.php"] [unique_id "apK-AmjCPtor9NZ-byTYCwAABpU"]
[Sat Aug 29 05:09:54.219053 2026] [security2:error] [pid 1041789:tid 1042007] [client 20.63.81.20:55585] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/mgrr.php"] [unique_id "apK-Aov3RhPI65jTFG4AiQAAA2o"]
[Sat Aug 29 05:09:54.229443 2026] [security2:error] [pid 1321:tid 1515] [client 20.104.18.15:22390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/nano.php"] [unique_id "apK-AmjCPtor9NZ-byTYDAAABlc"]
[Sat Aug 29 05:09:54.230064 2026] [security2:error] [pid 1041789:tid 1042019] [client 20.63.81.20:65211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/wp_motu_myk3v.php"] [unique_id "apK-Aov3RhPI65jTFG4AigAAA3Y"]
[Sat Aug 29 05:09:54.230596 2026] [security2:error] [pid 1321:tid 1561] [client 20.104.104.62:54979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/Zeiss.php"] [unique_id "apK-AmjCPtor9NZ-byTYDQAABoQ"]
[Sat Aug 29 05:09:54.231390 2026] [security2:error] [pid 1321:tid 1507] [client 68.155.159.216:30541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/cgi-bin/index.php"] [unique_id "apK-AmjCPtor9NZ-byTYDgAABk8"]
[Sat Aug 29 05:09:54.255752 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.104.18.15:6927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/radio.php"] [unique_id "apK-Aov3RhPI65jTFG4AiwAAA30"]
[Sat Aug 29 05:09:54.255794 2026] [security2:error] [pid 1321:tid 1557] [client 20.104.104.62:5105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/wp-ana.php"] [unique_id "apK-AmjCPtor9NZ-byTYDwAABoA"]
[Sat Aug 29 05:09:54.286469 2026] [security2:error] [pid 1321:tid 1589] [client 20.104.18.15:41968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/images.php"] [unique_id "apK-AmjCPtor9NZ-byTYEAAABqA"]
[Sat Aug 29 05:09:54.288554 2026] [security2:error] [pid 1041789:tid 1042047] [client 20.104.18.15:45992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/packed.php"] [unique_id "apK-Aov3RhPI65jTFG4AjwAAA5I"]
[Sat Aug 29 05:09:54.291099 2026] [core:error] [pid 1041789:tid 1041940] [client 74.7.244.29:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:54.291116 2026] [core:error] [pid 1041789:tid 1041940] [client 74.7.244.29:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:54.291238 2026] [security2:error] [pid 1041789:tid 1041940] [client 74.7.244.29:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "cpcontacts.thehudsonclan.com"] [uri "/___proxy_subdomain_cpcontacts/index.php"] [unique_id "apK-Aov3RhPI65jTFG4AjgAAAyc"]
[Sat Aug 29 05:09:54.293577 2026] [security2:error] [pid 1321:tid 1542] [client 20.104.18.15:44005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/wp.php"] [unique_id "apK-AmjCPtor9NZ-byTYEQAABnI"]
[Sat Aug 29 05:09:54.294410 2026] [security2:error] [pid 1041789:tid 1041954] [client 74.7.244.29:39708] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "cpcontacts.thehudsonclan.com"] [uri "/___proxy_subdomain_cpcontacts/robots.txt"] [unique_id "apK-Aov3RhPI65jTFG4AjAADNTU"]
[Sat Aug 29 05:09:54.295516 2026] [security2:error] [pid 1321:tid 1500] [client 158.23.147.79:5890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK-AmjCPtor9NZ-byTYEgAABkg"]
[Sat Aug 29 05:09:54.297095 2026] [security2:error] [pid 1041789:tid 1041942] [client 74.7.244.41:32778] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.grl.svw.mybluehost.me"] [uri "/robots.txt"] [unique_id "apK-Aov3RhPI65jTFG4AkAADKRw"]
[Sat Aug 29 05:09:54.308146 2026] [security2:error] [pid 1321:tid 1534] [client 20.104.104.62:60098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/private.php"] [unique_id "apK-AmjCPtor9NZ-byTYEwAABmo"]
[Sat Aug 29 05:09:54.314433 2026] [security2:error] [pid 1321:tid 1532] [client 185.104.184.230:33336] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.bjx.okj.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "apK-AmjCPtor9NZ-byTYFAAABmg"]
[Sat Aug 29 05:09:54.318151 2026] [security2:error] [pid 1321:tid 1524] [client 158.23.184.117:21786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/.well-known/acme-challenge/sx.php"] [unique_id "apK-AmjCPtor9NZ-byTYFQAABmA"]
[Sat Aug 29 05:09:54.326013 2026] [security2:error] [pid 1321:tid 1588] [client 20.63.81.20:40053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/wp_xiPu52Ut.php"] [unique_id "apK-AmjCPtor9NZ-byTYFgAABp8"]
[Sat Aug 29 05:09:54.326650 2026] [security2:error] [pid 1321:tid 1576] [client 68.155.159.216:33779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/ans.php"] [unique_id "apK-AmjCPtor9NZ-byTYFwAABpM"]
[Sat Aug 29 05:09:54.331370 2026] [security2:error] [pid 1321:tid 1499] [client 20.104.18.15:45907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/file15.php"] [unique_id "apK-AmjCPtor9NZ-byTYGAAABkc"]
[Sat Aug 29 05:09:54.339013 2026] [security2:error] [pid 1041789:tid 1041995] [client 20.63.81.20:46378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/radio.php"] [unique_id "apK-Aov3RhPI65jTFG4AkQAAA14"]
[Sat Aug 29 05:09:54.346119 2026] [security2:error] [pid 1321:tid 1493] [client 20.63.81.20:55649] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/mac.php"] [unique_id "apK-AmjCPtor9NZ-byTYGQAABkE"]
[Sat Aug 29 05:09:54.361456 2026] [security2:error] [pid 1321:tid 1587] [client 20.104.18.15:15212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/wp-content/l.php"] [unique_id "apK-AmjCPtor9NZ-byTYGgAABp4"]
[Sat Aug 29 05:09:54.364081 2026] [security2:error] [pid 1321:tid 1565] [client 20.63.81.20:46845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/wp_motu_ypdat.php"] [unique_id "apK-AmjCPtor9NZ-byTYGwAABog"]
[Sat Aug 29 05:09:54.373815 2026] [security2:error] [pid 1321:tid 1605] [client 20.104.104.62:55029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/ww2.php"] [unique_id "apK-AmjCPtor9NZ-byTYHAAABrA"]
[Sat Aug 29 05:09:54.384165 2026] [security2:error] [pid 1041789:tid 1041977] [client 20.104.104.62:4147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/secret.php"] [unique_id "apK-Aov3RhPI65jTFG4AkgAAA0w"]
[Sat Aug 29 05:09:54.385945 2026] [security2:error] [pid 1041789:tid 1041968] [client 20.104.18.15:22409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/ano.php"] [unique_id "apK-Aov3RhPI65jTFG4AkwAAA0M"]
[Sat Aug 29 05:09:54.393790 2026] [security2:error] [pid 1041789:tid 1042051] [client 20.104.104.62:40242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/gelis.php"] [unique_id "apK-Aov3RhPI65jTFG4AlAAAA5Y"]
[Sat Aug 29 05:09:54.394889 2026] [security2:error] [pid 1321:tid 1503] [client 4.232.148.111:1099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/p.php"] [unique_id "apK-AmjCPtor9NZ-byTYHQAABks"]
[Sat Aug 29 05:09:54.398181 2026] [security2:error] [pid 1041789:tid 1041982] [client 45.148.10.62:40810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xyzece.com"] [uri "/config.php.bak"] [unique_id "apK-Aov3RhPI65jTFG4AlQAAA1E"]
[Sat Aug 29 05:09:54.410196 2026] [security2:error] [pid 1041789:tid 1042037] [client 40.83.93.50:18243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/inputs.php"] [unique_id "apK-Aov3RhPI65jTFG4AlgAAA4g"]
[Sat Aug 29 05:09:54.417921 2026] [security2:error] [pid 1321:tid 1573] [client 74.248.24.12:15960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "apK-AmjCPtor9NZ-byTYHgAABpA"]
[Sat Aug 29 05:09:54.421405 2026] [security2:error] [pid 1041789:tid 1041976] [client 107.145.13.164:63128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 164.13.145.107.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK-Aov3RhPI65jTFG4AlwAAA0s"]
[Sat Aug 29 05:09:54.421474 2026] [security2:error] [pid 1041789:tid 1041976] [client 107.145.13.164:63128] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK-Aov3RhPI65jTFG4AlwAAA0s"]
[Sat Aug 29 05:09:54.424051 2026] [security2:error] [pid 1041789:tid 1041965] [client 52.139.37.240:34152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/wp-wordfence-waf.php"] [unique_id "apK-Aov3RhPI65jTFG4AmAAAA0A"]
[Sat Aug 29 05:09:54.442298 2026] [security2:error] [pid 1321:tid 1505] [client 20.104.18.15:41922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/82.php"] [unique_id "apK-AmjCPtor9NZ-byTYIgAABk0"]
[Sat Aug 29 05:09:54.444462 2026] [security2:error] [pid 1321:tid 1566] [client 20.52.41.200:5268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/bgymj.php"] [unique_id "apK-AmjCPtor9NZ-byTYIwAABok"]
[Sat Aug 29 05:09:54.458780 2026] [security2:error] [pid 1321:tid 1492] [client 20.104.104.62:54235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/lfi.php"] [unique_id "apK-AmjCPtor9NZ-byTYJwAABkA"]
[Sat Aug 29 05:09:54.460265 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.63.81.20:39939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/wp_n5VD7XDh.php"] [unique_id "apK-Aov3RhPI65jTFG4AoAAAA2Q"]
[Sat Aug 29 05:09:54.461595 2026] [security2:error] [pid 1041789:tid 1042025] [client 20.104.18.15:46009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/jp.php"] [unique_id "apK-Aov3RhPI65jTFG4AoQAAA3w"]
[Sat Aug 29 05:09:54.461666 2026] [security2:error] [pid 1041789:tid 1042049] [client 158.23.184.117:21767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/.well-known/admin.php"] [unique_id "apK-Aov3RhPI65jTFG4AogAAA5Q"]
[Sat Aug 29 05:09:54.464332 2026] [security2:error] [pid 1041789:tid 1041802] [remote 74.7.227.154:54326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK-Aov3RhPI65jTFG4AowADlQA"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwp-easycart%2Fadmin%2Felementor
[Sat Aug 29 05:09:54.470564 2026] [security2:error] [pid 1321:tid 1602] [client 158.23.147.79:11353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK-AmjCPtor9NZ-byTYKAAABq0"]
[Sat Aug 29 05:09:54.480657 2026] [security2:error] [pid 1041789:tid 1041991] [client 20.63.81.20:46369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/dex.php"] [unique_id "apK-Aov3RhPI65jTFG4ApAAAA1o"]
[Sat Aug 29 05:09:54.491607 2026] [security2:error] [pid 1321:tid 1539] [client 20.104.18.15:7082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/one.php"] [unique_id "apK-AmjCPtor9NZ-byTYKQAABm8"]
[Sat Aug 29 05:09:54.494334 2026] [security2:error] [pid 1321:tid 1564] [client 20.104.18.15:15303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/wp-admin/w.php"] [unique_id "apK-AmjCPtor9NZ-byTYKgAABoc"]
[Sat Aug 29 05:09:54.507051 2026] [security2:error] [pid 1321:tid 1614] [client 20.63.81.20:55623] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/simple.php"] [unique_id "apK-AmjCPtor9NZ-byTYKwAABrk"]
[Sat Aug 29 05:09:54.510449 2026] [security2:error] [pid 1041789:tid 1041948] [client 20.104.18.15:43913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/abcd.php"] [unique_id "apK-Aov3RhPI65jTFG4ApQAAAy8"]
[Sat Aug 29 05:09:54.522011 2026] [security2:error] [pid 1041789:tid 1041971] [client 20.104.18.15:46063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/w.php"] [unique_id "apK-Aov3RhPI65jTFG4ApgAAA0Y"]
[Sat Aug 29 05:09:54.524941 2026] [security2:error] [pid 1041789:tid 1041944] [client 20.104.104.62:22663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/anz.php"] [unique_id "apK-Aov3RhPI65jTFG4ApwAAAys"]
[Sat Aug 29 05:09:54.525616 2026] [security2:error] [pid 1041789:tid 1041931] [client 20.104.104.62:4844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/pro.php"] [unique_id "apK-Aov3RhPI65jTFG4AqAAAAx4"]
[Sat Aug 29 05:09:54.565842 2026] [security2:error] [pid 1041789:tid 1042035] [client 68.155.159.216:52789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK-Aov3RhPI65jTFG4AqgAAA4Y"]
[Sat Aug 29 05:09:54.567298 2026] [autoindex:error] [pid 1041789:tid 1041928] [remote 74.7.241.23:51048] AH01276: Cannot serve directory /home3/grlsvwmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:09:54.575040 2026] [security2:error] [pid 1041789:tid 1041962] [client 20.104.18.15:41901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/files.php/new.php"] [unique_id "apK-Aov3RhPI65jTFG4AqwAAAz0"]
[Sat Aug 29 05:09:54.575053 2026] [security2:error] [pid 1321:tid 1577] [client 68.155.159.216:64407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-content/index.php"] [unique_id "apK-AmjCPtor9NZ-byTYLAAABpQ"]
[Sat Aug 29 05:09:54.586035 2026] [security2:error] [pid 1321:tid 1611] [client 20.104.18.15:22442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/mgrr.php"] [unique_id "apK-AmjCPtor9NZ-byTYLQAABrY"]
[Sat Aug 29 05:09:54.591090 2026] [security2:error] [pid 1041789:tid 1042005] [client 20.104.104.62:41957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/quoys.php"] [unique_id "apK-Aov3RhPI65jTFG4ArAAAA2g"]
[Sat Aug 29 05:09:54.594811 2026] [security2:error] [pid 1041789:tid 1041967] [client 20.63.81.20:39985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/wp-mini.php"] [unique_id "apK-Aov3RhPI65jTFG4ArQAAA0I"]
[Sat Aug 29 05:09:54.603339 2026] [security2:error] [pid 1041789:tid 1041945] [client 20.104.18.15:45899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/f35.php"] [unique_id "apK-Aov3RhPI65jTFG4ArgAAAyw"]
[Sat Aug 29 05:09:54.605185 2026] [security2:error] [pid 1041789:tid 1042009] [client 4.205.62.107:63978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/4563.php"] [unique_id "apK-Aov3RhPI65jTFG4ArwAAA2w"]
[Sat Aug 29 05:09:54.607115 2026] [security2:error] [pid 1321:tid 1584] [client 158.23.184.117:21660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/.well-known/api.php"] [unique_id "apK-AmjCPtor9NZ-byTYLgAABps"]
[Sat Aug 29 05:09:54.615508 2026] [security2:error] [pid 1041789:tid 1042041] [client 52.139.37.240:34142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/ws49.php"] [unique_id "apK-Aov3RhPI65jTFG4AsQAAA4w"]
[Sat Aug 29 05:09:54.616528 2026] [security2:error] [pid 1041789:tid 1042019] [client 20.63.81.20:46461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/giodywky.php"] [unique_id "apK-Aov3RhPI65jTFG4AsgAAA3Y"]
[Sat Aug 29 05:09:54.616772 2026] [security2:error] [pid 1041789:tid 1041978] [client 185.104.184.230:33350] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.bjx.okj.mybluehost.me"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "apK-Aov3RhPI65jTFG4AswAAA00"]
[Sat Aug 29 05:09:54.617629 2026] [security2:error] [pid 1041789:tid 1041853] [remote 57.129.136.36:60340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 36.136.129.57.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ducabsafety.com.mx"] [uri "/wp-login.php"] [unique_id "apK-Aov3RhPI65jTFG4AsAADajM"], referer: https://ducabsafety.com.mx/wp-login.php
[Sat Aug 29 05:09:54.626475 2026] [security2:error] [pid 1041789:tid 1042034] [client 20.104.18.15:7120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/503.php"] [unique_id "apK-Aov3RhPI65jTFG4AtAAAA4U"]
[Sat Aug 29 05:09:54.632340 2026] [security2:error] [pid 1041789:tid 1042011] [client 20.104.18.15:15117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/wp-content/k.php"] [unique_id "apK-Aov3RhPI65jTFG4AtQAAA24"]
[Sat Aug 29 05:09:54.635908 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.63.81.20:55620] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/xty.php"] [unique_id "apK-Aov3RhPI65jTFG4AtgAAA30"]
[Sat Aug 29 05:09:54.642159 2026] [security2:error] [pid 1041789:tid 1042029] [client 68.155.159.216:1938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/about/function.php"] [unique_id "apK-Aov3RhPI65jTFG4AtwAAA4A"]
[Sat Aug 29 05:09:54.645800 2026] [security2:error] [pid 1041789:tid 1041987] [client 68.155.159.216:24484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/bk/index.php"] [unique_id "apK-Aov3RhPI65jTFG4AuAAAA1Y"]
[Sat Aug 29 05:09:54.654922 2026] [security2:error] [pid 1321:tid 1571] [client 68.155.159.216:14286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-content/admin.php"] [unique_id "apK-AmjCPtor9NZ-byTYLwAABo4"]
[Sat Aug 29 05:09:54.655585 2026] [security2:error] [pid 1041789:tid 1041972] [client 20.104.18.15:43289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/nofile.php"] [unique_id "apK-Aov3RhPI65jTFG4AuQAAA0c"]
[Sat Aug 29 05:09:54.658434 2026] [security2:error] [pid 1041789:tid 1041935] [client 20.104.104.62:56378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/999.php"] [unique_id "apK-Aov3RhPI65jTFG4AugAAAyI"]
[Sat Aug 29 05:09:54.666048 2026] [security2:error] [pid 1041789:tid 1042044] [client 20.104.104.62:45998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/bge.php"] [unique_id "apK-Aov3RhPI65jTFG4AuwAAA48"]
[Sat Aug 29 05:09:54.671253 2026] [security2:error] [pid 1041789:tid 1041951] [client 4.232.148.111:28854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "movriders.com"] [uri "/wp-admin.php"] [unique_id "apK-Aov3RhPI65jTFG4AvAAAAzI"]
[Sat Aug 29 05:09:54.705743 2026] [security2:error] [pid 1041789:tid 1042010] [client 20.104.104.62:40193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/FierzaXploit.php"] [unique_id "apK-Aov3RhPI65jTFG4AvQAAA20"]
[Sat Aug 29 05:09:54.709713 2026] [security2:error] [pid 1041789:tid 1041995] [client 20.104.18.15:45895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/ccc.php"] [unique_id "apK-Aov3RhPI65jTFG4AvgAAA14"]
[Sat Aug 29 05:09:54.718710 2026] [security2:error] [pid 1041789:tid 1042055] [client 20.104.49.130:63596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/666.php"] [unique_id "apK-Aov3RhPI65jTFG4AvwAAA5o"]
[Sat Aug 29 05:09:54.725700 2026] [security2:error] [pid 1041789:tid 1042014] [client 20.63.81.20:40063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/xmini4.php"] [unique_id "apK-Aov3RhPI65jTFG4AwAAAA3E"]
[Sat Aug 29 05:09:54.732821 2026] [security2:error] [pid 1041789:tid 1041939] [client 20.104.104.62:43365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/vbbn.php"] [unique_id "apK-Aov3RhPI65jTFG4AwQAAAyY"]
[Sat Aug 29 05:09:54.749859 2026] [security2:error] [pid 1041789:tid 1041982] [client 20.63.81.20:46364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/wp-kz.php"] [unique_id "apK-Aov3RhPI65jTFG4AxAAAA1E"]
[Sat Aug 29 05:09:54.756771 2026] [security2:error] [pid 1041789:tid 1042028] [client 158.23.184.117:21774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/.well-known/chosen.php"] [unique_id "apK-Aov3RhPI65jTFG4AxgAAA38"]
[Sat Aug 29 05:09:54.759898 2026] [security2:error] [pid 1321:tid 1510] [client 68.155.159.216:56523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK-AmjCPtor9NZ-byTYMgAABlI"]
[Sat Aug 29 05:09:54.763450 2026] [security2:error] [pid 1321:tid 1568] [client 158.23.147.79:55266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/.well-known/index.php"] [unique_id "apK-AmjCPtor9NZ-byTYNAAABos"]
[Sat Aug 29 05:09:54.776163 2026] [security2:error] [pid 1321:tid 1593] [client 20.63.81.20:55610] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/sallu.php"] [unique_id "apK-AmjCPtor9NZ-byTYNgAABqQ"]
[Sat Aug 29 05:09:54.800093 2026] [security2:error] [pid 1321:tid 1586] [client 20.104.104.62:5118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/sef.php"] [unique_id "apK-AmjCPtor9NZ-byTYOwAABp0"]
[Sat Aug 29 05:09:54.809606 2026] [security2:error] [pid 1321:tid 1535] [client 20.104.104.62:22706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/wp-ana.php"] [unique_id "apK-AmjCPtor9NZ-byTYPAAABms"]
[Sat Aug 29 05:09:54.813428 2026] [security2:error] [pid 1321:tid 1516] [client 52.139.37.240:34313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/xxx.php"] [unique_id "apK-AmjCPtor9NZ-byTYPQAABlg"]
[Sat Aug 29 05:09:54.840926 2026] [security2:error] [pid 1321:tid 1562] [client 4.205.62.107:55947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-tem.php"] [unique_id "apK-AmjCPtor9NZ-byTYPgAABoU"]
[Sat Aug 29 05:09:54.858671 2026] [security2:error] [pid 1321:tid 1570] [client 4.232.148.111:27520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/a1.php"] [unique_id "apK-AmjCPtor9NZ-byTYPwAABo0"]
[Sat Aug 29 05:09:54.875424 2026] [security2:error] [pid 1321:tid 1508] [client 20.104.104.62:41982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/rfi.php"] [unique_id "apK-AmjCPtor9NZ-byTYQAAABlA"]
[Sat Aug 29 05:09:54.900440 2026] [security2:error] [pid 1041789:tid 1041946] [client 20.52.41.200:4625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK-Aov3RhPI65jTFG4AyQAAAy0"]
[Sat Aug 29 05:09:54.908158 2026] [security2:error] [pid 1321:tid 1528] [client 158.23.184.117:21668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/.well-known/config.php"] [unique_id "apK-AmjCPtor9NZ-byTYQgAABmQ"]
[Sat Aug 29 05:09:54.924194 2026] [security2:error] [pid 1321:tid 1559] [client 4.205.62.107:21894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/app/Models/Hrm/Employee.php"] [unique_id "apK-AmjCPtor9NZ-byTYQwAABoI"]
[Sat Aug 29 05:09:54.928616 2026] [security2:error] [pid 1321:tid 1504] [client 40.83.93.50:18255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/class-walker-category-dropdown-class.php"] [unique_id "apK-AmjCPtor9NZ-byTYRAAABkw"]
[Sat Aug 29 05:09:54.929273 2026] [security2:error] [pid 1041789:tid 1041980] [client 185.104.184.230:33364] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.bjx.okj.mybluehost.me"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "apK-Aov3RhPI65jTFG4AygAAA08"]
[Sat Aug 29 05:09:54.934782 2026] [security2:error] [pid 1041789:tid 1041963] [client 74.248.24.12:4389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/css/wp-login.php"] [unique_id "apK-Aov3RhPI65jTFG4AywAAAz4"]
[Sat Aug 29 05:09:54.940624 2026] [security2:error] [pid 1041789:tid 1042047] [client 20.104.104.62:64686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/admin123.php"] [unique_id "apK-Aov3RhPI65jTFG4AzAAAA5I"]
[Sat Aug 29 05:09:54.953269 2026] [security2:error] [pid 1041789:tid 1041961] [client 68.155.159.216:23367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/login.php"] [unique_id "apK-Aov3RhPI65jTFG4AzQAAAzw"]
[Sat Aug 29 05:09:54.953796 2026] [security2:error] [pid 1321:tid 1608] [client 20.104.104.62:45967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/secret.php"] [unique_id "apK-AmjCPtor9NZ-byTYRQAABrM"]
[Sat Aug 29 05:09:54.961677 2026] [security2:error] [pid 1041789:tid 1042056] [client 20.104.49.130:34909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/ws58.php"] [unique_id "apK-Aov3RhPI65jTFG4AzwAAA5s"]
[Sat Aug 29 05:09:55.010975 2026] [security2:error] [pid 1041789:tid 1041948] [client 20.104.104.62:42856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/tajj.php"] [unique_id "apK-A4v3RhPI65jTFG4A0wAAAy8"]
[Sat Aug 29 05:09:55.020863 2026] [security2:error] [pid 1321:tid 1569] [client 52.139.37.240:34121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/0x.php"] [unique_id "apK-A2jCPtor9NZ-byTYSAAABow"]
[Sat Aug 29 05:09:55.056246 2026] [security2:error] [pid 1321:tid 1600] [client 158.23.184.117:21770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/.well-known/core.php"] [unique_id "apK-A2jCPtor9NZ-byTYSQAABqs"]
[Sat Aug 29 05:09:55.082994 2026] [security2:error] [pid 1041789:tid 1041933] [client 20.104.104.62:4854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/7h.php"] [unique_id "apK-A4v3RhPI65jTFG4A1QAAAyA"]
[Sat Aug 29 05:09:55.083033 2026] [security2:error] [pid 1041789:tid 1041960] [client 20.104.104.62:20721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/fxshell.php"] [unique_id "apK-A4v3RhPI65jTFG4A1gAAAzs"]
[Sat Aug 29 05:09:55.092351 2026] [security2:error] [pid 1041789:tid 1042035] [client 158.23.147.79:37930] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcalendars.motherssandals.com"] [uri "/1.php"] [unique_id "apK-A4v3RhPI65jTFG4A1wAAA4Y"]
[Sat Aug 29 05:09:55.092425 2026] [security2:error] [pid 1321:tid 1507] [client 20.104.104.62:54984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/pro.php"] [unique_id "apK-A2jCPtor9NZ-byTYSgAABk8"]
[Sat Aug 29 05:09:55.092448 2026] [security2:error] [pid 1041789:tid 1042035] [client 158.23.147.79:37930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/1.php"] [unique_id "apK-A4v3RhPI65jTFG4A1wAAA4Y"]
[Sat Aug 29 05:09:55.099435 2026] [security2:error] [pid 1321:tid 1615] [client 60.243.207.176:59564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK-A2jCPtor9NZ-byTYSwAABro"]
[Sat Aug 29 05:09:55.099503 2026] [security2:error] [pid 1321:tid 1615] [client 60.243.207.176:59564] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK-A2jCPtor9NZ-byTYSwAABro"]
[Sat Aug 29 05:09:55.125647 2026] [security2:error] [pid 1321:tid 1557] [client 20.220.204.93:52262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/amp.php"] [unique_id "apK-A2jCPtor9NZ-byTYTAAABoA"]
[Sat Aug 29 05:09:55.126202 2026] [security2:error] [pid 1041789:tid 1042033] [client 158.23.147.79:58887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/dropdown.php"] [unique_id "apK-A4v3RhPI65jTFG4A2AAAA4Q"]
[Sat Aug 29 05:09:55.134673 2026] [security2:error] [pid 1321:tid 1595] [client 158.23.184.117:11411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/update/da222.php"] [unique_id "apK-A2jCPtor9NZ-byTYTQAABqY"]
[Sat Aug 29 05:09:55.147303 2026] [security2:error] [pid 1321:tid 1574] [client 20.104.104.62:43080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/grsiuk.php"] [unique_id "apK-A2jCPtor9NZ-byTYTgAABpE"]
[Sat Aug 29 05:09:55.161710 2026] [cgid:error] [pid 1321:tid 1547] [client 45.148.10.62:40826] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/protypeg/public_html/xyzece/404.shtml
[Sat Aug 29 05:09:55.172050 2026] [security2:error] [pid 1041789:tid 1041889] [remote 52.167.144.136:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantsfans.net"] [uri "/message_board/index.php"] [unique_id "apK-A4v3RhPI65jTFG4A2QADPVc"]
[Sat Aug 29 05:09:55.177845 2026] [security2:error] [pid 1321:tid 1555] [client 195.178.110.67:37806] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "superinspection.com"] [uri "/.git/HEAD"] [unique_id "apK-A2jCPtor9NZ-byTYUAAABn4"]
[Sat Aug 29 05:09:55.203579 2026] [security2:error] [pid 1041789:tid 1042021] [client 158.23.184.117:21782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/.well-known/data.php"] [unique_id "apK-A4v3RhPI65jTFG4A2gAAA3g"]
[Sat Aug 29 05:09:55.206453 2026] [security2:error] [pid 1041789:tid 1042011] [client 4.205.62.107:51418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/app/Helpers/bladeHelpers.php"] [unique_id "apK-A4v3RhPI65jTFG4A2wAAA24"]
[Sat Aug 29 05:09:55.214096 2026] [security2:error] [pid 1041789:tid 1042029] [client 4.205.62.107:62766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/upload.form.php"] [unique_id "apK-A4v3RhPI65jTFG4A3AAAA4A"]
[Sat Aug 29 05:09:55.214371 2026] [security2:error] [pid 1041789:tid 1042009] [client 52.139.37.240:34365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/CDX1.php"] [unique_id "apK-A4v3RhPI65jTFG4A3QAAA2w"]
[Sat Aug 29 05:09:55.225832 2026] [security2:error] [pid 1041789:tid 1041943] [client 185.104.184.230:33366] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.bjx.okj.mybluehost.me"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "apK-A4v3RhPI65jTFG4A3gAAAyo"]
[Sat Aug 29 05:09:55.227797 2026] [security2:error] [pid 1041789:tid 1041972] [client 20.104.104.62:56340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/wp-gzone.php"] [unique_id "apK-A4v3RhPI65jTFG4A3wAAA0c"]
[Sat Aug 29 05:09:55.228490 2026] [security2:error] [pid 1041789:tid 1042042] [client 20.104.104.62:22682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/999.php"] [unique_id "apK-A4v3RhPI65jTFG4A4AAAA40"]
[Sat Aug 29 05:09:55.236049 2026] [security2:error] [pid 1041789:tid 1041979] [client 111.235.68.106:61497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK-A4v3RhPI65jTFG4A4gAAA04"]
[Sat Aug 29 05:09:55.236147 2026] [security2:error] [pid 1041789:tid 1041979] [client 111.235.68.106:61497] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK-A4v3RhPI65jTFG4A4gAAA04"]
[Sat Aug 29 05:09:55.274253 2026] [security2:error] [pid 1321:tid 1534] [client 4.205.62.107:6274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/ws79.php"] [unique_id "apK-A2jCPtor9NZ-byTYUQAABmo"]
[Sat Aug 29 05:09:55.278762 2026] [security2:error] [pid 1321:tid 1572] [client 20.104.104.62:43371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/ahy66.php"] [unique_id "apK-A2jCPtor9NZ-byTYUgAABo8"]
[Sat Aug 29 05:09:55.289873 2026] [security2:error] [pid 1041789:tid 1042044] [client 158.23.184.117:11416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/xmr.php"] [unique_id "apK-A4v3RhPI65jTFG4A5AAAA48"]
[Sat Aug 29 05:09:55.304590 2026] [security2:error] [pid 1321:tid 1583] [client 68.155.159.216:49290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-l0gin.php"] [unique_id "apK-A2jCPtor9NZ-byTYVAAABpo"]
[Sat Aug 29 05:09:55.312602 2026] [cgid:error] [pid 1321:tid 1588] [client 45.148.10.62:40826] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/protypeg/public_html/xyzece/404.shtml
[Sat Aug 29 05:09:55.334113 2026] [security2:error] [pid 1041789:tid 1041978] [client 4.232.148.111:20901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-A4v3RhPI65jTFG4A5QAAA00"]
[Sat Aug 29 05:09:55.334980 2026] [security2:error] [pid 1041789:tid 1042055] [client 68.155.159.216:64110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK-A4v3RhPI65jTFG4A5gAAA5o"]
[Sat Aug 29 05:09:55.351802 2026] [security2:error] [pid 1321:tid 1490] [client 158.23.184.117:21778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/.well-known/db-status.php"] [unique_id "apK-A2jCPtor9NZ-byTYVgAABj4"]
[Sat Aug 29 05:09:55.360913 2026] [security2:error] [pid 1041789:tid 1041977] [client 20.104.104.62:56333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/str.php"] [unique_id "apK-A4v3RhPI65jTFG4A6AAAA0w"]
[Sat Aug 29 05:09:55.361959 2026] [security2:error] [pid 1321:tid 1565] [client 20.104.104.62:45971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/sef.php"] [unique_id "apK-A2jCPtor9NZ-byTYVwAABog"]
[Sat Aug 29 05:09:55.368084 2026] [security2:error] [pid 1041789:tid 1041982] [client 68.155.159.216:30622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK-A4v3RhPI65jTFG4A6QAAA1E"]
[Sat Aug 29 05:09:55.403605 2026] [security2:error] [pid 1041789:tid 1041995] [client 52.139.37.240:65310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bigbuttonscarf.com"] [uri "/aged.php"] [unique_id "apK-A4v3RhPI65jTFG4A6gAAA14"]
[Sat Aug 29 05:09:55.405911 2026] [security2:error] [pid 1041789:tid 1041939] [client 52.139.37.240:34128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/akcc.php"] [unique_id "apK-A4v3RhPI65jTFG4A6wAAAyY"]
[Sat Aug 29 05:09:55.414881 2026] [security2:error] [pid 1041789:tid 1041951] [client 40.83.93.50:18277] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "considerthefuture.com"] [uri "/1.php7"] [unique_id "apK-A4v3RhPI65jTFG4A7AAAAzI"]
[Sat Aug 29 05:09:55.414963 2026] [security2:error] [pid 1041789:tid 1041951] [client 40.83.93.50:18277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/1.php7"] [unique_id "apK-A4v3RhPI65jTFG4A7AAAAzI"]
[Sat Aug 29 05:09:55.427004 2026] [security2:error] [pid 1041789:tid 1042053] [client 20.104.104.62:41926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/gaje.php"] [unique_id "apK-A4v3RhPI65jTFG4A7QAAA5g"]
[Sat Aug 29 05:09:55.452385 2026] [security2:error] [pid 1041789:tid 1041976] [client 68.155.159.216:33791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/worksec.php"] [unique_id "apK-A4v3RhPI65jTFG4A7wAAA0s"]
[Sat Aug 29 05:09:55.455189 2026] [security2:error] [pid 1321:tid 1598] [client 158.23.184.117:12097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK-A2jCPtor9NZ-byTYWQAABqk"]
[Sat Aug 29 05:09:55.457536 2026] [security2:error] [pid 1321:tid 1522] [client 74.248.24.12:10825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/images/index.php"] [unique_id "apK-A2jCPtor9NZ-byTYWgAABl4"]
[Sat Aug 29 05:09:55.465093 2026] [cgid:error] [pid 1321:tid 1592] [client 45.148.10.62:40826] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/protypeg/public_html/xyzece/404.shtml
[Sat Aug 29 05:09:55.480124 2026] [security2:error] [pid 1321:tid 1605] [client 52.139.37.240:14003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/ahax.php"] [unique_id "apK-A2jCPtor9NZ-byTYXAAABrA"]
[Sat Aug 29 05:09:55.495206 2026] [security2:error] [pid 1041789:tid 1041980] [client 20.104.104.62:37186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/mega.php"] [unique_id "apK-A4v3RhPI65jTFG4A8QAAA08"]
[Sat Aug 29 05:09:55.496295 2026] [security2:error] [pid 1041789:tid 1042046] [client 158.23.184.117:21817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/.well-known/f35.php"] [unique_id "apK-A4v3RhPI65jTFG4A8gAAA5E"]
[Sat Aug 29 05:09:55.514225 2026] [security2:error] [pid 1321:tid 1573] [client 20.104.104.62:55016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/admin123.php"] [unique_id "apK-A2jCPtor9NZ-byTYXQAABpA"]
[Sat Aug 29 05:09:55.524823 2026] [security2:error] [pid 1041789:tid 1042031] [client 185.104.184.230:33382] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.bjx.okj.mybluehost.me"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "apK-A4v3RhPI65jTFG4A9QAAA4I"]
[Sat Aug 29 05:09:55.543393 2026] [access_compat:error] [pid 1321:tid 1529] [client 57.141.14.52:0] AH01797: client denied by server configuration: /home4/eastacar/public_html/djiboutifresh/cart
[Sat Aug 29 05:09:55.571378 2026] [security2:error] [pid 1041789:tid 1041981] [client 20.104.104.62:60106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/wp-admin/zwso.php"] [unique_id "apK-A4v3RhPI65jTFG4A-AAAA1A"]
[Sat Aug 29 05:09:55.599623 2026] [security2:error] [pid 1041789:tid 1041948] [client 52.139.37.240:34363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK-A4v3RhPI65jTFG4A-QAAAy8"]
[Sat Aug 29 05:09:55.600635 2026] [security2:error] [pid 1041789:tid 1041931] [client 158.23.184.117:12153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/wp-act.php"] [unique_id "apK-A4v3RhPI65jTFG4A-gAAAx4"]
[Sat Aug 29 05:09:55.612526 2026] [security2:error] [pid 1321:tid 1610] [client 45.148.10.62:40826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.xyzece.com"] [uri "/phpinfo.php"] [unique_id "apK-A2jCPtor9NZ-byTYXwAABrU"]
[Sat Aug 29 05:09:55.618492 2026] [security2:error] [pid 1041789:tid 1041991] [client 20.104.104.62:20830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/fk.php7"] [unique_id "apK-A4v3RhPI65jTFG4A_AAAA1o"]
[Sat Aug 29 05:09:55.620522 2026] [security2:error] [pid 1041789:tid 1042043] [client 52.139.37.240:65328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bigbuttonscarf.com"] [uri "/essexec.php"] [unique_id "apK-A4v3RhPI65jTFG4A_QAAA44"]
[Sat Aug 29 05:09:55.641443 2026] [security2:error] [pid 1041789:tid 1042035] [client 158.23.184.117:21765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK-A4v3RhPI65jTFG4A_wAAA4Y"]
[Sat Aug 29 05:09:55.643087 2026] [security2:error] [pid 1321:tid 1564] [client 20.104.104.62:4840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/ww3.php"] [unique_id "apK-A2jCPtor9NZ-byTYYQAABoc"]
[Sat Aug 29 05:09:55.646839 2026] [security2:error] [pid 1041789:tid 1042015] [client 34.50.189.51:1916] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/@fs/root/.env"] [unique_id "apK-A4v3RhPI65jTFG4BAAAAA3I"]
[Sat Aug 29 05:09:55.647080 2026] [security2:error] [pid 1041789:tid 1041956] [client 34.50.189.51:1946] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "discocollective.kriveloff-associates.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK-A4v3RhPI65jTFG4BAgAAAzc"]
[Sat Aug 29 05:09:55.648067 2026] [security2:error] [pid 1041789:tid 1041967] [client 34.50.189.51:1922] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/@fs/app/.env"] [unique_id "apK-A4v3RhPI65jTFG4BAQAAA0I"]
[Sat Aug 29 05:09:55.648075 2026] [security2:error] [pid 1041789:tid 1042033] [client 34.50.189.51:1912] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/@fs/.env"] [unique_id "apK-A4v3RhPI65jTFG4BAwAAA4Q"]
[Sat Aug 29 05:09:55.648225 2026] [security2:error] [pid 1321:tid 1560] [client 34.50.189.51:1984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2fapp/.env"] [unique_id "apK-A2jCPtor9NZ-byTYYgAABoM"]
[Sat Aug 29 05:09:55.650276 2026] [security2:error] [pid 1321:tid 1579] [client 34.50.189.51:1938] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/@fs/src/.env"] [unique_id "apK-A2jCPtor9NZ-byTYYwAABpY"]
[Sat Aug 29 05:09:55.650836 2026] [security2:error] [pid 1321:tid 1540] [client 34.50.189.51:1992] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "discocollective.kriveloff-associates.com"] [uri "/@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ"] [unique_id "apK-A2jCPtor9NZ-byTYZAAABnA"]
[Sat Aug 29 05:09:55.651184 2026] [core:error] [pid 1041789:tid 1041941] [client 34.50.189.51:1976] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:55.651193 2026] [core:error] [pid 1041789:tid 1041941] [client 34.50.189.51:1976] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:55.651851 2026] [security2:error] [pid 1041789:tid 1041935] [client 20.104.104.62:41653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/7h.php"] [unique_id "apK-A4v3RhPI65jTFG4BBQAAAyI"]
[Sat Aug 29 05:09:55.652976 2026] [security2:error] [pid 1321:tid 1530] [client 34.50.189.51:2038] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "discocollective.kriveloff-associates.com"] [uri "/@fs/.env.production"] [unique_id "apK-A2jCPtor9NZ-byTYZQAABmY"]
[Sat Aug 29 05:09:55.653696 2026] [security2:error] [pid 1041789:tid 1041935] [client 20.104.49.130:51100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/sta.php"] [unique_id "apK-A4v3RhPI65jTFG4BBgAAAyI"]
[Sat Aug 29 05:09:55.654982 2026] [security2:error] [pid 1041789:tid 1042007] [client 34.50.189.51:2078] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "discocollective.kriveloff-associates.com"] [uri "/@fs/root/.aws/credentials"] [unique_id "apK-A4v3RhPI65jTFG4BCQAAA2o"]
[Sat Aug 29 05:09:55.655145 2026] [security2:error] [pid 1321:tid 1602] [client 34.50.189.51:2000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/.env"] [unique_id "apK-A2jCPtor9NZ-byTYZgAABq0"]
[Sat Aug 29 05:09:55.655889 2026] [security2:error] [pid 1041789:tid 1042019] [client 34.50.189.51:1960] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2froot/.env"] [unique_id "apK-A4v3RhPI65jTFG4BCgAAA3Y"]
[Sat Aug 29 05:09:55.656625 2026] [security2:error] [pid 1321:tid 1498] [client 34.50.189.51:2086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/@fs/root/.aws/credentials.backup"] [unique_id "apK-A2jCPtor9NZ-byTYZwAABkY"]
[Sat Aug 29 05:09:55.656736 2026] [security2:error] [pid 1321:tid 1498] [client 34.50.189.51:2086] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "discocollective.kriveloff-associates.com"] [uri "/@fs/root/.aws/credentials.backup"] [unique_id "apK-A2jCPtor9NZ-byTYZwAABkY"]
[Sat Aug 29 05:09:55.656848 2026] [core:error] [pid 1041789:tid 1041962] [client 34.50.189.51:2014] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:55.656857 2026] [core:error] [pid 1041789:tid 1041962] [client 34.50.189.51:2014] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:55.657550 2026] [core:error] [pid 1321:tid 1596] [client 34.50.189.51:2024] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:55.657559 2026] [core:error] [pid 1321:tid 1596] [client 34.50.189.51:2024] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:55.657606 2026] [core:error] [pid 1041789:tid 1042021] [client 34.50.189.51:2096] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:55.657614 2026] [core:error] [pid 1041789:tid 1042021] [client 34.50.189.51:2096] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:55.657645 2026] [security2:error] [pid 1321:tid 1596] [client 34.50.189.51:2024] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "discocollective.kriveloff-associates.com"] [uri "/index.php"] [unique_id "apK-A2jCPtor9NZ-byTYaAAABqc"]
[Sat Aug 29 05:09:55.659118 2026] [core:error] [pid 1041789:tid 1042032] [client 34.50.189.51:2072] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:55.659130 2026] [core:error] [pid 1041789:tid 1042032] [client 34.50.189.51:2072] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:55.659203 2026] [core:error] [pid 1321:tid 1539] [client 34.50.189.51:1994] AH10244: invalid URI path (/@fs/../../.env?raw??)
[Sat Aug 29 05:09:55.660253 2026] [core:error] [pid 1041789:tid 1042029] [client 34.50.189.51:2170] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:55.660265 2026] [core:error] [pid 1041789:tid 1042029] [client 34.50.189.51:2170] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:55.660400 2026] [core:error] [pid 1041789:tid 1042011] [client 34.50.189.51:2130] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:55.660419 2026] [core:error] [pid 1041789:tid 1042011] [client 34.50.189.51:2130] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:55.660525 2026] [core:error] [pid 1321:tid 1539] [client 34.50.189.51:1994] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:55.661670 2026] [security2:error] [pid 1321:tid 1577] [client 34.50.189.51:1984] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "discocollective.kriveloff-associates.com"] [uri "/@fs/home/www-data/.aws/credentials"] [unique_id "apK-A2jCPtor9NZ-byTYbgAABpQ"]
[Sat Aug 29 05:09:55.662067 2026] [security2:error] [pid 1041789:tid 1041972] [client 34.50.189.51:2186] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "discocollective.kriveloff-associates.com"] [uri "/@fs/home/admin/.aws/credentials"] [unique_id "apK-A4v3RhPI65jTFG4BEgAAA0c"]
[Sat Aug 29 05:09:55.662085 2026] [core:error] [pid 1321:tid 1553] [client 34.50.189.51:2150] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:55.662102 2026] [core:error] [pid 1321:tid 1553] [client 34.50.189.51:2150] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:55.662729 2026] [core:error] [pid 1041789:tid 1042026] [client 34.50.189.51:2124] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:55.662744 2026] [core:error] [pid 1041789:tid 1042026] [client 34.50.189.51:2124] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:55.663518 2026] [core:error] [pid 1041789:tid 1041932] [client 34.50.189.51:1916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:55.663534 2026] [core:error] [pid 1041789:tid 1041932] [client 34.50.189.51:1916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:55.663834 2026] [core:error] [pid 1041789:tid 1042009] [client 34.50.189.51:2064] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:55.663842 2026] [core:error] [pid 1041789:tid 1042009] [client 34.50.189.51:2064] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:55.664131 2026] [security2:error] [pid 1321:tid 1520] [client 34.50.189.51:2108] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/@fs/root/.aws/credentials.bak"] [unique_id "apK-A2jCPtor9NZ-byTYbwAABlw"]
[Sat Aug 29 05:09:55.664240 2026] [security2:error] [pid 1321:tid 1520] [client 34.50.189.51:2108] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "discocollective.kriveloff-associates.com"] [uri "/@fs/root/.aws/credentials.bak"] [unique_id "apK-A2jCPtor9NZ-byTYbwAABlw"]
[Sat Aug 29 05:09:55.664440 2026] [core:error] [pid 1041789:tid 1041987] [client 34.50.189.51:2156] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:55.664451 2026] [core:error] [pid 1041789:tid 1041987] [client 34.50.189.51:2156] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:55.664809 2026] [core:error] [pid 1321:tid 1614] [client 34.50.189.51:2058] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:55.664817 2026] [core:error] [pid 1321:tid 1614] [client 34.50.189.51:2058] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:55.665124 2026] [core:error] [pid 1321:tid 1548] [client 34.50.189.51:2116] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:55.665137 2026] [core:error] [pid 1321:tid 1548] [client 34.50.189.51:2116] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:55.665618 2026] [core:error] [pid 1321:tid 1497] [client 34.50.189.51:2128] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:55.665629 2026] [core:error] [pid 1321:tid 1497] [client 34.50.189.51:2128] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:55.666151 2026] [core:error] [pid 1321:tid 1495] [client 34.50.189.51:2044] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:55.666163 2026] [core:error] [pid 1321:tid 1495] [client 34.50.189.51:2044] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:55.672563 2026] [security2:error] [pid 1321:tid 1585] [client 202.71.25.11:59078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.25.71.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK-A2jCPtor9NZ-byTYcQAABpw"]
[Sat Aug 29 05:09:55.672666 2026] [security2:error] [pid 1321:tid 1585] [client 202.71.25.11:59078] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK-A2jCPtor9NZ-byTYcQAABpw"]
[Sat Aug 29 05:09:55.673926 2026] [security2:error] [pid 1041789:tid 1042040] [client 52.139.37.240:13963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/breads1.php"] [unique_id "apK-A4v3RhPI65jTFG4BEwAAA4s"]
[Sat Aug 29 05:09:55.674482 2026] [security2:error] [pid 1041789:tid 1042010] [client 68.155.159.216:52818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/nf_tracking.php"] [unique_id "apK-A4v3RhPI65jTFG4BFAAAA20"]
[Sat Aug 29 05:09:55.679022 2026] [security2:error] [pid 1041789:tid 1041982] [client 68.155.159.216:65120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/about/function.php"] [unique_id "apK-A4v3RhPI65jTFG4BFQAAA1E"]
[Sat Aug 29 05:09:55.694311 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.52.41.200:4612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-load.php"] [unique_id "apK-A4v3RhPI65jTFG4BFgAAA2Q"]
[Sat Aug 29 05:09:55.708009 2026] [security2:error] [pid 1321:tid 1568] [client 20.104.104.62:41963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/Contrller.php"] [unique_id "apK-A2jCPtor9NZ-byTYcgAABos"]
[Sat Aug 29 05:09:55.727539 2026] [security2:error] [pid 1041789:tid 1042050] [client 20.104.18.15:22401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/mac.php"] [unique_id "apK-A4v3RhPI65jTFG4BHAAAA5U"]
[Sat Aug 29 05:09:55.727973 2026] [security2:error] [pid 1041789:tid 1041965] [client 34.169.171.101:9064] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-A4v3RhPI65jTFG4BFwAAA0A"]
[Sat Aug 29 05:09:55.728613 2026] [security2:error] [pid 1321:tid 1525] [client 34.169.171.101:9088] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "forensicengineernj.com"] [uri "/@fs/root/.openai/config.json"] [unique_id "apK-A2jCPtor9NZ-byTYcwAABmE"]
[Sat Aug 29 05:09:55.730598 2026] [security2:error] [pid 1321:tid 1535] [client 20.104.18.15:41906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/mghnhykio.php/new.php"] [unique_id "apK-A2jCPtor9NZ-byTYdAAABms"]
[Sat Aug 29 05:09:55.745912 2026] [security2:error] [pid 1041789:tid 1042045] [client 4.205.62.107:63996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/cp2.php"] [unique_id "apK-A4v3RhPI65jTFG4BHgAAA5A"]
[Sat Aug 29 05:09:55.746938 2026] [security2:error] [pid 1041789:tid 1041992] [client 34.169.171.101:9120] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/@fs/var/task/.env"] [unique_id "apK-A4v3RhPI65jTFG4BHwAAA1s"]
[Sat Aug 29 05:09:55.747018 2026] [security2:error] [pid 1041789:tid 1041992] [client 34.169.171.101:9120] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "forensicengineernj.com"] [uri "/@fs/var/task/.env"] [unique_id "apK-A4v3RhPI65jTFG4BHwAAA1s"]
[Sat Aug 29 05:09:55.748550 2026] [security2:error] [pid 1041789:tid 1042025] [client 158.23.184.117:12138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/fff.php"] [unique_id "apK-A4v3RhPI65jTFG4BIAAAA3w"]
[Sat Aug 29 05:09:55.748654 2026] [security2:error] [pid 1321:tid 1593] [client 34.169.171.101:9124] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/@fs/proc/self/cwd/.env"] [unique_id "apK-A2jCPtor9NZ-byTYdwAABqQ"]
[Sat Aug 29 05:09:55.754392 2026] [security2:error] [pid 1321:tid 1502] [client 20.104.18.15:45973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/shiny.php"] [unique_id "apK-A2jCPtor9NZ-byTYewAABko"]
[Sat Aug 29 05:09:55.754563 2026] [security2:error] [pid 1321:tid 1612] [client 34.169.171.101:9144] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "forensicengineernj.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK-A2jCPtor9NZ-byTYfAAABrc"]
[Sat Aug 29 05:09:55.764432 2026] [security2:error] [pid 1041789:tid 1041971] [client 34.169.171.101:9064] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-A4v3RhPI65jTFG4BIwAAA0Y"], referer: https://forensicengineernj.com/@fs/root/.anthropic/config.json?raw??
[Sat Aug 29 05:09:55.768105 2026] [security2:error] [pid 1321:tid 1550] [client 68.155.159.216:14268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/xmlrpc.php"] [unique_id "apK-A2jCPtor9NZ-byTYfQAABnk"]
[Sat Aug 29 05:09:55.774050 2026] [security2:error] [pid 1321:tid 1543] [client 20.104.18.15:15236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/os.php"] [unique_id "apK-A2jCPtor9NZ-byTYfgAABnM"]
[Sat Aug 29 05:09:55.776382 2026] [security2:error] [pid 1041789:tid 1041975] [client 20.104.104.62:56365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/sko.php"] [unique_id "apK-A4v3RhPI65jTFG4BJwAAA0o"]
[Sat Aug 29 05:09:55.791694 2026] [security2:error] [pid 1041789:tid 1042047] [client 158.23.184.117:21805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/.well-known/home.php"] [unique_id "apK-A4v3RhPI65jTFG4BKQAAA5I"]
[Sat Aug 29 05:09:55.792616 2026] [security2:error] [pid 1321:tid 1562] [client 20.104.104.62:55033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/wp-gzone.php"] [unique_id "apK-A2jCPtor9NZ-byTYggAABoU"]
[Sat Aug 29 05:09:55.792807 2026] [security2:error] [pid 1321:tid 1604] [client 52.139.37.240:34745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/s.php"] [unique_id "apK-A2jCPtor9NZ-byTYgwAABq8"]
[Sat Aug 29 05:09:55.809175 2026] [security2:error] [pid 1041789:tid 1041979] [client 4.232.148.111:11962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/alfa-rex.php7"] [unique_id "apK-A4v3RhPI65jTFG4BKgAAA04"]
[Sat Aug 29 05:09:55.817688 2026] [security2:error] [pid 1041789:tid 1042031] [client 52.139.37.240:54183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bigbuttonscarf.com"] [uri "/fw.php"] [unique_id "apK-A4v3RhPI65jTFG4BKwAAA4I"]
[Sat Aug 29 05:09:55.829049 2026] [security2:error] [pid 1041789:tid 1042005] [client 185.104.184.230:33388] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.bjx.okj.mybluehost.me"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "apK-A4v3RhPI65jTFG4BLQAAA2g"]
[Sat Aug 29 05:09:55.843253 2026] [security2:error] [pid 1041789:tid 1042035] [client 20.104.104.62:42874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/Zeiss.php"] [unique_id "apK-A4v3RhPI65jTFG4BLgAAA4Y"]
[Sat Aug 29 05:09:55.865858 2026] [security2:error] [pid 1321:tid 1528] [client 68.155.159.216:38287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-includes/index.php"] [unique_id "apK-A2jCPtor9NZ-byTYhQAABmQ"]
[Sat Aug 29 05:09:55.872173 2026] [security2:error] [pid 1041789:tid 1041948] [client 52.139.37.240:13384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/must.php"] [unique_id "apK-A4v3RhPI65jTFG4BLwAAAy8"]
[Sat Aug 29 05:09:55.884993 2026] [security2:error] [pid 1321:tid 1582] [client 158.23.147.79:58913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-content/themes/too.php"] [unique_id "apK-A2jCPtor9NZ-byTYhwAABpk"]
[Sat Aug 29 05:09:55.892486 2026] [security2:error] [pid 1041789:tid 1041956] [client 158.23.184.117:12112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/.tmb/dropdown.php"] [unique_id "apK-A4v3RhPI65jTFG4BMQAAAzc"]
[Sat Aug 29 05:09:55.924191 2026] [security2:error] [pid 1041789:tid 1042021] [client 20.104.104.62:4132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/zoz.php"] [unique_id "apK-A4v3RhPI65jTFG4BMgAAA3g"]
[Sat Aug 29 05:09:55.937809 2026] [security2:error] [pid 1041789:tid 1042048] [client 158.23.184.117:21636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/.well-known/index.php"] [unique_id "apK-A4v3RhPI65jTFG4BMwAAA5M"]
[Sat Aug 29 05:09:55.937829 2026] [security2:error] [pid 1041789:tid 1042056] [client 40.83.93.50:17714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/ds.php"] [unique_id "apK-A4v3RhPI65jTFG4BNAAAA5s"]
[Sat Aug 29 05:09:55.938791 2026] [security2:error] [pid 1321:tid 1531] [client 20.104.104.62:22691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/str.php"] [unique_id "apK-A2jCPtor9NZ-byTYiQAABmc"]
[Sat Aug 29 05:09:55.977637 2026] [security2:error] [pid 1041789:tid 1041954] [client 20.104.104.62:43104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/ww2.php"] [unique_id "apK-A4v3RhPI65jTFG4BPQAAAzU"]
[Sat Aug 29 05:09:55.982069 2026] [security2:error] [pid 1041789:tid 1041942] [client 4.205.62.107:3927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/txets.php"] [unique_id "apK-A4v3RhPI65jTFG4BPgAAAyk"]
[Sat Aug 29 05:09:56.000575 2026] [security2:error] [pid 1321:tid 1536] [client 52.139.37.240:34336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/sagax.php"] [unique_id "apK-A2jCPtor9NZ-byTYigAABmw"]
[Sat Aug 29 05:09:56.015403 2026] [security2:error] [pid 1041789:tid 1041972] [client 52.139.37.240:53883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bigbuttonscarf.com"] [uri "/zwso.php"] [unique_id "apK-BIv3RhPI65jTFG4BQwAAA0c"]
[Sat Aug 29 05:09:56.034471 2026] [security2:error] [pid 1321:tid 1556] [client 20.104.49.130:34546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/ioxi-o.php"] [unique_id "apK-BGjCPtor9NZ-byTYiwAABn8"]
[Sat Aug 29 05:09:56.055806 2026] [security2:error] [pid 1321:tid 1578] [client 20.151.200.44:63109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/fh26.php"] [unique_id "apK-BGjCPtor9NZ-byTYjAAABpU"]
[Sat Aug 29 05:09:56.056321 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.104.104.62:4133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/mmm.php"] [unique_id "apK-BIv3RhPI65jTFG4BRgAAA2Q"]
[Sat Aug 29 05:09:56.059905 2026] [security2:error] [pid 1041789:tid 1041936] [client 158.23.184.117:12123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/robots.php"] [unique_id "apK-BIv3RhPI65jTFG4BRwAAAyM"]
[Sat Aug 29 05:09:56.060039 2026] [security2:error] [pid 1321:tid 1515] [client 4.205.62.107:21937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/agg.php"] [unique_id "apK-BGjCPtor9NZ-byTYjQAABlc"]
[Sat Aug 29 05:09:56.062155 2026] [security2:error] [pid 1041789:tid 1042049] [client 68.155.159.216:23504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/hehehehe.php"] [unique_id "apK-BIv3RhPI65jTFG4BSAAAA5Q"]
[Sat Aug 29 05:09:56.074373 2026] [security2:error] [pid 1321:tid 1496] [client 20.104.104.62:55001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/mega.php"] [unique_id "apK-BGjCPtor9NZ-byTYjgAABkQ"]
[Sat Aug 29 05:09:56.083514 2026] [security2:error] [pid 1041789:tid 1041957] [client 158.23.184.117:21675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/.well-known/login.php"] [unique_id "apK-BIv3RhPI65jTFG4BSQAAAzg"]
[Sat Aug 29 05:09:56.094959 2026] [security2:error] [pid 1041789:tid 1042000] [client 52.139.37.240:14008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/up.php"] [unique_id "apK-BIv3RhPI65jTFG4BSgAAA2M"]
[Sat Aug 29 05:09:56.101315 2026] [security2:error] [pid 1041789:tid 1041995] [client 20.104.104.62:40231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/eagle.php"] [unique_id "apK-BIv3RhPI65jTFG4BSwAAA14"]
[Sat Aug 29 05:09:56.110892 2026] [security2:error] [pid 1041789:tid 1042046] [client 20.104.104.62:60111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/anz.php"] [unique_id "apK-BIv3RhPI65jTFG4BTQAAA5E"]
[Sat Aug 29 05:09:56.129702 2026] [access_compat:error] [pid 1041789:tid 1041997] [client 57.141.14.82:0] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/shop-cart
[Sat Aug 29 05:09:56.131973 2026] [security2:error] [pid 1321:tid 1589] [client 185.104.184.230:33402] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.bjx.okj.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "apK-BGjCPtor9NZ-byTYkAAABqA"]
[Sat Aug 29 05:09:56.139181 2026] [security2:error] [pid 1041789:tid 1041931] [client 61.9.8.240:14273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK-BIv3RhPI65jTFG4BTwAAAx4"]
[Sat Aug 29 05:09:56.139261 2026] [security2:error] [pid 1041789:tid 1041931] [client 61.9.8.240:14273] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK-BIv3RhPI65jTFG4BTwAAAx4"]
[Sat Aug 29 05:09:56.195948 2026] [security2:error] [pid 1321:tid 1421] [remote 185.146.22.250:49820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 250.22.146.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sweetlifemarketing.com"] [uri "/wp-login.php"] [unique_id "apK-BGjCPtor9NZ-byTYkQAGUT8"]
[Sat Aug 29 05:09:56.196341 2026] [cgid:error] [pid 1041789:tid 1042034] [client 52.139.37.240:34168] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/airviewc/public_html/404.shtml
[Sat Aug 29 05:09:56.197857 2026] [security2:error] [pid 1041789:tid 1041961] [client 20.104.104.62:4857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/advanced.php"] [unique_id "apK-BIv3RhPI65jTFG4BUgAAAzw"]
[Sat Aug 29 05:09:56.202771 2026] [security2:error] [pid 1041789:tid 1041945] [client 158.23.147.79:62988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/ws.php"] [unique_id "apK-BIv3RhPI65jTFG4BUwAAAyw"]
[Sat Aug 29 05:09:56.204151 2026] [security2:error] [pid 1041789:tid 1042041] [client 20.104.104.62:54533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/ww3.php"] [unique_id "apK-BIv3RhPI65jTFG4BVAAAA4w"]
[Sat Aug 29 05:09:56.206486 2026] [security2:error] [pid 1041789:tid 1042006] [client 158.23.184.117:11398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/.well-known/install.php"] [unique_id "apK-BIv3RhPI65jTFG4BVQAAA2k"]
[Sat Aug 29 05:09:56.219318 2026] [security2:error] [pid 1041789:tid 1041981] [client 52.139.37.240:56635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bigbuttonscarf.com"] [uri "/admin/function.php"] [unique_id "apK-BIv3RhPI65jTFG4BVgAAA1A"]
[Sat Aug 29 05:09:56.228962 2026] [security2:error] [pid 1041789:tid 1042043] [client 158.23.184.117:21793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/.well-known/logs233/index.php"] [unique_id "apK-BIv3RhPI65jTFG4BVwAAA44"]
[Sat Aug 29 05:09:56.229582 2026] [security2:error] [pid 1321:tid 1534] [client 158.23.147.79:52290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK-BGjCPtor9NZ-byTYkgAABmo"]
[Sat Aug 29 05:09:56.248700 2026] [security2:error] [pid 1321:tid 1572] [client 20.104.104.62:43382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/bge.php"] [unique_id "apK-BGjCPtor9NZ-byTYlAAABo8"]
[Sat Aug 29 05:09:56.259451 2026] [security2:error] [pid 1041789:tid 1041948] [client 52.139.37.240:34168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/wp-content/plugins/ftde.php"] [unique_id "apK-BIv3RhPI65jTFG4BWQAAAy8"]
[Sat Aug 29 05:09:56.274874 2026] [security2:error] [pid 1041789:tid 1041956] [client 68.155.159.216:24494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drjrae.managemymood.com"] [uri "/first.php"] [unique_id "apK-BIv3RhPI65jTFG4BWgAAAzc"]
[Sat Aug 29 05:09:56.282874 2026] [security2:error] [pid 1041789:tid 1041946] [client 4.232.148.111:19580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "apK-BIv3RhPI65jTFG4BWwAAAy0"]
[Sat Aug 29 05:09:56.292810 2026] [security2:error] [pid 1041789:tid 1042056] [client 68.155.159.216:1875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK-BIv3RhPI65jTFG4BXQAAA5s"]
[Sat Aug 29 05:09:56.296586 2026] [security2:error] [pid 1041789:tid 1042011] [client 20.52.41.200:4377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/a.php"] [unique_id "apK-BIv3RhPI65jTFG4BXgAAA24"]
[Sat Aug 29 05:09:56.334370 2026] [security2:error] [pid 1321:tid 1565] [client 20.104.104.62:50474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/blox.php"] [unique_id "apK-BGjCPtor9NZ-byTYlQAABog"]
[Sat Aug 29 05:09:56.334438 2026] [security2:error] [pid 1321:tid 1607] [client 20.104.104.62:22671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/sko.php"] [unique_id "apK-BGjCPtor9NZ-byTYlgAABrI"]
[Sat Aug 29 05:09:56.344332 2026] [security2:error] [pid 1041789:tid 1041987] [client 4.205.62.107:58467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/wp-jufsis.php"] [unique_id "apK-BIv3RhPI65jTFG4BYgAAA1Y"]
[Sat Aug 29 05:09:56.351014 2026] [autoindex:error] [pid 1041789:tid 1042042] [client 52.139.37.240:13379] AH01276: Cannot serve directory /home2/angelesf/public_html/jamesmarquiss/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:09:56.351128 2026] [security2:error] [pid 1041789:tid 1042007] [client 4.205.62.107:62770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/aws_auth.php"] [unique_id "apK-BIv3RhPI65jTFG4BYwAAA2o"]
[Sat Aug 29 05:09:56.357823 2026] [security2:error] [pid 1321:tid 1606] [client 20.220.204.93:50797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/cc13.php"] [unique_id "apK-BGjCPtor9NZ-byTYlwAABrE"]
[Sat Aug 29 05:09:56.372486 2026] [security2:error] [pid 1041789:tid 1041936] [client 74.248.24.12:4367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/inputs.php"] [unique_id "apK-BIv3RhPI65jTFG4BZgAAAyM"]
[Sat Aug 29 05:09:56.375005 2026] [security2:error] [pid 1321:tid 1490] [client 158.23.184.117:21809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/.well-known/maintenance.php"] [unique_id "apK-BGjCPtor9NZ-byTYmAAABj4"]
[Sat Aug 29 05:09:56.381778 2026] [security2:error] [pid 1041789:tid 1042052] [client 20.104.104.62:43077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/wp-ana.php"] [unique_id "apK-BIv3RhPI65jTFG4BaAAAA5c"]
[Sat Aug 29 05:09:56.390264 2026] [autoindex:error] [pid 1041789:tid 1042053] [client 20.197.61.180:7255] AH01276: Cannot serve directory /home1/dreamca9/public_html/hccocom/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:09:56.393224 2026] [security2:error] [pid 1321:tid 1446] [remote 185.146.22.250:49820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 250.22.146.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sweetlifemarketing.com"] [uri "/wp-login.php"] [unique_id "apK-BGjCPtor9NZ-byTYmQAGo1g"], referer: https://sweetlifemarketing.com/wp-login.php
[Sat Aug 29 05:09:56.414744 2026] [security2:error] [pid 1321:tid 1605] [client 4.205.62.107:6852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/public/wp-blog.php"] [unique_id "apK-BGjCPtor9NZ-byTYmgAABrA"]
[Sat Aug 29 05:09:56.415257 2026] [security2:error] [pid 1041789:tid 1041995] [client 52.139.37.240:13379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/wp-content/155.php"] [unique_id "apK-BIv3RhPI65jTFG4BagAAA14"]
[Sat Aug 29 05:09:56.419876 2026] [security2:error] [pid 1041789:tid 1041980] [client 158.23.184.117:11407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/wp-admin/about.php"] [unique_id "apK-BIv3RhPI65jTFG4BawAAA08"]
[Sat Aug 29 05:09:56.426844 2026] [security2:error] [pid 1041789:tid 1042018] [client 52.139.37.240:56634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bigbuttonscarf.com"] [uri "/zoom1.php"] [unique_id "apK-BIv3RhPI65jTFG4BbAAAA3U"]
[Sat Aug 29 05:09:56.427852 2026] [security2:error] [pid 1321:tid 1573] [client 68.155.159.216:49375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK-BGjCPtor9NZ-byTYmwAABpA"]
[Sat Aug 29 05:09:56.429943 2026] [security2:error] [pid 1041789:tid 1041941] [client 40.83.93.50:10052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/GOD.php"] [unique_id "apK-BIv3RhPI65jTFG4BbQAAAyg"]
[Sat Aug 29 05:09:56.434011 2026] [security2:error] [pid 1041789:tid 1042046] [client 185.104.184.230:33408] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.bjx.okj.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "apK-BIv3RhPI65jTFG4BbgAAA5E"]
[Sat Aug 29 05:09:56.446067 2026] [security2:error] [pid 1041789:tid 1041992] [client 158.23.147.79:6042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/.well-knownold/index.php"] [unique_id "apK-BIv3RhPI65jTFG4BbwAAA1s"]
[Sat Aug 29 05:09:56.454085 2026] [security2:error] [pid 1041789:tid 1041947] [client 52.139.37.240:34319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "apK-BIv3RhPI65jTFG4BcAAAAy4"]
[Sat Aug 29 05:09:56.460690 2026] [security2:error] [pid 1041789:tid 1041923] [remote 45.148.10.62:40842] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1609"] [id "900942"] [msg "Invalid WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.path=http://:"] [hostname "mail.xyzece.com"] [uri "/"] [unique_id "apK-BIv3RhPI65jTFG4BcQADcHk"]
[Sat Aug 29 05:09:56.471143 2026] [security2:error] [pid 1041789:tid 1041949] [client 20.104.104.62:64655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/kcs.php"] [unique_id "apK-BIv3RhPI65jTFG4BcgAAAzA"]
[Sat Aug 29 05:09:56.486438 2026] [security2:error] [pid 1321:tid 1505] [client 20.104.104.62:46008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/zoz.php"] [unique_id "apK-BGjCPtor9NZ-byTYnQAABk0"]
[Sat Aug 29 05:09:56.486441 2026] [security2:error] [pid 1321:tid 1518] [client 68.155.159.216:30705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-includes/content.php"] [unique_id "apK-BGjCPtor9NZ-byTYnAAABlo"]
[Sat Aug 29 05:09:56.488454 2026] [security2:error] [pid 1041789:tid 1042055] [client 68.155.159.216:64034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK-BIv3RhPI65jTFG4BcwAAA5o"]
[Sat Aug 29 05:09:56.504798 2026] [security2:error] [pid 1321:tid 1610] [client 20.104.104.62:20728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/Eagle.php"] [unique_id "apK-BGjCPtor9NZ-byTYngAABrU"]
[Sat Aug 29 05:09:56.522958 2026] [security2:error] [pid 1321:tid 1580] [client 158.23.184.117:21657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/.well-known/min.php"] [unique_id "apK-BGjCPtor9NZ-byTYnwAABpc"]
[Sat Aug 29 05:09:56.528392 2026] [security2:error] [pid 1321:tid 1560] [client 20.104.104.62:41922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/secret.php"] [unique_id "apK-BGjCPtor9NZ-byTYoAAABoM"]
[Sat Aug 29 05:09:56.568245 2026] [security2:error] [pid 1041789:tid 1042020] [client 180.190.5.40:33295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.5.190.180.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK-BIv3RhPI65jTFG4BdQAAA3c"]
[Sat Aug 29 05:09:56.568340 2026] [security2:error] [pid 1041789:tid 1042020] [client 180.190.5.40:33295] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK-BIv3RhPI65jTFG4BdQAAA3c"]
[Sat Aug 29 05:09:56.573664 2026] [security2:error] [pid 1041789:tid 1041978] [client 158.23.184.117:11401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/wp-content/backup.php"] [unique_id "apK-BIv3RhPI65jTFG4BdwAAA00"]
[Sat Aug 29 05:09:56.582379 2026] [security2:error] [pid 1041789:tid 1042031] [client 68.155.159.216:33774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/x.php"] [unique_id "apK-BIv3RhPI65jTFG4BeAAAA4I"]
[Sat Aug 29 05:09:56.585216 2026] [security2:error] [pid 1321:tid 1609] [client 197.232.63.170:50965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 170.63.232.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK-BGjCPtor9NZ-byTYoQAABrQ"]
[Sat Aug 29 05:09:56.585319 2026] [security2:error] [pid 1321:tid 1609] [client 197.232.63.170:50965] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK-BGjCPtor9NZ-byTYoQAABrQ"]
[Sat Aug 29 05:09:56.602414 2026] [security2:error] [pid 1321:tid 1614] [client 20.104.104.62:57031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/wsz.php"] [unique_id "apK-BGjCPtor9NZ-byTYogAABrk"]
[Sat Aug 29 05:09:56.614224 2026] [security2:error] [pid 1041789:tid 1041876] [remote 45.148.10.62:40842] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1584"] [id "900939"] [msg "Invalid WordPress REST batch path"] [data "ARGS:requests.requests.path=http://:"] [hostname "mail.xyzece.com"] [uri "/wp-json/batch/v1"] [unique_id "apK-BIv3RhPI65jTFG4BeQADjEo"]
[Sat Aug 29 05:09:56.614514 2026] [security2:error] [pid 1321:tid 1579] [client 52.139.37.240:13413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/wp-update.php"] [unique_id "apK-BGjCPtor9NZ-byTYowAABpY"]
[Sat Aug 29 05:09:56.623974 2026] [security2:error] [pid 1321:tid 1602] [client 52.139.37.240:37913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bigbuttonscarf.com"] [uri "/about.php7"] [unique_id "apK-BGjCPtor9NZ-byTYpAAABq0"]
[Sat Aug 29 05:09:56.625875 2026] [security2:error] [pid 1321:tid 1495] [client 20.104.104.62:55002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/mmm.php"] [unique_id "apK-BGjCPtor9NZ-byTYpQAABkM"]
[Sat Aug 29 05:09:56.628506 2026] [security2:error] [pid 1041789:tid 1041944] [client 213.202.253.4:59243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "timportlock.net"] [uri "/postnews.php"] [unique_id "apK-BIv3RhPI65jTFG4BewAAAys"], referer: www.google.com
[Sat Aug 29 05:09:56.645899 2026] [http2:warn] [pid 1041789:tid 1042039] [client 57.141.14.98:61724] h2_stream(1041789-34-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:09:56.655448 2026] [cgid:error] [pid 1041789:tid 1041961] [client 52.139.37.240:34325] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/airviewc/public_html/404.shtml
[Sat Aug 29 05:09:56.664454 2026] [security2:error] [pid 1321:tid 1581] [client 20.104.104.62:43121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/pro.php"] [unique_id "apK-BGjCPtor9NZ-byTYpgAABpg"]
[Sat Aug 29 05:09:56.672525 2026] [security2:error] [pid 1321:tid 1497] [client 158.23.184.117:61463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/.well-known/module.php"] [unique_id "apK-BGjCPtor9NZ-byTYpwAABkU"]
[Sat Aug 29 05:09:56.676365 2026] [http2:warn] [pid 1018003:tid 1018249] [client 57.141.14.32:35046] h2_stream(1018003-215-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:09:56.719166 2026] [security2:error] [pid 1321:tid 1519] [client 158.23.184.117:12134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/.well-known/aa.php"] [unique_id "apK-BGjCPtor9NZ-byTYqAAABls"]
[Sat Aug 29 05:09:56.719816 2026] [security2:error] [pid 1041789:tid 1041948] [client 52.139.37.240:34325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/z.php"] [unique_id "apK-BIv3RhPI65jTFG4BfQAAAy8"]
[Sat Aug 29 05:09:56.738962 2026] [security2:error] [pid 1321:tid 1593] [client 185.104.184.230:33418] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.bjx.okj.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "apK-BGjCPtor9NZ-byTYqQAABqQ"]
[Sat Aug 29 05:09:56.739311 2026] [security2:error] [pid 1041789:tid 1041935] [client 20.104.104.62:56345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/msy.php"] [unique_id "apK-BIv3RhPI65jTFG4BfgAAAyI"]
[Sat Aug 29 05:09:56.753472 2026] [security2:error] [pid 1321:tid 1611] [client 20.52.41.200:4600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/u.php"] [unique_id "apK-BGjCPtor9NZ-byTYqgAABrY"]
[Sat Aug 29 05:09:56.760259 2026] [security2:error] [pid 1321:tid 1548] [client 4.232.148.111:11948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/upload.php"] [unique_id "apK-BGjCPtor9NZ-byTYqwAABnc"]
[Sat Aug 29 05:09:56.761467 2026] [security2:error] [pid 1041789:tid 1042021] [client 20.104.104.62:45964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/advanced.php"] [unique_id "apK-BIv3RhPI65jTFG4BfwAAA3g"]
[Sat Aug 29 05:09:56.766247 2026] [security2:error] [pid 1041789:tid 1042032] [client 20.104.104.62:40238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/.error_log.php"] [unique_id "apK-BIv3RhPI65jTFG4BgQAAA4M"]
[Sat Aug 29 05:09:56.775336 2026] [security2:error] [pid 1321:tid 1554] [client 68.155.159.216:64475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK-BGjCPtor9NZ-byTYrAAABn0"]
[Sat Aug 29 05:09:56.780691 2026] [security2:error] [pid 1321:tid 1502] [client 68.155.159.216:52847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wzy.php"] [unique_id "apK-BGjCPtor9NZ-byTYrQAABko"]
[Sat Aug 29 05:09:56.800349 2026] [security2:error] [pid 1321:tid 1516] [client 20.104.104.62:41968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/999.php"] [unique_id "apK-BGjCPtor9NZ-byTYrwAABlg"]
[Sat Aug 29 05:09:56.811872 2026] [security2:error] [pid 1321:tid 1527] [client 20.151.200.44:22145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/fgd.php"] [unique_id "apK-BGjCPtor9NZ-byTYsAAABmM"]
[Sat Aug 29 05:09:56.812390 2026] [security2:error] [pid 1041789:tid 1041956] [client 52.139.37.240:13968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/xmrlpc.php"] [unique_id "apK-BIv3RhPI65jTFG4BggAAAzc"]
[Sat Aug 29 05:09:56.818505 2026] [security2:error] [pid 1041789:tid 1042017] [client 158.23.184.117:21685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/.well-known/options.php"] [unique_id "apK-BIv3RhPI65jTFG4BgwAAA3Q"]
[Sat Aug 29 05:09:56.838474 2026] [security2:error] [pid 1041789:tid 1041840] [remote 74.7.227.154:54326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK-BIv3RhPI65jTFG4BhAADHyY"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwp-easycart-pro%2Fadmin%2Ftemplate%2Fsettings%2Fpayments
[Sat Aug 29 05:09:56.843001 2026] [security2:error] [pid 1321:tid 1586] [client 52.139.37.240:56628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bigbuttonscarf.com"] [uri "/cron.php"] [unique_id "apK-BGjCPtor9NZ-byTYsQAABp0"]
[Sat Aug 29 05:09:56.843247 2026] [security2:error] [pid 1321:tid 1603] [client 20.220.204.93:52236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/aa.php"] [unique_id "apK-BGjCPtor9NZ-byTYsgAABq4"]
[Sat Aug 29 05:09:56.863372 2026] [security2:error] [pid 1041789:tid 1041951] [client 103.162.125.59:64403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.125.162.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK-BIv3RhPI65jTFG4BhQAAAzI"]
[Sat Aug 29 05:09:56.863464 2026] [security2:error] [pid 1041789:tid 1041951] [client 103.162.125.59:64403] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK-BIv3RhPI65jTFG4BhQAAAzI"]
[Sat Aug 29 05:09:56.865507 2026] [security2:error] [pid 1321:tid 1594] [client 158.23.184.117:11417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "apK-BGjCPtor9NZ-byTYswAABqU"]
[Sat Aug 29 05:09:56.878448 2026] [security2:error] [pid 1041789:tid 1041942] [client 20.48.251.3:46542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-BIv3RhPI65jTFG4BhgAAAyk"]
[Sat Aug 29 05:09:56.884485 2026] [security2:error] [pid 1041789:tid 1041972] [client 4.205.62.107:63954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/xda.php"] [unique_id "apK-BIv3RhPI65jTFG4BhwAAA0c"]
[Sat Aug 29 05:09:56.887475 2026] [security2:error] [pid 1041789:tid 1042014] [client 68.155.159.216:14219] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/atomlib.php"] [unique_id "apK-BIv3RhPI65jTFG4BiAAAA3E"]
[Sat Aug 29 05:09:56.890255 2026] [security2:error] [pid 1321:tid 1562] [client 20.104.104.62:42761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/siln.php"] [unique_id "apK-BGjCPtor9NZ-byTYtAAABoU"]
[Sat Aug 29 05:09:56.898561 2026] [security2:error] [pid 1041789:tid 1041987] [client 20.104.104.62:55026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/blox.php"] [unique_id "apK-BIv3RhPI65jTFG4BigAAA1Y"]
[Sat Aug 29 05:09:56.900524 2026] [security2:error] [pid 1041789:tid 1041967] [client 74.248.24.12:4350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/alfa.php"] [unique_id "apK-BIv3RhPI65jTFG4BiwAAA0I"]
[Sat Aug 29 05:09:56.922668 2026] [security2:error] [pid 1041789:tid 1041950] [client 52.139.37.240:34306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/f35.php"] [unique_id "apK-BIv3RhPI65jTFG4BjAAAAzE"]
[Sat Aug 29 05:09:56.932246 2026] [security2:error] [pid 1321:tid 1528] [client 20.104.104.62:60690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/sef.php"] [unique_id "apK-BGjCPtor9NZ-byTYtQAABmQ"]
[Sat Aug 29 05:09:56.941302 2026] [security2:error] [pid 1041789:tid 1042007] [client 68.155.159.216:18214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wzy.php"] [unique_id "apK-BIv3RhPI65jTFG4BjQAAA2o"]
[Sat Aug 29 05:09:56.967579 2026] [security2:error] [pid 1321:tid 1494] [client 158.23.184.117:21679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/.well-known/panel.php"] [unique_id "apK-BGjCPtor9NZ-byTYtgAABkI"]
[Sat Aug 29 05:09:56.971765 2026] [security2:error] [pid 1321:tid 1544] [client 68.155.159.216:38712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/mah.php"] [unique_id "apK-BGjCPtor9NZ-byTYtwAABnQ"]
[Sat Aug 29 05:09:57.005052 2026] [security2:error] [pid 1321:tid 1569] [client 158.23.147.79:62774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/radio.php"] [unique_id "apK-BWjCPtor9NZ-byTYuAAABow"]
[Sat Aug 29 05:09:57.008049 2026] [security2:error] [pid 1041789:tid 1042042] [client 52.139.37.240:13380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/about/function.php"] [unique_id "apK-BYv3RhPI65jTFG4BjgAAA40"]
[Sat Aug 29 05:09:57.011141 2026] [security2:error] [pid 1321:tid 1543] [client 40.83.93.50:10076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/ggfi.php"] [unique_id "apK-BWjCPtor9NZ-byTYuQAABnM"]
[Sat Aug 29 05:09:57.011198 2026] [security2:error] [pid 1321:tid 1536] [client 20.48.251.3:46570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-BWjCPtor9NZ-byTYugAABmw"]
[Sat Aug 29 05:09:57.012943 2026] [security2:error] [pid 1321:tid 1582] [client 158.23.184.117:11397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/wp-content/plugins/alfa-rex.php"] [unique_id "apK-BWjCPtor9NZ-byTYuwAABpk"]
[Sat Aug 29 05:09:57.029550 2026] [security2:error] [pid 1321:tid 1515] [client 20.104.104.62:4824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/f-401.php"] [unique_id "apK-BWjCPtor9NZ-byTYvAAABlc"]
[Sat Aug 29 05:09:57.032490 2026] [security2:error] [pid 1321:tid 1561] [client 20.104.104.62:46013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/kcs.php"] [unique_id "apK-BWjCPtor9NZ-byTYvQAABoQ"]
[Sat Aug 29 05:09:57.040381 2026] [security2:error] [pid 1041789:tid 1041983] [client 52.139.37.240:65342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bigbuttonscarf.com"] [uri "/wp-2019.php"] [unique_id "apK-BYv3RhPI65jTFG4BjwAAA1I"]
[Sat Aug 29 05:09:57.044873 2026] [security2:error] [pid 1321:tid 1597] [client 185.104.184.230:33432] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.bjx.okj.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "apK-BWjCPtor9NZ-byTYvgAABqg"]
[Sat Aug 29 05:09:57.059443 2026] [security2:error] [pid 1041789:tid 1042045] [client 20.104.104.62:60112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/admin123.php"] [unique_id "apK-BYv3RhPI65jTFG4BkQAAA5A"]
[Sat Aug 29 05:09:57.111138 2026] [security2:error] [pid 1321:tid 1615] [client 20.220.204.93:50701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/s1.php"] [unique_id "apK-BWjCPtor9NZ-byTYvwAABro"]
[Sat Aug 29 05:09:57.112390 2026] [security2:error] [pid 1321:tid 1488] [client 158.23.184.117:21687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/.well-known/pki-validation/mariju.php"] [unique_id "apK-BWjCPtor9NZ-byTYwAAABjw"]
[Sat Aug 29 05:09:57.113273 2026] [security2:error] [pid 1321:tid 1555] [client 20.104.104.62:47608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/666.php"] [unique_id "apK-BWjCPtor9NZ-byTYwQAABn4"]
[Sat Aug 29 05:09:57.116023 2026] [security2:error] [pid 1321:tid 1496] [client 52.139.37.240:34112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/file61.php"] [unique_id "apK-BWjCPtor9NZ-byTYwgAABkQ"]
[Sat Aug 29 05:09:57.120251 2026] [security2:error] [pid 1321:tid 1542] [client 4.205.62.107:53300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/time.php"] [unique_id "apK-BWjCPtor9NZ-byTYwwAABnI"]
[Sat Aug 29 05:09:57.142497 2026] [security2:error] [pid 1321:tid 1500] [client 20.48.251.3:46627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/goods.php"] [unique_id "apK-BWjCPtor9NZ-byTYxQAABkg"]
[Sat Aug 29 05:09:57.176328 2026] [security2:error] [pid 1041789:tid 1041979] [client 20.104.104.62:4834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/hq.php"] [unique_id "apK-BYv3RhPI65jTFG4BlwAAA04"]
[Sat Aug 29 05:09:57.196282 2026] [security2:error] [pid 1041789:tid 1042033] [client 68.155.159.216:23518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK-BYv3RhPI65jTFG4BmAAAA4Q"]
[Sat Aug 29 05:09:57.208959 2026] [security2:error] [pid 1041789:tid 1041978] [client 158.23.147.79:11353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/goat1.php"] [unique_id "apK-BYv3RhPI65jTFG4BmQAAA00"]
[Sat Aug 29 05:09:57.214172 2026] [security2:error] [pid 1321:tid 1524] [client 4.205.62.107:21942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/requirements.php"] [unique_id "apK-BWjCPtor9NZ-byTYyAAABmA"]
[Sat Aug 29 05:09:57.214211 2026] [security2:error] [pid 1321:tid 1575] [client 20.52.41.200:4406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/r.php"] [unique_id "apK-BWjCPtor9NZ-byTYxwAABpI"]
[Sat Aug 29 05:09:57.216961 2026] [security2:error] [pid 1321:tid 1588] [client 158.23.184.117:11423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/test.php"] [unique_id "apK-BWjCPtor9NZ-byTYyQAABp8"]
[Sat Aug 29 05:09:57.223469 2026] [security2:error] [pid 1321:tid 1601] [client 52.139.37.240:13408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/an.php"] [unique_id "apK-BWjCPtor9NZ-byTYygAABqw"]
[Sat Aug 29 05:09:57.239488 2026] [security2:error] [pid 1041789:tid 1041960] [client 52.139.37.240:37917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bigbuttonscarf.com"] [uri "/gecko-new.php"] [unique_id "apK-BYv3RhPI65jTFG4BmgAAAzs"]
[Sat Aug 29 05:09:57.246860 2026] [security2:error] [pid 1321:tid 1521] [client 195.178.110.247:40856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.luxuryvillasadministration.com"] [uri "/index.php"] [unique_id "apK-BWjCPtor9NZ-byTYzAAABl0"]
[Sat Aug 29 05:09:57.258348 2026] [security2:error] [pid 1041789:tid 1041991] [client 158.23.184.117:21637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/.well-known/pki-validation/pl.php"] [unique_id "apK-BYv3RhPI65jTFG4BmwAAA1o"]
[Sat Aug 29 05:09:57.280064 2026] [security2:error] [pid 1321:tid 1512] [client 158.23.147.79:55289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/.well-known/index.php"] [unique_id "apK-BWjCPtor9NZ-byTYzQAABlQ"]
[Sat Aug 29 05:09:57.282053 2026] [security2:error] [pid 1041789:tid 1042035] [client 20.48.251.3:46601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/asa.php"] [unique_id "apK-BYv3RhPI65jTFG4BnAAAA4Y"]
[Sat Aug 29 05:09:57.306612 2026] [security2:error] [pid 1041789:tid 1042019] [client 158.23.147.79:38752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-includes/css/index.php"] [unique_id "apK-BYv3RhPI65jTFG4BnQAAA3Y"]
[Sat Aug 29 05:09:57.316938 2026] [security2:error] [pid 1041789:tid 1041944] [client 52.139.37.240:34364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/mah.php"] [unique_id "apK-BYv3RhPI65jTFG4BnwAAAys"]
[Sat Aug 29 05:09:57.359583 2026] [security2:error] [pid 1041789:tid 1041956] [client 185.104.184.230:33446] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.bjx.okj.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "apK-BYv3RhPI65jTFG4BoQAAAzc"]
[Sat Aug 29 05:09:57.365820 2026] [security2:error] [pid 1321:tid 1490] [client 158.23.147.79:44509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-content/radio.php"] [unique_id "apK-BWjCPtor9NZ-byTYzgAABj4"]
[Sat Aug 29 05:09:57.380604 2026] [security2:error] [pid 1041789:tid 1041842] [remote 74.7.227.154:54326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK-BYv3RhPI65jTFG4BowADQCg"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwp-easycart-pro%2Fadmin%2Ftemplate%2Fsettings%2Fpayments
[Sat Aug 29 05:09:57.384728 2026] [security2:error] [pid 1041789:tid 1042057] [client 158.23.184.117:12152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/wp-includes/mani.php"] [unique_id "apK-BYv3RhPI65jTFG4BpQAAA5w"]
[Sat Aug 29 05:09:57.401747 2026] [security2:error] [pid 1041789:tid 1042034] [client 195.178.110.247:44996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.luxuryvillasadministration.com"] [uri "/index.php"] [unique_id "apK-BYv3RhPI65jTFG4BpwAAA4U"]
[Sat Aug 29 05:09:57.407742 2026] [security2:error] [pid 1321:tid 1598] [client 158.23.184.117:21678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/.well-known/pki-validation/x.php"] [unique_id "apK-BWjCPtor9NZ-byTY0AAABqk"]
[Sat Aug 29 05:09:57.413187 2026] [security2:error] [pid 1321:tid 1573] [client 20.48.251.3:46538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/aww.php"] [unique_id "apK-BWjCPtor9NZ-byTY0QAABpA"]
[Sat Aug 29 05:09:57.414378 2026] [security2:error] [pid 1041789:tid 1041945] [client 74.248.24.12:10978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/403.php"] [unique_id "apK-BYv3RhPI65jTFG4BqAAAAyw"]
[Sat Aug 29 05:09:57.422551 2026] [security2:error] [pid 1321:tid 1529] [client 20.151.200.44:21809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/inject.php"] [unique_id "apK-BWjCPtor9NZ-byTY0gAABmU"]
[Sat Aug 29 05:09:57.432604 2026] [security2:error] [pid 1041789:tid 1042011] [client 52.139.37.240:13391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/asw.php"] [unique_id "apK-BYv3RhPI65jTFG4BqQAAA24"]
[Sat Aug 29 05:09:57.440873 2026] [security2:error] [pid 1321:tid 1591] [client 52.139.37.240:37906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bigbuttonscarf.com"] [uri "/add_actualites.php"] [unique_id "apK-BWjCPtor9NZ-byTY0wAABqI"]
[Sat Aug 29 05:09:57.484995 2026] [security2:error] [pid 1041789:tid 1041972] [client 4.205.62.107:4480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/wp-content/admin.php"] [unique_id "apK-BYv3RhPI65jTFG4BqwAAA0c"]
[Sat Aug 29 05:09:57.511789 2026] [security2:error] [pid 1321:tid 1533] [client 52.139.37.240:34164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/mini.php"] [unique_id "apK-BWjCPtor9NZ-byTY1QAABmk"]
[Sat Aug 29 05:09:57.515460 2026] [security2:error] [pid 1041789:tid 1041950] [client 4.205.62.107:60314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/hiquido.com/index.php"] [unique_id "apK-BYv3RhPI65jTFG4BrAAAAzE"]
[Sat Aug 29 05:09:57.518718 2026] [security2:error] [pid 1041789:tid 1042056] [client 40.83.93.50:17687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/alfa-rex.php"] [unique_id "apK-BYv3RhPI65jTFG4BrQAAA5s"]
[Sat Aug 29 05:09:57.537639 2026] [security2:error] [pid 1041789:tid 1041968] [client 158.23.184.117:12158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/wp-includes/Test.php"] [unique_id "apK-BYv3RhPI65jTFG4BrwAAA0M"]
[Sat Aug 29 05:09:57.541894 2026] [security2:error] [pid 1041789:tid 1042007] [client 20.48.251.3:46639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/ty.php"] [unique_id "apK-BYv3RhPI65jTFG4BsAAAA2o"]
[Sat Aug 29 05:09:57.550925 2026] [security2:error] [pid 1041789:tid 1041987] [client 158.23.184.117:21795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/.well-known/pki-validation/xmrlpc.php"] [unique_id "apK-BYv3RhPI65jTFG4BsQAAA1Y"]
[Sat Aug 29 05:09:57.551841 2026] [security2:error] [pid 1041789:tid 1041936] [client 158.23.147.79:5924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK-BYv3RhPI65jTFG4BsgAAAyM"]
[Sat Aug 29 05:09:57.553492 2026] [security2:error] [pid 1041789:tid 1042049] [client 4.205.62.107:6872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/php-details.php"] [unique_id "apK-BYv3RhPI65jTFG4BswAAA5Q"]
[Sat Aug 29 05:09:57.562594 2026] [security2:error] [pid 1321:tid 1564] [client 4.232.148.111:11912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-content/file.php"] [unique_id "apK-BWjCPtor9NZ-byTY1gAABoc"]
[Sat Aug 29 05:09:57.584947 2026] [security2:error] [pid 1041789:tid 1041941] [client 20.220.204.93:41850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/0byte.php"] [unique_id "apK-BYv3RhPI65jTFG4BtQAAAyg"]
[Sat Aug 29 05:09:57.607012 2026] [security2:error] [pid 1041789:tid 1041940] [client 68.155.159.216:30624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-admin/css/index.php"] [unique_id "apK-BYv3RhPI65jTFG4BtgAAAyc"]
[Sat Aug 29 05:09:57.635638 2026] [security2:error] [pid 1041789:tid 1041962] [client 20.220.204.93:55392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-BYv3RhPI65jTFG4BtwAAAz0"]
[Sat Aug 29 05:09:57.637822 2026] [security2:error] [pid 1041789:tid 1041995] [client 52.139.37.240:53882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bigbuttonscarf.com"] [uri "/browse.php"] [unique_id "apK-BYv3RhPI65jTFG4BuAAAA14"]
[Sat Aug 29 05:09:57.657307 2026] [security2:error] [pid 1041789:tid 1041982] [client 20.52.41.200:4669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-blog.php"] [unique_id "apK-BYv3RhPI65jTFG4BuQAAA1E"]
[Sat Aug 29 05:09:57.659971 2026] [security2:error] [pid 1321:tid 1560] [client 52.139.37.240:14144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/item.php"] [unique_id "apK-BWjCPtor9NZ-byTY1wAABoM"]
[Sat Aug 29 05:09:57.669405 2026] [security2:error] [pid 1321:tid 1530] [client 185.104.184.230:33454] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.bjx.okj.mybluehost.me"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "apK-BWjCPtor9NZ-byTY2AAABmY"]
[Sat Aug 29 05:09:57.671997 2026] [security2:error] [pid 1041789:tid 1041934] [client 20.48.251.3:46607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/grsiuk.php"] [unique_id "apK-BYv3RhPI65jTFG4BugAAAyE"]
[Sat Aug 29 05:09:57.683140 2026] [security2:error] [pid 1041789:tid 1041992] [client 158.23.184.117:11415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/wp-includes/pomo.php"] [unique_id "apK-BYv3RhPI65jTFG4BuwAAA1s"]
[Sat Aug 29 05:09:57.698552 2026] [security2:error] [pid 1041789:tid 1041998] [client 158.23.184.117:21646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/.well-known/security.php"] [unique_id "apK-BYv3RhPI65jTFG4BvAAAA2E"]
[Sat Aug 29 05:09:57.701556 2026] [security2:error] [pid 1041789:tid 1041975] [client 68.155.159.216:33747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-content/x.php"] [unique_id "apK-BYv3RhPI65jTFG4BvQAAA0o"]
[Sat Aug 29 05:09:57.706805 2026] [security2:error] [pid 1041789:tid 1041947] [client 52.139.37.240:34338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/v.php"] [unique_id "apK-BYv3RhPI65jTFG4BvgAAAy4"]
[Sat Aug 29 05:09:57.734580 2026] [security2:error] [pid 1041789:tid 1042037] [client 20.220.204.93:41800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/xr.php"] [unique_id "apK-BYv3RhPI65jTFG4BwAAAA4g"]
[Sat Aug 29 05:09:57.738150 2026] [security2:error] [pid 1321:tid 1566] [client 87.219.197.128:54989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK-BWjCPtor9NZ-byTY2QAABok"]
[Sat Aug 29 05:09:57.738452 2026] [security2:error] [pid 1321:tid 1566] [client 87.219.197.128:54989] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK-BWjCPtor9NZ-byTY2QAABok"]
[Sat Aug 29 05:09:57.798861 2026] [security2:error] [pid 1041789:tid 1042015] [client 20.220.204.93:55820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-BYv3RhPI65jTFG4BwgAAA3I"]
[Sat Aug 29 05:09:57.814335 2026] [security2:error] [pid 1041789:tid 1041939] [client 20.48.251.3:46632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/oiko6u.php"] [unique_id "apK-BYv3RhPI65jTFG4BxAAAAyY"]
[Sat Aug 29 05:09:57.835848 2026] [security2:error] [pid 1041789:tid 1041960] [client 52.139.37.240:65288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bigbuttonscarf.com"] [uri "/contentloader1.php"] [unique_id "apK-BYv3RhPI65jTFG4ByAAAAzs"]
[Sat Aug 29 05:09:57.837251 2026] [security2:error] [pid 1041789:tid 1042047] [client 68.155.159.216:49324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK-BYv3RhPI65jTFG4ByQAAA5I"]
[Sat Aug 29 05:09:57.843592 2026] [security2:error] [pid 1041789:tid 1041977] [client 158.23.184.117:21640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/.well-known/system.php"] [unique_id "apK-BYv3RhPI65jTFG4BygAAA0w"]
[Sat Aug 29 05:09:57.857297 2026] [security2:error] [pid 1041789:tid 1042043] [client 52.139.37.240:13389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/jga.php"] [unique_id "apK-BYv3RhPI65jTFG4BywAAA44"]
[Sat Aug 29 05:09:57.868563 2026] [security2:error] [pid 1041789:tid 1042005] [client 20.63.81.20:40017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/reop3.php"] [unique_id "apK-BYv3RhPI65jTFG4BzAAAA2g"]
[Sat Aug 29 05:09:57.883902 2026] [security2:error] [pid 1321:tid 1609] [client 68.155.159.216:64506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-admin/index.php"] [unique_id "apK-BWjCPtor9NZ-byTY2gAABrQ"]
[Sat Aug 29 05:09:57.891561 2026] [security2:error] [pid 1041789:tid 1041954] [client 68.155.159.216:52817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-admin/setup-config.php"] [unique_id "apK-BYv3RhPI65jTFG4BzgAAAzU"]
[Sat Aug 29 05:09:57.894050 2026] [security2:error] [pid 1041789:tid 1042031] [client 20.63.81.20:46451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/wp-includes/ID3/getid.php"] [unique_id "apK-BYv3RhPI65jTFG4BzwAAA4I"]
[Sat Aug 29 05:09:57.909743 2026] [security2:error] [pid 1041789:tid 1042040] [client 52.139.37.240:34122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK-BYv3RhPI65jTFG4B0AAAA4s"]
[Sat Aug 29 05:09:57.914160 2026] [http2:warn] [pid 1041789:tid 1042008] [client 57.141.14.71:47512] h2_stream(1041789-37-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:09:57.935492 2026] [security2:error] [pid 1321:tid 1614] [client 20.63.81.20:55571] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/codex.php"] [unique_id "apK-BWjCPtor9NZ-byTY2wAABrk"]
[Sat Aug 29 05:09:57.942911 2026] [security2:error] [pid 1041789:tid 1042041] [client 74.248.24.12:4302] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "myplumgraphics.com"] [uri "/1.php"] [unique_id "apK-BYv3RhPI65jTFG4B0QAAA4w"]
[Sat Aug 29 05:09:57.943027 2026] [security2:error] [pid 1041789:tid 1042041] [client 74.248.24.12:4302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/1.php"] [unique_id "apK-BYv3RhPI65jTFG4B0QAAA4w"]
[Sat Aug 29 05:09:57.943655 2026] [security2:error] [pid 1041789:tid 1041950] [client 158.23.184.117:11410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/wp-admin/link-add.php"] [unique_id "apK-BYv3RhPI65jTFG4B0gAAAzE"]
[Sat Aug 29 05:09:57.948160 2026] [security2:error] [pid 1041789:tid 1042056] [client 20.48.251.3:46554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/edit.php"] [unique_id "apK-BYv3RhPI65jTFG4B0wAAA5s"]
[Sat Aug 29 05:09:57.957111 2026] [security2:error] [pid 1041789:tid 1042007] [client 20.104.49.130:51342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/load.php"] [unique_id "apK-BYv3RhPI65jTFG4B1AAAA2o"]
[Sat Aug 29 05:09:57.972188 2026] [security2:error] [pid 1041789:tid 1042049] [client 185.104.184.230:33464] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.bjx.okj.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "apK-BYv3RhPI65jTFG4B1gAAA5Q"]
[Sat Aug 29 05:09:57.979690 2026] [security2:error] [pid 1321:tid 1602] [client 20.220.204.93:54608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/ff1.php"] [unique_id "apK-BWjCPtor9NZ-byTY3AAABq0"]
[Sat Aug 29 05:09:57.988675 2026] [security2:error] [pid 1041789:tid 1041812] [remote 94.154.172.8:49270] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "synapticstew.com"] [uri "/wp-content/plugins/s2member/readme.txt"] [unique_id "apK-BYv3RhPI65jTFG4B1wADeAo"]
[Sat Aug 29 05:09:57.988675 2026] [security2:error] [pid 1041789:tid 1041912] [remote 94.154.172.8:49276] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "synapticstew.com"] [uri "/wp-content/plugins/cimy-user-extra-fields/readme.txt"] [unique_id "apK-BYv3RhPI65jTFG4B2AADS24"]
[Sat Aug 29 05:09:58.003076 2026] [security2:error] [pid 1041789:tid 1041941] [client 20.63.81.20:39973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/wp-mail.php"] [unique_id "apK-Bov3RhPI65jTFG4B2QAAAyg"]
[Sat Aug 29 05:09:58.021988 2026] [security2:error] [pid 1041789:tid 1042045] [client 4.205.62.107:61648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/pinfo.php"] [unique_id "apK-Bov3RhPI65jTFG4B2wAAA5A"]
[Sat Aug 29 05:09:58.027779 2026] [security2:error] [pid 1321:tid 1501] [client 20.63.81.20:46213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/session.php"] [unique_id "apK-BmjCPtor9NZ-byTY3QAABkk"]
[Sat Aug 29 05:09:58.032008 2026] [security2:error] [pid 1041789:tid 1041936] [client 52.139.37.240:53870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bigbuttonscarf.com"] [uri "/upfile.php"] [unique_id "apK-Bov3RhPI65jTFG4B3AAAAyM"]
[Sat Aug 29 05:09:58.037106 2026] [security2:error] [pid 1041789:tid 1041956] [client 4.232.148.111:11965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/files.php"] [unique_id "apK-Bov3RhPI65jTFG4B3QAAAzc"]
[Sat Aug 29 05:09:58.071738 2026] [security2:error] [pid 1041789:tid 1042046] [client 52.139.37.240:13970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/mac.php"] [unique_id "apK-Bov3RhPI65jTFG4B3gAAA5E"]
[Sat Aug 29 05:09:58.079197 2026] [security2:error] [pid 1041789:tid 1042025] [client 20.48.251.3:46594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/gnmlc.php"] [unique_id "apK-Bov3RhPI65jTFG4B3wAAA3w"]
[Sat Aug 29 05:09:58.080019 2026] [security2:error] [pid 1041789:tid 1041995] [client 68.155.159.216:56575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-blog-header.php"] [unique_id "apK-Bov3RhPI65jTFG4B4AAAA14"]
[Sat Aug 29 05:09:58.081250 2026] [security2:error] [pid 1041789:tid 1041971] [client 20.63.81.20:55618] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/5656.php"] [unique_id "apK-Bov3RhPI65jTFG4B4QAAA0Y"]
[Sat Aug 29 05:09:58.095455 2026] [security2:error] [pid 1041789:tid 1041916] [remote 74.7.227.154:54326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK-Bov3RhPI65jTFG4B4gADUXI"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwp-easycart-pro%2Fadmin%2Ftemplate%2Fsettings%2Fpayments
[Sat Aug 29 05:09:58.099045 2026] [security2:error] [pid 1041789:tid 1041944] [client 40.83.93.50:15431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/cookie.php"] [unique_id "apK-Bov3RhPI65jTFG4B5AAAAys"]
[Sat Aug 29 05:09:58.105597 2026] [security2:error] [pid 1041789:tid 1041940] [client 52.139.37.240:34320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "apK-Bov3RhPI65jTFG4B5gAAAyc"]
[Sat Aug 29 05:09:58.110075 2026] [security2:error] [pid 1041789:tid 1041987] [client 20.52.41.200:4391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/xxx.php"] [unique_id "apK-Bov3RhPI65jTFG4B5wAAA1Y"]
[Sat Aug 29 05:09:58.111669 2026] [security2:error] [pid 1041789:tid 1041949] [client 158.23.147.79:55886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK-Bov3RhPI65jTFG4B6AAAAzA"]
[Sat Aug 29 05:09:58.133138 2026] [security2:error] [pid 1041789:tid 1041931] [client 20.63.81.20:40027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/wp-conffg.php"] [unique_id "apK-Bov3RhPI65jTFG4B6gAAAx4"]
[Sat Aug 29 05:09:58.138867 2026] [security2:error] [pid 1041789:tid 1042037] [client 20.220.204.93:55917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/t.php"] [unique_id "apK-Bov3RhPI65jTFG4B6wAAA4g"]
[Sat Aug 29 05:09:58.144341 2026] [security2:error] [pid 1321:tid 1584] [client 20.220.204.93:52234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/h02ugyh.php"] [unique_id "apK-BmjCPtor9NZ-byTY3gAABps"]
[Sat Aug 29 05:09:58.163125 2026] [security2:error] [pid 1321:tid 1497] [client 20.63.81.20:46463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/eagle.php"] [unique_id "apK-BmjCPtor9NZ-byTY3wAABkU"]
[Sat Aug 29 05:09:58.214764 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.48.251.3:46646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/wp-access.php"] [unique_id "apK-Bov3RhPI65jTFG4B7AAAA2Q"]
[Sat Aug 29 05:09:58.228628 2026] [security2:error] [pid 1041789:tid 1041957] [client 52.139.37.240:54185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bigbuttonscarf.com"] [uri "/form.php"] [unique_id "apK-Bov3RhPI65jTFG4B7QAAAzg"]
[Sat Aug 29 05:09:58.254728 2026] [security2:error] [pid 1321:tid 1571] [client 4.205.62.107:55965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/doc.php"] [unique_id "apK-BmjCPtor9NZ-byTY4AAABo4"]
[Sat Aug 29 05:09:58.268673 2026] [security2:error] [pid 1041789:tid 1042015] [client 52.139.37.240:13376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK-Bov3RhPI65jTFG4B7gAAA3I"]
[Sat Aug 29 05:09:58.278717 2026] [security2:error] [pid 1041789:tid 1042005] [client 185.104.184.230:33478] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.bjx.okj.mybluehost.me"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "apK-Bov3RhPI65jTFG4B7wAAA2g"]
[Sat Aug 29 05:09:58.278941 2026] [security2:error] [pid 1321:tid 1590] [client 20.220.204.93:55808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/erty.php"] [unique_id "apK-BmjCPtor9NZ-byTY4QAABqE"]
[Sat Aug 29 05:09:58.297884 2026] [security2:error] [pid 1041789:tid 1041954] [client 20.151.200.44:22172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/mga.php"] [unique_id "apK-Bov3RhPI65jTFG4B8gAAAzU"]
[Sat Aug 29 05:09:58.318847 2026] [security2:error] [pid 1321:tid 1513] [client 52.139.37.240:34133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-BmjCPtor9NZ-byTY4gAABlU"]
[Sat Aug 29 05:09:58.348362 2026] [security2:error] [pid 1321:tid 1535] [client 20.48.251.3:46579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/xda.php"] [unique_id "apK-BmjCPtor9NZ-byTY4wAABms"]
[Sat Aug 29 05:09:58.353893 2026] [security2:error] [pid 1041789:tid 1042011] [client 4.205.62.107:22514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/var/www/wallet/index.php"] [unique_id "apK-Bov3RhPI65jTFG4B9AAAA24"]
[Sat Aug 29 05:09:58.383451 2026] [security2:error] [pid 1041789:tid 1042040] [client 158.23.147.79:55240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-content/themes/too.php"] [unique_id "apK-Bov3RhPI65jTFG4B9QAAA4s"]
[Sat Aug 29 05:09:58.413789 2026] [security2:error] [pid 1321:tid 1554] [client 20.220.204.93:50736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/xxw.php"] [unique_id "apK-BmjCPtor9NZ-byTY5gAABn0"]
[Sat Aug 29 05:09:58.424788 2026] [security2:error] [pid 1041789:tid 1041935] [client 52.139.37.240:65296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bigbuttonscarf.com"] [uri "/wp-sigunq.php"] [unique_id "apK-Bov3RhPI65jTFG4B-AAAAyI"]
[Sat Aug 29 05:09:58.432111 2026] [security2:error] [pid 1041789:tid 1041967] [client 158.23.147.79:63809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK-Bov3RhPI65jTFG4B9wAAA0I"]
[Sat Aug 29 05:09:58.465428 2026] [security2:error] [pid 1041789:tid 1041972] [client 52.139.37.240:13967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK-Bov3RhPI65jTFG4B-QAAA0c"]
[Sat Aug 29 05:09:58.485143 2026] [security2:error] [pid 1321:tid 1489] [client 20.48.251.3:46531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/motu.php"] [unique_id "apK-BmjCPtor9NZ-byTY5wAABj0"]
[Sat Aug 29 05:09:58.491132 2026] [security2:error] [pid 1041789:tid 1042042] [client 20.104.49.130:53881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/ws45.php"] [unique_id "apK-Bov3RhPI65jTFG4B-wAAA40"]
[Sat Aug 29 05:09:58.513937 2026] [security2:error] [pid 1041789:tid 1041945] [client 4.232.148.111:27539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/o.php"] [unique_id "apK-Bov3RhPI65jTFG4B_AAAAyw"]
[Sat Aug 29 05:09:58.520807 2026] [cgid:error] [pid 1041789:tid 1042030] [client 52.139.37.240:34366] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/airviewc/public_html/404.shtml
[Sat Aug 29 05:09:58.523849 2026] [security2:error] [pid 1321:tid 1586] [client 20.220.204.93:54560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/0x.php"] [unique_id "apK-BmjCPtor9NZ-byTY6AAABp0"]
[Sat Aug 29 05:09:58.579832 2026] [security2:error] [pid 1321:tid 1527] [client 40.83.93.50:17680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/NewFile.php"] [unique_id "apK-BmjCPtor9NZ-byTY6QAABmM"]
[Sat Aug 29 05:09:58.584026 2026] [security2:error] [pid 1041789:tid 1041983] [client 52.139.37.240:34366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/wp-index.php"] [unique_id "apK-Bov3RhPI65jTFG4B_wAAA1I"]
[Sat Aug 29 05:09:58.590826 2026] [security2:error] [pid 1321:tid 1594] [client 185.104.184.230:42562] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.bjx.okj.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "apK-BmjCPtor9NZ-byTY6gAABqU"]
[Sat Aug 29 05:09:58.619919 2026] [security2:error] [pid 1041789:tid 1042010] [client 4.205.62.107:51489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/124.php"] [unique_id "apK-Bov3RhPI65jTFG4CAAAAA20"]
[Sat Aug 29 05:09:58.621608 2026] [security2:error] [pid 1041789:tid 1042021] [client 52.139.37.240:65331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bigbuttonscarf.com"] [uri "/07.php"] [unique_id "apK-Bov3RhPI65jTFG4CAQAAA3g"]
[Sat Aug 29 05:09:58.629607 2026] [security2:error] [pid 1321:tid 1526] [client 20.48.251.3:46532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/G-in.php"] [unique_id "apK-BmjCPtor9NZ-byTY6wAABmI"]
[Sat Aug 29 05:09:58.659396 2026] [security2:error] [pid 1321:tid 1604] [client 158.23.147.79:6077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK-BmjCPtor9NZ-byTY7QAABq8"]
[Sat Aug 29 05:09:58.661540 2026] [security2:error] [pid 1041789:tid 1041936] [client 4.205.62.107:62933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/ws79.php"] [unique_id "apK-Bov3RhPI65jTFG4CBQAAAyM"]
[Sat Aug 29 05:09:58.663265 2026] [security2:error] [pid 1041789:tid 1041956] [client 20.220.204.93:41845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/bolt.php"] [unique_id "apK-Bov3RhPI65jTFG4CBgAAAzc"]
[Sat Aug 29 05:09:58.664569 2026] [security2:error] [pid 1041789:tid 1041941] [client 52.139.37.240:14010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/zafir1.php"] [unique_id "apK-Bov3RhPI65jTFG4CBwAAAyg"]
[Sat Aug 29 05:09:58.704112 2026] [security2:error] [pid 1041789:tid 1041971] [client 4.205.62.107:6480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/routes.php"] [unique_id "apK-Bov3RhPI65jTFG4CCAAAA0Y"]
[Sat Aug 29 05:09:58.713936 2026] [security2:error] [pid 1041789:tid 1041997] [client 68.155.159.216:30657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK-Bov3RhPI65jTFG4CCQAAA2A"]
[Sat Aug 29 05:09:58.754648 2026] [security2:error] [pid 1041789:tid 1041978] [client 20.151.200.44:21813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/inwp.php"] [unique_id "apK-Bov3RhPI65jTFG4CCwAAA00"]
[Sat Aug 29 05:09:58.758778 2026] [security2:error] [pid 1041789:tid 1041949] [client 20.48.251.3:46654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/classsmtps.php"] [unique_id "apK-Bov3RhPI65jTFG4CDAAAAzA"]
[Sat Aug 29 05:09:58.763519 2026] [security2:error] [pid 1321:tid 1508] [client 20.220.204.93:55861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/66.php"] [unique_id "apK-BmjCPtor9NZ-byTY7gAABlA"]
[Sat Aug 29 05:09:58.781079 2026] [security2:error] [pid 1041789:tid 1042013] [client 52.139.37.240:34360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/ww2.php"] [unique_id "apK-Bov3RhPI65jTFG4CDgAAA3A"]
[Sat Aug 29 05:09:58.820116 2026] [security2:error] [pid 1041789:tid 1041934] [client 52.139.37.240:65281] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "bigbuttonscarf.com"] [uri "/c99.php"] [unique_id "apK-Bov3RhPI65jTFG4CEAAAAyE"]
[Sat Aug 29 05:09:58.844122 2026] [security2:error] [pid 1041789:tid 1042028] [client 68.155.159.216:33560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK-Bov3RhPI65jTFG4CEwAAA38"]
[Sat Aug 29 05:09:58.854731 2026] [security2:error] [pid 1041789:tid 1042020] [client 20.220.204.93:50719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/rtx.php"] [unique_id "apK-Bov3RhPI65jTFG4CFAAAA3c"]
[Sat Aug 29 05:09:58.861245 2026] [security2:error] [pid 1041789:tid 1042052] [client 52.139.37.240:13390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/abc.php"] [unique_id "apK-Bov3RhPI65jTFG4CFQAAA5c"]
[Sat Aug 29 05:09:58.887830 2026] [security2:error] [pid 1041789:tid 1041969] [client 20.52.41.200:4354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/tool.php"] [unique_id "apK-Bov3RhPI65jTFG4CFgAAA0Q"]
[Sat Aug 29 05:09:58.888225 2026] [security2:error] [pid 1041789:tid 1042035] [client 20.48.251.3:46647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/tax.php"] [unique_id "apK-Bov3RhPI65jTFG4CFwAAA4Y"]
[Sat Aug 29 05:09:58.893695 2026] [security2:error] [pid 1041789:tid 1041948] [client 185.104.184.230:42564] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.bjx.okj.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "apK-Bov3RhPI65jTFG4CGAAAAy8"]
[Sat Aug 29 05:09:58.908797 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.220.204.93:55304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/f35.php"] [unique_id "apK-Bov3RhPI65jTFG4CGQAAA2Q"]
[Sat Aug 29 05:09:58.917925 2026] [security2:error] [pid 1041789:tid 1042032] [client 74.248.24.12:10959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/s.php"] [unique_id "apK-Bov3RhPI65jTFG4CGgAAA4M"]
[Sat Aug 29 05:09:58.951133 2026] [security2:error] [pid 1041789:tid 1041946] [client 52.139.37.240:16113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lbttech.com"] [uri "/aged.php"] [unique_id "apK-Bov3RhPI65jTFG4CHAAAAy0"]
[Sat Aug 29 05:09:58.951151 2026] [security2:error] [pid 1041789:tid 1042043] [client 68.155.159.216:49252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/ans.php"] [unique_id "apK-Bov3RhPI65jTFG4CGwAAA44"]
[Sat Aug 29 05:09:58.975908 2026] [security2:error] [pid 1041789:tid 1041931] [client 4.232.148.111:11943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/file2.php"] [unique_id "apK-Bov3RhPI65jTFG4CHQAAAx4"]
[Sat Aug 29 05:09:58.977898 2026] [security2:error] [pid 1321:tid 1608] [client 158.23.147.79:59484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-admin/dropdown.php"] [unique_id "apK-BmjCPtor9NZ-byTY8AAABrM"]
[Sat Aug 29 05:09:58.985476 2026] [security2:error] [pid 1041789:tid 1041954] [client 20.151.200.44:22185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/ad1.php"] [unique_id "apK-Bov3RhPI65jTFG4CHgAAAzU"]
[Sat Aug 29 05:09:58.986567 2026] [security2:error] [pid 1321:tid 1569] [client 68.155.159.216:63862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK-BmjCPtor9NZ-byTY8QAABow"]
[Sat Aug 29 05:09:58.990233 2026] [security2:error] [pid 1041789:tid 1041939] [client 52.139.37.240:34347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/7logs.php"] [unique_id "apK-Bov3RhPI65jTFG4CHwAAAyY"]
[Sat Aug 29 05:09:59.015489 2026] [security2:error] [pid 1041789:tid 1042011] [client 68.155.159.216:14284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/lv.php"] [unique_id "apK-B4v3RhPI65jTFG4CIAAAA24"]
[Sat Aug 29 05:09:59.019617 2026] [security2:error] [pid 1041789:tid 1042015] [client 52.139.37.240:54194] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "bigbuttonscarf.com"] [uri "/c99.php"] [unique_id "apK-B4v3RhPI65jTFG4CIgAAA3I"]
[Sat Aug 29 05:09:59.024122 2026] [security2:error] [pid 1041789:tid 1042044] [client 20.48.251.3:46628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/themes.php"] [unique_id "apK-B4v3RhPI65jTFG4CIwAAA48"]
[Sat Aug 29 05:09:59.027386 2026] [security2:error] [pid 1321:tid 1600] [client 20.220.204.93:41797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/ckk.php"] [unique_id "apK-B2jCPtor9NZ-byTY9QAABqs"]
[Sat Aug 29 05:09:59.039397 2026] [security2:error] [pid 1321:tid 1597] [client 68.155.159.216:9241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK-B2jCPtor9NZ-byTY-AAABqg"]
[Sat Aug 29 05:09:59.042637 2026] [security2:error] [pid 1041789:tid 1041967] [client 68.155.159.216:18320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK-B4v3RhPI65jTFG4CJQAAA0I"]
[Sat Aug 29 05:09:59.057590 2026] [security2:error] [pid 1321:tid 1536] [client 52.139.37.240:13982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/c1.php"] [unique_id "apK-B2jCPtor9NZ-byTY-gAABmw"]
[Sat Aug 29 05:09:59.088152 2026] [security2:error] [pid 1041789:tid 1042053] [client 197.219.150.206:54651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK-B4v3RhPI65jTFG4CJwAAA5g"]
[Sat Aug 29 05:09:59.088281 2026] [security2:error] [pid 1041789:tid 1042053] [client 197.219.150.206:54651] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK-B4v3RhPI65jTFG4CJwAAA5g"]
[Sat Aug 29 05:09:59.095767 2026] [security2:error] [pid 1041789:tid 1041981] [client 40.83.93.50:17894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/config.php"] [unique_id "apK-B4v3RhPI65jTFG4CKAAAA1A"]
[Sat Aug 29 05:09:59.119086 2026] [security2:error] [pid 1041789:tid 1041880] [remote 74.7.227.189:35568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 189.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pinnacleforms.com"] [uri "/pDBbyLatLon.php"] [unique_id "apK-B4v3RhPI65jTFG4CKQADQE4"], referer: https://mail.pinnacleforms.com/
[Sat Aug 29 05:09:59.126125 2026] [security2:error] [pid 1041789:tid 1041945] [client 20.220.204.93:55879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/wen.php"] [unique_id "apK-B4v3RhPI65jTFG4CKgAAAyw"]
[Sat Aug 29 05:09:59.148493 2026] [security2:error] [pid 1041789:tid 1042048] [client 52.139.37.240:16109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lbttech.com"] [uri "/essexec.php"] [unique_id "apK-B4v3RhPI65jTFG4CKwAAA5M"]
[Sat Aug 29 05:09:59.154947 2026] [security2:error] [pid 1041789:tid 1042041] [client 20.48.251.3:46566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/tinyfilemanager.php"] [unique_id "apK-B4v3RhPI65jTFG4CLAAAA4w"]
[Sat Aug 29 05:09:59.155063 2026] [security2:error] [pid 1321:tid 1589] [client 68.155.159.216:62724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-B2jCPtor9NZ-byTY-wAABqA"]
[Sat Aug 29 05:09:59.168514 2026] [security2:error] [pid 1041789:tid 1042010] [client 4.205.62.107:63956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/X57.php"] [unique_id "apK-B4v3RhPI65jTFG4CLQAAA20"]
[Sat Aug 29 05:09:59.184947 2026] [security2:error] [pid 1041789:tid 1041963] [client 68.155.159.216:38583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK-B4v3RhPI65jTFG4CLgAAAz4"]
[Sat Aug 29 05:09:59.201691 2026] [security2:error] [pid 1041789:tid 1042055] [client 52.139.37.240:34356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/ac.php"] [unique_id "apK-B4v3RhPI65jTFG4CLwAAA5o"]
[Sat Aug 29 05:09:59.209541 2026] [security2:error] [pid 1041789:tid 1042046] [client 20.63.81.20:51302] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/w3lls.php"] [unique_id "apK-B4v3RhPI65jTFG4CMQAAA5E"]
[Sat Aug 29 05:09:59.219061 2026] [security2:error] [pid 1041789:tid 1041976] [client 52.139.37.240:65324] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "bigbuttonscarf.com"] [uri "/c99.php"] [unique_id "apK-B4v3RhPI65jTFG4CMgAAA0s"]
[Sat Aug 29 05:09:59.252453 2026] [security2:error] [pid 1041789:tid 1041944] [client 20.220.204.93:50737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.lexusdealership.com"] [uri "/R57.php"] [unique_id "apK-B4v3RhPI65jTFG4CMwAAAys"]
[Sat Aug 29 05:09:59.254945 2026] [security2:error] [pid 1041789:tid 1041936] [client 52.139.37.240:13987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/index.php/feed/atom/"] [unique_id "apK-B4v3RhPI65jTFG4CNAAAAyM"]
[Sat Aug 29 05:09:59.274230 2026] [security2:error] [pid 1041789:tid 1042045] [client 20.63.81.20:39885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/filefuns.php"] [unique_id "apK-B4v3RhPI65jTFG4CNQAAA5A"]
[Sat Aug 29 05:09:59.303776 2026] [security2:error] [pid 1041789:tid 1042013] [client 20.48.251.3:46630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/min.php"] [unique_id "apK-B4v3RhPI65jTFG4CNgAAA3A"]
[Sat Aug 29 05:09:59.330431 2026] [security2:error] [pid 1041789:tid 1041947] [client 158.23.147.79:11393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK-B4v3RhPI65jTFG4CNwAAAy4"]
[Sat Aug 29 05:09:59.337833 2026] [security2:error] [pid 1321:tid 1524] [client 20.220.204.93:54589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/inc.php"] [unique_id "apK-B2jCPtor9NZ-byTY_wAABmA"]
[Sat Aug 29 05:09:59.343208 2026] [security2:error] [pid 1321:tid 1532] [client 52.139.37.240:16126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lbttech.com"] [uri "/fw.php"] [unique_id "apK-B2jCPtor9NZ-byTZAQAABmg"]
[Sat Aug 29 05:09:59.345412 2026] [security2:error] [pid 1321:tid 1500] [client 20.52.41.200:4634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/k.php"] [unique_id "apK-B2jCPtor9NZ-byTZAgAABkg"]
[Sat Aug 29 05:09:59.397403 2026] [security2:error] [pid 1041789:tid 1041933] [client 52.139.37.240:34139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/ctex1.php"] [unique_id "apK-B4v3RhPI65jTFG4COgAAAyA"]
[Sat Aug 29 05:09:59.397621 2026] [security2:error] [pid 1041789:tid 1042035] [client 4.205.62.107:55991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/classsmtps.php"] [unique_id "apK-B4v3RhPI65jTFG4COwAAA4Y"]
[Sat Aug 29 05:09:59.401862 2026] [security2:error] [pid 1041789:tid 1041948] [client 20.104.49.130:45752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/wsd.php"] [unique_id "apK-B4v3RhPI65jTFG4CPAAAAy8"]
[Sat Aug 29 05:09:59.405279 2026] [security2:error] [pid 1041789:tid 1041980] [client 68.155.159.216:1997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-admin/index.php"] [unique_id "apK-B4v3RhPI65jTFG4CPQAAA08"]
[Sat Aug 29 05:09:59.407586 2026] [security2:error] [pid 1041789:tid 1041809] [remote 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK-B4v3RhPI65jTFG4CPgADRgc"]
[Sat Aug 29 05:09:59.407708 2026] [security2:error] [pid 1041789:tid 1041971] [client 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK-B4v3RhPI65jTFG4CPgADRgc"]
[Sat Aug 29 05:09:59.414986 2026] [security2:error] [pid 1041789:tid 1041991] [client 52.139.37.240:54196] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "bigbuttonscarf.com"] [uri "/c99.php"] [unique_id "apK-B4v3RhPI65jTFG4CPwAAA1o"]
[Sat Aug 29 05:09:59.432619 2026] [security2:error] [pid 1321:tid 1587] [client 20.48.251.3:46552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/cache-compat.php"] [unique_id "apK-B2jCPtor9NZ-byTZBwAABp4"]
[Sat Aug 29 05:09:59.435650 2026] [security2:error] [pid 1041789:tid 1041940] [client 74.248.24.12:4363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/test1.php"] [unique_id "apK-B4v3RhPI65jTFG4CQAAAAyc"]
[Sat Aug 29 05:09:59.440996 2026] [security2:error] [pid 1041789:tid 1041949] [client 4.232.148.111:27545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK-B4v3RhPI65jTFG4CQQAAAzA"]
[Sat Aug 29 05:09:59.444499 2026] [security2:error] [pid 1321:tid 1565] [client 68.155.159.216:33655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-content/index.php"] [unique_id "apK-B2jCPtor9NZ-byTZCAAABog"]
[Sat Aug 29 05:09:59.452263 2026] [security2:error] [pid 1041789:tid 1042006] [client 52.139.37.240:13385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/root.php"] [unique_id "apK-B4v3RhPI65jTFG4CQgAAA2k"]
[Sat Aug 29 05:09:59.471863 2026] [security2:error] [pid 1321:tid 1592] [client 20.151.200.44:63717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/1vbqo.php"] [unique_id "apK-B2jCPtor9NZ-byTZCQAABqM"]
[Sat Aug 29 05:09:59.488849 2026] [security2:error] [pid 1321:tid 1563] [client 158.23.147.79:55237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/radio.php"] [unique_id "apK-B2jCPtor9NZ-byTZCgAABoY"]
[Sat Aug 29 05:09:59.517007 2026] [core:error] [pid 1321:tid 1529] [client 34.50.189.51:2206] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:59.517024 2026] [core:error] [pid 1321:tid 1529] [client 34.50.189.51:2206] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:59.519975 2026] [security2:error] [pid 1041789:tid 1042000] [client 34.50.189.51:2268] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/@fs/usr/src/app/.env"] [unique_id "apK-B4v3RhPI65jTFG4CRAAAA2M"]
[Sat Aug 29 05:09:59.519976 2026] [security2:error] [pid 1041789:tid 1041942] [client 34.50.189.51:2266] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/@fs/var/www/html/.env"] [unique_id "apK-B4v3RhPI65jTFG4CQwAAAyk"]
[Sat Aug 29 05:09:59.521401 2026] [security2:error] [pid 1321:tid 1499] [client 34.50.189.51:2242] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/@fs/home/ubuntu/.env"] [unique_id "apK-B2jCPtor9NZ-byTZDwAABkc"]
[Sat Aug 29 05:09:59.521507 2026] [security2:error] [pid 1321:tid 1499] [client 34.50.189.51:2242] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "discocollective.kriveloff-associates.com"] [uri "/@fs/home/ubuntu/.env"] [unique_id "apK-B2jCPtor9NZ-byTZDwAABkc"]
[Sat Aug 29 05:09:59.522082 2026] [core:error] [pid 1321:tid 1518] [client 34.50.189.51:2256] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:59.522091 2026] [core:error] [pid 1321:tid 1518] [client 34.50.189.51:2256] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:59.522127 2026] [core:error] [pid 1321:tid 1505] [client 34.50.189.51:2264] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:59.522134 2026] [core:error] [pid 1321:tid 1505] [client 34.50.189.51:2264] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:59.522197 2026] [core:error] [pid 1321:tid 1610] [client 34.50.189.51:2278] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:59.522205 2026] [core:error] [pid 1321:tid 1610] [client 34.50.189.51:2278] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:59.522285 2026] [security2:error] [pid 1321:tid 1610] [client 34.50.189.51:2278] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "discocollective.kriveloff-associates.com"] [uri "/index.php"] [unique_id "apK-B2jCPtor9NZ-byTZDgAABrU"]
[Sat Aug 29 05:09:59.523540 2026] [security2:error] [pid 1321:tid 1511] [client 34.50.189.51:2230] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/@fs/var/www/.env"] [unique_id "apK-B2jCPtor9NZ-byTZEAAABlM"]
[Sat Aug 29 05:09:59.526915 2026] [core:error] [pid 1321:tid 1533] [client 34.50.189.51:2216] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:59.526926 2026] [core:error] [pid 1321:tid 1533] [client 34.50.189.51:2216] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:59.535056 2026] [core:error] [pid 1041789:tid 1041967] [client 34.50.189.51:2266] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:59.535069 2026] [core:error] [pid 1041789:tid 1041967] [client 34.50.189.51:2266] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:59.535224 2026] [core:error] [pid 1041789:tid 1042056] [client 34.50.189.51:2268] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:59.535236 2026] [core:error] [pid 1041789:tid 1042056] [client 34.50.189.51:2268] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:59.536011 2026] [security2:error] [pid 1041789:tid 1042051] [client 4.205.62.107:22523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/124.php"] [unique_id "apK-B4v3RhPI65jTFG4CSQAAA5Y"]
[Sat Aug 29 05:09:59.536028 2026] [security2:error] [pid 1041789:tid 1041931] [client 52.139.37.240:16091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lbttech.com"] [uri "/zwso.php"] [unique_id "apK-B4v3RhPI65jTFG4CSAAAAx4"]
[Sat Aug 29 05:09:59.537076 2026] [core:error] [pid 1321:tid 1539] [client 34.50.189.51:2242] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:59.537091 2026] [core:error] [pid 1321:tid 1539] [client 34.50.189.51:2242] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:59.538096 2026] [security2:error] [pid 1321:tid 1553] [client 158.23.147.79:61382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-content/cong.php"] [unique_id "apK-B2jCPtor9NZ-byTZFAAABnw"]
[Sat Aug 29 05:09:59.542230 2026] [core:error] [pid 1041789:tid 1042037] [client 34.50.189.51:2280] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:59.542244 2026] [core:error] [pid 1041789:tid 1042037] [client 34.50.189.51:2280] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:09:59.543704 2026] [security2:error] [pid 1041789:tid 1041972] [client 20.104.49.130:60983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/users.php"] [unique_id "apK-B4v3RhPI65jTFG4CTAAAA0c"]
[Sat Aug 29 05:09:59.544465 2026] [security2:error] [pid 1041789:tid 1042044] [client 34.50.189.51:2304] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "discocollective.kriveloff-associates.com"] [uri "/cgi-sys/404.html"] [unique_id "apK-B4v3RhPI65jTFG4CSwAAA48"]
[Sat Aug 29 05:09:59.551651 2026] [security2:error] [pid 1041789:tid 1042019] [client 103.185.242.143:57913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-B4v3RhPI65jTFG4CTQAAA3Y"]
[Sat Aug 29 05:09:59.551735 2026] [security2:error] [pid 1041789:tid 1042019] [client 103.185.242.143:57913] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-B4v3RhPI65jTFG4CTQAAA3Y"]
[Sat Aug 29 05:09:59.565744 2026] [security2:error] [pid 1041789:tid 1041945] [client 20.48.251.3:46553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/fff.php"] [unique_id "apK-B4v3RhPI65jTFG4CTgAAAyw"]
[Sat Aug 29 05:09:59.584785 2026] [security2:error] [pid 1041789:tid 1041990] [client 40.83.93.50:17669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/22.php"] [unique_id "apK-B4v3RhPI65jTFG4CTwAAA1k"]
[Sat Aug 29 05:09:59.588289 2026] [security2:error] [pid 1041789:tid 1042015] [client 52.139.37.240:34114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/defaults.php"] [unique_id "apK-B4v3RhPI65jTFG4CUAAAA3I"]
[Sat Aug 29 05:09:59.598503 2026] [security2:error] [pid 1321:tid 1537] [client 20.104.49.130:57473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/ws58.php"] [unique_id "apK-B2jCPtor9NZ-byTZFgAABm0"]
[Sat Aug 29 05:09:59.601160 2026] [security2:error] [pid 1321:tid 1613] [client 20.220.204.93:55309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/6bcwiqwj.php"] [unique_id "apK-B2jCPtor9NZ-byTZFwAABrg"]
[Sat Aug 29 05:09:59.608248 2026] [security2:error] [pid 1321:tid 1590] [client 68.155.159.216:64072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-content/banners/about.php"] [unique_id "apK-B2jCPtor9NZ-byTZGAAABqE"]
[Sat Aug 29 05:09:59.674362 2026] [security2:error] [pid 1041789:tid 1042047] [client 52.139.37.240:13396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/shell.php"] [unique_id "apK-B4v3RhPI65jTFG4CUwAAA5I"]
[Sat Aug 29 05:09:59.702471 2026] [security2:error] [pid 1321:tid 1502] [client 20.48.251.3:46536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/sadd.php"] [unique_id "apK-B2jCPtor9NZ-byTZGQAABko"]
[Sat Aug 29 05:09:59.734420 2026] [security2:error] [pid 1321:tid 1554] [client 52.139.37.240:16124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lbttech.com"] [uri "/admin/function.php"] [unique_id "apK-B2jCPtor9NZ-byTZGgAABn0"]
[Sat Aug 29 05:09:59.763134 2026] [security2:error] [pid 1041789:tid 1042049] [client 4.205.62.107:4957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/cu.php"] [unique_id "apK-B4v3RhPI65jTFG4CVgAAA5Q"]
[Sat Aug 29 05:09:59.764218 2026] [security2:error] [pid 1321:tid 1611] [client 195.178.110.247:40870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lynxsocial.com"] [uri "/index.php"] [unique_id "apK-B2jCPtor9NZ-byTZGwAABrY"]
[Sat Aug 29 05:09:59.766128 2026] [security2:error] [pid 1041789:tid 1042028] [client 158.23.147.79:5952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/images/index.php"] [unique_id "apK-B4v3RhPI65jTFG4CVwAAA38"]
[Sat Aug 29 05:09:59.781124 2026] [security2:error] [pid 1041789:tid 1042013] [client 52.139.37.240:34311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/domains.php"] [unique_id "apK-B4v3RhPI65jTFG4CWAAAA3A"]
[Sat Aug 29 05:09:59.796261 2026] [security2:error] [pid 1321:tid 1593] [client 20.52.41.200:4632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/root.php"] [unique_id "apK-B2jCPtor9NZ-byTZHAAABqQ"]
[Sat Aug 29 05:09:59.798628 2026] [security2:error] [pid 1041789:tid 1041971] [client 4.205.62.107:62921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/public/wp-blog.php"] [unique_id "apK-B4v3RhPI65jTFG4CWQAAA0Y"]
[Sat Aug 29 05:09:59.822022 2026] [security2:error] [pid 1041789:tid 1042026] [client 68.155.159.216:30625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-includes/index.php"] [unique_id "apK-B4v3RhPI65jTFG4CWgAAA30"]
[Sat Aug 29 05:09:59.839964 2026] [security2:error] [pid 1041789:tid 1041957] [client 20.151.200.44:63758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/h02ugyh.php"] [unique_id "apK-B4v3RhPI65jTFG4CXAAAAzg"]
[Sat Aug 29 05:09:59.840042 2026] [security2:error] [pid 1041789:tid 1041949] [client 20.48.251.3:46565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/app_dev.php"] [unique_id "apK-B4v3RhPI65jTFG4CWwAAAzA"]
[Sat Aug 29 05:09:59.854343 2026] [security2:error] [pid 1041789:tid 1041946] [client 4.205.62.107:6854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/aww.php"] [unique_id "apK-B4v3RhPI65jTFG4CXQAAAy0"]
[Sat Aug 29 05:09:59.869288 2026] [security2:error] [pid 1041789:tid 1041987] [client 52.139.37.240:14153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK-B4v3RhPI65jTFG4CXgAAA1Y"]
[Sat Aug 29 05:09:59.912257 2026] [access_compat:error] [pid 1321:tid 1544] [client 67.20.76.220:13672] AH01797: client denied by server configuration: /home4/eastacar/public_html/djiboutifresh/wp-cron.php
[Sat Aug 29 05:09:59.915709 2026] [security2:error] [pid 1041789:tid 1041962] [client 4.232.148.111:19564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/xda.php"] [unique_id "apK-B4v3RhPI65jTFG4CYAAAAz0"]
[Sat Aug 29 05:09:59.932454 2026] [security2:error] [pid 1041789:tid 1042017] [client 52.139.37.240:16083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lbttech.com"] [uri "/zoom1.php"] [unique_id "apK-B4v3RhPI65jTFG4CYwAAA3Q"]
[Sat Aug 29 05:09:59.933448 2026] [security2:error] [pid 1041789:tid 1042023] [client 195.178.110.247:44998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.lynxsocial.com"] [uri "/index.php"] [unique_id "apK-B4v3RhPI65jTFG4CZAAAA3o"]
[Sat Aug 29 05:09:59.948939 2026] [security2:error] [pid 1041789:tid 1041969] [client 74.248.24.12:4295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/ws.php"] [unique_id "apK-B4v3RhPI65jTFG4CZQAAA0Q"]
[Sat Aug 29 05:09:59.969285 2026] [security2:error] [pid 1041789:tid 1041981] [client 20.48.251.3:46649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/thui.php"] [unique_id "apK-B4v3RhPI65jTFG4CZwAAA1A"]
[Sat Aug 29 05:09:59.977922 2026] [security2:error] [pid 1321:tid 1558] [client 52.139.37.240:34345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/dropdown.php"] [unique_id "apK-B2jCPtor9NZ-byTZHgAABoE"]
[Sat Aug 29 05:10:00.009083 2026] [security2:error] [pid 1321:tid 1515] [client 20.104.49.130:48806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/sd.php"] [unique_id "apK-CGjCPtor9NZ-byTZHwAABlc"]
[Sat Aug 29 05:10:00.060514 2026] [security2:error] [pid 1041789:tid 1042048] [client 68.155.159.216:49322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/worksec.php"] [unique_id "apK-CIv3RhPI65jTFG4CawAAA5M"]
[Sat Aug 29 05:10:00.067833 2026] [security2:error] [pid 1041789:tid 1041965] [client 52.139.37.240:14006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/wp-content/plugins/linkpreview/il.php"] [unique_id "apK-CIv3RhPI65jTFG4CbAAAA0A"]
[Sat Aug 29 05:10:00.085771 2026] [security2:error] [pid 1041789:tid 1041968] [client 158.23.147.79:60124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/login.php"] [unique_id "apK-CIv3RhPI65jTFG4CbgAAA0M"]
[Sat Aug 29 05:10:00.094819 2026] [security2:error] [pid 1041789:tid 1042021] [client 20.220.204.93:55892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/easy.php"] [unique_id "apK-CIv3RhPI65jTFG4CbwAAA3g"]
[Sat Aug 29 05:10:00.097860 2026] [security2:error] [pid 1041789:tid 1041963] [client 20.151.200.44:63680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/shelp.php"] [unique_id "apK-CIv3RhPI65jTFG4CcAAAAz4"]
[Sat Aug 29 05:10:00.108501 2026] [security2:error] [pid 1041789:tid 1042055] [client 20.48.251.3:46569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/session.php"] [unique_id "apK-CIv3RhPI65jTFG4CcQAAA5o"]
[Sat Aug 29 05:10:00.110999 2026] [core:error] [pid 1321:tid 1543] [client 20.203.141.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:00.111013 2026] [core:error] [pid 1321:tid 1543] [client 20.203.141.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:00.120428 2026] [security2:error] [pid 1321:tid 1569] [client 40.83.93.50:18301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/bak.phps"] [unique_id "apK-CGjCPtor9NZ-byTZJAAABow"]
[Sat Aug 29 05:10:00.128061 2026] [security2:error] [pid 1041789:tid 1042041] [client 52.139.37.240:16094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lbttech.com"] [uri "/about.php7"] [unique_id "apK-CIv3RhPI65jTFG4CcgAAA4w"]
[Sat Aug 29 05:10:00.155316 2026] [security2:error] [pid 1321:tid 1496] [client 68.155.159.216:14211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-CGjCPtor9NZ-byTZJQAABkQ"]
[Sat Aug 29 05:10:00.185438 2026] [security2:error] [pid 1041789:tid 1041976] [client 52.139.37.240:34332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/files/index.php"] [unique_id "apK-CIv3RhPI65jTFG4CdAAAA0s"]
[Sat Aug 29 05:10:00.223849 2026] [security2:error] [pid 1041789:tid 1042014] [client 158.23.147.79:53976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/makeasmtp.php"] [unique_id "apK-CIv3RhPI65jTFG4CdwAAA3E"]
[Sat Aug 29 05:10:00.247089 2026] [security2:error] [pid 1041789:tid 1042009] [client 20.52.41.200:4394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/p.php"] [unique_id "apK-CIv3RhPI65jTFG4CeAAAA2w"]
[Sat Aug 29 05:10:00.253378 2026] [security2:error] [pid 1041789:tid 1041979] [client 20.48.251.3:46568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/saml.php"] [unique_id "apK-CIv3RhPI65jTFG4CeQAAA04"]
[Sat Aug 29 05:10:00.270224 2026] [security2:error] [pid 1321:tid 1542] [client 52.139.37.240:13397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/wp-header-json.php"] [unique_id "apK-CGjCPtor9NZ-byTZJwAABnI"]
[Sat Aug 29 05:10:00.284712 2026] [security2:error] [pid 1041789:tid 1042033] [client 68.155.159.216:62790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-CIv3RhPI65jTFG4CegAAA4Q"]
[Sat Aug 29 05:10:00.300867 2026] [security2:error] [pid 1041789:tid 1042035] [client 4.205.62.107:63924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/register.php"] [unique_id "apK-CIv3RhPI65jTFG4CewAAA4Y"]
[Sat Aug 29 05:10:00.310346 2026] [security2:error] [pid 1041789:tid 1041948] [client 68.155.159.216:23512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-content/admin.php"] [unique_id "apK-CIv3RhPI65jTFG4CfAAAAy8"]
[Sat Aug 29 05:10:00.329833 2026] [security2:error] [pid 1041789:tid 1042045] [client 52.139.37.240:16075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lbttech.com"] [uri "/cron.php"] [unique_id "apK-CIv3RhPI65jTFG4CfQAAA5A"]
[Sat Aug 29 05:10:00.350115 2026] [security2:error] [pid 1041789:tid 1041991] [client 20.220.204.93:55419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/fresh3.php"] [unique_id "apK-CIv3RhPI65jTFG4CfgAAA1o"]
[Sat Aug 29 05:10:00.357403 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.151.200.44:22190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/13ede.php"] [unique_id "apK-CIv3RhPI65jTFG4CfwAAA30"]
[Sat Aug 29 05:10:00.391033 2026] [security2:error] [pid 1041789:tid 1041957] [client 20.48.251.3:46576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/aws_settings.php"] [unique_id "apK-CIv3RhPI65jTFG4CgAAAAzg"]
[Sat Aug 29 05:10:00.405496 2026] [security2:error] [pid 1041789:tid 1042013] [client 52.139.37.240:34367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.airviewconcept.com"] [uri "/flower.php"] [unique_id "apK-CIv3RhPI65jTFG4CgQAAA3A"]
[Sat Aug 29 05:10:00.410414 2026] [security2:error] [pid 1041789:tid 1041998] [client 4.232.148.111:1394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/theme.php"] [unique_id "apK-CIv3RhPI65jTFG4CggAAA2E"]
[Sat Aug 29 05:10:00.412552 2026] [security2:error] [pid 1041789:tid 1041946] [client 158.23.147.79:14295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/file.php"] [unique_id "apK-CIv3RhPI65jTFG4CgwAAAy0"]
[Sat Aug 29 05:10:00.463068 2026] [security2:error] [pid 1321:tid 1559] [client 103.48.146.148:64029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 148.146.48.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK-CGjCPtor9NZ-byTZKAAABoI"]
[Sat Aug 29 05:10:00.463211 2026] [security2:error] [pid 1321:tid 1559] [client 103.48.146.148:64029] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK-CGjCPtor9NZ-byTZKAAABoI"]
[Sat Aug 29 05:10:00.470927 2026] [security2:error] [pid 1041789:tid 1042052] [client 74.248.24.12:10979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-themes.php"] [unique_id "apK-CIv3RhPI65jTFG4ChAAAA5c"]
[Sat Aug 29 05:10:00.480504 2026] [security2:error] [pid 1321:tid 1500] [client 158.23.147.79:11271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-admin/network/index.php"] [unique_id "apK-CGjCPtor9NZ-byTZKQAABkg"]
[Sat Aug 29 05:10:00.486287 2026] [security2:error] [pid 1041789:tid 1042043] [client 52.139.37.240:14009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/zup.php"] [unique_id "apK-CIv3RhPI65jTFG4ChQAAA44"]
[Sat Aug 29 05:10:00.500408 2026] [security2:error] [pid 1041789:tid 1042034] [client 20.151.200.44:65099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/k8.php"] [unique_id "apK-CIv3RhPI65jTFG4ChgAAA4U"]
[Sat Aug 29 05:10:00.520911 2026] [security2:error] [pid 1041789:tid 1042011] [client 20.48.251.3:46546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/aws-credentials.php"] [unique_id "apK-CIv3RhPI65jTFG4ChwAAA24"]
[Sat Aug 29 05:10:00.523954 2026] [security2:error] [pid 1041789:tid 1042000] [client 68.155.159.216:1819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK-CIv3RhPI65jTFG4CiAAAA2M"]
[Sat Aug 29 05:10:00.525869 2026] [security2:error] [pid 1041789:tid 1042057] [client 52.139.37.240:16088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lbttech.com"] [uri "/wp-2019.php"] [unique_id "apK-CIv3RhPI65jTFG4CiQAAA5w"]
[Sat Aug 29 05:10:00.536985 2026] [security2:error] [pid 1321:tid 1576] [client 4.205.62.107:53142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/cache-compat.php"] [unique_id "apK-CGjCPtor9NZ-byTZKgAABpM"]
[Sat Aug 29 05:10:00.607201 2026] [security2:error] [pid 1041789:tid 1042037] [client 158.23.147.79:62764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK-CIv3RhPI65jTFG4CiwAAA4g"]
[Sat Aug 29 05:10:00.645571 2026] [security2:error] [pid 1041789:tid 1042053] [client 158.23.147.79:62999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK-CIv3RhPI65jTFG4CjgAAA5g"]
[Sat Aug 29 05:10:00.652157 2026] [security2:error] [pid 1041789:tid 1041981] [client 68.155.159.216:9277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK-CIv3RhPI65jTFG4CjwAAA1A"]
[Sat Aug 29 05:10:00.652201 2026] [security2:error] [pid 1041789:tid 1042019] [client 20.48.251.3:46652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/umgebung.php"] [unique_id "apK-CIv3RhPI65jTFG4CkAAAA3Y"]
[Sat Aug 29 05:10:00.661746 2026] [security2:error] [pid 1321:tid 1565] [client 20.220.204.93:52060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/bgymj.php"] [unique_id "apK-CGjCPtor9NZ-byTZKwAABog"]
[Sat Aug 29 05:10:00.675400 2026] [security2:error] [pid 1321:tid 1607] [client 68.155.159.216:18290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK-CGjCPtor9NZ-byTZLAAABrI"]
[Sat Aug 29 05:10:00.683711 2026] [security2:error] [pid 1041789:tid 1041972] [client 52.139.37.240:13415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/a9.php"] [unique_id "apK-CIv3RhPI65jTFG4CkwAAA0c"]
[Sat Aug 29 05:10:00.689737 2026] [security2:error] [pid 1321:tid 1517] [client 4.205.62.107:21891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/test1.php"] [unique_id "apK-CGjCPtor9NZ-byTZLQAABlk"]
[Sat Aug 29 05:10:00.700079 2026] [security2:error] [pid 1321:tid 1601] [client 20.52.41.200:4400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/a1.php"] [unique_id "apK-CGjCPtor9NZ-byTZLgAABqw"]
[Sat Aug 29 05:10:00.701887 2026] [security2:error] [pid 1321:tid 1532] [client 40.83.93.50:14488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/install.php"] [unique_id "apK-CGjCPtor9NZ-byTZLwAABmg"]
[Sat Aug 29 05:10:00.717162 2026] [security2:error] [pid 1041789:tid 1042048] [client 68.155.159.216:64090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK-CIv3RhPI65jTFG4ClAAAA5M"]
[Sat Aug 29 05:10:00.727100 2026] [security2:error] [pid 1321:tid 1512] [client 52.139.37.240:16069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lbttech.com"] [uri "/gecko-new.php"] [unique_id "apK-CGjCPtor9NZ-byTZMAAABlQ"]
[Sat Aug 29 05:10:00.760434 2026] [security2:error] [pid 1041789:tid 1042046] [client 20.151.200.44:63757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/alog.php"] [unique_id "apK-CIv3RhPI65jTFG4CmgAAA5E"]
[Sat Aug 29 05:10:00.781583 2026] [security2:error] [pid 1041789:tid 1042025] [client 20.48.251.3:46562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/wp-content/db-status.php"] [unique_id "apK-CIv3RhPI65jTFG4CmwAAA3w"]
[Sat Aug 29 05:10:00.853907 2026] [security2:error] [pid 1041789:tid 1041933] [client 20.220.204.93:55889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/ws69.php"] [unique_id "apK-CIv3RhPI65jTFG4CnQAAAyA"]
[Sat Aug 29 05:10:00.865497 2026] [security2:error] [pid 1041789:tid 1041944] [client 34.169.171.101:2044] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "forensicengineernj.com"] [uri "/assets../.env"] [unique_id "apK-CIv3RhPI65jTFG4CngAAAys"]
[Sat Aug 29 05:10:00.881628 2026] [security2:error] [pid 1041789:tid 1041982] [client 52.139.37.240:13404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/admin/index.php"] [unique_id "apK-CIv3RhPI65jTFG4CnwAAA1E"]
[Sat Aug 29 05:10:00.883825 2026] [security2:error] [pid 1041789:tid 1041992] [client 34.169.171.101:2030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/uploads../.env"] [unique_id "apK-CIv3RhPI65jTFG4CoAAAA1s"]
[Sat Aug 29 05:10:00.887551 2026] [security2:error] [pid 1041789:tid 1042040] [client 4.232.148.111:19562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/classwithtostring.php"] [unique_id "apK-CIv3RhPI65jTFG4CogAAA4s"]
[Sat Aug 29 05:10:00.888829 2026] [security2:error] [pid 1041789:tid 1042001] [client 34.169.171.101:2192] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/.env.swp"] [unique_id "apK-CIv3RhPI65jTFG4CowAAA2Q"]
[Sat Aug 29 05:10:00.896770 2026] [security2:error] [pid 1041789:tid 1042047] [client 34.169.171.101:2164] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/.env.backup"] [unique_id "apK-CIv3RhPI65jTFG4CpQAAA5I"]
[Sat Aug 29 05:10:00.897061 2026] [security2:error] [pid 1321:tid 1492] [client 4.205.62.107:4944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/ok.php"] [unique_id "apK-CGjCPtor9NZ-byTZNgAABkA"]
[Sat Aug 29 05:10:00.897333 2026] [security2:error] [pid 1321:tid 1560] [client 34.169.171.101:2286] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/web/.env"] [unique_id "apK-CGjCPtor9NZ-byTZNQAABoM"]
[Sat Aug 29 05:10:00.897481 2026] [security2:error] [pid 1321:tid 1552] [client 34.169.171.101:2100] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/.env"] [unique_id "apK-CGjCPtor9NZ-byTZNwAABns"]
[Sat Aug 29 05:10:00.899985 2026] [security2:error] [pid 1041789:tid 1041936] [client 34.169.171.101:2066] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/.docker/.env"] [unique_id "apK-CIv3RhPI65jTFG4CpwAAAyM"]
[Sat Aug 29 05:10:00.900226 2026] [security2:error] [pid 1321:tid 1591] [client 34.169.171.101:2156] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/.env.old"] [unique_id "apK-CGjCPtor9NZ-byTZOAAABqI"]
[Sat Aug 29 05:10:00.900314 2026] [security2:error] [pid 1321:tid 1591] [client 34.169.171.101:2156] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "forensicengineernj.com"] [uri "/.env.old"] [unique_id "apK-CGjCPtor9NZ-byTZOAAABqI"]
[Sat Aug 29 05:10:00.901783 2026] [security2:error] [pid 1041789:tid 1041979] [client 34.169.171.101:2302] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/docker/.env"] [unique_id "apK-CIv3RhPI65jTFG4CqAAAA04"]
[Sat Aug 29 05:10:00.901801 2026] [security2:error] [pid 1321:tid 1580] [client 34.169.171.101:2024] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/img../.env"] [unique_id "apK-CGjCPtor9NZ-byTZOQAABpc"]
[Sat Aug 29 05:10:00.901883 2026] [security2:error] [pid 1321:tid 1580] [client 34.169.171.101:2024] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "forensicengineernj.com"] [uri "/img../.env"] [unique_id "apK-CGjCPtor9NZ-byTZOQAABpc"]
[Sat Aug 29 05:10:00.910998 2026] [security2:error] [pid 1321:tid 1547] [client 34.169.171.101:2074] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/v1/.env"] [unique_id "apK-CGjCPtor9NZ-byTZOgAABnY"]
[Sat Aug 29 05:10:00.911179 2026] [security2:error] [pid 1321:tid 1547] [client 34.169.171.101:2074] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "forensicengineernj.com"] [uri "/v1/.env"] [unique_id "apK-CGjCPtor9NZ-byTZOgAABnY"]
[Sat Aug 29 05:10:00.914532 2026] [security2:error] [pid 1041789:tid 1041975] [client 20.48.251.3:46604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/file59.php"] [unique_id "apK-CIv3RhPI65jTFG4CqwAAA0o"]
[Sat Aug 29 05:10:00.916965 2026] [security2:error] [pid 1041789:tid 1042009] [client 34.169.171.101:2090] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/v2/.env"] [unique_id "apK-CIv3RhPI65jTFG4CrAAAA2w"]
[Sat Aug 29 05:10:00.918665 2026] [security2:error] [pid 1041789:tid 1042035] [client 34.169.171.101:2246] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/frontend/.env"] [unique_id "apK-CIv3RhPI65jTFG4CqgAAA4Y"]
[Sat Aug 29 05:10:00.918959 2026] [security2:error] [pid 1321:tid 1610] [client 34.169.171.101:2220] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/app/.env"] [unique_id "apK-CGjCPtor9NZ-byTZOwAABrU"]
[Sat Aug 29 05:10:00.919654 2026] [security2:error] [pid 1041789:tid 1041948] [client 34.169.171.101:2274] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/laravel/.env"] [unique_id "apK-CIv3RhPI65jTFG4CqQAAAy8"]
[Sat Aug 29 05:10:00.921165 2026] [security2:error] [pid 1321:tid 1511] [client 34.169.171.101:2288] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/config/.env"] [unique_id "apK-CGjCPtor9NZ-byTZPAAABlM"]
[Sat Aug 29 05:10:00.922212 2026] [security2:error] [pid 1321:tid 1505] [client 34.169.171.101:2058] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/images../.env"] [unique_id "apK-CGjCPtor9NZ-byTZPQAABk0"]
[Sat Aug 29 05:10:00.922266 2026] [security2:error] [pid 1321:tid 1518] [client 34.169.171.101:2150] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/.env.bak"] [unique_id "apK-CGjCPtor9NZ-byTZPgAABlo"]
[Sat Aug 29 05:10:00.923535 2026] [security2:error] [pid 1041789:tid 1042049] [client 34.169.171.101:2212] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/api/.env"] [unique_id "apK-CIv3RhPI65jTFG4CrQAAA5Q"]
[Sat Aug 29 05:10:00.928337 2026] [security2:error] [pid 1041789:tid 1042032] [client 68.155.159.216:30544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/mah.php"] [unique_id "apK-CIv3RhPI65jTFG4CrwAAA4M"]
[Sat Aug 29 05:10:00.929716 2026] [security2:error] [pid 1041789:tid 1041934] [client 34.169.171.101:2016] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/.env"] [unique_id "apK-CIv3RhPI65jTFG4CrgAAAyE"]
[Sat Aug 29 05:10:00.937015 2026] [security2:error] [pid 1041789:tid 1041977] [client 4.205.62.107:62735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/php-details.php"] [unique_id "apK-CIv3RhPI65jTFG4CsAAAA0w"]
[Sat Aug 29 05:10:00.944035 2026] [security2:error] [pid 1041789:tid 1042033] [client 34.169.171.101:2292] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/server/.env"] [unique_id "apK-CIv3RhPI65jTFG4CsgAAA4Q"]
[Sat Aug 29 05:10:00.946709 2026] [security2:error] [pid 1041789:tid 1041991] [client 34.169.171.101:2306] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/backend/.env"] [unique_id "apK-CIv3RhPI65jTFG4CtAAAA1o"]
[Sat Aug 29 05:10:00.948667 2026] [security2:error] [pid 1041789:tid 1041987] [client 34.169.171.101:2132] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/src/.env"] [unique_id "apK-CIv3RhPI65jTFG4CtgAAA1Y"]
[Sat Aug 29 05:10:00.966038 2026] [security2:error] [pid 1321:tid 1553] [client 34.169.171.101:2286] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/core/.env"] [unique_id "apK-CGjCPtor9NZ-byTZQQAABnw"]
[Sat Aug 29 05:10:00.996868 2026] [security2:error] [pid 1041789:tid 1041942] [client 4.205.62.107:6962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/maxro.php"] [unique_id "apK-CIv3RhPI65jTFG4CvAAAAyk"]
[Sat Aug 29 05:10:00.997996 2026] [security2:error] [pid 1041789:tid 1041941] [client 20.151.200.44:21942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/adin.php"] [unique_id "apK-CIv3RhPI65jTFG4CvQAAAyg"]
[Sat Aug 29 05:10:01.007809 2026] [security2:error] [pid 1041789:tid 1041939] [client 158.23.184.117:21815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/.well-known/users.php"] [unique_id "apK-CYv3RhPI65jTFG4CvgAAAyY"]
[Sat Aug 29 05:10:01.010734 2026] [security2:error] [pid 1321:tid 1564] [client 74.248.24.12:26343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-trackback.php"] [unique_id "apK-CWjCPtor9NZ-byTZQwAABoc"]
[Sat Aug 29 05:10:01.046104 2026] [security2:error] [pid 1321:tid 1540] [client 20.48.251.3:46655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/time.php"] [unique_id "apK-CWjCPtor9NZ-byTZRAAABnA"]
[Sat Aug 29 05:10:01.072953 2026] [security2:error] [pid 1321:tid 1614] [client 68.155.159.216:33698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/about/function.php"] [unique_id "apK-CWjCPtor9NZ-byTZRQAABrk"]
[Sat Aug 29 05:10:01.095532 2026] [security2:error] [pid 1041789:tid 1041950] [client 20.220.204.93:55898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/ccs.php"] [unique_id "apK-CYv3RhPI65jTFG4CwQAAAzE"]
[Sat Aug 29 05:10:01.108538 2026] [security2:error] [pid 1041789:tid 1041969] [client 158.23.184.117:11394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/wp-includes/Text.php"] [unique_id "apK-CYv3RhPI65jTFG4CwgAAA0Q"]
[Sat Aug 29 05:10:01.153282 2026] [security2:error] [pid 1041789:tid 1042056] [client 20.52.41.200:5291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-CYv3RhPI65jTFG4CxwAAA5s"]
[Sat Aug 29 05:10:01.155298 2026] [security2:error] [pid 1321:tid 1585] [client 57.141.14.83:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/cart/"] [unique_id "apK-CWjCPtor9NZ-byTZRgAABpw"]
[Sat Aug 29 05:10:01.158764 2026] [security2:error] [pid 1041789:tid 1041990] [client 158.23.184.117:21819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/.well-known/wp-blog-header.php"] [unique_id "apK-CYv3RhPI65jTFG4CyAAAA1k"]
[Sat Aug 29 05:10:01.168202 2026] [security2:error] [pid 1321:tid 1584] [client 68.155.159.216:49270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/x.php"] [unique_id "apK-CWjCPtor9NZ-byTZRwAABps"]
[Sat Aug 29 05:10:01.176524 2026] [security2:error] [pid 1321:tid 1497] [client 20.48.251.3:46602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/old_phpinfo.php"] [unique_id "apK-CWjCPtor9NZ-byTZSAAABkU"]
[Sat Aug 29 05:10:01.202194 2026] [security2:error] [pid 1041789:tid 1042025] [client 158.23.147.79:52318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/hehehehe.php"] [unique_id "apK-CYv3RhPI65jTFG4CzAAAA3w"]
[Sat Aug 29 05:10:01.244097 2026] [security2:error] [pid 1041789:tid 1041960] [client 20.104.49.130:48608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/82.php"] [unique_id "apK-CYv3RhPI65jTFG4CzgAAAzs"]
[Sat Aug 29 05:10:01.259230 2026] [security2:error] [pid 1321:tid 1590] [client 20.151.200.44:22241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/sf9.php"] [unique_id "apK-CWjCPtor9NZ-byTZSQAABqE"]
[Sat Aug 29 05:10:01.259251 2026] [security2:error] [pid 1041789:tid 1042015] [client 158.23.184.117:12130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/wp-trackback.php"] [unique_id "apK-CYv3RhPI65jTFG4CzwAAA3I"]
[Sat Aug 29 05:10:01.265324 2026] [security2:error] [pid 1041789:tid 1041972] [client 40.83.93.50:13064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/colour.php"] [unique_id "apK-CYv3RhPI65jTFG4C0QAAA0c"]
[Sat Aug 29 05:10:01.266027 2026] [security2:error] [pid 1041789:tid 1042001] [client 68.155.159.216:14310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/content.php"] [unique_id "apK-CYv3RhPI65jTFG4C0gAAA2Q"]
[Sat Aug 29 05:10:01.301931 2026] [security2:error] [pid 1041789:tid 1041992] [client 158.23.184.117:21673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/.well-known/wp-links-opml.php"] [unique_id "apK-CYv3RhPI65jTFG4C1wAAA1s"]
[Sat Aug 29 05:10:01.310517 2026] [security2:error] [pid 1041789:tid 1042009] [client 20.63.81.20:46371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/up-kon.php"] [unique_id "apK-CYv3RhPI65jTFG4C2gAAA2w"]
[Sat Aug 29 05:10:01.314764 2026] [security2:error] [pid 1041789:tid 1041940] [client 20.48.251.3:46625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/paths.php"] [unique_id "apK-CYv3RhPI65jTFG4C2wAAAyc"]
[Sat Aug 29 05:10:01.336711 2026] [security2:error] [pid 1321:tid 1510] [client 158.23.147.79:55934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK-CWjCPtor9NZ-byTZSgAABlI"]
[Sat Aug 29 05:10:01.361960 2026] [security2:error] [pid 1041789:tid 1041997] [client 4.232.148.111:26871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/news.php"] [unique_id "apK-CYv3RhPI65jTFG4C3gAAA2A"]
[Sat Aug 29 05:10:01.405757 2026] [security2:error] [pid 1321:tid 1525] [client 158.23.184.117:12100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/wp-admin/maint.php"] [unique_id "apK-CWjCPtor9NZ-byTZTAAABmE"]
[Sat Aug 29 05:10:01.419249 2026] [security2:error] [pid 1041789:tid 1042043] [client 185.104.184.230:42566] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.eyc.paw.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "apK-CYv3RhPI65jTFG4C4wAAA44"]
[Sat Aug 29 05:10:01.428269 2026] [security2:error] [pid 1041789:tid 1042057] [client 68.155.159.216:23490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/xmlrpc.php"] [unique_id "apK-CYv3RhPI65jTFG4C5AAAA5w"]
[Sat Aug 29 05:10:01.438432 2026] [security2:error] [pid 1321:tid 1541] [client 4.205.62.107:63963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/xqq.php"] [unique_id "apK-CWjCPtor9NZ-byTZTQAABnE"]
[Sat Aug 29 05:10:01.442433 2026] [security2:error] [pid 1321:tid 1491] [client 20.63.81.20:46429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/tinny.php"] [unique_id "apK-CWjCPtor9NZ-byTZTgAABj8"]
[Sat Aug 29 05:10:01.444751 2026] [security2:error] [pid 1321:tid 1502] [client 20.48.251.3:46641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/css.php"] [unique_id "apK-CWjCPtor9NZ-byTZTwAABko"]
[Sat Aug 29 05:10:01.446196 2026] [security2:error] [pid 1041789:tid 1042045] [client 158.23.184.117:61449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/.well-known/wp-load.php"] [unique_id "apK-CYv3RhPI65jTFG4C5QAAA5A"]
[Sat Aug 29 05:10:01.518152 2026] [security2:error] [pid 1321:tid 1527] [client 158.23.147.79:14334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/file17.php"] [unique_id "apK-CWjCPtor9NZ-byTZUgAABmM"]
[Sat Aug 29 05:10:01.524401 2026] [security2:error] [pid 1321:tid 1575] [client 213.202.253.4:55724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "timportlock.net"] [uri "/postnews.php"] [unique_id "apK-CWjCPtor9NZ-byTZUwAABpI"], referer: www.google.com
[Sat Aug 29 05:10:01.529938 2026] [security2:error] [pid 1041789:tid 1041965] [client 20.63.81.20:63633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/edit.php"] [unique_id "apK-CYv3RhPI65jTFG4C6AAAA0A"]
[Sat Aug 29 05:10:01.535246 2026] [security2:error] [pid 1321:tid 1599] [client 20.151.200.44:63723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/lte7.php"] [unique_id "apK-CWjCPtor9NZ-byTZVQAABqo"]
[Sat Aug 29 05:10:01.555031 2026] [security2:error] [pid 1321:tid 1489] [client 158.23.184.117:12108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/wp-includes/num.php"] [unique_id "apK-CWjCPtor9NZ-byTZVgAABj0"]
[Sat Aug 29 05:10:01.557788 2026] [security2:error] [pid 1041789:tid 1041963] [client 20.220.204.93:55374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/mar.php"] [unique_id "apK-CYv3RhPI65jTFG4C6wAAAz4"]
[Sat Aug 29 05:10:01.574446 2026] [security2:error] [pid 1041789:tid 1042053] [client 103.240.76.112:42540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK-CYv3RhPI65jTFG4C7AAAA5g"]
[Sat Aug 29 05:10:01.574635 2026] [security2:error] [pid 1041789:tid 1042053] [client 103.240.76.112:42540] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK-CYv3RhPI65jTFG4C7AAAA5g"]
[Sat Aug 29 05:10:01.576937 2026] [security2:error] [pid 1321:tid 1544] [client 20.63.81.20:46315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/wp-easy.php"] [unique_id "apK-CWjCPtor9NZ-byTZVwAABnQ"]
[Sat Aug 29 05:10:01.579139 2026] [security2:error] [pid 1041789:tid 1042019] [client 20.48.251.3:44001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/erty.php"] [unique_id "apK-CYv3RhPI65jTFG4C7QAAA3Y"]
[Sat Aug 29 05:10:01.593322 2026] [security2:error] [pid 1321:tid 1526] [client 158.23.184.117:21804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/.well-known/wp-mail.php"] [unique_id "apK-CWjCPtor9NZ-byTZWAAABmI"]
[Sat Aug 29 05:10:01.613034 2026] [security2:error] [pid 1321:tid 1611] [client 20.52.41.200:4668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/alfa-rex.php7"] [unique_id "apK-CWjCPtor9NZ-byTZWgAABrY"]
[Sat Aug 29 05:10:01.622607 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.63.81.20:58075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oromotors.sacep.com.ec"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-CYv3RhPI65jTFG4C8AAAA2Q"]
[Sat Aug 29 05:10:01.630307 2026] [security2:error] [pid 1321:tid 1597] [client 63.181.34.33:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.jobindjibouti.com"] [uri "/"] [unique_id "apK-CWjCPtor9NZ-byTZWwAABqg"]
[Sat Aug 29 05:10:01.635080 2026] [security2:error] [pid 1041789:tid 1041975] [client 68.155.159.216:1958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/about.php"] [unique_id "apK-CYv3RhPI65jTFG4C8QAAA0o"]
[Sat Aug 29 05:10:01.665224 2026] [security2:error] [pid 1041789:tid 1041940] [client 20.63.81.20:65263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/tqkdqbbv.php"] [unique_id "apK-CYv3RhPI65jTFG4C8gAAAyc"]
[Sat Aug 29 05:10:01.666094 2026] [security2:error] [pid 1041789:tid 1042050] [client 158.23.147.79:11412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK-CYv3RhPI65jTFG4C8wAAA5U"]
[Sat Aug 29 05:10:01.670133 2026] [security2:error] [pid 1041789:tid 1042049] [client 4.205.62.107:55995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/aws_keys.php"] [unique_id "apK-CYv3RhPI65jTFG4C9AAAA5Q"]
[Sat Aug 29 05:10:01.706806 2026] [security2:error] [pid 1041789:tid 1042032] [client 20.63.81.20:46380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/d7.php"] [unique_id "apK-CYv3RhPI65jTFG4C9gAAA4M"]
[Sat Aug 29 05:10:01.709580 2026] [security2:error] [pid 1041789:tid 1041998] [client 20.48.251.3:9296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/ws62.php"] [unique_id "apK-CYv3RhPI65jTFG4C-AAAA2E"]
[Sat Aug 29 05:10:01.727911 2026] [security2:error] [pid 1041789:tid 1041980] [client 185.104.184.230:42568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.184.104.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "webmail.eyc.paw.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "apK-CYv3RhPI65jTFG4C-QAAA08"]
[Sat Aug 29 05:10:01.728152 2026] [security2:error] [pid 1321:tid 1488] [client 158.23.147.79:60214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/makeasmtp.php"] [unique_id "apK-CWjCPtor9NZ-byTZXAAABjw"]
[Sat Aug 29 05:10:01.759138 2026] [security2:error] [pid 1041789:tid 1042005] [client 20.63.81.20:58034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oromotors.sacep.com.ec"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-CYv3RhPI65jTFG4C-gAAA2g"]
[Sat Aug 29 05:10:01.761262 2026] [security2:error] [pid 1321:tid 1543] [client 68.155.159.216:52853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK-CWjCPtor9NZ-byTZXQAABnM"]
[Sat Aug 29 05:10:01.765379 2026] [security2:error] [pid 1321:tid 1531] [client 158.23.147.79:63019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK-CWjCPtor9NZ-byTZXgAABmc"]
[Sat Aug 29 05:10:01.767144 2026] [security2:error] [pid 1041789:tid 1042040] [client 40.83.93.50:18256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/OK.php"] [unique_id "apK-CYv3RhPI65jTFG4C_AAAA4s"]
[Sat Aug 29 05:10:01.777004 2026] [security2:error] [pid 1321:tid 1561] [client 68.155.159.216:18381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK-CWjCPtor9NZ-byTZXwAABoQ"]
[Sat Aug 29 05:10:01.780146 2026] [security2:error] [pid 1321:tid 1555] [client 20.220.204.93:54643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/ccu.php"] [unique_id "apK-CWjCPtor9NZ-byTZYAAABn4"]
[Sat Aug 29 05:10:01.793889 2026] [security2:error] [pid 1041789:tid 1042043] [client 20.63.81.20:65183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/kjyehoxl.php"] [unique_id "apK-CYv3RhPI65jTFG4DAQAAA44"]
[Sat Aug 29 05:10:01.837628 2026] [security2:error] [pid 1321:tid 1615] [client 4.232.148.111:26817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/about/function.php"] [unique_id "apK-CWjCPtor9NZ-byTZYgAABro"]
[Sat Aug 29 05:10:01.844475 2026] [security2:error] [pid 1321:tid 1509] [client 20.48.251.3:46577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/wp-class.php"] [unique_id "apK-CWjCPtor9NZ-byTZYwAABlE"]
[Sat Aug 29 05:10:01.847609 2026] [security2:error] [pid 1321:tid 1559] [client 4.205.62.107:21827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/bigdump.php"] [unique_id "apK-CWjCPtor9NZ-byTZZAAABoI"]
[Sat Aug 29 05:10:01.850485 2026] [security2:error] [pid 1321:tid 1583] [client 20.63.81.20:46279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/v5.php"] [unique_id "apK-CWjCPtor9NZ-byTZZQAABpo"]
[Sat Aug 29 05:10:01.851249 2026] [security2:error] [pid 1041789:tid 1041967] [client 68.155.159.216:64006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/asd.php"] [unique_id "apK-CYv3RhPI65jTFG4DAwAAA0I"]
[Sat Aug 29 05:10:01.898840 2026] [security2:error] [pid 1041789:tid 1042056] [client 20.63.81.20:58021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oromotors.sacep.com.ec"] [uri "/ap.php"] [unique_id "apK-CYv3RhPI65jTFG4DBgAAA5s"]
[Sat Aug 29 05:10:01.928429 2026] [security2:error] [pid 1041789:tid 1042031] [client 20.63.81.20:65154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/llyuxaqd.php"] [unique_id "apK-CYv3RhPI65jTFG4DCAAAA4I"]
[Sat Aug 29 05:10:01.940388 2026] [security2:error] [pid 1041789:tid 1041979] [client 52.139.37.240:16066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lbttech.com"] [uri "/add_actualites.php"] [unique_id "apK-CYv3RhPI65jTFG4DCwAAA04"]
[Sat Aug 29 05:10:01.945053 2026] [security2:error] [pid 1041789:tid 1042025] [client 20.104.49.130:52485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "coveryourauto.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-CYv3RhPI65jTFG4DDAAAA3w"]
[Sat Aug 29 05:10:01.947880 2026] [security2:error] [pid 1041789:tid 1041995] [client 20.220.204.93:55415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/ak.php"] [unique_id "apK-CYv3RhPI65jTFG4DDgAAA14"]
[Sat Aug 29 05:10:01.948718 2026] [security2:error] [pid 1321:tid 1607] [client 74.248.24.12:28759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/222.php"] [unique_id "apK-CWjCPtor9NZ-byTZZwAABrI"]
[Sat Aug 29 05:10:01.950197 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.151.200.44:22149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/tanjiro.php"] [unique_id "apK-CYv3RhPI65jTFG4DDwAAA30"]
[Sat Aug 29 05:10:01.961465 2026] [security2:error] [pid 1041789:tid 1041933] [client 158.23.147.79:5914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK-CYv3RhPI65jTFG4DEQAAAyA"]
[Sat Aug 29 05:10:01.981490 2026] [security2:error] [pid 1041789:tid 1042054] [client 20.48.251.3:46651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/hosty.php"] [unique_id "apK-CYv3RhPI65jTFG4DFgAAA5k"]
[Sat Aug 29 05:10:01.989386 2026] [security2:error] [pid 1321:tid 1601] [client 20.63.81.20:46427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/az.php"] [unique_id "apK-CWjCPtor9NZ-byTZaQAABqw"]
[Sat Aug 29 05:10:01.989567 2026] [security2:error] [pid 1041789:tid 1042014] [client 63.181.34.33:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.jobindjibouti.com"] [uri "/jobs/"] [unique_id "apK-CYv3RhPI65jTFG4DFwAAA3E"]
[Sat Aug 29 05:10:01.999181 2026] [security2:error] [pid 1321:tid 1522] [client 68.155.159.216:33606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/log-mama/function.php"] [unique_id "apK-CWjCPtor9NZ-byTZagAABl4"]
[Sat Aug 29 05:10:02.022576 2026] [security2:error] [pid 1041789:tid 1041978] [client 185.104.184.230:42582] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.eyc.paw.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "apK-Cov3RhPI65jTFG4DGQAAA00"]
[Sat Aug 29 05:10:02.031754 2026] [security2:error] [pid 1041789:tid 1041992] [client 20.63.81.20:57316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oromotors.sacep.com.ec"] [uri "/media.php"] [unique_id "apK-Cov3RhPI65jTFG4DGgAAA1s"]
[Sat Aug 29 05:10:02.035272 2026] [security2:error] [pid 1321:tid 1574] [client 68.155.159.216:30606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-blog-header.php"] [unique_id "apK-CmjCPtor9NZ-byTZawAABpE"]
[Sat Aug 29 05:10:02.061180 2026] [security2:error] [pid 1041789:tid 1041982] [client 4.205.62.107:51491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/test.config.php"] [unique_id "apK-Cov3RhPI65jTFG4DHQAAA1E"]
[Sat Aug 29 05:10:02.063949 2026] [security2:error] [pid 1041789:tid 1042013] [client 20.63.81.20:65263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/nbwxolou.php"] [unique_id "apK-Cov3RhPI65jTFG4DHgAAA3A"]
[Sat Aug 29 05:10:02.072081 2026] [security2:error] [pid 1321:tid 1587] [client 20.52.41.200:4643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "apK-CmjCPtor9NZ-byTZbAAABp4"]
[Sat Aug 29 05:10:02.077185 2026] [security2:error] [pid 1321:tid 1605] [client 4.205.62.107:62975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/routes.php"] [unique_id "apK-CmjCPtor9NZ-byTZbQAABrA"]
[Sat Aug 29 05:10:02.078921 2026] [security2:error] [pid 1321:tid 1512] [client 52.139.37.240:13989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/makeasmtp.php"] [unique_id "apK-CmjCPtor9NZ-byTZbgAABlQ"]
[Sat Aug 29 05:10:02.103092 2026] [security2:error] [pid 1321:tid 1533] [client 68.155.159.216:64447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/about.php"] [unique_id "apK-CmjCPtor9NZ-byTZbwAABmk"]
[Sat Aug 29 05:10:02.113521 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.48.251.3:46549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/temp.php"] [unique_id "apK-Cov3RhPI65jTFG4DIgAAA3o"]
[Sat Aug 29 05:10:02.116103 2026] [core:error] [pid 1321:tid 1504] [client 20.197.61.180:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:02.116121 2026] [core:error] [pid 1321:tid 1504] [client 20.197.61.180:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:02.129219 2026] [security2:error] [pid 1041789:tid 1042009] [client 20.63.81.20:46403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/js.php"] [unique_id "apK-Cov3RhPI65jTFG4DIwAAA2w"]
[Sat Aug 29 05:10:02.135998 2026] [security2:error] [pid 1041789:tid 1042055] [client 20.63.81.20:33741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hitechgs.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-Cov3RhPI65jTFG4DJQAAA5o"]
[Sat Aug 29 05:10:02.138522 2026] [security2:error] [pid 1041789:tid 1041987] [client 4.205.62.107:6884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/brc.php"] [unique_id "apK-Cov3RhPI65jTFG4DJgAAA1Y"]
[Sat Aug 29 05:10:02.140937 2026] [security2:error] [pid 1041789:tid 1041962] [client 52.139.37.240:16090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lbttech.com"] [uri "/browse.php"] [unique_id "apK-Cov3RhPI65jTFG4DJwAAAz0"]
[Sat Aug 29 05:10:02.165045 2026] [security2:error] [pid 1041789:tid 1042040] [client 20.63.81.20:58001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oromotors.sacep.com.ec"] [uri "/adminfuns.php"] [unique_id "apK-Cov3RhPI65jTFG4DKAAAA4s"]
[Sat Aug 29 05:10:02.181683 2026] [security2:error] [pid 1041789:tid 1042052] [client 68.155.159.216:33603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK-Cov3RhPI65jTFG4DKQAAA5c"]
[Sat Aug 29 05:10:02.199441 2026] [security2:error] [pid 1041789:tid 1041957] [client 20.63.81.20:65265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/nsxeubyv.php"] [unique_id "apK-Cov3RhPI65jTFG4DKwAAAzg"]
[Sat Aug 29 05:10:02.213994 2026] [security2:error] [pid 1041789:tid 1041931] [client 20.220.204.93:55306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/lib.php"] [unique_id "apK-Cov3RhPI65jTFG4DLwAAAx4"]
[Sat Aug 29 05:10:02.238613 2026] [security2:error] [pid 1041789:tid 1042049] [client 40.83.93.50:10065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "considerthefuture.com"] [uri "/aaa.php"] [unique_id "apK-Cov3RhPI65jTFG4DMgAAA5Q"]
[Sat Aug 29 05:10:02.258517 2026] [security2:error] [pid 1041789:tid 1042018] [client 20.48.251.3:46573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/php-details.php"] [unique_id "apK-Cov3RhPI65jTFG4DMwAAA3U"]
[Sat Aug 29 05:10:02.262294 2026] [security2:error] [pid 1321:tid 1610] [client 20.63.81.20:46345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/hd.php"] [unique_id "apK-CmjCPtor9NZ-byTZcQAABrU"]
[Sat Aug 29 05:10:02.268567 2026] [security2:error] [pid 1321:tid 1511] [client 20.104.49.130:51364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/echkm.php"] [unique_id "apK-CmjCPtor9NZ-byTZcgAABlM"]
[Sat Aug 29 05:10:02.271947 2026] [security2:error] [pid 1321:tid 1518] [client 20.63.81.20:33763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hitechgs.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-CmjCPtor9NZ-byTZcwAABlo"]
[Sat Aug 29 05:10:02.272220 2026] [security2:error] [pid 1041789:tid 1041969] [client 20.48.250.41:50203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-Cov3RhPI65jTFG4DNAAAA0Q"]
[Sat Aug 29 05:10:02.275809 2026] [security2:error] [pid 1041789:tid 1041932] [client 52.139.37.240:13431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/paku.php"] [unique_id "apK-Cov3RhPI65jTFG4DNgAAAx8"]
[Sat Aug 29 05:10:02.297819 2026] [security2:error] [pid 1041789:tid 1042031] [client 68.155.159.216:38701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK-Cov3RhPI65jTFG4DOQAAA4I"]
[Sat Aug 29 05:10:02.302602 2026] [security2:error] [pid 1321:tid 1553] [client 20.48.250.41:45970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "apK-CmjCPtor9NZ-byTZdQAABnw"]
[Sat Aug 29 05:10:02.313117 2026] [security2:error] [pid 1321:tid 1539] [client 158.23.147.79:44496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK-CmjCPtor9NZ-byTZdwAABm8"]
[Sat Aug 29 05:10:02.315564 2026] [security2:error] [pid 1041789:tid 1041990] [client 20.63.81.20:58031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oromotors.sacep.com.ec"] [uri "/classwithtostring.php"] [unique_id "apK-Cov3RhPI65jTFG4DOgAAA1k"]
[Sat Aug 29 05:10:02.317405 2026] [security2:error] [pid 1321:tid 1520] [client 185.104.184.230:42590] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.eyc.paw.mybluehost.me"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "apK-CmjCPtor9NZ-byTZeAAABlw"]
[Sat Aug 29 05:10:02.321864 2026] [security2:error] [pid 1041789:tid 1042028] [client 68.155.159.216:49377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-content/x.php"] [unique_id "apK-Cov3RhPI65jTFG4DPAAAA38"]
[Sat Aug 29 05:10:02.341607 2026] [security2:error] [pid 1041789:tid 1041965] [client 52.139.37.240:16120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lbttech.com"] [uri "/contentloader1.php"] [unique_id "apK-Cov3RhPI65jTFG4DPQAAA0A"]
[Sat Aug 29 05:10:02.363506 2026] [security2:error] [pid 1321:tid 1598] [client 20.220.204.93:55349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/wp-style.php"] [unique_id "apK-CmjCPtor9NZ-byTZeQAABqk"]
[Sat Aug 29 05:10:02.383989 2026] [security2:error] [pid 1041789:tid 1042015] [client 20.48.250.41:53501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/ws58.php"] [unique_id "apK-Cov3RhPI65jTFG4DPgAAA3I"]
[Sat Aug 29 05:10:02.389221 2026] [security2:error] [pid 1041789:tid 1042048] [client 20.48.250.41:34267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "apK-Cov3RhPI65jTFG4DPwAAA5M"]
[Sat Aug 29 05:10:02.396696 2026] [security2:error] [pid 1041789:tid 1042034] [client 20.48.251.3:46582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/ms-edit.php"] [unique_id "apK-Cov3RhPI65jTFG4DQAAAA4U"]
[Sat Aug 29 05:10:02.412155 2026] [security2:error] [pid 1041789:tid 1041971] [client 20.48.250.41:50329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/thui.php"] [unique_id "apK-Cov3RhPI65jTFG4DQQAAA0Y"]
[Sat Aug 29 05:10:02.417498 2026] [security2:error] [pid 1041789:tid 1041945] [client 20.151.200.44:21951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/Rk41.php"] [unique_id "apK-Cov3RhPI65jTFG4DQgAAAyw"]
[Sat Aug 29 05:10:02.429224 2026] [security2:error] [pid 1041789:tid 1041978] [client 20.48.250.41:50276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-Cov3RhPI65jTFG4DRAAAA00"]
[Sat Aug 29 05:10:02.448416 2026] [security2:error] [pid 1041789:tid 1041992] [client 20.48.250.41:46056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/motu.php"] [unique_id "apK-Cov3RhPI65jTFG4DRQAAA1s"]
[Sat Aug 29 05:10:02.449532 2026] [security2:error] [pid 1041789:tid 1042010] [client 158.23.147.79:58907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK-Cov3RhPI65jTFG4DRgAAA20"]
[Sat Aug 29 05:10:02.458197 2026] [security2:error] [pid 1321:tid 1613] [client 20.104.49.130:43012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/ortasekerli1.php"] [unique_id "apK-CmjCPtor9NZ-byTZfAAABrg"]
[Sat Aug 29 05:10:02.462337 2026] [security2:error] [pid 1321:tid 1571] [client 68.155.159.216:62838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK-CmjCPtor9NZ-byTZfQAABo4"]
[Sat Aug 29 05:10:02.465158 2026] [security2:error] [pid 1321:tid 1609] [client 74.248.24.12:20003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/x.php"] [unique_id "apK-CmjCPtor9NZ-byTZfgAABrQ"]
[Sat Aug 29 05:10:02.475167 2026] [security2:error] [pid 1321:tid 1510] [client 4.232.148.111:20914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-includes/admin.php"] [unique_id "apK-CmjCPtor9NZ-byTZfwAABlI"]
[Sat Aug 29 05:10:02.479344 2026] [security2:error] [pid 1041789:tid 1042019] [client 68.155.159.216:14335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK-Cov3RhPI65jTFG4DRwAAA3Y"]
[Sat Aug 29 05:10:02.481501 2026] [security2:error] [pid 1041789:tid 1042025] [client 52.139.37.240:13412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/rtx.php"] [unique_id "apK-Cov3RhPI65jTFG4DSAAAA3w"]
[Sat Aug 29 05:10:02.502609 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.48.250.41:49971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/grsiuk.php"] [unique_id "apK-Cov3RhPI65jTFG4DSQAAA3o"]
[Sat Aug 29 05:10:02.520736 2026] [security2:error] [pid 1041789:tid 1041944] [client 20.52.41.200:4650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/upload.php"] [unique_id "apK-Cov3RhPI65jTFG4DSgAAAys"]
[Sat Aug 29 05:10:02.530901 2026] [security2:error] [pid 1041789:tid 1041946] [client 20.48.251.3:46617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/requirements.php"] [unique_id "apK-Cov3RhPI65jTFG4DTAAAAy0"]
[Sat Aug 29 05:10:02.550157 2026] [security2:error] [pid 1041789:tid 1042009] [client 68.155.159.216:23428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/atomlib.php"] [unique_id "apK-Cov3RhPI65jTFG4DTQAAA2w"]
[Sat Aug 29 05:10:02.555169 2026] [security2:error] [pid 1041789:tid 1042029] [client 45.83.178.43:53673] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "goodtogo.store"] [uri "/webapp/xmlrpc.php"] [unique_id "apK-Cov3RhPI65jTFG4DIQAAA4A"]
[Sat Aug 29 05:10:02.557841 2026] [security2:error] [pid 1041789:tid 1042053] [client 52.139.37.240:16099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lbttech.com"] [uri "/upfile.php"] [unique_id "apK-Cov3RhPI65jTFG4DTgAAA5g"]
[Sat Aug 29 05:10:02.576748 2026] [security2:error] [pid 1041789:tid 1042055] [client 4.205.62.107:63904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/a1vx.php"] [unique_id "apK-Cov3RhPI65jTFG4DTwAAA5o"]
[Sat Aug 29 05:10:02.582758 2026] [security2:error] [pid 1041789:tid 1041987] [client 20.220.204.93:55840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/browse.php"] [unique_id "apK-Cov3RhPI65jTFG4DUAAAA1Y"]
[Sat Aug 29 05:10:02.587331 2026] [security2:error] [pid 1321:tid 1535] [client 20.48.250.41:50151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/xs.php"] [unique_id "apK-CmjCPtor9NZ-byTZgAAABms"]
[Sat Aug 29 05:10:02.589582 2026] [security2:error] [pid 1041789:tid 1041962] [client 20.48.250.41:45968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/Ov-Simple1.php"] [unique_id "apK-Cov3RhPI65jTFG4DUQAAAz0"]
[Sat Aug 29 05:10:02.606353 2026] [security2:error] [pid 1041789:tid 1041954] [client 20.48.250.41:50427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/Jcrop.php"] [unique_id "apK-Cov3RhPI65jTFG4DUgAAAzU"]
[Sat Aug 29 05:10:02.613750 2026] [security2:error] [pid 1041789:tid 1042035] [client 20.48.250.41:50191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/ff1.php"] [unique_id "apK-Cov3RhPI65jTFG4DUwAAA4Y"]
[Sat Aug 29 05:10:02.625182 2026] [security2:error] [pid 1041789:tid 1042052] [client 185.104.184.230:42600] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.eyc.paw.mybluehost.me"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "apK-Cov3RhPI65jTFG4DVAAAA5c"]
[Sat Aug 29 05:10:02.674380 2026] [security2:error] [pid 1041789:tid 1042042] [client 20.48.251.3:46548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/hochladen.form.php"] [unique_id "apK-Cov3RhPI65jTFG4DVQAAA40"]
[Sat Aug 29 05:10:02.678001 2026] [security2:error] [pid 1041789:tid 1041991] [client 52.139.37.240:13961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/update/da222.php"] [unique_id "apK-Cov3RhPI65jTFG4DVgAAA1o"]
[Sat Aug 29 05:10:02.689659 2026] [security2:error] [pid 1321:tid 1502] [client 20.48.250.41:34290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/motu.php"] [unique_id "apK-CmjCPtor9NZ-byTZgQAABko"]
[Sat Aug 29 05:10:02.718211 2026] [security2:error] [pid 1041789:tid 1042047] [client 158.23.184.117:12137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/identity.php"] [unique_id "apK-Cov3RhPI65jTFG4DVwAAA5I"]
[Sat Aug 29 05:10:02.725943 2026] [security2:error] [pid 1041789:tid 1041940] [client 20.48.250.41:45353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/wp-blogs.php"] [unique_id "apK-Cov3RhPI65jTFG4DWAAAAyc"]
[Sat Aug 29 05:10:02.732279 2026] [security2:error] [pid 1321:tid 1554] [client 20.151.200.44:22169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/7logs.php"] [unique_id "apK-CmjCPtor9NZ-byTZggAABn0"]
[Sat Aug 29 05:10:02.736218 2026] [security2:error] [pid 1041789:tid 1041939] [client 20.48.250.41:49996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/wp-scr1pts.php"] [unique_id "apK-Cov3RhPI65jTFG4DWQAAAyY"]
[Sat Aug 29 05:10:02.737530 2026] [security2:error] [pid 1321:tid 1612] [client 68.155.159.216:1931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK-CmjCPtor9NZ-byTZgwAABrc"]
[Sat Aug 29 05:10:02.748634 2026] [security2:error] [pid 1041789:tid 1041938] [client 158.23.184.117:61495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/.well-known/wp-settings.php"] [unique_id "apK-Cov3RhPI65jTFG4DWgAAAyU"]
[Sat Aug 29 05:10:02.754337 2026] [security2:error] [pid 1041789:tid 1041931] [client 52.139.37.240:16121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lbttech.com"] [uri "/form.php"] [unique_id "apK-Cov3RhPI65jTFG4DWwAAAx4"]
[Sat Aug 29 05:10:02.765911 2026] [security2:error] [pid 1321:tid 1550] [client 20.220.204.93:55413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/zoo.php"] [unique_id "apK-CmjCPtor9NZ-byTZhAAABnk"]
[Sat Aug 29 05:10:02.785847 2026] [security2:error] [pid 1041789:tid 1041956] [client 158.23.147.79:11395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/.well-knownold/index.php"] [unique_id "apK-Cov3RhPI65jTFG4DXAAAAzc"]
[Sat Aug 29 05:10:02.792512 2026] [security2:error] [pid 1041789:tid 1042046] [client 20.48.250.41:29677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/ws58.php"] [unique_id "apK-Cov3RhPI65jTFG4DXQAAA5E"]
[Sat Aug 29 05:10:02.802352 2026] [security2:error] [pid 1041789:tid 1042057] [client 20.48.250.41:53483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/zu.php"] [unique_id "apK-Cov3RhPI65jTFG4DXgAAA5w"]
[Sat Aug 29 05:10:02.810866 2026] [security2:error] [pid 1041789:tid 1041990] [client 4.205.62.107:56006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/umgebung.php"] [unique_id "apK-Cov3RhPI65jTFG4DXwAAA1k"]
[Sat Aug 29 05:10:02.812458 2026] [security2:error] [pid 1041789:tid 1041995] [client 20.48.251.3:46645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/asdf.php"] [unique_id "apK-Cov3RhPI65jTFG4DYAAAA14"]
[Sat Aug 29 05:10:02.841212 2026] [security2:error] [pid 1041789:tid 1041935] [client 158.23.147.79:55890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK-Cov3RhPI65jTFG4DYQAAAyI"]
[Sat Aug 29 05:10:02.849629 2026] [security2:error] [pid 1041789:tid 1042014] [client 20.48.250.41:50254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/t.php"] [unique_id "apK-Cov3RhPI65jTFG4DYgAAA3E"]
[Sat Aug 29 05:10:02.858337 2026] [security2:error] [pid 1321:tid 1593] [client 20.48.250.41:34434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/Ov-Simple1.php"] [unique_id "apK-CmjCPtor9NZ-byTZhgAABqQ"]
[Sat Aug 29 05:10:02.873797 2026] [security2:error] [pid 1041789:tid 1042001] [client 158.23.147.79:63849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK-Cov3RhPI65jTFG4DZAAAA2Q"]
[Sat Aug 29 05:10:02.876348 2026] [security2:error] [pid 1041789:tid 1041945] [client 20.48.250.41:45325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/mini.php"] [unique_id "apK-Cov3RhPI65jTFG4DZgAAAyw"]
[Sat Aug 29 05:10:02.880301 2026] [security2:error] [pid 1041789:tid 1042010] [client 68.155.159.216:52861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK-Cov3RhPI65jTFG4DZwAAA20"]
[Sat Aug 29 05:10:02.884897 2026] [security2:error] [pid 1041789:tid 1041975] [client 68.155.159.216:18216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK-Cov3RhPI65jTFG4DaQAAA0o"]
[Sat Aug 29 05:10:02.892459 2026] [security2:error] [pid 1041789:tid 1042054] [client 158.23.184.117:21650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/.well-known/wp-signup.php"] [unique_id "apK-Cov3RhPI65jTFG4DagAAA5k"]
[Sat Aug 29 05:10:02.904646 2026] [security2:error] [pid 1041789:tid 1042025] [client 20.220.204.93:52070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/elp.php"] [unique_id "apK-Cov3RhPI65jTFG4DawAAA3w"]
[Sat Aug 29 05:10:02.916596 2026] [security2:error] [pid 1041789:tid 1041997] [client 158.23.184.117:11399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/Radio.php"] [unique_id "apK-Cov3RhPI65jTFG4DbQAAA2A"]
[Sat Aug 29 05:10:02.936325 2026] [security2:error] [pid 1321:tid 1599] [client 20.48.250.41:50317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/xs.php"] [unique_id "apK-CmjCPtor9NZ-byTZiAAABqo"]
[Sat Aug 29 05:10:02.940405 2026] [security2:error] [pid 1041789:tid 1042006] [client 20.48.250.41:50031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/num.php"] [unique_id "apK-Cov3RhPI65jTFG4DbwAAA2k"]
[Sat Aug 29 05:10:02.940665 2026] [security2:error] [pid 1041789:tid 1041977] [client 185.104.184.230:42614] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.eyc.paw.mybluehost.me"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "apK-Cov3RhPI65jTFG4DbgAAA0w"]
[Sat Aug 29 05:10:02.948344 2026] [security2:error] [pid 1321:tid 1594] [client 20.48.251.3:46597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/zz.php"] [unique_id "apK-CmjCPtor9NZ-byTZiQAABqU"]
[Sat Aug 29 05:10:02.952693 2026] [security2:error] [pid 1041789:tid 1041951] [client 52.139.37.240:16067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lbttech.com"] [uri "/wp-sigunq.php"] [unique_id "apK-Cov3RhPI65jTFG4DcQAAAzI"]
[Sat Aug 29 05:10:02.956033 2026] [autoindex:error] [pid 1041789:tid 1042031] [client 52.139.37.240:13386] AH01276: Cannot serve directory /home2/angelesf/public_html/jamesmarquiss/wp-admin/maint/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:10:02.981438 2026] [security2:error] [pid 1041789:tid 1042009] [client 20.48.250.41:50135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/lanka.php"] [unique_id "apK-Cov3RhPI65jTFG4DcwAAA2w"]
[Sat Aug 29 05:10:02.982821 2026] [security2:error] [pid 1041789:tid 1042029] [client 4.205.62.107:21580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/wdf.php"] [unique_id "apK-Cov3RhPI65jTFG4DdQAAA4A"]
[Sat Aug 29 05:10:02.988653 2026] [security2:error] [pid 1041789:tid 1041979] [client 74.248.24.12:4329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/new.php"] [unique_id "apK-Cov3RhPI65jTFG4DdgAAA04"]
[Sat Aug 29 05:10:03.018565 2026] [security2:error] [pid 1041789:tid 1041987] [client 20.48.250.41:45966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/amp.php"] [unique_id "apK-C4v3RhPI65jTFG4DeAAAA1Y"]
[Sat Aug 29 05:10:03.019052 2026] [security2:error] [pid 1041789:tid 1042005] [client 68.155.159.216:64102] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "burlingtonyaroslavl.com"] [uri "/1.php"] [unique_id "apK-C4v3RhPI65jTFG4DeQAAA2g"]
[Sat Aug 29 05:10:03.019111 2026] [security2:error] [pid 1041789:tid 1042005] [client 68.155.159.216:64102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/1.php"] [unique_id "apK-C4v3RhPI65jTFG4DeQAAA2g"]
[Sat Aug 29 05:10:03.021431 2026] [security2:error] [pid 1041789:tid 1041983] [client 52.139.37.240:13386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/wp-admin/min.php"] [unique_id "apK-C4v3RhPI65jTFG4DewAAA1I"]
[Sat Aug 29 05:10:03.037293 2026] [security2:error] [pid 1321:tid 1514] [client 158.23.184.117:21664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/002.php"] [unique_id "apK-C2jCPtor9NZ-byTZjAAABlY"]
[Sat Aug 29 05:10:03.046413 2026] [security2:error] [pid 1041789:tid 1042035] [client 20.48.250.41:50177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/erty.php"] [unique_id "apK-C4v3RhPI65jTFG4DfQAAA4Y"]
[Sat Aug 29 05:10:03.080502 2026] [security2:error] [pid 1041789:tid 1042043] [client 158.23.147.79:5946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK-C4v3RhPI65jTFG4DfgAAA44"]
[Sat Aug 29 05:10:03.081041 2026] [security2:error] [pid 1321:tid 1544] [client 20.48.251.3:43984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/wp-konfig.php"] [unique_id "apK-C2jCPtor9NZ-byTZjwAABnQ"]
[Sat Aug 29 05:10:03.094749 2026] [security2:error] [pid 1321:tid 1526] [client 20.48.250.41:33877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/wp-blogs.php"] [unique_id "apK-C2jCPtor9NZ-byTZkAAABmI"]
[Sat Aug 29 05:10:03.098498 2026] [security2:error] [pid 1041789:tid 1041941] [client 20.48.250.41:50042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/a4.php"] [unique_id "apK-C4v3RhPI65jTFG4DfwAAAyg"]
[Sat Aug 29 05:10:03.102468 2026] [security2:error] [pid 1041789:tid 1042045] [client 68.155.159.216:33741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/bk/index.php"] [unique_id "apK-C4v3RhPI65jTFG4DgAAAA5A"]
[Sat Aug 29 05:10:03.119904 2026] [security2:error] [pid 1041789:tid 1042042] [client 4.232.148.111:27569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/lock360.php"] [unique_id "apK-C4v3RhPI65jTFG4DgQAAA40"]
[Sat Aug 29 05:10:03.122347 2026] [security2:error] [pid 1321:tid 1568] [client 158.23.184.117:12132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/wp-includes/Requests/Exception/file.php"] [unique_id "apK-C2jCPtor9NZ-byTZkgAABos"]
[Sat Aug 29 05:10:03.126758 2026] [security2:error] [pid 1321:tid 1578] [client 20.48.250.41:50152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/gettest.php"] [unique_id "apK-C2jCPtor9NZ-byTZkwAABpU"]
[Sat Aug 29 05:10:03.128173 2026] [security2:error] [pid 1321:tid 1530] [client 20.220.204.93:54545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/666.php"] [unique_id "apK-C2jCPtor9NZ-byTZlAAABmY"]
[Sat Aug 29 05:10:03.143571 2026] [security2:error] [pid 1041789:tid 1042037] [client 68.155.159.216:30653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK-C4v3RhPI65jTFG4DgwAAA4g"]
[Sat Aug 29 05:10:03.144228 2026] [security2:error] [pid 1321:tid 1611] [client 93.152.221.156:53933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.nfv.mwu.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "apK-C2jCPtor9NZ-byTZlQAABrY"]
[Sat Aug 29 05:10:03.147648 2026] [security2:error] [pid 1041789:tid 1042052] [client 52.139.37.240:15567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lbttech.com"] [uri "/07.php"] [unique_id "apK-C4v3RhPI65jTFG4DhAAAA5c"]
[Sat Aug 29 05:10:03.164384 2026] [security2:error] [pid 1041789:tid 1041939] [client 20.48.250.41:45344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/cc13.php"] [unique_id "apK-C4v3RhPI65jTFG4DhQAAAyY"]
[Sat Aug 29 05:10:03.180903 2026] [security2:error] [pid 1321:tid 1513] [client 103.171.189.88:49426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-C2jCPtor9NZ-byTZlgAABlU"]
[Sat Aug 29 05:10:03.181039 2026] [security2:error] [pid 1321:tid 1513] [client 103.171.189.88:49426] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-C2jCPtor9NZ-byTZlgAABlU"]
[Sat Aug 29 05:10:03.185317 2026] [security2:error] [pid 1041789:tid 1042051] [client 158.23.184.117:21785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/0x.php"] [unique_id "apK-C4v3RhPI65jTFG4DhgAAA5Y"]
[Sat Aug 29 05:10:03.189147 2026] [security2:error] [pid 1321:tid 1507] [client 20.48.250.41:50393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/zu.php"] [unique_id "apK-C2jCPtor9NZ-byTZlwAABk8"]
[Sat Aug 29 05:10:03.204918 2026] [security2:error] [pid 1321:tid 1579] [client 4.205.62.107:51454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/apikeys.php"] [unique_id "apK-C2jCPtor9NZ-byTZmAAABpY"]
[Sat Aug 29 05:10:03.211595 2026] [security2:error] [pid 1321:tid 1488] [client 4.205.62.107:62774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/aww.php"] [unique_id "apK-C2jCPtor9NZ-byTZmQAABjw"]
[Sat Aug 29 05:10:03.212347 2026] [security2:error] [pid 1321:tid 1543] [client 20.48.251.3:9336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/brc.php"] [unique_id "apK-C2jCPtor9NZ-byTZmgAABnM"]
[Sat Aug 29 05:10:03.213067 2026] [security2:error] [pid 1321:tid 1531] [client 68.155.159.216:63821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK-C2jCPtor9NZ-byTZmwAABmc"]
[Sat Aug 29 05:10:03.216459 2026] [security2:error] [pid 1041789:tid 1041948] [client 52.139.37.240:13959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/wp-admin/wp-fileesx-449.php"] [unique_id "apK-C4v3RhPI65jTFG4DiAAAAy8"]
[Sat Aug 29 05:10:03.241922 2026] [security2:error] [pid 1321:tid 1551] [client 185.104.184.230:42620] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.eyc.paw.mybluehost.me"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "apK-C2jCPtor9NZ-byTZnAAABno"]
[Sat Aug 29 05:10:03.243958 2026] [security2:error] [pid 1041789:tid 1041947] [client 20.48.250.41:34283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/mini.php"] [unique_id "apK-C4v3RhPI65jTFG4DiQAAAy4"]
[Sat Aug 29 05:10:03.260648 2026] [security2:error] [pid 1041789:tid 1042046] [client 20.48.250.41:30705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/tfm.php"] [unique_id "apK-C4v3RhPI65jTFG4DiwAAA5E"]
[Sat Aug 29 05:10:03.289413 2026] [security2:error] [pid 1041789:tid 1041935] [client 4.205.62.107:6488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/vx.php"] [unique_id "apK-C4v3RhPI65jTFG4DjQAAAyI"]
[Sat Aug 29 05:10:03.291904 2026] [security2:error] [pid 1041789:tid 1042014] [client 20.220.204.93:54598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/knmt.php"] [unique_id "apK-C4v3RhPI65jTFG4DjgAAA3E"]
[Sat Aug 29 05:10:03.294709 2026] [security2:error] [pid 1321:tid 1549] [client 20.48.250.41:50054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/35.php"] [unique_id "apK-C2jCPtor9NZ-byTZnQAABng"]
[Sat Aug 29 05:10:03.298799 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.52.41.200:4412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-content/file.php"] [unique_id "apK-C4v3RhPI65jTFG4DjwAAA30"]
[Sat Aug 29 05:10:03.299516 2026] [security2:error] [pid 1041789:tid 1042034] [client 20.48.250.41:50285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/0x.php"] [unique_id "apK-C4v3RhPI65jTFG4DkAAAA4U"]
[Sat Aug 29 05:10:03.318065 2026] [security2:error] [pid 1321:tid 1509] [client 20.48.250.41:46062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/aa.php"] [unique_id "apK-C2jCPtor9NZ-byTZngAABlE"]
[Sat Aug 29 05:10:03.326773 2026] [security2:error] [pid 1041789:tid 1041978] [client 158.23.184.117:11898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/wp-admin/add.php"] [unique_id "apK-C4v3RhPI65jTFG4DkwAAA00"]
[Sat Aug 29 05:10:03.337592 2026] [security2:error] [pid 1041789:tid 1041933] [client 158.23.184.117:21670] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webmail.aceelectricla.com"] [uri "/1.php"] [unique_id "apK-C4v3RhPI65jTFG4DlQAAAyA"]
[Sat Aug 29 05:10:03.337686 2026] [security2:error] [pid 1041789:tid 1041933] [client 158.23.184.117:21670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/1.php"] [unique_id "apK-C4v3RhPI65jTFG4DlQAAAyA"]
[Sat Aug 29 05:10:03.341560 2026] [security2:error] [pid 1041789:tid 1041990] [client 52.139.37.240:16118] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "lbttech.com"] [uri "/c99.php"] [unique_id "apK-C4v3RhPI65jTFG4DlgAAA1k"]
[Sat Aug 29 05:10:03.346653 2026] [security2:error] [pid 1041789:tid 1041982] [client 20.48.251.3:9280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/4563.php"] [unique_id "apK-C4v3RhPI65jTFG4DlwAAA1E"]
[Sat Aug 29 05:10:03.349708 2026] [security2:error] [pid 1041789:tid 1042054] [client 20.48.250.41:50363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/lanka.php"] [unique_id "apK-C4v3RhPI65jTFG4DmAAAA5k"]
[Sat Aug 29 05:10:03.404692 2026] [security2:error] [pid 1041789:tid 1041998] [client 68.155.159.216:61248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-includes/plugins.php"] [unique_id "apK-C4v3RhPI65jTFG4DmwAAA2E"]
[Sat Aug 29 05:10:03.405426 2026] [security2:error] [pid 1041789:tid 1041951] [client 20.48.250.41:50004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/Geforce.php"] [unique_id "apK-C4v3RhPI65jTFG4DnAAAAzI"]
[Sat Aug 29 05:10:03.409401 2026] [security2:error] [pid 1041789:tid 1042031] [client 20.48.250.41:33872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/amp.php"] [unique_id "apK-C4v3RhPI65jTFG4DnQAAA4I"]
[Sat Aug 29 05:10:03.411276 2026] [security2:error] [pid 1041789:tid 1042017] [client 158.23.184.117:25704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.dj/index.php"] [unique_id "apK-C4v3RhPI65jTFG4DngAAA3Q"]
[Sat Aug 29 05:10:03.416974 2026] [security2:error] [pid 1321:tid 1607] [client 93.152.221.156:53145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.nfv.mwu.mybluehost.me"] [uri "/test.php"] [unique_id "apK-C2jCPtor9NZ-byTZnwAABrI"]
[Sat Aug 29 05:10:03.426470 2026] [security2:error] [pid 1041789:tid 1042053] [client 34.50.189.51:57456] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "discocollective.kriveloff-associates.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2fapp/.env"] [unique_id "apK-C4v3RhPI65jTFG4DoQAAA5g"]
[Sat Aug 29 05:10:03.426645 2026] [security2:error] [pid 1321:tid 1573] [client 114.119.138.239:43109] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.classiclightingusa.com"] [uri "/catalog/index.php/cPath/7/osCsid/f9beb0085e17af9083c639c8b0f2232f"] [unique_id "apK-C2jCPtor9NZ-byTZoAAABpA"], referer: http://www.classiclightingusa.com/catalog/product_info.php/products_id/639/osCsid/f9beb0085e17af9083c639c8b0f2232f
[Sat Aug 29 05:10:03.427045 2026] [security2:error] [pid 1041789:tid 1042056] [client 68.155.159.216:49307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK-C4v3RhPI65jTFG4DogAAA5s"]
[Sat Aug 29 05:10:03.428065 2026] [security2:error] [pid 1321:tid 1576] [client 34.50.189.51:57462] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "discocollective.kriveloff-associates.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2fproc/self/environ"] [unique_id "apK-C2jCPtor9NZ-byTZoQAABpM"]
[Sat Aug 29 05:10:03.428210 2026] [security2:error] [pid 1321:tid 1588] [client 34.50.189.51:57428] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "discocollective.kriveloff-associates.com"] [uri "/@fs/var/www/html/wp-config.php"] [unique_id "apK-C2jCPtor9NZ-byTZogAABp8"]
[Sat Aug 29 05:10:03.428275 2026] [security2:error] [pid 1321:tid 1588] [client 34.50.189.51:57428] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "discocollective.kriveloff-associates.com"] [uri "/@fs/var/www/html/wp-config.php"] [unique_id "apK-C2jCPtor9NZ-byTZogAABp8"]
[Sat Aug 29 05:10:03.428461 2026] [core:error] [pid 1041789:tid 1042009] [client 34.50.189.51:57430] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:03.428474 2026] [core:error] [pid 1041789:tid 1042009] [client 34.50.189.51:57430] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:03.428543 2026] [core:error] [pid 1041789:tid 1042044] [client 34.50.189.51:57420] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:03.428557 2026] [security2:error] [pid 1041789:tid 1042009] [client 34.50.189.51:57430] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "discocollective.kriveloff-associates.com"] [uri "/index.php"] [unique_id "apK-C4v3RhPI65jTFG4DnwAAA2w"]
[Sat Aug 29 05:10:03.428560 2026] [core:error] [pid 1041789:tid 1042044] [client 34.50.189.51:57420] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:03.429879 2026] [core:error] [pid 1321:tid 1601] [client 34.50.189.51:57482] AH10244: invalid URI path (/@fs/../../../../../root/.env?raw??)
[Sat Aug 29 05:10:03.430368 2026] [security2:error] [pid 1041789:tid 1041979] [client 34.50.189.51:57468] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "discocollective.kriveloff-associates.com"] [uri "/cgi-sys/404.html"] [unique_id "apK-C4v3RhPI65jTFG4DowAAA04"]
[Sat Aug 29 05:10:03.430534 2026] [security2:error] [pid 1041789:tid 1042029] [client 34.50.189.51:57414] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/@fs/root/.ssh/id_rsa"] [unique_id "apK-C4v3RhPI65jTFG4DpAAAA4A"]
[Sat Aug 29 05:10:03.430933 2026] [core:error] [pid 1321:tid 1601] [client 34.50.189.51:57482] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:03.432595 2026] [core:error] [pid 1041789:tid 1041980] [client 34.50.189.51:57580] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:03.432610 2026] [core:error] [pid 1041789:tid 1041980] [client 34.50.189.51:57580] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:03.433012 2026] [security2:error] [pid 1321:tid 1592] [client 34.50.189.51:57458] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "discocollective.kriveloff-associates.com"] [uri "/@fs/../../../../../proc/self/environ"] [unique_id "apK-C2jCPtor9NZ-byTZpwAABqM"]
[Sat Aug 29 05:10:03.434062 2026] [core:error] [pid 1321:tid 1532] [client 34.50.189.51:57422] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:03.434073 2026] [core:error] [pid 1321:tid 1532] [client 34.50.189.51:57422] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:03.434442 2026] [core:error] [pid 1321:tid 1522] [client 34.50.189.51:57510] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:03.434453 2026] [core:error] [pid 1321:tid 1522] [client 34.50.189.51:57510] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:03.435048 2026] [core:error] [pid 1041789:tid 1041962] [client 34.50.189.51:57498] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:03.435056 2026] [core:error] [pid 1041789:tid 1041962] [client 34.50.189.51:57498] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:03.435103 2026] [core:error] [pid 1321:tid 1606] [client 34.50.189.51:57452] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:03.435112 2026] [core:error] [pid 1321:tid 1606] [client 34.50.189.51:57452] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:03.435177 2026] [security2:error] [pid 1321:tid 1524] [client 52.139.37.240:13969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/wp-content/themes/min.php"] [unique_id "apK-C2jCPtor9NZ-byTZqgAABmA"]
[Sat Aug 29 05:10:03.435674 2026] [core:error] [pid 1041789:tid 1042040] [client 34.50.189.51:57588] AH10244: invalid URI path (/@fs/../../../../../app/.env?raw??)
[Sat Aug 29 05:10:03.435789 2026] [core:error] [pid 1321:tid 1565] [client 34.50.189.51:57572] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:03.435801 2026] [core:error] [pid 1321:tid 1565] [client 34.50.189.51:57572] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:03.435915 2026] [security2:error] [pid 1321:tid 1565] [client 34.50.189.51:57572] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "discocollective.kriveloff-associates.com"] [uri "/index.php"] [unique_id "apK-C2jCPtor9NZ-byTZqAAABog"]
[Sat Aug 29 05:10:03.436608 2026] [core:error] [pid 1321:tid 1574] [client 34.50.189.51:57558] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:03.436617 2026] [core:error] [pid 1321:tid 1574] [client 34.50.189.51:57558] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:03.437700 2026] [core:error] [pid 1321:tid 1490] [client 34.50.189.51:57604] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:03.437710 2026] [core:error] [pid 1321:tid 1490] [client 34.50.189.51:57604] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:03.438124 2026] [core:error] [pid 1041789:tid 1042005] [client 34.50.189.51:57626] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:03.438135 2026] [core:error] [pid 1041789:tid 1042005] [client 34.50.189.51:57626] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:03.438139 2026] [core:error] [pid 1041789:tid 1042000] [client 34.50.189.51:57694] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:03.438147 2026] [core:error] [pid 1041789:tid 1042000] [client 34.50.189.51:57694] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:03.438380 2026] [core:error] [pid 1041789:tid 1042040] [client 34.50.189.51:57588] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:03.439876 2026] [core:error] [pid 1321:tid 1587] [client 34.50.189.51:57616] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:03.439904 2026] [core:error] [pid 1321:tid 1587] [client 34.50.189.51:57616] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:03.440026 2026] [security2:error] [pid 1321:tid 1587] [client 34.50.189.51:57616] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "discocollective.kriveloff-associates.com"] [uri "/index.php"] [unique_id "apK-C2jCPtor9NZ-byTZrQAABp4"]
[Sat Aug 29 05:10:03.440682 2026] [core:error] [pid 1321:tid 1512] [client 34.50.189.51:57656] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:03.440694 2026] [core:error] [pid 1321:tid 1512] [client 34.50.189.51:57656] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:03.440739 2026] [core:error] [pid 1041789:tid 1041963] [client 34.50.189.51:57686] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:03.440745 2026] [core:error] [pid 1041789:tid 1041963] [client 34.50.189.51:57686] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:03.441222 2026] [core:error] [pid 1041789:tid 1042035] [client 34.50.189.51:57664] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:03.441230 2026] [core:error] [pid 1041789:tid 1042035] [client 34.50.189.51:57664] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:03.470756 2026] [security2:error] [pid 1041789:tid 1041948] [client 20.151.200.44:22202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/sf.php"] [unique_id "apK-C4v3RhPI65jTFG4DswAAAy8"]
[Sat Aug 29 05:10:03.473331 2026] [security2:error] [pid 1041789:tid 1041932] [client 20.48.250.41:45961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/s1.php"] [unique_id "apK-C4v3RhPI65jTFG4DtAAAAx8"]
[Sat Aug 29 05:10:03.475424 2026] [security2:error] [pid 1321:tid 1533] [client 158.23.184.117:12113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/wp-includes/assets/about.php"] [unique_id "apK-C2jCPtor9NZ-byTZsQAABmk"]
[Sat Aug 29 05:10:03.478269 2026] [security2:error] [pid 1041789:tid 1042057] [client 20.48.250.41:50061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/maraz.php"] [unique_id "apK-C4v3RhPI65jTFG4DtwAAA5w"]
[Sat Aug 29 05:10:03.480894 2026] [security2:error] [pid 1041789:tid 1041995] [client 20.48.251.3:46621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/lala.php"] [unique_id "apK-C4v3RhPI65jTFG4DuAAAA14"]
[Sat Aug 29 05:10:03.482887 2026] [security2:error] [pid 1041789:tid 1041972] [client 158.23.184.117:21790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/10.php"] [unique_id "apK-C4v3RhPI65jTFG4DuQAAA0c"]
[Sat Aug 29 05:10:03.509141 2026] [security2:error] [pid 1041789:tid 1041935] [client 20.48.250.41:50255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/66.php"] [unique_id "apK-C4v3RhPI65jTFG4DvAAAAyI"]
[Sat Aug 29 05:10:03.509717 2026] [security2:error] [pid 1041789:tid 1041975] [client 74.248.24.12:4369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/menu.php"] [unique_id "apK-C4v3RhPI65jTFG4DvQAAA0o"]
[Sat Aug 29 05:10:03.517863 2026] [security2:error] [pid 1041789:tid 1042014] [client 20.220.204.93:55922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/sbhu.php"] [unique_id "apK-C4v3RhPI65jTFG4DvwAAA3E"]
[Sat Aug 29 05:10:03.524351 2026] [security2:error] [pid 1041789:tid 1041954] [client 20.48.250.41:50304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/gettest.php"] [unique_id "apK-C4v3RhPI65jTFG4DwAAAAzU"]
[Sat Aug 29 05:10:03.536470 2026] [security2:error] [pid 1041789:tid 1041938] [client 52.139.37.240:16102] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "lbttech.com"] [uri "/c99.php"] [unique_id "apK-C4v3RhPI65jTFG4DwQAAAyU"]
[Sat Aug 29 05:10:03.542962 2026] [security2:error] [pid 1041789:tid 1042034] [client 185.104.184.230:42622] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.eyc.paw.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "apK-C4v3RhPI65jTFG4DwgAAA4U"]
[Sat Aug 29 05:10:03.548220 2026] [security2:error] [pid 1041789:tid 1041992] [client 158.23.147.79:62746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-content/languages/about.php"] [unique_id "apK-C4v3RhPI65jTFG4DwwAAA1s"]
[Sat Aug 29 05:10:03.554257 2026] [security2:error] [pid 1041789:tid 1041931] [client 158.23.184.117:25681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.info.php"] [unique_id "apK-C4v3RhPI65jTFG4DxAAAAx4"]
[Sat Aug 29 05:10:03.567568 2026] [security2:error] [pid 1321:tid 1540] [client 20.48.250.41:33905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/cc13.php"] [unique_id "apK-C2jCPtor9NZ-byTZsgAABnA"]
[Sat Aug 29 05:10:03.577087 2026] [security2:error] [pid 1321:tid 1614] [client 68.155.159.216:62742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK-C2jCPtor9NZ-byTZtAAABrk"]
[Sat Aug 29 05:10:03.581528 2026] [security2:error] [pid 1041789:tid 1041949] [client 20.104.49.130:51367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/read.php"] [unique_id "apK-C4v3RhPI65jTFG4DxQAAAzA"]
[Sat Aug 29 05:10:03.609626 2026] [security2:error] [pid 1041789:tid 1042006] [client 20.48.250.41:45315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/0byte.php"] [unique_id "apK-C4v3RhPI65jTFG4DxgAAA2k"]
[Sat Aug 29 05:10:03.612230 2026] [security2:error] [pid 1041789:tid 1042043] [client 4.232.148.111:19530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-conflg.php"] [unique_id "apK-C4v3RhPI65jTFG4DxwAAA44"]
[Sat Aug 29 05:10:03.617384 2026] [security2:error] [pid 1041789:tid 1041977] [client 20.48.250.41:53429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/kbfr.php"] [unique_id "apK-C4v3RhPI65jTFG4DyAAAA0w"]
[Sat Aug 29 05:10:03.622223 2026] [security2:error] [pid 1321:tid 1523] [client 20.48.251.3:46557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/sdsa.php"] [unique_id "apK-C2jCPtor9NZ-byTZtQAABl8"]
[Sat Aug 29 05:10:03.624770 2026] [security2:error] [pid 1321:tid 1602] [client 158.23.184.117:21779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/100.php"] [unique_id "apK-C2jCPtor9NZ-byTZtgAABq0"]
[Sat Aug 29 05:10:03.630540 2026] [security2:error] [pid 1041789:tid 1041978] [client 158.23.184.117:12116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/wp-content/themes/twentytwentythree.php"] [unique_id "apK-C4v3RhPI65jTFG4DygAAA00"]
[Sat Aug 29 05:10:03.646064 2026] [security2:error] [pid 1041789:tid 1042021] [client 52.139.37.240:13387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/wp-content/themes/x/bypass.php"] [unique_id "apK-C4v3RhPI65jTFG4DywAAA3g"]
[Sat Aug 29 05:10:03.653672 2026] [security2:error] [pid 1041789:tid 1041998] [client 68.155.159.216:23362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/lv.php"] [unique_id "apK-C4v3RhPI65jTFG4DzAAAA2E"]
[Sat Aug 29 05:10:03.668862 2026] [security2:error] [pid 1041789:tid 1042056] [client 20.48.250.41:49960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/click.php"] [unique_id "apK-C4v3RhPI65jTFG4DzQAAA5s"]
[Sat Aug 29 05:10:03.669314 2026] [security2:error] [pid 1321:tid 1613] [client 20.48.250.41:50243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/f35.php"] [unique_id "apK-C2jCPtor9NZ-byTZtwAABrg"]
[Sat Aug 29 05:10:03.690915 2026] [security2:error] [pid 1321:tid 1510] [client 20.48.250.41:50349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/35.php"] [unique_id "apK-C2jCPtor9NZ-byTZuAAABlI"]
[Sat Aug 29 05:10:03.697725 2026] [security2:error] [pid 1041789:tid 1041944] [client 158.23.184.117:25995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.trash7206/index.php"] [unique_id "apK-C4v3RhPI65jTFG4DzwAAAys"]
[Sat Aug 29 05:10:03.711801 2026] [security2:error] [pid 1041789:tid 1041963] [client 4.205.62.107:63929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/public/vx.php"] [unique_id "apK-C4v3RhPI65jTFG4D0AAAAz4"]
[Sat Aug 29 05:10:03.732717 2026] [security2:error] [pid 1321:tid 1537] [client 52.139.37.240:15448] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "lbttech.com"] [uri "/c99.php"] [unique_id "apK-C2jCPtor9NZ-byTZugAABm0"]
[Sat Aug 29 05:10:03.746730 2026] [security2:error] [pid 1321:tid 1548] [client 20.48.250.41:34484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/aa.php"] [unique_id "apK-C2jCPtor9NZ-byTZuwAABnc"]
[Sat Aug 29 05:10:03.753424 2026] [security2:error] [pid 1041789:tid 1042037] [client 20.48.250.41:46070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/xr.php"] [unique_id "apK-C4v3RhPI65jTFG4D0wAAA4g"]
[Sat Aug 29 05:10:03.757158 2026] [security2:error] [pid 1041789:tid 1042052] [client 20.48.251.3:46541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/bengi.php"] [unique_id "apK-C4v3RhPI65jTFG4D1AAAA5c"]
[Sat Aug 29 05:10:03.760600 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.52.41.200:4619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/files.php"] [unique_id "apK-C4v3RhPI65jTFG4D1QAAA3o"]
[Sat Aug 29 05:10:03.769511 2026] [security2:error] [pid 1041789:tid 1042035] [client 158.23.184.117:21681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/2.php"] [unique_id "apK-C4v3RhPI65jTFG4D1wAAA4Y"]
[Sat Aug 29 05:10:03.797106 2026] [security2:error] [pid 1041789:tid 1042018] [client 40.83.93.50:16481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-admin/network/xmrlpc.php"] [unique_id "apK-C4v3RhPI65jTFG4D2AAAA3U"]
[Sat Aug 29 05:10:03.806565 2026] [security2:error] [pid 1041789:tid 1041948] [client 20.220.204.93:55375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/a332.php"] [unique_id "apK-C4v3RhPI65jTFG4D2QAAAy8"]
[Sat Aug 29 05:10:03.809884 2026] [security2:error] [pid 1321:tid 1491] [client 20.48.250.41:50256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/wen.php"] [unique_id "apK-C2jCPtor9NZ-byTZvQAABj8"]
[Sat Aug 29 05:10:03.829981 2026] [security2:error] [pid 1321:tid 1554] [client 158.23.184.117:12128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/wp-content/languages/themes/num.php"] [unique_id "apK-C2jCPtor9NZ-byTZwQAABn0"]
[Sat Aug 29 05:10:03.838035 2026] [security2:error] [pid 1041789:tid 1041932] [client 93.152.221.156:50587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.nfv.mwu.mybluehost.me"] [uri "/info.php"] [unique_id "apK-C4v3RhPI65jTFG4D4wAAAx8"]
[Sat Aug 29 05:10:03.840536 2026] [security2:error] [pid 1041789:tid 1042051] [client 158.23.184.117:25708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.trash7206/min.php"] [unique_id "apK-C4v3RhPI65jTFG4D5AAAA5Y"]
[Sat Aug 29 05:10:03.862343 2026] [security2:error] [pid 1041789:tid 1041968] [client 20.48.250.41:53384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/wp-act.php"] [unique_id "apK-C4v3RhPI65jTFG4D5gAAA0M"]
[Sat Aug 29 05:10:03.863656 2026] [security2:error] [pid 1321:tid 1585] [client 68.155.159.216:1912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/themes.php"] [unique_id "apK-C2jCPtor9NZ-byTZwwAABpw"]
[Sat Aug 29 05:10:03.865432 2026] [security2:error] [pid 1041789:tid 1042057] [client 185.104.184.230:42624] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.eyc.paw.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "apK-C4v3RhPI65jTFG4D5wAAA5w"]
[Sat Aug 29 05:10:03.868843 2026] [security2:error] [pid 1321:tid 1593] [client 20.48.250.41:50362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/maraz.php"] [unique_id "apK-C2jCPtor9NZ-byTZxQAABqQ"]
[Sat Aug 29 05:10:03.885121 2026] [autoindex:error] [pid 1321:tid 1538] [client 52.139.37.240:0] AH01276: Cannot serve directory /home2/angelesf/public_html/jamesmarquiss/wp-includes/images/media/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:10:03.891480 2026] [security2:error] [pid 1321:tid 1594] [client 158.23.147.79:11441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK-C2jCPtor9NZ-byTZxgAABqU"]
[Sat Aug 29 05:10:03.893288 2026] [security2:error] [pid 1041789:tid 1041971] [client 20.48.251.3:46537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/groceries/index.php"] [unique_id "apK-C4v3RhPI65jTFG4D6AAAA0Y"]
[Sat Aug 29 05:10:03.913788 2026] [security2:error] [pid 1041789:tid 1041995] [client 158.23.184.117:21674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/222.php"] [unique_id "apK-C4v3RhPI65jTFG4D6QAAA14"]
[Sat Aug 29 05:10:03.922104 2026] [security2:error] [pid 1321:tid 1508] [client 20.48.250.41:46015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/h02ugyh.php"] [unique_id "apK-C2jCPtor9NZ-byTZyAAABlA"]
[Sat Aug 29 05:10:03.922299 2026] [security2:error] [pid 1041789:tid 1041992] [client 20.48.250.41:34252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/s1.php"] [unique_id "apK-C4v3RhPI65jTFG4D6gAAA1s"]
[Sat Aug 29 05:10:03.941605 2026] [security2:error] [pid 1321:tid 1498] [client 20.48.250.41:49998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/ms.php"] [unique_id "apK-C2jCPtor9NZ-byTZyQAABkY"]
[Sat Aug 29 05:10:03.948083 2026] [security2:error] [pid 1041789:tid 1041950] [client 4.205.62.107:53121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/old_phpinfo.php"] [unique_id "apK-C4v3RhPI65jTFG4D6wAAAzE"]
[Sat Aug 29 05:10:03.962930 2026] [security2:error] [pid 1041789:tid 1041978] [client 158.23.147.79:55900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK-C4v3RhPI65jTFG4D7gAAA00"]
[Sat Aug 29 05:10:03.978023 2026] [security2:error] [pid 1041789:tid 1041951] [client 20.220.204.93:55894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/ws66.php"] [unique_id "apK-C4v3RhPI65jTFG4D7wAAAzI"]
[Sat Aug 29 05:10:03.978122 2026] [security2:error] [pid 1041789:tid 1042010] [client 158.23.184.117:11885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/wp.php"] [unique_id "apK-C4v3RhPI65jTFG4D8AAAA20"]
[Sat Aug 29 05:10:03.985414 2026] [security2:error] [pid 1041789:tid 1042009] [client 52.139.37.240:13972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK-C4v3RhPI65jTFG4D8QAAA2w"]
[Sat Aug 29 05:10:03.986321 2026] [security2:error] [pid 1041789:tid 1042053] [client 20.48.250.41:50188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/inc.php"] [unique_id "apK-C4v3RhPI65jTFG4D8gAAA5g"]
[Sat Aug 29 05:10:03.989975 2026] [security2:error] [pid 1041789:tid 1041976] [client 68.155.159.216:38535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-C4v3RhPI65jTFG4D9AAAA0s"]
[Sat Aug 29 05:10:03.999614 2026] [security2:error] [pid 1041789:tid 1042028] [client 68.155.159.216:18291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK-C4v3RhPI65jTFG4D9QAAA38"]
[Sat Aug 29 05:10:04.008981 2026] [security2:error] [pid 1041789:tid 1042032] [client 20.48.250.41:29645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/kbfr.php"] [unique_id "apK-DIv3RhPI65jTFG4D9gAAA4M"]
[Sat Aug 29 05:10:04.025835 2026] [security2:error] [pid 1321:tid 1550] [client 74.248.24.12:4340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK-DGjCPtor9NZ-byTZygAABnk"]
[Sat Aug 29 05:10:04.029311 2026] [security2:error] [pid 1041789:tid 1041941] [client 20.48.251.3:46634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/server-info.php"] [unique_id "apK-DIv3RhPI65jTFG4D9wAAAyg"]
[Sat Aug 29 05:10:04.035934 2026] [security2:error] [pid 1321:tid 1530] [client 20.48.250.41:53494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/24.php"] [unique_id "apK-DGjCPtor9NZ-byTZywAABmY"]
[Sat Aug 29 05:10:04.039188 2026] [security2:error] [pid 1321:tid 1596] [client 68.155.159.216:9335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/packed.php"] [unique_id "apK-DGjCPtor9NZ-byTZzAAABqc"]
[Sat Aug 29 05:10:04.056696 2026] [security2:error] [pid 1041789:tid 1041942] [client 20.48.250.41:46048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/xxw.php"] [unique_id "apK-DIv3RhPI65jTFG4D-AAAAyk"]
[Sat Aug 29 05:10:04.063771 2026] [security2:error] [pid 1041789:tid 1042037] [client 20.48.250.41:33917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/0byte.php"] [unique_id "apK-DIv3RhPI65jTFG4D-QAAA4g"]
[Sat Aug 29 05:10:04.085923 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.48.250.41:49997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/zxekqlxb.php"] [unique_id "apK-DIv3RhPI65jTFG4D-gAAA3o"]
[Sat Aug 29 05:10:04.094766 2026] [security2:error] [pid 1041789:tid 1041990] [client 4.232.148.111:11942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/123.php"] [unique_id "apK-DIv3RhPI65jTFG4D-wAAA1k"]
[Sat Aug 29 05:10:04.108799 2026] [security2:error] [pid 1321:tid 1513] [client 93.152.221.156:54976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.nfv.mwu.mybluehost.me"] [uri "/php.php"] [unique_id "apK-DGjCPtor9NZ-byTZzQAABlU"]
[Sat Aug 29 05:10:04.120583 2026] [security2:error] [pid 1041789:tid 1041969] [client 20.151.200.44:63709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/super.php"] [unique_id "apK-DIv3RhPI65jTFG4D_AAAA0Q"]
[Sat Aug 29 05:10:04.125827 2026] [security2:error] [pid 1041789:tid 1042046] [client 20.220.204.93:54537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/ws68.php"] [unique_id "apK-DIv3RhPI65jTFG4D_QAAA5E"]
[Sat Aug 29 05:10:04.134228 2026] [security2:error] [pid 1321:tid 1557] [client 20.48.250.41:50223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/6bcwiqwj.php"] [unique_id "apK-DGjCPtor9NZ-byTZzgAABoA"]
[Sat Aug 29 05:10:04.151529 2026] [security2:error] [pid 1321:tid 1488] [client 4.205.62.107:22507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/bb.php"] [unique_id "apK-DGjCPtor9NZ-byTZ0gAABjw"]
[Sat Aug 29 05:10:04.163745 2026] [proxy_http:error] [pid 1041789:tid 1041936] (20014)Internal error (specific information not available): [client 34.187.81.14:47250] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:10:04.163760 2026] [proxy:error] [pid 1041789:tid 1041936] [client 34.187.81.14:47250] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/app/.git/config
[Sat Aug 29 05:10:04.164653 2026] [proxy_http:error] [pid 1321:tid 1558] (20014)Internal error (specific information not available): [client 34.187.81.14:47140] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:10:04.164671 2026] [proxy:error] [pid 1321:tid 1558] [client 34.187.81.14:47140] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/html/.git/config
[Sat Aug 29 05:10:04.166440 2026] [security2:error] [pid 1321:tid 1543] [client 20.48.251.3:46603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/xve22.php"] [unique_id "apK-DGjCPtor9NZ-byTZ1gAABnM"]
[Sat Aug 29 05:10:04.171351 2026] [proxy_http:error] [pid 1321:tid 1558] (20014)Internal error (specific information not available): [client 34.187.81.14:47140] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:10:04.171399 2026] [proxy:error] [pid 1321:tid 1558] [client 34.187.81.14:47140] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/502.shtml
[Sat Aug 29 05:10:04.172613 2026] [security2:error] [pid 1041789:tid 1042041] [client 20.48.250.41:29674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/wp-act.php"] [unique_id "apK-DIv3RhPI65jTFG4EEQAAA4w"]
[Sat Aug 29 05:10:04.176098 2026] [proxy_http:error] [pid 1041789:tid 1042000] (20014)Internal error (specific information not available): [client 34.187.81.14:47164] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:10:04.176111 2026] [proxy:error] [pid 1041789:tid 1042000] [client 34.187.81.14:47164] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/api/.git/config
[Sat Aug 29 05:10:04.177903 2026] [security2:error] [pid 1041789:tid 1042026] [client 185.104.184.230:42628] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.eyc.paw.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "apK-DIv3RhPI65jTFG4EEgAAA30"]
[Sat Aug 29 05:10:04.181335 2026] [proxy_http:error] [pid 1041789:tid 1041983] (20014)Internal error (specific information not available): [client 34.187.81.14:47234] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:10:04.181344 2026] [proxy:error] [pid 1041789:tid 1041983] [client 34.187.81.14:47234] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/var/www/.git/config
[Sat Aug 29 05:10:04.187739 2026] [security2:error] [pid 1321:tid 1551] [client 20.48.250.41:46024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/bolt.php"] [unique_id "apK-DGjCPtor9NZ-byTZ1wAABno"]
[Sat Aug 29 05:10:04.191456 2026] [security2:error] [pid 1041789:tid 1041931] [client 158.23.147.79:5898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK-DIv3RhPI65jTFG4EFAAAAx4"]
[Sat Aug 29 05:10:04.191740 2026] [security2:error] [pid 1041789:tid 1041948] [client 52.139.37.240:14007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/wp-info.php"] [unique_id "apK-DIv3RhPI65jTFG4EFQAAAy8"]
[Sat Aug 29 05:10:04.192754 2026] [proxy_http:error] [pid 1041789:tid 1042000] (20014)Internal error (specific information not available): [client 34.187.81.14:47164] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:10:04.192767 2026] [proxy:error] [pid 1041789:tid 1042000] [client 34.187.81.14:47164] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/502.shtml
[Sat Aug 29 05:10:04.195724 2026] [security2:error] [pid 1321:tid 1555] [client 20.48.250.41:53502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/155.php"] [unique_id "apK-DGjCPtor9NZ-byTZ2QAABn4"]
[Sat Aug 29 05:10:04.195748 2026] [security2:error] [pid 1041789:tid 1041939] [client 20.48.250.41:34259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/xr.php"] [unique_id "apK-DIv3RhPI65jTFG4EFgAAAyY"]
[Sat Aug 29 05:10:04.204179 2026] [security2:error] [pid 1041789:tid 1041933] [client 68.155.159.216:33739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.avondalegroveshoa.com"] [uri "/first.php"] [unique_id "apK-DIv3RhPI65jTFG4EFwAAAyA"]
[Sat Aug 29 05:10:04.232980 2026] [security2:error] [pid 1321:tid 1595] [client 20.52.41.200:4405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/o.php"] [unique_id "apK-DGjCPtor9NZ-byTZ2gAABqY"]
[Sat Aug 29 05:10:04.259124 2026] [security2:error] [pid 1041789:tid 1042006] [client 20.48.250.41:49949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/init.php"] [unique_id "apK-DIv3RhPI65jTFG4EGQAAA2k"]
[Sat Aug 29 05:10:04.272568 2026] [security2:error] [pid 1041789:tid 1042018] [client 40.83.93.50:18330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-admin/options-general.php"] [unique_id "apK-DIv3RhPI65jTFG4EGgAAA3U"]
[Sat Aug 29 05:10:04.296171 2026] [security2:error] [pid 1041789:tid 1041978] [client 20.48.250.41:50266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/easy.php"] [unique_id "apK-DIv3RhPI65jTFG4EGwAAA00"]
[Sat Aug 29 05:10:04.300021 2026] [security2:error] [pid 1321:tid 1615] [client 20.48.251.3:46622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/privacy.php"] [unique_id "apK-DGjCPtor9NZ-byTZ2wAABro"]
[Sat Aug 29 05:10:04.304315 2026] [security2:error] [pid 1041789:tid 1041981] [client 20.48.250.41:50375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/24.php"] [unique_id "apK-DIv3RhPI65jTFG4EHAAAA1A"]
[Sat Aug 29 05:10:04.315878 2026] [security2:error] [pid 1041789:tid 1042030] [client 68.155.159.216:64409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/themes.php"] [unique_id "apK-DIv3RhPI65jTFG4EHQAAA4E"]
[Sat Aug 29 05:10:04.318515 2026] [security2:error] [pid 1041789:tid 1042021] [client 68.155.159.216:33785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-admin/index.php"] [unique_id "apK-DIv3RhPI65jTFG4EHgAAA3g"]
[Sat Aug 29 05:10:04.322485 2026] [security2:error] [pid 1041789:tid 1041998] [client 20.104.49.130:51124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/wp-blog-header.php"] [unique_id "apK-DIv3RhPI65jTFG4EHwAAA2E"]
[Sat Aug 29 05:10:04.324988 2026] [security2:error] [pid 1321:tid 1509] [client 20.48.250.41:46059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/rtx.php"] [unique_id "apK-DGjCPtor9NZ-byTZ3QAABlE"]
[Sat Aug 29 05:10:04.335313 2026] [security2:error] [pid 1041789:tid 1042009] [client 4.205.62.107:58450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/god.php"] [unique_id "apK-DIv3RhPI65jTFG4EIAAAA2w"]
[Sat Aug 29 05:10:04.348368 2026] [security2:error] [pid 1041789:tid 1042053] [client 4.205.62.107:59090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/maxro.php"] [unique_id "apK-DIv3RhPI65jTFG4EIQAAA5g"]
[Sat Aug 29 05:10:04.364892 2026] [security2:error] [pid 1041789:tid 1042028] [client 20.48.250.41:33863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/h02ugyh.php"] [unique_id "apK-DIv3RhPI65jTFG4EIgAAA38"]
[Sat Aug 29 05:10:04.365832 2026] [security2:error] [pid 1321:tid 1559] [client 20.48.250.41:53488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/file.php"] [unique_id "apK-DGjCPtor9NZ-byTZ3gAABoI"]
[Sat Aug 29 05:10:04.371915 2026] [security2:error] [pid 1321:tid 1500] [client 20.151.200.44:21895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/lufix1.php"] [unique_id "apK-DGjCPtor9NZ-byTZ3wAABkg"]
[Sat Aug 29 05:10:04.381623 2026] [security2:error] [pid 1321:tid 1573] [client 93.152.221.156:61898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.nfv.mwu.mybluehost.me"] [uri "/php_info.php"] [unique_id "apK-DGjCPtor9NZ-byTZ4AAABpA"]
[Sat Aug 29 05:10:04.403599 2026] [security2:error] [pid 1041789:tid 1041951] [client 52.139.37.240:13966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/wp-wordfence-waf.php"] [unique_id "apK-DIv3RhPI65jTFG4EIwAAAzI"]
[Sat Aug 29 05:10:04.424645 2026] [security2:error] [pid 1041789:tid 1041942] [client 4.205.62.107:6960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/ty.php"] [unique_id "apK-DIv3RhPI65jTFG4EJAAAAyk"]
[Sat Aug 29 05:10:04.430434 2026] [security2:error] [pid 1041789:tid 1042035] [client 20.48.251.3:43973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/zaza.php"] [unique_id "apK-DIv3RhPI65jTFG4EJQAAA4Y"]
[Sat Aug 29 05:10:04.458420 2026] [security2:error] [pid 1321:tid 1592] [client 20.48.250.41:45900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/ckk.php"] [unique_id "apK-DGjCPtor9NZ-byTZ4wAABqM"]
[Sat Aug 29 05:10:04.458588 2026] [proxy_http:error] [pid 1041789:tid 1041967] (20014)Internal error (specific information not available): [client 34.187.81.14:54632] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:10:04.458600 2026] [proxy:error] [pid 1041789:tid 1041967] [client 34.187.81.14:54632] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/src/.git/config
[Sat Aug 29 05:10:04.474215 2026] [proxy_http:error] [pid 1041789:tid 1041969] (20014)Internal error (specific information not available): [client 34.187.81.14:54676] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:10:04.474228 2026] [proxy:error] [pid 1041789:tid 1041969] [client 34.187.81.14:54676] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/site/.git/config
[Sat Aug 29 05:10:04.485571 2026] [security2:error] [pid 1041789:tid 1042017] [client 158.23.147.79:63000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-content/radio.php"] [unique_id "apK-DIv3RhPI65jTFG4EMQAAA3Q"]
[Sat Aug 29 05:10:04.487471 2026] [security2:error] [pid 1041789:tid 1041943] [client 185.104.184.230:42644] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.eyc.paw.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "apK-DIv3RhPI65jTFG4EMgAAAyo"]
[Sat Aug 29 05:10:04.488727 2026] [proxy_http:error] [pid 1041789:tid 1041979] (20014)Internal error (specific information not available): [client 34.187.81.14:54710] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:10:04.488744 2026] [proxy:error] [pid 1041789:tid 1041979] [client 34.187.81.14:54710] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/public/.git/config
[Sat Aug 29 05:10:04.490657 2026] [security2:error] [pid 1041789:tid 1041977] [client 20.220.204.93:55913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/users.php"] [unique_id "apK-DIv3RhPI65jTFG4EMwAAA0w"]
[Sat Aug 29 05:10:04.493520 2026] [security2:error] [pid 1041789:tid 1041980] [client 20.48.250.41:50183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/fresh3.php"] [unique_id "apK-DIv3RhPI65jTFG4ENAAAA08"]
[Sat Aug 29 05:10:04.494519 2026] [proxy_http:error] [pid 1041789:tid 1041956] (20014)Internal error (specific information not available): [client 34.187.81.14:54722] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:10:04.494536 2026] [proxy:error] [pid 1041789:tid 1041956] [client 34.187.81.14:54722] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/api/.git/config
[Sat Aug 29 05:10:04.497518 2026] [security2:error] [pid 1041789:tid 1042044] [client 20.48.250.41:50370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/155.php"] [unique_id "apK-DIv3RhPI65jTFG4ENQAAA48"]
[Sat Aug 29 05:10:04.499694 2026] [security2:error] [pid 1041789:tid 1041982] [client 20.48.250.41:34459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/xxw.php"] [unique_id "apK-DIv3RhPI65jTFG4ENgAAA1E"]
[Sat Aug 29 05:10:04.509771 2026] [security2:error] [pid 1041789:tid 1041968] [client 68.155.159.216:56563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK-DIv3RhPI65jTFG4ENwAAA0M"]
[Sat Aug 29 05:10:04.522102 2026] [security2:error] [pid 1321:tid 1565] [client 68.155.159.216:49312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/log-mama/function.php"] [unique_id "apK-DGjCPtor9NZ-byTZ5QAABog"]
[Sat Aug 29 05:10:04.555426 2026] [security2:error] [pid 1321:tid 1605] [client 68.155.159.216:1945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK-DGjCPtor9NZ-byTZ5wAABrA"]
[Sat Aug 29 05:10:04.557133 2026] [security2:error] [pid 1041789:tid 1042042] [client 4.232.148.111:19582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/yanz.php"] [unique_id "apK-DIv3RhPI65jTFG4EOgAAA40"]
[Sat Aug 29 05:10:04.560061 2026] [security2:error] [pid 1321:tid 1587] [client 20.48.251.3:43979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/wp-config.backup.php"] [unique_id "apK-DGjCPtor9NZ-byTZ6AAABp4"]
[Sat Aug 29 05:10:04.587585 2026] [security2:error] [pid 1041789:tid 1041950] [client 149.34.210.141:61485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-DIv3RhPI65jTFG4EOwAAAzE"]
[Sat Aug 29 05:10:04.587676 2026] [security2:error] [pid 1041789:tid 1041950] [client 149.34.210.141:61485] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-DIv3RhPI65jTFG4EOwAAAzE"]
[Sat Aug 29 05:10:04.590733 2026] [security2:error] [pid 1321:tid 1503] [client 20.48.250.41:49942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/term.php"] [unique_id "apK-DGjCPtor9NZ-byTZ6QAABks"]
[Sat Aug 29 05:10:04.595342 2026] [security2:error] [pid 1321:tid 1499] [client 20.48.250.41:46076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.emplekton.com"] [uri "/R57.php"] [unique_id "apK-DGjCPtor9NZ-byTZ6gAABkc"]
[Sat Aug 29 05:10:04.602666 2026] [security2:error] [pid 1321:tid 1563] [client 52.139.37.240:13414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/ws49.php"] [unique_id "apK-DGjCPtor9NZ-byTZ6wAABoY"]
[Sat Aug 29 05:10:04.631553 2026] [security2:error] [pid 1321:tid 1560] [client 158.23.147.79:14216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/file5.php"] [unique_id "apK-DGjCPtor9NZ-byTZ7AAABoM"]
[Sat Aug 29 05:10:04.632477 2026] [security2:error] [pid 1321:tid 1552] [client 20.48.250.41:50245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/bgymj.php"] [unique_id "apK-DGjCPtor9NZ-byTZ7QAABns"]
[Sat Aug 29 05:10:04.639843 2026] [security2:error] [pid 1321:tid 1591] [client 68.155.159.216:14217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/goat.php"] [unique_id "apK-DGjCPtor9NZ-byTZ7gAABqI"]
[Sat Aug 29 05:10:04.640876 2026] [security2:error] [pid 1321:tid 1517] [client 20.48.250.41:34257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/bolt.php"] [unique_id "apK-DGjCPtor9NZ-byTZ7wAABlk"]
[Sat Aug 29 05:10:04.647443 2026] [security2:error] [pid 1321:tid 1547] [client 20.104.49.130:48512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/bthil.php"] [unique_id "apK-DGjCPtor9NZ-byTZ8AAABnY"]
[Sat Aug 29 05:10:04.653628 2026] [security2:error] [pid 1041789:tid 1042026] [client 93.152.221.156:64983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.nfv.mwu.mybluehost.me"] [uri "/i.php"] [unique_id "apK-DIv3RhPI65jTFG4EPQAAA30"]
[Sat Aug 29 05:10:04.658968 2026] [security2:error] [pid 1321:tid 1610] [client 158.23.147.79:63270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-content/banners/about.php"] [unique_id "apK-DGjCPtor9NZ-byTZ8gAABrU"]
[Sat Aug 29 05:10:04.661901 2026] [security2:error] [pid 1041789:tid 1042005] [client 195.178.110.247:64290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "creativityandjoy.cheerfulmonk.com"] [uri "/index.php"] [unique_id "apK-DIv3RhPI65jTFG4EPgAAA2g"]
[Sat Aug 29 05:10:04.667679 2026] [security2:error] [pid 1041789:tid 1041960] [client 20.48.250.41:53443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK-DIv3RhPI65jTFG4EPwAAAzs"]
[Sat Aug 29 05:10:04.669854 2026] [security2:error] [pid 1041789:tid 1041936] [client 195.178.110.247:64292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/index.php"] [unique_id "apK-DIv3RhPI65jTFG4EQAAAAyM"]
[Sat Aug 29 05:10:04.678833 2026] [security2:error] [pid 1041789:tid 1042057] [client 20.52.41.200:4374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/file2.php"] [unique_id "apK-DIv3RhPI65jTFG4EQQAAA5w"]
[Sat Aug 29 05:10:04.702603 2026] [security2:error] [pid 1321:tid 1545] [client 20.48.251.3:46578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/X57.php"] [unique_id "apK-DGjCPtor9NZ-byTZ9AAABnU"]
[Sat Aug 29 05:10:04.710516 2026] [security2:error] [pid 1041789:tid 1041995] [client 20.220.204.93:55308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/bzjdlofz.php"] [unique_id "apK-DIv3RhPI65jTFG4EQwAAA14"]
[Sat Aug 29 05:10:04.727617 2026] [security2:error] [pid 1321:tid 1614] [client 20.48.250.41:50319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/file.php"] [unique_id "apK-DGjCPtor9NZ-byTZ9QAABrk"]
[Sat Aug 29 05:10:04.731446 2026] [security2:error] [pid 1321:tid 1600] [client 20.104.49.130:43049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/t.php"] [unique_id "apK-DGjCPtor9NZ-byTZ9gAABqs"]
[Sat Aug 29 05:10:04.740531 2026] [security2:error] [pid 1321:tid 1504] [client 40.83.93.50:16455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-admin/options.php"] [unique_id "apK-DGjCPtor9NZ-byTZ9wAABkw"]
[Sat Aug 29 05:10:04.748434 2026] [security2:error] [pid 1321:tid 1590] [client 20.48.250.41:49957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/aaa.php"] [unique_id "apK-DGjCPtor9NZ-byTZ-AAABqE"]
[Sat Aug 29 05:10:04.769026 2026] [security2:error] [pid 1321:tid 1548] [client 68.155.159.216:23485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-DGjCPtor9NZ-byTZ-gAABnc"]
[Sat Aug 29 05:10:04.785307 2026] [security2:error] [pid 1041789:tid 1041933] [client 20.48.250.41:34201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/rtx.php"] [unique_id "apK-DIv3RhPI65jTFG4ERQAAAyA"]
[Sat Aug 29 05:10:04.791149 2026] [security2:error] [pid 1321:tid 1502] [client 185.104.184.230:42660] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.eyc.paw.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "apK-DGjCPtor9NZ-byTZ_AAABko"]
[Sat Aug 29 05:10:04.797024 2026] [security2:error] [pid 1321:tid 1523] [client 52.139.37.240:13980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/xxx.php"] [unique_id "apK-DGjCPtor9NZ-byTZ_QAABl8"]
[Sat Aug 29 05:10:04.811705 2026] [security2:error] [pid 1321:tid 1491] [client 20.48.250.41:53486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/06.php"] [unique_id "apK-DGjCPtor9NZ-byTZ_gAABj8"]
[Sat Aug 29 05:10:04.819782 2026] [security2:error] [pid 1041789:tid 1042049] [client 20.48.250.41:50279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/ws69.php"] [unique_id "apK-DIv3RhPI65jTFG4ERgAAA5Q"]
[Sat Aug 29 05:10:04.828780 2026] [security2:error] [pid 1321:tid 1505] [client 195.178.110.247:19566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.creativityandjoy.cheerfulmonk.com"] [uri "/index.php"] [unique_id "apK-DGjCPtor9NZ-byTZ_wAABk0"]
[Sat Aug 29 05:10:04.835157 2026] [security2:error] [pid 1041789:tid 1042043] [client 20.48.251.3:9289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/fucku.php"] [unique_id "apK-DIv3RhPI65jTFG4ERwAAA44"]
[Sat Aug 29 05:10:04.837121 2026] [security2:error] [pid 1041789:tid 1042045] [client 195.178.110.247:19582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottareahomes.roycehomesales.com"] [uri "/index.php"] [unique_id "apK-DIv3RhPI65jTFG4ESAAAA5A"]
[Sat Aug 29 05:10:04.845747 2026] [security2:error] [pid 1041789:tid 1042018] [client 4.205.62.107:63928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/log.php"] [unique_id "apK-DIv3RhPI65jTFG4ESQAAA3U"]
[Sat Aug 29 05:10:04.910396 2026] [security2:error] [pid 1041789:tid 1042053] [client 20.151.200.44:63686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/hack.php"] [unique_id "apK-DIv3RhPI65jTFG4ETQAAA5g"]
[Sat Aug 29 05:10:04.916200 2026] [security2:error] [pid 1041789:tid 1041934] [client 74.248.24.12:20008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/lite.php"] [unique_id "apK-DIv3RhPI65jTFG4ETwAAAyE"]
[Sat Aug 29 05:10:04.920564 2026] [security2:error] [pid 1041789:tid 1042032] [client 20.48.250.41:34195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/ckk.php"] [unique_id "apK-DIv3RhPI65jTFG4EUAAAA4M"]
[Sat Aug 29 05:10:04.937781 2026] [security2:error] [pid 1321:tid 1515] [client 45.83.178.43:54444] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "goodtogo.store"] [uri "/webapp/xmlrpc.php"] [unique_id "apK-DGjCPtor9NZ-byTZ4QAABlc"]
[Sat Aug 29 05:10:04.947994 2026] [security2:error] [pid 1041789:tid 1041941] [client 20.48.250.41:53452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/class.php"] [unique_id "apK-DIv3RhPI65jTFG4EUwAAAyg"]
[Sat Aug 29 05:10:04.949123 2026] [security2:error] [pid 1041789:tid 1041963] [client 20.48.250.41:29632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK-DIv3RhPI65jTFG4EVAAAAz4"]
[Sat Aug 29 05:10:04.956474 2026] [security2:error] [pid 1041789:tid 1042055] [client 20.48.250.41:30666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/xsox.php"] [unique_id "apK-DIv3RhPI65jTFG4EVQAAA5o"]
[Sat Aug 29 05:10:04.967219 2026] [security2:error] [pid 1041789:tid 1041951] [client 93.152.221.156:52845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.nfv.mwu.mybluehost.me"] [uri "/pi.php"] [unique_id "apK-DIv3RhPI65jTFG4EVgAAAzI"]
[Sat Aug 29 05:10:04.968283 2026] [security2:error] [pid 1041789:tid 1041991] [client 20.48.251.3:9341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/aws_config.php"] [unique_id "apK-DIv3RhPI65jTFG4EVwAAA1o"]
[Sat Aug 29 05:10:04.980306 2026] [security2:error] [pid 1041789:tid 1041942] [client 68.155.159.216:1917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-mail.php"] [unique_id "apK-DIv3RhPI65jTFG4EWAAAAyk"]
[Sat Aug 29 05:10:04.985979 2026] [security2:error] [pid 1041789:tid 1042040] [client 158.23.184.117:26005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.well-known//index.php"] [unique_id "apK-DIv3RhPI65jTFG4EWQAAA4s"]
[Sat Aug 29 05:10:04.994530 2026] [security2:error] [pid 1041789:tid 1041987] [client 52.139.37.240:13388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/0x.php"] [unique_id "apK-DIv3RhPI65jTFG4EWgAAA1Y"]
[Sat Aug 29 05:10:04.999063 2026] [security2:error] [pid 1041789:tid 1042052] [client 20.48.250.41:50286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/ccs.php"] [unique_id "apK-DIv3RhPI65jTFG4EWwAAA5c"]
[Sat Aug 29 05:10:05.028866 2026] [security2:error] [pid 1041789:tid 1041969] [client 158.23.147.79:11342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK-DYv3RhPI65jTFG4EXAAAA0Q"]
[Sat Aug 29 05:10:05.035769 2026] [security2:error] [pid 1321:tid 1511] [client 52.139.37.240:50289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "worldofboardcraft.com"] [uri "/aged.php"] [unique_id "apK-DWjCPtor9NZ-byTaAQAABlM"]
[Sat Aug 29 05:10:05.037282 2026] [security2:error] [pid 1321:tid 1538] [client 4.232.148.111:1391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/autoload_classmap.php"] [unique_id "apK-DWjCPtor9NZ-byTaAgAABm4"]
[Sat Aug 29 05:10:05.050943 2026] [security2:error] [pid 1041789:tid 1042013] [client 20.220.204.93:55915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/selesai.php"] [unique_id "apK-DYv3RhPI65jTFG4EXQAAA3A"]
[Sat Aug 29 05:10:05.070641 2026] [security2:error] [pid 1041789:tid 1042051] [client 158.23.147.79:55274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK-DYv3RhPI65jTFG4EXgAAA5Y"]
[Sat Aug 29 05:10:05.072784 2026] [security2:error] [pid 1041789:tid 1041992] [client 158.23.184.117:61453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/24.php"] [unique_id "apK-DYv3RhPI65jTFG4EXwAAA1s"]
[Sat Aug 29 05:10:05.084386 2026] [security2:error] [pid 1041789:tid 1041968] [client 4.205.62.107:55940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dynamictestingsolutions.com"] [uri "/wp-act.php"] [unique_id "apK-DYv3RhPI65jTFG4EYAAAA0M"]
[Sat Aug 29 05:10:05.084538 2026] [security2:error] [pid 1041789:tid 1041972] [client 20.48.250.41:34448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.blueridgemountainbluegrassband.com"] [uri "/R57.php"] [unique_id "apK-DYv3RhPI65jTFG4EYQAAA0c"]
[Sat Aug 29 05:10:05.093809 2026] [security2:error] [pid 1041789:tid 1041935] [client 185.104.184.230:42672] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.eyc.paw.mybluehost.me"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "apK-DYv3RhPI65jTFG4EYgAAAyI"]
[Sat Aug 29 05:10:05.098684 2026] [security2:error] [pid 1321:tid 1498] [client 20.48.251.3:9284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/fraro.php"] [unique_id "apK-DWjCPtor9NZ-byTaAwAABkY"]
[Sat Aug 29 05:10:05.115524 2026] [security2:error] [pid 1321:tid 1544] [client 20.48.250.41:30662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/lkui.php"] [unique_id "apK-DWjCPtor9NZ-byTaBAAABnQ"]
[Sat Aug 29 05:10:05.123568 2026] [security2:error] [pid 1041789:tid 1041962] [client 20.48.250.41:53416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/8.php"] [unique_id "apK-DYv3RhPI65jTFG4EZAAAAz0"]
[Sat Aug 29 05:10:05.129140 2026] [security2:error] [pid 1041789:tid 1041956] [client 158.23.184.117:25671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.well-known/about.php"] [unique_id "apK-DYv3RhPI65jTFG4EZQAAAzc"]
[Sat Aug 29 05:10:05.133569 2026] [security2:error] [pid 1321:tid 1562] [client 20.52.41.200:5319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK-DWjCPtor9NZ-byTaBQAABoU"]
[Sat Aug 29 05:10:05.135626 2026] [security2:error] [pid 1041789:tid 1041931] [client 20.48.250.41:50315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/06.php"] [unique_id "apK-DYv3RhPI65jTFG4EZgAAAx4"]
[Sat Aug 29 05:10:05.140442 2026] [security2:error] [pid 1041789:tid 1041944] [client 68.155.159.216:9246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-content/packed.php"] [unique_id "apK-DYv3RhPI65jTFG4EZwAAAys"]
[Sat Aug 29 05:10:05.144932 2026] [security2:error] [pid 1041789:tid 1042048] [client 158.23.184.117:11873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/xmlrpc.php"] [unique_id "apK-DYv3RhPI65jTFG4EaAAAA5M"]
[Sat Aug 29 05:10:05.151605 2026] [security2:error] [pid 1041789:tid 1041949] [client 68.155.159.216:6041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK-DYv3RhPI65jTFG4EaQAAAzA"]
[Sat Aug 29 05:10:05.155161 2026] [security2:error] [pid 1041789:tid 1041933] [client 20.48.250.41:50246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/mar.php"] [unique_id "apK-DYv3RhPI65jTFG4EagAAAyA"]
[Sat Aug 29 05:10:05.164935 2026] [security2:error] [pid 1041789:tid 1042056] [client 34.169.171.101:2396] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/.github/.env"] [unique_id "apK-DYv3RhPI65jTFG4EawAAA5s"]
[Sat Aug 29 05:10:05.165026 2026] [security2:error] [pid 1041789:tid 1042056] [client 34.169.171.101:2396] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "forensicengineernj.com"] [uri "/.github/.env"] [unique_id "apK-DYv3RhPI65jTFG4EawAAA5s"]
[Sat Aug 29 05:10:05.166412 2026] [security2:error] [pid 1041789:tid 1042041] [client 34.169.171.101:2388] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/public/.env"] [unique_id "apK-DYv3RhPI65jTFG4EbQAAA4w"]
[Sat Aug 29 05:10:05.172842 2026] [security2:error] [pid 1041789:tid 1042001] [client 34.169.171.101:2418] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "forensicengineernj.com"] [uri "/root/.aws/credentials"] [unique_id "apK-DYv3RhPI65jTFG4EcQAAA2Q"]
[Sat Aug 29 05:10:05.174720 2026] [security2:error] [pid 1041789:tid 1042005] [client 34.169.171.101:2406] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "forensicengineernj.com"] [uri "/.aws/config"] [unique_id "apK-DYv3RhPI65jTFG4EdQAAA2g"]
[Sat Aug 29 05:10:05.176434 2026] [security2:error] [pid 1041789:tid 1041945] [client 34.169.171.101:2378] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-DYv3RhPI65jTFG4EbwAAAyw"]
[Sat Aug 29 05:10:05.177185 2026] [security2:error] [pid 1041789:tid 1041995] [client 34.169.171.101:2504] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-DYv3RhPI65jTFG4EdAAAA14"]
[Sat Aug 29 05:10:05.178013 2026] [security2:error] [pid 1041789:tid 1042000] [client 34.169.171.101:2518] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "forensicengineernj.com"] [uri "/aws.env"] [unique_id "apK-DYv3RhPI65jTFG4EdwAAA2M"]
[Sat Aug 29 05:10:05.181974 2026] [security2:error] [pid 1321:tid 1530] [client 34.169.171.101:2474] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-DWjCPtor9NZ-byTaCAAABmY"]
[Sat Aug 29 05:10:05.190065 2026] [security2:error] [pid 1041789:tid 1041938] [client 52.139.37.240:13986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/CDX1.php"] [unique_id "apK-DYv3RhPI65jTFG4EeAAAAyU"]
[Sat Aug 29 05:10:05.207135 2026] [security2:error] [pid 1321:tid 1586] [client 40.83.93.50:12112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-admin/panel.php"] [unique_id "apK-DWjCPtor9NZ-byTaCQAABp0"]
[Sat Aug 29 05:10:05.209562 2026] [security2:error] [pid 1041789:tid 1041900] [remote 52.167.144.136:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantsfans.net"] [uri "/message_board/index.php"] [unique_id "apK-DYv3RhPI65jTFG4EegADRmI"]
[Sat Aug 29 05:10:05.214102 2026] [security2:error] [pid 1041789:tid 1041957] [client 34.169.171.101:2504] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-DYv3RhPI65jTFG4EfgAAAzg"], referer: https://forensicengineernj.com/.gcloud/credentials.json
[Sat Aug 29 05:10:05.214667 2026] [security2:error] [pid 1041789:tid 1042055] [client 34.169.171.101:2378] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-DYv3RhPI65jTFG4EfwAAA5o"], referer: https://forensicengineernj.com/.git-credentials
[Sat Aug 29 05:10:05.215531 2026] [security2:error] [pid 1041789:tid 1042025] [client 158.23.184.117:21635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/3pjcpmfsd8b.php"] [unique_id "apK-DYv3RhPI65jTFG4EgQAAA3w"]
[Sat Aug 29 05:10:05.219808 2026] [security2:error] [pid 1321:tid 1589] [client 34.169.171.101:2474] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-DWjCPtor9NZ-byTaCgAABqA"], referer: https://forensicengineernj.com/.azure/credentials
[Sat Aug 29 05:10:05.228811 2026] [security2:error] [pid 1041789:tid 1042054] [client 52.139.37.240:10432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "worldofboardcraft.com"] [uri "/essexec.php"] [unique_id "apK-DYv3RhPI65jTFG4EgwAAA5k"]
[Sat Aug 29 05:10:05.233103 2026] [security2:error] [pid 1321:tid 1579] [client 20.48.251.3:46535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/lm15.php"] [unique_id "apK-DWjCPtor9NZ-byTaCwAABpY"]
[Sat Aug 29 05:10:05.260514 2026] [security2:error] [pid 1041789:tid 1041990] [client 20.48.250.41:53489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/0x0x.php"] [unique_id "apK-DYv3RhPI65jTFG4EhQAAA1k"]
[Sat Aug 29 05:10:05.267752 2026] [security2:error] [pid 1041789:tid 1041969] [client 20.48.250.41:50347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/class.php"] [unique_id "apK-DYv3RhPI65jTFG4EhgAAA0Q"]
[Sat Aug 29 05:10:05.287532 2026] [security2:error] [pid 1041789:tid 1042034] [client 20.48.250.41:50274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/ccu.php"] [unique_id "apK-DYv3RhPI65jTFG4EiAAAA4U"]
[Sat Aug 29 05:10:05.290754 2026] [security2:error] [pid 1041789:tid 1041940] [client 158.23.184.117:12155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/app.php"] [unique_id "apK-DYv3RhPI65jTFG4EiQAAAyc"]
[Sat Aug 29 05:10:05.308363 2026] [security2:error] [pid 1041789:tid 1042031] [client 4.205.62.107:21872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/file59.php"] [unique_id "apK-DYv3RhPI65jTFG4EigAAA4I"]
[Sat Aug 29 05:10:05.317931 2026] [security2:error] [pid 1041789:tid 1041977] [client 158.23.147.79:6136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK-DYv3RhPI65jTFG4EiwAAA0w"]
[Sat Aug 29 05:10:05.328576 2026] [security2:error] [pid 1321:tid 1543] [client 20.48.250.41:30689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "apK-DWjCPtor9NZ-byTaDAAABnM"]
[Sat Aug 29 05:10:05.338939 2026] [security2:error] [pid 1041789:tid 1041980] [client 158.23.184.117:25921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK-DYv3RhPI65jTFG4EjAAAA08"]
[Sat Aug 29 05:10:05.349105 2026] [security2:error] [pid 1321:tid 1581] [client 20.63.81.20:47317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/zfqipfss.php"] [unique_id "apK-DWjCPtor9NZ-byTaDQAABpg"]
[Sat Aug 29 05:10:05.358895 2026] [security2:error] [pid 1041789:tid 1041943] [client 158.23.184.117:21763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.aceelectricla.com"] [uri "/403.php"] [unique_id "apK-DYv3RhPI65jTFG4EjQAAAyo"]
[Sat Aug 29 05:10:05.374460 2026] [security2:error] [pid 1321:tid 1494] [client 20.220.204.93:55368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/shlo.php"] [unique_id "apK-DWjCPtor9NZ-byTaDwAABkI"]
[Sat Aug 29 05:10:05.389525 2026] [security2:error] [pid 1041789:tid 1041935] [client 93.152.221.156:58475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.nfv.mwu.mybluehost.me"] [uri "/admin/phpinfo.php"] [unique_id "apK-DYv3RhPI65jTFG4EkAAAAyI"]
[Sat Aug 29 05:10:05.395437 2026] [security2:error] [pid 1041789:tid 1041975] [client 20.104.49.130:60931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/wp-login.php"] [unique_id "apK-DYv3RhPI65jTFG4EkQAAA0o"]
[Sat Aug 29 05:10:05.399292 2026] [security2:error] [pid 1321:tid 1595] [client 185.104.184.230:42676] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.eyc.paw.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "apK-DWjCPtor9NZ-byTaEgAABqY"]
[Sat Aug 29 05:10:05.402074 2026] [security2:error] [pid 1321:tid 1578] [client 52.139.37.240:14158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/akcc.php"] [unique_id "apK-DWjCPtor9NZ-byTaEwAABpU"]
[Sat Aug 29 05:10:05.412991 2026] [security2:error] [pid 1041789:tid 1042014] [client 20.48.250.41:50132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/166.php"] [unique_id "apK-DYv3RhPI65jTFG4EkwAAA3E"]
[Sat Aug 29 05:10:05.419236 2026] [security2:error] [pid 1041789:tid 1041932] [client 20.63.81.20:46282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/xl2023.php"] [unique_id "apK-DYv3RhPI65jTFG4ElQAAAx8"]
[Sat Aug 29 05:10:05.422459 2026] [security2:error] [pid 1321:tid 1549] [client 68.155.159.216:63852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-mail.php"] [unique_id "apK-DWjCPtor9NZ-byTaFAAABng"]
[Sat Aug 29 05:10:05.423652 2026] [security2:error] [pid 1321:tid 1551] [client 52.139.37.240:10474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "worldofboardcraft.com"] [uri "/fw.php"] [unique_id "apK-DWjCPtor9NZ-byTaFQAABno"]
[Sat Aug 29 05:10:05.426022 2026] [security2:error] [pid 1041789:tid 1042015] [client 158.23.147.79:59503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-content/admin.php"] [unique_id "apK-DYv3RhPI65jTFG4ElgAAA3I"]
[Sat Aug 29 05:10:05.430101 2026] [security2:error] [pid 1041789:tid 1041962] [client 20.63.81.20:33750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hitechgs.com"] [uri "/ser.php"] [unique_id "apK-DYv3RhPI65jTFG4ElwAAAz0"]
[Sat Aug 29 05:10:05.431848 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.48.250.41:50249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/ak.php"] [unique_id "apK-DYv3RhPI65jTFG4EmAAAA30"]
[Sat Aug 29 05:10:05.432153 2026] [security2:error] [pid 1041789:tid 1041967] [client 74.248.24.12:4408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/term.php"] [unique_id "apK-DYv3RhPI65jTFG4EmQAAA0I"]
[Sat Aug 29 05:10:05.433034 2026] [security2:error] [pid 1041789:tid 1041931] [client 20.48.250.41:50403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/8.php"] [unique_id "apK-DYv3RhPI65jTFG4EmgAAAx4"]
[Sat Aug 29 05:10:05.436525 2026] [security2:error] [pid 1041789:tid 1041944] [client 68.155.159.216:33676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK-DYv3RhPI65jTFG4EmwAAAys"]
[Sat Aug 29 05:10:05.447400 2026] [security2:error] [pid 1321:tid 1542] [client 158.23.184.117:11902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/aaa.php"] [unique_id "apK-DWjCPtor9NZ-byTaFgAABnI"]
[Sat Aug 29 05:10:05.459784 2026] [security2:error] [pid 1041789:tid 1042052] [client 168.119.96.239:27054] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "advancedbehaviorsolutions.com"] [uri "/index.php"] [unique_id "apK-DYv3RhPI65jTFG4EjwAAA5c"], referer: https://advancedbehaviorsolutions.com
[Sat Aug 29 05:10:05.470154 2026] [security2:error] [pid 1041789:tid 1042019] [client 20.63.81.20:57997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oromotors.sacep.com.ec"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK-DYv3RhPI65jTFG4EngAAA3Y"]
[Sat Aug 29 05:10:05.476452 2026] [security2:error] [pid 1321:tid 1607] [client 20.63.81.20:46806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntrental-biz.tntrental.com"] [uri "/zrjuyoos.php"] [unique_id "apK-DWjCPtor9NZ-byTaGAAABrI"]
[Sat Aug 29 05:10:05.479786 2026] [security2:error] [pid 1041789:tid 1041950] [client 4.205.62.107:51501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/fleen.php"] [unique_id "apK-DYv3RhPI65jTFG4EnwAAAzE"]
[Sat Aug 29 05:10:05.484350 2026] [security2:error] [pid 1041789:tid 1042048] [client 158.23.184.117:25725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.well-known/acme-challenge/content.php"] [unique_id "apK-DYv3RhPI65jTFG4EoAAAA5M"]
[Sat Aug 29 05:10:05.485559 2026] [security2:error] [pid 1321:tid 1588] [client 4.205.62.107:60303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/brc.php"] [unique_id "apK-DWjCPtor9NZ-byTaGQAABp8"]
[Sat Aug 29 05:10:05.515738 2026] [security2:error] [pid 1041789:tid 1041992] [client 4.232.148.111:27551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/bi.php"] [unique_id "apK-DYv3RhPI65jTFG4EoQAAA1s"]
[Sat Aug 29 05:10:05.562027 2026] [security2:error] [pid 1041789:tid 1042018] [client 20.63.81.20:46382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/V2.php"] [unique_id "apK-DYv3RhPI65jTFG4EogAAA3U"]
[Sat Aug 29 05:10:05.566442 2026] [security2:error] [pid 1041789:tid 1041976] [client 4.205.62.107:6953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/adminer-4.7.6-en.php"] [unique_id "apK-DYv3RhPI65jTFG4EowAAA0s"]
[Sat Aug 29 05:10:05.574513 2026] [security2:error] [pid 1041789:tid 1041939] [client 20.48.250.41:50378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/0x0x.php"] [unique_id "apK-DYv3RhPI65jTFG4EpAAAAyY"]
[Sat Aug 29 05:10:05.581947 2026] [core:error] [pid 1321:tid 1601] [client 20.48.251.3:46616] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:05.581961 2026] [core:error] [pid 1321:tid 1601] [client 20.48.251.3:46616] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:05.593016 2026] [security2:error] [pid 1041789:tid 1041981] [client 158.23.147.79:37901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-admin/dropdown.php"] [unique_id "apK-DYv3RhPI65jTFG4EpgAAA1A"]
[Sat Aug 29 05:10:05.593512 2026] [security2:error] [pid 1321:tid 1615] [client 20.52.41.200:5249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/xda.php"] [unique_id "apK-DWjCPtor9NZ-byTaGwAABro"]
[Sat Aug 29 05:10:05.596494 2026] [security2:error] [pid 1041789:tid 1042011] [client 20.48.250.41:50150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/h2a2ck.php"] [unique_id "apK-DYv3RhPI65jTFG4EqAAAA24"]
[Sat Aug 29 05:10:05.605977 2026] [security2:error] [pid 1041789:tid 1041997] [client 52.139.37.240:13953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK-DYv3RhPI65jTFG4EqQAAA2A"]
[Sat Aug 29 05:10:05.612081 2026] [security2:error] [pid 1041789:tid 1041957] [client 20.48.250.41:50219] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/lib.php"] [unique_id "apK-DYv3RhPI65jTFG4EqgAAAzg"]
[Sat Aug 29 05:10:05.617537 2026] [security2:error] [pid 1041789:tid 1042055] [client 68.155.159.216:38666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/goat1.php"] [unique_id "apK-DYv3RhPI65jTFG4ErAAAA5o"]
[Sat Aug 29 05:10:05.619289 2026] [security2:error] [pid 1041789:tid 1042006] [client 52.139.37.240:10900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "worldofboardcraft.com"] [uri "/zwso.php"] [unique_id "apK-DYv3RhPI65jTFG4ErQAAA2k"]
[Sat Aug 29 05:10:05.643528 2026] [security2:error] [pid 1041789:tid 1042037] [client 68.155.159.216:49328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/bk/index.php"] [unique_id "apK-DYv3RhPI65jTFG4EsAAAA4g"]
[Sat Aug 29 05:10:05.650322 2026] [security2:error] [pid 1321:tid 1565] [client 20.48.251.3:9297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/nzv.php"] [unique_id "apK-DWjCPtor9NZ-byTaHAAABog"]
[Sat Aug 29 05:10:05.660047 2026] [security2:error] [pid 1041789:tid 1042023] [client 93.152.221.156:50439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.nfv.mwu.mybluehost.me"] [uri "/pinfo.php"] [unique_id "apK-DYv3RhPI65jTFG4EsgAAA3o"]
[Sat Aug 29 05:10:05.675146 2026] [security2:error] [pid 1041789:tid 1042028] [client 158.23.184.117:11880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/hehe.php"] [unique_id "apK-DYv3RhPI65jTFG4EswAAA38"]
[Sat Aug 29 05:10:05.675930 2026] [security2:error] [pid 1041789:tid 1042017] [client 158.23.184.117:25670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK-DYv3RhPI65jTFG4EtAAAA3Q"]
[Sat Aug 29 05:10:05.682922 2026] [security2:error] [pid 1041789:tid 1042031] [client 35.219.81.80:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "djiboutifresh.com"] [uri "/"] [unique_id "apK-DYv3RhPI65jTFG4EtQAAA4I"]
[Sat Aug 29 05:10:05.683006 2026] [security2:error] [pid 1041789:tid 1042031] [client 35.219.81.80:0] ModSecurity: Warning. Matched phrase "BuiltWith" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "409"] [hostname "djiboutifresh.com"] [uri "/"] [unique_id "apK-DYv3RhPI65jTFG4EtQAAA4I"]
[Sat Aug 29 05:10:05.688327 2026] [security2:error] [pid 1041789:tid 1041960] [client 40.83.93.50:16448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-admin/pk.php"] [unique_id "apK-DYv3RhPI65jTFG4EtgAAAzs"]
[Sat Aug 29 05:10:05.692071 2026] [security2:error] [pid 1041789:tid 1041980] [client 68.155.159.216:1860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-content/cong.php"] [unique_id "apK-DYv3RhPI65jTFG4EtwAAA08"]
[Sat Aug 29 05:10:05.695878 2026] [security2:error] [pid 1041789:tid 1042051] [client 20.220.204.93:55816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/asax.php"] [unique_id "apK-DYv3RhPI65jTFG4EuAAAA5Y"]
[Sat Aug 29 05:10:05.696327 2026] [security2:error] [pid 1041789:tid 1041943] [client 185.104.184.230:42690] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.eyc.paw.mybluehost.me"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "apK-DYv3RhPI65jTFG4EuQAAAyo"]
[Sat Aug 29 05:10:05.715564 2026] [security2:error] [pid 1321:tid 1583] [client 35.219.81.80:55814] ModSecurity: Warning. Matched phrase "BuiltWith" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "409"] [hostname "djiboutifresh.com"] [uri "/"] [unique_id "apK-DWjCPtor9NZ-byTaHQAGmmU"]
[Sat Aug 29 05:10:05.736514 2026] [security2:error] [pid 1041789:tid 1041932] [client 68.155.159.216:62797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/simple.php"] [unique_id "apK-DYv3RhPI65jTFG4EuwAAAx8"]
[Sat Aug 29 05:10:05.737353 2026] [security2:error] [pid 1041789:tid 1042015] [client 158.23.147.79:14298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/file88.php"] [unique_id "apK-DYv3RhPI65jTFG4EvAAAA3I"]
[Sat Aug 29 05:10:05.741138 2026] [security2:error] [pid 1041789:tid 1041962] [client 20.48.250.41:29641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/166.php"] [unique_id "apK-DYv3RhPI65jTFG4EvQAAAz0"]
[Sat Aug 29 05:10:05.745511 2026] [security2:error] [pid 1041789:tid 1041991] [client 111.235.68.106:21358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK-DYv3RhPI65jTFG4EvgAAA1o"]
[Sat Aug 29 05:10:05.745619 2026] [security2:error] [pid 1041789:tid 1041991] [client 111.235.68.106:21358] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK-DYv3RhPI65jTFG4EvgAAA1o"]
[Sat Aug 29 05:10:05.753044 2026] [security2:error] [pid 1041789:tid 1041944] [client 20.48.250.41:50009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/motu.php"] [unique_id "apK-DYv3RhPI65jTFG4EwAAAAys"]
[Sat Aug 29 05:10:05.767170 2026] [security2:error] [pid 1041789:tid 1042052] [client 20.48.250.41:50192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/wp-style.php"] [unique_id "apK-DYv3RhPI65jTFG4EwgAAA5c"]
[Sat Aug 29 05:10:05.767908 2026] [security2:error] [pid 1041789:tid 1042056] [client 158.23.147.79:55878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-includes/Text/about.php"] [unique_id "apK-DYv3RhPI65jTFG4EwwAAA5s"]
[Sat Aug 29 05:10:05.785271 2026] [security2:error] [pid 1041789:tid 1041938] [client 60.243.207.176:60151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK-DYv3RhPI65jTFG4ExQAAAyU"]
[Sat Aug 29 05:10:05.785384 2026] [security2:error] [pid 1041789:tid 1041938] [client 60.243.207.176:60151] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK-DYv3RhPI65jTFG4ExQAAAyU"]
[Sat Aug 29 05:10:05.802894 2026] [security2:error] [pid 1041789:tid 1041954] [client 52.139.37.240:13434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/s.php"] [unique_id "apK-DYv3RhPI65jTFG4ExgAAAzU"]
[Sat Aug 29 05:10:05.810074 2026] [security2:error] [pid 1321:tid 1499] [client 20.48.251.3:46620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/pouhg.php"] [unique_id "apK-DWjCPtor9NZ-byTaIAAABkc"]
[Sat Aug 29 05:10:05.815674 2026] [security2:error] [pid 1321:tid 1503] [client 52.139.37.240:10883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "worldofboardcraft.com"] [uri "/admin/function.php"] [unique_id "apK-DWjCPtor9NZ-byTaIQAABks"]
[Sat Aug 29 05:10:05.820046 2026] [security2:error] [pid 1041789:tid 1042041] [client 158.23.184.117:25984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.well-known/acme-challenge/sx.php"] [unique_id "apK-DYv3RhPI65jTFG4ExwAAA4w"]
[Sat Aug 29 05:10:05.830475 2026] [security2:error] [pid 1041789:tid 1042042] [client 20.48.250.41:50062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/error_log.php"] [unique_id "apK-DYv3RhPI65jTFG4EyQAAA40"]
[Sat Aug 29 05:10:05.853509 2026] [security2:error] [pid 1041789:tid 1042018] [client 68.155.159.216:30661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK-DYv3RhPI65jTFG4EygAAA3U"]
[Sat Aug 29 05:10:05.854085 2026] [security2:error] [pid 1321:tid 1492] [client 20.151.200.44:63784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/155.php"] [unique_id "apK-DWjCPtor9NZ-byTaIgAABkA"]
[Sat Aug 29 05:10:05.854409 2026] [security2:error] [pid 1041789:tid 1042005] [client 158.23.184.117:11393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/wp-includes/PHPMailer.php"] [unique_id "apK-DYv3RhPI65jTFG4EywAAA2g"]
[Sat Aug 29 05:10:05.881627 2026] [security2:error] [pid 1041789:tid 1041971] [client 68.155.159.216:23430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/content.php"] [unique_id "apK-DYv3RhPI65jTFG4EzAAAA0Y"]
[Sat Aug 29 05:10:05.909905 2026] [security2:error] [pid 1041789:tid 1041990] [client 107.145.13.164:63729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 164.13.145.107.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK-DYv3RhPI65jTFG4EzQAAA1k"]
[Sat Aug 29 05:10:05.912862 2026] [security2:error] [pid 1041789:tid 1041990] [client 107.145.13.164:63729] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK-DYv3RhPI65jTFG4EzQAAA1k"]
[Sat Aug 29 05:10:05.927187 2026] [security2:error] [pid 1321:tid 1553] [client 20.48.250.41:50261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/browse.php"] [unique_id "apK-DWjCPtor9NZ-byTaJAAABnw"]
[Sat Aug 29 05:10:05.939641 2026] [security2:error] [pid 1321:tid 1533] [client 20.48.250.41:50310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/h2a2ck.php"] [unique_id "apK-DWjCPtor9NZ-byTaJQAABmk"]
[Sat Aug 29 05:10:05.942144 2026] [security2:error] [pid 1321:tid 1539] [client 93.152.221.156:59854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.nfv.mwu.mybluehost.me"] [uri "/php_version.php"] [unique_id "apK-DWjCPtor9NZ-byTaJgAABm8"]
[Sat Aug 29 05:10:05.949816 2026] [security2:error] [pid 1041789:tid 1041961] [client 74.248.24.12:26344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/config.php"] [unique_id "apK-DYv3RhPI65jTFG4E0AAAAzw"]
[Sat Aug 29 05:10:05.958369 2026] [security2:error] [pid 1041789:tid 1042055] [client 20.48.250.41:53408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/403.php"] [unique_id "apK-DYv3RhPI65jTFG4E0QAAA5o"]
[Sat Aug 29 05:10:05.959618 2026] [security2:error] [pid 1041789:tid 1042006] [client 20.104.49.130:63544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pvillusions.com"] [uri "/222.php"] [unique_id "apK-DYv3RhPI65jTFG4E0gAAA2k"]
[Sat Aug 29 05:10:05.959919 2026] [security2:error] [pid 1041789:tid 1042043] [client 20.48.251.3:46643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/environment.php"] [unique_id "apK-DYv3RhPI65jTFG4E0wAAA44"]
[Sat Aug 29 05:10:05.960343 2026] [security2:error] [pid 1041789:tid 1042021] [client 20.220.204.93:52061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/fetch.php"] [unique_id "apK-DYv3RhPI65jTFG4E1AAAA3g"]
[Sat Aug 29 05:10:05.961761 2026] [security2:error] [pid 1041789:tid 1041963] [client 20.196.209.81:8413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-admin/network/xmrlpc.php"] [unique_id "apK-DYv3RhPI65jTFG4E1QAAAz4"]
[Sat Aug 29 05:10:05.972886 2026] [security2:error] [pid 1321:tid 1610] [client 158.23.184.117:25696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.well-known/admin.php"] [unique_id "apK-DWjCPtor9NZ-byTaJwAABrU"]
[Sat Aug 29 05:10:05.986802 2026] [security2:error] [pid 1041789:tid 1041942] [client 4.205.62.107:63905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/ebahvhhh.php"] [unique_id "apK-DYv3RhPI65jTFG4E1wAAAyk"]
[Sat Aug 29 05:10:05.990222 2026] [security2:error] [pid 1041789:tid 1042054] [client 185.104.184.230:42700] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.eyc.paw.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "apK-DYv3RhPI65jTFG4E2AAAA5k"]
[Sat Aug 29 05:10:05.993991 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.48.250.41:50030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/Ov-Simple1.php"] [unique_id "apK-DYv3RhPI65jTFG4E2QAAA3o"]
[Sat Aug 29 05:10:05.994370 2026] [security2:error] [pid 1041789:tid 1041992] [client 4.232.148.111:1352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/cc.php"] [unique_id "apK-DYv3RhPI65jTFG4E2gAAA1s"]
[Sat Aug 29 05:10:05.998691 2026] [security2:error] [pid 1041789:tid 1041957] [client 158.23.184.117:11896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/wp-content/upgrade/alfanew.php7"] [unique_id "apK-DYv3RhPI65jTFG4E2wAAAzg"]
[Sat Aug 29 05:10:06.011367 2026] [security2:error] [pid 1321:tid 1545] [client 52.139.37.240:50317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "worldofboardcraft.com"] [uri "/zoom1.php"] [unique_id "apK-DmjCPtor9NZ-byTaKQAABnU"]
[Sat Aug 29 05:10:06.021446 2026] [security2:error] [pid 1321:tid 1529] [client 52.139.37.240:13430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/sagax.php"] [unique_id "apK-DmjCPtor9NZ-byTaKgAABmU"]
[Sat Aug 29 05:10:06.048863 2026] [security2:error] [pid 1321:tid 1547] [client 20.52.41.200:4415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/theme.php"] [unique_id "apK-DmjCPtor9NZ-byTaLAAABnY"]
[Sat Aug 29 05:10:06.091597 2026] [security2:error] [pid 1041789:tid 1042029] [client 20.48.251.3:46586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/koiy.php"] [unique_id "apK-Dov3RhPI65jTFG4E3QAAA4A"]
[Sat Aug 29 05:10:06.096747 2026] [security2:error] [pid 1321:tid 1518] [client 20.48.250.41:50325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/error_log.php"] [unique_id "apK-DmjCPtor9NZ-byTaLQAABlo"]
[Sat Aug 29 05:10:06.104514 2026] [security2:error] [pid 1041789:tid 1041943] [client 20.48.250.41:53477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/cytyr.php"] [unique_id "apK-Dov3RhPI65jTFG4E3gAAAyo"]
[Sat Aug 29 05:10:06.111349 2026] [security2:error] [pid 1041789:tid 1042009] [client 68.155.159.216:38668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-Dov3RhPI65jTFG4E3wAAA2w"]
[Sat Aug 29 05:10:06.117737 2026] [security2:error] [pid 1321:tid 1598] [client 158.23.184.117:25699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.well-known/api.php"] [unique_id "apK-DmjCPtor9NZ-byTaLgAABqk"]
[Sat Aug 29 05:10:06.150076 2026] [security2:error] [pid 1041789:tid 1042035] [client 40.83.93.50:1303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-admin/plugin-install.php"] [unique_id "apK-Dov3RhPI65jTFG4E4QAAA4Y"]
[Sat Aug 29 05:10:06.150874 2026] [security2:error] [pid 1041789:tid 1041972] [client 20.48.250.41:50179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/zoo.php"] [unique_id "apK-Dov3RhPI65jTFG4E4gAAA0c"]
[Sat Aug 29 05:10:06.168242 2026] [security2:error] [pid 1041789:tid 1042015] [client 20.48.250.41:49968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/wp-blogs.php"] [unique_id "apK-Dov3RhPI65jTFG4E4wAAA3I"]
[Sat Aug 29 05:10:06.172990 2026] [security2:error] [pid 1041789:tid 1042010] [client 158.23.184.117:12140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/admin/alfa-rex.php"] [unique_id "apK-Dov3RhPI65jTFG4E5AAAA20"]
[Sat Aug 29 05:10:06.174875 2026] [security2:error] [pid 1041789:tid 1041991] [client 158.23.147.79:60180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-content/banners/about.php"] [unique_id "apK-Dov3RhPI65jTFG4E5QAAA1o"]
[Sat Aug 29 05:10:06.178609 2026] [security2:error] [pid 1321:tid 1535] [client 158.23.147.79:11391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/images/index.php"] [unique_id "apK-DmjCPtor9NZ-byTaLwAABms"]
[Sat Aug 29 05:10:06.205391 2026] [security2:error] [pid 1321:tid 1525] [client 68.155.159.216:64112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/ws.php"] [unique_id "apK-DmjCPtor9NZ-byTaMAAABmE"]
[Sat Aug 29 05:10:06.209926 2026] [security2:error] [pid 1041789:tid 1041968] [client 52.139.37.240:50309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "worldofboardcraft.com"] [uri "/about.php7"] [unique_id "apK-Dov3RhPI65jTFG4E5gAAA0M"]
[Sat Aug 29 05:10:06.218079 2026] [http2:warn] [pid 1017536:tid 1017681] [client 74.7.241.38:60088] h2_stream(1017536-31-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:10:06.218100 2026] [http2:warn] [pid 1017536:tid 1017681] [client 74.7.241.38:60088] h2_stream(1017536-31-3,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:10:06.222072 2026] [security2:error] [pid 1041789:tid 1042056] [client 20.48.251.3:46600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/gk.php"] [unique_id "apK-Dov3RhPI65jTFG4E6gAAA5s"]
[Sat Aug 29 05:10:06.235120 2026] [security2:error] [pid 1041789:tid 1041954] [client 20.48.250.41:53492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/galer.php"] [unique_id "apK-Dov3RhPI65jTFG4E7AAAAzU"]
[Sat Aug 29 05:10:06.240841 2026] [security2:error] [pid 1321:tid 1554] [client 20.48.250.41:50324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/403.php"] [unique_id "apK-DmjCPtor9NZ-byTaMwAABn0"]
[Sat Aug 29 05:10:06.253779 2026] [security2:error] [pid 1041789:tid 1042013] [client 68.155.159.216:5892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-includes/index.php"] [unique_id "apK-Dov3RhPI65jTFG4E7QAAA3A"]
[Sat Aug 29 05:10:06.262114 2026] [security2:error] [pid 1321:tid 1501] [client 158.23.184.117:25726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.well-known/chosen.php"] [unique_id "apK-DmjCPtor9NZ-byTaNQAABkk"]
[Sat Aug 29 05:10:06.292512 2026] [security2:error] [pid 1041789:tid 1041949] [client 68.155.159.216:14275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK-Dov3RhPI65jTFG4E7gAAAzA"]
[Sat Aug 29 05:10:06.301832 2026] [security2:error] [pid 1321:tid 1505] [client 185.104.184.230:42710] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webmail.eyc.paw.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "apK-DmjCPtor9NZ-byTaNgAABk0"]
[Sat Aug 29 05:10:06.320024 2026] [security2:error] [pid 1041789:tid 1042000] [client 158.23.184.117:11859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/wp-content/export.php"] [unique_id "apK-Dov3RhPI65jTFG4E8AAAA2M"]
[Sat Aug 29 05:10:06.330879 2026] [http2:warn] [pid 1018003:tid 1018159] [client 74.7.241.38:56118] h2_stream(1018003-350-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:10:06.330902 2026] [http2:warn] [pid 1018003:tid 1018159] [client 74.7.241.38:56118] h2_stream(1018003-350-3,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:10:06.340109 2026] [security2:error] [pid 1041789:tid 1041950] [client 202.71.25.11:59688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.25.71.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK-Dov3RhPI65jTFG4E8QAAAzE"]
[Sat Aug 29 05:10:06.340247 2026] [security2:error] [pid 1041789:tid 1041950] [client 202.71.25.11:59688] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK-Dov3RhPI65jTFG4E8QAAAzE"]
[Sat Aug 29 05:10:06.342744 2026] [security2:error] [pid 1041789:tid 1041990] [client 20.48.250.41:49964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/mini.php"] [unique_id "apK-Dov3RhPI65jTFG4E8gAAA1k"]
[Sat Aug 29 05:10:06.344944 2026] [security2:error] [pid 1041789:tid 1041941] [client 20.220.204.93:55833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/vx.php"] [unique_id "apK-Dov3RhPI65jTFG4E8wAAAyg"]
[Sat Aug 29 05:10:06.347605 2026] [security2:error] [pid 1041789:tid 1042053] [client 20.48.250.41:50303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/elp.php"] [unique_id "apK-Dov3RhPI65jTFG4E9AAAA5g"]
[Sat Aug 29 05:10:06.350861 2026] [security2:error] [pid 1041789:tid 1041961] [client 20.104.49.130:52294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/133.php"] [unique_id "apK-Dov3RhPI65jTFG4E9QAAAzw"]
[Sat Aug 29 05:10:06.359126 2026] [security2:error] [pid 1041789:tid 1042006] [client 20.48.251.3:9314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/services.php"] [unique_id "apK-Dov3RhPI65jTFG4E9gAAA2k"]
[Sat Aug 29 05:10:06.371968 2026] [security2:error] [pid 1041789:tid 1041963] [client 93.152.221.156:55260] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.nfv.mwu.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/.env"] [unique_id "apK-Dov3RhPI65jTFG4E9wAAAz4"]
[Sat Aug 29 05:10:06.385610 2026] [security2:error] [pid 1041789:tid 1041945] [client 20.196.209.81:8443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-admin/options-general.php"] [unique_id "apK-Dov3RhPI65jTFG4E-gAAAyw"]
[Sat Aug 29 05:10:06.388767 2026] [security2:error] [pid 1041789:tid 1041992] [client 20.48.250.41:50380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/cytyr.php"] [unique_id "apK-Dov3RhPI65jTFG4E-wAAA1s"]
[Sat Aug 29 05:10:06.389906 2026] [security2:error] [pid 1041789:tid 1041957] [client 20.63.81.20:55616] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/fpwch.php"] [unique_id "apK-Dov3RhPI65jTFG4E_AAAAzg"]
[Sat Aug 29 05:10:06.392384 2026] [security2:error] [pid 1041789:tid 1041965] [client 20.48.250.41:53414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/baixy.php"] [unique_id "apK-Dov3RhPI65jTFG4E_QAAA0A"]
[Sat Aug 29 05:10:06.403888 2026] [security2:error] [pid 1041789:tid 1042011] [client 52.139.37.240:10462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "worldofboardcraft.com"] [uri "/cron.php"] [unique_id "apK-Dov3RhPI65jTFG4E_gAAA24"]
[Sat Aug 29 05:10:06.407281 2026] [security2:error] [pid 1041789:tid 1042043] [client 158.23.184.117:25686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.well-known/config.php"] [unique_id "apK-Dov3RhPI65jTFG4E_wAAA44"]
[Sat Aug 29 05:10:06.436514 2026] [security2:error] [pid 1041789:tid 1041987] [client 158.23.147.79:5897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/nf_tracking.php"] [unique_id "apK-Dov3RhPI65jTFG4FAAAAA1Y"]
[Sat Aug 29 05:10:06.447097 2026] [security2:error] [pid 1041789:tid 1042030] [client 20.63.81.20:40029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/wp-cron.php"] [unique_id "apK-Dov3RhPI65jTFG4FAgAAA4E"]
[Sat Aug 29 05:10:06.460789 2026] [security2:error] [pid 1321:tid 1599] [client 4.205.62.107:22272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/cli_bootstrap.php"] [unique_id "apK-DmjCPtor9NZ-byTaOgAABqo"]
[Sat Aug 29 05:10:06.464806 2026] [security2:error] [pid 1041789:tid 1042028] [client 158.23.184.117:11887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/new.php"] [unique_id "apK-Dov3RhPI65jTFG4FBAAAA38"]
[Sat Aug 29 05:10:06.465449 2026] [security2:error] [pid 1041789:tid 1042018] [client 74.248.24.12:4341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK-Dov3RhPI65jTFG4FBQAAA3U"]
[Sat Aug 29 05:10:06.469902 2026] [security2:error] [pid 1041789:tid 1041971] [client 4.232.148.111:11967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/files/index.php"] [unique_id "apK-Dov3RhPI65jTFG4FBgAAA0Y"]
[Sat Aug 29 05:10:06.474398 2026] [proxy_http:error] [pid 1018003:tid 1018131] (70007)The timeout specified has expired: [remote 74.7.241.38:56118] AH01102: error reading status line from remote server 127.0.0.1:8443, referer: https://guraonline.com/shop/?orderby=date&product_brand=locobase,la-roche-posay,the-one,possess,aco,ldb,oncolour,scope
[Sat Aug 29 05:10:06.474416 2026] [proxy:error] [pid 1018003:tid 1018131] [remote 74.7.241.38:56118] AH00898: Error reading from remote server returned by /shop/, referer: https://guraonline.com/shop/?orderby=date&product_brand=locobase,la-roche-posay,the-one,possess,aco,ldb,oncolour,scope
[Sat Aug 29 05:10:06.479386 2026] [proxy_http:error] [pid 1028675:tid 1028865] (70007)The timeout specified has expired: [client 127.0.0.1:23342] AH01102: error reading status line from remote server 50.6.92.44:8443, referer: https://guraonline.com/shop/?orderby=date&product_brand=locobase,la-roche-posay,the-one,possess,aco,ldb,oncolour,scope
[Sat Aug 29 05:10:06.479408 2026] [proxy:error] [pid 1028675:tid 1028865] [client 127.0.0.1:23342] AH00898: Error reading from remote server returned by /shop/, referer: https://guraonline.com/shop/?orderby=date&product_brand=locobase,la-roche-posay,the-one,possess,aco,ldb,oncolour,scope
[Sat Aug 29 05:10:06.494471 2026] [security2:error] [pid 1321:tid 1616] [client 20.48.250.41:50193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/666.php"] [unique_id "apK-DmjCPtor9NZ-byTaPAAABrs"]
[Sat Aug 29 05:10:06.494989 2026] [security2:error] [pid 1041789:tid 1042035] [client 20.48.251.3:46633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/log.php"] [unique_id "apK-Dov3RhPI65jTFG4FCQAAA4Y"]
[Sat Aug 29 05:10:06.499450 2026] [security2:error] [pid 1041789:tid 1042055] [client 20.52.41.200:4396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/classwithtostring.php"] [unique_id "apK-Dov3RhPI65jTFG4FCgAAA5o"]
[Sat Aug 29 05:10:06.528097 2026] [security2:error] [pid 1041789:tid 1042015] [client 20.48.250.41:53455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/ava.php"] [unique_id "apK-Dov3RhPI65jTFG4FDQAAA3I"]
[Sat Aug 29 05:10:06.534000 2026] [security2:error] [pid 1321:tid 1603] [client 20.220.204.93:55328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/global.php"] [unique_id "apK-DmjCPtor9NZ-byTaQAAABq4"]
[Sat Aug 29 05:10:06.537390 2026] [security2:error] [pid 1041789:tid 1042026] [client 158.23.147.79:59462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/xmlrpc.php"] [unique_id "apK-Dov3RhPI65jTFG4FDwAAA30"]
[Sat Aug 29 05:10:06.546417 2026] [security2:error] [pid 1041789:tid 1041968] [client 68.155.159.216:64455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/cgi-bin/index.php"] [unique_id "apK-Dov3RhPI65jTFG4FEQAAA0M"]
[Sat Aug 29 05:10:06.547222 2026] [security2:error] [pid 1321:tid 1506] [client 68.155.159.216:33701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/about.php"] [unique_id "apK-DmjCPtor9NZ-byTaQQAABk4"]
[Sat Aug 29 05:10:06.548312 2026] [security2:error] [pid 1321:tid 1582] [client 20.104.49.130:34502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/ws45.php"] [unique_id "apK-DmjCPtor9NZ-byTaQgAABpk"]
[Sat Aug 29 05:10:06.549952 2026] [security2:error] [pid 1321:tid 1562] [client 195.178.110.247:64296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottawa-bestfinancing.roycehomesales.com"] [uri "/index.php"] [unique_id "apK-DmjCPtor9NZ-byTaQwAABoU"]
[Sat Aug 29 05:10:06.550799 2026] [security2:error] [pid 1041789:tid 1041935] [client 158.23.184.117:26009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.well-known/core.php"] [unique_id "apK-Dov3RhPI65jTFG4FEgAAAyI"]
[Sat Aug 29 05:10:06.555410 2026] [security2:error] [pid 1041789:tid 1041944] [client 57.141.14.78:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/cart/"] [unique_id "apK-Dov3RhPI65jTFG4FEwAAAys"]
[Sat Aug 29 05:10:06.576164 2026] [security2:error] [pid 1041789:tid 1041954] [client 20.48.250.41:50419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/galer.php"] [unique_id "apK-Dov3RhPI65jTFG4FFgAAAzU"]
[Sat Aug 29 05:10:06.601477 2026] [security2:error] [pid 1041789:tid 1041991] [client 52.139.37.240:10905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "worldofboardcraft.com"] [uri "/wp-2019.php"] [unique_id "apK-Dov3RhPI65jTFG4FFwAAA1o"]
[Sat Aug 29 05:10:06.610963 2026] [security2:error] [pid 1041789:tid 1042057] [client 158.23.184.117:12105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/wp-content/plugins/revslider/admin.php"] [unique_id "apK-Dov3RhPI65jTFG4FGAAAA5w"]
[Sat Aug 29 05:10:06.618330 2026] [security2:error] [pid 1041789:tid 1041951] [client 4.205.62.107:51463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/phpinfo01.php"] [unique_id "apK-Dov3RhPI65jTFG4FGQAAAzI"]
[Sat Aug 29 05:10:06.621788 2026] [security2:error] [pid 1321:tid 1557] [client 20.220.204.93:65226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-DmjCPtor9NZ-byTaRAAABoA"]
[Sat Aug 29 05:10:06.623512 2026] [security2:error] [pid 1041789:tid 1041997] [client 4.205.62.107:62742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/vx.php"] [unique_id "apK-Dov3RhPI65jTFG4FGgAAA2A"]
[Sat Aug 29 05:10:06.624951 2026] [security2:error] [pid 1041789:tid 1042013] [client 20.48.251.3:46642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/btx25.php"] [unique_id "apK-Dov3RhPI65jTFG4FGwAAA3A"]
[Sat Aug 29 05:10:06.628659 2026] [security2:error] [pid 1321:tid 1604] [client 40.83.93.50:1306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-admin/plugins/img/themes/plugins/maintenance.php"] [unique_id "apK-DmjCPtor9NZ-byTaRQAABq8"]
[Sat Aug 29 05:10:06.638848 2026] [security2:error] [pid 1041789:tid 1041948] [client 20.48.250.41:30683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/amp.php"] [unique_id "apK-Dov3RhPI65jTFG4FHAAAAy8"]
[Sat Aug 29 05:10:06.661093 2026] [security2:error] [pid 1321:tid 1556] [client 20.48.250.41:50066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/gdn.php"] [unique_id "apK-DmjCPtor9NZ-byTaRgAABn8"]
[Sat Aug 29 05:10:06.694957 2026] [security2:error] [pid 1321:tid 1507] [client 158.23.184.117:25677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.well-known/data.php"] [unique_id "apK-DmjCPtor9NZ-byTaRwAABk8"]
[Sat Aug 29 05:10:06.703467 2026] [security2:error] [pid 1041789:tid 1042006] [client 4.205.62.107:6500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/phpi.php"] [unique_id "apK-Dov3RhPI65jTFG4FHgAAA2k"]
[Sat Aug 29 05:10:06.715360 2026] [security2:error] [pid 1321:tid 1544] [client 195.178.110.247:19590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottawa-bestfinancing.roycehomesales.com"] [uri "/index.php"] [unique_id "apK-DmjCPtor9NZ-byTaSAAABnQ"]
[Sat Aug 29 05:10:06.724887 2026] [security2:error] [pid 1041789:tid 1041945] [client 68.155.159.216:61309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK-Dov3RhPI65jTFG4FHwAAAyw"]
[Sat Aug 29 05:10:06.729969 2026] [security2:error] [pid 1041789:tid 1041957] [client 158.23.147.79:63038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/login.php"] [unique_id "apK-Dov3RhPI65jTFG4FIAAAAzg"]
[Sat Aug 29 05:10:06.735820 2026] [security2:error] [pid 1321:tid 1488] [client 20.48.250.41:50184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/knmt.php"] [unique_id "apK-DmjCPtor9NZ-byTaSQAABjw"]
[Sat Aug 29 05:10:06.752678 2026] [security2:error] [pid 1041789:tid 1041965] [client 20.48.250.41:29650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/baixy.php"] [unique_id "apK-Dov3RhPI65jTFG4FIQAAA0A"]
[Sat Aug 29 05:10:06.759862 2026] [security2:error] [pid 1041789:tid 1042021] [client 158.23.184.117:11886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/wp-content/images/uploads/admin.php"] [unique_id "apK-Dov3RhPI65jTFG4FIwAAA3g"]
[Sat Aug 29 05:10:06.767773 2026] [security2:error] [pid 1041789:tid 1041946] [client 20.48.251.3:46619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/guk.php"] [unique_id "apK-Dov3RhPI65jTFG4FJAAAAy0"]
[Sat Aug 29 05:10:06.773418 2026] [security2:error] [pid 1041789:tid 1041969] [client 61.9.8.95:6948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 95.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK-Dov3RhPI65jTFG4FIgAAA0Q"]
[Sat Aug 29 05:10:06.773524 2026] [security2:error] [pid 1041789:tid 1041969] [client 61.9.8.95:6948] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK-Dov3RhPI65jTFG4FIgAAA0Q"]
[Sat Aug 29 05:10:06.779641 2026] [security2:error] [pid 1041789:tid 1041949] [client 20.196.209.81:8400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-admin/options.php"] [unique_id "apK-Dov3RhPI65jTFG4FJQAAAzA"]
[Sat Aug 29 05:10:06.792940 2026] [security2:error] [pid 1041789:tid 1041992] [client 52.139.37.240:50306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "worldofboardcraft.com"] [uri "/gecko-new.php"] [unique_id "apK-Dov3RhPI65jTFG4FJgAAA1s"]
[Sat Aug 29 05:10:06.796173 2026] [security2:error] [pid 1041789:tid 1041987] [client 20.220.204.93:65166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-Dov3RhPI65jTFG4FJwAAA1Y"]
[Sat Aug 29 05:10:06.800634 2026] [security2:error] [pid 1041789:tid 1042044] [client 68.155.159.216:1976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK-Dov3RhPI65jTFG4FKAAAA48"]
[Sat Aug 29 05:10:06.820896 2026] [security2:error] [pid 1041789:tid 1042028] [client 93.152.221.156:55260] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "webdisk.nfv.mwu.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/.env.backup"] [unique_id "apK-Dov3RhPI65jTFG4FKQAAA38"]
[Sat Aug 29 05:10:06.831491 2026] [security2:error] [pid 1321:tid 1534] [client 20.48.250.41:50067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/f2.php"] [unique_id "apK-DmjCPtor9NZ-byTaSgAABmo"]
[Sat Aug 29 05:10:06.850206 2026] [security2:error] [pid 1041789:tid 1041979] [client 68.155.159.216:62729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-admin/about.php"] [unique_id "apK-Dov3RhPI65jTFG4FKwAAA04"]
[Sat Aug 29 05:10:06.856410 2026] [security2:error] [pid 1321:tid 1514] [client 158.23.147.79:14272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/NewFile.php/"] [unique_id "apK-DmjCPtor9NZ-byTaTAAABlY"]
[Sat Aug 29 05:10:06.866577 2026] [security2:error] [pid 1041789:tid 1041934] [client 114.119.134.48:60925] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.isasi.com"] [uri "/telemagic.html"] [unique_id "apK-Dov3RhPI65jTFG4FLAAAAyE"], referer: http://www.isasi.com/index.html
[Sat Aug 29 05:10:06.869415 2026] [security2:error] [pid 1321:tid 1595] [client 20.220.204.93:52014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/fs.php"] [unique_id "apK-DmjCPtor9NZ-byTaTgAABqY"]
[Sat Aug 29 05:10:06.883924 2026] [security2:error] [pid 1041789:tid 1042035] [client 158.23.147.79:55244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/asd.php"] [unique_id "apK-Dov3RhPI65jTFG4FLgAAA4Y"]
[Sat Aug 29 05:10:06.892067 2026] [security2:error] [pid 1321:tid 1494] [client 158.23.184.117:25717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.well-known/db-status.php"] [unique_id "apK-DmjCPtor9NZ-byTaUAAABkI"]
[Sat Aug 29 05:10:06.898530 2026] [security2:error] [pid 1041789:tid 1042047] [client 20.48.251.3:43980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/7.php"] [unique_id "apK-Dov3RhPI65jTFG4FLwAAA5I"]
[Sat Aug 29 05:10:06.899818 2026] [security2:error] [pid 1041789:tid 1041932] [client 20.48.250.41:50045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/cc13.php"] [unique_id "apK-Dov3RhPI65jTFG4FMAAAAx8"]
[Sat Aug 29 05:10:06.950629 2026] [security2:error] [pid 1041789:tid 1042054] [client 158.23.184.117:11890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/tools.php"] [unique_id "apK-Dov3RhPI65jTFG4FMQAAA5k"]
[Sat Aug 29 05:10:06.954785 2026] [security2:error] [pid 1041789:tid 1041967] [client 4.232.148.111:26816] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mjmodeinc.com"] [uri "/1.php7"] [unique_id "apK-Dov3RhPI65jTFG4FMgAAA0I"]
[Sat Aug 29 05:10:06.954894 2026] [security2:error] [pid 1041789:tid 1041967] [client 4.232.148.111:26816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/1.php7"] [unique_id "apK-Dov3RhPI65jTFG4FMgAAA0I"]
[Sat Aug 29 05:10:06.959886 2026] [security2:error] [pid 1321:tid 1510] [client 178.16.55.109:58126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 109.55.16.178.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.toltgear.love2tolt.com"] [uri "/wp-login.php"] [unique_id "apK-DmjCPtor9NZ-byTaUwAABlI"]
[Sat Aug 29 05:10:06.961173 2026] [security2:error] [pid 1041789:tid 1041944] [client 93.152.221.156:55260] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.nfv.mwu.mybluehost.me"] [uri "/___proxy_subdomain_webdisk/config/.env"] [unique_id "apK-Dov3RhPI65jTFG4FMwAAAys"]
[Sat Aug 29 05:10:06.962882 2026] [security2:error] [pid 1041789:tid 1041980] [client 20.52.41.200:4371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/news.php"] [unique_id "apK-Dov3RhPI65jTFG4FNAAAA08"]
[Sat Aug 29 05:10:06.964797 2026] [security2:error] [pid 1041789:tid 1042001] [client 68.155.159.216:30620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-includes/plugins.php"] [unique_id "apK-Dov3RhPI65jTFG4FNQAAA2Q"]
[Sat Aug 29 05:10:06.987986 2026] [security2:error] [pid 1321:tid 1555] [client 74.248.24.12:10980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-good.php"] [unique_id "apK-DmjCPtor9NZ-byTaVQAABn4"]
[Sat Aug 29 05:10:06.994294 2026] [security2:error] [pid 1321:tid 1509] [client 52.139.37.240:10931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "worldofboardcraft.com"] [uri "/add_actualites.php"] [unique_id "apK-DmjCPtor9NZ-byTaVgAABlE"]
[Sat Aug 29 05:10:07.034885 2026] [security2:error] [pid 1041789:tid 1041995] [client 20.48.251.3:46543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "apK-D4v3RhPI65jTFG4FOAAAA14"]
[Sat Aug 29 05:10:07.036920 2026] [security2:error] [pid 1041789:tid 1042057] [client 158.23.184.117:25986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.well-known/f35.php"] [unique_id "apK-D4v3RhPI65jTFG4FOQAAA5w"]
[Sat Aug 29 05:10:07.038133 2026] [security2:error] [pid 1321:tid 1592] [client 20.220.204.93:63574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/ff1.php"] [unique_id "apK-D2jCPtor9NZ-byTaVwAABqM"]
[Sat Aug 29 05:10:07.111239 2026] [security2:error] [pid 1041789:tid 1041935] [client 40.83.93.50:12140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-admin/security.php"] [unique_id "apK-D4v3RhPI65jTFG4FOgAAAyI"]
[Sat Aug 29 05:10:07.114601 2026] [security2:error] [pid 1041789:tid 1042032] [client 68.155.159.216:18406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/packed.php"] [unique_id "apK-D4v3RhPI65jTFG4FOwAAA4M"]
[Sat Aug 29 05:10:07.115730 2026] [security2:error] [pid 1041789:tid 1041940] [client 213.202.253.4:55289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "timportlock.net"] [uri "/userfuns.php"] [unique_id "apK-D4v3RhPI65jTFG4FPAAAAyc"], referer: www.google.com
[Sat Aug 29 05:10:07.117497 2026] [security2:error] [pid 1041789:tid 1041972] [client 197.232.63.170:52145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 170.63.232.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK-D4v3RhPI65jTFG4FPQAAA0c"]
[Sat Aug 29 05:10:07.117601 2026] [security2:error] [pid 1041789:tid 1041972] [client 197.232.63.170:52145] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK-D4v3RhPI65jTFG4FPQAAA0c"]
[Sat Aug 29 05:10:07.120785 2026] [security2:error] [pid 1321:tid 1565] [client 158.23.184.117:11430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/wp-content/uploads/my.php"] [unique_id "apK-D2jCPtor9NZ-byTaWQAABog"]
[Sat Aug 29 05:10:07.125567 2026] [security2:error] [pid 1041789:tid 1041941] [client 4.205.62.107:63979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/asa.php"] [unique_id "apK-D4v3RhPI65jTFG4FPgAAAyg"]
[Sat Aug 29 05:10:07.135274 2026] [security2:error] [pid 1041789:tid 1042053] [client 68.155.159.216:1865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/cgi-bin/index.php"] [unique_id "apK-D4v3RhPI65jTFG4FPwAAA5g"]
[Sat Aug 29 05:10:07.137722 2026] [security2:error] [pid 1041789:tid 1042006] [client 20.220.204.93:54561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/ioxi.php"] [unique_id "apK-D4v3RhPI65jTFG4FQAAAA2k"]
[Sat Aug 29 05:10:07.164836 2026] [security2:error] [pid 1041789:tid 1041945] [client 20.48.251.3:46610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/app.default.php"] [unique_id "apK-D4v3RhPI65jTFG4FQQAAAyw"]
[Sat Aug 29 05:10:07.183080 2026] [security2:error] [pid 1041789:tid 1041961] [client 158.23.184.117:25687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK-D4v3RhPI65jTFG4FQgAAAzw"]
[Sat Aug 29 05:10:07.190414 2026] [security2:error] [pid 1041789:tid 1041990] [client 52.139.37.240:50299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "worldofboardcraft.com"] [uri "/browse.php"] [unique_id "apK-D4v3RhPI65jTFG4FQwAAA1k"]
[Sat Aug 29 05:10:07.204490 2026] [security2:error] [pid 1321:tid 1615] [client 20.196.209.81:18020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-admin/panel.php"] [unique_id "apK-D2jCPtor9NZ-byTaWgAABro"]
[Sat Aug 29 05:10:07.204716 2026] [security2:error] [pid 1321:tid 1503] [client 20.220.204.93:63615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/t.php"] [unique_id "apK-D2jCPtor9NZ-byTaWwAABks"]
[Sat Aug 29 05:10:07.233115 2026] [security2:error] [pid 1041789:tid 1042019] [client 20.151.200.44:22167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/mcd.php"] [unique_id "apK-D4v3RhPI65jTFG4FRwAAA3Y"]
[Sat Aug 29 05:10:07.245436 2026] [security2:error] [pid 1041789:tid 1041931] [client 68.155.159.216:52764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-l0gin.php"] [unique_id "apK-D4v3RhPI65jTFG4FSAAAAx4"]
[Sat Aug 29 05:10:07.267256 2026] [security2:error] [pid 1041789:tid 1042029] [client 158.23.184.117:12119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/wp-includes/themes/uploads/config.php"] [unique_id "apK-D4v3RhPI65jTFG4FSQAAA4A"]
[Sat Aug 29 05:10:07.279908 2026] [security2:error] [pid 1041789:tid 1041992] [client 68.155.159.216:38589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK-D4v3RhPI65jTFG4FSgAAA1s"]
[Sat Aug 29 05:10:07.293374 2026] [security2:error] [pid 1321:tid 1560] [client 20.48.251.3:9334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/8.php"] [unique_id "apK-D2jCPtor9NZ-byTaXQAABoM"]
[Sat Aug 29 05:10:07.307740 2026] [security2:error] [pid 1041789:tid 1042030] [client 68.155.159.216:64015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-includes/css/index.php"] [unique_id "apK-D4v3RhPI65jTFG4FSwAAA4E"]
[Sat Aug 29 05:10:07.328835 2026] [security2:error] [pid 1321:tid 1531] [client 158.23.184.117:26008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.well-known/home.php"] [unique_id "apK-D2jCPtor9NZ-byTaXgAABmc"]
[Sat Aug 29 05:10:07.358612 2026] [security2:error] [pid 1321:tid 1540] [client 158.23.147.79:11372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK-D2jCPtor9NZ-byTaYgAABnA"]
[Sat Aug 29 05:10:07.384778 2026] [security2:error] [pid 1321:tid 1591] [client 52.139.37.240:10435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "worldofboardcraft.com"] [uri "/contentloader1.php"] [unique_id "apK-D2jCPtor9NZ-byTaYwAABqI"]
[Sat Aug 29 05:10:07.391251 2026] [security2:error] [pid 1041789:tid 1042035] [client 68.155.159.216:6092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/mah.php"] [unique_id "apK-D4v3RhPI65jTFG4FUAAAA4Y"]
[Sat Aug 29 05:10:07.415747 2026] [security2:error] [pid 1321:tid 1614] [client 158.23.184.117:11894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/av.php"] [unique_id "apK-D2jCPtor9NZ-byTaZAAABrk"]
[Sat Aug 29 05:10:07.419025 2026] [security2:error] [pid 1041789:tid 1041949] [client 20.52.41.200:5285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/about/function.php"] [unique_id "apK-D4v3RhPI65jTFG4FVQAAAzA"]
[Sat Aug 29 05:10:07.420798 2026] [security2:error] [pid 1041789:tid 1042014] [client 68.155.159.216:14226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apK-D4v3RhPI65jTFG4FVgAAA3E"]
[Sat Aug 29 05:10:07.423529 2026] [security2:error] [pid 1321:tid 1517] [client 20.48.251.3:46593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/agg.php"] [unique_id "apK-D2jCPtor9NZ-byTaZQAABlk"]
[Sat Aug 29 05:10:07.432953 2026] [security2:error] [pid 1321:tid 1492] [client 4.232.148.111:19573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/disagraeosc.php"] [unique_id "apK-D2jCPtor9NZ-byTaZwAABkA"]
[Sat Aug 29 05:10:07.445073 2026] [security2:error] [pid 1041789:tid 1041967] [client 145.239.10.137:35123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.10.239.145.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thewaltongroupinc.com"] [uri "/wp-content/plugins/pwnd/Footer.php"] [unique_id "apK-D4v3RhPI65jTFG4FVwAAA0I"], referer: http://thewaltongroupinc.com/wp-content/plugins/pwnd/Footer.php
[Sat Aug 29 05:10:07.511204 2026] [security2:error] [pid 1041789:tid 1042018] [client 74.248.24.12:4320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "apK-D4v3RhPI65jTFG4FXQAAA3U"]
[Sat Aug 29 05:10:07.512483 2026] [security2:error] [pid 1041789:tid 1042041] [client 34.50.189.51:57704] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "discocollective.kriveloff-associates.com"] [uri "/@fs/root/.config/anthropic/credentials/default.json"] [unique_id "apK-D4v3RhPI65jTFG4FXwAAA4w"]
[Sat Aug 29 05:10:07.517675 2026] [security2:error] [pid 1321:tid 1535] [client 34.50.189.51:57816] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "discocollective.kriveloff-associates.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK-D2jCPtor9NZ-byTaawAABms"]
[Sat Aug 29 05:10:07.517994 2026] [security2:error] [pid 1321:tid 1537] [client 34.50.189.51:57800] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/@fs/proc/self/cwd/.env"] [unique_id "apK-D2jCPtor9NZ-byTaagAABm0"]
[Sat Aug 29 05:10:07.518106 2026] [security2:error] [pid 1321:tid 1537] [client 34.50.189.51:57800] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "discocollective.kriveloff-associates.com"] [uri "/@fs/proc/self/cwd/.env"] [unique_id "apK-D2jCPtor9NZ-byTaagAABm0"]
[Sat Aug 29 05:10:07.518510 2026] [core:error] [pid 1321:tid 1550] [client 34.50.189.51:57808] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:07.518525 2026] [core:error] [pid 1321:tid 1550] [client 34.50.189.51:57808] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:07.519582 2026] [core:error] [pid 1041789:tid 1042057] [client 34.50.189.51:57832] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:07.519595 2026] [core:error] [pid 1041789:tid 1042057] [client 34.50.189.51:57832] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:07.520567 2026] [security2:error] [pid 1041789:tid 1041997] [client 34.50.189.51:57774] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "discocollective.kriveloff-associates.com"] [uri "/cgi-sys/404.html"] [unique_id "apK-D4v3RhPI65jTFG4FYgAAA2A"]
[Sat Aug 29 05:10:07.520846 2026] [security2:error] [pid 1321:tid 1526] [client 34.50.189.51:57796] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/@fs/var/task/.env"] [unique_id "apK-D2jCPtor9NZ-byTabAAABmI"]
[Sat Aug 29 05:10:07.522774 2026] [core:error] [pid 1041789:tid 1041978] [client 34.50.189.51:57822] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:07.522792 2026] [core:error] [pid 1041789:tid 1041978] [client 34.50.189.51:57822] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:07.542075 2026] [security2:error] [pid 1321:tid 1576] [client 103.162.125.59:64931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.125.162.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK-D2jCPtor9NZ-byTabQAABpM"]
[Sat Aug 29 05:10:07.542208 2026] [security2:error] [pid 1321:tid 1576] [client 103.162.125.59:64931] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "colibridiscoveries.com"] [uri "/xmlrpc.php"] [unique_id "apK-D2jCPtor9NZ-byTabQAABpM"]
[Sat Aug 29 05:10:07.557313 2026] [security2:error] [pid 1041789:tid 1042032] [client 20.48.251.3:46623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/cp2.php"] [unique_id "apK-D4v3RhPI65jTFG4FZwAAA4M"]
[Sat Aug 29 05:10:07.581278 2026] [security2:error] [pid 1041789:tid 1042053] [client 20.220.204.93:55859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/bootstrap.php"] [unique_id "apK-D4v3RhPI65jTFG4FaAAAA5g"]
[Sat Aug 29 05:10:07.586772 2026] [security2:error] [pid 1041789:tid 1042050] [client 52.139.37.240:10892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "worldofboardcraft.com"] [uri "/upfile.php"] [unique_id "apK-D4v3RhPI65jTFG4FaQAAA5U"]
[Sat Aug 29 05:10:07.593260 2026] [security2:error] [pid 1321:tid 1491] [client 20.220.204.93:63501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/erty.php"] [unique_id "apK-D2jCPtor9NZ-byTabgAABj8"]
[Sat Aug 29 05:10:07.596893 2026] [security2:error] [pid 1041789:tid 1042006] [client 158.23.147.79:5915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wzy.php"] [unique_id "apK-D4v3RhPI65jTFG4FagAAA2k"]
[Sat Aug 29 05:10:07.598862 2026] [security2:error] [pid 1041789:tid 1042037] [client 4.205.62.107:21903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/dd.php"] [unique_id "apK-D4v3RhPI65jTFG4FawAAA4g"]
[Sat Aug 29 05:10:07.598945 2026] [security2:error] [pid 1321:tid 1590] [client 40.83.93.50:16507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK-D2jCPtor9NZ-byTabwAABqE"]
[Sat Aug 29 05:10:07.601767 2026] [security2:error] [pid 1041789:tid 1041998] [client 20.196.209.81:12299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-admin/pk.php"] [unique_id "apK-D4v3RhPI65jTFG4FbAAAA2E"]
[Sat Aug 29 05:10:07.647288 2026] [security2:error] [pid 1041789:tid 1041945] [client 158.23.147.79:60150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/atomlib.php"] [unique_id "apK-D4v3RhPI65jTFG4FbQAAAyw"]
[Sat Aug 29 05:10:07.695220 2026] [security2:error] [pid 1321:tid 1602] [client 20.48.251.3:46585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/error_log.php"] [unique_id "apK-D2jCPtor9NZ-byTacAAABq0"]
[Sat Aug 29 05:10:07.746065 2026] [security2:error] [pid 1321:tid 1554] [client 68.155.159.216:49345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tiaandephraim.com"] [uri "/first.php"] [unique_id "apK-D2jCPtor9NZ-byTacQAABn0"]
[Sat Aug 29 05:10:07.755664 2026] [security2:error] [pid 1321:tid 1585] [client 4.205.62.107:51394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/wp-info.php"] [unique_id "apK-D2jCPtor9NZ-byTacgAABpw"]
[Sat Aug 29 05:10:07.775667 2026] [security2:error] [pid 1321:tid 1521] [client 4.205.62.107:62782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/ty.php"] [unique_id "apK-D2jCPtor9NZ-byTacwAABl0"]
[Sat Aug 29 05:10:07.781388 2026] [security2:error] [pid 1041789:tid 1042043] [client 158.23.147.79:62725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK-D4v3RhPI65jTFG4FbgAAA44"]
[Sat Aug 29 05:10:07.784135 2026] [security2:error] [pid 1321:tid 1497] [client 52.139.37.240:10445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "worldofboardcraft.com"] [uri "/form.php"] [unique_id "apK-D2jCPtor9NZ-byTadAAABkU"]
[Sat Aug 29 05:10:07.832641 2026] [security2:error] [pid 1321:tid 1502] [client 68.155.159.216:61296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-admin/network/index.php"] [unique_id "apK-D2jCPtor9NZ-byTadQAABko"]
[Sat Aug 29 05:10:07.833965 2026] [security2:error] [pid 1321:tid 1575] [client 20.104.49.130:48578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/gecko-new.php"] [unique_id "apK-D2jCPtor9NZ-byTadgAABpI"]
[Sat Aug 29 05:10:07.836571 2026] [security2:error] [pid 1321:tid 1609] [client 158.23.147.79:63023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/hehehehe.php"] [unique_id "apK-D2jCPtor9NZ-byTadwAABrQ"]
[Sat Aug 29 05:10:07.837418 2026] [security2:error] [pid 1041789:tid 1042019] [client 20.48.251.3:46533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/config/laravolt/css/index.php"] [unique_id "apK-D4v3RhPI65jTFG4FbwAAA3Y"]
[Sat Aug 29 05:10:07.842553 2026] [http2:warn] [pid 1017536:tid 1017690] [client 57.141.14.59:50242] h2_stream(1017536-275-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:10:07.847095 2026] [security2:error] [pid 1321:tid 1516] [client 4.205.62.107:6863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK-D2jCPtor9NZ-byTaeAAABlg"]
[Sat Aug 29 05:10:07.858096 2026] [security2:error] [pid 1321:tid 1582] [client 20.220.204.93:55850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/export.php"] [unique_id "apK-D2jCPtor9NZ-byTaeQAABpk"]
[Sat Aug 29 05:10:07.899129 2026] [security2:error] [pid 1041789:tid 1042046] [client 4.232.148.111:1090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-logs.php"] [unique_id "apK-D4v3RhPI65jTFG4FcwAAA5E"]
[Sat Aug 29 05:10:07.903409 2026] [security2:error] [pid 1041789:tid 1042044] [client 68.155.159.216:1947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK-D4v3RhPI65jTFG4FdAAAA48"]
[Sat Aug 29 05:10:07.907701 2026] [security2:error] [pid 1041789:tid 1041960] [client 178.16.55.109:59691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 109.55.16.178.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.toltgear.love2tolt.com"] [uri "/wp-login.php"] [unique_id "apK-D4v3RhPI65jTFG4FdQAAAzs"]
[Sat Aug 29 05:10:07.964149 2026] [security2:error] [pid 1041789:tid 1041944] [client 68.155.159.216:62751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK-D4v3RhPI65jTFG4FeQAAAys"]
[Sat Aug 29 05:10:07.966628 2026] [security2:error] [pid 1321:tid 1544] [client 158.23.147.79:14158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/dropdown.php"] [unique_id "apK-D2jCPtor9NZ-byTafwAABnQ"]
[Sat Aug 29 05:10:07.984832 2026] [security2:error] [pid 1041789:tid 1042028] [client 52.139.37.240:10433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "worldofboardcraft.com"] [uri "/wp-sigunq.php"] [unique_id "apK-D4v3RhPI65jTFG4FegAAA38"]
[Sat Aug 29 05:10:07.997512 2026] [security2:error] [pid 1041789:tid 1041938] [client 20.48.251.3:46551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/database.php"] [unique_id "apK-D4v3RhPI65jTFG4FewAAAyU"]
[Sat Aug 29 05:10:07.999235 2026] [security2:error] [pid 1041789:tid 1041980] [client 158.23.147.79:62777] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webmail.robotdanceparty.org"] [uri "/1.php"] [unique_id "apK-D4v3RhPI65jTFG4FfAAAA08"]
[Sat Aug 29 05:10:07.999342 2026] [security2:error] [pid 1041789:tid 1041980] [client 158.23.147.79:62777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/1.php"] [unique_id "apK-D4v3RhPI65jTFG4FfAAAA08"]
[Sat Aug 29 05:10:08.003100 2026] [security2:error] [pid 1041789:tid 1041951] [client 20.196.209.81:22890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-admin/plugin-install.php"] [unique_id "apK-EIv3RhPI65jTFG4FfQAAAzI"]
[Sat Aug 29 05:10:08.030856 2026] [security2:error] [pid 1321:tid 1496] [client 20.52.41.200:4366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-includes/admin.php"] [unique_id "apK-EGjCPtor9NZ-byTagQAABkQ"]
[Sat Aug 29 05:10:08.034976 2026] [security2:error] [pid 1041789:tid 1041992] [client 74.248.24.12:28790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/abcd.php"] [unique_id "apK-EIv3RhPI65jTFG4FfwAAA1s"]
[Sat Aug 29 05:10:08.046636 2026] [security2:error] [pid 1041789:tid 1042041] [client 20.151.200.44:21888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/waw.php"] [unique_id "apK-EIv3RhPI65jTFG4FgAAAA4w"]
[Sat Aug 29 05:10:08.067689 2026] [security2:error] [pid 1041789:tid 1041995] [client 20.220.204.93:55311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/gk.php"] [unique_id "apK-EIv3RhPI65jTFG4FgQAAA14"]
[Sat Aug 29 05:10:08.069511 2026] [security2:error] [pid 1041789:tid 1042048] [client 40.83.93.50:22116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-admin/system.php"] [unique_id "apK-EIv3RhPI65jTFG4FggAAA5M"]
[Sat Aug 29 05:10:08.075157 2026] [security2:error] [pid 1041789:tid 1042042] [client 68.155.159.216:30672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK-EIv3RhPI65jTFG4FgwAAA40"]
[Sat Aug 29 05:10:08.078541 2026] [security2:error] [pid 1321:tid 1586] [client 68.155.159.216:23455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK-EGjCPtor9NZ-byTaggAABp0"]
[Sat Aug 29 05:10:08.127303 2026] [security2:error] [pid 1321:tid 1549] [client 20.48.251.3:46591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/png.php"] [unique_id "apK-EGjCPtor9NZ-byTagwAABng"]
[Sat Aug 29 05:10:08.187611 2026] [security2:error] [pid 1041789:tid 1042045] [client 52.139.37.240:10476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "worldofboardcraft.com"] [uri "/07.php"] [unique_id "apK-EIv3RhPI65jTFG4FhAAAA5A"]
[Sat Aug 29 05:10:08.222389 2026] [security2:error] [pid 1041789:tid 1041935] [client 20.220.204.93:63526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/0x.php"] [unique_id "apK-EIv3RhPI65jTFG4FhQAAAyI"]
[Sat Aug 29 05:10:08.240055 2026] [security2:error] [pid 1321:tid 1508] [client 68.155.159.216:1800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK-EGjCPtor9NZ-byTahQAABlA"]
[Sat Aug 29 05:10:08.243018 2026] [security2:error] [pid 1041789:tid 1042032] [client 68.155.159.216:18390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-content/packed.php"] [unique_id "apK-EIv3RhPI65jTFG4FhgAAA4M"]
[Sat Aug 29 05:10:08.259552 2026] [security2:error] [pid 1041789:tid 1042050] [client 20.48.251.3:9281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/wp-tem.php"] [unique_id "apK-EIv3RhPI65jTFG4FhwAAA5U"]
[Sat Aug 29 05:10:08.263107 2026] [security2:error] [pid 1041789:tid 1042037] [client 4.205.62.107:63925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/radio.php"] [unique_id "apK-EIv3RhPI65jTFG4FiAAAA4g"]
[Sat Aug 29 05:10:08.273243 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.220.204.93:55818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/logs1.php"] [unique_id "apK-EIv3RhPI65jTFG4FiQAAA3o"]
[Sat Aug 29 05:10:08.280184 2026] [security2:error] [pid 1041789:tid 1042057] [client 87.219.197.128:55561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK-EIv3RhPI65jTFG4FigAAA5w"]
[Sat Aug 29 05:10:08.280274 2026] [security2:error] [pid 1041789:tid 1042057] [client 87.219.197.128:55561] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK-EIv3RhPI65jTFG4FigAAA5w"]
[Sat Aug 29 05:10:08.315315 2026] [security2:error] [pid 1041789:tid 1041982] [client 40.83.93.50:14603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/post.php"] [unique_id "apK-EIv3RhPI65jTFG4FiwAAA1E"]
[Sat Aug 29 05:10:08.379454 2026] [security2:error] [pid 1041789:tid 1041962] [client 4.232.148.111:11949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-admin/css/about.php"] [unique_id "apK-EIv3RhPI65jTFG4FjAAAAz0"]
[Sat Aug 29 05:10:08.384947 2026] [security2:error] [pid 1041789:tid 1041977] [client 68.155.159.216:38542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK-EIv3RhPI65jTFG4FjQAAA0w"]
[Sat Aug 29 05:10:08.386540 2026] [security2:error] [pid 1041789:tid 1042043] [client 52.139.37.240:10895] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "worldofboardcraft.com"] [uri "/c99.php"] [unique_id "apK-EIv3RhPI65jTFG4FjgAAA44"]
[Sat Aug 29 05:10:08.388588 2026] [security2:error] [pid 1041789:tid 1042046] [client 20.48.251.3:9311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/bootstrap.php"] [unique_id "apK-EIv3RhPI65jTFG4FjwAAA5E"]
[Sat Aug 29 05:10:08.399323 2026] [security2:error] [pid 1041789:tid 1041963] [client 20.196.209.81:8399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-admin/plugins/img/themes/plugins/maintenance.php"] [unique_id "apK-EIv3RhPI65jTFG4FkAAAAz4"]
[Sat Aug 29 05:10:08.461083 2026] [security2:error] [pid 1041789:tid 1042014] [client 68.155.159.216:7131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK-EIv3RhPI65jTFG4FkgAAA3E"]
[Sat Aug 29 05:10:08.475430 2026] [security2:error] [pid 1041789:tid 1042035] [client 20.220.204.93:54634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/inege.php"] [unique_id "apK-EIv3RhPI65jTFG4FlAAAA4Y"]
[Sat Aug 29 05:10:08.481050 2026] [security2:error] [pid 1041789:tid 1042026] [client 158.23.147.79:11502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK-EIv3RhPI65jTFG4FlQAAA30"]
[Sat Aug 29 05:10:08.486599 2026] [security2:error] [pid 1321:tid 1565] [client 158.23.184.117:26034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.well-known/index.php"] [unique_id "apK-EGjCPtor9NZ-byTahgAABog"]
[Sat Aug 29 05:10:08.506598 2026] [security2:error] [pid 1041789:tid 1041944] [client 20.63.81.20:60502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-EIv3RhPI65jTFG4FmAAAAys"]
[Sat Aug 29 05:10:08.519916 2026] [security2:error] [pid 1321:tid 1566] [client 20.48.251.3:46590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/wo.php"] [unique_id "apK-EGjCPtor9NZ-byTahwAABok"]
[Sat Aug 29 05:10:08.528694 2026] [security2:error] [pid 1041789:tid 1041951] [client 68.155.159.216:6088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-blog-header.php"] [unique_id "apK-EIv3RhPI65jTFG4FmQAAAzI"]
[Sat Aug 29 05:10:08.542042 2026] [security2:error] [pid 1041789:tid 1041987] [client 20.104.49.130:58082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "coveryourauto.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-EIv3RhPI65jTFG4FmgAAA1Y"]
[Sat Aug 29 05:10:08.549195 2026] [security2:error] [pid 1041789:tid 1042018] [client 68.155.159.216:14285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK-EIv3RhPI65jTFG4FmwAAA3U"]
[Sat Aug 29 05:10:08.571252 2026] [security2:error] [pid 1041789:tid 1042041] [client 20.63.81.20:33790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hitechgs.com"] [uri "/431.php"] [unique_id "apK-EIv3RhPI65jTFG4FngAAA4w"]
[Sat Aug 29 05:10:08.571772 2026] [security2:error] [pid 1041789:tid 1042031] [client 40.83.93.50:14542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-admin/test.php"] [unique_id "apK-EIv3RhPI65jTFG4FnwAAA4I"]
[Sat Aug 29 05:10:08.573881 2026] [security2:error] [pid 1321:tid 1503] [client 20.151.200.44:63795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/x23.php"] [unique_id "apK-EGjCPtor9NZ-byTaiQAABks"]
[Sat Aug 29 05:10:08.583958 2026] [security2:error] [pid 1041789:tid 1041938] [client 52.139.37.240:10889] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "worldofboardcraft.com"] [uri "/c99.php"] [unique_id "apK-EIv3RhPI65jTFG4FoQAAAyU"]
[Sat Aug 29 05:10:08.584429 2026] [core:error] [pid 1041789:tid 1042052] [client 20.63.219.114:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:08.584442 2026] [core:error] [pid 1041789:tid 1042052] [client 20.63.219.114:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:08.603268 2026] [security2:error] [pid 1041789:tid 1042020] [client 74.248.24.12:26355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-access.php"] [unique_id "apK-EIv3RhPI65jTFG4FowAAA3c"]
[Sat Aug 29 05:10:08.624947 2026] [security2:error] [pid 1041789:tid 1042034] [client 158.23.184.117:11848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/wp-includes/ID3/file.php"] [unique_id "apK-EIv3RhPI65jTFG4FpAAAA4U"]
[Sat Aug 29 05:10:08.628796 2026] [security2:error] [pid 1041789:tid 1041997] [client 158.23.184.117:25694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.well-known/login.php"] [unique_id "apK-EIv3RhPI65jTFG4FpQAAA2A"]
[Sat Aug 29 05:10:08.644159 2026] [security2:error] [pid 1321:tid 1545] [client 20.220.204.93:55347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/wp-link10.php"] [unique_id "apK-EGjCPtor9NZ-byTaigAABnU"]
[Sat Aug 29 05:10:08.647798 2026] [security2:error] [pid 1321:tid 1540] [client 20.63.81.20:56941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-EGjCPtor9NZ-byTaiwAABnA"]
[Sat Aug 29 05:10:08.650212 2026] [security2:error] [pid 1041789:tid 1042005] [client 20.52.41.200:5297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/lock360.php"] [unique_id "apK-EIv3RhPI65jTFG4FpgAAA2g"]
[Sat Aug 29 05:10:08.652456 2026] [security2:error] [pid 1041789:tid 1042000] [client 20.63.81.20:58041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oromotors.sacep.com.ec"] [uri "/5PJcpMFsD8B.php"] [unique_id "apK-EIv3RhPI65jTFG4FpwAAA2M"]
[Sat Aug 29 05:10:08.655519 2026] [security2:error] [pid 1041789:tid 1042007] [client 20.48.251.3:46595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/xza.php"] [unique_id "apK-EIv3RhPI65jTFG4FqAAAA2o"]
[Sat Aug 29 05:10:08.701523 2026] [security2:error] [pid 1041789:tid 1041941] [client 20.63.81.20:33774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hitechgs.com"] [uri "/rxr.php"] [unique_id "apK-EIv3RhPI65jTFG4FqQAAAyg"]
[Sat Aug 29 05:10:08.707982 2026] [security2:error] [pid 1041789:tid 1042053] [client 20.63.81.20:46390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/mad.php"] [unique_id "apK-EIv3RhPI65jTFG4FqgAAA5g"]
[Sat Aug 29 05:10:08.733681 2026] [security2:error] [pid 1321:tid 1547] [client 20.104.18.15:43283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-EGjCPtor9NZ-byTajAAABnY"]
[Sat Aug 29 05:10:08.736195 2026] [security2:error] [pid 1041789:tid 1041957] [client 4.205.62.107:22274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/wp-tem.php"] [unique_id "apK-EIv3RhPI65jTFG4FqwAAAzg"]
[Sat Aug 29 05:10:08.741711 2026] [security2:error] [pid 1041789:tid 1041965] [client 20.220.204.93:63494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/66.php"] [unique_id "apK-EIv3RhPI65jTFG4FrAAAA0A"]
[Sat Aug 29 05:10:08.763518 2026] [security2:error] [pid 1041789:tid 1041961] [client 158.23.147.79:60159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/lv.php"] [unique_id "apK-EIv3RhPI65jTFG4FrQAAAzw"]
[Sat Aug 29 05:10:08.766688 2026] [security2:error] [pid 1041789:tid 1042037] [client 158.23.184.117:11865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.narrowgate-foundation.com"] [uri "/wp-admin/css/fff.php"] [unique_id "apK-EIv3RhPI65jTFG4FrgAAA4g"]
[Sat Aug 29 05:10:08.778388 2026] [security2:error] [pid 1321:tid 1600] [client 52.139.37.240:10443] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "worldofboardcraft.com"] [uri "/c99.php"] [unique_id "apK-EGjCPtor9NZ-byTajQAABqs"]
[Sat Aug 29 05:10:08.781433 2026] [security2:error] [pid 1041789:tid 1041982] [client 20.63.81.20:56879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/ser.php"] [unique_id "apK-EIv3RhPI65jTFG4FrwAAA1E"]
[Sat Aug 29 05:10:08.781896 2026] [security2:error] [pid 1321:tid 1504] [client 158.23.184.117:25705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.well-known/logs233/index.php"] [unique_id "apK-EGjCPtor9NZ-byTajgAABkw"]
[Sat Aug 29 05:10:08.787746 2026] [security2:error] [pid 1041789:tid 1041946] [client 20.48.251.3:46544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/var/www/wallet/index.php"] [unique_id "apK-EIv3RhPI65jTFG4FsAAAAy0"]
[Sat Aug 29 05:10:08.793482 2026] [security2:error] [pid 1041789:tid 1041950] [client 20.196.209.81:12305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-admin/security.php"] [unique_id "apK-EIv3RhPI65jTFG4FsQAAAzE"]
[Sat Aug 29 05:10:08.795041 2026] [security2:error] [pid 1321:tid 1517] [client 20.63.81.20:58105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oromotors.sacep.com.ec"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK-EGjCPtor9NZ-byTajwAABlk"]
[Sat Aug 29 05:10:08.800335 2026] [security2:error] [pid 1041789:tid 1041931] [client 158.23.147.79:5977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-admin/setup-config.php"] [unique_id "apK-EIv3RhPI65jTFG4FsgAAAx4"]
[Sat Aug 29 05:10:08.805631 2026] [security2:error] [pid 1041789:tid 1042017] [client 20.220.204.93:55351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/ww.php"] [unique_id "apK-EIv3RhPI65jTFG4FswAAA3Q"]
[Sat Aug 29 05:10:08.834070 2026] [security2:error] [pid 1321:tid 1591] [client 40.83.93.50:14611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/flower.php"] [unique_id "apK-EGjCPtor9NZ-byTakAAABqI"]
[Sat Aug 29 05:10:08.840214 2026] [security2:error] [pid 1041789:tid 1041963] [client 20.63.81.20:46288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/st.php"] [unique_id "apK-EIv3RhPI65jTFG4FtAAAAz4"]
[Sat Aug 29 05:10:08.843249 2026] [security2:error] [pid 1041789:tid 1041943] [client 20.63.81.20:33757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hitechgs.com"] [uri "/csst.php"] [unique_id "apK-EIv3RhPI65jTFG4FtQAAAyo"]
[Sat Aug 29 05:10:08.846661 2026] [security2:error] [pid 1041789:tid 1041972] [client 4.232.148.111:26841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/system_log.php"] [unique_id "apK-EIv3RhPI65jTFG4FtgAAA0c"]
[Sat Aug 29 05:10:08.854737 2026] [security2:error] [pid 1041789:tid 1042048] [client 180.190.5.40:33488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.5.190.180.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK-EIv3RhPI65jTFG4FtwAAA5M"]
[Sat Aug 29 05:10:08.854880 2026] [security2:error] [pid 1041789:tid 1042048] [client 180.190.5.40:33488] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK-EIv3RhPI65jTFG4FtwAAA5M"]
[Sat Aug 29 05:10:08.864202 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.104.18.15:44008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-EIv3RhPI65jTFG4FuQAAA30"]
[Sat Aug 29 05:10:08.897831 2026] [security2:error] [pid 1321:tid 1613] [client 158.23.147.79:62796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/asd.php"] [unique_id "apK-EGjCPtor9NZ-byTakgAABrg"]
[Sat Aug 29 05:10:08.901001 2026] [security2:error] [pid 1041789:tid 1041951] [client 52.139.37.240:13997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/wp-content/plugins/ftde.php"] [unique_id "apK-EIv3RhPI65jTFG4FvAAAAzI"]
[Sat Aug 29 05:10:08.905974 2026] [security2:error] [pid 1041789:tid 1041987] [client 4.205.62.107:51471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/infos.php"] [unique_id "apK-EIv3RhPI65jTFG4FvgAAA1Y"]
[Sat Aug 29 05:10:08.923556 2026] [security2:error] [pid 1041789:tid 1041956] [client 20.63.81.20:60542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/431.php"] [unique_id "apK-EIv3RhPI65jTFG4FwAAAAzc"]
[Sat Aug 29 05:10:08.926227 2026] [security2:error] [pid 1041789:tid 1042018] [client 4.205.62.107:62946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/adminer-4.7.6-en.php"] [unique_id "apK-EIv3RhPI65jTFG4FvwAAA3U"]
[Sat Aug 29 05:10:08.927494 2026] [security2:error] [pid 1041789:tid 1041956] [client 20.63.81.20:57986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oromotors.sacep.com.ec"] [uri "/wsd.php"] [unique_id "apK-EIv3RhPI65jTFG4FwQAAAzc"]
[Sat Aug 29 05:10:08.940947 2026] [security2:error] [pid 1041789:tid 1041938] [client 68.155.159.216:61257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK-EIv3RhPI65jTFG4FxAAAAyU"]
[Sat Aug 29 05:10:08.944596 2026] [security2:error] [pid 1041789:tid 1042030] [client 20.48.251.3:46643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/xp.php"] [unique_id "apK-EIv3RhPI65jTFG4FxgAAA4E"]
[Sat Aug 29 05:10:08.951488 2026] [security2:error] [pid 1041789:tid 1042044] [client 158.23.147.79:63031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK-EIv3RhPI65jTFG4FxwAAA48"]
[Sat Aug 29 05:10:08.955422 2026] [security2:error] [pid 1321:tid 1525] [client 158.23.184.117:26039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.well-known/maintenance.php"] [unique_id "apK-EGjCPtor9NZ-byTakwAABmE"]
[Sat Aug 29 05:10:08.971698 2026] [security2:error] [pid 1041789:tid 1042047] [client 20.63.81.20:33679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hitechgs.com"] [uri "/wp-includes/blocks/query-title/footer.php"] [unique_id "apK-EIv3RhPI65jTFG4FyQAAA5I"]
[Sat Aug 29 05:10:08.977205 2026] [security2:error] [pid 1041789:tid 1041971] [client 20.63.81.20:46414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/alfanew.php"] [unique_id "apK-EIv3RhPI65jTFG4FygAAA0Y"]
[Sat Aug 29 05:10:08.984822 2026] [security2:error] [pid 1041789:tid 1042007] [client 4.205.62.107:6853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/myfile.php"] [unique_id "apK-EIv3RhPI65jTFG4FzAAAA2o"]
[Sat Aug 29 05:10:09.010931 2026] [security2:error] [pid 1041789:tid 1041965] [client 20.151.200.44:65098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/ws66.php"] [unique_id "apK-EYv3RhPI65jTFG4FzgAAA0A"]
[Sat Aug 29 05:10:09.010950 2026] [security2:error] [pid 1041789:tid 1042057] [client 20.104.18.15:44007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/ap.php"] [unique_id "apK-EYv3RhPI65jTFG4FzwAAA5w"]
[Sat Aug 29 05:10:09.011727 2026] [security2:error] [pid 1041789:tid 1041961] [client 68.155.159.216:1955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK-EYv3RhPI65jTFG4F0AAAAzw"]
[Sat Aug 29 05:10:09.067125 2026] [security2:error] [pid 1041789:tid 1041950] [client 20.63.81.20:57331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oromotors.sacep.com.ec"] [uri "/bulet.php"] [unique_id "apK-EYv3RhPI65jTFG4F0wAAAzE"]
[Sat Aug 29 05:10:09.072853 2026] [security2:error] [pid 1041789:tid 1041969] [client 158.23.147.79:14327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/.well-known/index.php"] [unique_id "apK-EYv3RhPI65jTFG4F1AAAA0Q"]
[Sat Aug 29 05:10:09.073859 2026] [security2:error] [pid 1321:tid 1512] [client 68.155.159.216:63814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-admin/network/index.php"] [unique_id "apK-EWjCPtor9NZ-byTalwAABlQ"]
[Sat Aug 29 05:10:09.077906 2026] [security2:error] [pid 1321:tid 1527] [client 20.63.81.20:60497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/rxr.php"] [unique_id "apK-EWjCPtor9NZ-byTamAAABmM"]
[Sat Aug 29 05:10:09.080030 2026] [security2:error] [pid 1041789:tid 1041988] [client 20.48.251.3:9294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/wp-konfig.backup.php"] [unique_id "apK-EYv3RhPI65jTFG4F1wAAA1c"]
[Sat Aug 29 05:10:09.084754 2026] [security2:error] [pid 1041789:tid 1042029] [client 68.155.159.216:62835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK-EYv3RhPI65jTFG4F2AAAA4A"]
[Sat Aug 29 05:10:09.100818 2026] [security2:error] [pid 1321:tid 1491] [client 20.52.41.200:4737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-conflg.php"] [unique_id "apK-EWjCPtor9NZ-byTamgAABj8"]
[Sat Aug 29 05:10:09.101805 2026] [security2:error] [pid 1041789:tid 1042054] [client 158.23.184.117:25676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.well-known/min.php"] [unique_id "apK-EYv3RhPI65jTFG4F2QAAA5k"]
[Sat Aug 29 05:10:09.101831 2026] [security2:error] [pid 1321:tid 1502] [client 20.63.81.20:33785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hitechgs.com"] [uri "/wp-content/uploads/indoex.php"] [unique_id "apK-EWjCPtor9NZ-byTamwAABko"]
[Sat Aug 29 05:10:09.107415 2026] [security2:error] [pid 1041789:tid 1042013] [client 158.23.147.79:5938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-includes/customize/index.php"] [unique_id "apK-EYv3RhPI65jTFG4F2gAAA3A"]
[Sat Aug 29 05:10:09.110515 2026] [security2:error] [pid 1041789:tid 1041977] [client 20.63.81.20:46446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/ioxi.php"] [unique_id "apK-EYv3RhPI65jTFG4F2wAAA0w"]
[Sat Aug 29 05:10:09.113248 2026] [security2:error] [pid 1321:tid 1599] [client 20.104.49.130:58078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/one.php"] [unique_id "apK-EWjCPtor9NZ-byTangAABqo"]
[Sat Aug 29 05:10:09.139272 2026] [security2:error] [pid 1321:tid 1516] [client 20.220.204.93:63562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/f35.php"] [unique_id "apK-EWjCPtor9NZ-byTanwAABlg"]
[Sat Aug 29 05:10:09.184962 2026] [security2:error] [pid 1041789:tid 1042044] [client 68.155.159.216:23437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/goat.php"] [unique_id "apK-EYv3RhPI65jTFG4F3QAAA48"]
[Sat Aug 29 05:10:09.186001 2026] [security2:error] [pid 1321:tid 1582] [client 68.155.159.216:30640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/goat1.php"] [unique_id "apK-EWjCPtor9NZ-byTaoAAABpk"]
[Sat Aug 29 05:10:09.195715 2026] [security2:error] [pid 1321:tid 1584] [client 20.63.81.20:58085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oromotors.sacep.com.ec"] [uri "/av.php"] [unique_id "apK-EWjCPtor9NZ-byTaoQAABps"]
[Sat Aug 29 05:10:09.202133 2026] [security2:error] [pid 1321:tid 1530] [client 40.83.93.50:16461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-admin/user/f35.php"] [unique_id "apK-EWjCPtor9NZ-byTaowAABmY"]
[Sat Aug 29 05:10:09.209518 2026] [security2:error] [pid 1321:tid 1520] [client 74.248.24.12:19974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-content/uploads/min.php"] [unique_id "apK-EWjCPtor9NZ-byTapAAABlw"]
[Sat Aug 29 05:10:09.209518 2026] [security2:error] [pid 1041789:tid 1041995] [client 20.48.251.3:46556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK-EYv3RhPI65jTFG4F3wAAA14"]
[Sat Aug 29 05:10:09.213263 2026] [security2:error] [pid 1321:tid 1536] [client 20.63.81.20:56842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/csst.php"] [unique_id "apK-EWjCPtor9NZ-byTapQAABmw"]
[Sat Aug 29 05:10:09.214473 2026] [security2:error] [pid 1321:tid 1513] [client 20.104.18.15:43995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/media.php"] [unique_id "apK-EWjCPtor9NZ-byTapgAABlU"]
[Sat Aug 29 05:10:09.219180 2026] [security2:error] [pid 1041789:tid 1041947] [client 20.196.209.81:17759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK-EYv3RhPI65jTFG4F4AAAAy4"]
[Sat Aug 29 05:10:09.231873 2026] [security2:error] [pid 1041789:tid 1042020] [client 20.63.81.20:33771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hitechgs.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK-EYv3RhPI65jTFG4F4QAAA3c"]
[Sat Aug 29 05:10:09.236112 2026] [security2:error] [pid 1321:tid 1507] [client 20.220.204.93:54561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/w1px.php"] [unique_id "apK-EWjCPtor9NZ-byTapwAABk8"]
[Sat Aug 29 05:10:09.240162 2026] [security2:error] [pid 1041789:tid 1041971] [client 20.63.81.20:46348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/TNT.php"] [unique_id "apK-EYv3RhPI65jTFG4F4gAAA0Y"]
[Sat Aug 29 05:10:09.246386 2026] [security2:error] [pid 1321:tid 1597] [client 158.23.184.117:26002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.well-known/module.php"] [unique_id "apK-EWjCPtor9NZ-byTaqAAABqg"]
[Sat Aug 29 05:10:09.306295 2026] [security2:error] [pid 1321:tid 1586] [client 20.104.49.130:65186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/amax.php"] [unique_id "apK-EWjCPtor9NZ-byTaqQAABp0"]
[Sat Aug 29 05:10:09.308848 2026] [security2:error] [pid 1041789:tid 1041991] [client 4.232.148.111:1078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/24.php"] [unique_id "apK-EYv3RhPI65jTFG4F5AAAA1o"]
[Sat Aug 29 05:10:09.342352 2026] [security2:error] [pid 1321:tid 1551] [client 20.48.251.3:46567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/nlnub.php"] [unique_id "apK-EWjCPtor9NZ-byTaqgAABno"]
[Sat Aug 29 05:10:09.343024 2026] [security2:error] [pid 1041789:tid 1042055] [client 68.155.159.216:2003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-includes/content.php"] [unique_id "apK-EYv3RhPI65jTFG4F5QAAA5o"]
[Sat Aug 29 05:10:09.344403 2026] [security2:error] [pid 1321:tid 1549] [client 20.63.81.20:58000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oromotors.sacep.com.ec"] [uri "/images.php"] [unique_id "apK-EWjCPtor9NZ-byTaqwAABng"]
[Sat Aug 29 05:10:09.351452 2026] [security2:error] [pid 1041789:tid 1041990] [client 20.63.81.20:56923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/wp-includes/blocks/query-title/footer.php"] [unique_id "apK-EYv3RhPI65jTFG4F5gAAA1k"]
[Sat Aug 29 05:10:09.355529 2026] [security2:error] [pid 1041789:tid 1041944] [client 68.155.159.216:9224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK-EYv3RhPI65jTFG4F5wAAAys"]
[Sat Aug 29 05:10:09.367389 2026] [security2:error] [pid 1041789:tid 1041946] [client 20.104.18.15:43968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/adminfuns.php"] [unique_id "apK-EYv3RhPI65jTFG4F6AAAAy0"]
[Sat Aug 29 05:10:09.368518 2026] [security2:error] [pid 1041789:tid 1041950] [client 20.63.81.20:33764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hitechgs.com"] [uri "/haxor.php"] [unique_id "apK-EYv3RhPI65jTFG4F6QAAAzE"]
[Sat Aug 29 05:10:09.369712 2026] [security2:error] [pid 1321:tid 1509] [client 20.63.81.20:46455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/cd.php"] [unique_id "apK-EWjCPtor9NZ-byTarAAABlE"]
[Sat Aug 29 05:10:09.403384 2026] [security2:error] [pid 1321:tid 1510] [client 158.23.184.117:26035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.well-known/options.php"] [unique_id "apK-EWjCPtor9NZ-byTargAABlI"]
[Sat Aug 29 05:10:09.408621 2026] [security2:error] [pid 1321:tid 1592] [client 4.205.62.107:61700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/xa.php"] [unique_id "apK-EWjCPtor9NZ-byTarwAABqM"]
[Sat Aug 29 05:10:09.411051 2026] [security2:error] [pid 1041789:tid 1041967] [client 52.139.37.240:13409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "apK-EYv3RhPI65jTFG4F6wAAA0I"]
[Sat Aug 29 05:10:09.438762 2026] [security2:error] [pid 1321:tid 1596] [client 40.83.93.50:13227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/meta.php"] [unique_id "apK-EWjCPtor9NZ-byTasAAABqc"]
[Sat Aug 29 05:10:09.451439 2026] [security2:error] [pid 1041789:tid 1041977] [client 20.220.204.93:55901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/to.php"] [unique_id "apK-EYv3RhPI65jTFG4F7AAAA0w"]
[Sat Aug 29 05:10:09.451449 2026] [security2:error] [pid 1041789:tid 1041822] [remote 74.7.227.154:54326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK-EYv3RhPI65jTFG4F7QADjhQ"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwp-easycart%2Fadmin%2Felementor
[Sat Aug 29 05:10:09.454943 2026] [security2:error] [pid 1041789:tid 1042046] [client 20.220.204.93:63508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/wen.php"] [unique_id "apK-EYv3RhPI65jTFG4F7gAAA5E"]
[Sat Aug 29 05:10:09.472423 2026] [security2:error] [pid 1041789:tid 1041972] [client 20.48.251.3:46528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/wpver.php"] [unique_id "apK-EYv3RhPI65jTFG4F7wAAA0c"]
[Sat Aug 29 05:10:09.486394 2026] [security2:error] [pid 1321:tid 1489] [client 20.63.81.20:58073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oromotors.sacep.com.ec"] [uri "/ops.php"] [unique_id "apK-EWjCPtor9NZ-byTasQAABj0"]
[Sat Aug 29 05:10:09.492426 2026] [security2:error] [pid 1041789:tid 1041951] [client 20.63.81.20:56859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/wp-content/uploads/indoex.php"] [unique_id "apK-EYv3RhPI65jTFG4F8AAAAzI"]
[Sat Aug 29 05:10:09.498940 2026] [security2:error] [pid 1041789:tid 1041987] [client 20.63.81.20:33759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hitechgs.com"] [uri "/google.php"] [unique_id "apK-EYv3RhPI65jTFG4F8QAAA1Y"]
[Sat Aug 29 05:10:09.508538 2026] [security2:error] [pid 1321:tid 1566] [client 20.63.81.20:46355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.proaider.com"] [uri "/luuf.php"] [unique_id "apK-EWjCPtor9NZ-byTasgAABok"]
[Sat Aug 29 05:10:09.538868 2026] [security2:error] [pid 1041789:tid 1042031] [client 20.63.81.20:51216] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.fastnetus.com"] [uri "/domvf.php"] [unique_id "apK-EYv3RhPI65jTFG4F8gAAA4I"]
[Sat Aug 29 05:10:09.546048 2026] [security2:error] [pid 1321:tid 1605] [client 158.23.184.117:25680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.well-known/panel.php"] [unique_id "apK-EWjCPtor9NZ-byTaswAABrA"]
[Sat Aug 29 05:10:09.558383 2026] [security2:error] [pid 1041789:tid 1041988] [client 20.52.41.200:5281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/123.php"] [unique_id "apK-EYv3RhPI65jTFG4F8wAAA1c"]
[Sat Aug 29 05:10:09.564322 2026] [security2:error] [pid 1321:tid 1583] [client 20.104.18.15:43934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/classwithtostring.php"] [unique_id "apK-EWjCPtor9NZ-byTatAAABpo"]
[Sat Aug 29 05:10:09.587603 2026] [security2:error] [pid 1041789:tid 1042045] [client 197.219.150.206:55244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK-EYv3RhPI65jTFG4F9AAAA5A"]
[Sat Aug 29 05:10:09.587737 2026] [security2:error] [pid 1041789:tid 1042045] [client 197.219.150.206:55244] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK-EYv3RhPI65jTFG4F9AAAA5A"]
[Sat Aug 29 05:10:09.606258 2026] [security2:error] [pid 1041789:tid 1042049] [client 20.48.251.3:46598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/autogooey.php"] [unique_id "apK-EYv3RhPI65jTFG4F9QAAA5Q"]
[Sat Aug 29 05:10:09.607250 2026] [security2:error] [pid 1041789:tid 1041975] [client 20.104.49.130:34523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/pfm.php"] [unique_id "apK-EYv3RhPI65jTFG4F9gAAA0o"]
[Sat Aug 29 05:10:09.610594 2026] [security2:error] [pid 1041789:tid 1041979] [client 20.63.81.20:39957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.it-methods.com"] [uri "/lock360.php"] [unique_id "apK-EYv3RhPI65jTFG4F9wAAA04"]
[Sat Aug 29 05:10:09.616230 2026] [security2:error] [pid 1041789:tid 1042035] [client 20.196.209.81:12304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-admin/system.php"] [unique_id "apK-EYv3RhPI65jTFG4F-QAAA4Y"]
[Sat Aug 29 05:10:09.619147 2026] [security2:error] [pid 1041789:tid 1041997] [client 20.63.81.20:57331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oromotors.sacep.com.ec"] [uri "/coffexium.php"] [unique_id "apK-EYv3RhPI65jTFG4F-gAAA2A"]
[Sat Aug 29 05:10:09.630266 2026] [security2:error] [pid 1321:tid 1588] [client 68.155.159.216:6128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK-EWjCPtor9NZ-byTatgAABp8"]
[Sat Aug 29 05:10:09.631122 2026] [security2:error] [pid 1041789:tid 1042007] [client 20.63.81.20:56944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.81.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.tonewarpstudio.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK-EYv3RhPI65jTFG4F-wAAA2o"]
[Sat Aug 29 05:10:09.651940 2026] [autoindex:error] [pid 1041789:tid 1042005] [client 52.139.37.240:0] AH01276: Cannot serve directory /home2/angelesf/public_html/jamesmarquiss/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:10:09.660903 2026] [security2:error] [pid 1041789:tid 1042023] [client 68.155.159.216:64399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK-EYv3RhPI65jTFG4F_wAAA3o"]
[Sat Aug 29 05:10:09.672180 2026] [security2:error] [pid 1041789:tid 1041991] [client 68.155.159.216:33608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK-EYv3RhPI65jTFG4GAAAAA1o"]
[Sat Aug 29 05:10:09.672711 2026] [security2:error] [pid 1041789:tid 1041961] [client 68.155.159.216:14262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/dropdown.php"] [unique_id "apK-EYv3RhPI65jTFG4GAQAAAzw"]
[Sat Aug 29 05:10:09.679080 2026] [security2:error] [pid 1041789:tid 1042011] [client 20.220.204.93:54599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/thui.php"] [unique_id "apK-EYv3RhPI65jTFG4GAwAAA24"]
[Sat Aug 29 05:10:09.682699 2026] [security2:error] [pid 1041789:tid 1042018] [client 40.83.93.50:12156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-admin/user/min.php"] [unique_id "apK-EYv3RhPI65jTFG4GBAAAA3U"]
[Sat Aug 29 05:10:09.697486 2026] [security2:error] [pid 1321:tid 1577] [client 158.23.184.117:25719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.well-known/pki-validation/mariju.php"] [unique_id "apK-EWjCPtor9NZ-byTatwAABpQ"]
[Sat Aug 29 05:10:09.702538 2026] [security2:error] [pid 1041789:tid 1042037] [client 20.104.18.15:43325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK-EYv3RhPI65jTFG4GBQAAA4g"]
[Sat Aug 29 05:10:09.719453 2026] [security2:error] [pid 1321:tid 1610] [client 52.139.37.240:13394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/z.php"] [unique_id "apK-EWjCPtor9NZ-byTauAAABrU"]
[Sat Aug 29 05:10:09.738590 2026] [security2:error] [pid 1041789:tid 1041978] [client 74.248.24.12:4589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK-EYv3RhPI65jTFG4GBwAAA00"]
[Sat Aug 29 05:10:09.739830 2026] [security2:error] [pid 1041789:tid 1041982] [client 20.48.251.3:46618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/aws_keys.php"] [unique_id "apK-EYv3RhPI65jTFG4GCAAAA1E"]
[Sat Aug 29 05:10:09.830132 2026] [security2:error] [pid 1041789:tid 1042013] [client 20.104.18.15:6923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/admin.php"] [unique_id "apK-EYv3RhPI65jTFG4GDAAAA3A"]
[Sat Aug 29 05:10:09.832133 2026] [security2:error] [pid 1041789:tid 1041957] [client 20.104.18.15:44024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/new.php"] [unique_id "apK-EYv3RhPI65jTFG4GDgAAAzg"]
[Sat Aug 29 05:10:09.843684 2026] [security2:error] [pid 1041789:tid 1042029] [client 158.23.184.117:25718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.well-known/pki-validation/pl.php"] [unique_id "apK-EYv3RhPI65jTFG4GDwAAA4A"]
[Sat Aug 29 05:10:09.857160 2026] [security2:error] [pid 1041789:tid 1042034] [client 20.151.200.44:63780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/Cok.php"] [unique_id "apK-EYv3RhPI65jTFG4GEQAAA4U"]
[Sat Aug 29 05:10:09.864083 2026] [security2:error] [pid 1041789:tid 1041960] [client 68.155.159.216:18351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-l0gin.php"] [unique_id "apK-EYv3RhPI65jTFG4GEgAAAzs"]
[Sat Aug 29 05:10:09.873010 2026] [security2:error] [pid 1041789:tid 1041972] [client 20.220.204.93:52055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/Jcrop.php"] [unique_id "apK-EYv3RhPI65jTFG4GEwAAA0c"]
[Sat Aug 29 05:10:09.875242 2026] [security2:error] [pid 1041789:tid 1041949] [client 20.48.251.3:46636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/adminer-4.7.6-en.php"] [unique_id "apK-EYv3RhPI65jTFG4GFAAAAzA"]
[Sat Aug 29 05:10:09.884939 2026] [security2:error] [pid 1041789:tid 1042051] [client 158.23.147.79:59461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-EYv3RhPI65jTFG4GFQAAA5Y"]
[Sat Aug 29 05:10:09.887426 2026] [security2:error] [pid 1321:tid 1529] [client 4.205.62.107:21948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/txets.php"] [unique_id "apK-EWjCPtor9NZ-byTauQAABmU"]
[Sat Aug 29 05:10:09.918663 2026] [security2:error] [pid 1041789:tid 1042043] [client 158.23.147.79:5825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK-EYv3RhPI65jTFG4GFgAAA44"]
[Sat Aug 29 05:10:09.920232 2026] [security2:error] [pid 1041789:tid 1042046] [client 52.139.37.240:14189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/f35.php"] [unique_id "apK-EYv3RhPI65jTFG4GFwAAA5E"]
[Sat Aug 29 05:10:09.921715 2026] [security2:error] [pid 1041789:tid 1042031] [client 20.104.18.15:43298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/5PJcpMFsD8B.php"] [unique_id "apK-EYv3RhPI65jTFG4GGAAAA4I"]
[Sat Aug 29 05:10:09.923520 2026] [security2:error] [pid 1041789:tid 1041931] [client 40.83.93.50:14639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/randkeyword.php"] [unique_id "apK-EYv3RhPI65jTFG4GGQAAAx4"]
[Sat Aug 29 05:10:09.944955 2026] [security2:error] [pid 1041789:tid 1041871] [remote 74.7.227.154:54326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK-EYv3RhPI65jTFG4GGgADcUU"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwp-easycart%2Fadmin%2Felementor
[Sat Aug 29 05:10:09.946217 2026] [security2:error] [pid 1041789:tid 1042047] [client 4.232.148.111:19526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK-EYv3RhPI65jTFG4GGwAAA5I"]
[Sat Aug 29 05:10:09.977325 2026] [security2:error] [pid 1041789:tid 1042049] [client 20.104.18.15:7117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/ws85.php"] [unique_id "apK-EYv3RhPI65jTFG4GHAAAA5Q"]
[Sat Aug 29 05:10:09.995705 2026] [security2:error] [pid 1041789:tid 1041995] [client 158.23.184.117:25988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.well-known/pki-validation/x.php"] [unique_id "apK-EYv3RhPI65jTFG4GHgAAA14"]
[Sat Aug 29 05:10:10.009921 2026] [security2:error] [pid 1041789:tid 1042048] [client 20.196.209.81:17753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-admin/test.php"] [unique_id "apK-Eov3RhPI65jTFG4GHwAAA5M"]
[Sat Aug 29 05:10:10.016115 2026] [security2:error] [pid 1041789:tid 1041956] [client 158.23.147.79:58925] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.condo4maui.com"] [uri "/1.php"] [unique_id "apK-Eov3RhPI65jTFG4GIAAAAzc"]
[Sat Aug 29 05:10:10.016199 2026] [security2:error] [pid 1041789:tid 1041956] [client 158.23.147.79:58925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/1.php"] [unique_id "apK-Eov3RhPI65jTFG4GIAAAAzc"]
[Sat Aug 29 05:10:10.022519 2026] [security2:error] [pid 1041789:tid 1041940] [client 20.52.41.200:4383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/yanz.php"] [unique_id "apK-Eov3RhPI65jTFG4GIQAAAyc"]
[Sat Aug 29 05:10:10.025169 2026] [security2:error] [pid 1321:tid 1504] [client 20.48.251.3:9295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/api.php"] [unique_id "apK-EmjCPtor9NZ-byTaugAABkw"]
[Sat Aug 29 05:10:10.039374 2026] [security2:error] [pid 1041789:tid 1041810] [remote 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK-Eov3RhPI65jTFG4GIgADPgg"]
[Sat Aug 29 05:10:10.039533 2026] [security2:error] [pid 1041789:tid 1041963] [client 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK-Eov3RhPI65jTFG4GIgADPgg"]
[Sat Aug 29 05:10:10.048035 2026] [security2:error] [pid 1041789:tid 1041942] [client 4.205.62.107:51431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/vx.php"] [unique_id "apK-Eov3RhPI65jTFG4GIwAAAyk"]
[Sat Aug 29 05:10:10.058030 2026] [security2:error] [pid 1321:tid 1517] [client 158.23.147.79:62994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-content/admin.php"] [unique_id "apK-EmjCPtor9NZ-byTauwAABlk"]
[Sat Aug 29 05:10:10.058907 2026] [security2:error] [pid 1041789:tid 1041941] [client 20.104.18.15:46003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/jp.php"] [unique_id "apK-Eov3RhPI65jTFG4GJQAAAyg"]
[Sat Aug 29 05:10:10.063158 2026] [security2:error] [pid 1321:tid 1518] [client 20.104.18.15:43933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/inx.php"] [unique_id "apK-EmjCPtor9NZ-byTavAAABlo"]
[Sat Aug 29 05:10:10.069491 2026] [security2:error] [pid 1041789:tid 1042052] [client 20.220.204.93:55369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/ws58.php"] [unique_id "apK-Eov3RhPI65jTFG4GJwAAA5c"]
[Sat Aug 29 05:10:10.073183 2026] [security2:error] [pid 1041789:tid 1042050] [client 4.205.62.107:62779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/phpi.php"] [unique_id "apK-Eov3RhPI65jTFG4GKAAAA5U"]
[Sat Aug 29 05:10:10.083837 2026] [security2:error] [pid 1041789:tid 1041991] [client 20.220.204.93:63611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/inc.php"] [unique_id "apK-Eov3RhPI65jTFG4GKQAAA1o"]
[Sat Aug 29 05:10:10.112215 2026] [security2:error] [pid 1321:tid 1523] [client 20.104.18.15:7125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/ffs.php"] [unique_id "apK-EmjCPtor9NZ-byTavgAABl8"]
[Sat Aug 29 05:10:10.120841 2026] [security2:error] [pid 1321:tid 1505] [client 4.205.62.107:6493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/lm15.php"] [unique_id "apK-EmjCPtor9NZ-byTavwAABk0"]
[Sat Aug 29 05:10:10.120845 2026] [security2:error] [pid 1041789:tid 1042054] [client 68.155.159.216:1909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-content/radio.php"] [unique_id "apK-Eov3RhPI65jTFG4GKgAAA5k"]
[Sat Aug 29 05:10:10.121331 2026] [security2:error] [pid 1041789:tid 1041935] [client 52.139.37.240:14150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/file61.php"] [unique_id "apK-Eov3RhPI65jTFG4GKwAAAyI"]
[Sat Aug 29 05:10:10.139846 2026] [security2:error] [pid 1321:tid 1537] [client 158.23.184.117:25971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.well-known/pki-validation/xmrlpc.php"] [unique_id "apK-EmjCPtor9NZ-byTawwAABm0"]
[Sat Aug 29 05:10:10.142132 2026] [security2:error] [pid 1041789:tid 1042028] [client 158.23.147.79:63239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/ws.php"] [unique_id "apK-Eov3RhPI65jTFG4GNgAAA38"]
[Sat Aug 29 05:10:10.145799 2026] [security2:error] [pid 1041789:tid 1041947] [client 103.185.242.143:58489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-Eov3RhPI65jTFG4GOAAAAy4"]
[Sat Aug 29 05:10:10.145890 2026] [security2:error] [pid 1041789:tid 1041947] [client 103.185.242.143:58489] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-Eov3RhPI65jTFG4GOAAAAy4"]
[Sat Aug 29 05:10:10.151129 2026] [security2:error] [pid 1321:tid 1564] [client 34.169.171.101:11886] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "forensicengineernj.com"] [uri "/api/v1/env"] [unique_id "apK-EmjCPtor9NZ-byTaxgAABoc"]
[Sat Aug 29 05:10:10.152781 2026] [security2:error] [pid 1041789:tid 1041987] [client 20.104.18.15:44012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK-Eov3RhPI65jTFG4GPgAAA1Y"]
[Sat Aug 29 05:10:10.158178 2026] [security2:error] [pid 1321:tid 1501] [client 34.169.171.101:11912] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-EmjCPtor9NZ-byTaygAABkk"]
[Sat Aug 29 05:10:10.159761 2026] [security2:error] [pid 1041789:tid 1041979] [client 40.83.93.50:18313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-admin/users.php"] [unique_id "apK-Eov3RhPI65jTFG4GQQAAA04"]
[Sat Aug 29 05:10:10.162972 2026] [security2:error] [pid 1041789:tid 1041957] [client 34.169.171.101:11966] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/.ssh/id_rsa"] [unique_id "apK-Eov3RhPI65jTFG4GRAAAAzg"]
[Sat Aug 29 05:10:10.164599 2026] [security2:error] [pid 1041789:tid 1041980] [client 34.169.171.101:11756] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/.ssh/id_dsa"] [unique_id "apK-Eov3RhPI65jTFG4GRQAAA08"]
[Sat Aug 29 05:10:10.168479 2026] [security2:error] [pid 1041789:tid 1042043] [client 20.48.251.3:46606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/txets.php"] [unique_id "apK-Eov3RhPI65jTFG4GSgAAA44"]
[Sat Aug 29 05:10:10.181625 2026] [security2:error] [pid 1041789:tid 1042014] [client 68.155.159.216:63118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK-Eov3RhPI65jTFG4GUAAAA3E"]
[Sat Aug 29 05:10:10.188450 2026] [security2:error] [pid 1041789:tid 1042049] [client 20.104.49.130:43835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "coveryourauto.com"] [uri "/coffexium.php"] [unique_id "apK-Eov3RhPI65jTFG4GVQAAA5Q"]
[Sat Aug 29 05:10:10.196099 2026] [security2:error] [pid 1321:tid 1516] [client 34.169.171.101:11912] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-EmjCPtor9NZ-byTa0QAABlg"], referer: https://forensicengineernj.com/firebase-credentials.json
[Sat Aug 29 05:10:10.241203 2026] [security2:error] [pid 1321:tid 1539] [client 20.104.18.15:7150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/nano.php"] [unique_id "apK-EmjCPtor9NZ-byTa0gAABm8"]
[Sat Aug 29 05:10:10.244523 2026] [security2:error] [pid 1041789:tid 1042050] [client 20.104.18.15:43973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/vpn.php"] [unique_id "apK-Eov3RhPI65jTFG4GXQAAA5U"]
[Sat Aug 29 05:10:10.246722 2026] [security2:error] [pid 1041789:tid 1042023] [client 158.23.147.79:5927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-admin/index.php"] [unique_id "apK-Eov3RhPI65jTFG4GXgAAA3o"]
[Sat Aug 29 05:10:10.263024 2026] [security2:error] [pid 1321:tid 1550] [client 74.248.24.12:4592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/bthil.php"] [unique_id "apK-EmjCPtor9NZ-byTa1AAABnk"]
[Sat Aug 29 05:10:10.290137 2026] [security2:error] [pid 1041789:tid 1041941] [client 158.23.184.117:25691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.well-known/security.php"] [unique_id "apK-Eov3RhPI65jTFG4GYwAAAyg"]
[Sat Aug 29 05:10:10.298923 2026] [security2:error] [pid 1041789:tid 1042034] [client 20.48.251.3:43995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/public/mah.php.php"] [unique_id "apK-Eov3RhPI65jTFG4GZgAAA4U"]
[Sat Aug 29 05:10:10.309964 2026] [security2:error] [pid 1321:tid 1530] [client 20.104.18.15:45902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/f35.php"] [unique_id "apK-EmjCPtor9NZ-byTa1gAABmY"]
[Sat Aug 29 05:10:10.318730 2026] [security2:error] [pid 1321:tid 1520] [client 20.104.18.15:43980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/wsd.php"] [unique_id "apK-EmjCPtor9NZ-byTa1wAABlw"]
[Sat Aug 29 05:10:10.337584 2026] [security2:error] [pid 1041789:tid 1041950] [client 52.139.37.240:13398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/mah.php"] [unique_id "apK-Eov3RhPI65jTFG4GagAAAzE"]
[Sat Aug 29 05:10:10.371263 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.104.18.15:7104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/ano.php"] [unique_id "apK-Eov3RhPI65jTFG4GbAAAA2Q"]
[Sat Aug 29 05:10:10.373594 2026] [security2:error] [pid 1041789:tid 1041947] [client 20.104.18.15:43316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/shiny.php"] [unique_id "apK-Eov3RhPI65jTFG4GbQAAAy4"]
[Sat Aug 29 05:10:10.382644 2026] [security2:error] [pid 1321:tid 1604] [client 20.220.204.93:54530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/xs.php"] [unique_id "apK-EmjCPtor9NZ-byTa2AAABq8"]
[Sat Aug 29 05:10:10.422212 2026] [security2:error] [pid 1041789:tid 1041991] [client 40.83.93.50:14633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/goods.php"] [unique_id "apK-Eov3RhPI65jTFG4GbwAAA1o"]
[Sat Aug 29 05:10:10.428010 2026] [security2:error] [pid 1041789:tid 1041978] [client 20.48.251.3:46609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/linusadmin-phpinfo.php"] [unique_id "apK-Eov3RhPI65jTFG4GcQAAA00"]
[Sat Aug 29 05:10:10.457254 2026] [security2:error] [pid 1321:tid 1575] [client 158.23.184.117:25710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.well-known/system.php"] [unique_id "apK-EmjCPtor9NZ-byTa2gAABpI"]
[Sat Aug 29 05:10:10.471188 2026] [security2:error] [pid 1321:tid 1597] [client 20.220.204.93:60870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/6bcwiqwj.php"] [unique_id "apK-EmjCPtor9NZ-byTa3AAABqg"]
[Sat Aug 29 05:10:10.477911 2026] [security2:error] [pid 1321:tid 1488] [client 20.104.18.15:46005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/shiny.php"] [unique_id "apK-EmjCPtor9NZ-byTa3QAABjw"]
[Sat Aug 29 05:10:10.485520 2026] [security2:error] [pid 1321:tid 1536] [client 20.52.41.200:4369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/autoload_classmap.php"] [unique_id "apK-EmjCPtor9NZ-byTa3gAABmw"]
[Sat Aug 29 05:10:10.500034 2026] [security2:error] [pid 1041789:tid 1042046] [client 20.104.18.15:7118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/mgrr.php"] [unique_id "apK-Eov3RhPI65jTFG4GdAAAA5E"]
[Sat Aug 29 05:10:10.515267 2026] [security2:error] [pid 1321:tid 1496] [client 195.178.110.247:46688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottawahomemarketvalue.com"] [uri "/index.php"] [unique_id "apK-EmjCPtor9NZ-byTa4gAABkQ"]
[Sat Aug 29 05:10:10.525601 2026] [security2:error] [pid 1321:tid 1558] [client 68.155.159.216:61272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/simple.php"] [unique_id "apK-EmjCPtor9NZ-byTa4wAABoE"]
[Sat Aug 29 05:10:10.534556 2026] [security2:error] [pid 1041789:tid 1042013] [client 52.139.37.240:13996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/mini.php"] [unique_id "apK-Eov3RhPI65jTFG4GdgAAA3A"]
[Sat Aug 29 05:10:10.534574 2026] [security2:error] [pid 1321:tid 1557] [client 20.104.18.15:43286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/bulet.php"] [unique_id "apK-EmjCPtor9NZ-byTa5AAABoA"]
[Sat Aug 29 05:10:10.540331 2026] [security2:error] [pid 1041789:tid 1042019] [client 68.155.159.216:9231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK-Eov3RhPI65jTFG4GdwAAA3Y"]
[Sat Aug 29 05:10:10.540365 2026] [security2:error] [pid 1041789:tid 1042044] [client 4.205.62.107:63940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/ws61.php"] [unique_id "apK-Eov3RhPI65jTFG4GeAAAA48"]
[Sat Aug 29 05:10:10.548138 2026] [security2:error] [pid 1041789:tid 1041931] [client 20.196.209.81:8857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-admin/user/f35.php"] [unique_id "apK-Eov3RhPI65jTFG4GeQAAAx4"]
[Sat Aug 29 05:10:10.561822 2026] [security2:error] [pid 1321:tid 1611] [client 20.48.251.3:43982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/routes.php"] [unique_id "apK-EmjCPtor9NZ-byTa5QAABrY"]
[Sat Aug 29 05:10:10.602667 2026] [security2:error] [pid 1041789:tid 1041943] [client 20.104.18.15:43967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/goods.php"] [unique_id "apK-Eov3RhPI65jTFG4GfAAAAyo"]
[Sat Aug 29 05:10:10.607716 2026] [security2:error] [pid 1321:tid 1578] [client 158.23.184.117:26003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.well-known/users.php"] [unique_id "apK-EmjCPtor9NZ-byTa6AAABpU"]
[Sat Aug 29 05:10:10.644615 2026] [security2:error] [pid 1321:tid 1532] [client 20.104.18.15:7140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/mac.php"] [unique_id "apK-EmjCPtor9NZ-byTa6QAABmg"]
[Sat Aug 29 05:10:10.654226 2026] [security2:error] [pid 1041789:tid 1042043] [client 40.83.93.50:22111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-admin/wp-cron.php"] [unique_id "apK-Eov3RhPI65jTFG4GfQAAA44"]
[Sat Aug 29 05:10:10.654268 2026] [security2:error] [pid 1041789:tid 1042020] [client 20.104.18.15:45901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/images.php"] [unique_id "apK-Eov3RhPI65jTFG4GfgAAA3c"]
[Sat Aug 29 05:10:10.662492 2026] [security2:error] [pid 1041789:tid 1041971] [client 20.104.18.15:43848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/av.php"] [unique_id "apK-Eov3RhPI65jTFG4GfwAAA0Y"]
[Sat Aug 29 05:10:10.676791 2026] [security2:error] [pid 1041789:tid 1042030] [client 195.178.110.247:62298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottawahomemarketvalue.com"] [uri "/index.php"] [unique_id "apK-Eov3RhPI65jTFG4GgAAAA4E"]
[Sat Aug 29 05:10:10.695661 2026] [security2:error] [pid 1321:tid 1508] [client 20.48.251.3:43992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/fm.php"] [unique_id "apK-EmjCPtor9NZ-byTa7AAABlA"]
[Sat Aug 29 05:10:10.695691 2026] [security2:error] [pid 1321:tid 1524] [client 68.155.159.216:64069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-content/cong.php"] [unique_id "apK-EmjCPtor9NZ-byTa7QAABmA"]
[Sat Aug 29 05:10:10.725708 2026] [security2:error] [pid 1041789:tid 1041860] [remote 74.7.227.154:54326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK-Eov3RhPI65jTFG4GgQADPjo"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwp-easycart%2Fadmin%2Felementor
[Sat Aug 29 05:10:10.731350 2026] [security2:error] [pid 1041789:tid 1042035] [client 52.139.37.240:14013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/v.php"] [unique_id "apK-Eov3RhPI65jTFG4GggAAA4Y"]
[Sat Aug 29 05:10:10.743154 2026] [security2:error] [pid 1041789:tid 1041939] [client 4.232.148.111:1108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK-Eov3RhPI65jTFG4GgwAAAyY"]
[Sat Aug 29 05:10:10.751603 2026] [security2:error] [pid 1321:tid 1606] [client 158.23.184.117:25994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.well-known/wp-blog-header.php"] [unique_id "apK-EmjCPtor9NZ-byTa7wAABrE"]
[Sat Aug 29 05:10:10.753798 2026] [security2:error] [pid 1041789:tid 1041942] [client 68.155.159.216:6061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK-Eov3RhPI65jTFG4GhQAAAyk"]
[Sat Aug 29 05:10:10.755304 2026] [security2:error] [pid 1041789:tid 1042050] [client 20.104.18.15:43982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/alfa.php"] [unique_id "apK-Eov3RhPI65jTFG4GhwAAA5U"]
[Sat Aug 29 05:10:10.764215 2026] [security2:error] [pid 1321:tid 1499] [client 68.155.159.216:64424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-includes/content.php"] [unique_id "apK-EmjCPtor9NZ-byTa8gAABkc"]
[Sat Aug 29 05:10:10.779483 2026] [security2:error] [pid 1321:tid 1563] [client 20.104.18.15:7078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/simple.php"] [unique_id "apK-EmjCPtor9NZ-byTa9AAABoY"]
[Sat Aug 29 05:10:10.795657 2026] [security2:error] [pid 1041789:tid 1042032] [client 68.155.159.216:14260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/sad/about.php"] [unique_id "apK-Eov3RhPI65jTFG4GiQAAA4M"]
[Sat Aug 29 05:10:10.800556 2026] [security2:error] [pid 1041789:tid 1042018] [client 68.155.159.216:33642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/themes.php"] [unique_id "apK-Eov3RhPI65jTFG4GigAAA3U"]
[Sat Aug 29 05:10:10.820066 2026] [security2:error] [pid 1041789:tid 1042015] [client 20.220.204.93:52013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/zu.php"] [unique_id "apK-Eov3RhPI65jTFG4GiwAAA3I"]
[Sat Aug 29 05:10:10.825819 2026] [security2:error] [pid 1321:tid 1533] [client 20.151.200.44:22203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/X7T6.php"] [unique_id "apK-EmjCPtor9NZ-byTa9wAABmk"]
[Sat Aug 29 05:10:10.829534 2026] [security2:error] [pid 1041789:tid 1041972] [client 34.50.189.51:31136] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "discocollective.kriveloff-associates.com"] [uri "/uploads../.env"] [unique_id "apK-Eov3RhPI65jTFG4GjgAAA0c"]
[Sat Aug 29 05:10:10.829726 2026] [security2:error] [pid 1041789:tid 1041933] [client 34.50.189.51:31152] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/img../.env"] [unique_id "apK-Eov3RhPI65jTFG4GjQAAAyA"]
[Sat Aug 29 05:10:10.829729 2026] [security2:error] [pid 1041789:tid 1041961] [client 34.50.189.51:31120] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/.env"] [unique_id "apK-Eov3RhPI65jTFG4GjAAAAzw"]
[Sat Aug 29 05:10:10.831922 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.48.251.3:46640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/pinfo.php"] [unique_id "apK-Eov3RhPI65jTFG4GjwAAA2Q"]
[Sat Aug 29 05:10:10.835366 2026] [security2:error] [pid 1041789:tid 1041990] [client 20.104.18.15:43981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/images.php"] [unique_id "apK-Eov3RhPI65jTFG4GkAAAA1k"]
[Sat Aug 29 05:10:10.836827 2026] [security2:error] [pid 1321:tid 1559] [client 34.50.189.51:31162] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/assets../.env"] [unique_id "apK-EmjCPtor9NZ-byTa-QAABoI"]
[Sat Aug 29 05:10:10.836867 2026] [security2:error] [pid 1321:tid 1531] [client 34.50.189.51:31172] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/.docker/.env"] [unique_id "apK-EmjCPtor9NZ-byTa-AAABmc"]
[Sat Aug 29 05:10:10.836893 2026] [security2:error] [pid 1041789:tid 1042025] [client 34.50.189.51:31164] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/images../.env"] [unique_id "apK-Eov3RhPI65jTFG4GkQAAA3w"]
[Sat Aug 29 05:10:10.839744 2026] [security2:error] [pid 1041789:tid 1041991] [client 20.220.204.93:65270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/easy.php"] [unique_id "apK-Eov3RhPI65jTFG4GkwAAA1o"]
[Sat Aug 29 05:10:10.842022 2026] [security2:error] [pid 1041789:tid 1042051] [client 34.50.189.51:31184] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/v2/.env"] [unique_id "apK-Eov3RhPI65jTFG4GkgAAA5Y"]
[Sat Aug 29 05:10:10.843859 2026] [core:error] [pid 1321:tid 1577] [client 34.50.189.51:31226] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:10.843873 2026] [core:error] [pid 1321:tid 1577] [client 34.50.189.51:31226] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:10.845820 2026] [security2:error] [pid 1321:tid 1577] [client 34.50.189.51:31226] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "discocollective.kriveloff-associates.com"] [uri "/index.php"] [unique_id "apK-EmjCPtor9NZ-byTa-gAABpQ"]
[Sat Aug 29 05:10:10.846707 2026] [security2:error] [pid 1041789:tid 1041950] [client 34.50.189.51:31186] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/v1/.env"] [unique_id "apK-Eov3RhPI65jTFG4GlQAAAzE"]
[Sat Aug 29 05:10:10.846805 2026] [security2:error] [pid 1321:tid 1610] [client 34.50.189.51:31216] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/.env.backup"] [unique_id "apK-EmjCPtor9NZ-byTa-wAABrU"]
[Sat Aug 29 05:10:10.847603 2026] [core:error] [pid 1041789:tid 1041951] [client 34.50.189.51:31206] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:10.847621 2026] [core:error] [pid 1041789:tid 1041951] [client 34.50.189.51:31206] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:10.848414 2026] [security2:error] [pid 1041789:tid 1041954] [client 34.50.189.51:31152] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/.env"] [unique_id "apK-Eov3RhPI65jTFG4GlgAAAzU"]
[Sat Aug 29 05:10:10.848593 2026] [security2:error] [pid 1041789:tid 1041951] [client 34.50.189.51:31206] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "discocollective.kriveloff-associates.com"] [uri "/index.php"] [unique_id "apK-Eov3RhPI65jTFG4GlAAAAzI"]
[Sat Aug 29 05:10:10.849064 2026] [security2:error] [pid 1041789:tid 1042041] [client 34.50.189.51:31120] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/.env.bak"] [unique_id "apK-Eov3RhPI65jTFG4GmAAAA4w"]
[Sat Aug 29 05:10:10.849191 2026] [security2:error] [pid 1321:tid 1571] [client 34.50.189.51:31172] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "discocollective.kriveloff-associates.com"] [uri "/.env.production"] [unique_id "apK-EmjCPtor9NZ-byTa_AAABo4"]
[Sat Aug 29 05:10:10.849929 2026] [security2:error] [pid 1041789:tid 1041944] [client 34.50.189.51:31244] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/app/.env"] [unique_id "apK-Eov3RhPI65jTFG4GmgAAAys"]
[Sat Aug 29 05:10:10.850056 2026] [core:error] [pid 1041789:tid 1042055] [client 34.50.189.51:31198] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:10.850067 2026] [core:error] [pid 1041789:tid 1042055] [client 34.50.189.51:31198] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:10.850199 2026] [security2:error] [pid 1041789:tid 1042046] [client 34.50.189.51:31164] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/api/.env"] [unique_id "apK-Eov3RhPI65jTFG4GmwAAA5E"]
[Sat Aug 29 05:10:10.850402 2026] [core:error] [pid 1041789:tid 1041947] [client 34.50.189.51:31228] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:10.850414 2026] [core:error] [pid 1041789:tid 1041947] [client 34.50.189.51:31228] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:10.851872 2026] [security2:error] [pid 1041789:tid 1041935] [client 34.50.189.51:31350] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/docker/.env"] [unique_id "apK-Eov3RhPI65jTFG4GnQAAAyI"]
[Sat Aug 29 05:10:10.852145 2026] [security2:error] [pid 1041789:tid 1041987] [client 34.50.189.51:31328] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/config/.env"] [unique_id "apK-Eov3RhPI65jTFG4GnAAAA1Y"]
[Sat Aug 29 05:10:10.853410 2026] [security2:error] [pid 1041789:tid 1041982] [client 34.50.189.51:31370] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/frontend/.env"] [unique_id "apK-Eov3RhPI65jTFG4GngAAA1E"]
[Sat Aug 29 05:10:10.853920 2026] [security2:error] [pid 1041789:tid 1041983] [client 34.50.189.51:31288] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/backend/.env"] [unique_id "apK-Eov3RhPI65jTFG4GnwAAA1I"]
[Sat Aug 29 05:10:10.854364 2026] [security2:error] [pid 1041789:tid 1041967] [client 34.50.189.51:31372] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/server/.env"] [unique_id "apK-Eov3RhPI65jTFG4GoAAAA0I"]
[Sat Aug 29 05:10:10.855113 2026] [security2:error] [pid 1041789:tid 1041977] [client 34.50.189.51:31390] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/web/.env"] [unique_id "apK-Eov3RhPI65jTFG4GogAAA0w"]
[Sat Aug 29 05:10:10.857395 2026] [security2:error] [pid 1321:tid 1497] [client 34.50.189.51:31254] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/core/.env"] [unique_id "apK-EmjCPtor9NZ-byTa_gAABkU"]
[Sat Aug 29 05:10:10.857627 2026] [security2:error] [pid 1041789:tid 1042011] [client 34.50.189.51:31262] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/.env.swp"] [unique_id "apK-Eov3RhPI65jTFG4GpAAAA24"]
[Sat Aug 29 05:10:10.858275 2026] [core:error] [pid 1041789:tid 1042031] [client 34.50.189.51:31184] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:10.858283 2026] [core:error] [pid 1041789:tid 1042031] [client 34.50.189.51:31184] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:10.860413 2026] [security2:error] [pid 1041789:tid 1041968] [client 34.50.189.51:31332] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/src/.env"] [unique_id "apK-Eov3RhPI65jTFG4GpQAAA0M"]
[Sat Aug 29 05:10:10.860963 2026] [security2:error] [pid 1321:tid 1529] [client 34.50.189.51:31374] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "discocollective.kriveloff-associates.com"] [uri "/.env.old"] [unique_id "apK-EmjCPtor9NZ-byTa_wAABmU"]
[Sat Aug 29 05:10:10.861882 2026] [security2:error] [pid 1041789:tid 1041979] [client 34.50.189.51:31258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/laravel/.env"] [unique_id "apK-Eov3RhPI65jTFG4GpgAAA04"]
[Sat Aug 29 05:10:10.890372 2026] [security2:error] [pid 1041789:tid 1041945] [client 20.104.18.15:43985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/33.php"] [unique_id "apK-Eov3RhPI65jTFG4GqAAAAyw"]
[Sat Aug 29 05:10:10.895613 2026] [security2:error] [pid 1321:tid 1547] [client 158.23.184.117:25989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.well-known/wp-links-opml.php"] [unique_id "apK-EmjCPtor9NZ-byTbAAAABnY"]
[Sat Aug 29 05:10:10.913067 2026] [security2:error] [pid 1041789:tid 1041975] [client 20.104.18.15:41797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/lib.php/new.php"] [unique_id "apK-Eov3RhPI65jTFG4GqQAAA0o"]
[Sat Aug 29 05:10:10.918467 2026] [security2:error] [pid 1041789:tid 1042043] [client 20.104.18.15:22507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/xty.php"] [unique_id "apK-Eov3RhPI65jTFG4GqwAAA44"]
[Sat Aug 29 05:10:10.928861 2026] [security2:error] [pid 1321:tid 1517] [client 52.139.37.240:13991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK-EmjCPtor9NZ-byTbAgAABlk"]
[Sat Aug 29 05:10:10.942052 2026] [security2:error] [pid 1041789:tid 1042057] [client 20.52.41.200:4370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/bi.php"] [unique_id "apK-Eov3RhPI65jTFG4GrAAAA5w"]
[Sat Aug 29 05:10:10.942596 2026] [security2:error] [pid 1041789:tid 1041941] [client 20.196.209.81:8393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-admin/user/min.php"] [unique_id "apK-Eov3RhPI65jTFG4GrQAAAyg"]
[Sat Aug 29 05:10:10.943245 2026] [security2:error] [pid 1041789:tid 1042037] [client 20.104.18.15:6980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/xty.php"] [unique_id "apK-Eov3RhPI65jTFG4GrgAAA4g"]
[Sat Aug 29 05:10:10.952997 2026] [security2:error] [pid 1041789:tid 1042015] [client 20.104.18.15:15310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/dev.php"] [unique_id "apK-Eov3RhPI65jTFG4GrwAAA3I"]
[Sat Aug 29 05:10:10.962661 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.48.251.3:9286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/admin-ajax.php"] [unique_id "apK-Eov3RhPI65jTFG4GsAAAA2Q"]
[Sat Aug 29 05:10:10.965067 2026] [security2:error] [pid 1321:tid 1548] [client 68.155.159.216:1885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-admin/css/index.php"] [unique_id "apK-EmjCPtor9NZ-byTbBAAABnc"]
[Sat Aug 29 05:10:10.974451 2026] [security2:error] [pid 1321:tid 1521] [client 68.155.159.216:18306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK-EmjCPtor9NZ-byTbBgAABl0"]
[Sat Aug 29 05:10:10.991941 2026] [core:error] [pid 1041789:tid 1041991] [client 146.70.134.142:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:10.991959 2026] [core:error] [pid 1041789:tid 1041991] [client 146.70.134.142:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:10.993907 2026] [security2:error] [pid 1041789:tid 1042053] [client 158.23.147.79:28053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/content.php"] [unique_id "apK-Eov3RhPI65jTFG4GtgAAA5g"]
[Sat Aug 29 05:10:11.001672 2026] [security2:error] [pid 1041789:tid 1042028] [client 40.83.93.50:12532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/hehe.php"] [unique_id "apK-E4v3RhPI65jTFG4GtwAAA38"]
[Sat Aug 29 05:10:11.007078 2026] [security2:error] [pid 1041789:tid 1042051] [client 20.104.18.15:45905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/82.php"] [unique_id "apK-E4v3RhPI65jTFG4GuAAAA5Y"]
[Sat Aug 29 05:10:11.012736 2026] [security2:error] [pid 1321:tid 1543] [client 103.48.146.148:64616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 148.146.48.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK-E2jCPtor9NZ-byTbCwAABnM"]
[Sat Aug 29 05:10:11.012919 2026] [security2:error] [pid 1321:tid 1543] [client 103.48.146.148:64616] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK-E2jCPtor9NZ-byTbCwAABnM"]
[Sat Aug 29 05:10:11.014360 2026] [security2:error] [pid 1041789:tid 1042055] [client 20.104.18.15:43924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/ops.php"] [unique_id "apK-E4v3RhPI65jTFG4GuwAAA5o"]
[Sat Aug 29 05:10:11.014391 2026] [security2:error] [pid 1041789:tid 1041944] [client 20.104.18.15:45987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/82.php"] [unique_id "apK-E4v3RhPI65jTFG4GugAAAys"]
[Sat Aug 29 05:10:11.030013 2026] [security2:error] [pid 1321:tid 1498] [client 4.205.62.107:21907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/time.php"] [unique_id "apK-E2jCPtor9NZ-byTbDAAABkY"]
[Sat Aug 29 05:10:11.035941 2026] [security2:error] [pid 1041789:tid 1041987] [client 20.104.18.15:43944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/133.php"] [unique_id "apK-E4v3RhPI65jTFG4GvAAAA1Y"]
[Sat Aug 29 05:10:11.047581 2026] [http2:warn] [pid 1018003:tid 1018214] [client 57.141.14.83:32086] h2_stream(1018003-136-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:10:11.057323 2026] [security2:error] [pid 1041789:tid 1041950] [client 158.23.184.117:25711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.well-known/wp-load.php"] [unique_id "apK-E4v3RhPI65jTFG4GvQAAAzE"]
[Sat Aug 29 05:10:11.078730 2026] [security2:error] [pid 1041789:tid 1041968] [client 20.104.18.15:7076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/sallu.php"] [unique_id "apK-E4v3RhPI65jTFG4GvgAAA0M"]
[Sat Aug 29 05:10:11.084483 2026] [security2:error] [pid 1041789:tid 1042019] [client 20.104.18.15:15263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/gos.php"] [unique_id "apK-E4v3RhPI65jTFG4GvwAAA3Y"]
[Sat Aug 29 05:10:11.093225 2026] [security2:error] [pid 1321:tid 1516] [client 20.48.251.3:43889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/wdf.php"] [unique_id "apK-E2jCPtor9NZ-byTbDQAABlg"]
[Sat Aug 29 05:10:11.103730 2026] [security2:error] [pid 1321:tid 1550] [client 20.104.18.15:22359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/sallu.php"] [unique_id "apK-E2jCPtor9NZ-byTbDgAABnk"]
[Sat Aug 29 05:10:11.103746 2026] [security2:error] [pid 1321:tid 1598] [client 20.104.18.15:41863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/info.php/new.php"] [unique_id "apK-E2jCPtor9NZ-byTbDwAABqk"]
[Sat Aug 29 05:10:11.119404 2026] [security2:error] [pid 1321:tid 1554] [client 40.83.93.50:22097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-admin/wp-links-opml.php"] [unique_id "apK-E2jCPtor9NZ-byTbEAAABn0"]
[Sat Aug 29 05:10:11.136809 2026] [security2:error] [pid 1041789:tid 1041943] [client 20.104.18.15:45937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/files.php/new.php"] [unique_id "apK-E4v3RhPI65jTFG4GwAAAAyo"]
[Sat Aug 29 05:10:11.143929 2026] [security2:error] [pid 1041789:tid 1041976] [client 52.139.37.240:14161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "apK-E4v3RhPI65jTFG4GwQAAA0s"]
[Sat Aug 29 05:10:11.155981 2026] [security2:error] [pid 1321:tid 1590] [client 34.169.171.101:11840] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-EmjCPtor9NZ-byTayAAABqE"]
[Sat Aug 29 05:10:11.167287 2026] [security2:error] [pid 1041789:tid 1041971] [client 158.23.147.79:38744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/xmlrpc.php"] [unique_id "apK-E4v3RhPI65jTFG4GwwAAA0Y"]
[Sat Aug 29 05:10:11.168223 2026] [security2:error] [pid 1041789:tid 1041940] [client 20.104.18.15:43907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/coffexium.php"] [unique_id "apK-E4v3RhPI65jTFG4GxAAAAyc"]
[Sat Aug 29 05:10:11.183979 2026] [security2:error] [pid 1041789:tid 1042030] [client 4.205.62.107:51511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/radio.php"] [unique_id "apK-E4v3RhPI65jTFG4GxQAAA4E"]
[Sat Aug 29 05:10:11.184913 2026] [security2:error] [pid 1321:tid 1579] [client 74.248.24.12:4555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/cv.php"] [unique_id "apK-E2jCPtor9NZ-byTbEgAABpY"]
[Sat Aug 29 05:10:11.186972 2026] [security2:error] [pid 1041789:tid 1041956] [client 158.23.147.79:14276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-content/themes/too.php"] [unique_id "apK-E4v3RhPI65jTFG4GxgAAAzc"]
[Sat Aug 29 05:10:11.194445 2026] [security2:error] [pid 1321:tid 1492] [client 34.169.171.101:11840] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-E2jCPtor9NZ-byTbEwAABkA"], referer: https://forensicengineernj.com/api/v1/settings
[Sat Aug 29 05:10:11.202907 2026] [security2:error] [pid 1321:tid 1530] [client 158.23.184.117:25997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.well-known/wp-mail.php"] [unique_id "apK-E2jCPtor9NZ-byTbFAAABmY"]
[Sat Aug 29 05:10:11.206513 2026] [security2:error] [pid 1041789:tid 1041969] [client 4.205.62.107:60290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK-E4v3RhPI65jTFG4GyAAAA0Q"]
[Sat Aug 29 05:10:11.221223 2026] [security2:error] [pid 1041789:tid 1042045] [client 20.104.18.15:7161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/codex.php"] [unique_id "apK-E4v3RhPI65jTFG4GyQAAA5A"]
[Sat Aug 29 05:10:11.227468 2026] [security2:error] [pid 1041789:tid 1042054] [client 68.155.159.216:1966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-admin/dropdown.php"] [unique_id "apK-E4v3RhPI65jTFG4GygAAA5k"]
[Sat Aug 29 05:10:11.231676 2026] [security2:error] [pid 1041789:tid 1042035] [client 20.48.251.3:46530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/snq.php"] [unique_id "apK-E4v3RhPI65jTFG4GywAAA4Y"]
[Sat Aug 29 05:10:11.232486 2026] [security2:error] [pid 1321:tid 1602] [client 20.104.18.15:15280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/132.php"] [unique_id "apK-E2jCPtor9NZ-byTbFQAABq0"]
[Sat Aug 29 05:10:11.250562 2026] [security2:error] [pid 1041789:tid 1041995] [client 158.23.147.79:62726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-includes/css/index.php"] [unique_id "apK-E4v3RhPI65jTFG4GzQAAA14"]
[Sat Aug 29 05:10:11.254888 2026] [security2:error] [pid 1321:tid 1536] [client 20.104.18.15:46062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/files.php/new.php"] [unique_id "apK-E2jCPtor9NZ-byTbFwAABmw"]
[Sat Aug 29 05:10:11.258122 2026] [security2:error] [pid 1041789:tid 1041988] [client 4.232.148.111:11938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/num.php"] [unique_id "apK-E4v3RhPI65jTFG4GzgAAA1c"]
[Sat Aug 29 05:10:11.258615 2026] [security2:error] [pid 1321:tid 1568] [client 20.104.18.15:41875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/db.php/new.php"] [unique_id "apK-E2jCPtor9NZ-byTbGAAABos"]
[Sat Aug 29 05:10:11.262580 2026] [security2:error] [pid 1041789:tid 1042048] [client 4.205.62.107:6479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/test.config.php"] [unique_id "apK-E4v3RhPI65jTFG4GzwAAA5M"]
[Sat Aug 29 05:10:11.264677 2026] [security2:error] [pid 1321:tid 1581] [client 20.104.18.15:43935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/sym.php"] [unique_id "apK-E2jCPtor9NZ-byTbGQAABpg"]
[Sat Aug 29 05:10:11.281768 2026] [security2:error] [pid 1041789:tid 1042042] [client 20.220.204.93:55911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/lanka.php"] [unique_id "apK-E4v3RhPI65jTFG4G0gAAA40"]
[Sat Aug 29 05:10:11.297911 2026] [security2:error] [pid 1041789:tid 1042046] [client 20.104.18.15:22337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/codex.php"] [unique_id "apK-E4v3RhPI65jTFG4G0wAAA5E"]
[Sat Aug 29 05:10:11.320631 2026] [security2:error] [pid 1041789:tid 1041983] [client 20.104.18.15:45976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/mghnhykio.php/new.php"] [unique_id "apK-E4v3RhPI65jTFG4G1QAAA1I"]
[Sat Aug 29 05:10:11.338531 2026] [security2:error] [pid 1041789:tid 1042015] [client 52.139.37.240:13403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-E4v3RhPI65jTFG4G1wAAA3I"]
[Sat Aug 29 05:10:11.344500 2026] [security2:error] [pid 1041789:tid 1042000] [client 20.196.209.81:22858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-admin/users.php"] [unique_id "apK-E4v3RhPI65jTFG4G2AAAA2M"]
[Sat Aug 29 05:10:11.352224 2026] [security2:error] [pid 1041789:tid 1041938] [client 158.23.147.79:5824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-content/themes/index.php"] [unique_id "apK-E4v3RhPI65jTFG4G2QAAAyU"]
[Sat Aug 29 05:10:11.353421 2026] [security2:error] [pid 1041789:tid 1042019] [client 20.104.18.15:7138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/5656.php"] [unique_id "apK-E4v3RhPI65jTFG4G2gAAA3Y"]
[Sat Aug 29 05:10:11.359996 2026] [security2:error] [pid 1041789:tid 1041982] [client 158.23.184.117:25690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.well-known/wp-settings.php"] [unique_id "apK-E4v3RhPI65jTFG4G2wAAA1E"]
[Sat Aug 29 05:10:11.362727 2026] [security2:error] [pid 1041789:tid 1042044] [client 20.48.251.3:46545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/aws_credentials.php"] [unique_id "apK-E4v3RhPI65jTFG4G3AAAA48"]
[Sat Aug 29 05:10:11.365740 2026] [security2:error] [pid 1321:tid 1595] [client 68.155.159.216:23541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK-E2jCPtor9NZ-byTbGgAABqY"]
[Sat Aug 29 05:10:11.366336 2026] [security2:error] [pid 1041789:tid 1041931] [client 20.104.18.15:44016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/BDKR28WP.php"] [unique_id "apK-E4v3RhPI65jTFG4G3QAAAx4"]
[Sat Aug 29 05:10:11.369756 2026] [security2:error] [pid 1041789:tid 1042041] [client 20.104.18.15:15262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/v22.php"] [unique_id "apK-E4v3RhPI65jTFG4G3gAAA4w"]
[Sat Aug 29 05:10:11.382295 2026] [security2:error] [pid 1041789:tid 1042047] [client 20.220.204.93:65248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/fresh3.php"] [unique_id "apK-E4v3RhPI65jTFG4G3wAAA5I"]
[Sat Aug 29 05:10:11.384942 2026] [security2:error] [pid 1041789:tid 1041942] [client 20.52.41.200:4630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/cc.php"] [unique_id "apK-E4v3RhPI65jTFG4G4AAAAyk"]
[Sat Aug 29 05:10:11.402504 2026] [security2:error] [pid 1041789:tid 1041943] [client 20.104.18.15:41970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/kuda.php"] [unique_id "apK-E4v3RhPI65jTFG4G4QAAAyo"]
[Sat Aug 29 05:10:11.447008 2026] [security2:error] [pid 1041789:tid 1042030] [client 20.104.18.15:46072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/mghnhykio.php/new.php"] [unique_id "apK-E4v3RhPI65jTFG4G4gAAA4E"]
[Sat Aug 29 05:10:11.450343 2026] [security2:error] [pid 1041789:tid 1041967] [client 20.104.49.130:51347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/ohct.php"] [unique_id "apK-E4v3RhPI65jTFG4G4wAAA0I"]
[Sat Aug 29 05:10:11.455135 2026] [security2:error] [pid 1041789:tid 1041963] [client 68.155.159.216:56831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-E4v3RhPI65jTFG4G5AAAAz4"]
[Sat Aug 29 05:10:11.460402 2026] [security2:error] [pid 1041789:tid 1041939] [client 20.104.18.15:43318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/8.php"] [unique_id "apK-E4v3RhPI65jTFG4G5QAAAyY"]
[Sat Aug 29 05:10:11.480588 2026] [security2:error] [pid 1041789:tid 1041977] [client 40.83.93.50:13220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/wp-admin/class-db.php"] [unique_id "apK-E4v3RhPI65jTFG4G5gAAA0w"]
[Sat Aug 29 05:10:11.485117 2026] [security2:error] [pid 1041789:tid 1042032] [client 20.104.18.15:45991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/admin.php/nope.php"] [unique_id "apK-E4v3RhPI65jTFG4G5wAAA4M"]
[Sat Aug 29 05:10:11.492559 2026] [security2:error] [pid 1041789:tid 1041957] [client 20.48.251.3:46575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/v1.php"] [unique_id "apK-E4v3RhPI65jTFG4G6AAAAzg"]
[Sat Aug 29 05:10:11.492966 2026] [security2:error] [pid 1041789:tid 1042035] [client 20.104.18.15:7095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/w3lls.php"] [unique_id "apK-E4v3RhPI65jTFG4G6QAAA4Y"]
[Sat Aug 29 05:10:11.502077 2026] [security2:error] [pid 1041789:tid 1041969] [client 158.23.184.117:25990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/.well-known/wp-signup.php"] [unique_id "apK-E4v3RhPI65jTFG4G6wAAA0Q"]
[Sat Aug 29 05:10:11.536654 2026] [security2:error] [pid 1321:tid 1509] [client 20.104.18.15:15173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/wp-activate.php"] [unique_id "apK-E2jCPtor9NZ-byTbGwAABlE"]
[Sat Aug 29 05:10:11.538807 2026] [security2:error] [pid 1041789:tid 1041941] [client 20.104.18.15:41954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/sure.php"] [unique_id "apK-E4v3RhPI65jTFG4G7QAAAyg"]
[Sat Aug 29 05:10:11.541415 2026] [security2:error] [pid 1041789:tid 1042057] [client 20.104.49.130:36772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pvillusions.com"] [uri "/k.php"] [unique_id "apK-E4v3RhPI65jTFG4G8AAAA5w"]
[Sat Aug 29 05:10:11.569177 2026] [security2:error] [pid 1041789:tid 1041948] [client 20.104.18.15:43990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/sf.php"] [unique_id "apK-E4v3RhPI65jTFG4G8wAAAy8"]
[Sat Aug 29 05:10:11.580821 2026] [security2:error] [pid 1321:tid 1528] [client 20.104.18.15:22414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/5656.php"] [unique_id "apK-E2jCPtor9NZ-byTbHAAABmQ"]
[Sat Aug 29 05:10:11.585418 2026] [security2:error] [pid 1041789:tid 1042020] [client 40.83.93.50:1477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-admin/wp-load.php"] [unique_id "apK-E4v3RhPI65jTFG4G9AAAA3c"]
[Sat Aug 29 05:10:11.586541 2026] [security2:error] [pid 1041789:tid 1042023] [client 195.178.110.247:46702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.luxuryweddingphotographer.com"] [uri "/index.php"] [unique_id "apK-E4v3RhPI65jTFG4G9QAAA3o"]
[Sat Aug 29 05:10:11.587639 2026] [autoindex:error] [pid 1041789:tid 1041992] [client 52.139.37.240:0] AH01276: Cannot serve directory /home2/angelesf/public_html/jamesmarquiss/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:10:11.593594 2026] [security2:error] [pid 1041789:tid 1042006] [client 20.104.49.130:53875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/wp-good.php"] [unique_id "apK-E4v3RhPI65jTFG4G9gAAA2k"]
[Sat Aug 29 05:10:11.605407 2026] [security2:error] [pid 1041789:tid 1041991] [client 20.104.18.15:45996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/admin.php/nope.php"] [unique_id "apK-E4v3RhPI65jTFG4G9wAAA1o"]
[Sat Aug 29 05:10:11.611729 2026] [security2:error] [pid 1321:tid 1601] [client 20.104.18.15:43285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/goods.php"] [unique_id "apK-E2jCPtor9NZ-byTbHQAABqw"]
[Sat Aug 29 05:10:11.617720 2026] [security2:error] [pid 1041789:tid 1042053] [client 20.104.104.62:48013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-E4v3RhPI65jTFG4G-AAAA5g"]
[Sat Aug 29 05:10:11.621979 2026] [security2:error] [pid 1321:tid 1551] [client 20.48.251.3:46550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/olfclass.php"] [unique_id "apK-E2jCPtor9NZ-byTbHgAABno"]
[Sat Aug 29 05:10:11.623877 2026] [security2:error] [pid 1321:tid 1555] [client 68.155.159.216:61271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-admin/about.php"] [unique_id "apK-E2jCPtor9NZ-byTbHwAABn4"]
[Sat Aug 29 05:10:11.640634 2026] [security2:error] [pid 1041789:tid 1042051] [client 20.104.18.15:45985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/lib.php/new.php"] [unique_id "apK-E4v3RhPI65jTFG4G-QAAA5Y"]
[Sat Aug 29 05:10:11.651835 2026] [security2:error] [pid 1041789:tid 1041954] [client 20.104.18.15:7111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/fpwch.php"] [unique_id "apK-E4v3RhPI65jTFG4G_AAAAzU"]
[Sat Aug 29 05:10:11.652704 2026] [security2:error] [pid 1041789:tid 1042055] [client 52.139.37.240:13406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/wp-index.php"] [unique_id "apK-E4v3RhPI65jTFG4G_QAAA5o"]
[Sat Aug 29 05:10:11.657643 2026] [security2:error] [pid 1321:tid 1592] [client 158.23.184.117:26006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/002.php"] [unique_id "apK-E2jCPtor9NZ-byTbIAAABqM"]
[Sat Aug 29 05:10:11.665878 2026] [security2:error] [pid 1321:tid 1572] [client 20.104.18.15:15200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/wp-trackback.php"] [unique_id "apK-E2jCPtor9NZ-byTbIQAABo8"]
[Sat Aug 29 05:10:11.671219 2026] [security2:error] [pid 1321:tid 1574] [client 158.23.147.79:11380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK-E2jCPtor9NZ-byTbJAAABpE"]
[Sat Aug 29 05:10:11.675063 2026] [security2:error] [pid 1321:tid 1561] [client 4.205.62.107:63944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/xza.php"] [unique_id "apK-E2jCPtor9NZ-byTbJQAABoQ"]
[Sat Aug 29 05:10:11.692825 2026] [security2:error] [pid 1321:tid 1605] [client 20.104.18.15:41910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/gray.php"] [unique_id "apK-E2jCPtor9NZ-byTbKAAABrA"]
[Sat Aug 29 05:10:11.693847 2026] [core:error] [pid 1321:tid 1499] [client 146.70.134.142:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:11.693860 2026] [core:error] [pid 1321:tid 1499] [client 146.70.134.142:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:11.715868 2026] [security2:error] [pid 1041789:tid 1041972] [client 74.248.24.12:4591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-content/packed.php"] [unique_id "apK-E4v3RhPI65jTFG4HAAAAA0c"]
[Sat Aug 29 05:10:11.733146 2026] [security2:error] [pid 1041789:tid 1042018] [client 20.104.18.15:22489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/w3lls.php"] [unique_id "apK-E4v3RhPI65jTFG4HAwAAA3U"]
[Sat Aug 29 05:10:11.749675 2026] [security2:error] [pid 1321:tid 1510] [client 195.178.110.247:62300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.luxuryweddingphotographer.com"] [uri "/index.php"] [unique_id "apK-E2jCPtor9NZ-byTbKQAABlI"]
[Sat Aug 29 05:10:11.749732 2026] [security2:error] [pid 1321:tid 1563] [client 20.104.18.15:44019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/k.php"] [unique_id "apK-E2jCPtor9NZ-byTbKgAABoY"]
[Sat Aug 29 05:10:11.751998 2026] [security2:error] [pid 1041789:tid 1041938] [client 20.220.204.93:63556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/bgymj.php"] [unique_id "apK-E4v3RhPI65jTFG4HBAAAAyU"]
[Sat Aug 29 05:10:11.755033 2026] [security2:error] [pid 1041789:tid 1042019] [client 20.104.104.62:37590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-E4v3RhPI65jTFG4HBgAAA3Y"]
[Sat Aug 29 05:10:11.768691 2026] [security2:error] [pid 1041789:tid 1042025] [client 20.196.209.81:8436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-admin/wp-cron.php"] [unique_id "apK-E4v3RhPI65jTFG4HCAAAA3w"]
[Sat Aug 29 05:10:11.771693 2026] [security2:error] [pid 1041789:tid 1041935] [client 20.220.204.93:54546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/gettest.php"] [unique_id "apK-E4v3RhPI65jTFG4HCQAAAyI"]
[Sat Aug 29 05:10:11.772601 2026] [security2:error] [pid 1041789:tid 1042041] [client 20.104.18.15:45993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/lib.php/new.php"] [unique_id "apK-E4v3RhPI65jTFG4HCgAAA4w"]
[Sat Aug 29 05:10:11.784385 2026] [security2:error] [pid 1321:tid 1559] [client 20.104.18.15:7057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/domvf.php"] [unique_id "apK-E2jCPtor9NZ-byTbKwAABoI"]
[Sat Aug 29 05:10:11.799601 2026] [security2:error] [pid 1041789:tid 1041942] [client 20.104.18.15:43993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/ah.php"] [unique_id "apK-E4v3RhPI65jTFG4HCwAAAyk"]
[Sat Aug 29 05:10:11.804839 2026] [security2:error] [pid 1321:tid 1615] [client 158.23.184.117:26037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/0x.php"] [unique_id "apK-E2jCPtor9NZ-byTbLAAABro"]
[Sat Aug 29 05:10:11.825910 2026] [security2:error] [pid 1321:tid 1531] [client 20.104.18.15:41897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/puki.php"] [unique_id "apK-E2jCPtor9NZ-byTbLQAABmc"]
[Sat Aug 29 05:10:11.826427 2026] [security2:error] [pid 1041789:tid 1042017] [client 20.104.18.15:15070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/pri.php"] [unique_id "apK-E4v3RhPI65jTFG4HDQAAA3Q"]
[Sat Aug 29 05:10:11.845137 2026] [security2:error] [pid 1041789:tid 1041888] [remote 74.7.227.154:54326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK-E4v3RhPI65jTFG4HDwADjlY"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwp-easycart%2Fadmin%2Felementor
[Sat Aug 29 05:10:11.859166 2026] [security2:error] [pid 1321:tid 1522] [client 20.52.41.200:4368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/files/index.php"] [unique_id "apK-E2jCPtor9NZ-byTbLgAABl4"]
[Sat Aug 29 05:10:11.863259 2026] [security2:error] [pid 1321:tid 1577] [client 20.104.18.15:46038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/info.php/new.php"] [unique_id "apK-E2jCPtor9NZ-byTbLwAABpQ"]
[Sat Aug 29 05:10:11.865604 2026] [security2:error] [pid 1321:tid 1610] [client 68.155.159.216:6011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-includes/plugins.php"] [unique_id "apK-E2jCPtor9NZ-byTbMAAABrU"]
[Sat Aug 29 05:10:11.866713 2026] [security2:error] [pid 1041789:tid 1042007] [client 20.104.49.130:36225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "coveryourauto.com"] [uri "/simple.php"] [unique_id "apK-E4v3RhPI65jTFG4HEgAAA2o"]
[Sat Aug 29 05:10:11.867907 2026] [security2:error] [pid 1041789:tid 1041939] [client 20.104.18.15:22467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/fpwch.php"] [unique_id "apK-E4v3RhPI65jTFG4HFAAAAyY"]
[Sat Aug 29 05:10:11.869929 2026] [security2:error] [pid 1041789:tid 1041960] [client 52.139.37.240:14002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/ww2.php"] [unique_id "apK-E4v3RhPI65jTFG4HFQAAAzs"]
[Sat Aug 29 05:10:11.882920 2026] [security2:error] [pid 1041789:tid 1042050] [client 68.155.159.216:64497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-admin/css/index.php"] [unique_id "apK-E4v3RhPI65jTFG4HFgAAA5U"]
[Sat Aug 29 05:10:11.917234 2026] [security2:error] [pid 1321:tid 1529] [client 68.155.159.216:64090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK-E2jCPtor9NZ-byTbMQAABmU"]
[Sat Aug 29 05:10:11.921749 2026] [security2:error] [pid 1321:tid 1518] [client 68.155.159.216:14163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/admin.php"] [unique_id "apK-E2jCPtor9NZ-byTbMgAABlo"]
[Sat Aug 29 05:10:11.924210 2026] [access_compat:error] [pid 1321:tid 1504] [client 67.20.76.220:50510] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:10:11.933127 2026] [security2:error] [pid 1321:tid 1519] [client 20.104.18.15:7002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/biufile.php"] [unique_id "apK-E2jCPtor9NZ-byTbNAAABls"]
[Sat Aug 29 05:10:11.936543 2026] [security2:error] [pid 1321:tid 1505] [client 20.220.204.93:65271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/ws69.php"] [unique_id "apK-E2jCPtor9NZ-byTbNQAABk0"]
[Sat Aug 29 05:10:11.940645 2026] [security2:error] [pid 1041789:tid 1042044] [client 195.178.110.247:62314] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1609"] [id "900942"] [msg "Invalid WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.path=http:///x"] [hostname "goldenledgekennel.flatlandsfoto.com"] [uri "/index.php"] [unique_id "apK-E4v3RhPI65jTFG4HGAAAA48"]
[Sat Aug 29 05:10:11.945862 2026] [security2:error] [pid 1041789:tid 1042037] [client 20.104.18.15:43299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/82.php"] [unique_id "apK-E4v3RhPI65jTFG4HGQAAA4g"]
[Sat Aug 29 05:10:11.946886 2026] [security2:error] [pid 1321:tid 1547] [client 57.141.14.66:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/"] [unique_id "apK-E2jCPtor9NZ-byTbNwAABnY"]
[Sat Aug 29 05:10:11.947963 2026] [security2:error] [pid 1041789:tid 1042032] [client 158.23.184.117:25701] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "enveso.com"] [uri "/1.php"] [unique_id "apK-E4v3RhPI65jTFG4HGgAAA4M"]
[Sat Aug 29 05:10:11.948045 2026] [security2:error] [pid 1041789:tid 1042032] [client 158.23.184.117:25701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/1.php"] [unique_id "apK-E4v3RhPI65jTFG4HGgAAA4M"]
[Sat Aug 29 05:10:11.955232 2026] [security2:error] [pid 1041789:tid 1041933] [client 68.155.159.216:33657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-mail.php"] [unique_id "apK-E4v3RhPI65jTFG4HGwAAAyA"]
[Sat Aug 29 05:10:11.958085 2026] [security2:error] [pid 1041789:tid 1042052] [client 20.104.18.15:15249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/wp_blog_footer.php"] [unique_id "apK-E4v3RhPI65jTFG4HHAAAA5c"]
[Sat Aug 29 05:10:11.963700 2026] [security2:error] [pid 1041789:tid 1041962] [client 20.104.104.62:37608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/baee.php"] [unique_id "apK-E4v3RhPI65jTFG4HHQAAAz0"]
[Sat Aug 29 05:10:11.964649 2026] [core:error] [pid 1321:tid 1571] [client 20.48.251.3:46567] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:11.964664 2026] [core:error] [pid 1321:tid 1571] [client 20.48.251.3:46567] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:11.966959 2026] [security2:error] [pid 1041789:tid 1041980] [client 20.104.18.15:44014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/ws55.php"] [unique_id "apK-E4v3RhPI65jTFG4HHgAAA08"]
[Sat Aug 29 05:10:11.974680 2026] [security2:error] [pid 1041789:tid 1042020] [client 20.104.18.15:41918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/sonic.php"] [unique_id "apK-E4v3RhPI65jTFG4HIAAAA3c"]
[Sat Aug 29 05:10:11.988468 2026] [security2:error] [pid 1041789:tid 1041976] [client 40.83.93.50:13208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/wp-contentt.php"] [unique_id "apK-E4v3RhPI65jTFG4HIQAAA0s"]
[Sat Aug 29 05:10:12.017004 2026] [security2:error] [pid 1041789:tid 1041991] [client 20.104.18.15:22437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/domvf.php"] [unique_id "apK-FIv3RhPI65jTFG4HIgAAA1o"]
[Sat Aug 29 05:10:12.029769 2026] [security2:error] [pid 1041789:tid 1041944] [client 20.48.251.3:46605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/abcd.php"] [unique_id "apK-FIv3RhPI65jTFG4HIwAAAys"]
[Sat Aug 29 05:10:12.047293 2026] [security2:error] [pid 1041789:tid 1041988] [client 103.240.76.112:43270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK-FIv3RhPI65jTFG4HJgAAA1c"]
[Sat Aug 29 05:10:12.047388 2026] [security2:error] [pid 1041789:tid 1041988] [client 103.240.76.112:43270] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK-FIv3RhPI65jTFG4HJgAAA1c"]
[Sat Aug 29 05:10:12.051670 2026] [security2:error] [pid 1041789:tid 1042011] [client 68.155.159.216:52844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/ans.php"] [unique_id "apK-FIv3RhPI65jTFG4HJwAAA24"]
[Sat Aug 29 05:10:12.057541 2026] [security2:error] [pid 1041789:tid 1041957] [client 40.83.93.50:16487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-admin/wp-mail.php"] [unique_id "apK-FIv3RhPI65jTFG4HKAAAAzg"]
[Sat Aug 29 05:10:12.061855 2026] [security2:error] [pid 1041789:tid 1042026] [client 158.23.147.79:5992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK-FIv3RhPI65jTFG4HKQAAA30"]
[Sat Aug 29 05:10:12.064333 2026] [security2:error] [pid 1041789:tid 1042031] [client 4.232.148.111:27538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "apK-FIv3RhPI65jTFG4HKwAAA4I"]
[Sat Aug 29 05:10:12.074442 2026] [security2:error] [pid 1041789:tid 1042013] [client 20.104.18.15:7159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/blacks.php"] [unique_id "apK-FIv3RhPI65jTFG4HLAAAA3A"]
[Sat Aug 29 05:10:12.079309 2026] [security2:error] [pid 1041789:tid 1042042] [client 52.139.37.240:13952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/7logs.php"] [unique_id "apK-FIv3RhPI65jTFG4HLQAAA40"]
[Sat Aug 29 05:10:12.090233 2026] [security2:error] [pid 1321:tid 1527] [client 20.104.18.15:15185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/sushi.php"] [unique_id "apK-FGjCPtor9NZ-byTbPAAABmM"]
[Sat Aug 29 05:10:12.090883 2026] [security2:error] [pid 1041789:tid 1041979] [client 20.220.204.93:61640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/ccs.php"] [unique_id "apK-FIv3RhPI65jTFG4HLwAAA04"]
[Sat Aug 29 05:10:12.100340 2026] [security2:error] [pid 1041789:tid 1042041] [client 158.23.147.79:60143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK-FIv3RhPI65jTFG4HMAAAA4w"]
[Sat Aug 29 05:10:12.100697 2026] [security2:error] [pid 1041789:tid 1041935] [client 20.104.104.62:37538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/d12.php"] [unique_id "apK-FIv3RhPI65jTFG4HMQAAAyI"]
[Sat Aug 29 05:10:12.101851 2026] [security2:error] [pid 1041789:tid 1041942] [client 20.104.18.15:41846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/pop.php"] [unique_id "apK-FIv3RhPI65jTFG4HMgAAAyk"]
[Sat Aug 29 05:10:12.102538 2026] [security2:error] [pid 1041789:tid 1042015] [client 158.23.184.117:25713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/10.php"] [unique_id "apK-FIv3RhPI65jTFG4HMwAAA3I"]
[Sat Aug 29 05:10:12.110513 2026] [security2:error] [pid 1041789:tid 1041931] [client 68.155.159.216:1981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK-FIv3RhPI65jTFG4HNAAAAx4"]
[Sat Aug 29 05:10:12.147182 2026] [security2:error] [pid 1041789:tid 1042030] [client 68.155.159.216:18180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK-FIv3RhPI65jTFG4HNQAAA4E"]
[Sat Aug 29 05:10:12.150656 2026] [security2:error] [pid 1041789:tid 1042054] [client 20.104.18.15:43931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/drykl.php"] [unique_id "apK-FIv3RhPI65jTFG4HNgAAA5k"]
[Sat Aug 29 05:10:12.161811 2026] [security2:error] [pid 1041789:tid 1042055] [client 20.196.209.81:12351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-admin/wp-links-opml.php"] [unique_id "apK-FIv3RhPI65jTFG4HOAAAA5o"]
[Sat Aug 29 05:10:12.167727 2026] [security2:error] [pid 1041789:tid 1042034] [client 20.104.18.15:44010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/dex.php"] [unique_id "apK-FIv3RhPI65jTFG4HOQAAA4U"]
[Sat Aug 29 05:10:12.169260 2026] [security2:error] [pid 1041789:tid 1041949] [client 20.48.251.3:46615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/userfuns.php"] [unique_id "apK-FIv3RhPI65jTFG4HOgAAAzA"]
[Sat Aug 29 05:10:12.175174 2026] [security2:error] [pid 1041789:tid 1041941] [client 20.104.18.15:46069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/db.php/new.php"] [unique_id "apK-FIv3RhPI65jTFG4HOwAAAyg"]
[Sat Aug 29 05:10:12.176884 2026] [security2:error] [pid 1041789:tid 1042057] [client 20.104.18.15:22426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/biufile.php"] [unique_id "apK-FIv3RhPI65jTFG4HPAAAA5w"]
[Sat Aug 29 05:10:12.199705 2026] [security2:error] [pid 1041789:tid 1041964] [client 4.205.62.107:22231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/doc.php"] [unique_id "apK-FIv3RhPI65jTFG4HPQAAAz8"]
[Sat Aug 29 05:10:12.208110 2026] [security2:error] [pid 1041789:tid 1042037] [client 68.155.159.216:62810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/chosen.php"] [unique_id "apK-FIv3RhPI65jTFG4HQAAAA4g"]
[Sat Aug 29 05:10:12.208123 2026] [security2:error] [pid 1041789:tid 1042032] [client 20.104.18.15:7059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/beck.php"] [unique_id "apK-FIv3RhPI65jTFG4HPwAAA4M"]
[Sat Aug 29 05:10:12.212813 2026] [security2:error] [pid 1041789:tid 1041933] [client 20.104.104.62:41620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/msy.php"] [unique_id "apK-FIv3RhPI65jTFG4HQQAAAyA"]
[Sat Aug 29 05:10:12.220601 2026] [security2:error] [pid 1041789:tid 1041975] [client 20.104.104.62:43389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/wp-gzone.php"] [unique_id "apK-FIv3RhPI65jTFG4HQgAAA0o"]
[Sat Aug 29 05:10:12.230247 2026] [security2:error] [pid 1041789:tid 1041980] [client 20.104.18.15:41913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/503.php"] [unique_id "apK-FIv3RhPI65jTFG4HRAAAA08"]
[Sat Aug 29 05:10:12.233940 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.104.104.62:37594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/yyy.php"] [unique_id "apK-FIv3RhPI65jTFG4HRQAAA3o"]
[Sat Aug 29 05:10:12.246214 2026] [security2:error] [pid 1041789:tid 1042044] [client 158.23.184.117:26043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/100.php"] [unique_id "apK-FIv3RhPI65jTFG4HRgAAA48"]
[Sat Aug 29 05:10:12.259226 2026] [security2:error] [pid 1041789:tid 1041938] [client 74.248.24.12:4582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-admin/js/index.php"] [unique_id "apK-FIv3RhPI65jTFG4HRwAAAyU"]
[Sat Aug 29 05:10:12.264017 2026] [security2:error] [pid 1041789:tid 1042006] [client 20.104.18.15:15313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/manga.php"] [unique_id "apK-FIv3RhPI65jTFG4HSAAAA2k"]
[Sat Aug 29 05:10:12.273780 2026] [security2:error] [pid 1041789:tid 1041997] [client 213.202.253.4:53584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "timportlock.net"] [uri "/userfuns.php"] [unique_id "apK-FIv3RhPI65jTFG4HSgAAA2A"], referer: www.google.com
[Sat Aug 29 05:10:12.281318 2026] [security2:error] [pid 1041789:tid 1041944] [client 158.23.147.79:62689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/atomlib.php"] [unique_id "apK-FIv3RhPI65jTFG4HSwAAAys"]
[Sat Aug 29 05:10:12.292063 2026] [security2:error] [pid 1041789:tid 1041987] [client 156.245.246.134:55280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 134.246.245.156.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gobeyondfairfax.dynamispictures.com"] [uri "/index.php"] [unique_id "apK-FIv3RhPI65jTFG4HTAAAA1Y"], referer: http://gobeyondfairfax.dynamispictures.com
[Sat Aug 29 05:10:12.293110 2026] [security2:error] [pid 1041789:tid 1042053] [client 20.104.18.15:45986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/info.php/new.php"] [unique_id "apK-FIv3RhPI65jTFG4HTQAAA5g"]
[Sat Aug 29 05:10:12.299268 2026] [security2:error] [pid 1041789:tid 1042000] [client 158.23.147.79:14324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/radio.php"] [unique_id "apK-FIv3RhPI65jTFG4HTwAAA2M"]
[Sat Aug 29 05:10:12.306013 2026] [security2:error] [pid 1041789:tid 1042029] [client 52.139.37.240:13992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/ac.php"] [unique_id "apK-FIv3RhPI65jTFG4HUAAAA4A"]
[Sat Aug 29 05:10:12.311858 2026] [security2:error] [pid 1041789:tid 1042031] [client 20.220.204.93:61657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/mar.php"] [unique_id "apK-FIv3RhPI65jTFG4HUQAAA4I"]
[Sat Aug 29 05:10:12.317016 2026] [security2:error] [pid 1041789:tid 1042019] [client 68.155.159.216:65123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/.well-knownold/index.php"] [unique_id "apK-FIv3RhPI65jTFG4HUgAAA3Y"]
[Sat Aug 29 05:10:12.318855 2026] [security2:error] [pid 1041789:tid 1041969] [client 20.52.41.200:4407] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.strangeworxproductions.com"] [uri "/1.php7"] [unique_id "apK-FIv3RhPI65jTFG4HUwAAA0Q"]
[Sat Aug 29 05:10:12.318923 2026] [security2:error] [pid 1041789:tid 1041969] [client 20.52.41.200:4407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/1.php7"] [unique_id "apK-FIv3RhPI65jTFG4HUwAAA0Q"]
[Sat Aug 29 05:10:12.323417 2026] [security2:error] [pid 1041789:tid 1041982] [client 4.205.62.107:51495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/BDKR28WP.php"] [unique_id "apK-FIv3RhPI65jTFG4HVAAAA1E"]
[Sat Aug 29 05:10:12.327805 2026] [security2:error] [pid 1041789:tid 1042025] [client 20.104.18.15:43282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/backup.php"] [unique_id "apK-FIv3RhPI65jTFG4HVQAAA3w"]
[Sat Aug 29 05:10:12.332129 2026] [security2:error] [pid 1041789:tid 1042041] [client 68.155.159.216:1913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/login.php"] [unique_id "apK-FIv3RhPI65jTFG4HVwAAA4w"]
[Sat Aug 29 05:10:12.340753 2026] [security2:error] [pid 1041789:tid 1041942] [client 20.104.104.62:45959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/siln.php"] [unique_id "apK-FIv3RhPI65jTFG4HWQAAAyk"]
[Sat Aug 29 05:10:12.341348 2026] [security2:error] [pid 1041789:tid 1042011] [client 20.48.251.3:43990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/register.php"] [unique_id "apK-FIv3RhPI65jTFG4HTgAAA24"]
[Sat Aug 29 05:10:12.345894 2026] [security2:error] [pid 1041789:tid 1041943] [client 4.205.62.107:62729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/myfile.php"] [unique_id "apK-FIv3RhPI65jTFG4HWgAAAyo"]
[Sat Aug 29 05:10:12.349373 2026] [security2:error] [pid 1321:tid 1498] [client 20.104.104.62:41947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/str.php"] [unique_id "apK-FGjCPtor9NZ-byTbPQAABkY"]
[Sat Aug 29 05:10:12.350183 2026] [security2:error] [pid 1041789:tid 1042043] [client 20.104.18.15:43276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/inso.php"] [unique_id "apK-FIv3RhPI65jTFG4HXAAAA44"]
[Sat Aug 29 05:10:12.356846 2026] [security2:error] [pid 1321:tid 1516] [client 158.23.147.79:55876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK-FGjCPtor9NZ-byTbPgAABlg"]
[Sat Aug 29 05:10:12.367293 2026] [security2:error] [pid 1041789:tid 1042007] [client 20.104.104.62:4118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/f2r4.php"] [unique_id "apK-FIv3RhPI65jTFG4HXQAAA2o"]
[Sat Aug 29 05:10:12.370429 2026] [security2:error] [pid 1321:tid 1550] [client 20.104.18.15:45972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/kuda.php"] [unique_id "apK-FGjCPtor9NZ-byTbPwAABnk"]
[Sat Aug 29 05:10:12.373681 2026] [security2:error] [pid 1041789:tid 1042048] [client 20.104.104.62:48021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/bgymj.php"] [unique_id "apK-FIv3RhPI65jTFG4HXwAAA5M"]
[Sat Aug 29 05:10:12.373749 2026] [security2:error] [pid 1041789:tid 1042055] [client 20.104.18.15:7014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/t3.php"] [unique_id "apK-FIv3RhPI65jTFG4HYAAAA5o"]
[Sat Aug 29 05:10:12.376505 2026] [security2:error] [pid 1041789:tid 1041981] [client 20.104.18.15:22281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/blacks.php"] [unique_id "apK-FIv3RhPI65jTFG4HYQAAA1A"]
[Sat Aug 29 05:10:12.403652 2026] [security2:error] [pid 1041789:tid 1041940] [client 158.23.184.117:25669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/2.php"] [unique_id "apK-FIv3RhPI65jTFG4HYwAAAyc"]
[Sat Aug 29 05:10:12.418302 2026] [security2:error] [pid 1321:tid 1506] [client 20.104.49.130:57723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/ortasekerli1.php"] [unique_id "apK-FGjCPtor9NZ-byTbQQAABk4"]
[Sat Aug 29 05:10:12.432459 2026] [security2:error] [pid 1041789:tid 1042037] [client 4.205.62.107:6292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/gecko-litespeed.php"] [unique_id "apK-FIv3RhPI65jTFG4HZAAAA4g"]
[Sat Aug 29 05:10:12.441465 2026] [security2:error] [pid 1041789:tid 1041980] [client 20.104.18.15:41908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/fxp.php"] [unique_id "apK-FIv3RhPI65jTFG4HZQAAA08"]
[Sat Aug 29 05:10:12.448299 2026] [security2:error] [pid 1321:tid 1604] [client 20.104.18.15:15289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/asdfghj.php"] [unique_id "apK-FGjCPtor9NZ-byTbQwAABq8"]
[Sat Aug 29 05:10:12.461514 2026] [security2:error] [pid 1041789:tid 1042020] [client 158.23.147.79:5919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/about.php"] [unique_id "apK-FIv3RhPI65jTFG4HZgAAA3c"]
[Sat Aug 29 05:10:12.464098 2026] [security2:error] [pid 1321:tid 1513] [client 20.220.204.93:61651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/ccu.php"] [unique_id "apK-FGjCPtor9NZ-byTbRAAABlU"]
[Sat Aug 29 05:10:12.466858 2026] [security2:error] [pid 1041789:tid 1042026] [client 40.83.93.50:13506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/theme.php"] [unique_id "apK-FIv3RhPI65jTFG4HZwAAA30"]
[Sat Aug 29 05:10:12.470229 2026] [security2:error] [pid 1321:tid 1589] [client 20.48.251.3:9283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/php-info.php"] [unique_id "apK-FGjCPtor9NZ-byTbRQAABqA"]
[Sat Aug 29 05:10:12.477455 2026] [security2:error] [pid 1041789:tid 1042044] [client 68.155.159.216:23433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apK-FIv3RhPI65jTFG4HaAAAA48"]
[Sat Aug 29 05:10:12.481614 2026] [security2:error] [pid 1321:tid 1579] [client 20.104.104.62:45974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/f-401.php"] [unique_id "apK-FGjCPtor9NZ-byTbRgAABpY"]
[Sat Aug 29 05:10:12.489071 2026] [security2:error] [pid 1041789:tid 1041978] [client 20.104.104.62:43367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/mega.php"] [unique_id "apK-FIv3RhPI65jTFG4HaQAAA00"]
[Sat Aug 29 05:10:12.503920 2026] [security2:error] [pid 1321:tid 1530] [client 20.104.18.15:45833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/sure.php"] [unique_id "apK-FGjCPtor9NZ-byTbRwAABmY"]
[Sat Aug 29 05:10:12.504431 2026] [security2:error] [pid 1321:tid 1603] [client 20.104.18.15:43284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/indo.php"] [unique_id "apK-FGjCPtor9NZ-byTbSAAABq4"]
[Sat Aug 29 05:10:12.505043 2026] [security2:error] [pid 1041789:tid 1041933] [client 52.139.37.240:13393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/ctex1.php"] [unique_id "apK-FIv3RhPI65jTFG4HagAAAyA"]
[Sat Aug 29 05:10:12.511808 2026] [security2:error] [pid 1041789:tid 1042045] [client 20.104.18.15:7112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/wp.php"] [unique_id "apK-FIv3RhPI65jTFG4HawAAA5A"]
[Sat Aug 29 05:10:12.517478 2026] [security2:error] [pid 1041789:tid 1042006] [client 20.104.104.62:37522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/fh26.php"] [unique_id "apK-FIv3RhPI65jTFG4HbAAAA2k"]
[Sat Aug 29 05:10:12.522787 2026] [security2:error] [pid 1321:tid 1602] [client 20.104.18.15:22506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/beck.php"] [unique_id "apK-FGjCPtor9NZ-byTbSQAABq0"]
[Sat Aug 29 05:10:12.524558 2026] [security2:error] [pid 1321:tid 1575] [client 20.104.104.62:56364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/sadis.php"] [unique_id "apK-FGjCPtor9NZ-byTbSgAABpI"]
[Sat Aug 29 05:10:12.528625 2026] [security2:error] [pid 1321:tid 1597] [client 20.104.18.15:43918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/aa.php"] [unique_id "apK-FGjCPtor9NZ-byTbSwAABqg"]
[Sat Aug 29 05:10:12.529467 2026] [security2:error] [pid 1041789:tid 1042054] [client 40.83.93.50:1294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-admin/wp-settings.php"] [unique_id "apK-FIv3RhPI65jTFG4HbQAAA5k"]
[Sat Aug 29 05:10:12.535669 2026] [security2:error] [pid 1321:tid 1488] [client 20.104.104.62:64715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/ms-sitess.php"] [unique_id "apK-FGjCPtor9NZ-byTbTAAABjw"]
[Sat Aug 29 05:10:12.546899 2026] [security2:error] [pid 1321:tid 1492] [client 158.23.184.117:25996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/222.php"] [unique_id "apK-FGjCPtor9NZ-byTbTQAABkA"]
[Sat Aug 29 05:10:12.549386 2026] [security2:error] [pid 1041789:tid 1042034] [client 4.232.148.111:11918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "apK-FIv3RhPI65jTFG4HcAAAA4U"]
[Sat Aug 29 05:10:12.559852 2026] [security2:error] [pid 1041789:tid 1042038] [client 20.196.209.81:17984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-admin/wp-load.php"] [unique_id "apK-FIv3RhPI65jTFG4HcQAAA4k"]
[Sat Aug 29 05:10:12.567484 2026] [authz_core:error] [pid 1041789:tid 1042050] [client 40.83.93.50:11625] AH01630: client denied by server configuration: /home3/chowscom/public_html/php.ini
[Sat Aug 29 05:10:12.580090 2026] [security2:error] [pid 1041789:tid 1041944] [client 68.155.159.216:56786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-FIv3RhPI65jTFG4HcgAAAys"]
[Sat Aug 29 05:10:12.584880 2026] [security2:error] [pid 1321:tid 1534] [client 20.104.18.15:15347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/dragonshell.php"] [unique_id "apK-FGjCPtor9NZ-byTbTgAABmo"]
[Sat Aug 29 05:10:12.587819 2026] [security2:error] [pid 1321:tid 1558] [client 20.104.18.15:41880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/vv.php"] [unique_id "apK-FGjCPtor9NZ-byTbTwAABoE"]
[Sat Aug 29 05:10:12.599201 2026] [security2:error] [pid 1321:tid 1502] [client 43.165.7.132:40584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 132.7.165.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abantiquo.aldergate.net"] [uri "/memberlist.php"] [unique_id "apK-FGjCPtor9NZ-byTbUAAABko"]
[Sat Aug 29 05:10:12.601791 2026] [security2:error] [pid 1321:tid 1526] [client 20.48.251.3:46611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/xin1.php"] [unique_id "apK-FGjCPtor9NZ-byTbUQAABmI"]
[Sat Aug 29 05:10:12.620389 2026] [security2:error] [pid 1321:tid 1611] [client 20.104.104.62:42862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/ww3.php"] [unique_id "apK-FGjCPtor9NZ-byTbUgAABrY"]
[Sat Aug 29 05:10:12.631341 2026] [security2:error] [pid 1321:tid 1560] [client 20.104.104.62:22680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/hq.php"] [unique_id "apK-FGjCPtor9NZ-byTbUwAABoM"]
[Sat Aug 29 05:10:12.650946 2026] [security2:error] [pid 1321:tid 1587] [client 20.104.18.15:7063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/abcd.php"] [unique_id "apK-FGjCPtor9NZ-byTbVAAABp4"]
[Sat Aug 29 05:10:12.652215 2026] [security2:error] [pid 1321:tid 1573] [client 20.104.104.62:37532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/fgd.php"] [unique_id "apK-FGjCPtor9NZ-byTbVQAABpA"]
[Sat Aug 29 05:10:12.654941 2026] [security2:error] [pid 1321:tid 1528] [client 20.104.18.15:22466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/t3.php"] [unique_id "apK-FGjCPtor9NZ-byTbVgAABmQ"]
[Sat Aug 29 05:10:12.658386 2026] [security2:error] [pid 1321:tid 1601] [client 20.104.18.15:43945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/sign.php"] [unique_id "apK-FGjCPtor9NZ-byTbVwAABqw"]
[Sat Aug 29 05:10:12.661689 2026] [security2:error] [pid 1321:tid 1551] [client 20.220.204.93:63515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/ak.php"] [unique_id "apK-FGjCPtor9NZ-byTbWAAABno"]
[Sat Aug 29 05:10:12.699592 2026] [security2:error] [pid 1041789:tid 1042000] [client 20.104.104.62:43035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/xcre1.php"] [unique_id "apK-FIv3RhPI65jTFG4HcwAAA2M"]
[Sat Aug 29 05:10:12.703943 2026] [security2:error] [pid 1321:tid 1532] [client 158.23.184.117:25985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/24.php"] [unique_id "apK-FGjCPtor9NZ-byTbWQAABmg"]
[Sat Aug 29 05:10:12.708796 2026] [security2:error] [pid 1321:tid 1574] [client 20.104.18.15:45928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/db.php/new.php"] [unique_id "apK-FGjCPtor9NZ-byTbWgAABpE"]
[Sat Aug 29 05:10:12.718487 2026] [security2:error] [pid 1321:tid 1509] [client 52.139.37.240:13428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/defaults.php"] [unique_id "apK-FGjCPtor9NZ-byTbWwAABlE"]
[Sat Aug 29 05:10:12.725017 2026] [security2:error] [pid 1041789:tid 1042031] [client 20.104.18.15:45913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/gray.php"] [unique_id "apK-FIv3RhPI65jTFG4HdQAAA4I"]
[Sat Aug 29 05:10:12.732668 2026] [security2:error] [pid 1041789:tid 1042019] [client 195.178.110.247:46732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottawa-nepeanrealestate.roycehomesales.com"] [uri "/index.php"] [unique_id "apK-FIv3RhPI65jTFG4HdgAAA3Y"]
[Sat Aug 29 05:10:12.732711 2026] [security2:error] [pid 1041789:tid 1042042] [client 20.48.251.3:9316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/adminfus.php"] [unique_id "apK-FIv3RhPI65jTFG4HdwAAA40"]
[Sat Aug 29 05:10:12.733681 2026] [security2:error] [pid 1041789:tid 1042033] [client 40.83.93.50:11625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/post.php"] [unique_id "apK-FIv3RhPI65jTFG4HeAAAA4Q"]
[Sat Aug 29 05:10:12.733955 2026] [security2:error] [pid 1041789:tid 1041969] [client 195.178.110.247:46738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottawanepeanrealestate.roycehomesales.com"] [uri "/index.php"] [unique_id "apK-FIv3RhPI65jTFG4HeQAAA0Q"]
[Sat Aug 29 05:10:12.736274 2026] [security2:error] [pid 1041789:tid 1041979] [client 68.155.159.216:56551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK-FIv3RhPI65jTFG4HegAAA04"]
[Sat Aug 29 05:10:12.754416 2026] [security2:error] [pid 1321:tid 1583] [client 20.104.104.62:42821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/sko.php"] [unique_id "apK-FGjCPtor9NZ-byTbXQAABpo"]
[Sat Aug 29 05:10:12.772939 2026] [security2:error] [pid 1041789:tid 1042025] [client 20.104.104.62:22713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/mh.php"] [unique_id "apK-FIv3RhPI65jTFG4HewAAA3w"]
[Sat Aug 29 05:10:12.773407 2026] [security2:error] [pid 1321:tid 1507] [client 74.248.24.12:15951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/core.php"] [unique_id "apK-FGjCPtor9NZ-byTbXgAABk8"]
[Sat Aug 29 05:10:12.784696 2026] [security2:error] [pid 1321:tid 1596] [client 20.104.104.62:37553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/inject.php"] [unique_id "apK-FGjCPtor9NZ-byTbXwAABqc"]
[Sat Aug 29 05:10:12.785182 2026] [security2:error] [pid 1321:tid 1494] [client 20.52.41.200:4614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/disagraeosc.php"] [unique_id "apK-FGjCPtor9NZ-byTbYAAABkI"]
[Sat Aug 29 05:10:12.812460 2026] [security2:error] [pid 1041789:tid 1042011] [client 20.220.204.93:63599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/lib.php"] [unique_id "apK-FIv3RhPI65jTFG4HfAAAA24"]
[Sat Aug 29 05:10:12.813895 2026] [security2:error] [pid 1041789:tid 1042011] [client 4.205.62.107:63899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/ms-edit.php"] [unique_id "apK-FIv3RhPI65jTFG4HfQAAA24"]
[Sat Aug 29 05:10:12.847172 2026] [security2:error] [pid 1041789:tid 1041932] [client 20.104.104.62:4096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/motu.php"] [unique_id "apK-FIv3RhPI65jTFG4HfgAAAx8"]
[Sat Aug 29 05:10:12.847756 2026] [security2:error] [pid 1321:tid 1552] [client 158.23.184.117:26047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/3pjcpmfsd8b.php"] [unique_id "apK-FGjCPtor9NZ-byTbYQAABns"]
[Sat Aug 29 05:10:12.866542 2026] [security2:error] [pid 1321:tid 1510] [client 20.48.251.3:46629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/env.php"] [unique_id "apK-FGjCPtor9NZ-byTbYgAABlI"]
[Sat Aug 29 05:10:12.883945 2026] [security2:error] [pid 1041789:tid 1041963] [client 20.104.104.62:41974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/zoz.php"] [unique_id "apK-FIv3RhPI65jTFG4HfwAAAz4"]
[Sat Aug 29 05:10:12.895246 2026] [security2:error] [pid 1041789:tid 1042013] [client 195.178.110.247:62330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottawa-nepeanrealestate.roycehomesales.com"] [uri "/index.php"] [unique_id "apK-FIv3RhPI65jTFG4HgQAAA3A"]
[Sat Aug 29 05:10:12.899012 2026] [security2:error] [pid 1041789:tid 1041977] [client 20.104.49.130:65215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/log.php"] [unique_id "apK-FIv3RhPI65jTFG4HggAAA0w"]
[Sat Aug 29 05:10:12.902164 2026] [security2:error] [pid 1041789:tid 1041982] [client 195.178.110.247:62346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottawanepeanrealestate.roycehomesales.com"] [uri "/index.php"] [unique_id "apK-FIv3RhPI65jTFG4HgwAAA1E"]
[Sat Aug 29 05:10:12.913938 2026] [security2:error] [pid 1041789:tid 1041981] [client 20.104.104.62:55032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/f2r4.php"] [unique_id "apK-FIv3RhPI65jTFG4HhAAAA1A"]
[Sat Aug 29 05:10:12.914597 2026] [security2:error] [pid 1041789:tid 1042043] [client 52.139.37.240:13988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/domains.php"] [unique_id "apK-FIv3RhPI65jTFG4HhQAAA44"]
[Sat Aug 29 05:10:12.921285 2026] [security2:error] [pid 1041789:tid 1042035] [client 20.104.104.62:47568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/aku.php"] [unique_id "apK-FIv3RhPI65jTFG4HhgAAA4Y"]
[Sat Aug 29 05:10:12.941401 2026] [access_compat:error] [pid 1041789:tid 1042005] [client 67.20.76.220:50538] AH01797: client denied by server configuration: /home4/eastacar/public_html/djiboutifresh/wp-cron.php
[Sat Aug 29 05:10:12.944582 2026] [security2:error] [pid 1321:tid 1545] [client 20.104.104.62:37558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/mga.php"] [unique_id "apK-FGjCPtor9NZ-byTbYwAABnU"]
[Sat Aug 29 05:10:12.947855 2026] [security2:error] [pid 1041789:tid 1042015] [client 40.83.93.50:13521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/alumni_reg.php"] [unique_id "apK-FIv3RhPI65jTFG4HiQAAA3I"]
[Sat Aug 29 05:10:12.952799 2026] [security2:error] [pid 1041789:tid 1041931] [client 20.196.209.81:8843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-admin/wp-mail.php"] [unique_id "apK-FIv3RhPI65jTFG4HigAAAx4"]
[Sat Aug 29 05:10:12.973587 2026] [security2:error] [pid 1321:tid 1600] [client 20.220.204.93:63613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/wp-style.php"] [unique_id "apK-FGjCPtor9NZ-byTbZQAABqs"]
[Sat Aug 29 05:10:12.995274 2026] [security2:error] [pid 1041789:tid 1042032] [client 68.155.159.216:5973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK-FIv3RhPI65jTFG4HiwAAA4M"]
[Sat Aug 29 05:10:12.995811 2026] [security2:error] [pid 1041789:tid 1042052] [client 20.48.251.3:46589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/ms-edit.php"] [unique_id "apK-FIv3RhPI65jTFG4HjAAAA5c"]
[Sat Aug 29 05:10:12.996068 2026] [security2:error] [pid 1041789:tid 1042037] [client 20.104.104.62:4149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/wefile.php"] [unique_id "apK-FIv3RhPI65jTFG4HjQAAA4g"]
[Sat Aug 29 05:10:12.996944 2026] [security2:error] [pid 1041789:tid 1042017] [client 40.83.93.50:16471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-admin/wp-signup.php"] [unique_id "apK-FIv3RhPI65jTFG4HjgAAA3Q"]
[Sat Aug 29 05:10:13.004737 2026] [security2:error] [pid 1041789:tid 1041971] [client 20.151.200.44:63683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/see.php"] [unique_id "apK-FYv3RhPI65jTFG4HjwAAA0Y"]
[Sat Aug 29 05:10:13.018198 2026] [security2:error] [pid 1041789:tid 1041954] [client 4.232.148.111:13989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/gifclass.php"] [unique_id "apK-FYv3RhPI65jTFG4HkAAAAzU"]
[Sat Aug 29 05:10:13.025181 2026] [security2:error] [pid 1321:tid 1529] [client 68.155.159.216:64025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK-FWjCPtor9NZ-byTbZgAABmU"]
[Sat Aug 29 05:10:13.028487 2026] [security2:error] [pid 1041789:tid 1041961] [client 20.104.104.62:60708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/mmm.php"] [unique_id "apK-FYv3RhPI65jTFG4HkQAAAzw"]
[Sat Aug 29 05:10:13.035535 2026] [security2:error] [pid 1321:tid 1540] [client 158.23.184.117:25674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enveso.com"] [uri "/403.php"] [unique_id "apK-FWjCPtor9NZ-byTbZwAABnA"]
[Sat Aug 29 05:10:13.042342 2026] [security2:error] [pid 1041789:tid 1041980] [client 20.104.104.62:22684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/sadis.php"] [unique_id "apK-FYv3RhPI65jTFG4HkwAAA08"]
[Sat Aug 29 05:10:13.052698 2026] [security2:error] [pid 1041789:tid 1042023] [client 68.155.159.216:14081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-admin/admin.php"] [unique_id "apK-FYv3RhPI65jTFG4HlAAAA3o"]
[Sat Aug 29 05:10:13.071634 2026] [security2:error] [pid 1041789:tid 1041938] [client 68.155.159.216:33607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/cgi-bin/index.php"] [unique_id "apK-FYv3RhPI65jTFG4HlwAAAyU"]
[Sat Aug 29 05:10:13.093226 2026] [security2:error] [pid 1041789:tid 1042034] [client 20.104.104.62:48014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/inwp.php"] [unique_id "apK-FYv3RhPI65jTFG4HmAAAA4U"]
[Sat Aug 29 05:10:13.111361 2026] [security2:error] [pid 1041789:tid 1041990] [client 20.220.204.93:63517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/browse.php"] [unique_id "apK-FYv3RhPI65jTFG4HmQAAA1k"]
[Sat Aug 29 05:10:13.127224 2026] [security2:error] [pid 1041789:tid 1041987] [client 20.48.251.3:9313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/avim.php"] [unique_id "apK-FYv3RhPI65jTFG4HnAAAA1Y"]
[Sat Aug 29 05:10:13.131532 2026] [security2:error] [pid 1321:tid 1505] [client 158.23.147.79:60162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/ws.php"] [unique_id "apK-FWjCPtor9NZ-byTbaQAABk0"]
[Sat Aug 29 05:10:13.138815 2026] [security2:error] [pid 1041789:tid 1041962] [client 52.139.37.240:13407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/dropdown.php"] [unique_id "apK-FYv3RhPI65jTFG4HnQAAAz0"]
[Sat Aug 29 05:10:13.143768 2026] [security2:error] [pid 1041789:tid 1041947] [client 20.104.49.130:51369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/init.php"] [unique_id "apK-FYv3RhPI65jTFG4HngAAAy4"]
[Sat Aug 29 05:10:13.154521 2026] [security2:error] [pid 1041789:tid 1042053] [client 20.104.104.62:43065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/EM.php"] [unique_id "apK-FYv3RhPI65jTFG4HnwAAA5g"]
[Sat Aug 29 05:10:13.156764 2026] [security2:error] [pid 1041789:tid 1042000] [client 20.104.104.62:42847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/advanced.php"] [unique_id "apK-FYv3RhPI65jTFG4HoAAAA2M"]
[Sat Aug 29 05:10:13.172920 2026] [security2:error] [pid 1041789:tid 1042019] [client 158.23.147.79:5906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK-FYv3RhPI65jTFG4HoQAAA3Y"]
[Sat Aug 29 05:10:13.179901 2026] [security2:error] [pid 1041789:tid 1041969] [client 68.155.159.216:9270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/worksec.php"] [unique_id "apK-FYv3RhPI65jTFG4HogAAA0Q"]
[Sat Aug 29 05:10:13.186256 2026] [security2:error] [pid 1041789:tid 1041979] [client 20.104.104.62:45989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/xcre1.php"] [unique_id "apK-FYv3RhPI65jTFG4HowAAA04"]
[Sat Aug 29 05:10:13.196784 2026] [security2:error] [pid 1041789:tid 1041968] [client 20.104.104.62:64739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/syg.php"] [unique_id "apK-FYv3RhPI65jTFG4HpAAAA0M"]
[Sat Aug 29 05:10:13.219616 2026] [security2:error] [pid 1041789:tid 1041945] [client 158.23.147.79:52320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/goat.php"] [unique_id "apK-FYv3RhPI65jTFG4HpgAAAyw"]
[Sat Aug 29 05:10:13.240242 2026] [security2:error] [pid 1041789:tid 1041946] [client 20.52.41.200:4654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-logs.php"] [unique_id "apK-FYv3RhPI65jTFG4HpwAAAy0"]
[Sat Aug 29 05:10:13.243010 2026] [security2:error] [pid 1041789:tid 1041956] [client 20.104.104.62:37621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/ad1.php"] [unique_id "apK-FYv3RhPI65jTFG4HqAAAAzc"]
[Sat Aug 29 05:10:13.250630 2026] [security2:error] [pid 1041789:tid 1042045] [client 40.83.93.50:8537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/flower.php"] [unique_id "apK-FYv3RhPI65jTFG4HqgAAA5A"]
[Sat Aug 29 05:10:13.258519 2026] [security2:error] [pid 1041789:tid 1042013] [client 68.155.159.216:2000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-includes/index.php"] [unique_id "apK-FYv3RhPI65jTFG4HqwAAA3A"]
[Sat Aug 29 05:10:13.262787 2026] [security2:error] [pid 1041789:tid 1042048] [client 20.48.251.3:46559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/file21.php"] [unique_id "apK-FYv3RhPI65jTFG4HrAAAA5M"]
[Sat Aug 29 05:10:13.268682 2026] [security2:error] [pid 1321:tid 1523] [client 20.220.204.93:63518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/zoo.php"] [unique_id "apK-FWjCPtor9NZ-byTbagAABl8"]
[Sat Aug 29 05:10:13.289191 2026] [security2:error] [pid 1041789:tid 1042046] [client 74.248.24.12:15992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/admin/function.php"] [unique_id "apK-FYv3RhPI65jTFG4HrgAAA5E"]
[Sat Aug 29 05:10:13.289830 2026] [security2:error] [pid 1041789:tid 1041982] [client 20.104.104.62:41971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/blox.php"] [unique_id "apK-FYv3RhPI65jTFG4HrwAAA1E"]
[Sat Aug 29 05:10:13.321296 2026] [security2:error] [pid 1041789:tid 1041972] [client 20.104.104.62:37227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/ca4.php"] [unique_id "apK-FYv3RhPI65jTFG4HsgAAA0c"]
[Sat Aug 29 05:10:13.324297 2026] [security2:error] [pid 1041789:tid 1041931] [client 68.155.159.216:62795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/goods.php"] [unique_id "apK-FYv3RhPI65jTFG4HswAAAx4"]
[Sat Aug 29 05:10:13.330752 2026] [security2:error] [pid 1041789:tid 1041940] [client 20.104.104.62:45968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/motu.php"] [unique_id "apK-FYv3RhPI65jTFG4HtQAAAyc"]
[Sat Aug 29 05:10:13.339283 2026] [security2:error] [pid 1321:tid 1571] [client 52.139.37.240:13429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/files/index.php"] [unique_id "apK-FWjCPtor9NZ-byTbbQAABo4"]
[Sat Aug 29 05:10:13.351998 2026] [security2:error] [pid 1041789:tid 1042032] [client 4.205.62.107:22491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/classsmtps.php"] [unique_id "apK-FYv3RhPI65jTFG4HtwAAA4M"]
[Sat Aug 29 05:10:13.355646 2026] [security2:error] [pid 1041789:tid 1042049] [client 20.196.209.81:8434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-admin/wp-settings.php"] [unique_id "apK-FYv3RhPI65jTFG4HuQAAA5Q"]
[Sat Aug 29 05:10:13.367639 2026] [security2:error] [pid 1041789:tid 1042052] [client 158.23.147.79:11428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK-FYv3RhPI65jTFG4HuAAAA5c"]
[Sat Aug 29 05:10:13.376825 2026] [security2:error] [pid 1041789:tid 1041954] [client 20.104.104.62:37555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/1vbqo.php"] [unique_id "apK-FYv3RhPI65jTFG4HugAAAzU"]
[Sat Aug 29 05:10:13.386984 2026] [security2:error] [pid 1321:tid 1504] [client 158.23.147.79:63824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/lv.php"] [unique_id "apK-FWjCPtor9NZ-byTbbgAABkw"]
[Sat Aug 29 05:10:13.393705 2026] [security2:error] [pid 1041789:tid 1041948] [client 20.48.251.3:43987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/wsws.php"] [unique_id "apK-FYv3RhPI65jTFG4HuwAAAy8"]
[Sat Aug 29 05:10:13.404722 2026] [security2:error] [pid 1041789:tid 1042020] [client 158.23.147.79:14286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK-FYv3RhPI65jTFG4HvAAAA3c"]
[Sat Aug 29 05:10:13.420865 2026] [security2:error] [pid 1041789:tid 1041976] [client 68.155.159.216:64417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK-FYv3RhPI65jTFG4HvgAAA0s"]
[Sat Aug 29 05:10:13.424062 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.104.104.62:43339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/kcs.php"] [unique_id "apK-FYv3RhPI65jTFG4HvwAAA30"]
[Sat Aug 29 05:10:13.431609 2026] [security2:error] [pid 1321:tid 1535] [client 40.83.93.50:13236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/colors.php"] [unique_id "apK-FWjCPtor9NZ-byTbbwAABms"]
[Sat Aug 29 05:10:13.463003 2026] [security2:error] [pid 1041789:tid 1042043] [client 40.83.93.50:22087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-blog-header.php"] [unique_id "apK-FYv3RhPI65jTFG4HwAAAA44"]
[Sat Aug 29 05:10:13.464491 2026] [security2:error] [pid 1041789:tid 1042051] [client 4.205.62.107:51502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/_js.jpg..bk.php"] [unique_id "apK-FYv3RhPI65jTFG4HwQAAA5Y"]
[Sat Aug 29 05:10:13.465174 2026] [security2:error] [pid 1041789:tid 1041990] [client 158.23.147.79:55263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-content/cong.php"] [unique_id "apK-FYv3RhPI65jTFG4HwgAAA1k"]
[Sat Aug 29 05:10:13.466286 2026] [security2:error] [pid 1041789:tid 1041944] [client 20.104.104.62:41636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/wefile.php"] [unique_id "apK-FYv3RhPI65jTFG4HwwAAAys"]
[Sat Aug 29 05:10:13.478593 2026] [security2:error] [pid 1321:tid 1585] [client 20.104.104.62:4145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/x0x.php"] [unique_id "apK-FWjCPtor9NZ-byTbcAAABpw"]
[Sat Aug 29 05:10:13.486425 2026] [security2:error] [pid 1321:tid 1527] [client 20.220.204.93:63553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/elp.php"] [unique_id "apK-FWjCPtor9NZ-byTbcQAABmM"]
[Sat Aug 29 05:10:13.487948 2026] [security2:error] [pid 1041789:tid 1042053] [client 4.205.62.107:62939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/lm15.php"] [unique_id "apK-FYv3RhPI65jTFG4HxAAAA5g"]
[Sat Aug 29 05:10:13.510634 2026] [security2:error] [pid 1041789:tid 1042029] [client 20.104.104.62:48059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/h02ugyh.php"] [unique_id "apK-FYv3RhPI65jTFG4HxwAAA4A"]
[Sat Aug 29 05:10:13.523371 2026] [security2:error] [pid 1321:tid 1609] [client 20.48.251.3:9309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/ebahvhhh.php"] [unique_id "apK-FWjCPtor9NZ-byTbcwAABrQ"]
[Sat Aug 29 05:10:13.543953 2026] [security2:error] [pid 1041789:tid 1041962] [client 52.139.37.240:13998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamesmarquiss.com"] [uri "/flower.php"] [unique_id "apK-FYv3RhPI65jTFG4HyQAAAz0"]
[Sat Aug 29 05:10:13.553539 2026] [security2:error] [pid 1041789:tid 1041968] [client 20.104.104.62:41960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/wsz.php"] [unique_id "apK-FYv3RhPI65jTFG4HygAAA0M"]
[Sat Aug 29 05:10:13.583231 2026] [security2:error] [pid 1321:tid 1543] [client 158.23.147.79:6076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK-FWjCPtor9NZ-byTbdAAABnM"]
[Sat Aug 29 05:10:13.583251 2026] [security2:error] [pid 1321:tid 1599] [client 4.205.62.107:6909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/goods.php"] [unique_id "apK-FWjCPtor9NZ-byTbdQAABqo"]
[Sat Aug 29 05:10:13.597666 2026] [security2:error] [pid 1321:tid 1541] [client 20.104.104.62:45976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/EM.php"] [unique_id "apK-FWjCPtor9NZ-byTbdwAABnE"]
[Sat Aug 29 05:10:13.620401 2026] [security2:error] [pid 1041789:tid 1041951] [client 20.151.200.44:65117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/horeg.php"] [unique_id "apK-FYv3RhPI65jTFG4HzAAAAzI"]
[Sat Aug 29 05:10:13.643980 2026] [security2:error] [pid 1321:tid 1580] [client 20.104.104.62:64644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.seband.com"] [uri "/fesa.php"] [unique_id "apK-FWjCPtor9NZ-byTbeAAABpc"]
[Sat Aug 29 05:10:13.647479 2026] [security2:error] [pid 1041789:tid 1041932] [client 20.104.104.62:48055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/shelp.php"] [unique_id "apK-FYv3RhPI65jTFG4HzQAAAx8"]
[Sat Aug 29 05:10:13.658857 2026] [security2:error] [pid 1041789:tid 1041946] [client 20.220.204.93:63605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/666.php"] [unique_id "apK-FYv3RhPI65jTFG4HzgAAAy0"]
[Sat Aug 29 05:10:13.659816 2026] [security2:error] [pid 1041789:tid 1041956] [client 20.48.251.3:9337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/bthil.php"] [unique_id "apK-FYv3RhPI65jTFG4HzwAAAzc"]
[Sat Aug 29 05:10:13.666479 2026] [security2:error] [pid 1041789:tid 1041963] [client 4.232.148.111:11955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK-FYv3RhPI65jTFG4H0AAAAz4"]
[Sat Aug 29 05:10:13.680508 2026] [security2:error] [pid 1041789:tid 1041950] [client 103.171.189.88:50060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-FYv3RhPI65jTFG4H0QAAAzE"]
[Sat Aug 29 05:10:13.680619 2026] [security2:error] [pid 1041789:tid 1041950] [client 103.171.189.88:50060] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-FYv3RhPI65jTFG4H0QAAAzE"]
[Sat Aug 29 05:10:13.688055 2026] [security2:error] [pid 1041789:tid 1042030] [client 20.104.104.62:60676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/msy.php"] [unique_id "apK-FYv3RhPI65jTFG4H0gAAA4E"]
[Sat Aug 29 05:10:13.696196 2026] [security2:error] [pid 1321:tid 1512] [client 20.52.41.200:4622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-admin/css/about.php"] [unique_id "apK-FWjCPtor9NZ-byTbeQAABlQ"]
[Sat Aug 29 05:10:13.716630 2026] [security2:error] [pid 1041789:tid 1042048] [client 20.104.49.130:60946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/sta.php"] [unique_id "apK-FYv3RhPI65jTFG4H0wAAA5M"]
[Sat Aug 29 05:10:13.737221 2026] [security2:error] [pid 1041789:tid 1041977] [client 20.104.104.62:54987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/ca4.php"] [unique_id "apK-FYv3RhPI65jTFG4H1AAAA0w"]
[Sat Aug 29 05:10:13.752323 2026] [security2:error] [pid 1041789:tid 1041981] [client 20.104.49.130:65161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/wen.php"] [unique_id "apK-FYv3RhPI65jTFG4H1QAAA1A"]
[Sat Aug 29 05:10:13.753773 2026] [security2:error] [pid 1041789:tid 1042035] [client 20.104.104.62:20853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/contactz.php"] [unique_id "apK-FYv3RhPI65jTFG4H1gAAA4Y"]
[Sat Aug 29 05:10:13.757135 2026] [security2:error] [pid 1041789:tid 1041943] [client 20.196.209.81:12310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-admin/wp-signup.php"] [unique_id "apK-FYv3RhPI65jTFG4H1wAAAyo"]
[Sat Aug 29 05:10:13.771086 2026] [security2:error] [pid 1321:tid 1604] [client 195.178.110.247:46742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.machinedesignbuild.com"] [uri "/index.php"] [unique_id "apK-FWjCPtor9NZ-byTbewAABq8"]
[Sat Aug 29 05:10:13.784519 2026] [security2:error] [pid 1041789:tid 1042057] [client 20.104.104.62:48017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/13ede.php"] [unique_id "apK-FYv3RhPI65jTFG4H2gAAA5w"]
[Sat Aug 29 05:10:13.789834 2026] [security2:error] [pid 1321:tid 1513] [client 20.48.251.3:9327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/aws_auth.php"] [unique_id "apK-FWjCPtor9NZ-byTbfAAABlU"]
[Sat Aug 29 05:10:13.803152 2026] [security2:error] [pid 1321:tid 1598] [client 74.248.24.12:6662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/admin/index.php"] [unique_id "apK-FWjCPtor9NZ-byTbfQAABqk"]
[Sat Aug 29 05:10:13.808248 2026] [security2:error] [pid 1041789:tid 1042052] [client 20.220.204.93:65157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/knmt.php"] [unique_id "apK-FYv3RhPI65jTFG4H3QAAA5c"]
[Sat Aug 29 05:10:13.819382 2026] [security2:error] [pid 1041789:tid 1041975] [client 20.104.104.62:42873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/siln.php"] [unique_id "apK-FYv3RhPI65jTFG4H3wAAA0o"]
[Sat Aug 29 05:10:13.872397 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.104.104.62:54980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/x0x.php"] [unique_id "apK-FYv3RhPI65jTFG4H4QAAA2Q"]
[Sat Aug 29 05:10:13.924383 2026] [security2:error] [pid 1321:tid 1603] [client 20.48.251.3:46563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/queue.php"] [unique_id "apK-FWjCPtor9NZ-byTbfwAABq4"]
[Sat Aug 29 05:10:13.928570 2026] [security2:error] [pid 1041789:tid 1041976] [client 20.104.104.62:37565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/k8.php"] [unique_id "apK-FYv3RhPI65jTFG4H4gAAA0s"]
[Sat Aug 29 05:10:13.935614 2026] [security2:error] [pid 1041789:tid 1041941] [client 195.178.110.247:62358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.machinedesignbuild.com"] [uri "/index.php"] [unique_id "apK-FYv3RhPI65jTFG4H4wAAAyg"]
[Sat Aug 29 05:10:13.943291 2026] [security2:error] [pid 1041789:tid 1041940] [client 40.83.93.50:12150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-blogs.php"] [unique_id "apK-FYv3RhPI65jTFG4H5gAAAyc"]
[Sat Aug 29 05:10:13.944256 2026] [security2:error] [pid 1321:tid 1602] [client 20.220.204.93:65185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/sbhu.php"] [unique_id "apK-FWjCPtor9NZ-byTbgAAABq0"]
[Sat Aug 29 05:10:13.949587 2026] [security2:error] [pid 1041789:tid 1042032] [client 40.83.93.50:11096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/meta.php"] [unique_id "apK-FYv3RhPI65jTFG4H5wAAA4M"]
[Sat Aug 29 05:10:13.952243 2026] [security2:error] [pid 1321:tid 1576] [client 4.205.62.107:61657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/lmfi2.php"] [unique_id "apK-FWjCPtor9NZ-byTbgQAABpM"]
[Sat Aug 29 05:10:13.959245 2026] [security2:error] [pid 1041789:tid 1042034] [client 20.104.104.62:42829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/f-401.php"] [unique_id "apK-FYv3RhPI65jTFG4H6AAAA4U"]
[Sat Aug 29 05:10:13.964428 2026] [security2:error] [pid 1321:tid 1597] [client 49.51.47.100:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "eastacare.com"] [uri "/"] [unique_id "apK-FWjCPtor9NZ-byTbggAABqg"], referer: http://eastacare.com
[Sat Aug 29 05:10:13.980154 2026] [security2:error] [pid 1321:tid 1582] [client 40.83.93.50:12540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/Js.php"] [unique_id "apK-FWjCPtor9NZ-byTbgwAABpk"]
[Sat Aug 29 05:10:14.004781 2026] [security2:error] [pid 1041789:tid 1041947] [client 20.104.104.62:46007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.voltfab.com"] [uri "/fesa.php"] [unique_id "apK-Fov3RhPI65jTFG4H6wAAAy4"]
[Sat Aug 29 05:10:14.054561 2026] [security2:error] [pid 1041789:tid 1042019] [client 20.48.251.3:9282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/plss3.php"] [unique_id "apK-Fov3RhPI65jTFG4H7gAAA3Y"]
[Sat Aug 29 05:10:14.072325 2026] [security2:error] [pid 1321:tid 1496] [client 20.104.104.62:37548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/alog.php"] [unique_id "apK-FmjCPtor9NZ-byTbhQAABkQ"]
[Sat Aug 29 05:10:14.094238 2026] [security2:error] [pid 1321:tid 1514] [client 20.104.104.62:43132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/hq.php"] [unique_id "apK-FmjCPtor9NZ-byTbhgAABlY"]
[Sat Aug 29 05:10:14.108479 2026] [security2:error] [pid 1321:tid 1558] [client 20.151.200.44:21918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/basic.php"] [unique_id "apK-FmjCPtor9NZ-byTbiAAABoE"]
[Sat Aug 29 05:10:14.151232 2026] [security2:error] [pid 1321:tid 1614] [client 20.196.209.81:12350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-blog-header.php"] [unique_id "apK-FmjCPtor9NZ-byTbiQAABrk"]
[Sat Aug 29 05:10:14.151232 2026] [security2:error] [pid 1041789:tid 1041987] [client 20.52.41.200:4760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/system_log.php"] [unique_id "apK-Fov3RhPI65jTFG4H7wAAA1Y"]
[Sat Aug 29 05:10:14.186375 2026] [security2:error] [pid 1321:tid 1560] [client 20.48.251.3:43875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/configuration.php"] [unique_id "apK-FmjCPtor9NZ-byTbigAABoM"]
[Sat Aug 29 05:10:14.190046 2026] [security2:error] [pid 1321:tid 1578] [client 20.220.204.93:61650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/a332.php"] [unique_id "apK-FmjCPtor9NZ-byTbiwAABpU"]
[Sat Aug 29 05:10:14.203146 2026] [security2:error] [pid 1041789:tid 1041990] [client 4.232.148.111:1372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/css/index.php"] [unique_id "apK-Fov3RhPI65jTFG4H8AAAA1k"]
[Sat Aug 29 05:10:14.205677 2026] [security2:error] [pid 1321:tid 1587] [client 20.104.104.62:37570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/adin.php"] [unique_id "apK-FmjCPtor9NZ-byTbjAAABp4"]
[Sat Aug 29 05:10:14.210332 2026] [http2:warn] [pid 1017536:tid 1017791] [client 57.141.14.6:58642] h2_stream(1017536-30-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:10:14.221160 2026] [security2:error] [pid 1041789:tid 1041983] [client 20.104.104.62:41920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/mh.php"] [unique_id "apK-Fov3RhPI65jTFG4H8QAAA1I"]
[Sat Aug 29 05:10:14.249876 2026] [security2:error] [pid 1041789:tid 1041951] [client 20.104.104.62:20689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/orange.php"] [unique_id "apK-Fov3RhPI65jTFG4H8gAAAzI"]
[Sat Aug 29 05:10:14.255032 2026] [security2:error] [pid 1041789:tid 1042041] [client 34.169.171.101:12018] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/id_rsa"] [unique_id "apK-Fov3RhPI65jTFG4H9AAAA4w"]
[Sat Aug 29 05:10:14.286449 2026] [security2:error] [pid 1041789:tid 1042045] [client 20.104.49.130:63553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/dehnl.php"] [unique_id "apK-Fov3RhPI65jTFG4H9gAAA5A"]
[Sat Aug 29 05:10:14.291895 2026] [security2:error] [pid 1041789:tid 1042013] [client 34.169.171.101:12016] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/id_dsa"] [unique_id "apK-Fov3RhPI65jTFG4H9wAAA3A"]
[Sat Aug 29 05:10:14.292462 2026] [security2:error] [pid 1041789:tid 1042048] [client 34.169.171.101:12018] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/key.pem"] [unique_id "apK-Fov3RhPI65jTFG4H-AAAA5M"]
[Sat Aug 29 05:10:14.304279 2026] [security2:error] [pid 1041789:tid 1042055] [client 158.23.147.79:6014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK-Fov3RhPI65jTFG4H-QAAA5o"]
[Sat Aug 29 05:10:14.308914 2026] [security2:error] [pid 1321:tid 1555] [client 34.169.171.101:12034] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "forensicengineernj.com"] [uri "/server.key"] [unique_id "apK-FmjCPtor9NZ-byTbkgAABn4"]
[Sat Aug 29 05:10:14.310080 2026] [security2:error] [pid 1321:tid 1592] [client 34.169.171.101:12038] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/privatekey.key"] [unique_id "apK-FmjCPtor9NZ-byTbkQAABqM"]
[Sat Aug 29 05:10:14.312702 2026] [security2:error] [pid 1321:tid 1532] [client 34.169.171.101:12076] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "forensicengineernj.com"] [uri "/wp-config.php.bak"] [unique_id "apK-FmjCPtor9NZ-byTblAAABmg"]
[Sat Aug 29 05:10:14.312773 2026] [security2:error] [pid 1321:tid 1532] [client 34.169.171.101:12076] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "forensicengineernj.com"] [uri "/wp-config.php.bak"] [unique_id "apK-FmjCPtor9NZ-byTblAAABmg"]
[Sat Aug 29 05:10:14.313217 2026] [security2:error] [pid 1321:tid 1524] [client 34.169.171.101:12060] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "forensicengineernj.com"] [uri "/wp-config.php.old"] [unique_id "apK-FmjCPtor9NZ-byTblQAABmA"]
[Sat Aug 29 05:10:14.313307 2026] [security2:error] [pid 1321:tid 1524] [client 34.169.171.101:12060] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "forensicengineernj.com"] [uri "/wp-config.php.old"] [unique_id "apK-FmjCPtor9NZ-byTblQAABmA"]
[Sat Aug 29 05:10:14.313953 2026] [security2:error] [pid 1041789:tid 1042035] [client 68.155.159.216:30662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK-Fov3RhPI65jTFG4H_gAAA4Y"]
[Sat Aug 29 05:10:14.323917 2026] [security2:error] [pid 1041789:tid 1041946] [client 34.169.171.101:12118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.171.169.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "forensicengineernj.com"] [uri "/config.php"] [unique_id "apK-Fov3RhPI65jTFG4H_QAAAy0"]
[Sat Aug 29 05:10:14.325019 2026] [security2:error] [pid 1041789:tid 1041956] [client 34.169.171.101:12090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.171.169.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "forensicengineernj.com"] [uri "/config.php.bak"] [unique_id "apK-Fov3RhPI65jTFG4H_wAAAzc"]
[Sat Aug 29 05:10:14.325920 2026] [security2:error] [pid 1321:tid 1572] [client 34.169.171.101:12052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.171.169.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "forensicengineernj.com"] [uri "/wp-config.php"] [unique_id "apK-FmjCPtor9NZ-byTbkwAABo8"]
[Sat Aug 29 05:10:14.340076 2026] [security2:error] [pid 1041789:tid 1042017] [client 20.48.251.3:43869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/public/rip.php.php"] [unique_id "apK-Fov3RhPI65jTFG4IBAAAA3Q"]
[Sat Aug 29 05:10:14.346845 2026] [security2:error] [pid 1041789:tid 1042052] [client 20.104.104.62:37558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/sf9.php"] [unique_id "apK-Fov3RhPI65jTFG4IBQAAA5c"]
[Sat Aug 29 05:10:14.354327 2026] [security2:error] [pid 1041789:tid 1041960] [client 20.104.104.62:42865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/f2r4.php"] [unique_id "apK-Fov3RhPI65jTFG4IBwAAAzs"]
[Sat Aug 29 05:10:14.368156 2026] [security2:error] [pid 1321:tid 1557] [client 74.248.24.12:26319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/storage/rip.php"] [unique_id "apK-FmjCPtor9NZ-byTbmwAABoA"]
[Sat Aug 29 05:10:14.406731 2026] [security2:error] [pid 1041789:tid 1042020] [client 20.104.104.62:20834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/hcd01.php"] [unique_id "apK-Fov3RhPI65jTFG4IDQAAA3c"]
[Sat Aug 29 05:10:14.419234 2026] [security2:error] [pid 1321:tid 1601] [client 40.83.93.50:11087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/randkeyword.php"] [unique_id "apK-FmjCPtor9NZ-byTbnQAABqw"]
[Sat Aug 29 05:10:14.421274 2026] [security2:error] [pid 1041789:tid 1041932] [client 40.83.93.50:12128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-comments-post.php"] [unique_id "apK-Fov3RhPI65jTFG4IDwAAAx8"]
[Sat Aug 29 05:10:14.437581 2026] [security2:error] [pid 1321:tid 1563] [client 20.220.204.93:65153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/ws66.php"] [unique_id "apK-FmjCPtor9NZ-byTbngAABoY"]
[Sat Aug 29 05:10:14.478345 2026] [security2:error] [pid 1041789:tid 1042032] [client 20.104.104.62:37551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/lte7.php"] [unique_id "apK-Fov3RhPI65jTFG4IEQAAA4M"]
[Sat Aug 29 05:10:14.483862 2026] [security2:error] [pid 1041789:tid 1042006] [client 20.48.251.3:46613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/h.php"] [unique_id "apK-Fov3RhPI65jTFG4IEgAAA2k"]
[Sat Aug 29 05:10:14.485612 2026] [security2:error] [pid 1041789:tid 1042044] [client 20.104.104.62:42818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/sadis.php"] [unique_id "apK-Fov3RhPI65jTFG4IEwAAA48"]
[Sat Aug 29 05:10:14.490559 2026] [security2:error] [pid 1041789:tid 1042054] [client 4.205.62.107:22474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/cache-compat.php"] [unique_id "apK-Fov3RhPI65jTFG4IFAAAA5k"]
[Sat Aug 29 05:10:14.491343 2026] [security2:error] [pid 1041789:tid 1041931] [client 158.23.147.79:62697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-Fov3RhPI65jTFG4IFQAAAx4"]
[Sat Aug 29 05:10:14.500961 2026] [security2:error] [pid 1321:tid 1583] [client 40.83.93.50:14592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/access.php"] [unique_id "apK-FmjCPtor9NZ-byTboAAABpo"]
[Sat Aug 29 05:10:14.518855 2026] [security2:error] [pid 1041789:tid 1042007] [client 158.23.147.79:14296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/makeasmtp.php"] [unique_id "apK-Fov3RhPI65jTFG4IGAAAA2o"]
[Sat Aug 29 05:10:14.560980 2026] [autoindex:error] [pid 1321:tid 1549] [client 45.148.10.62:42606] AH01276: Cannot serve directory /home3/yimemfmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:10:14.572167 2026] [security2:error] [pid 1041789:tid 1041979] [client 158.23.147.79:55268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK-Fov3RhPI65jTFG4IGwAAA04"]
[Sat Aug 29 05:10:14.581175 2026] [core:error] [pid 1041789:tid 1042031] [client 34.50.189.51:31442] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:14.581194 2026] [core:error] [pid 1041789:tid 1042031] [client 34.50.189.51:31442] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:14.584126 2026] [core:error] [pid 1321:tid 1600] [client 34.50.189.51:31436] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:14.584143 2026] [core:error] [pid 1321:tid 1600] [client 34.50.189.51:31436] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:14.589939 2026] [security2:error] [pid 1321:tid 1540] [client 34.50.189.51:31420] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/public/.env"] [unique_id "apK-FmjCPtor9NZ-byTbpwAABnA"]
[Sat Aug 29 05:10:14.590123 2026] [core:error] [pid 1321:tid 1500] [client 34.50.189.51:31474] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:14.590131 2026] [core:error] [pid 1321:tid 1500] [client 34.50.189.51:31474] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:14.591143 2026] [security2:error] [pid 1041789:tid 1041933] [client 20.196.209.81:12330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-blogs.php"] [unique_id "apK-Fov3RhPI65jTFG4IHwAAAyA"]
[Sat Aug 29 05:10:14.591233 2026] [core:error] [pid 1041789:tid 1041987] [client 34.50.189.51:31460] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:14.591241 2026] [core:error] [pid 1041789:tid 1041987] [client 34.50.189.51:31460] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:14.593291 2026] [security2:error] [pid 1041789:tid 1041983] [client 34.50.189.51:31450] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/.github/.env"] [unique_id "apK-Fov3RhPI65jTFG4IIAAAA1I"]
[Sat Aug 29 05:10:14.597328 2026] [core:error] [pid 1041789:tid 1041990] [client 34.50.189.51:31500] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:14.597349 2026] [core:error] [pid 1041789:tid 1041990] [client 34.50.189.51:31500] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:14.598229 2026] [core:error] [pid 1321:tid 1505] [client 34.50.189.51:31504] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:14.598241 2026] [core:error] [pid 1321:tid 1505] [client 34.50.189.51:31504] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:14.599624 2026] [security2:error] [pid 1321:tid 1593] [client 4.205.62.107:51423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/setup-config.php"] [unique_id "apK-FmjCPtor9NZ-byTbqgAABqQ"]
[Sat Aug 29 05:10:14.603837 2026] [core:error] [pid 1321:tid 1517] [client 34.50.189.51:31526] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:14.603851 2026] [core:error] [pid 1321:tid 1517] [client 34.50.189.51:31526] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:14.605449 2026] [core:error] [pid 1041789:tid 1042050] [client 34.50.189.51:31484] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:14.605462 2026] [core:error] [pid 1041789:tid 1042050] [client 34.50.189.51:31484] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:14.606470 2026] [security2:error] [pid 1041789:tid 1041976] [client 20.52.41.200:5364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/24.php"] [unique_id "apK-Fov3RhPI65jTFG4IJAAAA0s"]
[Sat Aug 29 05:10:14.606488 2026] [core:error] [pid 1321:tid 1547] [client 34.50.189.51:31536] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:14.606499 2026] [core:error] [pid 1321:tid 1547] [client 34.50.189.51:31536] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:14.607724 2026] [core:error] [pid 1321:tid 1537] [client 34.50.189.51:31420] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:14.607735 2026] [core:error] [pid 1321:tid 1537] [client 34.50.189.51:31420] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:14.612271 2026] [core:error] [pid 1041789:tid 1042030] [client 34.50.189.51:31512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:14.612289 2026] [core:error] [pid 1041789:tid 1042030] [client 34.50.189.51:31512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:14.612470 2026] [core:error] [pid 1041789:tid 1042045] [client 34.50.189.51:31450] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:14.612494 2026] [core:error] [pid 1041789:tid 1042045] [client 34.50.189.51:31450] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:14.613041 2026] [security2:error] [pid 1041789:tid 1042013] [client 20.104.104.62:35775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/tanjiro.php"] [unique_id "apK-Fov3RhPI65jTFG4IJwAAA3A"]
[Sat Aug 29 05:10:14.614635 2026] [security2:error] [pid 1041789:tid 1042055] [client 20.48.251.3:43864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/mamzi.php"] [unique_id "apK-Fov3RhPI65jTFG4IKAAAA5o"]
[Sat Aug 29 05:10:14.619506 2026] [security2:error] [pid 1041789:tid 1041982] [client 20.104.104.62:41952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/xcre1.php"] [unique_id "apK-Fov3RhPI65jTFG4IKQAAA1E"]
[Sat Aug 29 05:10:14.623004 2026] [security2:error] [pid 1041789:tid 1041981] [client 4.205.62.107:62728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/test.config.php"] [unique_id "apK-Fov3RhPI65jTFG4IKgAAA1A"]
[Sat Aug 29 05:10:14.646650 2026] [security2:error] [pid 1041789:tid 1041963] [client 158.23.147.79:11379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/nf_tracking.php"] [unique_id "apK-Fov3RhPI65jTFG4IKwAAAz4"]
[Sat Aug 29 05:10:14.648506 2026] [security2:error] [pid 1041789:tid 1041967] [client 158.158.54.35:31068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/.trash7206/index.php"] [unique_id "apK-Fov3RhPI65jTFG4ILAAAA0I"]
[Sat Aug 29 05:10:14.678703 2026] [security2:error] [pid 1321:tid 1559] [client 4.232.148.111:1086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-cron.php"] [unique_id "apK-FmjCPtor9NZ-byTbsAAABoI"]
[Sat Aug 29 05:10:14.686894 2026] [security2:error] [pid 1041789:tid 1042017] [client 20.220.204.93:61639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/ws68.php"] [unique_id "apK-Fov3RhPI65jTFG4ILQAAA3Q"]
[Sat Aug 29 05:10:14.687683 2026] [security2:error] [pid 1041789:tid 1042052] [client 158.23.147.79:5929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/themes.php"] [unique_id "apK-Fov3RhPI65jTFG4ILgAAA5c"]
[Sat Aug 29 05:10:14.710923 2026] [security2:error] [pid 1321:tid 1498] [client 45.148.10.62:42606] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.yim.emf.mybluehost.me"] [uri "/.env"] [unique_id "apK-FmjCPtor9NZ-byTbsgAABkY"]
[Sat Aug 29 05:10:14.715212 2026] [security2:error] [pid 1041789:tid 1041971] [client 195.178.110.247:46754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottawa-nodownpayment.roycehomesales.com"] [uri "/index.php"] [unique_id "apK-Fov3RhPI65jTFG4ILwAAA0Y"]
[Sat Aug 29 05:10:14.735322 2026] [security2:error] [pid 1041789:tid 1041954] [client 20.104.104.62:20686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/prof.php"] [unique_id "apK-Fov3RhPI65jTFG4IMAAAAzU"]
[Sat Aug 29 05:10:14.741261 2026] [security2:error] [pid 1041789:tid 1041975] [client 4.205.62.107:6491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/loxi-o.php"] [unique_id "apK-Fov3RhPI65jTFG4IMQAAA0o"]
[Sat Aug 29 05:10:14.746801 2026] [security2:error] [pid 1321:tid 1539] [client 20.104.104.62:37605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/Rk41.php"] [unique_id "apK-FmjCPtor9NZ-byTbswAABm8"]
[Sat Aug 29 05:10:14.750305 2026] [security2:error] [pid 1041789:tid 1042015] [client 20.48.251.3:46560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/admin.php"] [unique_id "apK-Fov3RhPI65jTFG4IMgAAA3I"]
[Sat Aug 29 05:10:14.756079 2026] [security2:error] [pid 1041789:tid 1042020] [client 20.104.104.62:54213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/motu.php"] [unique_id "apK-Fov3RhPI65jTFG4IMwAAA3c"]
[Sat Aug 29 05:10:14.868677 2026] [security2:error] [pid 1321:tid 1604] [client 45.148.10.62:42606] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.yim.emf.mybluehost.me"] [uri "/.env"] [unique_id "apK-FmjCPtor9NZ-byTbtQAABq8"]
[Sat Aug 29 05:10:14.874313 2026] [security2:error] [pid 1321:tid 1491] [client 74.248.24.12:15968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/zoom1.php"] [unique_id "apK-FmjCPtor9NZ-byTbtgAABj8"]
[Sat Aug 29 05:10:14.877900 2026] [security2:error] [pid 1321:tid 1516] [client 195.178.110.247:62366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottawa-nodownpayment.roycehomesales.com"] [uri "/index.php"] [unique_id "apK-FmjCPtor9NZ-byTbtwAABlg"]
[Sat Aug 29 05:10:14.883029 2026] [security2:error] [pid 1041789:tid 1042028] [client 20.48.251.3:46631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/g3.php"] [unique_id "apK-Fov3RhPI65jTFG4INgAAA38"]
[Sat Aug 29 05:10:14.885755 2026] [security2:error] [pid 1321:tid 1513] [client 20.104.104.62:37603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/7logs.php"] [unique_id "apK-FmjCPtor9NZ-byTbuAAABlU"]
[Sat Aug 29 05:10:14.893748 2026] [security2:error] [pid 1041789:tid 1041943] [client 20.104.104.62:43390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/wefile.php"] [unique_id "apK-Fov3RhPI65jTFG4INwAAAyo"]
[Sat Aug 29 05:10:14.899304 2026] [security2:error] [pid 1041789:tid 1042023] [client 40.83.93.50:1499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-config.php"] [unique_id "apK-Fov3RhPI65jTFG4IOAAAA3o"]
[Sat Aug 29 05:10:14.913331 2026] [access_compat:error] [pid 1041789:tid 1041938] [client 67.20.76.220:18318] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:10:14.915232 2026] [security2:error] [pid 1041789:tid 1041961] [client 40.83.93.50:11804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/goods.php"] [unique_id "apK-Fov3RhPI65jTFG4IOgAAAzw"]
[Sat Aug 29 05:10:14.935645 2026] [security2:error] [pid 1041789:tid 1042051] [client 20.151.200.44:21910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/monso.php"] [unique_id "apK-Fov3RhPI65jTFG4IPQAAA5Y"]
[Sat Aug 29 05:10:14.936182 2026] [access_compat:error] [pid 1041789:tid 1042007] [client 67.20.76.220:18340] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:10:14.937249 2026] [security2:error] [pid 1321:tid 1589] [client 20.220.204.93:65261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/users.php"] [unique_id "apK-FmjCPtor9NZ-byTbuQAABqA"]
[Sat Aug 29 05:10:15.001782 2026] [security2:error] [pid 1321:tid 1581] [client 68.155.159.216:65118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK-F2jCPtor9NZ-byTbvgAABpg"]
[Sat Aug 29 05:10:15.019974 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.196.209.81:12333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-comments-post.php"] [unique_id "apK-F4v3RhPI65jTFG4IRwAAA2Q"]
[Sat Aug 29 05:10:15.020573 2026] [security2:error] [pid 1041789:tid 1041987] [client 20.48.251.3:44027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/cloud.php"] [unique_id "apK-F4v3RhPI65jTFG4ISAAAA1Y"]
[Sat Aug 29 05:10:15.023949 2026] [security2:error] [pid 1041789:tid 1041983] [client 20.104.104.62:41954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/EM.php"] [unique_id "apK-F4v3RhPI65jTFG4ISQAAA1I"]
[Sat Aug 29 05:10:15.031691 2026] [security2:error] [pid 1321:tid 1492] [client 20.104.104.62:37539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/sf.php"] [unique_id "apK-F2jCPtor9NZ-byTbwAAABkA"]
[Sat Aug 29 05:10:15.077812 2026] [security2:error] [pid 1321:tid 1502] [client 20.104.49.130:34555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/albin.php"] [unique_id "apK-F2jCPtor9NZ-byTbwgAABko"]
[Sat Aug 29 05:10:15.087030 2026] [security2:error] [pid 1041789:tid 1041976] [client 4.205.62.107:61690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/wpver.php"] [unique_id "apK-F4v3RhPI65jTFG4ISwAAA0s"]
[Sat Aug 29 05:10:15.091834 2026] [security2:error] [pid 1321:tid 1603] [client 158.158.54.35:31839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wk/index.php"] [unique_id "apK-F2jCPtor9NZ-byTbxAAABq4"]
[Sat Aug 29 05:10:15.099559 2026] [security2:error] [pid 1321:tid 1521] [client 40.83.93.50:14641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/classsmtps.php"] [unique_id "apK-F2jCPtor9NZ-byTbxQAABl0"]
[Sat Aug 29 05:10:15.110525 2026] [security2:error] [pid 1041789:tid 1042030] [client 91.92.47.191:57012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantgardening.rocworx.com"] [uri "/wp-config.php"] [unique_id "apK-F4v3RhPI65jTFG4ITAAAA4E"]
[Sat Aug 29 05:10:15.143094 2026] [authz_core:error] [pid 1041789:tid 1042049] [client 43.157.181.189:51760] AH01630: client denied by server configuration: /home1/skyytale/public_html/php.ini, referer: http://skyytalent.com
[Sat Aug 29 05:10:15.147405 2026] [security2:error] [pid 1041789:tid 1041876] [remote 74.7.227.189:48638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 189.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pinnacleforms.com"] [uri "/DunnResult.php"] [unique_id "apK-F4v3RhPI65jTFG4IUAADYEo"], referer: https://mail.pinnacleforms.com/
[Sat Aug 29 05:10:15.149276 2026] [security2:error] [pid 1041789:tid 1041950] [client 20.48.251.3:9288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/f35.php"] [unique_id "apK-F4v3RhPI65jTFG4IUQAAAzE"]
[Sat Aug 29 05:10:15.157562 2026] [security2:error] [pid 1041789:tid 1042005] [client 20.104.104.62:43087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/ca4.php"] [unique_id "apK-F4v3RhPI65jTFG4IUwAAA2g"]
[Sat Aug 29 05:10:15.165781 2026] [security2:error] [pid 1041789:tid 1041933] [client 4.232.148.111:1024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-block.php"] [unique_id "apK-F4v3RhPI65jTFG4IVgAAAyA"]
[Sat Aug 29 05:10:15.168481 2026] [security2:error] [pid 1041789:tid 1041962] [client 20.104.104.62:37564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/super.php"] [unique_id "apK-F4v3RhPI65jTFG4IVwAAAz0"]
[Sat Aug 29 05:10:15.173809 2026] [security2:error] [pid 1041789:tid 1041941] [client 149.34.210.141:25073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-F4v3RhPI65jTFG4IWAAAAyg"]
[Sat Aug 29 05:10:15.173917 2026] [security2:error] [pid 1041789:tid 1041941] [client 149.34.210.141:25073] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-F4v3RhPI65jTFG4IWAAAAyg"]
[Sat Aug 29 05:10:15.180184 2026] [autoindex:error] [pid 1321:tid 1528] [client 45.148.10.62:42606] AH01276: Cannot serve directory /home3/yimemfmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:10:15.228233 2026] [security2:error] [pid 1321:tid 1605] [client 20.52.41.200:4402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK-F2jCPtor9NZ-byTbywAABrA"]
[Sat Aug 29 05:10:15.261695 2026] [core:error] [pid 1321:tid 1532] [client 158.23.184.117:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:15.261710 2026] [core:error] [pid 1321:tid 1532] [client 158.23.184.117:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:15.264658 2026] [security2:error] [pid 1041789:tid 1041975] [client 158.23.147.79:58926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-includes/css/index.php"] [unique_id "apK-F4v3RhPI65jTFG4IWgAAA0o"]
[Sat Aug 29 05:10:15.280296 2026] [security2:error] [pid 1321:tid 1507] [client 20.48.251.3:44018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/params.php"] [unique_id "apK-F2jCPtor9NZ-byTbzgAABk8"]
[Sat Aug 29 05:10:15.299877 2026] [security2:error] [pid 1041789:tid 1042037] [client 20.104.104.62:37557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/lufix1.php"] [unique_id "apK-F4v3RhPI65jTFG4IXAAAA4g"]
[Sat Aug 29 05:10:15.314631 2026] [security2:error] [pid 1041789:tid 1041940] [client 20.104.104.62:43386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/x0x.php"] [unique_id "apK-F4v3RhPI65jTFG4IXQAAAyc"]
[Sat Aug 29 05:10:15.345120 2026] [security2:error] [pid 1321:tid 1590] [client 20.220.204.93:63598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/bzjdlofz.php"] [unique_id "apK-F2jCPtor9NZ-byTb0AAABqE"]
[Sat Aug 29 05:10:15.387702 2026] [security2:error] [pid 1041789:tid 1042019] [client 20.151.200.44:63718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/rce.php"] [unique_id "apK-F4v3RhPI65jTFG4IYgAAA3Y"]
[Sat Aug 29 05:10:15.391282 2026] [security2:error] [pid 1321:tid 1594] [client 158.23.147.79:44470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK-F2jCPtor9NZ-byTb0QAABqU"]
[Sat Aug 29 05:10:15.399898 2026] [security2:error] [pid 1041789:tid 1042000] [client 40.83.93.50:16450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-configs.php"] [unique_id "apK-F4v3RhPI65jTFG4IYwAAA2M"]
[Sat Aug 29 05:10:15.417540 2026] [security2:error] [pid 1041789:tid 1041978] [client 20.196.209.81:8834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-config.php"] [unique_id "apK-F4v3RhPI65jTFG4IZAAAA00"]
[Sat Aug 29 05:10:15.417572 2026] [security2:error] [pid 1041789:tid 1041939] [client 158.23.147.79:5954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/packed.php"] [unique_id "apK-F4v3RhPI65jTFG4IZQAAAyY"]
[Sat Aug 29 05:10:15.423988 2026] [security2:error] [pid 1041789:tid 1041995] [client 20.48.251.3:9299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/debug.php"] [unique_id "apK-F4v3RhPI65jTFG4IZgAAA14"]
[Sat Aug 29 05:10:15.432930 2026] [security2:error] [pid 1321:tid 1601] [client 20.104.104.62:48049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/hack.php"] [unique_id "apK-F2jCPtor9NZ-byTb0gAABqw"]
[Sat Aug 29 05:10:15.435873 2026] [security2:error] [pid 1321:tid 1592] [client 74.248.24.12:4595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/txets.php"] [unique_id "apK-F2jCPtor9NZ-byTb0wAABqM"]
[Sat Aug 29 05:10:15.453993 2026] [security2:error] [pid 1041789:tid 1042018] [client 20.104.104.62:60152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mylifeleads.com"] [uri "/fesa.php"] [unique_id "apK-F4v3RhPI65jTFG4IZwAAA3U"]
[Sat Aug 29 05:10:15.471664 2026] [security2:error] [pid 1041789:tid 1041977] [client 40.83.93.50:8815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/hehe.php"] [unique_id "apK-F4v3RhPI65jTFG4IaAAAA0w"]
[Sat Aug 29 05:10:15.483338 2026] [security2:error] [pid 1321:tid 1510] [client 45.148.10.62:42606] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.yim.emf.mybluehost.me"] [uri "/api/.env"] [unique_id "apK-F2jCPtor9NZ-byTb1AAABlI"]
[Sat Aug 29 05:10:15.522287 2026] [security2:error] [pid 1041789:tid 1042014] [client 106.216.114.82:51995] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "utahtsa.com"] [uri "/xmlrpc.php"] [unique_id "apK-F4v3RhPI65jTFG4IWwAAA3E"]
[Sat Aug 29 05:10:15.533909 2026] [security2:error] [pid 1041789:tid 1041947] [client 158.158.54.35:13988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/admin.php"] [unique_id "apK-F4v3RhPI65jTFG4IagAAAy4"]
[Sat Aug 29 05:10:15.557198 2026] [security2:error] [pid 1041789:tid 1041976] [client 20.48.251.3:9332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/dialog.php"] [unique_id "apK-F4v3RhPI65jTFG4IbQAAA0s"]
[Sat Aug 29 05:10:15.575755 2026] [security2:error] [pid 1041789:tid 1042031] [client 20.104.104.62:35724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/155.php"] [unique_id "apK-F4v3RhPI65jTFG4IbgAAA4I"]
[Sat Aug 29 05:10:15.588391 2026] [security2:error] [pid 1041789:tid 1041938] [client 40.83.93.50:13547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/contentloader1.php"] [unique_id "apK-F4v3RhPI65jTFG4IbwAAAyU"]
[Sat Aug 29 05:10:15.600013 2026] [security2:error] [pid 1041789:tid 1041935] [client 158.23.147.79:38739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/content.php"] [unique_id "apK-F4v3RhPI65jTFG4IcQAAAyI"]
[Sat Aug 29 05:10:15.616824 2026] [security2:error] [pid 1321:tid 1545] [client 158.23.147.79:14319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK-F2jCPtor9NZ-byTb1QAABnU"]
[Sat Aug 29 05:10:15.627098 2026] [security2:error] [pid 1041789:tid 1042055] [client 20.220.204.93:55370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/35.php"] [unique_id "apK-F4v3RhPI65jTFG4IcgAAA5o"]
[Sat Aug 29 05:10:15.634056 2026] [security2:error] [pid 1321:tid 1499] [client 45.148.10.62:42606] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.yim.emf.mybluehost.me"] [uri "/.env.bak"] [unique_id "apK-F2jCPtor9NZ-byTb1gAABkc"]
[Sat Aug 29 05:10:15.634253 2026] [security2:error] [pid 1321:tid 1490] [client 4.205.62.107:22494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/aws_keys.php"] [unique_id "apK-F2jCPtor9NZ-byTb1wAABj4"]
[Sat Aug 29 05:10:15.636185 2026] [security2:error] [pid 1321:tid 1489] [client 4.232.148.111:1395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-includes/fonts/admin.php"] [unique_id "apK-F2jCPtor9NZ-byTb2AAABj0"]
[Sat Aug 29 05:10:15.688294 2026] [security2:error] [pid 1041789:tid 1041950] [client 20.48.251.3:43999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/doc.php"] [unique_id "apK-F4v3RhPI65jTFG4IdQAAAzE"]
[Sat Aug 29 05:10:15.712695 2026] [security2:error] [pid 1041789:tid 1041933] [client 20.104.104.62:37535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/mcd.php"] [unique_id "apK-F4v3RhPI65jTFG4IdgAAAyA"]
[Sat Aug 29 05:10:15.727338 2026] [security2:error] [pid 1041789:tid 1041962] [client 4.205.62.107:58412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/phpversion.php"] [unique_id "apK-F4v3RhPI65jTFG4IeAAAAz0"]
[Sat Aug 29 05:10:15.775860 2026] [security2:error] [pid 1041789:tid 1041960] [client 4.205.62.107:60293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/gecko-litespeed.php"] [unique_id "apK-F4v3RhPI65jTFG4IewAAAzs"]
[Sat Aug 29 05:10:15.793681 2026] [security2:error] [pid 1041789:tid 1041948] [client 20.220.204.93:65250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/selesai.php"] [unique_id "apK-F4v3RhPI65jTFG4IfAAAAy8"]
[Sat Aug 29 05:10:15.796072 2026] [security2:error] [pid 1041789:tid 1042035] [client 158.23.147.79:5934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-mail.php"] [unique_id "apK-F4v3RhPI65jTFG4IfQAAA4Y"]
[Sat Aug 29 05:10:15.799025 2026] [security2:error] [pid 1041789:tid 1041980] [client 20.104.49.130:36341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/abcd.php"] [unique_id "apK-F4v3RhPI65jTFG4IfgAAA08"]
[Sat Aug 29 05:10:15.819620 2026] [security2:error] [pid 1041789:tid 1041990] [client 20.48.251.3:46540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/atex1.php"] [unique_id "apK-F4v3RhPI65jTFG4IfwAAA1k"]
[Sat Aug 29 05:10:15.830233 2026] [security2:error] [pid 1041789:tid 1042038] [client 20.196.209.81:8890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-configs.php"] [unique_id "apK-F4v3RhPI65jTFG4IgQAAA4k"]
[Sat Aug 29 05:10:15.834448 2026] [security2:error] [pid 1041789:tid 1042050] [client 146.70.36.124:56728] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.allgooddays.org"] [uri "/autodiscover/autodiscover.xml/wp-includes/wlwmanifest.xml"] [unique_id "apK-F4v3RhPI65jTFG4IggAAA5U"]
[Sat Aug 29 05:10:15.843971 2026] [security2:error] [pid 1321:tid 1523] [client 20.104.49.130:50609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.danesquality.com"] [uri "/press.php"] [unique_id "apK-F2jCPtor9NZ-byTb3AAABl8"]
[Sat Aug 29 05:10:15.847210 2026] [security2:error] [pid 1041789:tid 1041940] [client 20.104.104.62:37576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/waw.php"] [unique_id "apK-F4v3RhPI65jTFG4IgwAAAyc"]
[Sat Aug 29 05:10:15.850915 2026] [http2:warn] [pid 1041789:tid 1041994] [client 17.166.155.125:47506] h2_stream(1041789-27-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:10:15.871154 2026] [security2:error] [pid 1041789:tid 1042028] [client 4.205.62.107:6502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/f35.php"] [unique_id "apK-F4v3RhPI65jTFG4IhAAAA38"]
[Sat Aug 29 05:10:15.887042 2026] [security2:error] [pid 1321:tid 1497] [client 40.83.93.50:1315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-conflg.php"] [unique_id "apK-F2jCPtor9NZ-byTb3QAABkU"]
[Sat Aug 29 05:10:15.942580 2026] [security2:error] [pid 1041789:tid 1042053] [client 20.220.204.93:54585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/maraz.php"] [unique_id "apK-F4v3RhPI65jTFG4IiAAAA5g"]
[Sat Aug 29 05:10:15.943352 2026] [security2:error] [pid 1041789:tid 1042057] [client 40.83.93.50:12700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/wp-admin/class-db.php"] [unique_id "apK-F4v3RhPI65jTFG4IiQAAA5w"]
[Sat Aug 29 05:10:15.952710 2026] [security2:error] [pid 1041789:tid 1042019] [client 20.48.251.3:46533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/product.php"] [unique_id "apK-F4v3RhPI65jTFG4IigAAA3Y"]
[Sat Aug 29 05:10:15.980762 2026] [security2:error] [pid 1041789:tid 1041954] [client 158.158.54.35:14007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/php8.php"] [unique_id "apK-F4v3RhPI65jTFG4IiwAAAzU"]
[Sat Aug 29 05:10:15.986985 2026] [security2:error] [pid 1041789:tid 1041995] [client 20.52.41.200:4403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK-F4v3RhPI65jTFG4IjAAAA14"]
[Sat Aug 29 05:10:16.007184 2026] [security2:error] [pid 1041789:tid 1042029] [client 20.104.104.62:35755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/x23.php"] [unique_id "apK-GIv3RhPI65jTFG4IjQAAA4A"]
[Sat Aug 29 05:10:16.075958 2026] [security2:error] [pid 1041789:tid 1041977] [client 158.23.147.79:11454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wzy.php"] [unique_id "apK-GIv3RhPI65jTFG4IkAAAA0w"]
[Sat Aug 29 05:10:16.084807 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.48.251.3:43994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/public/wp-blog.php"] [unique_id "apK-GIv3RhPI65jTFG4IkQAAA2Q"]
[Sat Aug 29 05:10:16.089374 2026] [security2:error] [pid 1041789:tid 1041991] [client 40.83.93.50:13563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/al.php"] [unique_id "apK-GIv3RhPI65jTFG4IkwAAA1o"]
[Sat Aug 29 05:10:16.102136 2026] [security2:error] [pid 1321:tid 1608] [client 45.148.10.62:42606] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.yim.emf.mybluehost.me"] [uri "/stripe/.env"] [unique_id "apK-GGjCPtor9NZ-byTb4wAABrM"]
[Sat Aug 29 05:10:16.128557 2026] [security2:error] [pid 1041789:tid 1041939] [client 4.232.148.111:1030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/m.php"] [unique_id "apK-GIv3RhPI65jTFG4IlAAAAyY"]
[Sat Aug 29 05:10:16.131839 2026] [security2:error] [pid 1321:tid 1564] [client 20.104.49.130:52533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "coveryourauto.com"] [uri "/chosen.php"] [unique_id "apK-GGjCPtor9NZ-byTb5AAABoc"]
[Sat Aug 29 05:10:16.148050 2026] [security2:error] [pid 1041789:tid 1041976] [client 20.104.104.62:37547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/ws66.php"] [unique_id "apK-GIv3RhPI65jTFG4IlQAAA0s"]
[Sat Aug 29 05:10:16.187547 2026] [security2:error] [pid 1321:tid 1527] [client 20.220.204.93:55929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/kbfr.php"] [unique_id "apK-GGjCPtor9NZ-byTb5QAABmM"]
[Sat Aug 29 05:10:16.216898 2026] [security2:error] [pid 1321:tid 1553] [client 20.48.251.3:9305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/test.php"] [unique_id "apK-GGjCPtor9NZ-byTb5gAABnw"]
[Sat Aug 29 05:10:16.218944 2026] [security2:error] [pid 1321:tid 1612] [client 20.220.204.93:65215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/shlo.php"] [unique_id "apK-GGjCPtor9NZ-byTb5wAABrc"]
[Sat Aug 29 05:10:16.228211 2026] [security2:error] [pid 1321:tid 1531] [client 4.205.62.107:63977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/ah25.php"] [unique_id "apK-GGjCPtor9NZ-byTb6AAABmc"]
[Sat Aug 29 05:10:16.256505 2026] [security2:error] [pid 1041789:tid 1042014] [client 20.196.209.81:12298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-conflg.php"] [unique_id "apK-GIv3RhPI65jTFG4IlwAAA3E"]
[Sat Aug 29 05:10:16.257147 2026] [security2:error] [pid 1321:tid 1543] [client 20.104.49.130:60776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/Jcrop.php"] [unique_id "apK-GGjCPtor9NZ-byTb6gAABnM"]
[Sat Aug 29 05:10:16.280641 2026] [security2:error] [pid 1041789:tid 1041944] [client 20.104.104.62:37593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/Cok.php"] [unique_id "apK-GIv3RhPI65jTFG4ImAAAAys"]
[Sat Aug 29 05:10:16.315149 2026] [proxy_http:error] [pid 1018003:tid 1018148] (70007)The timeout specified has expired: [remote 57.141.14.53:57820] AH01102: error reading status line from remote server 127.0.0.1:8443
[Sat Aug 29 05:10:16.315173 2026] [proxy:error] [pid 1018003:tid 1018148] [remote 57.141.14.53:57820] AH00898: Error reading from remote server returned by /shop-cart/
[Sat Aug 29 05:10:16.325236 2026] [security2:error] [pid 1041789:tid 1042025] [client 111.235.68.106:46389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK-GIv3RhPI65jTFG4ImQAAA3w"]
[Sat Aug 29 05:10:16.325351 2026] [security2:error] [pid 1041789:tid 1042025] [client 111.235.68.106:46389] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK-GIv3RhPI65jTFG4ImQAAA3w"]
[Sat Aug 29 05:10:16.343395 2026] [proxy_http:error] [pid 1028675:tid 1028905] (70007)The timeout specified has expired: [client 127.0.0.1:57980] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:10:16.343414 2026] [proxy:error] [pid 1028675:tid 1028905] [client 127.0.0.1:57980] AH00898: Error reading from remote server returned by /shop-cart/
[Sat Aug 29 05:10:16.348083 2026] [security2:error] [pid 1321:tid 1580] [client 20.48.251.3:46612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/txets.php"] [unique_id "apK-GGjCPtor9NZ-byTb7AAABpc"]
[Sat Aug 29 05:10:16.351633 2026] [security2:error] [pid 1041789:tid 1042030] [client 40.83.93.50:12115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-content.php"] [unique_id "apK-GIv3RhPI65jTFG4ImwAAA4E"]
[Sat Aug 29 05:10:16.366614 2026] [security2:error] [pid 1041789:tid 1042043] [client 20.220.204.93:52069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/wp-act.php"] [unique_id "apK-GIv3RhPI65jTFG4IngAAA44"]
[Sat Aug 29 05:10:16.386858 2026] [security2:error] [pid 1041789:tid 1041950] [client 158.23.147.79:55276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK-GIv3RhPI65jTFG4IoAAAAzE"]
[Sat Aug 29 05:10:16.416469 2026] [security2:error] [pid 1321:tid 1512] [client 20.220.204.93:63600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/asax.php"] [unique_id "apK-GGjCPtor9NZ-byTb7wAABlQ"]
[Sat Aug 29 05:10:16.416740 2026] [security2:error] [pid 1321:tid 1536] [client 20.104.104.62:35716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/X7T6.php"] [unique_id "apK-GGjCPtor9NZ-byTb8AAABmw"]
[Sat Aug 29 05:10:16.442378 2026] [security2:error] [pid 1041789:tid 1041997] [client 20.52.41.200:4381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/num.php"] [unique_id "apK-GIv3RhPI65jTFG4IpAAAA2A"]
[Sat Aug 29 05:10:16.445559 2026] [security2:error] [pid 1041789:tid 1041951] [client 146.70.36.124:53051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 124.36.70.146.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "autodiscover.allgooddays.org"] [uri "/autodiscover/autodiscover.xml/xmlrpc.php"] [unique_id "apK-GIv3RhPI65jTFG4IogAAAzI"]
[Sat Aug 29 05:10:16.464752 2026] [security2:error] [pid 1321:tid 1522] [client 60.243.207.176:60737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK-GGjCPtor9NZ-byTb8gAABl4"]
[Sat Aug 29 05:10:16.464896 2026] [security2:error] [pid 1321:tid 1522] [client 60.243.207.176:60737] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK-GGjCPtor9NZ-byTb8gAABl4"]
[Sat Aug 29 05:10:16.477090 2026] [security2:error] [pid 1041789:tid 1041960] [client 20.48.251.3:46555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/cxc.php"] [unique_id "apK-GIv3RhPI65jTFG4IpgAAAzs"]
[Sat Aug 29 05:10:16.492065 2026] [security2:error] [pid 1321:tid 1599] [client 40.83.93.50:12723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/wp-contentt.php"] [unique_id "apK-GGjCPtor9NZ-byTb8wAABqo"]
[Sat Aug 29 05:10:16.494732 2026] [security2:error] [pid 1041789:tid 1042006] [client 158.23.147.79:52304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apK-GIv3RhPI65jTFG4IqAAAA2k"]
[Sat Aug 29 05:10:16.551745 2026] [fcgid:warn] [pid 1041789:tid 1042037] (70014)End of file found: [client 199.45.154.68:47586] mod_fcgid: can't get data from http client
[Sat Aug 29 05:10:16.563503 2026] [security2:error] [pid 1041789:tid 1042020] [client 20.104.104.62:37574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/see.php"] [unique_id "apK-GIv3RhPI65jTFG4IqwAAA3c"]
[Sat Aug 29 05:10:16.596505 2026] [security2:error] [pid 1041789:tid 1041945] [client 158.158.54.35:35543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/install.php"] [unique_id "apK-GIv3RhPI65jTFG4IrAAAAyw"]
[Sat Aug 29 05:10:16.607976 2026] [security2:error] [pid 1041789:tid 1041931] [client 20.48.251.3:9324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/gjm.php"] [unique_id "apK-GIv3RhPI65jTFG4IrgAAAx4"]
[Sat Aug 29 05:10:16.623709 2026] [security2:error] [pid 1321:tid 1598] [client 20.220.204.93:55362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/24.php"] [unique_id "apK-GGjCPtor9NZ-byTb9QAABqk"]
[Sat Aug 29 05:10:16.648369 2026] [security2:error] [pid 1041789:tid 1042052] [client 4.232.148.111:1097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "apK-GIv3RhPI65jTFG4IrQAAA5c"]
[Sat Aug 29 05:10:16.673467 2026] [security2:error] [pid 1041789:tid 1042053] [client 20.104.49.130:58194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "coveryourauto.com"] [uri "/ops.php"] [unique_id "apK-GIv3RhPI65jTFG4IrwAAA5g"]
[Sat Aug 29 05:10:16.678986 2026] [security2:error] [pid 1041789:tid 1042057] [client 20.151.200.44:63736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/exec.php"] [unique_id "apK-GIv3RhPI65jTFG4IsAAAA5w"]
[Sat Aug 29 05:10:16.687809 2026] [security2:error] [pid 1321:tid 1513] [client 20.196.209.81:22323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-content.php"] [unique_id "apK-GGjCPtor9NZ-byTb9gAABlU"]
[Sat Aug 29 05:10:16.689016 2026] [security2:error] [pid 1041789:tid 1042051] [client 158.23.147.79:58905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK-GIv3RhPI65jTFG4IsQAAA5Y"]
[Sat Aug 29 05:10:16.705807 2026] [security2:error] [pid 1041789:tid 1042019] [client 158.23.147.79:63865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK-GIv3RhPI65jTFG4IsgAAA3Y"]
[Sat Aug 29 05:10:16.706437 2026] [security2:error] [pid 1321:tid 1582] [client 74.248.24.12:26358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-content/themes/about.php"] [unique_id "apK-GGjCPtor9NZ-byTb-AAABpk"]
[Sat Aug 29 05:10:16.713730 2026] [security2:error] [pid 1321:tid 1488] [client 20.104.104.62:37554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/horeg.php"] [unique_id "apK-GGjCPtor9NZ-byTb-QAABjw"]
[Sat Aug 29 05:10:16.719626 2026] [security2:error] [pid 1321:tid 1581] [client 45.148.10.62:42606] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.yim.emf.mybluehost.me"] [uri "/backend/.env"] [unique_id "apK-GGjCPtor9NZ-byTb-gAABpg"]
[Sat Aug 29 05:10:16.723366 2026] [security2:error] [pid 1041789:tid 1042000] [client 158.23.147.79:14285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK-GIv3RhPI65jTFG4IswAAA2M"]
[Sat Aug 29 05:10:16.738472 2026] [security2:error] [pid 1041789:tid 1041995] [client 20.48.251.3:9323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/app/Models/Hrm/Employee.php"] [unique_id "apK-GIv3RhPI65jTFG4ItAAAA14"]
[Sat Aug 29 05:10:16.764598 2026] [security2:error] [pid 1041789:tid 1042034] [client 4.205.62.107:21901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/umgebung.php"] [unique_id "apK-GIv3RhPI65jTFG4ItQAAA4U"]
[Sat Aug 29 05:10:16.765440 2026] [security2:error] [pid 1321:tid 1616] [client 195.178.110.247:46758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "creditamnesty2012-ca.coveryourauto.com"] [uri "/index.php"] [unique_id "apK-GGjCPtor9NZ-byTb_AAABrs"]
[Sat Aug 29 05:10:16.773885 2026] [security2:error] [pid 1041789:tid 1042023] [client 40.83.93.50:14631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/global.php"] [unique_id "apK-GIv3RhPI65jTFG4ItgAAA3o"]
[Sat Aug 29 05:10:16.780731 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.220.204.93:54625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/155.php"] [unique_id "apK-GIv3RhPI65jTFG4ItwAAA30"]
[Sat Aug 29 05:10:16.846418 2026] [security2:error] [pid 1041789:tid 1041987] [client 20.104.104.62:37504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/basic.php"] [unique_id "apK-GIv3RhPI65jTFG4IuQAAA1Y"]
[Sat Aug 29 05:10:16.870024 2026] [security2:error] [pid 1041789:tid 1041968] [client 20.48.251.3:9476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/bigdump.php"] [unique_id "apK-GIv3RhPI65jTFG4IugAAA0M"]
[Sat Aug 29 05:10:16.873418 2026] [security2:error] [pid 1321:tid 1502] [client 20.220.204.93:61649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/fetch.php"] [unique_id "apK-GGjCPtor9NZ-byTb_gAABko"]
[Sat Aug 29 05:10:16.877528 2026] [security2:error] [pid 1321:tid 1548] [client 45.148.10.62:42606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.yim.emf.mybluehost.me"] [uri "/test.php"] [unique_id "apK-GGjCPtor9NZ-byTb_wAABnc"]
[Sat Aug 29 05:10:16.884845 2026] [security2:error] [pid 1321:tid 1575] [client 107.145.13.164:64313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 164.13.145.107.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK-GGjCPtor9NZ-byTcAAAABpI"]
[Sat Aug 29 05:10:16.884919 2026] [security2:error] [pid 1321:tid 1575] [client 107.145.13.164:64313] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK-GGjCPtor9NZ-byTcAAAABpI"]
[Sat Aug 29 05:10:16.891598 2026] [security2:error] [pid 1321:tid 1568] [client 4.205.62.107:51469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/hiquido.com/index.php"] [unique_id "apK-GGjCPtor9NZ-byTcAQAABos"]
[Sat Aug 29 05:10:16.902472 2026] [security2:error] [pid 1321:tid 1586] [client 158.23.147.79:5990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/cgi-bin/index.php"] [unique_id "apK-GGjCPtor9NZ-byTcAgAABp0"]
[Sat Aug 29 05:10:16.916208 2026] [security2:error] [pid 1041789:tid 1042048] [client 4.205.62.107:62945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/goods.php"] [unique_id "apK-GIv3RhPI65jTFG4IvQAAA5M"]
[Sat Aug 29 05:10:16.918862 2026] [security2:error] [pid 1041789:tid 1041969] [client 195.178.110.247:62370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.creditamnesty2012-ca.coveryourauto.com"] [uri "/index.php"] [unique_id "apK-GIv3RhPI65jTFG4IvgAAA0Q"]
[Sat Aug 29 05:10:16.970529 2026] [security2:error] [pid 1041789:tid 1042005] [client 202.71.25.11:60290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.25.71.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK-GIv3RhPI65jTFG4IwAAAA2g"]
[Sat Aug 29 05:10:16.970637 2026] [security2:error] [pid 1041789:tid 1042005] [client 202.71.25.11:60290] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK-GIv3RhPI65jTFG4IwAAAA2g"]
[Sat Aug 29 05:10:16.972464 2026] [security2:error] [pid 1041789:tid 1041970] [client 20.220.204.93:54613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/file.php"] [unique_id "apK-GIv3RhPI65jTFG4IwQAAA0U"]
[Sat Aug 29 05:10:16.988121 2026] [security2:error] [pid 1041789:tid 1042030] [client 40.83.93.50:12113] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-content/1.php"] [unique_id "apK-GIv3RhPI65jTFG4IwgAAA4E"]
[Sat Aug 29 05:10:16.988196 2026] [security2:error] [pid 1041789:tid 1042030] [client 40.83.93.50:12113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-content/1.php"] [unique_id "apK-GIv3RhPI65jTFG4IwgAAA4E"]
[Sat Aug 29 05:10:16.998560 2026] [security2:error] [pid 1321:tid 1542] [client 20.104.104.62:37618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/monso.php"] [unique_id "apK-GGjCPtor9NZ-byTcBwAABnI"]
[Sat Aug 29 05:10:16.999124 2026] [security2:error] [pid 1321:tid 1560] [client 20.48.251.3:46564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/channels.php"] [unique_id "apK-GGjCPtor9NZ-byTcCAAABoM"]
[Sat Aug 29 05:10:17.005455 2026] [security2:error] [pid 1321:tid 1534] [client 40.83.93.50:8519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/theme.php"] [unique_id "apK-GWjCPtor9NZ-byTcCQAABmo"]
[Sat Aug 29 05:10:17.017087 2026] [security2:error] [pid 1321:tid 1605] [client 4.205.62.107:6506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/api.php"] [unique_id "apK-GWjCPtor9NZ-byTcCgAABrA"]
[Sat Aug 29 05:10:17.038978 2026] [security2:error] [pid 1321:tid 1614] [client 158.158.54.35:4121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/ioxi-o.php"] [unique_id "apK-GWjCPtor9NZ-byTcCwAABrk"]
[Sat Aug 29 05:10:17.076926 2026] [security2:error] [pid 1321:tid 1561] [client 20.220.204.93:65167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/vx.php"] [unique_id "apK-GWjCPtor9NZ-byTcDAAABoQ"]
[Sat Aug 29 05:10:17.122794 2026] [security2:error] [pid 1041789:tid 1041981] [client 4.232.148.111:26864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/222.php"] [unique_id "apK-GYv3RhPI65jTFG4IzAAAA1A"]
[Sat Aug 29 05:10:17.128150 2026] [security2:error] [pid 1041789:tid 1041948] [client 20.48.251.3:9302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/ws79.php"] [unique_id "apK-GYv3RhPI65jTFG4IzQAAAy8"]
[Sat Aug 29 05:10:17.140668 2026] [security2:error] [pid 1041789:tid 1042035] [client 20.104.104.62:35757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/rce.php"] [unique_id "apK-GYv3RhPI65jTFG4IzgAAA4Y"]
[Sat Aug 29 05:10:17.198195 2026] [security2:error] [pid 1041789:tid 1042038] [client 158.23.147.79:11388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK-GYv3RhPI65jTFG4I0AAAA4k"]
[Sat Aug 29 05:10:17.204766 2026] [security2:error] [pid 1321:tid 1494] [client 91.92.47.191:45774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.corrigansbasement.com"] [uri "/wp-config.php"] [unique_id "apK-GWjCPtor9NZ-byTcDQAABkI"]
[Sat Aug 29 05:10:17.207911 2026] [security2:error] [pid 1041789:tid 1042050] [client 20.52.41.200:4409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "apK-GYv3RhPI65jTFG4I0QAAA5U"]
[Sat Aug 29 05:10:17.209585 2026] [security2:error] [pid 1041789:tid 1042020] [client 91.92.47.191:45776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantgardening.rocworx.com"] [uri "/config.php"] [unique_id "apK-GYv3RhPI65jTFG4I0gAAA3c"]
[Sat Aug 29 05:10:17.218544 2026] [security2:error] [pid 1041789:tid 1041964] [client 20.196.209.81:8893] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-content/1.php"] [unique_id "apK-GYv3RhPI65jTFG4I0wAAAz8"]
[Sat Aug 29 05:10:17.218612 2026] [security2:error] [pid 1041789:tid 1041964] [client 20.196.209.81:8893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-content/1.php"] [unique_id "apK-GYv3RhPI65jTFG4I0wAAAz8"]
[Sat Aug 29 05:10:17.242628 2026] [security2:error] [pid 1041789:tid 1042028] [client 20.220.204.93:65208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/global.php"] [unique_id "apK-GYv3RhPI65jTFG4I1AAAA38"]
[Sat Aug 29 05:10:17.255806 2026] [security2:error] [pid 1041789:tid 1042046] [client 20.48.251.3:44011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/sys.php"] [unique_id "apK-GYv3RhPI65jTFG4I1QAAA5E"]
[Sat Aug 29 05:10:17.259896 2026] [security2:error] [pid 1321:tid 1572] [client 40.83.93.50:14606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/update.php"] [unique_id "apK-GWjCPtor9NZ-byTcDwAABo8"]
[Sat Aug 29 05:10:17.275538 2026] [security2:error] [pid 1041789:tid 1041979] [client 74.248.24.12:6680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK-GYv3RhPI65jTFG4I1gAAA04"]
[Sat Aug 29 05:10:17.281964 2026] [security2:error] [pid 1041789:tid 1042051] [client 20.104.104.62:35721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/exec.php"] [unique_id "apK-GYv3RhPI65jTFG4I1wAAA5Y"]
[Sat Aug 29 05:10:17.310285 2026] [security2:error] [pid 1041789:tid 1042025] [client 61.9.8.189:14230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 189.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK-GYv3RhPI65jTFG4I2AAAA3w"]
[Sat Aug 29 05:10:17.310392 2026] [security2:error] [pid 1041789:tid 1042025] [client 61.9.8.189:14230] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK-GYv3RhPI65jTFG4I2AAAA3w"]
[Sat Aug 29 05:10:17.365746 2026] [security2:error] [pid 1041789:tid 1042034] [client 4.205.62.107:63948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/groceries/index.php"] [unique_id "apK-GYv3RhPI65jTFG4I2gAAA4U"]
[Sat Aug 29 05:10:17.375168 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.220.204.93:52032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK-GYv3RhPI65jTFG4I3AAAA3o"]
[Sat Aug 29 05:10:17.385381 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.48.251.3:46561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/dragonshell.php"] [unique_id "apK-GYv3RhPI65jTFG4I3QAAA30"]
[Sat Aug 29 05:10:17.387534 2026] [security2:error] [pid 1041789:tid 1042044] [client 195.178.110.247:46766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottcondos.roycehomesales.com"] [uri "/index.php"] [unique_id "apK-GYv3RhPI65jTFG4I3gAAA48"]
[Sat Aug 29 05:10:17.391931 2026] [security2:error] [pid 1041789:tid 1041940] [client 45.148.10.62:42610] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.yim.emf.mybluehost.me"] [uri "/.env.backup"] [unique_id "apK-GYv3RhPI65jTFG4I3wAAAyc"]
[Sat Aug 29 05:10:17.428127 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.104.104.62:48039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/dbc.php"] [unique_id "apK-GYv3RhPI65jTFG4I4AAAA2Q"]
[Sat Aug 29 05:10:17.429136 2026] [security2:error] [pid 1041789:tid 1041978] [client 20.220.204.93:65237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/fs.php"] [unique_id "apK-GYv3RhPI65jTFG4I4QAAA00"]
[Sat Aug 29 05:10:17.478556 2026] [security2:error] [pid 1321:tid 1590] [client 40.83.93.50:10760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/alumni_reg.php"] [unique_id "apK-GWjCPtor9NZ-byTcEAAABqE"]
[Sat Aug 29 05:10:17.481695 2026] [security2:error] [pid 1321:tid 1607] [client 158.158.54.35:17785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/xmlrpc.php"] [unique_id "apK-GWjCPtor9NZ-byTcEQAABrI"]
[Sat Aug 29 05:10:17.484219 2026] [security2:error] [pid 1041789:tid 1042019] [client 40.83.93.50:18362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-content/about.php"] [unique_id "apK-GYv3RhPI65jTFG4I5AAAA3Y"]
[Sat Aug 29 05:10:17.495506 2026] [security2:error] [pid 1041789:tid 1041963] [client 158.23.147.79:63294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-content/cong.php"] [unique_id "apK-GYv3RhPI65jTFG4I5QAAAz4"]
[Sat Aug 29 05:10:17.514073 2026] [security2:error] [pid 1041789:tid 1041950] [client 20.48.251.3:46547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/ws61.php"] [unique_id "apK-GYv3RhPI65jTFG4I5gAAAzE"]
[Sat Aug 29 05:10:17.542257 2026] [security2:error] [pid 1041789:tid 1041956] [client 45.148.10.62:42610] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.yim.emf.mybluehost.me"] [uri "/.env.old"] [unique_id "apK-GYv3RhPI65jTFG4I5wAAAzc"]
[Sat Aug 29 05:10:17.551921 2026] [security2:error] [pid 1321:tid 1501] [client 195.178.110.247:62382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottcondos.roycehomesales.com"] [uri "/index.php"] [unique_id "apK-GWjCPtor9NZ-byTcEgAABkk"]
[Sat Aug 29 05:10:17.571654 2026] [security2:error] [pid 1041789:tid 1041997] [client 20.220.204.93:65243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/ioxi.php"] [unique_id "apK-GYv3RhPI65jTFG4I6AAAA2A"]
[Sat Aug 29 05:10:17.572378 2026] [security2:error] [pid 1041789:tid 1041951] [client 20.104.104.62:37607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/wp-wlx.php"] [unique_id "apK-GYv3RhPI65jTFG4I6gAAAzI"]
[Sat Aug 29 05:10:17.572414 2026] [security2:error] [pid 1041789:tid 1042017] [client 158.23.147.79:5935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-content/packed.php"] [unique_id "apK-GYv3RhPI65jTFG4I6QAAA3Q"]
[Sat Aug 29 05:10:17.576535 2026] [security2:error] [pid 1041789:tid 1041944] [client 20.151.200.44:63805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/dbc.php"] [unique_id "apK-GYv3RhPI65jTFG4I6wAAAys"]
[Sat Aug 29 05:10:17.578464 2026] [security2:error] [pid 1041789:tid 1042031] [client 20.104.49.130:57718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/t.php"] [unique_id "apK-GYv3RhPI65jTFG4I7AAAA4I"]
[Sat Aug 29 05:10:17.593518 2026] [security2:error] [pid 1041789:tid 1041987] [client 4.232.148.111:19566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/mini.php"] [unique_id "apK-GYv3RhPI65jTFG4I7QAAA1Y"]
[Sat Aug 29 05:10:17.600572 2026] [security2:error] [pid 1041789:tid 1041946] [client 158.23.147.79:57013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK-GYv3RhPI65jTFG4I7gAAAy0"]
[Sat Aug 29 05:10:17.613763 2026] [security2:error] [pid 1041789:tid 1041976] [client 20.196.209.81:12307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-content/about.php"] [unique_id "apK-GYv3RhPI65jTFG4I7wAAA0s"]
[Sat Aug 29 05:10:17.659614 2026] [security2:error] [pid 1041789:tid 1042030] [client 20.52.41.200:4640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "apK-GYv3RhPI65jTFG4I8AAAA4E"]
[Sat Aug 29 05:10:17.667384 2026] [security2:error] [pid 1041789:tid 1041941] [client 20.48.251.3:9333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/w.php"] [unique_id "apK-GYv3RhPI65jTFG4I8gAAAyg"]
[Sat Aug 29 05:10:17.673900 2026] [security2:error] [pid 1321:tid 1588] [client 20.220.204.93:55410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/06.php"] [unique_id "apK-GWjCPtor9NZ-byTcFAAABp8"]
[Sat Aug 29 05:10:17.677540 2026] [security2:error] [pid 1041789:tid 1041967] [client 197.232.63.170:53323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 170.63.232.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK-GYv3RhPI65jTFG4I9AAAA0I"]
[Sat Aug 29 05:10:17.677639 2026] [security2:error] [pid 1041789:tid 1041967] [client 197.232.63.170:53323] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK-GYv3RhPI65jTFG4I9AAAA0I"]
[Sat Aug 29 05:10:17.707282 2026] [security2:error] [pid 1041789:tid 1041977] [client 146.70.36.124:42538] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.allgooddays.org"] [uri "/autodiscover/autodiscover.xml/blog/wp-includes/wlwmanifest.xml"] [unique_id "apK-GYv3RhPI65jTFG4I9wAAA0w"]
[Sat Aug 29 05:10:17.709310 2026] [security2:error] [pid 1041789:tid 1041975] [client 20.104.104.62:48030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/attack.php"] [unique_id "apK-GYv3RhPI65jTFG4I-AAAA0o"]
[Sat Aug 29 05:10:17.719748 2026] [access_compat:error] [pid 1041789:tid 1042015] [client 57.141.14.52:0] AH01797: client denied by server configuration: /home4/eastacar/public_html/djiboutifresh/acheter
[Sat Aug 29 05:10:17.728993 2026] [security2:error] [pid 1041789:tid 1042020] [client 195.178.110.247:46782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottawahomemarketvalue.roycehomesales.com"] [uri "/index.php"] [unique_id "apK-GYv3RhPI65jTFG4I-wAAA3c"]
[Sat Aug 29 05:10:17.798467 2026] [security2:error] [pid 1041789:tid 1041971] [client 74.248.24.12:15941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-admin/index.php"] [unique_id "apK-GYv3RhPI65jTFG4I_QAAA0Y"]
[Sat Aug 29 05:10:17.799193 2026] [security2:error] [pid 1321:tid 1489] [client 20.48.251.3:44009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/u88.php"] [unique_id "apK-GWjCPtor9NZ-byTcFwAABj0"]
[Sat Aug 29 05:10:17.812290 2026] [security2:error] [pid 1041789:tid 1042057] [client 158.23.147.79:60222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK-GYv3RhPI65jTFG4I_gAAA5w"]
[Sat Aug 29 05:10:17.813679 2026] [security2:error] [pid 1041789:tid 1041961] [client 40.83.93.50:18562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/blog.php"] [unique_id "apK-GYv3RhPI65jTFG4I_wAAAzw"]
[Sat Aug 29 05:10:17.822203 2026] [security2:error] [pid 1321:tid 1549] [client 158.23.147.79:58095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/goat.php"] [unique_id "apK-GWjCPtor9NZ-byTcGAAABng"]
[Sat Aug 29 05:10:17.830018 2026] [security2:error] [pid 1041789:tid 1041949] [client 158.23.147.79:14237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK-GYv3RhPI65jTFG4JAQAAAzA"]
[Sat Aug 29 05:10:17.847306 2026] [security2:error] [pid 1041789:tid 1042034] [client 20.104.104.62:37624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/file66.php"] [unique_id "apK-GYv3RhPI65jTFG4JAgAAA4U"]
[Sat Aug 29 05:10:17.863587 2026] [security2:error] [pid 1041789:tid 1042044] [client 20.220.204.93:55881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/class.php"] [unique_id "apK-GYv3RhPI65jTFG4JBAAAA48"]
[Sat Aug 29 05:10:17.876110 2026] [security2:error] [pid 1041789:tid 1042007] [client 45.148.10.62:42610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.yim.emf.mybluehost.me"] [uri "/.env.php.bak"] [unique_id "apK-GYv3RhPI65jTFG4JBQAAA2o"]
[Sat Aug 29 05:10:17.897157 2026] [security2:error] [pid 1321:tid 1545] [client 195.178.110.247:62390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottawahomemarketvalue.roycehomesales.com"] [uri "/index.php"] [unique_id "apK-GWjCPtor9NZ-byTcGQAABnU"]
[Sat Aug 29 05:10:17.903267 2026] [security2:error] [pid 1041789:tid 1041972] [client 4.205.62.107:21917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/old_phpinfo.php"] [unique_id "apK-GYv3RhPI65jTFG4JBgAAA0c"]
[Sat Aug 29 05:10:17.916260 2026] [security2:error] [pid 1041789:tid 1042046] [client 158.158.54.35:1236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/filemanager.php"] [unique_id "apK-GYv3RhPI65jTFG4JBwAAA5E"]
[Sat Aug 29 05:10:17.930196 2026] [access_compat:error] [pid 1041789:tid 1041983] [client 67.20.76.220:18392] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:10:17.931958 2026] [security2:error] [pid 1321:tid 1547] [client 20.48.251.3:9315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/mcebraed.php"] [unique_id "apK-GWjCPtor9NZ-byTcGgAABnY"]
[Sat Aug 29 05:10:17.955547 2026] [security2:error] [pid 1041789:tid 1041979] [client 40.83.93.50:1319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-content/admin-header.php"] [unique_id "apK-GYv3RhPI65jTFG4JCQAAA04"]
[Sat Aug 29 05:10:17.975088 2026] [security2:error] [pid 1041789:tid 1041945] [client 213.202.253.4:56723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "timportlock.net"] [uri "/gdftps.php"] [unique_id "apK-GYv3RhPI65jTFG4JCwAAAyw"], referer: www.google.com
[Sat Aug 29 05:10:18.002939 2026] [security2:error] [pid 1041789:tid 1042055] [client 20.104.104.62:37617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/zafir1.php"] [unique_id "apK-Gov3RhPI65jTFG4JDQAAA5o"]
[Sat Aug 29 05:10:18.008085 2026] [security2:error] [pid 1041789:tid 1042005] [client 158.23.147.79:5968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK-Gov3RhPI65jTFG4JDgAAA2g"]
[Sat Aug 29 05:10:18.013054 2026] [security2:error] [pid 1321:tid 1497] [client 20.196.209.81:8835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-content/admin-header.php"] [unique_id "apK-GmjCPtor9NZ-byTcHQAABkU"]
[Sat Aug 29 05:10:18.027472 2026] [security2:error] [pid 1321:tid 1529] [client 40.83.93.50:11617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/colors.php"] [unique_id "apK-GmjCPtor9NZ-byTcHgAABmU"]
[Sat Aug 29 05:10:18.045438 2026] [security2:error] [pid 1041789:tid 1041988] [client 20.220.204.93:55377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/8.php"] [unique_id "apK-Gov3RhPI65jTFG4JDwAAA1c"]
[Sat Aug 29 05:10:18.048496 2026] [security2:error] [pid 1041789:tid 1041933] [client 4.205.62.107:51404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/app_local.php"] [unique_id "apK-Gov3RhPI65jTFG4JEAAAAyA"]
[Sat Aug 29 05:10:18.049920 2026] [security2:error] [pid 1041789:tid 1041997] [client 4.205.62.107:62961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/loxi-o.php"] [unique_id "apK-Gov3RhPI65jTFG4JEQAAA2A"]
[Sat Aug 29 05:10:18.071775 2026] [security2:error] [pid 1041789:tid 1041976] [client 20.48.251.3:46596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/verox.php"] [unique_id "apK-Gov3RhPI65jTFG4JFQAAA0s"]
[Sat Aug 29 05:10:18.076042 2026] [security2:error] [pid 1321:tid 1571] [client 4.232.148.111:19988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/aa.php"] [unique_id "apK-GmjCPtor9NZ-byTcHwAABo4"]
[Sat Aug 29 05:10:18.116798 2026] [security2:error] [pid 1321:tid 1537] [client 20.52.41.200:4626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/gifclass.php"] [unique_id "apK-GmjCPtor9NZ-byTcIQAABm0"]
[Sat Aug 29 05:10:18.152021 2026] [security2:error] [pid 1321:tid 1522] [client 20.104.104.62:37589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/console.php"] [unique_id "apK-GmjCPtor9NZ-byTcJAAABl4"]
[Sat Aug 29 05:10:18.156487 2026] [security2:error] [pid 1041789:tid 1041954] [client 20.220.204.93:61571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/bootstrap.php"] [unique_id "apK-Gov3RhPI65jTFG4JHAAAAzU"]
[Sat Aug 29 05:10:18.158862 2026] [security2:error] [pid 1321:tid 1491] [client 4.205.62.107:6492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/temp.php"] [unique_id "apK-GmjCPtor9NZ-byTcJQAABj8"]
[Sat Aug 29 05:10:18.169630 2026] [security2:error] [pid 1041789:tid 1041980] [client 34.169.171.101:12164] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-Gov3RhPI65jTFG4JHQAAA08"]
[Sat Aug 29 05:10:18.170194 2026] [security2:error] [pid 1041789:tid 1041942] [client 34.169.171.101:12228] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "forensicengineernj.com"] [uri "/v1/graphql"] [unique_id "apK-Gov3RhPI65jTFG4JIQAAAyk"]
[Sat Aug 29 05:10:18.174376 2026] [security2:error] [pid 1041789:tid 1041931] [client 34.169.171.101:12216] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "forensicengineernj.com"] [uri "/graphql"] [unique_id "apK-Gov3RhPI65jTFG4JJgAAAx4"]
[Sat Aug 29 05:10:18.174900 2026] [security2:error] [pid 1321:tid 1527] [client 34.169.171.101:12260] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/.hermes/.env"] [unique_id "apK-GmjCPtor9NZ-byTcKQAABmM"]
[Sat Aug 29 05:10:18.175542 2026] [security2:error] [pid 1041789:tid 1041964] [client 34.169.171.101:12242] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-Gov3RhPI65jTFG4JIwAAAz8"]
[Sat Aug 29 05:10:18.175891 2026] [security2:error] [pid 1041789:tid 1042029] [client 34.169.171.101:12286] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-Gov3RhPI65jTFG4JJAAAA4A"]
[Sat Aug 29 05:10:18.176614 2026] [security2:error] [pid 1041789:tid 1042020] [client 34.169.171.101:12230] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-Gov3RhPI65jTFG4JIgAAA3c"]
[Sat Aug 29 05:10:18.177609 2026] [security2:error] [pid 1041789:tid 1042047] [client 34.169.171.101:12246] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-Gov3RhPI65jTFG4JJQAAA5I"]
[Sat Aug 29 05:10:18.183179 2026] [security2:error] [pid 1321:tid 1541] [client 34.169.171.101:12336] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/.openclaw/.env"] [unique_id "apK-GmjCPtor9NZ-byTcMQAABnE"]
[Sat Aug 29 05:10:18.186026 2026] [security2:error] [pid 1041789:tid 1041949] [client 34.169.171.101:12466] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "forensicengineernj.com"] [uri "/login"] [unique_id "apK-Gov3RhPI65jTFG4JLQAAAzA"]
[Sat Aug 29 05:10:18.186920 2026] [security2:error] [pid 1321:tid 1580] [client 34.169.171.101:12462] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-GmjCPtor9NZ-byTcNAAABpc"]
[Sat Aug 29 05:10:18.196216 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.220.204.93:55331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/0x0x.php"] [unique_id "apK-Gov3RhPI65jTFG4JLwAAA2Q"]
[Sat Aug 29 05:10:18.200410 2026] [security2:error] [pid 1041789:tid 1041978] [client 20.48.251.3:43975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/localconf.php"] [unique_id "apK-Gov3RhPI65jTFG4JMAAAA00"]
[Sat Aug 29 05:10:18.205309 2026] [security2:error] [pid 1041789:tid 1041979] [client 34.169.171.101:12164] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-Gov3RhPI65jTFG4JMwAAA04"], referer: https://forensicengineernj.com/docker-compose.yml
[Sat Aug 29 05:10:18.211531 2026] [security2:error] [pid 1041789:tid 1041935] [client 34.169.171.101:12286] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-Gov3RhPI65jTFG4JNgAAAyI"], referer: https://forensicengineernj.com/graphql/console
[Sat Aug 29 05:10:18.211588 2026] [security2:error] [pid 1041789:tid 1041938] [client 34.169.171.101:12242] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-Gov3RhPI65jTFG4JNQAAAyU"], referer: https://forensicengineernj.com/.hermes/auth.json
[Sat Aug 29 05:10:18.213349 2026] [security2:error] [pid 1041789:tid 1041983] [client 34.169.171.101:12230] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-Gov3RhPI65jTFG4JNwAAA1I"], referer: https://forensicengineernj.com/.openai/config.json
[Sat Aug 29 05:10:18.213417 2026] [security2:error] [pid 1041789:tid 1042013] [client 34.169.171.101:12246] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-Gov3RhPI65jTFG4JOAAAA3A"], referer: https://forensicengineernj.com/.codex/config.toml
[Sat Aug 29 05:10:18.221949 2026] [security2:error] [pid 1321:tid 1602] [client 34.169.171.101:12462] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-GmjCPtor9NZ-byTcPQAABq0"], referer: https://forensicengineernj.com/admin
[Sat Aug 29 05:10:18.302148 2026] [security2:error] [pid 1041789:tid 1041970] [client 146.70.36.124:42540] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.allgooddays.org"] [uri "/autodiscover/autodiscover.xml/web/wp-includes/wlwmanifest.xml"] [unique_id "apK-Gov3RhPI65jTFG4JQQAAA0U"]
[Sat Aug 29 05:10:18.302575 2026] [security2:error] [pid 1041789:tid 1041948] [client 20.104.104.62:37517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/blnux.php"] [unique_id "apK-Gov3RhPI65jTFG4JQgAAAy8"]
[Sat Aug 29 05:10:18.307714 2026] [security2:error] [pid 1321:tid 1606] [client 40.83.93.50:18580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/bypass.php"] [unique_id "apK-GmjCPtor9NZ-byTcPgAABrE"]
[Sat Aug 29 05:10:18.329910 2026] [security2:error] [pid 1041789:tid 1041967] [client 20.48.251.3:43976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/xa.php"] [unique_id "apK-Gov3RhPI65jTFG4JRwAAA0I"]
[Sat Aug 29 05:10:18.342054 2026] [security2:error] [pid 1041789:tid 1042000] [client 74.248.24.12:15968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/radio.php"] [unique_id "apK-Gov3RhPI65jTFG4JSAAAA2M"]
[Sat Aug 29 05:10:18.343099 2026] [security2:error] [pid 1321:tid 1528] [client 35.219.81.80:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "djiboutifresh.com"] [uri "/"] [unique_id "apK-GmjCPtor9NZ-byTcTwAABmQ"], referer: https://djiboutifresh.com/
[Sat Aug 29 05:10:18.354184 2026] [security2:error] [pid 1321:tid 1534] [client 158.23.147.79:11294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK-GmjCPtor9NZ-byTcUAAABmo"]
[Sat Aug 29 05:10:18.359408 2026] [security2:error] [pid 1041789:tid 1042048] [client 158.158.54.35:35563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-content/themes/admin.php"] [unique_id "apK-Gov3RhPI65jTFG4JSQAAA5M"]
[Sat Aug 29 05:10:18.378789 2026] [security2:error] [pid 1041789:tid 1042053] [client 20.220.204.93:54640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/166.php"] [unique_id "apK-Gov3RhPI65jTFG4JSgAAA5g"]
[Sat Aug 29 05:10:18.380668 2026] [security2:error] [pid 1321:tid 1555] [client 20.104.49.130:51380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/yawa.php"] [unique_id "apK-GmjCPtor9NZ-byTcUQAABn4"]
[Sat Aug 29 05:10:18.409138 2026] [security2:error] [pid 1321:tid 1521] [client 20.196.209.81:12307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-content/admin.php"] [unique_id "apK-GmjCPtor9NZ-byTcVAAABl0"]
[Sat Aug 29 05:10:18.424535 2026] [security2:error] [pid 1041789:tid 1041951] [client 40.83.93.50:1506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-content/admin.php"] [unique_id "apK-Gov3RhPI65jTFG4JTQAAAzI"]
[Sat Aug 29 05:10:18.433609 2026] [security2:error] [pid 1041789:tid 1042046] [client 20.104.104.62:35727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/pentest.php"] [unique_id "apK-Gov3RhPI65jTFG4JTgAAA5E"]
[Sat Aug 29 05:10:18.439319 2026] [security2:error] [pid 1041789:tid 1041988] [client 45.148.10.62:42624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.yim.emf.mybluehost.me"] [uri "/.env.php"] [unique_id "apK-Gov3RhPI65jTFG4JTwAAA1c"]
[Sat Aug 29 05:10:18.444428 2026] [security2:error] [pid 1041789:tid 1041938] [client 20.220.204.93:65278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/export.php"] [unique_id "apK-Gov3RhPI65jTFG4JWAAAAyU"]
[Sat Aug 29 05:10:18.461564 2026] [security2:error] [pid 1321:tid 1551] [client 20.48.251.3:43978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/maxro.php"] [unique_id "apK-GmjCPtor9NZ-byTcXgAABno"]
[Sat Aug 29 05:10:18.504900 2026] [security2:error] [pid 1321:tid 1589] [client 4.205.62.107:61715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/konfig.php"] [unique_id "apK-GmjCPtor9NZ-byTcawAABqA"]
[Sat Aug 29 05:10:18.515441 2026] [security2:error] [pid 1041789:tid 1042037] [client 40.83.93.50:8570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/Js.php"] [unique_id "apK-Gov3RhPI65jTFG4JXwAAA4g"]
[Sat Aug 29 05:10:18.551405 2026] [security2:error] [pid 1321:tid 1526] [client 4.232.148.111:20003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/c.php"] [unique_id "apK-GmjCPtor9NZ-byTcdAAABmI"]
[Sat Aug 29 05:10:18.577485 2026] [security2:error] [pid 1321:tid 1501] [client 20.151.200.44:22258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/wp-wlx.php"] [unique_id "apK-GmjCPtor9NZ-byTcdgAABkk"]
[Sat Aug 29 05:10:18.587641 2026] [security2:error] [pid 1041789:tid 1041933] [client 20.104.104.62:8144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/6y7t.php"] [unique_id "apK-Gov3RhPI65jTFG4JYgAAAyA"]
[Sat Aug 29 05:10:18.591155 2026] [security2:error] [pid 1041789:tid 1041997] [client 20.48.251.3:46580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/phina.php"] [unique_id "apK-Gov3RhPI65jTFG4JYwAAA2A"]
[Sat Aug 29 05:10:18.601680 2026] [security2:error] [pid 1321:tid 1592] [client 158.23.147.79:63241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK-GmjCPtor9NZ-byTcdwAABqM"]
[Sat Aug 29 05:10:18.651630 2026] [security2:error] [pid 1041789:tid 1041992] [client 34.50.189.51:31580] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "discocollective.kriveloff-associates.com"] [uri "/cgi-sys/404.html"] [unique_id "apK-Gov3RhPI65jTFG4JaQAAA1s"]
[Sat Aug 29 05:10:18.652973 2026] [core:error] [pid 1041789:tid 1042011] [client 34.50.189.51:31636] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:18.652989 2026] [core:error] [pid 1041789:tid 1042011] [client 34.50.189.51:31636] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:18.652998 2026] [core:error] [pid 1041789:tid 1041948] [client 34.50.189.51:31562] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:18.653006 2026] [core:error] [pid 1041789:tid 1041948] [client 34.50.189.51:31562] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:18.656081 2026] [core:error] [pid 1321:tid 1552] [client 34.50.189.51:31660] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:18.656095 2026] [core:error] [pid 1321:tid 1552] [client 34.50.189.51:31660] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:18.656514 2026] [core:error] [pid 1041789:tid 1042041] [client 34.50.189.51:31650] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:18.656531 2026] [core:error] [pid 1041789:tid 1042041] [client 34.50.189.51:31650] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:18.656647 2026] [core:error] [pid 1041789:tid 1042034] [client 34.50.189.51:31622] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:18.656656 2026] [core:error] [pid 1041789:tid 1042034] [client 34.50.189.51:31622] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:18.659034 2026] [security2:error] [pid 1041789:tid 1041932] [client 34.50.189.51:31600] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "discocollective.kriveloff-associates.com"] [uri "/cgi-sys/404.html"] [unique_id "apK-Gov3RhPI65jTFG4JcQAAAx8"]
[Sat Aug 29 05:10:18.659213 2026] [core:error] [pid 1041789:tid 1042054] [client 34.50.189.51:31682] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:18.659223 2026] [core:error] [pid 1041789:tid 1042054] [client 34.50.189.51:31682] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:18.660437 2026] [security2:error] [pid 1041789:tid 1042026] [client 34.50.189.51:31796] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/.ssh/id_rsa"] [unique_id "apK-Gov3RhPI65jTFG4JdAAAA30"]
[Sat Aug 29 05:10:18.662229 2026] [core:error] [pid 1041789:tid 1042030] [client 34.50.189.51:31676] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:18.662242 2026] [core:error] [pid 1041789:tid 1042030] [client 34.50.189.51:31676] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:18.662823 2026] [core:error] [pid 1321:tid 1615] [client 34.50.189.51:31834] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:18.662838 2026] [core:error] [pid 1321:tid 1615] [client 34.50.189.51:31834] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:18.664320 2026] [security2:error] [pid 1041789:tid 1042015] [client 34.50.189.51:31580] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/.ssh/id_dsa"] [unique_id "apK-Gov3RhPI65jTFG4JegAAA3I"]
[Sat Aug 29 05:10:18.664601 2026] [core:error] [pid 1321:tid 1613] [client 34.50.189.51:31818] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:18.664616 2026] [core:error] [pid 1321:tid 1613] [client 34.50.189.51:31818] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:18.665219 2026] [core:error] [pid 1321:tid 1523] [client 34.50.189.51:31572] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:18.665229 2026] [core:error] [pid 1321:tid 1523] [client 34.50.189.51:31572] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:18.673961 2026] [security2:error] [pid 1321:tid 1517] [client 158.23.147.79:5925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-l0gin.php"] [unique_id "apK-GmjCPtor9NZ-byTclQAABlk"]
[Sat Aug 29 05:10:18.706172 2026] [security2:error] [pid 1321:tid 1504] [client 20.52.41.200:4659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK-GmjCPtor9NZ-byTcmQAABkw"]
[Sat Aug 29 05:10:18.706496 2026] [security2:error] [pid 1321:tid 1497] [client 158.23.147.79:28041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/dropdown.php"] [unique_id "apK-GmjCPtor9NZ-byTcmgAABkU"]
[Sat Aug 29 05:10:18.720511 2026] [security2:error] [pid 1321:tid 1571] [client 20.48.251.3:46574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/aws_secret_config.php"] [unique_id "apK-GmjCPtor9NZ-byTcnQAABo4"]
[Sat Aug 29 05:10:18.737082 2026] [security2:error] [pid 1321:tid 1584] [client 20.104.104.62:37519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/0xs.php"] [unique_id "apK-GmjCPtor9NZ-byTcogAABps"]
[Sat Aug 29 05:10:18.739168 2026] [security2:error] [pid 1041789:tid 1042031] [client 20.220.204.93:61621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/gk.php"] [unique_id "apK-Gov3RhPI65jTFG4JhAAAA4I"]
[Sat Aug 29 05:10:18.750449 2026] [security2:error] [pid 1321:tid 1491] [client 20.104.104.62:47554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/AkuSayangKamu45.php"] [unique_id "apK-GmjCPtor9NZ-byTcpQAABj8"]
[Sat Aug 29 05:10:18.753370 2026] [security2:error] [pid 1041789:tid 1042053] [client 20.104.49.130:48638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/bdroot.php"] [unique_id "apK-Gov3RhPI65jTFG4JhgAAA5g"]
[Sat Aug 29 05:10:18.780799 2026] [security2:error] [pid 1041789:tid 1041910] [remote 93.123.109.228:33128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/.env.php"] [unique_id "apK-Gov3RhPI65jTFG4JjQADaWw"]
[Sat Aug 29 05:10:18.784615 2026] [security2:error] [pid 1321:tid 1510] [client 40.83.93.50:13546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/extractable-loader-head.php"] [unique_id "apK-GmjCPtor9NZ-byTcrQAABlI"]
[Sat Aug 29 05:10:18.790139 2026] [security2:error] [pid 1041789:tid 1041947] [client 87.219.197.128:56132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK-Gov3RhPI65jTFG4JjAAAAy4"]
[Sat Aug 29 05:10:18.790251 2026] [security2:error] [pid 1041789:tid 1041947] [client 87.219.197.128:56132] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK-Gov3RhPI65jTFG4JjAAAAy4"]
[Sat Aug 29 05:10:18.792441 2026] [security2:error] [pid 1041789:tid 1041940] [client 158.158.54.35:35583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-admin/css/admin.php"] [unique_id "apK-Gov3RhPI65jTFG4JkQAAAyc"]
[Sat Aug 29 05:10:18.808193 2026] [security2:error] [pid 1041789:tid 1041951] [client 20.220.204.93:54612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/h2a2ck.php"] [unique_id "apK-Gov3RhPI65jTFG4JlgAAAzI"]
[Sat Aug 29 05:10:18.810284 2026] [security2:error] [pid 1321:tid 1395] [remote 93.123.109.228:33158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.group3-llc.com"] [uri "/.env.php"] [unique_id "apK-GmjCPtor9NZ-byTcsgAGtCU"]
[Sat Aug 29 05:10:18.820232 2026] [security2:error] [pid 1321:tid 1432] [remote 93.123.109.228:33304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/.env.php"] [unique_id "apK-GmjCPtor9NZ-byTctAAGs0o"]
[Sat Aug 29 05:10:18.833619 2026] [security2:error] [pid 1321:tid 1601] [client 20.196.209.81:12346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-content/autoload_classmap.php"] [unique_id "apK-GmjCPtor9NZ-byTctgAABqw"]
[Sat Aug 29 05:10:18.853709 2026] [security2:error] [pid 1041789:tid 1042037] [client 20.48.251.3:9292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/greem_res.php"] [unique_id "apK-Gov3RhPI65jTFG4JnAAAA4g"]
[Sat Aug 29 05:10:18.855437 2026] [security2:error] [pid 1041789:tid 1041980] [client 20.104.49.130:63525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pvillusions.com"] [uri "/media.php"] [unique_id "apK-Gov3RhPI65jTFG4JnQAAA08"]
[Sat Aug 29 05:10:18.869631 2026] [security2:error] [pid 1041789:tid 1041964] [client 20.104.104.62:37601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/waf.php"] [unique_id "apK-Gov3RhPI65jTFG4JngAAAz8"]
[Sat Aug 29 05:10:18.897082 2026] [security2:error] [pid 1041789:tid 1041970] [client 146.70.36.124:42556] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.allgooddays.org"] [uri "/autodiscover/autodiscover.xml/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "apK-Gov3RhPI65jTFG4JoAAAA0U"]
[Sat Aug 29 05:10:18.901806 2026] [security2:error] [pid 1321:tid 1522] [client 40.83.93.50:1311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-content/autoload_classmap.php"] [unique_id "apK-GmjCPtor9NZ-byTcwgAABl4"]
[Sat Aug 29 05:10:18.914021 2026] [security2:error] [pid 1041789:tid 1042038] [client 158.23.147.79:53960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-content/radio.php"] [unique_id "apK-Gov3RhPI65jTFG4JogAAA4k"]
[Sat Aug 29 05:10:18.923997 2026] [security2:error] [pid 1041789:tid 1042018] [client 158.23.147.79:62694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK-Gov3RhPI65jTFG4JpAAAA3U"]
[Sat Aug 29 05:10:18.931072 2026] [access_compat:error] [pid 1041789:tid 1042038] [client 67.20.76.220:18404] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:10:18.931984 2026] [security2:error] [pid 1321:tid 1512] [client 74.248.24.12:4323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/item.php"] [unique_id "apK-GmjCPtor9NZ-byTcyQAABlQ"]
[Sat Aug 29 05:10:18.945732 2026] [security2:error] [pid 1041789:tid 1041933] [client 158.23.147.79:14312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-content/banners/about.php"] [unique_id "apK-Gov3RhPI65jTFG4JqQAAAyA"]
[Sat Aug 29 05:10:18.990843 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.48.251.3:43991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/app/Helpers/bladeHelpers.php"] [unique_id "apK-Gov3RhPI65jTFG4JtwAAA30"]
[Sat Aug 29 05:10:19.013012 2026] [security2:error] [pid 1321:tid 1495] [client 40.83.93.50:11597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/access.php"] [unique_id "apK-G2jCPtor9NZ-byTc2QAABkM"]
[Sat Aug 29 05:10:19.028638 2026] [security2:error] [pid 1041789:tid 1042044] [client 20.104.104.62:48033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/bnnof6.php"] [unique_id "apK-G4v3RhPI65jTFG4JvAAAA48"]
[Sat Aug 29 05:10:19.031798 2026] [security2:error] [pid 1041789:tid 1041964] [client 4.232.148.111:1093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/f.php"] [unique_id "apK-G4v3RhPI65jTFG4JvQAAAz8"]
[Sat Aug 29 05:10:19.073699 2026] [security2:error] [pid 1321:tid 1536] [client 4.205.62.107:22218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.superbusy.com"] [uri "/wp-act.php"] [unique_id "apK-G2jCPtor9NZ-byTc4AAABmw"]
[Sat Aug 29 05:10:19.093137 2026] [security2:error] [pid 1321:tid 1516] [client 20.220.204.93:55372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/error_log.php"] [unique_id "apK-G2jCPtor9NZ-byTc4gAABlg"]
[Sat Aug 29 05:10:19.118662 2026] [security2:error] [pid 1321:tid 1598] [client 158.23.147.79:6025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-includes/content.php"] [unique_id "apK-G2jCPtor9NZ-byTc5gAABqk"]
[Sat Aug 29 05:10:19.122149 2026] [security2:error] [pid 1321:tid 1579] [client 20.48.251.3:9321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/wp-jufsis.php"] [unique_id "apK-G2jCPtor9NZ-byTc5wAABpY"]
[Sat Aug 29 05:10:19.160712 2026] [security2:error] [pid 1041789:tid 1042030] [client 20.52.41.200:5306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/css/index.php"] [unique_id "apK-G4v3RhPI65jTFG4JxAAAA4E"]
[Sat Aug 29 05:10:19.185039 2026] [security2:error] [pid 1321:tid 1534] [client 4.205.62.107:51474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/xqq.php"] [unique_id "apK-G2jCPtor9NZ-byTc7wAABmo"]
[Sat Aug 29 05:10:19.221005 2026] [security2:error] [pid 1321:tid 1566] [client 4.205.62.107:62732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/f35.php"] [unique_id "apK-G2jCPtor9NZ-byTc-AAABok"]
[Sat Aug 29 05:10:19.236313 2026] [security2:error] [pid 1321:tid 1604] [client 20.196.209.81:8403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-content/cache/min/1/wp-content/admin.php"] [unique_id "apK-G2jCPtor9NZ-byTc_QAABq8"]
[Sat Aug 29 05:10:19.236364 2026] [security2:error] [pid 1041789:tid 1042053] [client 158.158.54.35:14009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/adminfuns.php"] [unique_id "apK-G4v3RhPI65jTFG4JzgAAA5g"]
[Sat Aug 29 05:10:19.248520 2026] [security2:error] [pid 1321:tid 1587] [client 20.104.104.62:37534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/ah24.php"] [unique_id "apK-G2jCPtor9NZ-byTc_gAABp4"]
[Sat Aug 29 05:10:19.252642 2026] [security2:error] [pid 1041789:tid 1041942] [client 20.48.251.3:44016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/wp-content/admin.php"] [unique_id "apK-G4v3RhPI65jTFG4J0wAAAyk"]
[Sat Aug 29 05:10:19.290260 2026] [security2:error] [pid 1041789:tid 1042006] [client 20.220.204.93:63493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/logs1.php"] [unique_id "apK-G4v3RhPI65jTFG4J1wAAA2k"]
[Sat Aug 29 05:10:19.294855 2026] [security2:error] [pid 1041789:tid 1041970] [client 91.92.47.191:45788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantgardening.rocworx.com"] [uri "/configuration.php"] [unique_id "apK-G4v3RhPI65jTFG4J2AAAA0U"]
[Sat Aug 29 05:10:19.295717 2026] [security2:error] [pid 1041789:tid 1042035] [client 91.92.47.191:45796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.corrigansbasement.com"] [uri "/config.php"] [unique_id "apK-G4v3RhPI65jTFG4J2QAAA4Y"]
[Sat Aug 29 05:10:19.308051 2026] [security2:error] [pid 1041789:tid 1042018] [client 20.220.204.93:55839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/403.php"] [unique_id "apK-G4v3RhPI65jTFG4J2wAAA3U"]
[Sat Aug 29 05:10:19.312431 2026] [security2:error] [pid 1041789:tid 1042057] [client 4.205.62.107:6494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/fm.php"] [unique_id "apK-G4v3RhPI65jTFG4J3AAAA5w"]
[Sat Aug 29 05:10:19.312888 2026] [security2:error] [pid 1041789:tid 1041980] [client 52.139.37.240:12483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/ahax.php"] [unique_id "apK-G4v3RhPI65jTFG4J3QAAA08"]
[Sat Aug 29 05:10:19.364353 2026] [security2:error] [pid 1321:tid 1596] [client 20.104.49.130:52498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/100.php"] [unique_id "apK-G2jCPtor9NZ-byTdEgAABqc"]
[Sat Aug 29 05:10:19.371303 2026] [security2:error] [pid 1321:tid 1597] [client 40.83.93.50:16457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-content/cache/min/1/wp-content/admin.php"] [unique_id "apK-G2jCPtor9NZ-byTdFAAABqg"]
[Sat Aug 29 05:10:19.378792 2026] [security2:error] [pid 1321:tid 1555] [client 40.83.93.50:13523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/defaults.php"] [unique_id "apK-G2jCPtor9NZ-byTdFgAABn4"]
[Sat Aug 29 05:10:19.389219 2026] [security2:error] [pid 1041789:tid 1042025] [client 20.48.251.3:43842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/124.php"] [unique_id "apK-G4v3RhPI65jTFG4J4wAAA3w"]
[Sat Aug 29 05:10:19.392944 2026] [security2:error] [pid 1321:tid 1560] [client 20.104.104.62:35712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/ztv.php"] [unique_id "apK-G2jCPtor9NZ-byTdGAAABoM"]
[Sat Aug 29 05:10:19.455301 2026] [security2:error] [pid 1041789:tid 1041957] [client 74.248.24.12:20011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/t.php"] [unique_id "apK-G4v3RhPI65jTFG4J7wAAAzg"]
[Sat Aug 29 05:10:19.460814 2026] [security2:error] [pid 1321:tid 1572] [client 20.220.204.93:55924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/cytyr.php"] [unique_id "apK-G2jCPtor9NZ-byTdJAAABo8"]
[Sat Aug 29 05:10:19.480835 2026] [security2:error] [pid 1041789:tid 1041975] [client 146.70.36.124:42558] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.allgooddays.org"] [uri "/autodiscover/autodiscover.xml/website/wp-includes/wlwmanifest.xml"] [unique_id "apK-G4v3RhPI65jTFG4J8gAAA0o"]
[Sat Aug 29 05:10:19.493415 2026] [security2:error] [pid 1041789:tid 1042026] [client 158.23.147.79:11381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK-G4v3RhPI65jTFG4J9QAAA30"]
[Sat Aug 29 05:10:19.508536 2026] [security2:error] [pid 1041789:tid 1041979] [client 4.232.148.111:1148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/av.php"] [unique_id "apK-G4v3RhPI65jTFG4J-QAAA04"]
[Sat Aug 29 05:10:19.509778 2026] [security2:error] [pid 1041789:tid 1042043] [client 52.139.37.240:12498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/breads1.php"] [unique_id "apK-G4v3RhPI65jTFG4J-gAAA44"]
[Sat Aug 29 05:10:19.514321 2026] [security2:error] [pid 1041789:tid 1041933] [client 40.83.93.50:8566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/classsmtps.php"] [unique_id "apK-G4v3RhPI65jTFG4J_AAAAyA"]
[Sat Aug 29 05:10:19.521634 2026] [security2:error] [pid 1041789:tid 1042020] [client 20.48.251.3:46653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/cu.php"] [unique_id "apK-G4v3RhPI65jTFG4J_QAAA3c"]
[Sat Aug 29 05:10:19.532236 2026] [security2:error] [pid 1041789:tid 1041964] [client 20.104.104.62:37552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/kure.php"] [unique_id "apK-G4v3RhPI65jTFG4J_wAAAz8"]
[Sat Aug 29 05:10:19.544394 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.220.204.93:65189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/inege.php"] [unique_id "apK-G4v3RhPI65jTFG4KAAAAA2Q"]
[Sat Aug 29 05:10:19.570133 2026] [security2:error] [pid 1041789:tid 1041960] [client 20.104.104.62:40203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/googlebots.php"] [unique_id "apK-G4v3RhPI65jTFG4KAwAAAzs"]
[Sat Aug 29 05:10:19.617602 2026] [security2:error] [pid 1041789:tid 1041950] [client 20.52.41.200:4662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-cron.php"] [unique_id "apK-G4v3RhPI65jTFG4KCAAAAzE"]
[Sat Aug 29 05:10:19.634679 2026] [security2:error] [pid 1041789:tid 1042007] [client 20.196.209.81:17736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-content/classwithtostring.php"] [unique_id "apK-G4v3RhPI65jTFG4KCwAAA2o"]
[Sat Aug 29 05:10:19.641123 2026] [security2:error] [pid 1041789:tid 1041978] [client 4.205.62.107:63883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/paths.php"] [unique_id "apK-G4v3RhPI65jTFG4KDQAAA00"]
[Sat Aug 29 05:10:19.657514 2026] [security2:error] [pid 1041789:tid 1041935] [client 20.48.251.3:44019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/ok.php"] [unique_id "apK-G4v3RhPI65jTFG4KEAAAAyI"]
[Sat Aug 29 05:10:19.659111 2026] [security2:error] [pid 1041789:tid 1041982] [client 20.220.204.93:54563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/galer.php"] [unique_id "apK-G4v3RhPI65jTFG4KEQAAA1E"]
[Sat Aug 29 05:10:19.672452 2026] [security2:error] [pid 1041789:tid 1042048] [client 158.158.54.35:8324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/goods.php"] [unique_id "apK-G4v3RhPI65jTFG4KFQAAA5M"]
[Sat Aug 29 05:10:19.688419 2026] [security2:error] [pid 1321:tid 1594] [client 20.104.104.62:35726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/cafe.php"] [unique_id "apK-G2jCPtor9NZ-byTdSwAABqU"]
[Sat Aug 29 05:10:19.703597 2026] [security2:error] [pid 1041789:tid 1041983] [client 52.139.37.240:12541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/must.php"] [unique_id "apK-G4v3RhPI65jTFG4KGwAAA1I"]
[Sat Aug 29 05:10:19.708850 2026] [security2:error] [pid 1041789:tid 1041971] [client 158.23.147.79:55927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK-G4v3RhPI65jTFG4KHwAAA0Y"]
[Sat Aug 29 05:10:19.710906 2026] [security2:error] [pid 1321:tid 1592] [client 45.148.10.62:42634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.yim.emf.mybluehost.me"] [uri "/wp-config.php"] [unique_id "apK-G2jCPtor9NZ-byTdTwAABqM"]
[Sat Aug 29 05:10:19.723001 2026] [security2:error] [pid 1321:tid 1509] [client 20.220.204.93:63509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/wp-link10.php"] [unique_id "apK-G2jCPtor9NZ-byTdUQAABlE"]
[Sat Aug 29 05:10:19.779961 2026] [security2:error] [pid 1041789:tid 1041976] [client 158.23.147.79:5826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK-G4v3RhPI65jTFG4KKAAAA0s"]
[Sat Aug 29 05:10:19.786521 2026] [security2:error] [pid 1041789:tid 1041809] [remote 93.123.109.228:33128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/.wp-config.php.swp"] [unique_id "apK-G4v3RhPI65jTFG4KKQADjQc"]
[Sat Aug 29 05:10:19.788476 2026] [security2:error] [pid 1041789:tid 1041949] [client 20.48.251.3:44031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/test.config.php"] [unique_id "apK-G4v3RhPI65jTFG4KKgAAAzA"]
[Sat Aug 29 05:10:19.814823 2026] [security2:error] [pid 1041789:tid 1041945] [client 158.23.147.79:44523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/sad/about.php"] [unique_id "apK-G4v3RhPI65jTFG4KLgAAAyw"]
[Sat Aug 29 05:10:19.825342 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.104.104.62:35748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/eval.php"] [unique_id "apK-G4v3RhPI65jTFG4KMAAAA3o"]
[Sat Aug 29 05:10:19.828976 2026] [security2:error] [pid 1321:tid 1449] [remote 93.123.109.228:33304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/.wp-config.php.swp"] [unique_id "apK-G2jCPtor9NZ-byTdYgAGs1o"]
[Sat Aug 29 05:10:19.830424 2026] [security2:error] [pid 1321:tid 1452] [remote 93.123.109.228:33158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.group3-llc.com"] [uri "/.wp-config.php.swp"] [unique_id "apK-G2jCPtor9NZ-byTdZAAGtF0"]
[Sat Aug 29 05:10:19.830456 2026] [security2:error] [pid 1321:tid 1499] [client 20.220.204.93:55414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/baixy.php"] [unique_id "apK-G2jCPtor9NZ-byTdZQAABkc"]
[Sat Aug 29 05:10:19.873052 2026] [security2:error] [pid 1321:tid 1501] [client 40.83.93.50:16480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-content/classwithtostring.php"] [unique_id "apK-G2jCPtor9NZ-byTdagAABkk"]
[Sat Aug 29 05:10:19.874392 2026] [security2:error] [pid 1041789:tid 1042006] [client 40.83.93.50:12836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/post.php"] [unique_id "apK-G4v3RhPI65jTFG4KMwAAA2k"]
[Sat Aug 29 05:10:19.897417 2026] [security2:error] [pid 1321:tid 1489] [client 52.139.37.240:12434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/up.php"] [unique_id "apK-G2jCPtor9NZ-byTdbwAABj0"]
[Sat Aug 29 05:10:19.922025 2026] [security2:error] [pid 1041789:tid 1041964] [client 20.48.251.3:46558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/apikeys.php"] [unique_id "apK-G4v3RhPI65jTFG4KOAAAAz8"]
[Sat Aug 29 05:10:19.960794 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.104.104.62:37549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/sao.php"] [unique_id "apK-G4v3RhPI65jTFG4KPAAAA2Q"]
[Sat Aug 29 05:10:19.962685 2026] [security2:error] [pid 1041789:tid 1042034] [client 20.220.204.93:54600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/ava.php"] [unique_id "apK-G4v3RhPI65jTFG4KPgAAA4U"]
[Sat Aug 29 05:10:19.981900 2026] [security2:error] [pid 1041789:tid 1041987] [client 74.248.24.12:19984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/i.php"] [unique_id "apK-G4v3RhPI65jTFG4KQgAAA1Y"]
[Sat Aug 29 05:10:19.984988 2026] [security2:error] [pid 1321:tid 1490] [client 4.232.148.111:1544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/file.php"] [unique_id "apK-G2jCPtor9NZ-byTdfwAABj4"]
[Sat Aug 29 05:10:19.987116 2026] [security2:error] [pid 1041789:tid 1041944] [client 40.83.93.50:11638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/contentloader1.php"] [unique_id "apK-G4v3RhPI65jTFG4KQwAAAys"]
[Sat Aug 29 05:10:19.997605 2026] [security2:error] [pid 1041789:tid 1041992] [client 20.220.204.93:65196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/ww.php"] [unique_id "apK-G4v3RhPI65jTFG4KRAAAA1s"]
[Sat Aug 29 05:10:20.031158 2026] [security2:error] [pid 1321:tid 1523] [client 20.196.209.81:8415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-content/config.php"] [unique_id "apK-HGjCPtor9NZ-byTdhgAABl8"]
[Sat Aug 29 05:10:20.042469 2026] [security2:error] [pid 1041789:tid 1042017] [client 158.23.147.79:63256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-admin/dropdown.php"] [unique_id "apK-HIv3RhPI65jTFG4KSQAAA3Q"]
[Sat Aug 29 05:10:20.043043 2026] [security2:error] [pid 1041789:tid 1042000] [client 158.23.147.79:14145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK-HIv3RhPI65jTFG4KSgAAA2M"]
[Sat Aug 29 05:10:20.061945 2026] [security2:error] [pid 1041789:tid 1042044] [client 20.48.251.3:9300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/god.php"] [unique_id "apK-HIv3RhPI65jTFG4KSwAAA48"]
[Sat Aug 29 05:10:20.071065 2026] [security2:error] [pid 1041789:tid 1041997] [client 146.70.36.124:42574] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.allgooddays.org"] [uri "/autodiscover/autodiscover.xml/wp/wp-includes/wlwmanifest.xml"] [unique_id "apK-HIv3RhPI65jTFG4KTAAAA2A"]
[Sat Aug 29 05:10:20.104439 2026] [security2:error] [pid 1041789:tid 1041988] [client 20.151.200.44:65179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/attack.php"] [unique_id "apK-HIv3RhPI65jTFG4KUgAAA1c"]
[Sat Aug 29 05:10:20.104721 2026] [security2:error] [pid 1321:tid 1577] [client 20.52.41.200:4639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-block.php"] [unique_id "apK-HGjCPtor9NZ-byTdjgAABpQ"]
[Sat Aug 29 05:10:20.109911 2026] [security2:error] [pid 1041789:tid 1041938] [client 20.220.204.93:52037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/gdn.php"] [unique_id "apK-HIv3RhPI65jTFG4KUwAAAyU"]
[Sat Aug 29 05:10:20.115398 2026] [security2:error] [pid 1321:tid 1545] [client 158.158.54.35:13986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/css.php"] [unique_id "apK-HGjCPtor9NZ-byTdkQAABnU"]
[Sat Aug 29 05:10:20.164368 2026] [security2:error] [pid 1041789:tid 1041982] [client 20.104.104.62:35725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/uuu.php"] [unique_id "apK-HIv3RhPI65jTFG4KWgAAA1E"]
[Sat Aug 29 05:10:20.191434 2026] [security2:error] [pid 1041789:tid 1042055] [client 20.48.251.3:46583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/fleen.php"] [unique_id "apK-HIv3RhPI65jTFG4KXQAAA5o"]
[Sat Aug 29 05:10:20.195367 2026] [security2:error] [pid 1321:tid 1537] [client 20.104.104.62:20813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/ben.php"] [unique_id "apK-HGjCPtor9NZ-byTdnQAABm0"]
[Sat Aug 29 05:10:20.199509 2026] [security2:error] [pid 1041789:tid 1041967] [client 45.148.10.62:42642] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "mail.yim.emf.mybluehost.me"] [uri "/wp-config.php.old"] [unique_id "apK-HIv3RhPI65jTFG4KXgAAA0I"]
[Sat Aug 29 05:10:20.223673 2026] [security2:error] [pid 1041789:tid 1041983] [client 158.23.147.79:5944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-admin/css/index.php"] [unique_id "apK-HIv3RhPI65jTFG4KZQAAA1I"]
[Sat Aug 29 05:10:20.249881 2026] [security2:error] [pid 1041789:tid 1041976] [client 20.220.204.93:50300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/f2.php"] [unique_id "apK-HIv3RhPI65jTFG4KaQAAA0s"]
[Sat Aug 29 05:10:20.259586 2026] [security2:error] [pid 1041789:tid 1041941] [client 20.220.204.93:63523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/w1px.php"] [unique_id "apK-HIv3RhPI65jTFG4KawAAAyg"]
[Sat Aug 29 05:10:20.307640 2026] [security2:error] [pid 1041789:tid 1041995] [client 20.104.104.62:23340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/private.php"] [unique_id "apK-HIv3RhPI65jTFG4KbwAAA14"]
[Sat Aug 29 05:10:20.322427 2026] [security2:error] [pid 1321:tid 1492] [client 4.205.62.107:58473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/or.php"] [unique_id "apK-HGjCPtor9NZ-byTdsAAABkA"]
[Sat Aug 29 05:10:20.323492 2026] [security2:error] [pid 1321:tid 1531] [client 20.48.251.3:46614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/phpinfo01.php"] [unique_id "apK-HGjCPtor9NZ-byTdsQAABmc"]
[Sat Aug 29 05:10:20.345677 2026] [security2:error] [pid 1041789:tid 1042014] [client 40.83.93.50:12119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-content/config.php"] [unique_id "apK-HIv3RhPI65jTFG4KdQAAA3E"]
[Sat Aug 29 05:10:20.361175 2026] [security2:error] [pid 1041789:tid 1042006] [client 4.205.62.107:60324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/api.php"] [unique_id "apK-HIv3RhPI65jTFG4KdwAAA2k"]
[Sat Aug 29 05:10:20.376736 2026] [security2:error] [pid 1041789:tid 1041945] [client 52.139.37.240:12293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/wp-content/155.php"] [unique_id "apK-HIv3RhPI65jTFG4KegAAAyw"]
[Sat Aug 29 05:10:20.382752 2026] [security2:error] [pid 1041789:tid 1041933] [client 20.48.160.90:63391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-HIv3RhPI65jTFG4KewAAAyA"]
[Sat Aug 29 05:10:20.388628 2026] [security2:error] [pid 1041789:tid 1041979] [client 74.7.241.133:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "utahtsa.org"] [uri "/robots.txt"] [unique_id "apK-HIv3RhPI65jTFG4KfQAAA04"]
[Sat Aug 29 05:10:20.391093 2026] [security2:error] [pid 1041789:tid 1042005] [client 74.7.241.133:39446] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "utahtsa.org"] [uri "/robots.txt"] [unique_id "apK-HIv3RhPI65jTFG4KdgADaFQ"]
[Sat Aug 29 05:10:20.410609 2026] [security2:error] [pid 1321:tid 1539] [client 20.220.204.93:55310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/grsiuk.php"] [unique_id "apK-HGjCPtor9NZ-byTdwgAABm8"]
[Sat Aug 29 05:10:20.420214 2026] [security2:error] [pid 1041789:tid 1041921] [remote 93.123.109.228:33128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK-HIv3RhPI65jTFG4KhwADjXc"]
[Sat Aug 29 05:10:20.435137 2026] [security2:error] [pid 1041789:tid 1041982] [client 195.178.110.247:46796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottawa-stoprenting.roycehomesales.com"] [uri "/index.php"] [unique_id "apK-HIv3RhPI65jTFG4KiQAAA1E"]
[Sat Aug 29 05:10:20.448458 2026] [security2:error] [pid 1041789:tid 1042046] [client 20.104.104.62:37588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/lfi.php"] [unique_id "apK-HIv3RhPI65jTFG4KjAAAA5E"]
[Sat Aug 29 05:10:20.448867 2026] [security2:error] [pid 1321:tid 1413] [remote 93.123.109.228:33158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.group3-llc.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK-HGjCPtor9NZ-byTdyAAGtDc"]
[Sat Aug 29 05:10:20.450341 2026] [security2:error] [pid 1321:tid 1507] [client 4.232.148.111:1065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK-HGjCPtor9NZ-byTdyQAABk8"]
[Sat Aug 29 05:10:20.455809 2026] [security2:error] [pid 1041789:tid 1041957] [client 20.196.209.81:8428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-content/cong.php"] [unique_id "apK-HIv3RhPI65jTFG4KjgAAAzg"]
[Sat Aug 29 05:10:20.457447 2026] [security2:error] [pid 1041789:tid 1041971] [client 4.205.62.107:6877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/tinyfilemanager.php"] [unique_id "apK-HIv3RhPI65jTFG4KjwAAA0Y"]
[Sat Aug 29 05:10:20.463096 2026] [security2:error] [pid 1041789:tid 1042035] [client 20.48.251.3:43870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/wp-info.php"] [unique_id "apK-HIv3RhPI65jTFG4KkAAAA4Y"]
[Sat Aug 29 05:10:20.472396 2026] [security2:error] [pid 1321:tid 1482] [remote 93.123.109.228:33304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK-HGjCPtor9NZ-byTdzQAGs3s"]
[Sat Aug 29 05:10:20.485803 2026] [security2:error] [pid 1041789:tid 1042023] [client 74.248.24.12:20421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/deepseek_d.php"] [unique_id "apK-HIv3RhPI65jTFG4KkgAAA3o"]
[Sat Aug 29 05:10:20.489806 2026] [security2:error] [pid 1041789:tid 1042054] [client 40.83.93.50:11082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/al.php"] [unique_id "apK-HIv3RhPI65jTFG4KlAAAA5k"]
[Sat Aug 29 05:10:20.546932 2026] [security2:error] [pid 1041789:tid 1042057] [client 40.83.93.50:9665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/csv.php"] [unique_id "apK-HIv3RhPI65jTFG4KmgAAA5w"]
[Sat Aug 29 05:10:20.547196 2026] [security2:error] [pid 1041789:tid 1041995] [client 20.220.204.93:55830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/wp-scr1pts.php"] [unique_id "apK-HIv3RhPI65jTFG4KmwAAA14"]
[Sat Aug 29 05:10:20.549274 2026] [autoindex:error] [pid 1041789:tid 1042038] [client 45.148.10.62:42654] AH01276: Cannot serve directory /home3/ymlfmemy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:10:20.560837 2026] [security2:error] [pid 1041789:tid 1041944] [client 20.52.41.200:4635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-includes/fonts/admin.php"] [unique_id "apK-HIv3RhPI65jTFG4KogAAAys"]
[Sat Aug 29 05:10:20.591312 2026] [security2:error] [pid 1041789:tid 1041967] [client 20.104.104.62:37541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/quoys.php"] [unique_id "apK-HIv3RhPI65jTFG4KswAAA0I"]
[Sat Aug 29 05:10:20.602006 2026] [security2:error] [pid 1321:tid 1548] [client 195.178.110.247:62406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottawa-stoprenting.roycehomesales.com"] [uri "/index.php"] [unique_id "apK-HGjCPtor9NZ-byTd4QAABnc"]
[Sat Aug 29 05:10:20.602046 2026] [security2:error] [pid 1321:tid 1495] [client 20.48.251.3:9343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/infos.php"] [unique_id "apK-HGjCPtor9NZ-byTd4gAABkM"]
[Sat Aug 29 05:10:20.610602 2026] [security2:error] [pid 1321:tid 1602] [client 52.139.37.240:12893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/wp-update.php"] [unique_id "apK-HGjCPtor9NZ-byTd5gAABq0"]
[Sat Aug 29 05:10:20.611040 2026] [security2:error] [pid 1041789:tid 1041971] [client 20.48.160.90:63360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-HIv3RhPI65jTFG4KtwAAA0Y"]
[Sat Aug 29 05:10:20.651241 2026] [security2:error] [pid 1041789:tid 1041887] [remote 93.123.109.228:33128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/admin/phpinfo.php"] [unique_id "apK-HIv3RhPI65jTFG4KugADjVU"]
[Sat Aug 29 05:10:20.684327 2026] [security2:error] [pid 1321:tid 1443] [remote 93.123.109.228:33158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.group3-llc.com"] [uri "/admin/phpinfo.php"] [unique_id "apK-HGjCPtor9NZ-byTd8AAGtFU"]
[Sat Aug 29 05:10:20.687115 2026] [security2:error] [pid 1041789:tid 1042001] [client 146.70.36.124:42580] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.allgooddays.org"] [uri "/autodiscover/autodiscover.xml/news/wp-includes/wlwmanifest.xml"] [unique_id "apK-HIv3RhPI65jTFG4KvgAAA2Q"]
[Sat Aug 29 05:10:20.688367 2026] [security2:error] [pid 1041789:tid 1041881] [remote 93.123.109.228:33128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/admin_phpinfo.php"] [unique_id "apK-HIv3RhPI65jTFG4KvwADjU8"]
[Sat Aug 29 05:10:20.697542 2026] [security2:error] [pid 1041789:tid 1042007] [client 103.185.242.143:59065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-HIv3RhPI65jTFG4KwAAAA2o"]
[Sat Aug 29 05:10:20.697674 2026] [security2:error] [pid 1041789:tid 1042007] [client 103.185.242.143:59065] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-HIv3RhPI65jTFG4KwAAAA2o"]
[Sat Aug 29 05:10:20.702583 2026] [security2:error] [pid 1041789:tid 1041964] [client 45.148.10.62:42654] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.yml.fme.mybluehost.me"] [uri "/.env"] [unique_id "apK-HIv3RhPI65jTFG4KwgAAAz8"]
[Sat Aug 29 05:10:20.706684 2026] [security2:error] [pid 1041789:tid 1042014] [client 45.148.10.62:42660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.yim.emf.mybluehost.me"] [uri "/config.php"] [unique_id "apK-HIv3RhPI65jTFG4K0gAAA3E"]
[Sat Aug 29 05:10:20.709080 2026] [security2:error] [pid 1321:tid 1519] [client 158.23.147.79:11345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK-HGjCPtor9NZ-byTd9QAABls"]
[Sat Aug 29 05:10:20.719789 2026] [security2:error] [pid 1321:tid 1421] [remote 93.123.109.228:33158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.group3-llc.com"] [uri "/admin_phpinfo.php"] [unique_id "apK-HGjCPtor9NZ-byTd9gAGtD8"]
[Sat Aug 29 05:10:20.725646 2026] [security2:error] [pid 1321:tid 1456] [remote 93.123.109.228:33304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/admin/phpinfo.php"] [unique_id "apK-HGjCPtor9NZ-byTd9wAGs2E"]
[Sat Aug 29 05:10:20.730303 2026] [security2:error] [pid 1321:tid 1459] [remote 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK-HGjCPtor9NZ-byTd-AAGYWQ"]
[Sat Aug 29 05:10:20.732522 2026] [security2:error] [pid 1321:tid 1525] [client 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK-HGjCPtor9NZ-byTd-AAGYWQ"]
[Sat Aug 29 05:10:20.733022 2026] [security2:error] [pid 1041789:tid 1042037] [client 20.48.251.3:46571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/vx.php"] [unique_id "apK-HIv3RhPI65jTFG4K1QAAA4g"]
[Sat Aug 29 05:10:20.741141 2026] [security2:error] [pid 1041789:tid 1042057] [client 20.104.104.62:37510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/vbbn.php"] [unique_id "apK-HIv3RhPI65jTFG4K1gAAA5w"]
[Sat Aug 29 05:10:20.775197 2026] [security2:error] [pid 1321:tid 1462] [remote 93.123.109.228:33304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/admin_phpinfo.php"] [unique_id "apK-HGjCPtor9NZ-byTd_gAGs2c"]
[Sat Aug 29 05:10:20.777128 2026] [security2:error] [pid 1321:tid 1598] [client 20.104.104.62:64744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/9191.php"] [unique_id "apK-HGjCPtor9NZ-byTd_wAABqk"]
[Sat Aug 29 05:10:20.779490 2026] [security2:error] [pid 1321:tid 1579] [client 4.205.62.107:63961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/olfclass.php"] [unique_id "apK-HGjCPtor9NZ-byTeAQAABpY"]
[Sat Aug 29 05:10:20.798757 2026] [security2:error] [pid 1041789:tid 1042015] [client 20.151.200.44:63776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/file66.php"] [unique_id "apK-HIv3RhPI65jTFG4K5wAAA3I"]
[Sat Aug 29 05:10:20.805268 2026] [security2:error] [pid 1321:tid 1576] [client 20.48.160.90:64571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/ap.php"] [unique_id "apK-HGjCPtor9NZ-byTeBQAABpM"]
[Sat Aug 29 05:10:20.807504 2026] [security2:error] [pid 1321:tid 1582] [client 20.220.204.93:60824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/to.php"] [unique_id "apK-HGjCPtor9NZ-byTeBgAABpk"]
[Sat Aug 29 05:10:20.817617 2026] [security2:error] [pid 1041789:tid 1042047] [client 40.83.93.50:22112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-content/cong.php"] [unique_id "apK-HIv3RhPI65jTFG4K6AAAA5I"]
[Sat Aug 29 05:10:20.821733 2026] [security2:error] [pid 1041789:tid 1041944] [client 158.23.147.79:55873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK-HIv3RhPI65jTFG4K7AAAAys"]
[Sat Aug 29 05:10:20.827438 2026] [security2:error] [pid 1321:tid 1599] [client 52.139.37.240:12427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/xmrlpc.php"] [unique_id "apK-HGjCPtor9NZ-byTeCgAABqo"]
[Sat Aug 29 05:10:20.858049 2026] [security2:error] [pid 1041789:tid 1042011] [client 20.196.209.81:12318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-content/content.php"] [unique_id "apK-HIv3RhPI65jTFG4K9gAAA24"]
[Sat Aug 29 05:10:20.858923 2026] [security2:error] [pid 1041789:tid 1041933] [client 158.158.54.35:30590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/w.php"] [unique_id "apK-HIv3RhPI65jTFG4K9wAAAyA"]
[Sat Aug 29 05:10:20.863625 2026] [security2:error] [pid 1041789:tid 1042030] [client 45.148.10.62:42654] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.yml.fme.mybluehost.me"] [uri "/.env"] [unique_id "apK-HIv3RhPI65jTFG4K-AAAA4E"]
[Sat Aug 29 05:10:20.877901 2026] [security2:error] [pid 1041789:tid 1041943] [client 20.48.251.3:43849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/radio.php"] [unique_id "apK-HIv3RhPI65jTFG4K_AAAAyo"]
[Sat Aug 29 05:10:20.885620 2026] [security2:error] [pid 1321:tid 1604] [client 20.104.104.62:37512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/rfi.php"] [unique_id "apK-HGjCPtor9NZ-byTeFwAABq8"]
[Sat Aug 29 05:10:20.888519 2026] [security2:error] [pid 1321:tid 1587] [client 158.23.147.79:5829] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/ioxi002.PhP7"] [unique_id "apK-HGjCPtor9NZ-byTeGAAABp4"]
[Sat Aug 29 05:10:20.912557 2026] [access_compat:error] [pid 1041789:tid 1041972] [client 67.20.76.220:18416] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:10:20.923828 2026] [security2:error] [pid 1321:tid 1596] [client 158.23.147.79:44529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/admin.php"] [unique_id "apK-HGjCPtor9NZ-byTeHQAABqc"]
[Sat Aug 29 05:10:20.924200 2026] [security2:error] [pid 1041789:tid 1042038] [client 4.232.148.111:20030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/gmo.php"] [unique_id "apK-HIv3RhPI65jTFG4LCAAAA4k"]
[Sat Aug 29 05:10:20.932936 2026] [security2:error] [pid 1321:tid 1494] [client 93.152.221.156:53797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.loh.zdx.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "apK-HGjCPtor9NZ-byTeHwAABkI"]
[Sat Aug 29 05:10:20.934225 2026] [security2:error] [pid 1041789:tid 1041823] [remote 93.123.109.228:33128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/api/info.php"] [unique_id "apK-HIv3RhPI65jTFG4LCQADjRU"]
[Sat Aug 29 05:10:20.934859 2026] [access_compat:error] [pid 1321:tid 1611] [client 67.20.76.220:18422] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:10:20.953604 2026] [access_compat:error] [pid 1321:tid 1596] [client 67.20.76.220:18430] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:10:20.963682 2026] [security2:error] [pid 1041789:tid 1041956] [client 20.220.204.93:55891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/num.php"] [unique_id "apK-HIv3RhPI65jTFG4LEgAAAzc"]
[Sat Aug 29 05:10:20.972175 2026] [security2:error] [pid 1041789:tid 1041992] [client 40.83.93.50:11637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/global.php"] [unique_id "apK-HIv3RhPI65jTFG4LGQAAA1s"]
[Sat Aug 29 05:10:20.994335 2026] [security2:error] [pid 1321:tid 1607] [client 20.104.49.130:52536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "coveryourauto.com"] [uri "/av.php"] [unique_id "apK-HGjCPtor9NZ-byTeMAAABrI"]
[Sat Aug 29 05:10:21.000217 2026] [security2:error] [pid 1041789:tid 1042035] [client 91.92.47.191:45822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantgardening.rocworx.com"] [uri "/settings.php"] [unique_id "apK-HIv3RhPI65jTFG4LIQAAA4Y"]
[Sat Aug 29 05:10:21.003709 2026] [security2:error] [pid 1041789:tid 1042023] [client 91.92.47.191:45824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.corrigansbasement.com"] [uri "/configuration.php"] [unique_id "apK-HYv3RhPI65jTFG4LIgAAA3o"]
[Sat Aug 29 05:10:21.005003 2026] [security2:error] [pid 1321:tid 1469] [remote 93.123.109.228:33304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/api/info.php"] [unique_id "apK-HWjCPtor9NZ-byTeMgAGs24"]
[Sat Aug 29 05:10:21.015065 2026] [security2:error] [pid 1321:tid 1534] [client 20.52.41.200:4744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/m.php"] [unique_id "apK-HWjCPtor9NZ-byTeNQAABmo"]
[Sat Aug 29 05:10:21.019500 2026] [security2:error] [pid 1041789:tid 1042043] [client 20.48.251.3:9325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/BDKR28WP.php"] [unique_id "apK-HYv3RhPI65jTFG4LIwAAA44"]
[Sat Aug 29 05:10:21.022807 2026] [security2:error] [pid 1321:tid 1532] [client 20.220.204.93:63513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/thui.php"] [unique_id "apK-HWjCPtor9NZ-byTeNgAABmg"]
[Sat Aug 29 05:10:21.023684 2026] [security2:error] [pid 1321:tid 1589] [client 52.139.37.240:12921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/about/function.php"] [unique_id "apK-HWjCPtor9NZ-byTeNwAABqA"]
[Sat Aug 29 05:10:21.027915 2026] [security2:error] [pid 1321:tid 1384] [remote 93.123.109.228:33158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.group3-llc.com"] [uri "/api/info.php"] [unique_id "apK-HWjCPtor9NZ-byTeOQAGtBo"]
[Sat Aug 29 05:10:21.031770 2026] [security2:error] [pid 1041789:tid 1042028] [client 20.104.104.62:23336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/tajj.php"] [unique_id "apK-HYv3RhPI65jTFG4LJwAAA38"]
[Sat Aug 29 05:10:21.062716 2026] [security2:error] [pid 1321:tid 1380] [remote 93.123.109.228:33158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.group3-llc.com"] [uri "/api/phpinfo.php"] [unique_id "apK-HWjCPtor9NZ-byTeQAAGtBY"]
[Sat Aug 29 05:10:21.065211 2026] [security2:error] [pid 1041789:tid 1041825] [remote 93.123.109.228:33128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/api/phpinfo.php"] [unique_id "apK-HYv3RhPI65jTFG4LKwADjRc"]
[Sat Aug 29 05:10:21.067116 2026] [security2:error] [pid 1321:tid 1574] [client 40.83.93.50:12845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/fox.php"] [unique_id "apK-HWjCPtor9NZ-byTeQQAABpE"]
[Sat Aug 29 05:10:21.088572 2026] [security2:error] [pid 1321:tid 1499] [client 158.23.147.79:58054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apK-HWjCPtor9NZ-byTeRgAABkc"]
[Sat Aug 29 05:10:21.105318 2026] [security2:error] [pid 1321:tid 1533] [client 20.220.204.93:55867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/a4.php"] [unique_id "apK-HWjCPtor9NZ-byTeSAAABmk"]
[Sat Aug 29 05:10:21.145948 2026] [security2:error] [pid 1321:tid 1388] [remote 93.123.109.228:33304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/api/phpinfo.php"] [unique_id "apK-HWjCPtor9NZ-byTeVgAGsx4"]
[Sat Aug 29 05:10:21.152480 2026] [security2:error] [pid 1321:tid 1517] [client 158.23.147.79:14213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/asd.php"] [unique_id "apK-HWjCPtor9NZ-byTeWAAABlk"]
[Sat Aug 29 05:10:21.154127 2026] [security2:error] [pid 1321:tid 1490] [client 20.48.251.3:9308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/_js.jpg..bk.php"] [unique_id "apK-HWjCPtor9NZ-byTeWQAABj4"]
[Sat Aug 29 05:10:21.164926 2026] [security2:error] [pid 1041789:tid 1042011] [client 158.23.147.79:60182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/login.php"] [unique_id "apK-HYv3RhPI65jTFG4LPgAAA24"]
[Sat Aug 29 05:10:21.166221 2026] [security2:error] [pid 1041789:tid 1041870] [remote 93.123.109.228:33772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldperformanceinc.com"] [uri "/.env.php"] [unique_id "apK-HYv3RhPI65jTFG4LQAADMEQ"]
[Sat Aug 29 05:10:21.171997 2026] [security2:error] [pid 1041789:tid 1041860] [remote 93.123.109.228:33546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldstone.com"] [uri "/.env.php"] [unique_id "apK-HYv3RhPI65jTFG4LQgADKDo"]
[Sat Aug 29 05:10:21.202525 2026] [autoindex:error] [pid 1041789:tid 1041933] [client 45.148.10.62:42654] AH01276: Cannot serve directory /home3/ymlfmemy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:10:21.203787 2026] [security2:error] [pid 1041789:tid 1041991] [client 20.104.104.62:37515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/grsiuk.php"] [unique_id "apK-HYv3RhPI65jTFG4LSgAAA1o"]
[Sat Aug 29 05:10:21.209570 2026] [security2:error] [pid 1321:tid 1563] [client 93.152.221.156:54901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.loh.zdx.mybluehost.me"] [uri "/test.php"] [unique_id "apK-HWjCPtor9NZ-byTeYwAABoY"]
[Sat Aug 29 05:10:21.212377 2026] [http2:warn] [pid 1018003:tid 1018272] [client 57.141.14.67:61602] h2_stream(1018003-14-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:10:21.222654 2026] [security2:error] [pid 1321:tid 1547] [client 52.139.37.240:12897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/an.php"] [unique_id "apK-HWjCPtor9NZ-byTeawAABnY"]
[Sat Aug 29 05:10:21.248925 2026] [security2:error] [pid 1321:tid 1491] [client 20.104.104.62:20715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/kjtpoad.php"] [unique_id "apK-HWjCPtor9NZ-byTecQAABj8"]
[Sat Aug 29 05:10:21.261914 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.196.209.81:19486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-content/core.php"] [unique_id "apK-HYv3RhPI65jTFG4LVwAAA30"]
[Sat Aug 29 05:10:21.269979 2026] [security2:error] [pid 1041789:tid 1041960] [client 146.70.36.124:42582] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.allgooddays.org"] [uri "/autodiscover/autodiscover.xml/2019/wp-includes/wlwmanifest.xml"] [unique_id "apK-HYv3RhPI65jTFG4LWgAAAzs"]
[Sat Aug 29 05:10:21.271673 2026] [security2:error] [pid 1321:tid 1505] [client 20.220.204.93:55416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/tfm.php"] [unique_id "apK-HWjCPtor9NZ-byTedwAABk0"]
[Sat Aug 29 05:10:21.291161 2026] [security2:error] [pid 1041789:tid 1042038] [client 20.48.251.3:9491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/setup-config.php"] [unique_id "apK-HYv3RhPI65jTFG4LYQAAA4k"]
[Sat Aug 29 05:10:21.299464 2026] [security2:error] [pid 1041789:tid 1042000] [client 45.148.10.62:42674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.yim.emf.mybluehost.me"] [uri "/config.php.bak"] [unique_id "apK-HYv3RhPI65jTFG4LZAAAA2M"]
[Sat Aug 29 05:10:21.302089 2026] [security2:error] [pid 1321:tid 1518] [client 158.158.54.35:35535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/ahax.php"] [unique_id "apK-HWjCPtor9NZ-byTefwAABlo"]
[Sat Aug 29 05:10:21.304808 2026] [security2:error] [pid 1321:tid 1540] [client 40.83.93.50:18308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-content/content.php"] [unique_id "apK-HWjCPtor9NZ-byTegAAABnA"]
[Sat Aug 29 05:10:21.312689 2026] [security2:error] [pid 1321:tid 1543] [client 20.220.204.93:63609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/Jcrop.php"] [unique_id "apK-HWjCPtor9NZ-byTehAAABnM"]
[Sat Aug 29 05:10:21.342378 2026] [security2:error] [pid 1321:tid 1510] [client 20.104.104.62:37511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/ahy66.php"] [unique_id "apK-HWjCPtor9NZ-byTeiAAABlI"]
[Sat Aug 29 05:10:21.391610 2026] [security2:error] [pid 1041789:tid 1042055] [client 20.104.49.130:53636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/wp-blogs.php"] [unique_id "apK-HYv3RhPI65jTFG4LeAAAA5o"]
[Sat Aug 29 05:10:21.402941 2026] [security2:error] [pid 1321:tid 1584] [client 4.232.148.111:27532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/classwithtostring.php"] [unique_id "apK-HWjCPtor9NZ-byTelQAABps"]
[Sat Aug 29 05:10:21.418152 2026] [security2:error] [pid 1321:tid 1550] [client 52.139.37.240:12490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/asw.php"] [unique_id "apK-HWjCPtor9NZ-byTelwAABnk"]
[Sat Aug 29 05:10:21.420391 2026] [security2:error] [pid 1321:tid 1502] [client 74.248.24.12:4601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "apK-HWjCPtor9NZ-byTemQAABko"]
[Sat Aug 29 05:10:21.427212 2026] [security2:error] [pid 1041789:tid 1041967] [client 20.48.251.3:46635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/phpversion.php"] [unique_id "apK-HYv3RhPI65jTFG4LgQAAA0I"]
[Sat Aug 29 05:10:21.443049 2026] [security2:error] [pid 1321:tid 1514] [client 20.48.160.90:63474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/media.php"] [unique_id "apK-HWjCPtor9NZ-byTenAAABlY"]
[Sat Aug 29 05:10:21.457460 2026] [security2:error] [pid 1041789:tid 1041970] [client 20.220.204.93:63586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/ws58.php"] [unique_id "apK-HYv3RhPI65jTFG4LhgAAA0U"]
[Sat Aug 29 05:10:21.458683 2026] [security2:error] [pid 1041789:tid 1041938] [client 40.83.93.50:20468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/update.php"] [unique_id "apK-HYv3RhPI65jTFG4LhwAAAyU"]
[Sat Aug 29 05:10:21.461303 2026] [security2:error] [pid 1041789:tid 1041971] [client 4.205.62.107:4954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/i.php"] [unique_id "apK-HYv3RhPI65jTFG4LiAAAA0Y"]
[Sat Aug 29 05:10:21.468431 2026] [security2:error] [pid 1321:tid 1541] [client 20.52.41.200:5305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "apK-HWjCPtor9NZ-byTenwAABnE"]
[Sat Aug 29 05:10:21.489210 2026] [security2:error] [pid 1041789:tid 1041990] [client 20.104.49.130:57655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/wp-login.php"] [unique_id "apK-HYv3RhPI65jTFG4LjQAAA1k"]
[Sat Aug 29 05:10:21.496081 2026] [security2:error] [pid 1041789:tid 1041980] [client 20.104.104.62:37553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/gaje.php"] [unique_id "apK-HYv3RhPI65jTFG4LjwAAA08"]
[Sat Aug 29 05:10:21.498278 2026] [security2:error] [pid 1041789:tid 1042035] [client 4.205.62.107:60304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/temp.php"] [unique_id "apK-HYv3RhPI65jTFG4LkAAAA4Y"]
[Sat Aug 29 05:10:21.510282 2026] [security2:error] [pid 1041789:tid 1042041] [client 45.148.10.62:42654] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.yml.fme.mybluehost.me"] [uri "/api/.env"] [unique_id "apK-HYv3RhPI65jTFG4LlAAAA4w"]
[Sat Aug 29 05:10:21.537072 2026] [security2:error] [pid 1321:tid 1527] [client 20.220.204.93:54587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/Geforce.php"] [unique_id "apK-HWjCPtor9NZ-byTerwAABmM"]
[Sat Aug 29 05:10:21.559194 2026] [security2:error] [pid 1041789:tid 1041982] [client 40.83.93.50:12808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/disagraeosc.php"] [unique_id "apK-HYv3RhPI65jTFG4LngAAA1E"]
[Sat Aug 29 05:10:21.566409 2026] [security2:error] [pid 1041789:tid 1042028] [client 20.48.251.3:43876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/hiquido.com/index.php"] [unique_id "apK-HYv3RhPI65jTFG4LnwAAA38"]
[Sat Aug 29 05:10:21.579096 2026] [security2:error] [pid 1041789:tid 1042014] [client 20.104.104.62:20707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/blackcat.php"] [unique_id "apK-HYv3RhPI65jTFG4LoQAAA3E"]
[Sat Aug 29 05:10:21.579295 2026] [security2:error] [pid 1041789:tid 1042018] [client 103.48.146.148:65197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 148.146.48.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK-HYv3RhPI65jTFG4LogAAA3U"]
[Sat Aug 29 05:10:21.579443 2026] [security2:error] [pid 1041789:tid 1042018] [client 103.48.146.148:65197] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK-HYv3RhPI65jTFG4LogAAA3U"]
[Sat Aug 29 05:10:21.605291 2026] [security2:error] [pid 1321:tid 1474] [remote 93.123.109.228:33834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenokie.com"] [uri "/.env.php"] [unique_id "apK-HWjCPtor9NZ-byTeuQAGunM"]
[Sat Aug 29 05:10:21.611273 2026] [security2:error] [pid 1321:tid 1602] [client 4.205.62.107:6935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/05.php"] [unique_id "apK-HWjCPtor9NZ-byTeugAABq0"]
[Sat Aug 29 05:10:21.632184 2026] [security2:error] [pid 1321:tid 1525] [client 93.152.221.156:60079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.loh.zdx.mybluehost.me"] [uri "/info.php"] [unique_id "apK-HWjCPtor9NZ-byTevgAABmE"]
[Sat Aug 29 05:10:21.640434 2026] [security2:error] [pid 1041789:tid 1042019] [client 52.139.37.240:12509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/item.php"] [unique_id "apK-HYv3RhPI65jTFG4LsgAAA3Y"]
[Sat Aug 29 05:10:21.642852 2026] [security2:error] [pid 1321:tid 1513] [client 20.104.104.62:35738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/wp-admin/zwso.php"] [unique_id "apK-HWjCPtor9NZ-byTewAAABlU"]
[Sat Aug 29 05:10:21.665229 2026] [security2:error] [pid 1041789:tid 1041939] [client 45.148.10.62:42654] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.yml.fme.mybluehost.me"] [uri "/.env.bak"] [unique_id "apK-HYv3RhPI65jTFG4LuAAAAyY"]
[Sat Aug 29 05:10:21.690088 2026] [security2:error] [pid 1321:tid 1553] [client 20.196.209.81:22901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-content/db-status.php"] [unique_id "apK-HWjCPtor9NZ-byTezAAABnw"]
[Sat Aug 29 05:10:21.697836 2026] [security2:error] [pid 1041789:tid 1042047] [client 20.48.251.3:46534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/app_local.php"] [unique_id "apK-HYv3RhPI65jTFG4LvgAAA5I"]
[Sat Aug 29 05:10:21.698616 2026] [security2:error] [pid 1041789:tid 1041944] [client 20.220.204.93:55875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/click.php"] [unique_id "apK-HYv3RhPI65jTFG4LvwAAAys"]
[Sat Aug 29 05:10:21.743772 2026] [security2:error] [pid 1321:tid 1495] [client 158.158.54.35:8375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/shell.php"] [unique_id "apK-HWjCPtor9NZ-byTe1gAABkM"]
[Sat Aug 29 05:10:21.775602 2026] [security2:error] [pid 1321:tid 1506] [client 20.104.104.62:23334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/Contrller.php"] [unique_id "apK-HWjCPtor9NZ-byTe3gAABk4"]
[Sat Aug 29 05:10:21.781419 2026] [security2:error] [pid 1321:tid 1519] [client 40.83.93.50:16470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-content/core.php"] [unique_id "apK-HWjCPtor9NZ-byTe3wAABls"]
[Sat Aug 29 05:10:21.817866 2026] [security2:error] [pid 1041789:tid 1041940] [client 20.48.160.90:64595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/adminfuns.php"] [unique_id "apK-HYv3RhPI65jTFG4L3gAAAyc"]
[Sat Aug 29 05:10:21.830966 2026] [security2:error] [pid 1321:tid 1524] [client 20.48.251.3:43993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/xqq.php"] [unique_id "apK-HWjCPtor9NZ-byTe7wAABmA"]
[Sat Aug 29 05:10:21.844114 2026] [security2:error] [pid 1321:tid 1578] [client 52.139.37.240:12501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/jga.php"] [unique_id "apK-HWjCPtor9NZ-byTe8QAABpU"]
[Sat Aug 29 05:10:21.861450 2026] [security2:error] [pid 1321:tid 1512] [client 146.70.36.124:42596] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.allgooddays.org"] [uri "/autodiscover/autodiscover.xml/shop/wp-includes/wlwmanifest.xml"] [unique_id "apK-HWjCPtor9NZ-byTe9QAABlQ"]
[Sat Aug 29 05:10:21.883379 2026] [security2:error] [pid 1041789:tid 1042030] [client 4.232.148.111:20020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/404.php"] [unique_id "apK-HYv3RhPI65jTFG4L6wAAA4E"]
[Sat Aug 29 05:10:21.908222 2026] [security2:error] [pid 1041789:tid 1042055] [client 93.152.221.156:57560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.loh.zdx.mybluehost.me"] [uri "/php.php"] [unique_id "apK-HYv3RhPI65jTFG4L8wAAA5o"]
[Sat Aug 29 05:10:21.914547 2026] [security2:error] [pid 1321:tid 1607] [client 20.104.104.62:37628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/Zeiss.php"] [unique_id "apK-HWjCPtor9NZ-byTfAAAABrI"]
[Sat Aug 29 05:10:21.916526 2026] [access_compat:error] [pid 1041789:tid 1041969] [client 67.20.76.220:18460] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:10:21.921238 2026] [security2:error] [pid 1041789:tid 1042050] [client 4.205.62.107:63987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/gnmlc.php"] [unique_id "apK-HYv3RhPI65jTFG4L-gAAA5U"]
[Sat Aug 29 05:10:21.926564 2026] [security2:error] [pid 1041789:tid 1042038] [client 20.52.41.200:4638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/222.php"] [unique_id "apK-HYv3RhPI65jTFG4L_AAAA4k"]
[Sat Aug 29 05:10:21.927044 2026] [access_compat:error] [pid 1041789:tid 1041978] [client 67.20.76.220:18456] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:10:21.929183 2026] [security2:error] [pid 1321:tid 1542] [client 40.83.93.50:8536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/blog.php"] [unique_id "apK-HWjCPtor9NZ-byTfAgAABnI"]
[Sat Aug 29 05:10:21.932218 2026] [security2:error] [pid 1041789:tid 1041967] [client 20.63.219.114:17937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/post.php"] [unique_id "apK-HYv3RhPI65jTFG4L_QAAA0I"]
[Sat Aug 29 05:10:21.940774 2026] [security2:error] [pid 1041789:tid 1042034] [client 20.220.204.93:65172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/xs.php"] [unique_id "apK-HYv3RhPI65jTFG4MAAAAA4U"]
[Sat Aug 29 05:10:21.944240 2026] [security2:error] [pid 1321:tid 1534] [client 20.151.200.44:22227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/zafir1.php"] [unique_id "apK-HWjCPtor9NZ-byTfBgAABmo"]
[Sat Aug 29 05:10:21.950855 2026] [security2:error] [pid 1041789:tid 1042034] [client 158.23.147.79:63236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-content/radio.php"] [unique_id "apK-HYv3RhPI65jTFG4MAgAAA4U"]
[Sat Aug 29 05:10:21.969597 2026] [security2:error] [pid 1041789:tid 1041954] [client 20.48.251.3:43846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/or.php"] [unique_id "apK-HYv3RhPI65jTFG4MBwAAAzU"]
[Sat Aug 29 05:10:21.975149 2026] [security2:error] [pid 1321:tid 1528] [client 20.48.250.41:29658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/gdn.php"] [unique_id "apK-HWjCPtor9NZ-byTfEAAABmQ"]
[Sat Aug 29 05:10:21.997142 2026] [security2:error] [pid 1321:tid 1566] [client 158.23.147.79:5903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK-HWjCPtor9NZ-byTfGAAABok"]
[Sat Aug 29 05:10:22.006978 2026] [security2:error] [pid 1321:tid 1574] [client 20.48.250.41:53487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/wp-scr1pts.php"] [unique_id "apK-HmjCPtor9NZ-byTfGwAABpE"]
[Sat Aug 29 05:10:22.027299 2026] [security2:error] [pid 1041789:tid 1042035] [client 20.48.250.41:50251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/a332.php"] [unique_id "apK-Hov3RhPI65jTFG4MFQAAA4Y"]
[Sat Aug 29 05:10:22.041530 2026] [security2:error] [pid 1321:tid 1592] [client 52.139.37.240:12533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/mac.php"] [unique_id "apK-HmjCPtor9NZ-byTfJAAABqM"]
[Sat Aug 29 05:10:22.044700 2026] [security2:error] [pid 1321:tid 1573] [client 197.219.150.206:55840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK-HmjCPtor9NZ-byTfJgAABpA"]
[Sat Aug 29 05:10:22.044851 2026] [security2:error] [pid 1321:tid 1573] [client 197.219.150.206:55840] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK-HmjCPtor9NZ-byTfJgAABpA"]
[Sat Aug 29 05:10:22.051083 2026] [security2:error] [pid 1041789:tid 1042043] [client 20.104.104.62:23311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/ww2.php"] [unique_id "apK-Hov3RhPI65jTFG4MHAAAA44"]
[Sat Aug 29 05:10:22.090695 2026] [security2:error] [pid 1321:tid 1497] [client 20.48.250.41:62412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-HmjCPtor9NZ-byTfLAAABkU"]
[Sat Aug 29 05:10:22.099608 2026] [security2:error] [pid 1321:tid 1563] [client 20.48.251.3:9285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/i.php"] [unique_id "apK-HmjCPtor9NZ-byTfLQAABoY"]
[Sat Aug 29 05:10:22.108451 2026] [security2:error] [pid 1321:tid 1589] [client 20.196.209.81:20149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-content/disagrsxr.php"] [unique_id "apK-HmjCPtor9NZ-byTfLgAABqA"]
[Sat Aug 29 05:10:22.117011 2026] [authz_core:error] [pid 1321:tid 1489] [client 34.169.171.101:25506] AH01630: client denied by server configuration: /var/www/html/.htpasswd
[Sat Aug 29 05:10:22.118727 2026] [security2:error] [pid 1321:tid 1523] [client 34.169.171.101:25536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.171.169.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "forensicengineernj.com"] [uri "/pi.php"] [unique_id "apK-HmjCPtor9NZ-byTfMQAABl8"]
[Sat Aug 29 05:10:22.121587 2026] [security2:error] [pid 1041789:tid 1042007] [client 34.169.171.101:25494] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-Hov3RhPI65jTFG4MJAAAA2o"]
[Sat Aug 29 05:10:22.123730 2026] [security2:error] [pid 1321:tid 1504] [client 34.169.171.101:25522] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "forensicengineernj.com"] [uri "/i.php"] [unique_id "apK-HmjCPtor9NZ-byTfNQAABkw"]
[Sat Aug 29 05:10:22.124176 2026] [security2:error] [pid 1321:tid 1517] [client 34.169.171.101:25488] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "forensicengineernj.com"] [uri "/cgi-sys/404.html"] [unique_id "apK-HmjCPtor9NZ-byTfMgAABlk"]
[Sat Aug 29 05:10:22.126057 2026] [security2:error] [pid 1321:tid 1490] [client 34.169.171.101:25582] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-HmjCPtor9NZ-byTfMwAABj4"]
[Sat Aug 29 05:10:22.127271 2026] [security2:error] [pid 1041789:tid 1041975] [client 20.220.204.93:54581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/ms.php"] [unique_id "apK-Hov3RhPI65jTFG4MKQAAA0o"]
[Sat Aug 29 05:10:22.130383 2026] [security2:error] [pid 1041789:tid 1041975] [client 45.148.10.62:42654] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.yml.fme.mybluehost.me"] [uri "/stripe/.env"] [unique_id "apK-Hov3RhPI65jTFG4MKgAAA0o"]
[Sat Aug 29 05:10:22.134024 2026] [security2:error] [pid 1041789:tid 1042037] [client 20.48.250.41:49956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/s1.php"] [unique_id "apK-Hov3RhPI65jTFG4MKwAAA4g"]
[Sat Aug 29 05:10:22.138644 2026] [security2:error] [pid 1041789:tid 1041987] [client 20.48.160.90:63443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/classwithtostring.php"] [unique_id "apK-Hov3RhPI65jTFG4MLQAAA1Y"]
[Sat Aug 29 05:10:22.141246 2026] [security2:error] [pid 1321:tid 1531] [client 20.48.250.41:50305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/f2.php"] [unique_id "apK-HmjCPtor9NZ-byTfPgAABmc"]
[Sat Aug 29 05:10:22.141256 2026] [security2:error] [pid 1321:tid 1571] [client 34.169.171.101:25624] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/_next/.env"] [unique_id "apK-HmjCPtor9NZ-byTfPQAABo4"]
[Sat Aug 29 05:10:22.142766 2026] [security2:error] [pid 1321:tid 1537] [client 34.169.171.101:25630] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/.env"] [unique_id "apK-HmjCPtor9NZ-byTfPwAABm0"]
[Sat Aug 29 05:10:22.142857 2026] [security2:error] [pid 1321:tid 1537] [client 34.169.171.101:25630] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "forensicengineernj.com"] [uri "/.env"] [unique_id "apK-HmjCPtor9NZ-byTfPwAABm0"]
[Sat Aug 29 05:10:22.143970 2026] [security2:error] [pid 1321:tid 1547] [client 34.169.171.101:25602] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/.env~"] [unique_id "apK-HmjCPtor9NZ-byTfOwAABnY"]
[Sat Aug 29 05:10:22.157880 2026] [security2:error] [pid 1321:tid 1507] [client 20.48.250.41:50148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/num.php"] [unique_id "apK-HmjCPtor9NZ-byTfRAAABk8"]
[Sat Aug 29 05:10:22.158859 2026] [security2:error] [pid 1041789:tid 1042019] [client 34.169.171.101:25494] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.bash_history"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/.bash_history"] [unique_id "apK-Hov3RhPI65jTFG4MMAAAA3Y"]
[Sat Aug 29 05:10:22.164091 2026] [security2:error] [pid 1321:tid 1591] [client 34.169.171.101:25488] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-HmjCPtor9NZ-byTfRQAABqI"], referer: https://forensicengineernj.com/Dockerfile
[Sat Aug 29 05:10:22.166352 2026] [security2:error] [pid 1321:tid 1603] [client 34.169.171.101:25582] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-HmjCPtor9NZ-byTfRwAABq4"], referer: https://forensicengineernj.com/.gradle/gradle.properties
[Sat Aug 29 05:10:22.181657 2026] [security2:error] [pid 1041789:tid 1041963] [client 93.152.221.156:53581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.loh.zdx.mybluehost.me"] [uri "/php_info.php"] [unique_id "apK-Hov3RhPI65jTFG4MNwAAAz4"]
[Sat Aug 29 05:10:22.191050 2026] [security2:error] [pid 1321:tid 1565] [client 158.158.54.35:30561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/elp.php"] [unique_id "apK-HmjCPtor9NZ-byTfUAAABog"]
[Sat Aug 29 05:10:22.193739 2026] [security2:error] [pid 1321:tid 1502] [client 158.23.147.79:58071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK-HmjCPtor9NZ-byTfUQAABko"]
[Sat Aug 29 05:10:22.195011 2026] [security2:error] [pid 1321:tid 1550] [client 20.104.49.130:36767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pvillusions.com"] [uri "/zoo2.php"] [unique_id "apK-HmjCPtor9NZ-byTfUgAABnk"]
[Sat Aug 29 05:10:22.197626 2026] [security2:error] [pid 1321:tid 1558] [client 20.48.250.41:50283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/ws66.php"] [unique_id "apK-HmjCPtor9NZ-byTfVAAABoE"]
[Sat Aug 29 05:10:22.200746 2026] [security2:error] [pid 1321:tid 1586] [client 20.104.104.62:35745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/anz.php"] [unique_id "apK-HmjCPtor9NZ-byTfVQAABp0"]
[Sat Aug 29 05:10:22.225068 2026] [security2:error] [pid 1321:tid 1488] [client 40.83.93.50:12807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/about.php525"] [unique_id "apK-HmjCPtor9NZ-byTfWwAABjw"]
[Sat Aug 29 05:10:22.234858 2026] [security2:error] [pid 1041789:tid 1041933] [client 20.48.251.3:43890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/aww.php"] [unique_id "apK-Hov3RhPI65jTFG4MQQAAAyA"]
[Sat Aug 29 05:10:22.238737 2026] [security2:error] [pid 1321:tid 1556] [client 52.139.37.240:12870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK-HmjCPtor9NZ-byTfXQAABn8"]
[Sat Aug 29 05:10:22.245206 2026] [security2:error] [pid 1321:tid 1529] [client 40.83.93.50:21598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-content/db-status.php"] [unique_id "apK-HmjCPtor9NZ-byTfXgAABmU"]
[Sat Aug 29 05:10:22.248787 2026] [security2:error] [pid 1321:tid 1548] [client 114.119.148.233:36583] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.classiclightingusa.com"] [uri "/catalog/index.php/cPath/46/sort/3a/action/buy_now/products_id/656/osCsid/d82fe3bbd9b8fea836b4865358f3b5c0"] [unique_id "apK-HmjCPtor9NZ-byTfYAAABnc"], referer: http://www.classiclightingusa.com/catalog/index.php/cPath/46/osCsid/d82fe3bbd9b8fea836b4865358f3b5c0
[Sat Aug 29 05:10:22.257639 2026] [security2:error] [pid 1321:tid 1536] [client 158.23.147.79:14229] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcontacts.deargabriel.com"] [uri "/1.php"] [unique_id "apK-HmjCPtor9NZ-byTfYwAABmw"]
[Sat Aug 29 05:10:22.257759 2026] [security2:error] [pid 1321:tid 1536] [client 158.23.147.79:14229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/1.php"] [unique_id "apK-HmjCPtor9NZ-byTfYwAABmw"]
[Sat Aug 29 05:10:22.260088 2026] [security2:error] [pid 1321:tid 1602] [client 20.48.250.41:64848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-HmjCPtor9NZ-byTfZAAABq0"]
[Sat Aug 29 05:10:22.271527 2026] [security2:error] [pid 1041789:tid 1042026] [client 158.23.147.79:55903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/hehehehe.php"] [unique_id "apK-Hov3RhPI65jTFG4MSQAAA30"]
[Sat Aug 29 05:10:22.297932 2026] [security2:error] [pid 1041789:tid 1042017] [client 20.48.250.41:30592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/0byte.php"] [unique_id "apK-Hov3RhPI65jTFG4MUwAAA3Q"]
[Sat Aug 29 05:10:22.299354 2026] [security2:error] [pid 1321:tid 1549] [client 20.63.219.114:9185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/flower.php"] [unique_id "apK-HmjCPtor9NZ-byTfbwAABng"]
[Sat Aug 29 05:10:22.303464 2026] [security2:error] [pid 1321:tid 1495] [client 45.148.10.62:42678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.yim.emf.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "apK-HmjCPtor9NZ-byTfcAAABkM"]
[Sat Aug 29 05:10:22.317736 2026] [security2:error] [pid 1321:tid 1506] [client 20.48.250.41:50345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/grsiuk.php"] [unique_id "apK-HmjCPtor9NZ-byTfcgAABk4"]
[Sat Aug 29 05:10:22.338876 2026] [security2:error] [pid 1041789:tid 1041992] [client 20.48.250.41:53411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/a4.php"] [unique_id "apK-Hov3RhPI65jTFG4MWgAAA1s"]
[Sat Aug 29 05:10:22.359209 2026] [security2:error] [pid 1041789:tid 1042020] [client 20.104.104.62:23347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/bge.php"] [unique_id "apK-Hov3RhPI65jTFG4MXwAAA3c"]
[Sat Aug 29 05:10:22.363178 2026] [security2:error] [pid 1321:tid 1580] [client 4.232.148.111:27567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/php.php"] [unique_id "apK-HmjCPtor9NZ-byTfewAABpc"]
[Sat Aug 29 05:10:22.371497 2026] [security2:error] [pid 1041789:tid 1041968] [client 158.23.147.79:6031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-admin/images/index.php"] [unique_id "apK-Hov3RhPI65jTFG4MYwAAA0M"]
[Sat Aug 29 05:10:22.374230 2026] [security2:error] [pid 1041789:tid 1041962] [client 20.48.250.41:50301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/ws68.php"] [unique_id "apK-Hov3RhPI65jTFG4MZAAAAz0"]
[Sat Aug 29 05:10:22.380290 2026] [security2:error] [pid 1321:tid 1522] [client 20.52.41.200:4751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/mini.php"] [unique_id "apK-HmjCPtor9NZ-byTfggAABl4"]
[Sat Aug 29 05:10:22.380444 2026] [security2:error] [pid 1041789:tid 1042055] [client 20.48.251.3:9516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/sgd.php"] [unique_id "apK-Hov3RhPI65jTFG4MaAAAA5o"]
[Sat Aug 29 05:10:22.403350 2026] [security2:error] [pid 1321:tid 1551] [client 20.220.204.93:61641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/zu.php"] [unique_id "apK-HmjCPtor9NZ-byTfhgAABno"]
[Sat Aug 29 05:10:22.414002 2026] [security2:error] [pid 1041789:tid 1042038] [client 74.248.24.12:4392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-content/themes/pridmag/il.php"] [unique_id "apK-Hov3RhPI65jTFG4MbAAAA4k"]
[Sat Aug 29 05:10:22.417400 2026] [security2:error] [pid 1321:tid 1516] [client 40.83.93.50:11602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/bypass.php"] [unique_id "apK-HmjCPtor9NZ-byTfiQAABlg"]
[Sat Aug 29 05:10:22.433116 2026] [security2:error] [pid 1041789:tid 1041954] [client 20.48.250.41:64803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/ff1.php"] [unique_id "apK-Hov3RhPI65jTFG4MdAAAAzU"]
[Sat Aug 29 05:10:22.439112 2026] [security2:error] [pid 1041789:tid 1041894] [remote 93.123.109.228:33546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldstone.com"] [uri "/.wp-config.php.swp"] [unique_id "apK-Hov3RhPI65jTFG4MdgADKFw"]
[Sat Aug 29 05:10:22.441713 2026] [security2:error] [pid 1041789:tid 1042052] [client 52.139.37.240:12478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK-Hov3RhPI65jTFG4MdwAAA5c"]
[Sat Aug 29 05:10:22.454625 2026] [security2:error] [pid 1041789:tid 1041938] [client 93.152.221.156:65176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.loh.zdx.mybluehost.me"] [uri "/i.php"] [unique_id "apK-Hov3RhPI65jTFG4MeAAAAyU"]
[Sat Aug 29 05:10:22.460204 2026] [security2:error] [pid 1321:tid 1576] [client 20.104.104.62:47556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/sure.php"] [unique_id "apK-HmjCPtor9NZ-byTfjgAABpM"]
[Sat Aug 29 05:10:22.461803 2026] [security2:error] [pid 1321:tid 1501] [client 146.70.36.124:42608] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.allgooddays.org"] [uri "/autodiscover/autodiscover.xml/wp1/wp-includes/wlwmanifest.xml"] [unique_id "apK-HmjCPtor9NZ-byTfjwAABkk"]
[Sat Aug 29 05:10:22.468805 2026] [security2:error] [pid 1321:tid 1614] [client 20.48.250.41:50166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/tfm.php"] [unique_id "apK-HmjCPtor9NZ-byTfkQAABrk"]
[Sat Aug 29 05:10:22.477319 2026] [security2:error] [pid 1041789:tid 1041969] [client 20.48.250.41:49986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/xr.php"] [unique_id "apK-Hov3RhPI65jTFG4MfAAAA0Q"]
[Sat Aug 29 05:10:22.490738 2026] [security2:error] [pid 1041789:tid 1042053] [client 20.48.250.41:29621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/wp-scr1pts.php"] [unique_id "apK-Hov3RhPI65jTFG4MgAAAA5g"]
[Sat Aug 29 05:10:22.505402 2026] [security2:error] [pid 1321:tid 1585] [client 20.48.160.90:64560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK-HmjCPtor9NZ-byTfnAAABpw"]
[Sat Aug 29 05:10:22.510813 2026] [security2:error] [pid 1041789:tid 1042005] [client 20.196.209.81:18007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-content/f35.php"] [unique_id "apK-Hov3RhPI65jTFG4MhgAAA2g"]
[Sat Aug 29 05:10:22.515705 2026] [security2:error] [pid 1041789:tid 1042041] [client 20.104.104.62:35762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/wp-ana.php"] [unique_id "apK-Hov3RhPI65jTFG4MiQAAA4w"]
[Sat Aug 29 05:10:22.517631 2026] [security2:error] [pid 1321:tid 1564] [client 20.220.204.93:54642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/zxekqlxb.php"] [unique_id "apK-HmjCPtor9NZ-byTfnwAABoc"]
[Sat Aug 29 05:10:22.526409 2026] [security2:error] [pid 1041789:tid 1041907] [remote 93.123.109.228:33772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldperformanceinc.com"] [uri "/.wp-config.php.swp"] [unique_id "apK-Hov3RhPI65jTFG4MjQADMGk"]
[Sat Aug 29 05:10:22.527532 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.48.251.3:43858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/gecko-litespeed.php"] [unique_id "apK-Hov3RhPI65jTFG4MjgAAA3o"]
[Sat Aug 29 05:10:22.541040 2026] [security2:error] [pid 1321:tid 1594] [client 103.240.76.112:43076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK-HmjCPtor9NZ-byTfpQAABqU"]
[Sat Aug 29 05:10:22.541182 2026] [security2:error] [pid 1321:tid 1594] [client 103.240.76.112:43076] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK-HmjCPtor9NZ-byTfpQAABqU"]
[Sat Aug 29 05:10:22.547086 2026] [security2:error] [pid 1041789:tid 1041982] [client 20.48.250.41:50198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/users.php"] [unique_id "apK-Hov3RhPI65jTFG4MlAAAA1E"]
[Sat Aug 29 05:10:22.589668 2026] [security2:error] [pid 1041789:tid 1042006] [client 20.48.250.41:64827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/t.php"] [unique_id "apK-Hov3RhPI65jTFG4MmgAAA2k"]
[Sat Aug 29 05:10:22.589941 2026] [security2:error] [pid 1321:tid 1542] [client 131.226.2.41:35472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.2.226.131.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "grizzcustomcabinets.com"] [uri "/wp-login.php"] [unique_id "apK-HmjCPtor9NZ-byTfqQAABnI"]
[Sat Aug 29 05:10:22.599868 2026] [security2:error] [pid 1041789:tid 1041939] [client 20.151.200.44:22222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/console.php"] [unique_id "apK-Hov3RhPI65jTFG4MnwAAAyY"]
[Sat Aug 29 05:10:22.602345 2026] [security2:error] [pid 1321:tid 1583] [client 34.50.189.51:4152] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/key.pem"] [unique_id "apK-HmjCPtor9NZ-byTfrwAABpo"]
[Sat Aug 29 05:10:22.606292 2026] [security2:error] [pid 1321:tid 1600] [client 34.50.189.51:4150] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/id_dsa"] [unique_id "apK-HmjCPtor9NZ-byTfsAAABqs"]
[Sat Aug 29 05:10:22.608140 2026] [core:error] [pid 1321:tid 1552] [client 34.50.189.51:4146] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:22.608164 2026] [core:error] [pid 1321:tid 1552] [client 34.50.189.51:4146] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:22.608604 2026] [security2:error] [pid 1321:tid 1500] [client 34.50.189.51:4186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.189.50.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "discocollective.kriveloff-associates.com"] [uri "/config.php"] [unique_id "apK-HmjCPtor9NZ-byTftAAABkg"]
[Sat Aug 29 05:10:22.608720 2026] [security2:error] [pid 1321:tid 1500] [client 34.50.189.51:4186] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "409"] [hostname "discocollective.kriveloff-associates.com"] [uri "/config.php"] [unique_id "apK-HmjCPtor9NZ-byTftAAABkg"]
[Sat Aug 29 05:10:22.609397 2026] [security2:error] [pid 1321:tid 1496] [client 34.50.189.51:4174] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "discocollective.kriveloff-associates.com"] [uri "/wp-config.php.bak"] [unique_id "apK-HmjCPtor9NZ-byTftgAABkQ"]
[Sat Aug 29 05:10:22.609833 2026] [security2:error] [pid 1041789:tid 1042019] [client 34.50.189.51:4168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.189.50.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "discocollective.kriveloff-associates.com"] [uri "/wp-config.php"] [unique_id "apK-Hov3RhPI65jTFG4MpQAAA3Y"]
[Sat Aug 29 05:10:22.610703 2026] [security2:error] [pid 1321:tid 1592] [client 34.50.189.51:4138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/id_rsa"] [unique_id "apK-HmjCPtor9NZ-byTftQAABqM"]
[Sat Aug 29 05:10:22.610850 2026] [security2:error] [pid 1321:tid 1563] [client 34.50.189.51:4216] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "discocollective.kriveloff-associates.com"] [uri "/application.yml"] [unique_id "apK-HmjCPtor9NZ-byTfuAAABoY"]
[Sat Aug 29 05:10:22.610903 2026] [security2:error] [pid 1321:tid 1589] [client 4.205.62.107:58371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/aww.php"] [unique_id "apK-HmjCPtor9NZ-byTftwAABqA"]
[Sat Aug 29 05:10:22.610987 2026] [security2:error] [pid 1321:tid 1545] [client 34.50.189.51:4180] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "discocollective.kriveloff-associates.com"] [uri "/wp-config.php.old"] [unique_id "apK-HmjCPtor9NZ-byTfuQAABnU"]
[Sat Aug 29 05:10:22.611929 2026] [core:error] [pid 1041789:tid 1041987] [client 34.50.189.51:4208] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:22.611931 2026] [core:error] [pid 1321:tid 1596] [client 34.50.189.51:4164] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:22.611946 2026] [core:error] [pid 1041789:tid 1041987] [client 34.50.189.51:4208] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:22.611950 2026] [core:error] [pid 1321:tid 1596] [client 34.50.189.51:4164] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:22.612799 2026] [security2:error] [pid 1041789:tid 1041942] [client 34.50.189.51:4202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.189.50.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "discocollective.kriveloff-associates.com"] [uri "/config.php.bak"] [unique_id "apK-Hov3RhPI65jTFG4MpgAAAyk"]
[Sat Aug 29 05:10:22.615132 2026] [core:error] [pid 1041789:tid 1041975] [client 34.50.189.51:4160] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:22.615149 2026] [core:error] [pid 1041789:tid 1041975] [client 34.50.189.51:4160] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:22.615568 2026] [security2:error] [pid 1321:tid 1533] [client 34.50.189.51:4162] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/privatekey.key"] [unique_id "apK-HmjCPtor9NZ-byTfsgAABmk"]
[Sat Aug 29 05:10:22.615652 2026] [security2:error] [pid 1321:tid 1497] [client 34.50.189.51:4214] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "discocollective.kriveloff-associates.com"] [uri "/config/secrets.yml"] [unique_id "apK-HmjCPtor9NZ-byTfugAABkU"]
[Sat Aug 29 05:10:22.620210 2026] [core:error] [pid 1321:tid 1491] [client 34.50.189.51:4148] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:22.620227 2026] [core:error] [pid 1321:tid 1491] [client 34.50.189.51:4148] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:22.625371 2026] [security2:error] [pid 1321:tid 1590] [client 158.158.54.35:30578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-content/cong.php"] [unique_id "apK-HmjCPtor9NZ-byTfvAAABqE"]
[Sat Aug 29 05:10:22.631472 2026] [security2:error] [pid 1321:tid 1588] [client 20.48.250.41:53485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/Geforce.php"] [unique_id "apK-HmjCPtor9NZ-byTfvwAABp8"]
[Sat Aug 29 05:10:22.632959 2026] [security2:error] [pid 1321:tid 1531] [client 20.104.49.130:58184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/load.php"] [unique_id "apK-HmjCPtor9NZ-byTfwAAABmc"]
[Sat Aug 29 05:10:22.635840 2026] [security2:error] [pid 1041789:tid 1041961] [client 20.48.250.41:29659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/num.php"] [unique_id "apK-Hov3RhPI65jTFG4MqwAAAzw"]
[Sat Aug 29 05:10:22.640314 2026] [security2:error] [pid 1321:tid 1574] [client 52.139.37.240:12531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/zafir1.php"] [unique_id "apK-HmjCPtor9NZ-byTfwwAABpE"]
[Sat Aug 29 05:10:22.645332 2026] [security2:error] [pid 1321:tid 1518] [client 4.205.62.107:62952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/fm.php"] [unique_id "apK-HmjCPtor9NZ-byTfxAAABlo"]
[Sat Aug 29 05:10:22.651034 2026] [security2:error] [pid 1321:tid 1510] [client 20.48.250.41:30684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/h02ugyh.php"] [unique_id "apK-HmjCPtor9NZ-byTfyQAABlI"]
[Sat Aug 29 05:10:22.654442 2026] [security2:error] [pid 1041789:tid 1041943] [client 20.104.104.62:48015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/secret.php"] [unique_id "apK-Hov3RhPI65jTFG4MsQAAAyo"]
[Sat Aug 29 05:10:22.665924 2026] [security2:error] [pid 1321:tid 1507] [client 20.48.251.3:43855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/motu.php"] [unique_id "apK-HmjCPtor9NZ-byTfzQAABk8"]
[Sat Aug 29 05:10:22.668014 2026] [security2:error] [pid 1041789:tid 1041976] [client 20.63.219.114:1925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/meta.php"] [unique_id "apK-Hov3RhPI65jTFG4MtgAAA0s"]
[Sat Aug 29 05:10:22.712591 2026] [security2:error] [pid 1041789:tid 1042014] [client 40.83.93.50:7055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/spip.php"] [unique_id "apK-Hov3RhPI65jTFG4MvgAAA3E"]
[Sat Aug 29 05:10:22.715728 2026] [security2:error] [pid 1321:tid 1534] [client 40.83.93.50:16509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-content/disagrsxr.php"] [unique_id "apK-HmjCPtor9NZ-byTf2AAABmo"]
[Sat Aug 29 05:10:22.727699 2026] [security2:error] [pid 1041789:tid 1042055] [client 93.152.221.156:64662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.loh.zdx.mybluehost.me"] [uri "/pi.php"] [unique_id "apK-Hov3RhPI65jTFG4MwAAAA5o"]
[Sat Aug 29 05:10:22.737592 2026] [security2:error] [pid 1041789:tid 1042038] [client 20.48.160.90:62303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/5PJcpMFsD8B.php"] [unique_id "apK-Hov3RhPI65jTFG4MxgAAA4k"]
[Sat Aug 29 05:10:22.763747 2026] [security2:error] [pid 1041789:tid 1041954] [client 45.148.10.62:42654] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.yml.fme.mybluehost.me"] [uri "/backend/.env"] [unique_id "apK-Hov3RhPI65jTFG4MygAAAzU"]
[Sat Aug 29 05:10:22.778349 2026] [security2:error] [pid 1041789:tid 1041970] [client 20.48.250.41:50196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/bzjdlofz.php"] [unique_id "apK-Hov3RhPI65jTFG4MzAAAA0U"]
[Sat Aug 29 05:10:22.782983 2026] [security2:error] [pid 1041789:tid 1042011] [client 20.48.250.41:50342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/a4.php"] [unique_id "apK-Hov3RhPI65jTFG4MzgAAA24"]
[Sat Aug 29 05:10:22.790585 2026] [security2:error] [pid 1041789:tid 1041957] [client 20.48.250.41:62419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/erty.php"] [unique_id "apK-Hov3RhPI65jTFG4MzwAAAzg"]
[Sat Aug 29 05:10:22.794718 2026] [security2:error] [pid 1041789:tid 1041938] [client 4.205.62.107:6855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/wp-blog.php"] [unique_id "apK-Hov3RhPI65jTFG4M0gAAAyU"]
[Sat Aug 29 05:10:22.796863 2026] [security2:error] [pid 1041789:tid 1041971] [client 20.48.251.3:9518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/rpk.php"] [unique_id "apK-Hov3RhPI65jTFG4M1AAAA0Y"]
[Sat Aug 29 05:10:22.802633 2026] [security2:error] [pid 1041789:tid 1041969] [client 20.48.250.41:53403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/click.php"] [unique_id "apK-Hov3RhPI65jTFG4M1wAAA0Q"]
[Sat Aug 29 05:10:22.803779 2026] [security2:error] [pid 1321:tid 1568] [client 20.104.104.62:37572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/pro.php"] [unique_id "apK-HmjCPtor9NZ-byTf6AAABos"]
[Sat Aug 29 05:10:22.805172 2026] [autoindex:error] [pid 1041789:tid 1041912] [remote 45.148.10.62:42684] AH01276: Cannot serve directory /home3/yimemfmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:10:22.814082 2026] [security2:error] [pid 1321:tid 1488] [client 20.104.104.62:64733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/dl.php"] [unique_id "apK-HmjCPtor9NZ-byTf6gAABjw"]
[Sat Aug 29 05:10:22.818395 2026] [security2:error] [pid 1321:tid 1556] [client 20.48.250.41:49980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/xxw.php"] [unique_id "apK-HmjCPtor9NZ-byTf6wAABn8"]
[Sat Aug 29 05:10:22.825053 2026] [security2:error] [pid 1041789:tid 1042054] [client 20.220.204.93:55304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/init.php"] [unique_id "apK-Hov3RhPI65jTFG4M3wAAA5k"]
[Sat Aug 29 05:10:22.830744 2026] [security2:error] [pid 1041789:tid 1041960] [client 4.232.148.111:1026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/init.php"] [unique_id "apK-Hov3RhPI65jTFG4M4AAAAzs"]
[Sat Aug 29 05:10:22.838216 2026] [security2:error] [pid 1321:tid 1502] [client 52.139.37.240:12465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/abc.php"] [unique_id "apK-HmjCPtor9NZ-byTf8QAABko"]
[Sat Aug 29 05:10:22.840010 2026] [security2:error] [pid 1041789:tid 1041950] [client 20.52.41.200:4386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/aa.php"] [unique_id "apK-Hov3RhPI65jTFG4M4QAAAzE"]
[Sat Aug 29 05:10:22.851939 2026] [security2:error] [pid 1041789:tid 1041956] [client 20.104.49.130:39069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/as.php"] [unique_id "apK-Hov3RhPI65jTFG4M5QAAAzc"]
[Sat Aug 29 05:10:22.891965 2026] [security2:error] [pid 1041789:tid 1041977] [client 40.83.93.50:8256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/extractable-loader-head.php"] [unique_id "apK-Hov3RhPI65jTFG4M8QAAA0w"]
[Sat Aug 29 05:10:22.900777 2026] [security2:error] [pid 1321:tid 1495] [client 20.220.204.93:65252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/lanka.php"] [unique_id "apK-HmjCPtor9NZ-byTf_gAABkM"]
[Sat Aug 29 05:10:22.903643 2026] [security2:error] [pid 1041789:tid 1042028] [client 91.92.47.191:45838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.corrigansbasement.com"] [uri "/settings.php"] [unique_id "apK-Hov3RhPI65jTFG4M9QAAA38"]
[Sat Aug 29 05:10:22.906974 2026] [security2:error] [pid 1041789:tid 1041983] [client 20.196.209.81:17372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-content/index.php"] [unique_id "apK-Hov3RhPI65jTFG4M9gAAA1I"]
[Sat Aug 29 05:10:22.915583 2026] [security2:error] [pid 1041789:tid 1042044] [client 45.148.10.62:42654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.yml.fme.mybluehost.me"] [uri "/test.php"] [unique_id "apK-Hov3RhPI65jTFG4M-gAAA48"]
[Sat Aug 29 05:10:22.928702 2026] [security2:error] [pid 1041789:tid 1042037] [client 20.48.250.41:50278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/selesai.php"] [unique_id "apK-Hov3RhPI65jTFG4M-wAAA4g"]
[Sat Aug 29 05:10:22.937399 2026] [security2:error] [pid 1321:tid 1394] [remote 93.123.109.228:33158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.group3-llc.com"] [uri "/config.php"] [unique_id "apK-HmjCPtor9NZ-byTgBwAGtCQ"]
[Sat Aug 29 05:10:22.942899 2026] [security2:error] [pid 1321:tid 1562] [client 20.48.251.3:9301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/ms.php"] [unique_id "apK-HmjCPtor9NZ-byTgCAAABoU"]
[Sat Aug 29 05:10:22.945313 2026] [security2:error] [pid 1041789:tid 1042034] [client 74.248.24.12:19986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/assets/images/doc.php"] [unique_id "apK-Hov3RhPI65jTFG4M_wAAA4U"]
[Sat Aug 29 05:10:22.946117 2026] [security2:error] [pid 1321:tid 1562] [client 20.48.250.41:53413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/ms.php"] [unique_id "apK-HmjCPtor9NZ-byTgDAAABoU"]
[Sat Aug 29 05:10:22.951906 2026] [security2:error] [pid 1321:tid 1499] [client 20.48.250.41:29665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/tfm.php"] [unique_id "apK-HmjCPtor9NZ-byTgDgAABkc"]
[Sat Aug 29 05:10:22.955216 2026] [security2:error] [pid 1041789:tid 1041823] [remote 93.123.109.228:33128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/config.php"] [unique_id "apK-Hov3RhPI65jTFG4NAgADjRU"]
[Sat Aug 29 05:10:22.961262 2026] [access_compat:error] [pid 1321:tid 1598] [client 67.20.76.220:18508] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:10:22.974722 2026] [security2:error] [pid 1321:tid 1512] [client 20.48.250.41:64893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/0x.php"] [unique_id "apK-HmjCPtor9NZ-byTgEwAABlQ"]
[Sat Aug 29 05:10:22.979054 2026] [security2:error] [pid 1321:tid 1516] [client 20.104.104.62:37614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/999.php"] [unique_id "apK-HmjCPtor9NZ-byTgGQAABlg"]
[Sat Aug 29 05:10:22.984184 2026] [access_compat:error] [pid 1041789:tid 1042001] [client 67.20.76.220:18494] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:10:22.997534 2026] [security2:error] [pid 1321:tid 1484] [remote 93.123.109.228:33834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenokie.com"] [uri "/.wp-config.php.swp"] [unique_id "apK-HmjCPtor9NZ-byTgGwAGun0"]
[Sat Aug 29 05:10:23.003639 2026] [security2:error] [pid 1321:tid 1572] [client 91.92.47.191:45848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantgardening.rocworx.com"] [uri "/links.php"] [unique_id "apK-H2jCPtor9NZ-byTgHQAABo8"]
[Sat Aug 29 05:10:23.004007 2026] [security2:error] [pid 1321:tid 1597] [client 57.141.14.12:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/page/38/"] [unique_id "apK-HmjCPtor9NZ-byTgGgAABqg"]
[Sat Aug 29 05:10:23.038780 2026] [security2:error] [pid 1321:tid 1582] [client 52.139.37.240:12471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/c1.php"] [unique_id "apK-H2jCPtor9NZ-byTgJQAABpk"]
[Sat Aug 29 05:10:23.052020 2026] [security2:error] [pid 1041789:tid 1042046] [client 146.70.36.124:42616] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.allgooddays.org"] [uri "/autodiscover/autodiscover.xml/test/wp-includes/wlwmanifest.xml"] [unique_id "apK-H4v3RhPI65jTFG4NGAAAA5E"]
[Sat Aug 29 05:10:23.056993 2026] [security2:error] [pid 1321:tid 1458] [remote 93.123.109.228:33304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/config.php"] [unique_id "apK-H2jCPtor9NZ-byTgJwAGs2M"]
[Sat Aug 29 05:10:23.058001 2026] [security2:error] [pid 1321:tid 1593] [client 4.205.62.107:63986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/koiy.php"] [unique_id "apK-H2jCPtor9NZ-byTgKAAABqQ"]
[Sat Aug 29 05:10:23.058840 2026] [security2:error] [pid 1041789:tid 1042055] [client 158.23.147.79:60171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-admin/dropdown.php"] [unique_id "apK-H4v3RhPI65jTFG4NGQAAA5o"]
[Sat Aug 29 05:10:23.067487 2026] [security2:error] [pid 1321:tid 1580] [client 20.63.219.114:9174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/randkeyword.php"] [unique_id "apK-H2jCPtor9NZ-byTgLAAABpc"]
[Sat Aug 29 05:10:23.072806 2026] [security2:error] [pid 1321:tid 1610] [client 158.23.147.79:60108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-admin/admin.php"] [unique_id "apK-H2jCPtor9NZ-byTgLgAABrU"]
[Sat Aug 29 05:10:23.073506 2026] [proxy_http:error] [pid 1028675:tid 1028723] (70007)The timeout specified has expired: [remote 57.141.14.3:24616] AH01102: error reading status line from remote server 127.0.0.1:8443
[Sat Aug 29 05:10:23.073535 2026] [proxy:error] [pid 1028675:tid 1028723] [remote 57.141.14.3:24616] AH00898: Error reading from remote server returned by /shop/
[Sat Aug 29 05:10:23.075653 2026] [security2:error] [pid 1321:tid 1542] [client 20.48.251.3:9497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/ccou.php"] [unique_id "apK-H2jCPtor9NZ-byTgLwAABnI"]
[Sat Aug 29 05:10:23.078492 2026] [security2:error] [pid 1321:tid 1506] [client 158.158.54.35:35549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK-H2jCPtor9NZ-byTgMAAABk4"]
[Sat Aug 29 05:10:23.084252 2026] [proxy_http:error] [pid 1018003:tid 1018160] (70007)The timeout specified has expired: [client 127.0.0.1:58470] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:10:23.084290 2026] [proxy:error] [pid 1018003:tid 1018160] [client 127.0.0.1:58470] AH00898: Error reading from remote server returned by /shop/
[Sat Aug 29 05:10:23.084678 2026] [security2:error] [pid 1321:tid 1583] [client 158.23.147.79:11463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK-H2jCPtor9NZ-byTgMQAABpo"]
[Sat Aug 29 05:10:23.086732 2026] [security2:error] [pid 1041789:tid 1041954] [client 20.48.250.41:53499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/zxekqlxb.php"] [unique_id "apK-H4v3RhPI65jTFG4NIAAAAzU"]
[Sat Aug 29 05:10:23.100837 2026] [security2:error] [pid 1321:tid 1589] [client 158.23.147.79:6111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/ans.php"] [unique_id "apK-H2jCPtor9NZ-byTgNQAABqA"]
[Sat Aug 29 05:10:23.103607 2026] [security2:error] [pid 1041789:tid 1041970] [client 20.48.250.41:49945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/bolt.php"] [unique_id "apK-H4v3RhPI65jTFG4NIgAAA0U"]
[Sat Aug 29 05:10:23.116194 2026] [security2:error] [pid 1041789:tid 1041938] [client 20.48.250.41:64841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/66.php"] [unique_id "apK-H4v3RhPI65jTFG4NJQAAAyU"]
[Sat Aug 29 05:10:23.119973 2026] [security2:error] [pid 1041789:tid 1042013] [client 20.48.160.90:64632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK-H4v3RhPI65jTFG4NJwAAA3A"]
[Sat Aug 29 05:10:23.144493 2026] [security2:error] [pid 1321:tid 1491] [client 20.48.250.41:50202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/shlo.php"] [unique_id "apK-H2jCPtor9NZ-byTgOwAABj8"]
[Sat Aug 29 05:10:23.152391 2026] [security2:error] [pid 1321:tid 1505] [client 20.48.250.41:50417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/Geforce.php"] [unique_id "apK-H2jCPtor9NZ-byTgPAAABk0"]
[Sat Aug 29 05:10:23.158558 2026] [security2:error] [pid 1321:tid 1590] [client 20.104.104.62:37528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/sef.php"] [unique_id "apK-H2jCPtor9NZ-byTgPQAABqE"]
[Sat Aug 29 05:10:23.165395 2026] [security2:error] [pid 1041789:tid 1041875] [remote 93.123.109.228:33128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/config/aws.php"] [unique_id "apK-H4v3RhPI65jTFG4NLAADjUk"]
[Sat Aug 29 05:10:23.166437 2026] [security2:error] [pid 1321:tid 1577] [client 146.70.36.124:44718] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "don.devi.to"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "apK-H2jCPtor9NZ-byTgQQAABpQ"]
[Sat Aug 29 05:10:23.182527 2026] [security2:error] [pid 1321:tid 1465] [remote 93.123.109.228:33158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.group3-llc.com"] [uri "/config/aws.php"] [unique_id "apK-H2jCPtor9NZ-byTgRAAGtGo"]
[Sat Aug 29 05:10:23.184607 2026] [security2:error] [pid 1041789:tid 1042030] [client 213.202.253.4:61217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "timportlock.net"] [uri "/gdftps.php"] [unique_id "apK-H4v3RhPI65jTFG4NMwAAA4E"], referer: www.google.com
[Sat Aug 29 05:10:23.187178 2026] [security2:error] [pid 1321:tid 1571] [client 20.104.49.130:42234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/wp-good.php"] [unique_id "apK-H2jCPtor9NZ-byTgRwAABo4"]
[Sat Aug 29 05:10:23.201309 2026] [security2:error] [pid 1321:tid 1521] [client 40.83.93.50:18342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-content/f35.php"] [unique_id "apK-H2jCPtor9NZ-byTgSwAABl0"]
[Sat Aug 29 05:10:23.209282 2026] [security2:error] [pid 1321:tid 1531] [client 20.48.251.3:43983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/66.php"] [unique_id "apK-H2jCPtor9NZ-byTgTAAABmc"]
[Sat Aug 29 05:10:23.217758 2026] [security2:error] [pid 1041789:tid 1041845] [remote 93.123.109.228:33128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/config/config.inc.php"] [unique_id "apK-H4v3RhPI65jTFG4NOQADjSs"]
[Sat Aug 29 05:10:23.224342 2026] [security2:error] [pid 1321:tid 1433] [remote 93.123.109.228:33158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.group3-llc.com"] [uri "/config/config.inc.php"] [unique_id "apK-H2jCPtor9NZ-byTgUAAGtEs"]
[Sat Aug 29 05:10:23.237826 2026] [security2:error] [pid 1041789:tid 1041977] [client 20.48.250.41:50120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/init.php"] [unique_id "apK-H4v3RhPI65jTFG4NPQAAA0w"]
[Sat Aug 29 05:10:23.238259 2026] [security2:error] [pid 1321:tid 1518] [client 5.255.251.135:0] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Mozilla\\\\/5\\\\.0 \\\$compatible; YandexBot\\\\/3\\\\.0; \\\\+http:\\\\/\\\\/yandex\\\\.com\\\\/bots\\\$" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/othercrawler.conf"] [line "3"] [id "901008"] [msg "Yandex Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/en/2016/08/02/salade-de-pates-au-vert/"] [unique_id "apK-H2jCPtor9NZ-byTgVAAABlo"]
[Sat Aug 29 05:10:23.246271 2026] [security2:error] [pid 1041789:tid 1042005] [client 52.139.37.240:12516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/index.php/feed/atom/"] [unique_id "apK-H4v3RhPI65jTFG4NQAAAA2g"]
[Sat Aug 29 05:10:23.253491 2026] [security2:error] [pid 1321:tid 1543] [client 93.152.221.156:61481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.loh.zdx.mybluehost.me"] [uri "/admin/phpinfo.php"] [unique_id "apK-H2jCPtor9NZ-byTgWQAABnM"]
[Sat Aug 29 05:10:23.255933 2026] [security2:error] [pid 1041789:tid 1041886] [remote 93.123.109.228:33128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/config/config.php"] [unique_id "apK-H4v3RhPI65jTFG4NQwADjVQ"]
[Sat Aug 29 05:10:23.258729 2026] [security2:error] [pid 1041789:tid 1042015] [client 20.220.204.93:63502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/gettest.php"] [unique_id "apK-H4v3RhPI65jTFG4NRQAAA3I"]
[Sat Aug 29 05:10:23.267292 2026] [security2:error] [pid 1321:tid 1591] [client 20.104.104.62:47579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/donate.php"] [unique_id "apK-H2jCPtor9NZ-byTgXAAABqI"]
[Sat Aug 29 05:10:23.268037 2026] [security2:error] [pid 1041789:tid 1041903] [remote 45.148.10.62:42684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.yim.emf.mybluehost.me"] [uri "/wp-login.php"] [unique_id "apK-H4v3RhPI65jTFG4NSAADJmU"]
[Sat Aug 29 05:10:23.270283 2026] [security2:error] [pid 1041789:tid 1042047] [client 20.48.250.41:62403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/f35.php"] [unique_id "apK-H4v3RhPI65jTFG4NSQAAA5I"]
[Sat Aug 29 05:10:23.274318 2026] [security2:error] [pid 1321:tid 1382] [remote 93.123.109.228:33158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.group3-llc.com"] [uri "/config/config.php"] [unique_id "apK-H2jCPtor9NZ-byTgXQAGtBg"]
[Sat Aug 29 05:10:23.282082 2026] [security2:error] [pid 1041789:tid 1041963] [client 20.220.204.93:55844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/term.php"] [unique_id "apK-H4v3RhPI65jTFG4NSgAAAz4"]
[Sat Aug 29 05:10:23.288964 2026] [security2:error] [pid 1321:tid 1362] [remote 93.123.109.228:33304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/config/aws.php"] [unique_id "apK-H2jCPtor9NZ-byTgYQAGswU"]
[Sat Aug 29 05:10:23.300444 2026] [security2:error] [pid 1321:tid 1544] [client 158.23.147.79:63016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/dropdown.php"] [unique_id "apK-H2jCPtor9NZ-byTgZQAABnQ"]
[Sat Aug 29 05:10:23.300635 2026] [security2:error] [pid 1041789:tid 1042035] [client 20.52.41.200:4666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/c.php"] [unique_id "apK-H4v3RhPI65jTFG4NTwAAA4Y"]
[Sat Aug 29 05:10:23.305433 2026] [security2:error] [pid 1321:tid 1491] [client 4.232.148.111:1346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "apK-H2jCPtor9NZ-byTgZgAABj8"]
[Sat Aug 29 05:10:23.312510 2026] [security2:error] [pid 1321:tid 1535] [client 20.104.49.130:56207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.danesquality.com"] [uri "/edit.php"] [unique_id "apK-H2jCPtor9NZ-byTgaAAABms"]
[Sat Aug 29 05:10:23.317986 2026] [security2:error] [pid 1041789:tid 1042020] [client 40.83.93.50:12821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/backup.php"] [unique_id "apK-H4v3RhPI65jTFG4NUQAAA3c"]
[Sat Aug 29 05:10:23.323140 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.48.250.41:50205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/asax.php"] [unique_id "apK-H4v3RhPI65jTFG4NVgAAA30"]
[Sat Aug 29 05:10:23.333396 2026] [security2:error] [pid 1041789:tid 1041981] [client 20.196.209.81:8851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-content/install.php"] [unique_id "apK-H4v3RhPI65jTFG4NWQAAA1A"]
[Sat Aug 29 05:10:23.337456 2026] [security2:error] [pid 1041789:tid 1041981] [client 20.104.104.62:48044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/admin123.php"] [unique_id "apK-H4v3RhPI65jTFG4NWgAAA1A"]
[Sat Aug 29 05:10:23.338851 2026] [security2:error] [pid 1321:tid 1376] [remote 93.123.109.228:33304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/config/config.inc.php"] [unique_id "apK-H2jCPtor9NZ-byTgbgAGsxI"]
[Sat Aug 29 05:10:23.340024 2026] [security2:error] [pid 1041789:tid 1041871] [remote 93.123.109.228:33546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldstone.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK-H4v3RhPI65jTFG4NXAADKEU"]
[Sat Aug 29 05:10:23.342561 2026] [security2:error] [pid 1321:tid 1558] [client 20.48.251.3:9330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/wp-act.php"] [unique_id "apK-H2jCPtor9NZ-byTgbwAABoE"]
[Sat Aug 29 05:10:23.345891 2026] [security2:error] [pid 1321:tid 1360] [remote 93.123.109.228:33158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.group3-llc.com"] [uri "/config/env.php"] [unique_id "apK-H2jCPtor9NZ-byTgcQAGtAQ"]
[Sat Aug 29 05:10:23.351968 2026] [security2:error] [pid 1041789:tid 1041979] [client 20.48.160.90:63485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/wsd.php"] [unique_id "apK-H4v3RhPI65jTFG4NYAAAA04"]
[Sat Aug 29 05:10:23.355074 2026] [security2:error] [pid 1041789:tid 1041895] [remote 93.123.109.228:33128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/config/env.php"] [unique_id "apK-H4v3RhPI65jTFG4NYwADjV0"]
[Sat Aug 29 05:10:23.364662 2026] [security2:error] [pid 1321:tid 1568] [client 158.23.147.79:14304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/ws.php"] [unique_id "apK-H2jCPtor9NZ-byTgdAAABos"]
[Sat Aug 29 05:10:23.367890 2026] [security2:error] [pid 1321:tid 1556] [client 20.48.250.41:29692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/click.php"] [unique_id "apK-H2jCPtor9NZ-byTgdQAABn8"]
[Sat Aug 29 05:10:23.373403 2026] [security2:error] [pid 1041789:tid 1041883] [remote 93.123.109.228:33128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/config/module.config.php"] [unique_id "apK-H4v3RhPI65jTFG4NaAADjVE"]
[Sat Aug 29 05:10:23.376279 2026] [security2:error] [pid 1041789:tid 1042000] [client 158.23.147.79:63258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK-H4v3RhPI65jTFG4NagAAA2M"]
[Sat Aug 29 05:10:23.377744 2026] [security2:error] [pid 1321:tid 1372] [remote 93.123.109.228:33304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/config/config.php"] [unique_id "apK-H2jCPtor9NZ-byTgdwAGsw4"]
[Sat Aug 29 05:10:23.379153 2026] [security2:error] [pid 1321:tid 1527] [client 20.48.250.41:53467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/term.php"] [unique_id "apK-H2jCPtor9NZ-byTgeAAABmM"]
[Sat Aug 29 05:10:23.382765 2026] [security2:error] [pid 1041789:tid 1041824] [remote 93.123.109.228:33128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/config/nexmo.php"] [unique_id "apK-H4v3RhPI65jTFG4NawADjRY"]
[Sat Aug 29 05:10:23.388996 2026] [security2:error] [pid 1321:tid 1510] [client 40.83.93.50:11629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/defaults.php"] [unique_id "apK-H2jCPtor9NZ-byTgegAABlI"]
[Sat Aug 29 05:10:23.393407 2026] [security2:error] [pid 1321:tid 1529] [client 20.48.250.41:30606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/rtx.php"] [unique_id "apK-H2jCPtor9NZ-byTgfAAABmU"]
[Sat Aug 29 05:10:23.395826 2026] [security2:error] [pid 1041789:tid 1041912] [remote 93.123.109.228:33772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldperformanceinc.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK-H4v3RhPI65jTFG4NbQADMG4"]
[Sat Aug 29 05:10:23.429529 2026] [security2:error] [pid 1321:tid 1565] [client 20.63.219.114:9185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/goods.php"] [unique_id "apK-H2jCPtor9NZ-byTggQAABog"]
[Sat Aug 29 05:10:23.436161 2026] [security2:error] [pid 1041789:tid 1042019] [client 45.148.10.62:42696] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.yml.fme.mybluehost.me"] [uri "/.env.backup"] [unique_id "apK-H4v3RhPI65jTFG4NdgAAA3Y"]
[Sat Aug 29 05:10:23.445024 2026] [security2:error] [pid 1321:tid 1606] [client 20.48.250.41:64874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/wen.php"] [unique_id "apK-H2jCPtor9NZ-byTghwAABrE"]
[Sat Aug 29 05:10:23.445307 2026] [security2:error] [pid 1321:tid 1405] [remote 93.123.109.228:33158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.group3-llc.com"] [uri "/config/module.config.php"] [unique_id "apK-H2jCPtor9NZ-byTghgAGVS8"]
[Sat Aug 29 05:10:23.445644 2026] [security2:error] [pid 1321:tid 1391] [remote 93.123.109.228:33158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.group3-llc.com"] [uri "/config/nexmo.php"] [unique_id "apK-H2jCPtor9NZ-byTgiAAGVSE"]
[Sat Aug 29 05:10:23.449065 2026] [security2:error] [pid 1321:tid 1385] [remote 93.123.109.228:33304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/config/env.php"] [unique_id "apK-H2jCPtor9NZ-byTgjAAGsxs"]
[Sat Aug 29 05:10:23.452833 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.104.49.130:57533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/ohct.php"] [unique_id "apK-H4v3RhPI65jTFG4NegAAA2Q"]
[Sat Aug 29 05:10:23.457690 2026] [security2:error] [pid 1041789:tid 1041898] [remote 93.123.109.228:33128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/config/stripe.php"] [unique_id "apK-H4v3RhPI65jTFG4NfAADjWA"]
[Sat Aug 29 05:10:23.461563 2026] [security2:error] [pid 1321:tid 1616] [client 74.248.24.12:10983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/bgymj.php"] [unique_id "apK-H2jCPtor9NZ-byTgjwAABrs"]
[Sat Aug 29 05:10:23.462306 2026] [security2:error] [pid 1321:tid 1392] [remote 93.123.109.228:33158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.group3-llc.com"] [uri "/config/stripe.php"] [unique_id "apK-H2jCPtor9NZ-byTgkAAGVSI"]
[Sat Aug 29 05:10:23.468168 2026] [security2:error] [pid 1321:tid 1549] [client 20.220.204.93:55853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/aaa.php"] [unique_id "apK-H2jCPtor9NZ-byTgkQAABng"]
[Sat Aug 29 05:10:23.468194 2026] [security2:error] [pid 1041789:tid 1041940] [client 52.139.37.240:12529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/root.php"] [unique_id "apK-H4v3RhPI65jTFG4NgAAAAyc"]
[Sat Aug 29 05:10:23.475268 2026] [security2:error] [pid 1321:tid 1530] [client 20.48.251.3:46648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/samll.php"] [unique_id "apK-H2jCPtor9NZ-byTgkwAABmY"]
[Sat Aug 29 05:10:23.483054 2026] [security2:error] [pid 1321:tid 1599] [client 158.23.147.79:5911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-includes/index.php"] [unique_id "apK-H2jCPtor9NZ-byTglgAABqo"]
[Sat Aug 29 05:10:23.485262 2026] [security2:error] [pid 1321:tid 1581] [client 20.48.250.41:50213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/fetch.php"] [unique_id "apK-H2jCPtor9NZ-byTgmAAABpg"]
[Sat Aug 29 05:10:23.488846 2026] [security2:error] [pid 1321:tid 1397] [remote 93.123.109.228:33304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/config/module.config.php"] [unique_id "apK-H2jCPtor9NZ-byTgmgAGsyc"]
[Sat Aug 29 05:10:23.491047 2026] [security2:error] [pid 1041789:tid 1041957] [client 91.92.47.191:45806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantgardening.com"] [uri "/wp-config.php"] [unique_id "apK-H4v3RhPI65jTFG4NgwAAAzg"]
[Sat Aug 29 05:10:23.499376 2026] [security2:error] [pid 1321:tid 1551] [client 20.104.104.62:37550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/7h.php"] [unique_id "apK-H2jCPtor9NZ-byTgnAAABno"]
[Sat Aug 29 05:10:23.521825 2026] [security2:error] [pid 1321:tid 1553] [client 20.48.250.41:53412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/aaa.php"] [unique_id "apK-H2jCPtor9NZ-byTgnwAABnw"]
[Sat Aug 29 05:10:23.525220 2026] [security2:error] [pid 1041789:tid 1041935] [client 158.158.54.35:13965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-mail.php"] [unique_id "apK-H4v3RhPI65jTFG4NigAAAyI"]
[Sat Aug 29 05:10:23.530689 2026] [security2:error] [pid 1321:tid 1512] [client 93.152.221.156:61783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.loh.zdx.mybluehost.me"] [uri "/pinfo.php"] [unique_id "apK-H2jCPtor9NZ-byTgoAAABlQ"]
[Sat Aug 29 05:10:23.540747 2026] [security2:error] [pid 1321:tid 1481] [remote 93.123.109.228:33304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/config/nexmo.php"] [unique_id "apK-H2jCPtor9NZ-byTgpQAGs3o"]
[Sat Aug 29 05:10:23.543696 2026] [security2:error] [pid 1321:tid 1576] [client 20.104.49.130:52484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/82.php"] [unique_id "apK-H2jCPtor9NZ-byTgpwAABpM"]
[Sat Aug 29 05:10:23.581227 2026] [security2:error] [pid 1041789:tid 1042054] [client 20.48.250.41:49973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/ckk.php"] [unique_id "apK-H4v3RhPI65jTFG4NlwAAA5k"]
[Sat Aug 29 05:10:23.587296 2026] [security2:error] [pid 1041789:tid 1042041] [client 45.148.10.62:42696] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.yml.fme.mybluehost.me"] [uri "/.env.old"] [unique_id "apK-H4v3RhPI65jTFG4NmwAAA4w"]
[Sat Aug 29 05:10:23.600963 2026] [security2:error] [pid 1321:tid 1482] [remote 93.123.109.228:33304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/config/stripe.php"] [unique_id "apK-H2jCPtor9NZ-byTguAAGs3s"]
[Sat Aug 29 05:10:23.605375 2026] [security2:error] [pid 1041789:tid 1041947] [client 20.48.250.41:62409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/inc.php"] [unique_id "apK-H4v3RhPI65jTFG4NnwAAAy4"]
[Sat Aug 29 05:10:23.606581 2026] [security2:error] [pid 1041789:tid 1041945] [client 20.220.204.93:55834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/xsox.php"] [unique_id "apK-H4v3RhPI65jTFG4NoAAAAyw"]
[Sat Aug 29 05:10:23.613277 2026] [security2:error] [pid 1321:tid 1598] [client 20.48.251.3:46624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/pass4.php"] [unique_id "apK-H2jCPtor9NZ-byTguwAABqk"]
[Sat Aug 29 05:10:23.614318 2026] [security2:error] [pid 1041789:tid 1041840] [remote 93.123.109.228:33546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldstone.com"] [uri "/admin/phpinfo.php"] [unique_id "apK-H4v3RhPI65jTFG4NpAADKCY"]
[Sat Aug 29 05:10:23.633924 2026] [security2:error] [pid 1041789:tid 1041977] [client 20.48.250.41:49239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/vx.php"] [unique_id "apK-H4v3RhPI65jTFG4NpQAAA0w"]
[Sat Aug 29 05:10:23.640566 2026] [security2:error] [pid 1041789:tid 1041975] [client 146.70.36.124:42626] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.allgooddays.org"] [uri "/autodiscover/autodiscover.xml/media/wp-includes/wlwmanifest.xml"] [unique_id "apK-H4v3RhPI65jTFG4NqAAAA0o"]
[Sat Aug 29 05:10:23.641095 2026] [security2:error] [pid 1041789:tid 1041982] [client 20.104.104.62:37509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/wp-gzone.php"] [unique_id "apK-H4v3RhPI65jTFG4NqgAAA1E"]
[Sat Aug 29 05:10:23.666323 2026] [security2:error] [pid 1041789:tid 1042030] [client 52.139.37.240:12425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/shell.php"] [unique_id "apK-H4v3RhPI65jTFG4NtAAAA4E"]
[Sat Aug 29 05:10:23.669916 2026] [security2:error] [pid 1041789:tid 1042015] [client 20.48.250.41:53458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/xsox.php"] [unique_id "apK-H4v3RhPI65jTFG4NtgAAA3I"]
[Sat Aug 29 05:10:23.670186 2026] [security2:error] [pid 1041789:tid 1041938] [client 40.83.93.50:12139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-content/index.php"] [unique_id "apK-H4v3RhPI65jTFG4NtwAAAyU"]
[Sat Aug 29 05:10:23.714329 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.48.250.41:30676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.harnessenergy.us"] [uri "/R57.php"] [unique_id "apK-H4v3RhPI65jTFG4NwwAAA30"]
[Sat Aug 29 05:10:23.714383 2026] [security2:error] [pid 1041789:tid 1041894] [remote 93.123.109.228:33546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldstone.com"] [uri "/admin_phpinfo.php"] [unique_id "apK-H4v3RhPI65jTFG4NwgADKFw"]
[Sat Aug 29 05:10:23.738763 2026] [security2:error] [pid 1041789:tid 1041845] [remote 93.123.109.228:33772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldperformanceinc.com"] [uri "/admin/phpinfo.php"] [unique_id "apK-H4v3RhPI65jTFG4NzAADMCs"]
[Sat Aug 29 05:10:23.744732 2026] [security2:error] [pid 1041789:tid 1041951] [client 20.48.251.3:46588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/dd.php"] [unique_id "apK-H4v3RhPI65jTFG4NzgAAAzI"]
[Sat Aug 29 05:10:23.748766 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.52.41.200:5324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/f.php"] [unique_id "apK-H4v3RhPI65jTFG4NzwAAA3o"]
[Sat Aug 29 05:10:23.753893 2026] [security2:error] [pid 1321:tid 1607] [client 4.205.62.107:58414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/sgd.php"] [unique_id "apK-H2jCPtor9NZ-byTg1AAABrI"]
[Sat Aug 29 05:10:23.767489 2026] [security2:error] [pid 1041789:tid 1041911] [remote 93.123.109.228:33772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldperformanceinc.com"] [uri "/admin_phpinfo.php"] [unique_id "apK-H4v3RhPI65jTFG4N1QADMG0"]
[Sat Aug 29 05:10:23.782858 2026] [security2:error] [pid 1041789:tid 1042019] [client 146.70.36.124:44722] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "don.devi.to"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "apK-H4v3RhPI65jTFG4N1wAAA3Y"]
[Sat Aug 29 05:10:23.791108 2026] [security2:error] [pid 1041789:tid 1041933] [client 4.205.62.107:59096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/tinyfilemanager.php"] [unique_id "apK-H4v3RhPI65jTFG4N3AAAAyA"]
[Sat Aug 29 05:10:23.794324 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.48.250.41:64794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/6bcwiqwj.php"] [unique_id "apK-H4v3RhPI65jTFG4N3wAAA2Q"]
[Sat Aug 29 05:10:23.799485 2026] [security2:error] [pid 1041789:tid 1041940] [client 20.220.204.93:54648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/lkui.php"] [unique_id "apK-H4v3RhPI65jTFG4N4QAAAyc"]
[Sat Aug 29 05:10:23.805538 2026] [security2:error] [pid 1041789:tid 1042055] [client 93.152.221.156:64227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.loh.zdx.mybluehost.me"] [uri "/php_version.php"] [unique_id "apK-H4v3RhPI65jTFG4N4gAAA5o"]
[Sat Aug 29 05:10:23.809600 2026] [security2:error] [pid 1321:tid 1594] [client 20.48.160.90:63471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/bulet.php"] [unique_id "apK-H2jCPtor9NZ-byTg4AAABqU"]
[Sat Aug 29 05:10:23.818450 2026] [security2:error] [pid 1321:tid 1509] [client 20.48.250.41:50332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/ms.php"] [unique_id "apK-H2jCPtor9NZ-byTg4gAABlE"]
[Sat Aug 29 05:10:23.819643 2026] [security2:error] [pid 1321:tid 1532] [client 40.83.93.50:12815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/haiterus.php"] [unique_id "apK-H2jCPtor9NZ-byTg4wAABmg"]
[Sat Aug 29 05:10:23.843785 2026] [security2:error] [pid 1321:tid 1580] [client 20.48.250.41:50088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/lkui.php"] [unique_id "apK-H2jCPtor9NZ-byTg5wAABpc"]
[Sat Aug 29 05:10:23.861309 2026] [security2:error] [pid 1041789:tid 1042046] [client 52.139.37.240:12922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK-H4v3RhPI65jTFG4N7wAAA5E"]
[Sat Aug 29 05:10:23.866867 2026] [security2:error] [pid 1041789:tid 1042053] [client 20.196.209.81:22849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK-H4v3RhPI65jTFG4N8AAAA5g"]
[Sat Aug 29 05:10:23.870245 2026] [security2:error] [pid 1321:tid 1610] [client 20.48.250.41:50265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/global.php"] [unique_id "apK-H2jCPtor9NZ-byTg7QAABrU"]
[Sat Aug 29 05:10:23.876344 2026] [security2:error] [pid 1321:tid 1542] [client 20.48.251.3:46539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/doc.php"] [unique_id "apK-H2jCPtor9NZ-byTg7gAABnI"]
[Sat Aug 29 05:10:23.885146 2026] [security2:error] [pid 1041789:tid 1041967] [client 45.148.10.62:42696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.yml.fme.mybluehost.me"] [uri "/.env.php.bak"] [unique_id "apK-H4v3RhPI65jTFG4N9QAAA0I"]
[Sat Aug 29 05:10:23.905683 2026] [security2:error] [pid 1321:tid 1470] [remote 93.123.109.228:33834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenokie.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK-H2jCPtor9NZ-byTg8wAGum8"]
[Sat Aug 29 05:10:23.923149 2026] [security2:error] [pid 1321:tid 1600] [client 20.104.49.130:53754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/run.php"] [unique_id "apK-H2jCPtor9NZ-byTg9wAABqs"]
[Sat Aug 29 05:10:23.937033 2026] [security2:error] [pid 1321:tid 1500] [client 4.205.62.107:6860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/erty.php"] [unique_id "apK-H2jCPtor9NZ-byTg-QAABkg"]
[Sat Aug 29 05:10:23.938314 2026] [security2:error] [pid 1041789:tid 1041910] [remote 93.123.109.228:33546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldstone.com"] [uri "/api/info.php"] [unique_id "apK-H4v3RhPI65jTFG4OBAADKGw"]
[Sat Aug 29 05:10:23.939216 2026] [access_compat:error] [pid 1041789:tid 1041960] [client 67.20.76.220:18524] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:10:23.941946 2026] [security2:error] [pid 1041789:tid 1042014] [client 20.63.219.114:2016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/hehe.php"] [unique_id "apK-H4v3RhPI65jTFG4OBwAAA3E"]
[Sat Aug 29 05:10:23.962752 2026] [security2:error] [pid 1041789:tid 1041938] [client 20.48.250.41:64845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/easy.php"] [unique_id "apK-H4v3RhPI65jTFG4ODAAAAyU"]
[Sat Aug 29 05:10:23.968287 2026] [security2:error] [pid 1041789:tid 1041939] [client 66.249.66.76:0] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Googlebot[\\\\/-]" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/google.conf"] [line "3"] [id "901003"] [msg "Googlebot Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/product-brand/tada/"] [unique_id "apK-H4v3RhPI65jTFG4OCgAAAyY"]
[Sat Aug 29 05:10:23.972001 2026] [security2:error] [pid 1321:tid 1496] [client 20.220.204.93:65168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/35.php"] [unique_id "apK-H2jCPtor9NZ-byThAAAABkQ"]
[Sat Aug 29 05:10:23.974665 2026] [security2:error] [pid 1321:tid 1538] [client 20.220.204.93:55898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "apK-H2jCPtor9NZ-byThAgAABm4"]
[Sat Aug 29 05:10:23.982066 2026] [security2:error] [pid 1041789:tid 1041992] [client 40.83.93.50:8595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/post.php"] [unique_id "apK-H4v3RhPI65jTFG4ODwAAA1s"]
[Sat Aug 29 05:10:23.982254 2026] [security2:error] [pid 1321:tid 1566] [client 158.158.54.35:8372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-content.php"] [unique_id "apK-H2jCPtor9NZ-byThBQAABok"]
[Sat Aug 29 05:10:24.006977 2026] [security2:error] [pid 1321:tid 1490] [client 20.48.250.41:53466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "apK-IGjCPtor9NZ-byThBwAABj4"]
[Sat Aug 29 05:10:24.011325 2026] [security2:error] [pid 1041789:tid 1041970] [client 74.248.24.12:19999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK-IIv3RhPI65jTFG4OEgAAA0U"]
[Sat Aug 29 05:10:24.019577 2026] [security2:error] [pid 1041789:tid 1041978] [client 20.48.251.3:43868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/fun.php"] [unique_id "apK-IIv3RhPI65jTFG4OEwAAA00"]
[Sat Aug 29 05:10:24.031593 2026] [security2:error] [pid 1321:tid 1571] [client 20.48.250.41:50215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/fs.php"] [unique_id "apK-IGjCPtor9NZ-byThDQAABo4"]
[Sat Aug 29 05:10:24.055646 2026] [security2:error] [pid 1041789:tid 1042026] [client 52.139.37.240:12477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/wp-content/plugins/linkpreview/il.php"] [unique_id "apK-IIv3RhPI65jTFG4OHAAAA30"]
[Sat Aug 29 05:10:24.066714 2026] [security2:error] [pid 1041789:tid 1041926] [remote 93.123.109.228:33772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldperformanceinc.com"] [uri "/api/info.php"] [unique_id "apK-IIv3RhPI65jTFG4OHwADMHw"]
[Sat Aug 29 05:10:24.071003 2026] [security2:error] [pid 1041789:tid 1041887] [remote 93.123.109.228:33546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldstone.com"] [uri "/api/phpinfo.php"] [unique_id "apK-IIv3RhPI65jTFG4OIQADKFU"]
[Sat Aug 29 05:10:24.082333 2026] [security2:error] [pid 1321:tid 1574] [client 20.48.160.90:63479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/av.php"] [unique_id "apK-IGjCPtor9NZ-byThHgAABpE"]
[Sat Aug 29 05:10:24.089547 2026] [security2:error] [pid 1041789:tid 1041944] [client 146.70.36.124:44732] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "don.devi.to"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "apK-IIv3RhPI65jTFG4OKAAAAys"]
[Sat Aug 29 05:10:24.117528 2026] [security2:error] [pid 1041789:tid 1042018] [client 4.232.148.111:19542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-content/admin.php"] [unique_id "apK-IIv3RhPI65jTFG4OLAAAA3U"]
[Sat Aug 29 05:10:24.117594 2026] [security2:error] [pid 1041789:tid 1042019] [client 20.48.250.41:29690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/zxekqlxb.php"] [unique_id "apK-IIv3RhPI65jTFG4OLgAAA3Y"]
[Sat Aug 29 05:10:24.122863 2026] [security2:error] [pid 1321:tid 1591] [client 20.48.250.41:64877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/fresh3.php"] [unique_id "apK-IGjCPtor9NZ-byThIwAABqI"]
[Sat Aug 29 05:10:24.131032 2026] [security2:error] [pid 1321:tid 1611] [client 103.171.189.88:50819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-IGjCPtor9NZ-byThJAAABrY"]
[Sat Aug 29 05:10:24.131176 2026] [security2:error] [pid 1321:tid 1611] [client 103.171.189.88:50819] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-IGjCPtor9NZ-byThJAAABrY"]
[Sat Aug 29 05:10:24.148319 2026] [security2:error] [pid 1041789:tid 1042020] [client 40.83.93.50:21581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-content/install.php"] [unique_id "apK-IIv3RhPI65jTFG4OMwAAA3c"]
[Sat Aug 29 05:10:24.154427 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.48.251.3:9320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/bb.php"] [unique_id "apK-IIv3RhPI65jTFG4ONQAAA2Q"]
[Sat Aug 29 05:10:24.159710 2026] [security2:error] [pid 1041789:tid 1042055] [client 20.48.250.41:53444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/motu.php"] [unique_id "apK-IIv3RhPI65jTFG4OOAAAA5o"]
[Sat Aug 29 05:10:24.160581 2026] [security2:error] [pid 1041789:tid 1041940] [client 158.23.147.79:55895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/login.php"] [unique_id "apK-IIv3RhPI65jTFG4OOQAAAyc"]
[Sat Aug 29 05:10:24.174793 2026] [security2:error] [pid 1041789:tid 1041889] [remote 93.123.109.228:33772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldperformanceinc.com"] [uri "/api/phpinfo.php"] [unique_id "apK-IIv3RhPI65jTFG4OPwADMFc"]
[Sat Aug 29 05:10:24.177336 2026] [security2:error] [pid 1041789:tid 1042029] [client 158.23.147.79:60101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK-IIv3RhPI65jTFG4OQAAAA4A"]
[Sat Aug 29 05:10:24.179224 2026] [http2:warn] [pid 1018003:tid 1018194] [client 57.141.14.53:57820] h2_stream(1018003-367-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:10:24.180503 2026] [security2:error] [pid 1321:tid 1534] [client 20.220.204.93:52091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/motu.php"] [unique_id "apK-IGjCPtor9NZ-byThLgAABmo"]
[Sat Aug 29 05:10:24.195674 2026] [security2:error] [pid 1041789:tid 1042044] [client 4.205.62.107:63878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/w.php"] [unique_id "apK-IIv3RhPI65jTFG4OQwAAA48"]
[Sat Aug 29 05:10:24.203835 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.52.41.200:4608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/av.php"] [unique_id "apK-IIv3RhPI65jTFG4ORQAAA3o"]
[Sat Aug 29 05:10:24.209724 2026] [security2:error] [pid 1041789:tid 1042023] [client 158.23.147.79:6003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/worksec.php"] [unique_id "apK-IIv3RhPI65jTFG4OSQAAA3o"]
[Sat Aug 29 05:10:24.213431 2026] [security2:error] [pid 1041789:tid 1042053] [client 20.151.200.44:21802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/blnux.php"] [unique_id "apK-IIv3RhPI65jTFG4OSwAAA5g"]
[Sat Aug 29 05:10:24.232781 2026] [security2:error] [pid 1321:tid 1484] [remote 93.123.109.228:33834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenokie.com"] [uri "/admin/phpinfo.php"] [unique_id "apK-IGjCPtor9NZ-byThOgAGun0"]
[Sat Aug 29 05:10:24.236593 2026] [security2:error] [pid 1321:tid 1541] [client 158.23.147.79:11308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/packed.php"] [unique_id "apK-IGjCPtor9NZ-byThPAAABnE"]
[Sat Aug 29 05:10:24.242627 2026] [security2:error] [pid 1321:tid 1558] [client 93.152.221.156:57643] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpanel.loh.zdx.mybluehost.me"] [uri "/___proxy_subdomain_cpanel/.env"] [unique_id "apK-IGjCPtor9NZ-byThPQAABoE"]
[Sat Aug 29 05:10:24.256424 2026] [security2:error] [pid 1041789:tid 1042014] [client 146.70.36.124:42642] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.allgooddays.org"] [uri "/autodiscover/autodiscover.xml/site/wp-includes/wlwmanifest.xml"] [unique_id "apK-IIv3RhPI65jTFG4OVQAAA3E"]
[Sat Aug 29 05:10:24.276461 2026] [security2:error] [pid 1041789:tid 1042046] [client 52.139.37.240:12900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/wp-header-json.php"] [unique_id "apK-IIv3RhPI65jTFG4OWgAAA5E"]
[Sat Aug 29 05:10:24.282816 2026] [security2:error] [pid 1321:tid 1488] [client 20.104.49.130:60773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/talkxkej.php"] [unique_id "apK-IGjCPtor9NZ-byThQwAABjw"]
[Sat Aug 29 05:10:24.283115 2026] [security2:error] [pid 1041789:tid 1042030] [client 20.48.250.41:64768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/bgymj.php"] [unique_id "apK-IIv3RhPI65jTFG4OXAAAA4E"]
[Sat Aug 29 05:10:24.286607 2026] [security2:error] [pid 1041789:tid 1041975] [client 20.48.251.3:44015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/06.php"] [unique_id "apK-IIv3RhPI65jTFG4OXQAAA0o"]
[Sat Aug 29 05:10:24.290692 2026] [security2:error] [pid 1041789:tid 1041939] [client 20.48.250.41:50123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/Ov-Simple1.php"] [unique_id "apK-IIv3RhPI65jTFG4OYQAAAyY"]
[Sat Aug 29 05:10:24.299624 2026] [security2:error] [pid 1321:tid 1526] [client 20.196.209.81:8411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-content/languages/chosen.php"] [unique_id "apK-IGjCPtor9NZ-byThRgAABmI"]
[Sat Aug 29 05:10:24.304335 2026] [security2:error] [pid 1041789:tid 1041954] [client 20.63.219.114:1985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/wp-admin/class-db.php"] [unique_id "apK-IIv3RhPI65jTFG4OYgAAAzU"]
[Sat Aug 29 05:10:24.308439 2026] [security2:error] [pid 1321:tid 1409] [remote 93.123.109.228:33834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenokie.com"] [uri "/admin_phpinfo.php"] [unique_id "apK-IGjCPtor9NZ-byThSAAGujM"]
[Sat Aug 29 05:10:24.326526 2026] [security2:error] [pid 1321:tid 1527] [client 20.48.250.41:50273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/ioxi.php"] [unique_id "apK-IGjCPtor9NZ-byThTAAABmM"]
[Sat Aug 29 05:10:24.356368 2026] [security2:error] [pid 1041789:tid 1041948] [client 40.83.93.50:15376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/go.php"] [unique_id "apK-IIv3RhPI65jTFG4OcAAAAy8"]
[Sat Aug 29 05:10:24.397014 2026] [security2:error] [pid 1041789:tid 1041978] [client 146.70.36.124:44734] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "don.devi.to"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "apK-IIv3RhPI65jTFG4OeQAAA00"]
[Sat Aug 29 05:10:24.416939 2026] [security2:error] [pid 1041789:tid 1042026] [client 158.23.147.79:63033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/sad/about.php"] [unique_id "apK-IIv3RhPI65jTFG4OewAAA30"]
[Sat Aug 29 05:10:24.418777 2026] [security2:error] [pid 1321:tid 1602] [client 20.48.160.90:63395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/images.php"] [unique_id "apK-IGjCPtor9NZ-byThXwAABq0"]
[Sat Aug 29 05:10:24.420905 2026] [security2:error] [pid 1321:tid 1555] [client 20.48.251.3:43850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/otuz1.php"] [unique_id "apK-IGjCPtor9NZ-byThYAAABn4"]
[Sat Aug 29 05:10:24.427807 2026] [security2:error] [pid 1041789:tid 1042000] [client 20.48.250.41:53469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/wp-blogs.php"] [unique_id "apK-IIv3RhPI65jTFG4OgAAAA2M"]
[Sat Aug 29 05:10:24.433997 2026] [security2:error] [pid 1041789:tid 1042015] [client 158.158.54.35:30532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "apK-IIv3RhPI65jTFG4OgQAAA3I"]
[Sat Aug 29 05:10:24.434606 2026] [security2:error] [pid 1041789:tid 1042047] [client 20.220.204.93:54570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/Ov-Simple1.php"] [unique_id "apK-IIv3RhPI65jTFG4OgwAAA5I"]
[Sat Aug 29 05:10:24.456830 2026] [security2:error] [pid 1041789:tid 1041961] [client 40.83.93.50:8317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/csv.php"] [unique_id "apK-IIv3RhPI65jTFG4OiwAAAzw"]
[Sat Aug 29 05:10:24.472989 2026] [security2:error] [pid 1041789:tid 1041964] [client 20.48.250.41:64770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/ws69.php"] [unique_id "apK-IIv3RhPI65jTFG4OkAAAAz8"]
[Sat Aug 29 05:10:24.473014 2026] [security2:error] [pid 1041789:tid 1042020] [client 158.23.147.79:14221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-includes/css/index.php"] [unique_id "apK-IIv3RhPI65jTFG4OjwAAA3c"]
[Sat Aug 29 05:10:24.475029 2026] [security2:error] [pid 1041789:tid 1041997] [client 52.139.37.240:12916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/zup.php"] [unique_id "apK-IIv3RhPI65jTFG4OkgAAA2A"]
[Sat Aug 29 05:10:24.475389 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.48.250.41:50209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/bootstrap.php"] [unique_id "apK-IIv3RhPI65jTFG4OkwAAA2Q"]
[Sat Aug 29 05:10:24.496745 2026] [security2:error] [pid 1321:tid 1616] [client 158.23.147.79:55908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-content/admin.php"] [unique_id "apK-IGjCPtor9NZ-byThcAAABrs"]
[Sat Aug 29 05:10:24.499296 2026] [security2:error] [pid 1041789:tid 1041990] [client 45.148.10.62:58686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.yml.fme.mybluehost.me"] [uri "/.env.php"] [unique_id "apK-IIv3RhPI65jTFG4OmAAAA1k"]
[Sat Aug 29 05:10:24.539000 2026] [security2:error] [pid 1321:tid 1442] [remote 93.123.109.228:33834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenokie.com"] [uri "/api/info.php"] [unique_id "apK-IGjCPtor9NZ-byTheQAGulQ"]
[Sat Aug 29 05:10:24.568519 2026] [security2:error] [pid 1041789:tid 1041956] [client 20.48.251.3:43873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/filesystems.php"] [unique_id "apK-IIv3RhPI65jTFG4OqQAAAzc"]
[Sat Aug 29 05:10:24.571129 2026] [security2:error] [pid 1041789:tid 1041979] [client 152.232.136.50:44246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.136.232.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gustafsonzook.com"] [uri "/wp-login.php"] [unique_id "apK-IIv3RhPI65jTFG4OqAAAA04"]
[Sat Aug 29 05:10:24.574542 2026] [autoindex:error] [pid 1321:tid 1510] [client 74.248.24.12:28763] AH01276: Cannot serve directory /home4/myplumgr/public_html/images/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:10:24.593035 2026] [security2:error] [pid 1041789:tid 1041947] [client 91.92.47.191:45856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.giantgardening.com"] [uri "/prod_seed_tallsunflower.php"] [unique_id "apK-IIv3RhPI65jTFG4OrgAAAy4"]
[Sat Aug 29 05:10:24.601541 2026] [security2:error] [pid 1041789:tid 1041944] [client 4.232.148.111:1048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-configs.php"] [unique_id "apK-IIv3RhPI65jTFG4OsQAAAys"]
[Sat Aug 29 05:10:24.606225 2026] [security2:error] [pid 1321:tid 1524] [client 20.48.250.41:50195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/export.php"] [unique_id "apK-IGjCPtor9NZ-byThhgAABmA"]
[Sat Aug 29 05:10:24.607799 2026] [security2:error] [pid 1321:tid 1375] [remote 93.123.109.228:33158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.group3-llc.com"] [uri "/info.php"] [unique_id "apK-IGjCPtor9NZ-byThiAAGVRE"]
[Sat Aug 29 05:10:24.617240 2026] [security2:error] [pid 1041789:tid 1041890] [remote 93.123.109.228:33128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/info.php"] [unique_id "apK-IIv3RhPI65jTFG4OswADjVg"]
[Sat Aug 29 05:10:24.630445 2026] [security2:error] [pid 1041789:tid 1041856] [remote 93.123.109.228:33128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/infophp.php"] [unique_id "apK-IIv3RhPI65jTFG4OtQADjTY"]
[Sat Aug 29 05:10:24.631674 2026] [security2:error] [pid 1321:tid 1460] [remote 93.123.109.228:33158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.group3-llc.com"] [uri "/infophp.php"] [unique_id "apK-IGjCPtor9NZ-byThjAAGVWU"]
[Sat Aug 29 05:10:24.636928 2026] [security2:error] [pid 1321:tid 1466] [remote 93.123.109.228:33158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.group3-llc.com"] [uri "/infos.php"] [unique_id "apK-IGjCPtor9NZ-byThjQAGVWs"]
[Sat Aug 29 05:10:24.647683 2026] [security2:error] [pid 1041789:tid 1041982] [client 20.48.250.41:53461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/mini.php"] [unique_id "apK-IIv3RhPI65jTFG4OuQAAA1E"]
[Sat Aug 29 05:10:24.651948 2026] [security2:error] [pid 1321:tid 1498] [client 20.52.41.200:4623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/file.php"] [unique_id "apK-IGjCPtor9NZ-byThkQAABkY"]
[Sat Aug 29 05:10:24.656099 2026] [security2:error] [pid 1321:tid 1499] [client 20.48.250.41:64812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/ccs.php"] [unique_id "apK-IGjCPtor9NZ-byThkgAABkc"]
[Sat Aug 29 05:10:24.657154 2026] [security2:error] [pid 1321:tid 1465] [remote 93.123.109.228:33834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenokie.com"] [uri "/api/phpinfo.php"] [unique_id "apK-IGjCPtor9NZ-byThkwAGumo"]
[Sat Aug 29 05:10:24.659778 2026] [security2:error] [pid 1041789:tid 1041803] [remote 93.123.109.228:33128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/infos.php"] [unique_id "apK-IIv3RhPI65jTFG4OvAADjQE"]
[Sat Aug 29 05:10:24.671081 2026] [security2:error] [pid 1041789:tid 1041975] [client 20.48.250.41:29634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/init.php"] [unique_id "apK-IIv3RhPI65jTFG4OwAAAA0o"]
[Sat Aug 29 05:10:24.671438 2026] [security2:error] [pid 1321:tid 1599] [client 20.63.219.114:1969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/wp-contentt.php"] [unique_id "apK-IGjCPtor9NZ-byThlQAABqo"]
[Sat Aug 29 05:10:24.675854 2026] [security2:error] [pid 1041789:tid 1041977] [client 52.139.37.240:12299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/a9.php"] [unique_id "apK-IIv3RhPI65jTFG4OwQAAA0w"]
[Sat Aug 29 05:10:24.680806 2026] [security2:error] [pid 1321:tid 1502] [client 93.152.221.156:57643] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpanel.loh.zdx.mybluehost.me"] [uri "/___proxy_subdomain_cpanel/.env.backup"] [unique_id "apK-IGjCPtor9NZ-byThmQAABko"]
[Sat Aug 29 05:10:24.692016 2026] [security2:error] [pid 1041789:tid 1041879] [remote 220.181.108.168:32294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.108.181.220.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/index.php"] [unique_id "apK-IIv3RhPI65jTFG4OxAADJ00"]
[Sat Aug 29 05:10:24.699683 2026] [security2:error] [pid 1321:tid 1561] [client 146.70.36.124:44742] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "don.devi.to"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "apK-IGjCPtor9NZ-byThngAABoQ"]
[Sat Aug 29 05:10:24.708022 2026] [security2:error] [pid 1321:tid 1576] [client 20.48.251.3:46584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/server_info.php"] [unique_id "apK-IGjCPtor9NZ-byThnwAABpM"]
[Sat Aug 29 05:10:24.713983 2026] [security2:error] [pid 1041789:tid 1042034] [client 20.196.209.81:8434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-content/languages/index.php"] [unique_id "apK-IIv3RhPI65jTFG4OyAAAA4U"]
[Sat Aug 29 05:10:24.729818 2026] [security2:error] [pid 1321:tid 1376] [remote 93.123.109.228:33304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/info.php"] [unique_id "apK-IGjCPtor9NZ-byThpAAGsxI"]
[Sat Aug 29 05:10:24.743837 2026] [security2:error] [pid 1321:tid 1494] [client 74.248.24.12:28763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-load.php"] [unique_id "apK-IGjCPtor9NZ-byThpQAABkI"]
[Sat Aug 29 05:10:24.769915 2026] [security2:error] [pid 1321:tid 1585] [client 20.48.250.41:49236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/gk.php"] [unique_id "apK-IGjCPtor9NZ-byThqQAABpw"]
[Sat Aug 29 05:10:24.772103 2026] [security2:error] [pid 1321:tid 1452] [remote 93.123.109.228:33304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/infophp.php"] [unique_id "apK-IGjCPtor9NZ-byThqwAGs10"]
[Sat Aug 29 05:10:24.774986 2026] [security2:error] [pid 1321:tid 1519] [client 40.83.93.50:16469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK-IGjCPtor9NZ-byThrAAABls"]
[Sat Aug 29 05:10:24.788040 2026] [security2:error] [pid 1321:tid 1478] [remote 93.123.109.228:33304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/infos.php"] [unique_id "apK-IGjCPtor9NZ-byThsQAGs3c"]
[Sat Aug 29 05:10:24.806755 2026] [security2:error] [pid 1041789:tid 1042013] [client 20.220.204.93:54571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/wp-blogs.php"] [unique_id "apK-IIv3RhPI65jTFG4O2wAAA3A"]
[Sat Aug 29 05:10:24.816439 2026] [security2:error] [pid 1321:tid 1528] [client 20.48.250.41:53476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/amp.php"] [unique_id "apK-IGjCPtor9NZ-byThuAAABmQ"]
[Sat Aug 29 05:10:24.827153 2026] [security2:error] [pid 1321:tid 1495] [client 20.48.250.41:64775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/mar.php"] [unique_id "apK-IGjCPtor9NZ-byThuwAABkM"]
[Sat Aug 29 05:10:24.827600 2026] [security2:error] [pid 1321:tid 1559] [client 93.152.221.156:57643] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpanel.loh.zdx.mybluehost.me"] [uri "/___proxy_subdomain_cpanel/config/.env"] [unique_id "apK-IGjCPtor9NZ-byThugAABoI"]
[Sat Aug 29 05:10:24.838711 2026] [security2:error] [pid 1321:tid 1607] [client 20.48.251.3:9293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/87.php"] [unique_id "apK-IGjCPtor9NZ-byThvwAABrI"]
[Sat Aug 29 05:10:24.841470 2026] [security2:error] [pid 1321:tid 1567] [client 146.70.36.124:42658] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.allgooddays.org"] [uri "/autodiscover/autodiscover.xml/cms/wp-includes/wlwmanifest.xml"] [unique_id "apK-IGjCPtor9NZ-byThwQAABoo"]
[Sat Aug 29 05:10:24.882634 2026] [security2:error] [pid 1321:tid 1605] [client 20.48.160.90:64633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/ops.php"] [unique_id "apK-IGjCPtor9NZ-byThyAAABrA"]
[Sat Aug 29 05:10:24.885472 2026] [security2:error] [pid 1321:tid 1597] [client 158.158.54.35:35038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/css/wp-login.php"] [unique_id "apK-IGjCPtor9NZ-byThyQAABqg"]
[Sat Aug 29 05:10:24.893443 2026] [security2:error] [pid 1041789:tid 1041942] [client 4.205.62.107:58459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/gecko-litespeed.php"] [unique_id "apK-IIv3RhPI65jTFG4O6wAAAyk"]
[Sat Aug 29 05:10:24.897267 2026] [security2:error] [pid 1321:tid 1503] [client 52.139.37.240:12878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/admin/index.php"] [unique_id "apK-IGjCPtor9NZ-byThzAAABks"]
[Sat Aug 29 05:10:24.933679 2026] [security2:error] [pid 1041789:tid 1041961] [client 20.48.250.41:50280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/logs1.php"] [unique_id "apK-IIv3RhPI65jTFG4O7wAAAzw"]
[Sat Aug 29 05:10:24.954876 2026] [security2:error] [pid 1041789:tid 1041933] [client 4.205.62.107:62726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/05.php"] [unique_id "apK-IIv3RhPI65jTFG4O8gAAAyA"]
[Sat Aug 29 05:10:24.957567 2026] [security2:error] [pid 1041789:tid 1042025] [client 20.48.250.41:50140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/cc13.php"] [unique_id "apK-IIv3RhPI65jTFG4O8wAAA3w"]
[Sat Aug 29 05:10:24.974931 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.48.251.3:43882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/kedi.php"] [unique_id "apK-IIv3RhPI65jTFG4O_AAAA2Q"]
[Sat Aug 29 05:10:25.007241 2026] [security2:error] [pid 1321:tid 1522] [client 40.83.93.50:8601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/fox.php"] [unique_id "apK-IWjCPtor9NZ-byTh3QAABl4"]
[Sat Aug 29 05:10:25.012709 2026] [security2:error] [pid 1321:tid 1600] [client 146.70.36.124:44752] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "don.devi.to"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "apK-IWjCPtor9NZ-byTh3wAABqs"]
[Sat Aug 29 05:10:25.025873 2026] [security2:error] [pid 1321:tid 1594] [client 40.83.93.50:15041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/gecko-new.php"] [unique_id "apK-IWjCPtor9NZ-byTh4AAABqU"]
[Sat Aug 29 05:10:25.031335 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.63.219.114:17923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/theme.php"] [unique_id "apK-IYv3RhPI65jTFG4PCAAAA30"]
[Sat Aug 29 05:10:25.032583 2026] [security2:error] [pid 1041789:tid 1042048] [client 20.220.204.93:65230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/maraz.php"] [unique_id "apK-IYv3RhPI65jTFG4PCgAAA5M"]
[Sat Aug 29 05:10:25.058784 2026] [security2:error] [pid 1041789:tid 1041967] [client 20.48.250.41:64787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/ccu.php"] [unique_id "apK-IYv3RhPI65jTFG4PDwAAA0I"]
[Sat Aug 29 05:10:25.068094 2026] [security2:error] [pid 1041789:tid 1042006] [client 4.232.148.111:20029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-includes/index.php"] [unique_id "apK-IYv3RhPI65jTFG4PEQAAA2k"]
[Sat Aug 29 05:10:25.073860 2026] [security2:error] [pid 1041789:tid 1041991] [client 4.205.62.107:6505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/wp-config.backup.php"] [unique_id "apK-IYv3RhPI65jTFG4PEgAAA1o"]
[Sat Aug 29 05:10:25.094788 2026] [security2:error] [pid 1321:tid 1592] [client 52.139.37.240:12926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/makeasmtp.php"] [unique_id "apK-IWjCPtor9NZ-byTh6gAABqM"]
[Sat Aug 29 05:10:25.094891 2026] [security2:error] [pid 1041789:tid 1042041] [client 158.23.147.79:5907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/mah.php"] [unique_id "apK-IYv3RhPI65jTFG4PFQAAA4w"]
[Sat Aug 29 05:10:25.108583 2026] [security2:error] [pid 1321:tid 1614] [client 20.48.250.41:50176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/inege.php"] [unique_id "apK-IWjCPtor9NZ-byTh6wAABrk"]
[Sat Aug 29 05:10:25.114777 2026] [security2:error] [pid 1041789:tid 1042029] [client 20.196.209.81:12294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-content/languages/min.php"] [unique_id "apK-IYv3RhPI65jTFG4PGQAAA4A"]
[Sat Aug 29 05:10:25.115712 2026] [security2:error] [pid 1041789:tid 1042020] [client 20.52.41.200:4653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK-IYv3RhPI65jTFG4PGgAAA3c"]
[Sat Aug 29 05:10:25.118826 2026] [security2:error] [pid 1321:tid 1566] [client 20.48.251.3:46637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/wp-content/maintenance.php"] [unique_id "apK-IWjCPtor9NZ-byTh7QAABok"]
[Sat Aug 29 05:10:25.128071 2026] [security2:error] [pid 1321:tid 1596] [client 20.104.49.130:53817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/mh.php"] [unique_id "apK-IWjCPtor9NZ-byTh8gAABqc"]
[Sat Aug 29 05:10:25.164061 2026] [security2:error] [pid 1321:tid 1533] [client 20.220.204.93:54601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/mini.php"] [unique_id "apK-IWjCPtor9NZ-byTh9wAABmk"]
[Sat Aug 29 05:10:25.188852 2026] [security2:error] [pid 1041789:tid 1042035] [client 20.48.250.41:64867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/ak.php"] [unique_id "apK-IYv3RhPI65jTFG4PKAAAA4Y"]
[Sat Aug 29 05:10:25.200817 2026] [security2:error] [pid 1041789:tid 1041981] [client 20.48.250.41:53383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/aa.php"] [unique_id "apK-IYv3RhPI65jTFG4PLQAAA1A"]
[Sat Aug 29 05:10:25.220848 2026] [security2:error] [pid 1041789:tid 1041948] [client 20.48.160.90:64591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/coffexium.php"] [unique_id "apK-IYv3RhPI65jTFG4PMAAAAy8"]
[Sat Aug 29 05:10:25.245567 2026] [security2:error] [pid 1321:tid 1538] [client 40.83.93.50:12159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-content/languages/chosen.php"] [unique_id "apK-IWjCPtor9NZ-byTiCgAABm4"]
[Sat Aug 29 05:10:25.250828 2026] [security2:error] [pid 1321:tid 1521] [client 20.48.251.3:43986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/upload.form.php"] [unique_id "apK-IWjCPtor9NZ-byTiCwAABl0"]
[Sat Aug 29 05:10:25.268675 2026] [http2:warn] [pid 1017536:tid 1017764] [client 57.141.14.63:59328] h2_stream(1017536-342-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:10:25.273241 2026] [security2:error] [pid 1321:tid 1547] [client 158.23.147.79:55924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/hehehehe.php"] [unique_id "apK-IWjCPtor9NZ-byTiDgAABnY"]
[Sat Aug 29 05:10:25.274535 2026] [security2:error] [pid 1041789:tid 1042017] [client 20.48.250.41:49252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/wp-link10.php"] [unique_id "apK-IYv3RhPI65jTFG4PPQAAA3Q"]
[Sat Aug 29 05:10:25.299805 2026] [security2:error] [pid 1041789:tid 1041950] [client 52.139.37.240:12542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/paku.php"] [unique_id "apK-IYv3RhPI65jTFG4PQgAAAzE"]
[Sat Aug 29 05:10:25.314667 2026] [security2:error] [pid 1321:tid 1539] [client 146.70.36.124:44768] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "don.devi.to"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "apK-IWjCPtor9NZ-byTiFQAABm8"]
[Sat Aug 29 05:10:25.328327 2026] [security2:error] [pid 1041789:tid 1041933] [client 4.205.62.107:63911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/btx25.php"] [unique_id "apK-IYv3RhPI65jTFG4PSgAAAyA"]
[Sat Aug 29 05:10:25.329020 2026] [security2:error] [pid 1321:tid 1497] [client 158.158.54.35:8325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/images/index.php"] [unique_id "apK-IWjCPtor9NZ-byTiGAAABkU"]
[Sat Aug 29 05:10:25.331666 2026] [security2:error] [pid 1321:tid 1543] [client 158.23.147.79:5918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/x.php"] [unique_id "apK-IWjCPtor9NZ-byTiGgAABnM"]
[Sat Aug 29 05:10:25.355478 2026] [security2:error] [pid 1041789:tid 1041905] [remote 52.167.144.136:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantsfans.net"] [uri "/message_board/index.php"] [unique_id "apK-IYv3RhPI65jTFG4PUgADkmc"]
[Sat Aug 29 05:10:25.366375 2026] [security2:error] [pid 1041789:tid 1041898] [remote 119.249.100.238:33227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 238.100.249.119.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/index.php"] [unique_id "apK-IYv3RhPI65jTFG4PUQADSmA"]
[Sat Aug 29 05:10:25.376829 2026] [security2:error] [pid 1321:tid 1603] [client 20.48.250.41:50110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/s1.php"] [unique_id "apK-IWjCPtor9NZ-byTiJAAABq4"]
[Sat Aug 29 05:10:25.382477 2026] [security2:error] [pid 1041789:tid 1041988] [client 20.48.251.3:46626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/v3.php"] [unique_id "apK-IYv3RhPI65jTFG4PWQAAA1c"]
[Sat Aug 29 05:10:25.391804 2026] [security2:error] [pid 1041789:tid 1042050] [client 20.63.219.114:1960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/alumni_reg.php"] [unique_id "apK-IYv3RhPI65jTFG4PXAAAA5U"]
[Sat Aug 29 05:10:25.397325 2026] [security2:error] [pid 1041789:tid 1041943] [client 20.48.250.41:64776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/lib.php"] [unique_id "apK-IYv3RhPI65jTFG4PXQAAAyo"]
[Sat Aug 29 05:10:25.407087 2026] [security2:error] [pid 1041789:tid 1042044] [client 91.92.47.191:45876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.corrigansbasement.com"] [uri "/wp-config.php"] [unique_id "apK-IYv3RhPI65jTFG4PYQAAA48"]
[Sat Aug 29 05:10:25.431313 2026] [security2:error] [pid 1041789:tid 1042048] [client 20.48.250.41:49248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/ww.php"] [unique_id "apK-IYv3RhPI65jTFG4PZwAAA5M"]
[Sat Aug 29 05:10:25.441384 2026] [security2:error] [pid 1041789:tid 1042034] [client 146.70.36.124:42666] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.allgooddays.org"] [uri "/autodiscover/autodiscover.xml/sito/wp-includes/wlwmanifest.xml"] [unique_id "apK-IYv3RhPI65jTFG4PagAAA4U"]
[Sat Aug 29 05:10:25.445722 2026] [security2:error] [pid 1041789:tid 1041935] [client 20.220.204.93:50252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/amp.php"] [unique_id "apK-IYv3RhPI65jTFG4PbAAAAyI"]
[Sat Aug 29 05:10:25.472595 2026] [security2:error] [pid 1041789:tid 1042057] [client 20.48.160.90:64573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/BDKR28WP.php"] [unique_id "apK-IYv3RhPI65jTFG4PcQAAA5w"]
[Sat Aug 29 05:10:25.495704 2026] [security2:error] [pid 1041789:tid 1041963] [client 52.139.37.240:12910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/rtx.php"] [unique_id "apK-IYv3RhPI65jTFG4PdQAAAz4"]
[Sat Aug 29 05:10:25.511009 2026] [security2:error] [pid 1321:tid 1525] [client 91.92.47.191:45868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantgardening.com"] [uri "/config.php"] [unique_id "apK-IWjCPtor9NZ-byTiOgAABmE"]
[Sat Aug 29 05:10:25.512033 2026] [security2:error] [pid 1041789:tid 1041997] [client 40.83.93.50:6938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/wp-admin.php"] [unique_id "apK-IYv3RhPI65jTFG4PeQAAA2A"]
[Sat Aug 29 05:10:25.513864 2026] [security2:error] [pid 1321:tid 1541] [client 20.104.49.130:57648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/log.php"] [unique_id "apK-IWjCPtor9NZ-byTiOwAABnE"]
[Sat Aug 29 05:10:25.515470 2026] [security2:error] [pid 1321:tid 1558] [client 20.48.251.3:9338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/sale.php"] [unique_id "apK-IWjCPtor9NZ-byTiPAAABoE"]
[Sat Aug 29 05:10:25.534187 2026] [security2:error] [pid 1041789:tid 1042055] [client 4.232.148.111:1360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-admin/a.php"] [unique_id "apK-IYv3RhPI65jTFG4PfQAAA5o"]
[Sat Aug 29 05:10:25.542447 2026] [security2:error] [pid 1321:tid 1611] [client 20.196.209.81:12349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-content/languages/pk.php"] [unique_id "apK-IWjCPtor9NZ-byTiQAAABrY"]
[Sat Aug 29 05:10:25.548636 2026] [security2:error] [pid 1321:tid 1488] [client 158.23.147.79:11315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-content/packed.php"] [unique_id "apK-IWjCPtor9NZ-byTiQgAABjw"]
[Sat Aug 29 05:10:25.554164 2026] [security2:error] [pid 1321:tid 1491] [client 20.52.41.200:4757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/gmo.php"] [unique_id "apK-IWjCPtor9NZ-byTiQwAABj8"]
[Sat Aug 29 05:10:25.555776 2026] [security2:error] [pid 1321:tid 1568] [client 20.48.250.41:64785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/wp-style.php"] [unique_id "apK-IWjCPtor9NZ-byTiRAAABos"]
[Sat Aug 29 05:10:25.563078 2026] [security2:error] [pid 1041789:tid 1041822] [remote 93.123.109.228:33128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/php-info.php"] [unique_id "apK-IYv3RhPI65jTFG4PhQADjRQ"]
[Sat Aug 29 05:10:25.572230 2026] [security2:error] [pid 1041789:tid 1042046] [client 20.220.204.93:65268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/kbfr.php"] [unique_id "apK-IYv3RhPI65jTFG4PhgAAA5E"]
[Sat Aug 29 05:10:25.575683 2026] [security2:error] [pid 1041789:tid 1042028] [client 158.23.147.79:14281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK-IYv3RhPI65jTFG4PiAAAA38"]
[Sat Aug 29 05:10:25.582285 2026] [security2:error] [pid 1041789:tid 1041824] [remote 93.123.109.228:33128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/php.php"] [unique_id "apK-IYv3RhPI65jTFG4PiwADjRY"]
[Sat Aug 29 05:10:25.593136 2026] [security2:error] [pid 1041789:tid 1041992] [client 20.48.250.41:50250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/w1px.php"] [unique_id "apK-IYv3RhPI65jTFG4PjQAAA1s"]
[Sat Aug 29 05:10:25.603447 2026] [security2:error] [pid 1041789:tid 1041862] [remote 93.123.109.228:33128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/php_info.php"] [unique_id "apK-IYv3RhPI65jTFG4PjwADjTw"]
[Sat Aug 29 05:10:25.605993 2026] [security2:error] [pid 1321:tid 1383] [remote 93.123.109.228:33158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.group3-llc.com"] [uri "/php.php"] [unique_id "apK-IWjCPtor9NZ-byTiSwAGVRk"]
[Sat Aug 29 05:10:25.606269 2026] [security2:error] [pid 1041789:tid 1041970] [client 158.23.147.79:58934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/xmlrpc.php"] [unique_id "apK-IYv3RhPI65jTFG4PkAAAA0U"]
[Sat Aug 29 05:10:25.608164 2026] [security2:error] [pid 1041789:tid 1041948] [client 146.70.36.124:44778] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "don.devi.to"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "apK-IYv3RhPI65jTFG4PkQAAAy8"]
[Sat Aug 29 05:10:25.615225 2026] [security2:error] [pid 1321:tid 1468] [remote 93.123.109.228:33158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.group3-llc.com"] [uri "/php_info.php"] [unique_id "apK-IWjCPtor9NZ-byTiTAAGZW0"]
[Sat Aug 29 05:10:25.636726 2026] [security2:error] [pid 1041789:tid 1041884] [remote 93.123.109.228:33128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/phpinfo.php"] [unique_id "apK-IYv3RhPI65jTFG4PlgADjVI"]
[Sat Aug 29 05:10:25.643760 2026] [security2:error] [pid 1041789:tid 1041942] [client 20.48.250.41:50131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/0byte.php"] [unique_id "apK-IYv3RhPI65jTFG4PlwAAAyk"]
[Sat Aug 29 05:10:25.648144 2026] [security2:error] [pid 1041789:tid 1042017] [client 20.48.251.3:46599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/wp-content/themes/luJMF.php"] [unique_id "apK-IYv3RhPI65jTFG4PmQAAA3Q"]
[Sat Aug 29 05:10:25.649085 2026] [security2:error] [pid 1321:tid 1393] [remote 93.123.109.228:33158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.group3-llc.com"] [uri "/phpinfo.php"] [unique_id "apK-IWjCPtor9NZ-byTiWQAGrSM"]
[Sat Aug 29 05:10:25.653994 2026] [security2:error] [pid 1321:tid 1368] [remote 93.123.109.228:33158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.group3-llc.com"] [uri "/php-info.php"] [unique_id "apK-IWjCPtor9NZ-byTiXAAGrQo"]
[Sat Aug 29 05:10:25.677499 2026] [security2:error] [pid 1041789:tid 1042000] [client 74.248.24.12:6658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/a.php"] [unique_id "apK-IYv3RhPI65jTFG4PpAAAA2M"]
[Sat Aug 29 05:10:25.688861 2026] [security2:error] [pid 1321:tid 1613] [client 149.34.210.141:50768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-IWjCPtor9NZ-byTiYwAABrg"]
[Sat Aug 29 05:10:25.689004 2026] [security2:error] [pid 1321:tid 1613] [client 149.34.210.141:50768] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-IWjCPtor9NZ-byTiYwAABrg"]
[Sat Aug 29 05:10:25.693394 2026] [security2:error] [pid 1321:tid 1405] [remote 93.123.109.228:33304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/php-info.php"] [unique_id "apK-IWjCPtor9NZ-byTiZAAGsy8"]
[Sat Aug 29 05:10:25.701332 2026] [security2:error] [pid 1321:tid 1384] [remote 93.123.109.228:33304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/php.php"] [unique_id "apK-IWjCPtor9NZ-byTiZgAGsxo"]
[Sat Aug 29 05:10:25.706340 2026] [security2:error] [pid 1041789:tid 1041950] [client 20.220.204.93:55910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/cc13.php"] [unique_id "apK-IYv3RhPI65jTFG4PqgAAAzE"]
[Sat Aug 29 05:10:25.707081 2026] [security2:error] [pid 1041789:tid 1042043] [client 52.139.37.240:12496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/update/da222.php"] [unique_id "apK-IYv3RhPI65jTFG4PqwAAA44"]
[Sat Aug 29 05:10:25.715766 2026] [security2:error] [pid 1041789:tid 1042025] [client 20.48.250.41:64850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/browse.php"] [unique_id "apK-IYv3RhPI65jTFG4PrgAAA3w"]
[Sat Aug 29 05:10:25.724068 2026] [security2:error] [pid 1321:tid 1412] [remote 93.123.109.228:33304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/php_info.php"] [unique_id "apK-IWjCPtor9NZ-byTiaAAGszY"]
[Sat Aug 29 05:10:25.735541 2026] [security2:error] [pid 1041789:tid 1041991] [client 40.83.93.50:11586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/disagraeosc.php"] [unique_id "apK-IYv3RhPI65jTFG4PtQAAA1o"]
[Sat Aug 29 05:10:25.735541 2026] [security2:error] [pid 1041789:tid 1042014] [client 20.48.250.41:49279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/to.php"] [unique_id "apK-IYv3RhPI65jTFG4PtgAAA3E"]
[Sat Aug 29 05:10:25.749920 2026] [security2:error] [pid 1321:tid 1555] [client 20.63.219.114:1986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/colors.php"] [unique_id "apK-IWjCPtor9NZ-byTiawAABn4"]
[Sat Aug 29 05:10:25.754382 2026] [security2:error] [pid 1041789:tid 1041975] [client 45.148.10.62:58700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.yml.fme.mybluehost.me"] [uri "/wp-config.php"] [unique_id "apK-IYv3RhPI65jTFG4PtwAAA0o"]
[Sat Aug 29 05:10:25.756656 2026] [security2:error] [pid 1041789:tid 1042035] [client 40.83.93.50:1485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-content/languages/index.php"] [unique_id "apK-IYv3RhPI65jTFG4PuQAAA4Y"]
[Sat Aug 29 05:10:25.758075 2026] [security2:error] [pid 1321:tid 1386] [remote 93.123.109.228:33304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/phpinfo.php"] [unique_id "apK-IWjCPtor9NZ-byTibAAGsxw"]
[Sat Aug 29 05:10:25.783542 2026] [security2:error] [pid 1041789:tid 1041943] [client 20.48.251.3:9290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/packed.php"] [unique_id "apK-IYv3RhPI65jTFG4PwQAAAyo"]
[Sat Aug 29 05:10:25.790029 2026] [security2:error] [pid 1041789:tid 1042048] [client 20.48.250.41:53500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/xr.php"] [unique_id "apK-IYv3RhPI65jTFG4PxQAAA5M"]
[Sat Aug 29 05:10:25.810852 2026] [security2:error] [pid 1321:tid 1510] [client 20.104.49.130:63538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pvillusions.com"] [uri "/xa.php"] [unique_id "apK-IWjCPtor9NZ-byTiewAABlI"]
[Sat Aug 29 05:10:25.812496 2026] [security2:error] [pid 1321:tid 1587] [client 20.48.250.41:50333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/term.php"] [unique_id "apK-IWjCPtor9NZ-byTifAAABp4"]
[Sat Aug 29 05:10:25.860765 2026] [security2:error] [pid 1041789:tid 1041851] [remote 93.123.109.228:33128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/public/phpinfo.php"] [unique_id "apK-IYv3RhPI65jTFG4P0wADjTE"]
[Sat Aug 29 05:10:25.869067 2026] [security2:error] [pid 1321:tid 1406] [remote 93.123.109.228:33158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.group3-llc.com"] [uri "/public/phpinfo.php"] [unique_id "apK-IWjCPtor9NZ-byTiigAGZjA"]
[Sat Aug 29 05:10:25.885230 2026] [security2:error] [pid 1041789:tid 1042057] [client 20.220.204.93:54614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/aa.php"] [unique_id "apK-IYv3RhPI65jTFG4P2QAAA5w"]
[Sat Aug 29 05:10:25.905913 2026] [security2:error] [pid 1041789:tid 1041963] [client 146.70.36.124:44784] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "don.devi.to"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "apK-IYv3RhPI65jTFG4P3QAAAz4"]
[Sat Aug 29 05:10:25.912665 2026] [security2:error] [pid 1321:tid 1598] [client 20.48.250.41:50182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/thui.php"] [unique_id "apK-IWjCPtor9NZ-byTilwAABqk"]
[Sat Aug 29 05:10:25.917773 2026] [security2:error] [pid 1321:tid 1495] [client 158.158.54.35:30035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/inputs.php"] [unique_id "apK-IWjCPtor9NZ-byTimwAABkM"]
[Sat Aug 29 05:10:25.926158 2026] [security2:error] [pid 1321:tid 1559] [client 20.48.251.3:44012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/phpi.php"] [unique_id "apK-IWjCPtor9NZ-byTinQAABoI"]
[Sat Aug 29 05:10:25.931600 2026] [security2:error] [pid 1321:tid 1582] [client 20.48.250.41:50153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/h02ugyh.php"] [unique_id "apK-IWjCPtor9NZ-byTingAABpk"]
[Sat Aug 29 05:10:25.937243 2026] [security2:error] [pid 1321:tid 1567] [client 20.48.250.41:64850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/zoo.php"] [unique_id "apK-IWjCPtor9NZ-byTipAAABoo"]
[Sat Aug 29 05:10:25.946073 2026] [security2:error] [pid 1041789:tid 1041990] [client 20.196.209.81:8231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfsol.rfsoftware.com"] [uri "/wp-content/languages/plugins/about.php"] [unique_id "apK-IYv3RhPI65jTFG4P6gAAA1k"]
[Sat Aug 29 05:10:25.950690 2026] [security2:error] [pid 1321:tid 1396] [remote 93.123.109.228:33304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/public/phpinfo.php"] [unique_id "apK-IWjCPtor9NZ-byTipwAGsyY"]
[Sat Aug 29 05:10:25.960804 2026] [security2:error] [pid 1041789:tid 1041906] [remote 93.123.109.228:33546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldstone.com"] [uri "/config.php"] [unique_id "apK-IYv3RhPI65jTFG4P6wADKGg"]
[Sat Aug 29 05:10:25.973439 2026] [security2:error] [pid 1041789:tid 1042055] [client 52.138.0.157:39092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.sitestage.biz"] [uri "/sm.php"] [unique_id "apK-IYv3RhPI65jTFG4P7wAAA5o"]
[Sat Aug 29 05:10:25.993878 2026] [security2:error] [pid 1321:tid 1436] [remote 119.249.100.173:35441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 173.100.249.119.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "obd2toolz.com"] [uri "/index.php"] [unique_id "apK-IWjCPtor9NZ-byTirgAGeE4"]
[Sat Aug 29 05:10:26.012433 2026] [security2:error] [pid 1321:tid 1508] [client 20.52.41.200:4389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/classwithtostring.php"] [unique_id "apK-ImjCPtor9NZ-byTitwAABlA"]
[Sat Aug 29 05:10:26.027807 2026] [core:error] [pid 1041789:tid 1041983] [client 45.148.10.166:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:26.027835 2026] [core:error] [pid 1041789:tid 1041983] [client 45.148.10.166:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:26.042142 2026] [security2:error] [pid 1321:tid 1589] [client 4.205.62.107:4949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/motu.php"] [unique_id "apK-ImjCPtor9NZ-byTivgAABqA"]
[Sat Aug 29 05:10:26.058874 2026] [security2:error] [pid 1321:tid 1579] [client 20.48.251.3:9340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/config_dev.php"] [unique_id "apK-ImjCPtor9NZ-byTivwAABpY"]
[Sat Aug 29 05:10:26.072851 2026] [security2:error] [pid 1321:tid 1614] [client 20.48.250.41:64837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/elp.php"] [unique_id "apK-ImjCPtor9NZ-byTiwQAABrk"]
[Sat Aug 29 05:10:26.090853 2026] [security2:error] [pid 1321:tid 1492] [client 20.48.250.41:50141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/xxw.php"] [unique_id "apK-ImjCPtor9NZ-byTixAAABkA"]
[Sat Aug 29 05:10:26.095854 2026] [security2:error] [pid 1041789:tid 1041992] [client 4.205.62.107:62767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/wp-blog.php"] [unique_id "apK-Iov3RhPI65jTFG4QAQAAA1s"]
[Sat Aug 29 05:10:26.097750 2026] [security2:error] [pid 1321:tid 1492] [client 20.48.250.41:50212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/Jcrop.php"] [unique_id "apK-ImjCPtor9NZ-byTixQAABkA"]
[Sat Aug 29 05:10:26.100569 2026] [security2:error] [pid 1041789:tid 1041833] [remote 93.123.109.228:33772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldperformanceinc.com"] [uri "/config.php"] [unique_id "apK-Iov3RhPI65jTFG4QAwADMB8"]
[Sat Aug 29 05:10:26.106822 2026] [security2:error] [pid 1321:tid 1578] [client 40.83.93.50:6975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/wp-configs.php"] [unique_id "apK-ImjCPtor9NZ-byTiyAAABpU"]
[Sat Aug 29 05:10:26.107226 2026] [security2:error] [pid 1041789:tid 1042029] [client 20.63.219.114:17936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/Js.php"] [unique_id "apK-Iov3RhPI65jTFG4QBAAAA4A"]
[Sat Aug 29 05:10:26.110215 2026] [security2:error] [pid 1321:tid 1523] [client 52.138.0.157:58096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.sitestage.biz"] [uri "/shell.php"] [unique_id "apK-ImjCPtor9NZ-byTiyQAABl8"]
[Sat Aug 29 05:10:26.114292 2026] [security2:error] [pid 1041789:tid 1041970] [client 20.220.204.93:54553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/s1.php"] [unique_id "apK-Iov3RhPI65jTFG4QBQAAA0U"]
[Sat Aug 29 05:10:26.133563 2026] [security2:error] [pid 1041789:tid 1042005] [client 20.104.49.130:51104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/worksec.php"] [unique_id "apK-Iov3RhPI65jTFG4QBgAAA2g"]
[Sat Aug 29 05:10:26.175928 2026] [security2:error] [pid 1041789:tid 1041978] [client 20.220.204.93:63511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/wp-act.php"] [unique_id "apK-Iov3RhPI65jTFG4QFAAAA00"]
[Sat Aug 29 05:10:26.181571 2026] [security2:error] [pid 1041789:tid 1041927] [remote 93.123.109.228:33546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldstone.com"] [uri "/config/aws.php"] [unique_id "apK-Iov3RhPI65jTFG4QGAADKH0"]
[Sat Aug 29 05:10:26.189240 2026] [security2:error] [pid 1321:tid 1543] [client 4.232.148.111:1035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK-ImjCPtor9NZ-byTi1wAABnM"]
[Sat Aug 29 05:10:26.192329 2026] [security2:error] [pid 1041789:tid 1042018] [client 20.48.251.3:9342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/oc460l3x.php"] [unique_id "apK-Iov3RhPI65jTFG4QGwAAA3U"]
[Sat Aug 29 05:10:26.202891 2026] [security2:error] [pid 1321:tid 1558] [client 146.70.36.124:44786] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "don.devi.to"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "apK-ImjCPtor9NZ-byTi2gAABoE"]
[Sat Aug 29 05:10:26.206771 2026] [security2:error] [pid 1321:tid 1600] [client 74.248.24.12:10945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/u.php"] [unique_id "apK-ImjCPtor9NZ-byTi3AAABqs"]
[Sat Aug 29 05:10:26.213854 2026] [security2:error] [pid 1321:tid 1575] [client 34.50.189.51:4324] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "discocollective.kriveloff-associates.com"] [uri "/.anthropic/config.json"] [unique_id "apK-ImjCPtor9NZ-byTi3QAABpI"]
[Sat Aug 29 05:10:26.214129 2026] [security2:error] [pid 1321:tid 1527] [client 158.23.147.79:5878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-blog-header.php"] [unique_id "apK-ImjCPtor9NZ-byTi3gAABmM"]
[Sat Aug 29 05:10:26.222949 2026] [security2:error] [pid 1321:tid 1544] [client 34.50.189.51:4342] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/.hermes/.env"] [unique_id "apK-ImjCPtor9NZ-byTi4wAABnQ"]
[Sat Aug 29 05:10:26.224525 2026] [security2:error] [pid 1321:tid 1592] [client 40.83.93.50:11810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/about.php525"] [unique_id "apK-ImjCPtor9NZ-byTi5QAABqM"]
[Sat Aug 29 05:10:26.226050 2026] [core:error] [pid 1321:tid 1535] [client 34.50.189.51:4466] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:26.226069 2026] [core:error] [pid 1321:tid 1535] [client 34.50.189.51:4466] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:26.227027 2026] [core:error] [pid 1041789:tid 1041987] [client 34.50.189.51:4282] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:26.227046 2026] [core:error] [pid 1041789:tid 1041987] [client 34.50.189.51:4282] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:26.228634 2026] [core:error] [pid 1041789:tid 1041976] [client 34.50.189.51:4224] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:26.228654 2026] [core:error] [pid 1041789:tid 1041976] [client 34.50.189.51:4224] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:26.229584 2026] [security2:error] [pid 1321:tid 1513] [client 4.205.62.107:6287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/edit.php"] [unique_id "apK-ImjCPtor9NZ-byTi6AAABlU"]
[Sat Aug 29 05:10:26.230292 2026] [core:error] [pid 1041789:tid 1042043] [client 34.50.189.51:4236] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:26.230304 2026] [core:error] [pid 1041789:tid 1042043] [client 34.50.189.51:4236] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:26.230312 2026] [security2:error] [pid 1321:tid 1529] [client 20.48.250.41:64801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/666.php"] [unique_id "apK-ImjCPtor9NZ-byTi6QAABmU"]
[Sat Aug 29 05:10:26.232691 2026] [core:error] [pid 1321:tid 1603] [client 34.50.189.51:4254] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:26.232707 2026] [core:error] [pid 1321:tid 1603] [client 34.50.189.51:4254] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:26.235867 2026] [core:error] [pid 1321:tid 1526] [client 34.50.189.51:4472] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:26.235885 2026] [core:error] [pid 1321:tid 1526] [client 34.50.189.51:4472] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:26.236410 2026] [core:error] [pid 1321:tid 1488] [client 34.50.189.51:4436] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:26.236427 2026] [core:error] [pid 1321:tid 1488] [client 34.50.189.51:4436] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:26.237014 2026] [core:error] [pid 1041789:tid 1042025] [client 34.50.189.51:4250] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:26.237023 2026] [core:error] [pid 1041789:tid 1042025] [client 34.50.189.51:4250] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:26.237111 2026] [core:error] [pid 1041789:tid 1042006] [client 34.50.189.51:4306] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:26.237119 2026] [core:error] [pid 1041789:tid 1042006] [client 34.50.189.51:4306] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:26.239169 2026] [core:error] [pid 1041789:tid 1042014] [client 34.50.189.51:4226] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:26.239184 2026] [core:error] [pid 1041789:tid 1042014] [client 34.50.189.51:4226] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:26.241254 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.48.250.41:50065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/bolt.php"] [unique_id "apK-Iov3RhPI65jTFG4QNQAAA30"]
[Sat Aug 29 05:10:26.241842 2026] [security2:error] [pid 1321:tid 1596] [client 40.83.93.50:21592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-content/languages/min.php"] [unique_id "apK-ImjCPtor9NZ-byTi8QAABqc"]
[Sat Aug 29 05:10:26.243102 2026] [security2:error] [pid 1041789:tid 1041957] [client 34.50.189.51:4380] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/.openclaw/.env"] [unique_id "apK-Iov3RhPI65jTFG4QKQAAAzg"]
[Sat Aug 29 05:10:26.244414 2026] [security2:error] [pid 1041789:tid 1041877] [remote 93.123.109.228:33546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldstone.com"] [uri "/config/config.inc.php"] [unique_id "apK-Iov3RhPI65jTFG4QNwADKEs"]
[Sat Aug 29 05:10:26.246237 2026] [core:error] [pid 1041789:tid 1042050] [client 34.50.189.51:4320] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:26.246251 2026] [core:error] [pid 1041789:tid 1042050] [client 34.50.189.51:4320] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:26.249972 2026] [security2:error] [pid 1041789:tid 1042000] [client 52.139.37.240:12881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/wp-admin/min.php"] [unique_id "apK-Iov3RhPI65jTFG4QOAAAA2M"]
[Sat Aug 29 05:10:26.250302 2026] [core:error] [pid 1041789:tid 1041950] [client 34.50.189.51:4294] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:26.250311 2026] [core:error] [pid 1041789:tid 1041950] [client 34.50.189.51:4294] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:26.250439 2026] [security2:error] [pid 1041789:tid 1041968] [client 34.50.189.51:4438] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "discocollective.kriveloff-associates.com"] [uri "/cgi-sys/404.html"] [unique_id "apK-Iov3RhPI65jTFG4QLgAAA0M"]
[Sat Aug 29 05:10:26.252776 2026] [core:error] [pid 1041789:tid 1041956] [client 34.50.189.51:4384] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:26.252792 2026] [core:error] [pid 1041789:tid 1041956] [client 34.50.189.51:4384] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:26.257075 2026] [core:error] [pid 1041789:tid 1041933] [client 34.50.189.51:4268] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:26.257091 2026] [core:error] [pid 1041789:tid 1041933] [client 34.50.189.51:4268] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:26.258456 2026] [core:error] [pid 1041789:tid 1042007] [client 34.50.189.51:4486] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:26.258478 2026] [core:error] [pid 1041789:tid 1042007] [client 34.50.189.51:4486] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:26.265751 2026] [security2:error] [pid 1041789:tid 1041948] [client 45.148.10.62:58708] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "mail.yml.fme.mybluehost.me"] [uri "/wp-config.php.old"] [unique_id "apK-Iov3RhPI65jTFG4QQwAAAy8"]
[Sat Aug 29 05:10:26.271485 2026] [security2:error] [pid 1041789:tid 1042030] [client 20.48.250.41:50293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/ws58.php"] [unique_id "apK-Iov3RhPI65jTFG4QRQAAA4E"]
[Sat Aug 29 05:10:26.289042 2026] [security2:error] [pid 1041789:tid 1041928] [remote 93.123.109.228:33546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldstone.com"] [uri "/config/config.php"] [unique_id "apK-Iov3RhPI65jTFG4QSQADKH4"]
[Sat Aug 29 05:10:26.291070 2026] [security2:error] [pid 1041789:tid 1041915] [remote 93.123.109.228:33772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldperformanceinc.com"] [uri "/config/aws.php"] [unique_id "apK-Iov3RhPI65jTFG4QSwADMHE"]
[Sat Aug 29 05:10:26.311091 2026] [security2:error] [pid 1321:tid 1520] [client 52.138.0.157:39047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.sitestage.biz"] [uri "/simple.php"] [unique_id "apK-ImjCPtor9NZ-byTjCQAABlw"]
[Sat Aug 29 05:10:26.334734 2026] [security2:error] [pid 1321:tid 1584] [client 20.48.251.3:9524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/wp-content/plugin-install.php"] [unique_id "apK-ImjCPtor9NZ-byTjDQAABps"]
[Sat Aug 29 05:10:26.367106 2026] [security2:error] [pid 1041789:tid 1041841] [remote 93.123.109.228:33546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldstone.com"] [uri "/config/env.php"] [unique_id "apK-Iov3RhPI65jTFG4QVwADKCc"]
[Sat Aug 29 05:10:26.369058 2026] [security2:error] [pid 1321:tid 1519] [client 20.48.250.41:50133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/rtx.php"] [unique_id "apK-ImjCPtor9NZ-byTjFQAABls"]
[Sat Aug 29 05:10:26.369570 2026] [security2:error] [pid 1041789:tid 1041968] [client 20.220.204.93:55300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/0byte.php"] [unique_id "apK-Iov3RhPI65jTFG4QVQAAA0M"]
[Sat Aug 29 05:10:26.370601 2026] [security2:error] [pid 1041789:tid 1041867] [remote 93.123.109.228:33772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldperformanceinc.com"] [uri "/config/config.inc.php"] [unique_id "apK-Iov3RhPI65jTFG4QXQADMEE"]
[Sat Aug 29 05:10:26.374003 2026] [security2:error] [pid 1321:tid 1551] [client 34.169.171.101:25708] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "forensicengineernj.com"] [uri "/.gcp/credentials.json"] [unique_id "apK-ImjCPtor9NZ-byTjFgAABno"]
[Sat Aug 29 05:10:26.374411 2026] [security2:error] [pid 1321:tid 1540] [client 158.158.54.35:8379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/alfa.php"] [unique_id "apK-ImjCPtor9NZ-byTjFwAABnA"]
[Sat Aug 29 05:10:26.383842 2026] [security2:error] [pid 1321:tid 1581] [client 34.169.171.101:25926] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/dev/.env"] [unique_id "apK-ImjCPtor9NZ-byTjHwAABpg"]
[Sat Aug 29 05:10:26.383967 2026] [security2:error] [pid 1321:tid 1581] [client 34.169.171.101:25926] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "forensicengineernj.com"] [uri "/dev/.env"] [unique_id "apK-ImjCPtor9NZ-byTjHwAABpg"]
[Sat Aug 29 05:10:26.386927 2026] [security2:error] [pid 1321:tid 1561] [client 34.169.171.101:25936] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/staging/.env"] [unique_id "apK-ImjCPtor9NZ-byTjIgAABoQ"]
[Sat Aug 29 05:10:26.388486 2026] [security2:error] [pid 1041789:tid 1041971] [client 34.169.171.101:25910] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/backup/.env"] [unique_id "apK-Iov3RhPI65jTFG4QaAAAA0Y"]
[Sat Aug 29 05:10:26.388911 2026] [security2:error] [pid 1041789:tid 1042026] [client 34.169.171.101:25914] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/production/.env"] [unique_id "apK-Iov3RhPI65jTFG4QaQAAA30"]
[Sat Aug 29 05:10:26.391879 2026] [security2:error] [pid 1041789:tid 1041991] [client 34.169.171.101:25906] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/client/.env"] [unique_id "apK-Iov3RhPI65jTFG4QawAAA1o"]
[Sat Aug 29 05:10:26.392105 2026] [security2:error] [pid 1041789:tid 1041991] [client 34.169.171.101:25906] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "forensicengineernj.com"] [uri "/client/.env"] [unique_id "apK-Iov3RhPI65jTFG4QawAAA1o"]
[Sat Aug 29 05:10:26.397267 2026] [security2:error] [pid 1321:tid 1559] [client 158.23.147.79:62781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK-ImjCPtor9NZ-byTjIwAABoI"]
[Sat Aug 29 05:10:26.405741 2026] [security2:error] [pid 1041789:tid 1041929] [remote 93.123.109.228:33772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldperformanceinc.com"] [uri "/config/config.php"] [unique_id "apK-Iov3RhPI65jTFG4QdgADMH8"]
[Sat Aug 29 05:10:26.413495 2026] [security2:error] [pid 1041789:tid 1041873] [remote 93.123.109.228:33546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldstone.com"] [uri "/config/module.config.php"] [unique_id "apK-Iov3RhPI65jTFG4QfQADKEc"]
[Sat Aug 29 05:10:26.414021 2026] [security2:error] [pid 1041789:tid 1041873] [remote 93.123.109.228:33546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldstone.com"] [uri "/config/nexmo.php"] [unique_id "apK-Iov3RhPI65jTFG4QfgADKEc"]
[Sat Aug 29 05:10:26.415650 2026] [security2:error] [pid 1321:tid 1503] [client 20.48.250.41:64802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/knmt.php"] [unique_id "apK-ImjCPtor9NZ-byTjJwAABks"]
[Sat Aug 29 05:10:26.416946 2026] [security2:error] [pid 1321:tid 1549] [client 20.48.160.90:63379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/sf.php"] [unique_id "apK-ImjCPtor9NZ-byTjKQAABng"]
[Sat Aug 29 05:10:26.447490 2026] [security2:error] [pid 1321:tid 1598] [client 52.139.37.240:12327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/wp-admin/wp-fileesx-449.php"] [unique_id "apK-ImjCPtor9NZ-byTjMQAABqk"]
[Sat Aug 29 05:10:26.458715 2026] [security2:error] [pid 1041789:tid 1042046] [client 158.23.147.79:5922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-content/x.php"] [unique_id "apK-Iov3RhPI65jTFG4QkQAAA5E"]
[Sat Aug 29 05:10:26.464483 2026] [security2:error] [pid 1041789:tid 1041981] [client 20.48.251.3:9335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/paypal.php"] [unique_id "apK-Iov3RhPI65jTFG4QkgAAA1A"]
[Sat Aug 29 05:10:26.470943 2026] [security2:error] [pid 1041789:tid 1042000] [client 20.63.219.114:2040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/access.php"] [unique_id "apK-Iov3RhPI65jTFG4QkwAAA2M"]
[Sat Aug 29 05:10:26.471469 2026] [security2:error] [pid 1041789:tid 1041945] [client 20.52.41.200:5303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/404.php"] [unique_id "apK-Iov3RhPI65jTFG4QlQAAAyw"]
[Sat Aug 29 05:10:26.471635 2026] [security2:error] [pid 1041789:tid 1041970] [client 4.205.62.107:63923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/app_dev.php"] [unique_id "apK-Iov3RhPI65jTFG4QlgAAA0U"]
[Sat Aug 29 05:10:26.490136 2026] [security2:error] [pid 1321:tid 1562] [client 20.48.250.41:50271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/xs.php"] [unique_id "apK-ImjCPtor9NZ-byTjNgAABoU"]
[Sat Aug 29 05:10:26.511159 2026] [security2:error] [pid 1321:tid 1566] [client 146.70.36.124:44788] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "don.devi.to"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "apK-ImjCPtor9NZ-byTjNwAABok"]
[Sat Aug 29 05:10:26.511427 2026] [security2:error] [pid 1321:tid 1597] [client 52.138.0.157:42651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.sitestage.biz"] [uri "/wp-admin.php"] [unique_id "apK-ImjCPtor9NZ-byTjOAAABqg"]
[Sat Aug 29 05:10:26.513257 2026] [security2:error] [pid 1321:tid 1614] [client 20.48.250.41:53395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/ckk.php"] [unique_id "apK-ImjCPtor9NZ-byTjOQAABrk"]
[Sat Aug 29 05:10:26.526155 2026] [security2:error] [pid 1041789:tid 1041906] [remote 93.123.109.228:33772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldperformanceinc.com"] [uri "/config/module.config.php"] [unique_id "apK-Iov3RhPI65jTFG4QpQADMGg"]
[Sat Aug 29 05:10:26.529154 2026] [security2:error] [pid 1041789:tid 1041836] [remote 93.123.109.228:33546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldstone.com"] [uri "/config/stripe.php"] [unique_id "apK-Iov3RhPI65jTFG4QpgADKCI"]
[Sat Aug 29 05:10:26.541440 2026] [security2:error] [pid 1041789:tid 1041846] [remote 93.123.109.228:33772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldperformanceinc.com"] [uri "/config/nexmo.php"] [unique_id "apK-Iov3RhPI65jTFG4QqAADMCw"]
[Sat Aug 29 05:10:26.547867 2026] [security2:error] [pid 1041789:tid 1041812] [remote 93.123.109.228:33772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldperformanceinc.com"] [uri "/config/env.php"] [unique_id "apK-Iov3RhPI65jTFG4QrAADMAo"]
[Sat Aug 29 05:10:26.547965 2026] [security2:error] [pid 1041789:tid 1041971] [client 20.48.250.41:64870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/sbhu.php"] [unique_id "apK-Iov3RhPI65jTFG4QqwAAA0Y"]
[Sat Aug 29 05:10:26.588385 2026] [security2:error] [pid 1041789:tid 1041991] [client 91.92.47.191:45882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantgardening.rocworx.com"] [uri "/rec_carrot.php"] [unique_id "apK-Iov3RhPI65jTFG4QtwAAA1o"]
[Sat Aug 29 05:10:26.595734 2026] [security2:error] [pid 1041789:tid 1042057] [client 20.48.251.3:9496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/chosen.php"] [unique_id "apK-Iov3RhPI65jTFG4QugAAA5w"]
[Sat Aug 29 05:10:26.603463 2026] [security2:error] [pid 1321:tid 1502] [client 40.83.93.50:11222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/essexec.php"] [unique_id "apK-ImjCPtor9NZ-byTjRwAABko"]
[Sat Aug 29 05:10:26.618660 2026] [security2:error] [pid 1041789:tid 1041963] [client 20.48.250.41:50390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/aaa.php"] [unique_id "apK-Iov3RhPI65jTFG4QwgAAAz4"]
[Sat Aug 29 05:10:26.633334 2026] [security2:error] [pid 1041789:tid 1041833] [remote 93.123.109.228:33772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldperformanceinc.com"] [uri "/config/stripe.php"] [unique_id "apK-Iov3RhPI65jTFG4QxgADMB8"]
[Sat Aug 29 05:10:26.640765 2026] [security2:error] [pid 1041789:tid 1042053] [client 20.220.204.93:61644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/24.php"] [unique_id "apK-Iov3RhPI65jTFG4QxwAAA5g"]
[Sat Aug 29 05:10:26.645037 2026] [security2:error] [pid 1321:tid 1563] [client 20.48.250.41:53380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.hokkaidonp.com"] [uri "/R57.php"] [unique_id "apK-ImjCPtor9NZ-byTjTwAABoY"]
[Sat Aug 29 05:10:26.647789 2026] [security2:error] [pid 1041789:tid 1041979] [client 20.104.49.130:43059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/press.php"] [unique_id "apK-Iov3RhPI65jTFG4QywAAA04"]
[Sat Aug 29 05:10:26.650786 2026] [security2:error] [pid 1041789:tid 1042055] [client 20.48.250.41:49158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/zu.php"] [unique_id "apK-Iov3RhPI65jTFG4QzAAAA5o"]
[Sat Aug 29 05:10:26.654196 2026] [security2:error] [pid 1041789:tid 1041933] [client 20.151.200.44:21764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/pentest.php"] [unique_id "apK-Iov3RhPI65jTFG4QzgAAAyA"]
[Sat Aug 29 05:10:26.654454 2026] [security2:error] [pid 1041789:tid 1041972] [client 52.139.37.240:12519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/wp-content/themes/min.php"] [unique_id "apK-Iov3RhPI65jTFG4QzQAAA0c"]
[Sat Aug 29 05:10:26.666617 2026] [security2:error] [pid 1321:tid 1496] [client 4.232.148.111:19970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.148.232.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mjmodeinc.com"] [uri "/wp-admin.php"] [unique_id "apK-ImjCPtor9NZ-byTjVQAABkQ"]
[Sat Aug 29 05:10:26.683775 2026] [security2:error] [pid 1041789:tid 1041983] [client 158.23.147.79:14260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-content/cong.php"] [unique_id "apK-Iov3RhPI65jTFG4Q1wAAA1I"]
[Sat Aug 29 05:10:26.686390 2026] [security2:error] [pid 1321:tid 1538] [client 20.220.204.93:55912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/xr.php"] [unique_id "apK-ImjCPtor9NZ-byTjWAAABm4"]
[Sat Aug 29 05:10:26.706642 2026] [security2:error] [pid 1321:tid 1440] [remote 93.123.109.228:33834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenokie.com"] [uri "/config.php"] [unique_id "apK-ImjCPtor9NZ-byTjXwAGulI"]
[Sat Aug 29 05:10:26.707081 2026] [security2:error] [pid 1321:tid 1605] [client 20.48.160.90:64544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/k.php"] [unique_id "apK-ImjCPtor9NZ-byTjYAAABrA"]
[Sat Aug 29 05:10:26.709904 2026] [security2:error] [pid 1321:tid 1521] [client 20.48.250.41:62423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/a332.php"] [unique_id "apK-ImjCPtor9NZ-byTjYQAABl0"]
[Sat Aug 29 05:10:26.712887 2026] [security2:error] [pid 1041789:tid 1041961] [client 52.138.0.157:40150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.sitestage.biz"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "apK-Iov3RhPI65jTFG4Q3gAAAzw"]
[Sat Aug 29 05:10:26.714610 2026] [security2:error] [pid 1321:tid 1571] [client 158.23.147.79:62745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/atomlib.php"] [unique_id "apK-ImjCPtor9NZ-byTjYwAABo4"]
[Sat Aug 29 05:10:26.715319 2026] [security2:error] [pid 1041789:tid 1041951] [client 40.83.93.50:8543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/spip.php"] [unique_id "apK-Iov3RhPI65jTFG4Q4AAAAzI"]
[Sat Aug 29 05:10:26.723793 2026] [security2:error] [pid 1041789:tid 1042026] [client 40.83.93.50:1296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-content/languages/pk.php"] [unique_id "apK-Iov3RhPI65jTFG4Q5gAAA30"]
[Sat Aug 29 05:10:26.727498 2026] [security2:error] [pid 1041789:tid 1042000] [client 20.48.251.3:43879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/rum.or.php"] [unique_id "apK-Iov3RhPI65jTFG4Q6AAAA2M"]
[Sat Aug 29 05:10:26.731875 2026] [security2:error] [pid 1041789:tid 1041970] [client 20.48.250.41:49610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-Iov3RhPI65jTFG4Q6wAAA0U"]
[Sat Aug 29 05:10:26.746693 2026] [security2:error] [pid 1321:tid 1557] [client 45.148.10.62:58712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.yml.fme.mybluehost.me"] [uri "/config.php"] [unique_id "apK-ImjCPtor9NZ-byTjZwAABoA"]
[Sat Aug 29 05:10:26.776452 2026] [security2:error] [pid 1041789:tid 1041935] [client 74.248.24.12:10990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/r.php"] [unique_id "apK-Iov3RhPI65jTFG4Q8wAAAyI"]
[Sat Aug 29 05:10:26.808177 2026] [security2:error] [pid 1041789:tid 1042044] [client 146.70.36.124:44792] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "don.devi.to"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "apK-Iov3RhPI65jTFG4Q_AAAA48"]
[Sat Aug 29 05:10:26.810966 2026] [security2:error] [pid 1321:tid 1543] [client 91.92.47.191:41008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.corrigansbasement.com"] [uri "/config.php"] [unique_id "apK-ImjCPtor9NZ-byTjdQAABnM"]
[Sat Aug 29 05:10:26.812385 2026] [security2:error] [pid 1041789:tid 1042031] [client 91.92.47.191:40996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantgardening.com"] [uri "/configuration.php"] [unique_id "apK-Iov3RhPI65jTFG4Q_gAAA4I"]
[Sat Aug 29 05:10:26.817925 2026] [security2:error] [pid 1041789:tid 1041947] [client 158.158.54.35:35042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/403.php"] [unique_id "apK-Iov3RhPI65jTFG4RAAAAAy4"]
[Sat Aug 29 05:10:26.827960 2026] [security2:error] [pid 1041789:tid 1041962] [client 20.48.250.41:49220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/lanka.php"] [unique_id "apK-Iov3RhPI65jTFG4RAgAAAz0"]
[Sat Aug 29 05:10:26.830955 2026] [security2:error] [pid 1041789:tid 1042029] [client 111.235.68.106:31076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK-Iov3RhPI65jTFG4RAwAAA4A"]
[Sat Aug 29 05:10:26.831080 2026] [security2:error] [pid 1041789:tid 1042029] [client 111.235.68.106:31076] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK-Iov3RhPI65jTFG4RAwAAA4A"]
[Sat Aug 29 05:10:26.834583 2026] [security2:error] [pid 1041789:tid 1041971] [client 20.104.49.130:53647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/browse.php"] [unique_id "apK-Iov3RhPI65jTFG4RBAAAA0Y"]
[Sat Aug 29 05:10:26.850941 2026] [security2:error] [pid 1321:tid 1497] [client 52.139.37.240:12289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/wp-content/themes/x/bypass.php"] [unique_id "apK-ImjCPtor9NZ-byTjgAAABkU"]
[Sat Aug 29 05:10:26.850971 2026] [security2:error] [pid 1321:tid 1600] [client 158.23.147.79:11430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-l0gin.php"] [unique_id "apK-ImjCPtor9NZ-byTjfwAABqs"]
[Sat Aug 29 05:10:26.856399 2026] [security2:error] [pid 1041789:tid 1042057] [client 20.220.204.93:63541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/155.php"] [unique_id "apK-Iov3RhPI65jTFG4RCQAAA5w"]
[Sat Aug 29 05:10:26.859715 2026] [security2:error] [pid 1321:tid 1575] [client 20.48.251.3:43872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/loxi-o.php"] [unique_id "apK-ImjCPtor9NZ-byTjhAAABpI"]
[Sat Aug 29 05:10:26.859757 2026] [security2:error] [pid 1321:tid 1431] [remote 93.123.109.228:33834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenokie.com"] [uri "/config/aws.php"] [unique_id "apK-ImjCPtor9NZ-byTjhQAGukk"]
[Sat Aug 29 05:10:26.863878 2026] [security2:error] [pid 1041789:tid 1041956] [client 20.48.250.41:64871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/ws66.php"] [unique_id "apK-Iov3RhPI65jTFG4RDgAAAzc"]
[Sat Aug 29 05:10:26.883573 2026] [security2:error] [pid 1321:tid 1525] [client 20.48.250.41:49545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-ImjCPtor9NZ-byTjiQAABmE"]
[Sat Aug 29 05:10:26.889096 2026] [security2:error] [pid 1041789:tid 1041931] [client 20.63.219.114:17958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/classsmtps.php"] [unique_id "apK-Iov3RhPI65jTFG4REAAAAx4"]
[Sat Aug 29 05:10:26.915115 2026] [security2:error] [pid 1041789:tid 1041991] [client 52.138.0.157:58086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.sitestage.biz"] [uri "/wp-admin/includes/about.php"] [unique_id "apK-Iov3RhPI65jTFG4RFAAAA1o"]
[Sat Aug 29 05:10:26.916696 2026] [security2:error] [pid 1041789:tid 1041972] [client 20.220.204.93:54622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/h02ugyh.php"] [unique_id "apK-Iov3RhPI65jTFG4RFQAAA0c"]
[Sat Aug 29 05:10:26.927303 2026] [security2:error] [pid 1041789:tid 1041991] [client 20.104.49.130:57720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/as.php"] [unique_id "apK-Iov3RhPI65jTFG4RGQAAA1o"]
[Sat Aug 29 05:10:26.931231 2026] [security2:error] [pid 1041789:tid 1041982] [client 20.52.41.200:4780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/php.php"] [unique_id "apK-Iov3RhPI65jTFG4RGwAAA1E"]
[Sat Aug 29 05:10:26.942315 2026] [security2:error] [pid 1321:tid 1434] [remote 93.123.109.228:33834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenokie.com"] [uri "/config/config.inc.php"] [unique_id "apK-ImjCPtor9NZ-byTjkQAGukw"]
[Sat Aug 29 05:10:26.975043 2026] [security2:error] [pid 1321:tid 1407] [remote 93.123.109.228:33834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenokie.com"] [uri "/config/config.php"] [unique_id "apK-ImjCPtor9NZ-byTjlQAGujE"]
[Sat Aug 29 05:10:26.984839 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.48.160.90:63482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/82.php"] [unique_id "apK-Iov3RhPI65jTFG4RJgAAA3o"]
[Sat Aug 29 05:10:26.991180 2026] [security2:error] [pid 1041789:tid 1041964] [client 20.48.251.3:9512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/luJMF.php"] [unique_id "apK-Iov3RhPI65jTFG4RKAAAAz8"]
[Sat Aug 29 05:10:27.011894 2026] [security2:error] [pid 1041789:tid 1042046] [client 20.48.250.41:50210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/gettest.php"] [unique_id "apK-I4v3RhPI65jTFG4RLgAAA5E"]
[Sat Aug 29 05:10:27.019901 2026] [security2:error] [pid 1321:tid 1596] [client 20.48.250.41:49558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/ff1.php"] [unique_id "apK-I2jCPtor9NZ-byTjmwAABqc"]
[Sat Aug 29 05:10:27.039943 2026] [security2:error] [pid 1321:tid 1534] [client 68.155.159.216:56537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/.well-knownold/index.php"] [unique_id "apK-I2jCPtor9NZ-byTjnwAABmo"]
[Sat Aug 29 05:10:27.073676 2026] [security2:error] [pid 1321:tid 1444] [remote 93.123.109.228:33834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenokie.com"] [uri "/config/env.php"] [unique_id "apK-I2jCPtor9NZ-byTjpQAGulY"]
[Sat Aug 29 05:10:27.107531 2026] [security2:error] [pid 1041789:tid 1041990] [client 146.70.36.124:40130] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "don.devi.to"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "apK-I4v3RhPI65jTFG4RPwAAA1k"]
[Sat Aug 29 05:10:27.111497 2026] [security2:error] [pid 1041789:tid 1041943] [client 20.48.250.41:64843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/ws68.php"] [unique_id "apK-I4v3RhPI65jTFG4RQQAAAyo"]
[Sat Aug 29 05:10:27.116121 2026] [security2:error] [pid 1321:tid 1550] [client 52.138.0.157:42626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.sitestage.biz"] [uri "/wp-admin/js/index.php"] [unique_id "apK-I2jCPtor9NZ-byTjqQAABnk"]
[Sat Aug 29 05:10:27.118386 2026] [security2:error] [pid 1041789:tid 1041931] [client 20.52.41.200:2753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/.trash7206/index.php"] [unique_id "apK-I4v3RhPI65jTFG4RQgAAAx4"]
[Sat Aug 29 05:10:27.121174 2026] [security2:error] [pid 1041789:tid 1042055] [client 20.48.250.41:50314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/xsox.php"] [unique_id "apK-I4v3RhPI65jTFG4RRQAAA5o"]
[Sat Aug 29 05:10:27.121276 2026] [security2:error] [pid 1041789:tid 1042020] [client 40.83.93.50:6947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/hello.php"] [unique_id "apK-I4v3RhPI65jTFG4RRAAAA3c"]
[Sat Aug 29 05:10:27.122012 2026] [security2:error] [pid 1041789:tid 1041933] [client 20.48.251.3:9319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/drykl.php"] [unique_id "apK-I4v3RhPI65jTFG4RRgAAAyA"]
[Sat Aug 29 05:10:27.124527 2026] [security2:error] [pid 1321:tid 1437] [remote 93.123.109.228:33834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenokie.com"] [uri "/config/module.config.php"] [unique_id "apK-I2jCPtor9NZ-byTjqwAGuk8"]
[Sat Aug 29 05:10:27.145082 2026] [security2:error] [pid 1321:tid 1383] [remote 93.123.109.228:33834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenokie.com"] [uri "/config/nexmo.php"] [unique_id "apK-I2jCPtor9NZ-byTjsQAGuhk"]
[Sat Aug 29 05:10:27.157174 2026] [security2:error] [pid 1041789:tid 1041972] [client 20.48.250.41:49542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/t.php"] [unique_id "apK-I4v3RhPI65jTFG4RTwAAA0c"]
[Sat Aug 29 05:10:27.189184 2026] [security2:error] [pid 1321:tid 1520] [client 20.48.250.41:50288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/35.php"] [unique_id "apK-I2jCPtor9NZ-byTjugAABlw"]
[Sat Aug 29 05:10:27.200468 2026] [security2:error] [pid 1321:tid 1584] [client 4.205.62.107:58415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/rpk.php"] [unique_id "apK-I2jCPtor9NZ-byTjvQAABps"]
[Sat Aug 29 05:10:27.207322 2026] [security2:error] [pid 1321:tid 1555] [client 45.148.10.62:58728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.yml.fme.mybluehost.me"] [uri "/config.php.bak"] [unique_id "apK-I2jCPtor9NZ-byTjvgAABn4"]
[Sat Aug 29 05:10:27.211833 2026] [security2:error] [pid 1041789:tid 1041935] [client 40.83.93.50:22141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.ccfinancialaccounting.com"] [uri "/wp-content/languages/plugins/about.php"] [unique_id "apK-I4v3RhPI65jTFG4RXAAAAyI"]
[Sat Aug 29 05:10:27.214329 2026] [security2:error] [pid 1041789:tid 1041938] [client 20.220.204.93:63595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/file.php"] [unique_id "apK-I4v3RhPI65jTFG4RXgAAAyU"]
[Sat Aug 29 05:10:27.220666 2026] [security2:error] [pid 1321:tid 1360] [remote 93.123.109.228:33834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenokie.com"] [uri "/config/stripe.php"] [unique_id "apK-I2jCPtor9NZ-byTjxQAGugQ"]
[Sat Aug 29 05:10:27.228782 2026] [security2:error] [pid 1041789:tid 1041961] [client 60.243.207.176:61336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK-I4v3RhPI65jTFG4RYgAAAzw"]
[Sat Aug 29 05:10:27.228884 2026] [security2:error] [pid 1041789:tid 1041961] [client 60.243.207.176:61336] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK-I4v3RhPI65jTFG4RYgAAAzw"]
[Sat Aug 29 05:10:27.236186 2026] [security2:error] [pid 1321:tid 1585] [client 4.205.62.107:59089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/erty.php"] [unique_id "apK-I2jCPtor9NZ-byTjxwAABpw"]
[Sat Aug 29 05:10:27.253238 2026] [security2:error] [pid 1041789:tid 1041948] [client 20.48.251.3:10064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/aws.php"] [unique_id "apK-I4v3RhPI65jTFG4RagAAAy8"]
[Sat Aug 29 05:10:27.261414 2026] [security2:error] [pid 1041789:tid 1041943] [client 158.158.54.35:35049] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "narrowgate-industries.com"] [uri "/1.php"] [unique_id "apK-I4v3RhPI65jTFG4RbQAAAyo"]
[Sat Aug 29 05:10:27.261520 2026] [security2:error] [pid 1041789:tid 1041943] [client 158.158.54.35:35049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/1.php"] [unique_id "apK-I4v3RhPI65jTFG4RbQAAAyo"]
[Sat Aug 29 05:10:27.270673 2026] [security2:error] [pid 1321:tid 1551] [client 20.220.204.93:54551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/xxw.php"] [unique_id "apK-I2jCPtor9NZ-byTjzwAABno"]
[Sat Aug 29 05:10:27.272793 2026] [security2:error] [pid 1041789:tid 1041950] [client 20.48.160.90:64538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/dex.php"] [unique_id "apK-I4v3RhPI65jTFG4RbgAAAzE"]
[Sat Aug 29 05:10:27.282195 2026] [security2:error] [pid 1321:tid 1564] [client 20.48.250.41:64863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/users.php"] [unique_id "apK-I2jCPtor9NZ-byTj0gAABoc"]
[Sat Aug 29 05:10:27.284630 2026] [security2:error] [pid 1321:tid 1510] [client 20.63.219.114:9205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/contentloader1.php"] [unique_id "apK-I2jCPtor9NZ-byTj0wAABlI"]
[Sat Aug 29 05:10:27.286322 2026] [security2:error] [pid 1041789:tid 1041942] [client 20.48.250.41:49658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/erty.php"] [unique_id "apK-I4v3RhPI65jTFG4RcAAAAyk"]
[Sat Aug 29 05:10:27.298279 2026] [security2:error] [pid 1041789:tid 1042054] [client 74.248.24.12:15955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-blog.php"] [unique_id "apK-I4v3RhPI65jTFG4RcwAAA5k"]
[Sat Aug 29 05:10:27.336940 2026] [security2:error] [pid 1321:tid 1582] [client 158.23.147.79:5936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK-I2jCPtor9NZ-byTj4AAABpk"]
[Sat Aug 29 05:10:27.345768 2026] [security2:error] [pid 1321:tid 1509] [client 20.48.250.41:50275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/maraz.php"] [unique_id "apK-I2jCPtor9NZ-byTj4QAABlE"]
[Sat Aug 29 05:10:27.354131 2026] [security2:error] [pid 1321:tid 1495] [client 52.139.37.240:12418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK-I2jCPtor9NZ-byTj4gAABkM"]
[Sat Aug 29 05:10:27.358340 2026] [security2:error] [pid 1041789:tid 1041971] [client 20.220.204.93:65199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK-I4v3RhPI65jTFG4RgwAAA0Y"]
[Sat Aug 29 05:10:27.367785 2026] [security2:error] [pid 1041789:tid 1042019] [client 4.205.62.107:6896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/8.php"] [unique_id "apK-I4v3RhPI65jTFG4RhwAAA3Y"]
[Sat Aug 29 05:10:27.383646 2026] [security2:error] [pid 1041789:tid 1042005] [client 20.52.41.200:4657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/init.php"] [unique_id "apK-I4v3RhPI65jTFG4RigAAA2g"]
[Sat Aug 29 05:10:27.384811 2026] [security2:error] [pid 1041789:tid 1041963] [client 20.48.251.3:44028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/05.php"] [unique_id "apK-I4v3RhPI65jTFG4RiwAAAz4"]
[Sat Aug 29 05:10:27.412390 2026] [security2:error] [pid 1321:tid 1506] [client 20.220.204.93:54543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/bolt.php"] [unique_id "apK-I2jCPtor9NZ-byTj7wAABk4"]
[Sat Aug 29 05:10:27.422343 2026] [security2:error] [pid 1041789:tid 1041995] [client 146.70.36.124:40136] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "don.devi.to"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "apK-I4v3RhPI65jTFG4RlgAAA14"]
[Sat Aug 29 05:10:27.442520 2026] [security2:error] [pid 1041789:tid 1042028] [client 20.48.250.41:49565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/0x.php"] [unique_id "apK-I4v3RhPI65jTFG4RmwAAA38"]
[Sat Aug 29 05:10:27.457902 2026] [security2:error] [pid 1041789:tid 1042030] [client 52.138.0.157:33499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.sitestage.biz"] [uri "/wp-admin/maint/index.php"] [unique_id "apK-I4v3RhPI65jTFG4RoAAAA4E"]
[Sat Aug 29 05:10:27.461283 2026] [security2:error] [pid 1041789:tid 1042047] [client 20.48.250.41:64851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/bzjdlofz.php"] [unique_id "apK-I4v3RhPI65jTFG4RoQAAA5I"]
[Sat Aug 29 05:10:27.479288 2026] [security2:error] [pid 1321:tid 1613] [client 20.48.160.90:64557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/inso.php"] [unique_id "apK-I2jCPtor9NZ-byTj-gAABrg"]
[Sat Aug 29 05:10:27.496699 2026] [security2:error] [pid 1321:tid 1512] [client 20.48.250.41:29639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/lkui.php"] [unique_id "apK-I2jCPtor9NZ-byTkAQAABlQ"]
[Sat Aug 29 05:10:27.504448 2026] [security2:error] [pid 1321:tid 1528] [client 20.48.250.41:50282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/kbfr.php"] [unique_id "apK-I2jCPtor9NZ-byTkBQAABmQ"]
[Sat Aug 29 05:10:27.510335 2026] [security2:error] [pid 1321:tid 1562] [client 158.23.147.79:62739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-content/admin.php"] [unique_id "apK-I2jCPtor9NZ-byTkDAAABoU"]
[Sat Aug 29 05:10:27.517104 2026] [security2:error] [pid 1041789:tid 1041935] [client 20.48.251.3:43844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/xmy.php"] [unique_id "apK-I4v3RhPI65jTFG4RrwAAAyI"]
[Sat Aug 29 05:10:27.535621 2026] [security2:error] [pid 1321:tid 1597] [client 158.23.147.79:58088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/admin.php"] [unique_id "apK-I2jCPtor9NZ-byTkEQAABqg"]
[Sat Aug 29 05:10:27.549958 2026] [security2:error] [pid 1041789:tid 1041983] [client 52.139.37.240:12507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/wp-info.php"] [unique_id "apK-I4v3RhPI65jTFG4RtwAAA1I"]
[Sat Aug 29 05:10:27.578203 2026] [security2:error] [pid 1321:tid 1492] [client 158.23.147.79:5971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK-I2jCPtor9NZ-byTkGAAABkA"]
[Sat Aug 29 05:10:27.580670 2026] [security2:error] [pid 1041789:tid 1041979] [client 20.52.41.200:2763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wk/index.php"] [unique_id "apK-I4v3RhPI65jTFG4RvAAAA04"]
[Sat Aug 29 05:10:27.592099 2026] [security2:error] [pid 1041789:tid 1041969] [client 40.83.93.50:8822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/backup.php"] [unique_id "apK-I4v3RhPI65jTFG4RwgAAA0Q"]
[Sat Aug 29 05:10:27.595795 2026] [core:notice] [pid 935608:tid 935608] AH00051: child pid 1011406 exit signal Abort (6), possible coredump in /etc/apache2
[Sat Aug 29 05:10:27.607512 2026] [security2:error] [pid 1321:tid 1504] [client 4.205.62.107:61716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/php-info.php"] [unique_id "apK-I2jCPtor9NZ-byTkHAAABkw"]
[Sat Aug 29 05:10:27.617032 2026] [security2:error] [pid 1041789:tid 1041997] [client 20.104.49.130:45734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/gecko-new.php"] [unique_id "apK-I4v3RhPI65jTFG4RxwAAA2A"]
[Sat Aug 29 05:10:27.618609 2026] [security2:error] [pid 1041789:tid 1042031] [client 20.48.250.41:49635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/66.php"] [unique_id "apK-I4v3RhPI65jTFG4RyAAAA4I"]
[Sat Aug 29 05:10:27.638246 2026] [security2:error] [pid 1041789:tid 1041844] [remote 93.123.109.228:33546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldstone.com"] [uri "/info.php"] [unique_id "apK-I4v3RhPI65jTFG4RzAADKCo"]
[Sat Aug 29 05:10:27.641433 2026] [security2:error] [pid 1321:tid 1602] [client 40.83.93.50:6913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/fi2.php"] [unique_id "apK-I2jCPtor9NZ-byTkIQAABq0"]
[Sat Aug 29 05:10:27.642436 2026] [security2:error] [pid 1041789:tid 1041831] [remote 93.123.109.228:33546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldstone.com"] [uri "/infophp.php"] [unique_id "apK-I4v3RhPI65jTFG4RzQADKB0"]
[Sat Aug 29 05:10:27.647432 2026] [security2:error] [pid 1321:tid 1566] [client 20.63.219.114:17980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/al.php"] [unique_id "apK-I2jCPtor9NZ-byTkIwAABok"]
[Sat Aug 29 05:10:27.647433 2026] [security2:error] [pid 1041789:tid 1041964] [client 20.48.251.3:9307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/wp-blog.php"] [unique_id "apK-I4v3RhPI65jTFG4RzwAAAz8"]
[Sat Aug 29 05:10:27.656441 2026] [security2:error] [pid 1041789:tid 1041809] [remote 93.123.109.228:33546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldstone.com"] [uri "/infos.php"] [unique_id "apK-I4v3RhPI65jTFG4R0AADKAc"]
[Sat Aug 29 05:10:27.657164 2026] [security2:error] [pid 1321:tid 1490] [client 52.138.0.157:40129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.sitestage.biz"] [uri "/wp-admin/network/admin.php"] [unique_id "apK-I2jCPtor9NZ-byTkJgAABj4"]
[Sat Aug 29 05:10:27.662608 2026] [security2:error] [pid 1041789:tid 1041988] [client 20.220.204.93:55882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/rtx.php"] [unique_id "apK-I4v3RhPI65jTFG4R0QAAA1c"]
[Sat Aug 29 05:10:27.687580 2026] [security2:error] [pid 1321:tid 1571] [client 20.48.250.41:64793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/selesai.php"] [unique_id "apK-I2jCPtor9NZ-byTkLAAABo4"]
[Sat Aug 29 05:10:27.697451 2026] [security2:error] [pid 1321:tid 1589] [client 62.60.130.128:53258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.130.60.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "haddadenterprises.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "apK-I2jCPtor9NZ-byTkLgAABqA"]
[Sat Aug 29 05:10:27.698326 2026] [security2:error] [pid 1321:tid 1547] [client 20.48.160.90:63480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/aa.php"] [unique_id "apK-I2jCPtor9NZ-byTkLwAABnY"]
[Sat Aug 29 05:10:27.698348 2026] [security2:error] [pid 1321:tid 1612] [client 20.48.250.41:49259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/wp-act.php"] [unique_id "apK-I2jCPtor9NZ-byTkMAAABrc"]
[Sat Aug 29 05:10:27.705263 2026] [security2:error] [pid 1041789:tid 1042043] [client 20.48.250.41:50313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "apK-I4v3RhPI65jTFG4R1QAAA44"]
[Sat Aug 29 05:10:27.719712 2026] [security2:error] [pid 1321:tid 1539] [client 146.70.36.124:40140] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "don.devi.to"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "apK-I2jCPtor9NZ-byTkNgAABm8"]
[Sat Aug 29 05:10:27.741869 2026] [security2:error] [pid 1041789:tid 1041963] [client 20.104.18.15:15343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/gjewuagf.php"] [unique_id "apK-I4v3RhPI65jTFG4R4QAAAz4"]
[Sat Aug 29 05:10:27.741882 2026] [security2:error] [pid 1041789:tid 1041982] [client 202.71.25.11:60906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.25.71.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK-I4v3RhPI65jTFG4R4gAAA1E"]
[Sat Aug 29 05:10:27.742002 2026] [security2:error] [pid 1041789:tid 1041982] [client 202.71.25.11:60906] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK-I4v3RhPI65jTFG4R4gAAA1E"]
[Sat Aug 29 05:10:27.744622 2026] [security2:error] [pid 1041789:tid 1041962] [client 52.139.37.240:12876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/wp-wordfence-waf.php"] [unique_id "apK-I4v3RhPI65jTFG4R5AAAAz0"]
[Sat Aug 29 05:10:27.749609 2026] [security2:error] [pid 1041789:tid 1042014] [client 20.48.250.41:49606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/f35.php"] [unique_id "apK-I4v3RhPI65jTFG4R5gAAA3E"]
[Sat Aug 29 05:10:27.750494 2026] [http2:info] [pid 11274:tid 11274] h2_workers: created with min=128 max=192 idle_ms=600000
[Sat Aug 29 05:10:27.755853 2026] [security2:error] [pid 1041789:tid 1041840] [remote 93.123.109.228:33772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldperformanceinc.com"] [uri "/info.php"] [unique_id "apK-I4v3RhPI65jTFG4R6wADMCY"]
[Sat Aug 29 05:10:27.793589 2026] [security2:error] [pid 11274:tid 11445] [client 20.48.251.3:43901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/update.php"] [unique_id "apK-I2bX5DA3XO6e_qQf6wAAAQs"]
[Sat Aug 29 05:10:27.795105 2026] [security2:error] [pid 1321:tid 1558] [client 20.104.18.15:44030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/222.php"] [unique_id "apK-I2jCPtor9NZ-byTkRwAABoE"]
[Sat Aug 29 05:10:27.797187 2026] [security2:error] [pid 1041789:tid 1041987] [client 158.23.147.79:14301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK-I4v3RhPI65jTFG4R8AAAA1Y"]
[Sat Aug 29 05:10:27.798151 2026] [security2:error] [pid 1321:tid 1497] [client 20.104.18.15:41953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/504.php"] [unique_id "apK-I2jCPtor9NZ-byTkSwAABkU"]
[Sat Aug 29 05:10:27.798476 2026] [security2:error] [pid 1041789:tid 1041868] [remote 93.123.109.228:33772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldperformanceinc.com"] [uri "/infophp.php"] [unique_id "apK-I4v3RhPI65jTFG4R8wADMEI"]
[Sat Aug 29 05:10:27.816712 2026] [security2:error] [pid 1321:tid 1496] [client 74.248.24.12:4332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/xxx.php"] [unique_id "apK-I2jCPtor9NZ-byTkVAAABkQ"]
[Sat Aug 29 05:10:27.827931 2026] [security2:error] [pid 1041789:tid 1041944] [client 20.104.18.15:44028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/gigi.php"] [unique_id "apK-I4v3RhPI65jTFG4R-wAAAys"]
[Sat Aug 29 05:10:27.831821 2026] [security2:error] [pid 1041789:tid 1042053] [client 20.104.18.15:7128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/run.php"] [unique_id "apK-I4v3RhPI65jTFG4R_AAAA5g"]
[Sat Aug 29 05:10:27.832658 2026] [security2:error] [pid 11274:tid 11447] [client 158.23.147.79:55921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/lv.php"] [unique_id "apK-I2bX5DA3XO6e_qQf7AAAAQ0"]
[Sat Aug 29 05:10:27.843205 2026] [security2:error] [pid 1321:tid 1557] [client 20.52.41.200:4414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "apK-I2jCPtor9NZ-byTkWQAABoA"]
[Sat Aug 29 05:10:27.852321 2026] [security2:error] [pid 11274:tid 11446] [client 20.48.160.90:64526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/img.php"] [unique_id "apK-I2bX5DA3XO6e_qQf7QAAAQw"]
[Sat Aug 29 05:10:27.854349 2026] [security2:error] [pid 11274:tid 11448] [client 20.48.250.41:64866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/shlo.php"] [unique_id "apK-I2bX5DA3XO6e_qQf7gAAAQ4"]
[Sat Aug 29 05:10:27.856032 2026] [security2:error] [pid 1041789:tid 1041812] [remote 93.123.109.228:33772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldperformanceinc.com"] [uri "/infos.php"] [unique_id "apK-I4v3RhPI65jTFG4R_wADMAo"]
[Sat Aug 29 05:10:27.857773 2026] [security2:error] [pid 1321:tid 1548] [client 158.158.54.35:30025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/s.php"] [unique_id "apK-I2jCPtor9NZ-byTkXQAABnc"]
[Sat Aug 29 05:10:27.864803 2026] [security2:error] [pid 1321:tid 1600] [client 52.138.0.157:40143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.sitestage.biz"] [uri "/wp-conflg/function.php"] [unique_id "apK-I2jCPtor9NZ-byTkYAAABqs"]
[Sat Aug 29 05:10:27.866237 2026] [security2:error] [pid 11274:tid 11450] [client 20.104.18.15:22492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/abcd.php"] [unique_id "apK-I2bX5DA3XO6e_qQf7wAAARA"]
[Sat Aug 29 05:10:27.907143 2026] [security2:error] [pid 1321:tid 1531] [client 20.48.250.41:49609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/wen.php"] [unique_id "apK-I2jCPtor9NZ-byTkZwAABmc"]
[Sat Aug 29 05:10:27.912824 2026] [security2:error] [pid 1321:tid 1560] [client 20.48.250.41:50336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/motu.php"] [unique_id "apK-I2jCPtor9NZ-byTkaAAABoM"]
[Sat Aug 29 05:10:27.927137 2026] [security2:error] [pid 11274:tid 11455] [client 20.104.18.15:15307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/tnglzqmv.php"] [unique_id "apK-I2bX5DA3XO6e_qQf8AAAARU"]
[Sat Aug 29 05:10:27.927788 2026] [security2:error] [pid 1041789:tid 1041972] [client 20.220.204.93:54577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/ckk.php"] [unique_id "apK-I4v3RhPI65jTFG4SEQAAA0c"]
[Sat Aug 29 05:10:27.931533 2026] [security2:error] [pid 1041789:tid 1041960] [client 20.48.251.3:44023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/fns.php"] [unique_id "apK-I4v3RhPI65jTFG4SEgAAAzs"]
[Sat Aug 29 05:10:27.940637 2026] [access_compat:error] [pid 1041789:tid 1042041] [client 67.20.76.220:24468] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:10:27.942604 2026] [access_compat:error] [pid 1041789:tid 1041951] [client 67.20.76.220:24474] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:10:27.945073 2026] [security2:error] [pid 1041789:tid 1042020] [client 52.139.37.240:12458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/ws49.php"] [unique_id "apK-I4v3RhPI65jTFG4SFwAAA3c"]
[Sat Aug 29 05:10:27.964114 2026] [security2:error] [pid 1321:tid 1514] [client 20.48.250.41:50281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/24.php"] [unique_id "apK-I2jCPtor9NZ-byTkcgAABlY"]
[Sat Aug 29 05:10:27.966634 2026] [security2:error] [pid 1041789:tid 1041978] [client 61.9.8.108:9987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 108.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK-I4v3RhPI65jTFG4SHQAAA00"]
[Sat Aug 29 05:10:27.966792 2026] [security2:error] [pid 1041789:tid 1041978] [client 61.9.8.108:9987] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK-I4v3RhPI65jTFG4SHQAAA00"]
[Sat Aug 29 05:10:27.971217 2026] [security2:error] [pid 1321:tid 1536] [client 158.23.147.79:11442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK-I2jCPtor9NZ-byTkdAAABmw"]
[Sat Aug 29 05:10:27.976115 2026] [security2:error] [pid 11274:tid 11458] [client 20.104.18.15:7152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/new.php"] [unique_id "apK-I2bX5DA3XO6e_qQf8QAAARg"]
[Sat Aug 29 05:10:27.976910 2026] [security2:error] [pid 1041789:tid 1041956] [client 107.145.13.164:64918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 164.13.145.107.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK-I4v3RhPI65jTFG4SIgAAAzc"]
[Sat Aug 29 05:10:27.977006 2026] [security2:error] [pid 1041789:tid 1041956] [client 107.145.13.164:64918] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK-I4v3RhPI65jTFG4SIgAAAzc"]
[Sat Aug 29 05:10:27.977147 2026] [security2:error] [pid 11274:tid 11459] [client 20.104.18.15:41887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/nice.php"] [unique_id "apK-I2bX5DA3XO6e_qQf8gAAARk"]
[Sat Aug 29 05:10:27.982106 2026] [security2:error] [pid 1041789:tid 1041861] [remote 93.123.109.228:33128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/test.php"] [unique_id "apK-I4v3RhPI65jTFG4SJAADjTs"]
[Sat Aug 29 05:10:27.994799 2026] [security2:error] [pid 1321:tid 1606] [client 20.104.18.15:43865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/key.php"] [unique_id "apK-I2jCPtor9NZ-byTkfAAABrE"]
[Sat Aug 29 05:10:27.995305 2026] [security2:error] [pid 1041789:tid 1042007] [client 20.220.204.93:63550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/06.php"] [unique_id "apK-I4v3RhPI65jTFG4SKAAAA2o"]
[Sat Aug 29 05:10:27.999855 2026] [security2:error] [pid 1041789:tid 1041983] [client 20.48.160.90:63447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/222.php"] [unique_id "apK-I4v3RhPI65jTFG4SKwAAA1I"]
[Sat Aug 29 05:10:28.008615 2026] [security2:error] [pid 1041789:tid 1041943] [client 20.104.18.15:45988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/sonic.php"] [unique_id "apK-JIv3RhPI65jTFG4SLQAAAyo"]
[Sat Aug 29 05:10:28.027161 2026] [security2:error] [pid 1321:tid 1472] [remote 93.123.109.228:33304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/test.php"] [unique_id "apK-JGjCPtor9NZ-byTkhAAGs3E"]
[Sat Aug 29 05:10:28.033115 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.104.18.15:22449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/nofile.php"] [unique_id "apK-JIv3RhPI65jTFG4SNgAAA30"]
[Sat Aug 29 05:10:28.034719 2026] [security2:error] [pid 11274:tid 11462] [client 20.48.250.41:64824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/asax.php"] [unique_id "apK-JGbX5DA3XO6e_qQf8wAAARw"]
[Sat Aug 29 05:10:28.035799 2026] [security2:error] [pid 11274:tid 11454] [client 20.63.219.114:1949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/global.php"] [unique_id "apK-JGbX5DA3XO6e_qQf9AAAARQ"]
[Sat Aug 29 05:10:28.042283 2026] [security2:error] [pid 11274:tid 11463] [client 20.104.18.15:43863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/info.php/new.php"] [unique_id "apK-JGbX5DA3XO6e_qQf9QAAAR0"]
[Sat Aug 29 05:10:28.043471 2026] [security2:error] [pid 1041789:tid 1041981] [client 57.141.14.109:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/page/33/"] [unique_id "apK-JIv3RhPI65jTFG4SOwAAA1A"]
[Sat Aug 29 05:10:28.044857 2026] [security2:error] [pid 11274:tid 11453] [client 20.52.41.200:2818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/admin.php"] [unique_id "apK-JGbX5DA3XO6e_qQf9gAAARM"]
[Sat Aug 29 05:10:28.056909 2026] [security2:error] [pid 1041789:tid 1041988] [client 20.48.250.41:49557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/inc.php"] [unique_id "apK-JIv3RhPI65jTFG4SPgAAA1c"]
[Sat Aug 29 05:10:28.058308 2026] [security2:error] [pid 1041789:tid 1042029] [client 20.48.250.41:50379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/Ov-Simple1.php"] [unique_id "apK-JIv3RhPI65jTFG4SPwAAA4A"]
[Sat Aug 29 05:10:28.060155 2026] [security2:error] [pid 1041789:tid 1042029] [client 20.220.204.93:52042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.interpressglobal.com"] [uri "/R57.php"] [unique_id "apK-JIv3RhPI65jTFG4SQAAAA4A"]
[Sat Aug 29 05:10:28.062746 2026] [security2:error] [pid 1041789:tid 1042019] [client 20.48.251.3:43977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/25.php"] [unique_id "apK-JIv3RhPI65jTFG4SQQAAA3Y"]
[Sat Aug 29 05:10:28.065611 2026] [security2:error] [pid 1041789:tid 1042000] [client 52.138.0.157:22849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.sitestage.biz"] [uri "/wp-content/classwithtostring.php"] [unique_id "apK-JIv3RhPI65jTFG4SQgAAA2M"]
[Sat Aug 29 05:10:28.080091 2026] [security2:error] [pid 1041789:tid 1041982] [client 20.104.18.15:15120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/wefile.php"] [unique_id "apK-JIv3RhPI65jTFG4SRQAAA1E"]
[Sat Aug 29 05:10:28.093375 2026] [http2:warn] [pid 1017536:tid 1017714] [client 57.141.14.73:47554] h2_stream(1017536-369-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:10:28.111390 2026] [proxy_http:error] [pid 1028675:tid 1028822] (70007)The timeout specified has expired: [client 127.0.0.1:52390] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:10:28.111416 2026] [proxy:error] [pid 1028675:tid 1028822] [client 127.0.0.1:52390] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:10:28.121010 2026] [security2:error] [pid 1041789:tid 1042025] [client 20.48.250.41:50253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/155.php"] [unique_id "apK-JIv3RhPI65jTFG4SSQAAA3w"]
[Sat Aug 29 05:10:28.132570 2026] [security2:error] [pid 1041789:tid 1041935] [client 40.83.93.50:11238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/1p.php"] [unique_id "apK-JIv3RhPI65jTFG4STAAAAyI"]
[Sat Aug 29 05:10:28.141000 2026] [security2:error] [pid 1041789:tid 1041963] [client 52.139.37.240:12872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/xxx.php"] [unique_id "apK-JIv3RhPI65jTFG4SUAAAAz4"]
[Sat Aug 29 05:10:28.143952 2026] [security2:error] [pid 1041789:tid 1041975] [client 20.104.18.15:7137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/inx.php"] [unique_id "apK-JIv3RhPI65jTFG4SUQAAA0o"]
[Sat Aug 29 05:10:28.149480 2026] [security2:error] [pid 1041789:tid 1041949] [client 20.104.18.15:41905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/beence.php"] [unique_id "apK-JIv3RhPI65jTFG4SVQAAAzA"]
[Sat Aug 29 05:10:28.161984 2026] [security2:error] [pid 11274:tid 11471] [client 20.104.18.15:22448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/run.php"] [unique_id "apK-JGbX5DA3XO6e_qQf9wAAASU"]
[Sat Aug 29 05:10:28.186531 2026] [security2:error] [pid 11274:tid 11473] [client 20.48.250.41:62413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/fetch.php"] [unique_id "apK-JGbX5DA3XO6e_qQf-AAAASc"]
[Sat Aug 29 05:10:28.190478 2026] [security2:error] [pid 1321:tid 1481] [remote 93.123.109.228:33158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.group3-llc.com"] [uri "/test.php"] [unique_id "apK-JGjCPtor9NZ-byTknAAGbXo"]
[Sat Aug 29 05:10:28.192697 2026] [security2:error] [pid 1321:tid 1585] [client 20.48.251.3:43851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/public/vx.php"] [unique_id "apK-JGjCPtor9NZ-byTknQAABpw"]
[Sat Aug 29 05:10:28.195370 2026] [security2:error] [pid 1321:tid 1556] [client 20.104.18.15:43841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/chosen.php"] [unique_id "apK-JGjCPtor9NZ-byTkogAABn8"]
[Sat Aug 29 05:10:28.204385 2026] [security2:error] [pid 1041789:tid 1041969] [client 40.83.93.50:12607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/haiterus.php"] [unique_id "apK-JIv3RhPI65jTFG4SWwAAA0Q"]
[Sat Aug 29 05:10:28.206275 2026] [security2:error] [pid 11274:tid 11477] [client 20.48.160.90:62279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/key.php"] [unique_id "apK-JGbX5DA3XO6e_qQf-gAAASs"]
[Sat Aug 29 05:10:28.209098 2026] [security2:error] [pid 1321:tid 1540] [client 20.104.18.15:45936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/pop.php"] [unique_id "apK-JGjCPtor9NZ-byTkowAABnA"]
[Sat Aug 29 05:10:28.211783 2026] [security2:error] [pid 1041789:tid 1041978] [client 20.48.250.41:49566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/6bcwiqwj.php"] [unique_id "apK-JIv3RhPI65jTFG4SXQAAA00"]
[Sat Aug 29 05:10:28.213478 2026] [security2:error] [pid 11274:tid 11479] [client 20.104.18.15:15278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/blog.php"] [unique_id "apK-JGbX5DA3XO6e_qQf-wAAASw"]
[Sat Aug 29 05:10:28.231290 2026] [security2:error] [pid 1041789:tid 1041983] [client 20.48.250.41:50428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/wp-blogs.php"] [unique_id "apK-JIv3RhPI65jTFG4SYwAAA1I"]
[Sat Aug 29 05:10:28.259502 2026] [security2:error] [pid 1041789:tid 1041943] [client 20.48.250.41:50299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/file.php"] [unique_id "apK-JIv3RhPI65jTFG4SZQAAAyo"]
[Sat Aug 29 05:10:28.263498 2026] [security2:error] [pid 1041789:tid 1041947] [client 197.232.63.170:54512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 170.63.232.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK-JIv3RhPI65jTFG4SbAAAAy4"]
[Sat Aug 29 05:10:28.263651 2026] [security2:error] [pid 1041789:tid 1041947] [client 197.232.63.170:54512] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK-JIv3RhPI65jTFG4SbAAAAy4"]
[Sat Aug 29 05:10:28.285308 2026] [security2:error] [pid 1321:tid 1418] [remote 93.123.109.228:33834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenokie.com"] [uri "/info.php"] [unique_id "apK-JGjCPtor9NZ-byTktgAGujw"]
[Sat Aug 29 05:10:28.290773 2026] [security2:error] [pid 1321:tid 1582] [client 45.148.10.62:58736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.yml.fme.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "apK-JGjCPtor9NZ-byTktwAABpk"]
[Sat Aug 29 05:10:28.290814 2026] [security2:error] [pid 1041789:tid 1041964] [client 20.104.18.15:22510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/new.php"] [unique_id "apK-JIv3RhPI65jTFG4SewAAAz8"]
[Sat Aug 29 05:10:28.293853 2026] [security2:error] [pid 11274:tid 11486] [client 20.104.18.15:45839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/sure.php"] [unique_id "apK-JGbX5DA3XO6e_qQf_gAAATM"]
[Sat Aug 29 05:10:28.306102 2026] [security2:error] [pid 1041789:tid 1041972] [client 158.158.54.35:33369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/test1.php"] [unique_id "apK-JIv3RhPI65jTFG4SfAAAA0c"]
[Sat Aug 29 05:10:28.312976 2026] [security2:error] [pid 1041789:tid 1041981] [client 20.104.18.15:7061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/vpn.php"] [unique_id "apK-JIv3RhPI65jTFG4SfwAAA1A"]
[Sat Aug 29 05:10:28.331039 2026] [security2:error] [pid 1041789:tid 1041977] [client 20.48.251.3:46587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/333.php"] [unique_id "apK-JIv3RhPI65jTFG4SgwAAA0w"]
[Sat Aug 29 05:10:28.337609 2026] [security2:error] [pid 1041789:tid 1041988] [client 4.205.62.107:58460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/ms.php"] [unique_id "apK-JIv3RhPI65jTFG4ShAAAA1c"]
[Sat Aug 29 05:10:28.338309 2026] [security2:error] [pid 1041789:tid 1042054] [client 52.139.37.240:12514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/0x.php"] [unique_id "apK-JIv3RhPI65jTFG4ShQAAA5k"]
[Sat Aug 29 05:10:28.346037 2026] [security2:error] [pid 1041789:tid 1042017] [client 117.240.152.41:22766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.152.240.117.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "midayins.com"] [uri "/xmlrpc.php"] [unique_id "apK-JIv3RhPI65jTFG4SggAAA3Q"]
[Sat Aug 29 05:10:28.346199 2026] [security2:error] [pid 1041789:tid 1042017] [client 117.240.152.41:22766] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "midayins.com"] [uri "/xmlrpc.php"] [unique_id "apK-JIv3RhPI65jTFG4SggAAA3Q"]
[Sat Aug 29 05:10:28.350793 2026] [security2:error] [pid 11274:tid 11487] [client 52.138.0.157:33500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.sitestage.biz"] [uri "/wp-content/themes/fitnessbase/404.php"] [unique_id "apK-JGbX5DA3XO6e_qQgAAAAATQ"]
[Sat Aug 29 05:10:28.352033 2026] [security2:error] [pid 1321:tid 1466] [remote 93.123.109.228:33834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenokie.com"] [uri "/infos.php"] [unique_id "apK-JGjCPtor9NZ-byTkwAAGpGs"]
[Sat Aug 29 05:10:28.353379 2026] [security2:error] [pid 1041789:tid 1042043] [client 20.104.18.15:41929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/222.php"] [unique_id "apK-JIv3RhPI65jTFG4SiwAAA44"]
[Sat Aug 29 05:10:28.354566 2026] [ssl:error] [pid 1321:tid 1553] [client 98.84.1.175:54688] AH02032: Hostname host2038.hostmonster.com (default host as no SNI was provided) and hostname autoconfig.xfj.jmw.mybluehost.me provided via HTTP have no compatible SSL setup for policy 'secure'
[Sat Aug 29 05:10:28.357577 2026] [security2:error] [pid 1041789:tid 1041971] [client 20.220.204.93:65224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/class.php"] [unique_id "apK-JIv3RhPI65jTFG4SjQAAA0Y"]
[Sat Aug 29 05:10:28.359276 2026] [security2:error] [pid 1041789:tid 1042029] [client 20.104.18.15:15306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/wp-admin/js/wp-load.php"] [unique_id "apK-JIv3RhPI65jTFG4SkgAAA4A"]
[Sat Aug 29 05:10:28.361303 2026] [security2:error] [pid 1321:tid 1379] [remote 93.123.109.228:33834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenokie.com"] [uri "/infophp.php"] [unique_id "apK-JGjCPtor9NZ-byTkxwAGSxU"]
[Sat Aug 29 05:10:28.374551 2026] [security2:error] [pid 1041789:tid 1042019] [client 4.205.62.107:62973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/wp-config.backup.php"] [unique_id "apK-JIv3RhPI65jTFG4SlQAAA3Y"]
[Sat Aug 29 05:10:28.391140 2026] [security2:error] [pid 11274:tid 11489] [client 20.104.18.15:45843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/503.php"] [unique_id "apK-JGbX5DA3XO6e_qQgAQAAATY"]
[Sat Aug 29 05:10:28.396700 2026] [security2:error] [pid 1041789:tid 1042015] [client 20.104.18.15:44029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/file1221.php"] [unique_id "apK-JIv3RhPI65jTFG4SlwAAA3I"]
[Sat Aug 29 05:10:28.417041 2026] [security2:error] [pid 1321:tid 1549] [client 20.151.200.44:22253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/6y7t.php"] [unique_id "apK-JGjCPtor9NZ-byTkzwAABng"]
[Sat Aug 29 05:10:28.424119 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.63.219.114:2006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/update.php"] [unique_id "apK-JIv3RhPI65jTFG4SoAAAA30"]
[Sat Aug 29 05:10:28.430097 2026] [security2:error] [pid 1041789:tid 1041987] [client 20.104.18.15:22421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/inx.php"] [unique_id "apK-JIv3RhPI65jTFG4SogAAA1Y"]
[Sat Aug 29 05:10:28.444934 2026] [security2:error] [pid 1041789:tid 1041995] [client 158.23.147.79:5939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-admin/user/index.php"] [unique_id "apK-JIv3RhPI65jTFG4SpgAAA14"]
[Sat Aug 29 05:10:28.448058 2026] [security2:error] [pid 1041789:tid 1041940] [client 20.104.18.15:7110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/shiny.php"] [unique_id "apK-JIv3RhPI65jTFG4SqQAAAyc"]
[Sat Aug 29 05:10:28.469620 2026] [security2:error] [pid 1041789:tid 1042055] [client 20.48.251.3:46638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/a1vx.php"] [unique_id "apK-JIv3RhPI65jTFG4SqgAAA5o"]
[Sat Aug 29 05:10:28.482447 2026] [security2:error] [pid 1321:tid 1532] [client 20.104.18.15:45941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/gray.php"] [unique_id "apK-JGjCPtor9NZ-byTk3AAABmg"]
[Sat Aug 29 05:10:28.500058 2026] [security2:error] [pid 1041789:tid 1041945] [client 20.52.41.200:2764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/php8.php"] [unique_id "apK-JIv3RhPI65jTFG4SrAAAAyw"]
[Sat Aug 29 05:10:28.511371 2026] [security2:error] [pid 11274:tid 11497] [client 4.205.62.107:6869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/thui.php"] [unique_id "apK-JGbX5DA3XO6e_qQgBQAAAT4"]
[Sat Aug 29 05:10:28.517432 2026] [security2:error] [pid 1041789:tid 1041990] [client 68.155.159.216:1870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK-JIv3RhPI65jTFG4SrQAAA1k"]
[Sat Aug 29 05:10:28.524701 2026] [security2:error] [pid 1041789:tid 1041956] [client 20.104.18.15:15133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/robot.php"] [unique_id "apK-JIv3RhPI65jTFG4SrwAAAzc"]
[Sat Aug 29 05:10:28.546711 2026] [security2:error] [pid 11274:tid 11499] [client 20.104.18.15:43984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/nox.php"] [unique_id "apK-JGbX5DA3XO6e_qQgBgAAAUA"]
[Sat Aug 29 05:10:28.548465 2026] [security2:error] [pid 1321:tid 1613] [client 20.104.18.15:41982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/ops.php"] [unique_id "apK-JGjCPtor9NZ-byTk5AAABrg"]
[Sat Aug 29 05:10:28.550751 2026] [security2:error] [pid 1321:tid 1522] [client 52.138.0.157:5644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.sitestage.biz"] [uri "/wp-content/themes/index.php"] [unique_id "apK-JGjCPtor9NZ-byTk5QAABl4"]
[Sat Aug 29 05:10:28.560630 2026] [security2:error] [pid 1041789:tid 1041960] [client 52.139.37.240:13188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/CDX1.php"] [unique_id "apK-JIv3RhPI65jTFG4StgAAAzs"]
[Sat Aug 29 05:10:28.564850 2026] [security2:error] [pid 1321:tid 1579] [client 20.104.18.15:22433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/vpn.php"] [unique_id "apK-JGjCPtor9NZ-byTk5gAABpY"]
[Sat Aug 29 05:10:28.582994 2026] [security2:error] [pid 1041789:tid 1042031] [client 20.104.18.15:45915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/fxp.php"] [unique_id "apK-JIv3RhPI65jTFG4StwAAA4I"]
[Sat Aug 29 05:10:28.584735 2026] [security2:error] [pid 1321:tid 1512] [client 20.104.18.15:7062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/goods.php"] [unique_id "apK-JGjCPtor9NZ-byTk6QAABlQ"]
[Sat Aug 29 05:10:28.599876 2026] [security2:error] [pid 11274:tid 11502] [client 20.52.41.200:4661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-content/admin.php"] [unique_id "apK-JGbX5DA3XO6e_qQgBwAAAUM"]
[Sat Aug 29 05:10:28.604070 2026] [security2:error] [pid 11274:tid 11503] [client 20.48.251.3:43981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/phpsysinfo.php"] [unique_id "apK-JGbX5DA3XO6e_qQgCAAAAUQ"]
[Sat Aug 29 05:10:28.617576 2026] [security2:error] [pid 1041789:tid 1041851] [remote 93.123.109.228:33772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldperformanceinc.com"] [uri "/php-info.php"] [unique_id "apK-JIv3RhPI65jTFG4SvAADMjE"]
[Sat Aug 29 05:10:28.617586 2026] [security2:error] [pid 11274:tid 11493] [client 40.83.93.50:11224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/Njima.php"] [unique_id "apK-JGbX5DA3XO6e_qQgCQAAATo"]
[Sat Aug 29 05:10:28.625142 2026] [security2:error] [pid 1041789:tid 1041981] [client 158.23.147.79:55253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/xmlrpc.php"] [unique_id "apK-JIv3RhPI65jTFG4SvgAAA1A"]
[Sat Aug 29 05:10:28.629647 2026] [security2:error] [pid 1041789:tid 1041892] [remote 93.123.109.228:33546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldstone.com"] [uri "/php-info.php"] [unique_id "apK-JIv3RhPI65jTFG4SvwADR1o"]
[Sat Aug 29 05:10:28.635860 2026] [security2:error] [pid 11274:tid 11504] [client 68.155.159.216:38588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK-JGbX5DA3XO6e_qQgCgAAAUU"]
[Sat Aug 29 05:10:28.639131 2026] [security2:error] [pid 1041789:tid 1041988] [client 158.23.147.79:59252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-admin/admin.php"] [unique_id "apK-JIv3RhPI65jTFG4SxAAAA1c"]
[Sat Aug 29 05:10:28.640426 2026] [security2:error] [pid 1041789:tid 1041835] [remote 93.123.109.228:33772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldperformanceinc.com"] [uri "/php.php"] [unique_id "apK-JIv3RhPI65jTFG4SxQADmSE"]
[Sat Aug 29 05:10:28.642915 2026] [security2:error] [pid 1041789:tid 1041883] [remote 93.123.109.228:33772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldperformanceinc.com"] [uri "/php_info.php"] [unique_id "apK-JIv3RhPI65jTFG4SxwADdFE"]
[Sat Aug 29 05:10:28.653500 2026] [security2:error] [pid 11274:tid 11506] [client 20.48.160.90:63387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/chosen.php"] [unique_id "apK-JGbX5DA3XO6e_qQgCwAAAUc"]
[Sat Aug 29 05:10:28.660170 2026] [security2:error] [pid 1321:tid 1578] [client 68.155.159.216:23481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/dropdown.php"] [unique_id "apK-JGjCPtor9NZ-byTlAQAABpU"]
[Sat Aug 29 05:10:28.668797 2026] [security2:error] [pid 1321:tid 1504] [client 20.104.18.15:15350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/revo.php"] [unique_id "apK-JGjCPtor9NZ-byTlBQAABkw"]
[Sat Aug 29 05:10:28.674108 2026] [security2:error] [pid 1041789:tid 1041849] [remote 93.123.109.228:33546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldstone.com"] [uri "/php_info.php"] [unique_id "apK-JIv3RhPI65jTFG4S1AADky8"]
[Sat Aug 29 05:10:28.677643 2026] [security2:error] [pid 1041789:tid 1041918] [remote 93.123.109.228:33546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldstone.com"] [uri "/phpinfo.php"] [unique_id "apK-JIv3RhPI65jTFG4S1gADk3Q"]
[Sat Aug 29 05:10:28.679816 2026] [security2:error] [pid 1321:tid 1502] [client 20.220.204.93:63589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/8.php"] [unique_id "apK-JGjCPtor9NZ-byTlDQAABko"]
[Sat Aug 29 05:10:28.682481 2026] [security2:error] [pid 1041789:tid 1042014] [client 158.23.147.79:5847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/log-mama/function.php"] [unique_id "apK-JIv3RhPI65jTFG4S1wAAA3E"]
[Sat Aug 29 05:10:28.691703 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.104.18.15:46053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/puki.php"] [unique_id "apK-JIv3RhPI65jTFG4S4AAAA30"]
[Sat Aug 29 05:10:28.696344 2026] [security2:error] [pid 1321:tid 1602] [client 20.104.18.15:41889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK-JGjCPtor9NZ-byTlFQAABq0"]
[Sat Aug 29 05:10:28.703422 2026] [security2:error] [pid 1041789:tid 1041931] [client 68.155.159.216:18215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/worksec.php"] [unique_id "apK-JIv3RhPI65jTFG4S5wAAAx4"]
[Sat Aug 29 05:10:28.713952 2026] [security2:error] [pid 11274:tid 11509] [client 20.104.18.15:44031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/akismet.php"] [unique_id "apK-JGbX5DA3XO6e_qQgDAAAAUo"]
[Sat Aug 29 05:10:28.713962 2026] [security2:error] [pid 1041789:tid 1041864] [remote 93.123.109.228:33546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldstone.com"] [uri "/php.php"] [unique_id "apK-JIv3RhPI65jTFG4S7QADkz4"]
[Sat Aug 29 05:10:28.723644 2026] [security2:error] [pid 1041789:tid 1041963] [client 20.104.18.15:22488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/shiny.php"] [unique_id "apK-JIv3RhPI65jTFG4S8gAAAz4"]
[Sat Aug 29 05:10:28.727778 2026] [security2:error] [pid 1041789:tid 1041816] [remote 93.123.109.228:33772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldperformanceinc.com"] [uri "/phpinfo.php"] [unique_id "apK-JIv3RhPI65jTFG4S8wADdg4"]
[Sat Aug 29 05:10:28.734245 2026] [security2:error] [pid 1041789:tid 1042057] [client 20.48.251.3:43883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/koiy.php"] [unique_id "apK-JIv3RhPI65jTFG4S9QAAA5w"]
[Sat Aug 29 05:10:28.740519 2026] [security2:error] [pid 1041789:tid 1041957] [client 74.7.228.60:56382] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.cmm.fiz.mybluehost.me"] [uri "/robots.txt"] [unique_id "apK-JIv3RhPI65jTFG4S9AADODY"]
[Sat Aug 29 05:10:28.746242 2026] [security2:error] [pid 1041789:tid 1042005] [client 4.205.62.107:63981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/infos.php"] [unique_id "apK-JIv3RhPI65jTFG4S-gAAA2g"]
[Sat Aug 29 05:10:28.748212 2026] [security2:error] [pid 11274:tid 11513] [client 20.104.18.15:46002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/vv.php"] [unique_id "apK-JGbX5DA3XO6e_qQgDgAAAU4"]
[Sat Aug 29 05:10:28.751149 2026] [security2:error] [pid 1041789:tid 1042006] [client 52.138.0.157:22720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.sitestage.biz"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "apK-JIv3RhPI65jTFG4S-wAAA2k"]
[Sat Aug 29 05:10:28.754127 2026] [security2:error] [pid 1321:tid 1562] [client 158.158.54.35:30071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/ws.php"] [unique_id "apK-JGjCPtor9NZ-byTlIAAABoU"]
[Sat Aug 29 05:10:28.756438 2026] [security2:error] [pid 1041789:tid 1041954] [client 20.104.49.130:48563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/bolt.php"] [unique_id "apK-JIv3RhPI65jTFG4S_AAAAzU"]
[Sat Aug 29 05:10:28.759609 2026] [security2:error] [pid 11274:tid 11515] [client 20.104.104.62:16717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.jamwestcon.com"] [uri "/admin.php"] [unique_id "apK-JGbX5DA3XO6e_qQgDwAAAVA"]
[Sat Aug 29 05:10:28.768749 2026] [security2:error] [pid 1041789:tid 1041945] [client 68.155.159.216:56816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK-JIv3RhPI65jTFG4S_wAAAyw"]
[Sat Aug 29 05:10:28.778749 2026] [security2:error] [pid 1041789:tid 1041969] [client 20.104.18.15:7056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/alfa.php"] [unique_id "apK-JIv3RhPI65jTFG4TAgAAA0Q"]
[Sat Aug 29 05:10:28.781010 2026] [security2:error] [pid 1041789:tid 1041970] [client 52.139.37.240:12431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/akcc.php"] [unique_id "apK-JIv3RhPI65jTFG4TBAAAA0U"]
[Sat Aug 29 05:10:28.781579 2026] [security2:error] [pid 1041789:tid 1042025] [client 20.104.49.130:57671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/mh.php"] [unique_id "apK-JIv3RhPI65jTFG4TBQAAA3w"]
[Sat Aug 29 05:10:28.787099 2026] [security2:error] [pid 1041789:tid 1042018] [client 20.63.219.114:9202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/blog.php"] [unique_id "apK-JIv3RhPI65jTFG4TBgAAA3U"]
[Sat Aug 29 05:10:28.832064 2026] [security2:error] [pid 11274:tid 11521] [client 20.220.204.93:65175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/0x0x.php"] [unique_id "apK-JGbX5DA3XO6e_qQgEAAAAVY"]
[Sat Aug 29 05:10:28.834883 2026] [security2:error] [pid 1041789:tid 1041947] [client 20.48.160.90:63451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/file1221.php"] [unique_id "apK-JIv3RhPI65jTFG4TCgAAAy4"]
[Sat Aug 29 05:10:28.843627 2026] [security2:error] [pid 1041789:tid 1042000] [client 40.83.93.50:11635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/go.php"] [unique_id "apK-JIv3RhPI65jTFG4TCwAAA2M"]
[Sat Aug 29 05:10:28.855772 2026] [security2:error] [pid 11274:tid 11522] [client 20.104.18.15:15290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/birrs.php"] [unique_id "apK-JGbX5DA3XO6e_qQgEQAAAVc"]
[Sat Aug 29 05:10:28.856951 2026] [security2:error] [pid 1321:tid 1489] [client 20.104.18.15:44004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/w.php"] [unique_id "apK-JGjCPtor9NZ-byTlKAAABj0"]
[Sat Aug 29 05:10:28.859474 2026] [security2:error] [pid 11274:tid 11523] [client 20.104.18.15:44011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/ajax.php"] [unique_id "apK-JGbX5DA3XO6e_qQgEgAAAVg"]
[Sat Aug 29 05:10:28.867273 2026] [security2:error] [pid 1041789:tid 1042046] [client 20.48.251.3:9474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/test1.php"] [unique_id "apK-JIv3RhPI65jTFG4TDgAAA5E"]
[Sat Aug 29 05:10:28.871843 2026] [core:error] [pid 1041789:tid 1041981] [client 45.148.10.166:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:28.871860 2026] [core:error] [pid 1041789:tid 1041981] [client 45.148.10.166:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:28.882837 2026] [security2:error] [pid 1321:tid 1425] [remote 93.123.109.228:33304] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/wp-config.php.new"] [unique_id "apK-JGjCPtor9NZ-byTlMAAGQEM"]
[Sat Aug 29 05:10:28.883605 2026] [security2:error] [pid 11274:tid 11525] [client 20.104.18.15:41923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK-JGbX5DA3XO6e_qQgEwAAAVo"]
[Sat Aug 29 05:10:28.886269 2026] [security2:error] [pid 1321:tid 1588] [client 20.104.18.15:22505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/goods.php"] [unique_id "apK-JGjCPtor9NZ-byTlMQAABp8"]
[Sat Aug 29 05:10:28.890052 2026] [security2:error] [pid 1321:tid 1547] [client 20.104.104.62:16482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.jamwestcon.com"] [uri "/lite.php"] [unique_id "apK-JGjCPtor9NZ-byTlMgAABnY"]
[Sat Aug 29 05:10:28.901225 2026] [security2:error] [pid 1041789:tid 1042007] [client 20.104.18.15:45944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/bossu.php"] [unique_id "apK-JIv3RhPI65jTFG4THQAAA2o"]
[Sat Aug 29 05:10:28.912626 2026] [security2:error] [pid 1321:tid 1415] [remote 93.123.109.228:33304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/wp-config.php"] [unique_id "apK-JGjCPtor9NZ-byTlOQAGQDk"]
[Sat Aug 29 05:10:28.912841 2026] [security2:error] [pid 1321:tid 1415] [remote 93.123.109.228:33304] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/wp-config.php.bak"] [unique_id "apK-JGjCPtor9NZ-byTlOgAGQDk"]
[Sat Aug 29 05:10:28.916094 2026] [security2:error] [pid 11274:tid 11528] [client 20.104.18.15:7045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/33.php"] [unique_id "apK-JGbX5DA3XO6e_qQgFAAAAV0"]
[Sat Aug 29 05:10:28.919132 2026] [security2:error] [pid 11274:tid 11529] [client 158.23.147.79:14226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK-JGbX5DA3XO6e_qQgFQAAAV4"]
[Sat Aug 29 05:10:28.925305 2026] [security2:error] [pid 1041789:tid 1041915] [remote 93.123.109.228:33128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/wp-config.php"] [unique_id "apK-JIv3RhPI65jTFG4TIQADTHE"]
[Sat Aug 29 05:10:28.928755 2026] [security2:error] [pid 1041789:tid 1041928] [remote 93.123.109.228:33772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldperformanceinc.com"] [uri "/public/phpinfo.php"] [unique_id "apK-JIv3RhPI65jTFG4TIgADdn4"]
[Sat Aug 29 05:10:28.928979 2026] [security2:error] [pid 1041789:tid 1041912] [remote 93.123.109.228:33128] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/wp-config.php.old"] [unique_id "apK-JIv3RhPI65jTFG4TJAADTG4"]
[Sat Aug 29 05:10:28.929748 2026] [security2:error] [pid 1041789:tid 1041848] [remote 93.123.109.228:33546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldstone.com"] [uri "/public/phpinfo.php"] [unique_id "apK-JIv3RhPI65jTFG4TJQADky4"]
[Sat Aug 29 05:10:28.936965 2026] [security2:error] [pid 1321:tid 1449] [remote 93.123.109.228:33304] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/wp-config.php.old"] [unique_id "apK-JGjCPtor9NZ-byTlPwAGQFo"]
[Sat Aug 29 05:10:28.937414 2026] [autoindex:error] [pid 1041789:tid 1041925] [remote 45.148.10.62:58750] AH01276: Cannot serve directory /home3/ymlfmemy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:10:28.939504 2026] [security2:error] [pid 1041789:tid 1041881] [remote 93.123.109.228:33128] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/wp-config.php.bak"] [unique_id "apK-JIv3RhPI65jTFG4TKwADTE8"]
[Sat Aug 29 05:10:28.940323 2026] [security2:error] [pid 1041789:tid 1041841] [remote 93.123.109.228:33128] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/wp-config.php.new"] [unique_id "apK-JIv3RhPI65jTFG4TLQADTCc"]
[Sat Aug 29 05:10:28.942147 2026] [security2:error] [pid 1321:tid 1527] [client 158.23.147.79:55258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-JGjCPtor9NZ-byTlQwAABmM"]
[Sat Aug 29 05:10:28.960080 2026] [security2:error] [pid 11274:tid 11524] [client 52.138.0.157:33525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.sitestage.biz"] [uri "/wp-content/uploads/de_fb_uploads/b.php"] [unique_id "apK-JGbX5DA3XO6e_qQgGAAAAVk"]
[Sat Aug 29 05:10:28.974332 2026] [security2:error] [pid 1041789:tid 1041991] [client 20.48.160.90:64580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/nox.php"] [unique_id "apK-JIv3RhPI65jTFG4TMwAAA1o"]
[Sat Aug 29 05:10:28.977432 2026] [security2:error] [pid 1321:tid 1541] [client 52.139.37.240:12523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK-JGjCPtor9NZ-byTlSgAABnE"]
[Sat Aug 29 05:10:28.980910 2026] [security2:error] [pid 1041789:tid 1041982] [client 20.104.49.130:43783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "coveryourauto.com"] [uri "/fling.php"] [unique_id "apK-JIv3RhPI65jTFG4TNQAAA1E"]
[Sat Aug 29 05:10:28.996410 2026] [security2:error] [pid 11274:tid 11538] [client 74.248.24.12:28784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/tool.php"] [unique_id "apK-JGbX5DA3XO6e_qQgGgAAAWc"]
[Sat Aug 29 05:10:29.000413 2026] [security2:error] [pid 11274:tid 11538] [client 20.48.251.3:9514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/lmfi2.php"] [unique_id "apK-JGbX5DA3XO6e_qQgGwAAAWc"]
[Sat Aug 29 05:10:29.002112 2026] [security2:error] [pid 1321:tid 1535] [client 20.104.18.15:44025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/atomlib.php"] [unique_id "apK-JWjCPtor9NZ-byTlUQAABms"]
[Sat Aug 29 05:10:29.008209 2026] [access_compat:error] [pid 1321:tid 1496] [client 67.20.76.220:0] AH01797: client denied by server configuration: /home4/eastacar/public_html/djiboutihomes/wp-content/themes/wprentals/pins.txt
[Sat Aug 29 05:10:29.014009 2026] [security2:error] [pid 1321:tid 1600] [client 20.104.18.15:44017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/x.php"] [unique_id "apK-JWjCPtor9NZ-byTlVAAABqs"]
[Sat Aug 29 05:10:29.015290 2026] [autoindex:error] [pid 1041789:tid 1041840] [remote 74.7.227.31:54002] AH01276: Cannot serve directory /home3/cmmfizmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:10:29.018078 2026] [security2:error] [pid 1321:tid 1466] [remote 93.123.109.228:33158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.group3-llc.com"] [uri "/wp-config.php"] [unique_id "apK-JWjCPtor9NZ-byTlVQAGZms"]
[Sat Aug 29 05:10:29.020831 2026] [security2:error] [pid 1321:tid 1529] [client 20.104.18.15:15182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/sss.php"] [unique_id "apK-JWjCPtor9NZ-byTlVgAABmU"]
[Sat Aug 29 05:10:29.022754 2026] [security2:error] [pid 1321:tid 1529] [client 20.104.18.15:22469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/alfa.php"] [unique_id "apK-JWjCPtor9NZ-byTlVwAABmU"]
[Sat Aug 29 05:10:29.030827 2026] [security2:error] [pid 1321:tid 1603] [client 20.220.204.93:63528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/166.php"] [unique_id "apK-JWjCPtor9NZ-byTlWQAABq4"]
[Sat Aug 29 05:10:29.052860 2026] [security2:error] [pid 1321:tid 1536] [client 20.104.18.15:7038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/133.php"] [unique_id "apK-JWjCPtor9NZ-byTlXAAABmw"]
[Sat Aug 29 05:10:29.065992 2026] [security2:error] [pid 11274:tid 11527] [client 20.52.41.200:4378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-configs.php"] [unique_id "apK-JWbX5DA3XO6e_qQgHAAAAVw"]
[Sat Aug 29 05:10:29.068115 2026] [security2:error] [pid 1041789:tid 1041963] [client 20.104.49.130:63581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/run.php"] [unique_id "apK-JYv3RhPI65jTFG4TRQAAAz4"]
[Sat Aug 29 05:10:29.069815 2026] [security2:error] [pid 11274:tid 11534] [client 127.0.0.1:11394] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK-JGbX5DA3XO6e_qQgFwAAAWM"]
[Sat Aug 29 05:10:29.070007 2026] [security2:error] [pid 1321:tid 1491] [client 74.7.228.49:39044] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.fsx.hct.mybluehost.me"] [uri "/robots.txt"] [unique_id "apK-JGjCPtor9NZ-byTlRAAGPzs"]
[Sat Aug 29 05:10:29.076110 2026] [security2:error] [pid 1041789:tid 1042057] [client 20.104.18.15:45918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/504.php"] [unique_id "apK-JYv3RhPI65jTFG4TSAAAA5w"]
[Sat Aug 29 05:10:29.079976 2026] [security2:error] [pid 1321:tid 1596] [client 20.104.18.15:41829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/f.php"] [unique_id "apK-JWjCPtor9NZ-byTlXgAABqc"]
[Sat Aug 29 05:10:29.085106 2026] [security2:error] [pid 1321:tid 1575] [client 20.104.104.62:16709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.jamwestcon.com"] [uri "/about.php"] [unique_id "apK-JWjCPtor9NZ-byTlXwAABpI"]
[Sat Aug 29 05:10:29.090395 2026] [security2:error] [pid 11274:tid 11545] [client 20.104.18.15:45980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/sonic.php"] [unique_id "apK-JWbX5DA3XO6e_qQgHQAAAW0"]
[Sat Aug 29 05:10:29.095637 2026] [security2:error] [pid 11274:tid 11547] [client 145.239.10.137:50507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.10.239.145.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "greathairkc.com"] [uri "/autoload_classmap.php"] [unique_id "apK-JWbX5DA3XO6e_qQgHgAAAW8"], referer: http://greathairkc.com/autoload_classmap.php
[Sat Aug 29 05:10:29.120007 2026] [security2:error] [pid 1321:tid 1401] [remote 93.123.109.228:33158] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.group3-llc.com"] [uri "/wp-config.php.bak"] [unique_id "apK-JWjCPtor9NZ-byTlYgAGaSs"]
[Sat Aug 29 05:10:29.123551 2026] [security2:error] [pid 1041789:tid 1041933] [client 213.202.253.4:57246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "timportlock.net"] [uri "/adminfuns.php"] [unique_id "apK-JYv3RhPI65jTFG4TSwAAAyA"], referer: www.google.com
[Sat Aug 29 05:10:29.123551 2026] [security2:error] [pid 11274:tid 11549] [client 20.104.18.15:15207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-JWbX5DA3XO6e_qQgHwAAAXE"]
[Sat Aug 29 05:10:29.124144 2026] [security2:error] [pid 1041789:tid 1042006] [client 20.48.160.90:62269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/akismet.php"] [unique_id "apK-JYv3RhPI65jTFG4TTAAAA2k"]
[Sat Aug 29 05:10:29.125847 2026] [security2:error] [pid 1321:tid 1404] [remote 93.123.109.228:33158] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.group3-llc.com"] [uri "/wp-config.php.new"] [unique_id "apK-JWjCPtor9NZ-byTlZAAGXC4"]
[Sat Aug 29 05:10:29.125848 2026] [security2:error] [pid 1321:tid 1456] [remote 93.123.109.228:33158] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.group3-llc.com"] [uri "/wp-config.php.old"] [unique_id "apK-JWjCPtor9NZ-byTlYwAGXGE"]
[Sat Aug 29 05:10:29.126548 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.104.49.130:51105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/srontol.php"] [unique_id "apK-JYv3RhPI65jTFG4TTQAAA2Q"]
[Sat Aug 29 05:10:29.132818 2026] [security2:error] [pid 1321:tid 1584] [client 20.48.251.3:44020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/aws_sdk_settings.php"] [unique_id "apK-JWjCPtor9NZ-byTlZQAABps"]
[Sat Aug 29 05:10:29.138970 2026] [security2:error] [pid 1041789:tid 1041954] [client 20.104.18.15:44013] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcalendars.zhengshe.net"] [uri "/1.php"] [unique_id "apK-JYv3RhPI65jTFG4TUAAAAzU"]
[Sat Aug 29 05:10:29.139090 2026] [security2:error] [pid 1041789:tid 1041954] [client 20.104.18.15:44013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/1.php"] [unique_id "apK-JYv3RhPI65jTFG4TUAAAAzU"]
[Sat Aug 29 05:10:29.139414 2026] [security2:error] [pid 1041789:tid 1041949] [client 20.52.41.200:2828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/install.php"] [unique_id "apK-JYv3RhPI65jTFG4TUQAAAzA"]
[Sat Aug 29 05:10:29.147394 2026] [security2:error] [pid 1321:tid 1538] [client 40.83.93.50:6324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/configs.php"] [unique_id "apK-JWjCPtor9NZ-byTlZwAABm4"]
[Sat Aug 29 05:10:29.154117 2026] [security2:error] [pid 11274:tid 11551] [client 68.155.159.216:5978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK-JWbX5DA3XO6e_qQgIQAAAXM"]
[Sat Aug 29 05:10:29.154236 2026] [security2:error] [pid 1041789:tid 1041944] [client 20.63.219.114:9210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/bypass.php"] [unique_id "apK-JYv3RhPI65jTFG4TVAAAAys"]
[Sat Aug 29 05:10:29.158658 2026] [security2:error] [pid 11274:tid 11546] [client 52.138.0.157:58082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.sitestage.biz"] [uri "/wp-content/uploads/index.php"] [unique_id "apK-JWbX5DA3XO6e_qQgIgAAAW4"]
[Sat Aug 29 05:10:29.176210 2026] [security2:error] [pid 1321:tid 1580] [client 52.139.37.240:12481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/s.php"] [unique_id "apK-JWjCPtor9NZ-byTlbQAABpc"]
[Sat Aug 29 05:10:29.181484 2026] [security2:error] [pid 1041789:tid 1042025] [client 20.220.204.93:63542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/h2a2ck.php"] [unique_id "apK-JYv3RhPI65jTFG4TVwAAA3w"]
[Sat Aug 29 05:10:29.190791 2026] [security2:error] [pid 1041789:tid 1041941] [client 20.104.18.15:7133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/sym.php"] [unique_id "apK-JYv3RhPI65jTFG4TWwAAAyg"]
[Sat Aug 29 05:10:29.191563 2026] [security2:error] [pid 11274:tid 11557] [client 93.123.109.228:47266] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK-JWbX5DA3XO6e_qQgJQAAAXk"]
[Sat Aug 29 05:10:29.194641 2026] [security2:error] [pid 1041789:tid 1041939] [client 20.104.18.15:22420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/33.php"] [unique_id "apK-JYv3RhPI65jTFG4TXAAAAyY"]
[Sat Aug 29 05:10:29.198290 2026] [security2:error] [pid 1321:tid 1514] [client 158.158.54.35:16233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-themes.php"] [unique_id "apK-JWjCPtor9NZ-byTlcQAABlY"]
[Sat Aug 29 05:10:29.202291 2026] [security2:error] [pid 1041789:tid 1042047] [client 20.104.18.15:43922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/ssla.php"] [unique_id "apK-JYv3RhPI65jTFG4TXgAAA5I"]
[Sat Aug 29 05:10:29.206667 2026] [security2:error] [pid 1321:tid 1551] [client 93.123.109.228:47280] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK-JWjCPtor9NZ-byTlcwAABno"]
[Sat Aug 29 05:10:29.216314 2026] [security2:error] [pid 1321:tid 1561] [client 20.104.18.15:45983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/nice.php"] [unique_id "apK-JWjCPtor9NZ-byTldgAABoQ"]
[Sat Aug 29 05:10:29.216456 2026] [security2:error] [pid 1041789:tid 1042031] [client 68.155.159.216:14257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/classwithtostring.php"] [unique_id "apK-JYv3RhPI65jTFG4TYwAAA4I"]
[Sat Aug 29 05:10:29.217796 2026] [security2:error] [pid 1321:tid 1567] [client 68.155.159.216:33543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-includes/content.php"] [unique_id "apK-JWjCPtor9NZ-byTldwAABoo"]
[Sat Aug 29 05:10:29.218982 2026] [security2:error] [pid 11274:tid 11562] [client 68.155.159.216:64027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-content/radio.php"] [unique_id "apK-JWbX5DA3XO6e_qQgJwAAAX4"]
[Sat Aug 29 05:10:29.234469 2026] [security2:error] [pid 1321:tid 1553] [client 93.123.109.228:47366] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK-JWjCPtor9NZ-byTleAAABnw"]
[Sat Aug 29 05:10:29.249606 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.104.18.15:41795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blocktshirts-co-uk.glowt-shirt.com"] [uri "/1dfcd2d08f.php"] [unique_id "apK-JYv3RhPI65jTFG4TbQAAA3o"]
[Sat Aug 29 05:10:29.250596 2026] [security2:error] [pid 11274:tid 11565] [client 93.123.109.228:47408] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK-JWbX5DA3XO6e_qQgKAAAAYE"]
[Sat Aug 29 05:10:29.252955 2026] [security2:error] [pid 11274:tid 11567] [client 68.155.159.216:5983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-admin/network/index.php"] [unique_id "apK-JWbX5DA3XO6e_qQgKQAAAYM"]
[Sat Aug 29 05:10:29.258884 2026] [security2:error] [pid 1321:tid 1549] [client 20.48.160.90:64616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/ajax.php"] [unique_id "apK-JWjCPtor9NZ-byTlewAABng"]
[Sat Aug 29 05:10:29.263061 2026] [security2:error] [pid 11274:tid 11570] [client 20.48.251.3:43845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/mga.php"] [unique_id "apK-JWbX5DA3XO6e_qQgKwAAAYY"]
[Sat Aug 29 05:10:29.271520 2026] [security2:error] [pid 11274:tid 11572] [client 20.104.18.15:15305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/wp-includes/ID3/moon.php"] [unique_id "apK-JWbX5DA3XO6e_qQgLQAAAYg"]
[Sat Aug 29 05:10:29.272942 2026] [security2:error] [pid 11274:tid 11573] [client 20.104.18.15:15204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-JWbX5DA3XO6e_qQgLgAAAYk"]
[Sat Aug 29 05:10:29.284058 2026] [security2:error] [pid 1321:tid 1559] [client 20.104.104.62:17095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.jamwestcon.com"] [uri "/inputs.php"] [unique_id "apK-JWjCPtor9NZ-byTlfAAABoI"]
[Sat Aug 29 05:10:29.296977 2026] [security2:error] [pid 1321:tid 1532] [client 20.104.18.15:43905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/samll.php"] [unique_id "apK-JWjCPtor9NZ-byTlgAAABmg"]
[Sat Aug 29 05:10:29.305080 2026] [security2:error] [pid 1321:tid 1500] [client 91.92.47.191:41032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.corrigansbasement.com"] [uri "/configuration.php"] [unique_id "apK-JWjCPtor9NZ-byTlgQAABkg"]
[Sat Aug 29 05:10:29.310257 2026] [security2:error] [pid 1321:tid 1555] [client 87.219.197.128:56701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK-JWjCPtor9NZ-byTlggAABn4"]
[Sat Aug 29 05:10:29.310391 2026] [security2:error] [pid 1321:tid 1555] [client 87.219.197.128:56701] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK-JWjCPtor9NZ-byTlggAABn4"]
[Sat Aug 29 05:10:29.313848 2026] [security2:error] [pid 1321:tid 1607] [client 93.123.109.228:47466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(\\\\/\\\\*\\\\!? ?(?:select|grant|delete|insert|drop|alter|replace|truncate|update|create|rename|describe|union|concat|group_concat))" at REQUEST_FILENAME. [file "/opt/mod_security/hg_rules.conf"] [line "1019"] [id "9000042"] [rev "2.2.2"] [msg "SQL Comment Sequence Detected."] [data "/*update"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/*update.cgi*"] [unique_id "apK-JWjCPtor9NZ-byTlhQAABrI"]
[Sat Aug 29 05:10:29.329577 2026] [security2:error] [pid 1041789:tid 1041961] [client 93.123.109.228:47486] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(\\\\/\\\\*\\\\!? ?(?:select|grant|delete|insert|drop|alter|replace|truncate|update|create|rename|describe|union|concat|group_concat))" at REQUEST_FILENAME. [file "/opt/mod_security/hg_rules.conf"] [line "1019"] [id "9000042"] [rev "2.2.2"] [msg "SQL Comment Sequence Detected."] [data "/*update"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/*update.cgi*"] [unique_id "apK-JYv3RhPI65jTFG4TegAAAzw"]
[Sat Aug 29 05:10:29.330893 2026] [security2:error] [pid 1321:tid 1597] [client 20.104.18.15:45945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/pop.php"] [unique_id "apK-JWjCPtor9NZ-byTlhwAABqg"]
[Sat Aug 29 05:10:29.332038 2026] [security2:error] [pid 11274:tid 11448] [client 20.104.18.15:7040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/8.php"] [unique_id "apK-JWbX5DA3XO6e_qQgMAAAAQ4"]
[Sat Aug 29 05:10:29.333494 2026] [security2:error] [pid 1041789:tid 1041956] [client 40.83.93.50:12577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/gecko-new.php"] [unique_id "apK-JYv3RhPI65jTFG4TfAAAAzc"]
[Sat Aug 29 05:10:29.349943 2026] [security2:error] [pid 1321:tid 1398] [remote 93.123.109.228:33834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenokie.com"] [uri "/php-info.php"] [unique_id "apK-JWjCPtor9NZ-byTligAGUSg"]
[Sat Aug 29 05:10:29.351727 2026] [security2:error] [pid 1321:tid 1419] [remote 93.123.109.228:33834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenokie.com"] [uri "/php.php"] [unique_id "apK-JWjCPtor9NZ-byTliQAGUT0"]
[Sat Aug 29 05:10:29.351909 2026] [security2:error] [pid 1321:tid 1452] [remote 93.123.109.228:33834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenokie.com"] [uri "/php_info.php"] [unique_id "apK-JWjCPtor9NZ-byTljAAGUV0"]
[Sat Aug 29 05:10:29.353043 2026] [security2:error] [pid 1041789:tid 1041931] [client 68.155.159.216:9314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-content/x.php"] [unique_id "apK-JYv3RhPI65jTFG4TggAAAx4"]
[Sat Aug 29 05:10:29.358284 2026] [security2:error] [pid 1041789:tid 1042043] [client 52.138.0.157:40153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.sitestage.biz"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK-JYv3RhPI65jTFG4ThQAAA44"]
[Sat Aug 29 05:10:29.361409 2026] [security2:error] [pid 1321:tid 1578] [client 20.104.18.15:46007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/beence.php"] [unique_id "apK-JWjCPtor9NZ-byTlkAAABpU"]
[Sat Aug 29 05:10:29.364598 2026] [security2:error] [pid 11274:tid 11455] [client 93.123.109.228:47304] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/.env"] [unique_id "apK-JWbX5DA3XO6e_qQgMwAAARU"]
[Sat Aug 29 05:10:29.366231 2026] [security2:error] [pid 1041789:tid 1041951] [client 20.104.18.15:22365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/133.php"] [unique_id "apK-JYv3RhPI65jTFG4ThwAAAzI"]
[Sat Aug 29 05:10:29.372502 2026] [security2:error] [pid 1321:tid 1495] [client 131.226.2.220:55900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 220.2.226.131.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mihp.net"] [uri "/wp-login.php"] [unique_id "apK-JWjCPtor9NZ-byTljwAABkM"]
[Sat Aug 29 05:10:29.373851 2026] [security2:error] [pid 1321:tid 1524] [client 93.123.109.228:47318] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/.env"] [unique_id "apK-JWjCPtor9NZ-byTlkgAABmA"]
[Sat Aug 29 05:10:29.374053 2026] [security2:error] [pid 1321:tid 1573] [client 52.139.37.240:12315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/sagax.php"] [unique_id "apK-JWjCPtor9NZ-byTlkwAABpA"]
[Sat Aug 29 05:10:29.378371 2026] [security2:error] [pid 1321:tid 1577] [client 93.123.109.228:47646] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/laravel/app/.env"] [unique_id "apK-JWjCPtor9NZ-byTllwAABpQ"]
[Sat Aug 29 05:10:29.385311 2026] [security2:error] [pid 1321:tid 1602] [client 93.123.109.228:47334] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/laravel/app/.env"] [unique_id "apK-JWjCPtor9NZ-byTlmQAABq0"]
[Sat Aug 29 05:10:29.388394 2026] [security2:error] [pid 1321:tid 1478] [remote 93.123.109.228:33834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenokie.com"] [uri "/phpinfo.php"] [unique_id "apK-JWjCPtor9NZ-byTlmgAGX3c"]
[Sat Aug 29 05:10:29.393207 2026] [security2:error] [pid 11274:tid 11548] [client 117.240.152.41:22998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.152.240.117.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "midayinsurance.com"] [uri "/xmlrpc.php"] [unique_id "apK-JWbX5DA3XO6e_qQgOAAAAXA"]
[Sat Aug 29 05:10:29.393339 2026] [security2:error] [pid 11274:tid 11548] [client 117.240.152.41:22998] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "midayinsurance.com"] [uri "/xmlrpc.php"] [unique_id "apK-JWbX5DA3XO6e_qQgOAAAAXA"]
[Sat Aug 29 05:10:29.393759 2026] [security2:error] [pid 1041789:tid 1041823] [remote 45.148.10.62:58750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.yml.fme.mybluehost.me"] [uri "/wp-login.php"] [unique_id "apK-JYv3RhPI65jTFG4TkwADThU"]
[Sat Aug 29 05:10:29.395235 2026] [security2:error] [pid 1041789:tid 1042000] [client 20.104.18.15:43917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "apK-JYv3RhPI65jTFG4TlAAAA2M"]
[Sat Aug 29 05:10:29.396873 2026] [security2:error] [pid 11274:tid 11454] [client 20.48.251.3:9514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/konfig.php"] [unique_id "apK-JWbX5DA3XO6e_qQgOQAAARQ"]
[Sat Aug 29 05:10:29.398196 2026] [security2:error] [pid 1321:tid 1563] [client 91.92.47.191:41018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantgardening.com"] [uri "/settings.php"] [unique_id "apK-JWjCPtor9NZ-byTlnAAABoY"]
[Sat Aug 29 05:10:29.399932 2026] [security2:error] [pid 1041789:tid 1041969] [client 20.48.160.90:63427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/atomlib.php"] [unique_id "apK-JYv3RhPI65jTFG4TlgAAA0Q"]
[Sat Aug 29 05:10:29.401313 2026] [security2:error] [pid 11274:tid 11464] [client 93.123.109.228:47620] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK-JWbX5DA3XO6e_qQgOgAAAR4"]
[Sat Aug 29 05:10:29.404508 2026] [security2:error] [pid 1321:tid 1490] [client 93.123.109.228:47534] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK-JWjCPtor9NZ-byTlnQAABj4"]
[Sat Aug 29 05:10:29.412261 2026] [security2:error] [pid 1041789:tid 1042042] [client 20.104.18.15:15255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/ap.php"] [unique_id "apK-JYv3RhPI65jTFG4TngAAA40"]
[Sat Aug 29 05:10:29.416775 2026] [security2:error] [pid 1041789:tid 1041992] [client 93.123.109.228:47672] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK-JYv3RhPI65jTFG4TnwAAA1s"]
[Sat Aug 29 05:10:29.428229 2026] [security2:error] [pid 11274:tid 11467] [client 20.104.18.15:15228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/xmini4.php"] [unique_id "apK-JWbX5DA3XO6e_qQgPQAAASE"]
[Sat Aug 29 05:10:29.431993 2026] [security2:error] [pid 11274:tid 11468] [client 93.123.109.228:47698] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(\\\\/\\\\*\\\\!? ?(?:select|grant|delete|insert|drop|alter|replace|truncate|update|create|rename|describe|union|concat|group_concat))" at REQUEST_FILENAME. [file "/opt/mod_security/hg_rules.conf"] [line "1019"] [id "9000042"] [rev "2.2.2"] [msg "SQL Comment Sequence Detected."] [data "/*update"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/*update.cgi*"] [unique_id "apK-JWbX5DA3XO6e_qQgPgAAASI"]
[Sat Aug 29 05:10:29.432725 2026] [security2:error] [pid 1041789:tid 1041943] [client 93.123.109.228:47378] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK-JYv3RhPI65jTFG4TpgAAAyo"]
[Sat Aug 29 05:10:29.467998 2026] [security2:error] [pid 1041789:tid 1041981] [client 20.104.18.15:7092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/goods.php"] [unique_id "apK-JYv3RhPI65jTFG4TsgAAA1A"]
[Sat Aug 29 05:10:29.473172 2026] [security2:error] [pid 11274:tid 11473] [client 20.220.204.93:63573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/error_log.php"] [unique_id "apK-JWbX5DA3XO6e_qQgPwAAASc"]
[Sat Aug 29 05:10:29.473742 2026] [security2:error] [pid 1321:tid 1588] [client 93.123.109.228:47420] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/.env.backup"] [unique_id "apK-JWjCPtor9NZ-byTlqAAABp8"]
[Sat Aug 29 05:10:29.475102 2026] [security2:error] [pid 1321:tid 1505] [client 20.104.18.15:43910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/she11.php"] [unique_id "apK-JWjCPtor9NZ-byTlqQAABk0"]
[Sat Aug 29 05:10:29.485868 2026] [security2:error] [pid 1041789:tid 1041939] [client 20.104.104.62:16496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.jamwestcon.com"] [uri "/adminfuns.php"] [unique_id "apK-JYv3RhPI65jTFG4TtQAAAyY"]
[Sat Aug 29 05:10:29.489763 2026] [security2:error] [pid 1041789:tid 1042007] [client 4.205.62.107:51446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/ccou.php"] [unique_id "apK-JYv3RhPI65jTFG4TtgAAA2o"]
[Sat Aug 29 05:10:29.505489 2026] [security2:error] [pid 1321:tid 1382] [remote 93.123.109.228:33834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenokie.com"] [uri "/public/phpinfo.php"] [unique_id "apK-JWjCPtor9NZ-byTlqwAGoBg"]
[Sat Aug 29 05:10:29.510013 2026] [security2:error] [pid 1041789:tid 1042048] [client 20.104.18.15:46051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/222.php"] [unique_id "apK-JYv3RhPI65jTFG4TugAAA5M"]
[Sat Aug 29 05:10:29.511575 2026] [security2:error] [pid 1321:tid 1497] [client 93.123.109.228:47442] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/.env.backup"] [unique_id "apK-JWjCPtor9NZ-byTlrQAABkU"]
[Sat Aug 29 05:10:29.511635 2026] [security2:error] [pid 11274:tid 11462] [client 20.63.219.114:9182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/extractable-loader-head.php"] [unique_id "apK-JWbX5DA3XO6e_qQgQQAAARw"]
[Sat Aug 29 05:10:29.513108 2026] [security2:error] [pid 1321:tid 1613] [client 20.104.18.15:22518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/sym.php"] [unique_id "apK-JWjCPtor9NZ-byTlrwAABrg"]
[Sat Aug 29 05:10:29.520628 2026] [security2:error] [pid 11274:tid 11479] [client 4.205.62.107:62914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/edit.php"] [unique_id "apK-JWbX5DA3XO6e_qQgQwAAASw"]
[Sat Aug 29 05:10:29.520861 2026] [security2:error] [pid 11274:tid 11477] [client 93.123.109.228:47304] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/.env.bak"] [unique_id "apK-JWbX5DA3XO6e_qQgQgAAASs"]
[Sat Aug 29 05:10:29.521243 2026] [security2:error] [pid 1041789:tid 1041987] [client 74.248.24.12:6692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/k.php"] [unique_id "apK-JYv3RhPI65jTFG4TuwAAA1Y"]
[Sat Aug 29 05:10:29.526968 2026] [security2:error] [pid 1321:tid 1535] [client 93.123.109.228:47518] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/.env.bak"] [unique_id "apK-JWjCPtor9NZ-byTlsAAABms"]
[Sat Aug 29 05:10:29.530504 2026] [security2:error] [pid 11274:tid 11459] [client 20.52.41.200:4655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-includes/index.php"] [unique_id "apK-JWbX5DA3XO6e_qQgRAAAARk"]
[Sat Aug 29 05:10:29.533995 2026] [security2:error] [pid 1041789:tid 1042019] [client 20.48.251.3:44017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/nw.php"] [unique_id "apK-JYv3RhPI65jTFG4TvQAAA3Y"]
[Sat Aug 29 05:10:29.534821 2026] [security2:error] [pid 1041789:tid 1041961] [client 68.155.159.216:62827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK-JYv3RhPI65jTFG4TvwAAAzw"]
[Sat Aug 29 05:10:29.540934 2026] [security2:error] [pid 1321:tid 1529] [client 20.48.160.90:64551] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/1.php"] [unique_id "apK-JWjCPtor9NZ-byTltQAABmU"]
[Sat Aug 29 05:10:29.541057 2026] [security2:error] [pid 1321:tid 1529] [client 20.48.160.90:64551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/1.php"] [unique_id "apK-JWjCPtor9NZ-byTltQAABmU"]
[Sat Aug 29 05:10:29.550924 2026] [security2:error] [pid 11274:tid 11484] [client 158.23.147.79:5966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-includes/plugins.php"] [unique_id "apK-JWbX5DA3XO6e_qQgSAAAATE"]
[Sat Aug 29 05:10:29.556109 2026] [security2:error] [pid 1321:tid 1531] [client 20.104.18.15:43915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/wp-aothait.php"] [unique_id "apK-JWjCPtor9NZ-byTlugAABmc"]
[Sat Aug 29 05:10:29.561706 2026] [security2:error] [pid 1321:tid 1558] [client 52.138.0.157:5653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.sitestage.biz"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "apK-JWjCPtor9NZ-byTlvQAABoE"]
[Sat Aug 29 05:10:29.563795 2026] [security2:error] [pid 1041789:tid 1041951] [client 20.104.18.15:15287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/gulu.php"] [unique_id "apK-JYv3RhPI65jTFG4TxAAAAzI"]
[Sat Aug 29 05:10:29.581252 2026] [security2:error] [pid 1321:tid 1611] [client 93.123.109.228:47660] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/.env"] [unique_id "apK-JWjCPtor9NZ-byTlwAAABrY"]
[Sat Aug 29 05:10:29.584832 2026] [security2:error] [pid 1041789:tid 1042050] [client 20.104.18.15:15268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/media.php"] [unique_id "apK-JYv3RhPI65jTFG4TyQAAA5U"]
[Sat Aug 29 05:10:29.599311 2026] [security2:error] [pid 1321:tid 1543] [client 68.155.159.216:64434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/images/index.php"] [unique_id "apK-JWjCPtor9NZ-byTlwwAABnM"]
[Sat Aug 29 05:10:29.601971 2026] [security2:error] [pid 1041789:tid 1041940] [client 20.52.41.200:2851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/ioxi-o.php"] [unique_id "apK-JYv3RhPI65jTFG4TzAAAAyc"]
[Sat Aug 29 05:10:29.604967 2026] [security2:error] [pid 11274:tid 11492] [client 20.104.18.15:43960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/kerang.php"] [unique_id "apK-JWbX5DA3XO6e_qQgTgAAATk"]
[Sat Aug 29 05:10:29.608297 2026] [security2:error] [pid 1321:tid 1596] [client 20.104.18.15:7154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/ah.php"] [unique_id "apK-JWjCPtor9NZ-byTlxAAABqc"]
[Sat Aug 29 05:10:29.621377 2026] [security2:error] [pid 1041789:tid 1041931] [client 20.220.204.93:65164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/403.php"] [unique_id "apK-JYv3RhPI65jTFG4T0wAAAx4"]
[Sat Aug 29 05:10:29.625907 2026] [security2:error] [pid 1321:tid 1616] [client 93.123.109.228:47590] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/laravel/app/.env"] [unique_id "apK-JWjCPtor9NZ-byTlyAAABrs"]
[Sat Aug 29 05:10:29.628143 2026] [security2:error] [pid 1321:tid 1592] [client 68.155.159.216:1916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-content/admin.php"] [unique_id "apK-JWjCPtor9NZ-byTlygAABqM"]
[Sat Aug 29 05:10:29.638640 2026] [security2:error] [pid 1321:tid 1609] [client 93.123.109.228:47420] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/.env.old"] [unique_id "apK-JWjCPtor9NZ-byTlzgAABrQ"]
[Sat Aug 29 05:10:29.641390 2026] [security2:error] [pid 1321:tid 1609] [client 4.205.62.107:6868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/file21.php"] [unique_id "apK-JWjCPtor9NZ-byTl0AAABrQ"]
[Sat Aug 29 05:10:29.646873 2026] [security2:error] [pid 1041789:tid 1041971] [client 158.158.54.35:17732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-trackback.php"] [unique_id "apK-JYv3RhPI65jTFG4T2QAAA0Y"]
[Sat Aug 29 05:10:29.648121 2026] [security2:error] [pid 1321:tid 1515] [client 93.123.109.228:47542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK-JWjCPtor9NZ-byTl0QAABlc"]
[Sat Aug 29 05:10:29.650827 2026] [security2:error] [pid 1041789:tid 1041975] [client 20.104.18.15:45874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/ops.php"] [unique_id "apK-JYv3RhPI65jTFG4T3gAAA0o"]
[Sat Aug 29 05:10:29.652180 2026] [security2:error] [pid 1321:tid 1547] [client 40.83.93.50:10576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/disagraeed.php"] [unique_id "apK-JWjCPtor9NZ-byTl0gAABnY"]
[Sat Aug 29 05:10:29.653086 2026] [security2:error] [pid 1321:tid 1520] [client 20.104.18.15:22342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/8.php"] [unique_id "apK-JWjCPtor9NZ-byTl0wAABlw"]
[Sat Aug 29 05:10:29.665089 2026] [security2:error] [pid 1321:tid 1584] [client 93.123.109.228:47430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/.env.php"] [unique_id "apK-JWjCPtor9NZ-byTl1QAABps"]
[Sat Aug 29 05:10:29.670274 2026] [security2:error] [pid 11274:tid 11498] [client 20.48.251.3:9312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/myfile.php"] [unique_id "apK-JWbX5DA3XO6e_qQgUAAAAT8"]
[Sat Aug 29 05:10:29.671611 2026] [security2:error] [pid 1041789:tid 1042025] [client 195.178.110.247:59674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.magasec.com"] [uri "/index.php"] [unique_id "apK-JYv3RhPI65jTFG4T5AAAA3w"]
[Sat Aug 29 05:10:29.692195 2026] [security2:error] [pid 1321:tid 1595] [client 4.205.62.107:64900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-JWjCPtor9NZ-byTl2wAABqY"]
[Sat Aug 29 05:10:29.694272 2026] [security2:error] [pid 1041789:tid 1041992] [client 158.23.147.79:11405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK-JYv3RhPI65jTFG4T6AAAA1s"]
[Sat Aug 29 05:10:29.702821 2026] [security2:error] [pid 1321:tid 1556] [client 93.123.109.228:47518] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/.env.old"] [unique_id "apK-JWjCPtor9NZ-byTl3AAABn8"]
[Sat Aug 29 05:10:29.702830 2026] [security2:error] [pid 11274:tid 11503] [client 93.123.109.228:47788] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/.env.backup"] [unique_id "apK-JWbX5DA3XO6e_qQgUQAAAUQ"]
[Sat Aug 29 05:10:29.714073 2026] [security2:error] [pid 11274:tid 11493] [client 20.48.160.90:63382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/samll.php"] [unique_id "apK-JWbX5DA3XO6e_qQgUgAAATo"]
[Sat Aug 29 05:10:29.721873 2026] [security2:error] [pid 1041789:tid 1041947] [client 93.123.109.228:47712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/.env.php"] [unique_id "apK-JYv3RhPI65jTFG4T7AAAAy4"]
[Sat Aug 29 05:10:29.727482 2026] [security2:error] [pid 1041789:tid 1041943] [client 20.104.18.15:43948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/wp-includes/index.php"] [unique_id "apK-JYv3RhPI65jTFG4T8QAAAyo"]
[Sat Aug 29 05:10:29.728861 2026] [security2:error] [pid 1041789:tid 1042026] [client 93.123.109.228:47704] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/.env.bak"] [unique_id "apK-JYv3RhPI65jTFG4T8gAAA30"]
[Sat Aug 29 05:10:29.729512 2026] [security2:error] [pid 11274:tid 11505] [client 20.104.18.15:15203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/replace.php"] [unique_id "apK-JWbX5DA3XO6e_qQgVAAAAUY"]
[Sat Aug 29 05:10:29.741111 2026] [security2:error] [pid 1041789:tid 1042005] [client 68.155.159.216:38696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK-JYv3RhPI65jTFG4T9QAAA2g"]
[Sat Aug 29 05:10:29.743009 2026] [security2:error] [pid 1041789:tid 1041950] [client 20.104.18.15:7053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/ws55.php"] [unique_id "apK-JYv3RhPI65jTFG4T9gAAAzE"]
[Sat Aug 29 05:10:29.748678 2026] [security2:error] [pid 1041789:tid 1042006] [client 158.23.147.79:63823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK-JYv3RhPI65jTFG4T-AAAA2k"]
[Sat Aug 29 05:10:29.758214 2026] [security2:error] [pid 1041789:tid 1041939] [client 20.220.204.93:65155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/cytyr.php"] [unique_id "apK-JYv3RhPI65jTFG4T-wAAAyY"]
[Sat Aug 29 05:10:29.768125 2026] [security2:error] [pid 1321:tid 1593] [client 20.104.18.15:15210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/adminfuns.php"] [unique_id "apK-JWjCPtor9NZ-byTl5AAABqQ"]
[Sat Aug 29 05:10:29.773639 2026] [security2:error] [pid 1041789:tid 1042015] [client 68.155.159.216:23506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/sad/about.php"] [unique_id "apK-JYv3RhPI65jTFG4UAgAAA3I"]
[Sat Aug 29 05:10:29.785200 2026] [security2:error] [pid 1041789:tid 1041987] [client 20.104.18.15:43929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/m.php"] [unique_id "apK-JYv3RhPI65jTFG4UBAAAA1Y"]
[Sat Aug 29 05:10:29.801952 2026] [security2:error] [pid 1041789:tid 1041976] [client 20.48.251.3:46592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/thui.php"] [unique_id "apK-JYv3RhPI65jTFG4UCAAAA0s"]
[Sat Aug 29 05:10:29.806672 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.104.18.15:45891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK-JYv3RhPI65jTFG4UCQAAA3o"]
[Sat Aug 29 05:10:29.811478 2026] [security2:error] [pid 1321:tid 1599] [client 93.123.109.228:47786] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/.env.swp"] [unique_id "apK-JWjCPtor9NZ-byTl7wAABqo"]
[Sat Aug 29 05:10:29.814087 2026] [security2:error] [pid 1041789:tid 1041957] [client 20.104.18.15:22423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/goods.php"] [unique_id "apK-JYv3RhPI65jTFG4UCgAAAzg"]
[Sat Aug 29 05:10:29.820743 2026] [security2:error] [pid 1041789:tid 1041933] [client 68.155.159.216:18249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/x.php"] [unique_id "apK-JYv3RhPI65jTFG4UCwAAAyA"]
[Sat Aug 29 05:10:29.833247 2026] [security2:error] [pid 1321:tid 1516] [client 52.138.0.157:42662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.sitestage.biz"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "apK-JWjCPtor9NZ-byTl8AAABlg"]
[Sat Aug 29 05:10:29.840221 2026] [security2:error] [pid 1321:tid 1576] [client 195.178.110.247:9502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.magasec.com"] [uri "/index.php"] [unique_id "apK-JWjCPtor9NZ-byTl8QAABpM"]
[Sat Aug 29 05:10:29.846121 2026] [security2:error] [pid 1321:tid 1500] [client 20.104.104.62:16500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.jamwestcon.com"] [uri "/edit.php"] [unique_id "apK-JWjCPtor9NZ-byTl8gAABkg"]
[Sat Aug 29 05:10:29.852374 2026] [security2:error] [pid 11274:tid 11517] [client 20.48.160.90:63368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/she11.php"] [unique_id "apK-JWbX5DA3XO6e_qQgWwAAAVI"]
[Sat Aug 29 05:10:29.854954 2026] [security2:error] [pid 11274:tid 11518] [client 20.104.18.15:45836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/503.php"] [unique_id "apK-JWbX5DA3XO6e_qQgXAAAAVM"]
[Sat Aug 29 05:10:29.864483 2026] [security2:error] [pid 1321:tid 1607] [client 93.123.109.228:47420] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/.env~"] [unique_id "apK-JWjCPtor9NZ-byTl9AAABrI"]
[Sat Aug 29 05:10:29.865159 2026] [security2:error] [pid 11274:tid 11520] [client 20.104.18.15:15233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/c4.php"] [unique_id "apK-JWbX5DA3XO6e_qQgXgAAAVU"]
[Sat Aug 29 05:10:29.875454 2026] [security2:error] [pid 1321:tid 1540] [client 20.63.219.114:18342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/defaults.php"] [unique_id "apK-JWjCPtor9NZ-byTl9QAABnA"]
[Sat Aug 29 05:10:29.880838 2026] [security2:error] [pid 1041789:tid 1041983] [client 93.123.109.228:47704] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/.env.old"] [unique_id "apK-JYv3RhPI65jTFG4UEQAAA1I"]
[Sat Aug 29 05:10:29.883913 2026] [security2:error] [pid 11274:tid 11521] [client 20.104.18.15:43849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/file31.php"] [unique_id "apK-JWbX5DA3XO6e_qQgYAAAAVY"]
[Sat Aug 29 05:10:29.884945 2026] [security2:error] [pid 1041789:tid 1041983] [client 4.205.62.107:63952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/env.php"] [unique_id "apK-JYv3RhPI65jTFG4UEwAAA1I"]
[Sat Aug 29 05:10:29.885834 2026] [security2:error] [pid 1321:tid 1579] [client 93.123.109.228:47726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.group3-llc.com"] [uri "/.env.php"] [unique_id "apK-JWjCPtor9NZ-byTl9wAABpY"]
[Sat Aug 29 05:10:29.897946 2026] [security2:error] [pid 11274:tid 11500] [client 40.83.93.50:12555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/wp-admin.php"] [unique_id "apK-JWbX5DA3XO6e_qQgYQAAAUE"]
[Sat Aug 29 05:10:29.900371 2026] [security2:error] [pid 1321:tid 1499] [client 93.123.109.228:47294] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/.env.swp"] [unique_id "apK-JWjCPtor9NZ-byTl-gAABkc"]
[Sat Aug 29 05:10:29.907410 2026] [security2:error] [pid 1041789:tid 1042046] [client 52.139.37.240:12470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/wp-content/plugins/ftde.php"] [unique_id "apK-JYv3RhPI65jTFG4UFQAAA5E"]
[Sat Aug 29 05:10:29.907878 2026] [security2:error] [pid 1041789:tid 1042025] [client 20.104.18.15:15352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/classwithtostring.php"] [unique_id "apK-JYv3RhPI65jTFG4UFgAAA3w"]
[Sat Aug 29 05:10:29.916790 2026] [security2:error] [pid 1041789:tid 1042055] [client 68.155.159.216:56804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK-JYv3RhPI65jTFG4UGAAAA5o"]
[Sat Aug 29 05:10:29.921601 2026] [security2:error] [pid 1321:tid 1509] [client 20.220.204.93:61637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/galer.php"] [unique_id "apK-JWjCPtor9NZ-byTl_QAABlE"]
[Sat Aug 29 05:10:29.937544 2026] [security2:error] [pid 1041789:tid 1041944] [client 20.48.251.3:46644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/public/bnn_.php.php"] [unique_id "apK-JYv3RhPI65jTFG4UGQAAAys"]
[Sat Aug 29 05:10:29.940109 2026] [security2:error] [pid 11274:tid 11529] [client 20.104.18.15:6919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/drykl.php"] [unique_id "apK-JWbX5DA3XO6e_qQgYwAAAV4"]
[Sat Aug 29 05:10:29.953755 2026] [security2:error] [pid 1321:tid 1578] [client 93.123.109.228:47366] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/.env~"] [unique_id "apK-JWjCPtor9NZ-byTl_wAABpU"]
[Sat Aug 29 05:10:29.959056 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.104.18.15:22403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/ah.php"] [unique_id "apK-JYv3RhPI65jTFG4UIgAAA30"]
[Sat Aug 29 05:10:29.981184 2026] [security2:error] [pid 11274:tid 11536] [client 20.104.18.15:45951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK-JWbX5DA3XO6e_qQgZQAAAWU"]
[Sat Aug 29 05:10:29.989151 2026] [security2:error] [pid 1041789:tid 1042052] [client 20.48.160.90:64629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/kerang.php"] [unique_id "apK-JYv3RhPI65jTFG4UJQAAA5c"]
[Sat Aug 29 05:10:29.990135 2026] [security2:error] [pid 1041789:tid 1041938] [client 93.123.109.228:47506] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/.env.swp"] [unique_id "apK-JYv3RhPI65jTFG4UJwAAAyU"]
[Sat Aug 29 05:10:29.991544 2026] [security2:error] [pid 1041789:tid 1041995] [client 93.123.109.228:47378] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.bak"] [unique_id "apK-JYv3RhPI65jTFG4UJgAAA14"]
[Sat Aug 29 05:10:29.999085 2026] [security2:error] [pid 1041789:tid 1041940] [client 20.52.41.200:4747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-admin/a.php"] [unique_id "apK-JYv3RhPI65jTFG4UKQAAAyc"]
[Sat Aug 29 05:10:30.002470 2026] [security2:error] [pid 1321:tid 1598] [client 93.123.109.228:47646] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.old"] [unique_id "apK-JWjCPtor9NZ-byTmCQAABqk"]
[Sat Aug 29 05:10:30.005641 2026] [security2:error] [pid 1041789:tid 1042044] [client 20.104.18.15:43860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/fling.php"] [unique_id "apK-Jov3RhPI65jTFG4ULgAAA48"]
[Sat Aug 29 05:10:30.010226 2026] [security2:error] [pid 11274:tid 11543] [client 93.123.109.228:47408] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config~"] [unique_id "apK-JmbX5DA3XO6e_qQgagAAAWs"]
[Sat Aug 29 05:10:30.020085 2026] [security2:error] [pid 11274:tid 11534] [client 20.104.18.15:15192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/rxr.php"] [unique_id "apK-JmbX5DA3XO6e_qQgbAAAAWM"]
[Sat Aug 29 05:10:30.024787 2026] [security2:error] [pid 11274:tid 11533] [client 20.104.18.15:43311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/dk.php"] [unique_id "apK-JmbX5DA3XO6e_qQgbQAAAWI"]
[Sat Aug 29 05:10:30.028989 2026] [security2:error] [pid 1321:tid 1574] [client 93.123.109.228:47590] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/.env~"] [unique_id "apK-JmjCPtor9NZ-byTmCwAABpE"]
[Sat Aug 29 05:10:30.029289 2026] [security2:error] [pid 1041789:tid 1042005] [client 52.138.0.157:33473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.sitestage.biz"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-Jov3RhPI65jTFG4UMAAAA2g"]
[Sat Aug 29 05:10:30.033688 2026] [security2:error] [pid 1041789:tid 1042023] [client 158.23.147.79:14307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK-Jov3RhPI65jTFG4UMQAAA3o"]
[Sat Aug 29 05:10:30.036387 2026] [security2:error] [pid 11274:tid 11545] [client 20.104.18.15:45989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/fxp.php"] [unique_id "apK-JmbX5DA3XO6e_qQgcAAAAW0"]
[Sat Aug 29 05:10:30.038140 2026] [security2:error] [pid 1041789:tid 1041962] [client 74.248.24.12:20021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/root.php"] [unique_id "apK-Jov3RhPI65jTFG4UNAAAAz0"]
[Sat Aug 29 05:10:30.043781 2026] [security2:error] [pid 1321:tid 1552] [client 20.104.104.62:16468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.jamwestcon.com"] [uri "/term.php"] [unique_id "apK-JmjCPtor9NZ-byTmDwAABns"]
[Sat Aug 29 05:10:30.044706 2026] [security2:error] [pid 1041789:tid 1041933] [client 93.123.109.228:47470] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.bak"] [unique_id "apK-Jov3RhPI65jTFG4UNgAAAyA"]
[Sat Aug 29 05:10:30.064932 2026] [security2:error] [pid 11274:tid 11552] [client 20.104.18.15:15172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK-JmbX5DA3XO6e_qQgcwAAAXQ"]
[Sat Aug 29 05:10:30.065814 2026] [security2:error] [pid 1321:tid 1591] [client 93.123.109.228:47294] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.old"] [unique_id "apK-JmjCPtor9NZ-byTmEgAABqI"]
[Sat Aug 29 05:10:30.069701 2026] [security2:error] [pid 1041789:tid 1041990] [client 158.23.147.79:63287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/content.php"] [unique_id "apK-Jov3RhPI65jTFG4UQwAAA1k"]
[Sat Aug 29 05:10:30.070171 2026] [security2:error] [pid 1041789:tid 1041964] [client 20.48.251.3:43985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/php_info.php"] [unique_id "apK-Jov3RhPI65jTFG4URQAAAz8"]
[Sat Aug 29 05:10:30.079413 2026] [security2:error] [pid 1321:tid 1502] [client 20.104.18.15:6961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/backup.php"] [unique_id "apK-JmjCPtor9NZ-byTmFwAABko"]
[Sat Aug 29 05:10:30.095232 2026] [security2:error] [pid 11274:tid 11558] [client 20.104.49.130:34548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/press.php"] [unique_id "apK-JmbX5DA3XO6e_qQgdQAAAXo"]
[Sat Aug 29 05:10:30.104493 2026] [security2:error] [pid 11274:tid 11547] [client 52.139.37.240:12305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "apK-JmbX5DA3XO6e_qQgdgAAAW8"]
[Sat Aug 29 05:10:30.105217 2026] [security2:error] [pid 1321:tid 1527] [client 93.123.109.228:47366] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config~"] [unique_id "apK-JmjCPtor9NZ-byTmHAAABmM"]
[Sat Aug 29 05:10:30.107098 2026] [security2:error] [pid 11274:tid 11522] [client 20.52.41.200:2774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/xmlrpc.php"] [unique_id "apK-JmbX5DA3XO6e_qQgcgAAAVc"]
[Sat Aug 29 05:10:30.147244 2026] [security2:error] [pid 1321:tid 1489] [client 20.48.160.90:63450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/m.php"] [unique_id "apK-JmjCPtor9NZ-byTmJQAABj0"]
[Sat Aug 29 05:10:30.157654 2026] [security2:error] [pid 1041789:tid 1042042] [client 20.104.18.15:43317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/btyuio.php"] [unique_id "apK-Jov3RhPI65jTFG4UXQAAA40"]
[Sat Aug 29 05:10:30.158205 2026] [security2:error] [pid 1041789:tid 1041944] [client 20.104.18.15:45850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/f.php"] [unique_id "apK-Jov3RhPI65jTFG4UXgAAAys"]
[Sat Aug 29 05:10:30.161956 2026] [security2:error] [pid 1041789:tid 1041945] [client 20.104.18.15:15180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.muggoentertainment.com"] [uri "/reviall.php"] [unique_id "apK-Jov3RhPI65jTFG4UYQAAAyw"]
[Sat Aug 29 05:10:30.162111 2026] [security2:error] [pid 1321:tid 1573] [client 40.83.93.50:6282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/add_actualites.php"] [unique_id "apK-JmjCPtor9NZ-byTmJwAABpA"]
[Sat Aug 29 05:10:30.167013 2026] [security2:error] [pid 1041789:tid 1042017] [client 20.104.18.15:22389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/ws55.php"] [unique_id "apK-Jov3RhPI65jTFG4UZQAAA3Q"]
[Sat Aug 29 05:10:30.186512 2026] [security2:error] [pid 11274:tid 11567] [client 20.104.18.15:44020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/ta.php"] [unique_id "apK-JmbX5DA3XO6e_qQgfQAAAYM"]
[Sat Aug 29 05:10:30.202253 2026] [security2:error] [pid 1041789:tid 1042031] [client 20.48.251.3:10056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/broadcasting.php"] [unique_id "apK-Jov3RhPI65jTFG4UaAAAA4I"]
[Sat Aug 29 05:10:30.216535 2026] [security2:error] [pid 1041789:tid 1042052] [client 20.104.18.15:6936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/indo.php"] [unique_id "apK-Jov3RhPI65jTFG4UawAAA5c"]
[Sat Aug 29 05:10:30.218672 2026] [security2:error] [pid 11274:tid 11571] [client 93.123.109.228:47698] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.bak"] [unique_id "apK-JmbX5DA3XO6e_qQgfgAAAYc"]
[Sat Aug 29 05:10:30.228534 2026] [security2:error] [pid 1041789:tid 1041948] [client 20.104.18.15:15143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/5PJcpMFsD8B.php"] [unique_id "apK-Jov3RhPI65jTFG4UbwAAAy8"]
[Sat Aug 29 05:10:30.230697 2026] [security2:error] [pid 1321:tid 1491] [client 93.123.109.228:47542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.old"] [unique_id "apK-JmjCPtor9NZ-byTmLwAABj8"]
[Sat Aug 29 05:10:30.231312 2026] [security2:error] [pid 11274:tid 11445] [client 93.123.109.228:47624] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config~"] [unique_id "apK-JmbX5DA3XO6e_qQggAAAAQs"]
[Sat Aug 29 05:10:30.238977 2026] [security2:error] [pid 1041789:tid 1041943] [client 20.151.200.44:65129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/0xs.php"] [unique_id "apK-Jov3RhPI65jTFG4UcgAAAyo"]
[Sat Aug 29 05:10:30.241348 2026] [security2:error] [pid 1041789:tid 1042043] [client 20.104.104.62:16713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.jamwestcon.com"] [uri "/wp.php"] [unique_id "apK-Jov3RhPI65jTFG4UcwAAA44"]
[Sat Aug 29 05:10:30.244072 2026] [security2:error] [pid 1041789:tid 1042023] [client 158.158.54.35:33347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/222.php"] [unique_id "apK-Jov3RhPI65jTFG4UdAAAA3o"]
[Sat Aug 29 05:10:30.249821 2026] [authz_core:error] [pid 1041789:tid 1042042] [client 52.138.0.157:40186] AH01630: client denied by server configuration: /home4/penmarke/public_html/sitestage/wp-includes/block-patterns/error_log
[Sat Aug 29 05:10:30.270009 2026] [security2:error] [pid 1041789:tid 1042029] [client 20.63.219.114:1951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/post.php"] [unique_id "apK-Jov3RhPI65jTFG4UegAAA4A"]
[Sat Aug 29 05:10:30.289954 2026] [security2:error] [pid 1041789:tid 1041964] [client 20.220.204.93:63490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/baixy.php"] [unique_id "apK-Jov3RhPI65jTFG4UggAAAz8"]
[Sat Aug 29 05:10:30.292451 2026] [security2:error] [pid 1041789:tid 1041977] [client 20.104.18.15:43852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/dehnl.php"] [unique_id "apK-Jov3RhPI65jTFG4UgwAAA0w"]
[Sat Aug 29 05:10:30.294277 2026] [security2:error] [pid 11274:tid 11455] [client 20.104.18.15:46078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/vv.php"] [unique_id "apK-JmbX5DA3XO6e_qQggwAAARU"]
[Sat Aug 29 05:10:30.317038 2026] [security2:error] [pid 1041789:tid 1041987] [client 68.155.159.216:14234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/install.php"] [unique_id "apK-Jov3RhPI65jTFG4UiwAAA1Y"]
[Sat Aug 29 05:10:30.319793 2026] [security2:error] [pid 1041789:tid 1042048] [client 52.138.0.157:40186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.sitestage.biz"] [uri "/wp-includes/blocks/buttons/index.php"] [unique_id "apK-Jov3RhPI65jTFG4UjAAAA5M"]
[Sat Aug 29 05:10:30.324397 2026] [security2:error] [pid 1321:tid 1616] [client 20.48.160.90:63374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/fling.php"] [unique_id "apK-JmjCPtor9NZ-byTmPAAABrs"]
[Sat Aug 29 05:10:30.327936 2026] [security2:error] [pid 11274:tid 11451] [client 20.104.18.15:22415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/drykl.php"] [unique_id "apK-JmbX5DA3XO6e_qQghgAAARE"]
[Sat Aug 29 05:10:30.334846 2026] [security2:error] [pid 1321:tid 1606] [client 20.48.251.3:43974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/v4.php"] [unique_id "apK-JmjCPtor9NZ-byTmPQAABrE"]
[Sat Aug 29 05:10:30.337029 2026] [security2:error] [pid 1041789:tid 1042046] [client 68.155.159.216:33581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-admin/css/index.php"] [unique_id "apK-Jov3RhPI65jTFG4UkAAAA5E"]
[Sat Aug 29 05:10:30.355511 2026] [security2:error] [pid 1041789:tid 1041950] [client 68.155.159.216:7122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-admin/dropdown.php"] [unique_id "apK-Jov3RhPI65jTFG4UlwAAAzE"]
[Sat Aug 29 05:10:30.363227 2026] [security2:error] [pid 1321:tid 1604] [client 68.155.159.216:6076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK-JmjCPtor9NZ-byTmRQAABq8"]
[Sat Aug 29 05:10:30.422895 2026] [security2:error] [pid 1041789:tid 1041951] [client 47.128.41.250:62164] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.myldspreschool.com"] [uri "/robots.txt"] [unique_id "apK-Jov3RhPI65jTFG4UnwAAAzI"]
[Sat Aug 29 05:10:30.426307 2026] [security2:error] [pid 11274:tid 11457] [client 20.220.204.93:65279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/ava.php"] [unique_id "apK-JmbX5DA3XO6e_qQgjAAAARc"]
[Sat Aug 29 05:10:30.431440 2026] [security2:error] [pid 1321:tid 1601] [client 40.83.93.50:20432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/wp-configs.php"] [unique_id "apK-JmjCPtor9NZ-byTmSAAABqw"]
[Sat Aug 29 05:10:30.438436 2026] [security2:error] [pid 11274:tid 11454] [client 20.104.104.62:16714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.jamwestcon.com"] [uri "/ioxi-o.php"] [unique_id "apK-JmbX5DA3XO6e_qQgjQAAARQ"]
[Sat Aug 29 05:10:30.449988 2026] [security2:error] [pid 1321:tid 1587] [client 20.104.49.130:42219] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/sta.php"] [unique_id "apK-JmjCPtor9NZ-byTmSwAABp4"]
[Sat Aug 29 05:10:30.453975 2026] [security2:error] [pid 11274:tid 11444] [client 68.155.159.216:52765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK-JmbX5DA3XO6e_qQgjgAAAQo"]
[Sat Aug 29 05:10:30.468502 2026] [security2:error] [pid 1041789:tid 1042014] [client 20.48.251.3:43972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/debuggen.php"] [unique_id "apK-Jov3RhPI65jTFG4UqQAAA3E"]
[Sat Aug 29 05:10:30.504577 2026] [security2:error] [pid 11274:tid 11473] [client 20.48.160.90:64517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/btyuio.php"] [unique_id "apK-JmbX5DA3XO6e_qQgkgAAASc"]
[Sat Aug 29 05:10:30.522985 2026] [security2:error] [pid 11274:tid 11467] [client 52.138.0.157:58110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.sitestage.biz"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "apK-JmbX5DA3XO6e_qQgkwAAASE"]
[Sat Aug 29 05:10:30.530966 2026] [security2:error] [pid 1041789:tid 1041918] [remote 47.128.32.201:26968] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "wticalumni.com"] [uri "/robots.txt"] [unique_id "apK-Jov3RhPI65jTFG4UsQADN3Q"]
[Sat Aug 29 05:10:30.552986 2026] [security2:error] [pid 1041789:tid 1041961] [client 74.248.24.12:4359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/p.php"] [unique_id "apK-Jov3RhPI65jTFG4UtQAAAzw"]
[Sat Aug 29 05:10:30.569316 2026] [security2:error] [pid 1041789:tid 1041938] [client 20.52.41.200:2772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/filemanager.php"] [unique_id "apK-Jov3RhPI65jTFG4UvwAAAyU"]
[Sat Aug 29 05:10:30.569648 2026] [security2:error] [pid 1041789:tid 1041995] [client 20.104.49.130:52482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "coveryourauto.com"] [uri "/samll.php"] [unique_id "apK-Jov3RhPI65jTFG4UwAAAA14"]
[Sat Aug 29 05:10:30.586669 2026] [core:error] [pid 1321:tid 1514] [client 34.50.189.51:55590] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:30.586694 2026] [core:error] [pid 1321:tid 1514] [client 34.50.189.51:55590] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:30.600914 2026] [security2:error] [pid 11274:tid 11481] [client 34.50.189.51:55612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.189.50.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "discocollective.kriveloff-associates.com"] [uri "/i.php"] [unique_id "apK-JmbX5DA3XO6e_qQglwAAAS4"]
[Sat Aug 29 05:10:30.604063 2026] [security2:error] [pid 11274:tid 11491] [client 20.48.251.3:9322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/wp-admin/sc.php"] [unique_id "apK-JmbX5DA3XO6e_qQgmAAAATg"]
[Sat Aug 29 05:10:30.604642 2026] [security2:error] [pid 1321:tid 1553] [client 34.50.189.51:55580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.189.50.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "discocollective.kriveloff-associates.com"] [uri "/pi.php"] [unique_id "apK-JmjCPtor9NZ-byTmYQAABnw"]
[Sat Aug 29 05:10:30.607125 2026] [authz_core:error] [pid 1321:tid 1567] [client 34.50.189.51:55602] AH01630: client denied by server configuration: /home4/krivelof/public_html/discocollective/.htpasswd
[Sat Aug 29 05:10:30.608314 2026] [security2:error] [pid 1041789:tid 1042006] [client 34.50.189.51:55652] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "discocollective.kriveloff-associates.com"] [uri "/.env.prod"] [unique_id "apK-Jov3RhPI65jTFG4UxgAAA2k"]
[Sat Aug 29 05:10:30.613564 2026] [core:error] [pid 11274:tid 11488] [client 34.50.189.51:55678] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:30.613592 2026] [core:error] [pid 11274:tid 11488] [client 34.50.189.51:55678] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:30.614494 2026] [security2:error] [pid 11274:tid 11475] [client 34.50.189.51:55706] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/_next/.env"] [unique_id "apK-JmbX5DA3XO6e_qQgnAAAASk"]
[Sat Aug 29 05:10:30.616088 2026] [security2:error] [pid 1041789:tid 1042047] [client 34.50.189.51:55664] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/.env"] [unique_id "apK-Jov3RhPI65jTFG4UyAAAA5I"]
[Sat Aug 29 05:10:30.616568 2026] [security2:error] [pid 1041789:tid 1041972] [client 20.52.41.200:4665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK-Jov3RhPI65jTFG4UyQAAA0c"]
[Sat Aug 29 05:10:30.617755 2026] [core:error] [pid 1041789:tid 1041939] [client 34.50.189.51:55634] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:30.617775 2026] [core:error] [pid 1041789:tid 1041939] [client 34.50.189.51:55634] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:30.618102 2026] [security2:error] [pid 1321:tid 1615] [client 34.50.189.51:55640] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/.env~"] [unique_id "apK-JmjCPtor9NZ-byTmYgAABro"]
[Sat Aug 29 05:10:30.620912 2026] [core:error] [pid 11274:tid 11460] [client 34.50.189.51:55692] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:30.620931 2026] [core:error] [pid 11274:tid 11460] [client 34.50.189.51:55692] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:30.621759 2026] [security2:error] [pid 1041789:tid 1041957] [client 34.50.189.51:55642] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.bash_history"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/.bash_history"] [unique_id "apK-Jov3RhPI65jTFG4UygAAAzg"]
[Sat Aug 29 05:10:30.626604 2026] [core:error] [pid 11274:tid 11492] [client 34.50.189.51:55708] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:30.626625 2026] [core:error] [pid 11274:tid 11492] [client 34.50.189.51:55708] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:30.634998 2026] [security2:error] [pid 1321:tid 1564] [client 4.205.62.107:4961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/66.php"] [unique_id "apK-JmjCPtor9NZ-byTmZwAABoc"]
[Sat Aug 29 05:10:30.635856 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.63.219.114:17976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/csv.php"] [unique_id "apK-Jov3RhPI65jTFG4U1QAAA30"]
[Sat Aug 29 05:10:30.646510 2026] [security2:error] [pid 1041789:tid 1042020] [client 52.139.37.240:12543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/z.php"] [unique_id "apK-Jov3RhPI65jTFG4U3QAAA3c"]
[Sat Aug 29 05:10:30.647742 2026] [security2:error] [pid 11274:tid 11497] [client 20.104.49.130:43787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/dehnl.php"] [unique_id "apK-JmbX5DA3XO6e_qQgoAAAAT4"]
[Sat Aug 29 05:10:30.656368 2026] [security2:error] [pid 1041789:tid 1042029] [client 40.83.93.50:11461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/alfanew.php7"] [unique_id "apK-Jov3RhPI65jTFG4U3wAAA4A"]
[Sat Aug 29 05:10:30.657339 2026] [security2:error] [pid 1041789:tid 1042054] [client 20.48.160.90:63463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/dehnl.php"] [unique_id "apK-Jov3RhPI65jTFG4U4AAAA5k"]
[Sat Aug 29 05:10:30.659315 2026] [security2:error] [pid 11274:tid 11494] [client 158.23.147.79:5892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK-JmbX5DA3XO6e_qQgogAAATs"]
[Sat Aug 29 05:10:30.663156 2026] [security2:error] [pid 11274:tid 11498] [client 4.205.62.107:60313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/8.php"] [unique_id "apK-JmbX5DA3XO6e_qQgowAAAT8"]
[Sat Aug 29 05:10:30.680223 2026] [security2:error] [pid 11274:tid 11503] [client 20.220.204.93:61599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/gdn.php"] [unique_id "apK-JmbX5DA3XO6e_qQgpQAAAUQ"]
[Sat Aug 29 05:10:30.691563 2026] [security2:error] [pid 11274:tid 11479] [client 158.158.54.35:33395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/x.php"] [unique_id "apK-JmbX5DA3XO6e_qQgpwAAASw"]
[Sat Aug 29 05:10:30.701328 2026] [security2:error] [pid 1041789:tid 1041963] [client 180.190.5.40:50687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.5.190.180.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK-Jov3RhPI65jTFG4U4wAAAz4"]
[Sat Aug 29 05:10:30.701452 2026] [security2:error] [pid 1041789:tid 1041963] [client 180.190.5.40:50687] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK-Jov3RhPI65jTFG4U4wAAAz4"]
[Sat Aug 29 05:10:30.715379 2026] [security2:error] [pid 1321:tid 1516] [client 20.104.104.62:16489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.jamwestcon.com"] [uri "/system_core.php"] [unique_id "apK-JmjCPtor9NZ-byTmbAAABlg"]
[Sat Aug 29 05:10:30.716473 2026] [security2:error] [pid 11274:tid 11504] [client 68.155.159.216:65127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK-JmbX5DA3XO6e_qQgqAAAAUU"]
[Sat Aug 29 05:10:30.721251 2026] [security2:error] [pid 1041789:tid 1041969] [client 197.219.150.206:56432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK-Jov3RhPI65jTFG4U5AAAA0Q"]
[Sat Aug 29 05:10:30.721367 2026] [security2:error] [pid 1041789:tid 1041969] [client 197.219.150.206:56432] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK-Jov3RhPI65jTFG4U5AAAA0Q"]
[Sat Aug 29 05:10:30.734006 2026] [security2:error] [pid 11274:tid 11490] [client 20.48.251.3:43843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/application.config.php"] [unique_id "apK-JmbX5DA3XO6e_qQgqgAAATc"]
[Sat Aug 29 05:10:30.750834 2026] [security2:error] [pid 1321:tid 1500] [client 68.155.159.216:62808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/file.php"] [unique_id "apK-JmjCPtor9NZ-byTmbwAABkg"]
[Sat Aug 29 05:10:30.751304 2026] [security2:error] [pid 11274:tid 11511] [client 158.23.147.79:55293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/atomlib.php"] [unique_id "apK-JmbX5DA3XO6e_qQgrAAAAUw"]
[Sat Aug 29 05:10:30.785624 2026] [security2:error] [pid 1321:tid 1506] [client 158.23.147.79:5948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/bk/index.php"] [unique_id "apK-JmjCPtor9NZ-byTmeAAABk4"]
[Sat Aug 29 05:10:30.796508 2026] [security2:error] [pid 1041789:tid 1041991] [client 20.104.49.130:53756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/002.php"] [unique_id "apK-Jov3RhPI65jTFG4U7QAAA1o"]
[Sat Aug 29 05:10:30.797390 2026] [security2:error] [pid 1041789:tid 1041971] [client 20.48.160.90:62261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/zoo2.php"] [unique_id "apK-Jov3RhPI65jTFG4U8AAAA0Y"]
[Sat Aug 29 05:10:30.798765 2026] [security2:error] [pid 1041789:tid 1041954] [client 4.205.62.107:6474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/mcebraed.php"] [unique_id "apK-Jov3RhPI65jTFG4U8QAAAzU"]
[Sat Aug 29 05:10:30.799273 2026] [security2:error] [pid 1041789:tid 1041988] [client 52.138.0.157:42648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.sitestage.biz"] [uri "/wp-includes/index.php"] [unique_id "apK-Jov3RhPI65jTFG4U7gAAA1c"]
[Sat Aug 29 05:10:30.801692 2026] [security2:error] [pid 1041789:tid 1041976] [client 68.155.159.216:1795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/xmlrpc.php"] [unique_id "apK-Jov3RhPI65jTFG4U8wAAA0s"]
[Sat Aug 29 05:10:30.821201 2026] [security2:error] [pid 1041789:tid 1041987] [client 20.104.104.62:37543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/str.php"] [unique_id "apK-Jov3RhPI65jTFG4U-QAAA1Y"]
[Sat Aug 29 05:10:30.824727 2026] [security2:error] [pid 1041789:tid 1041931] [client 93.123.109.228:47394] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/ADMIN/.env"] [unique_id "apK-Jov3RhPI65jTFG4U-gAAAx4"]
[Sat Aug 29 05:10:30.828614 2026] [security2:error] [pid 1041789:tid 1041995] [client 4.205.62.107:64960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-Jov3RhPI65jTFG4U_AAAA14"]
[Sat Aug 29 05:10:30.830292 2026] [security2:error] [pid 11274:tid 11514] [client 158.23.147.79:11368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/ans.php"] [unique_id "apK-JmbX5DA3XO6e_qQgsgAAAU8"]
[Sat Aug 29 05:10:30.833702 2026] [security2:error] [pid 1321:tid 1602] [client 93.123.109.228:47280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/.wp-config.php.swp"] [unique_id "apK-JmjCPtor9NZ-byTmfQAABq0"]
[Sat Aug 29 05:10:30.844185 2026] [security2:error] [pid 1041789:tid 1042014] [client 52.139.37.240:12421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/f35.php"] [unique_id "apK-Jov3RhPI65jTFG4U_QAAA3E"]
[Sat Aug 29 05:10:30.854299 2026] [security2:error] [pid 1041789:tid 1042001] [client 158.23.147.79:63833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/classwithtostring.php"] [unique_id "apK-Jov3RhPI65jTFG4VAQAAA2Q"]
[Sat Aug 29 05:10:30.855335 2026] [security2:error] [pid 1321:tid 1512] [client 93.123.109.228:47466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/API/.env"] [unique_id "apK-JmjCPtor9NZ-byTmfwAABlQ"]
[Sat Aug 29 05:10:30.863802 2026] [security2:error] [pid 1321:tid 1490] [client 20.48.251.3:46615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/v2.php"] [unique_id "apK-JmjCPtor9NZ-byTmgAAABj4"]
[Sat Aug 29 05:10:30.868866 2026] [security2:error] [pid 1321:tid 1598] [client 20.220.204.93:63566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/f2.php"] [unique_id "apK-JmjCPtor9NZ-byTmgQAABqk"]
[Sat Aug 29 05:10:30.877551 2026] [http2:warn] [pid 1028675:tid 1028913] [client 57.141.14.3:24616] h2_stream(1028675-217-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:10:30.886474 2026] [security2:error] [pid 1041789:tid 1042054] [client 68.155.159.216:23530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/admin.php"] [unique_id "apK-Jov3RhPI65jTFG4VCQAAA5k"]
[Sat Aug 29 05:10:30.908332 2026] [access_compat:error] [pid 11274:tid 11530] [client 67.20.76.220:24498] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:10:30.915833 2026] [security2:error] [pid 1321:tid 1563] [client 20.104.104.62:47613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/tntmar.php"] [unique_id "apK-JmjCPtor9NZ-byTmiQAABoY"]
[Sat Aug 29 05:10:30.916460 2026] [security2:error] [pid 1041789:tid 1041915] [remote 93.123.109.228:33546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldstone.com"] [uri "/test.php"] [unique_id "apK-Jov3RhPI65jTFG4VEwADd3E"]
[Sat Aug 29 05:10:30.919876 2026] [security2:error] [pid 11274:tid 11541] [client 93.123.109.228:47266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/.wp-config.php.swp"] [unique_id "apK-JmbX5DA3XO6e_qQgugAAAWo"]
[Sat Aug 29 05:10:30.923086 2026] [security2:error] [pid 1321:tid 1577] [client 68.155.159.216:18311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-content/x.php"] [unique_id "apK-JmjCPtor9NZ-byTmiwAABpQ"]
[Sat Aug 29 05:10:30.923706 2026] [access_compat:error] [pid 11274:tid 11538] [client 67.20.76.220:24506] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:10:30.929817 2026] [security2:error] [pid 11274:tid 11539] [client 20.48.160.90:63455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/zoo1.php"] [unique_id "apK-JmbX5DA3XO6e_qQgvAAAAWg"]
[Sat Aug 29 05:10:30.954066 2026] [security2:error] [pid 1321:tid 1541] [client 68.155.159.216:56560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/chosen.php"] [unique_id "apK-JmjCPtor9NZ-byTmkwAABnE"]
[Sat Aug 29 05:10:30.960808 2026] [security2:error] [pid 11274:tid 11533] [client 93.123.109.228:47252] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/APP/.env"] [unique_id "apK-JmbX5DA3XO6e_qQgvwAAAWI"]
[Sat Aug 29 05:10:30.967525 2026] [security2:error] [pid 1321:tid 1608] [client 40.83.93.50:8272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/essexec.php"] [unique_id "apK-JmjCPtor9NZ-byTmlwAABrM"]
[Sat Aug 29 05:10:30.972420 2026] [security2:error] [pid 1321:tid 1489] [client 93.123.109.228:47786] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/BACK/.env"] [unique_id "apK-JmjCPtor9NZ-byTmmAAABj0"]
[Sat Aug 29 05:10:30.973443 2026] [security2:error] [pid 1041789:tid 1041944] [client 93.123.109.228:47580] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/Api/.env"] [unique_id "apK-Jov3RhPI65jTFG4VHwAAAys"]
[Sat Aug 29 05:10:30.979047 2026] [security2:error] [pid 1041789:tid 1041991] [client 93.123.109.228:47394] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/BACKEND/.env"] [unique_id "apK-Jov3RhPI65jTFG4VIQAAA1o"]
[Sat Aug 29 05:10:30.981195 2026] [security2:error] [pid 1321:tid 1566] [client 20.104.104.62:35740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/mega.php"] [unique_id "apK-JmjCPtor9NZ-byTmmwAABok"]
[Sat Aug 29 05:10:30.982201 2026] [security2:error] [pid 1321:tid 1491] [client 93.123.109.228:47646] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/BE/.env"] [unique_id "apK-JmjCPtor9NZ-byTmmgAABj8"]
[Sat Aug 29 05:10:30.992074 2026] [security2:error] [pid 1041789:tid 1041954] [client 93.123.109.228:47356] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/ADMIN/.env"] [unique_id "apK-Jov3RhPI65jTFG4VIgAAAzU"]
[Sat Aug 29 05:10:30.996965 2026] [security2:error] [pid 1321:tid 1496] [client 20.48.251.3:43853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/cli_bootstrap.php"] [unique_id "apK-JmjCPtor9NZ-byTmnQAABkQ"]
[Sat Aug 29 05:10:31.002033 2026] [security2:error] [pid 1321:tid 1548] [client 52.138.0.157:39049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.sitestage.biz"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK-J2jCPtor9NZ-byTmnwAABnc"]
[Sat Aug 29 05:10:31.007381 2026] [security2:error] [pid 1041789:tid 1041978] [client 20.104.104.62:16451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.jamwestcon.com"] [uri "/goods.php"] [unique_id "apK-J4v3RhPI65jTFG4VJgAAA00"]
[Sat Aug 29 05:10:31.007412 2026] [security2:error] [pid 1321:tid 1530] [client 93.123.109.228:47466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/Backend/.env"] [unique_id "apK-J2jCPtor9NZ-byTmoQAABmY"]
[Sat Aug 29 05:10:31.010238 2026] [security2:error] [pid 1041789:tid 1041982] [client 34.169.171.101:11276] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-J4v3RhPI65jTFG4VJQAAA1E"]
[Sat Aug 29 05:10:31.013426 2026] [security2:error] [pid 1041789:tid 1042055] [client 34.169.171.101:11260] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-J4v3RhPI65jTFG4VJwAAA5o"]
[Sat Aug 29 05:10:31.014826 2026] [security2:error] [pid 1321:tid 1573] [client 34.169.171.101:11304] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-J2jCPtor9NZ-byTmqAAABpA"]
[Sat Aug 29 05:10:31.016957 2026] [security2:error] [pid 1321:tid 1537] [client 20.63.219.114:1962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/fox.php"] [unique_id "apK-J2jCPtor9NZ-byTmqQAABm0"]
[Sat Aug 29 05:10:31.016981 2026] [security2:error] [pid 11274:tid 11544] [client 93.123.109.228:47408] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/Be/.env"] [unique_id "apK-J2bX5DA3XO6e_qQgwgAAAWw"]
[Sat Aug 29 05:10:31.022272 2026] [security2:error] [pid 1321:tid 1611] [client 93.123.109.228:47294] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/API/.env"] [unique_id "apK-J2jCPtor9NZ-byTmqwAABrY"]
[Sat Aug 29 05:10:31.023030 2026] [security2:error] [pid 1321:tid 1594] [client 20.52.41.200:2770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-content/themes/admin.php"] [unique_id "apK-J2jCPtor9NZ-byTmrAAABqU"]
[Sat Aug 29 05:10:31.028755 2026] [security2:error] [pid 11274:tid 11547] [client 4.205.62.107:63921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/xve22.php"] [unique_id "apK-J2bX5DA3XO6e_qQgxwAAAW8"]
[Sat Aug 29 05:10:31.043159 2026] [security2:error] [pid 11274:tid 11540] [client 52.139.37.240:12896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/file61.php"] [unique_id "apK-J2bX5DA3XO6e_qQgyAAAAWk"]
[Sat Aug 29 05:10:31.047952 2026] [security2:error] [pid 1041789:tid 1041995] [client 34.169.171.101:11276] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-J4v3RhPI65jTFG4VNAAAA14"], referer: https://forensicengineernj.com/appsettings.Development.json
[Sat Aug 29 05:10:31.053424 2026] [security2:error] [pid 11274:tid 11564] [client 20.104.49.130:60741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/dex.php"] [unique_id "apK-J2bX5DA3XO6e_qQgygAAAYA"]
[Sat Aug 29 05:10:31.055564 2026] [security2:error] [pid 1041789:tid 1041983] [client 68.155.159.216:56788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/simple.php"] [unique_id "apK-J4v3RhPI65jTFG4VOAAAA1I"]
[Sat Aug 29 05:10:31.070697 2026] [security2:error] [pid 1041789:tid 1041945] [client 20.52.41.200:4617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.strangeworxproductions.com"] [uri "/wp-admin.php"] [unique_id "apK-J4v3RhPI65jTFG4VOgAAAyw"]
[Sat Aug 29 05:10:31.075830 2026] [security2:error] [pid 1041789:tid 1041938] [client 34.169.171.101:11286] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-J4v3RhPI65jTFG4VPAAAAyU"], referer: https://forensicengineernj.com/firebase-service-account.json
[Sat Aug 29 05:10:31.076529 2026] [security2:error] [pid 1321:tid 1575] [client 34.169.171.101:11328] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-J2jCPtor9NZ-byTmuQAABpI"], referer: https://forensicengineernj.com/client_secret.json
[Sat Aug 29 05:10:31.081647 2026] [security2:error] [pid 11274:tid 11565] [client 20.48.160.90:64561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/radio.php"] [unique_id "apK-J2bX5DA3XO6e_qQgzQAAAYE"]
[Sat Aug 29 05:10:31.087125 2026] [security2:error] [pid 11274:tid 11561] [client 20.104.49.130:63503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pvillusions.com"] [uri "/m.php"] [unique_id "apK-J2bX5DA3XO6e_qQgzgAAAX0"]
[Sat Aug 29 05:10:31.088864 2026] [security2:error] [pid 1321:tid 1519] [client 74.248.24.12:28781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/a1.php"] [unique_id "apK-J2jCPtor9NZ-byTmvAAABls"]
[Sat Aug 29 05:10:31.114962 2026] [security2:error] [pid 11274:tid 11480] [client 103.185.242.143:59636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-J2bX5DA3XO6e_qQg0gAAAS0"]
[Sat Aug 29 05:10:31.115128 2026] [security2:error] [pid 11274:tid 11480] [client 103.185.242.143:59636] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-J2bX5DA3XO6e_qQg0gAAAS0"]
[Sat Aug 29 05:10:31.123724 2026] [security2:error] [pid 1321:tid 1587] [client 20.104.104.62:48053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/ww3.php"] [unique_id "apK-J2jCPtor9NZ-byTmvwAABp4"]
[Sat Aug 29 05:10:31.130109 2026] [security2:error] [pid 1041789:tid 1041956] [client 20.48.251.3:44004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/wander.php"] [unique_id "apK-J4v3RhPI65jTFG4VRgAAAzc"]
[Sat Aug 29 05:10:31.134042 2026] [security2:error] [pid 1321:tid 1505] [client 40.83.93.50:11458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/xmlrpc.php0"] [unique_id "apK-J2jCPtor9NZ-byTmwwAABk0"]
[Sat Aug 29 05:10:31.146853 2026] [security2:error] [pid 1041789:tid 1041988] [client 158.158.54.35:17754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/new.php"] [unique_id "apK-J4v3RhPI65jTFG4VSwAAA1c"]
[Sat Aug 29 05:10:31.148379 2026] [security2:error] [pid 11274:tid 11446] [client 20.104.49.130:47978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/bdroot.php"] [unique_id "apK-J2bX5DA3XO6e_qQg1QAAAQw"]
[Sat Aug 29 05:10:31.157783 2026] [security2:error] [pid 1041789:tid 1042043] [client 93.123.109.228:47356] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/APP/.env"] [unique_id "apK-J4v3RhPI65jTFG4VTAAAA44"]
[Sat Aug 29 05:10:31.158630 2026] [security2:error] [pid 11274:tid 11455] [client 158.23.147.79:14299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-content/radio.php"] [unique_id "apK-J2bX5DA3XO6e_qQg1gAAARU"]
[Sat Aug 29 05:10:31.168421 2026] [security2:error] [pid 1321:tid 1584] [client 93.123.109.228:47366] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/Api/.env"] [unique_id "apK-J2jCPtor9NZ-byTmxwAABps"]
[Sat Aug 29 05:10:31.171530 2026] [security2:error] [pid 1041789:tid 1042026] [client 158.23.147.79:60181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK-J4v3RhPI65jTFG4VTQAAA30"]
[Sat Aug 29 05:10:31.181151 2026] [security2:error] [pid 1041789:tid 1041977] [client 93.123.109.228:47672] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/BACK/.env"] [unique_id "apK-J4v3RhPI65jTFG4VTwAAA0w"]
[Sat Aug 29 05:10:31.193782 2026] [security2:error] [pid 1321:tid 1553] [client 20.220.204.93:63522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/grsiuk.php"] [unique_id "apK-J2jCPtor9NZ-byTmzAAABnw"]
[Sat Aug 29 05:10:31.200249 2026] [security2:error] [pid 11274:tid 11453] [client 68.155.159.216:63773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/mah.php"] [unique_id "apK-J2bX5DA3XO6e_qQg2wAAARM"]
[Sat Aug 29 05:10:31.202489 2026] [security2:error] [pid 11274:tid 11450] [client 52.138.0.157:58092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.sitestage.biz"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "apK-J2bX5DA3XO6e_qQg3AAAARA"]
[Sat Aug 29 05:10:31.208331 2026] [security2:error] [pid 1321:tid 1525] [client 20.104.104.62:16724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.jamwestcon.com"] [uri "/bolt.php"] [unique_id "apK-J2jCPtor9NZ-byTmzQAABmE"]
[Sat Aug 29 05:10:31.219453 2026] [security2:error] [pid 1321:tid 1590] [client 20.104.104.62:20624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/dd.php"] [unique_id "apK-J2jCPtor9NZ-byTmzgAABqE"]
[Sat Aug 29 05:10:31.220369 2026] [security2:error] [pid 1321:tid 1567] [client 20.48.160.90:64586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/one.php"] [unique_id "apK-J2jCPtor9NZ-byTmzwAABoo"]
[Sat Aug 29 05:10:31.238195 2026] [security2:error] [pid 11274:tid 11463] [client 52.139.37.240:12495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/mah.php"] [unique_id "apK-J2bX5DA3XO6e_qQg3wAAAR0"]
[Sat Aug 29 05:10:31.240669 2026] [security2:error] [pid 1321:tid 1549] [client 93.123.109.228:47334] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/BE/.env"] [unique_id "apK-J2jCPtor9NZ-byTm0AAABng"]
[Sat Aug 29 05:10:31.242633 2026] [security2:error] [pid 1321:tid 1615] [client 93.123.109.228:47294] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/BACKEND/.env"] [unique_id "apK-J2jCPtor9NZ-byTm0gAABro"]
[Sat Aug 29 05:10:31.242724 2026] [security2:error] [pid 1041789:tid 1042050] [client 93.123.109.228:47806] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/Be/.env"] [unique_id "apK-J4v3RhPI65jTFG4VVgAAA5U"]
[Sat Aug 29 05:10:31.243654 2026] [security2:error] [pid 1321:tid 1492] [client 93.123.109.228:47318] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/Backend/.env"] [unique_id "apK-J2jCPtor9NZ-byTm0wAABkA"]
[Sat Aug 29 05:10:31.262745 2026] [security2:error] [pid 1041789:tid 1041947] [client 20.48.251.3:9328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stewartreid.strangeworx.com"] [uri "/ah25.php"] [unique_id "apK-J4v3RhPI65jTFG4VWQAAAy4"]
[Sat Aug 29 05:10:31.263454 2026] [security2:error] [pid 1041789:tid 1041951] [client 20.104.104.62:35744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/sko.php"] [unique_id "apK-J4v3RhPI65jTFG4VWgAAAzI"]
[Sat Aug 29 05:10:31.267048 2026] [security2:error] [pid 1041789:tid 1041873] [remote 93.123.109.228:33772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldperformanceinc.com"] [uri "/test.php"] [unique_id "apK-J4v3RhPI65jTFG4VWwADRUc"]
[Sat Aug 29 05:10:31.312859 2026] [security2:error] [pid 11274:tid 11487] [client 150.109.46.88:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "djiboutifresh.com"] [uri "/"] [unique_id "apK-J2bX5DA3XO6e_qQg5gAAATQ"], referer: http://djiboutifresh.com
[Sat Aug 29 05:10:31.317211 2026] [security2:error] [pid 1321:tid 1418] [remote 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK-J2jCPtor9NZ-byTm2AAGfzw"]
[Sat Aug 29 05:10:31.317377 2026] [security2:error] [pid 1321:tid 1556] [client 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK-J2jCPtor9NZ-byTm2AAGfzw"]
[Sat Aug 29 05:10:31.334494 2026] [security2:error] [pid 1041789:tid 1041941] [client 20.104.18.15:45898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "healthinsurance.midayins.com"] [uri "/1dfcd2d08f.php"] [unique_id "apK-J4v3RhPI65jTFG4VagAAAyg"]
[Sat Aug 29 05:10:31.353212 2026] [security2:error] [pid 1041789:tid 1041960] [client 20.48.160.90:64566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/503.php"] [unique_id "apK-J4v3RhPI65jTFG4VbQAAAzs"]
[Sat Aug 29 05:10:31.354938 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.104.18.15:6944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/sign.php"] [unique_id "apK-J4v3RhPI65jTFG4VbgAAA3o"]
[Sat Aug 29 05:10:31.367842 2026] [security2:error] [pid 1321:tid 1509] [client 68.155.159.216:61259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/images/index.php"] [unique_id "apK-J2jCPtor9NZ-byTm3QAABlE"]
[Sat Aug 29 05:10:31.369244 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.104.18.15:15230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK-J4v3RhPI65jTFG4VcAAAA2Q"]
[Sat Aug 29 05:10:31.377280 2026] [security2:error] [pid 11274:tid 11484] [client 20.63.219.114:9172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/disagraeosc.php"] [unique_id "apK-J2bX5DA3XO6e_qQg6wAAATE"]
[Sat Aug 29 05:10:31.380611 2026] [security2:error] [pid 1041789:tid 1041938] [client 20.151.200.44:22234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/waf.php"] [unique_id "apK-J4v3RhPI65jTFG4VcwAAAyU"]
[Sat Aug 29 05:10:31.407153 2026] [security2:error] [pid 1041789:tid 1042029] [client 20.104.104.62:16448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.jamwestcon.com"] [uri "/file.php"] [unique_id "apK-J4v3RhPI65jTFG4VfAAAA4A"]
[Sat Aug 29 05:10:31.427034 2026] [security2:error] [pid 11274:tid 11479] [client 20.104.104.62:48012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/zoz.php"] [unique_id "apK-J2bX5DA3XO6e_qQg8QAAASw"]
[Sat Aug 29 05:10:31.429962 2026] [security2:error] [pid 1041789:tid 1042020] [client 93.123.109.228:47580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK-J4v3RhPI65jTFG4VgwAAA3c"]
[Sat Aug 29 05:10:31.437479 2026] [security2:error] [pid 1041789:tid 1041987] [client 68.155.159.216:14321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-content/x/index.php"] [unique_id "apK-J4v3RhPI65jTFG4VhAAAA1Y"]
[Sat Aug 29 05:10:31.445157 2026] [security2:error] [pid 11274:tid 11485] [client 40.83.93.50:8266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/hello.php"] [unique_id "apK-J2bX5DA3XO6e_qQg8wAAATI"]
[Sat Aug 29 05:10:31.450420 2026] [security2:error] [pid 11274:tid 11503] [client 20.220.204.93:63593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/wp-scr1pts.php"] [unique_id "apK-J2bX5DA3XO6e_qQg9AAAAUQ"]
[Sat Aug 29 05:10:31.452850 2026] [security2:error] [pid 11274:tid 11507] [client 68.155.159.216:33762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK-J2bX5DA3XO6e_qQg9QAAAUg"]
[Sat Aug 29 05:10:31.456688 2026] [security2:error] [pid 1041789:tid 1041939] [client 52.139.37.240:12428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/mini.php"] [unique_id "apK-J4v3RhPI65jTFG4ViQAAAyY"]
[Sat Aug 29 05:10:31.458077 2026] [security2:error] [pid 11274:tid 11504] [client 68.155.159.216:1891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-blog-header.php"] [unique_id "apK-J2bX5DA3XO6e_qQg9wAAAUU"]
[Sat Aug 29 05:10:31.461644 2026] [security2:error] [pid 1041789:tid 1042046] [client 93.123.109.228:47546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.group3-llc.com"] [uri "/.wp-config.php.swp"] [unique_id "apK-J4v3RhPI65jTFG4VjgAAA5E"]
[Sat Aug 29 05:10:31.467971 2026] [security2:error] [pid 1041789:tid 1042005] [client 68.155.159.216:64099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/login.php"] [unique_id "apK-J4v3RhPI65jTFG4VlAAAA2g"]
[Sat Aug 29 05:10:31.469978 2026] [security2:error] [pid 1041789:tid 1042005] [client 68.155.159.216:6134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/.well-knownold/index.php"] [unique_id "apK-J4v3RhPI65jTFG4VlwAAA2g"]
[Sat Aug 29 05:10:31.477198 2026] [security2:error] [pid 1321:tid 1577] [client 93.123.109.228:47562] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/ADMIN/.env"] [unique_id "apK-J2jCPtor9NZ-byTm9AAABpQ"]
[Sat Aug 29 05:10:31.483427 2026] [security2:error] [pid 1041789:tid 1041971] [client 20.52.41.200:2877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-admin/css/admin.php"] [unique_id "apK-J4v3RhPI65jTFG4VmgAAA0Y"]
[Sat Aug 29 05:10:31.491322 2026] [security2:error] [pid 1041789:tid 1041935] [client 20.48.160.90:63397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/504.php"] [unique_id "apK-J4v3RhPI65jTFG4VnQAAAyI"]
[Sat Aug 29 05:10:31.496460 2026] [security2:error] [pid 1321:tid 1583] [client 68.67.112.51:44660] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "goldenage-wtic.org"] [uri "/robots.txt"] [unique_id "apK-J2jCPtor9NZ-byTm9QAABpo"]
[Sat Aug 29 05:10:31.511447 2026] [security2:error] [pid 11274:tid 11514] [client 52.138.0.157:42685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.sitestage.biz"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "apK-J2bX5DA3XO6e_qQg_QAAAU8"]
[Sat Aug 29 05:10:31.512803 2026] [security2:error] [pid 1041789:tid 1042006] [client 93.123.109.228:47704] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/API/.env"] [unique_id "apK-J4v3RhPI65jTFG4VngAAA2k"]
[Sat Aug 29 05:10:31.564962 2026] [security2:error] [pid 11274:tid 11528] [client 20.104.104.62:23351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/mmm.php"] [unique_id "apK-J2bX5DA3XO6e_qQhAQAAAV0"]
[Sat Aug 29 05:10:31.573181 2026] [security2:error] [pid 1041789:tid 1041978] [client 68.155.159.216:9334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/log-mama/function.php"] [unique_id "apK-J4v3RhPI65jTFG4VqQAAA00"]
[Sat Aug 29 05:10:31.581890 2026] [security2:error] [pid 11274:tid 11541] [client 93.123.109.228:47304] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/admin-app/.env"] [unique_id "apK-J2bX5DA3XO6e_qQhAgAAAWo"]
[Sat Aug 29 05:10:31.584961 2026] [security2:error] [pid 1041789:tid 1042057] [client 20.220.204.93:60917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/num.php"] [unique_id "apK-J4v3RhPI65jTFG4VrQAAA5w"]
[Sat Aug 29 05:10:31.590116 2026] [security2:error] [pid 11274:tid 11505] [client 158.158.54.35:11597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/menu.php"] [unique_id "apK-J2bX5DA3XO6e_qQhBAAAAUY"]
[Sat Aug 29 05:10:31.605234 2026] [security2:error] [pid 11274:tid 11315] [remote 110.249.202.64:52650] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.bsnpubs.com"] [uri "/starday/stardaystory.html"] [unique_id "apK-J2bX5DA3XO6e_qQhBQABYQI"]
[Sat Aug 29 05:10:31.607743 2026] [security2:error] [pid 11274:tid 11525] [client 20.104.104.62:16706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.jamwestcon.com"] [uri "/404.php"] [unique_id "apK-J2bX5DA3XO6e_qQhBgAAAVo"]
[Sat Aug 29 05:10:31.631982 2026] [security2:error] [pid 11274:tid 11509] [client 74.248.24.12:4575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-J2bX5DA3XO6e_qQhCQAAAUo"]
[Sat Aug 29 05:10:31.641885 2026] [security2:error] [pid 11274:tid 11534] [client 20.48.160.90:64579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/admin.php"] [unique_id "apK-J2bX5DA3XO6e_qQhCgAAAWM"]
[Sat Aug 29 05:10:31.679281 2026] [security2:error] [pid 1041789:tid 1042020] [client 93.123.109.228:47486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK-J4v3RhPI65jTFG4VwAAAA3c"]
[Sat Aug 29 05:10:31.680285 2026] [security2:error] [pid 11274:tid 11533] [client 52.139.37.240:12323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/v.php"] [unique_id "apK-J2bX5DA3XO6e_qQhDAAAAWI"]
[Sat Aug 29 05:10:31.683410 2026] [security2:error] [pid 1321:tid 1548] [client 20.104.49.130:60783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/css.php"] [unique_id "apK-J2jCPtor9NZ-byTnDAAABnc"]
[Sat Aug 29 05:10:31.698161 2026] [security2:error] [pid 11274:tid 11517] [client 40.83.93.50:6594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/content.php"] [unique_id "apK-J2bX5DA3XO6e_qQhDQAAAVI"]
[Sat Aug 29 05:10:31.702416 2026] [security2:error] [pid 1041789:tid 1041987] [client 20.104.104.62:35749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/advanced.php"] [unique_id "apK-J4v3RhPI65jTFG4VxQAAA1Y"]
[Sat Aug 29 05:10:31.705243 2026] [security2:error] [pid 11274:tid 11553] [client 93.123.109.228:47788] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/APP/.env"] [unique_id "apK-J2bX5DA3XO6e_qQhDgAAAXU"]
[Sat Aug 29 05:10:31.707782 2026] [security2:error] [pid 11274:tid 11544] [client 93.123.109.228:47624] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/Api/.env"] [unique_id "apK-J2bX5DA3XO6e_qQhDwAAAWw"]
[Sat Aug 29 05:10:31.713697 2026] [security2:error] [pid 1041789:tid 1042046] [client 93.123.109.228:47392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/admin/phpinfo.php"] [unique_id "apK-J4v3RhPI65jTFG4VyAAAA5E"]
[Sat Aug 29 05:10:31.720647 2026] [security2:error] [pid 1041789:tid 1041949] [client 93.123.109.228:47704] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/BACK/.env"] [unique_id "apK-J4v3RhPI65jTFG4VywAAAzA"]
[Sat Aug 29 05:10:31.735533 2026] [security2:error] [pid 1041789:tid 1041960] [client 20.63.219.114:1990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/about.php525"] [unique_id "apK-J4v3RhPI65jTFG4V0QAAAzs"]
[Sat Aug 29 05:10:31.753820 2026] [security2:error] [pid 1041789:tid 1041975] [client 93.123.109.228:47394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/admin_phpinfo.php"] [unique_id "apK-J4v3RhPI65jTFG4V2AAAA0o"]
[Sat Aug 29 05:10:31.755157 2026] [security2:error] [pid 1321:tid 1606] [client 93.123.109.228:47590] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/BACKEND/.env"] [unique_id "apK-J2jCPtor9NZ-byTnFQAABrE"]
[Sat Aug 29 05:10:31.757370 2026] [security2:error] [pid 11274:tid 11556] [client 93.123.109.228:47304] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/administrator/.env"] [unique_id "apK-J2bX5DA3XO6e_qQhEQAAAXg"]
[Sat Aug 29 05:10:31.757465 2026] [security2:error] [pid 1041789:tid 1041905] [remote 67.205.0.102:51854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 102.0.205.67.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fellowsofmythgar.com"] [uri "/wp-login.php"] [unique_id "apK-J4v3RhPI65jTFG4V1wADdWc"]
[Sat Aug 29 05:10:31.767455 2026] [security2:error] [pid 1321:tid 1573] [client 4.205.62.107:58463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/wp-act.php"] [unique_id "apK-J2jCPtor9NZ-byTnFwAABpA"]
[Sat Aug 29 05:10:31.773495 2026] [security2:error] [pid 11274:tid 11563] [client 146.70.36.124:40146] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "foleykids.org"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "apK-J2bX5DA3XO6e_qQhFAAAAX8"]
[Sat Aug 29 05:10:31.776112 2026] [security2:error] [pid 11274:tid 11564] [client 20.48.160.90:63370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/ws85.php"] [unique_id "apK-J2bX5DA3XO6e_qQhFQAAAYA"]
[Sat Aug 29 05:10:31.783014 2026] [security2:error] [pid 11274:tid 11557] [client 93.123.109.228:47698] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/BE/.env"] [unique_id "apK-J2bX5DA3XO6e_qQhFgAAAXk"]
[Sat Aug 29 05:10:31.783765 2026] [security2:error] [pid 1041789:tid 1042006] [client 158.23.147.79:5848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/goat1.php"] [unique_id "apK-J4v3RhPI65jTFG4V3AAAA2k"]
[Sat Aug 29 05:10:31.789431 2026] [security2:error] [pid 1041789:tid 1042028] [client 20.220.204.93:65210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/a4.php"] [unique_id "apK-J4v3RhPI65jTFG4V3gAAA38"]
[Sat Aug 29 05:10:31.799725 2026] [security2:error] [pid 1321:tid 1533] [client 93.123.109.228:47518] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/admin-app/.env"] [unique_id "apK-J2jCPtor9NZ-byTnGwAABmk"]
[Sat Aug 29 05:10:31.799845 2026] [security2:error] [pid 11274:tid 11565] [client 93.123.109.228:47764] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/api-backend/.env"] [unique_id "apK-J2bX5DA3XO6e_qQhGAAAAYE"]
[Sat Aug 29 05:10:31.799844 2026] [security2:error] [pid 11274:tid 11562] [client 93.123.109.228:47408] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/api-node/.env"] [unique_id "apK-J2bX5DA3XO6e_qQhFwAAAX4"]
[Sat Aug 29 05:10:31.802472 2026] [security2:error] [pid 1041789:tid 1042000] [client 4.205.62.107:62750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/thui.php"] [unique_id "apK-J4v3RhPI65jTFG4V3wAAA2M"]
[Sat Aug 29 05:10:31.806569 2026] [security2:error] [pid 11274:tid 11540] [client 20.104.104.62:16466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.jamwestcon.com"] [uri "/wk/index.php"] [unique_id "apK-J2bX5DA3XO6e_qQhGQAAAWk"]
[Sat Aug 29 05:10:31.821764 2026] [security2:error] [pid 1041789:tid 1041991] [client 68.155.159.216:64462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK-J4v3RhPI65jTFG4V4AAAA1o"]
[Sat Aug 29 05:10:31.823450 2026] [security2:error] [pid 1321:tid 1591] [client 20.104.104.62:20857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/lf.php"] [unique_id "apK-J2jCPtor9NZ-byTnHgAABqI"]
[Sat Aug 29 05:10:31.825987 2026] [security2:error] [pid 1041789:tid 1041988] [client 93.123.109.228:47378] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/api/.env"] [unique_id "apK-J4v3RhPI65jTFG4V4QAAA1c"]
[Sat Aug 29 05:10:31.837661 2026] [security2:error] [pid 1041789:tid 1041978] [client 20.104.104.62:23309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/blox.php"] [unique_id "apK-J4v3RhPI65jTFG4V5wAAA00"]
[Sat Aug 29 05:10:31.843846 2026] [security2:error] [pid 11274:tid 11449] [client 93.123.109.228:47620] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/Backend/.env"] [unique_id "apK-J2bX5DA3XO6e_qQhGwAAAQ8"]
[Sat Aug 29 05:10:31.855833 2026] [security2:error] [pid 1321:tid 1575] [client 68.155.159.216:62732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/file17.php"] [unique_id "apK-J2jCPtor9NZ-byTnJQAABpI"]
[Sat Aug 29 05:10:31.860049 2026] [security2:error] [pid 1041789:tid 1041992] [client 78.142.18.40:53718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.18.142.78.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "printingbyjoe.com"] [uri "/wp-login.php"] [unique_id "apK-J4v3RhPI65jTFG4V8AAAA1s"], referer: https://www.google.com/search?q=wordpress
[Sat Aug 29 05:10:31.866984 2026] [security2:error] [pid 1041789:tid 1041976] [client 158.23.147.79:58918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/lv.php"] [unique_id "apK-J4v3RhPI65jTFG4V8gAAA0s"]
[Sat Aug 29 05:10:31.881756 2026] [security2:error] [pid 1321:tid 1459] [remote 93.123.109.228:33834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenokie.com"] [uri "/test.php"] [unique_id "apK-J2jCPtor9NZ-byTnJgAGX2Q"]
[Sat Aug 29 05:10:31.906783 2026] [security2:error] [pid 1041789:tid 1042047] [client 52.139.37.240:12417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK-J4v3RhPI65jTFG4V_gAAA5I"]
[Sat Aug 29 05:10:31.909708 2026] [security2:error] [pid 1041789:tid 1041845] [remote 93.123.109.228:33546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldstone.com"] [uri "/wp-config.php"] [unique_id "apK-J4v3RhPI65jTFG4WAAADhis"]
[Sat Aug 29 05:10:31.911007 2026] [security2:error] [pid 1041789:tid 1042020] [client 93.123.109.228:47506] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/Be/.env"] [unique_id "apK-J4v3RhPI65jTFG4V_QAAA3c"]
[Sat Aug 29 05:10:31.913645 2026] [security2:error] [pid 11274:tid 11448] [client 20.48.160.90:28431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/ffs.php"] [unique_id "apK-J2bX5DA3XO6e_qQhHgAAAQ4"]
[Sat Aug 29 05:10:31.928596 2026] [security2:error] [pid 11274:tid 11486] [client 158.23.147.79:5982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ridetimewinnipegusedcardealer.ca"] [uri "/first.php"] [unique_id "apK-J2bX5DA3XO6e_qQhIAAAATM"]
[Sat Aug 29 05:10:31.930686 2026] [security2:error] [pid 1041789:tid 1041964] [client 52.138.0.157:1215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.sitestage.biz"] [uri "/wp-links-opml.php"] [unique_id "apK-J4v3RhPI65jTFG4WBQAAAz8"]
[Sat Aug 29 05:10:31.939519 2026] [security2:error] [pid 1041789:tid 1041829] [remote 93.123.109.228:33546] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.greenfieldstone.com"] [uri "/wp-config.php.new"] [unique_id "apK-J4v3RhPI65jTFG4WBwADhhs"]
[Sat Aug 29 05:10:31.942895 2026] [security2:error] [pid 1041789:tid 1041987] [client 93.123.109.228:47470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/admin/phpinfo.php"] [unique_id "apK-J4v3RhPI65jTFG4WCQAAA1Y"]
[Sat Aug 29 05:10:31.943748 2026] [security2:error] [pid 1041789:tid 1041947] [client 20.52.41.200:2779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/adminfuns.php"] [unique_id "apK-J4v3RhPI65jTFG4WCgAAAy4"]
[Sat Aug 29 05:10:31.947810 2026] [security2:error] [pid 11274:tid 11548] [client 4.205.62.107:6908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/server-info.php"] [unique_id "apK-J2bX5DA3XO6e_qQhIQAAAXA"]
[Sat Aug 29 05:10:31.955482 2026] [access_compat:error] [pid 1321:tid 1504] [client 67.20.76.220:24512] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:10:31.962690 2026] [security2:error] [pid 1041789:tid 1042046] [client 93.123.109.228:47468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/api/info.php"] [unique_id "apK-J4v3RhPI65jTFG4WDAAAA5E"]
[Sat Aug 29 05:10:31.964236 2026] [security2:error] [pid 1041789:tid 1041939] [client 158.23.147.79:11419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/worksec.php"] [unique_id "apK-J4v3RhPI65jTFG4WDQAAAyY"]
[Sat Aug 29 05:10:31.964587 2026] [access_compat:error] [pid 11274:tid 11569] [client 67.20.76.220:24538] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:10:31.969934 2026] [security2:error] [pid 1041789:tid 1041977] [client 158.23.147.79:37950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/install.php"] [unique_id "apK-J4v3RhPI65jTFG4WDgAAA0w"]
[Sat Aug 29 05:10:31.977869 2026] [security2:error] [pid 11274:tid 11456] [client 20.104.104.62:23303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/kcs.php"] [unique_id "apK-J2bX5DA3XO6e_qQhJwAAARY"]
[Sat Aug 29 05:10:31.979245 2026] [security2:error] [pid 11274:tid 11450] [client 68.155.159.216:1888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/atomlib.php"] [unique_id "apK-J2bX5DA3XO6e_qQhKAAAARA"]
[Sat Aug 29 05:10:31.985033 2026] [security2:error] [pid 11274:tid 11466] [client 4.205.62.107:64264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/cloud.php"] [unique_id "apK-J2bX5DA3XO6e_qQhKwAAASA"]
[Sat Aug 29 05:10:31.995034 2026] [security2:error] [pid 1041789:tid 1041808] [remote 93.123.109.228:33546] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.greenfieldstone.com"] [uri "/wp-config.php.bak"] [unique_id "apK-J4v3RhPI65jTFG4WEgADhgY"]
[Sat Aug 29 05:10:32.002778 2026] [security2:error] [pid 11274:tid 11445] [client 40.83.93.50:11639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/fi2.php"] [unique_id "apK-KGbX5DA3XO6e_qQhLQAAAQs"]
[Sat Aug 29 05:10:32.016082 2026] [security2:error] [pid 1041789:tid 1041960] [client 93.123.109.228:47806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/admin_phpinfo.php"] [unique_id "apK-KIv3RhPI65jTFG4WFQAAAzs"]
[Sat Aug 29 05:10:32.019026 2026] [security2:error] [pid 1041789:tid 1041922] [remote 93.123.109.228:33546] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.greenfieldstone.com"] [uri "/wp-config.php.old"] [unique_id "apK-KIv3RhPI65jTFG4WFgADhng"]
[Sat Aug 29 05:10:32.019065 2026] [security2:error] [pid 1321:tid 1504] [client 93.123.109.228:47248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/administrator/.env"] [unique_id "apK-KGjCPtor9NZ-byTnOgAABkw"]
[Sat Aug 29 05:10:32.025681 2026] [security2:error] [pid 11274:tid 11465] [client 68.155.159.216:23365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-admin/admin.php"] [unique_id "apK-KGbX5DA3XO6e_qQhLgAAAR8"]
[Sat Aug 29 05:10:32.028364 2026] [security2:error] [pid 11274:tid 11515] [client 20.104.104.62:16502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.jamwestcon.com"] [uri "/wp-content/admin.php"] [unique_id "apK-KGbX5DA3XO6e_qQhLwAAAVA"]
[Sat Aug 29 05:10:32.036113 2026] [security2:error] [pid 1041789:tid 1042055] [client 158.158.54.35:11594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK-KIv3RhPI65jTFG4WGQAAA5o"]
[Sat Aug 29 05:10:32.048017 2026] [security2:error] [pid 1041789:tid 1041935] [client 68.155.159.216:18398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK-KIv3RhPI65jTFG4WGwAAAyI"]
[Sat Aug 29 05:10:32.057452 2026] [security2:error] [pid 1321:tid 1550] [client 93.123.109.228:47442] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/api-backend/.env"] [unique_id "apK-KGjCPtor9NZ-byTnQAAABnk"]
[Sat Aug 29 05:10:32.061235 2026] [security2:error] [pid 1321:tid 1550] [client 20.48.160.90:64584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/nano.php"] [unique_id "apK-KGjCPtor9NZ-byTnQgAABnk"]
[Sat Aug 29 05:10:32.067228 2026] [security2:error] [pid 1041789:tid 1042001] [client 68.155.159.216:38575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/goods.php"] [unique_id "apK-KIv3RhPI65jTFG4WHgAAA2Q"]
[Sat Aug 29 05:10:32.070668 2026] [security2:error] [pid 1041789:tid 1041943] [client 93.123.109.228:47606] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/api-node/.env"] [unique_id "apK-KIv3RhPI65jTFG4WHwAAAyo"]
[Sat Aug 29 05:10:32.076373 2026] [security2:error] [pid 11274:tid 11570] [client 20.220.204.93:65191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/tfm.php"] [unique_id "apK-KGbX5DA3XO6e_qQhMgAAAYY"]
[Sat Aug 29 05:10:32.100935 2026] [security2:error] [pid 1041789:tid 1041990] [client 93.123.109.228:47750] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/api/.env"] [unique_id "apK-KIv3RhPI65jTFG4WIwAAA1k"]
[Sat Aug 29 05:10:32.103021 2026] [security2:error] [pid 11274:tid 11454] [client 52.139.37.240:12889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "apK-KGbX5DA3XO6e_qQhNgAAARQ"]
[Sat Aug 29 05:10:32.113717 2026] [security2:error] [pid 11274:tid 11491] [client 20.104.104.62:23320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/wsz.php"] [unique_id "apK-KGbX5DA3XO6e_qQhOQAAATg"]
[Sat Aug 29 05:10:32.122745 2026] [security2:error] [pid 11274:tid 11526] [client 103.48.146.148:49408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 148.146.48.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK-KGbX5DA3XO6e_qQhOAAAAVs"]
[Sat Aug 29 05:10:32.122938 2026] [security2:error] [pid 11274:tid 11526] [client 103.48.146.148:49408] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK-KGbX5DA3XO6e_qQhOAAAAVs"]
[Sat Aug 29 05:10:32.130340 2026] [security2:error] [pid 1041789:tid 1041991] [client 93.123.109.228:47740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/api/phpinfo.php"] [unique_id "apK-KIv3RhPI65jTFG4WLgAAA1o"]
[Sat Aug 29 05:10:32.132210 2026] [security2:error] [pid 1041789:tid 1041988] [client 20.104.104.62:64709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/saya.php"] [unique_id "apK-KIv3RhPI65jTFG4WLwAAA1c"]
[Sat Aug 29 05:10:32.151772 2026] [security2:error] [pid 1041789:tid 1042054] [client 52.138.0.157:1163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.sitestage.biz"] [uri "/wp-signup.php"] [unique_id "apK-KIv3RhPI65jTFG4WMwAAA5k"]
[Sat Aug 29 05:10:32.160195 2026] [security2:error] [pid 1321:tid 1593] [client 68.155.159.216:56730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-admin/about.php"] [unique_id "apK-KGjCPtor9NZ-byTnTQAABqQ"]
[Sat Aug 29 05:10:32.161573 2026] [security2:error] [pid 11274:tid 11477] [client 20.63.219.114:2042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/spip.php"] [unique_id "apK-KGbX5DA3XO6e_qQhPwAAASs"]
[Sat Aug 29 05:10:32.162863 2026] [security2:error] [pid 1041789:tid 1041933] [client 4.205.62.107:61707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/06.php"] [unique_id "apK-KIv3RhPI65jTFG4WNQAAAyA"]
[Sat Aug 29 05:10:32.170448 2026] [security2:error] [pid 1041789:tid 1041951] [client 40.83.93.50:4041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/wxo.php"] [unique_id "apK-KIv3RhPI65jTFG4WNwAAAzI"]
[Sat Aug 29 05:10:32.180937 2026] [security2:error] [pid 1041789:tid 1041942] [client 74.248.24.12:15999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/alfa-rex.php7"] [unique_id "apK-KIv3RhPI65jTFG4WOAAAAyk"]
[Sat Aug 29 05:10:32.205348 2026] [security2:error] [pid 1041789:tid 1041957] [client 20.48.160.90:63364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/ano.php"] [unique_id "apK-KIv3RhPI65jTFG4WOwAAAzg"]
[Sat Aug 29 05:10:32.221302 2026] [security2:error] [pid 1041789:tid 1041931] [client 20.220.204.93:60830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/Geforce.php"] [unique_id "apK-KIv3RhPI65jTFG4WPQAAAx4"]
[Sat Aug 29 05:10:32.224948 2026] [security2:error] [pid 1321:tid 1507] [client 34.169.171.101:11298] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-J2jCPtor9NZ-byTmogAABk8"]
[Sat Aug 29 05:10:32.227698 2026] [security2:error] [pid 1321:tid 1545] [client 20.104.104.62:16460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.jamwestcon.com"] [uri "/wp-content/themes/admin.php"] [unique_id "apK-KGjCPtor9NZ-byTnVQAABnU"]
[Sat Aug 29 05:10:32.237007 2026] [security2:error] [pid 1321:tid 1500] [client 146.70.36.124:40154] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "foleykids.org"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "apK-KGjCPtor9NZ-byTnWQAABkg"]
[Sat Aug 29 05:10:32.246619 2026] [security2:error] [pid 1041789:tid 1041927] [remote 93.123.109.228:33772] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.greenfieldperformanceinc.com"] [uri "/wp-config.php.bak"] [unique_id "apK-KIv3RhPI65jTFG4WQQADN30"]
[Sat Aug 29 05:10:32.246993 2026] [security2:error] [pid 1041789:tid 1041928] [remote 93.123.109.228:33772] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.greenfieldperformanceinc.com"] [uri "/wp-config.php.new"] [unique_id "apK-KIv3RhPI65jTFG4WQwADN34"]
[Sat Aug 29 05:10:32.247406 2026] [security2:error] [pid 1041789:tid 1041925] [remote 93.123.109.228:33772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenfieldperformanceinc.com"] [uri "/wp-config.php"] [unique_id "apK-KIv3RhPI65jTFG4WQgADN3s"]
[Sat Aug 29 05:10:32.247716 2026] [security2:error] [pid 1041789:tid 1041898] [remote 93.123.109.228:33772] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.greenfieldperformanceinc.com"] [uri "/wp-config.php.old"] [unique_id "apK-KIv3RhPI65jTFG4WRAADN2A"]
[Sat Aug 29 05:10:32.257747 2026] [security2:error] [pid 11274:tid 11493] [client 20.104.104.62:35715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/msy.php"] [unique_id "apK-KGbX5DA3XO6e_qQhRAAAATo"]
[Sat Aug 29 05:10:32.260624 2026] [security2:error] [pid 1041789:tid 1041947] [client 93.123.109.228:47378] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/apis/.env"] [unique_id "apK-KIv3RhPI65jTFG4WRwAAAy4"]
[Sat Aug 29 05:10:32.263542 2026] [security2:error] [pid 1041789:tid 1041947] [client 158.23.147.79:14217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-admin/dropdown.php"] [unique_id "apK-KIv3RhPI65jTFG4WSAAAAy4"]
[Sat Aug 29 05:10:32.265724 2026] [security2:error] [pid 1321:tid 1556] [client 34.169.171.101:11298] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-KGjCPtor9NZ-byTnYAAABn8"], referer: https://forensicengineernj.com/keyfile.json
[Sat Aug 29 05:10:32.271149 2026] [security2:error] [pid 1041789:tid 1042015] [client 93.123.109.228:47568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/api/info.php"] [unique_id "apK-KIv3RhPI65jTFG4WSQAAA3I"]
[Sat Aug 29 05:10:32.279135 2026] [security2:error] [pid 1041789:tid 1042042] [client 158.23.147.79:64109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/goat.php"] [unique_id "apK-KIv3RhPI65jTFG4WSwAAA40"]
[Sat Aug 29 05:10:32.311242 2026] [security2:error] [pid 1041789:tid 1041960] [client 68.155.159.216:64402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-blog-header.php"] [unique_id "apK-KIv3RhPI65jTFG4WTgAAAzs"]
[Sat Aug 29 05:10:32.327376 2026] [security2:error] [pid 1041789:tid 1041939] [client 52.139.37.240:12532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-KIv3RhPI65jTFG4WUgAAAyY"]
[Sat Aug 29 05:10:32.347223 2026] [security2:error] [pid 11274:tid 11511] [client 20.48.160.90:64549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/mgrr.php"] [unique_id "apK-KGbX5DA3XO6e_qQhSQAAAUw"]
[Sat Aug 29 05:10:32.366947 2026] [security2:error] [pid 1041789:tid 1042035] [client 20.220.204.93:65212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/click.php"] [unique_id "apK-KIv3RhPI65jTFG4WWAAAA4Y"]
[Sat Aug 29 05:10:32.367259 2026] [security2:error] [pid 11274:tid 11528] [client 93.123.109.228:47764] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/app/.env"] [unique_id "apK-KGbX5DA3XO6e_qQhTAAAAV0"]
[Sat Aug 29 05:10:32.368998 2026] [security2:error] [pid 1041789:tid 1042028] [client 93.123.109.228:47672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/api/phpinfo.php"] [unique_id "apK-KIv3RhPI65jTFG4WWgAAA38"]
[Sat Aug 29 05:10:32.369000 2026] [security2:error] [pid 11274:tid 11513] [client 52.138.0.157:58099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.sitestage.biz"] [uri "/xmlrpc.php"] [unique_id "apK-KGbX5DA3XO6e_qQhSwAAAU4"]
[Sat Aug 29 05:10:32.398798 2026] [security2:error] [pid 1041789:tid 1041988] [client 20.104.104.62:23323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/siln.php"] [unique_id "apK-KIv3RhPI65jTFG4WXwAAA1c"]
[Sat Aug 29 05:10:32.407219 2026] [security2:error] [pid 1041789:tid 1042054] [client 20.151.200.44:22174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/bnnof6.php"] [unique_id "apK-KIv3RhPI65jTFG4WYAAAA5k"]
[Sat Aug 29 05:10:32.414716 2026] [security2:error] [pid 1041789:tid 1041987] [client 20.52.41.200:2831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/goods.php"] [unique_id "apK-KIv3RhPI65jTFG4WYQAAA1Y"]
[Sat Aug 29 05:10:32.425694 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.104.104.62:16465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.jamwestcon.com"] [uri "/.well-known/logs233/index.php"] [unique_id "apK-KIv3RhPI65jTFG4WYgAAA2Q"]
[Sat Aug 29 05:10:32.493764 2026] [security2:error] [pid 1321:tid 1581] [client 20.48.160.90:63469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/mac.php"] [unique_id "apK-KGjCPtor9NZ-byTndwAABpg"]
[Sat Aug 29 05:10:32.506617 2026] [security2:error] [pid 11274:tid 11509] [client 68.155.159.216:56535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK-KGbX5DA3XO6e_qQhUwAAAUo"]
[Sat Aug 29 05:10:32.514151 2026] [security2:error] [pid 1321:tid 1562] [client 93.123.109.228:47248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/apis/.env"] [unique_id "apK-KGjCPtor9NZ-byTnfAAABoU"]
[Sat Aug 29 05:10:32.516536 2026] [security2:error] [pid 1041789:tid 1041991] [client 20.63.219.114:17959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/backup.php"] [unique_id "apK-KIv3RhPI65jTFG4WbgAAA1o"]
[Sat Aug 29 05:10:32.544432 2026] [security2:error] [pid 11274:tid 11552] [client 68.155.159.216:30656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK-KGbX5DA3XO6e_qQhVgAAAXQ"]
[Sat Aug 29 05:10:32.544900 2026] [security2:error] [pid 1041789:tid 1042019] [client 146.70.36.124:40156] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "foleykids.org"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "apK-KIv3RhPI65jTFG4WcQAAA3Y"]
[Sat Aug 29 05:10:32.553888 2026] [security2:error] [pid 11274:tid 11538] [client 20.104.104.62:23317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/f-401.php"] [unique_id "apK-KGbX5DA3XO6e_qQhWAAAAWc"]
[Sat Aug 29 05:10:32.559324 2026] [security2:error] [pid 1041789:tid 1042007] [client 68.155.159.216:14270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK-KIv3RhPI65jTFG4WcwAAA2o"]
[Sat Aug 29 05:10:32.566841 2026] [security2:error] [pid 11274:tid 11517] [client 68.155.159.216:33648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-includes/index.php"] [unique_id "apK-KGbX5DA3XO6e_qQhWQAAAVI"]
[Sat Aug 29 05:10:32.569517 2026] [security2:error] [pid 1041789:tid 1042023] [client 52.138.0.157:1154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.sitestage.biz"] [uri "/yas.php"] [unique_id "apK-KIv3RhPI65jTFG4WdAAAA3o"]
[Sat Aug 29 05:10:32.569517 2026] [security2:error] [pid 1321:tid 1571] [client 68.155.159.216:1806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK-KGjCPtor9NZ-byTnhwAABo4"]
[Sat Aug 29 05:10:32.577323 2026] [security2:error] [pid 11274:tid 11553] [client 68.155.159.216:6039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK-KGbX5DA3XO6e_qQhWwAAAXU"]
[Sat Aug 29 05:10:32.579792 2026] [security2:error] [pid 11274:tid 11544] [client 20.104.104.62:20658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/do.php"] [unique_id "apK-KGbX5DA3XO6e_qQhXAAAAWw"]
[Sat Aug 29 05:10:32.602722 2026] [security2:error] [pid 11274:tid 11500] [client 20.220.204.93:61620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/ms.php"] [unique_id "apK-KGbX5DA3XO6e_qQhXQAAAUE"]
[Sat Aug 29 05:10:32.603864 2026] [security2:error] [pid 1041789:tid 1042057] [client 40.83.93.50:8257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/1p.php"] [unique_id "apK-KIv3RhPI65jTFG4WdgAAA5w"]
[Sat Aug 29 05:10:32.625351 2026] [security2:error] [pid 1041789:tid 1041944] [client 20.104.104.62:16746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.jamwestcon.com"] [uri "/as.php"] [unique_id "apK-KIv3RhPI65jTFG4WegAAAys"]
[Sat Aug 29 05:10:32.639850 2026] [security2:error] [pid 1041789:tid 1041942] [client 40.83.93.50:11519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/as.php"] [unique_id "apK-KIv3RhPI65jTFG4WewAAAyk"]
[Sat Aug 29 05:10:32.644483 2026] [security2:error] [pid 1041789:tid 1041964] [client 93.123.109.228:47606] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/app/.env"] [unique_id "apK-KIv3RhPI65jTFG4WfAAAAz8"]
[Sat Aug 29 05:10:32.644504 2026] [security2:error] [pid 1041789:tid 1041956] [client 158.158.54.35:8371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/lite.php"] [unique_id "apK-KIv3RhPI65jTFG4WfQAAAzc"]
[Sat Aug 29 05:10:32.663979 2026] [security2:error] [pid 1321:tid 1475] [remote 93.123.109.228:33834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greenokie.com"] [uri "/wp-config.php"] [unique_id "apK-KGjCPtor9NZ-byTnlAAGX3Q"]
[Sat Aug 29 05:10:32.671815 2026] [security2:error] [pid 11274:tid 11472] [client 93.123.109.228:47252] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/application/.env"] [unique_id "apK-KGbX5DA3XO6e_qQhYgAAASY"]
[Sat Aug 29 05:10:32.677018 2026] [security2:error] [pid 1321:tid 1548] [client 93.123.109.228:47786] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/apps/.env"] [unique_id "apK-KGjCPtor9NZ-byTnlgAABnc"]
[Sat Aug 29 05:10:32.678365 2026] [security2:error] [pid 1041789:tid 1042029] [client 20.48.160.90:64600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/simple.php"] [unique_id "apK-KIv3RhPI65jTFG4WgAAAA4A"]
[Sat Aug 29 05:10:32.688244 2026] [security2:error] [pid 1041789:tid 1041975] [client 20.104.104.62:35713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/hq.php"] [unique_id "apK-KIv3RhPI65jTFG4WgQAAA0o"]
[Sat Aug 29 05:10:32.690310 2026] [security2:error] [pid 1041789:tid 1042031] [client 68.155.159.216:52807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/bk/index.php"] [unique_id "apK-KIv3RhPI65jTFG4WgwAAA4I"]
[Sat Aug 29 05:10:32.717205 2026] [security2:error] [pid 1321:tid 1412] [remote 93.123.109.228:33834] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.greenokie.com"] [uri "/wp-config.php.old"] [unique_id "apK-KGjCPtor9NZ-byTnmwAGXzY"]
[Sat Aug 29 05:10:32.717660 2026] [security2:error] [pid 11274:tid 11533] [client 74.248.24.12:4550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "apK-KGbX5DA3XO6e_qQhZQAAAWI"]
[Sat Aug 29 05:10:32.720765 2026] [security2:error] [pid 1321:tid 1390] [remote 93.123.109.228:33834] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.greenokie.com"] [uri "/wp-config.php.bak"] [unique_id "apK-KGjCPtor9NZ-byTnnAAGXyA"]
[Sat Aug 29 05:10:32.725679 2026] [security2:error] [pid 1321:tid 1469] [remote 93.123.109.228:33834] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.greenokie.com"] [uri "/wp-config.php.new"] [unique_id "apK-KGjCPtor9NZ-byTnnQAGX24"]
[Sat Aug 29 05:10:32.729540 2026] [security2:error] [pid 1041789:tid 1041982] [client 93.123.109.228:47688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.group3-llc.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK-KIv3RhPI65jTFG4WhgAAA1E"]
[Sat Aug 29 05:10:32.741793 2026] [security2:error] [pid 1041789:tid 1042052] [client 20.220.204.93:63548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/zxekqlxb.php"] [unique_id "apK-KIv3RhPI65jTFG4WigAAA5c"]
[Sat Aug 29 05:10:32.818736 2026] [security2:error] [pid 1321:tid 1539] [client 20.104.104.62:48031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/mh.php"] [unique_id "apK-KGjCPtor9NZ-byTnqAAABm8"]
[Sat Aug 29 05:10:32.820270 2026] [security2:error] [pid 1041789:tid 1041988] [client 52.139.37.240:12535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/wp-index.php"] [unique_id "apK-KIv3RhPI65jTFG4WlQAAA1c"]
[Sat Aug 29 05:10:32.821431 2026] [security2:error] [pid 1321:tid 1574] [client 20.48.160.90:63441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/xty.php"] [unique_id "apK-KGjCPtor9NZ-byTnqQAABpE"]
[Sat Aug 29 05:10:32.824503 2026] [security2:error] [pid 1041789:tid 1041991] [client 20.104.104.62:47581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/funtion.php"] [unique_id "apK-KIv3RhPI65jTFG4WlwAAA1o"]
[Sat Aug 29 05:10:32.857481 2026] [security2:error] [pid 1321:tid 1533] [client 146.70.36.124:40162] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "foleykids.org"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "apK-KGjCPtor9NZ-byTnrQAABmk"]
[Sat Aug 29 05:10:32.868826 2026] [security2:error] [pid 1041789:tid 1042025] [client 20.104.49.130:63554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/wp-css.php"] [unique_id "apK-KIv3RhPI65jTFG4WnQAAA3w"]
[Sat Aug 29 05:10:32.871918 2026] [security2:error] [pid 1041789:tid 1041990] [client 20.63.219.114:17979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/haiterus.php"] [unique_id "apK-KIv3RhPI65jTFG4WngAAA1k"]
[Sat Aug 29 05:10:32.877752 2026] [security2:error] [pid 1041789:tid 1041943] [client 20.52.41.200:2780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/css.php"] [unique_id "apK-KIv3RhPI65jTFG4WnwAAAyo"]
[Sat Aug 29 05:10:32.881118 2026] [security2:error] [pid 1041789:tid 1041972] [client 20.220.204.93:65255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/init.php"] [unique_id "apK-KIv3RhPI65jTFG4WoAAAA0c"]
[Sat Aug 29 05:10:32.887267 2026] [security2:error] [pid 1041789:tid 1042007] [client 158.23.147.79:6007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK-KIv3RhPI65jTFG4WoQAAA2o"]
[Sat Aug 29 05:10:32.905872 2026] [security2:error] [pid 1321:tid 1611] [client 4.205.62.107:58411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/samll.php"] [unique_id "apK-KGjCPtor9NZ-byTnsAAABrY"]
[Sat Aug 29 05:10:32.928494 2026] [security2:error] [pid 11274:tid 11456] [client 68.155.159.216:63808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK-KGbX5DA3XO6e_qQhcQAAARY"]
[Sat Aug 29 05:10:32.941664 2026] [security2:error] [pid 1321:tid 1501] [client 4.205.62.107:62778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/file21.php"] [unique_id "apK-KGjCPtor9NZ-byTntAAABkk"]
[Sat Aug 29 05:10:32.944879 2026] [security2:error] [pid 1321:tid 1547] [client 93.123.109.228:47728] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/apps/.env"] [unique_id "apK-KGjCPtor9NZ-byTntgAABnY"]
[Sat Aug 29 05:10:32.946044 2026] [security2:error] [pid 11274:tid 11451] [client 93.123.109.228:47788] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/admin-app/.env"] [unique_id "apK-KGbX5DA3XO6e_qQhdAAAARE"]
[Sat Aug 29 05:10:32.946598 2026] [access_compat:error] [pid 1041789:tid 1042047] [client 67.20.76.220:24542] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:10:32.948431 2026] [security2:error] [pid 1321:tid 1520] [client 93.123.109.228:47366] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/application/.env"] [unique_id "apK-KGjCPtor9NZ-byTntQAABlw"]
[Sat Aug 29 05:10:32.955260 2026] [security2:error] [pid 1041789:tid 1042042] [client 20.104.104.62:37546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/f2r4.php"] [unique_id "apK-KIv3RhPI65jTFG4WqAAAA40"]
[Sat Aug 29 05:10:32.962629 2026] [security2:error] [pid 1041789:tid 1041942] [client 68.155.159.216:62844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/file5.php"] [unique_id "apK-KIv3RhPI65jTFG4WqQAAAyk"]
[Sat Aug 29 05:10:32.971100 2026] [security2:error] [pid 1041789:tid 1042046] [client 158.23.147.79:55251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-KIv3RhPI65jTFG4WqgAAA5E"]
[Sat Aug 29 05:10:32.975539 2026] [security2:error] [pid 1041789:tid 1041956] [client 20.104.104.62:16505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.jamwestcon.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK-KIv3RhPI65jTFG4WrAAAAzc"]
[Sat Aug 29 05:10:32.985061 2026] [security2:error] [pid 1041789:tid 1041938] [client 20.48.160.90:64578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/sallu.php"] [unique_id "apK-KIv3RhPI65jTFG4WsQAAAyU"]
[Sat Aug 29 05:10:32.997903 2026] [security2:error] [pid 1041789:tid 1041939] [client 20.48.160.90:28108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-KIv3RhPI65jTFG4WsgAAAyY"]
[Sat Aug 29 05:10:32.998473 2026] [security2:error] [pid 1321:tid 1563] [client 103.240.76.112:43514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK-KGjCPtor9NZ-byTnvAAABoY"]
[Sat Aug 29 05:10:32.998608 2026] [security2:error] [pid 1321:tid 1563] [client 103.240.76.112:43514] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK-KGjCPtor9NZ-byTnvAAABoY"]
[Sat Aug 29 05:10:33.018389 2026] [security2:error] [pid 11274:tid 11447] [client 52.139.37.240:12449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/ww2.php"] [unique_id "apK-KWbX5DA3XO6e_qQhegAAAQ0"]
[Sat Aug 29 05:10:33.089241 2026] [security2:error] [pid 1041789:tid 1042043] [client 158.23.147.79:63855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-content/x/index.php"] [unique_id "apK-KYv3RhPI65jTFG4WuQAAA44"]
[Sat Aug 29 05:10:33.090209 2026] [security2:error] [pid 1041789:tid 1041961] [client 20.104.104.62:35729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/sadis.php"] [unique_id "apK-KYv3RhPI65jTFG4WugAAAzw"]
[Sat Aug 29 05:10:33.095078 2026] [security2:error] [pid 11274:tid 11466] [client 158.158.54.35:16195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/term.php"] [unique_id "apK-KWbX5DA3XO6e_qQhfgAAASA"]
[Sat Aug 29 05:10:33.100381 2026] [security2:error] [pid 11274:tid 11458] [client 20.151.200.44:21934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/ah24.php"] [unique_id "apK-KWbX5DA3XO6e_qQhfwAAARg"]
[Sat Aug 29 05:10:33.119168 2026] [security2:error] [pid 1041789:tid 1041933] [client 93.123.109.228:47736] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/back-api/.env"] [unique_id "apK-KYv3RhPI65jTFG4WvQAAAyA"]
[Sat Aug 29 05:10:33.121113 2026] [security2:error] [pid 11274:tid 11454] [client 4.205.62.107:64956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/kerang.php"] [unique_id "apK-KWbX5DA3XO6e_qQhgwAAARQ"]
[Sat Aug 29 05:10:33.123815 2026] [security2:error] [pid 1321:tid 1525] [client 158.23.147.79:11329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/x.php"] [unique_id "apK-KWjCPtor9NZ-byTnwwAABmE"]
[Sat Aug 29 05:10:33.124058 2026] [security2:error] [pid 11274:tid 11491] [client 93.123.109.228:47408] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/back-end/.env"] [unique_id "apK-KWbX5DA3XO6e_qQhhAAAATg"]
[Sat Aug 29 05:10:33.129630 2026] [security2:error] [pid 11274:tid 11474] [client 4.205.62.107:6964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/gk.php"] [unique_id "apK-KWbX5DA3XO6e_qQhhgAAASg"]
[Sat Aug 29 05:10:33.132089 2026] [security2:error] [pid 11274:tid 11568] [client 20.48.160.90:62276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/codex.php"] [unique_id "apK-KWbX5DA3XO6e_qQhhwAAAYQ"]
[Sat Aug 29 05:10:33.139832 2026] [security2:error] [pid 1041789:tid 1041970] [client 68.155.159.216:23473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK-KYv3RhPI65jTFG4WwAAAA0U"]
[Sat Aug 29 05:10:33.140733 2026] [security2:error] [pid 1041789:tid 1042025] [client 20.48.160.90:28061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-KYv3RhPI65jTFG4WwQAAA3w"]
[Sat Aug 29 05:10:33.149272 2026] [security2:error] [pid 1041789:tid 1041943] [client 93.123.109.228:47378] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/backend-api/.env"] [unique_id "apK-KYv3RhPI65jTFG4WwgAAAyo"]
[Sat Aug 29 05:10:33.158462 2026] [security2:error] [pid 11274:tid 11483] [client 93.123.109.228:47764] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/back/.env"] [unique_id "apK-KWbX5DA3XO6e_qQhiQAAATA"]
[Sat Aug 29 05:10:33.166846 2026] [security2:error] [pid 1041789:tid 1042007] [client 93.123.109.228:47498] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK-KYv3RhPI65jTFG4WxAAAA2o"]
[Sat Aug 29 05:10:33.169390 2026] [security2:error] [pid 1041789:tid 1042007] [client 146.70.36.124:40176] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "foleykids.org"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "apK-KYv3RhPI65jTFG4WxQAAA2o"]
[Sat Aug 29 05:10:33.172444 2026] [security2:error] [pid 1041789:tid 1042020] [client 68.155.159.216:38561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK-KYv3RhPI65jTFG4WxgAAA3c"]
[Sat Aug 29 05:10:33.173432 2026] [security2:error] [pid 1041789:tid 1042030] [client 20.104.104.62:16723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.jamwestcon.com"] [uri "/abcd.php"] [unique_id "apK-KYv3RhPI65jTFG4WxwAAA4E"]
[Sat Aug 29 05:10:33.177885 2026] [security2:error] [pid 11274:tid 11469] [client 20.220.204.93:65165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/term.php"] [unique_id "apK-KWbX5DA3XO6e_qQhjgAAASM"]
[Sat Aug 29 05:10:33.185957 2026] [security2:error] [pid 11274:tid 11492] [client 93.123.109.228:47788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.group3-llc.com"] [uri "/admin/phpinfo.php"] [unique_id "apK-KWbX5DA3XO6e_qQhjwAAATk"]
[Sat Aug 29 05:10:33.202132 2026] [security2:error] [pid 11274:tid 11460] [client 93.123.109.228:47620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.group3-llc.com"] [uri "/admin_phpinfo.php"] [unique_id "apK-KWbX5DA3XO6e_qQhkQAAARo"]
[Sat Aug 29 05:10:33.209243 2026] [security2:error] [pid 1321:tid 1604] [client 93.123.109.228:47562] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/administrator/.env"] [unique_id "apK-KWjCPtor9NZ-byTnywAABq8"]
[Sat Aug 29 05:10:33.219043 2026] [security2:error] [pid 1321:tid 1550] [client 52.139.37.240:12868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/7logs.php"] [unique_id "apK-KWjCPtor9NZ-byTnzAAABnk"]
[Sat Aug 29 05:10:33.219856 2026] [security2:error] [pid 1041789:tid 1042054] [client 74.248.24.12:4319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/upload.php"] [unique_id "apK-KYv3RhPI65jTFG4WzgAAA5k"]
[Sat Aug 29 05:10:33.223103 2026] [security2:error] [pid 11274:tid 11490] [client 20.104.104.62:20733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/xixi.php"] [unique_id "apK-KWbX5DA3XO6e_qQhkwAAATc"]
[Sat Aug 29 05:10:33.227546 2026] [security2:error] [pid 11274:tid 11504] [client 20.104.104.62:23344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/xcre1.php"] [unique_id "apK-KWbX5DA3XO6e_qQhlAAAAUU"]
[Sat Aug 29 05:10:33.256435 2026] [security2:error] [pid 1041789:tid 1041940] [client 40.83.93.50:16076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/room.php"] [unique_id "apK-KYv3RhPI65jTFG4W0gAAAyc"]
[Sat Aug 29 05:10:33.269094 2026] [security2:error] [pid 1041789:tid 1041990] [client 20.63.219.114:9206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/go.php"] [unique_id "apK-KYv3RhPI65jTFG4W0wAAA1k"]
[Sat Aug 29 05:10:33.279053 2026] [security2:error] [pid 1041789:tid 1041931] [client 20.48.160.90:63473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/5656.php"] [unique_id "apK-KYv3RhPI65jTFG4W1QAAAx4"]
[Sat Aug 29 05:10:33.299000 2026] [security2:error] [pid 11274:tid 11523] [client 4.205.62.107:63962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/xin1.php"] [unique_id "apK-KWbX5DA3XO6e_qQhmwAAAVg"]
[Sat Aug 29 05:10:33.304231 2026] [security2:error] [pid 1041789:tid 1041976] [client 40.83.93.50:11630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/Njima.php"] [unique_id "apK-KYv3RhPI65jTFG4W2QAAA0s"]
[Sat Aug 29 05:10:33.310023 2026] [security2:error] [pid 11274:tid 11509] [client 68.155.159.216:56810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK-KWbX5DA3XO6e_qQhnAAAAUo"]
[Sat Aug 29 05:10:33.311890 2026] [security2:error] [pid 11274:tid 11570] [client 107.189.29.12:19358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.29.189.107.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/wp-login.php"] [unique_id "apK-KWbX5DA3XO6e_qQhlwAAAYY"]
[Sat Aug 29 05:10:33.321627 2026] [security2:error] [pid 11274:tid 11552] [client 93.123.109.228:47764] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/backup/.env"] [unique_id "apK-KWbX5DA3XO6e_qQhnQAAAXQ"]
[Sat Aug 29 05:10:33.337061 2026] [security2:error] [pid 1321:tid 1603] [client 93.123.109.228:47786] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/be/.env"] [unique_id "apK-KWjCPtor9NZ-byTn1gAABq4"]
[Sat Aug 29 05:10:33.339390 2026] [security2:error] [pid 11274:tid 11538] [client 20.48.160.90:28038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/ap.php"] [unique_id "apK-KWbX5DA3XO6e_qQhngAAAWc"]
[Sat Aug 29 05:10:33.346653 2026] [core:error] [pid 11274:tid 11479] [client 20.52.41.200:2629] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:33.346672 2026] [core:error] [pid 11274:tid 11479] [client 20.52.41.200:2629] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:33.348407 2026] [security2:error] [pid 11274:tid 11531] [client 20.220.204.93:63567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/aaa.php"] [unique_id "apK-KWbX5DA3XO6e_qQhoQAAAWA"]
[Sat Aug 29 05:10:33.371117 2026] [security2:error] [pid 11274:tid 11544] [client 158.23.147.79:14219] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/login.php"] [unique_id "apK-KWbX5DA3XO6e_qQhowAAAWw"]
[Sat Aug 29 05:10:33.371117 2026] [security2:error] [pid 11274:tid 11525] [client 20.104.104.62:16456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.jamwestcon.com"] [uri "/index/function.php"] [unique_id "apK-KWbX5DA3XO6e_qQhpAAAAVo"]
[Sat Aug 29 05:10:33.371149 2026] [security2:error] [pid 11274:tid 11543] [client 20.104.104.62:23307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/motu.php"] [unique_id "apK-KWbX5DA3XO6e_qQhpQAAAWs"]
[Sat Aug 29 05:10:33.393825 2026] [security2:error] [pid 11274:tid 11522] [client 20.104.49.130:34504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.wirearte.com"] [uri "/edit.php"] [unique_id "apK-KWbX5DA3XO6e_qQhpwAAAVc"]
[Sat Aug 29 05:10:33.396277 2026] [security2:error] [pid 11274:tid 11547] [client 93.123.109.228:47252] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/beta/.env"] [unique_id "apK-KWbX5DA3XO6e_qQhqAAAAW8"]
[Sat Aug 29 05:10:33.409196 2026] [security2:error] [pid 1321:tid 1561] [client 93.123.109.228:47442] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/back-api/.env"] [unique_id "apK-KWjCPtor9NZ-byTn2QAABoQ"]
[Sat Aug 29 05:10:33.415985 2026] [security2:error] [pid 1041789:tid 1042041] [client 68.155.159.216:64469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK-KYv3RhPI65jTFG4W4QAAA4w"]
[Sat Aug 29 05:10:33.420834 2026] [security2:error] [pid 11274:tid 11517] [client 52.139.37.240:12522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/ac.php"] [unique_id "apK-KWbX5DA3XO6e_qQhqgAAAVI"]
[Sat Aug 29 05:10:33.444134 2026] [security2:error] [pid 1321:tid 1503] [client 93.123.109.228:47248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/back-end/.env"] [unique_id "apK-KWjCPtor9NZ-byTn2gAABks"]
[Sat Aug 29 05:10:33.445890 2026] [security2:error] [pid 1041789:tid 1042018] [client 20.48.160.90:62334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/w3lls.php"] [unique_id "apK-KYv3RhPI65jTFG4W5QAAA3U"]
[Sat Aug 29 05:10:33.446589 2026] [security2:error] [pid 1321:tid 1610] [client 93.123.109.228:47518] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/back/.env"] [unique_id "apK-KWjCPtor9NZ-byTn3AAABrU"]
[Sat Aug 29 05:10:33.466599 2026] [security2:error] [pid 1041789:tid 1042028] [client 93.123.109.228:47774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/backend-api/.env"] [unique_id "apK-KYv3RhPI65jTFG4W5wAAA38"]
[Sat Aug 29 05:10:33.467484 2026] [security2:error] [pid 1041789:tid 1041933] [client 146.70.36.124:40190] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "foleykids.org"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "apK-KYv3RhPI65jTFG4W6AAAAyA"]
[Sat Aug 29 05:10:33.470053 2026] [security2:error] [pid 11274:tid 11567] [client 20.104.104.62:40227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-cli.php"] [unique_id "apK-KWbX5DA3XO6e_qQhrgAAAYM"]
[Sat Aug 29 05:10:33.482135 2026] [security2:error] [pid 1041789:tid 1041992] [client 20.220.204.93:63531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/xsox.php"] [unique_id "apK-KYv3RhPI65jTFG4W6gAAA1s"]
[Sat Aug 29 05:10:33.482876 2026] [security2:error] [pid 1041789:tid 1041970] [client 20.48.160.90:51925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/media.php"] [unique_id "apK-KYv3RhPI65jTFG4W6wAAA0U"]
[Sat Aug 29 05:10:33.486369 2026] [security2:error] [pid 1321:tid 1614] [client 93.123.109.228:47318] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK-KWjCPtor9NZ-byTn4AAABrk"]
[Sat Aug 29 05:10:33.504250 2026] [security2:error] [pid 1321:tid 1597] [client 93.123.109.228:47786] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/client/.env"] [unique_id "apK-KWjCPtor9NZ-byTn4QAABqg"]
[Sat Aug 29 05:10:33.506125 2026] [http2:warn] [pid 1018003:tid 1018269] [client 57.141.14.38:38056] h2_stream(1018003-201-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:10:33.534101 2026] [security2:error] [pid 1321:tid 1582] [client 93.123.109.228:47660] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/api/.env"] [unique_id "apK-KWjCPtor9NZ-byTn4gAABpk"]
[Sat Aug 29 05:10:33.537251 2026] [security2:error] [pid 11274:tid 11551] [client 158.158.54.35:16202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/config.php"] [unique_id "apK-KWbX5DA3XO6e_qQhswAAAXM"]
[Sat Aug 29 05:10:33.539377 2026] [security2:error] [pid 11274:tid 11546] [client 93.123.109.228:47342] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/cms/.env"] [unique_id "apK-KWbX5DA3XO6e_qQhtAAAAW4"]
[Sat Aug 29 05:10:33.547389 2026] [proxy_http:error] [pid 1028675:tid 1028818] (70007)The timeout specified has expired: [client 127.0.0.1:53988] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:10:33.547418 2026] [proxy:error] [pid 1028675:tid 1028818] [client 127.0.0.1:53988] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:10:33.565209 2026] [security2:error] [pid 11274:tid 11571] [client 20.104.104.62:16510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.jamwestcon.com"] [uri "/rip.php"] [unique_id "apK-KWbX5DA3XO6e_qQhtwAAAYc"]
[Sat Aug 29 05:10:33.577637 2026] [security2:error] [pid 1321:tid 1581] [client 93.123.109.228:47542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/api-backend/.env"] [unique_id "apK-KWjCPtor9NZ-byTn5wAABpg"]
[Sat Aug 29 05:10:33.580804 2026] [security2:error] [pid 11274:tid 11446] [client 20.48.160.90:63430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/fpwch.php"] [unique_id "apK-KWbX5DA3XO6e_qQhugAAAQw"]
[Sat Aug 29 05:10:33.589112 2026] [security2:error] [pid 1041789:tid 1041942] [client 20.104.104.62:48004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/wefile.php"] [unique_id "apK-KYv3RhPI65jTFG4W-AAAAyk"]
[Sat Aug 29 05:10:33.608741 2026] [security2:error] [pid 1041789:tid 1041938] [client 93.123.109.228:47704] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/api-node/.env"] [unique_id "apK-KYv3RhPI65jTFG4W-QAAAyU"]
[Sat Aug 29 05:10:33.614789 2026] [security2:error] [pid 11274:tid 11486] [client 68.155.159.216:56554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK-KWbX5DA3XO6e_qQhvAAAATM"]
[Sat Aug 29 05:10:33.627158 2026] [security2:error] [pid 11274:tid 11468] [client 20.48.160.90:28035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/adminfuns.php"] [unique_id "apK-KWbX5DA3XO6e_qQhvgAAASI"]
[Sat Aug 29 05:10:33.630063 2026] [security2:error] [pid 11274:tid 11470] [client 68.155.159.216:7146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/hehehehe.php"] [unique_id "apK-KWbX5DA3XO6e_qQhwAAAASQ"]
[Sat Aug 29 05:10:33.632919 2026] [security2:error] [pid 1041789:tid 1041948] [client 52.139.37.240:12873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/ctex1.php"] [unique_id "apK-KYv3RhPI65jTFG4W-wAAAy8"]
[Sat Aug 29 05:10:33.651392 2026] [security2:error] [pid 1321:tid 1598] [client 93.123.109.228:47646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/config.php"] [unique_id "apK-KWjCPtor9NZ-byTn7AAABqk"]
[Sat Aug 29 05:10:33.651495 2026] [security2:error] [pid 1041789:tid 1042046] [client 93.123.109.228:47356] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/backup/.env"] [unique_id "apK-KYv3RhPI65jTFG4W_QAAA5E"]
[Sat Aug 29 05:10:33.652532 2026] [security2:error] [pid 11274:tid 11569] [client 20.220.204.93:65159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/lkui.php"] [unique_id "apK-KWbX5DA3XO6e_qQhwwAAAYU"]
[Sat Aug 29 05:10:33.666849 2026] [security2:error] [pid 1321:tid 1521] [client 93.123.109.228:47294] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/beta/.env"] [unique_id "apK-KWjCPtor9NZ-byTn7QAABl0"]
[Sat Aug 29 05:10:33.666875 2026] [security2:error] [pid 1321:tid 1510] [client 93.123.109.228:47318] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/be/.env"] [unique_id "apK-KWjCPtor9NZ-byTn7gAABlI"]
[Sat Aug 29 05:10:33.668251 2026] [security2:error] [pid 1041789:tid 1042031] [client 68.155.159.216:14212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK-KYv3RhPI65jTFG4XAAAAA4I"]
[Sat Aug 29 05:10:33.674993 2026] [security2:error] [pid 1041789:tid 1042044] [client 20.63.219.114:9165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/gecko-new.php"] [unique_id "apK-KYv3RhPI65jTFG4XAQAAA48"]
[Sat Aug 29 05:10:33.675955 2026] [security2:error] [pid 11274:tid 11471] [client 68.155.159.216:1973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK-KWbX5DA3XO6e_qQhxgAAASU"]
[Sat Aug 29 05:10:33.687482 2026] [security2:error] [pid 11274:tid 11481] [client 68.155.159.216:18415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/log-mama/function.php"] [unique_id "apK-KWbX5DA3XO6e_qQhxwAAAS4"]
[Sat Aug 29 05:10:33.688628 2026] [security2:error] [pid 11274:tid 11466] [client 68.155.159.216:33415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/mah.php"] [unique_id "apK-KWbX5DA3XO6e_qQhyAAAASA"]
[Sat Aug 29 05:10:33.705709 2026] [security2:error] [pid 11274:tid 11562] [client 93.123.109.228:47252] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/config/.env"] [unique_id "apK-KWbX5DA3XO6e_qQhyQAAAX4"]
[Sat Aug 29 05:10:33.720284 2026] [security2:error] [pid 11274:tid 11453] [client 20.48.160.90:64529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/domvf.php"] [unique_id "apK-KWbX5DA3XO6e_qQhzAAAARM"]
[Sat Aug 29 05:10:33.748562 2026] [security2:error] [pid 11274:tid 11469] [client 20.104.104.62:37537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/EM.php"] [unique_id "apK-KWbX5DA3XO6e_qQhzwAAASM"]
[Sat Aug 29 05:10:33.749086 2026] [security2:error] [pid 11274:tid 11485] [client 20.151.200.44:21799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/ztv.php"] [unique_id "apK-KWbX5DA3XO6e_qQh0AAAATI"]
[Sat Aug 29 05:10:33.754722 2026] [security2:error] [pid 1041789:tid 1041947] [client 40.83.93.50:6606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/class-wp-cmd.php"] [unique_id "apK-KYv3RhPI65jTFG4XCAAAAy4"]
[Sat Aug 29 05:10:33.767097 2026] [security2:error] [pid 11274:tid 11460] [client 146.70.36.124:40192] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "foleykids.org"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "apK-KWbX5DA3XO6e_qQh1AAAARo"]
[Sat Aug 29 05:10:33.769052 2026] [security2:error] [pid 11274:tid 11450] [client 107.189.29.12:19488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.29.189.107.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "swumc.com"] [uri "/wp-login.php"] [unique_id "apK-KWbX5DA3XO6e_qQh1QAAARA"]
[Sat Aug 29 05:10:33.780967 2026] [security2:error] [pid 1041789:tid 1041982] [client 20.48.160.90:28101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/classwithtostring.php"] [unique_id "apK-KYv3RhPI65jTFG4XCQAAA1E"]
[Sat Aug 29 05:10:33.800414 2026] [security2:error] [pid 1041789:tid 1041950] [client 93.123.109.228:47356] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/client/.env"] [unique_id "apK-KYv3RhPI65jTFG4XDQAAAzE"]
[Sat Aug 29 05:10:33.803697 2026] [security2:error] [pid 11274:tid 11512] [client 68.155.159.216:52852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.philadelphialawworks.org"] [uri "/first.php"] [unique_id "apK-KWbX5DA3XO6e_qQh2AAAAU0"]
[Sat Aug 29 05:10:33.810081 2026] [core:error] [pid 11274:tid 11549] [client 20.52.41.200:2629] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:33.810099 2026] [core:error] [pid 11274:tid 11549] [client 20.52.41.200:2629] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:33.826756 2026] [security2:error] [pid 1321:tid 1529] [client 93.123.109.228:47248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/cms/.env"] [unique_id "apK-KWjCPtor9NZ-byTn-gAABmU"]
[Sat Aug 29 05:10:33.830109 2026] [security2:error] [pid 11274:tid 11493] [client 52.139.37.240:12538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/defaults.php"] [unique_id "apK-KWbX5DA3XO6e_qQh2wAAATo"]
[Sat Aug 29 05:10:33.834016 2026] [security2:error] [pid 11274:tid 11511] [client 20.104.104.62:16720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.jamwestcon.com"] [uri "/wp-content.php"] [unique_id "apK-KWbX5DA3XO6e_qQh3AAAAUw"]
[Sat Aug 29 05:10:33.844790 2026] [security2:error] [pid 1041789:tid 1041935] [client 93.123.109.228:47378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/config/aws.php"] [unique_id "apK-KYv3RhPI65jTFG4XFAAAAyI"]
[Sat Aug 29 05:10:33.845162 2026] [security2:error] [pid 11274:tid 11528] [client 93.123.109.228:47408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/config/config.inc.php"] [unique_id "apK-KWbX5DA3XO6e_qQh3QAAAV0"]
[Sat Aug 29 05:10:33.847629 2026] [security2:error] [pid 1321:tid 1544] [client 93.123.109.228:47466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/config/config.php"] [unique_id "apK-KWjCPtor9NZ-byTn_gAABnQ"]
[Sat Aug 29 05:10:33.852551 2026] [security2:error] [pid 1321:tid 1489] [client 20.48.160.90:64623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/biufile.php"] [unique_id "apK-KWjCPtor9NZ-byTn_wAABj0"]
[Sat Aug 29 05:10:33.886925 2026] [security2:error] [pid 1041789:tid 1042028] [client 158.23.147.79:55874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK-KYv3RhPI65jTFG4XGgAAA38"]
[Sat Aug 29 05:10:33.902043 2026] [security2:error] [pid 1041789:tid 1041992] [client 20.104.104.62:48022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/ca4.php"] [unique_id "apK-KYv3RhPI65jTFG4XGwAAA1s"]
[Sat Aug 29 05:10:33.909451 2026] [security2:error] [pid 11274:tid 11539] [client 93.123.109.228:47624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.group3-llc.com"] [uri "/api/info.php"] [unique_id "apK-KWbX5DA3XO6e_qQh4gAAAWg"]
[Sat Aug 29 05:10:33.911139 2026] [security2:error] [pid 11274:tid 11523] [client 20.220.204.93:61665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "apK-KWbX5DA3XO6e_qQh4wAAAVg"]
[Sat Aug 29 05:10:33.916257 2026] [security2:error] [pid 1041789:tid 1042000] [client 20.48.160.90:51949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK-KYv3RhPI65jTFG4XHQAAA2M"]
[Sat Aug 29 05:10:33.934325 2026] [security2:error] [pid 1321:tid 1523] [client 93.123.109.228:47334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/config.php"] [unique_id "apK-KWjCPtor9NZ-byToAwAABl8"]
[Sat Aug 29 05:10:33.941785 2026] [access_compat:error] [pid 1041789:tid 1042007] [client 67.20.76.220:12698] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:10:33.961587 2026] [security2:error] [pid 1321:tid 1537] [client 93.123.109.228:47420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/config/env.php"] [unique_id "apK-KWjCPtor9NZ-byToBQAABm0"]
[Sat Aug 29 05:10:33.978564 2026] [security2:error] [pid 1041789:tid 1041979] [client 158.158.54.35:8342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK-KYv3RhPI65jTFG4XJQAAA04"]
[Sat Aug 29 05:10:33.982590 2026] [security2:error] [pid 1321:tid 1539] [client 93.123.109.228:47294] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/config/.env"] [unique_id "apK-KWjCPtor9NZ-byToCAAABm8"]
[Sat Aug 29 05:10:33.995999 2026] [security2:error] [pid 1041789:tid 1041940] [client 158.23.147.79:5858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK-KYv3RhPI65jTFG4XJwAAAyc"]
[Sat Aug 29 05:10:34.000829 2026] [security2:error] [pid 11274:tid 11553] [client 20.48.160.90:64618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/blacks.php"] [unique_id "apK-KWbX5DA3XO6e_qQh5gAAAXU"]
[Sat Aug 29 05:10:34.005208 2026] [security2:error] [pid 11274:tid 11496] [client 93.123.109.228:47304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/config/module.config.php"] [unique_id "apK-KmbX5DA3XO6e_qQh5wAAAT0"]
[Sat Aug 29 05:10:34.016268 2026] [security2:error] [pid 1041789:tid 1041806] [remote 67.205.0.102:51854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 102.0.205.67.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fellowsofmythgar.com"] [uri "/wp-login.php"] [unique_id "apK-Kov3RhPI65jTFG4XLAADPgQ"], referer: https://fellowsofmythgar.com/wp-login.php
[Sat Aug 29 05:10:34.026851 2026] [security2:error] [pid 11274:tid 11552] [client 52.139.37.240:12919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/domains.php"] [unique_id "apK-KmbX5DA3XO6e_qQh6QAAAXQ"]
[Sat Aug 29 05:10:34.037664 2026] [security2:error] [pid 1321:tid 1530] [client 68.155.159.216:64425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK-KmjCPtor9NZ-byToDgAABmY"]
[Sat Aug 29 05:10:34.041025 2026] [security2:error] [pid 1041789:tid 1042000] [client 20.63.219.114:1973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/wp-admin.php"] [unique_id "apK-Kov3RhPI65jTFG4XLgAAA2M"]
[Sat Aug 29 05:10:34.042230 2026] [security2:error] [pid 1041789:tid 1041939] [client 4.205.62.107:51444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/pass4.php"] [unique_id "apK-Kov3RhPI65jTFG4XMAAAAyY"]
[Sat Aug 29 05:10:34.046854 2026] [security2:error] [pid 1041789:tid 1042055] [client 20.104.104.62:35772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/x0x.php"] [unique_id "apK-Kov3RhPI65jTFG4XMQAAA5o"]
[Sat Aug 29 05:10:34.052592 2026] [security2:error] [pid 1041789:tid 1041969] [client 20.48.160.90:28095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/5PJcpMFsD8B.php"] [unique_id "apK-Kov3RhPI65jTFG4XMgAAA0Q"]
[Sat Aug 29 05:10:34.060180 2026] [security2:error] [pid 1321:tid 1591] [client 20.220.204.93:65201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/motu.php"] [unique_id "apK-KmjCPtor9NZ-byToEAAABqI"]
[Sat Aug 29 05:10:34.063246 2026] [security2:error] [pid 1041789:tid 1041976] [client 93.123.109.228:47750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/config/aws.php"] [unique_id "apK-Kov3RhPI65jTFG4XMwAAA0s"]
[Sat Aug 29 05:10:34.069978 2026] [security2:error] [pid 11274:tid 11517] [client 68.155.159.216:62737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/file88.php"] [unique_id "apK-KmbX5DA3XO6e_qQh6wAAAVI"]
[Sat Aug 29 05:10:34.078488 2026] [security2:error] [pid 11274:tid 11547] [client 158.23.147.79:55909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/content.php"] [unique_id "apK-KmbX5DA3XO6e_qQh7AAAAW8"]
[Sat Aug 29 05:10:34.081717 2026] [security2:error] [pid 11274:tid 11518] [client 146.70.36.124:40200] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "foleykids.org"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "apK-KmbX5DA3XO6e_qQh7gAAAVM"]
[Sat Aug 29 05:10:34.081760 2026] [security2:error] [pid 11274:tid 11563] [client 4.205.62.107:60337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/mcebraed.php"] [unique_id "apK-KmbX5DA3XO6e_qQh7QAAAX8"]
[Sat Aug 29 05:10:34.093348 2026] [security2:error] [pid 1041789:tid 1041995] [client 40.83.93.50:12553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/configs.php"] [unique_id "apK-Kov3RhPI65jTFG4XNAAAA14"]
[Sat Aug 29 05:10:34.102973 2026] [security2:error] [pid 1041789:tid 1041954] [client 20.104.104.62:40215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/IP.php"] [unique_id "apK-Kov3RhPI65jTFG4XOAAAAzU"]
[Sat Aug 29 05:10:34.104278 2026] [security2:error] [pid 1041789:tid 1041982] [client 20.104.49.130:52530] ModSecurity: Access denied with connection close (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1032"] [id "900036"] [msg "Wordpress BOT exploit :: No UA/Referer"] [hostname "mail.bomchecker.net"] [uri "/wp-login.php"] [unique_id "apK-Kov3RhPI65jTFG4XNgAAA1E"]
[Sat Aug 29 05:10:34.111515 2026] [security2:error] [pid 1041789:tid 1041962] [client 93.123.109.228:47456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/config/config.inc.php"] [unique_id "apK-Kov3RhPI65jTFG4XOQAAAz0"]
[Sat Aug 29 05:10:34.114624 2026] [security2:error] [pid 11274:tid 11567] [client 93.123.109.228:47636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/config/nexmo.php"] [unique_id "apK-KmbX5DA3XO6e_qQh8gAAAYM"]
[Sat Aug 29 05:10:34.131201 2026] [security2:error] [pid 11274:tid 11540] [client 57.141.14.111:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/page/41/"] [unique_id "apK-KmbX5DA3XO6e_qQh9AAAAWk"]
[Sat Aug 29 05:10:34.132097 2026] [security2:error] [pid 1041789:tid 1041987] [client 20.48.160.90:63437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/beck.php"] [unique_id "apK-Kov3RhPI65jTFG4XOgAAA1Y"]
[Sat Aug 29 05:10:34.144193 2026] [security2:error] [pid 1321:tid 1612] [client 93.123.109.228:47248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/config/config.php"] [unique_id "apK-KmjCPtor9NZ-byToFQAABrc"]
[Sat Aug 29 05:10:34.180163 2026] [security2:error] [pid 11274:tid 11524] [client 68.155.159.216:30634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/.well-knownold/index.php"] [unique_id "apK-KmbX5DA3XO6e_qQh9QAAAVk"]
[Sat Aug 29 05:10:34.199716 2026] [security2:error] [pid 11274:tid 11499] [client 20.220.204.93:61655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/Ov-Simple1.php"] [unique_id "apK-KmbX5DA3XO6e_qQh9wAAAUA"]
[Sat Aug 29 05:10:34.201580 2026] [security2:error] [pid 11274:tid 11560] [client 158.23.147.79:58050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK-KmbX5DA3XO6e_qQh-AAAAXw"]
[Sat Aug 29 05:10:34.203951 2026] [security2:error] [pid 11274:tid 11486] [client 20.104.104.62:35733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wedding33-com-my.dreamcatcherhost.com"] [uri "/fesa.php"] [unique_id "apK-KmbX5DA3XO6e_qQh-QAAATM"]
[Sat Aug 29 05:10:34.236767 2026] [security2:error] [pid 11274:tid 11451] [client 158.23.147.79:11350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-content/x.php"] [unique_id "apK-KmbX5DA3XO6e_qQh-wAAARE"]
[Sat Aug 29 05:10:34.242831 2026] [security2:error] [pid 11274:tid 11571] [client 52.139.37.240:12454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/dropdown.php"] [unique_id "apK-KmbX5DA3XO6e_qQh_AAAAYc"]
[Sat Aug 29 05:10:34.248308 2026] [security2:error] [pid 11274:tid 11563] [client 40.83.93.50:16064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/disagreed.php"] [unique_id "apK-KmbX5DA3XO6e_qQh_QAAAX8"]
[Sat Aug 29 05:10:34.250312 2026] [security2:error] [pid 1041789:tid 1041972] [client 20.104.104.62:16747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.jamwestcon.com"] [uri "/ws.php"] [unique_id "apK-Kov3RhPI65jTFG4XQQAAA0c"]
[Sat Aug 29 05:10:34.257070 2026] [security2:error] [pid 11274:tid 11470] [client 4.205.62.107:64999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/rem.php"] [unique_id "apK-KmbX5DA3XO6e_qQh_gAAASQ"]
[Sat Aug 29 05:10:34.257088 2026] [security2:error] [pid 11274:tid 11514] [client 20.52.41.200:2777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/w.php"] [unique_id "apK-KmbX5DA3XO6e_qQh_wAAAU8"]
[Sat Aug 29 05:10:34.263377 2026] [security2:error] [pid 11274:tid 11445] [client 20.48.160.90:64523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/t3.php"] [unique_id "apK-KmbX5DA3XO6e_qQiAAAAAQs"]
[Sat Aug 29 05:10:34.264925 2026] [security2:error] [pid 11274:tid 11457] [client 20.48.160.90:51940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK-KmbX5DA3XO6e_qQiAQAAARc"]
[Sat Aug 29 05:10:34.270477 2026] [security2:error] [pid 11274:tid 11456] [client 4.205.62.107:6512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/god.php"] [unique_id "apK-KmbX5DA3XO6e_qQiAgAAARY"]
[Sat Aug 29 05:10:34.272964 2026] [security2:error] [pid 11274:tid 11555] [client 93.123.109.228:47764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/config/stripe.php"] [unique_id "apK-KmbX5DA3XO6e_qQiAwAAAXc"]
[Sat Aug 29 05:10:34.275720 2026] [security2:error] [pid 1041789:tid 1042025] [client 68.155.159.216:38706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK-Kov3RhPI65jTFG4XQgAAA3w"]
[Sat Aug 29 05:10:34.284625 2026] [security2:error] [pid 1321:tid 1536] [client 93.123.109.228:47366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/config/env.php"] [unique_id "apK-KmjCPtor9NZ-byToGwAABmw"]
[Sat Aug 29 05:10:34.287533 2026] [security2:error] [pid 1041789:tid 1042057] [client 20.104.49.130:58085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "coveryourauto.com"] [uri "/images.php"] [unique_id "apK-Kov3RhPI65jTFG4XQwAAA5w"]
[Sat Aug 29 05:10:34.323633 2026] [security2:error] [pid 1041789:tid 1041997] [client 93.123.109.228:47704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.group3-llc.com"] [uri "/api/phpinfo.php"] [unique_id "apK-Kov3RhPI65jTFG4XRQAAA2A"]
[Sat Aug 29 05:10:34.330826 2026] [security2:error] [pid 1041789:tid 1041933] [client 93.123.109.228:47774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/config/module.config.php"] [unique_id "apK-Kov3RhPI65jTFG4XRgAAAyA"]
[Sat Aug 29 05:10:34.334037 2026] [security2:error] [pid 1041789:tid 1041956] [client 20.220.204.93:63554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/wp-blogs.php"] [unique_id "apK-Kov3RhPI65jTFG4XRwAAAzc"]
[Sat Aug 29 05:10:34.343939 2026] [security2:error] [pid 11274:tid 11562] [client 20.104.49.130:45731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/yawa.php"] [unique_id "apK-KmbX5DA3XO6e_qQiBwAAAX4"]
[Sat Aug 29 05:10:34.365860 2026] [security2:error] [pid 1041789:tid 1042046] [client 158.158.54.35:23039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/.trash7206/index.php"] [unique_id "apK-Kov3RhPI65jTFG4XSgAAA5E"]
[Sat Aug 29 05:10:34.378048 2026] [security2:error] [pid 11274:tid 11534] [client 146.70.36.124:40204] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "foleykids.org"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "apK-KmbX5DA3XO6e_qQiCQAAAWM"]
[Sat Aug 29 05:10:34.396252 2026] [security2:error] [pid 1321:tid 1497] [client 74.248.24.12:20436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-content/file.php"] [unique_id "apK-KmjCPtor9NZ-byToIwAABkU"]
[Sat Aug 29 05:10:34.408925 2026] [security2:error] [pid 11274:tid 11462] [client 20.63.219.114:17960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/wp-configs.php"] [unique_id "apK-KmbX5DA3XO6e_qQiCgAAARw"]
[Sat Aug 29 05:10:34.410564 2026] [security2:error] [pid 11274:tid 11526] [client 20.48.160.90:64597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/wp.php"] [unique_id "apK-KmbX5DA3XO6e_qQiCwAAAVs"]
[Sat Aug 29 05:10:34.424471 2026] [security2:error] [pid 1041789:tid 1041961] [client 158.158.54.35:31147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-good.php"] [unique_id "apK-Kov3RhPI65jTFG4XTQAAAzw"]
[Sat Aug 29 05:10:34.426023 2026] [security2:error] [pid 1041789:tid 1041944] [client 68.155.159.216:56803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK-Kov3RhPI65jTFG4XTgAAAys"]
[Sat Aug 29 05:10:34.432853 2026] [security2:error] [pid 1041789:tid 1041963] [client 20.48.160.90:51954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/wsd.php"] [unique_id "apK-Kov3RhPI65jTFG4XTwAAAz4"]
[Sat Aug 29 05:10:34.433873 2026] [security2:error] [pid 1041789:tid 1041991] [client 4.205.62.107:63888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/sadd.php"] [unique_id "apK-Kov3RhPI65jTFG4XUAAAA1o"]
[Sat Aug 29 05:10:34.434388 2026] [security2:error] [pid 1321:tid 1498] [client 93.123.109.228:47318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/config/nexmo.php"] [unique_id "apK-KmjCPtor9NZ-byToJwAABkY"]
[Sat Aug 29 05:10:34.447642 2026] [security2:error] [pid 11274:tid 11453] [client 52.139.37.240:12310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/files/index.php"] [unique_id "apK-KmbX5DA3XO6e_qQiDgAAARM"]
[Sat Aug 29 05:10:34.447704 2026] [security2:error] [pid 11274:tid 11454] [client 20.104.104.62:16499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.jamwestcon.com"] [uri "/0x.php"] [unique_id "apK-KmbX5DA3XO6e_qQiDwAAARQ"]
[Sat Aug 29 05:10:34.452567 2026] [security2:error] [pid 1041789:tid 1042020] [client 93.123.109.228:47606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/config/stripe.php"] [unique_id "apK-Kov3RhPI65jTFG4XUgAAA3c"]
[Sat Aug 29 05:10:34.493212 2026] [security2:error] [pid 11274:tid 11501] [client 158.23.147.79:14218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/hehehehe.php"] [unique_id "apK-KmbX5DA3XO6e_qQiEQAAAUI"]
[Sat Aug 29 05:10:34.494527 2026] [security2:error] [pid 11274:tid 11568] [client 20.220.204.93:65201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/mini.php"] [unique_id "apK-KmbX5DA3XO6e_qQiEgAAAYQ"]
[Sat Aug 29 05:10:34.523657 2026] [security2:error] [pid 11274:tid 11460] [client 68.155.159.216:64487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK-KmbX5DA3XO6e_qQiEwAAARo"]
[Sat Aug 29 05:10:34.542117 2026] [security2:error] [pid 11274:tid 11490] [client 20.48.160.90:64630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/abcd.php"] [unique_id "apK-KmbX5DA3XO6e_qQiFAAAATc"]
[Sat Aug 29 05:10:34.579393 2026] [core:error] [pid 1321:tid 1532] [client 34.50.189.51:55830] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:34.579413 2026] [core:error] [pid 1321:tid 1532] [client 34.50.189.51:55830] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:34.584287 2026] [security2:error] [pid 11274:tid 11503] [client 34.50.189.51:55788] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "discocollective.kriveloff-associates.com"] [uri "/service-principal.json"] [unique_id "apK-KmbX5DA3XO6e_qQiGgAAAUQ"]
[Sat Aug 29 05:10:34.585110 2026] [core:error] [pid 1321:tid 1492] [client 34.50.189.51:55804] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:34.585128 2026] [core:error] [pid 1321:tid 1492] [client 34.50.189.51:55804] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:34.585247 2026] [security2:error] [pid 1321:tid 1492] [client 34.50.189.51:55804] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "discocollective.kriveloff-associates.com"] [uri "/index.php"] [unique_id "apK-KmjCPtor9NZ-byToLQAABkA"]
[Sat Aug 29 05:10:34.587456 2026] [core:error] [pid 11274:tid 11455] [client 34.50.189.51:55724] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:34.587471 2026] [core:error] [pid 11274:tid 11455] [client 34.50.189.51:55724] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:34.588319 2026] [core:error] [pid 11274:tid 11476] [client 34.50.189.51:55842] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:34.588334 2026] [core:error] [pid 11274:tid 11476] [client 34.50.189.51:55842] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:34.589675 2026] [security2:error] [pid 11274:tid 11541] [client 34.50.189.51:55904] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/production/.env"] [unique_id "apK-KmbX5DA3XO6e_qQiHwAAAWo"]
[Sat Aug 29 05:10:34.590112 2026] [core:error] [pid 1041789:tid 1041950] [client 34.50.189.51:55866] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:34.590123 2026] [core:error] [pid 1041789:tid 1041950] [client 34.50.189.51:55866] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:34.590163 2026] [core:error] [pid 11274:tid 11459] [client 34.50.189.51:55876] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:34.590172 2026] [core:error] [pid 11274:tid 11459] [client 34.50.189.51:55876] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:34.591450 2026] [security2:error] [pid 1041789:tid 1041988] [client 20.151.200.44:21784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/kure.php"] [unique_id "apK-Kov3RhPI65jTFG4XXgAAA1c"]
[Sat Aug 29 05:10:34.592551 2026] [core:error] [pid 11274:tid 11493] [client 34.50.189.51:55894] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:34.592571 2026] [core:error] [pid 11274:tid 11493] [client 34.50.189.51:55894] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:34.592702 2026] [security2:error] [pid 1041789:tid 1042035] [client 20.104.104.62:47615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/XiXi.php"] [unique_id "apK-Kov3RhPI65jTFG4XYAAAA4Y"]
[Sat Aug 29 05:10:34.593315 2026] [security2:error] [pid 11274:tid 11452] [client 34.50.189.51:55846] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "discocollective.kriveloff-associates.com"] [uri "/anthropic.json"] [unique_id "apK-KmbX5DA3XO6e_qQiIwAAARI"]
[Sat Aug 29 05:10:34.593810 2026] [security2:error] [pid 1041789:tid 1041995] [client 34.50.189.51:55756] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "discocollective.kriveloff-associates.com"] [uri "/cgi-sys/404.html"] [unique_id "apK-Kov3RhPI65jTFG4XWgAAA14"]
[Sat Aug 29 05:10:34.594060 2026] [security2:error] [pid 11274:tid 11523] [client 20.48.160.90:28079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/bulet.php"] [unique_id "apK-KmbX5DA3XO6e_qQiJQAAAVg"]
[Sat Aug 29 05:10:34.594153 2026] [security2:error] [pid 1041789:tid 1041960] [client 34.50.189.51:55898] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/client/.env"] [unique_id "apK-Kov3RhPI65jTFG4XXwAAAzs"]
[Sat Aug 29 05:10:34.594542 2026] [security2:error] [pid 1041789:tid 1041949] [client 34.50.189.51:55912] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/staging/.env"] [unique_id "apK-Kov3RhPI65jTFG4XYQAAAzA"]
[Sat Aug 29 05:10:34.595094 2026] [security2:error] [pid 1041789:tid 1042052] [client 34.50.189.51:55976] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "discocollective.kriveloff-associates.com"] [uri "/.github/workflows/deploy.yml"] [unique_id "apK-Kov3RhPI65jTFG4XYgAAA5c"]
[Sat Aug 29 05:10:34.595866 2026] [core:error] [pid 1041789:tid 1041982] [client 34.50.189.51:55802] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:34.595876 2026] [core:error] [pid 1041789:tid 1041982] [client 34.50.189.51:55802] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:34.596073 2026] [security2:error] [pid 11274:tid 11528] [client 20.104.68.135:15095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.midatlanticpartyrentals.com"] [uri "/sm.php"] [unique_id "apK-KmbX5DA3XO6e_qQiJgAAAV0"]
[Sat Aug 29 05:10:34.597764 2026] [security2:error] [pid 1041789:tid 1041951] [client 34.50.189.51:55974] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/backup/.env"] [unique_id "apK-Kov3RhPI65jTFG4XYwAAAzI"]
[Sat Aug 29 05:10:34.597843 2026] [security2:error] [pid 1041789:tid 1041951] [client 34.50.189.51:55974] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "discocollective.kriveloff-associates.com"] [uri "/backup/.env"] [unique_id "apK-Kov3RhPI65jTFG4XYwAAAzI"]
[Sat Aug 29 05:10:34.598148 2026] [security2:error] [pid 1041789:tid 1041962] [client 34.50.189.51:55818] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "discocollective.kriveloff-associates.com"] [uri "/config/master.key"] [unique_id "apK-Kov3RhPI65jTFG4XZAAAAz0"]
[Sat Aug 29 05:10:34.598982 2026] [core:error] [pid 11274:tid 11511] [client 34.50.189.51:55878] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:34.599003 2026] [core:error] [pid 11274:tid 11511] [client 34.50.189.51:55878] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:34.599827 2026] [security2:error] [pid 11274:tid 11530] [client 34.50.189.51:55990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/dev/.env"] [unique_id "apK-KmbX5DA3XO6e_qQiKQAAAV8"]
[Sat Aug 29 05:10:34.600983 2026] [security2:error] [pid 1041789:tid 1042041] [client 34.50.189.51:55970] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "discocollective.kriveloff-associates.com"] [uri "/cgi-sys/404.html"] [unique_id "apK-Kov3RhPI65jTFG4XZQAAA4w"]
[Sat Aug 29 05:10:34.600999 2026] [core:error] [pid 11274:tid 11532] [client 34.50.189.51:55942] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:34.601008 2026] [core:error] [pid 11274:tid 11532] [client 34.50.189.51:55942] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:34.601210 2026] [core:error] [pid 11274:tid 11498] [client 34.50.189.51:55746] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:34.601221 2026] [core:error] [pid 11274:tid 11498] [client 34.50.189.51:55746] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:34.606275 2026] [core:error] [pid 1041789:tid 1041992] [client 34.50.189.51:55756] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:34.606292 2026] [core:error] [pid 1041789:tid 1041992] [client 34.50.189.51:55756] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:34.636676 2026] [security2:error] [pid 1321:tid 1596] [client 103.171.189.88:51420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-KmjCPtor9NZ-byToMAAABqc"]
[Sat Aug 29 05:10:34.636805 2026] [security2:error] [pid 1321:tid 1596] [client 103.171.189.88:51420] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-KmjCPtor9NZ-byToMAAABqc"]
[Sat Aug 29 05:10:34.646341 2026] [security2:error] [pid 1321:tid 1565] [client 52.139.37.240:12917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.arctichaven.com"] [uri "/flower.php"] [unique_id "apK-KmjCPtor9NZ-byToMQAABog"]
[Sat Aug 29 05:10:34.653348 2026] [security2:error] [pid 11274:tid 11539] [client 20.104.104.62:16469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.jamwestcon.com"] [uri "/an.php"] [unique_id "apK-KmbX5DA3XO6e_qQiKwAAAWg"]
[Sat Aug 29 05:10:34.672583 2026] [security2:error] [pid 1321:tid 1551] [client 93.123.109.228:47534] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/apis/.env"] [unique_id "apK-KmjCPtor9NZ-byToNAAABno"]
[Sat Aug 29 05:10:34.672802 2026] [security2:error] [pid 11274:tid 11472] [client 20.48.160.90:62225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/nofile.php"] [unique_id "apK-KmbX5DA3XO6e_qQiLQAAASY"]
[Sat Aug 29 05:10:34.682211 2026] [security2:error] [pid 11274:tid 11547] [client 146.70.36.124:40216] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "foleykids.org"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "apK-KmbX5DA3XO6e_qQiLgAAAW8"]
[Sat Aug 29 05:10:34.721439 2026] [security2:error] [pid 1041789:tid 1041938] [client 68.155.159.216:56521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK-Kov3RhPI65jTFG4XbAAAAyU"]
[Sat Aug 29 05:10:34.723114 2026] [security2:error] [pid 1321:tid 1549] [client 20.52.41.200:2771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/ahax.php"] [unique_id "apK-KmjCPtor9NZ-byToOAAABng"]
[Sat Aug 29 05:10:34.728042 2026] [security2:error] [pid 11274:tid 11565] [client 20.48.160.90:51869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/av.php"] [unique_id "apK-KmbX5DA3XO6e_qQiLwAAAYE"]
[Sat Aug 29 05:10:34.730960 2026] [security2:error] [pid 1041789:tid 1041975] [client 40.83.93.50:6612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/class_api.php"] [unique_id "apK-Kov3RhPI65jTFG4XbQAAA0o"]
[Sat Aug 29 05:10:34.737544 2026] [security2:error] [pid 1041789:tid 1041933] [client 68.155.159.216:7115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK-Kov3RhPI65jTFG4XbgAAAyA"]
[Sat Aug 29 05:10:34.760151 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.220.204.93:61647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/amp.php"] [unique_id "apK-Kov3RhPI65jTFG4XcgAAA3o"]
[Sat Aug 29 05:10:34.763926 2026] [security2:error] [pid 1321:tid 1568] [client 93.123.109.228:47786] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/crm/.env"] [unique_id "apK-KmjCPtor9NZ-byToOgAABos"]
[Sat Aug 29 05:10:34.774488 2026] [security2:error] [pid 1041789:tid 1041961] [client 68.155.159.216:14208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-login.php"] [unique_id "apK-Kov3RhPI65jTFG4XdAAAAzw"]
[Sat Aug 29 05:10:34.779646 2026] [security2:error] [pid 11274:tid 11527] [client 93.123.109.228:47342] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/cron/.env"] [unique_id "apK-KmbX5DA3XO6e_qQiMgAAAVw"]
[Sat Aug 29 05:10:34.792045 2026] [security2:error] [pid 11274:tid 11533] [client 68.155.159.216:1799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-includes/plugins.php"] [unique_id "apK-KmbX5DA3XO6e_qQiMwAAAWI"]
[Sat Aug 29 05:10:34.810531 2026] [security2:error] [pid 11274:tid 11558] [client 20.104.68.135:20787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.midatlanticpartyrentals.com"] [uri "/shell.php"] [unique_id "apK-KmbX5DA3XO6e_qQiNQAAAXo"]
[Sat Aug 29 05:10:34.813855 2026] [security2:error] [pid 11274:tid 11550] [client 158.158.54.35:14878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wk/index.php"] [unique_id "apK-KmbX5DA3XO6e_qQiNwAAAXI"]
[Sat Aug 29 05:10:34.813970 2026] [security2:error] [pid 11274:tid 11552] [client 143.92.74.161:36516] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "culturapopular.cl"] [uri "/"] [unique_id "apK-KmbX5DA3XO6e_qQiNgAAAXQ"]
[Sat Aug 29 05:10:34.824524 2026] [security2:error] [pid 1321:tid 1581] [client 20.48.160.90:63472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/run.php"] [unique_id "apK-KmjCPtor9NZ-byToPQAABpg"]
[Sat Aug 29 05:10:34.851182 2026] [security2:error] [pid 1041789:tid 1041944] [client 20.104.104.62:16495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.jamwestcon.com"] [uri "/dropdown.php"] [unique_id "apK-Kov3RhPI65jTFG4XdQAAAys"]
[Sat Aug 29 05:10:34.852577 2026] [security2:error] [pid 1321:tid 1509] [client 68.155.159.216:18421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/bk/index.php"] [unique_id "apK-KmjCPtor9NZ-byToPgAABlE"]
[Sat Aug 29 05:10:34.875377 2026] [security2:error] [pid 11274:tid 11557] [client 158.158.54.35:31890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "apK-KmbX5DA3XO6e_qQiOAAAAXk"]
[Sat Aug 29 05:10:34.910827 2026] [security2:error] [pid 1041789:tid 1041939] [client 20.104.104.62:64731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/.piongroup.php"] [unique_id "apK-Kov3RhPI65jTFG4XeAAAAyY"]
[Sat Aug 29 05:10:34.926746 2026] [security2:error] [pid 11274:tid 11524] [client 93.123.109.228:47252] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/demo/.env"] [unique_id "apK-KmbX5DA3XO6e_qQiOQAAAVk"]
[Sat Aug 29 05:10:34.931702 2026] [security2:error] [pid 1321:tid 1555] [client 93.123.109.228:47786] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/current/.env"] [unique_id "apK-KmjCPtor9NZ-byToQwAABn4"]
[Sat Aug 29 05:10:34.957035 2026] [security2:error] [pid 1041789:tid 1042035] [client 20.104.49.130:39074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mgbeats.tonewarp.com"] [uri "/edit.php"] [unique_id "apK-Kov3RhPI65jTFG4XegAAA4Y"]
[Sat Aug 29 05:10:34.961311 2026] [security2:error] [pid 1321:tid 1564] [client 74.248.24.12:28745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/files.php"] [unique_id "apK-KmjCPtor9NZ-byToRAAABoc"]
[Sat Aug 29 05:10:34.962472 2026] [security2:error] [pid 1041789:tid 1041957] [client 20.48.160.90:28109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/images.php"] [unique_id "apK-Kov3RhPI65jTFG4XewAAAzg"]
[Sat Aug 29 05:10:34.971548 2026] [security2:error] [pid 1041789:tid 1042048] [client 20.48.160.90:62282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/new.php"] [unique_id "apK-Kov3RhPI65jTFG4XfAAAA5M"]
[Sat Aug 29 05:10:34.975453 2026] [security2:error] [pid 11274:tid 11461] [client 20.220.204.93:61618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/cc13.php"] [unique_id "apK-KmbX5DA3XO6e_qQiOwAAARs"]
[Sat Aug 29 05:10:34.981089 2026] [security2:error] [pid 1041789:tid 1041995] [client 146.70.36.124:40228] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "foleykids.org"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "apK-Kov3RhPI65jTFG4XfQAAA14"]
[Sat Aug 29 05:10:34.985039 2026] [security2:error] [pid 11274:tid 11572] [client 20.63.219.114:17955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/essexec.php"] [unique_id "apK-KmbX5DA3XO6e_qQiPAAAAYg"]
[Sat Aug 29 05:10:34.994122 2026] [security2:error] [pid 11274:tid 11468] [client 158.23.147.79:55877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-content/uploads/about.php"] [unique_id "apK-KmbX5DA3XO6e_qQiPQAAASI"]
[Sat Aug 29 05:10:35.012760 2026] [security2:error] [pid 11274:tid 11560] [client 20.104.68.135:4738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.midatlanticpartyrentals.com"] [uri "/simple.php"] [unique_id "apK-K2bX5DA3XO6e_qQiPwAAAXw"]
[Sat Aug 29 05:10:35.049012 2026] [security2:error] [pid 11274:tid 11451] [client 20.104.104.62:16459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.jamwestcon.com"] [uri "/update/da222.php"] [unique_id "apK-K2bX5DA3XO6e_qQiQgAAARE"]
[Sat Aug 29 05:10:35.050311 2026] [security2:error] [pid 1041789:tid 1041982] [client 93.123.109.228:47498] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/dev/.env"] [unique_id "apK-K4v3RhPI65jTFG4XgAAAA1E"]
[Sat Aug 29 05:10:35.064149 2026] [security2:error] [pid 1041789:tid 1041951] [client 20.151.200.44:21812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/cafe.php"] [unique_id "apK-K4v3RhPI65jTFG4XgQAAAzI"]
[Sat Aug 29 05:10:35.083409 2026] [security2:error] [pid 1321:tid 1512] [client 93.123.109.228:47660] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/app/.env"] [unique_id "apK-K2jCPtor9NZ-byToRwAABlQ"]
[Sat Aug 29 05:10:35.105020 2026] [security2:error] [pid 1041789:tid 1041971] [client 68.155.159.216:1983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/lv.php"] [unique_id "apK-K4v3RhPI65jTFG4XggAAA0Y"]
[Sat Aug 29 05:10:35.105552 2026] [security2:error] [pid 1041789:tid 1042041] [client 20.48.160.90:63460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/inx.php"] [unique_id "apK-K4v3RhPI65jTFG4XgwAAA4w"]
[Sat Aug 29 05:10:35.105660 2026] [security2:error] [pid 1321:tid 1602] [client 40.83.93.50:12558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/disagraeed.php"] [unique_id "apK-K2jCPtor9NZ-byToSAAABq0"]
[Sat Aug 29 05:10:35.106790 2026] [security2:error] [pid 11274:tid 11481] [client 93.123.109.228:47342] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/develop/.env"] [unique_id "apK-K2bX5DA3XO6e_qQiRAAAAS4"]
[Sat Aug 29 05:10:35.110884 2026] [security2:error] [pid 1041789:tid 1041992] [client 93.123.109.228:47736] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/developer/.env"] [unique_id "apK-K4v3RhPI65jTFG4XhAAAA1s"]
[Sat Aug 29 05:10:35.118526 2026] [security2:error] [pid 11274:tid 11463] [client 158.23.147.79:6000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/.well-knownold/index.php"] [unique_id "apK-K2bX5DA3XO6e_qQiRgAAAR0"]
[Sat Aug 29 05:10:35.128069 2026] [security2:error] [pid 11274:tid 11516] [client 103.215.74.26:50454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.74.215.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "kglogisticsinc.com"] [uri "/register"] [unique_id "apK-K2bX5DA3XO6e_qQiRQAAAVE"]
[Sat Aug 29 05:10:35.128214 2026] [security2:error] [pid 11274:tid 11516] [client 103.215.74.26:50454] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "160"] [id "900408"] [msg "register POST logging"] [data "409"] [hostname "kglogisticsinc.com"] [uri "/register"] [unique_id "apK-K2bX5DA3XO6e_qQiRQAAAVE"]
[Sat Aug 29 05:10:35.133393 2026] [security2:error] [pid 1041789:tid 1042014] [client 20.48.160.90:51939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/ops.php"] [unique_id "apK-K4v3RhPI65jTFG4XhgAAA3E"]
[Sat Aug 29 05:10:35.144242 2026] [security2:error] [pid 1321:tid 1529] [client 93.123.109.228:47786] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/development/.env"] [unique_id "apK-K2jCPtor9NZ-byToTAAABmU"]
[Sat Aug 29 05:10:35.174786 2026] [security2:error] [pid 11274:tid 11485] [client 68.155.159.216:62805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/NewFile.php/"] [unique_id "apK-K2bX5DA3XO6e_qQiSAAAATI"]
[Sat Aug 29 05:10:35.180875 2026] [security2:error] [pid 1321:tid 1552] [client 4.205.62.107:58434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/dd.php"] [unique_id "apK-K2jCPtor9NZ-byToTgAABns"]
[Sat Aug 29 05:10:35.183421 2026] [security2:error] [pid 1321:tid 1544] [client 158.23.147.79:53957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK-K2jCPtor9NZ-byToTwAABnQ"]
[Sat Aug 29 05:10:35.192764 2026] [security2:error] [pid 1041789:tid 1042052] [client 20.52.41.200:2844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/shell.php"] [unique_id "apK-K4v3RhPI65jTFG4XiAAAA5c"]
[Sat Aug 29 05:10:35.204307 2026] [security2:error] [pid 1321:tid 1576] [client 20.104.49.130:57660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/cilus.php"] [unique_id "apK-K2jCPtor9NZ-byToUQAABpM"]
[Sat Aug 29 05:10:35.211697 2026] [security2:error] [pid 1041789:tid 1042050] [client 20.104.68.135:20761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.midatlanticpartyrentals.com"] [uri "/wp-admin.php"] [unique_id "apK-K4v3RhPI65jTFG4XigAAA5U"]
[Sat Aug 29 05:10:35.214042 2026] [security2:error] [pid 11274:tid 11456] [client 40.83.93.50:11480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/aksinet.php"] [unique_id "apK-K2bX5DA3XO6e_qQiSQAAARY"]
[Sat Aug 29 05:10:35.215686 2026] [security2:error] [pid 1321:tid 1608] [client 20.220.204.93:65158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/aa.php"] [unique_id "apK-K2jCPtor9NZ-byToUwAABrM"]
[Sat Aug 29 05:10:35.227852 2026] [security2:error] [pid 1321:tid 1491] [client 4.205.62.107:62765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/server-info.php"] [unique_id "apK-K2jCPtor9NZ-byToVAAABj8"]
[Sat Aug 29 05:10:35.234346 2026] [security2:error] [pid 1321:tid 1606] [client 93.123.109.228:47728] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/crm/.env"] [unique_id "apK-K2jCPtor9NZ-byToVQAABrE"]
[Sat Aug 29 05:10:35.241078 2026] [security2:error] [pid 1321:tid 1523] [client 93.123.109.228:47294] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/cron/.env"] [unique_id "apK-K2jCPtor9NZ-byToVgAABl8"]
[Sat Aug 29 05:10:35.242789 2026] [security2:error] [pid 11274:tid 11568] [client 20.48.160.90:63468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/vpn.php"] [unique_id "apK-K2bX5DA3XO6e_qQiSgAAAYQ"]
[Sat Aug 29 05:10:35.277149 2026] [security2:error] [pid 1041789:tid 1041935] [client 158.158.54.35:30320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/admin.php"] [unique_id "apK-K4v3RhPI65jTFG4XjgAAAyI"]
[Sat Aug 29 05:10:35.278719 2026] [security2:error] [pid 1321:tid 1537] [client 93.123.109.228:47518] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/current/.env"] [unique_id "apK-K2jCPtor9NZ-byToVwAABm0"]
[Sat Aug 29 05:10:35.294012 2026] [security2:error] [pid 1041789:tid 1041990] [client 146.70.36.124:40234] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "foleykids.org"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "apK-K4v3RhPI65jTFG4XkAAAA1k"]
[Sat Aug 29 05:10:35.302580 2026] [security2:error] [pid 11274:tid 11474] [client 20.48.160.90:28132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/coffexium.php"] [unique_id "apK-K2bX5DA3XO6e_qQiUQAAASg"]
[Sat Aug 29 05:10:35.312051 2026] [security2:error] [pid 11274:tid 11490] [client 158.23.147.79:63022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK-K2bX5DA3XO6e_qQiUgAAATc"]
[Sat Aug 29 05:10:35.317439 2026] [security2:error] [pid 11274:tid 11453] [client 158.158.54.35:31874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/abcd.php"] [unique_id "apK-K2bX5DA3XO6e_qQiVQAAARM"]
[Sat Aug 29 05:10:35.343624 2026] [security2:error] [pid 11274:tid 11465] [client 213.202.253.4:54067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "timportlock.net"] [uri "/adminfuns.php"] [unique_id "apK-K2bX5DA3XO6e_qQiVgAAAR8"], referer: www.google.com
[Sat Aug 29 05:10:35.369481 2026] [security2:error] [pid 1041789:tid 1041991] [client 20.220.204.93:63596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/s1.php"] [unique_id "apK-K4v3RhPI65jTFG4XkgAAA1o"]
[Sat Aug 29 05:10:35.373598 2026] [security2:error] [pid 11274:tid 11475] [client 158.23.147.79:11471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK-K2bX5DA3XO6e_qQiVwAAASk"]
[Sat Aug 29 05:10:35.376936 2026] [security2:error] [pid 1041789:tid 1042028] [client 20.63.219.114:1933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/hello.php"] [unique_id "apK-K4v3RhPI65jTFG4XkwAAA38"]
[Sat Aug 29 05:10:35.381701 2026] [security2:error] [pid 11274:tid 11503] [client 20.48.160.90:64545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/shiny.php"] [unique_id "apK-K2bX5DA3XO6e_qQiWAAAAUQ"]
[Sat Aug 29 05:10:35.384688 2026] [security2:error] [pid 1041789:tid 1041944] [client 68.155.159.216:38566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/file.php"] [unique_id "apK-K4v3RhPI65jTFG4XlAAAAys"]
[Sat Aug 29 05:10:35.394834 2026] [security2:error] [pid 11274:tid 11455] [client 4.205.62.107:64973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/min.php"] [unique_id "apK-K2bX5DA3XO6e_qQiWQAAARU"]
[Sat Aug 29 05:10:35.408407 2026] [security2:error] [pid 1041789:tid 1042044] [client 4.205.62.107:6469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/fff.php"] [unique_id "apK-K4v3RhPI65jTFG4XlgAAA48"]
[Sat Aug 29 05:10:35.418062 2026] [security2:error] [pid 1041789:tid 1041961] [client 20.104.68.135:16668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.midatlanticpartyrentals.com"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "apK-K4v3RhPI65jTFG4XlwAAAzw"]
[Sat Aug 29 05:10:35.464659 2026] [security2:error] [pid 11274:tid 11549] [client 20.48.160.90:28043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/BDKR28WP.php"] [unique_id "apK-K2bX5DA3XO6e_qQiWgAAAXE"]
[Sat Aug 29 05:10:35.470429 2026] [security2:error] [pid 1041789:tid 1041940] [client 74.248.24.12:21200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/o.php"] [unique_id "apK-K4v3RhPI65jTFG4XmAAAAyc"]
[Sat Aug 29 05:10:35.507151 2026] [security2:error] [pid 1041789:tid 1042048] [client 20.220.204.93:65225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/0byte.php"] [unique_id "apK-K4v3RhPI65jTFG4XmQAAA5M"]
[Sat Aug 29 05:10:35.524850 2026] [security2:error] [pid 1041789:tid 1042006] [client 20.104.49.130:52505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/dex.php"] [unique_id "apK-K4v3RhPI65jTFG4XmgAAA2k"]
[Sat Aug 29 05:10:35.527564 2026] [security2:error] [pid 11274:tid 11520] [client 20.48.160.90:63452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/goods.php"] [unique_id "apK-K2bX5DA3XO6e_qQiWwAAAVU"]
[Sat Aug 29 05:10:35.548614 2026] [security2:error] [pid 1041789:tid 1041947] [client 20.104.104.62:64737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/oke.php"] [unique_id "apK-K4v3RhPI65jTFG4XmwAAAy4"]
[Sat Aug 29 05:10:35.556272 2026] [security2:error] [pid 11274:tid 11523] [client 68.155.159.216:56827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/chosen.php"] [unique_id "apK-K2bX5DA3XO6e_qQiXAAAAVg"]
[Sat Aug 29 05:10:35.563419 2026] [security2:error] [pid 1041789:tid 1041982] [client 20.151.200.44:65154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/eval.php"] [unique_id "apK-K4v3RhPI65jTFG4XnAAAA1E"]
[Sat Aug 29 05:10:35.569639 2026] [security2:error] [pid 1041789:tid 1041960] [client 4.205.62.107:63997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/application.config.php"] [unique_id "apK-K4v3RhPI65jTFG4XnQAAAzs"]
[Sat Aug 29 05:10:35.586532 2026] [security2:error] [pid 1041789:tid 1041951] [client 146.70.36.124:40244] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "foleykids.org"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "apK-K4v3RhPI65jTFG4XngAAAzI"]
[Sat Aug 29 05:10:35.604055 2026] [security2:error] [pid 11274:tid 11538] [client 158.23.147.79:14288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK-K2bX5DA3XO6e_qQiXQAAAWc"]
[Sat Aug 29 05:10:35.610362 2026] [security2:error] [pid 11274:tid 11479] [client 91.92.47.191:41044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantgardening.com"] [uri "/rec_carrot.php"] [unique_id "apK-K2bX5DA3XO6e_qQiXgAAASw"]
[Sat Aug 29 05:10:35.613960 2026] [security2:error] [pid 1041789:tid 1041949] [client 20.104.68.135:4760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.midatlanticpartyrentals.com"] [uri "/wp-admin/includes/about.php"] [unique_id "apK-K4v3RhPI65jTFG4XnwAAAzA"]
[Sat Aug 29 05:10:35.627845 2026] [security2:error] [pid 11274:tid 11536] [client 20.48.160.90:28153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/sf.php"] [unique_id "apK-K2bX5DA3XO6e_qQiYAAAAWU"]
[Sat Aug 29 05:10:35.631765 2026] [security2:error] [pid 11274:tid 11498] [client 68.155.159.216:65133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-includes/plugins.php"] [unique_id "apK-K2bX5DA3XO6e_qQiYQAAAT8"]
[Sat Aug 29 05:10:35.645779 2026] [security2:error] [pid 11274:tid 11493] [client 40.83.93.50:12587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/add_actualites.php"] [unique_id "apK-K2bX5DA3XO6e_qQiYgAAATo"]
[Sat Aug 29 05:10:35.652814 2026] [security2:error] [pid 1321:tid 1591] [client 20.220.204.93:63608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/xr.php"] [unique_id "apK-K2jCPtor9NZ-byToXAAABqI"]
[Sat Aug 29 05:10:35.664396 2026] [security2:error] [pid 1321:tid 1496] [client 20.48.160.90:63481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/alfa.php"] [unique_id "apK-K2jCPtor9NZ-byToXQAABkQ"]
[Sat Aug 29 05:10:35.675593 2026] [security2:error] [pid 1041789:tid 1041995] [client 20.52.41.200:2776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/elp.php"] [unique_id "apK-K4v3RhPI65jTFG4XoAAAA14"]
[Sat Aug 29 05:10:35.704873 2026] [security2:error] [pid 1041789:tid 1042018] [client 68.155.159.216:6055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK-K4v3RhPI65jTFG4XoQAAA3U"]
[Sat Aug 29 05:10:35.724539 2026] [security2:error] [pid 1041789:tid 1041950] [client 158.158.54.35:30317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/php8.php"] [unique_id "apK-K4v3RhPI65jTFG4XogAAAzE"]
[Sat Aug 29 05:10:35.737566 2026] [security2:error] [pid 1041789:tid 1041964] [client 20.63.219.114:1994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/fi2.php"] [unique_id "apK-K4v3RhPI65jTFG4XowAAAz8"]
[Sat Aug 29 05:10:35.751946 2026] [security2:error] [pid 11274:tid 11530] [client 158.158.54.35:8359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-access.php"] [unique_id "apK-K2bX5DA3XO6e_qQiZAAAAV8"]
[Sat Aug 29 05:10:35.758930 2026] [security2:error] [pid 1041789:tid 1041962] [client 40.83.93.50:16079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/alfa-rex1.php"] [unique_id "apK-K4v3RhPI65jTFG4XpgAAAz0"]
[Sat Aug 29 05:10:35.766873 2026] [security2:error] [pid 1041789:tid 1041943] [client 20.48.160.90:46567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/k.php"] [unique_id "apK-K4v3RhPI65jTFG4XpwAAAyo"]
[Sat Aug 29 05:10:35.787074 2026] [security2:error] [pid 1041789:tid 1041972] [client 158.23.147.79:24451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-K4v3RhPI65jTFG4XqgAAA0c"]
[Sat Aug 29 05:10:35.796693 2026] [security2:error] [pid 1321:tid 1520] [client 91.92.47.191:41058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantgardening.rocworx.com"] [uri "/articles.php"] [unique_id "apK-K2jCPtor9NZ-byToYQAABlw"]
[Sat Aug 29 05:10:35.797983 2026] [security2:error] [pid 1041789:tid 1042042] [client 20.220.204.93:65247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/h02ugyh.php"] [unique_id "apK-K4v3RhPI65jTFG4XqwAAA40"]
[Sat Aug 29 05:10:35.804534 2026] [security2:error] [pid 11274:tid 11496] [client 20.48.160.90:64574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/33.php"] [unique_id "apK-K2bX5DA3XO6e_qQiZgAAAT0"]
[Sat Aug 29 05:10:35.810590 2026] [security2:error] [pid 1321:tid 1524] [client 20.104.68.135:15079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.midatlanticpartyrentals.com"] [uri "/wp-admin/js/index.php"] [unique_id "apK-K2jCPtor9NZ-byToYgAABmA"]
[Sat Aug 29 05:10:35.824841 2026] [security2:error] [pid 1041789:tid 1042005] [client 68.155.159.216:56528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK-K4v3RhPI65jTFG4XrQAAA2g"]
[Sat Aug 29 05:10:35.843984 2026] [security2:error] [pid 1041789:tid 1041983] [client 68.155.159.216:64117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-content/admin.php"] [unique_id "apK-K4v3RhPI65jTFG4XrgAAA1I"]
[Sat Aug 29 05:10:35.859857 2026] [security2:error] [pid 1041789:tid 1042019] [client 103.215.74.26:50468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.74.215.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "kglogisticsinc.com"] [uri "/register"] [unique_id "apK-K4v3RhPI65jTFG4XrwAAA3Y"]
[Sat Aug 29 05:10:35.860013 2026] [security2:error] [pid 1041789:tid 1042019] [client 103.215.74.26:50468] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "160"] [id "900408"] [msg "register POST logging"] [data "409"] [hostname "kglogisticsinc.com"] [uri "/register"] [unique_id "apK-K4v3RhPI65jTFG4XrwAAA3Y"]
[Sat Aug 29 05:10:35.884018 2026] [security2:error] [pid 1041789:tid 1041948] [client 68.155.159.216:14291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK-K4v3RhPI65jTFG4XsAAAAy8"]
[Sat Aug 29 05:10:35.886043 2026] [security2:error] [pid 11274:tid 11525] [client 146.70.36.124:40246] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "foleykids.org"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "apK-K2bX5DA3XO6e_qQiZwAAAVo"]
[Sat Aug 29 05:10:35.902698 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.48.160.90:28056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/82.php"] [unique_id "apK-K4v3RhPI65jTFG4XsQAAA3o"]
[Sat Aug 29 05:10:35.911725 2026] [security2:error] [pid 1041789:tid 1041997] [client 91.92.47.191:41062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.corrigansbasement.com"] [uri "/settings.php"] [unique_id "apK-K4v3RhPI65jTFG4XswAAA2A"]
[Sat Aug 29 05:10:35.936877 2026] [access_compat:error] [pid 11274:tid 11545] [client 67.20.76.220:12716] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:10:35.946700 2026] [security2:error] [pid 1041789:tid 1041991] [client 68.155.159.216:1823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK-K4v3RhPI65jTFG4XtAAAA1o"]
[Sat Aug 29 05:10:35.954017 2026] [security2:error] [pid 11274:tid 11466] [client 20.48.160.90:64569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/133.php"] [unique_id "apK-K2bX5DA3XO6e_qQiagAAASA"]
[Sat Aug 29 05:10:35.989769 2026] [security2:error] [pid 1041789:tid 1042025] [client 74.248.24.12:15976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/file2.php"] [unique_id "apK-K4v3RhPI65jTFG4XtQAAA3w"]
[Sat Aug 29 05:10:35.999449 2026] [security2:error] [pid 11274:tid 11556] [client 20.151.200.44:65161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/sao.php"] [unique_id "apK-K2bX5DA3XO6e_qQibAAAAXg"]
[Sat Aug 29 05:10:35.999999 2026] [security2:error] [pid 11274:tid 11517] [client 20.220.204.93:65244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/xxw.php"] [unique_id "apK-K2bX5DA3XO6e_qQibQAAAVI"]
[Sat Aug 29 05:10:36.015180 2026] [security2:error] [pid 11274:tid 11547] [client 68.155.159.216:18411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.cisagency.com"] [uri "/first.php"] [unique_id "apK-LGbX5DA3XO6e_qQibgAAAW8"]
[Sat Aug 29 05:10:36.033682 2026] [security2:error] [pid 1321:tid 1601] [client 93.123.109.228:47518] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/dev/.env"] [unique_id "apK-LGjCPtor9NZ-byToZgAABqw"]
[Sat Aug 29 05:10:36.052313 2026] [security2:error] [pid 1321:tid 1563] [client 20.48.160.90:51964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/dex.php"] [unique_id "apK-LGjCPtor9NZ-byToaAAABoY"]
[Sat Aug 29 05:10:36.077148 2026] [security2:error] [pid 1321:tid 1575] [client 93.123.109.228:47562] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/apps/.env"] [unique_id "apK-LGjCPtor9NZ-byToaQAABpI"]
[Sat Aug 29 05:10:36.086293 2026] [security2:error] [pid 1041789:tid 1041977] [client 20.104.68.135:4746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.midatlanticpartyrentals.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK-LIv3RhPI65jTFG4XuQAAA0w"]
[Sat Aug 29 05:10:36.091653 2026] [security2:error] [pid 11274:tid 11510] [client 93.123.109.228:47698] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/application/.env"] [unique_id "apK-LGbX5DA3XO6e_qQicQAAAUs"]
[Sat Aug 29 05:10:36.100813 2026] [security2:error] [pid 11274:tid 11540] [client 158.23.147.79:55270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-admin/maint/index.php"] [unique_id "apK-LGbX5DA3XO6e_qQicgAAAWk"]
[Sat Aug 29 05:10:36.102863 2026] [security2:error] [pid 1041789:tid 1042007] [client 20.48.160.90:64535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/sym.php"] [unique_id "apK-LIv3RhPI65jTFG4XugAAA2o"]
[Sat Aug 29 05:10:36.131796 2026] [security2:error] [pid 1041789:tid 1042044] [client 20.52.41.200:2762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-content/cong.php"] [unique_id "apK-LIv3RhPI65jTFG4XuwAAA48"]
[Sat Aug 29 05:10:36.136495 2026] [security2:error] [pid 11274:tid 11527] [client 20.104.104.62:20669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/MKY.php"] [unique_id "apK-LGbX5DA3XO6e_qQicwAAAVw"]
[Sat Aug 29 05:10:36.148456 2026] [security2:error] [pid 1041789:tid 1041931] [client 93.123.109.228:47356] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/develop/.env"] [unique_id "apK-LIv3RhPI65jTFG4XvQAAAx4"]
[Sat Aug 29 05:10:36.150408 2026] [security2:error] [pid 11274:tid 11552] [client 68.155.159.216:64411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/nf_tracking.php"] [unique_id "apK-LGbX5DA3XO6e_qQidAAAAXQ"]
[Sat Aug 29 05:10:36.156829 2026] [security2:error] [pid 1041789:tid 1041987] [client 149.34.210.141:41243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-LIv3RhPI65jTFG4XvAAAA1Y"]
[Sat Aug 29 05:10:36.156950 2026] [security2:error] [pid 1041789:tid 1041987] [client 149.34.210.141:41243] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-LIv3RhPI65jTFG4XvAAAA1Y"]
[Sat Aug 29 05:10:36.171129 2026] [security2:error] [pid 1321:tid 1588] [client 20.63.219.114:1998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/1p.php"] [unique_id "apK-LGjCPtor9NZ-byTobAAABp8"]
[Sat Aug 29 05:10:36.188176 2026] [security2:error] [pid 1041789:tid 1042048] [client 20.48.160.90:51943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/inso.php"] [unique_id "apK-LIv3RhPI65jTFG4XwQAAA5M"]
[Sat Aug 29 05:10:36.192999 2026] [autoindex:error] [pid 1041789:tid 1042035] [client 34.22.39.185:0] AH01276: Cannot serve directory /home1/abmaccom/public_html/ibestguide/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:10:36.194669 2026] [security2:error] [pid 1041789:tid 1041969] [client 158.158.54.35:21746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-content/uploads/min.php"] [unique_id "apK-LIv3RhPI65jTFG4XwwAAA0Q"]
[Sat Aug 29 05:10:36.203652 2026] [security2:error] [pid 1041789:tid 1041982] [client 68.155.159.216:1950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-LIv3RhPI65jTFG4XxAAAA1E"]
[Sat Aug 29 05:10:36.204998 2026] [autoindex:error] [pid 1041789:tid 1041981] [client 205.210.31.238:60614] AH01276: Cannot serve directory /home3/xlkouzmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:10:36.221618 2026] [security2:error] [pid 1321:tid 1531] [client 158.23.147.79:5943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK-LGjCPtor9NZ-byTobgAABmc"]
[Sat Aug 29 05:10:36.229531 2026] [http2:warn] [pid 1041789:tid 1041984] [client 57.141.14.41:57682] h2_stream(1041789-123-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:10:36.235186 2026] [security2:error] [pid 11274:tid 11546] [client 20.48.160.90:64547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/8.php"] [unique_id "apK-LGbX5DA3XO6e_qQidgAAAW4"]
[Sat Aug 29 05:10:36.250107 2026] [security2:error] [pid 1321:tid 1558] [client 40.83.93.50:16110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/headerg.php"] [unique_id "apK-LGjCPtor9NZ-byTocgAABoE"]
[Sat Aug 29 05:10:36.274964 2026] [security2:error] [pid 11274:tid 11448] [client 20.220.204.93:63548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/bolt.php"] [unique_id "apK-LGbX5DA3XO6e_qQidwAAAQ4"]
[Sat Aug 29 05:10:36.281162 2026] [security2:error] [pid 1041789:tid 1041971] [client 68.155.159.216:62723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/dropdown.php"] [unique_id "apK-LIv3RhPI65jTFG4XyAAAA0Y"]
[Sat Aug 29 05:10:36.282628 2026] [security2:error] [pid 1321:tid 1536] [client 20.104.68.135:4771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.midatlanticpartyrentals.com"] [uri "/wp-admin/network/admin.php"] [unique_id "apK-LGjCPtor9NZ-byTodQAABmw"]
[Sat Aug 29 05:10:36.312202 2026] [security2:error] [pid 11274:tid 11499] [client 158.158.54.35:8496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/install.php"] [unique_id "apK-LGbX5DA3XO6e_qQieAAAAUA"]
[Sat Aug 29 05:10:36.320019 2026] [security2:error] [pid 11274:tid 11446] [client 4.205.62.107:51399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/doc.php"] [unique_id "apK-LGbX5DA3XO6e_qQiegAAAQw"]
[Sat Aug 29 05:10:36.324089 2026] [security2:error] [pid 1041789:tid 1041992] [client 20.48.160.90:51840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/aa.php"] [unique_id "apK-LIv3RhPI65jTFG4XygAAA1s"]
[Sat Aug 29 05:10:36.348627 2026] [http2:warn] [pid 1017536:tid 1017719] [client 57.141.14.14:64940] h2_stream(1017536-392-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:10:36.370595 2026] [security2:error] [pid 11274:tid 11563] [client 4.205.62.107:60320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/gk.php"] [unique_id "apK-LGbX5DA3XO6e_qQigQAAAX8"]
[Sat Aug 29 05:10:36.372049 2026] [security2:error] [pid 11274:tid 11514] [client 20.48.160.90:64636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/goods.php"] [unique_id "apK-LGbX5DA3XO6e_qQiggAAAU8"]
[Sat Aug 29 05:10:36.413382 2026] [http2:warn] [pid 1034096:tid 1034259] [client 74.7.241.38:45352] h2_stream(1034096-93-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:10:36.413410 2026] [http2:warn] [pid 1034096:tid 1034259] [client 74.7.241.38:45352] h2_stream(1034096-93-3,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:10:36.427628 2026] [security2:error] [pid 11274:tid 11555] [client 20.220.204.93:61679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/rtx.php"] [unique_id "apK-LGbX5DA3XO6e_qQigwAAAXc"]
[Sat Aug 29 05:10:36.436390 2026] [proxy_http:error] [pid 1018003:tid 1018138] (70007)The timeout specified has expired: [remote 74.7.241.38:56118] AH01102: error reading status line from remote server 127.0.0.1:8443, referer: https://guraonline.com/shop/?orderby=date&product_brand=ldb,dr-ceuracle,possess,locobase,scope,versace,aco,la-roche-posay
[Sat Aug 29 05:10:36.436413 2026] [proxy:error] [pid 1018003:tid 1018138] [remote 74.7.241.38:56118] AH00898: Error reading from remote server returned by /shop/, referer: https://guraonline.com/shop/?orderby=date&product_brand=ldb,dr-ceuracle,possess,locobase,scope,versace,aco,la-roche-posay
[Sat Aug 29 05:10:36.447420 2026] [security2:error] [pid 11274:tid 11481] [client 158.23.147.79:62995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-login.php"] [unique_id "apK-LGbX5DA3XO6e_qQihAAAAS4"]
[Sat Aug 29 05:10:36.456386 2026] [proxy_http:error] [pid 1028675:tid 1028899] (70007)The timeout specified has expired: [client 127.0.0.1:19478] AH01102: error reading status line from remote server 50.6.92.44:8443, referer: https://guraonline.com/shop/?orderby=date&product_brand=ldb,dr-ceuracle,possess,locobase,scope,versace,aco,la-roche-posay
[Sat Aug 29 05:10:36.456409 2026] [proxy:error] [pid 1028675:tid 1028899] [client 127.0.0.1:19478] AH00898: Error reading from remote server returned by /shop/, referer: https://guraonline.com/shop/?orderby=date&product_brand=ldb,dr-ceuracle,possess,locobase,scope,versace,aco,la-roche-posay
[Sat Aug 29 05:10:36.480161 2026] [security2:error] [pid 11274:tid 11445] [client 20.104.68.135:15046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.midatlanticpartyrentals.com"] [uri "/wp-conflg/function.php"] [unique_id "apK-LGbX5DA3XO6e_qQihQAAAQs"]
[Sat Aug 29 05:10:36.490457 2026] [security2:error] [pid 11274:tid 11561] [client 20.48.160.90:51967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/img.php"] [unique_id "apK-LGbX5DA3XO6e_qQiiAAAAX0"]
[Sat Aug 29 05:10:36.503269 2026] [security2:error] [pid 11274:tid 11488] [client 20.48.160.90:64638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/ah.php"] [unique_id "apK-LGbX5DA3XO6e_qQiiQAAATU"]
[Sat Aug 29 05:10:36.504778 2026] [security2:error] [pid 11274:tid 11572] [client 74.248.24.12:28743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK-LGbX5DA3XO6e_qQiigAAAYg"]
[Sat Aug 29 05:10:36.535322 2026] [security2:error] [pid 1041789:tid 1041938] [client 4.205.62.107:65017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/saiga.php"] [unique_id "apK-LIv3RhPI65jTFG4X0AAAAyU"]
[Sat Aug 29 05:10:36.544862 2026] [security2:error] [pid 11274:tid 11451] [client 40.83.93.50:12575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/xmlrpc.php0"] [unique_id "apK-LGbX5DA3XO6e_qQiiwAAARE"]
[Sat Aug 29 05:10:36.547639 2026] [security2:error] [pid 11274:tid 11483] [client 4.205.62.107:6969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/autogooey.php"] [unique_id "apK-LGbX5DA3XO6e_qQijAAAATA"]
[Sat Aug 29 05:10:36.552776 2026] [security2:error] [pid 11274:tid 11477] [client 158.23.147.79:11400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/log-mama/function.php"] [unique_id "apK-LGbX5DA3XO6e_qQijQAAASs"]
[Sat Aug 29 05:10:36.557113 2026] [security2:error] [pid 11274:tid 11470] [client 20.63.219.114:2023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/Njima.php"] [unique_id "apK-LGbX5DA3XO6e_qQijgAAASQ"]
[Sat Aug 29 05:10:36.568005 2026] [security2:error] [pid 11274:tid 11456] [client 20.220.204.93:65265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/ckk.php"] [unique_id "apK-LGbX5DA3XO6e_qQikAAAARY"]
[Sat Aug 29 05:10:36.578525 2026] [security2:error] [pid 11274:tid 11469] [client 93.123.109.228:47342] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/etc/apache2/apache2.conf"] [unique_id "apK-LGbX5DA3XO6e_qQikgAAASM"]
[Sat Aug 29 05:10:36.588646 2026] [security2:error] [pid 11274:tid 11471] [client 20.52.41.200:2858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK-LGbX5DA3XO6e_qQilAAAASU"]
[Sat Aug 29 05:10:36.639998 2026] [security2:error] [pid 11274:tid 11516] [client 158.158.54.35:33366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK-LGbX5DA3XO6e_qQimAAAAVE"]
[Sat Aug 29 05:10:36.649662 2026] [security2:error] [pid 1041789:tid 1041948] [client 20.48.160.90:62241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/ws55.php"] [unique_id "apK-LIv3RhPI65jTFG4X0gAAAy8"]
[Sat Aug 29 05:10:36.669644 2026] [security2:error] [pid 11274:tid 11467] [client 20.104.104.62:20697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/xl33t.php"] [unique_id "apK-LGbX5DA3XO6e_qQimQAAASE"]
[Sat Aug 29 05:10:36.669664 2026] [security2:error] [pid 11274:tid 11505] [client 68.155.159.216:56734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/goods.php"] [unique_id "apK-LGbX5DA3XO6e_qQimgAAAUY"]
[Sat Aug 29 05:10:36.672008 2026] [security2:error] [pid 11274:tid 11513] [client 20.48.160.90:51918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/222.php"] [unique_id "apK-LGbX5DA3XO6e_qQimwAAAU4"]
[Sat Aug 29 05:10:36.681041 2026] [security2:error] [pid 11274:tid 11490] [client 20.104.68.135:20775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.midatlanticpartyrentals.com"] [uri "/wp-content/classwithtostring.php"] [unique_id "apK-LGbX5DA3XO6e_qQinAAAATc"]
[Sat Aug 29 05:10:36.691697 2026] [security2:error] [pid 1041789:tid 1041997] [client 93.123.109.228:47498] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/erp/.env"] [unique_id "apK-LIv3RhPI65jTFG4X0wAAA2A"]
[Sat Aug 29 05:10:36.707217 2026] [security2:error] [pid 11274:tid 11484] [client 20.48.160.90:64136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-LGbX5DA3XO6e_qQinQAAATE"]
[Sat Aug 29 05:10:36.712999 2026] [security2:error] [pid 1041789:tid 1041935] [client 4.205.62.107:63985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/xp.php"] [unique_id "apK-LIv3RhPI65jTFG4X1QAAAyI"]
[Sat Aug 29 05:10:36.720061 2026] [security2:error] [pid 11274:tid 11504] [client 158.23.147.79:14325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-content/admin.php"] [unique_id "apK-LGbX5DA3XO6e_qQingAAAUU"]
[Sat Aug 29 05:10:36.735842 2026] [security2:error] [pid 1041789:tid 1041994] [client 68.155.159.216:63848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK-LIv3RhPI65jTFG4X1gAAA10"]
[Sat Aug 29 05:10:36.749149 2026] [security2:error] [pid 11274:tid 11523] [client 20.220.204.93:63606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.conversationswithcarmen.com"] [uri "/R57.php"] [unique_id "apK-LGbX5DA3XO6e_qQinwAAAVg"]
[Sat Aug 29 05:10:36.759694 2026] [security2:error] [pid 11274:tid 11474] [client 158.158.54.35:10160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/ioxi-o.php"] [unique_id "apK-LGbX5DA3XO6e_qQioAAAASg"]
[Sat Aug 29 05:10:36.768686 2026] [security2:error] [pid 11274:tid 11485] [client 40.83.93.50:16067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/meta.php"] [unique_id "apK-LGbX5DA3XO6e_qQioQAAATI"]
[Sat Aug 29 05:10:36.779374 2026] [security2:error] [pid 11274:tid 11535] [client 20.48.160.90:64563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/drykl.php"] [unique_id "apK-LGbX5DA3XO6e_qQiogAAAWQ"]
[Sat Aug 29 05:10:36.803163 2026] [security2:error] [pid 1041789:tid 1041879] [remote 74.7.227.154:54326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK-LIv3RhPI65jTFG4X2gADY00"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwp-easycart%2Finc%2Faws%2FAws%2FIdentityStore%2FException
[Sat Aug 29 05:10:36.812224 2026] [security2:error] [pid 1041789:tid 1042043] [client 68.155.159.216:33518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-blog-header.php"] [unique_id "apK-LIv3RhPI65jTFG4X2wAAA44"]
[Sat Aug 29 05:10:36.841951 2026] [security2:error] [pid 11274:tid 11498] [client 20.48.160.90:61008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-LGbX5DA3XO6e_qQiowAAAT8"]
[Sat Aug 29 05:10:36.851887 2026] [security2:error] [pid 11274:tid 11492] [client 20.48.160.90:51850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/key.php"] [unique_id "apK-LGbX5DA3XO6e_qQipAAAATk"]
[Sat Aug 29 05:10:36.880844 2026] [security2:error] [pid 11274:tid 11537] [client 20.151.200.44:21763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/uuu.php"] [unique_id "apK-LGbX5DA3XO6e_qQipwAAAWY"]
[Sat Aug 29 05:10:36.898179 2026] [security2:error] [pid 1041789:tid 1041979] [client 158.23.147.79:24539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-LIv3RhPI65jTFG4X3QAAA04"]
[Sat Aug 29 05:10:36.915078 2026] [access_compat:error] [pid 1041789:tid 1042031] [client 67.20.76.220:12726] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:10:36.917753 2026] [security2:error] [pid 11274:tid 11525] [client 93.123.109.228:47252] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/etc/boto.cfg"] [unique_id "apK-LGbX5DA3XO6e_qQiqQAAAVo"]
[Sat Aug 29 05:10:36.925179 2026] [security2:error] [pid 1321:tid 1561] [client 20.48.160.90:64577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/backup.php"] [unique_id "apK-LGjCPtor9NZ-byToigAABoQ"]
[Sat Aug 29 05:10:36.934151 2026] [security2:error] [pid 11274:tid 11543] [client 68.155.159.216:38572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/nf_tracking.php"] [unique_id "apK-LGbX5DA3XO6e_qQiqwAAAWs"]
[Sat Aug 29 05:10:36.937006 2026] [security2:error] [pid 1041789:tid 1042055] [client 68.155.159.216:6075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/images/index.php"] [unique_id "apK-LIv3RhPI65jTFG4X4QAAA5o"]
[Sat Aug 29 05:10:36.953564 2026] [security2:error] [pid 11274:tid 11500] [client 20.104.68.135:15044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.midatlanticpartyrentals.com"] [uri "/wp-content/themes/fitnessbase/404.php"] [unique_id "apK-LGbX5DA3XO6e_qQirQAAAUE"]
[Sat Aug 29 05:10:36.953576 2026] [security2:error] [pid 11274:tid 11536] [client 20.63.219.114:17970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/configs.php"] [unique_id "apK-LGbX5DA3XO6e_qQirAAAAWU"]
[Sat Aug 29 05:10:36.972909 2026] [security2:error] [pid 11274:tid 11556] [client 20.48.160.90:65312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/ap.php"] [unique_id "apK-LGbX5DA3XO6e_qQirgAAAXg"]
[Sat Aug 29 05:10:36.983877 2026] [security2:error] [pid 1041789:tid 1042035] [client 93.123.109.228:47736] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/fe/.env"] [unique_id "apK-LIv3RhPI65jTFG4X5QAAA4Y"]
[Sat Aug 29 05:10:37.047803 2026] [security2:error] [pid 1041789:tid 1041977] [client 74.248.24.12:15963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/xda.php"] [unique_id "apK-LYv3RhPI65jTFG4X5gAAA0w"]
[Sat Aug 29 05:10:37.051413 2026] [security2:error] [pid 1041789:tid 1042014] [client 20.52.41.200:2861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-mail.php"] [unique_id "apK-LYv3RhPI65jTFG4X5wAAA3E"]
[Sat Aug 29 05:10:37.055113 2026] [security2:error] [pid 1041789:tid 1042006] [client 93.123.109.228:47498] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/front/.env"] [unique_id "apK-LYv3RhPI65jTFG4X6AAAA2k"]
[Sat Aug 29 05:10:37.060480 2026] [security2:error] [pid 11274:tid 11487] [client 20.48.160.90:51890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/chosen.php"] [unique_id "apK-LWbX5DA3XO6e_qQisAAAATQ"]
[Sat Aug 29 05:10:37.071958 2026] [security2:error] [pid 1041789:tid 1042007] [client 40.83.93.50:11596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/content.php"] [unique_id "apK-LYv3RhPI65jTFG4X6QAAA2o"]
[Sat Aug 29 05:10:37.086743 2026] [security2:error] [pid 1321:tid 1556] [client 158.158.54.35:33368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/bthil.php"] [unique_id "apK-LWjCPtor9NZ-byTojgAABn8"]
[Sat Aug 29 05:10:37.112064 2026] [security2:error] [pid 1041789:tid 1042041] [client 20.104.49.130:48616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/srontol.php"] [unique_id "apK-LYv3RhPI65jTFG4X6wAAA4w"]
[Sat Aug 29 05:10:37.114555 2026] [security2:error] [pid 11274:tid 11540] [client 20.48.160.90:61003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/media.php"] [unique_id "apK-LWbX5DA3XO6e_qQivgAAAWk"]
[Sat Aug 29 05:10:37.138937 2026] [security2:error] [pid 11274:tid 11551] [client 20.48.160.90:63461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/indo.php"] [unique_id "apK-LWbX5DA3XO6e_qQivwAAAXM"]
[Sat Aug 29 05:10:37.151127 2026] [security2:error] [pid 1041789:tid 1041960] [client 20.104.68.135:15059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.midatlanticpartyrentals.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK-LYv3RhPI65jTFG4X7QAAAzs"]
[Sat Aug 29 05:10:37.164866 2026] [security2:error] [pid 1321:tid 1614] [client 34.169.171.101:11388] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "forensicengineernj.com"] [uri "/app/config.json"] [unique_id "apK-LWjCPtor9NZ-byTokQAABrk"]
[Sat Aug 29 05:10:37.175432 2026] [security2:error] [pid 11274:tid 11448] [client 34.169.171.101:11458] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "forensicengineernj.com"] [uri "/deploy/service-account.json"] [unique_id "apK-LWbX5DA3XO6e_qQiygAAAQ4"]
[Sat Aug 29 05:10:37.206367 2026] [security2:error] [pid 11274:tid 11569] [client 158.23.147.79:63260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/dropdown.php"] [unique_id "apK-LWbX5DA3XO6e_qQizgAAAYU"]
[Sat Aug 29 05:10:37.212084 2026] [security2:error] [pid 11274:tid 11457] [client 20.48.160.90:28067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/file1221.php"] [unique_id "apK-LWbX5DA3XO6e_qQi0AAAARc"]
[Sat Aug 29 05:10:37.216108 2026] [security2:error] [pid 1041789:tid 1041981] [client 158.158.54.35:33165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/xmlrpc.php"] [unique_id "apK-LYv3RhPI65jTFG4YAAAAA1A"]
[Sat Aug 29 05:10:37.218875 2026] [security2:error] [pid 11274:tid 11458] [client 20.104.49.130:52539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/wp-css.php"] [unique_id "apK-LWbX5DA3XO6e_qQi0QAAARg"]
[Sat Aug 29 05:10:37.219916 2026] [security2:error] [pid 11274:tid 11444] [client 20.104.104.62:40234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/1n73ct10n.php"] [unique_id "apK-LWbX5DA3XO6e_qQi0gAAAQo"]
[Sat Aug 29 05:10:37.250793 2026] [security2:error] [pid 11274:tid 11524] [client 93.123.109.228:47252] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/frontend/.env"] [unique_id "apK-LWbX5DA3XO6e_qQi1gAAAVk"]
[Sat Aug 29 05:10:37.255400 2026] [security2:error] [pid 1321:tid 1510] [client 93.123.109.228:47728] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/erp/.env"] [unique_id "apK-LWjCPtor9NZ-byTomwAABlI"]
[Sat Aug 29 05:10:37.256861 2026] [security2:error] [pid 1321:tid 1506] [client 68.155.159.216:65128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wzy.php"] [unique_id "apK-LWjCPtor9NZ-byTonAAABk4"]
[Sat Aug 29 05:10:37.259704 2026] [security2:error] [pid 11274:tid 11480] [client 20.48.160.90:63301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/adminfuns.php"] [unique_id "apK-LWbX5DA3XO6e_qQi2AAAAS0"]
[Sat Aug 29 05:10:37.265135 2026] [security2:error] [pid 1041789:tid 1041949] [client 40.83.93.50:16075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/dxc.php"] [unique_id "apK-LYv3RhPI65jTFG4YBQAAAzA"]
[Sat Aug 29 05:10:37.272299 2026] [security2:error] [pid 1041789:tid 1041939] [client 158.23.147.79:64078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/goat.php"] [unique_id "apK-LYv3RhPI65jTFG4YBgAAAyY"]
[Sat Aug 29 05:10:37.274798 2026] [security2:error] [pid 11274:tid 11488] [client 20.48.160.90:63386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/sign.php"] [unique_id "apK-LWbX5DA3XO6e_qQi2gAAATU"]
[Sat Aug 29 05:10:37.309436 2026] [security2:error] [pid 1041789:tid 1042044] [client 68.155.159.216:30647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK-LYv3RhPI65jTFG4YCQAAA48"]
[Sat Aug 29 05:10:37.347303 2026] [security2:error] [pid 1041789:tid 1041979] [client 20.104.68.135:4747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.midatlanticpartyrentals.com"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "apK-LYv3RhPI65jTFG4YCgAAA04"]
[Sat Aug 29 05:10:37.348746 2026] [security2:error] [pid 1041789:tid 1041942] [client 111.235.68.106:65019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK-LYv3RhPI65jTFG4YCwAAAyk"]
[Sat Aug 29 05:10:37.348869 2026] [security2:error] [pid 1041789:tid 1041942] [client 111.235.68.106:65019] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK-LYv3RhPI65jTFG4YCwAAAyk"]
[Sat Aug 29 05:10:37.358247 2026] [security2:error] [pid 11274:tid 11471] [client 68.155.159.216:2010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/content.php"] [unique_id "apK-LWbX5DA3XO6e_qQi4QAAASU"]
[Sat Aug 29 05:10:37.389382 2026] [proxy_http:error] [pid 1028675:tid 1028830] (70007)The timeout specified has expired: [client 127.0.0.1:20026] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:10:37.389400 2026] [proxy:error] [pid 1028675:tid 1028830] [client 127.0.0.1:20026] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:10:37.416177 2026] [security2:error] [pid 1041789:tid 1042014] [client 20.48.160.90:64558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/wnnjpsby.php"] [unique_id "apK-LYv3RhPI65jTFG4YDgAAA3E"]
[Sat Aug 29 05:10:37.424637 2026] [security2:error] [pid 1041789:tid 1042006] [client 20.48.160.90:64187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/classwithtostring.php"] [unique_id "apK-LYv3RhPI65jTFG4YDwAAA2k"]
[Sat Aug 29 05:10:37.426463 2026] [security2:error] [pid 11274:tid 11451] [client 20.63.219.114:18318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/disagraeed.php"] [unique_id "apK-LWbX5DA3XO6e_qQi4wAAARE"]
[Sat Aug 29 05:10:37.428426 2026] [security2:error] [pid 1041789:tid 1041945] [client 20.48.160.90:51933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/nox.php"] [unique_id "apK-LYv3RhPI65jTFG4YEAAAAyw"]
[Sat Aug 29 05:10:37.439112 2026] [security2:error] [pid 1321:tid 1512] [client 93.123.109.228:47442] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/etc/apache2/apache2.conf"] [unique_id "apK-LWjCPtor9NZ-byTooQAABlQ"]
[Sat Aug 29 05:10:37.448201 2026] [security2:error] [pid 1321:tid 1583] [client 93.123.109.228:47534] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/back-end/.env"] [unique_id "apK-LWjCPtor9NZ-byToowAABpo"]
[Sat Aug 29 05:10:37.454851 2026] [security2:error] [pid 1041789:tid 1041947] [client 93.123.109.228:47506] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/backend-api/.env"] [unique_id "apK-LYv3RhPI65jTFG4YEgAAAy4"]
[Sat Aug 29 05:10:37.456266 2026] [security2:error] [pid 1041789:tid 1041931] [client 4.205.62.107:51510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/fun.php"] [unique_id "apK-LYv3RhPI65jTFG4YEwAAAx4"]
[Sat Aug 29 05:10:37.473968 2026] [security2:error] [pid 1321:tid 1557] [client 93.123.109.228:47542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/back/.env"] [unique_id "apK-LWjCPtor9NZ-byTopAAABoA"]
[Sat Aug 29 05:10:37.506096 2026] [security2:error] [pid 1041789:tid 1041988] [client 20.52.41.200:2654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-content.php"] [unique_id "apK-LYv3RhPI65jTFG4YFAAAA1c"]
[Sat Aug 29 05:10:37.509206 2026] [security2:error] [pid 1321:tid 1499] [client 4.205.62.107:60349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/god.php"] [unique_id "apK-LWjCPtor9NZ-byTopQAABkc"]
[Sat Aug 29 05:10:37.509326 2026] [security2:error] [pid 1321:tid 1490] [client 216.244.66.250:52390] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.therivertownboys.com"] [uri "/evergreenfwb/media/video/flirt-sites-mayapusi/"] [unique_id "apK-LWjCPtor9NZ-byTopgAABj4"]
[Sat Aug 29 05:10:37.509425 2026] [security2:error] [pid 1321:tid 1490] [client 216.244.66.250:52390] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.therivertownboys.com"] [uri "/evergreenfwb/media/video/flirt-sites-mayapusi/"] [unique_id "apK-LWjCPtor9NZ-byTopgAABj4"]
[Sat Aug 29 05:10:37.534394 2026] [security2:error] [pid 1321:tid 1571] [client 93.123.109.228:47728] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/fe/.env"] [unique_id "apK-LWjCPtor9NZ-byTopwAABo4"]
[Sat Aug 29 05:10:37.539643 2026] [security2:error] [pid 1321:tid 1586] [client 20.104.49.130:36312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "coveryourauto.com"] [uri "/ano.php"] [unique_id "apK-LWjCPtor9NZ-byToqAAABp0"]
[Sat Aug 29 05:10:37.541768 2026] [security2:error] [pid 1321:tid 1602] [client 20.104.68.135:17968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.midatlanticpartyrentals.com"] [uri "/wp-content/uploads/de_fb_uploads/b.php"] [unique_id "apK-LWjCPtor9NZ-byToqQAABq0"]
[Sat Aug 29 05:10:37.545223 2026] [security2:error] [pid 11274:tid 11502] [client 68.155.159.216:38704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/file17.php"] [unique_id "apK-LWbX5DA3XO6e_qQi6gAAAUM"]
[Sat Aug 29 05:10:37.554042 2026] [security2:error] [pid 1041789:tid 1042017] [client 93.123.109.228:47356] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/etc/boto.cfg"] [unique_id "apK-LYv3RhPI65jTFG4YFgAAA3Q"]
[Sat Aug 29 05:10:37.557509 2026] [security2:error] [pid 11274:tid 11513] [client 158.23.147.79:58105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK-LWbX5DA3XO6e_qQi7AAAAU4"]
[Sat Aug 29 05:10:37.557872 2026] [security2:error] [pid 1321:tid 1513] [client 93.123.109.228:47562] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/back-api/.env"] [unique_id "apK-LWjCPtor9NZ-byToqgAABlU"]
[Sat Aug 29 05:10:37.565510 2026] [security2:error] [pid 1321:tid 1529] [client 93.123.109.228:47590] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK-LWjCPtor9NZ-byTorAAABmU"]
[Sat Aug 29 05:10:37.567889 2026] [security2:error] [pid 11274:tid 11486] [client 20.48.160.90:63403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/gigi.php"] [unique_id "apK-LWbX5DA3XO6e_qQi7wAAATM"]
[Sat Aug 29 05:10:37.572213 2026] [security2:error] [pid 11274:tid 11512] [client 20.48.160.90:64168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK-LWbX5DA3XO6e_qQi8AAAAU0"]
[Sat Aug 29 05:10:37.576441 2026] [security2:error] [pid 11274:tid 11490] [client 20.104.104.62:47587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/not_acceptable.php"] [unique_id "apK-LWbX5DA3XO6e_qQi8QAAATc"]
[Sat Aug 29 05:10:37.581469 2026] [security2:error] [pid 1041789:tid 1041969] [client 74.248.24.12:10994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/theme.php"] [unique_id "apK-LYv3RhPI65jTFG4YFwAAA0Q"]
[Sat Aug 29 05:10:37.582101 2026] [security2:error] [pid 11274:tid 11455] [client 20.48.160.90:51917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/akismet.php"] [unique_id "apK-LWbX5DA3XO6e_qQi8gAAARU"]
[Sat Aug 29 05:10:37.609819 2026] [security2:error] [pid 11274:tid 11559] [client 103.215.74.26:50470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.74.215.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "kglogisticsinc.com"] [uri "/register"] [unique_id "apK-LWbX5DA3XO6e_qQi8wAAAXs"]
[Sat Aug 29 05:10:37.648949 2026] [security2:error] [pid 11274:tid 11559] [client 103.215.74.26:50470] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "160"] [id "900408"] [msg "register POST logging"] [data "409"] [hostname "kglogisticsinc.com"] [uri "/register"] [unique_id "apK-LWbX5DA3XO6e_qQi8wAAAXs"]
[Sat Aug 29 05:10:37.666235 2026] [security2:error] [pid 1041789:tid 1041950] [client 158.158.54.35:22978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/filemanager.php"] [unique_id "apK-LYv3RhPI65jTFG4YGAAAAzE"]
[Sat Aug 29 05:10:37.670885 2026] [security2:error] [pid 11274:tid 11520] [client 4.205.62.107:64953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/ammika.php"] [unique_id "apK-LWbX5DA3XO6e_qQi9gAAAVU"]
[Sat Aug 29 05:10:37.676155 2026] [security2:error] [pid 1321:tid 1523] [client 158.23.147.79:11364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/bk/index.php"] [unique_id "apK-LWjCPtor9NZ-byTosAAABl8"]
[Sat Aug 29 05:10:37.688295 2026] [security2:error] [pid 11274:tid 11523] [client 158.158.54.35:11600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/cv.php"] [unique_id "apK-LWbX5DA3XO6e_qQi9wAAAVg"]
[Sat Aug 29 05:10:37.693728 2026] [security2:error] [pid 11274:tid 11474] [client 20.151.200.44:21808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/private.php"] [unique_id "apK-LWbX5DA3XO6e_qQi-AAAASg"]
[Sat Aug 29 05:10:37.700109 2026] [security2:error] [pid 11274:tid 11485] [client 4.205.62.107:6484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/sdsa.php"] [unique_id "apK-LWbX5DA3XO6e_qQi-QAAATI"]
[Sat Aug 29 05:10:37.705606 2026] [security2:error] [pid 11274:tid 11509] [client 20.48.160.90:63283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/5PJcpMFsD8B.php"] [unique_id "apK-LWbX5DA3XO6e_qQi-gAAAUo"]
[Sat Aug 29 05:10:37.715020 2026] [security2:error] [pid 11274:tid 11494] [client 20.48.160.90:63384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/info.php/new.php"] [unique_id "apK-LWbX5DA3XO6e_qQi_AAAATs"]
[Sat Aug 29 05:10:37.717215 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.48.160.90:51904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/ajax.php"] [unique_id "apK-LYv3RhPI65jTFG4YGQAAA30"]
[Sat Aug 29 05:10:37.740569 2026] [security2:error] [pid 1321:tid 1491] [client 20.104.68.135:20757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.midatlanticpartyrentals.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK-LWjCPtor9NZ-byTotAAABj8"]
[Sat Aug 29 05:10:37.748943 2026] [security2:error] [pid 1321:tid 1528] [client 40.83.93.50:6567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/wp-2019.php"] [unique_id "apK-LWjCPtor9NZ-byTotQAABmQ"]
[Sat Aug 29 05:10:37.782604 2026] [security2:error] [pid 11274:tid 11538] [client 68.155.159.216:56712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK-LWbX5DA3XO6e_qQi_gAAAWc"]
[Sat Aug 29 05:10:37.793225 2026] [security2:error] [pid 1321:tid 1606] [client 20.63.219.114:1937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/add_actualites.php"] [unique_id "apK-LWjCPtor9NZ-byTotwAABrE"]
[Sat Aug 29 05:10:37.801890 2026] [security2:error] [pid 1041789:tid 1041935] [client 93.123.109.228:47498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/info.php"] [unique_id "apK-LYv3RhPI65jTFG4YGwAAAyI"]
[Sat Aug 29 05:10:37.838190 2026] [security2:error] [pid 1321:tid 1530] [client 20.48.160.90:65281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK-LWjCPtor9NZ-byTouQAABmY"]
[Sat Aug 29 05:10:37.847738 2026] [security2:error] [pid 11274:tid 11536] [client 4.205.62.107:61736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/g3.php"] [unique_id "apK-LWbX5DA3XO6e_qQjAAAAAWU"]
[Sat Aug 29 05:10:37.852277 2026] [security2:error] [pid 11274:tid 11525] [client 68.155.159.216:65087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/goat1.php"] [unique_id "apK-LWbX5DA3XO6e_qQjAQAAAVo"]
[Sat Aug 29 05:10:37.870808 2026] [security2:error] [pid 1321:tid 1535] [client 93.123.109.228:47294] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/front/.env"] [unique_id "apK-LWjCPtor9NZ-byTovAAABms"]
[Sat Aug 29 05:10:37.887506 2026] [security2:error] [pid 1321:tid 1613] [client 40.83.93.50:12572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/wxo.php"] [unique_id "apK-LWjCPtor9NZ-byTovwAABrg"]
[Sat Aug 29 05:10:37.896941 2026] [security2:error] [pid 1041789:tid 1041971] [client 20.104.49.130:58204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/ab.php"] [unique_id "apK-LYv3RhPI65jTFG4YHgAAA0Y"]
[Sat Aug 29 05:10:37.910820 2026] [security2:error] [pid 11274:tid 11517] [client 93.123.109.228:47342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/infophp.php"] [unique_id "apK-LWbX5DA3XO6e_qQjAwAAAVI"]
[Sat Aug 29 05:10:37.917965 2026] [security2:error] [pid 1321:tid 1517] [client 20.48.160.90:51957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/atomlib.php"] [unique_id "apK-LWjCPtor9NZ-byTowQAABlk"]
[Sat Aug 29 05:10:37.934668 2026] [security2:error] [pid 11274:tid 11460] [client 60.243.207.176:61929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK-LWbX5DA3XO6e_qQjBQAAARo"]
[Sat Aug 29 05:10:37.934809 2026] [security2:error] [pid 11274:tid 11460] [client 60.243.207.176:61929] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK-LWbX5DA3XO6e_qQjBQAAARo"]
[Sat Aug 29 05:10:37.938838 2026] [security2:error] [pid 1041789:tid 1042025] [client 20.104.68.135:15058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.midatlanticpartyrentals.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK-LYv3RhPI65jTFG4YHwAAA3w"]
[Sat Aug 29 05:10:37.945912 2026] [security2:error] [pid 1041789:tid 1041940] [client 93.123.109.228:47736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/infos.php"] [unique_id "apK-LYv3RhPI65jTFG4YIAAAAyc"]
[Sat Aug 29 05:10:37.956235 2026] [security2:error] [pid 11274:tid 11566] [client 68.155.159.216:33624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK-LWbX5DA3XO6e_qQjBwAAAYI"]
[Sat Aug 29 05:10:37.966764 2026] [security2:error] [pid 1041789:tid 1042028] [client 20.52.41.200:2864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "apK-LYv3RhPI65jTFG4YIQAAA38"]
[Sat Aug 29 05:10:37.968629 2026] [security2:error] [pid 1041789:tid 1041979] [client 20.48.160.90:65366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/wsd.php"] [unique_id "apK-LYv3RhPI65jTFG4YIgAAA04"]
[Sat Aug 29 05:10:37.993592 2026] [security2:error] [pid 1321:tid 1563] [client 93.123.109.228:47518] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/frontend/.env"] [unique_id "apK-LWjCPtor9NZ-byToxAAABoY"]
[Sat Aug 29 05:10:38.003915 2026] [security2:error] [pid 1041789:tid 1041977] [client 20.104.104.62:40216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/dada.php"] [unique_id "apK-Lov3RhPI65jTFG4YJAAAA0w"]
[Sat Aug 29 05:10:38.037369 2026] [security2:error] [pid 1321:tid 1595] [client 68.155.159.216:61264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wzy.php"] [unique_id "apK-LmjCPtor9NZ-byToxwAABqY"]
[Sat Aug 29 05:10:38.046132 2026] [security2:error] [pid 11274:tid 11558] [client 68.155.159.216:14184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-admin/images/about.php"] [unique_id "apK-LmbX5DA3XO6e_qQjDAAAAXo"]
[Sat Aug 29 05:10:38.072904 2026] [security2:error] [pid 1321:tid 1558] [client 158.23.147.79:24449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK-LmjCPtor9NZ-byToygAABoE"]
[Sat Aug 29 05:10:38.109346 2026] [security2:error] [pid 11274:tid 11518] [client 74.248.24.12:6670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/classwithtostring.php"] [unique_id "apK-LmbX5DA3XO6e_qQjDQAAAVM"]
[Sat Aug 29 05:10:38.112739 2026] [security2:error] [pid 1321:tid 1501] [client 158.158.54.35:10133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-content/themes/admin.php"] [unique_id "apK-LmjCPtor9NZ-byTozQAABkk"]
[Sat Aug 29 05:10:38.134913 2026] [security2:error] [pid 1041789:tid 1041947] [client 20.104.68.135:15082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.midatlanticpartyrentals.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "apK-Lov3RhPI65jTFG4YKQAAAy4"]
[Sat Aug 29 05:10:38.136242 2026] [security2:error] [pid 1041789:tid 1042041] [client 20.48.160.90:28047] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "amandaandderek.strangeworx.com"] [uri "/1.php"] [unique_id "apK-Lov3RhPI65jTFG4YKgAAA4w"]
[Sat Aug 29 05:10:38.136328 2026] [security2:error] [pid 1041789:tid 1042041] [client 20.48.160.90:28047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/1.php"] [unique_id "apK-Lov3RhPI65jTFG4YKgAAA4w"]
[Sat Aug 29 05:10:38.144199 2026] [security2:error] [pid 11274:tid 11482] [client 158.158.54.35:31915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-content/packed.php"] [unique_id "apK-LmbX5DA3XO6e_qQjDgAAAS8"]
[Sat Aug 29 05:10:38.165230 2026] [security2:error] [pid 1321:tid 1504] [client 93.123.109.228:47542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/backup/.env"] [unique_id "apK-LmjCPtor9NZ-byTozgAABkw"]
[Sat Aug 29 05:10:38.166491 2026] [security2:error] [pid 1321:tid 1536] [client 93.123.109.228:47786] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/laravel/.env"] [unique_id "apK-LmjCPtor9NZ-byTozwAABmw"]
[Sat Aug 29 05:10:38.184408 2026] [security2:error] [pid 1041789:tid 1042017] [client 20.48.160.90:65281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/bulet.php"] [unique_id "apK-Lov3RhPI65jTFG4YLAAAA3Q"]
[Sat Aug 29 05:10:38.199585 2026] [security2:error] [pid 1321:tid 1538] [client 93.123.109.228:47590] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/be/.env"] [unique_id "apK-LmjCPtor9NZ-byTo0AAABm4"]
[Sat Aug 29 05:10:38.204009 2026] [security2:error] [pid 1041789:tid 1041982] [client 20.63.219.114:1981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/alfanew.php7"] [unique_id "apK-Lov3RhPI65jTFG4YLQAAA1E"]
[Sat Aug 29 05:10:38.206323 2026] [security2:error] [pid 1321:tid 1497] [client 93.123.109.228:47562] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/beta/.env"] [unique_id "apK-LmjCPtor9NZ-byTo0QAABkU"]
[Sat Aug 29 05:10:38.284747 2026] [security2:error] [pid 1321:tid 1553] [client 68.155.159.216:5965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK-LmjCPtor9NZ-byTo1gAABnw"]
[Sat Aug 29 05:10:38.287450 2026] [security2:error] [pid 1321:tid 1616] [client 20.104.49.130:51134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/crgio.php"] [unique_id "apK-LmjCPtor9NZ-byTo1wAABrs"]
[Sat Aug 29 05:10:38.304378 2026] [security2:error] [pid 11274:tid 11524] [client 158.23.147.79:62744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/sad/about.php"] [unique_id "apK-LmbX5DA3XO6e_qQjFAAAAVk"]
[Sat Aug 29 05:10:38.314040 2026] [security2:error] [pid 1321:tid 1584] [client 93.123.109.228:47294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/info.php"] [unique_id "apK-LmjCPtor9NZ-byTo2AAABps"]
[Sat Aug 29 05:10:38.329757 2026] [security2:error] [pid 11274:tid 11561] [client 20.48.160.90:65321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/av.php"] [unique_id "apK-LmbX5DA3XO6e_qQjFQAAAX0"]
[Sat Aug 29 05:10:38.339350 2026] [security2:error] [pid 1041789:tid 1042030] [client 40.83.93.50:6634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/menu.php"] [unique_id "apK-Lov3RhPI65jTFG4YNQAAA4E"]
[Sat Aug 29 05:10:38.358735 2026] [security2:error] [pid 1041789:tid 1041991] [client 20.48.160.90:51854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/samll.php"] [unique_id "apK-Lov3RhPI65jTFG4YNgAAA1o"]
[Sat Aug 29 05:10:38.368446 2026] [security2:error] [pid 1041789:tid 1041981] [client 158.23.147.79:5837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK-Lov3RhPI65jTFG4YNwAAA1A"]
[Sat Aug 29 05:10:38.372979 2026] [security2:error] [pid 1321:tid 1495] [client 93.123.109.228:47728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/infophp.php"] [unique_id "apK-LmjCPtor9NZ-byTo3AAABkM"]
[Sat Aug 29 05:10:38.373595 2026] [security2:error] [pid 1041789:tid 1041964] [client 40.83.93.50:11609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/as.php"] [unique_id "apK-Lov3RhPI65jTFG4YOQAAAz8"]
[Sat Aug 29 05:10:38.378774 2026] [security2:error] [pid 1321:tid 1545] [client 68.155.159.216:65132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK-LmjCPtor9NZ-byTo3QAABnU"]
[Sat Aug 29 05:10:38.393851 2026] [security2:error] [pid 11274:tid 11526] [client 34.50.189.51:56074] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "discocollective.kriveloff-associates.com"] [uri "/cgi-sys/404.html"] [unique_id "apK-LmbX5DA3XO6e_qQjGgAAAVs"]
[Sat Aug 29 05:10:38.396893 2026] [security2:error] [pid 11274:tid 11545] [client 202.71.25.11:61518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.25.71.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK-LmbX5DA3XO6e_qQjHgAAAW0"]
[Sat Aug 29 05:10:38.397018 2026] [security2:error] [pid 11274:tid 11545] [client 202.71.25.11:61518] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK-LmbX5DA3XO6e_qQjHgAAAW0"]
[Sat Aug 29 05:10:38.399882 2026] [security2:error] [pid 11274:tid 11473] [client 34.50.189.51:56048] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "discocollective.kriveloff-associates.com"] [uri "/cgi-sys/404.html"] [unique_id "apK-LmbX5DA3XO6e_qQjIAAAASc"]
[Sat Aug 29 05:10:38.412372 2026] [security2:error] [pid 1321:tid 1542] [client 34.169.171.101:11602] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-LWjCPtor9NZ-byTokwAABnI"]
[Sat Aug 29 05:10:38.414712 2026] [security2:error] [pid 11274:tid 11501] [client 68.155.159.216:30576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK-LmbX5DA3XO6e_qQjJAAAAUI"]
[Sat Aug 29 05:10:38.414896 2026] [security2:error] [pid 1321:tid 1542] [client 20.104.68.135:15060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.midatlanticpartyrentals.com"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "apK-LmjCPtor9NZ-byTo4wAABnI"]
[Sat Aug 29 05:10:38.424077 2026] [security2:error] [pid 1321:tid 1488] [client 20.52.41.200:2199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/css/wp-login.php"] [unique_id "apK-LmjCPtor9NZ-byTo5QAABjw"]
[Sat Aug 29 05:10:38.432494 2026] [security2:error] [pid 1321:tid 1500] [client 68.155.159.216:62793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/.well-known/index.php"] [unique_id "apK-LmjCPtor9NZ-byTo5gAABkg"]
[Sat Aug 29 05:10:38.451562 2026] [security2:error] [pid 1321:tid 1503] [client 34.169.171.101:11602] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-LmjCPtor9NZ-byTo6AAABks"], referer: https://forensicengineernj.com/instance/config.py
[Sat Aug 29 05:10:38.467733 2026] [security2:error] [pid 1041789:tid 1042028] [client 68.155.159.216:1901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK-Lov3RhPI65jTFG4YPwAAA38"]
[Sat Aug 29 05:10:38.476470 2026] [security2:error] [pid 1321:tid 1556] [client 20.48.160.90:63238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/images.php"] [unique_id "apK-LmjCPtor9NZ-byTo6wAABn8"]
[Sat Aug 29 05:10:38.477870 2026] [security2:error] [pid 1041789:tid 1041957] [client 20.104.104.62:20889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/0x1337.php"] [unique_id "apK-Lov3RhPI65jTFG4YQAAAAzg"]
[Sat Aug 29 05:10:38.499893 2026] [security2:error] [pid 11274:tid 11470] [client 20.151.200.44:21929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/lfi.php"] [unique_id "apK-LmbX5DA3XO6e_qQjKAAAASQ"]
[Sat Aug 29 05:10:38.501399 2026] [security2:error] [pid 1041789:tid 1041977] [client 93.123.109.228:47356] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/laravel/.env"] [unique_id "apK-Lov3RhPI65jTFG4YQwAAA0w"]
[Sat Aug 29 05:10:38.526113 2026] [security2:error] [pid 1041789:tid 1041945] [client 20.48.160.90:28074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/she11.php"] [unique_id "apK-Lov3RhPI65jTFG4YRQAAAyw"]
[Sat Aug 29 05:10:38.559703 2026] [security2:error] [pid 1041789:tid 1041939] [client 158.158.54.35:23005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-admin/css/admin.php"] [unique_id "apK-Lov3RhPI65jTFG4YRwAAAyY"]
[Sat Aug 29 05:10:38.585740 2026] [security2:error] [pid 1041789:tid 1041863] [remote 74.7.227.154:54326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK-Lov3RhPI65jTFG4YSAADaj0"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwp-easycart%2Fadmin%2Ftemplate%2Fproducts%2Fcategories
[Sat Aug 29 05:10:38.594901 2026] [security2:error] [pid 1321:tid 1549] [client 158.158.54.35:16216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-admin/js/index.php"] [unique_id "apK-LmjCPtor9NZ-byTo7wAABng"]
[Sat Aug 29 05:10:38.595226 2026] [security2:error] [pid 11274:tid 11502] [client 4.205.62.107:51408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/bb.php"] [unique_id "apK-LmbX5DA3XO6e_qQjLQAAAUM"]
[Sat Aug 29 05:10:38.597880 2026] [security2:error] [pid 1041789:tid 1042025] [client 20.63.219.114:1997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/xmlrpc.php0"] [unique_id "apK-Lov3RhPI65jTFG4YSgAAA3w"]
[Sat Aug 29 05:10:38.619502 2026] [security2:error] [pid 1041789:tid 1041961] [client 20.104.68.135:4799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.midatlanticpartyrentals.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-Lov3RhPI65jTFG4YSwAAAzw"]
[Sat Aug 29 05:10:38.622049 2026] [security2:error] [pid 11274:tid 11463] [client 61.9.8.69:19475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK-LmbX5DA3XO6e_qQjLAAAAR0"]
[Sat Aug 29 05:10:38.622161 2026] [security2:error] [pid 11274:tid 11463] [client 61.9.8.69:19475] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK-LmbX5DA3XO6e_qQjLAAAAR0"]
[Sat Aug 29 05:10:38.630409 2026] [security2:error] [pid 1041789:tid 1041940] [client 74.248.24.12:4361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/news.php"] [unique_id "apK-Lov3RhPI65jTFG4YTAAAAyc"]
[Sat Aug 29 05:10:38.649446 2026] [security2:error] [pid 1321:tid 1506] [client 4.205.62.107:62775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/fff.php"] [unique_id "apK-LmjCPtor9NZ-byTo8QAABk4"]
[Sat Aug 29 05:10:38.652506 2026] [security2:error] [pid 1321:tid 1555] [client 20.48.160.90:64228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/ops.php"] [unique_id "apK-LmjCPtor9NZ-byTo8gAABn4"]
[Sat Aug 29 05:10:38.664083 2026] [security2:error] [pid 11274:tid 11475] [client 158.23.147.79:63861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-admin/images/about.php"] [unique_id "apK-LmbX5DA3XO6e_qQjLgAAASk"]
[Sat Aug 29 05:10:38.671748 2026] [security2:error] [pid 1321:tid 1521] [client 93.123.109.228:47442] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/lms/.env"] [unique_id "apK-LmjCPtor9NZ-byTo8wAABl0"]
[Sat Aug 29 05:10:38.676872 2026] [security2:error] [pid 11274:tid 11503] [client 158.23.147.79:63290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK-LmbX5DA3XO6e_qQjLwAAAUQ"]
[Sat Aug 29 05:10:38.678436 2026] [security2:error] [pid 11274:tid 11486] [client 20.48.160.90:51843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/kerang.php"] [unique_id "apK-LmbX5DA3XO6e_qQjMAAAATM"]
[Sat Aug 29 05:10:38.691230 2026] [security2:error] [pid 1321:tid 1578] [client 93.123.109.228:47518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/infos.php"] [unique_id "apK-LmjCPtor9NZ-byTo9QAABpU"]
[Sat Aug 29 05:10:38.710490 2026] [security2:error] [pid 1041789:tid 1041983] [client 20.48.160.90:64587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/w.php"] [unique_id "apK-Lov3RhPI65jTFG4YTgAAA1I"]
[Sat Aug 29 05:10:38.721758 2026] [security2:error] [pid 1321:tid 1577] [client 93.123.109.228:47590] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/client/.env"] [unique_id "apK-LmjCPtor9NZ-byTo9wAABpQ"]
[Sat Aug 29 05:10:38.723987 2026] [security2:error] [pid 1041789:tid 1041992] [client 93.123.109.228:47356] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/local/.env"] [unique_id "apK-Lov3RhPI65jTFG4YTwAAA1s"]
[Sat Aug 29 05:10:38.731785 2026] [security2:error] [pid 1041789:tid 1041978] [client 93.123.109.228:47506] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/cms/.env"] [unique_id "apK-Lov3RhPI65jTFG4YUAAAA00"]
[Sat Aug 29 05:10:38.767611 2026] [security2:error] [pid 11274:tid 11559] [client 20.104.104.62:20858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/xltavrat.php"] [unique_id "apK-LmbX5DA3XO6e_qQjMgAAAXs"]
[Sat Aug 29 05:10:38.786765 2026] [security2:error] [pid 1041789:tid 1041988] [client 197.232.63.170:55695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 170.63.232.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK-Lov3RhPI65jTFG4YUQAAA1c"]
[Sat Aug 29 05:10:38.786879 2026] [security2:error] [pid 1041789:tid 1041988] [client 197.232.63.170:55695] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK-Lov3RhPI65jTFG4YUQAAA1c"]
[Sat Aug 29 05:10:38.801334 2026] [security2:error] [pid 11274:tid 11529] [client 158.23.147.79:11456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.drabigailseaver.com"] [uri "/first.php"] [unique_id "apK-LmbX5DA3XO6e_qQjMwAAAV4"]
[Sat Aug 29 05:10:38.811783 2026] [security2:error] [pid 11274:tid 11523] [client 4.205.62.107:64988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/broadcasting.php"] [unique_id "apK-LmbX5DA3XO6e_qQjNAAAAVg"]
[Sat Aug 29 05:10:38.815788 2026] [security2:error] [pid 11274:tid 11474] [client 20.48.160.90:28106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/m.php"] [unique_id "apK-LmbX5DA3XO6e_qQjNQAAASg"]
[Sat Aug 29 05:10:38.826796 2026] [security2:error] [pid 11274:tid 11513] [client 40.83.93.50:12761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/alfa.php"] [unique_id "apK-LmbX5DA3XO6e_qQjNgAAAU4"]
[Sat Aug 29 05:10:38.830377 2026] [security2:error] [pid 11274:tid 11485] [client 20.48.160.90:65309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/coffexium.php"] [unique_id "apK-LmbX5DA3XO6e_qQjNwAAATI"]
[Sat Aug 29 05:10:38.833052 2026] [security2:error] [pid 11274:tid 11509] [client 4.205.62.107:6967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/sale.php"] [unique_id "apK-LmbX5DA3XO6e_qQjOAAAAUo"]
[Sat Aug 29 05:10:38.845350 2026] [security2:error] [pid 11274:tid 11535] [client 20.48.160.90:63456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/x.php"] [unique_id "apK-LmbX5DA3XO6e_qQjOQAAAWQ"]
[Sat Aug 29 05:10:38.867985 2026] [security2:error] [pid 11274:tid 11512] [client 20.52.41.200:2783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/images/index.php"] [unique_id "apK-LmbX5DA3XO6e_qQjOwAAAU0"]
[Sat Aug 29 05:10:38.869326 2026] [security2:error] [pid 11274:tid 11511] [client 93.123.109.228:47252] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/market/.env"] [unique_id "apK-LmbX5DA3XO6e_qQjOgAAAUw"]
[Sat Aug 29 05:10:38.879493 2026] [security2:error] [pid 11274:tid 11498] [client 158.23.147.79:14328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/xmlrpc.php"] [unique_id "apK-LmbX5DA3XO6e_qQjPAAAAT8"]
[Sat Aug 29 05:10:38.880026 2026] [security2:error] [pid 11274:tid 11493] [client 68.155.159.216:56815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK-LmbX5DA3XO6e_qQjPQAAATo"]
[Sat Aug 29 05:10:38.891158 2026] [security2:error] [pid 1321:tid 1548] [client 20.104.68.135:16673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.midatlanticpartyrentals.com"] [uri "/wp-includes/blocks/buttons/index.php"] [unique_id "apK-LmjCPtor9NZ-byTo_AAABnc"]
[Sat Aug 29 05:10:38.925811 2026] [security2:error] [pid 11274:tid 11455] [client 40.83.93.50:8783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/room.php"] [unique_id "apK-LmbX5DA3XO6e_qQjPwAAARU"]
[Sat Aug 29 05:10:38.974265 2026] [security2:error] [pid 1041789:tid 1041935] [client 20.48.160.90:51845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/fling.php"] [unique_id "apK-Lov3RhPI65jTFG4YUwAAAyI"]
[Sat Aug 29 05:10:38.976162 2026] [security2:error] [pid 11274:tid 11530] [client 20.48.160.90:64601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/ssla.php"] [unique_id "apK-LmbX5DA3XO6e_qQjQQAAAV8"]
[Sat Aug 29 05:10:38.979988 2026] [security2:error] [pid 11274:tid 11566] [client 68.155.159.216:64449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK-LmbX5DA3XO6e_qQjQgAAAYI"]
[Sat Aug 29 05:10:38.985149 2026] [security2:error] [pid 11274:tid 11567] [client 4.205.62.107:63969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/wp-konfig.php"] [unique_id "apK-LmbX5DA3XO6e_qQjQwAAAYM"]
[Sat Aug 29 05:10:39.001625 2026] [security2:error] [pid 1321:tid 1508] [client 57.141.14.94:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/categorie-produit/fruits/"] [unique_id "apK-LmjCPtor9NZ-byTo_gAABlA"]
[Sat Aug 29 05:10:39.005508 2026] [security2:error] [pid 1321:tid 1489] [client 20.151.200.44:63691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/quoys.php"] [unique_id "apK-L2jCPtor9NZ-byTo_wAABj0"]
[Sat Aug 29 05:10:39.014295 2026] [security2:error] [pid 1041789:tid 1041956] [client 158.158.54.35:17683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/adminfuns.php"] [unique_id "apK-L4v3RhPI65jTFG4YVAAAAzc"]
[Sat Aug 29 05:10:39.018581 2026] [security2:error] [pid 1041789:tid 1042030] [client 20.48.160.90:64180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/BDKR28WP.php"] [unique_id "apK-L4v3RhPI65jTFG4YVQAAA4E"]
[Sat Aug 29 05:10:39.034225 2026] [security2:error] [pid 1041789:tid 1041981] [client 68.155.159.216:1948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/goat1.php"] [unique_id "apK-L4v3RhPI65jTFG4YVgAAA1A"]
[Sat Aug 29 05:10:39.040435 2026] [security2:error] [pid 11274:tid 11528] [client 20.63.219.114:1980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/content.php"] [unique_id "apK-L2bX5DA3XO6e_qQjRAAAAV0"]
[Sat Aug 29 05:10:39.044223 2026] [security2:error] [pid 1321:tid 1522] [client 158.158.54.35:11605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/core.php"] [unique_id "apK-L2jCPtor9NZ-byTpAgAABl4"]
[Sat Aug 29 05:10:39.064721 2026] [security2:error] [pid 11274:tid 11482] [client 68.155.159.216:33677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK-L2bX5DA3XO6e_qQjRQAAAS8"]
[Sat Aug 29 05:10:39.085910 2026] [security2:error] [pid 11274:tid 11531] [client 107.145.13.164:65508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 164.13.145.107.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK-L2bX5DA3XO6e_qQjRgAAAWA"]
[Sat Aug 29 05:10:39.085999 2026] [security2:error] [pid 11274:tid 11531] [client 107.145.13.164:65508] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK-L2bX5DA3XO6e_qQjRgAAAWA"]
[Sat Aug 29 05:10:39.094019 2026] [security2:error] [pid 1041789:tid 1041991] [client 20.104.68.135:20774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.midatlanticpartyrentals.com"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "apK-L4v3RhPI65jTFG4YWQAAA1o"]
[Sat Aug 29 05:10:39.138033 2026] [security2:error] [pid 11274:tid 11546] [client 20.48.160.90:63385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "apK-L2bX5DA3XO6e_qQjSQAAAW4"]
[Sat Aug 29 05:10:39.151400 2026] [security2:error] [pid 11274:tid 11460] [client 74.248.24.12:10951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/about/function.php"] [unique_id "apK-L2bX5DA3XO6e_qQjSwAAARo"]
[Sat Aug 29 05:10:39.160069 2026] [security2:error] [pid 1321:tid 1566] [client 68.155.159.216:38274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/file5.php"] [unique_id "apK-L2jCPtor9NZ-byTpBAAABok"]
[Sat Aug 29 05:10:39.166847 2026] [security2:error] [pid 1321:tid 1535] [client 20.104.104.62:64743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/12j.php"] [unique_id "apK-L2jCPtor9NZ-byTpBQAABms"]
[Sat Aug 29 05:10:39.168192 2026] [security2:error] [pid 1321:tid 1535] [client 93.123.109.228:47590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.group3-llc.com"] [uri "/config.php"] [unique_id "apK-L2jCPtor9NZ-byTpBgAABms"]
[Sat Aug 29 05:10:39.185263 2026] [security2:error] [pid 1321:tid 1591] [client 20.48.160.90:64224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/sf.php"] [unique_id "apK-L2jCPtor9NZ-byTpBwAABqI"]
[Sat Aug 29 05:10:39.188788 2026] [security2:error] [pid 11274:tid 11458] [client 20.48.160.90:51909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/btyuio.php"] [unique_id "apK-L2bX5DA3XO6e_qQjTAAAARg"]
[Sat Aug 29 05:10:39.194005 2026] [security2:error] [pid 11274:tid 11457] [client 158.23.147.79:24520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK-L2bX5DA3XO6e_qQjTQAAARc"]
[Sat Aug 29 05:10:39.209790 2026] [security2:error] [pid 1321:tid 1520] [client 93.123.109.228:47660] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.group3-llc.com"] [uri "/___proxy_subdomain_cpcontacts/config/.env"] [unique_id "apK-L2jCPtor9NZ-byTpCgAABlw"]
[Sat Aug 29 05:10:39.210153 2026] [security2:error] [pid 11274:tid 11510] [client 158.23.147.79:59494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/classwithtostring.php"] [unique_id "apK-L2bX5DA3XO6e_qQjTwAAAUs"]
[Sat Aug 29 05:10:39.281295 2026] [security2:error] [pid 11274:tid 11462] [client 20.48.160.90:63458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/wp-aothait.php"] [unique_id "apK-L2bX5DA3XO6e_qQjUAAAARw"]
[Sat Aug 29 05:10:39.312339 2026] [core:error] [pid 1321:tid 1594] [client 20.52.41.200:2876] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:39.312365 2026] [core:error] [pid 1321:tid 1594] [client 20.52.41.200:2876] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:39.323640 2026] [security2:error] [pid 1041789:tid 1042029] [client 20.48.160.90:51928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/dehnl.php"] [unique_id "apK-L4v3RhPI65jTFG4YXwAAA4A"]
[Sat Aug 29 05:10:39.333135 2026] [security2:error] [pid 1321:tid 1530] [client 40.83.93.50:12745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/feed-rss2-queue.php"] [unique_id "apK-L2jCPtor9NZ-byTpDQAABmY"]
[Sat Aug 29 05:10:39.345841 2026] [security2:error] [pid 11274:tid 11572] [client 20.104.49.130:52335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/well.php"] [unique_id "apK-L2bX5DA3XO6e_qQjUgAAAYg"]
[Sat Aug 29 05:10:39.351735 2026] [security2:error] [pid 1321:tid 1612] [client 93.123.109.228:47442] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/market/.env"] [unique_id "apK-L2jCPtor9NZ-byTpDgAABrc"]
[Sat Aug 29 05:10:39.368612 2026] [security2:error] [pid 11274:tid 11477] [client 20.104.68.135:16736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.midatlanticpartyrentals.com"] [uri "/wp-includes/index.php"] [unique_id "apK-L2bX5DA3XO6e_qQjVAAAASs"]
[Sat Aug 29 05:10:39.371847 2026] [security2:error] [pid 11274:tid 11454] [client 20.48.160.90:65346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/k.php"] [unique_id "apK-L2bX5DA3XO6e_qQjVQAAARQ"]
[Sat Aug 29 05:10:39.383896 2026] [security2:error] [pid 1321:tid 1595] [client 93.123.109.228:47542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.group3-llc.com"] [uri "/config/config.inc.php"] [unique_id "apK-L2jCPtor9NZ-byTpEAAABqY"]
[Sat Aug 29 05:10:39.406510 2026] [security2:error] [pid 1321:tid 1587] [client 158.23.147.79:58881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/admin.php"] [unique_id "apK-L2jCPtor9NZ-byTpEgAABp4"]
[Sat Aug 29 05:10:39.407746 2026] [security2:error] [pid 11274:tid 11501] [client 20.104.104.62:48686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-L2bX5DA3XO6e_qQjVgAAAUI"]
[Sat Aug 29 05:10:39.417645 2026] [security2:error] [pid 1321:tid 1558] [client 20.48.160.90:63434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/wp-includes/index.php"] [unique_id "apK-L2jCPtor9NZ-byTpEwAABoE"]
[Sat Aug 29 05:10:39.428305 2026] [security2:error] [pid 1321:tid 1547] [client 68.155.159.216:6099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK-L2jCPtor9NZ-byTpFAAABnY"]
[Sat Aug 29 05:10:39.436069 2026] [security2:error] [pid 11274:tid 11506] [client 40.83.93.50:12570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/class-wp-cmd.php"] [unique_id "apK-L2bX5DA3XO6e_qQjWAAAAUc"]
[Sat Aug 29 05:10:39.445964 2026] [security2:error] [pid 11274:tid 11488] [client 20.63.219.114:17961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/wxo.php"] [unique_id "apK-L2bX5DA3XO6e_qQjWQAAATU"]
[Sat Aug 29 05:10:39.456733 2026] [core:error] [pid 11274:tid 11540] [client 57.141.14.41:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:39.456747 2026] [core:error] [pid 11274:tid 11540] [client 57.141.14.41:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:39.458290 2026] [security2:error] [pid 11274:tid 11552] [client 20.48.160.90:28059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/zoo2.php"] [unique_id "apK-L2bX5DA3XO6e_qQjWwAAAXQ"]
[Sat Aug 29 05:10:39.465620 2026] [security2:error] [pid 1321:tid 1611] [client 158.158.54.35:12353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/goods.php"] [unique_id "apK-L2jCPtor9NZ-byTpFgAABrY"]
[Sat Aug 29 05:10:39.486128 2026] [security2:error] [pid 11274:tid 11465] [client 68.155.159.216:65070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK-L2bX5DA3XO6e_qQjXAAAAR8"]
[Sat Aug 29 05:10:39.491115 2026] [security2:error] [pid 1041789:tid 1041954] [client 158.23.147.79:5854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/images/index.php"] [unique_id "apK-L4v3RhPI65jTFG4YYgAAAzU"]
[Sat Aug 29 05:10:39.500913 2026] [security2:error] [pid 11274:tid 11495] [client 158.158.54.35:1517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/admin/function.php"] [unique_id "apK-L2bX5DA3XO6e_qQjXQAAATw"]
[Sat Aug 29 05:10:39.535303 2026] [security2:error] [pid 11274:tid 11491] [client 68.155.159.216:30550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/images/index.php"] [unique_id "apK-L2bX5DA3XO6e_qQjXgAAATg"]
[Sat Aug 29 05:10:39.538695 2026] [security2:error] [pid 11274:tid 11505] [client 20.48.160.90:62169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/82.php"] [unique_id "apK-L2bX5DA3XO6e_qQjXwAAAUY"]
[Sat Aug 29 05:10:39.540377 2026] [security2:error] [pid 11274:tid 11515] [client 93.123.109.228:47698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.group3-llc.com"] [uri "/config/config.php"] [unique_id "apK-L2bX5DA3XO6e_qQjYAAAAVA"]
[Sat Aug 29 05:10:39.553305 2026] [security2:error] [pid 11274:tid 11467] [client 20.48.160.90:62287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/file31.php"] [unique_id "apK-L2bX5DA3XO6e_qQjYQAAASE"]
[Sat Aug 29 05:10:39.563724 2026] [security2:error] [pid 1041789:tid 1041943] [client 20.104.68.135:17964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.midatlanticpartyrentals.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK-L4v3RhPI65jTFG4YZQAAAyo"]
[Sat Aug 29 05:10:39.567135 2026] [security2:error] [pid 1321:tid 1498] [client 93.123.109.228:47534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.group3-llc.com"] [uri "/config/aws.php"] [unique_id "apK-L2jCPtor9NZ-byTpGgAABkY"]
[Sat Aug 29 05:10:39.575369 2026] [security2:error] [pid 11274:tid 11503] [client 68.155.159.216:62792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-content/themes/too.php"] [unique_id "apK-L2bX5DA3XO6e_qQjYgAAAUQ"]
[Sat Aug 29 05:10:39.575952 2026] [security2:error] [pid 1321:tid 1590] [client 93.123.109.228:47442] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/marketing/.env"] [unique_id "apK-L2jCPtor9NZ-byTpGwAABqE"]
[Sat Aug 29 05:10:39.597674 2026] [security2:error] [pid 11274:tid 11476] [client 20.104.49.130:51129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/reop3.php"] [unique_id "apK-L2bX5DA3XO6e_qQjZAAAASo"]
[Sat Aug 29 05:10:39.627663 2026] [security2:error] [pid 11274:tid 11523] [client 20.48.160.90:51941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/zoo1.php"] [unique_id "apK-L2bX5DA3XO6e_qQjZQAAAVg"]
[Sat Aug 29 05:10:39.631531 2026] [security2:error] [pid 11274:tid 11474] [client 20.104.104.62:20832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/danon.php"] [unique_id "apK-L2bX5DA3XO6e_qQjZgAAASg"]
[Sat Aug 29 05:10:39.674623 2026] [security2:error] [pid 11274:tid 11511] [client 20.48.160.90:63343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/dex.php"] [unique_id "apK-L2bX5DA3XO6e_qQjZwAAAUw"]
[Sat Aug 29 05:10:39.681538 2026] [security2:error] [pid 11274:tid 11479] [client 93.123.109.228:47252] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/node-api/.env"] [unique_id "apK-L2bX5DA3XO6e_qQjaAAAASw"]
[Sat Aug 29 05:10:39.682234 2026] [security2:error] [pid 11274:tid 11498] [client 20.48.160.90:64627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/dk.php"] [unique_id "apK-L2bX5DA3XO6e_qQjaQAAAT8"]
[Sat Aug 29 05:10:39.727575 2026] [security2:error] [pid 11274:tid 11496] [client 4.205.62.107:51405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/06.php"] [unique_id "apK-L2bX5DA3XO6e_qQjawAAAT0"]
[Sat Aug 29 05:10:39.738014 2026] [security2:error] [pid 1321:tid 1550] [client 93.123.109.228:47562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.group3-llc.com"] [uri "/config/env.php"] [unique_id "apK-L2jCPtor9NZ-byTpHQAABnk"]
[Sat Aug 29 05:10:39.750921 2026] [security2:error] [pid 11274:tid 11559] [client 20.52.41.200:2758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/inputs.php"] [unique_id "apK-L2bX5DA3XO6e_qQjbAAAAXs"]
[Sat Aug 29 05:10:39.762333 2026] [security2:error] [pid 11274:tid 11537] [client 20.104.68.135:20739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.midatlanticpartyrentals.com"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "apK-L2bX5DA3XO6e_qQjbQAAAWY"]
[Sat Aug 29 05:10:39.763262 2026] [security2:error] [pid 11274:tid 11543] [client 20.48.160.90:28066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/radio.php"] [unique_id "apK-L2bX5DA3XO6e_qQjbgAAAWs"]
[Sat Aug 29 05:10:39.763790 2026] [security2:error] [pid 1321:tid 1492] [client 93.123.109.228:47786] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/nodeweb/.env"] [unique_id "apK-L2jCPtor9NZ-byTpHgAABkA"]
[Sat Aug 29 05:10:39.783342 2026] [security2:error] [pid 11274:tid 11536] [client 4.205.62.107:62737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/autogooey.php"] [unique_id "apK-L2bX5DA3XO6e_qQjcQAAAWU"]
[Sat Aug 29 05:10:39.785426 2026] [security2:error] [pid 1321:tid 1545] [client 158.23.147.79:63846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK-L2jCPtor9NZ-byTpHwAABnU"]
[Sat Aug 29 05:10:39.818507 2026] [security2:error] [pid 11274:tid 11517] [client 20.151.200.44:65149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/vbbn.php"] [unique_id "apK-L2bX5DA3XO6e_qQjcgAAAVI"]
[Sat Aug 29 05:10:39.820928 2026] [security2:error] [pid 11274:tid 11494] [client 40.83.93.50:6613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/inputs.php"] [unique_id "apK-L2bX5DA3XO6e_qQjcwAAATs"]
[Sat Aug 29 05:10:39.821643 2026] [security2:error] [pid 11274:tid 11547] [client 20.48.160.90:63371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/ta.php"] [unique_id "apK-L2bX5DA3XO6e_qQjdAAAAW8"]
[Sat Aug 29 05:10:39.825066 2026] [security2:error] [pid 1321:tid 1580] [client 93.123.109.228:47442] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/media/.env"] [unique_id "apK-L2jCPtor9NZ-byTpIQAABpc"]
[Sat Aug 29 05:10:39.825722 2026] [security2:error] [pid 11274:tid 11530] [client 20.48.160.90:63335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/inso.php"] [unique_id "apK-L2bX5DA3XO6e_qQjdQAAAV8"]
[Sat Aug 29 05:10:39.834255 2026] [security2:error] [pid 1321:tid 1616] [client 87.219.197.128:57283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK-L2jCPtor9NZ-byTpIgAABrs"]
[Sat Aug 29 05:10:39.834333 2026] [security2:error] [pid 1321:tid 1616] [client 87.219.197.128:57283] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK-L2jCPtor9NZ-byTpIgAABrs"]
[Sat Aug 29 05:10:39.868048 2026] [security2:error] [pid 1321:tid 1516] [client 93.123.109.228:47660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.group3-llc.com"] [uri "/config/module.config.php"] [unique_id "apK-L2jCPtor9NZ-byTpIwAABlg"]
[Sat Aug 29 05:10:39.880700 2026] [security2:error] [pid 1321:tid 1593] [client 20.63.219.114:1941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/as.php"] [unique_id "apK-L2jCPtor9NZ-byTpJQAABqQ"]
[Sat Aug 29 05:10:39.913956 2026] [security2:error] [pid 1041789:tid 1041976] [client 20.48.160.90:51849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/one.php"] [unique_id "apK-L4v3RhPI65jTFG4YbAAAA0s"]
[Sat Aug 29 05:10:39.917206 2026] [security2:error] [pid 1041789:tid 1042031] [client 40.83.93.50:11610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/disagreed.php"] [unique_id "apK-L4v3RhPI65jTFG4YbQAAA4I"]
[Sat Aug 29 05:10:39.927977 2026] [security2:error] [pid 11274:tid 11472] [client 158.158.54.35:8480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/css.php"] [unique_id "apK-L2bX5DA3XO6e_qQjeAAAASY"]
[Sat Aug 29 05:10:39.947658 2026] [security2:error] [pid 1041789:tid 1042017] [client 4.205.62.107:64998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/aws_config.php"] [unique_id "apK-L4v3RhPI65jTFG4YbwAAA3Q"]
[Sat Aug 29 05:10:39.947785 2026] [security2:error] [pid 1041789:tid 1041951] [client 158.158.54.35:31115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/admin/index.php"] [unique_id "apK-L4v3RhPI65jTFG4YcAAAAzI"]
[Sat Aug 29 05:10:39.961460 2026] [security2:error] [pid 1321:tid 1542] [client 93.123.109.228:47786] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/node/api/.env"] [unique_id "apK-L2jCPtor9NZ-byTpJgAABnI"]
[Sat Aug 29 05:10:39.961985 2026] [security2:error] [pid 11274:tid 11507] [client 20.48.160.90:62244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/bo.php"] [unique_id "apK-L2bX5DA3XO6e_qQjegAAAUg"]
[Sat Aug 29 05:10:39.978923 2026] [security2:error] [pid 11274:tid 11448] [client 4.205.62.107:6891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/wp-class.php"] [unique_id "apK-L2bX5DA3XO6e_qQjewAAAQ4"]
[Sat Aug 29 05:10:40.012399 2026] [security2:error] [pid 11274:tid 11563] [client 160.250.133.203:52935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 203.133.250.160.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "seemystores.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "apK-MGbX5DA3XO6e_qQjfAAAAX8"]
[Sat Aug 29 05:10:40.033612 2026] [security2:error] [pid 11274:tid 11527] [client 20.104.68.135:16644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.midatlanticpartyrentals.com"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "apK-MGbX5DA3XO6e_qQjfQAAAVw"]
[Sat Aug 29 05:10:40.036810 2026] [security2:error] [pid 11274:tid 11531] [client 68.155.159.216:64123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/xmlrpc.php"] [unique_id "apK-MGbX5DA3XO6e_qQjfgAAAWA"]
[Sat Aug 29 05:10:40.077392 2026] [proxy_http:error] [pid 1028675:tid 1028850] (70007)The timeout specified has expired: [client 47.82.11.71:35432] AH01102: error reading status line from remote server 127.0.0.1:8443, referer: https://guraonline.com/
[Sat Aug 29 05:10:40.077418 2026] [proxy:error] [pid 1028675:tid 1028850] [client 47.82.11.71:35432] AH00898: Error reading from remote server returned by /seller/mireille/, referer: https://guraonline.com/
[Sat Aug 29 05:10:40.086242 2026] [security2:error] [pid 11274:tid 11555] [client 74.248.24.12:28772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-includes/admin.php"] [unique_id "apK-MGbX5DA3XO6e_qQjgAAAAXc"]
[Sat Aug 29 05:10:40.097394 2026] [proxy_http:error] [pid 1028675:tid 1028871] (70007)The timeout specified has expired: [client 127.0.0.1:21858] AH01102: error reading status line from remote server 50.6.92.44:8443, referer: https://guraonline.com/
[Sat Aug 29 05:10:40.097417 2026] [proxy:error] [pid 1028675:tid 1028871] [client 127.0.0.1:21858] AH00898: Error reading from remote server returned by /seller/mireille/, referer: https://guraonline.com/
[Sat Aug 29 05:10:40.126726 2026] [security2:error] [pid 11274:tid 11510] [client 4.205.62.107:63972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/25.php"] [unique_id "apK-MGbX5DA3XO6e_qQjggAAAUs"]
[Sat Aug 29 05:10:40.129792 2026] [security2:error] [pid 1041789:tid 1041935] [client 20.151.200.44:21760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/rfi.php"] [unique_id "apK-MIv3RhPI65jTFG4YdAAAAyI"]
[Sat Aug 29 05:10:40.138852 2026] [security2:error] [pid 1321:tid 1551] [client 68.155.159.216:38714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK-MGjCPtor9NZ-byTpJwAABno"]
[Sat Aug 29 05:10:40.155180 2026] [security2:error] [pid 11274:tid 11464] [client 68.155.159.216:14330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK-MGbX5DA3XO6e_qQjgwAAAR4"]
[Sat Aug 29 05:10:40.155418 2026] [security2:error] [pid 11274:tid 11524] [client 68.155.159.216:1793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK-MGbX5DA3XO6e_qQjhAAAAVk"]
[Sat Aug 29 05:10:40.157981 2026] [security2:error] [pid 11274:tid 11561] [client 20.104.49.130:51127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/jp.php"] [unique_id "apK-MGbX5DA3XO6e_qQjhQAAAX0"]
[Sat Aug 29 05:10:40.168863 2026] [security2:error] [pid 11274:tid 11551] [client 68.155.159.216:33609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-includes/plugins.php"] [unique_id "apK-MGbX5DA3XO6e_qQjhgAAAXM"]
[Sat Aug 29 05:10:40.204393 2026] [security2:error] [pid 11274:tid 11550] [client 20.52.41.200:2759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/alfa.php"] [unique_id "apK-MGbX5DA3XO6e_qQjhwAAAXI"]
[Sat Aug 29 05:10:40.246723 2026] [security2:error] [pid 1041789:tid 1042020] [client 20.104.104.62:20841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/xd.php"] [unique_id "apK-MIv3RhPI65jTFG4YeAAAA3c"]
[Sat Aug 29 05:10:40.247611 2026] [security2:error] [pid 1321:tid 1556] [client 93.123.109.228:47786] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/node/backend/.env"] [unique_id "apK-MGjCPtor9NZ-byTpKAAABn8"]
[Sat Aug 29 05:10:40.266434 2026] [security2:error] [pid 11274:tid 11572] [client 68.155.159.216:56533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/file88.php"] [unique_id "apK-MGbX5DA3XO6e_qQjiQAAAYg"]
[Sat Aug 29 05:10:40.267926 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.104.49.130:58051] ModSecurity: Access denied with connection close (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1032"] [id "900036"] [msg "Wordpress BOT exploit :: No UA/Referer"] [hostname "mail.bomchecker.net"] [uri "/wp-login.php"] [unique_id "apK-MIv3RhPI65jTFG4YeQAAA3o"]
[Sat Aug 29 05:10:40.287978 2026] [security2:error] [pid 11274:tid 11477] [client 158.23.147.79:62750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apK-MGbX5DA3XO6e_qQjigAAASs"]
[Sat Aug 29 05:10:40.301024 2026] [security2:error] [pid 1321:tid 1561] [client 40.83.93.50:6564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/class-walker-category-dropdown-class.php"] [unique_id "apK-MGjCPtor9NZ-byTpKgAABoQ"]
[Sat Aug 29 05:10:40.305659 2026] [security2:error] [pid 11274:tid 11473] [client 158.23.147.79:24559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/simple.php"] [unique_id "apK-MGbX5DA3XO6e_qQjjAAAASc"]
[Sat Aug 29 05:10:40.316157 2026] [security2:error] [pid 11274:tid 11446] [client 158.23.147.79:59486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/install.php"] [unique_id "apK-MGbX5DA3XO6e_qQjjQAAAQw"]
[Sat Aug 29 05:10:40.369864 2026] [security2:error] [pid 11274:tid 11444] [client 20.63.219.114:9160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/room.php"] [unique_id "apK-MGbX5DA3XO6e_qQjjgAAAQo"]
[Sat Aug 29 05:10:40.375755 2026] [security2:error] [pid 1041789:tid 1042018] [client 20.104.68.135:17973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.midatlanticpartyrentals.com"] [uri "/wp-links-opml.php"] [unique_id "apK-MIv3RhPI65jTFG4YewAAA3U"]
[Sat Aug 29 05:10:40.390993 2026] [security2:error] [pid 11274:tid 11483] [client 158.158.54.35:31903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/storage/rip.php"] [unique_id "apK-MGbX5DA3XO6e_qQjjwAAATA"]
[Sat Aug 29 05:10:40.453425 2026] [security2:error] [pid 1321:tid 1597] [client 93.123.109.228:47786] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/___proxy_subdomain_cpcontacts/nodeapi/.env"] [unique_id "apK-MGjCPtor9NZ-byTpKwAABqg"]
[Sat Aug 29 05:10:40.463642 2026] [security2:error] [pid 1041789:tid 1041979] [client 93.123.109.228:47356] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/nodeapi/.env"] [unique_id "apK-MIv3RhPI65jTFG4YfwAAA04"]
[Sat Aug 29 05:10:40.499211 2026] [security2:error] [pid 1041789:tid 1041957] [client 158.23.147.79:14326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/atomlib.php"] [unique_id "apK-MIv3RhPI65jTFG4YgAAAAzg"]
[Sat Aug 29 05:10:40.514443 2026] [security2:error] [pid 1041789:tid 1041941] [client 40.83.93.50:8946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/class_api.php"] [unique_id "apK-MIv3RhPI65jTFG4YgQAAAyg"]
[Sat Aug 29 05:10:40.519856 2026] [security2:error] [pid 1041789:tid 1041942] [client 158.23.147.79:58882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-admin/admin.php"] [unique_id "apK-MIv3RhPI65jTFG4YggAAAyk"]
[Sat Aug 29 05:10:40.539805 2026] [security2:error] [pid 11274:tid 11516] [client 68.155.159.216:6026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK-MGbX5DA3XO6e_qQjkQAAAVE"]
[Sat Aug 29 05:10:40.570474 2026] [security2:error] [pid 1321:tid 1579] [client 20.104.68.135:20819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.midatlanticpartyrentals.com"] [uri "/wp-signup.php"] [unique_id "apK-MGjCPtor9NZ-byTpLQAABpY"]
[Sat Aug 29 05:10:40.600311 2026] [security2:error] [pid 1041789:tid 1041977] [client 158.23.147.79:5900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK-MIv3RhPI65jTFG4YhQAAA0w"]
[Sat Aug 29 05:10:40.625494 2026] [security2:error] [pid 11274:tid 11552] [client 20.151.200.44:63698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/tajj.php"] [unique_id "apK-MGbX5DA3XO6e_qQjkgAAAXQ"]
[Sat Aug 29 05:10:40.644041 2026] [security2:error] [pid 1041789:tid 1042014] [client 68.155.159.216:30540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK-MIv3RhPI65jTFG4YhgAAA3E"]
[Sat Aug 29 05:10:40.653329 2026] [security2:error] [pid 1321:tid 1615] [client 20.52.41.200:2853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/403.php"] [unique_id "apK-MGjCPtor9NZ-byTpLgAABro"]
[Sat Aug 29 05:10:40.686757 2026] [security2:error] [pid 11274:tid 11465] [client 20.104.49.130:60982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/ab.php"] [unique_id "apK-MGbX5DA3XO6e_qQjkwAAAR8"]
[Sat Aug 29 05:10:40.692478 2026] [security2:error] [pid 11274:tid 11495] [client 20.104.104.62:47605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/dada.php"] [unique_id "apK-MGbX5DA3XO6e_qQjlAAAATw"]
[Sat Aug 29 05:10:40.701018 2026] [security2:error] [pid 1041789:tid 1041954] [client 158.158.54.35:33161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/w.php"] [unique_id "apK-MIv3RhPI65jTFG4YhwAAAzU"]
[Sat Aug 29 05:10:40.723050 2026] [security2:error] [pid 1041789:tid 1041939] [client 68.155.159.216:62825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/radio.php"] [unique_id "apK-MIv3RhPI65jTFG4YiAAAAyY"]
[Sat Aug 29 05:10:40.781514 2026] [security2:error] [pid 11274:tid 11463] [client 20.104.68.135:4773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.midatlanticpartyrentals.com"] [uri "/xmlrpc.php"] [unique_id "apK-MGbX5DA3XO6e_qQjlQAAAR0"]
[Sat Aug 29 05:10:40.812103 2026] [security2:error] [pid 11274:tid 11450] [client 40.83.93.50:12768] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.mypenneedsink.com"] [uri "/1.php7"] [unique_id "apK-MGbX5DA3XO6e_qQjlwAAARA"]
[Sat Aug 29 05:10:40.812227 2026] [security2:error] [pid 11274:tid 11450] [client 40.83.93.50:12768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/1.php7"] [unique_id "apK-MGbX5DA3XO6e_qQjlwAAARA"]
[Sat Aug 29 05:10:40.825154 2026] [security2:error] [pid 1041789:tid 1041931] [client 20.63.219.114:2036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/class-wp-cmd.php"] [unique_id "apK-MIv3RhPI65jTFG4YkAAAAx4"]
[Sat Aug 29 05:10:40.831195 2026] [security2:error] [pid 1041789:tid 1042026] [client 158.158.54.35:1469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/zoom1.php"] [unique_id "apK-MIv3RhPI65jTFG4YkQAAA30"]
[Sat Aug 29 05:10:40.860658 2026] [security2:error] [pid 11274:tid 11484] [client 20.151.200.44:22230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/grsiuk.php"] [unique_id "apK-MGbX5DA3XO6e_qQjmQAAATE"]
[Sat Aug 29 05:10:40.873766 2026] [security2:error] [pid 11274:tid 11549] [client 4.205.62.107:51435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/otuz1.php"] [unique_id "apK-MGbX5DA3XO6e_qQjmgAAAXE"]
[Sat Aug 29 05:10:40.908310 2026] [security2:error] [pid 1321:tid 1488] [client 213.202.253.4:55050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "timportlock.net"] [uri "/memberfuns.php"] [unique_id "apK-MGjCPtor9NZ-byTpMAAABjw"], referer: www.google.com
[Sat Aug 29 05:10:40.911274 2026] [security2:error] [pid 1321:tid 1581] [client 158.23.147.79:63009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-admin.php"] [unique_id "apK-MGjCPtor9NZ-byTpMQAABpg"]
[Sat Aug 29 05:10:40.924793 2026] [security2:error] [pid 1041789:tid 1042031] [client 20.104.104.62:64724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/xml.php"] [unique_id "apK-MIv3RhPI65jTFG4YkgAAA4I"]
[Sat Aug 29 05:10:40.945391 2026] [security2:error] [pid 1041789:tid 1041992] [client 4.205.62.107:59097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/sdsa.php"] [unique_id "apK-MIv3RhPI65jTFG4YkwAAA1s"]
[Sat Aug 29 05:10:40.959007 2026] [security2:error] [pid 1041789:tid 1041888] [remote 74.7.227.154:54326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK-MIv3RhPI65jTFG4YlAADRVY"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwp-easycart%2Fadmin%2Ftemplate%2Fsettings%2Fshipping
[Sat Aug 29 05:10:40.985904 2026] [security2:error] [pid 1041789:tid 1041940] [client 20.104.68.135:4743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.midatlanticpartyrentals.com"] [uri "/yas.php"] [unique_id "apK-MIv3RhPI65jTFG4YlwAAAyc"]
[Sat Aug 29 05:10:40.990597 2026] [security2:error] [pid 1321:tid 1506] [client 114.119.159.226:44265] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.classiclightingusa.com"] [uri "/catalog/index.php/cPath/45/sort/3a/action/buy_now/products_id/954/osCsid/a6c482b6e85252260dffab42bb4318fb"] [unique_id "apK-MGjCPtor9NZ-byTpMgAABk4"], referer: http://www.classiclightingusa.com/catalog/index.php/cPath/45/osCsid/a6c482b6e85252260dffab42bb4318fb
[Sat Aug 29 05:10:41.040417 2026] [security2:error] [pid 11274:tid 11452] [client 52.139.37.240:29381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/ahax.php"] [unique_id "apK-MWbX5DA3XO6e_qQjnAAAARI"]
[Sat Aug 29 05:10:41.050682 2026] [security2:error] [pid 1041789:tid 1041976] [client 40.83.93.50:11591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/aksinet.php"] [unique_id "apK-MYv3RhPI65jTFG4YmQAAA0s"]
[Sat Aug 29 05:10:41.088530 2026] [security2:error] [pid 1041789:tid 1042010] [client 4.205.62.107:64268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/dialog.php"] [unique_id "apK-MYv3RhPI65jTFG4YmwAAA20"]
[Sat Aug 29 05:10:41.115012 2026] [security2:error] [pid 1321:tid 1510] [client 20.52.41.200:2837] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "alisonandpeter.strangeworx.com"] [uri "/1.php"] [unique_id "apK-MWjCPtor9NZ-byTpMwAABlI"]
[Sat Aug 29 05:10:41.115122 2026] [security2:error] [pid 1321:tid 1510] [client 20.52.41.200:2837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/1.php"] [unique_id "apK-MWjCPtor9NZ-byTpMwAABlI"]
[Sat Aug 29 05:10:41.129947 2026] [security2:error] [pid 1321:tid 1555] [client 68.155.159.216:64508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-admin/network/index.php"] [unique_id "apK-MWjCPtor9NZ-byTpNAAABn4"]
[Sat Aug 29 05:10:41.141886 2026] [security2:error] [pid 11274:tid 11492] [client 20.104.104.62:48457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-MWbX5DA3XO6e_qQjnQAAATk"]
[Sat Aug 29 05:10:41.147021 2026] [security2:error] [pid 11274:tid 11520] [client 158.158.54.35:14906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/ahax.php"] [unique_id "apK-MWbX5DA3XO6e_qQjngAAAVU"]
[Sat Aug 29 05:10:41.154698 2026] [security2:error] [pid 1041789:tid 1041950] [client 68.155.159.216:64044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/atomlib.php"] [unique_id "apK-MYv3RhPI65jTFG4YnQAAAzE"]
[Sat Aug 29 05:10:41.158138 2026] [security2:error] [pid 1041789:tid 1041990] [client 4.205.62.107:6861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/database.php"] [unique_id "apK-MYv3RhPI65jTFG4YngAAA1k"]
[Sat Aug 29 05:10:41.165286 2026] [security2:error] [pid 1041789:tid 1041935] [client 74.248.24.12:15962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/lock360.php"] [unique_id "apK-MYv3RhPI65jTFG4YnwAAAyI"]
[Sat Aug 29 05:10:41.185733 2026] [security2:error] [pid 1041789:tid 1041988] [client 20.63.219.114:17922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/disagreed.php"] [unique_id "apK-MYv3RhPI65jTFG4YoAAAA1c"]
[Sat Aug 29 05:10:41.192229 2026] [security2:error] [pid 1041789:tid 1041994] [client 20.104.49.130:57525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/ws78.php"] [unique_id "apK-MYv3RhPI65jTFG4YoQAAA10"]
[Sat Aug 29 05:10:41.246897 2026] [security2:error] [pid 11274:tid 11570] [client 20.151.200.44:21794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/ahy66.php"] [unique_id "apK-MWbX5DA3XO6e_qQjoAAAAYY"]
[Sat Aug 29 05:10:41.260875 2026] [security2:error] [pid 1321:tid 1564] [client 52.139.37.240:29143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/breads1.php"] [unique_id "apK-MWjCPtor9NZ-byTpNQAABoc"]
[Sat Aug 29 05:10:41.261110 2026] [security2:error] [pid 1321:tid 1577] [client 4.205.62.107:61702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/nlnub.php"] [unique_id "apK-MWjCPtor9NZ-byTpNgAABpQ"]
[Sat Aug 29 05:10:41.265325 2026] [security2:error] [pid 11274:tid 11455] [client 68.155.159.216:1944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-admin/network/index.php"] [unique_id "apK-MWbX5DA3XO6e_qQjoQAAARU"]
[Sat Aug 29 05:10:41.270838 2026] [security2:error] [pid 1041789:tid 1041944] [client 68.155.159.216:14150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-admin.php"] [unique_id "apK-MYv3RhPI65jTFG4YpAAAAys"]
[Sat Aug 29 05:10:41.275549 2026] [security2:error] [pid 1041789:tid 1042006] [client 158.158.54.35:1528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/txets.php"] [unique_id "apK-MYv3RhPI65jTFG4YpQAAA2k"]
[Sat Aug 29 05:10:41.286994 2026] [security2:error] [pid 1321:tid 1557] [client 195.178.110.247:32830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.maggieleighton.com"] [uri "/index.php"] [unique_id "apK-MWjCPtor9NZ-byTpNwAABoA"]
[Sat Aug 29 05:10:41.299718 2026] [security2:error] [pid 11274:tid 11493] [client 40.83.93.50:13719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/ds.php"] [unique_id "apK-MWbX5DA3XO6e_qQjowAAATo"]
[Sat Aug 29 05:10:41.319978 2026] [security2:error] [pid 1041789:tid 1042018] [client 93.123.109.228:47356] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.greatvalleyvineyards.com"] [uri "/___proxy_subdomain_cpcontacts/old/.env"] [unique_id "apK-MYv3RhPI65jTFG4YpgAAA3U"]
[Sat Aug 29 05:10:41.368226 2026] [security2:error] [pid 1041789:tid 1041948] [client 20.104.104.62:20809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/xm.php"] [unique_id "apK-MYv3RhPI65jTFG4YqQAAAy8"]
[Sat Aug 29 05:10:41.373397 2026] [security2:error] [pid 1041789:tid 1042028] [client 68.155.159.216:38684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/NewFile.php/"] [unique_id "apK-MYv3RhPI65jTFG4YqgAAA38"]
[Sat Aug 29 05:10:41.396060 2026] [security2:error] [pid 11274:tid 11525] [client 158.23.147.79:55272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK-MWbX5DA3XO6e_qQjpgAAAVo"]
[Sat Aug 29 05:10:41.453112 2026] [security2:error] [pid 1041789:tid 1042043] [client 195.178.110.247:54902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.maggieleighton.com"] [uri "/index.php"] [unique_id "apK-MYv3RhPI65jTFG4YrQAAA44"]
[Sat Aug 29 05:10:41.504909 2026] [security2:error] [pid 1041789:tid 1042048] [client 52.139.37.240:29179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/must.php"] [unique_id "apK-MYv3RhPI65jTFG4YsQAAA5M"]
[Sat Aug 29 05:10:41.505220 2026] [security2:error] [pid 11274:tid 11539] [client 17.166.233.18:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/ingredient/il-vous-faudra-aussi-un-cezve-des-petites-tasses-a-cafe-turc/"] [unique_id "apK-MWbX5DA3XO6e_qQjqgAAAWg"]
[Sat Aug 29 05:10:41.546748 2026] [security2:error] [pid 1041789:tid 1042057] [client 20.63.219.114:10579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/class_api.php"] [unique_id "apK-MYv3RhPI65jTFG4YtAAAA5w"]
[Sat Aug 29 05:10:41.559347 2026] [security2:error] [pid 1041789:tid 1041957] [client 40.83.93.50:8945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/alfa-rex1.php"] [unique_id "apK-MYv3RhPI65jTFG4YtQAAAzg"]
[Sat Aug 29 05:10:41.578014 2026] [core:error] [pid 11274:tid 11556] [client 20.52.41.200:2847] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:41.578032 2026] [core:error] [pid 11274:tid 11556] [client 20.52.41.200:2847] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:41.582032 2026] [security2:error] [pid 1321:tid 1490] [client 158.158.54.35:22979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/shell.php"] [unique_id "apK-MWjCPtor9NZ-byTpOAAABj4"]
[Sat Aug 29 05:10:41.585499 2026] [security2:error] [pid 11274:tid 11536] [client 180.190.5.40:50525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.5.190.180.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK-MWbX5DA3XO6e_qQjrQAAAWU"]
[Sat Aug 29 05:10:41.585596 2026] [security2:error] [pid 11274:tid 11536] [client 180.190.5.40:50525] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK-MWbX5DA3XO6e_qQjrQAAAWU"]
[Sat Aug 29 05:10:41.608323 2026] [security2:error] [pid 11274:tid 11500] [client 158.23.147.79:14303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/lv.php"] [unique_id "apK-MWbX5DA3XO6e_qQjrgAAAUE"]
[Sat Aug 29 05:10:41.617913 2026] [security2:error] [pid 1041789:tid 1041983] [client 158.23.147.79:63292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK-MYv3RhPI65jTFG4YtwAAA1I"]
[Sat Aug 29 05:10:41.647090 2026] [security2:error] [pid 1041789:tid 1041978] [client 197.219.150.206:57009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK-MYv3RhPI65jTFG4YuAAAA00"]
[Sat Aug 29 05:10:41.647186 2026] [security2:error] [pid 1041789:tid 1041978] [client 197.219.150.206:57009] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK-MYv3RhPI65jTFG4YuAAAA00"]
[Sat Aug 29 05:10:41.658260 2026] [security2:error] [pid 1041789:tid 1042000] [client 208.109.3.2:43934] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "cheerfulmonk.com"] [uri "/robots.txt"] [unique_id "apK-MYv3RhPI65jTFG4YuQAAA2M"]
[Sat Aug 29 05:10:41.658324 2026] [security2:error] [pid 1041789:tid 1042000] [client 208.109.3.2:43934] ModSecurity: Warning. Matched phrase "Semrush" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "cheerfulmonk.com"] [uri "/robots.txt"] [unique_id "apK-MYv3RhPI65jTFG4YuQAAA2M"]
[Sat Aug 29 05:10:41.672441 2026] [security2:error] [pid 11274:tid 11448] [client 20.104.49.130:60737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/static.php"] [unique_id "apK-MWbX5DA3XO6e_qQjrwAAAQ4"]
[Sat Aug 29 05:10:41.681665 2026] [security2:error] [pid 11274:tid 11498] [client 103.185.242.143:60207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-MWbX5DA3XO6e_qQjsAAAAT8"]
[Sat Aug 29 05:10:41.681762 2026] [security2:error] [pid 11274:tid 11498] [client 103.185.242.143:60207] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-MWbX5DA3XO6e_qQjsAAAAT8"]
[Sat Aug 29 05:10:41.698233 2026] [security2:error] [pid 11274:tid 11518] [client 20.104.104.62:20862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/xamp.php"] [unique_id "apK-MWbX5DA3XO6e_qQjsQAAAVM"]
[Sat Aug 29 05:10:41.712346 2026] [security2:error] [pid 11274:tid 11466] [client 52.139.37.240:29158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/up.php"] [unique_id "apK-MWbX5DA3XO6e_qQjsgAAASA"]
[Sat Aug 29 05:10:41.712831 2026] [security2:error] [pid 11274:tid 11563] [client 158.23.147.79:6047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK-MWbX5DA3XO6e_qQjswAAAX8"]
[Sat Aug 29 05:10:41.718166 2026] [security2:error] [pid 1041789:tid 1042005] [client 74.248.24.12:10986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-conflg.php"] [unique_id "apK-MYv3RhPI65jTFG4YuwAAA2g"]
[Sat Aug 29 05:10:41.729367 2026] [security2:error] [pid 11274:tid 11560] [client 34.169.171.101:9388] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "forensicengineernj.com"] [uri "/web.config"] [unique_id "apK-MWbX5DA3XO6e_qQjtQAAAXw"]
[Sat Aug 29 05:10:41.775625 2026] [security2:error] [pid 11274:tid 11527] [client 34.169.171.101:9422] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-MWbX5DA3XO6e_qQjuAAAAVw"]
[Sat Aug 29 05:10:41.780214 2026] [security2:error] [pid 11274:tid 11564] [client 40.83.93.50:6535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/GOD.php"] [unique_id "apK-MWbX5DA3XO6e_qQjvAAAAYA"]
[Sat Aug 29 05:10:41.792920 2026] [security2:error] [pid 1041789:tid 1042050] [client 158.23.184.117:51281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/update/da222.php"] [unique_id "apK-MYv3RhPI65jTFG4YwQAAA5U"]
[Sat Aug 29 05:10:41.811256 2026] [security2:error] [pid 11274:tid 11508] [client 34.169.171.101:9422] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-MWbX5DA3XO6e_qQjvwAAAUk"], referer: https://forensicengineernj.com/localhost.key
[Sat Aug 29 05:10:41.822547 2026] [security2:error] [pid 1041789:tid 1041960] [client 68.155.159.216:62837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK-MYv3RhPI65jTFG4YxAAAAzs"]
[Sat Aug 29 05:10:41.857746 2026] [security2:error] [pid 1041789:tid 1041995] [client 158.23.184.117:51266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/xmr.php"] [unique_id "apK-MYv3RhPI65jTFG4YxQAAA14"]
[Sat Aug 29 05:10:41.962759 2026] [security2:error] [pid 11274:tid 11550] [client 20.63.219.114:1945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/aksinet.php"] [unique_id "apK-MWbX5DA3XO6e_qQjwgAAAXI"]
[Sat Aug 29 05:10:41.973156 2026] [security2:error] [pid 11274:tid 11367] [remote 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK-MWbX5DA3XO6e_qQjwwABfTU"]
[Sat Aug 29 05:10:41.973309 2026] [security2:error] [pid 11274:tid 11561] [client 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK-MWbX5DA3XO6e_qQjwwABfTU"]
[Sat Aug 29 05:10:41.991130 2026] [security2:error] [pid 1041789:tid 1042006] [client 20.151.200.44:63735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/gaje.php"] [unique_id "apK-MYv3RhPI65jTFG4YxwAAA2k"]
[Sat Aug 29 05:10:41.995747 2026] [security2:error] [pid 1321:tid 1552] [client 208.109.3.2:43946] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "cheerfulmonk.com"] [uri "/2025/09/04/be-careful-what-you-ask-for-i/"] [unique_id "apK-MWjCPtor9NZ-byTpPQAABns"]
[Sat Aug 29 05:10:41.995835 2026] [security2:error] [pid 1321:tid 1552] [client 208.109.3.2:43946] ModSecurity: Warning. Matched phrase "Semrush" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "cheerfulmonk.com"] [uri "/2025/09/04/be-careful-what-you-ask-for-i/"] [unique_id "apK-MWjCPtor9NZ-byTpPQAABns"]
[Sat Aug 29 05:10:42.008284 2026] [security2:error] [pid 11274:tid 11471] [client 158.23.184.117:51297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK-MmbX5DA3XO6e_qQjxAAAASU"]
[Sat Aug 29 05:10:42.012472 2026] [security2:error] [pid 1041789:tid 1042020] [client 158.158.54.35:17717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/elp.php"] [unique_id "apK-Mov3RhPI65jTFG4YyQAAA3c"]
[Sat Aug 29 05:10:42.016340 2026] [security2:error] [pid 1041789:tid 1042047] [client 52.139.37.240:29127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/wp-content/155.php"] [unique_id "apK-Mov3RhPI65jTFG4YygAAA5I"]
[Sat Aug 29 05:10:42.036334 2026] [security2:error] [pid 11274:tid 11446] [client 158.158.54.35:17757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-content/themes/about.php"] [unique_id "apK-MmbX5DA3XO6e_qQjxwAAAQw"]
[Sat Aug 29 05:10:42.039387 2026] [security2:error] [pid 1041789:tid 1042041] [client 20.52.41.200:2799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/s.php"] [unique_id "apK-Mov3RhPI65jTFG4YzAAAA4w"]
[Sat Aug 29 05:10:42.060712 2026] [security2:error] [pid 11274:tid 11514] [client 40.83.93.50:12561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/headerg.php"] [unique_id "apK-MmbX5DA3XO6e_qQjyAAAAU8"]
[Sat Aug 29 05:10:42.077305 2026] [security2:error] [pid 1321:tid 1518] [client 4.205.62.107:60315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/sale.php"] [unique_id "apK-MmjCPtor9NZ-byTpQAAABlo"]
[Sat Aug 29 05:10:42.149304 2026] [security2:error] [pid 1041789:tid 1042028] [client 158.23.184.117:6286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/wp-act.php"] [unique_id "apK-Mov3RhPI65jTFG4YzwAAA38"]
[Sat Aug 29 05:10:42.161191 2026] [security2:error] [pid 1041789:tid 1041941] [client 20.104.104.62:20827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/ya.php"] [unique_id "apK-Mov3RhPI65jTFG4Y0AAAAyg"]
[Sat Aug 29 05:10:42.212019 2026] [security2:error] [pid 1321:tid 1489] [client 52.139.37.240:29154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/wp-update.php"] [unique_id "apK-MmjCPtor9NZ-byTpQQAABj0"]
[Sat Aug 29 05:10:42.223653 2026] [security2:error] [pid 11274:tid 11495] [client 4.205.62.107:65003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/phpinfo01.php"] [unique_id "apK-MmbX5DA3XO6e_qQjzQAAATw"]
[Sat Aug 29 05:10:42.236438 2026] [security2:error] [pid 1321:tid 1528] [client 68.155.159.216:63859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK-MmjCPtor9NZ-byTpQgAABmQ"]
[Sat Aug 29 05:10:42.237113 2026] [security2:error] [pid 1321:tid 1537] [client 74.248.24.12:4404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/123.php"] [unique_id "apK-MmjCPtor9NZ-byTpQwAABm0"]
[Sat Aug 29 05:10:42.253907 2026] [security2:error] [pid 1041789:tid 1042048] [client 68.155.159.216:30692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK-Mov3RhPI65jTFG4Y0gAAA5M"]
[Sat Aug 29 05:10:42.256228 2026] [security2:error] [pid 11274:tid 11557] [client 68.155.159.216:56518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK-MmbX5DA3XO6e_qQjzgAAAXk"]
[Sat Aug 29 05:10:42.277546 2026] [security2:error] [pid 11274:tid 11505] [client 68.155.159.216:64029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/lv.php"] [unique_id "apK-MmbX5DA3XO6e_qQjzwAAAUY"]
[Sat Aug 29 05:10:42.291822 2026] [security2:error] [pid 11274:tid 11534] [client 158.23.184.117:51317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/fff.php"] [unique_id "apK-MmbX5DA3XO6e_qQj0QAAAWM"]
[Sat Aug 29 05:10:42.313201 2026] [security2:error] [pid 1041789:tid 1042025] [client 4.205.62.107:6515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/atex1.php"] [unique_id "apK-Mov3RhPI65jTFG4Y1AAAA3w"]
[Sat Aug 29 05:10:42.325242 2026] [security2:error] [pid 1041789:tid 1042035] [client 20.63.219.114:9177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/alfa-rex1.php"] [unique_id "apK-Mov3RhPI65jTFG4Y1QAAA4Y"]
[Sat Aug 29 05:10:42.335445 2026] [security2:error] [pid 1321:tid 1574] [client 68.155.159.216:33548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK-MmjCPtor9NZ-byTpRQAABpE"]
[Sat Aug 29 05:10:42.373495 2026] [security2:error] [pid 11274:tid 11549] [client 68.155.159.216:1844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK-MmbX5DA3XO6e_qQj1QAAAXE"]
[Sat Aug 29 05:10:42.401863 2026] [security2:error] [pid 1321:tid 1613] [client 4.205.62.107:63884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/mga.php"] [unique_id "apK-MmjCPtor9NZ-byTpRgAABrg"]
[Sat Aug 29 05:10:42.405452 2026] [security2:error] [pid 1321:tid 1566] [client 52.139.37.240:29145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/xmrlpc.php"] [unique_id "apK-MmjCPtor9NZ-byTpRwAABok"]
[Sat Aug 29 05:10:42.411768 2026] [security2:error] [pid 1041789:tid 1041943] [client 20.151.200.44:21796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/wp-admin/zwso.php"] [unique_id "apK-Mov3RhPI65jTFG4Y1wAAAyo"]
[Sat Aug 29 05:10:42.431876 2026] [security2:error] [pid 1041789:tid 1041947] [client 40.83.93.50:12755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/ggfi.php"] [unique_id "apK-Mov3RhPI65jTFG4Y2AAAAy4"]
[Sat Aug 29 05:10:42.436532 2026] [security2:error] [pid 1041789:tid 1041945] [client 158.23.184.117:6278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/.tmb/dropdown.php"] [unique_id "apK-Mov3RhPI65jTFG4Y2QAAAyw"]
[Sat Aug 29 05:10:42.464972 2026] [security2:error] [pid 1041789:tid 1041992] [client 158.23.147.79:52292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-content/x/index.php"] [unique_id "apK-Mov3RhPI65jTFG4Y2wAAA1s"]
[Sat Aug 29 05:10:42.467121 2026] [security2:error] [pid 1041789:tid 1041970] [client 158.23.147.79:24512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-admin/about.php"] [unique_id "apK-Mov3RhPI65jTFG4Y3gAAA0U"]
[Sat Aug 29 05:10:42.468103 2026] [security2:error] [pid 11274:tid 11452] [client 34.50.189.51:10550] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "discocollective.kriveloff-associates.com"] [uri "/config/gcp-credentials.json"] [unique_id "apK-MmbX5DA3XO6e_qQj2QAAARI"]
[Sat Aug 29 05:10:42.468212 2026] [security2:error] [pid 11274:tid 11467] [client 158.158.54.35:14870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-content/cong.php"] [unique_id "apK-MmbX5DA3XO6e_qQj2AAAASE"]
[Sat Aug 29 05:10:42.471619 2026] [security2:error] [pid 1321:tid 1533] [client 34.50.189.51:10508] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "discocollective.kriveloff-associates.com"] [uri "/cgi-sys/404.html"] [unique_id "apK-MmjCPtor9NZ-byTpSQAABmk"]
[Sat Aug 29 05:10:42.472516 2026] [core:error] [pid 11274:tid 11523] [client 34.50.189.51:10664] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:42.472530 2026] [core:error] [pid 11274:tid 11523] [client 34.50.189.51:10664] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:42.474031 2026] [core:error] [pid 1321:tid 1543] [client 34.50.189.51:10640] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:42.474049 2026] [core:error] [pid 1321:tid 1543] [client 34.50.189.51:10640] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:42.474797 2026] [core:error] [pid 1041789:tid 1042015] [client 34.50.189.51:10570] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:42.474808 2026] [core:error] [pid 1041789:tid 1042015] [client 34.50.189.51:10570] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:42.475598 2026] [core:error] [pid 11274:tid 11474] [client 34.50.189.51:10666] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:42.475614 2026] [core:error] [pid 11274:tid 11474] [client 34.50.189.51:10666] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:42.475724 2026] [security2:error] [pid 11274:tid 11474] [client 34.50.189.51:10666] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "discocollective.kriveloff-associates.com"] [uri "/index.php"] [unique_id "apK-MmbX5DA3XO6e_qQj3QAAASg"]
[Sat Aug 29 05:10:42.475821 2026] [core:error] [pid 1041789:tid 1041971] [client 34.50.189.51:10600] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:42.475833 2026] [core:error] [pid 1041789:tid 1041971] [client 34.50.189.51:10600] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:42.476374 2026] [core:error] [pid 1321:tid 1517] [client 34.50.189.51:10684] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:42.476391 2026] [core:error] [pid 1321:tid 1517] [client 34.50.189.51:10684] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:42.477150 2026] [core:error] [pid 11274:tid 11485] [client 34.50.189.51:10660] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:42.477160 2026] [core:error] [pid 11274:tid 11485] [client 34.50.189.51:10660] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:42.477630 2026] [core:error] [pid 1041789:tid 1041978] [client 34.50.189.51:10732] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:42.477641 2026] [core:error] [pid 1041789:tid 1041978] [client 34.50.189.51:10732] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:42.478212 2026] [security2:error] [pid 11274:tid 11511] [client 34.50.189.51:10718] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "discocollective.kriveloff-associates.com"] [uri "/app/settings.py"] [unique_id "apK-MmbX5DA3XO6e_qQj4gAAAUw"]
[Sat Aug 29 05:10:42.478278 2026] [security2:error] [pid 1041789:tid 1041978] [client 34.50.189.51:10732] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "discocollective.kriveloff-associates.com"] [uri "/index.php"] [unique_id "apK-Mov3RhPI65jTFG4Y4wAAA00"]
[Sat Aug 29 05:10:42.478703 2026] [core:error] [pid 1321:tid 1592] [client 34.50.189.51:10586] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:42.478719 2026] [core:error] [pid 1321:tid 1592] [client 34.50.189.51:10586] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:42.479327 2026] [core:error] [pid 11274:tid 11535] [client 34.50.189.51:10738] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:42.479335 2026] [core:error] [pid 11274:tid 11535] [client 34.50.189.51:10738] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:42.479592 2026] [core:error] [pid 1041789:tid 1042000] [client 34.50.189.51:10742] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:42.479622 2026] [core:error] [pid 1041789:tid 1042000] [client 34.50.189.51:10742] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:42.479643 2026] [security2:error] [pid 1041789:tid 1041940] [client 68.155.159.216:56546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/dropdown.php"] [unique_id "apK-Mov3RhPI65jTFG4Y5QAAAyc"]
[Sat Aug 29 05:10:42.479705 2026] [core:error] [pid 11274:tid 11509] [client 34.50.189.51:10626] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:42.479709 2026] [security2:error] [pid 1041789:tid 1042000] [client 34.50.189.51:10742] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "discocollective.kriveloff-associates.com"] [uri "/index.php"] [unique_id "apK-Mov3RhPI65jTFG4Y5AAAA2M"]
[Sat Aug 29 05:10:42.479715 2026] [core:error] [pid 11274:tid 11509] [client 34.50.189.51:10626] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:42.480001 2026] [security2:error] [pid 11274:tid 11475] [client 158.158.54.35:7057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK-MmbX5DA3XO6e_qQj5QAAASk"]
[Sat Aug 29 05:10:42.481053 2026] [core:error] [pid 1041789:tid 1041951] [client 34.50.189.51:10496] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:42.481066 2026] [core:error] [pid 1041789:tid 1041951] [client 34.50.189.51:10496] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:42.481148 2026] [core:error] [pid 11274:tid 11512] [client 34.50.189.51:10612] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:42.481156 2026] [core:error] [pid 11274:tid 11512] [client 34.50.189.51:10612] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:42.481245 2026] [security2:error] [pid 11274:tid 11512] [client 34.50.189.51:10612] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "discocollective.kriveloff-associates.com"] [uri "/index.php"] [unique_id "apK-MmbX5DA3XO6e_qQj4wAAAU0"]
[Sat Aug 29 05:10:42.481771 2026] [core:error] [pid 11274:tid 11479] [client 34.50.189.51:10696] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:42.481786 2026] [core:error] [pid 11274:tid 11479] [client 34.50.189.51:10696] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:42.482670 2026] [core:error] [pid 11274:tid 11520] [client 34.50.189.51:10774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:42.482683 2026] [core:error] [pid 11274:tid 11520] [client 34.50.189.51:10774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:42.485743 2026] [core:error] [pid 11274:tid 11544] [client 34.50.189.51:10672] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:42.485755 2026] [core:error] [pid 11274:tid 11544] [client 34.50.189.51:10672] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:42.485888 2026] [core:error] [pid 1041789:tid 1042005] [client 34.50.189.51:10758] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:42.485898 2026] [core:error] [pid 1041789:tid 1042005] [client 34.50.189.51:10758] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:42.493405 2026] [security2:error] [pid 11274:tid 11525] [client 68.155.159.216:14264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK-MmbX5DA3XO6e_qQj6QAAAVo"]
[Sat Aug 29 05:10:42.493447 2026] [security2:error] [pid 11274:tid 11571] [client 20.52.41.200:2850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/test1.php"] [unique_id "apK-MmbX5DA3XO6e_qQj6gAAAYc"]
[Sat Aug 29 05:10:42.502875 2026] [security2:error] [pid 11274:tid 11558] [client 158.23.147.79:29587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/dropdown.php"] [unique_id "apK-MmbX5DA3XO6e_qQj6wAAAXo"]
[Sat Aug 29 05:10:42.533379 2026] [security2:error] [pid 1041789:tid 1041823] [remote 40.77.167.35:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.167.77.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantsfans.net"] [uri "/message_board/index.php"] [unique_id "apK-Mov3RhPI65jTFG4Y6wADlhU"]
[Sat Aug 29 05:10:42.547250 2026] [security2:error] [pid 1321:tid 1535] [client 40.83.93.50:8905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/meta.php"] [unique_id "apK-MmjCPtor9NZ-byTpTQAABms"]
[Sat Aug 29 05:10:42.558729 2026] [security2:error] [pid 11274:tid 11477] [client 103.48.146.148:50018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 148.146.48.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK-MmbX5DA3XO6e_qQj7AAAASs"]
[Sat Aug 29 05:10:42.558820 2026] [security2:error] [pid 11274:tid 11477] [client 103.48.146.148:50018] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK-MmbX5DA3XO6e_qQj7AAAASs"]
[Sat Aug 29 05:10:42.581990 2026] [security2:error] [pid 11274:tid 11500] [client 158.23.184.117:51326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/robots.php"] [unique_id "apK-MmbX5DA3XO6e_qQj7QAAAUE"]
[Sat Aug 29 05:10:42.598786 2026] [security2:error] [pid 11274:tid 11560] [client 68.155.159.216:64441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK-MmbX5DA3XO6e_qQj7gAAAXw"]
[Sat Aug 29 05:10:42.627568 2026] [security2:error] [pid 11274:tid 11498] [client 52.139.37.240:29138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/about/function.php"] [unique_id "apK-MmbX5DA3XO6e_qQj7wAAAT8"]
[Sat Aug 29 05:10:42.637017 2026] [security2:error] [pid 1041789:tid 1041991] [client 34.169.171.101:9492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.171.169.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "forensicengineernj.com"] [uri "/configuration.php.bak"] [unique_id "apK-Mov3RhPI65jTFG4Y7AAAA1o"]
[Sat Aug 29 05:10:42.669936 2026] [security2:error] [pid 1041789:tid 1041949] [client 34.169.171.101:9514] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "forensicengineernj.com"] [uri "/aws-config.js"] [unique_id "apK-Mov3RhPI65jTFG4Y7QAAAzA"]
[Sat Aug 29 05:10:42.678786 2026] [security2:error] [pid 11274:tid 11564] [client 68.155.159.216:6073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK-MmbX5DA3XO6e_qQj8gAAAYA"]
[Sat Aug 29 05:10:42.680695 2026] [security2:error] [pid 11274:tid 11565] [client 20.63.219.114:17924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/headerg.php"] [unique_id "apK-MmbX5DA3XO6e_qQj8wAAAYE"]
[Sat Aug 29 05:10:42.712623 2026] [security2:error] [pid 11274:tid 11464] [client 20.104.104.62:20808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/zer0.php"] [unique_id "apK-MmbX5DA3XO6e_qQj9AAAAR4"]
[Sat Aug 29 05:10:42.723053 2026] [security2:error] [pid 11274:tid 11546] [client 158.23.184.117:51276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/.well-known/install.php"] [unique_id "apK-MmbX5DA3XO6e_qQj9QAAAW4"]
[Sat Aug 29 05:10:42.724248 2026] [security2:error] [pid 1041789:tid 1041987] [client 158.23.147.79:64116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/classwithtostring.php"] [unique_id "apK-Mov3RhPI65jTFG4Y7gAAA1Y"]
[Sat Aug 29 05:10:42.735612 2026] [security2:error] [pid 11274:tid 11551] [client 158.23.147.79:14323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-MmbX5DA3XO6e_qQj9gAAAXM"]
[Sat Aug 29 05:10:42.762613 2026] [security2:error] [pid 11274:tid 11563] [client 74.248.24.12:35052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/yanz.php"] [unique_id "apK-MmbX5DA3XO6e_qQj9wAAAX8"]
[Sat Aug 29 05:10:42.784395 2026] [security2:error] [pid 11274:tid 11545] [client 20.151.200.44:63618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/fgd.php"] [unique_id "apK-MmbX5DA3XO6e_qQj-AAAAW0"]
[Sat Aug 29 05:10:42.814085 2026] [security2:error] [pid 1041789:tid 1042046] [client 158.23.147.79:5978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK-Mov3RhPI65jTFG4Y8QAAA5E"]
[Sat Aug 29 05:10:42.821943 2026] [security2:error] [pid 11274:tid 11461] [client 52.139.37.240:29155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/an.php"] [unique_id "apK-MmbX5DA3XO6e_qQj-wAAARs"]
[Sat Aug 29 05:10:42.915947 2026] [security2:error] [pid 11274:tid 11473] [client 158.23.184.117:51320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/wp-admin/about.php"] [unique_id "apK-MmbX5DA3XO6e_qQj_gAAASc"]
[Sat Aug 29 05:10:42.915947 2026] [security2:error] [pid 1041789:tid 1042028] [client 158.158.54.35:14863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK-Mov3RhPI65jTFG4Y8wAAA38"]
[Sat Aug 29 05:10:42.918779 2026] [security2:error] [pid 1041789:tid 1041962] [client 20.104.104.62:48476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/baee.php"] [unique_id "apK-Mov3RhPI65jTFG4Y9AAAAz0"]
[Sat Aug 29 05:10:42.920931 2026] [security2:error] [pid 1041789:tid 1042055] [client 158.158.54.35:31107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-admin/index.php"] [unique_id "apK-Mov3RhPI65jTFG4Y9QAAA5o"]
[Sat Aug 29 05:10:42.938248 2026] [security2:error] [pid 1041789:tid 1042057] [client 68.155.159.216:62749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/makeasmtp.php"] [unique_id "apK-Mov3RhPI65jTFG4Y9gAAA5w"]
[Sat Aug 29 05:10:42.948947 2026] [security2:error] [pid 11274:tid 11572] [client 20.52.41.200:2838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/ws.php"] [unique_id "apK-MmbX5DA3XO6e_qQkAAAAAYg"]
[Sat Aug 29 05:10:42.956954 2026] [security2:error] [pid 11274:tid 11499] [client 40.83.93.50:12756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/alfa-rex.php"] [unique_id "apK-MmbX5DA3XO6e_qQkAQAAAUA"]
[Sat Aug 29 05:10:43.014989 2026] [security2:error] [pid 1041789:tid 1042007] [client 20.104.104.62:47590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/63dor.php"] [unique_id "apK-M4v3RhPI65jTFG4Y9wAAA2o"]
[Sat Aug 29 05:10:43.016755 2026] [security2:error] [pid 1041789:tid 1042035] [client 52.139.37.240:29131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/asw.php"] [unique_id "apK-M4v3RhPI65jTFG4Y-AAAA4Y"]
[Sat Aug 29 05:10:43.036829 2026] [security2:error] [pid 1041789:tid 1041975] [client 158.23.147.79:62981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK-M4v3RhPI65jTFG4Y-QAAA0o"]
[Sat Aug 29 05:10:43.037345 2026] [security2:error] [pid 1041789:tid 1042048] [client 40.83.93.50:12718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/dxc.php"] [unique_id "apK-M4v3RhPI65jTFG4Y-gAAA5M"]
[Sat Aug 29 05:10:43.054841 2026] [security2:error] [pid 11274:tid 11495] [client 4.205.62.107:4945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/filesystems.php"] [unique_id "apK-M2bX5DA3XO6e_qQkAwAAATw"]
[Sat Aug 29 05:10:43.059557 2026] [security2:error] [pid 1321:tid 1536] [client 158.23.184.117:51275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/wp-content/backup.php"] [unique_id "apK-M2jCPtor9NZ-byTpUgAABmw"]
[Sat Aug 29 05:10:43.068140 2026] [security2:error] [pid 1041789:tid 1042025] [client 20.63.219.114:1295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/meta.php"] [unique_id "apK-M4v3RhPI65jTFG4Y-wAAA3w"]
[Sat Aug 29 05:10:43.070715 2026] [security2:error] [pid 11274:tid 11508] [client 138.199.19.170:46682] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.fanlebrity.com"] [uri "/autodiscover/autodiscover.xml/wp-includes/wlwmanifest.xml"] [unique_id "apK-M2bX5DA3XO6e_qQkBAAAAUk"]
[Sat Aug 29 05:10:43.095824 2026] [security2:error] [pid 1041789:tid 1041978] [client 91.92.47.191:57118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.giantgardening.com"] [uri "/wp-config.php"] [unique_id "apK-M4v3RhPI65jTFG4Y_QAAA00"]
[Sat Aug 29 05:10:43.106838 2026] [security2:error] [pid 11274:tid 11515] [client 20.151.200.44:21891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/Contrller.php"] [unique_id "apK-M2bX5DA3XO6e_qQkBQAAAVA"]
[Sat Aug 29 05:10:43.142931 2026] [autoindex:error] [pid 11274:tid 11450] [client 34.83.208.212:45906] AH01276: Cannot serve directory /home3/wxguhfmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:10:43.160096 2026] [security2:error] [pid 1041789:tid 1042044] [client 20.104.49.130:57709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/ws58.php"] [unique_id "apK-M4v3RhPI65jTFG4Y_gAAA48"]
[Sat Aug 29 05:10:43.194527 2026] [security2:error] [pid 11274:tid 11451] [client 20.104.49.130:58239] ModSecurity: Access denied with connection close (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1032"] [id "900036"] [msg "Wordpress BOT exploit :: No UA/Referer"] [hostname "mail.bomchecker.net"] [uri "/wp-login.php"] [unique_id "apK-M2bX5DA3XO6e_qQkBwAAARE"]
[Sat Aug 29 05:10:43.207783 2026] [security2:error] [pid 1321:tid 1567] [client 158.23.184.117:51282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/.well-known/aa.php"] [unique_id "apK-M2jCPtor9NZ-byTpUwAABoo"]
[Sat Aug 29 05:10:43.212789 2026] [security2:error] [pid 11274:tid 11541] [client 4.205.62.107:62934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/wp-class.php"] [unique_id "apK-M2bX5DA3XO6e_qQkCAAAAWo"]
[Sat Aug 29 05:10:43.214724 2026] [security2:error] [pid 1041789:tid 1041982] [client 52.139.37.240:29390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/item.php"] [unique_id "apK-M4v3RhPI65jTFG4Y_wAAA1E"]
[Sat Aug 29 05:10:43.280752 2026] [security2:error] [pid 1041789:tid 1042000] [client 74.248.24.12:20449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/autoload_classmap.php"] [unique_id "apK-M4v3RhPI65jTFG4ZAAAAA2M"]
[Sat Aug 29 05:10:43.343829 2026] [security2:error] [pid 1041789:tid 1041953] [client 68.155.159.216:63792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/.well-knownold/index.php"] [unique_id "apK-M4v3RhPI65jTFG4ZAgAAAzQ"]
[Sat Aug 29 05:10:43.357216 2026] [security2:error] [pid 11274:tid 11570] [client 68.155.159.216:38321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK-M2bX5DA3XO6e_qQkDgAAAYY"]
[Sat Aug 29 05:10:43.357856 2026] [security2:error] [pid 11274:tid 11485] [client 158.23.184.117:51268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "apK-M2bX5DA3XO6e_qQkDwAAATI"]
[Sat Aug 29 05:10:43.363609 2026] [security2:error] [pid 1041789:tid 1041939] [client 158.158.54.35:30272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-mail.php"] [unique_id "apK-M4v3RhPI65jTFG4ZAwAAAyY"]
[Sat Aug 29 05:10:43.363962 2026] [security2:error] [pid 11274:tid 11479] [client 4.205.62.107:64934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/cxc.php"] [unique_id "apK-M2bX5DA3XO6e_qQkEAAAASw"]
[Sat Aug 29 05:10:43.364458 2026] [security2:error] [pid 11274:tid 11503] [client 158.158.54.35:2014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/radio.php"] [unique_id "apK-M2bX5DA3XO6e_qQkEQAAAUQ"]
[Sat Aug 29 05:10:43.368022 2026] [security2:error] [pid 11274:tid 11520] [client 68.155.159.216:30653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK-M2bX5DA3XO6e_qQkEgAAAVU"]
[Sat Aug 29 05:10:43.370881 2026] [security2:error] [pid 11274:tid 11492] [client 20.48.250.41:49634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/fresh3.php"] [unique_id "apK-M2bX5DA3XO6e_qQkEwAAATk"]
[Sat Aug 29 05:10:43.401467 2026] [security2:error] [pid 1041789:tid 1042019] [client 20.52.41.200:2761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-themes.php"] [unique_id "apK-M4v3RhPI65jTFG4ZBAAAA3Y"]
[Sat Aug 29 05:10:43.408080 2026] [security2:error] [pid 11274:tid 11559] [client 20.48.250.41:64810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/global.php"] [unique_id "apK-M2bX5DA3XO6e_qQkFAAAAXs"]
[Sat Aug 29 05:10:43.415070 2026] [security2:error] [pid 11274:tid 11543] [client 20.104.104.62:40237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/dh.php"] [unique_id "apK-M2bX5DA3XO6e_qQkFQAAAWs"]
[Sat Aug 29 05:10:43.416898 2026] [security2:error] [pid 11274:tid 11475] [client 52.139.37.240:29135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/jga.php"] [unique_id "apK-M2bX5DA3XO6e_qQkFgAAASk"]
[Sat Aug 29 05:10:43.429774 2026] [security2:error] [pid 11274:tid 11449] [client 20.48.250.41:49264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/06.php"] [unique_id "apK-M2bX5DA3XO6e_qQkGQAAAQ8"]
[Sat Aug 29 05:10:43.449184 2026] [security2:error] [pid 11274:tid 11509] [client 20.63.219.114:2022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/dxc.php"] [unique_id "apK-M2bX5DA3XO6e_qQkMwAAAUo"]
[Sat Aug 29 05:10:43.452221 2026] [security2:error] [pid 1041789:tid 1042050] [client 40.83.93.50:6743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/cookie.php"] [unique_id "apK-M4v3RhPI65jTFG4ZBQAAA5U"]
[Sat Aug 29 05:10:43.479366 2026] [security2:error] [pid 11274:tid 11525] [client 4.205.62.107:6859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/aws_sdk_settings.php"] [unique_id "apK-M2bX5DA3XO6e_qQkNAAAAVo"]
[Sat Aug 29 05:10:43.485706 2026] [security2:error] [pid 11274:tid 11501] [client 103.240.76.112:43264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK-M2bX5DA3XO6e_qQkNQAAAUI"]
[Sat Aug 29 05:10:43.485799 2026] [security2:error] [pid 11274:tid 11501] [client 103.240.76.112:43264] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK-M2bX5DA3XO6e_qQkNQAAAUI"]
[Sat Aug 29 05:10:43.501130 2026] [security2:error] [pid 1041789:tid 1041990] [client 158.23.184.117:51284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/wp-content/plugins/alfa-rex.php"] [unique_id "apK-M4v3RhPI65jTFG4ZBgAAA1k"]
[Sat Aug 29 05:10:43.519531 2026] [security2:error] [pid 1041789:tid 1041954] [client 20.48.250.41:49643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/bgymj.php"] [unique_id "apK-M4v3RhPI65jTFG4ZCAAAAzU"]
[Sat Aug 29 05:10:43.537038 2026] [security2:error] [pid 1041789:tid 1041977] [client 4.205.62.107:61668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/ccou.php"] [unique_id "apK-M4v3RhPI65jTFG4ZCQAAA0w"]
[Sat Aug 29 05:10:43.537569 2026] [security2:error] [pid 11274:tid 11484] [client 109.172.91.206:60016] ModSecurity: Access denied with code 406 (phase 1). IPmatchFromFile: "109.172.91.206" matched at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1090"] [id "999022"] [msg "Blacklisted IP Address for POST data StopForumSpam List"] [hostname "drpallos.com"] [uri "/wp-comments-post.php"] [unique_id "apK-M2bX5DA3XO6e_qQkNwAAATE"], referer: https://drpallos.com/dr-pallos-laguna-niguel/
[Sat Aug 29 05:10:43.537633 2026] [security2:error] [pid 11274:tid 11484] [client 109.172.91.206:60016] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "406"] [hostname "drpallos.com"] [uri "/wp-comments-post.php"] [unique_id "apK-M2bX5DA3XO6e_qQkNwAAATE"], referer: https://drpallos.com/dr-pallos-laguna-niguel/
[Sat Aug 29 05:10:43.543913 2026] [security2:error] [pid 1041789:tid 1042030] [client 20.48.250.41:29638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/amp.php"] [unique_id "apK-M4v3RhPI65jTFG4ZCgAAA4E"]
[Sat Aug 29 05:10:43.559002 2026] [security2:error] [pid 1041789:tid 1041960] [client 91.92.47.191:48762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.edwardjindovina.com"] [uri "/wp-login.php"] [unique_id "apK-M4v3RhPI65jTFG4ZBwAAAzs"]
[Sat Aug 29 05:10:43.560306 2026] [security2:error] [pid 1041789:tid 1042051] [client 20.104.104.62:48697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/d12.php"] [unique_id "apK-M4v3RhPI65jTFG4ZDAAAA5Y"]
[Sat Aug 29 05:10:43.562959 2026] [security2:error] [pid 11274:tid 11528] [client 158.23.147.79:24462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK-M2bX5DA3XO6e_qQkOQAAAV0"]
[Sat Aug 29 05:10:43.573496 2026] [security2:error] [pid 1321:tid 1532] [client 158.23.147.79:60126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK-M2jCPtor9NZ-byTpVAAABmg"]
[Sat Aug 29 05:10:43.574177 2026] [security2:error] [pid 1321:tid 1550] [client 20.48.250.41:50235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/class.php"] [unique_id "apK-M2jCPtor9NZ-byTpVQAABnk"]
[Sat Aug 29 05:10:43.609883 2026] [security2:error] [pid 11274:tid 11507] [client 52.139.37.240:29183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/mac.php"] [unique_id "apK-M2bX5DA3XO6e_qQkOwAAAUg"]
[Sat Aug 29 05:10:43.611393 2026] [security2:error] [pid 1041789:tid 1041991] [client 158.23.147.79:63271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/sad/about.php"] [unique_id "apK-M4v3RhPI65jTFG4ZDQAAA1o"]
[Sat Aug 29 05:10:43.614062 2026] [security2:error] [pid 1041789:tid 1042020] [client 68.155.159.216:2029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/goat.php"] [unique_id "apK-M4v3RhPI65jTFG4ZDgAAA3c"]
[Sat Aug 29 05:10:43.632946 2026] [security2:error] [pid 1321:tid 1580] [client 20.48.250.41:64773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/fs.php"] [unique_id "apK-M2jCPtor9NZ-byTpVgAABpc"]
[Sat Aug 29 05:10:43.678716 2026] [security2:error] [pid 11274:tid 11481] [client 20.48.250.41:29656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/cc13.php"] [unique_id "apK-M2bX5DA3XO6e_qQkPgAAAS4"]
[Sat Aug 29 05:10:43.686247 2026] [security2:error] [pid 11274:tid 11458] [client 20.104.104.62:47612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/%E5%B9%B3%E4%BB%AE%E5%90%8Ds.php"] [unique_id "apK-M2bX5DA3XO6e_qQkPwAAARg"]
[Sat Aug 29 05:10:43.694067 2026] [security2:error] [pid 1041789:tid 1041941] [client 20.48.250.41:49638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/ws69.php"] [unique_id "apK-M4v3RhPI65jTFG4ZEAAAAyg"]
[Sat Aug 29 05:10:43.696010 2026] [security2:error] [pid 1041789:tid 1041979] [client 158.23.184.117:51313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/test.php"] [unique_id "apK-M4v3RhPI65jTFG4ZEQAAA04"]
[Sat Aug 29 05:10:43.729859 2026] [security2:error] [pid 1041789:tid 1041964] [client 40.83.93.50:8933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/wp-2019.php"] [unique_id "apK-M4v3RhPI65jTFG4ZEgAAAz8"]
[Sat Aug 29 05:10:43.742905 2026] [security2:error] [pid 11274:tid 11548] [client 20.48.250.41:50242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/8.php"] [unique_id "apK-M2bX5DA3XO6e_qQkQgAAAXA"]
[Sat Aug 29 05:10:43.790460 2026] [security2:error] [pid 1041789:tid 1042047] [client 74.248.24.12:28791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/bi.php"] [unique_id "apK-M4v3RhPI65jTFG4ZFAAAA5I"]
[Sat Aug 29 05:10:43.794032 2026] [security2:error] [pid 1321:tid 1596] [client 20.104.49.130:34505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/talkxkej.php"] [unique_id "apK-M2jCPtor9NZ-byTpVwAABqc"]
[Sat Aug 29 05:10:43.801821 2026] [security2:error] [pid 1041789:tid 1041988] [client 20.48.250.41:64844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/ioxi.php"] [unique_id "apK-M4v3RhPI65jTFG4ZFQAAA1c"]
[Sat Aug 29 05:10:43.803255 2026] [security2:error] [pid 1321:tid 1593] [client 52.139.37.240:29382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK-M2jCPtor9NZ-byTpWAAABqQ"]
[Sat Aug 29 05:10:43.807019 2026] [security2:error] [pid 1041789:tid 1042018] [client 158.158.54.35:10150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-content.php"] [unique_id "apK-M4v3RhPI65jTFG4ZFwAAA3U"]
[Sat Aug 29 05:10:43.816248 2026] [security2:error] [pid 11274:tid 11500] [client 158.158.54.35:20732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/item.php"] [unique_id "apK-M2bX5DA3XO6e_qQkWQAAAUE"]
[Sat Aug 29 05:10:43.833315 2026] [security2:error] [pid 1041789:tid 1041962] [client 158.23.147.79:62823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/install.php"] [unique_id "apK-M4v3RhPI65jTFG4ZGQAAAz0"]
[Sat Aug 29 05:10:43.838453 2026] [security2:error] [pid 1321:tid 1542] [client 20.48.250.41:49615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/ccs.php"] [unique_id "apK-M2jCPtor9NZ-byTpWQAABnI"]
[Sat Aug 29 05:10:43.842091 2026] [security2:error] [pid 11274:tid 11563] [client 158.23.184.117:51273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/wp-includes/mani.php"] [unique_id "apK-M2bX5DA3XO6e_qQkXAAAAX8"]
[Sat Aug 29 05:10:43.851333 2026] [security2:error] [pid 1041789:tid 1042055] [client 158.23.147.79:14146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/content.php"] [unique_id "apK-M4v3RhPI65jTFG4ZGgAAA5o"]
[Sat Aug 29 05:10:43.852764 2026] [security2:error] [pid 11274:tid 11461] [client 20.104.49.130:63532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pvillusions.com"] [uri "/33.php"] [unique_id "apK-M2bX5DA3XO6e_qQkXQAAARs"]
[Sat Aug 29 05:10:43.855026 2026] [security2:error] [pid 1321:tid 1616] [client 20.52.41.200:2663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-trackback.php"] [unique_id "apK-M2jCPtor9NZ-byTpWgAABrs"]
[Sat Aug 29 05:10:43.869669 2026] [security2:error] [pid 1041789:tid 1042057] [client 20.48.250.41:50399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/aa.php"] [unique_id "apK-M4v3RhPI65jTFG4ZGwAAA5w"]
[Sat Aug 29 05:10:43.880668 2026] [security2:error] [pid 11274:tid 11564] [client 20.63.219.114:2003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/wp-2019.php"] [unique_id "apK-M2bX5DA3XO6e_qQkYAAAAYA"]
[Sat Aug 29 05:10:43.901100 2026] [security2:error] [pid 11274:tid 11568] [client 91.92.47.191:57124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantgardening.com"] [uri "/aboutus.php"] [unique_id "apK-M2bX5DA3XO6e_qQkYQAAAYQ"]
[Sat Aug 29 05:10:43.913823 2026] [security2:error] [pid 1321:tid 1526] [client 20.48.250.41:50258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/0x0x.php"] [unique_id "apK-M2jCPtor9NZ-byTpWwAABmI"]
[Sat Aug 29 05:10:43.921909 2026] [security2:error] [pid 11274:tid 11470] [client 158.23.147.79:5850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK-M2bX5DA3XO6e_qQkYgAAASQ"]
[Sat Aug 29 05:10:43.934747 2026] [security2:error] [pid 1041789:tid 1042017] [client 40.83.93.50:13705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/NewFile.php"] [unique_id "apK-M4v3RhPI65jTFG4ZHAAAA3Q"]
[Sat Aug 29 05:10:43.989118 2026] [security2:error] [pid 1041789:tid 1041945] [client 158.23.184.117:51291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/wp-includes/Test.php"] [unique_id "apK-M4v3RhPI65jTFG4ZHwAAAyw"]
[Sat Aug 29 05:10:43.990712 2026] [security2:error] [pid 1041789:tid 1042029] [client 20.48.250.41:64783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/bootstrap.php"] [unique_id "apK-M4v3RhPI65jTFG4ZIAAAA4A"]
[Sat Aug 29 05:10:43.997839 2026] [security2:error] [pid 1041789:tid 1041983] [client 68.155.159.216:56733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/file.php"] [unique_id "apK-M4v3RhPI65jTFG4ZIQAAA1I"]
[Sat Aug 29 05:10:43.999108 2026] [security2:error] [pid 1041789:tid 1041943] [client 52.139.37.240:29385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK-M4v3RhPI65jTFG4ZIgAAAyo"]
[Sat Aug 29 05:10:44.001885 2026] [security2:error] [pid 1041789:tid 1042031] [client 20.104.104.62:20710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-includes/rest-api/fields/anbu.php"] [unique_id "apK-NIv3RhPI65jTFG4ZIwAAA4I"]
[Sat Aug 29 05:10:44.021967 2026] [security2:error] [pid 11274:tid 11516] [client 20.48.250.41:50348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/s1.php"] [unique_id "apK-NGbX5DA3XO6e_qQkZQAAAVE"]
[Sat Aug 29 05:10:44.039282 2026] [security2:error] [pid 1041789:tid 1042015] [client 20.48.250.41:49653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/mar.php"] [unique_id "apK-NIv3RhPI65jTFG4ZJAAAA3I"]
[Sat Aug 29 05:10:44.099181 2026] [security2:error] [pid 11274:tid 11505] [client 20.48.250.41:50216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/166.php"] [unique_id "apK-NGbX5DA3XO6e_qQkZwAAAUY"]
[Sat Aug 29 05:10:44.108572 2026] [security2:error] [pid 1041789:tid 1042010] [client 20.100.175.163:30731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/.trash7206/index.php"] [unique_id "apK-NIv3RhPI65jTFG4ZJQAAA20"]
[Sat Aug 29 05:10:44.126061 2026] [security2:error] [pid 1321:tid 1561] [client 20.104.104.62:48470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/yyy.php"] [unique_id "apK-NGjCPtor9NZ-byTpXgAABoQ"]
[Sat Aug 29 05:10:44.132658 2026] [security2:error] [pid 11274:tid 11532] [client 158.23.184.117:51318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/wp-includes/pomo.php"] [unique_id "apK-NGbX5DA3XO6e_qQkaQAAAWE"]
[Sat Aug 29 05:10:44.155808 2026] [security2:error] [pid 11274:tid 11561] [client 20.104.49.130:53643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/about.php"] [unique_id "apK-NGbX5DA3XO6e_qQkagAAAX0"]
[Sat Aug 29 05:10:44.159981 2026] [security2:error] [pid 11274:tid 11515] [client 20.48.250.41:50337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/0byte.php"] [unique_id "apK-NGbX5DA3XO6e_qQkbwAAAVA"]
[Sat Aug 29 05:10:44.160150 2026] [security2:error] [pid 11274:tid 11430] [remote 136.108.8.198:52446] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "bio-vein.com"] [uri "/api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ"] [unique_id "apK-NGbX5DA3XO6e_qQkcAABcXQ"]
[Sat Aug 29 05:10:44.160497 2026] [security2:error] [pid 11274:tid 11426] [remote 136.108.8.198:52446] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bio-vein.com"] [uri "/@fs/var/task/.env"] [unique_id "apK-NGbX5DA3XO6e_qQkawABcXA"]
[Sat Aug 29 05:10:44.170814 2026] [security2:error] [pid 11274:tid 11450] [client 20.48.250.41:62366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/export.php"] [unique_id "apK-NGbX5DA3XO6e_qQkcQAAARA"]
[Sat Aug 29 05:10:44.196247 2026] [security2:error] [pid 11274:tid 11534] [client 52.139.37.240:29169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/zafir1.php"] [unique_id "apK-NGbX5DA3XO6e_qQkcgAAAWM"]
[Sat Aug 29 05:10:44.198079 2026] [security2:error] [pid 1041789:tid 1041971] [client 40.83.93.50:8940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/menu.php"] [unique_id "apK-NIv3RhPI65jTFG4ZJgAAA0Y"]
[Sat Aug 29 05:10:44.206368 2026] [security2:error] [pid 1041789:tid 1041939] [client 4.205.62.107:4950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/server_info.php"] [unique_id "apK-NIv3RhPI65jTFG4ZJwAAAyY"]
[Sat Aug 29 05:10:44.206608 2026] [security2:error] [pid 1041789:tid 1042019] [client 91.92.47.191:57138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.giantgardening.com"] [uri "/config.php"] [unique_id "apK-NIv3RhPI65jTFG4ZKAAAA3Y"]
[Sat Aug 29 05:10:44.218613 2026] [security2:error] [pid 11274:tid 11541] [client 20.48.250.41:49652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/ccu.php"] [unique_id "apK-NGbX5DA3XO6e_qQkcwAAAWo"]
[Sat Aug 29 05:10:44.238553 2026] [security2:error] [pid 1321:tid 1556] [client 20.63.219.114:2033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/menu.php"] [unique_id "apK-NGjCPtor9NZ-byTpXwAABn8"]
[Sat Aug 29 05:10:44.247234 2026] [security2:error] [pid 11274:tid 11523] [client 20.48.250.41:50181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/h2a2ck.php"] [unique_id "apK-NGbX5DA3XO6e_qQkdAAAAVg"]
[Sat Aug 29 05:10:44.264761 2026] [security2:error] [pid 1041789:tid 1041953] [client 158.158.54.35:7094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/t.php"] [unique_id "apK-NIv3RhPI65jTFG4ZKQAAAzQ"]
[Sat Aug 29 05:10:44.299574 2026] [security2:error] [pid 11274:tid 11529] [client 195.178.110.247:32870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.creditrebuild-ca.coveryourauto.com"] [uri "/index.php"] [unique_id "apK-NGbX5DA3XO6e_qQkeAAAAV4"]
[Sat Aug 29 05:10:44.302815 2026] [core:error] [pid 11274:tid 11490] [client 20.52.41.200:2752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:44.302830 2026] [core:error] [pid 11274:tid 11490] [client 20.52.41.200:2752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:44.303982 2026] [security2:error] [pid 1041789:tid 1041935] [client 20.48.250.41:50396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/xr.php"] [unique_id "apK-NIv3RhPI65jTFG4ZKwAAAyI"]
[Sat Aug 29 05:10:44.304508 2026] [security2:error] [pid 11274:tid 11453] [client 158.158.54.35:8508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "apK-NGbX5DA3XO6e_qQkdQAAARM"]
[Sat Aug 29 05:10:44.312381 2026] [security2:error] [pid 11274:tid 11503] [client 20.104.104.62:48490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/bgymj.php"] [unique_id "apK-NGbX5DA3XO6e_qQkegAAAUQ"]
[Sat Aug 29 05:10:44.312933 2026] [security2:error] [pid 11274:tid 11479] [client 20.151.200.44:63643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/inject.php"] [unique_id "apK-NGbX5DA3XO6e_qQkewAAASw"]
[Sat Aug 29 05:10:44.324576 2026] [security2:error] [pid 11274:tid 11492] [client 20.48.250.41:62430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/gk.php"] [unique_id "apK-NGbX5DA3XO6e_qQkfAAAATk"]
[Sat Aug 29 05:10:44.353960 2026] [security2:error] [pid 11274:tid 11446] [client 74.248.24.12:10984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/cc.php"] [unique_id "apK-NGbX5DA3XO6e_qQkfQAAAQw"]
[Sat Aug 29 05:10:44.367075 2026] [security2:error] [pid 1321:tid 1579] [client 4.205.62.107:62727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/database.php"] [unique_id "apK-NGjCPtor9NZ-byTpYQAABpY"]
[Sat Aug 29 05:10:44.382639 2026] [security2:error] [pid 11274:tid 11522] [client 20.48.250.41:49640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/ak.php"] [unique_id "apK-NGbX5DA3XO6e_qQkfwAAAVc"]
[Sat Aug 29 05:10:44.394947 2026] [security2:error] [pid 11274:tid 11455] [client 52.139.37.240:29434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/abc.php"] [unique_id "apK-NGbX5DA3XO6e_qQkgAAAARU"]
[Sat Aug 29 05:10:44.398664 2026] [security2:error] [pid 11274:tid 11552] [client 20.48.250.41:50297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/error_log.php"] [unique_id "apK-NGbX5DA3XO6e_qQkgQAAAXQ"]
[Sat Aug 29 05:10:44.405114 2026] [security2:error] [pid 1321:tid 1615] [client 20.151.200.44:63692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/Zeiss.php"] [unique_id "apK-NGjCPtor9NZ-byTpYwAABro"]
[Sat Aug 29 05:10:44.406250 2026] [security2:error] [pid 11274:tid 11449] [client 20.104.104.62:20807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/anbu.php"] [unique_id "apK-NGbX5DA3XO6e_qQkgwAAAQ8"]
[Sat Aug 29 05:10:44.407042 2026] [security2:error] [pid 11274:tid 11537] [client 158.23.184.117:61314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/wp-admin/link-add.php"] [unique_id "apK-NGbX5DA3XO6e_qQkhAAAAWY"]
[Sat Aug 29 05:10:44.440188 2026] [security2:error] [pid 11274:tid 11571] [client 57.141.14.97:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/categorie-produit/fruits/page/6/"] [unique_id "apK-NGbX5DA3XO6e_qQkhQAAAYc"]
[Sat Aug 29 05:10:44.463685 2026] [security2:error] [pid 11274:tid 11504] [client 195.178.110.247:54946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.creditrebuild-ca.coveryourauto.com"] [uri "/index.php"] [unique_id "apK-NGbX5DA3XO6e_qQkhwAAAUU"]
[Sat Aug 29 05:10:44.467103 2026] [security2:error] [pid 1321:tid 1589] [client 20.48.250.41:29594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/h02ugyh.php"] [unique_id "apK-NGjCPtor9NZ-byTpZAAABqA"]
[Sat Aug 29 05:10:44.494389 2026] [security2:error] [pid 1321:tid 1509] [client 40.83.93.50:6752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/config.php"] [unique_id "apK-NGjCPtor9NZ-byTpZQAABlE"]
[Sat Aug 29 05:10:44.498260 2026] [security2:error] [pid 1321:tid 1598] [client 4.205.62.107:64936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/oiko6u.php"] [unique_id "apK-NGjCPtor9NZ-byTpZgAABqk"]
[Sat Aug 29 05:10:44.505987 2026] [security2:error] [pid 11274:tid 11553] [client 20.104.104.62:48499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/fh26.php"] [unique_id "apK-NGbX5DA3XO6e_qQkiAAAAXU"]
[Sat Aug 29 05:10:44.512112 2026] [security2:error] [pid 1041789:tid 1042006] [client 20.48.250.41:49621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/lib.php"] [unique_id "apK-NIv3RhPI65jTFG4ZLQAAA2k"]
[Sat Aug 29 05:10:44.550791 2026] [security2:error] [pid 1321:tid 1488] [client 158.23.184.117:6287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/wp-includes/Text.php"] [unique_id "apK-NGjCPtor9NZ-byTpZwAABjw"]
[Sat Aug 29 05:10:44.556691 2026] [security2:error] [pid 1041789:tid 1041991] [client 20.48.250.41:50294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/403.php"] [unique_id "apK-NIv3RhPI65jTFG4ZLwAAA1o"]
[Sat Aug 29 05:10:44.567748 2026] [security2:error] [pid 11274:tid 11466] [client 20.48.250.41:64821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/logs1.php"] [unique_id "apK-NGbX5DA3XO6e_qQkiwAAASA"]
[Sat Aug 29 05:10:44.590766 2026] [security2:error] [pid 11274:tid 11448] [client 52.139.37.240:29137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/c1.php"] [unique_id "apK-NGbX5DA3XO6e_qQkjAAAAQ4"]
[Sat Aug 29 05:10:44.604744 2026] [security2:error] [pid 1041789:tid 1041960] [client 20.100.175.163:28473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wk/index.php"] [unique_id "apK-NIv3RhPI65jTFG4ZMAAAAzs"]
[Sat Aug 29 05:10:44.610702 2026] [security2:error] [pid 11274:tid 11445] [client 4.205.62.107:6900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/setup-config.php"] [unique_id "apK-NGbX5DA3XO6e_qQkkAAAAQs"]
[Sat Aug 29 05:10:44.611174 2026] [security2:error] [pid 11274:tid 11502] [client 20.48.250.41:50387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/xxw.php"] [unique_id "apK-NGbX5DA3XO6e_qQkkQAAAUM"]
[Sat Aug 29 05:10:44.641842 2026] [security2:error] [pid 1041789:tid 1041944] [client 20.63.219.114:9161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/alfa.php"] [unique_id "apK-NIv3RhPI65jTFG4ZMQAAAys"]
[Sat Aug 29 05:10:44.648347 2026] [security2:error] [pid 1321:tid 1555] [client 20.48.250.41:49554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/wp-style.php"] [unique_id "apK-NGjCPtor9NZ-byTpaAAABn4"]
[Sat Aug 29 05:10:44.672419 2026] [security2:error] [pid 11274:tid 11565] [client 158.23.147.79:24574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK-NGbX5DA3XO6e_qQknAAAAYE"]
[Sat Aug 29 05:10:44.676089 2026] [security2:error] [pid 1321:tid 1502] [client 4.205.62.107:61739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/rum.or.php"] [unique_id "apK-NGjCPtor9NZ-byTpaQAABko"]
[Sat Aug 29 05:10:44.677993 2026] [security2:error] [pid 11274:tid 11538] [client 20.104.104.62:20804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-content/%E5%B9%B3%E4%BB%AE%E5%90%8Ds.php"] [unique_id "apK-NGbX5DA3XO6e_qQknQAAAWc"]
[Sat Aug 29 05:10:44.679484 2026] [security2:error] [pid 11274:tid 11519] [client 158.23.147.79:44528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK-NGbX5DA3XO6e_qQkngAAAVQ"]
[Sat Aug 29 05:10:44.680404 2026] [security2:error] [pid 11274:tid 11507] [client 40.83.93.50:12582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/alfa.php"] [unique_id "apK-NGbX5DA3XO6e_qQknwAAAUg"]
[Sat Aug 29 05:10:44.693032 2026] [security2:error] [pid 1321:tid 1510] [client 158.23.184.117:6333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/wp-trackback.php"] [unique_id "apK-NGjCPtor9NZ-byTpagAABlI"]
[Sat Aug 29 05:10:44.699201 2026] [security2:error] [pid 11274:tid 11500] [client 20.104.104.62:48666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/fgd.php"] [unique_id "apK-NGbX5DA3XO6e_qQkoQAAAUE"]
[Sat Aug 29 05:10:44.707890 2026] [security2:error] [pid 1041789:tid 1042020] [client 158.158.54.35:21696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/i.php"] [unique_id "apK-NIv3RhPI65jTFG4ZMgAAA3c"]
[Sat Aug 29 05:10:44.716055 2026] [security2:error] [pid 11274:tid 11563] [client 158.23.147.79:29572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/admin.php"] [unique_id "apK-NGbX5DA3XO6e_qQkowAAAX8"]
[Sat Aug 29 05:10:44.741149 2026] [security2:error] [pid 11274:tid 11506] [client 20.48.250.41:50298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/cytyr.php"] [unique_id "apK-NGbX5DA3XO6e_qQkpQAAAUc"]
[Sat Aug 29 05:10:44.759563 2026] [security2:error] [pid 1041789:tid 1042042] [client 20.104.49.130:58196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "coveryourauto.com"] [uri "/mac.php"] [unique_id "apK-NIv3RhPI65jTFG4ZMwAAA40"]
[Sat Aug 29 05:10:44.760483 2026] [security2:error] [pid 1041789:tid 1041981] [client 158.158.54.35:17674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/css/wp-login.php"] [unique_id "apK-NIv3RhPI65jTFG4ZNAAAA1A"]
[Sat Aug 29 05:10:44.763978 2026] [security2:error] [pid 1041789:tid 1041964] [client 20.48.250.41:64888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/inege.php"] [unique_id "apK-NIv3RhPI65jTFG4ZNQAAAz8"]
[Sat Aug 29 05:10:44.764002 2026] [security2:error] [pid 11274:tid 11458] [client 20.52.41.200:2808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/222.php"] [unique_id "apK-NGbX5DA3XO6e_qQkpwAAARg"]
[Sat Aug 29 05:10:44.785090 2026] [security2:error] [pid 1321:tid 1512] [client 52.139.37.240:29389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/index.php/feed/atom/"] [unique_id "apK-NGjCPtor9NZ-byTpawAABlQ"]
[Sat Aug 29 05:10:44.792677 2026] [security2:error] [pid 11274:tid 11470] [client 20.48.250.41:50369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/bolt.php"] [unique_id "apK-NGbX5DA3XO6e_qQkqQAAASQ"]
[Sat Aug 29 05:10:44.839022 2026] [security2:error] [pid 1041789:tid 1041962] [client 114.119.159.20:63589] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "harvesthouse.ph"] [uri "/2015/02"] [unique_id "apK-NIv3RhPI65jTFG4ZOQAAAz0"], referer: http://harvesthouse.ph/2015/02
[Sat Aug 29 05:10:44.839206 2026] [security2:error] [pid 1041789:tid 1041994] [client 158.23.184.117:51327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/wp-admin/maint.php"] [unique_id "apK-NIv3RhPI65jTFG4ZOAAAA10"]
[Sat Aug 29 05:10:44.843826 2026] [security2:error] [pid 1321:tid 1577] [client 20.48.250.41:49650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/browse.php"] [unique_id "apK-NGjCPtor9NZ-byTpbAAABpQ"]
[Sat Aug 29 05:10:44.863984 2026] [security2:error] [pid 1041789:tid 1041957] [client 20.104.104.62:48674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/inject.php"] [unique_id "apK-NIv3RhPI65jTFG4ZOgAAAzg"]
[Sat Aug 29 05:10:44.881028 2026] [security2:error] [pid 1041789:tid 1041941] [client 74.248.24.12:4599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/files/index.php"] [unique_id "apK-NIv3RhPI65jTFG4ZOwAAAyg"]
[Sat Aug 29 05:10:44.892664 2026] [security2:error] [pid 1041789:tid 1041975] [client 20.48.250.41:49254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/galer.php"] [unique_id "apK-NIv3RhPI65jTFG4ZPAAAA0o"]
[Sat Aug 29 05:10:44.953015 2026] [security2:error] [pid 1041789:tid 1041961] [client 20.48.250.41:64774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/wp-link10.php"] [unique_id "apK-NIv3RhPI65jTFG4ZPQAAAzw"]
[Sat Aug 29 05:10:44.956802 2026] [security2:error] [pid 11274:tid 11532] [client 158.23.147.79:14282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK-NGbX5DA3XO6e_qQkugAAAWE"]
[Sat Aug 29 05:10:44.965524 2026] [security2:error] [pid 1321:tid 1559] [client 20.48.250.41:50414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/rtx.php"] [unique_id "apK-NGjCPtor9NZ-byTpbgAABoI"]
[Sat Aug 29 05:10:44.981427 2026] [security2:error] [pid 1321:tid 1602] [client 52.139.37.240:29394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/root.php"] [unique_id "apK-NGjCPtor9NZ-byTpbwAABq0"]
[Sat Aug 29 05:10:44.986012 2026] [security2:error] [pid 1041789:tid 1042048] [client 158.23.184.117:51265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/wp-includes/num.php"] [unique_id "apK-NIv3RhPI65jTFG4ZPgAAA5M"]
[Sat Aug 29 05:10:45.016480 2026] [http2:warn] [pid 1017536:tid 1017739] [client 57.141.14.32:63142] h2_stream(1017536-172-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:10:45.018310 2026] [security2:error] [pid 1321:tid 1586] [client 20.63.219.114:2037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/feed-rss2-queue.php"] [unique_id "apK-NWjCPtor9NZ-byTpcAAABp0"]
[Sat Aug 29 05:10:45.038065 2026] [security2:error] [pid 1321:tid 1552] [client 20.48.250.41:49544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/zoo.php"] [unique_id "apK-NWjCPtor9NZ-byTpcQAABns"]
[Sat Aug 29 05:10:45.047841 2026] [security2:error] [pid 1321:tid 1571] [client 40.83.93.50:6757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/22.php"] [unique_id "apK-NWjCPtor9NZ-byTpcgAABo4"]
[Sat Aug 29 05:10:45.062747 2026] [security2:error] [pid 1321:tid 1508] [client 158.23.147.79:5843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/nf_tracking.php"] [unique_id "apK-NWjCPtor9NZ-byTpcwAABlA"]
[Sat Aug 29 05:10:45.074382 2026] [security2:error] [pid 11274:tid 11560] [client 103.171.189.88:51856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-NWbX5DA3XO6e_qQkwAAAAXw"]
[Sat Aug 29 05:10:45.074515 2026] [security2:error] [pid 11274:tid 11560] [client 103.171.189.88:51856] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-NWbX5DA3XO6e_qQkwAAAAXw"]
[Sat Aug 29 05:10:45.087500 2026] [security2:error] [pid 1041789:tid 1041943] [client 91.92.47.191:57146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantgardening.com"] [uri "/contact.php"] [unique_id "apK-NYv3RhPI65jTFG4ZPwAAAyo"]
[Sat Aug 29 05:10:45.099986 2026] [security2:error] [pid 11274:tid 11454] [client 20.104.104.62:64712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-admin/%E5%B9%B3%E4%BB%AE%E5%90%8Ds.php"] [unique_id "apK-NWbX5DA3XO6e_qQkwQAAARQ"]
[Sat Aug 29 05:10:45.100020 2026] [security2:error] [pid 11274:tid 11451] [client 20.104.104.62:48590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/mga.php"] [unique_id "apK-NWbX5DA3XO6e_qQkwgAAARE"]
[Sat Aug 29 05:10:45.104423 2026] [security2:error] [pid 1041789:tid 1042017] [client 20.100.175.163:12666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/admin.php"] [unique_id "apK-NYv3RhPI65jTFG4ZQAAAA3Q"]
[Sat Aug 29 05:10:45.108536 2026] [security2:error] [pid 1321:tid 1523] [client 20.48.250.41:29688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/ckk.php"] [unique_id "apK-NWjCPtor9NZ-byTpdAAABl8"]
[Sat Aug 29 05:10:45.131194 2026] [security2:error] [pid 11274:tid 11450] [client 158.23.184.117:6275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/identity.php"] [unique_id "apK-NWbX5DA3XO6e_qQkwwAAARA"]
[Sat Aug 29 05:10:45.136191 2026] [security2:error] [pid 1321:tid 1528] [client 20.48.250.41:50207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/baixy.php"] [unique_id "apK-NWjCPtor9NZ-byTpdQAABmQ"]
[Sat Aug 29 05:10:45.141069 2026] [security2:error] [pid 1321:tid 1537] [client 20.48.250.41:62410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/ww.php"] [unique_id "apK-NWjCPtor9NZ-byTpdgAABm0"]
[Sat Aug 29 05:10:45.150401 2026] [security2:error] [pid 1041789:tid 1042031] [client 158.23.147.79:62675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/lock.php"] [unique_id "apK-NYv3RhPI65jTFG4ZQQAAA4I"]
[Sat Aug 29 05:10:45.160670 2026] [security2:error] [pid 11274:tid 11545] [client 158.158.54.35:1309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/deepseek_d.php"] [unique_id "apK-NWbX5DA3XO6e_qQkxAAAAW0"]
[Sat Aug 29 05:10:45.165408 2026] [security2:error] [pid 11274:tid 11491] [client 40.83.93.50:12676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/feed-rss2-queue.php"] [unique_id "apK-NWbX5DA3XO6e_qQkxQAAATg"]
[Sat Aug 29 05:10:45.173796 2026] [security2:error] [pid 11274:tid 11523] [client 20.48.250.41:49601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/elp.php"] [unique_id "apK-NWbX5DA3XO6e_qQkxwAAAVg"]
[Sat Aug 29 05:10:45.174639 2026] [security2:error] [pid 11274:tid 11534] [client 52.139.37.240:29146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/shell.php"] [unique_id "apK-NWbX5DA3XO6e_qQkyAAAAWM"]
[Sat Aug 29 05:10:45.207255 2026] [security2:error] [pid 1321:tid 1518] [client 158.158.54.35:12370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/images/index.php"] [unique_id "apK-NWjCPtor9NZ-byTpdwAABlo"]
[Sat Aug 29 05:10:45.220452 2026] [security2:error] [pid 1321:tid 1539] [client 20.52.41.200:2873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/x.php"] [unique_id "apK-NWjCPtor9NZ-byTpeAAABm8"]
[Sat Aug 29 05:10:45.273289 2026] [security2:error] [pid 11274:tid 11479] [client 158.23.147.79:43300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-NWbX5DA3XO6e_qQkygAAASw"]
[Sat Aug 29 05:10:45.276883 2026] [security2:error] [pid 11274:tid 11492] [client 20.48.250.41:29637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.yerudiam.net"] [uri "/R57.php"] [unique_id "apK-NWbX5DA3XO6e_qQkywAAATk"]
[Sat Aug 29 05:10:45.279303 2026] [security2:error] [pid 11274:tid 11341] [remote 136.108.8.198:52452] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "bio-vein.com"] [uri "/icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ"] [unique_id "apK-NWbX5DA3XO6e_qQkzgABRBw"]
[Sat Aug 29 05:10:45.319986 2026] [security2:error] [pid 1321:tid 1566] [client 158.23.184.117:51312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/Radio.php"] [unique_id "apK-NWjCPtor9NZ-byTpegAABok"]
[Sat Aug 29 05:10:45.328889 2026] [security2:error] [pid 11274:tid 11525] [client 20.48.250.41:50221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/ava.php"] [unique_id "apK-NWbX5DA3XO6e_qQk0QAAAVo"]
[Sat Aug 29 05:10:45.344161 2026] [security2:error] [pid 11274:tid 11543] [client 20.48.250.41:64813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/w1px.php"] [unique_id "apK-NWbX5DA3XO6e_qQk0gAAAWs"]
[Sat Aug 29 05:10:45.344764 2026] [security2:error] [pid 11274:tid 11571] [client 4.205.62.107:51441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/87.php"] [unique_id "apK-NWbX5DA3XO6e_qQk0wAAAYc"]
[Sat Aug 29 05:10:45.362321 2026] [security2:error] [pid 11274:tid 11567] [client 20.48.250.41:49633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/666.php"] [unique_id "apK-NWbX5DA3XO6e_qQk1AAAAYM"]
[Sat Aug 29 05:10:45.366430 2026] [security2:error] [pid 1041789:tid 1042005] [client 20.104.49.130:47959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/run.php"] [unique_id "apK-NYv3RhPI65jTFG4ZRgAAA2g"]
[Sat Aug 29 05:10:45.372890 2026] [security2:error] [pid 1321:tid 1613] [client 20.63.219.114:1920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/inputs.php"] [unique_id "apK-NWjCPtor9NZ-byTpfAAABrg"]
[Sat Aug 29 05:10:45.382082 2026] [security2:error] [pid 1041789:tid 1042041] [client 20.104.104.62:48510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/inwp.php"] [unique_id "apK-NYv3RhPI65jTFG4ZSAAAA4w"]
[Sat Aug 29 05:10:45.390554 2026] [security2:error] [pid 1041789:tid 1041946] [client 188.130.128.232:54815] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "drpallos.com"] [uri "/wp-comments-post.php"] [unique_id "apK-NYv3RhPI65jTFG4ZQwAAAy0"], referer: https://drpallos.com/dr-pallos-laguna-niguel/
[Sat Aug 29 05:10:45.391863 2026] [security2:error] [pid 11274:tid 11537] [client 52.139.37.240:29379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK-NWbX5DA3XO6e_qQk1QAAAWY"]
[Sat Aug 29 05:10:45.397097 2026] [security2:error] [pid 1041789:tid 1042000] [client 91.92.47.191:57148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.giantgardening.com"] [uri "/configuration.php"] [unique_id "apK-NYv3RhPI65jTFG4ZSQAAA2M"]
[Sat Aug 29 05:10:45.411681 2026] [security2:error] [pid 11274:tid 11487] [client 20.104.18.15:43928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/44.php"] [unique_id "apK-NWbX5DA3XO6e_qQk1wAAATQ"]
[Sat Aug 29 05:10:45.416626 2026] [security2:error] [pid 11274:tid 11453] [client 74.248.24.12:4597] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "myplumgraphics.com"] [uri "/1.php7"] [unique_id "apK-NWbX5DA3XO6e_qQk2AAAARM"]
[Sat Aug 29 05:10:45.416721 2026] [security2:error] [pid 11274:tid 11453] [client 74.248.24.12:4597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/1.php7"] [unique_id "apK-NWbX5DA3XO6e_qQk2AAAARM"]
[Sat Aug 29 05:10:45.427509 2026] [security2:error] [pid 11274:tid 11555] [client 106.216.114.82:53841] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "utahtsa.com"] [uri "/xmlrpc.php"] [unique_id "apK-NWbX5DA3XO6e_qQk0AAAAXc"]
[Sat Aug 29 05:10:45.429541 2026] [security2:error] [pid 11274:tid 11535] [client 20.104.49.130:52321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/sxxb.php"] [unique_id "apK-NWbX5DA3XO6e_qQk2QAAAWQ"]
[Sat Aug 29 05:10:45.442860 2026] [security2:error] [pid 11274:tid 11474] [client 20.151.200.44:64604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/dbc.php"] [unique_id "apK-NWbX5DA3XO6e_qQk2gAAASg"]
[Sat Aug 29 05:10:45.480241 2026] [security2:error] [pid 11274:tid 11536] [client 20.48.250.41:49240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/gdn.php"] [unique_id "apK-NWbX5DA3XO6e_qQk3AAAAWU"]
[Sat Aug 29 05:10:45.502739 2026] [security2:error] [pid 11274:tid 11466] [client 20.48.250.41:49642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/knmt.php"] [unique_id "apK-NWbX5DA3XO6e_qQk3gAAASA"]
[Sat Aug 29 05:10:45.503233 2026] [security2:error] [pid 1041789:tid 1042019] [client 20.104.18.15:45846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/504.php"] [unique_id "apK-NYv3RhPI65jTFG4ZSgAAA3Y"]
[Sat Aug 29 05:10:45.505284 2026] [security2:error] [pid 11274:tid 11448] [client 4.205.62.107:59078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/atex1.php"] [unique_id "apK-NWbX5DA3XO6e_qQk3wAAAQ4"]
[Sat Aug 29 05:10:45.522524 2026] [security2:error] [pid 11274:tid 11342] [remote 136.108.8.198:52460] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bio-vein.com"] [uri "/@fs/.env"] [unique_id "apK-NWbX5DA3XO6e_qQk4gABTh0"]
[Sat Aug 29 05:10:45.525893 2026] [security2:error] [pid 11274:tid 11509] [client 20.104.18.15:22366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/indo.php"] [unique_id "apK-NWbX5DA3XO6e_qQk4wAAAUo"]
[Sat Aug 29 05:10:45.539329 2026] [security2:error] [pid 11274:tid 11531] [client 158.23.184.117:6291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/wp-includes/Requests/Exception/file.php"] [unique_id "apK-NWbX5DA3XO6e_qQk5AAAAWA"]
[Sat Aug 29 05:10:45.548257 2026] [security2:error] [pid 11274:tid 11498] [client 20.104.18.15:43303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/zoo1.php"] [unique_id "apK-NWbX5DA3XO6e_qQk5QAAAT8"]
[Sat Aug 29 05:10:45.559363 2026] [security2:error] [pid 11274:tid 11528] [client 20.48.250.41:62404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/to.php"] [unique_id "apK-NWbX5DA3XO6e_qQk5gAAAV0"]
[Sat Aug 29 05:10:45.563145 2026] [security2:error] [pid 11274:tid 11346] [remote 136.108.8.198:52460] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "bio-vein.com"] [uri "/wp-config.php.old"] [unique_id "apK-NWbX5DA3XO6e_qQk5wABSyE"]
[Sat Aug 29 05:10:45.564239 2026] [security2:error] [pid 11274:tid 11347] [remote 136.108.8.198:52460] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "bio-vein.com"] [uri "/wp-config.php.bak"] [unique_id "apK-NWbX5DA3XO6e_qQk6AABXCI"]
[Sat Aug 29 05:10:45.565578 2026] [security2:error] [pid 11274:tid 11352] [remote 136.108.8.198:52460] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bio-vein.com"] [uri "/@fs/.env"] [unique_id "apK-NWbX5DA3XO6e_qQk6gABXCc"]
[Sat Aug 29 05:10:45.565831 2026] [security2:error] [pid 11274:tid 11349] [remote 136.108.8.198:52460] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bio-vein.com"] [uri "/@fs/.env"] [unique_id "apK-NWbX5DA3XO6e_qQk6wABXCQ"]
[Sat Aug 29 05:10:45.594815 2026] [security2:error] [pid 11274:tid 11502] [client 52.139.37.240:29182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/wp-content/plugins/linkpreview/il.php"] [unique_id "apK-NWbX5DA3XO6e_qQk7AAAAUM"]
[Sat Aug 29 05:10:45.596635 2026] [security2:error] [pid 1041789:tid 1041950] [client 20.100.175.163:33602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/php8.php"] [unique_id "apK-NYv3RhPI65jTFG4ZSwAAAzE"]
[Sat Aug 29 05:10:45.597003 2026] [security2:error] [pid 11274:tid 11538] [client 20.104.18.15:43273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/h2.php"] [unique_id "apK-NWbX5DA3XO6e_qQk7QAAAWc"]
[Sat Aug 29 05:10:45.616800 2026] [security2:error] [pid 1041789:tid 1042050] [client 20.48.250.41:49263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/f2.php"] [unique_id "apK-NYv3RhPI65jTFG4ZTAAAA5U"]
[Sat Aug 29 05:10:45.630380 2026] [security2:error] [pid 11274:tid 11568] [client 20.104.104.62:48647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/ad1.php"] [unique_id "apK-NWbX5DA3XO6e_qQk8AAAAYQ"]
[Sat Aug 29 05:10:45.637464 2026] [security2:error] [pid 11274:tid 11343] [remote 136.108.8.198:52460] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bio-vein.com"] [uri "/laravel/.env"] [unique_id "apK-NWbX5DA3XO6e_qQk8QABGx4"]
[Sat Aug 29 05:10:45.638042 2026] [security2:error] [pid 11274:tid 11551] [client 4.205.62.107:64256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/fraro.php"] [unique_id "apK-NWbX5DA3XO6e_qQk9AAAAXM"]
[Sat Aug 29 05:10:45.641463 2026] [security2:error] [pid 11274:tid 11350] [remote 136.108.8.198:52460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 198.8.108.136.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bio-vein.com"] [uri "/config/.env.php"] [unique_id "apK-NWbX5DA3XO6e_qQk8wABGyU"]
[Sat Aug 29 05:10:45.641856 2026] [security2:error] [pid 11274:tid 11553] [client 40.83.93.50:6746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/bak.phps"] [unique_id "apK-NWbX5DA3XO6e_qQk9QAAAXU"]
[Sat Aug 29 05:10:45.643137 2026] [security2:error] [pid 11274:tid 11354] [remote 136.108.8.198:52460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 198.8.108.136.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bio-vein.com"] [uri "/.env.php.bak"] [unique_id "apK-NWbX5DA3XO6e_qQk9gABGyk"]
[Sat Aug 29 05:10:45.647777 2026] [security2:error] [pid 11274:tid 11494] [client 40.83.93.50:12552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/inputs.php"] [unique_id "apK-NWbX5DA3XO6e_qQk9wAAATs"]
[Sat Aug 29 05:10:45.648623 2026] [security2:error] [pid 11274:tid 11356] [remote 136.108.8.198:52460] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bio-vein.com"] [uri "/core/.env"] [unique_id "apK-NWbX5DA3XO6e_qQk-AABGys"]
[Sat Aug 29 05:10:45.658187 2026] [security2:error] [pid 11274:tid 11488] [client 20.48.250.41:49572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/sbhu.php"] [unique_id "apK-NWbX5DA3XO6e_qQk-wAAATU"]
[Sat Aug 29 05:10:45.679677 2026] [security2:error] [pid 11274:tid 11445] [client 20.52.41.200:2846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/new.php"] [unique_id "apK-NWbX5DA3XO6e_qQk_QAAAQs"]
[Sat Aug 29 05:10:45.680265 2026] [security2:error] [pid 11274:tid 11477] [client 20.104.18.15:43938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/radio.php"] [unique_id "apK-NWbX5DA3XO6e_qQk_gAAASs"]
[Sat Aug 29 05:10:45.700301 2026] [security2:error] [pid 1041789:tid 1042030] [client 20.104.18.15:22368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/sign.php"] [unique_id "apK-NYv3RhPI65jTFG4ZTgAAA4E"]
[Sat Aug 29 05:10:45.729686 2026] [security2:error] [pid 11274:tid 11505] [client 20.104.18.15:45926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/nice.php"] [unique_id "apK-NWbX5DA3XO6e_qQlAQAAAUY"]
[Sat Aug 29 05:10:45.732130 2026] [security2:error] [pid 11274:tid 11463] [client 158.23.184.117:51285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/wp-admin/add.php"] [unique_id "apK-NWbX5DA3XO6e_qQlAgAAAR0"]
[Sat Aug 29 05:10:45.734748 2026] [security2:error] [pid 11274:tid 11550] [client 20.63.219.114:18967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/class-walker-category-dropdown-class.php"] [unique_id "apK-NWbX5DA3XO6e_qQlAwAAAXI"]
[Sat Aug 29 05:10:45.745733 2026] [security2:error] [pid 11274:tid 11557] [client 20.104.104.62:64716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/plugins.php"] [unique_id "apK-NWbX5DA3XO6e_qQlBQAAAXk"]
[Sat Aug 29 05:10:45.745767 2026] [security2:error] [pid 11274:tid 11486] [client 4.205.62.107:6273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/wp-admin/sc.php"] [unique_id "apK-NWbX5DA3XO6e_qQlBAAAATM"]
[Sat Aug 29 05:10:45.751175 2026] [security2:error] [pid 11274:tid 11561] [client 20.48.250.41:64769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/thui.php"] [unique_id "apK-NWbX5DA3XO6e_qQlBgAAAX0"]
[Sat Aug 29 05:10:45.752870 2026] [security2:error] [pid 11274:tid 11515] [client 158.158.54.35:31916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "apK-NWbX5DA3XO6e_qQlBwAAAVA"]
[Sat Aug 29 05:10:45.763812 2026] [security2:error] [pid 1041789:tid 1041933] [client 20.104.49.130:60986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/well.php"] [unique_id "apK-NYv3RhPI65jTFG4ZUQAAAyA"]
[Sat Aug 29 05:10:45.768061 2026] [security2:error] [pid 11274:tid 11462] [client 20.104.18.15:43941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/wp-content/mod/adminfuns.php"] [unique_id "apK-NWbX5DA3XO6e_qQlCQAAARw"]
[Sat Aug 29 05:10:45.775114 2026] [security2:error] [pid 11274:tid 11489] [client 20.48.250.41:49219] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/grsiuk.php"] [unique_id "apK-NWbX5DA3XO6e_qQlCgAAATY"]
[Sat Aug 29 05:10:45.789793 2026] [security2:error] [pid 11274:tid 11454] [client 158.23.147.79:24515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/chosen.php"] [unique_id "apK-NWbX5DA3XO6e_qQlDAAAARQ"]
[Sat Aug 29 05:10:45.792590 2026] [security2:error] [pid 11274:tid 11526] [client 52.139.37.240:29436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/wp-header-json.php"] [unique_id "apK-NWbX5DA3XO6e_qQlDQAAAVs"]
[Sat Aug 29 05:10:45.805391 2026] [security2:error] [pid 11274:tid 11450] [client 4.205.62.107:63873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/xmy.php"] [unique_id "apK-NWbX5DA3XO6e_qQlDgAAARA"]
[Sat Aug 29 05:10:45.812576 2026] [security2:error] [pid 11274:tid 11541] [client 158.158.54.35:10152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/inputs.php"] [unique_id "apK-NWbX5DA3XO6e_qQlDwAAAWo"]
[Sat Aug 29 05:10:45.821150 2026] [security2:error] [pid 1041789:tid 1041948] [client 158.23.147.79:55252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-admin/admin.php"] [unique_id "apK-NYv3RhPI65jTFG4ZUwAAAy8"]
[Sat Aug 29 05:10:45.822070 2026] [security2:error] [pid 11274:tid 11491] [client 20.104.49.130:57703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/ws45.php"] [unique_id "apK-NWbX5DA3XO6e_qQlEQAAATg"]
[Sat Aug 29 05:10:45.836214 2026] [security2:error] [pid 11274:tid 11534] [client 20.48.250.41:49539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/a332.php"] [unique_id "apK-NWbX5DA3XO6e_qQlEgAAAWM"]
[Sat Aug 29 05:10:45.846266 2026] [security2:error] [pid 1041789:tid 1041990] [client 20.104.18.15:43996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/one.php"] [unique_id "apK-NYv3RhPI65jTFG4ZVQAAA1k"]
[Sat Aug 29 05:10:45.858546 2026] [security2:error] [pid 11274:tid 11520] [client 20.104.18.15:22374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/wnnjpsby.php"] [unique_id "apK-NWbX5DA3XO6e_qQlEwAAAVU"]
[Sat Aug 29 05:10:45.861695 2026] [security2:error] [pid 11274:tid 11476] [client 20.104.104.62:48488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/1vbqo.php"] [unique_id "apK-NWbX5DA3XO6e_qQlFAAAASo"]
[Sat Aug 29 05:10:45.877798 2026] [security2:error] [pid 1041789:tid 1041944] [client 158.23.184.117:6294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/wp-includes/assets/about.php"] [unique_id "apK-NYv3RhPI65jTFG4ZVgAAAys"]
[Sat Aug 29 05:10:45.912371 2026] [security2:error] [pid 1321:tid 1595] [client 20.48.250.41:50264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/wp-scr1pts.php"] [unique_id "apK-NWjCPtor9NZ-byTphwAABqY"]
[Sat Aug 29 05:10:45.917181 2026] [security2:error] [pid 1041789:tid 1042042] [client 34.50.189.51:10890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.189.50.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "discocollective.kriveloff-associates.com"] [uri "/configuration.php.bak"] [unique_id "apK-NYv3RhPI65jTFG4ZVwAAA40"]
[Sat Aug 29 05:10:45.921080 2026] [core:error] [pid 11274:tid 11543] [client 34.50.189.51:10852] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:45.921103 2026] [core:error] [pid 11274:tid 11543] [client 34.50.189.51:10852] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:45.921169 2026] [core:error] [pid 11274:tid 11559] [client 34.50.189.51:10836] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:45.921181 2026] [core:error] [pid 11274:tid 11559] [client 34.50.189.51:10836] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:45.921314 2026] [core:error] [pid 1321:tid 1505] [client 34.50.189.51:10820] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:45.921327 2026] [core:error] [pid 1321:tid 1505] [client 34.50.189.51:10820] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:45.921935 2026] [core:error] [pid 11274:tid 11571] [client 34.50.189.51:10870] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:45.921951 2026] [core:error] [pid 11274:tid 11571] [client 34.50.189.51:10870] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:45.923525 2026] [core:error] [pid 11274:tid 11525] [client 34.50.189.51:10844] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:45.923542 2026] [core:error] [pid 11274:tid 11525] [client 34.50.189.51:10844] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:45.923577 2026] [core:error] [pid 11274:tid 11503] [client 34.50.189.51:10854] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:45.923584 2026] [core:error] [pid 11274:tid 11503] [client 34.50.189.51:10854] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:45.925602 2026] [core:error] [pid 11274:tid 11552] [client 34.50.189.51:10806] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:45.925616 2026] [core:error] [pid 11274:tid 11552] [client 34.50.189.51:10806] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:45.927279 2026] [security2:error] [pid 11274:tid 11455] [client 34.50.189.51:10790] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/web.config"] [unique_id "apK-NWbX5DA3XO6e_qQlGQAAARU"]
[Sat Aug 29 05:10:45.931099 2026] [security2:error] [pid 11274:tid 11501] [client 34.50.189.51:10904] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "discocollective.kriveloff-associates.com"] [uri "/aws-exports.js"] [unique_id "apK-NWbX5DA3XO6e_qQlIwAAAUI"]
[Sat Aug 29 05:10:45.934284 2026] [security2:error] [pid 11274:tid 11501] [client 20.104.18.15:46058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/beence.php"] [unique_id "apK-NWbX5DA3XO6e_qQlJgAAAUI"]
[Sat Aug 29 05:10:45.938918 2026] [security2:error] [pid 11274:tid 11514] [client 74.248.24.12:28758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/disagraeosc.php"] [unique_id "apK-NWbX5DA3XO6e_qQlJwAAAU8"]
[Sat Aug 29 05:10:45.943539 2026] [security2:error] [pid 11274:tid 11554] [client 20.104.18.15:43936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/sao.php"] [unique_id "apK-NWbX5DA3XO6e_qQlKAAAAXY"]
[Sat Aug 29 05:10:45.944999 2026] [core:error] [pid 11274:tid 11495] [client 34.50.189.51:10884] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:45.945020 2026] [core:error] [pid 11274:tid 11495] [client 34.50.189.51:10884] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:45.967451 2026] [security2:error] [pid 11274:tid 11513] [client 20.48.250.41:64895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/Jcrop.php"] [unique_id "apK-NWbX5DA3XO6e_qQlKQAAAU4"]
[Sat Aug 29 05:10:45.983781 2026] [security2:error] [pid 1041789:tid 1041994] [client 158.23.147.79:62732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-content/x/index.php"] [unique_id "apK-NYv3RhPI65jTFG4ZWAAAA10"]
[Sat Aug 29 05:10:46.004551 2026] [security2:error] [pid 11274:tid 11566] [client 52.139.37.240:29156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/zup.php"] [unique_id "apK-NmbX5DA3XO6e_qQlKwAAAYI"]
[Sat Aug 29 05:10:46.005435 2026] [security2:error] [pid 11274:tid 11498] [client 20.48.250.41:49647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/ws66.php"] [unique_id "apK-NmbX5DA3XO6e_qQlLAAAAT8"]
[Sat Aug 29 05:10:46.013954 2026] [security2:error] [pid 11274:tid 11533] [client 20.104.18.15:22470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/gigi.php"] [unique_id "apK-NmbX5DA3XO6e_qQlLgAAAWI"]
[Sat Aug 29 05:10:46.018477 2026] [security2:error] [pid 11274:tid 11475] [client 158.23.184.117:51312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/wp-content/themes/twentytwentythree.php"] [unique_id "apK-NmbX5DA3XO6e_qQlLwAAASk"]
[Sat Aug 29 05:10:46.039901 2026] [security2:error] [pid 11274:tid 11548] [client 20.104.18.15:43864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/503.php"] [unique_id "apK-NmbX5DA3XO6e_qQlMAAAAXA"]
[Sat Aug 29 05:10:46.043770 2026] [security2:error] [pid 11274:tid 11565] [client 20.48.250.41:49249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/num.php"] [unique_id "apK-NmbX5DA3XO6e_qQlMQAAAYE"]
[Sat Aug 29 05:10:46.064804 2026] [security2:error] [pid 11274:tid 11480] [client 158.23.147.79:14228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/goat.php"] [unique_id "apK-NmbX5DA3XO6e_qQlMgAAAS0"]
[Sat Aug 29 05:10:46.088209 2026] [security2:error] [pid 11274:tid 11556] [client 20.104.104.62:47569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-content/priv8.php"] [unique_id "apK-NmbX5DA3XO6e_qQlMwAAAXg"]
[Sat Aug 29 05:10:46.088611 2026] [security2:error] [pid 11274:tid 11500] [client 20.104.18.15:44000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/dapa.php"] [unique_id "apK-NmbX5DA3XO6e_qQlNAAAAUE"]
[Sat Aug 29 05:10:46.091644 2026] [security2:error] [pid 11274:tid 11563] [client 20.104.18.15:46019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/222.php"] [unique_id "apK-NmbX5DA3XO6e_qQlNQAAAX8"]
[Sat Aug 29 05:10:46.118921 2026] [security2:error] [pid 11274:tid 11564] [client 20.104.104.62:48680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/h02ugyh.php"] [unique_id "apK-NmbX5DA3XO6e_qQlNwAAAYA"]
[Sat Aug 29 05:10:46.132242 2026] [security2:error] [pid 11274:tid 11509] [client 40.83.93.50:12797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/install.php"] [unique_id "apK-NmbX5DA3XO6e_qQlOAAAAUo"]
[Sat Aug 29 05:10:46.141117 2026] [security2:error] [pid 11274:tid 11558] [client 20.52.41.200:2782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/menu.php"] [unique_id "apK-NmbX5DA3XO6e_qQlOQAAAXo"]
[Sat Aug 29 05:10:46.159262 2026] [security2:error] [pid 1041789:tid 1042055] [client 40.83.93.50:12549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/class-walker-category-dropdown-class.php"] [unique_id "apK-Nov3RhPI65jTFG4ZWQAAA5o"]
[Sat Aug 29 05:10:46.162809 2026] [security2:error] [pid 11274:tid 11363] [remote 136.108.8.198:52460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 198.8.108.136.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bio-vein.com"] [uri "/configuration.php.bak"] [unique_id "apK-NmbX5DA3XO6e_qQlPQABGzE"]
[Sat Aug 29 05:10:46.163020 2026] [security2:error] [pid 11274:tid 11547] [client 20.48.250.41:62416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/ws58.php"] [unique_id "apK-NmbX5DA3XO6e_qQlPgAAAW8"]
[Sat Aug 29 05:10:46.164272 2026] [security2:error] [pid 11274:tid 11355] [remote 136.108.8.198:52460] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "bio-vein.com"] [uri "/.env.swp"] [unique_id "apK-NmbX5DA3XO6e_qQlPAABGyo"]
[Sat Aug 29 05:10:46.164921 2026] [security2:error] [pid 11274:tid 11365] [remote 136.108.8.198:52460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 198.8.108.136.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bio-vein.com"] [uri "/config.php.bak"] [unique_id "apK-NmbX5DA3XO6e_qQlQQABGzM"]
[Sat Aug 29 05:10:46.166597 2026] [security2:error] [pid 1041789:tid 1042043] [client 158.23.147.79:5932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wzy.php"] [unique_id "apK-Nov3RhPI65jTFG4ZWgAAA44"]
[Sat Aug 29 05:10:46.188317 2026] [security2:error] [pid 11274:tid 11505] [client 20.48.250.41:49607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/ws68.php"] [unique_id "apK-NmbX5DA3XO6e_qQlQwAAAUY"]
[Sat Aug 29 05:10:46.194609 2026] [security2:error] [pid 1041789:tid 1041957] [client 20.104.18.15:43919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/504.php"] [unique_id "apK-Nov3RhPI65jTFG4ZWwAAAzg"]
[Sat Aug 29 05:10:46.200740 2026] [security2:error] [pid 11274:tid 11472] [client 52.139.37.240:29141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/a9.php"] [unique_id "apK-NmbX5DA3XO6e_qQlRAAAASY"]
[Sat Aug 29 05:10:46.205102 2026] [security2:error] [pid 1321:tid 1535] [client 20.48.250.41:50190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/a4.php"] [unique_id "apK-NmjCPtor9NZ-byTpjAAABms"]
[Sat Aug 29 05:10:46.211523 2026] [security2:error] [pid 11274:tid 11463] [client 158.23.184.117:6311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/wp-content/languages/themes/num.php"] [unique_id "apK-NmbX5DA3XO6e_qQlRQAAAR0"]
[Sat Aug 29 05:10:46.212665 2026] [security2:error] [pid 1321:tid 1525] [client 20.151.200.44:62980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/mga.php"] [unique_id "apK-NmjCPtor9NZ-byTpjQAABmE"]
[Sat Aug 29 05:10:46.218219 2026] [security2:error] [pid 11274:tid 11481] [client 20.63.219.114:18324] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webmail.cisagency.com"] [uri "/1.php7"] [unique_id "apK-NmbX5DA3XO6e_qQlRgAAAS4"]
[Sat Aug 29 05:10:46.218309 2026] [security2:error] [pid 11274:tid 11481] [client 20.63.219.114:18324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/1.php7"] [unique_id "apK-NmbX5DA3XO6e_qQlRgAAAS4"]
[Sat Aug 29 05:10:46.224660 2026] [security2:error] [pid 1041789:tid 1042035] [client 20.104.18.15:22353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/info.php/new.php"] [unique_id "apK-Nov3RhPI65jTFG4ZXQAAA4Y"]
[Sat Aug 29 05:10:46.245730 2026] [security2:error] [pid 1041789:tid 1041985] [client 20.104.18.15:43958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/wp-content/l.php"] [unique_id "apK-Nov3RhPI65jTFG4ZXgAAA1Q"]
[Sat Aug 29 05:10:46.246884 2026] [security2:error] [pid 11274:tid 11561] [client 20.104.18.15:45852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/ops.php"] [unique_id "apK-NmbX5DA3XO6e_qQlSAAAAX0"]
[Sat Aug 29 05:10:46.251588 2026] [security2:error] [pid 1041789:tid 1042023] [client 158.23.147.79:62984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/index/function.php"] [unique_id "apK-Nov3RhPI65jTFG4ZYAAAA3o"]
[Sat Aug 29 05:10:46.256260 2026] [security2:error] [pid 11274:tid 11568] [client 158.158.54.35:17695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/alfa.php"] [unique_id "apK-NmbX5DA3XO6e_qQlSQAAAYQ"]
[Sat Aug 29 05:10:46.264063 2026] [security2:error] [pid 11274:tid 11465] [client 20.100.175.163:20426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/install.php"] [unique_id "apK-NmbX5DA3XO6e_qQlSgAAAR8"]
[Sat Aug 29 05:10:46.327390 2026] [security2:error] [pid 1041789:tid 1041988] [client 158.23.147.79:59480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-login.php"] [unique_id "apK-Nov3RhPI65jTFG4ZYgAAA1c"]
[Sat Aug 29 05:10:46.331060 2026] [security2:error] [pid 11274:tid 11524] [client 158.158.54.35:16237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-content/themes/pridmag/il.php"] [unique_id "apK-NmbX5DA3XO6e_qQlSwAAAVk"]
[Sat Aug 29 05:10:46.354532 2026] [security2:error] [pid 1041789:tid 1041945] [client 158.23.184.117:51293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/wp.php"] [unique_id "apK-Nov3RhPI65jTFG4ZYwAAAyw"]
[Sat Aug 29 05:10:46.355538 2026] [security2:error] [pid 1041789:tid 1042047] [client 20.48.250.41:64817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/xs.php"] [unique_id "apK-Nov3RhPI65jTFG4ZZAAAA5I"]
[Sat Aug 29 05:10:46.359648 2026] [security2:error] [pid 11274:tid 11367] [remote 136.108.8.198:52460] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bio-vein.com"] [uri "/wp/.env"] [unique_id "apK-NmbX5DA3XO6e_qQlTAABITU"]
[Sat Aug 29 05:10:46.360150 2026] [security2:error] [pid 1041789:tid 1042031] [client 20.48.250.41:49637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/users.php"] [unique_id "apK-Nov3RhPI65jTFG4ZZQAAA4I"]
[Sat Aug 29 05:10:46.362850 2026] [security2:error] [pid 1321:tid 1531] [client 20.48.250.41:50252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/tfm.php"] [unique_id "apK-NmjCPtor9NZ-byTpjwAABmc"]
[Sat Aug 29 05:10:46.363644 2026] [security2:error] [pid 1321:tid 1611] [client 20.104.18.15:22500] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.nranch.com"] [uri "/wp-content/uploads/"] [unique_id "apK-NmjCPtor9NZ-byTpkAAABrY"]
[Sat Aug 29 05:10:46.375106 2026] [security2:error] [pid 1041789:tid 1042015] [client 158.23.147.79:43325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-Nov3RhPI65jTFG4ZZwAAA3I"]
[Sat Aug 29 05:10:46.384240 2026] [security2:error] [pid 1041789:tid 1041942] [client 20.104.104.62:64765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-admin/priv8.php"] [unique_id "apK-Nov3RhPI65jTFG4ZaAAAAyk"]
[Sat Aug 29 05:10:46.385144 2026] [ssl:error] [pid 11274:tid 11468] [client 54.86.115.253:41914] AH02032: Hostname host2038.hostmonster.com (default host as no SNI was provided) and hostname www.qandlcondos.mattburlick.com provided via HTTP have no compatible SSL setup for policy 'secure'
[Sat Aug 29 05:10:46.388527 2026] [security2:error] [pid 1041789:tid 1041951] [client 45.205.1.124:63469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 124.1.205.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "splsystems.net"] [uri "/assets/plugins/file-uploader/server/php/index.php"] [unique_id "apK-Nov3RhPI65jTFG4ZaQAAAzI"]
[Sat Aug 29 05:10:46.392604 2026] [security2:error] [pid 1321:tid 1494] [client 20.104.18.15:43909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/admin.php"] [unique_id "apK-NmjCPtor9NZ-byTpkQAABkI"]
[Sat Aug 29 05:10:46.396832 2026] [security2:error] [pid 1041789:tid 1041983] [client 52.139.37.240:29153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/admin/index.php"] [unique_id "apK-Nov3RhPI65jTFG4ZagAAA1I"]
[Sat Aug 29 05:10:46.402819 2026] [security2:error] [pid 11274:tid 11376] [remote 136.108.8.198:52460] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bio-vein.com"] [uri "/web/.env"] [unique_id "apK-NmbX5DA3XO6e_qQlUQABMD4"]
[Sat Aug 29 05:10:46.402820 2026] [security2:error] [pid 11274:tid 11371] [remote 136.108.8.198:52460] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bio-vein.com"] [uri "/storage/.env"] [unique_id "apK-NmbX5DA3XO6e_qQlUAABMDk"]
[Sat Aug 29 05:10:46.404005 2026] [security2:error] [pid 11274:tid 11523] [client 20.104.49.130:60938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/crgio.php"] [unique_id "apK-NmbX5DA3XO6e_qQlUgAAAVg"]
[Sat Aug 29 05:10:46.404515 2026] [security2:error] [pid 11274:tid 11569] [client 20.151.200.44:22198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/ww2.php"] [unique_id "apK-NmbX5DA3XO6e_qQlUwAAAYU"]
[Sat Aug 29 05:10:46.418122 2026] [security2:error] [pid 1041789:tid 1042041] [client 20.104.18.15:43306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/wp-admin/w.php"] [unique_id "apK-Nov3RhPI65jTFG4ZawAAA4w"]
[Sat Aug 29 05:10:46.423624 2026] [security2:error] [pid 11274:tid 11375] [remote 136.108.8.198:52460] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bio-vein.com"] [uri "/public/.env"] [unique_id "apK-NmbX5DA3XO6e_qQlVAABMD0"]
[Sat Aug 29 05:10:46.424587 2026] [security2:error] [pid 11274:tid 11570] [client 20.104.18.15:46036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK-NmbX5DA3XO6e_qQlVQAAAYY"]
[Sat Aug 29 05:10:46.435046 2026] [security2:error] [pid 11274:tid 11382] [remote 136.108.8.198:52460] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "bio-vein.com"] [uri "/wp-config.php~"] [unique_id "apK-NmbX5DA3XO6e_qQlYAABMEQ"]
[Sat Aug 29 05:10:46.452349 2026] [security2:error] [pid 1041789:tid 1041931] [client 74.248.24.12:10959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-logs.php"] [unique_id "apK-Nov3RhPI65jTFG4ZbAAAAx4"]
[Sat Aug 29 05:10:46.468399 2026] [security2:error] [pid 11274:tid 11473] [client 213.202.253.4:56261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "timportlock.net"] [uri "/memberfuns.php"] [unique_id "apK-NmbX5DA3XO6e_qQlYQAAASc"], referer: www.google.com
[Sat Aug 29 05:10:46.469005 2026] [security2:error] [pid 1041789:tid 1041939] [client 20.104.104.62:48459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/shelp.php"] [unique_id "apK-Nov3RhPI65jTFG4ZbQAAAyY"]
[Sat Aug 29 05:10:46.480688 2026] [security2:error] [pid 11274:tid 11522] [client 4.205.62.107:58494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/kedi.php"] [unique_id "apK-NmbX5DA3XO6e_qQlZAAAAVc"]
[Sat Aug 29 05:10:46.481527 2026] [security2:error] [pid 11274:tid 11378] [remote 136.108.90.41:44498] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.sunlandranch.com"] [uri "/wp/.env"] [unique_id "apK-NmbX5DA3XO6e_qQlYgABFUA"]
[Sat Aug 29 05:10:46.485487 2026] [security2:error] [pid 11274:tid 11386] [remote 136.108.90.41:44498] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.sunlandranch.com"] [uri "/storage/.env"] [unique_id "apK-NmbX5DA3XO6e_qQlZgABFUg"]
[Sat Aug 29 05:10:46.494644 2026] [security2:error] [pid 11274:tid 11484] [client 20.48.250.41:49273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/Geforce.php"] [unique_id "apK-NmbX5DA3XO6e_qQlagAAATE"]
[Sat Aug 29 05:10:46.498864 2026] [security2:error] [pid 11274:tid 11501] [client 20.104.18.15:22494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/w.php"] [unique_id "apK-NmbX5DA3XO6e_qQlbAAAAUI"]
[Sat Aug 29 05:10:46.523602 2026] [security2:error] [pid 11274:tid 11514] [client 20.48.250.41:49570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/bzjdlofz.php"] [unique_id "apK-NmbX5DA3XO6e_qQlbQAAAU8"]
[Sat Aug 29 05:10:46.528504 2026] [security2:error] [pid 11274:tid 11552] [client 20.104.18.15:7084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/gigi.php"] [unique_id "apK-NmbX5DA3XO6e_qQlbgAAAXQ"]
[Sat Aug 29 05:10:46.533037 2026] [security2:error] [pid 11274:tid 11518] [client 20.104.18.15:15189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/bulet.php"] [unique_id "apK-NmbX5DA3XO6e_qQlcAAAAVM"]
[Sat Aug 29 05:10:46.542017 2026] [security2:error] [pid 11274:tid 11539] [client 20.48.250.41:64792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/zu.php"] [unique_id "apK-NmbX5DA3XO6e_qQlcQAAAWg"]
[Sat Aug 29 05:10:46.544161 2026] [security2:error] [pid 11274:tid 11479] [client 158.23.184.117:6272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/xmlrpc.php"] [unique_id "apK-NmbX5DA3XO6e_qQlawAAASw"]
[Sat Aug 29 05:10:46.581833 2026] [security2:error] [pid 11274:tid 11469] [client 20.104.18.15:43315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/wp-content/k.php"] [unique_id "apK-NmbX5DA3XO6e_qQlcwAAASM"]
[Sat Aug 29 05:10:46.583297 2026] [security2:error] [pid 11274:tid 11476] [client 20.52.41.200:2816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK-NmbX5DA3XO6e_qQldAAAASo"]
[Sat Aug 29 05:10:46.595113 2026] [security2:error] [pid 11274:tid 11566] [client 20.104.18.15:43295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/ws85.php"] [unique_id "apK-NmbX5DA3XO6e_qQldQAAAYI"]
[Sat Aug 29 05:10:46.598795 2026] [security2:error] [pid 11274:tid 11503] [client 52.139.37.240:29133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/makeasmtp.php"] [unique_id "apK-NmbX5DA3XO6e_qQldgAAAUQ"]
[Sat Aug 29 05:10:46.601795 2026] [security2:error] [pid 11274:tid 11390] [remote 136.108.90.41:44498] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "autodiscover.sunlandranch.com"] [uri "/wp-config.php~"] [unique_id "apK-NmbX5DA3XO6e_qQldwABYkw"]
[Sat Aug 29 05:10:46.604778 2026] [security2:error] [pid 1321:tid 1515] [client 20.63.219.114:9197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/ds.php"] [unique_id "apK-NmjCPtor9NZ-byTpkwAABlc"]
[Sat Aug 29 05:10:46.622090 2026] [security2:error] [pid 1041789:tid 1042025] [client 149.34.210.141:54889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-Nov3RhPI65jTFG4ZcAAAA3w"]
[Sat Aug 29 05:10:46.622182 2026] [security2:error] [pid 1041789:tid 1042025] [client 149.34.210.141:54889] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-Nov3RhPI65jTFG4ZcAAAA3w"]
[Sat Aug 29 05:10:46.627147 2026] [security2:error] [pid 11274:tid 11565] [client 20.104.18.15:45879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK-NmbX5DA3XO6e_qQlegAAAYE"]
[Sat Aug 29 05:10:46.643800 2026] [security2:error] [pid 11274:tid 11571] [client 40.83.93.50:13738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/colour.php"] [unique_id "apK-NmbX5DA3XO6e_qQlfAAAAYc"]
[Sat Aug 29 05:10:46.646855 2026] [security2:error] [pid 11274:tid 11512] [client 4.205.62.107:59075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/aws_sdk_settings.php"] [unique_id "apK-NmbX5DA3XO6e_qQlfQAAAU0"]
[Sat Aug 29 05:10:46.654143 2026] [security2:error] [pid 1041789:tid 1041953] [client 40.83.93.50:12584] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "chow-s.com"] [uri "/1.php7"] [unique_id "apK-Nov3RhPI65jTFG4ZcQAAAzQ"]
[Sat Aug 29 05:10:46.654220 2026] [security2:error] [pid 1041789:tid 1041953] [client 40.83.93.50:12584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/1.php7"] [unique_id "apK-Nov3RhPI65jTFG4ZcQAAAzQ"]
[Sat Aug 29 05:10:46.666165 2026] [security2:error] [pid 1041789:tid 1041963] [client 20.104.18.15:7158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/info.php/new.php"] [unique_id "apK-Nov3RhPI65jTFG4ZcgAAAz4"]
[Sat Aug 29 05:10:46.668103 2026] [security2:error] [pid 11274:tid 11519] [client 20.48.250.41:50185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/click.php"] [unique_id "apK-NmbX5DA3XO6e_qQlfwAAAVQ"]
[Sat Aug 29 05:10:46.673350 2026] [security2:error] [pid 11274:tid 11395] [remote 136.108.8.198:52460] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "bio-vein.com"] [uri "/wp-config.php.swp"] [unique_id "apK-NmbX5DA3XO6e_qQlgQABQVE"]
[Sat Aug 29 05:10:46.673940 2026] [security2:error] [pid 11274:tid 11369] [remote 136.108.8.198:52460] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "bio-vein.com"] [uri "/wp-config.old"] [unique_id "apK-NmbX5DA3XO6e_qQlgAABQTc"]
[Sat Aug 29 05:10:46.674613 2026] [security2:error] [pid 11274:tid 11556] [client 20.104.18.15:15217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/av.php"] [unique_id "apK-NmbX5DA3XO6e_qQlgwAAAXg"]
[Sat Aug 29 05:10:46.675933 2026] [security2:error] [pid 1041789:tid 1041933] [client 20.104.18.15:22294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/x.php"] [unique_id "apK-Nov3RhPI65jTFG4ZcwAAAyA"]
[Sat Aug 29 05:10:46.691869 2026] [security2:error] [pid 11274:tid 11506] [client 20.48.250.41:49626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/selesai.php"] [unique_id "apK-NmbX5DA3XO6e_qQlhQAAAUc"]
[Sat Aug 29 05:10:46.708740 2026] [security2:error] [pid 11274:tid 11400] [remote 136.108.90.41:44498] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "autodiscover.sunlandranch.com"] [uri "/wp-config.old"] [unique_id "apK-NmbX5DA3XO6e_qQliAABYlY"]
[Sat Aug 29 05:10:46.711498 2026] [security2:error] [pid 11274:tid 11507] [client 158.23.184.117:6277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/app.php"] [unique_id "apK-NmbX5DA3XO6e_qQliQAAAUg"]
[Sat Aug 29 05:10:46.719177 2026] [security2:error] [pid 11274:tid 11401] [remote 136.108.90.41:44498] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "autodiscover.sunlandranch.com"] [uri "/wp-config.php.swp"] [unique_id "apK-NmbX5DA3XO6e_qQligABYlc"]
[Sat Aug 29 05:10:46.721296 2026] [security2:error] [pid 11274:tid 11517] [client 158.158.54.35:22976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/403.php"] [unique_id "apK-NmbX5DA3XO6e_qQliwAAAVI"]
[Sat Aug 29 05:10:46.755198 2026] [security2:error] [pid 11274:tid 11531] [client 20.100.175.163:33615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/ioxi-o.php"] [unique_id "apK-NmbX5DA3XO6e_qQljAAAAWA"]
[Sat Aug 29 05:10:46.757278 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.48.250.41:64835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/lanka.php"] [unique_id "apK-Nov3RhPI65jTFG4ZdAAAA2Q"]
[Sat Aug 29 05:10:46.771591 2026] [security2:error] [pid 11274:tid 11548] [client 158.158.54.35:2036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/assets/images/doc.php"] [unique_id "apK-NmbX5DA3XO6e_qQljQAAAXA"]
[Sat Aug 29 05:10:46.777267 2026] [security2:error] [pid 11274:tid 11558] [client 4.205.62.107:64914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/thui.php"] [unique_id "apK-NmbX5DA3XO6e_qQljgAAAXo"]
[Sat Aug 29 05:10:46.793133 2026] [security2:error] [pid 11274:tid 11444] [client 20.104.18.15:45890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/f.php"] [unique_id "apK-NmbX5DA3XO6e_qQlkwAAAQo"]
[Sat Aug 29 05:10:46.805953 2026] [security2:error] [pid 1041789:tid 1041979] [client 20.104.18.15:43930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/ffs.php"] [unique_id "apK-Nov3RhPI65jTFG4ZdgAAA04"]
[Sat Aug 29 05:10:46.813613 2026] [security2:error] [pid 11274:tid 11545] [client 52.139.37.240:29418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/paku.php"] [unique_id "apK-NmbX5DA3XO6e_qQllgAAAW0"]
[Sat Aug 29 05:10:46.819660 2026] [security2:error] [pid 11274:tid 11505] [client 20.104.18.15:22504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/ssla.php"] [unique_id "apK-NmbX5DA3XO6e_qQlmAAAAUY"]
[Sat Aug 29 05:10:46.822710 2026] [security2:error] [pid 11274:tid 11546] [client 20.104.18.15:43927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/os.php"] [unique_id "apK-NmbX5DA3XO6e_qQlmQAAAW4"]
[Sat Aug 29 05:10:46.834591 2026] [security2:error] [pid 1041789:tid 1042046] [client 20.48.250.41:49641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/shlo.php"] [unique_id "apK-Nov3RhPI65jTFG4ZeQAAA5E"]
[Sat Aug 29 05:10:46.838437 2026] [security2:error] [pid 11274:tid 11463] [client 20.48.250.41:50214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/ms.php"] [unique_id "apK-NmbX5DA3XO6e_qQlmwAAAR0"]
[Sat Aug 29 05:10:46.839535 2026] [security2:error] [pid 11274:tid 11481] [client 20.104.18.15:15151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/images.php"] [unique_id "apK-NmbX5DA3XO6e_qQlnAAAAS4"]
[Sat Aug 29 05:10:46.840672 2026] [security2:error] [pid 11274:tid 11550] [client 20.104.104.62:20723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/403.php"] [unique_id "apK-NmbX5DA3XO6e_qQlnQAAAXI"]
[Sat Aug 29 05:10:46.841618 2026] [security2:error] [pid 11274:tid 11466] [client 20.104.104.62:48466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/13ede.php"] [unique_id "apK-NmbX5DA3XO6e_qQlngAAASA"]
[Sat Aug 29 05:10:46.854027 2026] [security2:error] [pid 11274:tid 11553] [client 158.23.184.117:51309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/aaa.php"] [unique_id "apK-NmbX5DA3XO6e_qQloAAAAXU"]
[Sat Aug 29 05:10:46.888445 2026] [security2:error] [pid 1041789:tid 1041949] [client 4.205.62.107:6496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/debug.php"] [unique_id "apK-Nov3RhPI65jTFG4ZegAAAzA"]
[Sat Aug 29 05:10:46.898413 2026] [security2:error] [pid 11274:tid 11454] [client 91.92.47.191:56258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.giantgardening.com"] [uri "/settings.php"] [unique_id "apK-NmbX5DA3XO6e_qQlogAAARQ"]
[Sat Aug 29 05:10:46.902242 2026] [security2:error] [pid 1321:tid 1567] [client 158.23.147.79:24548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/goods.php"] [unique_id "apK-NmjCPtor9NZ-byTplgAABoo"]
[Sat Aug 29 05:10:46.940133 2026] [security2:error] [pid 1321:tid 1590] [client 4.205.62.107:63919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/ms-edit.php"] [unique_id "apK-NmjCPtor9NZ-byTplwAABqE"]
[Sat Aug 29 05:10:46.941375 2026] [security2:error] [pid 1321:tid 1532] [client 20.48.250.41:64786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/gettest.php"] [unique_id "apK-NmjCPtor9NZ-byTpmAAABmg"]
[Sat Aug 29 05:10:46.946113 2026] [security2:error] [pid 11274:tid 11477] [client 62.60.130.128:52504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.130.60.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.kevinhenley.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "apK-NmbX5DA3XO6e_qQlowAAASs"]
[Sat Aug 29 05:10:46.957641 2026] [security2:error] [pid 1321:tid 1498] [client 74.248.24.12:10949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-admin/css/about.php"] [unique_id "apK-NmjCPtor9NZ-byTpmQAABkY"]
[Sat Aug 29 05:10:46.971725 2026] [security2:error] [pid 1041789:tid 1042018] [client 20.63.219.114:9207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/GOD.php"] [unique_id "apK-Nov3RhPI65jTFG4ZfAAAA3U"]
[Sat Aug 29 05:10:46.979290 2026] [security2:error] [pid 11274:tid 11524] [client 20.104.18.15:15177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/ops.php"] [unique_id "apK-NmbX5DA3XO6e_qQlpAAAAVk"]
[Sat Aug 29 05:10:46.980841 2026] [security2:error] [pid 11274:tid 11572] [client 20.104.18.15:46065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.salamlogisticsinc.com"] [uri "/1dfcd2d08f.php"] [unique_id "apK-NmbX5DA3XO6e_qQlpQAAAYg"]
[Sat Aug 29 05:10:46.983752 2026] [security2:error] [pid 11274:tid 11541] [client 20.48.250.41:49645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/asax.php"] [unique_id "apK-NmbX5DA3XO6e_qQlpgAAAWo"]
[Sat Aug 29 05:10:46.990320 2026] [security2:error] [pid 1321:tid 1507] [client 20.48.160.90:62160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/aa.php"] [unique_id "apK-NmjCPtor9NZ-byTpmgAABk8"]
[Sat Aug 29 05:10:46.997999 2026] [security2:error] [pid 1041789:tid 1041975] [client 20.104.18.15:43920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/htio.php"] [unique_id "apK-Nov3RhPI65jTFG4ZfQAAA0o"]
[Sat Aug 29 05:10:47.013047 2026] [security2:error] [pid 1321:tid 1550] [client 52.139.37.240:29393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/rtx.php"] [unique_id "apK-N2jCPtor9NZ-byTpnAAABnk"]
[Sat Aug 29 05:10:47.028095 2026] [security2:error] [pid 1041789:tid 1041985] [client 20.48.250.41:50201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/zxekqlxb.php"] [unique_id "apK-N4v3RhPI65jTFG4ZfgAAA1Q"]
[Sat Aug 29 05:10:47.039826 2026] [core:error] [pid 11274:tid 11489] [client 20.52.41.200:2874] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:47.039847 2026] [core:error] [pid 11274:tid 11489] [client 20.52.41.200:2874] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:47.040697 2026] [security2:error] [pid 1321:tid 1596] [client 20.104.18.15:22496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "apK-N2jCPtor9NZ-byTpnQAABqc"]
[Sat Aug 29 05:10:47.045641 2026] [security2:error] [pid 1321:tid 1593] [client 158.23.184.117:51303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/hehe.php"] [unique_id "apK-N2jCPtor9NZ-byTpngAABqQ"]
[Sat Aug 29 05:10:47.102795 2026] [security2:error] [pid 1041789:tid 1041943] [client 20.48.250.41:64854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/35.php"] [unique_id "apK-N4v3RhPI65jTFG4ZfwAAAyo"]
[Sat Aug 29 05:10:47.112129 2026] [security2:error] [pid 11274:tid 11534] [client 20.48.160.90:28093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/503.php"] [unique_id "apK-N2bX5DA3XO6e_qQlrQAAAWM"]
[Sat Aug 29 05:10:47.115201 2026] [security2:error] [pid 1321:tid 1580] [client 40.83.93.50:13736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/OK.php"] [unique_id "apK-N2jCPtor9NZ-byTpnwAABpc"]
[Sat Aug 29 05:10:47.121996 2026] [security2:error] [pid 11274:tid 11459] [client 20.104.18.15:43961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/nano.php"] [unique_id "apK-N2bX5DA3XO6e_qQlrgAAARk"]
[Sat Aug 29 05:10:47.125323 2026] [security2:error] [pid 11274:tid 11529] [client 52.139.37.240:31111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/ahax.php"] [unique_id "apK-N2bX5DA3XO6e_qQlrwAAAV4"]
[Sat Aug 29 05:10:47.129447 2026] [security2:error] [pid 11274:tid 11490] [client 20.104.18.15:15181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/coffexium.php"] [unique_id "apK-N2bX5DA3XO6e_qQlsAAAATc"]
[Sat Aug 29 05:10:47.134204 2026] [security2:error] [pid 1041789:tid 1042017] [client 20.48.160.90:63330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/img.php"] [unique_id "apK-N4v3RhPI65jTFG4ZgAAAA3Q"]
[Sat Aug 29 05:10:47.134671 2026] [security2:error] [pid 11274:tid 11486] [client 40.83.93.50:11319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/ds.php"] [unique_id "apK-N2bX5DA3XO6e_qQlsQAAATM"]
[Sat Aug 29 05:10:47.140894 2026] [security2:error] [pid 1321:tid 1551] [client 20.104.49.130:36348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/3.php"] [unique_id "apK-N2jCPtor9NZ-byTpoAAABno"]
[Sat Aug 29 05:10:47.151226 2026] [security2:error] [pid 11274:tid 11496] [client 20.48.160.90:63475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/44.php"] [unique_id "apK-N2bX5DA3XO6e_qQlsgAAAT0"]
[Sat Aug 29 05:10:47.152671 2026] [security2:error] [pid 1321:tid 1503] [client 20.48.250.41:49627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/fetch.php"] [unique_id "apK-N2jCPtor9NZ-byTpoQAABks"]
[Sat Aug 29 05:10:47.165148 2026] [security2:error] [pid 11274:tid 11452] [client 158.158.54.35:14856] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.cloud9walkers.com"] [uri "/1.php"] [unique_id "apK-N2bX5DA3XO6e_qQltQAAARI"]
[Sat Aug 29 05:10:47.165220 2026] [security2:error] [pid 11274:tid 11452] [client 158.158.54.35:14856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/1.php"] [unique_id "apK-N2bX5DA3XO6e_qQltQAAARI"]
[Sat Aug 29 05:10:47.169827 2026] [security2:error] [pid 1041789:tid 1042047] [client 158.23.147.79:14149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK-N4v3RhPI65jTFG4ZggAAA5I"]
[Sat Aug 29 05:10:47.173202 2026] [security2:error] [pid 11274:tid 11492] [client 20.48.250.41:49268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/init.php"] [unique_id "apK-N2bX5DA3XO6e_qQltgAAATk"]
[Sat Aug 29 05:10:47.180340 2026] [security2:error] [pid 1321:tid 1514] [client 20.104.18.15:22472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/wp-aothait.php"] [unique_id "apK-N2jCPtor9NZ-byTpogAABlY"]
[Sat Aug 29 05:10:47.185852 2026] [security2:error] [pid 11274:tid 11544] [client 20.104.18.15:43950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/dev.php"] [unique_id "apK-N2bX5DA3XO6e_qQltwAAAWw"]
[Sat Aug 29 05:10:47.185930 2026] [security2:error] [pid 11274:tid 11569] [client 127.0.0.1:25034] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "127.0.0.1"] [uri "/cgi-sys/autoconfig.cgi"] [unique_id "apK-N2bX5DA3XO6e_qQlrAAAAYU"]
[Sat Aug 29 05:10:47.186138 2026] [security2:error] [pid 11274:tid 11523] [client 74.7.175.134:34704] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "autoconfig.izc.nbb.mybluehost.me"] [uri "/robots.txt"] [unique_id "apK-N2bX5DA3XO6e_qQlqwABWGI"]
[Sat Aug 29 05:10:47.194429 2026] [security2:error] [pid 1321:tid 1599] [client 158.23.184.117:6273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/wp-includes/PHPMailer.php"] [unique_id "apK-N2jCPtor9NZ-byTpowAABqo"]
[Sat Aug 29 05:10:47.209757 2026] [security2:error] [pid 1041789:tid 1042015] [client 20.104.18.15:7041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/w.php"] [unique_id "apK-N4v3RhPI65jTFG4ZgwAAA3I"]
[Sat Aug 29 05:10:47.211570 2026] [security2:error] [pid 11274:tid 11520] [client 52.139.37.240:29163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/update/da222.php"] [unique_id "apK-N2bX5DA3XO6e_qQluwAAAVU"]
[Sat Aug 29 05:10:47.212194 2026] [security2:error] [pid 11274:tid 11414] [remote 136.108.8.198:52460] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "bio-vein.com"] [uri "/static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ"] [unique_id "apK-N2bX5DA3XO6e_qQlvAABV2Q"]
[Sat Aug 29 05:10:47.212394 2026] [security2:error] [pid 1041789:tid 1042023] [client 158.158.54.35:31106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/bgymj.php"] [unique_id "apK-N4v3RhPI65jTFG4ZhAAAA3o"]
[Sat Aug 29 05:10:47.244725 2026] [security2:error] [pid 1041789:tid 1041951] [client 20.48.250.41:62369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/maraz.php"] [unique_id "apK-N4v3RhPI65jTFG4ZhQAAAzI"]
[Sat Aug 29 05:10:47.259489 2026] [security2:error] [pid 11274:tid 11536] [client 20.104.18.15:15188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/BDKR28WP.php"] [unique_id "apK-N2bX5DA3XO6e_qQlvQAAAWU"]
[Sat Aug 29 05:10:47.282002 2026] [security2:error] [pid 1041789:tid 1041982] [client 20.48.250.41:49563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/vx.php"] [unique_id "apK-N4v3RhPI65jTFG4ZiAAAA1E"]
[Sat Aug 29 05:10:47.285312 2026] [security2:error] [pid 1321:tid 1589] [client 20.48.160.90:63426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/h2.php"] [unique_id "apK-N2jCPtor9NZ-byTppQAABqA"]
[Sat Aug 29 05:10:47.291149 2026] [security2:error] [pid 1041789:tid 1042041] [client 158.23.147.79:5834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-admin/setup-config.php"] [unique_id "apK-N4v3RhPI65jTFG4ZiQAAA4w"]
[Sat Aug 29 05:10:47.295908 2026] [security2:error] [pid 1041789:tid 1041988] [client 20.100.175.163:33565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/xmlrpc.php"] [unique_id "apK-N4v3RhPI65jTFG4ZhgAAA1c"]
[Sat Aug 29 05:10:47.315941 2026] [security2:error] [pid 11274:tid 11495] [client 20.48.160.90:28114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/504.php"] [unique_id "apK-N2bX5DA3XO6e_qQlwgAAATw"]
[Sat Aug 29 05:10:47.322295 2026] [security2:error] [pid 1321:tid 1491] [client 52.139.37.240:31046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/breads1.php"] [unique_id "apK-N2jCPtor9NZ-byTppwAABj8"]
[Sat Aug 29 05:10:47.325951 2026] [security2:error] [pid 11274:tid 11469] [client 20.48.160.90:63353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/222.php"] [unique_id "apK-N2bX5DA3XO6e_qQlwwAAASM"]
[Sat Aug 29 05:10:47.329122 2026] [security2:error] [pid 11274:tid 11455] [client 20.104.18.15:43971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/ano.php"] [unique_id "apK-N2bX5DA3XO6e_qQlxQAAARU"]
[Sat Aug 29 05:10:47.338495 2026] [security2:error] [pid 1041789:tid 1041976] [client 158.23.184.117:51274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/wp-content/upgrade/alfanew.php7"] [unique_id "apK-N4v3RhPI65jTFG4ZiwAAA0s"]
[Sat Aug 29 05:10:47.347237 2026] [security2:error] [pid 11274:tid 11527] [client 20.104.104.62:47603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-includes/priv8.php"] [unique_id "apK-N2bX5DA3XO6e_qQlzwAAAVw"]
[Sat Aug 29 05:10:47.348956 2026] [security2:error] [pid 11274:tid 11565] [client 20.104.18.15:22367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/wp-includes/index.php"] [unique_id "apK-N2bX5DA3XO6e_qQl0QAAAYE"]
[Sat Aug 29 05:10:47.358581 2026] [security2:error] [pid 11274:tid 11555] [client 158.23.147.79:62712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/.well-known/content.php"] [unique_id "apK-N2bX5DA3XO6e_qQl0gAAAXc"]
[Sat Aug 29 05:10:47.360273 2026] [security2:error] [pid 11274:tid 11502] [client 20.104.18.15:7069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/x.php"] [unique_id "apK-N2bX5DA3XO6e_qQl0wAAAUM"]
[Sat Aug 29 05:10:47.394116 2026] [security2:error] [pid 11274:tid 11556] [client 20.104.18.15:44001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/gos.php"] [unique_id "apK-N2bX5DA3XO6e_qQl1QAAAXg"]
[Sat Aug 29 05:10:47.394467 2026] [security2:error] [pid 1321:tid 1610] [client 20.63.219.114:2024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/ggfi.php"] [unique_id "apK-N2jCPtor9NZ-byTpqAAABrU"]
[Sat Aug 29 05:10:47.396383 2026] [security2:error] [pid 1041789:tid 1041978] [client 20.48.250.41:50263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/term.php"] [unique_id "apK-N4v3RhPI65jTFG4ZjgAAA00"]
[Sat Aug 29 05:10:47.416623 2026] [security2:error] [pid 11274:tid 11543] [client 20.104.18.15:15199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/sf.php"] [unique_id "apK-N2bX5DA3XO6e_qQl1wAAAWs"]
[Sat Aug 29 05:10:47.421758 2026] [security2:error] [pid 11274:tid 11506] [client 20.48.160.90:63361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/wp-content/mod/adminfuns.php"] [unique_id "apK-N2bX5DA3XO6e_qQl2AAAAUc"]
[Sat Aug 29 05:10:47.429050 2026] [security2:error] [pid 11274:tid 11494] [client 20.48.250.41:49569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/global.php"] [unique_id "apK-N2bX5DA3XO6e_qQl2gAAATs"]
[Sat Aug 29 05:10:47.438308 2026] [security2:error] [pid 1041789:tid 1041947] [client 20.48.250.41:64825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/kbfr.php"] [unique_id "apK-N4v3RhPI65jTFG4ZkAAAAy4"]
[Sat Aug 29 05:10:47.467054 2026] [security2:error] [pid 1041789:tid 1041953] [client 20.48.160.90:51956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/admin.php"] [unique_id "apK-N4v3RhPI65jTFG4ZkQAAAzQ"]
[Sat Aug 29 05:10:47.472696 2026] [security2:error] [pid 11274:tid 11479] [client 74.248.24.12:4336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/system_log.php"] [unique_id "apK-N2bX5DA3XO6e_qQl3AAAASw"]
[Sat Aug 29 05:10:47.483133 2026] [security2:error] [pid 11274:tid 11507] [client 158.23.184.117:51295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/admin/alfa-rex.php"] [unique_id "apK-N2bX5DA3XO6e_qQl3gAAAUg"]
[Sat Aug 29 05:10:47.496771 2026] [security2:error] [pid 1041789:tid 1041962] [client 20.52.41.200:2862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/lite.php"] [unique_id "apK-N4v3RhPI65jTFG4ZkwAAAz0"]
[Sat Aug 29 05:10:47.500176 2026] [security2:error] [pid 11274:tid 11444] [client 20.48.160.90:63268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/key.php"] [unique_id "apK-N2bX5DA3XO6e_qQl3wAAAQo"]
[Sat Aug 29 05:10:47.505893 2026] [security2:error] [pid 11274:tid 11471] [client 52.139.37.240:29174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/wp-admin/min.php"] [unique_id "apK-N2bX5DA3XO6e_qQl4AAAASU"]
[Sat Aug 29 05:10:47.539470 2026] [security2:error] [pid 11274:tid 11466] [client 158.23.147.79:39113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK-N2bX5DA3XO6e_qQl4QAAASA"]
[Sat Aug 29 05:10:47.540945 2026] [security2:error] [pid 1041789:tid 1042026] [client 52.139.37.240:31095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/must.php"] [unique_id "apK-N4v3RhPI65jTFG4ZlAAAA30"]
[Sat Aug 29 05:10:47.545012 2026] [security2:error] [pid 11274:tid 11561] [client 20.48.250.41:50300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/aaa.php"] [unique_id "apK-N2bX5DA3XO6e_qQl4gAAAX0"]
[Sat Aug 29 05:10:47.551414 2026] [security2:error] [pid 11274:tid 11516] [client 20.48.160.90:64519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/sao.php"] [unique_id "apK-N2bX5DA3XO6e_qQl4wAAAVE"]
[Sat Aug 29 05:10:47.554271 2026] [security2:error] [pid 11274:tid 11450] [client 20.104.18.15:15187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/k.php"] [unique_id "apK-N2bX5DA3XO6e_qQl5AAAARA"]
[Sat Aug 29 05:10:47.562797 2026] [security2:error] [pid 1041789:tid 1041990] [client 20.104.104.62:48700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/k8.php"] [unique_id "apK-N4v3RhPI65jTFG4ZlQAAA1k"]
[Sat Aug 29 05:10:47.566697 2026] [security2:error] [pid 11274:tid 11572] [client 20.104.18.15:22427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/file31.php"] [unique_id "apK-N2bX5DA3XO6e_qQl5QAAAYg"]
[Sat Aug 29 05:10:47.573265 2026] [security2:error] [pid 11274:tid 11472] [client 34.169.171.101:9616] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-N2bX5DA3XO6e_qQl5wAAASY"]
[Sat Aug 29 05:10:47.574394 2026] [security2:error] [pid 11274:tid 11489] [client 20.48.250.41:64853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/wp-act.php"] [unique_id "apK-N2bX5DA3XO6e_qQl6gAAATY"]
[Sat Aug 29 05:10:47.581528 2026] [security2:error] [pid 11274:tid 11491] [client 20.104.18.15:7130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/ssla.php"] [unique_id "apK-N2bX5DA3XO6e_qQl8gAAATg"]
[Sat Aug 29 05:10:47.582582 2026] [security2:error] [pid 11274:tid 11462] [client 34.169.171.101:9690] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "forensicengineernj.com"] [uri "/.aider.conf.yml"] [unique_id "apK-N2bX5DA3XO6e_qQl9QAAARw"]
[Sat Aug 29 05:10:47.583439 2026] [security2:error] [pid 11274:tid 11526] [client 34.169.171.101:9730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.171.169.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "forensicengineernj.com"] [uri "/config/aws.php"] [unique_id "apK-N2bX5DA3XO6e_qQl9gAAAVs"]
[Sat Aug 29 05:10:47.584603 2026] [security2:error] [pid 11274:tid 11560] [client 34.169.171.101:9708] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-N2bX5DA3XO6e_qQl8QAAAXw"]
[Sat Aug 29 05:10:47.584837 2026] [security2:error] [pid 1041789:tid 1042051] [client 20.48.250.41:49662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/fs.php"] [unique_id "apK-N4v3RhPI65jTFG4ZngAAA5Y"]
[Sat Aug 29 05:10:47.585848 2026] [security2:error] [pid 11274:tid 11451] [client 34.169.171.101:9772] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/.aws/credentials.bak"] [unique_id "apK-N2bX5DA3XO6e_qQl9wAAARE"]
[Sat Aug 29 05:10:47.588766 2026] [security2:error] [pid 11274:tid 11470] [client 34.169.171.101:9776] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/.aws/credentials.old"] [unique_id "apK-N2bX5DA3XO6e_qQl-AAAASQ"]
[Sat Aug 29 05:10:47.590385 2026] [security2:error] [pid 11274:tid 11521] [client 34.169.171.101:9754] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/aws/.env"] [unique_id "apK-N2bX5DA3XO6e_qQl-gAAAVY"]
[Sat Aug 29 05:10:47.592919 2026] [security2:error] [pid 1321:tid 1564] [client 34.169.171.101:9764] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-N2jCPtor9NZ-byTpsQAABoc"]
[Sat Aug 29 05:10:47.601527 2026] [security2:error] [pid 11274:tid 11490] [client 20.104.18.15:43989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/132.php"] [unique_id "apK-N2bX5DA3XO6e_qQl_wAAATc"]
[Sat Aug 29 05:10:47.603054 2026] [security2:error] [pid 11274:tid 11468] [client 20.48.160.90:28046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/ws85.php"] [unique_id "apK-N2bX5DA3XO6e_qQmAAAAASI"]
[Sat Aug 29 05:10:47.604681 2026] [security2:error] [pid 1041789:tid 1041979] [client 20.104.18.15:43327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/mgrr.php"] [unique_id "apK-N4v3RhPI65jTFG4ZnwAAA04"]
[Sat Aug 29 05:10:47.610112 2026] [security2:error] [pid 11274:tid 11486] [client 34.169.171.101:9616] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-N2bX5DA3XO6e_qQmAQAAATM"], referer: https://forensicengineernj.com/.vscode/launch.json
[Sat Aug 29 05:10:47.620903 2026] [security2:error] [pid 11274:tid 11488] [client 34.169.171.101:9714] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-N2bX5DA3XO6e_qQmCQAAATU"], referer: https://forensicengineernj.com/config/aws.json
[Sat Aug 29 05:10:47.621184 2026] [security2:error] [pid 1041789:tid 1042025] [client 40.83.93.50:6999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mypenneedsink.com"] [uri "/aaa.php"] [unique_id "apK-N4v3RhPI65jTFG4ZqAAAA3w"]
[Sat Aug 29 05:10:47.625384 2026] [security2:error] [pid 11274:tid 11467] [client 158.23.184.117:6297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/wp-content/export.php"] [unique_id "apK-N2bX5DA3XO6e_qQmDAAAASE"]
[Sat Aug 29 05:10:47.627430 2026] [security2:error] [pid 11274:tid 11531] [client 40.83.93.50:8917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/GOD.php"] [unique_id "apK-N2bX5DA3XO6e_qQmDQAAAWA"]
[Sat Aug 29 05:10:47.630229 2026] [security2:error] [pid 1321:tid 1513] [client 34.169.171.101:9764] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-N2jCPtor9NZ-byTptgAABlU"], referer: https://forensicengineernj.com/aws/.env.production
[Sat Aug 29 05:10:47.635490 2026] [security2:error] [pid 11274:tid 11501] [client 4.205.62.107:58418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/wp-content/maintenance.php"] [unique_id "apK-N2bX5DA3XO6e_qQmDgAAAUI"]
[Sat Aug 29 05:10:47.656792 2026] [security2:error] [pid 1321:tid 1562] [client 158.158.54.35:31903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK-N2jCPtor9NZ-byTptwAABoU"]
[Sat Aug 29 05:10:47.674187 2026] [security2:error] [pid 1041789:tid 1041846] [remote 209.42.21.221:54152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 221.21.42.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bacsma.org"] [uri "/wp-login.php"] [unique_id "apK-N4v3RhPI65jTFG4ZqQADbSw"]
[Sat Aug 29 05:10:47.676524 2026] [security2:error] [pid 1041789:tid 1041970] [client 20.48.160.90:62114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/chosen.php"] [unique_id "apK-N4v3RhPI65jTFG4ZqgAAA0U"]
[Sat Aug 29 05:10:47.683820 2026] [security2:error] [pid 11274:tid 11554] [client 20.48.160.90:64553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/dapa.php"] [unique_id "apK-N2bX5DA3XO6e_qQmEQAAAXY"]
[Sat Aug 29 05:10:47.692944 2026] [security2:error] [pid 11274:tid 11437] [remote 136.108.90.41:44498] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "autodiscover.sunlandranch.com"] [uri "/static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ"] [unique_id "apK-N2bX5DA3XO6e_qQmFwABMHo"]
[Sat Aug 29 05:10:47.705589 2026] [security2:error] [pid 11274:tid 11547] [client 52.139.37.240:29425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/wp-admin/wp-fileesx-449.php"] [unique_id "apK-N2bX5DA3XO6e_qQmHAAAAW8"]
[Sat Aug 29 05:10:47.714264 2026] [security2:error] [pid 1041789:tid 1041945] [client 20.48.250.41:49654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/ioxi.php"] [unique_id "apK-N4v3RhPI65jTFG4ZrQAAAyw"]
[Sat Aug 29 05:10:47.716769 2026] [security2:error] [pid 11274:tid 11555] [client 20.104.18.15:15338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/82.php"] [unique_id "apK-N2bX5DA3XO6e_qQmHQAAAXc"]
[Sat Aug 29 05:10:47.727298 2026] [security2:error] [pid 11274:tid 11538] [client 20.104.18.15:7142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "apK-N2bX5DA3XO6e_qQmHgAAAWc"]
[Sat Aug 29 05:10:47.742461 2026] [security2:error] [pid 11274:tid 11508] [client 52.139.37.240:31120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/up.php"] [unique_id "apK-N2bX5DA3XO6e_qQmHwAAAUk"]
[Sat Aug 29 05:10:47.751600 2026] [security2:error] [pid 11274:tid 11522] [client 20.63.219.114:2038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/alfa-rex.php"] [unique_id "apK-N2bX5DA3XO6e_qQmIAAAAVc"]
[Sat Aug 29 05:10:47.755987 2026] [security2:error] [pid 11274:tid 11519] [client 20.48.250.41:49183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/xsox.php"] [unique_id "apK-N2bX5DA3XO6e_qQmIQAAAVQ"]
[Sat Aug 29 05:10:47.761829 2026] [security2:error] [pid 1041789:tid 1041940] [client 20.104.18.15:43946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/v22.php"] [unique_id "apK-N4v3RhPI65jTFG4ZrwAAAyc"]
[Sat Aug 29 05:10:47.763700 2026] [security2:error] [pid 1321:tid 1544] [client 20.48.250.41:62423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/24.php"] [unique_id "apK-N2jCPtor9NZ-byTpugAABnQ"]
[Sat Aug 29 05:10:47.766138 2026] [security2:error] [pid 11274:tid 11556] [client 158.158.54.35:23029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/s.php"] [unique_id "apK-N2bX5DA3XO6e_qQmIgAAAXg"]
[Sat Aug 29 05:10:47.772601 2026] [security2:error] [pid 11274:tid 11563] [client 20.48.160.90:51956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/ffs.php"] [unique_id "apK-N2bX5DA3XO6e_qQmIwAAAX8"]
[Sat Aug 29 05:10:47.777987 2026] [security2:error] [pid 11274:tid 11480] [client 158.23.184.117:6289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/new.php"] [unique_id "apK-N2bX5DA3XO6e_qQmJAAAAS0"]
[Sat Aug 29 05:10:47.780486 2026] [security2:error] [pid 11274:tid 11513] [client 4.205.62.107:60308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/setup-config.php"] [unique_id "apK-N2bX5DA3XO6e_qQmJQAAAU4"]
[Sat Aug 29 05:10:47.794099 2026] [security2:error] [pid 1041789:tid 1041932] [client 20.100.175.163:10932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/filemanager.php"] [unique_id "apK-N4v3RhPI65jTFG4ZsAAAAx8"]
[Sat Aug 29 05:10:47.804103 2026] [security2:error] [pid 11274:tid 11458] [client 20.104.18.15:43842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/mac.php"] [unique_id "apK-N2bX5DA3XO6e_qQmKAAAARg"]
[Sat Aug 29 05:10:47.812150 2026] [security2:error] [pid 1041789:tid 1041951] [client 20.48.160.90:64141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/file1221.php"] [unique_id "apK-N4v3RhPI65jTFG4ZsQAAAzI"]
[Sat Aug 29 05:10:47.814968 2026] [security2:error] [pid 11274:tid 11564] [client 20.48.160.90:64588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/wp-content/l.php"] [unique_id "apK-N2bX5DA3XO6e_qQmKgAAAYA"]
[Sat Aug 29 05:10:47.837156 2026] [security2:error] [pid 1041789:tid 1042005] [client 20.104.49.130:42144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/ortasekerli1.php"] [unique_id "apK-N4v3RhPI65jTFG4ZswAAA2g"]
[Sat Aug 29 05:10:47.839040 2026] [security2:error] [pid 1041789:tid 1041872] [remote 74.7.227.154:54326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK-N4v3RhPI65jTFG4ZtAADUUY"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwp-easycart%2Fadmin%2Ftemplate%2Fproducts%2Finventory
[Sat Aug 29 05:10:47.841367 2026] [security2:error] [pid 1041789:tid 1041946] [client 188.130.128.232:54815] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "302"] [hostname "drpallos.com"] [uri "/wp-comments-post.php"] [unique_id "apK-NYv3RhPI65jTFG4ZQwAAAy0"], referer: https://drpallos.com/dr-pallos-laguna-niguel/
[Sat Aug 29 05:10:47.847925 2026] [security2:error] [pid 1321:tid 1608] [client 20.151.200.44:60201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/wp-wlx.php"] [unique_id "apK-N2jCPtor9NZ-byTpuwAABrM"]
[Sat Aug 29 05:10:47.862963 2026] [security2:error] [pid 1321:tid 1605] [client 20.104.18.15:7000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/wp-aothait.php"] [unique_id "apK-N2jCPtor9NZ-byTpvAAABrA"]
[Sat Aug 29 05:10:47.871801 2026] [security2:error] [pid 11274:tid 11314] [remote 136.108.8.198:43488] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "bio-vein.com"] [uri "/web.config"] [unique_id "apK-N2bX5DA3XO6e_qQmLwABCwE"]
[Sat Aug 29 05:10:47.895677 2026] [security2:error] [pid 11274:tid 11571] [client 111.235.68.106:53804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK-N2bX5DA3XO6e_qQmMQAAAYc"]
[Sat Aug 29 05:10:47.895787 2026] [security2:error] [pid 11274:tid 11571] [client 111.235.68.106:53804] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK-N2bX5DA3XO6e_qQmMQAAAYc"]
[Sat Aug 29 05:10:47.899801 2026] [security2:error] [pid 11274:tid 11504] [client 20.48.250.41:49567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/bootstrap.php"] [unique_id "apK-N2bX5DA3XO6e_qQmMgAAAUU"]
[Sat Aug 29 05:10:47.901524 2026] [security2:error] [pid 1041789:tid 1041983] [client 52.139.37.240:29151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/wp-content/themes/min.php"] [unique_id "apK-N4v3RhPI65jTFG4ZtQAAA1I"]
[Sat Aug 29 05:10:47.903073 2026] [security2:error] [pid 11274:tid 11471] [client 20.104.18.15:15286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/dex.php"] [unique_id "apK-N2bX5DA3XO6e_qQmMwAAASU"]
[Sat Aug 29 05:10:47.916739 2026] [security2:error] [pid 1041789:tid 1042050] [client 20.48.250.41:28658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/lkui.php"] [unique_id "apK-N4v3RhPI65jTFG4ZtgAAA5U"]
[Sat Aug 29 05:10:47.918602 2026] [security2:error] [pid 1041789:tid 1042044] [client 4.205.62.107:64899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/lala.php"] [unique_id "apK-N4v3RhPI65jTFG4ZtwAAA48"]
[Sat Aug 29 05:10:47.927431 2026] [security2:error] [pid 1041789:tid 1041939] [client 158.23.184.117:61336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/wp-content/plugins/revslider/admin.php"] [unique_id "apK-N4v3RhPI65jTFG4ZuAAAAyY"]
[Sat Aug 29 05:10:47.936943 2026] [security2:error] [pid 11274:tid 11546] [client 20.48.250.41:62425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/155.php"] [unique_id "apK-N2bX5DA3XO6e_qQmNAAAAW4"]
[Sat Aug 29 05:10:47.941502 2026] [security2:error] [pid 1321:tid 1508] [client 20.48.160.90:28123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/nano.php"] [unique_id "apK-N2jCPtor9NZ-byTpvQAABlA"]
[Sat Aug 29 05:10:47.943249 2026] [security2:error] [pid 11274:tid 11568] [client 20.48.160.90:64137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/nox.php"] [unique_id "apK-N2bX5DA3XO6e_qQmNgAAAYQ"]
[Sat Aug 29 05:10:47.943499 2026] [security2:error] [pid 11274:tid 11561] [client 20.104.104.62:64735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/00.php"] [unique_id "apK-N2bX5DA3XO6e_qQmNwAAAX0"]
[Sat Aug 29 05:10:47.944725 2026] [security2:error] [pid 1321:tid 1523] [client 20.48.160.90:64583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/wp-admin/w.php"] [unique_id "apK-N2jCPtor9NZ-byTpvgAABl8"]
[Sat Aug 29 05:10:47.954029 2026] [security2:error] [pid 11274:tid 11535] [client 20.52.41.200:2824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/term.php"] [unique_id "apK-N2bX5DA3XO6e_qQmOAAAAWQ"]
[Sat Aug 29 05:10:47.957305 2026] [security2:error] [pid 1041789:tid 1041978] [client 20.104.104.62:48656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/alog.php"] [unique_id "apK-N4v3RhPI65jTFG4ZugAAA00"]
[Sat Aug 29 05:10:47.959950 2026] [cgid:error] [pid 1041789:tid 1041988] [client 52.139.37.240:31630] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/cumbeebailbonds/404.shtml
[Sat Aug 29 05:10:47.965871 2026] [security2:error] [pid 11274:tid 11450] [client 20.104.18.15:43947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/simple.php"] [unique_id "apK-N2bX5DA3XO6e_qQmOgAAARA"]
[Sat Aug 29 05:10:47.968659 2026] [security2:error] [pid 11274:tid 11572] [client 158.23.147.79:60210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK-N2bX5DA3XO6e_qQmOwAAAYg"]
[Sat Aug 29 05:10:47.972595 2026] [security2:error] [pid 11274:tid 11541] [client 20.104.18.15:43972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/wp-activate.php"] [unique_id "apK-N2bX5DA3XO6e_qQmPAAAAWo"]
[Sat Aug 29 05:10:48.007535 2026] [security2:error] [pid 11274:tid 11481] [client 158.23.147.79:24474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK-OGbX5DA3XO6e_qQmPgAAAS4"]
[Sat Aug 29 05:10:48.013416 2026] [security2:error] [pid 1041789:tid 1041904] [remote 209.42.21.221:54152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 221.21.42.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bacsma.org"] [uri "/wp-login.php"] [unique_id "apK-OIv3RhPI65jTFG4ZvQADgGY"], referer: https://bacsma.org/wp-login.php
[Sat Aug 29 05:10:48.016633 2026] [security2:error] [pid 11274:tid 11474] [client 74.248.24.12:10946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/24.php"] [unique_id "apK-OGbX5DA3XO6e_qQmPwAAASg"]
[Sat Aug 29 05:10:48.023710 2026] [security2:error] [pid 11274:tid 11550] [client 4.205.62.107:6914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/nzv.php"] [unique_id "apK-OGbX5DA3XO6e_qQmQwAAAXI"]
[Sat Aug 29 05:10:48.025682 2026] [security2:error] [pid 1041789:tid 1041948] [client 52.139.37.240:31630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/wp-content/155.php"] [unique_id "apK-OIv3RhPI65jTFG4ZvgAAAy8"]
[Sat Aug 29 05:10:48.035474 2026] [security2:error] [pid 1041789:tid 1041944] [client 20.104.18.15:7149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/wp-includes/index.php"] [unique_id "apK-OIv3RhPI65jTFG4ZvwAAAys"]
[Sat Aug 29 05:10:48.045207 2026] [security2:error] [pid 1041789:tid 1041981] [client 20.48.250.41:49602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/export.php"] [unique_id "apK-OIv3RhPI65jTFG4ZwAAAA1A"]
[Sat Aug 29 05:10:48.055694 2026] [security2:error] [pid 1041789:tid 1041991] [client 68.67.112.192:53824] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "marvelouswoodworking.com"] [uri "/robots.txt"] [unique_id "apK-OIv3RhPI65jTFG4ZwQAAA1o"]
[Sat Aug 29 05:10:48.064159 2026] [security2:error] [pid 1321:tid 1573] [client 20.48.250.41:49229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "apK-OGjCPtor9NZ-byTpwAAABpA"]
[Sat Aug 29 05:10:48.072898 2026] [security2:error] [pid 11274:tid 11462] [client 158.23.184.117:61341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/wp-content/images/uploads/admin.php"] [unique_id "apK-OGbX5DA3XO6e_qQmRwAAARw"]
[Sat Aug 29 05:10:48.076136 2026] [security2:error] [pid 11274:tid 11534] [client 4.205.62.107:63939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/sys.php"] [unique_id "apK-OGbX5DA3XO6e_qQmSAAAAWM"]
[Sat Aug 29 05:10:48.078982 2026] [security2:error] [pid 1321:tid 1527] [client 20.48.250.41:64859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/file.php"] [unique_id "apK-OGjCPtor9NZ-byTpwQAABmM"]
[Sat Aug 29 05:10:48.084720 2026] [security2:error] [pid 1321:tid 1518] [client 158.23.147.79:60170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK-OGjCPtor9NZ-byTpwgAABlo"]
[Sat Aug 29 05:10:48.092436 2026] [security2:error] [pid 11274:tid 11470] [client 20.104.18.15:15152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/inso.php"] [unique_id "apK-OGbX5DA3XO6e_qQmSgAAASQ"]
[Sat Aug 29 05:10:48.095182 2026] [security2:error] [pid 1321:tid 1574] [client 20.48.160.90:51867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/ano.php"] [unique_id "apK-OGjCPtor9NZ-byTpwwAABpE"]
[Sat Aug 29 05:10:48.099170 2026] [security2:error] [pid 1321:tid 1560] [client 20.48.160.90:64188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/akismet.php"] [unique_id "apK-OGjCPtor9NZ-byTpxAAABoM"]
[Sat Aug 29 05:10:48.100408 2026] [security2:error] [pid 11274:tid 11553] [client 52.139.37.240:29388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/wp-content/themes/x/bypass.php"] [unique_id "apK-OGbX5DA3XO6e_qQmSwAAAXU"]
[Sat Aug 29 05:10:48.103768 2026] [security2:error] [pid 11274:tid 11529] [client 20.48.160.90:64564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/wp-content/k.php"] [unique_id "apK-OGbX5DA3XO6e_qQmTQAAAV4"]
[Sat Aug 29 05:10:48.106008 2026] [security2:error] [pid 1041789:tid 1041949] [client 20.104.18.15:43959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/xty.php"] [unique_id "apK-OIv3RhPI65jTFG4ZxgAAAzA"]
[Sat Aug 29 05:10:48.117577 2026] [security2:error] [pid 1041789:tid 1041935] [client 20.63.219.114:17945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/cookie.php"] [unique_id "apK-OIv3RhPI65jTFG4ZygAAAyI"]
[Sat Aug 29 05:10:48.124827 2026] [security2:error] [pid 1041789:tid 1041968] [client 20.104.18.15:43912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/wp-trackback.php"] [unique_id "apK-OIv3RhPI65jTFG4ZzQAAA0M"]
[Sat Aug 29 05:10:48.127058 2026] [security2:error] [pid 11274:tid 11464] [client 40.83.93.50:11589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/ggfi.php"] [unique_id "apK-OGbX5DA3XO6e_qQmUwAAAR4"]
[Sat Aug 29 05:10:48.174101 2026] [security2:error] [pid 11274:tid 11319] [remote 136.108.90.41:44500] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "autodiscover.sunlandranch.com"] [uri "/web.config"] [unique_id "apK-OGbX5DA3XO6e_qQmVQABOgY"]
[Sat Aug 29 05:10:48.193599 2026] [security2:error] [pid 11274:tid 11487] [client 20.48.250.41:49618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/gk.php"] [unique_id "apK-OGbX5DA3XO6e_qQmYgAAATQ"]
[Sat Aug 29 05:10:48.200871 2026] [security2:error] [pid 1041789:tid 1041964] [client 158.158.54.35:29076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/test1.php"] [unique_id "apK-OIv3RhPI65jTFG4ZzwAAAz8"]
[Sat Aug 29 05:10:48.221713 2026] [security2:error] [pid 11274:tid 11537] [client 158.23.184.117:51314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/tools.php"] [unique_id "apK-OGbX5DA3XO6e_qQmYwAAAWY"]
[Sat Aug 29 05:10:48.222376 2026] [security2:error] [pid 11274:tid 11563] [client 20.104.18.15:6992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/file31.php"] [unique_id "apK-OGbX5DA3XO6e_qQmZAAAAX8"]
[Sat Aug 29 05:10:48.223497 2026] [security2:error] [pid 11274:tid 11484] [client 52.139.37.240:31078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/wp-update.php"] [unique_id "apK-OGbX5DA3XO6e_qQmZQAAATE"]
[Sat Aug 29 05:10:48.226968 2026] [security2:error] [pid 11274:tid 11480] [client 20.48.250.41:64891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK-OGbX5DA3XO6e_qQmZgAAAS0"]
[Sat Aug 29 05:10:48.235596 2026] [security2:error] [pid 1041789:tid 1041932] [client 20.104.18.15:15190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/aa.php"] [unique_id "apK-OIv3RhPI65jTFG4Z0AAAAx8"]
[Sat Aug 29 05:10:48.242136 2026] [security2:error] [pid 1321:tid 1575] [client 20.104.18.15:22513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/dk.php"] [unique_id "apK-OGjCPtor9NZ-byTpygAABpI"]
[Sat Aug 29 05:10:48.250576 2026] [security2:error] [pid 1041789:tid 1041942] [client 20.48.250.41:50241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/motu.php"] [unique_id "apK-OIv3RhPI65jTFG4Z0QAAAyk"]
[Sat Aug 29 05:10:48.258758 2026] [security2:error] [pid 1041789:tid 1041951] [client 158.158.54.35:10108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-load.php"] [unique_id "apK-OIv3RhPI65jTFG4Z0gAAAzI"]
[Sat Aug 29 05:10:48.266703 2026] [security2:error] [pid 11274:tid 11475] [client 20.104.18.15:43937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/sallu.php"] [unique_id "apK-OGbX5DA3XO6e_qQmaQAAASk"]
[Sat Aug 29 05:10:48.266832 2026] [security2:error] [pid 11274:tid 11458] [client 20.48.160.90:63400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/os.php"] [unique_id "apK-OGbX5DA3XO6e_qQmagAAARg"]
[Sat Aug 29 05:10:48.273049 2026] [security2:error] [pid 1321:tid 1519] [client 20.48.160.90:65382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/ajax.php"] [unique_id "apK-OGjCPtor9NZ-byTpywAABls"]
[Sat Aug 29 05:10:48.283403 2026] [security2:error] [pid 11274:tid 11452] [client 20.100.175.163:33656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-content/themes/admin.php"] [unique_id "apK-OGbX5DA3XO6e_qQmawAAARI"]
[Sat Aug 29 05:10:48.288237 2026] [security2:error] [pid 1321:tid 1558] [client 158.23.147.79:14227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apK-OGjCPtor9NZ-byTpzgAABoE"]
[Sat Aug 29 05:10:48.302535 2026] [security2:error] [pid 1041789:tid 1041884] [remote 74.7.227.154:54326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK-OIv3RhPI65jTFG4Z1QADLVI"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwp-easycart%2Fadmin%2Ftemplate%2Fsettings%2Fdesign
[Sat Aug 29 05:10:48.304795 2026] [security2:error] [pid 1321:tid 1441] [remote 18.138.238.149:59304] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mydwiclass.com"] [uri "/.env"] [unique_id "apK-OGjCPtor9NZ-byTp0wAGnFM"]
[Sat Aug 29 05:10:48.312660 2026] [security2:error] [pid 1041789:tid 1042041] [client 20.104.18.15:43890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/pri.php"] [unique_id "apK-OIv3RhPI65jTFG4Z1gAAA4w"]
[Sat Aug 29 05:10:48.338028 2026] [security2:error] [pid 11274:tid 11446] [client 20.48.250.41:49540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/logs1.php"] [unique_id "apK-OGbX5DA3XO6e_qQmbAAAAQw"]
[Sat Aug 29 05:10:48.371059 2026] [security2:error] [pid 11274:tid 11456] [client 158.23.184.117:51301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/wp-content/uploads/my.php"] [unique_id "apK-OGbX5DA3XO6e_qQmbgAAARY"]
[Sat Aug 29 05:10:48.387048 2026] [security2:error] [pid 1041789:tid 1041983] [client 52.139.37.240:29125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK-OIv3RhPI65jTFG4Z1wAAA1I"]
[Sat Aug 29 05:10:48.398043 2026] [security2:error] [pid 1041789:tid 1042044] [client 20.104.18.15:7165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/dk.php"] [unique_id "apK-OIv3RhPI65jTFG4Z2AAAA48"]
[Sat Aug 29 05:10:48.402247 2026] [security2:error] [pid 1321:tid 1536] [client 20.48.160.90:63378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/htio.php"] [unique_id "apK-OGjCPtor9NZ-byTp1QAABmw"]
[Sat Aug 29 05:10:48.406501 2026] [security2:error] [pid 1041789:tid 1041978] [client 20.104.18.15:15139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/img.php"] [unique_id "apK-OIv3RhPI65jTFG4Z2QAAA00"]
[Sat Aug 29 05:10:48.410213 2026] [security2:error] [pid 1041789:tid 1041931] [client 158.23.147.79:5988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK-OIv3RhPI65jTFG4Z2gAAAx4"]
[Sat Aug 29 05:10:48.411790 2026] [security2:error] [pid 11274:tid 11450] [client 20.48.160.90:65330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/atomlib.php"] [unique_id "apK-OGbX5DA3XO6e_qQmcQAAARA"]
[Sat Aug 29 05:10:48.413108 2026] [security2:error] [pid 11274:tid 11543] [client 20.52.41.200:2192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/config.php"] [unique_id "apK-OGbX5DA3XO6e_qQmcgAAAWs"]
[Sat Aug 29 05:10:48.418858 2026] [security2:error] [pid 11274:tid 11504] [client 52.139.37.240:31117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/xmrlpc.php"] [unique_id "apK-OGbX5DA3XO6e_qQmdAAAAUU"]
[Sat Aug 29 05:10:48.421634 2026] [security2:error] [pid 11274:tid 11472] [client 20.48.250.41:50186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/Ov-Simple1.php"] [unique_id "apK-OGbX5DA3XO6e_qQmdQAAASY"]
[Sat Aug 29 05:10:48.427167 2026] [security2:error] [pid 11274:tid 11499] [client 20.48.250.41:62400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/06.php"] [unique_id "apK-OGbX5DA3XO6e_qQmdwAAAUA"]
[Sat Aug 29 05:10:48.428930 2026] [security2:error] [pid 11274:tid 11463] [client 20.104.18.15:43840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/codex.php"] [unique_id "apK-OGbX5DA3XO6e_qQmeAAAAR0"]
[Sat Aug 29 05:10:48.467569 2026] [security2:error] [pid 1321:tid 1515] [client 158.23.147.79:62680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/cong.php"] [unique_id "apK-OGjCPtor9NZ-byTp2QAABlc"]
[Sat Aug 29 05:10:48.467890 2026] [security2:error] [pid 1041789:tid 1042019] [client 20.104.18.15:22425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/ta.php"] [unique_id "apK-OIv3RhPI65jTFG4Z3AAAA3Y"]
[Sat Aug 29 05:10:48.471476 2026] [security2:error] [pid 11274:tid 11550] [client 20.48.250.41:49548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/inege.php"] [unique_id "apK-OGbX5DA3XO6e_qQmfQAAAXI"]
[Sat Aug 29 05:10:48.481678 2026] [security2:error] [pid 1321:tid 1494] [client 20.63.219.114:1298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/NewFile.php"] [unique_id "apK-OGjCPtor9NZ-byTp2gAABkI"]
[Sat Aug 29 05:10:48.484167 2026] [security2:error] [pid 11274:tid 11465] [client 20.151.200.44:22200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/anz.php"] [unique_id "apK-OGbX5DA3XO6e_qQmfgAAAR8"]
[Sat Aug 29 05:10:48.499084 2026] [security2:error] [pid 11274:tid 11521] [client 20.104.49.130:63560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/forum.php"] [unique_id "apK-OGbX5DA3XO6e_qQmfwAAAVY"]
[Sat Aug 29 05:10:48.509871 2026] [security2:error] [pid 11274:tid 11529] [client 20.104.18.15:43908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/wp_blog_footer.php"] [unique_id "apK-OGbX5DA3XO6e_qQmgQAAAV4"]
[Sat Aug 29 05:10:48.519195 2026] [security2:error] [pid 11274:tid 11526] [client 158.23.184.117:61321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/wp-includes/themes/uploads/config.php"] [unique_id "apK-OGbX5DA3XO6e_qQmggAAAVs"]
[Sat Aug 29 05:10:48.540096 2026] [security2:error] [pid 11274:tid 11544] [client 20.48.160.90:62243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/dev.php"] [unique_id "apK-OGbX5DA3XO6e_qQmiAAAAWw"]
[Sat Aug 29 05:10:48.551761 2026] [security2:error] [pid 11274:tid 11549] [client 20.48.250.41:50267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/wp-blogs.php"] [unique_id "apK-OGbX5DA3XO6e_qQmiQAAAXE"]
[Sat Aug 29 05:10:48.564298 2026] [security2:error] [pid 11274:tid 11569] [client 20.104.18.15:15227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/222.php"] [unique_id "apK-OGbX5DA3XO6e_qQmigAAAYU"]
[Sat Aug 29 05:10:48.565224 2026] [security2:error] [pid 1041789:tid 1041948] [client 20.104.18.15:43911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/5656.php"] [unique_id "apK-OIv3RhPI65jTFG4Z3QAAAy8"]
[Sat Aug 29 05:10:48.566617 2026] [security2:error] [pid 1321:tid 1567] [client 20.48.160.90:64226] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.fox-mart.com"] [uri "/1.php"] [unique_id "apK-OGjCPtor9NZ-byTp3AAABoo"]
[Sat Aug 29 05:10:48.566728 2026] [security2:error] [pid 1321:tid 1567] [client 20.48.160.90:64226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/1.php"] [unique_id "apK-OGjCPtor9NZ-byTp3AAABoo"]
[Sat Aug 29 05:10:48.567434 2026] [security2:error] [pid 1321:tid 1590] [client 20.104.104.62:20859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/000.php"] [unique_id "apK-OGjCPtor9NZ-byTp3QAABqE"]
[Sat Aug 29 05:10:48.587991 2026] [security2:error] [pid 11274:tid 11571] [client 60.243.207.176:62520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK-OGbX5DA3XO6e_qQmjAAAAYc"]
[Sat Aug 29 05:10:48.588096 2026] [security2:error] [pid 11274:tid 11571] [client 60.243.207.176:62520] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK-OGbX5DA3XO6e_qQmjAAAAYc"]
[Sat Aug 29 05:10:48.588603 2026] [security2:error] [pid 11274:tid 11515] [client 52.139.37.240:29387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/wp-info.php"] [unique_id "apK-OGbX5DA3XO6e_qQmiwAAAVA"]
[Sat Aug 29 05:10:48.590474 2026] [security2:error] [pid 1041789:tid 1042051] [client 20.48.160.90:28122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/mgrr.php"] [unique_id "apK-OIv3RhPI65jTFG4Z3gAAA5Y"]
[Sat Aug 29 05:10:48.598501 2026] [security2:error] [pid 11274:tid 11514] [client 20.104.18.15:7156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/ta.php"] [unique_id "apK-OGbX5DA3XO6e_qQmjQAAAU8"]
[Sat Aug 29 05:10:48.603657 2026] [security2:error] [pid 1041789:tid 1041988] [client 40.83.93.50:8911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/alfa-rex.php"] [unique_id "apK-OIv3RhPI65jTFG4Z3wAAA1c"]
[Sat Aug 29 05:10:48.612248 2026] [security2:error] [pid 1321:tid 1498] [client 20.48.250.41:62424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/class.php"] [unique_id "apK-OGjCPtor9NZ-byTp3gAABkY"]
[Sat Aug 29 05:10:48.614814 2026] [security2:error] [pid 1041789:tid 1042046] [client 20.48.250.41:49636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/wp-link10.php"] [unique_id "apK-OIv3RhPI65jTFG4Z4AAAA5E"]
[Sat Aug 29 05:10:48.615867 2026] [security2:error] [pid 11274:tid 11461] [client 52.139.37.240:31071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/about/function.php"] [unique_id "apK-OGbX5DA3XO6e_qQmjgAAARs"]
[Sat Aug 29 05:10:48.645397 2026] [security2:error] [pid 11274:tid 11470] [client 158.158.54.35:29057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/ws.php"] [unique_id "apK-OGbX5DA3XO6e_qQmkgAAASQ"]
[Sat Aug 29 05:10:48.652427 2026] [security2:error] [pid 1041789:tid 1041949] [client 158.23.147.79:43297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK-OIv3RhPI65jTFG4Z4gAAAzA"]
[Sat Aug 29 05:10:48.665269 2026] [security2:error] [pid 1321:tid 1492] [client 158.23.184.117:6292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/av.php"] [unique_id "apK-OGjCPtor9NZ-byTp4AAABkA"]
[Sat Aug 29 05:10:48.670730 2026] [security2:error] [pid 1041789:tid 1041953] [client 20.48.160.90:64540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/gos.php"] [unique_id "apK-OIv3RhPI65jTFG4Z4wAAAzQ"]
[Sat Aug 29 05:10:48.678656 2026] [security2:error] [pid 11274:tid 11547] [client 20.104.18.15:44023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/sushi.php"] [unique_id "apK-OGbX5DA3XO6e_qQmkwAAAW8"]
[Sat Aug 29 05:10:48.694332 2026] [security2:error] [pid 1321:tid 1593] [client 20.48.250.41:49231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/mini.php"] [unique_id "apK-OGjCPtor9NZ-byTp4QAABqQ"]
[Sat Aug 29 05:10:48.696684 2026] [security2:error] [pid 11274:tid 11538] [client 20.104.18.15:43906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/w3lls.php"] [unique_id "apK-OGbX5DA3XO6e_qQmlAAAAWc"]
[Sat Aug 29 05:10:48.732514 2026] [security2:error] [pid 1041789:tid 1042010] [client 20.48.160.90:28065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/mac.php"] [unique_id "apK-OIv3RhPI65jTFG4Z5AAAA20"]
[Sat Aug 29 05:10:48.748706 2026] [security2:error] [pid 1041789:tid 1042000] [client 20.104.18.15:15337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/key.php"] [unique_id "apK-OIv3RhPI65jTFG4Z5QAAA2M"]
[Sat Aug 29 05:10:48.752615 2026] [security2:error] [pid 11274:tid 11556] [client 20.104.18.15:6999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/bo.php"] [unique_id "apK-OGbX5DA3XO6e_qQmmQAAAXg"]
[Sat Aug 29 05:10:48.757576 2026] [security2:error] [pid 11274:tid 11484] [client 20.48.250.41:49564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/ww.php"] [unique_id "apK-OGbX5DA3XO6e_qQmmgAAATE"]
[Sat Aug 29 05:10:48.773277 2026] [security2:error] [pid 11274:tid 11555] [client 4.205.62.107:51453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/upload.form.php"] [unique_id "apK-OGbX5DA3XO6e_qQmmwAAAXc"]
[Sat Aug 29 05:10:48.774531 2026] [security2:error] [pid 11274:tid 11458] [client 20.104.18.15:22461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/bo.php"] [unique_id "apK-OGbX5DA3XO6e_qQmnAAAARg"]
[Sat Aug 29 05:10:48.779785 2026] [security2:error] [pid 11274:tid 11551] [client 20.48.250.41:64809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/8.php"] [unique_id "apK-OGbX5DA3XO6e_qQmnQAAAXM"]
[Sat Aug 29 05:10:48.783474 2026] [security2:error] [pid 11274:tid 11468] [client 52.139.37.240:29134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/wp-wordfence-waf.php"] [unique_id "apK-OGbX5DA3XO6e_qQmngAAASI"]
[Sat Aug 29 05:10:48.797945 2026] [security2:error] [pid 1041789:tid 1042031] [client 20.104.49.130:57643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/srontol.php"] [unique_id "apK-OIv3RhPI65jTFG4Z5gAAA4I"]
[Sat Aug 29 05:10:48.802051 2026] [security2:error] [pid 1041789:tid 1042015] [client 20.48.160.90:62297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/132.php"] [unique_id "apK-OIv3RhPI65jTFG4Z5wAAA3I"]
[Sat Aug 29 05:10:48.802856 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.104.104.62:48482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/adin.php"] [unique_id "apK-OIv3RhPI65jTFG4Z6AAAA3o"]
[Sat Aug 29 05:10:48.810548 2026] [security2:error] [pid 11274:tid 11519] [client 52.139.37.240:31129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/an.php"] [unique_id "apK-OGbX5DA3XO6e_qQmqQAAAVQ"]
[Sat Aug 29 05:10:48.810703 2026] [security2:error] [pid 1041789:tid 1041932] [client 20.48.160.90:64248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/samll.php"] [unique_id "apK-OIv3RhPI65jTFG4Z6QAAAx8"]
[Sat Aug 29 05:10:48.825742 2026] [security2:error] [pid 1041789:tid 1042043] [client 20.100.175.163:28457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-admin/css/admin.php"] [unique_id "apK-OIv3RhPI65jTFG4Z6gAAA44"]
[Sat Aug 29 05:10:48.831117 2026] [security2:error] [pid 1041789:tid 1041942] [client 20.104.104.62:20863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/okkk.php"] [unique_id "apK-OIv3RhPI65jTFG4Z6wAAAyk"]
[Sat Aug 29 05:10:48.852234 2026] [security2:error] [pid 11274:tid 11548] [client 158.158.54.35:31892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/a.php"] [unique_id "apK-OGbX5DA3XO6e_qQmqgAAAXA"]
[Sat Aug 29 05:10:48.856187 2026] [security2:error] [pid 11274:tid 11565] [client 158.23.184.117:61324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/wp-includes/ID3/file.php"] [unique_id "apK-OGbX5DA3XO6e_qQmqwAAAYE"]
[Sat Aug 29 05:10:48.862226 2026] [security2:error] [pid 11274:tid 11455] [client 20.48.160.90:28134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/simple.php"] [unique_id "apK-OGbX5DA3XO6e_qQmrAAAARU"]
[Sat Aug 29 05:10:48.869565 2026] [security2:error] [pid 11274:tid 11517] [client 20.48.250.41:50199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/amp.php"] [unique_id "apK-OGbX5DA3XO6e_qQmrQAAAVI"]
[Sat Aug 29 05:10:48.872382 2026] [security2:error] [pid 11274:tid 11487] [client 20.52.41.200:2630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK-OGbX5DA3XO6e_qQmrgAAATQ"]
[Sat Aug 29 05:10:48.881183 2026] [security2:error] [pid 11274:tid 11561] [client 20.104.18.15:43861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/manga.php"] [unique_id "apK-OGbX5DA3XO6e_qQmsgAAAX0"]
[Sat Aug 29 05:10:48.887238 2026] [security2:error] [pid 11274:tid 11450] [client 20.104.18.15:43843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/fpwch.php"] [unique_id "apK-OGbX5DA3XO6e_qQmtAAAARA"]
[Sat Aug 29 05:10:48.888887 2026] [security2:error] [pid 1321:tid 1551] [client 91.92.47.191:56266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.giantgardening.com"] [uri "/aboutus.php"] [unique_id "apK-OGjCPtor9NZ-byTp4gAABno"]
[Sat Aug 29 05:10:48.904210 2026] [security2:error] [pid 11274:tid 11445] [client 20.104.18.15:15134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/chosen.php"] [unique_id "apK-OGbX5DA3XO6e_qQmuwAAAQs"]
[Sat Aug 29 05:10:48.921513 2026] [security2:error] [pid 1041789:tid 1042028] [client 20.48.250.41:49659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/w1px.php"] [unique_id "apK-OIv3RhPI65jTFG4Z7gAAA38"]
[Sat Aug 29 05:10:48.927198 2026] [security2:error] [pid 1321:tid 1614] [client 4.205.62.107:62780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/wp-admin/sc.php"] [unique_id "apK-OGjCPtor9NZ-byTp4wAABrk"]
[Sat Aug 29 05:10:48.932552 2026] [security2:error] [pid 1321:tid 1597] [client 20.104.18.15:7099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/44.php"] [unique_id "apK-OGjCPtor9NZ-byTp5AAABqg"]
[Sat Aug 29 05:10:48.937140 2026] [security2:error] [pid 1321:tid 1615] [client 20.48.160.90:62324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/v22.php"] [unique_id "apK-OGjCPtor9NZ-byTp5QAABro"]
[Sat Aug 29 05:10:48.947048 2026] [security2:error] [pid 1041789:tid 1041969] [client 20.48.250.41:62378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/0x0x.php"] [unique_id "apK-OIv3RhPI65jTFG4Z7wAAA0Q"]
[Sat Aug 29 05:10:48.958736 2026] [security2:error] [pid 11274:tid 11499] [client 20.104.18.15:22501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/44.php"] [unique_id "apK-OGbX5DA3XO6e_qQmvAAAAUA"]
[Sat Aug 29 05:10:48.974194 2026] [security2:error] [pid 11274:tid 11491] [client 74.248.24.12:20431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK-OGbX5DA3XO6e_qQmwgAAATg"]
[Sat Aug 29 05:10:48.981716 2026] [security2:error] [pid 1321:tid 1514] [client 52.139.37.240:29123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/ws49.php"] [unique_id "apK-OGjCPtor9NZ-byTp5gAABlY"]
[Sat Aug 29 05:10:48.985725 2026] [security2:error] [pid 1321:tid 1495] [client 20.63.219.114:17962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/config.php"] [unique_id "apK-OGjCPtor9NZ-byTp5wAABkM"]
[Sat Aug 29 05:10:48.987231 2026] [security2:error] [pid 1041789:tid 1041990] [client 202.71.25.11:62131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.25.71.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK-OIv3RhPI65jTFG4Z8gAAA1k"]
[Sat Aug 29 05:10:48.987433 2026] [security2:error] [pid 1041789:tid 1041990] [client 202.71.25.11:62131] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK-OIv3RhPI65jTFG4Z8gAAA1k"]
[Sat Aug 29 05:10:49.006782 2026] [security2:error] [pid 1041789:tid 1042050] [client 158.23.184.117:51315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hokkaidonewpaltz.com"] [uri "/wp-admin/css/fff.php"] [unique_id "apK-OYv3RhPI65jTFG4Z8wAAA5U"]
[Sat Aug 29 05:10:49.018230 2026] [security2:error] [pid 1041789:tid 1042014] [client 20.48.250.41:50259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/cc13.php"] [unique_id "apK-OYv3RhPI65jTFG4Z9AAAA3E"]
[Sat Aug 29 05:10:49.020195 2026] [security2:error] [pid 1041789:tid 1041992] [client 20.104.18.15:44015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/domvf.php"] [unique_id "apK-OYv3RhPI65jTFG4Z9QAAA1s"]
[Sat Aug 29 05:10:49.033088 2026] [security2:error] [pid 1321:tid 1589] [client 52.139.37.240:31045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/asw.php"] [unique_id "apK-OWjCPtor9NZ-byTp6AAABqA"]
[Sat Aug 29 05:10:49.054066 2026] [security2:error] [pid 1041789:tid 1041954] [client 4.205.62.107:65023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/public/bnn_.php.php"] [unique_id "apK-OYv3RhPI65jTFG4Z9gAAAzU"]
[Sat Aug 29 05:10:49.054712 2026] [security2:error] [pid 1041789:tid 1041995] [client 20.104.18.15:15201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/file1221.php"] [unique_id "apK-OYv3RhPI65jTFG4Z9wAAA14"]
[Sat Aug 29 05:10:49.064634 2026] [security2:error] [pid 1041789:tid 1041853] [remote 74.7.227.154:54326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK-OYv3RhPI65jTFG4Z-AADZDM"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwp-easycart%2Fadmin%2Ftemplate%2Fsettings%2Fdesign
[Sat Aug 29 05:10:49.084592 2026] [security2:error] [pid 1041789:tid 1042019] [client 158.23.147.79:42053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/classwithtostring.php"] [unique_id "apK-OYv3RhPI65jTFG4Z-QAAA3Y"]
[Sat Aug 29 05:10:49.085807 2026] [security2:error] [pid 1321:tid 1597] [client 158.158.54.35:8481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-themes.php"] [unique_id "apK-OWjCPtor9NZ-byTp6gAABqg"]
[Sat Aug 29 05:10:49.091724 2026] [security2:error] [pid 1321:tid 1555] [client 20.48.250.41:49592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/to.php"] [unique_id "apK-OWjCPtor9NZ-byTp7AAABn4"]
[Sat Aug 29 05:10:49.102740 2026] [security2:error] [pid 1041789:tid 1041944] [client 20.104.18.15:22429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/h2.php"] [unique_id "apK-OYv3RhPI65jTFG4Z-gAAAys"]
[Sat Aug 29 05:10:49.113341 2026] [security2:error] [pid 1041789:tid 1042046] [client 20.151.200.44:63398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/attack.php"] [unique_id "apK-OYv3RhPI65jTFG4Z-wAAA5E"]
[Sat Aug 29 05:10:49.115206 2026] [security2:error] [pid 1041789:tid 1041977] [client 20.48.250.41:62371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/166.php"] [unique_id "apK-OYv3RhPI65jTFG4Z_AAAA0w"]
[Sat Aug 29 05:10:49.120204 2026] [security2:error] [pid 1041789:tid 1041976] [client 40.83.93.50:15195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/cookie.php"] [unique_id "apK-OYv3RhPI65jTFG4Z_QAAA0s"]
[Sat Aug 29 05:10:49.141729 2026] [security2:error] [pid 11274:tid 11459] [client 20.104.18.15:43901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/asdfghj.php"] [unique_id "apK-OWbX5DA3XO6e_qQmyAAAARk"]
[Sat Aug 29 05:10:49.161156 2026] [security2:error] [pid 1321:tid 1557] [client 20.104.18.15:7151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/h2.php"] [unique_id "apK-OWjCPtor9NZ-byTp7QAABoA"]
[Sat Aug 29 05:10:49.161802 2026] [security2:error] [pid 11274:tid 11492] [client 4.205.62.107:6305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/66.php"] [unique_id "apK-OWbX5DA3XO6e_qQmyQAAATk"]
[Sat Aug 29 05:10:49.177267 2026] [security2:error] [pid 1041789:tid 1041964] [client 20.48.250.41:50289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/aa.php"] [unique_id "apK-OYv3RhPI65jTFG4Z_gAAAz8"]
[Sat Aug 29 05:10:49.182503 2026] [security2:error] [pid 1041789:tid 1042031] [client 158.23.147.79:55247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-admin/includes/index.php"] [unique_id "apK-OYv3RhPI65jTFG4Z_wAAA4I"]
[Sat Aug 29 05:10:49.187779 2026] [security2:error] [pid 1041789:tid 1041949] [client 52.139.37.240:29427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/xxx.php"] [unique_id "apK-OYv3RhPI65jTFG4aAAAAAzA"]
[Sat Aug 29 05:10:49.199643 2026] [security2:error] [pid 11274:tid 11569] [client 20.104.18.15:43321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/biufile.php"] [unique_id "apK-OWbX5DA3XO6e_qQmzgAAAYU"]
[Sat Aug 29 05:10:49.209632 2026] [security2:error] [pid 11274:tid 11520] [client 4.205.62.107:63955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/phpsysinfo.php"] [unique_id "apK-OWbX5DA3XO6e_qQm1AAAAVU"]
[Sat Aug 29 05:10:49.215631 2026] [security2:error] [pid 1041789:tid 1041982] [client 20.104.18.15:15225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/nox.php"] [unique_id "apK-OYv3RhPI65jTFG4aBQAAA1E"]
[Sat Aug 29 05:10:49.222990 2026] [security2:error] [pid 11274:tid 11501] [client 20.48.250.41:49556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/thui.php"] [unique_id "apK-OWbX5DA3XO6e_qQm2AAAAUI"]
[Sat Aug 29 05:10:49.225173 2026] [security2:error] [pid 11274:tid 11446] [client 61.9.8.240:17013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK-OWbX5DA3XO6e_qQm1gAAAQw"]
[Sat Aug 29 05:10:49.225315 2026] [security2:error] [pid 11274:tid 11446] [client 61.9.8.240:17013] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK-OWbX5DA3XO6e_qQm1gAAAQw"]
[Sat Aug 29 05:10:49.229872 2026] [security2:error] [pid 11274:tid 11544] [client 52.139.37.240:31067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/item.php"] [unique_id "apK-OWbX5DA3XO6e_qQm5QAAAWw"]
[Sat Aug 29 05:10:49.243389 2026] [security2:error] [pid 11274:tid 11567] [client 20.104.18.15:22293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/wp-content/mod/adminfuns.php"] [unique_id "apK-OWbX5DA3XO6e_qQm6AAAAYM"]
[Sat Aug 29 05:10:49.260553 2026] [security2:error] [pid 11274:tid 11393] [remote 136.108.8.198:43488] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bio-vein.com"] [uri "/app/.env"] [unique_id "apK-OWbX5DA3XO6e_qQm7AABJ08"]
[Sat Aug 29 05:10:49.285687 2026] [security2:error] [pid 11274:tid 11458] [client 20.104.104.62:20623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/yamate.php"] [unique_id "apK-OWbX5DA3XO6e_qQm9wAAARg"]
[Sat Aug 29 05:10:49.293970 2026] [security2:error] [pid 1041789:tid 1042010] [client 158.158.54.35:2003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/u.php"] [unique_id "apK-OYv3RhPI65jTFG4aEAAAA20"]
[Sat Aug 29 05:10:49.305529 2026] [security2:error] [pid 11274:tid 11494] [client 20.48.250.41:50272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/s1.php"] [unique_id "apK-OWbX5DA3XO6e_qQm-QAAATs"]
[Sat Aug 29 05:10:49.311807 2026] [security2:error] [pid 11274:tid 11468] [client 20.48.250.41:64856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/h2a2ck.php"] [unique_id "apK-OWbX5DA3XO6e_qQm-gAAASI"]
[Sat Aug 29 05:10:49.315554 2026] [security2:error] [pid 11274:tid 11526] [client 20.100.175.163:30754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/adminfuns.php"] [unique_id "apK-OWbX5DA3XO6e_qQm_AAAAVs"]
[Sat Aug 29 05:10:49.326783 2026] [security2:error] [pid 11274:tid 11509] [client 20.104.18.15:43881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/dragonshell.php"] [unique_id "apK-OWbX5DA3XO6e_qQm_wAAAUo"]
[Sat Aug 29 05:10:49.328538 2026] [autoindex:error] [pid 1321:tid 1556] [client 77.90.185.5:64062] AH01276: Cannot serve directory /home1/hazmapne/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://hazmap.net/
[Sat Aug 29 05:10:49.334891 2026] [security2:error] [pid 1041789:tid 1042025] [client 20.52.41.200:2775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-good.php"] [unique_id "apK-OYv3RhPI65jTFG4aEQAAA3w"]
[Sat Aug 29 05:10:49.337534 2026] [security2:error] [pid 11274:tid 11469] [client 20.104.18.15:43862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/blacks.php"] [unique_id "apK-OWbX5DA3XO6e_qQnAAAAASM"]
[Sat Aug 29 05:10:49.343638 2026] [security2:error] [pid 11274:tid 11471] [client 20.63.219.114:17977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/22.php"] [unique_id "apK-OWbX5DA3XO6e_qQnAQAAASU"]
[Sat Aug 29 05:10:49.355010 2026] [security2:error] [pid 1041789:tid 1041985] [client 197.232.63.170:56888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 170.63.232.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK-OYv3RhPI65jTFG4aEgAAA1Q"]
[Sat Aug 29 05:10:49.355127 2026] [security2:error] [pid 1041789:tid 1041985] [client 197.232.63.170:56888] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK-OYv3RhPI65jTFG4aEgAAA1Q"]
[Sat Aug 29 05:10:49.356475 2026] [autoindex:error] [pid 11274:tid 11548] [client 35.86.223.62:0] AH01276: Cannot serve directory /home4/vincenz3/public_html/gavirestaurant/wp-content/uploads/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:10:49.361092 2026] [security2:error] [pid 11274:tid 11450] [client 20.104.104.62:48662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/sf9.php"] [unique_id "apK-OWbX5DA3XO6e_qQnBgAAARA"]
[Sat Aug 29 05:10:49.364824 2026] [security2:error] [pid 11274:tid 11572] [client 20.104.18.15:7052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/wp-content/mod/adminfuns.php"] [unique_id "apK-OWbX5DA3XO6e_qQnBwAAAYg"]
[Sat Aug 29 05:10:49.372990 2026] [security2:error] [pid 11274:tid 11557] [client 20.48.250.41:49640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/Jcrop.php"] [unique_id "apK-OWbX5DA3XO6e_qQnCgAAAXk"]
[Sat Aug 29 05:10:49.382324 2026] [security2:error] [pid 11274:tid 11533] [client 52.139.37.240:29398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/0x.php"] [unique_id "apK-OWbX5DA3XO6e_qQnDAAAAWI"]
[Sat Aug 29 05:10:49.382899 2026] [security2:error] [pid 11274:tid 11463] [client 20.104.18.15:22430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/sao.php"] [unique_id "apK-OWbX5DA3XO6e_qQnDQAAAR0"]
[Sat Aug 29 05:10:49.393908 2026] [security2:error] [pid 11274:tid 11491] [client 20.104.18.15:15235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/akismet.php"] [unique_id "apK-OWbX5DA3XO6e_qQnDgAAATg"]
[Sat Aug 29 05:10:49.399238 2026] [security2:error] [pid 1041789:tid 1042051] [client 158.23.147.79:14278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK-OYv3RhPI65jTFG4aIAAAA5Y"]
[Sat Aug 29 05:10:49.426046 2026] [security2:error] [pid 11274:tid 11561] [client 52.139.37.240:31623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/jga.php"] [unique_id "apK-OWbX5DA3XO6e_qQnEQAAAX0"]
[Sat Aug 29 05:10:49.437097 2026] [security2:error] [pid 11274:tid 11543] [client 158.23.147.79:28094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK-OWbX5DA3XO6e_qQnEwAAAWs"]
[Sat Aug 29 05:10:49.437188 2026] [security2:error] [pid 11274:tid 11451] [client 20.48.250.41:28614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/0byte.php"] [unique_id "apK-OWbX5DA3XO6e_qQnFAAAARE"]
[Sat Aug 29 05:10:49.466291 2026] [security2:error] [pid 11274:tid 11485] [client 20.48.250.41:62337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/error_log.php"] [unique_id "apK-OWbX5DA3XO6e_qQnFwAAATI"]
[Sat Aug 29 05:10:49.476264 2026] [security2:error] [pid 11274:tid 11524] [client 20.104.18.15:43956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/beck.php"] [unique_id "apK-OWbX5DA3XO6e_qQnGAAAAVk"]
[Sat Aug 29 05:10:49.512507 2026] [security2:error] [pid 11274:tid 11388] [remote 136.108.8.198:43488] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bio-vein.com"] [uri "/src/.env"] [unique_id "apK-OWbX5DA3XO6e_qQnIAABXUo"]
[Sat Aug 29 05:10:49.512507 2026] [security2:error] [pid 11274:tid 11407] [remote 136.108.8.198:43488] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bio-vein.com"] [uri "/frontend/.env"] [unique_id "apK-OWbX5DA3XO6e_qQnIQABXV0"]
[Sat Aug 29 05:10:49.512557 2026] [security2:error] [pid 11274:tid 11408] [remote 136.108.8.198:43488] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bio-vein.com"] [uri "/server/.env"] [unique_id "apK-OWbX5DA3XO6e_qQnIgABXV4"]
[Sat Aug 29 05:10:49.516033 2026] [security2:error] [pid 11274:tid 11472] [client 158.158.54.35:23025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-trackback.php"] [unique_id "apK-OWbX5DA3XO6e_qQnKQAAASY"]
[Sat Aug 29 05:10:49.518633 2026] [security2:error] [pid 11274:tid 11498] [client 158.23.147.79:5839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK-OWbX5DA3XO6e_qQnKgAAAT8"]
[Sat Aug 29 05:10:49.518831 2026] [security2:error] [pid 11274:tid 11403] [remote 136.108.8.198:43488] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bio-vein.com"] [uri "/dev/.env"] [unique_id "apK-OWbX5DA3XO6e_qQnKAABXVk"]
[Sat Aug 29 05:10:49.519550 2026] [security2:error] [pid 1041789:tid 1041975] [client 20.104.49.130:57630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/t.php"] [unique_id "apK-OYv3RhPI65jTFG4aOAAAA0o"]
[Sat Aug 29 05:10:49.525096 2026] [security2:error] [pid 11274:tid 11411] [remote 136.108.8.198:43488] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bio-vein.com"] [uri "/production/.env"] [unique_id "apK-OWbX5DA3XO6e_qQnLAABXWE"]
[Sat Aug 29 05:10:49.530046 2026] [security2:error] [pid 11274:tid 11545] [client 20.48.250.41:49617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/ws58.php"] [unique_id "apK-OWbX5DA3XO6e_qQnLwAAAW0"]
[Sat Aug 29 05:10:49.533089 2026] [security2:error] [pid 11274:tid 11553] [client 20.104.18.15:43939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/wp-safe.php"] [unique_id "apK-OWbX5DA3XO6e_qQnMgAAAXU"]
[Sat Aug 29 05:10:49.556029 2026] [security2:error] [pid 11274:tid 11466] [client 20.104.18.15:15179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/ajax.php"] [unique_id "apK-OWbX5DA3XO6e_qQnNgAAASA"]
[Sat Aug 29 05:10:49.567319 2026] [security2:error] [pid 1041789:tid 1042055] [client 20.104.18.15:7047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/sao.php"] [unique_id "apK-OYv3RhPI65jTFG4aOQAAA5o"]
[Sat Aug 29 05:10:49.571037 2026] [security2:error] [pid 11274:tid 11464] [client 20.196.209.81:3364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/post.php"] [unique_id "apK-OWbX5DA3XO6e_qQnPAAAAR4"]
[Sat Aug 29 05:10:49.576221 2026] [security2:error] [pid 1041789:tid 1041953] [client 20.48.250.41:49224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/xr.php"] [unique_id "apK-OYv3RhPI65jTFG4aOgAAAzQ"]
[Sat Aug 29 05:10:49.576291 2026] [security2:error] [pid 11274:tid 11502] [client 52.139.37.240:29392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/CDX1.php"] [unique_id "apK-OWbX5DA3XO6e_qQnRgAAAUM"]
[Sat Aug 29 05:10:49.578106 2026] [security2:error] [pid 1321:tid 1560] [client 20.104.18.15:22412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/dapa.php"] [unique_id "apK-OWjCPtor9NZ-byTp9AAABoM"]
[Sat Aug 29 05:10:49.582890 2026] [security2:error] [pid 1321:tid 1566] [client 158.23.147.79:62666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-includes/js/index.php"] [unique_id "apK-OWjCPtor9NZ-byTp9QAABok"]
[Sat Aug 29 05:10:49.602427 2026] [security2:error] [pid 1041789:tid 1041981] [client 40.83.93.50:11589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/NewFile.php"] [unique_id "apK-OYv3RhPI65jTFG4aPAAAA1A"]
[Sat Aug 29 05:10:49.623295 2026] [security2:error] [pid 11274:tid 11530] [client 52.139.37.240:31635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/mac.php"] [unique_id "apK-OWbX5DA3XO6e_qQnSAAAAV8"]
[Sat Aug 29 05:10:49.624102 2026] [security2:error] [pid 1321:tid 1606] [client 20.48.250.41:64857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/403.php"] [unique_id "apK-OWjCPtor9NZ-byTp9gAABrE"]
[Sat Aug 29 05:10:49.635629 2026] [security2:error] [pid 11274:tid 11510] [client 20.104.18.15:43874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/t3.php"] [unique_id "apK-OWbX5DA3XO6e_qQnSQAAAUs"]
[Sat Aug 29 05:10:49.665224 2026] [security2:error] [pid 1041789:tid 1041970] [client 20.48.250.41:49649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/xs.php"] [unique_id "apK-OYv3RhPI65jTFG4aPQAAA0U"]
[Sat Aug 29 05:10:49.679018 2026] [security2:error] [pid 11274:tid 11456] [client 34.50.189.51:10996] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "discocollective.kriveloff-associates.com"] [uri "/cgi-sys/404.html"] [unique_id "apK-OWbX5DA3XO6e_qQnVAAAARY"]
[Sat Aug 29 05:10:49.679211 2026] [core:error] [pid 1041789:tid 1041961] [client 34.50.189.51:11042] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:49.679221 2026] [core:error] [pid 1041789:tid 1041961] [client 34.50.189.51:11042] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:49.680074 2026] [core:error] [pid 1321:tid 1517] [client 34.50.189.51:11066] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:49.680090 2026] [core:error] [pid 1321:tid 1517] [client 34.50.189.51:11066] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:49.680731 2026] [security2:error] [pid 11274:tid 11560] [client 20.104.18.15:43953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/gjewuagf.php"] [unique_id "apK-OWbX5DA3XO6e_qQnVgAAAXw"]
[Sat Aug 29 05:10:49.680759 2026] [security2:error] [pid 1321:tid 1517] [client 34.50.189.51:11066] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "discocollective.kriveloff-associates.com"] [uri "/index.php"] [unique_id "apK-OWjCPtor9NZ-byTp-gAABlk"]
[Sat Aug 29 05:10:49.682205 2026] [core:error] [pid 1041789:tid 1041933] [client 34.50.189.51:11098] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:49.682218 2026] [core:error] [pid 1041789:tid 1041933] [client 34.50.189.51:11098] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:49.682861 2026] [core:error] [pid 1321:tid 1592] [client 34.50.189.51:11082] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:49.682877 2026] [core:error] [pid 1321:tid 1592] [client 34.50.189.51:11082] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:49.683517 2026] [core:error] [pid 1041789:tid 1041956] [client 34.50.189.51:11114] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:49.683541 2026] [core:error] [pid 1041789:tid 1041956] [client 34.50.189.51:11114] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:49.684465 2026] [security2:error] [pid 1041789:tid 1041971] [client 34.50.189.51:11128] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "discocollective.kriveloff-associates.com"] [uri "/_debugbar/open"] [unique_id "apK-OYv3RhPI65jTFG4aRQAAA0Y"]
[Sat Aug 29 05:10:49.685333 2026] [core:error] [pid 1041789:tid 1042000] [client 34.50.189.51:11116] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:49.685343 2026] [core:error] [pid 1041789:tid 1042000] [client 34.50.189.51:11116] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:49.685432 2026] [security2:error] [pid 1041789:tid 1042000] [client 34.50.189.51:11116] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "discocollective.kriveloff-associates.com"] [uri "/index.php"] [unique_id "apK-OYv3RhPI65jTFG4aQwAAA2M"]
[Sat Aug 29 05:10:49.685895 2026] [core:error] [pid 11274:tid 11572] [client 34.50.189.51:11148] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:49.685908 2026] [core:error] [pid 11274:tid 11572] [client 34.50.189.51:11148] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:49.687230 2026] [security2:error] [pid 11274:tid 11532] [client 34.50.189.51:11184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.189.50.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "discocollective.kriveloff-associates.com"] [uri "/config/aws.php"] [unique_id "apK-OWbX5DA3XO6e_qQnWQAAAWE"]
[Sat Aug 29 05:10:49.687503 2026] [core:error] [pid 1041789:tid 1041943] [client 34.50.189.51:11208] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:49.687516 2026] [core:error] [pid 1041789:tid 1041943] [client 34.50.189.51:11208] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:49.687607 2026] [core:error] [pid 1321:tid 1563] [client 34.50.189.51:11206] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:49.687618 2026] [core:error] [pid 1321:tid 1563] [client 34.50.189.51:11206] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:49.688244 2026] [core:error] [pid 1321:tid 1612] [client 34.50.189.51:11058] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:49.688252 2026] [core:error] [pid 1321:tid 1612] [client 34.50.189.51:11058] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:49.688343 2026] [security2:error] [pid 1041789:tid 1041968] [client 34.50.189.51:11200] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "discocollective.kriveloff-associates.com"] [uri "/app/.aws/credentials"] [unique_id "apK-OYv3RhPI65jTFG4aSAAAA0M"]
[Sat Aug 29 05:10:49.690646 2026] [core:error] [pid 1041789:tid 1042030] [client 34.50.189.51:11180] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:49.690660 2026] [core:error] [pid 11274:tid 11533] [client 34.50.189.51:11152] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:49.690664 2026] [core:error] [pid 1041789:tid 1042030] [client 34.50.189.51:11180] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:49.690670 2026] [core:error] [pid 11274:tid 11533] [client 34.50.189.51:11152] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:49.690873 2026] [security2:error] [pid 11274:tid 11533] [client 34.50.189.51:11152] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "discocollective.kriveloff-associates.com"] [uri "/index.php"] [unique_id "apK-OWbX5DA3XO6e_qQnWgAAAWI"]
[Sat Aug 29 05:10:49.691270 2026] [security2:error] [pid 11274:tid 11522] [client 20.104.49.130:53539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pvillusions.com"] [uri "/wsd.php"] [unique_id "apK-OWbX5DA3XO6e_qQnYAAAAVc"]
[Sat Aug 29 05:10:49.691691 2026] [security2:error] [pid 1321:tid 1530] [client 34.50.189.51:11220] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/aws/.env"] [unique_id "apK-OWjCPtor9NZ-byTp_gAABmY"]
[Sat Aug 29 05:10:49.691727 2026] [security2:error] [pid 11274:tid 11534] [client 34.50.189.51:10954] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/.aws/credentials.old"] [unique_id "apK-OWbX5DA3XO6e_qQnXwAAAWM"]
[Sat Aug 29 05:10:49.692592 2026] [security2:error] [pid 11274:tid 11477] [client 34.50.189.51:11230] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/.aws/credentials.bak"] [unique_id "apK-OWbX5DA3XO6e_qQnYQAAASs"]
[Sat Aug 29 05:10:49.692944 2026] [core:error] [pid 11274:tid 11454] [client 34.50.189.51:11178] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:49.692951 2026] [core:error] [pid 11274:tid 11454] [client 34.50.189.51:11178] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:49.693280 2026] [core:error] [pid 11274:tid 11491] [client 34.50.189.51:11192] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:49.693291 2026] [core:error] [pid 11274:tid 11491] [client 34.50.189.51:11192] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:49.701265 2026] [security2:error] [pid 11274:tid 11521] [client 20.104.18.15:15149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/atomlib.php"] [unique_id "apK-OWbX5DA3XO6e_qQnYgAAAVY"]
[Sat Aug 29 05:10:49.703767 2026] [security2:error] [pid 1321:tid 1585] [client 20.104.104.62:64747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/upppp.php"] [unique_id "apK-OWjCPtor9NZ-byTp_wAABpw"]
[Sat Aug 29 05:10:49.716692 2026] [security2:error] [pid 11274:tid 11481] [client 20.48.250.41:50200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/h02ugyh.php"] [unique_id "apK-OWbX5DA3XO6e_qQnYwAAAS4"]
[Sat Aug 29 05:10:49.717591 2026] [security2:error] [pid 1041789:tid 1041994] [client 20.63.219.114:1935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/bak.phps"] [unique_id "apK-OYv3RhPI65jTFG4aSQAAA10"]
[Sat Aug 29 05:10:49.730601 2026] [security2:error] [pid 11274:tid 11425] [remote 136.108.8.198:43488] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bio-vein.com"] [uri "/staging/.env"] [unique_id "apK-OWbX5DA3XO6e_qQnZAABPW8"]
[Sat Aug 29 05:10:49.737370 2026] [security2:error] [pid 1041789:tid 1041935] [client 158.158.54.35:1994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/r.php"] [unique_id "apK-OYv3RhPI65jTFG4aSwAAAyI"]
[Sat Aug 29 05:10:49.760392 2026] [security2:error] [pid 1041789:tid 1042050] [client 20.104.18.15:6988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/dapa.php"] [unique_id "apK-OYv3RhPI65jTFG4aTgAAA5U"]
[Sat Aug 29 05:10:49.761326 2026] [security2:error] [pid 11274:tid 11429] [remote 136.108.8.198:43488] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bio-vein.com"] [uri "/apps/.env"] [unique_id "apK-OWbX5DA3XO6e_qQnZgABR3M"]
[Sat Aug 29 05:10:49.765401 2026] [security2:error] [pid 11274:tid 11431] [remote 136.108.8.198:43488] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bio-vein.com"] [uri "/docker/.env"] [unique_id "apK-OWbX5DA3XO6e_qQnaAABhXU"]
[Sat Aug 29 05:10:49.766391 2026] [security2:error] [pid 11274:tid 11433] [remote 136.108.8.198:43488] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bio-vein.com"] [uri "/v1/.env"] [unique_id "apK-OWbX5DA3XO6e_qQnaQABhXY"]
[Sat Aug 29 05:10:49.767557 2026] [security2:error] [pid 11274:tid 11437] [remote 136.108.8.198:43488] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bio-vein.com"] [uri "/v2/.env"] [unique_id "apK-OWbX5DA3XO6e_qQnawABhXo"]
[Sat Aug 29 05:10:49.769452 2026] [security2:error] [pid 1041789:tid 1042020] [client 52.139.37.240:29172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/akcc.php"] [unique_id "apK-OYv3RhPI65jTFG4aUAAAA3c"]
[Sat Aug 29 05:10:49.783833 2026] [security2:error] [pid 11274:tid 11498] [client 20.48.250.41:64818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/cytyr.php"] [unique_id "apK-OWbX5DA3XO6e_qQnbAAAAT8"]
[Sat Aug 29 05:10:49.784848 2026] [security2:error] [pid 11274:tid 11440] [remote 136.108.8.198:43488] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bio-vein.com"] [uri "/old/.env"] [unique_id "apK-OWbX5DA3XO6e_qQnbQABbX0"]
[Sat Aug 29 05:10:49.786574 2026] [security2:error] [pid 11274:tid 11468] [client 20.52.41.200:2791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "apK-OWbX5DA3XO6e_qQnbwAAASI"]
[Sat Aug 29 05:10:49.791407 2026] [security2:error] [pid 11274:tid 11467] [client 158.23.147.79:39318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/simple.php"] [unique_id "apK-OWbX5DA3XO6e_qQncQAAASE"]
[Sat Aug 29 05:10:49.794466 2026] [security2:error] [pid 1041789:tid 1041985] [client 20.48.250.41:49547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/zu.php"] [unique_id "apK-OYv3RhPI65jTFG4aWQAAA1Q"]
[Sat Aug 29 05:10:49.796304 2026] [security2:error] [pid 11274:tid 11438] [remote 136.108.8.198:43488] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bio-vein.com"] [uri "/site/.env"] [unique_id "apK-OWbX5DA3XO6e_qQncgABPHs"]
[Sat Aug 29 05:10:49.802550 2026] [security2:error] [pid 1321:tid 1525] [client 20.104.18.15:22343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/wp-content/l.php"] [unique_id "apK-OWjCPtor9NZ-byTqAAAABmE"]
[Sat Aug 29 05:10:49.818640 2026] [security2:error] [pid 11274:tid 11492] [client 52.139.37.240:31131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK-OWbX5DA3XO6e_qQncwAAATk"]
[Sat Aug 29 05:10:49.824480 2026] [security2:error] [pid 11274:tid 11436] [remote 136.108.8.198:43488] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "bio-vein.com"] [uri "/env.bak"] [unique_id "apK-OWbX5DA3XO6e_qQndAABZnk"]
[Sat Aug 29 05:10:49.829749 2026] [security2:error] [pid 1041789:tid 1042007] [client 20.100.175.163:33570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/goods.php"] [unique_id "apK-OYv3RhPI65jTFG4aXwAAA2o"]
[Sat Aug 29 05:10:49.831729 2026] [security2:error] [pid 11274:tid 11314] [remote 136.108.8.198:43488] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bio-vein.com"] [uri "/.docker/.env"] [unique_id "apK-OWbX5DA3XO6e_qQndgABfwE"]
[Sat Aug 29 05:10:49.832193 2026] [security2:error] [pid 11274:tid 11484] [client 20.104.18.15:15325] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "petgrooming.penmarketing.org"] [uri "/1.php"] [unique_id "apK-OWbX5DA3XO6e_qQndwAAATE"]
[Sat Aug 29 05:10:49.832275 2026] [security2:error] [pid 11274:tid 11484] [client 20.104.18.15:15325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/1.php"] [unique_id "apK-OWbX5DA3XO6e_qQndwAAATE"]
[Sat Aug 29 05:10:49.837253 2026] [security2:error] [pid 11274:tid 11315] [remote 136.108.8.198:43488] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bio-vein.com"] [uri "/portal/.env"] [unique_id "apK-OWbX5DA3XO6e_qQneAABKQI"]
[Sat Aug 29 05:10:49.841437 2026] [security2:error] [pid 11274:tid 11490] [client 20.104.18.15:44018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/wp.php"] [unique_id "apK-OWbX5DA3XO6e_qQneQAAATc"]
[Sat Aug 29 05:10:49.859164 2026] [security2:error] [pid 1041789:tid 1042046] [client 20.48.250.41:49274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/xxw.php"] [unique_id "apK-OYv3RhPI65jTFG4aYQAAA5E"]
[Sat Aug 29 05:10:49.864491 2026] [security2:error] [pid 1041789:tid 1041977] [client 20.104.104.62:48594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/lte7.php"] [unique_id "apK-OYv3RhPI65jTFG4aYgAAA0w"]
[Sat Aug 29 05:10:49.873779 2026] [security2:error] [pid 1041789:tid 1041991] [client 20.104.18.15:43874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/tnglzqmv.php"] [unique_id "apK-OYv3RhPI65jTFG4aYwAAA1o"]
[Sat Aug 29 05:10:49.876444 2026] [security2:error] [pid 11274:tid 11313] [remote 136.108.8.198:43488] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "bio-vein.com"] [uri "/env.old"] [unique_id "apK-OWbX5DA3XO6e_qQnfAABFQA"]
[Sat Aug 29 05:10:49.904411 2026] [security2:error] [pid 1041789:tid 1041975] [client 20.104.18.15:6982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/wp-content/l.php"] [unique_id "apK-OYv3RhPI65jTFG4aZQAAA0o"]
[Sat Aug 29 05:10:49.924270 2026] [security2:error] [pid 1321:tid 1531] [client 4.205.62.107:4542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/v3.php"] [unique_id "apK-OWjCPtor9NZ-byTqAQAABmc"]
[Sat Aug 29 05:10:49.929038 2026] [security2:error] [pid 1321:tid 1611] [client 20.48.250.41:42964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/lanka.php"] [unique_id "apK-OWjCPtor9NZ-byTqAgAABrY"]
[Sat Aug 29 05:10:49.932457 2026] [security2:error] [pid 11274:tid 11317] [remote 136.108.8.198:43488] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "bio-vein.com"] [uri "/.env.production.bak"] [unique_id "apK-OWbX5DA3XO6e_qQnfwABWAQ"]
[Sat Aug 29 05:10:49.934686 2026] [security2:error] [pid 11274:tid 11435] [remote 136.108.8.198:43488] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "bio-vein.com"] [uri "/.env.prod.bak"] [unique_id "apK-OWbX5DA3XO6e_qQngwABWHg"]
[Sat Aug 29 05:10:49.942295 2026] [security2:error] [pid 1321:tid 1536] [client 20.104.18.15:22379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/wp-admin/w.php"] [unique_id "apK-OWjCPtor9NZ-byTqAwAABmw"]
[Sat Aug 29 05:10:49.963896 2026] [security2:error] [pid 1041789:tid 1041970] [client 20.48.250.41:64868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/galer.php"] [unique_id "apK-OYv3RhPI65jTFG4aawAAA0U"]
[Sat Aug 29 05:10:49.969224 2026] [security2:error] [pid 1041789:tid 1042006] [client 20.104.18.15:15118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/samll.php"] [unique_id "apK-OYv3RhPI65jTFG4abAAAA2k"]
[Sat Aug 29 05:10:49.976818 2026] [security2:error] [pid 11274:tid 11513] [client 20.48.160.90:63347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/she11.php"] [unique_id "apK-OWbX5DA3XO6e_qQniQAAAU4"]
[Sat Aug 29 05:10:49.978211 2026] [security2:error] [pid 11274:tid 11444] [client 52.139.37.240:29122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK-OWbX5DA3XO6e_qQnigAAAQo"]
[Sat Aug 29 05:10:49.992968 2026] [security2:error] [pid 11274:tid 11323] [remote 136.108.8.198:43488] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bio-vein.com"] [uri "/@fs/.env"] [unique_id "apK-OWbX5DA3XO6e_qQniwABcAo"]
[Sat Aug 29 05:10:49.995548 2026] [security2:error] [pid 11274:tid 11319] [remote 136.108.8.198:43488] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bio-vein.com"] [uri "/@fs/root/.env"] [unique_id "apK-OWbX5DA3XO6e_qQnjQABcAY"]
[Sat Aug 29 05:10:50.002714 2026] [security2:error] [pid 11274:tid 11458] [client 20.196.209.81:3348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/flower.php"] [unique_id "apK-OmbX5DA3XO6e_qQnjwAAARg"]
[Sat Aug 29 05:10:50.005101 2026] [security2:error] [pid 11274:tid 11325] [remote 136.108.8.198:43488] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "bio-vein.com"] [uri "/api/.env.bak"] [unique_id "apK-OWbX5DA3XO6e_qQnjgABFgw"]
[Sat Aug 29 05:10:50.016545 2026] [security2:error] [pid 11274:tid 11572] [client 20.48.250.41:50295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/bolt.php"] [unique_id "apK-OmbX5DA3XO6e_qQnkQAAAYg"]
[Sat Aug 29 05:10:50.024029 2026] [security2:error] [pid 11274:tid 11463] [client 20.48.160.90:51885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/xty.php"] [unique_id "apK-OmbX5DA3XO6e_qQnkwAAAR0"]
[Sat Aug 29 05:10:50.026371 2026] [security2:error] [pid 1041789:tid 1042048] [client 52.139.37.240:31670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK-Oov3RhPI65jTFG4acQAAA5M"]
[Sat Aug 29 05:10:50.028173 2026] [security2:error] [pid 11274:tid 11320] [remote 136.108.8.198:43488] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "bio-vein.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK-OmbX5DA3XO6e_qQnlAABKwc"]
[Sat Aug 29 05:10:50.029337 2026] [security2:error] [pid 1041789:tid 1042000] [client 20.151.200.44:63115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/bge.php"] [unique_id "apK-Oov3RhPI65jTFG4acgAAA2M"]
[Sat Aug 29 05:10:50.035763 2026] [autoindex:error] [pid 11274:tid 11561] [client 77.90.185.5:50839] AH01276: Cannot serve directory /home1/hazmapne/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://hazmap.net/
[Sat Aug 29 05:10:50.036311 2026] [security2:error] [pid 1041789:tid 1041968] [client 20.104.18.15:43858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/abcd.php"] [unique_id "apK-Oov3RhPI65jTFG4acwAAA0M"]
[Sat Aug 29 05:10:50.056781 2026] [security2:error] [pid 11274:tid 11451] [client 195.178.110.247:32884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bias.erinhulbert.com"] [uri "/index.php"] [unique_id "apK-OmbX5DA3XO6e_qQnlwAAARE"]
[Sat Aug 29 05:10:50.067709 2026] [security2:error] [pid 11274:tid 11489] [client 20.104.18.15:43949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/wefile.php"] [unique_id "apK-OmbX5DA3XO6e_qQnmQAAATY"]
[Sat Aug 29 05:10:50.072940 2026] [security2:error] [pid 11274:tid 11493] [client 4.205.62.107:60300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/debug.php"] [unique_id "apK-OmbX5DA3XO6e_qQnmgAAATo"]
[Sat Aug 29 05:10:50.074755 2026] [security2:error] [pid 11274:tid 11459] [client 20.48.250.41:49612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/gettest.php"] [unique_id "apK-OmbX5DA3XO6e_qQnngAAARk"]
[Sat Aug 29 05:10:50.096924 2026] [security2:error] [pid 11274:tid 11545] [client 20.48.160.90:64532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/wp-activate.php"] [unique_id "apK-OmbX5DA3XO6e_qQnoQAAAW0"]
[Sat Aug 29 05:10:50.103300 2026] [security2:error] [pid 11274:tid 11553] [client 20.104.104.62:47592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/up.php"] [unique_id "apK-OmbX5DA3XO6e_qQnogAAAXU"]
[Sat Aug 29 05:10:50.107174 2026] [security2:error] [pid 11274:tid 11468] [client 20.48.160.90:65386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/kerang.php"] [unique_id "apK-OmbX5DA3XO6e_qQnowAAASI"]
[Sat Aug 29 05:10:50.113597 2026] [security2:error] [pid 11274:tid 11467] [client 158.158.54.35:8475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/222.php"] [unique_id "apK-OmbX5DA3XO6e_qQnpAAAASE"]
[Sat Aug 29 05:10:50.122228 2026] [security2:error] [pid 11274:tid 11492] [client 20.104.18.15:7163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/wp-admin/w.php"] [unique_id "apK-OmbX5DA3XO6e_qQnpgAAATk"]
[Sat Aug 29 05:10:50.127661 2026] [security2:error] [pid 1041789:tid 1042010] [client 20.104.18.15:15127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/she11.php"] [unique_id "apK-Oov3RhPI65jTFG4agQAAA20"]
[Sat Aug 29 05:10:50.144583 2026] [security2:error] [pid 11274:tid 11536] [client 107.145.13.164:49726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 164.13.145.107.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK-OmbX5DA3XO6e_qQnqgAAAWU"]
[Sat Aug 29 05:10:50.144783 2026] [security2:error] [pid 11274:tid 11536] [client 107.145.13.164:49726] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK-OmbX5DA3XO6e_qQnqgAAAWU"]
[Sat Aug 29 05:10:50.145316 2026] [security2:error] [pid 1041789:tid 1041995] [client 20.48.250.41:64826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/baixy.php"] [unique_id "apK-Oov3RhPI65jTFG4agwAAA14"]
[Sat Aug 29 05:10:50.147023 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.104.104.62:48612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/tanjiro.php"] [unique_id "apK-Oov3RhPI65jTFG4ahAAAA2Q"]
[Sat Aug 29 05:10:50.149857 2026] [security2:error] [pid 1321:tid 1568] [client 40.83.93.50:10712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/config.php"] [unique_id "apK-OmjCPtor9NZ-byTqCgAABos"]
[Sat Aug 29 05:10:50.163716 2026] [security2:error] [pid 11274:tid 11455] [client 20.104.18.15:22443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/wp-content/k.php"] [unique_id "apK-OmbX5DA3XO6e_qQnrAAAARU"]
[Sat Aug 29 05:10:50.176285 2026] [security2:error] [pid 1321:tid 1550] [client 52.139.37.240:29157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/s.php"] [unique_id "apK-OmjCPtor9NZ-byTqDAAABnk"]
[Sat Aug 29 05:10:50.176441 2026] [security2:error] [pid 1041789:tid 1042019] [client 74.248.24.12:20458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK-Oov3RhPI65jTFG4aigAAA3Y"]
[Sat Aug 29 05:10:50.182143 2026] [security2:error] [pid 11274:tid 11570] [client 20.48.250.41:49216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/rtx.php"] [unique_id "apK-OmbX5DA3XO6e_qQntQAAAYY"]
[Sat Aug 29 05:10:50.182528 2026] [security2:error] [pid 1321:tid 1545] [client 158.158.54.35:2043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-blog.php"] [unique_id "apK-OmjCPtor9NZ-byTqDQAABnU"]
[Sat Aug 29 05:10:50.187866 2026] [security2:error] [pid 11274:tid 11494] [client 158.23.147.79:55896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/install.php"] [unique_id "apK-OmbX5DA3XO6e_qQnuAAAATs"]
[Sat Aug 29 05:10:50.198543 2026] [security2:error] [pid 1041789:tid 1041976] [client 4.205.62.107:64947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/wsws.php"] [unique_id "apK-Oov3RhPI65jTFG4ajAAAA0s"]
[Sat Aug 29 05:10:50.203302 2026] [security2:error] [pid 1041789:tid 1041971] [client 20.63.219.114:18984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/install.php"] [unique_id "apK-Oov3RhPI65jTFG4ajQAAA0Y"]
[Sat Aug 29 05:10:50.218832 2026] [security2:error] [pid 1041789:tid 1042026] [client 20.151.200.44:61631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/inwp.php"] [unique_id "apK-Oov3RhPI65jTFG4ajgAAA30"]
[Sat Aug 29 05:10:50.223341 2026] [security2:error] [pid 1321:tid 1603] [client 20.48.250.41:49580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/35.php"] [unique_id "apK-OmjCPtor9NZ-byTqDgAABq4"]
[Sat Aug 29 05:10:50.225893 2026] [security2:error] [pid 1041789:tid 1042055] [client 20.48.160.90:51952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/sallu.php"] [unique_id "apK-Oov3RhPI65jTFG4akQAAA5o"]
[Sat Aug 29 05:10:50.226015 2026] [security2:error] [pid 11274:tid 11554] [client 195.178.110.247:54968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bias.erinhulbert.com"] [uri "/index.php"] [unique_id "apK-OmbX5DA3XO6e_qQnvAAAAXY"]
[Sat Aug 29 05:10:50.237402 2026] [security2:error] [pid 1041789:tid 1042043] [client 20.48.160.90:63240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/m.php"] [unique_id "apK-Oov3RhPI65jTFG4akwAAA44"]
[Sat Aug 29 05:10:50.241041 2026] [security2:error] [pid 1041789:tid 1041981] [client 20.48.160.90:64525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/wp-trackback.php"] [unique_id "apK-Oov3RhPI65jTFG4alAAAA1A"]
[Sat Aug 29 05:10:50.245392 2026] [security2:error] [pid 1321:tid 1542] [client 52.139.37.240:31077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/zafir1.php"] [unique_id "apK-OmjCPtor9NZ-byTqDwAABnI"]
[Sat Aug 29 05:10:50.250868 2026] [security2:error] [pid 1041789:tid 1041939] [client 20.52.41.200:2766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/abcd.php"] [unique_id "apK-Oov3RhPI65jTFG4alQAAAyY"]
[Sat Aug 29 05:10:50.269212 2026] [security2:error] [pid 1041789:tid 1041817] [remote 136.108.8.198:43496] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "bio-vein.com"] [uri "/_image"] [unique_id "apK-Oov3RhPI65jTFG4amAADag8"]
[Sat Aug 29 05:10:50.310612 2026] [security2:error] [pid 1041789:tid 1042000] [client 20.48.250.41:62408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/ava.php"] [unique_id "apK-Oov3RhPI65jTFG4amwAAA2M"]
[Sat Aug 29 05:10:50.312723 2026] [security2:error] [pid 1041789:tid 1042028] [client 4.205.62.107:6849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/admin.php"] [unique_id "apK-Oov3RhPI65jTFG4anQAAA38"]
[Sat Aug 29 05:10:50.328012 2026] [security2:error] [pid 1041789:tid 1042051] [client 20.100.175.163:31925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/css.php"] [unique_id "apK-Oov3RhPI65jTFG4angAAA5Y"]
[Sat Aug 29 05:10:50.330767 2026] [security2:error] [pid 11274:tid 11535] [client 52.138.0.157:21093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pompisfelices.com"] [uri "/sm.php"] [unique_id "apK-OmbX5DA3XO6e_qQnvwAAAWQ"]
[Sat Aug 29 05:10:50.336278 2026] [security2:error] [pid 1041789:tid 1042014] [client 20.48.250.41:50296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/ckk.php"] [unique_id "apK-Oov3RhPI65jTFG4anwAAA3E"]
[Sat Aug 29 05:10:50.348363 2026] [security2:error] [pid 1041789:tid 1041947] [client 4.205.62.107:63900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/sgd.php"] [unique_id "apK-Oov3RhPI65jTFG4aoAAAAy4"]
[Sat Aug 29 05:10:50.352509 2026] [security2:error] [pid 1041789:tid 1041979] [client 87.219.197.128:57867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK-Oov3RhPI65jTFG4aogAAA04"]
[Sat Aug 29 05:10:50.352605 2026] [security2:error] [pid 1041789:tid 1041979] [client 87.219.197.128:57867] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK-Oov3RhPI65jTFG4aogAAA04"]
[Sat Aug 29 05:10:50.367004 2026] [security2:error] [pid 11274:tid 11487] [client 20.48.250.41:49537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/maraz.php"] [unique_id "apK-OmbX5DA3XO6e_qQnxQAAATQ"]
[Sat Aug 29 05:10:50.367749 2026] [security2:error] [pid 11274:tid 11339] [remote 136.108.90.41:44500] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.sunlandranch.com"] [uri "/app/.env"] [unique_id "apK-OmbX5DA3XO6e_qQnxgABcho"]
[Sat Aug 29 05:10:50.379603 2026] [security2:error] [pid 1041789:tid 1042050] [client 20.151.200.44:63970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/file66.php"] [unique_id "apK-Oov3RhPI65jTFG4apQAAA5U"]
[Sat Aug 29 05:10:50.385555 2026] [security2:error] [pid 11274:tid 11452] [client 20.48.160.90:64550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/pri.php"] [unique_id "apK-OmbX5DA3XO6e_qQnyAAAARI"]
[Sat Aug 29 05:10:50.387898 2026] [security2:error] [pid 1041789:tid 1042020] [client 20.48.160.90:65392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/fling.php"] [unique_id "apK-Oov3RhPI65jTFG4apwAAA3c"]
[Sat Aug 29 05:10:50.396114 2026] [security2:error] [pid 1041789:tid 1042031] [client 52.139.37.240:29180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/sagax.php"] [unique_id "apK-Oov3RhPI65jTFG4aqAAAA4I"]
[Sat Aug 29 05:10:50.402385 2026] [security2:error] [pid 1041789:tid 1041931] [client 20.104.104.62:40230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/l3.php"] [unique_id "apK-Oov3RhPI65jTFG4aqQAAAx4"]
[Sat Aug 29 05:10:50.414908 2026] [security2:error] [pid 11274:tid 11341] [remote 136.108.90.41:44500] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.sunlandranch.com"] [uri "/production/.env"] [unique_id "apK-OmbX5DA3XO6e_qQnygABaBw"]
[Sat Aug 29 05:10:50.415831 2026] [security2:error] [pid 11274:tid 11346] [remote 136.108.90.41:44500] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.sunlandranch.com"] [uri "/dev/.env"] [unique_id "apK-OmbX5DA3XO6e_qQnywABaCE"]
[Sat Aug 29 05:10:50.422091 2026] [security2:error] [pid 1041789:tid 1041991] [client 20.48.160.90:51893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/codex.php"] [unique_id "apK-Oov3RhPI65jTFG4aqgAAA1o"]
[Sat Aug 29 05:10:50.428896 2026] [security2:error] [pid 11274:tid 11466] [client 20.196.209.81:15391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/meta.php"] [unique_id "apK-OmbX5DA3XO6e_qQnzgAAASA"]
[Sat Aug 29 05:10:50.439200 2026] [security2:error] [pid 11274:tid 11342] [remote 136.108.90.41:44500] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.sunlandranch.com"] [uri "/src/.env"] [unique_id "apK-OmbX5DA3XO6e_qQn1gABYx0"]
[Sat Aug 29 05:10:50.439841 2026] [security2:error] [pid 11274:tid 11512] [client 52.139.37.240:31494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/abc.php"] [unique_id "apK-OmbX5DA3XO6e_qQn2QAAAU0"]
[Sat Aug 29 05:10:50.443127 2026] [security2:error] [pid 11274:tid 11353] [remote 136.108.90.41:44500] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.sunlandranch.com"] [uri "/frontend/.env"] [unique_id "apK-OmbX5DA3XO6e_qQn2gABNSg"]
[Sat Aug 29 05:10:50.461788 2026] [security2:error] [pid 11274:tid 11453] [client 20.48.250.41:62402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/gdn.php"] [unique_id "apK-OmbX5DA3XO6e_qQn3QAAARM"]
[Sat Aug 29 05:10:50.462233 2026] [security2:error] [pid 11274:tid 11359] [remote 136.108.90.41:44500] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.sunlandranch.com"] [uri "/server/.env"] [unique_id "apK-OmbX5DA3XO6e_qQn3AABKy4"]
[Sat Aug 29 05:10:50.477020 2026] [security2:error] [pid 11274:tid 11465] [client 20.48.250.41:50194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.nillpower.com"] [uri "/R57.php"] [unique_id "apK-OmbX5DA3XO6e_qQn3gAAAR8"]
[Sat Aug 29 05:10:50.502755 2026] [security2:error] [pid 1041789:tid 1041956] [client 20.48.250.41:49600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/kbfr.php"] [unique_id "apK-Oov3RhPI65jTFG4arQAAAzc"]
[Sat Aug 29 05:10:50.505692 2026] [security2:error] [pid 1041789:tid 1042017] [client 158.23.147.79:14256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/dropdown.php"] [unique_id "apK-Oov3RhPI65jTFG4argAAA3Q"]
[Sat Aug 29 05:10:50.532579 2026] [security2:error] [pid 11274:tid 11493] [client 20.48.160.90:64512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/wp_blog_footer.php"] [unique_id "apK-OmbX5DA3XO6e_qQn4AAAATo"]
[Sat Aug 29 05:10:50.542973 2026] [security2:error] [pid 1041789:tid 1042025] [client 158.23.147.79:57001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-admin/images/about.php"] [unique_id "apK-Oov3RhPI65jTFG4asQAAA3w"]
[Sat Aug 29 05:10:50.544823 2026] [security2:error] [pid 1321:tid 1589] [client 20.48.160.90:64131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/btyuio.php"] [unique_id "apK-OmjCPtor9NZ-byTqEwAABqA"]
[Sat Aug 29 05:10:50.559927 2026] [security2:error] [pid 11274:tid 11560] [client 158.158.54.35:8455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/x.php"] [unique_id "apK-OmbX5DA3XO6e_qQn5wAAAXw"]
[Sat Aug 29 05:10:50.571484 2026] [security2:error] [pid 11274:tid 11546] [client 20.48.160.90:28063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/5656.php"] [unique_id "apK-OmbX5DA3XO6e_qQn6AAAAW4"]
[Sat Aug 29 05:10:50.578015 2026] [security2:error] [pid 1321:tid 1488] [client 57.141.14.89:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/categorie-produit/fruits/page/12/"] [unique_id "apK-OmjCPtor9NZ-byTqFgAABjw"]
[Sat Aug 29 05:10:50.584443 2026] [security2:error] [pid 11274:tid 11561] [client 20.63.219.114:18994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/colour.php"] [unique_id "apK-OmbX5DA3XO6e_qQn6wAAAX0"]
[Sat Aug 29 05:10:50.590581 2026] [access_compat:error] [pid 11274:tid 11486] [client 35.86.223.62:52229] AH01797: client denied by server configuration: proxy:https://127.0.0.1:8443/server-status
[Sat Aug 29 05:10:50.601863 2026] [security2:error] [pid 11274:tid 11544] [client 52.138.0.157:1167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pompisfelices.com"] [uri "/shell.php"] [unique_id "apK-OmbX5DA3XO6e_qQn7gAAAWw"]
[Sat Aug 29 05:10:50.614778 2026] [security2:error] [pid 11274:tid 11491] [client 158.158.54.35:17737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/xxx.php"] [unique_id "apK-OmbX5DA3XO6e_qQn8AAAATg"]
[Sat Aug 29 05:10:50.624630 2026] [security2:error] [pid 1321:tid 1514] [client 40.83.93.50:15178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/22.php"] [unique_id "apK-OmjCPtor9NZ-byTqHAAABlY"]
[Sat Aug 29 05:10:50.633192 2026] [security2:error] [pid 11274:tid 11468] [client 20.48.250.41:49599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/wp-act.php"] [unique_id "apK-OmbX5DA3XO6e_qQn9AAAASI"]
[Sat Aug 29 05:10:50.640553 2026] [security2:error] [pid 11274:tid 11485] [client 52.139.37.240:31496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/c1.php"] [unique_id "apK-OmbX5DA3XO6e_qQn9QAAATI"]
[Sat Aug 29 05:10:50.640558 2026] [security2:error] [pid 1041789:tid 1042007] [client 158.23.147.79:6016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK-Oov3RhPI65jTFG4atgAAA2o"]
[Sat Aug 29 05:10:50.668439 2026] [security2:error] [pid 11274:tid 11504] [client 20.48.160.90:63462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/sushi.php"] [unique_id "apK-OmbX5DA3XO6e_qQn-QAAAUU"]
[Sat Aug 29 05:10:50.676303 2026] [security2:error] [pid 1321:tid 1548] [client 52.139.37.240:29405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/wp-content/plugins/ftde.php"] [unique_id "apK-OmjCPtor9NZ-byTqHQAABnc"]
[Sat Aug 29 05:10:50.685025 2026] [security2:error] [pid 1321:tid 1601] [client 20.48.250.41:62357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/f2.php"] [unique_id "apK-OmjCPtor9NZ-byTqHwAABqw"]
[Sat Aug 29 05:10:50.695557 2026] [security2:error] [pid 11274:tid 11489] [client 74.248.24.12:35041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/num.php"] [unique_id "apK-OmbX5DA3XO6e_qQn_AAAATY"]
[Sat Aug 29 05:10:50.710330 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.52.41.200:2825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-access.php"] [unique_id "apK-Oov3RhPI65jTFG4augAAA3o"]
[Sat Aug 29 05:10:50.747008 2026] [security2:error] [pid 11274:tid 11524] [client 20.48.160.90:51907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/w3lls.php"] [unique_id "apK-OmbX5DA3XO6e_qQoAgAAAVk"]
[Sat Aug 29 05:10:50.753446 2026] [security2:error] [pid 11274:tid 11364] [remote 136.108.90.41:44500] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.sunlandranch.com"] [uri "/apps/.env"] [unique_id "apK-OmbX5DA3XO6e_qQoAwABSzI"]
[Sat Aug 29 05:10:50.781234 2026] [security2:error] [pid 11274:tid 11495] [client 20.48.250.41:42963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/24.php"] [unique_id "apK-OmbX5DA3XO6e_qQoBQAAATw"]
[Sat Aug 29 05:10:50.800163 2026] [security2:error] [pid 1041789:tid 1041940] [client 52.138.0.157:1177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pompisfelices.com"] [uri "/simple.php"] [unique_id "apK-Oov3RhPI65jTFG4avQAAAyc"]
[Sat Aug 29 05:10:50.806454 2026] [security2:error] [pid 1041789:tid 1041987] [client 20.48.160.90:63369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/manga.php"] [unique_id "apK-Oov3RhPI65jTFG4avgAAA1Y"]
[Sat Aug 29 05:10:50.812300 2026] [security2:error] [pid 1041789:tid 1041983] [client 20.48.160.90:64199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/dehnl.php"] [unique_id "apK-Oov3RhPI65jTFG4avwAAA1I"]
[Sat Aug 29 05:10:50.833762 2026] [security2:error] [pid 11274:tid 11445] [client 20.100.175.163:28000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/.trash7206/index.php"] [unique_id "apK-OmbX5DA3XO6e_qQoDQAAAQs"]
[Sat Aug 29 05:10:50.837297 2026] [security2:error] [pid 11274:tid 11514] [client 52.139.37.240:31508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/index.php/feed/atom/"] [unique_id "apK-OmbX5DA3XO6e_qQoDwAAAU8"]
[Sat Aug 29 05:10:50.839362 2026] [security2:error] [pid 1041789:tid 1041982] [client 20.196.209.81:3343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/randkeyword.php"] [unique_id "apK-Oov3RhPI65jTFG4awAAAA1E"]
[Sat Aug 29 05:10:50.842864 2026] [security2:error] [pid 1321:tid 1613] [client 20.48.250.41:64789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/grsiuk.php"] [unique_id "apK-OmjCPtor9NZ-byTqIgAABrg"]
[Sat Aug 29 05:10:50.850284 2026] [security2:error] [pid 11274:tid 11518] [client 20.104.104.62:64718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/fellganteng.php"] [unique_id "apK-OmbX5DA3XO6e_qQoEAAAAVM"]
[Sat Aug 29 05:10:50.873441 2026] [security2:error] [pid 11274:tid 11473] [client 52.139.37.240:29150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "apK-OmbX5DA3XO6e_qQoFAAAASc"]
[Sat Aug 29 05:10:50.885847 2026] [security2:error] [pid 11274:tid 11535] [client 20.151.200.44:63729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/wp-ana.php"] [unique_id "apK-OmbX5DA3XO6e_qQoFgAAAWQ"]
[Sat Aug 29 05:10:50.888074 2026] [security2:error] [pid 11274:tid 11481] [client 20.48.160.90:28145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/fpwch.php"] [unique_id "apK-OmbX5DA3XO6e_qQoFwAAAS4"]
[Sat Aug 29 05:10:50.914343 2026] [security2:error] [pid 11274:tid 11515] [client 158.23.147.79:39135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-admin/about.php"] [unique_id "apK-OmbX5DA3XO6e_qQoGQAAAVA"]
[Sat Aug 29 05:10:50.946370 2026] [security2:error] [pid 1041789:tid 1042050] [client 20.48.160.90:63276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/zoo2.php"] [unique_id "apK-Oov3RhPI65jTFG4awgAAA5U"]
[Sat Aug 29 05:10:50.947762 2026] [security2:error] [pid 1321:tid 1529] [client 20.48.160.90:64514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/asdfghj.php"] [unique_id "apK-OmjCPtor9NZ-byTqJQAABmU"]
[Sat Aug 29 05:10:50.964284 2026] [security2:error] [pid 1041789:tid 1042020] [client 20.48.250.41:42944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/155.php"] [unique_id "apK-Oov3RhPI65jTFG4awwAAA3c"]
[Sat Aug 29 05:10:50.990238 2026] [security2:error] [pid 1041789:tid 1041946] [client 20.104.104.62:48458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/Rk41.php"] [unique_id "apK-Oov3RhPI65jTFG4axQAAAy0"]
[Sat Aug 29 05:10:51.005337 2026] [security2:error] [pid 1321:tid 1562] [client 158.158.54.35:30314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/new.php"] [unique_id "apK-O2jCPtor9NZ-byTqJgAABoU"]
[Sat Aug 29 05:10:51.006096 2026] [security2:error] [pid 1321:tid 1522] [client 52.138.0.157:1181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pompisfelices.com"] [uri "/wp-admin.php"] [unique_id "apK-O2jCPtor9NZ-byTqJwAABl4"]
[Sat Aug 29 05:10:51.025270 2026] [security2:error] [pid 11274:tid 11507] [client 20.63.219.114:18360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/OK.php"] [unique_id "apK-O2bX5DA3XO6e_qQoIQAAAUg"]
[Sat Aug 29 05:10:51.042148 2026] [security2:error] [pid 11274:tid 11465] [client 20.48.160.90:51958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/domvf.php"] [unique_id "apK-O2bX5DA3XO6e_qQoIwAAAR8"]
[Sat Aug 29 05:10:51.042926 2026] [security2:error] [pid 11274:tid 11469] [client 20.48.250.41:64833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/wp-scr1pts.php"] [unique_id "apK-O2bX5DA3XO6e_qQoJAAAASM"]
[Sat Aug 29 05:10:51.053637 2026] [security2:error] [pid 1041789:tid 1042001] [client 52.139.37.240:31099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/root.php"] [unique_id "apK-O4v3RhPI65jTFG4axgAAA2Q"]
[Sat Aug 29 05:10:51.067079 2026] [security2:error] [pid 1041789:tid 1041991] [client 4.205.62.107:4939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/sale.php"] [unique_id "apK-O4v3RhPI65jTFG4axwAAA1o"]
[Sat Aug 29 05:10:51.079918 2026] [security2:error] [pid 11274:tid 11451] [client 20.48.160.90:63373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/dragonshell.php"] [unique_id "apK-O2bX5DA3XO6e_qQoKAAAARE"]
[Sat Aug 29 05:10:51.114904 2026] [security2:error] [pid 1321:tid 1523] [client 20.104.49.130:52494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/df.php"] [unique_id "apK-O2jCPtor9NZ-byTqKwAABl8"]
[Sat Aug 29 05:10:51.127721 2026] [security2:error] [pid 11274:tid 11531] [client 40.83.93.50:10703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/bak.phps"] [unique_id "apK-O2bX5DA3XO6e_qQoLQAAAWA"]
[Sat Aug 29 05:10:51.135539 2026] [security2:error] [pid 11274:tid 11462] [client 20.48.160.90:62107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/zoo1.php"] [unique_id "apK-O2bX5DA3XO6e_qQoMAAAARw"]
[Sat Aug 29 05:10:51.137013 2026] [security2:error] [pid 11274:tid 11506] [client 158.23.147.79:24521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK-O2bX5DA3XO6e_qQoMQAAAUc"]
[Sat Aug 29 05:10:51.146464 2026] [security2:error] [pid 1041789:tid 1042055] [client 20.104.104.62:47577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/fell.php"] [unique_id "apK-O4v3RhPI65jTFG4ayAAAA5o"]
[Sat Aug 29 05:10:51.170023 2026] [security2:error] [pid 1321:tid 1490] [client 20.52.41.200:2817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-content/uploads/min.php"] [unique_id "apK-O2jCPtor9NZ-byTqLAAABj4"]
[Sat Aug 29 05:10:51.175863 2026] [security2:error] [pid 1321:tid 1528] [client 52.139.37.240:29164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/z.php"] [unique_id "apK-O2jCPtor9NZ-byTqLQAABmQ"]
[Sat Aug 29 05:10:51.185130 2026] [security2:error] [pid 11274:tid 11491] [client 20.100.175.163:7795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/w.php"] [unique_id "apK-O2bX5DA3XO6e_qQoNAAAATg"]
[Sat Aug 29 05:10:51.204029 2026] [security2:error] [pid 11274:tid 11476] [client 52.138.0.157:58270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pompisfelices.com"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "apK-O2bX5DA3XO6e_qQoNwAAASo"]
[Sat Aug 29 05:10:51.204629 2026] [security2:error] [pid 11274:tid 11398] [remote 136.108.90.41:44500] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.sunlandranch.com"] [uri "/docker/.env"] [unique_id "apK-O2bX5DA3XO6e_qQoNQABPlQ"]
[Sat Aug 29 05:10:51.205273 2026] [security2:error] [pid 11274:tid 11386] [remote 136.108.90.41:44500] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.sunlandranch.com"] [uri "/v1/.env"] [unique_id "apK-O2bX5DA3XO6e_qQoNgABPkg"]
[Sat Aug 29 05:10:51.206557 2026] [security2:error] [pid 11274:tid 11369] [remote 136.108.90.41:44500] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.sunlandranch.com"] [uri "/staging/.env"] [unique_id "apK-O2bX5DA3XO6e_qQoOAABPjc"]
[Sat Aug 29 05:10:51.209823 2026] [security2:error] [pid 11274:tid 11553] [client 4.205.62.107:62955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/nzv.php"] [unique_id "apK-O2bX5DA3XO6e_qQoOQAAAXU"]
[Sat Aug 29 05:10:51.210863 2026] [security2:error] [pid 1041789:tid 1042025] [client 20.104.49.130:52516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "coveryourauto.com"] [uri "/ccc.php"] [unique_id "apK-O4v3RhPI65jTFG4aywAAA3w"]
[Sat Aug 29 05:10:51.219065 2026] [security2:error] [pid 11274:tid 11395] [remote 136.108.90.41:44500] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.sunlandranch.com"] [uri "/old/.env"] [unique_id "apK-O2bX5DA3XO6e_qQoPAABaVE"]
[Sat Aug 29 05:10:51.245577 2026] [security2:error] [pid 11274:tid 11459] [client 20.196.209.81:3366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/goods.php"] [unique_id "apK-O2bX5DA3XO6e_qQoPgAAARk"]
[Sat Aug 29 05:10:51.252386 2026] [security2:error] [pid 1041789:tid 1042017] [client 52.139.37.240:31150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/shell.php"] [unique_id "apK-O4v3RhPI65jTFG4azQAAA3Q"]
[Sat Aug 29 05:10:51.269940 2026] [security2:error] [pid 11274:tid 11385] [remote 136.108.90.41:44500] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.sunlandranch.com"] [uri "/v2/.env"] [unique_id "apK-O2bX5DA3XO6e_qQoQQABNkc"]
[Sat Aug 29 05:10:51.277886 2026] [security2:error] [pid 11274:tid 11564] [client 158.23.147.79:62829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-login.php"] [unique_id "apK-O2bX5DA3XO6e_qQoQgAAAYA"]
[Sat Aug 29 05:10:51.279023 2026] [security2:error] [pid 1041789:tid 1042030] [client 20.151.200.44:65259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/zafir1.php"] [unique_id "apK-O4v3RhPI65jTFG4azgAAA4E"]
[Sat Aug 29 05:10:51.297166 2026] [security2:error] [pid 1041789:tid 1041961] [client 158.23.147.79:62775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-content/x/index.php"] [unique_id "apK-O4v3RhPI65jTFG4azwAAAzw"]
[Sat Aug 29 05:10:51.324847 2026] [security2:error] [pid 1041789:tid 1041975] [client 20.100.175.163:24830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wk/index.php"] [unique_id "apK-O4v3RhPI65jTFG4a0AAAA0o"]
[Sat Aug 29 05:10:51.327936 2026] [security2:error] [pid 11274:tid 11511] [client 4.205.62.107:64906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/localconf.php"] [unique_id "apK-O2bX5DA3XO6e_qQoRQAAAUw"]
[Sat Aug 29 05:10:51.340509 2026] [security2:error] [pid 11274:tid 11378] [remote 136.108.90.41:44500] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.sunlandranch.com"] [uri "/site/.env"] [unique_id "apK-O2bX5DA3XO6e_qQoSAABPUA"]
[Sat Aug 29 05:10:51.365599 2026] [security2:error] [pid 1321:tid 1594] [client 158.158.54.35:16207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/tool.php"] [unique_id "apK-O2jCPtor9NZ-byTqMQAABqU"]
[Sat Aug 29 05:10:51.371828 2026] [security2:error] [pid 11274:tid 11483] [client 52.139.37.240:29161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/f35.php"] [unique_id "apK-O2bX5DA3XO6e_qQoTQAAATA"]
[Sat Aug 29 05:10:51.402066 2026] [security2:error] [pid 11274:tid 11508] [client 52.138.0.157:40689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pompisfelices.com"] [uri "/wp-admin/includes/about.php"] [unique_id "apK-O2bX5DA3XO6e_qQoUAAAAUk"]
[Sat Aug 29 05:10:51.431197 2026] [security2:error] [pid 11274:tid 11543] [client 20.63.219.114:18315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/aaa.php"] [unique_id "apK-O2bX5DA3XO6e_qQoVAAAAWs"]
[Sat Aug 29 05:10:51.450327 2026] [security2:error] [pid 1321:tid 1574] [client 158.158.54.35:12398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/menu.php"] [unique_id "apK-O2jCPtor9NZ-byTqNAAABpE"]
[Sat Aug 29 05:10:51.472237 2026] [security2:error] [pid 11274:tid 11445] [client 52.139.37.240:31133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK-O2bX5DA3XO6e_qQoVwAAAQs"]
[Sat Aug 29 05:10:51.474455 2026] [security2:error] [pid 11274:tid 11389] [remote 136.108.90.41:44500] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "autodiscover.sunlandranch.com"] [uri "/api/.env.bak"] [unique_id "apK-O2bX5DA3XO6e_qQoWAABZEs"]
[Sat Aug 29 05:10:51.474455 2026] [security2:error] [pid 11274:tid 11420] [remote 136.108.90.41:44500] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "autodiscover.sunlandranch.com"] [uri "/env.old"] [unique_id "apK-O2bX5DA3XO6e_qQoVgABZGo"]
[Sat Aug 29 05:10:51.475921 2026] [security2:error] [pid 11274:tid 11412] [remote 136.108.90.41:44500] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "autodiscover.sunlandranch.com"] [uri "/env.bak"] [unique_id "apK-O2bX5DA3XO6e_qQoWQABZGI"]
[Sat Aug 29 05:10:51.481672 2026] [security2:error] [pid 11274:tid 11487] [client 4.205.62.107:6925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/png.php"] [unique_id "apK-O2bX5DA3XO6e_qQoWgAAATQ"]
[Sat Aug 29 05:10:51.486653 2026] [security2:error] [pid 11274:tid 11526] [client 4.205.62.107:63903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/fleen.php"] [unique_id "apK-O2bX5DA3XO6e_qQoWwAAAVs"]
[Sat Aug 29 05:10:51.520843 2026] [security2:error] [pid 11274:tid 11417] [remote 136.108.90.41:44500] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.sunlandranch.com"] [uri "/portal/.env"] [unique_id "apK-O2bX5DA3XO6e_qQoXAABcWc"]
[Sat Aug 29 05:10:51.548601 2026] [security2:error] [pid 1041789:tid 1041940] [client 20.151.200.44:64623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/console.php"] [unique_id "apK-O4v3RhPI65jTFG4a0wAAAyc"]
[Sat Aug 29 05:10:51.569334 2026] [security2:error] [pid 11274:tid 11515] [client 52.139.37.240:29384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/file61.php"] [unique_id "apK-O2bX5DA3XO6e_qQoXgAAAVA"]
[Sat Aug 29 05:10:51.596768 2026] [security2:error] [pid 11274:tid 11547] [client 52.138.0.157:10372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pompisfelices.com"] [uri "/wp-admin/js/index.php"] [unique_id "apK-O2bX5DA3XO6e_qQoXwAAAW8"]
[Sat Aug 29 05:10:51.612330 2026] [security2:error] [pid 11274:tid 11534] [client 158.23.147.79:14220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/sad/about.php"] [unique_id "apK-O2bX5DA3XO6e_qQoYAAAAWM"]
[Sat Aug 29 05:10:51.619107 2026] [security2:error] [pid 11274:tid 11558] [client 40.83.93.50:11615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/install.php"] [unique_id "apK-O2bX5DA3XO6e_qQoYgAAAXo"]
[Sat Aug 29 05:10:51.626944 2026] [security2:error] [pid 11274:tid 11481] [client 20.52.41.200:2875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK-O2bX5DA3XO6e_qQoZQAAAS4"]
[Sat Aug 29 05:10:51.642546 2026] [security2:error] [pid 1041789:tid 1041953] [client 20.196.209.81:16239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/hehe.php"] [unique_id "apK-O4v3RhPI65jTFG4a2AAAAzQ"]
[Sat Aug 29 05:10:51.653847 2026] [security2:error] [pid 11274:tid 11536] [client 158.23.147.79:44515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK-O2bX5DA3XO6e_qQoaAAAAWU"]
[Sat Aug 29 05:10:51.676410 2026] [security2:error] [pid 11274:tid 11413] [remote 136.108.90.41:44500] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "autodiscover.sunlandranch.com"] [uri "/.env.prod.bak"] [unique_id "apK-O2bX5DA3XO6e_qQoaQABSGM"]
[Sat Aug 29 05:10:51.678539 2026] [security2:error] [pid 11274:tid 11416] [remote 136.108.90.41:44500] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "autodiscover.sunlandranch.com"] [uri "/.env.production.bak"] [unique_id "apK-O2bX5DA3XO6e_qQoagABSGY"]
[Sat Aug 29 05:10:51.678773 2026] [security2:error] [pid 11274:tid 11567] [client 158.23.147.79:63018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-content/index.php"] [unique_id "apK-O2bX5DA3XO6e_qQobAAAAYM"]
[Sat Aug 29 05:10:51.678988 2026] [security2:error] [pid 11274:tid 11423] [remote 136.108.90.41:44500] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.sunlandranch.com"] [uri "/.docker/.env"] [unique_id "apK-O2bX5DA3XO6e_qQoawABSG0"]
[Sat Aug 29 05:10:51.681729 2026] [security2:error] [pid 11274:tid 11456] [client 20.100.175.163:28595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/ahax.php"] [unique_id "apK-O2bX5DA3XO6e_qQobQAAARY"]
[Sat Aug 29 05:10:51.684442 2026] [security2:error] [pid 11274:tid 11421] [remote 136.108.90.41:44500] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.sunlandranch.com"] [uri "/@fs/.env"] [unique_id "apK-O2bX5DA3XO6e_qQobgABSGs"]
[Sat Aug 29 05:10:51.690226 2026] [security2:error] [pid 1041789:tid 1042014] [client 52.139.37.240:31134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/wp-content/plugins/linkpreview/il.php"] [unique_id "apK-O4v3RhPI65jTFG4a2QAAA3E"]
[Sat Aug 29 05:10:51.703075 2026] [security2:error] [pid 11274:tid 11409] [remote 136.108.90.41:44500] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.sunlandranch.com"] [uri "/@fs/root/.env"] [unique_id "apK-O2bX5DA3XO6e_qQobwABSF8"]
[Sat Aug 29 05:10:51.710932 2026] [security2:error] [pid 11274:tid 11555] [client 20.104.104.62:20824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/ok.php"] [unique_id "apK-O2bX5DA3XO6e_qQocAAAAXc"]
[Sat Aug 29 05:10:51.745108 2026] [security2:error] [pid 11274:tid 11521] [client 158.23.147.79:5835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK-O2bX5DA3XO6e_qQocQAAAVY"]
[Sat Aug 29 05:10:51.767579 2026] [security2:error] [pid 1041789:tid 1041950] [client 52.139.37.240:28806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/mah.php"] [unique_id "apK-O4v3RhPI65jTFG4a2wAAAzE"]
[Sat Aug 29 05:10:51.799249 2026] [security2:error] [pid 11274:tid 11458] [client 158.158.54.35:11633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/k.php"] [unique_id "apK-O2bX5DA3XO6e_qQoewAAARg"]
[Sat Aug 29 05:10:51.805030 2026] [security2:error] [pid 1041789:tid 1041994] [client 20.100.175.163:27970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/admin.php"] [unique_id "apK-O4v3RhPI65jTFG4a3AAAA10"]
[Sat Aug 29 05:10:51.823411 2026] [security2:error] [pid 11274:tid 11401] [remote 136.108.90.41:44500] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "autodiscover.sunlandranch.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK-O2bX5DA3XO6e_qQogQABJlc"]
[Sat Aug 29 05:10:51.824413 2026] [cgid:error] [pid 1041789:tid 1041804] [remote 174.172.22.10:61528] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/flowerfh/public_html/404.shtml, referer: https://www.flowerfh.com/obituaries.php
[Sat Aug 29 05:10:51.868211 2026] [security2:error] [pid 11274:tid 11546] [client 52.138.0.157:10405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pompisfelices.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK-O2bX5DA3XO6e_qQohwAAAW4"]
[Sat Aug 29 05:10:51.885005 2026] [security2:error] [pid 11274:tid 11571] [client 158.158.54.35:8502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK-O2bX5DA3XO6e_qQoiwAAAYc"]
[Sat Aug 29 05:10:51.890421 2026] [security2:error] [pid 11274:tid 11568] [client 52.139.37.240:31659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/wp-header-json.php"] [unique_id "apK-O2bX5DA3XO6e_qQojAAAAYQ"]
[Sat Aug 29 05:10:51.911906 2026] [security2:error] [pid 1321:tid 1501] [client 74.248.24.12:20440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "apK-O2jCPtor9NZ-byTqOwAABkk"]
[Sat Aug 29 05:10:51.983487 2026] [security2:error] [pid 11274:tid 11444] [client 20.104.104.62:20621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/herp.php"] [unique_id "apK-O2bX5DA3XO6e_qQokAAAAQo"]
[Sat Aug 29 05:10:51.987963 2026] [security2:error] [pid 1041789:tid 1041991] [client 52.139.37.240:29406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/mini.php"] [unique_id "apK-O4v3RhPI65jTFG4a8QAAA1o"]
[Sat Aug 29 05:10:52.023613 2026] [security2:error] [pid 11274:tid 11517] [client 158.23.147.79:43336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK-PGbX5DA3XO6e_qQokgAAAVI"]
[Sat Aug 29 05:10:52.043207 2026] [security2:error] [pid 1321:tid 1587] [client 20.196.209.81:3336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/wp-admin/class-db.php"] [unique_id "apK-PGjCPtor9NZ-byTqPQAABp4"]
[Sat Aug 29 05:10:52.054612 2026] [security2:error] [pid 1041789:tid 1041976] [client 20.151.200.44:63719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/secret.php"] [unique_id "apK-PIv3RhPI65jTFG4a-QAAA0s"]
[Sat Aug 29 05:10:52.067313 2026] [security2:error] [pid 1321:tid 1611] [client 52.138.0.157:10430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pompisfelices.com"] [uri "/wp-admin/network/admin.php"] [unique_id "apK-PGjCPtor9NZ-byTqPgAABrY"]
[Sat Aug 29 05:10:52.087260 2026] [security2:error] [pid 1041789:tid 1041977] [client 20.52.41.200:2778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/bthil.php"] [unique_id "apK-PIv3RhPI65jTFG4a-gAAA0w"]
[Sat Aug 29 05:10:52.109875 2026] [security2:error] [pid 11274:tid 11537] [client 52.139.37.240:31040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/zup.php"] [unique_id "apK-PGbX5DA3XO6e_qQolAAAAWY"]
[Sat Aug 29 05:10:52.137383 2026] [security2:error] [pid 11274:tid 11554] [client 213.202.253.4:58621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "timportlock.net"] [uri "/delpaths.php"] [unique_id "apK-PGbX5DA3XO6e_qQolgAAAXY"], referer: www.google.com
[Sat Aug 29 05:10:52.141113 2026] [security2:error] [pid 1041789:tid 1042019] [client 113.199.247.136:62123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.247.199.113.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "monarchxp.com"] [uri "/xmlrpc.php"] [unique_id "apK-PIv3RhPI65jTFG4a_AAAA3Y"]
[Sat Aug 29 05:10:52.141241 2026] [security2:error] [pid 1041789:tid 1042019] [client 113.199.247.136:62123] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "monarchxp.com"] [uri "/xmlrpc.php"] [unique_id "apK-PIv3RhPI65jTFG4a_AAAA3Y"]
[Sat Aug 29 05:10:52.158529 2026] [security2:error] [pid 11274:tid 11470] [client 40.83.93.50:8770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/colour.php"] [unique_id "apK-PGbX5DA3XO6e_qQolwAAASQ"]
[Sat Aug 29 05:10:52.167264 2026] [security2:error] [pid 11274:tid 11489] [client 20.100.175.163:7746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/shell.php"] [unique_id "apK-PGbX5DA3XO6e_qQomAAAATY"]
[Sat Aug 29 05:10:52.190882 2026] [security2:error] [pid 11274:tid 11510] [client 4.205.62.107:62962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-PGbX5DA3XO6e_qQomgAAAUs"]
[Sat Aug 29 05:10:52.194124 2026] [security2:error] [pid 11274:tid 11572] [client 52.139.37.240:29421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/v.php"] [unique_id "apK-PGbX5DA3XO6e_qQonAAAAYg"]
[Sat Aug 29 05:10:52.203840 2026] [security2:error] [pid 11274:tid 11495] [client 4.205.62.107:51430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/wp-content/themes/luJMF.php"] [unique_id "apK-PGbX5DA3XO6e_qQonwAAATw"]
[Sat Aug 29 05:10:52.220881 2026] [security2:error] [pid 11274:tid 11479] [client 20.151.200.44:63974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/blnux.php"] [unique_id "apK-PGbX5DA3XO6e_qQooAAAASw"]
[Sat Aug 29 05:10:52.223768 2026] [security2:error] [pid 1041789:tid 1041944] [client 20.48.160.90:62294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/wp-safe.php"] [unique_id "apK-PIv3RhPI65jTFG4a_wAAAys"]
[Sat Aug 29 05:10:52.230277 2026] [security2:error] [pid 11274:tid 11552] [client 158.158.54.35:37124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/root.php"] [unique_id "apK-PGbX5DA3XO6e_qQoowAAAXQ"]
[Sat Aug 29 05:10:52.232594 2026] [security2:error] [pid 11274:tid 11518] [client 20.104.49.130:58055] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "coveryourauto.com"] [uri "/1.php"] [unique_id "apK-PGbX5DA3XO6e_qQopAAAAVM"]
[Sat Aug 29 05:10:52.232665 2026] [security2:error] [pid 11274:tid 11518] [client 20.104.49.130:58055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "coveryourauto.com"] [uri "/1.php"] [unique_id "apK-PGbX5DA3XO6e_qQopAAAAVM"]
[Sat Aug 29 05:10:52.238644 2026] [security2:error] [pid 11274:tid 11541] [client 20.48.160.90:28084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/biufile.php"] [unique_id "apK-PGbX5DA3XO6e_qQopgAAAWo"]
[Sat Aug 29 05:10:52.244457 2026] [security2:error] [pid 1041789:tid 1041941] [client 158.23.147.79:24572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/file.php"] [unique_id "apK-PIv3RhPI65jTFG4bAAAAAyg"]
[Sat Aug 29 05:10:52.258408 2026] [security2:error] [pid 11274:tid 11519] [client 103.185.242.143:60777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-PGbX5DA3XO6e_qQoqAAAAVQ"]
[Sat Aug 29 05:10:52.258498 2026] [security2:error] [pid 11274:tid 11519] [client 103.185.242.143:60777] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-PGbX5DA3XO6e_qQoqAAAAVQ"]
[Sat Aug 29 05:10:52.265147 2026] [security2:error] [pid 1041789:tid 1042055] [client 52.138.0.157:1169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pompisfelices.com"] [uri "/wp-conflg/function.php"] [unique_id "apK-PIv3RhPI65jTFG4bAQAAA5o"]
[Sat Aug 29 05:10:52.290038 2026] [security2:error] [pid 11274:tid 11538] [client 88.99.80.227:2822] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.wticalumni.com"] [uri "/"] [unique_id "apK-PGbX5DA3XO6e_qQorQAAAWc"], referer: http://www.wticalumni.com
[Sat Aug 29 05:10:52.293874 2026] [security2:error] [pid 1321:tid 1507] [client 158.23.184.117:1066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/update/da222.php"] [unique_id "apK-PGjCPtor9NZ-byTqRQAABk8"]
[Sat Aug 29 05:10:52.299998 2026] [security2:error] [pid 11274:tid 11545] [client 20.100.175.163:28025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/php8.php"] [unique_id "apK-PGbX5DA3XO6e_qQorgAAAW0"]
[Sat Aug 29 05:10:52.305700 2026] [security2:error] [pid 11274:tid 11473] [client 52.139.37.240:31132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/a9.php"] [unique_id "apK-PGbX5DA3XO6e_qQorwAAASc"]
[Sat Aug 29 05:10:52.329550 2026] [security2:error] [pid 1041789:tid 1042017] [client 20.48.160.90:63328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/radio.php"] [unique_id "apK-PIv3RhPI65jTFG4bAwAAA3Q"]
[Sat Aug 29 05:10:52.345766 2026] [security2:error] [pid 11274:tid 11465] [client 197.219.150.206:57595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK-PGbX5DA3XO6e_qQotwAAAR8"]
[Sat Aug 29 05:10:52.345875 2026] [security2:error] [pid 11274:tid 11465] [client 197.219.150.206:57595] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK-PGbX5DA3XO6e_qQotwAAAR8"]
[Sat Aug 29 05:10:52.346386 2026] [security2:error] [pid 1321:tid 1516] [client 4.205.62.107:60325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/66.php"] [unique_id "apK-PGjCPtor9NZ-byTqRgAABlg"]
[Sat Aug 29 05:10:52.357804 2026] [security2:error] [pid 11274:tid 11323] [remote 136.108.90.41:44504] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "autodiscover.sunlandranch.com"] [uri "/_image"] [unique_id "apK-PGbX5DA3XO6e_qQovgABYwo"]
[Sat Aug 29 05:10:52.358435 2026] [security2:error] [pid 11274:tid 11452] [client 20.151.200.44:63588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/ad1.php"] [unique_id "apK-PGbX5DA3XO6e_qQovwAAARI"]
[Sat Aug 29 05:10:52.369389 2026] [security2:error] [pid 1321:tid 1482] [remote 18.138.238.149:59304] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mydwiclass.com"] [uri "/api/.env"] [unique_id "apK-PGjCPtor9NZ-byTqSgAGcXs"]
[Sat Aug 29 05:10:52.369973 2026] [security2:error] [pid 1321:tid 1458] [remote 18.138.238.149:59304] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mydwiclass.com"] [uri "/.env.old"] [unique_id "apK-PGjCPtor9NZ-byTqSwAGcWM"]
[Sat Aug 29 05:10:52.388882 2026] [security2:error] [pid 1041789:tid 1041951] [client 52.139.37.240:29170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK-PIv3RhPI65jTFG4bCQAAAzI"]
[Sat Aug 29 05:10:52.393113 2026] [security2:error] [pid 1321:tid 1434] [remote 18.138.238.149:59304] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mydwiclass.com"] [uri "/.env.backup"] [unique_id "apK-PGjCPtor9NZ-byTqTwAGi0w"]
[Sat Aug 29 05:10:52.393578 2026] [security2:error] [pid 1321:tid 1395] [remote 18.138.238.149:59304] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mydwiclass.com"] [uri "/.env.bak"] [unique_id "apK-PGjCPtor9NZ-byTqTgAGiyU"]
[Sat Aug 29 05:10:52.397416 2026] [security2:error] [pid 11274:tid 11502] [client 158.23.147.79:29601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK-PGbX5DA3XO6e_qQowwAAAUM"]
[Sat Aug 29 05:10:52.404075 2026] [security2:error] [pid 1321:tid 1567] [client 180.190.5.40:39734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.5.190.180.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK-PGjCPtor9NZ-byTqTQAABoo"]
[Sat Aug 29 05:10:52.404213 2026] [security2:error] [pid 1321:tid 1567] [client 180.190.5.40:39734] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK-PGjCPtor9NZ-byTqTQAABoo"]
[Sat Aug 29 05:10:52.414012 2026] [security2:error] [pid 1041789:tid 1042057] [client 20.48.160.90:51966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/blacks.php"] [unique_id "apK-PIv3RhPI65jTFG4bCwAAA5w"]
[Sat Aug 29 05:10:52.422447 2026] [security2:error] [pid 1321:tid 1593] [client 158.23.147.79:55888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK-PGjCPtor9NZ-byTqUAAABqQ"]
[Sat Aug 29 05:10:52.427018 2026] [security2:error] [pid 1041789:tid 1041968] [client 20.48.160.90:64522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/gjewuagf.php"] [unique_id "apK-PIv3RhPI65jTFG4bEQAAA0M"]
[Sat Aug 29 05:10:52.441453 2026] [security2:error] [pid 11274:tid 11454] [client 158.23.184.117:1241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/xmr.php"] [unique_id "apK-PGbX5DA3XO6e_qQoxgAAARQ"]
[Sat Aug 29 05:10:52.447441 2026] [security2:error] [pid 1321:tid 1616] [client 68.155.159.216:64111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-PGjCPtor9NZ-byTqUgAABrs"]
[Sat Aug 29 05:10:52.464536 2026] [security2:error] [pid 11274:tid 11469] [client 4.205.62.107:64921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/bengi.php"] [unique_id "apK-PGbX5DA3XO6e_qQoyAAAASM"]
[Sat Aug 29 05:10:52.478852 2026] [security2:error] [pid 1041789:tid 1041940] [client 20.48.160.90:64200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/one.php"] [unique_id "apK-PIv3RhPI65jTFG4bFAAAAyc"]
[Sat Aug 29 05:10:52.479254 2026] [security2:error] [pid 11274:tid 11539] [client 74.248.24.12:4557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "apK-PGbX5DA3XO6e_qQoygAAAWg"]
[Sat Aug 29 05:10:52.484872 2026] [security2:error] [pid 11274:tid 11484] [client 52.138.0.157:40666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pompisfelices.com"] [uri "/wp-content/classwithtostring.php"] [unique_id "apK-PGbX5DA3XO6e_qQoywAAATE"]
[Sat Aug 29 05:10:52.500113 2026] [security2:error] [pid 1321:tid 1545] [client 52.139.37.240:31167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/admin/index.php"] [unique_id "apK-PGjCPtor9NZ-byTqVAAABnU"]
[Sat Aug 29 05:10:52.506447 2026] [security2:error] [pid 11274:tid 11531] [client 158.158.54.35:17704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/lite.php"] [unique_id "apK-PGbX5DA3XO6e_qQozQAAAWA"]
[Sat Aug 29 05:10:52.545349 2026] [security2:error] [pid 11274:tid 11546] [client 20.48.160.90:28092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/beck.php"] [unique_id "apK-PGbX5DA3XO6e_qQo0AAAAW4"]
[Sat Aug 29 05:10:52.550971 2026] [core:error] [pid 11274:tid 11525] [client 20.52.41.200:2790] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:52.550988 2026] [core:error] [pid 11274:tid 11525] [client 20.52.41.200:2790] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:52.551695 2026] [security2:error] [pid 1321:tid 1596] [client 20.196.209.81:3384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/wp-contentt.php"] [unique_id "apK-PGjCPtor9NZ-byTqVgAABqc"]
[Sat Aug 29 05:10:52.552836 2026] [security2:error] [pid 11274:tid 11462] [client 20.104.104.62:64746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/nptice.php"] [unique_id "apK-PGbX5DA3XO6e_qQo0QAAARw"]
[Sat Aug 29 05:10:52.560945 2026] [security2:error] [pid 1321:tid 1500] [client 20.48.160.90:63404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/tnglzqmv.php"] [unique_id "apK-PGjCPtor9NZ-byTqWAAABkg"]
[Sat Aug 29 05:10:52.564275 2026] [cgid:error] [pid 1041789:tid 1041850] [remote 174.172.22.10:61528] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/flowerfh/public_html/404.shtml
[Sat Aug 29 05:10:52.564687 2026] [cgid:error] [pid 1041789:tid 1041880] [remote 174.172.22.10:61528] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/flowerfh/public_html/404.shtml
[Sat Aug 29 05:10:52.586733 2026] [security2:error] [pid 11274:tid 11464] [client 158.23.184.117:1082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK-PGbX5DA3XO6e_qQo1AAAAR4"]
[Sat Aug 29 05:10:52.598663 2026] [security2:error] [pid 11274:tid 11503] [client 52.139.37.240:29167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "apK-PGbX5DA3XO6e_qQo1QAAAUQ"]
[Sat Aug 29 05:10:52.624328 2026] [security2:error] [pid 1041789:tid 1041947] [client 4.205.62.107:6499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/chosen.php"] [unique_id "apK-PIv3RhPI65jTFG4bHAAAAy4"]
[Sat Aug 29 05:10:52.624652 2026] [security2:error] [pid 1041789:tid 1041979] [client 4.205.62.107:61709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/upload.form.php"] [unique_id "apK-PIv3RhPI65jTFG4bHQAAA04"]
[Sat Aug 29 05:10:52.627198 2026] [security2:error] [pid 1041789:tid 1041969] [client 216.51.171.83:54102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 83.171.51.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-PIv3RhPI65jTFG4bGgAAA0Q"]
[Sat Aug 29 05:10:52.627286 2026] [security2:error] [pid 1041789:tid 1041969] [client 216.51.171.83:54102] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-PIv3RhPI65jTFG4bGgAAA0Q"]
[Sat Aug 29 05:10:52.629570 2026] [security2:error] [pid 11274:tid 11491] [client 20.48.160.90:63316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/503.php"] [unique_id "apK-PGbX5DA3XO6e_qQo2AAAATg"]
[Sat Aug 29 05:10:52.635194 2026] [security2:error] [pid 1041789:tid 1041940] [client 40.83.93.50:15191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/OK.php"] [unique_id "apK-PIv3RhPI65jTFG4bHwAAAyc"]
[Sat Aug 29 05:10:52.635396 2026] [security2:error] [pid 11274:tid 11442] [remote 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK-PGbX5DA3XO6e_qQo2QABeX8"]
[Sat Aug 29 05:10:52.635510 2026] [security2:error] [pid 11274:tid 11557] [client 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK-PGbX5DA3XO6e_qQo2QABeX8"]
[Sat Aug 29 05:10:52.642807 2026] [security2:error] [pid 11274:tid 11500] [client 20.151.200.44:63344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/pentest.php"] [unique_id "apK-PGbX5DA3XO6e_qQo2gAAAUE"]
[Sat Aug 29 05:10:52.648710 2026] [security2:error] [pid 11274:tid 11561] [client 20.100.175.163:7771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/elp.php"] [unique_id "apK-PGbX5DA3XO6e_qQo2wAAAX0"]
[Sat Aug 29 05:10:52.672135 2026] [security2:error] [pid 1321:tid 1503] [client 158.158.54.35:31884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/p.php"] [unique_id "apK-PGjCPtor9NZ-byTqWQAABks"]
[Sat Aug 29 05:10:52.682278 2026] [security2:error] [pid 11274:tid 11471] [client 114.119.153.245:48355] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.allianceinvestmentsllc.com"] [uri "/"] [unique_id "apK-PGbX5DA3XO6e_qQo3gAAASU"], referer: https://us.kompass.com/a/financial-and-insurance-services/82/r/north-carolina/us_37/
[Sat Aug 29 05:10:52.694876 2026] [security2:error] [pid 11274:tid 11544] [client 52.139.37.240:31061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/makeasmtp.php"] [unique_id "apK-PGbX5DA3XO6e_qQo4wAAAWw"]
[Sat Aug 29 05:10:52.700040 2026] [security2:error] [pid 11274:tid 11508] [client 20.48.160.90:64603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/wefile.php"] [unique_id "apK-PGbX5DA3XO6e_qQo5wAAAUk"]
[Sat Aug 29 05:10:52.709420 2026] [security2:error] [pid 11274:tid 11532] [client 20.48.160.90:51919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/t3.php"] [unique_id "apK-PGbX5DA3XO6e_qQo6wAAAWE"]
[Sat Aug 29 05:10:52.718087 2026] [security2:error] [pid 11274:tid 11488] [client 158.23.147.79:14314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/admin.php"] [unique_id "apK-PGbX5DA3XO6e_qQo7QAAATU"]
[Sat Aug 29 05:10:52.731376 2026] [security2:error] [pid 1041789:tid 1041950] [client 158.23.184.117:1218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/wp-act.php"] [unique_id "apK-PIv3RhPI65jTFG4bIQAAAzE"]
[Sat Aug 29 05:10:52.732218 2026] [core:error] [pid 11274:tid 11570] [client 20.104.104.62:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:52.732232 2026] [core:error] [pid 11274:tid 11570] [client 20.104.104.62:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:52.757288 2026] [security2:error] [pid 11274:tid 11486] [client 88.99.80.227:6580] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.wticalumni.com"] [uri "/index.htm"] [unique_id "apK-PGbX5DA3XO6e_qQo9AAAATM"], referer: http://www.wticalumni.com
[Sat Aug 29 05:10:52.758248 2026] [security2:error] [pid 1041789:tid 1042010] [client 52.138.0.157:1178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pompisfelices.com"] [uri "/wp-content/themes/fitnessbase/404.php"] [unique_id "apK-PIv3RhPI65jTFG4bIgAAA20"]
[Sat Aug 29 05:10:52.764319 2026] [security2:error] [pid 11274:tid 11538] [client 20.48.160.90:62099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/504.php"] [unique_id "apK-PGbX5DA3XO6e_qQo-AAAAWc"]
[Sat Aug 29 05:10:52.786804 2026] [security2:error] [pid 1321:tid 1548] [client 158.23.147.79:53587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-admin.php"] [unique_id "apK-PGjCPtor9NZ-byTqXAAABnc"]
[Sat Aug 29 05:10:52.807642 2026] [security2:error] [pid 1041789:tid 1041931] [client 52.139.37.240:28803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-PIv3RhPI65jTFG4bJQAAAx4"]
[Sat Aug 29 05:10:52.834286 2026] [security2:error] [pid 1321:tid 1510] [client 20.48.160.90:63478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/blog.php"] [unique_id "apK-PGjCPtor9NZ-byTqXgAABlI"]
[Sat Aug 29 05:10:52.845942 2026] [security2:error] [pid 11274:tid 11567] [client 20.48.160.90:28102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/wp.php"] [unique_id "apK-PGbX5DA3XO6e_qQpAgAAAYM"]
[Sat Aug 29 05:10:52.847693 2026] [security2:error] [pid 11274:tid 11468] [client 20.151.200.44:22266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/pro.php"] [unique_id "apK-PGbX5DA3XO6e_qQpBAAAASI"]
[Sat Aug 29 05:10:52.854630 2026] [autoindex:error] [pid 11274:tid 11322] [remote 87.58.197.202:56524] AH01276: Cannot serve directory /home3/xlavevmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:10:52.855788 2026] [security2:error] [pid 1041789:tid 1041977] [client 158.23.147.79:5833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/packed.php"] [unique_id "apK-PIv3RhPI65jTFG4bJwAAA0w"]
[Sat Aug 29 05:10:52.868061 2026] [security2:error] [pid 11274:tid 11549] [client 20.104.104.62:47557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/tuyul.php"] [unique_id "apK-PGbX5DA3XO6e_qQpBwAAAXE"]
[Sat Aug 29 05:10:52.873847 2026] [security2:error] [pid 11274:tid 11452] [client 158.23.184.117:1503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/fff.php"] [unique_id "apK-PGbX5DA3XO6e_qQpCAAAARI"]
[Sat Aug 29 05:10:52.892631 2026] [security2:error] [pid 1041789:tid 1042018] [client 52.139.37.240:31051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/paku.php"] [unique_id "apK-PIv3RhPI65jTFG4bKgAAA3U"]
[Sat Aug 29 05:10:52.906716 2026] [security2:error] [pid 11274:tid 11565] [client 20.48.160.90:64143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/admin.php"] [unique_id "apK-PGbX5DA3XO6e_qQpDAAAAYE"]
[Sat Aug 29 05:10:52.956868 2026] [security2:error] [pid 1041789:tid 1041990] [client 52.138.0.157:1185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pompisfelices.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK-PIv3RhPI65jTFG4bLAAAA1k"]
[Sat Aug 29 05:10:52.959515 2026] [security2:error] [pid 1041789:tid 1041985] [client 158.158.54.35:33189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/term.php"] [unique_id "apK-PIv3RhPI65jTFG4bLQAAA1Q"]
[Sat Aug 29 05:10:52.968059 2026] [security2:error] [pid 11274:tid 11505] [client 20.100.175.163:28016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/install.php"] [unique_id "apK-PGbX5DA3XO6e_qQpDgAAAUY"]
[Sat Aug 29 05:10:52.969812 2026] [security2:error] [pid 11274:tid 11569] [client 20.196.209.81:3390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/theme.php"] [unique_id "apK-PGbX5DA3XO6e_qQpDwAAAYU"]
[Sat Aug 29 05:10:52.974868 2026] [security2:error] [pid 1321:tid 1583] [client 20.48.160.90:64625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/wp-admin/js/wp-load.php"] [unique_id "apK-PGjCPtor9NZ-byTqYgAABpo"]
[Sat Aug 29 05:10:52.977417 2026] [security2:error] [pid 1041789:tid 1042042] [client 20.48.160.90:51858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/abcd.php"] [unique_id "apK-PIv3RhPI65jTFG4bLwAAA40"]
[Sat Aug 29 05:10:52.994963 2026] [security2:error] [pid 1041789:tid 1041991] [client 74.248.24.12:18698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/gifclass.php"] [unique_id "apK-PIv3RhPI65jTFG4bMAAAA1o"]
[Sat Aug 29 05:10:53.011106 2026] [security2:error] [pid 11274:tid 11566] [client 20.52.41.200:2870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/cv.php"] [unique_id "apK-PWbX5DA3XO6e_qQpEQAAAYI"]
[Sat Aug 29 05:10:53.033298 2026] [security2:error] [pid 1041789:tid 1042026] [client 158.23.184.117:1246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/.tmb/dropdown.php"] [unique_id "apK-PYv3RhPI65jTFG4bMgAAA30"]
[Sat Aug 29 05:10:53.039718 2026] [security2:error] [pid 11274:tid 11451] [client 103.48.146.148:50607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 148.146.48.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK-PWbX5DA3XO6e_qQpFAAAARE"]
[Sat Aug 29 05:10:53.039856 2026] [security2:error] [pid 11274:tid 11451] [client 103.48.146.148:50607] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK-PWbX5DA3XO6e_qQpFAAAARE"]
[Sat Aug 29 05:10:53.048860 2026] [security2:error] [pid 11274:tid 11462] [client 20.48.160.90:62197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/ws85.php"] [unique_id "apK-PWbX5DA3XO6e_qQpFQAAARw"]
[Sat Aug 29 05:10:53.064291 2026] [security2:error] [pid 11274:tid 11553] [client 20.151.200.44:63943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/6y7t.php"] [unique_id "apK-PWbX5DA3XO6e_qQpFgAAAXU"]
[Sat Aug 29 05:10:53.086607 2026] [security2:error] [pid 1321:tid 1602] [client 52.139.37.240:29409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/wp-index.php"] [unique_id "apK-PWjCPtor9NZ-byTqZgAABq0"]
[Sat Aug 29 05:10:53.091479 2026] [security2:error] [pid 1321:tid 1529] [client 52.139.37.240:31669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/rtx.php"] [unique_id "apK-PWjCPtor9NZ-byTqZwAABmU"]
[Sat Aug 29 05:10:53.106435 2026] [security2:error] [pid 1321:tid 1608] [client 20.48.160.90:63389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/robot.php"] [unique_id "apK-PWjCPtor9NZ-byTqaAAABrM"]
[Sat Aug 29 05:10:53.112205 2026] [security2:error] [pid 1321:tid 1597] [client 20.48.160.90:28053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/nofile.php"] [unique_id "apK-PWjCPtor9NZ-byTqaQAABqg"]
[Sat Aug 29 05:10:53.123671 2026] [security2:error] [pid 1041789:tid 1041981] [client 158.158.54.35:1533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/a1.php"] [unique_id "apK-PYv3RhPI65jTFG4bNAAAA1A"]
[Sat Aug 29 05:10:53.154051 2026] [security2:error] [pid 1041789:tid 1041884] [remote 136.108.90.41:44512] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:href. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "/../,ARGS:href"] [severity "CRITICAL"] [hostname "autodiscover.sunlandranch.com"] [uri "/_image"] [unique_id "apK-PYv3RhPI65jTFG4bNQADfFI"]
[Sat Aug 29 05:10:53.156497 2026] [security2:error] [pid 1321:tid 1549] [client 52.138.0.157:10416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pompisfelices.com"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "apK-PWjCPtor9NZ-byTqagAABng"]
[Sat Aug 29 05:10:53.160271 2026] [security2:error] [pid 1041789:tid 1041941] [client 20.100.175.163:33597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-content/cong.php"] [unique_id "apK-PYv3RhPI65jTFG4bNgAAAyg"]
[Sat Aug 29 05:10:53.171048 2026] [security2:error] [pid 1041789:tid 1042048] [client 20.151.200.44:61605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/1vbqo.php"] [unique_id "apK-PYv3RhPI65jTFG4bNwAAA5M"]
[Sat Aug 29 05:10:53.194171 2026] [security2:error] [pid 1321:tid 1544] [client 20.104.104.62:40209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/nikung.php"] [unique_id "apK-PWjCPtor9NZ-byTqbgAABnQ"]
[Sat Aug 29 05:10:53.199454 2026] [security2:error] [pid 1041789:tid 1042015] [client 20.48.160.90:63285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/ffs.php"] [unique_id "apK-PYv3RhPI65jTFG4bPAAAA3I"]
[Sat Aug 29 05:10:53.211739 2026] [security2:error] [pid 1321:tid 1571] [client 158.23.184.117:1237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/robots.php"] [unique_id "apK-PWjCPtor9NZ-byTqbwAABo4"]
[Sat Aug 29 05:10:53.228479 2026] [security2:error] [pid 1041789:tid 1041970] [client 40.83.93.50:15173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "chow-s.com"] [uri "/aaa.php"] [unique_id "apK-PYv3RhPI65jTFG4bPQAAA0U"]
[Sat Aug 29 05:10:53.241186 2026] [security2:error] [pid 11274:tid 11475] [client 20.48.160.90:63449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/revo.php"] [unique_id "apK-PWbX5DA3XO6e_qQpJAAAASk"]
[Sat Aug 29 05:10:53.271943 2026] [security2:error] [pid 1041789:tid 1042029] [client 20.48.160.90:51851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/run.php"] [unique_id "apK-PYv3RhPI65jTFG4bQQAAA4A"]
[Sat Aug 29 05:10:53.281876 2026] [security2:error] [pid 1321:tid 1565] [client 158.23.147.79:63008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/about/function.php"] [unique_id "apK-PWjCPtor9NZ-byTqcAAABog"]
[Sat Aug 29 05:10:53.296026 2026] [security2:error] [pid 11274:tid 11444] [client 52.139.37.240:29378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/ww2.php"] [unique_id "apK-PWbX5DA3XO6e_qQpJwAAAQo"]
[Sat Aug 29 05:10:53.314488 2026] [security2:error] [pid 11274:tid 11503] [client 52.139.37.240:31513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/update/da222.php"] [unique_id "apK-PWbX5DA3XO6e_qQpKQAAAUQ"]
[Sat Aug 29 05:10:53.334457 2026] [security2:error] [pid 1321:tid 1508] [client 20.48.160.90:64161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/nano.php"] [unique_id "apK-PWjCPtor9NZ-byTqcwAABlA"]
[Sat Aug 29 05:10:53.349758 2026] [security2:error] [pid 1041789:tid 1041962] [client 158.23.147.79:24554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/file17.php"] [unique_id "apK-PYv3RhPI65jTFG4bQgAAAz0"]
[Sat Aug 29 05:10:53.352421 2026] [security2:error] [pid 11274:tid 11554] [client 4.205.62.107:60335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-PWbX5DA3XO6e_qQpKgAAAXY"]
[Sat Aug 29 05:10:53.353936 2026] [security2:error] [pid 1321:tid 1520] [client 20.104.49.130:51115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/f35.update.php"] [unique_id "apK-PWjCPtor9NZ-byTqdAAABlw"]
[Sat Aug 29 05:10:53.356454 2026] [security2:error] [pid 1321:tid 1506] [client 158.23.184.117:1075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/.well-known/install.php"] [unique_id "apK-PWjCPtor9NZ-byTqdQAABk4"]
[Sat Aug 29 05:10:53.357119 2026] [security2:error] [pid 1321:tid 1527] [client 52.138.0.157:40737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pompisfelices.com"] [uri "/wp-content/uploads/de_fb_uploads/b.php"] [unique_id "apK-PWjCPtor9NZ-byTqdgAABmM"]
[Sat Aug 29 05:10:53.359910 2026] [security2:error] [pid 1041789:tid 1042028] [client 4.205.62.107:51473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/packed.php"] [unique_id "apK-PYv3RhPI65jTFG4bQwAAA38"]
[Sat Aug 29 05:10:53.375972 2026] [security2:error] [pid 11274:tid 11517] [client 20.196.209.81:15405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/alumni_reg.php"] [unique_id "apK-PWbX5DA3XO6e_qQpLAAAAVI"]
[Sat Aug 29 05:10:53.401592 2026] [security2:error] [pid 1321:tid 1533] [client 34.169.171.101:32468] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "forensicengineernj.com"] [uri "/var/www/html/.env"] [unique_id "apK-PWjCPtor9NZ-byTqeAAABmk"]
[Sat Aug 29 05:10:53.403207 2026] [security2:error] [pid 1321:tid 1517] [client 20.104.104.62:64740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/tertykung.php"] [unique_id "apK-PWjCPtor9NZ-byTqeQAABlk"]
[Sat Aug 29 05:10:53.403252 2026] [security2:error] [pid 11274:tid 11564] [client 158.158.54.35:23037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/config.php"] [unique_id "apK-PWbX5DA3XO6e_qQpMwAAAYA"]
[Sat Aug 29 05:10:53.403776 2026] [security2:error] [pid 11274:tid 11496] [client 34.169.171.101:32460] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/var/www/.env"] [unique_id "apK-PWbX5DA3XO6e_qQpNAAAAT0"]
[Sat Aug 29 05:10:53.405739 2026] [security2:error] [pid 1321:tid 1592] [client 20.48.160.90:64537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/birrs.php"] [unique_id "apK-PWjCPtor9NZ-byTqegAABqM"]
[Sat Aug 29 05:10:53.413984 2026] [security2:error] [pid 1041789:tid 1042041] [client 20.48.160.90:28151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/new.php"] [unique_id "apK-PYv3RhPI65jTFG4bTAAAA4w"]
[Sat Aug 29 05:10:53.419242 2026] [security2:error] [pid 11274:tid 11556] [client 34.169.171.101:32516] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/email/.env"] [unique_id "apK-PWbX5DA3XO6e_qQpNQAAAXg"]
[Sat Aug 29 05:10:53.419667 2026] [security2:error] [pid 11274:tid 11572] [client 34.169.171.101:32488] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/sendgrid/.env"] [unique_id "apK-PWbX5DA3XO6e_qQpNgAAAYg"]
[Sat Aug 29 05:10:53.420119 2026] [security2:error] [pid 11274:tid 11544] [client 34.169.171.101:32510] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/mail/.env"] [unique_id "apK-PWbX5DA3XO6e_qQpNwAAAWw"]
[Sat Aug 29 05:10:53.420190 2026] [security2:error] [pid 11274:tid 11544] [client 34.169.171.101:32510] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "forensicengineernj.com"] [uri "/mail/.env"] [unique_id "apK-PWbX5DA3XO6e_qQpNwAAAWw"]
[Sat Aug 29 05:10:53.421942 2026] [security2:error] [pid 11274:tid 11492] [client 34.169.171.101:32518] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "forensicengineernj.com"] [uri "/stripe.env"] [unique_id "apK-PWbX5DA3XO6e_qQpOAAAATk"]
[Sat Aug 29 05:10:53.422205 2026] [security2:error] [pid 11274:tid 11466] [client 34.169.171.101:32528] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "forensicengineernj.com"] [uri "/stripe.json"] [unique_id "apK-PWbX5DA3XO6e_qQpOQAAASA"]
[Sat Aug 29 05:10:53.422812 2026] [security2:error] [pid 1041789:tid 1041945] [client 34.169.171.101:32542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/stripe/.env"] [unique_id "apK-PYv3RhPI65jTFG4bTQAAAyw"]
[Sat Aug 29 05:10:53.422911 2026] [security2:error] [pid 1041789:tid 1041945] [client 34.169.171.101:32542] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "forensicengineernj.com"] [uri "/stripe/.env"] [unique_id "apK-PYv3RhPI65jTFG4bTQAAAyw"]
[Sat Aug 29 05:10:53.443268 2026] [security2:error] [pid 1041789:tid 1041995] [client 20.104.104.62:48663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/7logs.php"] [unique_id "apK-PYv3RhPI65jTFG4bVAAAA14"]
[Sat Aug 29 05:10:53.457295 2026] [security2:error] [pid 1321:tid 1560] [client 20.100.175.163:24783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/ioxi-o.php"] [unique_id "apK-PWjCPtor9NZ-byTqfAAABoM"]
[Sat Aug 29 05:10:53.457384 2026] [security2:error] [pid 1321:tid 1566] [client 20.52.41.200:2787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-content/packed.php"] [unique_id "apK-PWjCPtor9NZ-byTqfQAABok"]
[Sat Aug 29 05:10:53.486765 2026] [security2:error] [pid 1321:tid 1505] [client 4.205.62.107:62972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/admin.php"] [unique_id "apK-PWjCPtor9NZ-byTqfwAABk0"]
[Sat Aug 29 05:10:53.491692 2026] [security2:error] [pid 1321:tid 1575] [client 52.139.37.240:29147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/7logs.php"] [unique_id "apK-PWjCPtor9NZ-byTqgAAABpI"]
[Sat Aug 29 05:10:53.491746 2026] [security2:error] [pid 1321:tid 1501] [client 158.23.147.79:60176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-admin/images/about.php"] [unique_id "apK-PWjCPtor9NZ-byTqgQAABkk"]
[Sat Aug 29 05:10:53.512710 2026] [security2:error] [pid 1321:tid 1392] [remote 18.138.238.149:59304] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mydwiclass.com"] [uri "/config/.env"] [unique_id "apK-PWjCPtor9NZ-byTqhAAGRSI"]
[Sat Aug 29 05:10:53.518940 2026] [cgid:error] [pid 1321:tid 1519] [client 52.139.37.240:31632] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/cumbeebailbonds/404.shtml
[Sat Aug 29 05:10:53.519651 2026] [security2:error] [pid 11274:tid 11459] [client 20.48.160.90:64174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/ano.php"] [unique_id "apK-PWbX5DA3XO6e_qQpQgAAARk"]
[Sat Aug 29 05:10:53.523817 2026] [cgid:error] [pid 11274:tid 11376] [remote 2a06:98c0:3600::103:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/protypeg/public_html/capturedance/404.shtml
[Sat Aug 29 05:10:53.534554 2026] [cgid:error] [pid 11274:tid 11366] [remote 2a06:98c0:3600::103:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/protypeg/public_html/capturedance/404.shtml
[Sat Aug 29 05:10:53.537383 2026] [security2:error] [pid 1041789:tid 1042010] [client 20.48.160.90:62219] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/sss.php"] [unique_id "apK-PYv3RhPI65jTFG4bVwAAA20"]
[Sat Aug 29 05:10:53.552196 2026] [security2:error] [pid 1041789:tid 1042001] [client 20.48.160.90:28073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/inx.php"] [unique_id "apK-PYv3RhPI65jTFG4bWQAAA2Q"]
[Sat Aug 29 05:10:53.557708 2026] [security2:error] [pid 1321:tid 1531] [client 52.138.0.157:10397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pompisfelices.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK-PWjCPtor9NZ-byTqiQAABmc"]
[Sat Aug 29 05:10:53.558250 2026] [security2:error] [pid 1321:tid 1507] [client 158.23.147.79:42072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK-PWjCPtor9NZ-byTqigAABk8"]
[Sat Aug 29 05:10:53.566789 2026] [security2:error] [pid 1321:tid 1530] [client 158.158.54.35:2034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-PWjCPtor9NZ-byTqiwAABmY"]
[Sat Aug 29 05:10:53.567662 2026] [security2:error] [pid 1321:tid 1489] [client 20.151.200.44:63753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/999.php"] [unique_id "apK-PWjCPtor9NZ-byTqjAAABj0"]
[Sat Aug 29 05:10:53.583725 2026] [security2:error] [pid 1321:tid 1516] [client 52.139.37.240:31632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/wp-admin/min.php"] [unique_id "apK-PWjCPtor9NZ-byTqjQAABlg"]
[Sat Aug 29 05:10:53.593415 2026] [security2:error] [pid 11274:tid 11479] [client 158.23.184.117:1055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/wp-admin/about.php"] [unique_id "apK-PWbX5DA3XO6e_qQpSAAAASw"]
[Sat Aug 29 05:10:53.622038 2026] [security2:error] [pid 1041789:tid 1041977] [client 4.205.62.107:65010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/i.php"] [unique_id "apK-PYv3RhPI65jTFG4bXQAAA0w"]
[Sat Aug 29 05:10:53.658745 2026] [security2:error] [pid 1041789:tid 1042020] [client 20.104.104.62:64767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/goods.php"] [unique_id "apK-PYv3RhPI65jTFG4bYwAAA3c"]
[Sat Aug 29 05:10:53.671950 2026] [security2:error] [pid 11274:tid 11547] [client 20.100.175.163:33590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK-PWbX5DA3XO6e_qQpTQAAAW8"]
[Sat Aug 29 05:10:53.683635 2026] [security2:error] [pid 11274:tid 11548] [client 20.48.160.90:51948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/vpn.php"] [unique_id "apK-PWbX5DA3XO6e_qQpTgAAAXA"]
[Sat Aug 29 05:10:53.687312 2026] [security2:error] [pid 1041789:tid 1041992] [client 20.151.200.44:23555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/h02ugyh.php"] [unique_id "apK-PYv3RhPI65jTFG4bZAAAA1s"]
[Sat Aug 29 05:10:53.688081 2026] [security2:error] [pid 1041789:tid 1041978] [client 52.139.37.240:29407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/ac.php"] [unique_id "apK-PYv3RhPI65jTFG4bZQAAA00"]
[Sat Aug 29 05:10:53.697067 2026] [security2:error] [pid 11274:tid 11565] [client 20.48.160.90:65378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/mgrr.php"] [unique_id "apK-PWbX5DA3XO6e_qQpUAAAAYE"]
[Sat Aug 29 05:10:53.739251 2026] [security2:error] [pid 1041789:tid 1041944] [client 158.23.184.117:1040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/wp-content/backup.php"] [unique_id "apK-PYv3RhPI65jTFG4bZwAAAys"]
[Sat Aug 29 05:10:53.757203 2026] [security2:error] [pid 1041789:tid 1041990] [client 52.138.0.157:1162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pompisfelices.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK-PYv3RhPI65jTFG4baAAAA1k"]
[Sat Aug 29 05:10:53.764666 2026] [security2:error] [pid 11274:tid 11501] [client 4.205.62.107:61747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/aws_auth.php"] [unique_id "apK-PWbX5DA3XO6e_qQpVwAAAUI"]
[Sat Aug 29 05:10:53.771727 2026] [security2:error] [pid 11274:tid 11453] [client 4.205.62.107:6297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/admin-ajax.php"] [unique_id "apK-PWbX5DA3XO6e_qQpWQAAARM"]
[Sat Aug 29 05:10:53.781982 2026] [security2:error] [pid 1321:tid 1542] [client 52.139.37.240:31088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/wp-admin/wp-fileesx-449.php"] [unique_id "apK-PWjCPtor9NZ-byTqkAAABnI"]
[Sat Aug 29 05:10:53.826850 2026] [security2:error] [pid 1041789:tid 1041939] [client 158.23.147.79:14279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-admin/admin.php"] [unique_id "apK-PYv3RhPI65jTFG4bagAAAyY"]
[Sat Aug 29 05:10:53.831525 2026] [security2:error] [pid 1041789:tid 1041951] [client 20.48.160.90:65303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/mac.php"] [unique_id "apK-PYv3RhPI65jTFG4bawAAAzI"]
[Sat Aug 29 05:10:53.831697 2026] [security2:error] [pid 1041789:tid 1041981] [client 20.48.160.90:28075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/shiny.php"] [unique_id "apK-PYv3RhPI65jTFG4bbAAAA1A"]
[Sat Aug 29 05:10:53.841094 2026] [security2:error] [pid 11274:tid 11482] [client 158.158.54.35:17698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK-PWbX5DA3XO6e_qQpXAAAAS8"]
[Sat Aug 29 05:10:53.854442 2026] [security2:error] [pid 1041789:tid 1042007] [client 34.50.189.51:37710] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/var/www/.env"] [unique_id "apK-PYv3RhPI65jTFG4bcQAAA2o"]
[Sat Aug 29 05:10:53.855247 2026] [security2:error] [pid 1041789:tid 1041968] [client 34.50.189.51:37724] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/var/www/html/.env"] [unique_id "apK-PYv3RhPI65jTFG4bcwAAA0M"]
[Sat Aug 29 05:10:53.855280 2026] [core:error] [pid 1041789:tid 1042048] [client 34.50.189.51:37688] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:53.855297 2026] [core:error] [pid 1041789:tid 1042048] [client 34.50.189.51:37688] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:53.855478 2026] [security2:error] [pid 1041789:tid 1042048] [client 34.50.189.51:37688] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "discocollective.kriveloff-associates.com"] [uri "/index.php"] [unique_id "apK-PYv3RhPI65jTFG4bbwAAA5M"]
[Sat Aug 29 05:10:53.856903 2026] [core:error] [pid 1041789:tid 1041970] [client 34.50.189.51:37674] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:53.856920 2026] [core:error] [pid 1041789:tid 1041970] [client 34.50.189.51:37674] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:53.857176 2026] [core:error] [pid 1041789:tid 1042015] [client 34.50.189.51:37702] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:53.857193 2026] [core:error] [pid 1041789:tid 1042015] [client 34.50.189.51:37702] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:53.857372 2026] [security2:error] [pid 1041789:tid 1041962] [client 34.50.189.51:37780] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/email/.env"] [unique_id "apK-PYv3RhPI65jTFG4beAAAAz0"]
[Sat Aug 29 05:10:53.857444 2026] [security2:error] [pid 1041789:tid 1042030] [client 34.50.189.51:37740] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/sendgrid/.env"] [unique_id "apK-PYv3RhPI65jTFG4bdgAAA4E"]
[Sat Aug 29 05:10:53.857538 2026] [security2:error] [pid 1041789:tid 1042030] [client 34.50.189.51:37740] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "discocollective.kriveloff-associates.com"] [uri "/sendgrid/.env"] [unique_id "apK-PYv3RhPI65jTFG4bdgAAA4E"]
[Sat Aug 29 05:10:53.857913 2026] [core:error] [pid 1041789:tid 1042043] [client 34.50.189.51:37654] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:53.857925 2026] [core:error] [pid 1041789:tid 1042043] [client 34.50.189.51:37654] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:53.859267 2026] [core:error] [pid 1041789:tid 1041954] [client 34.50.189.51:37752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:53.859277 2026] [core:error] [pid 1041789:tid 1041954] [client 34.50.189.51:37752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:53.859535 2026] [core:error] [pid 1041789:tid 1041933] [client 34.50.189.51:37784] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:53.859551 2026] [core:error] [pid 1041789:tid 1041933] [client 34.50.189.51:37784] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:53.859671 2026] [security2:error] [pid 1041789:tid 1041933] [client 34.50.189.51:37784] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "discocollective.kriveloff-associates.com"] [uri "/index.php"] [unique_id "apK-PYv3RhPI65jTFG4beQAAAyA"]
[Sat Aug 29 05:10:53.859747 2026] [security2:error] [pid 1041789:tid 1042028] [client 34.50.189.51:37764] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/mail/.env"] [unique_id "apK-PYv3RhPI65jTFG4bfQAAA38"]
[Sat Aug 29 05:10:53.860093 2026] [core:error] [pid 1041789:tid 1042025] [client 34.50.189.51:37668] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:53.860111 2026] [core:error] [pid 1041789:tid 1042025] [client 34.50.189.51:37668] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:53.861095 2026] [core:error] [pid 1041789:tid 1042000] [client 34.50.189.51:37726] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:53.861109 2026] [core:error] [pid 1041789:tid 1042000] [client 34.50.189.51:37726] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:53.862783 2026] [core:error] [pid 1041789:tid 1042047] [client 34.50.189.51:37698] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:53.862798 2026] [core:error] [pid 1041789:tid 1042047] [client 34.50.189.51:37698] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:53.863585 2026] [security2:error] [pid 11274:tid 11559] [client 34.50.189.51:37804] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "discocollective.kriveloff-associates.com"] [uri "/stripe/.env"] [unique_id "apK-PWbX5DA3XO6e_qQpXQAAAXs"]
[Sat Aug 29 05:10:53.883402 2026] [security2:error] [pid 1041789:tid 1041941] [client 158.23.184.117:1038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/.well-known/aa.php"] [unique_id "apK-PYv3RhPI65jTFG4bfwAAAyg"]
[Sat Aug 29 05:10:53.885353 2026] [security2:error] [pid 1041789:tid 1042006] [client 52.139.37.240:29171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/ctex1.php"] [unique_id "apK-PYv3RhPI65jTFG4bgAAAA2k"]
[Sat Aug 29 05:10:53.912634 2026] [security2:error] [pid 1041789:tid 1042042] [client 20.196.209.81:3347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/colors.php"] [unique_id "apK-PYv3RhPI65jTFG4bggAAA40"]
[Sat Aug 29 05:10:53.923704 2026] [security2:error] [pid 11274:tid 11543] [client 103.240.76.112:43197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK-PWbX5DA3XO6e_qQpZgAAAWs"]
[Sat Aug 29 05:10:53.923873 2026] [security2:error] [pid 11274:tid 11543] [client 103.240.76.112:43197] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK-PWbX5DA3XO6e_qQpZgAAAWs"]
[Sat Aug 29 05:10:53.927380 2026] [security2:error] [pid 11274:tid 11513] [client 74.248.24.12:5114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK-PWbX5DA3XO6e_qQpZwAAAU4"]
[Sat Aug 29 05:10:53.929121 2026] [security2:error] [pid 1041789:tid 1041949] [client 20.52.41.200:2667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-admin/js/index.php"] [unique_id "apK-PYv3RhPI65jTFG4biQAAAzA"]
[Sat Aug 29 05:10:53.951439 2026] [security2:error] [pid 11274:tid 11489] [client 20.100.175.163:17132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/xmlrpc.php"] [unique_id "apK-PWbX5DA3XO6e_qQpaQAAATY"]
[Sat Aug 29 05:10:53.956033 2026] [security2:error] [pid 1041789:tid 1041964] [client 52.138.0.157:10419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pompisfelices.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "apK-PYv3RhPI65jTFG4bjQAAAz8"]
[Sat Aug 29 05:10:53.967099 2026] [security2:error] [pid 11274:tid 11553] [client 158.23.147.79:6128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-content/packed.php"] [unique_id "apK-PWbX5DA3XO6e_qQpagAAAXU"]
[Sat Aug 29 05:10:53.972831 2026] [security2:error] [pid 11274:tid 11497] [client 20.48.160.90:63263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/simple.php"] [unique_id "apK-PWbX5DA3XO6e_qQpawAAAT4"]
[Sat Aug 29 05:10:53.979374 2026] [security2:error] [pid 11274:tid 11568] [client 20.48.160.90:46535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/goods.php"] [unique_id "apK-PWbX5DA3XO6e_qQpbAAAAYQ"]
[Sat Aug 29 05:10:53.980916 2026] [security2:error] [pid 1041789:tid 1042010] [client 52.139.37.240:31050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/wp-content/themes/min.php"] [unique_id "apK-PYv3RhPI65jTFG4bjgAAA20"]
[Sat Aug 29 05:10:54.011887 2026] [security2:error] [pid 1321:tid 1561] [client 158.158.54.35:4664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/alfa-rex.php7"] [unique_id "apK-PmjCPtor9NZ-byTqkQAABoQ"]
[Sat Aug 29 05:10:54.013037 2026] [security2:error] [pid 11274:tid 11491] [client 20.104.104.62:48650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/sf.php"] [unique_id "apK-PmbX5DA3XO6e_qQpbQAAATg"]
[Sat Aug 29 05:10:54.023040 2026] [security2:error] [pid 1321:tid 1515] [client 20.151.200.44:63301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/0xs.php"] [unique_id "apK-PmjCPtor9NZ-byTqkgAABlc"]
[Sat Aug 29 05:10:54.023837 2026] [security2:error] [pid 11274:tid 11557] [client 20.104.104.62:20733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/codrs.php"] [unique_id "apK-PmbX5DA3XO6e_qQpbgAAAXk"]
[Sat Aug 29 05:10:54.028255 2026] [security2:error] [pid 11274:tid 11536] [client 158.23.184.117:1060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "apK-PmbX5DA3XO6e_qQpbwAAAWU"]
[Sat Aug 29 05:10:54.080973 2026] [security2:error] [pid 1041789:tid 1042019] [client 52.139.37.240:29168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/defaults.php"] [unique_id "apK-Pov3RhPI65jTFG4bkgAAA3Y"]
[Sat Aug 29 05:10:54.103254 2026] [security2:error] [pid 1321:tid 1456] [remote 18.138.238.149:59304] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mydwiclass.com"] [uri "/backend/.env"] [unique_id "apK-PmjCPtor9NZ-byTqlwAGqmE"]
[Sat Aug 29 05:10:54.125379 2026] [security2:error] [pid 11274:tid 11511] [client 20.48.160.90:43608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/alfa.php"] [unique_id "apK-PmbX5DA3XO6e_qQpdgAAAUw"]
[Sat Aug 29 05:10:54.151219 2026] [security2:error] [pid 11274:tid 11449] [client 20.104.49.130:52296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "coveryourauto.com"] [uri "/wp.php"] [unique_id "apK-PmbX5DA3XO6e_qQpdwAAAQ8"]
[Sat Aug 29 05:10:54.173793 2026] [security2:error] [pid 1041789:tid 1041957] [client 20.48.160.90:64134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/xty.php"] [unique_id "apK-Pov3RhPI65jTFG4blAAAAzg"]
[Sat Aug 29 05:10:54.176922 2026] [security2:error] [pid 11274:tid 11556] [client 158.23.147.79:39316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK-PmbX5DA3XO6e_qQpeAAAAXg"]
[Sat Aug 29 05:10:54.180144 2026] [security2:error] [pid 11274:tid 11470] [client 52.139.37.240:31096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/wp-content/themes/x/bypass.php"] [unique_id "apK-PmbX5DA3XO6e_qQpeQAAASQ"]
[Sat Aug 29 05:10:54.180923 2026] [security2:error] [pid 1321:tid 1555] [client 20.151.200.44:63656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/shelp.php"] [unique_id "apK-PmjCPtor9NZ-byTqmgAABn4"]
[Sat Aug 29 05:10:54.186847 2026] [security2:error] [pid 1321:tid 1521] [client 158.23.184.117:1080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/wp-content/plugins/alfa-rex.php"] [unique_id "apK-PmjCPtor9NZ-byTqmwAABl0"]
[Sat Aug 29 05:10:54.195200 2026] [security2:error] [pid 11274:tid 11444] [client 20.100.175.163:13428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-mail.php"] [unique_id "apK-PmbX5DA3XO6e_qQpegAAAQo"]
[Sat Aug 29 05:10:54.229441 2026] [security2:error] [pid 1321:tid 1510] [client 52.138.0.157:33477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pompisfelices.com"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "apK-PmjCPtor9NZ-byTqngAABlI"]
[Sat Aug 29 05:10:54.278052 2026] [security2:error] [pid 11274:tid 11466] [client 52.139.37.240:29120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/domains.php"] [unique_id "apK-PmbX5DA3XO6e_qQpgwAAASA"]
[Sat Aug 29 05:10:54.280154 2026] [security2:error] [pid 1321:tid 1509] [client 158.158.54.35:12388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-good.php"] [unique_id "apK-PmjCPtor9NZ-byTqnwAABlE"]
[Sat Aug 29 05:10:54.291673 2026] [security2:error] [pid 1321:tid 1598] [client 20.48.160.90:28115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/33.php"] [unique_id "apK-PmjCPtor9NZ-byTqoAAABqk"]
[Sat Aug 29 05:10:54.309955 2026] [security2:error] [pid 11274:tid 11473] [client 20.48.160.90:62087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/sallu.php"] [unique_id "apK-PmbX5DA3XO6e_qQphQAAASc"]
[Sat Aug 29 05:10:54.315502 2026] [security2:error] [pid 1041789:tid 1042015] [client 158.23.147.79:28051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK-Pov3RhPI65jTFG4blwAAA3I"]
[Sat Aug 29 05:10:54.317774 2026] [security2:error] [pid 1321:tid 1502] [client 20.196.209.81:16208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/Js.php"] [unique_id "apK-PmjCPtor9NZ-byTqogAABko"]
[Sat Aug 29 05:10:54.332298 2026] [security2:error] [pid 11274:tid 11471] [client 20.104.104.62:48646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/super.php"] [unique_id "apK-PmbX5DA3XO6e_qQphwAAASU"]
[Sat Aug 29 05:10:54.354807 2026] [security2:error] [pid 11274:tid 11545] [client 20.104.49.130:60798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/sxxb.php"] [unique_id "apK-PmbX5DA3XO6e_qQpiAAAAW0"]
[Sat Aug 29 05:10:54.369163 2026] [security2:error] [pid 11274:tid 11514] [client 20.48.160.90:63486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/wp-includes/ID3/moon.php"] [unique_id "apK-PmbX5DA3XO6e_qQpiwAAAU8"]
[Sat Aug 29 05:10:54.385119 2026] [security2:error] [pid 1321:tid 1512] [client 20.52.41.200:2657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/core.php"] [unique_id "apK-PmjCPtor9NZ-byTqowAABlQ"]
[Sat Aug 29 05:10:54.393730 2026] [cgid:error] [pid 1321:tid 1581] [client 52.139.37.240:31072] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/cumbeebailbonds/404.shtml
[Sat Aug 29 05:10:54.427129 2026] [security2:error] [pid 11274:tid 11495] [client 52.138.0.157:10381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pompisfelices.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-PmbX5DA3XO6e_qQplAAAATw"]
[Sat Aug 29 05:10:54.440464 2026] [security2:error] [pid 1041789:tid 1041932] [client 20.48.160.90:28127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/133.php"] [unique_id "apK-Pov3RhPI65jTFG4bmQAAAx8"]
[Sat Aug 29 05:10:54.445984 2026] [security2:error] [pid 11274:tid 11541] [client 20.100.175.163:22596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/filemanager.php"] [unique_id "apK-PmbX5DA3XO6e_qQplQAAAWo"]
[Sat Aug 29 05:10:54.459187 2026] [security2:error] [pid 1321:tid 1597] [client 52.139.37.240:31072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK-PmjCPtor9NZ-byTqpgAABqg"]
[Sat Aug 29 05:10:54.459781 2026] [security2:error] [pid 11274:tid 11522] [client 158.23.184.117:1058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/test.php"] [unique_id "apK-PmbX5DA3XO6e_qQplgAAAVc"]
[Sat Aug 29 05:10:54.461234 2026] [security2:error] [pid 11274:tid 11445] [client 158.158.54.35:31901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "apK-PmbX5DA3XO6e_qQplwAAAQs"]
[Sat Aug 29 05:10:54.472428 2026] [security2:error] [pid 1041789:tid 1042041] [client 20.48.160.90:65292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/codex.php"] [unique_id "apK-Pov3RhPI65jTFG4bmgAAA4w"]
[Sat Aug 29 05:10:54.474441 2026] [security2:error] [pid 1041789:tid 1041945] [client 158.23.147.79:24517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/file5.php"] [unique_id "apK-Pov3RhPI65jTFG4bmwAAAyw"]
[Sat Aug 29 05:10:54.477599 2026] [security2:error] [pid 1041789:tid 1042025] [client 52.139.37.240:29160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/dropdown.php"] [unique_id "apK-Pov3RhPI65jTFG4bnAAAA3w"]
[Sat Aug 29 05:10:54.496727 2026] [security2:error] [pid 1041789:tid 1042030] [client 74.248.24.12:5090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/css/index.php"] [unique_id "apK-Pov3RhPI65jTFG4bngAAA4E"]
[Sat Aug 29 05:10:54.499070 2026] [security2:error] [pid 1041789:tid 1041969] [client 20.104.104.62:47555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/jingan.php"] [unique_id "apK-Pov3RhPI65jTFG4bnwAAA0Q"]
[Sat Aug 29 05:10:54.501088 2026] [security2:error] [pid 1321:tid 1549] [client 20.48.160.90:64572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/xmini4.php"] [unique_id "apK-PmjCPtor9NZ-byTqpwAABng"]
[Sat Aug 29 05:10:54.502991 2026] [security2:error] [pid 11274:tid 11521] [client 4.205.62.107:62920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/cloud.php"] [unique_id "apK-PmbX5DA3XO6e_qQpmgAAAVY"]
[Sat Aug 29 05:10:54.531365 2026] [security2:error] [pid 11274:tid 11539] [client 4.205.62.107:51450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/phpi.php"] [unique_id "apK-PmbX5DA3XO6e_qQpnQAAAWg"]
[Sat Aug 29 05:10:54.559160 2026] [security2:error] [pid 1041789:tid 1041825] [remote 136.108.90.41:44512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.90.108.136.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sunlandranch.com"] [uri "/info.php"] [unique_id "apK-Pov3RhPI65jTFG4bpwADThc"]
[Sat Aug 29 05:10:54.567347 2026] [autoindex:error] [pid 1041789:tid 1041970] [client 45.148.10.62:36326] AH01276: Cannot serve directory /home3/ywszpqmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:10:54.598035 2026] [security2:error] [pid 1041789:tid 1042051] [client 158.23.147.79:53969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK-Pov3RhPI65jTFG4bqQAAA5Y"]
[Sat Aug 29 05:10:54.603712 2026] [security2:error] [pid 11274:tid 11484] [client 158.23.184.117:1044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/wp-includes/mani.php"] [unique_id "apK-PmbX5DA3XO6e_qQpowAAATE"]
[Sat Aug 29 05:10:54.606134 2026] [security2:error] [pid 1041789:tid 1042042] [client 20.48.160.90:62202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/5656.php"] [unique_id "apK-Pov3RhPI65jTFG4bqwAAA40"]
[Sat Aug 29 05:10:54.613889 2026] [security2:error] [pid 11274:tid 11571] [client 20.151.200.44:63713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/sef.php"] [unique_id "apK-PmbX5DA3XO6e_qQppAAAAYc"]
[Sat Aug 29 05:10:54.624535 2026] [security2:error] [pid 1041789:tid 1041949] [client 20.48.160.90:51852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/sym.php"] [unique_id "apK-Pov3RhPI65jTFG4brAAAAzA"]
[Sat Aug 29 05:10:54.645795 2026] [security2:error] [pid 11274:tid 11465] [client 4.205.62.107:62740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/png.php"] [unique_id "apK-PmbX5DA3XO6e_qQppgAAAR8"]
[Sat Aug 29 05:10:54.648703 2026] [security2:error] [pid 1321:tid 1600] [client 20.48.160.90:28507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/gulu.php"] [unique_id "apK-PmjCPtor9NZ-byTqqgAABqs"]
[Sat Aug 29 05:10:54.658525 2026] [security2:error] [pid 1041789:tid 1041975] [client 52.139.37.240:31086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/wp-info.php"] [unique_id "apK-Pov3RhPI65jTFG4brQAAA0o"]
[Sat Aug 29 05:10:54.660838 2026] [security2:error] [pid 1041789:tid 1041946] [client 158.23.147.79:62824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-login.php"] [unique_id "apK-Pov3RhPI65jTFG4brgAAAy0"]
[Sat Aug 29 05:10:54.670740 2026] [security2:error] [pid 1041789:tid 1042057] [client 52.139.37.240:29403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/files/index.php"] [unique_id "apK-Pov3RhPI65jTFG4brwAAA5w"]
[Sat Aug 29 05:10:54.689958 2026] [security2:error] [pid 11274:tid 11555] [client 20.100.175.163:31909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-content.php"] [unique_id "apK-PmbX5DA3XO6e_qQppwAAAXc"]
[Sat Aug 29 05:10:54.697638 2026] [security2:error] [pid 11274:tid 11513] [client 52.138.0.157:10395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pompisfelices.com"] [uri "/wp-includes/blocks/buttons/index.php"] [unique_id "apK-PmbX5DA3XO6e_qQpqwAAAU4"]
[Sat Aug 29 05:10:54.714364 2026] [security2:error] [pid 1041789:tid 1041881] [remote 136.108.90.41:44512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.90.108.136.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sunlandranch.com"] [uri "/i.php"] [unique_id "apK-Pov3RhPI65jTFG4bsAADj08"]
[Sat Aug 29 05:10:54.726486 2026] [security2:error] [pid 1041789:tid 1042018] [client 45.148.10.62:36326] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.yws.zpq.mybluehost.me"] [uri "/.env"] [unique_id "apK-Pov3RhPI65jTFG4bsQAAA3U"]
[Sat Aug 29 05:10:54.729640 2026] [security2:error] [pid 1321:tid 1562] [client 158.158.54.35:17726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "apK-PmjCPtor9NZ-byTqrQAABoU"]
[Sat Aug 29 05:10:54.737751 2026] [security2:error] [pid 11274:tid 11559] [client 20.196.209.81:3340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/access.php"] [unique_id "apK-PmbX5DA3XO6e_qQprQAAAXs"]
[Sat Aug 29 05:10:54.742992 2026] [security2:error] [pid 11274:tid 11451] [client 20.151.200.44:63959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/waf.php"] [unique_id "apK-PmbX5DA3XO6e_qQprgAAARE"]
[Sat Aug 29 05:10:54.753093 2026] [security2:error] [pid 1321:tid 1528] [client 158.23.184.117:1219] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/wp-includes/Test.php"] [unique_id "apK-PmjCPtor9NZ-byTqrwAABmQ"]
[Sat Aug 29 05:10:54.760349 2026] [security2:error] [pid 1041789:tid 1041944] [client 4.205.62.107:64271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/guk.php"] [unique_id "apK-Pov3RhPI65jTFG4bswAAAys"]
[Sat Aug 29 05:10:54.762893 2026] [security2:error] [pid 1041789:tid 1041841] [remote 136.108.90.41:44512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.90.108.136.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sunlandranch.com"] [uri "/pi.php"] [unique_id "apK-Pov3RhPI65jTFG4btQADVic"]
[Sat Aug 29 05:10:54.764378 2026] [security2:error] [pid 1041789:tid 1041919] [remote 136.108.90.41:44512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.90.108.136.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sunlandranch.com"] [uri "/test.php"] [unique_id "apK-Pov3RhPI65jTFG4btgADVnU"]
[Sat Aug 29 05:10:54.772203 2026] [security2:error] [pid 11274:tid 11568] [client 20.48.160.90:51870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/8.php"] [unique_id "apK-PmbX5DA3XO6e_qQpsQAAAYQ"]
[Sat Aug 29 05:10:54.782614 2026] [security2:error] [pid 11274:tid 11558] [client 20.48.160.90:62245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/replace.php"] [unique_id "apK-PmbX5DA3XO6e_qQptgAAAXo"]
[Sat Aug 29 05:10:54.817243 2026] [security2:error] [pid 1041789:tid 1041948] [client 20.104.104.62:20725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/chan.php"] [unique_id "apK-Pov3RhPI65jTFG4buQAAAy8"]
[Sat Aug 29 05:10:54.823598 2026] [security2:error] [pid 1321:tid 1506] [client 20.48.160.90:65327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/w3lls.php"] [unique_id "apK-PmjCPtor9NZ-byTqsgAABk4"]
[Sat Aug 29 05:10:54.827962 2026] [security2:error] [pid 1041789:tid 1041908] [remote 136.108.90.41:44512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.90.108.136.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sunlandranch.com"] [uri "/app_dev.php"] [unique_id "apK-Pov3RhPI65jTFG4bugADVmo"]
[Sat Aug 29 05:10:54.849044 2026] [security2:error] [pid 1321:tid 1576] [client 20.52.41.200:2840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/admin/function.php"] [unique_id "apK-PmjCPtor9NZ-byTqswAABpM"]
[Sat Aug 29 05:10:54.854699 2026] [security2:error] [pid 11274:tid 11516] [client 52.139.37.240:31106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/wp-wordfence-waf.php"] [unique_id "apK-PmbX5DA3XO6e_qQpugAAAVE"]
[Sat Aug 29 05:10:54.871455 2026] [security2:error] [pid 1041789:tid 1042055] [client 44.242.245.55:55873] ModSecurity: Warning. Matched phrase "Whatweb" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "gavirestaurant.com"] [uri "/"] [unique_id "apK-Pov3RhPI65jTFG4buwAAA5o"]
[Sat Aug 29 05:10:54.880589 2026] [security2:error] [pid 1041789:tid 1041956] [client 45.148.10.62:36326] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.yws.zpq.mybluehost.me"] [uri "/.env"] [unique_id "apK-Pov3RhPI65jTFG4bvAAAAzc"]
[Sat Aug 29 05:10:54.883055 2026] [security2:error] [pid 1041789:tid 1042001] [client 52.139.37.240:29402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.reed-white.com"] [uri "/flower.php"] [unique_id "apK-Pov3RhPI65jTFG4bvQAAA2Q"]
[Sat Aug 29 05:10:54.895843 2026] [security2:error] [pid 1321:tid 1527] [client 52.138.0.157:58275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pompisfelices.com"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "apK-PmjCPtor9NZ-byTqtAAABmM"]
[Sat Aug 29 05:10:54.899183 2026] [security2:error] [pid 11274:tid 11508] [client 158.23.147.79:38781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK-PmbX5DA3XO6e_qQpuwAAAUk"]
[Sat Aug 29 05:10:54.901240 2026] [security2:error] [pid 11274:tid 11557] [client 158.23.184.117:1024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/wp-includes/pomo.php"] [unique_id "apK-PmbX5DA3XO6e_qQpvAAAAXk"]
[Sat Aug 29 05:10:54.907916 2026] [security2:error] [pid 1041789:tid 1041942] [client 158.158.54.35:21754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/upload.php"] [unique_id "apK-Pov3RhPI65jTFG4bvgAAAyk"]
[Sat Aug 29 05:10:54.917940 2026] [security2:error] [pid 11274:tid 11546] [client 20.48.160.90:62271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/c4.php"] [unique_id "apK-PmbX5DA3XO6e_qQpvgAAAW4"]
[Sat Aug 29 05:10:54.928043 2026] [security2:error] [pid 1321:tid 1592] [client 20.48.160.90:28111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/goods.php"] [unique_id "apK-PmjCPtor9NZ-byTqtgAABqM"]
[Sat Aug 29 05:10:54.933737 2026] [security2:error] [pid 11274:tid 11561] [client 4.205.62.107:6478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/ms.php"] [unique_id "apK-PmbX5DA3XO6e_qQpwgAAAX0"]
[Sat Aug 29 05:10:54.937837 2026] [security2:error] [pid 1041789:tid 1042017] [client 4.205.62.107:63880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/hiquido.com/index.php"] [unique_id "apK-Pov3RhPI65jTFG4bvwAAA3Q"]
[Sat Aug 29 05:10:54.938802 2026] [security2:error] [pid 1041789:tid 1042035] [client 158.23.147.79:14254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK-Pov3RhPI65jTFG4bwAAAA4Y"]
[Sat Aug 29 05:10:54.953856 2026] [security2:error] [pid 11274:tid 11472] [client 20.100.175.163:24827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-content/themes/admin.php"] [unique_id "apK-PmbX5DA3XO6e_qQpxAAAASY"]
[Sat Aug 29 05:10:55.009330 2026] [security2:error] [pid 11274:tid 11474] [client 74.248.24.12:12105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-cron.php"] [unique_id "apK-P2bX5DA3XO6e_qQpxQAAASg"]
[Sat Aug 29 05:10:55.028541 2026] [security2:error] [pid 1321:tid 1585] [client 20.104.104.62:40212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/losX.php"] [unique_id "apK-P2jCPtor9NZ-byTqtwAABpw"]
[Sat Aug 29 05:10:55.039117 2026] [security2:error] [pid 1321:tid 1535] [client 20.48.160.90:65285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/fpwch.php"] [unique_id "apK-P2jCPtor9NZ-byTquAAABms"]
[Sat Aug 29 05:10:55.052132 2026] [security2:error] [pid 11274:tid 11449] [client 52.139.37.240:31139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/ws49.php"] [unique_id "apK-P2bX5DA3XO6e_qQpygAAAQ8"]
[Sat Aug 29 05:10:55.053672 2026] [security2:error] [pid 1321:tid 1525] [client 20.48.160.90:62295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/rxr.php"] [unique_id "apK-P2jCPtor9NZ-byTquQAABmE"]
[Sat Aug 29 05:10:55.090152 2026] [security2:error] [pid 11274:tid 11566] [client 158.23.147.79:5908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-l0gin.php"] [unique_id "apK-P2bX5DA3XO6e_qQpzgAAAYI"]
[Sat Aug 29 05:10:55.103855 2026] [security2:error] [pid 1321:tid 1497] [client 20.48.160.90:43591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/ah.php"] [unique_id "apK-P2jCPtor9NZ-byTqvgAABkU"]
[Sat Aug 29 05:10:55.145568 2026] [security2:error] [pid 11274:tid 11488] [client 68.155.159.216:64074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/content.php"] [unique_id "apK-P2bX5DA3XO6e_qQp1AAAATU"]
[Sat Aug 29 05:10:55.146105 2026] [security2:error] [pid 1041789:tid 1041897] [remote 136.108.90.41:44512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.90.108.136.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.sunlandranch.com"] [uri "/app_dev.php/_profiler"] [unique_id "apK-P4v3RhPI65jTFG4byQADjl8"]
[Sat Aug 29 05:10:55.166030 2026] [security2:error] [pid 1321:tid 1588] [client 52.138.0.157:5674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pompisfelices.com"] [uri "/wp-includes/index.php"] [unique_id "apK-P2jCPtor9NZ-byTqwAAABp8"]
[Sat Aug 29 05:10:55.166077 2026] [security2:error] [pid 1321:tid 1424] [remote 74.7.227.189:49972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 189.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pinnacleforms.com"] [uri "/jCstUpdate.php"] [unique_id "apK-P2jCPtor9NZ-byTqwQAGRkI"], referer: https://mail.pinnacleforms.com/
[Sat Aug 29 05:10:55.174437 2026] [security2:error] [pid 1041789:tid 1042029] [client 158.158.54.35:29070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/abcd.php"] [unique_id "apK-P4v3RhPI65jTFG4bywAAA4A"]
[Sat Aug 29 05:10:55.181947 2026] [security2:error] [pid 1041789:tid 1041992] [client 20.100.175.163:28446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "apK-P4v3RhPI65jTFG4bzAAAA1s"]
[Sat Aug 29 05:10:55.192443 2026] [security2:error] [pid 1041789:tid 1041982] [client 20.48.160.90:62188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/domvf.php"] [unique_id "apK-P4v3RhPI65jTFG4bzgAAA1E"]
[Sat Aug 29 05:10:55.198853 2026] [autoindex:error] [pid 1041789:tid 1042000] [client 45.148.10.62:36326] AH01276: Cannot serve directory /home3/ywszpqmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:10:55.206844 2026] [security2:error] [pid 1321:tid 1501] [client 44.242.245.55:0] ModSecurity: Warning. Matched phrase "Whatweb" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "gavirestaurant.com"] [uri "/index.php"] [unique_id "apK-P2jCPtor9NZ-byTqvQAABkk"]
[Sat Aug 29 05:10:55.209405 2026] [security2:error] [pid 1041789:tid 1041961] [client 20.48.160.90:64602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.ztxcloud.com"] [uri "/reviall.php"] [unique_id "apK-P4v3RhPI65jTFG4bzwAAAzw"]
[Sat Aug 29 05:10:55.213231 2026] [security2:error] [pid 1321:tid 1612] [client 44.242.245.55:57461] ModSecurity: Warning. Matched phrase "Whatweb" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "gavirestaurant.com"] [uri "/"] [unique_id "apK-P2jCPtor9NZ-byTqugAABrc"]
[Sat Aug 29 05:10:55.235072 2026] [security2:error] [pid 1041789:tid 1042041] [client 68.155.159.216:23492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/classwithtostring.php"] [unique_id "apK-P4v3RhPI65jTFG4b0AAAA4w"]
[Sat Aug 29 05:10:55.252153 2026] [security2:error] [pid 1321:tid 1504] [client 20.196.209.81:15413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/classsmtps.php"] [unique_id "apK-P2jCPtor9NZ-byTqxQAABkw"]
[Sat Aug 29 05:10:55.256689 2026] [security2:error] [pid 1041789:tid 1042047] [client 52.139.37.240:31092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/xxx.php"] [unique_id "apK-P4v3RhPI65jTFG4b0QAAA5I"]
[Sat Aug 29 05:10:55.257366 2026] [security2:error] [pid 1321:tid 1541] [client 20.48.160.90:28107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/ws55.php"] [unique_id "apK-P2jCPtor9NZ-byTqxgAABnE"]
[Sat Aug 29 05:10:55.262976 2026] [security2:error] [pid 1041789:tid 1042025] [client 20.151.200.44:65150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/admin123.php"] [unique_id "apK-P4v3RhPI65jTFG4b0gAAA3w"]
[Sat Aug 29 05:10:55.263620 2026] [security2:error] [pid 1321:tid 1411] [remote 192.250.229.214:40542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 214.229.250.192.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "questconsultantsme.com"] [uri "/wp-login.php"] [unique_id "apK-P2jCPtor9NZ-byTqxAAGkjU"]
[Sat Aug 29 05:10:55.268989 2026] [security2:error] [pid 11274:tid 11512] [client 158.23.184.117:1052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/wp-admin/link-add.php"] [unique_id "apK-P2bX5DA3XO6e_qQp4wAAAU0"]
[Sat Aug 29 05:10:55.282657 2026] [security2:error] [pid 1041789:tid 1042030] [client 158.23.147.79:43337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/chosen.php"] [unique_id "apK-P4v3RhPI65jTFG4b0wAAA4E"]
[Sat Aug 29 05:10:55.305146 2026] [security2:error] [pid 11274:tid 11502] [client 20.52.41.200:2867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/admin/index.php"] [unique_id "apK-P2bX5DA3XO6e_qQp5AAAAUM"]
[Sat Aug 29 05:10:55.339738 2026] [security2:error] [pid 1321:tid 1604] [client 20.48.160.90:63300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/biufile.php"] [unique_id "apK-P2jCPtor9NZ-byTqxwAABq8"]
[Sat Aug 29 05:10:55.347836 2026] [security2:error] [pid 1321:tid 1492] [client 20.104.104.62:61780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-P2jCPtor9NZ-byTqyAAABkA"]
[Sat Aug 29 05:10:55.370028 2026] [security2:error] [pid 1321:tid 1534] [client 52.138.0.157:5649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pompisfelices.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK-P2jCPtor9NZ-byTqywAABmo"]
[Sat Aug 29 05:10:55.420978 2026] [security2:error] [pid 1321:tid 1580] [client 20.48.160.90:51864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/drykl.php"] [unique_id "apK-P2jCPtor9NZ-byTqzgAABpc"]
[Sat Aug 29 05:10:55.445295 2026] [security2:error] [pid 1321:tid 1568] [client 20.100.175.163:27987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-admin/css/admin.php"] [unique_id "apK-P2jCPtor9NZ-byTq0wAABos"]
[Sat Aug 29 05:10:55.450139 2026] [security2:error] [pid 1321:tid 1616] [client 158.23.184.117:1051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/wp-includes/Text.php"] [unique_id "apK-P2jCPtor9NZ-byTq1AAABrs"]
[Sat Aug 29 05:10:55.458023 2026] [security2:error] [pid 11274:tid 11495] [client 52.139.37.240:31618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/0x.php"] [unique_id "apK-P2bX5DA3XO6e_qQp6AAAATw"]
[Sat Aug 29 05:10:55.525294 2026] [security2:error] [pid 11274:tid 11452] [client 74.248.24.12:24944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-block.php"] [unique_id "apK-P2bX5DA3XO6e_qQp6wAAARI"]
[Sat Aug 29 05:10:55.540313 2026] [security2:error] [pid 11274:tid 11526] [client 20.104.104.62:52306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-P2bX5DA3XO6e_qQp7QAAAVs"]
[Sat Aug 29 05:10:55.541306 2026] [security2:error] [pid 11274:tid 11505] [client 20.48.160.90:65361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/blacks.php"] [unique_id "apK-P2bX5DA3XO6e_qQp7gAAAUY"]
[Sat Aug 29 05:10:55.545226 2026] [security2:error] [pid 1041789:tid 1042051] [client 20.151.200.44:57718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/bnnof6.php"] [unique_id "apK-P4v3RhPI65jTFG4b1wAAA5Y"]
[Sat Aug 29 05:10:55.565659 2026] [security2:error] [pid 1321:tid 1503] [client 52.138.0.157:40692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pompisfelices.com"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "apK-P2jCPtor9NZ-byTq1gAABks"]
[Sat Aug 29 05:10:55.577929 2026] [security2:error] [pid 1041789:tid 1041939] [client 103.171.189.88:52482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-P4v3RhPI65jTFG4b2AAAAyY"]
[Sat Aug 29 05:10:55.578037 2026] [security2:error] [pid 1041789:tid 1041939] [client 103.171.189.88:52482] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-P4v3RhPI65jTFG4b2AAAAyY"]
[Sat Aug 29 05:10:55.578579 2026] [security2:error] [pid 1041789:tid 1042042] [client 20.48.160.90:46495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/backup.php"] [unique_id "apK-P4v3RhPI65jTFG4b2QAAA40"]
[Sat Aug 29 05:10:55.588223 2026] [security2:error] [pid 1321:tid 1514] [client 68.155.159.216:64420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK-P2jCPtor9NZ-byTq2QAABlY"]
[Sat Aug 29 05:10:55.588415 2026] [security2:error] [pid 1041789:tid 1042050] [client 45.148.10.62:36326] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.yws.zpq.mybluehost.me"] [uri "/api/.env"] [unique_id "apK-P4v3RhPI65jTFG4b2gAAA5U"]
[Sat Aug 29 05:10:55.595760 2026] [security2:error] [pid 1321:tid 1614] [client 158.23.184.117:1240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/wp-trackback.php"] [unique_id "apK-P2jCPtor9NZ-byTq2gAABrk"]
[Sat Aug 29 05:10:55.635439 2026] [security2:error] [pid 1041789:tid 1041943] [client 4.205.62.107:59133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/kerang.php"] [unique_id "apK-P4v3RhPI65jTFG4b2wAAAyo"]
[Sat Aug 29 05:10:55.636502 2026] [security2:error] [pid 1321:tid 1599] [client 158.158.54.35:14899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-access.php"] [unique_id "apK-P2jCPtor9NZ-byTq3AAABqo"]
[Sat Aug 29 05:10:55.657759 2026] [security2:error] [pid 1321:tid 1488] [client 52.139.37.240:31042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/CDX1.php"] [unique_id "apK-P2jCPtor9NZ-byTq3QAABjw"]
[Sat Aug 29 05:10:55.662289 2026] [security2:error] [pid 1321:tid 1598] [client 158.158.54.35:15087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-content/file.php"] [unique_id "apK-P2jCPtor9NZ-byTq3gAABqk"]
[Sat Aug 29 05:10:55.667144 2026] [security2:error] [pid 11274:tid 11419] [remote 136.108.8.198:43508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 198.8.108.136.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bio-vein.com"] [uri "/phpinfo.php"] [unique_id "apK-P2bX5DA3XO6e_qQp8wABh2k"]
[Sat Aug 29 05:10:55.667843 2026] [security2:error] [pid 11274:tid 11414] [remote 136.108.8.198:43508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 198.8.108.136.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bio-vein.com"] [uri "/info.php"] [unique_id "apK-P2bX5DA3XO6e_qQp9AABh2Q"]
[Sat Aug 29 05:10:55.681767 2026] [security2:error] [pid 1321:tid 1502] [client 4.205.62.107:4952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/config_dev.php"] [unique_id "apK-P2jCPtor9NZ-byTq4AAABko"]
[Sat Aug 29 05:10:55.693773 2026] [security2:error] [pid 1321:tid 1555] [client 20.196.209.81:15382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/contentloader1.php"] [unique_id "apK-P2jCPtor9NZ-byTq4QAABn4"]
[Sat Aug 29 05:10:55.699482 2026] [security2:error] [pid 1041789:tid 1041940] [client 20.48.160.90:62188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/beck.php"] [unique_id "apK-P4v3RhPI65jTFG4b3QAAAyc"]
[Sat Aug 29 05:10:55.704385 2026] [security2:error] [pid 1041789:tid 1042010] [client 158.23.147.79:55246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-admin.php"] [unique_id "apK-P4v3RhPI65jTFG4b3gAAA20"]
[Sat Aug 29 05:10:55.707116 2026] [security2:error] [pid 11274:tid 11482] [client 20.100.175.163:30721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/css/wp-login.php"] [unique_id "apK-P2bX5DA3XO6e_qQp9gAAAS8"]
[Sat Aug 29 05:10:55.724784 2026] [security2:error] [pid 1321:tid 1602] [client 20.48.160.90:28118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/indo.php"] [unique_id "apK-P2jCPtor9NZ-byTq5AAABq0"]
[Sat Aug 29 05:10:55.740469 2026] [security2:error] [pid 1041789:tid 1041931] [client 45.148.10.62:36326] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.yws.zpq.mybluehost.me"] [uri "/.env.bak"] [unique_id "apK-P4v3RhPI65jTFG4b3wAAAx4"]
[Sat Aug 29 05:10:55.742025 2026] [security2:error] [pid 11274:tid 11458] [client 158.23.184.117:1242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/wp-admin/maint.php"] [unique_id "apK-P2bX5DA3XO6e_qQp9wAAARg"]
[Sat Aug 29 05:10:55.757939 2026] [security2:error] [pid 1041789:tid 1041976] [client 20.104.104.62:20819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/mom.php"] [unique_id "apK-P4v3RhPI65jTFG4b4AAAA0s"]
[Sat Aug 29 05:10:55.760544 2026] [security2:error] [pid 1041789:tid 1041949] [client 20.52.41.200:2639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/storage/rip.php"] [unique_id "apK-P4v3RhPI65jTFG4b4QAAAzA"]
[Sat Aug 29 05:10:55.775377 2026] [security2:error] [pid 11274:tid 11465] [client 158.23.147.79:55249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK-P2bX5DA3XO6e_qQp-QAAAR8"]
[Sat Aug 29 05:10:55.778609 2026] [security2:error] [pid 1041789:tid 1042046] [client 4.205.62.107:32523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/chosen.php"] [unique_id "apK-P4v3RhPI65jTFG4b5QAAA5E"]
[Sat Aug 29 05:10:55.808443 2026] [security2:error] [pid 11274:tid 11530] [client 20.151.200.44:61544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/13ede.php"] [unique_id "apK-P2bX5DA3XO6e_qQp-wAAAV8"]
[Sat Aug 29 05:10:55.810886 2026] [security2:error] [pid 11274:tid 11559] [client 20.104.104.62:42052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/baee.php"] [unique_id "apK-P2bX5DA3XO6e_qQp_AAAAXs"]
[Sat Aug 29 05:10:55.831352 2026] [security2:error] [pid 11274:tid 11462] [client 52.138.0.157:10422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pompisfelices.com"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "apK-P2bX5DA3XO6e_qQqAAAAARw"]
[Sat Aug 29 05:10:55.842686 2026] [security2:error] [pid 11274:tid 11401] [remote 136.108.8.198:43508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 198.8.108.136.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bio-vein.com"] [uri "/test.php"] [unique_id "apK-P2bX5DA3XO6e_qQqAQABdVc"]
[Sat Aug 29 05:10:55.842997 2026] [security2:error] [pid 11274:tid 11394] [remote 136.108.8.198:43508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 198.8.108.136.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bio-vein.com"] [uri "/pi.php"] [unique_id "apK-P2bX5DA3XO6e_qQqAgABdVA"]
[Sat Aug 29 05:10:55.856145 2026] [security2:error] [pid 1041789:tid 1041971] [client 52.139.37.240:31629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/akcc.php"] [unique_id "apK-P4v3RhPI65jTFG4b6QAAA0Y"]
[Sat Aug 29 05:10:55.856190 2026] [security2:error] [pid 1321:tid 1591] [client 20.48.160.90:62135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/t3.php"] [unique_id "apK-P2jCPtor9NZ-byTq5wAABqI"]
[Sat Aug 29 05:10:55.876040 2026] [security2:error] [pid 1041789:tid 1041840] [remote 136.108.90.41:44512] ModSecurity: Access denied with code 406 (phase 2). Match of "ipMatch 127.0.0.1,::1" against "REMOTE_ADDR" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "724"] [id "340114"] [rev "2"] [msg "Atomicorp.com WAF Rules: Apache admin service access attempt"] [severity "CRITICAL"] [hostname "autodiscover.sunlandranch.com"] [uri "/server-info"] [unique_id "apK-P4v3RhPI65jTFG4b7AADVyY"]
[Sat Aug 29 05:10:55.887109 2026] [security2:error] [pid 11274:tid 11497] [client 158.23.184.117:1518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/wp-includes/num.php"] [unique_id "apK-P2bX5DA3XO6e_qQqBwAAAT4"]
[Sat Aug 29 05:10:55.888919 2026] [access_compat:error] [pid 1041789:tid 1041903] [remote 136.108.90.41:44512] AH01797: client denied by server configuration: proxy:http://127.0.0.1/cgi-sys/autodiscover.cgi
[Sat Aug 29 05:10:55.896692 2026] [security2:error] [pid 11274:tid 11506] [client 4.205.62.107:64919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/config_dev.php"] [unique_id "apK-P2bX5DA3XO6e_qQqCQAAAUc"]
[Sat Aug 29 05:10:55.913051 2026] [security2:error] [pid 1041789:tid 1041983] [client 57.141.14.94:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/page/31/"] [unique_id "apK-P4v3RhPI65jTFG4b9AAAA1I"]
[Sat Aug 29 05:10:55.942553 2026] [security2:error] [pid 1041789:tid 1041978] [client 20.100.175.163:8207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/adminfuns.php"] [unique_id "apK-P4v3RhPI65jTFG4b9QAAA00"]
[Sat Aug 29 05:10:55.946247 2026] [security2:error] [pid 11274:tid 11410] [remote 136.108.8.198:43508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 198.8.108.136.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bio-vein.com"] [uri "/i.php"] [unique_id "apK-P2bX5DA3XO6e_qQqCgABdWA"]
[Sat Aug 29 05:10:55.983218 2026] [security2:error] [pid 11274:tid 11528] [client 158.158.54.35:15339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/.trash7206/index.php"] [unique_id "apK-P2bX5DA3XO6e_qQqDQAAAV0"]
[Sat Aug 29 05:10:55.985266 2026] [security2:error] [pid 11274:tid 11534] [client 20.104.104.62:52312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/d12.php"] [unique_id "apK-P2bX5DA3XO6e_qQqDgAAAWM"]
[Sat Aug 29 05:10:56.004084 2026] [security2:error] [pid 11274:tid 11508] [client 20.104.104.62:20879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/killer.php"] [unique_id "apK-QGbX5DA3XO6e_qQqDwAAAUk"]
[Sat Aug 29 05:10:56.004304 2026] [security2:error] [pid 11274:tid 11557] [client 158.23.147.79:58098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-admin/index.php"] [unique_id "apK-QGbX5DA3XO6e_qQqEAAAAXk"]
[Sat Aug 29 05:10:56.028320 2026] [security2:error] [pid 11274:tid 11427] [remote 136.108.8.198:43508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 198.8.108.136.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bio-vein.com"] [uri "/app_dev.php/_profiler"] [unique_id "apK-QGbX5DA3XO6e_qQqEQABYXE"]
[Sat Aug 29 05:10:56.038062 2026] [security2:error] [pid 1041789:tid 1041987] [client 74.248.24.12:21268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-includes/fonts/admin.php"] [unique_id "apK-QIv3RhPI65jTFG4b9gAAA1Y"]
[Sat Aug 29 05:10:56.051974 2026] [security2:error] [pid 11274:tid 11494] [client 158.23.184.117:1062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/identity.php"] [unique_id "apK-QGbX5DA3XO6e_qQqFAAAATs"]
[Sat Aug 29 05:10:56.053955 2026] [security2:error] [pid 11274:tid 11534] [client 52.139.37.240:31545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK-QGbX5DA3XO6e_qQqFQAAAWM"]
[Sat Aug 29 05:10:56.055251 2026] [security2:error] [pid 11274:tid 11525] [client 158.23.147.79:14297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/classwithtostring.php"] [unique_id "apK-QGbX5DA3XO6e_qQqFwAAAVo"]
[Sat Aug 29 05:10:56.069871 2026] [security2:error] [pid 11274:tid 11550] [client 4.205.62.107:61706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/ws79.php"] [unique_id "apK-QGbX5DA3XO6e_qQqGAAAAXI"]
[Sat Aug 29 05:10:56.070961 2026] [security2:error] [pid 11274:tid 11474] [client 4.205.62.107:6513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/fucku.php"] [unique_id "apK-QGbX5DA3XO6e_qQqGQAAASg"]
[Sat Aug 29 05:10:56.083730 2026] [security2:error] [pid 11274:tid 11491] [client 158.158.54.35:8459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-content/uploads/min.php"] [unique_id "apK-QGbX5DA3XO6e_qQqGgAAATg"]
[Sat Aug 29 05:10:56.084867 2026] [security2:error] [pid 1041789:tid 1042029] [client 158.23.147.79:24509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/file88.php"] [unique_id "apK-QIv3RhPI65jTFG4b-AAAA4A"]
[Sat Aug 29 05:10:56.095003 2026] [security2:error] [pid 11274:tid 11516] [client 20.196.209.81:15388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/al.php"] [unique_id "apK-QGbX5DA3XO6e_qQqGwAAAVE"]
[Sat Aug 29 05:10:56.097442 2026] [security2:error] [pid 11274:tid 11426] [remote 136.108.8.198:43508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 198.8.108.136.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bio-vein.com"] [uri "/app_dev.php"] [unique_id "apK-QGbX5DA3XO6e_qQqHAABUnA"]
[Sat Aug 29 05:10:56.109769 2026] [security2:error] [pid 1041789:tid 1042015] [client 158.158.54.35:4664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/files.php"] [unique_id "apK-QIv3RhPI65jTFG4b-QAAA3I"]
[Sat Aug 29 05:10:56.152835 2026] [security2:error] [pid 1041789:tid 1041932] [client 20.104.104.62:52303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/yyy.php"] [unique_id "apK-QIv3RhPI65jTFG4b_AAAAx8"]
[Sat Aug 29 05:10:56.174397 2026] [security2:error] [pid 11274:tid 11488] [client 52.138.0.157:10378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pompisfelices.com"] [uri "/wp-links-opml.php"] [unique_id "apK-QGbX5DA3XO6e_qQqJAAAATU"]
[Sat Aug 29 05:10:56.208630 2026] [security2:error] [pid 11274:tid 11472] [client 20.52.41.200:2868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/zoom1.php"] [unique_id "apK-QGbX5DA3XO6e_qQqJwAAASY"]
[Sat Aug 29 05:10:56.221452 2026] [security2:error] [pid 11274:tid 11504] [client 158.23.147.79:5870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK-QGbX5DA3XO6e_qQqKAAAAUU"]
[Sat Aug 29 05:10:56.222724 2026] [security2:error] [pid 1041789:tid 1042030] [client 45.148.10.62:36326] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.yws.zpq.mybluehost.me"] [uri "/stripe/.env"] [unique_id "apK-QIv3RhPI65jTFG4cAQAAA4E"]
[Sat Aug 29 05:10:56.249405 2026] [security2:error] [pid 11274:tid 11514] [client 52.139.37.240:31622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/s.php"] [unique_id "apK-QGbX5DA3XO6e_qQqKQAAAU8"]
[Sat Aug 29 05:10:56.249905 2026] [security2:error] [pid 11274:tid 11550] [client 20.100.175.163:28453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/images/index.php"] [unique_id "apK-QGbX5DA3XO6e_qQqKgAAAXI"]
[Sat Aug 29 05:10:56.334792 2026] [security2:error] [pid 11274:tid 11515] [client 20.104.104.62:42059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/bgymj.php"] [unique_id "apK-QGbX5DA3XO6e_qQqLQAAAVA"]
[Sat Aug 29 05:10:56.346714 2026] [security2:error] [pid 1041789:tid 1042043] [client 68.155.159.216:23531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/install.php"] [unique_id "apK-QIv3RhPI65jTFG4cAgAAA44"]
[Sat Aug 29 05:10:56.381302 2026] [security2:error] [pid 11274:tid 11480] [client 52.138.0.157:10413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pompisfelices.com"] [uri "/wp-signup.php"] [unique_id "apK-QGbX5DA3XO6e_qQqLgAAAS0"]
[Sat Aug 29 05:10:56.395062 2026] [security2:error] [pid 11274:tid 11545] [client 20.151.200.44:22188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/7h.php"] [unique_id "apK-QGbX5DA3XO6e_qQqLwAAAW0"]
[Sat Aug 29 05:10:56.407388 2026] [proxy_http:error] [pid 1034096:tid 1034366] (70007)The timeout specified has expired: [client 127.0.0.1:23120] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:10:56.407409 2026] [proxy:error] [pid 1034096:tid 1034366] [client 127.0.0.1:23120] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:10:56.418395 2026] [security2:error] [pid 11274:tid 11521] [client 158.23.184.117:1070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/Radio.php"] [unique_id "apK-QGbX5DA3XO6e_qQqMAAAAVY"]
[Sat Aug 29 05:10:56.431419 2026] [security2:error] [pid 11274:tid 11473] [client 158.158.54.35:10116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wk/index.php"] [unique_id "apK-QGbX5DA3XO6e_qQqMQAAASc"]
[Sat Aug 29 05:10:56.436442 2026] [security2:error] [pid 1321:tid 1528] [client 20.100.175.163:21587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/goods.php"] [unique_id "apK-QGjCPtor9NZ-byTq7QAABmQ"]
[Sat Aug 29 05:10:56.447295 2026] [security2:error] [pid 11274:tid 11455] [client 52.139.37.240:31511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/sagax.php"] [unique_id "apK-QGbX5DA3XO6e_qQqMgAAARU"]
[Sat Aug 29 05:10:56.460541 2026] [security2:error] [pid 11274:tid 11453] [client 20.104.49.130:52346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "coveryourauto.com"] [uri "/222.php"] [unique_id "apK-QGbX5DA3XO6e_qQqMwAAARM"]
[Sat Aug 29 05:10:56.512722 2026] [security2:error] [pid 1321:tid 1576] [client 20.104.104.62:52347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/fh26.php"] [unique_id "apK-QGjCPtor9NZ-byTq7wAABpM"]
[Sat Aug 29 05:10:56.541172 2026] [security2:error] [pid 11274:tid 11479] [client 158.158.54.35:12360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK-QGbX5DA3XO6e_qQqNwAAASw"]
[Sat Aug 29 05:10:56.548606 2026] [security2:error] [pid 11274:tid 11467] [client 20.104.104.62:20712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/Sh3ll.php"] [unique_id "apK-QGbX5DA3XO6e_qQqOQAAASE"]
[Sat Aug 29 05:10:56.555683 2026] [security2:error] [pid 1041789:tid 1042006] [client 158.158.54.35:1992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/o.php"] [unique_id "apK-QIv3RhPI65jTFG4cCAAAA2k"]
[Sat Aug 29 05:10:56.574866 2026] [security2:error] [pid 1041789:tid 1041950] [client 52.138.0.157:40757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pompisfelices.com"] [uri "/xmlrpc.php"] [unique_id "apK-QIv3RhPI65jTFG4cCQAAAzE"]
[Sat Aug 29 05:10:56.607050 2026] [security2:error] [pid 1321:tid 1506] [client 74.248.24.12:40824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/m.php"] [unique_id "apK-QGjCPtor9NZ-byTq9AAABk4"]
[Sat Aug 29 05:10:56.645992 2026] [http2:warn] [pid 1041789:tid 1042039] [client 57.141.14.98:61724] h2_stream(1041789-34-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:10:56.649449 2026] [cgid:error] [pid 11274:tid 11446] [client 52.139.37.240:31044] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/cumbeebailbonds/404.shtml
[Sat Aug 29 05:10:56.654616 2026] [security2:error] [pid 1321:tid 1525] [client 158.23.184.117:1030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/wp-includes/Requests/Exception/file.php"] [unique_id "apK-QGjCPtor9NZ-byTq-QAABmE"]
[Sat Aug 29 05:10:56.655392 2026] [security2:error] [pid 1041789:tid 1041946] [client 20.104.104.62:42056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/fgd.php"] [unique_id "apK-QIv3RhPI65jTFG4cEAAAAy0"]
[Sat Aug 29 05:10:56.662379 2026] [security2:error] [pid 11274:tid 11526] [client 20.52.41.200:2790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/txets.php"] [unique_id "apK-QGbX5DA3XO6e_qQqRgAAAVs"]
[Sat Aug 29 05:10:56.664369 2026] [security2:error] [pid 1041789:tid 1041970] [client 20.196.209.81:16207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/global.php"] [unique_id "apK-QIv3RhPI65jTFG4cEQAAA0U"]
[Sat Aug 29 05:10:56.676457 2026] [http2:warn] [pid 1018003:tid 1018249] [client 57.141.14.32:35046] h2_stream(1018003-215-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:10:56.714791 2026] [security2:error] [pid 11274:tid 11513] [client 52.139.37.240:31044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/wp-content/plugins/ftde.php"] [unique_id "apK-QGbX5DA3XO6e_qQqSAAAAU4"]
[Sat Aug 29 05:10:56.771817 2026] [security2:error] [pid 1041789:tid 1041940] [client 52.138.0.157:5667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.pompisfelices.com"] [uri "/yas.php"] [unique_id "apK-QIv3RhPI65jTFG4cFgAAAyc"]
[Sat Aug 29 05:10:56.774327 2026] [security2:error] [pid 11274:tid 11559] [client 4.205.62.107:59119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/rem.php"] [unique_id "apK-QGbX5DA3XO6e_qQqSQAAAXs"]
[Sat Aug 29 05:10:56.796445 2026] [security2:error] [pid 11274:tid 11558] [client 20.104.49.130:57519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/wp-good.php"] [unique_id "apK-QGbX5DA3XO6e_qQqSgAAAXo"]
[Sat Aug 29 05:10:56.811310 2026] [security2:error] [pid 11274:tid 11503] [client 158.23.147.79:53952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-includes/assets/index.php"] [unique_id "apK-QGbX5DA3XO6e_qQqTQAAAUQ"]
[Sat Aug 29 05:10:56.815333 2026] [security2:error] [pid 11274:tid 11529] [client 4.205.62.107:58480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/oc460l3x.php"] [unique_id "apK-QGbX5DA3XO6e_qQqTgAAAV4"]
[Sat Aug 29 05:10:56.827474 2026] [security2:error] [pid 11274:tid 11554] [client 20.104.104.62:52318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/inject.php"] [unique_id "apK-QGbX5DA3XO6e_qQqTwAAAXY"]
[Sat Aug 29 05:10:56.849503 2026] [security2:error] [pid 1041789:tid 1042018] [client 45.148.10.62:36326] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.yws.zpq.mybluehost.me"] [uri "/backend/.env"] [unique_id "apK-QIv3RhPI65jTFG4cGAAAA3U"]
[Sat Aug 29 05:10:56.867089 2026] [security2:error] [pid 1041789:tid 1041960] [client 158.158.54.35:23031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/admin.php"] [unique_id "apK-QIv3RhPI65jTFG4cGQAAAzs"]
[Sat Aug 29 05:10:56.880575 2026] [security2:error] [pid 1041789:tid 1041990] [client 158.23.184.117:1244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/wp-admin/add.php"] [unique_id "apK-QIv3RhPI65jTFG4cGgAAA1k"]
[Sat Aug 29 05:10:56.890318 2026] [security2:error] [pid 11274:tid 11564] [client 158.23.147.79:62757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-admin/images/about.php"] [unique_id "apK-QGbX5DA3XO6e_qQqUwAAAYA"]
[Sat Aug 29 05:10:56.907915 2026] [security2:error] [pid 11274:tid 11470] [client 20.48.160.90:28057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/sign.php"] [unique_id "apK-QGbX5DA3XO6e_qQqVAAAASQ"]
[Sat Aug 29 05:10:56.913622 2026] [security2:error] [pid 1321:tid 1590] [client 52.139.37.240:31616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "apK-QGjCPtor9NZ-byTq_AAABqE"]
[Sat Aug 29 05:10:56.917073 2026] [security2:error] [pid 1321:tid 1498] [client 4.205.62.107:59073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/admin-ajax.php"] [unique_id "apK-QGjCPtor9NZ-byTq_QAABkY"]
[Sat Aug 29 05:10:56.920291 2026] [security2:error] [pid 1321:tid 1588] [client 20.100.175.163:7766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/inputs.php"] [unique_id "apK-QGjCPtor9NZ-byTq_gAABp8"]
[Sat Aug 29 05:10:56.927945 2026] [security2:error] [pid 11274:tid 11461] [client 20.100.175.163:13637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/css.php"] [unique_id "apK-QGbX5DA3XO6e_qQqVQAAARs"]
[Sat Aug 29 05:10:56.970398 2026] [security2:error] [pid 1041789:tid 1041956] [client 20.104.104.62:52236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/mga.php"] [unique_id "apK-QIv3RhPI65jTFG4cGwAAAzc"]
[Sat Aug 29 05:10:56.991323 2026] [security2:error] [pid 11274:tid 11546] [client 158.158.54.35:15571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/bthil.php"] [unique_id "apK-QGbX5DA3XO6e_qQqVgAAAW4"]
[Sat Aug 29 05:10:56.997646 2026] [security2:error] [pid 11274:tid 11561] [client 158.158.54.35:21713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/file2.php"] [unique_id "apK-QGbX5DA3XO6e_qQqWAAAAX0"]
[Sat Aug 29 05:10:57.002351 2026] [security2:error] [pid 1041789:tid 1041957] [client 45.148.10.62:36326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.yws.zpq.mybluehost.me"] [uri "/test.php"] [unique_id "apK-QYv3RhPI65jTFG4cHAAAAzg"]
[Sat Aug 29 05:10:57.021344 2026] [security2:error] [pid 1041789:tid 1042001] [client 158.23.184.117:1063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/wp-includes/assets/about.php"] [unique_id "apK-QYv3RhPI65jTFG4cHwAAA2Q"]
[Sat Aug 29 05:10:57.026746 2026] [security2:error] [pid 11274:tid 11444] [client 20.151.200.44:65318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/ah24.php"] [unique_id "apK-QWbX5DA3XO6e_qQqWQAAAQo"]
[Sat Aug 29 05:10:57.036079 2026] [security2:error] [pid 11274:tid 11492] [client 4.205.62.107:64905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/aws_credentials.php"] [unique_id "apK-QWbX5DA3XO6e_qQqWgAAATk"]
[Sat Aug 29 05:10:57.041546 2026] [security2:error] [pid 11274:tid 11499] [client 20.48.160.90:62188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/wp.php"] [unique_id "apK-QWbX5DA3XO6e_qQqWwAAAUA"]
[Sat Aug 29 05:10:57.041553 2026] [security2:error] [pid 1041789:tid 1041968] [client 20.104.104.62:64705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/new.php"] [unique_id "apK-QYv3RhPI65jTFG4cIQAAA0M"]
[Sat Aug 29 05:10:57.065757 2026] [security2:error] [pid 1321:tid 1611] [client 20.196.209.81:16712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/update.php"] [unique_id "apK-QWjCPtor9NZ-byTq_wAABrY"]
[Sat Aug 29 05:10:57.093408 2026] [security2:error] [pid 11274:tid 11519] [client 20.104.49.130:60789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/3.php"] [unique_id "apK-QWbX5DA3XO6e_qQqXQAAAVQ"]
[Sat Aug 29 05:10:57.111949 2026] [cgid:error] [pid 11274:tid 11566] [client 52.139.37.240:31628] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/cumbeebailbonds/404.shtml
[Sat Aug 29 05:10:57.112600 2026] [security2:error] [pid 11274:tid 11471] [client 158.23.147.79:37918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK-QWbX5DA3XO6e_qQqYAAAASU"]
[Sat Aug 29 05:10:57.114422 2026] [core:error] [pid 1321:tid 1501] [client 20.52.41.200:2209] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:57.114438 2026] [core:error] [pid 1321:tid 1501] [client 20.52.41.200:2209] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:57.123484 2026] [security2:error] [pid 1321:tid 1496] [client 74.248.24.12:18813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "apK-QWjCPtor9NZ-byTrAgAABkQ"]
[Sat Aug 29 05:10:57.123575 2026] [security2:error] [pid 11274:tid 11472] [client 20.104.104.62:42085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/inwp.php"] [unique_id "apK-QWbX5DA3XO6e_qQqYQAAASY"]
[Sat Aug 29 05:10:57.123784 2026] [security2:error] [pid 11274:tid 11504] [client 20.104.49.130:36759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.timportlock.net"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-QWbX5DA3XO6e_qQqYgAAAUU"]
[Sat Aug 29 05:10:57.160441 2026] [security2:error] [pid 1041789:tid 1041981] [client 158.23.147.79:14332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/install.php"] [unique_id "apK-QYv3RhPI65jTFG4cKwAAA1A"]
[Sat Aug 29 05:10:57.166387 2026] [security2:error] [pid 11274:tid 11490] [client 158.23.184.117:1247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/wp-content/themes/twentytwentythree.php"] [unique_id "apK-QWbX5DA3XO6e_qQqYwAAATc"]
[Sat Aug 29 05:10:57.175276 2026] [security2:error] [pid 11274:tid 11464] [client 149.34.210.141:42994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-QWbX5DA3XO6e_qQqZAAAAR4"]
[Sat Aug 29 05:10:57.175405 2026] [security2:error] [pid 11274:tid 11464] [client 149.34.210.141:42994] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-QWbX5DA3XO6e_qQqZAAAAR4"]
[Sat Aug 29 05:10:57.176370 2026] [security2:error] [pid 11274:tid 11514] [client 52.139.37.240:31628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/z.php"] [unique_id "apK-QWbX5DA3XO6e_qQqZQAAAU8"]
[Sat Aug 29 05:10:57.192559 2026] [security2:error] [pid 11274:tid 11468] [client 158.23.147.79:24518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/NewFile.php/"] [unique_id "apK-QWbX5DA3XO6e_qQqZgAAASI"]
[Sat Aug 29 05:10:57.210140 2026] [security2:error] [pid 11274:tid 11527] [client 4.205.62.107:61659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/public/wp-blog.php"] [unique_id "apK-QWbX5DA3XO6e_qQqZwAAAVw"]
[Sat Aug 29 05:10:57.215666 2026] [security2:error] [pid 1041789:tid 1041933] [client 4.205.62.107:6887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/error_log.php"] [unique_id "apK-QYv3RhPI65jTFG4cLAAAAyA"]
[Sat Aug 29 05:10:57.261815 2026] [security2:error] [pid 1041789:tid 1042029] [client 20.104.104.62:52248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/ad1.php"] [unique_id "apK-QYv3RhPI65jTFG4cLQAAA4A"]
[Sat Aug 29 05:10:57.269008 2026] [security2:error] [pid 1041789:tid 1041992] [client 20.104.104.62:48503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/lufix1.php"] [unique_id "apK-QYv3RhPI65jTFG4cLgAAA1s"]
[Sat Aug 29 05:10:57.283736 2026] [core:error] [pid 11274:tid 11515] [client 20.104.104.62:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:57.283753 2026] [core:error] [pid 11274:tid 11515] [client 20.104.104.62:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:57.300807 2026] [security2:error] [pid 1041789:tid 1042015] [client 20.151.200.44:62203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/k8.php"] [unique_id "apK-QYv3RhPI65jTFG4cLwAAA3I"]
[Sat Aug 29 05:10:57.326775 2026] [security2:error] [pid 1321:tid 1584] [client 158.158.54.35:8457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/php8.php"] [unique_id "apK-QWjCPtor9NZ-byTrBQAABps"]
[Sat Aug 29 05:10:57.353058 2026] [security2:error] [pid 1041789:tid 1042030] [client 20.104.104.62:20810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/Sym.php"] [unique_id "apK-QYv3RhPI65jTFG4cMAAAA4E"]
[Sat Aug 29 05:10:57.386343 2026] [security2:error] [pid 1041789:tid 1042000] [client 52.139.37.240:31155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/f35.php"] [unique_id "apK-QYv3RhPI65jTFG4cMgAAA2M"]
[Sat Aug 29 05:10:57.389929 2026] [security2:error] [pid 1321:tid 1542] [client 158.23.184.117:1229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/wp-content/languages/themes/num.php"] [unique_id "apK-QWjCPtor9NZ-byTrBwAABnI"]
[Sat Aug 29 05:10:57.419257 2026] [core:error] [pid 11274:tid 11520] [client 20.100.175.163:6660] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:57.419274 2026] [core:error] [pid 11274:tid 11520] [client 20.100.175.163:6660] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:57.428517 2026] [security2:error] [pid 1041789:tid 1041988] [client 20.100.175.163:28568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/alfa.php"] [unique_id "apK-QYv3RhPI65jTFG4cMwAAA1c"]
[Sat Aug 29 05:10:57.435324 2026] [security2:error] [pid 1041789:tid 1041945] [client 158.23.147.79:59504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/lock.php"] [unique_id "apK-QYv3RhPI65jTFG4cOQAAAyw"]
[Sat Aug 29 05:10:57.440668 2026] [security2:error] [pid 11274:tid 11495] [client 158.158.54.35:31886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK-QWbX5DA3XO6e_qQqcgAAATw"]
[Sat Aug 29 05:10:57.479674 2026] [security2:error] [pid 1321:tid 1561] [client 20.104.104.62:61770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/1vbqo.php"] [unique_id "apK-QWjCPtor9NZ-byTrCwAABoQ"]
[Sat Aug 29 05:10:57.493117 2026] [security2:error] [pid 1321:tid 1532] [client 45.148.10.62:36330] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.yws.zpq.mybluehost.me"] [uri "/.env.backup"] [unique_id "apK-QWjCPtor9NZ-byTrDAAABmg"]
[Sat Aug 29 05:10:57.499053 2026] [security2:error] [pid 1041789:tid 1041942] [client 158.23.147.79:39118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/goods.php"] [unique_id "apK-QYv3RhPI65jTFG4cOwAAAyk"]
[Sat Aug 29 05:10:57.516990 2026] [security2:error] [pid 11274:tid 11473] [client 20.196.209.81:15381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/blog.php"] [unique_id "apK-QWbX5DA3XO6e_qQqcwAAASc"]
[Sat Aug 29 05:10:57.535792 2026] [security2:error] [pid 1321:tid 1515] [client 158.23.184.117:1253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/wp.php"] [unique_id "apK-QWjCPtor9NZ-byTrDQAABlc"]
[Sat Aug 29 05:10:57.561083 2026] [security2:error] [pid 11274:tid 11523] [client 20.104.49.130:60940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/reop3.php"] [unique_id "apK-QWbX5DA3XO6e_qQqdwAAAVg"]
[Sat Aug 29 05:10:57.567346 2026] [core:error] [pid 11274:tid 11568] [client 20.52.41.200:2781] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:57.567373 2026] [core:error] [pid 11274:tid 11568] [client 20.52.41.200:2781] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:57.587394 2026] [security2:error] [pid 11274:tid 11479] [client 52.139.37.240:31620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/file61.php"] [unique_id "apK-QWbX5DA3XO6e_qQqeQAAASw"]
[Sat Aug 29 05:10:57.593442 2026] [security2:error] [pid 11274:tid 11463] [client 158.158.54.35:12376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/cv.php"] [unique_id "apK-QWbX5DA3XO6e_qQqegAAAR0"]
[Sat Aug 29 05:10:57.594289 2026] [security2:error] [pid 1321:tid 1536] [client 213.202.253.4:55746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "timportlock.net"] [uri "/delpaths.php"] [unique_id "apK-QWjCPtor9NZ-byTrDgAABmw"], referer: www.google.com
[Sat Aug 29 05:10:57.627219 2026] [security2:error] [pid 1041789:tid 1042026] [client 74.248.24.12:36348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/222.php"] [unique_id "apK-QYv3RhPI65jTFG4cQAAAA30"]
[Sat Aug 29 05:10:57.641619 2026] [security2:error] [pid 1321:tid 1568] [client 45.148.10.62:36330] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.yws.zpq.mybluehost.me"] [uri "/.env.old"] [unique_id "apK-QWjCPtor9NZ-byTrDwAABos"]
[Sat Aug 29 05:10:57.663513 2026] [security2:error] [pid 11274:tid 11559] [client 20.104.104.62:52294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/h02ugyh.php"] [unique_id "apK-QWbX5DA3XO6e_qQqfAAAAXs"]
[Sat Aug 29 05:10:57.683495 2026] [security2:error] [pid 11274:tid 11555] [client 158.23.184.117:1081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/xmlrpc.php"] [unique_id "apK-QWbX5DA3XO6e_qQqfQAAAXc"]
[Sat Aug 29 05:10:57.760440 2026] [security2:error] [pid 11274:tid 11508] [client 68.155.159.216:64385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK-QWbX5DA3XO6e_qQqgwAAAUk"]
[Sat Aug 29 05:10:57.787131 2026] [security2:error] [pid 11274:tid 11503] [client 52.139.37.240:31079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/mah.php"] [unique_id "apK-QWbX5DA3XO6e_qQqhAAAAUQ"]
[Sat Aug 29 05:10:57.832329 2026] [security2:error] [pid 1041789:tid 1042023] [client 20.104.104.62:20818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/dom.php"] [unique_id "apK-QYv3RhPI65jTFG4cSQAAA3o"]
[Sat Aug 29 05:10:57.834948 2026] [security2:error] [pid 11274:tid 11532] [client 158.23.184.117:1235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/app.php"] [unique_id "apK-QWbX5DA3XO6e_qQqhwAAAWE"]
[Sat Aug 29 05:10:57.850435 2026] [security2:error] [pid 1041789:tid 1042018] [client 20.104.104.62:52333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/shelp.php"] [unique_id "apK-QYv3RhPI65jTFG4cSgAAA3U"]
[Sat Aug 29 05:10:57.865204 2026] [security2:error] [pid 1041789:tid 1041940] [client 157.245.138.73:46556] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "rfsolutions.tech"] [uri "/"] [unique_id "apK-QYv3RhPI65jTFG4cSwAAAyc"]
[Sat Aug 29 05:10:57.877277 2026] [security2:error] [pid 11274:tid 11566] [client 20.151.200.44:63785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/wp-gzone.php"] [unique_id "apK-QWbX5DA3XO6e_qQqiAAAAYI"]
[Sat Aug 29 05:10:57.878909 2026] [security2:error] [pid 11274:tid 11554] [client 158.158.54.35:20686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/xda.php"] [unique_id "apK-QWbX5DA3XO6e_qQqiwAAAXY"]
[Sat Aug 29 05:10:57.879065 2026] [security2:error] [pid 1041789:tid 1042051] [client 34.50.189.51:37898] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/internal/.env"] [unique_id "apK-QYv3RhPI65jTFG4cTAAAA5Y"]
[Sat Aug 29 05:10:57.879934 2026] [security2:error] [pid 11274:tid 11553] [client 34.50.189.51:37818] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/back/.env"] [unique_id "apK-QWbX5DA3XO6e_qQqigAAAXU"]
[Sat Aug 29 05:10:57.880663 2026] [security2:error] [pid 1041789:tid 1042046] [client 34.50.189.51:37914] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/node/.env"] [unique_id "apK-QYv3RhPI65jTFG4cTQAAA5E"]
[Sat Aug 29 05:10:57.881279 2026] [core:error] [pid 1321:tid 1582] [client 34.50.189.51:38062] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:57.881296 2026] [core:error] [pid 1321:tid 1582] [client 34.50.189.51:38062] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:57.882316 2026] [security2:error] [pid 11274:tid 11497] [client 34.50.189.51:37860] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/test/.env"] [unique_id "apK-QWbX5DA3XO6e_qQqjAAAAT4"]
[Sat Aug 29 05:10:57.882346 2026] [security2:error] [pid 11274:tid 11564] [client 34.50.189.51:37974] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/backend/api/.env"] [unique_id "apK-QWbX5DA3XO6e_qQqjQAAAYA"]
[Sat Aug 29 05:10:57.882371 2026] [security2:error] [pid 1041789:tid 1041960] [client 34.50.189.51:38048] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/apps/api/.env"] [unique_id "apK-QYv3RhPI65jTFG4cTwAAAzs"]
[Sat Aug 29 05:10:57.883807 2026] [security2:error] [pid 11274:tid 11517] [client 34.50.189.51:38002] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/src/api/.env"] [unique_id "apK-QWbX5DA3XO6e_qQqjgAAAVI"]
[Sat Aug 29 05:10:57.885957 2026] [security2:error] [pid 11274:tid 11491] [client 34.50.189.51:38082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.189.50.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "discocollective.kriveloff-associates.com"] [uri "/config/env.php"] [unique_id "apK-QWbX5DA3XO6e_qQqjwAAATg"]
[Sat Aug 29 05:10:57.886053 2026] [security2:error] [pid 11274:tid 11491] [client 34.50.189.51:38082] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "409"] [hostname "discocollective.kriveloff-associates.com"] [uri "/config/env.php"] [unique_id "apK-QWbX5DA3XO6e_qQqjwAAATg"]
[Sat Aug 29 05:10:57.886657 2026] [core:error] [pid 1041789:tid 1042014] [client 34.50.189.51:38040] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:57.886672 2026] [core:error] [pid 1041789:tid 1042014] [client 34.50.189.51:38040] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:57.886855 2026] [core:error] [pid 1321:tid 1503] [client 34.50.189.51:38058] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:57.886878 2026] [core:error] [pid 1321:tid 1503] [client 34.50.189.51:38058] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:57.887438 2026] [security2:error] [pid 11274:tid 11470] [client 34.50.189.51:37836] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/stage/.env"] [unique_id "apK-QWbX5DA3XO6e_qQqkgAAASQ"]
[Sat Aug 29 05:10:57.888082 2026] [security2:error] [pid 11274:tid 11511] [client 34.50.189.51:37946] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/app/api/.env"] [unique_id "apK-QWbX5DA3XO6e_qQqkQAAAUw"]
[Sat Aug 29 05:10:57.889524 2026] [security2:error] [pid 11274:tid 11498] [client 34.50.189.51:37848] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/development/.env"] [unique_id "apK-QWbX5DA3XO6e_qQqkwAAAT8"]
[Sat Aug 29 05:10:57.889612 2026] [security2:error] [pid 11274:tid 11498] [client 34.50.189.51:37848] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "discocollective.kriveloff-associates.com"] [uri "/development/.env"] [unique_id "apK-QWbX5DA3XO6e_qQqkwAAAT8"]
[Sat Aug 29 05:10:57.889615 2026] [security2:error] [pid 11274:tid 11540] [client 34.50.189.51:38096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/apps/backend/.env"] [unique_id "apK-QWbX5DA3XO6e_qQqlQAAAWk"]
[Sat Aug 29 05:10:57.889617 2026] [security2:error] [pid 11274:tid 11461] [client 34.50.189.51:37862] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/private/.env"] [unique_id "apK-QWbX5DA3XO6e_qQqlgAAARs"]
[Sat Aug 29 05:10:57.889619 2026] [security2:error] [pid 1041789:tid 1042019] [client 34.50.189.51:37878] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/services/.env"] [unique_id "apK-QYv3RhPI65jTFG4cUwAAA3Y"]
[Sat Aug 29 05:10:57.890888 2026] [core:error] [pid 11274:tid 11474] [client 34.50.189.51:37962] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:57.890902 2026] [core:error] [pid 11274:tid 11474] [client 34.50.189.51:37962] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:57.891334 2026] [core:error] [pid 11274:tid 11516] [client 34.50.189.51:37908] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:57.891346 2026] [core:error] [pid 11274:tid 11516] [client 34.50.189.51:37908] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:57.891396 2026] [core:error] [pid 11274:tid 11546] [client 34.50.189.51:37990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:57.891411 2026] [core:error] [pid 11274:tid 11546] [client 34.50.189.51:37990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:57.891420 2026] [security2:error] [pid 11274:tid 11485] [client 34.50.189.51:38108] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/database/.env"] [unique_id "apK-QWbX5DA3XO6e_qQqmwAAATI"]
[Sat Aug 29 05:10:57.891811 2026] [core:error] [pid 1041789:tid 1042005] [client 34.50.189.51:38036] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:57.891818 2026] [core:error] [pid 1041789:tid 1042005] [client 34.50.189.51:38036] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:57.891854 2026] [security2:error] [pid 1041789:tid 1041964] [client 34.50.189.51:37898] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/backend-api/.env"] [unique_id "apK-QYv3RhPI65jTFG4cVAAAAz8"]
[Sat Aug 29 05:10:57.892526 2026] [core:error] [pid 11274:tid 11561] [client 34.50.189.51:37996] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:57.892537 2026] [core:error] [pid 11274:tid 11561] [client 34.50.189.51:37996] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:57.892787 2026] [security2:error] [pid 11274:tid 11449] [client 34.50.189.51:37822] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/prod/.env"] [unique_id "apK-QWbX5DA3XO6e_qQqnQAAAQ8"]
[Sat Aug 29 05:10:57.893685 2026] [core:error] [pid 11274:tid 11492] [client 34.50.189.51:38028] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:57.893703 2026] [core:error] [pid 11274:tid 11492] [client 34.50.189.51:38028] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:57.894055 2026] [core:error] [pid 11274:tid 11487] [client 34.50.189.51:37930] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:57.894070 2026] [core:error] [pid 11274:tid 11487] [client 34.50.189.51:37930] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:57.894774 2026] [security2:error] [pid 11274:tid 11486] [client 34.50.189.51:37828] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/app/backend/.env"] [unique_id "apK-QWbX5DA3XO6e_qQqnwAAATM"]
[Sat Aug 29 05:10:57.895848 2026] [core:error] [pid 11274:tid 11499] [client 34.50.189.51:37888] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:57.895861 2026] [core:error] [pid 11274:tid 11499] [client 34.50.189.51:37888] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:57.897791 2026] [security2:error] [pid 11274:tid 11519] [client 34.50.189.51:38014] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "discocollective.kriveloff-associates.com"] [uri "/cgi-sys/404.html"] [unique_id "apK-QWbX5DA3XO6e_qQqoAAAAVQ"]
[Sat Aug 29 05:10:57.909700 2026] [security2:error] [pid 1041789:tid 1041956] [client 20.151.200.44:61593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/alog.php"] [unique_id "apK-QYv3RhPI65jTFG4cVQAAAzc"]
[Sat Aug 29 05:10:57.912521 2026] [security2:error] [pid 1321:tid 1548] [client 20.104.49.130:53709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/term.php"] [unique_id "apK-QWjCPtor9NZ-byTrFQAABnc"]
[Sat Aug 29 05:10:57.913998 2026] [security2:error] [pid 1321:tid 1601] [client 4.205.62.107:62953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/min.php"] [unique_id "apK-QWjCPtor9NZ-byTrFgAABqw"]
[Sat Aug 29 05:10:57.914256 2026] [http2:warn] [pid 1041789:tid 1042008] [client 57.141.14.71:47512] h2_stream(1041789-37-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:10:57.921331 2026] [security2:error] [pid 1041789:tid 1042001] [client 158.23.147.79:55267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/lock.php"] [unique_id "apK-QYv3RhPI65jTFG4cVgAAA2Q"]
[Sat Aug 29 05:10:57.923515 2026] [security2:error] [pid 11274:tid 11557] [client 20.100.175.163:30773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/403.php"] [unique_id "apK-QWbX5DA3XO6e_qQqogAAAXk"]
[Sat Aug 29 05:10:57.924102 2026] [core:error] [pid 11274:tid 11489] [client 20.100.175.163:27974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:57.924115 2026] [core:error] [pid 11274:tid 11489] [client 20.100.175.163:27974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:10:57.951272 2026] [security2:error] [pid 11274:tid 11527] [client 68.155.159.216:23364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-content/x/index.php"] [unique_id "apK-QWbX5DA3XO6e_qQqpQAAAVw"]
[Sat Aug 29 05:10:57.955694 2026] [security2:error] [pid 11274:tid 11500] [client 4.205.62.107:4931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/wp-content/plugin-install.php"] [unique_id "apK-QWbX5DA3XO6e_qQqpgAAAUE"]
[Sat Aug 29 05:10:57.968015 2026] [security2:error] [pid 1041789:tid 1042020] [client 158.158.54.35:8470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/install.php"] [unique_id "apK-QYv3RhPI65jTFG4cXAAAA3c"]
[Sat Aug 29 05:10:57.981163 2026] [security2:error] [pid 1041789:tid 1041968] [client 158.23.184.117:1226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/aaa.php"] [unique_id "apK-QYv3RhPI65jTFG4cXQAAA0M"]
[Sat Aug 29 05:10:57.981172 2026] [security2:error] [pid 1041789:tid 1042033] [client 52.139.37.240:31102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/mini.php"] [unique_id "apK-QYv3RhPI65jTFG4cXgAAA4Q"]
[Sat Aug 29 05:10:57.990252 2026] [security2:error] [pid 11274:tid 11538] [client 20.104.104.62:40026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/13ede.php"] [unique_id "apK-QWbX5DA3XO6e_qQqqgAAAWc"]
[Sat Aug 29 05:10:57.993661 2026] [security2:error] [pid 1321:tid 1499] [client 45.148.10.62:36330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.yws.zpq.mybluehost.me"] [uri "/.env.php.bak"] [unique_id "apK-QWjCPtor9NZ-byTrGQAABkc"]
[Sat Aug 29 05:10:57.999626 2026] [security2:error] [pid 11274:tid 11560] [client 158.23.147.79:63293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK-QWbX5DA3XO6e_qQqrQAAAXw"]
[Sat Aug 29 05:10:58.028050 2026] [security2:error] [pid 11274:tid 11444] [client 20.52.41.200:2781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-content/themes/about.php"] [unique_id "apK-QmbX5DA3XO6e_qQqsAAAAQo"]
[Sat Aug 29 05:10:58.056488 2026] [security2:error] [pid 1041789:tid 1041992] [client 4.205.62.107:60330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/ms.php"] [unique_id "apK-Qov3RhPI65jTFG4cYgAAA1s"]
[Sat Aug 29 05:10:58.056489 2026] [security2:error] [pid 1321:tid 1614] [client 158.158.54.35:8448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-content/packed.php"] [unique_id "apK-QmjCPtor9NZ-byTrGwAABrk"]
[Sat Aug 29 05:10:58.085440 2026] [security2:error] [pid 11274:tid 11512] [client 20.196.209.81:16243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/bypass.php"] [unique_id "apK-QmbX5DA3XO6e_qQqswAAAU0"]
[Sat Aug 29 05:10:58.133580 2026] [security2:error] [pid 1041789:tid 1042035] [client 20.104.104.62:20708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/v4ga.php"] [unique_id "apK-Qov3RhPI65jTFG4cYwAAA4Y"]
[Sat Aug 29 05:10:58.149987 2026] [security2:error] [pid 1321:tid 1510] [client 74.248.24.12:21259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/mini.php"] [unique_id "apK-QmjCPtor9NZ-byTrHwAABlI"]
[Sat Aug 29 05:10:58.158970 2026] [security2:error] [pid 11274:tid 11544] [client 20.104.104.62:52276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/k8.php"] [unique_id "apK-QmbX5DA3XO6e_qQqtAAAAWw"]
[Sat Aug 29 05:10:58.173713 2026] [security2:error] [pid 11274:tid 11509] [client 4.205.62.107:64261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/aws-credentials.php"] [unique_id "apK-QmbX5DA3XO6e_qQqtgAAAUo"]
[Sat Aug 29 05:10:58.181729 2026] [security2:error] [pid 1041789:tid 1041961] [client 52.139.37.240:30803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/v.php"] [unique_id "apK-Qov3RhPI65jTFG4caAAAAzw"]
[Sat Aug 29 05:10:58.221425 2026] [security2:error] [pid 1041789:tid 1041948] [client 158.23.147.79:62638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/about.php"] [unique_id "apK-Qov3RhPI65jTFG4cagAAAy8"]
[Sat Aug 29 05:10:58.222776 2026] [security2:error] [pid 1321:tid 1522] [client 158.23.184.117:1504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/hehe.php"] [unique_id "apK-QmjCPtor9NZ-byTrIAAABl4"]
[Sat Aug 29 05:10:58.252597 2026] [security2:error] [pid 11274:tid 11462] [client 20.104.104.62:48511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/hack.php"] [unique_id "apK-QmbX5DA3XO6e_qQquQAAARw"]
[Sat Aug 29 05:10:58.281208 2026] [security2:error] [pid 11274:tid 11507] [client 158.23.147.79:14210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-content/x/index.php"] [unique_id "apK-QmbX5DA3XO6e_qQqvQAAAUg"]
[Sat Aug 29 05:10:58.297913 2026] [security2:error] [pid 1041789:tid 1041975] [client 158.23.147.79:24393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/dropdown.php"] [unique_id "apK-Qov3RhPI65jTFG4cbQAAA0o"]
[Sat Aug 29 05:10:58.298988 2026] [security2:error] [pid 1321:tid 1549] [client 20.104.104.62:52271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/alog.php"] [unique_id "apK-QmjCPtor9NZ-byTrIQAABng"]
[Sat Aug 29 05:10:58.327540 2026] [security2:error] [pid 11274:tid 11456] [client 158.158.54.35:31912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/theme.php"] [unique_id "apK-QmbX5DA3XO6e_qQqwAAAARY"]
[Sat Aug 29 05:10:58.345521 2026] [security2:error] [pid 1041789:tid 1042023] [client 4.205.62.107:63879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/php-details.php"] [unique_id "apK-Qov3RhPI65jTFG4ccgAAA3o"]
[Sat Aug 29 05:10:58.346457 2026] [security2:error] [pid 1321:tid 1591] [client 4.205.62.107:6518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/phina.php"] [unique_id "apK-QmjCPtor9NZ-byTrJAAABqI"]
[Sat Aug 29 05:10:58.368883 2026] [security2:error] [pid 11274:tid 11548] [client 106.216.114.82:63392] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "utahtsa.com"] [uri "/xmlrpc.php"] [unique_id "apK-QmbX5DA3XO6e_qQqugAAAXA"]
[Sat Aug 29 05:10:58.371112 2026] [security2:error] [pid 1321:tid 1513] [client 158.23.184.117:1266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/wp-includes/PHPMailer.php"] [unique_id "apK-QmjCPtor9NZ-byTrJQAABlU"]
[Sat Aug 29 05:10:58.378945 2026] [security2:error] [pid 11274:tid 11547] [client 52.139.37.240:31532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK-QmbX5DA3XO6e_qQqwQAAAW8"]
[Sat Aug 29 05:10:58.388862 2026] [security2:error] [pid 11274:tid 11553] [client 20.104.104.62:20680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/s3c.php"] [unique_id "apK-QmbX5DA3XO6e_qQqwgAAAXU"]
[Sat Aug 29 05:10:58.405910 2026] [security2:error] [pid 1041789:tid 1041960] [client 74.7.230.17:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/___proxy_subdomain_cpanel/404.shtml"] [unique_id "apK-Qov3RhPI65jTFG4cdQAAAzs"]
[Sat Aug 29 05:10:58.408577 2026] [security2:error] [pid 1041789:tid 1041943] [client 74.7.230.17:60222] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "cpanel.luxuryweddingphotographer.com"] [uri "/___proxy_subdomain_cpanel/robots.txt"] [unique_id "apK-Qov3RhPI65jTFG4ccwADKgk"]
[Sat Aug 29 05:10:58.414064 2026] [security2:error] [pid 11274:tid 11565] [client 20.100.175.163:27982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/w.php"] [unique_id "apK-QmbX5DA3XO6e_qQqxAAAAYE"]
[Sat Aug 29 05:10:58.415092 2026] [security2:error] [pid 11274:tid 11559] [client 20.100.175.163:7942] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.rm64.com"] [uri "/1.php"] [unique_id "apK-QmbX5DA3XO6e_qQqxQAAAXs"]
[Sat Aug 29 05:10:58.415180 2026] [security2:error] [pid 11274:tid 11559] [client 20.100.175.163:7942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/1.php"] [unique_id "apK-QmbX5DA3XO6e_qQqxQAAAXs"]
[Sat Aug 29 05:10:58.416768 2026] [security2:error] [pid 1321:tid 1562] [client 20.151.200.44:23600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/adin.php"] [unique_id "apK-QmjCPtor9NZ-byTrKAAABoU"]
[Sat Aug 29 05:10:58.465751 2026] [security2:error] [pid 1041789:tid 1041947] [client 111.235.68.106:13231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK-Qov3RhPI65jTFG4cdwAAAy4"]
[Sat Aug 29 05:10:58.465853 2026] [security2:error] [pid 1041789:tid 1041947] [client 111.235.68.106:13231] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK-Qov3RhPI65jTFG4cdwAAAy4"]
[Sat Aug 29 05:10:58.482150 2026] [security2:error] [pid 1321:tid 1605] [client 20.52.41.200:2679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK-QmjCPtor9NZ-byTrKgAABrA"]
[Sat Aug 29 05:10:58.483152 2026] [security2:error] [pid 1041789:tid 1042005] [client 20.104.104.62:42094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/adin.php"] [unique_id "apK-Qov3RhPI65jTFG4ceAAAA2g"]
[Sat Aug 29 05:10:58.489244 2026] [security2:error] [pid 11274:tid 11554] [client 158.158.54.35:29091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/ioxi-o.php"] [unique_id "apK-QmbX5DA3XO6e_qQqyQAAAXY"]
[Sat Aug 29 05:10:58.513836 2026] [security2:error] [pid 1041789:tid 1041953] [client 45.148.10.62:36334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.yws.zpq.mybluehost.me"] [uri "/.env.php"] [unique_id "apK-Qov3RhPI65jTFG4cfQAAAzQ"]
[Sat Aug 29 05:10:58.515532 2026] [security2:error] [pid 1041789:tid 1042051] [client 20.196.209.81:16226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/extractable-loader-head.php"] [unique_id "apK-Qov3RhPI65jTFG4cfgAAA5Y"]
[Sat Aug 29 05:10:58.515537 2026] [security2:error] [pid 1321:tid 1573] [client 158.23.184.117:1254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/wp-content/upgrade/alfanew.php7"] [unique_id "apK-QmjCPtor9NZ-byTrKwAABpA"]
[Sat Aug 29 05:10:58.526546 2026] [security2:error] [pid 1041789:tid 1041983] [client 68.155.159.216:33672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK-Qov3RhPI65jTFG4cfwAAA1I"]
[Sat Aug 29 05:10:58.543225 2026] [security2:error] [pid 11274:tid 11487] [client 158.23.147.79:44536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/index/function.php"] [unique_id "apK-QmbX5DA3XO6e_qQqywAAATQ"]
[Sat Aug 29 05:10:58.545491 2026] [security2:error] [pid 1321:tid 1537] [client 158.158.54.35:14907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-admin/js/index.php"] [unique_id "apK-QmjCPtor9NZ-byTrLAAABm0"]
[Sat Aug 29 05:10:58.577953 2026] [security2:error] [pid 11274:tid 11546] [client 52.139.37.240:31076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "apK-QmbX5DA3XO6e_qQqzAAAAW4"]
[Sat Aug 29 05:10:58.590327 2026] [security2:error] [pid 11274:tid 11519] [client 158.23.147.79:5855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK-QmbX5DA3XO6e_qQqzQAAAVQ"]
[Sat Aug 29 05:10:58.596562 2026] [security2:error] [pid 11274:tid 11493] [client 20.104.104.62:47564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/madspotshell.php"] [unique_id "apK-QmbX5DA3XO6e_qQqzgAAATo"]
[Sat Aug 29 05:10:58.629809 2026] [security2:error] [pid 1321:tid 1592] [client 20.104.49.130:63586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/ws85.php"] [unique_id "apK-QmjCPtor9NZ-byTrLQAABqM"]
[Sat Aug 29 05:10:58.634243 2026] [security2:error] [pid 11274:tid 11495] [client 20.104.104.62:42054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/sf9.php"] [unique_id "apK-QmbX5DA3XO6e_qQqzwAAATw"]
[Sat Aug 29 05:10:58.653036 2026] [security2:error] [pid 11274:tid 11550] [client 34.169.171.101:32548] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/back/.env"] [unique_id "apK-QmbX5DA3XO6e_qQq0QAAAXI"]
[Sat Aug 29 05:10:58.653179 2026] [security2:error] [pid 1041789:tid 1041954] [client 34.169.171.101:32574] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/backend-api/.env"] [unique_id "apK-Qov3RhPI65jTFG4cgwAAAzU"]
[Sat Aug 29 05:10:58.653211 2026] [security2:error] [pid 11274:tid 11490] [client 34.169.171.101:32626] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/test/.env"] [unique_id "apK-QmbX5DA3XO6e_qQq0gAAATc"]
[Sat Aug 29 05:10:58.653560 2026] [security2:error] [pid 11274:tid 11473] [client 68.155.159.216:61274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-content/themes/too.php"] [unique_id "apK-QmbX5DA3XO6e_qQq0wAAASc"]
[Sat Aug 29 05:10:58.654133 2026] [security2:error] [pid 1041789:tid 1041963] [client 34.169.171.101:32590] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/development/.env"] [unique_id "apK-Qov3RhPI65jTFG4chAAAAz4"]
[Sat Aug 29 05:10:58.654918 2026] [security2:error] [pid 11274:tid 11481] [client 34.169.171.101:32622] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/stage/.env"] [unique_id "apK-QmbX5DA3XO6e_qQq1AAAAS4"]
[Sat Aug 29 05:10:58.655764 2026] [security2:error] [pid 11274:tid 11557] [client 34.169.171.101:32630] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/node/.env"] [unique_id "apK-QmbX5DA3XO6e_qQq1QAAAXk"]
[Sat Aug 29 05:10:58.656552 2026] [security2:error] [pid 1041789:tid 1041991] [client 34.169.171.101:32644] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/services/.env"] [unique_id "apK-Qov3RhPI65jTFG4chQAAA1o"]
[Sat Aug 29 05:10:58.656749 2026] [security2:error] [pid 1321:tid 1606] [client 34.169.171.101:32702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/backend/api/.env"] [unique_id "apK-QmjCPtor9NZ-byTrLwAABrE"]
[Sat Aug 29 05:10:58.657313 2026] [security2:error] [pid 1041789:tid 1042029] [client 34.169.171.101:32664] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/internal/.env"] [unique_id "apK-Qov3RhPI65jTFG4chwAAA4A"]
[Sat Aug 29 05:10:58.657597 2026] [security2:error] [pid 11274:tid 11489] [client 34.169.171.101:32606] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/prod/.env"] [unique_id "apK-QmbX5DA3XO6e_qQq1gAAATY"]
[Sat Aug 29 05:10:58.660156 2026] [security2:error] [pid 1041789:tid 1041933] [client 158.23.184.117:1068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/admin/alfa-rex.php"] [unique_id "apK-Qov3RhPI65jTFG4ciQAAAyA"]
[Sat Aug 29 05:10:58.661193 2026] [security2:error] [pid 1041789:tid 1041992] [client 34.169.171.101:32744] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-Qov3RhPI65jTFG4chgAAA1s"]
[Sat Aug 29 05:10:58.661415 2026] [security2:error] [pid 11274:tid 11464] [client 34.169.171.101:32658] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/private/.env"] [unique_id "apK-QmbX5DA3XO6e_qQq2QAAAR4"]
[Sat Aug 29 05:10:58.661802 2026] [security2:error] [pid 11274:tid 11468] [client 34.169.171.101:32720] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/src/api/.env"] [unique_id "apK-QmbX5DA3XO6e_qQq2gAAASI"]
[Sat Aug 29 05:10:58.662161 2026] [security2:error] [pid 11274:tid 11549] [client 34.169.171.101:32688] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-QmbX5DA3XO6e_qQq1wAAAXE"]
[Sat Aug 29 05:10:58.663758 2026] [security2:error] [pid 1041789:tid 1042050] [client 34.169.171.101:32786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.171.169.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "forensicengineernj.com"] [uri "/config/env.php"] [unique_id "apK-Qov3RhPI65jTFG4ciwAAA5U"]
[Sat Aug 29 05:10:58.663903 2026] [security2:error] [pid 1041789:tid 1042050] [client 34.169.171.101:32786] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "409"] [hostname "forensicengineernj.com"] [uri "/config/env.php"] [unique_id "apK-Qov3RhPI65jTFG4ciwAAA5U"]
[Sat Aug 29 05:10:58.664242 2026] [security2:error] [pid 1041789:tid 1042015] [client 34.169.171.101:32784] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-Qov3RhPI65jTFG4cigAAA3I"]
[Sat Aug 29 05:10:58.667990 2026] [security2:error] [pid 11274:tid 11538] [client 34.169.171.101:32770] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/apps/backend/.env"] [unique_id "apK-QmbX5DA3XO6e_qQq4AAAAWc"]
[Sat Aug 29 05:10:58.667993 2026] [security2:error] [pid 11274:tid 11488] [client 34.169.171.101:32668] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/app/backend/.env"] [unique_id "apK-QmbX5DA3XO6e_qQq4QAAATU"]
[Sat Aug 29 05:10:58.668285 2026] [security2:error] [pid 11274:tid 11502] [client 34.169.171.101:32762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/apps/api/.env"] [unique_id "apK-QmbX5DA3XO6e_qQq3wAAAUM"]
[Sat Aug 29 05:10:58.668295 2026] [security2:error] [pid 11274:tid 11563] [client 34.169.171.101:32804] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/database/.env"] [unique_id "apK-QmbX5DA3XO6e_qQq3AAAAX8"]
[Sat Aug 29 05:10:58.668372 2026] [security2:error] [pid 11274:tid 11563] [client 34.169.171.101:32804] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "forensicengineernj.com"] [uri "/database/.env"] [unique_id "apK-QmbX5DA3XO6e_qQq3AAAAX8"]
[Sat Aug 29 05:10:58.668849 2026] [security2:error] [pid 11274:tid 11560] [client 34.169.171.101:32676] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/app/api/.env"] [unique_id "apK-QmbX5DA3XO6e_qQq4gAAAXw"]
[Sat Aug 29 05:10:58.669145 2026] [security2:error] [pid 11274:tid 11527] [client 34.169.171.101:32730] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-QmbX5DA3XO6e_qQq2wAAAVw"]
[Sat Aug 29 05:10:58.686382 2026] [security2:error] [pid 11274:tid 11516] [client 74.248.24.12:24930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/aa.php"] [unique_id "apK-QmbX5DA3XO6e_qQq5gAAAVE"]
[Sat Aug 29 05:10:58.698746 2026] [security2:error] [pid 1041789:tid 1042000] [client 34.169.171.101:32744] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-Qov3RhPI65jTFG4cjAAAA2M"], referer: https://forensicengineernj.com/frontend/.env.local
[Sat Aug 29 05:10:58.698791 2026] [security2:error] [pid 11274:tid 11450] [client 34.169.171.101:32688] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-QmbX5DA3XO6e_qQq6AAAARA"], referer: https://forensicengineernj.com/backend/.env.production
[Sat Aug 29 05:10:58.701107 2026] [security2:error] [pid 1041789:tid 1041945] [client 34.169.171.101:32784] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-Qov3RhPI65jTFG4cjQAAAyw"], referer: https://forensicengineernj.com/config/env.json
[Sat Aug 29 05:10:58.704936 2026] [security2:error] [pid 11274:tid 11523] [client 34.169.171.101:32730] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-QmbX5DA3XO6e_qQq6gAAAVg"], referer: https://forensicengineernj.com/server/.env.production
[Sat Aug 29 05:10:58.737772 2026] [security2:error] [pid 1041789:tid 1042043] [client 68.155.159.216:14288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/index/function.php"] [unique_id "apK-Qov3RhPI65jTFG4ckQAAA44"]
[Sat Aug 29 05:10:58.776259 2026] [security2:error] [pid 1041789:tid 1041932] [client 158.158.54.35:31880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/classwithtostring.php"] [unique_id "apK-Qov3RhPI65jTFG4ckgAAAx8"]
[Sat Aug 29 05:10:58.785003 2026] [security2:error] [pid 11274:tid 11446] [client 68.155.159.216:64494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK-QmbX5DA3XO6e_qQq8QAAAQw"]
[Sat Aug 29 05:10:58.805682 2026] [security2:error] [pid 11274:tid 11513] [client 20.104.104.62:52231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/lte7.php"] [unique_id "apK-QmbX5DA3XO6e_qQq8gAAAU4"]
[Sat Aug 29 05:10:58.812820 2026] [security2:error] [pid 11274:tid 11455] [client 158.23.184.117:1230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/wp-content/export.php"] [unique_id "apK-QmbX5DA3XO6e_qQq8wAAARU"]
[Sat Aug 29 05:10:58.865745 2026] [security2:error] [pid 1041789:tid 1041944] [client 68.155.159.216:63196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/images/index.php"] [unique_id "apK-Qov3RhPI65jTFG4clAAAAys"]
[Sat Aug 29 05:10:58.898306 2026] [security2:error] [pid 1041789:tid 1042006] [client 20.104.104.62:64722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/sa.php"] [unique_id "apK-Qov3RhPI65jTFG4clQAAA2k"]
[Sat Aug 29 05:10:58.911709 2026] [security2:error] [pid 11274:tid 11552] [client 20.100.175.163:4844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/ahax.php"] [unique_id "apK-QmbX5DA3XO6e_qQq9QAAAXQ"]
[Sat Aug 29 05:10:58.920392 2026] [security2:error] [pid 11274:tid 11459] [client 20.196.209.81:16228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/defaults.php"] [unique_id "apK-QmbX5DA3XO6e_qQq9gAAARk"]
[Sat Aug 29 05:10:58.938987 2026] [security2:error] [pid 11274:tid 11448] [client 20.52.41.200:2863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-admin/index.php"] [unique_id "apK-QmbX5DA3XO6e_qQq9wAAAQ4"]
[Sat Aug 29 05:10:58.967943 2026] [security2:error] [pid 11274:tid 11534] [client 114.119.132.153:34459] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.classiclightingusa.com"] [uri "/catalog/index.php/cPath/4/sort/3a/action/buy_now/products_id/903/osCsid/5ec92ac05386ca76e203ab8b299e337f"] [unique_id "apK-QmbX5DA3XO6e_qQq-AAAAWM"], referer: http://www.classiclightingusa.com/catalog/index.php/cPath/4/osCsid/5ec92ac05386ca76e203ab8b299e337f
[Sat Aug 29 05:10:58.969763 2026] [security2:error] [pid 11274:tid 11530] [client 158.158.54.35:22998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/xmlrpc.php"] [unique_id "apK-QmbX5DA3XO6e_qQq-QAAAV8"]
[Sat Aug 29 05:10:58.975600 2026] [security2:error] [pid 11274:tid 11494] [client 20.104.104.62:61769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/tanjiro.php"] [unique_id "apK-QmbX5DA3XO6e_qQq-gAAATs"]
[Sat Aug 29 05:10:58.987952 2026] [security2:error] [pid 11274:tid 11525] [client 20.151.200.44:63590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/sf9.php"] [unique_id "apK-QmbX5DA3XO6e_qQq-wAAAVo"]
[Sat Aug 29 05:10:58.989458 2026] [security2:error] [pid 11274:tid 11510] [client 158.158.54.35:8460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/core.php"] [unique_id "apK-QmbX5DA3XO6e_qQq_AAAAUs"]
[Sat Aug 29 05:10:59.006001 2026] [security2:error] [pid 1041789:tid 1041976] [client 158.23.184.117:1045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/wp-content/plugins/revslider/admin.php"] [unique_id "apK-Q4v3RhPI65jTFG4cmAAAA0s"]
[Sat Aug 29 05:10:59.006949 2026] [security2:error] [pid 11274:tid 11548] [client 158.23.147.79:43352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK-Q2bX5DA3XO6e_qQq_gAAAXA"]
[Sat Aug 29 05:10:59.038924 2026] [security2:error] [pid 11274:tid 11469] [client 68.155.159.216:5954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wzy.php"] [unique_id "apK-Q2bX5DA3XO6e_qQrAQAAASM"]
[Sat Aug 29 05:10:59.047057 2026] [security2:error] [pid 11274:tid 11471] [client 4.205.62.107:62966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/saiga.php"] [unique_id "apK-Q2bX5DA3XO6e_qQrAgAAASU"]
[Sat Aug 29 05:10:59.064656 2026] [security2:error] [pid 11274:tid 11570] [client 68.155.159.216:23464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK-Q2bX5DA3XO6e_qQrAwAAAYY"]
[Sat Aug 29 05:10:59.089931 2026] [security2:error] [pid 11274:tid 11559] [client 20.104.49.130:60966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/df.php"] [unique_id "apK-Q2bX5DA3XO6e_qQrBQAAAXs"]
[Sat Aug 29 05:10:59.094241 2026] [security2:error] [pid 11274:tid 11511] [client 4.205.62.107:51415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/paypal.php"] [unique_id "apK-Q2bX5DA3XO6e_qQrBgAAAUw"]
[Sat Aug 29 05:10:59.095637 2026] [security2:error] [pid 1041789:tid 1042057] [client 20.100.175.163:33554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/s.php"] [unique_id "apK-Q4v3RhPI65jTFG4cnAAAA5w"]
[Sat Aug 29 05:10:59.112285 2026] [security2:error] [pid 11274:tid 11554] [client 20.151.200.44:60193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/ztv.php"] [unique_id "apK-Q2bX5DA3XO6e_qQrBwAAAXY"]
[Sat Aug 29 05:10:59.117412 2026] [security2:error] [pid 11274:tid 11561] [client 158.23.147.79:53985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-admin.php"] [unique_id "apK-Q2bX5DA3XO6e_qQrCAAAAX0"]
[Sat Aug 29 05:10:59.126591 2026] [security2:error] [pid 1041789:tid 1042018] [client 20.104.104.62:52330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/Rk41.php"] [unique_id "apK-Q4v3RhPI65jTFG4cnQAAA3U"]
[Sat Aug 29 05:10:59.135394 2026] [security2:error] [pid 11274:tid 11486] [client 20.151.200.44:21790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/str.php"] [unique_id "apK-Q2bX5DA3XO6e_qQrCgAAATM"]
[Sat Aug 29 05:10:59.147160 2026] [security2:error] [pid 11274:tid 11540] [client 158.23.184.117:1047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/wp-content/images/uploads/admin.php"] [unique_id "apK-Q2bX5DA3XO6e_qQrCwAAAWk"]
[Sat Aug 29 05:10:59.163027 2026] [security2:error] [pid 1041789:tid 1041985] [client 93.123.109.165:10734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "midayins.com"] [uri "/index.php"] [unique_id "apK-Q4v3RhPI65jTFG4cngAAA1Q"]
[Sat Aug 29 05:10:59.171963 2026] [security2:error] [pid 1321:tid 1594] [client 60.243.207.176:63114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK-Q2jCPtor9NZ-byTrOAAABqU"]
[Sat Aug 29 05:10:59.172027 2026] [security2:error] [pid 1321:tid 1594] [client 60.243.207.176:63114] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK-Q2jCPtor9NZ-byTrOAAABqU"]
[Sat Aug 29 05:10:59.190468 2026] [security2:error] [pid 11274:tid 11495] [client 4.205.62.107:60292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/fucku.php"] [unique_id "apK-Q2bX5DA3XO6e_qQrDQAAATw"]
[Sat Aug 29 05:10:59.195757 2026] [security2:error] [pid 11274:tid 11482] [client 74.248.24.12:19160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/c.php"] [unique_id "apK-Q2bX5DA3XO6e_qQrDgAAAS8"]
[Sat Aug 29 05:10:59.204069 2026] [security2:error] [pid 11274:tid 11473] [client 20.104.104.62:20837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/noname.php"] [unique_id "apK-Q2bX5DA3XO6e_qQrEAAAASc"]
[Sat Aug 29 05:10:59.236548 2026] [security2:error] [pid 11274:tid 11564] [client 158.158.54.35:20686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/news.php"] [unique_id "apK-Q2bX5DA3XO6e_qQrEwAAAYA"]
[Sat Aug 29 05:10:59.259170 2026] [security2:error] [pid 1041789:tid 1042005] [client 20.104.104.62:52327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/7logs.php"] [unique_id "apK-Q4v3RhPI65jTFG4cpAAAA2g"]
[Sat Aug 29 05:10:59.287724 2026] [security2:error] [pid 11274:tid 11475] [client 158.23.184.117:1497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/tools.php"] [unique_id "apK-Q2bX5DA3XO6e_qQrFAAAASk"]
[Sat Aug 29 05:10:59.310747 2026] [security2:error] [pid 1041789:tid 1041962] [client 4.205.62.107:64270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/4563.php"] [unique_id "apK-Q4v3RhPI65jTFG4cpgAAAz0"]
[Sat Aug 29 05:10:59.325175 2026] [security2:error] [pid 1041789:tid 1041981] [client 158.23.147.79:38783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK-Q4v3RhPI65jTFG4cpwAAA1A"]
[Sat Aug 29 05:10:59.343450 2026] [security2:error] [pid 11274:tid 11545] [client 185.104.184.230:53122] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.bap.gcl.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "apK-Q2bX5DA3XO6e_qQrFwAAAW0"]
[Sat Aug 29 05:10:59.382898 2026] [security2:error] [pid 11274:tid 11567] [client 20.52.41.200:2822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/radio.php"] [unique_id "apK-Q2bX5DA3XO6e_qQrGQAAAYM"]
[Sat Aug 29 05:10:59.393464 2026] [security2:error] [pid 11274:tid 11556] [client 20.100.175.163:8356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/shell.php"] [unique_id "apK-Q2bX5DA3XO6e_qQrGgAAAXg"]
[Sat Aug 29 05:10:59.400385 2026] [security2:error] [pid 11274:tid 11526] [client 20.104.104.62:40008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/sf.php"] [unique_id "apK-Q2bX5DA3XO6e_qQrGwAAAVs"]
[Sat Aug 29 05:10:59.420130 2026] [security2:error] [pid 11274:tid 11462] [client 158.23.147.79:24555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/.well-known/index.php"] [unique_id "apK-Q2bX5DA3XO6e_qQrHAAAARw"]
[Sat Aug 29 05:10:59.432944 2026] [security2:error] [pid 1321:tid 1497] [client 158.23.184.117:1042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/wp-content/uploads/my.php"] [unique_id "apK-Q2jCPtor9NZ-byTrOgAABkU"]
[Sat Aug 29 05:10:59.437508 2026] [security2:error] [pid 11274:tid 11500] [client 158.158.54.35:10120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/admin/function.php"] [unique_id "apK-Q2bX5DA3XO6e_qQrHQAAAUE"]
[Sat Aug 29 05:10:59.463386 2026] [security2:error] [pid 1041789:tid 1041971] [client 158.158.54.35:14911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/filemanager.php"] [unique_id "apK-Q4v3RhPI65jTFG4cqgAAA0Y"]
[Sat Aug 29 05:10:59.482929 2026] [security2:error] [pid 1321:tid 1588] [client 4.205.62.107:63991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/routes.php"] [unique_id "apK-Q2jCPtor9NZ-byTrOwAABp8"]
[Sat Aug 29 05:10:59.485490 2026] [security2:error] [pid 11274:tid 11508] [client 4.205.62.107:6308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/koiy.php"] [unique_id "apK-Q2bX5DA3XO6e_qQrHgAAAUk"]
[Sat Aug 29 05:10:59.501657 2026] [security2:error] [pid 11274:tid 11445] [client 20.104.104.62:20642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/kntol.php"] [unique_id "apK-Q2bX5DA3XO6e_qQrIAAAAQs"]
[Sat Aug 29 05:10:59.531869 2026] [security2:error] [pid 11274:tid 11446] [client 20.196.209.81:16764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/post.php"] [unique_id "apK-Q2bX5DA3XO6e_qQrIQAAAQw"]
[Sat Aug 29 05:10:59.549259 2026] [security2:error] [pid 1041789:tid 1042029] [client 20.104.104.62:61810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/super.php"] [unique_id "apK-Q4v3RhPI65jTFG4crAAAA4A"]
[Sat Aug 29 05:10:59.549840 2026] [security2:error] [pid 11274:tid 11530] [client 68.155.159.216:30651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/nf_tracking.php"] [unique_id "apK-Q2bX5DA3XO6e_qQrIwAAAV8"]
[Sat Aug 29 05:10:59.574458 2026] [security2:error] [pid 1041789:tid 1041994] [client 20.100.175.163:13418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/test1.php"] [unique_id "apK-Q4v3RhPI65jTFG4crQAAA10"]
[Sat Aug 29 05:10:59.575219 2026] [security2:error] [pid 11274:tid 11459] [client 158.23.184.117:1256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/wp-includes/themes/uploads/config.php"] [unique_id "apK-Q2bX5DA3XO6e_qQrJAAAARk"]
[Sat Aug 29 05:10:59.605134 2026] [security2:error] [pid 11274:tid 11516] [client 52.139.37.240:31147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-Q2bX5DA3XO6e_qQrJQAAAVE"]
[Sat Aug 29 05:10:59.633337 2026] [security2:error] [pid 1041789:tid 1041988] [client 68.155.159.216:33604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-admin/network/index.php"] [unique_id "apK-Q4v3RhPI65jTFG4crwAAA1c"]
[Sat Aug 29 05:10:59.650755 2026] [security2:error] [pid 11274:tid 11471] [client 158.23.147.79:28080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/.well-known/content.php"] [unique_id "apK-Q2bX5DA3XO6e_qQrKAAAASU"]
[Sat Aug 29 05:10:59.661438 2026] [security2:error] [pid 11274:tid 11506] [client 20.104.104.62:48702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/155.php"] [unique_id "apK-Q2bX5DA3XO6e_qQrKwAAAUc"]
[Sat Aug 29 05:10:59.666319 2026] [security2:error] [pid 11274:tid 11570] [client 185.104.184.230:53126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.184.104.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "cpanel.bap.gcl.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "apK-Q2bX5DA3XO6e_qQrKgAAAYY"]
[Sat Aug 29 05:10:59.680665 2026] [security2:error] [pid 11274:tid 11448] [client 158.158.54.35:21704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/about/function.php"] [unique_id "apK-Q2bX5DA3XO6e_qQrLAAAAQ4"]
[Sat Aug 29 05:10:59.694664 2026] [security2:error] [pid 11274:tid 11485] [client 202.71.25.11:62736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.25.71.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK-Q2bX5DA3XO6e_qQrLQAAATI"]
[Sat Aug 29 05:10:59.694772 2026] [security2:error] [pid 11274:tid 11485] [client 202.71.25.11:62736] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK-Q2bX5DA3XO6e_qQrLQAAATI"]
[Sat Aug 29 05:10:59.699263 2026] [security2:error] [pid 1041789:tid 1042028] [client 158.23.147.79:5859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/ans.php"] [unique_id "apK-Q4v3RhPI65jTFG4csQAAA38"]
[Sat Aug 29 05:10:59.703949 2026] [security2:error] [pid 1041789:tid 1042043] [client 20.104.104.62:40005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/lufix1.php"] [unique_id "apK-Q4v3RhPI65jTFG4csgAAA44"]
[Sat Aug 29 05:10:59.719321 2026] [security2:error] [pid 11274:tid 11517] [client 158.23.184.117:1259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/av.php"] [unique_id "apK-Q2bX5DA3XO6e_qQrLgAAAVI"]
[Sat Aug 29 05:10:59.721855 2026] [security2:error] [pid 1321:tid 1524] [client 20.104.49.130:57499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/static.php"] [unique_id "apK-Q2jCPtor9NZ-byTrPgAABmA"]
[Sat Aug 29 05:10:59.732719 2026] [security2:error] [pid 1321:tid 1507] [client 74.248.24.12:24932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/f.php"] [unique_id "apK-Q2jCPtor9NZ-byTrPwAABk8"]
[Sat Aug 29 05:10:59.752968 2026] [security2:error] [pid 1041789:tid 1042047] [client 68.155.159.216:56534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/radio.php"] [unique_id "apK-Q4v3RhPI65jTFG4cswAAA5I"]
[Sat Aug 29 05:10:59.792706 2026] [security2:error] [pid 1321:tid 1590] [client 61.9.8.95:9618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 95.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK-Q2jCPtor9NZ-byTrQQAABqE"]
[Sat Aug 29 05:10:59.792789 2026] [security2:error] [pid 1321:tid 1590] [client 61.9.8.95:9618] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK-Q2jCPtor9NZ-byTrQQAABqE"]
[Sat Aug 29 05:10:59.794810 2026] [fcgid:warn] [pid 1041789:tid 1041942] (70014)End of file found: [client 199.45.154.53:54850] mod_fcgid: can't get data from http client
[Sat Aug 29 05:10:59.803139 2026] [security2:error] [pid 11274:tid 11449] [client 45.148.10.62:36338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.yws.zpq.mybluehost.me"] [uri "/wp-config.php"] [unique_id "apK-Q2bX5DA3XO6e_qQrLwAAAQ8"]
[Sat Aug 29 05:10:59.806052 2026] [security2:error] [pid 11274:tid 11487] [client 68.155.159.216:2046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apK-Q2bX5DA3XO6e_qQrMAAAATQ"]
[Sat Aug 29 05:10:59.822959 2026] [cgid:error] [pid 1041789:tid 1041941] [client 52.139.37.240:31501] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/lowfatdi/public_html/cumbeebailbonds/404.shtml
[Sat Aug 29 05:10:59.830010 2026] [security2:error] [pid 11274:tid 11540] [client 20.151.200.44:64671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/kure.php"] [unique_id "apK-Q2bX5DA3XO6e_qQrMgAAAWk"]
[Sat Aug 29 05:10:59.838968 2026] [security2:error] [pid 11274:tid 11559] [client 20.52.41.200:2648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/item.php"] [unique_id "apK-Q2bX5DA3XO6e_qQrMwAAAXs"]
[Sat Aug 29 05:10:59.849346 2026] [security2:error] [pid 11274:tid 11504] [client 20.104.104.62:52258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/hack.php"] [unique_id "apK-Q2bX5DA3XO6e_qQrNAAAAUU"]
[Sat Aug 29 05:10:59.873983 2026] [security2:error] [pid 1321:tid 1587] [client 68.155.159.216:14314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/.well-known/content.php"] [unique_id "apK-Q2jCPtor9NZ-byTrQwAABp4"]
[Sat Aug 29 05:10:59.904217 2026] [security2:error] [pid 1041789:tid 1041935] [client 158.158.54.35:29072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/admin/index.php"] [unique_id "apK-Q4v3RhPI65jTFG4cugAAAyI"]
[Sat Aug 29 05:10:59.908702 2026] [security2:error] [pid 1041789:tid 1042030] [client 20.100.175.163:24378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/elp.php"] [unique_id "apK-Q4v3RhPI65jTFG4cuwAAA4E"]
[Sat Aug 29 05:10:59.929396 2026] [security2:error] [pid 11274:tid 11554] [client 158.158.54.35:12401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-content/themes/admin.php"] [unique_id "apK-Q2bX5DA3XO6e_qQrNgAAAXY"]
[Sat Aug 29 05:10:59.939721 2026] [security2:error] [pid 1041789:tid 1041949] [client 20.196.209.81:16721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/csv.php"] [unique_id "apK-Q4v3RhPI65jTFG4cvAAAAzA"]
[Sat Aug 29 05:10:59.946640 2026] [security2:error] [pid 1041789:tid 1041983] [client 197.232.63.170:58070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 170.63.232.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK-Q4v3RhPI65jTFG4cvQAAA1I"]
[Sat Aug 29 05:10:59.946772 2026] [security2:error] [pid 1041789:tid 1041983] [client 197.232.63.170:58070] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK-Q4v3RhPI65jTFG4cvQAAA1I"]
[Sat Aug 29 05:10:59.995026 2026] [security2:error] [pid 11274:tid 11550] [client 20.104.104.62:40029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/155.php"] [unique_id "apK-Q2bX5DA3XO6e_qQrOgAAAXI"]
[Sat Aug 29 05:11:00.010612 2026] [security2:error] [pid 11274:tid 11481] [client 20.104.104.62:47604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/WSO.php"] [unique_id "apK-RGbX5DA3XO6e_qQrPAAAAS4"]
[Sat Aug 29 05:11:00.019245 2026] [security2:error] [pid 11274:tid 11461] [client 52.139.37.240:31056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/wp-index.php"] [unique_id "apK-RGbX5DA3XO6e_qQrPQAAARs"]
[Sat Aug 29 05:11:00.033154 2026] [security2:error] [pid 11274:tid 11512] [client 68.155.159.216:64413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK-RGbX5DA3XO6e_qQrPgAAAU0"]
[Sat Aug 29 05:11:00.033198 2026] [security2:error] [pid 11274:tid 11476] [client 93.123.109.165:10748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "midayins.com"] [uri "/index.php"] [unique_id "apK-RGbX5DA3XO6e_qQrPwAAASo"]
[Sat Aug 29 05:11:00.066187 2026] [security2:error] [pid 11274:tid 11473] [client 158.23.184.117:1232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/wp-includes/ID3/file.php"] [unique_id "apK-RGbX5DA3XO6e_qQrQAAAASc"]
[Sat Aug 29 05:11:00.116005 2026] [security2:error] [pid 11274:tid 11571] [client 158.23.147.79:39320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK-RGbX5DA3XO6e_qQrRQAAAYc"]
[Sat Aug 29 05:11:00.118464 2026] [security2:error] [pid 11274:tid 11520] [client 20.100.175.163:31921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/ws.php"] [unique_id "apK-RGbX5DA3XO6e_qQrRwAAAVU"]
[Sat Aug 29 05:11:00.120832 2026] [security2:error] [pid 11274:tid 11527] [client 74.7.175.156:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.fxit1st.com"] [uri "/cgi-sys/404.html"] [unique_id "apK-RGbX5DA3XO6e_qQrRgAAAVw"]
[Sat Aug 29 05:11:00.125314 2026] [security2:error] [pid 11274:tid 11477] [client 68.155.159.216:62812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK-RGbX5DA3XO6e_qQrSAAAASs"]
[Sat Aug 29 05:11:00.125528 2026] [security2:error] [pid 11274:tid 11557] [client 74.7.175.156:58684] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.fxit1st.com"] [uri "/robots.txt"] [unique_id "apK-RGbX5DA3XO6e_qQrQQABeQw"]
[Sat Aug 29 05:11:00.126715 2026] [security2:error] [pid 11274:tid 11547] [client 20.151.200.44:63568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/lte7.php"] [unique_id "apK-RGbX5DA3XO6e_qQrSQAAAW8"]
[Sat Aug 29 05:11:00.148080 2026] [security2:error] [pid 11274:tid 11450] [client 20.104.104.62:61789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/mcd.php"] [unique_id "apK-RGbX5DA3XO6e_qQrSwAAARA"]
[Sat Aug 29 05:11:00.160552 2026] [security2:error] [pid 11274:tid 11509] [client 68.155.159.216:6107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK-RGbX5DA3XO6e_qQrTAAAAUo"]
[Sat Aug 29 05:11:00.170088 2026] [security2:error] [pid 11274:tid 11545] [client 20.104.49.130:58109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "coveryourauto.com"] [uri "/k.php"] [unique_id "apK-RGbX5DA3XO6e_qQrTQAAAW0"]
[Sat Aug 29 05:11:00.186503 2026] [security2:error] [pid 11274:tid 11463] [client 4.205.62.107:59099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/ammika.php"] [unique_id "apK-RGbX5DA3XO6e_qQrTgAAAR0"]
[Sat Aug 29 05:11:00.188290 2026] [lsapi:warn] [pid 1321:tid 1504] [client 93.123.109.165:10762] [host midayins.com] Backend log: PHP Warning:  PHP Request Startup: Invalid date.timezone value 'America/New York', using 'America/Boise' instead in Unknown on line 0\n
[Sat Aug 29 05:11:00.199502 2026] [security2:error] [pid 11274:tid 11572] [client 20.104.49.130:63577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/wp-the.php"] [unique_id "apK-RGbX5DA3XO6e_qQrTwAAAYg"]
[Sat Aug 29 05:11:00.211393 2026] [security2:error] [pid 11274:tid 11549] [client 158.23.184.117:1050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tacospapis.com"] [uri "/wp-admin/css/fff.php"] [unique_id "apK-RGbX5DA3XO6e_qQrUAAAAXE"]
[Sat Aug 29 05:11:00.218931 2026] [security2:error] [pid 11274:tid 11544] [client 52.139.37.240:31617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/ww2.php"] [unique_id "apK-RGbX5DA3XO6e_qQrUQAAAWw"]
[Sat Aug 29 05:11:00.224050 2026] [security2:error] [pid 11274:tid 11454] [client 158.23.147.79:55257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK-RGbX5DA3XO6e_qQrUgAAARQ"]
[Sat Aug 29 05:11:00.232132 2026] [security2:error] [pid 11274:tid 11543] [client 4.205.62.107:4937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/chosen.php"] [unique_id "apK-RGbX5DA3XO6e_qQrUwAAAWs"]
[Sat Aug 29 05:11:00.232229 2026] [security2:error] [pid 11274:tid 11462] [client 68.155.159.216:23379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK-RGbX5DA3XO6e_qQrVAAAARw"]
[Sat Aug 29 05:11:00.237283 2026] [security2:error] [pid 11274:tid 11455] [client 20.104.104.62:48644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/mcd.php"] [unique_id "apK-RGbX5DA3XO6e_qQrVQAAARU"]
[Sat Aug 29 05:11:00.242117 2026] [security2:error] [pid 1321:tid 1542] [client 20.104.49.130:48532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/as.php"] [unique_id "apK-RGjCPtor9NZ-byTrRwAABnI"]
[Sat Aug 29 05:11:00.256072 2026] [security2:error] [pid 1321:tid 1494] [client 74.248.24.12:5110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/av.php"] [unique_id "apK-RGjCPtor9NZ-byTrSAAABkI"]
[Sat Aug 29 05:11:00.258535 2026] [security2:error] [pid 1321:tid 1551] [client 20.104.104.62:20856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/IndoXploit.php"] [unique_id "apK-RGjCPtor9NZ-byTrSQAABno"]
[Sat Aug 29 05:11:00.272738 2026] [security2:error] [pid 1321:tid 1561] [client 20.151.200.44:65164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/mega.php"] [unique_id "apK-RGjCPtor9NZ-byTrSgAABoQ"]
[Sat Aug 29 05:11:00.284293 2026] [security2:error] [pid 1321:tid 1526] [client 20.104.104.62:42070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/waw.php"] [unique_id "apK-RGjCPtor9NZ-byTrVQAABmI"]
[Sat Aug 29 05:11:00.292993 2026] [security2:error] [pid 11274:tid 11484] [client 158.158.54.35:33697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-includes/admin.php"] [unique_id "apK-RGbX5DA3XO6e_qQrWAAAATE"]
[Sat Aug 29 05:11:00.294570 2026] [security2:error] [pid 11274:tid 11480] [client 20.52.41.200:2647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/t.php"] [unique_id "apK-RGbX5DA3XO6e_qQrWQAAAS0"]
[Sat Aug 29 05:11:00.328054 2026] [security2:error] [pid 11274:tid 11558] [client 4.205.62.107:60309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/error_log.php"] [unique_id "apK-RGbX5DA3XO6e_qQrWgAAAXo"]
[Sat Aug 29 05:11:00.337875 2026] [security2:error] [pid 11274:tid 11505] [client 158.158.54.35:33213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/storage/rip.php"] [unique_id "apK-RGbX5DA3XO6e_qQrWwAAAUY"]
[Sat Aug 29 05:11:00.355323 2026] [lsapi:warn] [pid 1321:tid 1568] [client 93.123.109.165:10762] [host midayins.com] Backend log: PHP Warning:  PHP Request Startup: Invalid date.timezone value 'America/New York', using 'America/Boise' instead in Unknown on line 0\n
[Sat Aug 29 05:11:00.369598 2026] [security2:error] [pid 11274:tid 11496] [client 185.104.184.230:53130] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.bap.gcl.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "apK-RGbX5DA3XO6e_qQrXAAAAT0"]
[Sat Aug 29 05:11:00.372707 2026] [security2:error] [pid 11274:tid 11483] [client 158.158.54.35:15568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-admin/css/admin.php"] [unique_id "apK-RGbX5DA3XO6e_qQrXgAAATA"]
[Sat Aug 29 05:11:00.382750 2026] [security2:error] [pid 11274:tid 11566] [client 158.23.147.79:14082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK-RGbX5DA3XO6e_qQrXwAAAYI"]
[Sat Aug 29 05:11:00.397996 2026] [security2:error] [pid 11274:tid 11500] [client 20.100.175.163:1948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-content/cong.php"] [unique_id "apK-RGbX5DA3XO6e_qQrYAAAAUE"]
[Sat Aug 29 05:11:00.416859 2026] [security2:error] [pid 11274:tid 11515] [client 52.139.37.240:30830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/7logs.php"] [unique_id "apK-RGbX5DA3XO6e_qQrYQAAAVA"]
[Sat Aug 29 05:11:00.424633 2026] [security2:error] [pid 11274:tid 11469] [client 20.104.104.62:52257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/x23.php"] [unique_id "apK-RGbX5DA3XO6e_qQrYgAAASM"]
[Sat Aug 29 05:11:00.449867 2026] [security2:error] [pid 11274:tid 11506] [client 4.205.62.107:64930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/cp2.php"] [unique_id "apK-RGbX5DA3XO6e_qQrZAAAAUc"]
[Sat Aug 29 05:11:00.462893 2026] [security2:error] [pid 11274:tid 11510] [client 45.148.10.62:36342] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "mail.yws.zpq.mybluehost.me"] [uri "/wp-config.php.old"] [unique_id "apK-RGbX5DA3XO6e_qQrZQAAAUs"]
[Sat Aug 29 05:11:00.512641 2026] [security2:error] [pid 11274:tid 11511] [client 20.151.200.44:64583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/cafe.php"] [unique_id "apK-RGbX5DA3XO6e_qQraQAAAUw"]
[Sat Aug 29 05:11:00.519912 2026] [lsapi:warn] [pid 1321:tid 1521] [client 93.123.109.165:10762] [host midayins.com] Backend log: PHP Warning:  PHP Request Startup: Invalid date.timezone value 'America/New York', using 'America/Boise' instead in Unknown on line 0\n
[Sat Aug 29 05:11:00.521656 2026] [security2:error] [pid 11274:tid 11561] [client 20.104.104.62:20608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/bajingan.php"] [unique_id "apK-RGbX5DA3XO6e_qQragAAAX0"]
[Sat Aug 29 05:11:00.525945 2026] [security2:error] [pid 11274:tid 11526] [client 20.196.209.81:15409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/fox.php"] [unique_id "apK-RGbX5DA3XO6e_qQrawAAAVs"]
[Sat Aug 29 05:11:00.566717 2026] [security2:error] [pid 11274:tid 11486] [client 20.104.104.62:61802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/ws66.php"] [unique_id "apK-RGbX5DA3XO6e_qQrbQAAATM"]
[Sat Aug 29 05:11:00.589280 2026] [security2:error] [pid 11274:tid 11504] [client 20.104.49.130:43800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/xmini4.php"] [unique_id "apK-RGbX5DA3XO6e_qQrbwAAAUU"]
[Sat Aug 29 05:11:00.622258 2026] [security2:error] [pid 11274:tid 11503] [client 52.139.37.240:31500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/ac.php"] [unique_id "apK-RGbX5DA3XO6e_qQrcAAAAUQ"]
[Sat Aug 29 05:11:00.624286 2026] [security2:error] [pid 11274:tid 11492] [client 4.205.62.107:6301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/queue.php"] [unique_id "apK-RGbX5DA3XO6e_qQrcQAAATk"]
[Sat Aug 29 05:11:00.624423 2026] [security2:error] [pid 11274:tid 11493] [client 4.205.62.107:63998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/aww.php"] [unique_id "apK-RGbX5DA3XO6e_qQrcgAAATo"]
[Sat Aug 29 05:11:00.629111 2026] [security2:error] [pid 11274:tid 11554] [client 20.104.104.62:48676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/waw.php"] [unique_id "apK-RGbX5DA3XO6e_qQrcwAAAXY"]
[Sat Aug 29 05:11:00.636207 2026] [security2:error] [pid 1321:tid 1548] [client 20.100.175.163:31885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-themes.php"] [unique_id "apK-RGjCPtor9NZ-byTrXQAABnc"]
[Sat Aug 29 05:11:00.637100 2026] [security2:error] [pid 11274:tid 11514] [client 68.155.159.216:1872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK-RGbX5DA3XO6e_qQrdAAAAU8"]
[Sat Aug 29 05:11:00.654960 2026] [security2:error] [pid 11274:tid 11550] [client 68.155.159.216:30691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wzy.php"] [unique_id "apK-RGbX5DA3XO6e_qQrdQAAAXI"]
[Sat Aug 29 05:11:00.666601 2026] [security2:error] [pid 11274:tid 11476] [client 185.104.184.230:53134] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.bap.gcl.mybluehost.me"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "apK-RGbX5DA3XO6e_qQrdgAAASo"]
[Sat Aug 29 05:11:00.678381 2026] [security2:error] [pid 1321:tid 1559] [client 20.151.200.44:62996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/tanjiro.php"] [unique_id "apK-RGjCPtor9NZ-byTrYAAABoI"]
[Sat Aug 29 05:11:00.703289 2026] [security2:error] [pid 11274:tid 11444] [client 20.104.104.62:42111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/Cok.php"] [unique_id "apK-RGbX5DA3XO6e_qQrdwAAAQo"]
[Sat Aug 29 05:11:00.734979 2026] [security2:error] [pid 11274:tid 11472] [client 20.52.41.200:2635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/i.php"] [unique_id "apK-RGbX5DA3XO6e_qQreAAAASY"]
[Sat Aug 29 05:11:00.744518 2026] [security2:error] [pid 11274:tid 11563] [client 68.155.159.216:33610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK-RGbX5DA3XO6e_qQreQAAAX8"]
[Sat Aug 29 05:11:00.770918 2026] [security2:error] [pid 1321:tid 1614] [client 74.248.24.12:36295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/file.php"] [unique_id "apK-RGjCPtor9NZ-byTrYgAABrk"]
[Sat Aug 29 05:11:00.796176 2026] [security2:error] [pid 11274:tid 11482] [client 158.158.54.35:30287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/zoom1.php"] [unique_id "apK-RGbX5DA3XO6e_qQrewAAAS8"]
[Sat Aug 29 05:11:00.803978 2026] [security2:error] [pid 11274:tid 11461] [client 158.158.54.35:12386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/adminfuns.php"] [unique_id "apK-RGbX5DA3XO6e_qQrfAAAARs"]
[Sat Aug 29 05:11:00.820613 2026] [security2:error] [pid 11274:tid 11560] [client 52.139.37.240:31144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/ctex1.php"] [unique_id "apK-RGbX5DA3XO6e_qQrfQAAAXw"]
[Sat Aug 29 05:11:00.822373 2026] [security2:error] [pid 11274:tid 11557] [client 158.23.147.79:5842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/worksec.php"] [unique_id "apK-RGbX5DA3XO6e_qQrfgAAAXk"]
[Sat Aug 29 05:11:00.829757 2026] [security2:error] [pid 11274:tid 11547] [client 20.104.104.62:64759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/Good.php"] [unique_id "apK-RGbX5DA3XO6e_qQrfwAAAW8"]
[Sat Aug 29 05:11:00.862196 2026] [security2:error] [pid 11274:tid 11450] [client 68.155.159.216:38537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK-RGbX5DA3XO6e_qQrgAAAARA"]
[Sat Aug 29 05:11:00.864134 2026] [security2:error] [pid 1321:tid 1602] [client 158.23.147.79:28076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/cong.php"] [unique_id "apK-RGjCPtor9NZ-byTrZQAABq0"]
[Sat Aug 29 05:11:00.879220 2026] [security2:error] [pid 11274:tid 11535] [client 20.104.104.62:52268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/X7T6.php"] [unique_id "apK-RGbX5DA3XO6e_qQrgQAAAWQ"]
[Sat Aug 29 05:11:00.889065 2026] [security2:error] [pid 1321:tid 1608] [client 158.158.54.35:21701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/lock360.php"] [unique_id "apK-RGjCPtor9NZ-byTrZgAABrM"]
[Sat Aug 29 05:11:00.897135 2026] [security2:error] [pid 1321:tid 1598] [client 87.219.197.128:58446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK-RGjCPtor9NZ-byTrZwAABqk"]
[Sat Aug 29 05:11:00.897257 2026] [security2:error] [pid 1321:tid 1598] [client 87.219.197.128:58446] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK-RGjCPtor9NZ-byTrZwAABqk"]
[Sat Aug 29 05:11:00.902302 2026] [security2:error] [pid 11274:tid 11541] [client 20.100.175.163:4736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK-RGbX5DA3XO6e_qQrggAAAWo"]
[Sat Aug 29 05:11:00.963591 2026] [security2:error] [pid 11274:tid 11522] [client 45.148.10.62:36346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.yws.zpq.mybluehost.me"] [uri "/config.php"] [unique_id "apK-RGbX5DA3XO6e_qQrhgAAAVc"]
[Sat Aug 29 05:11:00.976135 2026] [security2:error] [pid 1321:tid 1537] [client 185.104.184.230:53140] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.bap.gcl.mybluehost.me"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "apK-RGjCPtor9NZ-byTrbgAABm0"]
[Sat Aug 29 05:11:00.980699 2026] [security2:error] [pid 1321:tid 1540] [client 68.155.159.216:1903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK-RGjCPtor9NZ-byTrcAAABnA"]
[Sat Aug 29 05:11:00.989245 2026] [security2:error] [pid 1321:tid 1605] [client 63.181.81.157:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.jobindjibouti.com"] [uri "/"] [unique_id "apK-RGjCPtor9NZ-byTrcgAABrA"]
[Sat Aug 29 05:11:00.998062 2026] [security2:error] [pid 1321:tid 1592] [client 20.151.200.44:65309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/eval.php"] [unique_id "apK-RGjCPtor9NZ-byTrcwAABqM"]
[Sat Aug 29 05:11:01.018445 2026] [security2:error] [pid 11274:tid 11521] [client 44.242.245.55:42161] ModSecurity: Warning. Matched phrase "Whatweb" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "gavirestaurant.com"] [uri "/"] [unique_id "apK-RGbX5DA3XO6e_qQriQAAAVY"]
[Sat Aug 29 05:11:01.020233 2026] [security2:error] [pid 11274:tid 11552] [client 20.104.104.62:42050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/see.php"] [unique_id "apK-RWbX5DA3XO6e_qQrjQAAAXQ"]
[Sat Aug 29 05:11:01.037420 2026] [security2:error] [pid 11274:tid 11462] [client 52.139.37.240:31505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/defaults.php"] [unique_id "apK-RWbX5DA3XO6e_qQrjgAAARw"]
[Sat Aug 29 05:11:01.047703 2026] [security2:error] [pid 1321:tid 1615] [client 158.23.147.79:62753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/index/function.php"] [unique_id "apK-RWjCPtor9NZ-byTrdQAABro"]
[Sat Aug 29 05:11:01.107245 2026] [security2:error] [pid 11274:tid 11516] [client 20.104.104.62:48753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/x23.php"] [unique_id "apK-RWbX5DA3XO6e_qQrkQAAAVE"]
[Sat Aug 29 05:11:01.107982 2026] [security2:error] [pid 1321:tid 1544] [client 20.196.209.81:15414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/disagraeosc.php"] [unique_id "apK-RWjCPtor9NZ-byTrdwAABnQ"]
[Sat Aug 29 05:11:01.127248 2026] [security2:error] [pid 11274:tid 11543] [client 20.100.175.163:13382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-trackback.php"] [unique_id "apK-RWbX5DA3XO6e_qQrkgAAAWs"]
[Sat Aug 29 05:11:01.185389 2026] [security2:error] [pid 1321:tid 1495] [client 20.104.104.62:61762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/horeg.php"] [unique_id "apK-RWjCPtor9NZ-byTregAABkM"]
[Sat Aug 29 05:11:01.192680 2026] [security2:error] [pid 11274:tid 11484] [client 20.52.41.200:2821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/deepseek_d.php"] [unique_id "apK-RWbX5DA3XO6e_qQrlAAAATE"]
[Sat Aug 29 05:11:01.235767 2026] [security2:error] [pid 11274:tid 11465] [client 68.155.159.216:62847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK-RWbX5DA3XO6e_qQroAAAAR8"]
[Sat Aug 29 05:11:01.236003 2026] [security2:error] [pid 11274:tid 11479] [client 158.23.147.79:43302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/file.php"] [unique_id "apK-RWbX5DA3XO6e_qQroQAAASw"]
[Sat Aug 29 05:11:01.237905 2026] [security2:error] [pid 11274:tid 11456] [client 68.155.159.216:63169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK-RWbX5DA3XO6e_qQrogAAARY"]
[Sat Aug 29 05:11:01.239214 2026] [security2:error] [pid 1321:tid 1560] [client 52.139.37.240:31112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/domains.php"] [unique_id "apK-RWjCPtor9NZ-byTrewAABoM"]
[Sat Aug 29 05:11:01.254138 2026] [security2:error] [pid 1321:tid 1574] [client 158.158.54.35:10174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/goods.php"] [unique_id "apK-RWjCPtor9NZ-byTrfAAABpE"]
[Sat Aug 29 05:11:01.273682 2026] [security2:error] [pid 1321:tid 1558] [client 158.158.54.35:33175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/txets.php"] [unique_id "apK-RWjCPtor9NZ-byTrfQAABoE"]
[Sat Aug 29 05:11:01.281886 2026] [security2:error] [pid 1321:tid 1588] [client 185.104.184.230:53148] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.bap.gcl.mybluehost.me"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "apK-RWjCPtor9NZ-byTrfwAABp8"]
[Sat Aug 29 05:11:01.281962 2026] [security2:error] [pid 1321:tid 1533] [client 74.248.24.12:40813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK-RWjCPtor9NZ-byTrfgAABmk"]
[Sat Aug 29 05:11:01.312746 2026] [security2:error] [pid 1321:tid 1525] [client 107.145.13.164:50311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 164.13.145.107.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK-RWjCPtor9NZ-byTrggAABmE"]
[Sat Aug 29 05:11:01.312865 2026] [security2:error] [pid 1321:tid 1525] [client 107.145.13.164:50311] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK-RWjCPtor9NZ-byTrggAABmE"]
[Sat Aug 29 05:11:01.324021 2026] [security2:error] [pid 1321:tid 1507] [client 20.104.104.62:42082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/basic.php"] [unique_id "apK-RWjCPtor9NZ-byTrgwAABk8"]
[Sat Aug 29 05:11:01.324632 2026] [security2:error] [pid 1321:tid 1538] [client 4.205.62.107:60332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/broadcasting.php"] [unique_id "apK-RWjCPtor9NZ-byTrhAAABm4"]
[Sat Aug 29 05:11:01.333337 2026] [security2:error] [pid 1321:tid 1535] [client 158.158.54.35:11613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-conflg.php"] [unique_id "apK-RWjCPtor9NZ-byTrhgAABms"]
[Sat Aug 29 05:11:01.344262 2026] [security2:error] [pid 1321:tid 1587] [client 63.181.81.157:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.jobindjibouti.com"] [uri "/jobs/"] [unique_id "apK-RWjCPtor9NZ-byTrhwAABp4"]
[Sat Aug 29 05:11:01.363110 2026] [security2:error] [pid 11274:tid 11561] [client 68.155.159.216:23477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-login.php"] [unique_id "apK-RWbX5DA3XO6e_qQrpgAAAX0"]
[Sat Aug 29 05:11:01.371057 2026] [security2:error] [pid 11274:tid 11526] [client 4.205.62.107:51457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/rum.or.php"] [unique_id "apK-RWbX5DA3XO6e_qQrpwAAAVs"]
[Sat Aug 29 05:11:01.392365 2026] [security2:error] [pid 11274:tid 11469] [client 20.100.175.163:6693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-mail.php"] [unique_id "apK-RWbX5DA3XO6e_qQrqQAAASM"]
[Sat Aug 29 05:11:01.433907 2026] [security2:error] [pid 1321:tid 1588] [client 45.148.10.62:36362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.yws.zpq.mybluehost.me"] [uri "/config.php.bak"] [unique_id "apK-RWjCPtor9NZ-byTrjAAABp8"]
[Sat Aug 29 05:11:01.434927 2026] [security2:error] [pid 1321:tid 1496] [client 52.139.37.240:31165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/dropdown.php"] [unique_id "apK-RWjCPtor9NZ-byTrjgAABkQ"]
[Sat Aug 29 05:11:01.468251 2026] [security2:error] [pid 11274:tid 11551] [client 4.205.62.107:62773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/phina.php"] [unique_id "apK-RWbX5DA3XO6e_qQrrQAAAXM"]
[Sat Aug 29 05:11:01.480279 2026] [security2:error] [pid 1321:tid 1494] [client 20.104.104.62:40057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/monso.php"] [unique_id "apK-RWjCPtor9NZ-byTrkAAABkI"]
[Sat Aug 29 05:11:01.505215 2026] [security2:error] [pid 11274:tid 11503] [client 20.104.104.62:48591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/ws66.php"] [unique_id "apK-RWbX5DA3XO6e_qQrrgAAAUQ"]
[Sat Aug 29 05:11:01.535646 2026] [security2:error] [pid 11274:tid 11554] [client 158.23.147.79:24452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-content/themes/too.php"] [unique_id "apK-RWbX5DA3XO6e_qQrrwAAAXY"]
[Sat Aug 29 05:11:01.540380 2026] [security2:error] [pid 1321:tid 1530] [client 20.196.209.81:16747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/about.php525"] [unique_id "apK-RWjCPtor9NZ-byTrkgAABmY"]
[Sat Aug 29 05:11:01.550531 2026] [security2:error] [pid 1321:tid 1593] [client 20.104.104.62:40201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/pas.php"] [unique_id "apK-RWjCPtor9NZ-byTrkwAABqQ"]
[Sat Aug 29 05:11:01.579886 2026] [security2:error] [pid 1321:tid 1521] [client 185.104.184.230:53156] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.bap.gcl.mybluehost.me"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "apK-RWjCPtor9NZ-byTrlAAABl0"]
[Sat Aug 29 05:11:01.586215 2026] [core:error] [pid 11274:tid 11464] [client 34.50.189.51:37898] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:01.586237 2026] [core:error] [pid 11274:tid 11464] [client 34.50.189.51:37898] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:01.586373 2026] [security2:error] [pid 11274:tid 11464] [client 34.50.189.51:37898] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "discocollective.kriveloff-associates.com"] [uri "/index.php"] [unique_id "apK-RWbX5DA3XO6e_qQrswAAAR4"]
[Sat Aug 29 05:11:01.586767 2026] [security2:error] [pid 1321:tid 1579] [client 34.50.189.51:37936] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/backup.sql"] [unique_id "apK-RWjCPtor9NZ-byTrlQAABpY"]
[Sat Aug 29 05:11:01.587530 2026] [core:error] [pid 11274:tid 11468] [client 34.50.189.51:37974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:01.587544 2026] [core:error] [pid 11274:tid 11468] [client 34.50.189.51:37974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:01.587719 2026] [core:error] [pid 1321:tid 1596] [client 34.50.189.51:37922] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:01.587730 2026] [core:error] [pid 1321:tid 1596] [client 34.50.189.51:37922] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:01.587822 2026] [security2:error] [pid 1321:tid 1596] [client 34.50.189.51:37922] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "discocollective.kriveloff-associates.com"] [uri "/index.php"] [unique_id "apK-RWjCPtor9NZ-byTrlgAABqc"]
[Sat Aug 29 05:11:01.587866 2026] [core:error] [pid 1321:tid 1491] [client 34.50.189.51:38000] AH10244: invalid URI path (/assets../../../.env)
[Sat Aug 29 05:11:01.588293 2026] [core:error] [pid 1321:tid 1568] [client 34.50.189.51:37926] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:01.588302 2026] [core:error] [pid 1321:tid 1568] [client 34.50.189.51:37926] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:01.588549 2026] [security2:error] [pid 11274:tid 11495] [client 34.50.189.51:37998] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/files../.env"] [unique_id "apK-RWbX5DA3XO6e_qQrtwAAATw"]
[Sat Aug 29 05:11:01.588911 2026] [core:error] [pid 11274:tid 11553] [client 34.50.189.51:37996] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:01.588921 2026] [core:error] [pid 11274:tid 11553] [client 34.50.189.51:37996] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:01.589227 2026] [core:error] [pid 1321:tid 1532] [client 34.50.189.51:37882] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:01.589301 2026] [core:error] [pid 1321:tid 1491] [client 34.50.189.51:38000] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:01.589308 2026] [core:error] [pid 1321:tid 1532] [client 34.50.189.51:37882] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:01.589401 2026] [security2:error] [pid 11274:tid 11444] [client 34.50.189.51:37982] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/static../.env"] [unique_id "apK-RWbX5DA3XO6e_qQruAAAAQo"]
[Sat Aug 29 05:11:01.590190 2026] [core:error] [pid 1321:tid 1607] [client 34.50.189.51:37960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:01.590199 2026] [core:error] [pid 1321:tid 1607] [client 34.50.189.51:37960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:01.590671 2026] [security2:error] [pid 1321:tid 1589] [client 34.50.189.51:38012] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/media../.env"] [unique_id "apK-RWjCPtor9NZ-byTrnAAABqA"]
[Sat Aug 29 05:11:01.590783 2026] [core:error] [pid 1321:tid 1603] [client 34.50.189.51:37908] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:01.590793 2026] [core:error] [pid 1321:tid 1603] [client 34.50.189.51:37908] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:01.590881 2026] [security2:error] [pid 1321:tid 1603] [client 34.50.189.51:37908] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "discocollective.kriveloff-associates.com"] [uri "/index.php"] [unique_id "apK-RWjCPtor9NZ-byTrmwAABq4"]
[Sat Aug 29 05:11:01.593413 2026] [security2:error] [pid 1321:tid 1503] [client 34.50.189.51:37946] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "discocollective.kriveloff-associates.com"] [uri "/dump.sql"] [unique_id "apK-RWjCPtor9NZ-byTrngAABks"]
[Sat Aug 29 05:11:01.593624 2026] [security2:error] [pid 11274:tid 11538] [client 34.50.189.51:38024] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "discocollective.kriveloff-associates.com"] [uri "/proc/self/environ"] [unique_id "apK-RWbX5DA3XO6e_qQruQAAAWc"]
[Sat Aug 29 05:11:01.595085 2026] [security2:error] [pid 1321:tid 1599] [client 93.123.109.165:10762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "midayins.com"] [uri "/index.php"] [unique_id "apK-RWjCPtor9NZ-byTrnwAABqo"], referer: https://midayins.com/wp-admin/
[Sat Aug 29 05:11:01.595595 2026] [security2:error] [pid 11274:tid 11488] [client 34.50.189.51:37934] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/terraform.tfstate.backup"] [unique_id "apK-RWbX5DA3XO6e_qQrugAAATU"]
[Sat Aug 29 05:11:01.601682 2026] [security2:error] [pid 11274:tid 11527] [client 68.155.159.216:38290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK-RWbX5DA3XO6e_qQrvAAAAVw"]
[Sat Aug 29 05:11:01.602017 2026] [security2:error] [pid 11274:tid 11564] [client 4.205.62.107:65009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/xda.php"] [unique_id "apK-RWbX5DA3XO6e_qQrvQAAAYA"]
[Sat Aug 29 05:11:01.618773 2026] [security2:error] [pid 11274:tid 11560] [client 20.104.104.62:52291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/rce.php"] [unique_id "apK-RWbX5DA3XO6e_qQrvwAAAXw"]
[Sat Aug 29 05:11:01.622527 2026] [security2:error] [pid 11274:tid 11557] [client 20.151.200.44:62222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/Rk41.php"] [unique_id "apK-RWbX5DA3XO6e_qQrwAAAAXk"]
[Sat Aug 29 05:11:01.632527 2026] [security2:error] [pid 11274:tid 11476] [client 52.139.37.240:31641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/files/index.php"] [unique_id "apK-RWbX5DA3XO6e_qQrwgAAASo"]
[Sat Aug 29 05:11:01.642079 2026] [security2:error] [pid 11274:tid 11545] [client 20.151.200.44:65097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/ww3.php"] [unique_id "apK-RWbX5DA3XO6e_qQrxAAAAW0"]
[Sat Aug 29 05:11:01.655054 2026] [core:error] [pid 11274:tid 11519] [client 20.52.41.200:2800] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:01.655072 2026] [core:error] [pid 11274:tid 11519] [client 20.52.41.200:2800] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:01.661204 2026] [security2:error] [pid 11274:tid 11501] [client 20.104.49.130:57659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/mh.php"] [unique_id "apK-RWbX5DA3XO6e_qQrxgAAAUI"]
[Sat Aug 29 05:11:01.667265 2026] [security2:error] [pid 1321:tid 1575] [client 43.172.196.167:32958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.196.172.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewtopic.php"] [unique_id "apK-RWjCPtor9NZ-byTroAAABpI"]
[Sat Aug 29 05:11:01.678614 2026] [security2:error] [pid 1321:tid 1555] [client 195.178.110.247:24010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.malibuhotel.com.mx"] [uri "/index.php"] [unique_id "apK-RWjCPtor9NZ-byTroQAABn4"]
[Sat Aug 29 05:11:01.698680 2026] [security2:error] [pid 11274:tid 11537] [client 158.158.54.35:12402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/css.php"] [unique_id "apK-RWbX5DA3XO6e_qQrxwAAAWY"]
[Sat Aug 29 05:11:01.748238 2026] [security2:error] [pid 1321:tid 1562] [client 68.155.159.216:2024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK-RWjCPtor9NZ-byTrowAABoU"]
[Sat Aug 29 05:11:01.764885 2026] [security2:error] [pid 1321:tid 1537] [client 68.155.159.216:30638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK-RWjCPtor9NZ-byTrpQAABm0"]
[Sat Aug 29 05:11:01.766294 2026] [security2:error] [pid 11274:tid 11556] [client 20.240.128.207:19846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/.trash7206/index.php"] [unique_id "apK-RWbX5DA3XO6e_qQryQAAAXg"]
[Sat Aug 29 05:11:01.768634 2026] [security2:error] [pid 11274:tid 11547] [client 158.158.54.35:11587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/123.php"] [unique_id "apK-RWbX5DA3XO6e_qQrygAAAW8"]
[Sat Aug 29 05:11:01.771314 2026] [security2:error] [pid 11274:tid 11455] [client 4.205.62.107:63927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/maxro.php"] [unique_id "apK-RWbX5DA3XO6e_qQrywAAARU"]
[Sat Aug 29 05:11:01.774407 2026] [security2:error] [pid 11274:tid 11529] [client 20.104.104.62:42069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/exec.php"] [unique_id "apK-RWbX5DA3XO6e_qQrzAAAAV4"]
[Sat Aug 29 05:11:01.788292 2026] [security2:error] [pid 11274:tid 11492] [client 43.173.176.252:58628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 252.176.173.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewtopic.php"] [unique_id "apK-RWbX5DA3XO6e_qQrzQAAATk"]
[Sat Aug 29 05:11:01.795647 2026] [security2:error] [pid 11274:tid 11450] [client 74.248.24.12:24908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/gmo.php"] [unique_id "apK-RWbX5DA3XO6e_qQrzgAAARA"]
[Sat Aug 29 05:11:01.804266 2026] [security2:error] [pid 11274:tid 11539] [client 20.100.175.163:27060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/222.php"] [unique_id "apK-RWbX5DA3XO6e_qQrzwAAAWg"]
[Sat Aug 29 05:11:01.817620 2026] [security2:error] [pid 11274:tid 11550] [client 43.173.181.104:56044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 104.181.173.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewtopic.php"] [unique_id "apK-RWbX5DA3XO6e_qQr0AAAAXI"]
[Sat Aug 29 05:11:01.832601 2026] [security2:error] [pid 11274:tid 11522] [client 52.139.37.240:31518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cumbeebailbonds.lowfatdinnermenus.com"] [uri "/flower.php"] [unique_id "apK-RWbX5DA3XO6e_qQr0gAAAVc"]
[Sat Aug 29 05:11:01.840102 2026] [security2:error] [pid 11274:tid 11490] [client 43.173.182.179:37426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 179.182.173.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewtopic.php"] [unique_id "apK-RWbX5DA3XO6e_qQr0QAAATc"]
[Sat Aug 29 05:11:01.844016 2026] [security2:error] [pid 11274:tid 11572] [client 195.178.110.247:20684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.malibuhotel.com.mx"] [uri "/index.php"] [unique_id "apK-RWbX5DA3XO6e_qQr0wAAAYg"]
[Sat Aug 29 05:11:01.854105 2026] [security2:error] [pid 1321:tid 1573] [client 20.151.200.44:62192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/7logs.php"] [unique_id "apK-RWjCPtor9NZ-byTrqAAABpA"]
[Sat Aug 29 05:11:01.870969 2026] [security2:error] [pid 1321:tid 1613] [client 185.104.184.230:53168] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.bap.gcl.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "apK-RWjCPtor9NZ-byTrqQAABrg"]
[Sat Aug 29 05:11:01.890841 2026] [security2:error] [pid 1321:tid 1549] [client 20.100.175.163:8351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-content.php"] [unique_id "apK-RWjCPtor9NZ-byTrqwAABng"]
[Sat Aug 29 05:11:01.896798 2026] [security2:error] [pid 1321:tid 1520] [client 20.151.200.44:65296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/sao.php"] [unique_id "apK-RWjCPtor9NZ-byTrrAAABlw"]
[Sat Aug 29 05:11:01.910330 2026] [security2:error] [pid 11274:tid 11509] [client 43.173.181.6:33018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 6.181.173.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewforum.php"] [unique_id "apK-RWbX5DA3XO6e_qQr1QAAAUo"]
[Sat Aug 29 05:11:01.921646 2026] [security2:error] [pid 1321:tid 1527] [client 20.104.104.62:61797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/dbc.php"] [unique_id "apK-RWjCPtor9NZ-byTrrgAABmM"]
[Sat Aug 29 05:11:01.968101 2026] [security2:error] [pid 11274:tid 11502] [client 68.155.159.216:38681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/makeasmtp.php"] [unique_id "apK-RWbX5DA3XO6e_qQr2wAAAUM"]
[Sat Aug 29 05:11:02.010934 2026] [security2:error] [pid 1321:tid 1615] [client 20.196.209.81:16758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/spip.php"] [unique_id "apK-RmjCPtor9NZ-byTrsAAABro"]
[Sat Aug 29 05:11:02.019244 2026] [security2:error] [pid 11274:tid 11456] [client 158.23.147.79:28048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-includes/js/index.php"] [unique_id "apK-RmbX5DA3XO6e_qQr3AAAARY"]
[Sat Aug 29 05:11:02.021263 2026] [security2:error] [pid 11274:tid 11471] [client 158.158.54.35:10163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-content/themes/about.php"] [unique_id "apK-RmbX5DA3XO6e_qQr3QAAASU"]
[Sat Aug 29 05:11:02.038619 2026] [security2:error] [pid 11274:tid 11474] [client 20.104.104.62:48464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/Cok.php"] [unique_id "apK-RmbX5DA3XO6e_qQr4AAAASg"]
[Sat Aug 29 05:11:02.047279 2026] [security2:error] [pid 11274:tid 11489] [client 20.104.104.62:20629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/abc.php"] [unique_id "apK-RmbX5DA3XO6e_qQr4QAAATY"]
[Sat Aug 29 05:11:02.050492 2026] [security2:error] [pid 11274:tid 11526] [client 68.155.159.216:14331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/cong.php"] [unique_id "apK-RmbX5DA3XO6e_qQr4gAAAVs"]
[Sat Aug 29 05:11:02.078015 2026] [security2:error] [pid 11274:tid 11480] [client 20.104.104.62:52240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/wp-wlx.php"] [unique_id "apK-RmbX5DA3XO6e_qQr5QAAAS0"]
[Sat Aug 29 05:11:02.080989 2026] [security2:error] [pid 11274:tid 11469] [client 57.141.14.22:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/page/17/"] [unique_id "apK-RmbX5DA3XO6e_qQr5AAAASM"]
[Sat Aug 29 05:11:02.112488 2026] [security2:error] [pid 11274:tid 11543] [client 20.52.41.200:2800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "apK-RmbX5DA3XO6e_qQr5wAAAWs"]
[Sat Aug 29 05:11:02.141010 2026] [security2:error] [pid 11274:tid 11464] [client 195.178.110.247:24012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.malibuvetclinic.com"] [uri "/index.php"] [unique_id "apK-RmbX5DA3XO6e_qQr6QAAAR4"]
[Sat Aug 29 05:11:02.160699 2026] [security2:error] [pid 1321:tid 1497] [client 158.23.147.79:62751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/.well-known/content.php"] [unique_id "apK-RmjCPtor9NZ-byTrsQAABkU"]
[Sat Aug 29 05:11:02.167299 2026] [security2:error] [pid 1321:tid 1498] [client 185.104.184.230:53182] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.bap.gcl.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "apK-RmjCPtor9NZ-byTrsgAABkY"]
[Sat Aug 29 05:11:02.171596 2026] [security2:error] [pid 11274:tid 11444] [client 20.151.200.44:61595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/sf.php"] [unique_id "apK-RmbX5DA3XO6e_qQr6wAAAQo"]
[Sat Aug 29 05:11:02.216893 2026] [security2:error] [pid 11274:tid 11517] [client 158.158.54.35:31263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/yanz.php"] [unique_id "apK-RmbX5DA3XO6e_qQr7QAAAVI"]
[Sat Aug 29 05:11:02.221535 2026] [security2:error] [pid 11274:tid 11540] [client 20.104.104.62:42107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/attack.php"] [unique_id "apK-RmbX5DA3XO6e_qQr7gAAAWk"]
[Sat Aug 29 05:11:02.238822 2026] [security2:error] [pid 11274:tid 11475] [client 68.155.159.216:56704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/file5.php"] [unique_id "apK-RmbX5DA3XO6e_qQr7wAAASk"]
[Sat Aug 29 05:11:02.280705 2026] [security2:error] [pid 1321:tid 1524] [client 20.104.49.130:53639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/sd.php"] [unique_id "apK-RmjCPtor9NZ-byTrtAAABmA"]
[Sat Aug 29 05:11:02.296406 2026] [security2:error] [pid 11274:tid 11498] [client 20.240.128.207:20557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wk/index.php"] [unique_id "apK-RmbX5DA3XO6e_qQr8gAAAT8"]
[Sat Aug 29 05:11:02.300862 2026] [security2:error] [pid 11274:tid 11512] [client 20.100.175.163:27059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/x.php"] [unique_id "apK-RmbX5DA3XO6e_qQr8wAAAU0"]
[Sat Aug 29 05:11:02.308344 2026] [security2:error] [pid 11274:tid 11472] [client 74.248.24.12:40774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/classwithtostring.php"] [unique_id "apK-RmbX5DA3XO6e_qQr9QAAASY"]
[Sat Aug 29 05:11:02.308727 2026] [security2:error] [pid 1321:tid 1507] [client 68.155.159.216:6072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK-RmjCPtor9NZ-byTrtgAABk8"]
[Sat Aug 29 05:11:02.309029 2026] [security2:error] [pid 11274:tid 11563] [client 195.178.110.247:20690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.malibuvetclinic.com"] [uri "/index.php"] [unique_id "apK-RmbX5DA3XO6e_qQr9gAAAX8"]
[Sat Aug 29 05:11:02.349461 2026] [security2:error] [pid 1321:tid 1587] [client 68.155.159.216:62781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-content/banners/about.php"] [unique_id "apK-RmjCPtor9NZ-byTrtwAABp4"]
[Sat Aug 29 05:11:02.360426 2026] [security2:error] [pid 11274:tid 11514] [client 20.104.104.62:61792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/file66.php"] [unique_id "apK-RmbX5DA3XO6e_qQr9wAAAU8"]
[Sat Aug 29 05:11:02.366840 2026] [security2:error] [pid 1321:tid 1581] [client 158.23.147.79:29569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/lock.php"] [unique_id "apK-RmjCPtor9NZ-byTruAAABpg"]
[Sat Aug 29 05:11:02.391874 2026] [security2:error] [pid 1321:tid 1611] [client 20.100.175.163:1938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "apK-RmjCPtor9NZ-byTruQAABrY"]
[Sat Aug 29 05:11:02.412015 2026] [security2:error] [pid 11274:tid 11560] [client 20.104.104.62:47562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/indexx.php"] [unique_id "apK-RmbX5DA3XO6e_qQr-AAAAXw"]
[Sat Aug 29 05:11:02.412182 2026] [security2:error] [pid 11274:tid 11557] [client 45.148.10.62:36378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.yws.zpq.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "apK-RmbX5DA3XO6e_qQr-QAAAXk"]
[Sat Aug 29 05:11:02.416054 2026] [security2:error] [pid 1321:tid 1525] [client 20.196.209.81:16762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/backup.php"] [unique_id "apK-RmjCPtor9NZ-byTrugAABmE"]
[Sat Aug 29 05:11:02.439608 2026] [security2:error] [pid 11274:tid 11533] [client 158.23.147.79:62679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/themes.php"] [unique_id "apK-RmbX5DA3XO6e_qQr-gAAAWI"]
[Sat Aug 29 05:11:02.460610 2026] [security2:error] [pid 11274:tid 11535] [client 158.158.54.35:21166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/w.php"] [unique_id "apK-RmbX5DA3XO6e_qQr-wAAAWQ"]
[Sat Aug 29 05:11:02.465181 2026] [security2:error] [pid 11274:tid 11454] [client 68.155.159.216:23525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK-RmbX5DA3XO6e_qQr_AAAARQ"]
[Sat Aug 29 05:11:02.466598 2026] [security2:error] [pid 1321:tid 1542] [client 185.104.184.230:53190] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.bap.gcl.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "apK-RmjCPtor9NZ-byTrvAAABnI"]
[Sat Aug 29 05:11:02.466650 2026] [security2:error] [pid 11274:tid 11518] [client 158.158.54.35:10143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK-RmbX5DA3XO6e_qQr_QAAAVM"]
[Sat Aug 29 05:11:02.470659 2026] [security2:error] [pid 11274:tid 11467] [client 4.205.62.107:59098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/aws_config.php"] [unique_id "apK-RmbX5DA3XO6e_qQr_gAAASE"]
[Sat Aug 29 05:11:02.489171 2026] [security2:error] [pid 11274:tid 11537] [client 158.23.147.79:14330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK-RmbX5DA3XO6e_qQsAgAAAWY"]
[Sat Aug 29 05:11:02.504291 2026] [security2:error] [pid 11274:tid 11544] [client 20.104.104.62:52246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/zafir1.php"] [unique_id "apK-RmbX5DA3XO6e_qQsAwAAAWw"]
[Sat Aug 29 05:11:02.511294 2026] [security2:error] [pid 1321:tid 1492] [client 4.205.62.107:4940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/loxi-o.php"] [unique_id "apK-RmjCPtor9NZ-byTrvQAABkA"]
[Sat Aug 29 05:11:02.529023 2026] [security2:error] [pid 1321:tid 1470] [remote 2a06:98c0:3600::103:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.jobindjibouti.com"] [uri "/wp-json/wp/v2/job-listings"] [unique_id "apK-RmjCPtor9NZ-byTrvgAGWm8"]
[Sat Aug 29 05:11:02.567482 2026] [core:error] [pid 1321:tid 1590] [client 20.52.41.200:2769] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:02.567504 2026] [core:error] [pid 1321:tid 1590] [client 20.52.41.200:2769] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:02.579096 2026] [security2:error] [pid 11274:tid 11552] [client 158.23.147.79:43271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/file17.php"] [unique_id "apK-RmbX5DA3XO6e_qQsCAAAAXQ"]
[Sat Aug 29 05:11:02.586837 2026] [security2:error] [pid 11274:tid 11572] [client 20.151.200.44:61512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/super.php"] [unique_id "apK-RmbX5DA3XO6e_qQsCQAAAYg"]
[Sat Aug 29 05:11:02.640838 2026] [security2:error] [pid 1321:tid 1530] [client 4.205.62.107:59101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/koiy.php"] [unique_id "apK-RmjCPtor9NZ-byTrwAAABmY"]
[Sat Aug 29 05:11:02.642064 2026] [security2:error] [pid 1321:tid 1593] [client 68.155.159.216:64463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK-RmjCPtor9NZ-byTrwQAABqQ"]
[Sat Aug 29 05:11:02.644770 2026] [security2:error] [pid 11274:tid 11451] [client 158.23.147.79:24400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/radio.php"] [unique_id "apK-RmbX5DA3XO6e_qQsCwAAARE"]
[Sat Aug 29 05:11:02.676224 2026] [security2:error] [pid 11274:tid 11507] [client 158.158.54.35:31149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/autoload_classmap.php"] [unique_id "apK-RmbX5DA3XO6e_qQsDAAAAUg"]
[Sat Aug 29 05:11:02.702164 2026] [security2:error] [pid 1321:tid 1521] [client 20.104.104.62:40027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/console.php"] [unique_id "apK-RmjCPtor9NZ-byTrwgAABl0"]
[Sat Aug 29 05:11:02.710959 2026] [security2:error] [pid 11274:tid 11502] [client 68.155.159.216:38547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/packed.php"] [unique_id "apK-RmbX5DA3XO6e_qQsDgAAAUM"]
[Sat Aug 29 05:11:02.726865 2026] [security2:error] [pid 11274:tid 11483] [client 20.104.104.62:64713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/browse.php"] [unique_id "apK-RmbX5DA3XO6e_qQsDwAAATA"]
[Sat Aug 29 05:11:02.743312 2026] [security2:error] [pid 11274:tid 11506] [client 4.205.62.107:65006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/pinfo.php"] [unique_id "apK-RmbX5DA3XO6e_qQsEAAAAUc"]
[Sat Aug 29 05:11:02.761152 2026] [security2:error] [pid 11274:tid 11474] [client 20.104.104.62:16461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thepoetinnewyork.wanderlustpictures.com"] [uri "/admin.php"] [unique_id "apK-RmbX5DA3XO6e_qQsEQAAASg"]
[Sat Aug 29 05:11:02.772958 2026] [security2:error] [pid 11274:tid 11448] [client 185.104.184.230:53196] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.bap.gcl.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "apK-RmbX5DA3XO6e_qQsEgAAAQ4"]
[Sat Aug 29 05:11:02.778326 2026] [security2:error] [pid 1321:tid 1503] [client 20.104.49.130:63558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/155.php"] [unique_id "apK-RmjCPtor9NZ-byTrxwAABks"]
[Sat Aug 29 05:11:02.798813 2026] [security2:error] [pid 11274:tid 11496] [client 20.240.128.207:19867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/admin.php"] [unique_id "apK-RmbX5DA3XO6e_qQsFAAAAT0"]
[Sat Aug 29 05:11:02.801686 2026] [security2:error] [pid 11274:tid 11509] [client 20.100.175.163:33680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/new.php"] [unique_id "apK-RmbX5DA3XO6e_qQsFQAAAUo"]
[Sat Aug 29 05:11:02.811350 2026] [security2:error] [pid 11274:tid 11516] [client 74.248.24.12:40805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/404.php"] [unique_id "apK-RmbX5DA3XO6e_qQsFwAAAVE"]
[Sat Aug 29 05:11:02.814516 2026] [security2:error] [pid 11274:tid 11548] [client 20.196.209.81:16241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/haiterus.php"] [unique_id "apK-RmbX5DA3XO6e_qQsGAAAAXA"]
[Sat Aug 29 05:11:02.817068 2026] [security2:error] [pid 11274:tid 11482] [client 103.185.242.143:61353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-RmbX5DA3XO6e_qQsGQAAAS8"]
[Sat Aug 29 05:11:02.817147 2026] [security2:error] [pid 11274:tid 11482] [client 103.185.242.143:61353] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-RmbX5DA3XO6e_qQsGQAAAS8"]
[Sat Aug 29 05:11:02.865343 2026] [security2:error] [pid 1321:tid 1564] [client 20.151.200.44:62451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/sko.php"] [unique_id "apK-RmjCPtor9NZ-byTryQAABoc"]
[Sat Aug 29 05:11:02.873175 2026] [security2:error] [pid 11274:tid 11445] [client 20.104.104.62:48602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/X7T6.php"] [unique_id "apK-RmbX5DA3XO6e_qQsGgAAAQs"]
[Sat Aug 29 05:11:02.874783 2026] [security2:error] [pid 11274:tid 11551] [client 68.155.159.216:30681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK-RmbX5DA3XO6e_qQsGwAAAXM"]
[Sat Aug 29 05:11:02.882928 2026] [security2:error] [pid 1321:tid 1577] [client 20.100.175.163:16334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/css/wp-login.php"] [unique_id "apK-RmjCPtor9NZ-byTrywAABpQ"]
[Sat Aug 29 05:11:02.887783 2026] [security2:error] [pid 11274:tid 11503] [client 20.151.200.44:23601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/lufix1.php"] [unique_id "apK-RmbX5DA3XO6e_qQsHAAAAUQ"]
[Sat Aug 29 05:11:02.898661 2026] [security2:error] [pid 11274:tid 11449] [client 4.205.62.107:61730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/brc.php"] [unique_id "apK-RmbX5DA3XO6e_qQsHQAAAQ8"]
[Sat Aug 29 05:11:02.910830 2026] [security2:error] [pid 11274:tid 11456] [client 158.158.54.35:30308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/ahax.php"] [unique_id "apK-RmbX5DA3XO6e_qQsHgAAARY"]
[Sat Aug 29 05:11:02.915675 2026] [security2:error] [pid 11274:tid 11470] [client 158.158.54.35:8461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-admin/index.php"] [unique_id "apK-RmbX5DA3XO6e_qQsHwAAASQ"]
[Sat Aug 29 05:11:02.922831 2026] [security2:error] [pid 1321:tid 1499] [client 20.104.104.62:58715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/blnux.php"] [unique_id "apK-RmjCPtor9NZ-byTr0gAABkc"]
[Sat Aug 29 05:11:02.956888 2026] [security2:error] [pid 1321:tid 1510] [client 20.104.104.62:16481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thepoetinnewyork.wanderlustpictures.com"] [uri "/lite.php"] [unique_id "apK-RmjCPtor9NZ-byTr1gAABlI"]
[Sat Aug 29 05:11:02.992221 2026] [security2:error] [pid 1321:tid 1575] [client 20.104.104.62:40254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/up1.php"] [unique_id "apK-RmjCPtor9NZ-byTr2QAABpI"]
[Sat Aug 29 05:11:03.002096 2026] [autoindex:error] [pid 11274:tid 11347] [remote 45.148.10.62:36390] AH01276: Cannot serve directory /home3/ywszpqmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:11:03.007657 2026] [security2:error] [pid 11274:tid 11461] [client 158.23.147.79:5937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/x.php"] [unique_id "apK-R2bX5DA3XO6e_qQsJQAAARs"]
[Sat Aug 29 05:11:03.024315 2026] [security2:error] [pid 11274:tid 11504] [client 20.52.41.200:2832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-content/themes/pridmag/il.php"] [unique_id "apK-R2bX5DA3XO6e_qQsJwAAAUU"]
[Sat Aug 29 05:11:03.058465 2026] [security2:error] [pid 1321:tid 1602] [client 216.51.171.83:54675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 83.171.51.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-R2jCPtor9NZ-byTr3wAABq0"]
[Sat Aug 29 05:11:03.058573 2026] [security2:error] [pid 1321:tid 1602] [client 216.51.171.83:54675] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-R2jCPtor9NZ-byTr3wAABq0"]
[Sat Aug 29 05:11:03.071370 2026] [security2:error] [pid 11274:tid 11472] [client 68.155.159.216:38533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK-R2bX5DA3XO6e_qQsKQAAASY"]
[Sat Aug 29 05:11:03.075471 2026] [security2:error] [pid 1321:tid 1610] [client 4.205.62.107:6915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/doc.php"] [unique_id "apK-R2jCPtor9NZ-byTr4AAABrU"]
[Sat Aug 29 05:11:03.080275 2026] [security2:error] [pid 11274:tid 11563] [client 185.104.184.230:53212] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.bap.gcl.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "apK-R2bX5DA3XO6e_qQsKgAAAX8"]
[Sat Aug 29 05:11:03.107982 2026] [security2:error] [pid 11274:tid 11557] [client 91.92.47.191:52344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.47.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.giantgardening.com"] [uri "/rec_sunflower.php"] [unique_id "apK-R2bX5DA3XO6e_qQsLgAAAXk"]
[Sat Aug 29 05:11:03.111863 2026] [security2:error] [pid 11274:tid 11517] [client 158.158.54.35:35502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/bi.php"] [unique_id "apK-R2bX5DA3XO6e_qQsLwAAAVI"]
[Sat Aug 29 05:11:03.112376 2026] [security2:error] [pid 11274:tid 11554] [client 20.104.104.62:40021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/pentest.php"] [unique_id "apK-R2bX5DA3XO6e_qQsMAAAAXY"]
[Sat Aug 29 05:11:03.146025 2026] [security2:error] [pid 1321:tid 1592] [client 68.155.159.216:14237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-includes/js/index.php"] [unique_id "apK-R2jCPtor9NZ-byTr4wAABqM"]
[Sat Aug 29 05:11:03.157418 2026] [security2:error] [pid 11274:tid 11520] [client 20.104.104.62:16707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thepoetinnewyork.wanderlustpictures.com"] [uri "/about.php"] [unique_id "apK-R2bX5DA3XO6e_qQsNQAAAVU"]
[Sat Aug 29 05:11:03.163440 2026] [autoindex:error] [pid 11274:tid 11475] [client 45.148.10.62:36402] AH01276: Cannot serve directory /home3/zaiemfmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:11:03.163847 2026] [security2:error] [pid 11274:tid 11533] [client 20.151.200.44:63367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/uuu.php"] [unique_id "apK-R2bX5DA3XO6e_qQsNwAAAWI"]
[Sat Aug 29 05:11:03.177044 2026] [security2:error] [pid 11274:tid 11518] [client 68.155.159.216:2039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/dropdown.php"] [unique_id "apK-R2bX5DA3XO6e_qQsOAAAAVM"]
[Sat Aug 29 05:11:03.190120 2026] [security2:error] [pid 11274:tid 11541] [client 20.151.200.44:62916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/hack.php"] [unique_id "apK-R2bX5DA3XO6e_qQsOQAAAWo"]
[Sat Aug 29 05:11:03.242650 2026] [security2:error] [pid 11274:tid 11473] [client 20.104.104.62:7157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/6y7t.php"] [unique_id "apK-R2bX5DA3XO6e_qQsOwAAASc"]
[Sat Aug 29 05:11:03.245934 2026] [security2:error] [pid 1321:tid 1573] [client 20.104.104.62:20726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/haha.php"] [unique_id "apK-R2jCPtor9NZ-byTr5AAABpA"]
[Sat Aug 29 05:11:03.252653 2026] [security2:error] [pid 1321:tid 1448] [remote 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK-R2jCPtor9NZ-byTr5QAGVVk"]
[Sat Aug 29 05:11:03.252832 2026] [security2:error] [pid 1321:tid 1513] [client 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK-R2jCPtor9NZ-byTr5QAGVVk"]
[Sat Aug 29 05:11:03.257712 2026] [security2:error] [pid 1321:tid 1562] [client 20.196.209.81:16743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/go.php"] [unique_id "apK-R2jCPtor9NZ-byTr5gAABoU"]
[Sat Aug 29 05:11:03.261552 2026] [security2:error] [pid 11274:tid 11539] [client 158.23.147.79:58885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/cong.php"] [unique_id "apK-R2bX5DA3XO6e_qQsPAAAAWg"]
[Sat Aug 29 05:11:03.315972 2026] [security2:error] [pid 11274:tid 11572] [client 45.148.10.62:36402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.zai.emf.mybluehost.me"] [uri "/.env"] [unique_id "apK-R2bX5DA3XO6e_qQsQQAAAYg"]
[Sat Aug 29 05:11:03.324704 2026] [security2:error] [pid 11274:tid 11568] [client 20.240.128.207:19891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/php8.php"] [unique_id "apK-R2bX5DA3XO6e_qQsQgAAAYQ"]
[Sat Aug 29 05:11:03.325018 2026] [security2:error] [pid 11274:tid 11495] [client 180.190.5.40:33367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.5.190.180.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK-R2bX5DA3XO6e_qQsQwAAATw"]
[Sat Aug 29 05:11:03.325097 2026] [security2:error] [pid 11274:tid 11495] [client 180.190.5.40:33367] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK-R2bX5DA3XO6e_qQsQwAAATw"]
[Sat Aug 29 05:11:03.338671 2026] [security2:error] [pid 1321:tid 1605] [client 20.100.175.163:13800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/menu.php"] [unique_id "apK-R2jCPtor9NZ-byTr5wAABrA"]
[Sat Aug 29 05:11:03.341126 2026] [security2:error] [pid 11274:tid 11349] [remote 2a06:98c0:3600::103:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.jobindjibouti.com"] [uri "/wp-json/wp/v2/job-listings"] [unique_id "apK-R2bX5DA3XO6e_qQsRAABciQ"]
[Sat Aug 29 05:11:03.341191 2026] [security2:error] [pid 11274:tid 11479] [client 197.219.150.206:58202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK-R2bX5DA3XO6e_qQsRgAAASw"]
[Sat Aug 29 05:11:03.341257 2026] [security2:error] [pid 11274:tid 11479] [client 197.219.150.206:58202] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK-R2bX5DA3XO6e_qQsRgAAASw"]
[Sat Aug 29 05:11:03.341475 2026] [security2:error] [pid 11274:tid 11519] [client 74.248.24.12:24942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/php.php"] [unique_id "apK-R2bX5DA3XO6e_qQsRwAAAVQ"]
[Sat Aug 29 05:11:03.352007 2026] [security2:error] [pid 11274:tid 11451] [client 68.155.159.216:56800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/file88.php"] [unique_id "apK-R2bX5DA3XO6e_qQsSQAAARE"]
[Sat Aug 29 05:11:03.352478 2026] [security2:error] [pid 11274:tid 11521] [client 20.104.104.62:16457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thepoetinnewyork.wanderlustpictures.com"] [uri "/inputs.php"] [unique_id "apK-R2bX5DA3XO6e_qQsSgAAAVY"]
[Sat Aug 29 05:11:03.353684 2026] [security2:error] [pid 11274:tid 11463] [client 158.158.54.35:17715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/radio.php"] [unique_id "apK-R2bX5DA3XO6e_qQsSwAAAR0"]
[Sat Aug 29 05:11:03.375720 2026] [security2:error] [pid 11274:tid 11536] [client 20.100.175.163:15568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/images/index.php"] [unique_id "apK-R2bX5DA3XO6e_qQsTgAAAWU"]
[Sat Aug 29 05:11:03.377228 2026] [security2:error] [pid 11274:tid 11567] [client 158.158.54.35:30334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/shell.php"] [unique_id "apK-R2bX5DA3XO6e_qQsTwAAAYM"]
[Sat Aug 29 05:11:03.386619 2026] [security2:error] [pid 11274:tid 11532] [client 185.104.184.230:53224] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.bap.gcl.mybluehost.me"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "apK-R2bX5DA3XO6e_qQsUQAAAWE"]
[Sat Aug 29 05:11:03.416051 2026] [security2:error] [pid 11274:tid 11471] [client 20.104.104.62:42090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/0xs.php"] [unique_id "apK-R2bX5DA3XO6e_qQsUgAAASU"]
[Sat Aug 29 05:11:03.422525 2026] [security2:error] [pid 11274:tid 11448] [client 68.155.159.216:6062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK-R2bX5DA3XO6e_qQsUwAAAQ4"]
[Sat Aug 29 05:11:03.453729 2026] [security2:error] [pid 11274:tid 11526] [client 68.155.159.216:62787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK-R2bX5DA3XO6e_qQsVAAAAVs"]
[Sat Aug 29 05:11:03.464386 2026] [security2:error] [pid 11274:tid 11492] [client 45.148.10.62:36402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.zai.emf.mybluehost.me"] [uri "/.env"] [unique_id "apK-R2bX5DA3XO6e_qQsWAAAATk"]
[Sat Aug 29 05:11:03.477447 2026] [security2:error] [pid 11274:tid 11352] [remote 45.148.10.62:36390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.yws.zpq.mybluehost.me"] [uri "/wp-login.php"] [unique_id "apK-R2bX5DA3XO6e_qQsVwABWic"]
[Sat Aug 29 05:11:03.484406 2026] [security2:error] [pid 11274:tid 11466] [client 20.52.41.200:2852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/assets/images/doc.php"] [unique_id "apK-R2bX5DA3XO6e_qQsWQAAASA"]
[Sat Aug 29 05:11:03.497017 2026] [security2:error] [pid 11274:tid 11486] [client 34.169.171.101:24152] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/backup.sql"] [unique_id "apK-R2bX5DA3XO6e_qQsXQAAATM"]
[Sat Aug 29 05:11:03.497894 2026] [security2:error] [pid 11274:tid 11469] [client 34.169.171.101:24136] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/terraform.tfstate.backup"] [unique_id "apK-R2bX5DA3XO6e_qQsXgAAASM"]
[Sat Aug 29 05:11:03.502740 2026] [security2:error] [pid 11274:tid 11499] [client 34.169.171.101:24204] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/files../.env"] [unique_id "apK-R2bX5DA3XO6e_qQsYQAAAUA"]
[Sat Aug 29 05:11:03.502932 2026] [security2:error] [pid 11274:tid 11445] [client 34.169.171.101:24184] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "forensicengineernj.com"] [uri "/login/..;/actuator/env"] [unique_id "apK-R2bX5DA3XO6e_qQsYgAAAQs"]
[Sat Aug 29 05:11:03.503987 2026] [security2:error] [pid 1321:tid 1567] [client 34.169.171.101:24196] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/static../.env"] [unique_id "apK-R2jCPtor9NZ-byTr7AAABoo"]
[Sat Aug 29 05:11:03.505271 2026] [security2:error] [pid 11274:tid 11551] [client 34.169.171.101:24166] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/dump.sql"] [unique_id "apK-R2bX5DA3XO6e_qQsYwAAAXM"]
[Sat Aug 29 05:11:03.509523 2026] [security2:error] [pid 11274:tid 11449] [client 34.169.171.101:24240] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "forensicengineernj.com"] [uri "/proc/self/environ"] [unique_id "apK-R2bX5DA3XO6e_qQsZAAAAQ8"]
[Sat Aug 29 05:11:03.512766 2026] [core:error] [pid 1321:tid 1498] [client 34.169.171.101:24212] AH10244: invalid URI path (/assets../../../.env)
[Sat Aug 29 05:11:03.513420 2026] [security2:error] [pid 1321:tid 1606] [client 34.169.171.101:24226] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "forensicengineernj.com"] [uri "/media../.env"] [unique_id "apK-R2jCPtor9NZ-byTr7wAABrE"]
[Sat Aug 29 05:11:03.533607 2026] [cgid:error] [pid 11274:tid 11527] [client 158.23.184.117:60142] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/drinkyourtrees/404.shtml
[Sat Aug 29 05:11:03.542061 2026] [security2:error] [pid 11274:tid 11558] [client 158.158.54.35:1326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/cc.php"] [unique_id "apK-R2bX5DA3XO6e_qQsbAAAAXo"]
[Sat Aug 29 05:11:03.544087 2026] [security2:error] [pid 11274:tid 11557] [client 158.23.147.79:62740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/index/function.php"] [unique_id "apK-R2bX5DA3XO6e_qQsbQAAAXk"]
[Sat Aug 29 05:11:03.546830 2026] [security2:error] [pid 11274:tid 11487] [client 158.23.147.79:62700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-mail.php"] [unique_id "apK-R2bX5DA3XO6e_qQsbgAAATQ"]
[Sat Aug 29 05:11:03.556446 2026] [security2:error] [pid 1321:tid 1538] [client 20.104.104.62:61776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/waf.php"] [unique_id "apK-R2jCPtor9NZ-byTr9gAABm4"]
[Sat Aug 29 05:11:03.560139 2026] [security2:error] [pid 11274:tid 11470] [client 20.104.104.62:16719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thepoetinnewyork.wanderlustpictures.com"] [uri "/adminfuns.php"] [unique_id "apK-R2bX5DA3XO6e_qQscAAAASQ"]
[Sat Aug 29 05:11:03.571483 2026] [security2:error] [pid 11274:tid 11513] [client 68.155.159.216:23476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-admin/images/about.php"] [unique_id "apK-R2bX5DA3XO6e_qQscQAAAU4"]
[Sat Aug 29 05:11:03.579597 2026] [security2:error] [pid 1321:tid 1529] [client 20.151.200.44:23581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/155.php"] [unique_id "apK-R2jCPtor9NZ-byTr9wAABmU"]
[Sat Aug 29 05:11:03.581341 2026] [security2:error] [pid 11274:tid 11524] [client 158.23.184.117:60142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/wk/admin.php"] [unique_id "apK-R2bX5DA3XO6e_qQscgAAAVk"]
[Sat Aug 29 05:11:03.617216 2026] [security2:error] [pid 11274:tid 11520] [client 4.205.62.107:62935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/dialog.php"] [unique_id "apK-R2bX5DA3XO6e_qQsfQAAAVU"]
[Sat Aug 29 05:11:03.650224 2026] [security2:error] [pid 11274:tid 11537] [client 4.205.62.107:4935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/luJMF.php"] [unique_id "apK-R2bX5DA3XO6e_qQsgAAAAWY"]
[Sat Aug 29 05:11:03.666160 2026] [security2:error] [pid 11274:tid 11453] [client 20.196.209.81:15407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/gecko-new.php"] [unique_id "apK-R2bX5DA3XO6e_qQsgQAAARM"]
[Sat Aug 29 05:11:03.684752 2026] [security2:error] [pid 11274:tid 11514] [client 103.48.146.148:51191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 148.146.48.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK-R2bX5DA3XO6e_qQsggAAAU8"]
[Sat Aug 29 05:11:03.684850 2026] [security2:error] [pid 11274:tid 11514] [client 103.48.146.148:51191] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK-R2bX5DA3XO6e_qQsggAAAU8"]
[Sat Aug 29 05:11:03.688322 2026] [security2:error] [pid 11274:tid 11552] [client 20.104.104.62:64725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/sc.php"] [unique_id "apK-R2bX5DA3XO6e_qQsgwAAAXQ"]
[Sat Aug 29 05:11:03.696704 2026] [security2:error] [pid 11274:tid 11568] [client 185.104.184.230:53232] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.bap.gcl.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "apK-R2bX5DA3XO6e_qQshAAAAYQ"]
[Sat Aug 29 05:11:03.728479 2026] [security2:error] [pid 11274:tid 11498] [client 158.23.184.117:39904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/admin.php"] [unique_id "apK-R2bX5DA3XO6e_qQsiAAAAT8"]
[Sat Aug 29 05:11:03.752078 2026] [security2:error] [pid 11274:tid 11555] [client 158.23.147.79:24466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK-R2bX5DA3XO6e_qQsiwAAAXc"]
[Sat Aug 29 05:11:03.762622 2026] [security2:error] [pid 11274:tid 11532] [client 20.151.200.44:63791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/zoz.php"] [unique_id "apK-R2bX5DA3XO6e_qQsjgAAAWE"]
[Sat Aug 29 05:11:03.763962 2026] [cgid:error] [pid 11274:tid 11572] [client 20.104.104.62:16472] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/thepoetinnewyork/404.shtml
[Sat Aug 29 05:11:03.765841 2026] [security2:error] [pid 11274:tid 11500] [client 20.104.104.62:52254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/bnnof6.php"] [unique_id "apK-R2bX5DA3XO6e_qQsjwAAAUE"]
[Sat Aug 29 05:11:03.775306 2026] [security2:error] [pid 11274:tid 11502] [client 4.205.62.107:59076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/queue.php"] [unique_id "apK-R2bX5DA3XO6e_qQskQAAAUM"]
[Sat Aug 29 05:11:03.786934 2026] [autoindex:error] [pid 11274:tid 11506] [client 45.148.10.62:36402] AH01276: Cannot serve directory /home3/zaiemfmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:11:03.801970 2026] [security2:error] [pid 11274:tid 11544] [client 158.158.54.35:33207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/item.php"] [unique_id "apK-R2bX5DA3XO6e_qQskwAAAWw"]
[Sat Aug 29 05:11:03.818316 2026] [security2:error] [pid 11274:tid 11559] [client 68.155.159.216:56564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-content/packed.php"] [unique_id "apK-R2bX5DA3XO6e_qQslAAAAXs"]
[Sat Aug 29 05:11:03.822935 2026] [security2:error] [pid 11274:tid 11539] [client 158.158.54.35:33157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/elp.php"] [unique_id "apK-R2bX5DA3XO6e_qQslQAAAWg"]
[Sat Aug 29 05:11:03.851146 2026] [cgid:error] [pid 11274:tid 11483] [client 20.104.104.62:16472] AH01265: stderr from /home1/wanderl1/public_html/thepoetinnewyork/cgi-bin/: attempt to invoke directory as script
[Sat Aug 29 05:11:03.866551 2026] [security2:error] [pid 1321:tid 1430] [remote 67.205.0.102:49662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 102.0.205.67.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "knowledgeofwater.com"] [uri "/xmlrpc.php"] [unique_id "apK-R2jCPtor9NZ-byTr_QAGrEg"]
[Sat Aug 29 05:11:03.866727 2026] [security2:error] [pid 1321:tid 1601] [client 67.205.0.102:49662] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "knowledgeofwater.com"] [uri "/xmlrpc.php"] [unique_id "apK-R2jCPtor9NZ-byTr_QAGrEg"]
[Sat Aug 29 05:11:03.870823 2026] [core:error] [pid 1321:tid 1604] [client 20.100.175.163:9624] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:03.870837 2026] [core:error] [pid 1321:tid 1604] [client 20.100.175.163:9624] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:03.876305 2026] [security2:error] [pid 11274:tid 11525] [client 158.23.184.117:39883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/goods.php"] [unique_id "apK-R2bX5DA3XO6e_qQsmQAAAVo"]
[Sat Aug 29 05:11:03.877087 2026] [security2:error] [pid 11274:tid 11495] [client 20.100.175.163:13384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK-R2bX5DA3XO6e_qQsmgAAATw"]
[Sat Aug 29 05:11:03.881577 2026] [security2:error] [pid 11274:tid 11482] [client 4.205.62.107:64912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/X57.php"] [unique_id "apK-R2bX5DA3XO6e_qQsmwAAAS8"]
[Sat Aug 29 05:11:03.884877 2026] [security2:error] [pid 11274:tid 11499] [client 68.155.159.216:33646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/.well-knownold/index.php"] [unique_id "apK-R2bX5DA3XO6e_qQsnAAAAUA"]
[Sat Aug 29 05:11:03.902438 2026] [security2:error] [pid 1321:tid 1588] [client 68.155.159.216:63795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/packed.php"] [unique_id "apK-R2jCPtor9NZ-byTr_wAABp8"]
[Sat Aug 29 05:11:03.919393 2026] [security2:error] [pid 1321:tid 1531] [client 74.248.24.12:12157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/init.php"] [unique_id "apK-R2jCPtor9NZ-byTsAAAABmc"]
[Sat Aug 29 05:11:03.919915 2026] [security2:error] [pid 11274:tid 11445] [client 20.104.104.62:16472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thepoetinnewyork.wanderlustpictures.com"] [uri "/edit.php"] [unique_id "apK-R2bX5DA3XO6e_qQsnQAAAQs"]
[Sat Aug 29 05:11:03.932406 2026] [security2:error] [pid 11274:tid 11485] [client 20.52.41.200:2757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/bgymj.php"] [unique_id "apK-R2bX5DA3XO6e_qQsngAAATI"]
[Sat Aug 29 05:11:03.945130 2026] [security2:error] [pid 11274:tid 11455] [client 20.104.104.62:40012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/ah24.php"] [unique_id "apK-R2bX5DA3XO6e_qQsoAAAARU"]
[Sat Aug 29 05:11:03.991558 2026] [security2:error] [pid 11274:tid 11527] [client 185.104.184.230:53238] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.bap.gcl.mybluehost.me"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "apK-R2bX5DA3XO6e_qQsowAAAVw"]
[Sat Aug 29 05:11:03.991991 2026] [security2:error] [pid 11274:tid 11509] [client 158.158.54.35:1446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/files/index.php"] [unique_id "apK-R2bX5DA3XO6e_qQspAAAAUo"]
[Sat Aug 29 05:11:03.996263 2026] [security2:error] [pid 11274:tid 11468] [client 52.139.37.240:36860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/ahax.php"] [unique_id "apK-R2bX5DA3XO6e_qQspQAAASI"]
[Sat Aug 29 05:11:04.014641 2026] [security2:error] [pid 11274:tid 11534] [client 20.240.128.207:19865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/install.php"] [unique_id "apK-SGbX5DA3XO6e_qQspgAAAWM"]
[Sat Aug 29 05:11:04.021469 2026] [security2:error] [pid 11274:tid 11489] [client 158.23.184.117:60149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/w.php"] [unique_id "apK-SGbX5DA3XO6e_qQspwAAATY"]
[Sat Aug 29 05:11:04.035462 2026] [security2:error] [pid 1321:tid 1526] [client 4.205.62.107:61653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/vx.php"] [unique_id "apK-SGjCPtor9NZ-byTsAQAABmI"]
[Sat Aug 29 05:11:04.050306 2026] [security2:error] [pid 11274:tid 11558] [client 20.104.104.62:47586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/fvck.php"] [unique_id "apK-SGbX5DA3XO6e_qQsqAAAAXo"]
[Sat Aug 29 05:11:04.058671 2026] [security2:error] [pid 11274:tid 11487] [client 20.151.200.44:63626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/mcd.php"] [unique_id "apK-SGbX5DA3XO6e_qQsqgAAATQ"]
[Sat Aug 29 05:11:04.069950 2026] [security2:error] [pid 1321:tid 1547] [client 20.196.209.81:15400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/wp-admin.php"] [unique_id "apK-SGjCPtor9NZ-byTsBAAABnY"]
[Sat Aug 29 05:11:04.078217 2026] [security2:error] [pid 11274:tid 11524] [client 20.48.160.90:51857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/wnnjpsby.php"] [unique_id "apK-SGbX5DA3XO6e_qQsrAAAAVk"]
[Sat Aug 29 05:11:04.090236 2026] [security2:error] [pid 11274:tid 11480] [client 45.148.10.62:36402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.zai.emf.mybluehost.me"] [uri "/api/.env"] [unique_id "apK-SGbX5DA3XO6e_qQsrwAAAS0"]
[Sat Aug 29 05:11:04.106224 2026] [security2:error] [pid 1321:tid 1521] [client 20.104.104.62:61784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/ztv.php"] [unique_id "apK-SGjCPtor9NZ-byTsBwAABl0"]
[Sat Aug 29 05:11:04.107768 2026] [security2:error] [pid 1321:tid 1579] [client 158.23.147.79:5804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-content/x.php"] [unique_id "apK-SGjCPtor9NZ-byTsCAAABpY"]
[Sat Aug 29 05:11:04.120993 2026] [security2:error] [pid 1321:tid 1590] [client 20.104.104.62:16483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thepoetinnewyork.wanderlustpictures.com"] [uri "/term.php"] [unique_id "apK-SGjCPtor9NZ-byTsCQAABqE"]
[Sat Aug 29 05:11:04.157188 2026] [security2:error] [pid 1321:tid 1503] [client 158.23.147.79:60119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-content/index.php"] [unique_id "apK-SGjCPtor9NZ-byTsDAAABks"]
[Sat Aug 29 05:11:04.166861 2026] [security2:error] [pid 1321:tid 1596] [client 158.23.184.117:60158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/new.php"] [unique_id "apK-SGjCPtor9NZ-byTsDQAABqc"]
[Sat Aug 29 05:11:04.181762 2026] [security2:error] [pid 11274:tid 11508] [client 68.155.159.216:56556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK-SGbX5DA3XO6e_qQssQAAAUk"]
[Sat Aug 29 05:11:04.193941 2026] [security2:error] [pid 11274:tid 11467] [client 52.139.37.240:36703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/breads1.php"] [unique_id "apK-SGbX5DA3XO6e_qQssgAAASE"]
[Sat Aug 29 05:11:04.230330 2026] [security2:error] [pid 1321:tid 1499] [client 4.205.62.107:6873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/css.php"] [unique_id "apK-SGjCPtor9NZ-byTsDgAABkc"]
[Sat Aug 29 05:11:04.239726 2026] [security2:error] [pid 11274:tid 11493] [client 45.148.10.62:36402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.zai.emf.mybluehost.me"] [uri "/.env.bak"] [unique_id "apK-SGbX5DA3XO6e_qQsswAAATo"]
[Sat Aug 29 05:11:04.253767 2026] [security2:error] [pid 1321:tid 1510] [client 20.48.160.90:61055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/abcd.php"] [unique_id "apK-SGjCPtor9NZ-byTsDwAABlI"]
[Sat Aug 29 05:11:04.253775 2026] [security2:error] [pid 11274:tid 11461] [client 20.48.160.90:43611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/gigi.php"] [unique_id "apK-SGbX5DA3XO6e_qQstAAAARs"]
[Sat Aug 29 05:11:04.254500 2026] [security2:error] [pid 11274:tid 11498] [client 68.155.159.216:65092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK-SGbX5DA3XO6e_qQstQAAAT8"]
[Sat Aug 29 05:11:04.258381 2026] [security2:error] [pid 11274:tid 11533] [client 158.158.54.35:14859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/t.php"] [unique_id "apK-SGbX5DA3XO6e_qQstgAAAWI"]
[Sat Aug 29 05:11:04.284884 2026] [security2:error] [pid 11274:tid 11501] [client 158.158.54.35:33202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-content/cong.php"] [unique_id "apK-SGbX5DA3XO6e_qQstwAAAUI"]
[Sat Aug 29 05:11:04.286915 2026] [security2:error] [pid 11274:tid 11564] [client 20.151.200.44:64641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/private.php"] [unique_id "apK-SGbX5DA3XO6e_qQsuAAAAYA"]
[Sat Aug 29 05:11:04.287413 2026] [security2:error] [pid 11274:tid 11536] [client 185.104.184.230:53240] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "cpanel.bap.gcl.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "apK-SGbX5DA3XO6e_qQsuQAAAWU"]
[Sat Aug 29 05:11:04.310966 2026] [security2:error] [pid 11274:tid 11550] [client 158.23.184.117:60147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/php8.php"] [unique_id "apK-SGbX5DA3XO6e_qQsugAAAXI"]
[Sat Aug 29 05:11:04.318029 2026] [security2:error] [pid 11274:tid 11494] [client 20.104.104.62:16493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thepoetinnewyork.wanderlustpictures.com"] [uri "/wp.php"] [unique_id "apK-SGbX5DA3XO6e_qQsuwAAATs"]
[Sat Aug 29 05:11:04.323937 2026] [security2:error] [pid 1321:tid 1561] [client 20.104.104.62:52314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/kure.php"] [unique_id "apK-SGjCPtor9NZ-byTsEQAABoQ"]
[Sat Aug 29 05:11:04.364838 2026] [security2:error] [pid 11274:tid 11490] [client 20.100.175.163:4772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/inputs.php"] [unique_id "apK-SGbX5DA3XO6e_qQsvgAAATc"]
[Sat Aug 29 05:11:04.378538 2026] [security2:error] [pid 11274:tid 11448] [client 68.155.159.216:2027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/sad/about.php"] [unique_id "apK-SGbX5DA3XO6e_qQsvwAAAQ4"]
[Sat Aug 29 05:11:04.383643 2026] [security2:error] [pid 11274:tid 11526] [client 158.23.147.79:62754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-includes/js/index.php"] [unique_id "apK-SGbX5DA3XO6e_qQswAAAAVs"]
[Sat Aug 29 05:11:04.389580 2026] [security2:error] [pid 11274:tid 11500] [client 52.139.37.240:36847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/must.php"] [unique_id "apK-SGbX5DA3XO6e_qQswwAAAUE"]
[Sat Aug 29 05:11:04.389614 2026] [security2:error] [pid 11274:tid 11559] [client 20.48.160.90:64243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/nofile.php"] [unique_id "apK-SGbX5DA3XO6e_qQswgAAAXs"]
[Sat Aug 29 05:11:04.392205 2026] [security2:error] [pid 11274:tid 11568] [client 20.52.41.200:2813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK-SGbX5DA3XO6e_qQsxAAAAYQ"]
[Sat Aug 29 05:11:04.408659 2026] [security2:error] [pid 1321:tid 1600] [client 103.240.76.112:43025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK-SGjCPtor9NZ-byTsFgAABqs"]
[Sat Aug 29 05:11:04.408781 2026] [security2:error] [pid 1321:tid 1600] [client 103.240.76.112:43025] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK-SGjCPtor9NZ-byTsFgAABqs"]
[Sat Aug 29 05:11:04.420736 2026] [security2:error] [pid 1321:tid 1575] [client 158.158.54.35:5847] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "narrowgate-industries.com"] [uri "/1.php7"] [unique_id "apK-SGjCPtor9NZ-byTsFwAABpI"]
[Sat Aug 29 05:11:04.420833 2026] [security2:error] [pid 1321:tid 1575] [client 158.158.54.35:5847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/1.php7"] [unique_id "apK-SGjCPtor9NZ-byTsFwAABpI"]
[Sat Aug 29 05:11:04.445459 2026] [security2:error] [pid 11274:tid 11471] [client 52.139.37.240:56113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/ahax.php"] [unique_id "apK-SGbX5DA3XO6e_qQsxwAAASU"]
[Sat Aug 29 05:11:04.454079 2026] [security2:error] [pid 11274:tid 11517] [client 68.155.159.216:56768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/NewFile.php/"] [unique_id "apK-SGbX5DA3XO6e_qQsyAAAAVI"]
[Sat Aug 29 05:11:04.454099 2026] [security2:error] [pid 11274:tid 11503] [client 158.23.184.117:39647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/wp-content/themes/admin.php"] [unique_id "apK-SGbX5DA3XO6e_qQsyQAAAUQ"]
[Sat Aug 29 05:11:04.475373 2026] [security2:error] [pid 11274:tid 11521] [client 74.248.24.12:9300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "apK-SGbX5DA3XO6e_qQsygAAAVY"]
[Sat Aug 29 05:11:04.477429 2026] [security2:error] [pid 11274:tid 11505] [client 20.104.104.62:61823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/cafe.php"] [unique_id "apK-SGbX5DA3XO6e_qQszAAAAUY"]
[Sat Aug 29 05:11:04.512008 2026] [security2:error] [pid 11274:tid 11529] [client 20.104.104.62:16509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thepoetinnewyork.wanderlustpictures.com"] [uri "/ioxi-o.php"] [unique_id "apK-SGbX5DA3XO6e_qQszgAAAV4"]
[Sat Aug 29 05:11:04.521448 2026] [security2:error] [pid 11274:tid 11499] [client 20.48.160.90:63269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/run.php"] [unique_id "apK-SGbX5DA3XO6e_qQszwAAAUA"]
[Sat Aug 29 05:11:04.528487 2026] [security2:error] [pid 1321:tid 1609] [client 20.240.128.207:19897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/ioxi-o.php"] [unique_id "apK-SGjCPtor9NZ-byTsGQAABrQ"]
[Sat Aug 29 05:11:04.533583 2026] [security2:error] [pid 11274:tid 11455] [client 68.155.159.216:5991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK-SGbX5DA3XO6e_qQs0QAAARU"]
[Sat Aug 29 05:11:04.536548 2026] [security2:error] [pid 11274:tid 11515] [client 20.196.209.81:16204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/wp-configs.php"] [unique_id "apK-SGbX5DA3XO6e_qQs0wAAAVA"]
[Sat Aug 29 05:11:04.557916 2026] [security2:error] [pid 11274:tid 11548] [client 68.155.159.216:62824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/asd.php"] [unique_id "apK-SGbX5DA3XO6e_qQs1gAAAXA"]
[Sat Aug 29 05:11:04.583772 2026] [security2:error] [pid 11274:tid 11482] [client 52.139.37.240:36863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/up.php"] [unique_id "apK-SGbX5DA3XO6e_qQs1wAAAS8"]
[Sat Aug 29 05:11:04.583808 2026] [security2:error] [pid 1321:tid 1502] [client 20.104.104.62:64760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/0x.php"] [unique_id "apK-SGjCPtor9NZ-byTsGgAABko"]
[Sat Aug 29 05:11:04.596548 2026] [security2:error] [pid 11274:tid 11497] [client 158.23.184.117:60139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/txets.php"] [unique_id "apK-SGbX5DA3XO6e_qQs2AAAAT4"]
[Sat Aug 29 05:11:04.598201 2026] [security2:error] [pid 11274:tid 11512] [client 20.48.160.90:28063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/info.php/new.php"] [unique_id "apK-SGbX5DA3XO6e_qQs2QAAAU0"]
[Sat Aug 29 05:11:04.614468 2026] [security2:error] [pid 1321:tid 1563] [client 20.151.200.44:62187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/waw.php"] [unique_id "apK-SGjCPtor9NZ-byTsGwAABoY"]
[Sat Aug 29 05:11:04.625435 2026] [security2:error] [pid 11274:tid 11487] [client 20.151.200.44:63685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/mmm.php"] [unique_id "apK-SGbX5DA3XO6e_qQs2gAAATQ"]
[Sat Aug 29 05:11:04.640846 2026] [security2:error] [pid 11274:tid 11513] [client 20.104.104.62:52339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/eval.php"] [unique_id "apK-SGbX5DA3XO6e_qQs2wAAAU4"]
[Sat Aug 29 05:11:04.648689 2026] [security2:error] [pid 1321:tid 1607] [client 20.100.175.163:7939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/lite.php"] [unique_id "apK-SGjCPtor9NZ-byTsHAAABrI"]
[Sat Aug 29 05:11:04.652647 2026] [security2:error] [pid 11274:tid 11520] [client 158.23.147.79:63810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/cgi-bin/index.php"] [unique_id "apK-SGbX5DA3XO6e_qQs3AAAAVU"]
[Sat Aug 29 05:11:04.654413 2026] [security2:error] [pid 11274:tid 11480] [client 158.23.147.79:55250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/.well-known/content.php"] [unique_id "apK-SGbX5DA3XO6e_qQs3QAAAS0"]
[Sat Aug 29 05:11:04.666337 2026] [security2:error] [pid 11274:tid 11472] [client 52.139.37.240:16475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/breads1.php"] [unique_id "apK-SGbX5DA3XO6e_qQs3gAAASY"]
[Sat Aug 29 05:11:04.672896 2026] [security2:error] [pid 11274:tid 11553] [client 158.23.147.79:14233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-login.php"] [unique_id "apK-SGbX5DA3XO6e_qQs3wAAAXU"]
[Sat Aug 29 05:11:04.677905 2026] [security2:error] [pid 11274:tid 11504] [client 20.48.160.90:61037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/new.php"] [unique_id "apK-SGbX5DA3XO6e_qQs4AAAAUU"]
[Sat Aug 29 05:11:04.706010 2026] [security2:error] [pid 1321:tid 1555] [client 158.158.54.35:33163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/i.php"] [unique_id "apK-SGjCPtor9NZ-byTsHQAABn4"]
[Sat Aug 29 05:11:04.709987 2026] [security2:error] [pid 11274:tid 11473] [client 45.148.10.62:36402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.zai.emf.mybluehost.me"] [uri "/stripe/.env"] [unique_id "apK-SGbX5DA3XO6e_qQs4gAAASc"]
[Sat Aug 29 05:11:04.710212 2026] [cgid:error] [pid 11274:tid 11470] [client 20.104.104.62:16755] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/thepoetinnewyork/404.shtml
[Sat Aug 29 05:11:04.729694 2026] [security2:error] [pid 1321:tid 1558] [client 158.158.54.35:29468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-admin/images/admin.php"] [unique_id "apK-SGjCPtor9NZ-byTsHgAABoE"]
[Sat Aug 29 05:11:04.730402 2026] [security2:error] [pid 11274:tid 11493] [client 158.23.147.79:43331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/file5.php"] [unique_id "apK-SGbX5DA3XO6e_qQs4wAAATo"]
[Sat Aug 29 05:11:04.730592 2026] [security2:error] [pid 11274:tid 11479] [client 20.151.200.44:63384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/lfi.php"] [unique_id "apK-SGbX5DA3XO6e_qQs5AAAASw"]
[Sat Aug 29 05:11:04.739002 2026] [security2:error] [pid 11274:tid 11496] [client 158.23.184.117:60140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/adminfuns.php"] [unique_id "apK-SGbX5DA3XO6e_qQs5QAAAT0"]
[Sat Aug 29 05:11:04.769652 2026] [security2:error] [pid 11274:tid 11498] [client 4.205.62.107:62922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/phpinfo01.php"] [unique_id "apK-SGbX5DA3XO6e_qQs5gAAAT8"]
[Sat Aug 29 05:11:04.772942 2026] [security2:error] [pid 11274:tid 11451] [client 20.104.104.62:16755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thepoetinnewyork.wanderlustpictures.com"] [uri "/system_core.php"] [unique_id "apK-SGbX5DA3XO6e_qQs5wAAARE"]
[Sat Aug 29 05:11:04.785773 2026] [security2:error] [pid 11274:tid 11533] [client 4.205.62.107:4492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/drykl.php"] [unique_id "apK-SGbX5DA3XO6e_qQs6AAAAWI"]
[Sat Aug 29 05:11:04.786004 2026] [security2:error] [pid 1321:tid 1562] [client 20.104.104.62:42084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/sao.php"] [unique_id "apK-SGjCPtor9NZ-byTsHwAABoU"]
[Sat Aug 29 05:11:04.819545 2026] [security2:error] [pid 1321:tid 1549] [client 20.104.104.62:20812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/up.php5"] [unique_id "apK-SGjCPtor9NZ-byTsIAAABng"]
[Sat Aug 29 05:11:04.835480 2026] [security2:error] [pid 1321:tid 1520] [client 68.155.159.216:1954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/images/index.php"] [unique_id "apK-SGjCPtor9NZ-byTsIQAABlw"]
[Sat Aug 29 05:11:04.848891 2026] [security2:error] [pid 11274:tid 11550] [client 20.104.49.130:51116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/666.php"] [unique_id "apK-SGbX5DA3XO6e_qQs7AAAAXI"]
[Sat Aug 29 05:11:04.851789 2026] [security2:error] [pid 11274:tid 11494] [client 20.48.160.90:63288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/inx.php"] [unique_id "apK-SGbX5DA3XO6e_qQs7QAAATs"]
[Sat Aug 29 05:11:04.852848 2026] [core:error] [pid 11274:tid 11549] [client 20.52.41.200:2836] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:04.852864 2026] [core:error] [pid 11274:tid 11549] [client 20.52.41.200:2836] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:04.853702 2026] [security2:error] [pid 1321:tid 1573] [client 20.100.175.163:4423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/alfa.php"] [unique_id "apK-SGjCPtor9NZ-byTsIgAABpA"]
[Sat Aug 29 05:11:04.863228 2026] [security2:error] [pid 1321:tid 1608] [client 158.23.147.79:24456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/makeasmtp.php"] [unique_id "apK-SGjCPtor9NZ-byTsIwAABrM"]
[Sat Aug 29 05:11:04.864185 2026] [security2:error] [pid 11274:tid 11547] [client 52.139.37.240:16737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/must.php"] [unique_id "apK-SGbX5DA3XO6e_qQs7wAAAW8"]
[Sat Aug 29 05:11:04.866450 2026] [security2:error] [pid 11274:tid 11552] [client 158.158.54.35:5833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/disagraeosc.php"] [unique_id "apK-SGbX5DA3XO6e_qQs8QAAAXQ"]
[Sat Aug 29 05:11:04.883858 2026] [security2:error] [pid 11274:tid 11477] [client 158.23.184.117:39879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/403.php"] [unique_id "apK-SGbX5DA3XO6e_qQs8wAAASs"]
[Sat Aug 29 05:11:04.892728 2026] [security2:error] [pid 11274:tid 11511] [client 52.139.37.240:36836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/wp-content/155.php"] [unique_id "apK-SGbX5DA3XO6e_qQs9QAAAUw"]
[Sat Aug 29 05:11:04.926351 2026] [security2:error] [pid 11274:tid 11448] [client 68.155.159.216:38560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-l0gin.php"] [unique_id "apK-SGbX5DA3XO6e_qQs9gAAAQ4"]
[Sat Aug 29 05:11:04.953194 2026] [security2:error] [pid 11274:tid 11501] [client 20.196.209.81:16247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/essexec.php"] [unique_id "apK-SGbX5DA3XO6e_qQs9wAAAUI"]
[Sat Aug 29 05:11:04.972822 2026] [security2:error] [pid 11274:tid 11500] [client 20.104.104.62:52259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/uuu.php"] [unique_id "apK-SGbX5DA3XO6e_qQs-AAAAUE"]
[Sat Aug 29 05:11:04.978223 2026] [cgid:error] [pid 1321:tid 1585] [client 20.104.104.62:16479] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/thepoetinnewyork/404.shtml
[Sat Aug 29 05:11:04.984416 2026] [security2:error] [pid 11274:tid 11568] [client 20.104.104.62:20806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/shell.php5"] [unique_id "apK-SGbX5DA3XO6e_qQs-QAAAYQ"]
[Sat Aug 29 05:11:05.010502 2026] [security2:error] [pid 11274:tid 11450] [client 20.48.160.90:63253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/vpn.php"] [unique_id "apK-SWbX5DA3XO6e_qQs-wAAARA"]
[Sat Aug 29 05:11:05.011998 2026] [security2:error] [pid 11274:tid 11484] [client 68.155.159.216:33588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK-SWbX5DA3XO6e_qQs_AAAATE"]
[Sat Aug 29 05:11:05.015422 2026] [security2:error] [pid 11274:tid 11503] [client 68.155.159.216:65052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-content/packed.php"] [unique_id "apK-SWbX5DA3XO6e_qQs_gAAAUQ"]
[Sat Aug 29 05:11:05.037832 2026] [cgid:error] [pid 11274:tid 11546] [client 158.23.184.117:39900] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/drinkyourtrees/404.shtml
[Sat Aug 29 05:11:05.042518 2026] [security2:error] [pid 1321:tid 1497] [client 20.104.104.62:16479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thepoetinnewyork.wanderlustpictures.com"] [uri "/goods.php"] [unique_id "apK-SWjCPtor9NZ-byTsJgAABkU"]
[Sat Aug 29 05:11:05.061770 2026] [security2:error] [pid 11274:tid 11540] [client 4.205.62.107:64948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/register.php"] [unique_id "apK-SWbX5DA3XO6e_qQtAQAAAWk"]
[Sat Aug 29 05:11:05.076583 2026] [security2:error] [pid 1321:tid 1574] [client 52.139.37.240:16727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/up.php"] [unique_id "apK-SWjCPtor9NZ-byTsJwAABpE"]
[Sat Aug 29 05:11:05.085264 2026] [security2:error] [pid 11274:tid 11485] [client 158.23.184.117:39900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/.trash7206/index.php"] [unique_id "apK-SWbX5DA3XO6e_qQtBAAAATI"]
[Sat Aug 29 05:11:05.086618 2026] [security2:error] [pid 11274:tid 11561] [client 52.139.37.240:36858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/wp-update.php"] [unique_id "apK-SWbX5DA3XO6e_qQtBQAAAX0"]
[Sat Aug 29 05:11:05.102640 2026] [security2:error] [pid 11274:tid 11465] [client 20.240.128.207:13191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/xmlrpc.php"] [unique_id "apK-SWbX5DA3XO6e_qQtAwAAAR8"]
[Sat Aug 29 05:11:05.115175 2026] [security2:error] [pid 1321:tid 1576] [client 20.104.104.62:48699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/see.php"] [unique_id "apK-SWjCPtor9NZ-byTsKgAABpM"]
[Sat Aug 29 05:11:05.147309 2026] [security2:error] [pid 11274:tid 11456] [client 158.158.54.35:29105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/deepseek_d.php"] [unique_id "apK-SWbX5DA3XO6e_qQtBwAAARY"]
[Sat Aug 29 05:11:05.147953 2026] [security2:error] [pid 11274:tid 11509] [client 20.104.104.62:52338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/private.php"] [unique_id "apK-SWbX5DA3XO6e_qQtCQAAAUo"]
[Sat Aug 29 05:11:05.156737 2026] [core:error] [pid 11274:tid 11459] [client 20.48.160.90:51868] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:05.156754 2026] [core:error] [pid 11274:tid 11459] [client 20.48.160.90:51868] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:05.187030 2026] [security2:error] [pid 1321:tid 1606] [client 158.158.54.35:8490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-mail.php"] [unique_id "apK-SWjCPtor9NZ-byTsLAAABrE"]
[Sat Aug 29 05:11:05.187431 2026] [security2:error] [pid 11274:tid 11489] [client 4.205.62.107:63959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/ty.php"] [unique_id "apK-SWbX5DA3XO6e_qQtDQAAATY"]
[Sat Aug 29 05:11:05.207394 2026] [security2:error] [pid 11274:tid 11522] [client 20.100.175.163:30115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/term.php"] [unique_id "apK-SWbX5DA3XO6e_qQtDgAAAVc"]
[Sat Aug 29 05:11:05.223471 2026] [security2:error] [pid 11274:tid 11551] [client 20.48.160.90:28120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/w.php"] [unique_id "apK-SWbX5DA3XO6e_qQtDwAAAXM"]
[Sat Aug 29 05:11:05.226996 2026] [security2:error] [pid 11274:tid 11487] [client 158.23.147.79:5887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK-SWbX5DA3XO6e_qQtEAAAATQ"]
[Sat Aug 29 05:11:05.227985 2026] [security2:error] [pid 11274:tid 11513] [client 20.104.104.62:20676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/inc/config.php"] [unique_id "apK-SWbX5DA3XO6e_qQtEQAAAU4"]
[Sat Aug 29 05:11:05.229770 2026] [security2:error] [pid 11274:tid 11554] [client 20.48.160.90:63355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/shiny.php"] [unique_id "apK-SWbX5DA3XO6e_qQtEgAAAXY"]
[Sat Aug 29 05:11:05.236581 2026] [security2:error] [pid 11274:tid 11530] [client 158.23.184.117:60109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/.trash7206/admin.php"] [unique_id "apK-SWbX5DA3XO6e_qQtEwAAAV8"]
[Sat Aug 29 05:11:05.242962 2026] [security2:error] [pid 1321:tid 1538] [client 20.104.104.62:16464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thepoetinnewyork.wanderlustpictures.com"] [uri "/bolt.php"] [unique_id "apK-SWjCPtor9NZ-byTsLQAABm4"]
[Sat Aug 29 05:11:05.256133 2026] [security2:error] [pid 11274:tid 11480] [client 20.104.18.15:43869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/wp-admin/js/wp-load.php"] [unique_id "apK-SWbX5DA3XO6e_qQtFAAAAS0"]
[Sat Aug 29 05:11:05.269256 2026] [security2:error] [pid 11274:tid 11475] [client 20.104.18.15:43885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/run.php"] [unique_id "apK-SWbX5DA3XO6e_qQtFQAAASk"]
[Sat Aug 29 05:11:05.281106 2026] [security2:error] [pid 11274:tid 11560] [client 52.139.37.240:35859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/xmrlpc.php"] [unique_id "apK-SWbX5DA3XO6e_qQtFgAAAXw"]
[Sat Aug 29 05:11:05.291139 2026] [security2:error] [pid 1321:tid 1581] [client 158.23.147.79:28092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/about/function.php"] [unique_id "apK-SWjCPtor9NZ-byTsLwAABpg"]
[Sat Aug 29 05:11:05.307858 2026] [security2:error] [pid 11274:tid 11468] [client 20.52.41.200:2785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-load.php"] [unique_id "apK-SWbX5DA3XO6e_qQtFwAAASI"]
[Sat Aug 29 05:11:05.312332 2026] [security2:error] [pid 11274:tid 11452] [client 20.104.18.15:15045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/m.php"] [unique_id "apK-SWbX5DA3XO6e_qQtGAAAARI"]
[Sat Aug 29 05:11:05.313142 2026] [security2:error] [pid 1321:tid 1501] [client 34.50.189.51:38084] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "discocollective.kriveloff-associates.com"] [uri "/.env.production.bak"] [unique_id "apK-SWjCPtor9NZ-byTsMgAABkk"]
[Sat Aug 29 05:11:05.313367 2026] [security2:error] [pid 1321:tid 1514] [client 34.50.189.51:38116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.189.50.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "discocollective.kriveloff-associates.com"] [uri "/.env.php"] [unique_id "apK-SWjCPtor9NZ-byTsMwAABlY"]
[Sat Aug 29 05:11:05.314480 2026] [core:error] [pid 1321:tid 1512] [client 34.50.189.51:38128] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:05.314497 2026] [core:error] [pid 1321:tid 1512] [client 34.50.189.51:38128] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:05.315439 2026] [security2:error] [pid 1321:tid 1507] [client 158.158.54.35:2011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-logs.php"] [unique_id "apK-SWjCPtor9NZ-byTsOAAABk8"]
[Sat Aug 29 05:11:05.316047 2026] [security2:error] [pid 11274:tid 11508] [client 34.50.189.51:38170] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/deploy/.env"] [unique_id "apK-SWbX5DA3XO6e_qQtGQAAAUk"]
[Sat Aug 29 05:11:05.316129 2026] [security2:error] [pid 11274:tid 11508] [client 34.50.189.51:38170] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "discocollective.kriveloff-associates.com"] [uri "/deploy/.env"] [unique_id "apK-SWbX5DA3XO6e_qQtGQAAAUk"]
[Sat Aug 29 05:11:05.316223 2026] [security2:error] [pid 1321:tid 1525] [client 34.50.189.51:38054] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/service/.env"] [unique_id "apK-SWjCPtor9NZ-byTsNQAABmE"]
[Sat Aug 29 05:11:05.316261 2026] [core:error] [pid 1321:tid 1611] [client 34.50.189.51:38104] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:05.316272 2026] [core:error] [pid 1321:tid 1611] [client 34.50.189.51:38104] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:05.316289 2026] [security2:error] [pid 1321:tid 1525] [client 34.50.189.51:38054] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "discocollective.kriveloff-associates.com"] [uri "/service/.env"] [unique_id "apK-SWjCPtor9NZ-byTsNQAABmE"]
[Sat Aug 29 05:11:05.317532 2026] [security2:error] [pid 11274:tid 11514] [client 34.50.189.51:38144] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "discocollective.kriveloff-associates.com"] [uri "/config/.env.php"] [unique_id "apK-SWbX5DA3XO6e_qQtHwAAAU8"]
[Sat Aug 29 05:11:05.317610 2026] [core:error] [pid 1321:tid 1584] [client 34.50.189.51:38154] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:05.317621 2026] [core:error] [pid 1321:tid 1584] [client 34.50.189.51:38154] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:05.317643 2026] [core:error] [pid 1321:tid 1612] [client 34.50.189.51:38226] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:05.317652 2026] [core:error] [pid 1321:tid 1612] [client 34.50.189.51:38226] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:05.317672 2026] [core:error] [pid 1321:tid 1504] [client 34.50.189.51:38040] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:05.317681 2026] [core:error] [pid 1321:tid 1504] [client 34.50.189.51:38040] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:05.318218 2026] [security2:error] [pid 1321:tid 1612] [client 34.50.189.51:38226] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "discocollective.kriveloff-associates.com"] [uri "/index.php"] [unique_id "apK-SWjCPtor9NZ-byTsNgAABrc"]
[Sat Aug 29 05:11:05.318221 2026] [security2:error] [pid 1321:tid 1504] [client 34.50.189.51:38040] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "discocollective.kriveloff-associates.com"] [uri "/index.php"] [unique_id "apK-SWjCPtor9NZ-byTsOQAABkw"]
[Sat Aug 29 05:11:05.318398 2026] [core:error] [pid 11274:tid 11453] [client 34.50.189.51:38162] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:05.318413 2026] [core:error] [pid 11274:tid 11453] [client 34.50.189.51:38162] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:05.318636 2026] [core:error] [pid 11274:tid 11470] [client 34.50.189.51:38068] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:05.318647 2026] [core:error] [pid 11274:tid 11470] [client 34.50.189.51:38068] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:05.318917 2026] [core:error] [pid 11274:tid 11571] [client 34.50.189.51:38210] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:05.318927 2026] [core:error] [pid 11274:tid 11571] [client 34.50.189.51:38210] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:05.318941 2026] [security2:error] [pid 11274:tid 11493] [client 34.50.189.51:38186] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.orig$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1266"] [id "390584"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .orig)"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/.env.orig"] [unique_id "apK-SWbX5DA3XO6e_qQtHQAAATo"]
[Sat Aug 29 05:11:05.319006 2026] [security2:error] [pid 11274:tid 11571] [client 34.50.189.51:38210] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "discocollective.kriveloff-associates.com"] [uri "/index.php"] [unique_id "apK-SWbX5DA3XO6e_qQtHAAAAYc"]
[Sat Aug 29 05:11:05.319243 2026] [security2:error] [pid 11274:tid 11496] [client 34.50.189.51:38264] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/services/api/.env"] [unique_id "apK-SWbX5DA3XO6e_qQtIQAAAT0"]
[Sat Aug 29 05:11:05.319809 2026] [core:error] [pid 11274:tid 11479] [client 34.50.189.51:38200] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:05.319818 2026] [core:error] [pid 11274:tid 11479] [client 34.50.189.51:38200] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:05.320197 2026] [core:error] [pid 11274:tid 11467] [client 34.50.189.51:38100] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:05.320206 2026] [core:error] [pid 11274:tid 11467] [client 34.50.189.51:38100] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:05.320779 2026] [security2:error] [pid 11274:tid 11461] [client 34.50.189.51:38302] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/env.old"] [unique_id "apK-SWbX5DA3XO6e_qQtIwAAARs"]
[Sat Aug 29 05:11:05.321255 2026] [security2:error] [pid 11274:tid 11451] [client 34.50.189.51:38312] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "discocollective.kriveloff-associates.com"] [uri "/wp-config.php.save"] [unique_id "apK-SWbX5DA3XO6e_qQtJAAAARE"]
[Sat Aug 29 05:11:05.322110 2026] [core:error] [pid 1321:tid 1541] [client 34.50.189.51:38254] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:05.322124 2026] [core:error] [pid 1321:tid 1541] [client 34.50.189.51:38254] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:05.323748 2026] [core:error] [pid 1321:tid 1601] [client 34.50.189.51:38278] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:05.323761 2026] [core:error] [pid 1321:tid 1601] [client 34.50.189.51:38278] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:05.323844 2026] [security2:error] [pid 11274:tid 11498] [client 34.50.189.51:38236] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/backend/.env.backup"] [unique_id "apK-SWbX5DA3XO6e_qQtJgAAAT8"]
[Sat Aug 29 05:11:05.323920 2026] [security2:error] [pid 11274:tid 11498] [client 34.50.189.51:38236] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "discocollective.kriveloff-associates.com"] [uri "/backend/.env.backup"] [unique_id "apK-SWbX5DA3XO6e_qQtJgAAAT8"]
[Sat Aug 29 05:11:05.324310 2026] [security2:error] [pid 11274:tid 11463] [client 34.50.189.51:38332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.189.50.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "discocollective.kriveloff-associates.com"] [uri "/config/config.php"] [unique_id "apK-SWbX5DA3XO6e_qQtKQAAAR0"]
[Sat Aug 29 05:11:05.324931 2026] [security2:error] [pid 11274:tid 11507] [client 34.50.189.51:38292] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/app/.env.backup"] [unique_id "apK-SWbX5DA3XO6e_qQtKAAAAUg"]
[Sat Aug 29 05:11:05.325194 2026] [security2:error] [pid 1321:tid 1588] [client 34.50.189.51:38348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.189.50.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "discocollective.kriveloff-associates.com"] [uri "/database.php"] [unique_id "apK-SWjCPtor9NZ-byTsPAAABp8"]
[Sat Aug 29 05:11:05.325514 2026] [core:error] [pid 11274:tid 11519] [client 34.50.189.51:38242] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:05.325524 2026] [core:error] [pid 11274:tid 11519] [client 34.50.189.51:38242] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:05.325606 2026] [security2:error] [pid 11274:tid 11519] [client 34.50.189.51:38242] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "discocollective.kriveloff-associates.com"] [uri "/index.php"] [unique_id "apK-SWbX5DA3XO6e_qQtJwAAAVQ"]
[Sat Aug 29 05:11:05.325785 2026] [security2:error] [pid 11274:tid 11533] [client 34.50.189.51:38318] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/env.bak"] [unique_id "apK-SWbX5DA3XO6e_qQtKgAAAWI"]
[Sat Aug 29 05:11:05.330108 2026] [core:error] [pid 11274:tid 11536] [client 34.50.189.51:38380] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:05.330108 2026] [security2:error] [pid 11274:tid 11532] [client 34.50.189.51:38398] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/config/credentials.json.bak"] [unique_id "apK-SWbX5DA3XO6e_qQtLgAAAWE"]
[Sat Aug 29 05:11:05.330125 2026] [core:error] [pid 11274:tid 11536] [client 34.50.189.51:38380] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:05.331882 2026] [security2:error] [pid 11274:tid 11549] [client 45.148.10.62:36402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.zai.emf.mybluehost.me"] [uri "/backend/.env"] [unique_id "apK-SWbX5DA3XO6e_qQtLwAAAXE"]
[Sat Aug 29 05:11:05.332786 2026] [core:error] [pid 1321:tid 1545] [client 34.50.189.51:38054] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:05.332803 2026] [core:error] [pid 1321:tid 1545] [client 34.50.189.51:38054] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:05.343890 2026] [security2:error] [pid 11274:tid 11534] [client 20.100.175.163:9496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/403.php"] [unique_id "apK-SWbX5DA3XO6e_qQtMAAAAWM"]
[Sat Aug 29 05:11:05.344887 2026] [security2:error] [pid 1321:tid 1577] [client 52.139.37.240:16476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/wp-content/155.php"] [unique_id "apK-SWjCPtor9NZ-byTsPgAABpQ"]
[Sat Aug 29 05:11:05.351119 2026] [security2:error] [pid 11274:tid 11449] [client 20.196.209.81:16736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/hello.php"] [unique_id "apK-SWbX5DA3XO6e_qQtMQAAAQ8"]
[Sat Aug 29 05:11:05.358637 2026] [security2:error] [pid 1321:tid 1568] [client 20.104.49.130:63569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/xmini4.php"] [unique_id "apK-SWjCPtor9NZ-byTsPwAABos"]
[Sat Aug 29 05:11:05.359757 2026] [security2:error] [pid 1321:tid 1510] [client 68.155.159.216:63818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/nf_tracking.php"] [unique_id "apK-SWjCPtor9NZ-byTsQAAABlI"]
[Sat Aug 29 05:11:05.360738 2026] [security2:error] [pid 11274:tid 11568] [client 20.104.104.62:40037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/lfi.php"] [unique_id "apK-SWbX5DA3XO6e_qQtMwAAAYQ"]
[Sat Aug 29 05:11:05.366671 2026] [security2:error] [pid 1321:tid 1589] [client 20.48.160.90:63320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/goods.php"] [unique_id "apK-SWjCPtor9NZ-byTsQQAABqA"]
[Sat Aug 29 05:11:05.383018 2026] [security2:error] [pid 1321:tid 1531] [client 158.23.184.117:60156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/wp-content/admin.php"] [unique_id "apK-SWjCPtor9NZ-byTsQgAABmc"]
[Sat Aug 29 05:11:05.384728 2026] [security2:error] [pid 11274:tid 11541] [client 4.205.62.107:6878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/php_info.php"] [unique_id "apK-SWbX5DA3XO6e_qQtNAAAAWo"]
[Sat Aug 29 05:11:05.389777 2026] [security2:error] [pid 11274:tid 11450] [client 20.104.18.15:7081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/os.php"] [unique_id "apK-SWbX5DA3XO6e_qQtNQAAARA"]
[Sat Aug 29 05:11:05.402125 2026] [security2:error] [pid 1321:tid 1488] [client 20.104.18.15:22525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/htio.php"] [unique_id "apK-SWjCPtor9NZ-byTsQwAABjw"]
[Sat Aug 29 05:11:05.433815 2026] [security2:error] [pid 11274:tid 11505] [client 20.104.18.15:43871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/new.php"] [unique_id "apK-SWbX5DA3XO6e_qQtOgAAAUY"]
[Sat Aug 29 05:11:05.438530 2026] [security2:error] [pid 11274:tid 11510] [client 20.104.104.62:16450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thepoetinnewyork.wanderlustpictures.com"] [uri "/file.php"] [unique_id "apK-SWbX5DA3XO6e_qQtPAAAAUs"]
[Sat Aug 29 05:11:05.445420 2026] [security2:error] [pid 11274:tid 11495] [client 20.104.18.15:15213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/fling.php"] [unique_id "apK-SWbX5DA3XO6e_qQtPwAAATw"]
[Sat Aug 29 05:11:05.485873 2026] [security2:error] [pid 11274:tid 11509] [client 45.148.10.62:36402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zai.emf.mybluehost.me"] [uri "/test.php"] [unique_id "apK-SWbX5DA3XO6e_qQtQgAAAUo"]
[Sat Aug 29 05:11:05.486174 2026] [security2:error] [pid 1321:tid 1598] [client 52.139.37.240:36680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/about/function.php"] [unique_id "apK-SWjCPtor9NZ-byTsRwAABqk"]
[Sat Aug 29 05:11:05.496239 2026] [security2:error] [pid 1321:tid 1575] [client 20.104.18.15:43312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/robot.php"] [unique_id "apK-SWjCPtor9NZ-byTsSQAABpI"]
[Sat Aug 29 05:11:05.501408 2026] [security2:error] [pid 11274:tid 11522] [client 20.104.104.62:52265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/quoys.php"] [unique_id "apK-SWbX5DA3XO6e_qQtRAAAAVc"]
[Sat Aug 29 05:11:05.501439 2026] [security2:error] [pid 11274:tid 11489] [client 20.151.200.44:65269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/quoys.php"] [unique_id "apK-SWbX5DA3XO6e_qQtRQAAATY"]
[Sat Aug 29 05:11:05.512302 2026] [security2:error] [pid 1321:tid 1556] [client 20.48.160.90:28157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/x.php"] [unique_id "apK-SWjCPtor9NZ-byTsSgAABn8"]
[Sat Aug 29 05:11:05.526578 2026] [security2:error] [pid 11274:tid 11512] [client 68.155.159.216:1951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/admin.php"] [unique_id "apK-SWbX5DA3XO6e_qQtRgAAAU0"]
[Sat Aug 29 05:11:05.527696 2026] [security2:error] [pid 11274:tid 11548] [client 158.23.184.117:60099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/wp-mail.php"] [unique_id "apK-SWbX5DA3XO6e_qQtRwAAAXA"]
[Sat Aug 29 05:11:05.528337 2026] [security2:error] [pid 11274:tid 11545] [client 20.104.18.15:7018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/htio.php"] [unique_id "apK-SWbX5DA3XO6e_qQtSAAAAW0"]
[Sat Aug 29 05:11:05.528898 2026] [security2:error] [pid 11274:tid 11548] [client 20.48.160.90:37320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/alfa.php"] [unique_id "apK-SWbX5DA3XO6e_qQtSQAAAXA"]
[Sat Aug 29 05:11:05.530155 2026] [security2:error] [pid 1321:tid 1500] [client 147.93.157.53:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "djiboutifresh.com"] [uri "/"] [unique_id "apK-SWjCPtor9NZ-byTsSwAABkg"]
[Sat Aug 29 05:11:05.533440 2026] [security2:error] [pid 11274:tid 11524] [client 20.104.104.62:20676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/ix.php"] [unique_id "apK-SWbX5DA3XO6e_qQtSgAAAVk"]
[Sat Aug 29 05:11:05.549314 2026] [security2:error] [pid 11274:tid 11538] [client 52.139.37.240:16728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/wp-update.php"] [unique_id "apK-SWbX5DA3XO6e_qQtTQAAAWc"]
[Sat Aug 29 05:11:05.563749 2026] [security2:error] [pid 1321:tid 1609] [client 68.155.159.216:56732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/dropdown.php"] [unique_id "apK-SWjCPtor9NZ-byTsTAAABrQ"]
[Sat Aug 29 05:11:05.564834 2026] [security2:error] [pid 11274:tid 11475] [client 20.104.18.15:43802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/inx.php"] [unique_id "apK-SWbX5DA3XO6e_qQtTgAAASk"]
[Sat Aug 29 05:11:05.601642 2026] [security2:error] [pid 11274:tid 11514] [client 20.104.18.15:15333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/btyuio.php"] [unique_id "apK-SWbX5DA3XO6e_qQtUQAAAU8"]
[Sat Aug 29 05:11:05.608173 2026] [security2:error] [pid 11274:tid 11453] [client 20.104.18.15:22436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/dev.php"] [unique_id "apK-SWbX5DA3XO6e_qQtUgAAARM"]
[Sat Aug 29 05:11:05.633448 2026] [security2:error] [pid 11274:tid 11560] [client 20.104.104.62:16748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thepoetinnewyork.wanderlustpictures.com"] [uri "/404.php"] [unique_id "apK-SWbX5DA3XO6e_qQtUwAAAXw"]
[Sat Aug 29 05:11:05.635547 2026] [security2:error] [pid 11274:tid 11455] [client 20.240.128.207:18187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/filemanager.php"] [unique_id "apK-SWbX5DA3XO6e_qQtVAAAARU"]
[Sat Aug 29 05:11:05.643177 2026] [security2:error] [pid 1321:tid 1600] [client 158.158.54.35:32198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-content.php"] [unique_id "apK-SWjCPtor9NZ-byTsZQAABqs"]
[Sat Aug 29 05:11:05.644003 2026] [security2:error] [pid 11274:tid 11533] [client 68.155.159.216:5955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK-SWbX5DA3XO6e_qQtVQAAAWI"]
[Sat Aug 29 05:11:05.650365 2026] [security2:error] [pid 11274:tid 11506] [client 74.248.24.12:19141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-content/admin.php"] [unique_id "apK-SWbX5DA3XO6e_qQtVgAAAUc"]
[Sat Aug 29 05:11:05.659222 2026] [security2:error] [pid 11274:tid 11511] [client 20.48.160.90:60960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/33.php"] [unique_id "apK-SWbX5DA3XO6e_qQtVwAAAUw"]
[Sat Aug 29 05:11:05.667147 2026] [security2:error] [pid 11274:tid 11544] [client 68.155.159.216:62722] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.enveso.com"] [uri "/1.php"] [unique_id "apK-SWbX5DA3XO6e_qQtWAAAAWw"]
[Sat Aug 29 05:11:05.667262 2026] [security2:error] [pid 11274:tid 11544] [client 68.155.159.216:62722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/1.php"] [unique_id "apK-SWbX5DA3XO6e_qQtWAAAAWw"]
[Sat Aug 29 05:11:05.667605 2026] [security2:error] [pid 11274:tid 11516] [client 20.104.49.130:53548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.timportlock.net"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-SWbX5DA3XO6e_qQtWQAAAVE"]
[Sat Aug 29 05:11:05.675811 2026] [security2:error] [pid 11274:tid 11526] [client 20.104.18.15:43891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/revo.php"] [unique_id "apK-SWbX5DA3XO6e_qQtWwAAAVs"]
[Sat Aug 29 05:11:05.676440 2026] [cgid:error] [pid 11274:tid 11451] [client 158.23.184.117:39907] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/drinkyourtrees/404.shtml
[Sat Aug 29 05:11:05.679764 2026] [security2:error] [pid 11274:tid 11496] [client 52.139.37.240:35855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/an.php"] [unique_id "apK-SWbX5DA3XO6e_qQtXAAAAT0"]
[Sat Aug 29 05:11:05.684615 2026] [security2:error] [pid 1321:tid 1613] [client 20.104.18.15:7139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/dev.php"] [unique_id "apK-SWjCPtor9NZ-byTsZwAABrg"]
[Sat Aug 29 05:11:05.706318 2026] [security2:error] [pid 11274:tid 11500] [client 147.93.157.53:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "djiboutifresh.com"] [uri "/"] [unique_id "apK-SWbX5DA3XO6e_qQtXwAAAUE"]
[Sat Aug 29 05:11:05.708990 2026] [security2:error] [pid 11274:tid 11568] [client 20.104.18.15:43779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/vpn.php"] [unique_id "apK-SWbX5DA3XO6e_qQtYAAAAYQ"]
[Sat Aug 29 05:11:05.725659 2026] [security2:error] [pid 11274:tid 11450] [client 158.23.184.117:39907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/3.php"] [unique_id "apK-SWbX5DA3XO6e_qQtYQAAARA"]
[Sat Aug 29 05:11:05.726559 2026] [security2:error] [pid 11274:tid 11472] [client 20.100.175.163:7763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/config.php"] [unique_id "apK-SWbX5DA3XO6e_qQtYgAAASY"]
[Sat Aug 29 05:11:05.733829 2026] [security2:error] [pid 11274:tid 11471] [client 20.151.200.44:62958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/x23.php"] [unique_id "apK-SWbX5DA3XO6e_qQtYwAAASU"]
[Sat Aug 29 05:11:05.737004 2026] [security2:error] [pid 11274:tid 11503] [client 20.104.18.15:15193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/dehnl.php"] [unique_id "apK-SWbX5DA3XO6e_qQtZAAAAUQ"]
[Sat Aug 29 05:11:05.740940 2026] [security2:error] [pid 11274:tid 11502] [client 20.104.18.15:22297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/gos.php"] [unique_id "apK-SWbX5DA3XO6e_qQtZQAAAUM"]
[Sat Aug 29 05:11:05.747274 2026] [security2:error] [pid 1321:tid 1558] [client 52.139.37.240:16933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/xmrlpc.php"] [unique_id "apK-SWjCPtor9NZ-byTsaAAABoE"]
[Sat Aug 29 05:11:05.750500 2026] [security2:error] [pid 11274:tid 11540] [client 20.48.160.90:28130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/ssla.php"] [unique_id "apK-SWbX5DA3XO6e_qQtZgAAAWk"]
[Sat Aug 29 05:11:05.755059 2026] [security2:error] [pid 1321:tid 1537] [client 158.158.54.35:17694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "apK-SWjCPtor9NZ-byTsagAABm0"]
[Sat Aug 29 05:11:05.757425 2026] [security2:error] [pid 11274:tid 11470] [client 158.158.54.35:16231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-admin/css/about.php"] [unique_id "apK-SWbX5DA3XO6e_qQtaAAAASQ"]
[Sat Aug 29 05:11:05.769070 2026] [core:error] [pid 11274:tid 11493] [client 20.52.41.200:2827] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:05.769084 2026] [core:error] [pid 11274:tid 11493] [client 20.52.41.200:2827] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:05.771859 2026] [security2:error] [pid 11274:tid 11525] [client 158.23.147.79:64079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/cong.php"] [unique_id "apK-SWbX5DA3XO6e_qQtagAAAVo"]
[Sat Aug 29 05:11:05.774901 2026] [security2:error] [pid 11274:tid 11567] [client 158.23.147.79:14283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK-SWbX5DA3XO6e_qQtawAAAYM"]
[Sat Aug 29 05:11:05.778251 2026] [security2:error] [pid 11274:tid 11445] [client 147.93.157.53:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "djiboutihomes.com"] [uri "/"] [unique_id "apK-SWbX5DA3XO6e_qQtbAAAAQs"]
[Sat Aug 29 05:11:05.779884 2026] [security2:error] [pid 11274:tid 11479] [client 20.196.209.81:15386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/fi2.php"] [unique_id "apK-SWbX5DA3XO6e_qQtbQAAASw"]
[Sat Aug 29 05:11:05.780590 2026] [security2:error] [pid 1321:tid 1594] [client 20.104.104.62:61814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/vbbn.php"] [unique_id "apK-SWjCPtor9NZ-byTsbQAABqU"]
[Sat Aug 29 05:11:05.782266 2026] [security2:error] [pid 11274:tid 11465] [client 158.23.147.79:63835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK-SWbX5DA3XO6e_qQtbgAAAR8"]
[Sat Aug 29 05:11:05.804182 2026] [security2:error] [pid 11274:tid 11489] [client 20.48.160.90:62109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/133.php"] [unique_id "apK-SWbX5DA3XO6e_qQtgAAAATY"]
[Sat Aug 29 05:11:05.818776 2026] [security2:error] [pid 11274:tid 11490] [client 20.100.175.163:21398] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/1.php"] [unique_id "apK-SWbX5DA3XO6e_qQtggAAATc"]
[Sat Aug 29 05:11:05.818860 2026] [security2:error] [pid 11274:tid 11490] [client 20.100.175.163:21398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/1.php"] [unique_id "apK-SWbX5DA3XO6e_qQtggAAATc"]
[Sat Aug 29 05:11:05.825314 2026] [security2:error] [pid 1321:tid 1582] [client 20.104.18.15:43896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/birrs.php"] [unique_id "apK-SWjCPtor9NZ-byTsfgAABpk"]
[Sat Aug 29 05:11:05.834279 2026] [security2:error] [pid 1321:tid 1573] [client 20.104.104.62:16463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thepoetinnewyork.wanderlustpictures.com"] [uri "/wk/index.php"] [unique_id "apK-SWjCPtor9NZ-byTsfwAABpA"]
[Sat Aug 29 05:11:05.839329 2026] [security2:error] [pid 11274:tid 11570] [client 20.104.18.15:43279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/shiny.php"] [unique_id "apK-SWbX5DA3XO6e_qQtgwAAAYY"]
[Sat Aug 29 05:11:05.840833 2026] [security2:error] [pid 1321:tid 1587] [client 20.104.18.15:6977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/gos.php"] [unique_id "apK-SWjCPtor9NZ-byTsgAAABp4"]
[Sat Aug 29 05:11:05.869431 2026] [security2:error] [pid 11274:tid 11515] [client 20.104.104.62:64720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/r0x.php"] [unique_id "apK-SWbX5DA3XO6e_qQthQAAAVA"]
[Sat Aug 29 05:11:05.871580 2026] [security2:error] [pid 1321:tid 1576] [client 158.23.184.117:39876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "apK-SWjCPtor9NZ-byTsgwAABpM"]
[Sat Aug 29 05:11:05.874922 2026] [security2:error] [pid 11274:tid 11546] [client 52.139.37.240:36702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/asw.php"] [unique_id "apK-SWbX5DA3XO6e_qQthgAAAW4"]
[Sat Aug 29 05:11:05.884451 2026] [security2:error] [pid 11274:tid 11473] [client 20.104.18.15:15291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/zoo2.php"] [unique_id "apK-SWbX5DA3XO6e_qQthwAAASc"]
[Sat Aug 29 05:11:05.895336 2026] [security2:error] [pid 1321:tid 1501] [client 20.48.160.90:28100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "apK-SWjCPtor9NZ-byTshAAABkk"]
[Sat Aug 29 05:11:05.903271 2026] [security2:error] [pid 1321:tid 1507] [client 4.205.62.107:60310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/cxc.php"] [unique_id "apK-SWjCPtor9NZ-byTshQAABk8"]
[Sat Aug 29 05:11:05.928525 2026] [security2:error] [pid 1321:tid 1612] [client 4.205.62.107:4947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/aws.php"] [unique_id "apK-SWjCPtor9NZ-byTshwAABrc"]
[Sat Aug 29 05:11:05.934221 2026] [security2:error] [pid 11274:tid 11463] [client 20.104.18.15:22375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/132.php"] [unique_id "apK-SWbX5DA3XO6e_qQtiQAAAR0"]
[Sat Aug 29 05:11:05.945127 2026] [security2:error] [pid 11274:tid 11517] [client 68.155.159.216:1883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK-SWbX5DA3XO6e_qQtigAAAVI"]
[Sat Aug 29 05:11:05.945912 2026] [security2:error] [pid 11274:tid 11454] [client 52.139.37.240:56094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/about/function.php"] [unique_id "apK-SWbX5DA3XO6e_qQtiwAAARQ"]
[Sat Aug 29 05:11:05.949161 2026] [security2:error] [pid 11274:tid 11511] [client 20.104.104.62:40002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/rfi.php"] [unique_id "apK-SWbX5DA3XO6e_qQtjAAAAUw"]
[Sat Aug 29 05:11:05.967070 2026] [security2:error] [pid 11274:tid 11544] [client 158.23.147.79:24530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK-SWbX5DA3XO6e_qQtjQAAAWw"]
[Sat Aug 29 05:11:05.971162 2026] [security2:error] [pid 1321:tid 1526] [client 20.104.18.15:7068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/132.php"] [unique_id "apK-SWjCPtor9NZ-byTsiAAABmI"]
[Sat Aug 29 05:11:05.986305 2026] [security2:error] [pid 11274:tid 11476] [client 20.104.18.15:43866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/goods.php"] [unique_id "apK-SWbX5DA3XO6e_qQtkAAAASo"]
[Sat Aug 29 05:11:05.988183 2026] [security2:error] [pid 11274:tid 11554] [client 45.148.10.62:59218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.zai.emf.mybluehost.me"] [uri "/.env.backup"] [unique_id "apK-SWbX5DA3XO6e_qQtjwAAAXY"]
[Sat Aug 29 05:11:05.996167 2026] [security2:error] [pid 11274:tid 11496] [client 158.23.147.79:58890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-content/index.php"] [unique_id "apK-SWbX5DA3XO6e_qQtkgAAAT0"]
[Sat Aug 29 05:11:06.001939 2026] [security2:error] [pid 1321:tid 1521] [client 68.155.159.216:30608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK-SmjCPtor9NZ-byTsiQAABl0"]
[Sat Aug 29 05:11:06.024637 2026] [cgid:error] [pid 1321:tid 1518] [client 158.23.184.117:60108] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/drinkyourtrees/404.shtml
[Sat Aug 29 05:11:06.027855 2026] [security2:error] [pid 11274:tid 11541] [client 20.48.160.90:65389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/sym.php"] [unique_id "apK-SmbX5DA3XO6e_qQtlQAAAWo"]
[Sat Aug 29 05:11:06.034152 2026] [security2:error] [pid 1321:tid 1561] [client 103.171.189.88:53041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-SmjCPtor9NZ-byTsiwAABoQ"]
[Sat Aug 29 05:11:06.034250 2026] [security2:error] [pid 1321:tid 1561] [client 103.171.189.88:53041] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-SmjCPtor9NZ-byTsiwAABoQ"]
[Sat Aug 29 05:11:06.035429 2026] [security2:error] [pid 1321:tid 1492] [client 20.104.104.62:16474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thepoetinnewyork.wanderlustpictures.com"] [uri "/wp-content/admin.php"] [unique_id "apK-SmjCPtor9NZ-byTsjAAABkA"]
[Sat Aug 29 05:11:06.047931 2026] [security2:error] [pid 11274:tid 11484] [client 68.155.159.216:38563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK-SmbX5DA3XO6e_qQtlgAAATE"]
[Sat Aug 29 05:11:06.052932 2026] [security2:error] [pid 11274:tid 11503] [client 20.104.18.15:43924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/sss.php"] [unique_id "apK-SmbX5DA3XO6e_qQtlwAAAUQ"]
[Sat Aug 29 05:11:06.063598 2026] [security2:error] [pid 11274:tid 11505] [client 20.104.18.15:15231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/zoo1.php"] [unique_id "apK-SmbX5DA3XO6e_qQtmAAAAUY"]
[Sat Aug 29 05:11:06.068223 2026] [security2:error] [pid 11274:tid 11510] [client 20.104.18.15:22377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/v22.php"] [unique_id "apK-SmbX5DA3XO6e_qQtmQAAAUs"]
[Sat Aug 29 05:11:06.073508 2026] [security2:error] [pid 1321:tid 1577] [client 158.23.184.117:60108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/wp-admin/css/admin.php"] [unique_id "apK-SmjCPtor9NZ-byTsjQAABpQ"]
[Sat Aug 29 05:11:06.085508 2026] [security2:error] [pid 11274:tid 11539] [client 52.139.37.240:36826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/item.php"] [unique_id "apK-SmbX5DA3XO6e_qQtmwAAAWg"]
[Sat Aug 29 05:11:06.085508 2026] [security2:error] [pid 1321:tid 1509] [client 20.104.104.62:58715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/tajj.php"] [unique_id "apK-SmjCPtor9NZ-byTsjgAABlE"]
[Sat Aug 29 05:11:06.107550 2026] [security2:error] [pid 11274:tid 11497] [client 20.151.200.44:65143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/advanced.php"] [unique_id "apK-SmbX5DA3XO6e_qQtnQAAAT4"]
[Sat Aug 29 05:11:06.113049 2026] [security2:error] [pid 11274:tid 11522] [client 20.48.160.90:28060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/wp-aothait.php"] [unique_id "apK-SmbX5DA3XO6e_qQtngAAAVc"]
[Sat Aug 29 05:11:06.118346 2026] [security2:error] [pid 11274:tid 11558] [client 20.104.18.15:7126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/v22.php"] [unique_id "apK-SmbX5DA3XO6e_qQtnwAAAXo"]
[Sat Aug 29 05:11:06.128234 2026] [security2:error] [pid 11274:tid 11489] [client 68.155.159.216:64384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-l0gin.php"] [unique_id "apK-SmbX5DA3XO6e_qQtogAAATY"]
[Sat Aug 29 05:11:06.128255 2026] [security2:error] [pid 11274:tid 11551] [client 20.63.219.114:19143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/post.php"] [unique_id "apK-SmbX5DA3XO6e_qQtoQAAAXM"]
[Sat Aug 29 05:11:06.134187 2026] [security2:error] [pid 11274:tid 11512] [client 20.104.49.130:60985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/fs.php"] [unique_id "apK-SmbX5DA3XO6e_qQtowAAAU0"]
[Sat Aug 29 05:11:06.134597 2026] [security2:error] [pid 11274:tid 11526] [client 158.158.54.35:8494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "apK-SmbX5DA3XO6e_qQtpAAAAVs"]
[Sat Aug 29 05:11:06.138313 2026] [security2:error] [pid 11274:tid 11495] [client 20.104.18.15:43921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/alfa.php"] [unique_id "apK-SmbX5DA3XO6e_qQtpQAAATw"]
[Sat Aug 29 05:11:06.141975 2026] [security2:error] [pid 11274:tid 11490] [client 147.93.157.53:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "djiboutihomes.com"] [uri "/"] [unique_id "apK-SmbX5DA3XO6e_qQtpgAAATc"]
[Sat Aug 29 05:11:06.147975 2026] [security2:error] [pid 11274:tid 11451] [client 20.240.128.207:19876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-content/themes/admin.php"] [unique_id "apK-SmbX5DA3XO6e_qQtpwAAARE"]
[Sat Aug 29 05:11:06.162926 2026] [security2:error] [pid 11274:tid 11548] [client 68.155.159.216:33668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK-SmbX5DA3XO6e_qQtqAAAAXA"]
[Sat Aug 29 05:11:06.171704 2026] [security2:error] [pid 1321:tid 1597] [client 20.48.250.41:49604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK-SmjCPtor9NZ-byTskQAABqg"]
[Sat Aug 29 05:11:06.172514 2026] [security2:error] [pid 1321:tid 1583] [client 20.104.104.62:20800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/bn.php"] [unique_id "apK-SmjCPtor9NZ-byTskwAABpo"]
[Sat Aug 29 05:11:06.173635 2026] [security2:error] [pid 11274:tid 11479] [client 52.139.37.240:56092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/an.php"] [unique_id "apK-SmbX5DA3XO6e_qQtqgAAASw"]
[Sat Aug 29 05:11:06.185132 2026] [security2:error] [pid 1321:tid 1579] [client 74.248.24.12:40656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-configs.php"] [unique_id "apK-SmjCPtor9NZ-byTslAAABpY"]
[Sat Aug 29 05:11:06.188882 2026] [security2:error] [pid 1321:tid 1548] [client 34.53.216.85:40092] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "67.20.76.221"] [uri "/"] [unique_id "apK-SmjCPtor9NZ-byTslgAABnc"]
[Sat Aug 29 05:11:06.190041 2026] [security2:error] [pid 1321:tid 1565] [client 4.205.62.107:65022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/xqq.php"] [unique_id "apK-SmjCPtor9NZ-byTsmAAABog"]
[Sat Aug 29 05:11:06.190114 2026] [security2:error] [pid 1321:tid 1575] [client 4.205.62.107:60295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/doc.php"] [unique_id "apK-SmjCPtor9NZ-byTsmQAABpI"]
[Sat Aug 29 05:11:06.195763 2026] [security2:error] [pid 11274:tid 11553] [client 45.148.10.62:59218] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.zai.emf.mybluehost.me"] [uri "/.env.old"] [unique_id "apK-SmbX5DA3XO6e_qQtqwAAAXU"]
[Sat Aug 29 05:11:06.208573 2026] [security2:error] [pid 11274:tid 11518] [client 20.48.160.90:64153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/8.php"] [unique_id "apK-SmbX5DA3XO6e_qQtrAAAAVM"]
[Sat Aug 29 05:11:06.209813 2026] [security2:error] [pid 11274:tid 11486] [client 158.158.54.35:35483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/system_log.php"] [unique_id "apK-SmbX5DA3XO6e_qQtrQAAATM"]
[Sat Aug 29 05:11:06.214217 2026] [security2:error] [pid 1321:tid 1556] [client 20.48.250.41:62451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/a4.php"] [unique_id "apK-SmjCPtor9NZ-byTsmwAABn8"]
[Sat Aug 29 05:11:06.216296 2026] [security2:error] [pid 11274:tid 11546] [client 20.104.104.62:7143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/grsiuk.php"] [unique_id "apK-SmbX5DA3XO6e_qQtrgAAAW4"]
[Sat Aug 29 05:11:06.217608 2026] [security2:error] [pid 1321:tid 1586] [client 158.23.184.117:60096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/bthil.php"] [unique_id "apK-SmjCPtor9NZ-byTsnAAABp0"]
[Sat Aug 29 05:11:06.218167 2026] [http2:warn] [pid 1017536:tid 1017681] [client 74.7.241.38:60088] h2_stream(1017536-31-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:11:06.218182 2026] [http2:warn] [pid 1017536:tid 1017681] [client 74.7.241.38:60088] h2_stream(1017536-31-3,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:11:06.220462 2026] [security2:error] [pid 11274:tid 11567] [client 20.196.209.81:16254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/1p.php"] [unique_id "apK-SmbX5DA3XO6e_qQtrwAAAYM"]
[Sat Aug 29 05:11:06.223257 2026] [security2:error] [pid 11274:tid 11470] [client 20.52.41.200:2874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/a.php"] [unique_id "apK-SmbX5DA3XO6e_qQtsAAAASQ"]
[Sat Aug 29 05:11:06.233486 2026] [security2:error] [pid 11274:tid 11507] [client 20.104.18.15:22493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/wp-activate.php"] [unique_id "apK-SmbX5DA3XO6e_qQtswAAAUg"]
[Sat Aug 29 05:11:06.234297 2026] [security2:error] [pid 11274:tid 11565] [client 20.104.104.62:17100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thepoetinnewyork.wanderlustpictures.com"] [uri "/wp-content/themes/admin.php"] [unique_id "apK-SmbX5DA3XO6e_qQttAAAAYE"]
[Sat Aug 29 05:11:06.241825 2026] [security2:error] [pid 11274:tid 11571] [client 20.104.18.15:15223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/radio.php"] [unique_id "apK-SmbX5DA3XO6e_qQttQAAAYc"]
[Sat Aug 29 05:11:06.248993 2026] [security2:error] [pid 1321:tid 1529] [client 20.48.160.90:46547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/wp-includes/index.php"] [unique_id "apK-SmjCPtor9NZ-byTsoAAABmU"]
[Sat Aug 29 05:11:06.263112 2026] [security2:error] [pid 11274:tid 11556] [client 68.155.159.216:14315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-content/index.php"] [unique_id "apK-SmbX5DA3XO6e_qQtuAAAAXg"]
[Sat Aug 29 05:11:06.265976 2026] [security2:error] [pid 11274:tid 11533] [client 20.104.104.62:48624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/horeg.php"] [unique_id "apK-SmbX5DA3XO6e_qQtuQAAAWI"]
[Sat Aug 29 05:11:06.266051 2026] [security2:error] [pid 11274:tid 11480] [client 20.104.18.15:7147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/wp-activate.php"] [unique_id "apK-SmbX5DA3XO6e_qQtugAAAS0"]
[Sat Aug 29 05:11:06.276082 2026] [security2:error] [pid 11274:tid 11482] [client 20.100.175.163:33707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK-SmbX5DA3XO6e_qQtvQAAAS8"]
[Sat Aug 29 05:11:06.280300 2026] [security2:error] [pid 1321:tid 1496] [client 52.139.37.240:36699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/jga.php"] [unique_id "apK-SmjCPtor9NZ-byTsoQAABkQ"]
[Sat Aug 29 05:11:06.321193 2026] [core:error] [pid 1321:tid 1602] [client 20.100.175.163:16344] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:06.321217 2026] [core:error] [pid 1321:tid 1602] [client 20.100.175.163:16344] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:06.326844 2026] [security2:error] [pid 11274:tid 11516] [client 4.205.62.107:63992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/adminer-4.7.6-en.php"] [unique_id "apK-SmbX5DA3XO6e_qQtwgAAAVE"]
[Sat Aug 29 05:11:06.330982 2026] [http2:warn] [pid 1018003:tid 1018159] [client 74.7.241.38:56118] h2_stream(1018003-350-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:11:06.331048 2026] [http2:warn] [pid 1018003:tid 1018159] [client 74.7.241.38:56118] h2_stream(1018003-350-3,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:11:06.331109 2026] [security2:error] [pid 1321:tid 1600] [client 20.48.250.41:49577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/06.php"] [unique_id "apK-SmjCPtor9NZ-byTsowAABqs"]
[Sat Aug 29 05:11:06.334578 2026] [security2:error] [pid 11274:tid 11508] [client 68.155.159.216:61283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK-SmbX5DA3XO6e_qQtwwAAAUk"]
[Sat Aug 29 05:11:06.340918 2026] [security2:error] [pid 11274:tid 11476] [client 158.23.147.79:5913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/log-mama/function.php"] [unique_id "apK-SmbX5DA3XO6e_qQtxAAAASo"]
[Sat Aug 29 05:11:06.353442 2026] [security2:error] [pid 11274:tid 11459] [client 20.104.104.62:52319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/ahy66.php"] [unique_id "apK-SmbX5DA3XO6e_qQtyAAAARk"]
[Sat Aug 29 05:11:06.358575 2026] [security2:error] [pid 11274:tid 11501] [client 20.48.250.41:64804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/tfm.php"] [unique_id "apK-SmbX5DA3XO6e_qQtyQAAAUI"]
[Sat Aug 29 05:11:06.362560 2026] [security2:error] [pid 1321:tid 1558] [client 158.158.54.35:14867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-content/themes/pridmag/il.php"] [unique_id "apK-SmjCPtor9NZ-byTspgAABoE"]
[Sat Aug 29 05:11:06.364486 2026] [security2:error] [pid 1321:tid 1520] [client 20.104.18.15:22318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/wp-trackback.php"] [unique_id "apK-SmjCPtor9NZ-byTspwAABlw"]
[Sat Aug 29 05:11:06.364558 2026] [security2:error] [pid 11274:tid 11511] [client 158.23.184.117:39636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/file.php"] [unique_id "apK-SmbX5DA3XO6e_qQtygAAAUw"]
[Sat Aug 29 05:11:06.369139 2026] [security2:error] [pid 11274:tid 11477] [client 52.139.37.240:56126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/asw.php"] [unique_id "apK-SmbX5DA3XO6e_qQtzQAAASs"]
[Sat Aug 29 05:11:06.377376 2026] [security2:error] [pid 1321:tid 1527] [client 20.48.160.90:63233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/goods.php"] [unique_id "apK-SmjCPtor9NZ-byTsqAAABmM"]
[Sat Aug 29 05:11:06.383699 2026] [security2:error] [pid 1321:tid 1594] [client 20.104.18.15:43921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/33.php"] [unique_id "apK-SmjCPtor9NZ-byTsqgAABqU"]
[Sat Aug 29 05:11:06.403388 2026] [security2:error] [pid 1321:tid 1605] [client 20.104.18.15:7044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/wp-trackback.php"] [unique_id "apK-SmjCPtor9NZ-byTsqwAABrA"]
[Sat Aug 29 05:11:06.406409 2026] [security2:error] [pid 1321:tid 1567] [client 20.104.18.15:15206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/one.php"] [unique_id "apK-SmjCPtor9NZ-byTsrAAABoo"]
[Sat Aug 29 05:11:06.427828 2026] [security2:error] [pid 11274:tid 11493] [client 20.48.160.90:46473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/file31.php"] [unique_id "apK-SmbX5DA3XO6e_qQt0QAAATo"]
[Sat Aug 29 05:11:06.430139 2026] [security2:error] [pid 11274:tid 11499] [client 158.23.147.79:60097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK-SmbX5DA3XO6e_qQt0gAAAUA"]
[Sat Aug 29 05:11:06.447427 2026] [security2:error] [pid 11274:tid 11536] [client 20.104.104.62:16477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thepoetinnewyork.wanderlustpictures.com"] [uri "/.well-known/logs233/index.php"] [unique_id "apK-SmbX5DA3XO6e_qQt1AAAAWU"]
[Sat Aug 29 05:11:06.461101 2026] [security2:error] [pid 11274:tid 11558] [client 68.155.159.216:65098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wzy.php"] [unique_id "apK-SmbX5DA3XO6e_qQt1gAAAXo"]
[Sat Aug 29 05:11:06.495372 2026] [security2:error] [pid 11274:tid 11490] [client 20.104.104.62:20610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/dm.php"] [unique_id "apK-SmbX5DA3XO6e_qQt2QAAATc"]
[Sat Aug 29 05:11:06.496519 2026] [security2:error] [pid 11274:tid 11547] [client 52.139.37.240:36815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/mac.php"] [unique_id "apK-SmbX5DA3XO6e_qQt2gAAAW8"]
[Sat Aug 29 05:11:06.510416 2026] [proxy_http:error] [pid 1034096:tid 1034130] (70007)The timeout specified has expired: [remote 74.7.241.38:45352] AH01102: error reading status line from remote server 127.0.0.1:8443, referer: https://guraonline.com/shop/?orderby=date&product_brand=locobase,la-roche-posay,possess,cerave,the-one,aco,dr-ceuracle
[Sat Aug 29 05:11:06.510439 2026] [proxy:error] [pid 1034096:tid 1034130] [remote 74.7.241.38:45352] AH00898: Error reading from remote server returned by /shop/, referer: https://guraonline.com/shop/?orderby=date&product_brand=locobase,la-roche-posay,possess,cerave,the-one,aco,dr-ceuracle
[Sat Aug 29 05:11:06.515793 2026] [security2:error] [pid 11274:tid 11530] [client 20.104.18.15:43916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/133.php"] [unique_id "apK-SmbX5DA3XO6e_qQt3QAAAV8"]
[Sat Aug 29 05:11:06.518110 2026] [security2:error] [pid 11274:tid 11475] [client 20.48.250.41:49579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/class.php"] [unique_id "apK-SmbX5DA3XO6e_qQt3gAAASk"]
[Sat Aug 29 05:11:06.522935 2026] [security2:error] [pid 11274:tid 11481] [client 4.205.62.107:6296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/session.php"] [unique_id "apK-SmbX5DA3XO6e_qQt4AAAAS4"]
[Sat Aug 29 05:11:06.529027 2026] [security2:error] [pid 11274:tid 11537] [client 20.104.104.62:57433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/gaje.php"] [unique_id "apK-SmbX5DA3XO6e_qQt4gAAAWY"]
[Sat Aug 29 05:11:06.529197 2026] [security2:error] [pid 11274:tid 11489] [client 158.23.184.117:60112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/lock360.php"] [unique_id "apK-SmbX5DA3XO6e_qQt4QAAATY"]
[Sat Aug 29 05:11:06.533389 2026] [proxy_http:error] [pid 1028675:tid 1028875] (70007)The timeout specified has expired: [client 127.0.0.1:52012] AH01102: error reading status line from remote server 50.6.92.44:8443, referer: https://guraonline.com/shop/?orderby=date&product_brand=locobase,la-roche-posay,possess,cerave,the-one,aco,dr-ceuracle
[Sat Aug 29 05:11:06.533420 2026] [proxy:error] [pid 1028675:tid 1028875] [client 127.0.0.1:52012] AH00898: Error reading from remote server returned by /shop/, referer: https://guraonline.com/shop/?orderby=date&product_brand=locobase,la-roche-posay,possess,cerave,the-one,aco,dr-ceuracle
[Sat Aug 29 05:11:06.536126 2026] [security2:error] [pid 11274:tid 11515] [client 20.104.18.15:22453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/pri.php"] [unique_id "apK-SmbX5DA3XO6e_qQt5AAAAVA"]
[Sat Aug 29 05:11:06.541166 2026] [security2:error] [pid 11274:tid 11456] [client 20.104.18.15:15169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/503.php"] [unique_id "apK-SmbX5DA3XO6e_qQt5QAAARY"]
[Sat Aug 29 05:11:06.548977 2026] [security2:error] [pid 1321:tid 1581] [client 20.48.250.41:64880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/Geforce.php"] [unique_id "apK-SmjCPtor9NZ-byTsswAABpg"]
[Sat Aug 29 05:11:06.561343 2026] [security2:error] [pid 1321:tid 1514] [client 20.151.200.44:65291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/vbbn.php"] [unique_id "apK-SmjCPtor9NZ-byTstQAABlY"]
[Sat Aug 29 05:11:06.561446 2026] [security2:error] [pid 11274:tid 11514] [client 20.104.18.15:7143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/pri.php"] [unique_id "apK-SmbX5DA3XO6e_qQt6QAAAU8"]
[Sat Aug 29 05:11:06.568949 2026] [security2:error] [pid 11274:tid 11461] [client 45.148.10.62:59218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zai.emf.mybluehost.me"] [uri "/.env.php.bak"] [unique_id "apK-SmbX5DA3XO6e_qQt6wAAARs"]
[Sat Aug 29 05:11:06.574433 2026] [security2:error] [pid 1321:tid 1582] [client 158.158.54.35:29082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/css/wp-login.php"] [unique_id "apK-SmjCPtor9NZ-byTstgAABpk"]
[Sat Aug 29 05:11:06.582301 2026] [security2:error] [pid 11274:tid 11570] [client 52.139.37.240:16714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/item.php"] [unique_id "apK-SmbX5DA3XO6e_qQt7AAAAYY"]
[Sat Aug 29 05:11:06.634193 2026] [security2:error] [pid 1321:tid 1541] [client 20.48.160.90:60996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/ah.php"] [unique_id "apK-SmjCPtor9NZ-byTsuQAABnE"]
[Sat Aug 29 05:11:06.638016 2026] [security2:error] [pid 1321:tid 1601] [client 20.104.49.130:48587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/xwpg.php"] [unique_id "apK-SmjCPtor9NZ-byTsugAABqw"]
[Sat Aug 29 05:11:06.643876 2026] [security2:error] [pid 1321:tid 1507] [client 20.104.104.62:16718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thepoetinnewyork.wanderlustpictures.com"] [uri "/as.php"] [unique_id "apK-SmjCPtor9NZ-byTsuwAABk8"]
[Sat Aug 29 05:11:06.647511 2026] [security2:error] [pid 11274:tid 11532] [client 20.48.250.41:49646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/8.php"] [unique_id "apK-SmbX5DA3XO6e_qQt8AAAAWE"]
[Sat Aug 29 05:11:06.649176 2026] [security2:error] [pid 11274:tid 11459] [client 20.48.160.90:51936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/dk.php"] [unique_id "apK-SmbX5DA3XO6e_qQt8QAAARk"]
[Sat Aug 29 05:11:06.662084 2026] [security2:error] [pid 11274:tid 11513] [client 158.158.54.35:33713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/24.php"] [unique_id "apK-SmbX5DA3XO6e_qQt8gAAAU4"]
[Sat Aug 29 05:11:06.667775 2026] [security2:error] [pid 11274:tid 11509] [client 68.155.159.216:56823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/.well-known/index.php"] [unique_id "apK-SmbX5DA3XO6e_qQt8wAAAUo"]
[Sat Aug 29 05:11:06.670338 2026] [security2:error] [pid 11274:tid 11560] [client 20.104.18.15:15308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/504.php"] [unique_id "apK-SmbX5DA3XO6e_qQt9AAAAXw"]
[Sat Aug 29 05:11:06.675751 2026] [security2:error] [pid 11274:tid 11554] [client 158.23.184.117:39637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/fpwch.php"] [unique_id "apK-SmbX5DA3XO6e_qQt9wAAAXY"]
[Sat Aug 29 05:11:06.675756 2026] [security2:error] [pid 11274:tid 11535] [client 20.52.41.200:2819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/u.php"] [unique_id "apK-SmbX5DA3XO6e_qQt9gAAAWQ"]
[Sat Aug 29 05:11:06.676215 2026] [security2:error] [pid 11274:tid 11477] [client 57.141.14.92:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/page/6/"] [unique_id "apK-SmbX5DA3XO6e_qQt9QAAASs"]
[Sat Aug 29 05:11:06.677106 2026] [security2:error] [pid 11274:tid 11546] [client 20.63.219.114:19925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/flower.php"] [unique_id "apK-SmbX5DA3XO6e_qQt-AAAAW4"]
[Sat Aug 29 05:11:06.684954 2026] [security2:error] [pid 11274:tid 11451] [client 20.240.128.207:19853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-admin/css/admin.php"] [unique_id "apK-SmbX5DA3XO6e_qQt-QAAARE"]
[Sat Aug 29 05:11:06.684962 2026] [security2:error] [pid 1321:tid 1526] [client 20.104.18.15:43884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/sym.php"] [unique_id "apK-SmjCPtor9NZ-byTsvAAABmI"]
[Sat Aug 29 05:11:06.686494 2026] [security2:error] [pid 11274:tid 11450] [client 20.104.104.62:33794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.americanvarietyradio.net"] [uri "/new4.php"] [unique_id "apK-SmbX5DA3XO6e_qQt-gAAARA"]
[Sat Aug 29 05:11:06.687108 2026] [security2:error] [pid 1321:tid 1543] [client 68.155.159.216:1989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-admin/admin.php"] [unique_id "apK-SmjCPtor9NZ-byTsvQAABnM"]
[Sat Aug 29 05:11:06.690430 2026] [security2:error] [pid 11274:tid 11476] [client 52.139.37.240:35844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK-SmbX5DA3XO6e_qQt-wAAASo"]
[Sat Aug 29 05:11:06.699076 2026] [security2:error] [pid 1321:tid 1544] [client 74.248.24.12:23282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-includes/index.php"] [unique_id "apK-SmjCPtor9NZ-byTsvgAABnQ"]
[Sat Aug 29 05:11:06.709593 2026] [security2:error] [pid 11274:tid 11466] [client 20.104.18.15:7126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/wp_blog_footer.php"] [unique_id "apK-SmbX5DA3XO6e_qQt_AAAASA"]
[Sat Aug 29 05:11:06.717110 2026] [security2:error] [pid 11274:tid 11565] [client 20.196.209.81:16210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/Njima.php"] [unique_id "apK-SmbX5DA3XO6e_qQt_QAAAYE"]
[Sat Aug 29 05:11:06.723030 2026] [security2:error] [pid 11274:tid 11463] [client 20.104.18.15:22358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/wp_blog_footer.php"] [unique_id "apK-SmbX5DA3XO6e_qQt_gAAAR0"]
[Sat Aug 29 05:11:06.727413 2026] [security2:error] [pid 11274:tid 11473] [client 20.104.104.62:59009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/wp-admin/zwso.php"] [unique_id "apK-SmbX5DA3XO6e_qQt_wAAASc"]
[Sat Aug 29 05:11:06.767693 2026] [security2:error] [pid 1321:tid 1504] [client 20.100.175.163:7966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-good.php"] [unique_id "apK-SmjCPtor9NZ-byTswgAABkw"]
[Sat Aug 29 05:11:06.771496 2026] [security2:error] [pid 1321:tid 1595] [client 68.155.159.216:62809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/ws.php"] [unique_id "apK-SmjCPtor9NZ-byTswwAABqY"]
[Sat Aug 29 05:11:06.778214 2026] [security2:error] [pid 1321:tid 1560] [client 52.139.37.240:16478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/jga.php"] [unique_id "apK-SmjCPtor9NZ-byTsxAAABoM"]
[Sat Aug 29 05:11:06.780595 2026] [security2:error] [pid 11274:tid 11483] [client 20.48.250.41:64799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/click.php"] [unique_id "apK-SmbX5DA3XO6e_qQuAQAAATA"]
[Sat Aug 29 05:11:06.804435 2026] [security2:error] [pid 1321:tid 1542] [client 20.100.175.163:16372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/s.php"] [unique_id "apK-SmjCPtor9NZ-byTsxQAABnI"]
[Sat Aug 29 05:11:06.808603 2026] [security2:error] [pid 11274:tid 11485] [client 20.104.18.15:15208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/admin.php"] [unique_id "apK-SmbX5DA3XO6e_qQuAgAAATI"]
[Sat Aug 29 05:11:06.821935 2026] [security2:error] [pid 11274:tid 11539] [client 158.23.184.117:39669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/storage/index.php"] [unique_id "apK-SmbX5DA3XO6e_qQuAwAAAWg"]
[Sat Aug 29 05:11:06.831506 2026] [security2:error] [pid 1321:tid 1555] [client 20.48.250.41:49571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/0x0x.php"] [unique_id "apK-SmjCPtor9NZ-byTsxgAABn4"]
[Sat Aug 29 05:11:06.837557 2026] [security2:error] [pid 1321:tid 1568] [client 35.241.206.51:49782] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "67.20.76.220"] [uri "/"] [unique_id "apK-SmjCPtor9NZ-byTsxwAABos"]
[Sat Aug 29 05:11:06.844783 2026] [cgid:error] [pid 11274:tid 11549] [client 20.104.104.62:16462] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/thepoetinnewyork/404.shtml
[Sat Aug 29 05:11:06.846444 2026] [security2:error] [pid 11274:tid 11522] [client 20.104.18.15:43977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/8.php"] [unique_id "apK-SmbX5DA3XO6e_qQuBQAAAVc"]
[Sat Aug 29 05:11:06.856820 2026] [security2:error] [pid 11274:tid 11472] [client 158.158.54.35:10141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/assets/images/doc.php"] [unique_id "apK-SmbX5DA3XO6e_qQuBgAAASY"]
[Sat Aug 29 05:11:06.860191 2026] [security2:error] [pid 11274:tid 11561] [client 20.104.18.15:7074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/sushi.php"] [unique_id "apK-SmbX5DA3XO6e_qQuBwAAAX0"]
[Sat Aug 29 05:11:06.870726 2026] [security2:error] [pid 1321:tid 1510] [client 20.104.18.15:43880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/wp-includes/ID3/moon.php"] [unique_id "apK-SmjCPtor9NZ-byTsyAAABlI"]
[Sat Aug 29 05:11:06.880410 2026] [security2:error] [pid 11274:tid 11495] [client 158.23.147.79:42091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-includes/js/index.php"] [unique_id "apK-SmbX5DA3XO6e_qQuCAAAATw"]
[Sat Aug 29 05:11:06.882437 2026] [security2:error] [pid 11274:tid 11490] [client 158.23.147.79:14144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-admin/images/about.php"] [unique_id "apK-SmbX5DA3XO6e_qQuCQAAATc"]
[Sat Aug 29 05:11:06.886514 2026] [security2:error] [pid 11274:tid 11543] [client 158.23.147.79:43303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/file88.php"] [unique_id "apK-SmbX5DA3XO6e_qQuCgAAAWs"]
[Sat Aug 29 05:11:06.891183 2026] [security2:error] [pid 1321:tid 1589] [client 20.104.18.15:22446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/sushi.php"] [unique_id "apK-SmjCPtor9NZ-byTsyQAABqA"]
[Sat Aug 29 05:11:06.894259 2026] [security2:error] [pid 11274:tid 11502] [client 52.139.37.240:35888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK-SmbX5DA3XO6e_qQuCwAAAUM"]
[Sat Aug 29 05:11:06.913892 2026] [security2:error] [pid 1321:tid 1591] [client 20.48.160.90:51860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/ta.php"] [unique_id "apK-SmjCPtor9NZ-byTsygAABqI"]
[Sat Aug 29 05:11:06.920089 2026] [cgid:error] [pid 11274:tid 11572] [client 20.104.104.62:16462] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/thepoetinnewyork/404.shtml
[Sat Aug 29 05:11:06.949681 2026] [security2:error] [pid 11274:tid 11475] [client 20.104.18.15:15284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/ws85.php"] [unique_id "apK-SmbX5DA3XO6e_qQuDgAAASk"]
[Sat Aug 29 05:11:06.954642 2026] [security2:error] [pid 1321:tid 1565] [client 20.48.160.90:62199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/ws55.php"] [unique_id "apK-SmjCPtor9NZ-byTsywAABog"]
[Sat Aug 29 05:11:06.967908 2026] [security2:error] [pid 11274:tid 11537] [client 20.48.250.41:64830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/ms.php"] [unique_id "apK-SmbX5DA3XO6e_qQuEAAAAWY"]
[Sat Aug 29 05:11:06.967916 2026] [security2:error] [pid 11274:tid 11518] [client 20.48.250.41:49611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/166.php"] [unique_id "apK-SmbX5DA3XO6e_qQuDwAAAVM"]
[Sat Aug 29 05:11:06.975878 2026] [cgid:error] [pid 1321:tid 1597] [client 158.23.184.117:60125] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/drinkyourtrees/404.shtml
[Sat Aug 29 05:11:06.983134 2026] [security2:error] [pid 1321:tid 1603] [client 52.139.37.240:16493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/mac.php"] [unique_id "apK-SmjCPtor9NZ-byTszgAABq4"]
[Sat Aug 29 05:11:06.983726 2026] [security2:error] [pid 11274:tid 11456] [client 20.104.104.62:16462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thepoetinnewyork.wanderlustpictures.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK-SmbX5DA3XO6e_qQuEgAAARY"]
[Sat Aug 29 05:11:06.998186 2026] [security2:error] [pid 11274:tid 11514] [client 20.104.18.15:7122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/manga.php"] [unique_id "apK-SmbX5DA3XO6e_qQuEwAAAU8"]
[Sat Aug 29 05:11:06.998717 2026] [security2:error] [pid 1321:tid 1529] [client 20.104.18.15:43955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/goods.php"] [unique_id "apK-SmjCPtor9NZ-byTs0AAABmU"]
[Sat Aug 29 05:11:07.015789 2026] [security2:error] [pid 11274:tid 11533] [client 20.104.18.15:43859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/xmini4.php"] [unique_id "apK-S2bX5DA3XO6e_qQuFAAAAWI"]
[Sat Aug 29 05:11:07.020069 2026] [security2:error] [pid 1321:tid 1540] [client 35.84.25.161:56379] ModSecurity: Warning. Match of "ipMatch 127.0.0.1,::1" against "REMOTE_ADDR" required. [file "/etc/httpd/modsecurity.d/00_asl_zz_strict.conf"] [line "82"] [id "331030"] [rev "2"] [msg "Atomicorp.com WAF Rules: Suspicious activity detected - HTTP Request Missing a Host Header"] [severity "NOTICE"] [tag "no_ar"] [hostname "host2038.hostmonster.com"] [uri "/"] [unique_id "apK-S2jCPtor9NZ-byTs0QAABnA"]
[Sat Aug 29 05:11:07.022787 2026] [security2:error] [pid 11274:tid 11555] [client 20.104.18.15:22275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/manga.php"] [unique_id "apK-S2bX5DA3XO6e_qQuFQAAAXc"]
[Sat Aug 29 05:11:07.022937 2026] [security2:error] [pid 1321:tid 1609] [client 158.23.184.117:60125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/wp-includes/blocks/search/index.php"] [unique_id "apK-S2jCPtor9NZ-byTs0gAABrQ"]
[Sat Aug 29 05:11:07.034132 2026] [security2:error] [pid 1321:tid 1531] [client 158.158.54.35:8473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/images/index.php"] [unique_id "apK-S2jCPtor9NZ-byTs0wAABmc"]
[Sat Aug 29 05:11:07.046788 2026] [security2:error] [pid 1321:tid 1563] [client 4.205.62.107:59093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/oiko6u.php"] [unique_id "apK-S2jCPtor9NZ-byTs1QAABoY"]
[Sat Aug 29 05:11:07.052114 2026] [security2:error] [pid 1321:tid 1610] [client 20.104.104.62:48472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/basic.php"] [unique_id "apK-S2jCPtor9NZ-byTs1gAABrU"]
[Sat Aug 29 05:11:07.059143 2026] [security2:error] [pid 1321:tid 1523] [client 4.205.62.107:58464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/05.php"] [unique_id "apK-S2jCPtor9NZ-byTs2AAABl8"]
[Sat Aug 29 05:11:07.074181 2026] [security2:error] [pid 1321:tid 1562] [client 158.23.147.79:24467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK-S2jCPtor9NZ-byTs2QAABoU"]
[Sat Aug 29 05:11:07.088765 2026] [security2:error] [pid 11274:tid 11449] [client 20.104.18.15:15211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/ffs.php"] [unique_id "apK-S2bX5DA3XO6e_qQuFwAAAQ8"]
[Sat Aug 29 05:11:07.090135 2026] [security2:error] [pid 1321:tid 1609] [client 52.139.37.240:35853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/zafir1.php"] [unique_id "apK-S2jCPtor9NZ-byTs2gAABrQ"]
[Sat Aug 29 05:11:07.095539 2026] [security2:error] [pid 1321:tid 1522] [client 20.63.219.114:2903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/meta.php"] [unique_id "apK-S2jCPtor9NZ-byTs2wAABl4"]
[Sat Aug 29 05:11:07.102101 2026] [security2:error] [pid 1321:tid 1549] [client 158.23.147.79:58903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/about/function.php"] [unique_id "apK-S2jCPtor9NZ-byTs3AAABng"]
[Sat Aug 29 05:11:07.115389 2026] [security2:error] [pid 11274:tid 11489] [client 20.52.41.200:2839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/r.php"] [unique_id "apK-S2bX5DA3XO6e_qQuGAAAATY"]
[Sat Aug 29 05:11:07.120550 2026] [security2:error] [pid 1321:tid 1566] [client 68.155.159.216:30533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK-S2jCPtor9NZ-byTs3QAABok"]
[Sat Aug 29 05:11:07.135180 2026] [security2:error] [pid 11274:tid 11532] [client 20.48.250.41:64831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/zxekqlxb.php"] [unique_id "apK-S2bX5DA3XO6e_qQuGQAAAWE"]
[Sat Aug 29 05:11:07.137323 2026] [security2:error] [pid 11274:tid 11459] [client 20.48.250.41:49546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/h2a2ck.php"] [unique_id "apK-S2bX5DA3XO6e_qQuGgAAARk"]
[Sat Aug 29 05:11:07.142898 2026] [security2:error] [pid 11274:tid 11568] [client 20.104.18.15:7147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/asdfghj.php"] [unique_id "apK-S2bX5DA3XO6e_qQuGwAAAYQ"]
[Sat Aug 29 05:11:07.143603 2026] [security2:error] [pid 1321:tid 1574] [client 20.104.18.15:44003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/ah.php"] [unique_id "apK-S2jCPtor9NZ-byTs3gAABpE"]
[Sat Aug 29 05:11:07.151952 2026] [security2:error] [pid 11274:tid 11501] [client 20.48.160.90:64253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/drykl.php"] [unique_id "apK-S2bX5DA3XO6e_qQuHAAAAUI"]
[Sat Aug 29 05:11:07.155153 2026] [security2:error] [pid 11274:tid 11540] [client 20.104.18.15:22499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/asdfghj.php"] [unique_id "apK-S2bX5DA3XO6e_qQuHQAAAWk"]
[Sat Aug 29 05:11:07.173153 2026] [security2:error] [pid 11274:tid 11511] [client 20.104.49.130:51132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/wp-blog-header.php"] [unique_id "apK-S2bX5DA3XO6e_qQuHgAAAUw"]
[Sat Aug 29 05:11:07.173392 2026] [security2:error] [pid 1321:tid 1615] [client 158.23.184.117:60129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/wp-signup.php"] [unique_id "apK-S2jCPtor9NZ-byTs4AAABro"]
[Sat Aug 29 05:11:07.175604 2026] [security2:error] [pid 11274:tid 11480] [client 20.196.209.81:16250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/configs.php"] [unique_id "apK-S2bX5DA3XO6e_qQuHwAAAS0"]
[Sat Aug 29 05:11:07.182208 2026] [security2:error] [pid 11274:tid 11556] [client 20.240.128.207:18658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/adminfuns.php"] [unique_id "apK-S2bX5DA3XO6e_qQuIAAAAXg"]
[Sat Aug 29 05:11:07.194446 2026] [security2:error] [pid 11274:tid 11550] [client 52.139.37.240:56107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK-S2bX5DA3XO6e_qQuIgAAAXI"]
[Sat Aug 29 05:11:07.199138 2026] [security2:error] [pid 11274:tid 11492] [client 20.151.200.44:63019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/ws66.php"] [unique_id "apK-S2bX5DA3XO6e_qQuIwAAATk"]
[Sat Aug 29 05:11:07.200500 2026] [security2:error] [pid 1321:tid 1502] [client 74.248.24.12:30610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-admin/a.php"] [unique_id "apK-S2jCPtor9NZ-byTs4QAABko"]
[Sat Aug 29 05:11:07.213642 2026] [security2:error] [pid 1321:tid 1491] [client 68.155.159.216:38582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK-S2jCPtor9NZ-byTs4gAABj8"]
[Sat Aug 29 05:11:07.243892 2026] [security2:error] [pid 11274:tid 11546] [client 68.155.159.216:64509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK-S2bX5DA3XO6e_qQuJQAAAW4"]
[Sat Aug 29 05:11:07.257025 2026] [security2:error] [pid 11274:tid 11451] [client 20.104.18.15:15104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/nano.php"] [unique_id "apK-S2bX5DA3XO6e_qQuJgAAARE"]
[Sat Aug 29 05:11:07.260160 2026] [security2:error] [pid 11274:tid 11559] [client 20.100.175.163:27066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "apK-S2bX5DA3XO6e_qQuJwAAAXs"]
[Sat Aug 29 05:11:07.274405 2026] [security2:error] [pid 11274:tid 11466] [client 20.48.250.41:42958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/error_log.php"] [unique_id "apK-S2bX5DA3XO6e_qQuKAAAASA"]
[Sat Aug 29 05:11:07.277163 2026] [security2:error] [pid 11274:tid 11566] [client 20.104.18.15:6996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/dragonshell.php"] [unique_id "apK-S2bX5DA3XO6e_qQuKQAAAYI"]
[Sat Aug 29 05:11:07.281838 2026] [security2:error] [pid 1321:tid 1614] [client 45.148.10.62:59222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zai.emf.mybluehost.me"] [uri "/.env.php"] [unique_id "apK-S2jCPtor9NZ-byTs4wAABrk"]
[Sat Aug 29 05:11:07.284616 2026] [security2:error] [pid 11274:tid 11484] [client 20.104.18.15:22456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/dragonshell.php"] [unique_id "apK-S2bX5DA3XO6e_qQuKgAAATE"]
[Sat Aug 29 05:11:07.285980 2026] [security2:error] [pid 11274:tid 11554] [client 52.139.37.240:36692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/abc.php"] [unique_id "apK-S2bX5DA3XO6e_qQuKwAAAXY"]
[Sat Aug 29 05:11:07.290964 2026] [security2:error] [pid 1321:tid 1519] [client 20.104.18.15:43800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/ws55.php"] [unique_id "apK-S2jCPtor9NZ-byTs5AAABls"]
[Sat Aug 29 05:11:07.296509 2026] [security2:error] [pid 11274:tid 11520] [client 20.100.175.163:9474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/test1.php"] [unique_id "apK-S2bX5DA3XO6e_qQuLAAAAVU"]
[Sat Aug 29 05:11:07.304913 2026] [security2:error] [pid 1321:tid 1585] [client 68.155.159.216:33605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/images/index.php"] [unique_id "apK-S2jCPtor9NZ-byTs5QAABpw"]
[Sat Aug 29 05:11:07.307625 2026] [security2:error] [pid 11274:tid 11565] [client 20.151.200.44:63126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/blox.php"] [unique_id "apK-S2bX5DA3XO6e_qQuLQAAAYE"]
[Sat Aug 29 05:11:07.312711 2026] [security2:error] [pid 11274:tid 11455] [client 20.151.200.44:65230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/rfi.php"] [unique_id "apK-S2bX5DA3XO6e_qQuLgAAARU"]
[Sat Aug 29 05:11:07.326142 2026] [security2:error] [pid 11274:tid 11463] [client 20.48.250.41:62435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/init.php"] [unique_id "apK-S2bX5DA3XO6e_qQuMAAAAR0"]
[Sat Aug 29 05:11:07.327126 2026] [security2:error] [pid 11274:tid 11494] [client 158.23.184.117:60143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/404.php"] [unique_id "apK-S2bX5DA3XO6e_qQuMQAAATs"]
[Sat Aug 29 05:11:07.327211 2026] [security2:error] [pid 11274:tid 11552] [client 4.205.62.107:64226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/a1vx.php"] [unique_id "apK-S2bX5DA3XO6e_qQuMgAAAXQ"]
[Sat Aug 29 05:11:07.330182 2026] [security2:error] [pid 1321:tid 1489] [client 4.205.62.107:32527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/css.php"] [unique_id "apK-S2jCPtor9NZ-byTs5gAABj0"]
[Sat Aug 29 05:11:07.343842 2026] [security2:error] [pid 11274:tid 11493] [client 20.48.160.90:51841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/bo.php"] [unique_id "apK-S2bX5DA3XO6e_qQuMwAAATo"]
[Sat Aug 29 05:11:07.356237 2026] [security2:error] [pid 1321:tid 1581] [client 20.48.160.90:62159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/backup.php"] [unique_id "apK-S2jCPtor9NZ-byTs6AAABpg"]
[Sat Aug 29 05:11:07.363655 2026] [security2:error] [pid 11274:tid 11536] [client 158.158.54.35:7042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK-S2bX5DA3XO6e_qQuNQAAAWU"]
[Sat Aug 29 05:11:07.387626 2026] [security2:error] [pid 11274:tid 11551] [client 158.158.54.35:17687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/bgymj.php"] [unique_id "apK-S2bX5DA3XO6e_qQuNgAAAXM"]
[Sat Aug 29 05:11:07.394943 2026] [security2:error] [pid 1321:tid 1516] [client 52.139.37.240:56112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK-S2jCPtor9NZ-byTs6QAABlg"]
[Sat Aug 29 05:11:07.395211 2026] [security2:error] [pid 1321:tid 1584] [client 20.104.18.15:15202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/ano.php"] [unique_id "apK-S2jCPtor9NZ-byTs6gAABps"]
[Sat Aug 29 05:11:07.408231 2026] [security2:error] [pid 11274:tid 11549] [client 20.48.250.41:42978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/403.php"] [unique_id "apK-S2bX5DA3XO6e_qQuNwAAAXE"]
[Sat Aug 29 05:11:07.420788 2026] [security2:error] [pid 11274:tid 11487] [client 20.104.18.15:6994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/wp-safe.php"] [unique_id "apK-S2bX5DA3XO6e_qQuOAAAATQ"]
[Sat Aug 29 05:11:07.422407 2026] [security2:error] [pid 11274:tid 11561] [client 20.104.18.15:43943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/gulu.php"] [unique_id "apK-S2bX5DA3XO6e_qQuOQAAAX0"]
[Sat Aug 29 05:11:07.428185 2026] [security2:error] [pid 1321:tid 1612] [client 20.104.49.130:57510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/crgio.php"] [unique_id "apK-S2jCPtor9NZ-byTs6wAABrc"]
[Sat Aug 29 05:11:07.432282 2026] [security2:error] [pid 1321:tid 1501] [client 68.155.159.216:14313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/about/function.php"] [unique_id "apK-S2jCPtor9NZ-byTs7AAABkk"]
[Sat Aug 29 05:11:07.437076 2026] [security2:error] [pid 11274:tid 11523] [client 20.104.18.15:43889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/drykl.php"] [unique_id "apK-S2bX5DA3XO6e_qQuOgAAAVg"]
[Sat Aug 29 05:11:07.437240 2026] [security2:error] [pid 1321:tid 1601] [client 68.155.159.216:38552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-content/banners/about.php"] [unique_id "apK-S2jCPtor9NZ-byTs7QAABqw"]
[Sat Aug 29 05:11:07.445515 2026] [security2:error] [pid 11274:tid 11543] [client 158.23.147.79:5884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/bk/index.php"] [unique_id "apK-S2bX5DA3XO6e_qQuOwAAAWs"]
[Sat Aug 29 05:11:07.461176 2026] [security2:error] [pid 11274:tid 11473] [client 20.63.219.114:2915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/randkeyword.php"] [unique_id "apK-S2bX5DA3XO6e_qQuPAAAASc"]
[Sat Aug 29 05:11:07.472936 2026] [security2:error] [pid 11274:tid 11445] [client 158.23.184.117:39924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/as.php"] [unique_id "apK-S2bX5DA3XO6e_qQuPQAAAQs"]
[Sat Aug 29 05:11:07.478509 2026] [security2:error] [pid 1321:tid 1521] [client 20.104.18.15:22527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/wp-safe.php"] [unique_id "apK-S2jCPtor9NZ-byTs7gAABl0"]
[Sat Aug 29 05:11:07.498989 2026] [security2:error] [pid 1321:tid 1611] [client 20.48.160.90:28050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/44.php"] [unique_id "apK-S2jCPtor9NZ-byTs8AAABrY"]
[Sat Aug 29 05:11:07.500077 2026] [security2:error] [pid 11274:tid 11500] [client 52.139.37.240:36674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/c1.php"] [unique_id "apK-S2bX5DA3XO6e_qQuPgAAAUE"]
[Sat Aug 29 05:11:07.520580 2026] [security2:error] [pid 1321:tid 1492] [client 20.48.250.41:64861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/term.php"] [unique_id "apK-S2jCPtor9NZ-byTs8QAABkA"]
[Sat Aug 29 05:11:07.531510 2026] [security2:error] [pid 1321:tid 1596] [client 20.48.160.90:65368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/indo.php"] [unique_id "apK-S2jCPtor9NZ-byTs8gAABqc"]
[Sat Aug 29 05:11:07.537134 2026] [security2:error] [pid 1321:tid 1494] [client 158.23.147.79:28068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-admin/index.php"] [unique_id "apK-S2jCPtor9NZ-byTs8wAABkI"]
[Sat Aug 29 05:11:07.538443 2026] [security2:error] [pid 1321:tid 1504] [client 20.104.18.15:15124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/mgrr.php"] [unique_id "apK-S2jCPtor9NZ-byTs9AAABkw"]
[Sat Aug 29 05:11:07.543284 2026] [security2:error] [pid 1321:tid 1593] [client 20.48.250.41:49563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/cytyr.php"] [unique_id "apK-S2jCPtor9NZ-byTs9QAABqQ"]
[Sat Aug 29 05:11:07.555565 2026] [security2:error] [pid 1321:tid 1577] [client 4.205.62.107:61699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/phpi.php"] [unique_id "apK-S2jCPtor9NZ-byTs9gAABpQ"]
[Sat Aug 29 05:11:07.570959 2026] [security2:error] [pid 11274:tid 11512] [client 20.52.41.200:2794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-blog.php"] [unique_id "apK-S2bX5DA3XO6e_qQuPwAAAU0"]
[Sat Aug 29 05:11:07.577173 2026] [security2:error] [pid 1321:tid 1555] [client 68.155.159.216:63817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK-S2jCPtor9NZ-byTs9wAABn4"]
[Sat Aug 29 05:11:07.581587 2026] [security2:error] [pid 11274:tid 11514] [client 20.104.18.15:43786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/backup.php"] [unique_id "apK-S2bX5DA3XO6e_qQuQgAAAU8"]
[Sat Aug 29 05:11:07.586806 2026] [security2:error] [pid 11274:tid 11533] [client 20.104.18.15:43847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/replace.php"] [unique_id "apK-S2bX5DA3XO6e_qQuQwAAAWI"]
[Sat Aug 29 05:11:07.590905 2026] [security2:error] [pid 1321:tid 1533] [client 20.104.18.15:7162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/gjewuagf.php"] [unique_id "apK-S2jCPtor9NZ-byTs-QAABmk"]
[Sat Aug 29 05:11:07.606332 2026] [security2:error] [pid 1321:tid 1595] [client 52.139.37.240:16929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/zafir1.php"] [unique_id "apK-S2jCPtor9NZ-byTs-gAABqY"]
[Sat Aug 29 05:11:07.609471 2026] [security2:error] [pid 11274:tid 11572] [client 20.196.209.81:16245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/disagraeed.php"] [unique_id "apK-S2bX5DA3XO6e_qQuRQAAAYg"]
[Sat Aug 29 05:11:07.629932 2026] [security2:error] [pid 11274:tid 11571] [client 158.23.184.117:60110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/php.php"] [unique_id "apK-S2bX5DA3XO6e_qQuRgAAAYc"]
[Sat Aug 29 05:11:07.670032 2026] [security2:error] [pid 11274:tid 11516] [client 20.104.18.15:22384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/gjewuagf.php"] [unique_id "apK-S2bX5DA3XO6e_qQuSAAAAVE"]
[Sat Aug 29 05:11:07.683551 2026] [security2:error] [pid 1321:tid 1561] [client 20.240.128.207:23177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/goods.php"] [unique_id "apK-S2jCPtor9NZ-byTs_AAABoQ"]
[Sat Aug 29 05:11:07.683584 2026] [security2:error] [pid 1321:tid 1529] [client 20.104.18.15:15105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/mac.php"] [unique_id "apK-S2jCPtor9NZ-byTs_QAABmU"]
[Sat Aug 29 05:11:07.690204 2026] [security2:error] [pid 11274:tid 11504] [client 4.205.62.107:6299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/h.php"] [unique_id "apK-S2bX5DA3XO6e_qQuSgAAAUU"]
[Sat Aug 29 05:11:07.694334 2026] [security2:error] [pid 11274:tid 11506] [client 52.139.37.240:36828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/index.php/feed/atom/"] [unique_id "apK-S2bX5DA3XO6e_qQuSwAAAUc"]
[Sat Aug 29 05:11:07.703802 2026] [security2:error] [pid 11274:tid 11489] [client 20.48.250.41:42984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/galer.php"] [unique_id "apK-S2bX5DA3XO6e_qQuTAAAATY"]
[Sat Aug 29 05:11:07.709638 2026] [security2:error] [pid 11274:tid 11532] [client 20.48.160.90:65316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/sign.php"] [unique_id "apK-S2bX5DA3XO6e_qQuTQAAAWE"]
[Sat Aug 29 05:11:07.722829 2026] [security2:error] [pid 1321:tid 1580] [client 20.104.18.15:7003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/tnglzqmv.php"] [unique_id "apK-S2jCPtor9NZ-byTs_wAABpc"]
[Sat Aug 29 05:11:07.741904 2026] [security2:error] [pid 1321:tid 1515] [client 68.155.159.216:5982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/packed.php"] [unique_id "apK-S2jCPtor9NZ-byTtAAAABlc"]
[Sat Aug 29 05:11:07.757960 2026] [security2:error] [pid 11274:tid 11541] [client 158.158.54.35:14883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/inputs.php"] [unique_id "apK-S2bX5DA3XO6e_qQuTwAAAWo"]
[Sat Aug 29 05:11:07.759303 2026] [security2:error] [pid 1321:tid 1510] [client 20.100.175.163:25205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/abcd.php"] [unique_id "apK-S2jCPtor9NZ-byTtAQAABlI"]
[Sat Aug 29 05:11:07.763759 2026] [security2:error] [pid 11274:tid 11535] [client 20.104.18.15:43722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/indo.php"] [unique_id "apK-S2bX5DA3XO6e_qQuUAAAAWQ"]
[Sat Aug 29 05:11:07.764181 2026] [security2:error] [pid 11274:tid 11477] [client 20.151.200.44:63360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/tajj.php"] [unique_id "apK-S2bX5DA3XO6e_qQuUQAAASs"]
[Sat Aug 29 05:11:07.775195 2026] [security2:error] [pid 11274:tid 11524] [client 68.155.159.216:56774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-content/themes/too.php"] [unique_id "apK-S2bX5DA3XO6e_qQuUwAAAVk"]
[Sat Aug 29 05:11:07.775600 2026] [security2:error] [pid 11274:tid 11513] [client 158.23.184.117:60124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/term.php"] [unique_id "apK-S2bX5DA3XO6e_qQuVAAAAU4"]
[Sat Aug 29 05:11:07.789194 2026] [security2:error] [pid 11274:tid 11464] [client 20.100.175.163:13910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/ws.php"] [unique_id "apK-S2bX5DA3XO6e_qQuVgAAAR4"]
[Sat Aug 29 05:11:07.804682 2026] [security2:error] [pid 11274:tid 11480] [client 52.139.37.240:16739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/abc.php"] [unique_id "apK-S2bX5DA3XO6e_qQuWAAAAS0"]
[Sat Aug 29 05:11:07.807417 2026] [security2:error] [pid 11274:tid 11476] [client 20.104.18.15:43855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/c4.php"] [unique_id "apK-S2bX5DA3XO6e_qQuWQAAASo"]
[Sat Aug 29 05:11:07.824824 2026] [security2:error] [pid 11274:tid 11466] [client 20.104.18.15:15159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/simple.php"] [unique_id "apK-S2bX5DA3XO6e_qQuWgAAASA"]
[Sat Aug 29 05:11:07.829748 2026] [security2:error] [pid 11274:tid 11554] [client 20.104.49.130:65233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/f35.update.php"] [unique_id "apK-S2bX5DA3XO6e_qQuWwAAAXY"]
[Sat Aug 29 05:11:07.836877 2026] [security2:error] [pid 11274:tid 11520] [client 20.48.250.41:64885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/aaa.php"] [unique_id "apK-S2bX5DA3XO6e_qQuXAAAAVU"]
[Sat Aug 29 05:11:07.842639 2026] [http2:warn] [pid 1017536:tid 1017690] [client 57.141.14.59:50242] h2_stream(1017536-275-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:11:07.848915 2026] [security2:error] [pid 11274:tid 11565] [client 20.104.18.15:22407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/tnglzqmv.php"] [unique_id "apK-S2bX5DA3XO6e_qQuXQAAAYE"]
[Sat Aug 29 05:11:07.850764 2026] [security2:error] [pid 11274:tid 11455] [client 20.48.250.41:49648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/baixy.php"] [unique_id "apK-S2bX5DA3XO6e_qQuXgAAARU"]
[Sat Aug 29 05:11:07.863070 2026] [security2:error] [pid 11274:tid 11568] [client 158.158.54.35:8462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK-S2bX5DA3XO6e_qQuXwAAAYQ"]
[Sat Aug 29 05:11:07.866596 2026] [security2:error] [pid 11274:tid 11471] [client 20.48.160.90:46472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/h2.php"] [unique_id "apK-S2bX5DA3XO6e_qQuYAAAASU"]
[Sat Aug 29 05:11:07.868365 2026] [security2:error] [pid 11274:tid 11452] [client 20.104.18.15:7071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/wefile.php"] [unique_id "apK-S2bX5DA3XO6e_qQuYgAAARI"]
[Sat Aug 29 05:11:07.869220 2026] [security2:error] [pid 11274:tid 11463] [client 158.23.147.79:63867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-includes/content.php"] [unique_id "apK-S2bX5DA3XO6e_qQuYwAAAR0"]
[Sat Aug 29 05:11:07.869979 2026] [security2:error] [pid 11274:tid 11494] [client 68.155.159.216:62811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-includes/css/index.php"] [unique_id "apK-S2bX5DA3XO6e_qQuZAAAATs"]
[Sat Aug 29 05:11:07.892809 2026] [security2:error] [pid 1321:tid 1607] [client 52.139.37.240:35850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/root.php"] [unique_id "apK-S2jCPtor9NZ-byTtAwAABrI"]
[Sat Aug 29 05:11:07.922976 2026] [security2:error] [pid 1321:tid 1523] [client 158.23.184.117:60134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/Ov-Simple1.php"] [unique_id "apK-S2jCPtor9NZ-byTtBAAABl8"]
[Sat Aug 29 05:11:07.926919 2026] [security2:error] [pid 11274:tid 11558] [client 20.104.18.15:43308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/sign.php"] [unique_id "apK-S2bX5DA3XO6e_qQuZgAAAXo"]
[Sat Aug 29 05:11:07.945711 2026] [security2:error] [pid 11274:tid 11495] [client 20.104.18.15:43309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/rxr.php"] [unique_id "apK-S2bX5DA3XO6e_qQuaQAAATw"]
[Sat Aug 29 05:11:07.951695 2026] [security2:error] [pid 11274:tid 11490] [client 20.48.160.90:60992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/wnnjpsby.php"] [unique_id "apK-S2bX5DA3XO6e_qQuagAAATc"]
[Sat Aug 29 05:11:07.979842 2026] [security2:error] [pid 1321:tid 1520] [client 20.104.18.15:22346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/wefile.php"] [unique_id "apK-S2jCPtor9NZ-byTtBwAABlw"]
[Sat Aug 29 05:11:07.984656 2026] [security2:error] [pid 11274:tid 11543] [client 20.104.18.15:15147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/xty.php"] [unique_id "apK-S2bX5DA3XO6e_qQuawAAAWs"]
[Sat Aug 29 05:11:07.984961 2026] [security2:error] [pid 1321:tid 1594] [client 20.104.49.130:57526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/press.php"] [unique_id "apK-S2jCPtor9NZ-byTtCgAABqU"]
[Sat Aug 29 05:11:07.985288 2026] [security2:error] [pid 1321:tid 1559] [client 149.34.210.141:9724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-S2jCPtor9NZ-byTtCwAABoI"]
[Sat Aug 29 05:11:07.985377 2026] [security2:error] [pid 1321:tid 1559] [client 149.34.210.141:9724] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-S2jCPtor9NZ-byTtCwAABoI"]
[Sat Aug 29 05:11:08.003820 2026] [security2:error] [pid 1321:tid 1490] [client 20.104.18.15:7146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/blog.php"] [unique_id "apK-TGjCPtor9NZ-byTtDAAABj4"]
[Sat Aug 29 05:11:08.004908 2026] [security2:error] [pid 1321:tid 1609] [client 52.139.37.240:16743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/c1.php"] [unique_id "apK-TGjCPtor9NZ-byTtDQAABrQ"]
[Sat Aug 29 05:11:08.015086 2026] [security2:error] [pid 1321:tid 1600] [client 20.196.209.81:16238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/add_actualites.php"] [unique_id "apK-TGjCPtor9NZ-byTtDwAABqs"]
[Sat Aug 29 05:11:08.026215 2026] [security2:error] [pid 11274:tid 11505] [client 20.52.41.200:2755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/xxx.php"] [unique_id "apK-TGbX5DA3XO6e_qQubgAAAUY"]
[Sat Aug 29 05:11:08.027492 2026] [security2:error] [pid 1321:tid 1566] [client 20.48.250.41:42897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/ava.php"] [unique_id "apK-TGjCPtor9NZ-byTtEAAABok"]
[Sat Aug 29 05:11:08.044856 2026] [security2:error] [pid 11274:tid 11481] [client 68.155.159.216:1898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK-TGbX5DA3XO6e_qQubwAAAS4"]
[Sat Aug 29 05:11:08.048301 2026] [security2:error] [pid 11274:tid 11553] [client 20.48.250.41:62352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/xsox.php"] [unique_id "apK-TGbX5DA3XO6e_qQucAAAAXU"]
[Sat Aug 29 05:11:08.068688 2026] [security2:error] [pid 11274:tid 11538] [client 158.23.184.117:60115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/atomlib.php"] [unique_id "apK-TGbX5DA3XO6e_qQucwAAAWc"]
[Sat Aug 29 05:11:08.069306 2026] [security2:error] [pid 11274:tid 11561] [client 20.63.219.114:16563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/goods.php"] [unique_id "apK-TGbX5DA3XO6e_qQudAAAAX0"]
[Sat Aug 29 05:11:08.072525 2026] [security2:error] [pid 11274:tid 11486] [client 20.104.18.15:43853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/wnnjpsby.php"] [unique_id "apK-TGbX5DA3XO6e_qQudQAAATM"]
[Sat Aug 29 05:11:08.099952 2026] [security2:error] [pid 11274:tid 11475] [client 52.139.37.240:36682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/shell.php"] [unique_id "apK-TGbX5DA3XO6e_qQudgAAASk"]
[Sat Aug 29 05:11:08.104728 2026] [security2:error] [pid 1321:tid 1502] [client 74.248.24.12:40681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK-TGjCPtor9NZ-byTtEQAABko"]
[Sat Aug 29 05:11:08.115627 2026] [security2:error] [pid 1321:tid 1491] [client 158.158.54.35:1984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK-TGjCPtor9NZ-byTtEgAABj8"]
[Sat Aug 29 05:11:08.123199 2026] [security2:error] [pid 11274:tid 11514] [client 20.104.18.15:43777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "gp3llc.com"] [uri "/reviall.php"] [unique_id "apK-TGbX5DA3XO6e_qQudwAAAU8"]
[Sat Aug 29 05:11:08.123778 2026] [security2:error] [pid 11274:tid 11539] [client 20.48.160.90:63346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/gigi.php"] [unique_id "apK-TGbX5DA3XO6e_qQueAAAAWg"]
[Sat Aug 29 05:11:08.141453 2026] [security2:error] [pid 11274:tid 11572] [client 20.104.18.15:6915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/wp-admin/js/wp-load.php"] [unique_id "apK-TGbX5DA3XO6e_qQueQAAAYg"]
[Sat Aug 29 05:11:08.141904 2026] [security2:error] [pid 1321:tid 1517] [client 158.23.147.79:39105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/NewFile.php/"] [unique_id "apK-TGjCPtor9NZ-byTtFAAABlk"]
[Sat Aug 29 05:11:08.142506 2026] [security2:error] [pid 11274:tid 11482] [client 20.104.18.15:22381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/blog.php"] [unique_id "apK-TGbX5DA3XO6e_qQuewAAAS8"]
[Sat Aug 29 05:11:08.142587 2026] [security2:error] [pid 11274:tid 11488] [client 20.104.18.15:15327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/sallu.php"] [unique_id "apK-TGbX5DA3XO6e_qQuegAAATU"]
[Sat Aug 29 05:11:08.177749 2026] [security2:error] [pid 11274:tid 11449] [client 158.23.147.79:24563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK-TGbX5DA3XO6e_qQufAAAAQ8"]
[Sat Aug 29 05:11:08.187685 2026] [security2:error] [pid 11274:tid 11498] [client 4.205.62.107:60338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/fraro.php"] [unique_id "apK-TGbX5DA3XO6e_qQufQAAAT8"]
[Sat Aug 29 05:11:08.198134 2026] [security2:error] [pid 11274:tid 11506] [client 4.205.62.107:51401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/xmy.php"] [unique_id "apK-TGbX5DA3XO6e_qQufwAAAUc"]
[Sat Aug 29 05:11:08.202731 2026] [security2:error] [pid 11274:tid 11518] [client 158.158.54.35:17679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/alfa.php"] [unique_id "apK-TGbX5DA3XO6e_qQugAAAAVM"]
[Sat Aug 29 05:11:08.202755 2026] [security2:error] [pid 11274:tid 11489] [client 20.48.250.41:62420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/lkui.php"] [unique_id "apK-TGbX5DA3XO6e_qQugQAAATY"]
[Sat Aug 29 05:11:08.213863 2026] [security2:error] [pid 11274:tid 11444] [client 158.23.184.117:60122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/edit.php"] [unique_id "apK-TGbX5DA3XO6e_qQuggAAAQo"]
[Sat Aug 29 05:11:08.216688 2026] [security2:error] [pid 11274:tid 11469] [client 52.139.37.240:16711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/index.php/feed/atom/"] [unique_id "apK-TGbX5DA3XO6e_qQugwAAASM"]
[Sat Aug 29 05:11:08.221065 2026] [security2:error] [pid 11274:tid 11540] [client 20.48.160.90:28152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/wp-content/mod/adminfuns.php"] [unique_id "apK-TGbX5DA3XO6e_qQuhAAAAWk"]
[Sat Aug 29 05:11:08.224021 2026] [security2:error] [pid 1321:tid 1567] [client 20.240.128.207:18674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/css.php"] [unique_id "apK-TGjCPtor9NZ-byTtFQAABoo"]
[Sat Aug 29 05:11:08.239539 2026] [security2:error] [pid 11274:tid 11547] [client 20.104.18.15:43735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/gigi.php"] [unique_id "apK-TGbX5DA3XO6e_qQuhgAAAW8"]
[Sat Aug 29 05:11:08.242956 2026] [security2:error] [pid 11274:tid 11535] [client 20.48.250.41:49575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/gdn.php"] [unique_id "apK-TGbX5DA3XO6e_qQuhwAAAWQ"]
[Sat Aug 29 05:11:08.254766 2026] [security2:error] [pid 11274:tid 11524] [client 158.23.147.79:60194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-includes/customize/index.php"] [unique_id "apK-TGbX5DA3XO6e_qQuiAAAAVk"]
[Sat Aug 29 05:11:08.257512 2026] [security2:error] [pid 11274:tid 11513] [client 68.155.159.216:30475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK-TGbX5DA3XO6e_qQuiQAAAU4"]
[Sat Aug 29 05:11:08.258970 2026] [security2:error] [pid 1321:tid 1528] [client 20.100.175.163:7940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-access.php"] [unique_id "apK-TGjCPtor9NZ-byTtFgAABmQ"]
[Sat Aug 29 05:11:08.271124 2026] [security2:error] [pid 11274:tid 11480] [client 20.104.18.15:22417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/wp-admin/js/wp-load.php"] [unique_id "apK-TGbX5DA3XO6e_qQuigAAAS0"]
[Sat Aug 29 05:11:08.274294 2026] [security2:error] [pid 11274:tid 11456] [client 20.100.175.163:9644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-themes.php"] [unique_id "apK-TGbX5DA3XO6e_qQuiwAAARY"]
[Sat Aug 29 05:11:08.283556 2026] [security2:error] [pid 11274:tid 11559] [client 20.104.18.15:7070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/robot.php"] [unique_id "apK-TGbX5DA3XO6e_qQujAAAAXs"]
[Sat Aug 29 05:11:08.287382 2026] [security2:error] [pid 1321:tid 1497] [client 20.48.160.90:65347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/info.php/new.php"] [unique_id "apK-TGjCPtor9NZ-byTtFwAABkU"]
[Sat Aug 29 05:11:08.296995 2026] [security2:error] [pid 11274:tid 11492] [client 52.139.37.240:36717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK-TGbX5DA3XO6e_qQujQAAATk"]
[Sat Aug 29 05:11:08.299424 2026] [security2:error] [pid 11274:tid 11484] [client 20.104.18.15:15108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/codex.php"] [unique_id "apK-TGbX5DA3XO6e_qQujgAAATE"]
[Sat Aug 29 05:11:08.319417 2026] [security2:error] [pid 1321:tid 1514] [client 68.155.159.216:61307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/ans.php"] [unique_id "apK-TGjCPtor9NZ-byTtGAAABlY"]
[Sat Aug 29 05:11:08.360584 2026] [security2:error] [pid 1321:tid 1576] [client 158.23.184.117:39885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/7.php"] [unique_id "apK-TGjCPtor9NZ-byTtGQAABpM"]
[Sat Aug 29 05:11:08.384230 2026] [security2:error] [pid 11274:tid 11570] [client 20.48.160.90:51886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/sao.php"] [unique_id "apK-TGbX5DA3XO6e_qQukAAAAYY"]
[Sat Aug 29 05:11:08.398069 2026] [security2:error] [pid 11274:tid 11529] [client 20.104.18.15:43951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/info.php/new.php"] [unique_id "apK-TGbX5DA3XO6e_qQukQAAAV4"]
[Sat Aug 29 05:11:08.410168 2026] [security2:error] [pid 1321:tid 1602] [client 68.155.159.216:33554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK-TGjCPtor9NZ-byTtGgAABq0"]
[Sat Aug 29 05:11:08.413322 2026] [security2:error] [pid 11274:tid 11552] [client 52.139.37.240:56095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/root.php"] [unique_id "apK-TGbX5DA3XO6e_qQukgAAAXQ"]
[Sat Aug 29 05:11:08.413494 2026] [security2:error] [pid 11274:tid 11454] [client 20.104.18.15:7004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/revo.php"] [unique_id "apK-TGbX5DA3XO6e_qQukwAAARQ"]
[Sat Aug 29 05:11:08.415867 2026] [security2:error] [pid 1321:tid 1585] [client 20.196.209.81:16231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/alfanew.php7"] [unique_id "apK-TGjCPtor9NZ-byTtGwAABpw"]
[Sat Aug 29 05:11:08.418273 2026] [security2:error] [pid 11274:tid 11546] [client 20.48.250.41:64778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "apK-TGbX5DA3XO6e_qQulAAAAW4"]
[Sat Aug 29 05:11:08.430526 2026] [security2:error] [pid 1321:tid 1581] [client 20.63.219.114:10351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/hehe.php"] [unique_id "apK-TGjCPtor9NZ-byTtHAAABpg"]
[Sat Aug 29 05:11:08.448614 2026] [security2:error] [pid 11274:tid 11536] [client 20.104.18.15:22344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/robot.php"] [unique_id "apK-TGbX5DA3XO6e_qQulgAAAWU"]
[Sat Aug 29 05:11:08.462606 2026] [security2:error] [pid 11274:tid 11551] [client 4.205.62.107:62968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/php_info.php"] [unique_id "apK-TGbX5DA3XO6e_qQulwAAAXM"]
[Sat Aug 29 05:11:08.464457 2026] [security2:error] [pid 1321:tid 1526] [client 4.205.62.107:64200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/public/vx.php"] [unique_id "apK-TGjCPtor9NZ-byTtHQAABmI"]
[Sat Aug 29 05:11:08.479536 2026] [security2:error] [pid 1321:tid 1543] [client 20.104.18.15:15163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/5656.php"] [unique_id "apK-TGjCPtor9NZ-byTtHgAABnM"]
[Sat Aug 29 05:11:08.480980 2026] [security2:error] [pid 1321:tid 1543] [client 20.48.250.41:49598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/f2.php"] [unique_id "apK-TGjCPtor9NZ-byTtHwAABnM"]
[Sat Aug 29 05:11:08.483954 2026] [core:error] [pid 11274:tid 11534] [client 20.52.41.200:2878] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:08.483967 2026] [core:error] [pid 11274:tid 11534] [client 20.52.41.200:2878] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:08.492084 2026] [security2:error] [pid 1321:tid 1507] [client 52.139.37.240:36676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/wp-content/plugins/linkpreview/il.php"] [unique_id "apK-TGjCPtor9NZ-byTtIAAABk8"]
[Sat Aug 29 05:11:08.507905 2026] [security2:error] [pid 1321:tid 1552] [client 158.23.184.117:39618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/black.php"] [unique_id "apK-TGjCPtor9NZ-byTtIgAABns"]
[Sat Aug 29 05:11:08.536876 2026] [security2:error] [pid 1321:tid 1573] [client 68.155.159.216:14216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK-TGjCPtor9NZ-byTtIwAABpA"]
[Sat Aug 29 05:11:08.551382 2026] [security2:error] [pid 11274:tid 11505] [client 158.23.147.79:6116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.penmarketing.org"] [uri "/first.php"] [unique_id "apK-TGbX5DA3XO6e_qQumwAAAUY"]
[Sat Aug 29 05:11:08.552141 2026] [security2:error] [pid 11274:tid 11500] [client 20.104.18.15:7100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/birrs.php"] [unique_id "apK-TGbX5DA3XO6e_qQunAAAAUE"]
[Sat Aug 29 05:11:08.568753 2026] [security2:error] [pid 11274:tid 11499] [client 158.158.54.35:31143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/num.php"] [unique_id "apK-TGbX5DA3XO6e_qQungAAAUA"]
[Sat Aug 29 05:11:08.594438 2026] [security2:error] [pid 11274:tid 11538] [client 20.104.18.15:22452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/revo.php"] [unique_id "apK-TGbX5DA3XO6e_qQuoAAAAWc"]
[Sat Aug 29 05:11:08.608234 2026] [security2:error] [pid 1321:tid 1555] [client 20.48.160.90:28045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/dapa.php"] [unique_id "apK-TGjCPtor9NZ-byTtJgAABn4"]
[Sat Aug 29 05:11:08.611062 2026] [security2:error] [pid 1321:tid 1604] [client 20.104.18.15:15113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/w3lls.php"] [unique_id "apK-TGjCPtor9NZ-byTtJwAABq8"]
[Sat Aug 29 05:11:08.614875 2026] [security2:error] [pid 11274:tid 11475] [client 20.48.250.41:64805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/motu.php"] [unique_id "apK-TGbX5DA3XO6e_qQuoQAAASk"]
[Sat Aug 29 05:11:08.616233 2026] [security2:error] [pid 1321:tid 1533] [client 20.48.250.41:42954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/grsiuk.php"] [unique_id "apK-TGjCPtor9NZ-byTtKAAABmk"]
[Sat Aug 29 05:11:08.618023 2026] [security2:error] [pid 11274:tid 11564] [client 52.139.37.240:16495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/shell.php"] [unique_id "apK-TGbX5DA3XO6e_qQuogAAAYA"]
[Sat Aug 29 05:11:08.621448 2026] [security2:error] [pid 11274:tid 11512] [client 20.151.200.44:63361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/grsiuk.php"] [unique_id "apK-TGbX5DA3XO6e_qQuowAAAU0"]
[Sat Aug 29 05:11:08.641619 2026] [security2:error] [pid 11274:tid 11544] [client 74.248.24.12:25581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myplumgraphics.com"] [uri "/wp-admin.php"] [unique_id "apK-TGbX5DA3XO6e_qQupAAAAWw"]
[Sat Aug 29 05:11:08.649089 2026] [security2:error] [pid 11274:tid 11514] [client 20.104.18.15:43872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/w.php"] [unique_id "apK-TGbX5DA3XO6e_qQupQAAAU8"]
[Sat Aug 29 05:11:08.656138 2026] [security2:error] [pid 1321:tid 1590] [client 158.158.54.35:30307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/403.php"] [unique_id "apK-TGjCPtor9NZ-byTtKQAABqE"]
[Sat Aug 29 05:11:08.658962 2026] [security2:error] [pid 11274:tid 11539] [client 158.158.54.35:29112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-load.php"] [unique_id "apK-TGbX5DA3XO6e_qQupgAAAWg"]
[Sat Aug 29 05:11:08.660666 2026] [security2:error] [pid 11274:tid 11486] [client 158.23.184.117:60141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/wp-blog-header.php"] [unique_id "apK-TGbX5DA3XO6e_qQupwAAATM"]
[Sat Aug 29 05:11:08.688821 2026] [security2:error] [pid 1321:tid 1589] [client 52.139.37.240:35869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/wp-header-json.php"] [unique_id "apK-TGjCPtor9NZ-byTtKgAABqA"]
[Sat Aug 29 05:11:08.702213 2026] [security2:error] [pid 11274:tid 11474] [client 68.155.159.216:23421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK-TGbX5DA3XO6e_qQuqAAAASg"]
[Sat Aug 29 05:11:08.702707 2026] [security2:error] [pid 1321:tid 1565] [client 158.23.147.79:57000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK-TGjCPtor9NZ-byTtKwAABog"]
[Sat Aug 29 05:11:08.703742 2026] [security2:error] [pid 1321:tid 1575] [client 4.205.62.107:63983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK-TGjCPtor9NZ-byTtLAAABpI"]
[Sat Aug 29 05:11:08.726068 2026] [security2:error] [pid 11274:tid 11498] [client 20.104.18.15:7141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/sss.php"] [unique_id "apK-TGbX5DA3XO6e_qQuqgAAAT8"]
[Sat Aug 29 05:11:08.733747 2026] [security2:error] [pid 11274:tid 11504] [client 45.148.10.62:59226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zai.emf.mybluehost.me"] [uri "/wp-config.php"] [unique_id "apK-TGbX5DA3XO6e_qQuqwAAAUU"]
[Sat Aug 29 05:11:08.744206 2026] [security2:error] [pid 1321:tid 1556] [client 20.104.18.15:15205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/fpwch.php"] [unique_id "apK-TGjCPtor9NZ-byTtLQAABn8"]
[Sat Aug 29 05:11:08.745254 2026] [security2:error] [pid 1321:tid 1586] [client 20.104.18.15:22444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/birrs.php"] [unique_id "apK-TGjCPtor9NZ-byTtLgAABp0"]
[Sat Aug 29 05:11:08.750189 2026] [security2:error] [pid 1321:tid 1508] [client 20.48.250.41:49549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/wp-scr1pts.php"] [unique_id "apK-TGjCPtor9NZ-byTtLwAABlA"]
[Sat Aug 29 05:11:08.766417 2026] [security2:error] [pid 11274:tid 11561] [client 20.100.175.163:4580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-trackback.php"] [unique_id "apK-TGbX5DA3XO6e_qQurQAAAX0"]
[Sat Aug 29 05:11:08.777866 2026] [security2:error] [pid 11274:tid 11519] [client 20.100.175.163:13385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-content/uploads/min.php"] [unique_id "apK-TGbX5DA3XO6e_qQurgAAAVQ"]
[Sat Aug 29 05:11:08.783623 2026] [security2:error] [pid 11274:tid 11482] [client 20.63.219.114:10347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/wp-admin/class-db.php"] [unique_id "apK-TGbX5DA3XO6e_qQurwAAAS8"]
[Sat Aug 29 05:11:08.798309 2026] [security2:error] [pid 1321:tid 1496] [client 20.104.18.15:43894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/x.php"] [unique_id "apK-TGjCPtor9NZ-byTtMgAABkQ"]
[Sat Aug 29 05:11:08.809181 2026] [cgid:error] [pid 1321:tid 1531] [client 158.23.184.117:60128] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/drinkyourtrees/404.shtml
[Sat Aug 29 05:11:08.809409 2026] [security2:error] [pid 11274:tid 11541] [client 20.48.250.41:64771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/Ov-Simple1.php"] [unique_id "apK-TGbX5DA3XO6e_qQusAAAAWo"]
[Sat Aug 29 05:11:08.814090 2026] [security2:error] [pid 1321:tid 1529] [client 52.139.37.240:16500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK-TGjCPtor9NZ-byTtNAAABmU"]
[Sat Aug 29 05:11:08.836054 2026] [security2:error] [pid 1321:tid 1523] [client 4.205.62.107:6965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/bootstrap.php"] [unique_id "apK-TGjCPtor9NZ-byTtNQAABl8"]
[Sat Aug 29 05:11:08.856034 2026] [security2:error] [pid 1321:tid 1579] [client 158.23.184.117:60128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/2.php"] [unique_id "apK-TGjCPtor9NZ-byTtOAAABpY"]
[Sat Aug 29 05:11:08.858512 2026] [autoindex:error] [pid 1321:tid 1562] [client 20.48.160.90:0] AH01276: Cannot serve directory /home3/rushpcbc/public_html/foxmart/wp-content/uploads/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:11:08.880741 2026] [security2:error] [pid 11274:tid 11476] [client 68.155.159.216:56792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/radio.php"] [unique_id "apK-TGbX5DA3XO6e_qQutAAAASo"]
[Sat Aug 29 05:11:08.887211 2026] [security2:error] [pid 1321:tid 1607] [client 52.139.37.240:36852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/zup.php"] [unique_id "apK-TGjCPtor9NZ-byTtOgAABrI"]
[Sat Aug 29 05:11:08.891633 2026] [security2:error] [pid 11274:tid 11527] [client 20.104.18.15:22465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/sss.php"] [unique_id "apK-TGbX5DA3XO6e_qQutQAAAVw"]
[Sat Aug 29 05:11:08.911318 2026] [security2:error] [pid 1321:tid 1609] [client 20.48.250.41:49622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/num.php"] [unique_id "apK-TGjCPtor9NZ-byTtOwAABrQ"]
[Sat Aug 29 05:11:08.922624 2026] [security2:error] [pid 11274:tid 11492] [client 20.104.18.15:15111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/domvf.php"] [unique_id "apK-TGbX5DA3XO6e_qQuuAAAATk"]
[Sat Aug 29 05:11:08.934468 2026] [security2:error] [pid 1321:tid 1561] [client 20.196.209.81:16220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/xmlrpc.php0"] [unique_id "apK-TGjCPtor9NZ-byTtOQAABoQ"]
[Sat Aug 29 05:11:08.940180 2026] [core:error] [pid 11274:tid 11469] [client 20.52.41.200:2656] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:08.940203 2026] [core:error] [pid 11274:tid 11469] [client 20.52.41.200:2656] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:08.961073 2026] [security2:error] [pid 1321:tid 1601] [client 111.235.68.106:11726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK-TGjCPtor9NZ-byTtPAAABqw"]
[Sat Aug 29 05:11:08.961223 2026] [security2:error] [pid 1321:tid 1601] [client 111.235.68.106:11726] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK-TGjCPtor9NZ-byTtPAAABqw"]
[Sat Aug 29 05:11:08.980056 2026] [security2:error] [pid 1321:tid 1606] [client 20.104.18.15:43780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/ssla.php"] [unique_id "apK-TGjCPtor9NZ-byTtPQAABrE"]
[Sat Aug 29 05:11:08.982364 2026] [security2:error] [pid 1321:tid 1517] [client 20.48.250.41:62388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/wp-blogs.php"] [unique_id "apK-TGjCPtor9NZ-byTtPgAABlk"]
[Sat Aug 29 05:11:08.982742 2026] [security2:error] [pid 1321:tid 1587] [client 158.23.147.79:58080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-admin/css/index.php"] [unique_id "apK-TGjCPtor9NZ-byTtPwAABp4"]
[Sat Aug 29 05:11:08.987317 2026] [security2:error] [pid 11274:tid 11494] [client 68.155.159.216:62829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK-TGbX5DA3XO6e_qQuvQAAATs"]
[Sat Aug 29 05:11:08.995690 2026] [security2:error] [pid 11274:tid 11570] [client 20.151.200.44:61596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/Cok.php"] [unique_id "apK-TGbX5DA3XO6e_qQuvgAAAYY"]
[Sat Aug 29 05:11:08.998898 2026] [core:error] [pid 1321:tid 1495] [client 34.50.189.51:38444] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:08.998915 2026] [core:error] [pid 1321:tid 1495] [client 34.50.189.51:38444] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:09.004681 2026] [core:error] [pid 11274:tid 11565] [client 34.50.189.51:38422] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:09.004698 2026] [core:error] [pid 11274:tid 11565] [client 34.50.189.51:38422] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:09.005065 2026] [core:error] [pid 1321:tid 1574] [client 34.50.189.51:38420] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:09.005078 2026] [core:error] [pid 1321:tid 1574] [client 34.50.189.51:38420] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:09.008454 2026] [security2:error] [pid 1321:tid 1500] [client 158.23.184.117:60104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/index/function.php"] [unique_id "apK-TWjCPtor9NZ-byTtRQAABkg"]
[Sat Aug 29 05:11:09.010108 2026] [core:error] [pid 1321:tid 1608] [client 34.50.189.51:38418] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:09.010123 2026] [core:error] [pid 1321:tid 1608] [client 34.50.189.51:38418] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:09.022406 2026] [security2:error] [pid 11274:tid 11546] [client 20.48.160.90:51861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/wp-content/l.php"] [unique_id "apK-TWbX5DA3XO6e_qQuyAAAAW4"]
[Sat Aug 29 05:11:09.023863 2026] [core:error] [pid 1321:tid 1513] [client 34.50.189.51:38466] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:09.023878 2026] [core:error] [pid 1321:tid 1513] [client 34.50.189.51:38466] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:09.023968 2026] [security2:error] [pid 1321:tid 1513] [client 34.50.189.51:38466] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "discocollective.kriveloff-associates.com"] [uri "/index.php"] [unique_id "apK-TWjCPtor9NZ-byTtSAAABlU"]
[Sat Aug 29 05:11:09.024044 2026] [security2:error] [pid 1321:tid 1615] [client 34.50.189.51:38488] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "discocollective.kriveloff-associates.com"] [uri "/cgi-sys/404.html"] [unique_id "apK-TWjCPtor9NZ-byTtRwAABro"]
[Sat Aug 29 05:11:09.027033 2026] [security2:error] [pid 1321:tid 1566] [client 52.139.37.240:56085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/wp-content/plugins/linkpreview/il.php"] [unique_id "apK-TWjCPtor9NZ-byTtSQAABok"]
[Sat Aug 29 05:11:09.031953 2026] [core:error] [pid 1321:tid 1614] [client 34.50.189.51:38520] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:09.031967 2026] [core:error] [pid 1321:tid 1614] [client 34.50.189.51:38520] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:09.032049 2026] [security2:error] [pid 1321:tid 1614] [client 34.50.189.51:38520] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "discocollective.kriveloff-associates.com"] [uri "/index.php"] [unique_id "apK-TWjCPtor9NZ-byTtSgAABrk"]
[Sat Aug 29 05:11:09.044040 2026] [security2:error] [pid 11274:tid 11551] [client 20.240.128.207:23206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/w.php"] [unique_id "apK-TWbX5DA3XO6e_qQuygAAAXM"]
[Sat Aug 29 05:11:09.049064 2026] [security2:error] [pid 1321:tid 1514] [client 68.155.159.216:61298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK-TWjCPtor9NZ-byTtSwAABlY"]
[Sat Aug 29 05:11:09.053460 2026] [security2:error] [pid 11274:tid 11497] [client 20.104.18.15:22432] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.nranch.com"] [uri "/wp-content/themes/gaukingo/"] [unique_id "apK-TWbX5DA3XO6e_qQuzAAAAT4"]
[Sat Aug 29 05:11:09.057240 2026] [security2:error] [pid 11274:tid 11522] [client 20.104.49.130:58077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "coveryourauto.com"] [uri "/media.php"] [unique_id "apK-TWbX5DA3XO6e_qQuzQAAAVc"]
[Sat Aug 29 05:11:09.062579 2026] [security2:error] [pid 11274:tid 11495] [client 20.104.18.15:15198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/biufile.php"] [unique_id "apK-TWbX5DA3XO6e_qQu0AAAATw"]
[Sat Aug 29 05:11:09.071662 2026] [security2:error] [pid 1321:tid 1612] [client 20.48.250.41:42971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/a4.php"] [unique_id "apK-TWjCPtor9NZ-byTtTAAABrc"]
[Sat Aug 29 05:11:09.082962 2026] [security2:error] [pid 1321:tid 1522] [client 52.139.37.240:36825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/a9.php"] [unique_id "apK-TWjCPtor9NZ-byTtTgAABl4"]
[Sat Aug 29 05:11:09.116448 2026] [security2:error] [pid 11274:tid 11545] [client 68.155.159.216:64016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK-TWbX5DA3XO6e_qQu1gAAAW0"]
[Sat Aug 29 05:11:09.127444 2026] [security2:error] [pid 1321:tid 1524] [client 158.158.54.35:30319] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.clementphotography.ca"] [uri "/1.php"] [unique_id "apK-TWjCPtor9NZ-byTtUAAABmA"]
[Sat Aug 29 05:11:09.127541 2026] [security2:error] [pid 1321:tid 1524] [client 158.158.54.35:30319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/1.php"] [unique_id "apK-TWjCPtor9NZ-byTtUAAABmA"]
[Sat Aug 29 05:11:09.134589 2026] [security2:error] [pid 11274:tid 11553] [client 20.104.18.15:44022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "apK-TWbX5DA3XO6e_qQu1wAAAXU"]
[Sat Aug 29 05:11:09.156211 2026] [security2:error] [pid 11274:tid 11491] [client 158.23.184.117:60113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/wp-admin/maint/repair.php"] [unique_id "apK-TWbX5DA3XO6e_qQu2QAAATg"]
[Sat Aug 29 05:11:09.176811 2026] [security2:error] [pid 11274:tid 11472] [client 20.63.219.114:10320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/wp-contentt.php"] [unique_id "apK-TWbX5DA3XO6e_qQu3QAAASY"]
[Sat Aug 29 05:11:09.189590 2026] [security2:error] [pid 1321:tid 1518] [client 20.48.250.41:62354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/mini.php"] [unique_id "apK-TWjCPtor9NZ-byTtUQAABlo"]
[Sat Aug 29 05:11:09.201994 2026] [security2:error] [pid 11274:tid 11564] [client 20.104.18.15:7024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/wp-includes/ID3/moon.php"] [unique_id "apK-TWbX5DA3XO6e_qQu3gAAAYA"]
[Sat Aug 29 05:11:09.216891 2026] [security2:error] [pid 1321:tid 1545] [client 20.48.250.41:42974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/tfm.php"] [unique_id "apK-TWjCPtor9NZ-byTtUgAABnU"]
[Sat Aug 29 05:11:09.218441 2026] [security2:error] [pid 1321:tid 1611] [client 20.104.18.15:22355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/wp-includes/ID3/moon.php"] [unique_id "apK-TWjCPtor9NZ-byTtUwAABrY"]
[Sat Aug 29 05:11:09.241948 2026] [security2:error] [pid 11274:tid 11526] [client 52.139.37.240:16763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/wp-header-json.php"] [unique_id "apK-TWbX5DA3XO6e_qQu3wAAAVs"]
[Sat Aug 29 05:11:09.242944 2026] [security2:error] [pid 11274:tid 11544] [client 20.104.18.15:15044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/blacks.php"] [unique_id "apK-TWbX5DA3XO6e_qQu4AAAAWw"]
[Sat Aug 29 05:11:09.252938 2026] [security2:error] [pid 1321:tid 1494] [client 158.23.147.79:39326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/dropdown.php"] [unique_id "apK-TWjCPtor9NZ-byTtVQAABkI"]
[Sat Aug 29 05:11:09.280847 2026] [security2:error] [pid 11274:tid 11572] [client 20.104.18.15:43965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/wp-aothait.php"] [unique_id "apK-TWbX5DA3XO6e_qQu4QAAAYg"]
[Sat Aug 29 05:11:09.288928 2026] [core:error] [pid 11274:tid 11543] [client 20.100.175.163:4450] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:09.288947 2026] [core:error] [pid 11274:tid 11543] [client 20.100.175.163:4450] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:09.294798 2026] [security2:error] [pid 11274:tid 11549] [client 62.60.130.128:57115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.130.60.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "seemystores.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "apK-TWbX5DA3XO6e_qQu4wAAAXE"]
[Sat Aug 29 05:11:09.297023 2026] [security2:error] [pid 1321:tid 1596] [client 52.139.37.240:36855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/admin/index.php"] [unique_id "apK-TWjCPtor9NZ-byTtVgAABqc"]
[Sat Aug 29 05:11:09.302219 2026] [security2:error] [pid 11274:tid 11571] [client 158.23.147.79:24497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-content/banners/about.php"] [unique_id "apK-TWbX5DA3XO6e_qQu5AAAAYc"]
[Sat Aug 29 05:11:09.305797 2026] [security2:error] [pid 1321:tid 1535] [client 20.100.175.163:33691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK-TWjCPtor9NZ-byTtWAAABms"]
[Sat Aug 29 05:11:09.307467 2026] [security2:error] [pid 11274:tid 11525] [client 158.158.54.35:21733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "apK-TWbX5DA3XO6e_qQu5QAAAVo"]
[Sat Aug 29 05:11:09.309283 2026] [cgid:error] [pid 1321:tid 1593] [client 158.23.184.117:60150] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/drinkyourtrees/404.shtml
[Sat Aug 29 05:11:09.313935 2026] [security2:error] [pid 11274:tid 11498] [client 158.158.54.35:30277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/a.php"] [unique_id "apK-TWbX5DA3XO6e_qQu5gAAAT8"]
[Sat Aug 29 05:11:09.321827 2026] [security2:error] [pid 11274:tid 11504] [client 4.205.62.107:62783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/thui.php"] [unique_id "apK-TWbX5DA3XO6e_qQu5wAAAUU"]
[Sat Aug 29 05:11:09.332738 2026] [security2:error] [pid 11274:tid 11475] [client 20.196.209.81:12144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/content.php"] [unique_id "apK-TWbX5DA3XO6e_qQu6AAAASk"]
[Sat Aug 29 05:11:09.336924 2026] [security2:error] [pid 1321:tid 1591] [client 4.205.62.107:51451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/wp-blog.php"] [unique_id "apK-TWjCPtor9NZ-byTtWQAABqI"]
[Sat Aug 29 05:11:09.339020 2026] [security2:error] [pid 1321:tid 1564] [client 45.148.10.62:59234] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "mail.zai.emf.mybluehost.me"] [uri "/wp-config.php.old"] [unique_id "apK-TWjCPtor9NZ-byTtWgAABoc"]
[Sat Aug 29 05:11:09.343207 2026] [security2:error] [pid 11274:tid 11489] [client 20.104.18.15:7101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/xmini4.php"] [unique_id "apK-TWbX5DA3XO6e_qQu6QAAATY"]
[Sat Aug 29 05:11:09.355851 2026] [security2:error] [pid 1321:tid 1589] [client 158.23.184.117:60150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK-TWjCPtor9NZ-byTtWwAABqA"]
[Sat Aug 29 05:11:09.358882 2026] [security2:error] [pid 1321:tid 1565] [client 20.48.250.41:42953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/Geforce.php"] [unique_id "apK-TWjCPtor9NZ-byTtXAAABog"]
[Sat Aug 29 05:11:09.361395 2026] [security2:error] [pid 1321:tid 1550] [client 158.23.147.79:55254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-admin/index.php"] [unique_id "apK-TWjCPtor9NZ-byTtXQAABnk"]
[Sat Aug 29 05:11:09.376253 2026] [security2:error] [pid 1321:tid 1556] [client 20.104.18.15:15131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/beck.php"] [unique_id "apK-TWjCPtor9NZ-byTtXgAABn8"]
[Sat Aug 29 05:11:09.384721 2026] [security2:error] [pid 11274:tid 11533] [client 20.52.41.200:2871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/tool.php"] [unique_id "apK-TWbX5DA3XO6e_qQu6gAAAWI"]
[Sat Aug 29 05:11:09.394854 2026] [security2:error] [pid 1321:tid 1603] [client 20.104.18.15:22370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/xmini4.php"] [unique_id "apK-TWjCPtor9NZ-byTtXwAABq4"]
[Sat Aug 29 05:11:09.398126 2026] [security2:error] [pid 11274:tid 11496] [client 68.155.159.216:6043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-content/packed.php"] [unique_id "apK-TWbX5DA3XO6e_qQu6wAAAT0"]
[Sat Aug 29 05:11:09.408672 2026] [security2:error] [pid 1321:tid 1496] [client 20.104.18.15:43808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/wp-includes/index.php"] [unique_id "apK-TWjCPtor9NZ-byTtYAAABkQ"]
[Sat Aug 29 05:11:09.413711 2026] [security2:error] [pid 1321:tid 1597] [client 68.155.159.216:30649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/packed.php"] [unique_id "apK-TWjCPtor9NZ-byTtYQAABqg"]
[Sat Aug 29 05:11:09.428866 2026] [security2:error] [pid 11274:tid 11482] [client 68.155.159.216:38556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/worksec.php"] [unique_id "apK-TWbX5DA3XO6e_qQu7AAAAS8"]
[Sat Aug 29 05:11:09.436726 2026] [security2:error] [pid 1321:tid 1498] [client 52.139.37.240:16463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/zup.php"] [unique_id "apK-TWjCPtor9NZ-byTtYgAABkY"]
[Sat Aug 29 05:11:09.454837 2026] [security2:error] [pid 1321:tid 1523] [client 20.48.160.90:37331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/w.php"] [unique_id "apK-TWjCPtor9NZ-byTtYwAABl8"]
[Sat Aug 29 05:11:09.471878 2026] [security2:error] [pid 1321:tid 1499] [client 20.104.18.15:6974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/gulu.php"] [unique_id "apK-TWjCPtor9NZ-byTtZAAABkc"]
[Sat Aug 29 05:11:09.492235 2026] [security2:error] [pid 11274:tid 11444] [client 52.139.37.240:36683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/makeasmtp.php"] [unique_id "apK-TWbX5DA3XO6e_qQu7gAAAQo"]
[Sat Aug 29 05:11:09.500316 2026] [security2:error] [pid 1321:tid 1600] [client 20.48.160.90:51884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/wp-admin/w.php"] [unique_id "apK-TWjCPtor9NZ-byTtaAAABqs"]
[Sat Aug 29 05:11:09.501501 2026] [security2:error] [pid 1321:tid 1568] [client 158.23.184.117:39880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/xda.php"] [unique_id "apK-TWjCPtor9NZ-byTtaQAABos"]
[Sat Aug 29 05:11:09.529323 2026] [security2:error] [pid 1321:tid 1598] [client 68.155.159.216:33630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK-TWjCPtor9NZ-byTtbQAABqk"]
[Sat Aug 29 05:11:09.534624 2026] [security2:error] [pid 11274:tid 11563] [client 20.48.250.41:49550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/click.php"] [unique_id "apK-TWbX5DA3XO6e_qQu8AAAAX8"]
[Sat Aug 29 05:11:09.555251 2026] [security2:error] [pid 1321:tid 1531] [client 20.63.219.114:19951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/theme.php"] [unique_id "apK-TWjCPtor9NZ-byTtbgAABmc"]
[Sat Aug 29 05:11:09.568051 2026] [security2:error] [pid 1321:tid 1586] [client 20.240.128.207:23286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/ahax.php"] [unique_id "apK-TWjCPtor9NZ-byTtbwAABp0"]
[Sat Aug 29 05:11:09.571485 2026] [security2:error] [pid 1321:tid 1517] [client 20.104.18.15:15234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/t3.php"] [unique_id "apK-TWjCPtor9NZ-byTtcQAABlk"]
[Sat Aug 29 05:11:09.579813 2026] [security2:error] [pid 1321:tid 1532] [client 20.104.18.15:43296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/file31.php"] [unique_id "apK-TWjCPtor9NZ-byTtcwAABmg"]
[Sat Aug 29 05:11:09.602119 2026] [security2:error] [pid 11274:tid 11477] [client 20.104.18.15:22349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/gulu.php"] [unique_id "apK-TWbX5DA3XO6e_qQu8wAAASs"]
[Sat Aug 29 05:11:09.603678 2026] [security2:error] [pid 11274:tid 11468] [client 4.205.62.107:64217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/log.php"] [unique_id "apK-TWbX5DA3XO6e_qQu9AAAASI"]
[Sat Aug 29 05:11:09.605211 2026] [security2:error] [pid 11274:tid 11454] [client 4.205.62.107:60323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/session.php"] [unique_id "apK-TWbX5DA3XO6e_qQu9QAAARQ"]
[Sat Aug 29 05:11:09.606451 2026] [security2:error] [pid 1321:tid 1505] [client 20.48.250.41:64883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/amp.php"] [unique_id "apK-TWjCPtor9NZ-byTtdAAABk0"]
[Sat Aug 29 05:11:09.607053 2026] [security2:error] [pid 11274:tid 11546] [client 195.178.110.247:24034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mamiawamura.com"] [uri "/index.php"] [unique_id "apK-TWbX5DA3XO6e_qQu9gAAAW4"]
[Sat Aug 29 05:11:09.613815 2026] [security2:error] [pid 11274:tid 11503] [client 20.104.18.15:7093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/replace.php"] [unique_id "apK-TWbX5DA3XO6e_qQu9wAAAUQ"]
[Sat Aug 29 05:11:09.629256 2026] [security2:error] [pid 11274:tid 11508] [client 20.48.160.90:63265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/x.php"] [unique_id "apK-TWbX5DA3XO6e_qQu-AAAAUk"]
[Sat Aug 29 05:11:09.642488 2026] [security2:error] [pid 1321:tid 1495] [client 52.139.37.240:16477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/a9.php"] [unique_id "apK-TWjCPtor9NZ-byTtdQAABkM"]
[Sat Aug 29 05:11:09.648847 2026] [security2:error] [pid 11274:tid 11471] [client 158.23.184.117:39915] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/1.php"] [unique_id "apK-TWbX5DA3XO6e_qQu-QAAASU"]
[Sat Aug 29 05:11:09.648928 2026] [security2:error] [pid 11274:tid 11471] [client 158.23.184.117:39915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/1.php"] [unique_id "apK-TWbX5DA3XO6e_qQu-QAAASU"]
[Sat Aug 29 05:11:09.648936 2026] [security2:error] [pid 1321:tid 1567] [client 68.155.159.216:14156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-admin/index.php"] [unique_id "apK-TWjCPtor9NZ-byTtdgAABoo"]
[Sat Aug 29 05:11:09.656760 2026] [security2:error] [pid 1321:tid 1614] [client 20.151.200.44:63708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/kcs.php"] [unique_id "apK-TWjCPtor9NZ-byTtdwAABrk"]
[Sat Aug 29 05:11:09.663421 2026] [security2:error] [pid 11274:tid 11485] [client 20.48.250.41:49597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/ms.php"] [unique_id "apK-TWbX5DA3XO6e_qQu-gAAATI"]
[Sat Aug 29 05:11:09.685700 2026] [security2:error] [pid 11274:tid 11560] [client 52.139.37.240:36853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/paku.php"] [unique_id "apK-TWbX5DA3XO6e_qQu_AAAAXw"]
[Sat Aug 29 05:11:09.715591 2026] [security2:error] [pid 1321:tid 1525] [client 20.104.18.15:43829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/dk.php"] [unique_id "apK-TWjCPtor9NZ-byTteAAABmE"]
[Sat Aug 29 05:11:09.732405 2026] [security2:error] [pid 1321:tid 1602] [client 158.158.54.35:8476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/s.php"] [unique_id "apK-TWjCPtor9NZ-byTteQAABq0"]
[Sat Aug 29 05:11:09.734290 2026] [security2:error] [pid 11274:tid 11463] [client 20.196.209.81:15360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/wxo.php"] [unique_id "apK-TWbX5DA3XO6e_qQu_QAAAR0"]
[Sat Aug 29 05:11:09.739559 2026] [security2:error] [pid 1321:tid 1501] [client 158.23.184.117:7361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/update/da222.php"] [unique_id "apK-TWjCPtor9NZ-byTtegAABkk"]
[Sat Aug 29 05:11:09.739594 2026] [security2:error] [pid 11274:tid 11545] [client 20.104.18.15:22463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/replace.php"] [unique_id "apK-TWbX5DA3XO6e_qQu_gAAAW0"]
[Sat Aug 29 05:11:09.740144 2026] [security2:error] [pid 1321:tid 1537] [client 158.158.54.35:31113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "apK-TWjCPtor9NZ-byTtewAABm0"]
[Sat Aug 29 05:11:09.757266 2026] [security2:error] [pid 1321:tid 1522] [client 20.104.18.15:15059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/wp.php"] [unique_id "apK-TWjCPtor9NZ-byTtfAAABl4"]
[Sat Aug 29 05:11:09.776914 2026] [security2:error] [pid 11274:tid 11553] [client 20.104.18.15:7098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/c4.php"] [unique_id "apK-TWbX5DA3XO6e_qQu_wAAAXU"]
[Sat Aug 29 05:11:09.777862 2026] [security2:error] [pid 11274:tid 11491] [client 91.92.42.30:46058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "s212.net"] [uri "/wp-config.php"] [unique_id "apK-TWbX5DA3XO6e_qQvAAAAATg"]
[Sat Aug 29 05:11:09.779620 2026] [security2:error] [pid 1321:tid 1538] [client 195.178.110.247:20720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mamiawamura.com"] [uri "/index.php"] [unique_id "apK-TWjCPtor9NZ-byTtfQAABm4"]
[Sat Aug 29 05:11:09.781907 2026] [security2:error] [pid 1321:tid 1615] [client 20.100.175.163:4425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/222.php"] [unique_id "apK-TWjCPtor9NZ-byTtfgAABro"]
[Sat Aug 29 05:11:09.793268 2026] [security2:error] [pid 11274:tid 11536] [client 158.23.184.117:39634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK-TWbX5DA3XO6e_qQvAQAAAWU"]
[Sat Aug 29 05:11:09.793770 2026] [security2:error] [pid 1321:tid 1543] [client 20.48.250.41:49581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/zxekqlxb.php"] [unique_id "apK-TWjCPtor9NZ-byTtfwAABnM"]
[Sat Aug 29 05:11:09.794195 2026] [security2:error] [pid 1321:tid 1513] [client 158.158.54.35:23007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/u.php"] [unique_id "apK-TWjCPtor9NZ-byTtgAAABlU"]
[Sat Aug 29 05:11:09.799939 2026] [security2:error] [pid 11274:tid 11570] [client 60.243.207.176:63712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK-TWbX5DA3XO6e_qQvAgAAAYY"]
[Sat Aug 29 05:11:09.800036 2026] [security2:error] [pid 11274:tid 11570] [client 60.243.207.176:63712] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK-TWbX5DA3XO6e_qQvAgAAAYY"]
[Sat Aug 29 05:11:09.801272 2026] [security2:error] [pid 1321:tid 1562] [client 68.155.159.216:23471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-admin.php"] [unique_id "apK-TWjCPtor9NZ-byTtgQAABoU"]
[Sat Aug 29 05:11:09.807957 2026] [security2:error] [pid 11274:tid 11512] [client 68.155.159.216:1882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK-TWbX5DA3XO6e_qQvAwAAAU0"]
[Sat Aug 29 05:11:09.811285 2026] [security2:error] [pid 11274:tid 11467] [client 158.23.147.79:59497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/about.php"] [unique_id "apK-TWbX5DA3XO6e_qQvBAAAASE"]
[Sat Aug 29 05:11:09.824516 2026] [security2:error] [pid 1321:tid 1528] [client 20.100.175.163:7762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/bthil.php"] [unique_id "apK-TWjCPtor9NZ-byTtggAABmQ"]
[Sat Aug 29 05:11:09.839677 2026] [security2:error] [pid 11274:tid 11500] [client 52.139.37.240:16733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/admin/index.php"] [unique_id "apK-TWbX5DA3XO6e_qQvBQAAAUE"]
[Sat Aug 29 05:11:09.842491 2026] [security2:error] [pid 1321:tid 1576] [client 20.52.41.200:2773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/k.php"] [unique_id "apK-TWjCPtor9NZ-byTtgwAABpM"]
[Sat Aug 29 05:11:09.842735 2026] [security2:error] [pid 1321:tid 1552] [client 20.48.160.90:64235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/ssla.php"] [unique_id "apK-TWjCPtor9NZ-byTthAAABns"]
[Sat Aug 29 05:11:09.856012 2026] [security2:error] [pid 11274:tid 11539] [client 20.48.160.90:43627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/wp-content/k.php"] [unique_id "apK-TWbX5DA3XO6e_qQvBgAAAWg"]
[Sat Aug 29 05:11:09.870445 2026] [security2:error] [pid 1321:tid 1573] [client 20.104.18.15:43868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/ta.php"] [unique_id "apK-TWjCPtor9NZ-byTthgAABpA"]
[Sat Aug 29 05:11:09.882326 2026] [security2:error] [pid 1321:tid 1545] [client 20.104.18.15:22378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/c4.php"] [unique_id "apK-TWjCPtor9NZ-byTthwAABnU"]
[Sat Aug 29 05:11:09.882436 2026] [security2:error] [pid 1321:tid 1524] [client 52.139.37.240:35898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/rtx.php"] [unique_id "apK-TWjCPtor9NZ-byTtiAAABmA"]
[Sat Aug 29 05:11:09.890122 2026] [security2:error] [pid 1321:tid 1544] [client 158.23.184.117:7566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/xmr.php"] [unique_id "apK-TWjCPtor9NZ-byTtiQAABnQ"]
[Sat Aug 29 05:11:09.895337 2026] [security2:error] [pid 1321:tid 1494] [client 4.205.62.107:60499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/myfile.php"] [unique_id "apK-TWjCPtor9NZ-byTtiwAABkI"]
[Sat Aug 29 05:11:09.916367 2026] [security2:error] [pid 11274:tid 11515] [client 20.63.219.114:19956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/alumni_reg.php"] [unique_id "apK-TWbX5DA3XO6e_qQvBwAAAVA"]
[Sat Aug 29 05:11:09.918563 2026] [security2:error] [pid 1321:tid 1542] [client 20.104.18.15:15165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/abcd.php"] [unique_id "apK-TWjCPtor9NZ-byTtjAAABnI"]
[Sat Aug 29 05:11:09.928610 2026] [security2:error] [pid 1321:tid 1509] [client 20.48.250.41:49661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/init.php"] [unique_id "apK-TWjCPtor9NZ-byTtjQAABlE"]
[Sat Aug 29 05:11:09.934351 2026] [security2:error] [pid 11274:tid 11465] [client 45.148.10.62:59248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zai.emf.mybluehost.me"] [uri "/config.php"] [unique_id "apK-TWbX5DA3XO6e_qQvCAAAAR8"]
[Sat Aug 29 05:11:09.941921 2026] [security2:error] [pid 1321:tid 1533] [client 20.104.18.15:7080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/rxr.php"] [unique_id "apK-TWjCPtor9NZ-byTtjwAABmk"]
[Sat Aug 29 05:11:09.944632 2026] [cgid:error] [pid 1321:tid 1492] [client 158.23.184.117:39898] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/drinkyourtrees/404.shtml
[Sat Aug 29 05:11:09.945399 2026] [security2:error] [pid 1321:tid 1520] [client 20.48.250.41:64828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/cc13.php"] [unique_id "apK-TWjCPtor9NZ-byTtkAAABlw"]
[Sat Aug 29 05:11:09.966948 2026] [security2:error] [pid 11274:tid 11516] [client 4.205.62.107:6806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/333.php"] [unique_id "apK-TWbX5DA3XO6e_qQvCQAAAVE"]
[Sat Aug 29 05:11:09.992186 2026] [security2:error] [pid 1321:tid 1556] [client 158.23.184.117:39898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/wp-includes/admin.php"] [unique_id "apK-TWjCPtor9NZ-byTtkgAABn8"]
[Sat Aug 29 05:11:09.997529 2026] [security2:error] [pid 1321:tid 1555] [client 52.139.37.240:7402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.advancedbehaviorsolutions.com"] [uri "/aged.php"] [unique_id "apK-TWjCPtor9NZ-byTtkwAABn4"]
[Sat Aug 29 05:11:10.005843 2026] [security2:error] [pid 1321:tid 1597] [client 20.104.18.15:43966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/bo.php"] [unique_id "apK-TmjCPtor9NZ-byTtlAAABqg"]
[Sat Aug 29 05:11:10.024137 2026] [security2:error] [pid 11274:tid 11498] [client 20.104.18.15:22348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/rxr.php"] [unique_id "apK-TmbX5DA3XO6e_qQvDQAAAT8"]
[Sat Aug 29 05:11:10.043636 2026] [security2:error] [pid 11274:tid 11480] [client 52.139.37.240:16469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/makeasmtp.php"] [unique_id "apK-TmbX5DA3XO6e_qQvDgAAAS0"]
[Sat Aug 29 05:11:10.054516 2026] [security2:error] [pid 11274:tid 11511] [client 158.23.184.117:7401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK-TmbX5DA3XO6e_qQvDwAAAUw"]
[Sat Aug 29 05:11:10.068232 2026] [security2:error] [pid 1321:tid 1595] [client 20.240.128.207:18637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/shell.php"] [unique_id "apK-TmjCPtor9NZ-byTtlQAABqY"]
[Sat Aug 29 05:11:10.077663 2026] [security2:error] [pid 1321:tid 1529] [client 52.139.37.240:36727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/update/da222.php"] [unique_id "apK-TmjCPtor9NZ-byTtlgAABmU"]
[Sat Aug 29 05:11:10.077787 2026] [security2:error] [pid 11274:tid 11484] [client 20.48.250.41:49593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/term.php"] [unique_id "apK-TmbX5DA3XO6e_qQvEAAAATE"]
[Sat Aug 29 05:11:10.078188 2026] [security2:error] [pid 11274:tid 11445] [client 20.104.18.15:15224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/nofile.php"] [unique_id "apK-TmbX5DA3XO6e_qQvEQAAAQs"]
[Sat Aug 29 05:11:10.081713 2026] [security2:error] [pid 11274:tid 11532] [client 34.169.171.101:57608] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.forensicengineernj.com"] [uri "/@fs/src/.env"] [unique_id "apK-TmbX5DA3XO6e_qQvEwAAAWE"]
[Sat Aug 29 05:11:10.082093 2026] [security2:error] [pid 1321:tid 1598] [client 20.104.18.15:7167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "just-gov.scottewen.org"] [uri "/reviall.php"] [unique_id "apK-TmjCPtor9NZ-byTtlwAABqk"]
[Sat Aug 29 05:11:10.083464 2026] [security2:error] [pid 11274:tid 11517] [client 34.169.171.101:57618] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "mail.forensicengineernj.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK-TmbX5DA3XO6e_qQvFAAAAVI"]
[Sat Aug 29 05:11:10.083836 2026] [security2:error] [pid 1321:tid 1549] [client 34.169.171.101:57594] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/@fs/.env"] [unique_id "apK-TmjCPtor9NZ-byTtmQAABng"]
[Sat Aug 29 05:11:10.084531 2026] [security2:error] [pid 11274:tid 11519] [client 34.169.171.101:57634] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2froot/.env"] [unique_id "apK-TmbX5DA3XO6e_qQvFQAAAVQ"]
[Sat Aug 29 05:11:10.084602 2026] [security2:error] [pid 11274:tid 11533] [client 34.169.171.101:57598] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/@fs/root/.env"] [unique_id "apK-TmbX5DA3XO6e_qQvFgAAAWI"]
[Sat Aug 29 05:11:10.085120 2026] [security2:error] [pid 11274:tid 11496] [client 34.169.171.101:57602] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/@fs/app/.env"] [unique_id "apK-TmbX5DA3XO6e_qQvFwAAAT0"]
[Sat Aug 29 05:11:10.085181 2026] [core:error] [pid 1321:tid 1527] [client 34.169.171.101:57662] AH10244: invalid URI path (/@fs/../../.env?raw??)
[Sat Aug 29 05:11:10.085735 2026] [security2:error] [pid 1321:tid 1504] [client 34.169.171.101:57684] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.forensicengineernj.com"] [uri "/@fs/app/rootkey.csv"] [unique_id "apK-TmjCPtor9NZ-byTtnQAABkw"]
[Sat Aug 29 05:11:10.088115 2026] [security2:error] [pid 11274:tid 11558] [client 34.169.171.101:57638] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "mail.forensicengineernj.com"] [uri "/@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ"] [unique_id "apK-TmbX5DA3XO6e_qQvGwAAAXo"]
[Sat Aug 29 05:11:10.090590 2026] [security2:error] [pid 11274:tid 11556] [client 34.169.171.101:57640] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/.env"] [unique_id "apK-TmbX5DA3XO6e_qQvHAAAAXg"]
[Sat Aug 29 05:11:10.091878 2026] [security2:error] [pid 11274:tid 11547] [client 34.169.171.101:57760] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/@fs/root/.aws/credentials.bak"] [unique_id "apK-TmbX5DA3XO6e_qQvHQAAAW8"]
[Sat Aug 29 05:11:10.091893 2026] [security2:error] [pid 11274:tid 11541] [client 34.169.171.101:57646] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2fapp/.env"] [unique_id "apK-TmbX5DA3XO6e_qQvHwAAAWo"]
[Sat Aug 29 05:11:10.092212 2026] [security2:error] [pid 11274:tid 11513] [client 34.169.171.101:57750] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/@fs/root/.aws/credentials.backup"] [unique_id "apK-TmbX5DA3XO6e_qQvHgAAAU4"]
[Sat Aug 29 05:11:10.112268 2026] [security2:error] [pid 11274:tid 11501] [client 34.169.171.101:57818] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "mail.forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-TmbX5DA3XO6e_qQvJwAAAUI"]
[Sat Aug 29 05:11:10.135404 2026] [security2:error] [pid 11274:tid 11444] [client 158.23.184.117:60155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/wp-themes.php"] [unique_id "apK-TmbX5DA3XO6e_qQvLQAAAQo"]
[Sat Aug 29 05:11:10.142667 2026] [security2:error] [pid 11274:tid 11468] [client 20.48.250.41:64884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/aa.php"] [unique_id "apK-TmbX5DA3XO6e_qQvLwAAASI"]
[Sat Aug 29 05:11:10.142995 2026] [security2:error] [pid 11274:tid 11455] [client 20.48.160.90:62186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "apK-TmbX5DA3XO6e_qQvMAAAARU"]
[Sat Aug 29 05:11:10.143959 2026] [security2:error] [pid 11274:tid 11525] [client 20.196.209.81:16197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/as.php"] [unique_id "apK-TmbX5DA3XO6e_qQvMQAAAVo"]
[Sat Aug 29 05:11:10.164324 2026] [security2:error] [pid 11274:tid 11569] [client 20.104.18.15:43954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/44.php"] [unique_id "apK-TmbX5DA3XO6e_qQvNAAAAYU"]
[Sat Aug 29 05:11:10.170840 2026] [security2:error] [pid 11274:tid 11485] [client 20.104.18.15:22524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.nranch.com"] [uri "/reviall.php"] [unique_id "apK-TmbX5DA3XO6e_qQvNgAAATI"]
[Sat Aug 29 05:11:10.171393 2026] [security2:error] [pid 1321:tid 1539] [client 158.158.54.35:1987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/gifclass.php"] [unique_id "apK-TmjCPtor9NZ-byTtpwAABm8"]
[Sat Aug 29 05:11:10.190952 2026] [security2:error] [pid 11274:tid 11518] [client 158.158.54.35:17688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/test1.php"] [unique_id "apK-TmbX5DA3XO6e_qQvOAAAAVM"]
[Sat Aug 29 05:11:10.192954 2026] [security2:error] [pid 11274:tid 11568] [client 52.139.37.240:8011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.advancedbehaviorsolutions.com"] [uri "/essexec.php"] [unique_id "apK-TmbX5DA3XO6e_qQvOQAAAYQ"]
[Sat Aug 29 05:11:10.197647 2026] [security2:error] [pid 11274:tid 11508] [client 158.23.184.117:7482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/wp-act.php"] [unique_id "apK-TmbX5DA3XO6e_qQvOwAAAUk"]
[Sat Aug 29 05:11:10.210072 2026] [security2:error] [pid 11274:tid 11463] [client 20.48.250.41:49603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/aaa.php"] [unique_id "apK-TmbX5DA3XO6e_qQvPgAAAR0"]
[Sat Aug 29 05:11:10.218094 2026] [security2:error] [pid 11274:tid 11473] [client 34.169.171.101:57788] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-TmbX5DA3XO6e_qQvQAAAASc"], referer: https://mail.forensicengineernj.com/@fs/home/admin/.aws/credentials?raw??
[Sat Aug 29 05:11:10.227273 2026] [security2:error] [pid 11274:tid 11505] [client 68.155.159.216:64000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/goat.php"] [unique_id "apK-TmbX5DA3XO6e_qQvQQAAAUY"]
[Sat Aug 29 05:11:10.242153 2026] [security2:error] [pid 1321:tid 1574] [client 52.139.37.240:56110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/paku.php"] [unique_id "apK-TmjCPtor9NZ-byTtrAAABpE"]
[Sat Aug 29 05:11:10.248755 2026] [security2:error] [pid 11274:tid 11520] [client 158.158.54.35:29106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/r.php"] [unique_id "apK-TmbX5DA3XO6e_qQvQgAAAVU"]
[Sat Aug 29 05:11:10.256649 2026] [security2:error] [pid 11274:tid 11529] [client 20.48.160.90:28076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/os.php"] [unique_id "apK-TmbX5DA3XO6e_qQvRAAAAV4"]
[Sat Aug 29 05:11:10.273039 2026] [security2:error] [pid 11274:tid 11564] [client 20.48.250.41:64833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/s1.php"] [unique_id "apK-TmbX5DA3XO6e_qQvRQAAAYA"]
[Sat Aug 29 05:11:10.279295 2026] [security2:error] [pid 1321:tid 1614] [client 158.23.184.117:39929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/adminfuns.php/.well-known/acme-challenge/file.php"] [unique_id "apK-TmjCPtor9NZ-byTtrgAABrk"]
[Sat Aug 29 05:11:10.279324 2026] [core:error] [pid 11274:tid 11512] [client 20.52.41.200:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:10.279335 2026] [core:error] [pid 11274:tid 11512] [client 20.52.41.200:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:10.293402 2026] [security2:error] [pid 11274:tid 11477] [client 20.52.41.200:2848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/root.php"] [unique_id "apK-TmbX5DA3XO6e_qQvSgAAASs"]
[Sat Aug 29 05:11:10.308620 2026] [security2:error] [pid 1321:tid 1512] [client 20.48.160.90:65345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/wp-aothait.php"] [unique_id "apK-TmjCPtor9NZ-byTtsQAABlQ"]
[Sat Aug 29 05:11:10.308652 2026] [security2:error] [pid 1321:tid 1610] [client 20.104.49.130:60943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/kgoc6awap3napxxxdCdefault.php"] [unique_id "apK-TmjCPtor9NZ-byTtsAAABrU"]
[Sat Aug 29 05:11:10.317272 2026] [security2:error] [pid 11274:tid 11571] [client 61.9.8.172:26722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK-TmbX5DA3XO6e_qQvTAAAAYc"]
[Sat Aug 29 05:11:10.317374 2026] [security2:error] [pid 11274:tid 11571] [client 61.9.8.172:26722] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK-TmbX5DA3XO6e_qQvTAAAAYc"]
[Sat Aug 29 05:11:10.326789 2026] [security2:error] [pid 1321:tid 1495] [client 20.63.219.114:19180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/colors.php"] [unique_id "apK-TmjCPtor9NZ-byTtsgAABkM"]
[Sat Aug 29 05:11:10.344734 2026] [security2:error] [pid 1321:tid 1489] [client 158.23.184.117:7894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/fff.php"] [unique_id "apK-TmjCPtor9NZ-byTtswAABj0"]
[Sat Aug 29 05:11:10.351198 2026] [security2:error] [pid 11274:tid 11465] [client 52.139.37.240:36829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/wp-admin/min.php"] [unique_id "apK-TmbX5DA3XO6e_qQvTwAAAR8"]
[Sat Aug 29 05:11:10.362525 2026] [security2:error] [pid 11274:tid 11523] [client 158.23.147.79:39161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/.well-known/index.php"] [unique_id "apK-TmbX5DA3XO6e_qQvUAAAAVg"]
[Sat Aug 29 05:11:10.376181 2026] [security2:error] [pid 11274:tid 11514] [client 202.71.25.11:63347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.25.71.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK-TmbX5DA3XO6e_qQvUQAAAU8"]
[Sat Aug 29 05:11:10.376280 2026] [security2:error] [pid 11274:tid 11514] [client 202.71.25.11:63347] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK-TmbX5DA3XO6e_qQvUQAAAU8"]
[Sat Aug 29 05:11:10.390042 2026] [security2:error] [pid 11274:tid 11543] [client 52.139.37.240:60895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.advancedbehaviorsolutions.com"] [uri "/fw.php"] [unique_id "apK-TmbX5DA3XO6e_qQvUgAAAWs"]
[Sat Aug 29 05:11:10.394230 2026] [security2:error] [pid 11274:tid 11509] [client 20.48.250.41:42950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/xsox.php"] [unique_id "apK-TmbX5DA3XO6e_qQvUwAAAUo"]
[Sat Aug 29 05:11:10.402441 2026] [security2:error] [pid 11274:tid 11489] [client 20.48.160.90:28044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/htio.php"] [unique_id "apK-TmbX5DA3XO6e_qQvVAAAATY"]
[Sat Aug 29 05:11:10.408138 2026] [security2:error] [pid 1321:tid 1537] [client 158.23.147.79:24508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK-TmjCPtor9NZ-byTttQAABm0"]
[Sat Aug 29 05:11:10.428447 2026] [cgid:error] [pid 11274:tid 11516] [client 158.23.184.117:39887] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/drinkyourtrees/404.shtml
[Sat Aug 29 05:11:10.446199 2026] [security2:error] [pid 11274:tid 11500] [client 20.100.175.163:4251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/x.php"] [unique_id "apK-TmbX5DA3XO6e_qQvVgAAAUE"]
[Sat Aug 29 05:11:10.451035 2026] [security2:error] [pid 1321:tid 1541] [client 20.48.250.41:62411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/0byte.php"] [unique_id "apK-TmjCPtor9NZ-byTttgAABnE"]
[Sat Aug 29 05:11:10.452229 2026] [security2:error] [pid 1321:tid 1612] [client 52.139.37.240:16710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/rtx.php"] [unique_id "apK-TmjCPtor9NZ-byTttwAABrc"]
[Sat Aug 29 05:11:10.460793 2026] [security2:error] [pid 11274:tid 11519] [client 4.205.62.107:60329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/lala.php"] [unique_id "apK-TmbX5DA3XO6e_qQvVwAAAVQ"]
[Sat Aug 29 05:11:10.474382 2026] [proxy_http:error] [pid 1017536:tid 1017676] (70007)The timeout specified has expired: [client 127.0.0.1:33084] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:11:10.474401 2026] [proxy:error] [pid 1017536:tid 1017676] [client 127.0.0.1:33084] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:11:10.475041 2026] [security2:error] [pid 11274:tid 11448] [client 158.23.184.117:39887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "apK-TmbX5DA3XO6e_qQvWwAAAQ4"]
[Sat Aug 29 05:11:10.485982 2026] [security2:error] [pid 11274:tid 11541] [client 158.23.147.79:55930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-content/themes/index.php"] [unique_id "apK-TmbX5DA3XO6e_qQvXAAAAWo"]
[Sat Aug 29 05:11:10.489754 2026] [security2:error] [pid 11274:tid 11445] [client 158.23.184.117:7412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/.tmb/dropdown.php"] [unique_id "apK-TmbX5DA3XO6e_qQvXQAAAQs"]
[Sat Aug 29 05:11:10.502301 2026] [security2:error] [pid 11274:tid 11451] [client 4.205.62.107:4974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/update.php"] [unique_id "apK-TmbX5DA3XO6e_qQvXgAAARE"]
[Sat Aug 29 05:11:10.505945 2026] [security2:error] [pid 1321:tid 1562] [client 20.48.160.90:64218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/wp-includes/index.php"] [unique_id "apK-TmjCPtor9NZ-byTtuAAABoU"]
[Sat Aug 29 05:11:10.511474 2026] [security2:error] [pid 11274:tid 11464] [client 20.104.49.130:57477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.termoenvases.do"] [uri "/edit.php"] [unique_id "apK-TmbX5DA3XO6e_qQvYQAAAR4"]
[Sat Aug 29 05:11:10.520516 2026] [security2:error] [pid 1321:tid 1507] [client 68.155.159.216:30535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-content/packed.php"] [unique_id "apK-TmjCPtor9NZ-byTtuQAABk8"]
[Sat Aug 29 05:11:10.529833 2026] [security2:error] [pid 11274:tid 11563] [client 20.48.250.41:49625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/lkui.php"] [unique_id "apK-TmbX5DA3XO6e_qQvYgAAAX8"]
[Sat Aug 29 05:11:10.532056 2026] [security2:error] [pid 1321:tid 1552] [client 20.100.175.163:27024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/cv.php"] [unique_id "apK-TmjCPtor9NZ-byTtugAABns"]
[Sat Aug 29 05:11:10.534384 2026] [proxy_http:error] [pid 1017536:tid 1017697] (70007)The timeout specified has expired: [client 127.0.0.1:10310] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:11:10.534401 2026] [proxy:error] [pid 1017536:tid 1017697] [client 127.0.0.1:10310] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:11:10.534969 2026] [security2:error] [pid 1321:tid 1521] [client 68.155.159.216:38661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/x.php"] [unique_id "apK-TmjCPtor9NZ-byTtuwAABl0"]
[Sat Aug 29 05:11:10.538373 2026] [proxy_http:error] [pid 1017536:tid 1017701] (70007)The timeout specified has expired: [client 127.0.0.1:10318] AH01102: error reading status line from remote server 50.6.92.44:8443, referer: https://guraonline.com/shop/?orderby=price-desc&product_brand=aco,ldb,possess,la-roche-posay,scope,versace,cerave,locobase
[Sat Aug 29 05:11:10.538389 2026] [proxy:error] [pid 1017536:tid 1017701] [client 127.0.0.1:10318] AH00898: Error reading from remote server returned by /502.shtml, referer: https://guraonline.com/shop/?orderby=price-desc&product_brand=aco,ldb,possess,la-roche-posay,scope,versace,cerave,locobase
[Sat Aug 29 05:11:10.554597 2026] [security2:error] [pid 11274:tid 11566] [client 68.155.159.216:6023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-l0gin.php"] [unique_id "apK-TmbX5DA3XO6e_qQvZQAAAYI"]
[Sat Aug 29 05:11:10.555033 2026] [security2:error] [pid 1321:tid 1510] [client 20.48.160.90:28071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/dev.php"] [unique_id "apK-TmjCPtor9NZ-byTtvQAABlI"]
[Sat Aug 29 05:11:10.555811 2026] [security2:error] [pid 11274:tid 11513] [client 52.139.37.240:36685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/wp-admin/wp-fileesx-449.php"] [unique_id "apK-TmbX5DA3XO6e_qQvZgAAAU4"]
[Sat Aug 29 05:11:10.577092 2026] [security2:error] [pid 1321:tid 1522] [client 20.196.209.81:12101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/room.php"] [unique_id "apK-TmjCPtor9NZ-byTtvgAABl4"]
[Sat Aug 29 05:11:10.578213 2026] [security2:error] [pid 11274:tid 11480] [client 20.240.128.207:7823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/elp.php"] [unique_id "apK-TmbX5DA3XO6e_qQvaQAAAS0"]
[Sat Aug 29 05:11:10.580462 2026] [security2:error] [pid 1321:tid 1528] [client 52.139.37.240:8044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.advancedbehaviorsolutions.com"] [uri "/zwso.php"] [unique_id "apK-TmjCPtor9NZ-byTtvwAABmQ"]
[Sat Aug 29 05:11:10.619264 2026] [security2:error] [pid 11274:tid 11565] [client 158.23.184.117:39916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "drinkyourtrees.wanderlustpictures.com"] [uri "/11.php"] [unique_id "apK-TmbX5DA3XO6e_qQvbAAAAYE"]
[Sat Aug 29 05:11:10.633647 2026] [security2:error] [pid 11274:tid 11546] [client 158.23.184.117:7891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/robots.php"] [unique_id "apK-TmbX5DA3XO6e_qQvbQAAAW4"]
[Sat Aug 29 05:11:10.635265 2026] [security2:error] [pid 11274:tid 11535] [client 68.155.159.216:33618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK-TmbX5DA3XO6e_qQvbgAAAWQ"]
[Sat Aug 29 05:11:10.639017 2026] [security2:error] [pid 11274:tid 11485] [client 91.92.42.30:55466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "s212.net"] [uri "/config.php"] [unique_id "apK-TmbX5DA3XO6e_qQvbwAAATI"]
[Sat Aug 29 05:11:10.646482 2026] [security2:error] [pid 1321:tid 1584] [client 68.155.159.216:38538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/asd.php"] [unique_id "apK-TmjCPtor9NZ-byTtwAAABps"]
[Sat Aug 29 05:11:10.658644 2026] [security2:error] [pid 11274:tid 11524] [client 20.48.250.41:49632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "apK-TmbX5DA3XO6e_qQvcQAAAVk"]
[Sat Aug 29 05:11:10.665775 2026] [security2:error] [pid 11274:tid 11525] [client 52.139.37.240:16903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/update/da222.php"] [unique_id "apK-TmbX5DA3XO6e_qQvcgAAAVo"]
[Sat Aug 29 05:11:10.684130 2026] [security2:error] [pid 11274:tid 11552] [client 158.158.54.35:14879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-blog.php"] [unique_id "apK-TmbX5DA3XO6e_qQvcwAAAXQ"]
[Sat Aug 29 05:11:10.684663 2026] [security2:error] [pid 11274:tid 11452] [client 20.63.219.114:16545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/Js.php"] [unique_id "apK-TmbX5DA3XO6e_qQvdAAAARI"]
[Sat Aug 29 05:11:10.689652 2026] [security2:error] [pid 1321:tid 1502] [client 158.158.54.35:30289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/ws.php"] [unique_id "apK-TmjCPtor9NZ-byTtwQAABko"]
[Sat Aug 29 05:11:10.700102 2026] [security2:error] [pid 11274:tid 11495] [client 20.48.160.90:51959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/gos.php"] [unique_id "apK-TmbX5DA3XO6e_qQvdQAAATw"]
[Sat Aug 29 05:11:10.706871 2026] [security2:error] [pid 11274:tid 11549] [client 197.232.63.170:59265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 170.63.232.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK-TmbX5DA3XO6e_qQvdgAAAXE"]
[Sat Aug 29 05:11:10.706951 2026] [security2:error] [pid 11274:tid 11549] [client 197.232.63.170:59265] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK-TmbX5DA3XO6e_qQvdgAAAXE"]
[Sat Aug 29 05:11:10.717751 2026] [security2:error] [pid 11274:tid 11456] [client 68.155.159.216:64410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK-TmbX5DA3XO6e_qQvdwAAARY"]
[Sat Aug 29 05:11:10.741348 2026] [security2:error] [pid 1321:tid 1583] [client 4.205.62.107:65016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/ebahvhhh.php"] [unique_id "apK-TmjCPtor9NZ-byTtwwAABpo"]
[Sat Aug 29 05:11:10.743518 2026] [security2:error] [pid 1321:tid 1533] [client 4.205.62.107:60341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/h.php"] [unique_id "apK-TmjCPtor9NZ-byTtxAAABmk"]
[Sat Aug 29 05:11:10.747978 2026] [security2:error] [pid 11274:tid 11503] [client 20.52.41.200:2638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/p.php"] [unique_id "apK-TmbX5DA3XO6e_qQveAAAAUQ"]
[Sat Aug 29 05:11:10.749048 2026] [security2:error] [pid 11274:tid 11570] [client 68.155.159.216:14157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK-TmbX5DA3XO6e_qQveQAAAYY"]
[Sat Aug 29 05:11:10.749453 2026] [security2:error] [pid 11274:tid 11560] [client 52.139.37.240:35892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/wp-content/themes/min.php"] [unique_id "apK-TmbX5DA3XO6e_qQvegAAAXw"]
[Sat Aug 29 05:11:10.752659 2026] [security2:error] [pid 1321:tid 1596] [client 20.48.250.41:62436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/xr.php"] [unique_id "apK-TmjCPtor9NZ-byTtxQAABqc"]
[Sat Aug 29 05:11:10.767767 2026] [security2:error] [pid 11274:tid 11544] [client 158.158.54.35:1448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK-TmbX5DA3XO6e_qQvfAAAAWw"]
[Sat Aug 29 05:11:10.772171 2026] [security2:error] [pid 11274:tid 11487] [client 52.139.37.240:7416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.advancedbehaviorsolutions.com"] [uri "/admin/function.php"] [unique_id "apK-TmbX5DA3XO6e_qQvfQAAATQ"]
[Sat Aug 29 05:11:10.775640 2026] [security2:error] [pid 1321:tid 1593] [client 20.48.160.90:64135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/file31.php"] [unique_id "apK-TmjCPtor9NZ-byTtxwAABqQ"]
[Sat Aug 29 05:11:10.778486 2026] [security2:error] [pid 11274:tid 11468] [client 45.148.10.62:59260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zai.emf.mybluehost.me"] [uri "/config.php.bak"] [unique_id "apK-TmbX5DA3XO6e_qQvfgAAASI"]
[Sat Aug 29 05:11:10.791471 2026] [security2:error] [pid 11274:tid 11486] [client 20.48.250.41:49651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/motu.php"] [unique_id "apK-TmbX5DA3XO6e_qQvfwAAATM"]
[Sat Aug 29 05:11:10.801002 2026] [security2:error] [pid 1321:tid 1590] [client 158.23.184.117:7440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/.well-known/install.php"] [unique_id "apK-TmjCPtor9NZ-byTtyAAABqE"]
[Sat Aug 29 05:11:10.894195 2026] [security2:error] [pid 11274:tid 11474] [client 20.48.160.90:28091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/132.php"] [unique_id "apK-TmbX5DA3XO6e_qQvgQAAASg"]
[Sat Aug 29 05:11:10.920216 2026] [security2:error] [pid 1321:tid 1526] [client 68.155.159.216:23454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK-TmjCPtor9NZ-byTtyQAABmI"]
[Sat Aug 29 05:11:10.922128 2026] [security2:error] [pid 1321:tid 1601] [client 68.155.159.216:1816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/classwithtostring.php"] [unique_id "apK-TmjCPtor9NZ-byTtygAABqw"]
[Sat Aug 29 05:11:10.931184 2026] [security2:error] [pid 11274:tid 11561] [client 20.151.200.44:65330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/ahy66.php"] [unique_id "apK-TmbX5DA3XO6e_qQvggAAAX0"]
[Sat Aug 29 05:11:10.934262 2026] [security2:error] [pid 11274:tid 11556] [client 52.139.37.240:56096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/wp-admin/min.php"] [unique_id "apK-TmbX5DA3XO6e_qQvgwAAAXg"]
[Sat Aug 29 05:11:10.935610 2026] [security2:error] [pid 11274:tid 11448] [client 20.48.250.41:49582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/Ov-Simple1.php"] [unique_id "apK-TmbX5DA3XO6e_qQvhAAAAQ4"]
[Sat Aug 29 05:11:10.941413 2026] [security2:error] [pid 1321:tid 1520] [client 20.100.175.163:20072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/new.php"] [unique_id "apK-TmjCPtor9NZ-byTtywAABlw"]
[Sat Aug 29 05:11:10.959091 2026] [security2:error] [pid 1321:tid 1579] [client 52.139.37.240:35870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/wp-content/themes/x/bypass.php"] [unique_id "apK-TmjCPtor9NZ-byTtzAAABpY"]
[Sat Aug 29 05:11:10.965526 2026] [security2:error] [pid 11274:tid 11532] [client 52.139.37.240:8030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.advancedbehaviorsolutions.com"] [uri "/zoom1.php"] [unique_id "apK-TmbX5DA3XO6e_qQvhgAAAWE"]
[Sat Aug 29 05:11:11.007260 2026] [security2:error] [pid 11274:tid 11563] [client 68.155.159.216:56789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK-T2bX5DA3XO6e_qQviAAAAX8"]
[Sat Aug 29 05:11:11.010842 2026] [security2:error] [pid 11274:tid 11493] [client 158.23.184.117:7370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/wp-admin/about.php"] [unique_id "apK-T2bX5DA3XO6e_qQviQAAATo"]
[Sat Aug 29 05:11:11.029102 2026] [security2:error] [pid 11274:tid 11504] [client 43.172.196.49:47406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.196.172.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewforum.php"] [unique_id "apK-T2bX5DA3XO6e_qQvigAAAUU"]
[Sat Aug 29 05:11:11.030942 2026] [security2:error] [pid 1321:tid 1597] [client 20.196.209.81:16216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/class-wp-cmd.php"] [unique_id "apK-T2jCPtor9NZ-byTtzgAABqg"]
[Sat Aug 29 05:11:11.036679 2026] [security2:error] [pid 11274:tid 11501] [client 20.48.250.41:62418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/h02ugyh.php"] [unique_id "apK-T2bX5DA3XO6e_qQviwAAAUI"]
[Sat Aug 29 05:11:11.039128 2026] [security2:error] [pid 11274:tid 11566] [client 4.205.62.107:61748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/lm15.php"] [unique_id "apK-T2bX5DA3XO6e_qQvjQAAAYI"]
[Sat Aug 29 05:11:11.047701 2026] [http2:warn] [pid 1018003:tid 1018214] [client 57.141.14.83:32086] h2_stream(1018003-136-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:11:11.072898 2026] [security2:error] [pid 1321:tid 1559] [client 20.100.175.163:13768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-content/packed.php"] [unique_id "apK-T2jCPtor9NZ-byTtzwAABoI"]
[Sat Aug 29 05:11:11.073391 2026] [security2:error] [pid 11274:tid 11547] [client 20.63.219.114:19194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/access.php"] [unique_id "apK-T2bX5DA3XO6e_qQvkAAAAW8"]
[Sat Aug 29 05:11:11.086710 2026] [security2:error] [pid 11274:tid 11496] [client 158.23.147.79:62674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK-T2bX5DA3XO6e_qQvkgAAAT0"]
[Sat Aug 29 05:11:11.092884 2026] [security2:error] [pid 1321:tid 1553] [client 138.199.19.170:46684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 170.19.199.138.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "autodiscover.fanlebrity.com"] [uri "/autodiscover/autodiscover.xml/xmlrpc.php"] [unique_id "apK-T2jCPtor9NZ-byTt0AAABnw"]
[Sat Aug 29 05:11:11.093576 2026] [security2:error] [pid 1321:tid 1561] [client 20.48.160.90:28113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/v22.php"] [unique_id "apK-T2jCPtor9NZ-byTt0QAABoQ"]
[Sat Aug 29 05:11:11.101169 2026] [security2:error] [pid 11274:tid 11558] [client 20.48.250.41:49543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/wp-blogs.php"] [unique_id "apK-T2bX5DA3XO6e_qQvlAAAAXo"]
[Sat Aug 29 05:11:11.105097 2026] [security2:error] [pid 11274:tid 11551] [client 4.205.62.107:6886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/G-in.php"] [unique_id "apK-T2bX5DA3XO6e_qQvlQAAAXM"]
[Sat Aug 29 05:11:11.113623 2026] [security2:error] [pid 1321:tid 1595] [client 20.240.128.207:11265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-content/cong.php"] [unique_id "apK-T2jCPtor9NZ-byTt0gAABqY"]
[Sat Aug 29 05:11:11.123745 2026] [security2:error] [pid 11274:tid 11445] [client 158.158.54.35:14862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/xxx.php"] [unique_id "apK-T2bX5DA3XO6e_qQvlwAAAQs"]
[Sat Aug 29 05:11:11.131349 2026] [security2:error] [pid 1321:tid 1600] [client 52.139.37.240:16738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/wp-admin/wp-fileesx-449.php"] [unique_id "apK-T2jCPtor9NZ-byTt1AAABqs"]
[Sat Aug 29 05:11:11.133195 2026] [security2:error] [pid 11274:tid 11508] [client 20.48.160.90:63248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/dk.php"] [unique_id "apK-T2bX5DA3XO6e_qQvmAAAAUk"]
[Sat Aug 29 05:11:11.142518 2026] [security2:error] [pid 1321:tid 1527] [client 158.158.54.35:23034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-themes.php"] [unique_id "apK-T2jCPtor9NZ-byTt1gAABmM"]
[Sat Aug 29 05:11:11.144994 2026] [proxy_http:error] [pid 1017536:tid 1017762] (70007)The timeout specified has expired: [client 127.0.0.1:10618] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:11:11.145021 2026] [proxy:error] [pid 1017536:tid 1017762] [client 127.0.0.1:10618] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:11:11.155722 2026] [security2:error] [pid 11274:tid 11554] [client 158.23.184.117:7907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/wp-content/backup.php"] [unique_id "apK-T2bX5DA3XO6e_qQvmwAAAXY"]
[Sat Aug 29 05:11:11.163162 2026] [security2:error] [pid 1321:tid 1506] [client 52.139.37.240:60911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.advancedbehaviorsolutions.com"] [uri "/about.php7"] [unique_id "apK-T2jCPtor9NZ-byTt2AAABk4"]
[Sat Aug 29 05:11:11.164395 2026] [proxy_http:error] [pid 1017536:tid 1017559] (70007)The timeout specified has expired: [remote 57.141.14.6:58642] AH01102: error reading status line from remote server 127.0.0.1:8443
[Sat Aug 29 05:11:11.164420 2026] [proxy:error] [pid 1017536:tid 1017559] [remote 57.141.14.6:58642] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:11:11.173278 2026] [security2:error] [pid 1321:tid 1436] [remote 162.0.209.22:56304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.209.0.162.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.re-alignpilates.com"] [uri "/wp-login.php"] [unique_id "apK-T2jCPtor9NZ-byTt1wAGPk4"]
[Sat Aug 29 05:11:11.173387 2026] [proxy_http:error] [pid 1028675:tid 1028931] (70007)The timeout specified has expired: [client 127.0.0.1:52648] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:11:11.173409 2026] [proxy:error] [pid 1028675:tid 1028931] [client 127.0.0.1:52648] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:11:11.194927 2026] [security2:error] [pid 1321:tid 1500] [client 20.104.49.130:48769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/dragonshell.php"] [unique_id "apK-T2jCPtor9NZ-byTt2gAABkg"]
[Sat Aug 29 05:11:11.196388 2026] [proxy_http:error] [pid 1017536:tid 1017560] (70007)The timeout specified has expired: [remote 74.7.241.38:60088] AH01102: error reading status line from remote server 127.0.0.1:8443, referer: https://guraonline.com/shop/?orderby=date&product_brand=la-roche-posay,the-one,dr-ceuracle,aco,locobase,possess,oncolour,ldb,scope
[Sat Aug 29 05:11:11.196413 2026] [proxy:error] [pid 1017536:tid 1017560] [remote 74.7.241.38:60088] AH00898: Error reading from remote server returned by /502.shtml, referer: https://guraonline.com/shop/?orderby=date&product_brand=la-roche-posay,the-one,dr-ceuracle,aco,locobase,possess,oncolour,ldb,scope
[Sat Aug 29 05:11:11.199377 2026] [security2:error] [pid 11274:tid 11454] [client 158.158.54.35:1489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/css/index.php"] [unique_id "apK-T2bX5DA3XO6e_qQvnwAAARQ"]
[Sat Aug 29 05:11:11.230075 2026] [security2:error] [pid 1321:tid 1574] [client 20.48.160.90:28033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/wp-activate.php"] [unique_id "apK-T2jCPtor9NZ-byTt3gAABpE"]
[Sat Aug 29 05:11:11.232274 2026] [security2:error] [pid 11274:tid 11570] [client 52.139.37.240:36700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK-T2bX5DA3XO6e_qQvoAAAAYY"]
[Sat Aug 29 05:11:11.236456 2026] [security2:error] [pid 1321:tid 1497] [client 20.48.250.41:42948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/mini.php"] [unique_id "apK-T2jCPtor9NZ-byTt4AAABkU"]
[Sat Aug 29 05:11:11.240421 2026] [security2:error] [pid 1321:tid 1504] [client 43.173.179.184:55184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 184.179.173.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewtopic.php"] [unique_id "apK-T2jCPtor9NZ-byTt3wAABkw"]
[Sat Aug 29 05:11:11.246384 2026] [proxy_http:error] [pid 1034096:tid 1034288] (70007)The timeout specified has expired: [client 127.0.0.1:52654] AH01102: error reading status line from remote server 50.6.92.44:8443, referer: https://guraonline.com/shop/?orderby=date&product_brand=la-roche-posay,the-one,dr-ceuracle,aco,locobase,possess,oncolour,ldb,scope
[Sat Aug 29 05:11:11.246406 2026] [proxy:error] [pid 1034096:tid 1034288] [client 127.0.0.1:52654] AH00898: Error reading from remote server returned by /502.shtml, referer: https://guraonline.com/shop/?orderby=date&product_brand=la-roche-posay,the-one,dr-ceuracle,aco,locobase,possess,oncolour,ldb,scope
[Sat Aug 29 05:11:11.269619 2026] [security2:error] [pid 11274:tid 11518] [client 20.52.41.200:2803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/a1.php"] [unique_id "apK-T2bX5DA3XO6e_qQvogAAAVM"]
[Sat Aug 29 05:11:11.286392 2026] [proxy_http:error] [pid 1017536:tid 1017718] (70007)The timeout specified has expired: [client 127.0.0.1:10644] AH01102: error reading status line from remote server 50.6.92.44:8443, referer: https://guraonline.com/shop/?orderby=date&product_brand=la-roche-posay,the-one,dr-ceuracle,aco,locobase,possess,oncolour,ldb,scope
[Sat Aug 29 05:11:11.286413 2026] [proxy:error] [pid 1017536:tid 1017718] [client 127.0.0.1:10644] AH00898: Error reading from remote server returned by /502.shtml, referer: https://guraonline.com/shop/?orderby=date&product_brand=la-roche-posay,the-one,dr-ceuracle,aco,locobase,possess,oncolour,ldb,scope
[Sat Aug 29 05:11:11.300384 2026] [security2:error] [pid 1321:tid 1582] [client 158.23.184.117:7377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/.well-known/aa.php"] [unique_id "apK-T2jCPtor9NZ-byTt4gAABpk"]
[Sat Aug 29 05:11:11.336877 2026] [security2:error] [pid 11274:tid 11491] [client 68.155.159.216:64078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK-T2bX5DA3XO6e_qQvpQAAATg"]
[Sat Aug 29 05:11:11.337683 2026] [security2:error] [pid 1321:tid 1541] [client 20.48.250.41:64890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/xxw.php"] [unique_id "apK-T2jCPtor9NZ-byTt4wAABnE"]
[Sat Aug 29 05:11:11.357754 2026] [security2:error] [pid 1321:tid 1537] [client 52.139.37.240:7419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.advancedbehaviorsolutions.com"] [uri "/cron.php"] [unique_id "apK-T2jCPtor9NZ-byTt5AAABm0"]
[Sat Aug 29 05:11:11.359523 2026] [security2:error] [pid 1321:tid 1602] [client 52.139.37.240:56087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/wp-content/themes/min.php"] [unique_id "apK-T2jCPtor9NZ-byTt5QAABq0"]
[Sat Aug 29 05:11:11.369140 2026] [security2:error] [pid 11274:tid 11572] [client 20.48.160.90:28143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/wp-trackback.php"] [unique_id "apK-T2bX5DA3XO6e_qQvpwAAAYg"]
[Sat Aug 29 05:11:11.408318 2026] [security2:error] [pid 11274:tid 11549] [client 43.172.196.233:46858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 233.196.172.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewforum.php"] [unique_id "apK-T2bX5DA3XO6e_qQvqAAAAXE"]
[Sat Aug 29 05:11:11.413143 2026] [security2:error] [pid 11274:tid 11498] [client 20.52.41.200:4784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/.trash7206/index.php"] [unique_id "apK-T2bX5DA3XO6e_qQvrQAAAT8"]
[Sat Aug 29 05:11:11.419756 2026] [security2:error] [pid 1321:tid 1489] [client 20.100.175.163:9289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/menu.php"] [unique_id "apK-T2jCPtor9NZ-byTt5gAABj0"]
[Sat Aug 29 05:11:11.421302 2026] [security2:error] [pid 11274:tid 11449] [client 20.48.160.90:63259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/ta.php"] [unique_id "apK-T2bX5DA3XO6e_qQvrgAAAQ8"]
[Sat Aug 29 05:11:11.424964 2026] [security2:error] [pid 1321:tid 1543] [client 52.139.37.240:35840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/wp-info.php"] [unique_id "apK-T2jCPtor9NZ-byTt5wAABnM"]
[Sat Aug 29 05:11:11.428839 2026] [security2:error] [pid 11274:tid 11468] [client 20.63.219.114:19945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/classsmtps.php"] [unique_id "apK-T2bX5DA3XO6e_qQvrwAAASI"]
[Sat Aug 29 05:11:11.431623 2026] [security2:error] [pid 11274:tid 11509] [client 20.151.200.44:62167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/X7T6.php"] [unique_id "apK-T2bX5DA3XO6e_qQvsAAAAUo"]
[Sat Aug 29 05:11:11.438835 2026] [security2:error] [pid 11274:tid 11522] [client 20.48.250.41:42961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/amp.php"] [unique_id "apK-T2bX5DA3XO6e_qQvsgAAAVc"]
[Sat Aug 29 05:11:11.446004 2026] [security2:error] [pid 11274:tid 11465] [client 158.23.184.117:7933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "apK-T2bX5DA3XO6e_qQvswAAAR8"]
[Sat Aug 29 05:11:11.452079 2026] [security2:error] [pid 11274:tid 11489] [client 20.48.250.41:26924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-T2bX5DA3XO6e_qQvtAAAATY"]
[Sat Aug 29 05:11:11.474950 2026] [security2:error] [pid 11274:tid 11487] [client 87.219.197.128:59030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK-T2bX5DA3XO6e_qQvtgAAATQ"]
[Sat Aug 29 05:11:11.475033 2026] [security2:error] [pid 11274:tid 11487] [client 87.219.197.128:59030] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK-T2bX5DA3XO6e_qQvtgAAATQ"]
[Sat Aug 29 05:11:11.479345 2026] [security2:error] [pid 1321:tid 1545] [client 158.23.147.79:39351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-content/themes/too.php"] [unique_id "apK-T2jCPtor9NZ-byTt7AAABnU"]
[Sat Aug 29 05:11:11.513580 2026] [security2:error] [pid 11274:tid 11515] [client 158.23.147.79:24534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/asd.php"] [unique_id "apK-T2bX5DA3XO6e_qQvuwAAAVA"]
[Sat Aug 29 05:11:11.527522 2026] [autoindex:error] [pid 1321:tid 1513] [client 45.148.10.62:59284] AH01276: Cannot serve directory /home3/zbfrrumy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:11:11.543604 2026] [security2:error] [pid 1321:tid 1599] [client 20.196.209.81:16745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/disagreed.php"] [unique_id "apK-T2jCPtor9NZ-byTt7gAABqo"]
[Sat Aug 29 05:11:11.555834 2026] [security2:error] [pid 1321:tid 1536] [client 20.48.160.90:28142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/pri.php"] [unique_id "apK-T2jCPtor9NZ-byTt7wAABmw"]
[Sat Aug 29 05:11:11.556087 2026] [security2:error] [pid 1321:tid 1584] [client 52.139.37.240:16946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/wp-content/themes/x/bypass.php"] [unique_id "apK-T2jCPtor9NZ-byTt8AAABps"]
[Sat Aug 29 05:11:11.570152 2026] [security2:error] [pid 1321:tid 1533] [client 20.48.250.41:60594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/bolt.php"] [unique_id "apK-T2jCPtor9NZ-byTt8QAABmk"]
[Sat Aug 29 05:11:11.571204 2026] [security2:error] [pid 11274:tid 11523] [client 20.100.175.163:13770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-admin/js/index.php"] [unique_id "apK-T2bX5DA3XO6e_qQvvAAAAVg"]
[Sat Aug 29 05:11:11.582930 2026] [security2:error] [pid 1321:tid 1590] [client 158.23.147.79:62802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/about.php"] [unique_id "apK-T2jCPtor9NZ-byTt8wAABqE"]
[Sat Aug 29 05:11:11.590499 2026] [security2:error] [pid 1321:tid 1573] [client 158.158.54.35:8471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-trackback.php"] [unique_id "apK-T2jCPtor9NZ-byTt9AAABpA"]
[Sat Aug 29 05:11:11.594815 2026] [security2:error] [pid 11274:tid 11500] [client 158.23.184.117:7406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/wp-content/plugins/alfa-rex.php"] [unique_id "apK-T2bX5DA3XO6e_qQvvQAAAUE"]
[Sat Aug 29 05:11:11.610408 2026] [security2:error] [pid 1321:tid 1518] [client 20.240.128.207:20222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK-T2jCPtor9NZ-byTt9gAABlo"]
[Sat Aug 29 05:11:11.612159 2026] [security2:error] [pid 1321:tid 1509] [client 52.139.37.240:7395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.advancedbehaviorsolutions.com"] [uri "/wp-2019.php"] [unique_id "apK-T2jCPtor9NZ-byTt9wAABlE"]
[Sat Aug 29 05:11:11.613300 2026] [security2:error] [pid 1321:tid 1564] [client 4.205.62.107:32531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/public/bnn_.php.php"] [unique_id "apK-T2jCPtor9NZ-byTt-AAABoc"]
[Sat Aug 29 05:11:11.619757 2026] [security2:error] [pid 11274:tid 11527] [client 20.48.160.90:64202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/bo.php"] [unique_id "apK-T2bX5DA3XO6e_qQvvwAAAVw"]
[Sat Aug 29 05:11:11.621409 2026] [security2:error] [pid 1321:tid 1583] [client 52.139.37.240:36726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/wp-wordfence-waf.php"] [unique_id "apK-T2jCPtor9NZ-byTt-QAABpo"]
[Sat Aug 29 05:11:11.628224 2026] [security2:error] [pid 11274:tid 11501] [client 68.155.159.216:30569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-l0gin.php"] [unique_id "apK-T2bX5DA3XO6e_qQvwQAAAUI"]
[Sat Aug 29 05:11:11.630178 2026] [cgid:error] [pid 11274:tid 11405] [remote 174.172.22.10:61529] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/flowerfh/public_html/404.shtml, referer: https://www.flowerfh.com/obituariesdetail.php?obituary=1274&o_name=Ann&ol_name=Morreale&o_dob=1944-07-04&o_dod=2026-07-30&o_visit=Tuesday%20August%204,%202026%20from%208:30%20am%20to%2010:00%20am&o_serv=Immaculate%20Conception%20Church&o_int=Ferncliff%20Mausoleum&o_servtime=10:30%20am%20Tuesday%20August%204,%202026
[Sat Aug 29 05:11:11.640650 2026] [security2:error] [pid 11274:tid 11566] [client 68.155.159.216:38581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-content/x.php"] [unique_id "apK-T2bX5DA3XO6e_qQvwgAAAYI"]
[Sat Aug 29 05:11:11.645498 2026] [security2:error] [pid 11274:tid 11480] [client 4.205.62.107:51433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/fns.php"] [unique_id "apK-T2bX5DA3XO6e_qQvxQAAAS0"]
[Sat Aug 29 05:11:11.645526 2026] [security2:error] [pid 11274:tid 11488] [client 158.158.54.35:21755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-cron.php"] [unique_id "apK-T2bX5DA3XO6e_qQvxAAAATU"]
[Sat Aug 29 05:11:11.646056 2026] [security2:error] [pid 11274:tid 11481] [client 20.48.250.41:49584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/cc13.php"] [unique_id "apK-T2bX5DA3XO6e_qQvxgAAAS4"]
[Sat Aug 29 05:11:11.675763 2026] [security2:error] [pid 1321:tid 1508] [client 45.148.10.62:59284] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.zbf.rru.mybluehost.me"] [uri "/.env"] [unique_id "apK-T2jCPtor9NZ-byTt-wAABlA"]
[Sat Aug 29 05:11:11.685823 2026] [security2:error] [pid 11274:tid 11497] [client 68.155.159.216:6008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK-T2bX5DA3XO6e_qQvygAAAT4"]
[Sat Aug 29 05:11:11.703655 2026] [security2:error] [pid 1321:tid 1601] [client 20.48.160.90:51889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/wp_blog_footer.php"] [unique_id "apK-T2jCPtor9NZ-byTt_AAABqw"]
[Sat Aug 29 05:11:11.723012 2026] [security2:error] [pid 1321:tid 1596] [client 20.52.41.200:2632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-T2jCPtor9NZ-byTt_QAABqc"]
[Sat Aug 29 05:11:11.742249 2026] [security2:error] [pid 11274:tid 11473] [client 68.155.159.216:33764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK-T2bX5DA3XO6e_qQvywAAASc"]
[Sat Aug 29 05:11:11.756406 2026] [security2:error] [pid 1321:tid 1553] [client 20.48.160.90:64216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/44.php"] [unique_id "apK-T2jCPtor9NZ-byTuAQAABnw"]
[Sat Aug 29 05:11:11.770631 2026] [security2:error] [pid 11274:tid 11520] [client 20.48.250.41:62457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/rtx.php"] [unique_id "apK-T2bX5DA3XO6e_qQvzAAAAVU"]
[Sat Aug 29 05:11:11.785224 2026] [security2:error] [pid 11274:tid 11456] [client 20.104.49.130:60963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/term.php"] [unique_id "apK-T2bX5DA3XO6e_qQvzgAAARY"]
[Sat Aug 29 05:11:11.788104 2026] [security2:error] [pid 1321:tid 1586] [client 20.48.250.41:42966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/aa.php"] [unique_id "apK-T2jCPtor9NZ-byTuBAAABp0"]
[Sat Aug 29 05:11:11.801845 2026] [core:error] [pid 11274:tid 11560] [client 158.23.184.117:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:11.801866 2026] [core:error] [pid 11274:tid 11560] [client 158.23.184.117:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:11.802551 2026] [security2:error] [pid 1321:tid 1527] [client 158.23.184.117:7362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/test.php"] [unique_id "apK-T2jCPtor9NZ-byTuCAAABmM"]
[Sat Aug 29 05:11:11.804439 2026] [security2:error] [pid 1321:tid 1559] [client 52.139.37.240:7362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.advancedbehaviorsolutions.com"] [uri "/gecko-new.php"] [unique_id "apK-T2jCPtor9NZ-byTuCQAABoI"]
[Sat Aug 29 05:11:11.814730 2026] [security2:error] [pid 11274:tid 11551] [client 20.63.219.114:2769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/contentloader1.php"] [unique_id "apK-T2bX5DA3XO6e_qQv0gAAAXM"]
[Sat Aug 29 05:11:11.815850 2026] [security2:error] [pid 11274:tid 11546] [client 52.139.37.240:36818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/ws49.php"] [unique_id "apK-T2bX5DA3XO6e_qQv0wAAAW4"]
[Sat Aug 29 05:11:11.826785 2026] [security2:error] [pid 11274:tid 11518] [client 68.155.159.216:65095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK-T2bX5DA3XO6e_qQv2wAAAVM"]
[Sat Aug 29 05:11:11.830087 2026] [security2:error] [pid 1321:tid 1490] [client 45.148.10.62:59284] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.zbf.rru.mybluehost.me"] [uri "/.env"] [unique_id "apK-T2jCPtor9NZ-byTuCgAABj4"]
[Sat Aug 29 05:11:11.857421 2026] [security2:error] [pid 1321:tid 1548] [client 43.173.173.5:60160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 5.173.173.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewforum.php"] [unique_id "apK-T2jCPtor9NZ-byTuDAAABnc"]
[Sat Aug 29 05:11:11.861404 2026] [security2:error] [pid 1321:tid 1566] [client 20.48.160.90:51853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/sushi.php"] [unique_id "apK-T2jCPtor9NZ-byTuDQAABok"]
[Sat Aug 29 05:11:11.871185 2026] [security2:error] [pid 11274:tid 11463] [client 20.52.41.200:4664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wk/index.php"] [unique_id "apK-T2bX5DA3XO6e_qQv3gAAAR0"]
[Sat Aug 29 05:11:11.873303 2026] [security2:error] [pid 1321:tid 1491] [client 68.155.159.216:14213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/about.php"] [unique_id "apK-T2jCPtor9NZ-byTuDgAABj8"]
[Sat Aug 29 05:11:11.881139 2026] [security2:error] [pid 11274:tid 11470] [client 4.205.62.107:64266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/asa.php"] [unique_id "apK-T2bX5DA3XO6e_qQv3wAAASQ"]
[Sat Aug 29 05:11:11.885619 2026] [security2:error] [pid 11274:tid 11479] [client 68.155.159.216:65055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK-T2bX5DA3XO6e_qQv4AAAASw"]
[Sat Aug 29 05:11:11.887159 2026] [security2:error] [pid 1321:tid 1610] [client 158.158.54.35:17664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/tool.php"] [unique_id "apK-T2jCPtor9NZ-byTuDwAABrU"]
[Sat Aug 29 05:11:11.899491 2026] [security2:error] [pid 1321:tid 1495] [client 4.205.62.107:62960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/bootstrap.php"] [unique_id "apK-T2jCPtor9NZ-byTuEAAABkM"]
[Sat Aug 29 05:11:11.903169 2026] [security2:error] [pid 1321:tid 1516] [client 52.139.37.240:16451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK-T2jCPtor9NZ-byTuEQAABlg"]
[Sat Aug 29 05:11:11.913977 2026] [security2:error] [pid 1321:tid 1594] [client 20.100.175.163:10093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK-T2jCPtor9NZ-byTuEgAABqU"]
[Sat Aug 29 05:11:11.917661 2026] [security2:error] [pid 1321:tid 1605] [client 20.48.160.90:64185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/h2.php"] [unique_id "apK-T2jCPtor9NZ-byTuEwAABrA"]
[Sat Aug 29 05:11:11.940167 2026] [security2:error] [pid 1321:tid 1541] [client 20.48.250.41:42986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/s1.php"] [unique_id "apK-T2jCPtor9NZ-byTuFgAABnE"]
[Sat Aug 29 05:11:11.941502 2026] [fcgid:warn] [pid 1321:tid 1501] (70014)End of file found: [client 66.132.195.53:54992] mod_fcgid: can't get data from http client
[Sat Aug 29 05:11:11.954420 2026] [security2:error] [pid 1321:tid 1612] [client 45.148.10.62:59270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zai.emf.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "apK-T2jCPtor9NZ-byTuGAAABrc"]
[Sat Aug 29 05:11:11.968453 2026] [security2:error] [pid 1321:tid 1585] [client 158.23.184.117:7877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/wp-includes/mani.php"] [unique_id "apK-T2jCPtor9NZ-byTuGQAABpw"]
[Sat Aug 29 05:11:11.972114 2026] [security2:error] [pid 1321:tid 1567] [client 158.23.147.79:56988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK-T2jCPtor9NZ-byTuGgAABoo"]
[Sat Aug 29 05:11:11.980757 2026] [security2:error] [pid 1321:tid 1500] [client 20.196.209.81:16194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/class_api.php"] [unique_id "apK-T2jCPtor9NZ-byTuHAAABkg"]
[Sat Aug 29 05:11:11.987596 2026] [security2:error] [pid 11274:tid 11475] [client 91.92.42.30:55470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "s212.net"] [uri "/configuration.php"] [unique_id "apK-T2bX5DA3XO6e_qQv7gAAASk"]
[Sat Aug 29 05:11:11.997698 2026] [security2:error] [pid 1321:tid 1552] [client 20.48.250.41:64796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/ckk.php"] [unique_id "apK-T2jCPtor9NZ-byTuHQAABns"]
[Sat Aug 29 05:11:12.007351 2026] [security2:error] [pid 1321:tid 1574] [client 52.139.37.240:7366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.advancedbehaviorsolutions.com"] [uri "/add_actualites.php"] [unique_id "apK-UGjCPtor9NZ-byTuHgAABpE"]
[Sat Aug 29 05:11:12.030791 2026] [security2:error] [pid 1321:tid 1547] [client 52.139.37.240:36845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/xxx.php"] [unique_id "apK-UGjCPtor9NZ-byTuHwAABnY"]
[Sat Aug 29 05:11:12.036545 2026] [security2:error] [pid 1321:tid 1545] [client 68.155.159.216:23456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/lock.php"] [unique_id "apK-UGjCPtor9NZ-byTuIAAABnU"]
[Sat Aug 29 05:11:12.038796 2026] [security2:error] [pid 1321:tid 1576] [client 68.155.159.216:1884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/install.php"] [unique_id "apK-UGjCPtor9NZ-byTuIgAABpM"]
[Sat Aug 29 05:11:12.055366 2026] [security2:error] [pid 1321:tid 1615] [client 20.48.160.90:28124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/manga.php"] [unique_id "apK-UGjCPtor9NZ-byTuIwAABro"]
[Sat Aug 29 05:11:12.090856 2026] [security2:error] [pid 11274:tid 11499] [client 20.48.250.41:27598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-UGbX5DA3XO6e_qQv-AAAAUA"]
[Sat Aug 29 05:11:12.092703 2026] [security2:error] [pid 11274:tid 11549] [client 158.158.54.35:31158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-block.php"] [unique_id "apK-UGbX5DA3XO6e_qQv-QAAAXE"]
[Sat Aug 29 05:11:12.093705 2026] [security2:error] [pid 11274:tid 11544] [client 20.48.250.41:42906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/0byte.php"] [unique_id "apK-UGbX5DA3XO6e_qQv-gAAAWw"]
[Sat Aug 29 05:11:12.097047 2026] [security2:error] [pid 11274:tid 11517] [client 68.155.159.216:62721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-content/cong.php"] [unique_id "apK-UGbX5DA3XO6e_qQv-wAAAVI"]
[Sat Aug 29 05:11:12.103551 2026] [security2:error] [pid 11274:tid 11492] [client 52.139.37.240:16481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/wp-info.php"] [unique_id "apK-UGbX5DA3XO6e_qQv_AAAATk"]
[Sat Aug 29 05:11:12.107207 2026] [security2:error] [pid 1321:tid 1533] [client 68.155.159.216:56728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/makeasmtp.php"] [unique_id "apK-UGjCPtor9NZ-byTuJgAABmk"]
[Sat Aug 29 05:11:12.119903 2026] [security2:error] [pid 11274:tid 11530] [client 20.240.128.207:18645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-mail.php"] [unique_id "apK-UGbX5DA3XO6e_qQv_QAAAV8"]
[Sat Aug 29 05:11:12.123322 2026] [security2:error] [pid 11274:tid 11468] [client 20.100.175.163:33681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/core.php"] [unique_id "apK-UGbX5DA3XO6e_qQv_wAAASI"]
[Sat Aug 29 05:11:12.127618 2026] [security2:error] [pid 11274:tid 11444] [client 158.23.184.117:7369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/wp-includes/Test.php"] [unique_id "apK-UGbX5DA3XO6e_qQwAQAAAQo"]
[Sat Aug 29 05:11:12.144544 2026] [autoindex:error] [pid 1321:tid 1518] [client 45.148.10.62:59284] AH01276: Cannot serve directory /home3/zbfrrumy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:11:12.177234 2026] [security2:error] [pid 11274:tid 11464] [client 4.205.62.107:63916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/test.config.php"] [unique_id "apK-UGbX5DA3XO6e_qQwBgAAAR4"]
[Sat Aug 29 05:11:12.184164 2026] [security2:error] [pid 11274:tid 11526] [client 20.63.219.114:19181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/al.php"] [unique_id "apK-UGbX5DA3XO6e_qQwBwAAAVs"]
[Sat Aug 29 05:11:12.192543 2026] [security2:error] [pid 11274:tid 11527] [client 158.23.147.79:38780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-includes/index.php"] [unique_id "apK-UGbX5DA3XO6e_qQwCgAAAVw"]
[Sat Aug 29 05:11:12.197273 2026] [security2:error] [pid 11274:tid 11494] [client 20.52.41.200:2754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/alfa-rex.php7"] [unique_id "apK-UGbX5DA3XO6e_qQwCwAAATs"]
[Sat Aug 29 05:11:12.203973 2026] [security2:error] [pid 11274:tid 11519] [client 52.139.37.240:7385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.advancedbehaviorsolutions.com"] [uri "/browse.php"] [unique_id "apK-UGbX5DA3XO6e_qQwDAAAAVQ"]
[Sat Aug 29 05:11:12.208645 2026] [security2:error] [pid 1321:tid 1550] [client 20.48.250.41:64807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.domainwatchtower.com"] [uri "/R57.php"] [unique_id "apK-UGjCPtor9NZ-byTuKgAABnk"]
[Sat Aug 29 05:11:12.209868 2026] [security2:error] [pid 1321:tid 1608] [client 20.48.160.90:63273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/wp-content/mod/adminfuns.php"] [unique_id "apK-UGjCPtor9NZ-byTuLAAABrM"]
[Sat Aug 29 05:11:12.220820 2026] [security2:error] [pid 1321:tid 1515] [client 158.158.54.35:29117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/222.php"] [unique_id "apK-UGjCPtor9NZ-byTuLQAABlc"]
[Sat Aug 29 05:11:12.223801 2026] [security2:error] [pid 11274:tid 11480] [client 20.48.250.41:42975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/xr.php"] [unique_id "apK-UGbX5DA3XO6e_qQwEAAAAS0"]
[Sat Aug 29 05:11:12.228110 2026] [security2:error] [pid 1321:tid 1565] [client 52.139.37.240:36832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/0x.php"] [unique_id "apK-UGjCPtor9NZ-byTuLgAABog"]
[Sat Aug 29 05:11:12.272791 2026] [security2:error] [pid 1321:tid 1580] [client 158.23.184.117:7388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/wp-includes/pomo.php"] [unique_id "apK-UGjCPtor9NZ-byTuMAAABpc"]
[Sat Aug 29 05:11:12.278855 2026] [autoindex:error] [pid 11274:tid 11515] [client 45.148.10.62:59298] AH01276: Cannot serve directory /home3/zbvtvpmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:11:12.290293 2026] [security2:error] [pid 11274:tid 11559] [client 4.205.62.107:6875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/apikeys.php"] [unique_id "apK-UGbX5DA3XO6e_qQwGAAAAXs"]
[Sat Aug 29 05:11:12.294531 2026] [security2:error] [pid 11274:tid 11556] [client 107.145.13.164:50913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 164.13.145.107.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK-UGbX5DA3XO6e_qQwGgAAAXg"]
[Sat Aug 29 05:11:12.295159 2026] [security2:error] [pid 11274:tid 11556] [client 107.145.13.164:50913] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK-UGbX5DA3XO6e_qQwGgAAAXg"]
[Sat Aug 29 05:11:12.306140 2026] [security2:error] [pid 11274:tid 11450] [client 52.139.37.240:56080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/wp-wordfence-waf.php"] [unique_id "apK-UGbX5DA3XO6e_qQwGwAAARA"]
[Sat Aug 29 05:11:12.330781 2026] [security2:error] [pid 11274:tid 11434] [remote 93.123.109.228:39990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/.env.php"] [unique_id "apK-UGbX5DA3XO6e_qQwHwABSnc"]
[Sat Aug 29 05:11:12.334772 2026] [security2:error] [pid 11274:tid 11540] [client 20.52.41.200:4781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/admin.php"] [unique_id "apK-UGbX5DA3XO6e_qQwIAAAAWk"]
[Sat Aug 29 05:11:12.341899 2026] [security2:error] [pid 11274:tid 11505] [client 20.48.160.90:43618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/asdfghj.php"] [unique_id "apK-UGbX5DA3XO6e_qQwIgAAAUY"]
[Sat Aug 29 05:11:12.370709 2026] [security2:error] [pid 1321:tid 1603] [client 158.158.54.35:14857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/k.php"] [unique_id "apK-UGjCPtor9NZ-byTuMwAABq4"]
[Sat Aug 29 05:11:12.371632 2026] [security2:error] [pid 11274:tid 11565] [client 20.48.160.90:65322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/sao.php"] [unique_id "apK-UGbX5DA3XO6e_qQwJQAAAYE"]
[Sat Aug 29 05:11:12.376479 2026] [security2:error] [pid 1321:tid 1568] [client 20.48.250.41:49624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/h02ugyh.php"] [unique_id "apK-UGjCPtor9NZ-byTuNAAABos"]
[Sat Aug 29 05:11:12.388393 2026] [security2:error] [pid 1321:tid 1604] [client 20.196.209.81:16716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/aksinet.php"] [unique_id "apK-UGjCPtor9NZ-byTuNQAABq8"]
[Sat Aug 29 05:11:12.399630 2026] [security2:error] [pid 11274:tid 11473] [client 52.139.37.240:7394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.advancedbehaviorsolutions.com"] [uri "/contentloader1.php"] [unique_id "apK-UGbX5DA3XO6e_qQwKQAAASc"]
[Sat Aug 29 05:11:12.413799 2026] [core:error] [pid 1321:tid 1508] [client 20.100.175.163:4568] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:12.413824 2026] [core:error] [pid 1321:tid 1508] [client 20.100.175.163:4568] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:12.413924 2026] [security2:error] [pid 1321:tid 1561] [client 34.50.189.51:57006] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/front/.env"] [unique_id "apK-UGjCPtor9NZ-byTuOQAABoQ"]
[Sat Aug 29 05:11:12.414778 2026] [security2:error] [pid 1321:tid 1606] [client 34.50.189.51:56986] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/.env.prod.bak"] [unique_id "apK-UGjCPtor9NZ-byTuOAAABrE"]
[Sat Aug 29 05:11:12.415431 2026] [security2:error] [pid 1321:tid 1531] [client 34.50.189.51:56994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.189.50.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "discocollective.kriveloff-associates.com"] [uri "/.env.php.bak"] [unique_id "apK-UGjCPtor9NZ-byTuOgAABmc"]
[Sat Aug 29 05:11:12.416317 2026] [security2:error] [pid 11274:tid 11339] [remote 34.138.144.127:43530] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "www.studiopasa.com"] [uri "/wp-config.php~"] [unique_id "apK-UGbX5DA3XO6e_qQwLwABHRo"]
[Sat Aug 29 05:11:12.416456 2026] [security2:error] [pid 1321:tid 1595] [client 34.50.189.51:57040] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/htdocs/.env"] [unique_id "apK-UGjCPtor9NZ-byTuOwAABqY"]
[Sat Aug 29 05:11:12.417553 2026] [security2:error] [pid 1321:tid 1595] [client 34.50.189.51:57040] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "discocollective.kriveloff-associates.com"] [uri "/htdocs/.env"] [unique_id "apK-UGjCPtor9NZ-byTuOwAABqY"]
[Sat Aug 29 05:11:12.418566 2026] [cgid:error] [pid 11274:tid 11326] [remote 34.138.144.127:43530] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:12.422545 2026] [security2:error] [pid 1321:tid 1498] [client 52.139.37.240:35849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/CDX1.php"] [unique_id "apK-UGjCPtor9NZ-byTuPAAABkY"]
[Sat Aug 29 05:11:12.423471 2026] [security2:error] [pid 11274:tid 11466] [client 34.50.189.51:57018] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/public_html/.env"] [unique_id "apK-UGbX5DA3XO6e_qQwKwAAASA"]
[Sat Aug 29 05:11:12.423619 2026] [security2:error] [pid 11274:tid 11529] [client 34.50.189.51:57028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/html/.env"] [unique_id "apK-UGbX5DA3XO6e_qQwKgAAAV4"]
[Sat Aug 29 05:11:12.424233 2026] [security2:error] [pid 11274:tid 11503] [client 34.50.189.51:57060] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/symfony/.env"] [unique_id "apK-UGbX5DA3XO6e_qQwMQAAAUQ"]
[Sat Aug 29 05:11:12.424233 2026] [security2:error] [pid 11274:tid 11491] [client 34.50.189.51:57180] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/wp/.env"] [unique_id "apK-UGbX5DA3XO6e_qQwMwAAATg"]
[Sat Aug 29 05:11:12.424301 2026] [security2:error] [pid 11274:tid 11322] [remote 34.138.144.127:43530] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/wp-config.old"] [unique_id "apK-UGbX5DA3XO6e_qQwLgABHQk"]
[Sat Aug 29 05:11:12.425817 2026] [security2:error] [pid 1321:tid 1517] [client 34.50.189.51:57144] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/cms/.env"] [unique_id "apK-UGjCPtor9NZ-byTuPQAABlk"]
[Sat Aug 29 05:11:12.426907 2026] [security2:error] [pid 1321:tid 1587] [client 34.50.189.51:57006] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/wordpress/.env"] [unique_id "apK-UGjCPtor9NZ-byTuPwAABp4"]
[Sat Aug 29 05:11:12.427104 2026] [core:error] [pid 11274:tid 11535] [client 34.50.189.51:57080] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:12.427117 2026] [core:error] [pid 11274:tid 11535] [client 34.50.189.51:57080] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:12.427267 2026] [security2:error] [pid 11274:tid 11346] [remote 34.138.144.127:43530] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "www.studiopasa.com"] [uri "/wp-config.php.swp"] [unique_id "apK-UGbX5DA3XO6e_qQwNgABHSE"]
[Sat Aug 29 05:11:12.427345 2026] [security2:error] [pid 1321:tid 1527] [client 34.50.189.51:57252] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/apps/.env"] [unique_id "apK-UGjCPtor9NZ-byTuPgAABmM"]
[Sat Aug 29 05:11:12.428808 2026] [security2:error] [pid 1321:tid 1597] [client 34.50.189.51:57238] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "discocollective.kriveloff-associates.com"] [uri "/_next/../.aws/credentials"] [unique_id "apK-UGjCPtor9NZ-byTuQgAABqg"]
[Sat Aug 29 05:11:12.428843 2026] [security2:error] [pid 1321:tid 1549] [client 34.50.189.51:56986] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/apps/frontend/.env"] [unique_id "apK-UGjCPtor9NZ-byTuQAAABng"]
[Sat Aug 29 05:11:12.428876 2026] [security2:error] [pid 1321:tid 1555] [client 34.50.189.51:57040] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/packages/api/.env"] [unique_id "apK-UGjCPtor9NZ-byTuQQAABn4"]
[Sat Aug 29 05:11:12.428943 2026] [security2:error] [pid 1321:tid 1549] [client 34.50.189.51:56986] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "discocollective.kriveloff-associates.com"] [uri "/apps/frontend/.env"] [unique_id "apK-UGjCPtor9NZ-byTuQAAABng"]
[Sat Aug 29 05:11:12.430505 2026] [security2:error] [pid 11274:tid 11545] [client 45.148.10.62:59298] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.zbv.tvp.mybluehost.me"] [uri "/.env"] [unique_id "apK-UGbX5DA3XO6e_qQwPAAAAW0"]
[Sat Aug 29 05:11:12.430525 2026] [cgid:error] [pid 11274:tid 11335] [remote 34.138.144.127:43530] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:12.430886 2026] [core:error] [pid 11274:tid 11484] [client 34.50.189.51:57112] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:12.430898 2026] [core:error] [pid 11274:tid 11484] [client 34.50.189.51:57112] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:12.431167 2026] [cgid:error] [pid 11274:tid 11341] [remote 34.138.144.127:43530] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:12.431270 2026] [security2:error] [pid 11274:tid 11553] [client 34.50.189.51:57152] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "discocollective.kriveloff-associates.com"] [uri "/frontend/.env.staging"] [unique_id "apK-UGbX5DA3XO6e_qQwQAAAAXU"]
[Sat Aug 29 05:11:12.431482 2026] [core:error] [pid 11274:tid 11518] [client 34.50.189.51:57074] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:12.431499 2026] [core:error] [pid 11274:tid 11518] [client 34.50.189.51:57074] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:12.431554 2026] [security2:error] [pid 11274:tid 11558] [client 34.50.189.51:57092] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/shared/.env"] [unique_id "apK-UGbX5DA3XO6e_qQwPQAAAXo"]
[Sat Aug 29 05:11:12.431878 2026] [security2:error] [pid 11274:tid 11467] [client 34.50.189.51:57082] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/www/.env"] [unique_id "apK-UGbX5DA3XO6e_qQwPgAAASE"]
[Sat Aug 29 05:11:12.432467 2026] [security2:error] [pid 11274:tid 11551] [client 34.50.189.51:57048] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "discocollective.kriveloff-associates.com"] [uri "/static../proc/self/environ"] [unique_id "apK-UGbX5DA3XO6e_qQwQgAAAXM"]
[Sat Aug 29 05:11:12.433265 2026] [core:error] [pid 11274:tid 11512] [client 34.50.189.51:57128] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:12.433273 2026] [core:error] [pid 11274:tid 11512] [client 34.50.189.51:57128] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:12.434499 2026] [core:error] [pid 11274:tid 11472] [client 34.50.189.51:57168] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:12.434511 2026] [core:error] [pid 11274:tid 11472] [client 34.50.189.51:57168] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:12.434616 2026] [core:error] [pid 1321:tid 1559] [client 34.50.189.51:57294] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:12.434627 2026] [core:error] [pid 1321:tid 1559] [client 34.50.189.51:57294] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:12.435076 2026] [security2:error] [pid 11274:tid 11482] [client 34.50.189.51:57268] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/static/.env"] [unique_id "apK-UGbX5DA3XO6e_qQwRAAAAS8"]
[Sat Aug 29 05:11:12.435135 2026] [security2:error] [pid 11274:tid 11477] [client 34.50.189.51:57232] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/api/.env.bak"] [unique_id "apK-UGbX5DA3XO6e_qQwQwAAASs"]
[Sat Aug 29 05:11:12.436506 2026] [security2:error] [pid 11274:tid 11486] [client 34.50.189.51:57028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "discocollective.kriveloff-associates.com"] [uri "/back-end/.env"] [unique_id "apK-UGbX5DA3XO6e_qQwRgAAATM"]
[Sat Aug 29 05:11:12.438233 2026] [security2:error] [pid 11274:tid 11452] [client 34.50.189.51:57222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.189.50.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "discocollective.kriveloff-associates.com"] [uri "/phpinfo.php"] [unique_id "apK-UGbX5DA3XO6e_qQwSAAAARI"]
[Sat Aug 29 05:11:12.438306 2026] [security2:error] [pid 11274:tid 11452] [client 34.50.189.51:57222] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "409"] [hostname "discocollective.kriveloff-associates.com"] [uri "/phpinfo.php"] [unique_id "apK-UGbX5DA3XO6e_qQwSAAAARI"]
[Sat Aug 29 05:11:12.438466 2026] [core:error] [pid 11274:tid 11552] [client 34.50.189.51:57196] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:12.438477 2026] [core:error] [pid 11274:tid 11552] [client 34.50.189.51:57196] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:12.438953 2026] [security2:error] [pid 11274:tid 11508] [client 34.50.189.51:57270] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "discocollective.kriveloff-associates.com"] [uri "/cgi-sys/404.html"] [unique_id "apK-UGbX5DA3XO6e_qQwRQAAAUk"]
[Sat Aug 29 05:11:12.444542 2026] [security2:error] [pid 1321:tid 1506] [client 45.148.10.62:59284] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.zbf.rru.mybluehost.me"] [uri "/api/.env"] [unique_id "apK-UGjCPtor9NZ-byTuRAAABk4"]
[Sat Aug 29 05:11:12.446101 2026] [security2:error] [pid 11274:tid 11564] [client 34.50.189.51:57092] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "discocollective.kriveloff-associates.com"] [uri "/static../proc/self/environ"] [unique_id "apK-UGbX5DA3XO6e_qQwSgAAAYA"]
[Sat Aug 29 05:11:12.461585 2026] [security2:error] [pid 11274:tid 11525] [client 34.50.189.51:57316] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "discocollective.kriveloff-associates.com"] [uri "/static../proc/self/environ"] [unique_id "apK-UGbX5DA3XO6e_qQwTQAAAVo"]
[Sat Aug 29 05:11:12.476670 2026] [security2:error] [pid 11274:tid 11517] [client 34.50.189.51:57270] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "discocollective.kriveloff-associates.com"] [uri "/static../proc/self/environ"] [unique_id "apK-UGbX5DA3XO6e_qQwUAAAAVI"]
[Sat Aug 29 05:11:12.490139 2026] [security2:error] [pid 11274:tid 11468] [client 34.50.189.51:57028] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "discocollective.kriveloff-associates.com"] [uri "/static../proc/self/environ"] [unique_id "apK-UGbX5DA3XO6e_qQwUwAAASI"]
[Sat Aug 29 05:11:12.501589 2026] [security2:error] [pid 1321:tid 1566] [client 195.178.110.247:40252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottnoagent.roycehomesales.com"] [uri "/index.php"] [unique_id "apK-UGjCPtor9NZ-byTuSAAABok"]
[Sat Aug 29 05:11:12.502503 2026] [cgid:error] [pid 11274:tid 11359] [remote 34.138.144.127:43530] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:12.502752 2026] [cgid:error] [pid 11274:tid 11349] [remote 34.138.144.127:43530] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:12.503663 2026] [security2:error] [pid 11274:tid 11448] [client 34.50.189.51:57268] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "discocollective.kriveloff-associates.com"] [uri "/static../proc/self/environ"] [unique_id "apK-UGbX5DA3XO6e_qQwVwAAAQ4"]
[Sat Aug 29 05:11:12.517968 2026] [security2:error] [pid 11274:tid 11550] [client 34.50.189.51:57232] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "discocollective.kriveloff-associates.com"] [uri "/static../proc/self/environ"] [unique_id "apK-UGbX5DA3XO6e_qQwWgAAAXI"]
[Sat Aug 29 05:11:12.524806 2026] [security2:error] [pid 1321:tid 1560] [client 52.139.37.240:16758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/ws49.php"] [unique_id "apK-UGjCPtor9NZ-byTuSQAABoM"]
[Sat Aug 29 05:11:12.525487 2026] [security2:error] [pid 11274:tid 11532] [client 20.48.250.41:42993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/xxw.php"] [unique_id "apK-UGbX5DA3XO6e_qQwXAAAAWE"]
[Sat Aug 29 05:11:12.526533 2026] [security2:error] [pid 11274:tid 11451] [client 158.23.184.117:7374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/wp-admin/link-add.php"] [unique_id "apK-UGbX5DA3XO6e_qQwXQAAARE"]
[Sat Aug 29 05:11:12.527639 2026] [security2:error] [pid 11274:tid 11459] [client 158.158.54.35:16198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-includes/fonts/admin.php"] [unique_id "apK-UGbX5DA3XO6e_qQwXgAAARk"]
[Sat Aug 29 05:11:12.532730 2026] [security2:error] [pid 11274:tid 11464] [client 34.50.189.51:57082] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "discocollective.kriveloff-associates.com"] [uri "/static../proc/self/environ"] [unique_id "apK-UGbX5DA3XO6e_qQwXwAAAR4"]
[Sat Aug 29 05:11:12.539189 2026] [security2:error] [pid 11274:tid 11474] [client 20.48.160.90:64247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/dapa.php"] [unique_id "apK-UGbX5DA3XO6e_qQwYgAAASg"]
[Sat Aug 29 05:11:12.540514 2026] [security2:error] [pid 11274:tid 11500] [client 20.48.160.90:28146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/dragonshell.php"] [unique_id "apK-UGbX5DA3XO6e_qQwYwAAAUE"]
[Sat Aug 29 05:11:12.546171 2026] [security2:error] [pid 11274:tid 11476] [client 34.50.189.51:57102] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "discocollective.kriveloff-associates.com"] [uri "/static../proc/self/environ"] [unique_id "apK-UGbX5DA3XO6e_qQwZAAAASo"]
[Sat Aug 29 05:11:12.551040 2026] [security2:error] [pid 1321:tid 1516] [client 20.151.200.44:63766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/wsz.php"] [unique_id "apK-UGjCPtor9NZ-byTuTAAABlg"]
[Sat Aug 29 05:11:12.561135 2026] [security2:error] [pid 1321:tid 1594] [client 34.50.189.51:56986] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "discocollective.kriveloff-associates.com"] [uri "/static../proc/self/environ"] [unique_id "apK-UGjCPtor9NZ-byTuTQAABqU"]
[Sat Aug 29 05:11:12.567681 2026] [cgid:error] [pid 11274:tid 11350] [remote 34.138.144.127:43530] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:12.567719 2026] [cgid:error] [pid 11274:tid 11382] [remote 34.138.144.127:43530] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:12.568984 2026] [security2:error] [pid 1321:tid 1605] [client 57.141.14.98:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/cart/"] [unique_id "apK-UGjCPtor9NZ-byTuTgAABrA"]
[Sat Aug 29 05:11:12.569868 2026] [cgid:error] [pid 11274:tid 11354] [remote 34.138.144.127:43530] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:12.569920 2026] [cgid:error] [pid 11274:tid 11376] [remote 34.138.144.127:43530] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:12.576195 2026] [security2:error] [pid 1321:tid 1519] [client 34.50.189.51:57040] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "discocollective.kriveloff-associates.com"] [uri "/static../proc/self/environ"] [unique_id "apK-UGjCPtor9NZ-byTuTwAABls"]
[Sat Aug 29 05:11:12.576583 2026] [security2:error] [pid 1321:tid 1523] [client 20.63.219.114:19962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/global.php"] [unique_id "apK-UGjCPtor9NZ-byTuUAAABl8"]
[Sat Aug 29 05:11:12.580739 2026] [security2:error] [pid 11274:tid 11494] [client 45.148.10.62:59298] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.zbv.tvp.mybluehost.me"] [uri "/.env"] [unique_id "apK-UGbX5DA3XO6e_qQwbwAAATs"]
[Sat Aug 29 05:11:12.590200 2026] [security2:error] [pid 1321:tid 1492] [client 34.50.189.51:57252] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "discocollective.kriveloff-associates.com"] [uri "/static../proc/self/environ"] [unique_id "apK-UGjCPtor9NZ-byTuUQAABkA"]
[Sat Aug 29 05:11:12.592072 2026] [security2:error] [pid 1321:tid 1537] [client 20.48.250.41:27593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/ff1.php"] [unique_id "apK-UGjCPtor9NZ-byTuUgAABm0"]
[Sat Aug 29 05:11:12.595209 2026] [security2:error] [pid 1321:tid 1602] [client 45.148.10.62:59284] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.zbf.rru.mybluehost.me"] [uri "/.env.bak"] [unique_id "apK-UGjCPtor9NZ-byTuUwAABq0"]
[Sat Aug 29 05:11:12.597536 2026] [security2:error] [pid 11274:tid 11523] [client 52.139.37.240:60889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.advancedbehaviorsolutions.com"] [uri "/upfile.php"] [unique_id "apK-UGbX5DA3XO6e_qQwcAAAAVg"]
[Sat Aug 29 05:11:12.603800 2026] [security2:error] [pid 1321:tid 1500] [client 34.50.189.51:57144] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "discocollective.kriveloff-associates.com"] [uri "/static../proc/self/environ"] [unique_id "apK-UGjCPtor9NZ-byTuVAAABkg"]
[Sat Aug 29 05:11:12.617832 2026] [security2:error] [pid 1321:tid 1574] [client 34.50.189.51:57006] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "discocollective.kriveloff-associates.com"] [uri "/static../proc/self/environ"] [unique_id "apK-UGjCPtor9NZ-byTuVwAABpE"]
[Sat Aug 29 05:11:12.619928 2026] [security2:error] [pid 11274:tid 11501] [client 52.139.37.240:36733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/akcc.php"] [unique_id "apK-UGbX5DA3XO6e_qQwcwAAAUI"]
[Sat Aug 29 05:11:12.621983 2026] [cgid:error] [pid 11274:tid 11364] [remote 34.138.144.127:43530] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml, referer: https://www.studiopasa.com
[Sat Aug 29 05:11:12.623210 2026] [security2:error] [pid 11274:tid 11501] [client 158.23.147.79:24546] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/1.php"] [unique_id "apK-UGbX5DA3XO6e_qQwdQAAAUI"]
[Sat Aug 29 05:11:12.623306 2026] [security2:error] [pid 11274:tid 11501] [client 158.23.147.79:24546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/1.php"] [unique_id "apK-UGbX5DA3XO6e_qQwdQAAAUI"]
[Sat Aug 29 05:11:12.623954 2026] [security2:error] [pid 11274:tid 11499] [client 20.240.128.207:11314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-content.php"] [unique_id "apK-UGbX5DA3XO6e_qQwdgAAAUA"]
[Sat Aug 29 05:11:12.625004 2026] [security2:error] [pid 1321:tid 1581] [client 20.100.175.163:25170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/admin/function.php"] [unique_id "apK-UGjCPtor9NZ-byTuWAAABpg"]
[Sat Aug 29 05:11:12.631031 2026] [security2:error] [pid 11274:tid 11481] [client 34.50.189.51:57180] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "discocollective.kriveloff-associates.com"] [uri "/static../proc/self/environ"] [unique_id "apK-UGbX5DA3XO6e_qQwdwAAAS4"]
[Sat Aug 29 05:11:12.644429 2026] [security2:error] [pid 11274:tid 11554] [client 34.50.189.51:57304] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "discocollective.kriveloff-associates.com"] [uri "/static../proc/self/environ"] [unique_id "apK-UGbX5DA3XO6e_qQwewAAAXY"]
[Sat Aug 29 05:11:12.656324 2026] [security2:error] [pid 1321:tid 1547] [client 20.48.250.41:42947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/bolt.php"] [unique_id "apK-UGjCPtor9NZ-byTuWgAABnY"]
[Sat Aug 29 05:11:12.657860 2026] [security2:error] [pid 11274:tid 11471] [client 34.50.189.51:57212] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "discocollective.kriveloff-associates.com"] [uri "/static../proc/self/environ"] [unique_id "apK-UGbX5DA3XO6e_qQwfwAAASU"]
[Sat Aug 29 05:11:12.657884 2026] [security2:error] [pid 11274:tid 11561] [client 20.52.41.200:2823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "apK-UGbX5DA3XO6e_qQwfgAAAX0"]
[Sat Aug 29 05:11:12.660077 2026] [autoindex:error] [pid 1321:tid 1466] [remote 45.148.10.62:59306] AH01276: Cannot serve directory /home3/zaiemfmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:11:12.664698 2026] [security2:error] [pid 11274:tid 11444] [client 195.178.110.247:47644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ottnoagent.roycehomesales.com"] [uri "/index.php"] [unique_id "apK-UGbX5DA3XO6e_qQwgQAAAQo"]
[Sat Aug 29 05:11:12.671124 2026] [security2:error] [pid 11274:tid 11571] [client 158.158.54.35:8461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/x.php"] [unique_id "apK-UGbX5DA3XO6e_qQwggAAAYc"]
[Sat Aug 29 05:11:12.671462 2026] [security2:error] [pid 1321:tid 1489] [client 158.23.184.117:7915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/wp-includes/Text.php"] [unique_id "apK-UGjCPtor9NZ-byTuXAAABj0"]
[Sat Aug 29 05:11:12.671477 2026] [security2:error] [pid 11274:tid 11483] [client 34.50.189.51:57272] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "discocollective.kriveloff-associates.com"] [uri "/static../proc/self/environ"] [unique_id "apK-UGbX5DA3XO6e_qQwgwAAATA"]
[Sat Aug 29 05:11:12.685218 2026] [security2:error] [pid 11274:tid 11495] [client 34.50.189.51:57018] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "discocollective.kriveloff-associates.com"] [uri "/static../proc/self/environ"] [unique_id "apK-UGbX5DA3XO6e_qQwhgAAATw"]
[Sat Aug 29 05:11:12.691349 2026] [security2:error] [pid 11274:tid 11454] [client 20.48.160.90:65299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/wp-content/l.php"] [unique_id "apK-UGbX5DA3XO6e_qQwiAAAARQ"]
[Sat Aug 29 05:11:12.697197 2026] [security2:error] [pid 11274:tid 11450] [client 20.48.160.90:51865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/wp-safe.php"] [unique_id "apK-UGbX5DA3XO6e_qQwigAAARA"]
[Sat Aug 29 05:11:12.699218 2026] [security2:error] [pid 11274:tid 11540] [client 34.50.189.51:57060] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "discocollective.kriveloff-associates.com"] [uri "/static../proc/self/environ"] [unique_id "apK-UGbX5DA3XO6e_qQwiwAAAWk"]
[Sat Aug 29 05:11:12.712401 2026] [security2:error] [pid 11274:tid 11572] [client 34.50.189.51:57278] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "discocollective.kriveloff-associates.com"] [uri "/static../proc/self/environ"] [unique_id "apK-UGbX5DA3XO6e_qQwjQAAAYg"]
[Sat Aug 29 05:11:12.738685 2026] [security2:error] [pid 11274:tid 11546] [client 138.199.19.170:60772] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.fanlebrity.com"] [uri "/autodiscover/autodiscover.xml/blog/wp-includes/wlwmanifest.xml"] [unique_id "apK-UGbX5DA3XO6e_qQwkQAAAW4"]
[Sat Aug 29 05:11:12.745787 2026] [security2:error] [pid 11274:tid 11516] [client 52.139.37.240:16472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/xxx.php"] [unique_id "apK-UGbX5DA3XO6e_qQwkgAAAVE"]
[Sat Aug 29 05:11:12.750721 2026] [security2:error] [pid 11274:tid 11473] [client 68.155.159.216:30464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK-UGbX5DA3XO6e_qQwlAAAASc"]
[Sat Aug 29 05:11:12.752537 2026] [security2:error] [pid 11274:tid 11445] [client 4.205.62.107:62918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/wsws.php"] [unique_id "apK-UGbX5DA3XO6e_qQwlQAAAQs"]
[Sat Aug 29 05:11:12.755607 2026] [security2:error] [pid 11274:tid 11560] [client 34.50.189.51:57320] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "discocollective.kriveloff-associates.com"] [uri "/static../proc/self/environ"] [unique_id "apK-UGbX5DA3XO6e_qQwlgAAAXw"]
[Sat Aug 29 05:11:12.781433 2026] [security2:error] [pid 1321:tid 1510] [client 20.52.41.200:4755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/php8.php"] [unique_id "apK-UGjCPtor9NZ-byTuXgAABlI"]
[Sat Aug 29 05:11:12.787613 2026] [security2:error] [pid 1321:tid 1502] [client 4.205.62.107:4982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/25.php"] [unique_id "apK-UGjCPtor9NZ-byTuXwAABko"]
[Sat Aug 29 05:11:12.788924 2026] [cgid:error] [pid 11274:tid 11370] [remote 34.138.144.127:43530] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:12.788923 2026] [cgid:error] [pid 11274:tid 11384] [remote 34.138.144.127:43530] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:12.793689 2026] [security2:error] [pid 11274:tid 11490] [client 52.139.37.240:8019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.advancedbehaviorsolutions.com"] [uri "/form.php"] [unique_id "apK-UGbX5DA3XO6e_qQwmwAAATc"]
[Sat Aug 29 05:11:12.800368 2026] [security2:error] [pid 11274:tid 11470] [client 20.48.250.41:42905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/rtx.php"] [unique_id "apK-UGbX5DA3XO6e_qQwnAAAASQ"]
[Sat Aug 29 05:11:12.802127 2026] [security2:error] [pid 1321:tid 1577] [client 20.104.49.130:63543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.timportlock.net"] [uri "/coffexium.php"] [unique_id "apK-UGjCPtor9NZ-byTuYAAABpQ"]
[Sat Aug 29 05:11:12.818837 2026] [security2:error] [pid 11274:tid 11466] [client 158.23.184.117:7392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/wp-trackback.php"] [unique_id "apK-UGbX5DA3XO6e_qQwngAAASA"]
[Sat Aug 29 05:11:12.818858 2026] [security2:error] [pid 11274:tid 11569] [client 52.139.37.240:36849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK-UGbX5DA3XO6e_qQwnQAAAYU"]
[Sat Aug 29 05:11:12.819149 2026] [security2:error] [pid 1321:tid 1545] [client 158.158.54.35:12381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/root.php"] [unique_id "apK-UGjCPtor9NZ-byTuYgAABnU"]
[Sat Aug 29 05:11:12.827403 2026] [security2:error] [pid 11274:tid 11518] [client 20.48.160.90:65342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/wp-admin/w.php"] [unique_id "apK-UGbX5DA3XO6e_qQwnwAAAVM"]
[Sat Aug 29 05:11:12.829779 2026] [security2:error] [pid 1321:tid 1584] [client 20.48.160.90:28110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/gjewuagf.php"] [unique_id "apK-UGjCPtor9NZ-byTuYwAABps"]
[Sat Aug 29 05:11:12.857740 2026] [security2:error] [pid 11274:tid 11536] [client 20.196.209.81:16201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/alfa-rex1.php"] [unique_id "apK-UGbX5DA3XO6e_qQwoQAAAWU"]
[Sat Aug 29 05:11:12.878864 2026] [security2:error] [pid 1321:tid 1593] [client 20.151.200.44:64030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/gaje.php"] [unique_id "apK-UGjCPtor9NZ-byTuZAAABqQ"]
[Sat Aug 29 05:11:12.897249 2026] [autoindex:error] [pid 11274:tid 11508] [client 45.148.10.62:59298] AH01276: Cannot serve directory /home3/zbvtvpmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:11:12.902204 2026] [security2:error] [pid 11274:tid 11496] [client 20.100.175.163:20037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/lite.php"] [unique_id "apK-UGbX5DA3XO6e_qQwqQAAAT0"]
[Sat Aug 29 05:11:12.943857 2026] [security2:error] [pid 11274:tid 11475] [client 20.48.250.41:49552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/ckk.php"] [unique_id "apK-UGbX5DA3XO6e_qQwrAAAASk"]
[Sat Aug 29 05:11:12.947948 2026] [security2:error] [pid 1321:tid 1521] [client 52.139.37.240:16761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/0x.php"] [unique_id "apK-UGjCPtor9NZ-byTuZgAABl0"]
[Sat Aug 29 05:11:12.950242 2026] [security2:error] [pid 1321:tid 1522] [client 68.155.159.216:63748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK-UGjCPtor9NZ-byTuZwAABl4"]
[Sat Aug 29 05:11:12.955824 2026] [security2:error] [pid 1321:tid 1608] [client 20.48.160.90:63325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/wp-content/k.php"] [unique_id "apK-UGjCPtor9NZ-byTuaAAABrM"]
[Sat Aug 29 05:11:12.962680 2026] [security2:error] [pid 11274:tid 11512] [client 20.63.219.114:19152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/update.php"] [unique_id "apK-UGbX5DA3XO6e_qQwsAAAAU0"]
[Sat Aug 29 05:11:12.969420 2026] [security2:error] [pid 1321:tid 1509] [client 158.23.184.117:7184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/wp-admin/maint.php"] [unique_id "apK-UGjCPtor9NZ-byTuaQAABlE"]
[Sat Aug 29 05:11:12.978964 2026] [security2:error] [pid 1321:tid 1536] [client 158.158.54.35:1410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/m.php"] [unique_id "apK-UGjCPtor9NZ-byTuawAABmw"]
[Sat Aug 29 05:11:12.991287 2026] [security2:error] [pid 11274:tid 11549] [client 68.155.159.216:14242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK-UGbX5DA3XO6e_qQwsQAAAXE"]
[Sat Aug 29 05:11:12.993255 2026] [security2:error] [pid 11274:tid 11570] [client 52.139.37.240:7400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.advancedbehaviorsolutions.com"] [uri "/wp-sigunq.php"] [unique_id "apK-UGbX5DA3XO6e_qQwsgAAAYY"]
[Sat Aug 29 05:11:13.013709 2026] [security2:error] [pid 11274:tid 11492] [client 195.178.110.247:40254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mandjcleaningga.com"] [uri "/index.php"] [unique_id "apK-UWbX5DA3XO6e_qQwswAAATk"]
[Sat Aug 29 05:11:13.019070 2026] [security2:error] [pid 11274:tid 11507] [client 4.205.62.107:64192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/radio.php"] [unique_id "apK-UWbX5DA3XO6e_qQwtQAAAUg"]
[Sat Aug 29 05:11:13.019759 2026] [security2:error] [pid 11274:tid 11544] [client 20.48.160.90:28051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/tnglzqmv.php"] [unique_id "apK-UWbX5DA3XO6e_qQwtgAAAWw"]
[Sat Aug 29 05:11:13.020458 2026] [security2:error] [pid 1321:tid 1550] [client 52.139.37.240:35872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/s.php"] [unique_id "apK-UWjCPtor9NZ-byTubwAABnk"]
[Sat Aug 29 05:11:13.036214 2026] [security2:error] [pid 1321:tid 1553] [client 4.205.62.107:60312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/333.php"] [unique_id "apK-UWjCPtor9NZ-byTucAAABnw"]
[Sat Aug 29 05:11:13.040656 2026] [security2:error] [pid 1321:tid 1604] [client 45.148.10.62:59284] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.zbf.rru.mybluehost.me"] [uri "/stripe/.env"] [unique_id "apK-UWjCPtor9NZ-byTucQAABq8"]
[Sat Aug 29 05:11:13.084461 2026] [cgid:error] [pid 11274:tid 11408] [remote 34.138.144.127:43530] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:13.085187 2026] [cgid:error] [pid 11274:tid 11411] [remote 34.138.144.127:43530] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:13.086867 2026] [cgid:error] [pid 11274:tid 11399] [remote 34.138.144.127:43530] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:13.093410 2026] [security2:error] [pid 11274:tid 11483] [client 20.48.250.41:42976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rubytruly.com"] [uri "/R57.php"] [unique_id "apK-UWbX5DA3XO6e_qQwwwAAATA"]
[Sat Aug 29 05:11:13.111887 2026] [security2:error] [pid 11274:tid 11487] [client 158.158.54.35:14908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/new.php"] [unique_id "apK-UWbX5DA3XO6e_qQwxAAAATQ"]
[Sat Aug 29 05:11:13.118024 2026] [security2:error] [pid 1321:tid 1515] [client 20.52.41.200:2660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/upload.php"] [unique_id "apK-UWjCPtor9NZ-byTucwAABlc"]
[Sat Aug 29 05:11:13.127144 2026] [security2:error] [pid 1321:tid 1389] [remote 45.148.10.62:59306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zai.emf.mybluehost.me"] [uri "/wp-login.php"] [unique_id "apK-UWjCPtor9NZ-byTudAAGqx8"]
[Sat Aug 29 05:11:13.127454 2026] [security2:error] [pid 1321:tid 1589] [client 20.100.175.163:33717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/admin/index.php"] [unique_id "apK-UWjCPtor9NZ-byTudQAABqA"]
[Sat Aug 29 05:11:13.131782 2026] [security2:error] [pid 11274:tid 11564] [client 20.240.128.207:23232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "apK-UWbX5DA3XO6e_qQwyAAAAYA"]
[Sat Aug 29 05:11:13.138925 2026] [ssl:error] [pid 1321:tid 1613] [client 35.84.25.161:57974] AH02031: Hostname gavirestaurant.com provided via SNI, but no hostname provided in HTTP request
[Sat Aug 29 05:11:13.141017 2026] [security2:error] [pid 11274:tid 11444] [client 158.23.184.117:7421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/wp-includes/num.php"] [unique_id "apK-UWbX5DA3XO6e_qQwygAAAQo"]
[Sat Aug 29 05:11:13.154527 2026] [security2:error] [pid 11274:tid 11571] [client 52.139.37.240:16489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/CDX1.php"] [unique_id "apK-UWbX5DA3XO6e_qQwzQAAAYc"]
[Sat Aug 29 05:11:13.170692 2026] [security2:error] [pid 1321:tid 1555] [client 20.48.160.90:62123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/os.php"] [unique_id "apK-UWjCPtor9NZ-byTudwAABn4"]
[Sat Aug 29 05:11:13.171064 2026] [security2:error] [pid 11274:tid 11566] [client 195.178.110.247:47650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mandjcleaningga.com"] [uri "/index.php"] [unique_id "apK-UWbX5DA3XO6e_qQwzgAAAYI"]
[Sat Aug 29 05:11:13.194810 2026] [security2:error] [pid 1321:tid 1587] [client 52.139.37.240:8033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.advancedbehaviorsolutions.com"] [uri "/07.php"] [unique_id "apK-UWjCPtor9NZ-byTueQAABp4"]
[Sat Aug 29 05:11:13.200884 2026] [security2:error] [pid 11274:tid 11546] [client 45.148.10.62:59298] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.zbv.tvp.mybluehost.me"] [uri "/api/.env"] [unique_id "apK-UWbX5DA3XO6e_qQw0gAAAW4"]
[Sat Aug 29 05:11:13.204784 2026] [security2:error] [pid 1321:tid 1559] [client 68.155.159.216:62720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK-UWjCPtor9NZ-byTuegAABoI"]
[Sat Aug 29 05:11:13.216288 2026] [security2:error] [pid 1321:tid 1490] [client 68.155.159.216:21452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK-UWjCPtor9NZ-byTuewAABj4"]
[Sat Aug 29 05:11:13.216871 2026] [security2:error] [pid 1321:tid 1527] [client 52.139.37.240:35878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/sagax.php"] [unique_id "apK-UWjCPtor9NZ-byTufAAABmM"]
[Sat Aug 29 05:11:13.236377 2026] [security2:error] [pid 11274:tid 11490] [client 20.48.160.90:28054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/wefile.php"] [unique_id "apK-UWbX5DA3XO6e_qQw1wAAATc"]
[Sat Aug 29 05:11:13.244954 2026] [security2:error] [pid 1321:tid 1526] [client 20.104.18.15:15141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/run.php"] [unique_id "apK-UWjCPtor9NZ-byTufwAABmI"]
[Sat Aug 29 05:11:13.254375 2026] [security2:error] [pid 1321:tid 1573] [client 68.155.159.216:61265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK-UWjCPtor9NZ-byTugAAABpA"]
[Sat Aug 29 05:11:13.254729 2026] [security2:error] [pid 11274:tid 11497] [client 20.196.209.81:16729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/headerg.php"] [unique_id "apK-UWbX5DA3XO6e_qQw2gAAAT4"]
[Sat Aug 29 05:11:13.275562 2026] [security2:error] [pid 11274:tid 11495] [client 158.158.54.35:29099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/p.php"] [unique_id "apK-UWbX5DA3XO6e_qQw3QAAATw"]
[Sat Aug 29 05:11:13.289211 2026] [security2:error] [pid 11274:tid 11456] [client 158.23.184.117:7888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/identity.php"] [unique_id "apK-UWbX5DA3XO6e_qQw4AAAARY"]
[Sat Aug 29 05:11:13.302451 2026] [security2:error] [pid 11274:tid 11463] [client 158.23.147.79:38731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/mah.php"] [unique_id "apK-UWbX5DA3XO6e_qQw4gAAAR0"]
[Sat Aug 29 05:11:13.306198 2026] [cgid:error] [pid 11274:tid 11406] [remote 34.138.144.127:43530] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:13.315434 2026] [security2:error] [pid 11274:tid 11558] [client 4.205.62.107:63881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/gecko-litespeed.php"] [unique_id "apK-UWbX5DA3XO6e_qQw5AAAAXo"]
[Sat Aug 29 05:11:13.326561 2026] [security2:error] [pid 11274:tid 11466] [client 20.104.18.15:44021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/h2.php"] [unique_id "apK-UWbX5DA3XO6e_qQw5gAAASA"]
[Sat Aug 29 05:11:13.328243 2026] [security2:error] [pid 11274:tid 11445] [client 20.63.219.114:10331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/blog.php"] [unique_id "apK-UWbX5DA3XO6e_qQw5wAAAQs"]
[Sat Aug 29 05:11:13.351680 2026] [security2:error] [pid 1321:tid 1497] [client 91.92.42.30:55478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "s212.net"] [uri "/settings.php"] [unique_id "apK-UWjCPtor9NZ-byTuhAAABkU"]
[Sat Aug 29 05:11:13.352536 2026] [security2:error] [pid 1321:tid 1504] [client 52.139.37.240:16719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/akcc.php"] [unique_id "apK-UWjCPtor9NZ-byTuhQAABkw"]
[Sat Aug 29 05:11:13.353796 2026] [security2:error] [pid 11274:tid 11482] [client 45.148.10.62:59298] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.zbv.tvp.mybluehost.me"] [uri "/.env.bak"] [unique_id "apK-UWbX5DA3XO6e_qQw6AAAAS8"]
[Sat Aug 29 05:11:13.356502 2026] [security2:error] [pid 11274:tid 11488] [client 68.155.159.216:33621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/nf_tracking.php"] [unique_id "apK-UWbX5DA3XO6e_qQw6QAAATU"]
[Sat Aug 29 05:11:13.376298 2026] [security2:error] [pid 11274:tid 11403] [remote 93.123.109.228:39990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/.wp-config.php.swp"] [unique_id "apK-UWbX5DA3XO6e_qQw7QABQFk"]
[Sat Aug 29 05:11:13.379213 2026] [security2:error] [pid 1321:tid 1519] [client 20.48.160.90:28156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/blog.php"] [unique_id "apK-UWjCPtor9NZ-byTuhgAABls"]
[Sat Aug 29 05:11:13.395273 2026] [security2:error] [pid 11274:tid 11467] [client 103.185.242.143:61919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-UWbX5DA3XO6e_qQw7wAAASE"]
[Sat Aug 29 05:11:13.395461 2026] [security2:error] [pid 11274:tid 11467] [client 103.185.242.143:61919] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-UWbX5DA3XO6e_qQw7wAAASE"]
[Sat Aug 29 05:11:13.398001 2026] [cgid:error] [pid 11274:tid 11428] [remote 34.138.144.127:43530] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml, referer: https://www.studiopasa.com
[Sat Aug 29 05:11:13.402994 2026] [security2:error] [pid 11274:tid 11503] [client 20.100.175.163:14869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/term.php"] [unique_id "apK-UWbX5DA3XO6e_qQw8gAAAUQ"]
[Sat Aug 29 05:11:13.412953 2026] [security2:error] [pid 1321:tid 1582] [client 20.52.41.200:4750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/install.php"] [unique_id "apK-UWjCPtor9NZ-byTuhwAABpk"]
[Sat Aug 29 05:11:13.419739 2026] [security2:error] [pid 11274:tid 11461] [client 158.158.54.35:1475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "apK-UWbX5DA3XO6e_qQw9AAAARs"]
[Sat Aug 29 05:11:13.433761 2026] [security2:error] [pid 11274:tid 11524] [client 138.199.19.170:60780] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.fanlebrity.com"] [uri "/autodiscover/autodiscover.xml/web/wp-includes/wlwmanifest.xml"] [unique_id "apK-UWbX5DA3XO6e_qQw9gAAAVk"]
[Sat Aug 29 05:11:13.457901 2026] [security2:error] [pid 11274:tid 11512] [client 4.205.62.107:6482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/motu.php"] [unique_id "apK-UWbX5DA3XO6e_qQw-QAAAU0"]
[Sat Aug 29 05:11:13.457901 2026] [security2:error] [pid 1321:tid 1602] [client 68.155.159.216:64124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apK-UWjCPtor9NZ-byTuiQAABq0"]
[Sat Aug 29 05:11:13.464950 2026] [security2:error] [pid 11274:tid 11412] [remote 34.138.144.127:43530] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "www.studiopasa.com"] [uri "/static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ"] [unique_id "apK-UWbX5DA3XO6e_qQw-gABTGI"]
[Sat Aug 29 05:11:13.472385 2026] [proxy_http:error] [pid 1018003:tid 1018237] (70007)The timeout specified has expired: [client 127.0.0.1:11138] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:11:13.472408 2026] [proxy:error] [pid 1018003:tid 1018237] [client 127.0.0.1:11138] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:11:13.495598 2026] [security2:error] [pid 11274:tid 11525] [client 158.23.184.117:7930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/Radio.php"] [unique_id "apK-UWbX5DA3XO6e_qQw_QAAAVo"]
[Sat Aug 29 05:11:13.497768 2026] [security2:error] [pid 1321:tid 1581] [client 52.139.37.240:35858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/wp-content/plugins/ftde.php"] [unique_id "apK-UWjCPtor9NZ-byTuiwAABpg"]
[Sat Aug 29 05:11:13.501379 2026] [proxy_http:error] [pid 1018003:tid 1018110] (70007)The timeout specified has expired: [remote 57.141.14.67:61602] AH01102: error reading status line from remote server 127.0.0.1:8443
[Sat Aug 29 05:11:13.501395 2026] [proxy:error] [pid 1018003:tid 1018110] [remote 57.141.14.67:61602] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:11:13.517915 2026] [security2:error] [pid 11274:tid 11570] [client 20.48.160.90:62120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/htio.php"] [unique_id "apK-UWbX5DA3XO6e_qQw_wAAAYY"]
[Sat Aug 29 05:11:13.532142 2026] [security2:error] [pid 1321:tid 1611] [client 20.48.160.90:28118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/wp-admin/js/wp-load.php"] [unique_id "apK-UWjCPtor9NZ-byTujAAABrY"]
[Sat Aug 29 05:11:13.533400 2026] [proxy_http:error] [pid 1034096:tid 1034279] (70007)The timeout specified has expired: [client 127.0.0.1:52782] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:11:13.533426 2026] [proxy:error] [pid 1034096:tid 1034279] [client 127.0.0.1:52782] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:11:13.552091 2026] [security2:error] [pid 1321:tid 1507] [client 52.139.37.240:16922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK-UWjCPtor9NZ-byTujgAABk8"]
[Sat Aug 29 05:11:13.567894 2026] [security2:error] [pid 1321:tid 1541] [client 158.158.54.35:10175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/menu.php"] [unique_id "apK-UWjCPtor9NZ-byTujwAABnE"]
[Sat Aug 29 05:11:13.582061 2026] [core:error] [pid 1321:tid 1612] [client 20.52.41.200:2634] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:13.582081 2026] [core:error] [pid 1321:tid 1612] [client 20.52.41.200:2634] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:13.585216 2026] [security2:error] [pid 11274:tid 11563] [client 158.23.147.79:39302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/radio.php"] [unique_id "apK-UWbX5DA3XO6e_qQxBwAAAX8"]
[Sat Aug 29 05:11:13.590899 2026] [security2:error] [pid 11274:tid 11448] [client 158.23.147.79:52309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/themes.php"] [unique_id "apK-UWbX5DA3XO6e_qQxCQAAAQ4"]
[Sat Aug 29 05:11:13.639791 2026] [security2:error] [pid 1321:tid 1545] [client 45.148.10.62:59284] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.zbf.rru.mybluehost.me"] [uri "/backend/.env"] [unique_id "apK-UWjCPtor9NZ-byTukgAABnU"]
[Sat Aug 29 05:11:13.644348 2026] [security2:error] [pid 1321:tid 1500] [client 20.240.128.207:19976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/css/wp-login.php"] [unique_id "apK-UWjCPtor9NZ-byTukwAABkg"]
[Sat Aug 29 05:11:13.654416 2026] [security2:error] [pid 1321:tid 1543] [client 20.100.175.163:7999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/storage/rip.php"] [unique_id "apK-UWjCPtor9NZ-byTulQAABnM"]
[Sat Aug 29 05:11:13.655035 2026] [security2:error] [pid 1321:tid 1539] [client 20.196.209.81:16214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/meta.php"] [unique_id "apK-UWjCPtor9NZ-byTulgAABm8"]
[Sat Aug 29 05:11:13.657786 2026] [security2:error] [pid 1321:tid 1513] [client 68.155.159.216:1979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-content/x/index.php"] [unique_id "apK-UWjCPtor9NZ-byTulwAABlU"]
[Sat Aug 29 05:11:13.658976 2026] [security2:error] [pid 1321:tid 1552] [client 68.155.159.216:23534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/index/function.php"] [unique_id "apK-UWjCPtor9NZ-byTumQAABns"]
[Sat Aug 29 05:11:13.659008 2026] [security2:error] [pid 1321:tid 1533] [client 158.23.147.79:49843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-UWjCPtor9NZ-byTumAAABmk"]
[Sat Aug 29 05:11:13.680615 2026] [security2:error] [pid 11274:tid 11526] [client 158.23.147.79:54011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK-UWbX5DA3XO6e_qQxEwAAAVs"]
[Sat Aug 29 05:11:13.693666 2026] [security2:error] [pid 11274:tid 11568] [client 52.139.37.240:36716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "apK-UWbX5DA3XO6e_qQxFgAAAYQ"]
[Sat Aug 29 05:11:13.708147 2026] [security2:error] [pid 11274:tid 11500] [client 216.51.171.83:55228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 83.171.51.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-UWbX5DA3XO6e_qQxFwAAAUE"]
[Sat Aug 29 05:11:13.708293 2026] [security2:error] [pid 11274:tid 11500] [client 216.51.171.83:55228] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-UWbX5DA3XO6e_qQxFwAAAUE"]
[Sat Aug 29 05:11:13.710480 2026] [security2:error] [pid 1321:tid 1521] [client 158.23.184.117:7170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/wp-includes/Requests/Exception/file.php"] [unique_id "apK-UWjCPtor9NZ-byTumwAABl0"]
[Sat Aug 29 05:11:13.724451 2026] [security2:error] [pid 11274:tid 11554] [client 20.104.49.130:53732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "connectdotz.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-UWbX5DA3XO6e_qQxGgAAAXY"]
[Sat Aug 29 05:11:13.727391 2026] [security2:error] [pid 11274:tid 11516] [client 158.158.54.35:33212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/a1.php"] [unique_id "apK-UWbX5DA3XO6e_qQxHAAAAVE"]
[Sat Aug 29 05:11:13.727488 2026] [security2:error] [pid 11274:tid 11493] [client 68.155.159.216:38272] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcontacts.mgbeats.com"] [uri "/1.php"] [unique_id "apK-UWbX5DA3XO6e_qQxHQAAATo"]
[Sat Aug 29 05:11:13.727561 2026] [security2:error] [pid 11274:tid 11493] [client 68.155.159.216:38272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/1.php"] [unique_id "apK-UWbX5DA3XO6e_qQxHQAAATo"]
[Sat Aug 29 05:11:13.747155 2026] [security2:error] [pid 1321:tid 1567] [client 117.240.152.41:33387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.152.240.117.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "midayscience.com"] [uri "/xmlrpc.php"] [unique_id "apK-UWjCPtor9NZ-byTunAAABoo"]
[Sat Aug 29 05:11:13.747292 2026] [security2:error] [pid 1321:tid 1567] [client 117.240.152.41:33387] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "midayscience.com"] [uri "/xmlrpc.php"] [unique_id "apK-UWjCPtor9NZ-byTunAAABoo"]
[Sat Aug 29 05:11:13.749200 2026] [security2:error] [pid 1321:tid 1603] [client 20.48.160.90:51871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/robot.php"] [unique_id "apK-UWjCPtor9NZ-byTunQAABq4"]
[Sat Aug 29 05:11:13.750047 2026] [security2:error] [pid 11274:tid 11527] [client 52.139.37.240:16716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/s.php"] [unique_id "apK-UWbX5DA3XO6e_qQxIQAAAVw"]
[Sat Aug 29 05:11:13.767662 2026] [security2:error] [pid 1321:tid 1399] [remote 66.198.240.48:41666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 48.240.198.66.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "docpepper.com"] [uri "/wp-login.php"] [unique_id "apK-UWjCPtor9NZ-byTungAGoSk"]
[Sat Aug 29 05:11:13.777962 2026] [security2:error] [pid 1321:tid 1561] [client 20.151.200.44:22228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/msy.php"] [unique_id "apK-UWjCPtor9NZ-byTunwAABoQ"]
[Sat Aug 29 05:11:13.784917 2026] [security2:error] [pid 1321:tid 1606] [client 45.148.10.62:59284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zbf.rru.mybluehost.me"] [uri "/test.php"] [unique_id "apK-UWjCPtor9NZ-byTuoQAABrE"]
[Sat Aug 29 05:11:13.792337 2026] [security2:error] [pid 1321:tid 1584] [client 20.63.219.114:10326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/bypass.php"] [unique_id "apK-UWjCPtor9NZ-byTuowAABps"]
[Sat Aug 29 05:11:13.796174 2026] [security2:error] [pid 1321:tid 1595] [client 20.48.160.90:62191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/dev.php"] [unique_id "apK-UWjCPtor9NZ-byTupAAABqY"]
[Sat Aug 29 05:11:13.820932 2026] [security2:error] [pid 11274:tid 11571] [client 45.148.10.62:59298] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.zbv.tvp.mybluehost.me"] [uri "/stripe/.env"] [unique_id "apK-UWbX5DA3XO6e_qQxKgAAAYc"]
[Sat Aug 29 05:11:13.850053 2026] [security2:error] [pid 1321:tid 1535] [client 158.158.54.35:1285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/222.php"] [unique_id "apK-UWjCPtor9NZ-byTurwAABms"]
[Sat Aug 29 05:11:13.855417 2026] [security2:error] [pid 1321:tid 1556] [client 20.104.104.62:47553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/gator.php"] [unique_id "apK-UWjCPtor9NZ-byTusAAABn8"]
[Sat Aug 29 05:11:13.868911 2026] [security2:error] [pid 11274:tid 11494] [client 20.52.41.200:4649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/ioxi-o.php"] [unique_id "apK-UWbX5DA3XO6e_qQxRgAAATs"]
[Sat Aug 29 05:11:13.901860 2026] [security2:error] [pid 1321:tid 1607] [client 20.100.175.163:4228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/config.php"] [unique_id "apK-UWjCPtor9NZ-byTuuAAABrI"]
[Sat Aug 29 05:11:13.921875 2026] [security2:error] [pid 11274:tid 11566] [client 158.23.184.117:7472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/wp-admin/add.php"] [unique_id "apK-UWbX5DA3XO6e_qQxUQAAAYI"]
[Sat Aug 29 05:11:13.924186 2026] [security2:error] [pid 1321:tid 1542] [client 20.104.104.62:33911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.americanvarietyradio.net"] [uri "/pouhg.php"] [unique_id "apK-UWjCPtor9NZ-byTuuQAABnI"]
[Sat Aug 29 05:11:13.924815 2026] [security2:error] [pid 11274:tid 11524] [client 20.48.160.90:46486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/revo.php"] [unique_id "apK-UWbX5DA3XO6e_qQxUAAAAVk"]
[Sat Aug 29 05:11:13.929331 2026] [security2:error] [pid 11274:tid 11470] [client 68.155.159.216:30604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK-UWbX5DA3XO6e_qQxUwAAASQ"]
[Sat Aug 29 05:11:13.935084 2026] [security2:error] [pid 1321:tid 1594] [client 4.205.62.107:59082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/localconf.php"] [unique_id "apK-UWjCPtor9NZ-byTuuwAABqU"]
[Sat Aug 29 05:11:13.937822 2026] [security2:error] [pid 1321:tid 1396] [remote 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK-UWjCPtor9NZ-byTuugAGfCY"]
[Sat Aug 29 05:11:13.938070 2026] [security2:error] [pid 1321:tid 1553] [client 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK-UWjCPtor9NZ-byTuugAGfCY"]
[Sat Aug 29 05:11:13.942261 2026] [security2:error] [pid 1321:tid 1497] [client 4.205.62.107:51412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/public/vx.php"] [unique_id "apK-UWjCPtor9NZ-byTuvAAABkU"]
[Sat Aug 29 05:11:13.947557 2026] [security2:error] [pid 1321:tid 1504] [client 20.48.160.90:63348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/gos.php"] [unique_id "apK-UWjCPtor9NZ-byTuvQAABkw"]
[Sat Aug 29 05:11:13.949809 2026] [security2:error] [pid 11274:tid 11455] [client 52.139.37.240:16948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/sagax.php"] [unique_id "apK-UWbX5DA3XO6e_qQxVQAAARU"]
[Sat Aug 29 05:11:13.984867 2026] [security2:error] [pid 11274:tid 11522] [client 52.139.37.240:36859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/z.php"] [unique_id "apK-UWbX5DA3XO6e_qQxWgAAAVc"]
[Sat Aug 29 05:11:13.994697 2026] [security2:error] [pid 11274:tid 11350] [remote 93.123.109.228:39990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/_profiler/phpinfo.php"] [unique_id "apK-UWbX5DA3XO6e_qQxWwABQCU"]
[Sat Aug 29 05:11:14.000713 2026] [security2:error] [pid 11274:tid 11525] [client 20.104.104.62:52270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/Contrller.php"] [unique_id "apK-UWbX5DA3XO6e_qQxXAAAAVo"]
[Sat Aug 29 05:11:14.012917 2026] [security2:error] [pid 11274:tid 11549] [client 20.151.200.44:22155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/siln.php"] [unique_id "apK-UmbX5DA3XO6e_qQxXgAAAXE"]
[Sat Aug 29 05:11:14.019549 2026] [security2:error] [pid 11274:tid 11545] [client 158.158.54.35:29114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK-UmbX5DA3XO6e_qQxXwAAAW0"]
[Sat Aug 29 05:11:14.037083 2026] [core:error] [pid 1321:tid 1514] [client 20.52.41.200:2849] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:14.037101 2026] [core:error] [pid 1321:tid 1514] [client 20.52.41.200:2849] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:14.058393 2026] [security2:error] [pid 11274:tid 11459] [client 68.155.159.216:63758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK-UmbX5DA3XO6e_qQxYQAAARk"]
[Sat Aug 29 05:11:14.061963 2026] [proxy_http:error] [pid 1028675:tid 1028917] (70007)The timeout specified has expired: [client 158.23.184.117:56237] AH01102: error reading status line from remote server 127.0.0.1:8443
[Sat Aug 29 05:11:14.061988 2026] [proxy:error] [pid 1028675:tid 1028917] [client 158.23.184.117:56237] AH00898: Error reading from remote server returned by /
[Sat Aug 29 05:11:14.070643 2026] [security2:error] [pid 1321:tid 1592] [client 158.23.184.117:7376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/wp-includes/assets/about.php"] [unique_id "apK-UmjCPtor9NZ-byTuvwAABqM"]
[Sat Aug 29 05:11:14.073393 2026] [proxy_http:error] [pid 1034096:tid 1034334] (70007)The timeout specified has expired: [client 127.0.0.1:58626] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:11:14.073420 2026] [proxy:error] [pid 1034096:tid 1034334] [client 127.0.0.1:58626] AH00898: Error reading from remote server returned by /
[Sat Aug 29 05:11:14.078727 2026] [security2:error] [pid 1321:tid 1525] [client 40.83.93.50:6690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/post.php"] [unique_id "apK-UmjCPtor9NZ-byTuwAAABmE"]
[Sat Aug 29 05:11:14.087559 2026] [security2:error] [pid 11274:tid 11515] [client 138.199.19.170:60796] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.fanlebrity.com"] [uri "/autodiscover/autodiscover.xml/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "apK-UmbX5DA3XO6e_qQxagAAAVA"]
[Sat Aug 29 05:11:14.088531 2026] [cgid:error] [pid 11274:tid 11353] [remote 34.138.144.127:43542] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:14.089508 2026] [cgid:error] [pid 11274:tid 11356] [remote 34.138.144.127:43542] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:14.090679 2026] [cgid:error] [pid 11274:tid 11351] [remote 34.138.144.127:43542] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:14.090714 2026] [cgid:error] [pid 11274:tid 11352] [remote 34.138.144.127:43542] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:14.091933 2026] [cgid:error] [pid 11274:tid 11329] [remote 34.138.144.127:43542] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:14.092975 2026] [security2:error] [pid 1321:tid 1612] [client 20.48.160.90:51903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/birrs.php"] [unique_id "apK-UmjCPtor9NZ-byTuwwAABrc"]
[Sat Aug 29 05:11:14.098584 2026] [security2:error] [pid 1321:tid 1553] [client 20.196.209.81:15361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/dxc.php"] [unique_id "apK-UmjCPtor9NZ-byTuxQAABnw"]
[Sat Aug 29 05:11:14.098833 2026] [security2:error] [pid 11274:tid 11526] [client 34.79.30.146:60272] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "67.20.76.220"] [uri "/"] [unique_id "apK-UmbX5DA3XO6e_qQxbQAAAVs"]
[Sat Aug 29 05:11:14.120513 2026] [security2:error] [pid 11274:tid 11451] [client 20.104.104.62:34702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.americanvarietyradio.net"] [uri "/sbhu.php"] [unique_id "apK-UmbX5DA3XO6e_qQxeQAAARE"]
[Sat Aug 29 05:11:14.128096 2026] [security2:error] [pid 11274:tid 11546] [client 20.48.250.41:27604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/t.php"] [unique_id "apK-UmbX5DA3XO6e_qQxfQAAAW4"]
[Sat Aug 29 05:11:14.139963 2026] [security2:error] [pid 1321:tid 1595] [client 20.48.160.90:64229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/132.php"] [unique_id "apK-UmjCPtor9NZ-byTu2QAABqY"]
[Sat Aug 29 05:11:14.142440 2026] [security2:error] [pid 11274:tid 11512] [client 20.240.128.207:12747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/images/index.php"] [unique_id "apK-UmbX5DA3XO6e_qQxggAAAU0"]
[Sat Aug 29 05:11:14.155063 2026] [security2:error] [pid 11274:tid 11519] [client 4.205.62.107:64954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/xa.php"] [unique_id "apK-UmbX5DA3XO6e_qQxhAAAAVQ"]
[Sat Aug 29 05:11:14.164687 2026] [security2:error] [pid 1321:tid 1494] [client 103.48.146.148:51777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 148.146.48.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK-UmjCPtor9NZ-byTu2wAABkI"]
[Sat Aug 29 05:11:14.164815 2026] [security2:error] [pid 1321:tid 1494] [client 103.48.146.148:51777] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK-UmjCPtor9NZ-byTu2wAABkI"]
[Sat Aug 29 05:11:14.182671 2026] [security2:error] [pid 11274:tid 11565] [client 93.123.109.165:21496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "midayins.com"] [uri "/index.php"] [unique_id "apK-UmbX5DA3XO6e_qQxigAAAYE"], referer: https://midayins.com/wp-admin/
[Sat Aug 29 05:11:14.186460 2026] [security2:error] [pid 11274:tid 11504] [client 52.139.37.240:35848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/f35.php"] [unique_id "apK-UmbX5DA3XO6e_qQxiwAAAUU"]
[Sat Aug 29 05:11:14.187892 2026] [security2:error] [pid 1321:tid 1611] [client 20.63.219.114:19913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/extractable-loader-head.php"] [unique_id "apK-UmjCPtor9NZ-byTu3AAABrY"]
[Sat Aug 29 05:11:14.205894 2026] [security2:error] [pid 11274:tid 11530] [client 20.100.175.163:13795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/zoom1.php"] [unique_id "apK-UmbX5DA3XO6e_qQxkAAAAV8"]
[Sat Aug 29 05:11:14.208376 2026] [security2:error] [pid 11274:tid 11560] [client 4.205.62.107:60336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/G-in.php"] [unique_id "apK-UmbX5DA3XO6e_qQxkgAAAXw"]
[Sat Aug 29 05:11:14.209093 2026] [security2:error] [pid 11274:tid 11463] [client 20.104.104.62:16742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thepoetinnewyork.wanderlustpictures.com"] [uri "/abcd.php"] [unique_id "apK-UmbX5DA3XO6e_qQxkwAAAR0"]
[Sat Aug 29 05:11:14.213277 2026] [security2:error] [pid 11274:tid 11479] [client 158.158.54.35:23033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-UmbX5DA3XO6e_qQxlAAAASw"]
[Sat Aug 29 05:11:14.216081 2026] [security2:error] [pid 1321:tid 1555] [client 158.23.184.117:7385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/wp-content/themes/twentytwentythree.php"] [unique_id "apK-UmjCPtor9NZ-byTu3QAABn4"]
[Sat Aug 29 05:11:14.232182 2026] [security2:error] [pid 1321:tid 1490] [client 20.48.160.90:46591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/sss.php"] [unique_id "apK-UmjCPtor9NZ-byTu3gAABj4"]
[Sat Aug 29 05:11:14.247762 2026] [security2:error] [pid 1321:tid 1562] [client 180.190.5.40:50625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.5.190.180.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK-UmjCPtor9NZ-byTu3wAABoU"]
[Sat Aug 29 05:11:14.247905 2026] [security2:error] [pid 1321:tid 1562] [client 180.190.5.40:50625] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK-UmjCPtor9NZ-byTu3wAABoU"]
[Sat Aug 29 05:11:14.280516 2026] [security2:error] [pid 1321:tid 1568] [client 52.139.37.240:16496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/wp-content/plugins/ftde.php"] [unique_id "apK-UmjCPtor9NZ-byTu4AAABos"]
[Sat Aug 29 05:11:14.283588 2026] [security2:error] [pid 11274:tid 11523] [client 158.158.54.35:1663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/mini.php"] [unique_id "apK-UmbX5DA3XO6e_qQxmgAAAVg"]
[Sat Aug 29 05:11:14.306072 2026] [security2:error] [pid 11274:tid 11371] [remote 93.123.109.228:39990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/admin/phpinfo.php"] [unique_id "apK-UmbX5DA3XO6e_qQxngABQDk"]
[Sat Aug 29 05:11:14.311254 2026] [security2:error] [pid 11274:tid 11525] [client 68.155.159.216:62804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK-UmbX5DA3XO6e_qQxoAAAAVo"]
[Sat Aug 29 05:11:14.313336 2026] [security2:error] [pid 11274:tid 11488] [client 20.52.41.200:4746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/xmlrpc.php"] [unique_id "apK-UmbX5DA3XO6e_qQxoQAAATU"]
[Sat Aug 29 05:11:14.319819 2026] [security2:error] [pid 11274:tid 11559] [client 68.155.159.216:56813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK-UmbX5DA3XO6e_qQxpAAAAXs"]
[Sat Aug 29 05:11:14.327026 2026] [security2:error] [pid 11274:tid 11470] [client 20.104.104.62:33886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.americanvarietyradio.net"] [uri "/sf.php"] [unique_id "apK-UmbX5DA3XO6e_qQxpQAAASQ"]
[Sat Aug 29 05:11:14.332262 2026] [security2:error] [pid 11274:tid 11377] [remote 93.123.109.228:39990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/admin_phpinfo.php"] [unique_id "apK-UmbX5DA3XO6e_qQxpgABQD8"]
[Sat Aug 29 05:11:14.346256 2026] [security2:error] [pid 1321:tid 1613] [client 45.148.10.62:35324] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.zbf.rru.mybluehost.me"] [uri "/.env.backup"] [unique_id "apK-UmjCPtor9NZ-byTu4gAABrg"]
[Sat Aug 29 05:11:14.347969 2026] [security2:error] [pid 1321:tid 1599] [client 197.219.150.206:58815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK-UmjCPtor9NZ-byTu4QAABqo"]
[Sat Aug 29 05:11:14.348098 2026] [security2:error] [pid 1321:tid 1599] [client 197.219.150.206:58815] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK-UmjCPtor9NZ-byTu4QAABqo"]
[Sat Aug 29 05:11:14.361645 2026] [security2:error] [pid 1321:tid 1563] [client 68.155.159.216:61281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/log-mama/function.php"] [unique_id "apK-UmjCPtor9NZ-byTu4wAABoY"]
[Sat Aug 29 05:11:14.384157 2026] [security2:error] [pid 11274:tid 11469] [client 20.104.104.62:42053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/Zeiss.php"] [unique_id "apK-UmbX5DA3XO6e_qQxrAAAASM"]
[Sat Aug 29 05:11:14.384423 2026] [security2:error] [pid 11274:tid 11545] [client 52.139.37.240:36822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/file61.php"] [unique_id "apK-UmbX5DA3XO6e_qQxrQAAAW0"]
[Sat Aug 29 05:11:14.398243 2026] [security2:error] [pid 11274:tid 11461] [client 20.100.175.163:10058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK-UmbX5DA3XO6e_qQxsAAAARs"]
[Sat Aug 29 05:11:14.398937 2026] [security2:error] [pid 11274:tid 11569] [client 52.139.37.240:60898] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.advancedbehaviorsolutions.com"] [uri "/c99.php"] [unique_id "apK-UmbX5DA3XO6e_qQxsQAAAYU"]
[Sat Aug 29 05:11:14.402589 2026] [security2:error] [pid 11274:tid 11505] [client 20.104.104.62:17145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thepoetinnewyork.wanderlustpictures.com"] [uri "/index/function.php"] [unique_id "apK-UmbX5DA3XO6e_qQxsgAAAUY"]
[Sat Aug 29 05:11:14.406283 2026] [security2:error] [pid 1321:tid 1491] [client 20.48.160.90:63232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/v22.php"] [unique_id "apK-UmjCPtor9NZ-byTu5AAABj8"]
[Sat Aug 29 05:11:14.425156 2026] [security2:error] [pid 11274:tid 11571] [client 158.23.147.79:62616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-blog-header.php"] [unique_id "apK-UmbX5DA3XO6e_qQxtQAAAYc"]
[Sat Aug 29 05:11:14.425694 2026] [security2:error] [pid 11274:tid 11494] [client 158.23.184.117:7411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/wp-content/languages/themes/num.php"] [unique_id "apK-UmbX5DA3XO6e_qQxtgAAATs"]
[Sat Aug 29 05:11:14.439134 2026] [security2:error] [pid 11274:tid 11466] [client 45.148.10.62:59298] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.zbv.tvp.mybluehost.me"] [uri "/backend/.env"] [unique_id "apK-UmbX5DA3XO6e_qQxuAAAASA"]
[Sat Aug 29 05:11:14.451439 2026] [security2:error] [pid 11274:tid 11518] [client 20.104.104.62:47596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/mail.php"] [unique_id "apK-UmbX5DA3XO6e_qQxugAAAVM"]
[Sat Aug 29 05:11:14.453281 2026] [security2:error] [pid 1321:tid 1583] [client 4.205.62.107:63982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/goods.php"] [unique_id "apK-UmjCPtor9NZ-byTu5wAABpo"]
[Sat Aug 29 05:11:14.462723 2026] [security2:error] [pid 1321:tid 1580] [client 68.155.159.216:33695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wzy.php"] [unique_id "apK-UmjCPtor9NZ-byTu6AAABpc"]
[Sat Aug 29 05:11:14.491751 2026] [security2:error] [pid 11274:tid 11552] [client 20.52.41.200:2835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-content/file.php"] [unique_id "apK-UmbX5DA3XO6e_qQxwgAAAXQ"]
[Sat Aug 29 05:11:14.491767 2026] [security2:error] [pid 1321:tid 1542] [client 20.151.200.44:65116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/f-401.php"] [unique_id "apK-UmjCPtor9NZ-byTu6gAABnI"]
[Sat Aug 29 05:11:14.493071 2026] [security2:error] [pid 11274:tid 11444] [client 52.139.37.240:16499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "apK-UmbX5DA3XO6e_qQxwwAAAQo"]
[Sat Aug 29 05:11:14.497229 2026] [security2:error] [pid 11274:tid 11448] [client 20.196.209.81:15384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/wp-2019.php"] [unique_id "apK-UmbX5DA3XO6e_qQxxAAAAQ4"]
[Sat Aug 29 05:11:14.498186 2026] [security2:error] [pid 1321:tid 1516] [client 45.148.10.62:35324] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.zbf.rru.mybluehost.me"] [uri "/.env.old"] [unique_id "apK-UmjCPtor9NZ-byTu6wAABlg"]
[Sat Aug 29 05:11:14.547617 2026] [core:error] [pid 11274:tid 11527] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:14.547639 2026] [core:error] [pid 11274:tid 11527] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:14.563484 2026] [security2:error] [pid 1321:tid 1548] [client 40.83.93.50:9995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/flower.php"] [unique_id "apK-UmjCPtor9NZ-byTu7gAABnc"]
[Sat Aug 29 05:11:14.570856 2026] [security2:error] [pid 1321:tid 1582] [client 158.23.184.117:7365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/wp.php"] [unique_id "apK-UmjCPtor9NZ-byTu7wAABpk"]
[Sat Aug 29 05:11:14.575437 2026] [security2:error] [pid 11274:tid 11486] [client 20.104.104.62:48473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/monso.php"] [unique_id "apK-UmbX5DA3XO6e_qQxzQAAATM"]
[Sat Aug 29 05:11:14.577380 2026] [security2:error] [pid 11274:tid 11399] [remote 93.123.109.228:39990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/api/info.php"] [unique_id "apK-UmbX5DA3XO6e_qQxzgABQFU"]
[Sat Aug 29 05:11:14.582033 2026] [security2:error] [pid 1321:tid 1537] [client 68.155.159.216:64087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK-UmjCPtor9NZ-byTu8AAABm0"]
[Sat Aug 29 05:11:14.582199 2026] [security2:error] [pid 1321:tid 1523] [client 52.139.37.240:36705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/mah.php"] [unique_id "apK-UmjCPtor9NZ-byTu8gAABl8"]
[Sat Aug 29 05:11:14.582871 2026] [security2:error] [pid 11274:tid 11445] [client 20.63.219.114:9497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/defaults.php"] [unique_id "apK-UmbX5DA3XO6e_qQx0AAAAQs"]
[Sat Aug 29 05:11:14.591032 2026] [security2:error] [pid 11274:tid 11514] [client 45.148.10.62:59298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zbv.tvp.mybluehost.me"] [uri "/test.php"] [unique_id "apK-UmbX5DA3XO6e_qQx0gAAAU8"]
[Sat Aug 29 05:11:14.598965 2026] [security2:error] [pid 1321:tid 1575] [client 52.139.37.240:8007] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.advancedbehaviorsolutions.com"] [uri "/c99.php"] [unique_id "apK-UmjCPtor9NZ-byTu9AAABpI"]
[Sat Aug 29 05:11:14.598979 2026] [security2:error] [pid 11274:tid 11504] [client 20.104.104.62:40022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/ww2.php"] [unique_id "apK-UmbX5DA3XO6e_qQx1AAAAUU"]
[Sat Aug 29 05:11:14.605117 2026] [security2:error] [pid 1321:tid 1538] [client 20.104.104.62:16487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thepoetinnewyork.wanderlustpictures.com"] [uri "/rip.php"] [unique_id "apK-UmjCPtor9NZ-byTu9wAABm4"]
[Sat Aug 29 05:11:14.610099 2026] [security2:error] [pid 1321:tid 1514] [client 20.48.160.90:62169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/wp-activate.php"] [unique_id "apK-UmjCPtor9NZ-byTu-AAABlY"]
[Sat Aug 29 05:11:14.613640 2026] [cgid:error] [pid 11274:tid 11368] [remote 34.138.144.127:43542] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:14.613824 2026] [cgid:error] [pid 11274:tid 11420] [remote 34.138.144.127:43542] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:14.624613 2026] [core:error] [pid 11274:tid 11561] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:14.624634 2026] [core:error] [pid 11274:tid 11561] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:14.630909 2026] [security2:error] [pid 11274:tid 11477] [client 4.205.62.107:6523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/public/mah.php.php"] [unique_id "apK-UmbX5DA3XO6e_qQx3AAAASs"]
[Sat Aug 29 05:11:14.641847 2026] [security2:error] [pid 11274:tid 11566] [client 158.158.54.35:29440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/lite.php"] [unique_id "apK-UmbX5DA3XO6e_qQx3gAAAYI"]
[Sat Aug 29 05:11:14.650773 2026] [security2:error] [pid 11274:tid 11413] [remote 93.123.109.228:39990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/api/phpinfo.php"] [unique_id "apK-UmbX5DA3XO6e_qQx4AABQGM"]
[Sat Aug 29 05:11:14.663454 2026] [security2:error] [pid 11274:tid 11472] [client 158.158.54.35:28983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/alfa-rex.php7"] [unique_id "apK-UmbX5DA3XO6e_qQx4gAAASY"]
[Sat Aug 29 05:11:14.679528 2026] [security2:error] [pid 1321:tid 1513] [client 20.104.104.62:33894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.americanvarietyradio.net"] [uri "/wp-content/plugins/cp-pro/js.php"] [unique_id "apK-UmjCPtor9NZ-byTu-wAABlU"]
[Sat Aug 29 05:11:14.693332 2026] [security2:error] [pid 1321:tid 1522] [client 158.23.147.79:39341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK-UmjCPtor9NZ-byTu_AAABl4"]
[Sat Aug 29 05:11:14.696829 2026] [security2:error] [pid 11274:tid 11401] [remote 52.167.144.136:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantsfans.net"] [uri "/message_board/index.php"] [unique_id "apK-UmbX5DA3XO6e_qQx5gABOFc"]
[Sat Aug 29 05:11:14.698334 2026] [core:error] [pid 1321:tid 1489] [client 20.48.160.90:51906] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:14.698361 2026] [core:error] [pid 1321:tid 1489] [client 20.48.160.90:51906] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:14.699480 2026] [security2:error] [pid 1321:tid 1521] [client 158.23.147.79:59510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-mail.php"] [unique_id "apK-UmjCPtor9NZ-byTu_gAABl0"]
[Sat Aug 29 05:11:14.701842 2026] [security2:error] [pid 1321:tid 1501] [client 20.100.175.163:19209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/txets.php"] [unique_id "apK-UmjCPtor9NZ-byTvAAAABkk"]
[Sat Aug 29 05:11:14.716386 2026] [security2:error] [pid 11274:tid 11452] [client 158.23.184.117:7387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/xmlrpc.php"] [unique_id "apK-UmbX5DA3XO6e_qQx6wAAARI"]
[Sat Aug 29 05:11:14.716722 2026] [security2:error] [pid 11274:tid 11406] [remote 34.138.144.127:43542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/web.config"] [unique_id "apK-UmbX5DA3XO6e_qQx6gABNVw"]
[Sat Aug 29 05:11:14.717072 2026] [security2:error] [pid 1321:tid 1590] [client 20.104.104.62:20896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/mailer.php"] [unique_id "apK-UmjCPtor9NZ-byTvAQAABqE"]
[Sat Aug 29 05:11:14.719486 2026] [cgid:error] [pid 11274:tid 11423] [remote 34.138.144.127:43542] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:14.719715 2026] [cgid:error] [pid 11274:tid 11402] [remote 34.138.144.127:43542] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:14.719941 2026] [cgid:error] [pid 11274:tid 11421] [remote 34.138.144.127:43542] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:14.732170 2026] [security2:error] [pid 1321:tid 1602] [client 158.158.54.35:1464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/aa.php"] [unique_id "apK-UmjCPtor9NZ-byTvAgAABq0"]
[Sat Aug 29 05:11:14.745600 2026] [security2:error] [pid 1321:tid 1500] [client 20.48.160.90:65371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/wp-trackback.php"] [unique_id "apK-UmjCPtor9NZ-byTvAwAABkg"]
[Sat Aug 29 05:11:14.752432 2026] [security2:error] [pid 11274:tid 11509] [client 138.199.19.170:36202] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.fanlebrity.com"] [uri "/autodiscover/autodiscover.xml/website/wp-includes/wlwmanifest.xml"] [unique_id "apK-UmbX5DA3XO6e_qQx8QAAAUo"]
[Sat Aug 29 05:11:14.763980 2026] [security2:error] [pid 1321:tid 1593] [client 20.48.160.90:51846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/wp-includes/ID3/moon.php"] [unique_id "apK-UmjCPtor9NZ-byTvBAAABqQ"]
[Sat Aug 29 05:11:14.765657 2026] [security2:error] [pid 11274:tid 11471] [client 20.52.41.200:4787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/filemanager.php"] [unique_id "apK-UmbX5DA3XO6e_qQx8wAAASU"]
[Sat Aug 29 05:11:14.776553 2026] [cgid:error] [pid 11274:tid 11418] [remote 34.138.144.127:43542] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:14.777621 2026] [cgid:error] [pid 11274:tid 11403] [remote 34.138.144.127:43542] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:14.779081 2026] [security2:error] [pid 1321:tid 1498] [client 158.23.147.79:49797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-UmjCPtor9NZ-byTvBQAABkY"]
[Sat Aug 29 05:11:14.779433 2026] [security2:error] [pid 11274:tid 11525] [client 52.139.37.240:36839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/mini.php"] [unique_id "apK-UmbX5DA3XO6e_qQx9wAAAVo"]
[Sat Aug 29 05:11:14.782109 2026] [security2:error] [pid 11274:tid 11465] [client 158.23.147.79:24479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/ws.php"] [unique_id "apK-UmbX5DA3XO6e_qQx-AAAAR8"]
[Sat Aug 29 05:11:14.782431 2026] [lsapi:warn] [pid 11274:tid 11467] [client 93.123.109.165:21508] [host midayins.com] Backend log: PHP Warning:  PHP Request Startup: Invalid date.timezone value 'America/New York', using 'America/Boise' instead in Unknown on line 0\n, referer: https://midayins.com/wp-admin/
[Sat Aug 29 05:11:14.797198 2026] [security2:error] [pid 11274:tid 11494] [client 52.139.37.240:16745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/z.php"] [unique_id "apK-UmbX5DA3XO6e_qQx-wAAATs"]
[Sat Aug 29 05:11:14.799546 2026] [security2:error] [pid 11274:tid 11520] [client 68.155.159.216:1984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK-UmbX5DA3XO6e_qQx_QAAAVU"]
[Sat Aug 29 05:11:14.800096 2026] [security2:error] [pid 11274:tid 11492] [client 52.139.37.240:60903] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.advancedbehaviorsolutions.com"] [uri "/c99.php"] [unique_id "apK-UmbX5DA3XO6e_qQx_gAAATk"]
[Sat Aug 29 05:11:14.803310 2026] [security2:error] [pid 11274:tid 11466] [client 20.104.104.62:42097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/anz.php"] [unique_id "apK-UmbX5DA3XO6e_qQx_wAAASA"]
[Sat Aug 29 05:11:14.807935 2026] [cgid:error] [pid 1321:tid 1606] [client 20.104.104.62:16473] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/thepoetinnewyork/404.shtml
[Sat Aug 29 05:11:14.814831 2026] [security2:error] [pid 1321:tid 1601] [client 68.155.159.216:23381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/.well-known/content.php"] [unique_id "apK-UmjCPtor9NZ-byTvCgAABqw"]
[Sat Aug 29 05:11:14.817824 2026] [security2:error] [pid 11274:tid 11558] [client 34.169.171.101:57900] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/@fs/home/ubuntu/.env"] [unique_id "apK-UmbX5DA3XO6e_qQyAgAAAXo"]
[Sat Aug 29 05:11:14.818174 2026] [security2:error] [pid 11274:tid 11451] [client 34.169.171.101:57922] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/@fs/var/www/.env"] [unique_id "apK-UmbX5DA3XO6e_qQyAwAAARE"]
[Sat Aug 29 05:11:14.818173 2026] [security2:error] [pid 11274:tid 11505] [client 34.169.171.101:57938] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/@fs/var/www/html/.env"] [unique_id "apK-UmbX5DA3XO6e_qQyBAAAAUY"]
[Sat Aug 29 05:11:14.824395 2026] [security2:error] [pid 1321:tid 1517] [client 34.169.171.101:57948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/@fs/usr/src/app/.env"] [unique_id "apK-UmjCPtor9NZ-byTvDQAABlk"]
[Sat Aug 29 05:11:14.826774 2026] [security2:error] [pid 1321:tid 1506] [client 45.148.10.62:35324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zbf.rru.mybluehost.me"] [uri "/.env.php.bak"] [unique_id "apK-UmjCPtor9NZ-byTvDgAABk4"]
[Sat Aug 29 05:11:14.828124 2026] [security2:error] [pid 1321:tid 1587] [client 20.240.128.207:10414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/inputs.php"] [unique_id "apK-UmjCPtor9NZ-byTvDwAABp4"]
[Sat Aug 29 05:11:14.832310 2026] [core:error] [pid 11274:tid 11568] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:14.832324 2026] [core:error] [pid 11274:tid 11568] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:14.836385 2026] [security2:error] [pid 1321:tid 1556] [client 68.155.159.216:38300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/ws.php"] [unique_id "apK-UmjCPtor9NZ-byTvEAAABn8"]
[Sat Aug 29 05:11:14.845530 2026] [security2:error] [pid 11274:tid 11480] [client 20.151.200.44:27314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-UmbX5DA3XO6e_qQyCQAAAS0"]
[Sat Aug 29 05:11:14.860143 2026] [security2:error] [pid 11274:tid 11444] [client 34.169.171.101:57892] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "mail.forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-UmbX5DA3XO6e_qQyDQAAAQo"]
[Sat Aug 29 05:11:14.862498 2026] [security2:error] [pid 11274:tid 11551] [client 158.23.184.117:7417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/app.php"] [unique_id "apK-UmbX5DA3XO6e_qQyDwAAAXM"]
[Sat Aug 29 05:11:14.874212 2026] [security2:error] [pid 1321:tid 1536] [client 20.104.104.62:16473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thepoetinnewyork.wanderlustpictures.com"] [uri "/wp-content.php"] [unique_id "apK-UmjCPtor9NZ-byTvGQAABmw"]
[Sat Aug 29 05:11:14.878518 2026] [security2:error] [pid 1321:tid 1494] [client 20.104.104.62:33867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.americanvarietyradio.net"] [uri "/wp-content/plugins/index.php"] [unique_id "apK-UmjCPtor9NZ-byTvGgAABkI"]
[Sat Aug 29 05:11:14.886587 2026] [security2:error] [pid 11274:tid 11559] [client 20.100.175.163:9324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-good.php"] [unique_id "apK-UmbX5DA3XO6e_qQyEwAAAXs"]
[Sat Aug 29 05:11:14.893649 2026] [security2:error] [pid 1321:tid 1563] [client 20.48.160.90:63319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/pri.php"] [unique_id "apK-UmjCPtor9NZ-byTvGwAABoY"]
[Sat Aug 29 05:11:14.895552 2026] [security2:error] [pid 1321:tid 1584] [client 20.196.209.81:12137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/menu.php"] [unique_id "apK-UmjCPtor9NZ-byTvHAAABps"]
[Sat Aug 29 05:11:14.898105 2026] [security2:error] [pid 1321:tid 1560] [client 20.48.160.90:46468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/xmini4.php"] [unique_id "apK-UmjCPtor9NZ-byTvHQAABoM"]
[Sat Aug 29 05:11:14.899682 2026] [security2:error] [pid 11274:tid 11569] [client 34.169.171.101:57892] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-UmbX5DA3XO6e_qQyFgAAAYU"], referer: https://mail.forensicengineernj.com/@fs/app/serverless.yml?raw??
[Sat Aug 29 05:11:14.921706 2026] [security2:error] [pid 11274:tid 11489] [client 103.240.76.112:42942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK-UmbX5DA3XO6e_qQyHQAAATY"]
[Sat Aug 29 05:11:14.921910 2026] [security2:error] [pid 11274:tid 11489] [client 103.240.76.112:42942] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK-UmbX5DA3XO6e_qQyHQAAATY"]
[Sat Aug 29 05:11:14.945056 2026] [security2:error] [pid 11274:tid 11530] [client 20.104.104.62:42065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/bge.php"] [unique_id "apK-UmbX5DA3XO6e_qQyIgAAAV8"]
[Sat Aug 29 05:11:14.947119 2026] [security2:error] [pid 11274:tid 11571] [client 20.52.41.200:2859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/files.php"] [unique_id "apK-UmbX5DA3XO6e_qQyIwAAAYc"]
[Sat Aug 29 05:11:14.963390 2026] [lsapi:warn] [pid 11274:tid 11560] [client 93.123.109.165:21508] [host midayins.com] Backend log: PHP Warning:  PHP Request Startup: Invalid date.timezone value 'America/New York', using 'America/Boise' instead in Unknown on line 0\n, referer: https://midayins.com/wp-admin/
[Sat Aug 29 05:11:14.996248 2026] [security2:error] [pid 1321:tid 1568] [client 20.63.219.114:19946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/post.php"] [unique_id "apK-UmjCPtor9NZ-byTvIAAABos"]
[Sat Aug 29 05:11:14.999693 2026] [security2:error] [pid 1321:tid 1583] [client 52.139.37.240:8039] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.advancedbehaviorsolutions.com"] [uri "/c99.php"] [unique_id "apK-UmjCPtor9NZ-byTvIQAABpo"]
[Sat Aug 29 05:11:15.001083 2026] [security2:error] [pid 11274:tid 11514] [client 52.139.37.240:35847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/v.php"] [unique_id "apK-UmbX5DA3XO6e_qQyKAAAAU8"]
[Sat Aug 29 05:11:15.002782 2026] [security2:error] [pid 1321:tid 1608] [client 52.139.37.240:16480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/f35.php"] [unique_id "apK-U2jCPtor9NZ-byTvIgAABrM"]
[Sat Aug 29 05:11:15.007007 2026] [security2:error] [pid 11274:tid 11479] [client 158.23.184.117:7414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/aaa.php"] [unique_id "apK-U2bX5DA3XO6e_qQyKgAAASw"]
[Sat Aug 29 05:11:15.009835 2026] [security2:error] [pid 1321:tid 1519] [client 68.155.159.216:63194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/ans.php"] [unique_id "apK-U2jCPtor9NZ-byTvIwAABls"]
[Sat Aug 29 05:11:15.028070 2026] [security2:error] [pid 11274:tid 11566] [client 68.155.159.216:30670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/ans.php"] [unique_id "apK-U2bX5DA3XO6e_qQyKwAAAYI"]
[Sat Aug 29 05:11:15.036247 2026] [core:error] [pid 11274:tid 11501] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:15.036270 2026] [core:error] [pid 11274:tid 11501] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:15.036335 2026] [security2:error] [pid 11274:tid 11524] [client 20.48.160.90:28144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/gulu.php"] [unique_id "apK-U2bX5DA3XO6e_qQyLwAAAVk"]
[Sat Aug 29 05:11:15.043826 2026] [cgid:error] [pid 11274:tid 11313] [remote 34.138.144.127:43542] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:15.046107 2026] [cgid:error] [pid 11274:tid 11317] [remote 34.138.144.127:43542] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:15.048460 2026] [cgid:error] [pid 11274:tid 11323] [remote 34.138.144.127:43542] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:15.049277 2026] [cgid:error] [pid 11274:tid 11435] [remote 34.138.144.127:43542] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:15.053495 2026] [cgid:error] [pid 11274:tid 11435] [remote 34.138.144.127:43542] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:15.055673 2026] [security2:error] [pid 1321:tid 1523] [client 91.92.42.30:48192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "s212.net"] [uri "/index.php"] [unique_id "apK-U2jCPtor9NZ-byTvJQAABl8"]
[Sat Aug 29 05:11:15.063704 2026] [security2:error] [pid 1321:tid 1532] [client 20.48.160.90:63244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/wp_blog_footer.php"] [unique_id "apK-U2jCPtor9NZ-byTvJwAABmg"]
[Sat Aug 29 05:11:15.065883 2026] [cgid:error] [pid 11274:tid 11333] [remote 34.138.144.127:43542] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:15.075026 2026] [security2:error] [pid 11274:tid 11555] [client 4.205.62.107:59095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/bengi.php"] [unique_id "apK-U2bX5DA3XO6e_qQyOwAAAXc"]
[Sat Aug 29 05:11:15.093125 2026] [security2:error] [pid 11274:tid 11570] [client 4.205.62.107:58369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/333.php"] [unique_id "apK-U2bX5DA3XO6e_qQyPQAAAYY"]
[Sat Aug 29 05:11:15.093312 2026] [security2:error] [pid 11274:tid 11504] [client 158.158.54.35:29116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/term.php"] [unique_id "apK-U2bX5DA3XO6e_qQyPgAAAUU"]
[Sat Aug 29 05:11:15.094777 2026] [security2:error] [pid 1321:tid 1614] [client 20.104.104.62:59065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/wp-ana.php"] [unique_id "apK-U2jCPtor9NZ-byTvKgAABrk"]
[Sat Aug 29 05:11:15.097438 2026] [cgid:error] [pid 11274:tid 11529] [client 20.104.104.62:17102] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/thepoetinnewyork/404.shtml
[Sat Aug 29 05:11:15.098310 2026] [security2:error] [pid 1321:tid 1604] [client 158.158.54.35:30321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "apK-U2jCPtor9NZ-byTvLAAABq8"]
[Sat Aug 29 05:11:15.104004 2026] [security2:error] [pid 1321:tid 1576] [client 68.155.159.216:14248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/themes.php"] [unique_id "apK-U2jCPtor9NZ-byTvLQAABpM"]
[Sat Aug 29 05:11:15.106603 2026] [security2:error] [pid 1321:tid 1610] [client 20.104.104.62:34706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.americanvarietyradio.net"] [uri "/wp-content/themes/alera/alpha.php"] [unique_id "apK-U2jCPtor9NZ-byTvLgAABrU"]
[Sat Aug 29 05:11:15.108117 2026] [security2:error] [pid 11274:tid 11559] [client 40.83.93.50:10045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/meta.php"] [unique_id "apK-U2bX5DA3XO6e_qQyQAAAAXs"]
[Sat Aug 29 05:11:15.111348 2026] [security2:error] [pid 1321:tid 1499] [client 20.104.104.62:48632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/rce.php"] [unique_id "apK-U2jCPtor9NZ-byTvLwAABkc"]
[Sat Aug 29 05:11:15.125500 2026] [security2:error] [pid 1321:tid 1592] [client 20.104.104.62:40204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/modul.php"] [unique_id "apK-U2jCPtor9NZ-byTvMAAABqM"]
[Sat Aug 29 05:11:15.159257 2026] [http2:warn] [pid 1041789:tid 1042021] [client 57.141.14.41:28286] h2_stream(1041789-372-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:11:15.162627 2026] [security2:error] [pid 11274:tid 11508] [client 45.148.10.62:35326] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.zbv.tvp.mybluehost.me"] [uri "/.env.backup"] [unique_id "apK-U2bX5DA3XO6e_qQySAAAAUk"]
[Sat Aug 29 05:11:15.164033 2026] [security2:error] [pid 1321:tid 1510] [client 68.155.159.216:65102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/packed.php"] [unique_id "apK-U2jCPtor9NZ-byTvMwAABlI"]
[Sat Aug 29 05:11:15.171430 2026] [cgid:error] [pid 11274:tid 11515] [client 20.104.104.62:17102] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/thepoetinnewyork/404.shtml
[Sat Aug 29 05:11:15.183092 2026] [security2:error] [pid 1321:tid 1550] [client 82.102.18.116:45548] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "www.bodybenefitspilates.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "apK-U2jCPtor9NZ-byTvNAAABnk"]
[Sat Aug 29 05:11:15.184149 2026] [security2:error] [pid 11274:tid 11545] [client 20.48.160.90:51862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/replace.php"] [unique_id "apK-U2bX5DA3XO6e_qQyTQAAAW0"]
[Sat Aug 29 05:11:15.186180 2026] [security2:error] [pid 1321:tid 1548] [client 158.158.54.35:2021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/c.php"] [unique_id "apK-U2jCPtor9NZ-byTvNgAABnc"]
[Sat Aug 29 05:11:15.197654 2026] [security2:error] [pid 1321:tid 1612] [client 52.139.37.240:59906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK-U2jCPtor9NZ-byTvNwAABrc"]
[Sat Aug 29 05:11:15.202124 2026] [security2:error] [pid 1321:tid 1528] [client 52.139.37.240:16755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/file61.php"] [unique_id "apK-U2jCPtor9NZ-byTvOAAABmQ"]
[Sat Aug 29 05:11:15.205755 2026] [security2:error] [pid 1321:tid 1590] [client 158.23.184.117:7366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/hehe.php"] [unique_id "apK-U2jCPtor9NZ-byTvOgAABqE"]
[Sat Aug 29 05:11:15.214924 2026] [security2:error] [pid 1321:tid 1518] [client 20.48.160.90:63284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/sushi.php"] [unique_id "apK-U2jCPtor9NZ-byTvOwAABlo"]
[Sat Aug 29 05:11:15.231276 2026] [security2:error] [pid 11274:tid 11500] [client 20.52.41.200:4636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-content/themes/admin.php"] [unique_id "apK-U2bX5DA3XO6e_qQyUwAAAUE"]
[Sat Aug 29 05:11:15.247012 2026] [cgid:error] [pid 11274:tid 11494] [client 20.104.104.62:17102] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/thepoetinnewyork/404.shtml
[Sat Aug 29 05:11:15.249452 2026] [security2:error] [pid 1321:tid 1498] [client 20.151.200.44:22187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/hq.php"] [unique_id "apK-U2jCPtor9NZ-byTvPQAABkY"]
[Sat Aug 29 05:11:15.276968 2026] [security2:error] [pid 1321:tid 1549] [client 20.104.104.62:40031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/secret.php"] [unique_id "apK-U2jCPtor9NZ-byTvPgAABng"]
[Sat Aug 29 05:11:15.293158 2026] [security2:error] [pid 11274:tid 11558] [client 158.23.147.79:62734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/themes.php"] [unique_id "apK-U2bX5DA3XO6e_qQyWgAAAXo"]
[Sat Aug 29 05:11:15.294685 2026] [security2:error] [pid 1321:tid 1564] [client 4.205.62.107:64985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/ws61.php"] [unique_id "apK-U2jCPtor9NZ-byTvQAAABoc"]
[Sat Aug 29 05:11:15.296905 2026] [security2:error] [pid 1321:tid 1533] [client 20.196.209.81:15412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/alfa.php"] [unique_id "apK-U2jCPtor9NZ-byTvQQAABmk"]
[Sat Aug 29 05:11:15.317635 2026] [security2:error] [pid 11274:tid 11492] [client 20.48.160.90:51872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/c4.php"] [unique_id "apK-U2bX5DA3XO6e_qQyYwAAATk"]
[Sat Aug 29 05:11:15.317773 2026] [security2:error] [pid 11274:tid 11484] [client 20.104.104.62:17102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thepoetinnewyork.wanderlustpictures.com"] [uri "/ws.php"] [unique_id "apK-U2bX5DA3XO6e_qQyYgAAATE"]
[Sat Aug 29 05:11:15.318531 2026] [security2:error] [pid 11274:tid 11516] [client 45.148.10.62:35326] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.zbv.tvp.mybluehost.me"] [uri "/.env.old"] [unique_id "apK-U2bX5DA3XO6e_qQyYQAAAVE"]
[Sat Aug 29 05:11:15.331325 2026] [security2:error] [pid 1321:tid 1609] [client 20.240.128.207:21194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/alfa.php"] [unique_id "apK-U2jCPtor9NZ-byTvRAAABrQ"]
[Sat Aug 29 05:11:15.344243 2026] [security2:error] [pid 11274:tid 11552] [client 4.205.62.107:62969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/apikeys.php"] [unique_id "apK-U2bX5DA3XO6e_qQyZwAAAXQ"]
[Sat Aug 29 05:11:15.348163 2026] [security2:error] [pid 11274:tid 11525] [client 45.148.10.62:35330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zbf.rru.mybluehost.me"] [uri "/.env.php"] [unique_id "apK-U2bX5DA3XO6e_qQyaAAAAVo"]
[Sat Aug 29 05:11:15.351135 2026] [security2:error] [pid 11274:tid 11487] [client 158.23.184.117:7381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/wp-includes/PHPMailer.php"] [unique_id "apK-U2bX5DA3XO6e_qQyawAAATQ"]
[Sat Aug 29 05:11:15.369928 2026] [security2:error] [pid 1321:tid 1593] [client 20.63.219.114:19916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/csv.php"] [unique_id "apK-U2jCPtor9NZ-byTvRQAABqQ"]
[Sat Aug 29 05:11:15.371900 2026] [security2:error] [pid 11274:tid 11448] [client 20.48.160.90:63313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/manga.php"] [unique_id "apK-U2bX5DA3XO6e_qQybAAAAQ4"]
[Sat Aug 29 05:11:15.378549 2026] [security2:error] [pid 1321:tid 1561] [client 20.100.175.163:17965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "apK-U2jCPtor9NZ-byTvSAAABoQ"]
[Sat Aug 29 05:11:15.393912 2026] [security2:error] [pid 11274:tid 11483] [client 52.139.37.240:36851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "apK-U2bX5DA3XO6e_qQybgAAATA"]
[Sat Aug 29 05:11:15.404334 2026] [security2:error] [pid 11274:tid 11466] [client 20.52.41.200:2815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/o.php"] [unique_id "apK-U2bX5DA3XO6e_qQycQAAASA"]
[Sat Aug 29 05:11:15.418774 2026] [security2:error] [pid 11274:tid 11553] [client 138.199.19.170:36204] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.fanlebrity.com"] [uri "/autodiscover/autodiscover.xml/wp/wp-includes/wlwmanifest.xml"] [unique_id "apK-U2bX5DA3XO6e_qQycwAAAXU"]
[Sat Aug 29 05:11:15.419171 2026] [cgid:error] [pid 11274:tid 11356] [remote 34.138.144.127:43542] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:15.423837 2026] [security2:error] [pid 11274:tid 11530] [client 68.155.159.216:56735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK-U2bX5DA3XO6e_qQydgAAAV8"]
[Sat Aug 29 05:11:15.433937 2026] [security2:error] [pid 11274:tid 11496] [client 68.155.159.216:62802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK-U2bX5DA3XO6e_qQyeQAAAT0"]
[Sat Aug 29 05:11:15.437258 2026] [security2:error] [pid 11274:tid 11498] [client 20.104.104.62:52235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/pro.php"] [unique_id "apK-U2bX5DA3XO6e_qQyfAAAAT8"]
[Sat Aug 29 05:11:15.438844 2026] [security2:error] [pid 11274:tid 11518] [client 52.139.37.240:16460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/mah.php"] [unique_id "apK-U2bX5DA3XO6e_qQyfQAAAVM"]
[Sat Aug 29 05:11:15.451872 2026] [security2:error] [pid 1321:tid 1574] [client 20.104.104.62:33864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.americanvarietyradio.net"] [uri "/wp-info.php"] [unique_id "apK-U2jCPtor9NZ-byTvTgAABpE"]
[Sat Aug 29 05:11:15.453024 2026] [security2:error] [pid 1321:tid 1560] [client 20.48.160.90:28036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/rxr.php"] [unique_id "apK-U2jCPtor9NZ-byTvTwAABoM"]
[Sat Aug 29 05:11:15.455521 2026] [cgid:error] [pid 11274:tid 11364] [remote 34.138.144.127:43542] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:15.455553 2026] [cgid:error] [pid 11274:tid 11347] [remote 34.138.144.127:43542] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:15.455661 2026] [cgid:error] [pid 11274:tid 11382] [remote 34.138.144.127:43542] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:15.459266 2026] [cgid:error] [pid 11274:tid 11354] [remote 34.138.144.127:43542] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:15.478563 2026] [cgid:error] [pid 11274:tid 11376] [remote 34.138.144.127:43542] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:15.482551 2026] [security2:error] [pid 11274:tid 11475] [client 68.155.159.216:38678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/bk/index.php"] [unique_id "apK-U2bX5DA3XO6e_qQyhgAAASk"]
[Sat Aug 29 05:11:15.499624 2026] [security2:error] [pid 11274:tid 11488] [client 20.104.104.62:48673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/exec.php"] [unique_id "apK-U2bX5DA3XO6e_qQyiAAAATU"]
[Sat Aug 29 05:11:15.513858 2026] [security2:error] [pid 11274:tid 11472] [client 20.104.104.62:16743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thepoetinnewyork.wanderlustpictures.com"] [uri "/0x.php"] [unique_id "apK-U2bX5DA3XO6e_qQyjAAAASY"]
[Sat Aug 29 05:11:15.527952 2026] [security2:error] [pid 1321:tid 1580] [client 158.23.184.117:7172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/wp-content/upgrade/alfanew.php7"] [unique_id "apK-U2jCPtor9NZ-byTvUAAABpc"]
[Sat Aug 29 05:11:15.530511 2026] [security2:error] [pid 11274:tid 11529] [client 158.23.147.79:58079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK-U2bX5DA3XO6e_qQyjQAAAV4"]
[Sat Aug 29 05:11:15.531976 2026] [security2:error] [pid 11274:tid 11464] [client 20.48.160.90:62174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/asdfghj.php"] [unique_id "apK-U2bX5DA3XO6e_qQyjgAAAR4"]
[Sat Aug 29 05:11:15.542060 2026] [security2:error] [pid 1321:tid 1600] [client 117.240.152.41:33782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.152.240.117.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "midaytax.com"] [uri "/xmlrpc.php"] [unique_id "apK-U2jCPtor9NZ-byTvUQAABqs"]
[Sat Aug 29 05:11:15.542195 2026] [security2:error] [pid 1321:tid 1600] [client 117.240.152.41:33782] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "midaytax.com"] [uri "/xmlrpc.php"] [unique_id "apK-U2jCPtor9NZ-byTvUQAABqs"]
[Sat Aug 29 05:11:15.545546 2026] [security2:error] [pid 11274:tid 11512] [client 158.158.54.35:17682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/upload.php"] [unique_id "apK-U2bX5DA3XO6e_qQykQAAAU0"]
[Sat Aug 29 05:11:15.549738 2026] [security2:error] [pid 1321:tid 1555] [client 158.158.54.35:22980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/config.php"] [unique_id "apK-U2jCPtor9NZ-byTvUgAABn4"]
[Sat Aug 29 05:11:15.554037 2026] [security2:error] [pid 11274:tid 11559] [client 82.102.18.116:45552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 116.18.102.82.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.bodybenefitspilates.com"] [uri "/xmlrpc.php"] [unique_id "apK-U2bX5DA3XO6e_qQykAAAAXs"]
[Sat Aug 29 05:11:15.570123 2026] [security2:error] [pid 11274:tid 11375] [remote 34.138.144.127:43542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/src/.env"] [unique_id "apK-U2bX5DA3XO6e_qQykwABKj0"]
[Sat Aug 29 05:11:15.572407 2026] [security2:error] [pid 1321:tid 1559] [client 20.100.175.163:25178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-content/themes/about.php"] [unique_id "apK-U2jCPtor9NZ-byTvUwAABoI"]
[Sat Aug 29 05:11:15.579863 2026] [security2:error] [pid 11274:tid 11515] [client 68.155.159.216:33594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK-U2bX5DA3XO6e_qQylgAAAVA"]
[Sat Aug 29 05:11:15.590322 2026] [security2:error] [pid 11274:tid 11504] [client 52.139.37.240:36704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-U2bX5DA3XO6e_qQylwAAAUU"]
[Sat Aug 29 05:11:15.602111 2026] [security2:error] [pid 1321:tid 1523] [client 4.205.62.107:61742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/loxi-o.php"] [unique_id "apK-U2jCPtor9NZ-byTvVAAABl8"]
[Sat Aug 29 05:11:15.618482 2026] [security2:error] [pid 11274:tid 11461] [client 20.104.104.62:61822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/999.php"] [unique_id "apK-U2bX5DA3XO6e_qQymAAAARs"]
[Sat Aug 29 05:11:15.622660 2026] [security2:error] [pid 11274:tid 11550] [client 20.48.160.90:46549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "amandaandderek.strangeworx.com"] [uri "/reviall.php"] [unique_id "apK-U2bX5DA3XO6e_qQymwAAAXI"]
[Sat Aug 29 05:11:15.639939 2026] [security2:error] [pid 11274:tid 11503] [client 158.158.54.35:11620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/f.php"] [unique_id "apK-U2bX5DA3XO6e_qQynAAAAUQ"]
[Sat Aug 29 05:11:15.652327 2026] [security2:error] [pid 11274:tid 11554] [client 20.104.104.62:34712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.americanvarietyradio.net"] [uri "/ws61.php"] [unique_id "apK-U2bX5DA3XO6e_qQyoAAAAXY"]
[Sat Aug 29 05:11:15.665746 2026] [security2:error] [pid 11274:tid 11522] [client 52.139.37.240:16458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/mini.php"] [unique_id "apK-U2bX5DA3XO6e_qQyowAAAVc"]
[Sat Aug 29 05:11:15.666908 2026] [security2:error] [pid 11274:tid 11484] [client 45.148.10.62:35326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zbv.tvp.mybluehost.me"] [uri "/.env.php.bak"] [unique_id "apK-U2bX5DA3XO6e_qQypAAAATE"]
[Sat Aug 29 05:11:15.670269 2026] [security2:error] [pid 11274:tid 11536] [client 158.23.184.117:7584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/admin/alfa-rex.php"] [unique_id "apK-U2bX5DA3XO6e_qQypQAAAWU"]
[Sat Aug 29 05:11:15.673620 2026] [security2:error] [pid 11274:tid 11544] [client 20.52.41.200:4382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-admin/css/admin.php"] [unique_id "apK-U2bX5DA3XO6e_qQypgAAAWw"]
[Sat Aug 29 05:11:15.675289 2026] [security2:error] [pid 11274:tid 11468] [client 40.83.93.50:6685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/randkeyword.php"] [unique_id "apK-U2bX5DA3XO6e_qQypwAAASI"]
[Sat Aug 29 05:11:15.700429 2026] [security2:error] [pid 1321:tid 1614] [client 68.155.159.216:64010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/dropdown.php"] [unique_id "apK-U2jCPtor9NZ-byTvVQAABrk"]
[Sat Aug 29 05:11:15.706037 2026] [security2:error] [pid 1321:tid 1519] [client 20.196.209.81:15362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/feed-rss2-queue.php"] [unique_id "apK-U2jCPtor9NZ-byTvVwAABls"]
[Sat Aug 29 05:11:15.708803 2026] [security2:error] [pid 11274:tid 11494] [client 20.104.104.62:16711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thepoetinnewyork.wanderlustpictures.com"] [uri "/an.php"] [unique_id "apK-U2bX5DA3XO6e_qQyrQAAATs"]
[Sat Aug 29 05:11:15.713975 2026] [cgid:error] [pid 11274:tid 11393] [remote 34.138.144.127:43542] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:15.725163 2026] [security2:error] [pid 11274:tid 11328] [remote 34.138.144.127:43542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/server/.env"] [unique_id "apK-U2bX5DA3XO6e_qQysAABcw8"]
[Sat Aug 29 05:11:15.747348 2026] [security2:error] [pid 1321:tid 1514] [client 20.63.219.114:10339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/fox.php"] [unique_id "apK-U2jCPtor9NZ-byTvWAAABlY"]
[Sat Aug 29 05:11:15.751126 2026] [security2:error] [pid 1321:tid 1610] [client 20.104.104.62:20651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/configuration.php"] [unique_id "apK-U2jCPtor9NZ-byTvWQAABrU"]
[Sat Aug 29 05:11:15.755556 2026] [security2:error] [pid 11274:tid 11483] [client 20.151.200.44:63787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/mh.php"] [unique_id "apK-U2bX5DA3XO6e_qQytAAAATA"]
[Sat Aug 29 05:11:15.761383 2026] [cgid:error] [pid 11274:tid 11395] [remote 34.138.144.127:43542] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:15.761429 2026] [cgid:error] [pid 11274:tid 11369] [remote 34.138.144.127:43542] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:15.767091 2026] [security2:error] [pid 1321:tid 1592] [client 20.104.104.62:42072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/sef.php"] [unique_id "apK-U2jCPtor9NZ-byTvWgAABqM"]
[Sat Aug 29 05:11:15.770704 2026] [security2:error] [pid 1321:tid 1553] [client 20.48.160.90:64192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/dragonshell.php"] [unique_id "apK-U2jCPtor9NZ-byTvWwAABnw"]
[Sat Aug 29 05:11:15.786234 2026] [security2:error] [pid 11274:tid 11466] [client 4.205.62.107:6315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/zaza.php"] [unique_id "apK-U2bX5DA3XO6e_qQyuAAAASA"]
[Sat Aug 29 05:11:15.804504 2026] [security2:error] [pid 11274:tid 11489] [client 158.23.147.79:60098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/cgi-bin/index.php"] [unique_id "apK-U2bX5DA3XO6e_qQyvgAAATY"]
[Sat Aug 29 05:11:15.808289 2026] [security2:error] [pid 11274:tid 11514] [client 158.23.147.79:39167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/makeasmtp.php"] [unique_id "apK-U2bX5DA3XO6e_qQywAAAAU8"]
[Sat Aug 29 05:11:15.815342 2026] [security2:error] [pid 1321:tid 1598] [client 158.23.184.117:7886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/wp-content/export.php"] [unique_id "apK-U2jCPtor9NZ-byTvXgAABqk"]
[Sat Aug 29 05:11:15.832008 2026] [security2:error] [pid 11274:tid 11558] [client 20.240.128.207:20188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/403.php"] [unique_id "apK-U2bX5DA3XO6e_qQyxAAAAXo"]
[Sat Aug 29 05:11:15.850067 2026] [security2:error] [pid 11274:tid 11444] [client 20.52.41.200:2216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/file2.php"] [unique_id "apK-U2bX5DA3XO6e_qQyxgAAAQo"]
[Sat Aug 29 05:11:15.850982 2026] [security2:error] [pid 11274:tid 11519] [client 20.104.104.62:33861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.americanvarietyradio.net"] [uri "/ws79.php"] [unique_id "apK-U2bX5DA3XO6e_qQyxwAAAVQ"]
[Sat Aug 29 05:11:15.859393 2026] [security2:error] [pid 11274:tid 11485] [client 20.100.175.163:12298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/abcd.php"] [unique_id "apK-U2bX5DA3XO6e_qQyyQAAATI"]
[Sat Aug 29 05:11:15.866143 2026] [security2:error] [pid 11274:tid 11553] [client 52.139.37.240:16904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/v.php"] [unique_id "apK-U2bX5DA3XO6e_qQyygAAAXU"]
[Sat Aug 29 05:11:15.869629 2026] [security2:error] [pid 11274:tid 11408] [remote 34.138.144.127:43542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/dev/.env"] [unique_id "apK-U2bX5DA3XO6e_qQyywABVl4"]
[Sat Aug 29 05:11:15.871512 2026] [security2:error] [pid 11274:tid 11511] [client 52.139.37.240:36713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/wp-index.php"] [unique_id "apK-U2bX5DA3XO6e_qQyzAAAAUw"]
[Sat Aug 29 05:11:15.875519 2026] [security2:error] [pid 11274:tid 11411] [remote 34.138.144.127:43542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/production/.env"] [unique_id "apK-U2bX5DA3XO6e_qQyzQABZGE"]
[Sat Aug 29 05:11:15.899452 2026] [security2:error] [pid 11274:tid 11561] [client 20.104.104.62:52245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/admin123.php"] [unique_id "apK-U2bX5DA3XO6e_qQy0QAAAX0"]
[Sat Aug 29 05:11:15.901501 2026] [security2:error] [pid 1321:tid 1612] [client 68.155.159.216:1869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK-U2jCPtor9NZ-byTvXwAABrc"]
[Sat Aug 29 05:11:15.901794 2026] [security2:error] [pid 11274:tid 11373] [remote 34.138.144.127:43542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/app/.env"] [unique_id "apK-U2bX5DA3XO6e_qQy0wABWDs"]
[Sat Aug 29 05:11:15.903825 2026] [security2:error] [pid 11274:tid 11566] [client 20.104.104.62:16488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thepoetinnewyork.wanderlustpictures.com"] [uri "/dropdown.php"] [unique_id "apK-U2bX5DA3XO6e_qQy1AAAAYI"]
[Sat Aug 29 05:11:15.926651 2026] [security2:error] [pid 11274:tid 11405] [remote 34.138.144.127:43542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/frontend/.env"] [unique_id "apK-U2bX5DA3XO6e_qQy1QABEls"]
[Sat Aug 29 05:11:15.936594 2026] [security2:error] [pid 1321:tid 1518] [client 68.155.159.216:23496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/cong.php"] [unique_id "apK-U2jCPtor9NZ-byTvYQAABlo"]
[Sat Aug 29 05:11:15.943673 2026] [security2:error] [pid 1321:tid 1573] [client 68.155.159.216:38544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-includes/css/index.php"] [unique_id "apK-U2jCPtor9NZ-byTvYgAABpA"]
[Sat Aug 29 05:11:15.964005 2026] [security2:error] [pid 1321:tid 1544] [client 158.23.184.117:7481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/new.php"] [unique_id "apK-U2jCPtor9NZ-byTvYwAABnQ"]
[Sat Aug 29 05:11:15.973702 2026] [security2:error] [pid 11274:tid 11464] [client 158.23.147.79:49849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK-U2bX5DA3XO6e_qQy3AAAAR4"]
[Sat Aug 29 05:11:15.975177 2026] [security2:error] [pid 1321:tid 1545] [client 20.48.160.90:63281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/wp-safe.php"] [unique_id "apK-U2jCPtor9NZ-byTvZAAABnU"]
[Sat Aug 29 05:11:15.982530 2026] [security2:error] [pid 11274:tid 11512] [client 20.63.219.114:4386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-admin/network/xmrlpc.php"] [unique_id "apK-U2bX5DA3XO6e_qQy4QAAAU0"]
[Sat Aug 29 05:11:15.986101 2026] [security2:error] [pid 11274:tid 11421] [remote 34.138.144.127:43542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/docker/.env"] [unique_id "apK-U2bX5DA3XO6e_qQy4wABe2s"]
[Sat Aug 29 05:11:15.991839 2026] [security2:error] [pid 11274:tid 11524] [client 158.158.54.35:10165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK-U2bX5DA3XO6e_qQy5QAAAVk"]
[Sat Aug 29 05:11:16.026411 2026] [security2:error] [pid 1321:tid 1596] [client 68.155.159.216:6064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK-VGjCPtor9NZ-byTvZwAABqc"]
[Sat Aug 29 05:11:16.082840 2026] [security2:error] [pid 11274:tid 11543] [client 52.139.37.240:16511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK-VGbX5DA3XO6e_qQy7AAAAWs"]
[Sat Aug 29 05:11:16.086579 2026] [security2:error] [pid 1321:tid 1518] [client 158.158.54.35:2044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/av.php"] [unique_id "apK-VGjCPtor9NZ-byTvagAABlo"]
[Sat Aug 29 05:11:16.094609 2026] [security2:error] [pid 1321:tid 1595] [client 52.139.37.240:36721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/ww2.php"] [unique_id "apK-VGjCPtor9NZ-byTvawAABqY"]
[Sat Aug 29 05:11:16.102211 2026] [security2:error] [pid 1321:tid 1606] [client 20.104.104.62:16491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thepoetinnewyork.wanderlustpictures.com"] [uri "/update/da222.php"] [unique_id "apK-VGjCPtor9NZ-byTvbAAABrE"]
[Sat Aug 29 05:11:16.105491 2026] [security2:error] [pid 1321:tid 1538] [client 20.196.209.81:15394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/inputs.php"] [unique_id "apK-VGjCPtor9NZ-byTvbQAABm4"]
[Sat Aug 29 05:11:16.118553 2026] [security2:error] [pid 1321:tid 1512] [client 68.155.159.216:65041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/worksec.php"] [unique_id "apK-VGjCPtor9NZ-byTvcAAABlQ"]
[Sat Aug 29 05:11:16.122424 2026] [security2:error] [pid 1321:tid 1564] [client 158.23.184.117:7874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/wp-content/plugins/revslider/admin.php"] [unique_id "apK-VGjCPtor9NZ-byTvcQAABoc"]
[Sat Aug 29 05:11:16.127293 2026] [security2:error] [pid 11274:tid 11522] [client 68.155.159.216:30636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/worksec.php"] [unique_id "apK-VGbX5DA3XO6e_qQy8AAAAVc"]
[Sat Aug 29 05:11:16.130546 2026] [security2:error] [pid 1321:tid 1593] [client 20.104.104.62:34692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.americanvarietyradio.net"] [uri "/.info.php"] [unique_id "apK-VGjCPtor9NZ-byTvcgAABqQ"]
[Sat Aug 29 05:11:16.135562 2026] [security2:error] [pid 1321:tid 1590] [client 20.100.175.163:31909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK-VGjCPtor9NZ-byTvcwAABqE"]
[Sat Aug 29 05:11:16.138760 2026] [security2:error] [pid 11274:tid 11565] [client 20.52.41.200:5298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/adminfuns.php"] [unique_id "apK-VGbX5DA3XO6e_qQy8wAAAYE"]
[Sat Aug 29 05:11:16.145595 2026] [security2:error] [pid 11274:tid 11544] [client 20.48.160.90:63261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/gjewuagf.php"] [unique_id "apK-VGbX5DA3XO6e_qQy9AAAAWw"]
[Sat Aug 29 05:11:16.150343 2026] [security2:error] [pid 11274:tid 11394] [remote 93.123.109.228:39990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/config.php"] [unique_id "apK-VGbX5DA3XO6e_qQy9QABH1A"]
[Sat Aug 29 05:11:16.179192 2026] [security2:error] [pid 1321:tid 1495] [client 45.148.10.62:35344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zbv.tvp.mybluehost.me"] [uri "/.env.php"] [unique_id "apK-VGjCPtor9NZ-byTvdQAABkM"]
[Sat Aug 29 05:11:16.182551 2026] [security2:error] [pid 1321:tid 1504] [client 138.199.19.170:36214] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.fanlebrity.com"] [uri "/autodiscover/autodiscover.xml/2018/wp-includes/wlwmanifest.xml"] [unique_id "apK-VGjCPtor9NZ-byTvdgAABkw"]
[Sat Aug 29 05:11:16.184244 2026] [security2:error] [pid 1321:tid 1508] [client 20.104.104.62:42071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/7h.php"] [unique_id "apK-VGjCPtor9NZ-byTvdwAABlA"]
[Sat Aug 29 05:11:16.185073 2026] [security2:error] [pid 11274:tid 11499] [client 20.63.219.114:19905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/disagraeosc.php"] [unique_id "apK-VGbX5DA3XO6e_qQy-QAAAUA"]
[Sat Aug 29 05:11:16.212832 2026] [security2:error] [pid 1321:tid 1597] [client 4.205.62.107:59074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/i.php"] [unique_id "apK-VGjCPtor9NZ-byTveAAABqg"]
[Sat Aug 29 05:11:16.212895 2026] [security2:error] [pid 1321:tid 1517] [client 40.83.93.50:3922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/goods.php"] [unique_id "apK-VGjCPtor9NZ-byTveQAABlk"]
[Sat Aug 29 05:11:16.228814 2026] [security2:error] [pid 11274:tid 11569] [client 4.205.62.107:58390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/a1vx.php"] [unique_id "apK-VGbX5DA3XO6e_qQy_wAAAYU"]
[Sat Aug 29 05:11:16.229168 2026] [security2:error] [pid 11274:tid 11440] [remote 34.138.144.127:43542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/site/.env"] [unique_id "apK-VGbX5DA3XO6e_qQy_QABaX0"]
[Sat Aug 29 05:11:16.229168 2026] [security2:error] [pid 11274:tid 11415] [remote 34.138.144.127:43542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/apps/.env"] [unique_id "apK-VGbX5DA3XO6e_qQy_gABaWU"]
[Sat Aug 29 05:11:16.229395 2026] [security2:error] [pid 11274:tid 11483] [client 20.104.104.62:48478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/dbc.php"] [unique_id "apK-VGbX5DA3XO6e_qQzAAAAATA"]
[Sat Aug 29 05:11:16.243889 2026] [security2:error] [pid 11274:tid 11431] [remote 34.138.144.127:43542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/old/.env"] [unique_id "apK-VGbX5DA3XO6e_qQzAgABKHU"]
[Sat Aug 29 05:11:16.246069 2026] [security2:error] [pid 11274:tid 11437] [remote 34.138.144.127:43542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/v1/.env"] [unique_id "apK-VGbX5DA3XO6e_qQzBAABEHo"]
[Sat Aug 29 05:11:16.246413 2026] [security2:error] [pid 11274:tid 11439] [remote 34.138.144.127:43542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/v2/.env"] [unique_id "apK-VGbX5DA3XO6e_qQzCgABEHw"]
[Sat Aug 29 05:11:16.253179 2026] [security2:error] [pid 11274:tid 11479] [client 20.104.104.62:40225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/tai.php"] [unique_id "apK-VGbX5DA3XO6e_qQzCwAAASw"]
[Sat Aug 29 05:11:16.261832 2026] [security2:error] [pid 11274:tid 11547] [client 68.155.159.216:14302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-mail.php"] [unique_id "apK-VGbX5DA3XO6e_qQzDgAAAW8"]
[Sat Aug 29 05:11:16.266100 2026] [security2:error] [pid 11274:tid 11456] [client 158.23.184.117:7932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/wp-content/images/uploads/admin.php"] [unique_id "apK-VGbX5DA3XO6e_qQzDwAAARY"]
[Sat Aug 29 05:11:16.267664 2026] [security2:error] [pid 11274:tid 11558] [client 68.155.159.216:65108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-content/packed.php"] [unique_id "apK-VGbX5DA3XO6e_qQzEAAAAXo"]
[Sat Aug 29 05:11:16.280457 2026] [security2:error] [pid 11274:tid 11546] [client 52.139.37.240:56104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "apK-VGbX5DA3XO6e_qQzEwAAAW4"]
[Sat Aug 29 05:11:16.290202 2026] [security2:error] [pid 11274:tid 11490] [client 52.139.37.240:36693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/7logs.php"] [unique_id "apK-VGbX5DA3XO6e_qQzFgAAATc"]
[Sat Aug 29 05:11:16.299905 2026] [security2:error] [pid 11274:tid 11516] [client 20.52.41.200:2833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK-VGbX5DA3XO6e_qQzGAAAAVE"]
[Sat Aug 29 05:11:16.305998 2026] [cgid:error] [pid 11274:tid 11466] [client 20.104.104.62:16763] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/thepoetinnewyork/404.shtml
[Sat Aug 29 05:11:16.307534 2026] [security2:error] [pid 11274:tid 11419] [remote 93.123.109.228:39990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/config/aws.php"] [unique_id "apK-VGbX5DA3XO6e_qQzGwABP2k"]
[Sat Aug 29 05:11:16.307724 2026] [security2:error] [pid 1321:tid 1605] [client 158.158.54.35:12381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-content/file.php"] [unique_id "apK-VGjCPtor9NZ-byTvfQAABrA"]
[Sat Aug 29 05:11:16.308658 2026] [security2:error] [pid 11274:tid 11466] [client 20.48.160.90:63332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/tnglzqmv.php"] [unique_id "apK-VGbX5DA3XO6e_qQzHQAAASA"]
[Sat Aug 29 05:11:16.326306 2026] [security2:error] [pid 11274:tid 11442] [remote 93.123.109.228:39990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/config/config.inc.php"] [unique_id "apK-VGbX5DA3XO6e_qQzIQABP38"]
[Sat Aug 29 05:11:16.336013 2026] [security2:error] [pid 11274:tid 11434] [remote 34.138.144.127:43542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/env.bak"] [unique_id "apK-VGbX5DA3XO6e_qQzIwABWHc"]
[Sat Aug 29 05:11:16.339855 2026] [security2:error] [pid 1321:tid 1565] [client 20.240.128.207:21199] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "stellarstaffingca.com"] [uri "/1.php"] [unique_id "apK-VGjCPtor9NZ-byTvfgAABog"]
[Sat Aug 29 05:11:16.339954 2026] [security2:error] [pid 1321:tid 1565] [client 20.240.128.207:21199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/1.php"] [unique_id "apK-VGjCPtor9NZ-byTvfgAABog"]
[Sat Aug 29 05:11:16.340424 2026] [security2:error] [pid 1321:tid 1560] [client 20.104.104.62:33913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.americanvarietyradio.net"] [uri "/abc.php"] [unique_id "apK-VGjCPtor9NZ-byTvfwAABoM"]
[Sat Aug 29 05:11:16.347070 2026] [security2:error] [pid 1321:tid 1535] [client 20.100.175.163:25492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-access.php"] [unique_id "apK-VGjCPtor9NZ-byTvgQAABms"]
[Sat Aug 29 05:11:16.350499 2026] [security2:error] [pid 11274:tid 11572] [client 20.63.219.114:14144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-admin/options-general.php"] [unique_id "apK-VGbX5DA3XO6e_qQzJgAAAYg"]
[Sat Aug 29 05:11:16.355412 2026] [security2:error] [pid 11274:tid 11530] [client 20.104.104.62:61763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/wp-gzone.php"] [unique_id "apK-VGbX5DA3XO6e_qQzKAAAAV8"]
[Sat Aug 29 05:11:16.357072 2026] [security2:error] [pid 11274:tid 11331] [remote 93.123.109.228:39990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/config/config.php"] [unique_id "apK-VGbX5DA3XO6e_qQzKQABKRI"]
[Sat Aug 29 05:11:16.375604 2026] [cgid:error] [pid 11274:tid 11445] [client 20.104.104.62:16763] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/thepoetinnewyork/404.shtml
[Sat Aug 29 05:11:16.378213 2026] [security2:error] [pid 11274:tid 11318] [remote 34.138.144.127:43542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/staging/.env"] [unique_id "apK-VGbX5DA3XO6e_qQzLgABWQU"]
[Sat Aug 29 05:11:16.388624 2026] [security2:error] [pid 11274:tid 11326] [remote 34.138.144.127:43542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/env.old"] [unique_id "apK-VGbX5DA3XO6e_qQzLwABPA0"]
[Sat Aug 29 05:11:16.397421 2026] [security2:error] [pid 11274:tid 11359] [remote 34.138.144.127:43542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/portal/.env"] [unique_id "apK-VGbX5DA3XO6e_qQzPAABSS4"]
[Sat Aug 29 05:11:16.397433 2026] [security2:error] [pid 11274:tid 11350] [remote 34.138.144.127:43542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/.docker/.env"] [unique_id "apK-VGbX5DA3XO6e_qQzOwABSSU"]
[Sat Aug 29 05:11:16.398509 2026] [security2:error] [pid 11274:tid 11549] [client 158.23.147.79:53956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-mail.php"] [unique_id "apK-VGbX5DA3XO6e_qQzPgAAAXE"]
[Sat Aug 29 05:11:16.400633 2026] [security2:error] [pid 1321:tid 1519] [client 158.23.147.79:24461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-includes/css/index.php"] [unique_id "apK-VGjCPtor9NZ-byTvhgAABls"]
[Sat Aug 29 05:11:16.400959 2026] [security2:error] [pid 1321:tid 1514] [client 20.151.200.44:63684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/f2r4.php"] [unique_id "apK-VGjCPtor9NZ-byTvhwAABlY"]
[Sat Aug 29 05:11:16.408896 2026] [security2:error] [pid 11274:tid 11555] [client 158.23.184.117:7226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/tools.php"] [unique_id "apK-VGbX5DA3XO6e_qQzQQAAAXc"]
[Sat Aug 29 05:11:16.420125 2026] [security2:error] [pid 11274:tid 11356] [remote 93.123.109.228:39990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/config/env.php"] [unique_id "apK-VGbX5DA3XO6e_qQzRAABKis"]
[Sat Aug 29 05:11:16.429475 2026] [security2:error] [pid 11274:tid 11501] [client 158.158.54.35:10128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-good.php"] [unique_id "apK-VGbX5DA3XO6e_qQzRwAAAUI"]
[Sat Aug 29 05:11:16.431593 2026] [security2:error] [pid 1321:tid 1598] [client 4.205.62.107:64978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/xza.php"] [unique_id "apK-VGjCPtor9NZ-byTvjAAABqk"]
[Sat Aug 29 05:11:16.432168 2026] [security2:error] [pid 1321:tid 1607] [client 40.83.93.50:10723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/post.php"] [unique_id "apK-VGjCPtor9NZ-byTvjQAABrI"]
[Sat Aug 29 05:11:16.455943 2026] [security2:error] [pid 11274:tid 11351] [remote 93.123.109.228:39990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/config/module.config.php"] [unique_id "apK-VGbX5DA3XO6e_qQzTQABKiY"]
[Sat Aug 29 05:11:16.457267 2026] [security2:error] [pid 11274:tid 11376] [remote 93.123.109.228:39990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/config/nexmo.php"] [unique_id "apK-VGbX5DA3XO6e_qQzTgABKj4"]
[Sat Aug 29 05:11:16.490125 2026] [security2:error] [pid 11274:tid 11461] [client 52.139.37.240:36725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/ac.php"] [unique_id "apK-VGbX5DA3XO6e_qQzVAAAARs"]
[Sat Aug 29 05:11:16.491931 2026] [security2:error] [pid 11274:tid 11544] [client 4.205.62.107:60345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/motu.php"] [unique_id "apK-VGbX5DA3XO6e_qQzVQAAAWw"]
[Sat Aug 29 05:11:16.493652 2026] [security2:error] [pid 1321:tid 1507] [client 52.139.37.240:56081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-VGjCPtor9NZ-byTvjwAABk8"]
[Sat Aug 29 05:11:16.494137 2026] [security2:error] [pid 11274:tid 11468] [client 20.104.104.62:48684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/wp-wlx.php"] [unique_id "apK-VGbX5DA3XO6e_qQzVgAAASI"]
[Sat Aug 29 05:11:16.497921 2026] [security2:error] [pid 11274:tid 11340] [remote 34.138.144.127:43542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/@fs/root/.env"] [unique_id "apK-VGbX5DA3XO6e_qQzWAABPRs"]
[Sat Aug 29 05:11:16.500030 2026] [cgid:error] [pid 11274:tid 11339] [remote 34.138.144.127:43542] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:16.500513 2026] [security2:error] [pid 11274:tid 11375] [remote 34.138.144.127:43542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/.env.production.bak"] [unique_id "apK-VGbX5DA3XO6e_qQzWQABPT0"]
[Sat Aug 29 05:11:16.500513 2026] [security2:error] [pid 11274:tid 11334] [remote 34.138.144.127:43542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/.env.prod.bak"] [unique_id "apK-VGbX5DA3XO6e_qQzWgABPRU"]
[Sat Aug 29 05:11:16.501415 2026] [security2:error] [pid 11274:tid 11362] [remote 34.138.144.127:43542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/@fs/.env"] [unique_id "apK-VGbX5DA3XO6e_qQzWwABPTA"]
[Sat Aug 29 05:11:16.502412 2026] [security2:error] [pid 11274:tid 11489] [client 20.48.160.90:63252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/wefile.php"] [unique_id "apK-VGbX5DA3XO6e_qQzXAAAATY"]
[Sat Aug 29 05:11:16.503744 2026] [security2:error] [pid 11274:tid 11361] [remote 93.123.109.228:39990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/config/stripe.php"] [unique_id "apK-VGbX5DA3XO6e_qQzXQABKi8"]
[Sat Aug 29 05:11:16.512958 2026] [security2:error] [pid 1321:tid 1613] [client 20.196.209.81:3334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/class-walker-category-dropdown-class.php"] [unique_id "apK-VGjCPtor9NZ-byTvkAAABrg"]
[Sat Aug 29 05:11:16.523214 2026] [security2:error] [pid 1321:tid 1515] [client 103.171.189.88:53622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-VGjCPtor9NZ-byTvkgAABlc"]
[Sat Aug 29 05:11:16.523321 2026] [security2:error] [pid 1321:tid 1515] [client 103.171.189.88:53622] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-VGjCPtor9NZ-byTvkgAABlc"]
[Sat Aug 29 05:11:16.531166 2026] [security2:error] [pid 1321:tid 1604] [client 158.158.54.35:11598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/file.php"] [unique_id "apK-VGjCPtor9NZ-byTvkwAABq8"]
[Sat Aug 29 05:11:16.531461 2026] [security2:error] [pid 1321:tid 1544] [client 68.155.159.216:56819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-content/banners/about.php"] [unique_id "apK-VGjCPtor9NZ-byTvlAAABnQ"]
[Sat Aug 29 05:11:16.539123 2026] [security2:error] [pid 11274:tid 11499] [client 68.155.159.216:62784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-content/radio.php"] [unique_id "apK-VGbX5DA3XO6e_qQzYwAAAUA"]
[Sat Aug 29 05:11:16.545273 2026] [security2:error] [pid 11274:tid 11536] [client 20.104.104.62:33883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.americanvarietyradio.net"] [uri "/admin/function.php"] [unique_id "apK-VGbX5DA3XO6e_qQzZAAAAWU"]
[Sat Aug 29 05:11:16.553522 2026] [security2:error] [pid 11274:tid 11480] [client 158.23.184.117:7557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/wp-content/uploads/my.php"] [unique_id "apK-VGbX5DA3XO6e_qQzZQAAAS0"]
[Sat Aug 29 05:11:16.562380 2026] [security2:error] [pid 11274:tid 11569] [client 20.104.104.62:52337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/str.php"] [unique_id "apK-VGbX5DA3XO6e_qQzaAAAAYU"]
[Sat Aug 29 05:11:16.570790 2026] [security2:error] [pid 11274:tid 11377] [remote 34.138.144.127:43542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/api/.env.bak"] [unique_id "apK-VGbX5DA3XO6e_qQzaQABaD8"]
[Sat Aug 29 05:11:16.594985 2026] [security2:error] [pid 1321:tid 1510] [client 20.52.41.200:4743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/goods.php"] [unique_id "apK-VGjCPtor9NZ-byTvlwAABlI"]
[Sat Aug 29 05:11:16.618924 2026] [security2:error] [pid 1321:tid 1543] [client 20.63.219.114:2799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/about.php525"] [unique_id "apK-VGjCPtor9NZ-byTvmAAABnM"]
[Sat Aug 29 05:11:16.623632 2026] [security2:error] [pid 1321:tid 1516] [client 91.92.42.30:48204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 30.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "s212.net"] [uri "/xmlrpc.php"] [unique_id "apK-VGjCPtor9NZ-byTvlQAABlg"]
[Sat Aug 29 05:11:16.624108 2026] [security2:error] [pid 11274:tid 11554] [client 20.104.104.62:20661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/www.php"] [unique_id "apK-VGbX5DA3XO6e_qQzdwAAAXY"]
[Sat Aug 29 05:11:16.673035 2026] [security2:error] [pid 11274:tid 11537] [client 20.48.160.90:61006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/blog.php"] [unique_id "apK-VGbX5DA3XO6e_qQzfwAAAWY"]
[Sat Aug 29 05:11:16.680007 2026] [security2:error] [pid 1321:tid 1521] [client 20.100.175.163:13813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-admin/index.php"] [unique_id "apK-VGjCPtor9NZ-byTvnAAABl0"]
[Sat Aug 29 05:11:16.696077 2026] [security2:error] [pid 11274:tid 11560] [client 52.139.37.240:35890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/ctex1.php"] [unique_id "apK-VGbX5DA3XO6e_qQzgQAAAXw"]
[Sat Aug 29 05:11:16.707767 2026] [security2:error] [pid 11274:tid 11550] [client 20.63.219.114:13453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-admin/options.php"] [unique_id "apK-VGbX5DA3XO6e_qQzhQAAAXI"]
[Sat Aug 29 05:11:16.713304 2026] [security2:error] [pid 11274:tid 11558] [client 45.148.10.62:35338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zbf.rru.mybluehost.me"] [uri "/wp-config.php"] [unique_id "apK-VGbX5DA3XO6e_qQzhgAAAXo"]
[Sat Aug 29 05:11:16.740747 2026] [security2:error] [pid 11274:tid 11451] [client 20.104.104.62:33890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.americanvarietyradio.net"] [uri "/ak.php"] [unique_id "apK-VGbX5DA3XO6e_qQzkgAAARE"]
[Sat Aug 29 05:11:16.741445 2026] [security2:error] [pid 1321:tid 1538] [client 158.23.184.117:7206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/wp-includes/themes/uploads/config.php"] [unique_id "apK-VGjCPtor9NZ-byTvnwAABm4"]
[Sat Aug 29 05:11:16.742929 2026] [security2:error] [pid 1321:tid 1593] [client 4.205.62.107:61718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/f35.php"] [unique_id "apK-VGjCPtor9NZ-byTvoAAABqQ"]
[Sat Aug 29 05:11:16.754326 2026] [security2:error] [pid 11274:tid 11474] [client 20.52.41.200:2865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/xda.php"] [unique_id "apK-VGbX5DA3XO6e_qQzlQAAASg"]
[Sat Aug 29 05:11:16.756409 2026] [security2:error] [pid 1321:tid 1549] [client 158.158.54.35:10158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/files.php"] [unique_id "apK-VGjCPtor9NZ-byTvoQAABng"]
[Sat Aug 29 05:11:16.760515 2026] [security2:error] [pid 1321:tid 1611] [client 40.83.93.50:20647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/hehe.php"] [unique_id "apK-VGjCPtor9NZ-byTvogAABrY"]
[Sat Aug 29 05:11:16.768247 2026] [security2:error] [pid 11274:tid 11402] [remote 93.123.109.228:52272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/.env.php"] [unique_id "apK-VGbX5DA3XO6e_qQzmAABGVg"]
[Sat Aug 29 05:11:16.809822 2026] [security2:error] [pid 1321:tid 1504] [client 68.155.159.216:64059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/sad/about.php"] [unique_id "apK-VGjCPtor9NZ-byTvpgAABkw"]
[Sat Aug 29 05:11:16.814229 2026] [security2:error] [pid 11274:tid 11485] [client 20.48.160.90:63342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/wp-admin/js/wp-load.php"] [unique_id "apK-VGbX5DA3XO6e_qQznQAAATI"]
[Sat Aug 29 05:11:16.826063 2026] [security2:error] [pid 1321:tid 1595] [client 20.100.175.163:15834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-content/uploads/min.php"] [unique_id "apK-VGjCPtor9NZ-byTvpwAABqY"]
[Sat Aug 29 05:11:16.829541 2026] [security2:error] [pid 1321:tid 1552] [client 138.199.19.170:36224] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.fanlebrity.com"] [uri "/autodiscover/autodiscover.xml/shop/wp-includes/wlwmanifest.xml"] [unique_id "apK-VGjCPtor9NZ-byTvqAAABns"]
[Sat Aug 29 05:11:16.869979 2026] [security2:error] [pid 11274:tid 11488] [client 52.139.37.240:56118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/wp-index.php"] [unique_id "apK-VGbX5DA3XO6e_qQzrAAAATU"]
[Sat Aug 29 05:11:16.884943 2026] [security2:error] [pid 1321:tid 1488] [client 158.23.184.117:7372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/av.php"] [unique_id "apK-VGjCPtor9NZ-byTvqQAABjw"]
[Sat Aug 29 05:11:16.892589 2026] [security2:error] [pid 11274:tid 11448] [client 52.139.37.240:35857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/defaults.php"] [unique_id "apK-VGbX5DA3XO6e_qQzrwAAAQ4"]
[Sat Aug 29 05:11:16.902927 2026] [security2:error] [pid 1321:tid 1590] [client 40.83.93.50:10693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/flower.php"] [unique_id "apK-VGjCPtor9NZ-byTvqwAABqE"]
[Sat Aug 29 05:11:16.909956 2026] [security2:error] [pid 1321:tid 1563] [client 158.23.147.79:52343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK-VGjCPtor9NZ-byTvrQAABoY"]
[Sat Aug 29 05:11:16.915651 2026] [security2:error] [pid 11274:tid 11490] [client 158.158.54.35:10155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "apK-VGbX5DA3XO6e_qQztAAAATc"]
[Sat Aug 29 05:11:16.922837 2026] [security2:error] [pid 11274:tid 11470] [client 20.104.49.130:48591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/kerang.php"] [unique_id "apK-VGbX5DA3XO6e_qQztwAAASQ"]
[Sat Aug 29 05:11:16.937101 2026] [security2:error] [pid 1321:tid 1584] [client 158.23.147.79:43314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK-VGjCPtor9NZ-byTvrgAABps"]
[Sat Aug 29 05:11:16.942536 2026] [security2:error] [pid 11274:tid 11561] [client 4.205.62.107:6286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/u88.php"] [unique_id "apK-VGbX5DA3XO6e_qQzvwAAAX0"]
[Sat Aug 29 05:11:16.952183 2026] [security2:error] [pid 1321:tid 1556] [client 20.48.160.90:65400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/robot.php"] [unique_id "apK-VGjCPtor9NZ-byTvrwAABn8"]
[Sat Aug 29 05:11:16.954384 2026] [security2:error] [pid 11274:tid 11473] [client 20.196.209.81:3358] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/1.php7"] [unique_id "apK-VGbX5DA3XO6e_qQzwQAAASc"]
[Sat Aug 29 05:11:16.954500 2026] [security2:error] [pid 11274:tid 11473] [client 20.196.209.81:3358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/1.php7"] [unique_id "apK-VGbX5DA3XO6e_qQzwQAAASc"]
[Sat Aug 29 05:11:16.954956 2026] [security2:error] [pid 11274:tid 11524] [client 20.104.104.62:48601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/attack.php"] [unique_id "apK-VGbX5DA3XO6e_qQzwgAAAVk"]
[Sat Aug 29 05:11:16.975522 2026] [security2:error] [pid 1321:tid 1508] [client 158.158.54.35:11589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK-VGjCPtor9NZ-byTvsQAABlA"]
[Sat Aug 29 05:11:17.008297 2026] [security2:error] [pid 11274:tid 11520] [client 68.155.159.216:1964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-login.php"] [unique_id "apK-VWbX5DA3XO6e_qQz0QAAAVU"]
[Sat Aug 29 05:11:17.031268 2026] [core:error] [pid 11274:tid 11461] [client 95.108.213.126:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:17.031288 2026] [core:error] [pid 11274:tid 11461] [client 95.108.213.126:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:17.041723 2026] [security2:error] [pid 1321:tid 1586] [client 68.155.159.216:23546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-includes/js/index.php"] [unique_id "apK-VWjCPtor9NZ-byTvsgAABp0"]
[Sat Aug 29 05:11:17.045298 2026] [security2:error] [pid 11274:tid 11496] [client 20.240.128.207:19856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/s.php"] [unique_id "apK-VWbX5DA3XO6e_qQz4QAAAT0"]
[Sat Aug 29 05:11:17.052501 2026] [security2:error] [pid 11274:tid 11530] [client 20.52.41.200:4395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/css.php"] [unique_id "apK-VWbX5DA3XO6e_qQz4wAAAV8"]
[Sat Aug 29 05:11:17.069604 2026] [security2:error] [pid 1321:tid 1555] [client 52.139.37.240:56101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/ww2.php"] [unique_id "apK-VWjCPtor9NZ-byTvtAAABn4"]
[Sat Aug 29 05:11:17.071934 2026] [security2:error] [pid 11274:tid 11449] [client 20.63.219.114:4397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-admin/panel.php"] [unique_id "apK-VWbX5DA3XO6e_qQz5gAAAQ8"]
[Sat Aug 29 05:11:17.074208 2026] [security2:error] [pid 11274:tid 11509] [client 114.119.136.146:39117] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.classiclightingusa.com"] [uri "/catalog/index.php/cPath/4/osCsid/d45f032ff76a812cf779e2306edf1e38"] [unique_id "apK-VWbX5DA3XO6e_qQz5wAAAUo"], referer: http://www.classiclightingusa.com/catalog/product_info.php/products_id/854
[Sat Aug 29 05:11:17.086750 2026] [security2:error] [pid 11274:tid 11507] [client 158.23.184.117:7487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/wp-includes/ID3/file.php"] [unique_id "apK-VWbX5DA3XO6e_qQz6AAAAUg"]
[Sat Aug 29 05:11:17.087553 2026] [security2:error] [pid 11274:tid 11502] [client 158.23.147.79:50136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK-VWbX5DA3XO6e_qQz6QAAAUM"]
[Sat Aug 29 05:11:17.093135 2026] [security2:error] [pid 11274:tid 11544] [client 52.139.37.240:60679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/domains.php"] [unique_id "apK-VWbX5DA3XO6e_qQz6wAAAWw"]
[Sat Aug 29 05:11:17.096864 2026] [security2:error] [pid 11274:tid 11551] [client 20.48.250.41:27596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/erty.php"] [unique_id "apK-VWbX5DA3XO6e_qQz7AAAAXM"]
[Sat Aug 29 05:11:17.118897 2026] [security2:error] [pid 1321:tid 1580] [client 20.63.219.114:10308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/spip.php"] [unique_id "apK-VWjCPtor9NZ-byTvtgAABpc"]
[Sat Aug 29 05:11:17.151995 2026] [security2:error] [pid 11274:tid 11497] [client 68.155.159.216:6083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/ans.php"] [unique_id "apK-VWbX5DA3XO6e_qQz8gAAAT4"]
[Sat Aug 29 05:11:17.182830 2026] [security2:error] [pid 1321:tid 1583] [client 20.48.160.90:64170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/revo.php"] [unique_id "apK-VWjCPtor9NZ-byTvuwAABpo"]
[Sat Aug 29 05:11:17.189930 2026] [security2:error] [pid 1321:tid 1494] [client 82.102.18.116:45568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 116.18.102.82.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.bodybenefitspilates.com"] [uri "/xmlrpc.php"] [unique_id "apK-VWjCPtor9NZ-byTvvAAABkI"]
[Sat Aug 29 05:11:17.190064 2026] [security2:error] [pid 1321:tid 1494] [client 82.102.18.116:45568] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "www.bodybenefitspilates.com"] [uri "/xmlrpc.php"] [unique_id "apK-VWjCPtor9NZ-byTvvAAABkI"]
[Sat Aug 29 05:11:17.210668 2026] [security2:error] [pid 1321:tid 1589] [client 158.158.54.35:17721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/o.php"] [unique_id "apK-VWjCPtor9NZ-byTvvQAABqA"]
[Sat Aug 29 05:11:17.217226 2026] [security2:error] [pid 1321:tid 1531] [client 20.52.41.200:2768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/theme.php"] [unique_id "apK-VWjCPtor9NZ-byTvvgAABmc"]
[Sat Aug 29 05:11:17.217986 2026] [security2:error] [pid 11274:tid 11494] [client 20.100.175.163:13796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/radio.php"] [unique_id "apK-VWbX5DA3XO6e_qQ0BAAAATs"]
[Sat Aug 29 05:11:17.219635 2026] [security2:error] [pid 11274:tid 11518] [client 68.155.159.216:64502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/x.php"] [unique_id "apK-VWbX5DA3XO6e_qQ0BQAAAVM"]
[Sat Aug 29 05:11:17.234640 2026] [security2:error] [pid 1321:tid 1599] [client 158.23.184.117:7190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.redelan.cl"] [uri "/wp-admin/css/fff.php"] [unique_id "apK-VWjCPtor9NZ-byTvvwAABqo"]
[Sat Aug 29 05:11:17.239744 2026] [security2:error] [pid 11274:tid 11477] [client 68.155.159.216:30565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/x.php"] [unique_id "apK-VWbX5DA3XO6e_qQ0CAAAASs"]
[Sat Aug 29 05:11:17.267992 2026] [security2:error] [pid 11274:tid 11534] [client 52.139.37.240:56088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/7logs.php"] [unique_id "apK-VWbX5DA3XO6e_qQ0DQAAAWM"]
[Sat Aug 29 05:11:17.282314 2026] [security2:error] [pid 1321:tid 1594] [client 40.83.93.50:3913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/wp-admin/class-db.php"] [unique_id "apK-VWjCPtor9NZ-byTvwgAABqU"]
[Sat Aug 29 05:11:17.293216 2026] [security2:error] [pid 11274:tid 11474] [client 52.139.37.240:60677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/dropdown.php"] [unique_id "apK-VWbX5DA3XO6e_qQ0EwAAASg"]
[Sat Aug 29 05:11:17.298527 2026] [cgid:error] [pid 11274:tid 11332] [remote 34.138.144.127:43542] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:17.303529 2026] [security2:error] [pid 11274:tid 11371] [remote 34.138.144.127:43542] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "www.studiopasa.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK-VWbX5DA3XO6e_qQ0GAABLDk"]
[Sat Aug 29 05:11:17.303931 2026] [cgid:error] [pid 11274:tid 11382] [remote 34.138.144.127:43542] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:17.317431 2026] [security2:error] [pid 1321:tid 1598] [client 20.100.175.163:14893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK-VWjCPtor9NZ-byTvwwAABqk"]
[Sat Aug 29 05:11:17.320935 2026] [security2:error] [pid 1321:tid 1598] [client 20.48.160.90:64236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/birrs.php"] [unique_id "apK-VWjCPtor9NZ-byTvxAAABqk"]
[Sat Aug 29 05:11:17.356532 2026] [security2:error] [pid 1321:tid 1573] [client 4.205.62.107:59080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/guk.php"] [unique_id "apK-VWjCPtor9NZ-byTvxgAABpA"]
[Sat Aug 29 05:11:17.358993 2026] [security2:error] [pid 1321:tid 1527] [client 20.196.209.81:15370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/ds.php"] [unique_id "apK-VWjCPtor9NZ-byTvxwAABmM"]
[Sat Aug 29 05:11:17.368268 2026] [security2:error] [pid 1321:tid 1562] [client 4.205.62.107:58404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/phpsysinfo.php"] [unique_id "apK-VWjCPtor9NZ-byTvyQAABoU"]
[Sat Aug 29 05:11:17.372182 2026] [security2:error] [pid 11274:tid 11451] [client 158.158.54.35:15323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/abcd.php"] [unique_id "apK-VWbX5DA3XO6e_qQ0JwAAARE"]
[Sat Aug 29 05:11:17.374495 2026] [security2:error] [pid 11274:tid 11490] [client 68.155.159.216:14308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/cgi-bin/index.php"] [unique_id "apK-VWbX5DA3XO6e_qQ0KAAAATc"]
[Sat Aug 29 05:11:17.378425 2026] [security2:error] [pid 11274:tid 11559] [client 68.155.159.216:63824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-l0gin.php"] [unique_id "apK-VWbX5DA3XO6e_qQ0KQAAAXs"]
[Sat Aug 29 05:11:17.379791 2026] [security2:error] [pid 1321:tid 1550] [client 40.83.93.50:10717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/meta.php"] [unique_id "apK-VWjCPtor9NZ-byTvygAABnk"]
[Sat Aug 29 05:11:17.395655 2026] [security2:error] [pid 11274:tid 11561] [client 20.151.200.44:61613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/see.php"] [unique_id "apK-VWbX5DA3XO6e_qQ0LQAAAX0"]
[Sat Aug 29 05:11:17.409056 2026] [security2:error] [pid 11274:tid 11365] [remote 93.123.109.228:39990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/info.php"] [unique_id "apK-VWbX5DA3XO6e_qQ0LgABQTM"]
[Sat Aug 29 05:11:17.410817 2026] [security2:error] [pid 11274:tid 11383] [remote 93.123.109.228:39990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/infophp.php"] [unique_id "apK-VWbX5DA3XO6e_qQ0LwABQUU"]
[Sat Aug 29 05:11:17.426354 2026] [security2:error] [pid 11274:tid 11516] [client 158.158.54.35:31104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/gmo.php"] [unique_id "apK-VWbX5DA3XO6e_qQ0MgAAAVE"]
[Sat Aug 29 05:11:17.428161 2026] [security2:error] [pid 11274:tid 11374] [remote 93.123.109.228:39990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/infos.php"] [unique_id "apK-VWbX5DA3XO6e_qQ0NAABQTw"]
[Sat Aug 29 05:11:17.431565 2026] [security2:error] [pid 11274:tid 11523] [client 20.63.219.114:4389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-admin/pk.php"] [unique_id "apK-VWbX5DA3XO6e_qQ0OAAAAVg"]
[Sat Aug 29 05:11:17.431849 2026] [security2:error] [pid 11274:tid 11466] [client 45.148.10.62:35368] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "mail.zbf.rru.mybluehost.me"] [uri "/wp-config.php.old"] [unique_id "apK-VWbX5DA3XO6e_qQ0NwAAASA"]
[Sat Aug 29 05:11:17.469397 2026] [security2:error] [pid 11274:tid 11492] [client 20.48.160.90:65310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/sss.php"] [unique_id "apK-VWbX5DA3XO6e_qQ0PwAAATk"]
[Sat Aug 29 05:11:17.483135 2026] [security2:error] [pid 1321:tid 1542] [client 52.139.37.240:16505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/ac.php"] [unique_id "apK-VWjCPtor9NZ-byTvzQAABnI"]
[Sat Aug 29 05:11:17.494449 2026] [security2:error] [pid 11274:tid 11503] [client 52.139.37.240:35866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/files/index.php"] [unique_id "apK-VWbX5DA3XO6e_qQ0QwAAAUQ"]
[Sat Aug 29 05:11:17.499858 2026] [security2:error] [pid 11274:tid 11452] [client 138.199.19.170:36232] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.fanlebrity.com"] [uri "/autodiscover/autodiscover.xml/wp1/wp-includes/wlwmanifest.xml"] [unique_id "apK-VWbX5DA3XO6e_qQ0RQAAARI"]
[Sat Aug 29 05:11:17.508817 2026] [security2:error] [pid 1321:tid 1496] [client 158.23.147.79:60169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/cgi-bin/index.php"] [unique_id "apK-VWjCPtor9NZ-byTvzwAABkQ"]
[Sat Aug 29 05:11:17.513084 2026] [security2:error] [pid 11274:tid 11445] [client 20.63.219.114:19140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/backup.php"] [unique_id "apK-VWbX5DA3XO6e_qQ0TgAAAQs"]
[Sat Aug 29 05:11:17.523933 2026] [security2:error] [pid 1321:tid 1543] [client 158.23.147.79:24395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK-VWjCPtor9NZ-byTv0AAABnM"]
[Sat Aug 29 05:11:17.531287 2026] [core:error] [pid 11274:tid 11464] [client 20.52.41.200:4356] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:17.531307 2026] [core:error] [pid 11274:tid 11464] [client 20.52.41.200:4356] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:17.535978 2026] [security2:error] [pid 11274:tid 11461] [client 20.151.200.44:21814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/sadis.php"] [unique_id "apK-VWbX5DA3XO6e_qQ0VQAAARs"]
[Sat Aug 29 05:11:17.549337 2026] [security2:error] [pid 11274:tid 11470] [client 20.240.128.207:21227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/test1.php"] [unique_id "apK-VWbX5DA3XO6e_qQ0WwAAASQ"]
[Sat Aug 29 05:11:17.555343 2026] [security2:error] [pid 1321:tid 1606] [client 68.155.159.216:38284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK-VWjCPtor9NZ-byTv0QAABrE"]
[Sat Aug 29 05:11:17.636774 2026] [security2:error] [pid 11274:tid 11480] [client 4.205.62.107:59084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/public/mah.php.php"] [unique_id "apK-VWbX5DA3XO6e_qQ0dgAAAS0"]
[Sat Aug 29 05:11:17.639307 2026] [security2:error] [pid 11274:tid 11497] [client 68.155.159.216:56808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK-VWbX5DA3XO6e_qQ0dwAAAT4"]
[Sat Aug 29 05:11:17.658696 2026] [security2:error] [pid 11274:tid 11540] [client 45.148.10.62:35352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zbv.tvp.mybluehost.me"] [uri "/wp-config.php"] [unique_id "apK-VWbX5DA3XO6e_qQ0ewAAAWk"]
[Sat Aug 29 05:11:17.665023 2026] [security2:error] [pid 11274:tid 11527] [client 158.23.147.79:58058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK-VWbX5DA3XO6e_qQ0fAAAAVw"]
[Sat Aug 29 05:11:17.672792 2026] [security2:error] [pid 1321:tid 1516] [client 158.158.54.35:17681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/file2.php"] [unique_id "apK-VWjCPtor9NZ-byTv1AAABlg"]
[Sat Aug 29 05:11:17.678494 2026] [security2:error] [pid 1321:tid 1539] [client 20.52.41.200:2842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/classwithtostring.php"] [unique_id "apK-VWjCPtor9NZ-byTv1QAABm8"]
[Sat Aug 29 05:11:17.683600 2026] [security2:error] [pid 11274:tid 11502] [client 52.139.37.240:16713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/ctex1.php"] [unique_id "apK-VWbX5DA3XO6e_qQ0fwAAAUM"]
[Sat Aug 29 05:11:17.729239 2026] [security2:error] [pid 1321:tid 1504] [client 68.155.159.216:33769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK-VWjCPtor9NZ-byTv2AAABkw"]
[Sat Aug 29 05:11:17.771536 2026] [security2:error] [pid 11274:tid 11507] [client 20.100.175.163:13405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/item.php"] [unique_id "apK-VWbX5DA3XO6e_qQ0jgAAAUg"]
[Sat Aug 29 05:11:17.788739 2026] [security2:error] [pid 1321:tid 1549] [client 20.63.219.114:14179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-admin/plugin-install.php"] [unique_id "apK-VWjCPtor9NZ-byTv2gAABng"]
[Sat Aug 29 05:11:17.808070 2026] [security2:error] [pid 11274:tid 11517] [client 20.196.209.81:15402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/GOD.php"] [unique_id "apK-VWbX5DA3XO6e_qQ0kwAAAVI"]
[Sat Aug 29 05:11:17.810147 2026] [security2:error] [pid 1321:tid 1526] [client 20.100.175.163:15838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/bthil.php"] [unique_id "apK-VWjCPtor9NZ-byTv2wAABmI"]
[Sat Aug 29 05:11:17.818114 2026] [security2:error] [pid 11274:tid 11316] [remote 93.123.109.228:52272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/.wp-config.php.swp"] [unique_id "apK-VWbX5DA3XO6e_qQ0mAABGQM"]
[Sat Aug 29 05:11:17.819077 2026] [security2:error] [pid 1321:tid 1611] [client 158.158.54.35:30301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-access.php"] [unique_id "apK-VWjCPtor9NZ-byTv3AAABrY"]
[Sat Aug 29 05:11:17.839461 2026] [security2:error] [pid 1321:tid 1593] [client 40.83.93.50:20670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/wp-contentt.php"] [unique_id "apK-VWjCPtor9NZ-byTv3QAABqQ"]
[Sat Aug 29 05:11:17.842777 2026] [security2:error] [pid 1321:tid 1563] [client 20.104.104.62:57408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/mega.php"] [unique_id "apK-VWjCPtor9NZ-byTv3gAABoY"]
[Sat Aug 29 05:11:17.844624 2026] [security2:error] [pid 1321:tid 1584] [client 20.104.49.130:60743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/ms-edit.php"] [unique_id "apK-VWjCPtor9NZ-byTv3wAABps"]
[Sat Aug 29 05:11:17.863093 2026] [security2:error] [pid 1321:tid 1509] [client 158.158.54.35:11749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/classwithtostring.php"] [unique_id "apK-VWjCPtor9NZ-byTv4gAABlE"]
[Sat Aug 29 05:11:17.873677 2026] [security2:error] [pid 1321:tid 1495] [client 45.148.10.62:35370] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.zeh.elx.mybluehost.me"] [uri "/.env"] [unique_id "apK-VWjCPtor9NZ-byTv4wAABkM"]
[Sat Aug 29 05:11:17.876296 2026] [security2:error] [pid 11274:tid 11537] [client 4.205.62.107:63882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/api.php"] [unique_id "apK-VWbX5DA3XO6e_qQ0rQAAAWY"]
[Sat Aug 29 05:11:17.921722 2026] [security2:error] [pid 1321:tid 1552] [client 40.83.93.50:10727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/randkeyword.php"] [unique_id "apK-VWjCPtor9NZ-byTv6AAABns"]
[Sat Aug 29 05:11:17.935875 2026] [security2:error] [pid 11274:tid 11494] [client 68.155.159.216:64105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/admin.php"] [unique_id "apK-VWbX5DA3XO6e_qQ0wgAAATs"]
[Sat Aug 29 05:11:17.949387 2026] [security2:error] [pid 1321:tid 1587] [client 20.151.200.44:65275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/wp-admin/zwso.php"] [unique_id "apK-VWjCPtor9NZ-byTv6gAABp4"]
[Sat Aug 29 05:11:17.997850 2026] [core:error] [pid 11274:tid 11476] [client 20.52.41.200:4648] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:17.997870 2026] [core:error] [pid 11274:tid 11476] [client 20.52.41.200:4648] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:18.015673 2026] [security2:error] [pid 11274:tid 11504] [client 20.63.219.114:10358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/haiterus.php"] [unique_id "apK-VmbX5DA3XO6e_qQ0zwAAAUU"]
[Sat Aug 29 05:11:18.017805 2026] [security2:error] [pid 11274:tid 11553] [client 158.23.147.79:52346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-includes/content.php"] [unique_id "apK-VmbX5DA3XO6e_qQ00QAAAXU"]
[Sat Aug 29 05:11:18.043713 2026] [security2:error] [pid 1321:tid 1555] [client 45.148.10.62:35370] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.zeh.elx.mybluehost.me"] [uri "/.env"] [unique_id "apK-VmjCPtor9NZ-byTv7AAABn4"]
[Sat Aug 29 05:11:18.050728 2026] [security2:error] [pid 1321:tid 1532] [client 158.23.147.79:43287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK-VmjCPtor9NZ-byTv7QAABmg"]
[Sat Aug 29 05:11:18.055281 2026] [security2:error] [pid 1321:tid 1556] [client 20.240.128.207:18177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/ws.php"] [unique_id "apK-VmjCPtor9NZ-byTv7gAABn8"]
[Sat Aug 29 05:11:18.077265 2026] [security2:error] [pid 1321:tid 1581] [client 20.151.200.44:62206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/horeg.php"] [unique_id "apK-VmjCPtor9NZ-byTv7wAABpg"]
[Sat Aug 29 05:11:18.079473 2026] [security2:error] [pid 1321:tid 1614] [client 4.205.62.107:6848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/config/laravolt/css/index.php"] [unique_id "apK-VmjCPtor9NZ-byTv8AAABrk"]
[Sat Aug 29 05:11:18.096837 2026] [security2:error] [pid 1321:tid 1519] [client 20.48.250.41:27600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/0x.php"] [unique_id "apK-VmjCPtor9NZ-byTv8gAABls"]
[Sat Aug 29 05:11:18.099875 2026] [security2:error] [pid 1321:tid 1583] [client 4.205.62.107:63005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-VmjCPtor9NZ-byTv8wAABpo"]
[Sat Aug 29 05:11:18.107755 2026] [security2:error] [pid 11274:tid 11546] [client 4.205.62.107:64263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/ms-edit.php"] [unique_id "apK-VmbX5DA3XO6e_qQ04gAAAW4"]
[Sat Aug 29 05:11:18.110614 2026] [security2:error] [pid 11274:tid 11411] [remote 93.123.109.228:39990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/php-info.php"] [unique_id "apK-VmbX5DA3XO6e_qQ04wABQWE"]
[Sat Aug 29 05:11:18.120434 2026] [security2:error] [pid 1321:tid 1567] [client 68.155.159.216:1928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK-VmjCPtor9NZ-byTv9AAABoo"]
[Sat Aug 29 05:11:18.121633 2026] [security2:error] [pid 11274:tid 11465] [client 20.52.41.200:2664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/news.php"] [unique_id "apK-VmbX5DA3XO6e_qQ05AAAAR8"]
[Sat Aug 29 05:11:18.124186 2026] [security2:error] [pid 11274:tid 11563] [client 158.158.54.35:30274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK-VmbX5DA3XO6e_qQ05QAAAX8"]
[Sat Aug 29 05:11:18.125133 2026] [security2:error] [pid 11274:tid 11373] [remote 93.123.109.228:39990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/php.php"] [unique_id "apK-VmbX5DA3XO6e_qQ05gABQTs"]
[Sat Aug 29 05:11:18.142928 2026] [security2:error] [pid 11274:tid 11418] [remote 93.123.109.228:39990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/php_info.php"] [unique_id "apK-VmbX5DA3XO6e_qQ06gABQWg"]
[Sat Aug 29 05:11:18.152032 2026] [security2:error] [pid 1321:tid 1506] [client 20.63.219.114:4374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-admin/plugins/img/themes/plugins/maintenance.php"] [unique_id "apK-VmjCPtor9NZ-byTv9QAABk4"]
[Sat Aug 29 05:11:18.158398 2026] [security2:error] [pid 11274:tid 11378] [remote 93.123.109.228:39990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/phpinfo.php"] [unique_id "apK-VmbX5DA3XO6e_qQ07wABQUA"]
[Sat Aug 29 05:11:18.168216 2026] [security2:error] [pid 11274:tid 11467] [client 138.199.19.170:36236] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.fanlebrity.com"] [uri "/autodiscover/autodiscover.xml/test/wp-includes/wlwmanifest.xml"] [unique_id "apK-VmbX5DA3XO6e_qQ08gAAASE"]
[Sat Aug 29 05:11:18.262701 2026] [security2:error] [pid 11274:tid 11524] [client 68.155.159.216:5970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/worksec.php"] [unique_id "apK-VmbX5DA3XO6e_qQ0_wAAAVk"]
[Sat Aug 29 05:11:18.266081 2026] [security2:error] [pid 1321:tid 1494] [client 20.100.175.163:27055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/t.php"] [unique_id "apK-VmjCPtor9NZ-byTv-gAABkI"]
[Sat Aug 29 05:11:18.274011 2026] [security2:error] [pid 11274:tid 11498] [client 158.158.54.35:12363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-content/uploads/min.php"] [unique_id "apK-VmbX5DA3XO6e_qQ1AQAAAT8"]
[Sat Aug 29 05:11:18.311125 2026] [core:error] [pid 11274:tid 11529] [client 20.100.175.163:11355] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:18.311146 2026] [core:error] [pid 11274:tid 11529] [client 20.100.175.163:11355] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:18.318378 2026] [security2:error] [pid 1321:tid 1592] [client 158.158.54.35:17781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/404.php"] [unique_id "apK-VmjCPtor9NZ-byTv_AAABqM"]
[Sat Aug 29 05:11:18.321661 2026] [security2:error] [pid 11274:tid 11323] [remote 93.123.109.228:39990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/public/phpinfo.php"] [unique_id "apK-VmbX5DA3XO6e_qQ1CgABQQo"]
[Sat Aug 29 05:11:18.324635 2026] [security2:error] [pid 1321:tid 1577] [client 68.155.159.216:63799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-content/x.php"] [unique_id "apK-VmjCPtor9NZ-byTv_gAABpQ"]
[Sat Aug 29 05:11:18.333204 2026] [security2:error] [pid 1321:tid 1527] [client 20.196.209.81:15402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/ggfi.php"] [unique_id "apK-VmjCPtor9NZ-byTv_wAABmM"]
[Sat Aug 29 05:11:18.377244 2026] [security2:error] [pid 1321:tid 1528] [client 45.148.10.62:35384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zbf.rru.mybluehost.me"] [uri "/config.php"] [unique_id "apK-VmjCPtor9NZ-byTwAAAABmQ"]
[Sat Aug 29 05:11:18.386666 2026] [security2:error] [pid 11274:tid 11448] [client 45.148.10.62:35400] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "mail.zbv.tvp.mybluehost.me"] [uri "/wp-config.php.old"] [unique_id "apK-VmbX5DA3XO6e_qQ1HgAAAQ4"]
[Sat Aug 29 05:11:18.390514 2026] [security2:error] [pid 1321:tid 1543] [client 57.141.14.32:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/cart/"] [unique_id "apK-VmjCPtor9NZ-byTwAwAABnM"]
[Sat Aug 29 05:11:18.418237 2026] [security2:error] [pid 11274:tid 11543] [client 40.83.93.50:11817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/goods.php"] [unique_id "apK-VmbX5DA3XO6e_qQ1JAAAAWs"]
[Sat Aug 29 05:11:18.421342 2026] [security2:error] [pid 1321:tid 1499] [client 40.83.93.50:10038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/theme.php"] [unique_id "apK-VmjCPtor9NZ-byTwBwAABkc"]
[Sat Aug 29 05:11:18.445835 2026] [security2:error] [pid 11274:tid 11492] [client 20.63.219.114:2289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/go.php"] [unique_id "apK-VmbX5DA3XO6e_qQ1JgAAATk"]
[Sat Aug 29 05:11:18.460768 2026] [security2:error] [pid 11274:tid 11452] [client 20.52.41.200:4411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/w.php"] [unique_id "apK-VmbX5DA3XO6e_qQ1KgAAARI"]
[Sat Aug 29 05:11:18.482476 2026] [security2:error] [pid 1321:tid 1504] [client 68.155.159.216:14326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK-VmjCPtor9NZ-byTwCgAABkw"]
[Sat Aug 29 05:11:18.485005 2026] [security2:error] [pid 11274:tid 11566] [client 149.34.210.141:39522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-VmbX5DA3XO6e_qQ1LQAAAYI"]
[Sat Aug 29 05:11:18.485106 2026] [security2:error] [pid 11274:tid 11566] [client 149.34.210.141:39522] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-VmbX5DA3XO6e_qQ1LQAAAYI"]
[Sat Aug 29 05:11:18.490549 2026] [security2:error] [pid 11274:tid 11480] [client 68.155.159.216:65081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK-VmbX5DA3XO6e_qQ1LwAAAS0"]
[Sat Aug 29 05:11:18.491214 2026] [security2:error] [pid 1321:tid 1597] [client 20.48.160.90:65313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/wp-includes/ID3/moon.php"] [unique_id "apK-VmjCPtor9NZ-byTwCwAABqg"]
[Sat Aug 29 05:11:18.491378 2026] [security2:error] [pid 1321:tid 1512] [client 4.205.62.107:62949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/config_dev.php"] [unique_id "apK-VmjCPtor9NZ-byTwDAAABlQ"]
[Sat Aug 29 05:11:18.508348 2026] [security2:error] [pid 1321:tid 1510] [client 20.63.219.114:4143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-admin/security.php"] [unique_id "apK-VmjCPtor9NZ-byTwDgAABlI"]
[Sat Aug 29 05:11:18.523215 2026] [security2:error] [pid 1321:tid 1590] [client 4.205.62.107:51417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/koiy.php"] [unique_id "apK-VmjCPtor9NZ-byTwDwAABqE"]
[Sat Aug 29 05:11:18.547423 2026] [security2:error] [pid 1321:tid 1496] [client 20.240.128.207:12745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-themes.php"] [unique_id "apK-VmjCPtor9NZ-byTwEQAABkQ"]
[Sat Aug 29 05:11:18.569069 2026] [security2:error] [pid 11274:tid 11536] [client 20.52.41.200:2804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/about/function.php"] [unique_id "apK-VmbX5DA3XO6e_qQ1OwAAAWU"]
[Sat Aug 29 05:11:18.578114 2026] [security2:error] [pid 1321:tid 1566] [client 20.48.250.41:26901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/66.php"] [unique_id "apK-VmjCPtor9NZ-byTwEwAABok"]
[Sat Aug 29 05:11:18.594519 2026] [security2:error] [pid 1321:tid 1564] [client 158.158.54.35:17702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/xda.php"] [unique_id "apK-VmjCPtor9NZ-byTwFAAABoc"]
[Sat Aug 29 05:11:18.600561 2026] [security2:error] [pid 11274:tid 11441] [remote 93.123.109.228:52272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK-VmbX5DA3XO6e_qQ1QAABEH4"]
[Sat Aug 29 05:11:18.611450 2026] [security2:error] [pid 1321:tid 1552] [client 158.23.147.79:62815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK-VmjCPtor9NZ-byTwFQAABns"]
[Sat Aug 29 05:11:18.631587 2026] [security2:error] [pid 1321:tid 1558] [client 20.48.160.90:60951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/xmini4.php"] [unique_id "apK-VmjCPtor9NZ-byTwFwAABoE"]
[Sat Aug 29 05:11:18.631666 2026] [security2:error] [pid 11274:tid 11517] [client 158.23.147.79:24450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-content/cong.php"] [unique_id "apK-VmbX5DA3XO6e_qQ1RQAAAVI"]
[Sat Aug 29 05:11:18.635667 2026] [security2:error] [pid 1321:tid 1547] [client 20.151.200.44:27309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-VmjCPtor9NZ-byTwGAAABnY"]
[Sat Aug 29 05:11:18.682257 2026] [security2:error] [pid 11274:tid 11554] [client 74.7.228.41:44918] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "goldenledgekennel.flatlandsfoto.com"] [uri "/robots.txt"] [unique_id "apK-VmbX5DA3XO6e_qQ1UAABdjI"]
[Sat Aug 29 05:11:18.682957 2026] [security2:error] [pid 11274:tid 11371] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK-VmbX5DA3XO6e_qQ1WAABWzk"]
[Sat Aug 29 05:11:18.684858 2026] [security2:error] [pid 11274:tid 11477] [client 68.155.159.216:61301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-content/cong.php"] [unique_id "apK-VmbX5DA3XO6e_qQ1XAAAASs"]
[Sat Aug 29 05:11:18.687552 2026] [core:error] [pid 11274:tid 11371] [remote 93.123.109.228:52434] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:18.687567 2026] [core:error] [pid 11274:tid 11371] [remote 93.123.109.228:52434] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:18.704596 2026] [core:error] [pid 1321:tid 1580] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:18.704619 2026] [core:error] [pid 1321:tid 1580] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:18.706460 2026] [core:error] [pid 11274:tid 11476] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:18.706476 2026] [core:error] [pid 11274:tid 11476] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:18.706661 2026] [core:error] [pid 11274:tid 11504] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:18.706671 2026] [core:error] [pid 11274:tid 11504] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:18.711782 2026] [security2:error] [pid 11274:tid 11535] [client 158.23.147.79:49825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/simple.php"] [unique_id "apK-VmbX5DA3XO6e_qQ1ZAAAAWQ"]
[Sat Aug 29 05:11:18.735637 2026] [security2:error] [pid 1321:tid 1565] [client 20.196.209.81:16749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/alfa-rex.php"] [unique_id "apK-VmjCPtor9NZ-byTwHQAABog"]
[Sat Aug 29 05:11:18.739670 2026] [security2:error] [pid 1321:tid 1561] [client 158.158.54.35:23000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK-VmjCPtor9NZ-byTwHgAABoQ"]
[Sat Aug 29 05:11:18.749813 2026] [security2:error] [pid 11274:tid 11488] [client 158.158.54.35:29766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/php.php"] [unique_id "apK-VmbX5DA3XO6e_qQ1awAAATU"]
[Sat Aug 29 05:11:18.754479 2026] [security2:error] [pid 1321:tid 1568] [client 20.100.175.163:13390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/i.php"] [unique_id "apK-VmjCPtor9NZ-byTwIgAABos"]
[Sat Aug 29 05:11:18.757201 2026] [core:error] [pid 11274:tid 11474] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:18.757217 2026] [core:error] [pid 11274:tid 11474] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:18.763347 2026] [core:error] [pid 1321:tid 1548] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:18.763377 2026] [core:error] [pid 1321:tid 1548] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:18.768907 2026] [security2:error] [pid 11274:tid 11516] [client 158.23.147.79:59218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-includes/plugins.php"] [unique_id "apK-VmbX5DA3XO6e_qQ1cgAAAVE"]
[Sat Aug 29 05:11:18.774553 2026] [security2:error] [pid 1321:tid 1604] [client 4.205.62.107:60299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/zaza.php"] [unique_id "apK-VmjCPtor9NZ-byTwJQAABq8"]
[Sat Aug 29 05:11:18.787644 2026] [security2:error] [pid 1321:tid 1613] [client 20.48.160.90:62101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/gulu.php"] [unique_id "apK-VmjCPtor9NZ-byTwJgAABrg"]
[Sat Aug 29 05:11:18.788907 2026] [security2:error] [pid 1321:tid 1488] [client 20.151.200.44:22267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/xcre1.php"] [unique_id "apK-VmjCPtor9NZ-byTwJwAABjw"]
[Sat Aug 29 05:11:18.790377 2026] [security2:error] [pid 1321:tid 1513] [client 20.100.175.163:11348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/cv.php"] [unique_id "apK-VmjCPtor9NZ-byTwKAAABlU"]
[Sat Aug 29 05:11:18.818537 2026] [security2:error] [pid 11274:tid 11369] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(\\\\/\\\\*\\\\!? ?(?:select|grant|delete|insert|drop|alter|replace|truncate|update|create|rename|describe|union|concat|group_concat))" at REQUEST_FILENAME. [file "/opt/mod_security/hg_rules.conf"] [line "1019"] [id "9000042"] [rev "2.2.2"] [msg "SQL Comment Sequence Detected."] [data "/*update"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/*update.cgi*"] [unique_id "apK-VmbX5DA3XO6e_qQ1ewABVTc"]
[Sat Aug 29 05:11:18.820009 2026] [security2:error] [pid 11274:tid 11386] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK-VmbX5DA3XO6e_qQ1gAABVUg"]
[Sat Aug 29 05:11:18.822101 2026] [security2:error] [pid 11274:tid 11483] [client 138.199.19.170:36238] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.fanlebrity.com"] [uri "/autodiscover/autodiscover.xml/media/wp-includes/wlwmanifest.xml"] [unique_id "apK-VmbX5DA3XO6e_qQ1gQAAATA"]
[Sat Aug 29 05:11:18.826699 2026] [security2:error] [pid 1321:tid 1610] [client 20.104.49.130:57726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/reop3.php"] [unique_id "apK-VmjCPtor9NZ-byTwLAAABrU"]
[Sat Aug 29 05:11:18.827613 2026] [security2:error] [pid 11274:tid 11503] [client 68.155.159.216:33681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK-VmbX5DA3XO6e_qQ1hQAAAUQ"]
[Sat Aug 29 05:11:18.828608 2026] [security2:error] [pid 1321:tid 1614] [client 20.63.219.114:2794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/gecko-new.php"] [unique_id "apK-VmjCPtor9NZ-byTwLQAABrk"]
[Sat Aug 29 05:11:18.833390 2026] [security2:error] [pid 1321:tid 1394] [remote 34.138.144.127:43554] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "www.studiopasa.com"] [uri "/_image"] [unique_id "apK-VmjCPtor9NZ-byTwLwAGeSQ"]
[Sat Aug 29 05:11:18.834442 2026] [security2:error] [pid 1321:tid 1392] [remote 34.138.144.127:43554] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:href. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "/../,ARGS:href"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/_image"] [unique_id "apK-VmjCPtor9NZ-byTwMAAGeSI"]
[Sat Aug 29 05:11:18.834512 2026] [security2:error] [pid 11274:tid 11373] [remote 93.123.109.228:52272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/admin/phpinfo.php"] [unique_id "apK-VmbX5DA3XO6e_qQ1iAABfzs"]
[Sat Aug 29 05:11:18.835735 2026] [security2:error] [pid 1321:tid 1562] [client 68.155.159.216:30523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-content/x.php"] [unique_id "apK-VmjCPtor9NZ-byTwMgAABoU"]
[Sat Aug 29 05:11:18.856188 2026] [security2:error] [pid 11274:tid 11405] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/.env"] [unique_id "apK-VmbX5DA3XO6e_qQ1kAABVVs"]
[Sat Aug 29 05:11:18.856820 2026] [core:error] [pid 1321:tid 1577] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:18.856845 2026] [core:error] [pid 1321:tid 1577] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:18.859062 2026] [core:error] [pid 11274:tid 11445] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:18.859079 2026] [core:error] [pid 11274:tid 11445] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:18.864134 2026] [security2:error] [pid 1321:tid 1589] [client 20.63.219.114:4119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK-VmjCPtor9NZ-byTwNwAABqA"]
[Sat Aug 29 05:11:18.868068 2026] [core:error] [pid 11274:tid 11529] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:18.868084 2026] [core:error] [pid 11274:tid 11529] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:18.872401 2026] [core:error] [pid 11274:tid 11496] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:18.872418 2026] [core:error] [pid 11274:tid 11496] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:18.873781 2026] [core:error] [pid 1321:tid 1522] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:18.873792 2026] [core:error] [pid 1321:tid 1522] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:18.880519 2026] [security2:error] [pid 11274:tid 11455] [client 20.48.250.41:26906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/f35.php"] [unique_id "apK-VmbX5DA3XO6e_qQ1lQAAARU"]
[Sat Aug 29 05:11:18.887522 2026] [security2:error] [pid 11274:tid 11378] [remote 93.123.109.228:52272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/admin_phpinfo.php"] [unique_id "apK-VmbX5DA3XO6e_qQ1lgABOUA"]
[Sat Aug 29 05:11:18.920338 2026] [security2:error] [pid 11274:tid 11493] [client 20.52.41.200:4782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/ahax.php"] [unique_id "apK-VmbX5DA3XO6e_qQ1nwAAATo"]
[Sat Aug 29 05:11:18.920970 2026] [security2:error] [pid 11274:tid 11416] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/laravel/app/.env"] [unique_id "apK-VmbX5DA3XO6e_qQ1mgABFGY"]
[Sat Aug 29 05:11:18.926668 2026] [security2:error] [pid 1321:tid 1506] [client 40.83.93.50:9986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/alumni_reg.php"] [unique_id "apK-VmjCPtor9NZ-byTwOgAABk4"]
[Sat Aug 29 05:11:18.964991 2026] [security2:error] [pid 11274:tid 11568] [client 40.83.93.50:3453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/hehe.php"] [unique_id "apK-VmbX5DA3XO6e_qQ1rwAAAYQ"]
[Sat Aug 29 05:11:18.967808 2026] [core:error] [pid 11274:tid 11507] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:18.967830 2026] [core:error] [pid 11274:tid 11507] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:18.968814 2026] [security2:error] [pid 1321:tid 1574] [client 20.48.160.90:65352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/replace.php"] [unique_id "apK-VmjCPtor9NZ-byTwPQAABpE"]
[Sat Aug 29 05:11:18.982682 2026] [security2:error] [pid 11274:tid 11323] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK-VmbX5DA3XO6e_qQ1sQABRwo"]
[Sat Aug 29 05:11:19.013626 2026] [core:error] [pid 11274:tid 11554] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.013916 2026] [core:error] [pid 11274:tid 11509] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.015192 2026] [core:error] [pid 11274:tid 11554] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.014093 2026] [security2:error] [pid 11274:tid 11540] [client 20.104.104.62:52299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/ww3.php"] [unique_id "apK-V2bX5DA3XO6e_qQ1wQAAAWk"]
[Sat Aug 29 05:11:19.015203 2026] [core:error] [pid 11274:tid 11509] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.016695 2026] [core:error] [pid 11274:tid 11534] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.016711 2026] [core:error] [pid 11274:tid 11534] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.024525 2026] [security2:error] [pid 1321:tid 1532] [client 4.205.62.107:63885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/temp.php"] [unique_id "apK-V2jCPtor9NZ-byTwQgAABmg"]
[Sat Aug 29 05:11:19.032028 2026] [core:error] [pid 1321:tid 1499] [client 20.52.41.200:2879] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.032048 2026] [core:error] [pid 1321:tid 1499] [client 20.52.41.200:2879] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.034062 2026] [security2:error] [pid 11274:tid 11434] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/.env.bak"] [unique_id "apK-V2bX5DA3XO6e_qQ1wwABU3c"]
[Sat Aug 29 05:11:19.036476 2026] [security2:error] [pid 1321:tid 1555] [client 68.155.159.216:7148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-admin/admin.php"] [unique_id "apK-V2jCPtor9NZ-byTwRAAABn4"]
[Sat Aug 29 05:11:19.037802 2026] [security2:error] [pid 11274:tid 11350] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/.env.backup"] [unique_id "apK-V2bX5DA3XO6e_qQ1xgABTyU"]
[Sat Aug 29 05:11:19.040643 2026] [security2:error] [pid 11274:tid 11566] [client 158.158.54.35:17678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/theme.php"] [unique_id "apK-V2bX5DA3XO6e_qQ1xwAAAYI"]
[Sat Aug 29 05:11:19.058807 2026] [security2:error] [pid 11274:tid 11544] [client 20.240.128.207:20195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-trackback.php"] [unique_id "apK-V2bX5DA3XO6e_qQ1zwAAAWw"]
[Sat Aug 29 05:11:19.065810 2026] [security2:error] [pid 1321:tid 1575] [client 20.48.250.41:26923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/wen.php"] [unique_id "apK-V2jCPtor9NZ-byTwSgAABpI"]
[Sat Aug 29 05:11:19.081522 2026] [core:error] [pid 1321:tid 1612] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.081542 2026] [core:error] [pid 1321:tid 1612] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.083351 2026] [core:error] [pid 11274:tid 11539] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.083378 2026] [core:error] [pid 11274:tid 11539] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.083404 2026] [core:error] [pid 1321:tid 1519] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.083414 2026] [core:error] [pid 1321:tid 1519] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.084543 2026] [core:error] [pid 11274:tid 11491] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.084567 2026] [core:error] [pid 11274:tid 11491] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.086010 2026] [core:error] [pid 11274:tid 11474] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.086022 2026] [core:error] [pid 11274:tid 11474] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.096334 2026] [security2:error] [pid 11274:tid 11356] [remote 93.123.109.228:52272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/api/info.php"] [unique_id "apK-V2bX5DA3XO6e_qQ12AABgSs"]
[Sat Aug 29 05:11:19.098715 2026] [security2:error] [pid 11274:tid 11559] [client 20.48.160.90:65363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/c4.php"] [unique_id "apK-V2bX5DA3XO6e_qQ12gAAAXs"]
[Sat Aug 29 05:11:19.101990 2026] [core:error] [pid 11274:tid 11495] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.102007 2026] [core:error] [pid 11274:tid 11495] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.103510 2026] [security2:error] [pid 1321:tid 1584] [client 45.148.10.62:35426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zbf.rru.mybluehost.me"] [uri "/config.php.bak"] [unique_id "apK-V2jCPtor9NZ-byTwTQAABps"]
[Sat Aug 29 05:11:19.103659 2026] [security2:error] [pid 1321:tid 1496] [client 45.148.10.62:35416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zbv.tvp.mybluehost.me"] [uri "/config.php"] [unique_id "apK-V2jCPtor9NZ-byTwTgAABkQ"]
[Sat Aug 29 05:11:19.132651 2026] [core:error] [pid 1321:tid 1573] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.132671 2026] [core:error] [pid 1321:tid 1573] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.135993 2026] [core:error] [pid 1321:tid 1576] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.136011 2026] [core:error] [pid 1321:tid 1576] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.141820 2026] [security2:error] [pid 1321:tid 1488] [client 195.178.110.247:40296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.manilameals.com"] [uri "/index.php"] [unique_id "apK-V2jCPtor9NZ-byTwVgAABjw"]
[Sat Aug 29 05:11:19.142744 2026] [core:error] [pid 11274:tid 11475] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.142762 2026] [core:error] [pid 11274:tid 11475] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.150821 2026] [security2:error] [pid 1321:tid 1592] [client 158.23.147.79:39306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK-V2jCPtor9NZ-byTwWQAABqM"]
[Sat Aug 29 05:11:19.158837 2026] [security2:error] [pid 11274:tid 11330] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/.env.old"] [unique_id "apK-V2bX5DA3XO6e_qQ15gABWRE"]
[Sat Aug 29 05:11:19.188256 2026] [security2:error] [pid 1321:tid 1606] [client 20.104.104.62:40003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/sko.php"] [unique_id "apK-V2jCPtor9NZ-byTwXAAABrE"]
[Sat Aug 29 05:11:19.191542 2026] [core:error] [pid 11274:tid 11456] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.191560 2026] [core:error] [pid 11274:tid 11456] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.194590 2026] [security2:error] [pid 11274:tid 11546] [client 158.158.54.35:11588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/init.php"] [unique_id "apK-V2bX5DA3XO6e_qQ18QAAAW4"]
[Sat Aug 29 05:11:19.195845 2026] [security2:error] [pid 1321:tid 1611] [client 20.196.209.81:16718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/cookie.php"] [unique_id "apK-V2jCPtor9NZ-byTwXQAABrY"]
[Sat Aug 29 05:11:19.202425 2026] [security2:error] [pid 1321:tid 1529] [client 158.158.54.35:28864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/bthil.php"] [unique_id "apK-V2jCPtor9NZ-byTwXgAABmU"]
[Sat Aug 29 05:11:19.215901 2026] [security2:error] [pid 11274:tid 11564] [client 4.205.62.107:6876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/87.php"] [unique_id "apK-V2bX5DA3XO6e_qQ18wAAAYA"]
[Sat Aug 29 05:11:19.225170 2026] [security2:error] [pid 1321:tid 1521] [client 158.23.147.79:56995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-admin/css/index.php"] [unique_id "apK-V2jCPtor9NZ-byTwXwAABl0"]
[Sat Aug 29 05:11:19.226820 2026] [security2:error] [pid 11274:tid 11345] [remote 93.123.109.228:52272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/api/phpinfo.php"] [unique_id "apK-V2bX5DA3XO6e_qQ1-QABXiA"]
[Sat Aug 29 05:11:19.227895 2026] [security2:error] [pid 11274:tid 11327] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/.env.php"] [unique_id "apK-V2bX5DA3XO6e_qQ1-gABQA4"]
[Sat Aug 29 05:11:19.234946 2026] [security2:error] [pid 1321:tid 1538] [client 68.155.159.216:56754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/asd.php"] [unique_id "apK-V2jCPtor9NZ-byTwYgAABm4"]
[Sat Aug 29 05:11:19.242655 2026] [security2:error] [pid 11274:tid 11469] [client 68.155.159.216:1990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-admin/images/about.php"] [unique_id "apK-V2bX5DA3XO6e_qQ2AQAAASM"]
[Sat Aug 29 05:11:19.246933 2026] [security2:error] [pid 1321:tid 1515] [client 20.48.250.41:26925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/inc.php"] [unique_id "apK-V2jCPtor9NZ-byTwYwAABlc"]
[Sat Aug 29 05:11:19.247851 2026] [security2:error] [pid 11274:tid 11505] [client 20.63.219.114:14154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-admin/system.php"] [unique_id "apK-V2bX5DA3XO6e_qQ2AwAAAUY"]
[Sat Aug 29 05:11:19.248211 2026] [security2:error] [pid 11274:tid 11455] [client 4.205.62.107:64310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/lmfi2.php"] [unique_id "apK-V2bX5DA3XO6e_qQ2BAAAARU"]
[Sat Aug 29 05:11:19.249811 2026] [security2:error] [pid 1321:tid 1591] [client 4.205.62.107:63021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-V2jCPtor9NZ-byTwZAAABqI"]
[Sat Aug 29 05:11:19.252618 2026] [security2:error] [pid 11274:tid 11523] [client 20.63.219.114:2781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/wp-admin.php"] [unique_id "apK-V2bX5DA3XO6e_qQ2BgAAAVg"]
[Sat Aug 29 05:11:19.263150 2026] [core:error] [pid 11274:tid 11449] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.263171 2026] [core:error] [pid 11274:tid 11449] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.270889 2026] [security2:error] [pid 11274:tid 11343] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/.env~"] [unique_id "apK-V2bX5DA3XO6e_qQ2EQABPR4"]
[Sat Aug 29 05:11:19.273403 2026] [security2:error] [pid 11274:tid 11357] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/.env.swp"] [unique_id "apK-V2bX5DA3XO6e_qQ2DwABPSw"]
[Sat Aug 29 05:11:19.274967 2026] [security2:error] [pid 1321:tid 1600] [client 20.100.175.163:13778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/deepseek_d.php"] [unique_id "apK-V2jCPtor9NZ-byTwaAAABqs"]
[Sat Aug 29 05:11:19.280818 2026] [security2:error] [pid 1321:tid 1558] [client 20.48.160.90:65385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/rxr.php"] [unique_id "apK-V2jCPtor9NZ-byTwagAABoE"]
[Sat Aug 29 05:11:19.283832 2026] [security2:error] [pid 1321:tid 1586] [client 20.100.175.163:20690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-content/packed.php"] [unique_id "apK-V2jCPtor9NZ-byTwawAABp0"]
[Sat Aug 29 05:11:19.293204 2026] [core:error] [pid 11274:tid 11493] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.293221 2026] [core:error] [pid 11274:tid 11493] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.298766 2026] [core:error] [pid 1321:tid 1585] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.298784 2026] [core:error] [pid 1321:tid 1585] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.299131 2026] [core:error] [pid 11274:tid 11502] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.299148 2026] [core:error] [pid 11274:tid 11502] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.299624 2026] [core:error] [pid 1321:tid 1532] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.299644 2026] [core:error] [pid 1321:tid 1532] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.300220 2026] [core:error] [pid 1321:tid 1526] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.300236 2026] [core:error] [pid 1321:tid 1526] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.300352 2026] [core:error] [pid 11274:tid 11537] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.300376 2026] [core:error] [pid 11274:tid 11537] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.300668 2026] [core:error] [pid 1321:tid 1555] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.300679 2026] [core:error] [pid 1321:tid 1555] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.305132 2026] [security2:error] [pid 1321:tid 1513] [client 195.178.110.247:47672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.manilameals.com"] [uri "/index.php"] [unique_id "apK-V2jCPtor9NZ-byTwcAAABlU"]
[Sat Aug 29 05:11:19.307159 2026] [security2:error] [pid 11274:tid 11522] [client 34.169.171.101:46836] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.forensicengineernj.com"] [uri "/@fs/proc/self/cmdline"] [unique_id "apK-V2bX5DA3XO6e_qQ2IAAAAVc"]
[Sat Aug 29 05:11:19.307526 2026] [security2:error] [pid 11274:tid 11452] [client 34.169.171.101:46772] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/@fs/root/.ssh/id_rsa"] [unique_id "apK-V2bX5DA3XO6e_qQ2HwAAARI"]
[Sat Aug 29 05:11:19.315182 2026] [core:error] [pid 1321:tid 1605] [client 34.169.171.101:46858] AH10244: invalid URI path (/@fs/../../../../../root/.env?raw??)
[Sat Aug 29 05:11:19.315406 2026] [security2:error] [pid 1321:tid 1508] [client 34.169.171.101:46790] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "mail.forensicengineernj.com"] [uri "/@fs/var/www/html/wp-config.php"] [unique_id "apK-V2jCPtor9NZ-byTwcwAABlA"]
[Sat Aug 29 05:11:19.321110 2026] [security2:error] [pid 11274:tid 11515] [client 34.169.171.101:46948] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "mail.forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-V2bX5DA3XO6e_qQ2IgAAAVA"]
[Sat Aug 29 05:11:19.324172 2026] [security2:error] [pid 1321:tid 1603] [client 20.104.104.62:52293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/zoz.php"] [unique_id "apK-V2jCPtor9NZ-byTwdwAABq4"]
[Sat Aug 29 05:11:19.324840 2026] [security2:error] [pid 1321:tid 1547] [client 34.169.171.101:46846] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "mail.forensicengineernj.com"] [uri "/@fs/../../../../../proc/self/environ"] [unique_id "apK-V2jCPtor9NZ-byTweAAABnY"]
[Sat Aug 29 05:11:19.325133 2026] [core:error] [pid 1321:tid 1533] [client 34.169.171.101:46844] AH10244: invalid URI path (/@fs/../../../../../app/.env?raw??)
[Sat Aug 29 05:11:19.337739 2026] [security2:error] [pid 11274:tid 11551] [client 34.169.171.101:47038] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.forensicengineernj.com"] [uri "/@fs/root/.vultr-cli.yaml"] [unique_id "apK-V2bX5DA3XO6e_qQ2KgAAAXM"]
[Sat Aug 29 05:11:19.338079 2026] [security2:error] [pid 1321:tid 1536] [client 34.169.171.101:47076] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "mail.forensicengineernj.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2fproc/self/environ"] [unique_id "apK-V2jCPtor9NZ-byTwfwAABmw"]
[Sat Aug 29 05:11:19.342529 2026] [security2:error] [pid 1321:tid 1560] [client 34.169.171.101:47008] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.forensicengineernj.com"] [uri "/@fs/root/.oci/config"] [unique_id "apK-V2jCPtor9NZ-byTwhQAABoM"]
[Sat Aug 29 05:11:19.343075 2026] [security2:error] [pid 11274:tid 11476] [client 20.151.200.44:63625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/basic.php"] [unique_id "apK-V2bX5DA3XO6e_qQ2MAAAASo"]
[Sat Aug 29 05:11:19.348076 2026] [security2:error] [pid 11274:tid 11383] [remote 74.7.227.154:55336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK-V2bX5DA3XO6e_qQ2MQABZEU"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fthemes%2Fattire
[Sat Aug 29 05:11:19.362287 2026] [security2:error] [pid 11274:tid 11488] [client 34.169.171.101:46948] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-V2bX5DA3XO6e_qQ2OQAAATU"], referer: https://mail.forensicengineernj.com/@fs/root/.azure/credentials?raw??
[Sat Aug 29 05:11:19.365486 2026] [security2:error] [pid 11274:tid 11550] [client 68.155.159.216:5951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/x.php"] [unique_id "apK-V2bX5DA3XO6e_qQ2PgAAAXI"]
[Sat Aug 29 05:11:19.375570 2026] [security2:error] [pid 1321:tid 1528] [client 20.52.41.200:5262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/shell.php"] [unique_id "apK-V2jCPtor9NZ-byTwjgAABmQ"]
[Sat Aug 29 05:11:19.376753 2026] [security2:error] [pid 1321:tid 1614] [client 34.50.189.51:57412] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "discocollective.kriveloff-associates.com"] [uri "/"] [unique_id "apK-V2jCPtor9NZ-byTwkQAABrk"]
[Sat Aug 29 05:11:19.385278 2026] [core:error] [pid 11274:tid 11486] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.385298 2026] [core:error] [pid 11274:tid 11486] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.386545 2026] [core:error] [pid 11274:tid 11489] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.386565 2026] [core:error] [pid 11274:tid 11489] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.387149 2026] [core:error] [pid 11274:tid 11559] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.387163 2026] [core:error] [pid 11274:tid 11559] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.389739 2026] [core:error] [pid 11274:tid 11495] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.389757 2026] [core:error] [pid 11274:tid 11495] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.413402 2026] [cgid:error] [pid 11274:tid 11405] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:19.417171 2026] [cgid:error] [pid 11274:tid 11370] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:19.417668 2026] [cgid:error] [pid 11274:tid 11388] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:19.417687 2026] [cgid:error] [pid 11274:tid 11397] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:19.417690 2026] [cgid:error] [pid 11274:tid 11401] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:19.418473 2026] [cgid:error] [pid 11274:tid 11367] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:19.423708 2026] [security2:error] [pid 1321:tid 1525] [client 20.151.200.44:27273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/baee.php"] [unique_id "apK-V2jCPtor9NZ-byTwlwAABmE"]
[Sat Aug 29 05:11:19.432756 2026] [core:error] [pid 1321:tid 1521] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.432771 2026] [core:error] [pid 1321:tid 1521] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.433295 2026] [core:error] [pid 11274:tid 11445] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.433308 2026] [core:error] [pid 11274:tid 11445] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.445308 2026] [security2:error] [pid 11274:tid 11568] [client 40.83.93.50:11824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/wp-admin/class-db.php"] [unique_id "apK-V2bX5DA3XO6e_qQ2YQAAAYQ"]
[Sat Aug 29 05:11:19.451864 2026] [security2:error] [pid 1321:tid 1516] [client 68.155.159.216:65057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK-V2jCPtor9NZ-byTwmQAABlg"]
[Sat Aug 29 05:11:19.456531 2026] [security2:error] [pid 11274:tid 11507] [client 40.83.93.50:6672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/colors.php"] [unique_id "apK-V2bX5DA3XO6e_qQ2ZQAAAUg"]
[Sat Aug 29 05:11:19.471001 2026] [security2:error] [pid 1321:tid 1512] [client 20.48.160.90:61029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.fox-mart.com"] [uri "/reviall.php"] [unique_id "apK-V2jCPtor9NZ-byTwmgAABlQ"]
[Sat Aug 29 05:11:19.472924 2026] [security2:error] [pid 11274:tid 11524] [client 20.104.104.62:42095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/mmm.php"] [unique_id "apK-V2bX5DA3XO6e_qQ2agAAAVk"]
[Sat Aug 29 05:11:19.476474 2026] [security2:error] [pid 1321:tid 1615] [client 20.48.250.41:26892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/6bcwiqwj.php"] [unique_id "apK-V2jCPtor9NZ-byTwmwAABro"]
[Sat Aug 29 05:11:19.477106 2026] [security2:error] [pid 11274:tid 11555] [client 158.158.54.35:15563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/classwithtostring.php"] [unique_id "apK-V2bX5DA3XO6e_qQ2awAAAXc"]
[Sat Aug 29 05:11:19.477154 2026] [security2:error] [pid 1321:tid 1496] [client 20.52.41.200:2204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-includes/admin.php"] [unique_id "apK-V2jCPtor9NZ-byTwnAAABkQ"]
[Sat Aug 29 05:11:19.486935 2026] [security2:error] [pid 11274:tid 11500] [client 138.199.19.170:36240] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.fanlebrity.com"] [uri "/autodiscover/autodiscover.xml/wp2/wp-includes/wlwmanifest.xml"] [unique_id "apK-V2bX5DA3XO6e_qQ2bQAAAUE"]
[Sat Aug 29 05:11:19.490001 2026] [security2:error] [pid 11274:tid 11456] [client 74.7.228.38:35776] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "qph.mej.mybluehost.me"] [uri "/robots.txt"] [unique_id "apK-V2bX5DA3XO6e_qQ2bAABFm4"]
[Sat Aug 29 05:11:19.515719 2026] [security2:error] [pid 11274:tid 11406] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.bak"] [unique_id "apK-V2bX5DA3XO6e_qQ2cQABQFw"]
[Sat Aug 29 05:11:19.519685 2026] [security2:error] [pid 11274:tid 11423] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config~"] [unique_id "apK-V2bX5DA3XO6e_qQ2dQABQG0"]
[Sat Aug 29 05:11:19.523661 2026] [security2:error] [pid 11274:tid 11422] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.old"] [unique_id "apK-V2bX5DA3XO6e_qQ2ewABQGw"]
[Sat Aug 29 05:11:19.542386 2026] [security2:error] [pid 11274:tid 11512] [client 111.235.68.106:11003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK-V2bX5DA3XO6e_qQ2gwAAAU0"]
[Sat Aug 29 05:11:19.542495 2026] [security2:error] [pid 11274:tid 11512] [client 111.235.68.106:11003] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK-V2bX5DA3XO6e_qQ2gwAAAU0"]
[Sat Aug 29 05:11:19.575676 2026] [core:error] [pid 11274:tid 11449] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.575692 2026] [core:error] [pid 11274:tid 11449] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.584648 2026] [security2:error] [pid 11274:tid 11527] [client 68.155.159.216:14224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-includes/content.php"] [unique_id "apK-V2bX5DA3XO6e_qQ2jwAAAVw"]
[Sat Aug 29 05:11:19.608859 2026] [core:error] [pid 11274:tid 11487] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.608877 2026] [core:error] [pid 11274:tid 11487] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.611150 2026] [security2:error] [pid 1321:tid 1510] [client 20.63.219.114:14160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-admin/test.php"] [unique_id "apK-V2jCPtor9NZ-byTwowAABlI"]
[Sat Aug 29 05:11:19.612104 2026] [security2:error] [pid 11274:tid 11554] [client 20.104.104.62:42086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/advanced.php"] [unique_id "apK-V2bX5DA3XO6e_qQ2lwAAAXY"]
[Sat Aug 29 05:11:19.613738 2026] [core:error] [pid 11274:tid 11494] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.613756 2026] [core:error] [pid 11274:tid 11494] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.615168 2026] [core:error] [pid 1321:tid 1587] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.615180 2026] [core:error] [pid 1321:tid 1587] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.615211 2026] [core:error] [pid 11274:tid 11534] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.615220 2026] [core:error] [pid 11274:tid 11534] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.615835 2026] [core:error] [pid 11274:tid 11553] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.615846 2026] [core:error] [pid 11274:tid 11553] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.626379 2026] [core:error] [pid 11274:tid 11468] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.626398 2026] [core:error] [pid 11274:tid 11468] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.627034 2026] [security2:error] [pid 11274:tid 11564] [client 158.158.54.35:11639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "apK-V2bX5DA3XO6e_qQ2oAAAAYA"]
[Sat Aug 29 05:11:19.628141 2026] [security2:error] [pid 1321:tid 1555] [client 4.205.62.107:62917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/aws_credentials.php"] [unique_id "apK-V2jCPtor9NZ-byTwpQAABn4"]
[Sat Aug 29 05:11:19.652367 2026] [security2:error] [pid 11274:tid 11476] [client 20.48.250.41:26913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/easy.php"] [unique_id "apK-V2bX5DA3XO6e_qQ2qQAAASo"]
[Sat Aug 29 05:11:19.659612 2026] [security2:error] [pid 11274:tid 11517] [client 4.205.62.107:51479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/test1.php"] [unique_id "apK-V2bX5DA3XO6e_qQ2rwAAAVI"]
[Sat Aug 29 05:11:19.661986 2026] [core:error] [pid 1321:tid 1549] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.662002 2026] [core:error] [pid 1321:tid 1549] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.669175 2026] [security2:error] [pid 11274:tid 11520] [client 20.63.219.114:19949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/wp-configs.php"] [unique_id "apK-V2bX5DA3XO6e_qQ2sQAAAVU"]
[Sat Aug 29 05:11:19.682048 2026] [security2:error] [pid 1321:tid 1612] [client 52.138.0.157:1067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.opphousing.com"] [uri "/sm.php"] [unique_id "apK-V2jCPtor9NZ-byTwqAAABrc"]
[Sat Aug 29 05:11:19.704949 2026] [core:error] [pid 1321:tid 1567] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.704970 2026] [core:error] [pid 1321:tid 1567] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.707710 2026] [core:error] [pid 1321:tid 1495] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.707730 2026] [core:error] [pid 1321:tid 1495] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.709314 2026] [security2:error] [pid 1321:tid 1563] [client 45.148.10.62:35444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zbv.tvp.mybluehost.me"] [uri "/config.php.bak"] [unique_id "apK-V2jCPtor9NZ-byTwrgAABoY"]
[Sat Aug 29 05:11:19.709340 2026] [core:error] [pid 11274:tid 11558] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.709368 2026] [core:error] [pid 11274:tid 11558] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.714820 2026] [core:error] [pid 1321:tid 1561] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.714836 2026] [core:error] [pid 1321:tid 1561] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.716434 2026] [core:error] [pid 1321:tid 1531] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.716452 2026] [core:error] [pid 1321:tid 1531] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.718314 2026] [core:error] [pid 11274:tid 11566] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.718328 2026] [core:error] [pid 11274:tid 11566] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.718587 2026] [core:error] [pid 1321:tid 1514] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.718599 2026] [core:error] [pid 1321:tid 1514] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.720551 2026] [security2:error] [pid 1321:tid 1574] [client 158.23.147.79:55239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-includes/content.php"] [unique_id "apK-V2jCPtor9NZ-byTwswAABpE"]
[Sat Aug 29 05:11:19.721074 2026] [core:error] [pid 11274:tid 11516] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.721086 2026] [core:error] [pid 11274:tid 11516] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.735857 2026] [security2:error] [pid 1321:tid 1547] [client 20.240.128.207:19840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/222.php"] [unique_id "apK-V2jCPtor9NZ-byTwtQAABnY"]
[Sat Aug 29 05:11:19.740438 2026] [security2:error] [pid 1321:tid 1594] [client 158.23.147.79:24571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK-V2jCPtor9NZ-byTwtgAABqU"]
[Sat Aug 29 05:11:19.773113 2026] [security2:error] [pid 11274:tid 11485] [client 20.100.175.163:4193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-admin/js/index.php"] [unique_id "apK-V2bX5DA3XO6e_qQ2zQAAATI"]
[Sat Aug 29 05:11:19.780131 2026] [security2:error] [pid 1321:tid 1608] [client 20.104.104.62:61785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/blox.php"] [unique_id "apK-V2jCPtor9NZ-byTwuQAABrM"]
[Sat Aug 29 05:11:19.789180 2026] [autoindex:error] [pid 1321:tid 1403] [remote 74.7.241.59:44014] AH01276: Cannot serve directory /home3/qphmejmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:11:19.797505 2026] [cgid:error] [pid 11274:tid 11382] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:19.799376 2026] [cgid:error] [pid 11274:tid 11353] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:19.802173 2026] [security2:error] [pid 1321:tid 1544] [client 20.48.250.41:26930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/fresh3.php"] [unique_id "apK-V2jCPtor9NZ-byTwugAABnQ"]
[Sat Aug 29 05:11:19.805529 2026] [security2:error] [pid 11274:tid 11473] [client 158.158.54.35:32209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/cv.php"] [unique_id "apK-V2bX5DA3XO6e_qQ23wAAASc"]
[Sat Aug 29 05:11:19.809949 2026] [cgid:error] [pid 11274:tid 11362] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:19.814283 2026] [cgid:error] [pid 11274:tid 11361] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:19.819427 2026] [security2:error] [pid 1321:tid 1595] [client 158.23.147.79:50151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/wp-admin/about.php"] [unique_id "apK-V2jCPtor9NZ-byTwvQAABqY"]
[Sat Aug 29 05:11:19.823025 2026] [cgid:error] [pid 11274:tid 11330] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:19.829634 2026] [cgid:error] [pid 11274:tid 11348] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:19.831331 2026] [security2:error] [pid 1321:tid 1583] [client 20.196.209.81:16756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/NewFile.php"] [unique_id "apK-V2jCPtor9NZ-byTwvgAABpo"]
[Sat Aug 29 05:11:19.831785 2026] [security2:error] [pid 1321:tid 1589] [client 20.52.41.200:4761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/elp.php"] [unique_id "apK-V2jCPtor9NZ-byTwvwAABqA"]
[Sat Aug 29 05:11:19.835748 2026] [core:error] [pid 1321:tid 1488] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.835768 2026] [core:error] [pid 1321:tid 1488] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.837525 2026] [core:error] [pid 11274:tid 11456] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.837541 2026] [core:error] [pid 11274:tid 11456] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.838472 2026] [core:error] [pid 11274:tid 11529] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.838559 2026] [core:error] [pid 1321:tid 1598] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.838569 2026] [core:error] [pid 1321:tid 1598] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.838490 2026] [core:error] [pid 11274:tid 11529] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.839455 2026] [core:error] [pid 1321:tid 1604] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.839475 2026] [core:error] [pid 1321:tid 1604] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.839554 2026] [core:error] [pid 1321:tid 1592] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.839563 2026] [core:error] [pid 1321:tid 1592] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.853061 2026] [security2:error] [pid 11274:tid 11492] [client 20.151.200.44:21923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/motu.php"] [unique_id "apK-V2bX5DA3XO6e_qQ29wAAATk"]
[Sat Aug 29 05:11:19.855868 2026] [core:error] [pid 11274:tid 11509] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.855883 2026] [core:error] [pid 11274:tid 11509] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.862115 2026] [security2:error] [pid 1321:tid 1609] [client 45.148.10.62:35460] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.zeh.elx.mybluehost.me"] [uri "/api/.env"] [unique_id "apK-V2jCPtor9NZ-byTwxAAABrQ"]
[Sat Aug 29 05:11:19.877651 2026] [security2:error] [pid 1321:tid 1611] [client 158.23.147.79:63836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK-V2jCPtor9NZ-byTwxgAABrY"]
[Sat Aug 29 05:11:19.895585 2026] [core:error] [pid 1321:tid 1522] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.895604 2026] [core:error] [pid 1321:tid 1522] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.914939 2026] [security2:error] [pid 1321:tid 1504] [client 4.205.62.107:62930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/u88.php"] [unique_id "apK-V2jCPtor9NZ-byTwzQAABkw"]
[Sat Aug 29 05:11:19.919751 2026] [security2:error] [pid 1321:tid 1557] [client 158.158.54.35:29495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/news.php"] [unique_id "apK-V2jCPtor9NZ-byTwzgAABoA"]
[Sat Aug 29 05:11:19.926040 2026] [core:error] [pid 11274:tid 11476] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.926228 2026] [core:error] [pid 11274:tid 11476] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.930671 2026] [security2:error] [pid 11274:tid 11384] [remote 93.123.109.228:39990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/test.php"] [unique_id "apK-V2bX5DA3XO6e_qQ3EgABc0Y"]
[Sat Aug 29 05:11:19.932100 2026] [security2:error] [pid 11274:tid 11475] [client 40.83.93.50:8329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/wp-contentt.php"] [unique_id "apK-V2bX5DA3XO6e_qQ3EQAAASk"]
[Sat Aug 29 05:11:19.941432 2026] [core:error] [pid 1321:tid 1600] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.941454 2026] [core:error] [pid 1321:tid 1600] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.943983 2026] [core:error] [pid 1321:tid 1510] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.944001 2026] [core:error] [pid 1321:tid 1510] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.946113 2026] [security2:error] [pid 1321:tid 1501] [client 20.100.175.163:25166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "apK-V2jCPtor9NZ-byTw1AAABkk"]
[Sat Aug 29 05:11:19.948362 2026] [core:error] [pid 1321:tid 1587] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.948388 2026] [core:error] [pid 1321:tid 1587] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.952071 2026] [security2:error] [pid 1321:tid 1585] [client 68.155.159.216:30633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK-V2jCPtor9NZ-byTw1gAABpw"]
[Sat Aug 29 05:11:19.954168 2026] [security2:error] [pid 1321:tid 1516] [client 20.104.104.62:33917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.americanvarietyradio.net"] [uri "/alfa-rex.php7"] [unique_id "apK-V2jCPtor9NZ-byTw1wAABlg"]
[Sat Aug 29 05:11:19.955466 2026] [security2:error] [pid 1321:tid 1575] [client 40.83.93.50:6688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/Js.php"] [unique_id "apK-V2jCPtor9NZ-byTw2AAABpI"]
[Sat Aug 29 05:11:19.957281 2026] [core:error] [pid 1321:tid 1586] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.957300 2026] [core:error] [pid 1321:tid 1586] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.959803 2026] [security2:error] [pid 11274:tid 11497] [client 52.138.0.157:26975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.opphousing.com"] [uri "/shell.php"] [unique_id "apK-V2bX5DA3XO6e_qQ3GQAAAT4"]
[Sat Aug 29 05:11:19.960687 2026] [security2:error] [pid 11274:tid 11520] [client 20.104.49.130:60001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pvillusions.com"] [uri "/one.php"] [unique_id "apK-V2bX5DA3XO6e_qQ3GwAAAVU"]
[Sat Aug 29 05:11:19.963465 2026] [core:error] [pid 1321:tid 1560] [client 20.52.41.200:2626] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.963482 2026] [core:error] [pid 1321:tid 1560] [client 20.52.41.200:2626] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.968826 2026] [security2:error] [pid 11274:tid 11450] [client 68.155.159.216:33694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK-V2bX5DA3XO6e_qQ3HgAAARA"]
[Sat Aug 29 05:11:19.970849 2026] [core:error] [pid 11274:tid 11549] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.970870 2026] [core:error] [pid 11274:tid 11549] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:19.988520 2026] [security2:error] [pid 11274:tid 11543] [client 127.0.0.1:17758] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "127.0.0.1"] [uri "/cgi-sys/autoconfig.cgi"] [unique_id "apK-V2bX5DA3XO6e_qQ29QAAAWs"]
[Sat Aug 29 05:11:19.989545 2026] [security2:error] [pid 11274:tid 11546] [client 74.7.244.30:35318] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "autoconfig.fda.zav.mybluehost.me"] [uri "/robots.txt"] [unique_id "apK-V2bX5DA3XO6e_qQ29AABbjk"]
[Sat Aug 29 05:11:20.013970 2026] [core:error] [pid 1321:tid 1495] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.013990 2026] [core:error] [pid 1321:tid 1495] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.017716 2026] [core:error] [pid 1321:tid 1580] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.017736 2026] [core:error] [pid 1321:tid 1580] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.020415 2026] [core:error] [pid 1321:tid 1574] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.020433 2026] [core:error] [pid 1321:tid 1574] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.032891 2026] [security2:error] [pid 1321:tid 1508] [client 20.104.104.62:52232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/kcs.php"] [unique_id "apK-WGjCPtor9NZ-byTw4wAABlA"]
[Sat Aug 29 05:11:20.039919 2026] [core:error] [pid 1321:tid 1603] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.039936 2026] [core:error] [pid 1321:tid 1603] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.042273 2026] [core:error] [pid 11274:tid 11504] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.042292 2026] [core:error] [pid 11274:tid 11504] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.042649 2026] [security2:error] [pid 11274:tid 11547] [client 20.48.250.41:26917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/bgymj.php"] [unique_id "apK-WGbX5DA3XO6e_qQ3MQAAAW8"]
[Sat Aug 29 05:11:20.043417 2026] [core:error] [pid 11274:tid 11561] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.043434 2026] [core:error] [pid 11274:tid 11561] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.044652 2026] [core:error] [pid 11274:tid 11501] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.044665 2026] [core:error] [pid 11274:tid 11501] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.054042 2026] [security2:error] [pid 1321:tid 1553] [client 20.63.219.114:2265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/essexec.php"] [unique_id "apK-WGjCPtor9NZ-byTw5gAABnw"]
[Sat Aug 29 05:11:20.073723 2026] [cgid:error] [pid 11274:tid 11394] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:20.074538 2026] [cgid:error] [pid 11274:tid 11381] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:20.087387 2026] [security2:error] [pid 11274:tid 11486] [client 20.63.219.114:14189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-admin/user/f35.php"] [unique_id "apK-WGbX5DA3XO6e_qQ3PwAAATM"]
[Sat Aug 29 05:11:20.093266 2026] [security2:error] [pid 1321:tid 1608] [client 45.148.10.62:35460] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.zeh.elx.mybluehost.me"] [uri "/.env.bak"] [unique_id "apK-WGjCPtor9NZ-byTw5wAABrM"]
[Sat Aug 29 05:11:20.099439 2026] [core:error] [pid 11274:tid 11499] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.099455 2026] [core:error] [pid 11274:tid 11499] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.137683 2026] [security2:error] [pid 11274:tid 11500] [client 68.155.159.216:23543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-content/index.php"] [unique_id "apK-WGbX5DA3XO6e_qQ3TwAAAUE"]
[Sat Aug 29 05:11:20.141948 2026] [security2:error] [pid 11274:tid 11555] [client 68.155.159.216:64064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK-WGbX5DA3XO6e_qQ3UgAAAXc"]
[Sat Aug 29 05:11:20.144339 2026] [core:error] [pid 11274:tid 11479] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.144368 2026] [core:error] [pid 11274:tid 11479] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.145639 2026] [core:error] [pid 1321:tid 1556] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.145657 2026] [core:error] [pid 1321:tid 1556] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.148583 2026] [security2:error] [pid 1321:tid 1610] [client 138.199.19.170:36256] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.fanlebrity.com"] [uri "/autodiscover/autodiscover.xml/site/wp-includes/wlwmanifest.xml"] [unique_id "apK-WGjCPtor9NZ-byTw6wAABrU"]
[Sat Aug 29 05:11:20.148687 2026] [security2:error] [pid 11274:tid 11491] [client 20.104.104.62:33870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.americanvarietyradio.net"] [uri "/alfa.php"] [unique_id "apK-WGbX5DA3XO6e_qQ3VwAAATg"]
[Sat Aug 29 05:11:20.154880 2026] [security2:error] [pid 11274:tid 11544] [client 52.138.0.157:28848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.opphousing.com"] [uri "/simple.php"] [unique_id "apK-WGbX5DA3XO6e_qQ3WAAAAWw"]
[Sat Aug 29 05:11:20.165687 2026] [core:error] [pid 11274:tid 11466] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.165702 2026] [core:error] [pid 11274:tid 11466] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.177509 2026] [core:error] [pid 1321:tid 1576] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.177525 2026] [core:error] [pid 1321:tid 1576] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.178561 2026] [core:error] [pid 11274:tid 11449] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.178582 2026] [core:error] [pid 11274:tid 11449] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.180784 2026] [core:error] [pid 11274:tid 11527] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.180801 2026] [core:error] [pid 11274:tid 11527] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.182768 2026] [security2:error] [pid 1321:tid 1595] [client 4.205.62.107:63874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/fm.php"] [unique_id "apK-WGjCPtor9NZ-byTw7QAABqY"]
[Sat Aug 29 05:11:20.185284 2026] [core:error] [pid 11274:tid 11519] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.185299 2026] [core:error] [pid 11274:tid 11519] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.215163 2026] [security2:error] [pid 11274:tid 11459] [client 20.104.104.62:52275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/wsz.php"] [unique_id "apK-WGbX5DA3XO6e_qQ3bgAAARk"]
[Sat Aug 29 05:11:20.233438 2026] [security2:error] [pid 11274:tid 11550] [client 20.240.128.207:20162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/x.php"] [unique_id "apK-WGbX5DA3XO6e_qQ3dwAAAXI"]
[Sat Aug 29 05:11:20.244042 2026] [core:error] [pid 11274:tid 11511] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.244063 2026] [core:error] [pid 11274:tid 11511] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.245043 2026] [core:error] [pid 1321:tid 1598] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.245062 2026] [core:error] [pid 1321:tid 1598] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.245923 2026] [core:error] [pid 11274:tid 11497] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.245940 2026] [core:error] [pid 11274:tid 11497] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.246276 2026] [core:error] [pid 11274:tid 11517] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.246290 2026] [core:error] [pid 11274:tid 11517] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.247415 2026] [security2:error] [pid 11274:tid 11520] [client 45.148.10.62:35448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zbf.rru.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "apK-WGbX5DA3XO6e_qQ3fwAAAVU"]
[Sat Aug 29 05:11:20.249400 2026] [core:error] [pid 1321:tid 1528] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.249426 2026] [core:error] [pid 1321:tid 1528] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.253592 2026] [security2:error] [pid 11274:tid 11568] [client 158.158.54.35:8484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-content/packed.php"] [unique_id "apK-WGbX5DA3XO6e_qQ3gAAAAYQ"]
[Sat Aug 29 05:11:20.260164 2026] [security2:error] [pid 11274:tid 11321] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/.wp-config.php.swp"] [unique_id "apK-WGbX5DA3XO6e_qQ3gQABHwg"]
[Sat Aug 29 05:11:20.266777 2026] [core:error] [pid 11274:tid 11571] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.266798 2026] [core:error] [pid 11274:tid 11571] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.267074 2026] [security2:error] [pid 11274:tid 11495] [client 20.100.175.163:15744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/core.php"] [unique_id "apK-WGbX5DA3XO6e_qQ3hgAAATw"]
[Sat Aug 29 05:11:20.273915 2026] [security2:error] [pid 1321:tid 1606] [client 158.23.147.79:39342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-content/banners/about.php"] [unique_id "apK-WGjCPtor9NZ-byTw9gAABrE"]
[Sat Aug 29 05:11:20.285673 2026] [security2:error] [pid 11274:tid 11530] [client 20.52.41.200:4753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-content/cong.php"] [unique_id "apK-WGbX5DA3XO6e_qQ3igAAAV8"]
[Sat Aug 29 05:11:20.300741 2026] [security2:error] [pid 11274:tid 11483] [client 20.196.209.81:16727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/config.php"] [unique_id "apK-WGbX5DA3XO6e_qQ3jgAAATA"]
[Sat Aug 29 05:11:20.331268 2026] [security2:error] [pid 1321:tid 1538] [client 20.48.250.41:27585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/ws69.php"] [unique_id "apK-WGjCPtor9NZ-byTw-gAABm4"]
[Sat Aug 29 05:11:20.335661 2026] [security2:error] [pid 11274:tid 11349] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/ADMIN/.env"] [unique_id "apK-WGbX5DA3XO6e_qQ3oAABQiQ"]
[Sat Aug 29 05:11:20.340874 2026] [core:error] [pid 1321:tid 1522] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.340892 2026] [core:error] [pid 1321:tid 1522] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.342666 2026] [security2:error] [pid 1321:tid 1515] [client 68.155.159.216:56750] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "harnessenergyeu.com"] [uri "/1.php"] [unique_id "apK-WGjCPtor9NZ-byTw_gAABlc"]
[Sat Aug 29 05:11:20.342778 2026] [security2:error] [pid 1321:tid 1515] [client 68.155.159.216:56750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/1.php"] [unique_id "apK-WGjCPtor9NZ-byTw_gAABlc"]
[Sat Aug 29 05:11:20.344065 2026] [security2:error] [pid 11274:tid 11454] [client 20.104.104.62:33895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.americanvarietyradio.net"] [uri "/an.php"] [unique_id "apK-WGbX5DA3XO6e_qQ3oQAAARQ"]
[Sat Aug 29 05:11:20.347851 2026] [security2:error] [pid 11274:tid 11516] [client 158.23.147.79:52314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK-WGbX5DA3XO6e_qQ3owAAAVE"]
[Sat Aug 29 05:11:20.350035 2026] [security2:error] [pid 11274:tid 11558] [client 52.138.0.157:26960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.opphousing.com"] [uri "/wp-admin.php"] [unique_id "apK-WGbX5DA3XO6e_qQ3pAAAAXo"]
[Sat Aug 29 05:11:20.355137 2026] [security2:error] [pid 1321:tid 1591] [client 20.104.104.62:61771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/msy.php"] [unique_id "apK-WGjCPtor9NZ-byTw_wAABqI"]
[Sat Aug 29 05:11:20.355553 2026] [security2:error] [pid 11274:tid 11534] [client 158.158.54.35:14893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/about/function.php"] [unique_id "apK-WGbX5DA3XO6e_qQ3pgAAAWM"]
[Sat Aug 29 05:11:20.366526 2026] [core:error] [pid 1321:tid 1573] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.366547 2026] [core:error] [pid 1321:tid 1573] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.368594 2026] [security2:error] [pid 1321:tid 1545] [client 4.205.62.107:6968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/plss3.php"] [unique_id "apK-WGjCPtor9NZ-byTxAQAABnU"]
[Sat Aug 29 05:11:20.372414 2026] [security2:error] [pid 11274:tid 11357] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/API/.env"] [unique_id "apK-WGbX5DA3XO6e_qQ3qgABQiw"]
[Sat Aug 29 05:11:20.382473 2026] [security2:error] [pid 11274:tid 11569] [client 4.205.62.107:64257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/wpver.php"] [unique_id "apK-WGbX5DA3XO6e_qQ3sQAAAYU"]
[Sat Aug 29 05:11:20.393288 2026] [security2:error] [pid 1321:tid 1510] [client 4.205.62.107:63239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/cloud.php"] [unique_id "apK-WGjCPtor9NZ-byTxBQAABlI"]
[Sat Aug 29 05:11:20.396836 2026] [core:error] [pid 1321:tid 1585] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.396855 2026] [core:error] [pid 1321:tid 1585] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.405038 2026] [security2:error] [pid 11274:tid 11363] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/APP/.env"] [unique_id "apK-WGbX5DA3XO6e_qQ3vgABJzE"]
[Sat Aug 29 05:11:20.405191 2026] [security2:error] [pid 11274:tid 11369] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/Api/.env"] [unique_id "apK-WGbX5DA3XO6e_qQ3vQABJzc"]
[Sat Aug 29 05:11:20.410596 2026] [security2:error] [pid 11274:tid 11396] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/BACK/.env"] [unique_id "apK-WGbX5DA3XO6e_qQ3vwABWVI"]
[Sat Aug 29 05:11:20.417178 2026] [security2:error] [pid 1321:tid 1537] [client 20.52.41.200:2626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/lock360.php"] [unique_id "apK-WGjCPtor9NZ-byTxCQAABm0"]
[Sat Aug 29 05:11:20.422243 2026] [security2:error] [pid 1321:tid 1586] [client 158.158.54.35:21714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-content/admin.php"] [unique_id "apK-WGjCPtor9NZ-byTxCgAABp0"]
[Sat Aug 29 05:11:20.424784 2026] [security2:error] [pid 11274:tid 11539] [client 20.63.219.114:19198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/hello.php"] [unique_id "apK-WGbX5DA3XO6e_qQ3wgAAAWg"]
[Sat Aug 29 05:11:20.445317 2026] [security2:error] [pid 1321:tid 1589] [client 60.243.207.176:64302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK-WGjCPtor9NZ-byTxDAAABqA"]
[Sat Aug 29 05:11:20.445435 2026] [security2:error] [pid 1321:tid 1589] [client 60.243.207.176:64302] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK-WGjCPtor9NZ-byTxDAAABqA"]
[Sat Aug 29 05:11:20.448209 2026] [security2:error] [pid 11274:tid 11370] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/BACKEND/.env"] [unique_id "apK-WGbX5DA3XO6e_qQ3xgABMjg"]
[Sat Aug 29 05:11:20.448673 2026] [security2:error] [pid 11274:tid 11505] [client 20.63.219.114:4381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-admin/user/min.php"] [unique_id "apK-WGbX5DA3XO6e_qQ3xwAAAUY"]
[Sat Aug 29 05:11:20.448765 2026] [security2:error] [pid 1321:tid 1539] [client 20.151.200.44:22248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/wefile.php"] [unique_id "apK-WGjCPtor9NZ-byTxDQAABm8"]
[Sat Aug 29 05:11:20.455242 2026] [security2:error] [pid 11274:tid 11554] [client 40.83.93.50:9830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/theme.php"] [unique_id "apK-WGbX5DA3XO6e_qQ3yAAAAXY"]
[Sat Aug 29 05:11:20.483449 2026] [security2:error] [pid 1321:tid 1567] [client 68.155.159.216:6005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-content/x.php"] [unique_id "apK-WGjCPtor9NZ-byTxDgAABoo"]
[Sat Aug 29 05:11:20.489464 2026] [security2:error] [pid 11274:tid 11386] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/BE/.env"] [unique_id "apK-WGbX5DA3XO6e_qQ3zQABD0g"]
[Sat Aug 29 05:11:20.505106 2026] [security2:error] [pid 11274:tid 11535] [client 40.83.93.50:10004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/access.php"] [unique_id "apK-WGbX5DA3XO6e_qQ30gAAAWQ"]
[Sat Aug 29 05:11:20.526460 2026] [security2:error] [pid 11274:tid 11521] [client 20.104.104.62:52335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/siln.php"] [unique_id "apK-WGbX5DA3XO6e_qQ32AAAAVY"]
[Sat Aug 29 05:11:20.546351 2026] [security2:error] [pid 11274:tid 11526] [client 20.104.104.62:34698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.americanvarietyradio.net"] [uri "/asc.php"] [unique_id "apK-WGbX5DA3XO6e_qQ32gAAAVs"]
[Sat Aug 29 05:11:20.548832 2026] [security2:error] [pid 11274:tid 11456] [client 52.138.0.157:58187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.opphousing.com"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "apK-WGbX5DA3XO6e_qQ32wAAARY"]
[Sat Aug 29 05:11:20.558300 2026] [security2:error] [pid 1321:tid 1531] [client 20.48.250.41:27603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/ccs.php"] [unique_id "apK-WGjCPtor9NZ-byTxEQAABmc"]
[Sat Aug 29 05:11:20.559104 2026] [security2:error] [pid 11274:tid 11420] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/Backend/.env"] [unique_id "apK-WGbX5DA3XO6e_qQ34QABN2o"]
[Sat Aug 29 05:11:20.559126 2026] [security2:error] [pid 11274:tid 11405] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/Be/.env"] [unique_id "apK-WGbX5DA3XO6e_qQ34gABN1s"]
[Sat Aug 29 05:11:20.569348 2026] [security2:error] [pid 11274:tid 11417] [remote 93.123.109.228:39990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/wp-config.php"] [unique_id "apK-WGbX5DA3XO6e_qQ35AABc2c"]
[Sat Aug 29 05:11:20.571506 2026] [security2:error] [pid 11274:tid 11464] [client 68.155.159.216:64391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/log-mama/function.php"] [unique_id "apK-WGbX5DA3XO6e_qQ35QAAAR4"]
[Sat Aug 29 05:11:20.577170 2026] [security2:error] [pid 11274:tid 11373] [remote 93.123.109.228:39990] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/wp-config.php.bak"] [unique_id "apK-WGbX5DA3XO6e_qQ35gABczs"]
[Sat Aug 29 05:11:20.584253 2026] [security2:error] [pid 11274:tid 11406] [remote 93.123.109.228:39990] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/wp-config.php.new"] [unique_id "apK-WGbX5DA3XO6e_qQ36AABc1w"]
[Sat Aug 29 05:11:20.587318 2026] [core:error] [pid 11274:tid 11452] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.587333 2026] [core:error] [pid 11274:tid 11452] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.607029 2026] [security2:error] [pid 11274:tid 11550] [client 68.155.159.216:38676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.juntoohki.com"] [uri "/first.php"] [unique_id "apK-WGbX5DA3XO6e_qQ39AAAAXI"]
[Sat Aug 29 05:11:20.610919 2026] [security2:error] [pid 11274:tid 11407] [remote 93.123.109.228:39990] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/wp-config.php.old"] [unique_id "apK-WGbX5DA3XO6e_qQ39wABHV0"]
[Sat Aug 29 05:11:20.619830 2026] [security2:error] [pid 11274:tid 11564] [client 20.151.200.44:63635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/monso.php"] [unique_id "apK-WGbX5DA3XO6e_qQ3-gAAAYA"]
[Sat Aug 29 05:11:20.632675 2026] [core:error] [pid 11274:tid 11450] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.632694 2026] [core:error] [pid 11274:tid 11450] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.634240 2026] [core:error] [pid 1321:tid 1547] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.634260 2026] [core:error] [pid 1321:tid 1547] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.634275 2026] [core:error] [pid 1321:tid 1563] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.634293 2026] [core:error] [pid 1321:tid 1563] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.634440 2026] [core:error] [pid 1321:tid 1594] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.634448 2026] [core:error] [pid 1321:tid 1594] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.635087 2026] [core:error] [pid 1321:tid 1553] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.635097 2026] [core:error] [pid 1321:tid 1553] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.638242 2026] [core:error] [pid 11274:tid 11448] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.638260 2026] [core:error] [pid 11274:tid 11448] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.638918 2026] [core:error] [pid 1321:tid 1533] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.638934 2026] [core:error] [pid 1321:tid 1533] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.640283 2026] [core:error] [pid 1321:tid 1608] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.640295 2026] [core:error] [pid 1321:tid 1608] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.643152 2026] [core:error] [pid 1321:tid 1597] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.643163 2026] [core:error] [pid 1321:tid 1597] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.655793 2026] [core:error] [pid 1321:tid 1598] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.655818 2026] [core:error] [pid 1321:tid 1598] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.667270 2026] [security2:error] [pid 11274:tid 11504] [client 20.104.49.130:52299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/kerang.php"] [unique_id "apK-WGbX5DA3XO6e_qQ4DAAAAUU"]
[Sat Aug 29 05:11:20.674781 2026] [security2:error] [pid 11274:tid 11454] [client 68.155.159.216:65056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK-WGbX5DA3XO6e_qQ4DwAAARQ"]
[Sat Aug 29 05:11:20.674944 2026] [core:error] [pid 1321:tid 1550] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.674955 2026] [core:error] [pid 1321:tid 1550] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.679450 2026] [security2:error] [pid 11274:tid 11516] [client 20.104.104.62:40046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/f-401.php"] [unique_id "apK-WGbX5DA3XO6e_qQ4EAAAAVE"]
[Sat Aug 29 05:11:20.702709 2026] [security2:error] [pid 11274:tid 11571] [client 52.139.37.240:60668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.biointuition.com"] [uri "/flower.php"] [unique_id "apK-WGbX5DA3XO6e_qQ4FgAAAYc"]
[Sat Aug 29 05:11:20.704249 2026] [security2:error] [pid 1321:tid 1502] [client 20.48.250.41:26921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/mar.php"] [unique_id "apK-WGjCPtor9NZ-byTxKAAABko"]
[Sat Aug 29 05:11:20.708645 2026] [security2:error] [pid 11274:tid 11569] [client 68.155.159.216:14165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-admin/css/index.php"] [unique_id "apK-WGbX5DA3XO6e_qQ4GAAAAYU"]
[Sat Aug 29 05:11:20.709325 2026] [security2:error] [pid 1321:tid 1606] [client 20.100.175.163:7783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-content/themes/pridmag/il.php"] [unique_id "apK-WGjCPtor9NZ-byTxKQAABrE"]
[Sat Aug 29 05:11:20.715775 2026] [security2:error] [pid 11274:tid 11451] [client 20.196.209.81:12133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/22.php"] [unique_id "apK-WGbX5DA3XO6e_qQ4HAAAARE"]
[Sat Aug 29 05:11:20.722697 2026] [core:error] [pid 11274:tid 11560] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.722718 2026] [core:error] [pid 11274:tid 11560] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.728638 2026] [core:error] [pid 11274:tid 11552] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.728655 2026] [core:error] [pid 11274:tid 11552] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.735313 2026] [security2:error] [pid 11274:tid 11444] [client 20.240.128.207:18194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/new.php"] [unique_id "apK-WGbX5DA3XO6e_qQ4IQAAAQo"]
[Sat Aug 29 05:11:20.735406 2026] [security2:error] [pid 11274:tid 11469] [client 158.158.54.35:32199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-admin/js/index.php"] [unique_id "apK-WGbX5DA3XO6e_qQ4IgAAASM"]
[Sat Aug 29 05:11:20.736235 2026] [security2:error] [pid 11274:tid 11436] [remote 93.123.109.228:52272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/config.php"] [unique_id "apK-WGbX5DA3XO6e_qQ4IwABOnk"]
[Sat Aug 29 05:11:20.743302 2026] [security2:error] [pid 11274:tid 11534] [client 52.138.0.157:1356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.opphousing.com"] [uri "/wp-admin/includes/about.php"] [unique_id "apK-WGbX5DA3XO6e_qQ4JQAAAWM"]
[Sat Aug 29 05:11:20.745388 2026] [security2:error] [pid 11274:tid 11559] [client 20.52.41.200:4764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK-WGbX5DA3XO6e_qQ4JgAAAXs"]
[Sat Aug 29 05:11:20.746482 2026] [security2:error] [pid 1321:tid 1522] [client 20.104.49.130:51352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/berlin.php"] [unique_id "apK-WGjCPtor9NZ-byTxLQAABl4"]
[Sat Aug 29 05:11:20.748003 2026] [security2:error] [pid 11274:tid 11553] [client 20.100.175.163:16778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/admin/function.php"] [unique_id "apK-WGbX5DA3XO6e_qQ4JwAAAXU"]
[Sat Aug 29 05:11:20.749081 2026] [core:error] [pid 1321:tid 1492] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.749098 2026] [core:error] [pid 1321:tid 1492] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.750519 2026] [core:error] [pid 1321:tid 1497] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.750532 2026] [core:error] [pid 1321:tid 1497] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.754807 2026] [security2:error] [pid 1321:tid 1615] [client 45.148.10.62:35476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zbv.tvp.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "apK-WGjCPtor9NZ-byTxMAAABro"]
[Sat Aug 29 05:11:20.760286 2026] [cgid:error] [pid 11274:tid 11325] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:20.760527 2026] [cgid:error] [pid 11274:tid 11402] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:20.762700 2026] [cgid:error] [pid 11274:tid 11442] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:20.765258 2026] [security2:error] [pid 1321:tid 1521] [client 4.205.62.107:60311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/aws-credentials.php"] [unique_id "apK-WGjCPtor9NZ-byTxMQAABl0"]
[Sat Aug 29 05:11:20.772240 2026] [cgid:error] [pid 11274:tid 11419] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:20.790969 2026] [security2:error] [pid 11274:tid 11483] [client 20.63.219.114:2762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/fi2.php"] [unique_id "apK-WGbX5DA3XO6e_qQ4MgAAATA"]
[Sat Aug 29 05:11:20.791250 2026] [security2:error] [pid 11274:tid 11518] [client 20.104.104.62:20870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/x13.php"] [unique_id "apK-WGbX5DA3XO6e_qQ4MwAAAVM"]
[Sat Aug 29 05:11:20.793974 2026] [security2:error] [pid 1321:tid 1601] [client 138.199.19.170:36262] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.fanlebrity.com"] [uri "/autodiscover/autodiscover.xml/cms/wp-includes/wlwmanifest.xml"] [unique_id "apK-WGjCPtor9NZ-byTxMgAABqw"]
[Sat Aug 29 05:11:20.795955 2026] [core:error] [pid 11274:tid 11491] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.795972 2026] [core:error] [pid 11274:tid 11491] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.805732 2026] [security2:error] [pid 11274:tid 11472] [client 20.63.219.114:4361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-admin/users.php"] [unique_id "apK-WGbX5DA3XO6e_qQ4QQAAASY"]
[Sat Aug 29 05:11:20.814815 2026] [security2:error] [pid 1321:tid 1545] [client 4.205.62.107:58391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/lmfi2.php"] [unique_id "apK-WGjCPtor9NZ-byTxNQAABnU"]
[Sat Aug 29 05:11:20.821562 2026] [security2:error] [pid 11274:tid 11342] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK-WGbX5DA3XO6e_qQ4RgABQR0"]
[Sat Aug 29 05:11:20.824263 2026] [security2:error] [pid 1321:tid 1509] [client 158.23.147.79:29628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-admin/css/index.php"] [unique_id "apK-WGjCPtor9NZ-byTxNgAABlE"]
[Sat Aug 29 05:11:20.828104 2026] [cgid:error] [pid 11274:tid 11359] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:20.829836 2026] [core:error] [pid 11274:tid 11572] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.829854 2026] [core:error] [pid 11274:tid 11572] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.831249 2026] [security2:error] [pid 11274:tid 11519] [client 20.104.104.62:34743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.americanvarietyradio.net"] [uri "/content.php"] [unique_id "apK-WGbX5DA3XO6e_qQ4SwAAAVQ"]
[Sat Aug 29 05:11:20.831800 2026] [core:error] [pid 11274:tid 11503] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.831813 2026] [core:error] [pid 11274:tid 11503] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.834245 2026] [cgid:error] [pid 11274:tid 11362] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:20.836623 2026] [core:error] [pid 1321:tid 1579] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.836637 2026] [core:error] [pid 1321:tid 1579] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.836684 2026] [core:error] [pid 11274:tid 11449] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.836695 2026] [core:error] [pid 11274:tid 11449] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.855531 2026] [security2:error] [pid 1321:tid 1537] [client 20.48.250.41:27594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/ccu.php"] [unique_id "apK-WGjCPtor9NZ-byTxOAAABm0"]
[Sat Aug 29 05:11:20.859886 2026] [core:error] [pid 1321:tid 1587] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.859906 2026] [core:error] [pid 1321:tid 1587] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.861822 2026] [security2:error] [pid 11274:tid 11523] [client 158.23.147.79:24477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK-WGbX5DA3XO6e_qQ4UAAAAVg"]
[Sat Aug 29 05:11:20.862378 2026] [security2:error] [pid 11274:tid 11459] [client 68.155.159.216:38312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK-WGbX5DA3XO6e_qQ4UgAAARk"]
[Sat Aug 29 05:11:20.867438 2026] [security2:error] [pid 1321:tid 1611] [client 20.52.41.200:2802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-conflg.php"] [unique_id "apK-WGjCPtor9NZ-byTxOgAABrY"]
[Sat Aug 29 05:11:20.871456 2026] [security2:error] [pid 11274:tid 11486] [client 158.158.54.35:37126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-configs.php"] [unique_id "apK-WGbX5DA3XO6e_qQ4WQAAATM"]
[Sat Aug 29 05:11:20.890299 2026] [security2:error] [pid 11274:tid 11344] [remote 93.123.109.228:52272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/config/aws.php"] [unique_id "apK-WGbX5DA3XO6e_qQ4XgABOh8"]
[Sat Aug 29 05:11:20.895913 2026] [security2:error] [pid 1321:tid 1520] [client 93.123.109.228:53822] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK-WGjCPtor9NZ-byTxPwAABlw"]
[Sat Aug 29 05:11:20.896064 2026] [core:error] [pid 1321:tid 1612] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.896077 2026] [core:error] [pid 1321:tid 1612] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.902118 2026] [core:error] [pid 11274:tid 11546] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.902139 2026] [core:error] [pid 11274:tid 11546] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.929097 2026] [autoindex:error] [pid 1321:tid 1379] [remote 45.148.10.62:35492] AH01276: Cannot serve directory /home3/zbfrrumy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:11:20.942595 2026] [security2:error] [pid 11274:tid 11520] [client 52.138.0.157:26945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.opphousing.com"] [uri "/wp-admin/js/index.php"] [unique_id "apK-WGbX5DA3XO6e_qQ4aAAAAVU"]
[Sat Aug 29 05:11:20.945280 2026] [security2:error] [pid 1321:tid 1506] [client 52.139.37.240:56086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/defaults.php"] [unique_id "apK-WGjCPtor9NZ-byTxSAAABk4"]
[Sat Aug 29 05:11:20.962256 2026] [security2:error] [pid 1321:tid 1519] [client 158.158.54.35:14891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-includes/admin.php"] [unique_id "apK-WGjCPtor9NZ-byTxSwAABls"]
[Sat Aug 29 05:11:20.965386 2026] [security2:error] [pid 1321:tid 1584] [client 158.23.147.79:49792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK-WGjCPtor9NZ-byTxTQAABps"]
[Sat Aug 29 05:11:20.971612 2026] [security2:error] [pid 1321:tid 1600] [client 40.83.93.50:11882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/alumni_reg.php"] [unique_id "apK-WGjCPtor9NZ-byTxTwAABqs"]
[Sat Aug 29 05:11:20.975570 2026] [security2:error] [pid 11274:tid 11338] [remote 93.123.109.228:52272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/config/config.inc.php"] [unique_id "apK-WGbX5DA3XO6e_qQ4bgABOhk"]
[Sat Aug 29 05:11:20.978392 2026] [security2:error] [pid 11274:tid 11384] [remote 93.123.109.228:52272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/config/config.php"] [unique_id "apK-WGbX5DA3XO6e_qQ4cgABOkY"]
[Sat Aug 29 05:11:20.978454 2026] [security2:error] [pid 11274:tid 11345] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/admin-app/.env"] [unique_id "apK-WGbX5DA3XO6e_qQ4bAABQSA"]
[Sat Aug 29 05:11:20.978534 2026] [security2:error] [pid 11274:tid 11468] [client 61.9.8.250:10381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 250.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK-WGbX5DA3XO6e_qQ4awAAASI"]
[Sat Aug 29 05:11:20.979286 2026] [security2:error] [pid 11274:tid 11468] [client 61.9.8.250:10381] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK-WGbX5DA3XO6e_qQ4awAAASI"]
[Sat Aug 29 05:11:20.981223 2026] [security2:error] [pid 1321:tid 1583] [client 93.123.109.228:53860] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK-WGjCPtor9NZ-byTxVAAABpo"]
[Sat Aug 29 05:11:20.982739 2026] [security2:error] [pid 1321:tid 1576] [client 93.123.109.228:53874] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(\\\\/\\\\*\\\\!? ?(?:select|grant|delete|insert|drop|alter|replace|truncate|update|create|rename|describe|union|concat|group_concat))" at REQUEST_FILENAME. [file "/opt/mod_security/hg_rules.conf"] [line "1019"] [id "9000042"] [rev "2.2.2"] [msg "SQL Comment Sequence Detected."] [data "/*update"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/*update.cgi*"] [unique_id "apK-WGjCPtor9NZ-byTxVQAABpM"]
[Sat Aug 29 05:11:20.988306 2026] [core:error] [pid 1321:tid 1595] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.988322 2026] [core:error] [pid 1321:tid 1595] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.989950 2026] [core:error] [pid 1321:tid 1568] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.990199 2026] [core:error] [pid 1321:tid 1568] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.991031 2026] [security2:error] [pid 1321:tid 1574] [client 158.23.147.79:63855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/goat1.php"] [unique_id "apK-WGjCPtor9NZ-byTxWQAABpE"]
[Sat Aug 29 05:11:20.991172 2026] [core:error] [pid 1321:tid 1544] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.991186 2026] [core:error] [pid 1321:tid 1544] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.992479 2026] [security2:error] [pid 11274:tid 11530] [client 20.104.104.62:52233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/hq.php"] [unique_id "apK-WGbX5DA3XO6e_qQ4egAAAV8"]
[Sat Aug 29 05:11:20.994531 2026] [security2:error] [pid 1321:tid 1499] [client 20.48.250.41:26939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/ak.php"] [unique_id "apK-WGjCPtor9NZ-byTxWwAABkc"]
[Sat Aug 29 05:11:20.994916 2026] [core:error] [pid 1321:tid 1600] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:20.994928 2026] [core:error] [pid 1321:tid 1600] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.021234 2026] [security2:error] [pid 1321:tid 1518] [client 202.71.25.11:63955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.25.71.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK-WWjCPtor9NZ-byTxXQAABlo"]
[Sat Aug 29 05:11:21.021375 2026] [security2:error] [pid 1321:tid 1518] [client 202.71.25.11:63955] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK-WWjCPtor9NZ-byTxXQAABlo"]
[Sat Aug 29 05:11:21.036376 2026] [security2:error] [pid 1321:tid 1613] [client 20.104.104.62:33902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.americanvarietyradio.net"] [uri "/hplfuns.php"] [unique_id "apK-WWjCPtor9NZ-byTxYQAABrg"]
[Sat Aug 29 05:11:21.039020 2026] [security2:error] [pid 11274:tid 11522] [client 40.83.93.50:20655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/classsmtps.php"] [unique_id "apK-WWbX5DA3XO6e_qQ4hAAAAVc"]
[Sat Aug 29 05:11:21.040225 2026] [core:error] [pid 11274:tid 11541] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.041306 2026] [core:error] [pid 11274:tid 11541] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.041413 2026] [core:error] [pid 1321:tid 1528] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.041428 2026] [core:error] [pid 1321:tid 1528] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.041714 2026] [core:error] [pid 1321:tid 1599] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.041724 2026] [core:error] [pid 1321:tid 1599] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.042364 2026] [cgid:error] [pid 11274:tid 11375] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:21.048931 2026] [security2:error] [pid 11274:tid 11553] [client 4.205.62.107:60317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/config/laravolt/css/index.php"] [unique_id "apK-WWbX5DA3XO6e_qQ4hwAAAXU"]
[Sat Aug 29 05:11:21.054840 2026] [security2:error] [pid 1321:tid 1488] [client 68.155.159.216:30687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/log-mama/function.php"] [unique_id "apK-WWjCPtor9NZ-byTxZAAABjw"]
[Sat Aug 29 05:11:21.056726 2026] [cgid:error] [pid 11274:tid 11370] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:21.061073 2026] [cgid:error] [pid 11274:tid 11343] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:21.061395 2026] [cgid:error] [pid 11274:tid 11322] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:21.064143 2026] [cgid:error] [pid 11274:tid 11334] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:21.065624 2026] [cgid:error] [pid 11274:tid 11364] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:21.074912 2026] [security2:error] [pid 11274:tid 11347] [remote 93.123.109.228:52272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/config/env.php"] [unique_id "apK-WWbX5DA3XO6e_qQ4kgABOiI"]
[Sat Aug 29 05:11:21.075000 2026] [security2:error] [pid 1321:tid 1496] [client 93.123.109.228:53832] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/.docker/.env"] [unique_id "apK-WWjCPtor9NZ-byTxZwAABkQ"]
[Sat Aug 29 05:11:21.075092 2026] [security2:error] [pid 11274:tid 11518] [client 68.155.159.216:33753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK-WWbX5DA3XO6e_qQ4kQAAAVM"]
[Sat Aug 29 05:11:21.089564 2026] [security2:error] [pid 11274:tid 11340] [remote 93.123.109.228:52272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/config/module.config.php"] [unique_id "apK-WWbX5DA3XO6e_qQ4lQABOhs"]
[Sat Aug 29 05:11:21.107626 2026] [security2:error] [pid 11274:tid 11395] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/admin/phpinfo.php"] [unique_id "apK-WWbX5DA3XO6e_qQ4lwABQVE"]
[Sat Aug 29 05:11:21.108550 2026] [security2:error] [pid 11274:tid 11472] [client 20.104.49.130:60797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/sd.php"] [unique_id "apK-WWbX5DA3XO6e_qQ4mAAAASY"]
[Sat Aug 29 05:11:21.110940 2026] [security2:error] [pid 11274:tid 11544] [client 20.104.104.62:48498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/file66.php"] [unique_id "apK-WWbX5DA3XO6e_qQ4mQAAAWw"]
[Sat Aug 29 05:11:21.126803 2026] [security2:error] [pid 1321:tid 1579] [client 93.123.109.228:53860] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/.docker/laravel/app/.env"] [unique_id "apK-WWjCPtor9NZ-byTxawAABpY"]
[Sat Aug 29 05:11:21.133647 2026] [security2:error] [pid 1321:tid 1553] [client 43.172.196.170:40798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 170.196.172.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewforum.php"] [unique_id "apK-WWjCPtor9NZ-byTxbAAABnw"]
[Sat Aug 29 05:11:21.144163 2026] [security2:error] [pid 1321:tid 1521] [client 52.139.37.240:16483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/domains.php"] [unique_id "apK-WWjCPtor9NZ-byTxcQAABl0"]
[Sat Aug 29 05:11:21.147654 2026] [security2:error] [pid 11274:tid 11439] [remote 93.123.109.228:52272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/config/nexmo.php"] [unique_id "apK-WWbX5DA3XO6e_qQ4nwABiHw"]
[Sat Aug 29 05:11:21.150049 2026] [core:error] [pid 1321:tid 1516] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.150068 2026] [core:error] [pid 1321:tid 1516] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.152814 2026] [security2:error] [pid 1321:tid 1507] [client 20.196.209.81:15385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/bak.phps"] [unique_id "apK-WWjCPtor9NZ-byTxcgAABk8"]
[Sat Aug 29 05:11:21.153245 2026] [security2:error] [pid 11274:tid 11502] [client 43.173.175.196:53532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 196.175.173.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewtopic.php"] [unique_id "apK-WWbX5DA3XO6e_qQ4mwAAAUM"]
[Sat Aug 29 05:11:21.158622 2026] [security2:error] [pid 11274:tid 11397] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/admin_phpinfo.php"] [unique_id "apK-WWbX5DA3XO6e_qQ4ogABRFM"]
[Sat Aug 29 05:11:21.165779 2026] [security2:error] [pid 11274:tid 11534] [client 20.63.219.114:4121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-admin/wp-cron.php"] [unique_id "apK-WWbX5DA3XO6e_qQ4pAAAAWM"]
[Sat Aug 29 05:11:21.171587 2026] [security2:error] [pid 11274:tid 11521] [client 93.123.109.228:53836] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK-WWbX5DA3XO6e_qQ4pQAAAVY"]
[Sat Aug 29 05:11:21.179524 2026] [security2:error] [pid 11274:tid 11413] [remote 93.123.109.228:52272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/config/stripe.php"] [unique_id "apK-WWbX5DA3XO6e_qQ4pgABiGM"]
[Sat Aug 29 05:11:21.180001 2026] [security2:error] [pid 1321:tid 1556] [client 43.172.196.239:40634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 239.196.172.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewforum.php"] [unique_id "apK-WWjCPtor9NZ-byTxdQAABn8"]
[Sat Aug 29 05:11:21.183226 2026] [security2:error] [pid 1321:tid 1559] [client 20.63.219.114:10341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/1p.php"] [unique_id "apK-WWjCPtor9NZ-byTxdwAABoI"]
[Sat Aug 29 05:11:21.190137 2026] [security2:error] [pid 11274:tid 11329] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/api-backend/.env"] [unique_id "apK-WWbX5DA3XO6e_qQ4qgABWxA"]
[Sat Aug 29 05:11:21.190204 2026] [security2:error] [pid 11274:tid 11417] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/api-node/.env"] [unique_id "apK-WWbX5DA3XO6e_qQ4qwABW2c"]
[Sat Aug 29 05:11:21.191211 2026] [security2:error] [pid 11274:tid 11420] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/administrator/.env"] [unique_id "apK-WWbX5DA3XO6e_qQ4qAABW2o"]
[Sat Aug 29 05:11:21.198975 2026] [security2:error] [pid 1321:tid 1549] [client 93.123.109.228:53910] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/.env.backup"] [unique_id "apK-WWjCPtor9NZ-byTxeQAABng"]
[Sat Aug 29 05:11:21.199650 2026] [security2:error] [pid 1321:tid 1491] [client 43.172.198.151:54562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 151.198.172.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewtopic.php"] [unique_id "apK-WWjCPtor9NZ-byTxdAAABj8"]
[Sat Aug 29 05:11:21.203985 2026] [security2:error] [pid 11274:tid 11501] [client 20.52.41.200:4742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-mail.php"] [unique_id "apK-WWbX5DA3XO6e_qQ4rgAAAUI"]
[Sat Aug 29 05:11:21.205115 2026] [security2:error] [pid 11274:tid 11509] [client 197.232.63.170:60448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 170.63.232.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK-WWbX5DA3XO6e_qQ4rwAAAUo"]
[Sat Aug 29 05:11:21.205216 2026] [security2:error] [pid 11274:tid 11509] [client 197.232.63.170:60448] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK-WWbX5DA3XO6e_qQ4rwAAAUo"]
[Sat Aug 29 05:11:21.207772 2026] [security2:error] [pid 1321:tid 1539] [client 93.123.109.228:53984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/.env.bak"] [unique_id "apK-WWjCPtor9NZ-byTxewAABm8"]
[Sat Aug 29 05:11:21.216532 2026] [security2:error] [pid 1321:tid 1514] [client 52.138.0.157:58187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.opphousing.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK-WWjCPtor9NZ-byTxfgAABlY"]
[Sat Aug 29 05:11:21.217168 2026] [security2:error] [pid 1321:tid 1497] [client 158.158.54.35:15595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/core.php"] [unique_id "apK-WWjCPtor9NZ-byTxfwAABkU"]
[Sat Aug 29 05:11:21.218897 2026] [security2:error] [pid 11274:tid 11464] [client 20.104.104.62:57411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/mh.php"] [unique_id "apK-WWbX5DA3XO6e_qQ4tQAAAR4"]
[Sat Aug 29 05:11:21.220206 2026] [security2:error] [pid 11274:tid 11406] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/api/.env"] [unique_id "apK-WWbX5DA3XO6e_qQ4sgABPVw"]
[Sat Aug 29 05:11:21.224639 2026] [security2:error] [pid 11274:tid 11459] [client 20.48.250.41:26927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/lib.php"] [unique_id "apK-WWbX5DA3XO6e_qQ4uQAAARk"]
[Sat Aug 29 05:11:21.234661 2026] [security2:error] [pid 1321:tid 1565] [client 43.173.176.73:38518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 73.176.173.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewtopic.php"] [unique_id "apK-WWjCPtor9NZ-byTxgQAABog"]
[Sat Aug 29 05:11:21.235669 2026] [security2:error] [pid 1321:tid 1552] [client 20.100.175.163:33713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/assets/images/doc.php"] [unique_id "apK-WWjCPtor9NZ-byTxgwAABns"]
[Sat Aug 29 05:11:21.236132 2026] [security2:error] [pid 11274:tid 11492] [client 20.104.104.62:33804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.americanvarietyradio.net"] [uri "/iko.php"] [unique_id "apK-WWbX5DA3XO6e_qQ4wAAAATk"]
[Sat Aug 29 05:11:21.241782 2026] [security2:error] [pid 11274:tid 11498] [client 20.100.175.163:20721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/admin/index.php"] [unique_id "apK-WWbX5DA3XO6e_qQ4wQAAAT8"]
[Sat Aug 29 05:11:21.262462 2026] [cgid:error] [pid 11274:tid 11394] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:21.266168 2026] [security2:error] [pid 1321:tid 1517] [client 68.155.159.216:23435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/about/function.php"] [unique_id "apK-WWjCPtor9NZ-byTxhwAABlk"]
[Sat Aug 29 05:11:21.267859 2026] [security2:error] [pid 1321:tid 1605] [client 20.104.104.62:40202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/ntaps.php"] [unique_id "apK-WWjCPtor9NZ-byTxiAAABrA"]
[Sat Aug 29 05:11:21.271374 2026] [security2:error] [pid 1321:tid 1593] [client 20.240.128.207:12769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/menu.php"] [unique_id "apK-WWjCPtor9NZ-byTxigAABqQ"]
[Sat Aug 29 05:11:21.271494 2026] [security2:error] [pid 1321:tid 1506] [client 20.151.200.44:23578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/rce.php"] [unique_id "apK-WWjCPtor9NZ-byTxiwAABk4"]
[Sat Aug 29 05:11:21.305997 2026] [security2:error] [pid 11274:tid 11505] [client 158.158.54.35:31148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-includes/index.php"] [unique_id "apK-WWbX5DA3XO6e_qQ40AAAAUY"]
[Sat Aug 29 05:11:21.312724 2026] [core:error] [pid 1321:tid 1508] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.312743 2026] [core:error] [pid 1321:tid 1508] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.316814 2026] [core:error] [pid 1321:tid 1566] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.316828 2026] [core:error] [pid 1321:tid 1566] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.324831 2026] [security2:error] [pid 1321:tid 1561] [client 93.123.109.228:53900] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/.env.old"] [unique_id "apK-WWjCPtor9NZ-byTxkQAABoQ"]
[Sat Aug 29 05:11:21.325761 2026] [security2:error] [pid 1321:tid 1587] [client 20.52.41.200:2860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/123.php"] [unique_id "apK-WWjCPtor9NZ-byTxkgAABp4"]
[Sat Aug 29 05:11:21.330501 2026] [security2:error] [pid 11274:tid 11520] [client 93.123.109.228:53836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/.env.php"] [unique_id "apK-WWbX5DA3XO6e_qQ41AAAAVU"]
[Sat Aug 29 05:11:21.336814 2026] [security2:error] [pid 11274:tid 11516] [client 4.205.62.107:61749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/tinyfilemanager.php"] [unique_id "apK-WWbX5DA3XO6e_qQ41gAAAVE"]
[Sat Aug 29 05:11:21.341072 2026] [security2:error] [pid 11274:tid 11487] [client 52.139.37.240:16510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/dropdown.php"] [unique_id "apK-WWbX5DA3XO6e_qQ42gAAATQ"]
[Sat Aug 29 05:11:21.354770 2026] [security2:error] [pid 1321:tid 1577] [client 20.104.104.62:42079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-WWjCPtor9NZ-byTxlgAABpQ"]
[Sat Aug 29 05:11:21.356242 2026] [security2:error] [pid 1321:tid 1577] [client 20.48.250.41:26897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/wp-style.php"] [unique_id "apK-WWjCPtor9NZ-byTxlwAABpQ"]
[Sat Aug 29 05:11:21.381538 2026] [security2:error] [pid 11274:tid 11323] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/api/info.php"] [unique_id "apK-WWbX5DA3XO6e_qQ44QABggo"]
[Sat Aug 29 05:11:21.382776 2026] [core:error] [pid 1321:tid 1599] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.382931 2026] [core:error] [pid 1321:tid 1599] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.383718 2026] [security2:error] [pid 1321:tid 1523] [client 20.104.104.62:52253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/f2r4.php"] [unique_id "apK-WWjCPtor9NZ-byTxnQAABl8"]
[Sat Aug 29 05:11:21.393252 2026] [core:error] [pid 11274:tid 11461] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.393274 2026] [core:error] [pid 11274:tid 11461] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.394495 2026] [security2:error] [pid 11274:tid 11333] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/api/phpinfo.php"] [unique_id "apK-WWbX5DA3XO6e_qQ46wABghQ"]
[Sat Aug 29 05:11:21.408133 2026] [security2:error] [pid 11274:tid 11552] [client 158.23.147.79:39322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK-WWbX5DA3XO6e_qQ47gAAAXQ"]
[Sat Aug 29 05:11:21.412513 2026] [cgid:error] [pid 11274:tid 11325] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:21.412612 2026] [security2:error] [pid 1321:tid 1494] [client 93.123.109.228:53942] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/.env.swp"] [unique_id "apK-WWjCPtor9NZ-byTxogAABkI"]
[Sat Aug 29 05:11:21.414415 2026] [security2:error] [pid 1321:tid 1420] [remote 45.148.10.62:35492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zbf.rru.mybluehost.me"] [uri "/wp-login.php"] [unique_id "apK-WWjCPtor9NZ-byTxowAGaz4"]
[Sat Aug 29 05:11:21.421694 2026] [security2:error] [pid 1321:tid 1548] [client 52.138.0.157:20735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.opphousing.com"] [uri "/wp-admin/network/admin.php"] [unique_id "apK-WWjCPtor9NZ-byTxpQAABnc"]
[Sat Aug 29 05:11:21.425586 2026] [security2:error] [pid 11274:tid 11442] [remote 216.73.216.46:19045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo-store.sortthru.com"] [uri "/outdoor-signs/"] [unique_id "apK-WWbX5DA3XO6e_qQ48QABTH8"]
[Sat Aug 29 05:11:21.431158 2026] [security2:error] [pid 1321:tid 1615] [client 93.123.109.228:53822] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/.env~"] [unique_id "apK-WWjCPtor9NZ-byTxqAAABro"]
[Sat Aug 29 05:11:21.433000 2026] [core:error] [pid 1321:tid 1567] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.433020 2026] [core:error] [pid 1321:tid 1567] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.443802 2026] [cgid:error] [pid 11274:tid 11379] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:21.444172 2026] [cgid:error] [pid 11274:tid 11441] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:21.444703 2026] [cgid:error] [pid 11274:tid 11313] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:21.444945 2026] [security2:error] [pid 11274:tid 11481] [client 138.199.19.170:36270] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "autodiscover.fanlebrity.com"] [uri "/autodiscover/autodiscover.xml/sito/wp-includes/wlwmanifest.xml"] [unique_id "apK-WWbX5DA3XO6e_qQ4-QAAAS4"]
[Sat Aug 29 05:11:21.446279 2026] [security2:error] [pid 11274:tid 11515] [client 40.83.93.50:15826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/colors.php"] [unique_id "apK-WWbX5DA3XO6e_qQ4-gAAAVA"]
[Sat Aug 29 05:11:21.466107 2026] [security2:error] [pid 11274:tid 11569] [client 158.23.147.79:53620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-includes/index.php"] [unique_id "apK-WWbX5DA3XO6e_qQ4_QAAAYU"]
[Sat Aug 29 05:11:21.496185 2026] [autoindex:error] [pid 1321:tid 1375] [remote 45.148.10.62:35502] AH01276: Cannot serve directory /home3/zbvtvpmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:11:21.510579 2026] [core:error] [pid 1321:tid 1537] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.510604 2026] [core:error] [pid 1321:tid 1537] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.512970 2026] [security2:error] [pid 11274:tid 11470] [client 4.205.62.107:6906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/aws.php"] [unique_id "apK-WWbX5DA3XO6e_qQ5DgAAASQ"]
[Sat Aug 29 05:11:21.514717 2026] [core:error] [pid 1321:tid 1507] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.514738 2026] [core:error] [pid 1321:tid 1507] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.519013 2026] [security2:error] [pid 11274:tid 11467] [client 20.63.219.114:4354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-admin/wp-links-opml.php"] [unique_id "apK-WWbX5DA3XO6e_qQ5EAAAASE"]
[Sat Aug 29 05:11:21.521389 2026] [security2:error] [pid 1321:tid 1532] [client 4.205.62.107:64975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/ah25.php"] [unique_id "apK-WWjCPtor9NZ-byTxtAAABmg"]
[Sat Aug 29 05:11:21.534806 2026] [security2:error] [pid 11274:tid 11502] [client 4.205.62.107:62999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/kerang.php"] [unique_id "apK-WWbX5DA3XO6e_qQ5EgAAAUM"]
[Sat Aug 29 05:11:21.535008 2026] [security2:error] [pid 11274:tid 11468] [client 40.83.93.50:10025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/contentloader1.php"] [unique_id "apK-WWbX5DA3XO6e_qQ5EwAAASI"]
[Sat Aug 29 05:11:21.539311 2026] [security2:error] [pid 1321:tid 1509] [client 52.139.37.240:16806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/files/index.php"] [unique_id "apK-WWjCPtor9NZ-byTxtQAABlE"]
[Sat Aug 29 05:11:21.544019 2026] [core:error] [pid 11274:tid 11500] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.544038 2026] [core:error] [pid 11274:tid 11500] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.544094 2026] [core:error] [pid 11274:tid 11534] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.544103 2026] [core:error] [pid 11274:tid 11534] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.545296 2026] [core:error] [pid 1321:tid 1549] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.545312 2026] [core:error] [pid 1321:tid 1549] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.554291 2026] [security2:error] [pid 11274:tid 11466] [client 20.104.104.62:40050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-WWbX5DA3XO6e_qQ5HgAAASA"]
[Sat Aug 29 05:11:21.554879 2026] [security2:error] [pid 11274:tid 11335] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/apis/.env"] [unique_id "apK-WWbX5DA3XO6e_qQ5GwABahY"]
[Sat Aug 29 05:11:21.555198 2026] [security2:error] [pid 11274:tid 11572] [client 20.104.104.62:52226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/sadis.php"] [unique_id "apK-WWbX5DA3XO6e_qQ5HwAAAYg"]
[Sat Aug 29 05:11:21.562209 2026] [security2:error] [pid 11274:tid 11525] [client 20.196.209.81:3520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/install.php"] [unique_id "apK-WWbX5DA3XO6e_qQ5IgAAAVo"]
[Sat Aug 29 05:11:21.579685 2026] [security2:error] [pid 11274:tid 11494] [client 20.151.200.44:63560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/exec.php"] [unique_id "apK-WWbX5DA3XO6e_qQ5KAAAATs"]
[Sat Aug 29 05:11:21.582169 2026] [security2:error] [pid 1321:tid 1513] [client 158.158.54.35:30330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/lock360.php"] [unique_id "apK-WWjCPtor9NZ-byTxvAAABlU"]
[Sat Aug 29 05:11:21.584155 2026] [security2:error] [pid 1321:tid 1547] [client 93.123.109.228:53976] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/.git/config.bak"] [unique_id "apK-WWjCPtor9NZ-byTxvQAABnY"]
[Sat Aug 29 05:11:21.587196 2026] [security2:error] [pid 1321:tid 1517] [client 93.123.109.228:53984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/.git/config.old"] [unique_id "apK-WWjCPtor9NZ-byTxwQAABlk"]
[Sat Aug 29 05:11:21.592455 2026] [core:error] [pid 1321:tid 1495] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.592479 2026] [core:error] [pid 1321:tid 1495] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.593691 2026] [core:error] [pid 1321:tid 1547] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.593696 2026] [core:error] [pid 1321:tid 1607] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.593709 2026] [core:error] [pid 1321:tid 1547] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.593711 2026] [core:error] [pid 1321:tid 1607] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.596839 2026] [security2:error] [pid 11274:tid 11569] [client 20.63.219.114:11808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/Njima.php"] [unique_id "apK-WWbX5DA3XO6e_qQ5LQAAAYU"]
[Sat Aug 29 05:11:21.598077 2026] [core:error] [pid 1321:tid 1603] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.598102 2026] [core:error] [pid 1321:tid 1603] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.600242 2026] [security2:error] [pid 1321:tid 1591] [client 93.123.109.228:53822] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/.git/config~"] [unique_id "apK-WWjCPtor9NZ-byTxxQAABqI"]
[Sat Aug 29 05:11:21.608084 2026] [security2:error] [pid 1321:tid 1565] [client 74.7.230.46:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.mlabb.net"] [uri "/cgi-sys/404.html"] [unique_id "apK-WWjCPtor9NZ-byTxxwAABog"]
[Sat Aug 29 05:11:21.616618 2026] [security2:error] [pid 1321:tid 1539] [client 52.138.0.157:1349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.opphousing.com"] [uri "/wp-conflg/function.php"] [unique_id "apK-WWjCPtor9NZ-byTxyAAABm8"]
[Sat Aug 29 05:11:21.617047 2026] [security2:error] [pid 1321:tid 1610] [client 74.7.230.46:43274] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.mlabb.net"] [uri "/robots.txt"] [unique_id "apK-WWjCPtor9NZ-byTxuAAGtWw"]
[Sat Aug 29 05:11:21.620643 2026] [core:error] [pid 11274:tid 11495] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.620662 2026] [core:error] [pid 11274:tid 11495] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.620677 2026] [core:error] [pid 1321:tid 1573] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.620689 2026] [core:error] [pid 1321:tid 1573] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.620915 2026] [core:error] [pid 11274:tid 11463] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.620927 2026] [core:error] [pid 11274:tid 11463] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.632309 2026] [security2:error] [pid 11274:tid 11384] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/app/.env"] [unique_id "apK-WWbX5DA3XO6e_qQ5MQABWEY"]
[Sat Aug 29 05:11:21.643550 2026] [security2:error] [pid 1321:tid 1590] [client 20.52.41.200:4792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-content.php"] [unique_id "apK-WWjCPtor9NZ-byTxzAAABqE"]
[Sat Aug 29 05:11:21.655676 2026] [security2:error] [pid 1321:tid 1512] [client 45.148.10.62:35508] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.zeh.elx.mybluehost.me"] [uri "/stripe/.env"] [unique_id "apK-WWjCPtor9NZ-byTxzwAABlQ"]
[Sat Aug 29 05:11:21.658747 2026] [security2:error] [pid 1321:tid 1602] [client 68.155.159.216:6036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK-WWjCPtor9NZ-byTx0AAABq0"]
[Sat Aug 29 05:11:21.666123 2026] [security2:error] [pid 11274:tid 11474] [client 20.104.49.130:65263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/tool.php"] [unique_id "apK-WWbX5DA3XO6e_qQ5NwAAASg"]
[Sat Aug 29 05:11:21.671466 2026] [security2:error] [pid 11274:tid 11544] [client 158.158.54.35:23020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/admin/function.php"] [unique_id "apK-WWbX5DA3XO6e_qQ5OgAAAWw"]
[Sat Aug 29 05:11:21.682194 2026] [security2:error] [pid 1321:tid 1550] [client 20.104.104.62:20630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/zip.php"] [unique_id "apK-WWjCPtor9NZ-byTx0QAABnk"]
[Sat Aug 29 05:11:21.694827 2026] [security2:error] [pid 1321:tid 1613] [client 20.48.250.41:26897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/browse.php"] [unique_id "apK-WWjCPtor9NZ-byTx1AAABrg"]
[Sat Aug 29 05:11:21.721656 2026] [security2:error] [pid 1321:tid 1598] [client 20.104.104.62:34696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.americanvarietyradio.net"] [uri "/index/function.php"] [unique_id "apK-WWjCPtor9NZ-byTx2QAABqk"]
[Sat Aug 29 05:11:21.737416 2026] [security2:error] [pid 1321:tid 1614] [client 52.139.37.240:16482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rfe.rfsoftware.com"] [uri "/flower.php"] [unique_id "apK-WWjCPtor9NZ-byTx3AAABrk"]
[Sat Aug 29 05:11:21.738496 2026] [security2:error] [pid 1321:tid 1497] [client 20.100.175.163:23173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/storage/rip.php"] [unique_id "apK-WWjCPtor9NZ-byTx3QAABkU"]
[Sat Aug 29 05:11:21.742899 2026] [core:error] [pid 11274:tid 11515] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.742918 2026] [core:error] [pid 11274:tid 11515] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.747181 2026] [core:error] [pid 1321:tid 1535] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.747702 2026] [core:error] [pid 1321:tid 1535] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.747815 2026] [core:error] [pid 11274:tid 11566] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.747828 2026] [core:error] [pid 11274:tid 11566] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.747945 2026] [core:error] [pid 1321:tid 1542] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.747953 2026] [core:error] [pid 1321:tid 1542] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.748262 2026] [core:error] [pid 1321:tid 1525] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.748282 2026] [core:error] [pid 1321:tid 1525] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.751425 2026] [core:error] [pid 1321:tid 1567] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.751443 2026] [core:error] [pid 1321:tid 1567] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.754250 2026] [security2:error] [pid 11274:tid 11536] [client 158.158.54.35:11608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-admin/a.php"] [unique_id "apK-WWbX5DA3XO6e_qQ5UQAAAWU"]
[Sat Aug 29 05:11:21.754981 2026] [security2:error] [pid 11274:tid 11555] [client 68.155.159.216:64121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/classwithtostring.php"] [unique_id "apK-WWbX5DA3XO6e_qQ5UgAAAXc"]
[Sat Aug 29 05:11:21.759660 2026] [security2:error] [pid 11274:tid 11464] [client 20.240.128.207:20220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK-WWbX5DA3XO6e_qQ5VQAAAR4"]
[Sat Aug 29 05:11:21.770202 2026] [security2:error] [pid 1321:tid 1604] [client 20.151.200.44:22229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/EM.php"] [unique_id "apK-WWjCPtor9NZ-byTx7wAABq8"]
[Sat Aug 29 05:11:21.774842 2026] [security2:error] [pid 11274:tid 11563] [client 20.100.175.163:25210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/bgymj.php"] [unique_id "apK-WWbX5DA3XO6e_qQ5WwAAAX8"]
[Sat Aug 29 05:11:21.783504 2026] [core:error] [pid 11274:tid 11518] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.783520 2026] [core:error] [pid 11274:tid 11518] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.785205 2026] [security2:error] [pid 1321:tid 1561] [client 20.52.41.200:2805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/yanz.php"] [unique_id "apK-WWjCPtor9NZ-byTx8gAABoQ"]
[Sat Aug 29 05:11:21.789411 2026] [core:error] [pid 1321:tid 1611] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.789431 2026] [core:error] [pid 1321:tid 1611] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.789963 2026] [core:error] [pid 11274:tid 11483] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.789979 2026] [core:error] [pid 11274:tid 11483] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.794008 2026] [core:error] [pid 11274:tid 11488] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.794024 2026] [core:error] [pid 11274:tid 11488] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.813423 2026] [security2:error] [pid 11274:tid 11565] [client 52.138.0.157:1038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.opphousing.com"] [uri "/wp-content/classwithtostring.php"] [unique_id "apK-WWbX5DA3XO6e_qQ5ZgAAAYE"]
[Sat Aug 29 05:11:21.821809 2026] [security2:error] [pid 1321:tid 1559] [client 68.155.159.216:14319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK-WWjCPtor9NZ-byTx_AAABoI"]
[Sat Aug 29 05:11:21.827759 2026] [cgid:error] [pid 11274:tid 11330] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:21.830687 2026] [core:error] [pid 1321:tid 1516] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.830708 2026] [core:error] [pid 1321:tid 1516] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.835082 2026] [core:error] [pid 1321:tid 1514] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.835112 2026] [core:error] [pid 1321:tid 1514] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.836367 2026] [core:error] [pid 1321:tid 1594] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.836383 2026] [core:error] [pid 1321:tid 1594] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.855745 2026] [security2:error] [pid 11274:tid 11547] [client 20.104.104.62:61779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/baee.php"] [unique_id "apK-WWbX5DA3XO6e_qQ5bwAAAW8"]
[Sat Aug 29 05:11:21.863229 2026] [security2:error] [pid 11274:tid 11472] [client 20.104.104.62:52252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/xcre1.php"] [unique_id "apK-WWbX5DA3XO6e_qQ5cgAAASY"]
[Sat Aug 29 05:11:21.869654 2026] [security2:error] [pid 1321:tid 1518] [client 20.63.219.114:4407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-admin/wp-load.php"] [unique_id "apK-WWjCPtor9NZ-byTyBQAABlo"]
[Sat Aug 29 05:11:21.884461 2026] [security2:error] [pid 1321:tid 1508] [client 158.23.147.79:14317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK-WWjCPtor9NZ-byTyBwAABlA"]
[Sat Aug 29 05:11:21.899098 2026] [security2:error] [pid 1321:tid 1566] [client 158.23.147.79:55885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-content/index.php"] [unique_id "apK-WWjCPtor9NZ-byTyCQAABok"]
[Sat Aug 29 05:11:21.901860 2026] [security2:error] [pid 1321:tid 1584] [client 20.104.104.62:20803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/@.php"] [unique_id "apK-WWjCPtor9NZ-byTyCgAABps"]
[Sat Aug 29 05:11:21.903077 2026] [security2:error] [pid 11274:tid 11529] [client 4.205.62.107:60303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/4563.php"] [unique_id "apK-WWbX5DA3XO6e_qQ5dwAAAV4"]
[Sat Aug 29 05:11:21.921239 2026] [security2:error] [pid 11274:tid 11413] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/apps/.env"] [unique_id "apK-WWbX5DA3XO6e_qQ5fQABgGM"]
[Sat Aug 29 05:11:21.921450 2026] [security2:error] [pid 11274:tid 11399] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/application/.env"] [unique_id "apK-WWbX5DA3XO6e_qQ5fAABgFU"]
[Sat Aug 29 05:11:21.928599 2026] [security2:error] [pid 11274:tid 11572] [client 20.104.104.62:33908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.americanvarietyradio.net"] [uri "/koiy.php"] [unique_id "apK-WWbX5DA3XO6e_qQ5ggAAAYg"]
[Sat Aug 29 05:11:21.947592 2026] [security2:error] [pid 11274:tid 11535] [client 40.83.93.50:9855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/Js.php"] [unique_id "apK-WWbX5DA3XO6e_qQ5hAAAAWQ"]
[Sat Aug 29 05:11:21.958184 2026] [security2:error] [pid 11274:tid 11546] [client 68.155.159.216:56717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/ws.php"] [unique_id "apK-WWbX5DA3XO6e_qQ5iwAAAW4"]
[Sat Aug 29 05:11:21.959873 2026] [security2:error] [pid 1321:tid 1600] [client 4.205.62.107:4986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/aws_sdk_settings.php"] [unique_id "apK-WWjCPtor9NZ-byTyEQAABqs"]
[Sat Aug 29 05:11:21.961141 2026] [security2:error] [pid 1321:tid 1577] [client 20.48.250.41:26919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/zoo.php"] [unique_id "apK-WWjCPtor9NZ-byTyEgAABpQ"]
[Sat Aug 29 05:11:21.964442 2026] [security2:error] [pid 11274:tid 11484] [client 20.63.219.114:19160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/configs.php"] [unique_id "apK-WWbX5DA3XO6e_qQ5jAAAATE"]
[Sat Aug 29 05:11:21.968957 2026] [security2:error] [pid 1321:tid 1560] [client 158.23.147.79:24389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK-WWjCPtor9NZ-byTyFAAABoM"]
[Sat Aug 29 05:11:21.971849 2026] [cgid:error] [pid 11274:tid 11367] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:21.974062 2026] [cgid:error] [pid 11274:tid 11407] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:21.974121 2026] [security2:error] [pid 1321:tid 1478] [remote 45.148.10.62:35502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zbv.tvp.mybluehost.me"] [uri "/wp-login.php"] [unique_id "apK-WWjCPtor9NZ-byTyFgAGbHc"]
[Sat Aug 29 05:11:21.976129 2026] [cgid:error] [pid 11274:tid 11394] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:21.977333 2026] [core:error] [pid 1321:tid 1597] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.977351 2026] [core:error] [pid 1321:tid 1597] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.980291 2026] [security2:error] [pid 11274:tid 11454] [client 68.155.159.216:61266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK-WWbX5DA3XO6e_qQ5lAAAARQ"]
[Sat Aug 29 05:11:21.984859 2026] [security2:error] [pid 11274:tid 11486] [client 45.83.178.43:56664] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "goodtogo.store"] [uri "/webapp/xmlrpc.php"] [unique_id "apK-WWbX5DA3XO6e_qQ49AAAATM"]
[Sat Aug 29 05:11:21.994784 2026] [security2:error] [pid 1321:tid 1520] [client 87.219.197.128:59607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK-WWjCPtor9NZ-byTyHQAABlw"]
[Sat Aug 29 05:11:21.994898 2026] [security2:error] [pid 1321:tid 1520] [client 87.219.197.128:59607] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK-WWjCPtor9NZ-byTyHQAABlw"]
[Sat Aug 29 05:11:21.994970 2026] [core:error] [pid 11274:tid 11485] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:21.994982 2026] [core:error] [pid 11274:tid 11485] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.009809 2026] [security2:error] [pid 1321:tid 1526] [client 20.196.209.81:3330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/colour.php"] [unique_id "apK-WmjCPtor9NZ-byTyHwAABmI"]
[Sat Aug 29 05:11:22.021198 2026] [core:error] [pid 11274:tid 11455] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.021217 2026] [core:error] [pid 11274:tid 11455] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.023066 2026] [core:error] [pid 1321:tid 1542] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.023085 2026] [core:error] [pid 1321:tid 1542] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.027010 2026] [security2:error] [pid 1321:tid 1612] [client 158.158.54.35:29056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-conflg.php"] [unique_id "apK-WmjCPtor9NZ-byTyIwAABrc"]
[Sat Aug 29 05:11:22.034099 2026] [core:error] [pid 1321:tid 1527] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.034119 2026] [core:error] [pid 1321:tid 1527] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.036426 2026] [core:error] [pid 11274:tid 11530] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.036447 2026] [core:error] [pid 11274:tid 11530] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.072581 2026] [security2:error] [pid 11274:tid 11522] [client 158.23.147.79:50147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK-WmbX5DA3XO6e_qQ5qwAAAVc"]
[Sat Aug 29 05:11:22.080381 2026] [security2:error] [pid 11274:tid 11526] [client 40.83.93.50:9984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/al.php"] [unique_id "apK-WmbX5DA3XO6e_qQ5rAAAAVs"]
[Sat Aug 29 05:11:22.089823 2026] [security2:error] [pid 1321:tid 1611] [client 52.138.0.157:26988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.opphousing.com"] [uri "/wp-content/themes/fitnessbase/404.php"] [unique_id "apK-WmjCPtor9NZ-byTyLAAABrY"]
[Sat Aug 29 05:11:22.094549 2026] [security2:error] [pid 1321:tid 1583] [client 20.52.41.200:4739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "apK-WmjCPtor9NZ-byTyLQAABpo"]
[Sat Aug 29 05:11:22.125179 2026] [security2:error] [pid 1321:tid 1585] [client 20.104.104.62:33915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.americanvarietyradio.net"] [uri "/lock360.php"] [unique_id "apK-WmjCPtor9NZ-byTyMAAABpw"]
[Sat Aug 29 05:11:22.131636 2026] [core:error] [pid 1321:tid 1579] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.131653 2026] [core:error] [pid 1321:tid 1579] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.144752 2026] [security2:error] [pid 11274:tid 11444] [client 20.104.104.62:57416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/d12.php"] [unique_id "apK-WmbX5DA3XO6e_qQ5xQAAAQo"]
[Sat Aug 29 05:11:22.146312 2026] [security2:error] [pid 1321:tid 1589] [client 20.104.104.62:59025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/motu.php"] [unique_id "apK-WmjCPtor9NZ-byTyNAAABqA"]
[Sat Aug 29 05:11:22.152284 2026] [security2:error] [pid 11274:tid 11486] [client 158.158.54.35:15555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/admin/index.php"] [unique_id "apK-WmbX5DA3XO6e_qQ5xwAAATM"]
[Sat Aug 29 05:11:22.156513 2026] [security2:error] [pid 1321:tid 1495] [client 20.48.250.41:27628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/elp.php"] [unique_id "apK-WmjCPtor9NZ-byTyOAAABkM"]
[Sat Aug 29 05:11:22.158604 2026] [security2:error] [pid 1321:tid 1607] [client 68.155.159.216:30607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/bk/index.php"] [unique_id "apK-WmjCPtor9NZ-byTyOQAABrI"]
[Sat Aug 29 05:11:22.160622 2026] [core:error] [pid 11274:tid 11489] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.160640 2026] [core:error] [pid 11274:tid 11489] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.163396 2026] [core:error] [pid 11274:tid 11468] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.163413 2026] [core:error] [pid 11274:tid 11468] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.165620 2026] [core:error] [pid 11274:tid 11534] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.165636 2026] [core:error] [pid 11274:tid 11534] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.167869 2026] [core:error] [pid 11274:tid 11500] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.167887 2026] [core:error] [pid 11274:tid 11500] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.168698 2026] [core:error] [pid 1321:tid 1506] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.168715 2026] [core:error] [pid 1321:tid 1506] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.189501 2026] [security2:error] [pid 11274:tid 11543] [client 4.205.62.107:62927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/87.php"] [unique_id "apK-WmbX5DA3XO6e_qQ51gAAAWs"]
[Sat Aug 29 05:11:22.191840 2026] [security2:error] [pid 11274:tid 11440] [remote 93.123.109.228:52272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/info.php"] [unique_id "apK-WmbX5DA3XO6e_qQ51wABUn0"]
[Sat Aug 29 05:11:22.201295 2026] [core:error] [pid 11274:tid 11494] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.201313 2026] [core:error] [pid 11274:tid 11494] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.203194 2026] [core:error] [pid 1321:tid 1537] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.203216 2026] [core:error] [pid 1321:tid 1537] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.216931 2026] [security2:error] [pid 1321:tid 1610] [client 20.151.200.44:62148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/dbc.php"] [unique_id "apK-WmjCPtor9NZ-byTySAAABrU"]
[Sat Aug 29 05:11:22.220216 2026] [security2:error] [pid 11274:tid 11402] [remote 93.123.109.228:52272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/infophp.php"] [unique_id "apK-WmbX5DA3XO6e_qQ53QABUlg"]
[Sat Aug 29 05:11:22.220469 2026] [core:error] [pid 1321:tid 1531] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.220489 2026] [core:error] [pid 1321:tid 1531] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.220674 2026] [core:error] [pid 1321:tid 1580] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.220687 2026] [core:error] [pid 1321:tid 1580] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.230434 2026] [security2:error] [pid 11274:tid 11508] [client 20.100.175.163:11401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/zoom1.php"] [unique_id "apK-WmbX5DA3XO6e_qQ53wAAAUk"]
[Sat Aug 29 05:11:22.232745 2026] [security2:error] [pid 11274:tid 11555] [client 20.52.41.200:2841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/autoload_classmap.php"] [unique_id "apK-WmbX5DA3XO6e_qQ54AAAAXc"]
[Sat Aug 29 05:11:22.237248 2026] [security2:error] [pid 11274:tid 11498] [client 93.123.109.228:53994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/.wp-config.php.swp"] [unique_id "apK-WmbX5DA3XO6e_qQ54gAAAT8"]
[Sat Aug 29 05:11:22.242559 2026] [core:error] [pid 1321:tid 1552] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.242588 2026] [core:error] [pid 1321:tid 1552] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.244341 2026] [security2:error] [pid 11274:tid 11356] [remote 93.123.109.228:52272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/infos.php"] [unique_id "apK-WmbX5DA3XO6e_qQ55QABUis"]
[Sat Aug 29 05:11:22.246818 2026] [core:error] [pid 11274:tid 11465] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.246835 2026] [core:error] [pid 11274:tid 11465] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.247344 2026] [security2:error] [pid 11274:tid 11438] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/back-end/.env"] [unique_id "apK-WmbX5DA3XO6e_qQ56QABZXs"]
[Sat Aug 29 05:11:22.248239 2026] [security2:error] [pid 11274:tid 11419] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/back-api/.env"] [unique_id "apK-WmbX5DA3XO6e_qQ56AABZWk"]
[Sat Aug 29 05:11:22.255667 2026] [security2:error] [pid 11274:tid 11565] [client 20.63.219.114:4106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-admin/wp-mail.php"] [unique_id "apK-WmbX5DA3XO6e_qQ57AAAAYE"]
[Sat Aug 29 05:11:22.264758 2026] [security2:error] [pid 1321:tid 1526] [client 93.123.109.228:53874] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/ADMIN/.env"] [unique_id "apK-WmjCPtor9NZ-byTyUAAABmI"]
[Sat Aug 29 05:11:22.278678 2026] [security2:error] [pid 1321:tid 1613] [client 93.123.109.228:53900] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/API/.env"] [unique_id "apK-WmjCPtor9NZ-byTyVQAABrg"]
[Sat Aug 29 05:11:22.289941 2026] [security2:error] [pid 1321:tid 1573] [client 52.138.0.157:20697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.opphousing.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK-WmjCPtor9NZ-byTyVgAABpA"]
[Sat Aug 29 05:11:22.303273 2026] [security2:error] [pid 11274:tid 11317] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/back/.env"] [unique_id "apK-WmbX5DA3XO6e_qQ58QABSgQ"]
[Sat Aug 29 05:11:22.310428 2026] [security2:error] [pid 11274:tid 11484] [client 20.48.250.41:27638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/666.php"] [unique_id "apK-WmbX5DA3XO6e_qQ58wAAATE"]
[Sat Aug 29 05:11:22.312251 2026] [security2:error] [pid 11274:tid 11362] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/backend-api/.env"] [unique_id "apK-WmbX5DA3XO6e_qQ58gABRjA"]
[Sat Aug 29 05:11:22.319213 2026] [security2:error] [pid 11274:tid 11454] [client 20.104.104.62:40011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/yyy.php"] [unique_id "apK-WmbX5DA3XO6e_qQ59AAAARQ"]
[Sat Aug 29 05:11:22.325161 2026] [security2:error] [pid 1321:tid 1539] [client 20.104.104.62:33898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.americanvarietyradio.net"] [uri "/pp.php"] [unique_id "apK-WmjCPtor9NZ-byTyWQAABm8"]
[Sat Aug 29 05:11:22.328456 2026] [security2:error] [pid 11274:tid 11490] [client 20.104.104.62:7125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/wefile.php"] [unique_id "apK-WmbX5DA3XO6e_qQ5-AAAATc"]
[Sat Aug 29 05:11:22.345943 2026] [security2:error] [pid 11274:tid 11547] [client 20.100.175.163:7799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK-WmbX5DA3XO6e_qQ5-gAAAW8"]
[Sat Aug 29 05:11:22.358414 2026] [security2:error] [pid 11274:tid 11549] [client 158.158.54.35:1506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK-WmbX5DA3XO6e_qQ5-wAAAXE"]
[Sat Aug 29 05:11:22.360750 2026] [security2:error] [pid 1321:tid 1597] [client 20.63.219.114:19960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/disagraeed.php"] [unique_id "apK-WmjCPtor9NZ-byTyXAAABqg"]
[Sat Aug 29 05:11:22.361728 2026] [security2:error] [pid 11274:tid 11324] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK-WmbX5DA3XO6e_qQ5_AABFQs"]
[Sat Aug 29 05:11:22.373244 2026] [cgid:error] [pid 11274:tid 11359] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:22.374111 2026] [cgid:error] [pid 11274:tid 11433] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:22.379915 2026] [security2:error] [pid 1321:tid 1545] [client 68.155.159.216:2005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK-WmjCPtor9NZ-byTyXgAABnU"]
[Sat Aug 29 05:11:22.388058 2026] [security2:error] [pid 11274:tid 11530] [client 68.155.159.216:23528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK-WmbX5DA3XO6e_qQ6CAAAAV8"]
[Sat Aug 29 05:11:22.389528 2026] [security2:error] [pid 11274:tid 11499] [client 93.123.109.228:53958] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/Api/.env"] [unique_id "apK-WmbX5DA3XO6e_qQ6CQAAAUA"]
[Sat Aug 29 05:11:22.389529 2026] [security2:error] [pid 1321:tid 1604] [client 93.123.109.228:53822] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/APP/.env"] [unique_id "apK-WmjCPtor9NZ-byTyXwAABq8"]
[Sat Aug 29 05:11:22.398304 2026] [security2:error] [pid 1321:tid 1497] [client 93.123.109.228:53942] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/BACK/.env"] [unique_id "apK-WmjCPtor9NZ-byTyYAAABkU"]
[Sat Aug 29 05:11:22.413163 2026] [security2:error] [pid 1321:tid 1527] [client 93.123.109.228:53976] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/BACKEND/.env"] [unique_id "apK-WmjCPtor9NZ-byTyYQAABmM"]
[Sat Aug 29 05:11:22.414207 2026] [security2:error] [pid 1321:tid 1611] [client 93.123.109.228:53874] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/BE/.env"] [unique_id "apK-WmjCPtor9NZ-byTyYgAABrY"]
[Sat Aug 29 05:11:22.429807 2026] [security2:error] [pid 1321:tid 1529] [client 93.123.109.228:53900] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/Backend/.env"] [unique_id "apK-WmjCPtor9NZ-byTyYwAABmU"]
[Sat Aug 29 05:11:22.432529 2026] [security2:error] [pid 1321:tid 1529] [client 93.123.109.228:53918] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/Be/.env"] [unique_id "apK-WmjCPtor9NZ-byTyZAAABmU"]
[Sat Aug 29 05:11:22.434635 2026] [security2:error] [pid 11274:tid 11368] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/backup/.env"] [unique_id "apK-WmbX5DA3XO6e_qQ6FAABWzY"]
[Sat Aug 29 05:11:22.435462 2026] [security2:error] [pid 1321:tid 1556] [client 20.240.128.207:18681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/lite.php"] [unique_id "apK-WmjCPtor9NZ-byTyZQAABn8"]
[Sat Aug 29 05:11:22.439962 2026] [security2:error] [pid 1321:tid 1557] [client 40.83.93.50:15836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/access.php"] [unique_id "apK-WmjCPtor9NZ-byTyZgAABoA"]
[Sat Aug 29 05:11:22.450241 2026] [security2:error] [pid 11274:tid 11315] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/be/.env"] [unique_id "apK-WmbX5DA3XO6e_qQ6GQABZgI"]
[Sat Aug 29 05:11:22.450849 2026] [security2:error] [pid 11274:tid 11504] [client 20.196.209.81:16761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/OK.php"] [unique_id "apK-WmbX5DA3XO6e_qQ6GgAAAUU"]
[Sat Aug 29 05:11:22.478515 2026] [security2:error] [pid 11274:tid 11470] [client 20.151.200.44:65206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-WmbX5DA3XO6e_qQ6GwAAASQ"]
[Sat Aug 29 05:11:22.480451 2026] [security2:error] [pid 11274:tid 11518] [client 4.205.62.107:63971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/05.php"] [unique_id "apK-WmbX5DA3XO6e_qQ6HQAAAVM"]
[Sat Aug 29 05:11:22.482412 2026] [security2:error] [pid 11274:tid 11364] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/beta/.env"] [unique_id "apK-WmbX5DA3XO6e_qQ6HwABdjI"]
[Sat Aug 29 05:11:22.484744 2026] [security2:error] [pid 11274:tid 11493] [client 20.104.104.62:61766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/bgymj.php"] [unique_id "apK-WmbX5DA3XO6e_qQ6IAAAATo"]
[Sat Aug 29 05:11:22.485772 2026] [security2:error] [pid 11274:tid 11448] [client 52.138.0.157:1381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.opphousing.com"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "apK-WmbX5DA3XO6e_qQ6IQAAAQ4"]
[Sat Aug 29 05:11:22.488523 2026] [security2:error] [pid 11274:tid 11493] [client 20.104.104.62:40060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/EM.php"] [unique_id "apK-WmbX5DA3XO6e_qQ6IgAAATo"]
[Sat Aug 29 05:11:22.502954 2026] [security2:error] [pid 1321:tid 1599] [client 158.158.54.35:12368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/123.php"] [unique_id "apK-WmjCPtor9NZ-byTybQAABqo"]
[Sat Aug 29 05:11:22.519659 2026] [security2:error] [pid 1321:tid 1589] [client 158.23.147.79:39347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/asd.php"] [unique_id "apK-WmjCPtor9NZ-byTycgAABqA"]
[Sat Aug 29 05:11:22.526178 2026] [security2:error] [pid 1321:tid 1495] [client 20.104.49.130:53660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "connectdotz.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-WmjCPtor9NZ-byTydQAABkM"]
[Sat Aug 29 05:11:22.526646 2026] [cgid:error] [pid 11274:tid 11340] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:22.542120 2026] [cgid:error] [pid 11274:tid 11383] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:22.545818 2026] [security2:error] [pid 11274:tid 11558] [client 20.52.41.200:4779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/css/wp-login.php"] [unique_id "apK-WmbX5DA3XO6e_qQ6NQAAAXo"]
[Sat Aug 29 05:11:22.557759 2026] [cgid:error] [pid 11274:tid 11318] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:22.559753 2026] [security2:error] [pid 11274:tid 11501] [client 20.48.250.41:26907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/knmt.php"] [unique_id "apK-WmbX5DA3XO6e_qQ6QAAAAUI"]
[Sat Aug 29 05:11:22.560460 2026] [cgid:error] [pid 11274:tid 11370] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:22.563073 2026] [cgid:error] [pid 11274:tid 11322] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:22.563211 2026] [cgid:error] [pid 11274:tid 11347] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:22.567456 2026] [security2:error] [pid 1321:tid 1492] [client 40.83.93.50:3983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/global.php"] [unique_id "apK-WmjCPtor9NZ-byTyfgAABkA"]
[Sat Aug 29 05:11:22.573788 2026] [security2:error] [pid 11274:tid 11529] [client 20.104.104.62:20848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/ea.php"] [unique_id "apK-WmbX5DA3XO6e_qQ6SAAAAV4"]
[Sat Aug 29 05:11:22.576751 2026] [security2:error] [pid 11274:tid 11388] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/client/.env"] [unique_id "apK-WmbX5DA3XO6e_qQ6RQABgko"]
[Sat Aug 29 05:11:22.578713 2026] [security2:error] [pid 11274:tid 11376] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/cms/.env"] [unique_id "apK-WmbX5DA3XO6e_qQ6TAABgj4"]
[Sat Aug 29 05:11:22.587946 2026] [security2:error] [pid 1321:tid 1605] [client 158.23.147.79:52291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/mah.php"] [unique_id "apK-WmjCPtor9NZ-byTygAAABrA"]
[Sat Aug 29 05:11:22.592976 2026] [security2:error] [pid 11274:tid 11463] [client 20.151.200.44:63560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/wp-wlx.php"] [unique_id "apK-WmbX5DA3XO6e_qQ6WAAAAR0"]
[Sat Aug 29 05:11:22.594453 2026] [core:error] [pid 11274:tid 11498] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.594473 2026] [core:error] [pid 11274:tid 11498] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.595099 2026] [core:error] [pid 11274:tid 11502] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.595116 2026] [core:error] [pid 11274:tid 11502] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.595643 2026] [security2:error] [pid 11274:tid 11450] [client 20.104.104.62:34716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.americanvarietyradio.net"] [uri "/wp-admin/js/wp-gwasdf2df4.php"] [unique_id "apK-WmbX5DA3XO6e_qQ6WwAAARA"]
[Sat Aug 29 05:11:22.596442 2026] [core:error] [pid 11274:tid 11476] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.596459 2026] [core:error] [pid 11274:tid 11476] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.598238 2026] [core:error] [pid 11274:tid 11508] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.598461 2026] [core:error] [pid 11274:tid 11508] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.598938 2026] [security2:error] [pid 1321:tid 1514] [client 57.141.14.68:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/page/31/"] [unique_id "apK-WmjCPtor9NZ-byTyggAABlY"]
[Sat Aug 29 05:11:22.599329 2026] [core:error] [pid 11274:tid 11487] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.599340 2026] [core:error] [pid 11274:tid 11487] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.599490 2026] [core:error] [pid 1321:tid 1594] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.599513 2026] [core:error] [pid 1321:tid 1594] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.615855 2026] [security2:error] [pid 1321:tid 1504] [client 158.158.54.35:22989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/storage/rip.php"] [unique_id "apK-WmjCPtor9NZ-byTyhQAABkw"]
[Sat Aug 29 05:11:22.616741 2026] [core:error] [pid 11274:tid 11561] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.616769 2026] [core:error] [pid 11274:tid 11561] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.628723 2026] [core:error] [pid 1321:tid 1549] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.628741 2026] [core:error] [pid 1321:tid 1549] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.636873 2026] [security2:error] [pid 11274:tid 11547] [client 20.104.49.130:58106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "coveryourauto.com"] [uri "/zoo2.php"] [unique_id "apK-WmbX5DA3XO6e_qQ6ZQAAAW8"]
[Sat Aug 29 05:11:22.637713 2026] [core:error] [pid 1321:tid 1549] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.637732 2026] [core:error] [pid 1321:tid 1549] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.638899 2026] [security2:error] [pid 11274:tid 11489] [client 20.63.219.114:4371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-admin/wp-settings.php"] [unique_id "apK-WmbX5DA3XO6e_qQ6ZgAAATY"]
[Sat Aug 29 05:11:22.657862 2026] [core:error] [pid 1321:tid 1507] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.657884 2026] [core:error] [pid 1321:tid 1507] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.659483 2026] [security2:error] [pid 1321:tid 1521] [client 4.205.62.107:64901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/groceries/index.php"] [unique_id "apK-WmjCPtor9NZ-byTyiwAABl0"]
[Sat Aug 29 05:11:22.665586 2026] [core:error] [pid 11274:tid 11545] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.665606 2026] [core:error] [pid 11274:tid 11545] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.671323 2026] [core:error] [pid 1321:tid 1606] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.671345 2026] [core:error] [pid 1321:tid 1606] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.678150 2026] [security2:error] [pid 1321:tid 1552] [client 4.205.62.107:6277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/app.default.php"] [unique_id "apK-WmjCPtor9NZ-byTyjQAABns"]
[Sat Aug 29 05:11:22.682139 2026] [security2:error] [pid 11274:tid 11479] [client 52.138.0.157:1375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.opphousing.com"] [uri "/wp-content/uploads/de_fb_uploads/b.php"] [unique_id "apK-WmbX5DA3XO6e_qQ6bgAAASw"]
[Sat Aug 29 05:11:22.682153 2026] [security2:error] [pid 1321:tid 1596] [client 20.104.49.130:36774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.timportlock.net"] [uri "/simple.php"] [unique_id "apK-WmjCPtor9NZ-byTyjgAABqc"]
[Sat Aug 29 05:11:22.684763 2026] [security2:error] [pid 1321:tid 1607] [client 20.52.41.200:2672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/bi.php"] [unique_id "apK-WmjCPtor9NZ-byTyjwAABrI"]
[Sat Aug 29 05:11:22.695129 2026] [security2:error] [pid 1321:tid 1494] [client 4.205.62.107:62979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/rem.php"] [unique_id "apK-WmjCPtor9NZ-byTykAAABkI"]
[Sat Aug 29 05:11:22.707497 2026] [security2:error] [pid 1321:tid 1614] [client 20.104.104.62:42084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/fh26.php"] [unique_id "apK-WmjCPtor9NZ-byTykgAABrk"]
[Sat Aug 29 05:11:22.707507 2026] [security2:error] [pid 1321:tid 1576] [client 20.104.104.62:42106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/ca4.php"] [unique_id "apK-WmjCPtor9NZ-byTykwAABpM"]
[Sat Aug 29 05:11:22.708089 2026] [security2:error] [pid 1321:tid 1563] [client 20.48.250.41:26898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/sbhu.php"] [unique_id "apK-WmjCPtor9NZ-byTylAAABoY"]
[Sat Aug 29 05:11:22.723436 2026] [security2:error] [pid 11274:tid 11552] [client 68.155.159.216:64392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/bk/index.php"] [unique_id "apK-WmbX5DA3XO6e_qQ6cwAAAXQ"]
[Sat Aug 29 05:11:22.724314 2026] [security2:error] [pid 11274:tid 11473] [client 20.100.175.163:10191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/txets.php"] [unique_id "apK-WmbX5DA3XO6e_qQ6dAAAASc"]
[Sat Aug 29 05:11:22.728945 2026] [security2:error] [pid 11274:tid 11371] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/config.php"] [unique_id "apK-WmbX5DA3XO6e_qQ6eAABgDk"]
[Sat Aug 29 05:11:22.735307 2026] [security2:error] [pid 11274:tid 11503] [client 20.63.219.114:2772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/add_actualites.php"] [unique_id "apK-WmbX5DA3XO6e_qQ6ewAAAUQ"]
[Sat Aug 29 05:11:22.783111 2026] [security2:error] [pid 11274:tid 11415] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/config/.env"] [unique_id "apK-WmbX5DA3XO6e_qQ6ggABgGU"]
[Sat Aug 29 05:11:22.792982 2026] [security2:error] [pid 1321:tid 1577] [client 20.104.104.62:34694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.americanvarietyradio.net"] [uri "/wp-admin/network/index.php"] [unique_id "apK-WmjCPtor9NZ-byTyngAABpQ"]
[Sat Aug 29 05:11:22.793443 2026] [core:error] [pid 1321:tid 1601] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.793462 2026] [core:error] [pid 1321:tid 1601] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.803490 2026] [security2:error] [pid 11274:tid 11541] [client 158.158.54.35:1482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "narrowgate-industries.com"] [uri "/wp-admin.php"] [unique_id "apK-WmbX5DA3XO6e_qQ6jgAAAWo"]
[Sat Aug 29 05:11:22.806304 2026] [security2:error] [pid 1321:tid 1510] [client 93.123.109.228:53942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/_profiler/phpinfo.php"] [unique_id "apK-WmjCPtor9NZ-byTyoAAABlI"]
[Sat Aug 29 05:11:22.808065 2026] [core:error] [pid 11274:tid 11448] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.808086 2026] [core:error] [pid 11274:tid 11448] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.809558 2026] [core:error] [pid 11274:tid 11563] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.809583 2026] [core:error] [pid 11274:tid 11563] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.810538 2026] [core:error] [pid 1321:tid 1612] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.810549 2026] [core:error] [pid 1321:tid 1612] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.812423 2026] [security2:error] [pid 11274:tid 11435] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/config/aws.php"] [unique_id "apK-WmbX5DA3XO6e_qQ6kgABgHg"]
[Sat Aug 29 05:11:22.813191 2026] [security2:error] [pid 11274:tid 11444] [client 68.155.159.216:6080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/log-mama/function.php"] [unique_id "apK-WmbX5DA3XO6e_qQ6lAAAAQo"]
[Sat Aug 29 05:11:22.814142 2026] [core:error] [pid 11274:tid 11493] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.814160 2026] [core:error] [pid 11274:tid 11493] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.825280 2026] [security2:error] [pid 11274:tid 11423] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/config/config.inc.php"] [unique_id "apK-WmbX5DA3XO6e_qQ6mgABgG0"]
[Sat Aug 29 05:11:22.827773 2026] [core:error] [pid 11274:tid 11468] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.827789 2026] [core:error] [pid 11274:tid 11468] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.829831 2026] [core:error] [pid 11274:tid 11500] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.829845 2026] [core:error] [pid 11274:tid 11500] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.839421 2026] [core:error] [pid 1321:tid 1556] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.839443 2026] [core:error] [pid 1321:tid 1556] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:22.851417 2026] [security2:error] [pid 1321:tid 1502] [client 20.196.209.81:16251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.abclaboratorios.redtecsol.com"] [uri "/aaa.php"] [unique_id "apK-WmjCPtor9NZ-byTypwAABko"]
[Sat Aug 29 05:11:22.851805 2026] [security2:error] [pid 1321:tid 1529] [client 68.155.159.216:63222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/ans.php"] [unique_id "apK-WmjCPtor9NZ-byTyqQAABmU"]
[Sat Aug 29 05:11:22.858929 2026] [security2:error] [pid 1321:tid 1579] [client 20.104.104.62:48599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/zafir1.php"] [unique_id "apK-WmjCPtor9NZ-byTyqgAABpY"]
[Sat Aug 29 05:11:22.868800 2026] [security2:error] [pid 1321:tid 1495] [client 93.123.109.228:53832] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/admin-app/.env"] [unique_id "apK-WmjCPtor9NZ-byTyqwAABkM"]
[Sat Aug 29 05:11:22.878727 2026] [security2:error] [pid 11274:tid 11486] [client 52.138.0.157:26957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.opphousing.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK-WmbX5DA3XO6e_qQ6ogAAATM"]
[Sat Aug 29 05:11:22.888961 2026] [security2:error] [pid 11274:tid 11498] [client 68.155.159.216:64011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/install.php"] [unique_id "apK-WmbX5DA3XO6e_qQ6pwAAAT8"]
[Sat Aug 29 05:11:22.891117 2026] [security2:error] [pid 1321:tid 1543] [client 20.104.104.62:40006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/x0x.php"] [unique_id "apK-WmjCPtor9NZ-byTyrQAABnM"]
[Sat Aug 29 05:11:22.900386 2026] [security2:error] [pid 1321:tid 1492] [client 20.151.200.44:63608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/attack.php"] [unique_id "apK-WmjCPtor9NZ-byTyrwAABkA"]
[Sat Aug 29 05:11:22.909598 2026] [security2:error] [pid 1321:tid 1489] [client 20.104.104.62:61766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/fgd.php"] [unique_id "apK-WmjCPtor9NZ-byTysgAABj0"]
[Sat Aug 29 05:11:22.910566 2026] [security2:error] [pid 1321:tid 1517] [client 20.48.250.41:26915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/a332.php"] [unique_id "apK-WmjCPtor9NZ-byTyswAABlk"]
[Sat Aug 29 05:11:22.927841 2026] [security2:error] [pid 11274:tid 11502] [client 68.155.159.216:14218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-includes/index.php"] [unique_id "apK-WmbX5DA3XO6e_qQ6qgAAAUM"]
[Sat Aug 29 05:11:22.936442 2026] [security2:error] [pid 11274:tid 11392] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/config/config.php"] [unique_id "apK-WmbX5DA3XO6e_qQ6rgABXk4"]
[Sat Aug 29 05:11:22.946949 2026] [cgid:error] [pid 11274:tid 11412] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:22.947021 2026] [security2:error] [pid 11274:tid 11504] [client 40.83.93.50:11861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/classsmtps.php"] [unique_id "apK-WmbX5DA3XO6e_qQ6sgAAAUU"]
[Sat Aug 29 05:11:22.948825 2026] [security2:error] [pid 11274:tid 11559] [client 20.240.128.207:12791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/term.php"] [unique_id "apK-WmbX5DA3XO6e_qQ6tAAAAXs"]
[Sat Aug 29 05:11:22.954237 2026] [security2:error] [pid 11274:tid 11437] [remote 93.123.109.228:52272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/php-info.php"] [unique_id "apK-WmbX5DA3XO6e_qQ6tQABUno"]
[Sat Aug 29 05:11:22.955642 2026] [cgid:error] [pid 11274:tid 11402] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:22.972702 2026] [cgid:error] [pid 11274:tid 11409] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:22.974499 2026] [security2:error] [pid 11274:tid 11336] [remote 93.123.109.228:52272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/php.php"] [unique_id "apK-WmbX5DA3XO6e_qQ6ugABUhc"]
[Sat Aug 29 05:11:22.975177 2026] [security2:error] [pid 1321:tid 1549] [client 195.178.110.101:56294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "naturalkneads.com"] [uri "/wp/index.php"] [unique_id "apK-WmjCPtor9NZ-byTyuAAABng"]
[Sat Aug 29 05:11:22.975470 2026] [security2:error] [pid 11274:tid 11320] [remote 93.123.109.228:52272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/php_info.php"] [unique_id "apK-WmbX5DA3XO6e_qQ6uwABUgc"]
[Sat Aug 29 05:11:22.982326 2026] [security2:error] [pid 11274:tid 11546] [client 158.23.147.79:55294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-admin/images/index.php"] [unique_id "apK-WmbX5DA3XO6e_qQ6vgAAAW4"]
[Sat Aug 29 05:11:22.985062 2026] [security2:error] [pid 11274:tid 11558] [client 158.158.54.35:30284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/yanz.php"] [unique_id "apK-WmbX5DA3XO6e_qQ6vwAAAXo"]
[Sat Aug 29 05:11:22.985208 2026] [security2:error] [pid 11274:tid 11313] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/config/env.php"] [unique_id "apK-WmbX5DA3XO6e_qQ6wAABXgA"]
[Sat Aug 29 05:11:22.985385 2026] [cgid:error] [pid 11274:tid 11342] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:22.986547 2026] [cgid:error] [pid 11274:tid 11392] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:22.990406 2026] [security2:error] [pid 1321:tid 1512] [client 20.151.200.44:65204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/ca4.php"] [unique_id "apK-WmjCPtor9NZ-byTyvQAABlQ"]
[Sat Aug 29 05:11:22.990426 2026] [security2:error] [pid 11274:tid 11436] [remote 93.123.109.228:52272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/phpinfo.php"] [unique_id "apK-WmbX5DA3XO6e_qQ6xAABUnk"]
[Sat Aug 29 05:11:22.993737 2026] [security2:error] [pid 11274:tid 11569] [client 20.63.219.114:4152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-admin/wp-signup.php"] [unique_id "apK-WmbX5DA3XO6e_qQ6xQAAAYU"]
[Sat Aug 29 05:11:22.995070 2026] [security2:error] [pid 11274:tid 11482] [client 34.169.171.101:47164] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.forensicengineernj.com"] [uri "/@fs/home/ubuntu/.openai/config.json"] [unique_id "apK-WmbX5DA3XO6e_qQ6xgAAAS8"]
[Sat Aug 29 05:11:22.996164 2026] [security2:error] [pid 1321:tid 1521] [client 93.123.109.228:53976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/admin/phpinfo.php"] [unique_id "apK-WmjCPtor9NZ-byTyvwAABl0"]
[Sat Aug 29 05:11:22.998352 2026] [security2:error] [pid 1321:tid 1561] [client 20.52.41.200:5147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/images/index.php"] [unique_id "apK-WmjCPtor9NZ-byTywAAABoQ"]
[Sat Aug 29 05:11:23.000561 2026] [security2:error] [pid 11274:tid 11362] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/config/module.config.php"] [unique_id "apK-W2bX5DA3XO6e_qQ6yAABXjA"]
[Sat Aug 29 05:11:23.005372 2026] [security2:error] [pid 11274:tid 11502] [client 20.104.104.62:34735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.americanvarietyradio.net"] [uri "/wp-content/admin-header.php"] [unique_id "apK-W2bX5DA3XO6e_qQ6ygAAAUM"]
[Sat Aug 29 05:11:23.005802 2026] [security2:error] [pid 1321:tid 1610] [client 34.169.171.101:47180] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "mail.forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-WmjCPtor9NZ-byTywgAABrU"]
[Sat Aug 29 05:11:23.007264 2026] [security2:error] [pid 1321:tid 1580] [client 34.169.171.101:47222] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "mail.forensicengineernj.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK-W2jCPtor9NZ-byTywwAABpc"]
[Sat Aug 29 05:11:23.011524 2026] [security2:error] [pid 1321:tid 1584] [client 34.169.171.101:47194] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/@fs/var/task/.env"] [unique_id "apK-W2jCPtor9NZ-byTyxAAABps"]
[Sat Aug 29 05:11:23.016500 2026] [security2:error] [pid 1321:tid 1593] [client 34.169.171.101:47206] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/@fs/proc/self/cwd/.env"] [unique_id "apK-W2jCPtor9NZ-byTyxwAABqQ"]
[Sat Aug 29 05:11:23.017091 2026] [security2:error] [pid 11274:tid 11464] [client 158.23.147.79:62772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/about/function.php"] [unique_id "apK-W2bX5DA3XO6e_qQ6zgAAAR4"]
[Sat Aug 29 05:11:23.020290 2026] [security2:error] [pid 1321:tid 1499] [client 93.123.109.228:53832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/admin_phpinfo.php"] [unique_id "apK-W2jCPtor9NZ-byTyygAABkc"]
[Sat Aug 29 05:11:23.021418 2026] [security2:error] [pid 11274:tid 11316] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/config/nexmo.php"] [unique_id "apK-W2bX5DA3XO6e_qQ6zwABXgM"]
[Sat Aug 29 05:11:23.023991 2026] [security2:error] [pid 11274:tid 11516] [client 93.123.109.228:53816] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/administrator/.env"] [unique_id "apK-W2bX5DA3XO6e_qQ60AAAAVE"]
[Sat Aug 29 05:11:23.031549 2026] [security2:error] [pid 1321:tid 1596] [client 93.123.109.228:53900] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/api-backend/.env"] [unique_id "apK-W2jCPtor9NZ-byTyzQAABqc"]
[Sat Aug 29 05:11:23.038589 2026] [core:error] [pid 11274:tid 11484] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.038608 2026] [core:error] [pid 11274:tid 11484] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.038743 2026] [security2:error] [pid 11274:tid 11321] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/config/stripe.php"] [unique_id "apK-W2bX5DA3XO6e_qQ62wABXgg"]
[Sat Aug 29 05:11:23.039914 2026] [security2:error] [pid 11274:tid 11454] [client 4.205.62.107:62919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/cp2.php"] [unique_id "apK-W2bX5DA3XO6e_qQ63AAAARQ"]
[Sat Aug 29 05:11:23.042402 2026] [security2:error] [pid 1321:tid 1600] [client 40.83.93.50:3917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/update.php"] [unique_id "apK-W2jCPtor9NZ-byTy0gAABqs"]
[Sat Aug 29 05:11:23.042832 2026] [security2:error] [pid 1321:tid 1603] [client 34.169.171.101:47180] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-W2jCPtor9NZ-byTy0AAABq4"], referer: https://mail.forensicengineernj.com/@fs/root/.config/openai/config.json?raw??
[Sat Aug 29 05:11:23.053184 2026] [core:error] [pid 11274:tid 11524] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.053201 2026] [core:error] [pid 11274:tid 11524] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.060953 2026] [security2:error] [pid 11274:tid 11465] [client 68.155.159.216:56822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-includes/css/index.php"] [unique_id "apK-W2bX5DA3XO6e_qQ65AAAAR8"]
[Sat Aug 29 05:11:23.062163 2026] [security2:error] [pid 11274:tid 11572] [client 20.48.250.41:26942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/ws66.php"] [unique_id "apK-W2bX5DA3XO6e_qQ65QAAAYg"]
[Sat Aug 29 05:11:23.063476 2026] [security2:error] [pid 11274:tid 11445] [client 68.155.159.216:2012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK-W2bX5DA3XO6e_qQ65gAAAQs"]
[Sat Aug 29 05:11:23.067820 2026] [security2:error] [pid 11274:tid 11549] [client 93.123.109.228:53958] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/api-node/.env"] [unique_id "apK-W2bX5DA3XO6e_qQ65wAAAXE"]
[Sat Aug 29 05:11:23.077702 2026] [security2:error] [pid 1321:tid 1605] [client 158.158.54.35:17673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/zoom1.php"] [unique_id "apK-W2jCPtor9NZ-byTy1gAABrA"]
[Sat Aug 29 05:11:23.077719 2026] [security2:error] [pid 1321:tid 1559] [client 52.138.0.157:58194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.opphousing.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK-W2jCPtor9NZ-byTy1wAABoI"]
[Sat Aug 29 05:11:23.078667 2026] [security2:error] [pid 1321:tid 1531] [client 20.104.104.62:40020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.simplybygrace.org"] [uri "/fesa.php"] [unique_id "apK-W2jCPtor9NZ-byTy2AAABmc"]
[Sat Aug 29 05:11:23.087552 2026] [security2:error] [pid 1321:tid 1590] [client 158.23.147.79:24453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-content/radio.php"] [unique_id "apK-W2jCPtor9NZ-byTy2QAABqE"]
[Sat Aug 29 05:11:23.091440 2026] [core:error] [pid 11274:tid 11474] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.091462 2026] [core:error] [pid 11274:tid 11474] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.094835 2026] [security2:error] [pid 11274:tid 11474] [client 4.205.62.107:4969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/mga.php"] [unique_id "apK-W2bX5DA3XO6e_qQ66gAAASg"]
[Sat Aug 29 05:11:23.095568 2026] [core:error] [pid 1321:tid 1613] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.095588 2026] [core:error] [pid 1321:tid 1613] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.101897 2026] [security2:error] [pid 1321:tid 1520] [client 20.104.104.62:52249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/inject.php"] [unique_id "apK-W2jCPtor9NZ-byTy3AAABlw"]
[Sat Aug 29 05:11:23.114214 2026] [cgid:error] [pid 11274:tid 11344] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:23.139269 2026] [security2:error] [pid 11274:tid 11488] [client 20.52.41.200:2669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/cc.php"] [unique_id "apK-W2bX5DA3XO6e_qQ6-AAAATU"]
[Sat Aug 29 05:11:23.170035 2026] [security2:error] [pid 11274:tid 11537] [client 93.123.109.228:53934] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/api/.env"] [unique_id "apK-W2bX5DA3XO6e_qQ7AAAAAWY"]
[Sat Aug 29 05:11:23.170831 2026] [core:error] [pid 11274:tid 11483] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.170844 2026] [core:error] [pid 11274:tid 11483] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.172117 2026] [core:error] [pid 11274:tid 11526] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.172138 2026] [core:error] [pid 11274:tid 11526] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.172735 2026] [security2:error] [pid 11274:tid 11541] [client 20.104.104.62:20696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/aaaa.php"] [unique_id "apK-W2bX5DA3XO6e_qQ7AQAAAWo"]
[Sat Aug 29 05:11:23.173510 2026] [security2:error] [pid 1321:tid 1612] [client 20.151.200.44:63105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-W2jCPtor9NZ-byTy5AAABrc"]
[Sat Aug 29 05:11:23.174434 2026] [security2:error] [pid 11274:tid 11550] [client 20.63.219.114:10359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/alfanew.php7"] [unique_id "apK-W2bX5DA3XO6e_qQ7AgAAAXI"]
[Sat Aug 29 05:11:23.175512 2026] [core:error] [pid 1321:tid 1592] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.175529 2026] [core:error] [pid 1321:tid 1592] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.193065 2026] [security2:error] [pid 11274:tid 11318] [remote 93.123.109.228:52272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/public/phpinfo.php"] [unique_id "apK-W2bX5DA3XO6e_qQ7CwABUgU"]
[Sat Aug 29 05:11:23.204663 2026] [security2:error] [pid 1321:tid 1529] [client 158.23.147.79:50108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/chosen.php"] [unique_id "apK-W2jCPtor9NZ-byTy6gAABmU"]
[Sat Aug 29 05:11:23.207065 2026] [security2:error] [pid 1321:tid 1529] [client 20.48.250.41:26909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/ws68.php"] [unique_id "apK-W2jCPtor9NZ-byTy7AAABmU"]
[Sat Aug 29 05:11:23.213209 2026] [security2:error] [pid 1321:tid 1601] [client 20.104.104.62:33900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.americanvarietyradio.net"] [uri "/wp-content/plugins/about.php"] [unique_id "apK-W2jCPtor9NZ-byTy7QAABqw"]
[Sat Aug 29 05:11:23.213580 2026] [core:error] [pid 11274:tid 11534] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.213597 2026] [core:error] [pid 11274:tid 11534] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.224272 2026] [core:error] [pid 1321:tid 1589] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.224294 2026] [core:error] [pid 1321:tid 1589] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.225527 2026] [core:error] [pid 11274:tid 11547] [client 20.100.175.163:4168] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.225549 2026] [core:error] [pid 11274:tid 11547] [client 20.100.175.163:4168] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.227247 2026] [core:error] [pid 1321:tid 1557] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.227259 2026] [core:error] [pid 1321:tid 1557] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.227497 2026] [core:error] [pid 1321:tid 1599] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.227515 2026] [core:error] [pid 1321:tid 1599] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.239011 2026] [security2:error] [pid 1321:tid 1491] [client 68.155.159.216:33483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/packed.php"] [unique_id "apK-W2jCPtor9NZ-byTy8gAABj8"]
[Sat Aug 29 05:11:23.239530 2026] [security2:error] [pid 11274:tid 11472] [client 93.123.109.228:53816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/api/info.php"] [unique_id "apK-W2bX5DA3XO6e_qQ7EgAAASY"]
[Sat Aug 29 05:11:23.245746 2026] [security2:error] [pid 1321:tid 1537] [client 20.100.175.163:7804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-load.php"] [unique_id "apK-W2jCPtor9NZ-byTy8wAABm0"]
[Sat Aug 29 05:11:23.259362 2026] [core:error] [pid 11274:tid 11500] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.259383 2026] [core:error] [pid 11274:tid 11500] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.265689 2026] [security2:error] [pid 11274:tid 11539] [client 68.155.159.216:30712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.thepsychicintuitive.com"] [uri "/first.php"] [unique_id "apK-W2bX5DA3XO6e_qQ7GgAAAWg"]
[Sat Aug 29 05:11:23.280008 2026] [security2:error] [pid 1321:tid 1579] [client 52.138.0.157:28818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.opphousing.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "apK-W2jCPtor9NZ-byTy9QAABpY"]
[Sat Aug 29 05:11:23.294735 2026] [core:error] [pid 11274:tid 11449] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.294754 2026] [core:error] [pid 11274:tid 11449] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.294878 2026] [core:error] [pid 1321:tid 1594] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.294892 2026] [core:error] [pid 1321:tid 1594] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.303098 2026] [security2:error] [pid 11274:tid 11334] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/crm/.env"] [unique_id "apK-W2bX5DA3XO6e_qQ7IgABChU"]
[Sat Aug 29 05:11:23.303464 2026] [security2:error] [pid 11274:tid 11395] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/cron/.env"] [unique_id "apK-W2bX5DA3XO6e_qQ7IwABClE"]
[Sat Aug 29 05:11:23.305187 2026] [security2:error] [pid 11274:tid 11369] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/current/.env"] [unique_id "apK-W2bX5DA3XO6e_qQ7JAABCjc"]
[Sat Aug 29 05:11:23.311502 2026] [security2:error] [pid 1321:tid 1593] [client 68.155.159.216:49117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-W2jCPtor9NZ-byTy-QAABqQ"]
[Sat Aug 29 05:11:23.328918 2026] [security2:error] [pid 11274:tid 11413] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/demo/.env"] [unique_id "apK-W2bX5DA3XO6e_qQ7KwABRWM"]
[Sat Aug 29 05:11:23.334899 2026] [security2:error] [pid 1321:tid 1548] [client 93.123.109.228:60592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/api/phpinfo.php"] [unique_id "apK-W2jCPtor9NZ-byTy_QAABnc"]
[Sat Aug 29 05:11:23.336507 2026] [security2:error] [pid 1321:tid 1552] [client 20.104.104.62:42093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/mga.php"] [unique_id "apK-W2jCPtor9NZ-byTy_gAABns"]
[Sat Aug 29 05:11:23.343274 2026] [security2:error] [pid 11274:tid 11546] [client 4.205.62.107:59134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/plss3.php"] [unique_id "apK-W2bX5DA3XO6e_qQ7LwAAAW4"]
[Sat Aug 29 05:11:23.362434 2026] [core:error] [pid 1321:tid 1600] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.362458 2026] [core:error] [pid 1321:tid 1600] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.365093 2026] [security2:error] [pid 1321:tid 1614] [client 20.151.200.44:62239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/file66.php"] [unique_id "apK-W2jCPtor9NZ-byTzAgAABrk"]
[Sat Aug 29 05:11:23.369973 2026] [security2:error] [pid 11274:tid 11361] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/dev/.env"] [unique_id "apK-W2bX5DA3XO6e_qQ7NAABRS8"]
[Sat Aug 29 05:11:23.371974 2026] [core:error] [pid 11274:tid 11511] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.371994 2026] [core:error] [pid 11274:tid 11511] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.375271 2026] [security2:error] [pid 1321:tid 1513] [client 20.63.219.114:13443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-blog-header.php"] [unique_id "apK-W2jCPtor9NZ-byTzBAAABlU"]
[Sat Aug 29 05:11:23.400779 2026] [security2:error] [pid 11274:tid 11378] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/developer/.env"] [unique_id "apK-W2bX5DA3XO6e_qQ7PAABUUA"]
[Sat Aug 29 05:11:23.401229 2026] [security2:error] [pid 11274:tid 11386] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/develop/.env"] [unique_id "apK-W2bX5DA3XO6e_qQ7PQABUUg"]
[Sat Aug 29 05:11:23.401426 2026] [security2:error] [pid 11274:tid 11373] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/development/.env"] [unique_id "apK-W2bX5DA3XO6e_qQ7PgABUTs"]
[Sat Aug 29 05:11:23.412051 2026] [security2:error] [pid 11274:tid 11558] [client 20.104.104.62:33893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.americanvarietyradio.net"] [uri "/wp-content/themes/about.php"] [unique_id "apK-W2bX5DA3XO6e_qQ7QAAAAXo"]
[Sat Aug 29 05:11:23.412224 2026] [security2:error] [pid 11274:tid 11512] [client 20.104.104.62:48651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/console.php"] [unique_id "apK-W2bX5DA3XO6e_qQ7QQAAAU0"]
[Sat Aug 29 05:11:23.420515 2026] [cgid:error] [pid 11274:tid 11367] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:23.424145 2026] [security2:error] [pid 11274:tid 11544] [client 40.83.93.50:10717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/contentloader1.php"] [unique_id "apK-W2bX5DA3XO6e_qQ7RAAAAWw"]
[Sat Aug 29 05:11:23.431255 2026] [cgid:error] [pid 11274:tid 11371] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:23.431546 2026] [cgid:error] [pid 11274:tid 11407] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:23.434303 2026] [security2:error] [pid 1321:tid 1536] [client 158.158.54.35:12358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/autoload_classmap.php"] [unique_id "apK-W2jCPtor9NZ-byTzCgAABmw"]
[Sat Aug 29 05:11:23.434480 2026] [cgid:error] [pid 11274:tid 11439] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:23.442937 2026] [cgid:error] [pid 11274:tid 11339] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:23.444386 2026] [security2:error] [pid 11274:tid 11481] [client 20.48.250.41:49553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-W2bX5DA3XO6e_qQ7TAAAAS4"]
[Sat Aug 29 05:11:23.450018 2026] [core:error] [pid 1321:tid 1613] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.450037 2026] [core:error] [pid 1321:tid 1613] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.450666 2026] [security2:error] [pid 11274:tid 11466] [client 20.240.128.207:7248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/config.php"] [unique_id "apK-W2bX5DA3XO6e_qQ7UAAAASA"]
[Sat Aug 29 05:11:23.454862 2026] [core:error] [pid 1321:tid 1610] [client 20.52.41.200:4618] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.455776 2026] [core:error] [pid 1321:tid 1610] [client 20.52.41.200:4618] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.459568 2026] [cgid:error] [pid 11274:tid 11358] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:23.459870 2026] [security2:error] [pid 1321:tid 1608] [client 93.123.109.228:53854] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/apis/.env"] [unique_id "apK-W2jCPtor9NZ-byTzDgAABrM"]
[Sat Aug 29 05:11:23.460939 2026] [security2:error] [pid 11274:tid 11494] [client 20.104.104.62:47552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/cinfo.php"] [unique_id "apK-W2bX5DA3XO6e_qQ7WQAAATs"]
[Sat Aug 29 05:11:23.467448 2026] [security2:error] [pid 1321:tid 1567] [client 20.48.250.41:26889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/users.php"] [unique_id "apK-W2jCPtor9NZ-byTzEAAABoo"]
[Sat Aug 29 05:11:23.478622 2026] [security2:error] [pid 11274:tid 11475] [client 20.104.104.62:57436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/inwp.php"] [unique_id "apK-W2bX5DA3XO6e_qQ7YgAAASk"]
[Sat Aug 29 05:11:23.494706 2026] [security2:error] [pid 1321:tid 1506] [client 107.145.13.164:51507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 164.13.145.107.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK-W2jCPtor9NZ-byTzFAAABk4"]
[Sat Aug 29 05:11:23.494843 2026] [security2:error] [pid 1321:tid 1506] [client 107.145.13.164:51507] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK-W2jCPtor9NZ-byTzFAAABk4"]
[Sat Aug 29 05:11:23.510930 2026] [core:error] [pid 11274:tid 11473] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.510952 2026] [core:error] [pid 11274:tid 11473] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.511633 2026] [core:error] [pid 1321:tid 1542] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.511653 2026] [core:error] [pid 1321:tid 1542] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.512229 2026] [security2:error] [pid 11274:tid 11553] [client 93.123.109.228:60618] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/app/.env"] [unique_id "apK-W2bX5DA3XO6e_qQ7bwAAAXU"]
[Sat Aug 29 05:11:23.514625 2026] [core:error] [pid 11274:tid 11490] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.514642 2026] [core:error] [pid 11274:tid 11490] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.514703 2026] [core:error] [pid 1321:tid 1497] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.514713 2026] [core:error] [pid 1321:tid 1497] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.517075 2026] [security2:error] [pid 11274:tid 11569] [client 158.158.54.35:10142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/txets.php"] [unique_id "apK-W2bX5DA3XO6e_qQ7cgAAAYU"]
[Sat Aug 29 05:11:23.519553 2026] [core:error] [pid 11274:tid 11499] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.519569 2026] [core:error] [pid 11274:tid 11499] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.520047 2026] [core:error] [pid 1321:tid 1611] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.520059 2026] [core:error] [pid 1321:tid 1611] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.521871 2026] [core:error] [pid 11274:tid 11488] [client 20.63.219.114:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.521888 2026] [core:error] [pid 11274:tid 11488] [client 20.63.219.114:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.521896 2026] [security2:error] [pid 1321:tid 1603] [client 40.83.93.50:10022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/blog.php"] [unique_id "apK-W2jCPtor9NZ-byTzHwAABq4"]
[Sat Aug 29 05:11:23.533187 2026] [core:error] [pid 11274:tid 11550] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.533209 2026] [core:error] [pid 11274:tid 11550] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.552549 2026] [security2:error] [pid 11274:tid 11518] [client 68.155.159.216:23510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-admin/index.php"] [unique_id "apK-W2bX5DA3XO6e_qQ7ggAAAVM"]
[Sat Aug 29 05:11:23.556181 2026] [core:error] [pid 1321:tid 1589] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.556198 2026] [core:error] [pid 1321:tid 1589] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.570402 2026] [security2:error] [pid 11274:tid 11571] [client 195.178.110.247:46762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mantenimientobaser.com"] [uri "/index.php"] [unique_id "apK-W2bX5DA3XO6e_qQ7iAAAAYc"]
[Sat Aug 29 05:11:23.573705 2026] [security2:error] [pid 11274:tid 11571] [client 20.104.49.130:57695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/f35.update.php"] [unique_id "apK-W2bX5DA3XO6e_qQ7iwAAAYc"]
[Sat Aug 29 05:11:23.576070 2026] [security2:error] [pid 1321:tid 1562] [client 52.138.0.157:1394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.opphousing.com"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "apK-W2jCPtor9NZ-byTzJgAABoU"]
[Sat Aug 29 05:11:23.576077 2026] [core:error] [pid 11274:tid 11525] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.576096 2026] [core:error] [pid 11274:tid 11525] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.590587 2026] [cgid:error] [pid 11274:tid 11426] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:23.591423 2026] [security2:error] [pid 1321:tid 1490] [client 20.52.41.200:2849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/files/index.php"] [unique_id "apK-W2jCPtor9NZ-byTzJwAABj4"]
[Sat Aug 29 05:11:23.597821 2026] [security2:error] [pid 11274:tid 11546] [client 20.48.250.41:26918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/bzjdlofz.php"] [unique_id "apK-W2bX5DA3XO6e_qQ7kwAAAW4"]
[Sat Aug 29 05:11:23.615640 2026] [security2:error] [pid 1321:tid 1557] [client 20.104.104.62:33888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.americanvarietyradio.net"] [uri "/wp-content/themes/x/bypass.php"] [unique_id "apK-W2jCPtor9NZ-byTzKgAABoA"]
[Sat Aug 29 05:11:23.617661 2026] [core:error] [pid 11274:tid 11487] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.617683 2026] [core:error] [pid 11274:tid 11487] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.624676 2026] [security2:error] [pid 11274:tid 11524] [client 158.23.147.79:39299] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.darwinsfox.com"] [uri "/1.php"] [unique_id "apK-W2bX5DA3XO6e_qQ7mQAAAVk"]
[Sat Aug 29 05:11:23.624794 2026] [security2:error] [pid 11274:tid 11524] [client 158.23.147.79:39299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/1.php"] [unique_id "apK-W2bX5DA3XO6e_qQ7mQAAAVk"]
[Sat Aug 29 05:11:23.627351 2026] [core:error] [pid 1321:tid 1543] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.628262 2026] [core:error] [pid 1321:tid 1543] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.629104 2026] [security2:error] [pid 11274:tid 11481] [client 4.205.62.107:63932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/wp-blog.php"] [unique_id "apK-W2bX5DA3XO6e_qQ7mgAAAS4"]
[Sat Aug 29 05:11:23.630953 2026] [security2:error] [pid 11274:tid 11540] [client 20.104.104.62:40040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/ad1.php"] [unique_id "apK-W2bX5DA3XO6e_qQ7nAAAAWk"]
[Sat Aug 29 05:11:23.644145 2026] [security2:error] [pid 11274:tid 11496] [client 20.63.219.114:10138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/xmlrpc.php0"] [unique_id "apK-W2bX5DA3XO6e_qQ7kQAAAT0"]
[Sat Aug 29 05:11:23.669994 2026] [security2:error] [pid 11274:tid 11333] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/erp/.env"] [unique_id "apK-W2bX5DA3XO6e_qQ7ogABbRQ"]
[Sat Aug 29 05:11:23.702589 2026] [core:error] [pid 1321:tid 1550] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.702608 2026] [core:error] [pid 1321:tid 1550] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.712216 2026] [core:error] [pid 11274:tid 11547] [client 20.100.175.163:4160] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.712233 2026] [core:error] [pid 11274:tid 11547] [client 20.100.175.163:4160] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.712828 2026] [security2:error] [pid 11274:tid 11342] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/fe/.env"] [unique_id "apK-W2bX5DA3XO6e_qQ7qwABJx0"]
[Sat Aug 29 05:11:23.713658 2026] [security2:error] [pid 11274:tid 11313] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/etc/apache2/apache2.conf"] [unique_id "apK-W2bX5DA3XO6e_qQ7qgABJwA"]
[Sat Aug 29 05:11:23.713980 2026] [security2:error] [pid 11274:tid 11436] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/frontend/.env"] [unique_id "apK-W2bX5DA3XO6e_qQ7rwABJ3k"]
[Sat Aug 29 05:11:23.714048 2026] [security2:error] [pid 11274:tid 11342] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/front/.env"] [unique_id "apK-W2bX5DA3XO6e_qQ7rgABJx0"]
[Sat Aug 29 05:11:23.715394 2026] [security2:error] [pid 11274:tid 11438] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/etc/boto.cfg"] [unique_id "apK-W2bX5DA3XO6e_qQ7sAABJ3s"]
[Sat Aug 29 05:11:23.733278 2026] [security2:error] [pid 11274:tid 11464] [client 20.63.219.114:17280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-blogs.php"] [unique_id "apK-W2bX5DA3XO6e_qQ7uAAAAR4"]
[Sat Aug 29 05:11:23.737193 2026] [security2:error] [pid 11274:tid 11555] [client 195.178.110.247:26728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mantenimientobaser.com"] [uri "/index.php"] [unique_id "apK-W2bX5DA3XO6e_qQ7uQAAAXc"]
[Sat Aug 29 05:11:23.747581 2026] [cgid:error] [pid 11274:tid 11389] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:23.748499 2026] [security2:error] [pid 1321:tid 1600] [client 158.23.184.117:11539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/update/da222.php"] [unique_id "apK-W2jCPtor9NZ-byTzNAAABqs"]
[Sat Aug 29 05:11:23.751016 2026] [security2:error] [pid 11274:tid 11442] [remote 74.7.227.154:55336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK-W2bX5DA3XO6e_qQ7wAABVX8"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwordpress-seo%2Fadmin
[Sat Aug 29 05:11:23.751962 2026] [cgid:error] [pid 11274:tid 11321] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:23.751968 2026] [cgid:error] [pid 11274:tid 11429] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:23.752995 2026] [cgid:error] [pid 11274:tid 11437] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:23.756013 2026] [security2:error] [pid 1321:tid 1563] [client 93.123.109.228:53984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/application/.env"] [unique_id "apK-W2jCPtor9NZ-byTzNQAABoY"]
[Sat Aug 29 05:11:23.756417 2026] [cgid:error] [pid 11274:tid 11441] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:23.766546 2026] [security2:error] [pid 11274:tid 11479] [client 93.123.109.228:53842] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/apps/.env"] [unique_id "apK-W2bX5DA3XO6e_qQ7wwAAASw"]
[Sat Aug 29 05:11:23.770542 2026] [core:error] [pid 11274:tid 11522] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.770557 2026] [core:error] [pid 11274:tid 11522] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.770724 2026] [core:error] [pid 1321:tid 1501] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.770740 2026] [core:error] [pid 1321:tid 1501] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.771387 2026] [security2:error] [pid 11274:tid 11569] [client 20.151.200.44:23556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/zafir1.php"] [unique_id "apK-W2bX5DA3XO6e_qQ7xwAAAYU"]
[Sat Aug 29 05:11:23.771893 2026] [core:error] [pid 1321:tid 1544] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.771909 2026] [core:error] [pid 1321:tid 1544] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.772938 2026] [security2:error] [pid 1321:tid 1548] [client 52.138.0.157:58218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.opphousing.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-W2jCPtor9NZ-byTzOQAABnc"]
[Sat Aug 29 05:11:23.774481 2026] [core:error] [pid 11274:tid 11550] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.774495 2026] [core:error] [pid 11274:tid 11550] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.775913 2026] [core:error] [pid 1321:tid 1614] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.775928 2026] [core:error] [pid 1321:tid 1614] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.776659 2026] [security2:error] [pid 11274:tid 11500] [client 20.104.104.62:47565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/newfile.php"] [unique_id "apK-W2bX5DA3XO6e_qQ7zAAAAUE"]
[Sat Aug 29 05:11:23.779506 2026] [security2:error] [pid 1321:tid 1522] [client 20.48.250.41:27632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/selesai.php"] [unique_id "apK-W2jCPtor9NZ-byTzPQAABl4"]
[Sat Aug 29 05:11:23.791443 2026] [security2:error] [pid 1321:tid 1536] [client 20.104.104.62:52296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/1vbqo.php"] [unique_id "apK-W2jCPtor9NZ-byTzQAAABmw"]
[Sat Aug 29 05:11:23.799862 2026] [security2:error] [pid 11274:tid 11541] [client 4.205.62.107:64913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/konfig.php"] [unique_id "apK-W2bX5DA3XO6e_qQ70AAAAWo"]
[Sat Aug 29 05:11:23.814376 2026] [security2:error] [pid 1321:tid 1508] [client 20.104.104.62:33874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.americanvarietyradio.net"] [uri "/wp-content/uploads/admin.php"] [unique_id "apK-W2jCPtor9NZ-byTzQgAABlA"]
[Sat Aug 29 05:11:23.817328 2026] [security2:error] [pid 1321:tid 1506] [client 20.151.200.44:21782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/baee.php"] [unique_id "apK-W2jCPtor9NZ-byTzRAAABk4"]
[Sat Aug 29 05:11:23.825201 2026] [core:error] [pid 11274:tid 11468] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.825220 2026] [core:error] [pid 11274:tid 11468] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.835502 2026] [core:error] [pid 1321:tid 1582] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.835522 2026] [core:error] [pid 1321:tid 1582] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.839132 2026] [core:error] [pid 11274:tid 11527] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.839152 2026] [core:error] [pid 11274:tid 11527] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.839549 2026] [security2:error] [pid 1321:tid 1545] [client 4.205.62.107:63027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/min.php"] [unique_id "apK-W2jCPtor9NZ-byTzRwAABnU"]
[Sat Aug 29 05:11:23.840736 2026] [security2:error] [pid 1321:tid 1526] [client 4.205.62.107:6275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/app_local.php"] [unique_id "apK-W2jCPtor9NZ-byTzSAAABmI"]
[Sat Aug 29 05:11:23.841076 2026] [security2:error] [pid 1321:tid 1545] [client 68.155.159.216:65077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "snackgaro.com"] [uri "/first.php"] [unique_id "apK-W2jCPtor9NZ-byTzSQAABnU"]
[Sat Aug 29 05:11:23.855721 2026] [security2:error] [pid 11274:tid 11559] [client 20.151.200.44:27141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/d12.php"] [unique_id "apK-W2bX5DA3XO6e_qQ72wAAAXs"]
[Sat Aug 29 05:11:23.870894 2026] [security2:error] [pid 11274:tid 11327] [remote 198.54.114.42:44258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 42.114.54.198.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dcleader-org.bridgewaycrc.org"] [uri "/wp-login.php"] [unique_id "apK-W2bX5DA3XO6e_qQ72AABaA4"]
[Sat Aug 29 05:11:23.876955 2026] [security2:error] [pid 1321:tid 1573] [client 47.128.20.180:39752] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.fivetownselc.com"] [uri "/robots.txt"] [unique_id "apK-W2jCPtor9NZ-byTzTAAABpA"]
[Sat Aug 29 05:11:23.881289 2026] [security2:error] [pid 1321:tid 1606] [client 158.158.54.35:29470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/bi.php"] [unique_id "apK-W2jCPtor9NZ-byTzTgAABrE"]
[Sat Aug 29 05:11:23.882727 2026] [core:error] [pid 1321:tid 1495] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.882741 2026] [core:error] [pid 1321:tid 1495] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.886021 2026] [core:error] [pid 11274:tid 11512] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.886041 2026] [core:error] [pid 11274:tid 11512] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.890391 2026] [security2:error] [pid 1321:tid 1526] [client 158.23.184.117:65186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/xmr.php"] [unique_id "apK-W2jCPtor9NZ-byTzUQAABmI"]
[Sat Aug 29 05:11:23.892857 2026] [cgid:error] [pid 11274:tid 11357] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:23.893643 2026] [cgid:error] [pid 11274:tid 11332] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:23.893991 2026] [security2:error] [pid 11274:tid 11382] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/info.php"] [unique_id "apK-W2bX5DA3XO6e_qQ75gABbEQ"]
[Sat Aug 29 05:11:23.894007 2026] [security2:error] [pid 11274:tid 11332] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/infos.php"] [unique_id "apK-W2bX5DA3XO6e_qQ75wABbBM"]
[Sat Aug 29 05:11:23.902863 2026] [security2:error] [pid 11274:tid 11526] [client 40.83.93.50:9849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/al.php"] [unique_id "apK-W2bX5DA3XO6e_qQ77AAAAVs"]
[Sat Aug 29 05:11:23.904586 2026] [security2:error] [pid 11274:tid 11318] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/infophp.php"] [unique_id "apK-W2bX5DA3XO6e_qQ77QABbAU"]
[Sat Aug 29 05:11:23.908047 2026] [security2:error] [pid 11274:tid 11465] [client 20.52.41.200:4783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/inputs.php"] [unique_id "apK-W2bX5DA3XO6e_qQ77gAAAR8"]
[Sat Aug 29 05:11:23.913703 2026] [security2:error] [pid 11274:tid 11452] [client 20.48.250.41:26886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/shlo.php"] [unique_id "apK-W2bX5DA3XO6e_qQ78AAAARI"]
[Sat Aug 29 05:11:23.927970 2026] [security2:error] [pid 1321:tid 1537] [client 68.155.159.216:5997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/bk/index.php"] [unique_id "apK-W2jCPtor9NZ-byTzVgAABm0"]
[Sat Aug 29 05:11:23.935459 2026] [security2:error] [pid 11274:tid 11348] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/laravel/.env"] [unique_id "apK-W2bX5DA3XO6e_qQ78wABbCM"]
[Sat Aug 29 05:11:23.935992 2026] [security2:error] [pid 11274:tid 11352] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/lms/.env"] [unique_id "apK-W2bX5DA3XO6e_qQ79AABbCc"]
[Sat Aug 29 05:11:23.939001 2026] [security2:error] [pid 1321:tid 1504] [client 20.104.104.62:48578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/blnux.php"] [unique_id "apK-W2jCPtor9NZ-byTzWAAABkw"]
[Sat Aug 29 05:11:23.939561 2026] [core:error] [pid 1321:tid 1502] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.939585 2026] [core:error] [pid 1321:tid 1502] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.942111 2026] [security2:error] [pid 11274:tid 11496] [client 20.100.175.163:31892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/a.php"] [unique_id "apK-W2bX5DA3XO6e_qQ79gAAAT0"]
[Sat Aug 29 05:11:23.945410 2026] [core:error] [pid 1321:tid 1533] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.945430 2026] [core:error] [pid 1321:tid 1533] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:23.951273 2026] [security2:error] [pid 11274:tid 11568] [client 20.240.128.207:18204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK-W2bX5DA3XO6e_qQ79wAAAYQ"]
[Sat Aug 29 05:11:23.971142 2026] [security2:error] [pid 11274:tid 11322] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/local/.env"] [unique_id "apK-W2bX5DA3XO6e_qQ7-wABKAk"]
[Sat Aug 29 05:11:23.972845 2026] [cgid:error] [pid 11274:tid 11363] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:23.973263 2026] [security2:error] [pid 1321:tid 1509] [client 52.138.0.157:21191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.opphousing.com"] [uri "/wp-includes/blocks/buttons/index.php"] [unique_id "apK-W2jCPtor9NZ-byTzXAAABlE"]
[Sat Aug 29 05:11:23.986088 2026] [security2:error] [pid 1321:tid 1518] [client 20.104.104.62:52281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/h02ugyh.php"] [unique_id "apK-W2jCPtor9NZ-byTzXgAABlo"]
[Sat Aug 29 05:11:23.988640 2026] [security2:error] [pid 1321:tid 1566] [client 158.23.147.79:14259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-admin.php"] [unique_id "apK-W2jCPtor9NZ-byTzXwAABok"]
[Sat Aug 29 05:11:23.989100 2026] [security2:error] [pid 1321:tid 1518] [client 68.155.159.216:65148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/worksec.php"] [unique_id "apK-W2jCPtor9NZ-byTzYAAABlo"]
[Sat Aug 29 05:11:23.991980 2026] [security2:error] [pid 1321:tid 1539] [client 40.83.93.50:10001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/bypass.php"] [unique_id "apK-W2jCPtor9NZ-byTzYgAABm8"]
[Sat Aug 29 05:11:23.999163 2026] [security2:error] [pid 1321:tid 1602] [client 45.148.10.62:51624] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.zeh.elx.mybluehost.me"] [uri "/backend/.env"] [unique_id "apK-W2jCPtor9NZ-byTzZAAABq0"]
[Sat Aug 29 05:11:23.999680 2026] [security2:error] [pid 11274:tid 11538] [client 20.104.49.130:63489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pvillusions.com"] [uri "/abcd.php"] [unique_id "apK-W2bX5DA3XO6e_qQ8CgAAAWc"]
[Sat Aug 29 05:11:24.000549 2026] [core:error] [pid 11274:tid 11497] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.000569 2026] [core:error] [pid 11274:tid 11497] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.000675 2026] [core:error] [pid 11274:tid 11514] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.000684 2026] [core:error] [pid 11274:tid 11514] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.002304 2026] [cgid:error] [pid 11274:tid 11329] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:24.019425 2026] [core:error] [pid 11274:tid 11529] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.019444 2026] [core:error] [pid 11274:tid 11529] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.026798 2026] [core:error] [pid 1321:tid 1521] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.026819 2026] [core:error] [pid 1321:tid 1521] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.029362 2026] [security2:error] [pid 1321:tid 1498] [client 103.185.242.143:62487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-XGjCPtor9NZ-byTzZwAABkY"]
[Sat Aug 29 05:11:24.029478 2026] [security2:error] [pid 1321:tid 1498] [client 103.185.242.143:62487] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-XGjCPtor9NZ-byTzZwAABkY"]
[Sat Aug 29 05:11:24.030468 2026] [security2:error] [pid 11274:tid 11370] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/market/.env"] [unique_id "apK-XGbX5DA3XO6e_qQ8EQABKDg"]
[Sat Aug 29 05:11:24.035921 2026] [security2:error] [pid 11274:tid 11376] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/marketing/.env"] [unique_id "apK-XGbX5DA3XO6e_qQ8EgABMD4"]
[Sat Aug 29 05:11:24.038165 2026] [security2:error] [pid 1321:tid 1585] [client 20.63.219.114:8909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/content.php"] [unique_id "apK-XGjCPtor9NZ-byTzaAAABpw"]
[Sat Aug 29 05:11:24.045368 2026] [security2:error] [pid 1321:tid 1594] [client 68.155.159.216:14153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/mah.php"] [unique_id "apK-XGjCPtor9NZ-byTzaQAABqU"]
[Sat Aug 29 05:11:24.046975 2026] [security2:error] [pid 11274:tid 11413] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/media/.env"] [unique_id "apK-XGbX5DA3XO6e_qQ8FAABY2M"]
[Sat Aug 29 05:11:24.047138 2026] [security2:error] [pid 1321:tid 1564] [client 20.48.250.41:26908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/asax.php"] [unique_id "apK-XGjCPtor9NZ-byTzagAABoc"]
[Sat Aug 29 05:11:24.050507 2026] [security2:error] [pid 11274:tid 11484] [client 20.52.41.200:2809] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "alisonandpeter.strangeworx.com"] [uri "/1.php7"] [unique_id "apK-XGbX5DA3XO6e_qQ8GAAAATE"]
[Sat Aug 29 05:11:24.050625 2026] [security2:error] [pid 11274:tid 11484] [client 20.52.41.200:2809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/1.php7"] [unique_id "apK-XGbX5DA3XO6e_qQ8GAAAATE"]
[Sat Aug 29 05:11:24.063345 2026] [security2:error] [pid 11274:tid 11552] [client 158.23.184.117:65165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK-XGbX5DA3XO6e_qQ8IAAAAXQ"]
[Sat Aug 29 05:11:24.064919 2026] [security2:error] [pid 1321:tid 1527] [client 20.104.104.62:40205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/pro.php"] [unique_id "apK-XGjCPtor9NZ-byTzbQAABmM"]
[Sat Aug 29 05:11:24.087637 2026] [security2:error] [pid 1321:tid 1543] [client 20.63.219.114:13465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-comments-post.php"] [unique_id "apK-XGjCPtor9NZ-byTzbwAABnM"]
[Sat Aug 29 05:11:24.094113 2026] [security2:error] [pid 11274:tid 11398] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/new/.env"] [unique_id "apK-XGbX5DA3XO6e_qQ8IgABY1Q"]
[Sat Aug 29 05:11:24.094732 2026] [security2:error] [pid 11274:tid 11328] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/node-api/.env"] [unique_id "apK-XGbX5DA3XO6e_qQ8IwABYw8"]
[Sat Aug 29 05:11:24.096079 2026] [core:error] [pid 1321:tid 1501] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.096095 2026] [core:error] [pid 1321:tid 1501] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.099094 2026] [core:error] [pid 1321:tid 1544] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.099112 2026] [core:error] [pid 1321:tid 1544] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.103818 2026] [security2:error] [pid 11274:tid 11365] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/node/.env"] [unique_id "apK-XGbX5DA3XO6e_qQ8JQABYzM"]
[Sat Aug 29 05:11:24.107499 2026] [core:error] [pid 1321:tid 1548] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.107516 2026] [core:error] [pid 1321:tid 1548] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.107519 2026] [cgid:error] [pid 11274:tid 11349] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:24.107893 2026] [core:error] [pid 11274:tid 11461] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.107906 2026] [core:error] [pid 11274:tid 11461] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.110246 2026] [security2:error] [pid 1321:tid 1522] [client 93.123.109.228:53822] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/back-api/.env"] [unique_id "apK-XGjCPtor9NZ-byTzcwAABl4"]
[Sat Aug 29 05:11:24.110342 2026] [security2:error] [pid 11274:tid 11378] [remote 34.138.144.127:38068] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/@fs/app/.env"] [unique_id "apK-XGbX5DA3XO6e_qQ8KAABLUA"]
[Sat Aug 29 05:11:24.111882 2026] [security2:error] [pid 11274:tid 11569] [client 93.123.109.228:60692] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/back/.env"] [unique_id "apK-XGbX5DA3XO6e_qQ8KQAAAYU"]
[Sat Aug 29 05:11:24.113458 2026] [security2:error] [pid 1321:tid 1536] [client 93.123.109.228:53984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/back-end/.env"] [unique_id "apK-XGjCPtor9NZ-byTzdAAABmw"]
[Sat Aug 29 05:11:24.126394 2026] [security2:error] [pid 11274:tid 11471] [client 68.155.159.216:56517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK-XGbX5DA3XO6e_qQ8LAAAASU"]
[Sat Aug 29 05:11:24.127607 2026] [security2:error] [pid 1321:tid 1520] [client 158.23.147.79:58921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK-XGjCPtor9NZ-byTzdgAABlw"]
[Sat Aug 29 05:11:24.128265 2026] [security2:error] [pid 11274:tid 11373] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/node/api/.env"] [unique_id "apK-XGbX5DA3XO6e_qQ8KwABJjs"]
[Sat Aug 29 05:11:24.129133 2026] [security2:error] [pid 1321:tid 1555] [client 93.123.109.228:53854] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK-XGjCPtor9NZ-byTzdwAABn4"]
[Sat Aug 29 05:11:24.129136 2026] [security2:error] [pid 11274:tid 11367] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/node/backend/.env"] [unique_id "apK-XGbX5DA3XO6e_qQ8LQABJjU"]
[Sat Aug 29 05:11:24.129601 2026] [security2:error] [pid 1321:tid 1586] [client 20.104.104.62:57409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/shelp.php"] [unique_id "apK-XGjCPtor9NZ-byTzeAAABp0"]
[Sat Aug 29 05:11:24.130169 2026] [security2:error] [pid 11274:tid 11550] [client 93.123.109.228:53842] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/backend-api/.env"] [unique_id "apK-XGbX5DA3XO6e_qQ8LgAAAXI"]
[Sat Aug 29 05:11:24.136854 2026] [security2:error] [pid 11274:tid 11374] [remote 34.138.144.127:38068] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "www.studiopasa.com"] [uri "/.env.backup"] [unique_id "apK-XGbX5DA3XO6e_qQ8MAABQTw"]
[Sat Aug 29 05:11:24.137849 2026] [cgid:error] [pid 11274:tid 11407] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:24.147552 2026] [security2:error] [pid 1321:tid 1519] [client 45.148.10.62:51624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zeh.elx.mybluehost.me"] [uri "/test.php"] [unique_id "apK-XGjCPtor9NZ-byTzegAABls"]
[Sat Aug 29 05:11:24.161170 2026] [security2:error] [pid 11274:tid 11406] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/nodeweb/.env"] [unique_id "apK-XGbX5DA3XO6e_qQ8NQABalw"]
[Sat Aug 29 05:11:24.161170 2026] [security2:error] [pid 11274:tid 11343] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/nodeapi/.env"] [unique_id "apK-XGbX5DA3XO6e_qQ8NgABah4"]
[Sat Aug 29 05:11:24.170769 2026] [security2:error] [pid 11274:tid 11492] [client 68.155.159.216:1836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK-XGbX5DA3XO6e_qQ8OQAAATk"]
[Sat Aug 29 05:11:24.174032 2026] [security2:error] [pid 11274:tid 11508] [client 68.155.159.216:56797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK-XGbX5DA3XO6e_qQ8OgAAAUk"]
[Sat Aug 29 05:11:24.174674 2026] [security2:error] [pid 11274:tid 11479] [client 52.138.0.157:1357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.opphousing.com"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "apK-XGbX5DA3XO6e_qQ8OwAAASw"]
[Sat Aug 29 05:11:24.179085 2026] [security2:error] [pid 11274:tid 11502] [client 4.205.62.107:60298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/xda.php"] [unique_id "apK-XGbX5DA3XO6e_qQ8PwAAAUM"]
[Sat Aug 29 05:11:24.179317 2026] [http2:warn] [pid 1018003:tid 1018194] [client 57.141.14.53:57820] h2_stream(1018003-367-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:11:24.187140 2026] [security2:error] [pid 11274:tid 11415] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/old/.env"] [unique_id "apK-XGbX5DA3XO6e_qQ8QwABLGU"]
[Sat Aug 29 05:11:24.203236 2026] [core:error] [pid 11274:tid 11543] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.203257 2026] [core:error] [pid 11274:tid 11543] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.203518 2026] [security2:error] [pid 1321:tid 1584] [client 20.100.175.163:20693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-content/themes/about.php"] [unique_id "apK-XGjCPtor9NZ-byTzgAAABps"]
[Sat Aug 29 05:11:24.207295 2026] [security2:error] [pid 1321:tid 1528] [client 20.48.250.41:27636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/fetch.php"] [unique_id "apK-XGjCPtor9NZ-byTzgQAABmQ"]
[Sat Aug 29 05:11:24.208450 2026] [security2:error] [pid 11274:tid 11476] [client 158.23.184.117:65198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/wp-act.php"] [unique_id "apK-XGbX5DA3XO6e_qQ8SAAAASo"]
[Sat Aug 29 05:11:24.212916 2026] [core:error] [pid 11274:tid 11482] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.212933 2026] [core:error] [pid 11274:tid 11482] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.212936 2026] [core:error] [pid 11274:tid 11559] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.212947 2026] [core:error] [pid 11274:tid 11559] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.228624 2026] [security2:error] [pid 1321:tid 1542] [client 4.205.62.107:51484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/konfig.php"] [unique_id "apK-XGjCPtor9NZ-byTzgwAABnI"]
[Sat Aug 29 05:11:24.245801 2026] [security2:error] [pid 11274:tid 11405] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/opt/.env"] [unique_id "apK-XGbX5DA3XO6e_qQ8UwABQls"]
[Sat Aug 29 05:11:24.251723 2026] [security2:error] [pid 11274:tid 11540] [client 20.104.104.62:34727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.americanvarietyradio.net"] [uri "/wp-setting.php"] [unique_id "apK-XGbX5DA3XO6e_qQ8VgAAAWk"]
[Sat Aug 29 05:11:24.262471 2026] [security2:error] [pid 11274:tid 11496] [client 93.123.109.228:60692] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/backup/.env"] [unique_id "apK-XGbX5DA3XO6e_qQ8XQAAAT0"]
[Sat Aug 29 05:11:24.265091 2026] [security2:error] [pid 1321:tid 1612] [client 93.123.109.228:53984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/be/.env"] [unique_id "apK-XGjCPtor9NZ-byTziAAABrc"]
[Sat Aug 29 05:11:24.278534 2026] [core:error] [pid 1321:tid 1611] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.278551 2026] [core:error] [pid 1321:tid 1611] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.280836 2026] [core:error] [pid 11274:tid 11445] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.280852 2026] [core:error] [pid 11274:tid 11445] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.284065 2026] [security2:error] [pid 11274:tid 11572] [client 93.123.109.228:53842] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/beta/.env"] [unique_id "apK-XGbX5DA3XO6e_qQ8YwAAAYg"]
[Sat Aug 29 05:11:24.290634 2026] [security2:error] [pid 1321:tid 1589] [client 158.158.54.35:22395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-content/themes/about.php"] [unique_id "apK-XGjCPtor9NZ-byTzjQAABqA"]
[Sat Aug 29 05:11:24.292925 2026] [core:error] [pid 11274:tid 11494] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.292943 2026] [core:error] [pid 11274:tid 11494] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.295127 2026] [core:error] [pid 11274:tid 11486] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.295140 2026] [core:error] [pid 11274:tid 11486] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.298883 2026] [core:error] [pid 11274:tid 11538] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.298904 2026] [core:error] [pid 11274:tid 11538] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.310546 2026] [core:error] [pid 11274:tid 11466] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.310569 2026] [core:error] [pid 11274:tid 11466] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.318780 2026] [security2:error] [pid 11274:tid 11553] [client 158.23.147.79:49810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/goods.php"] [unique_id "apK-XGbX5DA3XO6e_qQ8cgAAAXU"]
[Sat Aug 29 05:11:24.341339 2026] [core:error] [pid 11274:tid 11547] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.341372 2026] [core:error] [pid 11274:tid 11547] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.342878 2026] [core:error] [pid 1321:tid 1502] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.342897 2026] [core:error] [pid 1321:tid 1502] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.344872 2026] [security2:error] [pid 1321:tid 1591] [client 68.155.159.216:33665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-content/packed.php"] [unique_id "apK-XGjCPtor9NZ-byTzlAAABqI"]
[Sat Aug 29 05:11:24.345468 2026] [security2:error] [pid 1321:tid 1581] [client 216.51.171.83:55782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 83.171.51.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-XGjCPtor9NZ-byTzlQAABpg"]
[Sat Aug 29 05:11:24.345612 2026] [security2:error] [pid 1321:tid 1581] [client 216.51.171.83:55782] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-XGjCPtor9NZ-byTzlQAABpg"]
[Sat Aug 29 05:11:24.347966 2026] [security2:error] [pid 11274:tid 11527] [client 158.158.54.35:30293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/cc.php"] [unique_id "apK-XGbX5DA3XO6e_qQ8egAAAVw"]
[Sat Aug 29 05:11:24.349825 2026] [core:error] [pid 11274:tid 11555] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.349842 2026] [core:error] [pid 11274:tid 11555] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.350463 2026] [security2:error] [pid 1321:tid 1615] [client 20.48.250.41:26887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/vx.php"] [unique_id "apK-XGjCPtor9NZ-byTzlgAABro"]
[Sat Aug 29 05:11:24.357493 2026] [security2:error] [pid 11274:tid 11477] [client 158.23.184.117:11541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/fff.php"] [unique_id "apK-XGbX5DA3XO6e_qQ8fwAAASs"]
[Sat Aug 29 05:11:24.361656 2026] [security2:error] [pid 1321:tid 1583] [client 20.104.104.62:48652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/pentest.php"] [unique_id "apK-XGjCPtor9NZ-byTzmAAABpo"]
[Sat Aug 29 05:11:24.364755 2026] [security2:error] [pid 11274:tid 11507] [client 20.52.41.200:4766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/alfa.php"] [unique_id "apK-XGbX5DA3XO6e_qQ8gAAAAUg"]
[Sat Aug 29 05:11:24.385329 2026] [core:error] [pid 11274:tid 11474] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.385347 2026] [core:error] [pid 11274:tid 11474] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.388466 2026] [core:error] [pid 1321:tid 1557] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.388480 2026] [core:error] [pid 1321:tid 1557] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.395298 2026] [security2:error] [pid 1321:tid 1518] [client 93.123.109.228:53890] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/client/.env"] [unique_id "apK-XGjCPtor9NZ-byTznQAABlo"]
[Sat Aug 29 05:11:24.398398 2026] [security2:error] [pid 11274:tid 11561] [client 40.83.93.50:11857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/global.php"] [unique_id "apK-XGbX5DA3XO6e_qQ8igAAAX0"]
[Sat Aug 29 05:11:24.401616 2026] [core:error] [pid 11274:tid 11493] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.401635 2026] [core:error] [pid 11274:tid 11493] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.402052 2026] [core:error] [pid 1321:tid 1515] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.402064 2026] [core:error] [pid 1321:tid 1515] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.402409 2026] [core:error] [pid 1321:tid 1547] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.402421 2026] [core:error] [pid 1321:tid 1547] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.402434 2026] [core:error] [pid 11274:tid 11569] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.402445 2026] [core:error] [pid 11274:tid 11569] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.406281 2026] [security2:error] [pid 1321:tid 1606] [client 20.63.219.114:2773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/wxo.php"] [unique_id "apK-XGjCPtor9NZ-byTzoAAABrE"]
[Sat Aug 29 05:11:24.417277 2026] [security2:error] [pid 11274:tid 11534] [client 68.155.159.216:49137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-XGbX5DA3XO6e_qQ8kAAAAWM"]
[Sat Aug 29 05:11:24.425817 2026] [security2:error] [pid 1321:tid 1580] [client 93.123.109.228:53822] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/cms/.env"] [unique_id "apK-XGjCPtor9NZ-byTzqAAABpc"]
[Sat Aug 29 05:11:24.427981 2026] [security2:error] [pid 11274:tid 11449] [client 20.151.200.44:65239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/Contrller.php"] [unique_id "apK-XGbX5DA3XO6e_qQ8kgAAAQ8"]
[Sat Aug 29 05:11:24.429432 2026] [security2:error] [pid 11274:tid 11498] [client 20.100.175.163:33708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/u.php"] [unique_id "apK-XGbX5DA3XO6e_qQ8kwAAAT8"]
[Sat Aug 29 05:11:24.432793 2026] [core:error] [pid 11274:tid 11571] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.432810 2026] [core:error] [pid 11274:tid 11571] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.438737 2026] [security2:error] [pid 11274:tid 11568] [client 20.240.128.207:18180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-good.php"] [unique_id "apK-XGbX5DA3XO6e_qQ8mgAAAYQ"]
[Sat Aug 29 05:11:24.441580 2026] [security2:error] [pid 11274:tid 11444] [client 20.151.200.44:65193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/x0x.php"] [unique_id "apK-XGbX5DA3XO6e_qQ8mwAAAQo"]
[Sat Aug 29 05:11:24.446608 2026] [security2:error] [pid 11274:tid 11502] [client 52.138.0.157:58197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.opphousing.com"] [uri "/wp-includes/index.php"] [unique_id "apK-XGbX5DA3XO6e_qQ8nAAAAUM"]
[Sat Aug 29 05:11:24.447840 2026] [security2:error] [pid 1321:tid 1537] [client 20.63.219.114:4149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-config.php"] [unique_id "apK-XGjCPtor9NZ-byTzqgAABm0"]
[Sat Aug 29 05:11:24.464160 2026] [security2:error] [pid 11274:tid 11543] [client 93.123.109.228:60624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/config.php"] [unique_id "apK-XGbX5DA3XO6e_qQ8oAAAAWs"]
[Sat Aug 29 05:11:24.464787 2026] [security2:error] [pid 11274:tid 11429] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/php-info.php"] [unique_id "apK-XGbX5DA3XO6e_qQ8ogABSnM"]
[Sat Aug 29 05:11:24.478600 2026] [security2:error] [pid 11274:tid 11437] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/php.php"] [unique_id "apK-XGbX5DA3XO6e_qQ8pQABSno"]
[Sat Aug 29 05:11:24.480122 2026] [security2:error] [pid 11274:tid 11482] [client 4.205.62.107:60344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/aws.php"] [unique_id "apK-XGbX5DA3XO6e_qQ8pgAAAS8"]
[Sat Aug 29 05:11:24.481592 2026] [security2:error] [pid 11274:tid 11535] [client 40.83.93.50:10026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/extractable-loader-head.php"] [unique_id "apK-XGbX5DA3XO6e_qQ8pwAAAWQ"]
[Sat Aug 29 05:11:24.487627 2026] [security2:error] [pid 11274:tid 11506] [client 20.48.250.41:26899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/global.php"] [unique_id "apK-XGbX5DA3XO6e_qQ8qAAAAUc"]
[Sat Aug 29 05:11:24.494048 2026] [security2:error] [pid 11274:tid 11441] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/php_info.php"] [unique_id "apK-XGbX5DA3XO6e_qQ8qQABSn4"]
[Sat Aug 29 05:11:24.499040 2026] [core:error] [pid 1321:tid 1594] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.499057 2026] [core:error] [pid 1321:tid 1594] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.499275 2026] [core:error] [pid 1321:tid 1563] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.499283 2026] [core:error] [pid 1321:tid 1563] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.507507 2026] [security2:error] [pid 11274:tid 11468] [client 158.23.184.117:11538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/.tmb/dropdown.php"] [unique_id "apK-XGbX5DA3XO6e_qQ8qwAAASI"]
[Sat Aug 29 05:11:24.507592 2026] [security2:error] [pid 11274:tid 11490] [client 20.52.41.200:2655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/disagraeosc.php"] [unique_id "apK-XGbX5DA3XO6e_qQ8qgAAATc"]
[Sat Aug 29 05:11:24.521171 2026] [security2:error] [pid 11274:tid 11356] [remote 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK-XGbX5DA3XO6e_qQ8tAABGSs"]
[Sat Aug 29 05:11:24.521392 2026] [security2:error] [pid 11274:tid 11459] [client 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK-XGbX5DA3XO6e_qQ8tAABGSs"]
[Sat Aug 29 05:11:24.529593 2026] [security2:error] [pid 11274:tid 11440] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/phpinfo.php"] [unique_id "apK-XGbX5DA3XO6e_qQ8uAABUX0"]
[Sat Aug 29 05:11:24.552086 2026] [security2:error] [pid 1321:tid 1605] [client 93.123.109.228:53874] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/config/.env"] [unique_id "apK-XGjCPtor9NZ-byTztgAABrA"]
[Sat Aug 29 05:11:24.556510 2026] [security2:error] [pid 11274:tid 11324] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/portal/.env"] [unique_id "apK-XGbX5DA3XO6e_qQ8ugABUQs"]
[Sat Aug 29 05:11:24.572342 2026] [security2:error] [pid 11274:tid 11327] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/prod/.env"] [unique_id "apK-XGbX5DA3XO6e_qQ8vwABUQ4"]
[Sat Aug 29 05:11:24.577292 2026] [security2:error] [pid 11274:tid 11454] [client 20.151.200.44:63743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/d12.php"] [unique_id "apK-XGbX5DA3XO6e_qQ8wQAAARQ"]
[Sat Aug 29 05:11:24.585526 2026] [core:error] [pid 11274:tid 11572] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.585550 2026] [core:error] [pid 11274:tid 11572] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.587551 2026] [security2:error] [pid 11274:tid 11387] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/product/.env"] [unique_id "apK-XGbX5DA3XO6e_qQ8xwABUUk"]
[Sat Aug 29 05:11:24.588839 2026] [core:error] [pid 11274:tid 11514] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.588857 2026] [core:error] [pid 11274:tid 11514] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.598488 2026] [security2:error] [pid 11274:tid 11338] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/production/.env"] [unique_id "apK-XGbX5DA3XO6e_qQ8yQABURk"]
[Sat Aug 29 05:11:24.608481 2026] [security2:error] [pid 1321:tid 1448] [remote 34.75.72.74:45028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/.env"] [unique_id "apK-XGjCPtor9NZ-byTzvwAGuFk"]
[Sat Aug 29 05:11:24.612272 2026] [core:error] [pid 11274:tid 11529] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.612292 2026] [core:error] [pid 11274:tid 11529] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.612872 2026] [security2:error] [pid 11274:tid 11553] [client 93.123.109.228:53934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/config/aws.php"] [unique_id "apK-XGbX5DA3XO6e_qQ8zAAAAXU"]
[Sat Aug 29 05:11:24.633219 2026] [security2:error] [pid 1321:tid 1559] [client 93.123.109.228:53854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/config/config.inc.php"] [unique_id "apK-XGjCPtor9NZ-byTzwwAABoI"]
[Sat Aug 29 05:11:24.644432 2026] [security2:error] [pid 11274:tid 11470] [client 52.138.0.157:1080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.opphousing.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK-XGbX5DA3XO6e_qQ80gAAASQ"]
[Sat Aug 29 05:11:24.652927 2026] [security2:error] [pid 11274:tid 11391] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/project/.env"] [unique_id "apK-XGbX5DA3XO6e_qQ81gABd00"]
[Sat Aug 29 05:11:24.653904 2026] [security2:error] [pid 11274:tid 11488] [client 103.48.146.148:52366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 148.146.48.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK-XGbX5DA3XO6e_qQ82QAAATU"]
[Sat Aug 29 05:11:24.654017 2026] [security2:error] [pid 11274:tid 11488] [client 103.48.146.148:52366] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK-XGbX5DA3XO6e_qQ82QAAATU"]
[Sat Aug 29 05:11:24.662097 2026] [security2:error] [pid 11274:tid 11352] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/public-api/.env"] [unique_id "apK-XGbX5DA3XO6e_qQ83AABdyc"]
[Sat Aug 29 05:11:24.686588 2026] [security2:error] [pid 1321:tid 1508] [client 158.23.147.79:24404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-admin/dropdown.php"] [unique_id "apK-XGjCPtor9NZ-byTzxwAABlA"]
[Sat Aug 29 05:11:24.688293 2026] [security2:error] [pid 11274:tid 11466] [client 158.23.184.117:11582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/robots.php"] [unique_id "apK-XGbX5DA3XO6e_qQ83gAAASA"]
[Sat Aug 29 05:11:24.693289 2026] [security2:error] [pid 11274:tid 11425] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/public/phpinfo.php"] [unique_id "apK-XGbX5DA3XO6e_qQ84QABd28"]
[Sat Aug 29 05:11:24.694048 2026] [security2:error] [pid 11274:tid 11344] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/public/.env"] [unique_id "apK-XGbX5DA3XO6e_qQ83wABdx8"]
[Sat Aug 29 05:11:24.697327 2026] [security2:error] [pid 11274:tid 11463] [client 68.155.159.216:23457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK-XGbX5DA3XO6e_qQ84wAAAR0"]
[Sat Aug 29 05:11:24.698919 2026] [security2:error] [pid 1321:tid 1597] [client 20.100.175.163:18297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK-XGjCPtor9NZ-byTzyAAABqg"]
[Sat Aug 29 05:11:24.699725 2026] [security2:error] [pid 1321:tid 1590] [client 93.123.109.228:53874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/config/config.php"] [unique_id "apK-XGjCPtor9NZ-byTzyQAABqE"]
[Sat Aug 29 05:11:24.702751 2026] [security2:error] [pid 1321:tid 1528] [client 158.23.147.79:60116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-blog-header.php"] [unique_id "apK-XGjCPtor9NZ-byTzygAABmQ"]
[Sat Aug 29 05:11:24.718477 2026] [security2:error] [pid 11274:tid 11363] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/public_html/.env"] [unique_id "apK-XGbX5DA3XO6e_qQ85QABdzE"]
[Sat Aug 29 05:11:24.723559 2026] [security2:error] [pid 1321:tid 1592] [client 20.48.250.41:27622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/fs.php"] [unique_id "apK-XGjCPtor9NZ-byTzzgAABqM"]
[Sat Aug 29 05:11:24.732021 2026] [security2:error] [pid 1321:tid 1603] [client 158.23.147.79:39300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/ws.php"] [unique_id "apK-XGjCPtor9NZ-byTzzwAABq4"]
[Sat Aug 29 05:11:24.745030 2026] [security2:error] [pid 11274:tid 11418] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/qa/.env"] [unique_id "apK-XGbX5DA3XO6e_qQ86wABd2g"]
[Sat Aug 29 05:11:24.750114 2026] [core:error] [pid 1321:tid 1577] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.750133 2026] [core:error] [pid 1321:tid 1577] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.750224 2026] [core:error] [pid 11274:tid 11503] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.750236 2026] [core:error] [pid 11274:tid 11503] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.752251 2026] [security2:error] [pid 1321:tid 1601] [client 158.158.54.35:22999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-includes/assets/index.php"] [unique_id "apK-XGjCPtor9NZ-byTz1wAABqw"]
[Sat Aug 29 05:11:24.759060 2026] [core:error] [pid 11274:tid 11499] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.759083 2026] [core:error] [pid 11274:tid 11499] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.765748 2026] [core:error] [pid 11274:tid 11560] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.765767 2026] [core:error] [pid 11274:tid 11560] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.769868 2026] [security2:error] [pid 1321:tid 1519] [client 45.148.10.62:51638] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.zeh.elx.mybluehost.me"] [uri "/.env.backup"] [unique_id "apK-XGjCPtor9NZ-byTz2QAABls"]
[Sat Aug 29 05:11:24.770845 2026] [core:error] [pid 11274:tid 11448] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.770858 2026] [core:error] [pid 11274:tid 11448] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.773014 2026] [security2:error] [pid 11274:tid 11534] [client 4.205.62.107:61722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/erty.php"] [unique_id "apK-XGbX5DA3XO6e_qQ89wAAAWM"]
[Sat Aug 29 05:11:24.775254 2026] [core:error] [pid 1321:tid 1599] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.775268 2026] [core:error] [pid 1321:tid 1599] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.780139 2026] [core:error] [pid 1321:tid 1504] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.780159 2026] [core:error] [pid 1321:tid 1504] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.784117 2026] [core:error] [pid 1321:tid 1526] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.784135 2026] [core:error] [pid 1321:tid 1526] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.790552 2026] [security2:error] [pid 11274:tid 11550] [client 93.123.109.228:60618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/config/env.php"] [unique_id "apK-XGbX5DA3XO6e_qQ8_AAAAXI"]
[Sat Aug 29 05:11:24.793396 2026] [security2:error] [pid 1321:tid 1584] [client 20.63.219.114:19931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/as.php"] [unique_id "apK-XGjCPtor9NZ-byTz3wAABps"]
[Sat Aug 29 05:11:24.797099 2026] [security2:error] [pid 11274:tid 11527] [client 158.158.54.35:15332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/files/index.php"] [unique_id "apK-XGbX5DA3XO6e_qQ8_gAAAVw"]
[Sat Aug 29 05:11:24.802420 2026] [security2:error] [pid 11274:tid 11549] [client 20.63.219.114:13440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-configs.php"] [unique_id "apK-XGbX5DA3XO6e_qQ9AAAAAXE"]
[Sat Aug 29 05:11:24.808855 2026] [security2:error] [pid 11274:tid 11455] [client 93.123.109.228:53974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/config/nexmo.php"] [unique_id "apK-XGbX5DA3XO6e_qQ9AgAAARU"]
[Sat Aug 29 05:11:24.817996 2026] [security2:error] [pid 1321:tid 1565] [client 20.52.41.200:5149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/403.php"] [unique_id "apK-XGjCPtor9NZ-byTz4gAABog"]
[Sat Aug 29 05:11:24.827063 2026] [core:error] [pid 1321:tid 1539] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.827084 2026] [core:error] [pid 1321:tid 1539] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.832208 2026] [security2:error] [pid 11274:tid 11521] [client 93.123.109.228:60638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/config/module.config.php"] [unique_id "apK-XGbX5DA3XO6e_qQ9BwAAAVY"]
[Sat Aug 29 05:11:24.836495 2026] [security2:error] [pid 11274:tid 11444] [client 20.104.49.130:60763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/wpxml.php"] [unique_id "apK-XGbX5DA3XO6e_qQ9CAAAAQo"]
[Sat Aug 29 05:11:24.839869 2026] [security2:error] [pid 1321:tid 1502] [client 52.138.0.157:58228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.opphousing.com"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "apK-XGjCPtor9NZ-byTz7AAABko"]
[Sat Aug 29 05:11:24.841308 2026] [security2:error] [pid 1321:tid 1521] [client 93.123.109.228:60676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/config/stripe.php"] [unique_id "apK-XGjCPtor9NZ-byTz7QAABl0"]
[Sat Aug 29 05:11:24.843088 2026] [core:error] [pid 11274:tid 11521] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.843103 2026] [core:error] [pid 11274:tid 11521] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.843455 2026] [core:error] [pid 11274:tid 11568] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.843472 2026] [core:error] [pid 11274:tid 11568] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.857391 2026] [security2:error] [pid 1321:tid 1557] [client 158.23.184.117:11556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/.well-known/install.php"] [unique_id "apK-XGjCPtor9NZ-byTz8QAABoA"]
[Sat Aug 29 05:11:24.884830 2026] [core:error] [pid 1321:tid 1574] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.884850 2026] [core:error] [pid 1321:tid 1574] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.899351 2026] [core:error] [pid 11274:tid 11479] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.899387 2026] [core:error] [pid 11274:tid 11479] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.901850 2026] [security2:error] [pid 11274:tid 11522] [client 40.83.93.50:11884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/update.php"] [unique_id "apK-XGbX5DA3XO6e_qQ9GwAAAVc"]
[Sat Aug 29 05:11:24.916376 2026] [core:error] [pid 1321:tid 1600] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.917138 2026] [core:error] [pid 1321:tid 1600] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.923384 2026] [security2:error] [pid 1321:tid 1501] [client 20.48.250.41:26928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/ioxi.php"] [unique_id "apK-XGjCPtor9NZ-byTz-wAABkk"]
[Sat Aug 29 05:11:24.927099 2026] [security2:error] [pid 1321:tid 1522] [client 45.148.10.62:51638] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.zeh.elx.mybluehost.me"] [uri "/.env.old"] [unique_id "apK-XGjCPtor9NZ-byTz-gAABl4"]
[Sat Aug 29 05:11:24.929051 2026] [core:error] [pid 1321:tid 1535] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.929073 2026] [core:error] [pid 1321:tid 1535] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.939142 2026] [security2:error] [pid 1321:tid 1568] [client 20.240.128.207:18237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "apK-XGjCPtor9NZ-byTz_AAABos"]
[Sat Aug 29 05:11:24.945614 2026] [security2:error] [pid 1321:tid 1595] [client 4.205.62.107:64273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/paths.php"] [unique_id "apK-XGjCPtor9NZ-byTz_gAABqY"]
[Sat Aug 29 05:11:24.950811 2026] [core:error] [pid 11274:tid 11524] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.950830 2026] [core:error] [pid 11274:tid 11524] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.960303 2026] [security2:error] [pid 1321:tid 1538] [client 20.52.41.200:2784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-logs.php"] [unique_id "apK-XGjCPtor9NZ-byT0AwAABm4"]
[Sat Aug 29 05:11:24.962003 2026] [core:error] [pid 11274:tid 11452] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.962022 2026] [core:error] [pid 11274:tid 11452] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.962916 2026] [security2:error] [pid 11274:tid 11566] [client 197.219.150.206:59400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK-XGbX5DA3XO6e_qQ9LQAAAYI"]
[Sat Aug 29 05:11:24.963025 2026] [security2:error] [pid 11274:tid 11566] [client 197.219.150.206:59400] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK-XGbX5DA3XO6e_qQ9LQAAAYI"]
[Sat Aug 29 05:11:24.963891 2026] [security2:error] [pid 1321:tid 1469] [remote 34.75.72.74:45028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/api/.env"] [unique_id "apK-XGjCPtor9NZ-byT0BwAGs24"]
[Sat Aug 29 05:11:24.964703 2026] [security2:error] [pid 1321:tid 1390] [remote 34.75.72.74:45028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/.env.old"] [unique_id "apK-XGjCPtor9NZ-byT0CQAGsyA"]
[Sat Aug 29 05:11:24.965459 2026] [core:error] [pid 1321:tid 1520] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.965475 2026] [core:error] [pid 1321:tid 1520] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.968684 2026] [security2:error] [pid 1321:tid 1357] [remote 34.75.72.74:45028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/.env.bak"] [unique_id "apK-XGjCPtor9NZ-byT0CwAGswE"]
[Sat Aug 29 05:11:24.971552 2026] [security2:error] [pid 1321:tid 1386] [remote 34.75.72.74:45028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/.env.backup"] [unique_id "apK-XGjCPtor9NZ-byT0DQAGsxw"]
[Sat Aug 29 05:11:24.973855 2026] [security2:error] [pid 11274:tid 11481] [client 4.205.62.107:63033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/saiga.php"] [unique_id "apK-XGbX5DA3XO6e_qQ9MgAAAS4"]
[Sat Aug 29 05:11:24.974085 2026] [security2:error] [pid 11274:tid 11545] [client 4.205.62.107:6930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/ws62.php"] [unique_id "apK-XGbX5DA3XO6e_qQ9MwAAAW0"]
[Sat Aug 29 05:11:24.976140 2026] [core:error] [pid 1321:tid 1613] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.976157 2026] [core:error] [pid 1321:tid 1613] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.977599 2026] [core:error] [pid 1321:tid 1516] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.977610 2026] [core:error] [pid 1321:tid 1516] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.977637 2026] [core:error] [pid 11274:tid 11515] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.977648 2026] [core:error] [pid 11274:tid 11515] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.979200 2026] [security2:error] [pid 11274:tid 11555] [client 20.100.175.163:7954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/r.php"] [unique_id "apK-XGbX5DA3XO6e_qQ9NgAAAXc"]
[Sat Aug 29 05:11:24.985915 2026] [security2:error] [pid 11274:tid 11427] [remote 93.123.109.228:52272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/test.php"] [unique_id "apK-XGbX5DA3XO6e_qQ9NwABUnE"]
[Sat Aug 29 05:11:24.992710 2026] [core:error] [pid 11274:tid 11533] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.992728 2026] [core:error] [pid 11274:tid 11533] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.996386 2026] [security2:error] [pid 1321:tid 1523] [client 40.83.93.50:3989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/defaults.php"] [unique_id "apK-XGjCPtor9NZ-byT0FAAABl8"]
[Sat Aug 29 05:11:24.996828 2026] [core:error] [pid 11274:tid 11505] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:24.996840 2026] [core:error] [pid 11274:tid 11505] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.003611 2026] [security2:error] [pid 11274:tid 11497] [client 158.23.184.117:65174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/wp-admin/about.php"] [unique_id "apK-XWbX5DA3XO6e_qQ9PQAAAT4"]
[Sat Aug 29 05:11:25.026496 2026] [security2:error] [pid 1321:tid 1362] [remote 34.75.72.74:45028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/config/.env"] [unique_id "apK-XWjCPtor9NZ-byT0GgAGhQU"]
[Sat Aug 29 05:11:25.032140 2026] [core:error] [pid 11274:tid 11552] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.032158 2026] [core:error] [pid 11274:tid 11552] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.033777 2026] [core:error] [pid 11274:tid 11551] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.033805 2026] [core:error] [pid 11274:tid 11551] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.039620 2026] [security2:error] [pid 1321:tid 1366] [remote 34.75.72.74:45028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/backend/.env"] [unique_id "apK-XWjCPtor9NZ-byT0HQAGdQg"]
[Sat Aug 29 05:11:25.043016 2026] [security2:error] [pid 1321:tid 1599] [client 68.155.159.216:6050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenearanddear.photoboothhawaii.com"] [uri "/first.php"] [unique_id "apK-XWjCPtor9NZ-byT0HwAABqo"]
[Sat Aug 29 05:11:25.054709 2026] [security2:error] [pid 1321:tid 1581] [client 74.7.175.147:33368] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "greatvalleyplants.com"] [uri "/cgi-sys/404.html"] [unique_id "apK-XWjCPtor9NZ-byT0IAAABpg"]
[Sat Aug 29 05:11:25.061713 2026] [core:error] [pid 11274:tid 11451] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.061742 2026] [core:error] [pid 11274:tid 11451] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.062114 2026] [security2:error] [pid 11274:tid 11569] [client 20.48.250.41:27528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/bootstrap.php"] [unique_id "apK-XWbX5DA3XO6e_qQ9TgAAAYU"]
[Sat Aug 29 05:11:25.063700 2026] [core:error] [pid 11274:tid 11464] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.063716 2026] [core:error] [pid 11274:tid 11464] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.074978 2026] [core:error] [pid 11274:tid 11560] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.075000 2026] [core:error] [pid 11274:tid 11560] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.089938 2026] [security2:error] [pid 1321:tid 1489] [client 158.23.147.79:14225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK-XWjCPtor9NZ-byT0JwAABj0"]
[Sat Aug 29 05:11:25.092706 2026] [security2:error] [pid 11274:tid 11561] [client 20.151.200.44:63008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/console.php"] [unique_id "apK-XWbX5DA3XO6e_qQ9UwAAAX0"]
[Sat Aug 29 05:11:25.096850 2026] [security2:error] [pid 1321:tid 1492] [client 93.123.109.228:53900] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/crm/.env"] [unique_id "apK-XWjCPtor9NZ-byT0KAAABkA"]
[Sat Aug 29 05:11:25.105202 2026] [core:error] [pid 1321:tid 1560] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.105217 2026] [core:error] [pid 1321:tid 1560] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.108465 2026] [security2:error] [pid 11274:tid 11504] [client 52.138.0.157:58214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.opphousing.com"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "apK-XWbX5DA3XO6e_qQ9VgAAAUU"]
[Sat Aug 29 05:11:25.110683 2026] [security2:error] [pid 1321:tid 1533] [client 93.123.109.228:53860] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/cron/.env"] [unique_id "apK-XWjCPtor9NZ-byT0KwAABmk"]
[Sat Aug 29 05:11:25.126896 2026] [security2:error] [pid 11274:tid 11549] [client 93.123.109.228:60692] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/current/.env"] [unique_id "apK-XWbX5DA3XO6e_qQ9WwAAAXE"]
[Sat Aug 29 05:11:25.128130 2026] [security2:error] [pid 11274:tid 11489] [client 180.190.5.40:50568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.5.190.180.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK-XWbX5DA3XO6e_qQ9XAAAATY"]
[Sat Aug 29 05:11:25.128311 2026] [security2:error] [pid 11274:tid 11489] [client 180.190.5.40:50568] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK-XWbX5DA3XO6e_qQ9XAAAATY"]
[Sat Aug 29 05:11:25.145267 2026] [security2:error] [pid 1321:tid 1498] [client 93.123.109.228:60702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/demo/.env"] [unique_id "apK-XWjCPtor9NZ-byT0MQAABkY"]
[Sat Aug 29 05:11:25.145273 2026] [security2:error] [pid 11274:tid 11416] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/s3/.env.bak"] [unique_id "apK-XWbX5DA3XO6e_qQ9YgABD2Y"]
[Sat Aug 29 05:11:25.149620 2026] [security2:error] [pid 1321:tid 1497] [client 20.63.219.114:19932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/room.php"] [unique_id "apK-XWjCPtor9NZ-byT0NAAABkU"]
[Sat Aug 29 05:11:25.151580 2026] [security2:error] [pid 1321:tid 1515] [client 158.23.184.117:65159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/wp-content/backup.php"] [unique_id "apK-XWjCPtor9NZ-byT0NQAABlc"]
[Sat Aug 29 05:11:25.153425 2026] [core:error] [pid 11274:tid 11450] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.153443 2026] [core:error] [pid 11274:tid 11450] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.157372 2026] [core:error] [pid 1321:tid 1509] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.157397 2026] [core:error] [pid 1321:tid 1509] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.158935 2026] [core:error] [pid 11274:tid 11521] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.158999 2026] [core:error] [pid 11274:tid 11521] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.160134 2026] [security2:error] [pid 1321:tid 1490] [client 20.63.219.114:13456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-conflg.php"] [unique_id "apK-XWjCPtor9NZ-byT0OQAABj4"]
[Sat Aug 29 05:11:25.160691 2026] [security2:error] [pid 1321:tid 1557] [client 93.123.109.228:53910] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/dev/.env"] [unique_id "apK-XWjCPtor9NZ-byT0OAAABoA"]
[Sat Aug 29 05:11:25.162850 2026] [core:error] [pid 1321:tid 1592] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.162866 2026] [core:error] [pid 1321:tid 1592] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.181930 2026] [security2:error] [pid 1321:tid 1537] [client 93.123.109.228:60738] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/develop/.env"] [unique_id "apK-XWjCPtor9NZ-byT0OwAABm0"]
[Sat Aug 29 05:11:25.190087 2026] [core:error] [pid 1321:tid 1579] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.190110 2026] [core:error] [pid 1321:tid 1579] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.192304 2026] [security2:error] [pid 1321:tid 1494] [client 93.123.109.228:53918] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/developer/.env"] [unique_id "apK-XWjCPtor9NZ-byT0QQAABkI"]
[Sat Aug 29 05:11:25.192479 2026] [security2:error] [pid 11274:tid 11466] [client 20.100.175.163:4172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-admin/index.php"] [unique_id "apK-XWbX5DA3XO6e_qQ9cAAAASA"]
[Sat Aug 29 05:11:25.193885 2026] [core:error] [pid 1321:tid 1609] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.193898 2026] [core:error] [pid 1321:tid 1609] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.194182 2026] [core:error] [pid 1321:tid 1574] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.194192 2026] [core:error] [pid 1321:tid 1574] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.200724 2026] [security2:error] [pid 1321:tid 1504] [client 158.158.54.35:30291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-admin/index.php"] [unique_id "apK-XWjCPtor9NZ-byT0QwAABkw"]
[Sat Aug 29 05:11:25.204041 2026] [security2:error] [pid 11274:tid 11559] [client 93.123.109.228:53958] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/development/.env"] [unique_id "apK-XWbX5DA3XO6e_qQ9dQAAAXs"]
[Sat Aug 29 05:11:25.204897 2026] [security2:error] [pid 11274:tid 11522] [client 20.48.250.41:27597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/export.php"] [unique_id "apK-XWbX5DA3XO6e_qQ9dgAAAVc"]
[Sat Aug 29 05:11:25.222921 2026] [core:error] [pid 1321:tid 1507] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.222946 2026] [core:error] [pid 1321:tid 1507] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.228540 2026] [core:error] [pid 1321:tid 1568] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.228558 2026] [core:error] [pid 1321:tid 1568] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.231392 2026] [core:error] [pid 11274:tid 11487] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.231416 2026] [core:error] [pid 11274:tid 11487] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.237286 2026] [core:error] [pid 11274:tid 11468] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.237306 2026] [core:error] [pid 11274:tid 11468] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.237334 2026] [security2:error] [pid 1321:tid 1499] [client 20.151.200.44:63724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/yyy.php"] [unique_id "apK-XWjCPtor9NZ-byT0UAAABkc"]
[Sat Aug 29 05:11:25.239052 2026] [security2:error] [pid 11274:tid 11540] [client 68.155.159.216:56568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-content/radio.php"] [unique_id "apK-XWbX5DA3XO6e_qQ9ggAAAWk"]
[Sat Aug 29 05:11:25.243468 2026] [security2:error] [pid 1321:tid 1584] [client 158.158.54.35:14852] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.cloud9walkers.com"] [uri "/1.php7"] [unique_id "apK-XWjCPtor9NZ-byT0UQAABps"]
[Sat Aug 29 05:11:25.243551 2026] [security2:error] [pid 1321:tid 1584] [client 158.158.54.35:14852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/1.php7"] [unique_id "apK-XWjCPtor9NZ-byT0UQAABps"]
[Sat Aug 29 05:11:25.261954 2026] [core:error] [pid 11274:tid 11454] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.261978 2026] [core:error] [pid 11274:tid 11454] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.265620 2026] [core:error] [pid 11274:tid 11514] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.265635 2026] [core:error] [pid 11274:tid 11514] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.269047 2026] [security2:error] [pid 1321:tid 1602] [client 20.52.41.200:4671] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "arklestonpiping.strangeworx.com"] [uri "/1.php"] [unique_id "apK-XWjCPtor9NZ-byT0VgAABq0"]
[Sat Aug 29 05:11:25.269159 2026] [security2:error] [pid 1321:tid 1602] [client 20.52.41.200:4671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/1.php"] [unique_id "apK-XWjCPtor9NZ-byT0VgAABq0"]
[Sat Aug 29 05:11:25.269383 2026] [http2:warn] [pid 1017536:tid 1017764] [client 57.141.14.63:59328] h2_stream(1017536-342-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:11:25.271012 2026] [core:error] [pid 11274:tid 11566] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.271024 2026] [core:error] [pid 11274:tid 11566] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.275989 2026] [security2:error] [pid 11274:tid 11529] [client 68.155.159.216:2013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/nf_tracking.php"] [unique_id "apK-XWbX5DA3XO6e_qQ9jAAAAV4"]
[Sat Aug 29 05:11:25.287168 2026] [security2:error] [pid 11274:tid 11473] [client 20.104.49.130:46154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "connectdotz.com"] [uri "/coffexium.php"] [unique_id "apK-XWbX5DA3XO6e_qQ9jgAAASc"]
[Sat Aug 29 05:11:25.299570 2026] [security2:error] [pid 11274:tid 11436] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/server/.env"] [unique_id "apK-XWbX5DA3XO6e_qQ9kQABUXk"]
[Sat Aug 29 05:11:25.300922 2026] [security2:error] [pid 11274:tid 11524] [client 158.23.184.117:11535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/.well-known/aa.php"] [unique_id "apK-XWbX5DA3XO6e_qQ9kgAAAVk"]
[Sat Aug 29 05:11:25.310722 2026] [security2:error] [pid 11274:tid 11423] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/server/api/.env"] [unique_id "apK-XWbX5DA3XO6e_qQ9lAABMG0"]
[Sat Aug 29 05:11:25.323154 2026] [security2:error] [pid 11274:tid 11320] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/server/backend/.env"] [unique_id "apK-XWbX5DA3XO6e_qQ9mAABRgc"]
[Sat Aug 29 05:11:25.330430 2026] [security2:error] [pid 11274:tid 11488] [client 4.205.62.107:60316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/pinfo.php"] [unique_id "apK-XWbX5DA3XO6e_qQ9nQAAATU"]
[Sat Aug 29 05:11:25.342624 2026] [security2:error] [pid 1321:tid 1529] [client 20.48.250.41:26922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/gk.php"] [unique_id "apK-XWjCPtor9NZ-byT0XAAABmU"]
[Sat Aug 29 05:11:25.344134 2026] [security2:error] [pid 11274:tid 11501] [client 103.240.76.112:42835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK-XWbX5DA3XO6e_qQ9ngAAAUI"]
[Sat Aug 29 05:11:25.344268 2026] [security2:error] [pid 11274:tid 11501] [client 103.240.76.112:42835] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK-XWbX5DA3XO6e_qQ9ngAAAUI"]
[Sat Aug 29 05:11:25.362033 2026] [security2:error] [pid 11274:tid 11552] [client 20.151.200.44:27327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/yyy.php"] [unique_id "apK-XWbX5DA3XO6e_qQ9oAAAAXQ"]
[Sat Aug 29 05:11:25.362221 2026] [security2:error] [pid 1321:tid 1415] [remote 34.75.72.74:45028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/.github/.env"] [unique_id "apK-XWjCPtor9NZ-byT0YAAGgjk"]
[Sat Aug 29 05:11:25.368305 2026] [security2:error] [pid 11274:tid 11554] [client 4.205.62.107:58379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/nw.php"] [unique_id "apK-XWbX5DA3XO6e_qQ9pgAAAXY"]
[Sat Aug 29 05:11:25.400774 2026] [security2:error] [pid 1321:tid 1577] [client 93.123.109.228:60680] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/erp/.env"] [unique_id "apK-XWjCPtor9NZ-byT0YgAABpQ"]
[Sat Aug 29 05:11:25.406549 2026] [security2:error] [pid 11274:tid 11465] [client 40.83.93.50:15850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/blog.php"] [unique_id "apK-XWbX5DA3XO6e_qQ9sQAAAR8"]
[Sat Aug 29 05:11:25.416826 2026] [security2:error] [pid 11274:tid 11452] [client 20.52.41.200:2826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-admin/css/about.php"] [unique_id "apK-XWbX5DA3XO6e_qQ9tgAAARI"]
[Sat Aug 29 05:11:25.417632 2026] [security2:error] [pid 1321:tid 1519] [client 93.123.109.228:53860] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/etc/apache2/apache2.conf"] [unique_id "apK-XWjCPtor9NZ-byT0ZgAABls"]
[Sat Aug 29 05:11:25.420735 2026] [security2:error] [pid 11274:tid 11391] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/service/.env"] [unique_id "apK-XWbX5DA3XO6e_qQ9uAABJk0"]
[Sat Aug 29 05:11:25.435988 2026] [security2:error] [pid 1321:tid 1542] [client 93.123.109.228:53900] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/etc/boto.cfg"] [unique_id "apK-XWjCPtor9NZ-byT0aAAABnI"]
[Sat Aug 29 05:11:25.440135 2026] [security2:error] [pid 11274:tid 11515] [client 20.240.128.207:19855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/abcd.php"] [unique_id "apK-XWbX5DA3XO6e_qQ9vAAAAVA"]
[Sat Aug 29 05:11:25.455300 2026] [security2:error] [pid 11274:tid 11504] [client 93.123.109.228:60662] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/fe/.env"] [unique_id "apK-XWbX5DA3XO6e_qQ9vQAAAUU"]
[Sat Aug 29 05:11:25.455335 2026] [security2:error] [pid 11274:tid 11526] [client 52.138.0.157:28821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.opphousing.com"] [uri "/wp-links-opml.php"] [unique_id "apK-XWbX5DA3XO6e_qQ9vwAAAVs"]
[Sat Aug 29 05:11:25.456295 2026] [security2:error] [pid 11274:tid 11464] [client 158.23.184.117:11532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "apK-XWbX5DA3XO6e_qQ9wAAAAR4"]
[Sat Aug 29 05:11:25.456335 2026] [security2:error] [pid 11274:tid 11390] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/services/.env"] [unique_id "apK-XWbX5DA3XO6e_qQ9vgABJkw"]
[Sat Aug 29 05:11:25.479659 2026] [security2:error] [pid 1321:tid 1528] [client 40.83.93.50:10017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/post.php"] [unique_id "apK-XWjCPtor9NZ-byT0awAABmQ"]
[Sat Aug 29 05:11:25.484684 2026] [security2:error] [pid 1321:tid 1590] [client 20.100.175.163:31890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-blog.php"] [unique_id "apK-XWjCPtor9NZ-byT0bQAABqE"]
[Sat Aug 29 05:11:25.490684 2026] [security2:error] [pid 11274:tid 11455] [client 20.48.250.41:26903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/logs1.php"] [unique_id "apK-XWbX5DA3XO6e_qQ9yQAAARU"]
[Sat Aug 29 05:11:25.496222 2026] [core:error] [pid 11274:tid 11549] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.496242 2026] [core:error] [pid 11274:tid 11549] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.503684 2026] [core:error] [pid 11274:tid 11450] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.503703 2026] [core:error] [pid 11274:tid 11450] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.505885 2026] [security2:error] [pid 1321:tid 1587] [client 93.123.109.228:60702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/front/.env"] [unique_id "apK-XWjCPtor9NZ-byT0bgAABp4"]
[Sat Aug 29 05:11:25.508886 2026] [core:error] [pid 11274:tid 11500] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.508905 2026] [core:error] [pid 11274:tid 11500] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.512224 2026] [core:error] [pid 1321:tid 1556] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.512949 2026] [core:error] [pid 1321:tid 1556] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.513230 2026] [security2:error] [pid 11274:tid 11569] [client 20.63.219.114:17289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-content.php"] [unique_id "apK-XWbX5DA3XO6e_qQ90gAAAYU"]
[Sat Aug 29 05:11:25.521245 2026] [core:error] [pid 1321:tid 1615] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.521266 2026] [core:error] [pid 1321:tid 1615] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.524393 2026] [security2:error] [pid 11274:tid 11383] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/shared/.env"] [unique_id "apK-XWbX5DA3XO6e_qQ92AABJkU"]
[Sat Aug 29 05:11:25.524603 2026] [core:error] [pid 11274:tid 11543] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.524615 2026] [core:error] [pid 11274:tid 11543] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.525064 2026] [security2:error] [pid 11274:tid 11508] [client 68.155.159.216:1802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-admin.php"] [unique_id "apK-XWbX5DA3XO6e_qQ91wAAAUk"]
[Sat Aug 29 05:11:25.525067 2026] [security2:error] [pid 11274:tid 11318] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/shop/.env"] [unique_id "apK-XWbX5DA3XO6e_qQ92gABJgU"]
[Sat Aug 29 05:11:25.543623 2026] [core:error] [pid 11274:tid 11476] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.543648 2026] [core:error] [pid 11274:tid 11476] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.545549 2026] [core:error] [pid 11274:tid 11550] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.545567 2026] [core:error] [pid 11274:tid 11550] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.545674 2026] [security2:error] [pid 1321:tid 1566] [client 93.123.109.228:60648] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/frontend/.env"] [unique_id "apK-XWjCPtor9NZ-byT0eAAABok"]
[Sat Aug 29 05:11:25.555153 2026] [core:error] [pid 1321:tid 1533] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.555172 2026] [core:error] [pid 1321:tid 1533] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.575835 2026] [security2:error] [pid 11274:tid 11503] [client 20.63.219.114:19904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/class-wp-cmd.php"] [unique_id "apK-XWbX5DA3XO6e_qQ96AAAAUQ"]
[Sat Aug 29 05:11:25.600054 2026] [core:error] [pid 11274:tid 11524] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.600073 2026] [core:error] [pid 11274:tid 11524] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.601716 2026] [security2:error] [pid 11274:tid 11496] [client 158.23.184.117:65156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/wp-content/plugins/alfa-rex.php"] [unique_id "apK-XWbX5DA3XO6e_qQ98QAAAT0"]
[Sat Aug 29 05:11:25.603816 2026] [core:error] [pid 11274:tid 11553] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.603841 2026] [core:error] [pid 11274:tid 11553] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.605836 2026] [security2:error] [pid 11274:tid 11459] [client 93.123.109.228:60662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/info.php"] [unique_id "apK-XWbX5DA3XO6e_qQ98gAAARk"]
[Sat Aug 29 05:11:25.612807 2026] [security2:error] [pid 11274:tid 11533] [client 68.155.159.216:49025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK-XWbX5DA3XO6e_qQ99AAAAWI"]
[Sat Aug 29 05:11:25.614651 2026] [security2:error] [pid 1321:tid 1515] [client 93.123.109.228:53822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/infophp.php"] [unique_id "apK-XWjCPtor9NZ-byT0gAAABlc"]
[Sat Aug 29 05:11:25.615900 2026] [security2:error] [pid 11274:tid 11501] [client 4.205.62.107:32561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/app.default.php"] [unique_id "apK-XWbX5DA3XO6e_qQ99gAAAUI"]
[Sat Aug 29 05:11:25.617424 2026] [security2:error] [pid 11274:tid 11469] [client 93.123.109.228:53958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/infos.php"] [unique_id "apK-XWbX5DA3XO6e_qQ99wAAASM"]
[Sat Aug 29 05:11:25.619508 2026] [core:error] [pid 11274:tid 11488] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.619527 2026] [core:error] [pid 11274:tid 11488] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.628699 2026] [security2:error] [pid 11274:tid 11552] [client 20.48.250.41:26931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/inege.php"] [unique_id "apK-XWbX5DA3XO6e_qQ9-QAAAXQ"]
[Sat Aug 29 05:11:25.643466 2026] [security2:error] [pid 1321:tid 1490] [client 20.104.49.130:48770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/wp-blogs.php"] [unique_id "apK-XWjCPtor9NZ-byT0hAAABj4"]
[Sat Aug 29 05:11:25.647075 2026] [security2:error] [pid 11274:tid 11565] [client 93.123.109.228:60692] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/laravel/.env"] [unique_id "apK-XWbX5DA3XO6e_qQ9_gAAAYE"]
[Sat Aug 29 05:11:25.648252 2026] [core:error] [pid 11274:tid 11551] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.648268 2026] [core:error] [pid 11274:tid 11551] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.656513 2026] [security2:error] [pid 11274:tid 11529] [client 52.138.0.157:5639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.opphousing.com"] [uri "/wp-signup.php"] [unique_id "apK-XWbX5DA3XO6e_qQ9_wAAAV4"]
[Sat Aug 29 05:11:25.657926 2026] [security2:error] [pid 1321:tid 1561] [client 93.123.109.228:60702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/lms/.env"] [unique_id "apK-XWjCPtor9NZ-byT0hQAABoQ"]
[Sat Aug 29 05:11:25.658815 2026] [security2:error] [pid 11274:tid 11512] [client 68.155.159.216:14280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-blog-header.php"] [unique_id "apK-XWbX5DA3XO6e_qQ-AAAAAU0"]
[Sat Aug 29 05:11:25.659446 2026] [security2:error] [pid 11274:tid 11506] [client 158.158.54.35:10130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/radio.php"] [unique_id "apK-XWbX5DA3XO6e_qQ-AQAAAUc"]
[Sat Aug 29 05:11:25.665313 2026] [security2:error] [pid 11274:tid 11376] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/src/.env"] [unique_id "apK-XWbX5DA3XO6e_qQ-AgABVT4"]
[Sat Aug 29 05:11:25.670059 2026] [security2:error] [pid 11274:tid 11511] [client 20.100.175.163:26910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/radio.php"] [unique_id "apK-XWbX5DA3XO6e_qQ-CQAAAUw"]
[Sat Aug 29 05:11:25.676394 2026] [security2:error] [pid 1321:tid 1492] [client 45.148.10.62:51650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zeh.elx.mybluehost.me"] [uri "/.env.php.bak"] [unique_id "apK-XWjCPtor9NZ-byT0hgAABkA"]
[Sat Aug 29 05:11:25.692445 2026] [security2:error] [pid 1321:tid 1539] [client 158.158.54.35:28905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/disagraeosc.php"] [unique_id "apK-XWjCPtor9NZ-byT0hwAABm8"]
[Sat Aug 29 05:11:25.694973 2026] [security2:error] [pid 11274:tid 11367] [remote 93.123.109.228:52272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/wp-config.php"] [unique_id "apK-XWbX5DA3XO6e_qQ-EwABUjU"]
[Sat Aug 29 05:11:25.695568 2026] [security2:error] [pid 1321:tid 1550] [client 93.123.109.228:60648] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/local/.env"] [unique_id "apK-XWjCPtor9NZ-byT0iAAABnk"]
[Sat Aug 29 05:11:25.711176 2026] [core:error] [pid 11274:tid 11464] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.711198 2026] [core:error] [pid 11274:tid 11464] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.713138 2026] [security2:error] [pid 11274:tid 11349] [remote 93.123.109.228:52272] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/wp-config.php.bak"] [unique_id "apK-XWbX5DA3XO6e_qQ-GAABUiQ"]
[Sat Aug 29 05:11:25.718720 2026] [authz_core:error] [pid 1321:tid 1389] [remote 34.75.72.74:45028] AH01630: client denied by server configuration: /var/www/html/.htpasswd
[Sat Aug 29 05:11:25.735304 2026] [core:error] [pid 1321:tid 1564] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.735325 2026] [core:error] [pid 1321:tid 1564] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.736112 2026] [core:error] [pid 11274:tid 11563] [client 20.52.41.200:4356] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.736128 2026] [core:error] [pid 11274:tid 11563] [client 20.52.41.200:4356] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.738759 2026] [security2:error] [pid 11274:tid 11343] [remote 93.123.109.228:52272] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/wp-config.php.new"] [unique_id "apK-XWbX5DA3XO6e_qQ-HAABUh4"]
[Sat Aug 29 05:11:25.740865 2026] [security2:error] [pid 11274:tid 11427] [remote 93.123.109.228:52272] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/wp-config.php.old"] [unique_id "apK-XWbX5DA3XO6e_qQ-HQABUnE"]
[Sat Aug 29 05:11:25.757465 2026] [security2:error] [pid 1321:tid 1605] [client 93.123.109.228:53918] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/market/.env"] [unique_id "apK-XWjCPtor9NZ-byT0lQAABrA"]
[Sat Aug 29 05:11:25.761716 2026] [security2:error] [pid 11274:tid 11521] [client 93.123.109.228:60776] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/marketing/.env"] [unique_id "apK-XWbX5DA3XO6e_qQ-JQAAAVY"]
[Sat Aug 29 05:11:25.763541 2026] [security2:error] [pid 1321:tid 1504] [client 20.48.250.41:27601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/wp-link10.php"] [unique_id "apK-XWjCPtor9NZ-byT0lgAABkw"]
[Sat Aug 29 05:11:25.765450 2026] [security2:error] [pid 11274:tid 11373] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/srv/.env"] [unique_id "apK-XWbX5DA3XO6e_qQ-JgABhTs"]
[Sat Aug 29 05:11:25.774902 2026] [security2:error] [pid 11274:tid 11522] [client 20.220.204.93:23968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-XWbX5DA3XO6e_qQ-KgAAAVc"]
[Sat Aug 29 05:11:25.776603 2026] [security2:error] [pid 1321:tid 1553] [client 93.123.109.228:60774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/media/.env"] [unique_id "apK-XWjCPtor9NZ-byT0mgAABnw"]
[Sat Aug 29 05:11:25.786686 2026] [security2:error] [pid 11274:tid 11411] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/stage/.env"] [unique_id "apK-XWbX5DA3XO6e_qQ-LgABcmE"]
[Sat Aug 29 05:11:25.812867 2026] [security2:error] [pid 11274:tid 11330] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/staging/.env"] [unique_id "apK-XWbX5DA3XO6e_qQ-MwABZxE"]
[Sat Aug 29 05:11:25.813927 2026] [security2:error] [pid 1321:tid 1538] [client 158.23.147.79:24403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/login.php"] [unique_id "apK-XWjCPtor9NZ-byT0nwAABm4"]
[Sat Aug 29 05:11:25.814680 2026] [security2:error] [pid 1321:tid 1568] [client 93.123.109.228:53900] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/new/.env"] [unique_id "apK-XWjCPtor9NZ-byT0ngAABos"]
[Sat Aug 29 05:11:25.821616 2026] [security2:error] [pid 1321:tid 1499] [client 68.155.159.216:23511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/about.php"] [unique_id "apK-XWjCPtor9NZ-byT0oAAABkc"]
[Sat Aug 29 05:11:25.825160 2026] [security2:error] [pid 1321:tid 1522] [client 93.123.109.228:53890] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/node/.env"] [unique_id "apK-XWjCPtor9NZ-byT0oQAABl4"]
[Sat Aug 29 05:11:25.832937 2026] [security2:error] [pid 11274:tid 11539] [client 93.123.109.228:53842] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/node/api/.env"] [unique_id "apK-XWbX5DA3XO6e_qQ-NwAAAWg"]
[Sat Aug 29 05:11:25.836402 2026] [security2:error] [pid 1321:tid 1595] [client 93.123.109.228:60642] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/node-api/.env"] [unique_id "apK-XWjCPtor9NZ-byT0ogAABqY"]
[Sat Aug 29 05:11:25.847605 2026] [security2:error] [pid 11274:tid 11449] [client 158.23.147.79:60101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK-XWbX5DA3XO6e_qQ-OwAAAQ8"]
[Sat Aug 29 05:11:25.848185 2026] [security2:error] [pid 1321:tid 1602] [client 93.123.109.228:60648] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/node/backend/.env"] [unique_id "apK-XWjCPtor9NZ-byT0pAAABq0"]
[Sat Aug 29 05:11:25.848612 2026] [security2:error] [pid 11274:tid 11397] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/stg/.env"] [unique_id "apK-XWbX5DA3XO6e_qQ-OgABRFM"]
[Sat Aug 29 05:11:25.855003 2026] [security2:error] [pid 11274:tid 11540] [client 52.138.0.157:1087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.opphousing.com"] [uri "/xmlrpc.php"] [unique_id "apK-XWbX5DA3XO6e_qQ-PQAAAWk"]
[Sat Aug 29 05:11:25.860769 2026] [security2:error] [pid 1321:tid 1537] [client 20.52.41.200:2642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/system_log.php"] [unique_id "apK-XWjCPtor9NZ-byT0pQAABm0"]
[Sat Aug 29 05:11:25.888442 2026] [security2:error] [pid 11274:tid 11572] [client 158.23.147.79:43319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-includes/css/index.php"] [unique_id "apK-XWbX5DA3XO6e_qQ-RwAAAYg"]
[Sat Aug 29 05:11:25.899318 2026] [security2:error] [pid 11274:tid 11553] [client 20.48.250.41:26912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/ww.php"] [unique_id "apK-XWbX5DA3XO6e_qQ-SQAAAXU"]
[Sat Aug 29 05:11:25.900026 2026] [security2:error] [pid 11274:tid 11353] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/stripe/.env"] [unique_id "apK-XWbX5DA3XO6e_qQ-SAABWSg"]
[Sat Aug 29 05:11:25.901773 2026] [security2:error] [pid 1321:tid 1496] [client 93.123.109.228:60702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/nodeapi/.env"] [unique_id "apK-XWjCPtor9NZ-byT0pgAABkQ"]
[Sat Aug 29 05:11:25.919847 2026] [security2:error] [pid 11274:tid 11459] [client 93.123.109.228:60712] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/nodeweb/.env"] [unique_id "apK-XWbX5DA3XO6e_qQ-SwAAARk"]
[Sat Aug 29 05:11:25.921656 2026] [security2:error] [pid 1321:tid 1555] [client 4.205.62.107:63908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/wp-config.backup.php"] [unique_id "apK-XWjCPtor9NZ-byT0pwAABn4"]
[Sat Aug 29 05:11:25.935071 2026] [security2:error] [pid 11274:tid 11541] [client 20.240.128.207:18638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-access.php"] [unique_id "apK-XWbX5DA3XO6e_qQ-TQAAAWo"]
[Sat Aug 29 05:11:25.939292 2026] [security2:error] [pid 11274:tid 11522] [client 40.83.93.50:11885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/bypass.php"] [unique_id "apK-XWbX5DA3XO6e_qQ-TgAAAVc"]
[Sat Aug 29 05:11:25.944608 2026] [security2:error] [pid 1321:tid 1531] [client 158.23.184.117:65177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/test.php"] [unique_id "apK-XWjCPtor9NZ-byT0rgAABmc"]
[Sat Aug 29 05:11:25.955250 2026] [security2:error] [pid 1321:tid 1563] [client 20.63.219.114:2279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/disagreed.php"] [unique_id "apK-XWjCPtor9NZ-byT0swAABoY"]
[Sat Aug 29 05:11:25.969139 2026] [core:error] [pid 11274:tid 11533] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.969159 2026] [core:error] [pid 11274:tid 11533] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:25.972656 2026] [security2:error] [pid 1321:tid 1523] [client 93.123.109.228:53918] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/old/.env"] [unique_id "apK-XWjCPtor9NZ-byT0tAAABl8"]
[Sat Aug 29 05:11:25.980135 2026] [security2:error] [pid 11274:tid 11507] [client 93.123.109.228:60692] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/opt/.env"] [unique_id "apK-XWbX5DA3XO6e_qQ-VgAAAUg"]
[Sat Aug 29 05:11:25.984588 2026] [security2:error] [pid 11274:tid 11474] [client 20.63.219.114:4158] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-content/1.php"] [unique_id "apK-XWbX5DA3XO6e_qQ-WAAAASg"]
[Sat Aug 29 05:11:25.984685 2026] [security2:error] [pid 11274:tid 11474] [client 20.63.219.114:4158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-content/1.php"] [unique_id "apK-XWbX5DA3XO6e_qQ-WAAAASg"]
[Sat Aug 29 05:11:25.992346 2026] [security2:error] [pid 11274:tid 11552] [client 68.155.159.216:33761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-l0gin.php"] [unique_id "apK-XWbX5DA3XO6e_qQ-WwAAAXQ"]
[Sat Aug 29 05:11:25.993821 2026] [security2:error] [pid 1321:tid 1612] [client 93.123.109.228:60810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK-XWjCPtor9NZ-byT0uAAABrc"]
[Sat Aug 29 05:11:25.995177 2026] [security2:error] [pid 11274:tid 11525] [client 20.151.200.44:63681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tinpanband.com"] [uri "/fesa.php"] [unique_id "apK-XWbX5DA3XO6e_qQ-XQAAAVo"]
[Sat Aug 29 05:11:25.996966 2026] [security2:error] [pid 11274:tid 11414] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/terraform.tfstate.backup"] [unique_id "apK-XWbX5DA3XO6e_qQ-XgABWWQ"]
[Sat Aug 29 05:11:26.001766 2026] [security2:error] [pid 11274:tid 11477] [client 20.220.204.93:17399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-XmbX5DA3XO6e_qQ-YQAAASs"]
[Sat Aug 29 05:11:26.010199 2026] [security2:error] [pid 11274:tid 11530] [client 68.155.159.216:64104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-content/x/index.php"] [unique_id "apK-XmbX5DA3XO6e_qQ-YwAAAV8"]
[Sat Aug 29 05:11:26.013157 2026] [core:error] [pid 1321:tid 1513] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.013174 2026] [core:error] [pid 1321:tid 1513] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.015985 2026] [security2:error] [pid 1321:tid 1512] [client 20.100.175.163:13807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/xxx.php"] [unique_id "apK-XmjCPtor9NZ-byT0vwAABlQ"]
[Sat Aug 29 05:11:26.021801 2026] [security2:error] [pid 11274:tid 11333] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/test.php"] [unique_id "apK-XmbX5DA3XO6e_qQ-aQABWRQ"]
[Sat Aug 29 05:11:26.028464 2026] [security2:error] [pid 11274:tid 11396] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/test/.env"] [unique_id "apK-XmbX5DA3XO6e_qQ-awABWVI"]
[Sat Aug 29 05:11:26.034054 2026] [security2:error] [pid 1321:tid 1607] [client 20.48.250.41:26893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/w1px.php"] [unique_id "apK-XmjCPtor9NZ-byT0wgAABrI"]
[Sat Aug 29 05:11:26.040820 2026] [core:error] [pid 1321:tid 1590] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.040841 2026] [core:error] [pid 1321:tid 1590] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.051428 2026] [security2:error] [pid 11274:tid 11561] [client 93.123.109.228:60838] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK-XmbX5DA3XO6e_qQ-bgAAAX0"]
[Sat Aug 29 05:11:26.052749 2026] [core:error] [pid 1321:tid 1591] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.052767 2026] [core:error] [pid 1321:tid 1591] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.054157 2026] [security2:error] [pid 1321:tid 1577] [client 52.138.0.157:58236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.opphousing.com"] [uri "/yas.php"] [unique_id "apK-XmjCPtor9NZ-byT0xgAABpQ"]
[Sat Aug 29 05:11:26.085613 2026] [security2:error] [pid 11274:tid 11502] [client 40.83.93.50:3928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/csv.php"] [unique_id "apK-XmbX5DA3XO6e_qQ-dAAAAUM"]
[Sat Aug 29 05:11:26.087156 2026] [security2:error] [pid 11274:tid 11450] [client 20.151.200.44:22237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/bgymj.php"] [unique_id "apK-XmbX5DA3XO6e_qQ-dQAAARA"]
[Sat Aug 29 05:11:26.089214 2026] [core:error] [pid 1321:tid 1565] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.089228 2026] [core:error] [pid 1321:tid 1565] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.090094 2026] [security2:error] [pid 1321:tid 1489] [client 158.23.184.117:11573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/wp-includes/mani.php"] [unique_id "apK-XmjCPtor9NZ-byT0ywAABj0"]
[Sat Aug 29 05:11:26.090681 2026] [security2:error] [pid 11274:tid 11500] [client 4.205.62.107:65013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/olfclass.php"] [unique_id "apK-XmbX5DA3XO6e_qQ-eAAAAUE"]
[Sat Aug 29 05:11:26.091338 2026] [core:error] [pid 1321:tid 1547] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.091351 2026] [core:error] [pid 1321:tid 1547] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.096263 2026] [security2:error] [pid 11274:tid 11456] [client 93.123.109.228:60874] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(\\\\/\\\\*\\\\!? ?(?:select|grant|delete|insert|drop|alter|replace|truncate|update|create|rename|describe|union|concat|group_concat))" at REQUEST_FILENAME. [file "/opt/mod_security/hg_rules.conf"] [line "1019"] [id "9000042"] [rev "2.2.2"] [msg "SQL Comment Sequence Detected."] [data "/*update"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/*update.cgi*"] [unique_id "apK-XmbX5DA3XO6e_qQ-fQAAARY"]
[Sat Aug 29 05:11:26.097204 2026] [core:error] [pid 11274:tid 11549] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.097219 2026] [core:error] [pid 11274:tid 11549] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.098303 2026] [security2:error] [pid 1321:tid 1559] [client 158.158.54.35:29472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/item.php"] [unique_id "apK-XmjCPtor9NZ-byT0zwAABoI"]
[Sat Aug 29 05:11:26.100478 2026] [core:error] [pid 11274:tid 11526] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.100497 2026] [core:error] [pid 11274:tid 11526] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.105593 2026] [security2:error] [pid 11274:tid 11442] [remote 74.7.227.154:55336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK-XmbX5DA3XO6e_qQ-gwABSn8"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwp-easycart%2Finc%2Faws%2FPsr%2FHttp%2FMessage
[Sat Aug 29 05:11:26.108015 2026] [core:error] [pid 11274:tid 11571] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.108035 2026] [core:error] [pid 11274:tid 11571] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.110125 2026] [core:error] [pid 11274:tid 11527] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.110145 2026] [core:error] [pid 11274:tid 11527] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.112737 2026] [security2:error] [pid 11274:tid 11498] [client 4.205.62.107:6508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/grsiuk.php"] [unique_id "apK-XmbX5DA3XO6e_qQ-hQAAAT8"]
[Sat Aug 29 05:11:26.122555 2026] [core:error] [pid 1321:tid 1533] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.122571 2026] [core:error] [pid 1321:tid 1533] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.127414 2026] [security2:error] [pid 11274:tid 11468] [client 4.205.62.107:62983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/ammika.php"] [unique_id "apK-XmbX5DA3XO6e_qQ-igAAASI"]
[Sat Aug 29 05:11:26.145039 2026] [core:error] [pid 11274:tid 11483] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.145059 2026] [core:error] [pid 11274:tid 11483] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.160253 2026] [security2:error] [pid 11274:tid 11554] [client 158.158.54.35:30291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-logs.php"] [unique_id "apK-XmbX5DA3XO6e_qQ-mQAAAXY"]
[Sat Aug 29 05:11:26.160281 2026] [security2:error] [pid 11274:tid 11461] [client 20.100.175.163:20680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/item.php"] [unique_id "apK-XmbX5DA3XO6e_qQ-mAAAARs"]
[Sat Aug 29 05:11:26.169497 2026] [security2:error] [pid 1321:tid 1549] [client 93.123.109.228:53890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/php-info.php"] [unique_id "apK-XmjCPtor9NZ-byT03AAABng"]
[Sat Aug 29 05:11:26.175480 2026] [security2:error] [pid 1321:tid 1492] [client 20.48.250.41:27529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/to.php"] [unique_id "apK-XmjCPtor9NZ-byT03QAABkA"]
[Sat Aug 29 05:11:26.178113 2026] [security2:error] [pid 11274:tid 11525] [client 93.123.109.228:60924] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/.env"] [unique_id "apK-XmbX5DA3XO6e_qQ-nAAAAVo"]
[Sat Aug 29 05:11:26.181634 2026] [security2:error] [pid 1321:tid 1539] [client 93.123.109.228:60738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/php.php"] [unique_id "apK-XmjCPtor9NZ-byT03gAABm8"]
[Sat Aug 29 05:11:26.185397 2026] [security2:error] [pid 11274:tid 11372] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/user/.env"] [unique_id "apK-XmbX5DA3XO6e_qQ-nwABhDo"]
[Sat Aug 29 05:11:26.186188 2026] [security2:error] [pid 11274:tid 11336] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/v1/.env"] [unique_id "apK-XmbX5DA3XO6e_qQ-oAABhBc"]
[Sat Aug 29 05:11:26.196754 2026] [security2:error] [pid 11274:tid 11515] [client 20.52.41.200:4633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/s.php"] [unique_id "apK-XmbX5DA3XO6e_qQ-pAAAAVA"]
[Sat Aug 29 05:11:26.197814 2026] [security2:error] [pid 11274:tid 11445] [client 93.123.109.228:53842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/php_info.php"] [unique_id "apK-XmbX5DA3XO6e_qQ-pQAAAQs"]
[Sat Aug 29 05:11:26.201977 2026] [security2:error] [pid 11274:tid 11431] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/v2/.env"] [unique_id "apK-XmbX5DA3XO6e_qQ-pgABhHU"]
[Sat Aug 29 05:11:26.207073 2026] [security2:error] [pid 1321:tid 1494] [client 20.104.49.130:53536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pvillusions.com"] [uri "/100.php"] [unique_id "apK-XmjCPtor9NZ-byT05QAABkI"]
[Sat Aug 29 05:11:26.208246 2026] [security2:error] [pid 11274:tid 11473] [client 93.123.109.228:60836] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/laravel/app/.env"] [unique_id "apK-XmbX5DA3XO6e_qQ-pwAAASc"]
[Sat Aug 29 05:11:26.216778 2026] [core:error] [pid 1321:tid 1564] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.216800 2026] [core:error] [pid 1321:tid 1564] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.218902 2026] [core:error] [pid 11274:tid 11530] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.218921 2026] [core:error] [pid 11274:tid 11530] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.221161 2026] [security2:error] [pid 11274:tid 11436] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/v3/.env"] [unique_id "apK-XmbX5DA3XO6e_qQ-rAABhHk"]
[Sat Aug 29 05:11:26.225872 2026] [security2:error] [pid 1321:tid 1544] [client 93.123.109.228:60826] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK-XmjCPtor9NZ-byT06AAABnQ"]
[Sat Aug 29 05:11:26.238206 2026] [security2:error] [pid 1321:tid 1600] [client 158.23.184.117:11546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/wp-includes/Test.php"] [unique_id "apK-XmjCPtor9NZ-byT07QAABqs"]
[Sat Aug 29 05:11:26.239185 2026] [security2:error] [pid 11274:tid 11463] [client 93.123.109.228:60712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/phpinfo.php"] [unique_id "apK-XmbX5DA3XO6e_qQ-rwAAAR0"]
[Sat Aug 29 05:11:26.261854 2026] [core:error] [pid 1321:tid 1568] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.261875 2026] [core:error] [pid 1321:tid 1568] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.262893 2026] [core:error] [pid 1321:tid 1499] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.262911 2026] [core:error] [pid 1321:tid 1499] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.269173 2026] [security2:error] [pid 11274:tid 11547] [client 93.123.109.228:60880] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/.env.backup"] [unique_id "apK-XmbX5DA3XO6e_qQ-swAAAW8"]
[Sat Aug 29 05:11:26.288340 2026] [security2:error] [pid 11274:tid 11450] [client 93.123.109.228:60856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/.env.bak"] [unique_id "apK-XmbX5DA3XO6e_qQ-vgAAARA"]
[Sat Aug 29 05:11:26.297213 2026] [core:error] [pid 11274:tid 11500] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.297233 2026] [core:error] [pid 11274:tid 11500] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.301213 2026] [security2:error] [pid 1321:tid 1609] [client 68.155.159.216:56777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-content/cong.php"] [unique_id "apK-XmjCPtor9NZ-byT08gAABrQ"]
[Sat Aug 29 05:11:26.302075 2026] [core:error] [pid 11274:tid 11489] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.302089 2026] [core:error] [pid 11274:tid 11489] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.310260 2026] [security2:error] [pid 1321:tid 1593] [client 20.48.250.41:26881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/thui.php"] [unique_id "apK-XmjCPtor9NZ-byT09AAABqQ"]
[Sat Aug 29 05:11:26.311499 2026] [security2:error] [pid 11274:tid 11507] [client 20.52.41.200:2650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/24.php"] [unique_id "apK-XmbX5DA3XO6e_qQ-wgAAAUg"]
[Sat Aug 29 05:11:26.312842 2026] [core:error] [pid 1321:tid 1516] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.312851 2026] [core:error] [pid 1321:tid 1516] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.317084 2026] [core:error] [pid 1321:tid 1507] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.317100 2026] [core:error] [pid 1321:tid 1507] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.318154 2026] [core:error] [pid 11274:tid 11456] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.318171 2026] [core:error] [pid 11274:tid 11456] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.325317 2026] [security2:error] [pid 1321:tid 1531] [client 93.123.109.228:60680] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/portal/.env"] [unique_id "apK-XmjCPtor9NZ-byT0-AAABmc"]
[Sat Aug 29 05:11:26.340112 2026] [security2:error] [pid 11274:tid 11509] [client 93.123.109.228:60776] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/prod/.env"] [unique_id "apK-XmbX5DA3XO6e_qQ-xwAAAUo"]
[Sat Aug 29 05:11:26.340825 2026] [security2:error] [pid 11274:tid 11479] [client 20.220.204.93:19472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/ff1.php"] [unique_id "apK-XmbX5DA3XO6e_qQ-yAAAASw"]
[Sat Aug 29 05:11:26.343400 2026] [security2:error] [pid 11274:tid 11490] [client 20.63.219.114:13468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-content/about.php"] [unique_id "apK-XmbX5DA3XO6e_qQ-yQAAATc"]
[Sat Aug 29 05:11:26.354990 2026] [security2:error] [pid 11274:tid 11512] [client 20.63.219.114:19923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/class_api.php"] [unique_id "apK-XmbX5DA3XO6e_qQ-ywAAAU0"]
[Sat Aug 29 05:11:26.360236 2026] [security2:error] [pid 11274:tid 11559] [client 20.151.200.44:62430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/fh26.php"] [unique_id "apK-XmbX5DA3XO6e_qQ-zwAAAXs"]
[Sat Aug 29 05:11:26.371455 2026] [core:error] [pid 11274:tid 11514] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.371472 2026] [core:error] [pid 11274:tid 11514] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.371924 2026] [security2:error] [pid 1321:tid 1513] [client 93.123.109.228:53900] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/product/.env"] [unique_id "apK-XmjCPtor9NZ-byT0_wAABlU"]
[Sat Aug 29 05:11:26.378141 2026] [security2:error] [pid 11274:tid 11555] [client 93.123.109.228:60786] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/production/.env"] [unique_id "apK-XmbX5DA3XO6e_qQ-1QAAAXc"]
[Sat Aug 29 05:11:26.392857 2026] [security2:error] [pid 1321:tid 1590] [client 68.155.159.216:1804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wzy.php"] [unique_id "apK-XmjCPtor9NZ-byT1BQAABqE"]
[Sat Aug 29 05:11:26.397059 2026] [security2:error] [pid 1321:tid 1591] [client 93.123.109.228:53860] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/project/.env"] [unique_id "apK-XmjCPtor9NZ-byT1BgAABqI"]
[Sat Aug 29 05:11:26.404594 2026] [security2:error] [pid 1321:tid 1519] [client 158.23.184.117:65192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/wp-includes/pomo.php"] [unique_id "apK-XmjCPtor9NZ-byT1CgAABls"]
[Sat Aug 29 05:11:26.409027 2026] [core:error] [pid 1321:tid 1510] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.409040 2026] [core:error] [pid 1321:tid 1510] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.410038 2026] [core:error] [pid 11274:tid 11486] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.410056 2026] [core:error] [pid 11274:tid 11486] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.418337 2026] [security2:error] [pid 1321:tid 1583] [client 93.123.109.228:60642] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/public-api/.env"] [unique_id "apK-XmjCPtor9NZ-byT1DwAABpo"]
[Sat Aug 29 05:11:26.419171 2026] [security2:error] [pid 1321:tid 1565] [client 93.123.109.228:60770] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/public/.env"] [unique_id "apK-XmjCPtor9NZ-byT1EQAABog"]
[Sat Aug 29 05:11:26.422075 2026] [cgid:error] [pid 11274:tid 11313] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:26.422155 2026] [cgid:error] [pid 11274:tid 11391] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:26.423387 2026] [security2:error] [pid 11274:tid 11561] [client 45.148.10.62:51660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zeh.elx.mybluehost.me"] [uri "/.env.php"] [unique_id "apK-XmbX5DA3XO6e_qQ-3QAAAX0"]
[Sat Aug 29 05:11:26.425144 2026] [security2:error] [pid 11274:tid 11499] [client 93.123.109.228:60754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/public/phpinfo.php"] [unique_id "apK-XmbX5DA3XO6e_qQ-3wAAAUA"]
[Sat Aug 29 05:11:26.428752 2026] [security2:error] [pid 11274:tid 11487] [client 93.123.109.228:60880] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/.env.old"] [unique_id "apK-XmbX5DA3XO6e_qQ-4AAAATQ"]
[Sat Aug 29 05:11:26.443551 2026] [security2:error] [pid 11274:tid 11572] [client 93.123.109.228:60844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/.env.php"] [unique_id "apK-XmbX5DA3XO6e_qQ-4gAAAYg"]
[Sat Aug 29 05:11:26.445876 2026] [security2:error] [pid 11274:tid 11520] [client 40.83.93.50:9808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/extractable-loader-head.php"] [unique_id "apK-XmbX5DA3XO6e_qQ-4wAAAVU"]
[Sat Aug 29 05:11:26.452329 2026] [security2:error] [pid 11274:tid 11390] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/var/www/html/.env"] [unique_id "apK-XmbX5DA3XO6e_qQ-5gABakw"]
[Sat Aug 29 05:11:26.452507 2026] [security2:error] [pid 11274:tid 11430] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/var/www/.env"] [unique_id "apK-XmbX5DA3XO6e_qQ-5QABanQ"]
[Sat Aug 29 05:11:26.458638 2026] [security2:error] [pid 11274:tid 11455] [client 20.240.128.207:18642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-content/uploads/min.php"] [unique_id "apK-XmbX5DA3XO6e_qQ-6gAAARU"]
[Sat Aug 29 05:11:26.470117 2026] [security2:error] [pid 11274:tid 11566] [client 4.205.62.107:32522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/X57.php"] [unique_id "apK-XmbX5DA3XO6e_qQ-7AAAAYI"]
[Sat Aug 29 05:11:26.472155 2026] [security2:error] [pid 1321:tid 1514] [client 93.123.109.228:53910] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/public_html/.env"] [unique_id "apK-XmjCPtor9NZ-byT1EwAABlY"]
[Sat Aug 29 05:11:26.477396 2026] [core:error] [pid 11274:tid 11540] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.477411 2026] [core:error] [pid 11274:tid 11540] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.481886 2026] [security2:error] [pid 11274:tid 11346] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/web/.env"] [unique_id "apK-XmbX5DA3XO6e_qQ-9gABaiE"]
[Sat Aug 29 05:11:26.483386 2026] [cgid:error] [pid 11274:tid 11338] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:26.483437 2026] [cgid:error] [pid 11274:tid 11317] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:26.483477 2026] [cgid:error] [pid 11274:tid 11382] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:26.483553 2026] [cgid:error] [pid 11274:tid 11425] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:26.486527 2026] [cgid:error] [pid 11274:tid 11437] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:26.486570 2026] [cgid:error] [pid 11274:tid 11383] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:26.486592 2026] [cgid:error] [pid 11274:tid 11402] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:26.487445 2026] [cgid:error] [pid 11274:tid 11337] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:26.488101 2026] [cgid:error] [pid 11274:tid 11316] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:26.490071 2026] [security2:error] [pid 11274:tid 11488] [client 93.123.109.228:60776] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/qa/.env"] [unique_id "apK-XmbX5DA3XO6e_qQ-_wAAATU"]
[Sat Aug 29 05:11:26.495158 2026] [security2:error] [pid 11274:tid 11525] [client 158.23.147.79:50071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK-XmbX5DA3XO6e_qQ_AAAAAVo"]
[Sat Aug 29 05:11:26.503697 2026] [security2:error] [pid 11274:tid 11472] [client 4.205.62.107:58457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/myfile.php"] [unique_id "apK-XmbX5DA3XO6e_qQ_AgAAASY"]
[Sat Aug 29 05:11:26.510913 2026] [security2:error] [pid 11274:tid 11515] [client 20.48.250.41:26902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/Jcrop.php"] [unique_id "apK-XmbX5DA3XO6e_qQ_BQAAAVA"]
[Sat Aug 29 05:11:26.530678 2026] [security2:error] [pid 11274:tid 11552] [client 20.220.204.93:19490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/t.php"] [unique_id "apK-XmbX5DA3XO6e_qQ_CQAAAXQ"]
[Sat Aug 29 05:11:26.537724 2026] [security2:error] [pid 11274:tid 11545] [client 93.123.109.228:60884] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/.env.swp"] [unique_id "apK-XmbX5DA3XO6e_qQ_DAAAAW0"]
[Sat Aug 29 05:11:26.547822 2026] [security2:error] [pid 11274:tid 11474] [client 93.123.109.228:60802] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/.env~"] [unique_id "apK-XmbX5DA3XO6e_qQ_DgAAASg"]
[Sat Aug 29 05:11:26.556187 2026] [core:error] [pid 1321:tid 1515] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.556350 2026] [core:error] [pid 11274:tid 11493] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.556459 2026] [core:error] [pid 1321:tid 1515] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.556466 2026] [core:error] [pid 11274:tid 11493] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.559080 2026] [security2:error] [pid 11274:tid 11503] [client 158.158.54.35:10121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/t.php"] [unique_id "apK-XmbX5DA3XO6e_qQ_EQAAAUQ"]
[Sat Aug 29 05:11:26.565546 2026] [security2:error] [pid 11274:tid 11465] [client 40.83.93.50:10021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/fox.php"] [unique_id "apK-XmbX5DA3XO6e_qQ_EwAAAR8"]
[Sat Aug 29 05:11:26.567482 2026] [core:error] [pid 1321:tid 1490] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.567497 2026] [core:error] [pid 1321:tid 1490] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.589798 2026] [security2:error] [pid 11274:tid 11315] [remote 74.7.227.154:55336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK-XmbX5DA3XO6e_qQ_GgABCgI"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwordpress-seo%2Fadmin
[Sat Aug 29 05:11:26.603302 2026] [autoindex:error] [pid 11274:tid 11521] [client 158.23.184.117:0] AH01276: Cannot serve directory /home1/barhashi/public_html/sarahgeving/.well-known/acme-challenge/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:11:26.609629 2026] [security2:error] [pid 11274:tid 11522] [client 158.158.54.35:30318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-admin/css/about.php"] [unique_id "apK-XmbX5DA3XO6e_qQ_GwAAAVc"]
[Sat Aug 29 05:11:26.636529 2026] [security2:error] [pid 1321:tid 1544] [client 68.155.159.216:1963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK-XmjCPtor9NZ-byT1LQAABnQ"]
[Sat Aug 29 05:11:26.638544 2026] [core:error] [pid 11274:tid 11448] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.638558 2026] [core:error] [pid 11274:tid 11448] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.649664 2026] [security2:error] [pid 11274:tid 11322] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/wp-config.php"] [unique_id "apK-XmbX5DA3XO6e_qQ_JQABVAk"]
[Sat Aug 29 05:11:26.649684 2026] [security2:error] [pid 11274:tid 11410] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/wp-config.php.bak"] [unique_id "apK-XmbX5DA3XO6e_qQ_KAABVGA"]
[Sat Aug 29 05:11:26.650639 2026] [security2:error] [pid 11274:tid 11354] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/website/.env"] [unique_id "apK-XmbX5DA3XO6e_qQ_JgABVCk"]
[Sat Aug 29 05:11:26.653118 2026] [security2:error] [pid 11274:tid 11523] [client 20.100.175.163:11438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/t.php"] [unique_id "apK-XmbX5DA3XO6e_qQ_KgAAAVg"]
[Sat Aug 29 05:11:26.654488 2026] [security2:error] [pid 11274:tid 11459] [client 20.52.41.200:4408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/test1.php"] [unique_id "apK-XmbX5DA3XO6e_qQ_KwAAARk"]
[Sat Aug 29 05:11:26.662550 2026] [security2:error] [pid 11274:tid 11359] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/wp-config.php.new"] [unique_id "apK-XmbX5DA3XO6e_qQ_MAABVC4"]
[Sat Aug 29 05:11:26.662973 2026] [security2:error] [pid 11274:tid 11384] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/wp-config.php.old"] [unique_id "apK-XmbX5DA3XO6e_qQ_MQABVEY"]
[Sat Aug 29 05:11:26.665427 2026] [security2:error] [pid 11274:tid 11387] [remote 93.123.109.228:52434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/wp-content/mysql.sql"] [unique_id "apK-XmbX5DA3XO6e_qQ_MwABVEk"]
[Sat Aug 29 05:11:26.667055 2026] [core:error] [pid 11274:tid 11377] [remote 93.123.109.228:52434] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.667071 2026] [core:error] [pid 11274:tid 11377] [remote 93.123.109.228:52434] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.667313 2026] [core:error] [pid 11274:tid 11326] [remote 93.123.109.228:52434] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.667324 2026] [core:error] [pid 11274:tid 11326] [remote 93.123.109.228:52434] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.677769 2026] [core:error] [pid 11274:tid 11486] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.677789 2026] [core:error] [pid 11274:tid 11486] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.678026 2026] [core:error] [pid 1321:tid 1538] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.678037 2026] [core:error] [pid 1321:tid 1538] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.703020 2026] [security2:error] [pid 11274:tid 11495] [client 20.63.219.114:13501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-content/admin-header.php"] [unique_id "apK-XmbX5DA3XO6e_qQ_OgAAATw"]
[Sat Aug 29 05:11:26.703872 2026] [autoindex:error] [pid 11274:tid 11565] [client 158.23.184.117:0] AH01276: Cannot serve directory /home1/barhashi/public_html/sarahgeving/wp-includes/fonts/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:11:26.708622 2026] [security2:error] [pid 1321:tid 1451] [remote 34.75.72.74:45028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/.ssh/id_rsa"] [unique_id "apK-XmjCPtor9NZ-byT1NAAGm1w"]
[Sat Aug 29 05:11:26.709768 2026] [core:error] [pid 11274:tid 11375] [remote 93.123.109.228:52434] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.709788 2026] [core:error] [pid 11274:tid 11375] [remote 93.123.109.228:52434] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.712125 2026] [security2:error] [pid 1321:tid 1527] [client 68.155.159.216:49038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK-XmjCPtor9NZ-byT1NwAABmM"]
[Sat Aug 29 05:11:26.712724 2026] [security2:error] [pid 1321:tid 1522] [client 20.220.204.93:27415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/erty.php"] [unique_id "apK-XmjCPtor9NZ-byT1OAAABl4"]
[Sat Aug 29 05:11:26.714343 2026] [security2:error] [pid 11274:tid 11504] [client 93.123.109.228:60802] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.bak"] [unique_id "apK-XmbX5DA3XO6e_qQ_PQAAAUU"]
[Sat Aug 29 05:11:26.717260 2026] [security2:error] [pid 11274:tid 11572] [client 20.48.250.41:27617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/ws58.php"] [unique_id "apK-XmbX5DA3XO6e_qQ_PwAAAYg"]
[Sat Aug 29 05:11:26.717563 2026] [security2:error] [pid 1321:tid 1460] [remote 34.75.72.74:45028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/.ssh/id_dsa"] [unique_id "apK-XmjCPtor9NZ-byT1OgAGXGU"]
[Sat Aug 29 05:11:26.718074 2026] [security2:error] [pid 11274:tid 11455] [client 93.123.109.228:60908] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.old"] [unique_id "apK-XmbX5DA3XO6e_qQ_PgAAARU"]
[Sat Aug 29 05:11:26.742583 2026] [security2:error] [pid 11274:tid 11540] [client 93.123.109.228:60836] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config~"] [unique_id "apK-XmbX5DA3XO6e_qQ_QQAAAWk"]
[Sat Aug 29 05:11:26.754861 2026] [security2:error] [pid 1321:tid 1537] [client 4.205.62.107:59086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/app_local.php"] [unique_id "apK-XmjCPtor9NZ-byT1QAAABm0"]
[Sat Aug 29 05:11:26.755507 2026] [security2:error] [pid 1321:tid 1609] [client 158.23.184.117:65160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/wp-admin/link-add.php"] [unique_id "apK-XmjCPtor9NZ-byT1QQAABrQ"]
[Sat Aug 29 05:11:26.768649 2026] [security2:error] [pid 1321:tid 1496] [client 68.155.159.216:14322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK-XmjCPtor9NZ-byT1QwAABkQ"]
[Sat Aug 29 05:11:26.768875 2026] [core:error] [pid 11274:tid 11549] [client 20.52.41.200:2752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.768890 2026] [core:error] [pid 11274:tid 11549] [client 20.52.41.200:2752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.772571 2026] [cgid:error] [pid 11274:tid 11413] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:26.801223 2026] [core:error] [pid 11274:tid 11445] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.801239 2026] [core:error] [pid 11274:tid 11445] [client 93.123.109.228:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:26.812226 2026] [security2:error] [pid 1321:tid 1499] [client 20.63.219.114:2814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/aksinet.php"] [unique_id "apK-XmjCPtor9NZ-byT1SAAABkc"]
[Sat Aug 29 05:11:26.817337 2026] [cgid:error] [pid 11274:tid 11370] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:26.817727 2026] [cgid:error] [pid 11274:tid 11328] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml, referer: https://redelan.cl
[Sat Aug 29 05:11:26.822779 2026] [security2:error] [pid 11274:tid 11468] [client 20.151.200.44:63607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/blnux.php"] [unique_id "apK-XmbX5DA3XO6e_qQ_VAAAASI"]
[Sat Aug 29 05:11:26.823455 2026] [cgid:error] [pid 11274:tid 11334] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:26.837937 2026] [security2:error] [pid 1321:tid 1603] [client 20.151.200.44:63730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/fgd.php"] [unique_id "apK-XmjCPtor9NZ-byT1SgAABq4"]
[Sat Aug 29 05:11:26.880225 2026] [cgid:error] [pid 11274:tid 11351] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:26.887809 2026] [security2:error] [pid 1321:tid 1586] [client 20.100.175.163:33675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/tool.php"] [unique_id "apK-XmjCPtor9NZ-byT1TwAABp0"]
[Sat Aug 29 05:11:26.891591 2026] [security2:error] [pid 11274:tid 11378] [remote 34.74.130.21:47710] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "redelan.cl"] [uri "/.env"] [unique_id "apK-XmbX5DA3XO6e_qQ_XQABNkA"]
[Sat Aug 29 05:11:26.895430 2026] [security2:error] [pid 1321:tid 1604] [client 93.123.109.228:60606] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/s3/.env.bak"] [unique_id "apK-XmjCPtor9NZ-byT1UAAABq8"]
[Sat Aug 29 05:11:26.898291 2026] [cgid:error] [pid 11274:tid 11341] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:26.898517 2026] [cgid:error] [pid 11274:tid 11388] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:26.898634 2026] [security2:error] [pid 11274:tid 11503] [client 158.23.184.117:65176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/wp-includes/Text.php"] [unique_id "apK-XmbX5DA3XO6e_qQ_YAAAAUQ"]
[Sat Aug 29 05:11:26.904348 2026] [security2:error] [pid 1321:tid 1478] [remote 34.75.72.74:45028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/id_dsa"] [unique_id "apK-XmjCPtor9NZ-byT1VAAGqnc"]
[Sat Aug 29 05:11:26.924268 2026] [security2:error] [pid 1321:tid 1400] [remote 34.75.72.74:45028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/id_rsa"] [unique_id "apK-XmjCPtor9NZ-byT1VgAGoSo"]
[Sat Aug 29 05:11:26.929636 2026] [security2:error] [pid 1321:tid 1577] [client 20.220.204.93:17260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/0x.php"] [unique_id "apK-XmjCPtor9NZ-byT1WAAABpQ"]
[Sat Aug 29 05:11:26.938487 2026] [security2:error] [pid 11274:tid 11496] [client 158.23.147.79:24514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/hehehehe.php"] [unique_id "apK-XmbX5DA3XO6e_qQ_ZQAAAT0"]
[Sat Aug 29 05:11:26.938640 2026] [security2:error] [pid 1321:tid 1500] [client 93.123.109.228:60954] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK-XmjCPtor9NZ-byT1WQAABkg"]
[Sat Aug 29 05:11:26.941586 2026] [security2:error] [pid 11274:tid 11521] [client 68.155.159.216:23391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK-XmbX5DA3XO6e_qQ_ZgAAAVY"]
[Sat Aug 29 05:11:26.959160 2026] [security2:error] [pid 11274:tid 11502] [client 20.48.250.41:26938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/xs.php"] [unique_id "apK-XmbX5DA3XO6e_qQ_agAAAUM"]
[Sat Aug 29 05:11:26.962064 2026] [security2:error] [pid 11274:tid 11456] [client 158.23.147.79:44497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK-XmbX5DA3XO6e_qQ_awAAARY"]
[Sat Aug 29 05:11:26.964738 2026] [cgid:error] [pid 11274:tid 11367] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml, referer: https://redelan.cl
[Sat Aug 29 05:11:26.977166 2026] [security2:error] [pid 11274:tid 11530] [client 40.83.93.50:15852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/defaults.php"] [unique_id "apK-XmbX5DA3XO6e_qQ_bQAAAV8"]
[Sat Aug 29 05:11:26.979229 2026] [security2:error] [pid 1321:tid 1583] [client 20.151.200.44:64579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/Zeiss.php"] [unique_id "apK-XmjCPtor9NZ-byT1YAAABpo"]
[Sat Aug 29 05:11:26.982333 2026] [security2:error] [pid 11274:tid 11480] [client 20.240.128.207:12768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK-XmbX5DA3XO6e_qQ_bgAAAS0"]
[Sat Aug 29 05:11:26.987014 2026] [cgid:error] [pid 11274:tid 11386] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:26.998378 2026] [security2:error] [pid 11274:tid 11492] [client 158.158.54.35:23033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/i.php"] [unique_id "apK-XmbX5DA3XO6e_qQ_dgAAATk"]
[Sat Aug 29 05:11:27.000439 2026] [security2:error] [pid 11274:tid 11514] [client 93.123.109.228:32820] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(\\\\/\\\\*\\\\!? ?(?:select|grant|delete|insert|drop|alter|replace|truncate|update|create|rename|describe|union|concat|group_concat))" at REQUEST_FILENAME. [file "/opt/mod_security/hg_rules.conf"] [line "1019"] [id "9000042"] [rev "2.2.2"] [msg "SQL Comment Sequence Detected."] [data "/*update"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/*update.cgi*"] [unique_id "apK-XmbX5DA3XO6e_qQ_dQAAAU8"]
[Sat Aug 29 05:11:27.000556 2026] [security2:error] [pid 11274:tid 11449] [client 93.123.109.228:32778] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK-XmbX5DA3XO6e_qQ_eAAAAQ8"]
[Sat Aug 29 05:11:27.013004 2026] [cgid:error] [pid 11274:tid 11340] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:27.014922 2026] [security2:error] [pid 11274:tid 11561] [client 93.123.109.228:60724] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/server/.env"] [unique_id "apK-X2bX5DA3XO6e_qQ_fAAAAX0"]
[Sat Aug 29 05:11:27.030823 2026] [security2:error] [pid 1321:tid 1526] [client 93.123.109.228:60642] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/server/api/.env"] [unique_id "apK-X2jCPtor9NZ-byT1ZgAABmI"]
[Sat Aug 29 05:11:27.042934 2026] [security2:error] [pid 11274:tid 11461] [client 103.171.189.88:54189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-X2bX5DA3XO6e_qQ_gAAAARs"]
[Sat Aug 29 05:11:27.043077 2026] [security2:error] [pid 11274:tid 11461] [client 103.171.189.88:54189] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-X2bX5DA3XO6e_qQ_gAAAARs"]
[Sat Aug 29 05:11:27.044757 2026] [security2:error] [pid 11274:tid 11526] [client 68.155.159.216:56821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-X2bX5DA3XO6e_qQ_gQAAAVs"]
[Sat Aug 29 05:11:27.060287 2026] [security2:error] [pid 1321:tid 1514] [client 158.23.184.117:11540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/wp-trackback.php"] [unique_id "apK-X2jCPtor9NZ-byT1agAABlY"]
[Sat Aug 29 05:11:27.069663 2026] [security2:error] [pid 11274:tid 11452] [client 158.158.54.35:14910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/system_log.php"] [unique_id "apK-X2bX5DA3XO6e_qQ_hAAAARI"]
[Sat Aug 29 05:11:27.072292 2026] [security2:error] [pid 1321:tid 1491] [client 4.205.62.107:63943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/edit.php"] [unique_id "apK-X2jCPtor9NZ-byT1bQAABj8"]
[Sat Aug 29 05:11:27.074526 2026] [security2:error] [pid 1321:tid 1510] [client 20.63.219.114:4290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-content/admin.php"] [unique_id "apK-X2jCPtor9NZ-byT1bgAABlI"]
[Sat Aug 29 05:11:27.074966 2026] [security2:error] [pid 1321:tid 1509] [client 93.123.109.228:53910] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/server/backend/.env"] [unique_id "apK-X2jCPtor9NZ-byT1bAAABlE"]
[Sat Aug 29 05:11:27.077807 2026] [security2:error] [pid 11274:tid 11493] [client 40.83.93.50:4013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/disagraeosc.php"] [unique_id "apK-X2bX5DA3XO6e_qQ_hgAAATo"]
[Sat Aug 29 05:11:27.101072 2026] [security2:error] [pid 11274:tid 11537] [client 20.48.250.41:27589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/zu.php"] [unique_id "apK-X2bX5DA3XO6e_qQ_iwAAAWY"]
[Sat Aug 29 05:11:27.110847 2026] [security2:error] [pid 1321:tid 1575] [client 68.155.159.216:33488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK-X2jCPtor9NZ-byT1cQAABpI"]
[Sat Aug 29 05:11:27.113186 2026] [security2:error] [pid 1321:tid 1536] [client 20.52.41.200:4610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/ws.php"] [unique_id "apK-X2jCPtor9NZ-byT1cgAABmw"]
[Sat Aug 29 05:11:27.144548 2026] [cgid:error] [pid 11274:tid 11417] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml, referer: https://redelan.cl
[Sat Aug 29 05:11:27.145765 2026] [security2:error] [pid 11274:tid 11524] [client 68.155.159.216:64008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK-X2bX5DA3XO6e_qQ_kAAAAVk"]
[Sat Aug 29 05:11:27.149257 2026] [security2:error] [pid 11274:tid 11518] [client 20.100.175.163:10201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/i.php"] [unique_id "apK-X2bX5DA3XO6e_qQ_kgAAAVM"]
[Sat Aug 29 05:11:27.151608 2026] [security2:error] [pid 11274:tid 11398] [remote 34.74.130.21:47710] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "redelan.cl"] [uri "/.env.backup"] [unique_id "apK-X2bX5DA3XO6e_qQ_kQABa1Q"]
[Sat Aug 29 05:11:27.159990 2026] [security2:error] [pid 11274:tid 11343] [remote 34.74.130.21:47710] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "redelan.cl"] [uri "/.env.old"] [unique_id "apK-X2bX5DA3XO6e_qQ_lQABgB4"]
[Sat Aug 29 05:11:27.161245 2026] [cgid:error] [pid 11274:tid 11366] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:27.169149 2026] [security2:error] [pid 11274:tid 11427] [remote 34.74.130.21:47710] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "redelan.cl"] [uri "/api/.env"] [unique_id "apK-X2bX5DA3XO6e_qQ_mAABY3E"]
[Sat Aug 29 05:11:27.173656 2026] [security2:error] [pid 11274:tid 11365] [remote 34.74.130.21:47710] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "redelan.cl"] [uri "/.env.bak"] [unique_id "apK-X2bX5DA3XO6e_qQ_mQABTDM"]
[Sat Aug 29 05:11:27.185097 2026] [security2:error] [pid 11274:tid 11529] [client 93.123.109.228:32820] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/.env"] [unique_id "apK-X2bX5DA3XO6e_qQ_mwAAAV4"]
[Sat Aug 29 05:11:27.191002 2026] [security2:error] [pid 1321:tid 1544] [client 195.178.110.247:46806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cris.tntrental.com"] [uri "/index.php"] [unique_id "apK-X2jCPtor9NZ-byT1eAAABnQ"]
[Sat Aug 29 05:11:27.192116 2026] [security2:error] [pid 11274:tid 11546] [client 93.123.109.228:60940] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/laravel/app/.env"] [unique_id "apK-X2bX5DA3XO6e_qQ_nAAAAW4"]
[Sat Aug 29 05:11:27.201074 2026] [security2:error] [pid 1321:tid 1548] [client 20.220.204.93:23979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/66.php"] [unique_id "apK-X2jCPtor9NZ-byT1eQAABnc"]
[Sat Aug 29 05:11:27.207344 2026] [security2:error] [pid 11274:tid 11470] [client 158.23.184.117:11311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/wp-admin/maint.php"] [unique_id "apK-X2bX5DA3XO6e_qQ_nwAAASQ"]
[Sat Aug 29 05:11:27.209211 2026] [security2:error] [pid 1321:tid 1539] [client 93.123.109.228:32782] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK-X2jCPtor9NZ-byT1ewAABm8"]
[Sat Aug 29 05:11:27.212367 2026] [security2:error] [pid 1321:tid 1495] [client 20.52.41.200:2656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK-X2jCPtor9NZ-byT1fAAABkM"]
[Sat Aug 29 05:11:27.231194 2026] [security2:error] [pid 11274:tid 11466] [client 4.205.62.107:64986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/gnmlc.php"] [unique_id "apK-X2bX5DA3XO6e_qQ_oQAAASA"]
[Sat Aug 29 05:11:27.242381 2026] [security2:error] [pid 1321:tid 1504] [client 20.48.250.41:26934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/lanka.php"] [unique_id "apK-X2jCPtor9NZ-byT1hAAABkw"]
[Sat Aug 29 05:11:27.242988 2026] [security2:error] [pid 1321:tid 1564] [client 158.23.147.79:60185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-admin/index.php"] [unique_id "apK-X2jCPtor9NZ-byT1hQAABoc"]
[Sat Aug 29 05:11:27.258869 2026] [security2:error] [pid 1321:tid 1600] [client 93.123.109.228:60774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/service/.env"] [unique_id "apK-X2jCPtor9NZ-byT1iAAABqs"]
[Sat Aug 29 05:11:27.261817 2026] [security2:error] [pid 11274:tid 11558] [client 93.123.109.228:60786] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/services/.env"] [unique_id "apK-X2bX5DA3XO6e_qQ_pQAAAXo"]
[Sat Aug 29 05:11:27.263993 2026] [security2:error] [pid 11274:tid 11521] [client 4.205.62.107:6882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/paypal.php"] [unique_id "apK-X2bX5DA3XO6e_qQ_pgAAAVY"]
[Sat Aug 29 05:11:27.270153 2026] [security2:error] [pid 11274:tid 11484] [client 4.205.62.107:63017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/broadcasting.php"] [unique_id "apK-X2bX5DA3XO6e_qQ_qAAAATE"]
[Sat Aug 29 05:11:27.274086 2026] [security2:error] [pid 11274:tid 11525] [client 20.63.219.114:10348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/alfa-rex1.php"] [unique_id "apK-X2bX5DA3XO6e_qQ_qQAAAVo"]
[Sat Aug 29 05:11:27.310237 2026] [security2:error] [pid 11274:tid 11369] [remote 34.74.130.21:47710] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "redelan.cl"] [uri "/backend/.env"] [unique_id "apK-X2bX5DA3XO6e_qQ_rQABLDc"]
[Sat Aug 29 05:11:27.311422 2026] [security2:error] [pid 11274:tid 11373] [remote 34.74.130.21:47710] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "redelan.cl"] [uri "/config/.env"] [unique_id "apK-X2bX5DA3XO6e_qQ_rwABLDs"]
[Sat Aug 29 05:11:27.313282 2026] [cgid:error] [pid 11274:tid 11374] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:27.313724 2026] [cgid:error] [pid 11274:tid 11371] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:27.327125 2026] [cgid:error] [pid 11274:tid 11395] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:27.331088 2026] [security2:error] [pid 11274:tid 11444] [client 93.123.109.228:60972] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/.env.backup"] [unique_id "apK-X2bX5DA3XO6e_qQ_sgAAAQo"]
[Sat Aug 29 05:11:27.336851 2026] [security2:error] [pid 11274:tid 11481] [client 93.123.109.228:32820] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/.env.bak"] [unique_id "apK-X2bX5DA3XO6e_qQ_swAAAS4"]
[Sat Aug 29 05:11:27.353321 2026] [security2:error] [pid 1321:tid 1579] [client 195.178.110.247:26762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cris.tntrental.com"] [uri "/index.php"] [unique_id "apK-X2jCPtor9NZ-byT1jgAABpY"]
[Sat Aug 29 05:11:27.358514 2026] [security2:error] [pid 1321:tid 1593] [client 158.23.184.117:11301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/wp-includes/num.php"] [unique_id "apK-X2jCPtor9NZ-byT1kAAABqQ"]
[Sat Aug 29 05:11:27.368285 2026] [cgid:error] [pid 11274:tid 11358] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:27.368902 2026] [security2:error] [pid 1321:tid 1525] [client 20.151.200.44:27270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/bgymj.php"] [unique_id "apK-X2jCPtor9NZ-byT1kgAABmE"]
[Sat Aug 29 05:11:27.391022 2026] [security2:error] [pid 1321:tid 1550] [client 34.169.171.101:47270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/.env"] [unique_id "apK-X2jCPtor9NZ-byT1lgAABnk"]
[Sat Aug 29 05:11:27.391160 2026] [security2:error] [pid 11274:tid 11455] [client 34.169.171.101:47264] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/uploads../.env"] [unique_id "apK-X2bX5DA3XO6e_qQ_uQAAARU"]
[Sat Aug 29 05:11:27.391161 2026] [security2:error] [pid 1321:tid 1614] [client 34.169.171.101:47360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/.env"] [unique_id "apK-X2jCPtor9NZ-byT1lwAABrk"]
[Sat Aug 29 05:11:27.391982 2026] [security2:error] [pid 11274:tid 11475] [client 34.169.171.101:47330] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/.docker/.env"] [unique_id "apK-X2bX5DA3XO6e_qQ_ugAAASk"]
[Sat Aug 29 05:11:27.392239 2026] [security2:error] [pid 11274:tid 11572] [client 34.169.171.101:47282] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.forensicengineernj.com"] [uri "/assets../.env"] [unique_id "apK-X2bX5DA3XO6e_qQ_vAAAAYg"]
[Sat Aug 29 05:11:27.392941 2026] [security2:error] [pid 11274:tid 11555] [client 34.169.171.101:47298] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/img../.env"] [unique_id "apK-X2bX5DA3XO6e_qQ_uwAAAXc"]
[Sat Aug 29 05:11:27.392968 2026] [security2:error] [pid 1321:tid 1529] [client 34.169.171.101:47352] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/v2/.env"] [unique_id "apK-X2jCPtor9NZ-byT1mAAABmU"]
[Sat Aug 29 05:11:27.393046 2026] [security2:error] [pid 1321:tid 1602] [client 34.169.171.101:47342] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/v1/.env"] [unique_id "apK-X2jCPtor9NZ-byT1mQAABq0"]
[Sat Aug 29 05:11:27.393067 2026] [security2:error] [pid 11274:tid 11488] [client 34.169.171.101:47544] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/frontend/.env"] [unique_id "apK-X2bX5DA3XO6e_qQ_vQAAATU"]
[Sat Aug 29 05:11:27.393177 2026] [security2:error] [pid 11274:tid 11488] [client 34.169.171.101:47544] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "mail.forensicengineernj.com"] [uri "/frontend/.env"] [unique_id "apK-X2bX5DA3XO6e_qQ_vQAAATU"]
[Sat Aug 29 05:11:27.397826 2026] [security2:error] [pid 11274:tid 11501] [client 34.169.171.101:47412] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/.env.backup"] [unique_id "apK-X2bX5DA3XO6e_qQ_wQAAAUI"]
[Sat Aug 29 05:11:27.398583 2026] [security2:error] [pid 11274:tid 11509] [client 34.169.171.101:47452] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/.env.swp"] [unique_id "apK-X2bX5DA3XO6e_qQ_wgAAAUo"]
[Sat Aug 29 05:11:27.398602 2026] [security2:error] [pid 1321:tid 1603] [client 34.169.171.101:47530] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.forensicengineernj.com"] [uri "/web/.env"] [unique_id "apK-X2jCPtor9NZ-byT1mwAABq4"]
[Sat Aug 29 05:11:27.399224 2026] [security2:error] [pid 11274:tid 11472] [client 34.169.171.101:47314] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/images../.env"] [unique_id "apK-X2bX5DA3XO6e_qQ_xAAAASY"]
[Sat Aug 29 05:11:27.399740 2026] [security2:error] [pid 1321:tid 1610] [client 34.169.171.101:47520] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/server/.env"] [unique_id "apK-X2jCPtor9NZ-byT1nAAABrU"]
[Sat Aug 29 05:11:27.399864 2026] [security2:error] [pid 1321:tid 1610] [client 34.169.171.101:47520] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "mail.forensicengineernj.com"] [uri "/server/.env"] [unique_id "apK-X2jCPtor9NZ-byT1nAAABrU"]
[Sat Aug 29 05:11:27.399968 2026] [security2:error] [pid 11274:tid 11541] [client 34.169.171.101:47402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/.env.bak"] [unique_id "apK-X2bX5DA3XO6e_qQ_wwAAAWo"]
[Sat Aug 29 05:11:27.400876 2026] [security2:error] [pid 1321:tid 1584] [client 34.169.171.101:47560] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/src/.env"] [unique_id "apK-X2jCPtor9NZ-byT1nQAABps"]
[Sat Aug 29 05:11:27.401561 2026] [security2:error] [pid 11274:tid 11518] [client 34.169.171.101:47464] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/api/.env"] [unique_id "apK-X2bX5DA3XO6e_qQ_xgAAAVM"]
[Sat Aug 29 05:11:27.402013 2026] [security2:error] [pid 11274:tid 11543] [client 34.169.171.101:47454] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.forensicengineernj.com"] [uri "/backend/.env"] [unique_id "apK-X2bX5DA3XO6e_qQ_xwAAAWs"]
[Sat Aug 29 05:11:27.402627 2026] [security2:error] [pid 11274:tid 11564] [client 34.169.171.101:47496] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/docker/.env"] [unique_id "apK-X2bX5DA3XO6e_qQ_yAAAAYA"]
[Sat Aug 29 05:11:27.404382 2026] [security2:error] [pid 11274:tid 11474] [client 34.169.171.101:47476] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/config/.env"] [unique_id "apK-X2bX5DA3XO6e_qQ_zQAAASg"]
[Sat Aug 29 05:11:27.404421 2026] [security2:error] [pid 11274:tid 11568] [client 34.169.171.101:47474] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/app/.env"] [unique_id "apK-X2bX5DA3XO6e_qQ_zAAAAYQ"]
[Sat Aug 29 05:11:27.404465 2026] [security2:error] [pid 11274:tid 11534] [client 34.169.171.101:47518] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/laravel/.env"] [unique_id "apK-X2bX5DA3XO6e_qQ_ywAAAWM"]
[Sat Aug 29 05:11:27.404482 2026] [security2:error] [pid 11274:tid 11474] [client 34.169.171.101:47476] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "mail.forensicengineernj.com"] [uri "/config/.env"] [unique_id "apK-X2bX5DA3XO6e_qQ_zQAAASg"]
[Sat Aug 29 05:11:27.404506 2026] [security2:error] [pid 11274:tid 11568] [client 34.169.171.101:47474] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "mail.forensicengineernj.com"] [uri "/app/.env"] [unique_id "apK-X2bX5DA3XO6e_qQ_zAAAAYQ"]
[Sat Aug 29 05:11:27.405090 2026] [security2:error] [pid 11274:tid 11571] [client 34.169.171.101:47406] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/.env.old"] [unique_id "apK-X2bX5DA3XO6e_qQ_zgAAAYc"]
[Sat Aug 29 05:11:27.406226 2026] [security2:error] [pid 11274:tid 11459] [client 34.169.171.101:47516] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.forensicengineernj.com"] [uri "/core/.env"] [unique_id "apK-X2bX5DA3XO6e_qQ_0AAAARk"]
[Sat Aug 29 05:11:27.407511 2026] [security2:error] [pid 1321:tid 1591] [client 20.220.204.93:15522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/f35.php"] [unique_id "apK-X2jCPtor9NZ-byT1nwAABqI"]
[Sat Aug 29 05:11:27.414167 2026] [security2:error] [pid 11274:tid 11536] [client 20.100.175.163:7978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/k.php"] [unique_id "apK-X2bX5DA3XO6e_qQ_1AAAAWU"]
[Sat Aug 29 05:11:27.414846 2026] [security2:error] [pid 11274:tid 11503] [client 68.155.159.216:56724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK-X2bX5DA3XO6e_qQ_1QAAAUQ"]
[Sat Aug 29 05:11:27.418118 2026] [security2:error] [pid 1321:tid 1590] [client 93.123.109.228:60770] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/shared/.env"] [unique_id "apK-X2jCPtor9NZ-byT1oAAABqE"]
[Sat Aug 29 05:11:27.421314 2026] [security2:error] [pid 1321:tid 1439] [remote 34.75.72.74:45028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/key.pem"] [unique_id "apK-X2jCPtor9NZ-byT1ogAGVFE"]
[Sat Aug 29 05:11:27.424888 2026] [security2:error] [pid 1321:tid 1513] [client 93.123.109.228:60680] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/shop/.env"] [unique_id "apK-X2jCPtor9NZ-byT1pQAABlU"]
[Sat Aug 29 05:11:27.426615 2026] [security2:error] [pid 1321:tid 1479] [remote 34.75.72.74:45028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/privatekey.key"] [unique_id "apK-X2jCPtor9NZ-byT1pgAGkHg"]
[Sat Aug 29 05:11:27.431837 2026] [security2:error] [pid 11274:tid 11451] [client 20.63.219.114:17298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-content/autoload_classmap.php"] [unique_id "apK-X2bX5DA3XO6e_qQ_2AAAARE"]
[Sat Aug 29 05:11:27.452183 2026] [security2:error] [pid 11274:tid 11554] [client 158.158.54.35:10164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/deepseek_d.php"] [unique_id "apK-X2bX5DA3XO6e_qQ_4QAAAXY"]
[Sat Aug 29 05:11:27.493031 2026] [security2:error] [pid 11274:tid 11526] [client 40.83.93.50:15861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/post.php"] [unique_id "apK-X2bX5DA3XO6e_qQ_5wAAAVs"]
[Sat Aug 29 05:11:27.504222 2026] [security2:error] [pid 1321:tid 1510] [client 93.123.109.228:53910] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/src/.env"] [unique_id "apK-X2jCPtor9NZ-byT1sAAABlI"]
[Sat Aug 29 05:11:27.513286 2026] [security2:error] [pid 11274:tid 11553] [client 158.23.184.117:11290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/identity.php"] [unique_id "apK-X2bX5DA3XO6e_qQ_7AAAAXU"]
[Sat Aug 29 05:11:27.513868 2026] [security2:error] [pid 1321:tid 1582] [client 158.158.54.35:23213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/24.php"] [unique_id "apK-X2jCPtor9NZ-byT1sQAABpk"]
[Sat Aug 29 05:11:27.521502 2026] [security2:error] [pid 1321:tid 1516] [client 20.240.128.207:19877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/bthil.php"] [unique_id "apK-X2jCPtor9NZ-byT1swAABlg"]
[Sat Aug 29 05:11:27.521501 2026] [security2:error] [pid 11274:tid 11454] [client 20.48.250.41:27620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/gettest.php"] [unique_id "apK-X2bX5DA3XO6e_qQ_7gAAARQ"]
[Sat Aug 29 05:11:27.548563 2026] [security2:error] [pid 11274:tid 11479] [client 20.104.49.130:60769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/wp-blog-header.php"] [unique_id "apK-X2bX5DA3XO6e_qQ_8QAAASw"]
[Sat Aug 29 05:11:27.549943 2026] [security2:error] [pid 11274:tid 11471] [client 20.151.200.44:22216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/inject.php"] [unique_id "apK-X2bX5DA3XO6e_qQ_8gAAASU"]
[Sat Aug 29 05:11:27.559934 2026] [security2:error] [pid 1321:tid 1589] [client 93.123.109.228:32776] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/.env.old"] [unique_id "apK-X2jCPtor9NZ-byT1tQAABqA"]
[Sat Aug 29 05:11:27.561774 2026] [security2:error] [pid 11274:tid 11551] [client 93.123.109.228:32868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/.env.php"] [unique_id "apK-X2bX5DA3XO6e_qQ_8wAAAXM"]
[Sat Aug 29 05:11:27.572083 2026] [security2:error] [pid 11274:tid 11496] [client 20.52.41.200:4648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-themes.php"] [unique_id "apK-X2bX5DA3XO6e_qQ_9AAAAT0"]
[Sat Aug 29 05:11:27.605117 2026] [cgid:error] [pid 11274:tid 11407] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:27.609046 2026] [security2:error] [pid 11274:tid 11469] [client 4.205.62.107:62757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/register.php"] [unique_id "apK-X2bX5DA3XO6e_qQ_-gAAASM"]
[Sat Aug 29 05:11:27.611353 2026] [security2:error] [pid 11274:tid 11545] [client 20.220.204.93:18057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/wen.php"] [unique_id "apK-X2bX5DA3XO6e_qQ__AAAAW0"]
[Sat Aug 29 05:11:27.629233 2026] [security2:error] [pid 11274:tid 11572] [client 93.123.109.228:60802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/.wp-config.php.swp"] [unique_id "apK-X2bX5DA3XO6e_qQ__gAAAYg"]
[Sat Aug 29 05:11:27.632367 2026] [security2:error] [pid 11274:tid 11555] [client 158.23.147.79:50112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK-X2bX5DA3XO6e_qRAAAAAAXc"]
[Sat Aug 29 05:11:27.639540 2026] [cgid:error] [pid 11274:tid 11406] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:27.641865 2026] [cgid:error] [pid 11274:tid 11439] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:27.642322 2026] [cgid:error] [pid 11274:tid 11394] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:27.643214 2026] [security2:error] [pid 11274:tid 11509] [client 4.205.62.107:58428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/thui.php"] [unique_id "apK-X2bX5DA3XO6e_qRABwAAAUo"]
[Sat Aug 29 05:11:27.643936 2026] [security2:error] [pid 1321:tid 1528] [client 20.100.175.163:26880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/deepseek_d.php"] [unique_id "apK-X2jCPtor9NZ-byT1wQAABmQ"]
[Sat Aug 29 05:11:27.644303 2026] [security2:error] [pid 1321:tid 1495] [client 93.123.109.228:60810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/ADMIN/.env"] [unique_id "apK-X2jCPtor9NZ-byT1wAAABkM"]
[Sat Aug 29 05:11:27.644378 2026] [cgid:error] [pid 11274:tid 11397] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:27.644551 2026] [cgid:error] [pid 11274:tid 11330] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:27.654957 2026] [security2:error] [pid 11274:tid 11472] [client 93.123.109.228:32774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/.env.swp"] [unique_id "apK-X2bX5DA3XO6e_qRACQAAASY"]
[Sat Aug 29 05:11:27.668816 2026] [security2:error] [pid 11274:tid 11400] [remote 34.74.130.21:47710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 21.130.74.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "redelan.cl"] [uri "/wp-login.php"] [unique_id "apK-X2bX5DA3XO6e_qQ__QABbFY"]
[Sat Aug 29 05:11:27.673742 2026] [core:error] [pid 11274:tid 11565] [client 20.52.41.200:2197] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:27.673760 2026] [core:error] [pid 11274:tid 11565] [client 20.52.41.200:2197] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:27.699399 2026] [security2:error] [pid 11274:tid 11468] [client 20.48.250.41:27606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/35.php"] [unique_id "apK-X2bX5DA3XO6e_qRADgAAASI"]
[Sat Aug 29 05:11:27.699454 2026] [security2:error] [pid 1321:tid 1567] [client 40.83.93.50:3916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/about.php525"] [unique_id "apK-X2jCPtor9NZ-byT1xAAABoo"]
[Sat Aug 29 05:11:27.707836 2026] [security2:error] [pid 11274:tid 11512] [client 93.123.109.228:32852] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/.env~"] [unique_id "apK-X2bX5DA3XO6e_qRAEQAAAU0"]
[Sat Aug 29 05:11:27.719085 2026] [autoindex:error] [pid 11274:tid 11571] [client 158.23.184.117:0] AH01276: Cannot serve directory /home1/barhashi/public_html/sarahgeving/wp-includes/ID3/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:11:27.739984 2026] [security2:error] [pid 1321:tid 1538] [client 20.220.204.93:18075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/inc.php"] [unique_id "apK-X2jCPtor9NZ-byT1zgAABm4"]
[Sat Aug 29 05:11:27.742127 2026] [security2:error] [pid 1321:tid 1533] [client 20.63.219.114:8897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/headerg.php"] [unique_id "apK-X2jCPtor9NZ-byT10AAABmk"]
[Sat Aug 29 05:11:27.757640 2026] [security2:error] [pid 11274:tid 11549] [client 93.123.109.228:60838] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/API/.env"] [unique_id "apK-X2bX5DA3XO6e_qRAGAAAAXE"]
[Sat Aug 29 05:11:27.775112 2026] [security2:error] [pid 11274:tid 11554] [client 158.23.184.117:11552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/Radio.php"] [unique_id "apK-X2bX5DA3XO6e_qRAGgAAAXY"]
[Sat Aug 29 05:11:27.812042 2026] [security2:error] [pid 11274:tid 11534] [client 20.63.219.114:13451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-content/cache/min/1/wp-content/admin.php"] [unique_id "apK-X2bX5DA3XO6e_qRAHAAAAWM"]
[Sat Aug 29 05:11:27.821493 2026] [security2:error] [pid 11274:tid 11539] [client 68.155.159.216:49042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/simple.php"] [unique_id "apK-X2bX5DA3XO6e_qRAHgAAAWg"]
[Sat Aug 29 05:11:27.842053 2026] [security2:error] [pid 11274:tid 11420] [remote 34.74.130.21:47710] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "redelan.cl"] [uri "/.github/.env"] [unique_id "apK-X2bX5DA3XO6e_qRAIQABLGo"]
[Sat Aug 29 05:11:27.844319 2026] [cgid:error] [pid 11274:tid 11416] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:27.844367 2026] [cgid:error] [pid 11274:tid 11393] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:27.845532 2026] [cgid:error] [pid 11274:tid 11361] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:27.853973 2026] [security2:error] [pid 11274:tid 11471] [client 93.123.109.228:60856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/APP/.env"] [unique_id "apK-X2bX5DA3XO6e_qRAJQAAASU"]
[Sat Aug 29 05:11:27.854773 2026] [security2:error] [pid 11274:tid 11489] [client 93.123.109.228:60908] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/Api/.env"] [unique_id "apK-X2bX5DA3XO6e_qRAJgAAATY"]
[Sat Aug 29 05:11:27.867780 2026] [security2:error] [pid 1321:tid 1596] [client 93.123.109.228:60828] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/BACK/.env"] [unique_id "apK-X2jCPtor9NZ-byT12QAABqc"]
[Sat Aug 29 05:11:27.870467 2026] [security2:error] [pid 1321:tid 1593] [client 68.155.159.216:14230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK-X2jCPtor9NZ-byT12gAABqQ"]
[Sat Aug 29 05:11:27.889134 2026] [security2:error] [pid 1321:tid 1553] [client 93.123.109.228:32776] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.bak"] [unique_id "apK-X2jCPtor9NZ-byT13QAABnw"]
[Sat Aug 29 05:11:27.899250 2026] [security2:error] [pid 11274:tid 11475] [client 93.123.109.228:60874] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/BACKEND/.env"] [unique_id "apK-X2bX5DA3XO6e_qRAKQAAASk"]
[Sat Aug 29 05:11:27.899307 2026] [security2:error] [pid 11274:tid 11514] [client 20.48.250.41:27545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/maraz.php"] [unique_id "apK-X2bX5DA3XO6e_qRAKgAAAU8"]
[Sat Aug 29 05:11:27.903742 2026] [security2:error] [pid 1321:tid 1614] [client 93.123.109.228:60996] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config~"] [unique_id "apK-X2jCPtor9NZ-byT13gAABrk"]
[Sat Aug 29 05:11:27.911189 2026] [security2:error] [pid 1321:tid 1602] [client 4.205.62.107:59091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/ws62.php"] [unique_id "apK-X2jCPtor9NZ-byT14QAABq0"]
[Sat Aug 29 05:11:27.912211 2026] [security2:error] [pid 11274:tid 11501] [client 93.123.109.228:60838] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/BE/.env"] [unique_id "apK-X2bX5DA3XO6e_qRALAAAAUI"]
[Sat Aug 29 05:11:27.919242 2026] [security2:error] [pid 11274:tid 11490] [client 20.100.175.163:31214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/root.php"] [unique_id "apK-X2bX5DA3XO6e_qRALgAAATc"]
[Sat Aug 29 05:11:27.924633 2026] [security2:error] [pid 11274:tid 11537] [client 93.123.109.228:60836] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/Backend/.env"] [unique_id "apK-X2bX5DA3XO6e_qRAMwAAAWY"]
[Sat Aug 29 05:11:27.926723 2026] [security2:error] [pid 11274:tid 11509] [client 93.123.109.228:32820] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.old"] [unique_id "apK-X2bX5DA3XO6e_qRALQAAAUo"]
[Sat Aug 29 05:11:27.936138 2026] [security2:error] [pid 1321:tid 1499] [client 20.220.204.93:29554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/6bcwiqwj.php"] [unique_id "apK-X2jCPtor9NZ-byT16AAABkc"]
[Sat Aug 29 05:11:27.938237 2026] [security2:error] [pid 1321:tid 1577] [client 93.123.109.228:60896] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/Be/.env"] [unique_id "apK-X2jCPtor9NZ-byT15wAABpQ"]
[Sat Aug 29 05:11:27.943382 2026] [security2:error] [pid 1321:tid 1591] [client 93.123.109.228:60774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/srv/.env"] [unique_id "apK-X2jCPtor9NZ-byT16gAABqI"]
[Sat Aug 29 05:11:27.947067 2026] [cgid:error] [pid 11274:tid 11414] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:27.953480 2026] [cgid:error] [pid 11274:tid 11353] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:27.953844 2026] [cgid:error] [pid 11274:tid 11422] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:27.954299 2026] [cgid:error] [pid 11274:tid 11415] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:27.954336 2026] [cgid:error] [pid 11274:tid 11331] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:27.955100 2026] [cgid:error] [pid 11274:tid 11421] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:27.955267 2026] [cgid:error] [pid 11274:tid 11414] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:27.955542 2026] [cgid:error] [pid 11274:tid 11347] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:27.986465 2026] [security2:error] [pid 11274:tid 11553] [client 40.83.93.50:15863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/csv.php"] [unique_id "apK-X2bX5DA3XO6e_qRAPgAAAXU"]
[Sat Aug 29 05:11:27.994255 2026] [cgid:error] [pid 11274:tid 11325] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:27.995282 2026] [cgid:error] [pid 11274:tid 11333] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:28.025695 2026] [security2:error] [pid 11274:tid 11511] [client 158.23.184.117:11554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/wp-includes/Requests/Exception/file.php"] [unique_id "apK-YGbX5DA3XO6e_qRARwAAAUw"]
[Sat Aug 29 05:11:28.028448 2026] [security2:error] [pid 1321:tid 1597] [client 20.151.200.44:65213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/mga.php"] [unique_id "apK-YGjCPtor9NZ-byT18AAABqg"]
[Sat Aug 29 05:11:28.032692 2026] [security2:error] [pid 11274:tid 11452] [client 20.52.41.200:4646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-trackback.php"] [unique_id "apK-YGbX5DA3XO6e_qRASgAAARI"]
[Sat Aug 29 05:11:28.066386 2026] [security2:error] [pid 1321:tid 1510] [client 20.104.49.130:60746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/ty.php"] [unique_id "apK-YGjCPtor9NZ-byT19gAABlI"]
[Sat Aug 29 05:11:28.071386 2026] [security2:error] [pid 1321:tid 1500] [client 158.23.147.79:59467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-includes/plugins.php"] [unique_id "apK-YGjCPtor9NZ-byT19wAABkg"]
[Sat Aug 29 05:11:28.075152 2026] [security2:error] [pid 11274:tid 11503] [client 158.158.54.35:17692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "apK-YGbX5DA3XO6e_qRASwAAAUQ"]
[Sat Aug 29 05:11:28.093466 2026] [http2:warn] [pid 1017536:tid 1017714] [client 57.141.14.73:47554] h2_stream(1017536-369-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:11:28.100307 2026] [security2:error] [pid 1321:tid 1583] [client 93.123.109.228:60774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/stg/.env"] [unique_id "apK-YGjCPtor9NZ-byT1-QAABpo"]
[Sat Aug 29 05:11:28.104642 2026] [security2:error] [pid 1321:tid 1601] [client 20.63.219.114:9522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/meta.php"] [unique_id "apK-YGjCPtor9NZ-byT1-wAABqw"]
[Sat Aug 29 05:11:28.109649 2026] [security2:error] [pid 1321:tid 1516] [client 93.123.109.228:60702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/stage/.env"] [unique_id "apK-YGjCPtor9NZ-byT1_AAABlg"]
[Sat Aug 29 05:11:28.113305 2026] [security2:error] [pid 1321:tid 1542] [client 20.220.204.93:16269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/easy.php"] [unique_id "apK-YGjCPtor9NZ-byT1_QAABnI"]
[Sat Aug 29 05:11:28.118869 2026] [security2:error] [pid 1321:tid 1536] [client 158.158.54.35:12387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK-YGjCPtor9NZ-byT1_gAABmw"]
[Sat Aug 29 05:11:28.131764 2026] [security2:error] [pid 11274:tid 11476] [client 20.48.250.41:27616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/kbfr.php"] [unique_id "apK-YGbX5DA3XO6e_qRATwAAASo"]
[Sat Aug 29 05:11:28.134308 2026] [core:error] [pid 1321:tid 1573] [client 20.52.41.200:2631] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:28.134328 2026] [core:error] [pid 1321:tid 1573] [client 20.52.41.200:2631] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:28.138710 2026] [security2:error] [pid 11274:tid 11519] [client 20.104.49.130:63490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.timportlock.net"] [uri "/ops.php"] [unique_id "apK-YGbX5DA3XO6e_qRAUgAAAVQ"]
[Sat Aug 29 05:11:28.139862 2026] [core:error] [pid 11274:tid 11569] [client 20.100.175.163:4662] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:28.139878 2026] [core:error] [pid 11274:tid 11569] [client 20.100.175.163:4662] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:28.169685 2026] [security2:error] [pid 1321:tid 1565] [client 20.104.49.130:48773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/worksec.php"] [unique_id "apK-YGjCPtor9NZ-byT2AAAABog"]
[Sat Aug 29 05:11:28.175407 2026] [security2:error] [pid 11274:tid 11536] [client 20.63.219.114:4127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-content/classwithtostring.php"] [unique_id "apK-YGbX5DA3XO6e_qRAVAAAAWU"]
[Sat Aug 29 05:11:28.183960 2026] [security2:error] [pid 11274:tid 11517] [client 20.151.200.44:62150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/pentest.php"] [unique_id "apK-YGbX5DA3XO6e_qRAVwAAAVI"]
[Sat Aug 29 05:11:28.197609 2026] [security2:error] [pid 11274:tid 11554] [client 20.240.128.207:18666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/cv.php"] [unique_id "apK-YGbX5DA3XO6e_qRAWQAAAXY"]
[Sat Aug 29 05:11:28.207295 2026] [security2:error] [pid 11274:tid 11484] [client 4.205.62.107:61645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/8.php"] [unique_id "apK-YGbX5DA3XO6e_qRAWwAAATE"]
[Sat Aug 29 05:11:28.208200 2026] [security2:error] [pid 1321:tid 1604] [client 40.83.93.50:6947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/spip.php"] [unique_id "apK-YGjCPtor9NZ-byT2BAAABq8"]
[Sat Aug 29 05:11:28.221176 2026] [security2:error] [pid 1321:tid 1384] [remote 34.75.72.74:45028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/.env"] [unique_id "apK-YGjCPtor9NZ-byT2BgAGTho"]
[Sat Aug 29 05:11:28.224593 2026] [security2:error] [pid 1321:tid 1421] [remote 34.75.72.74:45028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2froot/.env"] [unique_id "apK-YGjCPtor9NZ-byT2BwAGdj8"]
[Sat Aug 29 05:11:28.225413 2026] [security2:error] [pid 1321:tid 1450] [remote 34.75.72.74:45028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/@fs/src/.env"] [unique_id "apK-YGjCPtor9NZ-byT2CQAGdls"]
[Sat Aug 29 05:11:28.228081 2026] [security2:error] [pid 1321:tid 1464] [remote 34.75.72.74:45028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/@fs/app/.env"] [unique_id "apK-YGjCPtor9NZ-byT2CgAGdmk"]
[Sat Aug 29 05:11:28.248504 2026] [security2:error] [pid 11274:tid 11534] [client 68.155.159.216:1895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/lock.php"] [unique_id "apK-YGbX5DA3XO6e_qRAXAAAAWM"]
[Sat Aug 29 05:11:28.263313 2026] [security2:error] [pid 1321:tid 1517] [client 158.23.184.117:65157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/wp-admin/add.php"] [unique_id "apK-YGjCPtor9NZ-byT2DgAABlk"]
[Sat Aug 29 05:11:28.293378 2026] [security2:error] [pid 11274:tid 11516] [client 20.48.250.41:27546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/wp-act.php"] [unique_id "apK-YGbX5DA3XO6e_qRAXwAAAVE"]
[Sat Aug 29 05:11:28.294608 2026] [security2:error] [pid 1321:tid 1498] [client 20.220.204.93:17692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/fresh3.php"] [unique_id "apK-YGjCPtor9NZ-byT2EQAABkY"]
[Sat Aug 29 05:11:28.307465 2026] [security2:error] [pid 1321:tid 1504] [client 93.123.109.228:60770] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/staging/.env"] [unique_id "apK-YGjCPtor9NZ-byT2EwAABkw"]
[Sat Aug 29 05:11:28.366181 2026] [security2:error] [pid 11274:tid 11481] [client 4.205.62.107:64265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/koiy.php"] [unique_id "apK-YGbX5DA3XO6e_qRAZwAAAS4"]
[Sat Aug 29 05:11:28.377822 2026] [security2:error] [pid 11274:tid 11448] [client 45.83.178.43:58118] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "goodtogo.store"] [uri "/webapp/xmlrpc.php"] [unique_id "apK-X2bX5DA3XO6e_qQ_-wAAAQ4"]
[Sat Aug 29 05:11:28.402597 2026] [security2:error] [pid 1321:tid 1538] [client 4.205.62.107:6892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/userfuns.php"] [unique_id "apK-YGjCPtor9NZ-byT2GAAABm4"]
[Sat Aug 29 05:11:28.405895 2026] [security2:error] [pid 1321:tid 1533] [client 20.104.18.15:15122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/inx.php"] [unique_id "apK-YGjCPtor9NZ-byT2GQAABmk"]
[Sat Aug 29 05:11:28.411557 2026] [security2:error] [pid 11274:tid 11540] [client 4.205.62.107:63270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/aws_config.php"] [unique_id "apK-YGbX5DA3XO6e_qRAawAAAWk"]
[Sat Aug 29 05:11:28.413593 2026] [security2:error] [pid 1321:tid 1515] [client 20.100.175.163:30358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/p.php"] [unique_id "apK-YGjCPtor9NZ-byT2HQAABlc"]
[Sat Aug 29 05:11:28.416317 2026] [security2:error] [pid 11274:tid 11493] [client 158.23.184.117:11299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/wp-includes/assets/about.php"] [unique_id "apK-YGbX5DA3XO6e_qRAbAAAATo"]
[Sat Aug 29 05:11:28.423648 2026] [cgid:error] [pid 11274:tid 11408] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:28.423648 2026] [cgid:error] [pid 11274:tid 11379] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:28.440179 2026] [cgid:error] [pid 11274:tid 11435] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:28.442505 2026] [security2:error] [pid 1321:tid 1537] [client 93.123.109.228:60702] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/stripe/.env"] [unique_id "apK-YGjCPtor9NZ-byT2HgAABm0"]
[Sat Aug 29 05:11:28.442947 2026] [security2:error] [pid 11274:tid 11555] [client 93.123.109.228:60692] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/terraform.tfstate.backup"] [unique_id "apK-YGbX5DA3XO6e_qRAcgAAAXc"]
[Sat Aug 29 05:11:28.449228 2026] [cgid:error] [pid 11274:tid 11442] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:28.451536 2026] [cgid:error] [pid 11274:tid 11323] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:28.453349 2026] [cgid:error] [pid 11274:tid 11399] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:28.455586 2026] [cgid:error] [pid 11274:tid 11424] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:28.456076 2026] [cgid:error] [pid 11274:tid 11385] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:28.456077 2026] [cgid:error] [pid 11274:tid 11428] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:28.456083 2026] [cgid:error] [pid 11274:tid 11404] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:28.462203 2026] [security2:error] [pid 1321:tid 1405] [remote 34.75.72.74:45028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/.env"] [unique_id "apK-YGjCPtor9NZ-byT2JAAGey8"]
[Sat Aug 29 05:11:28.462834 2026] [security2:error] [pid 1321:tid 1443] [remote 34.75.72.74:45028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/media../.env"] [unique_id "apK-YGjCPtor9NZ-byT2JQAGe1U"]
[Sat Aug 29 05:11:28.468621 2026] [security2:error] [pid 11274:tid 11509] [client 93.123.109.228:60724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/test.php"] [unique_id "apK-YGbX5DA3XO6e_qRAewAAAUo"]
[Sat Aug 29 05:11:28.473289 2026] [cgid:error] [pid 11274:tid 11362] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:28.473327 2026] [cgid:error] [pid 11274:tid 11380] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:28.487804 2026] [security2:error] [pid 1321:tid 1360] [remote 34.75.72.74:45028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/static../.env"] [unique_id "apK-YGjCPtor9NZ-byT2KAAGpwQ"]
[Sat Aug 29 05:11:28.488809 2026] [security2:error] [pid 1321:tid 1469] [remote 34.75.72.74:45028] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "charleneongreen.com"] [uri "/@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ"] [unique_id "apK-YGjCPtor9NZ-byT2KgAGp24"]
[Sat Aug 29 05:11:28.490169 2026] [core:error] [pid 1321:tid 1567] [client 20.52.41.200:4776] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:28.490181 2026] [core:error] [pid 1321:tid 1567] [client 20.52.41.200:4776] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:28.492935 2026] [security2:error] [pid 11274:tid 11454] [client 20.220.204.93:16520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/bgymj.php"] [unique_id "apK-YGbX5DA3XO6e_qRAfgAAARQ"]
[Sat Aug 29 05:11:28.501512 2026] [security2:error] [pid 11274:tid 11461] [client 20.104.18.15:43846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/sao.php"] [unique_id "apK-YGbX5DA3XO6e_qRAgAAAARs"]
[Sat Aug 29 05:11:28.502776 2026] [security2:error] [pid 1321:tid 1539] [client 20.63.219.114:19939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/dxc.php"] [unique_id "apK-YGjCPtor9NZ-byT2KwAABm8"]
[Sat Aug 29 05:11:28.515170 2026] [security2:error] [pid 11274:tid 11504] [client 68.155.159.216:56776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK-YGbX5DA3XO6e_qRAgQAAAUU"]
[Sat Aug 29 05:11:28.529087 2026] [security2:error] [pid 11274:tid 11563] [client 40.83.93.50:15854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/fox.php"] [unique_id "apK-YGbX5DA3XO6e_qRAgwAAAX8"]
[Sat Aug 29 05:11:28.532418 2026] [security2:error] [pid 1321:tid 1532] [client 20.63.219.114:4102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-content/config.php"] [unique_id "apK-YGjCPtor9NZ-byT2LwAABmg"]
[Sat Aug 29 05:11:28.544911 2026] [security2:error] [pid 1321:tid 1550] [client 68.155.159.216:1878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK-YGjCPtor9NZ-byT2MQAABnk"]
[Sat Aug 29 05:11:28.558391 2026] [security2:error] [pid 11274:tid 11518] [client 20.48.250.41:27626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/24.php"] [unique_id "apK-YGbX5DA3XO6e_qRAhwAAAVM"]
[Sat Aug 29 05:11:28.560090 2026] [security2:error] [pid 11274:tid 11541] [client 158.23.184.117:65179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/wp-content/themes/twentytwentythree.php"] [unique_id "apK-YGbX5DA3XO6e_qRAiAAAAWo"]
[Sat Aug 29 05:11:28.560649 2026] [security2:error] [pid 11274:tid 11543] [client 20.104.18.15:15150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/vpn.php"] [unique_id "apK-YGbX5DA3XO6e_qRAiQAAAWs"]
[Sat Aug 29 05:11:28.585431 2026] [security2:error] [pid 11274:tid 11475] [client 20.52.41.200:2879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK-YGbX5DA3XO6e_qRAjAAAASk"]
[Sat Aug 29 05:11:28.631276 2026] [security2:error] [pid 11274:tid 11537] [client 20.100.175.163:4662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "apK-YGbX5DA3XO6e_qRAjgAAAWY"]
[Sat Aug 29 05:11:28.633335 2026] [security2:error] [pid 11274:tid 11506] [client 20.104.18.15:43301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/dapa.php"] [unique_id "apK-YGbX5DA3XO6e_qRAjwAAAUc"]
[Sat Aug 29 05:11:28.643087 2026] [security2:error] [pid 1321:tid 1584] [client 93.123.109.228:60606] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/v2/.env"] [unique_id "apK-YGjCPtor9NZ-byT2NAAABps"]
[Sat Aug 29 05:11:28.643478 2026] [security2:error] [pid 11274:tid 11524] [client 93.123.109.228:60692] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/v1/.env"] [unique_id "apK-YGbX5DA3XO6e_qRAkQAAAVk"]
[Sat Aug 29 05:11:28.645336 2026] [security2:error] [pid 1321:tid 1609] [client 20.151.200.44:65159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/inwp.php"] [unique_id "apK-YGjCPtor9NZ-byT2NgAABrQ"]
[Sat Aug 29 05:11:28.652539 2026] [security2:error] [pid 11274:tid 11497] [client 93.123.109.228:60786] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/user/.env"] [unique_id "apK-YGbX5DA3XO6e_qRAkgAAAT4"]
[Sat Aug 29 05:11:28.680662 2026] [security2:error] [pid 11274:tid 11473] [client 158.158.54.35:23216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-content/themes/pridmag/il.php"] [unique_id "apK-YGbX5DA3XO6e_qRAlQAAASc"]
[Sat Aug 29 05:11:28.684499 2026] [security2:error] [pid 1321:tid 1489] [client 93.123.109.228:60642] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/v3/.env"] [unique_id "apK-YGjCPtor9NZ-byT2OgAABj0"]
[Sat Aug 29 05:11:28.686869 2026] [security2:error] [pid 11274:tid 11498] [client 20.240.128.207:4134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/.trash7206/index.php"] [unique_id "apK-YGbX5DA3XO6e_qRAlwAAAT8"]
[Sat Aug 29 05:11:28.697528 2026] [security2:error] [pid 11274:tid 11505] [client 20.48.250.41:27587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/155.php"] [unique_id "apK-YGbX5DA3XO6e_qRAmAAAAUY"]
[Sat Aug 29 05:11:28.698370 2026] [security2:error] [pid 1321:tid 1586] [client 20.240.128.207:12782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-content/packed.php"] [unique_id "apK-YGjCPtor9NZ-byT2PAAABp0"]
[Sat Aug 29 05:11:28.699092 2026] [security2:error] [pid 1321:tid 1613] [client 20.220.204.93:27423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/ws69.php"] [unique_id "apK-YGjCPtor9NZ-byT2PQAABrg"]
[Sat Aug 29 05:11:28.713566 2026] [security2:error] [pid 1321:tid 1519] [client 93.123.109.228:53860] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/test/.env"] [unique_id "apK-YGjCPtor9NZ-byT2QQAABls"]
[Sat Aug 29 05:11:28.716248 2026] [security2:error] [pid 1321:tid 1614] [client 40.83.93.50:10005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/backup.php"] [unique_id "apK-YGjCPtor9NZ-byT2QgAABrk"]
[Sat Aug 29 05:11:28.738526 2026] [cgid:error] [pid 11274:tid 11336] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:28.747573 2026] [security2:error] [pid 1321:tid 1581] [client 4.205.62.107:60333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/xqq.php"] [unique_id "apK-YGjCPtor9NZ-byT2RwAABpg"]
[Sat Aug 29 05:11:28.749873 2026] [autoindex:error] [pid 11274:tid 11521] [client 158.23.184.117:0] AH01276: Cannot serve directory /home1/barhashi/public_html/sarahgeving/wp-includes/pomo/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:11:28.776558 2026] [security2:error] [pid 11274:tid 11488] [client 20.104.18.15:43796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/wp-content/l.php"] [unique_id "apK-YGbX5DA3XO6e_qRApwAAATU"]
[Sat Aug 29 05:11:28.779663 2026] [security2:error] [pid 11274:tid 11525] [client 4.205.62.107:4984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/public/bnn_.php.php"] [unique_id "apK-YGbX5DA3XO6e_qRAqAAAAVo"]
[Sat Aug 29 05:11:28.781145 2026] [security2:error] [pid 1321:tid 1607] [client 158.23.147.79:49814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/file.php"] [unique_id "apK-YGjCPtor9NZ-byT2SwAABrI"]
[Sat Aug 29 05:11:28.812598 2026] [security2:error] [pid 11274:tid 11568] [client 20.104.18.15:15121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/shiny.php"] [unique_id "apK-YGbX5DA3XO6e_qRAqgAAAYQ"]
[Sat Aug 29 05:11:28.812598 2026] [security2:error] [pid 1321:tid 1583] [client 158.23.184.117:65153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/wp-content/languages/themes/num.php"] [unique_id "apK-YGjCPtor9NZ-byT2TQAABpo"]
[Sat Aug 29 05:11:28.813971 2026] [security2:error] [pid 11274:tid 11486] [client 93.123.109.228:60874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK-YGbX5DA3XO6e_qRAqwAAATM"]
[Sat Aug 29 05:11:28.835279 2026] [security2:error] [pid 1321:tid 1542] [client 20.48.250.41:26926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/file.php"] [unique_id "apK-YGjCPtor9NZ-byT2TgAABnI"]
[Sat Aug 29 05:11:28.871875 2026] [security2:error] [pid 11274:tid 11389] [remote 34.75.72.74:45038] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/static/.env"] [unique_id "apK-YGbX5DA3XO6e_qRAsgABaUs"]
[Sat Aug 29 05:11:28.871985 2026] [security2:error] [pid 11274:tid 11429] [remote 34.75.72.74:45038] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/static/app/.env"] [unique_id "apK-YGbX5DA3XO6e_qRAsQABaXM"]
[Sat Aug 29 05:11:28.872009 2026] [security2:error] [pid 11274:tid 11436] [remote 34.75.72.74:45038] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/.env"] [unique_id "apK-YGbX5DA3XO6e_qRAswABaXk"]
[Sat Aug 29 05:11:28.872022 2026] [security2:error] [pid 11274:tid 11423] [remote 34.75.72.74:45038] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/files../.env"] [unique_id "apK-YGbX5DA3XO6e_qRAtQABaW0"]
[Sat Aug 29 05:11:28.872060 2026] [security2:error] [pid 11274:tid 11319] [remote 34.75.72.74:45038] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/static/home/user/.env"] [unique_id "apK-YGbX5DA3XO6e_qRAtAABaQY"]
[Sat Aug 29 05:11:28.873174 2026] [security2:error] [pid 11274:tid 11342] [remote 34.75.72.74:45038] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/.env"] [unique_id "apK-YGbX5DA3XO6e_qRAtgABaR0"]
[Sat Aug 29 05:11:28.874616 2026] [security2:error] [pid 11274:tid 11529] [client 93.123.109.228:60936] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/admin-app/.env"] [unique_id "apK-YGbX5DA3XO6e_qRAtwAAAV4"]
[Sat Aug 29 05:11:28.886268 2026] [security2:error] [pid 11274:tid 11550] [client 20.151.200.44:27152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/fh26.php"] [unique_id "apK-YGbX5DA3XO6e_qRAuQAAAXI"]
[Sat Aug 29 05:11:28.893560 2026] [security2:error] [pid 1321:tid 1582] [client 20.63.219.114:17323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-content/cong.php"] [unique_id "apK-YGjCPtor9NZ-byT2UgAABpk"]
[Sat Aug 29 05:11:28.895958 2026] [security2:error] [pid 11274:tid 11514] [client 20.220.204.93:16257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/ccs.php"] [unique_id "apK-YGbX5DA3XO6e_qRAvAAAAU8"]
[Sat Aug 29 05:11:28.898480 2026] [security2:error] [pid 1321:tid 1545] [client 158.158.54.35:15297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK-YGjCPtor9NZ-byT2UwAABnU"]
[Sat Aug 29 05:11:28.925026 2026] [security2:error] [pid 11274:tid 11545] [client 68.155.159.216:49108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/wp-admin/about.php"] [unique_id "apK-YGbX5DA3XO6e_qRAwAAAAW0"]
[Sat Aug 29 05:11:28.925783 2026] [security2:error] [pid 11274:tid 11546] [client 20.104.18.15:43882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/wp-admin/w.php"] [unique_id "apK-YGbX5DA3XO6e_qRAwQAAAW4"]
[Sat Aug 29 05:11:28.926733 2026] [security2:error] [pid 11274:tid 11522] [client 20.100.175.163:33719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/a1.php"] [unique_id "apK-YGbX5DA3XO6e_qRAvwAAAVc"]
[Sat Aug 29 05:11:28.945411 2026] [security2:error] [pid 11274:tid 11508] [client 20.52.41.200:4776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/222.php"] [unique_id "apK-YGbX5DA3XO6e_qRAwgAAAUk"]
[Sat Aug 29 05:11:28.947818 2026] [security2:error] [pid 11274:tid 11445] [client 20.151.200.44:22225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/ad1.php"] [unique_id "apK-YGbX5DA3XO6e_qRAxQAAAQs"]
[Sat Aug 29 05:11:28.951784 2026] [security2:error] [pid 11274:tid 11451] [client 20.151.200.44:61604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/6y7t.php"] [unique_id "apK-YGbX5DA3XO6e_qRAxgAAARE"]
[Sat Aug 29 05:11:28.960490 2026] [security2:error] [pid 11274:tid 11454] [client 20.104.18.15:15046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/goods.php"] [unique_id "apK-YGbX5DA3XO6e_qRAyAAAARQ"]
[Sat Aug 29 05:11:28.962408 2026] [security2:error] [pid 1321:tid 1488] [client 158.23.184.117:11295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/wp.php"] [unique_id "apK-YGjCPtor9NZ-byT2XAAABjw"]
[Sat Aug 29 05:11:28.965137 2026] [security2:error] [pid 11274:tid 11470] [client 20.63.219.114:2267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/wp-2019.php"] [unique_id "apK-YGbX5DA3XO6e_qRAyQAAASQ"]
[Sat Aug 29 05:11:28.976689 2026] [security2:error] [pid 11274:tid 11464] [client 20.48.250.41:27623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK-YGbX5DA3XO6e_qRAzAAAAR4"]
[Sat Aug 29 05:11:28.979099 2026] [security2:error] [pid 11274:tid 11412] [remote 34.75.72.74:45038] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/.env"] [unique_id "apK-YGbX5DA3XO6e_qRAzQABRWI"]
[Sat Aug 29 05:11:28.980617 2026] [security2:error] [pid 11274:tid 11449] [client 149.34.210.141:53029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-YGbX5DA3XO6e_qRAzgAAAQ8"]
[Sat Aug 29 05:11:28.980696 2026] [security2:error] [pid 11274:tid 11449] [client 149.34.210.141:53029] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-YGbX5DA3XO6e_qRAzgAAAQ8"]
[Sat Aug 29 05:11:28.988748 2026] [security2:error] [pid 11274:tid 11518] [client 68.155.159.216:14306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-includes/plugins.php"] [unique_id "apK-YGbX5DA3XO6e_qRA0AAAAVM"]
[Sat Aug 29 05:11:29.014147 2026] [security2:error] [pid 11274:tid 11507] [client 40.83.93.50:15859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/disagraeosc.php"] [unique_id "apK-YWbX5DA3XO6e_qRA0gAAAUg"]
[Sat Aug 29 05:11:29.023890 2026] [security2:error] [pid 11274:tid 11530] [client 20.240.128.207:5187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wk/index.php"] [unique_id "apK-YWbX5DA3XO6e_qRA1QAAAV8"]
[Sat Aug 29 05:11:29.032501 2026] [security2:error] [pid 1321:tid 1498] [client 93.123.109.228:32934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/admin/phpinfo.php"] [unique_id "apK-YWjCPtor9NZ-byT2XwAABkY"]
[Sat Aug 29 05:11:29.036183 2026] [security2:error] [pid 11274:tid 11444] [client 158.23.147.79:39323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK-YWbX5DA3XO6e_qRA2QAAAQo"]
[Sat Aug 29 05:11:29.036966 2026] [security2:error] [pid 1321:tid 1543] [client 20.48.250.41:42996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-YWjCPtor9NZ-byT2YAAABnM"]
[Sat Aug 29 05:11:29.040465 2026] [cgid:error] [pid 11274:tid 11392] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:29.041621 2026] [security2:error] [pid 11274:tid 11456] [client 20.52.41.200:2765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/num.php"] [unique_id "apK-YWbX5DA3XO6e_qRA3AAAARY"]
[Sat Aug 29 05:11:29.041739 2026] [cgid:error] [pid 11274:tid 11320] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:29.046346 2026] [security2:error] [pid 1321:tid 1548] [client 4.205.62.107:60343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/grsiuk.php"] [unique_id "apK-YWjCPtor9NZ-byT2YwAABnc"]
[Sat Aug 29 05:11:29.047928 2026] [cgid:error] [pid 11274:tid 11438] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:29.047928 2026] [cgid:error] [pid 11274:tid 11441] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:29.047952 2026] [cgid:error] [pid 11274:tid 11324] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:29.054433 2026] [core:error] [pid 11274:tid 11434] [remote 34.75.72.74:45038] AH10244: invalid URI path (/%2e%2e/.env)
[Sat Aug 29 05:11:29.055100 2026] [security2:error] [pid 1321:tid 1608] [client 158.23.147.79:24448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK-YWjCPtor9NZ-byT2ZgAABrM"]
[Sat Aug 29 05:11:29.055439 2026] [security2:error] [pid 11274:tid 11321] [remote 34.75.72.74:45038] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/assets../.env"] [unique_id "apK-YWbX5DA3XO6e_qRA4QABPgg"]
[Sat Aug 29 05:11:29.055543 2026] [security2:error] [pid 1321:tid 1533] [client 20.220.204.93:17668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/mar.php"] [unique_id "apK-YWjCPtor9NZ-byT2ZwAABmk"]
[Sat Aug 29 05:11:29.065008 2026] [security2:error] [pid 11274:tid 11405] [remote 34.75.72.74:45038] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/api/.env/public/.env"] [unique_id "apK-YWbX5DA3XO6e_qRA5QABRFs"]
[Sat Aug 29 05:11:29.065009 2026] [security2:error] [pid 11274:tid 11335] [remote 34.75.72.74:45038] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/uploads../.env"] [unique_id "apK-YWbX5DA3XO6e_qRA5wABRBY"]
[Sat Aug 29 05:11:29.065206 2026] [security2:error] [pid 11274:tid 11473] [client 93.123.109.228:60880] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/administrator/.env"] [unique_id "apK-YWbX5DA3XO6e_qRA5gAAASc"]
[Sat Aug 29 05:11:29.066882 2026] [security2:error] [pid 11274:tid 11419] [remote 34.75.72.74:45038] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/images../.env"] [unique_id "apK-YWbX5DA3XO6e_qRA6AABRGk"]
[Sat Aug 29 05:11:29.070045 2026] [security2:error] [pid 11274:tid 11505] [client 93.123.109.228:60856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/admin_phpinfo.php"] [unique_id "apK-YWbX5DA3XO6e_qRA6QAAAUY"]
[Sat Aug 29 05:11:29.085612 2026] [cgid:error] [pid 11274:tid 11313] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:29.085705 2026] [cgid:error] [pid 11274:tid 11440] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:29.085713 2026] [cgid:error] [pid 11274:tid 11391] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:29.085887 2026] [cgid:error] [pid 11274:tid 11390] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:29.089930 2026] [cgid:error] [pid 11274:tid 11430] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:29.105735 2026] [security2:error] [pid 1321:tid 1492] [client 20.104.18.15:43712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/wp-content/k.php"] [unique_id "apK-YWjCPtor9NZ-byT2aQAABkA"]
[Sat Aug 29 05:11:29.106968 2026] [security2:error] [pid 1321:tid 1502] [client 93.123.109.228:60774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/var/www/.env"] [unique_id "apK-YWjCPtor9NZ-byT2awAABko"]
[Sat Aug 29 05:11:29.116817 2026] [security2:error] [pid 11274:tid 11519] [client 20.48.250.41:27629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/06.php"] [unique_id "apK-YWbX5DA3XO6e_qRA8wAAAVQ"]
[Sat Aug 29 05:11:29.118520 2026] [security2:error] [pid 11274:tid 11463] [client 68.155.159.216:63752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/x.php"] [unique_id "apK-YWbX5DA3XO6e_qRA9AAAAR0"]
[Sat Aug 29 05:11:29.128066 2026] [security2:error] [pid 11274:tid 11558] [client 158.158.54.35:12379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/assets/images/doc.php"] [unique_id "apK-YWbX5DA3XO6e_qRA9QAAAXo"]
[Sat Aug 29 05:11:29.129163 2026] [core:error] [pid 1321:tid 1535] [client 20.100.175.163:26916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:29.129180 2026] [core:error] [pid 1321:tid 1535] [client 20.100.175.163:26916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:29.148537 2026] [security2:error] [pid 1321:tid 1549] [client 158.23.184.117:11524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/xmlrpc.php"] [unique_id "apK-YWjCPtor9NZ-byT2bwAABng"]
[Sat Aug 29 05:11:29.150198 2026] [security2:error] [pid 1321:tid 1549] [client 93.123.109.228:60648] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/web/.env"] [unique_id "apK-YWjCPtor9NZ-byT2cAAABng"]
[Sat Aug 29 05:11:29.159083 2026] [security2:error] [pid 11274:tid 11317] [remote 34.75.72.74:45038] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/@fs/var/task/.env"] [unique_id "apK-YWbX5DA3XO6e_qRA-wABhQQ"]
[Sat Aug 29 05:11:29.165811 2026] [security2:error] [pid 11274:tid 11520] [client 20.104.18.15:15161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/alfa.php"] [unique_id "apK-YWbX5DA3XO6e_qRA_gAAAVU"]
[Sat Aug 29 05:11:29.167020 2026] [security2:error] [pid 11274:tid 11525] [client 20.151.200.44:22153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/1vbqo.php"] [unique_id "apK-YWbX5DA3XO6e_qRA_wAAAVo"]
[Sat Aug 29 05:11:29.178226 2026] [security2:error] [pid 11274:tid 11318] [remote 34.75.72.74:45038] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/img../.env"] [unique_id "apK-YWbX5DA3XO6e_qRBAAABaAU"]
[Sat Aug 29 05:11:29.178861 2026] [security2:error] [pid 11274:tid 11483] [client 158.23.147.79:52313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK-YWbX5DA3XO6e_qRBAQAAATA"]
[Sat Aug 29 05:11:29.187927 2026] [security2:error] [pid 11274:tid 11490] [client 40.83.93.50:6671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/haiterus.php"] [unique_id "apK-YWbX5DA3XO6e_qRBAgAAATc"]
[Sat Aug 29 05:11:29.196341 2026] [security2:error] [pid 11274:tid 11502] [client 93.123.109.228:32904] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/api-backend/.env"] [unique_id "apK-YWbX5DA3XO6e_qRBAwAAAUM"]
[Sat Aug 29 05:11:29.202968 2026] [security2:error] [pid 11274:tid 11515] [client 93.123.109.228:60756] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/var/www/html/.env"] [unique_id "apK-YWbX5DA3XO6e_qRBBQAAAVA"]
[Sat Aug 29 05:11:29.204560 2026] [security2:error] [pid 1321:tid 1539] [client 93.123.109.228:32782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/.wp-config.php.swp"] [unique_id "apK-YWjCPtor9NZ-byT2cgAABm8"]
[Sat Aug 29 05:11:29.208506 2026] [security2:error] [pid 11274:tid 11516] [client 93.123.109.228:60818] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/api-node/.env"] [unique_id "apK-YWbX5DA3XO6e_qRBBgAAAVE"]
[Sat Aug 29 05:11:29.208802 2026] [security2:error] [pid 1321:tid 1497] [client 20.240.128.207:12794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-admin/js/index.php"] [unique_id "apK-YWjCPtor9NZ-byT2cwAABkU"]
[Sat Aug 29 05:11:29.210642 2026] [security2:error] [pid 11274:tid 11540] [client 20.104.49.130:56199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-YWbX5DA3XO6e_qRBBwAAAWk"]
[Sat Aug 29 05:11:29.232123 2026] [cgid:error] [pid 11274:tid 11425] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:29.232532 2026] [cgid:error] [pid 11274:tid 11346] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:29.232540 2026] [cgid:error] [pid 11274:tid 11433] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:29.232553 2026] [cgid:error] [pid 11274:tid 11352] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:29.233763 2026] [cgid:error] [pid 11274:tid 11383] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:29.234179 2026] [cgid:error] [pid 11274:tid 11402] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:29.234604 2026] [cgid:error] [pid 11274:tid 11344] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:29.235082 2026] [cgid:error] [pid 11274:tid 11437] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:29.237064 2026] [cgid:error] [pid 11274:tid 11409] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:29.247407 2026] [security2:error] [pid 11274:tid 11551] [client 20.48.250.41:27465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/class.php"] [unique_id "apK-YWbX5DA3XO6e_qRBEgAAAXM"]
[Sat Aug 29 05:11:29.251416 2026] [security2:error] [pid 1321:tid 1494] [client 20.63.219.114:13452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-content/content.php"] [unique_id "apK-YWjCPtor9NZ-byT2dQAABkI"]
[Sat Aug 29 05:11:29.259984 2026] [cgid:error] [pid 11274:tid 11337] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:29.262132 2026] [cgid:error] [pid 11274:tid 11316] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:29.262669 2026] [security2:error] [pid 11274:tid 11522] [client 20.104.18.15:43877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/os.php"] [unique_id "apK-YWbX5DA3XO6e_qRBFwAAAVc"]
[Sat Aug 29 05:11:29.263745 2026] [security2:error] [pid 11274:tid 11332] [remote 34.75.72.74:45038] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "charleneongreen.com"] [uri "/api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ"] [unique_id "apK-YWbX5DA3XO6e_qRBGwABdBM"]
[Sat Aug 29 05:11:29.264217 2026] [security2:error] [pid 11274:tid 11448] [client 52.87.72.16:33726] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "ridetime.com"] [uri "/"] [unique_id "apK-YWbX5DA3XO6e_qRBFgAAAQ4"], referer: https://ridetime.com
[Sat Aug 29 05:11:29.278045 2026] [security2:error] [pid 1321:tid 1522] [client 20.151.200.44:63980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/ww2.php"] [unique_id "apK-YWjCPtor9NZ-byT2dgAABl4"]
[Sat Aug 29 05:11:29.278363 2026] [security2:error] [pid 11274:tid 11454] [client 20.220.204.93:18094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/ccu.php"] [unique_id "apK-YWbX5DA3XO6e_qRBHgAAARQ"]
[Sat Aug 29 05:11:29.290674 2026] [security2:error] [pid 11274:tid 11464] [client 93.123.109.228:60836] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/api/.env"] [unique_id "apK-YWbX5DA3XO6e_qRBIQAAAR4"]
[Sat Aug 29 05:11:29.293383 2026] [security2:error] [pid 11274:tid 11492] [client 158.23.184.117:65168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/app.php"] [unique_id "apK-YWbX5DA3XO6e_qRBIgAAATk"]
[Sat Aug 29 05:11:29.313343 2026] [security2:error] [pid 11274:tid 11518] [client 20.104.18.15:15130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/33.php"] [unique_id "apK-YWbX5DA3XO6e_qRBJAAAAVM"]
[Sat Aug 29 05:11:29.324876 2026] [authz_core:error] [pid 11274:tid 11315] [remote 34.74.130.21:47710] AH01630: client denied by server configuration: /home3/conelecc/public_html/redelan/.htpasswd
[Sat Aug 29 05:11:29.328471 2026] [cgid:error] [pid 11274:tid 11322] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:29.330165 2026] [cgid:error] [pid 11274:tid 11350] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:29.330697 2026] [security2:error] [pid 1321:tid 1602] [client 57.141.14.78:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/cart/"] [unique_id "apK-YWjCPtor9NZ-byT2egAABq0"]
[Sat Aug 29 05:11:29.332125 2026] [security2:error] [pid 1321:tid 1525] [client 93.123.109.228:32776] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/ADMIN/.env"] [unique_id "apK-YWjCPtor9NZ-byT2fAAABmE"]
[Sat Aug 29 05:11:29.333034 2026] [cgid:error] [pid 11274:tid 11354] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:29.334926 2026] [cgid:error] [pid 11274:tid 11357] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:29.347188 2026] [security2:error] [pid 1321:tid 1593] [client 158.158.54.35:23226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/num.php"] [unique_id "apK-YWjCPtor9NZ-byT2fQAABqQ"]
[Sat Aug 29 05:11:29.351588 2026] [security2:error] [pid 11274:tid 11485] [client 4.205.62.107:61637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/thui.php"] [unique_id "apK-YWbX5DA3XO6e_qRBLAAAATI"]
[Sat Aug 29 05:11:29.353520 2026] [security2:error] [pid 11274:tid 11456] [client 68.155.159.216:2025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/index/function.php"] [unique_id "apK-YWbX5DA3XO6e_qRBLQAAARY"]
[Sat Aug 29 05:11:29.369675 2026] [cgid:error] [pid 11274:tid 11384] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:29.372879 2026] [security2:error] [pid 11274:tid 11503] [client 158.23.147.79:29606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK-YWbX5DA3XO6e_qRBNQAAAUQ"]
[Sat Aug 29 05:11:29.388628 2026] [security2:error] [pid 11274:tid 11566] [client 93.123.109.228:32852] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/API/.env"] [unique_id "apK-YWbX5DA3XO6e_qRBOQAAAYI"]
[Sat Aug 29 05:11:29.389014 2026] [cgid:error] [pid 11274:tid 11377] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:29.389247 2026] [cgid:error] [pid 11274:tid 11387] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:29.396210 2026] [security2:error] [pid 11274:tid 11514] [client 20.52.41.200:4759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/x.php"] [unique_id "apK-YWbX5DA3XO6e_qRBOwAAAU8"]
[Sat Aug 29 05:11:29.409007 2026] [security2:error] [pid 11274:tid 11459] [client 20.104.18.15:43856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/htio.php"] [unique_id "apK-YWbX5DA3XO6e_qRBPQAAARk"]
[Sat Aug 29 05:11:29.439710 2026] [security2:error] [pid 11274:tid 11474] [client 52.87.72.16:33736] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "ridetime.com"] [uri "/index.html"] [unique_id "apK-YWbX5DA3XO6e_qRBRwAAASg"], referer: https://ridetime.com
[Sat Aug 29 05:11:29.452366 2026] [security2:error] [pid 11274:tid 11561] [client 158.23.184.117:65199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/aaa.php"] [unique_id "apK-YWbX5DA3XO6e_qRBSgAAAX0"]
[Sat Aug 29 05:11:29.457685 2026] [cgid:error] [pid 11274:tid 11410] [remote 34.138.144.127:38068] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/zenicane/public_html/studiopasa/404.shtml
[Sat Aug 29 05:11:29.460324 2026] [security2:error] [pid 11274:tid 11488] [client 93.123.109.228:32796] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/APP/.env"] [unique_id "apK-YWbX5DA3XO6e_qRBSwAAATU"]
[Sat Aug 29 05:11:29.467047 2026] [cgid:error] [pid 11274:tid 11329] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:29.468743 2026] [security2:error] [pid 11274:tid 11520] [client 93.123.109.228:60940] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/BACK/.env"] [unique_id "apK-YWbX5DA3XO6e_qRBUAAAAVU"]
[Sat Aug 29 05:11:29.468875 2026] [security2:error] [pid 1321:tid 1614] [client 20.104.18.15:15106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/133.php"] [unique_id "apK-YWjCPtor9NZ-byT2igAABrk"]
[Sat Aug 29 05:11:29.469686 2026] [security2:error] [pid 11274:tid 11520] [client 93.123.109.228:60884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/api/info.php"] [unique_id "apK-YWbX5DA3XO6e_qRBUQAAAVU"]
[Sat Aug 29 05:11:29.470038 2026] [security2:error] [pid 1321:tid 1519] [client 93.123.109.228:60980] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/Api/.env"] [unique_id "apK-YWjCPtor9NZ-byT2iQAABls"]
[Sat Aug 29 05:11:29.471310 2026] [cgid:error] [pid 11274:tid 11413] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:29.471310 2026] [cgid:error] [pid 11274:tid 11375] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:29.472793 2026] [security2:error] [pid 11274:tid 11533] [client 20.63.219.114:19941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/menu.php"] [unique_id "apK-YWbX5DA3XO6e_qRBUgAAAWI"]
[Sat Aug 29 05:11:29.474368 2026] [security2:error] [pid 1321:tid 1560] [client 93.123.109.228:53900] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/website/.env"] [unique_id "apK-YWjCPtor9NZ-byT2iwAABoM"]
[Sat Aug 29 05:11:29.474571 2026] [security2:error] [pid 11274:tid 11555] [client 20.100.175.163:25177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-YWbX5DA3XO6e_qRBUwAAAXc"]
[Sat Aug 29 05:11:29.493919 2026] [security2:error] [pid 11274:tid 11539] [client 93.123.109.228:32820] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/BACKEND/.env"] [unique_id "apK-YWbX5DA3XO6e_qRBVwAAAWg"]
[Sat Aug 29 05:11:29.494117 2026] [lsapi:warn] [pid 1321:tid 1597] [client 93.123.109.165:0] [host midayins.com] Backend log: PHP Warning:  PHP Request Startup: Invalid date.timezone value 'America/New York', using 'America/Boise' instead in Unknown on line 0\n
[Sat Aug 29 05:11:29.495599 2026] [security2:error] [pid 11274:tid 11483] [client 20.48.250.41:26890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/8.php"] [unique_id "apK-YWbX5DA3XO6e_qRBWAAAATA"]
[Sat Aug 29 05:11:29.495984 2026] [cgid:error] [pid 11274:tid 11376] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:29.499526 2026] [security2:error] [pid 11274:tid 11479] [client 93.123.109.228:32836] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/BE/.env"] [unique_id "apK-YWbX5DA3XO6e_qRBWgAAASw"]
[Sat Aug 29 05:11:29.502174 2026] [core:error] [pid 11274:tid 11472] [client 20.52.41.200:2814] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:29.502187 2026] [core:error] [pid 11274:tid 11472] [client 20.52.41.200:2814] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:29.503979 2026] [security2:error] [pid 1321:tid 1510] [client 4.205.62.107:64981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/w.php"] [unique_id "apK-YWjCPtor9NZ-byT2jQAABlI"]
[Sat Aug 29 05:11:29.515174 2026] [security2:error] [pid 1321:tid 1491] [client 68.155.159.216:33767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK-YWjCPtor9NZ-byT2jgAABj8"]
[Sat Aug 29 05:11:29.523020 2026] [security2:error] [pid 11274:tid 11547] [client 20.240.128.207:1243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/admin.php"] [unique_id "apK-YWbX5DA3XO6e_qRBXAAAAW8"]
[Sat Aug 29 05:11:29.539546 2026] [security2:error] [pid 11274:tid 11544] [client 40.83.93.50:15811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/about.php525"] [unique_id "apK-YWbX5DA3XO6e_qRBXQAAAWw"]
[Sat Aug 29 05:11:29.540473 2026] [security2:error] [pid 11274:tid 11502] [client 4.205.62.107:6527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/mamzi.php"] [unique_id "apK-YWbX5DA3XO6e_qRBXgAAAUM"]
[Sat Aug 29 05:11:29.542918 2026] [security2:error] [pid 1321:tid 1559] [client 20.104.18.15:43940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/dev.php"] [unique_id "apK-YWjCPtor9NZ-byT2jwAABoI"]
[Sat Aug 29 05:11:29.553983 2026] [security2:error] [pid 1321:tid 1500] [client 20.104.49.130:52507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/berlin.php"] [unique_id "apK-YWjCPtor9NZ-byT2kgAABkg"]
[Sat Aug 29 05:11:29.571785 2026] [security2:error] [pid 1321:tid 1513] [client 158.158.54.35:23220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/bgymj.php"] [unique_id "apK-YWjCPtor9NZ-byT2lAAABlU"]
[Sat Aug 29 05:11:29.573541 2026] [security2:error] [pid 11274:tid 11450] [client 93.123.109.228:32778] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/Backend/.env"] [unique_id "apK-YWbX5DA3XO6e_qRBYwAAARA"]
[Sat Aug 29 05:11:29.577754 2026] [security2:error] [pid 11274:tid 11489] [client 20.220.204.93:19516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/ak.php"] [unique_id "apK-YWbX5DA3XO6e_qRBZAAAATY"]
[Sat Aug 29 05:11:29.580279 2026] [security2:error] [pid 1321:tid 1580] [client 4.205.62.107:63236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/dialog.php"] [unique_id "apK-YWjCPtor9NZ-byT2lQAABpc"]
[Sat Aug 29 05:11:29.581637 2026] [security2:error] [pid 1321:tid 1542] [client 93.123.109.228:60828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/api/phpinfo.php"] [unique_id "apK-YWjCPtor9NZ-byT2lgAABnI"]
[Sat Aug 29 05:11:29.590297 2026] [security2:error] [pid 1321:tid 1490] [client 93.123.109.228:60770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/wp-config.php"] [unique_id "apK-YWjCPtor9NZ-byT2lwAABj4"]
[Sat Aug 29 05:11:29.600959 2026] [security2:error] [pid 1321:tid 1526] [client 93.123.109.228:60606] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/wp-config.php.bak"] [unique_id "apK-YWjCPtor9NZ-byT2mAAABmI"]
[Sat Aug 29 05:11:29.607121 2026] [security2:error] [pid 11274:tid 11511] [client 20.63.219.114:4289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-content/core.php"] [unique_id "apK-YWbX5DA3XO6e_qRBaAAAAUw"]
[Sat Aug 29 05:11:29.611367 2026] [security2:error] [pid 11274:tid 11545] [client 20.104.18.15:15116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/sym.php"] [unique_id "apK-YWbX5DA3XO6e_qRBaQAAAW0"]
[Sat Aug 29 05:11:29.614322 2026] [security2:error] [pid 1321:tid 1357] [remote 34.75.72.74:45040] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "charleneongreen.com"] [uri "/icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ"] [unique_id "apK-YWjCPtor9NZ-byT2nAAGUAE"]
[Sat Aug 29 05:11:29.620154 2026] [security2:error] [pid 1321:tid 1566] [client 68.155.159.216:56805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK-YWjCPtor9NZ-byT2oQAABok"]
[Sat Aug 29 05:11:29.625226 2026] [security2:error] [pid 11274:tid 11448] [client 93.123.109.228:60714] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/wp-config.php.new"] [unique_id "apK-YWbX5DA3XO6e_qRBagAAAQ4"]
[Sat Aug 29 05:11:29.628100 2026] [security2:error] [pid 11274:tid 11500] [client 20.100.175.163:26913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-content/themes/pridmag/il.php"] [unique_id "apK-YWbX5DA3XO6e_qRBawAAAUE"]
[Sat Aug 29 05:11:29.629067 2026] [security2:error] [pid 1321:tid 1582] [client 93.123.109.228:53910] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/wp-config.php.old"] [unique_id "apK-YWjCPtor9NZ-byT2ogAABpk"]
[Sat Aug 29 05:11:29.630999 2026] [security2:error] [pid 11274:tid 11451] [client 20.48.250.41:49578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/ff1.php"] [unique_id "apK-YWbX5DA3XO6e_qRBbgAAARE"]
[Sat Aug 29 05:11:29.631907 2026] [security2:error] [pid 11274:tid 11454] [client 20.104.49.130:53740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "connectdotz.com"] [uri "/simple.php"] [unique_id "apK-YWbX5DA3XO6e_qRBbwAAARQ"]
[Sat Aug 29 05:11:29.664326 2026] [security2:error] [pid 11274:tid 11538] [client 93.123.109.165:35340] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "midayins.com"] [uri "/livewire/update"] [unique_id "apK-YWbX5DA3XO6e_qRBcgAAAWc"]
[Sat Aug 29 05:11:29.681190 2026] [security2:error] [pid 11274:tid 11554] [client 40.83.93.50:3993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/go.php"] [unique_id "apK-YWbX5DA3XO6e_qRBcwAAAXY"]
[Sat Aug 29 05:11:29.688645 2026] [security2:error] [pid 1321:tid 1575] [client 93.123.109.228:60980] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/Be/.env"] [unique_id "apK-YWjCPtor9NZ-byT2pgAABpI"]
[Sat Aug 29 05:11:29.691035 2026] [security2:error] [pid 11274:tid 11465] [client 158.23.184.117:11505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/hehe.php"] [unique_id "apK-YWbX5DA3XO6e_qRBdAAAAR8"]
[Sat Aug 29 05:11:29.711406 2026] [security2:error] [pid 11274:tid 11495] [client 20.104.18.15:43798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/gos.php"] [unique_id "apK-YWbX5DA3XO6e_qRBegAAATw"]
[Sat Aug 29 05:11:29.713388 2026] [cgid:error] [pid 11274:tid 11328] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:29.713619 2026] [cgid:error] [pid 11274:tid 11334] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:29.713891 2026] [cgid:error] [pid 11274:tid 11370] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:29.717623 2026] [security2:error] [pid 1321:tid 1498] [client 93.123.109.228:53860] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "cpcontacts.harvesthouse.ph"] [uri "/___proxy_subdomain_cpcontacts/wp-content/mysql.sql"] [unique_id "apK-YWjCPtor9NZ-byT2qwAABkY"]
[Sat Aug 29 05:11:29.718069 2026] [security2:error] [pid 1321:tid 1599] [client 20.240.128.207:19890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/core.php"] [unique_id "apK-YWjCPtor9NZ-byT2rAAABqo"]
[Sat Aug 29 05:11:29.718589 2026] [security2:error] [pid 11274:tid 11351] [remote 34.74.130.21:47710] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "redelan.cl"] [uri "/.ssh/id_rsa"] [unique_id "apK-YWbX5DA3XO6e_qRBfAABQiY"]
[Sat Aug 29 05:11:29.738134 2026] [security2:error] [pid 1321:tid 1557] [client 20.48.250.41:26920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/0x0x.php"] [unique_id "apK-YWjCPtor9NZ-byT2rQAABoA"]
[Sat Aug 29 05:11:29.740004 2026] [security2:error] [pid 11274:tid 11473] [client 20.104.18.15:15109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/8.php"] [unique_id "apK-YWbX5DA3XO6e_qRBggAAASc"]
[Sat Aug 29 05:11:29.742581 2026] [security2:error] [pid 11274:tid 11378] [remote 34.74.130.21:47710] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "redelan.cl"] [uri "/.ssh/id_dsa"] [unique_id "apK-YWbX5DA3XO6e_qRBhAABKkA"]
[Sat Aug 29 05:11:29.743999 2026] [cgid:error] [pid 11274:tid 11341] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:29.782951 2026] [security2:error] [pid 11274:tid 11484] [client 20.220.204.93:16533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/lib.php"] [unique_id "apK-YWbX5DA3XO6e_qRBjgAAATE"]
[Sat Aug 29 05:11:29.807828 2026] [security2:error] [pid 11274:tid 11461] [client 93.123.109.228:60818] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/apis/.env"] [unique_id "apK-YWbX5DA3XO6e_qRBjwAAARs"]
[Sat Aug 29 05:11:29.838327 2026] [security2:error] [pid 11274:tid 11513] [client 158.23.184.117:11544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/wp-includes/PHPMailer.php"] [unique_id "apK-YWbX5DA3XO6e_qRBkQAAAU4"]
[Sat Aug 29 05:11:29.845560 2026] [security2:error] [pid 1321:tid 1564] [client 20.104.18.15:43898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/132.php"] [unique_id "apK-YWjCPtor9NZ-byT2sQAABoc"]
[Sat Aug 29 05:11:29.854564 2026] [security2:error] [pid 11274:tid 11543] [client 20.52.41.200:4642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/new.php"] [unique_id "apK-YWbX5DA3XO6e_qRBkwAAAWs"]
[Sat Aug 29 05:11:29.879105 2026] [security2:error] [pid 11274:tid 11539] [client 20.151.200.44:60923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/0xs.php"] [unique_id "apK-YWbX5DA3XO6e_qRBmAAAAWg"]
[Sat Aug 29 05:11:29.883567 2026] [security2:error] [pid 1321:tid 1366] [remote 34.75.72.74:45044] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "charleneongreen.com"] [uri "/wp-config.php.bak"] [unique_id "apK-YWjCPtor9NZ-byT2swAGSgg"]
[Sat Aug 29 05:11:29.885317 2026] [security2:error] [pid 1321:tid 1371] [remote 34.75.72.74:45044] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "charleneongreen.com"] [uri "/wp-config.php.old"] [unique_id "apK-YWjCPtor9NZ-byT2tAAGew0"]
[Sat Aug 29 05:11:29.886834 2026] [security2:error] [pid 1321:tid 1427] [remote 34.75.72.74:45044] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/@fs/.env"] [unique_id "apK-YWjCPtor9NZ-byT2tgAGe0U"]
[Sat Aug 29 05:11:29.886839 2026] [security2:error] [pid 1321:tid 1425] [remote 34.75.72.74:45044] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/@fs/.env"] [unique_id "apK-YWjCPtor9NZ-byT2tQAGe0M"]
[Sat Aug 29 05:11:29.887150 2026] [security2:error] [pid 1321:tid 1412] [remote 34.75.72.74:45044] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/@fs/.env"] [unique_id "apK-YWjCPtor9NZ-byT2twAGezY"]
[Sat Aug 29 05:11:29.887638 2026] [security2:error] [pid 1321:tid 1535] [client 158.23.147.79:49839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/file17.php"] [unique_id "apK-YWjCPtor9NZ-byT2uQAABms"]
[Sat Aug 29 05:11:29.900196 2026] [security2:error] [pid 1321:tid 1531] [client 20.48.250.41:42969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/t.php"] [unique_id "apK-YWjCPtor9NZ-byT2uwAABmc"]
[Sat Aug 29 05:11:29.903106 2026] [security2:error] [pid 11274:tid 11480] [client 4.205.62.107:32538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/a1vx.php"] [unique_id "apK-YWbX5DA3XO6e_qRBnAAAAS0"]
[Sat Aug 29 05:11:29.903813 2026] [security2:error] [pid 1321:tid 1585] [client 20.48.250.41:27625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/166.php"] [unique_id "apK-YWjCPtor9NZ-byT2vAAABpw"]
[Sat Aug 29 05:11:29.917108 2026] [lsapi:warn] [pid 11274:tid 11568] [client 93.123.109.165:0] [host midayins.com] Backend log: PHP Warning:  PHP Request Startup: Invalid date.timezone value 'America/New York', using 'America/Boise' instead in Unknown on line 0\n
[Sat Aug 29 05:11:29.930678 2026] [security2:error] [pid 1321:tid 1504] [client 93.123.109.228:32932] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/app/.env"] [unique_id "apK-YWjCPtor9NZ-byT2vwAABkw"]
[Sat Aug 29 05:11:29.939320 2026] [security2:error] [pid 1321:tid 1567] [client 4.205.62.107:4516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/php_info.php"] [unique_id "apK-YWjCPtor9NZ-byT2wAAABoo"]
[Sat Aug 29 05:11:29.948794 2026] [security2:error] [pid 1321:tid 1539] [client 20.220.204.93:17698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/wp-style.php"] [unique_id "apK-YWjCPtor9NZ-byT2wQAABm8"]
[Sat Aug 29 05:11:29.952289 2026] [security2:error] [pid 1321:tid 1378] [remote 34.75.72.74:45044] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/laravel/.env"] [unique_id "apK-YWjCPtor9NZ-byT2wgAGRRQ"]
[Sat Aug 29 05:11:29.958159 2026] [security2:error] [pid 11274:tid 11466] [client 20.100.175.163:28591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/alfa-rex.php7"] [unique_id "apK-YWbX5DA3XO6e_qRBogAAASA"]
[Sat Aug 29 05:11:29.958430 2026] [core:error] [pid 11274:tid 11536] [client 20.52.41.200:2807] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:29.958444 2026] [core:error] [pid 11274:tid 11536] [client 20.52.41.200:2807] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:29.962580 2026] [security2:error] [pid 1321:tid 1615] [client 20.63.219.114:17336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-content/db-status.php"] [unique_id "apK-YWjCPtor9NZ-byT2xAAABro"]
[Sat Aug 29 05:11:29.989627 2026] [security2:error] [pid 11274:tid 11569] [client 158.23.184.117:65188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/wp-content/upgrade/alfanew.php7"] [unique_id "apK-YWbX5DA3XO6e_qRBpAAAAYU"]
[Sat Aug 29 05:11:29.992611 2026] [cgid:error] [pid 11274:tid 11388] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:29.995059 2026] [security2:error] [pid 11274:tid 11526] [client 20.104.18.15:43867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/v22.php"] [unique_id "apK-YWbX5DA3XO6e_qRBpgAAAVs"]
[Sat Aug 29 05:11:30.024302 2026] [security2:error] [pid 11274:tid 11463] [client 158.158.54.35:30276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK-YmbX5DA3XO6e_qRBqAAAAR0"]
[Sat Aug 29 05:11:30.027854 2026] [security2:error] [pid 1321:tid 1600] [client 20.240.128.207:4887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/php8.php"] [unique_id "apK-YmjCPtor9NZ-byT2yAAABqs"]
[Sat Aug 29 05:11:30.029235 2026] [security2:error] [pid 11274:tid 11500] [client 68.155.159.216:49032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK-YmbX5DA3XO6e_qRBqgAAAUE"]
[Sat Aug 29 05:11:30.033995 2026] [security2:error] [pid 11274:tid 11552] [client 20.104.18.15:15164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/goods.php"] [unique_id "apK-YmbX5DA3XO6e_qRBrAAAAXQ"]
[Sat Aug 29 05:11:30.034211 2026] [security2:error] [pid 11274:tid 11367] [remote 34.74.130.21:47710] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "redelan.cl"] [uri "/id_rsa"] [unique_id "apK-YmbX5DA3XO6e_qRBqwABFDU"]
[Sat Aug 29 05:11:30.037698 2026] [core:error] [pid 11274:tid 11451] [client 158.23.184.117:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:30.037711 2026] [core:error] [pid 11274:tid 11451] [client 158.23.184.117:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:30.044519 2026] [security2:error] [pid 11274:tid 11533] [client 20.63.219.114:2251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/alfa.php"] [unique_id "apK-YmbX5DA3XO6e_qRBsAAAAWI"]
[Sat Aug 29 05:11:30.045447 2026] [security2:error] [pid 11274:tid 11449] [client 20.48.250.41:26896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/h2a2ck.php"] [unique_id "apK-YmbX5DA3XO6e_qRBsgAAAQ8"]
[Sat Aug 29 05:11:30.047900 2026] [cgid:error] [pid 11274:tid 11386] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:30.058689 2026] [security2:error] [pid 1321:tid 1593] [client 68.155.159.216:23513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/themes.php"] [unique_id "apK-YmjCPtor9NZ-byT2ygAABqQ"]
[Sat Aug 29 05:11:30.061587 2026] [security2:error] [pid 11274:tid 11340] [remote 34.74.130.21:47710] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "redelan.cl"] [uri "/id_dsa"] [unique_id "apK-YmbX5DA3XO6e_qRBtQABUxs"]
[Sat Aug 29 05:11:30.066979 2026] [cgid:error] [pid 11274:tid 11349] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:30.068427 2026] [cgid:error] [pid 11274:tid 11364] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:30.070000 2026] [security2:error] [pid 1321:tid 1610] [client 158.23.147.79:63037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK-YmjCPtor9NZ-byT2ywAABrU"]
[Sat Aug 29 05:11:30.079363 2026] [security2:error] [pid 11274:tid 11523] [client 111.235.68.106:48680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK-YmbX5DA3XO6e_qRBuQAAAVg"]
[Sat Aug 29 05:11:30.079464 2026] [security2:error] [pid 11274:tid 11523] [client 111.235.68.106:48680] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK-YmbX5DA3XO6e_qRBuQAAAVg"]
[Sat Aug 29 05:11:30.080115 2026] [security2:error] [pid 11274:tid 11417] [remote 34.74.130.21:47710] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "redelan.cl"] [uri "/key.pem"] [unique_id "apK-YmbX5DA3XO6e_qRBuAABPWc"]
[Sat Aug 29 05:11:30.106839 2026] [security2:error] [pid 1321:tid 1529] [client 158.158.54.35:23218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "apK-YmjCPtor9NZ-byT2zgAABmU"]
[Sat Aug 29 05:11:30.109672 2026] [security2:error] [pid 11274:tid 11502] [client 40.83.93.50:9834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/spip.php"] [unique_id "apK-YmbX5DA3XO6e_qRBvwAAAUM"]
[Sat Aug 29 05:11:30.115817 2026] [security2:error] [pid 11274:tid 11534] [client 20.100.175.163:5075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/assets/images/doc.php"] [unique_id "apK-YmbX5DA3XO6e_qRBwAAAAWM"]
[Sat Aug 29 05:11:30.140973 2026] [security2:error] [pid 1321:tid 1609] [client 158.23.184.117:65197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/admin/alfa-rex.php"] [unique_id "apK-YmjCPtor9NZ-byT20gAABrQ"]
[Sat Aug 29 05:11:30.145944 2026] [security2:error] [pid 1321:tid 1586] [client 20.104.18.15:43895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/wp-activate.php"] [unique_id "apK-YmjCPtor9NZ-byT20wAABp0"]
[Sat Aug 29 05:11:30.160155 2026] [security2:error] [pid 1321:tid 1606] [client 158.23.147.79:24470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-content/admin.php"] [unique_id "apK-YmjCPtor9NZ-byT21QAABrE"]
[Sat Aug 29 05:11:30.165196 2026] [security2:error] [pid 11274:tid 11503] [client 20.104.18.15:15048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/ah.php"] [unique_id "apK-YmbX5DA3XO6e_qRBxQAAAUQ"]
[Sat Aug 29 05:11:30.172743 2026] [security2:error] [pid 11274:tid 11512] [client 68.155.159.216:56720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-YmbX5DA3XO6e_qRByAAAAU0"]
[Sat Aug 29 05:11:30.179286 2026] [security2:error] [pid 1321:tid 1475] [remote 34.75.72.74:45044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.72.75.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "charleneongreen.com"] [uri "/config/.env.php"] [unique_id "apK-YmjCPtor9NZ-byT21wAGhXQ"]
[Sat Aug 29 05:11:30.179336 2026] [security2:error] [pid 1321:tid 1377] [remote 34.75.72.74:45044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.72.75.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "charleneongreen.com"] [uri "/.env.php.bak"] [unique_id "apK-YmjCPtor9NZ-byT22QAGhRM"]
[Sat Aug 29 05:11:30.180312 2026] [security2:error] [pid 1321:tid 1367] [remote 34.75.72.74:45044] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/core/.env"] [unique_id "apK-YmjCPtor9NZ-byT22AAGhQk"]
[Sat Aug 29 05:11:30.184531 2026] [security2:error] [pid 11274:tid 11468] [client 4.205.62.107:32533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/paypal.php"] [unique_id "apK-YmbX5DA3XO6e_qRByQAAASI"]
[Sat Aug 29 05:11:30.200759 2026] [security2:error] [pid 1321:tid 1501] [client 20.48.250.41:26888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/error_log.php"] [unique_id "apK-YmjCPtor9NZ-byT23AAABkk"]
[Sat Aug 29 05:11:30.216015 2026] [security2:error] [pid 1321:tid 1499] [client 20.240.128.207:18685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/admin/function.php"] [unique_id "apK-YmjCPtor9NZ-byT23QAABkc"]
[Sat Aug 29 05:11:30.222588 2026] [security2:error] [pid 11274:tid 11535] [client 20.104.49.130:53653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/echkm.php"] [unique_id "apK-YmbX5DA3XO6e_qRBygAAAWQ"]
[Sat Aug 29 05:11:30.242519 2026] [security2:error] [pid 11274:tid 11524] [client 68.155.159.216:65044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-content/x.php"] [unique_id "apK-YmbX5DA3XO6e_qRBzAAAAVk"]
[Sat Aug 29 05:11:30.244273 2026] [security2:error] [pid 11274:tid 11461] [client 68.155.159.216:64001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK-YmbX5DA3XO6e_qRBzQAAARs"]
[Sat Aug 29 05:11:30.247935 2026] [security2:error] [pid 11274:tid 11513] [client 93.123.109.228:32852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK-YmbX5DA3XO6e_qRBzgAAAU4"]
[Sat Aug 29 05:11:30.250966 2026] [security2:error] [pid 11274:tid 11508] [client 40.83.93.50:3937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/gecko-new.php"] [unique_id "apK-YmbX5DA3XO6e_qRB0AAAAUk"]
[Sat Aug 29 05:11:30.275468 2026] [security2:error] [pid 11274:tid 11549] [client 20.220.204.93:17670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/browse.php"] [unique_id "apK-YmbX5DA3XO6e_qRB1AAAAXE"]
[Sat Aug 29 05:11:30.281916 2026] [security2:error] [pid 11274:tid 11561] [client 158.23.147.79:56977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/goat1.php"] [unique_id "apK-YmbX5DA3XO6e_qRB1QAAAX0"]
[Sat Aug 29 05:11:30.285889 2026] [security2:error] [pid 1321:tid 1601] [client 158.23.184.117:11280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/wp-content/export.php"] [unique_id "apK-YmjCPtor9NZ-byT24QAABqw"]
[Sat Aug 29 05:11:30.294954 2026] [security2:error] [pid 1321:tid 1560] [client 20.52.41.200:4740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/menu.php"] [unique_id "apK-YmjCPtor9NZ-byT24wAABoM"]
[Sat Aug 29 05:11:30.310837 2026] [security2:error] [pid 11274:tid 11497] [client 20.104.18.15:15175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/ws55.php"] [unique_id "apK-YmbX5DA3XO6e_qRB3QAAAT4"]
[Sat Aug 29 05:11:30.312504 2026] [security2:error] [pid 11274:tid 11366] [remote 34.74.130.21:47710] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "redelan.cl"] [uri "/privatekey.key"] [unique_id "apK-YmbX5DA3XO6e_qRB3AABLjQ"]
[Sat Aug 29 05:11:30.313941 2026] [cgid:error] [pid 11274:tid 11343] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:30.314171 2026] [security2:error] [pid 11274:tid 11514] [client 52.139.37.240:61673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "5mike3.com"] [uri "/aged.php"] [unique_id "apK-YmbX5DA3XO6e_qRB4QAAAU8"]
[Sat Aug 29 05:11:30.318050 2026] [cgid:error] [pid 11274:tid 11427] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:30.318474 2026] [security2:error] [pid 11274:tid 11484] [client 20.63.219.114:13472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-content/disagrsxr.php"] [unique_id "apK-YmbX5DA3XO6e_qRB5AAAATE"]
[Sat Aug 29 05:11:30.320179 2026] [security2:error] [pid 11274:tid 11536] [client 93.123.109.228:60880] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/application/.env"] [unique_id "apK-YmbX5DA3XO6e_qRB5gAAAWU"]
[Sat Aug 29 05:11:30.320236 2026] [cgid:error] [pid 11274:tid 11365] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:30.320582 2026] [security2:error] [pid 11274:tid 11506] [client 20.104.18.15:43883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/wp-trackback.php"] [unique_id "apK-YmbX5DA3XO6e_qRB5wAAAUc"]
[Sat Aug 29 05:11:30.320696 2026] [lsapi:warn] [pid 1321:tid 1573] [client 93.123.109.165:0] [host midayins.com] Backend log: PHP Warning:  PHP Request Startup: Invalid date.timezone value 'America/New York', using 'America/Boise' instead in Unknown on line 0\n
[Sat Aug 29 05:11:30.323626 2026] [cgid:error] [pid 11274:tid 11381] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:30.324388 2026] [cgid:error] [pid 11274:tid 11369] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:30.338298 2026] [security2:error] [pid 1321:tid 1449] [remote 34.75.72.74:45044] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/.env.swp"] [unique_id "apK-YmjCPtor9NZ-byT26QAGTlo"]
[Sat Aug 29 05:11:30.344203 2026] [security2:error] [pid 1321:tid 1415] [remote 34.75.72.74:45044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.72.75.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "charleneongreen.com"] [uri "/configuration.php.bak"] [unique_id "apK-YmjCPtor9NZ-byT26wAGdDk"]
[Sat Aug 29 05:11:30.344911 2026] [security2:error] [pid 11274:tid 11517] [client 93.123.109.228:32950] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/admin-app/.env"] [unique_id "apK-YmbX5DA3XO6e_qRB6wAAAVI"]
[Sat Aug 29 05:11:30.345335 2026] [security2:error] [pid 1321:tid 1409] [remote 34.75.72.74:45044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 74.72.75.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "charleneongreen.com"] [uri "/config.php.bak"] [unique_id "apK-YmjCPtor9NZ-byT27AAGdDM"]
[Sat Aug 29 05:11:30.378693 2026] [security2:error] [pid 11274:tid 11511] [client 93.123.109.228:32918] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/apps/.env"] [unique_id "apK-YmbX5DA3XO6e_qRB7gAAAUw"]
[Sat Aug 29 05:11:30.397318 2026] [security2:error] [pid 11274:tid 11469] [client 20.48.250.41:27609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/403.php"] [unique_id "apK-YmbX5DA3XO6e_qRB8AAAASM"]
[Sat Aug 29 05:11:30.399729 2026] [security2:error] [pid 1321:tid 1513] [client 20.52.41.200:2637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "apK-YmjCPtor9NZ-byT27QAABlU"]
[Sat Aug 29 05:11:30.429144 2026] [security2:error] [pid 1321:tid 1565] [client 20.63.219.114:2242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/feed-rss2-queue.php"] [unique_id "apK-YmjCPtor9NZ-byT27wAABog"]
[Sat Aug 29 05:11:30.431931 2026] [security2:error] [pid 11274:tid 11490] [client 158.23.184.117:11521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/new.php"] [unique_id "apK-YmbX5DA3XO6e_qRB9AAAATc"]
[Sat Aug 29 05:11:30.438337 2026] [security2:error] [pid 1321:tid 1429] [remote 34.75.72.74:45044] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/wp/.env"] [unique_id "apK-YmjCPtor9NZ-byT28AAGWkc"]
[Sat Aug 29 05:11:30.446961 2026] [security2:error] [pid 1321:tid 1358] [remote 34.75.72.74:45044] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/storage/.env"] [unique_id "apK-YmjCPtor9NZ-byT28QAGYwI"]
[Sat Aug 29 05:11:30.457406 2026] [security2:error] [pid 1321:tid 1568] [client 20.104.18.15:44006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/pri.php"] [unique_id "apK-YmjCPtor9NZ-byT28gAABos"]
[Sat Aug 29 05:11:30.458940 2026] [security2:error] [pid 1321:tid 1508] [client 20.100.175.163:26293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "apK-YmjCPtor9NZ-byT28wAABlA"]
[Sat Aug 29 05:11:30.460931 2026] [security2:error] [pid 11274:tid 11572] [client 68.155.159.216:1967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/.well-known/content.php"] [unique_id "apK-YmbX5DA3XO6e_qRB9QAAAYg"]
[Sat Aug 29 05:11:30.479028 2026] [security2:error] [pid 11274:tid 11494] [client 93.123.109.165:35346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "midayins.com"] [uri "/index.php"] [unique_id "apK-YmbX5DA3XO6e_qRB9wAAATs"]
[Sat Aug 29 05:11:30.480808 2026] [security2:error] [pid 1321:tid 1436] [remote 34.75.72.74:45044] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/web/.env"] [unique_id "apK-YmjCPtor9NZ-byT29gAGd04"]
[Sat Aug 29 05:11:30.484022 2026] [security2:error] [pid 11274:tid 11533] [client 158.23.147.79:60217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/about.php"] [unique_id "apK-YmbX5DA3XO6e_qRB-AAAAWI"]
[Sat Aug 29 05:11:30.489287 2026] [security2:error] [pid 1321:tid 1440] [remote 34.75.72.74:45044] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/public/.env"] [unique_id "apK-YmjCPtor9NZ-byT29wAGdVI"]
[Sat Aug 29 05:11:30.489332 2026] [security2:error] [pid 1321:tid 1533] [client 20.104.18.15:15107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/drykl.php"] [unique_id "apK-YmjCPtor9NZ-byT2-AAABmk"]
[Sat Aug 29 05:11:30.495232 2026] [security2:error] [pid 11274:tid 11445] [client 4.205.62.107:61753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/file21.php"] [unique_id "apK-YmbX5DA3XO6e_qRB-QAAAQs"]
[Sat Aug 29 05:11:30.496848 2026] [security2:error] [pid 11274:tid 11477] [client 103.171.5.106:56647] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "ridetime.com"] [uri "/contact/"] [unique_id "apK-YmbX5DA3XO6e_qRB-gAAASs"], referer: http://ridetime.com/contact/
[Sat Aug 29 05:11:30.498206 2026] [security2:error] [pid 1321:tid 1583] [client 103.171.5.106:56648] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "ridetime.com"] [uri "/"] [unique_id "apK-YmjCPtor9NZ-byT2-QAABpo"], referer: http://ridetime.com/
[Sat Aug 29 05:11:30.502115 2026] [security2:error] [pid 1321:tid 1408] [remote 34.75.72.74:45044] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/wp-config.old"] [unique_id "apK-YmjCPtor9NZ-byT2-gAGhzI"]
[Sat Aug 29 05:11:30.503773 2026] [security2:error] [pid 1321:tid 1580] [client 103.171.5.106:56646] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "ridetime.com"] [uri "/pages/contact-us/"] [unique_id "apK-YmjCPtor9NZ-byT2-wAABpc"], referer: http://ridetime.com/pages/contact-us/
[Sat Aug 29 05:11:30.505800 2026] [security2:error] [pid 1321:tid 1370] [remote 34.75.72.74:45044] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "charleneongreen.com"] [uri "/wp-config.php~"] [unique_id "apK-YmjCPtor9NZ-byT2_AAGcww"]
[Sat Aug 29 05:11:30.517755 2026] [security2:error] [pid 11274:tid 11373] [remote 160.153.252.100:38316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.252.153.160.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jennysoft.com"] [uri "/wp-login.php"] [unique_id "apK-YmbX5DA3XO6e_qRB-wABaDs"]
[Sat Aug 29 05:11:30.522428 2026] [security2:error] [pid 1321:tid 1608] [client 52.139.37.240:2572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "5mike3.com"] [uri "/essexec.php"] [unique_id "apK-YmjCPtor9NZ-byT2_QAABrM"]
[Sat Aug 29 05:11:30.538840 2026] [security2:error] [pid 1321:tid 1526] [client 103.171.5.106:56649] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "ridetime.com"] [uri "/contactus/"] [unique_id "apK-YmjCPtor9NZ-byT2_gAABmI"], referer: http://ridetime.com/contactus/
[Sat Aug 29 05:11:30.552537 2026] [security2:error] [pid 1321:tid 1517] [client 158.158.54.35:30316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "apK-YmjCPtor9NZ-byT2_wAABlk"]
[Sat Aug 29 05:11:30.568710 2026] [security2:error] [pid 11274:tid 11395] [remote 34.74.130.21:47710] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "redelan.cl"] [uri "/@fs/app/.env"] [unique_id "apK-YmbX5DA3XO6e_qRCAgABH1E"]
[Sat Aug 29 05:11:30.569920 2026] [cgid:error] [pid 11274:tid 11374] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:30.570410 2026] [cgid:error] [pid 11274:tid 11371] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:30.571635 2026] [security2:error] [pid 1321:tid 1466] [remote 34.75.72.74:45044] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "charleneongreen.com"] [uri "/wp-config.php.swp"] [unique_id "apK-YmjCPtor9NZ-byT3AQAGV2s"]
[Sat Aug 29 05:11:30.572270 2026] [security2:error] [pid 11274:tid 11358] [remote 34.74.130.21:47710] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "redelan.cl"] [uri "/@fs/src/.env"] [unique_id "apK-YmbX5DA3XO6e_qRCAwABHy0"]
[Sat Aug 29 05:11:30.575495 2026] [cgid:error] [pid 11274:tid 11407] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:30.578174 2026] [cgid:error] [pid 11274:tid 11406] [remote 34.74.130.21:47710] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:30.587639 2026] [security2:error] [pid 11274:tid 11538] [client 93.123.109.228:60962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/admin/phpinfo.php"] [unique_id "apK-YmbX5DA3XO6e_qRCBwAAAWc"]
[Sat Aug 29 05:11:30.589322 2026] [security2:error] [pid 11274:tid 11509] [client 158.23.184.117:11572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/wp-content/plugins/revslider/admin.php"] [unique_id "apK-YmbX5DA3XO6e_qRCCAAAAUo"]
[Sat Aug 29 05:11:30.603075 2026] [security2:error] [pid 1321:tid 1605] [client 40.83.93.50:8343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/backup.php"] [unique_id "apK-YmjCPtor9NZ-byT3BAAABrA"]
[Sat Aug 29 05:11:30.603396 2026] [security2:error] [pid 11274:tid 11502] [client 20.104.18.15:43850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/wp_blog_footer.php"] [unique_id "apK-YmbX5DA3XO6e_qRCCgAAAUM"]
[Sat Aug 29 05:11:30.609528 2026] [security2:error] [pid 1321:tid 1504] [client 20.220.204.93:17277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/zoo.php"] [unique_id "apK-YmjCPtor9NZ-byT3BgAABkw"]
[Sat Aug 29 05:11:30.614961 2026] [security2:error] [pid 1321:tid 1495] [client 20.100.175.163:5002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/bgymj.php"] [unique_id "apK-YmjCPtor9NZ-byT3BwAABkM"]
[Sat Aug 29 05:11:30.618310 2026] [security2:error] [pid 1321:tid 1567] [client 68.155.159.216:33737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/ans.php"] [unique_id "apK-YmjCPtor9NZ-byT3CAAABoo"]
[Sat Aug 29 05:11:30.621503 2026] [security2:error] [pid 11274:tid 11565] [client 20.104.18.15:15123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/backup.php"] [unique_id "apK-YmbX5DA3XO6e_qRCDAAAAYE"]
[Sat Aug 29 05:11:30.647536 2026] [security2:error] [pid 11274:tid 11455] [client 4.205.62.107:64914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/btx25.php"] [unique_id "apK-YmbX5DA3XO6e_qRCDgAAARU"]
[Sat Aug 29 05:11:30.667805 2026] [security2:error] [pid 11274:tid 11496] [client 20.63.219.114:17282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-content/f35.php"] [unique_id "apK-YmbX5DA3XO6e_qRCEgAAAT0"]
[Sat Aug 29 05:11:30.668126 2026] [security2:error] [pid 11274:tid 11512] [client 20.48.250.41:27607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/cytyr.php"] [unique_id "apK-YmbX5DA3XO6e_qRCEwAAAU0"]
[Sat Aug 29 05:11:30.672518 2026] [security2:error] [pid 11274:tid 11493] [client 4.205.62.107:6934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/public/rip.php.php"] [unique_id "apK-YmbX5DA3XO6e_qRCFAAAATo"]
[Sat Aug 29 05:11:30.684378 2026] [security2:error] [pid 11274:tid 11468] [client 93.123.109.228:32810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/admin_phpinfo.php"] [unique_id "apK-YmbX5DA3XO6e_qRCFgAAASI"]
[Sat Aug 29 05:11:30.708262 2026] [security2:error] [pid 11274:tid 11524] [client 20.240.128.207:1804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/install.php"] [unique_id "apK-YmbX5DA3XO6e_qRCFwAAAVk"]
[Sat Aug 29 05:11:30.713783 2026] [security2:error] [pid 11274:tid 11467] [client 52.139.37.240:2595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "5mike3.com"] [uri "/fw.php"] [unique_id "apK-YmbX5DA3XO6e_qRCGAAAASE"]
[Sat Aug 29 05:11:30.717311 2026] [security2:error] [pid 11274:tid 11452] [client 4.205.62.107:63026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/phpinfo01.php"] [unique_id "apK-YmbX5DA3XO6e_qRCGgAAARI"]
[Sat Aug 29 05:11:30.723346 2026] [security2:error] [pid 11274:tid 11520] [client 93.123.109.228:60940] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/api-backend/.env"] [unique_id "apK-YmbX5DA3XO6e_qRCHQAAAVU"]
[Sat Aug 29 05:11:30.725555 2026] [security2:error] [pid 11274:tid 11519] [client 68.155.159.216:21449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-content/radio.php"] [unique_id "apK-YmbX5DA3XO6e_qRCIAAAAVQ"]
[Sat Aug 29 05:11:30.726988 2026] [security2:error] [pid 11274:tid 11523] [client 20.240.128.207:18229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/admin/index.php"] [unique_id "apK-YmbX5DA3XO6e_qRCIQAAAVg"]
[Sat Aug 29 05:11:30.733639 2026] [security2:error] [pid 11274:tid 11487] [client 40.83.93.50:6691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/wp-admin.php"] [unique_id "apK-YmbX5DA3XO6e_qRCJAAAATQ"]
[Sat Aug 29 05:11:30.733802 2026] [security2:error] [pid 11274:tid 11397] [remote 160.153.252.100:38316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.252.153.160.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jennysoft.com"] [uri "/wp-login.php"] [unique_id "apK-YmbX5DA3XO6e_qRCHgABfFM"], referer: https://jennysoft.com/wp-login.php
[Sat Aug 29 05:11:30.741451 2026] [security2:error] [pid 11274:tid 11535] [client 158.23.184.117:11528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/wp-content/images/uploads/admin.php"] [unique_id "apK-YmbX5DA3XO6e_qRCJQAAAWQ"]
[Sat Aug 29 05:11:30.744197 2026] [security2:error] [pid 11274:tid 11537] [client 20.52.41.200:5129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK-YmbX5DA3XO6e_qRCJgAAAWY"]
[Sat Aug 29 05:11:30.753308 2026] [security2:error] [pid 11274:tid 11544] [client 20.220.204.93:17228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/elp.php"] [unique_id "apK-YmbX5DA3XO6e_qRCJwAAAWw"]
[Sat Aug 29 05:11:30.755421 2026] [security2:error] [pid 11274:tid 11497] [client 93.123.109.228:32820] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/api-node/.env"] [unique_id "apK-YmbX5DA3XO6e_qRCKAAAAT4"]
[Sat Aug 29 05:11:30.757037 2026] [security2:error] [pid 11274:tid 11486] [client 20.104.18.15:15065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/indo.php"] [unique_id "apK-YmbX5DA3XO6e_qRCKQAAATM"]
[Sat Aug 29 05:11:30.818464 2026] [security2:error] [pid 11274:tid 11526] [client 158.158.54.35:23389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-load.php"] [unique_id "apK-YmbX5DA3XO6e_qRCMAAAAVs"]
[Sat Aug 29 05:11:30.824839 2026] [security2:error] [pid 1321:tid 1596] [client 45.148.10.62:51738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zeh.elx.mybluehost.me"] [uri "/wp-config.php"] [unique_id "apK-YmjCPtor9NZ-byT3GQAABqc"]
[Sat Aug 29 05:11:30.825153 2026] [security2:error] [pid 1321:tid 1614] [client 20.104.18.15:43899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/sushi.php"] [unique_id "apK-YmjCPtor9NZ-byT3GgAABrk"]
[Sat Aug 29 05:11:30.833291 2026] [security2:error] [pid 11274:tid 11515] [client 20.48.250.41:27574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/galer.php"] [unique_id "apK-YmbX5DA3XO6e_qRCMQAAAVA"]
[Sat Aug 29 05:11:30.834548 2026] [security2:error] [pid 1321:tid 1586] [client 20.48.250.41:49574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/erty.php"] [unique_id "apK-YmjCPtor9NZ-byT3HAAABp0"]
[Sat Aug 29 05:11:30.846703 2026] [security2:error] [pid 11274:tid 11444] [client 93.123.109.228:32836] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/api/.env"] [unique_id "apK-YmbX5DA3XO6e_qRCMwAAAQo"]
[Sat Aug 29 05:11:30.853661 2026] [security2:error] [pid 1321:tid 1563] [client 20.52.41.200:2624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "apK-YmjCPtor9NZ-byT3HQAABoY"]
[Sat Aug 29 05:11:30.865292 2026] [security2:error] [pid 11274:tid 11569] [client 93.123.109.228:32870] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/administrator/.env"] [unique_id "apK-YmbX5DA3XO6e_qRCNAAAAYU"]
[Sat Aug 29 05:11:30.874786 2026] [security2:error] [pid 11274:tid 11543] [client 20.63.219.114:2270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/inputs.php"] [unique_id "apK-YmbX5DA3XO6e_qRCNQAAAWs"]
[Sat Aug 29 05:11:30.878003 2026] [http2:warn] [pid 1028675:tid 1028913] [client 57.141.14.3:24616] h2_stream(1028675-217-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:11:30.885322 2026] [security2:error] [pid 1321:tid 1606] [client 20.151.200.44:27137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/fgd.php"] [unique_id "apK-YmjCPtor9NZ-byT3HgAABrE"]
[Sat Aug 29 05:11:30.888556 2026] [security2:error] [pid 11274:tid 11511] [client 158.23.184.117:11323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/tools.php"] [unique_id "apK-YmbX5DA3XO6e_qRCNgAAAUw"]
[Sat Aug 29 05:11:30.911565 2026] [security2:error] [pid 11274:tid 11558] [client 52.139.37.240:61656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "5mike3.com"] [uri "/zwso.php"] [unique_id "apK-YmbX5DA3XO6e_qRCNwAAAXo"]
[Sat Aug 29 05:11:30.915336 2026] [security2:error] [pid 11274:tid 11504] [client 20.220.204.93:17241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/666.php"] [unique_id "apK-YmbX5DA3XO6e_qRCOAAAAUU"]
[Sat Aug 29 05:11:30.951533 2026] [security2:error] [pid 11274:tid 11521] [client 43.172.196.135:44146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.196.172.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewtopic.php"] [unique_id "apK-YmbX5DA3XO6e_qRCOgAAAVY"]
[Sat Aug 29 05:11:30.955815 2026] [security2:error] [pid 11274:tid 11330] [remote 34.74.130.21:47710] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "redelan.cl"] [uri "/.env"] [unique_id "apK-YmbX5DA3XO6e_qRCPQABUxE"]
[Sat Aug 29 05:11:30.969626 2026] [security2:error] [pid 11274:tid 11411] [remote 34.74.130.21:47710] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "redelan.cl"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2froot/.env"] [unique_id "apK-YmbX5DA3XO6e_qRCQwABdWE"]
[Sat Aug 29 05:11:30.977809 2026] [security2:error] [pid 1321:tid 1501] [client 20.104.18.15:15348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/sign.php"] [unique_id "apK-YmjCPtor9NZ-byT3IQAABkk"]
[Sat Aug 29 05:11:31.007723 2026] [security2:error] [pid 11274:tid 11500] [client 158.158.54.35:17699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/gifclass.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCSAAAAUE"]
[Sat Aug 29 05:11:31.010362 2026] [security2:error] [pid 11274:tid 11400] [remote 34.74.130.21:47710] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "redelan.cl"] [uri "/@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ"] [unique_id "apK-Y2bX5DA3XO6e_qRCSwABRlY"]
[Sat Aug 29 05:11:31.010630 2026] [security2:error] [pid 11274:tid 11455] [client 20.48.250.41:27619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/baixy.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCTQAAARU"]
[Sat Aug 29 05:11:31.011595 2026] [security2:error] [pid 11274:tid 11401] [remote 34.74.130.21:47710] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "redelan.cl"] [uri "/.env"] [unique_id "apK-Y2bX5DA3XO6e_qRCTAABRlc"]
[Sat Aug 29 05:11:31.011659 2026] [security2:error] [pid 11274:tid 11420] [remote 34.74.130.21:47710] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "redelan.cl"] [uri "/media../.env"] [unique_id "apK-Y2bX5DA3XO6e_qRCSgABRmo"]
[Sat Aug 29 05:11:31.011741 2026] [security2:error] [pid 11274:tid 11416] [remote 34.74.130.21:47710] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "redelan.cl"] [uri "/static../.env"] [unique_id "apK-Y2bX5DA3XO6e_qRCSQABRmY"]
[Sat Aug 29 05:11:31.017133 2026] [security2:error] [pid 1321:tid 1489] [client 20.151.200.44:62975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/waf.php"] [unique_id "apK-Y2jCPtor9NZ-byT3JwAABj0"]
[Sat Aug 29 05:11:31.017373 2026] [security2:error] [pid 11274:tid 11552] [client 20.63.219.114:13482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-content/index.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCTwAAAXQ"]
[Sat Aug 29 05:11:31.021232 2026] [security2:error] [pid 1321:tid 1593] [client 60.243.207.176:64901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK-Y2jCPtor9NZ-byT3KQAABqQ"]
[Sat Aug 29 05:11:31.021372 2026] [security2:error] [pid 1321:tid 1593] [client 60.243.207.176:64901] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK-Y2jCPtor9NZ-byT3KQAABqQ"]
[Sat Aug 29 05:11:31.024539 2026] [security2:error] [pid 1321:tid 1395] [remote 34.75.72.74:45044] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "charleneongreen.com"] [uri "/static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ"] [unique_id "apK-Y2jCPtor9NZ-byT3KwAGWCU"]
[Sat Aug 29 05:11:31.036295 2026] [security2:error] [pid 11274:tid 11501] [client 158.23.184.117:11531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/wp-content/uploads/my.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCUQAAAUI"]
[Sat Aug 29 05:11:31.041413 2026] [security2:error] [pid 11274:tid 11484] [client 4.205.62.107:60302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/public/vx.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCUgAAATE"]
[Sat Aug 29 05:11:31.047372 2026] [security2:error] [pid 11274:tid 11555] [client 20.100.175.163:31877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/upload.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCUwAAAXc"]
[Sat Aug 29 05:11:31.055555 2026] [security2:error] [pid 11274:tid 11512] [client 20.104.18.15:43845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/manga.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCVAAAAU0"]
[Sat Aug 29 05:11:31.083725 2026] [security2:error] [pid 11274:tid 11468] [client 93.123.109.228:32836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/api/info.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCVQAAASI"]
[Sat Aug 29 05:11:31.086859 2026] [security2:error] [pid 1321:tid 1514] [client 4.205.62.107:58375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/broadcasting.php"] [unique_id "apK-Y2jCPtor9NZ-byT3LQAABlY"]
[Sat Aug 29 05:11:31.097163 2026] [security2:error] [pid 1321:tid 1573] [client 20.220.204.93:19496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/knmt.php"] [unique_id "apK-Y2jCPtor9NZ-byT3LgAABpA"]
[Sat Aug 29 05:11:31.101799 2026] [security2:error] [pid 11274:tid 11467] [client 68.155.159.216:14317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCWAAAASE"]
[Sat Aug 29 05:11:31.103332 2026] [security2:error] [pid 11274:tid 11494] [client 40.83.93.50:9826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/haiterus.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCWQAAATs"]
[Sat Aug 29 05:11:31.105619 2026] [security2:error] [pid 1321:tid 1576] [client 20.100.175.163:26498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK-Y2jCPtor9NZ-byT3LwAABpM"]
[Sat Aug 29 05:11:31.106028 2026] [security2:error] [pid 11274:tid 11571] [client 43.173.175.199:39946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 199.175.173.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewtopic.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCVwAAAYc"]
[Sat Aug 29 05:11:31.114935 2026] [security2:error] [pid 1321:tid 1542] [client 52.139.37.240:2907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "5mike3.com"] [uri "/admin/function.php"] [unique_id "apK-Y2jCPtor9NZ-byT3MQAABnI"]
[Sat Aug 29 05:11:31.118722 2026] [security2:error] [pid 1321:tid 1512] [client 93.123.109.228:60826] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/back-api/.env"] [unique_id "apK-Y2jCPtor9NZ-byT3MgAABlQ"]
[Sat Aug 29 05:11:31.121206 2026] [security2:error] [pid 11274:tid 11544] [client 93.123.109.228:60838] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/back-end/.env"] [unique_id "apK-Y2bX5DA3XO6e_qRCWgAAAWw"]
[Sat Aug 29 05:11:31.123946 2026] [security2:error] [pid 1321:tid 1613] [client 43.173.178.171:43590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 171.178.173.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewtopic.php"] [unique_id "apK-Y2jCPtor9NZ-byT3MwAABrg"]
[Sat Aug 29 05:11:31.126854 2026] [security2:error] [pid 1321:tid 1519] [client 43.173.181.129:59606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 129.181.173.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewtopic.php"] [unique_id "apK-Y2jCPtor9NZ-byT3MAAABls"]
[Sat Aug 29 05:11:31.130905 2026] [security2:error] [pid 1321:tid 1555] [client 158.173.241.137:35247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.241.173.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mikelait.com"] [uri "/suggest.php"] [unique_id "apK-Y2jCPtor9NZ-byT3NAAABn4"], referer: https://mikelait.com/suggest.php?page=Our+Family+Genealogy+Pages
[Sat Aug 29 05:11:31.133998 2026] [security2:error] [pid 11274:tid 11481] [client 20.104.18.15:15275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/wnnjpsby.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCXAAAAS4"]
[Sat Aug 29 05:11:31.145912 2026] [security2:error] [pid 1321:tid 1498] [client 93.123.109.228:60896] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/back/.env"] [unique_id "apK-Y2jCPtor9NZ-byT3NQAABkY"]
[Sat Aug 29 05:11:31.149883 2026] [security2:error] [pid 1321:tid 1565] [client 68.155.159.216:49030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK-Y2jCPtor9NZ-byT3NgAABog"]
[Sat Aug 29 05:11:31.151559 2026] [security2:error] [pid 1321:tid 1401] [remote 74.7.227.189:58798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 189.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pinnacleforms.com"] [uri "/j2QBcst.php"] [unique_id "apK-Y2jCPtor9NZ-byT3NwAGdCs"], referer: https://mail.pinnacleforms.com/
[Sat Aug 29 05:11:31.160899 2026] [security2:error] [pid 11274:tid 11551] [client 93.123.109.228:60936] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/backend-api/.env"] [unique_id "apK-Y2bX5DA3XO6e_qRCXQAAAXM"]
[Sat Aug 29 05:11:31.167932 2026] [security2:error] [pid 11274:tid 11569] [client 158.23.147.79:39338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-content/cong.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCXgAAAYU"]
[Sat Aug 29 05:11:31.172029 2026] [security2:error] [pid 11274:tid 11451] [client 43.173.174.69:41190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.174.173.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewtopic.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCWwAAARE"]
[Sat Aug 29 05:11:31.175443 2026] [security2:error] [pid 1321:tid 1545] [client 68.155.159.216:23473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-mail.php"] [unique_id "apK-Y2jCPtor9NZ-byT3OAAABnU"]
[Sat Aug 29 05:11:31.179874 2026] [security2:error] [pid 1321:tid 1564] [client 158.23.147.79:38778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-admin/network/index.php"] [unique_id "apK-Y2jCPtor9NZ-byT3OQAABoc"]
[Sat Aug 29 05:11:31.182241 2026] [security2:error] [pid 11274:tid 11547] [client 158.23.184.117:65155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/wp-includes/themes/uploads/config.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCYgAAAW8"]
[Sat Aug 29 05:11:31.190010 2026] [security2:error] [pid 11274:tid 11546] [client 20.48.250.41:26937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/ava.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCYwAAAW4"]
[Sat Aug 29 05:11:31.191306 2026] [security2:error] [pid 11274:tid 11463] [client 20.104.49.130:36404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCZAAAAR0"]
[Sat Aug 29 05:11:31.193131 2026] [security2:error] [pid 11274:tid 11572] [client 20.104.18.15:43886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/asdfghj.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCZQAAAYg"]
[Sat Aug 29 05:11:31.200247 2026] [security2:error] [pid 1321:tid 1537] [client 158.23.184.117:18329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/.dj/index.php"] [unique_id "apK-Y2jCPtor9NZ-byT3OgAABm0"]
[Sat Aug 29 05:11:31.211545 2026] [security2:error] [pid 1321:tid 1526] [client 93.123.109.228:32932] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK-Y2jCPtor9NZ-byT3PAAABmI"]
[Sat Aug 29 05:11:31.211834 2026] [core:error] [pid 1321:tid 1490] [client 20.52.41.200:5120] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:31.211863 2026] [core:error] [pid 1321:tid 1490] [client 20.52.41.200:5120] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:31.217954 2026] [security2:error] [pid 1321:tid 1601] [client 20.240.128.207:5187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/ioxi-o.php"] [unique_id "apK-Y2jCPtor9NZ-byT3PgAABqw"]
[Sat Aug 29 05:11:31.226392 2026] [security2:error] [pid 1321:tid 1560] [client 20.240.128.207:23260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/storage/rip.php"] [unique_id "apK-Y2jCPtor9NZ-byT3PwAABoM"]
[Sat Aug 29 05:11:31.232159 2026] [security2:error] [pid 11274:tid 11487] [client 20.63.219.114:10404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/class-walker-category-dropdown-class.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCawAAATQ"]
[Sat Aug 29 05:11:31.250557 2026] [security2:error] [pid 1321:tid 1582] [client 40.83.93.50:9997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/wp-configs.php"] [unique_id "apK-Y2jCPtor9NZ-byT3QAAABpk"]
[Sat Aug 29 05:11:31.259250 2026] [security2:error] [pid 11274:tid 11477] [client 158.23.147.79:24535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/xmlrpc.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCbgAAASs"]
[Sat Aug 29 05:11:31.278650 2026] [security2:error] [pid 11274:tid 11495] [client 20.104.18.15:15288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/gigi.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCcAAAATw"]
[Sat Aug 29 05:11:31.290394 2026] [security2:error] [pid 11274:tid 11492] [client 20.104.104.62:61805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/13ede.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCcwAAATk"]
[Sat Aug 29 05:11:31.295769 2026] [security2:error] [pid 1321:tid 1498] [client 20.52.41.200:2866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/gifclass.php"] [unique_id "apK-Y2jCPtor9NZ-byT3QgAABkY"]
[Sat Aug 29 05:11:31.303884 2026] [security2:error] [pid 11274:tid 11501] [client 20.220.204.93:23993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/sbhu.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCdAAAAUI"]
[Sat Aug 29 05:11:31.307984 2026] [security2:error] [pid 1321:tid 1552] [client 52.139.37.240:2606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "5mike3.com"] [uri "/zoom1.php"] [unique_id "apK-Y2jCPtor9NZ-byT3RAAABns"]
[Sat Aug 29 05:11:31.321839 2026] [security2:error] [pid 11274:tid 11512] [client 4.205.62.107:59088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/userfuns.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCdgAAAU0"]
[Sat Aug 29 05:11:31.324214 2026] [security2:error] [pid 11274:tid 11465] [client 20.104.18.15:43926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/dragonshell.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCeAAAAR8"]
[Sat Aug 29 05:11:31.326395 2026] [security2:error] [pid 11274:tid 11455] [client 158.23.184.117:11536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/av.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCeQAAARU"]
[Sat Aug 29 05:11:31.332326 2026] [security2:error] [pid 1321:tid 1523] [client 93.123.109.228:60996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/api/phpinfo.php"] [unique_id "apK-Y2jCPtor9NZ-byT3RwAABl8"]
[Sat Aug 29 05:11:31.335830 2026] [security2:error] [pid 11274:tid 11468] [client 20.48.250.41:27527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/gdn.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCewAAASI"]
[Sat Aug 29 05:11:31.339441 2026] [security2:error] [pid 11274:tid 11509] [client 68.155.159.216:56729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCfAAAAUo"]
[Sat Aug 29 05:11:31.347987 2026] [security2:error] [pid 11274:tid 11522] [client 158.23.184.117:18114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/.info.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCfQAAAVc"]
[Sat Aug 29 05:11:31.368143 2026] [security2:error] [pid 1321:tid 1535] [client 20.63.219.114:19456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-content/install.php"] [unique_id "apK-Y2jCPtor9NZ-byT3SQAABms"]
[Sat Aug 29 05:11:31.388807 2026] [security2:error] [pid 11274:tid 11475] [client 158.23.147.79:59505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCgwAAASk"]
[Sat Aug 29 05:11:31.398620 2026] [security2:error] [pid 11274:tid 11535] [client 93.123.109.228:60836] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/backup/.env"] [unique_id "apK-Y2bX5DA3XO6e_qRChAAAAWQ"]
[Sat Aug 29 05:11:31.406444 2026] [security2:error] [pid 11274:tid 11449] [client 45.148.10.62:51754] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "mail.zeh.elx.mybluehost.me"] [uri "/wp-config.php.old"] [unique_id "apK-Y2bX5DA3XO6e_qRChQAAAQ8"]
[Sat Aug 29 05:11:31.412866 2026] [security2:error] [pid 11274:tid 11476] [client 20.151.200.44:61593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/bnnof6.php"] [unique_id "apK-Y2bX5DA3XO6e_qRChgAAASo"]
[Sat Aug 29 05:11:31.419070 2026] [security2:error] [pid 11274:tid 11473] [client 158.158.54.35:17713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/a.php"] [unique_id "apK-Y2bX5DA3XO6e_qRChwAAASc"]
[Sat Aug 29 05:11:31.436999 2026] [security2:error] [pid 1321:tid 1494] [client 20.104.18.15:15244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/info.php/new.php"] [unique_id "apK-Y2jCPtor9NZ-byT3TgAABkI"]
[Sat Aug 29 05:11:31.438144 2026] [security2:error] [pid 1321:tid 1532] [client 93.123.109.228:60810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/be/.env"] [unique_id "apK-Y2jCPtor9NZ-byT3TQAABmg"]
[Sat Aug 29 05:11:31.439755 2026] [security2:error] [pid 11274:tid 11561] [client 20.104.104.62:52267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/k8.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCigAAAX0"]
[Sat Aug 29 05:11:31.444706 2026] [security2:error] [pid 1321:tid 1404] [remote 216.73.216.46:42727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo-store.sortthru.com"] [uri "/reception-signs/"] [unique_id "apK-Y2jCPtor9NZ-byT3TwAGrS4"]
[Sat Aug 29 05:11:31.445835 2026] [security2:error] [pid 11274:tid 11506] [client 93.123.109.228:32892] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/beta/.env"] [unique_id "apK-Y2bX5DA3XO6e_qRCiwAAAUc"]
[Sat Aug 29 05:11:31.481827 2026] [security2:error] [pid 11274:tid 11479] [client 93.123.109.228:60940] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/apis/.env"] [unique_id "apK-Y2bX5DA3XO6e_qRCkwAAASw"]
[Sat Aug 29 05:11:31.487150 2026] [security2:error] [pid 11274:tid 11450] [client 158.23.147.79:50126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/file5.php"] [unique_id "apK-Y2bX5DA3XO6e_qRClAAAARA"]
[Sat Aug 29 05:11:31.497261 2026] [security2:error] [pid 1321:tid 1507] [client 158.23.184.117:18167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/.trash7206/index.php"] [unique_id "apK-Y2jCPtor9NZ-byT3WAAABk8"]
[Sat Aug 29 05:11:31.503229 2026] [security2:error] [pid 11274:tid 11482] [client 61.9.8.35:23603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK-Y2bX5DA3XO6e_qRClQAAAS8"]
[Sat Aug 29 05:11:31.503333 2026] [security2:error] [pid 11274:tid 11482] [client 61.9.8.35:23603] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK-Y2bX5DA3XO6e_qRClQAAAS8"]
[Sat Aug 29 05:11:31.503750 2026] [security2:error] [pid 11274:tid 11563] [client 52.139.37.240:2920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "5mike3.com"] [uri "/about.php7"] [unique_id "apK-Y2bX5DA3XO6e_qRCmAAAAX8"]
[Sat Aug 29 05:11:31.506427 2026] [security2:error] [pid 11274:tid 11534] [client 20.104.104.62:33879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.americanvarietyradio.net"] [uri "/xmlrpc.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCjwAAAWM"]
[Sat Aug 29 05:11:31.511198 2026] [security2:error] [pid 11274:tid 11444] [client 20.48.250.41:26895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/f2.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCmwAAAQo"]
[Sat Aug 29 05:11:31.515096 2026] [security2:error] [pid 11274:tid 11539] [client 103.171.5.106:56650] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "ridetime.com"] [uri "/contact-us/"] [unique_id "apK-Y2bX5DA3XO6e_qRCnQAAAWg"], referer: http://ridetime.com/contact-us/
[Sat Aug 29 05:11:31.527585 2026] [security2:error] [pid 11274:tid 11361] [remote 34.74.130.21:47720] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "redelan.cl"] [uri "/api/.env/public/.env"] [unique_id "apK-Y2bX5DA3XO6e_qRCnwABWi8"]
[Sat Aug 29 05:11:31.533462 2026] [security2:error] [pid 11274:tid 11529] [client 20.220.204.93:15505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/a332.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCoAAAAV4"]
[Sat Aug 29 05:11:31.538319 2026] [security2:error] [pid 11274:tid 11547] [client 68.155.159.216:62818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-admin/dropdown.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCoQAAAW8"]
[Sat Aug 29 05:11:31.556926 2026] [security2:error] [pid 11274:tid 11464] [client 158.23.184.117:11265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/wp-includes/ID3/file.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCpQAAAR4"]
[Sat Aug 29 05:11:31.567419 2026] [security2:error] [pid 1321:tid 1606] [client 20.104.18.15:43962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/wp-safe.php"] [unique_id "apK-Y2jCPtor9NZ-byT3XgAABrE"]
[Sat Aug 29 05:11:31.568449 2026] [security2:error] [pid 11274:tid 11339] [remote 34.74.130.21:47720] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "redelan.cl"] [uri "/.env"] [unique_id "apK-Y2bX5DA3XO6e_qRCpwABaRo"]
[Sat Aug 29 05:11:31.569811 2026] [security2:error] [pid 1321:tid 1562] [client 68.155.159.216:1794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/cong.php"] [unique_id "apK-Y2jCPtor9NZ-byT3XwAABoU"]
[Sat Aug 29 05:11:31.575342 2026] [security2:error] [pid 11274:tid 11533] [client 20.104.104.62:42077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/alog.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCqQAAAWI"]
[Sat Aug 29 05:11:31.579217 2026] [security2:error] [pid 11274:tid 11497] [client 40.83.93.50:8349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/go.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCqwAAAT4"]
[Sat Aug 29 05:11:31.584812 2026] [security2:error] [pid 11274:tid 11487] [client 20.151.200.44:27317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/inject.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCrQAAATQ"]
[Sat Aug 29 05:11:31.590264 2026] [security2:error] [pid 11274:tid 11502] [client 158.23.147.79:58937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCsAAAAUM"]
[Sat Aug 29 05:11:31.597970 2026] [security2:error] [pid 11274:tid 11353] [remote 34.74.130.21:47720] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "redelan.cl"] [uri "/static/home/user/.env"] [unique_id "apK-Y2bX5DA3XO6e_qRCsQABKyg"]
[Sat Aug 29 05:11:31.604482 2026] [core:error] [pid 11274:tid 11530] [client 20.100.175.163:9593] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:31.604501 2026] [core:error] [pid 11274:tid 11530] [client 20.100.175.163:9593] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:31.617991 2026] [security2:error] [pid 11274:tid 11465] [client 158.158.54.35:23401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCswAAAR8"]
[Sat Aug 29 05:11:31.627090 2026] [security2:error] [pid 11274:tid 11466] [client 20.63.219.114:8940] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "oldwestradio.livingthecode.org"] [uri "/1.php7"] [unique_id "apK-Y2bX5DA3XO6e_qRCtgAAASA"]
[Sat Aug 29 05:11:31.627213 2026] [security2:error] [pid 11274:tid 11466] [client 20.63.219.114:8940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/1.php7"] [unique_id "apK-Y2bX5DA3XO6e_qRCtgAAASA"]
[Sat Aug 29 05:11:31.632903 2026] [security2:error] [pid 11274:tid 11468] [client 4.205.62.107:63895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/mcebraed.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCtwAAASI"]
[Sat Aug 29 05:11:31.636224 2026] [security2:error] [pid 1321:tid 1581] [client 34.169.171.101:52968] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/public/.env"] [unique_id "apK-Y2jCPtor9NZ-byT3YAAABpg"]
[Sat Aug 29 05:11:31.640113 2026] [security2:error] [pid 11274:tid 11565] [client 158.23.184.117:18339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/.trash7206/min.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCugAAAYE"]
[Sat Aug 29 05:11:31.641396 2026] [security2:error] [pid 1321:tid 1597] [client 34.169.171.101:53002] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/.github/.env"] [unique_id "apK-Y2jCPtor9NZ-byT3YQAABqg"]
[Sat Aug 29 05:11:31.644932 2026] [security2:error] [pid 11274:tid 11459] [client 93.123.109.228:33064] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/app/.env"] [unique_id "apK-Y2bX5DA3XO6e_qRCvwAAARk"]
[Sat Aug 29 05:11:31.655181 2026] [security2:error] [pid 11274:tid 11566] [client 20.48.250.41:42962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/0x.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCwQAAAYI"]
[Sat Aug 29 05:11:31.656229 2026] [security2:error] [pid 1321:tid 1499] [client 20.48.250.41:27647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/grsiuk.php"] [unique_id "apK-Y2jCPtor9NZ-byT3ZAAABkc"]
[Sat Aug 29 05:11:31.659258 2026] [security2:error] [pid 1321:tid 1514] [client 20.104.104.62:20613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/edit.php"] [unique_id "apK-Y2jCPtor9NZ-byT3ZQAABlY"]
[Sat Aug 29 05:11:31.662795 2026] [security2:error] [pid 11274:tid 11469] [client 20.52.41.200:5120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/lite.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCwgAAASM"]
[Sat Aug 29 05:11:31.666864 2026] [security2:error] [pid 11274:tid 11555] [client 34.169.171.101:53070] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.forensicengineernj.com"] [uri "/aws_credentials"] [unique_id "apK-Y2bX5DA3XO6e_qRCwwAAAXc"]
[Sat Aug 29 05:11:31.675610 2026] [security2:error] [pid 11274:tid 11452] [client 20.104.49.130:51084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "connectdotz.com"] [uri "/chosen.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCxQAAARI"]
[Sat Aug 29 05:11:31.685297 2026] [security2:error] [pid 11274:tid 11560] [client 93.123.109.228:60838] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/client/.env"] [unique_id "apK-Y2bX5DA3XO6e_qRCyQAAAXw"]
[Sat Aug 29 05:11:31.698555 2026] [security2:error] [pid 11274:tid 11476] [client 20.104.104.62:28601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "buddhistonthebattleship.managemymood.com"] [uri "/wp-content/index.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCywAAASo"]
[Sat Aug 29 05:11:31.699814 2026] [security2:error] [pid 11274:tid 11522] [client 52.139.37.240:2616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "5mike3.com"] [uri "/cron.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCzAAAAVc"]
[Sat Aug 29 05:11:31.707553 2026] [security2:error] [pid 11274:tid 11461] [client 158.23.184.117:65155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sarahgeving.barhashing.com"] [uri "/wp-admin/css/fff.php"] [unique_id "apK-Y2bX5DA3XO6e_qRCzQAAARs"]
[Sat Aug 29 05:11:31.718686 2026] [security2:error] [pid 1321:tid 1550] [client 20.104.104.62:34718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.americanvarietyradio.net"] [uri "/.tmb/index.php"] [unique_id "apK-Y2jCPtor9NZ-byT3dwAABnk"]
[Sat Aug 29 05:11:31.721187 2026] [security2:error] [pid 11274:tid 11546] [client 20.240.128.207:1267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/xmlrpc.php"] [unique_id "apK-Y2bX5DA3XO6e_qRC0QAAAW4"]
[Sat Aug 29 05:11:31.731457 2026] [security2:error] [pid 11274:tid 11527] [client 68.155.159.216:33671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/worksec.php"] [unique_id "apK-Y2bX5DA3XO6e_qRC1QAAAVw"]
[Sat Aug 29 05:11:31.734685 2026] [security2:error] [pid 1321:tid 1459] [remote 34.75.72.74:52990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/web.config"] [unique_id "apK-Y2jCPtor9NZ-byT3eQAGVGQ"]
[Sat Aug 29 05:11:31.738118 2026] [security2:error] [pid 11274:tid 11454] [client 20.240.128.207:18640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/zoom1.php"] [unique_id "apK-Y2bX5DA3XO6e_qRC1wAAARQ"]
[Sat Aug 29 05:11:31.743796 2026] [security2:error] [pid 11274:tid 11543] [client 202.71.25.11:64576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.25.71.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK-Y2bX5DA3XO6e_qRC2QAAAWs"]
[Sat Aug 29 05:11:31.743923 2026] [security2:error] [pid 11274:tid 11543] [client 202.71.25.11:64576] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK-Y2bX5DA3XO6e_qRC2QAAAWs"]
[Sat Aug 29 05:11:31.755834 2026] [core:error] [pid 11274:tid 11456] [client 20.52.41.200:2686] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:31.755859 2026] [core:error] [pid 11274:tid 11456] [client 20.52.41.200:2686] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:31.769867 2026] [security2:error] [pid 11274:tid 11444] [client 20.104.18.15:43795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/gjewuagf.php"] [unique_id "apK-Y2bX5DA3XO6e_qRC3AAAAQo"]
[Sat Aug 29 05:11:31.770944 2026] [security2:error] [pid 11274:tid 11500] [client 40.83.93.50:3961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/essexec.php"] [unique_id "apK-Y2bX5DA3XO6e_qRC3QAAAUE"]
[Sat Aug 29 05:11:31.771005 2026] [security2:error] [pid 1321:tid 1589] [client 197.232.63.170:61657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 170.63.232.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK-Y2jCPtor9NZ-byT3fgAABqA"]
[Sat Aug 29 05:11:31.771129 2026] [security2:error] [pid 1321:tid 1589] [client 197.232.63.170:61657] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK-Y2jCPtor9NZ-byT3fgAABqA"]
[Sat Aug 29 05:11:31.774442 2026] [security2:error] [pid 11274:tid 11539] [client 93.123.109.228:32892] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/cms/.env"] [unique_id "apK-Y2bX5DA3XO6e_qRC3gAAAWg"]
[Sat Aug 29 05:11:31.782925 2026] [security2:error] [pid 11274:tid 11472] [client 4.205.62.107:64258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/app_dev.php"] [unique_id "apK-Y2bX5DA3XO6e_qRC4QAAASY"]
[Sat Aug 29 05:11:31.791005 2026] [security2:error] [pid 1321:tid 1512] [client 158.23.184.117:18113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/.well-known//index.php"] [unique_id "apK-Y2jCPtor9NZ-byT3gAAABlQ"]
[Sat Aug 29 05:11:31.804261 2026] [security2:error] [pid 11274:tid 11545] [client 20.220.204.93:15502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/ws66.php"] [unique_id "apK-Y2bX5DA3XO6e_qRC5AAAAW0"]
[Sat Aug 29 05:11:31.819637 2026] [security2:error] [pid 11274:tid 11558] [client 4.205.62.107:6850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/environment.php"] [unique_id "apK-Y2bX5DA3XO6e_qRC5QAAAXo"]
[Sat Aug 29 05:11:31.848344 2026] [security2:error] [pid 11274:tid 11554] [client 68.155.159.216:56716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-admin/dropdown.php"] [unique_id "apK-Y2bX5DA3XO6e_qRC6QAAAXY"]
[Sat Aug 29 05:11:31.848838 2026] [security2:error] [pid 11274:tid 11533] [client 20.104.104.62:42102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/adin.php"] [unique_id "apK-Y2bX5DA3XO6e_qRC6gAAAWI"]
[Sat Aug 29 05:11:31.849244 2026] [security2:error] [pid 11274:tid 11572] [client 20.48.250.41:27541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/wp-scr1pts.php"] [unique_id "apK-Y2bX5DA3XO6e_qRC6wAAAYg"]
[Sat Aug 29 05:11:31.849891 2026] [security2:error] [pid 11274:tid 11502] [client 20.63.219.114:13471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK-Y2bX5DA3XO6e_qRC7AAAAUM"]
[Sat Aug 29 05:11:31.857866 2026] [security2:error] [pid 1321:tid 1508] [client 4.205.62.107:62996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/cxc.php"] [unique_id "apK-Y2jCPtor9NZ-byT3gwAABlA"]
[Sat Aug 29 05:11:31.866913 2026] [security2:error] [pid 11274:tid 11483] [client 158.158.54.35:8451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/u.php"] [unique_id "apK-Y2bX5DA3XO6e_qRC7gAAATA"]
[Sat Aug 29 05:11:31.889607 2026] [security2:error] [pid 11274:tid 11468] [client 20.104.49.130:50612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/coffexium.php"] [unique_id "apK-Y2bX5DA3XO6e_qRC8gAAASI"]
[Sat Aug 29 05:11:31.899524 2026] [cgid:error] [pid 11274:tid 11507] [client 20.104.18.15:15245] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/penmarke/public_html/petgrooming/404.shtml
[Sat Aug 29 05:11:31.899561 2026] [security2:error] [pid 11274:tid 11565] [client 20.100.175.163:30395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-content/file.php"] [unique_id "apK-Y2bX5DA3XO6e_qRC9AAAAYE"]
[Sat Aug 29 05:11:31.900398 2026] [security2:error] [pid 1321:tid 1510] [client 52.139.37.240:2565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "5mike3.com"] [uri "/wp-2019.php"] [unique_id "apK-Y2jCPtor9NZ-byT3hgAABlI"]
[Sat Aug 29 05:11:31.901775 2026] [security2:error] [pid 1321:tid 1510] [client 93.123.109.228:60826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/config.php"] [unique_id "apK-Y2jCPtor9NZ-byT3hwAABlI"]
[Sat Aug 29 05:11:31.904085 2026] [security2:error] [pid 11274:tid 11459] [client 68.155.159.216:7114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-login.php"] [unique_id "apK-Y2bX5DA3XO6e_qRC9gAAARk"]
[Sat Aug 29 05:11:31.922624 2026] [security2:error] [pid 11274:tid 11538] [client 68.155.159.216:64393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK-Y2bX5DA3XO6e_qRC-AAAAWc"]
[Sat Aug 29 05:11:31.941338 2026] [security2:error] [pid 11274:tid 11493] [client 158.23.184.117:18309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/.well-known/about.php"] [unique_id "apK-Y2bX5DA3XO6e_qRC_QAAATo"]
[Sat Aug 29 05:11:31.945923 2026] [security2:error] [pid 11274:tid 11331] [remote 34.74.130.21:47720] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "redelan.cl"] [uri "/.env"] [unique_id "apK-Y2bX5DA3XO6e_qRC_AABPRI"]
[Sat Aug 29 05:11:31.947757 2026] [core:error] [pid 11274:tid 11414] [remote 34.74.130.21:47720] AH10244: invalid URI path (/%2e%2e/.env)
[Sat Aug 29 05:11:31.948976 2026] [security2:error] [pid 11274:tid 11415] [remote 34.74.130.21:47720] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "redelan.cl"] [uri "/static/app/.env"] [unique_id "apK-Y2bX5DA3XO6e_qRC_wABPWU"]
[Sat Aug 29 05:11:31.949263 2026] [security2:error] [pid 11274:tid 11421] [remote 34.74.130.21:47720] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "redelan.cl"] [uri "/.env"] [unique_id "apK-Y2bX5DA3XO6e_qRC_gABPWs"]
[Sat Aug 29 05:11:31.952326 2026] [security2:error] [pid 1321:tid 1538] [client 20.104.104.62:20668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/11.php"] [unique_id "apK-Y2jCPtor9NZ-byT3jwAABm4"]
[Sat Aug 29 05:11:31.982240 2026] [security2:error] [pid 11274:tid 11549] [client 20.104.104.62:58688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/sf9.php"] [unique_id "apK-Y2bX5DA3XO6e_qRDBgAAAXE"]
[Sat Aug 29 05:11:31.990999 2026] [security2:error] [pid 1321:tid 1526] [client 20.104.104.62:28560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "buddhistonthebattleship.managemymood.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "apK-Y2jCPtor9NZ-byT3kAAABmI"]
[Sat Aug 29 05:11:31.993607 2026] [security2:error] [pid 11274:tid 11461] [client 20.104.104.62:33887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.americanvarietyradio.net"] [uri "/.well-known/admin.php"] [unique_id "apK-Y2bX5DA3XO6e_qRDCQAAARs"]
[Sat Aug 29 05:11:31.994453 2026] [security2:error] [pid 11274:tid 11501] [client 20.63.219.114:2755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/ds.php"] [unique_id "apK-Y2bX5DA3XO6e_qRDCgAAAUI"]
[Sat Aug 29 05:11:31.995302 2026] [security2:error] [pid 11274:tid 11561] [client 20.104.18.15:14995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/w.php"] [unique_id "apK-Y2bX5DA3XO6e_qRDCwAAAX0"]
[Sat Aug 29 05:11:32.015477 2026] [security2:error] [pid 1321:tid 1520] [client 20.220.204.93:18922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/ws68.php"] [unique_id "apK-ZGjCPtor9NZ-byT3lgAABlw"]
[Sat Aug 29 05:11:32.019832 2026] [security2:error] [pid 11274:tid 11527] [client 93.123.109.228:60924] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/config/.env"] [unique_id "apK-ZGbX5DA3XO6e_qRDEAAAAVw"]
[Sat Aug 29 05:11:32.047234 2026] [security2:error] [pid 11274:tid 11486] [client 20.104.18.15:43892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/tnglzqmv.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDFAAAATM"]
[Sat Aug 29 05:11:32.055485 2026] [security2:error] [pid 11274:tid 11456] [client 20.104.104.62:48600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/6y7t.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDFQAAARY"]
[Sat Aug 29 05:11:32.058443 2026] [security2:error] [pid 11274:tid 11471] [client 158.158.54.35:23008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/css/index.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDFgAAASU"]
[Sat Aug 29 05:11:32.066226 2026] [security2:error] [pid 11274:tid 11568] [client 93.123.109.228:33092] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/application/.env"] [unique_id "apK-ZGbX5DA3XO6e_qRDGAAAAYQ"]
[Sat Aug 29 05:11:32.084852 2026] [security2:error] [pid 1321:tid 1523] [client 93.123.109.228:32932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/config/aws.php"] [unique_id "apK-ZGjCPtor9NZ-byT3ogAABl8"]
[Sat Aug 29 05:11:32.096311 2026] [security2:error] [pid 11274:tid 11513] [client 40.83.93.50:9846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/gecko-new.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDHQAAAU4"]
[Sat Aug 29 05:11:32.097241 2026] [security2:error] [pid 11274:tid 11454] [client 52.139.37.240:61681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "5mike3.com"] [uri "/gecko-new.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDHgAAARQ"]
[Sat Aug 29 05:11:32.106922 2026] [security2:error] [pid 11274:tid 11525] [client 20.48.250.41:49586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/66.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDHwAAAVo"]
[Sat Aug 29 05:11:32.124175 2026] [security2:error] [pid 1321:tid 1537] [client 20.52.41.200:4778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/term.php"] [unique_id "apK-ZGjCPtor9NZ-byT3owAABm0"]
[Sat Aug 29 05:11:32.131260 2026] [security2:error] [pid 11274:tid 11560] [client 20.100.175.163:20571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-load.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDIgAAAXw"]
[Sat Aug 29 05:11:32.139600 2026] [security2:error] [pid 11274:tid 11463] [client 20.48.250.41:26885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/num.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDJAAAAR0"]
[Sat Aug 29 05:11:32.144343 2026] [security2:error] [pid 11274:tid 11445] [client 158.23.184.117:18135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDJQAAAQs"]
[Sat Aug 29 05:11:32.157765 2026] [security2:error] [pid 11274:tid 11572] [client 93.123.109.228:32774] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/apps/.env"] [unique_id "apK-ZGbX5DA3XO6e_qRDJwAAAYg"]
[Sat Aug 29 05:11:32.163608 2026] [security2:error] [pid 11274:tid 11546] [client 45.148.10.62:51756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zeh.elx.mybluehost.me"] [uri "/config.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDKQAAAW4"]
[Sat Aug 29 05:11:32.165651 2026] [security2:error] [pid 11274:tid 11477] [client 20.104.18.15:15067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/x.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDKgAAASs"]
[Sat Aug 29 05:11:32.168059 2026] [security2:error] [pid 11274:tid 11519] [client 93.123.109.228:32892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/config/config.inc.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDLAAAAVQ"]
[Sat Aug 29 05:11:32.177008 2026] [security2:error] [pid 11274:tid 11333] [remote 34.74.130.21:47720] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "redelan.cl"] [uri "/uploads../.env"] [unique_id "apK-ZGbX5DA3XO6e_qRDLQABXxQ"]
[Sat Aug 29 05:11:32.177644 2026] [security2:error] [pid 1321:tid 1574] [client 4.205.62.107:59123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/log.php"] [unique_id "apK-ZGjCPtor9NZ-byT3pAAABpE"]
[Sat Aug 29 05:11:32.179283 2026] [security2:error] [pid 11274:tid 11396] [remote 34.74.130.21:47720] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "redelan.cl"] [uri "/images../.env"] [unique_id "apK-ZGbX5DA3XO6e_qRDLgABP1I"]
[Sat Aug 29 05:11:32.181148 2026] [security2:error] [pid 11274:tid 11408] [remote 34.74.130.21:47720] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "redelan.cl"] [uri "/assets../.env"] [unique_id "apK-ZGbX5DA3XO6e_qRDMAABH14"]
[Sat Aug 29 05:11:32.190538 2026] [cgid:error] [pid 11274:tid 11379] [remote 34.74.130.21:47720] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:32.191006 2026] [cgid:error] [pid 11274:tid 11435] [remote 34.74.130.21:47720] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:32.204884 2026] [security2:error] [pid 11274:tid 11511] [client 20.52.41.200:2820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDNwAAAUw"]
[Sat Aug 29 05:11:32.209907 2026] [security2:error] [pid 1321:tid 1535] [client 20.104.104.62:34720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.americanvarietyradio.net"] [uri "/.well-known/index.php"] [unique_id "apK-ZGjCPtor9NZ-byT3pQAABms"]
[Sat Aug 29 05:11:32.217623 2026] [security2:error] [pid 11274:tid 11543] [client 20.240.128.207:4908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/filemanager.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDOAAAAWs"]
[Sat Aug 29 05:11:32.217963 2026] [security2:error] [pid 11274:tid 11495] [client 68.155.159.216:14236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/goat1.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDOQAAATw"]
[Sat Aug 29 05:11:32.222116 2026] [security2:error] [pid 11274:tid 11505] [client 93.123.109.228:60818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/config/config.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDOgAAAUY"]
[Sat Aug 29 05:11:32.232153 2026] [security2:error] [pid 1321:tid 1504] [client 20.63.219.114:17324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-content/languages/chosen.php"] [unique_id "apK-ZGjCPtor9NZ-byT3qAAABkw"]
[Sat Aug 29 05:11:32.239894 2026] [security2:error] [pid 11274:tid 11488] [client 40.83.93.50:3987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/hello.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDPQAAATU"]
[Sat Aug 29 05:11:32.239988 2026] [security2:error] [pid 11274:tid 11503] [client 20.240.128.207:23273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/txets.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDPgAAAUQ"]
[Sat Aug 29 05:11:32.243748 2026] [security2:error] [pid 1321:tid 1592] [client 4.205.62.107:51514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/v4.php"] [unique_id "apK-ZGjCPtor9NZ-byT3rwAABqM"]
[Sat Aug 29 05:11:32.249251 2026] [security2:error] [pid 11274:tid 11493] [client 20.104.104.62:61782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/lte7.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDQQAAATo"]
[Sat Aug 29 05:11:32.256139 2026] [security2:error] [pid 1321:tid 1532] [client 20.104.104.62:64706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/title.php"] [unique_id "apK-ZGjCPtor9NZ-byT3sQAABmg"]
[Sat Aug 29 05:11:32.256714 2026] [security2:error] [pid 11274:tid 11496] [client 68.155.159.216:49098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/chosen.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDRAAAAT0"]
[Sat Aug 29 05:11:32.258217 2026] [security2:error] [pid 11274:tid 11555] [client 20.220.204.93:23974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/users.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDRQAAAXc"]
[Sat Aug 29 05:11:32.282929 2026] [security2:error] [pid 11274:tid 11448] [client 20.48.250.41:42956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/f35.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDSAAAAQ4"]
[Sat Aug 29 05:11:32.285051 2026] [security2:error] [pid 11274:tid 11522] [client 93.123.109.228:60858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/config/env.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDSgAAAVc"]
[Sat Aug 29 05:11:32.285126 2026] [security2:error] [pid 11274:tid 11549] [client 158.23.147.79:63813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDSwAAAXE"]
[Sat Aug 29 05:11:32.289995 2026] [security2:error] [pid 11274:tid 11526] [client 52.139.37.240:2590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "5mike3.com"] [uri "/add_actualites.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDTAAAAVs"]
[Sat Aug 29 05:11:32.291058 2026] [security2:error] [pid 1321:tid 1615] [client 158.23.184.117:18126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/.well-known/acme-challenge/content.php"] [unique_id "apK-ZGjCPtor9NZ-byT3swAABro"]
[Sat Aug 29 05:11:32.304001 2026] [security2:error] [pid 11274:tid 11461] [client 20.151.200.44:63654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/ah24.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDTgAAARs"]
[Sat Aug 29 05:11:32.305149 2026] [security2:error] [pid 11274:tid 11561] [client 158.23.147.79:39308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDTwAAAX0"]
[Sat Aug 29 05:11:32.322333 2026] [security2:error] [pid 11274:tid 11491] [client 158.158.54.35:29467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/r.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDUAAAATg"]
[Sat Aug 29 05:11:32.326904 2026] [security2:error] [pid 1321:tid 1496] [client 20.48.250.41:27555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/a4.php"] [unique_id "apK-ZGjCPtor9NZ-byT3tgAABkQ"]
[Sat Aug 29 05:11:32.327731 2026] [security2:error] [pid 11274:tid 11449] [client 68.155.159.216:23453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/cgi-bin/index.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDUQAAAQ8"]
[Sat Aug 29 05:11:32.340772 2026] [security2:error] [pid 11274:tid 11559] [client 20.104.18.15:15075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/ssla.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDUgAAAXs"]
[Sat Aug 29 05:11:32.353545 2026] [security2:error] [pid 11274:tid 11480] [client 93.123.109.228:32904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/config/nexmo.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDVAAAAS0"]
[Sat Aug 29 05:11:32.353583 2026] [security2:error] [pid 11274:tid 11490] [client 93.123.109.228:32894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/config/module.config.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDVQAAATc"]
[Sat Aug 29 05:11:32.353847 2026] [security2:error] [pid 11274:tid 11534] [client 20.104.104.62:27690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "buddhistonthebattleship.managemymood.com"] [uri "/403.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDVgAAAWM"]
[Sat Aug 29 05:11:32.365528 2026] [security2:error] [pid 1321:tid 1586] [client 158.23.147.79:24533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/atomlib.php"] [unique_id "apK-ZGjCPtor9NZ-byT3twAABp0"]
[Sat Aug 29 05:11:32.367628 2026] [security2:error] [pid 1321:tid 1606] [client 20.151.200.44:27277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/mga.php"] [unique_id "apK-ZGjCPtor9NZ-byT3uAAABrE"]
[Sat Aug 29 05:11:32.392992 2026] [security2:error] [pid 1321:tid 1539] [client 20.100.175.163:27012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/files.php"] [unique_id "apK-ZGjCPtor9NZ-byT3vwAABm8"]
[Sat Aug 29 05:11:32.402690 2026] [security2:error] [pid 1321:tid 1593] [client 20.104.18.15:43809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/wefile.php"] [unique_id "apK-ZGjCPtor9NZ-byT3wAAABqQ"]
[Sat Aug 29 05:11:32.434794 2026] [security2:error] [pid 11274:tid 11323] [remote 34.74.130.21:47720] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "redelan.cl"] [uri "/api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ"] [unique_id "apK-ZGbX5DA3XO6e_qRDXAABUwo"]
[Sat Aug 29 05:11:32.460983 2026] [security2:error] [pid 1321:tid 1547] [client 4.205.62.107:59081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/mamzi.php"] [unique_id "apK-ZGjCPtor9NZ-byT3wgAABnY"]
[Sat Aug 29 05:11:32.467053 2026] [security2:error] [pid 1321:tid 1430] [remote 34.75.72.74:52990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/src/.env"] [unique_id "apK-ZGjCPtor9NZ-byT3xQAGokg"]
[Sat Aug 29 05:11:32.469088 2026] [security2:error] [pid 1321:tid 1576] [client 20.48.250.41:42914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/wen.php"] [unique_id "apK-ZGjCPtor9NZ-byT3xgAABpM"]
[Sat Aug 29 05:11:32.480965 2026] [security2:error] [pid 11274:tid 11445] [client 20.104.18.15:15314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDYQAAAQs"]
[Sat Aug 29 05:11:32.482288 2026] [security2:error] [pid 1321:tid 1422] [remote 34.75.72.74:52990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/app/.env"] [unique_id "apK-ZGjCPtor9NZ-byT3xwAGXUA"]
[Sat Aug 29 05:11:32.483820 2026] [security2:error] [pid 11274:tid 11472] [client 20.104.49.130:56201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/simple.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDYgAAASY"]
[Sat Aug 29 05:11:32.485159 2026] [security2:error] [pid 11274:tid 11464] [client 52.139.37.240:2586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "5mike3.com"] [uri "/browse.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDYwAAAR4"]
[Sat Aug 29 05:11:32.485880 2026] [security2:error] [pid 11274:tid 11533] [client 20.104.104.62:48451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/0xs.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDZAAAAWI"]
[Sat Aug 29 05:11:32.487773 2026] [security2:error] [pid 1321:tid 1562] [client 20.63.219.114:11230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/GOD.php"] [unique_id "apK-ZGjCPtor9NZ-byT3yAAABoU"]
[Sat Aug 29 05:11:32.488687 2026] [security2:error] [pid 1321:tid 1433] [remote 34.75.72.74:52990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/frontend/.env"] [unique_id "apK-ZGjCPtor9NZ-byT3yQAGVUs"]
[Sat Aug 29 05:11:32.489336 2026] [security2:error] [pid 1321:tid 1506] [client 158.23.184.117:18174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK-ZGjCPtor9NZ-byT3ygAABk4"]
[Sat Aug 29 05:11:32.504555 2026] [security2:error] [pid 1321:tid 1529] [client 158.158.54.35:12384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-cron.php"] [unique_id "apK-ZGjCPtor9NZ-byT3zAAABmU"]
[Sat Aug 29 05:11:32.506175 2026] [security2:error] [pid 11274:tid 11520] [client 87.219.197.128:60197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDaAAAAVU"]
[Sat Aug 29 05:11:32.506276 2026] [security2:error] [pid 11274:tid 11520] [client 87.219.197.128:60197] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDaAAAAVU"]
[Sat Aug 29 05:11:32.558467 2026] [security2:error] [pid 1321:tid 1550] [client 20.104.104.62:28556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "buddhistonthebattleship.managemymood.com"] [uri "/ava.php"] [unique_id "apK-ZGjCPtor9NZ-byT3zgAABnk"]
[Sat Aug 29 05:11:32.561905 2026] [security2:error] [pid 11274:tid 11543] [client 20.104.104.62:40047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/tanjiro.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDcQAAAWs"]
[Sat Aug 29 05:11:32.566949 2026] [security2:error] [pid 11274:tid 11495] [client 93.123.109.228:60838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/config/stripe.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDcgAAATw"]
[Sat Aug 29 05:11:32.569045 2026] [security2:error] [pid 11274:tid 11505] [client 20.104.18.15:43268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/blog.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDcwAAAUY"]
[Sat Aug 29 05:11:32.577037 2026] [security2:error] [pid 11274:tid 11566] [client 20.220.204.93:27414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/bzjdlofz.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDdAAAAYI"]
[Sat Aug 29 05:11:32.578722 2026] [security2:error] [pid 11274:tid 11569] [client 20.52.41.200:4777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/config.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDdQAAAYU"]
[Sat Aug 29 05:11:32.586545 2026] [security2:error] [pid 11274:tid 11547] [client 20.63.219.114:19478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-content/languages/index.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDdgAAAW8"]
[Sat Aug 29 05:11:32.599649 2026] [security2:error] [pid 11274:tid 11509] [client 20.48.250.41:27608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/tfm.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDeAAAAUo"]
[Sat Aug 29 05:11:32.606320 2026] [security2:error] [pid 1321:tid 1527] [client 158.23.147.79:49803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/file88.php"] [unique_id "apK-ZGjCPtor9NZ-byT31AAABmM"]
[Sat Aug 29 05:11:32.610710 2026] [security2:error] [pid 1321:tid 1565] [client 20.48.250.41:49536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/inc.php"] [unique_id "apK-ZGjCPtor9NZ-byT31QAABog"]
[Sat Aug 29 05:11:32.615877 2026] [core:error] [pid 1321:tid 1573] [client 20.100.175.163:9546] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:32.615894 2026] [core:error] [pid 1321:tid 1573] [client 20.100.175.163:9546] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:32.615956 2026] [security2:error] [pid 1321:tid 1464] [remote 34.75.72.74:52990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/dev/.env"] [unique_id "apK-ZGjCPtor9NZ-byT32QAGf2k"]
[Sat Aug 29 05:11:32.615979 2026] [security2:error] [pid 1321:tid 1463] [remote 34.75.72.74:52990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/docker/.env"] [unique_id "apK-ZGjCPtor9NZ-byT32AAGf2g"]
[Sat Aug 29 05:11:32.615986 2026] [security2:error] [pid 1321:tid 1388] [remote 34.75.72.74:52990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/server/.env"] [unique_id "apK-ZGjCPtor9NZ-byT31wAGfx4"]
[Sat Aug 29 05:11:32.634995 2026] [security2:error] [pid 11274:tid 11466] [client 158.23.184.117:18308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/.well-known/acme-challenge/sx.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDewAAASA"]
[Sat Aug 29 05:11:32.638587 2026] [security2:error] [pid 11274:tid 11524] [client 20.104.18.15:15216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/wp-aothait.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDfAAAAVk"]
[Sat Aug 29 05:11:32.656811 2026] [security2:error] [pid 11274:tid 11451] [client 20.52.41.200:2845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/css/index.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDgAAAARE"]
[Sat Aug 29 05:11:32.661475 2026] [security2:error] [pid 11274:tid 11467] [client 68.155.159.216:35798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/login.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDgQAAASE"]
[Sat Aug 29 05:11:32.661879 2026] [security2:error] [pid 1321:tid 1393] [remote 34.75.72.74:52990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/production/.env"] [unique_id "apK-ZGjCPtor9NZ-byT33AAGlyM"]
[Sat Aug 29 05:11:32.675246 2026] [security2:error] [pid 11274:tid 11523] [client 68.155.159.216:1921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-includes/js/index.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDgwAAAVg"]
[Sat Aug 29 05:11:32.681460 2026] [security2:error] [pid 11274:tid 11494] [client 52.139.37.240:2600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "5mike3.com"] [uri "/contentloader1.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDhAAAATs"]
[Sat Aug 29 05:11:32.682463 2026] [security2:error] [pid 11274:tid 11461] [client 20.104.104.62:20867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/xmlrpc.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDhQAAARs"]
[Sat Aug 29 05:11:32.704897 2026] [security2:error] [pid 1321:tid 1443] [remote 34.75.72.74:52990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/v2/.env"] [unique_id "apK-ZGjCPtor9NZ-byT33gAGPlU"]
[Sat Aug 29 05:11:32.706411 2026] [security2:error] [pid 1321:tid 1360] [remote 34.75.72.74:52990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/apps/.env"] [unique_id "apK-ZGjCPtor9NZ-byT33wAGPgQ"]
[Sat Aug 29 05:11:32.707272 2026] [security2:error] [pid 1321:tid 1356] [remote 34.75.72.74:52990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/staging/.env"] [unique_id "apK-ZGjCPtor9NZ-byT34QAGPgA"]
[Sat Aug 29 05:11:32.714921 2026] [security2:error] [pid 11274:tid 11541] [client 93.123.109.228:32796] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/back-api/.env"] [unique_id "apK-ZGbX5DA3XO6e_qRDiAAAAWo"]
[Sat Aug 29 05:11:32.715330 2026] [security2:error] [pid 1321:tid 1519] [client 20.240.128.207:22147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-content/themes/admin.php"] [unique_id "apK-ZGjCPtor9NZ-byT34gAABls"]
[Sat Aug 29 05:11:32.716240 2026] [security2:error] [pid 11274:tid 11571] [client 93.123.109.228:33050] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/back-end/.env"] [unique_id "apK-ZGbX5DA3XO6e_qRDigAAAYc"]
[Sat Aug 29 05:11:32.720801 2026] [security2:error] [pid 1321:tid 1469] [remote 34.75.72.74:52990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/v1/.env"] [unique_id "apK-ZGjCPtor9NZ-byT34wAGQG4"]
[Sat Aug 29 05:11:32.728858 2026] [security2:error] [pid 1321:tid 1390] [remote 34.75.72.74:52990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/site/.env"] [unique_id "apK-ZGjCPtor9NZ-byT35gAGWSA"]
[Sat Aug 29 05:11:32.728860 2026] [security2:error] [pid 1321:tid 1471] [remote 34.75.72.74:52990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/old/.env"] [unique_id "apK-ZGjCPtor9NZ-byT35QAGWXA"]
[Sat Aug 29 05:11:32.729463 2026] [security2:error] [pid 11274:tid 11545] [client 103.171.5.106:56654] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "ridetime.com"] [uri "/pages/contact/"] [unique_id "apK-ZGbX5DA3XO6e_qRDjQAAAW0"], referer: http://ridetime.com/pages/contact/
[Sat Aug 29 05:11:32.735719 2026] [security2:error] [pid 11274:tid 11519] [client 103.171.5.106:56653] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "ridetime.com"] [uri "/pages/contactus/"] [unique_id "apK-ZGbX5DA3XO6e_qRDjgAAAVQ"], referer: http://ridetime.com/pages/contactus/
[Sat Aug 29 05:11:32.745900 2026] [security2:error] [pid 11274:tid 11456] [client 20.104.104.62:48475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/waf.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDkAAAARY"]
[Sat Aug 29 05:11:32.765348 2026] [security2:error] [pid 11274:tid 11484] [client 20.220.204.93:17695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/selesai.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDkwAAATE"]
[Sat Aug 29 05:11:32.765348 2026] [security2:error] [pid 1321:tid 1508] [client 158.158.54.35:28950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-blog.php"] [unique_id "apK-ZGjCPtor9NZ-byT36AAABlA"]
[Sat Aug 29 05:11:32.768607 2026] [security2:error] [pid 11274:tid 11470] [client 4.205.62.107:60490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/server-info.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDlAAAASQ"]
[Sat Aug 29 05:11:32.772915 2026] [security2:error] [pid 11274:tid 11558] [client 93.123.109.228:33078] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/back/.env"] [unique_id "apK-ZGbX5DA3XO6e_qRDlgAAAXo"]
[Sat Aug 29 05:11:32.773275 2026] [security2:error] [pid 11274:tid 11525] [client 93.123.109.228:32870] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/backend-api/.env"] [unique_id "apK-ZGbX5DA3XO6e_qRDlwAAAVo"]
[Sat Aug 29 05:11:32.779825 2026] [security2:error] [pid 11274:tid 11471] [client 158.23.184.117:18305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/.well-known/admin.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDmQAAASU"]
[Sat Aug 29 05:11:32.782124 2026] [security2:error] [pid 11274:tid 11563] [client 93.123.109.228:32956] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK-ZGbX5DA3XO6e_qRDmgAAAX8"]
[Sat Aug 29 05:11:32.783200 2026] [security2:error] [pid 1321:tid 1502] [client 20.104.18.15:15040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/wp-includes/index.php"] [unique_id "apK-ZGjCPtor9NZ-byT36QAABko"]
[Sat Aug 29 05:11:32.783668 2026] [security2:error] [pid 11274:tid 11491] [client 20.104.104.62:27846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "buddhistonthebattleship.managemymood.com"] [uri "/info.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDmwAAATg"]
[Sat Aug 29 05:11:32.795646 2026] [security2:error] [pid 11274:tid 11560] [client 20.104.18.15:43873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/wp-admin/js/wp-load.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDnAAAAXw"]
[Sat Aug 29 05:11:32.801296 2026] [security2:error] [pid 11274:tid 11497] [client 20.151.200.44:27276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/inwp.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDnQAAAT4"]
[Sat Aug 29 05:11:32.804248 2026] [security2:error] [pid 11274:tid 11550] [client 20.48.250.41:42904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/6bcwiqwj.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDngAAAXI"]
[Sat Aug 29 05:11:32.806395 2026] [security2:error] [pid 11274:tid 11448] [client 40.83.93.50:3914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/fi2.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDnwAAAQ4"]
[Sat Aug 29 05:11:32.811606 2026] [security2:error] [pid 11274:tid 11473] [client 45.148.10.62:51760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zeh.elx.mybluehost.me"] [uri "/config.php.bak"] [unique_id "apK-ZGbX5DA3XO6e_qRDoAAAASc"]
[Sat Aug 29 05:11:32.821222 2026] [security2:error] [pid 11274:tid 11464] [client 20.104.104.62:58733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/Rk41.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDoQAAAR4"]
[Sat Aug 29 05:11:32.831426 2026] [security2:error] [pid 11274:tid 11520] [client 68.155.159.216:56824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDowAAAVU"]
[Sat Aug 29 05:11:32.858948 2026] [security2:error] [pid 1321:tid 1357] [remote 34.75.72.74:52990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/env.old"] [unique_id "apK-ZGjCPtor9NZ-byT37wAGnAE"]
[Sat Aug 29 05:11:32.858948 2026] [security2:error] [pid 1321:tid 1362] [remote 34.75.72.74:52990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/env.bak"] [unique_id "apK-ZGjCPtor9NZ-byT38QAGnAU"]
[Sat Aug 29 05:11:32.858948 2026] [security2:error] [pid 1321:tid 1468] [remote 34.75.72.74:52990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/api/.env.bak"] [unique_id "apK-ZGjCPtor9NZ-byT38AAGnG0"]
[Sat Aug 29 05:11:32.861542 2026] [security2:error] [pid 1321:tid 1484] [remote 34.75.72.74:52990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/.docker/.env"] [unique_id "apK-ZGjCPtor9NZ-byT38gAGQ30"]
[Sat Aug 29 05:11:32.876104 2026] [security2:error] [pid 11274:tid 11445] [client 52.139.37.240:61657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "5mike3.com"] [uri "/upfile.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDqgAAAQs"]
[Sat Aug 29 05:11:32.878437 2026] [security2:error] [pid 11274:tid 11508] [client 20.63.219.114:2761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/ggfi.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDqwAAAUk"]
[Sat Aug 29 05:11:32.882073 2026] [security2:error] [pid 1321:tid 1595] [client 20.48.250.41:27588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/Geforce.php"] [unique_id "apK-ZGjCPtor9NZ-byT39wAABqY"]
[Sat Aug 29 05:11:32.884728 2026] [security2:error] [pid 1321:tid 1454] [remote 34.75.72.74:52990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/portal/.env"] [unique_id "apK-ZGjCPtor9NZ-byT3-AAGTF8"]
[Sat Aug 29 05:11:32.912759 2026] [security2:error] [pid 1321:tid 1594] [client 4.205.62.107:64970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/php-info.php"] [unique_id "apK-ZGjCPtor9NZ-byT3-QAABqU"]
[Sat Aug 29 05:11:32.914547 2026] [security2:error] [pid 1321:tid 1494] [client 20.220.204.93:17706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/shlo.php"] [unique_id "apK-ZGjCPtor9NZ-byT3-wAABkI"]
[Sat Aug 29 05:11:32.918914 2026] [security2:error] [pid 11274:tid 11530] [client 93.123.109.228:32796] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/backup/.env"] [unique_id "apK-ZGbX5DA3XO6e_qRDrgAAAV8"]
[Sat Aug 29 05:11:32.924868 2026] [security2:error] [pid 11274:tid 11529] [client 158.23.184.117:18149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/.well-known/api.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDsAAAAV4"]
[Sat Aug 29 05:11:32.937852 2026] [security2:error] [pid 11274:tid 11472] [client 20.63.219.114:17319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-content/languages/min.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDsQAAASY"]
[Sat Aug 29 05:11:32.938989 2026] [security2:error] [pid 1321:tid 1498] [client 158.158.54.35:29451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-block.php"] [unique_id "apK-ZGjCPtor9NZ-byT3_AAABkY"]
[Sat Aug 29 05:11:32.942633 2026] [security2:error] [pid 11274:tid 11362] [remote 34.74.130.21:43192] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "redelan.cl"] [uri "/icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ"] [unique_id "apK-ZGbX5DA3XO6e_qRDsgABRDA"]
[Sat Aug 29 05:11:32.953463 2026] [security2:error] [pid 1321:tid 1615] [client 68.155.159.216:56782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/login.php"] [unique_id "apK-ZGjCPtor9NZ-byT3_QAABro"]
[Sat Aug 29 05:11:32.953545 2026] [security2:error] [pid 1321:tid 1543] [client 20.104.18.15:15066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/file31.php"] [unique_id "apK-ZGjCPtor9NZ-byT3_gAABnM"]
[Sat Aug 29 05:11:32.957588 2026] [security2:error] [pid 11274:tid 11540] [client 20.100.175.163:25192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/o.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDuAAAAWk"]
[Sat Aug 29 05:11:32.957684 2026] [security2:error] [pid 1321:tid 1366] [remote 34.75.72.74:52990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/@fs/.env"] [unique_id "apK-ZGjCPtor9NZ-byT4AAAGmwg"]
[Sat Aug 29 05:11:32.957744 2026] [security2:error] [pid 1321:tid 1371] [remote 34.75.72.74:52990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/@fs/root/.env"] [unique_id "apK-ZGjCPtor9NZ-byT3_wAGmw0"]
[Sat Aug 29 05:11:32.957755 2026] [security2:error] [pid 11274:tid 11506] [client 93.123.109.228:33152] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/demo/.env"] [unique_id "apK-ZGbX5DA3XO6e_qRDtAAAAUc"]
[Sat Aug 29 05:11:32.957779 2026] [security2:error] [pid 11274:tid 11509] [client 93.123.109.228:60908] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/cron/.env"] [unique_id "apK-ZGbX5DA3XO6e_qRDswAAAUo"]
[Sat Aug 29 05:11:32.957918 2026] [security2:error] [pid 11274:tid 11459] [client 93.123.109.228:60924] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/current/.env"] [unique_id "apK-ZGbX5DA3XO6e_qRDtgAAARk"]
[Sat Aug 29 05:11:32.958032 2026] [security2:error] [pid 11274:tid 11538] [client 93.123.109.228:33078] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/beta/.env"] [unique_id "apK-ZGbX5DA3XO6e_qRDtwAAAWc"]
[Sat Aug 29 05:11:32.958500 2026] [security2:error] [pid 1321:tid 1425] [remote 34.75.72.74:52990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/.env.production.bak"] [unique_id "apK-ZGjCPtor9NZ-byT4AgAGm0M"]
[Sat Aug 29 05:11:32.958713 2026] [security2:error] [pid 1321:tid 1427] [remote 34.75.72.74:52990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/.env.prod.bak"] [unique_id "apK-ZGjCPtor9NZ-byT4AQAGm0U"]
[Sat Aug 29 05:11:32.969988 2026] [security2:error] [pid 1321:tid 1603] [client 20.104.104.62:20826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/pass.php"] [unique_id "apK-ZGjCPtor9NZ-byT4AwAABq4"]
[Sat Aug 29 05:11:32.985122 2026] [security2:error] [pid 1321:tid 1532] [client 20.104.104.62:27711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "buddhistonthebattleship.managemymood.com"] [uri "/wp-admin/admin.php"] [unique_id "apK-ZGjCPtor9NZ-byT4BQAABmg"]
[Sat Aug 29 05:11:32.992251 2026] [security2:error] [pid 11274:tid 11467] [client 4.205.62.107:6975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/aws_secret_config.php"] [unique_id "apK-ZGbX5DA3XO6e_qRDugAAASE"]
[Sat Aug 29 05:11:33.000640 2026] [security2:error] [pid 1321:tid 1596] [client 4.205.62.107:63252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/oiko6u.php"] [unique_id "apK-ZGjCPtor9NZ-byT4BgAABqc"]
[Sat Aug 29 05:11:33.002637 2026] [security2:error] [pid 1321:tid 1380] [remote 34.75.72.74:52990] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "charleneongreen.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK-ZWjCPtor9NZ-byT4BwAGuRY"]
[Sat Aug 29 05:11:33.006406 2026] [security2:error] [pid 11274:tid 11523] [client 20.104.18.15:43264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/robot.php"] [unique_id "apK-ZWbX5DA3XO6e_qRDvQAAAVg"]
[Sat Aug 29 05:11:33.013890 2026] [security2:error] [pid 1321:tid 1523] [client 40.83.93.50:8382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/wp-admin.php"] [unique_id "apK-ZWjCPtor9NZ-byT4CAAABl8"]
[Sat Aug 29 05:11:33.022804 2026] [security2:error] [pid 11274:tid 11561] [client 68.155.159.216:65109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/log-mama/function.php"] [unique_id "apK-ZWbX5DA3XO6e_qRDvwAAAX0"]
[Sat Aug 29 05:11:33.030071 2026] [security2:error] [pid 11274:tid 11552] [client 20.52.41.200:4647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK-ZWbX5DA3XO6e_qRDwAAAAXQ"]
[Sat Aug 29 05:11:33.055253 2026] [security2:error] [pid 11274:tid 11527] [client 93.123.109.228:32998] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/be/.env"] [unique_id "apK-ZWbX5DA3XO6e_qRDwwAAAVw"]
[Sat Aug 29 05:11:33.056133 2026] [security2:error] [pid 11274:tid 11449] [client 20.48.250.41:49630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/easy.php"] [unique_id "apK-ZWbX5DA3XO6e_qRDxAAAAQ8"]
[Sat Aug 29 05:11:33.056646 2026] [security2:error] [pid 11274:tid 11475] [client 93.123.109.228:33126] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/dev/.env"] [unique_id "apK-ZWbX5DA3XO6e_qRDxQAAASk"]
[Sat Aug 29 05:11:33.056947 2026] [security2:error] [pid 1321:tid 1499] [client 20.220.204.93:17230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/asax.php"] [unique_id "apK-ZWjCPtor9NZ-byT4CwAABkc"]
[Sat Aug 29 05:11:33.058307 2026] [security2:error] [pid 1321:tid 1514] [client 68.155.159.216:64014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK-ZWjCPtor9NZ-byT4DAAABlY"]
[Sat Aug 29 05:11:33.060108 2026] [security2:error] [pid 1321:tid 1593] [client 93.123.109.228:60810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/develop/.env"] [unique_id "apK-ZWjCPtor9NZ-byT4DQAABqQ"]
[Sat Aug 29 05:11:33.062509 2026] [security2:error] [pid 11274:tid 11571] [client 93.123.109.228:33140] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/developer/.env"] [unique_id "apK-ZWbX5DA3XO6e_qRDxgAAAYc"]
[Sat Aug 29 05:11:33.071289 2026] [security2:error] [pid 1321:tid 1581] [client 158.23.184.117:64779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/.well-known/chosen.php"] [unique_id "apK-ZWjCPtor9NZ-byT4DgAABpg"]
[Sat Aug 29 05:11:33.080845 2026] [security2:error] [pid 1321:tid 1611] [client 20.48.250.41:27610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/click.php"] [unique_id "apK-ZWjCPtor9NZ-byT4DwAABrY"]
[Sat Aug 29 05:11:33.084856 2026] [security2:error] [pid 1321:tid 1586] [client 52.139.37.240:2912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "5mike3.com"] [uri "/form.php"] [unique_id "apK-ZWjCPtor9NZ-byT4EAAABp0"]
[Sat Aug 29 05:11:33.085686 2026] [security2:error] [pid 1321:tid 1604] [client 20.240.128.207:7823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-content/themes/about.php"] [unique_id "apK-ZWjCPtor9NZ-byT4EQAABq8"]
[Sat Aug 29 05:11:33.101695 2026] [security2:error] [pid 1321:tid 1612] [client 20.100.175.163:26895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/a.php"] [unique_id "apK-ZWjCPtor9NZ-byT4EwAABrc"]
[Sat Aug 29 05:11:33.103467 2026] [security2:error] [pid 1321:tid 1536] [client 20.104.18.15:15074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/dk.php"] [unique_id "apK-ZWjCPtor9NZ-byT4FAAABmw"]
[Sat Aug 29 05:11:33.111127 2026] [security2:error] [pid 11274:tid 11545] [client 20.104.104.62:59024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/7logs.php"] [unique_id "apK-ZWbX5DA3XO6e_qRDyQAAAW0"]
[Sat Aug 29 05:11:33.112746 2026] [security2:error] [pid 11274:tid 11493] [client 20.52.41.200:2854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-cron.php"] [unique_id "apK-ZWbX5DA3XO6e_qRDygAAATo"]
[Sat Aug 29 05:11:33.136516 2026] [security2:error] [pid 1321:tid 1506] [client 93.123.109.228:33234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/development/.env"] [unique_id "apK-ZWjCPtor9NZ-byT4FgAABk4"]
[Sat Aug 29 05:11:33.154992 2026] [security2:error] [pid 11274:tid 11544] [client 93.123.109.228:32918] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/crm/.env"] [unique_id "apK-ZWbX5DA3XO6e_qRDzAAAAWw"]
[Sat Aug 29 05:11:33.182941 2026] [security2:error] [pid 11274:tid 11468] [client 20.104.104.62:27868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "buddhistonthebattleship.managemymood.com"] [uri "/wp-content/plugins/about.php"] [unique_id "apK-ZWbX5DA3XO6e_qRDzgAAASI"]
[Sat Aug 29 05:11:33.204084 2026] [security2:error] [pid 11274:tid 11549] [client 20.240.128.207:7532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-admin/css/admin.php"] [unique_id "apK-ZWbX5DA3XO6e_qRD0gAAAXE"]
[Sat Aug 29 05:11:33.211042 2026] [security2:error] [pid 1321:tid 1516] [client 158.158.54.35:17718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/xxx.php"] [unique_id "apK-ZWjCPtor9NZ-byT4GwAABlg"]
[Sat Aug 29 05:11:33.213322 2026] [security2:error] [pid 11274:tid 11525] [client 93.123.109.228:60940] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/cms/.env"] [unique_id "apK-ZWbX5DA3XO6e_qRD1AAAAVo"]
[Sat Aug 29 05:11:33.217506 2026] [security2:error] [pid 11274:tid 11456] [client 158.23.184.117:18324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/.well-known/config.php"] [unique_id "apK-ZWbX5DA3XO6e_qRD1QAAARY"]
[Sat Aug 29 05:11:33.220121 2026] [security2:error] [pid 1321:tid 1488] [client 20.48.250.41:27531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/ms.php"] [unique_id "apK-ZWjCPtor9NZ-byT4HQAABjw"]
[Sat Aug 29 05:11:33.232409 2026] [security2:error] [pid 11274:tid 11471] [client 93.123.109.228:33078] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/client/.env"] [unique_id "apK-ZWbX5DA3XO6e_qRD1gAAASU"]
[Sat Aug 29 05:11:33.256796 2026] [security2:error] [pid 11274:tid 11485] [client 20.104.18.15:15009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/ta.php"] [unique_id "apK-ZWbX5DA3XO6e_qRD2AAAATI"]
[Sat Aug 29 05:11:33.278324 2026] [security2:error] [pid 1321:tid 1568] [client 52.139.37.240:2577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "5mike3.com"] [uri "/wp-sigunq.php"] [unique_id "apK-ZWjCPtor9NZ-byT4HwAABos"]
[Sat Aug 29 05:11:33.289653 2026] [security2:error] [pid 11274:tid 11444] [client 20.63.219.114:10188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-content/languages/pk.php"] [unique_id "apK-ZWbX5DA3XO6e_qRD2wAAAQo"]
[Sat Aug 29 05:11:33.291367 2026] [security2:error] [pid 11274:tid 11480] [client 40.83.93.50:10031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/1p.php"] [unique_id "apK-ZWbX5DA3XO6e_qRD3QAAAS0"]
[Sat Aug 29 05:11:33.292704 2026] [security2:error] [pid 11274:tid 11464] [client 20.104.104.62:52261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/sf.php"] [unique_id "apK-ZWbX5DA3XO6e_qRD3wAAAR4"]
[Sat Aug 29 05:11:33.301815 2026] [security2:error] [pid 11274:tid 11520] [client 20.151.200.44:64610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/anz.php"] [unique_id "apK-ZWbX5DA3XO6e_qRD4gAAAVU"]
[Sat Aug 29 05:11:33.306414 2026] [security2:error] [pid 1321:tid 1564] [client 93.123.109.228:60954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/config.php"] [unique_id "apK-ZWjCPtor9NZ-byT4IAAABoc"]
[Sat Aug 29 05:11:33.312420 2026] [security2:error] [pid 11274:tid 11502] [client 4.205.62.107:59103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/ebahvhhh.php"] [unique_id "apK-ZWbX5DA3XO6e_qRD4wAAAUM"]
[Sat Aug 29 05:11:33.313037 2026] [security2:error] [pid 11274:tid 11504] [client 20.220.204.93:17270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/fetch.php"] [unique_id "apK-ZWbX5DA3XO6e_qRD5AAAAUU"]
[Sat Aug 29 05:11:33.339601 2026] [security2:error] [pid 11274:tid 11519] [client 20.63.219.114:9477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/alfa-rex.php"] [unique_id "apK-ZWbX5DA3XO6e_qRD6AAAAVQ"]
[Sat Aug 29 05:11:33.340855 2026] [security2:error] [pid 11274:tid 11546] [client 20.104.104.62:20840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/Cpanel.php"] [unique_id "apK-ZWbX5DA3XO6e_qRD6QAAAW4"]
[Sat Aug 29 05:11:33.341554 2026] [security2:error] [pid 11274:tid 11521] [client 68.155.159.216:14229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK-ZWbX5DA3XO6e_qRD6gAAAVY"]
[Sat Aug 29 05:11:33.352324 2026] [security2:error] [pid 11274:tid 11508] [client 20.104.104.62:48497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/bnnof6.php"] [unique_id "apK-ZWbX5DA3XO6e_qRD7gAAAUk"]
[Sat Aug 29 05:11:33.365588 2026] [security2:error] [pid 1321:tid 1538] [client 68.155.159.216:48972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/goods.php"] [unique_id "apK-ZWjCPtor9NZ-byT4IwAABm4"]
[Sat Aug 29 05:11:33.365589 2026] [security2:error] [pid 11274:tid 11565] [client 158.23.184.117:18118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/.well-known/core.php"] [unique_id "apK-ZWbX5DA3XO6e_qRD9QAAAYE"]
[Sat Aug 29 05:11:33.368302 2026] [security2:error] [pid 11274:tid 11472] [client 20.48.250.41:26943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/zxekqlxb.php"] [unique_id "apK-ZWbX5DA3XO6e_qRD9gAAASY"]
[Sat Aug 29 05:11:33.368871 2026] [security2:error] [pid 1321:tid 1580] [client 20.104.18.15:43782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/revo.php"] [unique_id "apK-ZWjCPtor9NZ-byT4JAAABpc"]
[Sat Aug 29 05:11:33.380790 2026] [security2:error] [pid 1321:tid 1526] [client 4.205.62.107:58451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/debuggen.php"] [unique_id "apK-ZWjCPtor9NZ-byT4JgAABmI"]
[Sat Aug 29 05:11:33.383717 2026] [security2:error] [pid 11274:tid 11572] [client 20.104.104.62:27652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "buddhistonthebattleship.managemymood.com"] [uri "/wp-content/plugins/plugin/index.php"] [unique_id "apK-ZWbX5DA3XO6e_qRD-AAAAYg"]
[Sat Aug 29 05:11:33.390964 2026] [security2:error] [pid 11274:tid 11450] [client 158.158.54.35:28884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-includes/fonts/admin.php"] [unique_id "apK-ZWbX5DA3XO6e_qRD-gAAARA"]
[Sat Aug 29 05:11:33.408853 2026] [security2:error] [pid 1321:tid 1519] [client 158.23.147.79:58106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/.well-knownold/index.php"] [unique_id "apK-ZWjCPtor9NZ-byT4KAAABls"]
[Sat Aug 29 05:11:33.412291 2026] [security2:error] [pid 11274:tid 11509] [client 158.23.147.79:39246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK-ZWbX5DA3XO6e_qRD_QAAAUo"]
[Sat Aug 29 05:11:33.417983 2026] [security2:error] [pid 11274:tid 11466] [client 20.104.18.15:15279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/bo.php"] [unique_id "apK-ZWbX5DA3XO6e_qRD_wAAASA"]
[Sat Aug 29 05:11:33.421086 2026] [security2:error] [pid 1321:tid 1492] [client 93.123.109.228:32776] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/config/.env"] [unique_id "apK-ZWjCPtor9NZ-byT4KQAABkA"]
[Sat Aug 29 05:11:33.465002 2026] [security2:error] [pid 11274:tid 11552] [client 20.151.200.44:27325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/ad1.php"] [unique_id "apK-ZWbX5DA3XO6e_qRECAAAAXQ"]
[Sat Aug 29 05:11:33.481761 2026] [security2:error] [pid 11274:tid 11501] [client 68.155.159.216:23505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK-ZWbX5DA3XO6e_qRECgAAAUI"]
[Sat Aug 29 05:11:33.482271 2026] [security2:error] [pid 11274:tid 11500] [client 158.23.147.79:24513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/lv.php"] [unique_id "apK-ZWbX5DA3XO6e_qRECwAAAUE"]
[Sat Aug 29 05:11:33.486243 2026] [security2:error] [pid 1321:tid 1583] [client 20.100.175.163:27028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/file2.php"] [unique_id "apK-ZWjCPtor9NZ-byT4LgAABpo"]
[Sat Aug 29 05:11:33.496409 2026] [security2:error] [pid 1321:tid 1585] [client 20.48.250.41:49613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/fresh3.php"] [unique_id "apK-ZWjCPtor9NZ-byT4MAAABpw"]
[Sat Aug 29 05:11:33.497097 2026] [security2:error] [pid 11274:tid 11476] [client 158.23.147.79:28049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-admin/network/index.php"] [unique_id "apK-ZWbX5DA3XO6e_qREDQAAASo"]
[Sat Aug 29 05:11:33.498492 2026] [security2:error] [pid 11274:tid 11516] [client 52.139.37.240:2887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "5mike3.com"] [uri "/07.php"] [unique_id "apK-ZWbX5DA3XO6e_qREDgAAAVE"]
[Sat Aug 29 05:11:33.506220 2026] [http2:warn] [pid 1018003:tid 1018269] [client 57.141.14.38:38056] h2_stream(1018003-201-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:11:33.506537 2026] [security2:error] [pid 11274:tid 11495] [client 20.52.41.200:5172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-good.php"] [unique_id "apK-ZWbX5DA3XO6e_qREDwAAATw"]
[Sat Aug 29 05:11:33.508565 2026] [security2:error] [pid 11274:tid 11564] [client 40.83.93.50:3415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/wp-configs.php"] [unique_id "apK-ZWbX5DA3XO6e_qREEAAAAYA"]
[Sat Aug 29 05:11:33.513057 2026] [security2:error] [pid 11274:tid 11514] [client 158.23.184.117:18337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/.well-known/data.php"] [unique_id "apK-ZWbX5DA3XO6e_qREEQAAAU8"]
[Sat Aug 29 05:11:33.518336 2026] [security2:error] [pid 11274:tid 11438] [remote 34.75.72.74:52992] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:href. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "/../,ARGS:href"] [severity "CRITICAL"] [hostname "charleneongreen.com"] [uri "/_image"] [unique_id "apK-ZWbX5DA3XO6e_qREFAABD3s"]
[Sat Aug 29 05:11:33.533875 2026] [security2:error] [pid 11274:tid 11434] [remote 34.75.72.74:52992] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "charleneongreen.com"] [uri "/_image"] [unique_id "apK-ZWbX5DA3XO6e_qREGAABEnc"]
[Sat Aug 29 05:11:33.536495 2026] [security2:error] [pid 1321:tid 1574] [client 20.220.204.93:58033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/vx.php"] [unique_id "apK-ZWjCPtor9NZ-byT4MgAABpE"]
[Sat Aug 29 05:11:33.547004 2026] [security2:error] [pid 11274:tid 11483] [client 20.48.250.41:27618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/init.php"] [unique_id "apK-ZWbX5DA3XO6e_qREGQAAATA"]
[Sat Aug 29 05:11:33.550311 2026] [security2:error] [pid 11274:tid 11545] [client 20.104.18.15:15112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/44.php"] [unique_id "apK-ZWbX5DA3XO6e_qREGgAAAW0"]
[Sat Aug 29 05:11:33.568388 2026] [security2:error] [pid 11274:tid 11555] [client 20.52.41.200:2792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-block.php"] [unique_id "apK-ZWbX5DA3XO6e_qREHAAAAXc"]
[Sat Aug 29 05:11:33.576406 2026] [security2:error] [pid 11274:tid 11568] [client 93.123.109.228:32950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/config/aws.php"] [unique_id "apK-ZWbX5DA3XO6e_qREHQAAAYQ"]
[Sat Aug 29 05:11:33.582084 2026] [security2:error] [pid 1321:tid 1495] [client 20.104.104.62:28559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "buddhistonthebattleship.managemymood.com"] [uri "/wp-content/uploads/index.php/wp-includes/Text/"] [unique_id "apK-ZWjCPtor9NZ-byT4MwAABkM"]
[Sat Aug 29 05:11:33.584406 2026] [security2:error] [pid 11274:tid 11539] [client 93.123.109.228:32918] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/etc/apache2/apache2.conf"] [unique_id "apK-ZWbX5DA3XO6e_qREHgAAAWg"]
[Sat Aug 29 05:11:33.591096 2026] [security2:error] [pid 11274:tid 11487] [client 20.240.128.207:15236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK-ZWbX5DA3XO6e_qREIAAAATQ"]
[Sat Aug 29 05:11:33.601186 2026] [security2:error] [pid 11274:tid 11469] [client 20.100.175.163:20580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/u.php"] [unique_id "apK-ZWbX5DA3XO6e_qREIQAAASM"]
[Sat Aug 29 05:11:33.603597 2026] [security2:error] [pid 1321:tid 1595] [client 4.205.62.107:32534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/public/rip.php.php"] [unique_id "apK-ZWjCPtor9NZ-byT4NAAABqY"]
[Sat Aug 29 05:11:33.628922 2026] [security2:error] [pid 11274:tid 11549] [client 93.123.109.228:32876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/fe/.env"] [unique_id "apK-ZWbX5DA3XO6e_qREIgAAAXE"]
[Sat Aug 29 05:11:33.629847 2026] [security2:error] [pid 11274:tid 11525] [client 93.123.109.228:33140] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/erp/.env"] [unique_id "apK-ZWbX5DA3XO6e_qREIwAAAVo"]
[Sat Aug 29 05:11:33.632666 2026] [security2:error] [pid 11274:tid 11456] [client 20.104.18.15:43828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/birrs.php"] [unique_id "apK-ZWbX5DA3XO6e_qREJAAAARY"]
[Sat Aug 29 05:11:33.637048 2026] [security2:error] [pid 11274:tid 11491] [client 20.104.104.62:61760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/super.php"] [unique_id "apK-ZWbX5DA3XO6e_qREJQAAATg"]
[Sat Aug 29 05:11:33.643625 2026] [security2:error] [pid 1321:tid 1587] [client 20.63.219.114:10200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.survivalevaluation.dgdevelco.com"] [uri "/wp-content/languages/plugins/about.php"] [unique_id "apK-ZWjCPtor9NZ-byT4NQAABp4"]
[Sat Aug 29 05:11:33.656152 2026] [security2:error] [pid 11274:tid 11485] [client 93.123.109.228:33064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/config/config.inc.php"] [unique_id "apK-ZWbX5DA3XO6e_qREJwAAATI"]
[Sat Aug 29 05:11:33.667904 2026] [security2:error] [pid 11274:tid 11484] [client 158.23.184.117:18175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/.well-known/db-status.php"] [unique_id "apK-ZWbX5DA3XO6e_qREKQAAATE"]
[Sat Aug 29 05:11:33.680289 2026] [security2:error] [pid 11274:tid 11444] [client 20.104.104.62:64748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/unknown.php"] [unique_id "apK-ZWbX5DA3XO6e_qREKgAAAQo"]
[Sat Aug 29 05:11:33.686840 2026] [security2:error] [pid 11274:tid 11550] [client 20.104.49.130:48775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/amax.php"] [unique_id "apK-ZWbX5DA3XO6e_qRELAAAAXI"]
[Sat Aug 29 05:11:33.691952 2026] [security2:error] [pid 11274:tid 11520] [client 158.23.147.79:63282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/themes.php"] [unique_id "apK-ZWbX5DA3XO6e_qRELgAAAVU"]
[Sat Aug 29 05:11:33.701782 2026] [security2:error] [pid 1321:tid 1601] [client 20.48.250.41:27540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/term.php"] [unique_id "apK-ZWjCPtor9NZ-byT4OAAABqw"]
[Sat Aug 29 05:11:33.703443 2026] [security2:error] [pid 1321:tid 1615] [client 93.123.109.228:33234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/etc/boto.cfg"] [unique_id "apK-ZWjCPtor9NZ-byT4NwAABro"]
[Sat Aug 29 05:11:33.705996 2026] [security2:error] [pid 1321:tid 1567] [client 52.139.37.240:2916] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "5mike3.com"] [uri "/c99.php"] [unique_id "apK-ZWjCPtor9NZ-byT4OQAABoo"]
[Sat Aug 29 05:11:33.708453 2026] [security2:error] [pid 11274:tid 11511] [client 20.240.128.207:2000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/adminfuns.php"] [unique_id "apK-ZWbX5DA3XO6e_qRELwAAAUw"]
[Sat Aug 29 05:11:33.712059 2026] [security2:error] [pid 1321:tid 1603] [client 20.104.18.15:15226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/h2.php"] [unique_id "apK-ZWjCPtor9NZ-byT4OwAABq4"]
[Sat Aug 29 05:11:33.715038 2026] [security2:error] [pid 1321:tid 1507] [client 158.23.147.79:50113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/NewFile.php/"] [unique_id "apK-ZWjCPtor9NZ-byT4PQAABk8"]
[Sat Aug 29 05:11:33.740562 2026] [security2:error] [pid 1321:tid 1496] [client 93.123.109.228:33232] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/front/.env"] [unique_id "apK-ZWjCPtor9NZ-byT4PgAABkQ"]
[Sat Aug 29 05:11:33.761300 2026] [security2:error] [pid 11274:tid 11479] [client 20.220.204.93:27420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/global.php"] [unique_id "apK-ZWbX5DA3XO6e_qRENAAAASw"]
[Sat Aug 29 05:11:33.773547 2026] [security2:error] [pid 1321:tid 1537] [client 20.63.219.114:11803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/cookie.php"] [unique_id "apK-ZWjCPtor9NZ-byT4QAAABm0"]
[Sat Aug 29 05:11:33.780336 2026] [security2:error] [pid 11274:tid 11565] [client 68.155.159.216:1935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-content/index.php"] [unique_id "apK-ZWbX5DA3XO6e_qRENwAAAYE"]
[Sat Aug 29 05:11:33.782061 2026] [security2:error] [pid 11274:tid 11492] [client 20.48.250.41:42973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/bgymj.php"] [unique_id "apK-ZWbX5DA3XO6e_qREOQAAATk"]
[Sat Aug 29 05:11:33.782087 2026] [security2:error] [pid 11274:tid 11472] [client 93.123.109.228:32774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/config/config.php"] [unique_id "apK-ZWbX5DA3XO6e_qREOAAAASY"]
[Sat Aug 29 05:11:33.782641 2026] [security2:error] [pid 11274:tid 11547] [client 20.104.104.62:48703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/ah24.php"] [unique_id "apK-ZWbX5DA3XO6e_qREOgAAAW8"]
[Sat Aug 29 05:11:33.785556 2026] [security2:error] [pid 11274:tid 11537] [client 68.155.159.216:62741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/hehehehe.php"] [unique_id "apK-ZWbX5DA3XO6e_qREOwAAAWY"]
[Sat Aug 29 05:11:33.793249 2026] [security2:error] [pid 11274:tid 11543] [client 93.123.109.228:32974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/config/env.php"] [unique_id "apK-ZWbX5DA3XO6e_qREQQAAAWs"]
[Sat Aug 29 05:11:33.808952 2026] [security2:error] [pid 11274:tid 11466] [client 93.123.109.228:32956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/config/module.config.php"] [unique_id "apK-ZWbX5DA3XO6e_qRERAAAASA"]
[Sat Aug 29 05:11:33.811401 2026] [security2:error] [pid 1321:tid 1494] [client 40.83.93.50:3969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/Njima.php"] [unique_id "apK-ZWjCPtor9NZ-byT4QwAABkI"]
[Sat Aug 29 05:11:33.811833 2026] [security2:error] [pid 1321:tid 1532] [client 158.23.184.117:18322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/.well-known/f35.php"] [unique_id "apK-ZWjCPtor9NZ-byT4RAAABmg"]
[Sat Aug 29 05:11:33.823804 2026] [authz_core:error] [pid 11274:tid 11463] [client 20.104.104.62:27673] AH01630: client denied by server configuration: /home4/managem3/public_html/buddhistonthebattleship/wp-includes/error_log
[Sat Aug 29 05:11:33.833207 2026] [security2:error] [pid 11274:tid 11464] [client 158.158.54.35:15350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/m.php"] [unique_id "apK-ZWbX5DA3XO6e_qRESAAAAR4"]
[Sat Aug 29 05:11:33.864286 2026] [security2:error] [pid 11274:tid 11496] [client 20.104.18.15:15132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/wp-content/mod/adminfuns.php"] [unique_id "apK-ZWbX5DA3XO6e_qRESwAAAT0"]
[Sat Aug 29 05:11:33.869981 2026] [security2:error] [pid 11274:tid 11500] [client 93.123.109.228:32778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/config/nexmo.php"] [unique_id "apK-ZWbX5DA3XO6e_qRETgAAAUE"]
[Sat Aug 29 05:11:33.875869 2026] [security2:error] [pid 11274:tid 11476] [client 93.123.109.228:60936] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/frontend/.env"] [unique_id "apK-ZWbX5DA3XO6e_qRETwAAASo"]
[Sat Aug 29 05:11:33.885497 2026] [security2:error] [pid 11274:tid 11516] [client 93.123.109.228:33208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/info.php"] [unique_id "apK-ZWbX5DA3XO6e_qREUAAAAVE"]
[Sat Aug 29 05:11:33.888460 2026] [security2:error] [pid 1321:tid 1559] [client 93.123.109.228:33234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/infophp.php"] [unique_id "apK-ZWjCPtor9NZ-byT4RgAABoI"]
[Sat Aug 29 05:11:33.895340 2026] [security2:error] [pid 1321:tid 1475] [remote 34.74.130.21:43204] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "redelan.cl"] [uri "/wp-config.php.bak"] [unique_id "apK-ZWjCPtor9NZ-byT4SAAGhnQ"]
[Sat Aug 29 05:11:33.898605 2026] [security2:error] [pid 1321:tid 1514] [client 93.123.109.228:33190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/infos.php"] [unique_id "apK-ZWjCPtor9NZ-byT4SQAABlY"]
[Sat Aug 29 05:11:33.899250 2026] [security2:error] [pid 11274:tid 11467] [client 52.139.37.240:2613] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "5mike3.com"] [uri "/c99.php"] [unique_id "apK-ZWbX5DA3XO6e_qREUQAAASE"]
[Sat Aug 29 05:11:33.910335 2026] [security2:error] [pid 11274:tid 11564] [client 20.104.104.62:61778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/lufix1.php"] [unique_id "apK-ZWbX5DA3XO6e_qREUwAAAYA"]
[Sat Aug 29 05:11:33.923341 2026] [security2:error] [pid 11274:tid 11475] [client 103.215.74.26:58742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.74.215.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.com"] [uri "/wp/index.php"] [unique_id "apK-ZWbX5DA3XO6e_qREVQAAASk"]
[Sat Aug 29 05:11:33.926785 2026] [security2:error] [pid 11274:tid 11452] [client 4.205.62.107:61674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/gk.php"] [unique_id "apK-ZWbX5DA3XO6e_qREVwAAARI"]
[Sat Aug 29 05:11:33.931141 2026] [security2:error] [pid 1321:tid 1377] [remote 34.74.130.21:43204] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "redelan.cl"] [uri "/wp-config.php.old"] [unique_id "apK-ZWjCPtor9NZ-byT4SwAGfBM"]
[Sat Aug 29 05:11:33.931741 2026] [security2:error] [pid 11274:tid 11483] [client 93.123.109.228:33126] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/laravel/.env"] [unique_id "apK-ZWbX5DA3XO6e_qREWAAAATA"]
[Sat Aug 29 05:11:33.933403 2026] [security2:error] [pid 1321:tid 1377] [remote 34.74.130.21:43204] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "redelan.cl"] [uri "/@fs/.env"] [unique_id "apK-ZWjCPtor9NZ-byT4TQAGfBM"]
[Sat Aug 29 05:11:33.933933 2026] [security2:error] [pid 1321:tid 1367] [remote 34.74.130.21:43204] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "redelan.cl"] [uri "/@fs/.env"] [unique_id "apK-ZWjCPtor9NZ-byT4TAAGfAk"]
[Sat Aug 29 05:11:33.934199 2026] [security2:error] [pid 1321:tid 1477] [remote 34.74.130.21:43204] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "redelan.cl"] [uri "/@fs/.env"] [unique_id "apK-ZWjCPtor9NZ-byT4TgAGfHY"]
[Sat Aug 29 05:11:33.943275 2026] [security2:error] [pid 11274:tid 11489] [client 158.158.54.35:12382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/tool.php"] [unique_id "apK-ZWbX5DA3XO6e_qREWwAAATY"]
[Sat Aug 29 05:11:33.943807 2026] [security2:error] [pid 11274:tid 11544] [client 93.123.109.228:60972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/config/stripe.php"] [unique_id "apK-ZWbX5DA3XO6e_qREXAAAAWw"]
[Sat Aug 29 05:11:33.946882 2026] [security2:error] [pid 11274:tid 11568] [client 20.104.104.62:20861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/sel.php"] [unique_id "apK-ZWbX5DA3XO6e_qREXgAAAYQ"]
[Sat Aug 29 05:11:33.957632 2026] [security2:error] [pid 1321:tid 1611] [client 93.123.109.228:60810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/lms/.env"] [unique_id "apK-ZWjCPtor9NZ-byT4VQAABrY"]
[Sat Aug 29 05:11:33.962504 2026] [security2:error] [pid 11274:tid 11524] [client 20.52.41.200:5138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "apK-ZWbX5DA3XO6e_qREYQAAAVk"]
[Sat Aug 29 05:11:33.963961 2026] [security2:error] [pid 11274:tid 11564] [client 158.23.184.117:18146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK-ZWbX5DA3XO6e_qREYgAAAYA"]
[Sat Aug 29 05:11:33.986067 2026] [security2:error] [pid 11274:tid 11454] [client 57.141.14.105:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/cart/"] [unique_id "apK-ZWbX5DA3XO6e_qREYwAAARQ"]
[Sat Aug 29 05:11:33.987661 2026] [security2:error] [pid 1321:tid 1560] [client 20.100.175.163:25159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK-ZWjCPtor9NZ-byT4VwAABoM"]
[Sat Aug 29 05:11:33.988251 2026] [security2:error] [pid 11274:tid 11456] [client 68.155.159.216:56705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/simple.php"] [unique_id "apK-ZWbX5DA3XO6e_qREZQAAARY"]
[Sat Aug 29 05:11:33.990347 2026] [security2:error] [pid 11274:tid 11470] [client 20.48.250.41:27615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/aaa.php"] [unique_id "apK-ZWbX5DA3XO6e_qREZgAAASQ"]
[Sat Aug 29 05:11:34.015081 2026] [security2:error] [pid 11274:tid 11484] [client 20.104.49.130:52339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "coveryourauto.com"] [uri "/btyuio.php"] [unique_id "apK-ZmbX5DA3XO6e_qREaQAAATE"]
[Sat Aug 29 05:11:34.024123 2026] [security2:error] [pid 1321:tid 1499] [client 20.52.41.200:2836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-includes/fonts/admin.php"] [unique_id "apK-ZmjCPtor9NZ-byT4WgAABkc"]
[Sat Aug 29 05:11:34.027148 2026] [security2:error] [pid 11274:tid 11552] [client 40.83.93.50:8365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/essexec.php"] [unique_id "apK-ZmbX5DA3XO6e_qREawAAAXQ"]
[Sat Aug 29 05:11:34.047852 2026] [security2:error] [pid 11274:tid 11490] [client 93.123.109.228:60936] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/local/.env"] [unique_id "apK-ZmbX5DA3XO6e_qREbgAAATc"]
[Sat Aug 29 05:11:34.054037 2026] [security2:error] [pid 11274:tid 11521] [client 20.104.18.15:43876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/sss.php"] [unique_id "apK-ZmbX5DA3XO6e_qREbwAAAVY"]
[Sat Aug 29 05:11:34.056620 2026] [security2:error] [pid 11274:tid 11465] [client 4.205.62.107:64249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/infos.php"] [unique_id "apK-ZmbX5DA3XO6e_qREcQAAAR8"]
[Sat Aug 29 05:11:34.064348 2026] [security2:error] [pid 11274:tid 11479] [client 68.155.159.216:56764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/hehehehe.php"] [unique_id "apK-ZmbX5DA3XO6e_qREcgAAASw"]
[Sat Aug 29 05:11:34.067309 2026] [security2:error] [pid 11274:tid 11508] [client 20.104.18.15:15043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/sao.php"] [unique_id "apK-ZmbX5DA3XO6e_qREcwAAAUk"]
[Sat Aug 29 05:11:34.075142 2026] [security2:error] [pid 1321:tid 1506] [client 20.48.160.90:37867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-ZmjCPtor9NZ-byT4XQAABk4"]
[Sat Aug 29 05:11:34.095858 2026] [security2:error] [pid 11274:tid 11551] [client 20.100.175.163:23852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/r.php"] [unique_id "apK-ZmbX5DA3XO6e_qREdgAAAXM"]
[Sat Aug 29 05:11:34.098013 2026] [security2:error] [pid 11274:tid 11571] [client 20.240.128.207:20106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-admin/index.php"] [unique_id "apK-ZmbX5DA3XO6e_qREdwAAAYc"]
[Sat Aug 29 05:11:34.103174 2026] [security2:error] [pid 11274:tid 11520] [client 52.139.37.240:2885] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "5mike3.com"] [uri "/c99.php"] [unique_id "apK-ZmbX5DA3XO6e_qREeAAAAVU"]
[Sat Aug 29 05:11:34.110615 2026] [security2:error] [pid 11274:tid 11472] [client 20.104.104.62:48722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/ztv.php"] [unique_id "apK-ZmbX5DA3XO6e_qREeQAAASY"]
[Sat Aug 29 05:11:34.111082 2026] [security2:error] [pid 1321:tid 1575] [client 158.23.184.117:18143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/.well-known/home.php"] [unique_id "apK-ZmjCPtor9NZ-byT4XgAABpI"]
[Sat Aug 29 05:11:34.121425 2026] [security2:error] [pid 11274:tid 11566] [client 20.104.104.62:52224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/hack.php"] [unique_id "apK-ZmbX5DA3XO6e_qREewAAAYI"]
[Sat Aug 29 05:11:34.137529 2026] [security2:error] [pid 11274:tid 11450] [client 4.205.62.107:6283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/snq.php"] [unique_id "apK-ZmbX5DA3XO6e_qREfAAAARA"]
[Sat Aug 29 05:11:34.138238 2026] [authz_core:error] [pid 11274:tid 11543] [client 20.104.104.62:27673] AH01630: client denied by server configuration: /home4/managem3/public_html/buddhistonthebattleship/wp-includes/PHPMailer/error_log
[Sat Aug 29 05:11:34.141568 2026] [security2:error] [pid 11274:tid 11517] [client 68.155.159.216:65064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/bk/index.php"] [unique_id "apK-ZmbX5DA3XO6e_qREfQAAAVI"]
[Sat Aug 29 05:11:34.147177 2026] [security2:error] [pid 1321:tid 1555] [client 4.205.62.107:63240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/fraro.php"] [unique_id "apK-ZmjCPtor9NZ-byT4YgAABn4"]
[Sat Aug 29 05:11:34.165060 2026] [security2:error] [pid 11274:tid 11503] [client 93.123.109.228:32876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/media/.env"] [unique_id "apK-ZmbX5DA3XO6e_qREfwAAAUQ"]
[Sat Aug 29 05:11:34.171626 2026] [security2:error] [pid 1321:tid 1527] [client 20.220.204.93:16556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/fs.php"] [unique_id "apK-ZmjCPtor9NZ-byT4ZwAABmM"]
[Sat Aug 29 05:11:34.173843 2026] [cgid:error] [pid 1321:tid 1358] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:34.178421 2026] [security2:error] [pid 1321:tid 1556] [client 20.48.250.41:49656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/ws69.php"] [unique_id "apK-ZmjCPtor9NZ-byT4aAAABn8"]
[Sat Aug 29 05:11:34.180386 2026] [security2:error] [pid 1321:tid 1573] [client 68.155.159.216:64026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-admin/images/about.php"] [unique_id "apK-ZmjCPtor9NZ-byT4aQAABpA"]
[Sat Aug 29 05:11:34.191379 2026] [security2:error] [pid 1321:tid 1436] [remote 34.74.130.21:43204] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "redelan.cl"] [uri "/laravel/.env"] [unique_id "apK-ZmjCPtor9NZ-byT4agAGdU4"]
[Sat Aug 29 05:11:34.192078 2026] [security2:error] [pid 1321:tid 1436] [remote 34.74.130.21:43204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 21.130.74.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "redelan.cl"] [uri "/config/.env.php"] [unique_id "apK-ZmjCPtor9NZ-byT4bwAGdU4"]
[Sat Aug 29 05:11:34.192299 2026] [security2:error] [pid 1321:tid 1408] [remote 34.74.130.21:43204] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "redelan.cl"] [uri "/core/.env"] [unique_id "apK-ZmjCPtor9NZ-byT4bgAGdTI"]
[Sat Aug 29 05:11:34.193059 2026] [security2:error] [pid 1321:tid 1466] [remote 34.74.130.21:43204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 21.130.74.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "redelan.cl"] [uri "/.env.php.bak"] [unique_id "apK-ZmjCPtor9NZ-byT4cAAGdWs"]
[Sat Aug 29 05:11:34.193160 2026] [cgid:error] [pid 1321:tid 1481] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:34.199829 2026] [security2:error] [pid 11274:tid 11448] [client 20.63.219.114:2802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/NewFile.php"] [unique_id "apK-ZmbX5DA3XO6e_qREgwAAAQ4"]
[Sat Aug 29 05:11:34.207565 2026] [security2:error] [pid 1321:tid 1564] [client 93.123.109.228:33232] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/market/.env"] [unique_id "apK-ZmjCPtor9NZ-byT4cwAABoc"]
[Sat Aug 29 05:11:34.212965 2026] [security2:error] [pid 11274:tid 11536] [client 20.48.160.90:61680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-ZmbX5DA3XO6e_qREiQAAAWU"]
[Sat Aug 29 05:11:34.219631 2026] [security2:error] [pid 11274:tid 11473] [client 20.240.128.207:1834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/goods.php"] [unique_id "apK-ZmbX5DA3XO6e_qREigAAASc"]
[Sat Aug 29 05:11:34.227867 2026] [security2:error] [pid 1321:tid 1509] [client 20.104.18.15:15063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/dapa.php"] [unique_id "apK-ZmjCPtor9NZ-byT4dAAABlE"]
[Sat Aug 29 05:11:34.240258 2026] [security2:error] [pid 11274:tid 11481] [client 20.48.250.41:27644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/xsox.php"] [unique_id "apK-ZmbX5DA3XO6e_qREjwAAAS4"]
[Sat Aug 29 05:11:34.245403 2026] [security2:error] [pid 1321:tid 1608] [client 20.151.200.44:63638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/ztv.php"] [unique_id "apK-ZmjCPtor9NZ-byT4dgAABrM"]
[Sat Aug 29 05:11:34.256622 2026] [security2:error] [pid 1321:tid 1548] [client 158.23.184.117:18158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/.well-known/index.php"] [unique_id "apK-ZmjCPtor9NZ-byT4dwAABnc"]
[Sat Aug 29 05:11:34.259026 2026] [security2:error] [pid 11274:tid 11489] [client 93.123.109.228:60908] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/marketing/.env"] [unique_id "apK-ZmbX5DA3XO6e_qREkQAAATY"]
[Sat Aug 29 05:11:34.261964 2026] [security2:error] [pid 11274:tid 11495] [client 93.123.109.228:60880] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/node/.env"] [unique_id "apK-ZmbX5DA3XO6e_qREkgAAATw"]
[Sat Aug 29 05:11:34.262300 2026] [security2:error] [pid 11274:tid 11568] [client 93.123.109.228:33152] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/node-api/.env"] [unique_id "apK-ZmbX5DA3XO6e_qREkwAAAYQ"]
[Sat Aug 29 05:11:34.265060 2026] [security2:error] [pid 11274:tid 11477] [client 158.158.54.35:32246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "apK-ZmbX5DA3XO6e_qRElAAAASs"]
[Sat Aug 29 05:11:34.265734 2026] [security2:error] [pid 11274:tid 11524] [client 20.104.104.62:52225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/155.php"] [unique_id "apK-ZmbX5DA3XO6e_qRElQAAAVk"]
[Sat Aug 29 05:11:34.270642 2026] [security2:error] [pid 11274:tid 11515] [client 93.123.109.228:60924] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/node/api/.env"] [unique_id "apK-ZmbX5DA3XO6e_qRElgAAAVA"]
[Sat Aug 29 05:11:34.291386 2026] [security2:error] [pid 11274:tid 11475] [client 20.104.104.62:40255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/14.php"] [unique_id "apK-ZmbX5DA3XO6e_qREmwAAASk"]
[Sat Aug 29 05:11:34.302199 2026] [security2:error] [pid 1321:tid 1613] [client 40.83.93.50:6669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/configs.php"] [unique_id "apK-ZmjCPtor9NZ-byT4eQAABrg"]
[Sat Aug 29 05:11:34.303275 2026] [security2:error] [pid 1321:tid 1592] [client 93.123.109.228:33106] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/new/.env"] [unique_id "apK-ZmjCPtor9NZ-byT4egAABqM"]
[Sat Aug 29 05:11:34.312326 2026] [security2:error] [pid 1321:tid 1561] [client 93.123.109.228:32988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/crm/.env"] [unique_id "apK-ZmjCPtor9NZ-byT4ewAABoQ"]
[Sat Aug 29 05:11:34.322643 2026] [security2:error] [pid 1321:tid 1583] [client 93.123.109.228:32968] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/current/.env"] [unique_id "apK-ZmjCPtor9NZ-byT4fAAABpo"]
[Sat Aug 29 05:11:34.334439 2026] [security2:error] [pid 1321:tid 1389] [remote 34.74.130.21:43204] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "redelan.cl"] [uri "/.env.swp"] [unique_id "apK-ZmjCPtor9NZ-byT4fQAGVx8"]
[Sat Aug 29 05:11:34.343986 2026] [security2:error] [pid 1321:tid 1406] [remote 34.74.130.21:43204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 21.130.74.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "redelan.cl"] [uri "/configuration.php.bak"] [unique_id "apK-ZmjCPtor9NZ-byT4fgAGnDA"]
[Sat Aug 29 05:11:34.344220 2026] [security2:error] [pid 1321:tid 1423] [remote 34.74.130.21:43204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 21.130.74.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "redelan.cl"] [uri "/config.php.bak"] [unique_id "apK-ZmjCPtor9NZ-byT4fwAGnEE"]
[Sat Aug 29 05:11:34.344550 2026] [security2:error] [pid 11274:tid 11491] [client 93.123.109.228:32820] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/cron/.env"] [unique_id "apK-ZmbX5DA3XO6e_qREngAAATg"]
[Sat Aug 29 05:11:34.345499 2026] [security2:error] [pid 11274:tid 11518] [client 20.48.160.90:61578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/ser.php"] [unique_id "apK-ZmbX5DA3XO6e_qREnwAAAVM"]
[Sat Aug 29 05:11:34.346947 2026] [security2:error] [pid 11274:tid 11494] [client 145.239.10.137:45001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.10.239.145.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "greenfieldperformanceinc.com"] [uri "/mah.php"] [unique_id "apK-ZmbX5DA3XO6e_qREoAAAATs"], referer: http://greenfieldperformanceinc.com/mah.php?p=
[Sat Aug 29 05:11:34.347843 2026] [security2:error] [pid 1321:tid 1399] [remote 34.74.130.21:43204] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "redelan.cl"] [uri "/web/.env"] [unique_id "apK-ZmjCPtor9NZ-byT4gAAGnCk"]
[Sat Aug 29 05:11:34.348554 2026] [security2:error] [pid 1321:tid 1483] [remote 34.74.130.21:43204] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "redelan.cl"] [uri "/public/.env"] [unique_id "apK-ZmjCPtor9NZ-byT4ggAGnHw"]
[Sat Aug 29 05:11:34.348882 2026] [security2:error] [pid 11274:tid 11563] [client 93.123.109.228:32876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/nodeapi/.env"] [unique_id "apK-ZmbX5DA3XO6e_qREoQAAAX8"]
[Sat Aug 29 05:11:34.348939 2026] [security2:error] [pid 11274:tid 11559] [client 93.123.109.228:33126] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/nodeweb/.env"] [unique_id "apK-ZmbX5DA3XO6e_qREogAAAXs"]
[Sat Aug 29 05:11:34.349868 2026] [cgid:error] [pid 1321:tid 1396] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:34.358124 2026] [security2:error] [pid 11274:tid 11560] [client 93.123.109.228:33140] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/node/backend/.env"] [unique_id "apK-ZmbX5DA3XO6e_qREpAAAAXw"]
[Sat Aug 29 05:11:34.365736 2026] [security2:error] [pid 11274:tid 11497] [client 20.104.104.62:27673] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "buddhistonthebattleship.managemymood.com"] [uri "/1.php"] [unique_id "apK-ZmbX5DA3XO6e_qREpgAAAT4"]
[Sat Aug 29 05:11:34.365818 2026] [security2:error] [pid 11274:tid 11497] [client 20.104.104.62:27673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "buddhistonthebattleship.managemymood.com"] [uri "/1.php"] [unique_id "apK-ZmbX5DA3XO6e_qREpgAAAT4"]
[Sat Aug 29 05:11:34.371740 2026] [security2:error] [pid 1321:tid 1598] [client 20.48.250.41:27591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/lkui.php"] [unique_id "apK-ZmjCPtor9NZ-byT4gwAABqk"]
[Sat Aug 29 05:11:34.375018 2026] [security2:error] [pid 11274:tid 11499] [client 20.104.18.15:14991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/wp-content/l.php"] [unique_id "apK-ZmbX5DA3XO6e_qREpwAAAUA"]
[Sat Aug 29 05:11:34.376060 2026] [security2:error] [pid 1321:tid 1574] [client 93.123.109.228:32776] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/demo/.env"] [unique_id "apK-ZmjCPtor9NZ-byT4hAAABpE"]
[Sat Aug 29 05:11:34.391024 2026] [security2:error] [pid 1321:tid 1526] [client 158.158.54.35:12414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/k.php"] [unique_id "apK-ZmjCPtor9NZ-byT4hwAABmI"]
[Sat Aug 29 05:11:34.401949 2026] [security2:error] [pid 11274:tid 11485] [client 158.23.184.117:18161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/.well-known/login.php"] [unique_id "apK-ZmbX5DA3XO6e_qREqgAAATI"]
[Sat Aug 29 05:11:34.413031 2026] [security2:error] [pid 11274:tid 11490] [client 93.123.109.228:33042] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/dev/.env"] [unique_id "apK-ZmbX5DA3XO6e_qRErAAAATc"]
[Sat Aug 29 05:11:34.422279 2026] [security2:error] [pid 11274:tid 11564] [client 20.52.41.200:4660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/abcd.php"] [unique_id "apK-ZmbX5DA3XO6e_qRErQAAAYA"]
[Sat Aug 29 05:11:34.429063 2026] [security2:error] [pid 11274:tid 11444] [client 93.123.109.228:33078] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/develop/.env"] [unique_id "apK-ZmbX5DA3XO6e_qRErgAAAQo"]
[Sat Aug 29 05:11:34.447148 2026] [security2:error] [pid 11274:tid 11530] [client 4.205.62.107:59115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/asa.php"] [unique_id "apK-ZmbX5DA3XO6e_qREsgAAAV8"]
[Sat Aug 29 05:11:34.453381 2026] [security2:error] [pid 11274:tid 11565] [client 93.123.109.228:60908] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/old/.env"] [unique_id "apK-ZmbX5DA3XO6e_qREswAAAYE"]
[Sat Aug 29 05:11:34.453379 2026] [security2:error] [pid 1321:tid 1497] [client 93.123.109.228:60980] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/developer/.env"] [unique_id "apK-ZmjCPtor9NZ-byT4jgAABkU"]
[Sat Aug 29 05:11:34.472206 2026] [security2:error] [pid 11274:tid 11551] [client 68.155.159.216:49043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK-ZmbX5DA3XO6e_qREtAAAAXM"]
[Sat Aug 29 05:11:34.479197 2026] [security2:error] [pid 11274:tid 11558] [client 20.52.41.200:2646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/m.php"] [unique_id "apK-ZmbX5DA3XO6e_qREtQAAAXo"]
[Sat Aug 29 05:11:34.480054 2026] [security2:error] [pid 11274:tid 11520] [client 20.48.160.90:61651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/431.php"] [unique_id "apK-ZmbX5DA3XO6e_qREtgAAAVU"]
[Sat Aug 29 05:11:34.480669 2026] [security2:error] [pid 11274:tid 11456] [client 20.100.175.163:27012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/xda.php"] [unique_id "apK-ZmbX5DA3XO6e_qREtwAAARY"]
[Sat Aug 29 05:11:34.498789 2026] [security2:error] [pid 1321:tid 1603] [client 93.123.109.228:32988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/development/.env"] [unique_id "apK-ZmjCPtor9NZ-byT4kwAABq4"]
[Sat Aug 29 05:11:34.501266 2026] [security2:error] [pid 11274:tid 11492] [client 20.104.18.15:43857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/wp-includes/ID3/moon.php"] [unique_id "apK-ZmbX5DA3XO6e_qREuwAAATk"]
[Sat Aug 29 05:11:34.506733 2026] [security2:error] [pid 11274:tid 11470] [client 40.83.93.50:3422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/hello.php"] [unique_id "apK-ZmbX5DA3XO6e_qREvAAAASQ"]
[Sat Aug 29 05:11:34.511495 2026] [security2:error] [pid 11274:tid 11517] [client 93.123.109.228:33152] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/opt/.env"] [unique_id "apK-ZmbX5DA3XO6e_qREvgAAAVI"]
[Sat Aug 29 05:11:34.512246 2026] [security2:error] [pid 1321:tid 1496] [client 4.205.62.107:58437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/wp-admin/sc.php"] [unique_id "apK-ZmjCPtor9NZ-byT4lwAABkQ"]
[Sat Aug 29 05:11:34.517092 2026] [security2:error] [pid 11274:tid 11451] [client 20.48.250.41:26932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "apK-ZmbX5DA3XO6e_qREwAAAARE"]
[Sat Aug 29 05:11:34.522109 2026] [security2:error] [pid 11274:tid 11445] [client 20.220.204.93:27397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/ioxi.php"] [unique_id "apK-ZmbX5DA3XO6e_qREwQAAAQs"]
[Sat Aug 29 05:11:34.532685 2026] [security2:error] [pid 1321:tid 1537] [client 20.104.18.15:15197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/wp-admin/w.php"] [unique_id "apK-ZmjCPtor9NZ-byT4mQAABm0"]
[Sat Aug 29 05:11:34.540066 2026] [security2:error] [pid 11274:tid 11464] [client 158.23.147.79:62667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK-ZmbX5DA3XO6e_qRExAAAAR4"]
[Sat Aug 29 05:11:34.549857 2026] [security2:error] [pid 11274:tid 11569] [client 158.23.184.117:18335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/.well-known/logs233/index.php"] [unique_id "apK-ZmbX5DA3XO6e_qRExwAAAYU"]
[Sat Aug 29 05:11:34.550291 2026] [security2:error] [pid 11274:tid 11536] [client 158.23.147.79:43339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK-ZmbX5DA3XO6e_qREyAAAAWU"]
[Sat Aug 29 05:11:34.555208 2026] [security2:error] [pid 11274:tid 11452] [client 40.83.93.50:3968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/post.php"] [unique_id "apK-ZmbX5DA3XO6e_qREywAAARI"]
[Sat Aug 29 05:11:34.555290 2026] [security2:error] [pid 11274:tid 11467] [client 20.151.200.44:27154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/1vbqo.php"] [unique_id "apK-ZmbX5DA3XO6e_qREzQAAASE"]
[Sat Aug 29 05:11:34.556110 2026] [security2:error] [pid 11274:tid 11550] [client 20.63.219.114:2249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/config.php"] [unique_id "apK-ZmbX5DA3XO6e_qREzgAAAXI"]
[Sat Aug 29 05:11:34.569154 2026] [security2:error] [pid 11274:tid 11566] [client 20.104.104.62:28568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "buddhistonthebattleship.managemymood.com"] [uri "/admin/function.php"] [unique_id "apK-ZmbX5DA3XO6e_qRE0AAAAYI"]
[Sat Aug 29 05:11:34.583314 2026] [security2:error] [pid 11274:tid 11544] [client 20.104.104.62:42109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/mcd.php"] [unique_id "apK-ZmbX5DA3XO6e_qRE0wAAAWw"]
[Sat Aug 29 05:11:34.596418 2026] [security2:error] [pid 11274:tid 11463] [client 20.240.128.207:10916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/radio.php"] [unique_id "apK-ZmbX5DA3XO6e_qRE1gAAAR0"]
[Sat Aug 29 05:11:34.599681 2026] [security2:error] [pid 1321:tid 1549] [client 20.100.175.163:4389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-blog.php"] [unique_id "apK-ZmjCPtor9NZ-byT4ogAABng"]
[Sat Aug 29 05:11:34.603158 2026] [security2:error] [pid 1321:tid 1501] [client 158.23.147.79:60113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK-ZmjCPtor9NZ-byT4owAABkk"]
[Sat Aug 29 05:11:34.610428 2026] [security2:error] [pid 11274:tid 11475] [client 158.23.147.79:24454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-ZmbX5DA3XO6e_qRE1wAAASk"]
[Sat Aug 29 05:11:34.618511 2026] [security2:error] [pid 11274:tid 11541] [client 20.48.160.90:61569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/rxr.php"] [unique_id "apK-ZmbX5DA3XO6e_qRE2AAAAWo"]
[Sat Aug 29 05:11:34.634478 2026] [security2:error] [pid 1321:tid 1529] [client 103.185.242.143:63053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-ZmjCPtor9NZ-byT4pwAABmU"]
[Sat Aug 29 05:11:34.634608 2026] [security2:error] [pid 1321:tid 1529] [client 103.185.242.143:63053] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-ZmjCPtor9NZ-byT4pwAABmU"]
[Sat Aug 29 05:11:34.635995 2026] [security2:error] [pid 11274:tid 11553] [client 20.104.104.62:48706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/kure.php"] [unique_id "apK-ZmbX5DA3XO6e_qRE3AAAAXU"]
[Sat Aug 29 05:11:34.648708 2026] [security2:error] [pid 1321:tid 1586] [client 20.48.250.41:27639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/motu.php"] [unique_id "apK-ZmjCPtor9NZ-byT4qgAABp0"]
[Sat Aug 29 05:11:34.657708 2026] [security2:error] [pid 1321:tid 1560] [client 20.104.104.62:20820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/about.php"] [unique_id "apK-ZmjCPtor9NZ-byT4qwAABoM"]
[Sat Aug 29 05:11:34.696853 2026] [security2:error] [pid 1321:tid 1581] [client 158.23.184.117:18116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/.well-known/maintenance.php"] [unique_id "apK-ZmjCPtor9NZ-byT4rQAABpg"]
[Sat Aug 29 05:11:34.697694 2026] [security2:error] [pid 1321:tid 1590] [client 107.145.13.164:52101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 164.13.145.107.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK-ZmjCPtor9NZ-byT4rgAABqE"]
[Sat Aug 29 05:11:34.697803 2026] [security2:error] [pid 1321:tid 1590] [client 107.145.13.164:52101] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK-ZmjCPtor9NZ-byT4rgAABqE"]
[Sat Aug 29 05:11:34.705983 2026] [security2:error] [pid 11274:tid 11481] [client 158.158.54.35:23221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/222.php"] [unique_id "apK-ZmbX5DA3XO6e_qRE4wAAAS4"]
[Sat Aug 29 05:11:34.706839 2026] [security2:error] [pid 11274:tid 11496] [client 20.240.128.207:5198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/css.php"] [unique_id "apK-ZmbX5DA3XO6e_qRE5AAAAT0"]
[Sat Aug 29 05:11:34.728647 2026] [security2:error] [pid 11274:tid 11490] [client 20.104.18.15:15279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/wp-content/k.php"] [unique_id "apK-ZmbX5DA3XO6e_qRE5wAAATc"]
[Sat Aug 29 05:11:34.735803 2026] [security2:error] [pid 11274:tid 11465] [client 4.205.62.107:62781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/environment.php"] [unique_id "apK-ZmbX5DA3XO6e_qRE6gAAAR8"]
[Sat Aug 29 05:11:34.743083 2026] [security2:error] [pid 1321:tid 1500] [client 20.220.204.93:15491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/bootstrap.php"] [unique_id "apK-ZmjCPtor9NZ-byT4sgAABkg"]
[Sat Aug 29 05:11:34.759614 2026] [security2:error] [pid 1321:tid 1453] [remote 34.74.130.21:43204] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "redelan.cl"] [uri "/wp-config.php~"] [unique_id "apK-ZmjCPtor9NZ-byT4tQAGoF4"]
[Sat Aug 29 05:11:34.760872 2026] [security2:error] [pid 11274:tid 11511] [client 20.48.160.90:61625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/csst.php"] [unique_id "apK-ZmbX5DA3XO6e_qRE7gAAAUw"]
[Sat Aug 29 05:11:34.761777 2026] [security2:error] [pid 1321:tid 1410] [remote 34.74.130.21:43204] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "redelan.cl"] [uri "/wp-config.old"] [unique_id "apK-ZmjCPtor9NZ-byT4tAAGoDQ"]
[Sat Aug 29 05:11:34.761817 2026] [security2:error] [pid 11274:tid 11565] [client 93.123.109.228:33250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/php-info.php"] [unique_id "apK-ZmbX5DA3XO6e_qRE7wAAAYE"]
[Sat Aug 29 05:11:34.763633 2026] [security2:error] [pid 1321:tid 1431] [remote 34.74.130.21:43204] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "redelan.cl"] [uri "/wp/.env"] [unique_id "apK-ZmjCPtor9NZ-byT4tgAGoEk"]
[Sat Aug 29 05:11:34.767367 2026] [security2:error] [pid 1321:tid 1499] [client 20.104.104.62:28557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "buddhistonthebattleship.managemymood.com"] [uri "/autoload_classmap.php"] [unique_id "apK-ZmjCPtor9NZ-byT4twAABkc"]
[Sat Aug 29 05:11:34.768189 2026] [security2:error] [pid 11274:tid 11551] [client 20.48.250.41:42959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/ccs.php"] [unique_id "apK-ZmbX5DA3XO6e_qRE8QAAAXM"]
[Sat Aug 29 05:11:34.768425 2026] [security2:error] [pid 11274:tid 11519] [client 93.123.109.228:33092] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/erp/.env"] [unique_id "apK-ZmbX5DA3XO6e_qRE8AAAAVQ"]
[Sat Aug 29 05:11:34.770433 2026] [security2:error] [pid 11274:tid 11551] [client 20.104.18.15:43857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/xmini4.php"] [unique_id "apK-ZmbX5DA3XO6e_qRE8gAAAXM"]
[Sat Aug 29 05:11:34.788871 2026] [security2:error] [pid 11274:tid 11456] [client 93.123.109.228:32918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/php.php"] [unique_id "apK-ZmbX5DA3XO6e_qRE9AAAARY"]
[Sat Aug 29 05:11:34.793019 2026] [security2:error] [pid 1321:tid 1593] [client 40.83.93.50:6687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/disagraeed.php"] [unique_id "apK-ZmjCPtor9NZ-byT4vgAABqQ"]
[Sat Aug 29 05:11:34.803351 2026] [security2:error] [pid 11274:tid 11517] [client 20.48.250.41:27575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/Ov-Simple1.php"] [unique_id "apK-ZmbX5DA3XO6e_qRE9gAAAVI"]
[Sat Aug 29 05:11:34.803398 2026] [security2:error] [pid 11274:tid 11572] [client 93.123.109.228:32796] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/etc/apache2/apache2.conf"] [unique_id "apK-ZmbX5DA3XO6e_qRE9QAAAYg"]
[Sat Aug 29 05:11:34.823342 2026] [security2:error] [pid 11274:tid 11561] [client 158.158.54.35:23214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/root.php"] [unique_id "apK-ZmbX5DA3XO6e_qRE-wAAAX0"]
[Sat Aug 29 05:11:34.825850 2026] [security2:error] [pid 11274:tid 11445] [client 20.104.49.130:36781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.timportlock.net"] [uri "/av.php"] [unique_id "apK-ZmbX5DA3XO6e_qRE_QAAAQs"]
[Sat Aug 29 05:11:34.828284 2026] [security2:error] [pid 1321:tid 1510] [client 93.123.109.228:32776] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/fe/.env"] [unique_id "apK-ZmjCPtor9NZ-byT4wAAABlI"]
[Sat Aug 29 05:11:34.830262 2026] [core:error] [pid 11274:tid 11535] [client 74.248.24.12:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:34.830280 2026] [core:error] [pid 11274:tid 11535] [client 74.248.24.12:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:34.838515 2026] [security2:error] [pid 1321:tid 1565] [client 52.139.37.240:31521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/ahax.php"] [unique_id "apK-ZmjCPtor9NZ-byT4wQAABog"]
[Sat Aug 29 05:11:34.843209 2026] [security2:error] [pid 1321:tid 1533] [client 158.23.184.117:18134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/.well-known/min.php"] [unique_id "apK-ZmjCPtor9NZ-byT4wgAABmk"]
[Sat Aug 29 05:11:34.847216 2026] [security2:error] [pid 11274:tid 11452] [client 93.123.109.228:33016] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/etc/boto.cfg"] [unique_id "apK-ZmbX5DA3XO6e_qRFAAAAARI"]
[Sat Aug 29 05:11:34.876280 2026] [security2:error] [pid 1321:tid 1575] [client 20.52.41.200:4767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-access.php"] [unique_id "apK-ZmjCPtor9NZ-byT4xgAABpI"]
[Sat Aug 29 05:11:34.889681 2026] [security2:error] [pid 11274:tid 11544] [client 68.155.159.216:1914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/about/function.php"] [unique_id "apK-ZmbX5DA3XO6e_qRFAQAAAWw"]
[Sat Aug 29 05:11:34.891911 2026] [security2:error] [pid 1321:tid 1568] [client 20.220.204.93:16517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/export.php"] [unique_id "apK-ZmjCPtor9NZ-byT4xwAABos"]
[Sat Aug 29 05:11:34.906274 2026] [security2:error] [pid 11274:tid 11555] [client 20.48.160.90:61660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/wp-includes/blocks/query-title/footer.php"] [unique_id "apK-ZmbX5DA3XO6e_qRFAwAAAXc"]
[Sat Aug 29 05:11:34.906739 2026] [security2:error] [pid 11274:tid 11509] [client 68.155.159.216:33667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/x.php"] [unique_id "apK-ZmbX5DA3XO6e_qRFAgAAAUo"]
[Sat Aug 29 05:11:34.930781 2026] [security2:error] [pid 1321:tid 1508] [client 20.104.18.15:15081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/os.php"] [unique_id "apK-ZmjCPtor9NZ-byT4yAAABlA"]
[Sat Aug 29 05:11:34.935825 2026] [security2:error] [pid 1321:tid 1556] [client 20.52.41.200:2177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "apK-ZmjCPtor9NZ-byT4yQAABn8"]
[Sat Aug 29 05:11:34.938110 2026] [security2:error] [pid 1321:tid 1582] [client 20.48.250.41:27621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/wp-blogs.php"] [unique_id "apK-ZmjCPtor9NZ-byT4ygAABpk"]
[Sat Aug 29 05:11:34.941806 2026] [security2:error] [pid 11274:tid 11468] [client 20.104.49.130:45729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/makeasmtp.php"] [unique_id "apK-ZmbX5DA3XO6e_qRFBQAAASI"]
[Sat Aug 29 05:11:34.948858 2026] [security2:error] [pid 11274:tid 11549] [client 93.123.109.228:32876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/phpinfo.php"] [unique_id "apK-ZmbX5DA3XO6e_qRFBwAAAXE"]
[Sat Aug 29 05:11:34.952505 2026] [security2:error] [pid 11274:tid 11513] [client 20.104.18.15:43831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/gulu.php"] [unique_id "apK-ZmbX5DA3XO6e_qRFCAAAAU4"]
[Sat Aug 29 05:11:34.954561 2026] [security2:error] [pid 11274:tid 11541] [client 68.155.159.216:14263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-admin/network/index.php"] [unique_id "apK-ZmbX5DA3XO6e_qRFCQAAAWo"]
[Sat Aug 29 05:11:34.954795 2026] [security2:error] [pid 1321:tid 1564] [client 20.63.219.114:9486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/22.php"] [unique_id "apK-ZmjCPtor9NZ-byT4ywAABoc"]
[Sat Aug 29 05:11:34.962467 2026] [security2:error] [pid 1321:tid 1502] [client 93.123.109.228:32988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/front/.env"] [unique_id "apK-ZmjCPtor9NZ-byT4zAAABko"]
[Sat Aug 29 05:11:34.962517 2026] [security2:error] [pid 1321:tid 1517] [client 20.104.104.62:28579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "buddhistonthebattleship.managemymood.com"] [uri "/classwithtostring.php"] [unique_id "apK-ZmjCPtor9NZ-byT4zQAABlk"]
[Sat Aug 29 05:11:34.968543 2026] [cgid:error] [pid 1321:tid 1424] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:34.972039 2026] [security2:error] [pid 1321:tid 1490] [client 216.51.171.83:56332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 83.171.51.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-ZmjCPtor9NZ-byT4zwAABj4"]
[Sat Aug 29 05:11:34.972113 2026] [security2:error] [pid 1321:tid 1490] [client 216.51.171.83:56332] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-ZmjCPtor9NZ-byT4zwAABj4"]
[Sat Aug 29 05:11:34.985029 2026] [security2:error] [pid 11274:tid 11476] [client 93.123.109.228:60936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/php_info.php"] [unique_id "apK-ZmbX5DA3XO6e_qRFDAAAASo"]
[Sat Aug 29 05:11:34.994305 2026] [security2:error] [pid 11274:tid 11468] [client 158.23.184.117:18121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/.well-known/module.php"] [unique_id "apK-ZmbX5DA3XO6e_qRFDQAAASI"]
[Sat Aug 29 05:11:34.997086 2026] [security2:error] [pid 1321:tid 1605] [client 20.104.104.62:48713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/cafe.php"] [unique_id "apK-ZmjCPtor9NZ-byT40AAABrA"]
[Sat Aug 29 05:11:35.000431 2026] [security2:error] [pid 11274:tid 11449] [client 20.48.250.41:42938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/mar.php"] [unique_id "apK-ZmbX5DA3XO6e_qRFDgAAAQ8"]
[Sat Aug 29 05:11:35.001208 2026] [security2:error] [pid 11274:tid 11569] [client 40.83.93.50:3419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/fi2.php"] [unique_id "apK-ZmbX5DA3XO6e_qRFDwAAAYU"]
[Sat Aug 29 05:11:35.009996 2026] [security2:error] [pid 11274:tid 11482] [client 93.123.109.228:33152] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/portal/.env"] [unique_id "apK-Z2bX5DA3XO6e_qRFEAAAAS8"]
[Sat Aug 29 05:11:35.016997 2026] [security2:error] [pid 1321:tid 1489] [client 93.123.109.228:32776] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/frontend/.env"] [unique_id "apK-Z2jCPtor9NZ-byT40QAABj0"]
[Sat Aug 29 05:11:35.017500 2026] [security2:error] [pid 11274:tid 11467] [client 20.100.175.163:25162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/theme.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFEQAAASE"]
[Sat Aug 29 05:11:35.043656 2026] [security2:error] [pid 1321:tid 1504] [client 20.48.160.90:61588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/wp-content/uploads/indoex.php"] [unique_id "apK-Z2jCPtor9NZ-byT40gAABkw"]
[Sat Aug 29 05:11:35.044490 2026] [security2:error] [pid 11274:tid 11502] [client 20.104.49.130:48617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/dk.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFFQAAAUM"]
[Sat Aug 29 05:11:35.046028 2026] [security2:error] [pid 11274:tid 11497] [client 52.139.37.240:31074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/breads1.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFFgAAAT4"]
[Sat Aug 29 05:11:35.063237 2026] [security2:error] [pid 11274:tid 11501] [client 40.83.93.50:17595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/flower.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFGgAAAUI"]
[Sat Aug 29 05:11:35.063653 2026] [security2:error] [pid 1321:tid 1601] [client 4.205.62.107:63995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/god.php"] [unique_id "apK-Z2jCPtor9NZ-byT42AAABqw"]
[Sat Aug 29 05:11:35.073054 2026] [security2:error] [pid 11274:tid 11490] [client 93.123.109.228:33168] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/prod/.env"] [unique_id "apK-Z2bX5DA3XO6e_qRFHAAAATc"]
[Sat Aug 29 05:11:35.073096 2026] [security2:error] [pid 11274:tid 11525] [client 93.123.109.228:60880] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/product/.env"] [unique_id "apK-Z2bX5DA3XO6e_qRFGwAAAVo"]
[Sat Aug 29 05:11:35.074608 2026] [security2:error] [pid 11274:tid 11454] [client 20.48.250.41:27627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/mini.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFHgAAARQ"]
[Sat Aug 29 05:11:35.075980 2026] [security2:error] [pid 11274:tid 11479] [client 93.123.109.228:60908] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/production/.env"] [unique_id "apK-Z2bX5DA3XO6e_qRFHwAAASw"]
[Sat Aug 29 05:11:35.087704 2026] [security2:error] [pid 1321:tid 1592] [client 20.240.128.207:15257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/item.php"] [unique_id "apK-Z2jCPtor9NZ-byT43AAABqM"]
[Sat Aug 29 05:11:35.096777 2026] [security2:error] [pid 11274:tid 11463] [client 20.100.175.163:20562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/xxx.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFIQAAAR0"]
[Sat Aug 29 05:11:35.105237 2026] [security2:error] [pid 11274:tid 11471] [client 93.123.109.228:33126] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/public-api/.env"] [unique_id "apK-Z2bX5DA3XO6e_qRFIgAAASU"]
[Sat Aug 29 05:11:35.106349 2026] [security2:error] [pid 11274:tid 11511] [client 20.104.18.15:15209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/htio.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFJQAAAUw"]
[Sat Aug 29 05:11:35.109895 2026] [security2:error] [pid 1321:tid 1577] [client 93.123.109.228:33248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/project/.env"] [unique_id "apK-Z2jCPtor9NZ-byT43wAABpQ"]
[Sat Aug 29 05:11:35.135166 2026] [security2:error] [pid 11274:tid 11444] [client 20.104.104.62:52227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/waw.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFJgAAAQo"]
[Sat Aug 29 05:11:35.135977 2026] [security2:error] [pid 1321:tid 1501] [client 145.239.10.137:58528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.10.239.145.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "greenfieldparts.com"] [uri "/mah.php"] [unique_id "apK-Z2jCPtor9NZ-byT44QAABkk"], referer: http://greenfieldparts.com/mah.php?p=
[Sat Aug 29 05:11:35.136429 2026] [security2:error] [pid 11274:tid 11551] [client 93.123.109.228:33030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/info.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFJwAAAXM"]
[Sat Aug 29 05:11:35.141951 2026] [security2:error] [pid 11274:tid 11492] [client 20.48.250.41:49562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/ccu.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFKAAAATk"]
[Sat Aug 29 05:11:35.141951 2026] [security2:error] [pid 1321:tid 1596] [client 158.23.184.117:18306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/.well-known/options.php"] [unique_id "apK-Z2jCPtor9NZ-byT44gAABqc"]
[Sat Aug 29 05:11:35.144525 2026] [security2:error] [pid 1321:tid 1559] [client 93.123.109.228:32988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/infophp.php"] [unique_id "apK-Z2jCPtor9NZ-byT44wAABoI"]
[Sat Aug 29 05:11:35.148573 2026] [security2:error] [pid 11274:tid 11499] [client 158.158.54.35:23015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/mini.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFKQAAAUA"]
[Sat Aug 29 05:11:35.153254 2026] [security2:error] [pid 1321:tid 1529] [client 93.123.109.228:60980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/infos.php"] [unique_id "apK-Z2jCPtor9NZ-byT45AAABmU"]
[Sat Aug 29 05:11:35.164312 2026] [security2:error] [pid 1321:tid 1539] [client 145.239.10.137:41146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.10.239.145.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "greenfieldperformanceparts.com"] [uri "/mah.php"] [unique_id "apK-Z2jCPtor9NZ-byT45QAABm8"], referer: http://greenfieldperformanceparts.com/mah.php?p=
[Sat Aug 29 05:11:35.169319 2026] [security2:error] [pid 11274:tid 11517] [client 68.155.159.216:56809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFKwAAAVI"]
[Sat Aug 29 05:11:35.180499 2026] [security2:error] [pid 11274:tid 11530] [client 20.48.160.90:61676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFLAAAAV8"]
[Sat Aug 29 05:11:35.185128 2026] [security2:error] [pid 1321:tid 1576] [client 20.104.18.15:43732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/replace.php"] [unique_id "apK-Z2jCPtor9NZ-byT46AAABpM"]
[Sat Aug 29 05:11:35.194333 2026] [security2:error] [pid 1321:tid 1520] [client 4.205.62.107:65020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/env.php"] [unique_id "apK-Z2jCPtor9NZ-byT46gAABlw"]
[Sat Aug 29 05:11:35.198212 2026] [security2:error] [pid 1321:tid 1553] [client 158.23.147.79:14267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/lock.php"] [unique_id "apK-Z2jCPtor9NZ-byT47AAABnw"]
[Sat Aug 29 05:11:35.198611 2026] [security2:error] [pid 1321:tid 1452] [remote 34.74.130.21:43204] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "redelan.cl"] [uri "/wp-config.php.swp"] [unique_id "apK-Z2jCPtor9NZ-byT47QAGm10"]
[Sat Aug 29 05:11:35.199061 2026] [security2:error] [pid 1321:tid 1563] [client 103.48.146.148:52960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 148.146.48.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK-Z2jCPtor9NZ-byT47wAABoY"]
[Sat Aug 29 05:11:35.199486 2026] [security2:error] [pid 1321:tid 1411] [remote 34.74.130.21:43204] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "redelan.cl"] [uri "/storage/.env"] [unique_id "apK-Z2jCPtor9NZ-byT47gAGmzU"]
[Sat Aug 29 05:11:35.200049 2026] [security2:error] [pid 1321:tid 1563] [client 103.48.146.148:52960] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK-Z2jCPtor9NZ-byT47wAABoY"]
[Sat Aug 29 05:11:35.202179 2026] [cgid:error] [pid 1321:tid 1398] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:35.202855 2026] [security2:error] [pid 11274:tid 11535] [client 93.123.109.228:33140] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/public/.env"] [unique_id "apK-Z2bX5DA3XO6e_qRFLQAAAWQ"]
[Sat Aug 29 05:11:35.204083 2026] [security2:error] [pid 1321:tid 1581] [client 20.220.204.93:58001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/gk.php"] [unique_id "apK-Z2jCPtor9NZ-byT49AAABpg"]
[Sat Aug 29 05:11:35.204658 2026] [security2:error] [pid 11274:tid 11484] [client 45.148.10.62:53670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zeh.elx.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFLgAAATE"]
[Sat Aug 29 05:11:35.210793 2026] [security2:error] [pid 11274:tid 11472] [client 93.123.109.228:33042] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/laravel/.env"] [unique_id "apK-Z2bX5DA3XO6e_qRFMQAAASY"]
[Sat Aug 29 05:11:35.211446 2026] [security2:error] [pid 1321:tid 1604] [client 20.48.250.41:26933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/amp.php"] [unique_id "apK-Z2jCPtor9NZ-byT49gAABq8"]
[Sat Aug 29 05:11:35.217336 2026] [security2:error] [pid 11274:tid 11448] [client 93.123.109.228:32998] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/lms/.env"] [unique_id "apK-Z2bX5DA3XO6e_qRFMwAAAQ4"]
[Sat Aug 29 05:11:35.217414 2026] [security2:error] [pid 11274:tid 11546] [client 20.151.200.44:27297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/h02ugyh.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFNAAAAW4"]
[Sat Aug 29 05:11:35.219171 2026] [security2:error] [pid 11274:tid 11520] [client 93.123.109.228:60924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/public/phpinfo.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFNQAAAVU"]
[Sat Aug 29 05:11:35.223305 2026] [cgid:error] [pid 1321:tid 1445] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:35.223824 2026] [cgid:error] [pid 1321:tid 1446] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:35.228080 2026] [security2:error] [pid 11274:tid 11450] [client 93.123.109.228:33204] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/public_html/.env"] [unique_id "apK-Z2bX5DA3XO6e_qRFNwAAARA"]
[Sat Aug 29 05:11:35.236995 2026] [security2:error] [pid 11274:tid 11455] [client 20.104.104.62:27860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "buddhistonthebattleship.managemymood.com"] [uri "/content.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFOQAAARU"]
[Sat Aug 29 05:11:35.240996 2026] [security2:error] [pid 11274:tid 11391] [remote 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFOgABYk0"]
[Sat Aug 29 05:11:35.241135 2026] [security2:error] [pid 11274:tid 11533] [client 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFOgABYk0"]
[Sat Aug 29 05:11:35.243163 2026] [security2:error] [pid 1321:tid 1547] [client 52.139.37.240:30796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/must.php"] [unique_id "apK-Z2jCPtor9NZ-byT4-gAABnY"]
[Sat Aug 29 05:11:35.245053 2026] [security2:error] [pid 1321:tid 1506] [client 93.123.109.228:33014] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/local/.env"] [unique_id "apK-Z2jCPtor9NZ-byT4-wAABk4"]
[Sat Aug 29 05:11:35.245433 2026] [security2:error] [pid 1321:tid 1521] [client 20.104.18.15:15069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/dev.php"] [unique_id "apK-Z2jCPtor9NZ-byT4_AAABl0"]
[Sat Aug 29 05:11:35.250972 2026] [security2:error] [pid 1321:tid 1528] [client 93.123.109.228:33222] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/qa/.env"] [unique_id "apK-Z2jCPtor9NZ-byT4_QAABmQ"]
[Sat Aug 29 05:11:35.264220 2026] [security2:error] [pid 1321:tid 1549] [client 158.158.54.35:23218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/p.php"] [unique_id "apK-Z2jCPtor9NZ-byT5AgAABng"]
[Sat Aug 29 05:11:35.288533 2026] [security2:error] [pid 11274:tid 11538] [client 158.23.184.117:18155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/.well-known/panel.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFPgAAAWc"]
[Sat Aug 29 05:11:35.289694 2026] [cgid:error] [pid 1321:tid 1474] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:35.296509 2026] [cgid:error] [pid 1321:tid 1465] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:35.300658 2026] [security2:error] [pid 11274:tid 11555] [client 4.205.62.107:6904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/wp-access.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFPwAAAXc"]
[Sat Aug 29 05:11:35.303242 2026] [security2:error] [pid 11274:tid 11470] [client 40.83.93.50:3995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/add_actualites.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFQQAAASQ"]
[Sat Aug 29 05:11:35.305797 2026] [security2:error] [pid 1321:tid 1550] [client 20.48.250.41:42941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/ak.php"] [unique_id "apK-Z2jCPtor9NZ-byT5BwAABnk"]
[Sat Aug 29 05:11:35.333964 2026] [security2:error] [pid 11274:tid 11522] [client 20.52.41.200:4797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-content/uploads/min.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFRAAAAVc"]
[Sat Aug 29 05:11:35.333964 2026] [security2:error] [pid 1321:tid 1538] [client 20.48.160.90:61598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/haxor.php"] [unique_id "apK-Z2jCPtor9NZ-byT5CQAABm4"]
[Sat Aug 29 05:11:35.338354 2026] [security2:error] [pid 1321:tid 1491] [client 4.205.62.107:63272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/thui.php"] [unique_id "apK-Z2jCPtor9NZ-byT5CwAABj8"]
[Sat Aug 29 05:11:35.344170 2026] [security2:error] [pid 1321:tid 1580] [client 20.104.104.62:40214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/angel.php"] [unique_id "apK-Z2jCPtor9NZ-byT5DQAABpc"]
[Sat Aug 29 05:11:35.345136 2026] [security2:error] [pid 1321:tid 1548] [client 20.48.250.41:27535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/cc13.php"] [unique_id "apK-Z2jCPtor9NZ-byT5DwAABnc"]
[Sat Aug 29 05:11:35.345528 2026] [security2:error] [pid 11274:tid 11475] [client 93.123.109.228:32820] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/market/.env"] [unique_id "apK-Z2bX5DA3XO6e_qRFRgAAASk"]
[Sat Aug 29 05:11:35.351807 2026] [security2:error] [pid 11274:tid 11550] [client 20.63.219.114:10345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/bak.phps"] [unique_id "apK-Z2bX5DA3XO6e_qRFRwAAAXI"]
[Sat Aug 29 05:11:35.357233 2026] [security2:error] [pid 11274:tid 11518] [client 93.123.109.228:33078] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/marketing/.env"] [unique_id "apK-Z2bX5DA3XO6e_qRFSAAAAVM"]
[Sat Aug 29 05:11:35.358688 2026] [security2:error] [pid 11274:tid 11461] [client 93.123.109.228:33092] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/media/.env"] [unique_id "apK-Z2bX5DA3XO6e_qRFSQAAARs"]
[Sat Aug 29 05:11:35.387762 2026] [security2:error] [pid 11274:tid 11560] [client 20.104.18.15:15056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/gos.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFUAAAAXw"]
[Sat Aug 29 05:11:35.388004 2026] [security2:error] [pid 11274:tid 11545] [client 20.52.41.200:2878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/222.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFUQAAAW0"]
[Sat Aug 29 05:11:35.428122 2026] [security2:error] [pid 1321:tid 1535] [client 93.123.109.228:32776] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/node-api/.env"] [unique_id "apK-Z2jCPtor9NZ-byT5GQAABms"]
[Sat Aug 29 05:11:35.434133 2026] [security2:error] [pid 1321:tid 1564] [client 158.23.184.117:18314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/.well-known/pki-validation/mariju.php"] [unique_id "apK-Z2jCPtor9NZ-byT5GgAABoc"]
[Sat Aug 29 05:11:35.443511 2026] [security2:error] [pid 1321:tid 1508] [client 20.104.104.62:28586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "buddhistonthebattleship.managemymood.com"] [uri "/function/function.php"] [unique_id "apK-Z2jCPtor9NZ-byT5GwAABlA"]
[Sat Aug 29 05:11:35.443929 2026] [security2:error] [pid 11274:tid 11476] [client 52.139.37.240:31652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/up.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFVwAAASo"]
[Sat Aug 29 05:11:35.448096 2026] [security2:error] [pid 11274:tid 11564] [client 20.151.200.44:27142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/shelp.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFWAAAAYA"]
[Sat Aug 29 05:11:35.448497 2026] [security2:error] [pid 1321:tid 1526] [client 93.123.109.228:33000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/node/.env"] [unique_id "apK-Z2jCPtor9NZ-byT5HAAABmI"]
[Sat Aug 29 05:11:35.450732 2026] [security2:error] [pid 11274:tid 11564] [client 93.123.109.228:33016] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/node/api/.env"] [unique_id "apK-Z2bX5DA3XO6e_qRFWQAAAYA"]
[Sat Aug 29 05:11:35.468349 2026] [security2:error] [pid 11274:tid 11489] [client 20.48.160.90:37764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/google.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFXAAAATY"]
[Sat Aug 29 05:11:35.470390 2026] [security2:error] [pid 11274:tid 11529] [client 20.104.18.15:43737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/c4.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFXQAAAV4"]
[Sat Aug 29 05:11:35.478710 2026] [security2:error] [pid 11274:tid 11471] [client 93.123.109.228:32870] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/new/.env"] [unique_id "apK-Z2bX5DA3XO6e_qRFXwAAASU"]
[Sat Aug 29 05:11:35.487801 2026] [security2:error] [pid 11274:tid 11487] [client 20.48.250.41:49559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/lib.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFYAAAATQ"]
[Sat Aug 29 05:11:35.504830 2026] [security2:error] [pid 11274:tid 11507] [client 158.23.147.79:64395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFYwAAAUg"]
[Sat Aug 29 05:11:35.504888 2026] [security2:error] [pid 11274:tid 11444] [client 93.123.109.228:32820] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/node/backend/.env"] [unique_id "apK-Z2bX5DA3XO6e_qRFYgAAAQo"]
[Sat Aug 29 05:11:35.506096 2026] [security2:error] [pid 11274:tid 11504] [client 93.123.109.228:60940] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/nodeweb/.env"] [unique_id "apK-Z2bX5DA3XO6e_qRFZAAAAUU"]
[Sat Aug 29 05:11:35.513826 2026] [cgid:error] [pid 1321:tid 1376] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:35.513872 2026] [cgid:error] [pid 1321:tid 1430] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:35.514127 2026] [cgid:error] [pid 1321:tid 1368] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:35.514723 2026] [cgid:error] [pid 1321:tid 1455] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:35.517308 2026] [security2:error] [pid 11274:tid 11499] [client 93.123.109.228:33078] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/nodeapi/.env"] [unique_id "apK-Z2bX5DA3XO6e_qRFZwAAAUA"]
[Sat Aug 29 05:11:35.531973 2026] [security2:error] [pid 11274:tid 11559] [client 20.100.175.163:24985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/classwithtostring.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFawAAAXs"]
[Sat Aug 29 05:11:35.535507 2026] [security2:error] [pid 1321:tid 1610] [client 20.104.49.130:46152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/browse.php"] [unique_id "apK-Z2jCPtor9NZ-byT5KAAABrU"]
[Sat Aug 29 05:11:35.541050 2026] [security2:error] [pid 11274:tid 11561] [client 20.48.250.41:27611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/aa.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFbAAAAX0"]
[Sat Aug 29 05:11:35.546405 2026] [cgid:error] [pid 1321:tid 1464] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:35.551344 2026] [security2:error] [pid 11274:tid 11493] [client 20.240.128.207:7529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/w.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFbQAAATo"]
[Sat Aug 29 05:11:35.552555 2026] [security2:error] [pid 11274:tid 11527] [client 20.104.18.15:15137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/132.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFbgAAAVw"]
[Sat Aug 29 05:11:35.554264 2026] [security2:error] [pid 11274:tid 11523] [client 93.123.109.228:33050] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/opt/.env"] [unique_id "apK-Z2bX5DA3XO6e_qRFbwAAAVg"]
[Sat Aug 29 05:11:35.557628 2026] [security2:error] [pid 11274:tid 11484] [client 93.123.109.228:33042] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/old/.env"] [unique_id "apK-Z2bX5DA3XO6e_qRFcAAAATE"]
[Sat Aug 29 05:11:35.559645 2026] [security2:error] [pid 1321:tid 1517] [client 40.83.93.50:17573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/meta.php"] [unique_id "apK-Z2jCPtor9NZ-byT5LQAABlk"]
[Sat Aug 29 05:11:35.570401 2026] [proxy_http:error] [pid 1017536:tid 1017771] (70007)The timeout specified has expired: [client 127.0.0.1:15024] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:11:35.570438 2026] [proxy:error] [pid 1017536:tid 1017771] [client 127.0.0.1:15024] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:11:35.571894 2026] [cgid:error] [pid 1321:tid 1388] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:35.578186 2026] [security2:error] [pid 1321:tid 1525] [client 158.23.184.117:64772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/.well-known/pki-validation/pl.php"] [unique_id "apK-Z2jCPtor9NZ-byT5LwAABmE"]
[Sat Aug 29 05:11:35.579141 2026] [security2:error] [pid 11274:tid 11546] [client 68.155.159.216:49024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFcwAAAW4"]
[Sat Aug 29 05:11:35.587011 2026] [core:error] [pid 1321:tid 1531] [client 20.100.175.163:26227] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:35.587027 2026] [core:error] [pid 1321:tid 1531] [client 20.100.175.163:26227] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:35.587892 2026] [security2:error] [pid 1321:tid 1532] [client 20.104.104.62:42064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/x23.php"] [unique_id "apK-Z2jCPtor9NZ-byT5MgAABmg"]
[Sat Aug 29 05:11:35.589403 2026] [security2:error] [pid 11274:tid 11481] [client 20.240.128.207:19855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/t.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFdAAAAS4"]
[Sat Aug 29 05:11:35.589998 2026] [security2:error] [pid 1321:tid 1489] [client 158.158.54.35:12393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/aa.php"] [unique_id "apK-Z2jCPtor9NZ-byT5MwAABj0"]
[Sat Aug 29 05:11:35.599268 2026] [security2:error] [pid 11274:tid 11450] [client 4.205.62.107:59108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/radio.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFdQAAARA"]
[Sat Aug 29 05:11:35.601427 2026] [security2:error] [pid 11274:tid 11566] [client 20.48.160.90:61573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFdgAAAYI"]
[Sat Aug 29 05:11:35.618909 2026] [security2:error] [pid 11274:tid 11533] [client 20.104.18.15:43801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/rxr.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFdwAAAWI"]
[Sat Aug 29 05:11:35.620534 2026] [security2:error] [pid 1321:tid 1529] [client 20.48.250.41:42952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/wp-style.php"] [unique_id "apK-Z2jCPtor9NZ-byT5OAAABmU"]
[Sat Aug 29 05:11:35.620805 2026] [security2:error] [pid 11274:tid 11544] [client 20.220.204.93:50601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/logs1.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFeQAAAWw"]
[Sat Aug 29 05:11:35.637442 2026] [security2:error] [pid 1321:tid 1576] [client 20.104.104.62:48620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/eval.php"] [unique_id "apK-Z2jCPtor9NZ-byT5OgAABpM"]
[Sat Aug 29 05:11:35.646949 2026] [security2:error] [pid 1321:tid 1523] [client 20.104.104.62:28545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "buddhistonthebattleship.managemymood.com"] [uri "/item.php"] [unique_id "apK-Z2jCPtor9NZ-byT5PAAABl8"]
[Sat Aug 29 05:11:35.653954 2026] [security2:error] [pid 11274:tid 11470] [client 158.23.147.79:62708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFfgAAASQ"]
[Sat Aug 29 05:11:35.654639 2026] [security2:error] [pid 11274:tid 11509] [client 158.23.147.79:39355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-content/radio.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFfwAAAUo"]
[Sat Aug 29 05:11:35.656153 2026] [security2:error] [pid 11274:tid 11516] [client 4.205.62.107:4972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/application.config.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFgAAAAVE"]
[Sat Aug 29 05:11:35.656288 2026] [security2:error] [pid 11274:tid 11549] [client 68.155.159.216:23523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-includes/content.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFgQAAAXE"]
[Sat Aug 29 05:11:35.661941 2026] [security2:error] [pid 1321:tid 1579] [client 197.219.150.206:59992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK-Z2jCPtor9NZ-byT5PQAABpY"]
[Sat Aug 29 05:11:35.662050 2026] [security2:error] [pid 1321:tid 1579] [client 197.219.150.206:59992] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK-Z2jCPtor9NZ-byT5PQAABpY"]
[Sat Aug 29 05:11:35.665845 2026] [security2:error] [pid 11274:tid 11558] [client 40.83.93.50:15824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/1p.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFgwAAAXo"]
[Sat Aug 29 05:11:35.673226 2026] [security2:error] [pid 1321:tid 1584] [client 20.104.104.62:20829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/c100.php"] [unique_id "apK-Z2jCPtor9NZ-byT5QQAABps"]
[Sat Aug 29 05:11:35.689876 2026] [security2:error] [pid 11274:tid 11469] [client 20.48.250.41:27602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/s1.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFhgAAASM"]
[Sat Aug 29 05:11:35.702144 2026] [security2:error] [pid 11274:tid 11494] [client 20.104.18.15:14983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/v22.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFiAAAATs"]
[Sat Aug 29 05:11:35.705826 2026] [security2:error] [pid 1321:tid 1521] [client 158.23.147.79:44480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/.well-knownold/index.php"] [unique_id "apK-Z2jCPtor9NZ-byT5RQAABl0"]
[Sat Aug 29 05:11:35.708704 2026] [security2:error] [pid 11274:tid 11472] [client 158.158.54.35:12364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/a1.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFiQAAASY"]
[Sat Aug 29 05:11:35.710564 2026] [security2:error] [pid 11274:tid 11468] [client 158.23.147.79:24399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/content.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFigAAASI"]
[Sat Aug 29 05:11:35.732847 2026] [security2:error] [pid 1321:tid 1604] [client 158.23.184.117:64768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/.well-known/pki-validation/x.php"] [unique_id "apK-Z2jCPtor9NZ-byT5SwAABq8"]
[Sat Aug 29 05:11:35.752710 2026] [security2:error] [pid 11274:tid 11495] [client 20.48.160.90:37862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/robots.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFkQAAATw"]
[Sat Aug 29 05:11:35.752738 2026] [security2:error] [pid 11274:tid 11506] [client 20.63.219.114:17005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/install.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFkgAAAUc"]
[Sat Aug 29 05:11:35.759247 2026] [security2:error] [pid 1321:tid 1518] [client 68.155.159.216:65134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.harnessenrgy.com"] [uri "/first.php"] [unique_id "apK-Z2jCPtor9NZ-byT5TQAABlo"]
[Sat Aug 29 05:11:35.759838 2026] [security2:error] [pid 1321:tid 1499] [client 20.48.250.41:36098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-Z2jCPtor9NZ-byT5TgAABkc"]
[Sat Aug 29 05:11:35.786108 2026] [security2:error] [pid 11274:tid 11568] [client 40.83.93.50:3904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/alfanew.php7"] [unique_id "apK-Z2bX5DA3XO6e_qRFkwAAAYQ"]
[Sat Aug 29 05:11:35.790908 2026] [security2:error] [pid 1321:tid 1607] [client 20.52.41.200:4791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK-Z2jCPtor9NZ-byT5TwAABrI"]
[Sat Aug 29 05:11:35.795759 2026] [security2:error] [pid 11274:tid 11564] [client 158.23.147.79:58939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-mail.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFlQAAAYA"]
[Sat Aug 29 05:11:35.832385 2026] [security2:error] [pid 1321:tid 1533] [client 20.104.18.15:43942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.zhengshe.net"] [uri "/reviall.php"] [unique_id "apK-Z2jCPtor9NZ-byT5UwAABmk"]
[Sat Aug 29 05:11:35.833072 2026] [security2:error] [pid 1321:tid 1538] [client 20.151.200.44:64017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/bge.php"] [unique_id "apK-Z2jCPtor9NZ-byT5VAAABm4"]
[Sat Aug 29 05:11:35.841075 2026] [security2:error] [pid 11274:tid 11498] [client 20.48.250.41:26914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/0byte.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFmwAAAT8"]
[Sat Aug 29 05:11:35.842680 2026] [security2:error] [pid 1321:tid 1527] [client 20.104.104.62:27686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "buddhistonthebattleship.managemymood.com"] [uri "/ms-edit.php"] [unique_id "apK-Z2jCPtor9NZ-byT5VwAABmM"]
[Sat Aug 29 05:11:35.843164 2026] [security2:error] [pid 1321:tid 1580] [client 93.123.109.228:33106] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/s3/.env.bak"] [unique_id "apK-Z2jCPtor9NZ-byT5VgAABpc"]
[Sat Aug 29 05:11:35.844512 2026] [security2:error] [pid 1321:tid 1562] [client 20.52.41.200:2227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/mini.php"] [unique_id "apK-Z2jCPtor9NZ-byT5WAAABoU"]
[Sat Aug 29 05:11:35.848436 2026] [security2:error] [pid 11274:tid 11444] [client 20.48.250.41:49657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/browse.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFnAAAAQo"]
[Sat Aug 29 05:11:35.862605 2026] [security2:error] [pid 11274:tid 11499] [client 20.104.49.130:52289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/wpxml.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFnwAAAUA"]
[Sat Aug 29 05:11:35.863959 2026] [security2:error] [pid 1321:tid 1548] [client 74.7.175.147:45816] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "oncesocial.com"] [uri "/robots.txt"] [unique_id "apK-Z2jCPtor9NZ-byT5WQAABnc"]
[Sat Aug 29 05:11:35.864638 2026] [security2:error] [pid 1321:tid 1575] [client 20.104.18.15:15055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/wp-activate.php"] [unique_id "apK-Z2jCPtor9NZ-byT5WgAABpI"]
[Sat Aug 29 05:11:35.872524 2026] [security2:error] [pid 11274:tid 11492] [client 4.205.62.107:32535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/aws_secret_config.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFoAAAATk"]
[Sat Aug 29 05:11:35.878774 2026] [security2:error] [pid 11274:tid 11511] [client 158.23.184.117:18338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/.well-known/pki-validation/xmrlpc.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFoQAAAUw"]
[Sat Aug 29 05:11:35.885462 2026] [security2:error] [pid 11274:tid 11465] [client 20.220.204.93:18885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/inege.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFogAAAR8"]
[Sat Aug 29 05:11:35.895836 2026] [security2:error] [pid 1321:tid 1568] [client 20.48.160.90:37872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/wp-content/plugins/ccx/index.php"] [unique_id "apK-Z2jCPtor9NZ-byT5XAAABos"]
[Sat Aug 29 05:11:35.901686 2026] [security2:error] [pid 1321:tid 1556] [client 68.155.159.216:62731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK-Z2jCPtor9NZ-byT5YwAABn8"]
[Sat Aug 29 05:11:35.926156 2026] [security2:error] [pid 1321:tid 1490] [client 20.48.250.41:36391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-Z2jCPtor9NZ-byT5ZwAABj4"]
[Sat Aug 29 05:11:35.927972 2026] [security2:error] [pid 11274:tid 11523] [client 93.123.109.228:32796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/php-info.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFpwAAAVg"]
[Sat Aug 29 05:11:35.932435 2026] [security2:error] [pid 11274:tid 11503] [client 52.139.37.240:31098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/wp-content/155.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFqQAAAUQ"]
[Sat Aug 29 05:11:35.933510 2026] [security2:error] [pid 1321:tid 1605] [client 20.151.200.44:27298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/13ede.php"] [unique_id "apK-Z2jCPtor9NZ-byT5aQAABrA"]
[Sat Aug 29 05:11:35.950499 2026] [cgid:error] [pid 1321:tid 1484] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:35.968506 2026] [cgid:error] [pid 1321:tid 1425] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:35.968728 2026] [cgid:error] [pid 1321:tid 1454] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:35.970925 2026] [cgid:error] [pid 1321:tid 1366] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:35.971017 2026] [security2:error] [pid 11274:tid 11452] [client 93.123.109.228:33042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/php_info.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFrgAAARI"]
[Sat Aug 29 05:11:35.971347 2026] [cgid:error] [pid 1321:tid 1380] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:35.971546 2026] [cgid:error] [pid 1321:tid 1371] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:35.972710 2026] [security2:error] [pid 1321:tid 1595] [client 20.104.104.62:57419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/ws66.php"] [unique_id "apK-Z2jCPtor9NZ-byT5cwAABqY"]
[Sat Aug 29 05:11:35.980089 2026] [security2:error] [pid 1321:tid 1552] [client 20.48.250.41:26911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/xr.php"] [unique_id "apK-Z2jCPtor9NZ-byT5dQAABns"]
[Sat Aug 29 05:11:35.991277 2026] [security2:error] [pid 1321:tid 1564] [client 74.7.175.147:37338] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "oncesocial.com"] [uri "/robots.txt"] [unique_id "apK-Z2jCPtor9NZ-byT5eAAGhwY"], referer: http://oncesocial.com/robots.txt
[Sat Aug 29 05:11:35.997745 2026] [security2:error] [pid 11274:tid 11488] [client 93.123.109.228:33050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/php.php"] [unique_id "apK-Z2bX5DA3XO6e_qRFsQAAATU"]
[Sat Aug 29 05:11:35.997863 2026] [security2:error] [pid 1321:tid 1543] [client 93.123.109.228:35316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/phpinfo.php"] [unique_id "apK-Z2jCPtor9NZ-byT5eQAABnM"]
[Sat Aug 29 05:11:36.000888 2026] [security2:error] [pid 11274:tid 11515] [client 93.123.109.228:33114] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/server/.env"] [unique_id "apK-Z2bX5DA3XO6e_qRFsgAAAVA"]
[Sat Aug 29 05:11:36.008910 2026] [security2:error] [pid 11274:tid 11489] [client 180.190.5.40:39900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.5.190.180.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK-aGbX5DA3XO6e_qRFswAAATY"]
[Sat Aug 29 05:11:36.009434 2026] [security2:error] [pid 11274:tid 11489] [client 180.190.5.40:39900] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK-aGbX5DA3XO6e_qRFswAAATY"]
[Sat Aug 29 05:11:36.012715 2026] [security2:error] [pid 11274:tid 11538] [client 93.123.109.228:35326] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/portal/.env"] [unique_id "apK-aGbX5DA3XO6e_qRFtAAAAWc"]
[Sat Aug 29 05:11:36.012834 2026] [security2:error] [pid 1321:tid 1525] [client 93.123.109.228:33232] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/server/api/.env"] [unique_id "apK-aGjCPtor9NZ-byT5fAAABmE"]
[Sat Aug 29 05:11:36.014122 2026] [security2:error] [pid 11274:tid 11456] [client 20.100.175.163:13804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/news.php"] [unique_id "apK-aGbX5DA3XO6e_qRFtgAAARY"]
[Sat Aug 29 05:11:36.021569 2026] [security2:error] [pid 1321:tid 1531] [client 93.123.109.228:60810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/server/backend/.env"] [unique_id "apK-aGjCPtor9NZ-byT5fQAABmc"]
[Sat Aug 29 05:11:36.023494 2026] [security2:error] [pid 1321:tid 1594] [client 158.23.184.117:18152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/.well-known/security.php"] [unique_id "apK-aGjCPtor9NZ-byT5fgAABqU"]
[Sat Aug 29 05:11:36.024334 2026] [security2:error] [pid 11274:tid 11559] [client 158.158.54.35:10146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/c.php"] [unique_id "apK-aGbX5DA3XO6e_qRFuQAAAXs"]
[Sat Aug 29 05:11:36.026889 2026] [security2:error] [pid 11274:tid 11555] [client 68.155.159.216:33590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-content/x.php"] [unique_id "apK-aGbX5DA3XO6e_qRFugAAAXc"]
[Sat Aug 29 05:11:36.033177 2026] [security2:error] [pid 1321:tid 1489] [client 20.104.18.15:15146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/wp-trackback.php"] [unique_id "apK-aGjCPtor9NZ-byT5fwAABj0"]
[Sat Aug 29 05:11:36.034223 2026] [security2:error] [pid 1321:tid 1544] [client 20.104.104.62:27841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "buddhistonthebattleship.managemymood.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK-aGjCPtor9NZ-byT5gAAABnQ"]
[Sat Aug 29 05:11:36.037789 2026] [security2:error] [pid 11274:tid 11541] [client 20.48.160.90:61663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/wp-admin/css/colors/maro.php"] [unique_id "apK-aGbX5DA3XO6e_qRFvAAAAWo"]
[Sat Aug 29 05:11:36.041683 2026] [security2:error] [pid 1321:tid 1606] [client 68.155.159.216:2006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK-aGjCPtor9NZ-byT5ggAABrE"]
[Sat Aug 29 05:11:36.043855 2026] [security2:error] [pid 11274:tid 11565] [client 40.83.93.50:10915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/randkeyword.php"] [unique_id "apK-aGbX5DA3XO6e_qRFvQAAAYE"]
[Sat Aug 29 05:11:36.045292 2026] [security2:error] [pid 11274:tid 11517] [client 20.240.128.207:13025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/ahax.php"] [unique_id "apK-aGbX5DA3XO6e_qRFvgAAAVI"]
[Sat Aug 29 05:11:36.052023 2026] [security2:error] [pid 11274:tid 11483] [client 20.220.204.93:17216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/wp-link10.php"] [unique_id "apK-aGbX5DA3XO6e_qRFvwAAATA"]
[Sat Aug 29 05:11:36.077414 2026] [security2:error] [pid 1321:tid 1520] [client 68.155.159.216:14241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK-aGjCPtor9NZ-byT5igAABlw"]
[Sat Aug 29 05:11:36.079930 2026] [security2:error] [pid 1321:tid 1579] [client 20.104.104.62:20802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/simattacker.php"] [unique_id "apK-aGjCPtor9NZ-byT5iwAABpY"]
[Sat Aug 29 05:11:36.081384 2026] [core:error] [pid 11274:tid 11540] [client 20.100.175.163:20605] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:36.081400 2026] [core:error] [pid 11274:tid 11540] [client 20.100.175.163:20605] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:36.084368 2026] [security2:error] [pid 11274:tid 11500] [client 93.123.109.228:33078] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/prod/.env"] [unique_id "apK-aGbX5DA3XO6e_qRFwwAAAUE"]
[Sat Aug 29 05:11:36.102472 2026] [security2:error] [pid 1321:tid 1513] [client 93.123.109.228:32776] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/product/.env"] [unique_id "apK-aGjCPtor9NZ-byT5jQAABlU"]
[Sat Aug 29 05:11:36.125554 2026] [security2:error] [pid 1321:tid 1581] [client 20.48.250.41:49587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/zoo.php"] [unique_id "apK-aGjCPtor9NZ-byT5kAAABpg"]
[Sat Aug 29 05:11:36.127500 2026] [security2:error] [pid 1321:tid 1585] [client 20.240.128.207:15253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/i.php"] [unique_id "apK-aGjCPtor9NZ-byT5kQAABpw"]
[Sat Aug 29 05:11:36.130225 2026] [security2:error] [pid 1321:tid 1576] [client 52.139.37.240:31531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/wp-update.php"] [unique_id "apK-aGjCPtor9NZ-byT5kgAABpM"]
[Sat Aug 29 05:11:36.136786 2026] [security2:error] [pid 11274:tid 11473] [client 20.151.200.44:27597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/k8.php"] [unique_id "apK-aGbX5DA3XO6e_qRFxgAAASc"]
[Sat Aug 29 05:11:36.148174 2026] [security2:error] [pid 1321:tid 1536] [client 93.123.109.228:33014] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/production/.env"] [unique_id "apK-aGjCPtor9NZ-byT5lAAABmw"]
[Sat Aug 29 05:11:36.152797 2026] [security2:error] [pid 1321:tid 1495] [client 158.158.54.35:8486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-aGjCPtor9NZ-byT5lwAABkM"]
[Sat Aug 29 05:11:36.154272 2026] [security2:error] [pid 1321:tid 1497] [client 40.83.93.50:15834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/Njima.php"] [unique_id "apK-aGjCPtor9NZ-byT5mAAABkU"]
[Sat Aug 29 05:11:36.156286 2026] [security2:error] [pid 1321:tid 1555] [client 20.48.250.41:36380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/ff1.php"] [unique_id "apK-aGjCPtor9NZ-byT5mQAABn4"]
[Sat Aug 29 05:11:36.161317 2026] [security2:error] [pid 11274:tid 11549] [client 20.63.219.114:2793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/colour.php"] [unique_id "apK-aGbX5DA3XO6e_qRFyQAAAXE"]
[Sat Aug 29 05:11:36.162943 2026] [security2:error] [pid 1321:tid 1560] [client 114.119.141.103:65133] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.classiclightingusa.com"] [uri "/catalog/index.php/cPath/4/osCsid/b94ce1ecf3109c97de4a72a57c6ccb59"] [unique_id "apK-aGjCPtor9NZ-byT5mwAABoM"], referer: http://www.classiclightingusa.com/catalog/product_info.php/products_id/747
[Sat Aug 29 05:11:36.166958 2026] [security2:error] [pid 1321:tid 1612] [client 20.48.250.41:27530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/h02ugyh.php"] [unique_id "apK-aGjCPtor9NZ-byT5nAAABrc"]
[Sat Aug 29 05:11:36.169946 2026] [security2:error] [pid 11274:tid 11472] [client 158.23.184.117:18321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/.well-known/system.php"] [unique_id "apK-aGbX5DA3XO6e_qRFygAAASY"]
[Sat Aug 29 05:11:36.172084 2026] [security2:error] [pid 1321:tid 1499] [client 20.104.18.15:15166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/pri.php"] [unique_id "apK-aGjCPtor9NZ-byT5ngAABkc"]
[Sat Aug 29 05:11:36.174953 2026] [security2:error] [pid 11274:tid 11571] [client 93.123.109.228:35326] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/project/.env"] [unique_id "apK-aGbX5DA3XO6e_qRFywAAAYc"]
[Sat Aug 29 05:11:36.175869 2026] [cgid:error] [pid 1321:tid 1387] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:36.176938 2026] [security2:error] [pid 1321:tid 1573] [client 20.48.160.90:61639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/wp-admin/css/colors/coffee/marijuana.php"] [unique_id "apK-aGjCPtor9NZ-byT5nwAABpA"]
[Sat Aug 29 05:11:36.190126 2026] [cgid:error] [pid 1321:tid 1358] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:36.190917 2026] [cgid:error] [pid 1321:tid 1429] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:36.221457 2026] [security2:error] [pid 1321:tid 1514] [client 4.205.62.107:63909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/fff.php"] [unique_id "apK-aGjCPtor9NZ-byT5qAAABlY"]
[Sat Aug 29 05:11:36.222093 2026] [security2:error] [pid 1321:tid 1533] [client 20.220.204.93:18908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/ww.php"] [unique_id "apK-aGjCPtor9NZ-byT5qQAABmk"]
[Sat Aug 29 05:11:36.229638 2026] [http2:warn] [pid 1041789:tid 1041984] [client 57.141.14.41:57682] h2_stream(1041789-123-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:11:36.231207 2026] [security2:error] [pid 1321:tid 1527] [client 93.123.109.228:33000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/public-api/.env"] [unique_id "apK-aGjCPtor9NZ-byT5qwAABmM"]
[Sat Aug 29 05:11:36.235740 2026] [security2:error] [pid 11274:tid 11486] [client 93.123.109.228:33114] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/services/.env"] [unique_id "apK-aGbX5DA3XO6e_qRF1AAAATM"]
[Sat Aug 29 05:11:36.237410 2026] [security2:error] [pid 1321:tid 1491] [client 93.123.109.228:60810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/service/.env"] [unique_id "apK-aGjCPtor9NZ-byT5rQAABj8"]
[Sat Aug 29 05:11:36.238274 2026] [security2:error] [pid 1321:tid 1584] [client 20.52.41.200:4932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/bthil.php"] [unique_id "apK-aGjCPtor9NZ-byT5rgAABps"]
[Sat Aug 29 05:11:36.240192 2026] [security2:error] [pid 1321:tid 1584] [client 93.123.109.228:32968] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/public/.env"] [unique_id "apK-aGjCPtor9NZ-byT5rwAABps"]
[Sat Aug 29 05:11:36.245144 2026] [security2:error] [pid 11274:tid 11479] [client 93.123.109.228:60940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/public/phpinfo.php"] [unique_id "apK-aGbX5DA3XO6e_qRF1QAAASw"]
[Sat Aug 29 05:11:36.270386 2026] [proxy_http:error] [pid 1017536:tid 1017657] (70007)The timeout specified has expired: [remote 74.7.241.38:60088] AH01102: error reading status line from remote server 127.0.0.1:8443, referer: https://guraonline.com/shop/?orderby=price-desc&product_brand=aco,possess,la-roche-posay,the-one,scope,locobase,ldb,oncolour
[Sat Aug 29 05:11:36.270416 2026] [proxy:error] [pid 1017536:tid 1017657] [remote 74.7.241.38:60088] AH00898: Error reading from remote server returned by /502.shtml, referer: https://guraonline.com/shop/?orderby=price-desc&product_brand=aco,possess,la-roche-posay,the-one,scope,locobase,ldb,oncolour
[Sat Aug 29 05:11:36.279398 2026] [proxy_http:error] [pid 1028675:tid 1028935] (70007)The timeout specified has expired: [client 127.0.0.1:48904] AH01102: error reading status line from remote server 50.6.92.44:8443, referer: https://guraonline.com/shop/?orderby=price-desc&product_brand=aco,possess,la-roche-posay,the-one,scope,locobase,ldb,oncolour
[Sat Aug 29 05:11:36.279428 2026] [proxy:error] [pid 1028675:tid 1028935] [client 127.0.0.1:48904] AH00898: Error reading from remote server returned by /502.shtml, referer: https://guraonline.com/shop/?orderby=price-desc&product_brand=aco,possess,la-roche-posay,the-one,scope,locobase,ldb,oncolour
[Sat Aug 29 05:11:36.284448 2026] [proxy_http:error] [pid 1017536:tid 1017666] (70007)The timeout specified has expired: [client 127.0.0.1:15036] AH01102: error reading status line from remote server 50.6.92.44:8443, referer: https://guraonline.com/shop/?orderby=price-desc&product_brand=aco,possess,la-roche-posay,the-one,scope,locobase,ldb,oncolour
[Sat Aug 29 05:11:36.284485 2026] [proxy:error] [pid 1017536:tid 1017666] [client 127.0.0.1:15036] AH00898: Error reading from remote server returned by /502.shtml, referer: https://guraonline.com/shop/?orderby=price-desc&product_brand=aco,possess,la-roche-posay,the-one,scope,locobase,ldb,oncolour
[Sat Aug 29 05:11:36.284781 2026] [cgid:error] [pid 1321:tid 1359] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:36.288091 2026] [security2:error] [pid 1321:tid 1605] [client 93.123.109.228:32776] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/public_html/.env"] [unique_id "apK-aGjCPtor9NZ-byT5tQAABrA"]
[Sat Aug 29 05:11:36.290313 2026] [security2:error] [pid 1321:tid 1574] [client 20.48.250.41:36366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/t.php"] [unique_id "apK-aGjCPtor9NZ-byT5tgAABpE"]
[Sat Aug 29 05:11:36.301207 2026] [security2:error] [pid 11274:tid 11496] [client 158.23.147.79:14310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/index/function.php"] [unique_id "apK-aGbX5DA3XO6e_qRF2wAAAT0"]
[Sat Aug 29 05:11:36.301461 2026] [security2:error] [pid 1321:tid 1522] [client 20.52.41.200:2211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/aa.php"] [unique_id "apK-aGjCPtor9NZ-byT5uAAABl4"]
[Sat Aug 29 05:11:36.314363 2026] [security2:error] [pid 11274:tid 11553] [client 40.83.93.50:10928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/xmlrpc.php0"] [unique_id "apK-aGbX5DA3XO6e_qRF2QAAAXU"]
[Sat Aug 29 05:11:36.317111 2026] [security2:error] [pid 11274:tid 11490] [client 158.23.184.117:64789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/.well-known/users.php"] [unique_id "apK-aGbX5DA3XO6e_qRF3gAAATc"]
[Sat Aug 29 05:11:36.317925 2026] [security2:error] [pid 11274:tid 11498] [client 93.123.109.228:33078] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/qa/.env"] [unique_id "apK-aGbX5DA3XO6e_qRF3QAAAT8"]
[Sat Aug 29 05:11:36.326964 2026] [cgid:error] [pid 1321:tid 1389] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:36.328169 2026] [security2:error] [pid 11274:tid 11463] [client 52.139.37.240:31097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/xmrlpc.php"] [unique_id "apK-aGbX5DA3XO6e_qRF4AAAAR0"]
[Sat Aug 29 05:11:36.328387 2026] [cgid:error] [pid 1321:tid 1441] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:36.328982 2026] [security2:error] [pid 11274:tid 11519] [client 20.104.18.15:15002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/wp_blog_footer.php"] [unique_id "apK-aGbX5DA3XO6e_qRF4QAAAVQ"]
[Sat Aug 29 05:11:36.333475 2026] [security2:error] [pid 1321:tid 1566] [client 4.205.62.107:64269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/xve22.php"] [unique_id "apK-aGjCPtor9NZ-byT5vgAABok"]
[Sat Aug 29 05:11:36.338570 2026] [security2:error] [pid 11274:tid 11521] [client 20.48.160.90:61609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/wp-admin/css/colors/coffee/mari.php"] [unique_id "apK-aGbX5DA3XO6e_qRF5QAAAVY"]
[Sat Aug 29 05:11:36.341115 2026] [security2:error] [pid 11274:tid 11511] [client 93.123.109.228:33140] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/shared/.env"] [unique_id "apK-aGbX5DA3XO6e_qRF5wAAAUw"]
[Sat Aug 29 05:11:36.345309 2026] [security2:error] [pid 1321:tid 1601] [client 93.123.109.228:33248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/shop/.env"] [unique_id "apK-aGjCPtor9NZ-byT5vwAABqw"]
[Sat Aug 29 05:11:36.348720 2026] [http2:warn] [pid 1017536:tid 1017719] [client 57.141.14.14:64940] h2_stream(1017536-392-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:11:36.351983 2026] [security2:error] [pid 11274:tid 11465] [client 20.48.250.41:26911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/xxw.php"] [unique_id "apK-aGbX5DA3XO6e_qRF6AAAAR8"]
[Sat Aug 29 05:11:36.355414 2026] [security2:error] [pid 1321:tid 1564] [client 68.155.159.216:64005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK-aGjCPtor9NZ-byT5wAAABoc"]
[Sat Aug 29 05:11:36.358063 2026] [security2:error] [pid 11274:tid 11514] [client 20.48.250.41:42917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/elp.php"] [unique_id "apK-aGbX5DA3XO6e_qRF6QAAAU8"]
[Sat Aug 29 05:11:36.362830 2026] [security2:error] [pid 11274:tid 11426] [remote 45.148.10.62:53680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zeh.elx.mybluehost.me"] [uri "/wp-login.php"] [unique_id "apK-aGbX5DA3XO6e_qRF6gABZnA"]
[Sat Aug 29 05:11:36.371028 2026] [security2:error] [pid 1321:tid 1610] [client 20.104.104.62:28595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "buddhistonthebattleship.managemymood.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK-aGjCPtor9NZ-byT5wQAABrU"]
[Sat Aug 29 05:11:36.392616 2026] [security2:error] [pid 11274:tid 11572] [client 20.104.104.62:52262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/Cok.php"] [unique_id "apK-aGbX5DA3XO6e_qRF7AAAAYg"]
[Sat Aug 29 05:11:36.407076 2026] [security2:error] [pid 11274:tid 11493] [client 93.123.109.228:33126] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/src/.env"] [unique_id "apK-aGbX5DA3XO6e_qRF7wAAATo"]
[Sat Aug 29 05:11:36.413478 2026] [http2:warn] [pid 1034096:tid 1034259] [client 74.7.241.38:45352] h2_stream(1034096-93-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:11:36.413495 2026] [http2:warn] [pid 1034096:tid 1034259] [client 74.7.241.38:45352] h2_stream(1034096-93-3,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:11:36.431825 2026] [security2:error] [pid 11274:tid 11524] [client 4.205.62.107:6890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/otuz1.php"] [unique_id "apK-aGbX5DA3XO6e_qRF8gAAAVk"]
[Sat Aug 29 05:11:36.443456 2026] [cgid:error] [pid 1321:tid 1406] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:36.445020 2026] [cgid:error] [pid 1321:tid 1399] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:36.445508 2026] [cgid:error] [pid 1321:tid 1423] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:36.452366 2026] [security2:error] [pid 11274:tid 11488] [client 20.48.250.41:36395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/erty.php"] [unique_id "apK-aGbX5DA3XO6e_qRF9AAAATU"]
[Sat Aug 29 05:11:36.462454 2026] [security2:error] [pid 1321:tid 1614] [client 158.23.184.117:18169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/.well-known/wp-blog-header.php"] [unique_id "apK-aGjCPtor9NZ-byT5zQAABrk"]
[Sat Aug 29 05:11:36.465147 2026] [security2:error] [pid 1321:tid 1539] [client 20.104.18.15:15145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/sushi.php"] [unique_id "apK-aGjCPtor9NZ-byT5zgAABm8"]
[Sat Aug 29 05:11:36.468392 2026] [proxy_http:error] [pid 1034096:tid 1034163] (70007)The timeout specified has expired: [remote 74.7.241.38:45352] AH01102: error reading status line from remote server 127.0.0.1:8443, referer: https://guraonline.com/shop/?orderby=date&product_brand=locobase,the-one,la-roche-posay,aco,cerave,dr-ceuracle,scope,possess
[Sat Aug 29 05:11:36.468417 2026] [proxy:error] [pid 1034096:tid 1034163] [remote 74.7.241.38:45352] AH00898: Error reading from remote server returned by /shop/, referer: https://guraonline.com/shop/?orderby=date&product_brand=locobase,the-one,la-roche-posay,aco,cerave,dr-ceuracle,scope,possess
[Sat Aug 29 05:11:36.476058 2026] [security2:error] [pid 11274:tid 11459] [client 20.48.160.90:37780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/wp-includes/images/crystal/option.php"] [unique_id "apK-aGbX5DA3XO6e_qRF9wAAARk"]
[Sat Aug 29 05:11:36.476277 2026] [security2:error] [pid 11274:tid 11541] [client 4.205.62.107:63248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/lala.php"] [unique_id "apK-aGbX5DA3XO6e_qRF-AAAAWo"]
[Sat Aug 29 05:11:36.477969 2026] [security2:error] [pid 11274:tid 11444] [client 158.158.54.35:28910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/f.php"] [unique_id "apK-aGbX5DA3XO6e_qRF-QAAAQo"]
[Sat Aug 29 05:11:36.481674 2026] [security2:error] [pid 11274:tid 11483] [client 20.220.204.93:17229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/w1px.php"] [unique_id "apK-aGbX5DA3XO6e_qRF_AAAATA"]
[Sat Aug 29 05:11:36.483150 2026] [security2:error] [pid 11274:tid 11483] [client 20.151.200.44:27195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/alog.php"] [unique_id "apK-aGbX5DA3XO6e_qRF_QAAATA"]
[Sat Aug 29 05:11:36.492624 2026] [security2:error] [pid 11274:tid 11499] [client 20.100.175.163:7958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/about/function.php"] [unique_id "apK-aGbX5DA3XO6e_qRF_gAAAUA"]
[Sat Aug 29 05:11:36.500394 2026] [proxy_http:error] [pid 1034096:tid 1034330] (70007)The timeout specified has expired: [client 127.0.0.1:48930] AH01102: error reading status line from remote server 50.6.92.44:8443, referer: https://guraonline.com/shop/?orderby=date&product_brand=locobase,the-one,la-roche-posay,aco,cerave,dr-ceuracle,scope,possess
[Sat Aug 29 05:11:36.500414 2026] [proxy:error] [pid 1034096:tid 1034330] [client 127.0.0.1:48930] AH00898: Error reading from remote server returned by /shop/, referer: https://guraonline.com/shop/?orderby=date&product_brand=locobase,the-one,la-roche-posay,aco,cerave,dr-ceuracle,scope,possess
[Sat Aug 29 05:11:36.522604 2026] [security2:error] [pid 11274:tid 11538] [client 52.139.37.240:31504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/about/function.php"] [unique_id "apK-aGbX5DA3XO6e_qRGBAAAAWc"]
[Sat Aug 29 05:11:36.532045 2026] [security2:error] [pid 1321:tid 1544] [client 20.63.219.114:2800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/OK.php"] [unique_id "apK-aGjCPtor9NZ-byT51wAABnQ"]
[Sat Aug 29 05:11:36.544928 2026] [security2:error] [pid 11274:tid 11484] [client 20.240.128.207:7544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/shell.php"] [unique_id "apK-aGbX5DA3XO6e_qRGCAAAATE"]
[Sat Aug 29 05:11:36.572396 2026] [security2:error] [pid 1321:tid 1506] [client 20.104.104.62:27688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "buddhistonthebattleship.managemymood.com"] [uri "/wp-content/about.php"] [unique_id "apK-aGjCPtor9NZ-byT53AAABk4"]
[Sat Aug 29 05:11:36.573516 2026] [security2:error] [pid 11274:tid 11560] [client 20.48.160.90:28770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-aGbX5DA3XO6e_qRGCwAAAXw"]
[Sat Aug 29 05:11:36.575518 2026] [security2:error] [pid 1321:tid 1489] [client 20.100.175.163:4170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/tool.php"] [unique_id "apK-aGjCPtor9NZ-byT53QAABj0"]
[Sat Aug 29 05:11:36.577891 2026] [security2:error] [pid 1321:tid 1555] [client 20.48.250.41:42881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/666.php"] [unique_id "apK-aGjCPtor9NZ-byT53gAABn4"]
[Sat Aug 29 05:11:36.587865 2026] [security2:error] [pid 11274:tid 11482] [client 93.123.109.228:33204] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/srv/.env"] [unique_id "apK-aGbX5DA3XO6e_qRGDgAAAS8"]
[Sat Aug 29 05:11:36.593342 2026] [security2:error] [pid 11274:tid 11571] [client 93.123.109.228:33126] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/stage/.env"] [unique_id "apK-aGbX5DA3XO6e_qRGDwAAAYc"]
[Sat Aug 29 05:11:36.602850 2026] [security2:error] [pid 1321:tid 1615] [client 62.60.130.128:58001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.130.60.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fieldssketchbook.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "apK-aGjCPtor9NZ-byT54gAABro"]
[Sat Aug 29 05:11:36.606759 2026] [security2:error] [pid 1321:tid 1499] [client 93.123.109.228:60810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/staging/.env"] [unique_id "apK-aGjCPtor9NZ-byT54wAABkc"]
[Sat Aug 29 05:11:36.609482 2026] [security2:error] [pid 1321:tid 1499] [client 158.23.147.79:64478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-aGjCPtor9NZ-byT55AAABkc"]
[Sat Aug 29 05:11:36.609484 2026] [security2:error] [pid 11274:tid 11569] [client 158.23.184.117:18351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/.well-known/wp-links-opml.php"] [unique_id "apK-aGbX5DA3XO6e_qRGFAAAAYU"]
[Sat Aug 29 05:11:36.610377 2026] [security2:error] [pid 11274:tid 11515] [client 40.83.93.50:4029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/goods.php"] [unique_id "apK-aGbX5DA3XO6e_qRGFQAAAVA"]
[Sat Aug 29 05:11:36.610695 2026] [security2:error] [pid 1321:tid 1529] [client 158.158.54.35:10112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/alfa-rex.php7"] [unique_id "apK-aGjCPtor9NZ-byT55gAABmU"]
[Sat Aug 29 05:11:36.617861 2026] [security2:error] [pid 11274:tid 11536] [client 20.48.160.90:61600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/wp-includes/pomo/xxx.php"] [unique_id "apK-aGbX5DA3XO6e_qRGFgAAAWU"]
[Sat Aug 29 05:11:36.630784 2026] [security2:error] [pid 1321:tid 1488] [client 20.48.250.41:27582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/bolt.php"] [unique_id "apK-aGjCPtor9NZ-byT56QAABjw"]
[Sat Aug 29 05:11:36.639609 2026] [security2:error] [pid 11274:tid 11502] [client 20.104.18.15:15158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/manga.php"] [unique_id "apK-aGbX5DA3XO6e_qRGGgAAAUM"]
[Sat Aug 29 05:11:36.644731 2026] [security2:error] [pid 11274:tid 11565] [client 20.240.128.207:18217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/deepseek_d.php"] [unique_id "apK-aGbX5DA3XO6e_qRGHAAAAYE"]
[Sat Aug 29 05:11:36.658544 2026] [security2:error] [pid 11274:tid 11471] [client 20.48.250.41:36097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/0x.php"] [unique_id "apK-aGbX5DA3XO6e_qRGHwAAASU"]
[Sat Aug 29 05:11:36.669599 2026] [security2:error] [pid 1321:tid 1533] [client 93.123.109.228:60896] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/stg/.env"] [unique_id "apK-aGjCPtor9NZ-byT57AAABmk"]
[Sat Aug 29 05:11:36.684834 2026] [cgid:error] [pid 1321:tid 1416] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:36.691531 2026] [security2:error] [pid 11274:tid 11449] [client 20.220.204.93:15814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/to.php"] [unique_id "apK-aGbX5DA3XO6e_qRGJQAAAQ8"]
[Sat Aug 29 05:11:36.693820 2026] [security2:error] [pid 11274:tid 11456] [client 40.83.93.50:3408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/configs.php"] [unique_id "apK-aGbX5DA3XO6e_qRGJgAAARY"]
[Sat Aug 29 05:11:36.695102 2026] [security2:error] [pid 1321:tid 1492] [client 68.155.159.216:49131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/file.php"] [unique_id "apK-aGjCPtor9NZ-byT58QAABkA"]
[Sat Aug 29 05:11:36.700145 2026] [cgid:error] [pid 1321:tid 1373] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:36.700848 2026] [core:error] [pid 1321:tid 1500] [client 20.52.41.200:4375] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:36.700866 2026] [core:error] [pid 1321:tid 1500] [client 20.52.41.200:4375] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:36.709183 2026] [cgid:error] [pid 1321:tid 1482] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:36.710987 2026] [security2:error] [pid 1321:tid 1519] [client 20.48.160.90:23800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-aGjCPtor9NZ-byT5-AAABls"]
[Sat Aug 29 05:11:36.712063 2026] [cgid:error] [pid 1321:tid 1438] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:36.716928 2026] [security2:error] [pid 11274:tid 11479] [client 52.139.37.240:31141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/an.php"] [unique_id "apK-aGbX5DA3XO6e_qRGKgAAASw"]
[Sat Aug 29 05:11:36.729912 2026] [security2:error] [pid 1321:tid 1582] [client 4.205.62.107:59110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/xa.php"] [unique_id "apK-aGjCPtor9NZ-byT5-gAABpk"]
[Sat Aug 29 05:11:36.732243 2026] [security2:error] [pid 11274:tid 11492] [client 20.48.250.41:42990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/knmt.php"] [unique_id "apK-aGbX5DA3XO6e_qRGLQAAATk"]
[Sat Aug 29 05:11:36.737524 2026] [security2:error] [pid 1321:tid 1598] [client 93.123.109.228:35366] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/s3/.env.bak"] [unique_id "apK-aGjCPtor9NZ-byT5-wAABqk"]
[Sat Aug 29 05:11:36.750598 2026] [security2:error] [pid 11274:tid 11504] [client 20.151.200.44:27287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/adin.php"] [unique_id "apK-aGbX5DA3XO6e_qRGLgAAAUU"]
[Sat Aug 29 05:11:36.757279 2026] [security2:error] [pid 11274:tid 11495] [client 20.52.41.200:2724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/c.php"] [unique_id "apK-aGbX5DA3XO6e_qRGMQAAATw"]
[Sat Aug 29 05:11:36.757318 2026] [security2:error] [pid 11274:tid 11551] [client 158.23.184.117:18171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/.well-known/wp-load.php"] [unique_id "apK-aGbX5DA3XO6e_qRGMAAAAXM"]
[Sat Aug 29 05:11:36.758895 2026] [security2:error] [pid 11274:tid 11535] [client 93.123.109.228:33204] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/stripe/.env"] [unique_id "apK-aGbX5DA3XO6e_qRGMgAAAWQ"]
[Sat Aug 29 05:11:36.763530 2026] [security2:error] [pid 11274:tid 11463] [client 20.104.104.62:27710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "buddhistonthebattleship.managemymood.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "apK-aGbX5DA3XO6e_qRGMwAAAR0"]
[Sat Aug 29 05:11:36.766829 2026] [security2:error] [pid 1321:tid 1522] [client 20.104.104.62:48587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/sao.php"] [unique_id "apK-aGjCPtor9NZ-byT5_gAABl4"]
[Sat Aug 29 05:11:36.775855 2026] [security2:error] [pid 11274:tid 11530] [client 20.48.160.90:37842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/650.php"] [unique_id "apK-aGbX5DA3XO6e_qRGNQAAAV8"]
[Sat Aug 29 05:11:36.791021 2026] [security2:error] [pid 11274:tid 11452] [client 158.23.147.79:62658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/images/index.php"] [unique_id "apK-aGbX5DA3XO6e_qRGNwAAARI"]
[Sat Aug 29 05:11:36.793266 2026] [security2:error] [pid 11274:tid 11481] [client 4.205.62.107:4929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/v2.php"] [unique_id "apK-aGbX5DA3XO6e_qRGOAAAAS4"]
[Sat Aug 29 05:11:36.794919 2026] [security2:error] [pid 1321:tid 1502] [client 20.104.18.15:15050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/asdfghj.php"] [unique_id "apK-aGjCPtor9NZ-byT6AgAABko"]
[Sat Aug 29 05:11:36.797726 2026] [cgid:error] [pid 1321:tid 1407] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:36.797751 2026] [cgid:error] [pid 1321:tid 1365] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:36.809201 2026] [security2:error] [pid 11274:tid 11517] [client 158.23.147.79:39305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-admin/dropdown.php"] [unique_id "apK-aGbX5DA3XO6e_qRGOwAAAVI"]
[Sat Aug 29 05:11:36.812762 2026] [security2:error] [pid 11274:tid 11477] [client 20.48.250.41:36110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/66.php"] [unique_id "apK-aGbX5DA3XO6e_qRGPAAAASs"]
[Sat Aug 29 05:11:36.813925 2026] [security2:error] [pid 11274:tid 11454] [client 40.83.93.50:6706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/content.php"] [unique_id "apK-aGbX5DA3XO6e_qRGPQAAARQ"]
[Sat Aug 29 05:11:36.824334 2026] [security2:error] [pid 11274:tid 11541] [client 158.23.147.79:52308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK-aGbX5DA3XO6e_qRGPwAAAWo"]
[Sat Aug 29 05:11:36.825366 2026] [security2:error] [pid 11274:tid 11483] [client 158.23.147.79:24478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK-aGbX5DA3XO6e_qRGQQAAATA"]
[Sat Aug 29 05:11:36.829067 2026] [security2:error] [pid 11274:tid 11499] [client 68.155.159.216:23489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-admin/css/index.php"] [unique_id "apK-aGbX5DA3XO6e_qRGQgAAAUA"]
[Sat Aug 29 05:11:36.848836 2026] [security2:error] [pid 11274:tid 11538] [client 20.48.160.90:23769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/ser.php"] [unique_id "apK-aGbX5DA3XO6e_qRGQwAAAWc"]
[Sat Aug 29 05:11:36.851518 2026] [security2:error] [pid 11274:tid 11552] [client 20.220.204.93:38864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/thui.php"] [unique_id "apK-aGbX5DA3XO6e_qRGRQAAAXQ"]
[Sat Aug 29 05:11:36.854742 2026] [security2:error] [pid 1321:tid 1587] [client 20.104.104.62:59065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/X7T6.php"] [unique_id "apK-aGjCPtor9NZ-byT6BwAABp4"]
[Sat Aug 29 05:11:36.859787 2026] [security2:error] [pid 11274:tid 11461] [client 93.123.109.228:60908] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/terraform.tfstate.backup"] [unique_id "apK-aGbX5DA3XO6e_qRGSAAAARs"]
[Sat Aug 29 05:11:36.867571 2026] [security2:error] [pid 1321:tid 1543] [client 20.48.250.41:42820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/sbhu.php"] [unique_id "apK-aGjCPtor9NZ-byT6DAAABnM"]
[Sat Aug 29 05:11:36.869713 2026] [security2:error] [pid 11274:tid 11473] [client 93.123.109.228:33078] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/server/.env"] [unique_id "apK-aGbX5DA3XO6e_qRGSQAAASc"]
[Sat Aug 29 05:11:36.896405 2026] [security2:error] [pid 11274:tid 11503] [client 103.240.76.112:50253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK-aGbX5DA3XO6e_qRGSwAAAUQ"]
[Sat Aug 29 05:11:36.896517 2026] [security2:error] [pid 11274:tid 11503] [client 103.240.76.112:50253] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK-aGbX5DA3XO6e_qRGSwAAAUQ"]
[Sat Aug 29 05:11:36.902181 2026] [security2:error] [pid 11274:tid 11536] [client 20.48.250.41:27543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/rtx.php"] [unique_id "apK-aGbX5DA3XO6e_qRGTQAAAWU"]
[Sat Aug 29 05:11:36.902181 2026] [security2:error] [pid 1321:tid 1564] [client 158.23.184.117:64785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/.well-known/wp-mail.php"] [unique_id "apK-aGjCPtor9NZ-byT6DQAABoc"]
[Sat Aug 29 05:11:36.903600 2026] [security2:error] [pid 11274:tid 11515] [client 93.123.109.228:35376] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/server/api/.env"] [unique_id "apK-aGbX5DA3XO6e_qRGTAAAAVA"]
[Sat Aug 29 05:11:36.914797 2026] [security2:error] [pid 11274:tid 11497] [client 20.48.160.90:37770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/nakrip.php"] [unique_id "apK-aGbX5DA3XO6e_qRGTgAAAT4"]
[Sat Aug 29 05:11:36.915525 2026] [security2:error] [pid 11274:tid 11509] [client 52.139.37.240:31153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/asw.php"] [unique_id "apK-aGbX5DA3XO6e_qRGTwAAAUo"]
[Sat Aug 29 05:11:36.920857 2026] [security2:error] [pid 1321:tid 1609] [client 93.123.109.228:35358] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/server/backend/.env"] [unique_id "apK-aGjCPtor9NZ-byT6DwAABrQ"]
[Sat Aug 29 05:11:36.924964 2026] [security2:error] [pid 11274:tid 11565] [client 93.123.109.228:60880] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/test/.env"] [unique_id "apK-aGbX5DA3XO6e_qRGUQAAAYE"]
[Sat Aug 29 05:11:36.928399 2026] [security2:error] [pid 11274:tid 11493] [client 158.158.54.35:23227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/av.php"] [unique_id "apK-aGbX5DA3XO6e_qRGUgAAATo"]
[Sat Aug 29 05:11:36.949504 2026] [security2:error] [pid 1321:tid 1606] [client 93.123.109.228:33248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/test.php"] [unique_id "apK-aGjCPtor9NZ-byT6EwAABrE"]
[Sat Aug 29 05:11:36.954826 2026] [security2:error] [pid 1321:tid 1552] [client 20.63.219.114:10337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "oldwestradio.livingthecode.org"] [uri "/aaa.php"] [unique_id "apK-aGjCPtor9NZ-byT6FgAABns"]
[Sat Aug 29 05:11:36.956722 2026] [security2:error] [pid 11274:tid 11506] [client 93.123.109.228:33140] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/user/.env"] [unique_id "apK-aGbX5DA3XO6e_qRGVgAAAUc"]
[Sat Aug 29 05:11:36.961879 2026] [security2:error] [pid 1321:tid 1614] [client 20.151.200.44:27283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/sf9.php"] [unique_id "apK-aGjCPtor9NZ-byT6GQAABrk"]
[Sat Aug 29 05:11:36.968988 2026] [security2:error] [pid 11274:tid 11486] [client 20.104.18.15:15064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/dragonshell.php"] [unique_id "apK-aGbX5DA3XO6e_qRGWwAAATM"]
[Sat Aug 29 05:11:36.978242 2026] [security2:error] [pid 11274:tid 11539] [client 93.123.109.228:33114] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/v1/.env"] [unique_id "apK-aGbX5DA3XO6e_qRGXAAAAWg"]
[Sat Aug 29 05:11:36.978532 2026] [security2:error] [pid 11274:tid 11492] [client 20.104.104.62:20825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wsoshell.php"] [unique_id "apK-aGbX5DA3XO6e_qRGXQAAATk"]
[Sat Aug 29 05:11:36.984312 2026] [security2:error] [pid 11274:tid 11551] [client 20.48.160.90:29127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/431.php"] [unique_id "apK-aGbX5DA3XO6e_qRGXgAAAXM"]
[Sat Aug 29 05:11:36.988678 2026] [security2:error] [pid 11274:tid 11535] [client 20.48.250.41:36398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/f35.php"] [unique_id "apK-aGbX5DA3XO6e_qRGXwAAAWQ"]
[Sat Aug 29 05:11:37.002287 2026] [security2:error] [pid 11274:tid 11445] [client 20.220.204.93:15830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/Jcrop.php"] [unique_id "apK-aWbX5DA3XO6e_qRGYgAAAQs"]
[Sat Aug 29 05:11:37.007342 2026] [security2:error] [pid 11274:tid 11534] [client 4.205.62.107:32554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/snq.php"] [unique_id "apK-aWbX5DA3XO6e_qRGZAAAAWM"]
[Sat Aug 29 05:11:37.009534 2026] [cgid:error] [pid 1321:tid 1418] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:37.010538 2026] [security2:error] [pid 1321:tid 1547] [client 34.169.171.101:53208] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "mail.forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-aWjCPtor9NZ-byT6IgAABnY"]
[Sat Aug 29 05:11:37.010832 2026] [security2:error] [pid 11274:tid 11521] [client 93.123.109.228:60908] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/v2/.env"] [unique_id "apK-aWbX5DA3XO6e_qRGaQAAAVY"]
[Sat Aug 29 05:11:37.011900 2026] [security2:error] [pid 11274:tid 11519] [client 34.169.171.101:53166] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "mail.forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-aWbX5DA3XO6e_qRGZwAAAVQ"]
[Sat Aug 29 05:11:37.012248 2026] [cgid:error] [pid 1321:tid 1395] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:37.013788 2026] [security2:error] [pid 11274:tid 11496] [client 34.169.171.101:53346] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/.ssh/id_rsa"] [unique_id "apK-aWbX5DA3XO6e_qRGbgAAAT0"]
[Sat Aug 29 05:11:37.014656 2026] [security2:error] [pid 11274:tid 11465] [client 158.23.147.79:60172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-includes/index.php"] [unique_id "apK-aWbX5DA3XO6e_qRGcQAAAR8"]
[Sat Aug 29 05:11:37.020040 2026] [security2:error] [pid 1321:tid 1581] [client 34.169.171.101:53282] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "mail.forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-aWjCPtor9NZ-byT6KQAABpg"]
[Sat Aug 29 05:11:37.020054 2026] [security2:error] [pid 11274:tid 11546] [client 34.169.171.101:53372] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/.ssh/id_dsa"] [unique_id "apK-aWbX5DA3XO6e_qRGdQAAAW4"]
[Sat Aug 29 05:11:37.022558 2026] [security2:error] [pid 11274:tid 11481] [client 20.104.104.62:61812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/see.php"] [unique_id "apK-aWbX5DA3XO6e_qRGdwAAAS4"]
[Sat Aug 29 05:11:37.024145 2026] [security2:error] [pid 1321:tid 1497] [client 93.123.109.228:33222] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/v3/.env"] [unique_id "apK-aWjCPtor9NZ-byT6LAAABkU"]
[Sat Aug 29 05:11:37.033252 2026] [cgid:error] [pid 1321:tid 1392] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:37.037423 2026] [cgid:error] [pid 1321:tid 1394] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:37.044559 2026] [security2:error] [pid 1321:tid 1603] [client 20.48.250.41:42972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/a332.php"] [unique_id "apK-aWjCPtor9NZ-byT6NAAABq4"]
[Sat Aug 29 05:11:37.046532 2026] [cgid:error] [pid 1321:tid 1404] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:37.047096 2026] [security2:error] [pid 11274:tid 11477] [client 20.48.160.90:61612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/wp-includes/interactivity-api/flower.php"] [unique_id "apK-aWbX5DA3XO6e_qRGgAAAASs"]
[Sat Aug 29 05:11:37.047472 2026] [security2:error] [pid 1321:tid 1529] [client 34.169.171.101:53208] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-aWjCPtor9NZ-byT6NgAABmU"], referer: https://mail.forensicengineernj.com/api/v1/config
[Sat Aug 29 05:11:37.047731 2026] [security2:error] [pid 1321:tid 1549] [client 93.123.109.228:33000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/service/.env"] [unique_id "apK-aWjCPtor9NZ-byT6NwAABng"]
[Sat Aug 29 05:11:37.048114 2026] [security2:error] [pid 11274:tid 11520] [client 34.169.171.101:53166] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-aWbX5DA3XO6e_qRGfwAAAVU"], referer: https://mail.forensicengineernj.com/app-config.json
[Sat Aug 29 05:11:37.049146 2026] [security2:error] [pid 11274:tid 11571] [client 20.240.128.207:4905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/elp.php"] [unique_id "apK-aWbX5DA3XO6e_qRGgwAAAYc"]
[Sat Aug 29 05:11:37.049756 2026] [security2:error] [pid 11274:tid 11483] [client 93.123.109.228:32998] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/services/.env"] [unique_id "apK-aWbX5DA3XO6e_qRGggAAATA"]
[Sat Aug 29 05:11:37.051116 2026] [security2:error] [pid 11274:tid 11463] [client 158.23.184.117:18359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/.well-known/wp-settings.php"] [unique_id "apK-aWbX5DA3XO6e_qRGhwAAAR0"]
[Sat Aug 29 05:11:37.051413 2026] [security2:error] [pid 11274:tid 11501] [client 158.158.54.35:29464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-includes/fonts/index.php"] [unique_id "apK-aWbX5DA3XO6e_qRGiAAAAUI"]
[Sat Aug 29 05:11:37.052702 2026] [cgid:error] [pid 1321:tid 1456] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:37.059212 2026] [security2:error] [pid 1321:tid 1588] [client 34.169.171.101:53282] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-aWjCPtor9NZ-byT6PQAABp8"], referer: https://mail.forensicengineernj.com/firebase-credentials.json
[Sat Aug 29 05:11:37.064075 2026] [security2:error] [pid 11274:tid 11552] [client 68.155.159.216:62734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-content/admin.php"] [unique_id "apK-aWbX5DA3XO6e_qRGjwAAAXQ"]
[Sat Aug 29 05:11:37.070009 2026] [security2:error] [pid 11274:tid 11450] [client 20.100.175.163:4200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/k.php"] [unique_id "apK-aWbX5DA3XO6e_qRGkgAAARA"]
[Sat Aug 29 05:11:37.091914 2026] [security2:error] [pid 1321:tid 1500] [client 20.48.250.41:26910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/ckk.php"] [unique_id "apK-aWjCPtor9NZ-byT6RAAABkg"]
[Sat Aug 29 05:11:37.095413 2026] [security2:error] [pid 1321:tid 1519] [client 68.155.159.216:21448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/wp-admin/about.php"] [unique_id "apK-aWjCPtor9NZ-byT6RgAABls"]
[Sat Aug 29 05:11:37.113168 2026] [security2:error] [pid 11274:tid 11454] [client 52.139.37.240:30804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/item.php"] [unique_id "apK-aWbX5DA3XO6e_qRGlwAAARQ"]
[Sat Aug 29 05:11:37.115565 2026] [security2:error] [pid 11274:tid 11505] [client 40.83.93.50:10023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/hehe.php"] [unique_id "apK-aWbX5DA3XO6e_qRGmAAAAUY"]
[Sat Aug 29 05:11:37.128936 2026] [security2:error] [pid 11274:tid 11497] [client 20.104.18.15:15267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/wp-safe.php"] [unique_id "apK-aWbX5DA3XO6e_qRGnQAAAT4"]
[Sat Aug 29 05:11:37.132445 2026] [security2:error] [pid 1321:tid 1604] [client 68.155.159.216:33789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK-aWjCPtor9NZ-byT6SwAABq8"]
[Sat Aug 29 05:11:37.136274 2026] [security2:error] [pid 1321:tid 1605] [client 20.48.160.90:23715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/rxr.php"] [unique_id "apK-aWjCPtor9NZ-byT6TQAABrA"]
[Sat Aug 29 05:11:37.138432 2026] [security2:error] [pid 11274:tid 11509] [client 93.123.109.228:35326] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/shared/.env"] [unique_id "apK-aWbX5DA3XO6e_qRGoAAAAUo"]
[Sat Aug 29 05:11:37.155030 2026] [security2:error] [pid 11274:tid 11472] [client 93.123.109.228:32820] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/shop/.env"] [unique_id "apK-aWbX5DA3XO6e_qRGogAAASY"]
[Sat Aug 29 05:11:37.159007 2026] [security2:error] [pid 11274:tid 11544] [client 20.52.41.200:4375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/cv.php"] [unique_id "apK-aWbX5DA3XO6e_qRGpAAAAWw"]
[Sat Aug 29 05:11:37.162341 2026] [security2:error] [pid 1321:tid 1526] [client 20.48.250.41:36371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/wen.php"] [unique_id "apK-aWjCPtor9NZ-byT6UgAABmI"]
[Sat Aug 29 05:11:37.173672 2026] [security2:error] [pid 1321:tid 1508] [client 20.104.104.62:48592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/uuu.php"] [unique_id "apK-aWjCPtor9NZ-byT6VQAABlA"]
[Sat Aug 29 05:11:37.176532 2026] [security2:error] [pid 1321:tid 1566] [client 20.48.160.90:61654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/xcc.php"] [unique_id "apK-aWjCPtor9NZ-byT6VgAABok"]
[Sat Aug 29 05:11:37.179173 2026] [security2:error] [pid 11274:tid 11486] [client 68.155.159.216:14227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/.well-knownold/index.php"] [unique_id "apK-aWbX5DA3XO6e_qRGpgAAATM"]
[Sat Aug 29 05:11:37.190288 2026] [security2:error] [pid 11274:tid 11539] [client 20.100.175.163:25010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-includes/admin.php"] [unique_id "apK-aWbX5DA3XO6e_qRGqAAAAWg"]
[Sat Aug 29 05:11:37.191376 2026] [security2:error] [pid 1321:tid 1601] [client 20.104.104.62:42062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/horeg.php"] [unique_id "apK-aWjCPtor9NZ-byT6VwAABqw"]
[Sat Aug 29 05:11:37.197954 2026] [security2:error] [pid 11274:tid 11492] [client 20.48.250.41:49541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/ws66.php"] [unique_id "apK-aWbX5DA3XO6e_qRGqgAAATk"]
[Sat Aug 29 05:11:37.200855 2026] [security2:error] [pid 1321:tid 1522] [client 158.23.184.117:18332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/.well-known/wp-signup.php"] [unique_id "apK-aWjCPtor9NZ-byT6WgAABl4"]
[Sat Aug 29 05:11:37.206462 2026] [security2:error] [pid 11274:tid 11535] [client 93.123.109.228:35334] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/src/.env"] [unique_id "apK-aWbX5DA3XO6e_qRGqwAAAWQ"]
[Sat Aug 29 05:11:37.212288 2026] [security2:error] [pid 1321:tid 1608] [client 20.52.41.200:2636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/f.php"] [unique_id "apK-aWjCPtor9NZ-byT6WwAABrM"]
[Sat Aug 29 05:11:37.226850 2026] [security2:error] [pid 1321:tid 1610] [client 20.48.250.41:27560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mocoworks.com"] [uri "/R57.php"] [unique_id "apK-aWjCPtor9NZ-byT6XQAABrU"]
[Sat Aug 29 05:11:37.229234 2026] [security2:error] [pid 1321:tid 1564] [client 20.220.204.93:16825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/ws58.php"] [unique_id "apK-aWjCPtor9NZ-byT6XgAABoc"]
[Sat Aug 29 05:11:37.232603 2026] [security2:error] [pid 11274:tid 11534] [client 93.123.109.228:33126] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/var/www/html/.env"] [unique_id "apK-aWbX5DA3XO6e_qRGrQAAAWM"]
[Sat Aug 29 05:11:37.233550 2026] [security2:error] [pid 11274:tid 11511] [client 93.123.109.228:60836] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/var/www/.env"] [unique_id "apK-aWbX5DA3XO6e_qRGrgAAAUw"]
[Sat Aug 29 05:11:37.254857 2026] [security2:error] [pid 1321:tid 1584] [client 40.83.93.50:8383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/disagraeed.php"] [unique_id "apK-aWjCPtor9NZ-byT6ZAAABps"]
[Sat Aug 29 05:11:37.275776 2026] [security2:error] [pid 1321:tid 1539] [client 93.123.109.228:60810] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/web/.env"] [unique_id "apK-aWjCPtor9NZ-byT6ZgAABm8"]
[Sat Aug 29 05:11:37.278575 2026] [security2:error] [pid 11274:tid 11481] [client 20.48.160.90:28767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/csst.php"] [unique_id "apK-aWbX5DA3XO6e_qRGtgAAAS4"]
[Sat Aug 29 05:11:37.283385 2026] [proxy_http:error] [pid 1017536:tid 1017543] (70007)The timeout specified has expired: [remote 57.141.14.32:63142] AH01102: error reading status line from remote server 127.0.0.1:8443
[Sat Aug 29 05:11:37.283408 2026] [proxy:error] [pid 1017536:tid 1017543] [remote 57.141.14.32:63142] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:11:37.289396 2026] [proxy_http:error] [pid 1034096:tid 1034354] (70007)The timeout specified has expired: [client 127.0.0.1:49000] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:11:37.289420 2026] [proxy:error] [pid 1034096:tid 1034354] [client 127.0.0.1:49000] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:11:37.298390 2026] [proxy_http:error] [pid 1017536:tid 1017671] (70007)The timeout specified has expired: [client 127.0.0.1:15096] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:11:37.298745 2026] [proxy:error] [pid 1017536:tid 1017671] [client 127.0.0.1:15096] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:11:37.299573 2026] [security2:error] [pid 1321:tid 1513] [client 20.104.18.15:15156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/gjewuagf.php"] [unique_id "apK-aWjCPtor9NZ-byT6bQAABlU"]
[Sat Aug 29 05:11:37.310158 2026] [security2:error] [pid 11274:tid 11464] [client 20.48.160.90:37870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/wp-includes/Text/Diff/Engine/aaa.php"] [unique_id "apK-aWbX5DA3XO6e_qRGuwAAAR4"]
[Sat Aug 29 05:11:37.311508 2026] [security2:error] [pid 11274:tid 11452] [client 52.139.37.240:31053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/jga.php"] [unique_id "apK-aWbX5DA3XO6e_qRGvQAAARI"]
[Sat Aug 29 05:11:37.316513 2026] [security2:error] [pid 1321:tid 1586] [client 20.240.128.207:18191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "apK-aWjCPtor9NZ-byT6cAAABp0"]
[Sat Aug 29 05:11:37.320133 2026] [security2:error] [pid 1321:tid 1613] [client 40.83.93.50:3960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/wxo.php"] [unique_id "apK-aWjCPtor9NZ-byT6cgAABrg"]
[Sat Aug 29 05:11:37.324539 2026] [security2:error] [pid 11274:tid 11501] [client 20.104.104.62:61803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/basic.php"] [unique_id "apK-aWbX5DA3XO6e_qRGwAAAAUI"]
[Sat Aug 29 05:11:37.349780 2026] [security2:error] [pid 1321:tid 1576] [client 158.23.184.117:18138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/002.php"] [unique_id "apK-aWjCPtor9NZ-byT6dgAABpM"]
[Sat Aug 29 05:11:37.353074 2026] [security2:error] [pid 11274:tid 11561] [client 20.48.250.41:36113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/inc.php"] [unique_id "apK-aWbX5DA3XO6e_qRGwwAAAX0"]
[Sat Aug 29 05:11:37.361040 2026] [security2:error] [pid 11274:tid 11533] [client 20.151.200.44:27136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/lte7.php"] [unique_id "apK-aWbX5DA3XO6e_qRGxAAAAWI"]
[Sat Aug 29 05:11:37.365959 2026] [security2:error] [pid 1321:tid 1529] [client 93.123.109.228:33000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/stage/.env"] [unique_id "apK-aWjCPtor9NZ-byT6dwAABmU"]
[Sat Aug 29 05:11:37.371128 2026] [security2:error] [pid 11274:tid 11538] [client 93.123.109.228:35334] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/srv/.env"] [unique_id "apK-aWbX5DA3XO6e_qRGxQAAAWc"]
[Sat Aug 29 05:11:37.378483 2026] [security2:error] [pid 1321:tid 1507] [client 158.158.54.35:32205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/file.php"] [unique_id "apK-aWjCPtor9NZ-byT6eQAABk8"]
[Sat Aug 29 05:11:37.380628 2026] [security2:error] [pid 11274:tid 11552] [client 93.123.109.228:33016] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/staging/.env"] [unique_id "apK-aWbX5DA3XO6e_qRGxgAAAXQ"]
[Sat Aug 29 05:11:37.381413 2026] [security2:error] [pid 1321:tid 1499] [client 4.205.62.107:61738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/autogooey.php"] [unique_id "apK-aWjCPtor9NZ-byT6ewAABkc"]
[Sat Aug 29 05:11:37.404108 2026] [security2:error] [pid 1321:tid 1563] [client 93.123.109.228:60896] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/website/.env"] [unique_id "apK-aWjCPtor9NZ-byT6fAAABoY"]
[Sat Aug 29 05:11:37.407325 2026] [security2:error] [pid 1321:tid 1550] [client 158.23.147.79:14321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/.well-known/content.php"] [unique_id "apK-aWjCPtor9NZ-byT6fQAABnk"]
[Sat Aug 29 05:11:37.424130 2026] [security2:error] [pid 1321:tid 1573] [client 20.48.160.90:23778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/wp-includes/blocks/query-title/footer.php"] [unique_id "apK-aWjCPtor9NZ-byT6fwAABpA"]
[Sat Aug 29 05:11:37.431131 2026] [security2:error] [pid 1321:tid 1492] [client 93.123.109.228:35358] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/stg/.env"] [unique_id "apK-aWjCPtor9NZ-byT6gAAABkA"]
[Sat Aug 29 05:11:37.432383 2026] [security2:error] [pid 1321:tid 1514] [client 93.123.109.228:35408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/wp-config.php"] [unique_id "apK-aWjCPtor9NZ-byT6ggAABlY"]
[Sat Aug 29 05:11:37.435384 2026] [security2:error] [pid 1321:tid 1500] [client 20.48.250.41:43005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/ws68.php"] [unique_id "apK-aWjCPtor9NZ-byT6gwAABkg"]
[Sat Aug 29 05:11:37.453708 2026] [security2:error] [pid 1321:tid 1556] [client 68.155.159.216:7111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-admin.php"] [unique_id "apK-aWjCPtor9NZ-byT6hAAABn8"]
[Sat Aug 29 05:11:37.454987 2026] [security2:error] [pid 1321:tid 1605] [client 93.123.109.228:33106] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/wp-config.php.bak"] [unique_id "apK-aWjCPtor9NZ-byT6hQAABrA"]
[Sat Aug 29 05:11:37.459326 2026] [security2:error] [pid 11274:tid 11480] [client 20.48.160.90:37762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/wp-includes/style-engine/gecko-new.php"] [unique_id "apK-aWbX5DA3XO6e_qRGzwAAAS0"]
[Sat Aug 29 05:11:37.465877 2026] [security2:error] [pid 11274:tid 11503] [client 93.123.109.228:60880] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/wp-config.php.new"] [unique_id "apK-aWbX5DA3XO6e_qRG0AAAAUQ"]
[Sat Aug 29 05:11:37.471349 2026] [security2:error] [pid 11274:tid 11498] [client 4.205.62.107:65002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/06.php"] [unique_id "apK-aWbX5DA3XO6e_qRG0QAAAT8"]
[Sat Aug 29 05:11:37.484523 2026] [security2:error] [pid 1321:tid 1526] [client 20.104.18.15:15054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/tnglzqmv.php"] [unique_id "apK-aWjCPtor9NZ-byT6iQAABmI"]
[Sat Aug 29 05:11:37.488123 2026] [cgid:error] [pid 1321:tid 1401] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:37.488611 2026] [cgid:error] [pid 1321:tid 1453] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:37.489048 2026] [security2:error] [pid 11274:tid 11569] [client 20.104.104.62:40220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/autoload_classmap.php"] [unique_id "apK-aWbX5DA3XO6e_qRG0gAAAYU"]
[Sat Aug 29 05:11:37.492345 2026] [cgid:error] [pid 1321:tid 1410] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:37.492733 2026] [cgid:error] [pid 1321:tid 1431] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:37.495114 2026] [security2:error] [pid 1321:tid 1518] [client 158.158.54.35:15572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/upload.php"] [unique_id "apK-aWjCPtor9NZ-byT6kAAABlo"]
[Sat Aug 29 05:11:37.495164 2026] [cgid:error] [pid 1321:tid 1403] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:37.495939 2026] [cgid:error] [pid 1321:tid 1485] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:37.498544 2026] [security2:error] [pid 11274:tid 11543] [client 93.123.109.228:33178] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/wp-config.php.old"] [unique_id "apK-aWbX5DA3XO6e_qRG1AAAAWs"]
[Sat Aug 29 05:11:37.506689 2026] [security2:error] [pid 1321:tid 1587] [client 20.220.204.93:50564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/xs.php"] [unique_id "apK-aWjCPtor9NZ-byT6kgAABp4"]
[Sat Aug 29 05:11:37.506755 2026] [security2:error] [pid 11274:tid 11454] [client 20.104.104.62:57410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/monso.php"] [unique_id "apK-aWbX5DA3XO6e_qRG1gAAARQ"]
[Sat Aug 29 05:11:37.509408 2026] [security2:error] [pid 11274:tid 11563] [client 103.171.189.88:54752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-aWbX5DA3XO6e_qRG1wAAAX8"]
[Sat Aug 29 05:11:37.509536 2026] [security2:error] [pid 11274:tid 11563] [client 103.171.189.88:54752] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-aWbX5DA3XO6e_qRG1wAAAX8"]
[Sat Aug 29 05:11:37.509763 2026] [security2:error] [pid 1321:tid 1575] [client 52.139.37.240:31535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/mac.php"] [unique_id "apK-aWjCPtor9NZ-byT6kwAABpI"]
[Sat Aug 29 05:11:37.510968 2026] [security2:error] [pid 11274:tid 11402] [remote 198.38.94.66:49702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 66.94.38.198.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "pintadelbajio.com"] [uri "/wp-login.php"] [unique_id "apK-aWbX5DA3XO6e_qRG1QABdlg"]
[Sat Aug 29 05:11:37.512942 2026] [security2:error] [pid 1321:tid 1509] [client 158.23.184.117:64804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/0x.php"] [unique_id "apK-aWjCPtor9NZ-byT6lQAABlE"]
[Sat Aug 29 05:11:37.513527 2026] [security2:error] [pid 11274:tid 11518] [client 20.104.104.62:28578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "buddhistonthebattleship.managemymood.com"] [uri "/xmlrpc.php"] [unique_id "apK-aWbX5DA3XO6e_qRG2QAAAVM"]
[Sat Aug 29 05:11:37.514121 2026] [security2:error] [pid 11274:tid 11505] [client 93.123.109.228:32820] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/stripe/.env"] [unique_id "apK-aWbX5DA3XO6e_qRG2AAAAUY"]
[Sat Aug 29 05:11:37.535000 2026] [security2:error] [pid 1321:tid 1610] [client 20.48.250.41:36396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/6bcwiqwj.php"] [unique_id "apK-aWjCPtor9NZ-byT6mAAABrU"]
[Sat Aug 29 05:11:37.542175 2026] [security2:error] [pid 1321:tid 1564] [client 93.123.109.228:33222] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "cpcontacts.heavenonearthgardens.com"] [uri "/___proxy_subdomain_cpcontacts/wp-content/mysql.sql"] [unique_id "apK-aWjCPtor9NZ-byT6mQAABoc"]
[Sat Aug 29 05:11:37.549464 2026] [security2:error] [pid 1321:tid 1488] [client 20.240.128.207:8203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-content/cong.php"] [unique_id "apK-aWjCPtor9NZ-byT6mgAABjw"]
[Sat Aug 29 05:11:37.556000 2026] [security2:error] [pid 1321:tid 1531] [client 20.151.200.44:55715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-aWjCPtor9NZ-byT6mwAABmc"]
[Sat Aug 29 05:11:37.563654 2026] [security2:error] [pid 1321:tid 1560] [client 20.100.175.163:23820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/root.php"] [unique_id "apK-aWjCPtor9NZ-byT6nQAABoM"]
[Sat Aug 29 05:11:37.573385 2026] [security2:error] [pid 11274:tid 11486] [client 4.205.62.107:6465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/update.php"] [unique_id "apK-aWbX5DA3XO6e_qRG3gAAATM"]
[Sat Aug 29 05:11:37.578827 2026] [security2:error] [pid 1321:tid 1523] [client 20.48.160.90:28764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/wp-content/uploads/indoex.php"] [unique_id "apK-aWjCPtor9NZ-byT6ngAABl8"]
[Sat Aug 29 05:11:37.580069 2026] [security2:error] [pid 1321:tid 1451] [remote 34.74.130.21:43204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 21.130.74.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "redelan.cl"] [uri "/phpinfo.php"] [unique_id "apK-aWjCPtor9NZ-byT6nwAGl1w"]
[Sat Aug 29 05:11:37.595955 2026] [security2:error] [pid 1321:tid 1414] [remote 34.74.130.21:43204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 21.130.74.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "redelan.cl"] [uri "/pi.php"] [unique_id "apK-aWjCPtor9NZ-byT6oQAGaDg"]
[Sat Aug 29 05:11:37.596886 2026] [security2:error] [pid 1321:tid 1459] [remote 34.74.130.21:43204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 21.130.74.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "redelan.cl"] [uri "/i.php"] [unique_id "apK-aWjCPtor9NZ-byT6ogAGaGQ"]
[Sat Aug 29 05:11:37.597045 2026] [security2:error] [pid 1321:tid 1424] [remote 34.74.130.21:43204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 21.130.74.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "redelan.cl"] [uri "/test.php"] [unique_id "apK-aWjCPtor9NZ-byT6pAAGaEI"]
[Sat Aug 29 05:11:37.597088 2026] [security2:error] [pid 1321:tid 1414] [remote 34.74.130.21:43204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 21.130.74.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "redelan.cl"] [uri "/info.php"] [unique_id "apK-aWjCPtor9NZ-byT6owAGaDg"]
[Sat Aug 29 05:11:37.597510 2026] [cgid:error] [pid 1321:tid 1375] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:37.606372 2026] [security2:error] [pid 11274:tid 11492] [client 20.48.160.90:37846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/wp-settings.php"] [unique_id "apK-aWbX5DA3XO6e_qRG3wAAATk"]
[Sat Aug 29 05:11:37.608154 2026] [security2:error] [pid 1321:tid 1528] [client 68.155.159.216:1946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK-aWjCPtor9NZ-byT6pgAABmQ"]
[Sat Aug 29 05:11:37.609734 2026] [security2:error] [pid 11274:tid 11476] [client 4.205.62.107:63006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/public/bnn_.php.php"] [unique_id "apK-aWbX5DA3XO6e_qRG4AAAASo"]
[Sat Aug 29 05:11:37.612828 2026] [security2:error] [pid 11274:tid 11456] [client 20.52.41.200:4794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-content/packed.php"] [unique_id "apK-aWbX5DA3XO6e_qRG4QAAARY"]
[Sat Aug 29 05:11:37.615839 2026] [security2:error] [pid 1321:tid 1586] [client 93.123.109.228:35358] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/terraform.tfstate.backup"] [unique_id "apK-aWjCPtor9NZ-byT6qAAABp0"]
[Sat Aug 29 05:11:37.639243 2026] [security2:error] [pid 1321:tid 1576] [client 20.151.200.44:27292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/tanjiro.php"] [unique_id "apK-aWjCPtor9NZ-byT6qgAABpM"]
[Sat Aug 29 05:11:37.647754 2026] [security2:error] [pid 1321:tid 1529] [client 20.104.18.15:15089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/wefile.php"] [unique_id "apK-aWjCPtor9NZ-byT6qwAABmU"]
[Sat Aug 29 05:11:37.654549 2026] [security2:error] [pid 11274:tid 11511] [client 93.123.109.228:32870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/test.php"] [unique_id "apK-aWbX5DA3XO6e_qRG4wAAAUw"]
[Sat Aug 29 05:11:37.658178 2026] [security2:error] [pid 1321:tid 1595] [client 40.83.93.50:6668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/wp-admin/class-db.php"] [unique_id "apK-aWjCPtor9NZ-byT6rQAABqY"]
[Sat Aug 29 05:11:37.660393 2026] [security2:error] [pid 1321:tid 1574] [client 158.23.184.117:18319] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.bigyellowmachine.com"] [uri "/1.php"] [unique_id "apK-aWjCPtor9NZ-byT6rgAABpE"]
[Sat Aug 29 05:11:37.660495 2026] [security2:error] [pid 1321:tid 1574] [client 158.23.184.117:18319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/1.php"] [unique_id "apK-aWjCPtor9NZ-byT6rgAABpE"]
[Sat Aug 29 05:11:37.664916 2026] [security2:error] [pid 11274:tid 11540] [client 93.123.109.228:32820] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/test/.env"] [unique_id "apK-aWbX5DA3XO6e_qRG5AAAAWk"]
[Sat Aug 29 05:11:37.665532 2026] [security2:error] [pid 11274:tid 11459] [client 20.52.41.200:2789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/av.php"] [unique_id "apK-aWbX5DA3XO6e_qRG5gAAARk"]
[Sat Aug 29 05:11:37.689371 2026] [security2:error] [pid 11274:tid 11508] [client 20.48.250.41:36800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/easy.php"] [unique_id "apK-aWbX5DA3XO6e_qRG5wAAAUk"]
[Sat Aug 29 05:11:37.692891 2026] [security2:error] [pid 11274:tid 11519] [client 93.123.109.228:35326] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/user/.env"] [unique_id "apK-aWbX5DA3XO6e_qRG7gAAAVQ"]
[Sat Aug 29 05:11:37.694455 2026] [security2:error] [pid 11274:tid 11527] [client 68.155.159.216:1975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-admin/index.php"] [unique_id "apK-aWbX5DA3XO6e_qRG7wAAAVw"]
[Sat Aug 29 05:11:37.695747 2026] [security2:error] [pid 11274:tid 11481] [client 20.104.104.62:52340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/rce.php"] [unique_id "apK-aWbX5DA3XO6e_qRG8AAAAS4"]
[Sat Aug 29 05:11:37.703783 2026] [security2:error] [pid 1321:tid 1400] [remote 34.74.130.21:43204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 21.130.74.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "redelan.cl"] [uri "/app_dev.php"] [unique_id "apK-aWjCPtor9NZ-byT6tQAGkCo"]
[Sat Aug 29 05:11:37.703783 2026] [security2:error] [pid 1321:tid 1467] [remote 34.74.130.21:43204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 21.130.74.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "redelan.cl"] [uri "/app_dev.php/_profiler"] [unique_id "apK-aWjCPtor9NZ-byT6tAAGkGw"]
[Sat Aug 29 05:11:37.706144 2026] [cgid:error] [pid 1321:tid 1413] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:37.706171 2026] [cgid:error] [pid 1321:tid 1419] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:37.707198 2026] [security2:error] [pid 1321:tid 1603] [client 52.139.37.240:30828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK-aWjCPtor9NZ-byT6twAABq4"]
[Sat Aug 29 05:11:37.707832 2026] [cgid:error] [pid 1321:tid 1478] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:37.714479 2026] [security2:error] [pid 1321:tid 1514] [client 93.123.109.228:32776] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/v1/.env"] [unique_id "apK-aWjCPtor9NZ-byT6uAAABlY"]
[Sat Aug 29 05:11:37.723318 2026] [security2:error] [pid 1321:tid 1588] [client 20.48.160.90:23693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK-aWjCPtor9NZ-byT6uQAABp8"]
[Sat Aug 29 05:11:37.735438 2026] [cgid:error] [pid 1321:tid 1444] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:37.745410 2026] [security2:error] [pid 1321:tid 1517] [client 40.83.93.50:8330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/add_actualites.php"] [unique_id "apK-aWjCPtor9NZ-byT6vAAABlk"]
[Sat Aug 29 05:11:37.747406 2026] [security2:error] [pid 11274:tid 11520] [client 20.48.160.90:37775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/wp-signup.php"] [unique_id "apK-aWbX5DA3XO6e_qRG-AAAAVU"]
[Sat Aug 29 05:11:37.749756 2026] [security2:error] [pid 11274:tid 11464] [client 93.123.109.228:35334] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/v2/.env"] [unique_id "apK-aWbX5DA3XO6e_qRG-QAAAR4"]
[Sat Aug 29 05:11:37.755213 2026] [security2:error] [pid 1321:tid 1508] [client 20.104.104.62:48507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/private.php"] [unique_id "apK-aWjCPtor9NZ-byT6vQAABlA"]
[Sat Aug 29 05:11:37.763490 2026] [security2:error] [pid 1321:tid 1504] [client 20.220.204.93:17723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/zu.php"] [unique_id "apK-aWjCPtor9NZ-byT6vgAABkw"]
[Sat Aug 29 05:11:37.765661 2026] [security2:error] [pid 1321:tid 1522] [client 93.123.109.228:35358] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/v3/.env"] [unique_id "apK-aWjCPtor9NZ-byT6vwAABl4"]
[Sat Aug 29 05:11:37.792439 2026] [security2:error] [pid 1321:tid 1564] [client 158.23.147.79:64399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK-aWjCPtor9NZ-byT6wgAABoc"]
[Sat Aug 29 05:11:37.800050 2026] [security2:error] [pid 1321:tid 1488] [client 20.104.18.15:15215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/blog.php"] [unique_id "apK-aWjCPtor9NZ-byT6xAAABjw"]
[Sat Aug 29 05:11:37.805312 2026] [security2:error] [pid 1321:tid 1497] [client 40.83.93.50:3932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/as.php"] [unique_id "apK-aWjCPtor9NZ-byT6xwAABkU"]
[Sat Aug 29 05:11:37.806391 2026] [security2:error] [pid 1321:tid 1502] [client 158.23.184.117:18142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/10.php"] [unique_id "apK-aWjCPtor9NZ-byT6yAAABko"]
[Sat Aug 29 05:11:37.808104 2026] [security2:error] [pid 11274:tid 11555] [client 20.48.250.41:49555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/users.php"] [unique_id "apK-aWbX5DA3XO6e_qRG-wAAAXc"]
[Sat Aug 29 05:11:37.809080 2026] [security2:error] [pid 1321:tid 1601] [client 68.155.159.216:49096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/file17.php"] [unique_id "apK-aWjCPtor9NZ-byT6yQAABqw"]
[Sat Aug 29 05:11:37.817029 2026] [security2:error] [pid 11274:tid 11469] [client 20.151.200.44:64636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/wp-ana.php"] [unique_id "apK-aWbX5DA3XO6e_qRG_QAAASM"]
[Sat Aug 29 05:11:37.825425 2026] [security2:error] [pid 11274:tid 11467] [client 20.104.104.62:27888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "buddhistonthebattleship.managemymood.com"] [uri "/test1.php"] [unique_id "apK-aWbX5DA3XO6e_qRG_gAAASE"]
[Sat Aug 29 05:11:37.831640 2026] [security2:error] [pid 11274:tid 11522] [client 20.104.104.62:47589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/12.php"] [unique_id "apK-aWbX5DA3XO6e_qRHAgAAAVc"]
[Sat Aug 29 05:11:37.832221 2026] [security2:error] [pid 1321:tid 1608] [client 20.100.175.163:13776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/lock360.php"] [unique_id "apK-aWjCPtor9NZ-byT6zAAABrM"]
[Sat Aug 29 05:11:37.832757 2026] [security2:error] [pid 11274:tid 11465] [client 158.158.54.35:29456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK-aWbX5DA3XO6e_qRHBgAAAR8"]
[Sat Aug 29 05:11:37.853336 2026] [security2:error] [pid 11274:tid 11503] [client 20.48.160.90:23695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/haxor.php"] [unique_id "apK-aWbX5DA3XO6e_qRHDQAAAUQ"]
[Sat Aug 29 05:11:37.853397 2026] [security2:error] [pid 11274:tid 11480] [client 20.104.104.62:52334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/exec.php"] [unique_id "apK-aWbX5DA3XO6e_qRHDAAAAS0"]
[Sat Aug 29 05:11:37.861272 2026] [security2:error] [pid 11274:tid 11524] [client 20.48.250.41:36385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/fresh3.php"] [unique_id "apK-aWbX5DA3XO6e_qRHDgAAAVk"]
[Sat Aug 29 05:11:37.869896 2026] [security2:error] [pid 11274:tid 11543] [client 4.205.62.107:60294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/ws61.php"] [unique_id "apK-aWbX5DA3XO6e_qRHEAAAAWs"]
[Sat Aug 29 05:11:37.897018 2026] [security2:error] [pid 11274:tid 11491] [client 20.48.160.90:37878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/wp-conffg.php"] [unique_id "apK-aWbX5DA3XO6e_qRHEgAAATg"]
[Sat Aug 29 05:11:37.903496 2026] [security2:error] [pid 11274:tid 11455] [client 52.139.37.240:30797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK-aWbX5DA3XO6e_qRHFgAAARU"]
[Sat Aug 29 05:11:37.932806 2026] [security2:error] [pid 1321:tid 1576] [client 4.205.62.107:4931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/cli_bootstrap.php"] [unique_id "apK-aWjCPtor9NZ-byT60wAABpM"]
[Sat Aug 29 05:11:37.935373 2026] [security2:error] [pid 1321:tid 1612] [client 158.23.147.79:24396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/goat.php"] [unique_id "apK-aWjCPtor9NZ-byT61AAABrc"]
[Sat Aug 29 05:11:37.936278 2026] [security2:error] [pid 1321:tid 1529] [client 93.123.109.228:32968] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/var/www/.env"] [unique_id "apK-aWjCPtor9NZ-byT60gAABmU"]
[Sat Aug 29 05:11:37.943625 2026] [security2:error] [pid 1321:tid 1489] [client 20.48.250.41:49561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/bzjdlofz.php"] [unique_id "apK-aWjCPtor9NZ-byT61QAABj0"]
[Sat Aug 29 05:11:37.951653 2026] [security2:error] [pid 1321:tid 1542] [client 158.23.184.117:64799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/100.php"] [unique_id "apK-aWjCPtor9NZ-byT61gAABnI"]
[Sat Aug 29 05:11:37.964635 2026] [security2:error] [pid 1321:tid 1595] [client 93.123.109.228:35346] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/var/www/html/.env"] [unique_id "apK-aWjCPtor9NZ-byT61wAABqY"]
[Sat Aug 29 05:11:37.977526 2026] [security2:error] [pid 1321:tid 1615] [client 20.104.18.15:15322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/wp-admin/js/wp-load.php"] [unique_id "apK-aWjCPtor9NZ-byT62QAABro"]
[Sat Aug 29 05:11:37.978184 2026] [security2:error] [pid 11274:tid 11568] [client 93.123.109.228:32820] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/web/.env"] [unique_id "apK-aWbX5DA3XO6e_qRHHwAAAYQ"]
[Sat Aug 29 05:11:37.986723 2026] [security2:error] [pid 1321:tid 1550] [client 20.240.128.207:19983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-content/themes/pridmag/il.php"] [unique_id "apK-aWjCPtor9NZ-byT62gAABnk"]
[Sat Aug 29 05:11:37.994620 2026] [security2:error] [pid 1321:tid 1545] [client 20.48.160.90:50377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/google.php"] [unique_id "apK-aWjCPtor9NZ-byT62wAABnU"]
[Sat Aug 29 05:11:38.026525 2026] [security2:error] [pid 1321:tid 1607] [client 20.104.104.62:27678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "buddhistonthebattleship.managemymood.com"] [uri "/upload.php"] [unique_id "apK-amjCPtor9NZ-byT63wAABrI"]
[Sat Aug 29 05:11:38.039699 2026] [security2:error] [pid 1321:tid 1492] [client 20.48.160.90:61614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/wp-validate.php"] [unique_id "apK-amjCPtor9NZ-byT64AAABkA"]
[Sat Aug 29 05:11:38.046460 2026] [security2:error] [pid 11274:tid 11497] [client 20.240.128.207:1043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK-ambX5DA3XO6e_qRHKAAAAT4"]
[Sat Aug 29 05:11:38.055799 2026] [security2:error] [pid 11274:tid 11559] [client 20.100.175.163:4425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/p.php"] [unique_id "apK-ambX5DA3XO6e_qRHLAAAAXs"]
[Sat Aug 29 05:11:38.058464 2026] [security2:error] [pid 11274:tid 11479] [client 20.220.204.93:17247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/lanka.php"] [unique_id "apK-ambX5DA3XO6e_qRHLgAAASw"]
[Sat Aug 29 05:11:38.069393 2026] [security2:error] [pid 1321:tid 1544] [client 20.52.41.200:4773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-admin/js/index.php"] [unique_id "apK-amjCPtor9NZ-byT65gAABnQ"]
[Sat Aug 29 05:11:38.071638 2026] [security2:error] [pid 11274:tid 11540] [client 20.104.104.62:42051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/dbc.php"] [unique_id "apK-ambX5DA3XO6e_qRHLwAAAWk"]
[Sat Aug 29 05:11:38.074308 2026] [cgid:error] [pid 1321:tid 1382] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:38.089395 2026] [security2:error] [pid 1321:tid 1491] [client 20.48.250.41:36408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/bgymj.php"] [unique_id "apK-amjCPtor9NZ-byT66AAABj8"]
[Sat Aug 29 05:11:38.099721 2026] [security2:error] [pid 1321:tid 1555] [client 52.139.37.240:31666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/zafir1.php"] [unique_id "apK-amjCPtor9NZ-byT66QAABn4"]
[Sat Aug 29 05:11:38.107025 2026] [cgid:error] [pid 1321:tid 1428] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:38.108370 2026] [proxy_http:error] [pid 1321:tid 1513] (20014)Internal error (specific information not available): [client 34.180.28.199:53968] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:11:38.108387 2026] [proxy:error] [pid 1321:tid 1513] [client 34.180.28.199:53968] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/www/.git/config
[Sat Aug 29 05:11:38.113088 2026] [security2:error] [pid 11274:tid 11549] [client 20.48.250.41:42955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/selesai.php"] [unique_id "apK-ambX5DA3XO6e_qRHPAAAAXE"]
[Sat Aug 29 05:11:38.113911 2026] [security2:error] [pid 1321:tid 1452] [remote 34.74.130.21:43204] ModSecurity: Access denied with code 406 (phase 2). Match of "ipMatch 127.0.0.1,::1" against "REMOTE_ADDR" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "724"] [id "340114"] [rev "2"] [msg "Atomicorp.com WAF Rules: Apache admin service access attempt"] [severity "CRITICAL"] [hostname "redelan.cl"] [uri "/server-info"] [unique_id "apK-amjCPtor9NZ-byT68gAGml0"]
[Sat Aug 29 05:11:38.115769 2026] [cgid:error] [pid 1321:tid 1435] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:38.118141 2026] [security2:error] [pid 1321:tid 1561] [client 93.123.109.228:35346] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/website/.env"] [unique_id "apK-amjCPtor9NZ-byT69QAABoQ"]
[Sat Aug 29 05:11:38.119453 2026] [access_compat:error] [pid 1321:tid 1398] [remote 34.74.130.21:43204] AH01797: client denied by server configuration: /home3/conelecc/public_html/redelan/server-status
[Sat Aug 29 05:11:38.119575 2026] [cgid:error] [pid 1321:tid 1411] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:38.119928 2026] [security2:error] [pid 1321:tid 1588] [client 158.23.184.117:18307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/2.php"] [unique_id "apK-amjCPtor9NZ-byT69gAABp8"]
[Sat Aug 29 05:11:38.120185 2026] [security2:error] [pid 1321:tid 1506] [client 20.52.41.200:2628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/file.php"] [unique_id "apK-amjCPtor9NZ-byT69wAABk4"]
[Sat Aug 29 05:11:38.121139 2026] [security2:error] [pid 11274:tid 11506] [client 158.23.147.79:55931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/mah.php"] [unique_id "apK-ambX5DA3XO6e_qRHPwAAAUc"]
[Sat Aug 29 05:11:38.123001 2026] [proxy_http:error] [pid 1321:tid 1513] (20014)Internal error (specific information not available): [client 34.180.28.199:53968] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:11:38.123020 2026] [proxy:error] [pid 1321:tid 1513] [client 34.180.28.199:53968] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/502.shtml
[Sat Aug 29 05:11:38.123214 2026] [security2:error] [pid 1321:tid 1526] [client 68.155.159.216:23373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK-amjCPtor9NZ-byT6-AAABmI"]
[Sat Aug 29 05:11:38.133109 2026] [security2:error] [pid 11274:tid 11475] [client 93.123.109.228:32820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/wp-config.php"] [unique_id "apK-ambX5DA3XO6e_qRHQQAAASk"]
[Sat Aug 29 05:11:38.138531 2026] [security2:error] [pid 11274:tid 11545] [client 20.48.160.90:28741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "apK-ambX5DA3XO6e_qRHQgAAAW0"]
[Sat Aug 29 05:11:38.139054 2026] [security2:error] [pid 1321:tid 1589] [client 93.123.109.228:33014] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/wp-config.php.bak"] [unique_id "apK-amjCPtor9NZ-byT6-QAABqA"]
[Sat Aug 29 05:11:38.140480 2026] [proxy_http:error] [pid 11274:tid 11554] (20014)Internal error (specific information not available): [client 34.180.28.199:54048] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:11:38.140500 2026] [proxy:error] [pid 11274:tid 11554] [client 34.180.28.199:54048] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/wordpress/.git/config
[Sat Aug 29 05:11:38.144091 2026] [security2:error] [pid 1321:tid 1609] [client 40.83.93.50:4024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/wp-contentt.php"] [unique_id "apK-amjCPtor9NZ-byT6-gAABrQ"]
[Sat Aug 29 05:11:38.146382 2026] [proxy_http:error] [pid 11274:tid 11554] (20014)Internal error (specific information not available): [client 34.180.28.199:54048] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:11:38.146397 2026] [proxy:error] [pid 11274:tid 11554] [client 34.180.28.199:54048] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/502.shtml
[Sat Aug 29 05:11:38.150830 2026] [security2:error] [pid 11274:tid 11544] [client 4.205.62.107:60342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/wp-access.php"] [unique_id "apK-ambX5DA3XO6e_qRHQwAAAWw"]
[Sat Aug 29 05:11:38.151260 2026] [security2:error] [pid 11274:tid 11495] [client 20.104.18.15:15197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/robot.php"] [unique_id "apK-ambX5DA3XO6e_qRHRAAAATw"]
[Sat Aug 29 05:11:38.161237 2026] [security2:error] [pid 1321:tid 1566] [client 20.151.200.44:55714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-amjCPtor9NZ-byT6_AAABok"]
[Sat Aug 29 05:11:38.161246 2026] [security2:error] [pid 11274:tid 11546] [client 93.123.109.228:35326] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/wp-config.php.new"] [unique_id "apK-ambX5DA3XO6e_qRHRgAAAW4"]
[Sat Aug 29 05:11:38.161952 2026] [cgid:error] [pid 1321:tid 1486] [remote 34.74.130.21:43204] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home3/conelecc/public_html/redelan/404.shtml
[Sat Aug 29 05:11:38.172125 2026] [security2:error] [pid 1321:tid 1575] [client 93.123.109.228:35328] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/wp-config.php.old"] [unique_id "apK-amjCPtor9NZ-byT6_QAABpI"]
[Sat Aug 29 05:11:38.175793 2026] [security2:error] [pid 1321:tid 1522] [client 20.48.160.90:61693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/700.php"] [unique_id "apK-amjCPtor9NZ-byT6_gAABl4"]
[Sat Aug 29 05:11:38.176766 2026] [security2:error] [pid 1321:tid 1610] [client 68.155.159.216:62820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/xmlrpc.php"] [unique_id "apK-amjCPtor9NZ-byT6_wAABrU"]
[Sat Aug 29 05:11:38.184561 2026] [security2:error] [pid 1321:tid 1600] [client 93.123.109.228:35366] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "cpcontacts.healthysmilestoday.com"] [uri "/___proxy_subdomain_cpcontacts/wp-content/mysql.sql"] [unique_id "apK-amjCPtor9NZ-byT7AAAABqs"]
[Sat Aug 29 05:11:38.202577 2026] [security2:error] [pid 11274:tid 11520] [client 20.104.104.62:48682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/lfi.php"] [unique_id "apK-ambX5DA3XO6e_qRHTQAAAVU"]
[Sat Aug 29 05:11:38.225057 2026] [security2:error] [pid 11274:tid 11488] [client 20.104.104.62:7126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/wp-wlx.php"] [unique_id "apK-ambX5DA3XO6e_qRHUAAAATU"]
[Sat Aug 29 05:11:38.226324 2026] [security2:error] [pid 11274:tid 11365] [remote 93.123.109.228:33324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/.env.php"] [unique_id "apK-ambX5DA3XO6e_qRHUQABNjM"]
[Sat Aug 29 05:11:38.240183 2026] [security2:error] [pid 1321:tid 1525] [client 68.155.159.216:33612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/log-mama/function.php"] [unique_id "apK-amjCPtor9NZ-byT7BAAABmE"]
[Sat Aug 29 05:11:38.251133 2026] [security2:error] [pid 11274:tid 11463] [client 158.158.54.35:17703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-content/file.php"] [unique_id "apK-ambX5DA3XO6e_qRHVAAAAR0"]
[Sat Aug 29 05:11:38.259085 2026] [security2:error] [pid 11274:tid 11530] [client 20.48.250.41:36146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/ws69.php"] [unique_id "apK-ambX5DA3XO6e_qRHVQAAAV8"]
[Sat Aug 29 05:11:38.266065 2026] [security2:error] [pid 11274:tid 11541] [client 158.23.184.117:18168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/222.php"] [unique_id "apK-ambX5DA3XO6e_qRHVgAAAWo"]
[Sat Aug 29 05:11:38.272339 2026] [security2:error] [pid 1321:tid 1488] [client 52.139.37.240:21871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/ahax.php"] [unique_id "apK-amjCPtor9NZ-byT7BgAABjw"]
[Sat Aug 29 05:11:38.272691 2026] [security2:error] [pid 11274:tid 11533] [client 20.48.250.41:42913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/shlo.php"] [unique_id "apK-ambX5DA3XO6e_qRHVwAAAWI"]
[Sat Aug 29 05:11:38.274476 2026] [security2:error] [pid 11274:tid 11451] [client 40.83.93.50:10930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/room.php"] [unique_id "apK-ambX5DA3XO6e_qRHWAAAARE"]
[Sat Aug 29 05:11:38.274630 2026] [security2:error] [pid 11274:tid 11517] [client 20.48.160.90:28742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/robots.php"] [unique_id "apK-ambX5DA3XO6e_qRHWQAAAVI"]
[Sat Aug 29 05:11:38.277889 2026] [security2:error] [pid 1321:tid 1598] [client 158.158.54.35:28868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/gmo.php"] [unique_id "apK-amjCPtor9NZ-byT7BwAABqk"]
[Sat Aug 29 05:11:38.293075 2026] [security2:error] [pid 11274:tid 11444] [client 52.139.37.240:31101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/abc.php"] [unique_id "apK-ambX5DA3XO6e_qRHXAAAAQo"]
[Sat Aug 29 05:11:38.295798 2026] [security2:error] [pid 11274:tid 11483] [client 20.104.18.15:15041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/revo.php"] [unique_id "apK-ambX5DA3XO6e_qRHXQAAATA"]
[Sat Aug 29 05:11:38.297780 2026] [security2:error] [pid 1321:tid 1523] [client 68.155.159.216:56718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-content/admin.php"] [unique_id "apK-amjCPtor9NZ-byT7CAAABl8"]
[Sat Aug 29 05:11:38.304185 2026] [security2:error] [pid 11274:tid 11555] [client 20.104.104.62:64758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wikiindex.php"] [unique_id "apK-ambX5DA3XO6e_qRHXwAAAXc"]
[Sat Aug 29 05:11:38.306073 2026] [security2:error] [pid 11274:tid 11550] [client 68.155.159.216:14287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK-ambX5DA3XO6e_qRHYAAAAXI"]
[Sat Aug 29 05:11:38.323079 2026] [security2:error] [pid 1321:tid 1602] [client 20.100.175.163:25214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-conflg.php"] [unique_id "apK-amjCPtor9NZ-byT7CQAABq0"]
[Sat Aug 29 05:11:38.326404 2026] [security2:error] [pid 1321:tid 1539] [client 20.48.160.90:51781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/c4.php"] [unique_id "apK-amjCPtor9NZ-byT7CgAABm8"]
[Sat Aug 29 05:11:38.347921 2026] [security2:error] [pid 1321:tid 1580] [client 20.151.200.44:27308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/Rk41.php"] [unique_id "apK-amjCPtor9NZ-byT7CwAABpc"]
[Sat Aug 29 05:11:38.362369 2026] [security2:error] [pid 11274:tid 11503] [client 20.220.204.93:17679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/gettest.php"] [unique_id "apK-ambX5DA3XO6e_qRHZwAAAUQ"]
[Sat Aug 29 05:11:38.381209 2026] [security2:error] [pid 11274:tid 11450] [client 20.104.104.62:42067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/attack.php"] [unique_id "apK-ambX5DA3XO6e_qRHaQAAARA"]
[Sat Aug 29 05:11:38.389709 2026] [security2:error] [pid 1321:tid 1489] [client 158.23.147.79:63011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK-amjCPtor9NZ-byT7DQAABj0"]
[Sat Aug 29 05:11:38.403148 2026] [security2:error] [pid 1321:tid 1562] [client 40.83.93.50:9800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/alfanew.php7"] [unique_id "apK-amjCPtor9NZ-byT7DgAABoU"]
[Sat Aug 29 05:11:38.415938 2026] [security2:error] [pid 1321:tid 1577] [client 158.23.184.117:18310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/24.php"] [unique_id "apK-amjCPtor9NZ-byT7DwAABpQ"]
[Sat Aug 29 05:11:38.424066 2026] [security2:error] [pid 1321:tid 1595] [client 20.48.250.41:36372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/ccs.php"] [unique_id "apK-amjCPtor9NZ-byT7EAAABqY"]
[Sat Aug 29 05:11:38.430921 2026] [security2:error] [pid 1321:tid 1550] [client 20.48.160.90:50388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/wp-content/plugins/ccx/index.php"] [unique_id "apK-amjCPtor9NZ-byT7EQAABnk"]
[Sat Aug 29 05:11:38.457803 2026] [security2:error] [pid 11274:tid 11560] [client 20.104.18.15:14981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/birrs.php"] [unique_id "apK-ambX5DA3XO6e_qRHcgAAAXw"]
[Sat Aug 29 05:11:38.464217 2026] [security2:error] [pid 1321:tid 1536] [client 20.48.160.90:61692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/wp-tymanage.php"] [unique_id "apK-amjCPtor9NZ-byT7EwAABmw"]
[Sat Aug 29 05:11:38.465597 2026] [security2:error] [pid 1321:tid 1606] [client 52.139.37.240:21866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/breads1.php"] [unique_id "apK-amjCPtor9NZ-byT7FAAABrE"]
[Sat Aug 29 05:11:38.478482 2026] [security2:error] [pid 11274:tid 11552] [client 20.240.128.207:18891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/assets/images/doc.php"] [unique_id "apK-ambX5DA3XO6e_qRHdQAAAXQ"]
[Sat Aug 29 05:11:38.512050 2026] [security2:error] [pid 1321:tid 1591] [client 52.139.37.240:30821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/c1.php"] [unique_id "apK-amjCPtor9NZ-byT7FwAABqI"]
[Sat Aug 29 05:11:38.513244 2026] [security2:error] [pid 11274:tid 11498] [client 158.23.147.79:14214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/cong.php"] [unique_id "apK-ambX5DA3XO6e_qRHeAAAAT8"]
[Sat Aug 29 05:11:38.523813 2026] [security2:error] [pid 1321:tid 1492] [client 4.205.62.107:63934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/sdsa.php"] [unique_id "apK-amjCPtor9NZ-byT7GAAABkA"]
[Sat Aug 29 05:11:38.526487 2026] [security2:error] [pid 1321:tid 1592] [client 20.52.41.200:5162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/core.php"] [unique_id "apK-amjCPtor9NZ-byT7GQAABqM"]
[Sat Aug 29 05:11:38.533607 2026] [security2:error] [pid 11274:tid 11494] [client 20.104.104.62:40028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/file66.php"] [unique_id "apK-ambX5DA3XO6e_qRHewAAATs"]
[Sat Aug 29 05:11:38.534228 2026] [security2:error] [pid 11274:tid 11536] [client 20.104.104.62:40226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/alex.php"] [unique_id "apK-ambX5DA3XO6e_qRHfAAAAWU"]
[Sat Aug 29 05:11:38.541565 2026] [security2:error] [pid 1321:tid 1612] [client 20.240.128.207:8230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-mail.php"] [unique_id "apK-amjCPtor9NZ-byT7GgAABrc"]
[Sat Aug 29 05:11:38.553880 2026] [security2:error] [pid 11274:tid 11535] [client 20.220.204.93:58043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/35.php"] [unique_id "apK-ambX5DA3XO6e_qRHgQAAAWQ"]
[Sat Aug 29 05:11:38.554764 2026] [security2:error] [pid 1321:tid 1529] [client 20.100.175.163:9347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/a1.php"] [unique_id "apK-amjCPtor9NZ-byT7GwAABmU"]
[Sat Aug 29 05:11:38.558920 2026] [security2:error] [pid 11274:tid 11504] [client 68.155.159.216:64031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK-ambX5DA3XO6e_qRHggAAAUU"]
[Sat Aug 29 05:11:38.564145 2026] [security2:error] [pid 1321:tid 1501] [client 158.23.184.117:18164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/3pjcpmfsd8b.php"] [unique_id "apK-amjCPtor9NZ-byT7HQAABkk"]
[Sat Aug 29 05:11:38.567089 2026] [security2:error] [pid 1321:tid 1548] [client 20.48.160.90:23763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/wp-admin/css/colors/maro.php"] [unique_id "apK-amjCPtor9NZ-byT7HwAABnc"]
[Sat Aug 29 05:11:38.569510 2026] [security2:error] [pid 1321:tid 1544] [client 20.151.200.44:63026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/kure.php"] [unique_id "apK-amjCPtor9NZ-byT7IAAABnQ"]
[Sat Aug 29 05:11:38.576937 2026] [security2:error] [pid 1321:tid 1565] [client 20.48.250.41:36361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/mar.php"] [unique_id "apK-amjCPtor9NZ-byT7IQAABog"]
[Sat Aug 29 05:11:38.578740 2026] [security2:error] [pid 1321:tid 1615] [client 20.52.41.200:2798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK-amjCPtor9NZ-byT7IgAABro"]
[Sat Aug 29 05:11:38.610345 2026] [security2:error] [pid 11274:tid 11479] [client 4.205.62.107:64904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/xin1.php"] [unique_id "apK-ambX5DA3XO6e_qRHjAAAASw"]
[Sat Aug 29 05:11:38.611370 2026] [proxy_http:error] [pid 11274:tid 11487] (20014)Internal error (specific information not available): [client 34.180.28.199:54106] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:11:38.611388 2026] [proxy:error] [pid 11274:tid 11487] [client 34.180.28.199:54106] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/www/.git/config
[Sat Aug 29 05:11:38.616204 2026] [security2:error] [pid 11274:tid 11459] [client 20.104.18.15:15086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/sss.php"] [unique_id "apK-ambX5DA3XO6e_qRHkAAAARk"]
[Sat Aug 29 05:11:38.618381 2026] [security2:error] [pid 11274:tid 11486] [client 40.83.93.50:4025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/theme.php"] [unique_id "apK-ambX5DA3XO6e_qRHkQAAATM"]
[Sat Aug 29 05:11:38.618925 2026] [proxy_http:error] [pid 11274:tid 11487] (20014)Internal error (specific information not available): [client 34.180.28.199:54106] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:11:38.618938 2026] [proxy:error] [pid 11274:tid 11487] [client 34.180.28.199:54106] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/502.shtml
[Sat Aug 29 05:11:38.623564 2026] [security2:error] [pid 11274:tid 11422] [remote 160.153.252.100:43296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.252.153.160.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "equiposdeseguridadindustrialdn.com"] [uri "/wp-login.php"] [unique_id "apK-ambX5DA3XO6e_qRHjQABJGw"]
[Sat Aug 29 05:11:38.629740 2026] [security2:error] [pid 1321:tid 1586] [client 20.48.160.90:61604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/ajfto.php"] [unique_id "apK-amjCPtor9NZ-byT7JwAABp0"]
[Sat Aug 29 05:11:38.641809 2026] [security2:error] [pid 1321:tid 1528] [client 20.104.104.62:28564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "buddhistonthebattleship.managemymood.com"] [uri "/wp-admin/js/index.php"] [unique_id "apK-amjCPtor9NZ-byT7KgAABmQ"]
[Sat Aug 29 05:11:38.659867 2026] [security2:error] [pid 11274:tid 11507] [client 52.139.37.240:21832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/must.php"] [unique_id "apK-ambX5DA3XO6e_qRHmwAAAUg"]
[Sat Aug 29 05:11:38.695850 2026] [security2:error] [pid 11274:tid 11493] [client 158.158.54.35:29473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/files.php"] [unique_id "apK-ambX5DA3XO6e_qRHnwAAATo"]
[Sat Aug 29 05:11:38.705681 2026] [security2:error] [pid 11274:tid 11519] [client 20.48.160.90:50371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/wp-admin/css/colors/coffee/marijuana.php"] [unique_id "apK-ambX5DA3XO6e_qRHogAAAVQ"]
[Sat Aug 29 05:11:38.708254 2026] [security2:error] [pid 1321:tid 1513] [client 52.139.37.240:31048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/index.php/feed/atom/"] [unique_id "apK-amjCPtor9NZ-byT7LAAABlU"]
[Sat Aug 29 05:11:38.712766 2026] [security2:error] [pid 1321:tid 1590] [client 158.23.184.117:18318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bigyellowmachine.com"] [uri "/403.php"] [unique_id "apK-amjCPtor9NZ-byT7LQAABqE"]
[Sat Aug 29 05:11:38.714533 2026] [security2:error] [pid 11274:tid 11481] [client 68.155.159.216:1915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK-ambX5DA3XO6e_qRHpAAAAS4"]
[Sat Aug 29 05:11:38.717292 2026] [security2:error] [pid 1321:tid 1504] [client 4.205.62.107:6309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/channels.php"] [unique_id "apK-amjCPtor9NZ-byT7LgAABkw"]
[Sat Aug 29 05:11:38.724171 2026] [security2:error] [pid 1321:tid 1522] [client 20.104.104.62:61796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/zafir1.php"] [unique_id "apK-amjCPtor9NZ-byT7LwAABl4"]
[Sat Aug 29 05:11:38.733301 2026] [security2:error] [pid 11274:tid 11448] [client 158.158.54.35:10115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/classwithtostring.php"] [unique_id "apK-ambX5DA3XO6e_qRHpwAAAQ4"]
[Sat Aug 29 05:11:38.749060 2026] [security2:error] [pid 11274:tid 11545] [client 4.205.62.107:63290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/wsws.php"] [unique_id "apK-ambX5DA3XO6e_qRHqQAAAW0"]
[Sat Aug 29 05:11:38.750340 2026] [security2:error] [pid 11274:tid 11482] [client 20.48.250.41:36378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/ccu.php"] [unique_id "apK-ambX5DA3XO6e_qRHqwAAAS8"]
[Sat Aug 29 05:11:38.765055 2026] [security2:error] [pid 1321:tid 1525] [client 20.48.160.90:61664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/wp_KwIW0U5F.php"] [unique_id "apK-amjCPtor9NZ-byT7NQAABmE"]
[Sat Aug 29 05:11:38.772101 2026] [security2:error] [pid 1321:tid 1507] [client 20.104.18.15:37880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-amjCPtor9NZ-byT7NgAABk8"]
[Sat Aug 29 05:11:38.792689 2026] [security2:error] [pid 1321:tid 1523] [client 20.104.49.130:36777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pvillusions.com"] [uri "/load.php"] [unique_id "apK-amjCPtor9NZ-byT7OAAABl8"]
[Sat Aug 29 05:11:38.809288 2026] [security2:error] [pid 11274:tid 11502] [client 68.155.159.216:1906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK-ambX5DA3XO6e_qRHsAAAAUM"]
[Sat Aug 29 05:11:38.819264 2026] [security2:error] [pid 1321:tid 1526] [client 20.100.175.163:7955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/123.php"] [unique_id "apK-amjCPtor9NZ-byT7OwAABmI"]
[Sat Aug 29 05:11:38.824333 2026] [security2:error] [pid 11274:tid 11497] [client 40.83.93.50:10923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/class-wp-cmd.php"] [unique_id "apK-ambX5DA3XO6e_qRHsQAAAT4"]
[Sat Aug 29 05:11:38.843091 2026] [security2:error] [pid 1321:tid 1584] [client 20.104.104.62:27707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "buddhistonthebattleship.managemymood.com"] [uri "/wp-admin/post.php"] [unique_id "apK-amjCPtor9NZ-byT7PAAABps"]
[Sat Aug 29 05:11:38.847050 2026] [security2:error] [pid 11274:tid 11488] [client 20.48.160.90:50367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/wp-admin/css/colors/coffee/mari.php"] [unique_id "apK-ambX5DA3XO6e_qRHsgAAATU"]
[Sat Aug 29 05:11:38.848287 2026] [security2:error] [pid 1321:tid 1532] [client 20.220.204.93:50564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/maraz.php"] [unique_id "apK-amjCPtor9NZ-byT7PQAABmg"]
[Sat Aug 29 05:11:38.849218 2026] [security2:error] [pid 11274:tid 11463] [client 158.23.147.79:50068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/dropdown.php"] [unique_id "apK-ambX5DA3XO6e_qRHswAAAR0"]
[Sat Aug 29 05:11:38.870053 2026] [security2:error] [pid 11274:tid 11436] [remote 160.153.252.100:43296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.252.153.160.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "equiposdeseguridadindustrialdn.com"] [uri "/wp-login.php"] [unique_id "apK-ambX5DA3XO6e_qRHtgABZ3k"], referer: https://equiposdeseguridadindustrialdn.com/wp-login.php
[Sat Aug 29 05:11:38.872332 2026] [security2:error] [pid 11274:tid 11509] [client 31.223.34.170:59179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 170.34.223.31.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mjglassmirrors.com"] [uri "/xmlrpc.php"] [unique_id "apK-ambX5DA3XO6e_qRHtAAAAUo"]
[Sat Aug 29 05:11:38.872494 2026] [security2:error] [pid 11274:tid 11509] [client 31.223.34.170:59179] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mjglassmirrors.com"] [uri "/xmlrpc.php"] [unique_id "apK-ambX5DA3XO6e_qRHtAAAAUo"]
[Sat Aug 29 05:11:38.874112 2026] [security2:error] [pid 1321:tid 1577] [client 20.104.104.62:57442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/console.php"] [unique_id "apK-amjCPtor9NZ-byT7QAAABpQ"]
[Sat Aug 29 05:11:38.879146 2026] [security2:error] [pid 11274:tid 11520] [client 52.139.37.240:21846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/up.php"] [unique_id "apK-ambX5DA3XO6e_qRHuwAAAVU"]
[Sat Aug 29 05:11:38.890035 2026] [security2:error] [pid 11274:tid 11451] [client 20.48.250.41:49568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/asax.php"] [unique_id "apK-ambX5DA3XO6e_qRHvQAAARE"]
[Sat Aug 29 05:11:38.890705 2026] [security2:error] [pid 11274:tid 11525] [client 20.48.250.41:36109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/ak.php"] [unique_id "apK-ambX5DA3XO6e_qRHvgAAAVo"]
[Sat Aug 29 05:11:38.901493 2026] [security2:error] [pid 11274:tid 11444] [client 158.23.147.79:64457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/wp-content/plugins/index.php"] [unique_id "apK-ambX5DA3XO6e_qRHvwAAAQo"]
[Sat Aug 29 05:11:38.904325 2026] [security2:error] [pid 11274:tid 11553] [client 52.139.37.240:31638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/root.php"] [unique_id "apK-ambX5DA3XO6e_qRHwAAAAXU"]
[Sat Aug 29 05:11:38.912397 2026] [security2:error] [pid 1321:tid 1549] [client 20.48.160.90:61602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/wp_xiPu52Ut.php"] [unique_id "apK-amjCPtor9NZ-byT7QQAABng"]
[Sat Aug 29 05:11:38.950050 2026] [security2:error] [pid 1321:tid 1559] [client 68.155.159.216:49101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/file5.php"] [unique_id "apK-amjCPtor9NZ-byT7RAAABoI"]
[Sat Aug 29 05:11:38.957202 2026] [security2:error] [pid 11274:tid 11566] [client 20.104.104.62:40224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-0.php"] [unique_id "apK-ambX5DA3XO6e_qRHxQAAAYI"]
[Sat Aug 29 05:11:38.958445 2026] [security2:error] [pid 11274:tid 11522] [client 20.104.18.15:37830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-ambX5DA3XO6e_qRHxgAAAVc"]
[Sat Aug 29 05:11:38.969675 2026] [security2:error] [pid 1321:tid 1539] [client 20.240.128.207:20008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/bgymj.php"] [unique_id "apK-amjCPtor9NZ-byT7RQAABm8"]
[Sat Aug 29 05:11:38.973393 2026] [security2:error] [pid 1321:tid 1510] [client 158.23.147.79:56979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK-amjCPtor9NZ-byT7RwAABlI"]
[Sat Aug 29 05:11:38.976027 2026] [security2:error] [pid 11274:tid 11450] [client 158.23.147.79:39122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/login.php"] [unique_id "apK-ambX5DA3XO6e_qRHyQAAARA"]
[Sat Aug 29 05:11:38.978095 2026] [security2:error] [pid 11274:tid 11543] [client 20.48.160.90:23735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/wp-includes/images/crystal/option.php"] [unique_id "apK-ambX5DA3XO6e_qRHygAAAWs"]
[Sat Aug 29 05:11:38.983501 2026] [security2:error] [pid 11274:tid 11508] [client 40.83.93.50:11315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/xmlrpc.php0"] [unique_id "apK-ambX5DA3XO6e_qRHywAAAUk"]
[Sat Aug 29 05:11:38.989060 2026] [security2:error] [pid 11274:tid 11572] [client 20.52.41.200:4762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/admin/function.php"] [unique_id "apK-ambX5DA3XO6e_qRHzQAAAYg"]
[Sat Aug 29 05:11:39.004413 2026] [security2:error] [pid 11274:tid 11512] [client 4.205.62.107:32566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/xza.php"] [unique_id "apK-a2bX5DA3XO6e_qRHzwAAAU0"]
[Sat Aug 29 05:11:39.025508 2026] [cgid:error] [pid 11274:tid 11570] [client 20.104.18.15:15353] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/penmarke/public_html/petgrooming/404.shtml
[Sat Aug 29 05:11:39.028537 2026] [security2:error] [pid 1321:tid 1529] [client 20.104.104.62:58714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/blnux.php"] [unique_id "apK-a2jCPtor9NZ-byT7SAAABmU"]
[Sat Aug 29 05:11:39.032633 2026] [security2:error] [pid 11274:tid 11498] [client 20.48.250.41:25538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-a2bX5DA3XO6e_qRH0wAAAT8"]
[Sat Aug 29 05:11:39.036162 2026] [security2:error] [pid 1321:tid 1550] [client 20.52.41.200:2682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/gmo.php"] [unique_id "apK-a2jCPtor9NZ-byT7SQAABnk"]
[Sat Aug 29 05:11:39.038545 2026] [security2:error] [pid 1321:tid 1574] [client 20.240.128.207:1271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-content.php"] [unique_id "apK-a2jCPtor9NZ-byT7SgAABpE"]
[Sat Aug 29 05:11:39.044072 2026] [security2:error] [pid 11274:tid 11524] [client 20.104.104.62:27683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "buddhistonthebattleship.managemymood.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK-a2bX5DA3XO6e_qRH1gAAAVk"]
[Sat Aug 29 05:11:39.048615 2026] [security2:error] [pid 1321:tid 1597] [client 20.100.175.163:4201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-a2jCPtor9NZ-byT7SwAABqg"]
[Sat Aug 29 05:11:39.050480 2026] [security2:error] [pid 11274:tid 11492] [client 20.48.160.90:37876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/wp_n5VD7XDh.php"] [unique_id "apK-a2bX5DA3XO6e_qRH1wAAATk"]
[Sat Aug 29 05:11:39.059144 2026] [security2:error] [pid 1321:tid 1544] [client 158.23.184.117:18112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/.dj/index.php"] [unique_id "apK-a2jCPtor9NZ-byT7TQAABnQ"]
[Sat Aug 29 05:11:39.063405 2026] [security2:error] [pid 11274:tid 11539] [client 20.48.250.41:36393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/lib.php"] [unique_id "apK-a2bX5DA3XO6e_qRH2QAAAWg"]
[Sat Aug 29 05:11:39.068832 2026] [security2:error] [pid 11274:tid 11464] [client 4.205.62.107:4500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/wander.php"] [unique_id "apK-a2bX5DA3XO6e_qRH2gAAAR4"]
[Sat Aug 29 05:11:39.073164 2026] [security2:error] [pid 11274:tid 11471] [client 20.151.200.44:27267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/7logs.php"] [unique_id "apK-a2bX5DA3XO6e_qRH2wAAASU"]
[Sat Aug 29 05:11:39.075640 2026] [security2:error] [pid 11274:tid 11471] [client 20.151.200.44:55720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/baee.php"] [unique_id "apK-a2bX5DA3XO6e_qRH3AAAASU"]
[Sat Aug 29 05:11:39.086122 2026] [security2:error] [pid 1321:tid 1615] [client 20.48.250.41:49551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/fetch.php"] [unique_id "apK-a2jCPtor9NZ-byT7UAAABro"]
[Sat Aug 29 05:11:39.089743 2026] [security2:error] [pid 1321:tid 1491] [client 20.104.18.15:37826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/ap.php"] [unique_id "apK-a2jCPtor9NZ-byT7UQAABj8"]
[Sat Aug 29 05:11:39.103644 2026] [security2:error] [pid 1321:tid 1604] [client 20.104.18.15:14993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/wp-includes/ID3/moon.php"] [unique_id "apK-a2jCPtor9NZ-byT7UwAABq8"]
[Sat Aug 29 05:11:39.108348 2026] [security2:error] [pid 11274:tid 11499] [client 52.139.37.240:31041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/shell.php"] [unique_id "apK-a2bX5DA3XO6e_qRH3QAAAUA"]
[Sat Aug 29 05:11:39.116548 2026] [security2:error] [pid 11274:tid 11445] [client 20.48.160.90:28781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/wp-includes/pomo/xxx.php"] [unique_id "apK-a2bX5DA3XO6e_qRH3gAAAQs"]
[Sat Aug 29 05:11:39.124319 2026] [security2:error] [pid 11274:tid 11459] [client 20.104.104.62:40198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-1.php"] [unique_id "apK-a2bX5DA3XO6e_qRH4wAAARk"]
[Sat Aug 29 05:11:39.126232 2026] [security2:error] [pid 11274:tid 11534] [client 20.104.104.62:48678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/quoys.php"] [unique_id "apK-a2bX5DA3XO6e_qRH5AAAAWM"]
[Sat Aug 29 05:11:39.138835 2026] [security2:error] [pid 11274:tid 11505] [client 158.158.54.35:10129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/o.php"] [unique_id "apK-a2bX5DA3XO6e_qRH6gAAAUY"]
[Sat Aug 29 05:11:39.166739 2026] [security2:error] [pid 1321:tid 1613] [client 20.48.250.41:25546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-a2jCPtor9NZ-byT7VQAABrg"]
[Sat Aug 29 05:11:39.170258 2026] [security2:error] [pid 1321:tid 1589] [client 20.220.204.93:22051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/kbfr.php"] [unique_id "apK-a2jCPtor9NZ-byT7VgAABqA"]
[Sat Aug 29 05:11:39.178255 2026] [security2:error] [pid 1321:tid 1501] [client 158.158.54.35:23184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/404.php"] [unique_id "apK-a2jCPtor9NZ-byT7VwAABkk"]
[Sat Aug 29 05:11:39.187227 2026] [security2:error] [pid 1321:tid 1513] [client 20.48.160.90:61594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/wp-mini.php"] [unique_id "apK-a2jCPtor9NZ-byT7WAAABlU"]
[Sat Aug 29 05:11:39.205070 2026] [security2:error] [pid 1321:tid 1506] [client 158.23.184.117:18156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/.info.php"] [unique_id "apK-a2jCPtor9NZ-byT7WQAABk4"]
[Sat Aug 29 05:11:39.210155 2026] [security2:error] [pid 1321:tid 1522] [client 20.104.104.62:52288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/pentest.php"] [unique_id "apK-a2jCPtor9NZ-byT7WgAABl4"]
[Sat Aug 29 05:11:39.216372 2026] [security2:error] [pid 11274:tid 11382] [remote 93.123.109.228:33324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/.wp-config.php.swp"] [unique_id "apK-a2bX5DA3XO6e_qRH8QABYkQ"]
[Sat Aug 29 05:11:39.226486 2026] [security2:error] [pid 1321:tid 1507] [client 20.48.160.90:31471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-a2jCPtor9NZ-byT7WwAABk8"]
[Sat Aug 29 05:11:39.227995 2026] [security2:error] [pid 1321:tid 1488] [client 158.23.147.79:63237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-blog-header.php"] [unique_id "apK-a2jCPtor9NZ-byT7XAAABjw"]
[Sat Aug 29 05:11:39.230194 2026] [security2:error] [pid 1321:tid 1598] [client 52.139.37.240:21865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/wp-content/155.php"] [unique_id "apK-a2jCPtor9NZ-byT7XQAABqk"]
[Sat Aug 29 05:11:39.231049 2026] [security2:error] [pid 11274:tid 11482] [client 68.155.159.216:56740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK-a2bX5DA3XO6e_qRH8gAAAS8"]
[Sat Aug 29 05:11:39.238330 2026] [security2:error] [pid 11274:tid 11544] [client 20.48.250.41:36392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/wp-style.php"] [unique_id "apK-a2bX5DA3XO6e_qRH8wAAAWw"]
[Sat Aug 29 05:11:39.242233 2026] [security2:error] [pid 11274:tid 11495] [client 20.104.18.15:15053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/xmini4.php"] [unique_id "apK-a2bX5DA3XO6e_qRH9AAAATw"]
[Sat Aug 29 05:11:39.244724 2026] [security2:error] [pid 1321:tid 1508] [client 20.104.104.62:28600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "buddhistonthebattleship.managemymood.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "apK-a2jCPtor9NZ-byT7XgAABlA"]
[Sat Aug 29 05:11:39.246307 2026] [security2:error] [pid 11274:tid 11569] [client 20.48.160.90:23691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/650.php"] [unique_id "apK-a2bX5DA3XO6e_qRH9QAAAYU"]
[Sat Aug 29 05:11:39.263887 2026] [security2:error] [pid 11274:tid 11568] [client 40.83.93.50:17552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/alumni_reg.php"] [unique_id "apK-a2bX5DA3XO6e_qRH9wAAAYQ"]
[Sat Aug 29 05:11:39.287994 2026] [security2:error] [pid 1321:tid 1498] [client 4.205.62.107:60346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/otuz1.php"] [unique_id "apK-a2jCPtor9NZ-byT7YAAABkY"]
[Sat Aug 29 05:11:39.301393 2026] [security2:error] [pid 11274:tid 11563] [client 52.139.37.240:31130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK-a2bX5DA3XO6e_qRH_QAAAX8"]
[Sat Aug 29 05:11:39.316538 2026] [security2:error] [pid 1321:tid 1595] [client 20.48.250.41:42965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/vx.php"] [unique_id "apK-a2jCPtor9NZ-byT7YQAABqY"]
[Sat Aug 29 05:11:39.324169 2026] [security2:error] [pid 1321:tid 1581] [client 20.104.18.15:37777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/media.php"] [unique_id "apK-a2jCPtor9NZ-byT7YwAABpg"]
[Sat Aug 29 05:11:39.326128 2026] [security2:error] [pid 1321:tid 1536] [client 20.48.160.90:61679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/xmini4.php"] [unique_id "apK-a2jCPtor9NZ-byT7ZAAABmw"]
[Sat Aug 29 05:11:39.331406 2026] [security2:error] [pid 1321:tid 1521] [client 20.100.175.163:28572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/yanz.php"] [unique_id "apK-a2jCPtor9NZ-byT7ZQAABl0"]
[Sat Aug 29 05:11:39.336321 2026] [security2:error] [pid 1321:tid 1587] [client 40.83.93.50:17554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/disagreed.php"] [unique_id "apK-a2jCPtor9NZ-byT7ZwAABp4"]
[Sat Aug 29 05:11:39.343160 2026] [security2:error] [pid 1321:tid 1516] [client 20.48.250.41:25558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/ff1.php"] [unique_id "apK-a2jCPtor9NZ-byT7aAAABlg"]
[Sat Aug 29 05:11:39.350779 2026] [security2:error] [pid 1321:tid 1560] [client 158.23.184.117:18115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/.trash7206/index.php"] [unique_id "apK-a2jCPtor9NZ-byT7aQAABoM"]
[Sat Aug 29 05:11:39.361110 2026] [security2:error] [pid 11274:tid 11526] [client 20.48.160.90:31472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-a2bX5DA3XO6e_qRIBwAAAVs"]
[Sat Aug 29 05:11:39.371050 2026] [security2:error] [pid 11274:tid 11483] [client 20.104.18.15:15061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/gulu.php"] [unique_id "apK-a2bX5DA3XO6e_qRICAAAATA"]
[Sat Aug 29 05:11:39.398950 2026] [security2:error] [pid 1321:tid 1591] [client 20.48.160.90:23788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/nakrip.php"] [unique_id "apK-a2jCPtor9NZ-byT7agAABqI"]
[Sat Aug 29 05:11:39.411993 2026] [security2:error] [pid 11274:tid 11566] [client 68.155.159.216:56719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/xmlrpc.php"] [unique_id "apK-a2bX5DA3XO6e_qRIDgAAAYI"]
[Sat Aug 29 05:11:39.425101 2026] [security2:error] [pid 11274:tid 11543] [client 68.155.159.216:14253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK-a2bX5DA3XO6e_qRIEAAAAWs"]
[Sat Aug 29 05:11:39.433655 2026] [security2:error] [pid 1321:tid 1514] [client 20.104.104.62:20833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/xindex.php"] [unique_id "apK-a2jCPtor9NZ-byT7bAAABlY"]
[Sat Aug 29 05:11:39.436685 2026] [security2:error] [pid 1321:tid 1580] [client 20.52.41.200:5123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/admin/index.php"] [unique_id "apK-a2jCPtor9NZ-byT7bQAABpc"]
[Sat Aug 29 05:11:39.440123 2026] [security2:error] [pid 11274:tid 11473] [client 20.104.104.62:27706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "buddhistonthebattleship.managemymood.com"] [uri "/wp-content/uploads/system_core.php"] [unique_id "apK-a2bX5DA3XO6e_qRIEwAAASc"]
[Sat Aug 29 05:11:39.443501 2026] [security2:error] [pid 11274:tid 11485] [client 20.104.104.62:42096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/6y7t.php"] [unique_id "apK-a2bX5DA3XO6e_qRIFgAAATI"]
[Sat Aug 29 05:11:39.444184 2026] [security2:error] [pid 11274:tid 11560] [client 5.255.251.130:0] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Mozilla\\\\/5\\\\.0 \\\$compatible; YandexBot\\\\/3\\\\.0; \\\\+http:\\\\/\\\\/yandex\\\\.com\\\\/bots\\\$" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/othercrawler.conf"] [line "3"] [id "901008"] [msg "Yandex Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/categorie-produit/epicerie/"] [unique_id "apK-a2bX5DA3XO6e_qRIFQAAAXw"]
[Sat Aug 29 05:11:39.448257 2026] [security2:error] [pid 11274:tid 11444] [client 52.139.37.240:21833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/wp-update.php"] [unique_id "apK-a2bX5DA3XO6e_qRIFwAAAQo"]
[Sat Aug 29 05:11:39.455991 2026] [security2:error] [pid 1321:tid 1605] [client 149.34.210.141:49368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-a2jCPtor9NZ-byT7bgAABrA"]
[Sat Aug 29 05:11:39.456090 2026] [security2:error] [pid 1321:tid 1605] [client 149.34.210.141:49368] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-a2jCPtor9NZ-byT7bgAABrA"]
[Sat Aug 29 05:11:39.463329 2026] [security2:error] [pid 1321:tid 1529] [client 20.48.160.90:37886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/reop3.php"] [unique_id "apK-a2jCPtor9NZ-byT7bwAABmU"]
[Sat Aug 29 05:11:39.465506 2026] [security2:error] [pid 1321:tid 1520] [client 20.48.250.41:49594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/global.php"] [unique_id "apK-a2jCPtor9NZ-byT7cAAABlw"]
[Sat Aug 29 05:11:39.469605 2026] [security2:error] [pid 1321:tid 1562] [client 20.240.128.207:8294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK-a2jCPtor9NZ-byT7cQAABoU"]
[Sat Aug 29 05:11:39.477368 2026] [security2:error] [pid 1321:tid 1564] [client 20.48.250.41:36359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/browse.php"] [unique_id "apK-a2jCPtor9NZ-byT7cgAABoc"]
[Sat Aug 29 05:11:39.481335 2026] [security2:error] [pid 1321:tid 1565] [client 20.220.204.93:15871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/wp-act.php"] [unique_id "apK-a2jCPtor9NZ-byT7cwAABog"]
[Sat Aug 29 05:11:39.488677 2026] [security2:error] [pid 1321:tid 1594] [client 20.52.41.200:2651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/classwithtostring.php"] [unique_id "apK-a2jCPtor9NZ-byT7dAAABqU"]
[Sat Aug 29 05:11:39.492724 2026] [security2:error] [pid 1321:tid 1491] [client 20.48.160.90:31460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/ser.php"] [unique_id "apK-a2jCPtor9NZ-byT7dQAABj8"]
[Sat Aug 29 05:11:39.494773 2026] [security2:error] [pid 11274:tid 11572] [client 52.139.37.240:31085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/wp-content/plugins/linkpreview/il.php"] [unique_id "apK-a2bX5DA3XO6e_qRIHAAAAYg"]
[Sat Aug 29 05:11:39.515485 2026] [security2:error] [pid 11274:tid 11455] [client 158.23.184.117:18165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/.trash7206/min.php"] [unique_id "apK-a2bX5DA3XO6e_qRIHgAAARU"]
[Sat Aug 29 05:11:39.522094 2026] [security2:error] [pid 11274:tid 11541] [client 40.83.93.50:3418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/content.php"] [unique_id "apK-a2bX5DA3XO6e_qRIHwAAAWo"]
[Sat Aug 29 05:11:39.522708 2026] [security2:error] [pid 1321:tid 1563] [client 20.104.18.15:15142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/replace.php"] [unique_id "apK-a2jCPtor9NZ-byT7dgAABoY"]
[Sat Aug 29 05:11:39.533879 2026] [security2:error] [pid 1321:tid 1576] [client 20.48.250.41:25553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/t.php"] [unique_id "apK-a2jCPtor9NZ-byT7eAAABpM"]
[Sat Aug 29 05:11:39.540946 2026] [security2:error] [pid 11274:tid 11555] [client 20.240.128.207:1042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "apK-a2bX5DA3XO6e_qRIIgAAAXc"]
[Sat Aug 29 05:11:39.550424 2026] [security2:error] [pid 11274:tid 11456] [client 20.48.160.90:28785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/wp-includes/interactivity-api/flower.php"] [unique_id "apK-a2bX5DA3XO6e_qRIIwAAARY"]
[Sat Aug 29 05:11:39.551225 2026] [security2:error] [pid 11274:tid 11550] [client 20.100.175.163:23850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/alfa-rex.php7"] [unique_id "apK-a2bX5DA3XO6e_qRIJAAAAXI"]
[Sat Aug 29 05:11:39.571373 2026] [security2:error] [pid 11274:tid 11508] [client 158.158.54.35:8510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/file2.php"] [unique_id "apK-a2bX5DA3XO6e_qRIJwAAAUk"]
[Sat Aug 29 05:11:39.590156 2026] [security2:error] [pid 1321:tid 1575] [client 20.104.18.15:37774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/adminfuns.php"] [unique_id "apK-a2jCPtor9NZ-byT7ewAABpI"]
[Sat Aug 29 05:11:39.596917 2026] [security2:error] [pid 11274:tid 11459] [client 20.48.250.41:42899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/fs.php"] [unique_id "apK-a2bX5DA3XO6e_qRILAAAARk"]
[Sat Aug 29 05:11:39.601830 2026] [security2:error] [pid 11274:tid 11534] [client 20.48.160.90:37830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/wp-mail.php"] [unique_id "apK-a2bX5DA3XO6e_qRILQAAAWM"]
[Sat Aug 29 05:11:39.616000 2026] [security2:error] [pid 11274:tid 11511] [client 158.23.147.79:14270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-includes/js/index.php"] [unique_id "apK-a2bX5DA3XO6e_qRILgAAAUw"]
[Sat Aug 29 05:11:39.620884 2026] [security2:error] [pid 1321:tid 1573] [client 158.158.54.35:17701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/php.php"] [unique_id "apK-a2jCPtor9NZ-byT7fAAABpA"]
[Sat Aug 29 05:11:39.627849 2026] [security2:error] [pid 1321:tid 1531] [client 20.48.160.90:31434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/431.php"] [unique_id "apK-a2jCPtor9NZ-byT7fQAABmc"]
[Sat Aug 29 05:11:39.634003 2026] [security2:error] [pid 1321:tid 1507] [client 103.215.74.26:54220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.74.215.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.com"] [uri "/wp/index.php"] [unique_id "apK-a2jCPtor9NZ-byT7fwAABk8"], referer: https://kglogisticsinc.com/wp/wp-admin/
[Sat Aug 29 05:11:39.642336 2026] [security2:error] [pid 11274:tid 11514] [client 52.139.37.240:21860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/xmrlpc.php"] [unique_id "apK-a2bX5DA3XO6e_qRIMwAAAU8"]
[Sat Aug 29 05:11:39.644022 2026] [security2:error] [pid 11274:tid 11529] [client 20.104.104.62:27656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "buddhistonthebattleship.managemymood.com"] [uri "/wp-content/uploads/users.php"] [unique_id "apK-a2bX5DA3XO6e_qRINAAAAV4"]
[Sat Aug 29 05:11:39.661054 2026] [security2:error] [pid 1321:tid 1515] [client 158.23.184.117:18362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/.well-known//index.php"] [unique_id "apK-a2jCPtor9NZ-byT7gAAABlc"]
[Sat Aug 29 05:11:39.667490 2026] [security2:error] [pid 11274:tid 11505] [client 4.205.62.107:61672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/sale.php"] [unique_id "apK-a2bX5DA3XO6e_qRIOAAAAUY"]
[Sat Aug 29 05:11:39.668490 2026] [security2:error] [pid 11274:tid 11507] [client 20.104.104.62:57458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/0xs.php"] [unique_id "apK-a2bX5DA3XO6e_qRIOQAAAUg"]
[Sat Aug 29 05:11:39.679987 2026] [security2:error] [pid 1321:tid 1556] [client 68.155.159.216:64054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/lock.php"] [unique_id "apK-a2jCPtor9NZ-byT7gQAABn8"]
[Sat Aug 29 05:11:39.683180 2026] [security2:error] [pid 1321:tid 1599] [client 20.48.250.41:36399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/zoo.php"] [unique_id "apK-a2jCPtor9NZ-byT7ggAABqo"]
[Sat Aug 29 05:11:39.690807 2026] [security2:error] [pid 1321:tid 1588] [client 20.48.160.90:23719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/xcc.php"] [unique_id "apK-a2jCPtor9NZ-byT7gwAABp8"]
[Sat Aug 29 05:11:39.691697 2026] [security2:error] [pid 1321:tid 1614] [client 20.220.204.93:38865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/24.php"] [unique_id "apK-a2jCPtor9NZ-byT7hAAABrk"]
[Sat Aug 29 05:11:39.705314 2026] [security2:error] [pid 11274:tid 11564] [client 52.139.37.240:31524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/wp-header-json.php"] [unique_id "apK-a2bX5DA3XO6e_qRIPQAAAYA"]
[Sat Aug 29 05:11:39.716083 2026] [security2:error] [pid 11274:tid 11482] [client 20.104.18.15:15110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/c4.php"] [unique_id "apK-a2bX5DA3XO6e_qRIPwAAAS8"]
[Sat Aug 29 05:11:39.746855 2026] [security2:error] [pid 1321:tid 1543] [client 4.205.62.107:61789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/sadd.php"] [unique_id "apK-a2jCPtor9NZ-byT7hwAABnM"]
[Sat Aug 29 05:11:39.756965 2026] [security2:error] [pid 1321:tid 1595] [client 20.48.250.41:49589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/ioxi.php"] [unique_id "apK-a2jCPtor9NZ-byT7iAAABqY"]
[Sat Aug 29 05:11:39.778308 2026] [security2:error] [pid 11274:tid 11366] [remote 93.123.109.228:33324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK-a2bX5DA3XO6e_qRISgABYjQ"]
[Sat Aug 29 05:11:39.780789 2026] [security2:error] [pid 1321:tid 1516] [client 20.48.160.90:31370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/rxr.php"] [unique_id "apK-a2jCPtor9NZ-byT7igAABlg"]
[Sat Aug 29 05:11:39.780936 2026] [security2:error] [pid 11274:tid 11477] [client 158.23.184.117:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "jobindjibouti.com"] [uri "/"] [unique_id "apK-a2bX5DA3XO6e_qRISQAAASs"]
[Sat Aug 29 05:11:39.782506 2026] [security2:error] [pid 11274:tid 11484] [client 20.48.160.90:61568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/wp-conffg.php"] [unique_id "apK-a2bX5DA3XO6e_qRISwAAATE"]
[Sat Aug 29 05:11:39.782706 2026] [security2:error] [pid 1321:tid 1559] [client 20.48.250.41:25548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/erty.php"] [unique_id "apK-a2jCPtor9NZ-byT7iwAABoI"]
[Sat Aug 29 05:11:39.784136 2026] [security2:error] [pid 1321:tid 1494] [client 20.104.18.15:37778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/classwithtostring.php"] [unique_id "apK-a2jCPtor9NZ-byT7jAAABkI"]
[Sat Aug 29 05:11:39.785646 2026] [security2:error] [pid 11274:tid 11559] [client 40.83.93.50:4009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/colors.php"] [unique_id "apK-a2bX5DA3XO6e_qRITAAAAXs"]
[Sat Aug 29 05:11:39.793134 2026] [security2:error] [pid 1321:tid 1552] [client 213.202.253.4:64736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "timportlock.net"] [uri "/schallfuns.php"] [unique_id "apK-a2jCPtor9NZ-byT7jQAABns"], referer: www.google.com
[Sat Aug 29 05:11:39.805352 2026] [security2:error] [pid 11274:tid 11561] [client 158.23.184.117:18150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/.well-known/about.php"] [unique_id "apK-a2bX5DA3XO6e_qRITwAAAX0"]
[Sat Aug 29 05:11:39.814455 2026] [security2:error] [pid 11274:tid 11501] [client 20.104.104.62:48689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/vbbn.php"] [unique_id "apK-a2bX5DA3XO6e_qRIUAAAAUI"]
[Sat Aug 29 05:11:39.819603 2026] [security2:error] [pid 11274:tid 11489] [client 68.155.159.216:2022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK-a2bX5DA3XO6e_qRIUQAAATY"]
[Sat Aug 29 05:11:39.830198 2026] [security2:error] [pid 1321:tid 1610] [client 40.83.93.50:6679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/class_api.php"] [unique_id "apK-a2jCPtor9NZ-byT7jgAABrU"]
[Sat Aug 29 05:11:39.835504 2026] [security2:error] [pid 11274:tid 11568] [client 20.104.104.62:27702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "buddhistonthebattleship.managemymood.com"] [uri "/wp-content/wp-conflg.php"] [unique_id "apK-a2bX5DA3XO6e_qRIVAAAAYQ"]
[Sat Aug 29 05:11:39.836094 2026] [security2:error] [pid 11274:tid 11502] [client 52.139.37.240:22491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/about/function.php"] [unique_id "apK-a2bX5DA3XO6e_qRIVQAAAUM"]
[Sat Aug 29 05:11:39.836684 2026] [security2:error] [pid 11274:tid 11470] [client 20.48.160.90:23689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/wp-includes/Text/Diff/Engine/aaa.php"] [unique_id "apK-a2bX5DA3XO6e_qRIVgAAASQ"]
[Sat Aug 29 05:11:39.837252 2026] [security2:error] [pid 11274:tid 11568] [client 20.48.250.41:36104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/elp.php"] [unique_id "apK-a2bX5DA3XO6e_qRIVwAAAYQ"]
[Sat Aug 29 05:11:39.841926 2026] [security2:error] [pid 11274:tid 11503] [client 20.100.175.163:33670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/autoload_classmap.php"] [unique_id "apK-a2bX5DA3XO6e_qRIWAAAAUQ"]
[Sat Aug 29 05:11:39.850211 2026] [security2:error] [pid 11274:tid 11558] [client 20.104.104.62:58705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/waf.php"] [unique_id "apK-a2bX5DA3XO6e_qRIWQAAAXo"]
[Sat Aug 29 05:11:39.857494 2026] [security2:error] [pid 11274:tid 11526] [client 68.155.159.216:33721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/bk/index.php"] [unique_id "apK-a2bX5DA3XO6e_qRIWwAAAVs"]
[Sat Aug 29 05:11:39.864815 2026] [security2:error] [pid 11274:tid 11553] [client 4.205.62.107:6903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/zz.php"] [unique_id "apK-a2bX5DA3XO6e_qRIXQAAAXU"]
[Sat Aug 29 05:11:39.890556 2026] [security2:error] [pid 1321:tid 1492] [client 4.205.62.107:63282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/localconf.php"] [unique_id "apK-a2jCPtor9NZ-byT7kAAABkA"]
[Sat Aug 29 05:11:39.892785 2026] [security2:error] [pid 1321:tid 1489] [client 20.52.41.200:4754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/storage/rip.php"] [unique_id "apK-a2jCPtor9NZ-byT7kQAABj0"]
[Sat Aug 29 05:11:39.898159 2026] [security2:error] [pid 11274:tid 11450] [client 20.48.250.41:43003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/bootstrap.php"] [unique_id "apK-a2bX5DA3XO6e_qRIYAAAARA"]
[Sat Aug 29 05:11:39.901598 2026] [security2:error] [pid 11274:tid 11516] [client 52.139.37.240:30814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/zup.php"] [unique_id "apK-a2bX5DA3XO6e_qRIYQAAAVE"]
[Sat Aug 29 05:11:39.919437 2026] [security2:error] [pid 1321:tid 1514] [client 68.155.159.216:1986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/about.php"] [unique_id "apK-a2jCPtor9NZ-byT7kgAABlY"]
[Sat Aug 29 05:11:39.924711 2026] [security2:error] [pid 1321:tid 1587] [client 20.52.41.200:2760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/404.php"] [unique_id "apK-a2jCPtor9NZ-byT7lAAABp4"]
[Sat Aug 29 05:11:39.924922 2026] [security2:error] [pid 1321:tid 1566] [client 20.48.160.90:31436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/csst.php"] [unique_id "apK-a2jCPtor9NZ-byT7lQAABok"]
[Sat Aug 29 05:11:39.927728 2026] [security2:error] [pid 11274:tid 11565] [client 103.215.74.26:54228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.74.215.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.com"] [uri "/wp/index.php"] [unique_id "apK-a2bX5DA3XO6e_qRIZAAAAYE"], referer: https://kglogisticsinc.com/wp/wp-admin/
[Sat Aug 29 05:11:39.931902 2026] [security2:error] [pid 1321:tid 1514] [client 20.104.18.15:15049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/rxr.php"] [unique_id "apK-a2jCPtor9NZ-byT7kwAABlY"]
[Sat Aug 29 05:11:39.934951 2026] [security2:error] [pid 1321:tid 1612] [client 20.48.250.41:25552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/0x.php"] [unique_id "apK-a2jCPtor9NZ-byT7lgAABrc"]
[Sat Aug 29 05:11:39.941274 2026] [security2:error] [pid 1321:tid 1580] [client 20.48.160.90:61686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/filefuns.php"] [unique_id "apK-a2jCPtor9NZ-byT7lwAABpc"]
[Sat Aug 29 05:11:39.946137 2026] [security2:error] [pid 1321:tid 1580] [client 20.220.204.93:17690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/155.php"] [unique_id "apK-a2jCPtor9NZ-byT7mAAABpc"]
[Sat Aug 29 05:11:39.957795 2026] [security2:error] [pid 1321:tid 1550] [client 20.104.18.15:37873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK-a2jCPtor9NZ-byT7mQAABnk"]
[Sat Aug 29 05:11:39.968052 2026] [security2:error] [pid 1321:tid 1520] [client 20.48.160.90:23714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/wp-includes/style-engine/gecko-new.php"] [unique_id "apK-a2jCPtor9NZ-byT7mwAABlw"]
[Sat Aug 29 05:11:39.969440 2026] [security2:error] [pid 11274:tid 11498] [client 158.23.147.79:50140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/.well-known/index.php"] [unique_id "apK-a2bX5DA3XO6e_qRIagAAAT8"]
[Sat Aug 29 05:11:39.972810 2026] [security2:error] [pid 11274:tid 11552] [client 20.48.250.41:36127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/666.php"] [unique_id "apK-a2bX5DA3XO6e_qRIawAAAXQ"]
[Sat Aug 29 05:11:39.998207 2026] [security2:error] [pid 11274:tid 11490] [client 158.23.147.79:63821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK-a2bX5DA3XO6e_qRIbgAAATc"]
[Sat Aug 29 05:11:39.999561 2026] [security2:error] [pid 1321:tid 1565] [client 20.104.104.62:64714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wiki-index.php"] [unique_id "apK-a2jCPtor9NZ-byT7nAAABog"]
[Sat Aug 29 05:11:40.000073 2026] [security2:error] [pid 11274:tid 11492] [client 158.23.184.117:18131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK-a2bX5DA3XO6e_qRIbwAAATk"]
[Sat Aug 29 05:11:40.008810 2026] [security2:error] [pid 11274:tid 11420] [remote 93.123.109.228:33324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/admin/phpinfo.php"] [unique_id "apK-bGbX5DA3XO6e_qRIcQABYmo"]
[Sat Aug 29 05:11:40.018548 2026] [security2:error] [pid 1321:tid 1591] [client 158.158.54.35:17670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK-bGjCPtor9NZ-byT7nQAABqI"]
[Sat Aug 29 05:11:40.030107 2026] [security2:error] [pid 11274:tid 11518] [client 20.104.104.62:28583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "buddhistonthebattleship.managemymood.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK-bGbX5DA3XO6e_qRIcwAAAVM"]
[Sat Aug 29 05:11:40.030516 2026] [security2:error] [pid 1321:tid 1529] [client 52.139.37.240:22452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/an.php"] [unique_id "apK-bGjCPtor9NZ-byT7ngAABmU"]
[Sat Aug 29 05:11:40.034280 2026] [security2:error] [pid 1321:tid 1604] [client 20.104.104.62:61795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/bnnof6.php"] [unique_id "apK-bGjCPtor9NZ-byT7nwAABq8"]
[Sat Aug 29 05:11:40.043107 2026] [security2:error] [pid 11274:tid 11496] [client 20.240.128.207:4882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/css/wp-login.php"] [unique_id "apK-bGbX5DA3XO6e_qRIdQAAAT0"]
[Sat Aug 29 05:11:40.044085 2026] [security2:error] [pid 1321:tid 1592] [client 158.23.147.79:64450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/simple.php"] [unique_id "apK-bGjCPtor9NZ-byT7oAAABqM"]
[Sat Aug 29 05:11:40.049406 2026] [security2:error] [pid 1321:tid 1576] [client 145.239.10.137:58859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.10.239.145.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "greenfieldstone.com"] [uri "/mah.php"] [unique_id "apK-bGjCPtor9NZ-byT7oQAABpM"], referer: http://greenfieldstone.com/mah.php?p=
[Sat Aug 29 05:11:40.050102 2026] [security2:error] [pid 1321:tid 1589] [client 20.48.250.41:42900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/export.php"] [unique_id "apK-bGjCPtor9NZ-byT7ogAABqA"]
[Sat Aug 29 05:11:40.056406 2026] [security2:error] [pid 11274:tid 11560] [client 158.158.54.35:15607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/init.php"] [unique_id "apK-bGbX5DA3XO6e_qRIdgAAAXw"]
[Sat Aug 29 05:11:40.057206 2026] [security2:error] [pid 11274:tid 11480] [client 20.100.175.163:26884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "apK-bGbX5DA3XO6e_qRIdwAAAS0"]
[Sat Aug 29 05:11:40.057768 2026] [security2:error] [pid 11274:tid 11455] [client 20.151.200.44:62180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/cafe.php"] [unique_id "apK-bGbX5DA3XO6e_qRIeAAAARU"]
[Sat Aug 29 05:11:40.058691 2026] [security2:error] [pid 11274:tid 11541] [client 20.48.160.90:31390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/wp-includes/blocks/query-title/footer.php"] [unique_id "apK-bGbX5DA3XO6e_qRIeQAAAWo"]
[Sat Aug 29 05:11:40.059382 2026] [proxy_http:error] [pid 1017536:tid 1017756] (70007)The timeout specified has expired: [client 127.0.0.1:15366] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:11:40.059404 2026] [proxy:error] [pid 1017536:tid 1017756] [client 127.0.0.1:15366] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:11:40.059957 2026] [security2:error] [pid 11274:tid 11427] [remote 93.123.109.228:33324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/admin_phpinfo.php"] [unique_id "apK-bGbX5DA3XO6e_qRIegABYnE"]
[Sat Aug 29 05:11:40.069011 2026] [security2:error] [pid 1321:tid 1501] [client 68.155.159.216:49151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/file88.php"] [unique_id "apK-bGjCPtor9NZ-byT7owAABkk"]
[Sat Aug 29 05:11:40.076305 2026] [security2:error] [pid 1321:tid 1586] [client 20.48.160.90:37761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/wp-cron.php"] [unique_id "apK-bGjCPtor9NZ-byT7pgAABp0"]
[Sat Aug 29 05:11:40.087389 2026] [security2:error] [pid 1321:tid 1502] [client 40.83.93.50:8320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/wxo.php"] [unique_id "apK-bGjCPtor9NZ-byT7pwAABko"]
[Sat Aug 29 05:11:40.089632 2026] [security2:error] [pid 1321:tid 1593] [client 20.220.204.93:17894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/file.php"] [unique_id "apK-bGjCPtor9NZ-byT7qAAABqQ"]
[Sat Aug 29 05:11:40.091450 2026] [security2:error] [pid 11274:tid 11456] [client 20.48.250.41:25586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/66.php"] [unique_id "apK-bGbX5DA3XO6e_qRIfQAAARY"]
[Sat Aug 29 05:11:40.093731 2026] [security2:error] [pid 11274:tid 11535] [client 20.104.18.15:15078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "petgrooming.penmarketing.org"] [uri "/reviall.php"] [unique_id "apK-bGbX5DA3XO6e_qRIfgAAAWQ"]
[Sat Aug 29 05:11:40.100935 2026] [security2:error] [pid 11274:tid 11537] [client 158.23.147.79:59516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/images/index.php"] [unique_id "apK-bGbX5DA3XO6e_qRIgQAAAWY"]
[Sat Aug 29 05:11:40.101670 2026] [security2:error] [pid 11274:tid 11508] [client 20.48.160.90:50005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/wp-settings.php"] [unique_id "apK-bGbX5DA3XO6e_qRIggAAAUk"]
[Sat Aug 29 05:11:40.116122 2026] [security2:error] [pid 11274:tid 11459] [client 158.23.147.79:39297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/hehehehe.php"] [unique_id "apK-bGbX5DA3XO6e_qRIgwAAARk"]
[Sat Aug 29 05:11:40.117640 2026] [security2:error] [pid 11274:tid 11536] [client 52.139.37.240:31528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/a9.php"] [unique_id "apK-bGbX5DA3XO6e_qRIhgAAAWU"]
[Sat Aug 29 05:11:40.126247 2026] [security2:error] [pid 11274:tid 11511] [client 20.48.250.41:36107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/knmt.php"] [unique_id "apK-bGbX5DA3XO6e_qRIhwAAAUw"]
[Sat Aug 29 05:11:40.129476 2026] [security2:error] [pid 11274:tid 11514] [client 20.104.18.15:37850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/5PJcpMFsD8B.php"] [unique_id "apK-bGbX5DA3XO6e_qRIiAAAAU8"]
[Sat Aug 29 05:11:40.133781 2026] [security2:error] [pid 1321:tid 1515] [client 20.240.128.207:20015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-load.php"] [unique_id "apK-bGjCPtor9NZ-byT7qQAABlc"]
[Sat Aug 29 05:11:40.140959 2026] [security2:error] [pid 1321:tid 1602] [client 4.205.62.107:59128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/ms-edit.php"] [unique_id "apK-bGjCPtor9NZ-byT7qgAABq0"]
[Sat Aug 29 05:11:40.144173 2026] [security2:error] [pid 1321:tid 1608] [client 158.23.184.117:18345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/.well-known/acme-challenge/content.php"] [unique_id "apK-bGjCPtor9NZ-byT7qwAABrM"]
[Sat Aug 29 05:11:40.180661 2026] [security2:error] [pid 1321:tid 1556] [client 20.48.250.41:42920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/gk.php"] [unique_id "apK-bGjCPtor9NZ-byT7rAAABn8"]
[Sat Aug 29 05:11:40.193496 2026] [security2:error] [pid 1321:tid 1614] [client 20.48.160.90:51972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/wp-content/uploads/indoex.php"] [unique_id "apK-bGjCPtor9NZ-byT7rQAABrk"]
[Sat Aug 29 05:11:40.206903 2026] [security2:error] [pid 11274:tid 11554] [client 4.205.62.107:58481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cisagency.com"] [uri "/ah25.php"] [unique_id "apK-bGbX5DA3XO6e_qRIlAAAAXY"]
[Sat Aug 29 05:11:40.216305 2026] [security2:error] [pid 1321:tid 1577] [client 20.104.104.62:58731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/ah24.php"] [unique_id "apK-bGjCPtor9NZ-byT7rwAABpQ"]
[Sat Aug 29 05:11:40.221401 2026] [security2:error] [pid 1321:tid 1549] [client 20.48.250.41:25474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/f35.php"] [unique_id "apK-bGjCPtor9NZ-byT7sAAABng"]
[Sat Aug 29 05:11:40.225156 2026] [security2:error] [pid 1321:tid 1516] [client 20.48.160.90:61635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/lock360.php"] [unique_id "apK-bGjCPtor9NZ-byT7sQAABlg"]
[Sat Aug 29 05:11:40.235510 2026] [security2:error] [pid 1321:tid 1496] [client 68.155.159.216:38313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-admin/dropdown.php"] [unique_id "apK-bGjCPtor9NZ-byT7swAABkQ"]
[Sat Aug 29 05:11:40.237875 2026] [security2:error] [pid 1321:tid 1523] [client 52.139.37.240:21877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/asw.php"] [unique_id "apK-bGjCPtor9NZ-byT7tAAABl8"]
[Sat Aug 29 05:11:40.245786 2026] [security2:error] [pid 11274:tid 11484] [client 20.48.160.90:28773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/wp-signup.php"] [unique_id "apK-bGbX5DA3XO6e_qRImgAAATE"]
[Sat Aug 29 05:11:40.247928 2026] [security2:error] [pid 1321:tid 1552] [client 20.104.104.62:48718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/rfi.php"] [unique_id "apK-bGjCPtor9NZ-byT7tQAABns"]
[Sat Aug 29 05:11:40.265310 2026] [security2:error] [pid 1321:tid 1533] [client 20.48.250.41:36384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/sbhu.php"] [unique_id "apK-bGjCPtor9NZ-byT7twAABmk"]
[Sat Aug 29 05:11:40.267863 2026] [security2:error] [pid 11274:tid 11428] [remote 93.123.109.228:33324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/api/info.php"] [unique_id "apK-bGbX5DA3XO6e_qRInAABh3I"]
[Sat Aug 29 05:11:40.306700 2026] [security2:error] [pid 11274:tid 11486] [client 20.104.104.62:27887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "buddhistonthebattleship.managemymood.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK-bGbX5DA3XO6e_qRIoAAAATM"]
[Sat Aug 29 05:11:40.313856 2026] [security2:error] [pid 1321:tid 1510] [client 52.139.37.240:31506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/admin/index.php"] [unique_id "apK-bGjCPtor9NZ-byT7ugAABlI"]
[Sat Aug 29 05:11:40.317739 2026] [security2:error] [pid 11274:tid 11497] [client 20.104.18.15:37858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK-bGbX5DA3XO6e_qRIowAAAT4"]
[Sat Aug 29 05:11:40.322244 2026] [security2:error] [pid 1321:tid 1519] [client 40.83.93.50:17568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/Js.php"] [unique_id "apK-bGjCPtor9NZ-byT7uwAABls"]
[Sat Aug 29 05:11:40.324371 2026] [security2:error] [pid 11274:tid 11500] [client 20.48.160.90:31469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK-bGbX5DA3XO6e_qRIpgAAAUE"]
[Sat Aug 29 05:11:40.325123 2026] [security2:error] [pid 11274:tid 11563] [client 57.141.14.24:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/"] [unique_id "apK-bGbX5DA3XO6e_qRIpAAAAX8"]
[Sat Aug 29 05:11:40.328328 2026] [security2:error] [pid 11274:tid 11501] [client 20.104.49.130:57672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/sd.php"] [unique_id "apK-bGbX5DA3XO6e_qRIpwAAAUI"]
[Sat Aug 29 05:11:40.332184 2026] [security2:error] [pid 1321:tid 1580] [client 158.23.147.79:63264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK-bGjCPtor9NZ-byT7vAAABpc"]
[Sat Aug 29 05:11:40.337528 2026] [security2:error] [pid 11274:tid 11502] [client 20.48.250.41:42863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/logs1.php"] [unique_id "apK-bGbX5DA3XO6e_qRIqQAAAUM"]
[Sat Aug 29 05:11:40.337615 2026] [security2:error] [pid 11274:tid 11507] [client 40.83.93.50:3970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/aksinet.php"] [unique_id "apK-bGbX5DA3XO6e_qRIqgAAAUg"]
[Sat Aug 29 05:11:40.339226 2026] [security2:error] [pid 11274:tid 11372] [remote 93.123.109.228:33324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/api/phpinfo.php"] [unique_id "apK-bGbX5DA3XO6e_qRIqwABhzo"]
[Sat Aug 29 05:11:40.341428 2026] [security2:error] [pid 11274:tid 11479] [client 158.23.184.117:18347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK-bGbX5DA3XO6e_qRIrAAAASw"]
[Sat Aug 29 05:11:40.344540 2026] [security2:error] [pid 1321:tid 1526] [client 20.52.41.200:5140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/zoom1.php"] [unique_id "apK-bGjCPtor9NZ-byT7vQAABmI"]
[Sat Aug 29 05:11:40.346134 2026] [security2:error] [pid 11274:tid 11470] [client 20.104.104.62:58695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/ztv.php"] [unique_id "apK-bGbX5DA3XO6e_qRIrQAAASQ"]
[Sat Aug 29 05:11:40.351152 2026] [security2:error] [pid 11274:tid 11568] [client 68.155.159.216:56791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK-bGbX5DA3XO6e_qRIrgAAAYQ"]
[Sat Aug 29 05:11:40.353730 2026] [security2:error] [pid 11274:tid 11503] [client 20.220.204.93:38907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK-bGbX5DA3XO6e_qRIrwAAAUQ"]
[Sat Aug 29 05:11:40.356688 2026] [security2:error] [pid 11274:tid 11454] [client 20.48.250.41:25483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/wen.php"] [unique_id "apK-bGbX5DA3XO6e_qRIsAAAARQ"]
[Sat Aug 29 05:11:40.360131 2026] [security2:error] [pid 11274:tid 11463] [client 20.48.160.90:61622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/wp-theme.php"] [unique_id "apK-bGbX5DA3XO6e_qRIsQAAAR0"]
[Sat Aug 29 05:11:40.361868 2026] [security2:error] [pid 1321:tid 1599] [client 20.100.175.163:13404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/bi.php"] [unique_id "apK-bGjCPtor9NZ-byT7vgAABqo"]
[Sat Aug 29 05:11:40.380866 2026] [security2:error] [pid 11274:tid 11520] [client 20.48.160.90:23748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/wp-conffg.php"] [unique_id "apK-bGbX5DA3XO6e_qRItAAAAVU"]
[Sat Aug 29 05:11:40.383070 2026] [security2:error] [pid 11274:tid 11452] [client 20.52.41.200:2625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/php.php"] [unique_id "apK-bGbX5DA3XO6e_qRItQAAARI"]
[Sat Aug 29 05:11:40.427554 2026] [security2:error] [pid 11274:tid 11516] [client 4.205.62.107:60301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/update.php"] [unique_id "apK-bGbX5DA3XO6e_qRIvQAAAVE"]
[Sat Aug 29 05:11:40.434967 2026] [security2:error] [pid 11274:tid 11538] [client 52.139.37.240:21849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/item.php"] [unique_id "apK-bGbX5DA3XO6e_qRIvgAAAWc"]
[Sat Aug 29 05:11:40.446031 2026] [security2:error] [pid 11274:tid 11565] [client 20.48.250.41:36409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/a332.php"] [unique_id "apK-bGbX5DA3XO6e_qRIvwAAAYE"]
[Sat Aug 29 05:11:40.456367 2026] [security2:error] [pid 11274:tid 11512] [client 20.48.160.90:31477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/haxor.php"] [unique_id "apK-bGbX5DA3XO6e_qRIwgAAAU0"]
[Sat Aug 29 05:11:40.473125 2026] [security2:error] [pid 1321:tid 1612] [client 158.158.54.35:23030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/xda.php"] [unique_id "apK-bGjCPtor9NZ-byT7vwAABrc"]
[Sat Aug 29 05:11:40.474829 2026] [security2:error] [pid 11274:tid 11570] [client 20.151.200.44:27299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/sf.php"] [unique_id "apK-bGbX5DA3XO6e_qRIwwAAAYY"]
[Sat Aug 29 05:11:40.483550 2026] [security2:error] [pid 11274:tid 11465] [client 158.23.184.117:18312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/.well-known/acme-challenge/sx.php"] [unique_id "apK-bGbX5DA3XO6e_qRIxgAAAR8"]
[Sat Aug 29 05:11:40.493109 2026] [security2:error] [pid 1321:tid 1491] [client 20.48.160.90:37854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/2d7433/index.php"] [unique_id "apK-bGjCPtor9NZ-byT7wAAABj8"]
[Sat Aug 29 05:11:40.497608 2026] [security2:error] [pid 1321:tid 1520] [client 158.158.54.35:28875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "apK-bGjCPtor9NZ-byT7wQAABlw"]
[Sat Aug 29 05:11:40.501941 2026] [security2:error] [pid 1321:tid 1615] [client 20.104.104.62:27671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "buddhistonthebattleship.managemymood.com"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "apK-bGjCPtor9NZ-byT7wgAABro"]
[Sat Aug 29 05:11:40.502700 2026] [security2:error] [pid 1321:tid 1591] [client 20.220.204.93:58046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/06.php"] [unique_id "apK-bGjCPtor9NZ-byT7wwAABqI"]
[Sat Aug 29 05:11:40.507624 2026] [security2:error] [pid 1321:tid 1509] [client 20.104.18.15:37825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/wsd.php"] [unique_id "apK-bGjCPtor9NZ-byT7xQAABlE"]
[Sat Aug 29 05:11:40.508231 2026] [security2:error] [pid 11274:tid 11466] [client 52.139.37.240:31633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/makeasmtp.php"] [unique_id "apK-bGbX5DA3XO6e_qRIywAAASA"]
[Sat Aug 29 05:11:40.510095 2026] [security2:error] [pid 1321:tid 1529] [client 20.104.104.62:59034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/kure.php"] [unique_id "apK-bGjCPtor9NZ-byT7xgAABmU"]
[Sat Aug 29 05:11:40.517643 2026] [core:alert] [pid 1321:tid 1555] [client 66.249.92.204:54213] /home2/dhronnet/public_html/.htaccess: The specified network mask is invalid.
[Sat Aug 29 05:11:40.522804 2026] [security2:error] [pid 11274:tid 11518] [client 68.155.159.216:23461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-includes/index.php"] [unique_id "apK-bGbX5DA3XO6e_qRIzQAAAVM"]
[Sat Aug 29 05:11:40.525040 2026] [security2:error] [pid 11274:tid 11496] [client 20.48.250.41:49583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/inege.php"] [unique_id "apK-bGbX5DA3XO6e_qRIzgAAAT0"]
[Sat Aug 29 05:11:40.528432 2026] [security2:error] [pid 1321:tid 1604] [client 68.155.159.216:56775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/atomlib.php"] [unique_id "apK-bGjCPtor9NZ-byT7yAAABq8"]
[Sat Aug 29 05:11:40.537602 2026] [security2:error] [pid 11274:tid 11455] [client 20.48.250.41:25584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/inc.php"] [unique_id "apK-bGbX5DA3XO6e_qRI0wAAARU"]
[Sat Aug 29 05:11:40.538809 2026] [security2:error] [pid 11274:tid 11517] [client 20.240.128.207:13031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/images/index.php"] [unique_id "apK-bGbX5DA3XO6e_qRI1AAAAVI"]
[Sat Aug 29 05:11:40.543125 2026] [security2:error] [pid 11274:tid 11541] [client 20.48.160.90:23783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/wp-validate.php"] [unique_id "apK-bGbX5DA3XO6e_qRI1QAAAWo"]
[Sat Aug 29 05:11:40.567135 2026] [security2:error] [pid 11274:tid 11483] [client 20.100.175.163:15780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/upload.php"] [unique_id "apK-bGbX5DA3XO6e_qRI2QAAATA"]
[Sat Aug 29 05:11:40.576195 2026] [security2:error] [pid 11274:tid 11537] [client 20.104.49.130:63545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pvillusions.com"] [uri "/82.php"] [unique_id "apK-bGbX5DA3XO6e_qRI2gAAAWY"]
[Sat Aug 29 05:11:40.593969 2026] [security2:error] [pid 1321:tid 1521] [client 20.48.250.41:36404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/ws66.php"] [unique_id "apK-bGjCPtor9NZ-byT7yQAABl0"]
[Sat Aug 29 05:11:40.594255 2026] [security2:error] [pid 11274:tid 11464] [client 111.235.68.106:11569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK-bGbX5DA3XO6e_qRI3gAAAR4"]
[Sat Aug 29 05:11:40.594388 2026] [security2:error] [pid 11274:tid 11464] [client 111.235.68.106:11569] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK-bGbX5DA3XO6e_qRI3gAAAR4"]
[Sat Aug 29 05:11:40.594494 2026] [security2:error] [pid 1321:tid 1565] [client 40.83.93.50:8702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/as.php"] [unique_id "apK-bGjCPtor9NZ-byT7ygAABog"]
[Sat Aug 29 05:11:40.597299 2026] [security2:error] [pid 11274:tid 11536] [client 20.48.160.90:31396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/google.php"] [unique_id "apK-bGbX5DA3XO6e_qRI3wAAAWU"]
[Sat Aug 29 05:11:40.619851 2026] [security2:error] [pid 11274:tid 11514] [client 20.104.104.62:47583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/Bulle.php"] [unique_id "apK-bGbX5DA3XO6e_qRI4AAAAU8"]
[Sat Aug 29 05:11:40.626472 2026] [security2:error] [pid 11274:tid 11471] [client 52.139.37.240:21841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/jga.php"] [unique_id "apK-bGbX5DA3XO6e_qRI4wAAASU"]
[Sat Aug 29 05:11:40.626725 2026] [security2:error] [pid 1321:tid 1586] [client 158.23.184.117:18123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/.well-known/admin.php"] [unique_id "apK-bGjCPtor9NZ-byT7ywAABp0"]
[Sat Aug 29 05:11:40.647463 2026] [security2:error] [pid 11274:tid 11546] [client 20.196.209.81:8854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-admin/network/xmrlpc.php"] [unique_id "apK-bGbX5DA3XO6e_qRI6AAAAW4"]
[Sat Aug 29 05:11:40.663920 2026] [security2:error] [pid 11274:tid 11519] [client 20.104.104.62:52307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/cafe.php"] [unique_id "apK-bGbX5DA3XO6e_qRI7QAAAVQ"]
[Sat Aug 29 05:11:40.678774 2026] [security2:error] [pid 11274:tid 11529] [client 20.48.160.90:37769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/wp-login.php"] [unique_id "apK-bGbX5DA3XO6e_qRI5wAAAV4"]
[Sat Aug 29 05:11:40.679963 2026] [security2:error] [pid 1321:tid 1488] [client 20.220.204.93:22023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/class.php"] [unique_id "apK-bGjCPtor9NZ-byT7zQAABjw"]
[Sat Aug 29 05:11:40.681746 2026] [security2:error] [pid 1321:tid 1515] [client 20.48.160.90:29122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/700.php"] [unique_id "apK-bGjCPtor9NZ-byT7zgAABlc"]
[Sat Aug 29 05:11:40.696023 2026] [security2:error] [pid 11274:tid 11495] [client 20.104.18.15:37767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/bulet.php"] [unique_id "apK-bGbX5DA3XO6e_qRI8AAAATw"]
[Sat Aug 29 05:11:40.703260 2026] [security2:error] [pid 1321:tid 1506] [client 20.104.104.62:27681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "buddhistonthebattleship.managemymood.com"] [uri "/wp-includes/css/index.php"] [unique_id "apK-bGjCPtor9NZ-byT70AAABk4"]
[Sat Aug 29 05:11:40.708029 2026] [security2:error] [pid 11274:tid 11506] [client 52.139.37.240:31537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/paku.php"] [unique_id "apK-bGbX5DA3XO6e_qRI9AAAAUc"]
[Sat Aug 29 05:11:40.714248 2026] [security2:error] [pid 11274:tid 11544] [client 68.155.159.216:14239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/images/index.php"] [unique_id "apK-bGbX5DA3XO6e_qRI9QAAAWw"]
[Sat Aug 29 05:11:40.726738 2026] [security2:error] [pid 1321:tid 1547] [client 20.151.200.44:63392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/secret.php"] [unique_id "apK-bGjCPtor9NZ-byT70gAABnY"]
[Sat Aug 29 05:11:40.727082 2026] [security2:error] [pid 11274:tid 11505] [client 158.23.147.79:14269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-content/index.php"] [unique_id "apK-bGbX5DA3XO6e_qRI-AAAAUY"]
[Sat Aug 29 05:11:40.744084 2026] [security2:error] [pid 1321:tid 1596] [client 20.48.250.41:25487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/6bcwiqwj.php"] [unique_id "apK-bGjCPtor9NZ-byT70wAABqc"]
[Sat Aug 29 05:11:40.748017 2026] [security2:error] [pid 1321:tid 1497] [client 20.48.160.90:31373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "apK-bGjCPtor9NZ-byT71AAABkU"]
[Sat Aug 29 05:11:40.766101 2026] [security2:error] [pid 11274:tid 11500] [client 20.48.250.41:49628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/wp-link10.php"] [unique_id "apK-bGbX5DA3XO6e_qRI_gAAAUE"]
[Sat Aug 29 05:11:40.766389 2026] [security2:error] [pid 1321:tid 1539] [client 119.30.117.55:32298] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "mlabb.net"] [uri "/xmlrpc.php"] [unique_id "apK-bGjCPtor9NZ-byT7xAAABm8"]
[Sat Aug 29 05:11:40.767371 2026] [security2:error] [pid 1321:tid 1601] [client 20.151.200.44:23609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/eval.php"] [unique_id "apK-bGjCPtor9NZ-byT71wAABqw"]
[Sat Aug 29 05:11:40.770004 2026] [security2:error] [pid 11274:tid 11564] [client 158.23.184.117:18130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/.well-known/api.php"] [unique_id "apK-bGbX5DA3XO6e_qRI_wAAAYA"]
[Sat Aug 29 05:11:40.798996 2026] [security2:error] [pid 1321:tid 1531] [client 20.52.41.200:4745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/txets.php"] [unique_id "apK-bGjCPtor9NZ-byT72AAABmc"]
[Sat Aug 29 05:11:40.813090 2026] [security2:error] [pid 11274:tid 11479] [client 68.155.159.216:64066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/index/function.php"] [unique_id "apK-bGbX5DA3XO6e_qRJAwAAASw"]
[Sat Aug 29 05:11:40.814646 2026] [security2:error] [pid 1321:tid 1536] [client 20.48.250.41:36102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/ws68.php"] [unique_id "apK-bGjCPtor9NZ-byT72QAABmw"]
[Sat Aug 29 05:11:40.816491 2026] [security2:error] [pid 11274:tid 11470] [client 4.205.62.107:61642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/wp-class.php"] [unique_id "apK-bGbX5DA3XO6e_qRJBAAAASQ"]
[Sat Aug 29 05:11:40.818219 2026] [security2:error] [pid 11274:tid 11454] [client 20.240.128.207:8266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/a.php"] [unique_id "apK-bGbX5DA3XO6e_qRJBQAAARQ"]
[Sat Aug 29 05:11:40.818711 2026] [security2:error] [pid 1321:tid 1614] [client 52.139.37.240:22469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/mac.php"] [unique_id "apK-bGjCPtor9NZ-byT72gAABrk"]
[Sat Aug 29 05:11:40.829959 2026] [security2:error] [pid 1321:tid 1522] [client 40.83.93.50:17584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/access.php"] [unique_id "apK-bGjCPtor9NZ-byT72wAABl4"]
[Sat Aug 29 05:11:40.832253 2026] [security2:error] [pid 11274:tid 11445] [client 20.48.160.90:37799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/images.php"] [unique_id "apK-bGbX5DA3XO6e_qRJCAAAAQs"]
[Sat Aug 29 05:11:40.832320 2026] [security2:error] [pid 11274:tid 11520] [client 20.48.160.90:29145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/c4.php"] [unique_id "apK-bGbX5DA3XO6e_qRJCQAAAVU"]
[Sat Aug 29 05:11:40.833834 2026] [security2:error] [pid 11274:tid 11452] [client 20.104.104.62:57456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/eval.php"] [unique_id "apK-bGbX5DA3XO6e_qRJCgAAARI"]
[Sat Aug 29 05:11:40.835722 2026] [security2:error] [pid 1321:tid 1598] [client 20.52.41.200:2683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/init.php"] [unique_id "apK-bGjCPtor9NZ-byT73AAABqk"]
[Sat Aug 29 05:11:40.846194 2026] [security2:error] [pid 11274:tid 11448] [client 40.83.93.50:10909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/alfa-rex1.php"] [unique_id "apK-bGbX5DA3XO6e_qRJDAAAAQ4"]
[Sat Aug 29 05:11:40.848165 2026] [security2:error] [pid 1321:tid 1519] [client 20.220.204.93:50612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/8.php"] [unique_id "apK-bGjCPtor9NZ-byT73QAABls"]
[Sat Aug 29 05:11:40.855398 2026] [security2:error] [pid 1321:tid 1608] [client 20.100.175.163:28434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/cc.php"] [unique_id "apK-bGjCPtor9NZ-byT73gAABrM"]
[Sat Aug 29 05:11:40.864481 2026] [security2:error] [pid 1321:tid 1603] [client 20.104.18.15:37867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/av.php"] [unique_id "apK-bGjCPtor9NZ-byT73wAABq4"]
[Sat Aug 29 05:11:40.885208 2026] [security2:error] [pid 1321:tid 1580] [client 4.205.62.107:64977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/application.config.php"] [unique_id "apK-bGjCPtor9NZ-byT74QAABpc"]
[Sat Aug 29 05:11:40.890024 2026] [security2:error] [pid 1321:tid 1574] [client 20.104.49.130:60936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/ioxi-o.php"] [unique_id "apK-bGjCPtor9NZ-byT74gAABpE"]
[Sat Aug 29 05:11:40.898137 2026] [security2:error] [pid 11274:tid 11538] [client 20.48.160.90:31422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/robots.php"] [unique_id "apK-bGbX5DA3XO6e_qRJEwAAAWc"]
[Sat Aug 29 05:11:40.902999 2026] [security2:error] [pid 11274:tid 11540] [client 52.139.37.240:31100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/rtx.php"] [unique_id "apK-bGbX5DA3XO6e_qRJFQAAAWk"]
[Sat Aug 29 05:11:40.912567 2026] [security2:error] [pid 1321:tid 1605] [client 158.23.184.117:18157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/.well-known/chosen.php"] [unique_id "apK-bGjCPtor9NZ-byT75AAABrA"]
[Sat Aug 29 05:11:40.923023 2026] [security2:error] [pid 11274:tid 11465] [client 20.48.250.41:24565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-bGbX5DA3XO6e_qRJGQAAAR8"]
[Sat Aug 29 05:11:40.925098 2026] [security2:error] [pid 11274:tid 11563] [client 158.158.54.35:23023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/theme.php"] [unique_id "apK-bGbX5DA3XO6e_qRJGgAAAX8"]
[Sat Aug 29 05:11:40.944042 2026] [security2:error] [pid 1321:tid 1612] [client 68.155.159.216:2040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK-bGjCPtor9NZ-byT75gAABrc"]
[Sat Aug 29 05:11:40.949668 2026] [security2:error] [pid 1321:tid 1520] [client 158.23.147.79:58943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/cgi-bin/index.php"] [unique_id "apK-bGjCPtor9NZ-byT76AAABlw"]
[Sat Aug 29 05:11:40.949703 2026] [security2:error] [pid 1321:tid 1491] [client 20.48.250.41:49639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/ww.php"] [unique_id "apK-bGjCPtor9NZ-byT75wAABj8"]
[Sat Aug 29 05:11:40.951670 2026] [security2:error] [pid 11274:tid 11490] [client 20.104.104.62:48467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/tajj.php"] [unique_id "apK-bGbX5DA3XO6e_qRJHgAAATc"]
[Sat Aug 29 05:11:40.971629 2026] [security2:error] [pid 11274:tid 11572] [client 20.48.160.90:37834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/ops.php"] [unique_id "apK-bGbX5DA3XO6e_qRJIQAAAYg"]
[Sat Aug 29 05:11:40.972537 2026] [security2:error] [pid 11274:tid 11539] [client 68.155.159.216:33766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.com"] [uri "/first.php"] [unique_id "apK-bGbX5DA3XO6e_qRJIgAAAWg"]
[Sat Aug 29 05:11:40.979323 2026] [security2:error] [pid 1321:tid 1604] [client 20.48.160.90:23738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/wp-tymanage.php"] [unique_id "apK-bGjCPtor9NZ-byT76wAABq8"]
[Sat Aug 29 05:11:41.002905 2026] [security2:error] [pid 11274:tid 11483] [client 4.205.62.107:6464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/test.php"] [unique_id "apK-bWbX5DA3XO6e_qRJLwAAATA"]
[Sat Aug 29 05:11:41.004547 2026] [security2:error] [pid 11274:tid 11535] [client 20.104.104.62:61815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/sao.php"] [unique_id "apK-bWbX5DA3XO6e_qRJMQAAAWQ"]
[Sat Aug 29 05:11:41.016714 2026] [security2:error] [pid 11274:tid 11487] [client 20.104.104.62:27709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "buddhistonthebattleship.managemymood.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK-bWbX5DA3XO6e_qRJNAAAATQ"]
[Sat Aug 29 05:11:41.017951 2026] [security2:error] [pid 11274:tid 11492] [client 52.139.37.240:21829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK-bWbX5DA3XO6e_qRJNgAAATk"]
[Sat Aug 29 05:11:41.020476 2026] [security2:error] [pid 1321:tid 1508] [client 65.21.113.248:53114] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.babyboomerscare.com"] [uri "/index.php"] [unique_id "apK-a2jCPtor9NZ-byT7jwAABlA"]
[Sat Aug 29 05:11:41.022889 2026] [security2:error] [pid 11274:tid 11471] [client 68.155.159.216:1971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK-bWbX5DA3XO6e_qRJOQAAASU"]
[Sat Aug 29 05:11:41.028418 2026] [security2:error] [pid 11274:tid 11449] [client 4.205.62.107:63291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/bengi.php"] [unique_id "apK-bWbX5DA3XO6e_qRJOwAAAQ8"]
[Sat Aug 29 05:11:41.034209 2026] [security2:error] [pid 11274:tid 11444] [client 20.220.204.93:15817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/0x0x.php"] [unique_id "apK-bWbX5DA3XO6e_qRJPQAAAQo"]
[Sat Aug 29 05:11:41.042755 2026] [security2:error] [pid 1321:tid 1501] [client 20.104.18.15:37839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/images.php"] [unique_id "apK-bWjCPtor9NZ-byT7-gAABkk"]
[Sat Aug 29 05:11:41.043020 2026] [security2:error] [pid 11274:tid 11524] [client 20.48.160.90:52051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/wp-content/plugins/ccx/index.php"] [unique_id "apK-bWbX5DA3XO6e_qRJQgAAAVk"]
[Sat Aug 29 05:11:41.043310 2026] [security2:error] [pid 11274:tid 11570] [client 20.196.209.81:22886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-admin/options-general.php"] [unique_id "apK-bWbX5DA3XO6e_qRJQwAAAYY"]
[Sat Aug 29 05:11:41.049662 2026] [security2:error] [pid 1321:tid 1513] [client 158.23.147.79:24531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK-bWjCPtor9NZ-byT7-wAABlU"]
[Sat Aug 29 05:11:41.053604 2026] [security2:error] [pid 11274:tid 11537] [client 158.23.184.117:18330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/.well-known/config.php"] [unique_id "apK-bWbX5DA3XO6e_qRJSAAAAWY"]
[Sat Aug 29 05:11:41.054839 2026] [security2:error] [pid 11274:tid 11334] [remote 216.73.217.8:11734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 8.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo-store.sortthru.com"] [uri "/outdoor-signs/"] [unique_id "apK-bWbX5DA3XO6e_qRJSQABKxU"]
[Sat Aug 29 05:11:41.057781 2026] [core:error] [pid 1321:tid 1526] [client 20.100.175.163:23190] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:41.057796 2026] [core:error] [pid 1321:tid 1526] [client 20.100.175.163:23190] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:41.087261 2026] [security2:error] [pid 11274:tid 11445] [client 158.23.147.79:49829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/wp-content/themes/too.php"] [unique_id "apK-bWbX5DA3XO6e_qRJTQAAAQs"]
[Sat Aug 29 05:11:41.097392 2026] [security2:error] [pid 11274:tid 11546] [client 52.139.37.240:31541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/update/da222.php"] [unique_id "apK-bWbX5DA3XO6e_qRJTwAAAW4"]
[Sat Aug 29 05:11:41.105336 2026] [security2:error] [pid 11274:tid 11451] [client 158.158.54.35:19341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/.trash7206/index.php"] [unique_id "apK-bWbX5DA3XO6e_qRJUAAAARE"]
[Sat Aug 29 05:11:41.106718 2026] [security2:error] [pid 11274:tid 11450] [client 158.23.147.79:62693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK-bWbX5DA3XO6e_qRJUQAAARA"]
[Sat Aug 29 05:11:41.111263 2026] [security2:error] [pid 1321:tid 1490] [client 20.48.160.90:37827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK-bWjCPtor9NZ-byT7_wAABj4"]
[Sat Aug 29 05:11:41.115192 2026] [security2:error] [pid 1321:tid 1525] [client 20.48.160.90:23709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/ajfto.php"] [unique_id "apK-bWjCPtor9NZ-byT8AQAABmE"]
[Sat Aug 29 05:11:41.151148 2026] [security2:error] [pid 1321:tid 1577] [client 158.23.147.79:64470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/wp-admin/about.php"] [unique_id "apK-bWjCPtor9NZ-byT8AwAABpQ"]
[Sat Aug 29 05:11:41.156490 2026] [security2:error] [pid 1321:tid 1595] [client 20.104.104.62:57464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/uuu.php"] [unique_id "apK-bWjCPtor9NZ-byT8BQAABqY"]
[Sat Aug 29 05:11:41.170658 2026] [security2:error] [pid 11274:tid 11490] [client 20.48.160.90:31448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/wp-admin/css/colors/maro.php"] [unique_id "apK-bWbX5DA3XO6e_qRJWgAAATc"]
[Sat Aug 29 05:11:41.175853 2026] [security2:error] [pid 11274:tid 11493] [client 20.104.104.62:20716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/srx.php"] [unique_id "apK-bWbX5DA3XO6e_qRJXAAAATo"]
[Sat Aug 29 05:11:41.196506 2026] [security2:error] [pid 11274:tid 11551] [client 20.151.200.44:62263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/sao.php"] [unique_id "apK-bWbX5DA3XO6e_qRJYAAAAXM"]
[Sat Aug 29 05:11:41.196928 2026] [security2:error] [pid 1321:tid 1543] [client 158.23.184.117:18328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/.well-known/core.php"] [unique_id "apK-bWjCPtor9NZ-byT8BgAABnM"]
[Sat Aug 29 05:11:41.198214 2026] [security2:error] [pid 11274:tid 11535] [client 20.220.204.93:18937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/166.php"] [unique_id "apK-bWbX5DA3XO6e_qRJYQAAAWQ"]
[Sat Aug 29 05:11:41.203870 2026] [security2:error] [pid 11274:tid 11534] [client 20.240.128.207:2065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/inputs.php"] [unique_id "apK-bWbX5DA3XO6e_qRJZAAAAWM"]
[Sat Aug 29 05:11:41.213670 2026] [security2:error] [pid 1321:tid 1588] [client 52.139.37.240:22473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK-bWjCPtor9NZ-byT8BwAABp8"]
[Sat Aug 29 05:11:41.213673 2026] [security2:error] [pid 11274:tid 11565] [client 20.104.104.62:27687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "buddhistonthebattleship.managemymood.com"] [uri "/wp-links.php/wp-content/plugins/wp-content/uploa/"] [unique_id "apK-bWbX5DA3XO6e_qRJZgAAAYE"]
[Sat Aug 29 05:11:41.221778 2026] [security2:error] [pid 11274:tid 11536] [client 68.155.159.216:49128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/NewFile.php/"] [unique_id "apK-bWbX5DA3XO6e_qRJaQAAAWU"]
[Sat Aug 29 05:11:41.229092 2026] [security2:error] [pid 11274:tid 11505] [client 40.83.93.50:8663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/room.php"] [unique_id "apK-bWbX5DA3XO6e_qRJbAAAAUY"]
[Sat Aug 29 05:11:41.238032 2026] [security2:error] [pid 1321:tid 1516] [client 158.23.147.79:44513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK-bWjCPtor9NZ-byT8CAAABlg"]
[Sat Aug 29 05:11:41.245857 2026] [security2:error] [pid 11274:tid 11527] [client 20.48.160.90:37883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK-bWbX5DA3XO6e_qRJbgAAAVw"]
[Sat Aug 29 05:11:41.251116 2026] [security2:error] [pid 11274:tid 11498] [client 20.104.104.62:48664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/grsiuk.php"] [unique_id "apK-bWbX5DA3XO6e_qRJcQAAAT8"]
[Sat Aug 29 05:11:41.260447 2026] [security2:error] [pid 1321:tid 1497] [client 158.158.54.35:14618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wk/index.php"] [unique_id "apK-bWjCPtor9NZ-byT8CQAABkU"]
[Sat Aug 29 05:11:41.260453 2026] [core:error] [pid 11274:tid 11553] [client 20.52.41.200:4752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:41.260470 2026] [core:error] [pid 11274:tid 11553] [client 20.52.41.200:4752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:41.263418 2026] [security2:error] [pid 11274:tid 11519] [client 20.104.18.15:37834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/ops.php"] [unique_id "apK-bWbX5DA3XO6e_qRJdAAAAVQ"]
[Sat Aug 29 05:11:41.269623 2026] [security2:error] [pid 1321:tid 1614] [client 158.158.54.35:27952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-content/admin.php"] [unique_id "apK-bWjCPtor9NZ-byT8CgAABrk"]
[Sat Aug 29 05:11:41.270022 2026] [security2:error] [pid 11274:tid 11467] [client 20.48.160.90:50346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/wp_KwIW0U5F.php"] [unique_id "apK-bWbX5DA3XO6e_qRJdQAAASE"]
[Sat Aug 29 05:11:41.279280 2026] [security2:error] [pid 11274:tid 11482] [client 4.205.62.107:59117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/lmfi2.php"] [unique_id "apK-bWbX5DA3XO6e_qRJeAAAAS8"]
[Sat Aug 29 05:11:41.285980 2026] [security2:error] [pid 11274:tid 11469] [client 20.52.41.200:2829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "apK-bWbX5DA3XO6e_qRJeQAAASM"]
[Sat Aug 29 05:11:41.299987 2026] [security2:error] [pid 11274:tid 11538] [client 40.83.93.50:6662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/classsmtps.php"] [unique_id "apK-bWbX5DA3XO6e_qRJfgAAAWc"]
[Sat Aug 29 05:11:41.304632 2026] [security2:error] [pid 11274:tid 11496] [client 20.48.160.90:31454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/wp-admin/css/colors/coffee/marijuana.php"] [unique_id "apK-bWbX5DA3XO6e_qRJgAAAAT0"]
[Sat Aug 29 05:11:41.314675 2026] [security2:error] [pid 11274:tid 11545] [client 68.155.159.216:62788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/atomlib.php"] [unique_id "apK-bWbX5DA3XO6e_qRJgQAAAW0"]
[Sat Aug 29 05:11:41.317229 2026] [security2:error] [pid 1321:tid 1522] [client 20.104.104.62:42066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/private.php"] [unique_id "apK-bWjCPtor9NZ-byT8CwAABl4"]
[Sat Aug 29 05:11:41.319462 2026] [security2:error] [pid 1321:tid 1601] [client 20.240.128.207:20029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/u.php"] [unique_id "apK-bWjCPtor9NZ-byT8DAAABqw"]
[Sat Aug 29 05:11:41.339190 2026] [security2:error] [pid 11274:tid 11466] [client 40.83.93.50:3979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/headerg.php"] [unique_id "apK-bWbX5DA3XO6e_qRJhwAAASA"]
[Sat Aug 29 05:11:41.342798 2026] [security2:error] [pid 11274:tid 11530] [client 68.155.159.216:38700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/login.php"] [unique_id "apK-bWbX5DA3XO6e_qRJiAAAAV8"]
[Sat Aug 29 05:11:41.345718 2026] [security2:error] [pid 11274:tid 11511] [client 158.23.184.117:18162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/.well-known/data.php"] [unique_id "apK-bWbX5DA3XO6e_qRJiQAAAUw"]
[Sat Aug 29 05:11:41.354598 2026] [security2:error] [pid 11274:tid 11456] [client 20.220.204.93:17244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/h2a2ck.php"] [unique_id "apK-bWbX5DA3XO6e_qRJigAAARY"]
[Sat Aug 29 05:11:41.357220 2026] [security2:error] [pid 1321:tid 1533] [client 158.23.147.79:43273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK-bWjCPtor9NZ-byT8DQAABmk"]
[Sat Aug 29 05:11:41.362007 2026] [security2:error] [pid 11274:tid 11518] [client 20.100.175.163:24987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/files/index.php"] [unique_id "apK-bWbX5DA3XO6e_qRJjAAAAVM"]
[Sat Aug 29 05:11:41.365111 2026] [security2:error] [pid 11274:tid 11492] [client 158.158.54.35:12383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/classwithtostring.php"] [unique_id "apK-bWbX5DA3XO6e_qRJjQAAATk"]
[Sat Aug 29 05:11:41.368313 2026] [security2:error] [pid 11274:tid 11499] [client 195.178.110.101:23634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "naturalkneads.com"] [uri "/wp/index.php"] [unique_id "apK-bWbX5DA3XO6e_qRJjgAAAUA"], referer: https://naturalkneads.com/wp/wp-admin/
[Sat Aug 29 05:11:41.396769 2026] [security2:error] [pid 1321:tid 1499] [client 20.48.160.90:61673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/about.php"] [unique_id "apK-bWjCPtor9NZ-byT8EwAABkc"]
[Sat Aug 29 05:11:41.404844 2026] [security2:error] [pid 1321:tid 1603] [client 20.48.160.90:23717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/wp_xiPu52Ut.php"] [unique_id "apK-bWjCPtor9NZ-byT8FAAABq4"]
[Sat Aug 29 05:11:41.408075 2026] [security2:error] [pid 11274:tid 11486] [client 52.139.37.240:21870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/zafir1.php"] [unique_id "apK-bWbX5DA3XO6e_qRJmAAAATM"]
[Sat Aug 29 05:11:41.436030 2026] [security2:error] [pid 11274:tid 11515] [client 20.104.18.15:37855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/coffexium.php"] [unique_id "apK-bWbX5DA3XO6e_qRJnAAAAVA"]
[Sat Aug 29 05:11:41.440145 2026] [security2:error] [pid 11274:tid 11520] [client 158.23.147.79:58922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-admin/user/index.php"] [unique_id "apK-bWbX5DA3XO6e_qRJnQAAAVU"]
[Sat Aug 29 05:11:41.441835 2026] [security2:error] [pid 11274:tid 11558] [client 20.196.209.81:8842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-admin/options.php"] [unique_id "apK-bWbX5DA3XO6e_qRJoQAAAXo"]
[Sat Aug 29 05:11:41.448968 2026] [security2:error] [pid 11274:tid 11452] [client 20.48.160.90:31418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/wp-admin/css/colors/coffee/mari.php"] [unique_id "apK-bWbX5DA3XO6e_qRJowAAARI"]
[Sat Aug 29 05:11:41.452859 2026] [security2:error] [pid 11274:tid 11464] [client 43.173.175.15:42970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.175.173.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewtopic.php"] [unique_id "apK-bWbX5DA3XO6e_qRJngAAAR4"]
[Sat Aug 29 05:11:41.461274 2026] [security2:error] [pid 11274:tid 11543] [client 20.104.104.62:52341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/lfi.php"] [unique_id "apK-bWbX5DA3XO6e_qRJpAAAAWs"]
[Sat Aug 29 05:11:41.469324 2026] [security2:error] [pid 11274:tid 11450] [client 68.155.159.216:56773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/chosen.php"] [unique_id "apK-bWbX5DA3XO6e_qRJpgAAARA"]
[Sat Aug 29 05:11:41.487145 2026] [security2:error] [pid 1321:tid 1615] [client 20.104.104.62:64708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-content/plugins/owfsmac/mar.php"] [unique_id "apK-bWjCPtor9NZ-byT8FgAABro"]
[Sat Aug 29 05:11:41.490130 2026] [security2:error] [pid 11274:tid 11445] [client 158.23.184.117:18357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/.well-known/db-status.php"] [unique_id "apK-bWbX5DA3XO6e_qRJqAAAAQs"]
[Sat Aug 29 05:11:41.493733 2026] [security2:error] [pid 11274:tid 11533] [client 43.173.173.5:35068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 5.173.173.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewtopic.php"] [unique_id "apK-bWbX5DA3XO6e_qRJqQAAAWI"]
[Sat Aug 29 05:11:41.500148 2026] [security2:error] [pid 11274:tid 11571] [client 43.173.182.133:54002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 133.182.173.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewtopic.php"] [unique_id "apK-bWbX5DA3XO6e_qRJrgAAAYc"]
[Sat Aug 29 05:11:41.507090 2026] [security2:error] [pid 11274:tid 11459] [client 43.173.182.168:53866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.182.173.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewforum.php"] [unique_id "apK-bWbX5DA3XO6e_qRJpQAAARk"]
[Sat Aug 29 05:11:41.532237 2026] [security2:error] [pid 11274:tid 11505] [client 20.48.160.90:61636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/admin.php/admin.php"] [unique_id "apK-bWbX5DA3XO6e_qRJswAAAUY"]
[Sat Aug 29 05:11:41.536522 2026] [security2:error] [pid 11274:tid 11498] [client 20.104.104.62:48504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/ahy66.php"] [unique_id "apK-bWbX5DA3XO6e_qRJtAAAAT8"]
[Sat Aug 29 05:11:41.554683 2026] [core:error] [pid 11274:tid 11476] [client 20.100.175.163:23208] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:41.554700 2026] [core:error] [pid 11274:tid 11476] [client 20.100.175.163:23208] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:41.556436 2026] [security2:error] [pid 11274:tid 11538] [client 43.173.182.22:54674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.182.173.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewtopic.php"] [unique_id "apK-bWbX5DA3XO6e_qRJtgAAAWc"]
[Sat Aug 29 05:11:41.568409 2026] [security2:error] [pid 11274:tid 11471] [client 4.205.62.107:32572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/channels.php"] [unique_id "apK-bWbX5DA3XO6e_qRJvAAAASU"]
[Sat Aug 29 05:11:41.575437 2026] [security2:error] [pid 11274:tid 11469] [client 20.220.204.93:18937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/error_log.php"] [unique_id "apK-bWbX5DA3XO6e_qRJvQAAASM"]
[Sat Aug 29 05:11:41.580341 2026] [security2:error] [pid 11274:tid 11539] [client 52.139.37.240:31526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/wp-admin/min.php"] [unique_id "apK-bWbX5DA3XO6e_qRJvwAAAWg"]
[Sat Aug 29 05:11:41.591912 2026] [security2:error] [pid 11274:tid 11545] [client 20.48.160.90:52074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/wp-includes/images/crystal/option.php"] [unique_id "apK-bWbX5DA3XO6e_qRJwAAAAW0"]
[Sat Aug 29 05:11:41.591954 2026] [security2:error] [pid 11274:tid 11517] [client 20.104.49.130:55151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/chosen.php"] [unique_id "apK-bWbX5DA3XO6e_qRJwQAAAVI"]
[Sat Aug 29 05:11:41.594120 2026] [security2:error] [pid 11274:tid 11559] [client 65.21.113.248:39128] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.babyboomerscare.com"] [uri "/index.php"] [unique_id "apK-bWbX5DA3XO6e_qRJsAAAAXs"]
[Sat Aug 29 05:11:41.599030 2026] [security2:error] [pid 1321:tid 1592] [client 20.48.160.90:29125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/wp_n5VD7XDh.php"] [unique_id "apK-bWjCPtor9NZ-byT8GAAABqM"]
[Sat Aug 29 05:11:41.600695 2026] [security2:error] [pid 11274:tid 11506] [client 20.151.200.44:63606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/uuu.php"] [unique_id "apK-bWbX5DA3XO6e_qRJwwAAAUc"]
[Sat Aug 29 05:11:41.602649 2026] [security2:error] [pid 11274:tid 11523] [client 52.139.37.240:21886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/abc.php"] [unique_id "apK-bWbX5DA3XO6e_qRJxAAAAVg"]
[Sat Aug 29 05:11:41.632418 2026] [security2:error] [pid 11274:tid 11569] [client 158.23.184.117:17880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/.well-known/f35.php"] [unique_id "apK-bWbX5DA3XO6e_qRJyAAAAYU"]
[Sat Aug 29 05:11:41.634084 2026] [security2:error] [pid 1321:tid 1609] [client 20.104.104.62:7114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/quoys.php"] [unique_id "apK-bWjCPtor9NZ-byT8GQAABrQ"]
[Sat Aug 29 05:11:41.635990 2026] [security2:error] [pid 1321:tid 1501] [client 68.155.159.216:56799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/lv.php"] [unique_id "apK-bWjCPtor9NZ-byT8GgAABkk"]
[Sat Aug 29 05:11:41.640577 2026] [security2:error] [pid 11274:tid 11414] [remote 93.123.109.228:33324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/config.php"] [unique_id "apK-bWbX5DA3XO6e_qRJyQABImQ"]
[Sat Aug 29 05:11:41.641762 2026] [security2:error] [pid 1321:tid 1521] [client 20.104.18.15:37844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/BDKR28WP.php"] [unique_id "apK-bWjCPtor9NZ-byT8GwAABl0"]
[Sat Aug 29 05:11:41.670438 2026] [security2:error] [pid 11274:tid 11477] [client 20.104.104.62:64717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/tersembunyi.php"] [unique_id "apK-bWbX5DA3XO6e_qRJzAAAASs"]
[Sat Aug 29 05:11:41.670495 2026] [security2:error] [pid 11274:tid 11530] [client 20.48.160.90:61688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/media.php"] [unique_id "apK-bWbX5DA3XO6e_qRJzQAAAV8"]
[Sat Aug 29 05:11:41.675015 2026] [security2:error] [pid 1321:tid 1518] [client 60.243.207.176:62429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK-bWjCPtor9NZ-byT8HwAABlo"]
[Sat Aug 29 05:11:41.675790 2026] [security2:error] [pid 1321:tid 1518] [client 60.243.207.176:62429] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK-bWjCPtor9NZ-byT8HwAABlo"]
[Sat Aug 29 05:11:41.688238 2026] [security2:error] [pid 11274:tid 11492] [client 20.151.200.44:27284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/super.php"] [unique_id "apK-bWbX5DA3XO6e_qRJ0QAAATk"]
[Sat Aug 29 05:11:41.701870 2026] [security2:error] [pid 1321:tid 1549] [client 158.158.54.35:19336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/admin.php"] [unique_id "apK-bWjCPtor9NZ-byT8IgAABng"]
[Sat Aug 29 05:11:41.706183 2026] [security2:error] [pid 11274:tid 11570] [client 20.240.128.207:2060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/alfa.php"] [unique_id "apK-bWbX5DA3XO6e_qRJ1AAAAYY"]
[Sat Aug 29 05:11:41.707798 2026] [security2:error] [pid 1321:tid 1509] [client 40.83.93.50:3448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/class-wp-cmd.php"] [unique_id "apK-bWjCPtor9NZ-byT8IwAABlE"]
[Sat Aug 29 05:11:41.713245 2026] [core:error] [pid 1321:tid 1604] [client 20.52.41.200:5150] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:41.713265 2026] [core:error] [pid 1321:tid 1604] [client 20.52.41.200:5150] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:41.714058 2026] [security2:error] [pid 1321:tid 1559] [client 158.158.54.35:12403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-configs.php"] [unique_id "apK-bWjCPtor9NZ-byT8JQAABoI"]
[Sat Aug 29 05:11:41.726420 2026] [security2:error] [pid 11274:tid 11514] [client 20.220.204.93:22035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/403.php"] [unique_id "apK-bWbX5DA3XO6e_qRJ1wAAAU8"]
[Sat Aug 29 05:11:41.739701 2026] [security2:error] [pid 11274:tid 11481] [client 20.48.160.90:28774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/wp-mini.php"] [unique_id "apK-bWbX5DA3XO6e_qRJ3gAAAS4"]
[Sat Aug 29 05:11:41.742893 2026] [core:error] [pid 11274:tid 11496] [client 20.52.41.200:2643] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:41.742908 2026] [core:error] [pid 11274:tid 11496] [client 20.52.41.200:2643] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:41.771661 2026] [security2:error] [pid 1321:tid 1587] [client 20.48.160.90:31368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/wp-includes/pomo/xxx.php"] [unique_id "apK-bWjCPtor9NZ-byT8JwAABp4"]
[Sat Aug 29 05:11:41.774428 2026] [security2:error] [pid 11274:tid 11503] [client 158.23.184.117:18163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK-bWbX5DA3XO6e_qRJ5AAAAUQ"]
[Sat Aug 29 05:11:41.777745 2026] [security2:error] [pid 11274:tid 11543] [client 20.104.104.62:57418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/vbbn.php"] [unique_id "apK-bWbX5DA3XO6e_qRJ5QAAAWs"]
[Sat Aug 29 05:11:41.789706 2026] [security2:error] [pid 11274:tid 11541] [client 52.139.37.240:31057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/wp-admin/wp-fileesx-449.php"] [unique_id "apK-bWbX5DA3XO6e_qRJ6AAAAWo"]
[Sat Aug 29 05:11:41.790916 2026] [security2:error] [pid 1321:tid 1593] [client 40.83.93.50:6708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/contentloader1.php"] [unique_id "apK-bWjCPtor9NZ-byT8KAAABqQ"]
[Sat Aug 29 05:11:41.792353 2026] [security2:error] [pid 11274:tid 11442] [remote 93.123.109.228:33324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/config/aws.php"] [unique_id "apK-bWbX5DA3XO6e_qRJ6QABIn8"]
[Sat Aug 29 05:11:41.796428 2026] [security2:error] [pid 1321:tid 1610] [client 52.139.37.240:22467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/c1.php"] [unique_id "apK-bWjCPtor9NZ-byT8KQAABrU"]
[Sat Aug 29 05:11:41.807739 2026] [security2:error] [pid 11274:tid 11513] [client 20.240.128.207:8278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/r.php"] [unique_id "apK-bWbX5DA3XO6e_qRJ7QAAAU4"]
[Sat Aug 29 05:11:41.810315 2026] [security2:error] [pid 11274:tid 11540] [client 20.104.18.15:37773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/sf.php"] [unique_id "apK-bWbX5DA3XO6e_qRJ7gAAAWk"]
[Sat Aug 29 05:11:41.817278 2026] [security2:error] [pid 11274:tid 11537] [client 158.158.54.35:32229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/news.php"] [unique_id "apK-bWbX5DA3XO6e_qRJ8AAAAWY"]
[Sat Aug 29 05:11:41.817321 2026] [security2:error] [pid 11274:tid 11336] [remote 93.123.109.228:33324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/config/config.inc.php"] [unique_id "apK-bWbX5DA3XO6e_qRJ7wABIhc"]
[Sat Aug 29 05:11:41.835491 2026] [security2:error] [pid 11274:tid 11490] [client 20.48.160.90:61694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/mac.php"] [unique_id "apK-bWbX5DA3XO6e_qRJ8wAAATc"]
[Sat Aug 29 05:11:41.837036 2026] [security2:error] [pid 1321:tid 1494] [client 20.196.209.81:8868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-admin/panel.php"] [unique_id "apK-bWjCPtor9NZ-byT8KgAABkI"]
[Sat Aug 29 05:11:41.839497 2026] [security2:error] [pid 1321:tid 1488] [client 158.23.147.79:14329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/about/function.php"] [unique_id "apK-bWjCPtor9NZ-byT8KwAABjw"]
[Sat Aug 29 05:11:41.842047 2026] [security2:error] [pid 11274:tid 11429] [remote 93.123.109.228:33324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/config/config.php"] [unique_id "apK-bWbX5DA3XO6e_qRJ9AABInM"]
[Sat Aug 29 05:11:41.855598 2026] [security2:error] [pid 11274:tid 11499] [client 20.100.175.163:30383] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.rm64.com"] [uri "/1.php7"] [unique_id "apK-bWbX5DA3XO6e_qRJ9gAAAUA"]
[Sat Aug 29 05:11:41.855682 2026] [security2:error] [pid 11274:tid 11499] [client 20.100.175.163:30383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/1.php7"] [unique_id "apK-bWbX5DA3XO6e_qRJ9gAAAUA"]
[Sat Aug 29 05:11:41.884116 2026] [security2:error] [pid 11274:tid 11476] [client 20.48.160.90:29147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/xmini4.php"] [unique_id "apK-bWbX5DA3XO6e_qRJ_QAAASo"]
[Sat Aug 29 05:11:41.889516 2026] [security2:error] [pid 11274:tid 11529] [client 20.151.200.44:22189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/h02ugyh.php"] [unique_id "apK-bWbX5DA3XO6e_qRJ_gAAAV4"]
[Sat Aug 29 05:11:41.903247 2026] [security2:error] [pid 11274:tid 11469] [client 20.48.160.90:31400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/650.php"] [unique_id "apK-bWbX5DA3XO6e_qRKBAAAASM"]
[Sat Aug 29 05:11:41.915687 2026] [security2:error] [pid 11274:tid 11324] [remote 93.123.109.228:33324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/config/env.php"] [unique_id "apK-bWbX5DA3XO6e_qRKBQABSQs"]
[Sat Aug 29 05:11:41.922481 2026] [security2:error] [pid 11274:tid 11521] [client 158.23.184.117:64815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/.well-known/home.php"] [unique_id "apK-bWbX5DA3XO6e_qRKBgAAAVY"]
[Sat Aug 29 05:11:41.939352 2026] [security2:error] [pid 11274:tid 11441] [remote 93.123.109.228:33324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/config/module.config.php"] [unique_id "apK-bWbX5DA3XO6e_qRKCgABSX4"]
[Sat Aug 29 05:11:41.941964 2026] [core:error] [pid 11274:tid 11539] [client 158.23.184.117:42801] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:41.941985 2026] [core:error] [pid 11274:tid 11539] [client 158.23.184.117:42801] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:41.944220 2026] [security2:error] [pid 1321:tid 1512] [client 20.220.204.93:50617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/cytyr.php"] [unique_id "apK-bWjCPtor9NZ-byT8LQAABlQ"]
[Sat Aug 29 05:11:41.946996 2026] [security2:error] [pid 1321:tid 1581] [client 68.155.159.216:7128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/.well-known/content.php"] [unique_id "apK-bWjCPtor9NZ-byT8LgAABpg"]
[Sat Aug 29 05:11:41.948126 2026] [security2:error] [pid 11274:tid 11435] [remote 93.123.109.228:33324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/config/nexmo.php"] [unique_id "apK-bWbX5DA3XO6e_qRKCwABSXg"]
[Sat Aug 29 05:11:41.953199 2026] [security2:error] [pid 1321:tid 1556] [client 40.83.93.50:10040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/meta.php"] [unique_id "apK-bWjCPtor9NZ-byT8LwAABn8"]
[Sat Aug 29 05:11:41.954941 2026] [security2:error] [pid 11274:tid 11517] [client 68.155.159.216:14272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK-bWbX5DA3XO6e_qRKDAAAAVI"]
[Sat Aug 29 05:11:41.957619 2026] [security2:error] [pid 1321:tid 1543] [client 20.104.18.15:37872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/k.php"] [unique_id "apK-bWjCPtor9NZ-byT8MAAABnM"]
[Sat Aug 29 05:11:41.959610 2026] [security2:error] [pid 11274:tid 11494] [client 4.205.62.107:63960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/database.php"] [unique_id "apK-bWbX5DA3XO6e_qRKDQAAATs"]
[Sat Aug 29 05:11:41.965048 2026] [security2:error] [pid 1321:tid 1531] [client 20.104.104.62:42080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/rfi.php"] [unique_id "apK-bWjCPtor9NZ-byT8MgAABmc"]
[Sat Aug 29 05:11:41.981494 2026] [security2:error] [pid 1321:tid 1516] [client 20.48.160.90:37806] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.beginnergolfguide.net"] [uri "/1.php"] [unique_id "apK-bWjCPtor9NZ-byT8MwAABlg"]
[Sat Aug 29 05:11:41.981622 2026] [security2:error] [pid 1321:tid 1516] [client 20.48.160.90:37806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/1.php"] [unique_id "apK-bWjCPtor9NZ-byT8MwAABlg"]
[Sat Aug 29 05:11:41.989188 2026] [security2:error] [pid 1321:tid 1595] [client 52.139.37.240:21839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/index.php/feed/atom/"] [unique_id "apK-bWjCPtor9NZ-byT8NAAABqY"]
[Sat Aug 29 05:11:41.989220 2026] [security2:error] [pid 11274:tid 11475] [client 52.139.37.240:31520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/wp-content/themes/min.php"] [unique_id "apK-bWbX5DA3XO6e_qRKEgAAASk"]
[Sat Aug 29 05:11:41.990454 2026] [security2:error] [pid 11274:tid 11335] [remote 93.123.109.228:33324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/config/stripe.php"] [unique_id "apK-bWbX5DA3XO6e_qRKEwABSRY"]
[Sat Aug 29 05:11:41.991916 2026] [security2:error] [pid 11274:tid 11560] [client 68.155.159.216:23371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/mah.php"] [unique_id "apK-bWbX5DA3XO6e_qRKFAAAAXw"]
[Sat Aug 29 05:11:42.023855 2026] [security2:error] [pid 11274:tid 11504] [client 4.205.62.107:64926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/xp.php"] [unique_id "apK-bmbX5DA3XO6e_qRKGAAAAUU"]
[Sat Aug 29 05:11:42.024594 2026] [security2:error] [pid 11274:tid 11489] [client 20.48.160.90:23792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/reop3.php"] [unique_id "apK-bmbX5DA3XO6e_qRKGQAAATY"]
[Sat Aug 29 05:11:42.036682 2026] [security2:error] [pid 1321:tid 1601] [client 20.104.49.130:46197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "connectdotz.com"] [uri "/ops.php"] [unique_id "apK-bmjCPtor9NZ-byT8NQAABqw"]
[Sat Aug 29 05:11:42.051284 2026] [security2:error] [pid 1321:tid 1510] [client 20.48.160.90:52003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/nakrip.php"] [unique_id "apK-bmjCPtor9NZ-byT8NgAABlI"]
[Sat Aug 29 05:11:42.053481 2026] [security2:error] [pid 11274:tid 11538] [client 20.100.175.163:23867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-content/file.php"] [unique_id "apK-bmbX5DA3XO6e_qRKGgAAAWc"]
[Sat Aug 29 05:11:42.055219 2026] [security2:error] [pid 11274:tid 11507] [client 158.23.147.79:62833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK-bmbX5DA3XO6e_qRKHAAAAUg"]
[Sat Aug 29 05:11:42.066334 2026] [security2:error] [pid 11274:tid 11472] [client 158.23.184.117:64806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/.well-known/index.php"] [unique_id "apK-bmbX5DA3XO6e_qRKHwAAASY"]
[Sat Aug 29 05:11:42.077199 2026] [security2:error] [pid 1321:tid 1563] [client 61.9.8.95:11727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 95.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK-bmjCPtor9NZ-byT8NwAABoY"]
[Sat Aug 29 05:11:42.077328 2026] [security2:error] [pid 1321:tid 1563] [client 61.9.8.95:11727] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK-bmjCPtor9NZ-byT8NwAABoY"]
[Sat Aug 29 05:11:42.087962 2026] [security2:error] [pid 1321:tid 1566] [client 158.23.184.117:53947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/wk/admin.php"] [unique_id "apK-bmjCPtor9NZ-byT8OwAABok"]
[Sat Aug 29 05:11:42.111838 2026] [security2:error] [pid 11274:tid 11481] [client 20.220.204.93:18895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/galer.php"] [unique_id "apK-bmbX5DA3XO6e_qRKKAAAAS4"]
[Sat Aug 29 05:11:42.115993 2026] [security2:error] [pid 11274:tid 11496] [client 20.104.104.62:20851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/lab.php"] [unique_id "apK-bmbX5DA3XO6e_qRKKQAAAT0"]
[Sat Aug 29 05:11:42.117241 2026] [security2:error] [pid 11274:tid 11552] [client 20.48.160.90:37787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/classwithtostring.php"] [unique_id "apK-bmbX5DA3XO6e_qRKKwAAAXQ"]
[Sat Aug 29 05:11:42.127292 2026] [security2:error] [pid 11274:tid 11448] [client 68.155.159.216:2037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/themes.php"] [unique_id "apK-bmbX5DA3XO6e_qRKLAAAAQ4"]
[Sat Aug 29 05:11:42.142652 2026] [security2:error] [pid 11274:tid 11503] [client 4.205.62.107:6898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/cloud.php"] [unique_id "apK-bmbX5DA3XO6e_qRKMQAAAUQ"]
[Sat Aug 29 05:11:42.150331 2026] [security2:error] [pid 1321:tid 1614] [client 158.158.54.35:14765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/php8.php"] [unique_id "apK-bmjCPtor9NZ-byT8PQAABrk"]
[Sat Aug 29 05:11:42.153808 2026] [security2:error] [pid 11274:tid 11543] [client 158.23.147.79:24457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apK-bmbX5DA3XO6e_qRKMwAAAWs"]
[Sat Aug 29 05:11:42.157690 2026] [security2:error] [pid 11274:tid 11477] [client 158.158.54.35:29451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-includes/index.php"] [unique_id "apK-bmbX5DA3XO6e_qRKNAAAASs"]
[Sat Aug 29 05:11:42.160144 2026] [security2:error] [pid 11274:tid 11566] [client 20.104.104.62:40032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/tajj.php"] [unique_id "apK-bmbX5DA3XO6e_qRKNQAAAYI"]
[Sat Aug 29 05:11:42.163858 2026] [security2:error] [pid 1321:tid 1528] [client 20.52.41.200:4756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-content/themes/about.php"] [unique_id "apK-bmjCPtor9NZ-byT8PgAABmQ"]
[Sat Aug 29 05:11:42.165753 2026] [security2:error] [pid 1321:tid 1520] [client 20.48.160.90:28797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/wp-mail.php"] [unique_id "apK-bmjCPtor9NZ-byT8PwAABlw"]
[Sat Aug 29 05:11:42.167005 2026] [security2:error] [pid 11274:tid 11541] [client 4.205.62.107:63019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/i.php"] [unique_id "apK-bmbX5DA3XO6e_qRKOAAAAWo"]
[Sat Aug 29 05:11:42.183610 2026] [security2:error] [pid 11274:tid 11540] [client 20.48.160.90:31407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/wp-includes/interactivity-api/flower.php"] [unique_id "apK-bmbX5DA3XO6e_qRKOgAAAWk"]
[Sat Aug 29 05:11:42.184073 2026] [security2:error] [pid 1321:tid 1597] [client 52.139.37.240:31664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/wp-content/themes/x/bypass.php"] [unique_id "apK-bmjCPtor9NZ-byT8QQAABqg"]
[Sat Aug 29 05:11:42.184778 2026] [security2:error] [pid 11274:tid 11546] [client 52.139.37.240:22483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/root.php"] [unique_id "apK-bmbX5DA3XO6e_qRKOwAAAW4"]
[Sat Aug 29 05:11:42.189832 2026] [core:error] [pid 11274:tid 11497] [client 20.52.41.200:2189] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:42.189848 2026] [core:error] [pid 11274:tid 11497] [client 20.52.41.200:2189] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:42.194706 2026] [security2:error] [pid 1321:tid 1522] [client 20.240.128.207:7497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/403.php"] [unique_id "apK-bmjCPtor9NZ-byT8QwAABl4"]
[Sat Aug 29 05:11:42.198280 2026] [security2:error] [pid 11274:tid 11512] [client 40.83.93.50:3410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/disagreed.php"] [unique_id "apK-bmbX5DA3XO6e_qRKPgAAAU0"]
[Sat Aug 29 05:11:42.200840 2026] [security2:error] [pid 1321:tid 1592] [client 20.151.200.44:27279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/lufix1.php"] [unique_id "apK-bmjCPtor9NZ-byT8RAAABqM"]
[Sat Aug 29 05:11:42.206974 2026] [security2:error] [pid 11274:tid 11509] [client 20.104.18.15:37827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/82.php"] [unique_id "apK-bmbX5DA3XO6e_qRKQAAAAUo"]
[Sat Aug 29 05:11:42.210528 2026] [security2:error] [pid 1321:tid 1607] [client 197.232.63.170:62883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 170.63.232.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK-bmjCPtor9NZ-byT8RQAABrI"]
[Sat Aug 29 05:11:42.210657 2026] [security2:error] [pid 1321:tid 1607] [client 197.232.63.170:62883] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK-bmjCPtor9NZ-byT8RQAABrI"]
[Sat Aug 29 05:11:42.211435 2026] [security2:error] [pid 1321:tid 1615] [client 158.23.184.117:18354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/.well-known/login.php"] [unique_id "apK-bmjCPtor9NZ-byT8RgAABro"]
[Sat Aug 29 05:11:42.213769 2026] [security2:error] [pid 11274:tid 11493] [client 158.23.147.79:38769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK-bmbX5DA3XO6e_qRKQQAAATo"]
[Sat Aug 29 05:11:42.219292 2026] [security2:error] [pid 1321:tid 1576] [client 158.23.147.79:49822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/radio.php"] [unique_id "apK-bmjCPtor9NZ-byT8RwAABpM"]
[Sat Aug 29 05:11:42.231719 2026] [security2:error] [pid 11274:tid 11514] [client 20.196.209.81:8853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-admin/pk.php"] [unique_id "apK-bmbX5DA3XO6e_qRKRQAAAU8"]
[Sat Aug 29 05:11:42.233309 2026] [security2:error] [pid 1321:tid 1591] [client 158.23.184.117:53940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/admin.php"] [unique_id "apK-bmjCPtor9NZ-byT8SQAABqI"]
[Sat Aug 29 05:11:42.251524 2026] [security2:error] [pid 11274:tid 11471] [client 158.23.147.79:64474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/wp-content/uploads/index.php"] [unique_id "apK-bmbX5DA3XO6e_qRKSAAAASU"]
[Sat Aug 29 05:11:42.262508 2026] [security2:error] [pid 1321:tid 1489] [client 20.48.160.90:37779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/wp-ws68.php"] [unique_id "apK-bmjCPtor9NZ-byT8SgAABj0"]
[Sat Aug 29 05:11:42.263652 2026] [security2:error] [pid 1321:tid 1529] [client 158.158.54.35:23013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/about/function.php"] [unique_id "apK-bmjCPtor9NZ-byT8SwAABmU"]
[Sat Aug 29 05:11:42.271501 2026] [security2:error] [pid 11274:tid 11524] [client 40.83.93.50:3918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/al.php"] [unique_id "apK-bmbX5DA3XO6e_qRKSwAAAVk"]
[Sat Aug 29 05:11:42.299951 2026] [security2:error] [pid 11274:tid 11517] [client 20.48.160.90:23749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/wp-conffg.php"] [unique_id "apK-bmbX5DA3XO6e_qRKUgAAAVI"]
[Sat Aug 29 05:11:42.309896 2026] [security2:error] [pid 1321:tid 1560] [client 20.240.128.207:5898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-blog.php"] [unique_id "apK-bmjCPtor9NZ-byT8TQAABoM"]
[Sat Aug 29 05:11:42.310779 2026] [security2:error] [pid 1321:tid 1584] [client 20.104.104.62:52298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/grsiuk.php"] [unique_id "apK-bmjCPtor9NZ-byT8TgAABps"]
[Sat Aug 29 05:11:42.314575 2026] [security2:error] [pid 1321:tid 1604] [client 20.197.61.180:1551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/post.php"] [unique_id "apK-bmjCPtor9NZ-byT8UAAABq8"]
[Sat Aug 29 05:11:42.318513 2026] [security2:error] [pid 11274:tid 11475] [client 20.48.160.90:52021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/xcc.php"] [unique_id "apK-bmbX5DA3XO6e_qRKVgAAASk"]
[Sat Aug 29 05:11:42.327268 2026] [security2:error] [pid 11274:tid 11560] [client 68.155.159.216:49124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/dropdown.php"] [unique_id "apK-bmbX5DA3XO6e_qRKWAAAAXw"]
[Sat Aug 29 05:11:42.337761 2026] [security2:error] [pid 1321:tid 1523] [client 20.220.204.93:17697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/baixy.php"] [unique_id "apK-bmjCPtor9NZ-byT8UQAABl8"]
[Sat Aug 29 05:11:42.344249 2026] [security2:error] [pid 11274:tid 11513] [client 20.100.175.163:33595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/disagraeosc.php"] [unique_id "apK-bmbX5DA3XO6e_qRKWgAAAU4"]
[Sat Aug 29 05:11:42.355760 2026] [security2:error] [pid 11274:tid 11544] [client 158.23.184.117:64818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/.well-known/logs233/index.php"] [unique_id "apK-bmbX5DA3XO6e_qRKWwAAAWw"]
[Sat Aug 29 05:11:42.373049 2026] [security2:error] [pid 1321:tid 1589] [client 20.104.18.15:37803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/dex.php"] [unique_id "apK-bmjCPtor9NZ-byT8VAAABqA"]
[Sat Aug 29 05:11:42.376543 2026] [security2:error] [pid 11274:tid 11502] [client 158.23.147.79:59506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK-bmbX5DA3XO6e_qRKYAAAAUM"]
[Sat Aug 29 05:11:42.378948 2026] [security2:error] [pid 11274:tid 11572] [client 52.139.37.240:22521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/shell.php"] [unique_id "apK-bmbX5DA3XO6e_qRKYQAAAYg"]
[Sat Aug 29 05:11:42.380228 2026] [security2:error] [pid 11274:tid 11511] [client 158.23.184.117:53920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/goods.php"] [unique_id "apK-bmbX5DA3XO6e_qRKYgAAAUw"]
[Sat Aug 29 05:11:42.397823 2026] [security2:error] [pid 11274:tid 11455] [client 20.48.160.90:61681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/simple.php"] [unique_id "apK-bmbX5DA3XO6e_qRKZgAAARU"]
[Sat Aug 29 05:11:42.404848 2026] [security2:error] [pid 11274:tid 11504] [client 34.169.171.101:8882] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/id_rsa"] [unique_id "apK-bmbX5DA3XO6e_qRKaAAAAUU"]
[Sat Aug 29 05:11:42.406226 2026] [security2:error] [pid 11274:tid 11564] [client 34.169.171.101:8910] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/id_dsa"] [unique_id "apK-bmbX5DA3XO6e_qRKagAAAYA"]
[Sat Aug 29 05:11:42.406340 2026] [security2:error] [pid 11274:tid 11564] [client 34.169.171.101:8910] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "mail.forensicengineernj.com"] [uri "/id_dsa"] [unique_id "apK-bmbX5DA3XO6e_qRKagAAAYA"]
[Sat Aug 29 05:11:42.407497 2026] [security2:error] [pid 11274:tid 11536] [client 34.169.171.101:8888] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "mail.forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-bmbX5DA3XO6e_qRKZwAAAWU"]
[Sat Aug 29 05:11:42.419390 2026] [security2:error] [pid 1321:tid 1495] [client 4.205.62.107:59124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/wpver.php"] [unique_id "apK-bmjCPtor9NZ-byT8WAAABkM"]
[Sat Aug 29 05:11:42.434904 2026] [security2:error] [pid 1321:tid 1586] [client 20.48.160.90:28746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/filefuns.php"] [unique_id "apK-bmjCPtor9NZ-byT8WQAABp0"]
[Sat Aug 29 05:11:42.439381 2026] [security2:error] [pid 11274:tid 11477] [client 34.169.171.101:8882] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.forensicengineernj.com"] [uri "/key.pem"] [unique_id "apK-bmbX5DA3XO6e_qRKbAAAASs"]
[Sat Aug 29 05:11:42.442735 2026] [security2:error] [pid 11274:tid 11533] [client 34.169.171.101:8910] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.forensicengineernj.com"] [uri "/server.key"] [unique_id "apK-bmbX5DA3XO6e_qRKbgAAAWI"]
[Sat Aug 29 05:11:42.443420 2026] [security2:error] [pid 1321:tid 1553] [client 40.83.93.50:4021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/dxc.php"] [unique_id "apK-bmjCPtor9NZ-byT8WgAABnw"]
[Sat Aug 29 05:11:42.445168 2026] [security2:error] [pid 11274:tid 11485] [client 34.169.171.101:8888] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/privatekey.key"] [unique_id "apK-bmbX5DA3XO6e_qRKbQAAATI"]
[Sat Aug 29 05:11:42.450283 2026] [security2:error] [pid 1321:tid 1527] [client 68.155.159.216:62766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/lv.php"] [unique_id "apK-bmjCPtor9NZ-byT8WwAABmM"]
[Sat Aug 29 05:11:42.450882 2026] [security2:error] [pid 1321:tid 1577] [client 20.48.160.90:52054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/wp-includes/Text/Diff/Engine/aaa.php"] [unique_id "apK-bmjCPtor9NZ-byT8XAAABpQ"]
[Sat Aug 29 05:11:42.456436 2026] [security2:error] [pid 11274:tid 11512] [client 20.104.104.62:57443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/ahy66.php"] [unique_id "apK-bmbX5DA3XO6e_qRKcAAAAU0"]
[Sat Aug 29 05:11:42.459007 2026] [security2:error] [pid 1321:tid 1506] [client 34.169.171.101:8920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.171.169.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forensicengineernj.com"] [uri "/wp-config.php"] [unique_id "apK-bmjCPtor9NZ-byT8XgAABk4"]
[Sat Aug 29 05:11:42.459392 2026] [security2:error] [pid 11274:tid 11568] [client 34.169.171.101:8918] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "mail.forensicengineernj.com"] [uri "/wp-config.php.bak"] [unique_id "apK-bmbX5DA3XO6e_qRKdAAAAYQ"]
[Sat Aug 29 05:11:42.460593 2026] [security2:error] [pid 11274:tid 11479] [client 34.169.171.101:8950] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "mail.forensicengineernj.com"] [uri "/wp-config.php.old"] [unique_id "apK-bmbX5DA3XO6e_qRKdwAAASw"]
[Sat Aug 29 05:11:42.460954 2026] [security2:error] [pid 11274:tid 11481] [client 34.169.171.101:8960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.171.169.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forensicengineernj.com"] [uri "/config.php"] [unique_id "apK-bmbX5DA3XO6e_qRKeAAAAS4"]
[Sat Aug 29 05:11:42.462281 2026] [security2:error] [pid 11274:tid 11454] [client 34.169.171.101:8994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.171.169.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forensicengineernj.com"] [uri "/config.php.bak"] [unique_id "apK-bmbX5DA3XO6e_qRKeQAAARQ"]
[Sat Aug 29 05:11:42.462395 2026] [security2:error] [pid 11274:tid 11454] [client 34.169.171.101:8994] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "409"] [hostname "mail.forensicengineernj.com"] [uri "/config.php.bak"] [unique_id "apK-bmbX5DA3XO6e_qRKeQAAARQ"]
[Sat Aug 29 05:11:42.464769 2026] [security2:error] [pid 11274:tid 11470] [client 34.169.171.101:9014] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "mail.forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-bmbX5DA3XO6e_qRKdgAAASQ"]
[Sat Aug 29 05:11:42.466235 2026] [security2:error] [pid 1321:tid 1596] [client 34.169.171.101:9002] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.forensicengineernj.com"] [uri "/cgi-sys/404.html"] [unique_id "apK-bmjCPtor9NZ-byT8XwAABqc"], referer: https://mail.forensicengineernj.com/id_ed25519
[Sat Aug 29 05:11:42.500421 2026] [security2:error] [pid 11274:tid 11529] [client 34.169.171.101:9014] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-bmbX5DA3XO6e_qRKgQAAAV4"], referer: https://mail.forensicengineernj.com/config/secrets.yml
[Sat Aug 29 05:11:42.513407 2026] [security2:error] [pid 1321:tid 1496] [client 20.151.200.44:62954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/private.php"] [unique_id "apK-bmjCPtor9NZ-byT8YgAABkQ"]
[Sat Aug 29 05:11:42.513523 2026] [security2:error] [pid 11274:tid 11545] [client 20.220.204.93:22042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/ava.php"] [unique_id "apK-bmbX5DA3XO6e_qRKhAAAAW0"]
[Sat Aug 29 05:11:42.518627 2026] [security2:error] [pid 1321:tid 1581] [client 158.23.184.117:18151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/.well-known/maintenance.php"] [unique_id "apK-bmjCPtor9NZ-byT8YwAABpg"]
[Sat Aug 29 05:11:42.526087 2026] [security2:error] [pid 11274:tid 11514] [client 158.23.184.117:42803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/w.php"] [unique_id "apK-bmbX5DA3XO6e_qRKhgAAAU8"]
[Sat Aug 29 05:11:42.528319 2026] [security2:error] [pid 11274:tid 11483] [client 20.104.18.15:37769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/inso.php"] [unique_id "apK-bmbX5DA3XO6e_qRKhwAAATA"]
[Sat Aug 29 05:11:42.540880 2026] [security2:error] [pid 11274:tid 11491] [client 20.100.175.163:11236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/files.php"] [unique_id "apK-bmbX5DA3XO6e_qRKiwAAATg"]
[Sat Aug 29 05:11:42.542656 2026] [security2:error] [pid 11274:tid 11559] [client 20.48.160.90:51732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/aaa.php"] [unique_id "apK-bmbX5DA3XO6e_qRKjAAAAXs"]
[Sat Aug 29 05:11:42.555045 2026] [security2:error] [pid 11274:tid 11473] [client 68.155.159.216:2014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/packed.php"] [unique_id "apK-bmbX5DA3XO6e_qRKjQAAASc"]
[Sat Aug 29 05:11:42.561811 2026] [security2:error] [pid 1321:tid 1497] [client 202.71.25.11:65191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.25.71.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK-bmjCPtor9NZ-byT8ZAAABkU"]
[Sat Aug 29 05:11:42.561944 2026] [security2:error] [pid 1321:tid 1497] [client 202.71.25.11:65191] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK-bmjCPtor9NZ-byT8ZAAABkU"]
[Sat Aug 29 05:11:42.573324 2026] [security2:error] [pid 11274:tid 11522] [client 52.139.37.240:21874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK-bmbX5DA3XO6e_qRKjgAAAVc"]
[Sat Aug 29 05:11:42.581248 2026] [security2:error] [pid 11274:tid 11544] [client 20.48.160.90:31466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/wp-includes/style-engine/gecko-new.php"] [unique_id "apK-bmbX5DA3XO6e_qRKkgAAAWw"]
[Sat Aug 29 05:11:42.586333 2026] [security2:error] [pid 11274:tid 11464] [client 68.155.159.216:56715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/goods.php"] [unique_id "apK-bmbX5DA3XO6e_qRKlQAAAR4"]
[Sat Aug 29 05:11:42.590895 2026] [security2:error] [pid 11274:tid 11488] [client 20.48.160.90:28758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/wp-cron.php"] [unique_id "apK-bmbX5DA3XO6e_qRKlgAAATU"]
[Sat Aug 29 05:11:42.614845 2026] [security2:error] [pid 11274:tid 11509] [client 20.52.41.200:4796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK-bmbX5DA3XO6e_qRKmAAAAUo"]
[Sat Aug 29 05:11:42.615844 2026] [security2:error] [pid 11274:tid 11530] [client 20.104.104.62:58701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/gaje.php"] [unique_id "apK-bmbX5DA3XO6e_qRKmgAAAV8"]
[Sat Aug 29 05:11:42.618946 2026] [security2:error] [pid 11274:tid 11484] [client 20.151.200.44:27288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/hack.php"] [unique_id "apK-bmbX5DA3XO6e_qRKmwAAATE"]
[Sat Aug 29 05:11:42.620412 2026] [security2:error] [pid 11274:tid 11499] [client 158.158.54.35:15306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-admin/a.php"] [unique_id "apK-bmbX5DA3XO6e_qRKnAAAAUA"]
[Sat Aug 29 05:11:42.633162 2026] [security2:error] [pid 11274:tid 11459] [client 20.196.209.81:22290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-admin/plugin-install.php"] [unique_id "apK-bmbX5DA3XO6e_qRKoAAAARk"]
[Sat Aug 29 05:11:42.644194 2026] [security2:error] [pid 11274:tid 11468] [client 20.52.41.200:2806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-content/admin.php"] [unique_id "apK-bmbX5DA3XO6e_qRKoQAAASI"]
[Sat Aug 29 05:11:42.657850 2026] [security2:error] [pid 11274:tid 11502] [client 52.139.37.240:31490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK-bmbX5DA3XO6e_qRKqAAAAUM"]
[Sat Aug 29 05:11:42.667521 2026] [security2:error] [pid 11274:tid 11495] [client 158.23.184.117:18125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/.well-known/min.php"] [unique_id "apK-bmbX5DA3XO6e_qRKqQAAATw"]
[Sat Aug 29 05:11:42.667955 2026] [security2:error] [pid 11274:tid 11477] [client 20.104.18.15:37838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/aa.php"] [unique_id "apK-bmbX5DA3XO6e_qRKqgAAASs"]
[Sat Aug 29 05:11:42.668384 2026] [security2:error] [pid 11274:tid 11564] [client 158.23.184.117:42436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/new.php"] [unique_id "apK-bmbX5DA3XO6e_qRKqwAAAYA"]
[Sat Aug 29 05:11:42.677223 2026] [security2:error] [pid 11274:tid 11517] [client 20.240.128.207:2063] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/1.php"] [unique_id "apK-bmbX5DA3XO6e_qRKrwAAAVI"]
[Sat Aug 29 05:11:42.677323 2026] [security2:error] [pid 11274:tid 11517] [client 20.240.128.207:2063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/1.php"] [unique_id "apK-bmbX5DA3XO6e_qRKrwAAAVI"]
[Sat Aug 29 05:11:42.702030 2026] [security2:error] [pid 11274:tid 11563] [client 4.205.62.107:60351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/zz.php"] [unique_id "apK-bmbX5DA3XO6e_qRKsQAAAX8"]
[Sat Aug 29 05:11:42.714117 2026] [security2:error] [pid 11274:tid 11454] [client 20.220.204.93:38860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/gdn.php"] [unique_id "apK-bmbX5DA3XO6e_qRKtAAAARQ"]
[Sat Aug 29 05:11:42.730485 2026] [security2:error] [pid 11274:tid 11558] [client 20.48.160.90:23694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/lock360.php"] [unique_id "apK-bmbX5DA3XO6e_qRKuAAAAXo"]
[Sat Aug 29 05:11:42.741295 2026] [security2:error] [pid 1321:tid 1613] [client 20.104.104.62:40217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-raze.php"] [unique_id "apK-bmjCPtor9NZ-byT8aQAABrg"]
[Sat Aug 29 05:11:42.743769 2026] [security2:error] [pid 11274:tid 11551] [client 20.48.160.90:31378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/wp-settings.php"] [unique_id "apK-bmbX5DA3XO6e_qRKvAAAAXM"]
[Sat Aug 29 05:11:42.769224 2026] [security2:error] [pid 11274:tid 11455] [client 40.83.93.50:10019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/global.php"] [unique_id "apK-bmbX5DA3XO6e_qRKwAAAARU"]
[Sat Aug 29 05:11:42.770384 2026] [security2:error] [pid 11274:tid 11358] [remote 74.7.227.154:55336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK-bmbX5DA3XO6e_qRKwQABZC0"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwordpress-seo%2Fadmin%2Fgoogle_search_console%2Fviews
[Sat Aug 29 05:11:42.781369 2026] [security2:error] [pid 11274:tid 11538] [client 20.104.104.62:52228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/wp-admin/zwso.php"] [unique_id "apK-bmbX5DA3XO6e_qRKwgAAAWc"]
[Sat Aug 29 05:11:42.784556 2026] [security2:error] [pid 1321:tid 1597] [client 52.139.37.240:22466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/wp-content/plugins/linkpreview/il.php"] [unique_id "apK-bmjCPtor9NZ-byT8awAABqg"]
[Sat Aug 29 05:11:42.809270 2026] [security2:error] [pid 11274:tid 11552] [client 20.240.128.207:5912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/xxx.php"] [unique_id "apK-bmbX5DA3XO6e_qRKxQAAAXQ"]
[Sat Aug 29 05:11:42.811617 2026] [security2:error] [pid 11274:tid 11525] [client 158.23.184.117:18331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/.well-known/module.php"] [unique_id "apK-bmbX5DA3XO6e_qRKxgAAAVo"]
[Sat Aug 29 05:11:42.816159 2026] [security2:error] [pid 11274:tid 11559] [client 20.104.18.15:37881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/img.php"] [unique_id "apK-bmbX5DA3XO6e_qRKxwAAAXs"]
[Sat Aug 29 05:11:42.826319 2026] [security2:error] [pid 11274:tid 11407] [remote 93.123.109.228:33324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/infophp.php"] [unique_id "apK-bmbX5DA3XO6e_qRKyAABJ10"]
[Sat Aug 29 05:11:42.826365 2026] [security2:error] [pid 11274:tid 11406] [remote 93.123.109.228:33324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/info.php"] [unique_id "apK-bmbX5DA3XO6e_qRKyQABJ1w"]
[Sat Aug 29 05:11:42.827698 2026] [security2:error] [pid 11274:tid 11482] [client 158.23.184.117:42442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/php8.php"] [unique_id "apK-bmbX5DA3XO6e_qRKygAAAS8"]
[Sat Aug 29 05:11:42.828345 2026] [security2:error] [pid 1321:tid 1564] [client 40.83.93.50:3450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/class_api.php"] [unique_id "apK-bmjCPtor9NZ-byT8bAAABoc"]
[Sat Aug 29 05:11:42.831909 2026] [security2:error] [pid 11274:tid 11397] [remote 93.123.109.228:33324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/infos.php"] [unique_id "apK-bmbX5DA3XO6e_qRKywABKVM"]
[Sat Aug 29 05:11:42.834788 2026] [security2:error] [pid 1321:tid 1615] [client 158.23.147.79:43288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-content/admin.php"] [unique_id "apK-bmjCPtor9NZ-byT8bQAABro"]
[Sat Aug 29 05:11:42.836573 2026] [security2:error] [pid 11274:tid 11485] [client 20.100.175.163:7750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-logs.php"] [unique_id "apK-bmbX5DA3XO6e_qRKzgAAATI"]
[Sat Aug 29 05:11:42.839730 2026] [security2:error] [pid 1321:tid 1576] [client 20.48.160.90:61615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/shiny.php"] [unique_id "apK-bmjCPtor9NZ-byT8bgAABpM"]
[Sat Aug 29 05:11:42.842347 2026] [security2:error] [pid 11274:tid 11522] [client 158.158.54.35:16329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/install.php"] [unique_id "apK-bmbX5DA3XO6e_qRKzwAAAVc"]
[Sat Aug 29 05:11:42.853800 2026] [security2:error] [pid 11274:tid 11529] [client 52.139.37.240:31640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/wp-info.php"] [unique_id "apK-bmbX5DA3XO6e_qRK0QAAAV4"]
[Sat Aug 29 05:11:42.862268 2026] [security2:error] [pid 11274:tid 11521] [client 158.158.54.35:22366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-includes/admin.php"] [unique_id "apK-bmbX5DA3XO6e_qRK0gAAAVY"]
[Sat Aug 29 05:11:42.863011 2026] [security2:error] [pid 11274:tid 11565] [client 20.220.204.93:18917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/f2.php"] [unique_id "apK-bmbX5DA3XO6e_qRK0wAAAYE"]
[Sat Aug 29 05:11:42.868168 2026] [security2:error] [pid 11274:tid 11492] [client 20.48.160.90:23755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/wp-theme.php"] [unique_id "apK-bmbX5DA3XO6e_qRK1AAAATk"]
[Sat Aug 29 05:11:42.881662 2026] [security2:error] [pid 11274:tid 11501] [client 20.48.160.90:31389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/wp-signup.php"] [unique_id "apK-bmbX5DA3XO6e_qRK1QAAAUI"]
[Sat Aug 29 05:11:42.924013 2026] [security2:error] [pid 1321:tid 1562] [client 20.104.104.62:52348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/Contrller.php"] [unique_id "apK-bmjCPtor9NZ-byT8bwAABoU"]
[Sat Aug 29 05:11:42.943974 2026] [security2:error] [pid 1321:tid 1532] [client 158.23.147.79:14231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK-bmjCPtor9NZ-byT8cQAABmg"]
[Sat Aug 29 05:11:42.957801 2026] [security2:error] [pid 1321:tid 1489] [client 158.23.184.117:18317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/.well-known/options.php"] [unique_id "apK-bmjCPtor9NZ-byT8cgAABj0"]
[Sat Aug 29 05:11:42.967252 2026] [security2:error] [pid 11274:tid 11472] [client 20.104.104.62:47574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-init.php"] [unique_id "apK-bmbX5DA3XO6e_qRK3gAAASY"]
[Sat Aug 29 05:11:42.972069 2026] [security2:error] [pid 1321:tid 1580] [client 68.155.159.216:61268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/hehehehe.php"] [unique_id "apK-bmjCPtor9NZ-byT8cwAABpc"]
[Sat Aug 29 05:11:42.973047 2026] [security2:error] [pid 11274:tid 11520] [client 40.83.93.50:3936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/wp-2019.php"] [unique_id "apK-bmbX5DA3XO6e_qRK4AAAAVU"]
[Sat Aug 29 05:11:42.976053 2026] [security2:error] [pid 1321:tid 1548] [client 158.23.184.117:42791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/wp-content/themes/admin.php"] [unique_id "apK-bmjCPtor9NZ-byT8dAAABnc"]
[Sat Aug 29 05:11:42.980029 2026] [security2:error] [pid 1321:tid 1536] [client 52.139.37.240:22472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/wp-header-json.php"] [unique_id "apK-bmjCPtor9NZ-byT8dQAABmw"]
[Sat Aug 29 05:11:42.990628 2026] [security2:error] [pid 11274:tid 11499] [client 20.48.160.90:37807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/goods.php"] [unique_id "apK-bmbX5DA3XO6e_qRK5AAAAUA"]
[Sat Aug 29 05:11:42.993805 2026] [security2:error] [pid 11274:tid 11516] [client 20.104.18.15:37766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/222.php"] [unique_id "apK-bmbX5DA3XO6e_qRK5QAAAVE"]
[Sat Aug 29 05:11:42.998384 2026] [security2:error] [pid 11274:tid 11555] [client 20.48.160.90:23722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/2d7433/index.php"] [unique_id "apK-bmbX5DA3XO6e_qRK5gAAAXc"]
[Sat Aug 29 05:11:43.003154 2026] [security2:error] [pid 11274:tid 11466] [client 87.219.197.128:60772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK-b2bX5DA3XO6e_qRK5wAAASA"]
[Sat Aug 29 05:11:43.003239 2026] [security2:error] [pid 11274:tid 11466] [client 87.219.197.128:60772] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK-b2bX5DA3XO6e_qRK5wAAASA"]
[Sat Aug 29 05:11:43.020200 2026] [security2:error] [pid 11274:tid 11448] [client 20.151.200.44:65308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/pro.php"] [unique_id "apK-b2bX5DA3XO6e_qRK6wAAAQ4"]
[Sat Aug 29 05:11:43.026155 2026] [security2:error] [pid 1321:tid 1587] [client 20.48.160.90:52082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/wp-conffg.php"] [unique_id "apK-b2jCPtor9NZ-byT8dgAABp4"]
[Sat Aug 29 05:11:43.026612 2026] [security2:error] [pid 1321:tid 1565] [client 20.196.209.81:8844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-admin/plugins/img/themes/plugins/maintenance.php"] [unique_id "apK-b2jCPtor9NZ-byT8dwAABog"]
[Sat Aug 29 05:11:43.047476 2026] [security2:error] [pid 11274:tid 11461] [client 20.100.175.163:23212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/o.php"] [unique_id "apK-b2bX5DA3XO6e_qRK7QAAARs"]
[Sat Aug 29 05:11:43.051083 2026] [security2:error] [pid 11274:tid 11505] [client 20.197.61.180:14225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/flower.php"] [unique_id "apK-b2bX5DA3XO6e_qRK7gAAAUY"]
[Sat Aug 29 05:11:43.061668 2026] [security2:error] [pid 11274:tid 11564] [client 68.155.159.216:14269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK-b2bX5DA3XO6e_qRK7wAAAYA"]
[Sat Aug 29 05:11:43.069666 2026] [security2:error] [pid 11274:tid 11517] [client 20.104.104.62:58738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/Zeiss.php"] [unique_id "apK-b2bX5DA3XO6e_qRK8AAAAVI"]
[Sat Aug 29 05:11:43.070182 2026] [security2:error] [pid 11274:tid 11449] [client 52.139.37.240:31547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/wp-wordfence-waf.php"] [unique_id "apK-b2bX5DA3XO6e_qRK8QAAAQ8"]
[Sat Aug 29 05:11:43.074269 2026] [security2:error] [pid 1321:tid 1513] [client 20.52.41.200:4618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-admin/index.php"] [unique_id "apK-b2jCPtor9NZ-byT8eAAABlU"]
[Sat Aug 29 05:11:43.077257 2026] [security2:error] [pid 1321:tid 1544] [client 20.151.200.44:63106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/shelp.php"] [unique_id "apK-b2jCPtor9NZ-byT8egAABnQ"]
[Sat Aug 29 05:11:43.090634 2026] [security2:error] [pid 11274:tid 11540] [client 45.148.10.62:53690] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "proaider.com"] [uri "/.env"] [unique_id "apK-b2bX5DA3XO6e_qRK8gAAAWk"]
[Sat Aug 29 05:11:43.095800 2026] [security2:error] [pid 1321:tid 1494] [client 20.220.204.93:57998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/grsiuk.php"] [unique_id "apK-b2jCPtor9NZ-byT8ewAABkI"]
[Sat Aug 29 05:11:43.100464 2026] [security2:error] [pid 11274:tid 11570] [client 158.23.184.117:18327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/.well-known/panel.php"] [unique_id "apK-b2bX5DA3XO6e_qRK9gAAAYY"]
[Sat Aug 29 05:11:43.100729 2026] [security2:error] [pid 11274:tid 11509] [client 20.52.41.200:2184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-configs.php"] [unique_id "apK-b2bX5DA3XO6e_qRK9wAAAUo"]
[Sat Aug 29 05:11:43.104694 2026] [security2:error] [pid 1321:tid 1495] [client 4.205.62.107:61732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/atex1.php"] [unique_id "apK-b2jCPtor9NZ-byT8fAAABkM"]
[Sat Aug 29 05:11:43.119862 2026] [security2:error] [pid 11274:tid 11490] [client 68.155.159.216:23515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-blog-header.php"] [unique_id "apK-b2bX5DA3XO6e_qRK-gAAATc"]
[Sat Aug 29 05:11:43.119963 2026] [security2:error] [pid 11274:tid 11497] [client 158.23.184.117:53942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/txets.php"] [unique_id "apK-b2bX5DA3XO6e_qRK-wAAAT4"]
[Sat Aug 29 05:11:43.130901 2026] [security2:error] [pid 11274:tid 11454] [client 20.48.160.90:49986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/wp-login.php"] [unique_id "apK-b2bX5DA3XO6e_qRK_AAAARQ"]
[Sat Aug 29 05:11:43.149436 2026] [security2:error] [pid 11274:tid 11561] [client 20.48.160.90:51779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/000.php/index.php"] [unique_id "apK-b2bX5DA3XO6e_qRK_wAAAX0"]
[Sat Aug 29 05:11:43.161947 2026] [security2:error] [pid 1321:tid 1559] [client 4.205.62.107:65007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/g3.php"] [unique_id "apK-b2jCPtor9NZ-byT8fQAABoI"]
[Sat Aug 29 05:11:43.162610 2026] [security2:error] [pid 1321:tid 1596] [client 20.104.18.15:37886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/key.php"] [unique_id "apK-b2jCPtor9NZ-byT8fgAABqc"]
[Sat Aug 29 05:11:43.165045 2026] [security2:error] [pid 1321:tid 1556] [client 158.23.147.79:63262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-includes/content.php"] [unique_id "apK-b2jCPtor9NZ-byT8fwAABn8"]
[Sat Aug 29 05:11:43.173159 2026] [security2:error] [pid 1321:tid 1531] [client 20.48.160.90:31420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/wp-validate.php"] [unique_id "apK-b2jCPtor9NZ-byT8gQAABmc"]
[Sat Aug 29 05:11:43.199825 2026] [security2:error] [pid 11274:tid 11465] [client 52.139.37.240:22485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/zup.php"] [unique_id "apK-b2bX5DA3XO6e_qRLAQAAAR8"]
[Sat Aug 29 05:11:43.223823 2026] [security2:error] [pid 11274:tid 11522] [client 20.104.104.62:20814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/lyda.php"] [unique_id "apK-b2bX5DA3XO6e_qRLBQAAAVc"]
[Sat Aug 29 05:11:43.224530 2026] [security2:error] [pid 11274:tid 11529] [client 20.104.104.62:61806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/ww2.php"] [unique_id "apK-b2bX5DA3XO6e_qRLBgAAAV4"]
[Sat Aug 29 05:11:43.229139 2026] [security2:error] [pid 1321:tid 1598] [client 158.158.54.35:10144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK-b2jCPtor9NZ-byT8gwAABqk"]
[Sat Aug 29 05:11:43.233409 2026] [security2:error] [pid 11274:tid 11565] [client 68.155.159.216:1841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-mail.php"] [unique_id "apK-b2bX5DA3XO6e_qRLBwAAAYE"]
[Sat Aug 29 05:11:43.243715 2026] [security2:error] [pid 1321:tid 1588] [client 158.23.184.117:18145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/.well-known/pki-validation/mariju.php"] [unique_id "apK-b2jCPtor9NZ-byT8hAAABp8"]
[Sat Aug 29 05:11:43.260346 2026] [security2:error] [pid 11274:tid 11444] [client 158.23.147.79:24567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK-b2bX5DA3XO6e_qRLDAAAAQo"]
[Sat Aug 29 05:11:43.261056 2026] [security2:error] [pid 1321:tid 1606] [client 20.220.204.93:16795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/wp-scr1pts.php"] [unique_id "apK-b2jCPtor9NZ-byT8hQAABrE"]
[Sat Aug 29 05:11:43.269845 2026] [security2:error] [pid 11274:tid 11429] [remote 74.7.227.154:55336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK-b2bX5DA3XO6e_qRLDgABTHM"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Fwordpress-seo%2Fadmin%2Fgoogle_search_console%2Fviews
[Sat Aug 29 05:11:43.273168 2026] [security2:error] [pid 11274:tid 11549] [client 20.48.160.90:29132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/images.php"] [unique_id "apK-b2bX5DA3XO6e_qRLEAAAAXE"]
[Sat Aug 29 05:11:43.276523 2026] [security2:error] [pid 1321:tid 1595] [client 158.23.184.117:53930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/adminfuns.php"] [unique_id "apK-b2jCPtor9NZ-byT8hgAABqY"]
[Sat Aug 29 05:11:43.277856 2026] [security2:error] [pid 11274:tid 11568] [client 40.83.93.50:3943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/update.php"] [unique_id "apK-b2bX5DA3XO6e_qRLEQAAAYQ"]
[Sat Aug 29 05:11:43.279166 2026] [security2:error] [pid 11274:tid 11450] [client 52.139.37.240:30808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/ws49.php"] [unique_id "apK-b2bX5DA3XO6e_qRLEgAAARA"]
[Sat Aug 29 05:11:43.279292 2026] [security2:error] [pid 11274:tid 11530] [client 20.151.200.44:62169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/lfi.php"] [unique_id "apK-b2bX5DA3XO6e_qRLEwAAAV8"]
[Sat Aug 29 05:11:43.280440 2026] [security2:error] [pid 1321:tid 1566] [client 4.205.62.107:6874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/asdf.php"] [unique_id "apK-b2jCPtor9NZ-byT8hwAABok"]
[Sat Aug 29 05:11:43.300817 2026] [security2:error] [pid 11274:tid 11499] [client 4.205.62.107:63036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/guk.php"] [unique_id "apK-b2bX5DA3XO6e_qRLFwAAAUA"]
[Sat Aug 29 05:11:43.303286 2026] [security2:error] [pid 1321:tid 1506] [client 158.158.54.35:19330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/ioxi-o.php"] [unique_id "apK-b2jCPtor9NZ-byT8iQAABk4"]
[Sat Aug 29 05:11:43.304095 2026] [security2:error] [pid 11274:tid 11516] [client 20.48.160.90:37847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/Jcrop.php"] [unique_id "apK-b2bX5DA3XO6e_qRLGAAAAVE"]
[Sat Aug 29 05:11:43.306726 2026] [security2:error] [pid 11274:tid 11555] [client 20.48.160.90:31464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/700.php"] [unique_id "apK-b2bX5DA3XO6e_qRLGwAAAXc"]
[Sat Aug 29 05:11:43.333792 2026] [security2:error] [pid 11274:tid 11514] [client 20.100.175.163:7795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-admin/css/about.php"] [unique_id "apK-b2bX5DA3XO6e_qRLHgAAAU8"]
[Sat Aug 29 05:11:43.335739 2026] [security2:error] [pid 11274:tid 11448] [client 158.23.147.79:62651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/nf_tracking.php"] [unique_id "apK-b2bX5DA3XO6e_qRLHwAAAQ4"]
[Sat Aug 29 05:11:43.344300 2026] [security2:error] [pid 1321:tid 1614] [client 20.240.128.207:1224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/s.php"] [unique_id "apK-b2jCPtor9NZ-byT8igAABrk"]
[Sat Aug 29 05:11:43.361498 2026] [security2:error] [pid 11274:tid 11495] [client 158.23.147.79:64477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK-b2bX5DA3XO6e_qRLIgAAATw"]
[Sat Aug 29 05:11:43.361939 2026] [security2:error] [pid 11274:tid 11525] [client 40.83.93.50:3444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/aksinet.php"] [unique_id "apK-b2bX5DA3XO6e_qRLIwAAAVo"]
[Sat Aug 29 05:11:43.366437 2026] [security2:error] [pid 11274:tid 11534] [client 20.151.200.44:27150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/155.php"] [unique_id "apK-b2bX5DA3XO6e_qRLJQAAAWM"]
[Sat Aug 29 05:11:43.389160 2026] [security2:error] [pid 11274:tid 11468] [client 158.23.184.117:18124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/.well-known/pki-validation/pl.php"] [unique_id "apK-b2bX5DA3XO6e_qRLJgAAASI"]
[Sat Aug 29 05:11:43.403255 2026] [security2:error] [pid 11274:tid 11540] [client 20.104.18.15:37859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/chosen.php"] [unique_id "apK-b2bX5DA3XO6e_qRLKQAAAWk"]
[Sat Aug 29 05:11:43.412483 2026] [security2:error] [pid 11274:tid 11570] [client 20.48.160.90:23716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/ops.php"] [unique_id "apK-b2bX5DA3XO6e_qRLKgAAAYY"]
[Sat Aug 29 05:11:43.415519 2026] [security2:error] [pid 11274:tid 11496] [client 52.139.37.240:22487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/a9.php"] [unique_id "apK-b2bX5DA3XO6e_qRLKwAAAT0"]
[Sat Aug 29 05:11:43.419264 2026] [security2:error] [pid 11274:tid 11520] [client 20.196.209.81:22864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-admin/security.php"] [unique_id "apK-b2bX5DA3XO6e_qRLLAAAAVU"]
[Sat Aug 29 05:11:43.420827 2026] [security2:error] [pid 1321:tid 1521] [client 158.23.184.117:42764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/403.php"] [unique_id "apK-b2jCPtor9NZ-byT8iwAABl0"]
[Sat Aug 29 05:11:43.423903 2026] [security2:error] [pid 11274:tid 11543] [client 20.104.104.62:7150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/anz.php"] [unique_id "apK-b2bX5DA3XO6e_qRLLQAAAWs"]
[Sat Aug 29 05:11:43.426515 2026] [security2:error] [pid 1321:tid 1509] [client 20.220.204.93:50614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/num.php"] [unique_id "apK-b2jCPtor9NZ-byT8jAAABlE"]
[Sat Aug 29 05:11:43.434800 2026] [security2:error] [pid 1321:tid 1532] [client 68.155.159.216:49115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/.well-known/index.php"] [unique_id "apK-b2jCPtor9NZ-byT8jQAABmg"]
[Sat Aug 29 05:11:43.437959 2026] [security2:error] [pid 1321:tid 1489] [client 20.48.160.90:31386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/c4.php"] [unique_id "apK-b2jCPtor9NZ-byT8jgAABj0"]
[Sat Aug 29 05:11:43.440752 2026] [security2:error] [pid 11274:tid 11434] [remote 93.123.109.228:33324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/php-info.php"] [unique_id "apK-b2bX5DA3XO6e_qRLMQABN3c"]
[Sat Aug 29 05:11:43.441253 2026] [security2:error] [pid 11274:tid 11497] [client 20.48.160.90:51755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/35iDq8NAjLu.php"] [unique_id "apK-b2bX5DA3XO6e_qRLMgAAAT4"]
[Sat Aug 29 05:11:43.458410 2026] [security2:error] [pid 11274:tid 11494] [client 158.158.54.35:29442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/lock360.php"] [unique_id "apK-b2bX5DA3XO6e_qRLNAAAATs"]
[Sat Aug 29 05:11:43.463396 2026] [security2:error] [pid 11274:tid 11423] [remote 93.123.109.228:33324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/php.php"] [unique_id "apK-b2bX5DA3XO6e_qRLNgABN20"]
[Sat Aug 29 05:11:43.466971 2026] [security2:error] [pid 11274:tid 11405] [remote 93.123.109.228:33324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/php_info.php"] [unique_id "apK-b2bX5DA3XO6e_qRLNwABJFs"]
[Sat Aug 29 05:11:43.481693 2026] [security2:error] [pid 11274:tid 11509] [client 52.139.37.240:30793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/xxx.php"] [unique_id "apK-b2bX5DA3XO6e_qRLOQAAAUo"]
[Sat Aug 29 05:11:43.481931 2026] [security2:error] [pid 1321:tid 1594] [client 158.23.147.79:56966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK-b2jCPtor9NZ-byT8kAAABqU"]
[Sat Aug 29 05:11:43.483028 2026] [security2:error] [pid 11274:tid 11419] [remote 93.123.109.228:33324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/phpinfo.php"] [unique_id "apK-b2bX5DA3XO6e_qRLOwABemk"]
[Sat Aug 29 05:11:43.483387 2026] [proxy_http:error] [pid 1017536:tid 1017702] (70007)The timeout specified has expired: [client 127.0.0.1:15644] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:11:43.483407 2026] [proxy:error] [pid 1017536:tid 1017702] [client 127.0.0.1:15644] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:11:43.495832 2026] [security2:error] [pid 11274:tid 11486] [client 40.83.93.50:10905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/menu.php"] [unique_id "apK-b2bX5DA3XO6e_qRLPAAAATM"]
[Sat Aug 29 05:11:43.514604 2026] [security2:error] [pid 11274:tid 11561] [client 20.151.200.44:63979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/999.php"] [unique_id "apK-b2bX5DA3XO6e_qRLPgAAAX0"]
[Sat Aug 29 05:11:43.528102 2026] [security2:error] [pid 1321:tid 1549] [client 20.52.41.200:4628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/radio.php"] [unique_id "apK-b2jCPtor9NZ-byT8kQAABng"]
[Sat Aug 29 05:11:43.535617 2026] [security2:error] [pid 1321:tid 1508] [client 158.23.184.117:18136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/.well-known/pki-validation/x.php"] [unique_id "apK-b2jCPtor9NZ-byT8kgAABlA"]
[Sat Aug 29 05:11:43.535694 2026] [security2:error] [pid 11274:tid 11537] [client 20.100.175.163:4932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/file2.php"] [unique_id "apK-b2bX5DA3XO6e_qRLQAAAAWY"]
[Sat Aug 29 05:11:43.551666 2026] [security2:error] [pid 11274:tid 11476] [client 68.155.159.216:62817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-b2bX5DA3XO6e_qRLRAAAASo"]
[Sat Aug 29 05:11:43.556326 2026] [security2:error] [pid 1321:tid 1593] [client 4.205.62.107:62772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/ah25.php"] [unique_id "apK-b2jCPtor9NZ-byT8kwAABqQ"]
[Sat Aug 29 05:11:43.556919 2026] [security2:error] [pid 11274:tid 11512] [client 20.52.41.200:2634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-includes/index.php"] [unique_id "apK-b2bX5DA3XO6e_qRLRgAAAU0"]
[Sat Aug 29 05:11:43.561607 2026] [security2:error] [pid 11274:tid 11483] [client 20.104.18.15:37838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/file1221.php"] [unique_id "apK-b2bX5DA3XO6e_qRLSAAAATA"]
[Sat Aug 29 05:11:43.567082 2026] [core:error] [pid 11274:tid 11535] [client 158.23.184.117:53896] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:43.567097 2026] [core:error] [pid 11274:tid 11535] [client 158.23.184.117:53896] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:43.568978 2026] [security2:error] [pid 1321:tid 1565] [client 20.104.104.62:52313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/bge.php"] [unique_id "apK-b2jCPtor9NZ-byT8lAAABog"]
[Sat Aug 29 05:11:43.581598 2026] [security2:error] [pid 1321:tid 1552] [client 20.48.160.90:61645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/btx25.php"] [unique_id "apK-b2jCPtor9NZ-byT8lQAABns"]
[Sat Aug 29 05:11:43.586521 2026] [security2:error] [pid 11274:tid 11491] [client 158.23.147.79:53990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-includes/plugins.php"] [unique_id "apK-b2bX5DA3XO6e_qRLSwAAATg"]
[Sat Aug 29 05:11:43.589291 2026] [security2:error] [pid 11274:tid 11572] [client 20.48.160.90:31402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/wp-tymanage.php"] [unique_id "apK-b2bX5DA3XO6e_qRLTQAAAYg"]
[Sat Aug 29 05:11:43.609557 2026] [security2:error] [pid 11274:tid 11565] [client 20.48.160.90:29121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK-b2bX5DA3XO6e_qRLTwAAAYE"]
[Sat Aug 29 05:11:43.612207 2026] [security2:error] [pid 1321:tid 1589] [client 52.139.37.240:22438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/admin/index.php"] [unique_id "apK-b2jCPtor9NZ-byT8lgAABqA"]
[Sat Aug 29 05:11:43.626027 2026] [security2:error] [pid 1321:tid 1525] [client 20.240.128.207:7818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/tool.php"] [unique_id "apK-b2jCPtor9NZ-byT8mAAABmE"]
[Sat Aug 29 05:11:43.661236 2026] [security2:error] [pid 11274:tid 11455] [client 158.158.54.35:17671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.cloud9walkers.com"] [uri "/wp-admin.php"] [unique_id "apK-b2bX5DA3XO6e_qRLUwAAARU"]
[Sat Aug 29 05:11:43.673902 2026] [security2:error] [pid 11274:tid 11538] [client 68.155.159.216:1737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-content/packed.php"] [unique_id "apK-b2bX5DA3XO6e_qRLVgAAAWc"]
[Sat Aug 29 05:11:43.680397 2026] [security2:error] [pid 1321:tid 1515] [client 52.139.37.240:31493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/0x.php"] [unique_id "apK-b2jCPtor9NZ-byT8mQAABlc"]
[Sat Aug 29 05:11:43.681495 2026] [security2:error] [pid 11274:tid 11549] [client 158.23.184.117:64808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/.well-known/pki-validation/xmrlpc.php"] [unique_id "apK-b2bX5DA3XO6e_qRLVwAAAXE"]
[Sat Aug 29 05:11:43.709471 2026] [security2:error] [pid 11274:tid 11461] [client 20.104.18.15:37877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/nox.php"] [unique_id "apK-b2bX5DA3XO6e_qRLWgAAARs"]
[Sat Aug 29 05:11:43.709862 2026] [security2:error] [pid 11274:tid 11499] [client 158.23.184.117:53923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/.trash7206/index.php"] [unique_id "apK-b2bX5DA3XO6e_qRLWwAAAUA"]
[Sat Aug 29 05:11:43.711545 2026] [security2:error] [pid 11274:tid 11440] [remote 93.123.109.228:33324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/public/phpinfo.php"] [unique_id "apK-b2bX5DA3XO6e_qRLXAABT30"]
[Sat Aug 29 05:11:43.719634 2026] [security2:error] [pid 11274:tid 11503] [client 20.48.160.90:37865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/radio.php"] [unique_id "apK-b2bX5DA3XO6e_qRLXgAAAUQ"]
[Sat Aug 29 05:11:43.726379 2026] [security2:error] [pid 1321:tid 1581] [client 20.48.160.90:31403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/ajfto.php"] [unique_id "apK-b2jCPtor9NZ-byT8mgAABpg"]
[Sat Aug 29 05:11:43.737832 2026] [security2:error] [pid 11274:tid 11473] [client 158.158.54.35:16338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/xmlrpc.php"] [unique_id "apK-b2bX5DA3XO6e_qRLYwAAASc"]
[Sat Aug 29 05:11:43.744913 2026] [security2:error] [pid 1321:tid 1601] [client 68.155.159.216:56781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-b2jCPtor9NZ-byT8mwAABqw"]
[Sat Aug 29 05:11:43.752702 2026] [security2:error] [pid 1321:tid 1519] [client 20.220.204.93:38861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/a4.php"] [unique_id "apK-b2jCPtor9NZ-byT8nAAABls"]
[Sat Aug 29 05:11:43.757468 2026] [security2:error] [pid 11274:tid 11513] [client 158.23.147.79:7146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-b2bX5DA3XO6e_qRLZgAAAU4"]
[Sat Aug 29 05:11:43.759894 2026] [security2:error] [pid 1321:tid 1544] [client 40.83.93.50:6694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/blog.php"] [unique_id "apK-b2jCPtor9NZ-byT8nQAABnQ"]
[Sat Aug 29 05:11:43.776963 2026] [security2:error] [pid 1321:tid 1523] [client 20.197.61.180:14238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/meta.php"] [unique_id "apK-b2jCPtor9NZ-byT8ngAABl8"]
[Sat Aug 29 05:11:43.791739 2026] [proxy_http:error] [pid 1321:tid 1610] (20014)Internal error (specific information not available): [client 34.22.86.106:42736] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:11:43.791757 2026] [proxy:error] [pid 1321:tid 1610] [client 34.22.86.106:42736] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/var/www/.git/config
[Sat Aug 29 05:11:43.797217 2026] [proxy_http:error] [pid 1321:tid 1543] (20014)Internal error (specific information not available): [client 34.22.86.106:42758] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:11:43.797228 2026] [proxy:error] [pid 1321:tid 1543] [client 34.22.86.106:42758] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/public/.git/config
[Sat Aug 29 05:11:43.798384 2026] [proxy_http:error] [pid 11274:tid 11472] (20014)Internal error (specific information not available): [client 34.22.86.106:42692] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:11:43.798404 2026] [proxy:error] [pid 11274:tid 11472] [client 34.22.86.106:42692] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/.git/config
[Sat Aug 29 05:11:43.811135 2026] [proxy_http:error] [pid 1321:tid 1610] (20014)Internal error (specific information not available): [client 34.22.86.106:42736] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:11:43.811154 2026] [proxy:error] [pid 1321:tid 1610] [client 34.22.86.106:42736] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/502.shtml
[Sat Aug 29 05:11:43.815219 2026] [security2:error] [pid 1321:tid 1533] [client 20.196.209.81:17730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK-b2jCPtor9NZ-byT8qwAABmk"]
[Sat Aug 29 05:11:43.815709 2026] [proxy_http:error] [pid 1321:tid 1583] (20014)Internal error (specific information not available): [client 34.22.86.106:42748] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:11:43.815725 2026] [proxy:error] [pid 1321:tid 1583] [client 34.22.86.106:42748] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/wordpress/.git/config
[Sat Aug 29 05:11:43.820214 2026] [proxy_http:error] [pid 1321:tid 1583] (20014)Internal error (specific information not available): [client 34.22.86.106:42748] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:11:43.820227 2026] [proxy:error] [pid 1321:tid 1583] [client 34.22.86.106:42748] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/502.shtml
[Sat Aug 29 05:11:43.825203 2026] [security2:error] [pid 11274:tid 11516] [client 20.100.175.163:9258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/system_log.php"] [unique_id "apK-b2bX5DA3XO6e_qRLcQAAAVE"]
[Sat Aug 29 05:11:43.825882 2026] [security2:error] [pid 11274:tid 11487] [client 158.23.184.117:18326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/.well-known/security.php"] [unique_id "apK-b2bX5DA3XO6e_qRLcgAAATQ"]
[Sat Aug 29 05:11:43.828138 2026] [security2:error] [pid 1321:tid 1608] [client 52.139.37.240:22476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/makeasmtp.php"] [unique_id "apK-b2jCPtor9NZ-byT8rQAABrM"]
[Sat Aug 29 05:11:43.840088 2026] [security2:error] [pid 1321:tid 1553] [client 45.148.10.62:53706] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "proaider.com"] [uri "/.env"] [unique_id "apK-b2jCPtor9NZ-byT8rwAABnw"]
[Sat Aug 29 05:11:43.841418 2026] [security2:error] [pid 11274:tid 11468] [client 4.205.62.107:28077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/test.php"] [unique_id "apK-b2bX5DA3XO6e_qRLdQAAASI"]
[Sat Aug 29 05:11:43.842018 2026] [security2:error] [pid 11274:tid 11466] [client 20.240.128.207:7525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/test1.php"] [unique_id "apK-b2bX5DA3XO6e_qRLdgAAASA"]
[Sat Aug 29 05:11:43.856213 2026] [security2:error] [pid 11274:tid 11566] [client 158.23.184.117:42809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/.trash7206/admin.php"] [unique_id "apK-b2bX5DA3XO6e_qRLdwAAAYI"]
[Sat Aug 29 05:11:43.876240 2026] [security2:error] [pid 1321:tid 1499] [client 52.139.37.240:31624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/CDX1.php"] [unique_id "apK-b2jCPtor9NZ-byT8sAAABkc"]
[Sat Aug 29 05:11:43.876453 2026] [security2:error] [pid 11274:tid 11502] [client 40.83.93.50:8659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/alfa-rex1.php"] [unique_id "apK-b2bX5DA3XO6e_qRLeAAAAUM"]
[Sat Aug 29 05:11:43.879630 2026] [security2:error] [pid 1321:tid 1500] [client 20.104.18.15:37836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/akismet.php"] [unique_id "apK-b2jCPtor9NZ-byT8sQAABkg"]
[Sat Aug 29 05:11:43.893778 2026] [security2:error] [pid 1321:tid 1598] [client 158.158.54.35:8458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-conflg.php"] [unique_id "apK-b2jCPtor9NZ-byT8sgAABqk"]
[Sat Aug 29 05:11:43.957175 2026] [security2:error] [pid 1321:tid 1561] [client 20.220.204.93:15810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/tfm.php"] [unique_id "apK-b2jCPtor9NZ-byT8swAABoQ"]
[Sat Aug 29 05:11:43.983301 2026] [security2:error] [pid 1321:tid 1590] [client 158.23.184.117:18316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/.well-known/system.php"] [unique_id "apK-b2jCPtor9NZ-byT8tAAABqE"]
[Sat Aug 29 05:11:43.986231 2026] [security2:error] [pid 11274:tid 11470] [client 20.48.250.41:25589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/easy.php"] [unique_id "apK-b2bX5DA3XO6e_qRLgwAAASQ"]
[Sat Aug 29 05:11:43.989372 2026] [security2:error] [pid 11274:tid 11533] [client 40.83.93.50:9986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/alfa.php"] [unique_id "apK-b2bX5DA3XO6e_qRLhQAAAWI"]
[Sat Aug 29 05:11:43.991772 2026] [security2:error] [pid 1321:tid 1606] [client 20.52.41.200:5176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/item.php"] [unique_id "apK-b2jCPtor9NZ-byT8tQAABrE"]
[Sat Aug 29 05:11:43.998852 2026] [security2:error] [pid 11274:tid 11509] [client 20.48.250.41:36129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/users.php"] [unique_id "apK-b2bX5DA3XO6e_qRLiQAAAUo"]
[Sat Aug 29 05:11:44.000690 2026] [security2:error] [pid 1321:tid 1520] [client 158.23.184.117:53927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/wp-content/admin.php"] [unique_id "apK-cGjCPtor9NZ-byT8tgAABlw"]
[Sat Aug 29 05:11:44.011410 2026] [security2:error] [pid 1321:tid 1595] [client 20.100.175.163:4127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK-cGjCPtor9NZ-byT8twAABqY"]
[Sat Aug 29 05:11:44.013177 2026] [security2:error] [pid 11274:tid 11496] [client 20.52.41.200:2869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-admin/a.php"] [unique_id "apK-cGbX5DA3XO6e_qRLjQAAAT0"]
[Sat Aug 29 05:11:44.022151 2026] [security2:error] [pid 1321:tid 1522] [client 52.139.37.240:22436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/paku.php"] [unique_id "apK-cGjCPtor9NZ-byT8uAAABl4"]
[Sat Aug 29 05:11:44.039036 2026] [security2:error] [pid 11274:tid 11561] [client 20.104.18.15:37853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/ajax.php"] [unique_id "apK-cGbX5DA3XO6e_qRLjwAAAX0"]
[Sat Aug 29 05:11:44.076717 2026] [security2:error] [pid 11274:tid 11537] [client 74.7.175.147:57468] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "oncesocial.com"] [uri "/robots.txt"] [unique_id "apK-cGbX5DA3XO6e_qRLkgAAAWY"]
[Sat Aug 29 05:11:44.088231 2026] [proxy_http:error] [pid 11274:tid 11483] (20014)Internal error (specific information not available): [client 34.22.86.106:36108] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:11:44.088243 2026] [proxy:error] [pid 11274:tid 11483] [client 34.22.86.106:36108] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/api/.git/config
[Sat Aug 29 05:11:44.094281 2026] [security2:error] [pid 11274:tid 11553] [client 52.139.37.240:31498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/akcc.php"] [unique_id "apK-cGbX5DA3XO6e_qRLmAAAAXU"]
[Sat Aug 29 05:11:44.105912 2026] [proxy_http:error] [pid 11274:tid 11552] (20014)Internal error (specific information not available): [client 34.22.86.106:36132] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:11:44.105939 2026] [proxy:error] [pid 11274:tid 11552] [client 34.22.86.106:36132] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/public/.git/config
[Sat Aug 29 05:11:44.109549 2026] [proxy_http:error] [pid 1321:tid 1518] (20014)Internal error (specific information not available): [client 34.22.86.106:36160] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:11:44.109562 2026] [proxy:error] [pid 1321:tid 1518] [client 34.22.86.106:36160] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/var/www/.git/config
[Sat Aug 29 05:11:44.110537 2026] [proxy_http:error] [pid 11274:tid 11552] (20014)Internal error (specific information not available): [client 34.22.86.106:36132] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:11:44.110552 2026] [proxy:error] [pid 11274:tid 11552] [client 34.22.86.106:36132] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/502.shtml
[Sat Aug 29 05:11:44.114375 2026] [proxy_http:error] [pid 1321:tid 1518] (20014)Internal error (specific information not available): [client 34.22.86.106:36160] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:11:44.114389 2026] [proxy:error] [pid 1321:tid 1518] [client 34.22.86.106:36160] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/502.shtml
[Sat Aug 29 05:11:44.118831 2026] [proxy_http:error] [pid 1321:tid 1509] (20014)Internal error (specific information not available): [client 34.22.86.106:36182] AH01102: error reading status line from remote server 127.0.0.1:2082
[Sat Aug 29 05:11:44.118845 2026] [proxy:error] [pid 1321:tid 1509] [client 34.22.86.106:36182] AH00898: Error reading from remote server returned by /___proxy_subdomain_cpanel/html/.git/config
[Sat Aug 29 05:11:44.129059 2026] [security2:error] [pid 11274:tid 11512] [client 158.23.184.117:64790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/.well-known/users.php"] [unique_id "apK-cGbX5DA3XO6e_qRLngAAAU0"]
[Sat Aug 29 05:11:44.136378 2026] [security2:error] [pid 11274:tid 11494] [client 20.240.128.207:16065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/k.php"] [unique_id "apK-cGbX5DA3XO6e_qRLoAAAATs"]
[Sat Aug 29 05:11:44.143284 2026] [security2:error] [pid 11274:tid 11482] [client 20.220.204.93:58012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/Geforce.php"] [unique_id "apK-cGbX5DA3XO6e_qRLoQAAAS8"]
[Sat Aug 29 05:11:44.148125 2026] [security2:error] [pid 1321:tid 1576] [client 158.23.184.117:42447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/wp-mail.php"] [unique_id "apK-cGjCPtor9NZ-byT8wAAABpM"]
[Sat Aug 29 05:11:44.161109 2026] [security2:error] [pid 1321:tid 1580] [client 68.155.159.216:14244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK-cGjCPtor9NZ-byT8wQAABpc"]
[Sat Aug 29 05:11:44.164327 2026] [security2:error] [pid 11274:tid 11554] [client 20.151.200.44:65118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/13ede.php"] [unique_id "apK-cGbX5DA3XO6e_qRLowAAAXY"]
[Sat Aug 29 05:11:44.180265 2026] [security2:error] [pid 1321:tid 1560] [client 20.104.18.15:37824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/atomlib.php"] [unique_id "apK-cGjCPtor9NZ-byT8wgAABoM"]
[Sat Aug 29 05:11:44.187666 2026] [security2:error] [pid 11274:tid 11498] [client 158.158.54.35:7526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/filemanager.php"] [unique_id "apK-cGbX5DA3XO6e_qRLqAAAAT8"]
[Sat Aug 29 05:11:44.205878 2026] [security2:error] [pid 11274:tid 11559] [client 74.7.175.147:47244] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "oncesocial.com"] [uri "/robots.txt"] [unique_id "apK-cGbX5DA3XO6e_qRLqQAAAXs"], referer: http://oncesocial.com/robots.txt
[Sat Aug 29 05:11:44.209603 2026] [security2:error] [pid 11274:tid 11524] [client 20.196.209.81:8885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-admin/system.php"] [unique_id "apK-cGbX5DA3XO6e_qRLqgAAAVk"]
[Sat Aug 29 05:11:44.230562 2026] [security2:error] [pid 11274:tid 11464] [client 158.23.147.79:43304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/xmlrpc.php"] [unique_id "apK-cGbX5DA3XO6e_qRLrgAAAR4"]
[Sat Aug 29 05:11:44.235427 2026] [security2:error] [pid 11274:tid 11545] [client 40.83.93.50:10893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/bypass.php"] [unique_id "apK-cGbX5DA3XO6e_qRLrwAAAW0"]
[Sat Aug 29 05:11:44.235488 2026] [security2:error] [pid 1321:tid 1536] [client 52.139.37.240:21857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/rtx.php"] [unique_id "apK-cGjCPtor9NZ-byT8xAAABmw"]
[Sat Aug 29 05:11:44.262953 2026] [security2:error] [pid 1321:tid 1593] [client 4.205.62.107:63958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/aws_sdk_settings.php"] [unique_id "apK-cGjCPtor9NZ-byT8xQAABqQ"]
[Sat Aug 29 05:11:44.271529 2026] [security2:error] [pid 1321:tid 1587] [client 20.151.200.44:62204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/quoys.php"] [unique_id "apK-cGjCPtor9NZ-byT8xgAABp4"]
[Sat Aug 29 05:11:44.276634 2026] [security2:error] [pid 1321:tid 1565] [client 20.104.49.130:45709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/ty.php"] [unique_id "apK-cGjCPtor9NZ-byT8xwAABog"]
[Sat Aug 29 05:11:44.277163 2026] [security2:error] [pid 1321:tid 1491] [client 68.155.159.216:23484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK-cGjCPtor9NZ-byT8yAAABj8"]
[Sat Aug 29 05:11:44.281911 2026] [security2:error] [pid 11274:tid 11481] [client 158.23.184.117:17865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/.well-known/wp-blog-header.php"] [unique_id "apK-cGbX5DA3XO6e_qRLtwAAAS4"]
[Sat Aug 29 05:11:44.289313 2026] [security2:error] [pid 1321:tid 1539] [client 52.139.37.240:31087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK-cGjCPtor9NZ-byT8yQAABm8"]
[Sat Aug 29 05:11:44.299645 2026] [security2:error] [pid 11274:tid 11511] [client 158.23.147.79:62727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-admin/css/index.php"] [unique_id "apK-cGbX5DA3XO6e_qRLuQAAAUw"]
[Sat Aug 29 05:11:44.299776 2026] [core:error] [pid 11274:tid 11465] [client 158.23.184.117:42776] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:44.299786 2026] [core:error] [pid 11274:tid 11465] [client 158.23.184.117:42776] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:44.317614 2026] [security2:error] [pid 11274:tid 11544] [client 20.100.175.163:7944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/24.php"] [unique_id "apK-cGbX5DA3XO6e_qRLvAAAAWw"]
[Sat Aug 29 05:11:44.318375 2026] [security2:error] [pid 11274:tid 11506] [client 20.151.200.44:27175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/mcd.php"] [unique_id "apK-cGbX5DA3XO6e_qRLvQAAAUc"]
[Sat Aug 29 05:11:44.318838 2026] [security2:error] [pid 11274:tid 11455] [client 4.205.62.107:64942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/wp-konfig.php"] [unique_id "apK-cGbX5DA3XO6e_qRLvgAAARU"]
[Sat Aug 29 05:11:44.323834 2026] [security2:error] [pid 1321:tid 1527] [client 20.104.18.15:37845] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/1.php"] [unique_id "apK-cGjCPtor9NZ-byT8ygAABmM"]
[Sat Aug 29 05:11:44.323914 2026] [security2:error] [pid 1321:tid 1527] [client 20.104.18.15:37845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/1.php"] [unique_id "apK-cGjCPtor9NZ-byT8ygAABmM"]
[Sat Aug 29 05:11:44.324079 2026] [security2:error] [pid 1321:tid 1526] [client 158.158.54.35:32213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/123.php"] [unique_id "apK-cGjCPtor9NZ-byT8ywAABmI"]
[Sat Aug 29 05:11:44.340328 2026] [security2:error] [pid 11274:tid 11526] [client 68.155.159.216:2032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/cgi-bin/index.php"] [unique_id "apK-cGbX5DA3XO6e_qRLwgAAAVs"]
[Sat Aug 29 05:11:44.340421 2026] [security2:error] [pid 1321:tid 1594] [client 20.240.128.207:8152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/ws.php"] [unique_id "apK-cGjCPtor9NZ-byT8zAAABqU"]
[Sat Aug 29 05:11:44.343716 2026] [security2:error] [pid 11274:tid 11461] [client 20.220.204.93:15518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/click.php"] [unique_id "apK-cGbX5DA3XO6e_qRLwwAAARs"]
[Sat Aug 29 05:11:44.345826 2026] [security2:error] [pid 11274:tid 11499] [client 20.151.200.44:64040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/sef.php"] [unique_id "apK-cGbX5DA3XO6e_qRLxAAAAUA"]
[Sat Aug 29 05:11:44.378181 2026] [security2:error] [pid 11274:tid 11495] [client 158.23.147.79:50065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK-cGbX5DA3XO6e_qRLxgAAATw"]
[Sat Aug 29 05:11:44.393726 2026] [security2:error] [pid 11274:tid 11501] [client 40.83.93.50:8656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/headerg.php"] [unique_id "apK-cGbX5DA3XO6e_qRLywAAAUI"]
[Sat Aug 29 05:11:44.430043 2026] [security2:error] [pid 11274:tid 11480] [client 52.139.37.240:21844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/update/da222.php"] [unique_id "apK-cGbX5DA3XO6e_qRL0wAAAS0"]
[Sat Aug 29 05:11:44.431137 2026] [security2:error] [pid 11274:tid 11516] [client 4.205.62.107:6525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/app/Helpers/bladeHelpers.php"] [unique_id "apK-cGbX5DA3XO6e_qRL1AAAAVE"]
[Sat Aug 29 05:11:44.431919 2026] [security2:error] [pid 11274:tid 11487] [client 4.205.62.107:63293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/config_dev.php"] [unique_id "apK-cGbX5DA3XO6e_qRL1QAAATQ"]
[Sat Aug 29 05:11:44.432334 2026] [security2:error] [pid 1321:tid 1547] [client 158.23.184.117:18340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/.well-known/wp-links-opml.php"] [unique_id "apK-cGjCPtor9NZ-byT80wAABnY"]
[Sat Aug 29 05:11:44.443573 2026] [security2:error] [pid 11274:tid 11515] [client 158.23.184.117:42444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/3.php"] [unique_id "apK-cGbX5DA3XO6e_qRL2AAAAVA"]
[Sat Aug 29 05:11:44.458350 2026] [security2:error] [pid 11274:tid 11527] [client 20.52.41.200:5145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/t.php"] [unique_id "apK-cGbX5DA3XO6e_qRL2QAAAVw"]
[Sat Aug 29 05:11:44.460212 2026] [security2:error] [pid 1321:tid 1601] [client 158.23.147.79:38881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wzy.php"] [unique_id "apK-cGjCPtor9NZ-byT81AAABqw"]
[Sat Aug 29 05:11:44.466903 2026] [security2:error] [pid 1321:tid 1544] [client 158.23.147.79:64486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/chosen.php"] [unique_id "apK-cGjCPtor9NZ-byT81gAABnQ"]
[Sat Aug 29 05:11:44.470730 2026] [core:error] [pid 1321:tid 1525] [client 20.52.41.200:2178] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:44.470754 2026] [core:error] [pid 1321:tid 1525] [client 20.52.41.200:2178] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:44.478794 2026] [security2:error] [pid 1321:tid 1555] [client 20.104.49.130:36414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/ops.php"] [unique_id "apK-cGjCPtor9NZ-byT81wAABn4"]
[Sat Aug 29 05:11:44.482755 2026] [security2:error] [pid 1321:tid 1514] [client 52.139.37.240:31653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/s.php"] [unique_id "apK-cGjCPtor9NZ-byT82AAABlY"]
[Sat Aug 29 05:11:44.484224 2026] [security2:error] [pid 11274:tid 11555] [client 40.83.93.50:20331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/feed-rss2-queue.php"] [unique_id "apK-cGbX5DA3XO6e_qRL3wAAAXc"]
[Sat Aug 29 05:11:44.493601 2026] [security2:error] [pid 1321:tid 1488] [client 158.23.147.79:24461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/dropdown.php"] [unique_id "apK-cGjCPtor9NZ-byT82QAABjw"]
[Sat Aug 29 05:11:44.499255 2026] [security2:error] [pid 11274:tid 11463] [client 20.100.175.163:6633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/xda.php"] [unique_id "apK-cGbX5DA3XO6e_qRL4QAAAR0"]
[Sat Aug 29 05:11:44.526062 2026] [security2:error] [pid 1321:tid 1543] [client 20.104.18.15:37765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/samll.php"] [unique_id "apK-cGjCPtor9NZ-byT82gAABnM"]
[Sat Aug 29 05:11:44.526383 2026] [security2:error] [pid 1321:tid 1513] [client 20.197.61.180:13209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/randkeyword.php"] [unique_id "apK-cGjCPtor9NZ-byT82wAABlU"]
[Sat Aug 29 05:11:44.563903 2026] [security2:error] [pid 1321:tid 1531] [client 45.148.10.62:53710] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "proaider.com"] [uri "/api/.env"] [unique_id "apK-cGjCPtor9NZ-byT83AAABmc"]
[Sat Aug 29 05:11:44.574995 2026] [security2:error] [pid 1321:tid 1599] [client 158.23.184.117:64773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/.well-known/wp-load.php"] [unique_id "apK-cGjCPtor9NZ-byT83QAABqo"]
[Sat Aug 29 05:11:44.578045 2026] [security2:error] [pid 1321:tid 1588] [client 20.220.204.93:59039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-cGjCPtor9NZ-byT83gAABp8"]
[Sat Aug 29 05:11:44.587470 2026] [security2:error] [pid 11274:tid 11570] [client 158.23.184.117:53922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "apK-cGbX5DA3XO6e_qRL6gAAAYY"]
[Sat Aug 29 05:11:44.593415 2026] [security2:error] [pid 1321:tid 1608] [client 158.23.147.79:44510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK-cGjCPtor9NZ-byT83wAABrM"]
[Sat Aug 29 05:11:44.605278 2026] [security2:error] [pid 1321:tid 1510] [client 20.196.209.81:19509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-admin/test.php"] [unique_id "apK-cGjCPtor9NZ-byT84AAABlI"]
[Sat Aug 29 05:11:44.632437 2026] [security2:error] [pid 1321:tid 1523] [client 20.240.128.207:10931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/root.php"] [unique_id "apK-cGjCPtor9NZ-byT84QAABl8"]
[Sat Aug 29 05:11:44.639776 2026] [security2:error] [pid 1321:tid 1574] [client 20.151.200.44:64603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/admin123.php"] [unique_id "apK-cGjCPtor9NZ-byT84gAABpE"]
[Sat Aug 29 05:11:44.645230 2026] [security2:error] [pid 1321:tid 1497] [client 158.158.54.35:19368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-content/themes/admin.php"] [unique_id "apK-cGjCPtor9NZ-byT84wAABkU"]
[Sat Aug 29 05:11:44.662419 2026] [security2:error] [pid 11274:tid 11496] [client 68.155.159.216:62775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/content.php"] [unique_id "apK-cGbX5DA3XO6e_qRL8AAAAT0"]
[Sat Aug 29 05:11:44.672805 2026] [security2:error] [pid 11274:tid 11471] [client 20.220.204.93:38903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/ms.php"] [unique_id "apK-cGbX5DA3XO6e_qRL8gAAASU"]
[Sat Aug 29 05:11:44.680639 2026] [security2:error] [pid 1321:tid 1600] [client 52.139.37.240:31551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/sagax.php"] [unique_id "apK-cGjCPtor9NZ-byT85AAABqs"]
[Sat Aug 29 05:11:44.687232 2026] [security2:error] [pid 11274:tid 11467] [client 4.205.62.107:59106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/groceries/index.php"] [unique_id "apK-cGbX5DA3XO6e_qRL8wAAASE"]
[Sat Aug 29 05:11:44.692836 2026] [proxy_http:error] [pid 1018003:tid 1018253] (70007)The timeout specified has expired: [client 127.0.0.1:49504] AH01102: error reading status line from remote server 50.6.92.44:8443, referer: https://guraonline.com/
[Sat Aug 29 05:11:44.692856 2026] [proxy:error] [pid 1018003:tid 1018253] [client 127.0.0.1:49504] AH00898: Error reading from remote server returned by /502.shtml, referer: https://guraonline.com/
[Sat Aug 29 05:11:44.719330 2026] [security2:error] [pid 11274:tid 11561] [client 158.23.184.117:18333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/.well-known/wp-mail.php"] [unique_id "apK-cGbX5DA3XO6e_qRL9QAAAX0"]
[Sat Aug 29 05:11:44.722286 2026] [security2:error] [pid 11274:tid 11543] [client 40.83.93.50:10910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/extractable-loader-head.php"] [unique_id "apK-cGbX5DA3XO6e_qRL9gAAAWs"]
[Sat Aug 29 05:11:44.722512 2026] [security2:error] [pid 11274:tid 11491] [client 20.104.18.15:37807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/she11.php"] [unique_id "apK-cGbX5DA3XO6e_qRL9wAAATg"]
[Sat Aug 29 05:11:44.736965 2026] [security2:error] [pid 1321:tid 1603] [client 68.155.159.216:56721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK-cGjCPtor9NZ-byT85QAABq4"]
[Sat Aug 29 05:11:44.740531 2026] [security2:error] [pid 11274:tid 11482] [client 52.139.37.240:21881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/wp-admin/min.php"] [unique_id "apK-cGbX5DA3XO6e_qRL-gAAAS8"]
[Sat Aug 29 05:11:44.744993 2026] [security2:error] [pid 1321:tid 1506] [client 45.148.10.62:53710] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "proaider.com"] [uri "/.env.bak"] [unique_id "apK-cGjCPtor9NZ-byT85gAABk4"]
[Sat Aug 29 05:11:44.749838 2026] [core:error] [pid 11274:tid 11476] [client 158.23.184.117:42796] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:44.749850 2026] [core:error] [pid 11274:tid 11476] [client 158.23.184.117:42796] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:44.772143 2026] [security2:error] [pid 11274:tid 11565] [client 20.220.204.93:59097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-cGbX5DA3XO6e_qRMAAAAAYE"]
[Sat Aug 29 05:11:44.785090 2026] [security2:error] [pid 1321:tid 1613] [client 68.155.159.216:2044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-l0gin.php"] [unique_id "apK-cGjCPtor9NZ-byT85wAABrg"]
[Sat Aug 29 05:11:44.798545 2026] [security2:error] [pid 1321:tid 1566] [client 158.158.54.35:32226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/yanz.php"] [unique_id "apK-cGjCPtor9NZ-byT86AAABok"]
[Sat Aug 29 05:11:44.841372 2026] [security2:error] [pid 11274:tid 11507] [client 20.240.128.207:5225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-themes.php"] [unique_id "apK-cGbX5DA3XO6e_qRMCAAAAUg"]
[Sat Aug 29 05:11:44.857134 2026] [security2:error] [pid 11274:tid 11484] [client 20.104.18.15:37788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/kerang.php"] [unique_id "apK-cGbX5DA3XO6e_qRMCwAAATE"]
[Sat Aug 29 05:11:44.863410 2026] [security2:error] [pid 11274:tid 11465] [client 158.23.147.79:7147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-cGbX5DA3XO6e_qRMDgAAAR8"]
[Sat Aug 29 05:11:44.863617 2026] [security2:error] [pid 11274:tid 11553] [client 40.83.93.50:8665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/meta.php"] [unique_id "apK-cGbX5DA3XO6e_qRMDwAAAXU"]
[Sat Aug 29 05:11:44.881957 2026] [security2:error] [pid 11274:tid 11545] [client 158.23.184.117:18154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/.well-known/wp-settings.php"] [unique_id "apK-cGbX5DA3XO6e_qRMEQAAAW0"]
[Sat Aug 29 05:11:44.894197 2026] [security2:error] [pid 11274:tid 11504] [client 158.23.184.117:53905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/wp-admin/css/admin.php"] [unique_id "apK-cGbX5DA3XO6e_qRMEwAAAUU"]
[Sat Aug 29 05:11:44.914113 2026] [security2:error] [pid 1321:tid 1528] [client 20.52.41.200:5143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/i.php"] [unique_id "apK-cGjCPtor9NZ-byT86QAABmQ"]
[Sat Aug 29 05:11:44.918916 2026] [security2:error] [pid 11274:tid 11530] [client 20.220.204.93:59034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/ff1.php"] [unique_id "apK-cGbX5DA3XO6e_qRMGAAAAV8"]
[Sat Aug 29 05:11:44.920103 2026] [security2:error] [pid 1321:tid 1609] [client 20.220.204.93:22079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/zxekqlxb.php"] [unique_id "apK-cGjCPtor9NZ-byT86gAABrQ"]
[Sat Aug 29 05:11:44.922190 2026] [security2:error] [pid 1321:tid 1590] [client 20.52.41.200:2786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK-cGjCPtor9NZ-byT86wAABqE"]
[Sat Aug 29 05:11:44.935622 2026] [security2:error] [pid 1321:tid 1591] [client 20.151.200.44:62269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/vbbn.php"] [unique_id "apK-cGjCPtor9NZ-byT87AAABqI"]
[Sat Aug 29 05:11:44.947592 2026] [security2:error] [pid 1321:tid 1564] [client 52.139.37.240:21858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/wp-admin/wp-fileesx-449.php"] [unique_id "apK-cGjCPtor9NZ-byT87QAABoc"]
[Sat Aug 29 05:11:44.960052 2026] [security2:error] [pid 11274:tid 11505] [client 20.100.175.163:25184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK-cGbX5DA3XO6e_qRMHAAAAUY"]
[Sat Aug 29 05:11:44.962329 2026] [security2:error] [pid 11274:tid 11559] [client 40.83.93.50:3941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/inputs.php"] [unique_id "apK-cGbX5DA3XO6e_qRMHQAAAXs"]
[Sat Aug 29 05:11:44.986071 2026] [security2:error] [pid 11274:tid 11525] [client 4.205.62.107:32536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/cloud.php"] [unique_id "apK-cGbX5DA3XO6e_qRMIQAAAVo"]
[Sat Aug 29 05:11:44.990811 2026] [security2:error] [pid 11274:tid 11534] [client 20.104.18.15:37865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/m.php"] [unique_id "apK-cGbX5DA3XO6e_qRMIwAAAWM"]
[Sat Aug 29 05:11:44.991483 2026] [security2:error] [pid 1321:tid 1607] [client 20.100.175.163:19930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/theme.php"] [unique_id "apK-cGjCPtor9NZ-byT88gAABrI"]
[Sat Aug 29 05:11:45.014310 2026] [security2:error] [pid 1321:tid 1480] [remote 40.77.167.78:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.167.77.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantsfans.net"] [uri "/message_board/index.php"] [unique_id "apK-cWjCPtor9NZ-byT88wAGhXk"]
[Sat Aug 29 05:11:45.017745 2026] [security2:error] [pid 1321:tid 1536] [client 57.141.14.63:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/cart/"] [unique_id "apK-cWjCPtor9NZ-byT89AAABmw"]
[Sat Aug 29 05:11:45.027142 2026] [security2:error] [pid 11274:tid 11452] [client 158.23.184.117:64770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/.well-known/wp-signup.php"] [unique_id "apK-cWbX5DA3XO6e_qRMKQAAARI"]
[Sat Aug 29 05:11:45.047620 2026] [security2:error] [pid 1321:tid 1542] [client 158.23.184.117:42806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/bthil.php"] [unique_id "apK-cWjCPtor9NZ-byT89QAABnI"]
[Sat Aug 29 05:11:45.048171 2026] [security2:error] [pid 1321:tid 1589] [client 68.155.159.216:49134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/wp-content/themes/too.php"] [unique_id "apK-cWjCPtor9NZ-byT89gAABqA"]
[Sat Aug 29 05:11:45.054184 2026] [security2:error] [pid 11274:tid 11529] [client 158.23.147.79:14315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-admin/index.php"] [unique_id "apK-cWbX5DA3XO6e_qRMKwAAAV4"]
[Sat Aug 29 05:11:45.068044 2026] [security2:error] [pid 1321:tid 1526] [client 20.220.204.93:59024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/t.php"] [unique_id "apK-cWjCPtor9NZ-byT89wAABmI"]
[Sat Aug 29 05:11:45.077271 2026] [security2:error] [pid 11274:tid 11313] [remote 93.123.109.228:33324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/test.php"] [unique_id "apK-cWbX5DA3XO6e_qRMLgABNgA"]
[Sat Aug 29 05:11:45.102877 2026] [security2:error] [pid 1321:tid 1521] [client 158.158.54.35:23689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-admin/css/admin.php"] [unique_id "apK-cWjCPtor9NZ-byT8-QAABl0"]
[Sat Aug 29 05:11:45.121072 2026] [security2:error] [pid 11274:tid 11518] [client 68.155.159.216:56520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK-cWbX5DA3XO6e_qRMMwAAAVM"]
[Sat Aug 29 05:11:45.122940 2026] [security2:error] [pid 11274:tid 11555] [client 20.104.18.15:37884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/fling.php"] [unique_id "apK-cWbX5DA3XO6e_qRMNAAAAXc"]
[Sat Aug 29 05:11:45.127516 2026] [core:error] [pid 1321:tid 1601] [client 57.141.14.37:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:45.127530 2026] [core:error] [pid 1321:tid 1601] [client 57.141.14.37:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:45.133705 2026] [security2:error] [pid 11274:tid 11566] [client 185.104.184.230:45560] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.mvo.tyy.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "apK-cWbX5DA3XO6e_qRMOAAAAYI"]
[Sat Aug 29 05:11:45.134991 2026] [security2:error] [pid 11274:tid 11558] [client 20.240.128.207:2619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/p.php"] [unique_id "apK-cWbX5DA3XO6e_qRMOgAAAXo"]
[Sat Aug 29 05:11:45.135079 2026] [security2:error] [pid 11274:tid 11514] [client 20.196.209.81:17758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-admin/user/f35.php"] [unique_id "apK-cWbX5DA3XO6e_qRMOQAAAU8"]
[Sat Aug 29 05:11:45.144705 2026] [security2:error] [pid 1321:tid 1512] [client 52.139.37.240:22508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/wp-content/themes/min.php"] [unique_id "apK-cWjCPtor9NZ-byT8_AAABlQ"]
[Sat Aug 29 05:11:45.164652 2026] [security2:error] [pid 1321:tid 1507] [client 20.104.49.130:58066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "coveryourauto.com"] [uri "/xa.php"] [unique_id "apK-cWjCPtor9NZ-byT8_QAABk8"]
[Sat Aug 29 05:11:45.173520 2026] [security2:error] [pid 11274:tid 11469] [client 158.23.184.117:18117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/002.php"] [unique_id "apK-cWbX5DA3XO6e_qRMPwAAASM"]
[Sat Aug 29 05:11:45.184692 2026] [security2:error] [pid 11274:tid 11488] [client 52.139.37.240:31671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/wp-content/plugins/ftde.php"] [unique_id "apK-cWbX5DA3XO6e_qRMQAAAATU"]
[Sat Aug 29 05:11:45.194479 2026] [security2:error] [pid 11274:tid 11449] [client 158.23.184.117:53917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/file.php"] [unique_id "apK-cWbX5DA3XO6e_qRMQQAAAQ8"]
[Sat Aug 29 05:11:45.198597 2026] [security2:error] [pid 1321:tid 1491] [client 40.83.93.50:6658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/defaults.php"] [unique_id "apK-cWjCPtor9NZ-byT8_gAABj8"]
[Sat Aug 29 05:11:45.232803 2026] [security2:error] [pid 1321:tid 1533] [client 20.220.204.93:59065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/erty.php"] [unique_id "apK-cWjCPtor9NZ-byT8_wAABmk"]
[Sat Aug 29 05:11:45.240080 2026] [security2:error] [pid 1321:tid 1596] [client 158.158.54.35:14866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/autoload_classmap.php"] [unique_id "apK-cWjCPtor9NZ-byT9AAAABqc"]
[Sat Aug 29 05:11:45.249816 2026] [security2:error] [pid 1321:tid 1582] [client 20.197.61.180:13190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/goods.php"] [unique_id "apK-cWjCPtor9NZ-byT9AQAABpk"]
[Sat Aug 29 05:11:45.250302 2026] [security2:error] [pid 11274:tid 11571] [client 103.185.242.143:63634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-cWbX5DA3XO6e_qRMSAAAAYc"]
[Sat Aug 29 05:11:45.250408 2026] [security2:error] [pid 11274:tid 11571] [client 103.185.242.143:63634] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-cWbX5DA3XO6e_qRMSAAAAYc"]
[Sat Aug 29 05:11:45.250921 2026] [security2:error] [pid 1321:tid 1496] [client 20.151.200.44:65263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/7h.php"] [unique_id "apK-cWjCPtor9NZ-byT9AwAABkQ"]
[Sat Aug 29 05:11:45.253388 2026] [security2:error] [pid 11274:tid 11490] [client 20.104.18.15:37780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/btyuio.php"] [unique_id "apK-cWbX5DA3XO6e_qRMSgAAATc"]
[Sat Aug 29 05:11:45.258220 2026] [security2:error] [pid 1321:tid 1599] [client 20.220.204.93:15490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/init.php"] [unique_id "apK-cWjCPtor9NZ-byT9BAAABqo"]
[Sat Aug 29 05:11:45.258670 2026] [security2:error] [pid 11274:tid 11470] [client 68.155.159.216:14145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK-cWbX5DA3XO6e_qRMSwAAASQ"]
[Sat Aug 29 05:11:45.317611 2026] [security2:error] [pid 11274:tid 11451] [client 158.23.184.117:64791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/0x.php"] [unique_id "apK-cWbX5DA3XO6e_qRMUQAAARE"]
[Sat Aug 29 05:11:45.336978 2026] [security2:error] [pid 1321:tid 1588] [client 52.139.37.240:22486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/wp-content/themes/x/bypass.php"] [unique_id "apK-cWjCPtor9NZ-byT9BgAABp8"]
[Sat Aug 29 05:11:45.337898 2026] [security2:error] [pid 11274:tid 11568] [client 158.23.184.117:53898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/lock360.php"] [unique_id "apK-cWbX5DA3XO6e_qRMVgAAAYQ"]
[Sat Aug 29 05:11:45.343484 2026] [security2:error] [pid 1321:tid 1498] [client 40.83.93.50:3406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/dxc.php"] [unique_id "apK-cWjCPtor9NZ-byT9CAAABkY"]
[Sat Aug 29 05:11:45.343691 2026] [security2:error] [pid 1321:tid 1492] [client 20.240.128.207:4183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-trackback.php"] [unique_id "apK-cWjCPtor9NZ-byT9BwAABkA"]
[Sat Aug 29 05:11:45.363064 2026] [security2:error] [pid 11274:tid 11543] [client 68.155.159.216:21474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/content.php"] [unique_id "apK-cWbX5DA3XO6e_qRMWQAAAWs"]
[Sat Aug 29 05:11:45.365122 2026] [security2:error] [pid 11274:tid 11468] [client 20.52.41.200:4774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/deepseek_d.php"] [unique_id "apK-cWbX5DA3XO6e_qRMWgAAASI"]
[Sat Aug 29 05:11:45.372283 2026] [security2:error] [pid 11274:tid 11523] [client 20.52.41.200:2185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alisonandpeter.strangeworx.com"] [uri "/wp-admin.php"] [unique_id "apK-cWbX5DA3XO6e_qRMWwAAAVg"]
[Sat Aug 29 05:11:45.380714 2026] [security2:error] [pid 11274:tid 11466] [client 52.139.37.240:31625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "apK-cWbX5DA3XO6e_qRMXQAAASA"]
[Sat Aug 29 05:11:45.391366 2026] [security2:error] [pid 11274:tid 11512] [client 20.151.200.44:63773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/k8.php"] [unique_id "apK-cWbX5DA3XO6e_qRMXgAAAU0"]
[Sat Aug 29 05:11:45.413955 2026] [security2:error] [pid 1321:tid 1574] [client 20.104.18.15:37771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/dehnl.php"] [unique_id "apK-cWjCPtor9NZ-byT9CQAABpE"]
[Sat Aug 29 05:11:45.420893 2026] [security2:error] [pid 11274:tid 11498] [client 158.23.147.79:54002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK-cWbX5DA3XO6e_qRMYwAAAT8"]
[Sat Aug 29 05:11:45.430476 2026] [security2:error] [pid 1321:tid 1500] [client 185.104.184.230:45568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.184.104.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "webdisk.mvo.tyy.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "apK-cWjCPtor9NZ-byT9CgAABkg"]
[Sat Aug 29 05:11:45.443772 2026] [security2:error] [pid 1321:tid 1598] [client 4.205.62.107:63949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/setup-config.php"] [unique_id "apK-cWjCPtor9NZ-byT9CwAABqk"]
[Sat Aug 29 05:11:45.448405 2026] [security2:error] [pid 11274:tid 11475] [client 68.155.159.216:23463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK-cWbX5DA3XO6e_qRMZgAAASk"]
[Sat Aug 29 05:11:45.449664 2026] [security2:error] [pid 1321:tid 1608] [client 40.83.93.50:10883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/class-walker-category-dropdown-class.php"] [unique_id "apK-cWjCPtor9NZ-byT9DAAABrM"]
[Sat Aug 29 05:11:45.454055 2026] [security2:error] [pid 11274:tid 11507] [client 4.205.62.107:64983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/25.php"] [unique_id "apK-cWbX5DA3XO6e_qRMaQAAAUg"]
[Sat Aug 29 05:11:45.464579 2026] [security2:error] [pid 11274:tid 11494] [client 158.23.184.117:18334] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.bistrobrew.com"] [uri "/1.php"] [unique_id "apK-cWbX5DA3XO6e_qRMbAAAATs"]
[Sat Aug 29 05:11:45.464689 2026] [security2:error] [pid 11274:tid 11494] [client 158.23.184.117:18334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/1.php"] [unique_id "apK-cWbX5DA3XO6e_qRMbAAAATs"]
[Sat Aug 29 05:11:45.485646 2026] [security2:error] [pid 1321:tid 1497] [client 158.23.184.117:53936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/fpwch.php"] [unique_id "apK-cWjCPtor9NZ-byT9DQAABkU"]
[Sat Aug 29 05:11:45.488547 2026] [security2:error] [pid 11274:tid 11483] [client 20.100.175.163:6641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/classwithtostring.php"] [unique_id "apK-cWbX5DA3XO6e_qRMbwAAATA"]
[Sat Aug 29 05:11:45.507006 2026] [security2:error] [pid 1321:tid 1561] [client 20.104.49.130:60751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/bthil.php"] [unique_id "apK-cWjCPtor9NZ-byT9DgAABoQ"]
[Sat Aug 29 05:11:45.551948 2026] [security2:error] [pid 11274:tid 11461] [client 158.23.147.79:49852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/makeasmtp.php"] [unique_id "apK-cWbX5DA3XO6e_qRMdgAAARs"]
[Sat Aug 29 05:11:45.559938 2026] [security2:error] [pid 11274:tid 11521] [client 20.196.209.81:17735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-admin/user/min.php"] [unique_id "apK-cWbX5DA3XO6e_qRMdwAAAVY"]
[Sat Aug 29 05:11:45.562178 2026] [security2:error] [pid 11274:tid 11485] [client 158.158.54.35:19377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/adminfuns.php"] [unique_id "apK-cWbX5DA3XO6e_qRMeAAAATI"]
[Sat Aug 29 05:11:45.573513 2026] [security2:error] [pid 1321:tid 1597] [client 20.104.18.15:37870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/zoo2.php"] [unique_id "apK-cWjCPtor9NZ-byT9DwAABqg"]
[Sat Aug 29 05:11:45.578043 2026] [security2:error] [pid 11274:tid 11505] [client 4.205.62.107:63276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/aws_credentials.php"] [unique_id "apK-cWbX5DA3XO6e_qRMegAAAUY"]
[Sat Aug 29 05:11:45.593726 2026] [security2:error] [pid 11274:tid 11530] [client 216.51.171.83:56880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 83.171.51.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-cWbX5DA3XO6e_qRMgAAAAV8"]
[Sat Aug 29 05:11:45.593817 2026] [security2:error] [pid 11274:tid 11530] [client 216.51.171.83:56880] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-cWbX5DA3XO6e_qRMgAAAAV8"]
[Sat Aug 29 05:11:45.596748 2026] [security2:error] [pid 1321:tid 1590] [client 4.205.62.107:6945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/hochladen.form.php"] [unique_id "apK-cWjCPtor9NZ-byT9EgAABqE"]
[Sat Aug 29 05:11:45.598411 2026] [security2:error] [pid 1321:tid 1591] [client 158.23.147.79:59256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK-cWjCPtor9NZ-byT9EwAABqI"]
[Sat Aug 29 05:11:45.601076 2026] [security2:error] [pid 11274:tid 11464] [client 20.220.204.93:59111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/0x.php"] [unique_id "apK-cWbX5DA3XO6e_qRMgQAAAR4"]
[Sat Aug 29 05:11:45.602751 2026] [security2:error] [pid 11274:tid 11544] [client 158.23.147.79:64391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/goods.php"] [unique_id "apK-cWbX5DA3XO6e_qRMggAAAWw"]
[Sat Aug 29 05:11:45.606879 2026] [security2:error] [pid 11274:tid 11445] [client 20.151.200.44:61620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/rfi.php"] [unique_id "apK-cWbX5DA3XO6e_qRMhAAAAQs"]
[Sat Aug 29 05:11:45.610129 2026] [security2:error] [pid 1321:tid 1566] [client 158.23.184.117:18137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/10.php"] [unique_id "apK-cWjCPtor9NZ-byT9FAAABok"]
[Sat Aug 29 05:11:45.632721 2026] [security2:error] [pid 1321:tid 1605] [client 20.240.128.207:18651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/a1.php"] [unique_id "apK-cWjCPtor9NZ-byT9FQAABrA"]
[Sat Aug 29 05:11:45.634889 2026] [security2:error] [pid 11274:tid 11525] [client 158.23.184.117:53911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/storage/index.php"] [unique_id "apK-cWbX5DA3XO6e_qRMiQAAAVo"]
[Sat Aug 29 05:11:45.637801 2026] [security2:error] [pid 11274:tid 11452] [client 52.139.37.240:22407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK-cWbX5DA3XO6e_qRMigAAARI"]
[Sat Aug 29 05:11:45.649346 2026] [security2:error] [pid 11274:tid 11349] [remote 93.123.109.228:33324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/wp-config.php"] [unique_id "apK-cWbX5DA3XO6e_qRMiwABLCQ"]
[Sat Aug 29 05:11:45.649871 2026] [security2:error] [pid 11274:tid 11365] [remote 93.123.109.228:33324] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.hellospringford.com"] [uri "/wp-config.php.bak"] [unique_id "apK-cWbX5DA3XO6e_qRMjAABLDM"]
[Sat Aug 29 05:11:45.660542 2026] [security2:error] [pid 11274:tid 11472] [client 20.151.200.44:55733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/d12.php"] [unique_id "apK-cWbX5DA3XO6e_qRMjQAAASY"]
[Sat Aug 29 05:11:45.661286 2026] [security2:error] [pid 11274:tid 11364] [remote 93.123.109.228:33324] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.hellospringford.com"] [uri "/wp-config.php.new"] [unique_id "apK-cWbX5DA3XO6e_qRMjgABLDI"]
[Sat Aug 29 05:11:45.668689 2026] [security2:error] [pid 11274:tid 11492] [client 213.202.253.4:49800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "timportlock.net"] [uri "/schallfuns.php"] [unique_id "apK-cWbX5DA3XO6e_qRMjwAAATk"], referer: www.google.com
[Sat Aug 29 05:11:45.674810 2026] [security2:error] [pid 11274:tid 11343] [remote 93.123.109.228:33324] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.hellospringford.com"] [uri "/wp-config.php.old"] [unique_id "apK-cWbX5DA3XO6e_qRMkAABNB4"]
[Sat Aug 29 05:11:45.687304 2026] [security2:error] [pid 11274:tid 11526] [client 158.158.54.35:27959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/bi.php"] [unique_id "apK-cWbX5DA3XO6e_qRMkgAAAVs"]
[Sat Aug 29 05:11:45.695350 2026] [security2:error] [pid 11274:tid 11517] [client 20.220.204.93:50594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/term.php"] [unique_id "apK-cWbX5DA3XO6e_qRMkwAAAVI"]
[Sat Aug 29 05:11:45.708856 2026] [security2:error] [pid 11274:tid 11514] [client 158.23.147.79:63236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK-cWbX5DA3XO6e_qRMlAAAAU8"]
[Sat Aug 29 05:11:45.710547 2026] [security2:error] [pid 1321:tid 1584] [client 158.23.147.79:39123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/atomlib.php"] [unique_id "apK-cWjCPtor9NZ-byT9FgAABps"]
[Sat Aug 29 05:11:45.720958 2026] [security2:error] [pid 11274:tid 11502] [client 20.104.18.15:37829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/zoo1.php"] [unique_id "apK-cWbX5DA3XO6e_qRMlgAAAUM"]
[Sat Aug 29 05:11:45.723934 2026] [security2:error] [pid 1321:tid 1520] [client 107.145.13.164:52689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 164.13.145.107.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK-cWjCPtor9NZ-byT9FwAABlw"]
[Sat Aug 29 05:11:45.728720 2026] [security2:error] [pid 1321:tid 1520] [client 107.145.13.164:52689] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK-cWjCPtor9NZ-byT9FwAABlw"]
[Sat Aug 29 05:11:45.734517 2026] [security2:error] [pid 1321:tid 1522] [client 40.83.93.50:3935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/post.php"] [unique_id "apK-cWjCPtor9NZ-byT9GAAABl4"]
[Sat Aug 29 05:11:45.745889 2026] [security2:error] [pid 11274:tid 11513] [client 103.48.146.148:53543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 148.146.48.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK-cWbX5DA3XO6e_qRMlwAAAU4"]
[Sat Aug 29 05:11:45.746007 2026] [security2:error] [pid 11274:tid 11513] [client 103.48.146.148:53543] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK-cWbX5DA3XO6e_qRMlwAAAU4"]
[Sat Aug 29 05:11:45.749343 2026] [security2:error] [pid 1321:tid 1504] [client 45.148.10.62:53710] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "proaider.com"] [uri "/stripe/.env"] [unique_id "apK-cWjCPtor9NZ-byT9GQAABkw"]
[Sat Aug 29 05:11:45.753099 2026] [security2:error] [pid 1321:tid 1560] [client 158.23.184.117:18128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/100.php"] [unique_id "apK-cWjCPtor9NZ-byT9GgAABoM"]
[Sat Aug 29 05:11:45.781503 2026] [security2:error] [pid 11274:tid 11490] [client 68.155.159.216:62758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK-cWbX5DA3XO6e_qRMnwAAATc"]
[Sat Aug 29 05:11:45.782653 2026] [security2:error] [pid 11274:tid 11509] [client 20.220.204.93:52346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/66.php"] [unique_id "apK-cWbX5DA3XO6e_qRMoAAAAUo"]
[Sat Aug 29 05:11:45.785736 2026] [core:error] [pid 1321:tid 1501] [client 158.23.184.117:42770] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:45.785757 2026] [core:error] [pid 1321:tid 1501] [client 158.23.184.117:42770] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:45.792915 2026] [security2:error] [pid 11274:tid 11451] [client 20.100.175.163:7988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK-cWbX5DA3XO6e_qRMogAAARE"]
[Sat Aug 29 05:11:45.813814 2026] [security2:error] [pid 1321:tid 1532] [client 40.83.93.50:8773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/wp-2019.php"] [unique_id "apK-cWjCPtor9NZ-byT9HAAABmg"]
[Sat Aug 29 05:11:45.817510 2026] [core:error] [pid 11274:tid 11546] [client 20.52.41.200:4948] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:45.817526 2026] [core:error] [pid 11274:tid 11546] [client 20.52.41.200:4948] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:45.821341 2026] [security2:error] [pid 11274:tid 11561] [client 20.104.49.130:64185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/av.php"] [unique_id "apK-cWbX5DA3XO6e_qRMpAAAAX0"]
[Sat Aug 29 05:11:45.832171 2026] [security2:error] [pid 11274:tid 11523] [client 4.205.62.107:32517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/konfig.php"] [unique_id "apK-cWbX5DA3XO6e_qRMpgAAAVg"]
[Sat Aug 29 05:11:45.833099 2026] [security2:error] [pid 11274:tid 11358] [remote 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK-cWbX5DA3XO6e_qRMpQABFC0"]
[Sat Aug 29 05:11:45.833211 2026] [security2:error] [pid 11274:tid 11454] [client 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK-cWbX5DA3XO6e_qRMpQABFC0"]
[Sat Aug 29 05:11:45.837600 2026] [security2:error] [pid 1321:tid 1542] [client 68.155.159.216:56772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK-cWjCPtor9NZ-byT9HQAABnI"]
[Sat Aug 29 05:11:45.851027 2026] [security2:error] [pid 11274:tid 11539] [client 52.139.37.240:22494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/wp-info.php"] [unique_id "apK-cWbX5DA3XO6e_qRMqAAAAWg"]
[Sat Aug 29 05:11:45.853917 2026] [security2:error] [pid 11274:tid 11516] [client 20.104.18.15:37819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/radio.php"] [unique_id "apK-cWbX5DA3XO6e_qRMqQAAAVE"]
[Sat Aug 29 05:11:45.893758 2026] [security2:error] [pid 11274:tid 11498] [client 185.104.184.230:45580] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.mvo.tyy.mybluehost.me"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "apK-cWbX5DA3XO6e_qRMqgAAAT8"]
[Sat Aug 29 05:11:45.894251 2026] [security2:error] [pid 11274:tid 11463] [client 158.23.184.117:18358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/2.php"] [unique_id "apK-cWbX5DA3XO6e_qRMqwAAAR0"]
[Sat Aug 29 05:11:45.902579 2026] [security2:error] [pid 11274:tid 11468] [client 52.139.37.240:30794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/z.php"] [unique_id "apK-cWbX5DA3XO6e_qRMrAAAASI"]
[Sat Aug 29 05:11:45.906636 2026] [security2:error] [pid 11274:tid 11395] [remote 216.73.217.8:11734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 8.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo-store.sortthru.com"] [uri "/store/aluminum-dimensional-backplate-brush-and-clear-coated/"] [unique_id "apK-cWbX5DA3XO6e_qRMrQABWVE"]
[Sat Aug 29 05:11:45.909632 2026] [security2:error] [pid 11274:tid 11533] [client 68.155.159.216:1798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK-cWbX5DA3XO6e_qRMrgAAAWI"]
[Sat Aug 29 05:11:45.926830 2026] [security2:error] [pid 11274:tid 11484] [client 93.123.109.228:46488] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK-cWbX5DA3XO6e_qRMsAAAATE"]
[Sat Aug 29 05:11:45.931131 2026] [security2:error] [pid 11274:tid 11493] [client 158.23.184.117:53889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/wp-includes/blocks/search/index.php"] [unique_id "apK-cWbX5DA3XO6e_qRMsQAAATo"]
[Sat Aug 29 05:11:45.948071 2026] [security2:error] [pid 11274:tid 11496] [client 40.83.93.50:4017] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/1.php7"] [unique_id "apK-cWbX5DA3XO6e_qRMtwAAAT0"]
[Sat Aug 29 05:11:45.948186 2026] [security2:error] [pid 11274:tid 11496] [client 40.83.93.50:4017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/1.php7"] [unique_id "apK-cWbX5DA3XO6e_qRMtwAAAT0"]
[Sat Aug 29 05:11:45.954518 2026] [security2:error] [pid 11274:tid 11504] [client 20.151.200.44:62182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/tajj.php"] [unique_id "apK-cWbX5DA3XO6e_qRMuwAAAUU"]
[Sat Aug 29 05:11:45.955272 2026] [security2:error] [pid 11274:tid 11538] [client 93.123.109.228:46542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK-cWbX5DA3XO6e_qRMugAAAWc"]
[Sat Aug 29 05:11:45.975567 2026] [security2:error] [pid 11274:tid 11495] [client 20.104.49.130:48622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/txets.php"] [unique_id "apK-cWbX5DA3XO6e_qRMvQAAATw"]
[Sat Aug 29 05:11:45.978273 2026] [security2:error] [pid 11274:tid 11568] [client 20.100.175.163:23620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/news.php"] [unique_id "apK-cWbX5DA3XO6e_qRMvgAAAYQ"]
[Sat Aug 29 05:11:45.979257 2026] [security2:error] [pid 1321:tid 1527] [client 20.220.204.93:59120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/f35.php"] [unique_id "apK-cWjCPtor9NZ-byT9HwAABmM"]
[Sat Aug 29 05:11:45.981987 2026] [security2:error] [pid 11274:tid 11464] [client 93.123.109.228:46600] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(\\\\/\\\\*\\\\!? ?(?:select|grant|delete|insert|drop|alter|replace|truncate|update|create|rename|describe|union|concat|group_concat))" at REQUEST_FILENAME. [file "/opt/mod_security/hg_rules.conf"] [line "1019"] [id "9000042"] [rev "2.2.2"] [msg "SQL Comment Sequence Detected."] [data "/*update"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/*update.cgi*"] [unique_id "apK-cWbX5DA3XO6e_qRMvwAAAR4"]
[Sat Aug 29 05:11:45.982324 2026] [security2:error] [pid 11274:tid 11512] [client 20.196.209.81:22300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-admin/users.php"] [unique_id "apK-cWbX5DA3XO6e_qRMwQAAAU0"]
[Sat Aug 29 05:11:45.989999 2026] [security2:error] [pid 1321:tid 1508] [client 20.197.61.180:1568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/hehe.php"] [unique_id "apK-cWjCPtor9NZ-byT9IAAABlA"]
[Sat Aug 29 05:11:45.998108 2026] [security2:error] [pid 11274:tid 11452] [client 20.104.18.15:37804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/one.php"] [unique_id "apK-cWbX5DA3XO6e_qRMwwAAARI"]
[Sat Aug 29 05:11:46.004614 2026] [security2:error] [pid 11274:tid 11529] [client 20.220.204.93:22033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/aaa.php"] [unique_id "apK-cmbX5DA3XO6e_qRMxAAAAV4"]
[Sat Aug 29 05:11:46.014560 2026] [security2:error] [pid 11274:tid 11565] [client 158.158.54.35:14774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/goods.php"] [unique_id "apK-cmbX5DA3XO6e_qRMxQAAAYE"]
[Sat Aug 29 05:11:46.015452 2026] [security2:error] [pid 11274:tid 11522] [client 20.240.128.207:4164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/222.php"] [unique_id "apK-cmbX5DA3XO6e_qRMxwAAAVc"]
[Sat Aug 29 05:11:46.038982 2026] [security2:error] [pid 11274:tid 11525] [client 158.23.184.117:18323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/222.php"] [unique_id "apK-cmbX5DA3XO6e_qRMyAAAAVo"]
[Sat Aug 29 05:11:46.044335 2026] [security2:error] [pid 11274:tid 11544] [client 52.139.37.240:22492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/wp-wordfence-waf.php"] [unique_id "apK-cmbX5DA3XO6e_qRMygAAAWw"]
[Sat Aug 29 05:11:46.076865 2026] [security2:error] [pid 11274:tid 11534] [client 158.23.147.79:7128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK-cmbX5DA3XO6e_qRMzAAAAWM"]
[Sat Aug 29 05:11:46.078285 2026] [security2:error] [pid 1321:tid 1526] [client 158.23.184.117:42758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/wp-signup.php"] [unique_id "apK-cmjCPtor9NZ-byT9IwAABmI"]
[Sat Aug 29 05:11:46.096928 2026] [security2:error] [pid 11274:tid 11492] [client 52.139.37.240:31627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/f35.php"] [unique_id "apK-cmbX5DA3XO6e_qRMzQAAATk"]
[Sat Aug 29 05:11:46.103229 2026] [security2:error] [pid 11274:tid 11502] [client 93.123.109.228:46542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/.env"] [unique_id "apK-cmbX5DA3XO6e_qRM0AAAAUM"]
[Sat Aug 29 05:11:46.105821 2026] [security2:error] [pid 1321:tid 1543] [client 158.23.147.79:24564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/sad/about.php"] [unique_id "apK-cmjCPtor9NZ-byT9JgAABnM"]
[Sat Aug 29 05:11:46.108095 2026] [security2:error] [pid 11274:tid 11513] [client 20.151.200.44:55647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/yyy.php"] [unique_id "apK-cmbX5DA3XO6e_qRM0gAAAU4"]
[Sat Aug 29 05:11:46.119510 2026] [security2:error] [pid 11274:tid 11505] [client 158.158.54.35:28959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/cc.php"] [unique_id "apK-cmbX5DA3XO6e_qRM0wAAAUY"]
[Sat Aug 29 05:11:46.123701 2026] [security2:error] [pid 11274:tid 11520] [client 93.123.109.228:46508] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/laravel/app/.env"] [unique_id "apK-cmbX5DA3XO6e_qRM1AAAAVU"]
[Sat Aug 29 05:11:46.131434 2026] [security2:error] [pid 11274:tid 11470] [client 20.151.200.44:27144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/waw.php"] [unique_id "apK-cmbX5DA3XO6e_qRM1gAAASQ"]
[Sat Aug 29 05:11:46.132798 2026] [security2:error] [pid 1321:tid 1586] [client 20.240.128.207:18939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-cmjCPtor9NZ-byT9KAAABp0"]
[Sat Aug 29 05:11:46.134299 2026] [security2:error] [pid 11274:tid 11497] [client 20.104.18.15:37705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/503.php"] [unique_id "apK-cmbX5DA3XO6e_qRM2AAAAT4"]
[Sat Aug 29 05:11:46.149115 2026] [security2:error] [pid 1321:tid 1610] [client 4.205.62.107:59079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/asdf.php"] [unique_id "apK-cmjCPtor9NZ-byT9KQAABrU"]
[Sat Aug 29 05:11:46.149500 2026] [security2:error] [pid 11274:tid 11570] [client 93.123.109.228:46524] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK-cmbX5DA3XO6e_qRM2QAAAYY"]
[Sat Aug 29 05:11:46.164780 2026] [security2:error] [pid 11274:tid 11539] [client 68.155.159.216:49051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/radio.php"] [unique_id "apK-cmbX5DA3XO6e_qRM3AAAAWg"]
[Sat Aug 29 05:11:46.165738 2026] [security2:error] [pid 11274:tid 11527] [client 158.23.147.79:14169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK-cmbX5DA3XO6e_qRM3QAAAVw"]
[Sat Aug 29 05:11:46.171604 2026] [security2:error] [pid 11274:tid 11503] [client 197.219.150.206:60567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK-cmbX5DA3XO6e_qRM3gAAAUQ"]
[Sat Aug 29 05:11:46.171716 2026] [security2:error] [pid 11274:tid 11503] [client 197.219.150.206:60567] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK-cmbX5DA3XO6e_qRM3gAAAUQ"]
[Sat Aug 29 05:11:46.181718 2026] [security2:error] [pid 11274:tid 11498] [client 20.220.204.93:59028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/wen.php"] [unique_id "apK-cmbX5DA3XO6e_qRM3wAAAT8"]
[Sat Aug 29 05:11:46.183549 2026] [security2:error] [pid 11274:tid 11561] [client 158.23.184.117:18159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/24.php"] [unique_id "apK-cmbX5DA3XO6e_qRM4AAAAX0"]
[Sat Aug 29 05:11:46.211324 2026] [security2:error] [pid 1321:tid 1582] [client 185.104.184.230:45594] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.mvo.tyy.mybluehost.me"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "apK-cmjCPtor9NZ-byT9KwAABpk"]
[Sat Aug 29 05:11:46.224422 2026] [security2:error] [pid 1321:tid 1573] [client 40.83.93.50:3713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/csv.php"] [unique_id "apK-cmjCPtor9NZ-byT9LAAABpA"]
[Sat Aug 29 05:11:46.225590 2026] [security2:error] [pid 11274:tid 11494] [client 68.155.159.216:38570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-content/admin.php"] [unique_id "apK-cmbX5DA3XO6e_qRM4gAAATs"]
[Sat Aug 29 05:11:46.241945 2026] [security2:error] [pid 11274:tid 11463] [client 158.23.184.117:53900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/404.php"] [unique_id "apK-cmbX5DA3XO6e_qRM4wAAAR0"]
[Sat Aug 29 05:11:46.249104 2026] [security2:error] [pid 11274:tid 11496] [client 93.123.109.228:46670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/.env.backup"] [unique_id "apK-cmbX5DA3XO6e_qRM5AAAAT0"]
[Sat Aug 29 05:11:46.252110 2026] [security2:error] [pid 11274:tid 11549] [client 93.123.109.228:46654] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/.env.bak"] [unique_id "apK-cmbX5DA3XO6e_qRM5QAAAXE"]
[Sat Aug 29 05:11:46.259155 2026] [security2:error] [pid 11274:tid 11554] [client 52.139.37.240:22479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/ws49.php"] [unique_id "apK-cmbX5DA3XO6e_qRM5gAAAXY"]
[Sat Aug 29 05:11:46.272379 2026] [security2:error] [pid 11274:tid 11490] [client 20.52.41.200:4613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "apK-cmbX5DA3XO6e_qRM6QAAATc"]
[Sat Aug 29 05:11:46.282162 2026] [security2:error] [pid 11274:tid 11481] [client 20.100.175.163:13763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/num.php"] [unique_id "apK-cmbX5DA3XO6e_qRM6wAAAS4"]
[Sat Aug 29 05:11:46.283771 2026] [security2:error] [pid 11274:tid 11451] [client 40.83.93.50:8701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/menu.php"] [unique_id "apK-cmbX5DA3XO6e_qRM7AAAARE"]
[Sat Aug 29 05:11:46.293424 2026] [security2:error] [pid 1321:tid 1499] [client 52.139.37.240:30790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/file61.php"] [unique_id "apK-cmjCPtor9NZ-byT9LwAABkc"]
[Sat Aug 29 05:11:46.299566 2026] [security2:error] [pid 11274:tid 11495] [client 20.104.18.15:37770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/504.php"] [unique_id "apK-cmbX5DA3XO6e_qRM7QAAATw"]
[Sat Aug 29 05:11:46.326947 2026] [security2:error] [pid 11274:tid 11521] [client 158.23.184.117:64797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/3pjcpmfsd8b.php"] [unique_id "apK-cmbX5DA3XO6e_qRM8gAAAVY"]
[Sat Aug 29 05:11:46.343705 2026] [security2:error] [pid 1321:tid 1497] [client 93.123.109.228:46638] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/.env.old"] [unique_id "apK-cmjCPtor9NZ-byT9MQAABkU"]
[Sat Aug 29 05:11:46.345199 2026] [security2:error] [pid 11274:tid 11499] [client 93.123.109.228:46698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/.env.php"] [unique_id "apK-cmbX5DA3XO6e_qRM9AAAAUA"]
[Sat Aug 29 05:11:46.352588 2026] [security2:error] [pid 11274:tid 11501] [client 20.151.200.44:63565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/grsiuk.php"] [unique_id "apK-cmbX5DA3XO6e_qRM9QAAAUI"]
[Sat Aug 29 05:11:46.363602 2026] [security2:error] [pid 1321:tid 1561] [client 20.220.204.93:15827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/xsox.php"] [unique_id "apK-cmjCPtor9NZ-byT9MgAABoQ"]
[Sat Aug 29 05:11:46.364652 2026] [security2:error] [pid 11274:tid 11537] [client 68.155.159.216:14096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/nf_tracking.php"] [unique_id "apK-cmbX5DA3XO6e_qRM9wAAAWY"]
[Sat Aug 29 05:11:46.365147 2026] [security2:error] [pid 1321:tid 1606] [client 20.151.200.44:65331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/wp-gzone.php"] [unique_id "apK-cmjCPtor9NZ-byT9MwAABrE"]
[Sat Aug 29 05:11:46.379239 2026] [security2:error] [pid 11274:tid 11506] [client 20.196.209.81:17369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-admin/wp-cron.php"] [unique_id "apK-cmbX5DA3XO6e_qRM-QAAAUc"]
[Sat Aug 29 05:11:46.382246 2026] [security2:error] [pid 1321:tid 1528] [client 20.151.200.44:27301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/x23.php"] [unique_id "apK-cmjCPtor9NZ-byT9NAAABmQ"]
[Sat Aug 29 05:11:46.386652 2026] [security2:error] [pid 1321:tid 1603] [client 158.23.184.117:42815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/as.php"] [unique_id "apK-cmjCPtor9NZ-byT9NQAABq4"]
[Sat Aug 29 05:11:46.414847 2026] [security2:error] [pid 11274:tid 11450] [client 20.220.204.93:59013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/inc.php"] [unique_id "apK-cmbX5DA3XO6e_qRM_QAAARA"]
[Sat Aug 29 05:11:46.417275 2026] [security2:error] [pid 11274:tid 11444] [client 103.240.76.112:42731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK-cmbX5DA3XO6e_qRM_gAAAQo"]
[Sat Aug 29 05:11:46.417386 2026] [security2:error] [pid 11274:tid 11444] [client 103.240.76.112:42731] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK-cmbX5DA3XO6e_qRM_gAAAQo"]
[Sat Aug 29 05:11:46.433694 2026] [security2:error] [pid 11274:tid 11488] [client 20.151.200.44:22204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/alog.php"] [unique_id "apK-cmbX5DA3XO6e_qRM_wAAATU"]
[Sat Aug 29 05:11:46.438142 2026] [security2:error] [pid 11274:tid 11465] [client 40.83.93.50:10911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/ds.php"] [unique_id "apK-cmbX5DA3XO6e_qRNAAAAAR8"]
[Sat Aug 29 05:11:46.448891 2026] [security2:error] [pid 11274:tid 11502] [client 20.104.18.15:37720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/admin.php"] [unique_id "apK-cmbX5DA3XO6e_qRNAgAAAUM"]
[Sat Aug 29 05:11:46.455110 2026] [security2:error] [pid 11274:tid 11525] [client 52.139.37.240:21873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/xxx.php"] [unique_id "apK-cmbX5DA3XO6e_qRNAwAAAVo"]
[Sat Aug 29 05:11:46.458947 2026] [security2:error] [pid 1321:tid 1509] [client 45.148.10.62:53710] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "proaider.com"] [uri "/backend/.env"] [unique_id "apK-cmjCPtor9NZ-byT9NgAABlE"]
[Sat Aug 29 05:11:46.464455 2026] [security2:error] [pid 1321:tid 1489] [client 68.155.159.216:21461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK-cmjCPtor9NZ-byT9NwAABj0"]
[Sat Aug 29 05:11:46.467435 2026] [security2:error] [pid 1321:tid 1598] [client 158.158.54.35:14737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/css.php"] [unique_id "apK-cmjCPtor9NZ-byT9OAAABqk"]
[Sat Aug 29 05:11:46.468315 2026] [security2:error] [pid 11274:tid 11541] [client 158.23.184.117:18147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.bistrobrew.com"] [uri "/403.php"] [unique_id "apK-cmbX5DA3XO6e_qRNBgAAAWo"]
[Sat Aug 29 05:11:46.468814 2026] [security2:error] [pid 11274:tid 11469] [client 93.123.109.228:46508] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/.env.swp"] [unique_id "apK-cmbX5DA3XO6e_qRNBQAAASM"]
[Sat Aug 29 05:11:46.469022 2026] [security2:error] [pid 11274:tid 11530] [client 20.100.175.163:9543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/about/function.php"] [unique_id "apK-cmbX5DA3XO6e_qRNBwAAAV8"]
[Sat Aug 29 05:11:46.476863 2026] [security2:error] [pid 11274:tid 11467] [client 20.104.49.130:58220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/dk.php"] [unique_id "apK-cmbX5DA3XO6e_qRNCAAAASE"]
[Sat Aug 29 05:11:46.484384 2026] [security2:error] [pid 11274:tid 11449] [client 93.123.109.228:46542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/.env~"] [unique_id "apK-cmbX5DA3XO6e_qRNCgAAAQ8"]
[Sat Aug 29 05:11:46.492165 2026] [security2:error] [pid 11274:tid 11563] [client 52.139.37.240:30847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/mah.php"] [unique_id "apK-cmbX5DA3XO6e_qRNCwAAAX8"]
[Sat Aug 29 05:11:46.516949 2026] [security2:error] [pid 1321:tid 1589] [client 185.104.184.230:45606] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.mvo.tyy.mybluehost.me"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "apK-cmjCPtor9NZ-byT9OwAABqA"]
[Sat Aug 29 05:11:46.522972 2026] [security2:error] [pid 11274:tid 11533] [client 20.220.204.93:17880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/lkui.php"] [unique_id "apK-cmbX5DA3XO6e_qRNDwAAAWI"]
[Sat Aug 29 05:11:46.526802 2026] [security2:error] [pid 11274:tid 11560] [client 158.23.147.79:55919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-includes/index.php"] [unique_id "apK-cmbX5DA3XO6e_qRNFQAAAXw"]
[Sat Aug 29 05:11:46.528310 2026] [security2:error] [pid 11274:tid 11523] [client 34.169.171.101:9236] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.forensicengineernj.com"] [uri "/__env.js"] [unique_id "apK-cmbX5DA3XO6e_qRNGQAAAVg"]
[Sat Aug 29 05:11:46.528886 2026] [security2:error] [pid 11274:tid 11466] [client 34.169.171.101:9226] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.forensicengineernj.com"] [uri "/.mcp.json"] [unique_id "apK-cmbX5DA3XO6e_qRNGgAAASA"]
[Sat Aug 29 05:11:46.528919 2026] [security2:error] [pid 11274:tid 11543] [client 34.169.171.101:9198] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/.hermes/.env"] [unique_id "apK-cmbX5DA3XO6e_qRNFwAAAWs"]
[Sat Aug 29 05:11:46.529220 2026] [security2:error] [pid 1321:tid 1504] [client 34.169.171.101:9188] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/.openclaw/.env"] [unique_id "apK-cmjCPtor9NZ-byT9RAAABkw"]
[Sat Aug 29 05:11:46.531339 2026] [security2:error] [pid 1321:tid 1580] [client 158.23.184.117:42797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/php.php"] [unique_id "apK-cmjCPtor9NZ-byT9SAAABpc"]
[Sat Aug 29 05:11:46.532107 2026] [security2:error] [pid 11274:tid 11539] [client 34.169.171.101:9336] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.forensicengineernj.com"] [uri "/admin"] [unique_id "apK-cmbX5DA3XO6e_qRNHQAAAWg"]
[Sat Aug 29 05:11:46.533795 2026] [security2:error] [pid 11274:tid 11552] [client 34.169.171.101:9126] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "mail.forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-cmbX5DA3XO6e_qRNGwAAAXQ"]
[Sat Aug 29 05:11:46.540989 2026] [security2:error] [pid 1321:tid 1615] [client 20.240.128.207:8222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/x.php"] [unique_id "apK-cmjCPtor9NZ-byT9TgAABro"]
[Sat Aug 29 05:11:46.561120 2026] [security2:error] [pid 11274:tid 11515] [client 158.158.54.35:28903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/files/index.php"] [unique_id "apK-cmbX5DA3XO6e_qRNJQAAAVA"]
[Sat Aug 29 05:11:46.571827 2026] [security2:error] [pid 11274:tid 11464] [client 34.169.171.101:9126] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-cmbX5DA3XO6e_qRNLAAAAR4"], referer: https://mail.forensicengineernj.com/.cursor/mcp.json
[Sat Aug 29 05:11:46.585199 2026] [security2:error] [pid 11274:tid 11522] [client 4.205.62.107:63999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/wp-admin/sc.php"] [unique_id "apK-cmbX5DA3XO6e_qRNMgAAAVc"]
[Sat Aug 29 05:11:46.588872 2026] [security2:error] [pid 11274:tid 11545] [client 4.205.62.107:64927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/nlnub.php"] [unique_id "apK-cmbX5DA3XO6e_qRNMwAAAW0"]
[Sat Aug 29 05:11:46.591067 2026] [security2:error] [pid 11274:tid 11506] [client 20.220.204.93:59082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/6bcwiqwj.php"] [unique_id "apK-cmbX5DA3XO6e_qRNNQAAAUc"]
[Sat Aug 29 05:11:46.591095 2026] [security2:error] [pid 11274:tid 11483] [client 20.151.200.44:63033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/ahy66.php"] [unique_id "apK-cmbX5DA3XO6e_qRNNAAAATA"]
[Sat Aug 29 05:11:46.601346 2026] [security2:error] [pid 11274:tid 11565] [client 93.123.109.228:46602] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.bak"] [unique_id "apK-cmbX5DA3XO6e_qRNNgAAAYE"]
[Sat Aug 29 05:11:46.625294 2026] [security2:error] [pid 11274:tid 11519] [client 93.123.109.228:46488] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.old"] [unique_id "apK-cmbX5DA3XO6e_qRNOQAAAVQ"]
[Sat Aug 29 05:11:46.632991 2026] [security2:error] [pid 11274:tid 11473] [client 20.104.18.15:37813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/ws85.php"] [unique_id "apK-cmbX5DA3XO6e_qRNPAAAASc"]
[Sat Aug 29 05:11:46.633265 2026] [security2:error] [pid 11274:tid 11488] [client 93.123.109.228:46508] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config~"] [unique_id "apK-cmbX5DA3XO6e_qRNOwAAATU"]
[Sat Aug 29 05:11:46.639008 2026] [security2:error] [pid 11274:tid 11559] [client 20.240.128.207:18921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/alfa-rex.php7"] [unique_id "apK-cmbX5DA3XO6e_qRNPgAAAXs"]
[Sat Aug 29 05:11:46.650294 2026] [security2:error] [pid 1321:tid 1586] [client 45.148.10.62:53710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "proaider.com"] [uri "/test.php"] [unique_id "apK-cmjCPtor9NZ-byT9WAAABp0"]
[Sat Aug 29 05:11:46.651880 2026] [security2:error] [pid 11274:tid 11452] [client 52.139.37.240:22470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/0x.php"] [unique_id "apK-cmbX5DA3XO6e_qRNQAAAARI"]
[Sat Aug 29 05:11:46.660611 2026] [security2:error] [pid 11274:tid 11525] [client 158.23.147.79:50092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK-cmbX5DA3XO6e_qRNQQAAAVo"]
[Sat Aug 29 05:11:46.677285 2026] [security2:error] [pid 1321:tid 1507] [client 158.23.184.117:42804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/term.php"] [unique_id "apK-cmjCPtor9NZ-byT9WQAABk8"]
[Sat Aug 29 05:11:46.687449 2026] [security2:error] [pid 11274:tid 11444] [client 52.139.37.240:31091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/mini.php"] [unique_id "apK-cmbX5DA3XO6e_qRNQwAAAQo"]
[Sat Aug 29 05:11:46.702224 2026] [security2:error] [pid 1321:tid 1496] [client 158.23.147.79:58062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK-cmjCPtor9NZ-byT9XAAABkQ"]
[Sat Aug 29 05:11:46.708684 2026] [security2:error] [pid 1321:tid 1581] [client 40.83.93.50:3926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/fox.php"] [unique_id "apK-cmjCPtor9NZ-byT9XQAABpg"]
[Sat Aug 29 05:11:46.714102 2026] [security2:error] [pid 11274:tid 11569] [client 20.197.61.180:10225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/wp-admin/class-db.php"] [unique_id "apK-cmbX5DA3XO6e_qRNSgAAAYU"]
[Sat Aug 29 05:11:46.718951 2026] [security2:error] [pid 1321:tid 1599] [client 158.23.147.79:64388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK-cmjCPtor9NZ-byT9XwAABqo"]
[Sat Aug 29 05:11:46.719172 2026] [security2:error] [pid 11274:tid 11508] [client 4.205.62.107:63030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/aws-credentials.php"] [unique_id "apK-cmbX5DA3XO6e_qRNSwAAAUk"]
[Sat Aug 29 05:11:46.727527 2026] [security2:error] [pid 11274:tid 11468] [client 20.220.204.93:15844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "apK-cmbX5DA3XO6e_qRNTQAAASI"]
[Sat Aug 29 05:11:46.730340 2026] [core:error] [pid 11274:tid 11501] [client 20.52.41.200:4667] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:46.730369 2026] [core:error] [pid 11274:tid 11501] [client 20.52.41.200:4667] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:46.748746 2026] [security2:error] [pid 11274:tid 11523] [client 4.205.62.107:6279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/debuggen.php"] [unique_id "apK-cmbX5DA3XO6e_qRNUgAAAVg"]
[Sat Aug 29 05:11:46.772311 2026] [security2:error] [pid 1321:tid 1491] [client 20.196.209.81:17739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-admin/wp-links-opml.php"] [unique_id "apK-cmjCPtor9NZ-byT9YAAABj8"]
[Sat Aug 29 05:11:46.795166 2026] [security2:error] [pid 11274:tid 11546] [client 20.220.204.93:59104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/easy.php"] [unique_id "apK-cmbX5DA3XO6e_qRNWAAAAW4"]
[Sat Aug 29 05:11:46.808139 2026] [security2:error] [pid 1321:tid 1498] [client 20.104.18.15:37833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/ffs.php"] [unique_id "apK-cmjCPtor9NZ-byT9YgAABkY"]
[Sat Aug 29 05:11:46.818226 2026] [security2:error] [pid 1321:tid 1492] [client 185.104.184.230:45618] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.mvo.tyy.mybluehost.me"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "apK-cmjCPtor9NZ-byT9ZAAABkA"]
[Sat Aug 29 05:11:46.822480 2026] [security2:error] [pid 11274:tid 11539] [client 158.23.184.117:53907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/Ov-Simple1.php"] [unique_id "apK-cmbX5DA3XO6e_qRNXQAAAWg"]
[Sat Aug 29 05:11:46.831129 2026] [security2:error] [pid 11274:tid 11450] [client 40.83.93.50:9063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/alfa.php"] [unique_id "apK-cmbX5DA3XO6e_qRNXgAAARA"]
[Sat Aug 29 05:11:46.835310 2026] [security2:error] [pid 1321:tid 1563] [client 45.148.10.62:53706] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "proaider.com"] [uri "/.env.backup"] [unique_id "apK-cmjCPtor9NZ-byT9ZQAABoY"]
[Sat Aug 29 05:11:46.844905 2026] [security2:error] [pid 11274:tid 11515] [client 158.23.147.79:39319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/lv.php"] [unique_id "apK-cmbX5DA3XO6e_qRNYgAAAVA"]
[Sat Aug 29 05:11:46.849781 2026] [security2:error] [pid 11274:tid 11454] [client 52.139.37.240:21862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/CDX1.php"] [unique_id "apK-cmbX5DA3XO6e_qRNYwAAARQ"]
[Sat Aug 29 05:11:46.879420 2026] [security2:error] [pid 1321:tid 1594] [client 158.23.147.79:62752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/goat1.php"] [unique_id "apK-cmjCPtor9NZ-byT9aQAABqU"]
[Sat Aug 29 05:11:46.885077 2026] [security2:error] [pid 11274:tid 11524] [client 52.139.37.240:31656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/v.php"] [unique_id "apK-cmbX5DA3XO6e_qRNZgAAAVk"]
[Sat Aug 29 05:11:46.898859 2026] [security2:error] [pid 11274:tid 11455] [client 20.151.200.44:62934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/gaje.php"] [unique_id "apK-cmbX5DA3XO6e_qRNaQAAARU"]
[Sat Aug 29 05:11:46.901970 2026] [security2:error] [pid 11274:tid 11511] [client 68.155.159.216:62786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/goat.php"] [unique_id "apK-cmbX5DA3XO6e_qRNagAAAUw"]
[Sat Aug 29 05:11:46.937269 2026] [security2:error] [pid 11274:tid 11570] [client 40.83.93.50:20344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/ggfi.php"] [unique_id "apK-cmbX5DA3XO6e_qRNbQAAAYY"]
[Sat Aug 29 05:11:46.938940 2026] [security2:error] [pid 1321:tid 1561] [client 20.151.200.44:27147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/ws66.php"] [unique_id "apK-cmjCPtor9NZ-byT9bQAABoQ"]
[Sat Aug 29 05:11:46.946482 2026] [security2:error] [pid 11274:tid 11506] [client 68.155.159.216:56755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/file.php"] [unique_id "apK-cmbX5DA3XO6e_qRNbwAAAUc"]
[Sat Aug 29 05:11:46.961281 2026] [security2:error] [pid 11274:tid 11565] [client 20.220.204.93:59127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/fresh3.php"] [unique_id "apK-cmbX5DA3XO6e_qRNcwAAAYE"]
[Sat Aug 29 05:11:46.963283 2026] [security2:error] [pid 1321:tid 1606] [client 20.151.200.44:21896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/adin.php"] [unique_id "apK-cmjCPtor9NZ-byT9bgAABrE"]
[Sat Aug 29 05:11:46.969597 2026] [security2:error] [pid 1321:tid 1528] [client 4.205.62.107:59111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/paths.php"] [unique_id "apK-cmjCPtor9NZ-byT9bwAABmQ"]
[Sat Aug 29 05:11:46.983573 2026] [security2:error] [pid 1321:tid 1603] [client 20.104.18.15:37885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/nano.php"] [unique_id "apK-cmjCPtor9NZ-byT9cQAABq4"]
[Sat Aug 29 05:11:46.983630 2026] [security2:error] [pid 11274:tid 11488] [client 20.220.204.93:17703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/motu.php"] [unique_id "apK-cmbX5DA3XO6e_qRNdQAAATU"]
[Sat Aug 29 05:11:46.986091 2026] [security2:error] [pid 1321:tid 1614] [client 158.23.184.117:42435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/atomlib.php"] [unique_id "apK-cmjCPtor9NZ-byT9cgAABrk"]
[Sat Aug 29 05:11:46.994284 2026] [security2:error] [pid 1321:tid 1591] [client 45.148.10.62:53706] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "proaider.com"] [uri "/.env.old"] [unique_id "apK-cmjCPtor9NZ-byT9cwAABqI"]
[Sat Aug 29 05:11:46.997030 2026] [security2:error] [pid 1321:tid 1605] [client 20.151.200.44:60132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/str.php"] [unique_id "apK-cmjCPtor9NZ-byT9dAAABrA"]
[Sat Aug 29 05:11:47.002475 2026] [authz_core:error] [pid 11274:tid 11473] [client 158.158.54.35:0] AH01630: client denied by server configuration: /home3/juntoohk/public_html/ebichili/wp-includes/block-bindings/error_log
[Sat Aug 29 05:11:47.004320 2026] [security2:error] [pid 11274:tid 11451] [client 158.158.54.35:29462] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.clementphotography.ca"] [uri "/1.php7"] [unique_id "apK-c2bX5DA3XO6e_qRNeAAAARE"]
[Sat Aug 29 05:11:47.004459 2026] [security2:error] [pid 11274:tid 11451] [client 158.158.54.35:29462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/1.php7"] [unique_id "apK-c2bX5DA3XO6e_qRNeAAAARE"]
[Sat Aug 29 05:11:47.004477 2026] [security2:error] [pid 11274:tid 11527] [client 180.190.5.40:50511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.5.190.180.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK-c2bX5DA3XO6e_qRNeQAAAVw"]
[Sat Aug 29 05:11:47.004565 2026] [security2:error] [pid 11274:tid 11527] [client 180.190.5.40:50511] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK-c2bX5DA3XO6e_qRNeQAAAVw"]
[Sat Aug 29 05:11:47.044769 2026] [security2:error] [pid 1321:tid 1600] [client 20.240.128.207:7493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/new.php"] [unique_id "apK-c2jCPtor9NZ-byT9dwAABqs"]
[Sat Aug 29 05:11:47.046102 2026] [security2:error] [pid 1321:tid 1590] [client 52.139.37.240:22493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/akcc.php"] [unique_id "apK-c2jCPtor9NZ-byT9eAAABqE"]
[Sat Aug 29 05:11:47.055632 2026] [core:error] [pid 11274:tid 11521] [client 20.100.175.163:6627] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:47.055650 2026] [core:error] [pid 11274:tid 11521] [client 20.100.175.163:6627] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:47.068521 2026] [security2:error] [pid 1321:tid 1504] [client 68.155.159.216:23382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-includes/plugins.php"] [unique_id "apK-c2jCPtor9NZ-byT9egAABkw"]
[Sat Aug 29 05:11:47.076808 2026] [security2:error] [pid 1321:tid 1592] [client 68.155.159.216:2007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK-c2jCPtor9NZ-byT9ewAABqM"]
[Sat Aug 29 05:11:47.085977 2026] [security2:error] [pid 1321:tid 1520] [client 103.215.74.26:54238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.74.215.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.com"] [uri "/wp/index.php"] [unique_id "apK-c2jCPtor9NZ-byT9fAAABlw"], referer: https://kglogisticsinc.com/wp/wp-admin/
[Sat Aug 29 05:11:47.095717 2026] [security2:error] [pid 11274:tid 11516] [client 20.220.204.93:59052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/bgymj.php"] [unique_id "apK-c2bX5DA3XO6e_qRNgwAAAVE"]
[Sat Aug 29 05:11:47.100299 2026] [security2:error] [pid 11274:tid 11513] [client 52.139.37.240:31550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK-c2bX5DA3XO6e_qRNhAAAAU4"]
[Sat Aug 29 05:11:47.107406 2026] [security2:error] [pid 11274:tid 11514] [client 185.104.184.230:45626] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.mvo.tyy.mybluehost.me"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "apK-c2bX5DA3XO6e_qRNhwAAAU8"]
[Sat Aug 29 05:11:47.112676 2026] [security2:error] [pid 11274:tid 11470] [client 20.52.41.200:2228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/.trash7206/index.php"] [unique_id "apK-c2bX5DA3XO6e_qRNiAAAASQ"]
[Sat Aug 29 05:11:47.120375 2026] [security2:error] [pid 11274:tid 11479] [client 20.220.204.93:59445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/Ov-Simple1.php"] [unique_id "apK-c2bX5DA3XO6e_qRNiQAAASw"]
[Sat Aug 29 05:11:47.135393 2026] [security2:error] [pid 1321:tid 1593] [client 20.104.18.15:37832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/ano.php"] [unique_id "apK-c2jCPtor9NZ-byT9fgAABqQ"]
[Sat Aug 29 05:11:47.136571 2026] [security2:error] [pid 11274:tid 11456] [client 20.240.128.207:18668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "apK-c2bX5DA3XO6e_qRNigAAARY"]
[Sat Aug 29 05:11:47.139101 2026] [security2:error] [pid 11274:tid 11501] [client 158.23.184.117:42477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/edit.php"] [unique_id "apK-c2bX5DA3XO6e_qRNiwAAAUI"]
[Sat Aug 29 05:11:47.143158 2026] [security2:error] [pid 1321:tid 1508] [client 20.100.175.163:35029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "apK-c2jCPtor9NZ-byT9fwAABlA"]
[Sat Aug 29 05:11:47.173724 2026] [security2:error] [pid 11274:tid 11520] [client 20.196.209.81:8841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-admin/wp-load.php"] [unique_id "apK-c2bX5DA3XO6e_qRNkwAAAVU"]
[Sat Aug 29 05:11:47.187885 2026] [security2:error] [pid 11274:tid 11486] [client 158.23.147.79:7044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK-c2bX5DA3XO6e_qRNlAAAATM"]
[Sat Aug 29 05:11:47.189150 2026] [security2:error] [pid 1321:tid 1566] [client 20.52.41.200:4785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-content/themes/pridmag/il.php"] [unique_id "apK-c2jCPtor9NZ-byT9gQAABok"]
[Sat Aug 29 05:11:47.206302 2026] [security2:error] [pid 11274:tid 11535] [client 93.123.109.228:46532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/.wp-config.php.swp"] [unique_id "apK-c2bX5DA3XO6e_qRNlwAAAWQ"]
[Sat Aug 29 05:11:47.212535 2026] [security2:error] [pid 1321:tid 1513] [client 158.23.147.79:24524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/admin.php"] [unique_id "apK-c2jCPtor9NZ-byT9hAAABlU"]
[Sat Aug 29 05:11:47.221351 2026] [security2:error] [pid 11274:tid 11495] [client 20.104.49.130:63430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/sym.php"] [unique_id "apK-c2bX5DA3XO6e_qRNmAAAATw"]
[Sat Aug 29 05:11:47.225962 2026] [security2:error] [pid 11274:tid 11512] [client 20.220.204.93:59071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/ws69.php"] [unique_id "apK-c2bX5DA3XO6e_qRNmQAAAU0"]
[Sat Aug 29 05:11:47.233130 2026] [security2:error] [pid 1321:tid 1533] [client 20.48.250.41:36822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/bzjdlofz.php"] [unique_id "apK-c2jCPtor9NZ-byT9hQAABmk"]
[Sat Aug 29 05:11:47.234033 2026] [security2:error] [pid 11274:tid 11477] [client 20.48.250.41:25576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/fresh3.php"] [unique_id "apK-c2bX5DA3XO6e_qRNmwAAASs"]
[Sat Aug 29 05:11:47.237128 2026] [security2:error] [pid 1321:tid 1507] [client 20.151.200.44:23584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/wp-admin/zwso.php"] [unique_id "apK-c2jCPtor9NZ-byT9hgAABk8"]
[Sat Aug 29 05:11:47.238723 2026] [security2:error] [pid 11274:tid 11506] [client 20.104.49.130:60104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.timportlock.net"] [uri "/samll.php"] [unique_id "apK-c2bX5DA3XO6e_qRNnQAAAUc"]
[Sat Aug 29 05:11:47.240855 2026] [security2:error] [pid 11274:tid 11485] [client 20.151.200.44:63107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/sf9.php"] [unique_id "apK-c2bX5DA3XO6e_qRNngAAATI"]
[Sat Aug 29 05:11:47.241632 2026] [security2:error] [pid 1321:tid 1525] [client 52.139.37.240:21824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK-c2jCPtor9NZ-byT9hwAABmE"]
[Sat Aug 29 05:11:47.249516 2026] [security2:error] [pid 1321:tid 1531] [client 93.123.109.228:46696] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/ADMIN/.env"] [unique_id "apK-c2jCPtor9NZ-byT9iAAABmc"]
[Sat Aug 29 05:11:47.264103 2026] [security2:error] [pid 11274:tid 11551] [client 93.123.109.228:46626] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/API/.env"] [unique_id "apK-c2bX5DA3XO6e_qRNoAAAAXM"]
[Sat Aug 29 05:11:47.268532 2026] [security2:error] [pid 1321:tid 1556] [client 158.23.147.79:14168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/about.php"] [unique_id "apK-c2jCPtor9NZ-byT9igAABn8"]
[Sat Aug 29 05:11:47.276030 2026] [security2:error] [pid 11274:tid 11448] [client 68.155.159.216:49031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK-c2bX5DA3XO6e_qRNowAAAQ4"]
[Sat Aug 29 05:11:47.282976 2026] [security2:error] [pid 11274:tid 11522] [client 158.23.184.117:42802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/7.php"] [unique_id "apK-c2bX5DA3XO6e_qRNpAAAAVc"]
[Sat Aug 29 05:11:47.284861 2026] [security2:error] [pid 11274:tid 11502] [client 4.205.62.107:59114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/app/Helpers/bladeHelpers.php"] [unique_id "apK-c2bX5DA3XO6e_qRNpQAAAUM"]
[Sat Aug 29 05:11:47.290127 2026] [security2:error] [pid 11274:tid 11471] [client 40.83.93.50:3748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/disagraeosc.php"] [unique_id "apK-c2bX5DA3XO6e_qRNpgAAASU"]
[Sat Aug 29 05:11:47.295774 2026] [security2:error] [pid 1321:tid 1610] [client 52.139.37.240:31657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "apK-c2jCPtor9NZ-byT9iwAABrU"]
[Sat Aug 29 05:11:47.300665 2026] [security2:error] [pid 1321:tid 1549] [client 20.104.18.15:37876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/mgrr.php"] [unique_id "apK-c2jCPtor9NZ-byT9jAAABng"]
[Sat Aug 29 05:11:47.316481 2026] [security2:error] [pid 11274:tid 11504] [client 20.220.204.93:59455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/wp-blogs.php"] [unique_id "apK-c2bX5DA3XO6e_qRNqgAAAUU"]
[Sat Aug 29 05:11:47.334853 2026] [security2:error] [pid 11274:tid 11505] [client 68.155.159.216:38671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/xmlrpc.php"] [unique_id "apK-c2bX5DA3XO6e_qRNrQAAAUY"]
[Sat Aug 29 05:11:47.341279 2026] [security2:error] [pid 11274:tid 11559] [client 93.123.109.228:46602] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/APP/.env"] [unique_id "apK-c2bX5DA3XO6e_qRNrwAAAXs"]
[Sat Aug 29 05:11:47.348802 2026] [security2:error] [pid 1321:tid 1494] [client 158.158.54.35:14655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/w.php"] [unique_id "apK-c2jCPtor9NZ-byT9jQAABkI"]
[Sat Aug 29 05:11:47.356225 2026] [security2:error] [pid 11274:tid 11525] [client 93.123.109.228:46482] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/Api/.env"] [unique_id "apK-c2bX5DA3XO6e_qRNsAAAAVo"]
[Sat Aug 29 05:11:47.357564 2026] [security2:error] [pid 11274:tid 11572] [client 93.123.109.228:46508] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/BACK/.env"] [unique_id "apK-c2bX5DA3XO6e_qRNsQAAAYg"]
[Sat Aug 29 05:11:47.359517 2026] [security2:error] [pid 1321:tid 1526] [client 93.123.109.228:46612] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/BACKEND/.env"] [unique_id "apK-c2jCPtor9NZ-byT9jgAABmI"]
[Sat Aug 29 05:11:47.360212 2026] [security2:error] [pid 11274:tid 11508] [client 20.151.200.44:27266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/Cok.php"] [unique_id "apK-c2bX5DA3XO6e_qRNsgAAAUk"]
[Sat Aug 29 05:11:47.362827 2026] [security2:error] [pid 1321:tid 1559] [client 40.83.93.50:8677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/feed-rss2-queue.php"] [unique_id "apK-c2jCPtor9NZ-byT9jwAABoI"]
[Sat Aug 29 05:11:47.381383 2026] [security2:error] [pid 11274:tid 11498] [client 93.123.109.228:46488] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/BE/.env"] [unique_id "apK-c2bX5DA3XO6e_qRNswAAAT8"]
[Sat Aug 29 05:11:47.402334 2026] [security2:error] [pid 1321:tid 1515] [client 185.104.184.230:45630] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.mvo.tyy.mybluehost.me"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "apK-c2jCPtor9NZ-byT9kQAABlc"]
[Sat Aug 29 05:11:47.421820 2026] [security2:error] [pid 11274:tid 11561] [client 93.123.109.228:46542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/Backend/.env"] [unique_id "apK-c2bX5DA3XO6e_qRNtAAAAX0"]
[Sat Aug 29 05:11:47.424081 2026] [security2:error] [pid 1321:tid 1516] [client 93.123.109.228:46638] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/Be/.env"] [unique_id "apK-c2jCPtor9NZ-byT9kwAABlg"]
[Sat Aug 29 05:11:47.424820 2026] [security2:error] [pid 1321:tid 1581] [client 40.83.93.50:10886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/alfa-rex.php"] [unique_id "apK-c2jCPtor9NZ-byT9lAAABpg"]
[Sat Aug 29 05:11:47.426303 2026] [security2:error] [pid 11274:tid 11514] [client 20.151.200.44:65141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/lte7.php"] [unique_id "apK-c2bX5DA3XO6e_qRNtQAAAU8"]
[Sat Aug 29 05:11:47.432224 2026] [security2:error] [pid 1321:tid 1514] [client 20.197.61.180:13219] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/wp-contentt.php"] [unique_id "apK-c2jCPtor9NZ-byT9lQAABlY"]
[Sat Aug 29 05:11:47.438564 2026] [security2:error] [pid 1321:tid 1553] [client 52.139.37.240:22404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/s.php"] [unique_id "apK-c2jCPtor9NZ-byT9lgAABnw"]
[Sat Aug 29 05:11:47.438935 2026] [security2:error] [pid 11274:tid 11533] [client 158.23.184.117:53951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/black.php"] [unique_id "apK-c2bX5DA3XO6e_qRNtwAAAWI"]
[Sat Aug 29 05:11:47.449922 2026] [security2:error] [pid 11274:tid 11451] [client 158.158.54.35:28900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/disagraeosc.php"] [unique_id "apK-c2bX5DA3XO6e_qRNugAAARE"]
[Sat Aug 29 05:11:47.467633 2026] [security2:error] [pid 11274:tid 11507] [client 20.220.204.93:52307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/ccs.php"] [unique_id "apK-c2bX5DA3XO6e_qRNvAAAAUg"]
[Sat Aug 29 05:11:47.476610 2026] [security2:error] [pid 11274:tid 11445] [client 20.104.18.15:37776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/mac.php"] [unique_id "apK-c2bX5DA3XO6e_qRNvgAAAQs"]
[Sat Aug 29 05:11:47.490703 2026] [security2:error] [pid 11274:tid 11523] [client 52.139.37.240:31543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-c2bX5DA3XO6e_qRNwgAAAVg"]
[Sat Aug 29 05:11:47.491527 2026] [security2:error] [pid 1321:tid 1499] [client 68.155.159.216:14092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wzy.php"] [unique_id "apK-c2jCPtor9NZ-byT9lwAABkc"]
[Sat Aug 29 05:11:47.493547 2026] [security2:error] [pid 1321:tid 1497] [client 20.48.250.41:36108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/selesai.php"] [unique_id "apK-c2jCPtor9NZ-byT9mAAABkU"]
[Sat Aug 29 05:11:47.512090 2026] [security2:error] [pid 11274:tid 11515] [client 20.48.250.41:25557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/bgymj.php"] [unique_id "apK-c2bX5DA3XO6e_qRNxgAAAVA"]
[Sat Aug 29 05:11:47.528736 2026] [security2:error] [pid 11274:tid 11491] [client 34.169.171.101:9064] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "mail.forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-cmbX5DA3XO6e_qRNEwAAATg"]
[Sat Aug 29 05:11:47.533786 2026] [security2:error] [pid 1321:tid 1518] [client 20.220.204.93:20627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/mini.php"] [unique_id "apK-c2jCPtor9NZ-byT9mgAABlo"]
[Sat Aug 29 05:11:47.542403 2026] [security2:error] [pid 1321:tid 1523] [client 20.240.128.207:8237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/menu.php"] [unique_id "apK-c2jCPtor9NZ-byT9mwAABl8"]
[Sat Aug 29 05:11:47.561343 2026] [security2:error] [pid 1321:tid 1500] [client 20.52.41.200:2856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wk/index.php"] [unique_id "apK-c2jCPtor9NZ-byT9nAAABkg"]
[Sat Aug 29 05:11:47.566012 2026] [security2:error] [pid 11274:tid 11524] [client 34.169.171.101:9064] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-c2bX5DA3XO6e_qRNyAAAAVk"], referer: https://mail.forensicengineernj.com/actuator/mappings
[Sat Aug 29 05:11:47.567116 2026] [security2:error] [pid 1321:tid 1573] [client 20.100.175.163:15788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-includes/admin.php"] [unique_id "apK-c2jCPtor9NZ-byT9ngAABpA"]
[Sat Aug 29 05:11:47.570899 2026] [security2:error] [pid 1321:tid 1594] [client 20.196.209.81:22899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-admin/wp-mail.php"] [unique_id "apK-c2jCPtor9NZ-byT9oQAABqU"]
[Sat Aug 29 05:11:47.576651 2026] [security2:error] [pid 11274:tid 11512] [client 68.155.159.216:56748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/goat.php"] [unique_id "apK-c2bX5DA3XO6e_qRNywAAAU0"]
[Sat Aug 29 05:11:47.602282 2026] [security2:error] [pid 1321:tid 1564] [client 158.23.184.117:42774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/wp-blog-header.php"] [unique_id "apK-c2jCPtor9NZ-byT9pQAABoc"]
[Sat Aug 29 05:11:47.618427 2026] [security2:error] [pid 11274:tid 11489] [client 20.151.200.44:23561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/Contrller.php"] [unique_id "apK-c2bX5DA3XO6e_qRNzgAAATY"]
[Sat Aug 29 05:11:47.633923 2026] [security2:error] [pid 1321:tid 1598] [client 52.139.37.240:22481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/sagax.php"] [unique_id "apK-c2jCPtor9NZ-byT9pwAABqk"]
[Sat Aug 29 05:11:47.636183 2026] [security2:error] [pid 11274:tid 11459] [client 20.100.175.163:30345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "apK-c2bX5DA3XO6e_qRN0AAAARk"]
[Sat Aug 29 05:11:47.643988 2026] [security2:error] [pid 11274:tid 11565] [client 20.104.18.15:37861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/simple.php"] [unique_id "apK-c2bX5DA3XO6e_qRN0QAAAYE"]
[Sat Aug 29 05:11:47.644670 2026] [security2:error] [pid 11274:tid 11466] [client 20.240.128.207:5943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/upload.php"] [unique_id "apK-c2bX5DA3XO6e_qRN0gAAASA"]
[Sat Aug 29 05:11:47.645903 2026] [security2:error] [pid 11274:tid 11484] [client 20.52.41.200:4934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/assets/images/doc.php"] [unique_id "apK-c2bX5DA3XO6e_qRN0wAAATE"]
[Sat Aug 29 05:11:47.657946 2026] [security2:error] [pid 1321:tid 1592] [client 20.48.250.41:36135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/shlo.php"] [unique_id "apK-c2jCPtor9NZ-byT9qAAABqM"]
[Sat Aug 29 05:11:47.685900 2026] [security2:error] [pid 1321:tid 1542] [client 20.151.200.44:63389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/mega.php"] [unique_id "apK-c2jCPtor9NZ-byT9qQAABnI"]
[Sat Aug 29 05:11:47.708283 2026] [security2:error] [pid 1321:tid 1501] [client 185.104.184.230:45642] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.mvo.tyy.mybluehost.me"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "apK-c2jCPtor9NZ-byT9rAAABkk"]
[Sat Aug 29 05:11:47.718646 2026] [security2:error] [pid 11274:tid 11530] [client 158.23.147.79:59466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/nf_tracking.php"] [unique_id "apK-c2bX5DA3XO6e_qRN4wAAAV8"]
[Sat Aug 29 05:11:47.720309 2026] [security2:error] [pid 11274:tid 11568] [client 4.205.62.107:61670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/debug.php"] [unique_id "apK-c2bX5DA3XO6e_qRN5AAAAYQ"]
[Sat Aug 29 05:11:47.721526 2026] [security2:error] [pid 11274:tid 11444] [client 20.151.200.44:21945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/tanjiro.php"] [unique_id "apK-c2bX5DA3XO6e_qRN5QAAAQo"]
[Sat Aug 29 05:11:47.722937 2026] [security2:error] [pid 11274:tid 11519] [client 93.123.109.228:46508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK-c2bX5DA3XO6e_qRN5gAAAVQ"]
[Sat Aug 29 05:11:47.730165 2026] [security2:error] [pid 11274:tid 11521] [client 4.205.62.107:64989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/mga.php"] [unique_id "apK-c2bX5DA3XO6e_qRN6gAAAVY"]
[Sat Aug 29 05:11:47.741737 2026] [security2:error] [pid 11274:tid 11563] [client 20.220.204.93:20618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/amp.php"] [unique_id "apK-c2bX5DA3XO6e_qRN6wAAAX8"]
[Sat Aug 29 05:11:47.757349 2026] [core:error] [pid 1321:tid 1529] [client 158.23.184.117:42792] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:47.757380 2026] [core:error] [pid 1321:tid 1529] [client 158.23.184.117:42792] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:47.763050 2026] [security2:error] [pid 1321:tid 1519] [client 45.148.10.62:53706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "proaider.com"] [uri "/.env.php.bak"] [unique_id "apK-c2jCPtor9NZ-byT9sQAABls"]
[Sat Aug 29 05:11:47.772082 2026] [security2:error] [pid 1321:tid 1552] [client 20.104.18.15:37775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/xty.php"] [unique_id "apK-c2jCPtor9NZ-byT9sgAABns"]
[Sat Aug 29 05:11:47.784877 2026] [security2:error] [pid 11274:tid 11561] [client 158.23.147.79:50117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK-c2bX5DA3XO6e_qRN7wAAAX0"]
[Sat Aug 29 05:11:47.787253 2026] [security2:error] [pid 11274:tid 11479] [client 93.123.109.228:46572] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/admin-app/.env"] [unique_id "apK-c2bX5DA3XO6e_qRN8AAAASw"]
[Sat Aug 29 05:11:47.791939 2026] [security2:error] [pid 11274:tid 11455] [client 40.83.93.50:17565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/about.php525"] [unique_id "apK-c2bX5DA3XO6e_qRN8wAAARU"]
[Sat Aug 29 05:11:47.794365 2026] [security2:error] [pid 11274:tid 11570] [client 158.158.54.35:7508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/ahax.php"] [unique_id "apK-c2bX5DA3XO6e_qRN9AAAAYY"]
[Sat Aug 29 05:11:47.807157 2026] [security2:error] [pid 1321:tid 1513] [client 158.23.147.79:37949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK-c2jCPtor9NZ-byT9swAABlU"]
[Sat Aug 29 05:11:47.822854 2026] [security2:error] [pid 11274:tid 11549] [client 20.48.250.41:36125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/asax.php"] [unique_id "apK-c2bX5DA3XO6e_qRN_gAAAXE"]
[Sat Aug 29 05:11:47.826950 2026] [security2:error] [pid 11274:tid 11496] [client 158.23.147.79:64468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK-c2bX5DA3XO6e_qROAQAAAT0"]
[Sat Aug 29 05:11:47.854092 2026] [security2:error] [pid 11274:tid 11535] [client 20.48.250.41:25593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/ws69.php"] [unique_id "apK-c2bX5DA3XO6e_qROBgAAAWQ"]
[Sat Aug 29 05:11:47.856002 2026] [security2:error] [pid 11274:tid 11566] [client 103.214.23.106:8714] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "skarchfrutale.mx"] [uri "/vendor/laravel-filemanager/css/lfm.css"] [unique_id "apK-c2bX5DA3XO6e_qROBwAAAYI"]
[Sat Aug 29 05:11:47.857238 2026] [security2:error] [pid 11274:tid 11482] [client 4.205.62.107:63018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/4563.php"] [unique_id "apK-c2bX5DA3XO6e_qROCAAAAS8"]
[Sat Aug 29 05:11:47.865292 2026] [security2:error] [pid 11274:tid 11473] [client 40.83.93.50:9042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/inputs.php"] [unique_id "apK-c2bX5DA3XO6e_qROCgAAASc"]
[Sat Aug 29 05:11:47.884788 2026] [security2:error] [pid 1321:tid 1556] [client 4.205.62.107:6867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/pouhg.php"] [unique_id "apK-c2jCPtor9NZ-byT9tgAABn8"]
[Sat Aug 29 05:11:47.899866 2026] [security2:error] [pid 1321:tid 1488] [client 158.23.184.117:42775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/2.php"] [unique_id "apK-c2jCPtor9NZ-byT9twAABjw"]
[Sat Aug 29 05:11:47.901630 2026] [security2:error] [pid 1321:tid 1496] [client 93.123.109.228:46638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/admin/phpinfo.php"] [unique_id "apK-c2jCPtor9NZ-byT9uAAABkQ"]
[Sat Aug 29 05:11:47.901971 2026] [security2:error] [pid 11274:tid 11467] [client 158.158.54.35:12412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-logs.php"] [unique_id "apK-c2bX5DA3XO6e_qROEAAAASE"]
[Sat Aug 29 05:11:47.903040 2026] [security2:error] [pid 1321:tid 1502] [client 40.83.93.50:10549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/cookie.php"] [unique_id "apK-c2jCPtor9NZ-byT9uQAABko"]
[Sat Aug 29 05:11:47.929691 2026] [security2:error] [pid 11274:tid 11466] [client 93.123.109.228:46740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/admin_phpinfo.php"] [unique_id "apK-c2bX5DA3XO6e_qROFAAAASA"]
[Sat Aug 29 05:11:47.942864 2026] [security2:error] [pid 11274:tid 11537] [client 93.123.109.228:46542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/administrator/.env"] [unique_id "apK-c2bX5DA3XO6e_qROFgAAAWY"]
[Sat Aug 29 05:11:47.946322 2026] [security2:error] [pid 11274:tid 11490] [client 20.220.204.93:20618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/cc13.php"] [unique_id "apK-c2bX5DA3XO6e_qROFwAAATc"]
[Sat Aug 29 05:11:47.958159 2026] [security2:error] [pid 11274:tid 11461] [client 158.23.147.79:43361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-c2bX5DA3XO6e_qROGQAAARs"]
[Sat Aug 29 05:11:47.967600 2026] [security2:error] [pid 11274:tid 11491] [client 20.196.209.81:17402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-admin/wp-settings.php"] [unique_id "apK-c2bX5DA3XO6e_qROGgAAATg"]
[Sat Aug 29 05:11:47.968470 2026] [security2:error] [pid 1321:tid 1491] [client 20.104.18.15:37785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/sallu.php"] [unique_id "apK-c2jCPtor9NZ-byT9uwAABj8"]
[Sat Aug 29 05:11:47.971566 2026] [security2:error] [pid 11274:tid 11506] [client 52.139.37.240:31679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/wp-index.php"] [unique_id "apK-c2bX5DA3XO6e_qROHAAAAUc"]
[Sat Aug 29 05:11:47.971644 2026] [security2:error] [pid 11274:tid 11571] [client 93.123.109.228:46626] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/api-backend/.env"] [unique_id "apK-c2bX5DA3XO6e_qROGwAAAYc"]
[Sat Aug 29 05:11:47.971837 2026] [security2:error] [pid 11274:tid 11468] [client 103.171.189.88:55315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-c2bX5DA3XO6e_qROHQAAASI"]
[Sat Aug 29 05:11:47.971925 2026] [security2:error] [pid 11274:tid 11468] [client 103.171.189.88:55315] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-c2bX5DA3XO6e_qROHQAAASI"]
[Sat Aug 29 05:11:47.975557 2026] [security2:error] [pid 11274:tid 11448] [client 93.123.109.228:46602] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/api-node/.env"] [unique_id "apK-c2bX5DA3XO6e_qROHwAAAQ4"]
[Sat Aug 29 05:11:47.994938 2026] [security2:error] [pid 11274:tid 11545] [client 158.23.147.79:63232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK-c2bX5DA3XO6e_qROIwAAAW0"]
[Sat Aug 29 05:11:48.003632 2026] [security2:error] [pid 11274:tid 11463] [client 20.52.41.200:2795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/admin.php"] [unique_id "apK-dGbX5DA3XO6e_qROJAAAAR0"]
[Sat Aug 29 05:11:48.007856 2026] [security2:error] [pid 11274:tid 11444] [client 185.104.184.230:45654] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.mvo.tyy.mybluehost.me"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "apK-dGbX5DA3XO6e_qROJgAAAQo"]
[Sat Aug 29 05:11:48.011372 2026] [security2:error] [pid 11274:tid 11519] [client 20.48.250.41:36389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/fetch.php"] [unique_id "apK-dGbX5DA3XO6e_qROJwAAAVQ"]
[Sat Aug 29 05:11:48.015405 2026] [security2:error] [pid 11274:tid 11559] [client 93.123.109.228:46558] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/api/.env"] [unique_id "apK-dGbX5DA3XO6e_qROKAAAAXs"]
[Sat Aug 29 05:11:48.025100 2026] [security2:error] [pid 11274:tid 11449] [client 20.220.204.93:59059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/mar.php"] [unique_id "apK-dGbX5DA3XO6e_qROKgAAAQ8"]
[Sat Aug 29 05:11:48.045523 2026] [security2:error] [pid 11274:tid 11472] [client 158.23.184.117:53934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/index/function.php"] [unique_id "apK-dGbX5DA3XO6e_qROLgAAASY"]
[Sat Aug 29 05:11:48.046843 2026] [security2:error] [pid 11274:tid 11504] [client 68.155.159.216:62845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK-dGbX5DA3XO6e_qROLwAAAUU"]
[Sat Aug 29 05:11:48.048481 2026] [security2:error] [pid 11274:tid 11469] [client 20.240.128.207:4164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK-dGbX5DA3XO6e_qROMAAAASM"]
[Sat Aug 29 05:11:48.063906 2026] [security2:error] [pid 11274:tid 11530] [client 52.139.37.240:22423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/wp-content/plugins/ftde.php"] [unique_id "apK-dGbX5DA3XO6e_qRONQAAAV8"]
[Sat Aug 29 05:11:48.071315 2026] [core:error] [pid 11274:tid 11489] [client 20.100.175.163:9543] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:48.071331 2026] [core:error] [pid 11274:tid 11489] [client 20.100.175.163:9543] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:48.074955 2026] [security2:error] [pid 1321:tid 1574] [client 20.151.200.44:63612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/Zeiss.php"] [unique_id "apK-dGjCPtor9NZ-byT9vQAABpE"]
[Sat Aug 29 05:11:48.087017 2026] [security2:error] [pid 11274:tid 11502] [client 20.48.250.41:25590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/ccs.php"] [unique_id "apK-dGbX5DA3XO6e_qROOgAAAUM"]
[Sat Aug 29 05:11:48.098840 2026] [security2:error] [pid 11274:tid 11501] [client 20.48.250.41:24562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-dGbX5DA3XO6e_qROPQAAAUI"]
[Sat Aug 29 05:11:48.101963 2026] [security2:error] [pid 1321:tid 1553] [client 20.48.250.41:49620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/w1px.php"] [unique_id "apK-dGjCPtor9NZ-byT9wAAABnw"]
[Sat Aug 29 05:11:48.108045 2026] [security2:error] [pid 1321:tid 1499] [client 4.205.62.107:60327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/olfclass.php"] [unique_id "apK-dGjCPtor9NZ-byT9wQAABkc"]
[Sat Aug 29 05:11:48.108426 2026] [security2:error] [pid 11274:tid 11546] [client 20.52.41.200:5128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/bgymj.php"] [unique_id "apK-dGbX5DA3XO6e_qROQAAAAW4"]
[Sat Aug 29 05:11:48.108985 2026] [security2:error] [pid 11274:tid 11497] [client 93.123.109.228:46730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/api/info.php"] [unique_id "apK-dGbX5DA3XO6e_qROQQAAAT4"]
[Sat Aug 29 05:11:48.117598 2026] [security2:error] [pid 11274:tid 11520] [client 20.100.175.163:27896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/gifclass.php"] [unique_id "apK-dGbX5DA3XO6e_qROQgAAAVU"]
[Sat Aug 29 05:11:48.145462 2026] [security2:error] [pid 11274:tid 11496] [client 20.104.18.15:37875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/codex.php"] [unique_id "apK-dGbX5DA3XO6e_qRORgAAAT0"]
[Sat Aug 29 05:11:48.145876 2026] [security2:error] [pid 1321:tid 1517] [client 20.151.200.44:21939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/Rk41.php"] [unique_id "apK-dGjCPtor9NZ-byT9wgAABlk"]
[Sat Aug 29 05:11:48.159685 2026] [security2:error] [pid 11274:tid 11539] [client 20.48.250.41:36381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/vx.php"] [unique_id "apK-dGbX5DA3XO6e_qROSwAAAWg"]
[Sat Aug 29 05:11:48.165590 2026] [security2:error] [pid 1321:tid 1612] [client 52.139.37.240:31523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/ww2.php"] [unique_id "apK-dGjCPtor9NZ-byT9xAAABrc"]
[Sat Aug 29 05:11:48.166072 2026] [security2:error] [pid 11274:tid 11544] [client 20.197.61.180:1954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/theme.php"] [unique_id "apK-dGbX5DA3XO6e_qROTQAAAWw"]
[Sat Aug 29 05:11:48.171558 2026] [security2:error] [pid 11274:tid 11324] [remote 93.123.109.228:42716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/.env.php"] [unique_id "apK-dGbX5DA3XO6e_qROUAABLQs"]
[Sat Aug 29 05:11:48.173099 2026] [security2:error] [pid 1321:tid 1518] [client 20.151.200.44:27151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/X7T6.php"] [unique_id "apK-dGjCPtor9NZ-byT9xQAABlo"]
[Sat Aug 29 05:11:48.181724 2026] [security2:error] [pid 11274:tid 11482] [client 68.155.159.216:1820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/ans.php"] [unique_id "apK-dGbX5DA3XO6e_qROUQAAAS8"]
[Sat Aug 29 05:11:48.183387 2026] [security2:error] [pid 11274:tid 11552] [client 93.123.109.228:46670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/api/phpinfo.php"] [unique_id "apK-dGbX5DA3XO6e_qROUgAAAXQ"]
[Sat Aug 29 05:11:48.188674 2026] [security2:error] [pid 11274:tid 11536] [client 158.23.184.117:42445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/wp-admin/maint/repair.php"] [unique_id "apK-dGbX5DA3XO6e_qROUwAAAWU"]
[Sat Aug 29 05:11:48.232709 2026] [security2:error] [pid 1321:tid 1539] [client 20.48.250.41:42854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/to.php"] [unique_id "apK-dGjCPtor9NZ-byT9yAAABm8"]
[Sat Aug 29 05:11:48.241866 2026] [security2:error] [pid 11274:tid 11561] [client 158.158.54.35:14757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/shell.php"] [unique_id "apK-dGbX5DA3XO6e_qROXgAAAX0"]
[Sat Aug 29 05:11:48.259762 2026] [security2:error] [pid 1321:tid 1608] [client 52.139.37.240:21868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "apK-dGjCPtor9NZ-byT9ygAABrM"]
[Sat Aug 29 05:11:48.284850 2026] [security2:error] [pid 11274:tid 11490] [client 93.123.109.228:46524] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/apis/.env"] [unique_id "apK-dGbX5DA3XO6e_qROZAAAATc"]
[Sat Aug 29 05:11:48.299718 2026] [security2:error] [pid 1321:tid 1504] [client 20.104.18.15:37848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/5656.php"] [unique_id "apK-dGjCPtor9NZ-byT9zQAABkw"]
[Sat Aug 29 05:11:48.301730 2026] [security2:error] [pid 11274:tid 11565] [client 20.220.204.93:16306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/aa.php"] [unique_id "apK-dGbX5DA3XO6e_qROaQAAAYE"]
[Sat Aug 29 05:11:48.305427 2026] [security2:error] [pid 11274:tid 11491] [client 158.23.147.79:7166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/simple.php"] [unique_id "apK-dGbX5DA3XO6e_qROawAAATg"]
[Sat Aug 29 05:11:48.308959 2026] [security2:error] [pid 1321:tid 1613] [client 20.48.250.41:24559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/ff1.php"] [unique_id "apK-dGjCPtor9NZ-byT9zgAABrg"]
[Sat Aug 29 05:11:48.312798 2026] [security2:error] [pid 1321:tid 1592] [client 185.104.184.230:45656] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.mvo.tyy.mybluehost.me"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "apK-dGjCPtor9NZ-byT9zwAABqM"]
[Sat Aug 29 05:11:48.317884 2026] [security2:error] [pid 11274:tid 11448] [client 158.23.147.79:24487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-admin/admin.php"] [unique_id "apK-dGbX5DA3XO6e_qROcwAAAQ4"]
[Sat Aug 29 05:11:48.325074 2026] [security2:error] [pid 11274:tid 11564] [client 45.148.10.62:48898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "proaider.com"] [uri "/.env.php"] [unique_id "apK-dGbX5DA3XO6e_qROdQAAAYA"]
[Sat Aug 29 05:11:48.330888 2026] [security2:error] [pid 11274:tid 11471] [client 20.220.204.93:59009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/ccu.php"] [unique_id "apK-dGbX5DA3XO6e_qROdgAAASU"]
[Sat Aug 29 05:11:48.341412 2026] [core:error] [pid 11274:tid 11538] [client 158.23.184.117:54750] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:48.341427 2026] [core:error] [pid 11274:tid 11538] [client 158.23.184.117:54750] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:48.341563 2026] [security2:error] [pid 1321:tid 1614] [client 20.48.250.41:36101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/global.php"] [unique_id "apK-dGjCPtor9NZ-byT90AAABrk"]
[Sat Aug 29 05:11:48.347450 2026] [security2:error] [pid 11274:tid 11493] [client 158.158.54.35:10114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-admin/css/about.php"] [unique_id "apK-dGbX5DA3XO6e_qROeQAAATo"]
[Sat Aug 29 05:11:48.353319 2026] [security2:error] [pid 1321:tid 1497] [client 40.83.93.50:3930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/spip.php"] [unique_id "apK-dGjCPtor9NZ-byT90QAABkU"]
[Sat Aug 29 05:11:48.363890 2026] [security2:error] [pid 11274:tid 11461] [client 52.139.37.240:31665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/7logs.php"] [unique_id "apK-dGbX5DA3XO6e_qROfQAAARs"]
[Sat Aug 29 05:11:48.371982 2026] [security2:error] [pid 11274:tid 11449] [client 93.123.109.228:46654] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/app/.env"] [unique_id "apK-dGbX5DA3XO6e_qROfgAAAQ8"]
[Sat Aug 29 05:11:48.374263 2026] [security2:error] [pid 11274:tid 11534] [client 68.155.159.216:23441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK-dGbX5DA3XO6e_qROgAAAAWM"]
[Sat Aug 29 05:11:48.376274 2026] [security2:error] [pid 11274:tid 11521] [client 158.23.147.79:14264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK-dGbX5DA3XO6e_qROgQAAAVY"]
[Sat Aug 29 05:11:48.391162 2026] [security2:error] [pid 11274:tid 11563] [client 20.48.250.41:49581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/thui.php"] [unique_id "apK-dGbX5DA3XO6e_qROhAAAAX8"]
[Sat Aug 29 05:11:48.394126 2026] [security2:error] [pid 1321:tid 1600] [client 20.196.209.81:17374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-admin/wp-signup.php"] [unique_id "apK-dGjCPtor9NZ-byT90wAABqs"]
[Sat Aug 29 05:11:48.400800 2026] [security2:error] [pid 11274:tid 11469] [client 20.151.200.44:21762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/7logs.php"] [unique_id "apK-dGbX5DA3XO6e_qROhgAAASM"]
[Sat Aug 29 05:11:48.425912 2026] [security2:error] [pid 1321:tid 1594] [client 40.83.93.50:17543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/NewFile.php"] [unique_id "apK-dGjCPtor9NZ-byT91AAABqU"]
[Sat Aug 29 05:11:48.429967 2026] [security2:error] [pid 11274:tid 11470] [client 4.205.62.107:60339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/hochladen.form.php"] [unique_id "apK-dGbX5DA3XO6e_qROjgAAASQ"]
[Sat Aug 29 05:11:48.439522 2026] [security2:error] [pid 11274:tid 11497] [client 68.155.159.216:61255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/atomlib.php"] [unique_id "apK-dGbX5DA3XO6e_qROkQAAAT4"]
[Sat Aug 29 05:11:48.442863 2026] [security2:error] [pid 1321:tid 1564] [client 20.52.41.200:2231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/php8.php"] [unique_id "apK-dGjCPtor9NZ-byT91gAABoc"]
[Sat Aug 29 05:11:48.448171 2026] [security2:error] [pid 1321:tid 1603] [client 20.48.250.41:25554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/mar.php"] [unique_id "apK-dGjCPtor9NZ-byT91wAABq4"]
[Sat Aug 29 05:11:48.457666 2026] [security2:error] [pid 11274:tid 11543] [client 20.104.18.15:37851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/w3lls.php"] [unique_id "apK-dGbX5DA3XO6e_qROlAAAAWs"]
[Sat Aug 29 05:11:48.462665 2026] [security2:error] [pid 1321:tid 1489] [client 40.83.93.50:3392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/class-walker-category-dropdown-class.php"] [unique_id "apK-dGjCPtor9NZ-byT92QAABj0"]
[Sat Aug 29 05:11:48.483270 2026] [security2:error] [pid 11274:tid 11501] [client 158.23.184.117:53943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK-dGbX5DA3XO6e_qROmgAAAUI"]
[Sat Aug 29 05:11:48.487336 2026] [security2:error] [pid 11274:tid 11515] [client 20.240.128.207:8284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-content/file.php"] [unique_id "apK-dGbX5DA3XO6e_qROmwAAAVA"]
[Sat Aug 29 05:11:48.523934 2026] [security2:error] [pid 11274:tid 11518] [client 103.214.23.106:8713] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "skarchfrutale.mx"] [uri "/vendor/laravel-filemanager/css/lfm.css"] [unique_id "apK-dGbX5DA3XO6e_qROogAAAVM"]
[Sat Aug 29 05:11:48.528113 2026] [security2:error] [pid 11274:tid 11523] [client 20.48.250.41:24534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/t.php"] [unique_id "apK-dGbX5DA3XO6e_qROowAAAVg"]
[Sat Aug 29 05:11:48.529805 2026] [security2:error] [pid 11274:tid 11552] [client 20.104.49.130:55120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/fling.php"] [unique_id "apK-dGbX5DA3XO6e_qROpgAAAXQ"]
[Sat Aug 29 05:11:48.531960 2026] [security2:error] [pid 11274:tid 11524] [client 20.151.200.44:64003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/ww3.php"] [unique_id "apK-dGbX5DA3XO6e_qROqAAAAVk"]
[Sat Aug 29 05:11:48.538015 2026] [security2:error] [pid 11274:tid 11450] [client 20.48.250.41:42936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/Jcrop.php"] [unique_id "apK-dGbX5DA3XO6e_qROqgAAARA"]
[Sat Aug 29 05:11:48.554768 2026] [security2:error] [pid 11274:tid 11512] [client 20.48.250.41:36809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/fs.php"] [unique_id "apK-dGbX5DA3XO6e_qROrAAAAU0"]
[Sat Aug 29 05:11:48.563420 2026] [security2:error] [pid 11274:tid 11509] [client 20.100.175.163:23649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/lock360.php"] [unique_id "apK-dGbX5DA3XO6e_qROsAAAAUo"]
[Sat Aug 29 05:11:48.564627 2026] [security2:error] [pid 11274:tid 11541] [client 20.52.41.200:4387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK-dGbX5DA3XO6e_qROsQAAAWo"]
[Sat Aug 29 05:11:48.575435 2026] [security2:error] [pid 11274:tid 11511] [client 20.220.204.93:59083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/ak.php"] [unique_id "apK-dGbX5DA3XO6e_qROtAAAAUw"]
[Sat Aug 29 05:11:48.579907 2026] [security2:error] [pid 11274:tid 11527] [client 20.151.200.44:63555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/ww2.php"] [unique_id "apK-dGbX5DA3XO6e_qROtQAAAVw"]
[Sat Aug 29 05:11:48.579907 2026] [security2:error] [pid 1321:tid 1593] [client 52.139.37.240:31047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/ac.php"] [unique_id "apK-dGjCPtor9NZ-byT92wAABqQ"]
[Sat Aug 29 05:11:48.586669 2026] [security2:error] [pid 11274:tid 11464] [client 93.123.109.228:46714] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/application/.env"] [unique_id "apK-dGbX5DA3XO6e_qROtgAAAR4"]
[Sat Aug 29 05:11:48.592720 2026] [security2:error] [pid 11274:tid 11513] [client 93.123.109.228:46542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/apps/.env"] [unique_id "apK-dGbX5DA3XO6e_qROtwAAAU4"]
[Sat Aug 29 05:11:48.617343 2026] [security2:error] [pid 11274:tid 11484] [client 185.104.184.230:35456] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.mvo.tyy.mybluehost.me"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "apK-dGbX5DA3XO6e_qROuwAAATE"]
[Sat Aug 29 05:11:48.626916 2026] [security2:error] [pid 11274:tid 11495] [client 158.23.184.117:53904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/xda.php"] [unique_id "apK-dGbX5DA3XO6e_qROvgAAATw"]
[Sat Aug 29 05:11:48.642040 2026] [security2:error] [pid 11274:tid 11506] [client 158.23.147.79:63267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/mah.php"] [unique_id "apK-dGbX5DA3XO6e_qROwQAAAUc"]
[Sat Aug 29 05:11:48.643627 2026] [security2:error] [pid 11274:tid 11448] [client 20.104.18.15:37857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/fpwch.php"] [unique_id "apK-dGbX5DA3XO6e_qROwgAAAQ4"]
[Sat Aug 29 05:11:48.706040 2026] [security2:error] [pid 1321:tid 1552] [client 20.48.250.41:36358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/ioxi.php"] [unique_id "apK-dGjCPtor9NZ-byT93gAABns"]
[Sat Aug 29 05:11:48.707306 2026] [security2:error] [pid 1321:tid 1602] [client 20.48.250.41:42999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/ws58.php"] [unique_id "apK-dGjCPtor9NZ-byT93wAABq0"]
[Sat Aug 29 05:11:48.712907 2026] [security2:error] [pid 11274:tid 11521] [client 20.48.250.41:24537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/erty.php"] [unique_id "apK-dGbX5DA3XO6e_qROzwAAAVY"]
[Sat Aug 29 05:11:48.726955 2026] [security2:error] [pid 11274:tid 11563] [client 20.240.128.207:3058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/lite.php"] [unique_id "apK-dGbX5DA3XO6e_qRO0gAAAX8"]
[Sat Aug 29 05:11:48.729784 2026] [security2:error] [pid 11274:tid 11469] [client 20.104.104.62:33811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "zeeksignin.com"] [uri "/new4.php"] [unique_id "apK-dGbX5DA3XO6e_qRO1AAAASM"]
[Sat Aug 29 05:11:48.741480 2026] [security2:error] [pid 11274:tid 11472] [client 20.48.250.41:25595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/ccu.php"] [unique_id "apK-dGbX5DA3XO6e_qRO2AAAASY"]
[Sat Aug 29 05:11:48.769065 2026] [security2:error] [pid 1321:tid 1513] [client 158.23.184.117:42812] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "enproshield.enproftp.com"] [uri "/1.php"] [unique_id "apK-dGjCPtor9NZ-byT94QAABlU"]
[Sat Aug 29 05:11:48.769148 2026] [security2:error] [pid 1321:tid 1513] [client 158.23.184.117:42812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/1.php"] [unique_id "apK-dGjCPtor9NZ-byT94QAABlU"]
[Sat Aug 29 05:11:48.769153 2026] [security2:error] [pid 11274:tid 11540] [client 20.220.204.93:15809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/s1.php"] [unique_id "apK-dGbX5DA3XO6e_qRO3QAAAWk"]
[Sat Aug 29 05:11:48.773279 2026] [security2:error] [pid 1321:tid 1543] [client 52.139.37.240:31127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/ctex1.php"] [unique_id "apK-dGjCPtor9NZ-byT94gAABnM"]
[Sat Aug 29 05:11:48.777429 2026] [security2:error] [pid 11274:tid 11470] [client 20.100.175.163:27882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK-dGbX5DA3XO6e_qRO3gAAASQ"]
[Sat Aug 29 05:11:48.788645 2026] [security2:error] [pid 1321:tid 1521] [client 158.158.54.35:8500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/system_log.php"] [unique_id "apK-dGjCPtor9NZ-byT95QAABl0"]
[Sat Aug 29 05:11:48.796391 2026] [proxy_http:error] [pid 1041789:tid 1041826] (70007)The timeout specified has expired: [remote 57.141.14.98:61724] AH01102: error reading status line from remote server 127.0.0.1:8443
[Sat Aug 29 05:11:48.796409 2026] [proxy:error] [pid 1041789:tid 1041826] [remote 57.141.14.98:61724] AH00898: Error reading from remote server returned by /shop/
[Sat Aug 29 05:11:48.806385 2026] [proxy_http:error] [pid 1034096:tid 1034280] (70007)The timeout specified has expired: [client 127.0.0.1:30264] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:11:48.806405 2026] [proxy:error] [pid 1034096:tid 1034280] [client 127.0.0.1:30264] AH00898: Error reading from remote server returned by /shop/
[Sat Aug 29 05:11:48.808038 2026] [security2:error] [pid 1321:tid 1544] [client 158.158.54.35:7523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/elp.php"] [unique_id "apK-dGjCPtor9NZ-byT95gAABnQ"]
[Sat Aug 29 05:11:48.813633 2026] [security2:error] [pid 1321:tid 1496] [client 20.104.18.15:37842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/domvf.php"] [unique_id "apK-dGjCPtor9NZ-byT95wAABkQ"]
[Sat Aug 29 05:11:48.817139 2026] [security2:error] [pid 1321:tid 1566] [client 20.196.209.81:18004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-blog-header.php"] [unique_id "apK-dGjCPtor9NZ-byT96AAABok"]
[Sat Aug 29 05:11:48.823544 2026] [security2:error] [pid 11274:tid 11501] [client 20.220.204.93:59055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/lib.php"] [unique_id "apK-dGbX5DA3XO6e_qRO5wAAAUI"]
[Sat Aug 29 05:11:48.827640 2026] [security2:error] [pid 11274:tid 11496] [client 158.23.147.79:52311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wzy.php"] [unique_id "apK-dGbX5DA3XO6e_qRO6wAAAT0"]
[Sat Aug 29 05:11:48.834723 2026] [security2:error] [pid 1321:tid 1491] [client 20.104.49.130:58212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "coveryourauto.com"] [uri "/m.php"] [unique_id "apK-dGjCPtor9NZ-byT96QAABj8"]
[Sat Aug 29 05:11:48.841157 2026] [security2:error] [pid 11274:tid 11539] [client 20.48.250.41:42943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/xs.php"] [unique_id "apK-dGbX5DA3XO6e_qRO7wAAAWg"]
[Sat Aug 29 05:11:48.853069 2026] [security2:error] [pid 11274:tid 11444] [client 40.83.93.50:10511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/backup.php"] [unique_id "apK-dGbX5DA3XO6e_qRO8gAAAQo"]
[Sat Aug 29 05:11:48.866084 2026] [security2:error] [pid 1321:tid 1492] [client 4.205.62.107:60504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/nzv.php"] [unique_id "apK-dGjCPtor9NZ-byT96wAABkA"]
[Sat Aug 29 05:11:48.867375 2026] [security2:error] [pid 11274:tid 11482] [client 4.205.62.107:64896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/ccou.php"] [unique_id "apK-dGbX5DA3XO6e_qRO-AAAAS8"]
[Sat Aug 29 05:11:48.895526 2026] [autoindex:error] [pid 11274:tid 11504] [client 20.52.41.200:2710] AH01276: Cannot serve directory /home3/jomoasso/public_html/slsug/.well-known/: No matching DirectoryIndex (index.php,index.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:11:48.912699 2026] [security2:error] [pid 11274:tid 11488] [client 185.104.184.230:35460] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.mvo.tyy.mybluehost.me"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "apK-dGbX5DA3XO6e_qRPAAAAATU"]
[Sat Aug 29 05:11:48.913653 2026] [security2:error] [pid 11274:tid 11465] [client 158.23.184.117:53926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK-dGbX5DA3XO6e_qRPAQAAAR8"]
[Sat Aug 29 05:11:48.916424 2026] [security2:error] [pid 11274:tid 11509] [client 93.123.109.228:46488] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/back-end/.env"] [unique_id "apK-dGbX5DA3XO6e_qRPAgAAAUo"]
[Sat Aug 29 05:11:48.918376 2026] [security2:error] [pid 1321:tid 1574] [client 158.23.147.79:62657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK-dGjCPtor9NZ-byT97QAABpE"]
[Sat Aug 29 05:11:48.918499 2026] [security2:error] [pid 11274:tid 11538] [client 20.197.61.180:12904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/alumni_reg.php"] [unique_id "apK-dGbX5DA3XO6e_qRPAwAAAWc"]
[Sat Aug 29 05:11:48.920105 2026] [security2:error] [pid 11274:tid 11541] [client 93.123.109.228:46482] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/back-api/.env"] [unique_id "apK-dGbX5DA3XO6e_qRPBAAAAWo"]
[Sat Aug 29 05:11:48.925867 2026] [security2:error] [pid 11274:tid 11518] [client 20.104.104.62:34722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "zeeksignin.com"] [uri "/pouhg.php"] [unique_id "apK-dGbX5DA3XO6e_qRPBwAAAVM"]
[Sat Aug 29 05:11:48.928283 2026] [security2:error] [pid 1321:tid 1514] [client 158.23.147.79:64507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/file.php"] [unique_id "apK-dGjCPtor9NZ-byT97gAABlY"]
[Sat Aug 29 05:11:48.938137 2026] [security2:error] [pid 1321:tid 1507] [client 40.83.93.50:9050] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.simplybelladesign.com"] [uri "/1.php7"] [unique_id "apK-dGjCPtor9NZ-byT97wAABk8"]
[Sat Aug 29 05:11:48.938271 2026] [security2:error] [pid 1321:tid 1507] [client 40.83.93.50:9050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/1.php7"] [unique_id "apK-dGjCPtor9NZ-byT97wAABk8"]
[Sat Aug 29 05:11:48.939179 2026] [security2:error] [pid 1321:tid 1581] [client 20.151.200.44:63697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/sf.php"] [unique_id "apK-dGjCPtor9NZ-byT98AAABpg"]
[Sat Aug 29 05:11:48.939611 2026] [security2:error] [pid 1321:tid 1590] [client 40.83.93.50:3920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/config.php"] [unique_id "apK-dGjCPtor9NZ-byT98QAABqE"]
[Sat Aug 29 05:11:48.942482 2026] [security2:error] [pid 11274:tid 11480] [client 93.123.109.228:46714] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/back/.env"] [unique_id "apK-dGbX5DA3XO6e_qRPCQAAAS0"]
[Sat Aug 29 05:11:48.946851 2026] [security2:error] [pid 11274:tid 11467] [client 20.151.200.44:62959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/anz.php"] [unique_id "apK-dGbX5DA3XO6e_qRPCgAAASE"]
[Sat Aug 29 05:11:48.951577 2026] [security2:error] [pid 11274:tid 11459] [client 93.123.109.228:46542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK-dGbX5DA3XO6e_qRPDAAAARk"]
[Sat Aug 29 05:11:48.951704 2026] [security2:error] [pid 1321:tid 1536] [client 93.123.109.228:46690] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/backend-api/.env"] [unique_id "apK-dGjCPtor9NZ-byT98gAABmw"]
[Sat Aug 29 05:11:48.962727 2026] [security2:error] [pid 11274:tid 11466] [client 20.220.204.93:59090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/wp-style.php"] [unique_id "apK-dGbX5DA3XO6e_qRPDgAAASA"]
[Sat Aug 29 05:11:48.972478 2026] [security2:error] [pid 1321:tid 1550] [client 52.139.37.240:31501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/defaults.php"] [unique_id "apK-dGjCPtor9NZ-byT99AAABnk"]
[Sat Aug 29 05:11:48.984299 2026] [security2:error] [pid 11274:tid 11479] [client 20.240.128.207:23293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/files.php"] [unique_id "apK-dGbX5DA3XO6e_qRPEQAAASw"]
[Sat Aug 29 05:11:48.990186 2026] [security2:error] [pid 11274:tid 11490] [client 20.104.18.15:37783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/biufile.php"] [unique_id "apK-dGbX5DA3XO6e_qRPFAAAATc"]
[Sat Aug 29 05:11:48.997949 2026] [security2:error] [pid 1321:tid 1548] [client 4.205.62.107:62990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/cp2.php"] [unique_id "apK-dGjCPtor9NZ-byT99QAABnc"]
[Sat Aug 29 05:11:49.014284 2026] [security2:error] [pid 11274:tid 11486] [client 20.220.204.93:15809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/0byte.php"] [unique_id "apK-dWbX5DA3XO6e_qRPGQAAATM"]
[Sat Aug 29 05:11:49.018784 2026] [security2:error] [pid 1321:tid 1515] [client 4.205.62.107:6785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/phpversion.php"] [unique_id "apK-dWjCPtor9NZ-byT9-QAABlc"]
[Sat Aug 29 05:11:49.022813 2026] [core:error] [pid 11274:tid 11482] [client 20.52.41.200:4970] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:49.022831 2026] [core:error] [pid 11274:tid 11482] [client 20.52.41.200:4970] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:49.045041 2026] [security2:error] [pid 11274:tid 11571] [client 20.52.41.200:2710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/install.php"] [unique_id "apK-dWbX5DA3XO6e_qRPIQAAAYc"]
[Sat Aug 29 05:11:49.050509 2026] [security2:error] [pid 11274:tid 11450] [client 20.100.175.163:23205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-conflg.php"] [unique_id "apK-dWbX5DA3XO6e_qRPIwAAARA"]
[Sat Aug 29 05:11:49.063742 2026] [security2:error] [pid 1321:tid 1598] [client 158.23.147.79:39120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/content.php"] [unique_id "apK-dWjCPtor9NZ-byT9_AAABqk"]
[Sat Aug 29 05:11:49.065016 2026] [core:error] [pid 1321:tid 1576] [client 158.23.184.117:53948] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:49.065032 2026] [core:error] [pid 1321:tid 1576] [client 158.23.184.117:53948] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:49.075517 2026] [security2:error] [pid 1321:tid 1504] [client 20.104.49.130:57698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/wp-blog-header.php"] [unique_id "apK-dWjCPtor9NZ-byT9_QAABkw"]
[Sat Aug 29 05:11:49.097998 2026] [security2:error] [pid 11274:tid 11534] [client 93.123.109.228:46558] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/backup/.env"] [unique_id "apK-dWbX5DA3XO6e_qRPJgAAAWM"]
[Sat Aug 29 05:11:49.121808 2026] [security2:error] [pid 1321:tid 1603] [client 20.220.204.93:52244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/browse.php"] [unique_id "apK-dWjCPtor9NZ-byT9_gAABq4"]
[Sat Aug 29 05:11:49.122312 2026] [security2:error] [pid 11274:tid 11454] [client 20.104.104.62:33881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "zeeksignin.com"] [uri "/sbhu.php"] [unique_id "apK-dWbX5DA3XO6e_qRPLAAAARQ"]
[Sat Aug 29 05:11:49.123637 2026] [security2:error] [pid 1321:tid 1489] [client 93.123.109.228:46696] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/beta/.env"] [unique_id "apK-dWjCPtor9NZ-byT9_wAABj0"]
[Sat Aug 29 05:11:49.133797 2026] [security2:error] [pid 1321:tid 1501] [client 20.151.200.44:65244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/sko.php"] [unique_id "apK-dWjCPtor9NZ-byT-AgAABkk"]
[Sat Aug 29 05:11:49.134539 2026] [security2:error] [pid 1321:tid 1562] [client 93.123.109.228:46690] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/be/.env"] [unique_id "apK-dWjCPtor9NZ-byT-AQAABoU"]
[Sat Aug 29 05:11:49.140792 2026] [security2:error] [pid 1321:tid 1508] [client 20.104.49.130:50619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/samll.php"] [unique_id "apK-dWjCPtor9NZ-byT-AwAABlA"]
[Sat Aug 29 05:11:49.144412 2026] [security2:error] [pid 11274:tid 11540] [client 20.151.200.44:21912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/super.php"] [unique_id "apK-dWbX5DA3XO6e_qRPLwAAAWk"]
[Sat Aug 29 05:11:49.156915 2026] [security2:error] [pid 11274:tid 11371] [remote 93.123.109.228:42716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/.wp-config.php.swp"] [unique_id "apK-dWbX5DA3XO6e_qRPNQABVTk"]
[Sat Aug 29 05:11:49.164572 2026] [security2:error] [pid 1321:tid 1497] [client 52.139.37.240:31514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/domains.php"] [unique_id "apK-dWjCPtor9NZ-byT-BAAABkU"]
[Sat Aug 29 05:11:49.171169 2026] [security2:error] [pid 1321:tid 1532] [client 20.104.18.15:37818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/blacks.php"] [unique_id "apK-dWjCPtor9NZ-byT-BgAABmg"]
[Sat Aug 29 05:11:49.209797 2026] [security2:error] [pid 11274:tid 11523] [client 185.104.184.230:35472] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.mvo.tyy.mybluehost.me"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "apK-dWbX5DA3XO6e_qRPPwAAAVg"]
[Sat Aug 29 05:11:49.210614 2026] [security2:error] [pid 1321:tid 1577] [client 158.23.184.117:42789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/wp-includes/admin.php"] [unique_id "apK-dWjCPtor9NZ-byT-CAAABpQ"]
[Sat Aug 29 05:11:49.227957 2026] [security2:error] [pid 11274:tid 11565] [client 20.240.128.207:7521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/term.php"] [unique_id "apK-dWbX5DA3XO6e_qRPRgAAAYE"]
[Sat Aug 29 05:11:49.229579 2026] [security2:error] [pid 11274:tid 11560] [client 158.158.54.35:15328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/24.php"] [unique_id "apK-dWbX5DA3XO6e_qRPSAAAAXw"]
[Sat Aug 29 05:11:49.236892 2026] [security2:error] [pid 11274:tid 11538] [client 93.123.109.228:46496] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/client/.env"] [unique_id "apK-dWbX5DA3XO6e_qRPSwAAAWc"]
[Sat Aug 29 05:11:49.238972 2026] [security2:error] [pid 1321:tid 1604] [client 20.196.209.81:22885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-blogs.php"] [unique_id "apK-dWjCPtor9NZ-byT-CQAABq8"]
[Sat Aug 29 05:11:49.245606 2026] [security2:error] [pid 11274:tid 11527] [client 4.205.62.107:32564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/gnmlc.php"] [unique_id "apK-dWbX5DA3XO6e_qRPTwAAAVw"]
[Sat Aug 29 05:11:49.254653 2026] [security2:error] [pid 11274:tid 11492] [client 158.158.54.35:14622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-content/cong.php"] [unique_id "apK-dWbX5DA3XO6e_qRPUwAAATk"]
[Sat Aug 29 05:11:49.262612 2026] [security2:error] [pid 11274:tid 11551] [client 20.220.204.93:59025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/zoo.php"] [unique_id "apK-dWbX5DA3XO6e_qRPVgAAAXM"]
[Sat Aug 29 05:11:49.265317 2026] [security2:error] [pid 1321:tid 1521] [client 93.123.109.228:46612] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/cms/.env"] [unique_id "apK-dWjCPtor9NZ-byT-CgAABl0"]
[Sat Aug 29 05:11:49.282065 2026] [security2:error] [pid 1321:tid 1488] [client 52.139.37.240:22488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/z.php"] [unique_id "apK-dWjCPtor9NZ-byT-DgAABjw"]
[Sat Aug 29 05:11:49.302093 2026] [security2:error] [pid 1321:tid 1522] [client 20.100.175.163:30356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/css/index.php"] [unique_id "apK-dWjCPtor9NZ-byT-EAAABl4"]
[Sat Aug 29 05:11:49.307766 2026] [security2:error] [pid 1321:tid 1496] [client 20.151.200.44:27153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/see.php"] [unique_id "apK-dWjCPtor9NZ-byT-EQAABkQ"]
[Sat Aug 29 05:11:49.319710 2026] [security2:error] [pid 11274:tid 11529] [client 20.104.104.62:33885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "zeeksignin.com"] [uri "/sf.php"] [unique_id "apK-dWbX5DA3XO6e_qRPXQAAAV4"]
[Sat Aug 29 05:11:49.326078 2026] [security2:error] [pid 1321:tid 1566] [client 20.104.18.15:37852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/beck.php"] [unique_id "apK-dWjCPtor9NZ-byT-EwAABok"]
[Sat Aug 29 05:11:49.339772 2026] [security2:error] [pid 11274:tid 11535] [client 40.83.93.50:3999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/haiterus.php"] [unique_id "apK-dWbX5DA3XO6e_qRPYQAAAWQ"]
[Sat Aug 29 05:11:49.345822 2026] [security2:error] [pid 11274:tid 11571] [client 93.123.109.228:46542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/config.php"] [unique_id "apK-dWbX5DA3XO6e_qRPYwAAAYc"]
[Sat Aug 29 05:11:49.347590 2026] [security2:error] [pid 1321:tid 1494] [client 20.220.204.93:15839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/xr.php"] [unique_id "apK-dWjCPtor9NZ-byT-FAAABkI"]
[Sat Aug 29 05:11:49.347776 2026] [security2:error] [pid 11274:tid 11558] [client 103.214.23.106:8716] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "skarchfrutale.mx"] [uri "/vendor/laravel-filemanager/css/lfm.css"] [unique_id "apK-dWbX5DA3XO6e_qRPZAAAAXo"]
[Sat Aug 29 05:11:49.357378 2026] [security2:error] [pid 1321:tid 1610] [client 158.23.184.117:53932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/wp-themes.php"] [unique_id "apK-dWjCPtor9NZ-byT-FQAABrU"]
[Sat Aug 29 05:11:49.361178 2026] [security2:error] [pid 1321:tid 1582] [client 52.139.37.240:31668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/dropdown.php"] [unique_id "apK-dWjCPtor9NZ-byT-FgAABpk"]
[Sat Aug 29 05:11:49.375690 2026] [security2:error] [pid 11274:tid 11500] [client 68.155.159.216:1822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/worksec.php"] [unique_id "apK-dWbX5DA3XO6e_qRPaQAAAUE"]
[Sat Aug 29 05:11:49.409497 2026] [security2:error] [pid 11274:tid 11534] [client 93.123.109.228:46626] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/config/.env"] [unique_id "apK-dWbX5DA3XO6e_qRPbgAAAWM"]
[Sat Aug 29 05:11:49.415215 2026] [security2:error] [pid 11274:tid 11479] [client 40.83.93.50:10528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/22.php"] [unique_id "apK-dWbX5DA3XO6e_qRPcQAAASw"]
[Sat Aug 29 05:11:49.417401 2026] [security2:error] [pid 11274:tid 11489] [client 158.23.147.79:7048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/wp-admin/about.php"] [unique_id "apK-dWbX5DA3XO6e_qRPcgAAATY"]
[Sat Aug 29 05:11:49.423776 2026] [security2:error] [pid 11274:tid 11549] [client 40.83.93.50:9067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/ds.php"] [unique_id "apK-dWbX5DA3XO6e_qRPdgAAAXE"]
[Sat Aug 29 05:11:49.434229 2026] [security2:error] [pid 11274:tid 11498] [client 93.123.109.228:46558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/config/aws.php"] [unique_id "apK-dWbX5DA3XO6e_qRPdwAAAT8"]
[Sat Aug 29 05:11:49.481776 2026] [security2:error] [pid 11274:tid 11470] [client 20.104.18.15:37887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/t3.php"] [unique_id "apK-dWbX5DA3XO6e_qRPfwAAASQ"]
[Sat Aug 29 05:11:49.488306 2026] [security2:error] [pid 1321:tid 1588] [client 20.52.41.200:4965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-load.php"] [unique_id "apK-dWjCPtor9NZ-byT-GQAABp8"]
[Sat Aug 29 05:11:49.489528 2026] [security2:error] [pid 1321:tid 1506] [client 158.23.147.79:24384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK-dWjCPtor9NZ-byT-GgAABk4"]
[Sat Aug 29 05:11:49.489803 2026] [security2:error] [pid 1321:tid 1586] [client 93.123.109.228:46690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/config/config.inc.php"] [unique_id "apK-dWjCPtor9NZ-byT-GwAABp0"]
[Sat Aug 29 05:11:49.490549 2026] [security2:error] [pid 1321:tid 1583] [client 20.240.128.207:18648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/o.php"] [unique_id "apK-dWjCPtor9NZ-byT-HAAABpo"]
[Sat Aug 29 05:11:49.496820 2026] [security2:error] [pid 11274:tid 11540] [client 52.139.37.240:22475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/f35.php"] [unique_id "apK-dWbX5DA3XO6e_qRPgAAAAWk"]
[Sat Aug 29 05:11:49.499907 2026] [security2:error] [pid 11274:tid 11444] [client 158.23.147.79:14309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/themes.php"] [unique_id "apK-dWbX5DA3XO6e_qRPggAAAQo"]
[Sat Aug 29 05:11:49.502091 2026] [security2:error] [pid 1321:tid 1597] [client 185.104.184.230:35482] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.mvo.tyy.mybluehost.me"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "apK-dWjCPtor9NZ-byT-HgAABqg"]
[Sat Aug 29 05:11:49.502873 2026] [security2:error] [pid 11274:tid 11502] [client 158.23.184.117:53912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/adminfuns.php/.well-known/acme-challenge/file.php"] [unique_id "apK-dWbX5DA3XO6e_qRPgwAAAUM"]
[Sat Aug 29 05:11:49.507216 2026] [security2:error] [pid 1321:tid 1498] [client 20.52.41.200:2857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/ioxi-o.php"] [unique_id "apK-dWjCPtor9NZ-byT-HwAABkY"]
[Sat Aug 29 05:11:49.528967 2026] [security2:error] [pid 11274:tid 11543] [client 93.123.109.228:46600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/config/config.php"] [unique_id "apK-dWbX5DA3XO6e_qRPiAAAAWs"]
[Sat Aug 29 05:11:49.546638 2026] [security2:error] [pid 11274:tid 11554] [client 20.151.200.44:23580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/bge.php"] [unique_id "apK-dWbX5DA3XO6e_qRPigAAAXY"]
[Sat Aug 29 05:11:49.547287 2026] [security2:error] [pid 11274:tid 11523] [client 20.151.200.44:21909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/lufix1.php"] [unique_id "apK-dWbX5DA3XO6e_qRPiwAAAVg"]
[Sat Aug 29 05:11:49.548928 2026] [security2:error] [pid 1321:tid 1526] [client 20.100.175.163:20162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/123.php"] [unique_id "apK-dWjCPtor9NZ-byT-IQAABmI"]
[Sat Aug 29 05:11:49.560877 2026] [security2:error] [pid 11274:tid 11456] [client 52.139.37.240:31090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/files/index.php"] [unique_id "apK-dWbX5DA3XO6e_qRPjQAAARY"]
[Sat Aug 29 05:11:49.564176 2026] [security2:error] [pid 11274:tid 11560] [client 4.205.62.107:59107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/debuggen.php"] [unique_id "apK-dWbX5DA3XO6e_qRPjgAAAXw"]
[Sat Aug 29 05:11:49.600801 2026] [security2:error] [pid 11274:tid 11503] [client 93.123.109.228:46606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/config/module.config.php"] [unique_id "apK-dWbX5DA3XO6e_qRPmAAAAUQ"]
[Sat Aug 29 05:11:49.601798 2026] [security2:error] [pid 11274:tid 11467] [client 93.123.109.228:46496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/config/env.php"] [unique_id "apK-dWbX5DA3XO6e_qRPmQAAASE"]
[Sat Aug 29 05:11:49.625182 2026] [security2:error] [pid 11274:tid 11527] [client 93.123.109.228:46572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/config/nexmo.php"] [unique_id "apK-dWbX5DA3XO6e_qRPmgAAAVw"]
[Sat Aug 29 05:11:49.625482 2026] [security2:error] [pid 1321:tid 1563] [client 20.197.61.180:10208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/colors.php"] [unique_id "apK-dWjCPtor9NZ-byT-IwAABoY"]
[Sat Aug 29 05:11:49.638027 2026] [security2:error] [pid 11274:tid 11507] [client 20.196.209.81:17752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-comments-post.php"] [unique_id "apK-dWbX5DA3XO6e_qRPnQAAAUg"]
[Sat Aug 29 05:11:49.643708 2026] [security2:error] [pid 1321:tid 1561] [client 20.220.204.93:50571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/h02ugyh.php"] [unique_id "apK-dWjCPtor9NZ-byT-JAAABoQ"]
[Sat Aug 29 05:11:49.651054 2026] [security2:error] [pid 11274:tid 11518] [client 20.104.104.62:33862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "zeeksignin.com"] [uri "/wp-content/plugins/cp-pro/js.php"] [unique_id "apK-dWbX5DA3XO6e_qRPoAAAAVM"]
[Sat Aug 29 05:11:49.651516 2026] [core:error] [pid 11274:tid 11506] [client 158.23.184.117:42773] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:49.651525 2026] [core:error] [pid 11274:tid 11506] [client 158.23.184.117:42773] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:49.653291 2026] [security2:error] [pid 1321:tid 1548] [client 68.155.159.216:62752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apK-dWjCPtor9NZ-byT-JgAABnc"]
[Sat Aug 29 05:11:49.653345 2026] [security2:error] [pid 1321:tid 1510] [client 68.155.159.216:23536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/goat1.php"] [unique_id "apK-dWjCPtor9NZ-byT-JwAABlI"]
[Sat Aug 29 05:11:49.662829 2026] [security2:error] [pid 11274:tid 11466] [client 93.123.109.228:46586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/config/stripe.php"] [unique_id "apK-dWbX5DA3XO6e_qRPogAAASA"]
[Sat Aug 29 05:11:49.667505 2026] [security2:error] [pid 1321:tid 1598] [client 20.104.18.15:37856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/wp.php"] [unique_id "apK-dWjCPtor9NZ-byT-KQAABqk"]
[Sat Aug 29 05:11:49.688670 2026] [security2:error] [pid 11274:tid 11461] [client 52.139.37.240:21838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/file61.php"] [unique_id "apK-dWbX5DA3XO6e_qRPqgAAARs"]
[Sat Aug 29 05:11:49.704829 2026] [security2:error] [pid 1321:tid 1614] [client 20.151.200.44:63423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/zoz.php"] [unique_id "apK-dWjCPtor9NZ-byT-KgAABrk"]
[Sat Aug 29 05:11:49.711134 2026] [fcgid:warn] [pid 1321:tid 1595] (70014)End of file found: [client 199.45.154.119:33786] mod_fcgid: can't get data from http client
[Sat Aug 29 05:11:49.726522 2026] [security2:error] [pid 1321:tid 1600] [client 68.155.159.216:56746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK-dWjCPtor9NZ-byT-LAAABqs"]
[Sat Aug 29 05:11:49.730413 2026] [security2:error] [pid 11274:tid 11565] [client 20.240.128.207:4870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/config.php"] [unique_id "apK-dWbX5DA3XO6e_qRPrQAAAYE"]
[Sat Aug 29 05:11:49.734318 2026] [security2:error] [pid 11274:tid 11465] [client 158.158.54.35:23693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK-dWbX5DA3XO6e_qRPsQAAAR8"]
[Sat Aug 29 05:11:49.736904 2026] [security2:error] [pid 11274:tid 11486] [client 20.151.200.44:63151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/hack.php"] [unique_id "apK-dWbX5DA3XO6e_qRPsgAAATM"]
[Sat Aug 29 05:11:49.755147 2026] [security2:error] [pid 1321:tid 1504] [client 52.139.37.240:31064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/flower.php"] [unique_id "apK-dWjCPtor9NZ-byT-LgAABkw"]
[Sat Aug 29 05:11:49.756459 2026] [security2:error] [pid 11274:tid 11342] [remote 93.123.109.228:42716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK-dWbX5DA3XO6e_qRPtAABLR0"]
[Sat Aug 29 05:11:49.794337 2026] [security2:error] [pid 11274:tid 11513] [client 20.100.175.163:35014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-cron.php"] [unique_id "apK-dWbX5DA3XO6e_qRPuQAAAU4"]
[Sat Aug 29 05:11:49.811871 2026] [security2:error] [pid 11274:tid 11545] [client 20.220.204.93:52305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/elp.php"] [unique_id "apK-dWbX5DA3XO6e_qRPvgAAAW0"]
[Sat Aug 29 05:11:49.814489 2026] [security2:error] [pid 1321:tid 1489] [client 158.23.184.117:53950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "apK-dWjCPtor9NZ-byT-MAAABj0"]
[Sat Aug 29 05:11:49.828942 2026] [security2:error] [pid 1321:tid 1565] [client 40.83.93.50:6684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/go.php"] [unique_id "apK-dWjCPtor9NZ-byT-MgAABog"]
[Sat Aug 29 05:11:49.830533 2026] [security2:error] [pid 11274:tid 11534] [client 158.158.54.35:29483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-content/plugins/index.php"] [unique_id "apK-dWbX5DA3XO6e_qRPwwAAAWM"]
[Sat Aug 29 05:11:49.836662 2026] [security2:error] [pid 11274:tid 11568] [client 20.104.18.15:37821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/abcd.php"] [unique_id "apK-dWbX5DA3XO6e_qRPxwAAAYQ"]
[Sat Aug 29 05:11:49.847876 2026] [security2:error] [pid 11274:tid 11450] [client 20.104.104.62:33831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "zeeksignin.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK-dWbX5DA3XO6e_qRPyQAAARA"]
[Sat Aug 29 05:11:49.870841 2026] [security2:error] [pid 11274:tid 11452] [client 20.220.204.93:17052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/xxw.php"] [unique_id "apK-dWbX5DA3XO6e_qRPzAAAARI"]
[Sat Aug 29 05:11:49.882943 2026] [security2:error] [pid 11274:tid 11500] [client 52.139.37.240:21837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/mah.php"] [unique_id "apK-dWbX5DA3XO6e_qRP0gAAAUE"]
[Sat Aug 29 05:11:49.889714 2026] [security2:error] [pid 11274:tid 11451] [client 20.104.49.130:36352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/images.php"] [unique_id "apK-dWbX5DA3XO6e_qRP0wAAARE"]
[Sat Aug 29 05:11:49.913143 2026] [security2:error] [pid 11274:tid 11438] [remote 93.123.109.228:42716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/admin/phpinfo.php"] [unique_id "apK-dWbX5DA3XO6e_qRP2AABI3s"]
[Sat Aug 29 05:11:49.933676 2026] [security2:error] [pid 11274:tid 11543] [client 158.23.147.79:52324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK-dWbX5DA3XO6e_qRP2wAAAWs"]
[Sat Aug 29 05:11:49.936241 2026] [security2:error] [pid 1321:tid 1615] [client 20.151.200.44:65107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/155.php"] [unique_id "apK-dWjCPtor9NZ-byT-NQAABro"]
[Sat Aug 29 05:11:49.940561 2026] [core:error] [pid 1321:tid 1501] [client 20.52.41.200:5142] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:49.944120 2026] [core:error] [pid 1321:tid 1501] [client 20.52.41.200:5142] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:49.956873 2026] [security2:error] [pid 11274:tid 11554] [client 93.123.109.228:46818] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/crm/.env"] [unique_id "apK-dWbX5DA3XO6e_qRP3wAAAXY"]
[Sat Aug 29 05:11:49.959082 2026] [security2:error] [pid 1321:tid 1577] [client 93.123.109.228:46824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/cron/.env"] [unique_id "apK-dWjCPtor9NZ-byT-NgAABpQ"]
[Sat Aug 29 05:11:49.961257 2026] [security2:error] [pid 11274:tid 11502] [client 158.23.184.117:42754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "enproshield.enproftp.com"] [uri "/11.php"] [unique_id "apK-dWbX5DA3XO6e_qRP4AAAAUM"]
[Sat Aug 29 05:11:49.967160 2026] [security2:error] [pid 11274:tid 11519] [client 20.52.41.200:2769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/xmlrpc.php"] [unique_id "apK-dWbX5DA3XO6e_qRP3gAAAVQ"]
[Sat Aug 29 05:11:49.971471 2026] [security2:error] [pid 1321:tid 1580] [client 20.104.18.15:37809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/nofile.php"] [unique_id "apK-dWjCPtor9NZ-byT-NwAABpc"]
[Sat Aug 29 05:11:49.974527 2026] [security2:error] [pid 1321:tid 1587] [client 93.123.109.228:46612] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/current/.env"] [unique_id "apK-dWjCPtor9NZ-byT-OAAABp4"]
[Sat Aug 29 05:11:49.974542 2026] [security2:error] [pid 11274:tid 11539] [client 93.123.109.228:46714] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/demo/.env"] [unique_id "apK-dWbX5DA3XO6e_qRP4gAAAWg"]
[Sat Aug 29 05:11:49.974770 2026] [security2:error] [pid 11274:tid 11380] [remote 93.123.109.228:42716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/admin_phpinfo.php"] [unique_id "apK-dWbX5DA3XO6e_qRP4wABI0I"]
[Sat Aug 29 05:11:49.982940 2026] [security2:error] [pid 11274:tid 11481] [client 40.83.93.50:15847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/GOD.php"] [unique_id "apK-dWbX5DA3XO6e_qRP5QAAAS4"]
[Sat Aug 29 05:11:49.991470 2026] [security2:error] [pid 11274:tid 11521] [client 20.240.128.207:18679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/file2.php"] [unique_id "apK-dWbX5DA3XO6e_qRP5gAAAVY"]
[Sat Aug 29 05:11:49.998560 2026] [security2:error] [pid 1321:tid 1523] [client 149.34.210.141:2421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-dWjCPtor9NZ-byT-OQAABl8"]
[Sat Aug 29 05:11:49.998679 2026] [security2:error] [pid 1321:tid 1523] [client 149.34.210.141:2421] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-dWjCPtor9NZ-byT-OQAABl8"]
[Sat Aug 29 05:11:49.999806 2026] [security2:error] [pid 11274:tid 11477] [client 4.205.62.107:64309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/rum.or.php"] [unique_id "apK-dWbX5DA3XO6e_qRP6gAAASs"]
[Sat Aug 29 05:11:50.011816 2026] [security2:error] [pid 1321:tid 1567] [client 20.220.204.93:16827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/bolt.php"] [unique_id "apK-dmjCPtor9NZ-byT-OgAABoo"]
[Sat Aug 29 05:11:50.020224 2026] [security2:error] [pid 11274:tid 11559] [client 4.205.62.107:63953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/66.php"] [unique_id "apK-dmbX5DA3XO6e_qRP7AAAAXs"]
[Sat Aug 29 05:11:50.028263 2026] [security2:error] [pid 11274:tid 11566] [client 93.123.109.228:46756] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/developer/.env"] [unique_id "apK-dmbX5DA3XO6e_qRP7QAAAYI"]
[Sat Aug 29 05:11:50.031496 2026] [security2:error] [pid 1321:tid 1601] [client 93.123.109.228:46876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/develop/.env"] [unique_id "apK-dmjCPtor9NZ-byT-PAAABqw"]
[Sat Aug 29 05:11:50.032515 2026] [security2:error] [pid 11274:tid 11538] [client 93.123.109.228:46868] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/dev/.env"] [unique_id "apK-dmbX5DA3XO6e_qRP7gAAAWc"]
[Sat Aug 29 05:11:50.033712 2026] [security2:error] [pid 11274:tid 11516] [client 20.196.209.81:8401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-config.php"] [unique_id "apK-dmbX5DA3XO6e_qRP7wAAAVE"]
[Sat Aug 29 05:11:50.038413 2026] [security2:error] [pid 11274:tid 11503] [client 158.23.147.79:63841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK-dmbX5DA3XO6e_qRP8QAAAUQ"]
[Sat Aug 29 05:11:50.041707 2026] [security2:error] [pid 11274:tid 11454] [client 20.100.175.163:11424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/yanz.php"] [unique_id "apK-dmbX5DA3XO6e_qRP8gAAARQ"]
[Sat Aug 29 05:11:50.043414 2026] [security2:error] [pid 11274:tid 11467] [client 93.123.109.228:46726] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/development/.env"] [unique_id "apK-dmbX5DA3XO6e_qRP8wAAASE"]
[Sat Aug 29 05:11:50.048666 2026] [security2:error] [pid 11274:tid 11541] [client 20.104.104.62:33909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "zeeksignin.com"] [uri "/wp-content/themes/alera/alpha.php"] [unique_id "apK-dmbX5DA3XO6e_qRP9AAAAWo"]
[Sat Aug 29 05:11:50.052947 2026] [security2:error] [pid 11274:tid 11459] [client 68.155.159.216:38568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/lv.php"] [unique_id "apK-dmbX5DA3XO6e_qRP9QAAARk"]
[Sat Aug 29 05:11:50.055492 2026] [security2:error] [pid 11274:tid 11527] [client 20.220.204.93:59100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/666.php"] [unique_id "apK-dmbX5DA3XO6e_qRP9gAAAVw"]
[Sat Aug 29 05:11:50.060399 2026] [proxy_http:error] [pid 1041789:tid 1041832] (70007)The timeout specified has expired: [remote 57.141.14.71:47512] AH01102: error reading status line from remote server 127.0.0.1:8443
[Sat Aug 29 05:11:50.060421 2026] [proxy:error] [pid 1041789:tid 1041832] [remote 57.141.14.71:47512] AH00898: Error reading from remote server returned by /shop-cart/
[Sat Aug 29 05:11:50.067824 2026] [security2:error] [pid 1321:tid 1543] [client 20.151.200.44:63998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/mmm.php"] [unique_id "apK-dmjCPtor9NZ-byT-PwAABnM"]
[Sat Aug 29 05:11:50.070383 2026] [proxy_http:error] [pid 1041789:tid 1041974] (70007)The timeout specified has expired: [client 127.0.0.1:30684] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:11:50.070399 2026] [proxy:error] [pid 1041789:tid 1041974] [client 127.0.0.1:30684] AH00898: Error reading from remote server returned by /shop-cart/
[Sat Aug 29 05:11:50.074410 2026] [security2:error] [pid 11274:tid 11507] [client 68.155.159.216:56769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/file17.php"] [unique_id "apK-dmbX5DA3XO6e_qRP-QAAAUg"]
[Sat Aug 29 05:11:50.077902 2026] [security2:error] [pid 11274:tid 11473] [client 158.23.147.79:64398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/file17.php"] [unique_id "apK-dmbX5DA3XO6e_qRP-gAAASc"]
[Sat Aug 29 05:11:50.081936 2026] [security2:error] [pid 11274:tid 11485] [client 52.139.37.240:22512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/mini.php"] [unique_id "apK-dmbX5DA3XO6e_qRP-wAAATI"]
[Sat Aug 29 05:11:50.116983 2026] [security2:error] [pid 11274:tid 11495] [client 20.104.18.15:37707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/run.php"] [unique_id "apK-dmbX5DA3XO6e_qRQAgAAATw"]
[Sat Aug 29 05:11:50.132740 2026] [security2:error] [pid 1321:tid 1525] [client 4.205.62.107:62991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/xda.php"] [unique_id "apK-dmjCPtor9NZ-byT-RQAABmE"]
[Sat Aug 29 05:11:50.168127 2026] [security2:error] [pid 11274:tid 11316] [remote 93.123.109.228:42716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/api/info.php"] [unique_id "apK-dmbX5DA3XO6e_qRQDgABcwM"]
[Sat Aug 29 05:11:50.176778 2026] [security2:error] [pid 11274:tid 11545] [client 4.205.62.107:6320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/adminfus.php"] [unique_id "apK-dmbX5DA3XO6e_qRQEAAAAW0"]
[Sat Aug 29 05:11:50.197886 2026] [security2:error] [pid 11274:tid 11479] [client 20.151.200.44:61627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/wp-ana.php"] [unique_id "apK-dmbX5DA3XO6e_qRQFAAAASw"]
[Sat Aug 29 05:11:50.198683 2026] [security2:error] [pid 1321:tid 1519] [client 20.220.204.93:59107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/knmt.php"] [unique_id "apK-dmjCPtor9NZ-byT-SAAABls"]
[Sat Aug 29 05:11:50.199402 2026] [security2:error] [pid 1321:tid 1553] [client 158.23.147.79:43700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK-dmjCPtor9NZ-byT-SQAABnw"]
[Sat Aug 29 05:11:50.200898 2026] [security2:error] [pid 11274:tid 11536] [client 158.158.54.35:19348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-mail.php"] [unique_id "apK-dmbX5DA3XO6e_qRQFQAAAWU"]
[Sat Aug 29 05:11:50.214380 2026] [security2:error] [pid 11274:tid 11464] [client 40.83.93.50:10899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/bak.phps"] [unique_id "apK-dmbX5DA3XO6e_qRQFwAAAR4"]
[Sat Aug 29 05:11:50.227920 2026] [security2:error] [pid 11274:tid 11455] [client 93.123.109.228:46780] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/erp/.env"] [unique_id "apK-dmbX5DA3XO6e_qRQGgAAARU"]
[Sat Aug 29 05:11:50.241125 2026] [security2:error] [pid 1321:tid 1596] [client 20.240.128.207:2096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK-dmjCPtor9NZ-byT-TAAABqc"]
[Sat Aug 29 05:11:50.248528 2026] [security2:error] [pid 11274:tid 11384] [remote 93.123.109.228:42716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/api/phpinfo.php"] [unique_id "apK-dmbX5DA3XO6e_qRQHQABc0Y"]
[Sat Aug 29 05:11:50.251968 2026] [security2:error] [pid 1321:tid 1581] [client 20.104.18.15:37840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/new.php"] [unique_id "apK-dmjCPtor9NZ-byT-TQAABpg"]
[Sat Aug 29 05:11:50.253629 2026] [security2:error] [pid 1321:tid 1581] [client 20.151.200.44:22179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/mcd.php"] [unique_id "apK-dmjCPtor9NZ-byT-TgAABpg"]
[Sat Aug 29 05:11:50.277486 2026] [security2:error] [pid 11274:tid 11472] [client 52.139.37.240:21883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/v.php"] [unique_id "apK-dmbX5DA3XO6e_qRQIgAAASY"]
[Sat Aug 29 05:11:50.282635 2026] [security2:error] [pid 11274:tid 11498] [client 93.123.109.228:46818] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/etc/boto.cfg"] [unique_id "apK-dmbX5DA3XO6e_qRQIwAAAT8"]
[Sat Aug 29 05:11:50.290748 2026] [security2:error] [pid 1321:tid 1583] [client 93.123.109.228:46824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/etc/apache2/apache2.conf"] [unique_id "apK-dmjCPtor9NZ-byT-TwAABpo"]
[Sat Aug 29 05:11:50.295202 2026] [security2:error] [pid 1321:tid 1498] [client 93.123.109.228:46612] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/fe/.env"] [unique_id "apK-dmjCPtor9NZ-byT-UQAABkY"]
[Sat Aug 29 05:11:50.309021 2026] [security2:error] [pid 11274:tid 11558] [client 20.100.175.163:9253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-block.php"] [unique_id "apK-dmbX5DA3XO6e_qRQKQAAAXo"]
[Sat Aug 29 05:11:50.325560 2026] [security2:error] [pid 11274:tid 11515] [client 20.220.204.93:58018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/rtx.php"] [unique_id "apK-dmbX5DA3XO6e_qRQLwAAAVA"]
[Sat Aug 29 05:11:50.331577 2026] [security2:error] [pid 11274:tid 11444] [client 93.123.109.228:46602] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/front/.env"] [unique_id "apK-dmbX5DA3XO6e_qRQMQAAAQo"]
[Sat Aug 29 05:11:50.332158 2026] [security2:error] [pid 1321:tid 1491] [client 40.83.93.50:20300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/gecko-new.php"] [unique_id "apK-dmjCPtor9NZ-byT-UwAABj8"]
[Sat Aug 29 05:11:50.340277 2026] [security2:error] [pid 11274:tid 11552] [client 20.220.204.93:52313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/sbhu.php"] [unique_id "apK-dmbX5DA3XO6e_qRQNAAAAXQ"]
[Sat Aug 29 05:11:50.343188 2026] [security2:error] [pid 11274:tid 11543] [client 93.123.109.228:46488] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/frontend/.env"] [unique_id "apK-dmbX5DA3XO6e_qRQNQAAAWs"]
[Sat Aug 29 05:11:50.355929 2026] [security2:error] [pid 1321:tid 1564] [client 20.197.61.180:12881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/Js.php"] [unique_id "apK-dmjCPtor9NZ-byT-VQAABoc"]
[Sat Aug 29 05:11:50.383041 2026] [security2:error] [pid 1321:tid 1548] [client 4.205.62.107:62770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/koiy.php"] [unique_id "apK-dmjCPtor9NZ-byT-WAAABnc"]
[Sat Aug 29 05:11:50.390139 2026] [security2:error] [pid 1321:tid 1612] [client 34.169.171.101:48776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.171.169.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forensicengineernj.com"] [uri "/i.php"] [unique_id "apK-dmjCPtor9NZ-byT-WgAABrc"]
[Sat Aug 29 05:11:50.391441 2026] [security2:error] [pid 11274:tid 11481] [client 20.104.104.62:33799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "zeeksignin.com"] [uri "/wp-info.php"] [unique_id "apK-dmbX5DA3XO6e_qRQPgAAAS4"]
[Sat Aug 29 05:11:50.391844 2026] [authz_core:error] [pid 1321:tid 1563] [client 34.169.171.101:48770] AH01630: client denied by server configuration: /var/www/html/.htpasswd
[Sat Aug 29 05:11:50.395714 2026] [security2:error] [pid 11274:tid 11504] [client 34.169.171.101:48782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.171.169.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forensicengineernj.com"] [uri "/pi.php"] [unique_id "apK-dmbX5DA3XO6e_qRQQQAAAUU"]
[Sat Aug 29 05:11:50.404926 2026] [security2:error] [pid 1321:tid 1590] [client 20.52.41.200:4641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/a.php"] [unique_id "apK-dmjCPtor9NZ-byT-XgAABqE"]
[Sat Aug 29 05:11:50.429591 2026] [security2:error] [pid 11274:tid 11467] [client 93.123.109.228:46818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/info.php"] [unique_id "apK-dmbX5DA3XO6e_qRQSgAAASE"]
[Sat Aug 29 05:11:50.429612 2026] [security2:error] [pid 11274:tid 11497] [client 20.196.209.81:17731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-configs.php"] [unique_id "apK-dmbX5DA3XO6e_qRQSwAAAT4"]
[Sat Aug 29 05:11:50.431016 2026] [security2:error] [pid 1321:tid 1492] [client 34.169.171.101:48770] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/.env"] [unique_id "apK-dmjCPtor9NZ-byT-YAAABkA"]
[Sat Aug 29 05:11:50.431257 2026] [security2:error] [pid 1321:tid 1584] [client 34.169.171.101:48756] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/.env~"] [unique_id "apK-dmjCPtor9NZ-byT-XwAABps"]
[Sat Aug 29 05:11:50.431656 2026] [security2:error] [pid 11274:tid 11452] [client 20.52.41.200:2872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/filemanager.php"] [unique_id "apK-dmbX5DA3XO6e_qRQTAAAARI"]
[Sat Aug 29 05:11:50.432474 2026] [security2:error] [pid 11274:tid 11527] [client 34.169.171.101:48796] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.forensicengineernj.com"] [uri "/.bash_history"] [unique_id "apK-dmbX5DA3XO6e_qRQTQAAAVw"]
[Sat Aug 29 05:11:50.433699 2026] [security2:error] [pid 11274:tid 11459] [client 20.104.18.15:37781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/inx.php"] [unique_id "apK-dmbX5DA3XO6e_qRQTwAAARk"]
[Sat Aug 29 05:11:50.435142 2026] [security2:error] [pid 11274:tid 11492] [client 20.151.200.44:21916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/waw.php"] [unique_id "apK-dmbX5DA3XO6e_qRQUgAAATk"]
[Sat Aug 29 05:11:50.444277 2026] [security2:error] [pid 1321:tid 1614] [client 93.123.109.228:46612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/infophp.php"] [unique_id "apK-dmjCPtor9NZ-byT-ZAAABrk"]
[Sat Aug 29 05:11:50.449788 2026] [security2:error] [pid 1321:tid 1595] [client 93.123.109.228:46824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/infos.php"] [unique_id "apK-dmjCPtor9NZ-byT-ZQAABqY"]
[Sat Aug 29 05:11:50.463201 2026] [security2:error] [pid 11274:tid 11566] [client 34.169.171.101:48816] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/_next/.env"] [unique_id "apK-dmbX5DA3XO6e_qRQVgAAAYI"]
[Sat Aug 29 05:11:50.466321 2026] [security2:error] [pid 1321:tid 1526] [client 40.83.93.50:8359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/ggfi.php"] [unique_id "apK-dmjCPtor9NZ-byT-aAAABmI"]
[Sat Aug 29 05:11:50.471628 2026] [security2:error] [pid 1321:tid 1490] [client 52.139.37.240:21887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK-dmjCPtor9NZ-byT-agAABj4"]
[Sat Aug 29 05:11:50.477482 2026] [security2:error] [pid 11274:tid 11482] [client 93.123.109.228:46602] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/laravel/.env"] [unique_id "apK-dmbX5DA3XO6e_qRQXAAAAS8"]
[Sat Aug 29 05:11:50.487174 2026] [security2:error] [pid 11274:tid 11495] [client 93.123.109.228:46488] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/lms/.env"] [unique_id "apK-dmbX5DA3XO6e_qRQXgAAATw"]
[Sat Aug 29 05:11:50.497256 2026] [security2:error] [pid 1321:tid 1591] [client 20.240.128.207:18896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK-dmjCPtor9NZ-byT-bQAABqI"]
[Sat Aug 29 05:11:50.505010 2026] [security2:error] [pid 1321:tid 1593] [client 93.123.109.228:46876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/local/.env"] [unique_id "apK-dmjCPtor9NZ-byT-bgAABqQ"]
[Sat Aug 29 05:11:50.522898 2026] [security2:error] [pid 11274:tid 11493] [client 158.23.147.79:7047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK-dmbX5DA3XO6e_qRQZAAAATo"]
[Sat Aug 29 05:11:50.526219 2026] [security2:error] [pid 11274:tid 11565] [client 40.83.93.50:8772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/post.php"] [unique_id "apK-dmbX5DA3XO6e_qRQZQAAAYE"]
[Sat Aug 29 05:11:50.535134 2026] [security2:error] [pid 11274:tid 11519] [client 20.100.175.163:6593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/autoload_classmap.php"] [unique_id "apK-dmbX5DA3XO6e_qRQaQAAAVQ"]
[Sat Aug 29 05:11:50.535894 2026] [security2:error] [pid 1321:tid 1565] [client 93.123.109.228:46854] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/market/.env"] [unique_id "apK-dmjCPtor9NZ-byT-bwAABog"]
[Sat Aug 29 05:11:50.549547 2026] [security2:error] [pid 1321:tid 1527] [client 20.151.200.44:63307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/advanced.php"] [unique_id "apK-dmjCPtor9NZ-byT-cAAABmM"]
[Sat Aug 29 05:11:50.572695 2026] [security2:error] [pid 11274:tid 11496] [client 93.123.109.228:46726] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/marketing/.env"] [unique_id "apK-dmbX5DA3XO6e_qRQbAAAAT0"]
[Sat Aug 29 05:11:50.583445 2026] [security2:error] [pid 11274:tid 11513] [client 158.158.54.35:29449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-admin/images/index.php"] [unique_id "apK-dmbX5DA3XO6e_qRQbQAAAU4"]
[Sat Aug 29 05:11:50.594912 2026] [security2:error] [pid 11274:tid 11468] [client 20.104.18.15:37698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/vpn.php"] [unique_id "apK-dmbX5DA3XO6e_qRQcAAAASI"]
[Sat Aug 29 05:11:50.595670 2026] [security2:error] [pid 11274:tid 11512] [client 93.123.109.228:46878] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/media/.env"] [unique_id "apK-dmbX5DA3XO6e_qRQcQAAAU0"]
[Sat Aug 29 05:11:50.598466 2026] [security2:error] [pid 11274:tid 11536] [client 20.220.204.93:59053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/a332.php"] [unique_id "apK-dmbX5DA3XO6e_qRQdQAAAWU"]
[Sat Aug 29 05:11:50.600283 2026] [security2:error] [pid 11274:tid 11450] [client 68.155.159.216:14307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK-dmbX5DA3XO6e_qRQdwAAARA"]
[Sat Aug 29 05:11:50.600457 2026] [security2:error] [pid 11274:tid 11465] [client 20.104.104.62:33844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "zeeksignin.com"] [uri "/ws61.php"] [unique_id "apK-dmbX5DA3XO6e_qRQdgAAAR8"]
[Sat Aug 29 05:11:50.614299 2026] [security2:error] [pid 1321:tid 1523] [client 158.23.147.79:14209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-mail.php"] [unique_id "apK-dmjCPtor9NZ-byT-cwAABl8"]
[Sat Aug 29 05:11:50.626610 2026] [security2:error] [pid 11274:tid 11464] [client 93.123.109.228:46602] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/new/.env"] [unique_id "apK-dmbX5DA3XO6e_qRQeQAAAR4"]
[Sat Aug 29 05:11:50.631492 2026] [security2:error] [pid 1321:tid 1549] [client 93.123.109.228:46684] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/node-api/.env"] [unique_id "apK-dmjCPtor9NZ-byT-dAAABng"]
[Sat Aug 29 05:11:50.634685 2026] [security2:error] [pid 11274:tid 11499] [client 93.123.109.228:46714] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/node/.env"] [unique_id "apK-dmbX5DA3XO6e_qRQfQAAAUA"]
[Sat Aug 29 05:11:50.635779 2026] [security2:error] [pid 11274:tid 11455] [client 93.123.109.228:46488] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/node/api/.env"] [unique_id "apK-dmbX5DA3XO6e_qRQfAAAARU"]
[Sat Aug 29 05:11:50.651949 2026] [security2:error] [pid 11274:tid 11563] [client 93.123.109.228:46654] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/node/backend/.env"] [unique_id "apK-dmbX5DA3XO6e_qRQfwAAAX8"]
[Sat Aug 29 05:11:50.652318 2026] [security2:error] [pid 1321:tid 1539] [client 93.123.109.228:46876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/nodeapi/.env"] [unique_id "apK-dmjCPtor9NZ-byT-dQAABm8"]
[Sat Aug 29 05:11:50.655197 2026] [security2:error] [pid 11274:tid 11472] [client 20.220.204.93:22020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/ckk.php"] [unique_id "apK-dmbX5DA3XO6e_qRQgQAAASY"]
[Sat Aug 29 05:11:50.664590 2026] [security2:error] [pid 1321:tid 1489] [client 158.158.54.35:16358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-content.php"] [unique_id "apK-dmjCPtor9NZ-byT-dgAABj0"]
[Sat Aug 29 05:11:50.674846 2026] [security2:error] [pid 11274:tid 11470] [client 93.123.109.228:46524] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/nodeweb/.env"] [unique_id "apK-dmbX5DA3XO6e_qRQggAAASQ"]
[Sat Aug 29 05:11:50.695193 2026] [security2:error] [pid 11274:tid 11448] [client 40.83.93.50:3773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/install.php"] [unique_id "apK-dmbX5DA3XO6e_qRQiAAAAQ4"]
[Sat Aug 29 05:11:50.696677 2026] [security2:error] [pid 11274:tid 11489] [client 52.139.37.240:21850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "apK-dmbX5DA3XO6e_qRQiQAAATY"]
[Sat Aug 29 05:11:50.697840 2026] [security2:error] [pid 11274:tid 11508] [client 20.151.200.44:27286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/horeg.php"] [unique_id "apK-dmbX5DA3XO6e_qRQigAAAUk"]
[Sat Aug 29 05:11:50.709796 2026] [security2:error] [pid 1321:tid 1502] [client 4.205.62.107:59072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/pouhg.php"] [unique_id "apK-dmjCPtor9NZ-byT-eAAABko"]
[Sat Aug 29 05:11:50.715420 2026] [security2:error] [pid 11274:tid 11520] [client 20.104.104.62:20882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/alfashell.php"] [unique_id "apK-dmbX5DA3XO6e_qRQjQAAAVU"]
[Sat Aug 29 05:11:50.720653 2026] [security2:error] [pid 11274:tid 11554] [client 93.123.109.228:46726] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/old/.env"] [unique_id "apK-dmbX5DA3XO6e_qRQjgAAAXY"]
[Sat Aug 29 05:11:50.749999 2026] [security2:error] [pid 11274:tid 11452] [client 20.151.200.44:63373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/blox.php"] [unique_id "apK-dmbX5DA3XO6e_qRQkwAAARI"]
[Sat Aug 29 05:11:50.758787 2026] [security2:error] [pid 11274:tid 11527] [client 93.123.109.228:46780] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/opt/.env"] [unique_id "apK-dmbX5DA3XO6e_qRQlAAAAVw"]
[Sat Aug 29 05:11:50.759936 2026] [security2:error] [pid 11274:tid 11459] [client 68.155.159.216:62798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK-dmbX5DA3XO6e_qRQlQAAARk"]
[Sat Aug 29 05:11:50.761689 2026] [security2:error] [pid 11274:tid 11507] [client 68.155.159.216:23486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK-dmbX5DA3XO6e_qRQlgAAAUg"]
[Sat Aug 29 05:11:50.764874 2026] [security2:error] [pid 11274:tid 11449] [client 20.220.204.93:59101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/ws66.php"] [unique_id "apK-dmbX5DA3XO6e_qRQmAAAAQ8"]
[Sat Aug 29 05:11:50.785457 2026] [security2:error] [pid 11274:tid 11538] [client 20.104.18.15:37772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/shiny.php"] [unique_id "apK-dmbX5DA3XO6e_qRQngAAAWc"]
[Sat Aug 29 05:11:50.791200 2026] [security2:error] [pid 11274:tid 11516] [client 20.220.204.93:51297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.mossmans.org"] [uri "/R57.php"] [unique_id "apK-dmbX5DA3XO6e_qRQnwAAAVE"]
[Sat Aug 29 05:11:50.794156 2026] [security2:error] [pid 11274:tid 11497] [client 20.104.104.62:34741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "zeeksignin.com"] [uri "/ws79.php"] [unique_id "apK-dmbX5DA3XO6e_qRQoAAAAT4"]
[Sat Aug 29 05:11:50.801321 2026] [security2:error] [pid 11274:tid 11561] [client 20.151.200.44:62926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/secret.php"] [unique_id "apK-dmbX5DA3XO6e_qRQowAAAX0"]
[Sat Aug 29 05:11:50.802396 2026] [security2:error] [pid 1321:tid 1610] [client 20.151.200.44:65207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/x23.php"] [unique_id "apK-dmjCPtor9NZ-byT-fAAABrU"]
[Sat Aug 29 05:11:50.803703 2026] [security2:error] [pid 1321:tid 1601] [client 20.100.175.163:9236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-includes/fonts/admin.php"] [unique_id "apK-dmjCPtor9NZ-byT-fQAABqw"]
[Sat Aug 29 05:11:50.817744 2026] [security2:error] [pid 11274:tid 11544] [client 158.23.147.79:60190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-blog-header.php"] [unique_id "apK-dmbX5DA3XO6e_qRQrgAAAWw"]
[Sat Aug 29 05:11:50.826014 2026] [security2:error] [pid 11274:tid 11523] [client 20.196.209.81:22851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-conflg.php"] [unique_id "apK-dmbX5DA3XO6e_qRQsgAAAVg"]
[Sat Aug 29 05:11:50.832135 2026] [security2:error] [pid 1321:tid 1574] [client 68.155.159.216:21396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apK-dmjCPtor9NZ-byT-fgAABpE"]
[Sat Aug 29 05:11:50.839950 2026] [security2:error] [pid 1321:tid 1602] [client 40.83.93.50:20321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/wp-admin.php"] [unique_id "apK-dmjCPtor9NZ-byT-fwAABq0"]
[Sat Aug 29 05:11:50.854569 2026] [security2:error] [pid 1321:tid 1514] [client 45.148.10.62:48904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "proaider.com"] [uri "/wp-config.php"] [unique_id "apK-dmjCPtor9NZ-byT-gAAABlY"]
[Sat Aug 29 05:11:50.854896 2026] [security2:error] [pid 1321:tid 1519] [client 20.104.104.62:40016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/wp-ana.php"] [unique_id "apK-dmjCPtor9NZ-byT-gQAABls"]
[Sat Aug 29 05:11:50.869804 2026] [security2:error] [pid 11274:tid 11501] [client 20.52.41.200:5121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/u.php"] [unique_id "apK-dmbX5DA3XO6e_qRQuwAAAUI"]
[Sat Aug 29 05:11:50.887638 2026] [security2:error] [pid 11274:tid 11511] [client 20.52.41.200:2834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-content/themes/admin.php"] [unique_id "apK-dmbX5DA3XO6e_qRQvgAAAUw"]
[Sat Aug 29 05:11:50.892708 2026] [security2:error] [pid 11274:tid 11565] [client 52.139.37.240:22484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-dmbX5DA3XO6e_qRQvwAAAYE"]
[Sat Aug 29 05:11:50.894718 2026] [security2:error] [pid 11274:tid 11563] [client 20.220.204.93:59062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/ws68.php"] [unique_id "apK-dmbX5DA3XO6e_qRQwQAAAX8"]
[Sat Aug 29 05:11:50.911982 2026] [security2:error] [pid 1321:tid 1522] [client 20.240.128.207:4884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-good.php"] [unique_id "apK-dmjCPtor9NZ-byT-gwAABl4"]
[Sat Aug 29 05:11:50.944864 2026] [security2:error] [pid 11274:tid 11489] [client 93.123.109.228:46602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/php-info.php"] [unique_id "apK-dmbX5DA3XO6e_qRQygAAATY"]
[Sat Aug 29 05:11:50.961143 2026] [security2:error] [pid 11274:tid 11541] [client 93.123.109.228:46488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/php.php"] [unique_id "apK-dmbX5DA3XO6e_qRQ0wAAAWo"]
[Sat Aug 29 05:11:50.964179 2026] [security2:error] [pid 1321:tid 1518] [client 93.123.109.228:46876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/php_info.php"] [unique_id "apK-dmjCPtor9NZ-byT-igAABlo"]
[Sat Aug 29 05:11:50.964396 2026] [security2:error] [pid 11274:tid 11509] [client 20.104.18.15:37864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/goods.php"] [unique_id "apK-dmbX5DA3XO6e_qRQ1AAAAUo"]
[Sat Aug 29 05:11:50.977888 2026] [security2:error] [pid 1321:tid 1550] [client 93.123.109.228:46684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/phpinfo.php"] [unique_id "apK-dmjCPtor9NZ-byT-iwAABnk"]
[Sat Aug 29 05:11:50.984177 2026] [security2:error] [pid 11274:tid 11385] [remote 160.153.252.100:39160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.252.153.160.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.interfaith.thewaltongroupinc.com"] [uri "/wp-login.php"] [unique_id "apK-dmbX5DA3XO6e_qRQ2AABJ0c"]
[Sat Aug 29 05:11:50.992295 2026] [security2:error] [pid 11274:tid 11559] [client 93.123.109.228:46482] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/portal/.env"] [unique_id "apK-dmbX5DA3XO6e_qRQ3QAAAXs"]
[Sat Aug 29 05:11:50.993721 2026] [security2:error] [pid 11274:tid 11571] [client 40.83.93.50:9029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/flower.php"] [unique_id "apK-dmbX5DA3XO6e_qRQ3gAAAYc"]
[Sat Aug 29 05:11:50.996117 2026] [security2:error] [pid 11274:tid 11564] [client 20.240.128.207:20155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/xda.php"] [unique_id "apK-dmbX5DA3XO6e_qRQ3wAAAYA"]
[Sat Aug 29 05:11:51.015185 2026] [security2:error] [pid 1321:tid 1496] [client 40.83.93.50:20453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/alfa-rex.php"] [unique_id "apK-d2jCPtor9NZ-byT-jQAABkQ"]
[Sat Aug 29 05:11:51.016035 2026] [security2:error] [pid 11274:tid 11561] [client 20.151.200.44:62197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/pro.php"] [unique_id "apK-d2bX5DA3XO6e_qRQ5QAAAX0"]
[Sat Aug 29 05:11:51.029401 2026] [security2:error] [pid 11274:tid 11499] [client 158.158.54.35:15356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/num.php"] [unique_id "apK-d2bX5DA3XO6e_qRQ5wAAAUA"]
[Sat Aug 29 05:11:51.029563 2026] [security2:error] [pid 11274:tid 11545] [client 20.100.175.163:26221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/bi.php"] [unique_id "apK-d2bX5DA3XO6e_qRQ6AAAAW0"]
[Sat Aug 29 05:11:51.034100 2026] [security2:error] [pid 11274:tid 11544] [client 93.123.109.228:46756] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/prod/.env"] [unique_id "apK-d2bX5DA3XO6e_qRQ7AAAAWw"]
[Sat Aug 29 05:11:51.035804 2026] [security2:error] [pid 11274:tid 11566] [client 20.220.204.93:52332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/users.php"] [unique_id "apK-d2bX5DA3XO6e_qRQ7QAAAYI"]
[Sat Aug 29 05:11:51.045298 2026] [security2:error] [pid 11274:tid 11540] [client 158.23.147.79:52341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK-d2bX5DA3XO6e_qRQ8gAAAWk"]
[Sat Aug 29 05:11:51.062188 2026] [security2:error] [pid 1321:tid 1510] [client 20.104.104.62:42061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/secret.php"] [unique_id "apK-d2jCPtor9NZ-byT-jwAABlI"]
[Sat Aug 29 05:11:51.064215 2026] [security2:error] [pid 1321:tid 1515] [client 20.151.200.44:22181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/ws66.php"] [unique_id "apK-d2jCPtor9NZ-byT-kAAABlc"]
[Sat Aug 29 05:11:51.065927 2026] [security2:error] [pid 1321:tid 1492] [client 20.104.104.62:33805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "zeeksignin.com"] [uri "/.info.php"] [unique_id "apK-d2jCPtor9NZ-byT-kQAABkA"]
[Sat Aug 29 05:11:51.087652 2026] [security2:error] [pid 11274:tid 11490] [client 93.123.109.228:46868] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/product/.env"] [unique_id "apK-d2bX5DA3XO6e_qRQ-wAAATc"]
[Sat Aug 29 05:11:51.099219 2026] [security2:error] [pid 11274:tid 11483] [client 20.197.61.180:12897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/access.php"] [unique_id "apK-d2bX5DA3XO6e_qRQ_QAAATA"]
[Sat Aug 29 05:11:51.102273 2026] [security2:error] [pid 11274:tid 11496] [client 20.104.104.62:40213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/av.php"] [unique_id "apK-d2bX5DA3XO6e_qRQ_gAAAT0"]
[Sat Aug 29 05:11:51.102807 2026] [security2:error] [pid 1321:tid 1614] [client 158.23.147.79:24409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/classwithtostring.php"] [unique_id "apK-d2jCPtor9NZ-byT-lgAABrk"]
[Sat Aug 29 05:11:51.113954 2026] [security2:error] [pid 11274:tid 11553] [client 93.123.109.228:46762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/production/.env"] [unique_id "apK-d2bX5DA3XO6e_qRRAAAAAXU"]
[Sat Aug 29 05:11:51.116098 2026] [security2:error] [pid 1321:tid 1598] [client 158.23.147.79:64083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-admin/network/index.php"] [unique_id "apK-d2jCPtor9NZ-byT-lwAABqk"]
[Sat Aug 29 05:11:51.116519 2026] [security2:error] [pid 11274:tid 11492] [client 158.158.54.35:14607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "apK-d2bX5DA3XO6e_qRRAgAAATk"]
[Sat Aug 29 05:11:51.117773 2026] [security2:error] [pid 11274:tid 11546] [client 57.141.14.86:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/cart/"] [unique_id "apK-d2bX5DA3XO6e_qRQ_wAAAW4"]
[Sat Aug 29 05:11:51.120215 2026] [security2:error] [pid 11274:tid 11569] [client 111.235.68.106:20856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK-d2bX5DA3XO6e_qRRBQAAAYU"]
[Sat Aug 29 05:11:51.120315 2026] [security2:error] [pid 11274:tid 11569] [client 111.235.68.106:20856] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK-d2bX5DA3XO6e_qRRBQAAAYU"]
[Sat Aug 29 05:11:51.121182 2026] [security2:error] [pid 1321:tid 1490] [client 20.104.18.15:37792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/alfa.php"] [unique_id "apK-d2jCPtor9NZ-byT-mQAABj4"]
[Sat Aug 29 05:11:51.132311 2026] [security2:error] [pid 1321:tid 1606] [client 93.123.109.228:46866] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/project/.env"] [unique_id "apK-d2jCPtor9NZ-byT-mgAABrE"]
[Sat Aug 29 05:11:51.143199 2026] [security2:error] [pid 11274:tid 11549] [client 4.205.62.107:64230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/xmy.php"] [unique_id "apK-d2bX5DA3XO6e_qRRCQAAAXE"]
[Sat Aug 29 05:11:51.145290 2026] [security2:error] [pid 1321:tid 1593] [client 158.23.147.79:62671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/packed.php"] [unique_id "apK-d2jCPtor9NZ-byT-nAAABqQ"]
[Sat Aug 29 05:11:51.148554 2026] [security2:error] [pid 1321:tid 1508] [client 20.151.200.44:63340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/kcs.php"] [unique_id "apK-d2jCPtor9NZ-byT-nQAABlA"]
[Sat Aug 29 05:11:51.149329 2026] [security2:error] [pid 11274:tid 11512] [client 93.123.109.228:46852] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/public-api/.env"] [unique_id "apK-d2bX5DA3XO6e_qRRCgAAAU0"]
[Sat Aug 29 05:11:51.150500 2026] [security2:error] [pid 11274:tid 11465] [client 4.205.62.107:61647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/admin.php"] [unique_id "apK-d2bX5DA3XO6e_qRRCwAAAR8"]
[Sat Aug 29 05:11:51.159872 2026] [security2:error] [pid 11274:tid 11501] [client 68.155.159.216:38573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-d2bX5DA3XO6e_qRRDQAAAUI"]
[Sat Aug 29 05:11:51.169448 2026] [security2:error] [pid 11274:tid 11511] [client 93.123.109.228:46714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/public/phpinfo.php"] [unique_id "apK-d2bX5DA3XO6e_qRRDgAAAUw"]
[Sat Aug 29 05:11:51.176244 2026] [security2:error] [pid 1321:tid 1577] [client 52.139.37.240:22418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/wp-index.php"] [unique_id "apK-d2jCPtor9NZ-byT-ngAABpQ"]
[Sat Aug 29 05:11:51.181758 2026] [security2:error] [pid 1321:tid 1547] [client 68.155.159.216:56811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/file5.php"] [unique_id "apK-d2jCPtor9NZ-byT-nwAABnY"]
[Sat Aug 29 05:11:51.182409 2026] [security2:error] [pid 11274:tid 11565] [client 93.123.109.228:46654] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/public/.env"] [unique_id "apK-d2bX5DA3XO6e_qRREAAAAYE"]
[Sat Aug 29 05:11:51.183953 2026] [security2:error] [pid 11274:tid 11560] [client 158.23.147.79:64451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/file5.php"] [unique_id "apK-d2bX5DA3XO6e_qRREQAAAXw"]
[Sat Aug 29 05:11:51.190547 2026] [security2:error] [pid 11274:tid 11522] [client 20.104.104.62:52305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/pro.php"] [unique_id "apK-d2bX5DA3XO6e_qRREgAAAVc"]
[Sat Aug 29 05:11:51.206231 2026] [security2:error] [pid 1321:tid 1567] [client 93.123.109.228:46850] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/public_html/.env"] [unique_id "apK-d2jCPtor9NZ-byT-oQAABoo"]
[Sat Aug 29 05:11:51.216477 2026] [security2:error] [pid 11274:tid 11392] [remote 160.153.252.100:39160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.252.153.160.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.interfaith.thewaltongroupinc.com"] [uri "/wp-login.php"] [unique_id "apK-d2bX5DA3XO6e_qRRHwABR04"], referer: https://www.interfaith.thewaltongroupinc.com/wp-login.php
[Sat Aug 29 05:11:51.220617 2026] [security2:error] [pid 11274:tid 11489] [client 20.104.104.62:48672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/gaje.php"] [unique_id "apK-d2bX5DA3XO6e_qRRIQAAATY"]
[Sat Aug 29 05:11:51.221383 2026] [security2:error] [pid 1321:tid 1613] [client 20.196.209.81:17765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-content.php"] [unique_id "apK-d2jCPtor9NZ-byT-owAABrg"]
[Sat Aug 29 05:11:51.221666 2026] [security2:error] [pid 11274:tid 11515] [client 40.83.93.50:3721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/colour.php"] [unique_id "apK-d2bX5DA3XO6e_qRRIgAAAVA"]
[Sat Aug 29 05:11:51.233143 2026] [security2:error] [pid 11274:tid 11332] [remote 216.73.217.8:15439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 8.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo-store.sortthru.com"] [uri "/signs-and-displays/"] [unique_id "apK-d2bX5DA3XO6e_qRRJQABhBM"]
[Sat Aug 29 05:11:51.234226 2026] [security2:error] [pid 11274:tid 11449] [client 43.173.177.153:56780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 153.177.173.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewforum.php"] [unique_id "apK-d2bX5DA3XO6e_qRRIwAAAQ8"]
[Sat Aug 29 05:11:51.234523 2026] [security2:error] [pid 11274:tid 11570] [client 93.123.109.228:46524] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/qa/.env"] [unique_id "apK-d2bX5DA3XO6e_qRRJAAAAYY"]
[Sat Aug 29 05:11:51.255674 2026] [security2:error] [pid 1321:tid 1561] [client 43.173.176.245:44804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 245.176.173.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewtopic.php"] [unique_id "apK-d2jCPtor9NZ-byT-ogAABoQ"]
[Sat Aug 29 05:11:51.261823 2026] [security2:error] [pid 11274:tid 11503] [client 20.104.104.62:33906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "zeeksignin.com"] [uri "/abc.php"] [unique_id "apK-d2bX5DA3XO6e_qRRKQAAAUQ"]
[Sat Aug 29 05:11:51.261859 2026] [security2:error] [pid 1321:tid 1544] [client 20.104.18.15:37866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/33.php"] [unique_id "apK-d2jCPtor9NZ-byT-pAAABnQ"]
[Sat Aug 29 05:11:51.268516 2026] [security2:error] [pid 11274:tid 11508] [client 20.220.204.93:59095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/bzjdlofz.php"] [unique_id "apK-d2bX5DA3XO6e_qRRLgAAAUk"]
[Sat Aug 29 05:11:51.270433 2026] [security2:error] [pid 1321:tid 1502] [client 4.205.62.107:63025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/pinfo.php"] [unique_id "apK-d2jCPtor9NZ-byT-pQAABko"]
[Sat Aug 29 05:11:51.271114 2026] [security2:error] [pid 11274:tid 11526] [client 103.214.23.106:8715] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "skarchfrutale.mx"] [uri "/vendor/laravel-filemanager/css/lfm.css"] [unique_id "apK-d2bX5DA3XO6e_qRRLwAAAVs"]
[Sat Aug 29 05:11:51.271367 2026] [security2:error] [pid 1321:tid 1594] [client 20.151.200.44:61580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/999.php"] [unique_id "apK-d2jCPtor9NZ-byT-pgAABqU"]
[Sat Aug 29 05:11:51.276343 2026] [security2:error] [pid 11274:tid 11555] [client 103.214.23.106:8711] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "skarchfrutale.mx"] [uri "/vendor/laravel-filemanager/css/lfm.css"] [unique_id "apK-d2bX5DA3XO6e_qRRMAAAAXc"]
[Sat Aug 29 05:11:51.278214 2026] [security2:error] [pid 11274:tid 11485] [client 43.173.181.140:42352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 140.181.173.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewtopic.php"] [unique_id "apK-d2bX5DA3XO6e_qRRLAAAATI"]
[Sat Aug 29 05:11:51.305559 2026] [security2:error] [pid 11274:tid 11538] [client 43.173.175.106:48030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.175.173.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewforum.php"] [unique_id "apK-d2bX5DA3XO6e_qRRLQAAAWc"]
[Sat Aug 29 05:11:51.314102 2026] [security2:error] [pid 1321:tid 1610] [client 4.205.62.107:6509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/avim.php"] [unique_id "apK-d2jCPtor9NZ-byT-qgAABrU"]
[Sat Aug 29 05:11:51.316519 2026] [security2:error] [pid 11274:tid 11450] [client 20.52.41.200:4388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/r.php"] [unique_id "apK-d2bX5DA3XO6e_qRRPgAAARA"]
[Sat Aug 29 05:11:51.323441 2026] [security2:error] [pid 11274:tid 11505] [client 20.151.200.44:65335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/wsz.php"] [unique_id "apK-d2bX5DA3XO6e_qRRQwAAAUY"]
[Sat Aug 29 05:11:51.324564 2026] [security2:error] [pid 1321:tid 1601] [client 20.104.104.62:40019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/999.php"] [unique_id "apK-d2jCPtor9NZ-byT-qwAABqw"]
[Sat Aug 29 05:11:51.327675 2026] [security2:error] [pid 1321:tid 1604] [client 20.52.41.200:2179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-admin/css/admin.php"] [unique_id "apK-d2jCPtor9NZ-byT-rAAABq8"]
[Sat Aug 29 05:11:51.347697 2026] [security2:error] [pid 1321:tid 1565] [client 20.100.175.163:9279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/m.php"] [unique_id "apK-d2jCPtor9NZ-byT-rQAABog"]
[Sat Aug 29 05:11:51.374436 2026] [security2:error] [pid 11274:tid 11482] [client 52.139.37.240:21867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/ww2.php"] [unique_id "apK-d2bX5DA3XO6e_qRRTwAAAS8"]
[Sat Aug 29 05:11:51.393884 2026] [security2:error] [pid 11274:tid 11488] [client 20.104.49.130:53724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "connectdotz.com"] [uri "/av.php"] [unique_id "apK-d2bX5DA3XO6e_qRRUQAAATU"]
[Sat Aug 29 05:11:51.403230 2026] [security2:error] [pid 11274:tid 11481] [client 20.104.18.15:37786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/133.php"] [unique_id "apK-d2bX5DA3XO6e_qRRVQAAAS4"]
[Sat Aug 29 05:11:51.403432 2026] [security2:error] [pid 11274:tid 11376] [remote 93.123.109.228:42790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/.env.php"] [unique_id "apK-d2bX5DA3XO6e_qRRVAABFD4"]
[Sat Aug 29 05:11:51.413433 2026] [security2:error] [pid 11274:tid 11520] [client 20.240.128.207:7523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "apK-d2bX5DA3XO6e_qRRVwAAAVU"]
[Sat Aug 29 05:11:51.417177 2026] [security2:error] [pid 11274:tid 11536] [client 20.220.204.93:59015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/selesai.php"] [unique_id "apK-d2bX5DA3XO6e_qRRWQAAAWU"]
[Sat Aug 29 05:11:51.456080 2026] [security2:error] [pid 11274:tid 11492] [client 20.104.104.62:33910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "zeeksignin.com"] [uri "/admin/function.php"] [unique_id "apK-d2bX5DA3XO6e_qRRYAAAATk"]
[Sat Aug 29 05:11:51.496672 2026] [security2:error] [pid 1321:tid 1581] [client 20.151.200.44:63400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/msy.php"] [unique_id "apK-d2jCPtor9NZ-byT-sgAABpg"]
[Sat Aug 29 05:11:51.502096 2026] [security2:error] [pid 11274:tid 11559] [client 45.148.10.62:48912] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "proaider.com"] [uri "/wp-config.php.old"] [unique_id "apK-d2bX5DA3XO6e_qRRbQAAAXs"]
[Sat Aug 29 05:11:51.503278 2026] [security2:error] [pid 11274:tid 11540] [client 20.240.128.207:18234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/theme.php"] [unique_id "apK-d2bX5DA3XO6e_qRRbgAAAWk"]
[Sat Aug 29 05:11:51.507292 2026] [security2:error] [pid 1321:tid 1600] [client 20.104.104.62:64751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/upl.php"] [unique_id "apK-d2jCPtor9NZ-byT-tAAABqs"]
[Sat Aug 29 05:11:51.516602 2026] [security2:error] [pid 1321:tid 1582] [client 20.104.104.62:52290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/sef.php"] [unique_id "apK-d2jCPtor9NZ-byT-tgAABpk"]
[Sat Aug 29 05:11:51.518512 2026] [security2:error] [pid 11274:tid 11468] [client 43.173.177.115:33108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 115.177.173.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewtopic.php"] [unique_id "apK-d2bX5DA3XO6e_qRRcQAAASI"]
[Sat Aug 29 05:11:51.519255 2026] [security2:error] [pid 11274:tid 11464] [client 68.155.159.216:1930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/x.php"] [unique_id "apK-d2bX5DA3XO6e_qRRdQAAAR4"]
[Sat Aug 29 05:11:51.524080 2026] [security2:error] [pid 1321:tid 1514] [client 20.100.175.163:15746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/cc.php"] [unique_id "apK-d2jCPtor9NZ-byT-uAAABlY"]
[Sat Aug 29 05:11:51.524080 2026] [security2:error] [pid 11274:tid 11483] [client 40.83.93.50:9085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/meta.php"] [unique_id "apK-d2bX5DA3XO6e_qRRdgAAATA"]
[Sat Aug 29 05:11:51.535321 2026] [security2:error] [pid 1321:tid 1615] [client 4.205.62.107:59118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/w.php"] [unique_id "apK-d2jCPtor9NZ-byT-uQAABro"]
[Sat Aug 29 05:11:51.546858 2026] [security2:error] [pid 11274:tid 11444] [client 213.202.253.4:49298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "timportlock.net"] [uri "/wp-content/schallfuns.php"] [unique_id "apK-d2bX5DA3XO6e_qRRfwAAAQo"], referer: www.google.com
[Sat Aug 29 05:11:51.549272 2026] [security2:error] [pid 11274:tid 11455] [client 40.83.93.50:4016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/wp-configs.php"] [unique_id "apK-d2bX5DA3XO6e_qRRgAAAARU"]
[Sat Aug 29 05:11:51.552485 2026] [security2:error] [pid 11274:tid 11504] [client 158.158.54.35:19342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/css/wp-login.php"] [unique_id "apK-d2bX5DA3XO6e_qRRhQAAAUU"]
[Sat Aug 29 05:11:51.561672 2026] [security2:error] [pid 1321:tid 1596] [client 40.83.93.50:14013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/cookie.php"] [unique_id "apK-d2jCPtor9NZ-byT-uwAABqc"]
[Sat Aug 29 05:11:51.573937 2026] [security2:error] [pid 1321:tid 1517] [client 52.139.37.240:21876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/7logs.php"] [unique_id "apK-d2jCPtor9NZ-byT-vAAABlk"]
[Sat Aug 29 05:11:51.577165 2026] [security2:error] [pid 11274:tid 11570] [client 20.104.18.15:37820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/sym.php"] [unique_id "apK-d2bX5DA3XO6e_qRRjgAAAYY"]
[Sat Aug 29 05:11:51.590731 2026] [http2:warn] [pid 1321:tid 1572] [client 57.141.14.63:49242] h2_stream(1321-113-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:11:51.594923 2026] [security2:error] [pid 11274:tid 11554] [client 93.123.109.228:46726] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/s3/.env.bak"] [unique_id "apK-d2bX5DA3XO6e_qRRkgAAAXY"]
[Sat Aug 29 05:11:51.626740 2026] [security2:error] [pid 11274:tid 11401] [remote 93.123.109.228:42716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/config.php"] [unique_id "apK-d2bX5DA3XO6e_qRRlgABc1c"]
[Sat Aug 29 05:11:51.631621 2026] [security2:error] [pid 1321:tid 1560] [client 158.23.147.79:7118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK-d2jCPtor9NZ-byT-vgAABoM"]
[Sat Aug 29 05:11:51.660110 2026] [security2:error] [pid 11274:tid 11541] [client 20.220.204.93:59099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/shlo.php"] [unique_id "apK-d2bX5DA3XO6e_qRRngAAAWo"]
[Sat Aug 29 05:11:51.706109 2026] [security2:error] [pid 1321:tid 1506] [client 20.104.104.62:57452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/admin123.php"] [unique_id "apK-d2jCPtor9NZ-byT-wQAABk4"]
[Sat Aug 29 05:11:51.708221 2026] [security2:error] [pid 11274:tid 11450] [client 68.155.159.216:14250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK-d2bX5DA3XO6e_qRRpwAAARA"]
[Sat Aug 29 05:11:51.712970 2026] [security2:error] [pid 11274:tid 11470] [client 40.83.93.50:17574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/OK.php"] [unique_id "apK-d2bX5DA3XO6e_qRRqQAAASQ"]
[Sat Aug 29 05:11:51.724281 2026] [security2:error] [pid 1321:tid 1584] [client 20.104.104.62:34695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "zeeksignin.com"] [uri "/ak.php"] [unique_id "apK-d2jCPtor9NZ-byT-wgAABps"]
[Sat Aug 29 05:11:51.724637 2026] [security2:error] [pid 11274:tid 11544] [client 93.123.109.228:46840] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/server/.env"] [unique_id "apK-d2bX5DA3XO6e_qRRrAAAAWw"]
[Sat Aug 29 05:11:51.725899 2026] [security2:error] [pid 1321:tid 1563] [client 93.123.109.228:46854] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/server/api/.env"] [unique_id "apK-d2jCPtor9NZ-byT-wwAABoY"]
[Sat Aug 29 05:11:51.732679 2026] [security2:error] [pid 11274:tid 11466] [client 158.23.147.79:14165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/cgi-bin/index.php"] [unique_id "apK-d2bX5DA3XO6e_qRRrQAAASA"]
[Sat Aug 29 05:11:51.746096 2026] [security2:error] [pid 11274:tid 11561] [client 20.104.18.15:37798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/8.php"] [unique_id "apK-d2bX5DA3XO6e_qRRrgAAAX0"]
[Sat Aug 29 05:11:51.749481 2026] [security2:error] [pid 11274:tid 11545] [client 93.123.109.228:46868] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/server/backend/.env"] [unique_id "apK-d2bX5DA3XO6e_qRRsAAAAW0"]
[Sat Aug 29 05:11:51.766209 2026] [security2:error] [pid 11274:tid 11493] [client 20.196.209.81:22879] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.lmdogs.com"] [uri "/wp-content/1.php"] [unique_id "apK-d2bX5DA3XO6e_qRRswAAATo"]
[Sat Aug 29 05:11:51.766316 2026] [security2:error] [pid 11274:tid 11493] [client 20.196.209.81:22879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-content/1.php"] [unique_id "apK-d2bX5DA3XO6e_qRRswAAATo"]
[Sat Aug 29 05:11:51.767962 2026] [security2:error] [pid 11274:tid 11495] [client 20.52.41.200:5141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-blog.php"] [unique_id "apK-d2bX5DA3XO6e_qRRtAAAATw"]
[Sat Aug 29 05:11:51.773531 2026] [security2:error] [pid 1321:tid 1496] [client 20.52.41.200:2644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/adminfuns.php"] [unique_id "apK-d2jCPtor9NZ-byT-xQAABkQ"]
[Sat Aug 29 05:11:51.774395 2026] [security2:error] [pid 1321:tid 1526] [client 52.139.37.240:21878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/ac.php"] [unique_id "apK-d2jCPtor9NZ-byT-xgAABmI"]
[Sat Aug 29 05:11:51.778011 2026] [security2:error] [pid 11274:tid 11411] [remote 93.123.109.228:42716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/config/aws.php"] [unique_id "apK-d2bX5DA3XO6e_qRRuAABdWE"]
[Sat Aug 29 05:11:51.798816 2026] [security2:error] [pid 11274:tid 11549] [client 158.158.54.35:15588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-content/upgrade/index.php"] [unique_id "apK-d2bX5DA3XO6e_qRRvAAAAXE"]
[Sat Aug 29 05:11:51.812614 2026] [security2:error] [pid 11274:tid 11479] [client 158.23.147.79:49805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK-d2bX5DA3XO6e_qRRwAAAASw"]
[Sat Aug 29 05:11:51.837196 2026] [security2:error] [pid 1321:tid 1576] [client 20.100.175.163:9256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "apK-d2jCPtor9NZ-byT-ygAABpM"]
[Sat Aug 29 05:11:51.844972 2026] [security2:error] [pid 11274:tid 11494] [client 20.197.61.180:1536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/classsmtps.php"] [unique_id "apK-d2bX5DA3XO6e_qRRywAAATs"]
[Sat Aug 29 05:11:51.848599 2026] [security2:error] [pid 11274:tid 11494] [client 20.104.49.130:60784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/wp-blogs.php"] [unique_id "apK-d2bX5DA3XO6e_qRRzgAAATs"]
[Sat Aug 29 05:11:51.854627 2026] [security2:error] [pid 11274:tid 11454] [client 4.205.62.107:59105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/phpversion.php"] [unique_id "apK-d2bX5DA3XO6e_qRR0AAAARQ"]
[Sat Aug 29 05:11:51.855273 2026] [security2:error] [pid 11274:tid 11464] [client 20.104.104.62:64757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/gelay.php"] [unique_id "apK-d2bX5DA3XO6e_qRR0QAAAR4"]
[Sat Aug 29 05:11:51.866081 2026] [security2:error] [pid 11274:tid 11422] [remote 93.123.109.228:42716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/config/config.php"] [unique_id "apK-d2bX5DA3XO6e_qRR0gABH2w"]
[Sat Aug 29 05:11:51.872428 2026] [security2:error] [pid 1321:tid 1591] [client 20.151.200.44:63732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/Cok.php"] [unique_id "apK-d2jCPtor9NZ-byT-ywAABqI"]
[Sat Aug 29 05:11:51.891471 2026] [security2:error] [pid 11274:tid 11489] [client 20.151.200.44:63992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/siln.php"] [unique_id "apK-d2bX5DA3XO6e_qRR1gAAATY"]
[Sat Aug 29 05:11:51.894484 2026] [security2:error] [pid 11274:tid 11342] [remote 93.123.109.228:42716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/config/config.inc.php"] [unique_id "apK-d2bX5DA3XO6e_qRR1wABHx0"]
[Sat Aug 29 05:11:51.898476 2026] [security2:error] [pid 11274:tid 11471] [client 20.240.128.207:5227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/abcd.php"] [unique_id "apK-d2bX5DA3XO6e_qRR2QAAASU"]
[Sat Aug 29 05:11:51.916473 2026] [security2:error] [pid 11274:tid 11523] [client 93.123.109.228:46840] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/service/.env"] [unique_id "apK-d2bX5DA3XO6e_qRR3wAAAVg"]
[Sat Aug 29 05:11:51.918131 2026] [security2:error] [pid 11274:tid 11540] [client 20.104.104.62:33918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "zeeksignin.com"] [uri "/alfa-rex.php7"] [unique_id "apK-d2bX5DA3XO6e_qRR4AAAAWk"]
[Sat Aug 29 05:11:51.918625 2026] [security2:error] [pid 1321:tid 1577] [client 20.48.250.41:24526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/0x.php"] [unique_id "apK-d2jCPtor9NZ-byT-zgAABpQ"]
[Sat Aug 29 05:11:51.924875 2026] [security2:error] [pid 1321:tid 1547] [client 158.23.147.79:62767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK-d2jCPtor9NZ-byT-zwAABnY"]
[Sat Aug 29 05:11:51.925695 2026] [security2:error] [pid 1321:tid 1549] [client 20.48.250.41:25581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/ak.php"] [unique_id "apK-d2jCPtor9NZ-byT-0AAABng"]
[Sat Aug 29 05:11:51.928294 2026] [security2:error] [pid 11274:tid 11324] [remote 93.123.109.228:42716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/config/env.php"] [unique_id "apK-d2bX5DA3XO6e_qRR4wABHws"]
[Sat Aug 29 05:11:51.937009 2026] [security2:error] [pid 1321:tid 1567] [client 20.104.18.15:37821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/goods.php"] [unique_id "apK-d2jCPtor9NZ-byT-0QAABoo"]
[Sat Aug 29 05:11:51.937443 2026] [security2:error] [pid 11274:tid 11513] [client 93.123.109.228:46780] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/services/.env"] [unique_id "apK-d2bX5DA3XO6e_qRR4gAAAU4"]
[Sat Aug 29 05:11:51.942230 2026] [security2:error] [pid 1321:tid 1552] [client 68.155.159.216:21488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK-d2jCPtor9NZ-byT-0gAABns"]
[Sat Aug 29 05:11:51.964572 2026] [security2:error] [pid 11274:tid 11475] [client 68.155.159.216:23458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-admin/network/index.php"] [unique_id "apK-d2bX5DA3XO6e_qRR6wAAASk"]
[Sat Aug 29 05:11:51.971232 2026] [security2:error] [pid 11274:tid 11455] [client 52.139.37.240:22430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/ctex1.php"] [unique_id "apK-d2bX5DA3XO6e_qRR7AAAARU"]
[Sat Aug 29 05:11:51.980949 2026] [security2:error] [pid 1321:tid 1555] [client 20.48.250.41:36386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/bootstrap.php"] [unique_id "apK-d2jCPtor9NZ-byT-1QAABn4"]
[Sat Aug 29 05:11:51.996789 2026] [security2:error] [pid 11274:tid 11515] [client 93.123.109.228:46772] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/shop/.env"] [unique_id "apK-d2bX5DA3XO6e_qRR8wAAAVA"]
[Sat Aug 29 05:11:51.999156 2026] [security2:error] [pid 11274:tid 11559] [client 158.158.54.35:19339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/images/index.php"] [unique_id "apK-d2bX5DA3XO6e_qRR9AAAAXs"]
[Sat Aug 29 05:11:52.022122 2026] [security2:error] [pid 11274:tid 11468] [client 20.100.175.163:20189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/files/index.php"] [unique_id "apK-eGbX5DA3XO6e_qRR9wAAASI"]
[Sat Aug 29 05:11:52.026431 2026] [security2:error] [pid 11274:tid 11521] [client 20.240.128.207:7813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/classwithtostring.php"] [unique_id "apK-eGbX5DA3XO6e_qRR-AAAAVY"]
[Sat Aug 29 05:11:52.027105 2026] [security2:error] [pid 11274:tid 11552] [client 40.83.93.50:6678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/essexec.php"] [unique_id "apK-eGbX5DA3XO6e_qRR-QAAAXQ"]
[Sat Aug 29 05:11:52.032915 2026] [security2:error] [pid 11274:tid 11530] [client 40.83.93.50:9030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/randkeyword.php"] [unique_id "apK-eGbX5DA3XO6e_qRR-gAAAV8"]
[Sat Aug 29 05:11:52.038674 2026] [security2:error] [pid 11274:tid 11503] [client 20.220.204.93:59044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/asax.php"] [unique_id "apK-eGbX5DA3XO6e_qRR_AAAAUQ"]
[Sat Aug 29 05:11:52.040132 2026] [security2:error] [pid 11274:tid 11392] [remote 93.123.109.228:42716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/config/module.config.php"] [unique_id "apK-eGbX5DA3XO6e_qRR_QABSE4"]
[Sat Aug 29 05:11:52.044934 2026] [security2:error] [pid 11274:tid 11508] [client 93.123.109.228:46654] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/shared/.env"] [unique_id "apK-eGbX5DA3XO6e_qRR_gAAAUk"]
[Sat Aug 29 05:11:52.065796 2026] [security2:error] [pid 11274:tid 11338] [remote 93.123.109.228:42716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/config/nexmo.php"] [unique_id "apK-eGbX5DA3XO6e_qRSAAABdxk"]
[Sat Aug 29 05:11:52.073723 2026] [security2:error] [pid 11274:tid 11485] [client 20.48.250.41:24539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/66.php"] [unique_id "apK-eGbX5DA3XO6e_qRSAQAAATI"]
[Sat Aug 29 05:11:52.078971 2026] [security2:error] [pid 1321:tid 1501] [client 40.83.93.50:14961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/NewFile.php"] [unique_id "apK-eGjCPtor9NZ-byT-2QAABkk"]
[Sat Aug 29 05:11:52.079988 2026] [security2:error] [pid 1321:tid 1601] [client 20.104.18.15:37868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/ah.php"] [unique_id "apK-eGjCPtor9NZ-byT-2gAABqw"]
[Sat Aug 29 05:11:52.109284 2026] [security2:error] [pid 11274:tid 11459] [client 20.104.104.62:34728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "zeeksignin.com"] [uri "/alfa.php"] [unique_id "apK-eGbX5DA3XO6e_qRSDAAAARk"]
[Sat Aug 29 05:11:52.111639 2026] [security2:error] [pid 11274:tid 11433] [remote 93.123.109.228:42716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/config/stripe.php"] [unique_id "apK-eGbX5DA3XO6e_qRSDgABMnY"]
[Sat Aug 29 05:11:52.112098 2026] [security2:error] [pid 1321:tid 1590] [client 45.148.10.62:48922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "proaider.com"] [uri "/config.php"] [unique_id "apK-eGjCPtor9NZ-byT-3AAABqE"]
[Sat Aug 29 05:11:52.114982 2026] [security2:error] [pid 1321:tid 1590] [client 20.48.250.41:42929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/zu.php"] [unique_id "apK-eGjCPtor9NZ-byT-3QAABqE"]
[Sat Aug 29 05:11:52.116410 2026] [security2:error] [pid 11274:tid 11499] [client 20.104.104.62:42104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/7h.php"] [unique_id "apK-eGbX5DA3XO6e_qRSEAAAAUA"]
[Sat Aug 29 05:11:52.132569 2026] [security2:error] [pid 1321:tid 1592] [client 20.48.250.41:25491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/lib.php"] [unique_id "apK-eGjCPtor9NZ-byT-3gAABqM"]
[Sat Aug 29 05:11:52.159390 2026] [security2:error] [pid 11274:tid 11551] [client 158.23.147.79:28064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK-eGbX5DA3XO6e_qRSGQAAAXM"]
[Sat Aug 29 05:11:52.161051 2026] [security2:error] [pid 11274:tid 11496] [client 93.123.109.228:46840] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/src/.env"] [unique_id "apK-eGbX5DA3XO6e_qRSGgAAAT0"]
[Sat Aug 29 05:11:52.164826 2026] [security2:error] [pid 1321:tid 1543] [client 20.151.200.44:55616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/bgymj.php"] [unique_id "apK-eGjCPtor9NZ-byT-4AAABnM"]
[Sat Aug 29 05:11:52.165064 2026] [security2:error] [pid 11274:tid 11450] [client 52.139.37.240:21855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/defaults.php"] [unique_id "apK-eGbX5DA3XO6e_qRSGwAAARA"]
[Sat Aug 29 05:11:52.171311 2026] [security2:error] [pid 11274:tid 11452] [client 20.196.209.81:20106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-content/about.php"] [unique_id "apK-eGbX5DA3XO6e_qRSIAAAARI"]
[Sat Aug 29 05:11:52.179057 2026] [security2:error] [pid 1321:tid 1556] [client 20.220.204.93:59062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/fetch.php"] [unique_id "apK-eGjCPtor9NZ-byT-4gAABn8"]
[Sat Aug 29 05:11:52.205169 2026] [security2:error] [pid 11274:tid 11477] [client 40.83.93.50:9987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ourpersonalserendipity.com"] [uri "/aaa.php"] [unique_id "apK-eGbX5DA3XO6e_qRSLQAAASs"]
[Sat Aug 29 05:11:52.213860 2026] [security2:error] [pid 1321:tid 1553] [client 20.104.104.62:20703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/darkshell.php"] [unique_id "apK-eGjCPtor9NZ-byT-5QAABnw"]
[Sat Aug 29 05:11:52.215436 2026] [security2:error] [pid 1321:tid 1610] [client 35.205.163.103:49550] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "67.20.76.220"] [uri "/"] [unique_id "apK-eGjCPtor9NZ-byT-5gAABrU"]
[Sat Aug 29 05:11:52.225447 2026] [security2:error] [pid 1321:tid 1507] [client 158.23.147.79:62724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK-eGjCPtor9NZ-byT-5wAABk8"]
[Sat Aug 29 05:11:52.226208 2026] [security2:error] [pid 11274:tid 11516] [client 20.52.41.200:2209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/goods.php"] [unique_id "apK-eGbX5DA3XO6e_qRSLgAAAVE"]
[Sat Aug 29 05:11:52.226862 2026] [security2:error] [pid 1321:tid 1516] [client 20.48.250.41:24548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/f35.php"] [unique_id "apK-eGjCPtor9NZ-byT-6AAABlg"]
[Sat Aug 29 05:11:52.228045 2026] [security2:error] [pid 11274:tid 11527] [client 20.52.41.200:5131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/xxx.php"] [unique_id "apK-eGbX5DA3XO6e_qRSLwAAAVw"]
[Sat Aug 29 05:11:52.230348 2026] [security2:error] [pid 11274:tid 11479] [client 93.123.109.228:46772] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/srv/.env"] [unique_id "apK-eGbX5DA3XO6e_qRSMAAAASw"]
[Sat Aug 29 05:11:52.235537 2026] [security2:error] [pid 1321:tid 1581] [client 158.23.147.79:24417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/install.php"] [unique_id "apK-eGjCPtor9NZ-byT-6gAABpg"]
[Sat Aug 29 05:11:52.246644 2026] [security2:error] [pid 11274:tid 11571] [client 158.158.54.35:28869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "apK-eGbX5DA3XO6e_qRSNgAAAYc"]
[Sat Aug 29 05:11:52.252722 2026] [security2:error] [pid 1321:tid 1582] [client 20.48.250.41:36111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/export.php"] [unique_id "apK-eGjCPtor9NZ-byT-6wAABpk"]
[Sat Aug 29 05:11:52.260372 2026] [security2:error] [pid 1321:tid 1514] [client 20.48.250.41:49538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/lanka.php"] [unique_id "apK-eGjCPtor9NZ-byT-7AAABlY"]
[Sat Aug 29 05:11:52.264369 2026] [security2:error] [pid 1321:tid 1596] [client 68.155.159.216:38670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/content.php"] [unique_id "apK-eGjCPtor9NZ-byT-7QAABqc"]
[Sat Aug 29 05:11:52.272221 2026] [security2:error] [pid 11274:tid 11464] [client 20.104.104.62:52283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/wp-gzone.php"] [unique_id "apK-eGbX5DA3XO6e_qRSOwAAAR4"]
[Sat Aug 29 05:11:52.273656 2026] [security2:error] [pid 11274:tid 11483] [client 20.104.18.15:37841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/ws55.php"] [unique_id "apK-eGbX5DA3XO6e_qRSPAAAATA"]
[Sat Aug 29 05:11:52.277170 2026] [security2:error] [pid 11274:tid 11489] [client 93.123.109.228:46852] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/stage/.env"] [unique_id "apK-eGbX5DA3XO6e_qRSPQAAATY"]
[Sat Aug 29 05:11:52.281195 2026] [security2:error] [pid 11274:tid 11444] [client 4.205.62.107:65018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/ms-edit.php"] [unique_id "apK-eGbX5DA3XO6e_qRSPgAAAQo"]
[Sat Aug 29 05:11:52.284399 2026] [security2:error] [pid 11274:tid 11471] [client 93.123.109.228:46780] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/staging/.env"] [unique_id "apK-eGbX5DA3XO6e_qRSPwAAASU"]
[Sat Aug 29 05:11:52.287171 2026] [security2:error] [pid 1321:tid 1499] [client 158.23.147.79:64499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/file88.php"] [unique_id "apK-eGjCPtor9NZ-byT-7gAABkc"]
[Sat Aug 29 05:11:52.288316 2026] [security2:error] [pid 11274:tid 11514] [client 68.155.159.216:56706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/file88.php"] [unique_id "apK-eGbX5DA3XO6e_qRSQAAAAU8"]
[Sat Aug 29 05:11:52.289079 2026] [security2:error] [pid 11274:tid 11522] [client 158.23.147.79:63827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-content/packed.php"] [unique_id "apK-eGbX5DA3XO6e_qRSQQAAAVc"]
[Sat Aug 29 05:11:52.291835 2026] [security2:error] [pid 11274:tid 11449] [client 74.7.175.147:49502] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "oncesocial.com"] [uri "/robots.txt"] [unique_id "apK-eGbX5DA3XO6e_qRSQgAAAQ8"]
[Sat Aug 29 05:11:52.298438 2026] [security2:error] [pid 11274:tid 11494] [client 20.104.104.62:34704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "zeeksignin.com"] [uri "/an.php"] [unique_id "apK-eGbX5DA3XO6e_qRSRQAAATs"]
[Sat Aug 29 05:11:52.306743 2026] [security2:error] [pid 11274:tid 11526] [client 60.243.207.176:63074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK-eGbX5DA3XO6e_qRSRAAAAVs"]
[Sat Aug 29 05:11:52.306889 2026] [security2:error] [pid 11274:tid 11526] [client 60.243.207.176:63074] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK-eGbX5DA3XO6e_qRSRAAAAVs"]
[Sat Aug 29 05:11:52.309307 2026] [security2:error] [pid 1321:tid 1612] [client 20.48.250.41:25475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/wp-style.php"] [unique_id "apK-eGjCPtor9NZ-byT-7wAABrc"]
[Sat Aug 29 05:11:52.310740 2026] [security2:error] [pid 11274:tid 11570] [client 20.220.204.93:59047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/vx.php"] [unique_id "apK-eGbX5DA3XO6e_qRSRwAAAYY"]
[Sat Aug 29 05:11:52.313513 2026] [security2:error] [pid 1321:tid 1498] [client 4.205.62.107:63907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/png.php"] [unique_id "apK-eGjCPtor9NZ-byT-8AAABkY"]
[Sat Aug 29 05:11:52.346037 2026] [security2:error] [pid 1321:tid 1559] [client 20.100.175.163:25153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/222.php"] [unique_id "apK-eGjCPtor9NZ-byT-8wAABoI"]
[Sat Aug 29 05:11:52.360113 2026] [security2:error] [pid 1321:tid 1548] [client 52.139.37.240:21869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/domains.php"] [unique_id "apK-eGjCPtor9NZ-byT-9AAABnc"]
[Sat Aug 29 05:11:52.382567 2026] [security2:error] [pid 11274:tid 11507] [client 93.123.109.228:46726] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/stg/.env"] [unique_id "apK-eGbX5DA3XO6e_qRSUwAAAUg"]
[Sat Aug 29 05:11:52.399319 2026] [security2:error] [pid 11274:tid 11445] [client 20.240.128.207:8184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-access.php"] [unique_id "apK-eGbX5DA3XO6e_qRSVwAAAQs"]
[Sat Aug 29 05:11:52.405687 2026] [security2:error] [pid 1321:tid 1490] [client 20.48.250.41:36106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/gk.php"] [unique_id "apK-eGjCPtor9NZ-byT-9QAABj4"]
[Sat Aug 29 05:11:52.409082 2026] [security2:error] [pid 11274:tid 11509] [client 20.151.200.44:21810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/X7T6.php"] [unique_id "apK-eGbX5DA3XO6e_qRSWQAAAUo"]
[Sat Aug 29 05:11:52.411307 2026] [security2:error] [pid 11274:tid 11486] [client 4.205.62.107:61053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/X57.php"] [unique_id "apK-eGbX5DA3XO6e_qRSWgAAATM"]
[Sat Aug 29 05:11:52.412655 2026] [security2:error] [pid 1321:tid 1526] [client 20.151.200.44:27148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/basic.php"] [unique_id "apK-eGjCPtor9NZ-byT-9gAABmI"]
[Sat Aug 29 05:11:52.414561 2026] [security2:error] [pid 11274:tid 11498] [client 20.48.250.41:49663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/gettest.php"] [unique_id "apK-eGbX5DA3XO6e_qRSWwAAAT8"]
[Sat Aug 29 05:11:52.415314 2026] [security2:error] [pid 11274:tid 11538] [client 68.155.159.216:49138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/makeasmtp.php"] [unique_id "apK-eGbX5DA3XO6e_qRSXQAAAWc"]
[Sat Aug 29 05:11:52.422616 2026] [security2:error] [pid 1321:tid 1584] [client 74.7.175.147:51558] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "oncesocial.com"] [uri "/robots.txt"] [unique_id "apK-eGjCPtor9NZ-byT--AAABps"], referer: http://oncesocial.com/robots.txt
[Sat Aug 29 05:11:52.426686 2026] [security2:error] [pid 1321:tid 1576] [client 93.123.109.228:46850] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/stripe/.env"] [unique_id "apK-eGjCPtor9NZ-byT--gAABpM"]
[Sat Aug 29 05:11:52.431476 2026] [security2:error] [pid 11274:tid 11459] [client 20.151.200.44:64062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/f-401.php"] [unique_id "apK-eGbX5DA3XO6e_qRSYQAAARk"]
[Sat Aug 29 05:11:52.449132 2026] [security2:error] [pid 1321:tid 1508] [client 20.104.104.62:52243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/str.php"] [unique_id "apK-eGjCPtor9NZ-byT--wAABlA"]
[Sat Aug 29 05:11:52.451447 2026] [security2:error] [pid 11274:tid 11501] [client 4.205.62.107:6864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/nw.php"] [unique_id "apK-eGbX5DA3XO6e_qRSZwAAAUI"]
[Sat Aug 29 05:11:52.453466 2026] [security2:error] [pid 1321:tid 1593] [client 20.48.250.41:24530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/wen.php"] [unique_id "apK-eGjCPtor9NZ-byT-_QAABqQ"]
[Sat Aug 29 05:11:52.485629 2026] [security2:error] [pid 1321:tid 1547] [client 20.104.18.15:37704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/drykl.php"] [unique_id "apK-eGjCPtor9NZ-byT-_wAABnY"]
[Sat Aug 29 05:11:52.496979 2026] [security2:error] [pid 11274:tid 11544] [client 20.104.104.62:33820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "zeeksignin.com"] [uri "/asc.php"] [unique_id "apK-eGbX5DA3XO6e_qRSbwAAAWw"]
[Sat Aug 29 05:11:52.501731 2026] [security2:error] [pid 11274:tid 11536] [client 93.123.109.228:46878] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/terraform.tfstate.backup"] [unique_id "apK-eGbX5DA3XO6e_qRScQAAAWU"]
[Sat Aug 29 05:11:52.503446 2026] [security2:error] [pid 11274:tid 11549] [client 158.23.147.79:39345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/goat.php"] [unique_id "apK-eGbX5DA3XO6e_qRScgAAAXE"]
[Sat Aug 29 05:11:52.512530 2026] [security2:error] [pid 11274:tid 11468] [client 40.83.93.50:14964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/goods.php"] [unique_id "apK-eGbX5DA3XO6e_qRSdgAAASI"]
[Sat Aug 29 05:11:52.516849 2026] [security2:error] [pid 11274:tid 11515] [client 40.83.93.50:6237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/hello.php"] [unique_id "apK-eGbX5DA3XO6e_qRSdwAAAVA"]
[Sat Aug 29 05:11:52.521736 2026] [security2:error] [pid 11274:tid 11534] [client 20.220.204.93:59081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/global.php"] [unique_id "apK-eGbX5DA3XO6e_qRSewAAAWM"]
[Sat Aug 29 05:11:52.524214 2026] [security2:error] [pid 11274:tid 11373] [remote 93.123.109.228:42790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/.wp-config.php.swp"] [unique_id "apK-eGbX5DA3XO6e_qRSfQABJjs"]
[Sat Aug 29 05:11:52.524861 2026] [security2:error] [pid 1321:tid 1506] [client 20.100.175.163:15795] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/1.php7"] [unique_id "apK-eGjCPtor9NZ-byT_AgAABk4"]
[Sat Aug 29 05:11:52.525011 2026] [security2:error] [pid 1321:tid 1506] [client 20.100.175.163:15795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/1.php7"] [unique_id "apK-eGjCPtor9NZ-byT_AgAABk4"]
[Sat Aug 29 05:11:52.537869 2026] [security2:error] [pid 1321:tid 1489] [client 20.48.250.41:25539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/browse.php"] [unique_id "apK-eGjCPtor9NZ-byT_AwAABj0"]
[Sat Aug 29 05:11:52.547497 2026] [authz_core:error] [pid 1321:tid 1532] [client 158.158.54.35:0] AH01630: client denied by server configuration: /home3/juntoohk/public_html/ebichili/wp-includes/PHPMailer/error_log
[Sat Aug 29 05:11:52.557072 2026] [security2:error] [pid 1321:tid 1539] [client 20.48.250.41:36131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/logs1.php"] [unique_id "apK-eGjCPtor9NZ-byT_BAAABm8"]
[Sat Aug 29 05:11:52.557072 2026] [security2:error] [pid 11274:tid 11520] [client 52.139.37.240:22500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/dropdown.php"] [unique_id "apK-eGbX5DA3XO6e_qRSiQAAAVU"]
[Sat Aug 29 05:11:52.560399 2026] [security2:error] [pid 11274:tid 11530] [client 20.240.128.207:20150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/news.php"] [unique_id "apK-eGbX5DA3XO6e_qRSigAAAV8"]
[Sat Aug 29 05:11:52.568565 2026] [security2:error] [pid 11274:tid 11454] [client 20.104.104.62:20683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/gel4y.php"] [unique_id "apK-eGbX5DA3XO6e_qRSiwAAARQ"]
[Sat Aug 29 05:11:52.575966 2026] [security2:error] [pid 11274:tid 11539] [client 93.123.109.228:46524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/test.php"] [unique_id "apK-eGbX5DA3XO6e_qRSjAAAAWg"]
[Sat Aug 29 05:11:52.581679 2026] [security2:error] [pid 1321:tid 1501] [client 93.123.109.228:46850] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/test/.env"] [unique_id "apK-eGjCPtor9NZ-byT_BQAABkk"]
[Sat Aug 29 05:11:52.583366 2026] [security2:error] [pid 11274:tid 11464] [client 20.48.250.41:42861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/35.php"] [unique_id "apK-eGbX5DA3XO6e_qRSjQAAAR4"]
[Sat Aug 29 05:11:52.588606 2026] [security2:error] [pid 11274:tid 11484] [client 20.197.61.180:1567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/contentloader1.php"] [unique_id "apK-eGbX5DA3XO6e_qRSjwAAATE"]
[Sat Aug 29 05:11:52.602352 2026] [security2:error] [pid 1321:tid 1531] [client 93.123.109.228:46866] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/user/.env"] [unique_id "apK-eGjCPtor9NZ-byT_BwAABmc"]
[Sat Aug 29 05:11:52.603185 2026] [security2:error] [pid 1321:tid 1590] [client 20.48.250.41:24568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/inc.php"] [unique_id "apK-eGjCPtor9NZ-byT_CAAABqE"]
[Sat Aug 29 05:11:52.605870 2026] [security2:error] [pid 1321:tid 1592] [client 20.104.104.62:40001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/mega.php"] [unique_id "apK-eGjCPtor9NZ-byT_CQAABqM"]
[Sat Aug 29 05:11:52.630574 2026] [security2:error] [pid 11274:tid 11522] [client 93.123.109.228:46852] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/v1/.env"] [unique_id "apK-eGbX5DA3XO6e_qRSmQAAAVc"]
[Sat Aug 29 05:11:52.642546 2026] [security2:error] [pid 11274:tid 11474] [client 68.155.159.216:1968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-content/x.php"] [unique_id "apK-eGbX5DA3XO6e_qRSmgAAASg"]
[Sat Aug 29 05:11:52.653119 2026] [security2:error] [pid 11274:tid 11499] [client 20.196.209.81:20152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-content/admin-header.php"] [unique_id "apK-eGbX5DA3XO6e_qRSngAAAUA"]
[Sat Aug 29 05:11:52.653194 2026] [security2:error] [pid 11274:tid 11570] [client 20.104.104.62:27094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "waysidebaptistmission.lifesosweet.com"] [uri "/admin.php"] [unique_id "apK-eGbX5DA3XO6e_qRSnQAAAYY"]
[Sat Aug 29 05:11:52.656564 2026] [security2:error] [pid 1321:tid 1565] [client 20.220.204.93:59058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/fs.php"] [unique_id "apK-eGjCPtor9NZ-byT_CgAABog"]
[Sat Aug 29 05:11:52.660316 2026] [security2:error] [pid 11274:tid 11448] [client 93.123.109.228:46654] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/v2/.env"] [unique_id "apK-eGbX5DA3XO6e_qRSnwAAAQ4"]
[Sat Aug 29 05:11:52.667073 2026] [security2:error] [pid 11274:tid 11469] [client 93.123.109.228:46482] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/v3/.env"] [unique_id "apK-eGbX5DA3XO6e_qRSowAAASM"]
[Sat Aug 29 05:11:52.681304 2026] [security2:error] [pid 11274:tid 11481] [client 20.52.41.200:2652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/css.php"] [unique_id "apK-eGbX5DA3XO6e_qRSpwAAAS4"]
[Sat Aug 29 05:11:52.689104 2026] [core:error] [pid 1321:tid 1555] [client 20.52.41.200:4670] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:52.689126 2026] [core:error] [pid 1321:tid 1555] [client 20.52.41.200:4670] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:52.689787 2026] [security2:error] [pid 11274:tid 11455] [client 4.205.62.107:59112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/btx25.php"] [unique_id "apK-eGbX5DA3XO6e_qRSrQAAARU"]
[Sat Aug 29 05:11:52.691962 2026] [security2:error] [pid 11274:tid 11565] [client 20.104.18.15:37768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/backup.php"] [unique_id "apK-eGbX5DA3XO6e_qRSrgAAAYE"]
[Sat Aug 29 05:11:52.693453 2026] [security2:error] [pid 11274:tid 11479] [client 158.158.54.35:32238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/gifclass.php"] [unique_id "apK-eGbX5DA3XO6e_qRSrwAAASw"]
[Sat Aug 29 05:11:52.701230 2026] [security2:error] [pid 1321:tid 1614] [client 61.9.8.108:14255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 108.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK-eGjCPtor9NZ-byT_DQAABrk"]
[Sat Aug 29 05:11:52.701351 2026] [security2:error] [pid 1321:tid 1614] [client 61.9.8.108:14255] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK-eGjCPtor9NZ-byT_DQAABrk"]
[Sat Aug 29 05:11:52.703178 2026] [security2:error] [pid 11274:tid 11521] [client 20.48.250.41:36114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/inege.php"] [unique_id "apK-eGbX5DA3XO6e_qRStQAAAVY"]
[Sat Aug 29 05:11:52.712701 2026] [security2:error] [pid 11274:tid 11465] [client 20.151.200.44:63705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/see.php"] [unique_id "apK-eGbX5DA3XO6e_qRSuQAAAR8"]
[Sat Aug 29 05:11:52.713328 2026] [security2:error] [pid 11274:tid 11524] [client 102.253.10.25:61506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.10.253.102.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gavirestaurant.com"] [uri "/xmlrpc.php"] [unique_id "apK-eGbX5DA3XO6e_qRStAAAAVk"]
[Sat Aug 29 05:11:52.713478 2026] [security2:error] [pid 11274:tid 11524] [client 102.253.10.25:61506] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gavirestaurant.com"] [uri "/xmlrpc.php"] [unique_id "apK-eGbX5DA3XO6e_qRStAAAAVk"]
[Sat Aug 29 05:11:52.715580 2026] [security2:error] [pid 11274:tid 11503] [client 20.48.250.41:25478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/zoo.php"] [unique_id "apK-eGbX5DA3XO6e_qRSugAAAUQ"]
[Sat Aug 29 05:11:52.722724 2026] [security2:error] [pid 11274:tid 11541] [client 20.48.250.41:49605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/maraz.php"] [unique_id "apK-eGbX5DA3XO6e_qRSvQAAAWo"]
[Sat Aug 29 05:11:52.722742 2026] [security2:error] [pid 11274:tid 11502] [client 20.104.104.62:27115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "waysidebaptistmission.lifesosweet.com"] [uri "/lite.php"] [unique_id "apK-eGbX5DA3XO6e_qRSvgAAAUM"]
[Sat Aug 29 05:11:52.722821 2026] [security2:error] [pid 1321:tid 1602] [client 158.158.54.35:35952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/inputs.php"] [unique_id "apK-eGjCPtor9NZ-byT_DwAABq0"]
[Sat Aug 29 05:11:52.736452 2026] [security2:error] [pid 11274:tid 11486] [client 158.23.147.79:7113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/chosen.php"] [unique_id "apK-eGbX5DA3XO6e_qRSwQAAATM"]
[Sat Aug 29 05:11:52.737089 2026] [security2:error] [pid 11274:tid 11564] [client 197.232.63.170:64528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 170.63.232.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK-eGbX5DA3XO6e_qRSwwAAAYA"]
[Sat Aug 29 05:11:52.737191 2026] [security2:error] [pid 11274:tid 11564] [client 197.232.63.170:64528] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK-eGbX5DA3XO6e_qRSwwAAAYA"]
[Sat Aug 29 05:11:52.755122 2026] [security2:error] [pid 1321:tid 1500] [client 20.48.250.41:24461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/6bcwiqwj.php"] [unique_id "apK-eGjCPtor9NZ-byT_EgAABkg"]
[Sat Aug 29 05:11:52.756419 2026] [security2:error] [pid 11274:tid 11568] [client 52.139.37.240:21835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/files/index.php"] [unique_id "apK-eGbX5DA3XO6e_qRSxwAAAYQ"]
[Sat Aug 29 05:11:52.759786 2026] [security2:error] [pid 11274:tid 11511] [client 20.104.104.62:33841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "zeeksignin.com"] [uri "/content.php"] [unique_id "apK-eGbX5DA3XO6e_qRSyQAAAUw"]
[Sat Aug 29 05:11:52.776645 2026] [security2:error] [pid 11274:tid 11497] [client 20.104.104.62:52321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/ww3.php"] [unique_id "apK-eGbX5DA3XO6e_qRSzAAAAT4"]
[Sat Aug 29 05:11:52.779204 2026] [security2:error] [pid 1321:tid 1529] [client 40.83.93.50:8854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/config.php"] [unique_id "apK-eGjCPtor9NZ-byT_EwAABmU"]
[Sat Aug 29 05:11:52.798209 2026] [security2:error] [pid 11274:tid 11495] [client 20.220.204.93:59074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/ioxi.php"] [unique_id "apK-eGbX5DA3XO6e_qRSzgAAATw"]
[Sat Aug 29 05:11:52.818295 2026] [security2:error] [pid 11274:tid 11506] [client 68.155.159.216:14160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK-eGbX5DA3XO6e_qRS2AAAAUc"]
[Sat Aug 29 05:11:52.843286 2026] [security2:error] [pid 1321:tid 1586] [client 20.151.200.44:64684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/hq.php"] [unique_id "apK-eGjCPtor9NZ-byT_FQAABp0"]
[Sat Aug 29 05:11:52.845390 2026] [security2:error] [pid 1321:tid 1523] [client 20.100.175.163:30423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/mini.php"] [unique_id "apK-eGjCPtor9NZ-byT_GAAABl8"]
[Sat Aug 29 05:11:52.852208 2026] [security2:error] [pid 1321:tid 1519] [client 20.48.250.41:42983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/kbfr.php"] [unique_id "apK-eGjCPtor9NZ-byT_GQAABls"]
[Sat Aug 29 05:11:52.853828 2026] [security2:error] [pid 1321:tid 1512] [client 103.214.23.106:8712] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "skarchfrutale.mx"] [uri "/vendor/laravel-filemanager/css/lfm.css"] [unique_id "apK-eGjCPtor9NZ-byT_GgAABlQ"]
[Sat Aug 29 05:11:52.871029 2026] [security2:error] [pid 11274:tid 11560] [client 93.123.109.228:46482] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/var/www/.env"] [unique_id "apK-eGbX5DA3XO6e_qRS4QAAAXw"]
[Sat Aug 29 05:11:52.888829 2026] [security2:error] [pid 11274:tid 11520] [client 93.123.109.228:46840] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/var/www/html/.env"] [unique_id "apK-eGbX5DA3XO6e_qRS4wAAAVU"]
[Sat Aug 29 05:11:52.891482 2026] [security2:error] [pid 1321:tid 1615] [client 20.104.18.15:37760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/indo.php"] [unique_id "apK-eGjCPtor9NZ-byT_GwAABro"]
[Sat Aug 29 05:11:52.900697 2026] [security2:error] [pid 1321:tid 1518] [client 20.48.250.41:36377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/wp-link10.php"] [unique_id "apK-eGjCPtor9NZ-byT_HAAABlo"]
[Sat Aug 29 05:11:52.902400 2026] [security2:error] [pid 1321:tid 1607] [client 20.48.250.41:24574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/easy.php"] [unique_id "apK-eGjCPtor9NZ-byT_HQAABrI"]
[Sat Aug 29 05:11:52.903733 2026] [security2:error] [pid 11274:tid 11445] [client 20.240.128.207:5243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-content/uploads/min.php"] [unique_id "apK-eGbX5DA3XO6e_qRS5gAAAQs"]
[Sat Aug 29 05:11:52.915924 2026] [security2:error] [pid 1321:tid 1499] [client 20.151.200.44:65181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/horeg.php"] [unique_id "apK-eGjCPtor9NZ-byT_HgAABkc"]
[Sat Aug 29 05:11:52.923673 2026] [security2:error] [pid 11274:tid 11492] [client 93.123.109.228:46756] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/web/.env"] [unique_id "apK-eGbX5DA3XO6e_qRS6QAAATk"]
[Sat Aug 29 05:11:52.928256 2026] [security2:error] [pid 11274:tid 11492] [client 20.220.204.93:59130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/bootstrap.php"] [unique_id "apK-eGbX5DA3XO6e_qRS6gAAATk"]
[Sat Aug 29 05:11:52.930573 2026] [security2:error] [pid 11274:tid 11467] [client 20.104.104.62:61768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/sko.php"] [unique_id "apK-eGbX5DA3XO6e_qRS6wAAASE"]
[Sat Aug 29 05:11:52.940451 2026] [security2:error] [pid 1321:tid 1603] [client 20.104.104.62:27099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "waysidebaptistmission.lifesosweet.com"] [uri "/about.php"] [unique_id "apK-eGjCPtor9NZ-byT_HwAABq4"]
[Sat Aug 29 05:11:52.941143 2026] [security2:error] [pid 1321:tid 1560] [client 68.155.159.216:62799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/dropdown.php"] [unique_id "apK-eGjCPtor9NZ-byT_IAAABoM"]
[Sat Aug 29 05:11:52.953154 2026] [security2:error] [pid 1321:tid 1588] [client 52.139.37.240:22477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tbcflorida.com"] [uri "/flower.php"] [unique_id "apK-eGjCPtor9NZ-byT_IgAABp8"]
[Sat Aug 29 05:11:52.956482 2026] [security2:error] [pid 1321:tid 1515] [client 20.104.68.135:37763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.angottiproductions.com"] [uri "/sm.php"] [unique_id "apK-eGjCPtor9NZ-byT_IwAABlc"]
[Sat Aug 29 05:11:52.958497 2026] [security2:error] [pid 11274:tid 11535] [client 20.48.250.41:25569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/elp.php"] [unique_id "apK-eGbX5DA3XO6e_qRS7QAAAWQ"]
[Sat Aug 29 05:11:52.959216 2026] [security2:error] [pid 1321:tid 1514] [client 20.104.104.62:34717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "zeeksignin.com"] [uri "/hplfuns.php"] [unique_id "apK-eGjCPtor9NZ-byT_JAAABlY"]
[Sat Aug 29 05:11:52.974648 2026] [security2:error] [pid 11274:tid 11466] [client 45.148.10.62:48934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "proaider.com"] [uri "/config.php.bak"] [unique_id "apK-eGbX5DA3XO6e_qRS7gAAASA"]
[Sat Aug 29 05:11:52.987539 2026] [security2:error] [pid 11274:tid 11448] [client 20.48.250.41:43000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/wp-act.php"] [unique_id "apK-eGbX5DA3XO6e_qRS8AAAAQ4"]
[Sat Aug 29 05:11:52.989187 2026] [security2:error] [pid 11274:tid 11469] [client 158.23.147.79:49802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/wp-content/banners/about.php"] [unique_id "apK-eGbX5DA3XO6e_qRS8QAAASM"]
[Sat Aug 29 05:11:52.989326 2026] [security2:error] [pid 11274:tid 11513] [client 20.104.104.62:20845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/contacts.php"] [unique_id "apK-eGbX5DA3XO6e_qRS8gAAAU4"]
[Sat Aug 29 05:11:52.991333 2026] [security2:error] [pid 1321:tid 1595] [client 4.205.62.107:59077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/adminfus.php"] [unique_id "apK-eGjCPtor9NZ-byT_JQAABqY"]
[Sat Aug 29 05:11:53.007832 2026] [security2:error] [pid 11274:tid 11527] [client 40.83.93.50:4012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/fi2.php"] [unique_id "apK-eWbX5DA3XO6e_qRS9wAAAVw"]
[Sat Aug 29 05:11:53.018544 2026] [security2:error] [pid 1321:tid 1600] [client 40.83.93.50:14919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/hehe.php"] [unique_id "apK-eWjCPtor9NZ-byT_JwAABqs"]
[Sat Aug 29 05:11:53.019659 2026] [security2:error] [pid 11274:tid 11543] [client 20.100.175.163:9549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/disagraeosc.php"] [unique_id "apK-eWbX5DA3XO6e_qRS_AAAAWs"]
[Sat Aug 29 05:11:53.052155 2026] [security2:error] [pid 11274:tid 11502] [client 20.104.18.15:37816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/sign.php"] [unique_id "apK-eWbX5DA3XO6e_qRTAgAAAUM"]
[Sat Aug 29 05:11:53.052362 2026] [security2:error] [pid 11274:tid 11571] [client 20.196.209.81:17777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-content/admin.php"] [unique_id "apK-eWbX5DA3XO6e_qRTAwAAAYc"]
[Sat Aug 29 05:11:53.053824 2026] [security2:error] [pid 1321:tid 1508] [client 158.23.147.79:58900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK-eWjCPtor9NZ-byT_KQAABlA"]
[Sat Aug 29 05:11:53.076760 2026] [security2:error] [pid 11274:tid 11485] [client 20.48.250.41:36150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/ww.php"] [unique_id "apK-eWbX5DA3XO6e_qRTBAAAATI"]
[Sat Aug 29 05:11:53.079964 2026] [security2:error] [pid 11274:tid 11538] [client 20.104.104.62:59053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/zoz.php"] [unique_id "apK-eWbX5DA3XO6e_qRTBwAAAWc"]
[Sat Aug 29 05:11:53.084393 2026] [security2:error] [pid 11274:tid 11509] [client 93.123.109.228:46654] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/website/.env"] [unique_id "apK-eWbX5DA3XO6e_qRTDgAAAUo"]
[Sat Aug 29 05:11:53.086469 2026] [security2:error] [pid 1321:tid 1577] [client 68.155.159.216:23434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK-eWjCPtor9NZ-byT_KwAABpQ"]
[Sat Aug 29 05:11:53.097615 2026] [security2:error] [pid 1321:tid 1547] [client 20.48.250.41:24449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/fresh3.php"] [unique_id "apK-eWjCPtor9NZ-byT_LAAABnY"]
[Sat Aug 29 05:11:53.104073 2026] [security2:error] [pid 1321:tid 1612] [client 20.240.128.207:19111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/about/function.php"] [unique_id "apK-eWjCPtor9NZ-byT_LQAABrc"]
[Sat Aug 29 05:11:53.106159 2026] [security2:error] [pid 11274:tid 11403] [remote 93.123.109.228:42716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/info.php"] [unique_id "apK-eWbX5DA3XO6e_qRTEQABhFk"]
[Sat Aug 29 05:11:53.107965 2026] [security2:error] [pid 11274:tid 11551] [client 93.123.109.228:46868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hellospringford.com"] [uri "/wp-config.php"] [unique_id "apK-eWbX5DA3XO6e_qRTEwAAAXM"]
[Sat Aug 29 05:11:53.109676 2026] [security2:error] [pid 11274:tid 11390] [remote 93.123.109.228:42716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/infophp.php"] [unique_id "apK-eWbX5DA3XO6e_qRTFQABhEw"]
[Sat Aug 29 05:11:53.112662 2026] [security2:error] [pid 1321:tid 1613] [client 93.123.109.228:46854] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.hellospringford.com"] [uri "/wp-config.php.bak"] [unique_id "apK-eWjCPtor9NZ-byT_LwAABrg"]
[Sat Aug 29 05:11:53.113248 2026] [security2:error] [pid 11274:tid 11497] [client 93.123.109.228:46726] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.hellospringford.com"] [uri "/wp-config.php.new"] [unique_id "apK-eWbX5DA3XO6e_qRTFwAAAT4"]
[Sat Aug 29 05:11:53.114705 2026] [security2:error] [pid 11274:tid 11482] [client 20.48.250.41:25496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/666.php"] [unique_id "apK-eWbX5DA3XO6e_qRTGAAAAS8"]
[Sat Aug 29 05:11:53.118813 2026] [security2:error] [pid 11274:tid 11352] [remote 93.123.109.228:42716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/infos.php"] [unique_id "apK-eWbX5DA3XO6e_qRTGgABhCc"]
[Sat Aug 29 05:11:53.129751 2026] [security2:error] [pid 11274:tid 11545] [client 93.123.109.228:46832] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.hellospringford.com"] [uri "/wp-config.php.old"] [unique_id "apK-eWbX5DA3XO6e_qRTHAAAAW0"]
[Sat Aug 29 05:11:53.129777 2026] [security2:error] [pid 1321:tid 1506] [client 20.48.250.41:42951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/24.php"] [unique_id "apK-eWjCPtor9NZ-byT_MAAABk4"]
[Sat Aug 29 05:11:53.131490 2026] [security2:error] [pid 1321:tid 1593] [client 20.104.104.62:27075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "waysidebaptistmission.lifesosweet.com"] [uri "/inputs.php"] [unique_id "apK-eWjCPtor9NZ-byT_MQAABqQ"]
[Sat Aug 29 05:11:53.134826 2026] [core:error] [pid 11274:tid 11499] [client 20.52.41.200:4798] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:53.134850 2026] [core:error] [pid 11274:tid 11499] [client 20.52.41.200:4798] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:53.139751 2026] [security2:error] [pid 1321:tid 1489] [client 20.220.204.93:59092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/export.php"] [unique_id "apK-eWjCPtor9NZ-byT_MgAABj0"]
[Sat Aug 29 05:11:53.154019 2026] [security2:error] [pid 1321:tid 1549] [client 20.104.104.62:33891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "zeeksignin.com"] [uri "/iko.php"] [unique_id "apK-eWjCPtor9NZ-byT_NAAABng"]
[Sat Aug 29 05:11:53.159891 2026] [security2:error] [pid 11274:tid 11450] [client 93.123.109.228:46762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "cpcontacts.hellospringford.com"] [uri "/___proxy_subdomain_cpcontacts/wp-content/mysql.sql"] [unique_id "apK-eWbX5DA3XO6e_qRTIwAAARA"]
[Sat Aug 29 05:11:53.165903 2026] [security2:error] [pid 11274:tid 11449] [client 158.158.54.35:22643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/alfa.php"] [unique_id "apK-eWbX5DA3XO6e_qRTJgAAAQ8"]
[Sat Aug 29 05:11:53.202563 2026] [security2:error] [pid 11274:tid 11523] [client 202.71.25.11:49514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.25.71.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK-eWbX5DA3XO6e_qRTLgAAAVg"]
[Sat Aug 29 05:11:53.202713 2026] [security2:error] [pid 11274:tid 11523] [client 202.71.25.11:49514] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK-eWbX5DA3XO6e_qRTLgAAAVg"]
[Sat Aug 29 05:11:53.203927 2026] [security2:error] [pid 11274:tid 11520] [client 20.151.200.44:22270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/basic.php"] [unique_id "apK-eWbX5DA3XO6e_qRTLwAAAVU"]
[Sat Aug 29 05:11:53.209692 2026] [security2:error] [pid 1321:tid 1590] [client 20.104.18.15:37790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/wnnjpsby.php"] [unique_id "apK-eWjCPtor9NZ-byT_PAAABqE"]
[Sat Aug 29 05:11:53.213299 2026] [security2:error] [pid 11274:tid 11454] [client 20.151.200.44:27294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/monso.php"] [unique_id "apK-eWbX5DA3XO6e_qRTMwAAARQ"]
[Sat Aug 29 05:11:53.218959 2026] [security2:error] [pid 11274:tid 11467] [client 20.104.104.62:42100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/mmm.php"] [unique_id "apK-eWbX5DA3XO6e_qRTNQAAASE"]
[Sat Aug 29 05:11:53.227437 2026] [autoindex:error] [pid 11274:tid 11508] [client 45.148.10.62:48938] AH01276: Cannot serve directory /home3/zowguimy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:11:53.228805 2026] [security2:error] [pid 11274:tid 11492] [client 20.48.250.41:24523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/bgymj.php"] [unique_id "apK-eWbX5DA3XO6e_qRTNwAAATk"]
[Sat Aug 29 05:11:53.235105 2026] [security2:error] [pid 11274:tid 11553] [client 20.151.200.44:61543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/sef.php"] [unique_id "apK-eWbX5DA3XO6e_qRTPAAAAXU"]
[Sat Aug 29 05:11:53.242468 2026] [security2:error] [pid 11274:tid 11535] [client 20.48.250.41:36365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/w1px.php"] [unique_id "apK-eWbX5DA3XO6e_qRTPQAAAWQ"]
[Sat Aug 29 05:11:53.258284 2026] [security2:error] [pid 11274:tid 11387] [remote 93.123.109.228:42790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK-eWbX5DA3XO6e_qRTQwABC0k"]
[Sat Aug 29 05:11:53.261218 2026] [security2:error] [pid 11274:tid 11484] [client 20.48.250.41:49660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/155.php"] [unique_id "apK-eWbX5DA3XO6e_qRTRQAAATE"]
[Sat Aug 29 05:11:53.268237 2026] [security2:error] [pid 11274:tid 11561] [client 158.23.147.79:60153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK-eWbX5DA3XO6e_qRTRwAAAX0"]
[Sat Aug 29 05:11:53.274334 2026] [security2:error] [pid 11274:tid 11539] [client 20.104.49.130:36379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/ano.php"] [unique_id "apK-eWbX5DA3XO6e_qRTSQAAAWg"]
[Sat Aug 29 05:11:53.276242 2026] [security2:error] [pid 11274:tid 11448] [client 20.48.250.41:25507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/knmt.php"] [unique_id "apK-eWbX5DA3XO6e_qRTSgAAAQ4"]
[Sat Aug 29 05:11:53.278821 2026] [security2:error] [pid 11274:tid 11469] [client 158.158.54.35:15590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK-eWbX5DA3XO6e_qRTSwAAASM"]
[Sat Aug 29 05:11:53.284346 2026] [security2:error] [pid 1321:tid 1567] [client 40.83.93.50:8888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/22.php"] [unique_id "apK-eWjCPtor9NZ-byT_RQAABoo"]
[Sat Aug 29 05:11:53.289950 2026] [security2:error] [pid 11274:tid 11480] [client 20.220.204.93:52290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/gk.php"] [unique_id "apK-eWbX5DA3XO6e_qRTTQAAAS0"]
[Sat Aug 29 05:11:53.293150 2026] [security2:error] [pid 1321:tid 1574] [client 20.151.200.44:63406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/mh.php"] [unique_id "apK-eWjCPtor9NZ-byT_RgAABpE"]
[Sat Aug 29 05:11:53.313124 2026] [security2:error] [pid 11274:tid 11507] [client 20.104.68.135:32055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.angottiproductions.com"] [uri "/shell.php"] [unique_id "apK-eWbX5DA3XO6e_qRTVAAAAUg"]
[Sat Aug 29 05:11:53.318911 2026] [security2:error] [pid 1321:tid 1597] [client 20.197.61.180:12898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/al.php"] [unique_id "apK-eWjCPtor9NZ-byT_SQAABqg"]
[Sat Aug 29 05:11:53.327801 2026] [security2:error] [pid 11274:tid 11571] [client 20.104.104.62:20637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/yo.php"] [unique_id "apK-eWbX5DA3XO6e_qRTWQAAAYc"]
[Sat Aug 29 05:11:53.328085 2026] [security2:error] [pid 11274:tid 11518] [client 20.104.104.62:27089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "waysidebaptistmission.lifesosweet.com"] [uri "/adminfuns.php"] [unique_id "apK-eWbX5DA3XO6e_qRTWgAAAVM"]
[Sat Aug 29 05:11:53.329130 2026] [security2:error] [pid 11274:tid 11565] [client 158.23.147.79:55262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/.well-knownold/index.php"] [unique_id "apK-eWbX5DA3XO6e_qRTWwAAAYE"]
[Sat Aug 29 05:11:53.339694 2026] [security2:error] [pid 11274:tid 11519] [client 20.100.175.163:27038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/aa.php"] [unique_id "apK-eWbX5DA3XO6e_qRTXQAAAVQ"]
[Sat Aug 29 05:11:53.348736 2026] [security2:error] [pid 1321:tid 1555] [client 20.151.200.44:21925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/monso.php"] [unique_id "apK-eWjCPtor9NZ-byT_TwAABn4"]
[Sat Aug 29 05:11:53.348764 2026] [security2:error] [pid 1321:tid 1610] [client 158.23.147.79:24550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-content/x/index.php"] [unique_id "apK-eWjCPtor9NZ-byT_UAAABrU"]
[Sat Aug 29 05:11:53.370010 2026] [security2:error] [pid 1321:tid 1516] [client 68.155.159.216:38674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK-eWjCPtor9NZ-byT_UwAABlg"]
[Sat Aug 29 05:11:53.374536 2026] [security2:error] [pid 11274:tid 11509] [client 20.104.18.15:37816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/gigi.php"] [unique_id "apK-eWbX5DA3XO6e_qRTYQAAAUo"]
[Sat Aug 29 05:11:53.380615 2026] [security2:error] [pid 11274:tid 11563] [client 45.148.10.62:48938] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.zow.gui.mybluehost.me"] [uri "/.env"] [unique_id "apK-eWbX5DA3XO6e_qRTYgAAAX8"]
[Sat Aug 29 05:11:53.381965 2026] [security2:error] [pid 1321:tid 1500] [client 20.104.104.62:41985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/advanced.php"] [unique_id "apK-eWjCPtor9NZ-byT_VAAABkg"]
[Sat Aug 29 05:11:53.388942 2026] [security2:error] [pid 11274:tid 11482] [client 158.23.147.79:38782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-l0gin.php"] [unique_id "apK-eWbX5DA3XO6e_qRTYwAAAS8"]
[Sat Aug 29 05:11:53.396215 2026] [security2:error] [pid 1321:tid 1581] [client 20.48.250.41:36405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/to.php"] [unique_id "apK-eWjCPtor9NZ-byT_VQAABpg"]
[Sat Aug 29 05:11:53.405515 2026] [security2:error] [pid 11274:tid 11464] [client 20.240.128.207:2085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK-eWbX5DA3XO6e_qRTZwAAAR4"]
[Sat Aug 29 05:11:53.409104 2026] [security2:error] [pid 1321:tid 1523] [client 20.48.250.41:49644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/file.php"] [unique_id "apK-eWjCPtor9NZ-byT_VwAABl8"]
[Sat Aug 29 05:11:53.413779 2026] [security2:error] [pid 11274:tid 11456] [client 68.155.159.216:56741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/NewFile.php/"] [unique_id "apK-eWbX5DA3XO6e_qRTaAAAARY"]
[Sat Aug 29 05:11:53.416897 2026] [security2:error] [pid 1321:tid 1519] [client 20.48.250.41:24488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/ws69.php"] [unique_id "apK-eWjCPtor9NZ-byT_WQAABls"]
[Sat Aug 29 05:11:53.418177 2026] [security2:error] [pid 1321:tid 1512] [client 4.205.62.107:64909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/sys.php"] [unique_id "apK-eWjCPtor9NZ-byT_WgAABlQ"]
[Sat Aug 29 05:11:53.425708 2026] [security2:error] [pid 1321:tid 1582] [client 20.104.104.62:34708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "zeeksignin.com"] [uri "/index/function.php"] [unique_id "apK-eWjCPtor9NZ-byT_XQAABpk"]
[Sat Aug 29 05:11:53.431205 2026] [security2:error] [pid 11274:tid 11504] [client 158.23.147.79:64409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/NewFile.php/"] [unique_id "apK-eWbX5DA3XO6e_qRTagAAAUU"]
[Sat Aug 29 05:11:53.432077 2026] [security2:error] [pid 11274:tid 11570] [client 20.52.41.200:2662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/w.php"] [unique_id "apK-eWbX5DA3XO6e_qRTawAAAYY"]
[Sat Aug 29 05:11:53.433919 2026] [security2:error] [pid 11274:tid 11471] [client 20.220.204.93:59124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/logs1.php"] [unique_id "apK-eWbX5DA3XO6e_qRTbAAAASU"]
[Sat Aug 29 05:11:53.443164 2026] [security2:error] [pid 1321:tid 1586] [client 20.48.250.41:25570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/sbhu.php"] [unique_id "apK-eWjCPtor9NZ-byT_XgAABp0"]
[Sat Aug 29 05:11:53.443264 2026] [security2:error] [pid 11274:tid 11496] [client 4.205.62.107:61708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/chosen.php"] [unique_id "apK-eWbX5DA3XO6e_qRTbgAAAT0"]
[Sat Aug 29 05:11:53.455786 2026] [security2:error] [pid 11274:tid 11552] [client 20.196.209.81:17728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-content/autoload_classmap.php"] [unique_id "apK-eWbX5DA3XO6e_qRTbwAAAXQ"]
[Sat Aug 29 05:11:53.471635 2026] [security2:error] [pid 1321:tid 1509] [client 34.140.129.51:59024] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "67.20.76.222"] [uri "/"] [unique_id "apK-eWjCPtor9NZ-byT_YAAABlE"]
[Sat Aug 29 05:11:53.490864 2026] [security2:error] [pid 11274:tid 11558] [client 40.83.93.50:3963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/1p.php"] [unique_id "apK-eWbX5DA3XO6e_qRTcwAAAXo"]
[Sat Aug 29 05:11:53.508225 2026] [security2:error] [pid 1321:tid 1615] [client 20.104.68.135:18028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.angottiproductions.com"] [uri "/simple.php"] [unique_id "apK-eWjCPtor9NZ-byT_ZQAABro"]
[Sat Aug 29 05:11:53.508277 2026] [security2:error] [pid 1321:tid 1553] [client 20.100.175.163:15785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-logs.php"] [unique_id "apK-eWjCPtor9NZ-byT_ZwAABnw"]
[Sat Aug 29 05:11:53.509298 2026] [security2:error] [pid 11274:tid 11540] [client 40.83.93.50:14927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/wp-admin/class-db.php"] [unique_id "apK-eWbX5DA3XO6e_qRTdAAAAWk"]
[Sat Aug 29 05:11:53.521279 2026] [security2:error] [pid 11274:tid 11544] [client 68.155.159.216:49130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK-eWbX5DA3XO6e_qRTdQAAAWw"]
[Sat Aug 29 05:11:53.531507 2026] [security2:error] [pid 11274:tid 11451] [client 20.104.104.62:61790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/blox.php"] [unique_id "apK-eWbX5DA3XO6e_qRTeQAAARE"]
[Sat Aug 29 05:11:53.531747 2026] [security2:error] [pid 1321:tid 1527] [client 87.219.197.128:61354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK-eWjCPtor9NZ-byT_agAABmM"]
[Sat Aug 29 05:11:53.531846 2026] [security2:error] [pid 1321:tid 1527] [client 87.219.197.128:61354] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK-eWjCPtor9NZ-byT_agAABmM"]
[Sat Aug 29 05:11:53.532826 2026] [security2:error] [pid 11274:tid 11468] [client 45.148.10.62:48938] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.zow.gui.mybluehost.me"] [uri "/.env"] [unique_id "apK-eWbX5DA3XO6e_qRTegAAASI"]
[Sat Aug 29 05:11:53.538328 2026] [security2:error] [pid 1321:tid 1548] [client 68.155.159.216:56745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/dropdown.php"] [unique_id "apK-eWjCPtor9NZ-byT_bAAABnc"]
[Sat Aug 29 05:11:53.547555 2026] [security2:error] [pid 11274:tid 11512] [client 20.104.18.15:37734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/info.php/new.php"] [unique_id "apK-eWbX5DA3XO6e_qRTfQAAAU0"]
[Sat Aug 29 05:11:53.552024 2026] [security2:error] [pid 1321:tid 1595] [client 4.205.62.107:60951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/register.php"] [unique_id "apK-eWjCPtor9NZ-byT_bQAABqY"]
[Sat Aug 29 05:11:53.561166 2026] [security2:error] [pid 11274:tid 11467] [client 20.104.49.130:65265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/xwx1.php"] [unique_id "apK-eWbX5DA3XO6e_qRTfwAAASE"]
[Sat Aug 29 05:11:53.569417 2026] [security2:error] [pid 11274:tid 11568] [client 20.48.250.41:36834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/thui.php"] [unique_id "apK-eWbX5DA3XO6e_qRTgQAAAYQ"]
[Sat Aug 29 05:11:53.588560 2026] [security2:error] [pid 1321:tid 1609] [client 20.52.41.200:4410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/tool.php"] [unique_id "apK-eWjCPtor9NZ-byT_cgAABrQ"]
[Sat Aug 29 05:11:53.607084 2026] [security2:error] [pid 11274:tid 11448] [client 4.205.62.107:6300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/product.php"] [unique_id "apK-eWbX5DA3XO6e_qRTkAAAAQ4"]
[Sat Aug 29 05:11:53.608203 2026] [autoindex:error] [pid 1321:tid 1607] [client 20.104.104.62:27088] AH01276: Cannot serve directory /home1/lifesosw/public_html/whitesands2/wp-admin/images/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:11:53.611898 2026] [security2:error] [pid 11274:tid 11501] [client 158.158.54.35:23734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/403.php"] [unique_id "apK-eWbX5DA3XO6e_qRTkgAAAUI"]
[Sat Aug 29 05:11:53.616092 2026] [autoindex:error] [pid 11274:tid 11395] [remote 87.58.197.202:19782] AH01276: Cannot serve directory /home3/xnfwmqmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:11:53.623903 2026] [security2:error] [pid 11274:tid 11555] [client 20.104.104.62:34711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "zeeksignin.com"] [uri "/koiy.php"] [unique_id "apK-eWbX5DA3XO6e_qRTlQAAAXc"]
[Sat Aug 29 05:11:53.637620 2026] [security2:error] [pid 11274:tid 11503] [client 20.48.250.41:42824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK-eWbX5DA3XO6e_qRTmgAAAUQ"]
[Sat Aug 29 05:11:53.650230 2026] [security2:error] [pid 1321:tid 1387] [remote 93.123.109.228:42940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/.env.php"] [unique_id "apK-eWjCPtor9NZ-byT_eAAGox0"]
[Sat Aug 29 05:11:53.650707 2026] [security2:error] [pid 11274:tid 11541] [client 20.48.250.41:24459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/ccs.php"] [unique_id "apK-eWbX5DA3XO6e_qRTnQAAAWo"]
[Sat Aug 29 05:11:53.657016 2026] [security2:error] [pid 11274:tid 11386] [remote 93.123.109.228:42790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/admin/phpinfo.php"] [unique_id "apK-eWbX5DA3XO6e_qRTngABVUg"]
[Sat Aug 29 05:11:53.666155 2026] [security2:error] [pid 1321:tid 1600] [client 68.155.159.216:55140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.angelesforestranch.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-eWjCPtor9NZ-byT_egAABqs"]
[Sat Aug 29 05:11:53.668839 2026] [security2:error] [pid 1321:tid 1496] [client 20.220.204.93:59084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/inege.php"] [unique_id "apK-eWjCPtor9NZ-byT_ewAABkQ"]
[Sat Aug 29 05:11:53.673597 2026] [security2:error] [pid 11274:tid 11513] [client 20.104.104.62:64749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-content/fm.php"] [unique_id "apK-eWbX5DA3XO6e_qRTogAAAU4"]
[Sat Aug 29 05:11:53.675516 2026] [security2:error] [pid 1321:tid 1508] [client 20.104.104.62:7121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/kcs.php"] [unique_id "apK-eWjCPtor9NZ-byT_fQAABlA"]
[Sat Aug 29 05:11:53.701147 2026] [security2:error] [pid 11274:tid 11481] [client 20.104.68.135:32793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.angottiproductions.com"] [uri "/wp-admin.php"] [unique_id "apK-eWbX5DA3XO6e_qRTpwAAAS4"]
[Sat Aug 29 05:11:53.703796 2026] [security2:error] [pid 11274:tid 11388] [remote 93.123.109.228:42790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/admin_phpinfo.php"] [unique_id "apK-eWbX5DA3XO6e_qRTqQABVUo"]
[Sat Aug 29 05:11:53.724122 2026] [security2:error] [pid 11274:tid 11535] [client 158.158.54.35:10173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/css/index.php"] [unique_id "apK-eWbX5DA3XO6e_qRTrQAAAWQ"]
[Sat Aug 29 05:11:53.725937 2026] [security2:error] [pid 11274:tid 11572] [client 20.104.49.130:60770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/kj.php"] [unique_id "apK-eWbX5DA3XO6e_qRTrgAAAYg"]
[Sat Aug 29 05:11:53.737227 2026] [security2:error] [pid 11274:tid 11511] [client 20.151.200.44:65192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/rce.php"] [unique_id "apK-eWbX5DA3XO6e_qRTsQAAAUw"]
[Sat Aug 29 05:11:53.754471 2026] [security2:error] [pid 1321:tid 1536] [client 158.158.54.35:20684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/.trash7206/index.php"] [unique_id "apK-eWjCPtor9NZ-byT_hQAABmw"]
[Sat Aug 29 05:11:53.762388 2026] [cgid:error] [pid 11274:tid 11563] [client 20.104.104.62:0] AH01265: stderr from /home1/lifesosw/public_html/whitesands2/cgi-bin/: attempt to invoke directory as script
[Sat Aug 29 05:11:53.765465 2026] [security2:error] [pid 11274:tid 11452] [client 20.151.200.44:27161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/rce.php"] [unique_id "apK-eWbX5DA3XO6e_qRTtAAAARI"]
[Sat Aug 29 05:11:53.768114 2026] [security2:error] [pid 1321:tid 1613] [client 20.104.18.15:37796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/w.php"] [unique_id "apK-eWjCPtor9NZ-byT_hgAABrg"]
[Sat Aug 29 05:11:53.777544 2026] [security2:error] [pid 11274:tid 11499] [client 20.240.128.207:20115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-includes/admin.php"] [unique_id "apK-eWbX5DA3XO6e_qRTtQAAAUA"]
[Sat Aug 29 05:11:53.794908 2026] [security2:error] [pid 11274:tid 11504] [client 20.151.200.44:61576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/admin123.php"] [unique_id "apK-eWbX5DA3XO6e_qRTtgAAAUU"]
[Sat Aug 29 05:11:53.810230 2026] [security2:error] [pid 1321:tid 1593] [client 20.220.204.93:52303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/wp-link10.php"] [unique_id "apK-eWjCPtor9NZ-byT_hwAABqQ"]
[Sat Aug 29 05:11:53.830538 2026] [security2:error] [pid 1321:tid 1532] [client 20.104.104.62:27088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "waysidebaptistmission.lifesosweet.com"] [uri "/edit.php"] [unique_id "apK-eWjCPtor9NZ-byT_iQAABmg"]
[Sat Aug 29 05:11:53.831034 2026] [security2:error] [pid 1321:tid 1489] [client 4.205.62.107:62763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/app_dev.php"] [unique_id "apK-eWjCPtor9NZ-byT_iAAABj0"]
[Sat Aug 29 05:11:53.832675 2026] [security2:error] [pid 1321:tid 1562] [client 20.100.175.163:31212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/c.php"] [unique_id "apK-eWjCPtor9NZ-byT_iwAABoU"]
[Sat Aug 29 05:11:53.832840 2026] [security2:error] [pid 1321:tid 1559] [client 20.104.104.62:42060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/wsz.php"] [unique_id "apK-eWjCPtor9NZ-byT_igAABoI"]
[Sat Aug 29 05:11:53.837153 2026] [security2:error] [pid 11274:tid 11482] [client 20.104.104.62:34747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "zeeksignin.com"] [uri "/lock360.php"] [unique_id "apK-eWbX5DA3XO6e_qRTwAAAAS8"]
[Sat Aug 29 05:11:53.838318 2026] [security2:error] [pid 11274:tid 11552] [client 158.23.147.79:39140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK-eWbX5DA3XO6e_qRTwQAAAXQ"]
[Sat Aug 29 05:11:53.845269 2026] [autoindex:error] [pid 11274:tid 11496] [client 45.148.10.62:48938] AH01276: Cannot serve directory /home3/zowguimy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:11:53.861086 2026] [security2:error] [pid 1321:tid 1552] [client 20.196.209.81:17361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-content/cache/min/1/wp-content/admin.php"] [unique_id "apK-eWjCPtor9NZ-byT_kgAABns"]
[Sat Aug 29 05:11:53.891640 2026] [security2:error] [pid 11274:tid 11530] [client 20.240.128.207:4892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/bthil.php"] [unique_id "apK-eWbX5DA3XO6e_qRTygAAAV8"]
[Sat Aug 29 05:11:53.892600 2026] [security2:error] [pid 11274:tid 11551] [client 20.52.41.200:2212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/ahax.php"] [unique_id "apK-eWbX5DA3XO6e_qRTzAAAAXM"]
[Sat Aug 29 05:11:53.901273 2026] [security2:error] [pid 11274:tid 11559] [client 20.104.68.135:32797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.angottiproductions.com"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "apK-eWbX5DA3XO6e_qRTzQAAAXs"]
[Sat Aug 29 05:11:53.910792 2026] [security2:error] [pid 1321:tid 1580] [client 40.83.93.50:9035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/bak.phps"] [unique_id "apK-eWjCPtor9NZ-byT_lQAABpc"]
[Sat Aug 29 05:11:53.942181 2026] [security2:error] [pid 11274:tid 11320] [remote 93.123.109.228:42790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/api/info.php"] [unique_id "apK-eWbX5DA3XO6e_qRT1AABhgc"]
[Sat Aug 29 05:11:53.946855 2026] [security2:error] [pid 1321:tid 1494] [client 68.155.159.216:14161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK-eWjCPtor9NZ-byT_mQAABkI"]
[Sat Aug 29 05:11:53.950425 2026] [security2:error] [pid 11274:tid 11402] [remote 93.123.109.228:42716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/php-info.php"] [unique_id "apK-eWbX5DA3XO6e_qRT1wABcVg"]
[Sat Aug 29 05:11:53.956501 2026] [security2:error] [pid 11274:tid 11434] [remote 40.77.167.35:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.167.77.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantsfans.net"] [uri "/message_board/index.php"] [unique_id "apK-eWbX5DA3XO6e_qRT2gABR3c"]
[Sat Aug 29 05:11:53.987264 2026] [security2:error] [pid 1321:tid 1539] [client 20.220.204.93:59106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/ww.php"] [unique_id "apK-eWjCPtor9NZ-byT_ngAABm8"]
[Sat Aug 29 05:11:53.990143 2026] [security2:error] [pid 11274:tid 11391] [remote 93.123.109.228:42716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/php_info.php"] [unique_id "apK-eWbX5DA3XO6e_qRT4AABcU0"]
[Sat Aug 29 05:11:53.998186 2026] [security2:error] [pid 11274:tid 11444] [client 40.83.93.50:9061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/wp-contentt.php"] [unique_id "apK-eWbX5DA3XO6e_qRT4wAAAQo"]
[Sat Aug 29 05:11:53.999872 2026] [security2:error] [pid 11274:tid 11489] [client 20.100.175.163:22143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-admin/css/about.php"] [unique_id "apK-eWbX5DA3XO6e_qRT5QAAATY"]
[Sat Aug 29 05:11:53.999877 2026] [security2:error] [pid 11274:tid 11468] [client 20.104.18.15:37761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/x.php"] [unique_id "apK-eWbX5DA3XO6e_qRT5AAAASI"]
[Sat Aug 29 05:11:54.001909 2026] [security2:error] [pid 11274:tid 11419] [remote 93.123.109.228:42716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/php.php"] [unique_id "apK-embX5DA3XO6e_qRT5gABcWk"]
[Sat Aug 29 05:11:54.005411 2026] [security2:error] [pid 11274:tid 11515] [client 20.104.49.130:36044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/mac.php"] [unique_id "apK-embX5DA3XO6e_qRT5wAAAVA"]
[Sat Aug 29 05:11:54.010279 2026] [security2:error] [pid 11274:tid 11477] [client 114.119.157.189:29049] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.classiclightingusa.com"] [uri "/catalog/products_new.php/osCsid/1b95c54ec96e6030187a2502ebdebe05"] [unique_id "apK-embX5DA3XO6e_qRT6gAAASs"], referer: http://www.classiclightingusa.com/catalog/index.php/cPath/42/osCsid/1b95c54ec96e6030187a2502ebdebe05
[Sat Aug 29 05:11:54.018737 2026] [security2:error] [pid 1321:tid 1604] [client 20.104.104.62:7113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/msy.php"] [unique_id "apK-emjCPtor9NZ-byT_owAABq8"]
[Sat Aug 29 05:11:54.020545 2026] [security2:error] [pid 11274:tid 11540] [client 20.104.104.62:27110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "waysidebaptistmission.lifesosweet.com"] [uri "/term.php"] [unique_id "apK-embX5DA3XO6e_qRT6wAAAWk"]
[Sat Aug 29 05:11:54.025279 2026] [security2:error] [pid 1321:tid 1502] [client 40.83.93.50:3945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/Njima.php"] [unique_id "apK-emjCPtor9NZ-byT_pQAABko"]
[Sat Aug 29 05:11:54.026127 2026] [security2:error] [pid 1321:tid 1506] [client 20.197.61.180:1955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/global.php"] [unique_id "apK-emjCPtor9NZ-byT_pgAABk4"]
[Sat Aug 29 05:11:54.026471 2026] [security2:error] [pid 1321:tid 1556] [client 20.104.104.62:40199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-content/a.php"] [unique_id "apK-emjCPtor9NZ-byT_pwAABn8"]
[Sat Aug 29 05:11:54.035688 2026] [security2:error] [pid 11274:tid 11451] [client 20.104.104.62:34724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "zeeksignin.com"] [uri "/pp.php"] [unique_id "apK-embX5DA3XO6e_qRT7AAAARE"]
[Sat Aug 29 05:11:54.044622 2026] [security2:error] [pid 11274:tid 11403] [remote 93.123.109.228:42790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/api/phpinfo.php"] [unique_id "apK-embX5DA3XO6e_qRT7QABhlk"]
[Sat Aug 29 05:11:54.044928 2026] [security2:error] [pid 1321:tid 1567] [client 20.151.200.44:62494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/exec.php"] [unique_id "apK-emjCPtor9NZ-byT_qAAABoo"]
[Sat Aug 29 05:11:54.045954 2026] [security2:error] [pid 11274:tid 11558] [client 20.52.41.200:4771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/k.php"] [unique_id "apK-embX5DA3XO6e_qRT7gAAAXo"]
[Sat Aug 29 05:11:54.062027 2026] [security2:error] [pid 1321:tid 1601] [client 158.158.54.35:1440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wk/index.php"] [unique_id "apK-emjCPtor9NZ-byT_qwAABqw"]
[Sat Aug 29 05:11:54.082751 2026] [security2:error] [pid 1321:tid 1561] [client 158.158.54.35:4384] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "ebichili-org.juntoohki.com"] [uri "/1.php"] [unique_id "apK-emjCPtor9NZ-byT_rQAABoQ"]
[Sat Aug 29 05:11:54.082874 2026] [security2:error] [pid 1321:tid 1561] [client 158.158.54.35:4384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/1.php"] [unique_id "apK-emjCPtor9NZ-byT_rQAABoQ"]
[Sat Aug 29 05:11:54.091737 2026] [security2:error] [pid 1321:tid 1565] [client 158.23.147.79:50051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK-emjCPtor9NZ-byT_rwAABog"]
[Sat Aug 29 05:11:54.098462 2026] [security2:error] [pid 11274:tid 11467] [client 20.104.68.135:18031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.angottiproductions.com"] [uri "/wp-admin/includes/about.php"] [unique_id "apK-embX5DA3XO6e_qRT8wAAASE"]
[Sat Aug 29 05:11:54.114051 2026] [security2:error] [pid 11274:tid 11404] [remote 93.123.109.228:42716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/phpinfo.php"] [unique_id "apK-embX5DA3XO6e_qRT9QABfVo"]
[Sat Aug 29 05:11:54.129035 2026] [security2:error] [pid 11274:tid 11475] [client 4.205.62.107:59120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/avim.php"] [unique_id "apK-embX5DA3XO6e_qRT-QAAASk"]
[Sat Aug 29 05:11:54.134479 2026] [security2:error] [pid 1321:tid 1522] [client 20.220.204.93:59068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/w1px.php"] [unique_id "apK-emjCPtor9NZ-byT_swAABl4"]
[Sat Aug 29 05:11:54.153710 2026] [security2:error] [pid 11274:tid 11554] [client 45.148.10.62:48938] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.zow.gui.mybluehost.me"] [uri "/api/.env"] [unique_id "apK-embX5DA3XO6e_qRT_QAAAXY"]
[Sat Aug 29 05:11:54.164538 2026] [security2:error] [pid 11274:tid 11507] [client 20.104.104.62:58712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/siln.php"] [unique_id "apK-embX5DA3XO6e_qRT_wAAAUg"]
[Sat Aug 29 05:11:54.165879 2026] [security2:error] [pid 1321:tid 1581] [client 158.23.147.79:62844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-includes/plugins.php"] [unique_id "apK-emjCPtor9NZ-byT_tgAABpg"]
[Sat Aug 29 05:11:54.172198 2026] [security2:error] [pid 11274:tid 11490] [client 158.158.54.35:22336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-cron.php"] [unique_id "apK-embX5DA3XO6e_qRUAAAAATc"]
[Sat Aug 29 05:11:54.199897 2026] [security2:error] [pid 1321:tid 1594] [client 20.104.18.15:37784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/ssla.php"] [unique_id "apK-emjCPtor9NZ-byT_vAAABqU"]
[Sat Aug 29 05:11:54.210714 2026] [security2:error] [pid 11274:tid 11519] [client 20.151.200.44:62513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/dbc.php"] [unique_id "apK-embX5DA3XO6e_qRUCAAAAVQ"]
[Sat Aug 29 05:11:54.218711 2026] [security2:error] [pid 11274:tid 11479] [client 20.104.104.62:27080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "waysidebaptistmission.lifesosweet.com"] [uri "/wp.php"] [unique_id "apK-embX5DA3XO6e_qRUDQAAASw"]
[Sat Aug 29 05:11:54.227963 2026] [security2:error] [pid 1321:tid 1596] [client 20.104.104.62:64727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/images/sym.php"] [unique_id "apK-emjCPtor9NZ-byT_vwAABqc"]
[Sat Aug 29 05:11:54.258213 2026] [security2:error] [pid 11274:tid 11387] [remote 93.123.109.228:42716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/public/phpinfo.php"] [unique_id "apK-embX5DA3XO6e_qRUEgABh0k"]
[Sat Aug 29 05:11:54.258846 2026] [security2:error] [pid 11274:tid 11469] [client 20.196.209.81:17749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-content/classwithtostring.php"] [unique_id "apK-embX5DA3XO6e_qRUEwAAASM"]
[Sat Aug 29 05:11:54.291988 2026] [security2:error] [pid 1321:tid 1531] [client 20.104.68.135:62299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.angottiproductions.com"] [uri "/wp-admin/js/index.php"] [unique_id "apK-emjCPtor9NZ-byT_xgAABmc"]
[Sat Aug 29 05:11:54.297594 2026] [security2:error] [pid 1321:tid 1492] [client 20.104.104.62:48691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/wp-admin/zwso.php"] [unique_id "apK-emjCPtor9NZ-byT_xwAABkA"]
[Sat Aug 29 05:11:54.302113 2026] [security2:error] [pid 1321:tid 1615] [client 20.104.104.62:52316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/f-401.php"] [unique_id "apK-emjCPtor9NZ-byT_yAAABro"]
[Sat Aug 29 05:11:54.304514 2026] [security2:error] [pid 1321:tid 1553] [client 20.104.104.62:34709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "zeeksignin.com"] [uri "/wp-admin/js/wp-gwasdf2df4.php"] [unique_id "apK-emjCPtor9NZ-byT_yQAABnw"]
[Sat Aug 29 05:11:54.309774 2026] [security2:error] [pid 11274:tid 11511] [client 20.151.200.44:60190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/f2r4.php"] [unique_id "apK-embX5DA3XO6e_qRUIQAAAUw"]
[Sat Aug 29 05:11:54.309812 2026] [security2:error] [pid 11274:tid 11498] [client 20.151.200.44:62271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/7h.php"] [unique_id "apK-embX5DA3XO6e_qRUIAAAAT8"]
[Sat Aug 29 05:11:54.309877 2026] [security2:error] [pid 11274:tid 11459] [client 45.148.10.62:48938] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.zow.gui.mybluehost.me"] [uri "/.env.bak"] [unique_id "apK-embX5DA3XO6e_qRUHwAAARk"]
[Sat Aug 29 05:11:54.313129 2026] [security2:error] [pid 1321:tid 1515] [client 20.220.204.93:52297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/to.php"] [unique_id "apK-emjCPtor9NZ-byT_ygAABlc"]
[Sat Aug 29 05:11:54.355641 2026] [security2:error] [pid 11274:tid 11543] [client 20.52.41.200:2678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/shell.php"] [unique_id "apK-embX5DA3XO6e_qRUJQAAAWs"]
[Sat Aug 29 05:11:54.370234 2026] [security2:error] [pid 1321:tid 1491] [client 20.104.18.15:37787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "apK-emjCPtor9NZ-byT_0AAABj8"]
[Sat Aug 29 05:11:54.374888 2026] [security2:error] [pid 1321:tid 1607] [client 158.23.147.79:44456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK-emjCPtor9NZ-byT_0QAABrI"]
[Sat Aug 29 05:11:54.405235 2026] [security2:error] [pid 11274:tid 11509] [client 20.100.175.163:32783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/f.php"] [unique_id "apK-embX5DA3XO6e_qRULAAAAUo"]
[Sat Aug 29 05:11:54.412808 2026] [security2:error] [pid 1321:tid 1527] [client 20.104.104.62:27043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "waysidebaptistmission.lifesosweet.com"] [uri "/ioxi-o.php"] [unique_id "apK-emjCPtor9NZ-byT_1wAABmM"]
[Sat Aug 29 05:11:54.438385 2026] [security2:error] [pid 1321:tid 1509] [client 40.83.93.50:14950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/install.php"] [unique_id "apK-emjCPtor9NZ-byT_2QAABlE"]
[Sat Aug 29 05:11:54.440287 2026] [security2:error] [pid 1321:tid 1495] [client 20.151.200.44:27166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/exec.php"] [unique_id "apK-emjCPtor9NZ-byT_2gAABkM"]
[Sat Aug 29 05:11:54.441014 2026] [security2:error] [pid 1321:tid 1536] [client 45.148.10.62:48946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "proaider.com"] [uri "/phpinfo.php"] [unique_id "apK-emjCPtor9NZ-byT_2wAABmw"]
[Sat Aug 29 05:11:54.445418 2026] [security2:error] [pid 1321:tid 1542] [client 20.104.104.62:57432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/hq.php"] [unique_id "apK-emjCPtor9NZ-byT_3QAABnI"]
[Sat Aug 29 05:11:54.452048 2026] [security2:error] [pid 11274:tid 11474] [client 20.220.204.93:59067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/thui.php"] [unique_id "apK-embX5DA3XO6e_qRULwAAASg"]
[Sat Aug 29 05:11:54.454031 2026] [security2:error] [pid 1321:tid 1587] [client 158.23.147.79:24498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK-emjCPtor9NZ-byT_3wAABp4"]
[Sat Aug 29 05:11:54.478246 2026] [security2:error] [pid 1321:tid 1593] [client 68.155.159.216:38571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/goat.php"] [unique_id "apK-emjCPtor9NZ-byT_4gAABqQ"]
[Sat Aug 29 05:11:54.479134 2026] [security2:error] [pid 11274:tid 11471] [client 20.240.128.207:18235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/lock360.php"] [unique_id "apK-embX5DA3XO6e_qRUMwAAASU"]
[Sat Aug 29 05:11:54.492645 2026] [security2:error] [pid 11274:tid 11482] [client 20.151.200.44:63728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/wp-wlx.php"] [unique_id "apK-embX5DA3XO6e_qRUOgAAAS8"]
[Sat Aug 29 05:11:54.495422 2026] [security2:error] [pid 11274:tid 11552] [client 158.23.147.79:55241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK-embX5DA3XO6e_qRUOwAAAXQ"]
[Sat Aug 29 05:11:54.495570 2026] [security2:error] [pid 11274:tid 11496] [client 158.23.147.79:62986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK-embX5DA3XO6e_qRUPAAAAT0"]
[Sat Aug 29 05:11:54.495921 2026] [security2:error] [pid 1321:tid 1510] [client 40.83.93.50:8708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/theme.php"] [unique_id "apK-emjCPtor9NZ-byT_5AAABlI"]
[Sat Aug 29 05:11:54.496409 2026] [security2:error] [pid 1321:tid 1514] [client 20.100.175.163:27403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/system_log.php"] [unique_id "apK-emjCPtor9NZ-byT_5QAABlY"]
[Sat Aug 29 05:11:54.505099 2026] [security2:error] [pid 11274:tid 11464] [client 20.52.41.200:5161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/root.php"] [unique_id "apK-embX5DA3XO6e_qRUPgAAAR4"]
[Sat Aug 29 05:11:54.506369 2026] [security2:error] [pid 1321:tid 1612] [client 20.104.104.62:33817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "zeeksignin.com"] [uri "/wp-admin/network/index.php"] [unique_id "apK-emjCPtor9NZ-byT_6AAABrc"]
[Sat Aug 29 05:11:54.509625 2026] [security2:error] [pid 11274:tid 11452] [client 158.158.54.35:1331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/admin.php"] [unique_id "apK-embX5DA3XO6e_qRUPwAAARI"]
[Sat Aug 29 05:11:54.515443 2026] [security2:error] [pid 11274:tid 11563] [client 40.83.93.50:20662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/configs.php"] [unique_id "apK-embX5DA3XO6e_qRUQgAAAX8"]
[Sat Aug 29 05:11:54.516408 2026] [security2:error] [pid 11274:tid 11534] [client 68.155.159.216:56784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/dropdown.php"] [unique_id "apK-embX5DA3XO6e_qRUQwAAAWM"]
[Sat Aug 29 05:11:54.553225 2026] [security2:error] [pid 1321:tid 1550] [client 20.104.68.135:37803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.angottiproductions.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK-emjCPtor9NZ-byT_6gAABnk"]
[Sat Aug 29 05:11:54.554455 2026] [security2:error] [pid 1321:tid 1544] [client 68.155.159.216:62725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/sad/about.php"] [unique_id "apK-emjCPtor9NZ-byT_6wAABnQ"]
[Sat Aug 29 05:11:54.555178 2026] [security2:error] [pid 1321:tid 1583] [client 20.104.18.15:37831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/wp-aothait.php"] [unique_id "apK-emjCPtor9NZ-byT_7AAABpo"]
[Sat Aug 29 05:11:54.557297 2026] [security2:error] [pid 1321:tid 1580] [client 4.205.62.107:64244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/phpsysinfo.php"] [unique_id "apK-emjCPtor9NZ-byT_7QAABpc"]
[Sat Aug 29 05:11:54.565594 2026] [security2:error] [pid 11274:tid 11530] [client 20.240.128.207:4909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/cv.php"] [unique_id "apK-embX5DA3XO6e_qRUVAAAAV8"]
[Sat Aug 29 05:11:54.579386 2026] [proxy_http:error] [pid 1034096:tid 1034230] (70007)The timeout specified has expired: [remote 128.85.72.129:63615] AH01102: error reading status line from remote server 127.0.0.1:8443, referer: https://www.jobindjibouti.com/
[Sat Aug 29 05:11:54.579407 2026] [proxy:error] [pid 1034096:tid 1034230] [remote 128.85.72.129:63615] AH00898: Error reading from remote server returned by /, referer: https://www.jobindjibouti.com/
[Sat Aug 29 05:11:54.585696 2026] [security2:error] [pid 1321:tid 1604] [client 20.220.204.93:59043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/Jcrop.php"] [unique_id "apK-emjCPtor9NZ-byT_7wAABq8"]
[Sat Aug 29 05:11:54.589750 2026] [proxy_http:error] [pid 1034096:tid 1034378] (70007)The timeout specified has expired: [client 127.0.0.1:48556] AH01102: error reading status line from remote server 50.6.92.44:8443, referer: https://www.jobindjibouti.com/
[Sat Aug 29 05:11:54.589771 2026] [proxy:error] [pid 1034096:tid 1034378] [client 127.0.0.1:48556] AH00898: Error reading from remote server returned by /, referer: https://www.jobindjibouti.com/
[Sat Aug 29 05:11:54.592149 2026] [security2:error] [pid 1321:tid 1543] [client 4.205.62.107:61638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/admin-ajax.php"] [unique_id "apK-emjCPtor9NZ-byT_8AAABnM"]
[Sat Aug 29 05:11:54.593321 2026] [security2:error] [pid 1321:tid 1502] [client 20.104.104.62:57451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/mh.php"] [unique_id "apK-emjCPtor9NZ-byT_8QAABko"]
[Sat Aug 29 05:11:54.618919 2026] [security2:error] [pid 11274:tid 11504] [client 158.158.54.35:15594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-block.php"] [unique_id "apK-embX5DA3XO6e_qRUXgAAAUU"]
[Sat Aug 29 05:11:54.642854 2026] [security2:error] [pid 1321:tid 1590] [client 20.104.104.62:20700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/images/shell.php"] [unique_id "apK-emjCPtor9NZ-byT_9QAABqE"]
[Sat Aug 29 05:11:54.643293 2026] [security2:error] [pid 1321:tid 1500] [client 68.155.159.216:49044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK-emjCPtor9NZ-byT_9gAABkg"]
[Sat Aug 29 05:11:54.659940 2026] [security2:error] [pid 1321:tid 1552] [client 20.196.209.81:22904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-content/config.php"] [unique_id "apK-emjCPtor9NZ-byT_-QAABns"]
[Sat Aug 29 05:11:54.689187 2026] [security2:error] [pid 1321:tid 1586] [client 20.48.250.41:25594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/a332.php"] [unique_id "apK-emjCPtor9NZ-byT_-wAABp0"]
[Sat Aug 29 05:11:54.706534 2026] [security2:error] [pid 11274:tid 11444] [client 20.104.104.62:33813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "zeeksignin.com"] [uri "/wp-content/admin-header.php"] [unique_id "apK-embX5DA3XO6e_qRUZQAAAQo"]
[Sat Aug 29 05:11:54.721285 2026] [security2:error] [pid 11274:tid 11451] [client 20.151.200.44:22218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/attack.php"] [unique_id "apK-embX5DA3XO6e_qRUaQAAARE"]
[Sat Aug 29 05:11:54.726950 2026] [security2:error] [pid 11274:tid 11558] [client 20.104.18.15:37811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/wp-includes/index.php"] [unique_id "apK-embX5DA3XO6e_qRUagAAAXo"]
[Sat Aug 29 05:11:54.732072 2026] [security2:error] [pid 11274:tid 11488] [client 20.104.104.62:61820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/f2r4.php"] [unique_id "apK-embX5DA3XO6e_qRUbAAAATU"]
[Sat Aug 29 05:11:54.739432 2026] [security2:error] [pid 11274:tid 11553] [client 20.48.250.41:36403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/Jcrop.php"] [unique_id "apK-embX5DA3XO6e_qRUbwAAAXU"]
[Sat Aug 29 05:11:54.741156 2026] [security2:error] [pid 11274:tid 11467] [client 4.205.62.107:6910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/fun.php"] [unique_id "apK-embX5DA3XO6e_qRUcAAAASE"]
[Sat Aug 29 05:11:54.748276 2026] [security2:error] [pid 1321:tid 1497] [client 4.205.62.107:62994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/xqq.php"] [unique_id "apK-emjCPtor9NZ-byQABgAABkU"]
[Sat Aug 29 05:11:54.750603 2026] [security2:error] [pid 1321:tid 1512] [client 20.104.68.135:62319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.angottiproductions.com"] [uri "/wp-admin/network/admin.php"] [unique_id "apK-emjCPtor9NZ-byQABwAABlQ"]
[Sat Aug 29 05:11:54.767786 2026] [security2:error] [pid 11274:tid 11492] [client 34.169.171.101:49116] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "mail.forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-embX5DA3XO6e_qRUdAAAATk"]
[Sat Aug 29 05:11:54.769895 2026] [security2:error] [pid 1321:tid 1562] [client 20.197.61.180:12907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/update.php"] [unique_id "apK-emjCPtor9NZ-byQADwAABoU"]
[Sat Aug 29 05:11:54.770733 2026] [security2:error] [pid 1321:tid 1603] [client 34.169.171.101:49028] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.forensicengineernj.com"] [uri "/application_default_credentials.json"] [unique_id "apK-emjCPtor9NZ-byQAEQAABq4"]
[Sat Aug 29 05:11:54.772936 2026] [security2:error] [pid 1321:tid 1507] [client 34.169.171.101:49030] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "mail.forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-emjCPtor9NZ-byQAEAAABk8"]
[Sat Aug 29 05:11:54.773045 2026] [security2:error] [pid 11274:tid 11470] [client 68.155.159.216:55119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.angelesforestranch.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-embX5DA3XO6e_qRUeAAAASQ"]
[Sat Aug 29 05:11:54.777816 2026] [security2:error] [pid 1321:tid 1492] [client 34.169.171.101:49056] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "mail.forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-emjCPtor9NZ-byQAFAAABkA"]
[Sat Aug 29 05:11:54.778857 2026] [security2:error] [pid 11274:tid 11555] [client 20.220.204.93:59096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/ws58.php"] [unique_id "apK-embX5DA3XO6e_qRUfAAAAXc"]
[Sat Aug 29 05:11:54.780009 2026] [security2:error] [pid 1321:tid 1609] [client 34.169.171.101:49178] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/dev/.env"] [unique_id "apK-emjCPtor9NZ-byQAGQAABrQ"]
[Sat Aug 29 05:11:54.780247 2026] [security2:error] [pid 1321:tid 1598] [client 34.169.171.101:49126] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.forensicengineernj.com"] [uri "/secrets.env"] [unique_id "apK-emjCPtor9NZ-byQAHAAABqk"]
[Sat Aug 29 05:11:54.780655 2026] [security2:error] [pid 1321:tid 1490] [client 34.169.171.101:49156] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/backup/.env"] [unique_id "apK-emjCPtor9NZ-byQAGwAABj4"]
[Sat Aug 29 05:11:54.782227 2026] [security2:error] [pid 11274:tid 11505] [client 34.169.171.101:49248] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "mail.forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-embX5DA3XO6e_qRUewAAAUY"]
[Sat Aug 29 05:11:54.783215 2026] [security2:error] [pid 1321:tid 1607] [client 34.169.171.101:49196] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/staging/.env"] [unique_id "apK-emjCPtor9NZ-byQAHwAABrI"]
[Sat Aug 29 05:11:54.783326 2026] [security2:error] [pid 1321:tid 1607] [client 34.169.171.101:49196] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "mail.forensicengineernj.com"] [uri "/staging/.env"] [unique_id "apK-emjCPtor9NZ-byQAHwAABrI"]
[Sat Aug 29 05:11:54.784368 2026] [security2:error] [pid 1321:tid 1402] [remote 93.123.109.228:42940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/.wp-config.php.swp"] [unique_id "apK-emjCPtor9NZ-byQAIAAGRyw"]
[Sat Aug 29 05:11:54.785955 2026] [security2:error] [pid 11274:tid 11570] [client 34.169.171.101:49222] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "mail.forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-embX5DA3XO6e_qRUfQAAAYY"]
[Sat Aug 29 05:11:54.786820 2026] [security2:error] [pid 1321:tid 1584] [client 34.169.171.101:49206] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/production/.env"] [unique_id "apK-emjCPtor9NZ-byQAIwAABps"]
[Sat Aug 29 05:11:54.786886 2026] [security2:error] [pid 11274:tid 11503] [client 20.48.250.41:42967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/06.php"] [unique_id "apK-embX5DA3XO6e_qRUfwAAAUQ"]
[Sat Aug 29 05:11:54.787328 2026] [security2:error] [pid 1321:tid 1588] [client 34.169.171.101:49172] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.forensicengineernj.com"] [uri "/client/.env"] [unique_id "apK-emjCPtor9NZ-byQAJQAABp8"]
[Sat Aug 29 05:11:54.803594 2026] [security2:error] [pid 11274:tid 11518] [client 45.148.10.62:48938] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.zow.gui.mybluehost.me"] [uri "/stripe/.env"] [unique_id "apK-embX5DA3XO6e_qRUhQAAAVM"]
[Sat Aug 29 05:11:54.804184 2026] [security2:error] [pid 11274:tid 11502] [client 34.169.171.101:49116] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-embX5DA3XO6e_qRUgwAAAUM"], referer: https://mail.forensicengineernj.com/config/openai.json
[Sat Aug 29 05:11:54.808515 2026] [security2:error] [pid 1321:tid 1573] [client 34.169.171.101:49030] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-emjCPtor9NZ-byQALgAABpA"], referer: https://mail.forensicengineernj.com/azure-credentials.json
[Sat Aug 29 05:11:54.813874 2026] [security2:error] [pid 1321:tid 1591] [client 34.169.171.101:49056] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-emjCPtor9NZ-byQAMAAABqI"], referer: https://mail.forensicengineernj.com/config/master.key
[Sat Aug 29 05:11:54.814636 2026] [security2:error] [pid 11274:tid 11477] [client 20.52.41.200:2183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/elp.php"] [unique_id "apK-embX5DA3XO6e_qRUjgAAASs"]
[Sat Aug 29 05:11:54.821032 2026] [security2:error] [pid 11274:tid 11535] [client 34.169.171.101:49248] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-embX5DA3XO6e_qRUkQAAAWQ"], referer: https://mail.forensicengineernj.com/.azure/azureProfile.json
[Sat Aug 29 05:11:54.824026 2026] [security2:error] [pid 11274:tid 11511] [client 34.169.171.101:49222] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-embX5DA3XO6e_qRUkgAAAUw"], referer: https://mail.forensicengineernj.com/.github/workflows/deploy.yml
[Sat Aug 29 05:11:54.878088 2026] [security2:error] [pid 11274:tid 11545] [client 20.151.200.44:65185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/file66.php"] [unique_id "apK-embX5DA3XO6e_qRUmAAAAW0"]
[Sat Aug 29 05:11:54.890349 2026] [security2:error] [pid 1321:tid 1601] [client 20.48.250.41:24456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/mar.php"] [unique_id "apK-emjCPtor9NZ-byQAOwAABqw"]
[Sat Aug 29 05:11:54.895762 2026] [security2:error] [pid 1321:tid 1610] [client 20.48.250.41:36137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/ws58.php"] [unique_id "apK-emjCPtor9NZ-byQAPAAABrU"]
[Sat Aug 29 05:11:54.900819 2026] [security2:error] [pid 11274:tid 11448] [client 20.104.104.62:33873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "zeeksignin.com"] [uri "/wp-content/plugins/about.php"] [unique_id "apK-embX5DA3XO6e_qRUmgAAAQ4"]
[Sat Aug 29 05:11:54.900958 2026] [security2:error] [pid 11274:tid 11509] [client 20.104.104.62:58728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/sadis.php"] [unique_id "apK-embX5DA3XO6e_qRUmwAAAUo"]
[Sat Aug 29 05:11:54.914704 2026] [security2:error] [pid 1321:tid 1504] [client 20.100.175.163:25158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/av.php"] [unique_id "apK-emjCPtor9NZ-byQAPQAABkw"]
[Sat Aug 29 05:11:54.920228 2026] [security2:error] [pid 11274:tid 11541] [client 20.220.204.93:59128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/xs.php"] [unique_id "apK-embX5DA3XO6e_qRUpAAAAWo"]
[Sat Aug 29 05:11:54.923239 2026] [security2:error] [pid 11274:tid 11474] [client 20.104.18.15:37854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/file31.php"] [unique_id "apK-embX5DA3XO6e_qRUpQAAASg"]
[Sat Aug 29 05:11:54.936835 2026] [security2:error] [pid 1321:tid 1565] [client 20.151.200.44:27617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/dbc.php"] [unique_id "apK-emjCPtor9NZ-byQAQAAABog"]
[Sat Aug 29 05:11:54.948088 2026] [security2:error] [pid 11274:tid 11538] [client 20.104.68.135:15642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.angottiproductions.com"] [uri "/wp-conflg/function.php"] [unique_id "apK-embX5DA3XO6e_qRUpgAAAWc"]
[Sat Aug 29 05:11:54.949234 2026] [security2:error] [pid 1321:tid 1606] [client 20.52.41.200:4790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/p.php"] [unique_id "apK-emjCPtor9NZ-byQARAAABrE"]
[Sat Aug 29 05:11:54.951476 2026] [security2:error] [pid 1321:tid 1555] [client 20.48.250.41:25587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/ws66.php"] [unique_id "apK-emjCPtor9NZ-byQARQAABn4"]
[Sat Aug 29 05:11:54.954690 2026] [security2:error] [pid 11274:tid 11522] [client 158.158.54.35:16378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/s.php"] [unique_id "apK-embX5DA3XO6e_qRUpwAAAVc"]
[Sat Aug 29 05:11:54.957465 2026] [security2:error] [pid 1321:tid 1590] [client 20.48.250.41:42989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/class.php"] [unique_id "apK-emjCPtor9NZ-byQARgAABqE"]
[Sat Aug 29 05:11:54.960098 2026] [security2:error] [pid 1321:tid 1489] [client 158.158.54.35:31122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/php8.php"] [unique_id "apK-emjCPtor9NZ-byQARwAABj0"]
[Sat Aug 29 05:11:54.967748 2026] [security2:error] [pid 1321:tid 1581] [client 4.205.62.107:32545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/php-info.php"] [unique_id "apK-emjCPtor9NZ-byQASwAABpg"]
[Sat Aug 29 05:11:54.974632 2026] [security2:error] [pid 1321:tid 1552] [client 20.104.104.62:20662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/images/mini.php"] [unique_id "apK-emjCPtor9NZ-byQATgAABns"]
[Sat Aug 29 05:11:54.985978 2026] [security2:error] [pid 11274:tid 11505] [client 40.83.93.50:14966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/colour.php"] [unique_id "apK-embX5DA3XO6e_qRUqQAAAUY"]
[Sat Aug 29 05:11:54.991155 2026] [security2:error] [pid 1321:tid 1549] [client 20.240.128.207:20138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-conflg.php"] [unique_id "apK-emjCPtor9NZ-byQATwAABng"]
[Sat Aug 29 05:11:54.994839 2026] [security2:error] [pid 11274:tid 11498] [client 20.100.175.163:21505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/24.php"] [unique_id "apK-embX5DA3XO6e_qRUqwAAAT8"]
[Sat Aug 29 05:11:55.006152 2026] [security2:error] [pid 1321:tid 1494] [client 40.83.93.50:13969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/alumni_reg.php"] [unique_id "apK-e2jCPtor9NZ-byQAUQAABkI"]
[Sat Aug 29 05:11:55.018376 2026] [security2:error] [pid 1321:tid 1586] [client 20.104.49.130:60956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/new.php"] [unique_id "apK-e2jCPtor9NZ-byQAUgAABp0"]
[Sat Aug 29 05:11:55.020957 2026] [security2:error] [pid 1321:tid 1582] [client 20.104.104.62:27133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "waysidebaptistmission.lifesosweet.com"] [uri "/system_core.php"] [unique_id "apK-e2jCPtor9NZ-byQAUwAABpk"]
[Sat Aug 29 05:11:55.033850 2026] [security2:error] [pid 1321:tid 1497] [client 20.48.250.41:24514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/ccu.php"] [unique_id "apK-e2jCPtor9NZ-byQAVgAABkU"]
[Sat Aug 29 05:11:55.041844 2026] [security2:error] [pid 11274:tid 11449] [client 20.104.49.130:53540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pvillusions.com"] [uri "/read.php"] [unique_id "apK-e2bX5DA3XO6e_qRUuQAAAQ8"]
[Sat Aug 29 05:11:55.045985 2026] [security2:error] [pid 11274:tid 11472] [client 20.151.200.44:65174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/zafir1.php"] [unique_id "apK-e2bX5DA3XO6e_qRUugAAASY"]
[Sat Aug 29 05:11:55.050860 2026] [security2:error] [pid 1321:tid 1597] [client 20.240.128.207:7549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-content/packed.php"] [unique_id "apK-e2jCPtor9NZ-byQAWAAABqg"]
[Sat Aug 29 05:11:55.053550 2026] [security2:error] [pid 11274:tid 11508] [client 20.48.250.41:36367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/xs.php"] [unique_id "apK-e2bX5DA3XO6e_qRUuwAAAUk"]
[Sat Aug 29 05:11:55.058754 2026] [security2:error] [pid 11274:tid 11534] [client 20.220.204.93:59070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/zu.php"] [unique_id "apK-e2bX5DA3XO6e_qRUvAAAAWM"]
[Sat Aug 29 05:11:55.061815 2026] [security2:error] [pid 11274:tid 11516] [client 158.158.54.35:28907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-includes/fonts/admin.php"] [unique_id "apK-e2bX5DA3XO6e_qRUvgAAAVE"]
[Sat Aug 29 05:11:55.062364 2026] [security2:error] [pid 11274:tid 11520] [client 20.196.209.81:17756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-content/cong.php"] [unique_id "apK-e2bX5DA3XO6e_qRUvQAAAVU"]
[Sat Aug 29 05:11:55.066028 2026] [security2:error] [pid 11274:tid 11520] [client 158.23.147.79:43283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apK-e2bX5DA3XO6e_qRUvwAAAVU"]
[Sat Aug 29 05:11:55.068031 2026] [security2:error] [pid 1321:tid 1567] [client 40.83.93.50:3933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/disagraeed.php"] [unique_id "apK-e2jCPtor9NZ-byQAWQAABoo"]
[Sat Aug 29 05:11:55.071146 2026] [security2:error] [pid 11274:tid 11551] [client 20.104.104.62:52239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/xcre1.php"] [unique_id "apK-e2bX5DA3XO6e_qRUwAAAAXM"]
[Sat Aug 29 05:11:55.082111 2026] [security2:error] [pid 11274:tid 11559] [client 20.104.18.15:37863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/dk.php"] [unique_id "apK-e2bX5DA3XO6e_qRUwgAAAXs"]
[Sat Aug 29 05:11:55.091333 2026] [security2:error] [pid 1321:tid 1523] [client 52.139.37.240:54181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.filmcleaner.com"] [uri "/aged.php"] [unique_id "apK-e2jCPtor9NZ-byQAXAAABl8"]
[Sat Aug 29 05:11:55.101595 2026] [security2:error] [pid 11274:tid 11504] [client 20.48.250.41:42995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/8.php"] [unique_id "apK-e2bX5DA3XO6e_qRUxAAAAUU"]
[Sat Aug 29 05:11:55.106396 2026] [security2:error] [pid 11274:tid 11489] [client 20.151.200.44:23562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/wp-gzone.php"] [unique_id "apK-e2bX5DA3XO6e_qRUyAAAATY"]
[Sat Aug 29 05:11:55.126637 2026] [security2:error] [pid 1321:tid 1553] [client 20.48.250.41:25563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/ws68.php"] [unique_id "apK-e2jCPtor9NZ-byQAXgAABnw"]
[Sat Aug 29 05:11:55.144633 2026] [security2:error] [pid 11274:tid 11536] [client 20.104.68.135:37789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.angottiproductions.com"] [uri "/wp-content/classwithtostring.php"] [unique_id "apK-e2bX5DA3XO6e_qRUzwAAAWU"]
[Sat Aug 29 05:11:55.178187 2026] [security2:error] [pid 1321:tid 1609] [client 20.104.104.62:48610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/Contrller.php"] [unique_id "apK-e2jCPtor9NZ-byQAYwAABrQ"]
[Sat Aug 29 05:11:55.180428 2026] [security2:error] [pid 11274:tid 11451] [client 20.104.104.62:33828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "zeeksignin.com"] [uri "/wp-content/themes/about.php"] [unique_id "apK-e2bX5DA3XO6e_qRU0wAAARE"]
[Sat Aug 29 05:11:55.192665 2026] [security2:error] [pid 11274:tid 11470] [client 20.48.250.41:36356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/zu.php"] [unique_id "apK-e2bX5DA3XO6e_qRU1QAAASQ"]
[Sat Aug 29 05:11:55.212944 2026] [security2:error] [pid 11274:tid 11507] [client 20.104.49.130:63537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.timportlock.net"] [uri "/images.php"] [unique_id "apK-e2bX5DA3XO6e_qRU1wAAAUg"]
[Sat Aug 29 05:11:55.223896 2026] [security2:error] [pid 1321:tid 1527] [client 20.48.250.41:24529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/ak.php"] [unique_id "apK-e2jCPtor9NZ-byQAZgAABmM"]
[Sat Aug 29 05:11:55.231285 2026] [security2:error] [pid 1321:tid 1612] [client 68.155.159.216:23399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/.well-knownold/index.php"] [unique_id "apK-e2jCPtor9NZ-byQAaAAABrc"]
[Sat Aug 29 05:11:55.234383 2026] [security2:error] [pid 1321:tid 1559] [client 20.48.250.41:42903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/0x0x.php"] [unique_id "apK-e2jCPtor9NZ-byQAaQAABoI"]
[Sat Aug 29 05:11:55.242155 2026] [security2:error] [pid 1321:tid 1564] [client 20.220.204.93:59080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/lanka.php"] [unique_id "apK-e2jCPtor9NZ-byQAagAABoc"]
[Sat Aug 29 05:11:55.263144 2026] [security2:error] [pid 11274:tid 11513] [client 20.104.49.130:57661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/dragonshell.php"] [unique_id "apK-e2bX5DA3XO6e_qRU4AAAAU4"]
[Sat Aug 29 05:11:55.268023 2026] [security2:error] [pid 1321:tid 1508] [client 20.104.18.15:37793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/ta.php"] [unique_id "apK-e2jCPtor9NZ-byQAbQAABlA"]
[Sat Aug 29 05:11:55.271684 2026] [security2:error] [pid 1321:tid 1506] [client 158.23.147.79:60188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK-e2jCPtor9NZ-byQAbgAABk4"]
[Sat Aug 29 05:11:55.273299 2026] [security2:error] [pid 11274:tid 11488] [client 20.52.41.200:2801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-content/cong.php"] [unique_id "apK-e2bX5DA3XO6e_qRU4gAAATU"]
[Sat Aug 29 05:11:55.276323 2026] [security2:error] [pid 11274:tid 11476] [client 20.151.200.44:63744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/console.php"] [unique_id "apK-e2bX5DA3XO6e_qRU5AAAASo"]
[Sat Aug 29 05:11:55.284694 2026] [security2:error] [pid 1321:tid 1601] [client 4.205.62.107:32541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/nw.php"] [unique_id "apK-e2jCPtor9NZ-byQAbwAABqw"]
[Sat Aug 29 05:11:55.288793 2026] [security2:error] [pid 1321:tid 1592] [client 52.139.37.240:56630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.filmcleaner.com"] [uri "/essexec.php"] [unique_id "apK-e2jCPtor9NZ-byQAcQAABqM"]
[Sat Aug 29 05:11:55.321348 2026] [security2:error] [pid 11274:tid 11545] [client 20.48.250.41:36363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/lanka.php"] [unique_id "apK-e2bX5DA3XO6e_qRU8AAAAW0"]
[Sat Aug 29 05:11:55.380020 2026] [security2:error] [pid 11274:tid 11482] [client 20.48.250.41:42884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/166.php"] [unique_id "apK-e2bX5DA3XO6e_qRU-wAAAS8"]
[Sat Aug 29 05:11:55.391762 2026] [security2:error] [pid 11274:tid 11486] [client 158.158.54.35:19378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/test1.php"] [unique_id "apK-e2bX5DA3XO6e_qRU_QAAATM"]
[Sat Aug 29 05:11:55.391838 2026] [security2:error] [pid 11274:tid 11505] [client 20.48.250.41:24560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/lib.php"] [unique_id "apK-e2bX5DA3XO6e_qRU_gAAAUY"]
[Sat Aug 29 05:11:55.394802 2026] [security2:error] [pid 11274:tid 11565] [client 20.52.41.200:5156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/a1.php"] [unique_id "apK-e2bX5DA3XO6e_qRU_wAAAYE"]
[Sat Aug 29 05:11:55.412458 2026] [security2:error] [pid 11274:tid 11495] [client 20.104.68.135:37772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.angottiproductions.com"] [uri "/wp-content/themes/fitnessbase/404.php"] [unique_id "apK-e2bX5DA3XO6e_qRVAgAAATw"]
[Sat Aug 29 05:11:55.415429 2026] [security2:error] [pid 1321:tid 1549] [client 20.220.204.93:59033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/gettest.php"] [unique_id "apK-e2jCPtor9NZ-byQAfAAABng"]
[Sat Aug 29 05:11:55.420273 2026] [security2:error] [pid 1321:tid 1591] [client 20.100.175.163:35035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/file.php"] [unique_id "apK-e2jCPtor9NZ-byQAfgAABqI"]
[Sat Aug 29 05:11:55.426984 2026] [security2:error] [pid 1321:tid 1594] [client 20.151.200.44:27321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/wp-wlx.php"] [unique_id "apK-e2jCPtor9NZ-byQAfwAABqU"]
[Sat Aug 29 05:11:55.445440 2026] [security2:error] [pid 11274:tid 11452] [client 45.148.10.62:48938] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.zow.gui.mybluehost.me"] [uri "/backend/.env"] [unique_id "apK-e2bX5DA3XO6e_qRVCQAAARI"]
[Sat Aug 29 05:11:55.459710 2026] [security2:error] [pid 11274:tid 11508] [client 20.48.250.41:36128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/gettest.php"] [unique_id "apK-e2bX5DA3XO6e_qRVDAAAAUk"]
[Sat Aug 29 05:11:55.462063 2026] [security2:error] [pid 1321:tid 1566] [client 20.196.209.81:17750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-content/content.php"] [unique_id "apK-e2jCPtor9NZ-byQAgwAABok"]
[Sat Aug 29 05:11:55.466251 2026] [autoindex:error] [pid 11274:tid 11449] [client 158.158.54.35:0] AH01276: Cannot serve directory /home2/charlov7/public_html/dev/.well-known/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:11:55.468424 2026] [security2:error] [pid 11274:tid 11534] [client 20.48.250.41:25541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/users.php"] [unique_id "apK-e2bX5DA3XO6e_qRVDQAAAWM"]
[Sat Aug 29 05:11:55.482986 2026] [security2:error] [pid 11274:tid 11520] [client 158.23.147.79:28040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/packed.php"] [unique_id "apK-e2bX5DA3XO6e_qRVDgAAAVU"]
[Sat Aug 29 05:11:55.486260 2026] [security2:error] [pid 11274:tid 11498] [client 52.139.37.240:54168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.filmcleaner.com"] [uri "/fw.php"] [unique_id "apK-e2bX5DA3XO6e_qRVDwAAAT8"]
[Sat Aug 29 05:11:55.489376 2026] [security2:error] [pid 11274:tid 11541] [client 20.240.128.207:7819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/123.php"] [unique_id "apK-e2bX5DA3XO6e_qRVEQAAAWo"]
[Sat Aug 29 05:11:55.490918 2026] [security2:error] [pid 1321:tid 1586] [client 20.104.18.15:37779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/bo.php"] [unique_id "apK-e2jCPtor9NZ-byQAhgAABp0"]
[Sat Aug 29 05:11:55.492486 2026] [core:error] [pid 11274:tid 11560] [client 20.100.175.163:27403] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:55.492502 2026] [core:error] [pid 11274:tid 11560] [client 20.100.175.163:27403] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:55.507633 2026] [security2:error] [pid 11274:tid 11527] [client 158.158.54.35:15333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/m.php"] [unique_id "apK-e2bX5DA3XO6e_qRVEwAAAVw"]
[Sat Aug 29 05:11:55.512692 2026] [security2:error] [pid 11274:tid 11461] [client 20.151.200.44:65128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/blnux.php"] [unique_id "apK-e2bX5DA3XO6e_qRVGgAAARs"]
[Sat Aug 29 05:11:55.520986 2026] [security2:error] [pid 11274:tid 11535] [client 20.197.61.180:12892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/blog.php"] [unique_id "apK-e2bX5DA3XO6e_qRVIAAAAWQ"]
[Sat Aug 29 05:11:55.551256 2026] [security2:error] [pid 11274:tid 11496] [client 20.240.128.207:8131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-admin/js/index.php"] [unique_id "apK-e2bX5DA3XO6e_qRVJQAAAT0"]
[Sat Aug 29 05:11:55.551300 2026] [security2:error] [pid 11274:tid 11536] [client 20.220.204.93:59063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/35.php"] [unique_id "apK-e2bX5DA3XO6e_qRVJgAAAWU"]
[Sat Aug 29 05:11:55.551334 2026] [security2:error] [pid 11274:tid 11553] [client 158.23.147.79:24552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK-e2bX5DA3XO6e_qRVJAAAAXU"]
[Sat Aug 29 05:11:55.552313 2026] [security2:error] [pid 11274:tid 11568] [client 20.48.250.41:24567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/wp-style.php"] [unique_id "apK-e2bX5DA3XO6e_qRVJwAAAYQ"]
[Sat Aug 29 05:11:55.562845 2026] [security2:error] [pid 1321:tid 1497] [client 158.23.147.79:34782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/dropdown.php"] [unique_id "apK-e2jCPtor9NZ-byQAjQAABkU"]
[Sat Aug 29 05:11:55.574711 2026] [security2:error] [pid 11274:tid 11546] [client 40.83.93.50:17587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/add_actualites.php"] [unique_id "apK-e2bX5DA3XO6e_qRVKQAAAW4"]
[Sat Aug 29 05:11:55.576617 2026] [security2:error] [pid 1321:tid 1409] [remote 93.123.109.228:42940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/_profiler/phpinfo.php"] [unique_id "apK-e2jCPtor9NZ-byQAjgAGRzM"]
[Sat Aug 29 05:11:55.583112 2026] [security2:error] [pid 1321:tid 1519] [client 40.83.93.50:9059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/colors.php"] [unique_id "apK-e2jCPtor9NZ-byQAkAAABls"]
[Sat Aug 29 05:11:55.586744 2026] [security2:error] [pid 11274:tid 11524] [client 195.178.110.101:61416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "naturalkneads.com"] [uri "/wp/index.php"] [unique_id "apK-e2bX5DA3XO6e_qRVKwAAAVk"], referer: https://naturalkneads.com/wp/wp-admin/
[Sat Aug 29 05:11:55.594748 2026] [security2:error] [pid 11274:tid 11492] [client 45.148.10.62:48938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zow.gui.mybluehost.me"] [uri "/test.php"] [unique_id "apK-e2bX5DA3XO6e_qRVLQAAATk"]
[Sat Aug 29 05:11:55.606465 2026] [security2:error] [pid 1321:tid 1429] [remote 45.148.10.62:52838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "proaider.com"] [uri "/wp-login.php"] [unique_id "apK-e2jCPtor9NZ-byQAkQAGq0c"]
[Sat Aug 29 05:11:55.614723 2026] [security2:error] [pid 11274:tid 11569] [client 20.104.68.135:37808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.angottiproductions.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK-e2bX5DA3XO6e_qRVLwAAAYU"]
[Sat Aug 29 05:11:55.632064 2026] [security2:error] [pid 11274:tid 11563] [client 40.83.93.50:8845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/OK.php"] [unique_id "apK-e2bX5DA3XO6e_qRVMAAAAX8"]
[Sat Aug 29 05:11:55.633958 2026] [security2:error] [pid 11274:tid 11539] [client 158.158.54.35:5080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/install.php"] [unique_id "apK-e2bX5DA3XO6e_qRVMQAAAWg"]
[Sat Aug 29 05:11:55.638401 2026] [security2:error] [pid 11274:tid 11451] [client 68.155.159.216:56801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/.well-known/index.php"] [unique_id "apK-e2bX5DA3XO6e_qRVMgAAARE"]
[Sat Aug 29 05:11:55.639244 2026] [security2:error] [pid 1321:tid 1548] [client 20.48.250.41:36394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/35.php"] [unique_id "apK-e2jCPtor9NZ-byQAlQAABnc"]
[Sat Aug 29 05:11:55.658542 2026] [security2:error] [pid 11274:tid 11570] [client 20.104.18.15:37837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/44.php"] [unique_id "apK-e2bX5DA3XO6e_qRVNwAAAYY"]
[Sat Aug 29 05:11:55.660761 2026] [security2:error] [pid 1321:tid 1561] [client 68.155.159.216:62763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/admin.php"] [unique_id "apK-e2jCPtor9NZ-byQAlwAABoQ"]
[Sat Aug 29 05:11:55.669255 2026] [security2:error] [pid 11274:tid 11501] [client 20.151.200.44:63728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/pentest.php"] [unique_id "apK-e2bX5DA3XO6e_qRVPQAAAUI"]
[Sat Aug 29 05:11:55.682468 2026] [security2:error] [pid 1321:tid 1599] [client 52.139.37.240:37888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.filmcleaner.com"] [uri "/zwso.php"] [unique_id "apK-e2jCPtor9NZ-byQAmwAABqo"]
[Sat Aug 29 05:11:55.687514 2026] [security2:error] [pid 11274:tid 11518] [client 20.220.204.93:59057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/maraz.php"] [unique_id "apK-e2bX5DA3XO6e_qRVQAAAAVM"]
[Sat Aug 29 05:11:55.690216 2026] [security2:error] [pid 11274:tid 11481] [client 20.48.250.41:25575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/bzjdlofz.php"] [unique_id "apK-e2bX5DA3XO6e_qRVQQAAAS4"]
[Sat Aug 29 05:11:55.698201 2026] [security2:error] [pid 11274:tid 11502] [client 4.205.62.107:64224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/sgd.php"] [unique_id "apK-e2bX5DA3XO6e_qRVQwAAAUM"]
[Sat Aug 29 05:11:55.727504 2026] [security2:error] [pid 1321:tid 1512] [client 20.52.41.200:2223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK-e2jCPtor9NZ-byQAngAABlQ"]
[Sat Aug 29 05:11:55.729937 2026] [security2:error] [pid 11274:tid 11476] [client 20.48.250.41:24450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/browse.php"] [unique_id "apK-e2bX5DA3XO6e_qRVRwAAASo"]
[Sat Aug 29 05:11:55.733105 2026] [security2:error] [pid 11274:tid 11362] [remote 93.123.109.228:42790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/config.php"] [unique_id "apK-e2bX5DA3XO6e_qRVSAABVjA"]
[Sat Aug 29 05:11:55.738127 2026] [security2:error] [pid 11274:tid 11511] [client 20.104.49.130:51336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/worksec.php"] [unique_id "apK-e2bX5DA3XO6e_qRVSQAAAUw"]
[Sat Aug 29 05:11:55.751195 2026] [security2:error] [pid 11274:tid 11543] [client 4.205.62.107:61728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/ms.php"] [unique_id "apK-e2bX5DA3XO6e_qRVTgAAAWs"]
[Sat Aug 29 05:11:55.820429 2026] [security2:error] [pid 11274:tid 11471] [client 20.104.68.135:62305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.angottiproductions.com"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "apK-e2bX5DA3XO6e_qRVXAAAASU"]
[Sat Aug 29 05:11:55.827077 2026] [security2:error] [pid 11274:tid 11530] [client 20.104.18.15:37762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/h2.php"] [unique_id "apK-e2bX5DA3XO6e_qRVXgAAAV8"]
[Sat Aug 29 05:11:55.828845 2026] [security2:error] [pid 11274:tid 11520] [client 20.220.204.93:59064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/kbfr.php"] [unique_id "apK-e2bX5DA3XO6e_qRVXwAAAVU"]
[Sat Aug 29 05:11:55.837294 2026] [security2:error] [pid 11274:tid 11445] [client 158.158.54.35:14734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/ws.php"] [unique_id "apK-e2bX5DA3XO6e_qRVYAAAAQs"]
[Sat Aug 29 05:11:55.850496 2026] [security2:error] [pid 11274:tid 11519] [client 20.52.41.200:4656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-e2bX5DA3XO6e_qRVYQAAAVQ"]
[Sat Aug 29 05:11:55.850741 2026] [security2:error] [pid 11274:tid 11527] [client 158.23.147.79:7164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/goods.php"] [unique_id "apK-e2bX5DA3XO6e_qRVYgAAAVw"]
[Sat Aug 29 05:11:55.860302 2026] [security2:error] [pid 1321:tid 1606] [client 103.185.242.143:64207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-e2jCPtor9NZ-byQAqgAABrE"]
[Sat Aug 29 05:11:55.860437 2026] [security2:error] [pid 1321:tid 1606] [client 103.185.242.143:64207] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-e2jCPtor9NZ-byQAqgAABrE"]
[Sat Aug 29 05:11:55.864785 2026] [security2:error] [pid 11274:tid 11572] [client 20.196.209.81:22857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-content/core.php"] [unique_id "apK-e2bX5DA3XO6e_qRVZAAAAYg"]
[Sat Aug 29 05:11:55.867046 2026] [security2:error] [pid 11274:tid 11323] [remote 93.123.109.228:42790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/config/aws.php"] [unique_id "apK-e2bX5DA3XO6e_qRVZwABZAo"]
[Sat Aug 29 05:11:55.868188 2026] [security2:error] [pid 11274:tid 11504] [client 20.48.250.41:36123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/maraz.php"] [unique_id "apK-e2bX5DA3XO6e_qRVagAAAUU"]
[Sat Aug 29 05:11:55.868595 2026] [security2:error] [pid 1321:tid 1438] [remote 93.123.109.228:42940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/admin/phpinfo.php"] [unique_id "apK-e2jCPtor9NZ-byQAqwAGPlA"]
[Sat Aug 29 05:11:55.877297 2026] [security2:error] [pid 11274:tid 11454] [client 52.139.37.240:37899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.filmcleaner.com"] [uri "/admin/function.php"] [unique_id "apK-e2bX5DA3XO6e_qRVbAAAARQ"]
[Sat Aug 29 05:11:55.878814 2026] [security2:error] [pid 1321:tid 1595] [client 4.205.62.107:6893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/kedi.php"] [unique_id "apK-e2jCPtor9NZ-byQAsAAABqY"]
[Sat Aug 29 05:11:55.887855 2026] [security2:error] [pid 11274:tid 11467] [client 20.151.200.44:65337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/sadis.php"] [unique_id "apK-e2bX5DA3XO6e_qRVbwAAASE"]
[Sat Aug 29 05:11:55.888200 2026] [security2:error] [pid 11274:tid 11526] [client 4.205.62.107:60993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/a1vx.php"] [unique_id "apK-e2bX5DA3XO6e_qRVcQAAAVs"]
[Sat Aug 29 05:11:55.889559 2026] [security2:error] [pid 11274:tid 11553] [client 20.48.250.41:24506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/zoo.php"] [unique_id "apK-e2bX5DA3XO6e_qRVcgAAAXU"]
[Sat Aug 29 05:11:55.892891 2026] [security2:error] [pid 11274:tid 11423] [remote 93.123.109.228:42790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/config/config.inc.php"] [unique_id "apK-e2bX5DA3XO6e_qRVdgABZG0"]
[Sat Aug 29 05:11:55.900444 2026] [security2:error] [pid 11274:tid 11496] [client 20.48.250.41:25549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/selesai.php"] [unique_id "apK-e2bX5DA3XO6e_qRVeAAAAT0"]
[Sat Aug 29 05:11:55.919126 2026] [security2:error] [pid 1321:tid 1395] [remote 93.123.109.228:42940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/admin_phpinfo.php"] [unique_id "apK-e2jCPtor9NZ-byQAsgAGPiU"]
[Sat Aug 29 05:11:55.925531 2026] [security2:error] [pid 11274:tid 11506] [client 20.100.175.163:28566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK-e2bX5DA3XO6e_qRVfAAAAUc"]
[Sat Aug 29 05:11:55.935702 2026] [security2:error] [pid 11274:tid 11438] [remote 93.123.109.228:42790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/config/config.php"] [unique_id "apK-e2bX5DA3XO6e_qRVfwABZHs"]
[Sat Aug 29 05:11:55.945581 2026] [security2:error] [pid 11274:tid 11514] [client 158.158.54.35:12411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-admin/css/wp-login.php"] [unique_id "apK-e2bX5DA3XO6e_qRVggAAAU8"]
[Sat Aug 29 05:11:55.946799 2026] [security2:error] [pid 11274:tid 11451] [client 20.151.200.44:63108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/6y7t.php"] [unique_id "apK-e2bX5DA3XO6e_qRVgwAAARE"]
[Sat Aug 29 05:11:55.974761 2026] [security2:error] [pid 11274:tid 11330] [remote 216.73.217.8:15439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 8.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo-store.sortthru.com"] [uri "/outdoor-signs/"] [unique_id "apK-e2bX5DA3XO6e_qRViwABShE"]
[Sat Aug 29 05:11:55.979662 2026] [security2:error] [pid 11274:tid 11500] [client 20.104.18.15:37712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/wp-content/mod/adminfuns.php"] [unique_id "apK-e2bX5DA3XO6e_qRVjgAAAUE"]
[Sat Aug 29 05:11:55.981183 2026] [security2:error] [pid 11274:tid 11518] [client 20.220.204.93:59117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/wp-act.php"] [unique_id "apK-e2bX5DA3XO6e_qRVjwAAAVM"]
[Sat Aug 29 05:11:55.985660 2026] [security2:error] [pid 11274:tid 11516] [client 20.100.175.163:4907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK-e2bX5DA3XO6e_qRVkgAAAVE"]
[Sat Aug 29 05:11:55.990942 2026] [security2:error] [pid 11274:tid 11534] [client 20.240.128.207:14361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/yanz.php"] [unique_id "apK-e2bX5DA3XO6e_qRVlAAAAWM"]
[Sat Aug 29 05:11:55.998419 2026] [security2:error] [pid 11274:tid 11347] [remote 93.123.109.228:42790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/config/env.php"] [unique_id "apK-e2bX5DA3XO6e_qRVlwABZCI"]
[Sat Aug 29 05:11:56.006466 2026] [security2:error] [pid 1321:tid 1588] [client 74.7.241.150:60060] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.district3.ca"] [uri "/robots.txt"] [unique_id "apK-fGjCPtor9NZ-byQAuQAGn14"]
[Sat Aug 29 05:11:56.013904 2026] [security2:error] [pid 11274:tid 11404] [remote 103.174.51.103:46006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.51.174.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theswamplands.lindamcvayart.com"] [uri "/wp-login.php"] [unique_id "apK-e2bX5DA3XO6e_qRViAABRFo"]
[Sat Aug 29 05:11:56.014926 2026] [security2:error] [pid 11274:tid 11551] [client 20.104.68.135:32771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.angottiproductions.com"] [uri "/wp-content/uploads/de_fb_uploads/b.php"] [unique_id "apK-fGbX5DA3XO6e_qRVmQAAAXM"]
[Sat Aug 29 05:11:56.037151 2026] [security2:error] [pid 11274:tid 11444] [client 20.240.128.207:1817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/core.php"] [unique_id "apK-fGbX5DA3XO6e_qRVoAAAAQo"]
[Sat Aug 29 05:11:56.037315 2026] [security2:error] [pid 11274:tid 11484] [client 20.48.250.41:25530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/shlo.php"] [unique_id "apK-fGbX5DA3XO6e_qRVnwAAATE"]
[Sat Aug 29 05:11:56.044110 2026] [security2:error] [pid 11274:tid 11543] [client 20.48.250.41:24575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/elp.php"] [unique_id "apK-fGbX5DA3XO6e_qRVoQAAAWs"]
[Sat Aug 29 05:11:56.052346 2026] [security2:error] [pid 11274:tid 11387] [remote 93.123.109.228:42790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/config/module.config.php"] [unique_id "apK-fGbX5DA3XO6e_qRVowABZEk"]
[Sat Aug 29 05:11:56.060264 2026] [security2:error] [pid 11274:tid 11524] [client 40.83.93.50:9041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/Js.php"] [unique_id "apK-fGbX5DA3XO6e_qRVpQAAAVk"]
[Sat Aug 29 05:11:56.060483 2026] [security2:error] [pid 11274:tid 11499] [client 20.151.200.44:63611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/str.php"] [unique_id "apK-fGbX5DA3XO6e_qRVpgAAAUA"]
[Sat Aug 29 05:11:56.062530 2026] [security2:error] [pid 11274:tid 11344] [remote 93.123.109.228:42790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/config/nexmo.php"] [unique_id "apK-fGbX5DA3XO6e_qRVpwABZB8"]
[Sat Aug 29 05:11:56.074201 2026] [security2:error] [pid 11274:tid 11561] [client 52.139.37.240:65343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.filmcleaner.com"] [uri "/zoom1.php"] [unique_id "apK-fGbX5DA3XO6e_qRVqQAAAX0"]
[Sat Aug 29 05:11:56.078495 2026] [security2:error] [pid 11274:tid 11346] [remote 93.123.109.228:42716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/test.php"] [unique_id "apK-fGbX5DA3XO6e_qRVqgABVyE"]
[Sat Aug 29 05:11:56.085898 2026] [security2:error] [pid 11274:tid 11563] [client 158.158.54.35:1323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/ioxi-o.php"] [unique_id "apK-fGbX5DA3XO6e_qRVrQAAAX8"]
[Sat Aug 29 05:11:56.086548 2026] [security2:error] [pid 11274:tid 11475] [client 40.83.93.50:10553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/alfanew.php7"] [unique_id "apK-fGbX5DA3XO6e_qRVrgAAASk"]
[Sat Aug 29 05:11:56.096624 2026] [security2:error] [pid 11274:tid 11565] [client 20.48.250.41:36121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/kbfr.php"] [unique_id "apK-fGbX5DA3XO6e_qRVsQAAAYE"]
[Sat Aug 29 05:11:56.110975 2026] [security2:error] [pid 11274:tid 11495] [client 4.205.62.107:32519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/infos.php"] [unique_id "apK-fGbX5DA3XO6e_qRVtAAAATw"]
[Sat Aug 29 05:11:56.117443 2026] [security2:error] [pid 11274:tid 11483] [client 45.148.10.62:52850] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.zow.gui.mybluehost.me"] [uri "/.env.backup"] [unique_id "apK-fGbX5DA3XO6e_qRVtQAAATA"]
[Sat Aug 29 05:11:56.122106 2026] [security2:error] [pid 11274:tid 11382] [remote 93.123.109.228:42790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/config/stripe.php"] [unique_id "apK-fGbX5DA3XO6e_qRVtgABZEQ"]
[Sat Aug 29 05:11:56.134193 2026] [security2:error] [pid 1321:tid 1414] [remote 93.123.109.228:42940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/api/info.php"] [unique_id "apK-fGjCPtor9NZ-byQAwwAGPjg"]
[Sat Aug 29 05:11:56.135859 2026] [security2:error] [pid 11274:tid 11520] [client 20.104.18.15:37795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/sao.php"] [unique_id "apK-fGbX5DA3XO6e_qRVuAAAAVU"]
[Sat Aug 29 05:11:56.138239 2026] [security2:error] [pid 11274:tid 11445] [client 20.48.250.41:42946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/h2a2ck.php"] [unique_id "apK-fGbX5DA3XO6e_qRVuQAAAQs"]
[Sat Aug 29 05:11:56.167339 2026] [security2:error] [pid 11274:tid 11572] [client 20.151.200.44:65165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/0xs.php"] [unique_id "apK-fGbX5DA3XO6e_qRVvwAAAYg"]
[Sat Aug 29 05:11:56.172809 2026] [security2:error] [pid 1321:tid 1514] [client 158.23.184.117:21801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/.dj/index.php"] [unique_id "apK-fGjCPtor9NZ-byQAyQAABlY"]
[Sat Aug 29 05:11:56.176273 2026] [security2:error] [pid 11274:tid 11456] [client 20.52.41.200:2201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-mail.php"] [unique_id "apK-fGbX5DA3XO6e_qRVxAAAARY"]
[Sat Aug 29 05:11:56.192708 2026] [security2:error] [pid 11274:tid 11540] [client 158.23.147.79:43374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK-fGbX5DA3XO6e_qRVxgAAAWk"]
[Sat Aug 29 05:11:56.208934 2026] [security2:error] [pid 11274:tid 11485] [client 20.104.104.62:58699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/motu.php"] [unique_id "apK-fGbX5DA3XO6e_qRVywAAATI"]
[Sat Aug 29 05:11:56.211435 2026] [security2:error] [pid 1321:tid 1510] [client 20.104.68.135:15663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.angottiproductions.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK-fGjCPtor9NZ-byQAywAABlI"]
[Sat Aug 29 05:11:56.213501 2026] [security2:error] [pid 11274:tid 11496] [client 20.48.250.41:24573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/666.php"] [unique_id "apK-fGbX5DA3XO6e_qRVzgAAAT0"]
[Sat Aug 29 05:11:56.216333 2026] [security2:error] [pid 11274:tid 11461] [client 216.51.171.83:57435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 83.171.51.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-fGbX5DA3XO6e_qRV0AAAARs"]
[Sat Aug 29 05:11:56.216447 2026] [security2:error] [pid 11274:tid 11461] [client 216.51.171.83:57435] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-fGbX5DA3XO6e_qRV0AAAARs"]
[Sat Aug 29 05:11:56.224156 2026] [security2:error] [pid 1321:tid 1574] [client 20.220.204.93:59112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/24.php"] [unique_id "apK-fGjCPtor9NZ-byQAzAAABpE"]
[Sat Aug 29 05:11:56.225501 2026] [security2:error] [pid 11274:tid 11529] [client 57.141.14.59:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/page/5/"] [unique_id "apK-fGbX5DA3XO6e_qRV0QAAAV4"]
[Sat Aug 29 05:11:56.226189 2026] [security2:error] [pid 11274:tid 11451] [client 20.48.250.41:36112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/wp-act.php"] [unique_id "apK-fGbX5DA3XO6e_qRV1QAAARE"]
[Sat Aug 29 05:11:56.226639 2026] [security2:error] [pid 1321:tid 1612] [client 158.23.147.79:49816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/asd.php"] [unique_id "apK-fGjCPtor9NZ-byQAzQAABrc"]
[Sat Aug 29 05:11:56.228612 2026] [security2:error] [pid 11274:tid 11477] [client 40.83.93.50:14012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.simplybelladesign.com"] [uri "/aaa.php"] [unique_id "apK-fGbX5DA3XO6e_qRV1wAAASs"]
[Sat Aug 29 05:11:56.229473 2026] [security2:error] [pid 11274:tid 11502] [client 20.197.61.180:12879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/bypass.php"] [unique_id "apK-fGbX5DA3XO6e_qRV2QAAAUM"]
[Sat Aug 29 05:11:56.231016 2026] [security2:error] [pid 1321:tid 1559] [client 20.48.250.41:25472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/asax.php"] [unique_id "apK-fGjCPtor9NZ-byQAzwAABoI"]
[Sat Aug 29 05:11:56.244482 2026] [security2:error] [pid 1321:tid 1444] [remote 93.123.109.228:42940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/api/phpinfo.php"] [unique_id "apK-fGjCPtor9NZ-byQA0QAGeVY"]
[Sat Aug 29 05:11:56.252070 2026] [security2:error] [pid 1321:tid 1502] [client 20.151.200.44:27588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/attack.php"] [unique_id "apK-fGjCPtor9NZ-byQA0wAABko"]
[Sat Aug 29 05:11:56.267646 2026] [security2:error] [pid 1321:tid 1509] [client 20.196.209.81:12300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-content/db-status.php"] [unique_id "apK-fGjCPtor9NZ-byQA2gAABlE"]
[Sat Aug 29 05:11:56.270319 2026] [security2:error] [pid 11274:tid 11513] [client 45.148.10.62:52850] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.zow.gui.mybluehost.me"] [uri "/.env.old"] [unique_id "apK-fGbX5DA3XO6e_qRV4gAAAU4"]
[Sat Aug 29 05:11:56.271532 2026] [security2:error] [pid 11274:tid 11568] [client 52.139.37.240:65292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.filmcleaner.com"] [uri "/about.php7"] [unique_id "apK-fGbX5DA3XO6e_qRV5AAAAYQ"]
[Sat Aug 29 05:11:56.274187 2026] [security2:error] [pid 1321:tid 1508] [client 68.155.159.216:49081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK-fGjCPtor9NZ-byQA3AAABlA"]
[Sat Aug 29 05:11:56.276397 2026] [autoindex:error] [pid 11274:tid 11470] [client 20.104.104.62:0] AH01276: Cannot serve directory /home1/lifesosw/public_html/whitesands2/wp-content/uploads/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:11:56.290760 2026] [security2:error] [pid 11274:tid 11493] [client 158.158.54.35:23709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-themes.php"] [unique_id "apK-fGbX5DA3XO6e_qRV6gAAATo"]
[Sat Aug 29 05:11:56.304290 2026] [security2:error] [pid 11274:tid 11519] [client 20.52.41.200:4621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/alfa-rex.php7"] [unique_id "apK-fGbX5DA3XO6e_qRV7QAAAVQ"]
[Sat Aug 29 05:11:56.318229 2026] [security2:error] [pid 1321:tid 1543] [client 158.23.184.117:22289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/.info.php"] [unique_id "apK-fGjCPtor9NZ-byQA4AAABnM"]
[Sat Aug 29 05:11:56.341654 2026] [security2:error] [pid 11274:tid 11552] [client 68.155.159.216:23451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK-fGbX5DA3XO6e_qRV8QAAAXQ"]
[Sat Aug 29 05:11:56.345564 2026] [security2:error] [pid 11274:tid 11482] [client 20.104.104.62:27113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "waysidebaptistmission.lifesosweet.com"] [uri "/goods.php"] [unique_id "apK-fGbX5DA3XO6e_qRV8gAAAS8"]
[Sat Aug 29 05:11:56.346392 2026] [security2:error] [pid 1321:tid 1516] [client 20.104.104.62:7095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/wefile.php"] [unique_id "apK-fGjCPtor9NZ-byQA4wAABlg"]
[Sat Aug 29 05:11:56.359644 2026] [security2:error] [pid 11274:tid 11475] [client 20.220.204.93:52239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/155.php"] [unique_id "apK-fGbX5DA3XO6e_qRV-AAAASk"]
[Sat Aug 29 05:11:56.377968 2026] [security2:error] [pid 1321:tid 1564] [client 158.158.54.35:28945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/222.php"] [unique_id "apK-fGjCPtor9NZ-byQA5wAABoc"]
[Sat Aug 29 05:11:56.380697 2026] [security2:error] [pid 11274:tid 11452] [client 20.48.250.41:36360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/24.php"] [unique_id "apK-fGbX5DA3XO6e_qRV_gAAARI"]
[Sat Aug 29 05:11:56.383728 2026] [security2:error] [pid 11274:tid 11483] [client 20.104.49.130:58088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/txets.php"] [unique_id "apK-fGbX5DA3XO6e_qRV_wAAATA"]
[Sat Aug 29 05:11:56.386196 2026] [security2:error] [pid 11274:tid 11543] [client 20.104.104.62:34740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "zeeksignin.com"] [uri "/wp-content/themes/x/bypass.php"] [unique_id "apK-fGbX5DA3XO6e_qRWAQAAAWs"]
[Sat Aug 29 05:11:56.389963 2026] [security2:error] [pid 11274:tid 11530] [client 20.151.200.44:63714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/waf.php"] [unique_id "apK-fGbX5DA3XO6e_qRWBQAAAV8"]
[Sat Aug 29 05:11:56.396616 2026] [security2:error] [pid 1321:tid 1489] [client 158.23.147.79:58923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/goat1.php"] [unique_id "apK-fGjCPtor9NZ-byQA6wAABj0"]
[Sat Aug 29 05:11:56.399427 2026] [security2:error] [pid 11274:tid 11535] [client 20.104.18.15:37814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/dapa.php"] [unique_id "apK-fGbX5DA3XO6e_qRWBwAAAWQ"]
[Sat Aug 29 05:11:56.400721 2026] [security2:error] [pid 11274:tid 11560] [client 20.151.200.44:63000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/mega.php"] [unique_id "apK-fGbX5DA3XO6e_qRWCAAAAXw"]
[Sat Aug 29 05:11:56.404324 2026] [security2:error] [pid 11274:tid 11474] [client 20.104.68.135:62277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.angottiproductions.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK-fGbX5DA3XO6e_qRWCgAAASg"]
[Sat Aug 29 05:11:56.409472 2026] [security2:error] [pid 11274:tid 11570] [client 20.48.250.41:24457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/knmt.php"] [unique_id "apK-fGbX5DA3XO6e_qRWDQAAAYY"]
[Sat Aug 29 05:11:56.417750 2026] [security2:error] [pid 1321:tid 1591] [client 20.48.250.41:25490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/fetch.php"] [unique_id "apK-fGjCPtor9NZ-byQA7QAABqI"]
[Sat Aug 29 05:11:56.423650 2026] [security2:error] [pid 1321:tid 1566] [client 20.48.250.41:42970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/error_log.php"] [unique_id "apK-fGjCPtor9NZ-byQA7gAABok"]
[Sat Aug 29 05:11:56.436250 2026] [security2:error] [pid 11274:tid 11450] [client 103.48.146.148:54133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 148.146.48.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK-fGbX5DA3XO6e_qRWFgAAARA"]
[Sat Aug 29 05:11:56.436388 2026] [security2:error] [pid 11274:tid 11450] [client 103.48.146.148:54133] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK-fGbX5DA3XO6e_qRWFgAAARA"]
[Sat Aug 29 05:11:56.440139 2026] [security2:error] [pid 11274:tid 11540] [client 4.205.62.107:60294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/product.php"] [unique_id "apK-fGbX5DA3XO6e_qRWGAAAAWk"]
[Sat Aug 29 05:11:56.450895 2026] [security2:error] [pid 1321:tid 1506] [client 20.100.175.163:32772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/gmo.php"] [unique_id "apK-fGjCPtor9NZ-byQA8wAABk4"]
[Sat Aug 29 05:11:56.463942 2026] [security2:error] [pid 11274:tid 11456] [client 158.23.184.117:21672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/.trash7206/index.php"] [unique_id "apK-fGbX5DA3XO6e_qRWGgAAARY"]
[Sat Aug 29 05:11:56.486185 2026] [security2:error] [pid 1321:tid 1594] [client 52.139.37.240:53884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.filmcleaner.com"] [uri "/cron.php"] [unique_id "apK-fGjCPtor9NZ-byQA9wAABqU"]
[Sat Aug 29 05:11:56.494083 2026] [security2:error] [pid 11274:tid 11451] [client 20.104.104.62:42110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/EM.php"] [unique_id "apK-fGbX5DA3XO6e_qRWHQAAARE"]
[Sat Aug 29 05:11:56.494844 2026] [security2:error] [pid 11274:tid 11499] [client 20.240.128.207:14384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/autoload_classmap.php"] [unique_id "apK-fGbX5DA3XO6e_qRWHgAAAUA"]
[Sat Aug 29 05:11:56.496841 2026] [core:error] [pid 11274:tid 11484] [client 20.100.175.163:17485] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:56.496858 2026] [core:error] [pid 11274:tid 11484] [client 20.100.175.163:17485] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:56.501675 2026] [security2:error] [pid 1321:tid 1496] [client 4.205.62.107:6108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-fGjCPtor9NZ-byQA-AAABkQ"]
[Sat Aug 29 05:11:56.507834 2026] [security2:error] [pid 11274:tid 11411] [remote 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK-fGbX5DA3XO6e_qRWHwABWWE"]
[Sat Aug 29 05:11:56.508092 2026] [security2:error] [pid 11274:tid 11524] [client 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK-fGbX5DA3XO6e_qRWHwABWWE"]
[Sat Aug 29 05:11:56.531712 2026] [security2:error] [pid 1321:tid 1542] [client 20.220.204.93:50784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/file.php"] [unique_id "apK-fGjCPtor9NZ-byQA_AAABnI"]
[Sat Aug 29 05:11:56.539113 2026] [security2:error] [pid 11274:tid 11554] [client 20.104.104.62:27095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "waysidebaptistmission.lifesosweet.com"] [uri "/bolt.php"] [unique_id "apK-fGbX5DA3XO6e_qRWIQAAAXY"]
[Sat Aug 29 05:11:56.539121 2026] [security2:error] [pid 11274:tid 11449] [client 40.83.93.50:20468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/access.php"] [unique_id "apK-fGbX5DA3XO6e_qRWIgAAAQ8"]
[Sat Aug 29 05:11:56.542543 2026] [security2:error] [pid 11274:tid 11495] [client 20.240.128.207:4921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/admin/function.php"] [unique_id "apK-fGbX5DA3XO6e_qRWJAAAATw"]
[Sat Aug 29 05:11:56.556300 2026] [security2:error] [pid 11274:tid 11527] [client 40.83.93.50:3939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/xmlrpc.php0"] [unique_id "apK-fGbX5DA3XO6e_qRWJQAAAVw"]
[Sat Aug 29 05:11:56.574638 2026] [security2:error] [pid 11274:tid 11518] [client 45.148.10.62:52850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zow.gui.mybluehost.me"] [uri "/.env.php.bak"] [unique_id "apK-fGbX5DA3XO6e_qRWJgAAAVM"]
[Sat Aug 29 05:11:56.576133 2026] [security2:error] [pid 11274:tid 11498] [client 158.158.54.35:15064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/xmlrpc.php"] [unique_id "apK-fGbX5DA3XO6e_qRWJwAAAT8"]
[Sat Aug 29 05:11:56.577897 2026] [security2:error] [pid 11274:tid 11555] [client 20.104.104.62:34315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "zeeksignin.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "apK-fGbX5DA3XO6e_qRWKQAAAXc"]
[Sat Aug 29 05:11:56.585711 2026] [security2:error] [pid 1321:tid 1512] [client 20.104.18.15:37724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/wp-content/l.php"] [unique_id "apK-fGjCPtor9NZ-byQBAgAABlQ"]
[Sat Aug 29 05:11:56.586828 2026] [security2:error] [pid 1321:tid 1560] [client 158.23.147.79:44521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-content/packed.php"] [unique_id "apK-fGjCPtor9NZ-byQBAwAABoM"]
[Sat Aug 29 05:11:56.600234 2026] [security2:error] [pid 1321:tid 1519] [client 20.104.68.135:37787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.angottiproductions.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "apK-fGjCPtor9NZ-byQBBAAABls"]
[Sat Aug 29 05:11:56.602513 2026] [security2:error] [pid 11274:tid 11561] [client 158.23.147.79:55232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK-fGbX5DA3XO6e_qRWOAAAAX0"]
[Sat Aug 29 05:11:56.605512 2026] [security2:error] [pid 11274:tid 11482] [client 20.151.200.44:65201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/bnnof6.php"] [unique_id "apK-fGbX5DA3XO6e_qRWOQAAAS8"]
[Sat Aug 29 05:11:56.609103 2026] [security2:error] [pid 1321:tid 1587] [client 158.23.184.117:61500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/.trash7206/min.php"] [unique_id "apK-fGjCPtor9NZ-byQBBgAABp4"]
[Sat Aug 29 05:11:56.634910 2026] [security2:error] [pid 11274:tid 11486] [client 20.52.41.200:2191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-content.php"] [unique_id "apK-fGbX5DA3XO6e_qRWPgAAATM"]
[Sat Aug 29 05:11:56.635271 2026] [security2:error] [pid 11274:tid 11514] [client 20.104.104.62:52315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/ca4.php"] [unique_id "apK-fGbX5DA3XO6e_qRWPQAAAU8"]
[Sat Aug 29 05:11:56.640877 2026] [security2:error] [pid 1321:tid 1576] [client 68.155.159.216:61254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK-fGjCPtor9NZ-byQBCQAABpM"]
[Sat Aug 29 05:11:56.642442 2026] [security2:error] [pid 11274:tid 11565] [client 20.151.200.44:64625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/xcre1.php"] [unique_id "apK-fGbX5DA3XO6e_qRWQgAAAYE"]
[Sat Aug 29 05:11:56.646092 2026] [http2:warn] [pid 1041789:tid 1042039] [client 57.141.14.98:61724] h2_stream(1041789-34-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:11:56.661392 2026] [security2:error] [pid 11274:tid 11516] [client 158.23.147.79:63850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK-fGbX5DA3XO6e_qRWSQAAAVE"]
[Sat Aug 29 05:11:56.665396 2026] [security2:error] [pid 1321:tid 1597] [client 20.196.209.81:22891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-content/disagrsxr.php"] [unique_id "apK-fGjCPtor9NZ-byQBDAAABqg"]
[Sat Aug 29 05:11:56.666176 2026] [security2:error] [pid 1321:tid 1602] [client 158.23.147.79:24494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-login.php"] [unique_id "apK-fGjCPtor9NZ-byQBDQAABq0"]
[Sat Aug 29 05:11:56.671303 2026] [security2:error] [pid 11274:tid 11512] [client 20.104.104.62:20674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/images/mar.php"] [unique_id "apK-fGbX5DA3XO6e_qRWSgAAAU0"]
[Sat Aug 29 05:11:56.674614 2026] [security2:error] [pid 11274:tid 11541] [client 158.23.147.79:64400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/.well-known/index.php"] [unique_id "apK-fGbX5DA3XO6e_qRWSwAAAWo"]
[Sat Aug 29 05:11:56.676768 2026] [http2:warn] [pid 1018003:tid 1018249] [client 57.141.14.32:35046] h2_stream(1018003-215-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:11:56.686575 2026] [security2:error] [pid 11274:tid 11474] [client 20.104.49.130:60115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.timportlock.net"] [uri "/ano.php"] [unique_id "apK-fGbX5DA3XO6e_qRWTAAAASg"]
[Sat Aug 29 05:11:56.686575 2026] [security2:error] [pid 1321:tid 1531] [client 52.139.37.240:56639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.filmcleaner.com"] [uri "/wp-2019.php"] [unique_id "apK-fGjCPtor9NZ-byQBDgAABmc"]
[Sat Aug 29 05:11:56.739550 2026] [security2:error] [pid 11274:tid 11511] [client 20.104.104.62:27104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "waysidebaptistmission.lifesosweet.com"] [uri "/file.php"] [unique_id "apK-fGbX5DA3XO6e_qRWWQAAAUw"]
[Sat Aug 29 05:11:56.754803 2026] [security2:error] [pid 1321:tid 1595] [client 158.23.184.117:21665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/.well-known//index.php"] [unique_id "apK-fGjCPtor9NZ-byQBDwAABqY"]
[Sat Aug 29 05:11:56.756337 2026] [security2:error] [pid 11274:tid 11448] [client 158.158.54.35:14758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-trackback.php"] [unique_id "apK-fGbX5DA3XO6e_qRWWwAAAQ4"]
[Sat Aug 29 05:11:56.760310 2026] [security2:error] [pid 11274:tid 11475] [client 20.52.41.200:5151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "apK-fGbX5DA3XO6e_qRWXAAAASk"]
[Sat Aug 29 05:11:56.764572 2026] [security2:error] [pid 11274:tid 11502] [client 20.220.204.93:59085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK-fGbX5DA3XO6e_qRWXQAAAUM"]
[Sat Aug 29 05:11:56.768674 2026] [security2:error] [pid 11274:tid 11549] [client 20.104.49.130:64148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/ccc.php"] [unique_id "apK-fGbX5DA3XO6e_qRWYAAAAXE"]
[Sat Aug 29 05:11:56.775721 2026] [security2:error] [pid 1321:tid 1584] [client 20.151.200.44:63703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/ah24.php"] [unique_id "apK-fGjCPtor9NZ-byQBEAAABps"]
[Sat Aug 29 05:11:56.780470 2026] [security2:error] [pid 11274:tid 11488] [client 20.104.18.15:37878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/wp-admin/w.php"] [unique_id "apK-fGbX5DA3XO6e_qRWYgAAATU"]
[Sat Aug 29 05:11:56.782734 2026] [security2:error] [pid 11274:tid 11449] [client 68.155.159.216:62762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-admin/admin.php"] [unique_id "apK-fGbX5DA3XO6e_qRWYwAAAQ8"]
[Sat Aug 29 05:11:56.806407 2026] [security2:error] [pid 11274:tid 11433] [remote 93.123.109.228:42716] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/wp-config.php.bak"] [unique_id "apK-fGbX5DA3XO6e_qRWaAABhHY"]
[Sat Aug 29 05:11:56.806407 2026] [security2:error] [pid 11274:tid 11404] [remote 93.123.109.228:42716] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/wp-config.php.new"] [unique_id "apK-fGbX5DA3XO6e_qRWZwABhFo"]
[Sat Aug 29 05:11:56.806613 2026] [security2:error] [pid 1321:tid 1495] [client 20.104.104.62:52242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/x0x.php"] [unique_id "apK-fGjCPtor9NZ-byQBEQAABkM"]
[Sat Aug 29 05:11:56.810580 2026] [security2:error] [pid 11274:tid 11391] [remote 93.123.109.228:42716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/wp-config.php"] [unique_id "apK-fGbX5DA3XO6e_qRWagABhE0"]
[Sat Aug 29 05:11:56.828900 2026] [security2:error] [pid 11274:tid 11508] [client 158.158.54.35:32208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/mini.php"] [unique_id "apK-fGbX5DA3XO6e_qRWawAAAUk"]
[Sat Aug 29 05:11:56.835627 2026] [security2:error] [pid 11274:tid 11527] [client 4.205.62.107:64260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/fleen.php"] [unique_id "apK-fGbX5DA3XO6e_qRWbgAAAVw"]
[Sat Aug 29 05:11:56.848371 2026] [security2:error] [pid 11274:tid 11317] [remote 93.123.109.228:42716] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/wp-config.php.old"] [unique_id "apK-fGbX5DA3XO6e_qRWcgABFAQ"]
[Sat Aug 29 05:11:56.870136 2026] [security2:error] [pid 11274:tid 11490] [client 20.104.68.135:4252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.angottiproductions.com"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "apK-fGbX5DA3XO6e_qRWegAAATc"]
[Sat Aug 29 05:11:56.892495 2026] [security2:error] [pid 1321:tid 1612] [client 4.205.62.107:61650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/fucku.php"] [unique_id "apK-fGjCPtor9NZ-byQBEgAABrc"]
[Sat Aug 29 05:11:56.894461 2026] [security2:error] [pid 11274:tid 11572] [client 52.139.37.240:37926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.filmcleaner.com"] [uri "/gecko-new.php"] [unique_id "apK-fGbX5DA3XO6e_qRWfwAAAYg"]
[Sat Aug 29 05:11:56.895813 2026] [security2:error] [pid 1321:tid 1490] [client 158.23.147.79:14302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK-fGjCPtor9NZ-byQBEwAABj4"]
[Sat Aug 29 05:11:56.899618 2026] [security2:error] [pid 11274:tid 11494] [client 158.23.184.117:61447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/.well-known/about.php"] [unique_id "apK-fGbX5DA3XO6e_qRWgAAAATs"]
[Sat Aug 29 05:11:56.899853 2026] [security2:error] [pid 1321:tid 1525] [client 20.104.104.62:64745] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.motherssandals.com"] [uri "/images/1.php"] [unique_id "apK-fGjCPtor9NZ-byQBFAAABmE"]
[Sat Aug 29 05:11:56.899937 2026] [security2:error] [pid 1321:tid 1525] [client 20.104.104.62:64745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/images/1.php"] [unique_id "apK-fGjCPtor9NZ-byQBFAAABmE"]
[Sat Aug 29 05:11:56.902275 2026] [security2:error] [pid 1321:tid 1550] [client 20.220.204.93:59126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/06.php"] [unique_id "apK-fGjCPtor9NZ-byQBFQAABnk"]
[Sat Aug 29 05:11:56.905268 2026] [security2:error] [pid 11274:tid 11539] [client 107.145.13.164:53275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 164.13.145.107.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK-fGbX5DA3XO6e_qRWgQAAAWg"]
[Sat Aug 29 05:11:56.905426 2026] [security2:error] [pid 11274:tid 11539] [client 107.145.13.164:53275] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK-fGbX5DA3XO6e_qRWgQAAAWg"]
[Sat Aug 29 05:11:56.914280 2026] [security2:error] [pid 1321:tid 1583] [client 20.151.200.44:62961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/ww3.php"] [unique_id "apK-fGjCPtor9NZ-byQBFwAABpo"]
[Sat Aug 29 05:11:56.942509 2026] [security2:error] [pid 11274:tid 11468] [client 20.100.175.163:32791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/classwithtostring.php"] [unique_id "apK-fGbX5DA3XO6e_qRWhQAAASI"]
[Sat Aug 29 05:11:56.946786 2026] [security2:error] [pid 1321:tid 1592] [client 68.155.159.216:64067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/cong.php"] [unique_id "apK-fGjCPtor9NZ-byQBGAAABqM"]
[Sat Aug 29 05:11:56.953267 2026] [security2:error] [pid 1321:tid 1508] [client 20.104.18.15:37812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/wp-content/k.php"] [unique_id "apK-fGjCPtor9NZ-byQBGQAABlA"]
[Sat Aug 29 05:11:56.959137 2026] [security2:error] [pid 1321:tid 1573] [client 158.23.147.79:7125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK-fGjCPtor9NZ-byQBGwAABpA"]
[Sat Aug 29 05:11:56.969456 2026] [security2:error] [pid 1321:tid 1504] [client 20.104.104.62:58750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.spacecoastkennelclub.org"] [uri "/fesa.php"] [unique_id "apK-fGjCPtor9NZ-byQBHAAABkw"]
[Sat Aug 29 05:11:56.974030 2026] [security2:error] [pid 11274:tid 11483] [client 20.104.104.62:34746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "zeeksignin.com"] [uri "/wp-setting.php"] [unique_id "apK-fGbX5DA3XO6e_qRWiwAAATA"]
[Sat Aug 29 05:11:56.995124 2026] [core:error] [pid 11274:tid 11465] [client 20.100.175.163:26236] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:56.995151 2026] [core:error] [pid 11274:tid 11465] [client 20.100.175.163:26236] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:57.004883 2026] [security2:error] [pid 1321:tid 1514] [client 20.240.128.207:7270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/bi.php"] [unique_id "apK-fWjCPtor9NZ-byQBHwAABlY"]
[Sat Aug 29 05:11:57.005313 2026] [security2:error] [pid 1321:tid 1555] [client 20.151.200.44:27282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/file66.php"] [unique_id "apK-fWjCPtor9NZ-byQBIAAABn4"]
[Sat Aug 29 05:11:57.006681 2026] [security2:error] [pid 1321:tid 1556] [client 20.104.104.62:27016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "waysidebaptistmission.lifesosweet.com"] [uri "/404.php"] [unique_id "apK-fWjCPtor9NZ-byQBIQAABn8"]
[Sat Aug 29 05:11:57.019653 2026] [security2:error] [pid 11274:tid 11518] [client 158.158.54.35:21698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/filemanager.php"] [unique_id "apK-fWbX5DA3XO6e_qRWkAAAAVM"]
[Sat Aug 29 05:11:57.026017 2026] [security2:error] [pid 11274:tid 11474] [client 4.205.62.107:63002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/public/vx.php"] [unique_id "apK-fWbX5DA3XO6e_qRWkQAAASg"]
[Sat Aug 29 05:11:57.027017 2026] [security2:error] [pid 1321:tid 1515] [client 20.197.61.180:1947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/extractable-loader-head.php"] [unique_id "apK-fWjCPtor9NZ-byQBIgAABlc"]
[Sat Aug 29 05:11:57.030973 2026] [security2:error] [pid 11274:tid 11515] [client 4.205.62.107:6322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/oc460l3x.php"] [unique_id "apK-fWbX5DA3XO6e_qRWkgAAAVA"]
[Sat Aug 29 05:11:57.031821 2026] [security2:error] [pid 11274:tid 11479] [client 20.151.200.44:21890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/ztv.php"] [unique_id "apK-fWbX5DA3XO6e_qRWkwAAASw"]
[Sat Aug 29 05:11:57.038932 2026] [security2:error] [pid 11274:tid 11555] [client 40.83.93.50:3905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/content.php"] [unique_id "apK-fWbX5DA3XO6e_qRWlAAAAXc"]
[Sat Aug 29 05:11:57.047834 2026] [security2:error] [pid 11274:tid 11498] [client 20.240.128.207:8200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/admin/index.php"] [unique_id "apK-fWbX5DA3XO6e_qRWlgAAAT8"]
[Sat Aug 29 05:11:57.051193 2026] [security2:error] [pid 1321:tid 1500] [client 20.220.204.93:59114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/class.php"] [unique_id "apK-fWjCPtor9NZ-byQBIwAABkg"]
[Sat Aug 29 05:11:57.053897 2026] [security2:error] [pid 1321:tid 1532] [client 68.155.159.216:14329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK-fWjCPtor9NZ-byQBJAAABmg"]
[Sat Aug 29 05:11:57.055248 2026] [security2:error] [pid 11274:tid 11470] [client 45.148.10.62:52862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zow.gui.mybluehost.me"] [uri "/.env.php"] [unique_id "apK-fWbX5DA3XO6e_qRWmQAAASQ"]
[Sat Aug 29 05:11:57.055497 2026] [security2:error] [pid 1321:tid 1590] [client 68.155.159.216:43977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-fWjCPtor9NZ-byQBJQAABqE"]
[Sat Aug 29 05:11:57.063095 2026] [security2:error] [pid 1321:tid 1502] [client 20.196.209.81:12319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-content/f35.php"] [unique_id "apK-fWjCPtor9NZ-byQBJgAABko"]
[Sat Aug 29 05:11:57.067087 2026] [security2:error] [pid 11274:tid 11535] [client 20.104.68.135:5583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.angottiproductions.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-fWbX5DA3XO6e_qRWmgAAAWQ"]
[Sat Aug 29 05:11:57.091333 2026] [security2:error] [pid 11274:tid 11563] [client 52.139.37.240:38082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.filmcleaner.com"] [uri "/add_actualites.php"] [unique_id "apK-fWbX5DA3XO6e_qRWmwAAAX8"]
[Sat Aug 29 05:11:57.098111 2026] [security2:error] [pid 1321:tid 1509] [client 20.52.41.200:2641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "apK-fWjCPtor9NZ-byQBKQAABlE"]
[Sat Aug 29 05:11:57.106480 2026] [security2:error] [pid 1321:tid 1549] [client 20.104.18.15:37828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/os.php"] [unique_id "apK-fWjCPtor9NZ-byQBKgAABng"]
[Sat Aug 29 05:11:57.114634 2026] [security2:error] [pid 11274:tid 11534] [client 158.23.184.117:61465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK-fWbX5DA3XO6e_qRWnQAAAWM"]
[Sat Aug 29 05:11:57.115420 2026] [security2:error] [pid 1321:tid 1559] [client 40.83.93.50:8769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/classsmtps.php"] [unique_id "apK-fWjCPtor9NZ-byQBKwAABoI"]
[Sat Aug 29 05:11:57.129901 2026] [security2:error] [pid 1321:tid 1596] [client 20.104.18.15:29129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-fWjCPtor9NZ-byQBLQAABqc"]
[Sat Aug 29 05:11:57.162374 2026] [security2:error] [pid 11274:tid 11559] [client 20.104.104.62:33850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "zeeksignin.com"] [uri "/xmlrpc.php"] [unique_id "apK-fWbX5DA3XO6e_qRWoAAAAXs"]
[Sat Aug 29 05:11:57.195857 2026] [security2:error] [pid 11274:tid 11571] [client 93.123.109.228:51970] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK-fWbX5DA3XO6e_qRWqgAAAYc"]
[Sat Aug 29 05:11:57.202894 2026] [security2:error] [pid 11274:tid 11444] [client 68.155.159.216:55053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.angelesforestranch.com"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK-fWbX5DA3XO6e_qRWsAAAAQo"]
[Sat Aug 29 05:11:57.203156 2026] [security2:error] [pid 11274:tid 11568] [client 93.123.109.228:51936] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK-fWbX5DA3XO6e_qRWrwAAAYQ"]
[Sat Aug 29 05:11:57.234267 2026] [security2:error] [pid 11274:tid 11536] [client 20.52.41.200:4627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/upload.php"] [unique_id "apK-fWbX5DA3XO6e_qRWtgAAAWU"]
[Sat Aug 29 05:11:57.235056 2026] [security2:error] [pid 1321:tid 1567] [client 68.155.159.216:21492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/wp-content/themes/too.php"] [unique_id "apK-fWjCPtor9NZ-byQBMQAABoo"]
[Sat Aug 29 05:11:57.247644 2026] [security2:error] [pid 11274:tid 11494] [client 4.205.62.107:28037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/env.php"] [unique_id "apK-fWbX5DA3XO6e_qRWtwAAATs"]
[Sat Aug 29 05:11:57.248009 2026] [security2:error] [pid 1321:tid 1548] [client 20.104.104.62:48911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/Zeiss.php"] [unique_id "apK-fWjCPtor9NZ-byQBMwAABnc"]
[Sat Aug 29 05:11:57.261140 2026] [security2:error] [pid 11274:tid 11526] [client 158.23.184.117:21691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/.well-known/acme-challenge/content.php"] [unique_id "apK-fWbX5DA3XO6e_qRWuwAAAVs"]
[Sat Aug 29 05:11:57.264333 2026] [security2:error] [pid 11274:tid 11425] [remote 93.123.109.228:42790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/info.php"] [unique_id "apK-fWbX5DA3XO6e_qRWvAABFm8"]
[Sat Aug 29 05:11:57.265080 2026] [security2:error] [pid 11274:tid 11425] [remote 93.123.109.228:42790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/infos.php"] [unique_id "apK-fWbX5DA3XO6e_qRWvwABFm8"]
[Sat Aug 29 05:11:57.265143 2026] [security2:error] [pid 11274:tid 11380] [remote 93.123.109.228:42790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/infophp.php"] [unique_id "apK-fWbX5DA3XO6e_qRWvgABFkI"]
[Sat Aug 29 05:11:57.266597 2026] [security2:error] [pid 11274:tid 11501] [client 158.158.54.35:29478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/aa.php"] [unique_id "apK-fWbX5DA3XO6e_qRWwAAAAUI"]
[Sat Aug 29 05:11:57.269795 2026] [security2:error] [pid 11274:tid 11521] [client 93.123.109.228:52034] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(\\\\/\\\\*\\\\!? ?(?:select|grant|delete|insert|drop|alter|replace|truncate|update|create|rename|describe|union|concat|group_concat))" at REQUEST_FILENAME. [file "/opt/mod_security/hg_rules.conf"] [line "1019"] [id "9000042"] [rev "2.2.2"] [msg "SQL Comment Sequence Detected."] [data "/*update"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/*update.cgi*"] [unique_id "apK-fWbX5DA3XO6e_qRWwQAAAVY"]
[Sat Aug 29 05:11:57.278115 2026] [security2:error] [pid 1321:tid 1605] [client 20.104.18.15:37701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/htio.php"] [unique_id "apK-fWjCPtor9NZ-byQBNgAABrA"]
[Sat Aug 29 05:11:57.291512 2026] [security2:error] [pid 11274:tid 11490] [client 52.139.37.240:37911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.filmcleaner.com"] [uri "/browse.php"] [unique_id "apK-fWbX5DA3XO6e_qRWwwAAATc"]
[Sat Aug 29 05:11:57.307352 2026] [security2:error] [pid 1321:tid 1562] [client 158.23.147.79:43687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/dropdown.php"] [unique_id "apK-fWjCPtor9NZ-byQBOQAABoU"]
[Sat Aug 29 05:11:57.309375 2026] [security2:error] [pid 11274:tid 11524] [client 20.104.18.15:29648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-fWbX5DA3XO6e_qRWxgAAAVk"]
[Sat Aug 29 05:11:57.320899 2026] [security2:error] [pid 1321:tid 1587] [client 20.220.204.93:59032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/8.php"] [unique_id "apK-fWjCPtor9NZ-byQBOgAABp4"]
[Sat Aug 29 05:11:57.332600 2026] [security2:error] [pid 1321:tid 1576] [client 158.23.147.79:49835] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webmail.rocworx.com"] [uri "/1.php"] [unique_id "apK-fWjCPtor9NZ-byQBOwAABpM"]
[Sat Aug 29 05:11:57.332714 2026] [security2:error] [pid 1321:tid 1576] [client 158.23.147.79:49835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/1.php"] [unique_id "apK-fWjCPtor9NZ-byQBOwAABpM"]
[Sat Aug 29 05:11:57.338691 2026] [security2:error] [pid 11274:tid 11452] [client 93.123.109.228:51940] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/.env"] [unique_id "apK-fWbX5DA3XO6e_qRWygAAARI"]
[Sat Aug 29 05:11:57.340550 2026] [security2:error] [pid 11274:tid 11513] [client 20.104.68.135:5216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.angottiproductions.com"] [uri "/wp-includes/blocks/buttons/index.php"] [unique_id "apK-fWbX5DA3XO6e_qRWywAAAU4"]
[Sat Aug 29 05:11:57.374738 2026] [security2:error] [pid 11274:tid 11479] [client 93.123.109.228:51942] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/laravel/app/.env"] [unique_id "apK-fWbX5DA3XO6e_qRW0gAAASw"]
[Sat Aug 29 05:11:57.397669 2026] [security2:error] [pid 11274:tid 11558] [client 93.123.109.228:51970] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK-fWbX5DA3XO6e_qRW1QAAAXo"]
[Sat Aug 29 05:11:57.411727 2026] [security2:error] [pid 11274:tid 11492] [client 93.123.109.228:51982] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/.env.backup"] [unique_id "apK-fWbX5DA3XO6e_qRW2gAAATk"]
[Sat Aug 29 05:11:57.415280 2026] [autoindex:error] [pid 11274:tid 11366] [remote 87.58.197.202:19784] AH01276: Cannot serve directory /home3/xnolksmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:11:57.421089 2026] [security2:error] [pid 11274:tid 11540] [client 93.123.109.228:52034] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/.env.bak"] [unique_id "apK-fWbX5DA3XO6e_qRW3AAAAWk"]
[Sat Aug 29 05:11:57.443712 2026] [security2:error] [pid 11274:tid 11545] [client 20.100.175.163:27021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/404.php"] [unique_id "apK-fWbX5DA3XO6e_qRW5AAAAW0"]
[Sat Aug 29 05:11:57.445977 2026] [security2:error] [pid 1321:tid 1490] [client 20.104.18.15:29652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/ap.php"] [unique_id "apK-fWjCPtor9NZ-byQBQgAABj4"]
[Sat Aug 29 05:11:57.454264 2026] [security2:error] [pid 11274:tid 11530] [client 158.23.184.117:22297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK-fWbX5DA3XO6e_qRW5QAAAV8"]
[Sat Aug 29 05:11:57.456766 2026] [security2:error] [pid 11274:tid 11493] [client 158.158.54.35:25797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/222.php"] [unique_id "apK-fWbX5DA3XO6e_qRW5gAAATo"]
[Sat Aug 29 05:11:57.481545 2026] [security2:error] [pid 11274:tid 11534] [client 20.220.204.93:52348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/0x0x.php"] [unique_id "apK-fWbX5DA3XO6e_qRW6AAAAWM"]
[Sat Aug 29 05:11:57.486115 2026] [security2:error] [pid 11274:tid 11468] [client 20.100.175.163:22109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK-fWbX5DA3XO6e_qRW6QAAASI"]
[Sat Aug 29 05:11:57.487370 2026] [security2:error] [pid 1321:tid 1499] [client 158.158.54.35:1432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wp-content/themes/admin.php"] [unique_id "apK-fWjCPtor9NZ-byQBRQAABkc"]
[Sat Aug 29 05:11:57.487761 2026] [security2:error] [pid 1321:tid 1598] [client 20.196.209.81:19497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-content/index.php"] [unique_id "apK-fWjCPtor9NZ-byQBSAAABqk"]
[Sat Aug 29 05:11:57.489525 2026] [security2:error] [pid 11274:tid 11496] [client 52.139.37.240:54172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.filmcleaner.com"] [uri "/contentloader1.php"] [unique_id "apK-fWbX5DA3XO6e_qRW7AAAAT0"]
[Sat Aug 29 05:11:57.505674 2026] [security2:error] [pid 1321:tid 1536] [client 20.240.128.207:7828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/cc.php"] [unique_id "apK-fWjCPtor9NZ-byQBSQAABmw"]
[Sat Aug 29 05:11:57.522972 2026] [security2:error] [pid 11274:tid 11505] [client 213.202.253.4:63345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "timportlock.net"] [uri "/wp-content/schallfuns.php"] [unique_id "apK-fWbX5DA3XO6e_qRW8gAAAUY"], referer: www.google.com
[Sat Aug 29 05:11:57.533719 2026] [security2:error] [pid 11274:tid 11506] [client 20.104.68.135:5593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.angottiproductions.com"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "apK-fWbX5DA3XO6e_qRW9QAAAUc"]
[Sat Aug 29 05:11:57.540891 2026] [security2:error] [pid 11274:tid 11522] [client 158.23.147.79:62816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK-fWbX5DA3XO6e_qRW-AAAAVc"]
[Sat Aug 29 05:11:57.547051 2026] [security2:error] [pid 1321:tid 1580] [client 40.83.93.50:10542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/wxo.php"] [unique_id "apK-fWjCPtor9NZ-byQBTwAABpc"]
[Sat Aug 29 05:11:57.556791 2026] [security2:error] [pid 1321:tid 1526] [client 20.52.41.200:2190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/css/wp-login.php"] [unique_id "apK-fWjCPtor9NZ-byQBUgAABmI"]
[Sat Aug 29 05:11:57.557508 2026] [security2:error] [pid 11274:tid 11512] [client 20.240.128.207:8254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/storage/rip.php"] [unique_id "apK-fWbX5DA3XO6e_qRW_QAAAU0"]
[Sat Aug 29 05:11:57.574252 2026] [security2:error] [pid 1321:tid 1565] [client 20.104.18.15:36960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/dev.php"] [unique_id "apK-fWjCPtor9NZ-byQBUwAABog"]
[Sat Aug 29 05:11:57.575753 2026] [security2:error] [pid 11274:tid 11500] [client 4.205.62.107:28055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/fun.php"] [unique_id "apK-fWbX5DA3XO6e_qRXAAAAAUE"]
[Sat Aug 29 05:11:57.604260 2026] [security2:error] [pid 1321:tid 1501] [client 20.151.200.44:64693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/motu.php"] [unique_id "apK-fWjCPtor9NZ-byQBVAAABkk"]
[Sat Aug 29 05:11:57.616410 2026] [security2:error] [pid 11274:tid 11488] [client 158.23.184.117:21800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/.well-known/acme-challenge/sx.php"] [unique_id "apK-fWbX5DA3XO6e_qRXAgAAATU"]
[Sat Aug 29 05:11:57.629099 2026] [security2:error] [pid 11274:tid 11551] [client 20.104.18.15:29140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/media.php"] [unique_id "apK-fWbX5DA3XO6e_qRXAwAAAXM"]
[Sat Aug 29 05:11:57.640325 2026] [security2:error] [pid 1321:tid 1516] [client 4.205.62.107:6101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-fWjCPtor9NZ-byQBVQAABlg"]
[Sat Aug 29 05:11:57.656703 2026] [security2:error] [pid 11274:tid 11569] [client 40.83.93.50:8762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/contentloader1.php"] [unique_id "apK-fWbX5DA3XO6e_qRXBAAAAYU"]
[Sat Aug 29 05:11:57.676697 2026] [security2:error] [pid 1321:tid 1502] [client 20.151.200.44:62995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/sko.php"] [unique_id "apK-fWjCPtor9NZ-byQBVwAABko"]
[Sat Aug 29 05:11:57.684524 2026] [security2:error] [pid 11274:tid 11539] [client 52.139.37.240:53879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.filmcleaner.com"] [uri "/upfile.php"] [unique_id "apK-fWbX5DA3XO6e_qRXBgAAAWg"]
[Sat Aug 29 05:11:57.690059 2026] [core:error] [pid 11274:tid 11506] [client 20.52.41.200:5130] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:57.690081 2026] [core:error] [pid 11274:tid 11506] [client 20.52.41.200:5130] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:57.703396 2026] [proxy_http:error] [pid 1034096:tid 1034278] (70007)The timeout specified has expired: [client 66.249.70.67:42683] AH01102: error reading status line from remote server 127.0.0.1:8443
[Sat Aug 29 05:11:57.703424 2026] [proxy:error] [pid 1034096:tid 1034278] [client 66.249.70.67:42683] AH00898: Error reading from remote server returned by /robots.txt
[Sat Aug 29 05:11:57.703532 2026] [security2:error] [pid 1321:tid 1489] [client 158.23.147.79:56965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-l0gin.php"] [unique_id "apK-fWjCPtor9NZ-byQBWAAABj0"]
[Sat Aug 29 05:11:57.705595 2026] [security2:error] [pid 1321:tid 1507] [client 158.158.54.35:12374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/c.php"] [unique_id "apK-fWjCPtor9NZ-byQBWQAABk8"]
[Sat Aug 29 05:11:57.706997 2026] [security2:error] [pid 11274:tid 11459] [client 158.23.147.79:60191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/images/index.php"] [unique_id "apK-fWbX5DA3XO6e_qRXCAAAARk"]
[Sat Aug 29 05:11:57.710387 2026] [proxy_http:error] [pid 1041789:tid 1042016] (70007)The timeout specified has expired: [client 127.0.0.1:48722] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:11:57.710404 2026] [proxy:error] [pid 1041789:tid 1042016] [client 127.0.0.1:48722] AH00898: Error reading from remote server returned by /robots.txt
[Sat Aug 29 05:11:57.729124 2026] [security2:error] [pid 1321:tid 1596] [client 20.104.18.15:37882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/gos.php"] [unique_id "apK-fWjCPtor9NZ-byQBXQAABqc"]
[Sat Aug 29 05:11:57.751764 2026] [security2:error] [pid 1321:tid 1496] [client 68.155.159.216:38590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apK-fWjCPtor9NZ-byQBYAAABkQ"]
[Sat Aug 29 05:11:57.755167 2026] [security2:error] [pid 11274:tid 11475] [client 20.197.61.180:1966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/defaults.php"] [unique_id "apK-fWbX5DA3XO6e_qRXCwAAASk"]
[Sat Aug 29 05:11:57.760419 2026] [security2:error] [pid 1321:tid 1581] [client 20.220.204.93:59116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/166.php"] [unique_id "apK-fWjCPtor9NZ-byQBYQAABpg"]
[Sat Aug 29 05:11:57.761763 2026] [security2:error] [pid 1321:tid 1591] [client 158.23.184.117:61446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/.well-known/admin.php"] [unique_id "apK-fWjCPtor9NZ-byQBYgAABqI"]
[Sat Aug 29 05:11:57.769311 2026] [security2:error] [pid 1321:tid 1599] [client 68.155.159.216:1946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK-fWjCPtor9NZ-byQBZAAABqo"]
[Sat Aug 29 05:11:57.769376 2026] [security2:error] [pid 1321:tid 1548] [client 158.23.147.79:63818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/ans.php"] [unique_id "apK-fWjCPtor9NZ-byQBYwAABnc"]
[Sat Aug 29 05:11:57.772752 2026] [security2:error] [pid 11274:tid 11464] [client 158.23.147.79:24391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK-fWbX5DA3XO6e_qRXDAAAAR4"]
[Sat Aug 29 05:11:57.777463 2026] [security2:error] [pid 1321:tid 1523] [client 158.23.147.79:64495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/wp-content/themes/too.php"] [unique_id "apK-fWjCPtor9NZ-byQBZgAABl8"]
[Sat Aug 29 05:11:57.798116 2026] [security2:error] [pid 11274:tid 11513] [client 20.104.68.135:5241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.angottiproductions.com"] [uri "/wp-includes/index.php"] [unique_id "apK-fWbX5DA3XO6e_qRXDwAAAU4"]
[Sat Aug 29 05:11:57.802717 2026] [security2:error] [pid 11274:tid 11541] [client 20.104.18.15:29638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/adminfuns.php"] [unique_id "apK-fWbX5DA3XO6e_qRXEAAAAWo"]
[Sat Aug 29 05:11:57.820053 2026] [security2:error] [pid 1321:tid 1576] [client 20.151.200.44:27300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/zafir1.php"] [unique_id "apK-fWjCPtor9NZ-byQBawAABpM"]
[Sat Aug 29 05:11:57.856189 2026] [security2:error] [pid 1321:tid 1532] [client 180.190.5.40:50631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.5.190.180.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK-fWjCPtor9NZ-byQBeQAABmg"]
[Sat Aug 29 05:11:57.856298 2026] [security2:error] [pid 1321:tid 1532] [client 180.190.5.40:50631] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK-fWjCPtor9NZ-byQBeQAABmg"]
[Sat Aug 29 05:11:57.882500 2026] [security2:error] [pid 11274:tid 11518] [client 52.139.37.240:54178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.filmcleaner.com"] [uri "/form.php"] [unique_id "apK-fWbX5DA3XO6e_qRXGwAAAVM"]
[Sat Aug 29 05:11:57.883413 2026] [security2:error] [pid 1321:tid 1497] [client 20.196.209.81:17779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-content/install.php"] [unique_id "apK-fWjCPtor9NZ-byQBfgAABkU"]
[Sat Aug 29 05:11:57.885911 2026] [security2:error] [pid 11274:tid 11570] [client 103.240.76.112:42854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK-fWbX5DA3XO6e_qRXHAAAAYY"]
[Sat Aug 29 05:11:57.886055 2026] [security2:error] [pid 11274:tid 11570] [client 103.240.76.112:42854] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK-fWbX5DA3XO6e_qRXHAAAAYY"]
[Sat Aug 29 05:11:57.899491 2026] [security2:error] [pid 11274:tid 11530] [client 20.220.204.93:59102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/h2a2ck.php"] [unique_id "apK-fWbX5DA3XO6e_qRXHQAAAV8"]
[Sat Aug 29 05:11:57.900555 2026] [security2:error] [pid 1321:tid 1542] [client 158.158.54.35:23700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/x.php"] [unique_id "apK-fWjCPtor9NZ-byQBggAABnI"]
[Sat Aug 29 05:11:57.903955 2026] [security2:error] [pid 1321:tid 1598] [client 68.155.159.216:62756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK-fWjCPtor9NZ-byQBgwAABqk"]
[Sat Aug 29 05:11:57.905829 2026] [security2:error] [pid 11274:tid 11468] [client 20.104.49.130:64158] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.mcerta.com"] [uri "/1.php"] [unique_id "apK-fWbX5DA3XO6e_qRXHwAAASI"]
[Sat Aug 29 05:11:57.905934 2026] [security2:error] [pid 11274:tid 11468] [client 20.104.49.130:64158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/1.php"] [unique_id "apK-fWbX5DA3XO6e_qRXHwAAASI"]
[Sat Aug 29 05:11:57.907676 2026] [security2:error] [pid 11274:tid 11540] [client 158.23.184.117:61462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/.well-known/api.php"] [unique_id "apK-fWbX5DA3XO6e_qRXIAAAAWk"]
[Sat Aug 29 05:11:57.915196 2026] [security2:error] [pid 11274:tid 11499] [client 20.104.18.15:37742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/132.php"] [unique_id "apK-fWbX5DA3XO6e_qRXIQAAAUA"]
[Sat Aug 29 05:11:57.916347 2026] [http2:warn] [pid 1041789:tid 1042008] [client 57.141.14.71:47512] h2_stream(1041789-37-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:11:57.928193 2026] [security2:error] [pid 11274:tid 11484] [client 93.123.109.228:52050] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/.env.old"] [unique_id "apK-fWbX5DA3XO6e_qRXIgAAATE"]
[Sat Aug 29 05:11:57.937036 2026] [security2:error] [pid 11274:tid 11495] [client 20.100.175.163:27901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/php.php"] [unique_id "apK-fWbX5DA3XO6e_qRXIwAAATw"]
[Sat Aug 29 05:11:57.938820 2026] [security2:error] [pid 1321:tid 1563] [client 93.123.109.228:52040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/.env.php"] [unique_id "apK-fWjCPtor9NZ-byQBhgAABoY"]
[Sat Aug 29 05:11:57.941861 2026] [security2:error] [pid 1321:tid 1615] [client 20.104.18.15:29142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/classwithtostring.php"] [unique_id "apK-fWjCPtor9NZ-byQBhwAABro"]
[Sat Aug 29 05:11:57.943855 2026] [security2:error] [pid 1321:tid 1605] [client 158.158.54.35:15046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wp-admin/css/admin.php"] [unique_id "apK-fWjCPtor9NZ-byQBiAAABrA"]
[Sat Aug 29 05:11:57.948529 2026] [security2:error] [pid 11274:tid 11487] [client 103.214.23.106:8717] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "skarchfrutale.mx"] [uri "/vendor/laravel-filemanager/css/lfm.css"] [unique_id "apK-fWbX5DA3XO6e_qRXJAAAATQ"]
[Sat Aug 29 05:11:57.995667 2026] [security2:error] [pid 11274:tid 11571] [client 4.205.62.107:64979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/upload.form.php"] [unique_id "apK-fWbX5DA3XO6e_qRXKQAAAYc"]
[Sat Aug 29 05:11:57.996940 2026] [security2:error] [pid 11274:tid 11484] [client 20.104.68.135:5628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.angottiproductions.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK-fWbX5DA3XO6e_qRXKgAAATE"]
[Sat Aug 29 05:11:58.002031 2026] [security2:error] [pid 11274:tid 11498] [client 20.100.175.163:22093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/num.php"] [unique_id "apK-fmbX5DA3XO6e_qRXKwAAAT8"]
[Sat Aug 29 05:11:58.004922 2026] [security2:error] [pid 11274:tid 11560] [client 20.240.128.207:21876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/files/index.php"] [unique_id "apK-fmbX5DA3XO6e_qRXLAAAAXw"]
[Sat Aug 29 05:11:58.005554 2026] [security2:error] [pid 11274:tid 11467] [client 158.23.147.79:14320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-includes/content.php"] [unique_id "apK-fmbX5DA3XO6e_qRXLQAAASE"]
[Sat Aug 29 05:11:58.017288 2026] [security2:error] [pid 1321:tid 1531] [client 20.52.41.200:2767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/images/index.php"] [unique_id "apK-fmjCPtor9NZ-byQBiQAABmc"]
[Sat Aug 29 05:11:58.026717 2026] [security2:error] [pid 11274:tid 11489] [client 197.219.150.206:61164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK-fmbX5DA3XO6e_qRXLgAAATY"]
[Sat Aug 29 05:11:58.026882 2026] [security2:error] [pid 11274:tid 11489] [client 197.219.150.206:61164] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK-fmbX5DA3XO6e_qRXLgAAATY"]
[Sat Aug 29 05:11:58.034958 2026] [security2:error] [pid 11274:tid 11536] [client 93.123.109.228:52034] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/.env.swp"] [unique_id "apK-fmbX5DA3XO6e_qRXMAAAAWU"]
[Sat Aug 29 05:11:58.035508 2026] [security2:error] [pid 11274:tid 11469] [client 20.220.204.93:59076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/error_log.php"] [unique_id "apK-fmbX5DA3XO6e_qRXMgAAASM"]
[Sat Aug 29 05:11:58.053566 2026] [security2:error] [pid 11274:tid 11472] [client 158.23.184.117:61482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/.well-known/chosen.php"] [unique_id "apK-fmbX5DA3XO6e_qRXNgAAASY"]
[Sat Aug 29 05:11:58.055788 2026] [security2:error] [pid 1321:tid 1492] [client 20.240.128.207:4897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/zoom1.php"] [unique_id "apK-fmjCPtor9NZ-byQBkAAABkA"]
[Sat Aug 29 05:11:58.057925 2026] [autoindex:error] [pid 11274:tid 11496] [client 34.59.201.159:35534] AH01276: Cannot serve directory /home3/dworogmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:11:58.064678 2026] [security2:error] [pid 1321:tid 1501] [client 158.23.147.79:7042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK-fmjCPtor9NZ-byQBkQAABkk"]
[Sat Aug 29 05:11:58.066691 2026] [security2:error] [pid 11274:tid 11449] [client 20.104.18.15:37715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/v22.php"] [unique_id "apK-fmbX5DA3XO6e_qRXPAAAAQ8"]
[Sat Aug 29 05:11:58.067465 2026] [security2:error] [pid 11274:tid 11521] [client 93.123.109.228:51940] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/.env~"] [unique_id "apK-fmbX5DA3XO6e_qRXOgAAAVY"]
[Sat Aug 29 05:11:58.076238 2026] [security2:error] [pid 11274:tid 11508] [client 4.205.62.107:63968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/error_log.php"] [unique_id "apK-fmbX5DA3XO6e_qRXPgAAAUk"]
[Sat Aug 29 05:11:58.094194 2026] [security2:error] [pid 1321:tid 1515] [client 20.104.18.15:29644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK-fmjCPtor9NZ-byQBkwAABlc"]
[Sat Aug 29 05:11:58.109777 2026] [security2:error] [pid 11274:tid 11572] [client 52.139.37.240:53881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.filmcleaner.com"] [uri "/wp-sigunq.php"] [unique_id "apK-fmbX5DA3XO6e_qRXPwAAAYg"]
[Sat Aug 29 05:11:58.110418 2026] [security2:error] [pid 1321:tid 1528] [client 40.83.93.50:17578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/as.php"] [unique_id "apK-fmjCPtor9NZ-byQBlAAABmQ"]
[Sat Aug 29 05:11:58.150307 2026] [core:error] [pid 11274:tid 11527] [client 20.52.41.200:4958] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:58.150334 2026] [core:error] [pid 11274:tid 11527] [client 20.52.41.200:4958] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:58.154845 2026] [security2:error] [pid 11274:tid 11500] [client 158.158.54.35:15316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/f.php"] [unique_id "apK-fmbX5DA3XO6e_qRXRQAAAUE"]
[Sat Aug 29 05:11:58.160572 2026] [security2:error] [pid 11274:tid 11512] [client 40.83.93.50:14004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/al.php"] [unique_id "apK-fmbX5DA3XO6e_qRXRwAAAU0"]
[Sat Aug 29 05:11:58.162068 2026] [security2:error] [pid 1321:tid 1522] [client 68.155.159.216:14144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/packed.php"] [unique_id "apK-fmjCPtor9NZ-byQBlQAABl4"]
[Sat Aug 29 05:11:58.165527 2026] [security2:error] [pid 1321:tid 1586] [client 4.205.62.107:63009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/log.php"] [unique_id "apK-fmjCPtor9NZ-byQBlgAABp0"]
[Sat Aug 29 05:11:58.183737 2026] [security2:error] [pid 1321:tid 1591] [client 68.155.159.216:43976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-fmjCPtor9NZ-byQBnQAABqI"]
[Sat Aug 29 05:11:58.186631 2026] [security2:error] [pid 1321:tid 1599] [client 4.205.62.107:6288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/drykl.php"] [unique_id "apK-fmjCPtor9NZ-byQBngAABqo"]
[Sat Aug 29 05:11:58.192079 2026] [security2:error] [pid 1321:tid 1489] [client 20.104.68.135:15649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.angottiproductions.com"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "apK-fmjCPtor9NZ-byQBnwAABj0"]
[Sat Aug 29 05:11:58.194372 2026] [security2:error] [pid 1321:tid 1560] [client 20.220.204.93:59012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/403.php"] [unique_id "apK-fmjCPtor9NZ-byQBoAAABoM"]
[Sat Aug 29 05:11:58.198213 2026] [security2:error] [pid 1321:tid 1507] [client 158.23.184.117:21633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/.well-known/config.php"] [unique_id "apK-fmjCPtor9NZ-byQBoQAABk8"]
[Sat Aug 29 05:11:58.220932 2026] [security2:error] [pid 1321:tid 1603] [client 93.123.109.228:52000] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.bak"] [unique_id "apK-fmjCPtor9NZ-byQBpAAABq4"]
[Sat Aug 29 05:11:58.229313 2026] [security2:error] [pid 1321:tid 1576] [client 93.123.109.228:52010] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.old"] [unique_id "apK-fmjCPtor9NZ-byQBpgAABpM"]
[Sat Aug 29 05:11:58.242379 2026] [security2:error] [pid 11274:tid 11549] [client 93.123.109.228:51940] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config~"] [unique_id "apK-fmbX5DA3XO6e_qRXTQAAAXE"]
[Sat Aug 29 05:11:58.274842 2026] [security2:error] [pid 1321:tid 1499] [client 20.104.18.15:29165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/5PJcpMFsD8B.php"] [unique_id "apK-fmjCPtor9NZ-byQBqAAABkc"]
[Sat Aug 29 05:11:58.293607 2026] [security2:error] [pid 11274:tid 11522] [client 20.104.18.15:37847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/wp-activate.php"] [unique_id "apK-fmbX5DA3XO6e_qRXUwAAAVc"]
[Sat Aug 29 05:11:58.310210 2026] [security2:error] [pid 11274:tid 11499] [client 52.139.37.240:38088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.filmcleaner.com"] [uri "/07.php"] [unique_id "apK-fmbX5DA3XO6e_qRXVgAAAUA"]
[Sat Aug 29 05:11:58.314914 2026] [security2:error] [pid 1321:tid 1510] [client 68.155.159.216:55130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.angelesforestranch.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK-fmjCPtor9NZ-byQBqwAABlI"]
[Sat Aug 29 05:11:58.342441 2026] [security2:error] [pid 11274:tid 11551] [client 68.155.159.216:56727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/radio.php"] [unique_id "apK-fmbX5DA3XO6e_qRXWgAAAXM"]
[Sat Aug 29 05:11:58.345457 2026] [security2:error] [pid 11274:tid 11516] [client 158.23.184.117:21777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/.well-known/data.php"] [unique_id "apK-fmbX5DA3XO6e_qRXWwAAAVE"]
[Sat Aug 29 05:11:58.348697 2026] [security2:error] [pid 1321:tid 1512] [client 20.220.204.93:59134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/cytyr.php"] [unique_id "apK-fmjCPtor9NZ-byQBsgAABlQ"]
[Sat Aug 29 05:11:58.356958 2026] [security2:error] [pid 11274:tid 11563] [client 158.158.54.35:19347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/new.php"] [unique_id "apK-fmbX5DA3XO6e_qRXXQAAAX8"]
[Sat Aug 29 05:11:58.376840 2026] [security2:error] [pid 1321:tid 1549] [client 103.215.74.26:65534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.74.215.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.com"] [uri "/wp/index.php"] [unique_id "apK-fmjCPtor9NZ-byQBtgAABng"], referer: https://kglogisticsinc.com/wp/wp-admin/
[Sat Aug 29 05:11:58.390972 2026] [security2:error] [pid 11274:tid 11521] [client 45.148.10.62:52868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zow.gui.mybluehost.me"] [uri "/wp-config.php"] [unique_id "apK-fmbX5DA3XO6e_qRXXwAAAVY"]
[Sat Aug 29 05:11:58.394941 2026] [security2:error] [pid 11274:tid 11539] [client 20.104.49.130:36056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/wp.php"] [unique_id "apK-fmbX5DA3XO6e_qRXYAAAAWg"]
[Sat Aug 29 05:11:58.409300 2026] [security2:error] [pid 11274:tid 11490] [client 4.205.62.107:59121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/xve22.php"] [unique_id "apK-fmbX5DA3XO6e_qRXYwAAATc"]
[Sat Aug 29 05:11:58.410918 2026] [security2:error] [pid 11274:tid 11482] [client 20.104.18.15:29136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK-fmbX5DA3XO6e_qRXZAAAAS8"]
[Sat Aug 29 05:11:58.412745 2026] [security2:error] [pid 11274:tid 11448] [client 158.158.54.35:5879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/adminfuns.php"] [unique_id "apK-fmbX5DA3XO6e_qRXZQAAAQ4"]
[Sat Aug 29 05:11:58.425193 2026] [security2:error] [pid 1321:tid 1601] [client 20.196.209.81:19467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK-fmjCPtor9NZ-byQBvQAABqw"]
[Sat Aug 29 05:11:58.436430 2026] [security2:error] [pid 11274:tid 11503] [client 68.155.159.216:49109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/wp-content/banners/about.php"] [unique_id "apK-fmbX5DA3XO6e_qRXaQAAAUQ"]
[Sat Aug 29 05:11:58.465443 2026] [security2:error] [pid 11274:tid 11475] [client 20.151.200.44:63957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/wefile.php"] [unique_id "apK-fmbX5DA3XO6e_qRXawAAASk"]
[Sat Aug 29 05:11:58.465462 2026] [security2:error] [pid 11274:tid 11513] [client 20.104.68.135:5626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.angottiproductions.com"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "apK-fmbX5DA3XO6e_qRXbAAAAU4"]
[Sat Aug 29 05:11:58.479406 2026] [security2:error] [pid 11274:tid 11527] [client 20.104.18.15:37729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/wp-trackback.php"] [unique_id "apK-fmbX5DA3XO6e_qRXcAAAAVw"]
[Sat Aug 29 05:11:58.481178 2026] [security2:error] [pid 1321:tid 1597] [client 68.155.159.216:23374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK-fmjCPtor9NZ-byQBwAAABqg"]
[Sat Aug 29 05:11:58.482201 2026] [security2:error] [pid 11274:tid 11500] [client 195.178.110.247:10940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.marilynvioletfoundation.org"] [uri "/index.php"] [unique_id "apK-fmbX5DA3XO6e_qRXcgAAAUE"]
[Sat Aug 29 05:11:58.492525 2026] [security2:error] [pid 11274:tid 11572] [client 158.23.184.117:21648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/.well-known/db-status.php"] [unique_id "apK-fmbX5DA3XO6e_qRXdQAAAYg"]
[Sat Aug 29 05:11:58.492702 2026] [security2:error] [pid 11274:tid 11536] [client 20.240.128.207:20148] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "stellarstaffingca.com"] [uri "/1.php7"] [unique_id "apK-fmbX5DA3XO6e_qRXdgAAAWU"]
[Sat Aug 29 05:11:58.492779 2026] [security2:error] [pid 11274:tid 11536] [client 20.240.128.207:20148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/1.php7"] [unique_id "apK-fmbX5DA3XO6e_qRXdgAAAWU"]
[Sat Aug 29 05:11:58.501975 2026] [core:error] [pid 11274:tid 11469] [client 20.100.175.163:10210] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:58.501996 2026] [core:error] [pid 11274:tid 11469] [client 20.100.175.163:10210] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:58.511409 2026] [security2:error] [pid 1321:tid 1543] [client 52.139.37.240:65314] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.filmcleaner.com"] [uri "/c99.php"] [unique_id "apK-fmjCPtor9NZ-byQBwQAABnM"]
[Sat Aug 29 05:11:58.515346 2026] [security2:error] [pid 11274:tid 11507] [client 20.100.175.163:33692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/init.php"] [unique_id "apK-fmbX5DA3XO6e_qRXeQAAAUg"]
[Sat Aug 29 05:11:58.518656 2026] [security2:error] [pid 11274:tid 11545] [client 158.23.147.79:39155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/sad/about.php"] [unique_id "apK-fmbX5DA3XO6e_qRXewAAAW0"]
[Sat Aug 29 05:11:58.534552 2026] [security2:error] [pid 1321:tid 1608] [client 103.171.189.88:55886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-fmjCPtor9NZ-byQBywAABrM"]
[Sat Aug 29 05:11:58.534696 2026] [security2:error] [pid 1321:tid 1608] [client 103.171.189.88:55886] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-fmjCPtor9NZ-byQBywAABrM"]
[Sat Aug 29 05:11:58.561942 2026] [security2:error] [pid 1321:tid 1500] [client 20.220.204.93:52268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/galer.php"] [unique_id "apK-fmjCPtor9NZ-byQBzQAABkg"]
[Sat Aug 29 05:11:58.582837 2026] [security2:error] [pid 1321:tid 1491] [client 20.240.128.207:4921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/txets.php"] [unique_id "apK-fmjCPtor9NZ-byQB1QAABj8"]
[Sat Aug 29 05:11:58.593152 2026] [security2:error] [pid 1321:tid 1544] [client 20.104.18.15:29147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/wsd.php"] [unique_id "apK-fmjCPtor9NZ-byQB2AAABnQ"]
[Sat Aug 29 05:11:58.595028 2026] [security2:error] [pid 11274:tid 11526] [client 20.197.61.180:12919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/post.php"] [unique_id "apK-fmbX5DA3XO6e_qRXggAAAVs"]
[Sat Aug 29 05:11:58.599866 2026] [security2:error] [pid 11274:tid 11543] [client 20.52.41.200:4958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-content/file.php"] [unique_id "apK-fmbX5DA3XO6e_qRXhAAAAWs"]
[Sat Aug 29 05:11:58.601595 2026] [security2:error] [pid 11274:tid 11519] [client 158.158.54.35:32202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/av.php"] [unique_id "apK-fmbX5DA3XO6e_qRXhgAAAVQ"]
[Sat Aug 29 05:11:58.616555 2026] [security2:error] [pid 11274:tid 11514] [client 20.52.41.200:2811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/inputs.php"] [unique_id "apK-fmbX5DA3XO6e_qRXhwAAAU8"]
[Sat Aug 29 05:11:58.621302 2026] [security2:error] [pid 1321:tid 1504] [client 40.83.93.50:6992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/room.php"] [unique_id "apK-fmjCPtor9NZ-byQB2wAABkw"]
[Sat Aug 29 05:11:58.640026 2026] [security2:error] [pid 11274:tid 11522] [client 158.23.184.117:61466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/.well-known/f35.php"] [unique_id "apK-fmbX5DA3XO6e_qRXjAAAAVc"]
[Sat Aug 29 05:11:58.649634 2026] [security2:error] [pid 11274:tid 11553] [client 195.178.110.247:13938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.marilynvioletfoundation.org"] [uri "/index.php"] [unique_id "apK-fmbX5DA3XO6e_qRXkQAAAXU"]
[Sat Aug 29 05:11:58.675370 2026] [security2:error] [pid 11274:tid 11530] [client 68.155.159.216:21451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/sad/about.php"] [unique_id "apK-fmbX5DA3XO6e_qRXlgAAAV8"]
[Sat Aug 29 05:11:58.687717 2026] [security2:error] [pid 11274:tid 11449] [client 20.104.18.15:37703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/pri.php"] [unique_id "apK-fmbX5DA3XO6e_qRXnAAAAQ8"]
[Sat Aug 29 05:11:58.702111 2026] [security2:error] [pid 11274:tid 11454] [client 158.23.147.79:29012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-admin/network/index.php"] [unique_id "apK-fmbX5DA3XO6e_qRXngAAARQ"]
[Sat Aug 29 05:11:58.708856 2026] [security2:error] [pid 11274:tid 11538] [client 52.139.37.240:65284] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.filmcleaner.com"] [uri "/c99.php"] [unique_id "apK-fmbX5DA3XO6e_qRXnwAAAWc"]
[Sat Aug 29 05:11:58.723817 2026] [security2:error] [pid 11274:tid 11511] [client 40.83.93.50:8609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/global.php"] [unique_id "apK-fmbX5DA3XO6e_qRXoQAAAUw"]
[Sat Aug 29 05:11:58.725551 2026] [security2:error] [pid 1321:tid 1507] [client 4.205.62.107:32516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/kedi.php"] [unique_id "apK-fmjCPtor9NZ-byQB4AAABk8"]
[Sat Aug 29 05:11:58.732940 2026] [security2:error] [pid 1321:tid 1562] [client 20.104.18.15:29133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/bulet.php"] [unique_id "apK-fmjCPtor9NZ-byQB4gAABoU"]
[Sat Aug 29 05:11:58.756744 2026] [security2:error] [pid 11274:tid 11452] [client 20.220.204.93:59008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/baixy.php"] [unique_id "apK-fmbX5DA3XO6e_qRXqQAAARI"]
[Sat Aug 29 05:11:58.767300 2026] [security2:error] [pid 1321:tid 1606] [client 20.48.160.90:50012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/about.php"] [unique_id "apK-fmjCPtor9NZ-byQB5AAABrE"]
[Sat Aug 29 05:11:58.772049 2026] [security2:error] [pid 1321:tid 1561] [client 34.169.171.101:34714] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "mail.forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-fmjCPtor9NZ-byQB5QAABoQ"]
[Sat Aug 29 05:11:58.777008 2026] [security2:error] [pid 11274:tid 11480] [client 4.205.62.107:5510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/cloud.php"] [unique_id "apK-fmbX5DA3XO6e_qRXrQAAAS0"]
[Sat Aug 29 05:11:58.786499 2026] [security2:error] [pid 11274:tid 11506] [client 158.23.184.117:21656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK-fmbX5DA3XO6e_qRXrwAAAUc"]
[Sat Aug 29 05:11:58.794487 2026] [security2:error] [pid 11274:tid 11552] [client 34.169.171.101:34730] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "mail.forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-fmbX5DA3XO6e_qRXsgAAAXQ"]
[Sat Aug 29 05:11:58.800652 2026] [security2:error] [pid 11274:tid 11500] [client 34.169.171.101:34766] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "mail.forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-fmbX5DA3XO6e_qRXtQAAAUE"]
[Sat Aug 29 05:11:58.802924 2026] [security2:error] [pid 11274:tid 11512] [client 20.104.68.135:18020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.angottiproductions.com"] [uri "/wp-links-opml.php"] [unique_id "apK-fmbX5DA3XO6e_qRXuAAAAU0"]
[Sat Aug 29 05:11:58.813946 2026] [security2:error] [pid 11274:tid 11501] [client 158.158.54.35:4373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/menu.php"] [unique_id "apK-fmbX5DA3XO6e_qRXugAAAUI"]
[Sat Aug 29 05:11:58.814795 2026] [security2:error] [pid 11274:tid 11445] [client 158.23.147.79:28075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK-fmbX5DA3XO6e_qRXvAAAAQs"]
[Sat Aug 29 05:11:58.817791 2026] [security2:error] [pid 11274:tid 11568] [client 20.196.209.81:22910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-content/languages/chosen.php"] [unique_id "apK-fmbX5DA3XO6e_qRXvgAAAYQ"]
[Sat Aug 29 05:11:58.820081 2026] [security2:error] [pid 11274:tid 11492] [client 34.169.171.101:34802] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.forensicengineernj.com"] [uri "/cgi-sys/404.html"] [unique_id "apK-fmbX5DA3XO6e_qRXwAAAATk"], referer: https://mail.forensicengineernj.com/creds.json
[Sat Aug 29 05:11:58.829085 2026] [security2:error] [pid 1321:tid 1510] [client 158.23.147.79:55273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK-fmjCPtor9NZ-byQB8AAABlI"]
[Sat Aug 29 05:11:58.833308 2026] [security2:error] [pid 11274:tid 11471] [client 34.169.171.101:34730] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-fmbX5DA3XO6e_qRXwgAAASU"], referer: https://mail.forensicengineernj.com/aws-credentials.json
[Sat Aug 29 05:11:58.838104 2026] [security2:error] [pid 11274:tid 11444] [client 34.169.171.101:34766] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-fmbX5DA3XO6e_qRXxAAAAQo"], referer: https://mail.forensicengineernj.com/service_account.json
[Sat Aug 29 05:11:58.855904 2026] [security2:error] [pid 1321:tid 1536] [client 68.155.159.216:61286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK-fmjCPtor9NZ-byQB9AAABmw"]
[Sat Aug 29 05:11:58.863060 2026] [security2:error] [pid 11274:tid 11514] [client 20.104.18.15:37719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/wp_blog_footer.php"] [unique_id "apK-fmbX5DA3XO6e_qRX0AAAAU8"]
[Sat Aug 29 05:11:58.863083 2026] [security2:error] [pid 11274:tid 11490] [client 158.158.54.35:1461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/goods.php"] [unique_id "apK-fmbX5DA3XO6e_qRX0QAAATc"]
[Sat Aug 29 05:11:58.866229 2026] [security2:error] [pid 1321:tid 1550] [client 20.104.18.15:29163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/av.php"] [unique_id "apK-fmjCPtor9NZ-byQB9gAABnk"]
[Sat Aug 29 05:11:58.868527 2026] [security2:error] [pid 1321:tid 1512] [client 68.155.159.216:1736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/log-mama/function.php"] [unique_id "apK-fmjCPtor9NZ-byQB9wAABlQ"]
[Sat Aug 29 05:11:58.874789 2026] [security2:error] [pid 11274:tid 11448] [client 45.148.10.62:52880] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "mail.zow.gui.mybluehost.me"] [uri "/wp-config.php.old"] [unique_id "apK-fmbX5DA3XO6e_qRX0gAAAQ4"]
[Sat Aug 29 05:11:58.876016 2026] [security2:error] [pid 11274:tid 11481] [client 158.23.147.79:62678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/worksec.php"] [unique_id "apK-fmbX5DA3XO6e_qRX0wAAAS4"]
[Sat Aug 29 05:11:58.880183 2026] [security2:error] [pid 1321:tid 1592] [client 158.23.147.79:24525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-admin/images/about.php"] [unique_id "apK-fmjCPtor9NZ-byQB-AAABqM"]
[Sat Aug 29 05:11:58.887998 2026] [security2:error] [pid 11274:tid 11472] [client 158.23.147.79:64459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/radio.php"] [unique_id "apK-fmbX5DA3XO6e_qRX1gAAASY"]
[Sat Aug 29 05:11:58.903442 2026] [security2:error] [pid 1321:tid 1615] [client 52.139.37.240:65291] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.filmcleaner.com"] [uri "/c99.php"] [unique_id "apK-fmjCPtor9NZ-byQB-gAABro"]
[Sat Aug 29 05:11:58.915333 2026] [security2:error] [pid 1321:tid 1531] [client 20.48.160.90:61672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/giodywky.php"] [unique_id "apK-fmjCPtor9NZ-byQB_gAABmc"]
[Sat Aug 29 05:11:58.933687 2026] [security2:error] [pid 11274:tid 11464] [client 158.23.184.117:21695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/.well-known/home.php"] [unique_id "apK-fmbX5DA3XO6e_qRX2QAAAR4"]
[Sat Aug 29 05:11:58.940652 2026] [security2:error] [pid 1321:tid 1612] [client 20.151.200.44:27311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/console.php"] [unique_id "apK-fmjCPtor9NZ-byQCBQAABrc"]
[Sat Aug 29 05:11:58.943885 2026] [security2:error] [pid 1321:tid 1582] [client 20.48.160.90:31424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/wp_xiPu52Ut.php"] [unique_id "apK-fmjCPtor9NZ-byQCBgAABpk"]
[Sat Aug 29 05:11:58.950930 2026] [security2:error] [pid 11274:tid 11554] [client 93.123.109.228:51962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/.wp-config.php.swp"] [unique_id "apK-fmbX5DA3XO6e_qRX2gAAAXY"]
[Sat Aug 29 05:11:58.958058 2026] [security2:error] [pid 1321:tid 1495] [client 20.220.204.93:59105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/ava.php"] [unique_id "apK-fmjCPtor9NZ-byQCCwAABkM"]
[Sat Aug 29 05:11:58.958792 2026] [security2:error] [pid 11274:tid 11488] [client 93.123.109.228:51970] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/ADMIN/.env"] [unique_id "apK-fmbX5DA3XO6e_qRX3QAAATU"]
[Sat Aug 29 05:11:58.964583 2026] [security2:error] [pid 11274:tid 11325] [remote 93.123.109.228:42790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/php-info.php"] [unique_id "apK-fmbX5DA3XO6e_qRX4QABJww"]
[Sat Aug 29 05:11:58.964674 2026] [security2:error] [pid 11274:tid 11449] [client 20.48.160.90:29124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/admin.php/admin.php"] [unique_id "apK-fmbX5DA3XO6e_qRX4AAAAQ8"]
[Sat Aug 29 05:11:58.964759 2026] [security2:error] [pid 11274:tid 11539] [client 93.123.109.228:51940] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/API/.env"] [unique_id "apK-fmbX5DA3XO6e_qRX3wAAAWg"]
[Sat Aug 29 05:11:58.992710 2026] [security2:error] [pid 11274:tid 11524] [client 20.240.128.207:21850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/disagraeosc.php"] [unique_id "apK-fmbX5DA3XO6e_qRX5AAAAVk"]
[Sat Aug 29 05:11:58.995653 2026] [security2:error] [pid 1321:tid 1492] [client 20.104.68.135:37760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.angottiproductions.com"] [uri "/wp-signup.php"] [unique_id "apK-fmjCPtor9NZ-byQCDgAABkA"]
[Sat Aug 29 05:11:59.004267 2026] [core:error] [pid 11274:tid 11535] [client 20.100.175.163:4891] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:59.004291 2026] [core:error] [pid 11274:tid 11535] [client 20.100.175.163:4891] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:11:59.005175 2026] [security2:error] [pid 11274:tid 11559] [client 20.100.175.163:30391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "apK-f2bX5DA3XO6e_qRX5wAAAXs"]
[Sat Aug 29 05:11:59.007910 2026] [security2:error] [pid 1321:tid 1500] [client 68.155.159.216:62747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/classwithtostring.php"] [unique_id "apK-f2jCPtor9NZ-byQCDwAABkg"]
[Sat Aug 29 05:11:59.012855 2026] [security2:error] [pid 11274:tid 11442] [remote 93.123.109.228:42790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/php.php"] [unique_id "apK-f2bX5DA3XO6e_qRX6QABZ38"]
[Sat Aug 29 05:11:59.014160 2026] [security2:error] [pid 11274:tid 11336] [remote 93.123.109.228:42790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/php_info.php"] [unique_id "apK-f2bX5DA3XO6e_qRX6gABZxc"]
[Sat Aug 29 05:11:59.019656 2026] [security2:error] [pid 11274:tid 11511] [client 20.104.18.15:29152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/images.php"] [unique_id "apK-f2bX5DA3XO6e_qRX7AAAAUw"]
[Sat Aug 29 05:11:59.048020 2026] [security2:error] [pid 11274:tid 11541] [client 20.104.18.15:37846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/sushi.php"] [unique_id "apK-f2bX5DA3XO6e_qRX7QAAAWo"]
[Sat Aug 29 05:11:59.060861 2026] [security2:error] [pid 1321:tid 1549] [client 158.158.54.35:28949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/file.php"] [unique_id "apK-f2jCPtor9NZ-byQCEgAABng"]
[Sat Aug 29 05:11:59.061036 2026] [security2:error] [pid 11274:tid 11529] [client 20.52.41.200:5158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/files.php"] [unique_id "apK-f2bX5DA3XO6e_qRX7gAAAV4"]
[Sat Aug 29 05:11:59.065535 2026] [security2:error] [pid 1321:tid 1532] [client 20.52.41.200:2181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/alfa.php"] [unique_id "apK-f2jCPtor9NZ-byQCFAAABmg"]
[Sat Aug 29 05:11:59.073879 2026] [security2:error] [pid 11274:tid 11504] [client 20.48.160.90:61648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/wp-kz.php"] [unique_id "apK-f2bX5DA3XO6e_qRX8AAAAUU"]
[Sat Aug 29 05:11:59.077073 2026] [security2:error] [pid 11274:tid 11477] [client 158.23.184.117:61501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/.well-known/index.php"] [unique_id "apK-f2bX5DA3XO6e_qRX8QAAASs"]
[Sat Aug 29 05:11:59.098031 2026] [security2:error] [pid 11274:tid 11520] [client 20.48.160.90:31459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/wp_n5VD7XDh.php"] [unique_id "apK-f2bX5DA3XO6e_qRX8wAAAVU"]
[Sat Aug 29 05:11:59.106612 2026] [security2:error] [pid 1321:tid 1507] [client 20.48.160.90:23770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/media.php"] [unique_id "apK-f2jCPtor9NZ-byQCFwAABk8"]
[Sat Aug 29 05:11:59.114648 2026] [security2:error] [pid 11274:tid 11509] [client 158.23.147.79:14284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-admin/css/index.php"] [unique_id "apK-f2bX5DA3XO6e_qRX9QAAAUo"]
[Sat Aug 29 05:11:59.127133 2026] [security2:error] [pid 11274:tid 11570] [client 20.151.200.44:60207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/EM.php"] [unique_id "apK-f2bX5DA3XO6e_qRX9gAAAYY"]
[Sat Aug 29 05:11:59.138145 2026] [security2:error] [pid 1321:tid 1612] [client 40.83.93.50:10896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/class-wp-cmd.php"] [unique_id "apK-f2jCPtor9NZ-byQCGQAABrc"]
[Sat Aug 29 05:11:59.144864 2026] [security2:error] [pid 1321:tid 1553] [client 20.104.18.15:29182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/ops.php"] [unique_id "apK-f2jCPtor9NZ-byQCGgAABnw"]
[Sat Aug 29 05:11:59.158616 2026] [security2:error] [pid 1321:tid 1587] [client 4.205.62.107:64910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/aws_auth.php"] [unique_id "apK-f2jCPtor9NZ-byQCHAAABp4"]
[Sat Aug 29 05:11:59.164691 2026] [security2:error] [pid 11274:tid 11428] [remote 93.123.109.228:42790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/phpinfo.php"] [unique_id "apK-f2bX5DA3XO6e_qRX-QABI3I"]
[Sat Aug 29 05:11:59.166441 2026] [security2:error] [pid 11274:tid 11456] [client 93.123.109.228:52012] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/APP/.env"] [unique_id "apK-f2bX5DA3XO6e_qRX_AAAARY"]
[Sat Aug 29 05:11:59.172956 2026] [security2:error] [pid 1321:tid 1561] [client 158.23.147.79:6990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/file.php"] [unique_id "apK-f2jCPtor9NZ-byQCIgAABoQ"]
[Sat Aug 29 05:11:59.180846 2026] [security2:error] [pid 1321:tid 1485] [remote 93.123.109.228:42940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/config.php"] [unique_id "apK-f2jCPtor9NZ-byQCJQAGh34"]
[Sat Aug 29 05:11:59.187074 2026] [security2:error] [pid 1321:tid 1603] [client 20.151.200.44:62947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/zoz.php"] [unique_id "apK-f2jCPtor9NZ-byQCJgAABq4"]
[Sat Aug 29 05:11:59.196504 2026] [security2:error] [pid 11274:tid 11471] [client 93.123.109.228:51954] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/BACK/.env"] [unique_id "apK-f2bX5DA3XO6e_qRYAwAAASU"]
[Sat Aug 29 05:11:59.202260 2026] [security2:error] [pid 11274:tid 11385] [remote 74.7.227.143:42604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.district3.ca"] [uri "/D3WEBbeginners.php"] [unique_id "apK-f2bX5DA3XO6e_qRX-wABEUc"], referer: https://mail.district3.ca/
[Sat Aug 29 05:11:59.202896 2026] [security2:error] [pid 1321:tid 1506] [client 20.104.18.15:37700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/manga.php"] [unique_id "apK-f2jCPtor9NZ-byQCKQAABk4"]
[Sat Aug 29 05:11:59.203143 2026] [security2:error] [pid 1321:tid 1547] [client 93.123.109.228:51934] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/BACKEND/.env"] [unique_id "apK-f2jCPtor9NZ-byQCKAAABnY"]
[Sat Aug 29 05:11:59.208363 2026] [security2:error] [pid 11274:tid 11513] [client 40.83.93.50:8596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/update.php"] [unique_id "apK-f2bX5DA3XO6e_qRYBQAAAU4"]
[Sat Aug 29 05:11:59.212542 2026] [security2:error] [pid 1321:tid 1598] [client 20.196.209.81:17770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-content/languages/index.php"] [unique_id "apK-f2jCPtor9NZ-byQCKgAABqk"]
[Sat Aug 29 05:11:59.213753 2026] [security2:error] [pid 1321:tid 1594] [client 4.205.62.107:60545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/phina.php"] [unique_id "apK-f2jCPtor9NZ-byQCKwAABqU"]
[Sat Aug 29 05:11:59.215044 2026] [security2:error] [pid 11274:tid 11495] [client 93.123.109.228:51940] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/Api/.env"] [unique_id "apK-f2bX5DA3XO6e_qRYBgAAATw"]
[Sat Aug 29 05:11:59.217426 2026] [security2:error] [pid 1321:tid 1497] [client 93.123.109.228:52052] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/BE/.env"] [unique_id "apK-f2jCPtor9NZ-byQCLAAABkU"]
[Sat Aug 29 05:11:59.218073 2026] [security2:error] [pid 1321:tid 1496] [client 20.48.160.90:37832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/wp-includes/ID3/getid.php"] [unique_id "apK-f2jCPtor9NZ-byQCLQAABkQ"]
[Sat Aug 29 05:11:59.220641 2026] [security2:error] [pid 1321:tid 1576] [client 158.23.184.117:61486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/.well-known/login.php"] [unique_id "apK-f2jCPtor9NZ-byQCLgAABpM"]
[Sat Aug 29 05:11:59.226379 2026] [security2:error] [pid 1321:tid 1542] [client 20.220.204.93:59029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/gdn.php"] [unique_id "apK-f2jCPtor9NZ-byQCLwAABnI"]
[Sat Aug 29 05:11:59.229934 2026] [security2:error] [pid 1321:tid 1562] [client 20.104.68.135:4260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.angottiproductions.com"] [uri "/xmlrpc.php"] [unique_id "apK-f2jCPtor9NZ-byQCJwAABoU"]
[Sat Aug 29 05:11:59.234236 2026] [security2:error] [pid 1321:tid 1577] [client 20.48.160.90:31443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/wp-mini.php"] [unique_id "apK-f2jCPtor9NZ-byQCMQAABpQ"]
[Sat Aug 29 05:11:59.235109 2026] [security2:error] [pid 1321:tid 1536] [client 93.123.109.228:52010] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/Backend/.env"] [unique_id "apK-f2jCPtor9NZ-byQCMAAABmw"]
[Sat Aug 29 05:11:59.260043 2026] [security2:error] [pid 1321:tid 1560] [client 158.158.54.35:19367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK-f2jCPtor9NZ-byQCMwAABoM"]
[Sat Aug 29 05:11:59.261932 2026] [security2:error] [pid 11274:tid 11444] [client 20.48.160.90:23688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/mac.php"] [unique_id "apK-f2bX5DA3XO6e_qRYCAAAAQo"]
[Sat Aug 29 05:11:59.265702 2026] [security2:error] [pid 11274:tid 11465] [client 68.155.159.216:14295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-content/packed.php"] [unique_id "apK-f2bX5DA3XO6e_qRYCQAAAR8"]
[Sat Aug 29 05:11:59.273817 2026] [security2:error] [pid 11274:tid 11546] [client 93.123.109.228:51936] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/Be/.env"] [unique_id "apK-f2bX5DA3XO6e_qRYCgAAAW4"]
[Sat Aug 29 05:11:59.292868 2026] [security2:error] [pid 11274:tid 11519] [client 20.104.49.130:45751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/kj.php"] [unique_id "apK-f2bX5DA3XO6e_qRYDAAAAVQ"]
[Sat Aug 29 05:11:59.315654 2026] [security2:error] [pid 1321:tid 1607] [client 158.158.54.35:15071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/css.php"] [unique_id "apK-f2jCPtor9NZ-byQCNgAABrI"]
[Sat Aug 29 05:11:59.319480 2026] [security2:error] [pid 11274:tid 11493] [client 20.104.18.15:29126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/coffexium.php"] [unique_id "apK-f2bX5DA3XO6e_qRYDwAAATo"]
[Sat Aug 29 05:11:59.325220 2026] [security2:error] [pid 1321:tid 1492] [client 4.205.62.107:6316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/rpk.php"] [unique_id "apK-f2jCPtor9NZ-byQCNwAABkA"]
[Sat Aug 29 05:11:59.331965 2026] [security2:error] [pid 11274:tid 11561] [client 20.197.61.180:1107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/csv.php"] [unique_id "apK-f2bX5DA3XO6e_qRYEQAAAX0"]
[Sat Aug 29 05:11:59.352598 2026] [security2:error] [pid 11274:tid 11467] [client 68.155.159.216:44012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK-f2bX5DA3XO6e_qRYEwAAASE"]
[Sat Aug 29 05:11:59.355038 2026] [security2:error] [pid 1321:tid 1504] [client 20.151.200.44:55706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/fh26.php"] [unique_id "apK-f2jCPtor9NZ-byQCOQAABkw"]
[Sat Aug 29 05:11:59.357860 2026] [security2:error] [pid 1321:tid 1586] [client 20.48.160.90:37791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/session.php"] [unique_id "apK-f2jCPtor9NZ-byQCOgAABp0"]
[Sat Aug 29 05:11:59.364771 2026] [security2:error] [pid 11274:tid 11494] [client 4.205.62.107:61014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/ebahvhhh.php"] [unique_id "apK-f2bX5DA3XO6e_qRYFgAAATs"]
[Sat Aug 29 05:11:59.366091 2026] [security2:error] [pid 1321:tid 1515] [client 158.23.184.117:21677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/.well-known/logs233/index.php"] [unique_id "apK-f2jCPtor9NZ-byQCOwAABlc"]
[Sat Aug 29 05:11:59.367463 2026] [security2:error] [pid 11274:tid 11508] [client 20.48.160.90:31483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/xmini4.php"] [unique_id "apK-f2bX5DA3XO6e_qRYFwAAAUk"]
[Sat Aug 29 05:11:59.369497 2026] [security2:error] [pid 11274:tid 11449] [client 20.104.104.62:48533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/ww2.php"] [unique_id "apK-f2bX5DA3XO6e_qRYGAAAAQ8"]
[Sat Aug 29 05:11:59.391946 2026] [security2:error] [pid 11274:tid 11485] [client 20.220.204.93:52227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/f2.php"] [unique_id "apK-f2bX5DA3XO6e_qRYGwAAATI"]
[Sat Aug 29 05:11:59.393911 2026] [security2:error] [pid 11274:tid 11535] [client 68.155.159.216:2026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK-f2bX5DA3XO6e_qRYHAAAAWQ"]
[Sat Aug 29 05:11:59.394159 2026] [security2:error] [pid 1321:tid 1491] [client 20.48.160.90:23799] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.jarritosmexico.com"] [uri "/1.php"] [unique_id "apK-f2jCPtor9NZ-byQCPAAABj8"]
[Sat Aug 29 05:11:59.394266 2026] [security2:error] [pid 1321:tid 1491] [client 20.48.160.90:23799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/1.php"] [unique_id "apK-f2jCPtor9NZ-byQCPAAABj8"]
[Sat Aug 29 05:11:59.398401 2026] [security2:error] [pid 1321:tid 1532] [client 20.104.18.15:37708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/asdfghj.php"] [unique_id "apK-f2jCPtor9NZ-byQCPQAABmg"]
[Sat Aug 29 05:11:59.419375 2026] [security2:error] [pid 11274:tid 11503] [client 68.155.159.216:55149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.angelesforestranch.com"] [uri "/simple.php"] [unique_id "apK-f2bX5DA3XO6e_qRYHgAAAUQ"]
[Sat Aug 29 05:11:59.427232 2026] [security2:error] [pid 1321:tid 1573] [client 45.148.10.62:52894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zow.gui.mybluehost.me"] [uri "/config.php"] [unique_id "apK-f2jCPtor9NZ-byQCQwAABpA"]
[Sat Aug 29 05:11:59.427871 2026] [security2:error] [pid 11274:tid 11563] [client 20.104.68.135:4240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.68.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.angottiproductions.com"] [uri "/yas.php"] [unique_id "apK-f2bX5DA3XO6e_qRYHwAAAX8"]
[Sat Aug 29 05:11:59.430703 2026] [security2:error] [pid 1321:tid 1588] [client 20.240.128.207:1272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-content/themes/about.php"] [unique_id "apK-f2jCPtor9NZ-byQCRAAABp8"]
[Sat Aug 29 05:11:59.459575 2026] [security2:error] [pid 1321:tid 1507] [client 158.23.147.79:50052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/ws.php"] [unique_id "apK-f2jCPtor9NZ-byQCRgAABk8"]
[Sat Aug 29 05:11:59.488263 2026] [security2:error] [pid 1321:tid 1517] [client 20.48.160.90:61637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/eagle.php"] [unique_id "apK-f2jCPtor9NZ-byQCSAAABlk"]
[Sat Aug 29 05:11:59.492234 2026] [security2:error] [pid 1321:tid 1500] [client 20.100.175.163:11394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "apK-f2jCPtor9NZ-byQCSQAABkg"]
[Sat Aug 29 05:11:59.504434 2026] [security2:error] [pid 1321:tid 1603] [client 20.48.160.90:31361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/reop3.php"] [unique_id "apK-f2jCPtor9NZ-byQCTQAABq4"]
[Sat Aug 29 05:11:59.505463 2026] [security2:error] [pid 11274:tid 11551] [client 158.158.54.35:29441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-includes/customize/index.php"] [unique_id "apK-f2bX5DA3XO6e_qRYJwAAAXM"]
[Sat Aug 29 05:11:59.510455 2026] [security2:error] [pid 11274:tid 11509] [client 20.104.18.15:29120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/BDKR28WP.php"] [unique_id "apK-f2bX5DA3XO6e_qRYKQAAAUo"]
[Sat Aug 29 05:11:59.510810 2026] [security2:error] [pid 1321:tid 1519] [client 158.23.184.117:21823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/.well-known/maintenance.php"] [unique_id "apK-f2jCPtor9NZ-byQCTgAABls"]
[Sat Aug 29 05:11:59.517243 2026] [security2:error] [pid 1321:tid 1590] [client 20.240.128.207:14390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-logs.php"] [unique_id "apK-f2jCPtor9NZ-byQCTwAABqE"]
[Sat Aug 29 05:11:59.517948 2026] [security2:error] [pid 11274:tid 11488] [client 20.52.41.200:2205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/403.php"] [unique_id "apK-f2bX5DA3XO6e_qRYKwAAATU"]
[Sat Aug 29 05:11:59.523288 2026] [security2:error] [pid 11274:tid 11450] [client 20.52.41.200:4670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/o.php"] [unique_id "apK-f2bX5DA3XO6e_qRYLAAAARA"]
[Sat Aug 29 05:11:59.533834 2026] [security2:error] [pid 11274:tid 11565] [client 20.48.160.90:28798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/classwithtostring.php"] [unique_id "apK-f2bX5DA3XO6e_qRYMQAAAYE"]
[Sat Aug 29 05:11:59.544370 2026] [security2:error] [pid 11274:tid 11558] [client 68.155.159.216:49136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK-f2bX5DA3XO6e_qRYMwAAAXo"]
[Sat Aug 29 05:11:59.551326 2026] [security2:error] [pid 1321:tid 1525] [client 4.205.62.107:59113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/06.php"] [unique_id "apK-f2jCPtor9NZ-byQCVAAABmE"]
[Sat Aug 29 05:11:59.552239 2026] [security2:error] [pid 1321:tid 1400] [remote 93.123.109.228:42940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/config/aws.php"] [unique_id "apK-f2jCPtor9NZ-byQCVgAGqSo"]
[Sat Aug 29 05:11:59.576473 2026] [security2:error] [pid 11274:tid 11461] [client 20.104.18.15:37810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/dragonshell.php"] [unique_id "apK-f2bX5DA3XO6e_qRYNQAAARs"]
[Sat Aug 29 05:11:59.577852 2026] [security2:error] [pid 11274:tid 11456] [client 20.48.250.41:36352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/155.php"] [unique_id "apK-f2bX5DA3XO6e_qRYNgAAARY"]
[Sat Aug 29 05:11:59.586778 2026] [security2:error] [pid 11274:tid 11486] [client 68.155.159.216:23398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/images/index.php"] [unique_id "apK-f2bX5DA3XO6e_qRYNwAAATM"]
[Sat Aug 29 05:11:59.596209 2026] [security2:error] [pid 11274:tid 11451] [client 158.23.184.117:31847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/.dj/index.php"] [unique_id "apK-f2bX5DA3XO6e_qRYOAAAARE"]
[Sat Aug 29 05:11:59.596820 2026] [security2:error] [pid 11274:tid 11513] [client 20.151.200.44:63792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/kure.php"] [unique_id "apK-f2bX5DA3XO6e_qRYOQAAAU4"]
[Sat Aug 29 05:11:59.600760 2026] [security2:error] [pid 11274:tid 11444] [client 20.48.250.41:25550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/vx.php"] [unique_id "apK-f2bX5DA3XO6e_qRYOwAAAQo"]
[Sat Aug 29 05:11:59.608644 2026] [security2:error] [pid 1321:tid 1596] [client 20.196.209.81:22295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-content/languages/min.php"] [unique_id "apK-f2jCPtor9NZ-byQCWAAABqc"]
[Sat Aug 29 05:11:59.624908 2026] [security2:error] [pid 11274:tid 11571] [client 20.48.160.90:51785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/up-kon.php"] [unique_id "apK-f2bX5DA3XO6e_qRYPQAAAYc"]
[Sat Aug 29 05:11:59.635049 2026] [security2:error] [pid 1321:tid 1577] [client 20.48.160.90:52061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/wp-mail.php"] [unique_id "apK-f2jCPtor9NZ-byQCWgAABpQ"]
[Sat Aug 29 05:11:59.638619 2026] [security2:error] [pid 1321:tid 1612] [client 40.83.93.50:6393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/disagreed.php"] [unique_id "apK-f2jCPtor9NZ-byQCWwAABrc"]
[Sat Aug 29 05:11:59.642877 2026] [security2:error] [pid 1321:tid 1536] [client 20.220.204.93:52350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/grsiuk.php"] [unique_id "apK-f2jCPtor9NZ-byQCXAAABmw"]
[Sat Aug 29 05:11:59.647144 2026] [security2:error] [pid 11274:tid 11345] [remote 93.123.109.228:42790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/public/phpinfo.php"] [unique_id "apK-f2bX5DA3XO6e_qRYRAABNyA"]
[Sat Aug 29 05:11:59.654091 2026] [security2:error] [pid 11274:tid 11465] [client 158.23.184.117:21644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/.well-known/min.php"] [unique_id "apK-f2bX5DA3XO6e_qRYRwAAAR8"]
[Sat Aug 29 05:11:59.655176 2026] [security2:error] [pid 11274:tid 11481] [client 20.104.18.15:29159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/sf.php"] [unique_id "apK-f2bX5DA3XO6e_qRYSAAAAS4"]
[Sat Aug 29 05:11:59.667784 2026] [security2:error] [pid 1321:tid 1398] [remote 93.123.109.228:42940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/config/config.inc.php"] [unique_id "apK-f2jCPtor9NZ-byQCYAAGhyg"]
[Sat Aug 29 05:11:59.668774 2026] [security2:error] [pid 11274:tid 11464] [client 20.151.200.44:64014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/ca4.php"] [unique_id "apK-f2bX5DA3XO6e_qRYSwAAAR4"]
[Sat Aug 29 05:11:59.668986 2026] [security2:error] [pid 11274:tid 11497] [client 20.48.160.90:49927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/wp-ws68.php"] [unique_id "apK-f2bX5DA3XO6e_qRYTAAAAT4"]
[Sat Aug 29 05:11:59.705217 2026] [security2:error] [pid 11274:tid 11545] [client 40.83.93.50:9080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/blog.php"] [unique_id "apK-f2bX5DA3XO6e_qRYTgAAAW0"]
[Sat Aug 29 05:11:59.713014 2026] [security2:error] [pid 1321:tid 1439] [remote 93.123.109.228:42940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/config/config.php"] [unique_id "apK-f2jCPtor9NZ-byQCZgAGh1E"]
[Sat Aug 29 05:11:59.716111 2026] [security2:error] [pid 11274:tid 11559] [client 20.104.49.130:45697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "coveryourauto.com"] [uri "/33.php"] [unique_id "apK-f2bX5DA3XO6e_qRYUgAAAXs"]
[Sat Aug 29 05:11:59.721005 2026] [security2:error] [pid 11274:tid 11524] [client 158.23.147.79:39119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/admin.php"] [unique_id "apK-f2bX5DA3XO6e_qRYVAAAAVk"]
[Sat Aug 29 05:11:59.742724 2026] [security2:error] [pid 1321:tid 1605] [client 158.23.184.117:31850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/.info.php"] [unique_id "apK-f2jCPtor9NZ-byQCZwAABrA"]
[Sat Aug 29 05:11:59.756528 2026] [security2:error] [pid 1321:tid 1435] [remote 93.123.109.228:42940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/config/env.php"] [unique_id "apK-f2jCPtor9NZ-byQCagAGsU0"]
[Sat Aug 29 05:11:59.766350 2026] [security2:error] [pid 1321:tid 1531] [client 20.48.160.90:31447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/wp-conffg.php"] [unique_id "apK-f2jCPtor9NZ-byQCawAABmc"]
[Sat Aug 29 05:11:59.766799 2026] [security2:error] [pid 11274:tid 11538] [client 20.48.160.90:61684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/tinny.php"] [unique_id "apK-f2bX5DA3XO6e_qRYWAAAAWc"]
[Sat Aug 29 05:11:59.773583 2026] [security2:error] [pid 1321:tid 1584] [client 68.155.159.216:56711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/admin.php"] [unique_id "apK-f2jCPtor9NZ-byQCbQAABps"]
[Sat Aug 29 05:11:59.777308 2026] [security2:error] [pid 11274:tid 11472] [client 20.104.104.62:48701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/anz.php"] [unique_id "apK-f2bX5DA3XO6e_qRYWgAAASY"]
[Sat Aug 29 05:11:59.786217 2026] [security2:error] [pid 1321:tid 1555] [client 20.104.49.130:51338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/memberfuns.php"] [unique_id "apK-f2jCPtor9NZ-byQCcAAABn4"]
[Sat Aug 29 05:11:59.792679 2026] [security2:error] [pid 11274:tid 11504] [client 20.220.204.93:52278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/wp-scr1pts.php"] [unique_id "apK-f2bX5DA3XO6e_qRYWwAAAUU"]
[Sat Aug 29 05:11:59.804067 2026] [security2:error] [pid 1321:tid 1516] [client 20.48.160.90:28784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/simple.php"] [unique_id "apK-f2jCPtor9NZ-byQCcwAABlg"]
[Sat Aug 29 05:11:59.806415 2026] [security2:error] [pid 1321:tid 1528] [client 20.104.18.15:37747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/wp-safe.php"] [unique_id "apK-f2jCPtor9NZ-byQCdAAABmQ"]
[Sat Aug 29 05:11:59.815552 2026] [security2:error] [pid 11274:tid 11530] [client 20.151.200.44:27613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/blnux.php"] [unique_id "apK-f2bX5DA3XO6e_qRYXgAAAV8"]
[Sat Aug 29 05:11:59.817519 2026] [security2:error] [pid 11274:tid 11563] [client 158.23.184.117:21694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/.well-known/module.php"] [unique_id "apK-f2bX5DA3XO6e_qRYXwAAAX8"]
[Sat Aug 29 05:11:59.832004 2026] [autoindex:error] [pid 1321:tid 1492] [client 158.158.54.35:0] AH01276: Cannot serve directory /home2/charlov7/public_html/dev/wp-includes/block-bindings/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:11:59.847737 2026] [security2:error] [pid 11274:tid 11536] [client 20.104.18.15:29178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/k.php"] [unique_id "apK-f2bX5DA3XO6e_qRYZQAAAWU"]
[Sat Aug 29 05:11:59.851320 2026] [security2:error] [pid 1321:tid 1601] [client 52.204.89.12:40948] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "www.strangeworxweddingfilms.com"] [uri "/"] [unique_id "apK-f2jCPtor9NZ-byQCegAABqw"]
[Sat Aug 29 05:11:59.879098 2026] [security2:error] [pid 1321:tid 1593] [client 158.23.147.79:64120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK-f2jCPtor9NZ-byQCfAAABqQ"]
[Sat Aug 29 05:11:59.882716 2026] [security2:error] [pid 1321:tid 1573] [client 4.205.62.107:59122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/oc460l3x.php"] [unique_id "apK-f2jCPtor9NZ-byQCfQAABpA"]
[Sat Aug 29 05:11:59.888287 2026] [security2:error] [pid 1321:tid 1514] [client 158.23.184.117:31820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/.trash7206/index.php"] [unique_id "apK-f2jCPtor9NZ-byQCfgAABlY"]
[Sat Aug 29 05:11:59.890614 2026] [security2:error] [pid 11274:tid 11565] [client 20.100.175.163:18417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-content/admin.php"] [unique_id "apK-f2bX5DA3XO6e_qRYZgAAAYE"]
[Sat Aug 29 05:11:59.898976 2026] [security2:error] [pid 11274:tid 11558] [client 20.48.160.90:31401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/filefuns.php"] [unique_id "apK-f2bX5DA3XO6e_qRYZwAAAXo"]
[Sat Aug 29 05:11:59.901460 2026] [security2:error] [pid 11274:tid 11480] [client 20.48.160.90:51838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/wp-easy.php"] [unique_id "apK-f2bX5DA3XO6e_qRYaAAAAS0"]
[Sat Aug 29 05:11:59.923512 2026] [security2:error] [pid 1321:tid 1522] [client 4.205.62.107:5512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/kerang.php"] [unique_id "apK-f2jCPtor9NZ-byQCfwAABl4"]
[Sat Aug 29 05:11:59.936943 2026] [security2:error] [pid 1321:tid 1517] [client 158.23.147.79:62742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK-f2jCPtor9NZ-byQCgQAABlk"]
[Sat Aug 29 05:11:59.937597 2026] [security2:error] [pid 11274:tid 11496] [client 93.123.109.228:51954] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/admin-app/.env"] [unique_id "apK-f2bX5DA3XO6e_qRYagAAAT0"]
[Sat Aug 29 05:11:59.938444 2026] [security2:error] [pid 1321:tid 1615] [client 158.158.54.35:11085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/gmo.php"] [unique_id "apK-f2jCPtor9NZ-byQCggAABro"]
[Sat Aug 29 05:11:59.939948 2026] [security2:error] [pid 1321:tid 1526] [client 20.240.128.207:2073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK-f2jCPtor9NZ-byQCgwAABmI"]
[Sat Aug 29 05:11:59.947014 2026] [security2:error] [pid 11274:tid 11492] [client 93.123.109.228:52034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK-f2bX5DA3XO6e_qRYbQAAATk"]
[Sat Aug 29 05:11:59.954518 2026] [security2:error] [pid 1321:tid 1465] [remote 93.123.109.228:42940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/config/module.config.php"] [unique_id "apK-f2jCPtor9NZ-byQChwAGSGo"]
[Sat Aug 29 05:11:59.956885 2026] [security2:error] [pid 1321:tid 1420] [remote 93.123.109.228:42940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/config/nexmo.php"] [unique_id "apK-f2jCPtor9NZ-byQCiAAGSD4"]
[Sat Aug 29 05:11:59.962398 2026] [security2:error] [pid 1321:tid 1561] [client 68.155.159.216:38669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/dropdown.php"] [unique_id "apK-f2jCPtor9NZ-byQCjQAABoQ"]
[Sat Aug 29 05:11:59.967289 2026] [security2:error] [pid 1321:tid 1556] [client 20.52.41.200:5135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/file2.php"] [unique_id "apK-f2jCPtor9NZ-byQCjgAABn8"]
[Sat Aug 29 05:11:59.969127 2026] [security2:error] [pid 1321:tid 1474] [remote 93.123.109.228:42940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/config/stripe.php"] [unique_id "apK-f2jCPtor9NZ-byQCjwAGSHM"]
[Sat Aug 29 05:11:59.969508 2026] [security2:error] [pid 1321:tid 1502] [client 20.52.41.200:2658] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "sls-ug.jomoassociates.com"] [uri "/1.php"] [unique_id "apK-f2jCPtor9NZ-byQCkAAABko"]
[Sat Aug 29 05:11:59.969567 2026] [security2:error] [pid 1321:tid 1502] [client 20.52.41.200:2658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/1.php"] [unique_id "apK-f2jCPtor9NZ-byQCkAAABko"]
[Sat Aug 29 05:11:59.969885 2026] [security2:error] [pid 1321:tid 1574] [client 158.23.184.117:21634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/.well-known/options.php"] [unique_id "apK-f2jCPtor9NZ-byQCkQAABpE"]
[Sat Aug 29 05:11:59.976408 2026] [security2:error] [pid 11274:tid 11486] [client 20.104.18.15:29150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/82.php"] [unique_id "apK-f2bX5DA3XO6e_qRYdwAAATM"]
[Sat Aug 29 05:11:59.978392 2026] [security2:error] [pid 11274:tid 11451] [client 68.155.159.216:1932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/bk/index.php"] [unique_id "apK-f2bX5DA3XO6e_qRYeQAAARE"]
[Sat Aug 29 05:11:59.980421 2026] [security2:error] [pid 11274:tid 11534] [client 158.23.147.79:38730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/x.php"] [unique_id "apK-f2bX5DA3XO6e_qRYegAAAWM"]
[Sat Aug 29 05:11:59.981081 2026] [security2:error] [pid 1321:tid 1547] [client 20.48.160.90:29149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/aaa.php"] [unique_id "apK-f2jCPtor9NZ-byQCkgAABnY"]
[Sat Aug 29 05:11:59.994577 2026] [security2:error] [pid 1321:tid 1504] [client 20.100.175.163:27417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "apK-f2jCPtor9NZ-byQClAAABkw"]
[Sat Aug 29 05:12:00.005767 2026] [security2:error] [pid 1321:tid 1609] [client 20.196.209.81:17348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-content/languages/pk.php"] [unique_id "apK-gGjCPtor9NZ-byQClQAABrQ"]
[Sat Aug 29 05:12:00.013997 2026] [security2:error] [pid 1321:tid 1598] [client 20.104.18.15:37709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/gjewuagf.php"] [unique_id "apK-gGjCPtor9NZ-byQClwAABqk"]
[Sat Aug 29 05:12:00.014922 2026] [security2:error] [pid 11274:tid 11560] [client 20.240.128.207:16363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-admin/css/about.php"] [unique_id "apK-gGbX5DA3XO6e_qRYfgAAAXw"]
[Sat Aug 29 05:12:00.021841 2026] [security2:error] [pid 1321:tid 1596] [client 158.23.147.79:24463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK-gGjCPtor9NZ-byQCmgAABqc"]
[Sat Aug 29 05:12:00.030397 2026] [security2:error] [pid 1321:tid 1591] [client 20.48.160.90:52052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/wp-cron.php"] [unique_id "apK-gGjCPtor9NZ-byQCmwAABqI"]
[Sat Aug 29 05:12:00.033673 2026] [security2:error] [pid 1321:tid 1542] [client 20.220.204.93:59110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/num.php"] [unique_id "apK-gGjCPtor9NZ-byQCnAAABnI"]
[Sat Aug 29 05:12:00.034796 2026] [security2:error] [pid 1321:tid 1600] [client 158.23.184.117:32400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/.trash7206/min.php"] [unique_id "apK-gGjCPtor9NZ-byQCnQAABqs"]
[Sat Aug 29 05:12:00.051693 2026] [security2:error] [pid 1321:tid 1499] [client 20.48.160.90:37797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/d7.php"] [unique_id "apK-gGjCPtor9NZ-byQCnwAABkc"]
[Sat Aug 29 05:12:00.062463 2026] [security2:error] [pid 11274:tid 11526] [client 68.155.159.216:64108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-includes/js/index.php"] [unique_id "apK-gGbX5DA3XO6e_qRYgAAAAVs"]
[Sat Aug 29 05:12:00.067527 2026] [security2:error] [pid 1321:tid 1580] [client 20.197.61.180:1970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/fox.php"] [unique_id "apK-gGjCPtor9NZ-byQCoQAABpc"]
[Sat Aug 29 05:12:00.078989 2026] [security2:error] [pid 1321:tid 1610] [client 45.148.10.62:52896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zow.gui.mybluehost.me"] [uri "/config.php.bak"] [unique_id "apK-gGjCPtor9NZ-byQCogAABrU"]
[Sat Aug 29 05:12:00.103713 2026] [security2:error] [pid 1321:tid 1555] [client 20.151.200.44:65251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/x0x.php"] [unique_id "apK-gGjCPtor9NZ-byQCpQAABn4"]
[Sat Aug 29 05:12:00.116884 2026] [security2:error] [pid 1321:tid 1612] [client 158.23.184.117:21649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/.well-known/panel.php"] [unique_id "apK-gGjCPtor9NZ-byQCqQAABrc"]
[Sat Aug 29 05:12:00.125621 2026] [security2:error] [pid 1321:tid 1490] [client 40.83.93.50:3957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/class_api.php"] [unique_id "apK-gGjCPtor9NZ-byQCqwAABj4"]
[Sat Aug 29 05:12:00.131876 2026] [security2:error] [pid 11274:tid 11493] [client 158.158.54.35:23682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/lite.php"] [unique_id "apK-gGbX5DA3XO6e_qRYgQAAATo"]
[Sat Aug 29 05:12:00.134962 2026] [security2:error] [pid 1321:tid 1607] [client 68.155.159.216:62754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/install.php"] [unique_id "apK-gGjCPtor9NZ-byQCsAAABrI"]
[Sat Aug 29 05:12:00.147581 2026] [security2:error] [pid 1321:tid 1566] [client 20.104.18.15:29179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/dex.php"] [unique_id "apK-gGjCPtor9NZ-byQCsgAABok"]
[Sat Aug 29 05:12:00.150382 2026] [proxy_http:error] [pid 1017536:tid 1017566] (70007)The timeout specified has expired: [remote 57.141.14.59:50242] AH01102: error reading status line from remote server 127.0.0.1:8443
[Sat Aug 29 05:12:00.150405 2026] [proxy:error] [pid 1017536:tid 1017566] [remote 57.141.14.59:50242] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:12:00.161446 2026] [proxy_http:error] [pid 1041789:tid 1041959] (70007)The timeout specified has expired: [client 127.0.0.1:48826] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:12:00.161470 2026] [proxy:error] [pid 1041789:tid 1041959] [client 127.0.0.1:48826] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:12:00.162276 2026] [security2:error] [pid 11274:tid 11539] [client 20.48.160.90:52025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/lock360.php"] [unique_id "apK-gGbX5DA3XO6e_qRYggAAAWg"]
[Sat Aug 29 05:12:00.163395 2026] [proxy_http:error] [pid 1018003:tid 1018181] (70007)The timeout specified has expired: [client 127.0.0.1:14142] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:12:00.163423 2026] [proxy:error] [pid 1018003:tid 1018181] [client 127.0.0.1:14142] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:12:00.180790 2026] [security2:error] [pid 11274:tid 11522] [client 158.23.184.117:32384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/.well-known//index.php"] [unique_id "apK-gGbX5DA3XO6e_qRYiAAAAVc"]
[Sat Aug 29 05:12:00.185270 2026] [security2:error] [pid 1321:tid 1517] [client 93.123.109.228:52000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/admin/phpinfo.php"] [unique_id "apK-gGjCPtor9NZ-byQCtQAABlk"]
[Sat Aug 29 05:12:00.194491 2026] [security2:error] [pid 1321:tid 1615] [client 20.104.18.15:37860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/tnglzqmv.php"] [unique_id "apK-gGjCPtor9NZ-byQCtgAABro"]
[Sat Aug 29 05:12:00.206437 2026] [security2:error] [pid 11274:tid 11497] [client 20.48.160.90:37880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/v5.php"] [unique_id "apK-gGbX5DA3XO6e_qRYkQAAAT4"]
[Sat Aug 29 05:12:00.218703 2026] [security2:error] [pid 11274:tid 11508] [client 158.23.147.79:14153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK-gGbX5DA3XO6e_qRYlQAAAUk"]
[Sat Aug 29 05:12:00.236498 2026] [security2:error] [pid 11274:tid 11555] [client 158.158.54.35:1468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/w.php"] [unique_id "apK-gGbX5DA3XO6e_qRYmAAAAXc"]
[Sat Aug 29 05:12:00.242214 2026] [security2:error] [pid 1321:tid 1512] [client 40.83.93.50:14005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/bypass.php"] [unique_id "apK-gGjCPtor9NZ-byQCuAAABlQ"]
[Sat Aug 29 05:12:00.243999 2026] [security2:error] [pid 1321:tid 1532] [client 20.104.104.62:27121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "waysidebaptistmission.lifesosweet.com"] [uri "/wk/index.php"] [unique_id "apK-gGjCPtor9NZ-byQCuQAABmg"]
[Sat Aug 29 05:12:00.246840 2026] [security2:error] [pid 11274:tid 11559] [client 20.104.104.62:40245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/imageswp-init.php"] [unique_id "apK-gGbX5DA3XO6e_qRYmQAAAXs"]
[Sat Aug 29 05:12:00.247432 2026] [security2:error] [pid 11274:tid 11535] [client 20.104.49.130:48518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/wp-blogs.php"] [unique_id "apK-gGbX5DA3XO6e_qRYmgAAAWQ"]
[Sat Aug 29 05:12:00.255488 2026] [security2:error] [pid 1321:tid 1586] [client 20.220.204.93:52237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/a4.php"] [unique_id "apK-gGjCPtor9NZ-byQCugAABp0"]
[Sat Aug 29 05:12:00.262603 2026] [security2:error] [pid 1321:tid 1515] [client 158.23.184.117:22230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/.well-known/pki-validation/mariju.php"] [unique_id "apK-gGjCPtor9NZ-byQCuwAABlc"]
[Sat Aug 29 05:12:00.280074 2026] [security2:error] [pid 11274:tid 11473] [client 158.23.147.79:7061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/file17.php"] [unique_id "apK-gGbX5DA3XO6e_qRYnAAAASc"]
[Sat Aug 29 05:12:00.285057 2026] [security2:error] [pid 11274:tid 11538] [client 20.104.18.15:29661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/inso.php"] [unique_id "apK-gGbX5DA3XO6e_qRYnQAAAWc"]
[Sat Aug 29 05:12:00.287258 2026] [security2:error] [pid 11274:tid 11484] [client 20.104.18.15:29170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-gGbX5DA3XO6e_qRYngAAATE"]
[Sat Aug 29 05:12:00.293688 2026] [security2:error] [pid 11274:tid 11472] [client 93.123.109.228:51982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/admin_phpinfo.php"] [unique_id "apK-gGbX5DA3XO6e_qRYnwAAASY"]
[Sat Aug 29 05:12:00.293734 2026] [security2:error] [pid 11274:tid 11459] [client 4.205.62.107:64272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/hiquido.com/index.php"] [unique_id "apK-gGbX5DA3XO6e_qRYoAAAARk"]
[Sat Aug 29 05:12:00.295515 2026] [security2:error] [pid 1321:tid 1502] [client 20.48.160.90:31457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/wp-theme.php"] [unique_id "apK-gGjCPtor9NZ-byQCvgAABko"]
[Sat Aug 29 05:12:00.303750 2026] [security2:error] [pid 11274:tid 11487] [client 20.104.104.62:48641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/bge.php"] [unique_id "apK-gGbX5DA3XO6e_qRYoQAAATQ"]
[Sat Aug 29 05:12:00.319780 2026] [security2:error] [pid 1321:tid 1528] [client 93.123.109.228:52052] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/administrator/.env"] [unique_id "apK-gGjCPtor9NZ-byQCwwAABmQ"]
[Sat Aug 29 05:12:00.326614 2026] [security2:error] [pid 11274:tid 11485] [client 158.23.184.117:32391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/.well-known/about.php"] [unique_id "apK-gGbX5DA3XO6e_qRYpAAAATI"]
[Sat Aug 29 05:12:00.333371 2026] [security2:error] [pid 1321:tid 1509] [client 93.123.109.228:51934] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/api-backend/.env"] [unique_id "apK-gGjCPtor9NZ-byQCxAAABlE"]
[Sat Aug 29 05:12:00.350668 2026] [security2:error] [pid 11274:tid 11536] [client 93.123.109.228:51990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/api-node/.env"] [unique_id "apK-gGbX5DA3XO6e_qRYpgAAAWU"]
[Sat Aug 29 05:12:00.350759 2026] [security2:error] [pid 11274:tid 11551] [client 4.205.62.107:60587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/koiy.php"] [unique_id "apK-gGbX5DA3XO6e_qRYpwAAAXM"]
[Sat Aug 29 05:12:00.360687 2026] [security2:error] [pid 11274:tid 11527] [client 20.151.200.44:64021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.narrowgate-electrical.com"] [uri "/fesa.php"] [unique_id "apK-gGbX5DA3XO6e_qRYqQAAAVw"]
[Sat Aug 29 05:12:00.361300 2026] [security2:error] [pid 11274:tid 11450] [client 20.104.18.15:37806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/wefile.php"] [unique_id "apK-gGbX5DA3XO6e_qRYqgAAARA"]
[Sat Aug 29 05:12:00.364789 2026] [security2:error] [pid 11274:tid 11541] [client 20.104.104.62:33833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "zeeksignin.com"] [uri "/.tmb/index.php"] [unique_id "apK-gGbX5DA3XO6e_qRYqwAAAWo"]
[Sat Aug 29 05:12:00.370159 2026] [security2:error] [pid 1321:tid 1526] [client 20.100.175.163:27867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-configs.php"] [unique_id "apK-gGjCPtor9NZ-byQCxQAABmI"]
[Sat Aug 29 05:12:00.372613 2026] [security2:error] [pid 11274:tid 11558] [client 20.48.160.90:61572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/az.php"] [unique_id "apK-gGbX5DA3XO6e_qRYrAAAAXo"]
[Sat Aug 29 05:12:00.374489 2026] [security2:error] [pid 1321:tid 1600] [client 68.155.159.216:14292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-l0gin.php"] [unique_id "apK-gGjCPtor9NZ-byQCxgAABqs"]
[Sat Aug 29 05:12:00.386948 2026] [security2:error] [pid 11274:tid 11545] [client 158.158.54.35:21176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/classwithtostring.php"] [unique_id "apK-gGbX5DA3XO6e_qRYrgAAAW0"]
[Sat Aug 29 05:12:00.406444 2026] [security2:error] [pid 11274:tid 11512] [client 158.23.184.117:21814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/.well-known/pki-validation/pl.php"] [unique_id "apK-gGbX5DA3XO6e_qRYrwAAAU0"]
[Sat Aug 29 05:12:00.407114 2026] [security2:error] [pid 11274:tid 11513] [client 103.215.74.26:40562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.74.215.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.com"] [uri "/wp/index.php"] [unique_id "apK-gGbX5DA3XO6e_qRYsAAAAU4"], referer: https://kglogisticsinc.com/wp/wp-admin/
[Sat Aug 29 05:12:00.421789 2026] [security2:error] [pid 11274:tid 11475] [client 20.196.209.81:22866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lmdogs.com"] [uri "/wp-content/languages/plugins/about.php"] [unique_id "apK-gGbX5DA3XO6e_qRYsgAAASk"]
[Sat Aug 29 05:12:00.429406 2026] [security2:error] [pid 11274:tid 11451] [client 20.48.160.90:52085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/2d7433/index.php"] [unique_id "apK-gGbX5DA3XO6e_qRYswAAARE"]
[Sat Aug 29 05:12:00.431177 2026] [security2:error] [pid 1321:tid 1565] [client 20.52.41.200:5126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK-gGjCPtor9NZ-byQCxwAABog"]
[Sat Aug 29 05:12:00.432144 2026] [security2:error] [pid 1321:tid 1499] [client 20.104.18.15:29148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-gGjCPtor9NZ-byQCyAAABkc"]
[Sat Aug 29 05:12:00.438758 2026] [security2:error] [pid 11274:tid 11476] [client 20.104.104.62:27050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "waysidebaptistmission.lifesosweet.com"] [uri "/wp-content/admin.php"] [unique_id "apK-gGbX5DA3XO6e_qRYuAAAASo"]
[Sat Aug 29 05:12:00.455909 2026] [security2:error] [pid 11274:tid 11560] [client 68.155.159.216:21498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK-gGbX5DA3XO6e_qRYugAAAXw"]
[Sat Aug 29 05:12:00.457051 2026] [security2:error] [pid 11274:tid 11546] [client 68.155.159.216:44011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/wp-content/plugins/index.php"] [unique_id "apK-gGbX5DA3XO6e_qRYuwAAAW4"]
[Sat Aug 29 05:12:00.463685 2026] [security2:error] [pid 1321:tid 1577] [client 4.205.62.107:6326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/saml.php"] [unique_id "apK-gGjCPtor9NZ-byQC0QAABpQ"]
[Sat Aug 29 05:12:00.466613 2026] [security2:error] [pid 11274:tid 11524] [client 20.240.128.207:1270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-admin/index.php"] [unique_id "apK-gGbX5DA3XO6e_qRYvAAAAVk"]
[Sat Aug 29 05:12:00.473975 2026] [security2:error] [pid 11274:tid 11452] [client 20.100.175.163:21563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/gifclass.php"] [unique_id "apK-gGbX5DA3XO6e_qRYvQAAARI"]
[Sat Aug 29 05:12:00.483696 2026] [security2:error] [pid 11274:tid 11540] [client 20.151.200.44:27291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/pentest.php"] [unique_id "apK-gGbX5DA3XO6e_qRYvwAAAWk"]
[Sat Aug 29 05:12:00.490597 2026] [security2:error] [pid 11274:tid 11519] [client 20.220.204.93:52330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/tfm.php"] [unique_id "apK-gGbX5DA3XO6e_qRYwAAAAVQ"]
[Sat Aug 29 05:12:00.499132 2026] [security2:error] [pid 1321:tid 1613] [client 20.104.18.15:29649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/aa.php"] [unique_id "apK-gGjCPtor9NZ-byQC1AAABrg"]
[Sat Aug 29 05:12:00.508837 2026] [security2:error] [pid 1321:tid 1492] [client 149.34.210.141:11467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-gGjCPtor9NZ-byQC1QAABkA"]
[Sat Aug 29 05:12:00.508973 2026] [security2:error] [pid 1321:tid 1492] [client 149.34.210.141:11467] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-gGjCPtor9NZ-byQC1QAABkA"]
[Sat Aug 29 05:12:00.513675 2026] [security2:error] [pid 11274:tid 11571] [client 20.48.160.90:51720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/js.php"] [unique_id "apK-gGbX5DA3XO6e_qRYxAAAAYc"]
[Sat Aug 29 05:12:00.514256 2026] [security2:error] [pid 11274:tid 11529] [client 20.240.128.207:7815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/system_log.php"] [unique_id "apK-gGbX5DA3XO6e_qRYxQAAAV4"]
[Sat Aug 29 05:12:00.514299 2026] [security2:error] [pid 11274:tid 11493] [client 158.23.147.79:64412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK-gGbX5DA3XO6e_qRYxgAAATo"]
[Sat Aug 29 05:12:00.522820 2026] [security2:error] [pid 11274:tid 11448] [client 4.205.62.107:61047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/asa.php"] [unique_id "apK-gGbX5DA3XO6e_qRYxwAAAQ4"]
[Sat Aug 29 05:12:00.529108 2026] [security2:error] [pid 11274:tid 11465] [client 68.155.159.216:55068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.angelesforestranch.com"] [uri "/wp-admin/about.php"] [unique_id "apK-gGbX5DA3XO6e_qRYyQAAAR8"]
[Sat Aug 29 05:12:00.546068 2026] [security2:error] [pid 11274:tid 11572] [client 158.23.184.117:32401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK-gGbX5DA3XO6e_qRYywAAAYg"]
[Sat Aug 29 05:12:00.549804 2026] [security2:error] [pid 1321:tid 1508] [client 158.23.184.117:21762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/.well-known/pki-validation/x.php"] [unique_id "apK-gGjCPtor9NZ-byQC3AAABlA"]
[Sat Aug 29 05:12:00.566049 2026] [security2:error] [pid 11274:tid 11508] [client 20.104.18.15:29178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/ap.php"] [unique_id "apK-gGbX5DA3XO6e_qRYzwAAAUk"]
[Sat Aug 29 05:12:00.573062 2026] [security2:error] [pid 1321:tid 1501] [client 20.48.160.90:52034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/wp-login.php"] [unique_id "apK-gGjCPtor9NZ-byQC3QAABkk"]
[Sat Aug 29 05:12:00.574473 2026] [security2:error] [pid 1321:tid 1612] [client 158.23.147.79:49832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/wp-includes/css/index.php"] [unique_id "apK-gGjCPtor9NZ-byQC3wAABrc"]
[Sat Aug 29 05:12:00.579547 2026] [security2:error] [pid 11274:tid 11461] [client 158.158.54.35:5919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/term.php"] [unique_id "apK-gGbX5DA3XO6e_qRY0AAAARs"]
[Sat Aug 29 05:12:00.579553 2026] [security2:error] [pid 1321:tid 1608] [client 20.151.200.44:63778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/cafe.php"] [unique_id "apK-gGjCPtor9NZ-byQC4AAABrM"]
[Sat Aug 29 05:12:00.583660 2026] [security2:error] [pid 1321:tid 1490] [client 20.104.18.15:36936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/blog.php"] [unique_id "apK-gGjCPtor9NZ-byQC4QAABj4"]
[Sat Aug 29 05:12:00.583769 2026] [security2:error] [pid 11274:tid 11454] [client 20.52.41.200:2685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/s.php"] [unique_id "apK-gGbX5DA3XO6e_qRY0QAAARQ"]
[Sat Aug 29 05:12:00.591558 2026] [security2:error] [pid 11274:tid 11535] [client 93.123.109.228:52050] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/api/.env"] [unique_id "apK-gGbX5DA3XO6e_qRY1AAAAWQ"]
[Sat Aug 29 05:12:00.628250 2026] [security2:error] [pid 11274:tid 11459] [client 20.104.18.15:29643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/img.php"] [unique_id "apK-gGbX5DA3XO6e_qRY1wAAARk"]
[Sat Aug 29 05:12:00.639103 2026] [security2:error] [pid 1321:tid 1498] [client 20.104.104.62:27109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "waysidebaptistmission.lifesosweet.com"] [uri "/wp-content/themes/admin.php"] [unique_id "apK-gGjCPtor9NZ-byQC5QAABkY"]
[Sat Aug 29 05:12:00.659285 2026] [security2:error] [pid 11274:tid 11520] [client 20.48.160.90:37763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/hd.php"] [unique_id "apK-gGbX5DA3XO6e_qRY3wAAAVU"]
[Sat Aug 29 05:12:00.662826 2026] [security2:error] [pid 11274:tid 11494] [client 20.104.104.62:33859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "zeeksignin.com"] [uri "/.well-known/admin.php"] [unique_id "apK-gGbX5DA3XO6e_qRY4QAAATs"]
[Sat Aug 29 05:12:00.663305 2026] [security2:error] [pid 11274:tid 11515] [client 20.104.104.62:48486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/wp-ana.php"] [unique_id "apK-gGbX5DA3XO6e_qRY4gAAAVA"]
[Sat Aug 29 05:12:00.682681 2026] [security2:error] [pid 1321:tid 1604] [client 158.158.54.35:1424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/ahax.php"] [unique_id "apK-gGjCPtor9NZ-byQC6AAABq8"]
[Sat Aug 29 05:12:00.689433 2026] [security2:error] [pid 1321:tid 1588] [client 4.205.62.107:28039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/xin1.php"] [unique_id "apK-gGjCPtor9NZ-byQC6QAABp8"]
[Sat Aug 29 05:12:00.692772 2026] [security2:error] [pid 11274:tid 11563] [client 158.23.184.117:21775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/.well-known/pki-validation/xmrlpc.php"] [unique_id "apK-gGbX5DA3XO6e_qRY5gAAAX8"]
[Sat Aug 29 05:12:00.695757 2026] [security2:error] [pid 11274:tid 11530] [client 158.23.184.117:31815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/.well-known/acme-challenge/content.php"] [unique_id "apK-gGbX5DA3XO6e_qRY5wAAAV8"]
[Sat Aug 29 05:12:00.699769 2026] [security2:error] [pid 1321:tid 1514] [client 93.123.109.228:52052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/api/info.php"] [unique_id "apK-gGjCPtor9NZ-byQC6gAABlY"]
[Sat Aug 29 05:12:00.705376 2026] [security2:error] [pid 1321:tid 1522] [client 20.48.160.90:52042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/images.php"] [unique_id "apK-gGjCPtor9NZ-byQC7AAABl4"]
[Sat Aug 29 05:12:00.705811 2026] [security2:error] [pid 11274:tid 11572] [client 40.83.93.50:20637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/aksinet.php"] [unique_id "apK-gGbX5DA3XO6e_qRY6AAAAYg"]
[Sat Aug 29 05:12:00.705832 2026] [security2:error] [pid 1321:tid 1489] [client 20.104.18.15:29151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/media.php"] [unique_id "apK-gGjCPtor9NZ-byQC6wAABj0"]
[Sat Aug 29 05:12:00.751507 2026] [security2:error] [pid 1321:tid 1517] [client 68.155.159.216:23384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK-gGjCPtor9NZ-byQC7gAABlk"]
[Sat Aug 29 05:12:00.755779 2026] [security2:error] [pid 1321:tid 1507] [client 20.220.204.93:59066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/Geforce.php"] [unique_id "apK-gGjCPtor9NZ-byQC7wAABk8"]
[Sat Aug 29 05:12:00.777866 2026] [security2:error] [pid 11274:tid 11475] [client 20.104.18.15:29125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/222.php"] [unique_id "apK-gGbX5DA3XO6e_qRY9AAAASk"]
[Sat Aug 29 05:12:00.779566 2026] [security2:error] [pid 11274:tid 11456] [client 20.104.18.15:37718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/wp-admin/js/wp-load.php"] [unique_id "apK-gGbX5DA3XO6e_qRY9QAAARY"]
[Sat Aug 29 05:12:00.808752 2026] [security2:error] [pid 11274:tid 11476] [client 20.48.160.90:37860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/xl2023.php"] [unique_id "apK-gGbX5DA3XO6e_qRY-QAAASo"]
[Sat Aug 29 05:12:00.810265 2026] [security2:error] [pid 1321:tid 1516] [client 20.197.61.180:10183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/disagraeosc.php"] [unique_id "apK-gGjCPtor9NZ-byQC9AAABlg"]
[Sat Aug 29 05:12:00.819931 2026] [security2:error] [pid 1321:tid 1529] [client 158.158.54.35:32204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/404.php"] [unique_id "apK-gGjCPtor9NZ-byQC9wAABmU"]
[Sat Aug 29 05:12:00.824844 2026] [security2:error] [pid 1321:tid 1502] [client 20.104.104.62:47576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/images/upload.php"] [unique_id "apK-gGjCPtor9NZ-byQC-QAABko"]
[Sat Aug 29 05:12:00.835025 2026] [security2:error] [pid 11274:tid 11498] [client 158.23.184.117:22292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/.well-known/security.php"] [unique_id "apK-gGbX5DA3XO6e_qRY-wAAAT8"]
[Sat Aug 29 05:12:00.836109 2026] [security2:error] [pid 1321:tid 1532] [client 20.104.104.62:27124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "waysidebaptistmission.lifesosweet.com"] [uri "/.well-known/logs233/index.php"] [unique_id "apK-gGjCPtor9NZ-byQC-wAABmg"]
[Sat Aug 29 05:12:00.836983 2026] [security2:error] [pid 11274:tid 11560] [client 20.48.160.90:52070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/ops.php"] [unique_id "apK-gGbX5DA3XO6e_qRY_AAAAXw"]
[Sat Aug 29 05:12:00.839628 2026] [security2:error] [pid 1321:tid 1491] [client 158.23.147.79:39332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-admin/admin.php"] [unique_id "apK-gGjCPtor9NZ-byQC_AAABj8"]
[Sat Aug 29 05:12:00.848012 2026] [security2:error] [pid 11274:tid 11519] [client 195.178.110.247:6062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.marketingmagicsecrets.com"] [uri "/index.php"] [unique_id "apK-gGbX5DA3XO6e_qRY_wAAAVQ"]
[Sat Aug 29 05:12:00.850165 2026] [security2:error] [pid 11274:tid 11526] [client 20.104.18.15:29636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/adminfuns.php"] [unique_id "apK-gGbX5DA3XO6e_qRZAQAAAVs"]
[Sat Aug 29 05:12:00.863071 2026] [security2:error] [pid 1321:tid 1523] [client 20.100.175.163:35023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-includes/index.php"] [unique_id "apK-gGjCPtor9NZ-byQC_wAABl8"]
[Sat Aug 29 05:12:00.874083 2026] [security2:error] [pid 1321:tid 1581] [client 40.83.93.50:11558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/extractable-loader-head.php"] [unique_id "apK-gGjCPtor9NZ-byQDAQAABpg"]
[Sat Aug 29 05:12:00.874939 2026] [security2:error] [pid 1321:tid 1609] [client 20.48.160.90:23805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/shiny.php"] [unique_id "apK-gGjCPtor9NZ-byQDAgAABrQ"]
[Sat Aug 29 05:12:00.883939 2026] [security2:error] [pid 11274:tid 11506] [client 20.52.41.200:4397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/xda.php"] [unique_id "apK-gGbX5DA3XO6e_qRZBQAAAUc"]
[Sat Aug 29 05:12:00.894710 2026] [security2:error] [pid 11274:tid 11518] [client 158.23.184.117:32399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK-gGbX5DA3XO6e_qRZCAAAAVM"]
[Sat Aug 29 05:12:00.946743 2026] [security2:error] [pid 1321:tid 1562] [client 20.48.160.90:61641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/V2.php"] [unique_id "apK-gGjCPtor9NZ-byQDCgAABoU"]
[Sat Aug 29 05:12:00.954831 2026] [security2:error] [pid 1321:tid 1580] [client 20.104.18.15:29134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/key.php"] [unique_id "apK-gGjCPtor9NZ-byQDDAAABpc"]
[Sat Aug 29 05:12:00.954864 2026] [security2:error] [pid 1321:tid 1576] [client 20.104.18.15:36932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/robot.php"] [unique_id "apK-gGjCPtor9NZ-byQDCwAABpM"]
[Sat Aug 29 05:12:00.955033 2026] [security2:error] [pid 1321:tid 1542] [client 43.172.194.102:38826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 102.194.172.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewtopic.php"] [unique_id "apK-gGjCPtor9NZ-byQDBwAABnI"]
[Sat Aug 29 05:12:00.959482 2026] [security2:error] [pid 11274:tid 11511] [client 20.240.128.207:8207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/radio.php"] [unique_id "apK-gGbX5DA3XO6e_qRZDwAAAUw"]
[Sat Aug 29 05:12:00.968735 2026] [security2:error] [pid 11274:tid 11490] [client 93.123.109.228:51936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/api/phpinfo.php"] [unique_id "apK-gGbX5DA3XO6e_qRZEgAAATc"]
[Sat Aug 29 05:12:00.970886 2026] [core:error] [pid 11274:tid 11495] [client 20.100.175.163:4302] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:00.970906 2026] [core:error] [pid 11274:tid 11495] [client 20.100.175.163:4302] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:00.982131 2026] [security2:error] [pid 11274:tid 11554] [client 20.104.18.15:29126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/classwithtostring.php"] [unique_id "apK-gGbX5DA3XO6e_qRZFwAAAXY"]
[Sat Aug 29 05:12:00.985428 2026] [security2:error] [pid 1321:tid 1591] [client 158.23.184.117:21808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/.well-known/system.php"] [unique_id "apK-gGjCPtor9NZ-byQDDQAABqI"]
[Sat Aug 29 05:12:00.987479 2026] [security2:error] [pid 11274:tid 11472] [client 20.48.160.90:52053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK-gGbX5DA3XO6e_qRZGAAAASY"]
[Sat Aug 29 05:12:00.993696 2026] [fcgid:warn] [pid 11274:tid 11520] (70014)End of file found: [client 199.45.154.126:56728] mod_fcgid: can't get data from http client
[Sat Aug 29 05:12:01.004953 2026] [security2:error] [pid 11274:tid 11553] [client 20.48.160.90:29144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/goods.php"] [unique_id "apK-gWbX5DA3XO6e_qRZHwAAAXU"]
[Sat Aug 29 05:12:01.010436 2026] [security2:error] [pid 11274:tid 11540] [client 195.178.110.247:55778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.marketingmagicsecrets.com"] [uri "/index.php"] [unique_id "apK-gWbX5DA3XO6e_qRZIAAAAWk"]
[Sat Aug 29 05:12:01.012925 2026] [security2:error] [pid 11274:tid 11546] [client 20.240.128.207:16358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/24.php"] [unique_id "apK-gWbX5DA3XO6e_qRZIQAAAW4"]
[Sat Aug 29 05:12:01.020463 2026] [security2:error] [pid 11274:tid 11497] [client 4.205.62.107:59102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/drykl.php"] [unique_id "apK-gWbX5DA3XO6e_qRZIgAAAT4"]
[Sat Aug 29 05:12:01.025223 2026] [security2:error] [pid 1321:tid 1564] [client 158.23.147.79:60168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/.well-knownold/index.php"] [unique_id "apK-gWjCPtor9NZ-byQDDwAABoc"]
[Sat Aug 29 05:12:01.028192 2026] [security2:error] [pid 1321:tid 1528] [client 158.158.54.35:5539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/config.php"] [unique_id "apK-gWjCPtor9NZ-byQDEAAABmQ"]
[Sat Aug 29 05:12:01.034011 2026] [security2:error] [pid 11274:tid 11465] [client 20.52.41.200:2702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/test1.php"] [unique_id "apK-gWbX5DA3XO6e_qRZJAAAAR8"]
[Sat Aug 29 05:12:01.040071 2026] [security2:error] [pid 11274:tid 11501] [client 158.23.184.117:32394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/.well-known/acme-challenge/sx.php"] [unique_id "apK-gWbX5DA3XO6e_qRZJQAAAUI"]
[Sat Aug 29 05:12:01.056120 2026] [security2:error] [pid 11274:tid 11499] [client 20.220.204.93:41830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/click.php"] [unique_id "apK-gWbX5DA3XO6e_qRZJwAAAUA"]
[Sat Aug 29 05:12:01.066723 2026] [security2:error] [pid 11274:tid 11551] [client 4.205.62.107:6085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/rem.php"] [unique_id "apK-gWbX5DA3XO6e_qRZKAAAAXM"]
[Sat Aug 29 05:12:01.079182 2026] [security2:error] [pid 11274:tid 11450] [client 20.151.200.44:63009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/mmm.php"] [unique_id "apK-gWbX5DA3XO6e_qRZKQAAARA"]
[Sat Aug 29 05:12:01.084486 2026] [security2:error] [pid 1321:tid 1490] [client 68.155.159.216:61310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/sad/about.php"] [unique_id "apK-gWjCPtor9NZ-byQDFAAABj4"]
[Sat Aug 29 05:12:01.085925 2026] [security2:error] [pid 11274:tid 11565] [client 158.23.147.79:38746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-content/x.php"] [unique_id "apK-gWbX5DA3XO6e_qRZKgAAAYE"]
[Sat Aug 29 05:12:01.086458 2026] [security2:error] [pid 11274:tid 11558] [client 68.155.159.216:1899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.drjrae.com"] [uri "/first.php"] [unique_id "apK-gWbX5DA3XO6e_qRZKwAAAXo"]
[Sat Aug 29 05:12:01.086989 2026] [security2:error] [pid 11274:tid 11480] [client 20.104.18.15:37763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/revo.php"] [unique_id "apK-gWbX5DA3XO6e_qRZLAAAAS0"]
[Sat Aug 29 05:12:01.100405 2026] [security2:error] [pid 11274:tid 11489] [client 20.48.160.90:61643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/mad.php"] [unique_id "apK-gWbX5DA3XO6e_qRZLQAAATY"]
[Sat Aug 29 05:12:01.101419 2026] [security2:error] [pid 11274:tid 11512] [client 20.104.18.15:29646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/chosen.php"] [unique_id "apK-gWbX5DA3XO6e_qRZLwAAAU0"]
[Sat Aug 29 05:12:01.106266 2026] [security2:error] [pid 11274:tid 11513] [client 158.23.147.79:60184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK-gWbX5DA3XO6e_qRZMgAAAU4"]
[Sat Aug 29 05:12:01.112147 2026] [security2:error] [pid 1321:tid 1544] [client 20.151.200.44:65134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/eval.php"] [unique_id "apK-gWjCPtor9NZ-byQDFwAABnQ"]
[Sat Aug 29 05:12:01.124946 2026] [security2:error] [pid 11274:tid 11477] [client 158.23.147.79:24414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-admin.php"] [unique_id "apK-gWbX5DA3XO6e_qRZMwAAASs"]
[Sat Aug 29 05:12:01.127167 2026] [security2:error] [pid 11274:tid 11477] [client 20.104.18.15:29639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK-gWbX5DA3XO6e_qRZNAAAASs"]
[Sat Aug 29 05:12:01.127764 2026] [security2:error] [pid 11274:tid 11466] [client 158.23.184.117:21680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/.well-known/users.php"] [unique_id "apK-gWbX5DA3XO6e_qRZNQAAASA"]
[Sat Aug 29 05:12:01.134581 2026] [security2:error] [pid 1321:tid 1518] [client 158.23.147.79:59518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK-gWjCPtor9NZ-byQDGAAABlo"]
[Sat Aug 29 05:12:01.143496 2026] [security2:error] [pid 1321:tid 1566] [client 20.48.160.90:31391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK-gWjCPtor9NZ-byQDGQAABok"]
[Sat Aug 29 05:12:01.144063 2026] [security2:error] [pid 11274:tid 11494] [client 158.158.54.35:5848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/shell.php"] [unique_id "apK-gWbX5DA3XO6e_qRZOAAAATs"]
[Sat Aug 29 05:12:01.157770 2026] [security2:error] [pid 11274:tid 11502] [client 68.155.159.216:49052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/asd.php"] [unique_id "apK-gWbX5DA3XO6e_qRZPAAAAUM"]
[Sat Aug 29 05:12:01.160981 2026] [security2:error] [pid 1321:tid 1498] [client 20.48.160.90:23713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/000.php/index.php"] [unique_id "apK-gWjCPtor9NZ-byQDGgAABkY"]
[Sat Aug 29 05:12:01.165889 2026] [security2:error] [pid 1321:tid 1548] [client 68.155.159.216:64037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-content/index.php"] [unique_id "apK-gWjCPtor9NZ-byQDGwAABnc"]
[Sat Aug 29 05:12:01.184898 2026] [security2:error] [pid 11274:tid 11560] [client 158.23.184.117:32412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/.well-known/admin.php"] [unique_id "apK-gWbX5DA3XO6e_qRZQAAAAXw"]
[Sat Aug 29 05:12:01.204043 2026] [security2:error] [pid 1321:tid 1555] [client 40.83.93.50:10532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/alfa-rex1.php"] [unique_id "apK-gWjCPtor9NZ-byQDIAAABn4"]
[Sat Aug 29 05:12:01.216308 2026] [security2:error] [pid 1321:tid 1517] [client 20.104.49.130:36738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.timportlock.net"] [uri "/mac.php"] [unique_id "apK-gWjCPtor9NZ-byQDIgAABlk"]
[Sat Aug 29 05:12:01.234041 2026] [security2:error] [pid 11274:tid 11490] [client 20.104.18.15:29123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/file1221.php"] [unique_id "apK-gWbX5DA3XO6e_qRZQwAAATc"]
[Sat Aug 29 05:12:01.235633 2026] [security2:error] [pid 1321:tid 1516] [client 20.151.200.44:27160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/6y7t.php"] [unique_id "apK-gWjCPtor9NZ-byQDJQAABlg"]
[Sat Aug 29 05:12:01.243172 2026] [security2:error] [pid 1321:tid 1519] [client 20.48.160.90:37845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/st.php"] [unique_id "apK-gWjCPtor9NZ-byQDJgAABls"]
[Sat Aug 29 05:12:01.245966 2026] [security2:error] [pid 1321:tid 1529] [client 68.155.159.216:62843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-content/x/index.php"] [unique_id "apK-gWjCPtor9NZ-byQDJwAABmU"]
[Sat Aug 29 05:12:01.254127 2026] [security2:error] [pid 11274:tid 11559] [client 45.148.10.62:52900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zow.gui.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "apK-gWbX5DA3XO6e_qRZRgAAAXs"]
[Sat Aug 29 05:12:01.256557 2026] [security2:error] [pid 11274:tid 11515] [client 43.173.182.137:45058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.182.173.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewtopic.php"] [unique_id "apK-gWbX5DA3XO6e_qRZRAAAAVA"]
[Sat Aug 29 05:12:01.262965 2026] [security2:error] [pid 1321:tid 1547] [client 93.123.109.228:52018] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/apis/.env"] [unique_id "apK-gWjCPtor9NZ-byQDKAAABnY"]
[Sat Aug 29 05:12:01.265413 2026] [security2:error] [pid 11274:tid 11476] [client 158.158.54.35:28865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/php.php"] [unique_id "apK-gWbX5DA3XO6e_qRZRwAAASo"]
[Sat Aug 29 05:12:01.270173 2026] [security2:error] [pid 11274:tid 11521] [client 20.104.18.15:29667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/5PJcpMFsD8B.php"] [unique_id "apK-gWbX5DA3XO6e_qRZSQAAAVY"]
[Sat Aug 29 05:12:01.271833 2026] [security2:error] [pid 1321:tid 1586] [client 158.23.184.117:21689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/.well-known/wp-blog-header.php"] [unique_id "apK-gWjCPtor9NZ-byQDKgAABp0"]
[Sat Aug 29 05:12:01.275167 2026] [security2:error] [pid 11274:tid 11553] [client 20.48.160.90:31423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/about.php"] [unique_id "apK-gWbX5DA3XO6e_qRZSwAAAXU"]
[Sat Aug 29 05:12:01.286321 2026] [security2:error] [pid 11274:tid 11543] [client 20.104.18.15:37802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/birrs.php"] [unique_id "apK-gWbX5DA3XO6e_qRZTAAAAWs"]
[Sat Aug 29 05:12:01.298576 2026] [security2:error] [pid 1321:tid 1581] [client 20.48.160.90:23699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/Jcrop.php"] [unique_id "apK-gWjCPtor9NZ-byQDMgAABpg"]
[Sat Aug 29 05:12:01.321231 2026] [security2:error] [pid 1321:tid 1536] [client 43.173.180.148:57222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 148.180.173.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewforum.php"] [unique_id "apK-gWjCPtor9NZ-byQDNgAABmw"]
[Sat Aug 29 05:12:01.330461 2026] [security2:error] [pid 1321:tid 1491] [client 158.23.184.117:31835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/.well-known/api.php"] [unique_id "apK-gWjCPtor9NZ-byQDOAAABj8"]
[Sat Aug 29 05:12:01.341330 2026] [security2:error] [pid 1321:tid 1601] [client 20.52.41.200:4738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/theme.php"] [unique_id "apK-gWjCPtor9NZ-byQDOwAABqw"]
[Sat Aug 29 05:12:01.353020 2026] [security2:error] [pid 11274:tid 11572] [client 20.104.49.130:64169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/222.php"] [unique_id "apK-gWbX5DA3XO6e_qRZVwAAAYg"]
[Sat Aug 29 05:12:01.369687 2026] [security2:error] [pid 11274:tid 11467] [client 93.123.109.228:51990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/app/.env"] [unique_id "apK-gWbX5DA3XO6e_qRZWAAAASE"]
[Sat Aug 29 05:12:01.376299 2026] [security2:error] [pid 1321:tid 1599] [client 20.104.49.130:48794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/wen.php"] [unique_id "apK-gWjCPtor9NZ-byQDRAAABqo"]
[Sat Aug 29 05:12:01.380060 2026] [security2:error] [pid 11274:tid 11555] [client 20.100.175.163:9249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-admin/a.php"] [unique_id "apK-gWbX5DA3XO6e_qRZWgAAAXc"]
[Sat Aug 29 05:12:01.389269 2026] [security2:error] [pid 1321:tid 1495] [client 20.48.160.90:61667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/alfanew.php"] [unique_id "apK-gWjCPtor9NZ-byQDRQAABkM"]
[Sat Aug 29 05:12:01.390114 2026] [security2:error] [pid 11274:tid 11488] [client 20.104.18.15:29650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/nox.php"] [unique_id "apK-gWbX5DA3XO6e_qRZXQAAATU"]
[Sat Aug 29 05:12:01.392966 2026] [security2:error] [pid 1321:tid 1561] [client 40.83.93.50:8813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/defaults.php"] [unique_id "apK-gWjCPtor9NZ-byQDRwAABoQ"]
[Sat Aug 29 05:12:01.401544 2026] [security2:error] [pid 1321:tid 1582] [client 158.23.147.79:7143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/file5.php"] [unique_id "apK-gWjCPtor9NZ-byQDSQAABpk"]
[Sat Aug 29 05:12:01.404848 2026] [security2:error] [pid 1321:tid 1608] [client 20.104.18.15:29176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK-gWjCPtor9NZ-byQDSgAABrM"]
[Sat Aug 29 05:12:01.405769 2026] [security2:error] [pid 1321:tid 1490] [client 20.48.160.90:31393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/admin.php/admin.php"] [unique_id "apK-gWjCPtor9NZ-byQDSwAABj4"]
[Sat Aug 29 05:12:01.425744 2026] [security2:error] [pid 1321:tid 1591] [client 158.23.184.117:21791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/.well-known/wp-links-opml.php"] [unique_id "apK-gWjCPtor9NZ-byQDTgAABqI"]
[Sat Aug 29 05:12:01.436922 2026] [security2:error] [pid 1321:tid 1527] [client 4.205.62.107:64949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/ws79.php"] [unique_id "apK-gWjCPtor9NZ-byQDUAAABmM"]
[Sat Aug 29 05:12:01.449989 2026] [security2:error] [pid 1321:tid 1566] [client 20.48.160.90:50376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/35iDq8NAjLu.php"] [unique_id "apK-gWjCPtor9NZ-byQDUgAABok"]
[Sat Aug 29 05:12:01.454575 2026] [security2:error] [pid 1321:tid 1604] [client 20.151.200.44:62443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/sao.php"] [unique_id "apK-gWjCPtor9NZ-byQDVAAABq8"]
[Sat Aug 29 05:12:01.463121 2026] [security2:error] [pid 1321:tid 1504] [client 20.240.128.207:8216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/item.php"] [unique_id "apK-gWjCPtor9NZ-byQDVgAABkw"]
[Sat Aug 29 05:12:01.466332 2026] [security2:error] [pid 1321:tid 1609] [client 20.100.175.163:27448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK-gWjCPtor9NZ-byQDWwAABrQ"]
[Sat Aug 29 05:12:01.466648 2026] [security2:error] [pid 11274:tid 11507] [client 54.86.59.155:16041] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "www.freeadobeflashtutorials.com"] [uri "/robots.txt"] [unique_id "apK-gWbX5DA3XO6e_qRZYgAAAUg"]
[Sat Aug 29 05:12:01.473858 2026] [security2:error] [pid 1321:tid 1507] [client 20.104.18.15:37702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/sss.php"] [unique_id "apK-gWjCPtor9NZ-byQDXgAABk8"]
[Sat Aug 29 05:12:01.477204 2026] [security2:error] [pid 11274:tid 11451] [client 68.155.159.216:14120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK-gWbX5DA3XO6e_qRZZgAAARE"]
[Sat Aug 29 05:12:01.481137 2026] [security2:error] [pid 11274:tid 11480] [client 158.23.184.117:32415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/.well-known/chosen.php"] [unique_id "apK-gWbX5DA3XO6e_qRZaAAAAS0"]
[Sat Aug 29 05:12:01.497103 2026] [security2:error] [pid 1321:tid 1580] [client 20.52.41.200:2659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/ws.php"] [unique_id "apK-gWjCPtor9NZ-byQDYwAABpc"]
[Sat Aug 29 05:12:01.505249 2026] [security2:error] [pid 1321:tid 1576] [client 158.158.54.35:19362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK-gWjCPtor9NZ-byQDZgAABpM"]
[Sat Aug 29 05:12:01.512704 2026] [security2:error] [pid 11274:tid 11487] [client 20.197.61.180:2029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/about.php525"] [unique_id "apK-gWbX5DA3XO6e_qRZcwAAATQ"]
[Sat Aug 29 05:12:01.521004 2026] [security2:error] [pid 1321:tid 1563] [client 20.104.18.15:29145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/akismet.php"] [unique_id "apK-gWjCPtor9NZ-byQDagAABoY"]
[Sat Aug 29 05:12:01.523120 2026] [security2:error] [pid 1321:tid 1574] [client 4.205.62.107:61711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/queue.php"] [unique_id "apK-gWjCPtor9NZ-byQDbAAABpE"]
[Sat Aug 29 05:12:01.534117 2026] [security2:error] [pid 11274:tid 11486] [client 20.48.160.90:61586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/ioxi.php"] [unique_id "apK-gWbX5DA3XO6e_qRZdgAAATM"]
[Sat Aug 29 05:12:01.536856 2026] [security2:error] [pid 11274:tid 11456] [client 52.139.37.240:62266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntcutsandscapes.tntrental.com"] [uri "/aged.php"] [unique_id "apK-gWbX5DA3XO6e_qRZdwAAARY"]
[Sat Aug 29 05:12:01.538464 2026] [security2:error] [pid 11274:tid 11495] [client 20.48.160.90:31439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/media.php"] [unique_id "apK-gWbX5DA3XO6e_qRZeQAAATw"]
[Sat Aug 29 05:12:01.545869 2026] [security2:error] [pid 1321:tid 1564] [client 20.104.18.15:29181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/wsd.php"] [unique_id "apK-gWjCPtor9NZ-byQDbwAABoc"]
[Sat Aug 29 05:12:01.559107 2026] [security2:error] [pid 1321:tid 1495] [client 68.155.159.216:1897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-includes/content.php"] [unique_id "apK-gWjCPtor9NZ-byQDcQAABkM"]
[Sat Aug 29 05:12:01.567486 2026] [security2:error] [pid 11274:tid 11476] [client 68.155.159.216:56756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/makeasmtp.php"] [unique_id "apK-gWbX5DA3XO6e_qRZfAAAASo"]
[Sat Aug 29 05:12:01.570726 2026] [security2:error] [pid 1321:tid 1542] [client 158.23.184.117:21671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/.well-known/wp-load.php"] [unique_id "apK-gWjCPtor9NZ-byQDdAAABnI"]
[Sat Aug 29 05:12:01.582630 2026] [security2:error] [pid 1321:tid 1583] [client 158.158.54.35:16217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/elp.php"] [unique_id "apK-gWjCPtor9NZ-byQDeAAABpo"]
[Sat Aug 29 05:12:01.586723 2026] [security2:error] [pid 11274:tid 11543] [client 68.155.159.216:43917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/simple.php"] [unique_id "apK-gWbX5DA3XO6e_qRZhwAAAWs"]
[Sat Aug 29 05:12:01.588049 2026] [security2:error] [pid 11274:tid 11546] [client 20.48.160.90:23712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/btx25.php"] [unique_id "apK-gWbX5DA3XO6e_qRZiAAAAW4"]
[Sat Aug 29 05:12:01.602598 2026] [security2:error] [pid 11274:tid 11379] [remote 74.7.227.143:42604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.district3.ca"] [uri "/D3WEBphysicalescape.php"] [unique_id "apK-gWbX5DA3XO6e_qRZiwABLEE"], referer: https://mail.district3.ca/
[Sat Aug 29 05:12:01.602863 2026] [security2:error] [pid 11274:tid 11568] [client 4.205.62.107:6889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/aws_settings.php"] [unique_id "apK-gWbX5DA3XO6e_qRZjAAAAYQ"]
[Sat Aug 29 05:12:01.621917 2026] [security2:error] [pid 1321:tid 1507] [client 158.23.147.79:64396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/makeasmtp.php"] [unique_id "apK-gWjCPtor9NZ-byQDeQAABk8"]
[Sat Aug 29 05:12:01.631884 2026] [security2:error] [pid 1321:tid 1501] [client 158.23.184.117:31828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/.well-known/config.php"] [unique_id "apK-gWjCPtor9NZ-byQDegAABkk"]
[Sat Aug 29 05:12:01.632135 2026] [security2:error] [pid 1321:tid 1590] [client 68.155.159.216:55080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.angelesforestranch.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK-gWjCPtor9NZ-byQDewAABqE"]
[Sat Aug 29 05:12:01.642090 2026] [security2:error] [pid 11274:tid 11538] [client 20.104.49.130:57323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.timportlock.net"] [uri "/ccc.php"] [unique_id "apK-gWbX5DA3XO6e_qRZjgAAAWc"]
[Sat Aug 29 05:12:01.649296 2026] [security2:error] [pid 11274:tid 11473] [client 111.235.68.106:48490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK-gWbX5DA3XO6e_qRZjwAAASc"]
[Sat Aug 29 05:12:01.649446 2026] [security2:error] [pid 11274:tid 11473] [client 111.235.68.106:48490] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK-gWbX5DA3XO6e_qRZjwAAASc"]
[Sat Aug 29 05:12:01.652871 2026] [security2:error] [pid 1321:tid 1607] [client 20.104.18.15:29675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/ajax.php"] [unique_id "apK-gWjCPtor9NZ-byQDfwAABrI"]
[Sat Aug 29 05:12:01.663145 2026] [security2:error] [pid 1321:tid 1547] [client 4.205.62.107:63007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/radio.php"] [unique_id "apK-gWjCPtor9NZ-byQDgAAABnY"]
[Sat Aug 29 05:12:01.677169 2026] [security2:error] [pid 1321:tid 1597] [client 20.48.160.90:31479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/mac.php"] [unique_id "apK-gWjCPtor9NZ-byQDgQAABqg"]
[Sat Aug 29 05:12:01.682353 2026] [security2:error] [pid 1321:tid 1500] [client 20.104.18.15:29648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/bulet.php"] [unique_id "apK-gWjCPtor9NZ-byQDgwAABkg"]
[Sat Aug 29 05:12:01.690387 2026] [security2:error] [pid 1321:tid 1565] [client 40.83.93.50:7115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/headerg.php"] [unique_id "apK-gWjCPtor9NZ-byQDhQAABog"]
[Sat Aug 29 05:12:01.695101 2026] [security2:error] [pid 11274:tid 11503] [client 20.48.160.90:37829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/TNT.php"] [unique_id "apK-gWbX5DA3XO6e_qRZkQAAAUQ"]
[Sat Aug 29 05:12:01.703678 2026] [security2:error] [pid 11274:tid 11559] [client 158.158.54.35:22355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/init.php"] [unique_id "apK-gWbX5DA3XO6e_qRZkwAAAXs"]
[Sat Aug 29 05:12:01.714089 2026] [security2:error] [pid 1321:tid 1584] [client 158.23.184.117:21810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/.well-known/wp-mail.php"] [unique_id "apK-gWjCPtor9NZ-byQDiwAABps"]
[Sat Aug 29 05:12:01.714194 2026] [security2:error] [pid 1321:tid 1400] [remote 93.123.109.228:42940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/info.php"] [unique_id "apK-gWjCPtor9NZ-byQDjAAGbCo"]
[Sat Aug 29 05:12:01.714779 2026] [security2:error] [pid 1321:tid 1444] [remote 93.123.109.228:42940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/infophp.php"] [unique_id "apK-gWjCPtor9NZ-byQDjQAGbFY"]
[Sat Aug 29 05:12:01.715973 2026] [security2:error] [pid 11274:tid 11505] [client 158.23.147.79:49819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK-gWbX5DA3XO6e_qRZlQAAAUY"]
[Sat Aug 29 05:12:01.726717 2026] [security2:error] [pid 1321:tid 1516] [client 20.48.160.90:23698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/radio.php"] [unique_id "apK-gWjCPtor9NZ-byQDjwAABlg"]
[Sat Aug 29 05:12:01.728693 2026] [security2:error] [pid 11274:tid 11565] [client 20.240.128.207:20139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK-gWbX5DA3XO6e_qRZmAAAAYE"]
[Sat Aug 29 05:12:01.732424 2026] [security2:error] [pid 1321:tid 1601] [client 20.104.18.15:37800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/wp-includes/ID3/moon.php"] [unique_id "apK-gWjCPtor9NZ-byQDkAAABqw"]
[Sat Aug 29 05:12:01.733440 2026] [security2:error] [pid 1321:tid 1532] [client 52.139.37.240:62236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntcutsandscapes.tntrental.com"] [uri "/essexec.php"] [unique_id "apK-gWjCPtor9NZ-byQDkQAABmg"]
[Sat Aug 29 05:12:01.756190 2026] [autoindex:error] [pid 1321:tid 1398] [remote 45.148.10.62:52912] AH01276: Cannot serve directory /home3/zowguimy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:12:01.764417 2026] [security2:error] [pid 1321:tid 1486] [remote 93.123.109.228:42940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/infos.php"] [unique_id "apK-gWjCPtor9NZ-byQDlwAGbH8"]
[Sat Aug 29 05:12:01.780453 2026] [security2:error] [pid 1321:tid 1526] [client 158.23.184.117:31809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/.well-known/core.php"] [unique_id "apK-gWjCPtor9NZ-byQDmwAABmI"]
[Sat Aug 29 05:12:01.782952 2026] [security2:error] [pid 11274:tid 11561] [client 43.173.179.38:45864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 38.179.173.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewtopic.php"] [unique_id "apK-gWbX5DA3XO6e_qRZnAAAAX0"]
[Sat Aug 29 05:12:01.803610 2026] [security2:error] [pid 1321:tid 1514] [client 20.52.41.200:4404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/classwithtostring.php"] [unique_id "apK-gWjCPtor9NZ-byQDoAAABlY"]
[Sat Aug 29 05:12:01.811690 2026] [security2:error] [pid 1321:tid 1591] [client 20.48.160.90:31380] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/1.php"] [unique_id "apK-gWjCPtor9NZ-byQDoQAABqI"]
[Sat Aug 29 05:12:01.811825 2026] [security2:error] [pid 1321:tid 1591] [client 20.48.160.90:31380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/1.php"] [unique_id "apK-gWjCPtor9NZ-byQDoQAABqI"]
[Sat Aug 29 05:12:01.814506 2026] [security2:error] [pid 11274:tid 11466] [client 20.104.18.15:29647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/atomlib.php"] [unique_id "apK-gWbX5DA3XO6e_qRZngAAASA"]
[Sat Aug 29 05:12:01.816277 2026] [security2:error] [pid 11274:tid 11448] [client 20.151.200.44:63782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/uuu.php"] [unique_id "apK-gWbX5DA3XO6e_qRZnwAAAQ4"]
[Sat Aug 29 05:12:01.828649 2026] [security2:error] [pid 1321:tid 1605] [client 4.205.62.107:32549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/sadd.php"] [unique_id "apK-gWjCPtor9NZ-byQDogAABrA"]
[Sat Aug 29 05:12:01.831655 2026] [security2:error] [pid 1321:tid 1544] [client 20.104.18.15:29132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/av.php"] [unique_id "apK-gWjCPtor9NZ-byQDowAABnQ"]
[Sat Aug 29 05:12:01.845623 2026] [security2:error] [pid 1321:tid 1566] [client 93.123.109.228:52010] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/application/.env"] [unique_id "apK-gWjCPtor9NZ-byQDpAAABok"]
[Sat Aug 29 05:12:01.852188 2026] [security2:error] [pid 1321:tid 1583] [client 20.48.160.90:61646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/cd.php"] [unique_id "apK-gWjCPtor9NZ-byQDpwAABpo"]
[Sat Aug 29 05:12:01.853138 2026] [security2:error] [pid 11274:tid 11502] [client 93.123.109.228:51940] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/apps/.env"] [unique_id "apK-gWbX5DA3XO6e_qRZowAAAUM"]
[Sat Aug 29 05:12:01.859805 2026] [security2:error] [pid 1321:tid 1508] [client 158.23.184.117:21632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/.well-known/wp-settings.php"] [unique_id "apK-gWjCPtor9NZ-byQDqAAABlA"]
[Sat Aug 29 05:12:01.863138 2026] [security2:error] [pid 11274:tid 11492] [client 20.48.160.90:23749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/dex.php"] [unique_id "apK-gWbX5DA3XO6e_qRZpgAAATk"]
[Sat Aug 29 05:12:01.885432 2026] [security2:error] [pid 11274:tid 11461] [client 20.151.200.44:55685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/fgd.php"] [unique_id "apK-gWbX5DA3XO6e_qRZqQAAARs"]
[Sat Aug 29 05:12:01.893375 2026] [security2:error] [pid 1321:tid 1595] [client 40.83.93.50:9024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/post.php"] [unique_id "apK-gWjCPtor9NZ-byQDqgAABqY"]
[Sat Aug 29 05:12:01.904006 2026] [security2:error] [pid 11274:tid 11552] [client 20.104.18.15:37758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/xmini4.php"] [unique_id "apK-gWbX5DA3XO6e_qRZqgAAAXQ"]
[Sat Aug 29 05:12:01.912704 2026] [security2:error] [pid 11274:tid 11485] [client 43.172.197.161:43440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 161.197.172.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewforum.php"] [unique_id "apK-gWbX5DA3XO6e_qRZpwAAATI"]
[Sat Aug 29 05:12:01.930034 2026] [security2:error] [pid 11274:tid 11530] [client 158.23.184.117:32407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/.well-known/data.php"] [unique_id "apK-gWbX5DA3XO6e_qRZrAAAAV8"]
[Sat Aug 29 05:12:01.945073 2026] [security2:error] [pid 11274:tid 11496] [client 52.139.37.240:62208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntcutsandscapes.tntrental.com"] [uri "/fw.php"] [unique_id "apK-gWbX5DA3XO6e_qRZrQAAAT0"]
[Sat Aug 29 05:12:01.950270 2026] [security2:error] [pid 1321:tid 1517] [client 20.220.204.93:52238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/ms.php"] [unique_id "apK-gWjCPtor9NZ-byQDrgAABlk"]
[Sat Aug 29 05:12:01.951169 2026] [security2:error] [pid 11274:tid 11452] [client 20.240.128.207:4093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/t.php"] [unique_id "apK-gWbX5DA3XO6e_qRZrgAAARI"]
[Sat Aug 29 05:12:01.952790 2026] [security2:error] [pid 1321:tid 1531] [client 158.158.54.35:5561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-good.php"] [unique_id "apK-gWjCPtor9NZ-byQDrwAABmc"]
[Sat Aug 29 05:12:01.953167 2026] [security2:error] [pid 1321:tid 1608] [client 20.52.41.200:2709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-themes.php"] [unique_id "apK-gWjCPtor9NZ-byQDsAAABrM"]
[Sat Aug 29 05:12:01.953174 2026] [security2:error] [pid 11274:tid 11495] [client 20.48.160.90:31364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/classwithtostring.php"] [unique_id "apK-gWbX5DA3XO6e_qRZrwAAATw"]
[Sat Aug 29 05:12:01.962972 2026] [security2:error] [pid 1321:tid 1561] [client 20.100.175.163:4289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/css/index.php"] [unique_id "apK-gWjCPtor9NZ-byQDsQAABoQ"]
[Sat Aug 29 05:12:01.974205 2026] [security2:error] [pid 1321:tid 1507] [client 20.104.18.15:29162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/images.php"] [unique_id "apK-gWjCPtor9NZ-byQDsgAABk8"]
[Sat Aug 29 05:12:01.983522 2026] [security2:error] [pid 1321:tid 1588] [client 20.104.18.15:29058] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.buckaroos.us"] [uri "/1.php"] [unique_id "apK-gWjCPtor9NZ-byQDswAABp8"]
[Sat Aug 29 05:12:01.983645 2026] [security2:error] [pid 1321:tid 1588] [client 20.104.18.15:29058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/1.php"] [unique_id "apK-gWjCPtor9NZ-byQDswAABp8"]
[Sat Aug 29 05:12:01.986548 2026] [security2:error] [pid 11274:tid 11468] [client 20.48.160.90:37782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/luuf.php"] [unique_id "apK-gWbX5DA3XO6e_qRZtAAAASI"]
[Sat Aug 29 05:12:01.998959 2026] [security2:error] [pid 11274:tid 11476] [client 158.23.147.79:43365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK-gWbX5DA3XO6e_qRZtgAAASo"]
[Sat Aug 29 05:12:02.000389 2026] [security2:error] [pid 11274:tid 11543] [client 20.48.160.90:23745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/giodywky.php"] [unique_id "apK-gWbX5DA3XO6e_qRZtwAAAWs"]
[Sat Aug 29 05:12:02.013550 2026] [security2:error] [pid 1321:tid 1506] [client 57.141.14.2:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/cart/"] [unique_id "apK-gmjCPtor9NZ-byQDtgAABk4"]
[Sat Aug 29 05:12:02.022417 2026] [security2:error] [pid 11274:tid 11526] [client 158.23.184.117:22272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/.well-known/wp-signup.php"] [unique_id "apK-gmbX5DA3XO6e_qRZuAAAAVs"]
[Sat Aug 29 05:12:02.041215 2026] [security2:error] [pid 1321:tid 1548] [client 20.100.175.163:21640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK-gmjCPtor9NZ-byQDuwAABnc"]
[Sat Aug 29 05:12:02.042880 2026] [security2:error] [pid 1321:tid 1490] [client 158.158.54.35:15093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wp-content/cong.php"] [unique_id "apK-gmjCPtor9NZ-byQDvAAABj4"]
[Sat Aug 29 05:12:02.069963 2026] [security2:error] [pid 1321:tid 1580] [client 20.151.200.44:27149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/0xs.php"] [unique_id "apK-gmjCPtor9NZ-byQDwgAABpc"]
[Sat Aug 29 05:12:02.078446 2026] [security2:error] [pid 11274:tid 11540] [client 158.23.184.117:32393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/.well-known/db-status.php"] [unique_id "apK-gmbX5DA3XO6e_qRZxAAAAWk"]
[Sat Aug 29 05:12:02.085694 2026] [security2:error] [pid 1321:tid 1584] [client 20.220.204.93:59026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/zxekqlxb.php"] [unique_id "apK-gmjCPtor9NZ-byQDxwAABps"]
[Sat Aug 29 05:12:02.088253 2026] [security2:error] [pid 11274:tid 11499] [client 20.48.160.90:52033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/wp-ws68.php"] [unique_id "apK-gmbX5DA3XO6e_qRZxQAAAUA"]
[Sat Aug 29 05:12:02.104905 2026] [security2:error] [pid 1321:tid 1515] [client 20.104.18.15:29640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/ops.php"] [unique_id "apK-gmjCPtor9NZ-byQDygAABlc"]
[Sat Aug 29 05:12:02.121835 2026] [security2:error] [pid 1321:tid 1563] [client 20.48.160.90:61662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/fex.php"] [unique_id "apK-gmjCPtor9NZ-byQDzAAABoY"]
[Sat Aug 29 05:12:02.123108 2026] [security2:error] [pid 1321:tid 1574] [client 20.104.18.15:36931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/gulu.php"] [unique_id "apK-gmjCPtor9NZ-byQDzQAABpE"]
[Sat Aug 29 05:12:02.136187 2026] [security2:error] [pid 11274:tid 11450] [client 20.151.200.44:21901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/private.php"] [unique_id "apK-gmbX5DA3XO6e_qRZyAAAARA"]
[Sat Aug 29 05:12:02.141226 2026] [security2:error] [pid 1321:tid 1573] [client 52.139.37.240:63588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntcutsandscapes.tntrental.com"] [uri "/zwso.php"] [unique_id "apK-gmjCPtor9NZ-byQDzgAABpA"]
[Sat Aug 29 05:12:02.149394 2026] [security2:error] [pid 11274:tid 11553] [client 158.158.54.35:32200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "apK-gmbX5DA3XO6e_qRZyQAAAXU"]
[Sat Aug 29 05:12:02.151655 2026] [security2:error] [pid 1321:tid 1603] [client 20.48.160.90:29182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/wp-kz.php"] [unique_id "apK-gmjCPtor9NZ-byQDzwAABq4"]
[Sat Aug 29 05:12:02.164890 2026] [security2:error] [pid 11274:tid 11539] [client 158.23.147.79:62792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK-gmbX5DA3XO6e_qRZzgAAAWg"]
[Sat Aug 29 05:12:02.166401 2026] [security2:error] [pid 1321:tid 1581] [client 158.23.184.117:21768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/002.php"] [unique_id "apK-gmjCPtor9NZ-byQD0AAABpg"]
[Sat Aug 29 05:12:02.166737 2026] [security2:error] [pid 11274:tid 11527] [client 4.205.62.107:32567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/rpk.php"] [unique_id "apK-gmbX5DA3XO6e_qRZzwAAAVw"]
[Sat Aug 29 05:12:02.177113 2026] [security2:error] [pid 1321:tid 1593] [client 40.83.93.50:17563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/meta.php"] [unique_id "apK-gmjCPtor9NZ-byQD0QAABqQ"]
[Sat Aug 29 05:12:02.178574 2026] [security2:error] [pid 1321:tid 1523] [client 20.104.18.15:29177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/samll.php"] [unique_id "apK-gmjCPtor9NZ-byQD0gAABl8"]
[Sat Aug 29 05:12:02.194325 2026] [security2:error] [pid 1321:tid 1504] [client 158.23.147.79:38735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK-gmjCPtor9NZ-byQD0wAABkw"]
[Sat Aug 29 05:12:02.222309 2026] [security2:error] [pid 1321:tid 1492] [client 4.205.62.107:5517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/min.php"] [unique_id "apK-gmjCPtor9NZ-byQD1gAABkA"]
[Sat Aug 29 05:12:02.224443 2026] [security2:error] [pid 1321:tid 1502] [client 158.23.184.117:32422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/.well-known/f35.php"] [unique_id "apK-gmjCPtor9NZ-byQD2AAABko"]
[Sat Aug 29 05:12:02.224463 2026] [security2:error] [pid 1321:tid 1527] [client 20.48.160.90:31376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/simple.php"] [unique_id "apK-gmjCPtor9NZ-byQD1wAABmM"]
[Sat Aug 29 05:12:02.231171 2026] [security2:error] [pid 1321:tid 1605] [client 158.23.147.79:24500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK-gmjCPtor9NZ-byQD2QAABrA"]
[Sat Aug 29 05:12:02.245124 2026] [security2:error] [pid 1321:tid 1583] [client 20.104.49.130:60749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/browse.php"] [unique_id "apK-gmjCPtor9NZ-byQD2wAABpo"]
[Sat Aug 29 05:12:02.245131 2026] [security2:error] [pid 1321:tid 1566] [client 20.104.18.15:29160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/coffexium.php"] [unique_id "apK-gmjCPtor9NZ-byQD3AAABok"]
[Sat Aug 29 05:12:02.247025 2026] [security2:error] [pid 11274:tid 11444] [client 158.23.147.79:60114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/ans.php"] [unique_id "apK-gmbX5DA3XO6e_qRZ1QAAAQo"]
[Sat Aug 29 05:12:02.251754 2026] [security2:error] [pid 1321:tid 1501] [client 20.197.61.180:1118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/spip.php"] [unique_id "apK-gmjCPtor9NZ-byQD3gAABkk"]
[Sat Aug 29 05:12:02.261368 2026] [security2:error] [pid 11274:tid 11498] [client 68.155.159.216:49026] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webmail.ourstemclass.com"] [uri "/1.php"] [unique_id "apK-gmbX5DA3XO6e_qRZ1wAAAT8"]
[Sat Aug 29 05:12:02.261478 2026] [security2:error] [pid 11274:tid 11498] [client 68.155.159.216:49026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/1.php"] [unique_id "apK-gmbX5DA3XO6e_qRZ1wAAAT8"]
[Sat Aug 29 05:12:02.261629 2026] [security2:error] [pid 11274:tid 11503] [client 20.52.41.200:5146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/news.php"] [unique_id "apK-gmbX5DA3XO6e_qRZ2AAAAUQ"]
[Sat Aug 29 05:12:02.275785 2026] [security2:error] [pid 11274:tid 11494] [client 20.48.160.90:61669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/l.php"] [unique_id "apK-gmbX5DA3XO6e_qRZ2gAAATs"]
[Sat Aug 29 05:12:02.278407 2026] [security2:error] [pid 11274:tid 11475] [client 68.155.159.216:64084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/about/function.php"] [unique_id "apK-gmbX5DA3XO6e_qRZ2wAAASk"]
[Sat Aug 29 05:12:02.285536 2026] [security2:error] [pid 11274:tid 11448] [client 20.48.160.90:29150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/wp-includes/ID3/getid.php"] [unique_id "apK-gmbX5DA3XO6e_qRZ3AAAAQ4"]
[Sat Aug 29 05:12:02.292185 2026] [security2:error] [pid 1321:tid 1455] [remote 45.148.10.62:52912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zow.gui.mybluehost.me"] [uri "/wp-login.php"] [unique_id "apK-gmjCPtor9NZ-byQD4QAGRmA"]
[Sat Aug 29 05:12:02.308251 2026] [security2:error] [pid 11274:tid 11492] [client 158.23.147.79:54010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK-gmbX5DA3XO6e_qRZ3gAAATk"]
[Sat Aug 29 05:12:02.309643 2026] [security2:error] [pid 1321:tid 1555] [client 158.23.184.117:21638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/0x.php"] [unique_id "apK-gmjCPtor9NZ-byQD4gAABn4"]
[Sat Aug 29 05:12:02.310664 2026] [security2:error] [pid 11274:tid 11481] [client 20.104.18.15:29164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/she11.php"] [unique_id "apK-gmbX5DA3XO6e_qRZ3wAAAS4"]
[Sat Aug 29 05:12:02.336458 2026] [security2:error] [pid 1321:tid 1509] [client 52.139.37.240:62234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntcutsandscapes.tntrental.com"] [uri "/admin/function.php"] [unique_id "apK-gmjCPtor9NZ-byQD5AAABlE"]
[Sat Aug 29 05:12:02.352054 2026] [security2:error] [pid 1321:tid 1609] [client 20.104.18.15:37794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/replace.php"] [unique_id "apK-gmjCPtor9NZ-byQD5QAABrQ"]
[Sat Aug 29 05:12:02.356642 2026] [security2:error] [pid 1321:tid 1507] [client 20.48.160.90:48363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/aaa.php"] [unique_id "apK-gmjCPtor9NZ-byQD5gAABk8"]
[Sat Aug 29 05:12:02.373665 2026] [security2:error] [pid 11274:tid 11514] [client 158.23.184.117:31857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK-gmbX5DA3XO6e_qRZ6gAAAU8"]
[Sat Aug 29 05:12:02.389269 2026] [security2:error] [pid 11274:tid 11530] [client 20.104.49.130:34506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/worksec.php"] [unique_id "apK-gmbX5DA3XO6e_qRZ6wAAAV8"]
[Sat Aug 29 05:12:02.390789 2026] [security2:error] [pid 1321:tid 1582] [client 40.83.93.50:13993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/csv.php"] [unique_id "apK-gmjCPtor9NZ-byQD6QAABpk"]
[Sat Aug 29 05:12:02.395583 2026] [security2:error] [pid 11274:tid 11486] [client 20.104.18.15:29161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/BDKR28WP.php"] [unique_id "apK-gmbX5DA3XO6e_qRZ7AAAATM"]
[Sat Aug 29 05:12:02.400521 2026] [security2:error] [pid 1321:tid 1548] [client 158.23.147.79:14167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-includes/index.php"] [unique_id "apK-gmjCPtor9NZ-byQD6wAABnc"]
[Sat Aug 29 05:12:02.405481 2026] [security2:error] [pid 1321:tid 1490] [client 20.220.204.93:59035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/init.php"] [unique_id "apK-gmjCPtor9NZ-byQD7AAABj4"]
[Sat Aug 29 05:12:02.409252 2026] [security2:error] [pid 11274:tid 11480] [client 20.52.41.200:2680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-trackback.php"] [unique_id "apK-gmbX5DA3XO6e_qRZ8QAAAS0"]
[Sat Aug 29 05:12:02.413501 2026] [security2:error] [pid 1321:tid 1508] [client 158.158.54.35:5558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "apK-gmjCPtor9NZ-byQD7QAABlA"]
[Sat Aug 29 05:12:02.416699 2026] [security2:error] [pid 11274:tid 11352] [remote 93.123.109.228:42790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/test.php"] [unique_id "apK-gmbX5DA3XO6e_qRZ9QABGyc"]
[Sat Aug 29 05:12:02.426364 2026] [security2:error] [pid 11274:tid 11511] [client 20.48.160.90:50412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/session.php"] [unique_id "apK-gmbX5DA3XO6e_qRZ9wAAAUw"]
[Sat Aug 29 05:12:02.439218 2026] [security2:error] [pid 11274:tid 11571] [client 20.240.128.207:3035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/i.php"] [unique_id "apK-gmbX5DA3XO6e_qRZ-AAAAYc"]
[Sat Aug 29 05:12:02.439764 2026] [security2:error] [pid 11274:tid 11495] [client 20.48.160.90:25027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/xr.php"] [unique_id "apK-gmbX5DA3XO6e_qRZ-QAAATw"]
[Sat Aug 29 05:12:02.443048 2026] [security2:error] [pid 11274:tid 11466] [client 20.100.175.163:4299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-cron.php"] [unique_id "apK-gmbX5DA3XO6e_qRZ-gAAASA"]
[Sat Aug 29 05:12:02.455544 2026] [security2:error] [pid 11274:tid 11496] [client 158.23.184.117:21802] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.freejohnstuart.com"] [uri "/1.php"] [unique_id "apK-gmbX5DA3XO6e_qRZ_AAAAT0"]
[Sat Aug 29 05:12:02.455678 2026] [security2:error] [pid 11274:tid 11496] [client 158.23.184.117:21802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/1.php"] [unique_id "apK-gmbX5DA3XO6e_qRZ_AAAAT0"]
[Sat Aug 29 05:12:02.459479 2026] [security2:error] [pid 1321:tid 1615] [client 106.222.207.18:21319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.207.222.106.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "doctoranddog.com"] [uri "/xmlrpc.php"] [unique_id "apK-gmjCPtor9NZ-byQD9gAABro"]
[Sat Aug 29 05:12:02.459667 2026] [security2:error] [pid 1321:tid 1615] [client 106.222.207.18:21319] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "doctoranddog.com"] [uri "/xmlrpc.php"] [unique_id "apK-gmjCPtor9NZ-byQD9gAABro"]
[Sat Aug 29 05:12:02.461709 2026] [security2:error] [pid 11274:tid 11560] [client 20.104.18.15:29642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/kerang.php"] [unique_id "apK-gmbX5DA3XO6e_qRZ_QAAAXw"]
[Sat Aug 29 05:12:02.488205 2026] [security2:error] [pid 11274:tid 11515] [client 20.48.160.90:31445] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/wp-admin/css/colors/modern/"] [unique_id "apK-gmbX5DA3XO6e_qRZ_wAAAVA"]
[Sat Aug 29 05:12:02.492177 2026] [security2:error] [pid 11274:tid 11468] [client 20.104.49.130:63588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/002.php"] [unique_id "apK-gmbX5DA3XO6e_qRaAAAAASI"]
[Sat Aug 29 05:12:02.493643 2026] [security2:error] [pid 1321:tid 1561] [client 158.158.54.35:1280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK-gmjCPtor9NZ-byQD-gAABoQ"]
[Sat Aug 29 05:12:02.507419 2026] [security2:error] [pid 11274:tid 11479] [client 158.23.147.79:7106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/file88.php"] [unique_id "apK-gmbX5DA3XO6e_qRaAQAAASw"]
[Sat Aug 29 05:12:02.507829 2026] [security2:error] [pid 1321:tid 1576] [client 93.123.109.228:52112] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/back-api/.env"] [unique_id "apK-gmjCPtor9NZ-byQD_AAABpM"]
[Sat Aug 29 05:12:02.522470 2026] [security2:error] [pid 1321:tid 1565] [client 158.23.184.117:31852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/.well-known/home.php"] [unique_id "apK-gmjCPtor9NZ-byQD_wAABog"]
[Sat Aug 29 05:12:02.526886 2026] [security2:error] [pid 1321:tid 1529] [client 20.100.175.163:25190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.rm64.com"] [uri "/wp-admin.php"] [unique_id "apK-gmjCPtor9NZ-byQEAAAABmU"]
[Sat Aug 29 05:12:02.531867 2026] [security2:error] [pid 1321:tid 1563] [client 20.104.18.15:29158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/sf.php"] [unique_id "apK-gmjCPtor9NZ-byQEAQAABoY"]
[Sat Aug 29 05:12:02.543847 2026] [security2:error] [pid 1321:tid 1574] [client 20.104.18.15:37797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/c4.php"] [unique_id "apK-gmjCPtor9NZ-byQEAgAABpE"]
[Sat Aug 29 05:12:02.550054 2026] [security2:error] [pid 1321:tid 1516] [client 52.139.37.240:62230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntcutsandscapes.tntrental.com"] [uri "/zoom1.php"] [unique_id "apK-gmjCPtor9NZ-byQEAwAABlg"]
[Sat Aug 29 05:12:02.559070 2026] [security2:error] [pid 11274:tid 11504] [client 20.48.160.90:50368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/eagle.php"] [unique_id "apK-gmbX5DA3XO6e_qRaBwAAAUU"]
[Sat Aug 29 05:12:02.571079 2026] [security2:error] [pid 1321:tid 1603] [client 4.205.62.107:64933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/public/wp-blog.php"] [unique_id "apK-gmjCPtor9NZ-byQEBAAABq4"]
[Sat Aug 29 05:12:02.576879 2026] [security2:error] [pid 11274:tid 11572] [client 20.48.160.90:37818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/Q3.php"] [unique_id "apK-gmbX5DA3XO6e_qRaCQAAAYg"]
[Sat Aug 29 05:12:02.591441 2026] [security2:error] [pid 1321:tid 1594] [client 20.151.200.44:22244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/lfi.php"] [unique_id "apK-gmjCPtor9NZ-byQEBQAABqU"]
[Sat Aug 29 05:12:02.593995 2026] [security2:error] [pid 1321:tid 1523] [client 93.123.109.228:52018] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/back-end/.env"] [unique_id "apK-gmjCPtor9NZ-byQEBgAABl8"]
[Sat Aug 29 05:12:02.598075 2026] [security2:error] [pid 1321:tid 1504] [client 20.240.128.207:14396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK-gmjCPtor9NZ-byQECAAABkw"]
[Sat Aug 29 05:12:02.600105 2026] [security2:error] [pid 11274:tid 11526] [client 158.23.184.117:22306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/10.php"] [unique_id "apK-gmbX5DA3XO6e_qRaCwAAAVs"]
[Sat Aug 29 05:12:02.622484 2026] [security2:error] [pid 1321:tid 1542] [client 93.123.109.228:52082] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/back/.env"] [unique_id "apK-gmjCPtor9NZ-byQEDAAABnI"]
[Sat Aug 29 05:12:02.622700 2026] [security2:error] [pid 1321:tid 1514] [client 20.104.18.15:29069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/m.php"] [unique_id "apK-gmjCPtor9NZ-byQEDQAABlY"]
[Sat Aug 29 05:12:02.626435 2026] [security2:error] [pid 11274:tid 11450] [client 20.48.160.90:52068] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "apK-gmbX5DA3XO6e_qRaDAAAARA"]
[Sat Aug 29 05:12:02.671799 2026] [security2:error] [pid 1321:tid 1532] [client 40.83.93.50:10902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/dxc.php"] [unique_id "apK-gmjCPtor9NZ-byQEDwAABmg"]
[Sat Aug 29 05:12:02.671868 2026] [security2:error] [pid 1321:tid 1610] [client 158.23.184.117:31868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/.well-known/index.php"] [unique_id "apK-gmjCPtor9NZ-byQEDgAABrU"]
[Sat Aug 29 05:12:02.671894 2026] [security2:error] [pid 11274:tid 11501] [client 20.104.18.15:29671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/k.php"] [unique_id "apK-gmbX5DA3XO6e_qRaDgAAAUI"]
[Sat Aug 29 05:12:02.680346 2026] [security2:error] [pid 11274:tid 11513] [client 68.155.159.216:1811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-admin/css/index.php"] [unique_id "apK-gmbX5DA3XO6e_qRaDwAAAU4"]
[Sat Aug 29 05:12:02.681506 2026] [security2:error] [pid 11274:tid 11507] [client 68.155.159.216:56751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK-gmbX5DA3XO6e_qRaEAAAAUg"]
[Sat Aug 29 05:12:02.684571 2026] [security2:error] [pid 11274:tid 11445] [client 20.104.49.130:64155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/k.php"] [unique_id "apK-gmbX5DA3XO6e_qRaEQAAAQs"]
[Sat Aug 29 05:12:02.686701 2026] [security2:error] [pid 11274:tid 11471] [client 93.123.109.228:52076] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/backend-api/.env"] [unique_id "apK-gmbX5DA3XO6e_qRaEgAAASU"]
[Sat Aug 29 05:12:02.690440 2026] [security2:error] [pid 11274:tid 11451] [client 4.205.62.107:60559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/doc.php"] [unique_id "apK-gmbX5DA3XO6e_qRaEwAAARE"]
[Sat Aug 29 05:12:02.693941 2026] [security2:error] [pid 1321:tid 1522] [client 20.48.160.90:23777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/up-kon.php"] [unique_id "apK-gmjCPtor9NZ-byQEFAAABl4"]
[Sat Aug 29 05:12:02.704223 2026] [security2:error] [pid 11274:tid 11484] [client 20.52.41.200:4644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/about/function.php"] [unique_id "apK-gmbX5DA3XO6e_qRaFAAAATE"]
[Sat Aug 29 05:12:02.713505 2026] [security2:error] [pid 11274:tid 11536] [client 93.123.109.228:51990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK-gmbX5DA3XO6e_qRaFQAAAWU"]
[Sat Aug 29 05:12:02.714880 2026] [security2:error] [pid 1321:tid 1555] [client 68.155.159.216:43998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/wp-admin/about.php"] [unique_id "apK-gmjCPtor9NZ-byQEFwAABn4"]
[Sat Aug 29 05:12:02.715077 2026] [security2:error] [pid 1321:tid 1497] [client 20.220.204.93:52294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/term.php"] [unique_id "apK-gmjCPtor9NZ-byQEGAAABkU"]
[Sat Aug 29 05:12:02.725054 2026] [security2:error] [pid 1321:tid 1588] [client 158.23.147.79:64465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK-gmjCPtor9NZ-byQEGQAABp8"]
[Sat Aug 29 05:12:02.735072 2026] [security2:error] [pid 1321:tid 1506] [client 4.205.62.107:6883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/wp-konfig.backup.php"] [unique_id "apK-gmjCPtor9NZ-byQEGgAABk4"]
[Sat Aug 29 05:12:02.738405 2026] [security2:error] [pid 1321:tid 1549] [client 68.155.159.216:55147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.angelesforestranch.com"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK-gmjCPtor9NZ-byQEGwAABng"]
[Sat Aug 29 05:12:02.741761 2026] [security2:error] [pid 1321:tid 1586] [client 20.48.160.90:37803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/Q1.php"] [unique_id "apK-gmjCPtor9NZ-byQEHAAABp0"]
[Sat Aug 29 05:12:02.741909 2026] [security2:error] [pid 1321:tid 1536] [client 158.23.184.117:21647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/100.php"] [unique_id "apK-gmjCPtor9NZ-byQEHQAABmw"]
[Sat Aug 29 05:12:02.746423 2026] [security2:error] [pid 1321:tid 1607] [client 20.104.18.15:37727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/rxr.php"] [unique_id "apK-gmjCPtor9NZ-byQEHgAABrI"]
[Sat Aug 29 05:12:02.759696 2026] [security2:error] [pid 11274:tid 11561] [client 20.48.160.90:31399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/shiny.php"] [unique_id "apK-gmbX5DA3XO6e_qRaHgAAAX0"]
[Sat Aug 29 05:12:02.760324 2026] [security2:error] [pid 11274:tid 11483] [client 52.139.37.240:63596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntcutsandscapes.tntrental.com"] [uri "/about.php7"] [unique_id "apK-gmbX5DA3XO6e_qRaHwAAATA"]
[Sat Aug 29 05:12:02.769882 2026] [security2:error] [pid 11274:tid 11534] [client 20.104.18.15:29151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/fling.php"] [unique_id "apK-gmbX5DA3XO6e_qRaIQAAAWM"]
[Sat Aug 29 05:12:02.796727 2026] [security2:error] [pid 11274:tid 11555] [client 20.104.49.130:60961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/bolt.php"] [unique_id "apK-gmbX5DA3XO6e_qRaKQAAAXc"]
[Sat Aug 29 05:12:02.811050 2026] [security2:error] [pid 1321:tid 1489] [client 20.104.18.15:29174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/82.php"] [unique_id "apK-gmjCPtor9NZ-byQEKwAABj0"]
[Sat Aug 29 05:12:02.811525 2026] [security2:error] [pid 11274:tid 11492] [client 4.205.62.107:62984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/xa.php"] [unique_id "apK-gmbX5DA3XO6e_qRaKwAAATk"]
[Sat Aug 29 05:12:02.817098 2026] [security2:error] [pid 11274:tid 11506] [client 158.23.184.117:31863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/.well-known/login.php"] [unique_id "apK-gmbX5DA3XO6e_qRaLAAAAUc"]
[Sat Aug 29 05:12:02.834444 2026] [security2:error] [pid 11274:tid 11485] [client 20.48.160.90:29181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/tinny.php"] [unique_id "apK-gmbX5DA3XO6e_qRaLwAAATI"]
[Sat Aug 29 05:12:02.840506 2026] [security2:error] [pid 11274:tid 11514] [client 20.151.200.44:65123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/quoys.php"] [unique_id "apK-gmbX5DA3XO6e_qRaMAAAAU8"]
[Sat Aug 29 05:12:02.844289 2026] [security2:error] [pid 11274:tid 11524] [client 20.151.200.44:27595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/waf.php"] [unique_id "apK-gmbX5DA3XO6e_qRaMQAAAVk"]
[Sat Aug 29 05:12:02.844674 2026] [security2:error] [pid 11274:tid 11530] [client 158.23.147.79:50119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/wp-content/cong.php"] [unique_id "apK-gmbX5DA3XO6e_qRaMgAAAV8"]
[Sat Aug 29 05:12:02.856939 2026] [security2:error] [pid 11274:tid 11493] [client 158.158.54.35:14742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/abcd.php"] [unique_id "apK-gmbX5DA3XO6e_qRaNQAAATo"]
[Sat Aug 29 05:12:02.867720 2026] [security2:error] [pid 11274:tid 11495] [client 68.155.159.216:62726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK-gmbX5DA3XO6e_qRaOAAAATw"]
[Sat Aug 29 05:12:02.877282 2026] [security2:error] [pid 1321:tid 1516] [client 20.48.160.90:25079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/nz.php"] [unique_id "apK-gmjCPtor9NZ-byQELwAABlg"]
[Sat Aug 29 05:12:02.879962 2026] [security2:error] [pid 1321:tid 1509] [client 40.83.93.50:8603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/fox.php"] [unique_id "apK-gmjCPtor9NZ-byQEMAAABlE"]
[Sat Aug 29 05:12:02.882202 2026] [security2:error] [pid 1321:tid 1366] [remote 93.123.109.228:42940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/php-info.php"] [unique_id "apK-gmjCPtor9NZ-byQEMQAGhQg"]
[Sat Aug 29 05:12:02.883980 2026] [security2:error] [pid 1321:tid 1473] [remote 93.123.109.228:42940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/php.php"] [unique_id "apK-gmjCPtor9NZ-byQEMgAGsXI"]
[Sat Aug 29 05:12:02.885265 2026] [security2:error] [pid 11274:tid 11490] [client 158.23.184.117:21783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/2.php"] [unique_id "apK-gmbX5DA3XO6e_qRaOQAAATc"]
[Sat Aug 29 05:12:02.893336 2026] [security2:error] [pid 1321:tid 1367] [remote 93.123.109.228:42940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/php_info.php"] [unique_id "apK-gmjCPtor9NZ-byQEMwAGmAk"]
[Sat Aug 29 05:12:02.894861 2026] [security2:error] [pid 11274:tid 11543] [client 20.48.160.90:31426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/goods.php"] [unique_id "apK-gmbX5DA3XO6e_qRaOwAAAWs"]
[Sat Aug 29 05:12:02.902941 2026] [security2:error] [pid 11274:tid 11468] [client 20.104.18.15:29689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/btyuio.php"] [unique_id "apK-gmbX5DA3XO6e_qRaPAAAASI"]
[Sat Aug 29 05:12:02.906544 2026] [security2:error] [pid 1321:tid 1594] [client 158.158.54.35:11122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-content/admin.php"] [unique_id "apK-gmjCPtor9NZ-byQENAAABqU"]
[Sat Aug 29 05:12:02.926288 2026] [security2:error] [pid 1321:tid 1605] [client 60.243.207.176:63728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK-gmjCPtor9NZ-byQENQAABrA"]
[Sat Aug 29 05:12:02.926456 2026] [security2:error] [pid 1321:tid 1605] [client 60.243.207.176:63728] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK-gmjCPtor9NZ-byQENQAABrA"]
[Sat Aug 29 05:12:02.936755 2026] [security2:error] [pid 11274:tid 11554] [client 68.155.159.216:14199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK-gmbX5DA3XO6e_qRaPwAAAXY"]
[Sat Aug 29 05:12:02.941692 2026] [security2:error] [pid 1321:tid 1580] [client 20.240.128.207:4888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/deepseek_d.php"] [unique_id "apK-gmjCPtor9NZ-byQENwAABpc"]
[Sat Aug 29 05:12:02.944177 2026] [security2:error] [pid 1321:tid 1504] [client 20.104.18.15:37754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.infraredtraining.in.th"] [uri "/reviall.php"] [unique_id "apK-gmjCPtor9NZ-byQEOAAABkw"]
[Sat Aug 29 05:12:02.948640 2026] [security2:error] [pid 1321:tid 1612] [client 93.123.109.228:52010] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/be/.env"] [unique_id "apK-gmjCPtor9NZ-byQEOQAABrc"]
[Sat Aug 29 05:12:02.950227 2026] [security2:error] [pid 1321:tid 1525] [client 20.100.175.163:11396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-block.php"] [unique_id "apK-gmjCPtor9NZ-byQEOgAABmE"]
[Sat Aug 29 05:12:02.955837 2026] [security2:error] [pid 11274:tid 11518] [client 158.158.54.35:15065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wp-mail.php"] [unique_id "apK-gmbX5DA3XO6e_qRaQAAAAVM"]
[Sat Aug 29 05:12:02.958789 2026] [security2:error] [pid 1321:tid 1553] [client 52.139.37.240:62260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntcutsandscapes.tntrental.com"] [uri "/cron.php"] [unique_id "apK-gmjCPtor9NZ-byQEPAAABnw"]
[Sat Aug 29 05:12:02.959406 2026] [security2:error] [pid 1321:tid 1542] [client 20.104.18.15:29130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/dex.php"] [unique_id "apK-gmjCPtor9NZ-byQEPQAABnI"]
[Sat Aug 29 05:12:02.964624 2026] [security2:error] [pid 1321:tid 1377] [remote 93.123.109.228:42940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/phpinfo.php"] [unique_id "apK-gmjCPtor9NZ-byQEPgAGqhM"]
[Sat Aug 29 05:12:02.965816 2026] [security2:error] [pid 1321:tid 1492] [client 4.205.62.107:60350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/application.config.php"] [unique_id "apK-gmjCPtor9NZ-byQEPwAABkA"]
[Sat Aug 29 05:12:02.966644 2026] [security2:error] [pid 1321:tid 1523] [client 158.23.184.117:31860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/.well-known/logs233/index.php"] [unique_id "apK-gmjCPtor9NZ-byQEQQAABl8"]
[Sat Aug 29 05:12:02.992027 2026] [security2:error] [pid 11274:tid 11448] [client 20.197.61.180:1963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/backup.php"] [unique_id "apK-gmbX5DA3XO6e_qRaQQAAAQ4"]
[Sat Aug 29 05:12:03.007630 2026] [security2:error] [pid 11274:tid 11499] [client 93.123.109.228:52126] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/beta/.env"] [unique_id "apK-g2bX5DA3XO6e_qRaQgAAAUA"]
[Sat Aug 29 05:12:03.008817 2026] [security2:error] [pid 11274:tid 11526] [client 93.123.109.228:52076] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/backup/.env"] [unique_id "apK-g2bX5DA3XO6e_qRaQwAAAVs"]
[Sat Aug 29 05:12:03.009797 2026] [security2:error] [pid 1321:tid 1577] [client 20.48.160.90:23682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/wp-easy.php"] [unique_id "apK-g2jCPtor9NZ-byQERAAABpQ"]
[Sat Aug 29 05:12:03.020880 2026] [security2:error] [pid 11274:tid 11549] [client 20.220.204.93:52287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/aaa.php"] [unique_id "apK-g2bX5DA3XO6e_qRaRAAAAXE"]
[Sat Aug 29 05:12:03.020891 2026] [security2:error] [pid 1321:tid 1532] [client 20.52.41.200:2197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/222.php"] [unique_id "apK-g2jCPtor9NZ-byQERgAABmg"]
[Sat Aug 29 05:12:03.022295 2026] [security2:error] [pid 1321:tid 1610] [client 20.48.160.90:37864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/sg.php"] [unique_id "apK-g2jCPtor9NZ-byQERwAABrU"]
[Sat Aug 29 05:12:03.026129 2026] [security2:error] [pid 11274:tid 11505] [client 20.48.160.90:48360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/000.php/index.php"] [unique_id "apK-g2bX5DA3XO6e_qRaRQAAAUY"]
[Sat Aug 29 05:12:03.029670 2026] [security2:error] [pid 1321:tid 1502] [client 158.23.184.117:21688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/222.php"] [unique_id "apK-g2jCPtor9NZ-byQESAAABko"]
[Sat Aug 29 05:12:03.040865 2026] [security2:error] [pid 1321:tid 1497] [client 20.151.200.44:63734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/vbbn.php"] [unique_id "apK-g2jCPtor9NZ-byQETwAABkU"]
[Sat Aug 29 05:12:03.052280 2026] [security2:error] [pid 1321:tid 1609] [client 20.104.18.15:29637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/dehnl.php"] [unique_id "apK-g2jCPtor9NZ-byQEUgAABrQ"]
[Sat Aug 29 05:12:03.114271 2026] [security2:error] [pid 1321:tid 1588] [client 158.23.184.117:31814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/.well-known/maintenance.php"] [unique_id "apK-g2jCPtor9NZ-byQEVAAABp8"]
[Sat Aug 29 05:12:03.118052 2026] [security2:error] [pid 1321:tid 1490] [client 20.104.18.15:29129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/inso.php"] [unique_id "apK-g2jCPtor9NZ-byQEVQAABj4"]
[Sat Aug 29 05:12:03.125898 2026] [security2:error] [pid 11274:tid 11497] [client 20.240.128.207:3853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/num.php"] [unique_id "apK-g2bX5DA3XO6e_qRaUAAAAT4"]
[Sat Aug 29 05:12:03.135759 2026] [security2:error] [pid 1321:tid 1500] [client 158.23.147.79:43675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/classwithtostring.php"] [unique_id "apK-g2jCPtor9NZ-byQEVgAABkg"]
[Sat Aug 29 05:12:03.157869 2026] [security2:error] [pid 11274:tid 11484] [client 20.48.160.90:61627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/hypo.php"] [unique_id "apK-g2bX5DA3XO6e_qRaUwAAATE"]
[Sat Aug 29 05:12:03.160321 2026] [security2:error] [pid 1321:tid 1515] [client 20.48.160.90:31414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/Jcrop.php"] [unique_id "apK-g2jCPtor9NZ-byQEWQAABlc"]
[Sat Aug 29 05:12:03.166225 2026] [core:error] [pid 11274:tid 11470] [client 20.52.41.200:5139] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:03.166254 2026] [core:error] [pid 11274:tid 11470] [client 20.52.41.200:5139] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:03.167484 2026] [security2:error] [pid 11274:tid 11444] [client 20.48.160.90:28786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/d7.php"] [unique_id "apK-g2bX5DA3XO6e_qRaVgAAAQo"]
[Sat Aug 29 05:12:03.171725 2026] [security2:error] [pid 1321:tid 1466] [remote 93.123.109.228:42940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/public/phpinfo.php"] [unique_id "apK-g2jCPtor9NZ-byQEWwAGqWs"]
[Sat Aug 29 05:12:03.175163 2026] [security2:error] [pid 1321:tid 1590] [client 158.23.184.117:21661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/24.php"] [unique_id "apK-g2jCPtor9NZ-byQEXQAABqE"]
[Sat Aug 29 05:12:03.176320 2026] [security2:error] [pid 11274:tid 11467] [client 40.83.93.50:6518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/wp-2019.php"] [unique_id "apK-g2bX5DA3XO6e_qRaWgAAASE"]
[Sat Aug 29 05:12:03.176607 2026] [security2:error] [pid 11274:tid 11471] [client 52.139.37.240:63571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntcutsandscapes.tntrental.com"] [uri "/wp-2019.php"] [unique_id "apK-g2bX5DA3XO6e_qRaWwAAASU"]
[Sat Aug 29 05:12:03.189029 2026] [security2:error] [pid 1321:tid 1565] [client 20.104.18.15:29671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/zoo2.php"] [unique_id "apK-g2jCPtor9NZ-byQEXwAABog"]
[Sat Aug 29 05:12:03.207828 2026] [security2:error] [pid 1321:tid 1510] [client 93.123.109.228:52112] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/client/.env"] [unique_id "apK-g2jCPtor9NZ-byQEYQAABlI"]
[Sat Aug 29 05:12:03.229469 2026] [security2:error] [pid 11274:tid 11494] [client 68.155.159.216:38673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/admin.php"] [unique_id "apK-g2bX5DA3XO6e_qRaXwAAATs"]
[Sat Aug 29 05:12:03.239244 2026] [security2:error] [pid 11274:tid 11475] [client 20.104.49.130:52349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/new.php"] [unique_id "apK-g2bX5DA3XO6e_qRaYAAAASk"]
[Sat Aug 29 05:12:03.242976 2026] [security2:error] [pid 1321:tid 1560] [client 106.216.114.82:53516] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "utahtsa.com"] [uri "/xmlrpc.php"] [unique_id "apK-g2jCPtor9NZ-byQEUAAABoM"]
[Sat Aug 29 05:12:03.244247 2026] [security2:error] [pid 11274:tid 11561] [client 20.220.204.93:52336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/xsox.php"] [unique_id "apK-g2bX5DA3XO6e_qRaYQAAAX0"]
[Sat Aug 29 05:12:03.248394 2026] [proxy_http:error] [pid 1018003:tid 1018064] (70007)The timeout specified has expired: [remote 57.141.14.83:32086] AH01102: error reading status line from remote server 127.0.0.1:8443
[Sat Aug 29 05:12:03.248421 2026] [proxy:error] [pid 1018003:tid 1018064] [remote 57.141.14.83:32086] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:12:03.258401 2026] [proxy_http:error] [pid 1034096:tid 1034327] (70007)The timeout specified has expired: [client 127.0.0.1:49084] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:12:03.258422 2026] [proxy:error] [pid 1034096:tid 1034327] [client 127.0.0.1:49084] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:12:03.258526 2026] [security2:error] [pid 11274:tid 11487] [client 20.104.18.15:29167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/aa.php"] [unique_id "apK-g2bX5DA3XO6e_qRaYgAAATQ"]
[Sat Aug 29 05:12:03.261168 2026] [security2:error] [pid 11274:tid 11551] [client 158.23.184.117:31865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/.well-known/min.php"] [unique_id "apK-g2bX5DA3XO6e_qRaYwAAAXM"]
[Sat Aug 29 05:12:03.270028 2026] [security2:error] [pid 11274:tid 11559] [client 102.253.10.25:28688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.10.253.102.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gavirestaurant.com"] [uri "/xmlrpc.php"] [unique_id "apK-g2bX5DA3XO6e_qRaZAAAAXs"]
[Sat Aug 29 05:12:03.270137 2026] [security2:error] [pid 11274:tid 11559] [client 102.253.10.25:28688] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gavirestaurant.com"] [uri "/xmlrpc.php"] [unique_id "apK-g2bX5DA3XO6e_qRaZAAAAXs"]
[Sat Aug 29 05:12:03.271082 2026] [security2:error] [pid 1321:tid 1606] [client 158.23.147.79:63268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK-g2jCPtor9NZ-byQEZAAABrE"]
[Sat Aug 29 05:12:03.274938 2026] [security2:error] [pid 11274:tid 11492] [client 93.123.109.228:51990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/cms/.env"] [unique_id "apK-g2bX5DA3XO6e_qRaZQAAATk"]
[Sat Aug 29 05:12:03.287405 2026] [proxy_http:error] [pid 1018003:tid 1018232] (70007)The timeout specified has expired: [client 127.0.0.1:14374] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:12:03.287425 2026] [proxy:error] [pid 1018003:tid 1018232] [client 127.0.0.1:14374] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:12:03.296036 2026] [security2:error] [pid 11274:tid 11485] [client 20.48.160.90:31394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/35iDq8NAjLu.php"] [unique_id "apK-g2bX5DA3XO6e_qRaaAAAATI"]
[Sat Aug 29 05:12:03.302955 2026] [security2:error] [pid 1321:tid 1604] [client 158.158.54.35:4390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-access.php"] [unique_id "apK-g2jCPtor9NZ-byQEawAABq8"]
[Sat Aug 29 05:12:03.304777 2026] [security2:error] [pid 11274:tid 11530] [client 20.48.160.90:28739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/v5.php"] [unique_id "apK-g2bX5DA3XO6e_qRaaQAAAV8"]
[Sat Aug 29 05:12:03.306733 2026] [security2:error] [pid 11274:tid 11480] [client 20.151.200.44:65114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/rfi.php"] [unique_id "apK-g2bX5DA3XO6e_qRaagAAAS0"]
[Sat Aug 29 05:12:03.311308 2026] [security2:error] [pid 11274:tid 11452] [client 4.205.62.107:62963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/saml.php"] [unique_id "apK-g2bX5DA3XO6e_qRabAAAARI"]
[Sat Aug 29 05:12:03.319184 2026] [security2:error] [pid 11274:tid 11454] [client 158.23.184.117:21692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/3pjcpmfsd8b.php"] [unique_id "apK-g2bX5DA3XO6e_qRabgAAARQ"]
[Sat Aug 29 05:12:03.328591 2026] [security2:error] [pid 1321:tid 1594] [client 20.48.160.90:61617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/Hd.php"] [unique_id "apK-g2jCPtor9NZ-byQEbAAABqU"]
[Sat Aug 29 05:12:03.340488 2026] [security2:error] [pid 1321:tid 1548] [client 158.158.54.35:27928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-configs.php"] [unique_id "apK-g2jCPtor9NZ-byQEbQAABnc"]
[Sat Aug 29 05:12:03.352625 2026] [security2:error] [pid 11274:tid 11468] [client 20.104.18.15:29153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/zoo1.php"] [unique_id "apK-g2bX5DA3XO6e_qRadQAAASI"]
[Sat Aug 29 05:12:03.364979 2026] [security2:error] [pid 1321:tid 1526] [client 20.104.49.130:63608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/tiny2.php"] [unique_id "apK-g2jCPtor9NZ-byQEcQAABmI"]
[Sat Aug 29 05:12:03.370722 2026] [security2:error] [pid 1321:tid 1612] [client 68.155.159.216:49036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/ws.php"] [unique_id "apK-g2jCPtor9NZ-byQEcgAABrc"]
[Sat Aug 29 05:12:03.373053 2026] [security2:error] [pid 1321:tid 1543] [client 61.9.8.5:24074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 5.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK-g2jCPtor9NZ-byQEcAAABnM"]
[Sat Aug 29 05:12:03.373210 2026] [security2:error] [pid 1321:tid 1543] [client 61.9.8.5:24074] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK-g2jCPtor9NZ-byQEcAAABnM"]
[Sat Aug 29 05:12:03.373500 2026] [security2:error] [pid 11274:tid 11476] [client 158.23.147.79:28067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/worksec.php"] [unique_id "apK-g2bX5DA3XO6e_qRaeQAAASo"]
[Sat Aug 29 05:12:03.389274 2026] [security2:error] [pid 11274:tid 11518] [client 68.155.159.216:64045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK-g2bX5DA3XO6e_qRaegAAAVM"]
[Sat Aug 29 05:12:03.390071 2026] [security2:error] [pid 11274:tid 11496] [client 52.139.37.240:63573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntcutsandscapes.tntrental.com"] [uri "/gecko-new.php"] [unique_id "apK-g2bX5DA3XO6e_qRaewAAAT0"]
[Sat Aug 29 05:12:03.395953 2026] [security2:error] [pid 1321:tid 1591] [client 4.205.62.107:6139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/saiga.php"] [unique_id "apK-g2jCPtor9NZ-byQEdAAABqI"]
[Sat Aug 29 05:12:03.405205 2026] [security2:error] [pid 11274:tid 11534] [client 158.158.54.35:1412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wp-content.php"] [unique_id "apK-g2bX5DA3XO6e_qRafwAAAWM"]
[Sat Aug 29 05:12:03.407878 2026] [security2:error] [pid 11274:tid 11538] [client 20.104.18.15:29154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/img.php"] [unique_id "apK-g2bX5DA3XO6e_qRagAAAAWc"]
[Sat Aug 29 05:12:03.412524 2026] [security2:error] [pid 1321:tid 1584] [client 158.23.184.117:31871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/.well-known/module.php"] [unique_id "apK-g2jCPtor9NZ-byQEeAAABps"]
[Sat Aug 29 05:12:03.426199 2026] [security2:error] [pid 11274:tid 11540] [client 158.23.147.79:64096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/nf_tracking.php"] [unique_id "apK-g2bX5DA3XO6e_qRagQAAAWk"]
[Sat Aug 29 05:12:03.428388 2026] [security2:error] [pid 1321:tid 1599] [client 20.48.160.90:31405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/btx25.php"] [unique_id "apK-g2jCPtor9NZ-byQEeQAABqo"]
[Sat Aug 29 05:12:03.433275 2026] [security2:error] [pid 11274:tid 11375] [remote 93.123.109.228:42790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/wp-config.php"] [unique_id "apK-g2bX5DA3XO6e_qRahgABSj0"]
[Sat Aug 29 05:12:03.443179 2026] [security2:error] [pid 11274:tid 11572] [client 20.48.160.90:28771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/az.php"] [unique_id "apK-g2bX5DA3XO6e_qRaiAAAAYg"]
[Sat Aug 29 05:12:03.449597 2026] [security2:error] [pid 11274:tid 11502] [client 20.100.175.163:14112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-includes/fonts/admin.php"] [unique_id "apK-g2bX5DA3XO6e_qRaiQAAAUM"]
[Sat Aug 29 05:12:03.451615 2026] [security2:error] [pid 11274:tid 11522] [client 20.220.204.93:59123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/lkui.php"] [unique_id "apK-g2bX5DA3XO6e_qRaigAAAVc"]
[Sat Aug 29 05:12:03.465579 2026] [security2:error] [pid 11274:tid 11479] [client 158.23.184.117:21760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.freejohnstuart.com"] [uri "/403.php"] [unique_id "apK-g2bX5DA3XO6e_qRaiwAAASw"]
[Sat Aug 29 05:12:03.480330 2026] [security2:error] [pid 11274:tid 11520] [client 20.48.160.90:37793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/im.php"] [unique_id "apK-g2bX5DA3XO6e_qRajAAAAVU"]
[Sat Aug 29 05:12:03.487017 2026] [security2:error] [pid 11274:tid 11527] [client 20.104.18.15:29170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/radio.php"] [unique_id "apK-g2bX5DA3XO6e_qRajQAAAVw"]
[Sat Aug 29 05:12:03.490682 2026] [security2:error] [pid 1321:tid 1613] [client 20.52.41.200:2665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/x.php"] [unique_id "apK-g2jCPtor9NZ-byQEfAAABrg"]
[Sat Aug 29 05:12:03.492523 2026] [security2:error] [pid 1321:tid 1605] [client 40.83.93.50:13954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/disagraeosc.php"] [unique_id "apK-g2jCPtor9NZ-byQEfQAABrA"]
[Sat Aug 29 05:12:03.494569 2026] [security2:error] [pid 1321:tid 1522] [client 93.123.109.228:52010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/config.php"] [unique_id "apK-g2jCPtor9NZ-byQEfgAABl4"]
[Sat Aug 29 05:12:03.499336 2026] [security2:error] [pid 11274:tid 11337] [remote 93.123.109.228:42790] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.hitechgs.com"] [uri "/wp-config.php.bak"] [unique_id "apK-g2bX5DA3XO6e_qRajgABehg"]
[Sat Aug 29 05:12:03.504040 2026] [security2:error] [pid 11274:tid 11400] [remote 93.123.109.228:42790] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.hitechgs.com"] [uri "/wp-config.php.new"] [unique_id "apK-g2bX5DA3XO6e_qRajwABTlY"]
[Sat Aug 29 05:12:03.504951 2026] [security2:error] [pid 11274:tid 11501] [client 158.23.147.79:14151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/mah.php"] [unique_id "apK-g2bX5DA3XO6e_qRakAAAAUI"]
[Sat Aug 29 05:12:03.534093 2026] [security2:error] [pid 1321:tid 1596] [client 20.151.200.44:55723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/inject.php"] [unique_id "apK-g2jCPtor9NZ-byQEfwAABqc"]
[Sat Aug 29 05:12:03.535268 2026] [security2:error] [pid 11274:tid 11386] [remote 93.123.109.228:42790] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.hitechgs.com"] [uri "/wp-config.php.old"] [unique_id "apK-g2bX5DA3XO6e_qRakwABPkg"]
[Sat Aug 29 05:12:03.542567 2026] [security2:error] [pid 1321:tid 1518] [client 20.151.200.44:62438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/tajj.php"] [unique_id "apK-g2jCPtor9NZ-byQEgQAABlo"]
[Sat Aug 29 05:12:03.552181 2026] [security2:error] [pid 1321:tid 1550] [client 20.104.18.15:29632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/222.php"] [unique_id "apK-g2jCPtor9NZ-byQEhQAABnk"]
[Sat Aug 29 05:12:03.559958 2026] [security2:error] [pid 1321:tid 1610] [client 158.23.184.117:31811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/.well-known/options.php"] [unique_id "apK-g2jCPtor9NZ-byQEhgAABrU"]
[Sat Aug 29 05:12:03.568502 2026] [security2:error] [pid 11274:tid 11471] [client 20.48.160.90:52039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/radio.php"] [unique_id "apK-g2bX5DA3XO6e_qRalAAAASU"]
[Sat Aug 29 05:12:03.576904 2026] [security2:error] [pid 11274:tid 11536] [client 20.48.160.90:23772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/js.php"] [unique_id "apK-g2bX5DA3XO6e_qRalQAAAWU"]
[Sat Aug 29 05:12:03.604648 2026] [security2:error] [pid 1321:tid 1608] [client 93.123.109.228:52082] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/config/.env"] [unique_id "apK-g2jCPtor9NZ-byQEiQAABrM"]
[Sat Aug 29 05:12:03.609486 2026] [security2:error] [pid 11274:tid 11473] [client 20.240.128.207:8247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "apK-g2bX5DA3XO6e_qRanAAAASc"]
[Sat Aug 29 05:12:03.613226 2026] [security2:error] [pid 11274:tid 11521] [client 158.23.147.79:7066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/NewFile.php/"] [unique_id "apK-g2bX5DA3XO6e_qRanQAAAVY"]
[Sat Aug 29 05:12:03.616095 2026] [security2:error] [pid 1321:tid 1609] [client 20.48.160.90:61687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/fc.php"] [unique_id "apK-g2jCPtor9NZ-byQEjgAABrQ"]
[Sat Aug 29 05:12:03.618144 2026] [security2:error] [pid 11274:tid 11470] [client 52.139.37.240:62408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntcutsandscapes.tntrental.com"] [uri "/add_actualites.php"] [unique_id "apK-g2bX5DA3XO6e_qRangAAASQ"]
[Sat Aug 29 05:12:03.626079 2026] [security2:error] [pid 11274:tid 11483] [client 20.220.204.93:59078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "apK-g2bX5DA3XO6e_qRanwAAATA"]
[Sat Aug 29 05:12:03.627954 2026] [security2:error] [pid 11274:tid 11549] [client 20.52.41.200:5139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-includes/admin.php"] [unique_id "apK-g2bX5DA3XO6e_qRaoAAAAXE"]
[Sat Aug 29 05:12:03.629853 2026] [security2:error] [pid 11274:tid 11487] [client 20.104.18.15:29158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/one.php"] [unique_id "apK-g2bX5DA3XO6e_qRaogAAATQ"]
[Sat Aug 29 05:12:03.636606 2026] [security2:error] [pid 11274:tid 11492] [client 93.123.109.228:52066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/config/aws.php"] [unique_id "apK-g2bX5DA3XO6e_qRaowAAATk"]
[Sat Aug 29 05:12:03.645272 2026] [security2:error] [pid 11274:tid 11565] [client 40.83.93.50:3911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/menu.php"] [unique_id "apK-g2bX5DA3XO6e_qRapQAAAYE"]
[Sat Aug 29 05:12:03.665796 2026] [security2:error] [pid 11274:tid 11480] [client 20.48.250.41:42908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/403.php"] [unique_id "apK-g2bX5DA3XO6e_qRaqAAAAS0"]
[Sat Aug 29 05:12:03.693861 2026] [security2:error] [pid 11274:tid 11514] [client 93.123.109.228:52050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/config/config.inc.php"] [unique_id "apK-g2bX5DA3XO6e_qRaqgAAAU8"]
[Sat Aug 29 05:12:03.702702 2026] [security2:error] [pid 1321:tid 1510] [client 20.104.18.15:29145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/key.php"] [unique_id "apK-g2jCPtor9NZ-byQEmwAABlI"]
[Sat Aug 29 05:12:03.704159 2026] [security2:error] [pid 1321:tid 1574] [client 20.48.160.90:52046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/dex.php"] [unique_id "apK-g2jCPtor9NZ-byQEnAAABpE"]
[Sat Aug 29 05:12:03.709750 2026] [security2:error] [pid 1321:tid 1607] [client 158.23.184.117:32435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/.well-known/panel.php"] [unique_id "apK-g2jCPtor9NZ-byQEnQAABrI"]
[Sat Aug 29 05:12:03.710175 2026] [security2:error] [pid 1321:tid 1573] [client 20.48.160.90:29129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/hd.php"] [unique_id "apK-g2jCPtor9NZ-byQEngAABpA"]
[Sat Aug 29 05:12:03.712025 2026] [security2:error] [pid 11274:tid 11488] [client 20.197.61.180:10182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/haiterus.php"] [unique_id "apK-g2bX5DA3XO6e_qRarQAAATU"]
[Sat Aug 29 05:12:03.712491 2026] [security2:error] [pid 1321:tid 1560] [client 4.205.62.107:65005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/php-details.php"] [unique_id "apK-g2jCPtor9NZ-byQEnwAABoM"]
[Sat Aug 29 05:12:03.717068 2026] [security2:error] [pid 1321:tid 1509] [client 20.151.200.44:65106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/grsiuk.php"] [unique_id "apK-g2jCPtor9NZ-byQEoAAABlE"]
[Sat Aug 29 05:12:03.729786 2026] [security2:error] [pid 1321:tid 1515] [client 34.169.171.101:34898] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.forensicengineernj.com"] [uri "/backend/service-account.json"] [unique_id "apK-g2jCPtor9NZ-byQEqQAABlc"]
[Sat Aug 29 05:12:03.730775 2026] [security2:error] [pid 1321:tid 1590] [client 34.169.171.101:34920] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.forensicengineernj.com"] [uri "/config/service-account.json"] [unique_id "apK-g2jCPtor9NZ-byQEqwAABqE"]
[Sat Aug 29 05:12:03.732135 2026] [security2:error] [pid 11274:tid 11495] [client 34.169.171.101:34956] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "mail.forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-g2bX5DA3XO6e_qRauAAAATw"]
[Sat Aug 29 05:12:03.741769 2026] [security2:error] [pid 1321:tid 1512] [client 34.169.171.101:35020] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "mail.forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-g2jCPtor9NZ-byQEswAABlQ"]
[Sat Aug 29 05:12:03.745313 2026] [security2:error] [pid 1321:tid 1603] [client 18.197.156.128:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.jobindjibouti.com"] [uri "/"] [unique_id "apK-g2jCPtor9NZ-byQEtQAABq4"]
[Sat Aug 29 05:12:03.749721 2026] [security2:error] [pid 11274:tid 11568] [client 20.48.160.90:37784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/ke.php"] [unique_id "apK-g2bX5DA3XO6e_qRavQAAAYQ"]
[Sat Aug 29 05:12:03.768636 2026] [security2:error] [pid 11274:tid 11561] [client 158.158.54.35:5936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-content/uploads/min.php"] [unique_id "apK-g2bX5DA3XO6e_qRaxwAAAX0"]
[Sat Aug 29 05:12:03.769203 2026] [security2:error] [pid 11274:tid 11540] [client 158.23.184.117:19446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ladiesandbabies.com"] [uri "/.dj/index.php"] [unique_id "apK-g2bX5DA3XO6e_qRayAAAAWk"]
[Sat Aug 29 05:12:03.769745 2026] [security2:error] [pid 11274:tid 11448] [client 20.48.250.41:24556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/sbhu.php"] [unique_id "apK-g2bX5DA3XO6e_qRayQAAAQ4"]
[Sat Aug 29 05:12:03.770637 2026] [security2:error] [pid 11274:tid 11534] [client 34.169.171.101:34956] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-g2bX5DA3XO6e_qRaxgAAAWM"], referer: https://mail.forensicengineernj.com/config/application.yml
[Sat Aug 29 05:12:03.771722 2026] [security2:error] [pid 1321:tid 1592] [client 202.71.25.11:50138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.25.71.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK-g2jCPtor9NZ-byQEwAAABqM"]
[Sat Aug 29 05:12:03.771818 2026] [security2:error] [pid 1321:tid 1592] [client 202.71.25.11:50138] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK-g2jCPtor9NZ-byQEwAAABqM"]
[Sat Aug 29 05:12:03.781958 2026] [security2:error] [pid 1321:tid 1583] [client 34.169.171.101:35020] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-g2jCPtor9NZ-byQExwAABpo"], referer: https://mail.forensicengineernj.com/config.yml
[Sat Aug 29 05:12:03.782832 2026] [security2:error] [pid 11274:tid 11505] [client 20.104.18.15:29062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/503.php"] [unique_id "apK-g2bX5DA3XO6e_qRazQAAAUY"]
[Sat Aug 29 05:12:03.791813 2026] [security2:error] [pid 11274:tid 11552] [client 158.158.54.35:29493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-includes/index.php"] [unique_id "apK-g2bX5DA3XO6e_qRazgAAAXQ"]
[Sat Aug 29 05:12:03.803026 2026] [security2:error] [pid 1321:tid 1522] [client 93.123.109.228:52082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/config/config.php"] [unique_id "apK-g2jCPtor9NZ-byQEzAAABl4"]
[Sat Aug 29 05:12:03.818116 2026] [security2:error] [pid 11274:tid 11515] [client 52.139.37.240:62252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntcutsandscapes.tntrental.com"] [uri "/browse.php"] [unique_id "apK-g2bX5DA3XO6e_qRazwAAAVA"]
[Sat Aug 29 05:12:03.841121 2026] [security2:error] [pid 11274:tid 11501] [client 20.48.160.90:31371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/giodywky.php"] [unique_id "apK-g2bX5DA3XO6e_qRa0gAAAUI"]
[Sat Aug 29 05:12:03.842436 2026] [security2:error] [pid 11274:tid 11445] [client 158.23.147.79:64508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK-g2bX5DA3XO6e_qRa0wAAAQs"]
[Sat Aug 29 05:12:03.843533 2026] [security2:error] [pid 11274:tid 11570] [client 4.205.62.107:60483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/css.php"] [unique_id "apK-g2bX5DA3XO6e_qRa1QAAAYY"]
[Sat Aug 29 05:12:03.844102 2026] [security2:error] [pid 1321:tid 1518] [client 20.48.160.90:23686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/xl2023.php"] [unique_id "apK-g2jCPtor9NZ-byQE0QAABlo"]
[Sat Aug 29 05:12:03.846273 2026] [security2:error] [pid 11274:tid 11497] [client 20.104.49.130:58091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "coveryourauto.com"] [uri "/wsd.php"] [unique_id "apK-g2bX5DA3XO6e_qRa1gAAAT4"]
[Sat Aug 29 05:12:03.849294 2026] [security2:error] [pid 1321:tid 1550] [client 20.151.200.44:27322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/bnnof6.php"] [unique_id "apK-g2jCPtor9NZ-byQE0gAABnk"]
[Sat Aug 29 05:12:03.852546 2026] [security2:error] [pid 11274:tid 11545] [client 20.104.18.15:29146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/chosen.php"] [unique_id "apK-g2bX5DA3XO6e_qRa2AAAAW0"]
[Sat Aug 29 05:12:03.857225 2026] [security2:error] [pid 1321:tid 1596] [client 158.23.184.117:32447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/.well-known/pki-validation/mariju.php"] [unique_id "apK-g2jCPtor9NZ-byQE1QAABqc"]
[Sat Aug 29 05:12:03.860150 2026] [security2:error] [pid 11274:tid 11467] [client 68.155.159.216:43920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/wp-content/uploads/index.php"] [unique_id "apK-g2bX5DA3XO6e_qRa2gAAASE"]
[Sat Aug 29 05:12:03.860681 2026] [security2:error] [pid 11274:tid 11471] [client 20.151.200.44:62195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/advanced.php"] [unique_id "apK-g2bX5DA3XO6e_qRa2wAAASU"]
[Sat Aug 29 05:12:03.871572 2026] [autoindex:error] [pid 1321:tid 1563] [client 45.148.10.62:52414] AH01276: Cannot serve directory /home3/zvibuumy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:12:03.877926 2026] [security2:error] [pid 1321:tid 1502] [client 20.48.250.41:49576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/cytyr.php"] [unique_id "apK-g2jCPtor9NZ-byQE2AAABko"]
[Sat Aug 29 05:12:03.887806 2026] [security2:error] [pid 1321:tid 1608] [client 4.205.62.107:6290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/packed.php"] [unique_id "apK-g2jCPtor9NZ-byQE3QAABrM"]
[Sat Aug 29 05:12:03.890028 2026] [security2:error] [pid 1321:tid 1544] [client 197.232.63.170:49555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 170.63.232.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK-g2jCPtor9NZ-byQE2QAABnQ"]
[Sat Aug 29 05:12:03.890163 2026] [security2:error] [pid 1321:tid 1544] [client 197.232.63.170:49555] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK-g2jCPtor9NZ-byQE2QAABnQ"]
[Sat Aug 29 05:12:03.896519 2026] [security2:error] [pid 11274:tid 11549] [client 20.48.160.90:61616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/tf.php"] [unique_id "apK-g2bX5DA3XO6e_qRa3wAAAXE"]
[Sat Aug 29 05:12:03.897186 2026] [security2:error] [pid 11274:tid 11494] [client 68.155.159.216:23369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK-g2bX5DA3XO6e_qRa4AAAATs"]
[Sat Aug 29 05:12:03.897348 2026] [security2:error] [pid 1321:tid 1516] [client 158.158.54.35:1502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "apK-g2jCPtor9NZ-byQE0wAABlg"]
[Sat Aug 29 05:12:03.925088 2026] [security2:error] [pid 11274:tid 11475] [client 158.23.184.117:19392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ladiesandbabies.com"] [uri "/.trash7206/index.php"] [unique_id "apK-g2bX5DA3XO6e_qRa4gAAASk"]
[Sat Aug 29 05:12:03.930166 2026] [security2:error] [pid 1321:tid 1506] [client 20.220.204.93:59048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/motu.php"] [unique_id "apK-g2jCPtor9NZ-byQE3wAABk4"]
[Sat Aug 29 05:12:03.935986 2026] [security2:error] [pid 11274:tid 11493] [client 93.123.109.228:52102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/config/env.php"] [unique_id "apK-g2bX5DA3XO6e_qRa5QAAATo"]
[Sat Aug 29 05:12:03.946370 2026] [security2:error] [pid 11274:tid 11479] [client 20.100.175.163:9543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/m.php"] [unique_id "apK-g2bX5DA3XO6e_qRa5gAAASw"]
[Sat Aug 29 05:12:03.950098 2026] [security2:error] [pid 11274:tid 11477] [client 20.104.18.15:29686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/504.php"] [unique_id "apK-g2bX5DA3XO6e_qRa5wAAASs"]
[Sat Aug 29 05:12:03.951783 2026] [security2:error] [pid 11274:tid 11529] [client 4.205.62.107:63263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/ws61.php"] [unique_id "apK-g2bX5DA3XO6e_qRa6AAAAV4"]
[Sat Aug 29 05:12:03.954024 2026] [security2:error] [pid 1321:tid 1605] [client 20.52.41.200:2817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/new.php"] [unique_id "apK-g2jCPtor9NZ-byQE4gAABrA"]
[Sat Aug 29 05:12:03.963677 2026] [security2:error] [pid 1321:tid 1489] [client 20.48.250.41:24553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/a332.php"] [unique_id "apK-g2jCPtor9NZ-byQE4wAABj0"]
[Sat Aug 29 05:12:03.972685 2026] [security2:error] [pid 1321:tid 1567] [client 40.83.93.50:11817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/about.php525"] [unique_id "apK-g2jCPtor9NZ-byQE5AAABoo"]
[Sat Aug 29 05:12:03.973406 2026] [security2:error] [pid 1321:tid 1607] [client 68.155.159.216:35836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK-g2jCPtor9NZ-byQE5QAABrI"]
[Sat Aug 29 05:12:03.974598 2026] [security2:error] [pid 11274:tid 11563] [client 20.48.160.90:31486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/wp-kz.php"] [unique_id "apK-g2bX5DA3XO6e_qRa6gAAAX8"]
[Sat Aug 29 05:12:03.975026 2026] [security2:error] [pid 11274:tid 11472] [client 20.151.200.44:57620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/ahy66.php"] [unique_id "apK-g2bX5DA3XO6e_qRa6wAAASY"]
[Sat Aug 29 05:12:03.992229 2026] [security2:error] [pid 1321:tid 1509] [client 93.123.109.228:42892] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK-g2jCPtor9NZ-byQE5wAABlE"]
[Sat Aug 29 05:12:03.993002 2026] [security2:error] [pid 11274:tid 11454] [client 20.240.128.207:7269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "apK-g2bX5DA3XO6e_qRa7QAAARQ"]
[Sat Aug 29 05:12:03.993992 2026] [security2:error] [pid 1321:tid 1606] [client 20.104.18.15:29135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/file1221.php"] [unique_id "apK-g2jCPtor9NZ-byQE6AAABrE"]
[Sat Aug 29 05:12:04.000904 2026] [security2:error] [pid 11274:tid 11569] [client 158.23.184.117:32411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/.well-known/pki-validation/pl.php"] [unique_id "apK-g2bX5DA3XO6e_qRa8AAAAYU"]
[Sat Aug 29 05:12:04.001023 2026] [security2:error] [pid 11274:tid 11466] [client 20.48.160.90:28743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/V2.php"] [unique_id "apK-hGbX5DA3XO6e_qRa7wAAASA"]
[Sat Aug 29 05:12:04.004865 2026] [security2:error] [pid 11274:tid 11560] [client 158.23.147.79:50062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK-hGbX5DA3XO6e_qRa8QAAAXw"]
[Sat Aug 29 05:12:04.016846 2026] [security2:error] [pid 1321:tid 1536] [client 52.139.37.240:63587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntcutsandscapes.tntrental.com"] [uri "/contentloader1.php"] [unique_id "apK-hGjCPtor9NZ-byQE7QAABmw"]
[Sat Aug 29 05:12:04.022296 2026] [security2:error] [pid 1321:tid 1555] [client 93.123.109.228:42934] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK-hGjCPtor9NZ-byQE7gAABn4"]
[Sat Aug 29 05:12:04.022829 2026] [security2:error] [pid 1321:tid 1590] [client 45.148.10.62:52414] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.zvi.buu.mybluehost.me"] [uri "/.env"] [unique_id "apK-hGjCPtor9NZ-byQE7wAABqE"]
[Sat Aug 29 05:12:04.035881 2026] [security2:error] [pid 11274:tid 11538] [client 20.48.160.90:37778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/px.php"] [unique_id "apK-hGbX5DA3XO6e_qRa-AAAAWc"]
[Sat Aug 29 05:12:04.046105 2026] [security2:error] [pid 11274:tid 11555] [client 20.48.250.41:49614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/galer.php"] [unique_id "apK-hGbX5DA3XO6e_qRa_gAAAXc"]
[Sat Aug 29 05:12:04.049243 2026] [security2:error] [pid 11274:tid 11502] [client 93.123.109.228:51942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/config/nexmo.php"] [unique_id "apK-hGbX5DA3XO6e_qRa_wAAAUM"]
[Sat Aug 29 05:12:04.054449 2026] [security2:error] [pid 11274:tid 11450] [client 68.155.159.216:14299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/ans.php"] [unique_id "apK-hGbX5DA3XO6e_qRbAAAAARA"]
[Sat Aug 29 05:12:04.064013 2026] [security2:error] [pid 1321:tid 1562] [client 18.197.156.128:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.jobindjibouti.com"] [uri "/jobs/"] [unique_id "apK-hGjCPtor9NZ-byQE-QAABoU"]
[Sat Aug 29 05:12:04.069296 2026] [security2:error] [pid 11274:tid 11445] [client 20.104.49.130:51087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "connectdotz.com"] [uri "/sym.php"] [unique_id "apK-hGbX5DA3XO6e_qRbAgAAAQs"]
[Sat Aug 29 05:12:04.070383 2026] [security2:error] [pid 11274:tid 11570] [client 20.220.204.93:59073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/Ov-Simple1.php"] [unique_id "apK-hGbX5DA3XO6e_qRbBAAAAYY"]
[Sat Aug 29 05:12:04.071937 2026] [security2:error] [pid 11274:tid 11568] [client 158.23.184.117:19020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ladiesandbabies.com"] [uri "/.trash7206/min.php"] [unique_id "apK-hGbX5DA3XO6e_qRbBQAAAYQ"]
[Sat Aug 29 05:12:04.089168 2026] [core:error] [pid 1321:tid 1497] [client 20.52.41.200:4949] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:04.089186 2026] [core:error] [pid 1321:tid 1497] [client 20.52.41.200:4949] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:04.103464 2026] [security2:error] [pid 11274:tid 11486] [client 4.205.62.107:59132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/xp.php"] [unique_id "apK-hGbX5DA3XO6e_qRbBwAAATM"]
[Sat Aug 29 05:12:04.112702 2026] [security2:error] [pid 11274:tid 11487] [client 20.48.160.90:31398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/wp-includes/ID3/getid.php"] [unique_id "apK-hGbX5DA3XO6e_qRbCAAAATQ"]
[Sat Aug 29 05:12:04.118973 2026] [security2:error] [pid 1321:tid 1549] [client 40.83.93.50:3934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/alfa.php"] [unique_id "apK-hGjCPtor9NZ-byQE_QAABng"]
[Sat Aug 29 05:12:04.123506 2026] [security2:error] [pid 11274:tid 11559] [client 20.104.18.15:29066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/admin.php"] [unique_id "apK-hGbX5DA3XO6e_qRbCgAAAXs"]
[Sat Aug 29 05:12:04.129352 2026] [security2:error] [pid 1321:tid 1526] [client 20.48.160.90:23684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/mad.php"] [unique_id "apK-hGjCPtor9NZ-byQE_gAABmI"]
[Sat Aug 29 05:12:04.130418 2026] [security2:error] [pid 1321:tid 1612] [client 93.123.109.228:52074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/config/module.config.php"] [unique_id "apK-hGjCPtor9NZ-byQE_wAABrc"]
[Sat Aug 29 05:12:04.144613 2026] [security2:error] [pid 11274:tid 11471] [client 158.23.184.117:32410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/.well-known/pki-validation/x.php"] [unique_id "apK-hGbX5DA3XO6e_qRbCwAAASU"]
[Sat Aug 29 05:12:04.151324 2026] [security2:error] [pid 11274:tid 11498] [client 20.48.250.41:24458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/ws66.php"] [unique_id "apK-hGbX5DA3XO6e_qRbDAAAAT8"]
[Sat Aug 29 05:12:04.152379 2026] [security2:error] [pid 1321:tid 1574] [client 87.219.197.128:61932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK-hGjCPtor9NZ-byQFAAAABpE"]
[Sat Aug 29 05:12:04.152498 2026] [security2:error] [pid 1321:tid 1574] [client 87.219.197.128:61932] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK-hGjCPtor9NZ-byQFAAAABpE"]
[Sat Aug 29 05:12:04.160658 2026] [security2:error] [pid 1321:tid 1591] [client 93.123.109.228:52112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/config/stripe.php"] [unique_id "apK-hGjCPtor9NZ-byQFBgAABqI"]
[Sat Aug 29 05:12:04.175292 2026] [security2:error] [pid 1321:tid 1542] [client 20.48.160.90:51801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/jg.php"] [unique_id "apK-hGjCPtor9NZ-byQFCAAABnI"]
[Sat Aug 29 05:12:04.179920 2026] [security2:error] [pid 1321:tid 1561] [client 45.148.10.62:52414] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.zvi.buu.mybluehost.me"] [uri "/.env"] [unique_id "apK-hGjCPtor9NZ-byQFCQAABoQ"]
[Sat Aug 29 05:12:04.185809 2026] [security2:error] [pid 11274:tid 11530] [client 20.104.49.130:48783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/Jcrop.php"] [unique_id "apK-hGbX5DA3XO6e_qRbEAAAAV8"]
[Sat Aug 29 05:12:04.190280 2026] [security2:error] [pid 11274:tid 11553] [client 20.48.250.41:42994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/baixy.php"] [unique_id "apK-hGbX5DA3XO6e_qRbEQAAAXU"]
[Sat Aug 29 05:12:04.203392 2026] [security2:error] [pid 11274:tid 11466] [client 213.202.253.4:63822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/txets.php"] [unique_id "apK-hGbX5DA3XO6e_qRbEwAAASA"], referer: www.google.com
[Sat Aug 29 05:12:04.213981 2026] [security2:error] [pid 11274:tid 11503] [client 52.139.37.240:63602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntcutsandscapes.tntrental.com"] [uri "/upfile.php"] [unique_id "apK-hGbX5DA3XO6e_qRbFQAAAUQ"]
[Sat Aug 29 05:12:04.214725 2026] [security2:error] [pid 11274:tid 11515] [client 158.158.54.35:5907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK-hGbX5DA3XO6e_qRbFgAAAVA"]
[Sat Aug 29 05:12:04.216862 2026] [security2:error] [pid 11274:tid 11492] [client 158.23.184.117:61648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ladiesandbabies.com"] [uri "/.well-known//index.php"] [unique_id "apK-hGbX5DA3XO6e_qRbFwAAATk"]
[Sat Aug 29 05:12:04.243062 2026] [security2:error] [pid 11274:tid 11543] [client 20.48.160.90:31410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/session.php"] [unique_id "apK-hGbX5DA3XO6e_qRbGQAAAWs"]
[Sat Aug 29 05:12:04.259149 2026] [security2:error] [pid 11274:tid 11549] [client 158.158.54.35:15299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-admin/a.php"] [unique_id "apK-hGbX5DA3XO6e_qRbGwAAAXE"]
[Sat Aug 29 05:12:04.270586 2026] [security2:error] [pid 1321:tid 1577] [client 20.48.160.90:29174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/st.php"] [unique_id "apK-hGjCPtor9NZ-byQFDwAABpQ"]
[Sat Aug 29 05:12:04.276320 2026] [security2:error] [pid 11274:tid 11461] [client 20.151.200.44:55633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/mga.php"] [unique_id "apK-hGbX5DA3XO6e_qRbHAAAARs"]
[Sat Aug 29 05:12:04.279908 2026] [security2:error] [pid 11274:tid 11504] [client 93.123.109.228:42880] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/.env"] [unique_id "apK-hGbX5DA3XO6e_qRbHwAAAUU"]
[Sat Aug 29 05:12:04.290541 2026] [security2:error] [pid 11274:tid 11495] [client 158.23.184.117:31761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/.well-known/pki-validation/xmrlpc.php"] [unique_id "apK-hGbX5DA3XO6e_qRbIQAAATw"]
[Sat Aug 29 05:12:04.291638 2026] [security2:error] [pid 11274:tid 11546] [client 20.220.204.93:59042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/wp-blogs.php"] [unique_id "apK-hGbX5DA3XO6e_qRbIgAAAW4"]
[Sat Aug 29 05:12:04.298950 2026] [security2:error] [pid 11274:tid 11552] [client 150.241.237.118:56170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.237.241.150.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/cron.php"] [unique_id "apK-hGbX5DA3XO6e_qRbIAAAAXQ"], referer: https://abantiquo.aldergate.net/
[Sat Aug 29 05:12:04.315431 2026] [security2:error] [pid 11274:tid 11502] [client 20.240.128.207:4056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-content/themes/pridmag/il.php"] [unique_id "apK-hGbX5DA3XO6e_qRbJQAAAUM"]
[Sat Aug 29 05:12:04.316806 2026] [security2:error] [pid 1321:tid 1527] [client 20.48.250.41:24543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/ws68.php"] [unique_id "apK-hGjCPtor9NZ-byQFFAAABmM"]
[Sat Aug 29 05:12:04.318240 2026] [security2:error] [pid 1321:tid 1522] [client 93.123.109.228:42914] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/laravel/app/.env"] [unique_id "apK-hGjCPtor9NZ-byQFEwAABl4"]
[Sat Aug 29 05:12:04.334883 2026] [security2:error] [pid 11274:tid 11512] [client 20.48.160.90:51789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/yj.php"] [unique_id "apK-hGbX5DA3XO6e_qRbKAAAAU0"]
[Sat Aug 29 05:12:04.335785 2026] [security2:error] [pid 1321:tid 1608] [client 68.155.159.216:55040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.angelesforestranch.com"] [uri "/chosen.php"] [unique_id "apK-hGjCPtor9NZ-byQFFwAABrM"]
[Sat Aug 29 05:12:04.339559 2026] [security2:error] [pid 11274:tid 11527] [client 68.155.159.216:38541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-admin/admin.php"] [unique_id "apK-hGbX5DA3XO6e_qRbKQAAAVw"]
[Sat Aug 29 05:12:04.358003 2026] [security2:error] [pid 11274:tid 11448] [client 20.48.250.41:42886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/ava.php"] [unique_id "apK-hGbX5DA3XO6e_qRbKgAAAQ4"]
[Sat Aug 29 05:12:04.366046 2026] [security2:error] [pid 11274:tid 11508] [client 158.23.184.117:19424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ladiesandbabies.com"] [uri "/.well-known/about.php"] [unique_id "apK-hGbX5DA3XO6e_qRbLAAAAUk"]
[Sat Aug 29 05:12:04.366288 2026] [security2:error] [pid 11274:tid 11526] [client 93.123.109.228:42878] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(\\\\/\\\\*\\\\!? ?(?:select|grant|delete|insert|drop|alter|replace|truncate|update|create|rename|describe|union|concat|group_concat))" at REQUEST_FILENAME. [file "/opt/mod_security/hg_rules.conf"] [line "1019"] [id "9000042"] [rev "2.2.2"] [msg "SQL Comment Sequence Detected."] [data "/*update"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/*update.cgi*"] [unique_id "apK-hGbX5DA3XO6e_qRbKwAAAVs"]
[Sat Aug 29 05:12:04.376185 2026] [security2:error] [pid 11274:tid 11484] [client 158.23.147.79:29586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/images/index.php"] [unique_id "apK-hGbX5DA3XO6e_qRbLQAAATE"]
[Sat Aug 29 05:12:04.382036 2026] [security2:error] [pid 11274:tid 11488] [client 158.158.54.35:15080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/css/wp-login.php"] [unique_id "apK-hGbX5DA3XO6e_qRbLgAAATU"]
[Sat Aug 29 05:12:04.384290 2026] [security2:error] [pid 11274:tid 11467] [client 158.23.147.79:24486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/lock.php"] [unique_id "apK-hGbX5DA3XO6e_qRbLwAAASE"]
[Sat Aug 29 05:12:04.387279 2026] [security2:error] [pid 1321:tid 1588] [client 20.48.160.90:52055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/eagle.php"] [unique_id "apK-hGjCPtor9NZ-byQFHgAABp8"]
[Sat Aug 29 05:12:04.414919 2026] [security2:error] [pid 1321:tid 1584] [client 20.52.41.200:2203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/menu.php"] [unique_id "apK-hGjCPtor9NZ-byQFIAAABps"]
[Sat Aug 29 05:12:04.422290 2026] [security2:error] [pid 11274:tid 11506] [client 20.48.160.90:50014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/alfanew.php"] [unique_id "apK-hGbX5DA3XO6e_qRbMQAAAUc"]
[Sat Aug 29 05:12:04.428093 2026] [security2:error] [pid 1321:tid 1506] [client 52.139.37.240:63592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntcutsandscapes.tntrental.com"] [uri "/form.php"] [unique_id "apK-hGjCPtor9NZ-byQFIgAABk4"]
[Sat Aug 29 05:12:04.437083 2026] [security2:error] [pid 11274:tid 11471] [client 93.123.109.228:43014] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK-hGbX5DA3XO6e_qRbMwAAASU"]
[Sat Aug 29 05:12:04.438252 2026] [security2:error] [pid 11274:tid 11536] [client 158.23.184.117:32436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/.well-known/security.php"] [unique_id "apK-hGbX5DA3XO6e_qRbNQAAAWU"]
[Sat Aug 29 05:12:04.449305 2026] [security2:error] [pid 11274:tid 11565] [client 20.151.200.44:21795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/gaje.php"] [unique_id "apK-hGbX5DA3XO6e_qRbOQAAAYE"]
[Sat Aug 29 05:12:04.450326 2026] [security2:error] [pid 11274:tid 11514] [client 4.205.62.107:28049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/aws_settings.php"] [unique_id "apK-hGbX5DA3XO6e_qRbOgAAAU8"]
[Sat Aug 29 05:12:04.463080 2026] [security2:error] [pid 1321:tid 1583] [client 20.100.175.163:18253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "apK-hGjCPtor9NZ-byQFJgAABpo"]
[Sat Aug 29 05:12:04.471546 2026] [security2:error] [pid 11274:tid 11535] [client 20.197.61.180:12864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/go.php"] [unique_id "apK-hGbX5DA3XO6e_qRbPgAAAWQ"]
[Sat Aug 29 05:12:04.471796 2026] [security2:error] [pid 11274:tid 11563] [client 20.48.250.41:24485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/users.php"] [unique_id "apK-hGbX5DA3XO6e_qRbPwAAAX8"]
[Sat Aug 29 05:12:04.476448 2026] [security2:error] [pid 11274:tid 11521] [client 158.23.147.79:56997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/x.php"] [unique_id "apK-hGbX5DA3XO6e_qRbQgAAAVY"]
[Sat Aug 29 05:12:04.476547 2026] [security2:error] [pid 1321:tid 1490] [client 68.155.159.216:49034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/wp-includes/css/index.php"] [unique_id "apK-hGjCPtor9NZ-byQFJwAABj4"]
[Sat Aug 29 05:12:04.481387 2026] [security2:error] [pid 1321:tid 1576] [client 20.48.160.90:37809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/zi.php"] [unique_id "apK-hGjCPtor9NZ-byQFKAAABpM"]
[Sat Aug 29 05:12:04.498058 2026] [autoindex:error] [pid 1321:tid 1565] [client 45.148.10.62:52414] AH01276: Cannot serve directory /home3/zvibuumy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:12:04.509758 2026] [security2:error] [pid 1321:tid 1581] [client 20.48.250.41:42934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/gdn.php"] [unique_id "apK-hGjCPtor9NZ-byQFLAAABpg"]
[Sat Aug 29 05:12:04.523537 2026] [security2:error] [pid 1321:tid 1593] [client 20.48.160.90:52001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/up-kon.php"] [unique_id "apK-hGjCPtor9NZ-byQFLwAABqQ"]
[Sat Aug 29 05:12:04.527805 2026] [security2:error] [pid 11274:tid 11505] [client 20.240.128.207:7808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "apK-hGbX5DA3XO6e_qRbSgAAAUY"]
[Sat Aug 29 05:12:04.529743 2026] [security2:error] [pid 1321:tid 1594] [client 4.205.62.107:5527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/ammika.php"] [unique_id "apK-hGjCPtor9NZ-byQFMQAABqU"]
[Sat Aug 29 05:12:04.536320 2026] [security2:error] [pid 11274:tid 11501] [client 20.52.41.200:4949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/lock360.php"] [unique_id "apK-hGbX5DA3XO6e_qRbSwAAAUI"]
[Sat Aug 29 05:12:04.546004 2026] [security2:error] [pid 1321:tid 1550] [client 40.83.93.50:13963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/spip.php"] [unique_id "apK-hGjCPtor9NZ-byQFMgAABnk"]
[Sat Aug 29 05:12:04.548875 2026] [security2:error] [pid 1321:tid 1550] [client 20.220.204.93:52225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/mini.php"] [unique_id "apK-hGjCPtor9NZ-byQFNAAABnk"]
[Sat Aug 29 05:12:04.549520 2026] [security2:error] [pid 1321:tid 1612] [client 68.155.159.216:64122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-admin/index.php"] [unique_id "apK-hGjCPtor9NZ-byQFNQAABrc"]
[Sat Aug 29 05:12:04.551205 2026] [security2:error] [pid 11274:tid 11538] [client 93.123.109.228:42878] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/.env.backup"] [unique_id "apK-hGbX5DA3XO6e_qRbTAAAAWc"]
[Sat Aug 29 05:12:04.552143 2026] [security2:error] [pid 1321:tid 1496] [client 93.123.109.228:42962] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/.env.bak"] [unique_id "apK-hGjCPtor9NZ-byQFNgAABkQ"]
[Sat Aug 29 05:12:04.559988 2026] [security2:error] [pid 11274:tid 11561] [client 20.48.160.90:23781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/ioxi.php"] [unique_id "apK-hGbX5DA3XO6e_qRbTQAAAX0"]
[Sat Aug 29 05:12:04.573675 2026] [security2:error] [pid 11274:tid 11461] [client 158.23.184.117:19427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ladiesandbabies.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK-hGbX5DA3XO6e_qRbTgAAARs"]
[Sat Aug 29 05:12:04.585333 2026] [security2:error] [pid 1321:tid 1549] [client 158.23.184.117:31869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/.well-known/system.php"] [unique_id "apK-hGjCPtor9NZ-byQFPgAABng"]
[Sat Aug 29 05:12:04.607036 2026] [security2:error] [pid 11274:tid 11492] [client 93.123.109.228:43088] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/crm/.env"] [unique_id "apK-hGbX5DA3XO6e_qRbUQAAATk"]
[Sat Aug 29 05:12:04.609831 2026] [security2:error] [pid 11274:tid 11546] [client 93.123.109.228:43110] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/cron/.env"] [unique_id "apK-hGbX5DA3XO6e_qRbUwAAAW4"]
[Sat Aug 29 05:12:04.609838 2026] [security2:error] [pid 11274:tid 11572] [client 93.123.109.228:43064] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/current/.env"] [unique_id "apK-hGbX5DA3XO6e_qRbUgAAAYg"]
[Sat Aug 29 05:12:04.610824 2026] [security2:error] [pid 11274:tid 11540] [client 158.23.147.79:14236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-blog-header.php"] [unique_id "apK-hGbX5DA3XO6e_qRbVQAAAWk"]
[Sat Aug 29 05:12:04.615840 2026] [security2:error] [pid 11274:tid 11496] [client 20.48.160.90:37810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/ue.php"] [unique_id "apK-hGbX5DA3XO6e_qRbVgAAAT0"]
[Sat Aug 29 05:12:04.620654 2026] [security2:error] [pid 11274:tid 11555] [client 158.23.147.79:53959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wzy.php"] [unique_id "apK-hGbX5DA3XO6e_qRbVwAAAXc"]
[Sat Aug 29 05:12:04.632734 2026] [security2:error] [pid 11274:tid 11451] [client 52.139.37.240:62269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntcutsandscapes.tntrental.com"] [uri "/wp-sigunq.php"] [unique_id "apK-hGbX5DA3XO6e_qRbWAAAARE"]
[Sat Aug 29 05:12:04.643717 2026] [security2:error] [pid 11274:tid 11450] [client 20.48.250.41:24471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/bzjdlofz.php"] [unique_id "apK-hGbX5DA3XO6e_qRbWQAAARA"]
[Sat Aug 29 05:12:04.646702 2026] [security2:error] [pid 1321:tid 1529] [client 40.83.93.50:10558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/feed-rss2-queue.php"] [unique_id "apK-hGjCPtor9NZ-byQFQQAABmU"]
[Sat Aug 29 05:12:04.658837 2026] [security2:error] [pid 11274:tid 11509] [client 20.48.160.90:31458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/tinny.php"] [unique_id "apK-hGbX5DA3XO6e_qRbWgAAAUo"]
[Sat Aug 29 05:12:04.660686 2026] [security2:error] [pid 11274:tid 11448] [client 158.23.184.117:12409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.robertthomsonpiper.strangeworx.com"] [uri "/update/da222.php"] [unique_id "apK-hGbX5DA3XO6e_qRbWwAAAQ4"]
[Sat Aug 29 05:12:04.663670 2026] [security2:error] [pid 1321:tid 1562] [client 158.158.54.35:14726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/bthil.php"] [unique_id "apK-hGjCPtor9NZ-byQFRAAABoU"]
[Sat Aug 29 05:12:04.665995 2026] [security2:error] [pid 11274:tid 11489] [client 20.104.49.130:50597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/media.php"] [unique_id "apK-hGbX5DA3XO6e_qRbXQAAATY"]
[Sat Aug 29 05:12:04.671199 2026] [security2:error] [pid 1321:tid 1522] [client 20.48.250.41:49573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/f2.php"] [unique_id "apK-hGjCPtor9NZ-byQFRgAABl4"]
[Sat Aug 29 05:12:04.672183 2026] [security2:error] [pid 11274:tid 11526] [client 68.155.159.216:43942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.theenprogroup.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-hGbX5DA3XO6e_qRbXwAAAVs"]
[Sat Aug 29 05:12:04.687975 2026] [security2:error] [pid 1321:tid 1563] [client 93.123.109.228:51934] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/demo/.env"] [unique_id "apK-hGjCPtor9NZ-byQFSQAABoY"]
[Sat Aug 29 05:12:04.688405 2026] [security2:error] [pid 11274:tid 11513] [client 20.220.204.93:59061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/amp.php"] [unique_id "apK-hGbX5DA3XO6e_qRbYAAAAU4"]
[Sat Aug 29 05:12:04.703552 2026] [security2:error] [pid 11274:tid 11520] [client 20.48.160.90:29180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/TNT.php"] [unique_id "apK-hGbX5DA3XO6e_qRbYgAAAVU"]
[Sat Aug 29 05:12:04.721414 2026] [security2:error] [pid 1321:tid 1566] [client 158.23.147.79:6997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/dropdown.php"] [unique_id "apK-hGjCPtor9NZ-byQFSgAABok"]
[Sat Aug 29 05:12:04.730269 2026] [security2:error] [pid 11274:tid 11473] [client 158.23.184.117:19394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ladiesandbabies.com"] [uri "/.well-known/acme-challenge/content.php"] [unique_id "apK-hGbX5DA3XO6e_qRbZQAAASc"]
[Sat Aug 29 05:12:04.732921 2026] [security2:error] [pid 11274:tid 11570] [client 158.23.184.117:31838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/.well-known/users.php"] [unique_id "apK-hGbX5DA3XO6e_qRbZgAAAYY"]
[Sat Aug 29 05:12:04.734022 2026] [security2:error] [pid 11274:tid 11449] [client 93.123.109.228:51990] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/dev/.env"] [unique_id "apK-hGbX5DA3XO6e_qRbZwAAAQ8"]
[Sat Aug 29 05:12:04.737998 2026] [security2:error] [pid 1321:tid 1601] [client 34.169.171.101:35006] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "mail.forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-g2jCPtor9NZ-byQErQAABqw"]
[Sat Aug 29 05:12:04.760618 2026] [security2:error] [pid 11274:tid 11459] [client 20.48.160.90:51776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/nv.php"] [unique_id "apK-hGbX5DA3XO6e_qRbagAAARk"]
[Sat Aug 29 05:12:04.775281 2026] [security2:error] [pid 1321:tid 1510] [client 34.169.171.101:35074] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-hGjCPtor9NZ-byQFVgAABlI"], referer: https://mail.forensicengineernj.com/config.yaml
[Sat Aug 29 05:12:04.785424 2026] [security2:error] [pid 11274:tid 11560] [client 93.123.109.228:42880] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/.env.old"] [unique_id "apK-hGbX5DA3XO6e_qRbbwAAAXw"]
[Sat Aug 29 05:12:04.790936 2026] [security2:error] [pid 11274:tid 11493] [client 20.48.160.90:51978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/wp-easy.php"] [unique_id "apK-hGbX5DA3XO6e_qRbcAAAATo"]
[Sat Aug 29 05:12:04.799923 2026] [security2:error] [pid 1321:tid 1531] [client 93.123.109.228:42890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/.env.php"] [unique_id "apK-hGjCPtor9NZ-byQFWQAABmc"]
[Sat Aug 29 05:12:04.805794 2026] [security2:error] [pid 11274:tid 11515] [client 20.48.250.41:42981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/grsiuk.php"] [unique_id "apK-hGbX5DA3XO6e_qRbcgAAAVA"]
[Sat Aug 29 05:12:04.806711 2026] [security2:error] [pid 11274:tid 11514] [client 158.23.184.117:12632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.robertthomsonpiper.strangeworx.com"] [uri "/xmr.php"] [unique_id "apK-hGbX5DA3XO6e_qRbcwAAAU8"]
[Sat Aug 29 05:12:04.808220 2026] [security2:error] [pid 1321:tid 1607] [client 45.148.10.62:52414] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.zvi.buu.mybluehost.me"] [uri "/api/.env"] [unique_id "apK-hGjCPtor9NZ-byQFWgAABrI"]
[Sat Aug 29 05:12:04.808755 2026] [security2:error] [pid 11274:tid 11477] [client 20.48.250.41:24554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/selesai.php"] [unique_id "apK-hGbX5DA3XO6e_qRbdAAAASs"]
[Sat Aug 29 05:12:04.818259 2026] [security2:error] [pid 11274:tid 11543] [client 93.123.109.228:52090] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/develop/.env"] [unique_id "apK-hGbX5DA3XO6e_qRbdQAAAWs"]
[Sat Aug 29 05:12:04.826652 2026] [security2:error] [pid 11274:tid 11541] [client 20.240.128.207:4058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/assets/images/doc.php"] [unique_id "apK-hGbX5DA3XO6e_qRbeQAAAWo"]
[Sat Aug 29 05:12:04.831315 2026] [security2:error] [pid 1321:tid 1605] [client 52.139.37.240:62416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tntcutsandscapes.tntrental.com"] [uri "/07.php"] [unique_id "apK-hGjCPtor9NZ-byQFWwAABrA"]
[Sat Aug 29 05:12:04.834947 2026] [security2:error] [pid 1321:tid 1606] [client 20.48.160.90:23692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/cd.php"] [unique_id "apK-hGjCPtor9NZ-byQFXQAABrE"]
[Sat Aug 29 05:12:04.846264 2026] [security2:error] [pid 1321:tid 1491] [client 68.155.159.216:56820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK-hGjCPtor9NZ-byQFXgAABj8"]
[Sat Aug 29 05:12:04.847714 2026] [security2:error] [pid 11274:tid 11461] [client 4.205.62.107:64193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/routes.php"] [unique_id "apK-hGbX5DA3XO6e_qRbfAAAARs"]
[Sat Aug 29 05:12:04.848209 2026] [security2:error] [pid 11274:tid 11503] [client 20.220.204.93:59132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/cc13.php"] [unique_id "apK-hGbX5DA3XO6e_qRbfQAAAUQ"]
[Sat Aug 29 05:12:04.854599 2026] [security2:error] [pid 11274:tid 11492] [client 93.123.109.228:43064] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/development/.env"] [unique_id "apK-hGbX5DA3XO6e_qRbggAAATk"]
[Sat Aug 29 05:12:04.855538 2026] [security2:error] [pid 11274:tid 11524] [client 158.158.54.35:11080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-includes/Text/about.php"] [unique_id "apK-hGbX5DA3XO6e_qRbgwAAAVk"]
[Sat Aug 29 05:12:04.857428 2026] [security2:error] [pid 11274:tid 11488] [client 158.158.54.35:15077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/images/index.php"] [unique_id "apK-hGbX5DA3XO6e_qRbhQAAATU"]
[Sat Aug 29 05:12:04.862713 2026] [security2:error] [pid 1321:tid 1519] [client 20.151.200.44:55731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/inwp.php"] [unique_id "apK-hGjCPtor9NZ-byQFYAAABls"]
[Sat Aug 29 05:12:04.870889 2026] [security2:error] [pid 1321:tid 1608] [client 20.52.41.200:2627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK-hGjCPtor9NZ-byQFYQAABrM"]
[Sat Aug 29 05:12:04.881513 2026] [security2:error] [pid 11274:tid 11538] [client 158.23.184.117:32386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/.well-known/wp-blog-header.php"] [unique_id "apK-hGbX5DA3XO6e_qRbiQAAAWc"]
[Sat Aug 29 05:12:04.890962 2026] [security2:error] [pid 1321:tid 1515] [client 93.123.109.228:42892] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/.env.swp"] [unique_id "apK-hGjCPtor9NZ-byQFaAAABlc"]
[Sat Aug 29 05:12:04.892614 2026] [security2:error] [pid 1321:tid 1597] [client 20.48.160.90:37868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/jw.php"] [unique_id "apK-hGjCPtor9NZ-byQFaQAABqg"]
[Sat Aug 29 05:12:04.899336 2026] [security2:error] [pid 1321:tid 1506] [client 158.23.147.79:63839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/log-mama/function.php"] [unique_id "apK-hGjCPtor9NZ-byQFbgAABk4"]
[Sat Aug 29 05:12:04.931714 2026] [security2:error] [pid 11274:tid 11509] [client 20.48.160.90:52072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/d7.php"] [unique_id "apK-hGbX5DA3XO6e_qRbjAAAAUo"]
[Sat Aug 29 05:12:04.932834 2026] [security2:error] [pid 1321:tid 1500] [client 158.23.184.117:61640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ladiesandbabies.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK-hGjCPtor9NZ-byQFcAAABkg"]
[Sat Aug 29 05:12:04.940979 2026] [security2:error] [pid 11274:tid 11489] [client 93.123.109.228:51940] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/developer/.env"] [unique_id "apK-hGbX5DA3XO6e_qRbjQAAATY"]
[Sat Aug 29 05:12:04.951721 2026] [security2:error] [pid 11274:tid 11450] [client 158.23.184.117:13019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.robertthomsonpiper.strangeworx.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK-hGbX5DA3XO6e_qRbjwAAARA"]
[Sat Aug 29 05:12:04.952097 2026] [security2:error] [pid 11274:tid 11568] [client 20.48.250.41:49552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/wp-scr1pts.php"] [unique_id "apK-hGbX5DA3XO6e_qRbkAAAAYQ"]
[Sat Aug 29 05:12:04.959570 2026] [security2:error] [pid 1321:tid 1603] [client 45.148.10.62:52414] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.zvi.buu.mybluehost.me"] [uri "/.env.bak"] [unique_id "apK-hGjCPtor9NZ-byQFcQAABq4"]
[Sat Aug 29 05:12:04.963651 2026] [security2:error] [pid 11274:tid 11466] [client 20.100.175.163:9589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/222.php"] [unique_id "apK-hGbX5DA3XO6e_qRbkgAAASA"]
[Sat Aug 29 05:12:04.972310 2026] [security2:error] [pid 11274:tid 11520] [client 68.155.159.216:43975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK-hGbX5DA3XO6e_qRblAAAAVU"]
[Sat Aug 29 05:12:04.973719 2026] [security2:error] [pid 11274:tid 11467] [client 93.123.109.228:43168] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/.env~"] [unique_id "apK-hGbX5DA3XO6e_qRbkwAAASE"]
[Sat Aug 29 05:12:04.982128 2026] [security2:error] [pid 11274:tid 11465] [client 20.48.160.90:28762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/luuf.php"] [unique_id "apK-hGbX5DA3XO6e_qRblgAAAR8"]
[Sat Aug 29 05:12:04.986779 2026] [security2:error] [pid 1321:tid 1497] [client 20.151.200.44:63749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/wp-admin/zwso.php"] [unique_id "apK-hGjCPtor9NZ-byQFcgAABkU"]
[Sat Aug 29 05:12:04.988557 2026] [security2:error] [pid 1321:tid 1593] [client 20.220.204.93:59021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/aa.php"] [unique_id "apK-hGjCPtor9NZ-byQFcwAABqQ"]
[Sat Aug 29 05:12:04.992639 2026] [security2:error] [pid 11274:tid 11561] [client 20.52.41.200:4793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-conflg.php"] [unique_id "apK-hGbX5DA3XO6e_qRbmQAAAX0"]
[Sat Aug 29 05:12:04.999982 2026] [security2:error] [pid 11274:tid 11473] [client 4.205.62.107:61703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/php_info.php"] [unique_id "apK-hGbX5DA3XO6e_qRbmgAAASc"]
[Sat Aug 29 05:12:05.029641 2026] [security2:error] [pid 11274:tid 11500] [client 158.23.184.117:31821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/.well-known/wp-links-opml.php"] [unique_id "apK-hWbX5DA3XO6e_qRbnQAAAUE"]
[Sat Aug 29 05:12:05.032900 2026] [security2:error] [pid 11274:tid 11508] [client 52.139.37.240:62253] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "tntcutsandscapes.tntrental.com"] [uri "/c99.php"] [unique_id "apK-hWbX5DA3XO6e_qRbnwAAAUk"]
[Sat Aug 29 05:12:05.036609 2026] [security2:error] [pid 1321:tid 1591] [client 20.48.160.90:24962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/or.php"] [unique_id "apK-hWjCPtor9NZ-byQFewAABqI"]
[Sat Aug 29 05:12:05.042613 2026] [security2:error] [pid 1321:tid 1553] [client 68.155.159.216:23450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK-hWjCPtor9NZ-byQFfAAABnw"]
[Sat Aug 29 05:12:05.056382 2026] [security2:error] [pid 11274:tid 11512] [client 40.83.93.50:9081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/backup.php"] [unique_id "apK-hWbX5DA3XO6e_qRboAAAAU0"]
[Sat Aug 29 05:12:05.066060 2026] [security2:error] [pid 11274:tid 11563] [client 20.48.250.41:24454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/shlo.php"] [unique_id "apK-hWbX5DA3XO6e_qRbogAAAX8"]
[Sat Aug 29 05:12:05.067895 2026] [security2:error] [pid 11274:tid 11469] [client 20.48.160.90:31377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/v5.php"] [unique_id "apK-hWbX5DA3XO6e_qRbowAAASM"]
[Sat Aug 29 05:12:05.070609 2026] [security2:error] [pid 11274:tid 11456] [client 4.205.62.107:6510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/wp-info.php"] [unique_id "apK-hWbX5DA3XO6e_qRbpAAAARY"]
[Sat Aug 29 05:12:05.083385 2026] [security2:error] [pid 1321:tid 1574] [client 158.23.184.117:61686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ladiesandbabies.com"] [uri "/.well-known/acme-challenge/sx.php"] [unique_id "apK-hWjCPtor9NZ-byQFfQAABpE"]
[Sat Aug 29 05:12:05.086439 2026] [security2:error] [pid 11274:tid 11493] [client 20.48.250.41:42980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/num.php"] [unique_id "apK-hWbX5DA3XO6e_qRbqAAAATo"]
[Sat Aug 29 05:12:05.087333 2026] [security2:error] [pid 11274:tid 11560] [client 68.155.159.216:35833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-login.php"] [unique_id "apK-hWbX5DA3XO6e_qRbqQAAAXw"]
[Sat Aug 29 05:12:05.088995 2026] [security2:error] [pid 11274:tid 11515] [client 4.205.62.107:61037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/xza.php"] [unique_id "apK-hWbX5DA3XO6e_qRbqgAAAVA"]
[Sat Aug 29 05:12:05.098451 2026] [security2:error] [pid 11274:tid 11480] [client 158.23.184.117:13049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.robertthomsonpiper.strangeworx.com"] [uri "/wp-act.php"] [unique_id "apK-hWbX5DA3XO6e_qRbrQAAAS0"]
[Sat Aug 29 05:12:05.102600 2026] [security2:error] [pid 1321:tid 1526] [client 52.139.37.240:14492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/ahax.php"] [unique_id "apK-hWjCPtor9NZ-byQFgQAABmI"]
[Sat Aug 29 05:12:05.105550 2026] [security2:error] [pid 1321:tid 1457] [remote 40.77.167.78:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.167.77.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantsfans.net"] [uri "/message_board/index.php"] [unique_id "apK-hWjCPtor9NZ-byQFggAGeGI"]
[Sat Aug 29 05:12:05.114648 2026] [security2:error] [pid 1321:tid 1492] [client 93.123.109.228:52018] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/erp/.env"] [unique_id "apK-hWjCPtor9NZ-byQFgwAABkA"]
[Sat Aug 29 05:12:05.115432 2026] [security2:error] [pid 11274:tid 11518] [client 20.240.128.207:11661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/gifclass.php"] [unique_id "apK-hWbX5DA3XO6e_qRbsAAAAVM"]
[Sat Aug 29 05:12:05.115894 2026] [security2:error] [pid 11274:tid 11543] [client 93.123.109.228:42880] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.bak"] [unique_id "apK-hWbX5DA3XO6e_qRbrwAAAWs"]
[Sat Aug 29 05:12:05.115934 2026] [security2:error] [pid 1321:tid 1615] [client 40.83.93.50:3975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/inputs.php"] [unique_id "apK-hWjCPtor9NZ-byQFhAAABro"]
[Sat Aug 29 05:12:05.116247 2026] [security2:error] [pid 11274:tid 11505] [client 158.23.147.79:50057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK-hWbX5DA3XO6e_qRbsQAAAUY"]
[Sat Aug 29 05:12:05.129268 2026] [security2:error] [pid 11274:tid 11479] [client 93.123.109.228:43168] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.old"] [unique_id "apK-hWbX5DA3XO6e_qRbswAAASw"]
[Sat Aug 29 05:12:05.129333 2026] [security2:error] [pid 11274:tid 11541] [client 20.48.160.90:23729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/fex.php"] [unique_id "apK-hWbX5DA3XO6e_qRbtAAAAWo"]
[Sat Aug 29 05:12:05.140634 2026] [security2:error] [pid 1321:tid 1598] [client 20.104.18.15:29684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/nox.php"] [unique_id "apK-hWjCPtor9NZ-byQFhgAABqk"]
[Sat Aug 29 05:12:05.144348 2026] [security2:error] [pid 11274:tid 11492] [client 93.123.109.228:43014] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config~"] [unique_id "apK-hWbX5DA3XO6e_qRbtgAAATk"]
[Sat Aug 29 05:12:05.154710 2026] [security2:error] [pid 11274:tid 11554] [client 93.123.109.228:51954] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/etc/boto.cfg"] [unique_id "apK-hWbX5DA3XO6e_qRbtwAAAXY"]
[Sat Aug 29 05:12:05.157652 2026] [security2:error] [pid 11274:tid 11502] [client 93.123.109.228:51970] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/etc/apache2/apache2.conf"] [unique_id "apK-hWbX5DA3XO6e_qRbuAAAAUM"]
[Sat Aug 29 05:12:05.161631 2026] [security2:error] [pid 11274:tid 11504] [client 68.155.159.216:14146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/worksec.php"] [unique_id "apK-hWbX5DA3XO6e_qRbuQAAAUU"]
[Sat Aug 29 05:12:05.163819 2026] [security2:error] [pid 11274:tid 11451] [client 93.123.109.228:52076] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/fe/.env"] [unique_id "apK-hWbX5DA3XO6e_qRbugAAARE"]
[Sat Aug 29 05:12:05.165866 2026] [security2:error] [pid 11274:tid 11379] [remote 74.7.227.143:42604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.district3.ca"] [uri "/D3WEBinfo.php"] [unique_id "apK-hWbX5DA3XO6e_qRbuwABbkE"], referer: https://mail.district3.ca/
[Sat Aug 29 05:12:05.176990 2026] [security2:error] [pid 11274:tid 11475] [client 158.23.184.117:32433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/.well-known/wp-load.php"] [unique_id "apK-hWbX5DA3XO6e_qRbvAAAASk"]
[Sat Aug 29 05:12:05.180500 2026] [security2:error] [pid 11274:tid 11499] [client 20.48.160.90:37824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/ile56.php"] [unique_id "apK-hWbX5DA3XO6e_qRbvQAAAUA"]
[Sat Aug 29 05:12:05.197637 2026] [security2:error] [pid 1321:tid 1544] [client 20.48.160.90:52062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/az.php"] [unique_id "apK-hWjCPtor9NZ-byQFjgAABnQ"]
[Sat Aug 29 05:12:05.199239 2026] [security2:error] [pid 11274:tid 11484] [client 20.197.61.180:1102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/gecko-new.php"] [unique_id "apK-hWbX5DA3XO6e_qRbvwAAATE"]
[Sat Aug 29 05:12:05.209317 2026] [authz_core:error] [pid 11274:tid 11545] [client 158.158.54.35:22623] AH01630: client denied by server configuration: /home3/juntoohk/public_html/ebichili/wp-admin/includes/error_log
[Sat Aug 29 05:12:05.222287 2026] [security2:error] [pid 11274:tid 11489] [client 20.48.250.41:42800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/a4.php"] [unique_id "apK-hWbX5DA3XO6e_qRbwwAAATY"]
[Sat Aug 29 05:12:05.232523 2026] [security2:error] [pid 1321:tid 1532] [client 158.23.184.117:61638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ladiesandbabies.com"] [uri "/.well-known/admin.php"] [unique_id "apK-hWjCPtor9NZ-byQFlAAABmg"]
[Sat Aug 29 05:12:05.240956 2026] [security2:error] [pid 11274:tid 11444] [client 52.139.37.240:56322] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "tntcutsandscapes.tntrental.com"] [uri "/c99.php"] [unique_id "apK-hWbX5DA3XO6e_qRbxAAAAQo"]
[Sat Aug 29 05:12:05.242898 2026] [security2:error] [pid 11274:tid 11552] [client 4.205.62.107:32521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/g3.php"] [unique_id "apK-hWbX5DA3XO6e_qRbxQAAAXQ"]
[Sat Aug 29 05:12:05.245057 2026] [security2:error] [pid 11274:tid 11465] [client 20.220.204.93:59054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/s1.php"] [unique_id "apK-hWbX5DA3XO6e_qRbxgAAAR8"]
[Sat Aug 29 05:12:05.254475 2026] [security2:error] [pid 1321:tid 1385] [remote 93.123.109.228:42940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/test.php"] [unique_id "apK-hWjCPtor9NZ-byQFlgAGVhs"]
[Sat Aug 29 05:12:05.254598 2026] [security2:error] [pid 1321:tid 1527] [client 158.23.184.117:12392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.robertthomsonpiper.strangeworx.com"] [uri "/fff.php"] [unique_id "apK-hWjCPtor9NZ-byQFlwAABmM"]
[Sat Aug 29 05:12:05.259267 2026] [security2:error] [pid 11274:tid 11522] [client 20.151.200.44:23570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/blox.php"] [unique_id "apK-hWbX5DA3XO6e_qRbxwAAAVc"]
[Sat Aug 29 05:12:05.265808 2026] [security2:error] [pid 11274:tid 11561] [client 20.48.160.90:29179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/l.php"] [unique_id "apK-hWbX5DA3XO6e_qRbyAAAAX0"]
[Sat Aug 29 05:12:05.274787 2026] [security2:error] [pid 1321:tid 1601] [client 20.151.200.44:63121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/Contrller.php"] [unique_id "apK-hWjCPtor9NZ-byQFmwAABqw"]
[Sat Aug 29 05:12:05.275113 2026] [security2:error] [pid 11274:tid 11551] [client 93.123.109.228:43258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/front/.env"] [unique_id "apK-hWbX5DA3XO6e_qRbyQAAAXM"]
[Sat Aug 29 05:12:05.275128 2026] [security2:error] [pid 11274:tid 11511] [client 93.123.109.228:52126] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/frontend/.env"] [unique_id "apK-hWbX5DA3XO6e_qRbywAAAUw"]
[Sat Aug 29 05:12:05.288028 2026] [security2:error] [pid 11274:tid 11570] [client 20.104.18.15:29165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/akismet.php"] [unique_id "apK-hWbX5DA3XO6e_qRbzQAAAYY"]
[Sat Aug 29 05:12:05.294111 2026] [security2:error] [pid 11274:tid 11473] [client 20.104.18.15:29148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/ws85.php"] [unique_id "apK-hWbX5DA3XO6e_qRbzgAAASc"]
[Sat Aug 29 05:12:05.302023 2026] [security2:error] [pid 11274:tid 11466] [client 52.139.37.240:14466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/breads1.php"] [unique_id "apK-hWbX5DA3XO6e_qRbzwAAASA"]
[Sat Aug 29 05:12:05.314398 2026] [security2:error] [pid 11274:tid 11454] [client 20.48.160.90:61610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/emmh.php"] [unique_id "apK-hWbX5DA3XO6e_qRb1AAAARQ"]
[Sat Aug 29 05:12:05.324479 2026] [security2:error] [pid 11274:tid 11524] [client 158.158.54.35:28965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.clementphotography.ca"] [uri "/wp-admin.php"] [unique_id "apK-hWbX5DA3XO6e_qRb1gAAAVk"]
[Sat Aug 29 05:12:05.324480 2026] [security2:error] [pid 1321:tid 1595] [client 158.23.184.117:31773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/.well-known/wp-mail.php"] [unique_id "apK-hWjCPtor9NZ-byQFngAABqY"]
[Sat Aug 29 05:12:05.331898 2026] [autoindex:error] [pid 11274:tid 11464] [client 20.52.41.200:2182] AH01276: Cannot serve directory /home3/jomoasso/public_html/slsug/assets/: No matching DirectoryIndex (index.php,index.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:12:05.338793 2026] [security2:error] [pid 11274:tid 11521] [client 20.48.160.90:31468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/js.php"] [unique_id "apK-hWbX5DA3XO6e_qRb2gAAAVY"]
[Sat Aug 29 05:12:05.348863 2026] [security2:error] [pid 1321:tid 1499] [client 20.240.128.207:5193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/bgymj.php"] [unique_id "apK-hWjCPtor9NZ-byQFoAAABkc"]
[Sat Aug 29 05:12:05.364277 2026] [security2:error] [pid 11274:tid 11493] [client 20.48.250.41:42985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/tfm.php"] [unique_id "apK-hWbX5DA3XO6e_qRb3gAAATo"]
[Sat Aug 29 05:12:05.369573 2026] [autoindex:error] [pid 11274:tid 11469] [client 158.158.54.35:0] AH01276: Cannot serve directory /home2/charlov7/public_html/dev/wp-includes/PHPMailer/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:12:05.374178 2026] [security2:error] [pid 11274:tid 11518] [client 20.151.200.44:27285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/ah24.php"] [unique_id "apK-hWbX5DA3XO6e_qRb4gAAAVM"]
[Sat Aug 29 05:12:05.377197 2026] [security2:error] [pid 11274:tid 11459] [client 158.23.184.117:61670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ladiesandbabies.com"] [uri "/.well-known/api.php"] [unique_id "apK-hWbX5DA3XO6e_qRb5AAAARk"]
[Sat Aug 29 05:12:05.390287 2026] [security2:error] [pid 11274:tid 11530] [client 20.220.204.93:59113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/0byte.php"] [unique_id "apK-hWbX5DA3XO6e_qRb5QAAAV8"]
[Sat Aug 29 05:12:05.405996 2026] [security2:error] [pid 11274:tid 11569] [client 20.48.160.90:23751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/xr.php"] [unique_id "apK-hWbX5DA3XO6e_qRb5gAAAYU"]
[Sat Aug 29 05:12:05.435649 2026] [security2:error] [pid 11274:tid 11477] [client 20.104.18.15:29182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/ajax.php"] [unique_id "apK-hWbX5DA3XO6e_qRb7AAAASs"]
[Sat Aug 29 05:12:05.436431 2026] [security2:error] [pid 11274:tid 11480] [client 52.139.37.240:62441] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "tntcutsandscapes.tntrental.com"] [uri "/c99.php"] [unique_id "apK-hWbX5DA3XO6e_qRb7QAAAS0"]
[Sat Aug 29 05:12:05.451583 2026] [security2:error] [pid 11274:tid 11471] [client 20.52.41.200:5180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/123.php"] [unique_id "apK-hWbX5DA3XO6e_qRb7wAAASU"]
[Sat Aug 29 05:12:05.454893 2026] [security2:error] [pid 11274:tid 11519] [client 20.48.160.90:51802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/em.php"] [unique_id "apK-hWbX5DA3XO6e_qRb8AAAAVQ"]
[Sat Aug 29 05:12:05.459305 2026] [security2:error] [pid 11274:tid 11549] [client 158.23.184.117:13045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.robertthomsonpiper.strangeworx.com"] [uri "/.tmb/dropdown.php"] [unique_id "apK-hWbX5DA3XO6e_qRb8gAAAXE"]
[Sat Aug 29 05:12:05.468430 2026] [security2:error] [pid 11274:tid 11475] [client 20.48.250.41:24452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/asax.php"] [unique_id "apK-hWbX5DA3XO6e_qRb8wAAASk"]
[Sat Aug 29 05:12:05.470978 2026] [security2:error] [pid 11274:tid 11509] [client 158.158.54.35:22623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/cv.php"] [unique_id "apK-hWbX5DA3XO6e_qRb9AAAAUo"]
[Sat Aug 29 05:12:05.473073 2026] [security2:error] [pid 11274:tid 11495] [client 20.48.160.90:52029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/hd.php"] [unique_id "apK-hWbX5DA3XO6e_qRb9QAAATw"]
[Sat Aug 29 05:12:05.473712 2026] [security2:error] [pid 11274:tid 11540] [client 158.23.184.117:31813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/.well-known/wp-settings.php"] [unique_id "apK-hWbX5DA3XO6e_qRb9gAAAWk"]
[Sat Aug 29 05:12:05.482764 2026] [security2:error] [pid 11274:tid 11558] [client 20.52.41.200:2182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/lite.php"] [unique_id "apK-hWbX5DA3XO6e_qRb-AAAAXo"]
[Sat Aug 29 05:12:05.482781 2026] [security2:error] [pid 11274:tid 11448] [client 93.123.109.228:51990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/info.php"] [unique_id "apK-hWbX5DA3XO6e_qRb9wAAAQ4"]
[Sat Aug 29 05:12:05.486562 2026] [security2:error] [pid 1321:tid 1588] [client 93.123.109.228:43204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/infophp.php"] [unique_id "apK-hWjCPtor9NZ-byQFqQAABp8"]
[Sat Aug 29 05:12:05.487076 2026] [security2:error] [pid 11274:tid 11565] [client 20.100.175.163:4126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/mini.php"] [unique_id "apK-hWbX5DA3XO6e_qRb-gAAAYE"]
[Sat Aug 29 05:12:05.488199 2026] [security2:error] [pid 1321:tid 1608] [client 45.148.10.62:52414] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.zvi.buu.mybluehost.me"] [uri "/stripe/.env"] [unique_id "apK-hWjCPtor9NZ-byQFqgAABrM"]
[Sat Aug 29 05:12:05.489460 2026] [security2:error] [pid 11274:tid 11555] [client 93.123.109.228:43088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/infos.php"] [unique_id "apK-hWbX5DA3XO6e_qRb_AAAAXc"]
[Sat Aug 29 05:12:05.495308 2026] [security2:error] [pid 11274:tid 11554] [client 52.139.37.240:14486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/must.php"] [unique_id "apK-hWbX5DA3XO6e_qRb_QAAAXY"]
[Sat Aug 29 05:12:05.498324 2026] [security2:error] [pid 11274:tid 11526] [client 158.23.147.79:63233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK-hWbX5DA3XO6e_qRb_gAAAVs"]
[Sat Aug 29 05:12:05.509401 2026] [security2:error] [pid 11274:tid 11520] [client 20.151.200.44:65096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/Zeiss.php"] [unique_id "apK-hWbX5DA3XO6e_qRcAAAAAVU"]
[Sat Aug 29 05:12:05.516290 2026] [security2:error] [pid 11274:tid 11561] [client 20.48.250.41:42933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/Geforce.php"] [unique_id "apK-hWbX5DA3XO6e_qRcAwAAAX0"]
[Sat Aug 29 05:12:05.520097 2026] [security2:error] [pid 11274:tid 11445] [client 158.23.184.117:61691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ladiesandbabies.com"] [uri "/.well-known/chosen.php"] [unique_id "apK-hWbX5DA3XO6e_qRcBAAAAQs"]
[Sat Aug 29 05:12:05.523351 2026] [security2:error] [pid 11274:tid 11485] [client 20.104.18.15:29172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/ffs.php"] [unique_id "apK-hWbX5DA3XO6e_qRcBQAAATI"]
[Sat Aug 29 05:12:05.523471 2026] [security2:error] [pid 11274:tid 11571] [client 158.158.54.35:20695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/inputs.php"] [unique_id "apK-hWbX5DA3XO6e_qRcBgAAAYc"]
[Sat Aug 29 05:12:05.524647 2026] [security2:error] [pid 11274:tid 11449] [client 158.23.147.79:24544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/index/function.php"] [unique_id "apK-hWbX5DA3XO6e_qRcCAAAAQ8"]
[Sat Aug 29 05:12:05.524704 2026] [security2:error] [pid 11274:tid 11551] [client 93.123.109.228:51940] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/laravel/.env"] [unique_id "apK-hWbX5DA3XO6e_qRcBwAAAXM"]
[Sat Aug 29 05:12:05.545142 2026] [security2:error] [pid 1321:tid 1590] [client 20.48.160.90:23727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/Q3.php"] [unique_id "apK-hWjCPtor9NZ-byQFugAABqE"]
[Sat Aug 29 05:12:05.562001 2026] [security2:error] [pid 1321:tid 1565] [client 20.104.49.130:51337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/az.php"] [unique_id "apK-hWjCPtor9NZ-byQFvQAABog"]
[Sat Aug 29 05:12:05.571122 2026] [security2:error] [pid 1321:tid 1603] [client 93.123.109.228:43248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/lms/.env"] [unique_id "apK-hWjCPtor9NZ-byQFvgAABq4"]
[Sat Aug 29 05:12:05.576085 2026] [security2:error] [pid 11274:tid 11497] [client 93.123.109.228:52126] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/local/.env"] [unique_id "apK-hWbX5DA3XO6e_qRcDAAAAT4"]
[Sat Aug 29 05:12:05.583806 2026] [security2:error] [pid 1321:tid 1536] [client 158.23.147.79:44500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-content/x.php"] [unique_id "apK-hWjCPtor9NZ-byQFvwAABmw"]
[Sat Aug 29 05:12:05.585336 2026] [security2:error] [pid 1321:tid 1548] [client 68.155.159.216:49119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK-hWjCPtor9NZ-byQFwAAABnc"]
[Sat Aug 29 05:12:05.590463 2026] [security2:error] [pid 11274:tid 11521] [client 4.205.62.107:32548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/wp-konfig.backup.php"] [unique_id "apK-hWbX5DA3XO6e_qRcDgAAAVY"]
[Sat Aug 29 05:12:05.591602 2026] [security2:error] [pid 1321:tid 1490] [client 4.205.62.107:63381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-hWjCPtor9NZ-byQFwQAABj4"]
[Sat Aug 29 05:12:05.603525 2026] [security2:error] [pid 1321:tid 1610] [client 158.23.184.117:12398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.robertthomsonpiper.strangeworx.com"] [uri "/robots.php"] [unique_id "apK-hWjCPtor9NZ-byQFxQAABrU"]
[Sat Aug 29 05:12:05.607088 2026] [security2:error] [pid 1321:tid 1497] [client 20.48.160.90:31408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/xl2023.php"] [unique_id "apK-hWjCPtor9NZ-byQFxgAABkU"]
[Sat Aug 29 05:12:05.614739 2026] [security2:error] [pid 1321:tid 1517] [client 20.48.160.90:24970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/dvve.php"] [unique_id "apK-hWjCPtor9NZ-byQFyAAABlk"]
[Sat Aug 29 05:12:05.619737 2026] [security2:error] [pid 11274:tid 11545] [client 158.23.184.117:7416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.antiquesweeknh.com"] [uri "/update/da222.php"] [unique_id "apK-hWbX5DA3XO6e_qRcEQAAAW0"]
[Sat Aug 29 05:12:05.620492 2026] [security2:error] [pid 1321:tid 1583] [client 158.23.184.117:32404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/.well-known/wp-signup.php"] [unique_id "apK-hWjCPtor9NZ-byQFygAABpo"]
[Sat Aug 29 05:12:05.660197 2026] [security2:error] [pid 1321:tid 1574] [client 20.48.250.41:49629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/click.php"] [unique_id "apK-hWjCPtor9NZ-byQFzgAABpE"]
[Sat Aug 29 05:12:05.660605 2026] [security2:error] [pid 11274:tid 11541] [client 68.155.159.216:64019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK-hWbX5DA3XO6e_qRcFwAAAWo"]
[Sat Aug 29 05:12:05.670229 2026] [security2:error] [pid 11274:tid 11539] [client 40.83.93.50:3998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/class-walker-category-dropdown-class.php"] [unique_id "apK-hWbX5DA3XO6e_qRcGAAAAWg"]
[Sat Aug 29 05:12:05.671097 2026] [security2:error] [pid 1321:tid 1564] [client 20.220.204.93:59118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/xr.php"] [unique_id "apK-hWjCPtor9NZ-byQF0AAABoc"]
[Sat Aug 29 05:12:05.671470 2026] [security2:error] [pid 11274:tid 11493] [client 158.23.184.117:19034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ladiesandbabies.com"] [uri "/.well-known/config.php"] [unique_id "apK-hWbX5DA3XO6e_qRcGQAAATo"]
[Sat Aug 29 05:12:05.675770 2026] [security2:error] [pid 1321:tid 1519] [client 40.83.93.50:13996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/haiterus.php"] [unique_id "apK-hWjCPtor9NZ-byQF0gAABls"]
[Sat Aug 29 05:12:05.675846 2026] [security2:error] [pid 1321:tid 1543] [client 4.205.62.107:5526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/broadcasting.php"] [unique_id "apK-hWjCPtor9NZ-byQF0wAABnM"]
[Sat Aug 29 05:12:05.677266 2026] [security2:error] [pid 1321:tid 1542] [client 20.48.160.90:28754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/Q1.php"] [unique_id "apK-hWjCPtor9NZ-byQF1AAABnI"]
[Sat Aug 29 05:12:05.697416 2026] [security2:error] [pid 11274:tid 11469] [client 52.139.37.240:14482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/up.php"] [unique_id "apK-hWbX5DA3XO6e_qRcHAAAASM"]
[Sat Aug 29 05:12:05.718969 2026] [security2:error] [pid 1321:tid 1512] [client 158.23.147.79:14300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK-hWjCPtor9NZ-byQF2AAABlQ"]
[Sat Aug 29 05:12:05.731088 2026] [security2:error] [pid 11274:tid 11504] [client 93.123.109.228:43064] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/market/.env"] [unique_id "apK-hWbX5DA3XO6e_qRcHQAAAUU"]
[Sat Aug 29 05:12:05.737735 2026] [security2:error] [pid 11274:tid 11492] [client 93.123.109.228:51954] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/marketing/.env"] [unique_id "apK-hWbX5DA3XO6e_qRcHgAAATk"]
[Sat Aug 29 05:12:05.753756 2026] [security2:error] [pid 11274:tid 11572] [client 158.23.184.117:12361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.robertthomsonpiper.strangeworx.com"] [uri "/.well-known/install.php"] [unique_id "apK-hWbX5DA3XO6e_qRcHwAAAYg"]
[Sat Aug 29 05:12:05.754254 2026] [security2:error] [pid 11274:tid 11471] [client 158.23.147.79:60198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-admin/setup-config.php"] [unique_id "apK-hWbX5DA3XO6e_qRcIAAAASU"]
[Sat Aug 29 05:12:05.756409 2026] [security2:error] [pid 11274:tid 11546] [client 20.48.160.90:48322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/V2.php"] [unique_id "apK-hWbX5DA3XO6e_qRcIgAAAW4"]
[Sat Aug 29 05:12:05.761405 2026] [security2:error] [pid 11274:tid 11534] [client 93.123.109.228:51970] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/media/.env"] [unique_id "apK-hWbX5DA3XO6e_qRcIwAAAWM"]
[Sat Aug 29 05:12:05.767472 2026] [security2:error] [pid 11274:tid 11538] [client 158.23.184.117:7453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.antiquesweeknh.com"] [uri "/xmr.php"] [unique_id "apK-hWbX5DA3XO6e_qRcJQAAAWc"]
[Sat Aug 29 05:12:05.770458 2026] [security2:error] [pid 1321:tid 1522] [client 20.48.160.90:61576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/doo.php"] [unique_id "apK-hWjCPtor9NZ-byQF2wAABl4"]
[Sat Aug 29 05:12:05.773900 2026] [security2:error] [pid 1321:tid 1527] [client 20.151.200.44:23590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/kcs.php"] [unique_id "apK-hWjCPtor9NZ-byQF3AAABmM"]
[Sat Aug 29 05:12:05.774370 2026] [security2:error] [pid 11274:tid 11487] [client 158.23.184.117:31845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/002.php"] [unique_id "apK-hWbX5DA3XO6e_qRcJgAAATQ"]
[Sat Aug 29 05:12:05.782761 2026] [security2:error] [pid 11274:tid 11540] [client 68.155.159.216:43919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.theenprogroup.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-hWbX5DA3XO6e_qRcKAAAAWk"]
[Sat Aug 29 05:12:05.784105 2026] [security2:error] [pid 1321:tid 1596] [client 20.240.128.207:7283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK-hWjCPtor9NZ-byQF3wAABqc"]
[Sat Aug 29 05:12:05.790606 2026] [security2:error] [pid 1321:tid 1601] [client 20.48.250.41:42846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/ms.php"] [unique_id "apK-hWjCPtor9NZ-byQF4wAABqw"]
[Sat Aug 29 05:12:05.807726 2026] [security2:error] [pid 11274:tid 11558] [client 20.48.250.41:24508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/fetch.php"] [unique_id "apK-hWbX5DA3XO6e_qRcKgAAAXo"]
[Sat Aug 29 05:12:05.811495 2026] [security2:error] [pid 1321:tid 1508] [client 20.104.49.130:48777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/jp.php"] [unique_id "apK-hWjCPtor9NZ-byQF5wAABlA"]
[Sat Aug 29 05:12:05.818730 2026] [security2:error] [pid 11274:tid 11509] [client 158.23.184.117:19025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ladiesandbabies.com"] [uri "/.well-known/core.php"] [unique_id "apK-hWbX5DA3XO6e_qRcKwAAAUo"]
[Sat Aug 29 05:12:05.821307 2026] [security2:error] [pid 11274:tid 11554] [client 20.151.200.44:21898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/ww2.php"] [unique_id "apK-hWbX5DA3XO6e_qRcLAAAAXY"]
[Sat Aug 29 05:12:05.821586 2026] [security2:error] [pid 11274:tid 11527] [client 20.48.160.90:28761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/nz.php"] [unique_id "apK-hWbX5DA3XO6e_qRcLQAAAVw"]
[Sat Aug 29 05:12:05.826058 2026] [security2:error] [pid 11274:tid 11496] [client 158.23.147.79:7120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/.well-known/index.php"] [unique_id "apK-hWbX5DA3XO6e_qRcLgAAAT0"]
[Sat Aug 29 05:12:05.834735 2026] [security2:error] [pid 11274:tid 11461] [client 20.240.128.207:2070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK-hWbX5DA3XO6e_qRcLwAAARs"]
[Sat Aug 29 05:12:05.852164 2026] [security2:error] [pid 1321:tid 1567] [client 93.123.109.228:52018] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/new/.env"] [unique_id "apK-hWjCPtor9NZ-byQF6wAABoo"]
[Sat Aug 29 05:12:05.870541 2026] [security2:error] [pid 11274:tid 11449] [client 93.123.109.228:52076] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/node/.env"] [unique_id "apK-hWbX5DA3XO6e_qRcMgAAAQ8"]
[Sat Aug 29 05:12:05.887853 2026] [security2:error] [pid 11274:tid 11559] [client 93.123.109.228:51940] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/node-api/.env"] [unique_id "apK-hWbX5DA3XO6e_qRcNgAAAXs"]
[Sat Aug 29 05:12:05.897533 2026] [security2:error] [pid 11274:tid 11483] [client 93.123.109.228:43110] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/node/api/.env"] [unique_id "apK-hWbX5DA3XO6e_qRcOAAAATA"]
[Sat Aug 29 05:12:05.898709 2026] [security2:error] [pid 11274:tid 11470] [client 20.48.160.90:51999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/mad.php"] [unique_id "apK-hWbX5DA3XO6e_qRcOQAAASQ"]
[Sat Aug 29 05:12:05.902514 2026] [core:error] [pid 1321:tid 1582] [client 158.23.184.117:12391] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:05.902530 2026] [core:error] [pid 1321:tid 1582] [client 158.23.184.117:12391] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:05.910653 2026] [security2:error] [pid 11274:tid 11549] [client 20.52.41.200:5159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/yanz.php"] [unique_id "apK-hWbX5DA3XO6e_qRcPAAAAXE"]
[Sat Aug 29 05:12:05.913729 2026] [security2:error] [pid 11274:tid 11499] [client 158.158.54.35:14746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-content/packed.php"] [unique_id "apK-hWbX5DA3XO6e_qRcPQAAAUA"]
[Sat Aug 29 05:12:05.914942 2026] [security2:error] [pid 11274:tid 11464] [client 20.48.160.90:37881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/adminer-4.6.6.php"] [unique_id "apK-hWbX5DA3XO6e_qRcPgAAAR4"]
[Sat Aug 29 05:12:05.917617 2026] [security2:error] [pid 1321:tid 1607] [client 158.23.184.117:7889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.antiquesweeknh.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK-hWjCPtor9NZ-byQF-QAABrI"]
[Sat Aug 29 05:12:05.924463 2026] [security2:error] [pid 11274:tid 11551] [client 158.23.184.117:32408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/0x.php"] [unique_id "apK-hWbX5DA3XO6e_qRcQAAAAXM"]
[Sat Aug 29 05:12:05.924491 2026] [security2:error] [pid 11274:tid 11499] [client 93.123.109.228:52012] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/node/backend/.env"] [unique_id "apK-hWbX5DA3XO6e_qRcPwAAAUA"]
[Sat Aug 29 05:12:05.937531 2026] [security2:error] [pid 1321:tid 1608] [client 20.48.250.41:42818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/zxekqlxb.php"] [unique_id "apK-hWjCPtor9NZ-byQF-wAABrM"]
[Sat Aug 29 05:12:05.939013 2026] [security2:error] [pid 1321:tid 1566] [client 20.52.41.200:2855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/term.php"] [unique_id "apK-hWjCPtor9NZ-byQF_AAABok"]
[Sat Aug 29 05:12:05.939155 2026] [security2:error] [pid 1321:tid 1398] [remote 93.123.109.228:42940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/wp-config.php"] [unique_id "apK-hWjCPtor9NZ-byQF_QAGSSg"]
[Sat Aug 29 05:12:05.950453 2026] [security2:error] [pid 1321:tid 1592] [client 20.197.61.180:1145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/wp-admin.php"] [unique_id "apK-hWjCPtor9NZ-byQF_gAABqM"]
[Sat Aug 29 05:12:05.951537 2026] [security2:error] [pid 1321:tid 1486] [remote 93.123.109.228:42940] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/wp-config.php.bak"] [unique_id "apK-hWjCPtor9NZ-byQGAAAGSX8"]
[Sat Aug 29 05:12:05.953523 2026] [security2:error] [pid 11274:tid 11454] [client 93.123.109.228:52090] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/nodeapi/.env"] [unique_id "apK-hWbX5DA3XO6e_qRcRAAAARQ"]
[Sat Aug 29 05:12:05.953781 2026] [security2:error] [pid 1321:tid 1515] [client 20.151.200.44:55618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/ad1.php"] [unique_id "apK-hWjCPtor9NZ-byQGAQAABlc"]
[Sat Aug 29 05:12:05.959666 2026] [security2:error] [pid 1321:tid 1498] [client 93.123.109.228:51934] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/nodeweb/.env"] [unique_id "apK-hWjCPtor9NZ-byQGAgAABkY"]
[Sat Aug 29 05:12:05.964222 2026] [security2:error] [pid 1321:tid 1424] [remote 93.123.109.228:42940] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/wp-config.php.new"] [unique_id "apK-hWjCPtor9NZ-byQGAwAGSUI"]
[Sat Aug 29 05:12:05.967649 2026] [security2:error] [pid 11274:tid 11555] [client 158.158.54.35:1525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/alfa.php"] [unique_id "apK-hWbX5DA3XO6e_qRcSAAAAXc"]
[Sat Aug 29 05:12:05.969835 2026] [security2:error] [pid 11274:tid 11459] [client 20.48.250.41:24558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/vx.php"] [unique_id "apK-hWbX5DA3XO6e_qRcSgAAARk"]
[Sat Aug 29 05:12:05.973928 2026] [security2:error] [pid 1321:tid 1478] [remote 93.123.109.228:42940] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/wp-config.php.old"] [unique_id "apK-hWjCPtor9NZ-byQGBQAGSXc"]
[Sat Aug 29 05:12:05.978747 2026] [security2:error] [pid 1321:tid 1502] [client 20.100.175.163:17078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/aa.php"] [unique_id "apK-hWjCPtor9NZ-byQGBgAABko"]
[Sat Aug 29 05:12:05.980330 2026] [security2:error] [pid 11274:tid 11549] [client 158.23.184.117:19402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ladiesandbabies.com"] [uri "/.well-known/data.php"] [unique_id "apK-hWbX5DA3XO6e_qRcTQAAAXE"]
[Sat Aug 29 05:12:05.989670 2026] [security2:error] [pid 11274:tid 11536] [client 158.23.147.79:34783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/wp-content/languages/about.php"] [unique_id "apK-hWbX5DA3XO6e_qRcTwAAAWU"]
[Sat Aug 29 05:12:05.991146 2026] [security2:error] [pid 11274:tid 11529] [client 4.205.62.107:64204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/aww.php"] [unique_id "apK-hWbX5DA3XO6e_qRcUAAAAV4"]
[Sat Aug 29 05:12:05.994406 2026] [security2:error] [pid 11274:tid 11493] [client 20.48.160.90:50373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/sg.php"] [unique_id "apK-hWbX5DA3XO6e_qRcUQAAATo"]
[Sat Aug 29 05:12:06.003073 2026] [security2:error] [pid 11274:tid 11465] [client 20.220.204.93:52341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/h02ugyh.php"] [unique_id "apK-hmbX5DA3XO6e_qRcUgAAAR8"]
[Sat Aug 29 05:12:06.003522 2026] [security2:error] [pid 11274:tid 11516] [client 158.23.147.79:58103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/bk/index.php"] [unique_id "apK-hmbX5DA3XO6e_qRcUwAAAVE"]
[Sat Aug 29 05:12:06.008104 2026] [security2:error] [pid 11274:tid 11473] [client 20.151.200.44:27320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/ztv.php"] [unique_id "apK-hmbX5DA3XO6e_qRcVAAAASc"]
[Sat Aug 29 05:12:06.011885 2026] [security2:error] [pid 1321:tid 1565] [client 93.123.109.228:43078] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/old/.env"] [unique_id "apK-hmjCPtor9NZ-byQGCQAABog"]
[Sat Aug 29 05:12:06.023902 2026] [security2:error] [pid 11274:tid 11480] [client 93.123.109.228:52126] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/opt/.env"] [unique_id "apK-hmbX5DA3XO6e_qRcVwAAAS0"]
[Sat Aug 29 05:12:06.029670 2026] [security2:error] [pid 11274:tid 11572] [client 20.48.160.90:52092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/st.php"] [unique_id "apK-hmbX5DA3XO6e_qRcWgAAAYg"]
[Sat Aug 29 05:12:06.047569 2026] [security2:error] [pid 11274:tid 11535] [client 158.23.184.117:12365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.robertthomsonpiper.strangeworx.com"] [uri "/wp-admin/about.php"] [unique_id "apK-hmbX5DA3XO6e_qRcWwAAAWQ"]
[Sat Aug 29 05:12:06.052038 2026] [security2:error] [pid 1321:tid 1610] [client 45.148.10.62:52424] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "skycoatingsports.com"] [uri "/.env"] [unique_id "apK-hmjCPtor9NZ-byQGEQAABrU"]
[Sat Aug 29 05:12:06.063720 2026] [security2:error] [pid 11274:tid 11495] [client 20.48.160.90:37852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/gelap1.php"] [unique_id "apK-hmbX5DA3XO6e_qRcYAAAATw"]
[Sat Aug 29 05:12:06.068497 2026] [security2:error] [pid 11274:tid 11569] [client 158.23.184.117:31816] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "www.mclement.tdes64.com"] [uri "/1.php"] [unique_id "apK-hmbX5DA3XO6e_qRcYQAAAYU"]
[Sat Aug 29 05:12:06.068614 2026] [security2:error] [pid 11274:tid 11569] [client 158.23.184.117:31816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/1.php"] [unique_id "apK-hmbX5DA3XO6e_qRcYQAAAYU"]
[Sat Aug 29 05:12:06.082608 2026] [security2:error] [pid 1321:tid 1612] [client 20.48.250.41:43007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/init.php"] [unique_id "apK-hmjCPtor9NZ-byQGEgAABrc"]
[Sat Aug 29 05:12:06.113077 2026] [security2:error] [pid 1321:tid 1599] [client 68.155.159.216:43918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/chosen.php"] [unique_id "apK-hmjCPtor9NZ-byQGEwAABqo"]
[Sat Aug 29 05:12:06.124653 2026] [security2:error] [pid 1321:tid 1517] [client 158.23.184.117:61665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ladiesandbabies.com"] [uri "/.well-known/db-status.php"] [unique_id "apK-hmjCPtor9NZ-byQGFAAABlk"]
[Sat Aug 29 05:12:06.127888 2026] [security2:error] [pid 1321:tid 1491] [client 158.23.184.117:7391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.antiquesweeknh.com"] [uri "/wp-act.php"] [unique_id "apK-hmjCPtor9NZ-byQGFQAABj8"]
[Sat Aug 29 05:12:06.137202 2026] [security2:error] [pid 1321:tid 1604] [client 4.205.62.107:60557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/session.php"] [unique_id "apK-hmjCPtor9NZ-byQGFgAABq8"]
[Sat Aug 29 05:12:06.139472 2026] [security2:error] [pid 11274:tid 11513] [client 20.220.204.93:52248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/xxw.php"] [unique_id "apK-hmbX5DA3XO6e_qRcZgAAAU4"]
[Sat Aug 29 05:12:06.151246 2026] [security2:error] [pid 11274:tid 11539] [client 40.83.93.50:4015] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/1.php7"] [unique_id "apK-hmbX5DA3XO6e_qRcZwAAAWg"]
[Sat Aug 29 05:12:06.151375 2026] [security2:error] [pid 11274:tid 11539] [client 40.83.93.50:4015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/1.php7"] [unique_id "apK-hmbX5DA3XO6e_qRcZwAAAWg"]
[Sat Aug 29 05:12:06.171508 2026] [security2:error] [pid 11274:tid 11490] [client 20.48.250.41:24468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/global.php"] [unique_id "apK-hmbX5DA3XO6e_qRcbAAAATc"]
[Sat Aug 29 05:12:06.182265 2026] [security2:error] [pid 11274:tid 11521] [client 93.123.109.228:42954] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/ADMIN/.env"] [unique_id "apK-hmbX5DA3XO6e_qRcbQAAAVY"]
[Sat Aug 29 05:12:06.193070 2026] [security2:error] [pid 11274:tid 11500] [client 158.23.184.117:13038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.robertthomsonpiper.strangeworx.com"] [uri "/wp-content/backup.php"] [unique_id "apK-hmbX5DA3XO6e_qRcbgAAAUE"]
[Sat Aug 29 05:12:06.202926 2026] [security2:error] [pid 11274:tid 11524] [client 4.205.62.107:6870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/fns.php"] [unique_id "apK-hmbX5DA3XO6e_qRccQAAAVk"]
[Sat Aug 29 05:12:06.206792 2026] [security2:error] [pid 11274:tid 11479] [client 20.151.200.44:63760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/anz.php"] [unique_id "apK-hmbX5DA3XO6e_qRcdAAAASw"]
[Sat Aug 29 05:12:06.207540 2026] [security2:error] [pid 1321:tid 1577] [client 45.148.10.62:52414] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.zvi.buu.mybluehost.me"] [uri "/backend/.env"] [unique_id "apK-hmjCPtor9NZ-byQGGwAABpQ"]
[Sat Aug 29 05:12:06.209252 2026] [http2:warn] [pid 11274:tid 11528] [client 57.141.14.24:27110] h2_stream(11274-92-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:12:06.215688 2026] [security2:error] [pid 11274:tid 11466] [client 158.23.184.117:31808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/10.php"] [unique_id "apK-hmbX5DA3XO6e_qRcdgAAASA"]
[Sat Aug 29 05:12:06.216126 2026] [security2:error] [pid 1321:tid 1584] [client 93.123.109.228:42962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/.wp-config.php.swp"] [unique_id "apK-hmjCPtor9NZ-byQGHAAABps"]
[Sat Aug 29 05:12:06.230511 2026] [security2:error] [pid 11274:tid 11549] [client 93.123.109.228:43014] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/API/.env"] [unique_id "apK-hmbX5DA3XO6e_qRcdwAAAXE"]
[Sat Aug 29 05:12:06.231200 2026] [security2:error] [pid 11274:tid 11536] [client 158.23.147.79:49846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK-hmbX5DA3XO6e_qRceAAAAWU"]
[Sat Aug 29 05:12:06.240651 2026] [security2:error] [pid 11274:tid 11493] [client 4.205.62.107:60957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/ms-edit.php"] [unique_id "apK-hmbX5DA3XO6e_qRcfwAAATo"]
[Sat Aug 29 05:12:06.251470 2026] [security2:error] [pid 11274:tid 11473] [client 93.123.109.228:43280] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK-hmbX5DA3XO6e_qRcgQAAASc"]
[Sat Aug 29 05:12:06.268207 2026] [security2:error] [pid 11274:tid 11538] [client 68.155.159.216:14170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/x.php"] [unique_id "apK-hmbX5DA3XO6e_qRciAAAAWc"]
[Sat Aug 29 05:12:06.270923 2026] [security2:error] [pid 11274:tid 11541] [client 158.23.184.117:61649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ladiesandbabies.com"] [uri "/.well-known/f35.php"] [unique_id "apK-hmbX5DA3XO6e_qRciQAAAWo"]
[Sat Aug 29 05:12:06.280381 2026] [security2:error] [pid 11274:tid 11450] [client 93.123.109.228:43346] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK-hmbX5DA3XO6e_qRcjAAAARA"]
[Sat Aug 29 05:12:06.282731 2026] [security2:error] [pid 11274:tid 11552] [client 20.240.128.207:21880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/css/index.php"] [unique_id "apK-hmbX5DA3XO6e_qRcjwAAAXQ"]
[Sat Aug 29 05:12:06.282731 2026] [security2:error] [pid 1321:tid 1613] [client 158.23.184.117:7371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.antiquesweeknh.com"] [uri "/fff.php"] [unique_id "apK-hmjCPtor9NZ-byQGIgAABrg"]
[Sat Aug 29 05:12:06.293074 2026] [security2:error] [pid 1321:tid 1595] [client 20.48.250.41:42858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/term.php"] [unique_id "apK-hmjCPtor9NZ-byQGJAAABqY"]
[Sat Aug 29 05:12:06.300130 2026] [security2:error] [pid 1321:tid 1514] [client 20.151.200.44:23588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/wsz.php"] [unique_id "apK-hmjCPtor9NZ-byQGJQAABlY"]
[Sat Aug 29 05:12:06.300730 2026] [security2:error] [pid 11274:tid 11511] [client 158.23.147.79:43284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/install.php"] [unique_id "apK-hmbX5DA3XO6e_qRckgAAAUw"]
[Sat Aug 29 05:12:06.311365 2026] [security2:error] [pid 11274:tid 11449] [client 20.220.204.93:59011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/bolt.php"] [unique_id "apK-hmbX5DA3XO6e_qRckwAAAQ8"]
[Sat Aug 29 05:12:06.331125 2026] [http2:warn] [pid 1018003:tid 1018159] [client 74.7.241.38:56118] h2_stream(1018003-350-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:12:06.331150 2026] [http2:warn] [pid 1018003:tid 1018159] [client 74.7.241.38:56118] h2_stream(1018003-350-3,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:12:06.339652 2026] [security2:error] [pid 11274:tid 11553] [client 158.23.184.117:12429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.robertthomsonpiper.strangeworx.com"] [uri "/.well-known/aa.php"] [unique_id "apK-hmbX5DA3XO6e_qRclwAAAXU"]
[Sat Aug 29 05:12:06.345816 2026] [security2:error] [pid 1321:tid 1531] [client 93.123.109.228:43364] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(\\\\/\\\\*\\\\!? ?(?:select|grant|delete|insert|drop|alter|replace|truncate|update|create|rename|describe|union|concat|group_concat))" at REQUEST_FILENAME. [file "/opt/mod_security/hg_rules.conf"] [line "1019"] [id "9000042"] [rev "2.2.2"] [msg "SQL Comment Sequence Detected."] [data "/*update"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/*update.cgi*"] [unique_id "apK-hmjCPtor9NZ-byQGJwAABmc"]
[Sat Aug 29 05:12:06.354603 2026] [security2:error] [pid 1321:tid 1500] [client 40.83.93.50:13975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/go.php"] [unique_id "apK-hmjCPtor9NZ-byQGKgAABkg"]
[Sat Aug 29 05:12:06.358207 2026] [security2:error] [pid 1321:tid 1518] [client 45.148.10.62:52414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zvi.buu.mybluehost.me"] [uri "/test.php"] [unique_id "apK-hmjCPtor9NZ-byQGLAAABlo"]
[Sat Aug 29 05:12:06.359320 2026] [security2:error] [pid 1321:tid 1560] [client 93.123.109.228:42934] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/APP/.env"] [unique_id "apK-hmjCPtor9NZ-byQGKwAABoM"]
[Sat Aug 29 05:12:06.361056 2026] [security2:error] [pid 11274:tid 11500] [client 20.104.49.130:60987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/jp.php"] [unique_id "apK-hmbX5DA3XO6e_qRcnAAAAUE"]
[Sat Aug 29 05:12:06.366016 2026] [security2:error] [pid 11274:tid 11513] [client 158.23.184.117:31859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/100.php"] [unique_id "apK-hmbX5DA3XO6e_qRcngAAAU4"]
[Sat Aug 29 05:12:06.366510 2026] [security2:error] [pid 1321:tid 1606] [client 93.123.109.228:42914] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/Api/.env"] [unique_id "apK-hmjCPtor9NZ-byQGLQAABrE"]
[Sat Aug 29 05:12:06.378501 2026] [security2:error] [pid 11274:tid 11563] [client 20.52.41.200:4360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/autoload_classmap.php"] [unique_id "apK-hmbX5DA3XO6e_qRcoAAAAX8"]
[Sat Aug 29 05:12:06.380442 2026] [security2:error] [pid 1321:tid 1582] [client 4.205.62.107:59092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/wp-konfig.php"] [unique_id "apK-hmjCPtor9NZ-byQGLwAABpk"]
[Sat Aug 29 05:12:06.392616 2026] [security2:error] [pid 1321:tid 1608] [client 20.151.200.44:21949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/bge.php"] [unique_id "apK-hmjCPtor9NZ-byQGMAAABrM"]
[Sat Aug 29 05:12:06.397013 2026] [security2:error] [pid 11274:tid 11514] [client 93.123.109.228:52012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/php-info.php"] [unique_id "apK-hmbX5DA3XO6e_qRcqQAAAU8"]
[Sat Aug 29 05:12:06.400114 2026] [security2:error] [pid 11274:tid 11549] [client 93.123.109.228:43014] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/BACKEND/.env"] [unique_id "apK-hmbX5DA3XO6e_qRcqgAAAXE"]
[Sat Aug 29 05:12:06.402640 2026] [cgid:error] [pid 1321:tid 1566] [client 45.148.10.62:52424] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/skycoati/public_html/404.shtml
[Sat Aug 29 05:12:06.404527 2026] [security2:error] [pid 11274:tid 11489] [client 93.123.109.228:42880] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/BE/.env"] [unique_id "apK-hmbX5DA3XO6e_qRcrAAAATY"]
[Sat Aug 29 05:12:06.404573 2026] [security2:error] [pid 11274:tid 11543] [client 20.52.41.200:2640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/config.php"] [unique_id "apK-hmbX5DA3XO6e_qRcrQAAAWs"]
[Sat Aug 29 05:12:06.409731 2026] [security2:error] [pid 1321:tid 1507] [client 93.123.109.228:43078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/php.php"] [unique_id "apK-hmjCPtor9NZ-byQGMgAABk8"]
[Sat Aug 29 05:12:06.413507 2026] [security2:error] [pid 11274:tid 11465] [client 93.123.109.228:52076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/php_info.php"] [unique_id "apK-hmbX5DA3XO6e_qRcrwAAAR8"]
[Sat Aug 29 05:12:06.414898 2026] [security2:error] [pid 11274:tid 11535] [client 158.158.54.35:35458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/403.php"] [unique_id "apK-hmbX5DA3XO6e_qRcsAAAAWQ"]
[Sat Aug 29 05:12:06.415179 2026] [security2:error] [pid 1321:tid 1507] [client 93.123.109.228:43434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/.docker/.env"] [unique_id "apK-hmjCPtor9NZ-byQGMwAABk8"]
[Sat Aug 29 05:12:06.417711 2026] [security2:error] [pid 11274:tid 11524] [client 158.23.184.117:61655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ladiesandbabies.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK-hmbX5DA3XO6e_qRcsQAAAVk"]
[Sat Aug 29 05:12:06.419724 2026] [security2:error] [pid 11274:tid 11480] [client 158.158.54.35:5951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-admin/js/index.php"] [unique_id "apK-hmbX5DA3XO6e_qRcsgAAAS0"]
[Sat Aug 29 05:12:06.429115 2026] [security2:error] [pid 11274:tid 11466] [client 158.23.184.117:7444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.antiquesweeknh.com"] [uri "/.tmb/dropdown.php"] [unique_id "apK-hmbX5DA3XO6e_qRctQAAASA"]
[Sat Aug 29 05:12:06.433057 2026] [security2:error] [pid 11274:tid 11570] [client 45.148.10.62:52438] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "skycoatingsports.com"] [uri "/.env"] [unique_id "apK-hmbX5DA3XO6e_qRctwAAAYY"]
[Sat Aug 29 05:12:06.440576 2026] [security2:error] [pid 11274:tid 11485] [client 93.123.109.228:43028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/BACK/.env"] [unique_id "apK-hmbX5DA3XO6e_qRcuQAAATI"]
[Sat Aug 29 05:12:06.446907 2026] [security2:error] [pid 11274:tid 11526] [client 20.220.204.93:52277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/rtx.php"] [unique_id "apK-hmbX5DA3XO6e_qRcuwAAAVs"]
[Sat Aug 29 05:12:06.448478 2026] [security2:error] [pid 1321:tid 1515] [client 93.123.109.228:51934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/phpinfo.php"] [unique_id "apK-hmjCPtor9NZ-byQGNAAABlc"]
[Sat Aug 29 05:12:06.453189 2026] [security2:error] [pid 1321:tid 1498] [client 93.123.109.228:43300] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/.docker/laravel/app/.env"] [unique_id "apK-hmjCPtor9NZ-byQGNQAABkY"]
[Sat Aug 29 05:12:06.456132 2026] [security2:error] [pid 1321:tid 1499] [client 20.100.175.163:27404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/c.php"] [unique_id "apK-hmjCPtor9NZ-byQGNgAABkc"]
[Sat Aug 29 05:12:06.456979 2026] [security2:error] [pid 11274:tid 11452] [client 68.155.159.216:61256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK-hmbX5DA3XO6e_qRcvgAAARI"]
[Sat Aug 29 05:12:06.458673 2026] [security2:error] [pid 11274:tid 11452] [client 68.155.159.216:55061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.angelesforestranch.com"] [uri "/goods.php"] [unique_id "apK-hmbX5DA3XO6e_qRcvwAAARI"]
[Sat Aug 29 05:12:06.466413 2026] [security2:error] [pid 1321:tid 1555] [client 68.155.159.216:56726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK-hmjCPtor9NZ-byQGNwAABn4"]
[Sat Aug 29 05:12:06.486848 2026] [security2:error] [pid 11274:tid 11538] [client 93.123.109.228:43104] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/Backend/.env"] [unique_id "apK-hmbX5DA3XO6e_qRcwwAAAWc"]
[Sat Aug 29 05:12:06.496751 2026] [security2:error] [pid 1321:tid 1565] [client 20.104.49.130:63564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/cilus.php"] [unique_id "apK-hmjCPtor9NZ-byQGOQAABog"]
[Sat Aug 29 05:12:06.510034 2026] [security2:error] [pid 1321:tid 1576] [client 93.123.109.228:43376] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK-hmjCPtor9NZ-byQGOgAABpM"]
[Sat Aug 29 05:12:06.511094 2026] [security2:error] [pid 11274:tid 11554] [client 158.23.184.117:31798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/2.php"] [unique_id "apK-hmbX5DA3XO6e_qRcxwAAAXY"]
[Sat Aug 29 05:12:06.520464 2026] [security2:error] [pid 11274:tid 11454] [client 158.23.184.117:12356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.robertthomsonpiper.strangeworx.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "apK-hmbX5DA3XO6e_qRcyQAAARQ"]
[Sat Aug 29 05:12:06.529058 2026] [security2:error] [pid 11274:tid 11456] [client 103.185.242.143:64792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-hmbX5DA3XO6e_qRczQAAARY"]
[Sat Aug 29 05:12:06.529156 2026] [security2:error] [pid 11274:tid 11456] [client 103.185.242.143:64792] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-hmbX5DA3XO6e_qRczQAAARY"]
[Sat Aug 29 05:12:06.539540 2026] [security2:error] [pid 11274:tid 11475] [client 52.139.37.240:14504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/wp-content/155.php"] [unique_id "apK-hmbX5DA3XO6e_qRczgAAASk"]
[Sat Aug 29 05:12:06.541788 2026] [security2:error] [pid 1321:tid 1610] [client 93.123.109.228:42914] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/Be/.env"] [unique_id "apK-hmjCPtor9NZ-byQGPQAABrU"]
[Sat Aug 29 05:12:06.547196 2026] [security2:error] [pid 11274:tid 11449] [client 93.123.109.228:43316] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/.env.backup"] [unique_id "apK-hmbX5DA3XO6e_qRc0AAAAQ8"]
[Sat Aug 29 05:12:06.548883 2026] [security2:error] [pid 11274:tid 11539] [client 93.123.109.228:52126] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/portal/.env"] [unique_id "apK-hmbX5DA3XO6e_qRc0QAAAWg"]
[Sat Aug 29 05:12:06.563493 2026] [security2:error] [pid 11274:tid 11450] [client 158.23.184.117:19454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ladiesandbabies.com"] [uri "/.well-known/home.php"] [unique_id "apK-hmbX5DA3XO6e_qRc1AAAARA"]
[Sat Aug 29 05:12:06.575624 2026] [security2:error] [pid 11274:tid 11511] [client 158.23.184.117:7403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.antiquesweeknh.com"] [uri "/robots.php"] [unique_id "apK-hmbX5DA3XO6e_qRc2AAAAUw"]
[Sat Aug 29 05:12:06.578977 2026] [fcgid:warn] [pid 11274:tid 11555] (70014)End of file found: [client 199.45.154.112:52782] mod_fcgid: can't get data from http client
[Sat Aug 29 05:12:06.579447 2026] [http2:warn] [pid 1041789:tid 1042052] [client 74.7.241.38:37586] h2_stream(1041789-251-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:12:06.579470 2026] [http2:warn] [pid 1041789:tid 1042052] [client 74.7.241.38:37586] h2_stream(1041789-251-3,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:12:06.582657 2026] [security2:error] [pid 1321:tid 1547] [client 93.123.109.228:43434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/.env.bak"] [unique_id "apK-hmjCPtor9NZ-byQGQQAABnY"]
[Sat Aug 29 05:12:06.592340 2026] [security2:error] [pid 11274:tid 11545] [client 20.104.18.15:29180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/atomlib.php"] [unique_id "apK-hmbX5DA3XO6e_qRc3gAAAW0"]
[Sat Aug 29 05:12:06.599312 2026] [security2:error] [pid 1321:tid 1501] [client 20.104.104.62:48068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-hmjCPtor9NZ-byQGQwAABkk"]
[Sat Aug 29 05:12:06.619449 2026] [security2:error] [pid 1321:tid 1604] [client 158.23.147.79:55892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK-hmjCPtor9NZ-byQGRQAABq8"]
[Sat Aug 29 05:12:06.624012 2026] [security2:error] [pid 1321:tid 1502] [client 40.83.93.50:3756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/ds.php"] [unique_id "apK-hmjCPtor9NZ-byQGRgAABko"]
[Sat Aug 29 05:12:06.646483 2026] [security2:error] [pid 11274:tid 11549] [client 20.104.49.130:43804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/memberfuns.php"] [unique_id "apK-hmbX5DA3XO6e_qRc5gAAAXE"]
[Sat Aug 29 05:12:06.659548 2026] [security2:error] [pid 1321:tid 1599] [client 158.23.184.117:31844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/222.php"] [unique_id "apK-hmjCPtor9NZ-byQGRwAABqo"]
[Sat Aug 29 05:12:06.667518 2026] [security2:error] [pid 11274:tid 11465] [client 20.151.200.44:55645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/1vbqo.php"] [unique_id "apK-hmbX5DA3XO6e_qRc6gAAAR8"]
[Sat Aug 29 05:12:06.668906 2026] [security2:error] [pid 1321:tid 1549] [client 158.23.184.117:12615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.robertthomsonpiper.strangeworx.com"] [uri "/wp-content/plugins/alfa-rex.php"] [unique_id "apK-hmjCPtor9NZ-byQGSgAABng"]
[Sat Aug 29 05:12:06.676519 2026] [security2:error] [pid 11274:tid 11468] [client 20.197.61.180:1974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/wp-configs.php"] [unique_id "apK-hmbX5DA3XO6e_qRc7AAAASI"]
[Sat Aug 29 05:12:06.686027 2026] [security2:error] [pid 11274:tid 11472] [client 158.23.147.79:52349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK-hmbX5DA3XO6e_qRc8QAAASY"]
[Sat Aug 29 05:12:06.692693 2026] [security2:error] [pid 11274:tid 11493] [client 20.104.18.15:29692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/nano.php"] [unique_id "apK-hmbX5DA3XO6e_qRc8wAAATo"]
[Sat Aug 29 05:12:06.705620 2026] [security2:error] [pid 1321:tid 1526] [client 68.155.159.216:49123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/wp-content/cong.php"] [unique_id "apK-hmjCPtor9NZ-byQGTAAABmI"]
[Sat Aug 29 05:12:06.709935 2026] [security2:error] [pid 11274:tid 11543] [client 158.23.184.117:19038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ladiesandbabies.com"] [uri "/.well-known/index.php"] [unique_id "apK-hmbX5DA3XO6e_qRc9wAAAWs"]
[Sat Aug 29 05:12:06.710973 2026] [security2:error] [pid 11274:tid 11526] [client 93.123.109.228:43426] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/.env.old"] [unique_id "apK-hmbX5DA3XO6e_qRc9gAAAVs"]
[Sat Aug 29 05:12:06.720562 2026] [security2:error] [pid 11274:tid 11527] [client 20.240.128.207:3030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-load.php"] [unique_id "apK-hmbX5DA3XO6e_qRc-gAAAVw"]
[Sat Aug 29 05:12:06.723155 2026] [security2:error] [pid 11274:tid 11520] [client 93.123.109.228:43110] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/prod/.env"] [unique_id "apK-hmbX5DA3XO6e_qRc-wAAAVU"]
[Sat Aug 29 05:12:06.725877 2026] [security2:error] [pid 11274:tid 11530] [client 20.104.18.15:29140] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/1.php"] [unique_id "apK-hmbX5DA3XO6e_qRc_QAAAV8"]
[Sat Aug 29 05:12:06.725967 2026] [security2:error] [pid 11274:tid 11530] [client 20.104.18.15:29140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/1.php"] [unique_id "apK-hmbX5DA3XO6e_qRc_QAAAV8"]
[Sat Aug 29 05:12:06.726836 2026] [security2:error] [pid 11274:tid 11444] [client 4.205.62.107:60297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/packed.php"] [unique_id "apK-hmbX5DA3XO6e_qRc_gAAAQo"]
[Sat Aug 29 05:12:06.728476 2026] [security2:error] [pid 1321:tid 1584] [client 93.123.109.228:43390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/.env.php"] [unique_id "apK-hmjCPtor9NZ-byQGTQAABps"]
[Sat Aug 29 05:12:06.735762 2026] [security2:error] [pid 11274:tid 11535] [client 158.23.184.117:60309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.antiquesweeknh.com"] [uri "/.well-known/install.php"] [unique_id "apK-hmbX5DA3XO6e_qRdAAAAAWQ"]
[Sat Aug 29 05:12:06.736101 2026] [security2:error] [pid 1321:tid 1550] [client 20.220.204.93:50696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/ckk.php"] [unique_id "apK-hmjCPtor9NZ-byQGTwAABnk"]
[Sat Aug 29 05:12:06.737895 2026] [security2:error] [pid 11274:tid 11487] [client 4.205.62.107:63418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-hmbX5DA3XO6e_qRdAgAAATQ"]
[Sat Aug 29 05:12:06.737943 2026] [security2:error] [pid 11274:tid 11505] [client 52.139.37.240:14497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/wp-update.php"] [unique_id "apK-hmbX5DA3XO6e_qRdBAAAAUY"]
[Sat Aug 29 05:12:06.738504 2026] [security2:error] [pid 11274:tid 11464] [client 93.123.109.228:52126] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/public-api/.env"] [unique_id "apK-hmbX5DA3XO6e_qRdAQAAAR4"]
[Sat Aug 29 05:12:06.742869 2026] [security2:error] [pid 11274:tid 11387] [remote 93.123.109.228:33242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/.env.php"] [unique_id "apK-hmbX5DA3XO6e_qRdBQABR0k"]
[Sat Aug 29 05:12:06.746086 2026] [security2:error] [pid 11274:tid 11521] [client 20.104.104.62:48079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-hmbX5DA3XO6e_qRdBwAAAVY"]
[Sat Aug 29 05:12:06.762658 2026] [security2:error] [pid 11274:tid 11454] [client 68.155.159.216:64052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/about.php"] [unique_id "apK-hmbX5DA3XO6e_qRdCQAAARQ"]
[Sat Aug 29 05:12:06.773660 2026] [security2:error] [pid 11274:tid 11509] [client 68.155.159.216:23548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK-hmbX5DA3XO6e_qRdDAAAAUo"]
[Sat Aug 29 05:12:06.788528 2026] [security2:error] [pid 11274:tid 11498] [client 93.123.109.228:51954] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/production/.env"] [unique_id "apK-hmbX5DA3XO6e_qRdEQAAAT8"]
[Sat Aug 29 05:12:06.802503 2026] [security2:error] [pid 11274:tid 11449] [client 93.123.109.228:43232] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/project/.env"] [unique_id "apK-hmbX5DA3XO6e_qRdFAAAAQ8"]
[Sat Aug 29 05:12:06.805797 2026] [security2:error] [pid 11274:tid 11541] [client 158.23.184.117:32398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/24.php"] [unique_id "apK-hmbX5DA3XO6e_qRdFgAAAWo"]
[Sat Aug 29 05:12:06.808479 2026] [security2:error] [pid 11274:tid 11504] [client 20.240.128.207:10770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-cron.php"] [unique_id "apK-hmbX5DA3XO6e_qRdGAAAAUU"]
[Sat Aug 29 05:12:06.810196 2026] [security2:error] [pid 11274:tid 11500] [client 20.151.200.44:62190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/msy.php"] [unique_id "apK-hmbX5DA3XO6e_qRdGQAAAUE"]
[Sat Aug 29 05:12:06.813167 2026] [security2:error] [pid 11274:tid 11511] [client 93.123.109.228:43230] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/product/.env"] [unique_id "apK-hmbX5DA3XO6e_qRdGgAAAUw"]
[Sat Aug 29 05:12:06.818092 2026] [core:error] [pid 1321:tid 1495] [client 158.23.184.117:12411] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:06.818109 2026] [core:error] [pid 1321:tid 1495] [client 158.23.184.117:12411] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:06.820308 2026] [security2:error] [pid 11274:tid 11555] [client 20.104.49.130:53663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/menu.php"] [unique_id "apK-hmbX5DA3XO6e_qRdHAAAAXc"]
[Sat Aug 29 05:12:06.822731 2026] [security2:error] [pid 1321:tid 1595] [client 20.151.200.44:27145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/kure.php"] [unique_id "apK-hmjCPtor9NZ-byQGVgAABqY"]
[Sat Aug 29 05:12:06.823996 2026] [security2:error] [pid 11274:tid 11545] [client 93.123.109.228:43216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/public/phpinfo.php"] [unique_id "apK-hmbX5DA3XO6e_qRdHQAAAW0"]
[Sat Aug 29 05:12:06.826847 2026] [security2:error] [pid 1321:tid 1508] [client 93.123.109.228:43376] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/.env.swp"] [unique_id "apK-hmjCPtor9NZ-byQGVwAABlA"]
[Sat Aug 29 05:12:06.827228 2026] [security2:error] [pid 1321:tid 1514] [client 158.23.147.79:14240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK-hmjCPtor9NZ-byQGWAAABlY"]
[Sat Aug 29 05:12:06.827651 2026] [security2:error] [pid 11274:tid 11513] [client 20.104.18.15:29072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/ano.php"] [unique_id "apK-hmbX5DA3XO6e_qRdHwAAAU4"]
[Sat Aug 29 05:12:06.835440 2026] [security2:error] [pid 11274:tid 11480] [client 20.52.41.200:5124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/bi.php"] [unique_id "apK-hmbX5DA3XO6e_qRdIgAAAS0"]
[Sat Aug 29 05:12:06.847536 2026] [security2:error] [pid 11274:tid 11502] [client 93.123.109.228:43192] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/public_html/.env"] [unique_id "apK-hmbX5DA3XO6e_qRdJAAAAUM"]
[Sat Aug 29 05:12:06.848954 2026] [security2:error] [pid 11274:tid 11485] [client 158.158.54.35:5073] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "dev.charlottevazquez.com"] [uri "/1.php"] [unique_id "apK-hmbX5DA3XO6e_qRdJgAAATI"]
[Sat Aug 29 05:12:06.849082 2026] [security2:error] [pid 11274:tid 11485] [client 158.158.54.35:5073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/1.php"] [unique_id "apK-hmbX5DA3XO6e_qRdJgAAATI"]
[Sat Aug 29 05:12:06.849224 2026] [security2:error] [pid 1321:tid 1560] [client 93.123.109.228:43400] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/.env~"] [unique_id "apK-hmjCPtor9NZ-byQGXAAABoM"]
[Sat Aug 29 05:12:06.850428 2026] [security2:error] [pid 11274:tid 11519] [client 20.52.41.200:2681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK-hmbX5DA3XO6e_qRdJwAAAVQ"]
[Sat Aug 29 05:12:06.854856 2026] [security2:error] [pid 11274:tid 11467] [client 93.123.109.228:43182] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/public/.env"] [unique_id "apK-hmbX5DA3XO6e_qRdKgAAASE"]
[Sat Aug 29 05:12:06.854906 2026] [security2:error] [pid 11274:tid 11503] [client 158.23.184.117:19449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ladiesandbabies.com"] [uri "/.well-known/login.php"] [unique_id "apK-hmbX5DA3XO6e_qRdLAAAAUQ"]
[Sat Aug 29 05:12:06.855949 2026] [security2:error] [pid 1321:tid 1523] [client 93.123.109.228:43248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/qa/.env"] [unique_id "apK-hmjCPtor9NZ-byQGXQAABl8"]
[Sat Aug 29 05:12:06.857891 2026] [security2:error] [pid 11274:tid 11560] [client 40.83.93.50:12734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/gecko-new.php"] [unique_id "apK-hmbX5DA3XO6e_qRdLwAAAXw"]
[Sat Aug 29 05:12:06.859265 2026] [security2:error] [pid 11274:tid 11477] [client 4.205.62.107:6135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/aws_config.php"] [unique_id "apK-hmbX5DA3XO6e_qRdMQAAASs"]
[Sat Aug 29 05:12:06.860689 2026] [security2:error] [pid 11274:tid 11508] [client 158.23.147.79:63280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK-hmbX5DA3XO6e_qRdMgAAAUk"]
[Sat Aug 29 05:12:06.866558 2026] [security2:error] [pid 11274:tid 11452] [client 158.158.54.35:19337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/core.php"] [unique_id "apK-hmbX5DA3XO6e_qRdNAAAARI"]
[Sat Aug 29 05:12:06.882788 2026] [security2:error] [pid 11274:tid 11569] [client 216.51.171.83:57990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 83.171.51.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-hmbX5DA3XO6e_qRdNQAAAYU"]
[Sat Aug 29 05:12:06.882949 2026] [security2:error] [pid 11274:tid 11569] [client 216.51.171.83:57990] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-hmbX5DA3XO6e_qRdNQAAAYU"]
[Sat Aug 29 05:12:06.892300 2026] [security2:error] [pid 1321:tid 1510] [client 20.151.200.44:63741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/wp-ana.php"] [unique_id "apK-hmjCPtor9NZ-byQGXwAABlI"]
[Sat Aug 29 05:12:06.893817 2026] [security2:error] [pid 11274:tid 11520] [client 20.104.104.62:48102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/baee.php"] [unique_id "apK-hmbX5DA3XO6e_qRdPgAAAVU"]
[Sat Aug 29 05:12:06.900113 2026] [security2:error] [pid 1321:tid 1566] [client 20.220.204.93:52345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "presentingyourhome.dgdevelco.com"] [uri "/R57.php"] [unique_id "apK-hmjCPtor9NZ-byQGYAAABok"]
[Sat Aug 29 05:12:06.922564 2026] [security2:error] [pid 11274:tid 11552] [client 68.155.159.216:56713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-admin/admin.php"] [unique_id "apK-hmbX5DA3XO6e_qRdRQAAAXQ"]
[Sat Aug 29 05:12:06.935244 2026] [security2:error] [pid 1321:tid 1606] [client 52.139.37.240:14503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/xmrlpc.php"] [unique_id "apK-hmjCPtor9NZ-byQGYwAABrE"]
[Sat Aug 29 05:12:06.936668 2026] [security2:error] [pid 11274:tid 11476] [client 158.23.184.117:7373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.antiquesweeknh.com"] [uri "/wp-admin/about.php"] [unique_id "apK-hmbX5DA3XO6e_qRdSQAAASo"]
[Sat Aug 29 05:12:06.937143 2026] [security2:error] [pid 11274:tid 11466] [client 158.23.147.79:7105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/wp-content/themes/too.php"] [unique_id "apK-hmbX5DA3XO6e_qRdSgAAASA"]
[Sat Aug 29 05:12:06.938011 2026] [security2:error] [pid 11274:tid 11571] [client 20.100.175.163:15723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/f.php"] [unique_id "apK-hmbX5DA3XO6e_qRdSwAAAYc"]
[Sat Aug 29 05:12:06.961301 2026] [security2:error] [pid 11274:tid 11551] [client 20.151.200.44:63580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/siln.php"] [unique_id "apK-hmbX5DA3XO6e_qRdUAAAAXM"]
[Sat Aug 29 05:12:06.961597 2026] [security2:error] [pid 11274:tid 11505] [client 158.23.184.117:32405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mclement.tdes64.com"] [uri "/3pjcpmfsd8b.php"] [unique_id "apK-hmbX5DA3XO6e_qRdUQAAAUY"]
[Sat Aug 29 05:12:06.964651 2026] [security2:error] [pid 11274:tid 11521] [client 158.23.184.117:12410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.robertthomsonpiper.strangeworx.com"] [uri "/test.php"] [unique_id "apK-hmbX5DA3XO6e_qRdVAAAAVY"]
[Sat Aug 29 05:12:06.972107 2026] [security2:error] [pid 1321:tid 1573] [client 20.104.49.130:63520] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.timportlock.net"] [uri "/1.php"] [unique_id "apK-hmjCPtor9NZ-byQGZAAABpA"]
[Sat Aug 29 05:12:06.972206 2026] [security2:error] [pid 1321:tid 1573] [client 20.104.49.130:63520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.timportlock.net"] [uri "/1.php"] [unique_id "apK-hmjCPtor9NZ-byQGZAAABpA"]
[Sat Aug 29 05:12:06.988496 2026] [security2:error] [pid 11274:tid 11494] [client 20.104.49.130:52306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/tiny2.php"] [unique_id "apK-hmbX5DA3XO6e_qRdWgAAATs"]
[Sat Aug 29 05:12:06.992703 2026] [security2:error] [pid 11274:tid 11555] [client 93.123.109.228:43346] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/.git/config.bak"] [unique_id "apK-hmbX5DA3XO6e_qRdXAAAAXc"]
[Sat Aug 29 05:12:06.996188 2026] [security2:error] [pid 1321:tid 1590] [client 93.123.109.228:43400] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/.git/config.old"] [unique_id "apK-hmjCPtor9NZ-byQGaQAABqE"]
[Sat Aug 29 05:12:06.999658 2026] [security2:error] [pid 1321:tid 1597] [client 158.23.184.117:19019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ladiesandbabies.com"] [uri "/.well-known/logs233/index.php"] [unique_id "apK-hmjCPtor9NZ-byQGagAABqg"]
[Sat Aug 29 05:12:07.002397 2026] [proxy_http:error] [pid 1017536:tid 1017772] (70007)The timeout specified has expired: [client 127.0.0.1:23858] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:12:07.002428 2026] [proxy:error] [pid 1017536:tid 1017772] [client 127.0.0.1:23858] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:12:07.005944 2026] [security2:error] [pid 1321:tid 1489] [client 93.123.109.228:43364] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/.git/config~"] [unique_id "apK-h2jCPtor9NZ-byQGawAABj0"]
[Sat Aug 29 05:12:07.012516 2026] [security2:error] [pid 11274:tid 11468] [client 45.148.10.62:52454] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.zvi.buu.mybluehost.me"] [uri "/.env.backup"] [unique_id "apK-h2bX5DA3XO6e_qRdYQAAASI"]
[Sat Aug 29 05:12:07.027329 2026] [security2:error] [pid 11274:tid 11560] [client 20.104.104.62:48121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/d12.php"] [unique_id "apK-h2bX5DA3XO6e_qRdZwAAAXw"]
[Sat Aug 29 05:12:07.030823 2026] [security2:error] [pid 1321:tid 1516] [client 93.123.109.228:42934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK-h2jCPtor9NZ-byQGbQAABlg"]
[Sat Aug 29 05:12:07.073729 2026] [security2:error] [pid 11274:tid 11448] [client 103.48.146.148:54725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 148.146.48.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK-h2bX5DA3XO6e_qRdbwAAAQ4"]
[Sat Aug 29 05:12:07.073842 2026] [security2:error] [pid 11274:tid 11448] [client 103.48.146.148:54725] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK-h2bX5DA3XO6e_qRdbwAAAQ4"]
[Sat Aug 29 05:12:07.081186 2026] [security2:error] [pid 1321:tid 1581] [client 158.23.184.117:7390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.antiquesweeknh.com"] [uri "/wp-content/backup.php"] [unique_id "apK-h2jCPtor9NZ-byQGcgAABpg"]
[Sat Aug 29 05:12:07.104484 2026] [security2:error] [pid 11274:tid 11552] [client 158.23.147.79:64505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/wp-content/banners/about.php"] [unique_id "apK-h2bX5DA3XO6e_qRddAAAAXQ"]
[Sat Aug 29 05:12:07.109299 2026] [core:error] [pid 11274:tid 11461] [client 20.100.175.163:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:07.109315 2026] [core:error] [pid 11274:tid 11461] [client 20.100.175.163:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:07.109966 2026] [security2:error] [pid 11274:tid 11516] [client 158.23.147.79:58064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.motherssandals.com"] [uri "/first.php"] [unique_id "apK-h2bX5DA3XO6e_qRddgAAAVE"]
[Sat Aug 29 05:12:07.124041 2026] [security2:error] [pid 11274:tid 11524] [client 4.205.62.107:64962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/maxro.php"] [unique_id "apK-h2bX5DA3XO6e_qRdeQAAAVk"]
[Sat Aug 29 05:12:07.128340 2026] [security2:error] [pid 11274:tid 11338] [remote 74.7.227.189:39546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 189.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pinnacleforms.com"] [uri "/FixShpChg41.php"] [unique_id "apK-h2bX5DA3XO6e_qRdegABfxk"], referer: https://mail.pinnacleforms.com/
[Sat Aug 29 05:12:07.136744 2026] [security2:error] [pid 1321:tid 1610] [client 52.139.37.240:14510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/about/function.php"] [unique_id "apK-h2jCPtor9NZ-byQGdAAABrU"]
[Sat Aug 29 05:12:07.139959 2026] [security2:error] [pid 11274:tid 11522] [client 57.141.14.60:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/page/10/"] [unique_id "apK-h2bX5DA3XO6e_qRdfQAAAVc"]
[Sat Aug 29 05:12:07.147325 2026] [security2:error] [pid 11274:tid 11340] [remote 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK-h2bX5DA3XO6e_qRdggABMRs"]
[Sat Aug 29 05:12:07.148156 2026] [security2:error] [pid 11274:tid 11484] [client 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK-h2bX5DA3XO6e_qRdggABMRs"]
[Sat Aug 29 05:12:07.165048 2026] [security2:error] [pid 11274:tid 11521] [client 45.148.10.62:52454] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.zvi.buu.mybluehost.me"] [uri "/.env.old"] [unique_id "apK-h2bX5DA3XO6e_qRdgwAAAVY"]
[Sat Aug 29 05:12:07.165910 2026] [security2:error] [pid 11274:tid 11480] [client 40.83.93.50:20631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/GOD.php"] [unique_id "apK-h2bX5DA3XO6e_qRdhAAAAS0"]
[Sat Aug 29 05:12:07.169400 2026] [security2:error] [pid 11274:tid 11539] [client 20.104.104.62:46211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/yyy.php"] [unique_id "apK-h2bX5DA3XO6e_qRdhQAAAWg"]
[Sat Aug 29 05:12:07.180626 2026] [security2:error] [pid 1321:tid 1543] [client 93.123.109.228:42892] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/admin-app/.env"] [unique_id "apK-h2jCPtor9NZ-byQGegAABnM"]
[Sat Aug 29 05:12:07.221118 2026] [security2:error] [pid 1321:tid 1598] [client 68.155.159.216:43938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/goods.php"] [unique_id "apK-h2jCPtor9NZ-byQGfwAABqk"]
[Sat Aug 29 05:12:07.249982 2026] [security2:error] [pid 11274:tid 11483] [client 20.151.200.44:63745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/secret.php"] [unique_id "apK-h2bX5DA3XO6e_qRdmAAAATA"]
[Sat Aug 29 05:12:07.264656 2026] [security2:error] [pid 1321:tid 1526] [client 68.155.159.216:62774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK-h2jCPtor9NZ-byQGggAABmI"]
[Sat Aug 29 05:12:07.269573 2026] [cgid:error] [pid 1321:tid 1557] [client 45.148.10.62:52442] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/skycoati/public_html/404.shtml
[Sat Aug 29 05:12:07.278829 2026] [security2:error] [pid 11274:tid 11549] [client 20.151.200.44:61630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/f-401.php"] [unique_id "apK-h2bX5DA3XO6e_qRdnwAAAXE"]
[Sat Aug 29 05:12:07.283434 2026] [security2:error] [pid 11274:tid 11468] [client 4.205.62.107:61691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/h.php"] [unique_id "apK-h2bX5DA3XO6e_qRdoQAAASI"]
[Sat Aug 29 05:12:07.294262 2026] [security2:error] [pid 1321:tid 1612] [client 20.52.41.200:4946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/cc.php"] [unique_id "apK-h2jCPtor9NZ-byQGhQAABrc"]
[Sat Aug 29 05:12:07.310241 2026] [security2:error] [pid 1321:tid 1501] [client 20.52.41.200:2649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-good.php"] [unique_id "apK-h2jCPtor9NZ-byQGhwAABkk"]
[Sat Aug 29 05:12:07.313256 2026] [security2:error] [pid 11274:tid 11551] [client 20.240.128.207:16383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-block.php"] [unique_id "apK-h2bX5DA3XO6e_qRdpgAAAXM"]
[Sat Aug 29 05:12:07.321854 2026] [security2:error] [pid 11274:tid 11560] [client 20.104.104.62:48069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/bgymj.php"] [unique_id "apK-h2bX5DA3XO6e_qRdqQAAAXw"]
[Sat Aug 29 05:12:07.324573 2026] [security2:error] [pid 1321:tid 1591] [client 158.158.54.35:19349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/admin/function.php"] [unique_id "apK-h2jCPtor9NZ-byQGiAAABqI"]
[Sat Aug 29 05:12:07.331685 2026] [security2:error] [pid 11274:tid 11518] [client 40.83.93.50:14008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/wp-admin.php"] [unique_id "apK-h2bX5DA3XO6e_qRdqwAAAVM"]
[Sat Aug 29 05:12:07.338019 2026] [security2:error] [pid 11274:tid 11448] [client 158.23.147.79:49839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/wp-content/radio.php"] [unique_id "apK-h2bX5DA3XO6e_qRdrgAAAQ4"]
[Sat Aug 29 05:12:07.342513 2026] [security2:error] [pid 11274:tid 11495] [client 4.205.62.107:6276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/params.php"] [unique_id "apK-h2bX5DA3XO6e_qRdsAAAATw"]
[Sat Aug 29 05:12:07.343089 2026] [security2:error] [pid 11274:tid 11492] [client 103.240.76.112:43515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK-h2bX5DA3XO6e_qRdsQAAATk"]
[Sat Aug 29 05:12:07.343192 2026] [security2:error] [pid 11274:tid 11492] [client 103.240.76.112:43515] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK-h2bX5DA3XO6e_qRdsQAAATk"]
[Sat Aug 29 05:12:07.349939 2026] [security2:error] [pid 11274:tid 11503] [client 52.139.37.240:14501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/an.php"] [unique_id "apK-h2bX5DA3XO6e_qRdswAAAUQ"]
[Sat Aug 29 05:12:07.354959 2026] [security2:error] [pid 11274:tid 11444] [client 20.151.200.44:55709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/h02ugyh.php"] [unique_id "apK-h2bX5DA3XO6e_qRdtAAAAQo"]
[Sat Aug 29 05:12:07.375693 2026] [security2:error] [pid 1321:tid 1547] [client 20.197.61.180:12866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/essexec.php"] [unique_id "apK-h2jCPtor9NZ-byQGjwAABnY"]
[Sat Aug 29 05:12:07.381219 2026] [security2:error] [pid 11274:tid 11516] [client 20.151.200.44:27140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/cafe.php"] [unique_id "apK-h2bX5DA3XO6e_qRdugAAAVE"]
[Sat Aug 29 05:12:07.381426 2026] [security2:error] [pid 11274:tid 11524] [client 4.205.62.107:63262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/lmfi2.php"] [unique_id "apK-h2bX5DA3XO6e_qRduwAAAVk"]
[Sat Aug 29 05:12:07.393347 2026] [security2:error] [pid 11274:tid 11530] [client 20.240.128.207:4925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/a.php"] [unique_id "apK-h2bX5DA3XO6e_qRdvQAAAV8"]
[Sat Aug 29 05:12:07.407912 2026] [security2:error] [pid 11274:tid 11498] [client 20.48.250.41:24389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/fs.php"] [unique_id "apK-h2bX5DA3XO6e_qRdwAAAAT8"]
[Sat Aug 29 05:12:07.419507 2026] [security2:error] [pid 1321:tid 1495] [client 45.148.10.62:52442] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "skycoatingsports.com"] [uri "/api/.env"] [unique_id "apK-h2jCPtor9NZ-byQGkgAABkM"]
[Sat Aug 29 05:12:07.431895 2026] [security2:error] [pid 1321:tid 1577] [client 20.100.175.163:14129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/av.php"] [unique_id "apK-h2jCPtor9NZ-byQGkwAABpQ"]
[Sat Aug 29 05:12:07.440176 2026] [security2:error] [pid 1321:tid 1595] [client 20.48.250.41:42912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/aaa.php"] [unique_id "apK-h2jCPtor9NZ-byQGlAAABqY"]
[Sat Aug 29 05:12:07.461505 2026] [security2:error] [pid 11274:tid 11480] [client 93.123.109.228:42954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/admin/phpinfo.php"] [unique_id "apK-h2bX5DA3XO6e_qRdyQAAAS0"]
[Sat Aug 29 05:12:07.484183 2026] [security2:error] [pid 11274:tid 11451] [client 20.104.104.62:48085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/fh26.php"] [unique_id "apK-h2bX5DA3XO6e_qRdzQAAARE"]
[Sat Aug 29 05:12:07.499342 2026] [security2:error] [pid 1321:tid 1607] [client 20.151.200.44:63567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/hq.php"] [unique_id "apK-h2jCPtor9NZ-byQGmgAABrI"]
[Sat Aug 29 05:12:07.499750 2026] [security2:error] [pid 11274:tid 11470] [client 45.148.10.62:52454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zvi.buu.mybluehost.me"] [uri "/.env.php.bak"] [unique_id "apK-h2bX5DA3XO6e_qRd0gAAASQ"]
[Sat Aug 29 05:12:07.517600 2026] [security2:error] [pid 11274:tid 11561] [client 4.205.62.107:32518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/25.php"] [unique_id "apK-h2bX5DA3XO6e_qRd1AAAAX0"]
[Sat Aug 29 05:12:07.526750 2026] [security2:error] [pid 11274:tid 11464] [client 197.219.150.206:61761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK-h2bX5DA3XO6e_qRd2AAAAR4"]
[Sat Aug 29 05:12:07.526883 2026] [security2:error] [pid 11274:tid 11464] [client 197.219.150.206:61761] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK-h2bX5DA3XO6e_qRd2AAAAR4"]
[Sat Aug 29 05:12:07.533028 2026] [security2:error] [pid 1321:tid 1582] [client 93.123.109.228:42892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/admin_phpinfo.php"] [unique_id "apK-h2jCPtor9NZ-byQGnQAABpk"]
[Sat Aug 29 05:12:07.542401 2026] [security2:error] [pid 11274:tid 11535] [client 52.139.37.240:14475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/asw.php"] [unique_id "apK-h2bX5DA3XO6e_qRd2wAAAWQ"]
[Sat Aug 29 05:12:07.546299 2026] [security2:error] [pid 11274:tid 11534] [client 93.123.109.228:43152] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/s3/.env.bak"] [unique_id "apK-h2bX5DA3XO6e_qRd3AAAAWM"]
[Sat Aug 29 05:12:07.548263 2026] [security2:error] [pid 11274:tid 11468] [client 20.151.200.44:21771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/pro.php"] [unique_id "apK-h2bX5DA3XO6e_qRd3gAAASI"]
[Sat Aug 29 05:12:07.564819 2026] [security2:error] [pid 11274:tid 11459] [client 68.155.159.216:38282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/classwithtostring.php"] [unique_id "apK-h2bX5DA3XO6e_qRd4wAAARk"]
[Sat Aug 29 05:12:07.573141 2026] [security2:error] [pid 1321:tid 1600] [client 68.155.159.216:56802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/wp-content/banners/about.php"] [unique_id "apK-h2jCPtor9NZ-byQGnwAABqs"]
[Sat Aug 29 05:12:07.584193 2026] [security2:error] [pid 11274:tid 11545] [client 20.48.250.41:49631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/xsox.php"] [unique_id "apK-h2bX5DA3XO6e_qRd5gAAAW0"]
[Sat Aug 29 05:12:07.584534 2026] [security2:error] [pid 11274:tid 11501] [client 93.123.109.228:43104] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/administrator/.env"] [unique_id "apK-h2bX5DA3XO6e_qRd5QAAAUI"]
[Sat Aug 29 05:12:07.600410 2026] [security2:error] [pid 11274:tid 11505] [client 93.123.109.228:43108] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/api-backend/.env"] [unique_id "apK-h2bX5DA3XO6e_qRd6QAAAUY"]
[Sat Aug 29 05:12:07.614791 2026] [security2:error] [pid 11274:tid 11472] [client 20.48.250.41:24462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/ioxi.php"] [unique_id "apK-h2bX5DA3XO6e_qRd7AAAASY"]
[Sat Aug 29 05:12:07.633132 2026] [security2:error] [pid 1321:tid 1597] [client 93.123.109.228:42976] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/api-node/.env"] [unique_id "apK-h2jCPtor9NZ-byQGowAABqg"]
[Sat Aug 29 05:12:07.645012 2026] [security2:error] [pid 11274:tid 11508] [client 20.104.104.62:46222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/fgd.php"] [unique_id "apK-h2bX5DA3XO6e_qRd8AAAAUk"]
[Sat Aug 29 05:12:07.645918 2026] [security2:error] [pid 11274:tid 11524] [client 93.123.109.228:42992] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/api/.env"] [unique_id "apK-h2bX5DA3XO6e_qRd8QAAAVk"]
[Sat Aug 29 05:12:07.654891 2026] [security2:error] [pid 1321:tid 1605] [client 40.83.93.50:3909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/ggfi.php"] [unique_id "apK-h2jCPtor9NZ-byQGpgAABrA"]
[Sat Aug 29 05:12:07.716949 2026] [security2:error] [pid 1321:tid 1548] [client 20.48.250.41:39918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-h2jCPtor9NZ-byQGqgAABnc"]
[Sat Aug 29 05:12:07.736892 2026] [security2:error] [pid 11274:tid 11456] [client 52.139.37.240:14480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/item.php"] [unique_id "apK-h2bX5DA3XO6e_qReAwAAARY"]
[Sat Aug 29 05:12:07.750680 2026] [security2:error] [pid 11274:tid 11470] [client 20.48.250.41:49591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/lkui.php"] [unique_id "apK-h2bX5DA3XO6e_qReBgAAASQ"]
[Sat Aug 29 05:12:07.753789 2026] [security2:error] [pid 11274:tid 11505] [client 20.52.41.200:5182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/files/index.php"] [unique_id "apK-h2bX5DA3XO6e_qReCQAAAUY"]
[Sat Aug 29 05:12:07.771992 2026] [security2:error] [pid 11274:tid 11464] [client 158.158.54.35:1300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/s.php"] [unique_id "apK-h2bX5DA3XO6e_qReDQAAAR4"]
[Sat Aug 29 05:12:07.775557 2026] [security2:error] [pid 11274:tid 11441] [remote 93.123.109.228:33242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/.wp-config.php.swp"] [unique_id "apK-h2bX5DA3XO6e_qReDgABR34"]
[Sat Aug 29 05:12:07.777876 2026] [security2:error] [pid 11274:tid 11503] [client 20.52.41.200:2788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "apK-h2bX5DA3XO6e_qReEAAAAUQ"]
[Sat Aug 29 05:12:07.780295 2026] [security2:error] [pid 11274:tid 11535] [client 20.48.250.41:24486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/bootstrap.php"] [unique_id "apK-h2bX5DA3XO6e_qReEQAAAWQ"]
[Sat Aug 29 05:12:07.780562 2026] [security2:error] [pid 11274:tid 11489] [client 158.158.54.35:4392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/admin/index.php"] [unique_id "apK-h2bX5DA3XO6e_qReEgAAATY"]
[Sat Aug 29 05:12:07.783050 2026] [security2:error] [pid 1321:tid 1610] [client 45.148.10.62:52442] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "skycoatingsports.com"] [uri "/.env.bak"] [unique_id "apK-h2jCPtor9NZ-byQGrgAABrU"]
[Sat Aug 29 05:12:07.783469 2026] [security2:error] [pid 11274:tid 11475] [client 20.104.104.62:48064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/inject.php"] [unique_id "apK-h2bX5DA3XO6e_qReFAAAASk"]
[Sat Aug 29 05:12:07.795932 2026] [security2:error] [pid 11274:tid 11479] [client 158.23.147.79:59515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/log-mama/function.php"] [unique_id "apK-h2bX5DA3XO6e_qReGAAAASw"]
[Sat Aug 29 05:12:07.811008 2026] [security2:error] [pid 1321:tid 1502] [client 93.123.109.228:52018] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/server/.env"] [unique_id "apK-h2jCPtor9NZ-byQGsQAABko"]
[Sat Aug 29 05:12:07.812283 2026] [security2:error] [pid 11274:tid 11504] [client 93.123.109.228:43014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/api/info.php"] [unique_id "apK-h2bX5DA3XO6e_qReHAAAAUU"]
[Sat Aug 29 05:12:07.813369 2026] [security2:error] [pid 11274:tid 11555] [client 68.155.159.216:49112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK-h2bX5DA3XO6e_qReHQAAAXc"]
[Sat Aug 29 05:12:07.831258 2026] [security2:error] [pid 11274:tid 11452] [client 20.240.128.207:21825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-includes/fonts/admin.php"] [unique_id "apK-h2bX5DA3XO6e_qReHwAAARI"]
[Sat Aug 29 05:12:07.832976 2026] [security2:error] [pid 1321:tid 1564] [client 93.123.109.228:43248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/server/api/.env"] [unique_id "apK-h2jCPtor9NZ-byQGsgAABoc"]
[Sat Aug 29 05:12:07.841337 2026] [security2:error] [pid 11274:tid 11473] [client 20.151.200.44:21761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/999.php"] [unique_id "apK-h2bX5DA3XO6e_qReIgAAASc"]
[Sat Aug 29 05:12:07.841753 2026] [security2:error] [pid 1321:tid 1598] [client 68.155.159.216:1972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK-h2jCPtor9NZ-byQGtAAABqk"]
[Sat Aug 29 05:12:07.843178 2026] [security2:error] [pid 11274:tid 11498] [client 40.83.93.50:13991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/wp-configs.php"] [unique_id "apK-h2bX5DA3XO6e_qReIwAAAT8"]
[Sat Aug 29 05:12:07.869164 2026] [security2:error] [pid 1321:tid 1492] [client 4.205.62.107:63300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/cloud.php"] [unique_id "apK-h2jCPtor9NZ-byQGuAAABkA"]
[Sat Aug 29 05:12:07.875191 2026] [security2:error] [pid 11274:tid 11530] [client 116.179.37.202:43181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 202.37.179.116.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "blackdragonmartialartswy.com"] [uri "/wp-content/plugins/anti-captcha/anti-captcha-0.3.js.php"] [unique_id "apK-h2bX5DA3XO6e_qReJwAAAV8"], referer: https://blackdragonmartialartswy.com/?page_id=649&ai1ec=action~oneday%7Ctime_limit~1764745200%7Ccat_ids~10%7Crequest_format~json
[Sat Aug 29 05:12:07.875698 2026] [security2:error] [pid 11274:tid 11466] [client 20.104.18.15:29057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/samll.php"] [unique_id "apK-h2bX5DA3XO6e_qReKgAAASA"]
[Sat Aug 29 05:12:07.879864 2026] [security2:error] [pid 11274:tid 11540] [client 4.205.62.107:32563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/wp-info.php"] [unique_id "apK-h2bX5DA3XO6e_qReLAAAAWk"]
[Sat Aug 29 05:12:07.881301 2026] [security2:error] [pid 1321:tid 1526] [client 20.48.250.41:42867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "apK-h2jCPtor9NZ-byQGuQAABmI"]
[Sat Aug 29 05:12:07.895126 2026] [security2:error] [pid 11274:tid 11476] [client 93.123.109.228:51954] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/server/backend/.env"] [unique_id "apK-h2bX5DA3XO6e_qReLgAAASo"]
[Sat Aug 29 05:12:07.897476 2026] [security2:error] [pid 11274:tid 11497] [client 20.240.128.207:2055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/u.php"] [unique_id "apK-h2bX5DA3XO6e_qReLwAAAT4"]
[Sat Aug 29 05:12:07.898186 2026] [security2:error] [pid 11274:tid 11485] [client 20.48.250.41:39826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-h2bX5DA3XO6e_qReMAAAATI"]
[Sat Aug 29 05:12:07.903329 2026] [security2:error] [pid 11274:tid 11545] [client 20.104.104.62:33839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "zeeksignin.com"] [uri "/.well-known/index.php"] [unique_id "apK-h2bX5DA3XO6e_qReMwAAAW0"]
[Sat Aug 29 05:12:07.919861 2026] [security2:error] [pid 11274:tid 11477] [client 20.104.104.62:48114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/mga.php"] [unique_id "apK-h2bX5DA3XO6e_qReNQAAASs"]
[Sat Aug 29 05:12:07.922646 2026] [security2:error] [pid 11274:tid 11467] [client 68.155.159.216:23467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/nf_tracking.php"] [unique_id "apK-h2bX5DA3XO6e_qReNgAAASE"]
[Sat Aug 29 05:12:07.925479 2026] [security2:error] [pid 1321:tid 1581] [client 20.100.175.163:23147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/file.php"] [unique_id "apK-h2jCPtor9NZ-byQGvgAABpg"]
[Sat Aug 29 05:12:07.939646 2026] [security2:error] [pid 11274:tid 11502] [client 52.139.37.240:14526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/jga.php"] [unique_id "apK-h2bX5DA3XO6e_qReOQAAAUM"]
[Sat Aug 29 05:12:07.945374 2026] [security2:error] [pid 1321:tid 1612] [client 68.155.159.216:7084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK-h2jCPtor9NZ-byQGwAAABrc"]
[Sat Aug 29 05:12:07.948432 2026] [cgid:error] [pid 1321:tid 1542] [client 45.148.10.62:52442] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/skycoati/public_html/404.shtml
[Sat Aug 29 05:12:07.950664 2026] [security2:error] [pid 1321:tid 1542] [client 47.128.30.95:20514] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "dgdevelco.com"] [uri "/robots.txt"] [unique_id "apK-h2jCPtor9NZ-byQGwQAABnI"]
[Sat Aug 29 05:12:07.954587 2026] [security2:error] [pid 1321:tid 1553] [client 20.48.250.41:24406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/export.php"] [unique_id "apK-h2jCPtor9NZ-byQGwwAABnw"]
[Sat Aug 29 05:12:07.973500 2026] [security2:error] [pid 1321:tid 1496] [client 93.123.109.228:43274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/.wp-config.php.swp"] [unique_id "apK-h2jCPtor9NZ-byQGxgAABkQ"]
[Sat Aug 29 05:12:07.981086 2026] [security2:error] [pid 1321:tid 1512] [client 68.155.159.216:44014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.theenprogroup.com"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK-h2jCPtor9NZ-byQGxwAABlQ"]
[Sat Aug 29 05:12:07.996083 2026] [security2:error] [pid 1321:tid 1491] [client 45.148.10.62:52468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zvi.buu.mybluehost.me"] [uri "/.env.php"] [unique_id "apK-h2jCPtor9NZ-byQGyQAABj8"]
[Sat Aug 29 05:12:08.011450 2026] [security2:error] [pid 1321:tid 1574] [client 4.205.62.107:6097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/dialog.php"] [unique_id "apK-iGjCPtor9NZ-byQGygAABpE"]
[Sat Aug 29 05:12:08.014211 2026] [security2:error] [pid 1321:tid 1561] [client 158.23.147.79:53978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK-iGjCPtor9NZ-byQGywAABoQ"]
[Sat Aug 29 05:12:08.016280 2026] [security2:error] [pid 11274:tid 11512] [client 93.123.109.228:43168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/api/phpinfo.php"] [unique_id "apK-iGbX5DA3XO6e_qReSAAAAU0"]
[Sat Aug 29 05:12:08.021249 2026] [security2:error] [pid 1321:tid 1506] [client 93.123.109.228:43434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/ADMIN/.env"] [unique_id "apK-iGjCPtor9NZ-byQGzQAABk4"]
[Sat Aug 29 05:12:08.022738 2026] [security2:error] [pid 11274:tid 11479] [client 20.48.250.41:42957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/motu.php"] [unique_id "apK-iGbX5DA3XO6e_qReTAAAASw"]
[Sat Aug 29 05:12:08.023933 2026] [security2:error] [pid 1321:tid 1596] [client 20.151.200.44:62256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/mh.php"] [unique_id "apK-iGjCPtor9NZ-byQGzgAABqc"]
[Sat Aug 29 05:12:08.024960 2026] [security2:error] [pid 11274:tid 11459] [client 47.128.30.95:20546] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "longvalleyfire.dgdevelco.com"] [uri "/robots.txt"] [unique_id "apK-iGbX5DA3XO6e_qReTgAAARk"]
[Sat Aug 29 05:12:08.026389 2026] [security2:error] [pid 1321:tid 1562] [client 20.104.104.62:48577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/secret.php"] [unique_id "apK-iGjCPtor9NZ-byQG0AAABoU"]
[Sat Aug 29 05:12:08.028429 2026] [security2:error] [pid 1321:tid 1522] [client 68.155.159.216:21466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK-iGjCPtor9NZ-byQG0QAABl4"]
[Sat Aug 29 05:12:08.033379 2026] [security2:error] [pid 1321:tid 1595] [client 93.123.109.228:43300] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/API/.env"] [unique_id "apK-iGjCPtor9NZ-byQG0gAABqY"]
[Sat Aug 29 05:12:08.036934 2026] [security2:error] [pid 1321:tid 1508] [client 20.104.18.15:29677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/mgrr.php"] [unique_id "apK-iGjCPtor9NZ-byQG0wAABlA"]
[Sat Aug 29 05:12:08.039311 2026] [security2:error] [pid 1321:tid 1563] [client 20.104.104.62:27072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "waysidebaptistmission.lifesosweet.com"] [uri "/as.php"] [unique_id "apK-iGjCPtor9NZ-byQG1AAABoY"]
[Sat Aug 29 05:12:08.057624 2026] [security2:error] [pid 11274:tid 11554] [client 20.48.250.41:39814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/ff1.php"] [unique_id "apK-iGbX5DA3XO6e_qReVQAAAXY"]
[Sat Aug 29 05:12:08.072126 2026] [security2:error] [pid 1321:tid 1560] [client 20.104.104.62:8841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/inwp.php"] [unique_id "apK-iGjCPtor9NZ-byQG1gAABoM"]
[Sat Aug 29 05:12:08.080250 2026] [security2:error] [pid 11274:tid 11454] [client 20.104.49.130:56229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/zoo2.php"] [unique_id "apK-iGbX5DA3XO6e_qReWAAAARQ"]
[Sat Aug 29 05:12:08.110032 2026] [cgid:error] [pid 1321:tid 1507] [client 45.148.10.62:52442] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/skycoati/public_html/404.shtml
[Sat Aug 29 05:12:08.114269 2026] [security2:error] [pid 1321:tid 1498] [client 20.48.250.41:24409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/gk.php"] [unique_id "apK-iGjCPtor9NZ-byQG2QAABkY"]
[Sat Aug 29 05:12:08.116260 2026] [security2:error] [pid 11274:tid 11565] [client 20.197.61.180:10181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/hello.php"] [unique_id "apK-iGbX5DA3XO6e_qReXAAAAYE"]
[Sat Aug 29 05:12:08.116430 2026] [security2:error] [pid 1321:tid 1515] [client 93.123.109.228:52018] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/service/.env"] [unique_id "apK-iGjCPtor9NZ-byQG2gAABlc"]
[Sat Aug 29 05:12:08.124891 2026] [security2:error] [pid 11274:tid 11530] [client 20.151.200.44:63700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/sef.php"] [unique_id "apK-iGbX5DA3XO6e_qReXwAAAV8"]
[Sat Aug 29 05:12:08.136715 2026] [security2:error] [pid 11274:tid 11498] [client 52.139.37.240:14476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/mac.php"] [unique_id "apK-iGbX5DA3XO6e_qReYQAAAT8"]
[Sat Aug 29 05:12:08.155181 2026] [security2:error] [pid 1321:tid 1605] [client 20.48.250.41:42916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/Ov-Simple1.php"] [unique_id "apK-iGjCPtor9NZ-byQG3QAABrA"]
[Sat Aug 29 05:12:08.157941 2026] [security2:error] [pid 11274:tid 11572] [client 93.123.109.228:43152] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/services/.env"] [unique_id "apK-iGbX5DA3XO6e_qReZwAAAYg"]
[Sat Aug 29 05:12:08.167466 2026] [security2:error] [pid 1321:tid 1555] [client 20.151.200.44:27319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/eval.php"] [unique_id "apK-iGjCPtor9NZ-byQG3gAABn4"]
[Sat Aug 29 05:12:08.175091 2026] [security2:error] [pid 1321:tid 1576] [client 93.123.109.228:43400] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/APP/.env"] [unique_id "apK-iGjCPtor9NZ-byQG3wAABpM"]
[Sat Aug 29 05:12:08.182039 2026] [security2:error] [pid 1321:tid 1527] [client 93.123.109.228:43300] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/Api/.env"] [unique_id "apK-iGjCPtor9NZ-byQG4QAABmM"]
[Sat Aug 29 05:12:08.193266 2026] [security2:error] [pid 11274:tid 11464] [client 40.83.93.50:10882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/alfa-rex.php"] [unique_id "apK-iGbX5DA3XO6e_qRebgAAAR4"]
[Sat Aug 29 05:12:08.197825 2026] [security2:error] [pid 11274:tid 11508] [client 20.48.250.41:39935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/t.php"] [unique_id "apK-iGbX5DA3XO6e_qRebwAAAUk"]
[Sat Aug 29 05:12:08.203502 2026] [security2:error] [pid 11274:tid 11535] [client 107.145.13.164:53859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 164.13.145.107.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK-iGbX5DA3XO6e_qRebQAAAWQ"]
[Sat Aug 29 05:12:08.203641 2026] [security2:error] [pid 11274:tid 11535] [client 107.145.13.164:53859] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK-iGbX5DA3XO6e_qRebQAAAWQ"]
[Sat Aug 29 05:12:08.214208 2026] [security2:error] [pid 11274:tid 11522] [client 20.104.104.62:48089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/ad1.php"] [unique_id "apK-iGbX5DA3XO6e_qRecwAAAVc"]
[Sat Aug 29 05:12:08.214530 2026] [security2:error] [pid 1321:tid 1525] [client 93.123.109.228:43364] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/BACK/.env"] [unique_id "apK-iGjCPtor9NZ-byQG4wAABmE"]
[Sat Aug 29 05:12:08.220128 2026] [security2:error] [pid 1321:tid 1509] [client 20.52.41.200:2839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/abcd.php"] [unique_id "apK-iGjCPtor9NZ-byQG5AAABlE"]
[Sat Aug 29 05:12:08.223140 2026] [security2:error] [pid 11274:tid 11452] [client 20.52.41.200:4954] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "arklestonpiping.strangeworx.com"] [uri "/1.php7"] [unique_id "apK-iGbX5DA3XO6e_qRedQAAARI"]
[Sat Aug 29 05:12:08.223225 2026] [security2:error] [pid 11274:tid 11452] [client 20.52.41.200:4954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/1.php7"] [unique_id "apK-iGbX5DA3XO6e_qRedQAAARI"]
[Sat Aug 29 05:12:08.223633 2026] [security2:error] [pid 1321:tid 1500] [client 158.158.54.35:20707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/test1.php"] [unique_id "apK-iGjCPtor9NZ-byQG5QAABkg"]
[Sat Aug 29 05:12:08.233720 2026] [security2:error] [pid 11274:tid 11518] [client 158.158.54.35:15695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/storage/rip.php"] [unique_id "apK-iGbX5DA3XO6e_qRedgAAAVM"]
[Sat Aug 29 05:12:08.244264 2026] [security2:error] [pid 1321:tid 1502] [client 93.123.109.228:43460] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/BACKEND/.env"] [unique_id "apK-iGjCPtor9NZ-byQG5wAABko"]
[Sat Aug 29 05:12:08.247218 2026] [security2:error] [pid 11274:tid 11507] [client 93.123.109.228:43346] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/BE/.env"] [unique_id "apK-iGbX5DA3XO6e_qReeQAAAUg"]
[Sat Aug 29 05:12:08.262835 2026] [security2:error] [pid 11274:tid 11465] [client 4.205.62.107:64929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/brc.php"] [unique_id "apK-iGbX5DA3XO6e_qRefAAAAR8"]
[Sat Aug 29 05:12:08.271289 2026] [security2:error] [pid 1321:tid 1543] [client 93.123.109.228:42914] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/apis/.env"] [unique_id "apK-iGjCPtor9NZ-byQG6QAABnM"]
[Sat Aug 29 05:12:08.295802 2026] [security2:error] [pid 1321:tid 1599] [client 20.104.104.62:47614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/images/fox.php"] [unique_id "apK-iGjCPtor9NZ-byQG6gAABqo"]
[Sat Aug 29 05:12:08.296284 2026] [autoindex:error] [pid 1321:tid 1490] [client 20.104.104.62:27116] AH01276: Cannot serve directory /home1/lifesosw/public_html/whitesands2/wp-admin/js/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:12:08.314551 2026] [security2:error] [pid 11274:tid 11503] [client 20.48.250.41:24541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/logs1.php"] [unique_id "apK-iGbX5DA3XO6e_qRehAAAAUQ"]
[Sat Aug 29 05:12:08.319170 2026] [security2:error] [pid 1321:tid 1598] [client 45.148.10.62:52442] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "skycoatingsports.com"] [uri "/stripe/.env"] [unique_id "apK-iGjCPtor9NZ-byQG7AAABqk"]
[Sat Aug 29 05:12:08.325860 2026] [security2:error] [pid 1321:tid 1564] [client 93.123.109.228:43376] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/Backend/.env"] [unique_id "apK-iGjCPtor9NZ-byQG7QAABoc"]
[Sat Aug 29 05:12:08.329269 2026] [security2:error] [pid 11274:tid 11475] [client 68.155.159.216:43981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK-iGbX5DA3XO6e_qReiQAAASk"]
[Sat Aug 29 05:12:08.331195 2026] [security2:error] [pid 11274:tid 11475] [client 20.48.250.41:42977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/wp-blogs.php"] [unique_id "apK-iGbX5DA3XO6e_qReigAAASk"]
[Sat Aug 29 05:12:08.331225 2026] [security2:error] [pid 1321:tid 1519] [client 93.123.109.228:43300] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/Be/.env"] [unique_id "apK-iGjCPtor9NZ-byQG7gAABls"]
[Sat Aug 29 05:12:08.332237 2026] [security2:error] [pid 1321:tid 1489] [client 20.240.128.207:7290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/m.php"] [unique_id "apK-iGjCPtor9NZ-byQG7wAABj0"]
[Sat Aug 29 05:12:08.332616 2026] [security2:error] [pid 11274:tid 11470] [client 52.139.37.240:14514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/wp-admin/images/index.php"] [unique_id "apK-iGbX5DA3XO6e_qRejAAAASQ"]
[Sat Aug 29 05:12:08.351439 2026] [security2:error] [pid 11274:tid 11480] [client 93.123.109.228:52126] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/shared/.env"] [unique_id "apK-iGbX5DA3XO6e_qRejQAAAS0"]
[Sat Aug 29 05:12:08.354583 2026] [security2:error] [pid 11274:tid 11570] [client 20.104.104.62:48096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/1vbqo.php"] [unique_id "apK-iGbX5DA3XO6e_qRekAAAAYY"]
[Sat Aug 29 05:12:08.368209 2026] [security2:error] [pid 11274:tid 11461] [client 68.155.159.216:62739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-admin/images/about.php"] [unique_id "apK-iGbX5DA3XO6e_qRelQAAARs"]
[Sat Aug 29 05:12:08.368985 2026] [security2:error] [pid 1321:tid 1526] [client 93.123.109.228:43248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/shop/.env"] [unique_id "apK-iGjCPtor9NZ-byQG8wAABmI"]
[Sat Aug 29 05:12:08.379168 2026] [security2:error] [pid 11274:tid 11555] [client 93.123.109.228:42880] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/app/.env"] [unique_id "apK-iGbX5DA3XO6e_qRelwAAAXc"]
[Sat Aug 29 05:12:08.400485 2026] [security2:error] [pid 11274:tid 11529] [client 40.83.93.50:20453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/essexec.php"] [unique_id "apK-iGbX5DA3XO6e_qRemgAAAV4"]
[Sat Aug 29 05:12:08.400772 2026] [security2:error] [pid 11274:tid 11356] [remote 93.123.109.228:33242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK-iGbX5DA3XO6e_qRemwABhSs"]
[Sat Aug 29 05:12:08.406522 2026] [security2:error] [pid 11274:tid 11498] [client 20.151.200.44:22246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/admin123.php"] [unique_id "apK-iGbX5DA3XO6e_qRenAAAAT8"]
[Sat Aug 29 05:12:08.409648 2026] [security2:error] [pid 1321:tid 1536] [client 20.240.128.207:8147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/r.php"] [unique_id "apK-iGjCPtor9NZ-byQG9gAABmw"]
[Sat Aug 29 05:12:08.414262 2026] [security2:error] [pid 11274:tid 11468] [client 68.155.159.216:14173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-content/x.php"] [unique_id "apK-iGbX5DA3XO6e_qRenwAAASI"]
[Sat Aug 29 05:12:08.415768 2026] [core:error] [pid 11274:tid 11495] [client 20.104.104.62:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:08.415785 2026] [core:error] [pid 11274:tid 11495] [client 20.104.104.62:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:08.435199 2026] [security2:error] [pid 11274:tid 11515] [client 20.100.175.163:17048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK-iGbX5DA3XO6e_qRepAAAAVA"]
[Sat Aug 29 05:12:08.437273 2026] [security2:error] [pid 11274:tid 11535] [client 4.205.62.107:63933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/bootstrap.php"] [unique_id "apK-iGbX5DA3XO6e_qRepgAAAWQ"]
[Sat Aug 29 05:12:08.479464 2026] [security2:error] [pid 1321:tid 1544] [client 4.205.62.107:6881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/gjm.php"] [unique_id "apK-iGjCPtor9NZ-byQG-gAABnQ"]
[Sat Aug 29 05:12:08.482153 2026] [security2:error] [pid 1321:tid 1504] [client 158.23.147.79:43272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-content/x/index.php"] [unique_id "apK-iGjCPtor9NZ-byQG_QAABkw"]
[Sat Aug 29 05:12:08.486581 2026] [security2:error] [pid 11274:tid 11456] [client 93.123.109.228:43192] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/src/.env"] [unique_id "apK-iGbX5DA3XO6e_qReswAAARY"]
[Sat Aug 29 05:12:08.487416 2026] [cgid:error] [pid 1321:tid 1496] [client 45.148.10.62:52442] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/skycoati/public_html/404.shtml
[Sat Aug 29 05:12:08.489422 2026] [security2:error] [pid 1321:tid 1491] [client 20.48.250.41:42882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/mini.php"] [unique_id "apK-iGjCPtor9NZ-byQHAAAABj8"]
[Sat Aug 29 05:12:08.491320 2026] [security2:error] [pid 11274:tid 11493] [client 20.48.250.41:39897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/erty.php"] [unique_id "apK-iGbX5DA3XO6e_qRetQAAATo"]
[Sat Aug 29 05:12:08.518690 2026] [security2:error] [pid 11274:tid 11489] [client 20.104.104.62:48106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/h02ugyh.php"] [unique_id "apK-iGbX5DA3XO6e_qReuwAAATY"]
[Sat Aug 29 05:12:08.527233 2026] [security2:error] [pid 11274:tid 11472] [client 52.139.37.240:14473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/wp-admin/includes/index.php"] [unique_id "apK-iGbX5DA3XO6e_qRevQAAASY"]
[Sat Aug 29 05:12:08.560469 2026] [security2:error] [pid 11274:tid 11470] [client 4.205.62.107:62980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/wpver.php"] [unique_id "apK-iGbX5DA3XO6e_qReyAAAASQ"]
[Sat Aug 29 05:12:08.605748 2026] [security2:error] [pid 11274:tid 11558] [client 20.48.250.41:24569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/inege.php"] [unique_id "apK-iGbX5DA3XO6e_qRezQAAAXo"]
[Sat Aug 29 05:12:08.607006 2026] [security2:error] [pid 11274:tid 11553] [client 68.155.159.216:55062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.angelesforestranch.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK-iGbX5DA3XO6e_qRezwAAAXU"]
[Sat Aug 29 05:12:08.609142 2026] [security2:error] [pid 11274:tid 11315] [remote 93.123.109.228:33242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/admin/phpinfo.php"] [unique_id "apK-iGbX5DA3XO6e_qRe0AABKwI"]
[Sat Aug 29 05:12:08.619800 2026] [security2:error] [pid 1321:tid 1596] [client 20.104.104.62:27027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "waysidebaptistmission.lifesosweet.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK-iGjCPtor9NZ-byQHCAAABqc"]
[Sat Aug 29 05:12:08.622955 2026] [security2:error] [pid 11274:tid 11555] [client 20.48.250.41:42922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/amp.php"] [unique_id "apK-iGbX5DA3XO6e_qRe0gAAAXc"]
[Sat Aug 29 05:12:08.625991 2026] [security2:error] [pid 11274:tid 11560] [client 20.151.200.44:63657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/f2r4.php"] [unique_id "apK-iGbX5DA3XO6e_qRe1AAAAXw"]
[Sat Aug 29 05:12:08.635554 2026] [security2:error] [pid 11274:tid 11530] [client 20.104.104.62:40207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/images/fw.php"] [unique_id "apK-iGbX5DA3XO6e_qRe2AAAAV8"]
[Sat Aug 29 05:12:08.649415 2026] [security2:error] [pid 11274:tid 11498] [client 158.23.147.79:24464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/.well-known/content.php"] [unique_id "apK-iGbX5DA3XO6e_qRe3AAAAT8"]
[Sat Aug 29 05:12:08.649561 2026] [security2:error] [pid 11274:tid 11328] [remote 93.123.109.228:33242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/admin_phpinfo.php"] [unique_id "apK-iGbX5DA3XO6e_qRe3QABKw8"]
[Sat Aug 29 05:12:08.651146 2026] [cgid:error] [pid 1321:tid 1560] [client 45.148.10.62:52442] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/skycoati/public_html/404.shtml
[Sat Aug 29 05:12:08.654379 2026] [security2:error] [pid 1321:tid 1523] [client 20.104.104.62:46254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/shelp.php"] [unique_id "apK-iGjCPtor9NZ-byQHCwAABl8"]
[Sat Aug 29 05:12:08.657180 2026] [security2:error] [pid 11274:tid 11511] [client 4.205.62.107:32565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/nlnub.php"] [unique_id "apK-iGbX5DA3XO6e_qRe3gAAAUw"]
[Sat Aug 29 05:12:08.669863 2026] [security2:error] [pid 11274:tid 11526] [client 20.52.41.200:4652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/disagraeosc.php"] [unique_id "apK-iGbX5DA3XO6e_qRe4QAAAVs"]
[Sat Aug 29 05:12:08.670241 2026] [security2:error] [pid 11274:tid 11551] [client 68.155.159.216:21443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK-iGbX5DA3XO6e_qRe4gAAAXM"]
[Sat Aug 29 05:12:08.671433 2026] [security2:error] [pid 11274:tid 11504] [client 158.158.54.35:1420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/ws.php"] [unique_id "apK-iGbX5DA3XO6e_qRe4wAAAUU"]
[Sat Aug 29 05:12:08.672846 2026] [security2:error] [pid 11274:tid 11506] [client 20.52.41.200:2721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-access.php"] [unique_id "apK-iGbX5DA3XO6e_qRe5AAAAUc"]
[Sat Aug 29 05:12:08.676675 2026] [security2:error] [pid 11274:tid 11488] [client 68.155.159.216:38708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/install.php"] [unique_id "apK-iGbX5DA3XO6e_qRe5gAAATU"]
[Sat Aug 29 05:12:08.679050 2026] [security2:error] [pid 11274:tid 11508] [client 20.151.200.44:65136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/7h.php"] [unique_id "apK-iGbX5DA3XO6e_qRe5wAAAUk"]
[Sat Aug 29 05:12:08.711335 2026] [security2:error] [pid 11274:tid 11486] [client 158.158.54.35:15716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/zoom1.php"] [unique_id "apK-iGbX5DA3XO6e_qRe7QAAATM"]
[Sat Aug 29 05:12:08.720757 2026] [security2:error] [pid 11274:tid 11476] [client 52.139.37.240:15243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/zafir1.php"] [unique_id "apK-iGbX5DA3XO6e_qRe8AAAASo"]
[Sat Aug 29 05:12:08.730978 2026] [security2:error] [pid 11274:tid 11487] [client 40.83.93.50:17547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/cookie.php"] [unique_id "apK-iGbX5DA3XO6e_qRe8gAAATQ"]
[Sat Aug 29 05:12:08.733490 2026] [security2:error] [pid 11274:tid 11493] [client 20.48.250.41:39896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/0x.php"] [unique_id "apK-iGbX5DA3XO6e_qRe8wAAATo"]
[Sat Aug 29 05:12:08.745928 2026] [security2:error] [pid 11274:tid 11524] [client 93.123.109.228:43110] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/srv/.env"] [unique_id "apK-iGbX5DA3XO6e_qRe9gAAAVk"]
[Sat Aug 29 05:12:08.750237 2026] [security2:error] [pid 1321:tid 1588] [client 93.123.109.228:43460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/_profiler/phpinfo.php"] [unique_id "apK-iGjCPtor9NZ-byQHEwAABp8"]
[Sat Aug 29 05:12:08.762219 2026] [security2:error] [pid 11274:tid 11472] [client 93.123.109.228:43152] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/stage/.env"] [unique_id "apK-iGbX5DA3XO6e_qRe-AAAASY"]
[Sat Aug 29 05:12:08.765706 2026] [security2:error] [pid 1321:tid 1603] [client 93.123.109.228:52018] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/staging/.env"] [unique_id "apK-iGjCPtor9NZ-byQHFQAABq4"]
[Sat Aug 29 05:12:08.771659 2026] [security2:error] [pid 1321:tid 1522] [client 180.190.5.40:33517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.5.190.180.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK-iGjCPtor9NZ-byQHFAAABl4"]
[Sat Aug 29 05:12:08.771798 2026] [security2:error] [pid 1321:tid 1522] [client 180.190.5.40:33517] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK-iGjCPtor9NZ-byQHFAAABl4"]
[Sat Aug 29 05:12:08.772173 2026] [security2:error] [pid 11274:tid 11499] [client 20.48.250.41:49619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/cc13.php"] [unique_id "apK-iGbX5DA3XO6e_qRe-wAAAUA"]
[Sat Aug 29 05:12:08.784573 2026] [security2:error] [pid 11274:tid 11480] [client 20.48.250.41:24561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/wp-link10.php"] [unique_id "apK-iGbX5DA3XO6e_qRe_wAAAS0"]
[Sat Aug 29 05:12:08.787263 2026] [security2:error] [pid 11274:tid 11496] [client 20.104.49.130:45748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/az.php"] [unique_id "apK-iGbX5DA3XO6e_qRfAQAAAT0"]
[Sat Aug 29 05:12:08.795148 2026] [security2:error] [pid 11274:tid 11521] [client 20.104.104.62:8844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/13ede.php"] [unique_id "apK-iGbX5DA3XO6e_qRfAwAAAVY"]
[Sat Aug 29 05:12:08.798669 2026] [security2:error] [pid 11274:tid 11563] [client 158.23.147.79:60160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK-iGbX5DA3XO6e_qRfBQAAAX8"]
[Sat Aug 29 05:12:08.801278 2026] [security2:error] [pid 11274:tid 11513] [client 20.104.104.62:48694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/pro.php"] [unique_id "apK-iGbX5DA3XO6e_qRfBgAAAU4"]
[Sat Aug 29 05:12:08.821657 2026] [security2:error] [pid 1321:tid 1573] [client 20.104.104.62:27017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "waysidebaptistmission.lifesosweet.com"] [uri "/abcd.php"] [unique_id "apK-iGjCPtor9NZ-byQHFwAABpA"]
[Sat Aug 29 05:12:08.829555 2026] [cgid:error] [pid 1321:tid 1565] [client 45.148.10.62:52442] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/skycoati/public_html/404.shtml
[Sat Aug 29 05:12:08.838872 2026] [security2:error] [pid 1321:tid 1508] [client 20.197.61.180:10202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/fi2.php"] [unique_id "apK-iGjCPtor9NZ-byQHGwAABlA"]
[Sat Aug 29 05:12:08.853185 2026] [security2:error] [pid 1321:tid 1548] [client 93.123.109.228:42976] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/application/.env"] [unique_id "apK-iGjCPtor9NZ-byQHHAAABnc"]
[Sat Aug 29 05:12:08.871065 2026] [security2:error] [pid 11274:tid 11488] [client 20.151.200.44:62233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/sadis.php"] [unique_id "apK-iGbX5DA3XO6e_qRfEAAAATU"]
[Sat Aug 29 05:12:08.872454 2026] [security2:error] [pid 11274:tid 11363] [remote 93.123.109.228:33242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/api/info.php"] [unique_id "apK-iGbX5DA3XO6e_qRfEgABKzE"]
[Sat Aug 29 05:12:08.904351 2026] [security2:error] [pid 11274:tid 11561] [client 20.48.250.41:42896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/aa.php"] [unique_id "apK-iGbX5DA3XO6e_qRfGAAAAX0"]
[Sat Aug 29 05:12:08.911650 2026] [security2:error] [pid 1321:tid 1610] [client 93.123.109.228:43434] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/admin-app/.env"] [unique_id "apK-iGjCPtor9NZ-byQHHwAABrU"]
[Sat Aug 29 05:12:08.913599 2026] [security2:error] [pid 11274:tid 11571] [client 20.240.128.207:3870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "apK-iGbX5DA3XO6e_qRfGQAAAYc"]
[Sat Aug 29 05:12:08.926070 2026] [security2:error] [pid 11274:tid 11534] [client 20.104.104.62:8843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/k8.php"] [unique_id "apK-iGbX5DA3XO6e_qRfHgAAAWM"]
[Sat Aug 29 05:12:08.927291 2026] [security2:error] [pid 1321:tid 1527] [client 52.139.37.240:15275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/abc.php"] [unique_id "apK-iGjCPtor9NZ-byQHIQAABmM"]
[Sat Aug 29 05:12:08.934220 2026] [security2:error] [pid 11274:tid 11479] [client 20.100.175.163:15708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/gmo.php"] [unique_id "apK-iGbX5DA3XO6e_qRfIAAAASw"]
[Sat Aug 29 05:12:08.941862 2026] [security2:error] [pid 1321:tid 1527] [client 93.123.109.228:52018] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/stg/.env"] [unique_id "apK-iGjCPtor9NZ-byQHIgAABmM"]
[Sat Aug 29 05:12:08.943211 2026] [security2:error] [pid 11274:tid 11456] [client 68.155.159.216:49047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK-iGbX5DA3XO6e_qRfIgAAARY"]
[Sat Aug 29 05:12:08.950559 2026] [security2:error] [pid 11274:tid 11470] [client 20.240.128.207:8174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-blog.php"] [unique_id "apK-iGbX5DA3XO6e_qRfJwAAASQ"]
[Sat Aug 29 05:12:08.953817 2026] [security2:error] [pid 11274:tid 11371] [remote 93.123.109.228:33242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/api/phpinfo.php"] [unique_id "apK-iGbX5DA3XO6e_qRfKQABKzk"]
[Sat Aug 29 05:12:08.954405 2026] [security2:error] [pid 11274:tid 11495] [client 20.48.250.41:39819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/66.php"] [unique_id "apK-iGbX5DA3XO6e_qRfKgAAATw"]
[Sat Aug 29 05:12:08.959509 2026] [security2:error] [pid 1321:tid 1598] [client 20.104.104.62:64719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/images/alfa.php"] [unique_id "apK-iGjCPtor9NZ-byQHJAAABqk"]
[Sat Aug 29 05:12:08.970791 2026] [security2:error] [pid 1321:tid 1519] [client 20.48.250.41:24521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/ww.php"] [unique_id "apK-iGjCPtor9NZ-byQHJQAABls"]
[Sat Aug 29 05:12:08.985966 2026] [security2:error] [pid 11274:tid 11499] [client 93.123.109.228:43534] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/apps/.env"] [unique_id "apK-iGbX5DA3XO6e_qRfMAAAAUA"]
[Sat Aug 29 05:12:08.991212 2026] [security2:error] [pid 1321:tid 1584] [client 45.148.10.62:52442] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "skycoatingsports.com"] [uri "/backend/.env"] [unique_id "apK-iGjCPtor9NZ-byQHKAAABps"]
[Sat Aug 29 05:12:08.998506 2026] [security2:error] [pid 1321:tid 1536] [client 20.151.200.44:63693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/wp-gzone.php"] [unique_id "apK-iGjCPtor9NZ-byQHKQAABmw"]
[Sat Aug 29 05:12:08.998989 2026] [security2:error] [pid 11274:tid 11553] [client 40.83.93.50:9052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/hello.php"] [unique_id "apK-iGbX5DA3XO6e_qRfMgAAAXU"]
[Sat Aug 29 05:12:09.006894 2026] [security2:error] [pid 11274:tid 11549] [client 4.205.62.107:63337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/kerang.php"] [unique_id "apK-iWbX5DA3XO6e_qRfMwAAAXE"]
[Sat Aug 29 05:12:09.011007 2026] [security2:error] [pid 11274:tid 11521] [client 20.104.18.15:29123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/she11.php"] [unique_id "apK-iWbX5DA3XO6e_qRfNAAAAVY"]
[Sat Aug 29 05:12:09.017671 2026] [security2:error] [pid 1321:tid 1583] [client 4.205.62.107:60340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/fns.php"] [unique_id "apK-iWjCPtor9NZ-byQHLAAABpo"]
[Sat Aug 29 05:12:09.021437 2026] [security2:error] [pid 1321:tid 1599] [client 20.104.104.62:27018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "waysidebaptistmission.lifesosweet.com"] [uri "/index/function.php"] [unique_id "apK-iWjCPtor9NZ-byQHLQAABqo"]
[Sat Aug 29 05:12:09.053756 2026] [security2:error] [pid 1321:tid 1504] [client 93.123.109.228:43248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/stripe/.env"] [unique_id "apK-iWjCPtor9NZ-byQHLgAABkw"]
[Sat Aug 29 05:12:09.062867 2026] [security2:error] [pid 11274:tid 11565] [client 20.104.104.62:8840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/alog.php"] [unique_id "apK-iWbX5DA3XO6e_qRfPQAAAYE"]
[Sat Aug 29 05:12:09.073953 2026] [security2:error] [pid 11274:tid 11498] [client 20.48.250.41:49595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/s1.php"] [unique_id "apK-iWbX5DA3XO6e_qRfQQAAAT8"]
[Sat Aug 29 05:12:09.075822 2026] [security2:error] [pid 11274:tid 11512] [client 103.171.189.88:56453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-iWbX5DA3XO6e_qRfQgAAAU0"]
[Sat Aug 29 05:12:09.075925 2026] [security2:error] [pid 11274:tid 11512] [client 103.171.189.88:56453] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-iWbX5DA3XO6e_qRfQgAAAU0"]
[Sat Aug 29 05:12:09.082743 2026] [security2:error] [pid 11274:tid 11468] [client 68.155.159.216:23396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wzy.php"] [unique_id "apK-iWbX5DA3XO6e_qRfQwAAASI"]
[Sat Aug 29 05:12:09.101619 2026] [security2:error] [pid 11274:tid 11526] [client 20.48.250.41:24542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/w1px.php"] [unique_id "apK-iWbX5DA3XO6e_qRfRwAAAVs"]
[Sat Aug 29 05:12:09.110867 2026] [security2:error] [pid 1321:tid 1553] [client 93.123.109.228:43364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/admin/phpinfo.php"] [unique_id "apK-iWjCPtor9NZ-byQHMQAABnw"]
[Sat Aug 29 05:12:09.119663 2026] [security2:error] [pid 1321:tid 1550] [client 158.23.147.79:7150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/radio.php"] [unique_id "apK-iWjCPtor9NZ-byQHMgAABnk"]
[Sat Aug 29 05:12:09.120500 2026] [security2:error] [pid 11274:tid 11504] [client 158.23.147.79:63273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK-iWbX5DA3XO6e_qRfSgAAAUU"]
[Sat Aug 29 05:12:09.128883 2026] [security2:error] [pid 11274:tid 11508] [client 20.151.200.44:27620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/sao.php"] [unique_id "apK-iWbX5DA3XO6e_qRfTQAAAUk"]
[Sat Aug 29 05:12:09.129218 2026] [security2:error] [pid 1321:tid 1615] [client 158.158.54.35:1471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wp-themes.php"] [unique_id "apK-iWjCPtor9NZ-byQHMwAABro"]
[Sat Aug 29 05:12:09.130041 2026] [security2:error] [pid 1321:tid 1549] [client 20.52.41.200:5137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-logs.php"] [unique_id "apK-iWjCPtor9NZ-byQHNAAABng"]
[Sat Aug 29 05:12:09.130983 2026] [security2:error] [pid 11274:tid 11490] [client 52.139.37.240:14465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/c1.php"] [unique_id "apK-iWbX5DA3XO6e_qRfTwAAATc"]
[Sat Aug 29 05:12:09.136992 2026] [security2:error] [pid 11274:tid 11520] [client 68.155.159.216:21472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/classwithtostring.php"] [unique_id "apK-iWbX5DA3XO6e_qRfUQAAAVU"]
[Sat Aug 29 05:12:09.140989 2026] [security2:error] [pid 1321:tid 1593] [client 20.52.41.200:2729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-content/uploads/min.php"] [unique_id "apK-iWjCPtor9NZ-byQHNQAABqQ"]
[Sat Aug 29 05:12:09.149931 2026] [security2:error] [pid 11274:tid 11559] [client 4.205.62.107:5511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/phpinfo01.php"] [unique_id "apK-iWbX5DA3XO6e_qRfVQAAAXs"]
[Sat Aug 29 05:12:09.151070 2026] [security2:error] [pid 11274:tid 11571] [client 20.104.18.15:29136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/kerang.php"] [unique_id "apK-iWbX5DA3XO6e_qRfVgAAAYc"]
[Sat Aug 29 05:12:09.152200 2026] [security2:error] [pid 11274:tid 11534] [client 20.151.200.44:63667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/xcre1.php"] [unique_id "apK-iWbX5DA3XO6e_qRfWAAAAWM"]
[Sat Aug 29 05:12:09.152227 2026] [security2:error] [pid 11274:tid 11496] [client 158.158.54.35:18507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/txets.php"] [unique_id "apK-iWbX5DA3XO6e_qRfVwAAAT0"]
[Sat Aug 29 05:12:09.172767 2026] [security2:error] [pid 11274:tid 11475] [client 20.104.104.62:20838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/images/alfashell.php"] [unique_id "apK-iWbX5DA3XO6e_qRfXgAAASk"]
[Sat Aug 29 05:12:09.173946 2026] [security2:error] [pid 11274:tid 11524] [client 20.48.250.41:39828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/f35.php"] [unique_id "apK-iWbX5DA3XO6e_qRfXwAAAVk"]
[Sat Aug 29 05:12:09.185681 2026] [security2:error] [pid 11274:tid 11444] [client 20.104.18.15:29168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/mac.php"] [unique_id "apK-iWbX5DA3XO6e_qRfYAAAAQo"]
[Sat Aug 29 05:12:09.198852 2026] [security2:error] [pid 1321:tid 1595] [client 93.123.109.228:43300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/admin_phpinfo.php"] [unique_id "apK-iWjCPtor9NZ-byQHPAAABqY"]
[Sat Aug 29 05:12:09.204109 2026] [security2:error] [pid 11274:tid 11536] [client 20.104.104.62:48119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/adin.php"] [unique_id "apK-iWbX5DA3XO6e_qRfZgAAAWU"]
[Sat Aug 29 05:12:09.209845 2026] [security2:error] [pid 11274:tid 11495] [client 34.169.171.101:9038] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/web.config"] [unique_id "apK-iWbX5DA3XO6e_qRfagAAATw"]
[Sat Aug 29 05:12:09.215951 2026] [security2:error] [pid 1321:tid 1517] [client 34.169.171.101:9048] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "mail.forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-iWjCPtor9NZ-byQHPQAABlk"]
[Sat Aug 29 05:12:09.217085 2026] [security2:error] [pid 11274:tid 11483] [client 20.104.104.62:27107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "waysidebaptistmission.lifesosweet.com"] [uri "/rip.php"] [unique_id "apK-iWbX5DA3XO6e_qRfawAAATA"]
[Sat Aug 29 05:12:09.217843 2026] [security2:error] [pid 11274:tid 11514] [client 20.48.250.41:42907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/0byte.php"] [unique_id "apK-iWbX5DA3XO6e_qRfbAAAAU8"]
[Sat Aug 29 05:12:09.218373 2026] [security2:error] [pid 11274:tid 11471] [client 40.83.93.50:20644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/NewFile.php"] [unique_id "apK-iWbX5DA3XO6e_qRfbQAAASU"]
[Sat Aug 29 05:12:09.219753 2026] [security2:error] [pid 11274:tid 11451] [client 34.169.171.101:9078] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.forensicengineernj.com"] [uri "/.s3cfg"] [unique_id "apK-iWbX5DA3XO6e_qRfbwAAARE"]
[Sat Aug 29 05:12:09.228337 2026] [security2:error] [pid 11274:tid 11553] [client 34.169.171.101:9160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.171.169.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forensicengineernj.com"] [uri "/configuration.php.bak"] [unique_id "apK-iWbX5DA3XO6e_qRfdQAAAXU"]
[Sat Aug 29 05:12:09.228483 2026] [security2:error] [pid 11274:tid 11553] [client 34.169.171.101:9160] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "409"] [hostname "mail.forensicengineernj.com"] [uri "/configuration.php.bak"] [unique_id "apK-iWbX5DA3XO6e_qRfdQAAAXU"]
[Sat Aug 29 05:12:09.228920 2026] [security2:error] [pid 1321:tid 1563] [client 34.169.171.101:9170] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.forensicengineernj.com"] [uri "/cgi-sys/404.html"] [unique_id "apK-iWjCPtor9NZ-byQHQAAABoY"]
[Sat Aug 29 05:12:09.229603 2026] [security2:error] [pid 11274:tid 11464] [client 93.123.109.228:43360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/administrator/.env"] [unique_id "apK-iWbX5DA3XO6e_qRfdgAAAR4"]
[Sat Aug 29 05:12:09.254789 2026] [security2:error] [pid 1321:tid 1523] [client 34.169.171.101:9048] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-iWjCPtor9NZ-byQHQgAABl8"], referer: https://mail.forensicengineernj.com/auth.json
[Sat Aug 29 05:12:09.268230 2026] [security2:error] [pid 11274:tid 11454] [client 93.123.109.228:52090] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/terraform.tfstate.backup"] [unique_id "apK-iWbX5DA3XO6e_qRfhAAAARQ"]
[Sat Aug 29 05:12:09.273918 2026] [security2:error] [pid 11274:tid 11485] [client 93.123.109.228:43596] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/api-backend/.env"] [unique_id "apK-iWbX5DA3XO6e_qRfhwAAATI"]
[Sat Aug 29 05:12:09.279708 2026] [security2:error] [pid 11274:tid 11561] [client 93.123.109.228:43426] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/api-node/.env"] [unique_id "apK-iWbX5DA3XO6e_qRfiQAAAX0"]
[Sat Aug 29 05:12:09.291945 2026] [security2:error] [pid 11274:tid 11456] [client 20.48.250.41:24467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/to.php"] [unique_id "apK-iWbX5DA3XO6e_qRfjAAAARY"]
[Sat Aug 29 05:12:09.297700 2026] [security2:error] [pid 11274:tid 11560] [client 45.148.10.62:52472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zvi.buu.mybluehost.me"] [uri "/wp-config.php"] [unique_id "apK-iWbX5DA3XO6e_qRfjQAAAXw"]
[Sat Aug 29 05:12:09.305980 2026] [security2:error] [pid 11274:tid 11475] [client 20.151.200.44:63154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/str.php"] [unique_id "apK-iWbX5DA3XO6e_qRfkAAAASk"]
[Sat Aug 29 05:12:09.311565 2026] [security2:error] [pid 11274:tid 11530] [client 20.151.200.44:63631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/motu.php"] [unique_id "apK-iWbX5DA3XO6e_qRfkwAAAV8"]
[Sat Aug 29 05:12:09.323584 2026] [security2:error] [pid 11274:tid 11526] [client 52.139.37.240:14467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/index.php/feed/atom/"] [unique_id "apK-iWbX5DA3XO6e_qRflAAAAVs"]
[Sat Aug 29 05:12:09.347559 2026] [security2:error] [pid 1321:tid 1588] [client 20.48.250.41:42888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/xr.php"] [unique_id "apK-iWjCPtor9NZ-byQHSAAABp8"]
[Sat Aug 29 05:12:09.349102 2026] [security2:error] [pid 11274:tid 11503] [client 93.123.109.228:43332] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/api/.env"] [unique_id "apK-iWbX5DA3XO6e_qRflgAAAUQ"]
[Sat Aug 29 05:12:09.351443 2026] [security2:error] [pid 11274:tid 11473] [client 20.104.104.62:48115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/sf9.php"] [unique_id "apK-iWbX5DA3XO6e_qRfmAAAASc"]
[Sat Aug 29 05:12:09.382844 2026] [security2:error] [pid 11274:tid 11545] [client 20.48.250.41:39913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/wen.php"] [unique_id "apK-iWbX5DA3XO6e_qRfogAAAW0"]
[Sat Aug 29 05:12:09.398085 2026] [http2:warn] [pid 1041789:tid 1041934] [client 216.73.217.59:3281] h2_stream(1041789-380-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:12:09.398941 2026] [security2:error] [pid 11274:tid 11549] [client 4.205.62.107:64969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/vx.php"] [unique_id "apK-iWbX5DA3XO6e_qRfpwAAAXE"]
[Sat Aug 29 05:12:09.407410 2026] [security2:error] [pid 11274:tid 11512] [client 158.23.147.79:57016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/bk/index.php"] [unique_id "apK-iWbX5DA3XO6e_qRfqQAAAU0"]
[Sat Aug 29 05:12:09.411826 2026] [security2:error] [pid 11274:tid 11445] [client 93.123.109.228:43152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/test.php"] [unique_id "apK-iWbX5DA3XO6e_qRfqwAAAQs"]
[Sat Aug 29 05:12:09.424167 2026] [security2:error] [pid 11274:tid 11466] [client 93.123.109.228:52090] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/test/.env"] [unique_id "apK-iWbX5DA3XO6e_qRfrgAAASA"]
[Sat Aug 29 05:12:09.439364 2026] [security2:error] [pid 1321:tid 1567] [client 20.100.175.163:14116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/classwithtostring.php"] [unique_id "apK-iWjCPtor9NZ-byQHTQAABoo"]
[Sat Aug 29 05:12:09.439658 2026] [security2:error] [pid 11274:tid 11508] [client 20.240.128.207:17638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/222.php"] [unique_id "apK-iWbX5DA3XO6e_qRfsgAAAUk"]
[Sat Aug 29 05:12:09.448684 2026] [security2:error] [pid 1321:tid 1498] [client 20.240.128.207:8136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/xxx.php"] [unique_id "apK-iWjCPtor9NZ-byQHTwAABkY"]
[Sat Aug 29 05:12:09.452278 2026] [security2:error] [pid 1321:tid 1576] [client 68.155.159.216:44004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK-iWjCPtor9NZ-byQHUAAABpM"]
[Sat Aug 29 05:12:09.456913 2026] [security2:error] [pid 11274:tid 11421] [remote 74.7.227.154:55336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK-iWbX5DA3XO6e_qRftAABe2s"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Finsert-headers-and-footers%2Fincludes%2Fconditional-logic
[Sat Aug 29 05:12:09.460610 2026] [security2:error] [pid 1321:tid 1512] [client 20.48.250.41:24546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/thui.php"] [unique_id "apK-iWjCPtor9NZ-byQHUQAABlQ"]
[Sat Aug 29 05:12:09.472712 2026] [autoindex:error] [pid 11274:tid 11521] [client 20.104.104.62:27058] AH01276: Cannot serve directory /home1/lifesosw/public_html/whitesands2/wp-admin/maint/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:12:09.477228 2026] [security2:error] [pid 11274:tid 11496] [client 20.48.250.41:42898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/h02ugyh.php"] [unique_id "apK-iWbX5DA3XO6e_qRftgAAAT0"]
[Sat Aug 29 05:12:09.483246 2026] [security2:error] [pid 11274:tid 11476] [client 93.123.109.228:43110] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/user/.env"] [unique_id "apK-iWbX5DA3XO6e_qRfvAAAASo"]
[Sat Aug 29 05:12:09.502802 2026] [security2:error] [pid 11274:tid 11475] [client 93.123.109.228:43332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/api/info.php"] [unique_id "apK-iWbX5DA3XO6e_qRfwQAAASk"]
[Sat Aug 29 05:12:09.503838 2026] [security2:error] [pid 11274:tid 11543] [client 158.23.147.79:50050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/wp-admin/dropdown.php"] [unique_id "apK-iWbX5DA3XO6e_qRfwgAAAWs"]
[Sat Aug 29 05:12:09.505364 2026] [security2:error] [pid 11274:tid 11526] [client 20.104.104.62:46213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/lte7.php"] [unique_id "apK-iWbX5DA3XO6e_qRfwwAAAVs"]
[Sat Aug 29 05:12:09.511255 2026] [security2:error] [pid 11274:tid 11507] [client 93.123.109.228:52126] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/v1/.env"] [unique_id "apK-iWbX5DA3XO6e_qRfxgAAAUg"]
[Sat Aug 29 05:12:09.515273 2026] [security2:error] [pid 11274:tid 11503] [client 20.104.104.62:40206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/images/gelay.php"] [unique_id "apK-iWbX5DA3XO6e_qRfxwAAAUQ"]
[Sat Aug 29 05:12:09.525322 2026] [security2:error] [pid 1321:tid 1522] [client 40.83.93.50:9074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/fi2.php"] [unique_id "apK-iWjCPtor9NZ-byQHWAAABl4"]
[Sat Aug 29 05:12:09.528852 2026] [security2:error] [pid 11274:tid 11483] [client 20.151.200.44:21807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/mega.php"] [unique_id "apK-iWbX5DA3XO6e_qRfygAAATA"]
[Sat Aug 29 05:12:09.529514 2026] [security2:error] [pid 11274:tid 11473] [client 93.123.109.228:51954] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/v2/.env"] [unique_id "apK-iWbX5DA3XO6e_qRfyQAAASc"]
[Sat Aug 29 05:12:09.531400 2026] [security2:error] [pid 1321:tid 1610] [client 52.139.37.240:14481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/root.php"] [unique_id "apK-iWjCPtor9NZ-byQHWQAABrU"]
[Sat Aug 29 05:12:09.536960 2026] [security2:error] [pid 11274:tid 11563] [client 20.104.104.62:27058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "waysidebaptistmission.lifesosweet.com"] [uri "/wp-content.php"] [unique_id "apK-iWbX5DA3XO6e_qRfzAAAAX8"]
[Sat Aug 29 05:12:09.540726 2026] [security2:error] [pid 11274:tid 11514] [client 68.155.159.216:14194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK-iWbX5DA3XO6e_qRfzwAAAU8"]
[Sat Aug 29 05:12:09.546447 2026] [security2:error] [pid 1321:tid 1564] [client 45.148.10.62:52442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "skycoatingsports.com"] [uri "/test.php"] [unique_id "apK-iWjCPtor9NZ-byQHXAAABoc"]
[Sat Aug 29 05:12:09.551916 2026] [security2:error] [pid 1321:tid 1489] [client 20.48.250.41:39809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/inc.php"] [unique_id "apK-iWjCPtor9NZ-byQHXQAABj0"]
[Sat Aug 29 05:12:09.560565 2026] [security2:error] [pid 1321:tid 1519] [client 20.151.200.44:55617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/shelp.php"] [unique_id "apK-iWjCPtor9NZ-byQHXgAABls"]
[Sat Aug 29 05:12:09.573223 2026] [security2:error] [pid 1321:tid 1573] [client 20.52.41.200:4769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-admin/css/about.php"] [unique_id "apK-iWjCPtor9NZ-byQHXwAABpA"]
[Sat Aug 29 05:12:09.579742 2026] [security2:error] [pid 1321:tid 1565] [client 158.158.54.35:15050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wp-trackback.php"] [unique_id "apK-iWjCPtor9NZ-byQHYAAABog"]
[Sat Aug 29 05:12:09.583934 2026] [security2:error] [pid 11274:tid 11512] [client 4.205.62.107:61678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/333.php"] [unique_id "apK-iWbX5DA3XO6e_qRf1QAAAU0"]
[Sat Aug 29 05:12:09.591635 2026] [security2:error] [pid 11274:tid 11445] [client 20.104.104.62:48719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/999.php"] [unique_id "apK-iWbX5DA3XO6e_qRf2AAAAQs"]
[Sat Aug 29 05:12:09.591650 2026] [security2:error] [pid 11274:tid 11461] [client 158.23.147.79:39327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK-iWbX5DA3XO6e_qRf2QAAARs"]
[Sat Aug 29 05:12:09.593268 2026] [security2:error] [pid 11274:tid 11500] [client 20.52.41.200:2676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK-iWbX5DA3XO6e_qRf2gAAAUE"]
[Sat Aug 29 05:12:09.605058 2026] [security2:error] [pid 1321:tid 1526] [client 93.123.109.228:43248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/v3/.env"] [unique_id "apK-iWjCPtor9NZ-byQHYQAABmI"]
[Sat Aug 29 05:12:09.606055 2026] [security2:error] [pid 11274:tid 11555] [client 47.128.25.224:44088] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "fieldssketchbook.com"] [uri "/robots.txt"] [unique_id "apK-iWbX5DA3XO6e_qRf3QAAAXc"]
[Sat Aug 29 05:12:09.619911 2026] [security2:error] [pid 1321:tid 1492] [client 4.205.62.107:6786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/configuration.php"] [unique_id "apK-iWjCPtor9NZ-byQHYwAABkA"]
[Sat Aug 29 05:12:09.628855 2026] [security2:error] [pid 1321:tid 1504] [client 20.151.200.44:63623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/wefile.php"] [unique_id "apK-iWjCPtor9NZ-byQHZgAABkw"]
[Sat Aug 29 05:12:09.640403 2026] [security2:error] [pid 11274:tid 11489] [client 213.202.253.4:64825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/txets.php"] [unique_id "apK-iWbX5DA3XO6e_qRf4gAAATY"], referer: www.google.com
[Sat Aug 29 05:12:09.641103 2026] [security2:error] [pid 11274:tid 11569] [client 20.104.104.62:48083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/tanjiro.php"] [unique_id "apK-iWbX5DA3XO6e_qRf4wAAAYU"]
[Sat Aug 29 05:12:09.647080 2026] [security2:error] [pid 1321:tid 1496] [client 20.48.250.41:42926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/xxw.php"] [unique_id "apK-iWjCPtor9NZ-byQHZwAABkQ"]
[Sat Aug 29 05:12:09.653320 2026] [security2:error] [pid 11274:tid 11449] [client 93.123.109.228:43576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/api/phpinfo.php"] [unique_id "apK-iWbX5DA3XO6e_qRf5wAAAQ8"]
[Sat Aug 29 05:12:09.704489 2026] [security2:error] [pid 11274:tid 11563] [client 45.148.10.62:52438] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "skycoatingsports.com"] [uri "/.env.backup"] [unique_id "apK-iWbX5DA3XO6e_qRf9gAAAX8"]
[Sat Aug 29 05:12:09.708090 2026] [security2:error] [pid 1321:tid 1601] [client 93.123.109.228:42914] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/back-api/.env"] [unique_id "apK-iWjCPtor9NZ-byQHawAABqw"]
[Sat Aug 29 05:12:09.709901 2026] [security2:error] [pid 11274:tid 11518] [client 4.205.62.107:60994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/ah25.php"] [unique_id "apK-iWbX5DA3XO6e_qRf9wAAAVM"]
[Sat Aug 29 05:12:09.711143 2026] [security2:error] [pid 11274:tid 11513] [client 20.48.250.41:24535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/Jcrop.php"] [unique_id "apK-iWbX5DA3XO6e_qRf-AAAAU4"]
[Sat Aug 29 05:12:09.711168 2026] [security2:error] [pid 1321:tid 1586] [client 20.220.204.93:59584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-iWjCPtor9NZ-byQHbAAABp0"]
[Sat Aug 29 05:12:09.711188 2026] [security2:error] [pid 1321:tid 1601] [client 68.155.159.216:55074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.angelesforestranch.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK-iWjCPtor9NZ-byQHbQAABqw"]
[Sat Aug 29 05:12:09.712909 2026] [security2:error] [pid 11274:tid 11332] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-admin/network/xmrlpc.php"] [unique_id "apK-iWbX5DA3XO6e_qRf-gABYxM"]
[Sat Aug 29 05:12:09.714183 2026] [security2:error] [pid 1321:tid 1595] [client 93.123.109.228:42976] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/back-end/.env"] [unique_id "apK-iWjCPtor9NZ-byQHbgAABqY"]
[Sat Aug 29 05:12:09.716099 2026] [security2:error] [pid 1321:tid 1577] [client 20.151.200.44:21944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/ww3.php"] [unique_id "apK-iWjCPtor9NZ-byQHbwAABpQ"]
[Sat Aug 29 05:12:09.718743 2026] [security2:error] [pid 1321:tid 1516] [client 20.197.61.180:1388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/1p.php"] [unique_id "apK-iWjCPtor9NZ-byQHcAAABlg"]
[Sat Aug 29 05:12:09.725711 2026] [security2:error] [pid 11274:tid 11464] [client 20.48.250.41:39899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/6bcwiqwj.php"] [unique_id "apK-iWbX5DA3XO6e_qRf_gAAAR4"]
[Sat Aug 29 05:12:09.725920 2026] [security2:error] [pid 11274:tid 11479] [client 52.139.37.240:14484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/shell.php"] [unique_id "apK-iWbX5DA3XO6e_qRf_wAAASw"]
[Sat Aug 29 05:12:09.738024 2026] [security2:error] [pid 11274:tid 11558] [client 40.83.93.50:4002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/config.php"] [unique_id "apK-iWbX5DA3XO6e_qRgAwAAAXo"]
[Sat Aug 29 05:12:09.763853 2026] [security2:error] [pid 11274:tid 11545] [client 93.123.109.228:42908] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/back/.env"] [unique_id "apK-iWbX5DA3XO6e_qRgCQAAAW0"]
[Sat Aug 29 05:12:09.767762 2026] [security2:error] [pid 11274:tid 11498] [client 93.123.109.228:43104] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/backend-api/.env"] [unique_id "apK-iWbX5DA3XO6e_qRgCgAAAT8"]
[Sat Aug 29 05:12:09.778918 2026] [security2:error] [pid 1321:tid 1607] [client 68.155.159.216:56562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-content/x/index.php"] [unique_id "apK-iWjCPtor9NZ-byQHdQAABrI"]
[Sat Aug 29 05:12:09.779253 2026] [security2:error] [pid 1321:tid 1518] [client 20.48.250.41:42911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/bolt.php"] [unique_id "apK-iWjCPtor9NZ-byQHdgAABlo"]
[Sat Aug 29 05:12:09.781794 2026] [security2:error] [pid 11274:tid 11450] [client 93.123.109.228:42948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK-iWbX5DA3XO6e_qRgDAAAARA"]
[Sat Aug 29 05:12:09.787604 2026] [security2:error] [pid 11274:tid 11445] [client 68.155.159.216:56829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/asd.php"] [unique_id "apK-iWbX5DA3XO6e_qRgDQAAAQs"]
[Sat Aug 29 05:12:09.788381 2026] [security2:error] [pid 11274:tid 11468] [client 20.104.104.62:8842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/Rk41.php"] [unique_id "apK-iWbX5DA3XO6e_qRgDgAAASI"]
[Sat Aug 29 05:12:09.790954 2026] [security2:error] [pid 11274:tid 11500] [client 4.205.62.107:28067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/mga.php"] [unique_id "apK-iWbX5DA3XO6e_qRgEAAAAUE"]
[Sat Aug 29 05:12:09.800697 2026] [autoindex:error] [pid 11274:tid 11526] [client 20.104.104.62:27028] AH01276: Cannot serve directory /home1/lifesosw/public_html/whitesands2/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:12:09.822882 2026] [security2:error] [pid 11274:tid 11403] [remote 192.250.227.13:34226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.227.250.192.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "conelec.cl"] [uri "/wp-login.php"] [unique_id "apK-iWbX5DA3XO6e_qRgEgABOVk"]
[Sat Aug 29 05:12:09.842628 2026] [security2:error] [pid 1321:tid 1542] [client 45.148.10.62:52474] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "mail.zvi.buu.mybluehost.me"] [uri "/wp-config.php.old"] [unique_id "apK-iWjCPtor9NZ-byQHegAABnI"]
[Sat Aug 29 05:12:09.852131 2026] [security2:error] [pid 11274:tid 11449] [client 20.151.200.44:63633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/EM.php"] [unique_id "apK-iWbX5DA3XO6e_qRgIAAAAQ8"]
[Sat Aug 29 05:12:09.867178 2026] [security2:error] [pid 11274:tid 11451] [client 45.148.10.62:52438] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "skycoatingsports.com"] [uri "/.env.old"] [unique_id "apK-iWbX5DA3XO6e_qRgIgAAARE"]
[Sat Aug 29 05:12:09.889843 2026] [security2:error] [pid 11274:tid 11494] [client 20.104.104.62:64762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/images/byps.php"] [unique_id "apK-iWbX5DA3XO6e_qRgKAAAATs"]
[Sat Aug 29 05:12:09.900269 2026] [security2:error] [pid 11274:tid 11479] [client 20.48.250.41:24555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/ws58.php"] [unique_id "apK-iWbX5DA3XO6e_qRgKgAAASw"]
[Sat Aug 29 05:12:09.915099 2026] [security2:error] [pid 11274:tid 11570] [client 20.48.250.41:39900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/easy.php"] [unique_id "apK-iWbX5DA3XO6e_qRgLQAAAYY"]
[Sat Aug 29 05:12:09.922855 2026] [security2:error] [pid 1321:tid 1610] [client 20.104.104.62:46209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/7logs.php"] [unique_id "apK-iWjCPtor9NZ-byQHfwAABrU"]
[Sat Aug 29 05:12:09.924671 2026] [security2:error] [pid 11274:tid 11501] [client 52.139.37.240:14477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/wp-admin/user/index.php"] [unique_id "apK-iWbX5DA3XO6e_qRgMgAAAUI"]
[Sat Aug 29 05:12:09.936727 2026] [security2:error] [pid 11274:tid 11505] [client 20.100.175.163:19918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/404.php"] [unique_id "apK-iWbX5DA3XO6e_qRgNQAAAUY"]
[Sat Aug 29 05:12:09.939029 2026] [security2:error] [pid 11274:tid 11468] [client 20.151.200.44:65156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/sko.php"] [unique_id "apK-iWbX5DA3XO6e_qRgNwAAASI"]
[Sat Aug 29 05:12:09.952608 2026] [security2:error] [pid 1321:tid 1507] [client 20.240.128.207:3850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/mini.php"] [unique_id "apK-iWjCPtor9NZ-byQHggAABk8"]
[Sat Aug 29 05:12:09.953705 2026] [security2:error] [pid 11274:tid 11480] [client 68.155.159.216:1887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-includes/index.php"] [unique_id "apK-iWbX5DA3XO6e_qRgPQAAAS0"]
[Sat Aug 29 05:12:09.957141 2026] [security2:error] [pid 11274:tid 11511] [client 158.23.147.79:14232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-includes/plugins.php"] [unique_id "apK-iWbX5DA3XO6e_qRgPgAAAUw"]
[Sat Aug 29 05:12:09.957466 2026] [autoindex:error] [pid 11274:tid 11563] [client 20.104.104.62:27028] AH01276: Cannot serve directory /home1/lifesosw/public_html/whitesands2/wp-admin/js/widgets/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:12:09.964834 2026] [security2:error] [pid 1321:tid 1474] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-admin/options-general.php"] [unique_id "apK-iWjCPtor9NZ-byQHhgAGm3M"]
[Sat Aug 29 05:12:09.968636 2026] [security2:error] [pid 1321:tid 1519] [client 93.123.109.228:43542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/apis/.env"] [unique_id "apK-iWjCPtor9NZ-byQHhAAABls"]
[Sat Aug 29 05:12:09.987193 2026] [security2:error] [pid 11274:tid 11541] [client 93.123.109.228:43232] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/var/www/.env"] [unique_id "apK-iWbX5DA3XO6e_qRgRgAAAWo"]
[Sat Aug 29 05:12:09.992211 2026] [security2:error] [pid 11274:tid 11551] [client 93.123.109.228:43230] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/var/www/html/.env"] [unique_id "apK-iWbX5DA3XO6e_qRgRwAAAXM"]
[Sat Aug 29 05:12:09.992212 2026] [security2:error] [pid 11274:tid 11449] [client 20.104.49.130:36083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/btyuio.php"] [unique_id "apK-iWbX5DA3XO6e_qRgSAAAAQ8"]
[Sat Aug 29 05:12:10.028224 2026] [security2:error] [pid 11274:tid 11514] [client 20.52.41.200:4963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/system_log.php"] [unique_id "apK-imbX5DA3XO6e_qRgUwAAAU8"]
[Sat Aug 29 05:12:10.029864 2026] [cgid:error] [pid 11274:tid 11479] [client 45.148.10.62:52438] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/skycoati/public_html/404.shtml
[Sat Aug 29 05:12:10.041505 2026] [security2:error] [pid 11274:tid 11464] [client 20.52.41.200:2194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/bthil.php"] [unique_id "apK-imbX5DA3XO6e_qRgWgAAAR4"]
[Sat Aug 29 05:12:10.046754 2026] [security2:error] [pid 11274:tid 11545] [client 20.48.250.41:24397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/xs.php"] [unique_id "apK-imbX5DA3XO6e_qRgXAAAAW0"]
[Sat Aug 29 05:12:10.047541 2026] [security2:error] [pid 1321:tid 1599] [client 93.123.109.228:42976] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/backup/.env"] [unique_id "apK-imjCPtor9NZ-byQHjAAABqo"]
[Sat Aug 29 05:12:10.055433 2026] [security2:error] [pid 11274:tid 11570] [client 20.151.200.44:27310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/uuu.php"] [unique_id "apK-imbX5DA3XO6e_qRgYQAAAYY"]
[Sat Aug 29 05:12:10.056785 2026] [security2:error] [pid 11274:tid 11515] [client 93.123.109.228:43596] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/app/.env"] [unique_id "apK-imbX5DA3XO6e_qRgYAAAAVA"]
[Sat Aug 29 05:12:10.065618 2026] [security2:error] [pid 11274:tid 11445] [client 93.123.109.228:43028] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/be/.env"] [unique_id "apK-imbX5DA3XO6e_qRgYgAAAQs"]
[Sat Aug 29 05:12:10.065813 2026] [security2:error] [pid 1321:tid 1492] [client 20.104.104.62:8878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/sf.php"] [unique_id "apK-imjCPtor9NZ-byQHjQAABkA"]
[Sat Aug 29 05:12:10.065863 2026] [security2:error] [pid 11274:tid 11495] [client 40.83.93.50:9037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/1p.php"] [unique_id "apK-imbX5DA3XO6e_qRgYwAAATw"]
[Sat Aug 29 05:12:10.066333 2026] [security2:error] [pid 11274:tid 11501] [client 20.48.250.41:42841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/rtx.php"] [unique_id "apK-imbX5DA3XO6e_qRgZAAAAUI"]
[Sat Aug 29 05:12:10.070465 2026] [autoindex:error] [pid 11274:tid 11568] [client 20.104.104.62:0] AH01276: Cannot serve directory /home1/lifesosw/public_html/whitesands2/wp-includes/ID3/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:12:10.091244 2026] [security2:error] [pid 11274:tid 11454] [client 158.158.54.35:22618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-content/themes/about.php"] [unique_id "apK-imbX5DA3XO6e_qRgZQAAARQ"]
[Sat Aug 29 05:12:10.093025 2026] [security2:error] [pid 1321:tid 1496] [client 93.123.109.228:42914] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/beta/.env"] [unique_id "apK-imjCPtor9NZ-byQHkAAABkQ"]
[Sat Aug 29 05:12:10.093311 2026] [security2:error] [pid 11274:tid 11489] [client 20.104.104.62:40219] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/images/bypass.php"] [unique_id "apK-imbX5DA3XO6e_qRgZgAAATY"]
[Sat Aug 29 05:12:10.094342 2026] [autoindex:error] [pid 1321:tid 1576] [client 158.158.54.35:1313] AH01276: Cannot serve directory /home2/charlov7/public_html/dev/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:12:10.127848 2026] [security2:error] [pid 11274:tid 11469] [client 20.48.250.41:39872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/fresh3.php"] [unique_id "apK-imbX5DA3XO6e_qRgbQAAASM"]
[Sat Aug 29 05:12:10.133825 2026] [security2:error] [pid 1321:tid 1574] [client 93.123.109.228:43248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/web/.env"] [unique_id "apK-imjCPtor9NZ-byQHlAAABpE"]
[Sat Aug 29 05:12:10.135236 2026] [security2:error] [pid 1321:tid 1532] [client 52.139.37.240:14499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/wp-content/plugins/linkpreview/il.php"] [unique_id "apK-imjCPtor9NZ-byQHlQAABmg"]
[Sat Aug 29 05:12:10.135450 2026] [security2:error] [pid 11274:tid 11449] [client 20.151.200.44:65212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/zoz.php"] [unique_id "apK-imbX5DA3XO6e_qRgcQAAAQ8"]
[Sat Aug 29 05:12:10.138698 2026] [security2:error] [pid 11274:tid 11493] [client 20.104.104.62:27028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "waysidebaptistmission.lifesosweet.com"] [uri "/ws.php"] [unique_id "apK-imbX5DA3XO6e_qRgcgAAATo"]
[Sat Aug 29 05:12:10.144740 2026] [security2:error] [pid 11274:tid 11490] [client 4.205.62.107:63349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/rem.php"] [unique_id "apK-imbX5DA3XO6e_qRgdQAAATc"]
[Sat Aug 29 05:12:10.146209 2026] [security2:error] [pid 1321:tid 1591] [client 68.155.159.216:43982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.theenprogroup.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK-imjCPtor9NZ-byQHlgAABqI"]
[Sat Aug 29 05:12:10.155091 2026] [security2:error] [pid 1321:tid 1601] [client 4.205.62.107:59100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/params.php"] [unique_id "apK-imjCPtor9NZ-byQHmAAABqw"]
[Sat Aug 29 05:12:10.191321 2026] [security2:error] [pid 11274:tid 11465] [client 68.155.159.216:23444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK-imbX5DA3XO6e_qRgfQAAAR8"]
[Sat Aug 29 05:12:10.200162 2026] [security2:error] [pid 11274:tid 11553] [client 45.148.10.62:52438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "skycoatingsports.com"] [uri "/.env.php.bak"] [unique_id "apK-imbX5DA3XO6e_qRggAAAAXU"]
[Sat Aug 29 05:12:10.204264 2026] [security2:error] [pid 1321:tid 1516] [client 20.104.104.62:46271] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/super.php"] [unique_id "apK-imjCPtor9NZ-byQHnAAABlg"]
[Sat Aug 29 05:12:10.216303 2026] [security2:error] [pid 11274:tid 11357] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-admin/options.php"] [unique_id "apK-imbX5DA3XO6e_qRghAABdCw"]
[Sat Aug 29 05:12:10.226048 2026] [security2:error] [pid 1321:tid 1563] [client 20.48.250.41:24398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/zu.php"] [unique_id "apK-imjCPtor9NZ-byQHnQAABoY"]
[Sat Aug 29 05:12:10.233338 2026] [security2:error] [pid 11274:tid 11560] [client 158.23.147.79:62743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK-imbX5DA3XO6e_qRghwAAAXw"]
[Sat Aug 29 05:12:10.235714 2026] [security2:error] [pid 11274:tid 11570] [client 20.104.104.62:48609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/sef.php"] [unique_id "apK-imbX5DA3XO6e_qRgiAAAAYY"]
[Sat Aug 29 05:12:10.238980 2026] [security2:error] [pid 11274:tid 11522] [client 158.23.147.79:7157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK-imbX5DA3XO6e_qRgigAAAVc"]
[Sat Aug 29 05:12:10.242046 2026] [security2:error] [pid 1321:tid 1514] [client 158.158.54.35:1313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/222.php"] [unique_id "apK-imjCPtor9NZ-byQHngAABlY"]
[Sat Aug 29 05:12:10.250384 2026] [security2:error] [pid 11274:tid 11445] [client 158.23.147.79:64494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/wp-includes/Text/about.php"] [unique_id "apK-imbX5DA3XO6e_qRgjQAAAQs"]
[Sat Aug 29 05:12:10.250872 2026] [security2:error] [pid 1321:tid 1529] [client 40.83.93.50:3724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/22.php"] [unique_id "apK-imjCPtor9NZ-byQHnwAABmU"]
[Sat Aug 29 05:12:10.259790 2026] [security2:error] [pid 11274:tid 11505] [client 68.155.159.216:56766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/install.php"] [unique_id "apK-imbX5DA3XO6e_qRgjwAAAUY"]
[Sat Aug 29 05:12:10.281693 2026] [security2:error] [pid 11274:tid 11497] [client 20.48.250.41:39820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/bgymj.php"] [unique_id "apK-imbX5DA3XO6e_qRglAAAAT4"]
[Sat Aug 29 05:12:10.300770 2026] [security2:error] [pid 1321:tid 1506] [client 20.240.128.207:1232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/tool.php"] [unique_id "apK-imjCPtor9NZ-byQHowAABk4"]
[Sat Aug 29 05:12:10.323078 2026] [security2:error] [pid 11274:tid 11490] [client 20.151.200.44:63022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/ca4.php"] [unique_id "apK-imbX5DA3XO6e_qRgmwAAATc"]
[Sat Aug 29 05:12:10.323113 2026] [security2:error] [pid 11274:tid 11473] [client 20.104.18.15:29175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/m.php"] [unique_id "apK-imbX5DA3XO6e_qRgmgAAASc"]
[Sat Aug 29 05:12:10.330393 2026] [security2:error] [pid 11274:tid 11456] [client 4.205.62.107:5519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/cxc.php"] [unique_id "apK-imbX5DA3XO6e_qRgnQAAARY"]
[Sat Aug 29 05:12:10.332298 2026] [security2:error] [pid 1321:tid 1595] [client 45.148.10.62:52490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zvi.buu.mybluehost.me"] [uri "/config.php"] [unique_id "apK-imjCPtor9NZ-byQHpgAABqY"]
[Sat Aug 29 05:12:10.333405 2026] [security2:error] [pid 1321:tid 1582] [client 93.123.109.228:52018] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/website/.env"] [unique_id "apK-imjCPtor9NZ-byQHpwAABpk"]
[Sat Aug 29 05:12:10.334454 2026] [security2:error] [pid 11274:tid 11484] [client 20.104.104.62:27112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "waysidebaptistmission.lifesosweet.com"] [uri "/0x.php"] [unique_id "apK-imbX5DA3XO6e_qRgoAAAATE"]
[Sat Aug 29 05:12:10.337117 2026] [security2:error] [pid 11274:tid 11507] [client 52.139.37.240:14507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/wp-header-json.php"] [unique_id "apK-imbX5DA3XO6e_qRgogAAAUg"]
[Sat Aug 29 05:12:10.338006 2026] [security2:error] [pid 11274:tid 11461] [client 20.104.18.15:29068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/simple.php"] [unique_id "apK-imbX5DA3XO6e_qRgowAAARs"]
[Sat Aug 29 05:12:10.345585 2026] [security2:error] [pid 11274:tid 11553] [client 93.123.109.228:42926] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/client/.env"] [unique_id "apK-imbX5DA3XO6e_qRgpAAAAXU"]
[Sat Aug 29 05:12:10.358479 2026] [security2:error] [pid 11274:tid 11543] [client 20.104.104.62:46269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/lufix1.php"] [unique_id "apK-imbX5DA3XO6e_qRgpgAAAWs"]
[Sat Aug 29 05:12:10.374339 2026] [security2:error] [pid 1321:tid 1531] [client 20.48.250.41:42885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/ckk.php"] [unique_id "apK-imjCPtor9NZ-byQHrAAABmc"]
[Sat Aug 29 05:12:10.382605 2026] [security2:error] [pid 1321:tid 1515] [client 45.148.10.62:52424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "skycoatingsports.com"] [uri "/.env.php"] [unique_id "apK-imjCPtor9NZ-byQHrQAABlc"]
[Sat Aug 29 05:12:10.389231 2026] [security2:error] [pid 11274:tid 11515] [client 93.123.109.228:43470] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/cms/.env"] [unique_id "apK-imbX5DA3XO6e_qRgqgAAAVA"]
[Sat Aug 29 05:12:10.402092 2026] [security2:error] [pid 11274:tid 11536] [client 158.23.147.79:58898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK-imbX5DA3XO6e_qRgrAAAAWU"]
[Sat Aug 29 05:12:10.427657 2026] [security2:error] [pid 11274:tid 11468] [client 20.100.175.163:17033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/php.php"] [unique_id "apK-imbX5DA3XO6e_qRgswAAASI"]
[Sat Aug 29 05:12:10.434298 2026] [security2:error] [pid 11274:tid 11485] [client 20.48.250.41:24387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/lanka.php"] [unique_id "apK-imbX5DA3XO6e_qRgtQAAATI"]
[Sat Aug 29 05:12:10.434504 2026] [security2:error] [pid 11274:tid 11492] [client 20.48.250.41:39929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/ws69.php"] [unique_id "apK-imbX5DA3XO6e_qRgtgAAATk"]
[Sat Aug 29 05:12:10.441011 2026] [security2:error] [pid 1321:tid 1596] [client 20.197.61.180:12908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/Njima.php"] [unique_id "apK-imjCPtor9NZ-byQHsQAABqc"]
[Sat Aug 29 05:12:10.452007 2026] [security2:error] [pid 11274:tid 11454] [client 20.240.128.207:11663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/aa.php"] [unique_id "apK-imbX5DA3XO6e_qRguQAAARQ"]
[Sat Aug 29 05:12:10.456738 2026] [security2:error] [pid 11274:tid 11369] [remote 93.123.109.228:33242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/config.php"] [unique_id "apK-imbX5DA3XO6e_qRguwABCjc"]
[Sat Aug 29 05:12:10.464428 2026] [security2:error] [pid 11274:tid 11483] [client 93.123.109.228:43258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/wp-config.php"] [unique_id "apK-imbX5DA3XO6e_qRgvAAAATA"]
[Sat Aug 29 05:12:10.466874 2026] [security2:error] [pid 1321:tid 1479] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-admin/panel.php"] [unique_id "apK-imjCPtor9NZ-byQHswAGUHg"]
[Sat Aug 29 05:12:10.496044 2026] [security2:error] [pid 1321:tid 1604] [client 93.123.109.228:52018] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/wp-config.php.new"] [unique_id "apK-imjCPtor9NZ-byQHtQAABq8"]
[Sat Aug 29 05:12:10.503959 2026] [security2:error] [pid 11274:tid 11496] [client 20.52.41.200:5171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/24.php"] [unique_id "apK-imbX5DA3XO6e_qRgxAAAAT0"]
[Sat Aug 29 05:12:10.504088 2026] [security2:error] [pid 1321:tid 1543] [client 93.123.109.228:43248] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/wp-config.php.bak"] [unique_id "apK-imjCPtor9NZ-byQHtgAABnM"]
[Sat Aug 29 05:12:10.504500 2026] [security2:error] [pid 11274:tid 11493] [client 20.104.104.62:46267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/hack.php"] [unique_id "apK-imbX5DA3XO6e_qRgxQAAATo"]
[Sat Aug 29 05:12:10.516008 2026] [security2:error] [pid 11274:tid 11490] [client 20.104.104.62:20734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/images/x.php"] [unique_id "apK-imbX5DA3XO6e_qRgxwAAATc"]
[Sat Aug 29 05:12:10.518427 2026] [security2:error] [pid 11274:tid 11473] [client 158.23.147.79:53569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.adillice.com"] [uri "/first.php"] [unique_id "apK-imbX5DA3XO6e_qRgyAAAASc"]
[Sat Aug 29 05:12:10.529894 2026] [security2:error] [pid 11274:tid 11508] [client 68.155.159.216:62779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK-imbX5DA3XO6e_qRgywAAAUk"]
[Sat Aug 29 05:12:10.530717 2026] [security2:error] [pid 11274:tid 11563] [client 20.104.104.62:27023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "waysidebaptistmission.lifesosweet.com"] [uri "/an.php"] [unique_id "apK-imbX5DA3XO6e_qRgzAAAAX8"]
[Sat Aug 29 05:12:10.536621 2026] [security2:error] [pid 11274:tid 11521] [client 52.139.37.240:14525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/zup.php"] [unique_id "apK-imbX5DA3XO6e_qRgzwAAAVY"]
[Sat Aug 29 05:12:10.536993 2026] [security2:error] [pid 11274:tid 11487] [client 4.205.62.107:64222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/ty.php"] [unique_id "apK-imbX5DA3XO6e_qRgzQAAATQ"]
[Sat Aug 29 05:12:10.540803 2026] [security2:error] [pid 11274:tid 11472] [client 40.83.93.50:14012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/Njima.php"] [unique_id "apK-imbX5DA3XO6e_qRg0AAAASY"]
[Sat Aug 29 05:12:10.541929 2026] [security2:error] [pid 11274:tid 11569] [client 158.158.54.35:4378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK-imbX5DA3XO6e_qRg0QAAAYU"]
[Sat Aug 29 05:12:10.542049 2026] [security2:error] [pid 11274:tid 11488] [client 93.123.109.228:43104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/config.php"] [unique_id "apK-imbX5DA3XO6e_qRg0gAAATU"]
[Sat Aug 29 05:12:10.553063 2026] [security2:error] [pid 11274:tid 11509] [client 20.48.250.41:49656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "simonmaquinaria.andresortega.org"] [uri "/R57.php"] [unique_id "apK-imbX5DA3XO6e_qRg1gAAAUo"]
[Sat Aug 29 05:12:10.565867 2026] [security2:error] [pid 11274:tid 11456] [client 93.123.109.228:43064] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/wp-config.php.old"] [unique_id "apK-imbX5DA3XO6e_qRg2AAAARY"]
[Sat Aug 29 05:12:10.569542 2026] [security2:error] [pid 11274:tid 11484] [client 20.48.250.41:39881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/ccs.php"] [unique_id "apK-imbX5DA3XO6e_qRg2QAAATE"]
[Sat Aug 29 05:12:10.572453 2026] [security2:error] [pid 11274:tid 11461] [client 20.220.204.93:58994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-imbX5DA3XO6e_qRg3QAAARs"]
[Sat Aug 29 05:12:10.577895 2026] [security2:error] [pid 11274:tid 11553] [client 68.155.159.216:43985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/file.php"] [unique_id "apK-imbX5DA3XO6e_qRg3gAAAXU"]
[Sat Aug 29 05:12:10.641180 2026] [security2:error] [pid 1321:tid 1510] [client 93.123.109.228:43138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "cpcontacts.hiraahospitals.com"] [uri "/___proxy_subdomain_cpcontacts/wp-content/mysql.sql"] [unique_id "apK-imjCPtor9NZ-byQHvQAABlI"]
[Sat Aug 29 05:12:10.646705 2026] [security2:error] [pid 1321:tid 1465] [remote 74.7.227.143:57312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.district3.ca"] [uri "/D3WEBlake.php"] [unique_id "apK-imjCPtor9NZ-byQHvwAGT2o"], referer: https://mail.district3.ca/
[Sat Aug 29 05:12:10.646839 2026] [security2:error] [pid 11274:tid 11477] [client 20.52.41.200:2195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/cv.php"] [unique_id "apK-imbX5DA3XO6e_qRg4wAAASs"]
[Sat Aug 29 05:12:10.647322 2026] [security2:error] [pid 1321:tid 1500] [client 20.104.104.62:48074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/155.php"] [unique_id "apK-imjCPtor9NZ-byQHwAAABkg"]
[Sat Aug 29 05:12:10.651702 2026] [security2:error] [pid 1321:tid 1490] [client 20.151.200.44:21811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/mmm.php"] [unique_id "apK-imjCPtor9NZ-byQHwQAABj4"]
[Sat Aug 29 05:12:10.652920 2026] [security2:error] [pid 1321:tid 1565] [client 20.151.200.44:27158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/private.php"] [unique_id "apK-imjCPtor9NZ-byQHwgAABog"]
[Sat Aug 29 05:12:10.659798 2026] [security2:error] [pid 11274:tid 11377] [remote 93.123.109.228:33242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/config/aws.php"] [unique_id "apK-imbX5DA3XO6e_qRg5gABNj8"]
[Sat Aug 29 05:12:10.671729 2026] [security2:error] [pid 11274:tid 11454] [client 20.104.49.130:64150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/xa.php"] [unique_id "apK-imbX5DA3XO6e_qRg6gAAARQ"]
[Sat Aug 29 05:12:10.679986 2026] [security2:error] [pid 11274:tid 11483] [client 93.123.109.228:43316] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/application/.env"] [unique_id "apK-imbX5DA3XO6e_qRg6wAAATA"]
[Sat Aug 29 05:12:10.687815 2026] [security2:error] [pid 11274:tid 11400] [remote 93.123.109.228:33242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/config/config.inc.php"] [unique_id "apK-imbX5DA3XO6e_qRg7AABD1Y"]
[Sat Aug 29 05:12:10.687832 2026] [security2:error] [pid 11274:tid 11530] [client 158.158.54.35:1319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/x.php"] [unique_id "apK-imbX5DA3XO6e_qRg7gAAAV8"]
[Sat Aug 29 05:12:10.691192 2026] [security2:error] [pid 11274:tid 11386] [remote 74.7.227.154:55336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK-imbX5DA3XO6e_qRg8AABPUg"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Finsert-headers-and-footers%2Fincludes%2Fgenerator
[Sat Aug 29 05:12:10.691244 2026] [security2:error] [pid 11274:tid 11467] [client 93.123.109.228:43560] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/apps/.env"] [unique_id "apK-imbX5DA3XO6e_qRg7wAAASE"]
[Sat Aug 29 05:12:10.698865 2026] [security2:error] [pid 11274:tid 11490] [client 158.23.147.79:39142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK-imbX5DA3XO6e_qRg8wAAATc"]
[Sat Aug 29 05:12:10.703859 2026] [security2:error] [pid 1321:tid 1492] [client 93.123.109.228:42976] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/config/.env"] [unique_id "apK-imjCPtor9NZ-byQHxQAABkA"]
[Sat Aug 29 05:12:10.717923 2026] [security2:error] [pid 11274:tid 11354] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-admin/pk.php"] [unique_id "apK-imbX5DA3XO6e_qRg9gABfyk"]
[Sat Aug 29 05:12:10.724093 2026] [security2:error] [pid 1321:tid 1522] [client 20.104.104.62:48513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/admin123.php"] [unique_id "apK-imjCPtor9NZ-byQHxwAABl4"]
[Sat Aug 29 05:12:10.729163 2026] [security2:error] [pid 1321:tid 1504] [client 4.205.62.107:61641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/G-in.php"] [unique_id "apK-imjCPtor9NZ-byQHyAAABkw"]
[Sat Aug 29 05:12:10.734153 2026] [security2:error] [pid 1321:tid 1573] [client 20.104.104.62:27053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "waysidebaptistmission.lifesosweet.com"] [uri "/dropdown.php"] [unique_id "apK-imjCPtor9NZ-byQHygAABpA"]
[Sat Aug 29 05:12:10.740643 2026] [security2:error] [pid 1321:tid 1526] [client 52.139.37.240:14468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/a9.php"] [unique_id "apK-imjCPtor9NZ-byQHywAABmI"]
[Sat Aug 29 05:12:10.758238 2026] [security2:error] [pid 11274:tid 11559] [client 20.104.104.62:40200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/images/leaf.php"] [unique_id "apK-imbX5DA3XO6e_qRg-gAAAXs"]
[Sat Aug 29 05:12:10.759770 2026] [security2:error] [pid 11274:tid 11520] [client 4.205.62.107:6282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/server_info.php"] [unique_id "apK-imbX5DA3XO6e_qRg-wAAAVU"]
[Sat Aug 29 05:12:10.762794 2026] [security2:error] [pid 11274:tid 11479] [client 40.83.93.50:3985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/bak.phps"] [unique_id "apK-imbX5DA3XO6e_qRg_AAAASw"]
[Sat Aug 29 05:12:10.765339 2026] [security2:error] [pid 11274:tid 11527] [client 20.48.250.41:39759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/mar.php"] [unique_id "apK-imbX5DA3XO6e_qRg_QAAAVw"]
[Sat Aug 29 05:12:10.773875 2026] [security2:error] [pid 11274:tid 11413] [remote 93.123.109.228:33242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/config/config.php"] [unique_id "apK-imbX5DA3XO6e_qRg_wABMWM"]
[Sat Aug 29 05:12:10.776641 2026] [security2:error] [pid 11274:tid 11334] [remote 93.123.109.228:33242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/config/env.php"] [unique_id "apK-imbX5DA3XO6e_qRhAAABMRU"]
[Sat Aug 29 05:12:10.783008 2026] [security2:error] [pid 11274:tid 11565] [client 158.23.147.79:24538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/cong.php"] [unique_id "apK-imbX5DA3XO6e_qRhBAAAAYE"]
[Sat Aug 29 05:12:10.786957 2026] [security2:error] [pid 11274:tid 11524] [client 20.48.250.41:24434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/gettest.php"] [unique_id "apK-imbX5DA3XO6e_qRhBwAAAVk"]
[Sat Aug 29 05:12:10.788536 2026] [security2:error] [pid 1321:tid 1561] [client 20.151.200.44:60915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/x0x.php"] [unique_id "apK-imjCPtor9NZ-byQHzQAABoQ"]
[Sat Aug 29 05:12:10.790853 2026] [security2:error] [pid 11274:tid 11505] [client 20.240.128.207:4331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/k.php"] [unique_id "apK-imbX5DA3XO6e_qRhCQAAAUY"]
[Sat Aug 29 05:12:10.809391 2026] [security2:error] [pid 1321:tid 1547] [client 20.104.104.62:8838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/mcd.php"] [unique_id "apK-imjCPtor9NZ-byQHzwAABnY"]
[Sat Aug 29 05:12:10.811250 2026] [security2:error] [pid 11274:tid 11339] [remote 93.123.109.228:33242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/config/module.config.php"] [unique_id "apK-imbX5DA3XO6e_qRhDAABMRo"]
[Sat Aug 29 05:12:10.816256 2026] [security2:error] [pid 1321:tid 1516] [client 68.155.159.216:55151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.angelesforestranch.com"] [uri "/file.php"] [unique_id "apK-imjCPtor9NZ-byQH0QAABlg"]
[Sat Aug 29 05:12:10.819090 2026] [security2:error] [pid 11274:tid 11420] [remote 93.123.109.228:33242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/config/nexmo.php"] [unique_id "apK-imbX5DA3XO6e_qRhDQABMWo"]
[Sat Aug 29 05:12:10.844871 2026] [security2:error] [pid 1321:tid 1549] [client 20.151.200.44:22211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/advanced.php"] [unique_id "apK-imjCPtor9NZ-byQH0wAABng"]
[Sat Aug 29 05:12:10.869011 2026] [security2:error] [pid 11274:tid 11331] [remote 93.123.109.228:33242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/config/stripe.php"] [unique_id "apK-imbX5DA3XO6e_qRhFgABMRI"]
[Sat Aug 29 05:12:10.870055 2026] [security2:error] [pid 11274:tid 11494] [client 4.205.62.107:62995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/groceries/index.php"] [unique_id "apK-imbX5DA3XO6e_qRhFwAAATs"]
[Sat Aug 29 05:12:10.872089 2026] [security2:error] [pid 1321:tid 1598] [client 20.104.49.130:60777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/v2.php"] [unique_id "apK-imjCPtor9NZ-byQH1QAABqk"]
[Sat Aug 29 05:12:10.872652 2026] [security2:error] [pid 11274:tid 11480] [client 93.123.109.228:43056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/config/aws.php"] [unique_id "apK-imbX5DA3XO6e_qRhGAAAAS0"]
[Sat Aug 29 05:12:10.921473 2026] [security2:error] [pid 11274:tid 11558] [client 20.151.200.44:55628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/13ede.php"] [unique_id "apK-imbX5DA3XO6e_qRhHQAAAXo"]
[Sat Aug 29 05:12:10.923833 2026] [security2:error] [pid 11274:tid 11472] [client 45.148.10.62:52518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zvi.buu.mybluehost.me"] [uri "/config.php.bak"] [unique_id "apK-imbX5DA3XO6e_qRhHgAAASY"]
[Sat Aug 29 05:12:10.927413 2026] [security2:error] [pid 11274:tid 11569] [client 20.100.175.163:8534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/init.php"] [unique_id "apK-imbX5DA3XO6e_qRhHwAAAYU"]
[Sat Aug 29 05:12:10.930222 2026] [security2:error] [pid 1321:tid 1612] [client 4.205.62.107:32524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/ccou.php"] [unique_id "apK-imjCPtor9NZ-byQH1wAABrc"]
[Sat Aug 29 05:12:10.932889 2026] [security2:error] [pid 11274:tid 11477] [client 20.104.104.62:27037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "waysidebaptistmission.lifesosweet.com"] [uri "/update/da222.php"] [unique_id "apK-imbX5DA3XO6e_qRhIAAAASs"]
[Sat Aug 29 05:12:10.941583 2026] [security2:error] [pid 11274:tid 11448] [client 52.139.37.240:14509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/admin/index.php"] [unique_id "apK-imbX5DA3XO6e_qRhIQAAAQ4"]
[Sat Aug 29 05:12:10.945345 2026] [security2:error] [pid 11274:tid 11493] [client 20.104.104.62:8232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/waw.php"] [unique_id "apK-imbX5DA3XO6e_qRhJQAAATo"]
[Sat Aug 29 05:12:10.948647 2026] [security2:error] [pid 11274:tid 11470] [client 20.48.250.41:39817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/ccu.php"] [unique_id "apK-imbX5DA3XO6e_qRhJgAAASQ"]
[Sat Aug 29 05:12:10.948672 2026] [security2:error] [pid 11274:tid 11503] [client 93.123.109.228:42878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/config/config.inc.php"] [unique_id "apK-imbX5DA3XO6e_qRhJwAAAUQ"]
[Sat Aug 29 05:12:10.956498 2026] [core:error] [pid 1321:tid 1601] [client 20.52.41.200:4775] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:10.956516 2026] [core:error] [pid 1321:tid 1601] [client 20.52.41.200:4775] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:10.961084 2026] [security2:error] [pid 11274:tid 11571] [client 20.48.250.41:24466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/35.php"] [unique_id "apK-imbX5DA3XO6e_qRhLQAAAYc"]
[Sat Aug 29 05:12:10.962136 2026] [cgid:error] [pid 11274:tid 11456] [client 45.148.10.62:52504] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/skycoati/public_html/404.shtml
[Sat Aug 29 05:12:10.967144 2026] [security2:error] [pid 1321:tid 1591] [client 20.240.128.207:11688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/c.php"] [unique_id "apK-imjCPtor9NZ-byQH2wAABqI"]
[Sat Aug 29 05:12:10.968280 2026] [security2:error] [pid 1321:tid 1402] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-admin/plugin-install.php"] [unique_id "apK-imjCPtor9NZ-byQH3AAGSiw"]
[Sat Aug 29 05:12:10.989178 2026] [security2:error] [pid 1321:tid 1563] [client 158.158.54.35:15717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-admin/index.php"] [unique_id "apK-imjCPtor9NZ-byQH3gAABoY"]
[Sat Aug 29 05:12:11.007960 2026] [security2:error] [pid 11274:tid 11461] [client 20.104.104.62:64753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/images/wso.php"] [unique_id "apK-i2bX5DA3XO6e_qRhNwAAARs"]
[Sat Aug 29 05:12:11.030795 2026] [security2:error] [pid 11274:tid 11546] [client 149.34.210.141:32933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-i2bX5DA3XO6e_qRhPAAAAW4"]
[Sat Aug 29 05:12:11.030939 2026] [security2:error] [pid 11274:tid 11546] [client 149.34.210.141:32933] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-i2bX5DA3XO6e_qRhPAAAAW4"]
[Sat Aug 29 05:12:11.035572 2026] [security2:error] [pid 11274:tid 11497] [client 20.151.200.44:62482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/blox.php"] [unique_id "apK-i2bX5DA3XO6e_qRhPQAAAT4"]
[Sat Aug 29 05:12:11.039854 2026] [security2:error] [pid 11274:tid 11505] [client 93.123.109.228:42908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/config/config.php"] [unique_id "apK-i2bX5DA3XO6e_qRhPwAAAUY"]
[Sat Aug 29 05:12:11.050352 2026] [security2:error] [pid 1321:tid 1523] [client 40.83.93.50:13977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/configs.php"] [unique_id "apK-i2jCPtor9NZ-byQH4gAABl8"]
[Sat Aug 29 05:12:11.058823 2026] [security2:error] [pid 11274:tid 11513] [client 68.155.159.216:2019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/mah.php"] [unique_id "apK-i2bX5DA3XO6e_qRhRQAAAU4"]
[Sat Aug 29 05:12:11.062130 2026] [security2:error] [pid 11274:tid 11476] [client 158.23.147.79:14243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK-i2bX5DA3XO6e_qRhRgAAASo"]
[Sat Aug 29 05:12:11.076511 2026] [security2:error] [pid 11274:tid 11536] [client 68.155.159.216:7056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/themes.php"] [unique_id "apK-i2bX5DA3XO6e_qRhSAAAAWU"]
[Sat Aug 29 05:12:11.079303 2026] [security2:error] [pid 11274:tid 11501] [client 20.104.104.62:48120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/x23.php"] [unique_id "apK-i2bX5DA3XO6e_qRhSgAAAUI"]
[Sat Aug 29 05:12:11.087250 2026] [security2:error] [pid 1321:tid 1605] [client 93.123.109.228:42976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/config/env.php"] [unique_id "apK-i2jCPtor9NZ-byQH4wAABrA"]
[Sat Aug 29 05:12:11.091578 2026] [security2:error] [pid 1321:tid 1582] [client 20.52.41.200:2187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-content/packed.php"] [unique_id "apK-i2jCPtor9NZ-byQH5AAABpk"]
[Sat Aug 29 05:12:11.106827 2026] [security2:error] [pid 11274:tid 11492] [client 93.123.109.228:43516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/config/module.config.php"] [unique_id "apK-i2bX5DA3XO6e_qRhTAAAATk"]
[Sat Aug 29 05:12:11.120394 2026] [security2:error] [pid 11274:tid 11543] [client 158.158.54.35:1318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/new.php"] [unique_id "apK-i2bX5DA3XO6e_qRhUAAAAWs"]
[Sat Aug 29 05:12:11.125221 2026] [security2:error] [pid 11274:tid 11519] [client 20.104.49.130:63510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pvillusions.com"] [uri "/gecko-new.php"] [unique_id "apK-i2bX5DA3XO6e_qRhUgAAAVQ"]
[Sat Aug 29 05:12:11.126103 2026] [security2:error] [pid 11274:tid 11489] [client 20.48.250.41:24396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/maraz.php"] [unique_id "apK-i2bX5DA3XO6e_qRhUwAAATY"]
[Sat Aug 29 05:12:11.135125 2026] [security2:error] [pid 11274:tid 11514] [client 52.139.37.240:15237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/makeasmtp.php"] [unique_id "apK-i2bX5DA3XO6e_qRhVgAAAU8"]
[Sat Aug 29 05:12:11.138058 2026] [cgid:error] [pid 11274:tid 11484] [client 45.148.10.62:52504] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/skycoati/public_html/404.shtml
[Sat Aug 29 05:12:11.152717 2026] [security2:error] [pid 1321:tid 1600] [client 68.155.159.216:14080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/log-mama/function.php"] [unique_id "apK-i2jCPtor9NZ-byQH5wAABqs"]
[Sat Aug 29 05:12:11.157744 2026] [security2:error] [pid 1321:tid 1543] [client 20.104.49.130:50563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/m.php"] [unique_id "apK-i2jCPtor9NZ-byQH6AAABnM"]
[Sat Aug 29 05:12:11.179077 2026] [security2:error] [pid 11274:tid 11569] [client 20.104.49.130:58107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/js.php"] [unique_id "apK-i2bX5DA3XO6e_qRhWQAAAYU"]
[Sat Aug 29 05:12:11.182633 2026] [security2:error] [pid 1321:tid 1595] [client 20.197.61.180:1373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/configs.php"] [unique_id "apK-i2jCPtor9NZ-byQH6gAABqY"]
[Sat Aug 29 05:12:11.188635 2026] [autoindex:error] [pid 11274:tid 11570] [client 20.104.104.62:27103] AH01276: Cannot serve directory /home1/lifesosw/public_html/whitesands2/wp-admin/css/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:12:11.194562 2026] [security2:error] [pid 11274:tid 11467] [client 20.220.204.93:58985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/ff1.php"] [unique_id "apK-i2bX5DA3XO6e_qRhXgAAASE"]
[Sat Aug 29 05:12:11.202538 2026] [security2:error] [pid 11274:tid 11470] [client 93.123.109.228:43040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/config/nexmo.php"] [unique_id "apK-i2bX5DA3XO6e_qRhXwAAASQ"]
[Sat Aug 29 05:12:11.208511 2026] [security2:error] [pid 1321:tid 1518] [client 43.173.179.239:47202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 239.179.173.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewforum.php"] [unique_id "apK-i2jCPtor9NZ-byQH6QAABlo"]
[Sat Aug 29 05:12:11.215708 2026] [security2:error] [pid 11274:tid 11472] [client 43.173.179.128:48680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.179.173.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewtopic.php"] [unique_id "apK-i2bX5DA3XO6e_qRhXQAAASY"]
[Sat Aug 29 05:12:11.221174 2026] [security2:error] [pid 11274:tid 11424] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-admin/plugins/img/themes/plugins/maintenance.php"] [unique_id "apK-i2bX5DA3XO6e_qRhYwABdG4"]
[Sat Aug 29 05:12:11.223896 2026] [security2:error] [pid 11274:tid 11449] [client 20.104.104.62:46238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/ws66.php"] [unique_id "apK-i2bX5DA3XO6e_qRhZAAAAQ8"]
[Sat Aug 29 05:12:11.227303 2026] [security2:error] [pid 11274:tid 11571] [client 20.48.250.41:39873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/ak.php"] [unique_id "apK-i2bX5DA3XO6e_qRhZgAAAYc"]
[Sat Aug 29 05:12:11.227417 2026] [security2:error] [pid 11274:tid 11504] [client 43.173.177.218:54054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 218.177.173.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewforum.php"] [unique_id "apK-i2bX5DA3XO6e_qRhYQAAAUU"]
[Sat Aug 29 05:12:11.258572 2026] [security2:error] [pid 11274:tid 11327] [remote 74.7.227.154:55336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK-i2bX5DA3XO6e_qRhcAABXg4"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Finsert-headers-and-footers%2Fincludes%2Fgenerator
[Sat Aug 29 05:12:11.262771 2026] [security2:error] [pid 11274:tid 11507] [client 93.123.109.228:43496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/config/stripe.php"] [unique_id "apK-i2bX5DA3XO6e_qRhcgAAAUg"]
[Sat Aug 29 05:12:11.271253 2026] [security2:error] [pid 11274:tid 11524] [client 20.48.250.41:24498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/kbfr.php"] [unique_id "apK-i2bX5DA3XO6e_qRhdAAAAVk"]
[Sat Aug 29 05:12:11.274077 2026] [security2:error] [pid 1321:tid 1490] [client 20.151.200.44:63739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/kcs.php"] [unique_id "apK-i2jCPtor9NZ-byQH7gAABj4"]
[Sat Aug 29 05:12:11.282807 2026] [security2:error] [pid 1321:tid 1565] [client 4.205.62.107:63351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/min.php"] [unique_id "apK-i2jCPtor9NZ-byQH7wAABog"]
[Sat Aug 29 05:12:11.287558 2026] [security2:error] [pid 11274:tid 11543] [client 20.240.128.207:8172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/root.php"] [unique_id "apK-i2bX5DA3XO6e_qRhdwAAAWs"]
[Sat Aug 29 05:12:11.295207 2026] [security2:error] [pid 11274:tid 11508] [client 4.205.62.107:60296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/gjm.php"] [unique_id "apK-i2bX5DA3XO6e_qRheAAAAUk"]
[Sat Aug 29 05:12:11.298050 2026] [security2:error] [pid 11274:tid 11476] [client 20.104.104.62:48583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/7h.php"] [unique_id "apK-i2bX5DA3XO6e_qRhegAAASo"]
[Sat Aug 29 05:12:11.298470 2026] [autoindex:error] [pid 11274:tid 11559] [client 20.104.104.62:27103] AH01276: Cannot serve directory /home1/lifesosw/public_html/whitesands2/wp-admin/includes/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:12:11.298563 2026] [security2:error] [pid 11274:tid 11526] [client 43.173.181.23:36974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 23.181.173.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewtopic.php"] [unique_id "apK-i2bX5DA3XO6e_qRhcQAAAVs"]
[Sat Aug 29 05:12:11.300756 2026] [security2:error] [pid 11274:tid 11558] [client 40.83.93.50:10885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/install.php"] [unique_id "apK-i2bX5DA3XO6e_qRhewAAAXo"]
[Sat Aug 29 05:12:11.312925 2026] [cgid:error] [pid 11274:tid 11500] [client 45.148.10.62:52504] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/skycoati/public_html/404.shtml
[Sat Aug 29 05:12:11.328866 2026] [security2:error] [pid 11274:tid 11565] [client 52.139.37.240:15286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/paku.php"] [unique_id "apK-i2bX5DA3XO6e_qRhhAAAAYE"]
[Sat Aug 29 05:12:11.329794 2026] [security2:error] [pid 11274:tid 11551] [client 93.123.109.228:43596] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/back-api/.env"] [unique_id "apK-i2bX5DA3XO6e_qRhgwAAAXM"]
[Sat Aug 29 05:12:11.331032 2026] [security2:error] [pid 11274:tid 11536] [client 20.104.49.130:46113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK-i2bX5DA3XO6e_qRhhQAAAWU"]
[Sat Aug 29 05:12:11.336689 2026] [security2:error] [pid 1321:tid 1495] [client 2.50.26.191:52953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.26.50.2.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "managemymood.com"] [uri "/xmlrpc.php"] [unique_id "apK-i2jCPtor9NZ-byQH8wAABkM"]
[Sat Aug 29 05:12:11.336824 2026] [security2:error] [pid 1321:tid 1495] [client 2.50.26.191:52953] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "managemymood.com"] [uri "/xmlrpc.php"] [unique_id "apK-i2jCPtor9NZ-byQH8wAABkM"]
[Sat Aug 29 05:12:11.337815 2026] [security2:error] [pid 1321:tid 1492] [client 93.123.109.228:43542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/back-end/.env"] [unique_id "apK-i2jCPtor9NZ-byQH9AAABkA"]
[Sat Aug 29 05:12:11.359616 2026] [security2:error] [pid 1321:tid 1496] [client 93.123.109.228:43400] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/back/.env"] [unique_id "apK-i2jCPtor9NZ-byQH9QAABkQ"]
[Sat Aug 29 05:12:11.366879 2026] [security2:error] [pid 11274:tid 11509] [client 20.104.104.62:48117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/Cok.php"] [unique_id "apK-i2bX5DA3XO6e_qRhiQAAAUo"]
[Sat Aug 29 05:12:11.368470 2026] [security2:error] [pid 11274:tid 11475] [client 93.123.109.228:43290] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/backend-api/.env"] [unique_id "apK-i2bX5DA3XO6e_qRhiAAAASk"]
[Sat Aug 29 05:12:11.388801 2026] [security2:error] [pid 11274:tid 11539] [client 68.155.159.216:56731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-content/x/index.php"] [unique_id "apK-i2bX5DA3XO6e_qRhiwAAAWg"]
[Sat Aug 29 05:12:11.390682 2026] [security2:error] [pid 11274:tid 11492] [client 93.123.109.228:43590] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK-i2bX5DA3XO6e_qRhjQAAATk"]
[Sat Aug 29 05:12:11.409703 2026] [security2:error] [pid 11274:tid 11489] [client 20.48.250.41:24524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/wp-act.php"] [unique_id "apK-i2bX5DA3XO6e_qRhkgAAATY"]
[Sat Aug 29 05:12:11.417680 2026] [security2:error] [pid 11274:tid 11527] [client 20.100.175.163:14140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "apK-i2bX5DA3XO6e_qRhlQAAAVw"]
[Sat Aug 29 05:12:11.422688 2026] [security2:error] [pid 11274:tid 11554] [client 20.52.41.200:5183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK-i2bX5DA3XO6e_qRhlgAAAXY"]
[Sat Aug 29 05:12:11.444774 2026] [security2:error] [pid 11274:tid 11451] [client 158.158.54.35:5551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/radio.php"] [unique_id "apK-i2bX5DA3XO6e_qRhmwAAARE"]
[Sat Aug 29 05:12:11.445564 2026] [security2:error] [pid 11274:tid 11459] [client 20.48.250.41:39815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/lib.php"] [unique_id "apK-i2bX5DA3XO6e_qRhnAAAARk"]
[Sat Aug 29 05:12:11.462117 2026] [security2:error] [pid 11274:tid 11468] [client 20.104.18.15:29139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/fling.php"] [unique_id "apK-i2bX5DA3XO6e_qRhnQAAASI"]
[Sat Aug 29 05:12:11.462292 2026] [security2:error] [pid 11274:tid 11448] [client 20.151.200.44:65175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/wsz.php"] [unique_id "apK-i2bX5DA3XO6e_qRhngAAAQ4"]
[Sat Aug 29 05:12:11.470959 2026] [security2:error] [pid 11274:tid 11486] [client 20.240.128.207:17658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/f.php"] [unique_id "apK-i2bX5DA3XO6e_qRhogAAATM"]
[Sat Aug 29 05:12:11.472461 2026] [security2:error] [pid 1321:tid 1461] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-admin/security.php"] [unique_id "apK-i2jCPtor9NZ-byQH-wAGnWY"]
[Sat Aug 29 05:12:11.480706 2026] [security2:error] [pid 1321:tid 1574] [client 195.178.110.101:64292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "naturalkneads.com"] [uri "/wp/index.php"] [unique_id "apK-i2jCPtor9NZ-byQH_AAABpE"], referer: https://naturalkneads.com/wp/wp-admin/
[Sat Aug 29 05:12:11.499652 2026] [security2:error] [pid 1321:tid 1562] [client 4.205.62.107:6131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/oiko6u.php"] [unique_id "apK-i2jCPtor9NZ-byQH_QAABoU"]
[Sat Aug 29 05:12:11.502018 2026] [security2:error] [pid 11274:tid 11445] [client 20.104.104.62:20880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/images/sym403.php"] [unique_id "apK-i2bX5DA3XO6e_qRhrQAAAQs"]
[Sat Aug 29 05:12:11.506979 2026] [security2:error] [pid 11274:tid 11506] [client 158.23.147.79:52626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/nf_tracking.php"] [unique_id "apK-i2bX5DA3XO6e_qRhsAAAAUc"]
[Sat Aug 29 05:12:11.515663 2026] [cgid:error] [pid 11274:tid 11524] [client 45.148.10.62:52504] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/skycoati/public_html/404.shtml
[Sat Aug 29 05:12:11.518024 2026] [security2:error] [pid 11274:tid 11549] [client 20.104.104.62:8835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/X7T6.php"] [unique_id "apK-i2bX5DA3XO6e_qRhtAAAAXE"]
[Sat Aug 29 05:12:11.518521 2026] [security2:error] [pid 11274:tid 11466] [client 20.104.18.15:29169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/xty.php"] [unique_id "apK-i2bX5DA3XO6e_qRhtQAAASA"]
[Sat Aug 29 05:12:11.524401 2026] [security2:error] [pid 11274:tid 11496] [client 52.139.37.240:14496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/rtx.php"] [unique_id "apK-i2bX5DA3XO6e_qRhtwAAAT0"]
[Sat Aug 29 05:12:11.540995 2026] [security2:error] [pid 11274:tid 11483] [client 20.52.41.200:2653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-admin/js/index.php"] [unique_id "apK-i2bX5DA3XO6e_qRhvQAAATA"]
[Sat Aug 29 05:12:11.557567 2026] [http2:warn] [pid 11274:tid 11446] [client 57.141.14.5:52756] h2_stream(11274-116-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:12:11.567779 2026] [security2:error] [pid 11274:tid 11555] [client 158.158.54.35:1286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/menu.php"] [unique_id "apK-i2bX5DA3XO6e_qRhwwAAAXc"]
[Sat Aug 29 05:12:11.577440 2026] [security2:error] [pid 11274:tid 11518] [client 20.48.250.41:24385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/24.php"] [unique_id "apK-i2bX5DA3XO6e_qRhxgAAAVM"]
[Sat Aug 29 05:12:11.583685 2026] [security2:error] [pid 11274:tid 11502] [client 40.83.93.50:11535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/disagraeed.php"] [unique_id "apK-i2bX5DA3XO6e_qRhyAAAAUM"]
[Sat Aug 29 05:12:11.588391 2026] [security2:error] [pid 11274:tid 11569] [client 93.123.109.228:43590] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/backup/.env"] [unique_id "apK-i2bX5DA3XO6e_qRhygAAAYU"]
[Sat Aug 29 05:12:11.597042 2026] [security2:error] [pid 11274:tid 11519] [client 20.104.18.15:29633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/btyuio.php"] [unique_id "apK-i2bX5DA3XO6e_qRhzAAAAVQ"]
[Sat Aug 29 05:12:11.612374 2026] [security2:error] [pid 11274:tid 11515] [client 93.123.109.228:43280] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/be/.env"] [unique_id "apK-i2bX5DA3XO6e_qRhzQAAAVA"]
[Sat Aug 29 05:12:11.619410 2026] [security2:error] [pid 11274:tid 11512] [client 93.123.109.228:43416] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/beta/.env"] [unique_id "apK-i2bX5DA3XO6e_qRh0AAAAU0"]
[Sat Aug 29 05:12:11.631328 2026] [security2:error] [pid 11274:tid 11561] [client 20.48.251.3:38676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-i2bX5DA3XO6e_qRh1gAAAX0"]
[Sat Aug 29 05:12:11.638447 2026] [security2:error] [pid 11274:tid 11530] [client 20.48.250.41:39767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/wp-style.php"] [unique_id "apK-i2bX5DA3XO6e_qRh2QAAAV8"]
[Sat Aug 29 05:12:11.649479 2026] [security2:error] [pid 1321:tid 1566] [client 68.155.159.216:35781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-admin.php"] [unique_id "apK-i2jCPtor9NZ-byQIAgAABok"]
[Sat Aug 29 05:12:11.650063 2026] [security2:error] [pid 11274:tid 11468] [client 20.104.104.62:8865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/see.php"] [unique_id "apK-i2bX5DA3XO6e_qRh3QAAASI"]
[Sat Aug 29 05:12:11.673690 2026] [security2:error] [pid 11274:tid 11538] [client 20.151.200.44:61504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.healthysmilestoday.com"] [uri "/fesa.php"] [unique_id "apK-i2bX5DA3XO6e_qRh4QAAAWc"]
[Sat Aug 29 05:12:11.674576 2026] [security2:error] [pid 11274:tid 11571] [client 4.205.62.107:64928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/adminer-4.7.6-en.php"] [unique_id "apK-i2bX5DA3XO6e_qRh4gAAAYc"]
[Sat Aug 29 05:12:11.675685 2026] [security2:error] [pid 1321:tid 1607] [client 20.151.200.44:63116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/msy.php"] [unique_id "apK-i2jCPtor9NZ-byQIAwAABrI"]
[Sat Aug 29 05:12:11.698420 2026] [security2:error] [pid 11274:tid 11488] [client 93.123.109.228:43048] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/crm/.env"] [unique_id "apK-i2bX5DA3XO6e_qRh6QAAATU"]
[Sat Aug 29 05:12:11.699585 2026] [security2:error] [pid 1321:tid 1612] [client 20.104.104.62:48597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/wp-gzone.php"] [unique_id "apK-i2jCPtor9NZ-byQIBQAABrc"]
[Sat Aug 29 05:12:11.706420 2026] [security2:error] [pid 11274:tid 11535] [client 20.220.204.93:18770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/t.php"] [unique_id "apK-i2bX5DA3XO6e_qRh7AAAAWQ"]
[Sat Aug 29 05:12:11.706693 2026] [cgid:error] [pid 11274:tid 11549] [client 45.148.10.62:52504] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/skycoati/public_html/404.shtml
[Sat Aug 29 05:12:11.718161 2026] [security2:error] [pid 1321:tid 1601] [client 93.123.109.228:43492] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/cron/.env"] [unique_id "apK-i2jCPtor9NZ-byQIBwAABqw"]
[Sat Aug 29 05:12:11.727377 2026] [security2:error] [pid 11274:tid 11328] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK-i2bX5DA3XO6e_qRh7wABWw8"]
[Sat Aug 29 05:12:11.729312 2026] [security2:error] [pid 11274:tid 11485] [client 52.139.37.240:15261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/update/da222.php"] [unique_id "apK-i2bX5DA3XO6e_qRh8AAAATI"]
[Sat Aug 29 05:12:11.733114 2026] [security2:error] [pid 11274:tid 11559] [client 20.48.250.41:24408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/155.php"] [unique_id "apK-i2bX5DA3XO6e_qRh8gAAAXs"]
[Sat Aug 29 05:12:11.736908 2026] [security2:error] [pid 11274:tid 11471] [client 93.123.109.228:43658] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/current/.env"] [unique_id "apK-i2bX5DA3XO6e_qRh8wAAASU"]
[Sat Aug 29 05:12:11.775042 2026] [security2:error] [pid 11274:tid 11503] [client 93.123.109.228:42926] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/demo/.env"] [unique_id "apK-i2bX5DA3XO6e_qRh-QAAAUQ"]
[Sat Aug 29 05:12:11.782541 2026] [security2:error] [pid 11274:tid 11518] [client 93.123.109.228:42948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/dev/.env"] [unique_id "apK-i2bX5DA3XO6e_qRh-wAAAVM"]
[Sat Aug 29 05:12:11.789614 2026] [security2:error] [pid 1321:tid 1531] [client 20.48.251.3:38161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-i2jCPtor9NZ-byQICgAABmc"]
[Sat Aug 29 05:12:11.790753 2026] [security2:error] [pid 11274:tid 11509] [client 93.123.109.228:43416] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/client/.env"] [unique_id "apK-i2bX5DA3XO6e_qRh_QAAAUo"]
[Sat Aug 29 05:12:11.795019 2026] [security2:error] [pid 11274:tid 11475] [client 20.104.104.62:46218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/horeg.php"] [unique_id "apK-i2bX5DA3XO6e_qRh_gAAASk"]
[Sat Aug 29 05:12:11.796507 2026] [security2:error] [pid 11274:tid 11494] [client 20.240.128.207:22182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/p.php"] [unique_id "apK-i2bX5DA3XO6e_qRh_wAAATs"]
[Sat Aug 29 05:12:11.806502 2026] [security2:error] [pid 11274:tid 11338] [remote 93.123.109.228:33242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/info.php"] [unique_id "apK-i2bX5DA3XO6e_qRiAAABVhk"]
[Sat Aug 29 05:12:11.808049 2026] [security2:error] [pid 11274:tid 11465] [client 40.83.93.50:4007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/colour.php"] [unique_id "apK-i2bX5DA3XO6e_qRiAQAAAR8"]
[Sat Aug 29 05:12:11.819963 2026] [security2:error] [pid 11274:tid 11456] [client 93.123.109.228:43524] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/develop/.env"] [unique_id "apK-i2bX5DA3XO6e_qRiAwAAARY"]
[Sat Aug 29 05:12:11.828727 2026] [security2:error] [pid 11274:tid 11515] [client 20.151.200.44:22213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/siln.php"] [unique_id "apK-i2bX5DA3XO6e_qRiBQAAAVA"]
[Sat Aug 29 05:12:11.836737 2026] [security2:error] [pid 11274:tid 11512] [client 20.48.250.41:39898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/browse.php"] [unique_id "apK-i2bX5DA3XO6e_qRiBwAAAU0"]
[Sat Aug 29 05:12:11.840827 2026] [security2:error] [pid 11274:tid 11546] [client 20.104.104.62:20671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/images/leafmailer2.8.php"] [unique_id "apK-i2bX5DA3XO6e_qRiCAAAAW4"]
[Sat Aug 29 05:12:11.851637 2026] [security2:error] [pid 11274:tid 11348] [remote 93.123.109.228:33242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/infophp.php"] [unique_id "apK-i2bX5DA3XO6e_qRiCgABViM"]
[Sat Aug 29 05:12:11.851986 2026] [security2:error] [pid 11274:tid 11435] [remote 93.123.109.228:33242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/infos.php"] [unique_id "apK-i2bX5DA3XO6e_qRiCwABVng"]
[Sat Aug 29 05:12:11.855934 2026] [security2:error] [pid 11274:tid 11530] [client 93.123.109.228:43426] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/cms/.env"] [unique_id "apK-i2bX5DA3XO6e_qRiDAAAAV8"]
[Sat Aug 29 05:12:11.867697 2026] [security2:error] [pid 1321:tid 1603] [client 4.205.62.107:61744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/apikeys.php"] [unique_id "apK-i2jCPtor9NZ-byQIDAAABq4"]
[Sat Aug 29 05:12:11.883982 2026] [security2:error] [pid 1321:tid 1544] [client 93.123.109.228:43492] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/development/.env"] [unique_id "apK-i2jCPtor9NZ-byQIDQAABnQ"]
[Sat Aug 29 05:12:11.888553 2026] [core:error] [pid 11274:tid 11496] [client 20.52.41.200:5144] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:11.888570 2026] [core:error] [pid 11274:tid 11496] [client 20.52.41.200:5144] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:11.892995 2026] [security2:error] [pid 11274:tid 11540] [client 158.23.147.79:24532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-includes/js/index.php"] [unique_id "apK-i2bX5DA3XO6e_qRiFAAAAWk"]
[Sat Aug 29 05:12:11.897089 2026] [security2:error] [pid 1321:tid 1597] [client 20.104.104.62:48515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/str.php"] [unique_id "apK-i2jCPtor9NZ-byQIDgAABqg"]
[Sat Aug 29 05:12:11.897415 2026] [security2:error] [pid 11274:tid 11551] [client 158.158.54.35:22611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/item.php"] [unique_id "apK-i2bX5DA3XO6e_qRiFQAAAXM"]
[Sat Aug 29 05:12:11.898727 2026] [security2:error] [pid 11274:tid 11483] [client 4.205.62.107:6293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/hosty.php"] [unique_id "apK-i2bX5DA3XO6e_qRiFgAAATA"]
[Sat Aug 29 05:12:11.899425 2026] [security2:error] [pid 11274:tid 11508] [client 20.48.250.41:24475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/file.php"] [unique_id "apK-i2bX5DA3XO6e_qRiFwAAAUk"]
[Sat Aug 29 05:12:11.903056 2026] [security2:error] [pid 11274:tid 11490] [client 45.148.10.62:52504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "skycoatingsports.com"] [uri "/wp-config.php"] [unique_id "apK-i2bX5DA3XO6e_qRiGAAAATc"]
[Sat Aug 29 05:12:11.913114 2026] [security2:error] [pid 11274:tid 11522] [client 93.123.109.228:43534] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/developer/.env"] [unique_id "apK-i2bX5DA3XO6e_qRiGwAAAVc"]
[Sat Aug 29 05:12:11.916164 2026] [core:error] [pid 11274:tid 11565] [client 20.100.175.163:8561] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:11.916182 2026] [core:error] [pid 11274:tid 11565] [client 20.100.175.163:8561] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:11.917423 2026] [security2:error] [pid 11274:tid 11486] [client 20.197.61.180:10210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/disagraeed.php"] [unique_id "apK-i2bX5DA3XO6e_qRiHwAAATM"]
[Sat Aug 29 05:12:11.922255 2026] [security2:error] [pid 11274:tid 11464] [client 20.48.251.3:38169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/goods.php"] [unique_id "apK-i2bX5DA3XO6e_qRiIAAAAR4"]
[Sat Aug 29 05:12:11.930628 2026] [security2:error] [pid 11274:tid 11553] [client 20.104.104.62:8839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/basic.php"] [unique_id "apK-i2bX5DA3XO6e_qRiIwAAAXU"]
[Sat Aug 29 05:12:11.931087 2026] [security2:error] [pid 11274:tid 11488] [client 68.155.159.216:55045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.angelesforestranch.com"] [uri "/file17.php"] [unique_id "apK-i2bX5DA3XO6e_qRiJAAAATU"]
[Sat Aug 29 05:12:11.937969 2026] [security2:error] [pid 1321:tid 1590] [client 68.155.159.216:61258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK-i2jCPtor9NZ-byQIEQAABqE"]
[Sat Aug 29 05:12:11.939163 2026] [security2:error] [pid 1321:tid 1606] [client 93.123.109.228:43542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/config.php"] [unique_id "apK-i2jCPtor9NZ-byQIEgAABrE"]
[Sat Aug 29 05:12:11.968740 2026] [security2:error] [pid 1321:tid 1592] [client 20.240.128.207:11658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/av.php"] [unique_id "apK-i2jCPtor9NZ-byQIEwAABqM"]
[Sat Aug 29 05:12:11.977697 2026] [security2:error] [pid 11274:tid 11484] [client 45.148.10.62:52534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zvi.buu.mybluehost.me"] [uri "/phpinfo.php"] [unique_id "apK-i2bX5DA3XO6e_qRiMgAAATE"]
[Sat Aug 29 05:12:11.977751 2026] [security2:error] [pid 1321:tid 1480] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-admin/system.php"] [unique_id "apK-i2jCPtor9NZ-byQIFAAGcnk"]
[Sat Aug 29 05:12:11.984826 2026] [http2:warn] [pid 1321:tid 1551] [client 57.141.14.5:52766] h2_stream(1321-166-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:12:11.989326 2026] [security2:error] [pid 11274:tid 11461] [client 20.52.41.200:2224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/core.php"] [unique_id "apK-i2bX5DA3XO6e_qRiNAAAARs"]
[Sat Aug 29 05:12:11.990741 2026] [security2:error] [pid 1321:tid 1567] [client 20.220.204.93:18732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/erty.php"] [unique_id "apK-i2jCPtor9NZ-byQIFQAABoo"]
[Sat Aug 29 05:12:12.016899 2026] [security2:error] [pid 11274:tid 11500] [client 158.158.54.35:1297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK-jGbX5DA3XO6e_qRiOgAAAUE"]
[Sat Aug 29 05:12:12.021337 2026] [security2:error] [pid 11274:tid 11475] [client 52.139.37.240:14471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/wp-admin/min.php"] [unique_id "apK-jGbX5DA3XO6e_qRiPgAAASk"]
[Sat Aug 29 05:12:12.021494 2026] [security2:error] [pid 11274:tid 11473] [client 4.205.62.107:63024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/konfig.php"] [unique_id "apK-jGbX5DA3XO6e_qRiPwAAASc"]
[Sat Aug 29 05:12:12.023008 2026] [security2:error] [pid 11274:tid 11502] [client 93.123.109.228:43360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/config/.env"] [unique_id "apK-jGbX5DA3XO6e_qRiQAAAAUM"]
[Sat Aug 29 05:12:12.030164 2026] [security2:error] [pid 11274:tid 11494] [client 20.48.250.41:24536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK-jGbX5DA3XO6e_qRiQwAAATs"]
[Sat Aug 29 05:12:12.052084 2026] [security2:error] [pid 11274:tid 11459] [client 20.48.251.3:38185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/asa.php"] [unique_id "apK-jGbX5DA3XO6e_qRiRwAAARk"]
[Sat Aug 29 05:12:12.062910 2026] [security2:error] [pid 1321:tid 1512] [client 20.104.104.62:8848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/monso.php"] [unique_id "apK-jGjCPtor9NZ-byQIFwAABlQ"]
[Sat Aug 29 05:12:12.068549 2026] [security2:error] [pid 11274:tid 11560] [client 4.205.62.107:28057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/rum.or.php"] [unique_id "apK-jGbX5DA3XO6e_qRiSgAAAXw"]
[Sat Aug 29 05:12:12.073006 2026] [security2:error] [pid 11274:tid 11516] [client 20.48.250.41:39818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/zoo.php"] [unique_id "apK-jGbX5DA3XO6e_qRiSwAAAVE"]
[Sat Aug 29 05:12:12.075972 2026] [security2:error] [pid 11274:tid 11554] [client 20.104.104.62:20854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/images/lux.php"] [unique_id "apK-jGbX5DA3XO6e_qRiTAAAAXY"]
[Sat Aug 29 05:12:12.097537 2026] [security2:error] [pid 11274:tid 11520] [client 40.83.93.50:12730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/add_actualites.php"] [unique_id "apK-jGbX5DA3XO6e_qRiUQAAAVU"]
[Sat Aug 29 05:12:12.160804 2026] [security2:error] [pid 11274:tid 11572] [client 93.123.109.228:43284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/config/config.inc.php"] [unique_id "apK-jGbX5DA3XO6e_qRiWwAAAYg"]
[Sat Aug 29 05:12:12.162148 2026] [security2:error] [pid 11274:tid 11486] [client 93.123.109.228:43596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/config/aws.php"] [unique_id "apK-jGbX5DA3XO6e_qRiXAAAATM"]
[Sat Aug 29 05:12:12.165667 2026] [security2:error] [pid 11274:tid 11553] [client 68.155.159.216:1825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-blog-header.php"] [unique_id "apK-jGbX5DA3XO6e_qRiXgAAAXU"]
[Sat Aug 29 05:12:12.172812 2026] [security2:error] [pid 11274:tid 11450] [client 93.123.109.228:43290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/config/config.php"] [unique_id "apK-jGbX5DA3XO6e_qRiYAAAARA"]
[Sat Aug 29 05:12:12.174576 2026] [security2:error] [pid 11274:tid 11511] [client 158.23.147.79:14222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/goat1.php"] [unique_id "apK-jGbX5DA3XO6e_qRiYQAAAUw"]
[Sat Aug 29 05:12:12.180242 2026] [security2:error] [pid 11274:tid 11487] [client 111.235.68.106:28525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK-jGbX5DA3XO6e_qRiZQAAATQ"]
[Sat Aug 29 05:12:12.180308 2026] [security2:error] [pid 11274:tid 11559] [client 20.48.251.3:38160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/aww.php"] [unique_id "apK-jGbX5DA3XO6e_qRiZAAAAXs"]
[Sat Aug 29 05:12:12.180375 2026] [security2:error] [pid 11274:tid 11487] [client 111.235.68.106:28525] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK-jGbX5DA3XO6e_qRiZQAAATQ"]
[Sat Aug 29 05:12:12.180396 2026] [security2:error] [pid 11274:tid 11485] [client 20.48.250.41:24469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/06.php"] [unique_id "apK-jGbX5DA3XO6e_qRiYwAAATI"]
[Sat Aug 29 05:12:12.187958 2026] [security2:error] [pid 11274:tid 11534] [client 93.123.109.228:43500] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/erp/.env"] [unique_id "apK-jGbX5DA3XO6e_qRiZwAAAWM"]
[Sat Aug 29 05:12:12.201072 2026] [security2:error] [pid 11274:tid 11381] [remote 74.7.227.154:55336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK-jGbX5DA3XO6e_qRiaQABEUM"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Finsert-headers-and-footers%2Fincludes%2Fgenerator
[Sat Aug 29 05:12:12.205177 2026] [security2:error] [pid 1321:tid 1580] [client 20.104.104.62:8849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/rce.php"] [unique_id "apK-jGjCPtor9NZ-byQIHQAABpc"]
[Sat Aug 29 05:12:12.215188 2026] [security2:error] [pid 11274:tid 11522] [client 52.139.37.240:14516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/wp-admin/wp-fileesx-449.php"] [unique_id "apK-jGbX5DA3XO6e_qRiawAAAVc"]
[Sat Aug 29 05:12:12.222076 2026] [security2:error] [pid 11274:tid 11477] [client 20.104.104.62:48630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/mega.php"] [unique_id "apK-jGbX5DA3XO6e_qRibQAAASs"]
[Sat Aug 29 05:12:12.227412 2026] [security2:error] [pid 1321:tid 1548] [client 93.123.109.228:43692] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/etc/apache2/apache2.conf"] [unique_id "apK-jGjCPtor9NZ-byQIHgAABnc"]
[Sat Aug 29 05:12:12.229662 2026] [security2:error] [pid 11274:tid 11386] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-admin/test.php"] [unique_id "apK-jGbX5DA3XO6e_qRibwABSkg"]
[Sat Aug 29 05:12:12.240690 2026] [security2:error] [pid 1321:tid 1507] [client 20.48.250.41:39850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/elp.php"] [unique_id "apK-jGjCPtor9NZ-byQIHwAABk8"]
[Sat Aug 29 05:12:12.249247 2026] [security2:error] [pid 1321:tid 1500] [client 93.123.109.228:43492] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/etc/boto.cfg"] [unique_id "apK-jGjCPtor9NZ-byQIIAAABkg"]
[Sat Aug 29 05:12:12.253498 2026] [security2:error] [pid 1321:tid 1509] [client 106.216.114.82:50076] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "utahtsa.com"] [uri "/xmlrpc.php"] [unique_id "apK-jGjCPtor9NZ-byQIGwAABlE"]
[Sat Aug 29 05:12:12.255707 2026] [security2:error] [pid 11274:tid 11494] [client 93.123.109.228:42926] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/fe/.env"] [unique_id "apK-jGbX5DA3XO6e_qRidQAAATs"]
[Sat Aug 29 05:12:12.258022 2026] [security2:error] [pid 11274:tid 11571] [client 68.155.159.216:14324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/bk/index.php"] [unique_id "apK-jGbX5DA3XO6e_qRidgAAAYc"]
[Sat Aug 29 05:12:12.303152 2026] [security2:error] [pid 11274:tid 11454] [client 20.240.128.207:22159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/a1.php"] [unique_id "apK-jGbX5DA3XO6e_qRifQAAARQ"]
[Sat Aug 29 05:12:12.311280 2026] [security2:error] [pid 1321:tid 1536] [client 20.48.251.3:38194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/ty.php"] [unique_id "apK-jGjCPtor9NZ-byQIJAAABmw"]
[Sat Aug 29 05:12:12.312797 2026] [security2:error] [pid 11274:tid 11570] [client 93.123.109.228:43316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/config/env.php"] [unique_id "apK-jGbX5DA3XO6e_qRifwAAAYY"]
[Sat Aug 29 05:12:12.317820 2026] [security2:error] [pid 11274:tid 11521] [client 20.220.204.93:58962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/0x.php"] [unique_id "apK-jGbX5DA3XO6e_qRiggAAAVY"]
[Sat Aug 29 05:12:12.337254 2026] [security2:error] [pid 11274:tid 11471] [client 158.158.54.35:4383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/t.php"] [unique_id "apK-jGbX5DA3XO6e_qRiiAAAASU"]
[Sat Aug 29 05:12:12.337286 2026] [security2:error] [pid 1321:tid 1497] [client 20.48.250.41:24517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/class.php"] [unique_id "apK-jGjCPtor9NZ-byQIJgAABkU"]
[Sat Aug 29 05:12:12.344034 2026] [security2:error] [pid 1321:tid 1492] [client 20.104.104.62:48112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/exec.php"] [unique_id "apK-jGjCPtor9NZ-byQIKAAABkA"]
[Sat Aug 29 05:12:12.346936 2026] [security2:error] [pid 1321:tid 1522] [client 93.123.109.228:43434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/config/module.config.php"] [unique_id "apK-jGjCPtor9NZ-byQIKgAABl4"]
[Sat Aug 29 05:12:12.349170 2026] [core:error] [pid 1321:tid 1608] [client 20.52.41.200:5167] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:12.349186 2026] [core:error] [pid 1321:tid 1608] [client 20.52.41.200:5167] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:12.374820 2026] [security2:error] [pid 11274:tid 11469] [client 93.123.109.228:42880] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/front/.env"] [unique_id "apK-jGbX5DA3XO6e_qRikgAAASM"]
[Sat Aug 29 05:12:12.384047 2026] [security2:error] [pid 11274:tid 11572] [client 20.151.200.44:56223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/f-401.php"] [unique_id "apK-jGbX5DA3XO6e_qRikwAAAYg"]
[Sat Aug 29 05:12:12.385186 2026] [security2:error] [pid 1321:tid 1557] [client 158.23.147.79:64487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/asd.php"] [unique_id "apK-jGjCPtor9NZ-byQIKwAABoA"]
[Sat Aug 29 05:12:12.386366 2026] [security2:error] [pid 11274:tid 11464] [client 158.23.147.79:29609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/packed.php"] [unique_id "apK-jGbX5DA3XO6e_qRilAAAAR4"]
[Sat Aug 29 05:12:12.401500 2026] [security2:error] [pid 11274:tid 11553] [client 93.123.109.228:43590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/config/nexmo.php"] [unique_id "apK-jGbX5DA3XO6e_qRilQAAAXU"]
[Sat Aug 29 05:12:12.403989 2026] [security2:error] [pid 1321:tid 1504] [client 93.123.109.228:43692] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/frontend/.env"] [unique_id "apK-jGjCPtor9NZ-byQILAAABkw"]
[Sat Aug 29 05:12:12.409156 2026] [security2:error] [pid 1321:tid 1501] [client 52.139.37.240:14488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/wp-content/themes/min.php"] [unique_id "apK-jGjCPtor9NZ-byQILQAABkk"]
[Sat Aug 29 05:12:12.412162 2026] [core:error] [pid 11274:tid 11475] [client 20.100.175.163:8530] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:12.412181 2026] [core:error] [pid 11274:tid 11475] [client 20.100.175.163:8530] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:12.418013 2026] [security2:error] [pid 11274:tid 11511] [client 4.205.62.107:63363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/saiga.php"] [unique_id "apK-jGbX5DA3XO6e_qRinAAAAUw"]
[Sat Aug 29 05:12:12.426614 2026] [security2:error] [pid 11274:tid 11450] [client 57.141.14.96:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/page/3/"] [unique_id "apK-jGbX5DA3XO6e_qRinQAAARA"]
[Sat Aug 29 05:12:12.432436 2026] [security2:error] [pid 11274:tid 11560] [client 40.83.93.50:20293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/OK.php"] [unique_id "apK-jGbX5DA3XO6e_qRingAAAXw"]
[Sat Aug 29 05:12:12.439435 2026] [security2:error] [pid 11274:tid 11501] [client 20.48.250.41:39823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/666.php"] [unique_id "apK-jGbX5DA3XO6e_qRinwAAAUI"]
[Sat Aug 29 05:12:12.441440 2026] [security2:error] [pid 1321:tid 1561] [client 20.48.251.3:38184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/grsiuk.php"] [unique_id "apK-jGjCPtor9NZ-byQILgAABoQ"]
[Sat Aug 29 05:12:12.444686 2026] [security2:error] [pid 11274:tid 11489] [client 20.52.41.200:2229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/admin/function.php"] [unique_id "apK-jGbX5DA3XO6e_qRioAAAATY"]
[Sat Aug 29 05:12:12.450863 2026] [security2:error] [pid 1321:tid 1526] [client 4.205.62.107:62967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/configuration.php"] [unique_id "apK-jGjCPtor9NZ-byQILwAABmI"]
[Sat Aug 29 05:12:12.465448 2026] [security2:error] [pid 11274:tid 11539] [client 20.240.128.207:11102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/file.php"] [unique_id "apK-jGbX5DA3XO6e_qRiqQAAAWg"]
[Sat Aug 29 05:12:12.468239 2026] [security2:error] [pid 1321:tid 1615] [client 20.48.250.41:24570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/8.php"] [unique_id "apK-jGjCPtor9NZ-byQIMAAABro"]
[Sat Aug 29 05:12:12.474083 2026] [security2:error] [pid 11274:tid 11518] [client 93.123.109.228:43028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/info.php"] [unique_id "apK-jGbX5DA3XO6e_qRiqwAAAVM"]
[Sat Aug 29 05:12:12.475602 2026] [security2:error] [pid 11274:tid 11477] [client 93.123.109.228:42926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/infophp.php"] [unique_id "apK-jGbX5DA3XO6e_qRirAAAASs"]
[Sat Aug 29 05:12:12.484931 2026] [security2:error] [pid 11274:tid 11569] [client 20.104.104.62:8225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/dbc.php"] [unique_id "apK-jGbX5DA3XO6e_qRisAAAAYU"]
[Sat Aug 29 05:12:12.486988 2026] [security2:error] [pid 11274:tid 11494] [client 93.123.109.228:43708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/config/stripe.php"] [unique_id "apK-jGbX5DA3XO6e_qRiswAAATs"]
[Sat Aug 29 05:12:12.502056 2026] [security2:error] [pid 11274:tid 11325] [remote 93.123.109.228:33242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/php-info.php"] [unique_id "apK-jGbX5DA3XO6e_qRiugABGww"]
[Sat Aug 29 05:12:12.510925 2026] [security2:error] [pid 11274:tid 11483] [client 68.155.159.216:56757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK-jGbX5DA3XO6e_qRivQAAATA"]
[Sat Aug 29 05:12:12.526003 2026] [security2:error] [pid 11274:tid 11504] [client 114.119.157.158:41853] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.classiclightingusa.com"] [uri "/catalog/product_reviews_write.php/products_id/720/osCsid/0bd89322339a3c568241d3c65b953de5"] [unique_id "apK-jGbX5DA3XO6e_qRiwAAAAUU"], referer: http://www.classiclightingusa.com/catalog/product_info.php/products_id/720/osCsid/0bd89322339a3c568241d3c65b953de5
[Sat Aug 29 05:12:12.526908 2026] [security2:error] [pid 11274:tid 11385] [remote 93.123.109.228:33242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/php.php"] [unique_id "apK-jGbX5DA3XO6e_qRiwQABG0c"]
[Sat Aug 29 05:12:12.528177 2026] [security2:error] [pid 11274:tid 11336] [remote 93.123.109.228:33242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/php_info.php"] [unique_id "apK-jGbX5DA3XO6e_qRiwwABGxc"]
[Sat Aug 29 05:12:12.533069 2026] [security2:error] [pid 11274:tid 11524] [client 93.123.109.228:43658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/infos.php"] [unique_id "apK-jGbX5DA3XO6e_qRixAAAAVk"]
[Sat Aug 29 05:12:12.536416 2026] [security2:error] [pid 11274:tid 11379] [remote 93.123.109.228:33242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/phpinfo.php"] [unique_id "apK-jGbX5DA3XO6e_qRixgABG0E"]
[Sat Aug 29 05:12:12.558809 2026] [security2:error] [pid 11274:tid 11530] [client 20.104.49.130:63478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/33.php"] [unique_id "apK-jGbX5DA3XO6e_qRiygAAAV8"]
[Sat Aug 29 05:12:12.559754 2026] [security2:error] [pid 1321:tid 1560] [client 93.123.109.228:43692] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/laravel/.env"] [unique_id "apK-jGjCPtor9NZ-byQIOAAABoM"]
[Sat Aug 29 05:12:12.568879 2026] [security2:error] [pid 11274:tid 11496] [client 20.104.104.62:48653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/ww3.php"] [unique_id "apK-jGbX5DA3XO6e_qRizAAAAT0"]
[Sat Aug 29 05:12:12.574874 2026] [security2:error] [pid 11274:tid 11471] [client 20.48.251.3:38679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/oiko6u.php"] [unique_id "apK-jGbX5DA3XO6e_qRizwAAASU"]
[Sat Aug 29 05:12:12.578193 2026] [security2:error] [pid 11274:tid 11559] [client 40.83.93.50:13986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/alfanew.php7"] [unique_id "apK-jGbX5DA3XO6e_qRi0AAAAXs"]
[Sat Aug 29 05:12:12.589928 2026] [security2:error] [pid 1321:tid 1612] [client 20.220.204.93:18811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/66.php"] [unique_id "apK-jGjCPtor9NZ-byQIOQAABrc"]
[Sat Aug 29 05:12:12.603929 2026] [security2:error] [pid 1321:tid 1607] [client 52.139.37.240:14522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/wp-content/themes/x/bypass.php"] [unique_id "apK-jGjCPtor9NZ-byQIOgAABrI"]
[Sat Aug 29 05:12:12.607490 2026] [security2:error] [pid 11274:tid 11549] [client 93.123.109.228:43524] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/lms/.env"] [unique_id "apK-jGbX5DA3XO6e_qRi2AAAAXE"]
[Sat Aug 29 05:12:12.619893 2026] [security2:error] [pid 11274:tid 11511] [client 158.23.147.79:58915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wzy.php"] [unique_id "apK-jGbX5DA3XO6e_qRi2gAAAUw"]
[Sat Aug 29 05:12:12.638286 2026] [security2:error] [pid 11274:tid 11513] [client 20.104.104.62:46248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/wp-wlx.php"] [unique_id "apK-jGbX5DA3XO6e_qRi2wAAAU4"]
[Sat Aug 29 05:12:12.641606 2026] [security2:error] [pid 11274:tid 11534] [client 4.205.62.107:5563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/fraro.php"] [unique_id "apK-jGbX5DA3XO6e_qRi3AAAAWM"]
[Sat Aug 29 05:12:12.647033 2026] [security2:error] [pid 11274:tid 11452] [client 93.123.109.228:43500] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/local/.env"] [unique_id "apK-jGbX5DA3XO6e_qRi4AAAARI"]
[Sat Aug 29 05:12:12.668303 2026] [autoindex:error] [pid 11274:tid 11406] [remote 45.148.10.62:52550] AH01276: Cannot serve directory /home3/zvibuumy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:12:12.675315 2026] [security2:error] [pid 11274:tid 11507] [client 45.148.10.62:52554] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "skycoatingsports.com"] [uri "/wp-config.php.old"] [unique_id "apK-jGbX5DA3XO6e_qRi5gAAAUg"]
[Sat Aug 29 05:12:12.677350 2026] [security2:error] [pid 11274:tid 11563] [client 20.104.18.15:29173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/sallu.php"] [unique_id "apK-jGbX5DA3XO6e_qRi5wAAAX8"]
[Sat Aug 29 05:12:12.681871 2026] [security2:error] [pid 11274:tid 11477] [client 93.123.109.228:43108] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/market/.env"] [unique_id "apK-jGbX5DA3XO6e_qRi6AAAASs"]
[Sat Aug 29 05:12:12.684194 2026] [security2:error] [pid 1321:tid 1586] [client 20.197.61.180:13493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/add_actualites.php"] [unique_id "apK-jGjCPtor9NZ-byQIPgAABp0"]
[Sat Aug 29 05:12:12.684651 2026] [security2:error] [pid 11274:tid 11444] [client 20.48.250.41:24493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/0x0x.php"] [unique_id "apK-jGbX5DA3XO6e_qRi6gAAAQo"]
[Sat Aug 29 05:12:12.687989 2026] [security2:error] [pid 11274:tid 11495] [client 158.23.147.79:50146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/login.php"] [unique_id "apK-jGbX5DA3XO6e_qRi6wAAATw"]
[Sat Aug 29 05:12:12.702572 2026] [security2:error] [pid 11274:tid 11569] [client 68.155.159.216:44007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/file17.php"] [unique_id "apK-jGbX5DA3XO6e_qRi7gAAAYU"]
[Sat Aug 29 05:12:12.706777 2026] [security2:error] [pid 1321:tid 1515] [client 20.48.251.3:38193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/edit.php"] [unique_id "apK-jGjCPtor9NZ-byQIQAAABlc"]
[Sat Aug 29 05:12:12.708490 2026] [security2:error] [pid 11274:tid 11494] [client 20.48.250.41:39829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/knmt.php"] [unique_id "apK-jGbX5DA3XO6e_qRi8wAAATs"]
[Sat Aug 29 05:12:12.733429 2026] [security2:error] [pid 11274:tid 11488] [client 158.158.54.35:20682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/lite.php"] [unique_id "apK-jGbX5DA3XO6e_qRi9QAAATU"]
[Sat Aug 29 05:12:12.735349 2026] [security2:error] [pid 1321:tid 1590] [client 20.104.49.130:53553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pvillusions.com"] [uri "/dehnl.php"] [unique_id "apK-jGjCPtor9NZ-byQIQgAABqE"]
[Sat Aug 29 05:12:12.739033 2026] [security2:error] [pid 11274:tid 11568] [client 93.123.109.228:43534] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/media/.env"] [unique_id "apK-jGbX5DA3XO6e_qRi9wAAAYQ"]
[Sat Aug 29 05:12:12.740319 2026] [security2:error] [pid 11274:tid 11327] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-admin/user/f35.php"] [unique_id "apK-jGbX5DA3XO6e_qRi-QABFA4"]
[Sat Aug 29 05:12:12.740398 2026] [security2:error] [pid 11274:tid 11393] [remote 93.123.109.228:33242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/public/phpinfo.php"] [unique_id "apK-jGbX5DA3XO6e_qRi-gABMU8"]
[Sat Aug 29 05:12:12.743606 2026] [security2:error] [pid 11274:tid 11524] [client 68.155.159.216:62743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK-jGbX5DA3XO6e_qRi-wAAAVk"]
[Sat Aug 29 05:12:12.758952 2026] [security2:error] [pid 11274:tid 11449] [client 20.104.18.15:29141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/dehnl.php"] [unique_id "apK-jGbX5DA3XO6e_qRi_wAAAQ8"]
[Sat Aug 29 05:12:12.762272 2026] [security2:error] [pid 11274:tid 11551] [client 93.123.109.228:43672] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/marketing/.env"] [unique_id "apK-jGbX5DA3XO6e_qRjAQAAAXM"]
[Sat Aug 29 05:12:12.778486 2026] [security2:error] [pid 11274:tid 11506] [client 158.158.54.35:5931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/i.php"] [unique_id "apK-jGbX5DA3XO6e_qRjAgAAAUc"]
[Sat Aug 29 05:12:12.794580 2026] [security2:error] [pid 11274:tid 11559] [client 20.104.104.62:48103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/attack.php"] [unique_id "apK-jGbX5DA3XO6e_qRjBQAAAXs"]
[Sat Aug 29 05:12:12.794732 2026] [security2:error] [pid 11274:tid 11508] [client 93.123.109.228:43480] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/new/.env"] [unique_id "apK-jGbX5DA3XO6e_qRjAwAAAUk"]
[Sat Aug 29 05:12:12.803689 2026] [security2:error] [pid 1321:tid 1594] [client 20.52.41.200:4788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK-jGjCPtor9NZ-byQIRQAABqU"]
[Sat Aug 29 05:12:12.811577 2026] [security2:error] [pid 11274:tid 11540] [client 20.240.128.207:2062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-jGbX5DA3XO6e_qRjCQAAAWk"]
[Sat Aug 29 05:12:12.812905 2026] [security2:error] [pid 11274:tid 11572] [client 4.205.62.107:64915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/phpi.php"] [unique_id "apK-jGbX5DA3XO6e_qRjCgAAAYg"]
[Sat Aug 29 05:12:12.816908 2026] [security2:error] [pid 11274:tid 11519] [client 158.23.147.79:43318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-login.php"] [unique_id "apK-jGbX5DA3XO6e_qRjCwAAAVQ"]
[Sat Aug 29 05:12:12.819168 2026] [security2:error] [pid 1321:tid 1542] [client 93.123.109.228:43376] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/crm/.env"] [unique_id "apK-jGjCPtor9NZ-byQIRwAABnI"]
[Sat Aug 29 05:12:12.819222 2026] [security2:error] [pid 1321:tid 1605] [client 93.123.109.228:43800] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/cron/.env"] [unique_id "apK-jGjCPtor9NZ-byQISAAABrA"]
[Sat Aug 29 05:12:12.825628 2026] [security2:error] [pid 1321:tid 1582] [client 20.104.18.15:29131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/codex.php"] [unique_id "apK-jGjCPtor9NZ-byQISQAABpk"]
[Sat Aug 29 05:12:12.831791 2026] [security2:error] [pid 11274:tid 11503] [client 93.123.109.228:43500] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/node-api/.env"] [unique_id "apK-jGbX5DA3XO6e_qRjDAAAAUQ"]
[Sat Aug 29 05:12:12.831932 2026] [security2:error] [pid 11274:tid 11500] [client 93.123.109.228:43280] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/current/.env"] [unique_id "apK-jGbX5DA3XO6e_qRjDQAAAUE"]
[Sat Aug 29 05:12:12.837266 2026] [security2:error] [pid 1321:tid 1567] [client 20.48.250.41:24505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/166.php"] [unique_id "apK-jGjCPtor9NZ-byQISgAABoo"]
[Sat Aug 29 05:12:12.840586 2026] [security2:error] [pid 11274:tid 11549] [client 93.123.109.228:43048] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/node/.env"] [unique_id "apK-jGbX5DA3XO6e_qRjEAAAAXE"]
[Sat Aug 29 05:12:12.842082 2026] [security2:error] [pid 11274:tid 11571] [client 20.104.49.130:43798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "coveryourauto.com"] [uri "/133.php"] [unique_id "apK-jGbX5DA3XO6e_qRjEgAAAYc"]
[Sat Aug 29 05:12:12.847605 2026] [security2:error] [pid 1321:tid 1525] [client 20.48.251.3:38664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/gnmlc.php"] [unique_id "apK-jGjCPtor9NZ-byQISwAABmE"]
[Sat Aug 29 05:12:12.849920 2026] [security2:error] [pid 11274:tid 11516] [client 93.123.109.228:42880] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/node/api/.env"] [unique_id "apK-jGbX5DA3XO6e_qRjEwAAAVE"]
[Sat Aug 29 05:12:12.851224 2026] [security2:error] [pid 11274:tid 11529] [client 93.123.109.228:43108] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/node/backend/.env"] [unique_id "apK-jGbX5DA3XO6e_qRjFAAAAV4"]
[Sat Aug 29 05:12:12.853221 2026] [security2:error] [pid 11274:tid 11541] [client 20.151.200.44:62413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/hq.php"] [unique_id "apK-jGbX5DA3XO6e_qRjFgAAAWo"]
[Sat Aug 29 05:12:12.854284 2026] [security2:error] [pid 1321:tid 1576] [client 106.222.207.18:9181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.207.222.106.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "doctoranddog.com"] [uri "/xmlrpc.php"] [unique_id "apK-jGjCPtor9NZ-byQITAAABpM"]
[Sat Aug 29 05:12:12.854445 2026] [security2:error] [pid 1321:tid 1576] [client 106.222.207.18:9181] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "doctoranddog.com"] [uri "/xmlrpc.php"] [unique_id "apK-jGjCPtor9NZ-byQITAAABpM"]
[Sat Aug 29 05:12:12.859967 2026] [security2:error] [pid 11274:tid 11445] [client 20.104.104.62:20860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/w3llstore.php"] [unique_id "apK-jGbX5DA3XO6e_qRjGAAAAQs"]
[Sat Aug 29 05:12:12.867757 2026] [security2:error] [pid 11274:tid 11560] [client 93.123.109.228:43782] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/dev/.env"] [unique_id "apK-jGbX5DA3XO6e_qRjGgAAAXw"]
[Sat Aug 29 05:12:12.867805 2026] [security2:error] [pid 11274:tid 11513] [client 93.123.109.228:43416] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/demo/.env"] [unique_id "apK-jGbX5DA3XO6e_qRjGQAAAU4"]
[Sat Aug 29 05:12:12.890201 2026] [security2:error] [pid 11274:tid 11490] [client 93.123.109.228:43786] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/develop/.env"] [unique_id "apK-jGbX5DA3XO6e_qRjHwAAATc"]
[Sat Aug 29 05:12:12.893611 2026] [security2:error] [pid 11274:tid 11552] [client 20.52.41.200:2689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/admin/index.php"] [unique_id "apK-jGbX5DA3XO6e_qRjIgAAAXQ"]
[Sat Aug 29 05:12:12.897609 2026] [security2:error] [pid 11274:tid 11488] [client 20.100.175.163:23121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-content/admin.php"] [unique_id "apK-jGbX5DA3XO6e_qRjIwAAATU"]
[Sat Aug 29 05:12:12.897838 2026] [security2:error] [pid 11274:tid 11520] [client 68.155.159.216:21442] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "harnessenergyasia.com"] [uri "/1.php"] [unique_id "apK-jGbX5DA3XO6e_qRjJAAAAVU"]
[Sat Aug 29 05:12:12.897919 2026] [security2:error] [pid 11274:tid 11520] [client 68.155.159.216:21442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/1.php"] [unique_id "apK-jGbX5DA3XO6e_qRjJAAAAVU"]
[Sat Aug 29 05:12:12.906079 2026] [security2:error] [pid 1321:tid 1604] [client 20.104.18.15:29652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/zoo2.php"] [unique_id "apK-jGjCPtor9NZ-byQITgAABq8"]
[Sat Aug 29 05:12:12.915968 2026] [security2:error] [pid 11274:tid 11456] [client 93.123.109.228:43630] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/nodeapi/.env"] [unique_id "apK-jGbX5DA3XO6e_qRjJgAAARY"]
[Sat Aug 29 05:12:12.919140 2026] [security2:error] [pid 1321:tid 1595] [client 52.139.37.240:15284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK-jGjCPtor9NZ-byQITwAABqY"]
[Sat Aug 29 05:12:12.920287 2026] [security2:error] [pid 11274:tid 11565] [client 93.123.109.228:43346] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/developer/.env"] [unique_id "apK-jGbX5DA3XO6e_qRjKAAAAYE"]
[Sat Aug 29 05:12:12.925609 2026] [security2:error] [pid 11274:tid 11521] [client 40.83.93.50:4031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lbustersdrivingschool.com"] [uri "/aaa.php"] [unique_id "apK-jGbX5DA3XO6e_qRjKgAAAVY"]
[Sat Aug 29 05:12:12.925608 2026] [security2:error] [pid 11274:tid 11509] [client 93.123.109.228:43534] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/nodeweb/.env"] [unique_id "apK-jGbX5DA3XO6e_qRjJwAAAUo"]
[Sat Aug 29 05:12:12.932341 2026] [security2:error] [pid 1321:tid 1610] [client 20.104.104.62:46216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/file66.php"] [unique_id "apK-jGjCPtor9NZ-byQIUQAABrU"]
[Sat Aug 29 05:12:12.943717 2026] [security2:error] [pid 11274:tid 11543] [client 93.123.109.228:43446] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/development/.env"] [unique_id "apK-jGbX5DA3XO6e_qRjLQAAAWs"]
[Sat Aug 29 05:12:12.954050 2026] [security2:error] [pid 11274:tid 11498] [client 20.240.128.207:19380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK-jGbX5DA3XO6e_qRjMAAAAT8"]
[Sat Aug 29 05:12:12.958961 2026] [security2:error] [pid 1321:tid 1507] [client 20.48.250.41:39885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/sbhu.php"] [unique_id "apK-jGjCPtor9NZ-byQIUwAABk8"]
[Sat Aug 29 05:12:12.966046 2026] [security2:error] [pid 11274:tid 11514] [client 93.123.109.228:43480] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/old/.env"] [unique_id "apK-jGbX5DA3XO6e_qRjMQAAAU8"]
[Sat Aug 29 05:12:12.976795 2026] [security2:error] [pid 11274:tid 11569] [client 20.48.251.3:38170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/wp-access.php"] [unique_id "apK-jGbX5DA3XO6e_qRjNQAAAYU"]
[Sat Aug 29 05:12:12.986074 2026] [security2:error] [pid 11274:tid 11558] [client 93.123.109.228:43500] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/opt/.env"] [unique_id "apK-jGbX5DA3XO6e_qRjOgAAAXo"]
[Sat Aug 29 05:12:12.990763 2026] [security2:error] [pid 1321:tid 1375] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-admin/user/min.php"] [unique_id "apK-jGjCPtor9NZ-byQIVgAGbBE"]
[Sat Aug 29 05:12:12.996204 2026] [security2:error] [pid 1321:tid 1497] [client 20.48.250.41:24455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/h2a2ck.php"] [unique_id "apK-jGjCPtor9NZ-byQIVwAABkU"]
[Sat Aug 29 05:12:13.000351 2026] [security2:error] [pid 1321:tid 1522] [client 20.104.18.15:29130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/5656.php"] [unique_id "apK-jGjCPtor9NZ-byQIWAAABl4"]
[Sat Aug 29 05:12:13.005622 2026] [security2:error] [pid 1321:tid 1496] [client 4.205.62.107:60561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/motu.php"] [unique_id "apK-jWjCPtor9NZ-byQIWQAABkQ"]
[Sat Aug 29 05:12:13.009691 2026] [security2:error] [pid 11274:tid 11483] [client 158.23.147.79:24503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-content/index.php"] [unique_id "apK-jWbX5DA3XO6e_qRjPwAAATA"]
[Sat Aug 29 05:12:13.032675 2026] [security2:error] [pid 11274:tid 11570] [client 4.205.62.107:6835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/pass4.php"] [unique_id "apK-jWbX5DA3XO6e_qRjRgAAAYY"]
[Sat Aug 29 05:12:13.044827 2026] [security2:error] [pid 11274:tid 11449] [client 68.155.159.216:55141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.angelesforestranch.com"] [uri "/file5.php"] [unique_id "apK-jWbX5DA3XO6e_qRjSgAAAQ8"]
[Sat Aug 29 05:12:13.049813 2026] [security2:error] [pid 11274:tid 11475] [client 68.155.159.216:56461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK-jWbX5DA3XO6e_qRjTwAAASk"]
[Sat Aug 29 05:12:13.057462 2026] [security2:error] [pid 11274:tid 11501] [client 20.104.104.62:48502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/sko.php"] [unique_id "apK-jWbX5DA3XO6e_qRjUQAAAUI"]
[Sat Aug 29 05:12:13.058854 2026] [security2:error] [pid 11274:tid 11508] [client 20.104.18.15:29642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/zoo1.php"] [unique_id "apK-jWbX5DA3XO6e_qRjUgAAAUk"]
[Sat Aug 29 05:12:13.079213 2026] [security2:error] [pid 11274:tid 11540] [client 20.104.104.62:46256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/zafir1.php"] [unique_id "apK-jWbX5DA3XO6e_qRjVwAAAWk"]
[Sat Aug 29 05:12:13.097601 2026] [security2:error] [pid 11274:tid 11519] [client 20.151.200.44:55681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/k8.php"] [unique_id "apK-jWbX5DA3XO6e_qRjWgAAAVQ"]
[Sat Aug 29 05:12:13.104638 2026] [security2:error] [pid 11274:tid 11503] [client 20.48.251.3:38175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/xda.php"] [unique_id "apK-jWbX5DA3XO6e_qRjXAAAAUQ"]
[Sat Aug 29 05:12:13.106271 2026] [security2:error] [pid 1321:tid 1562] [client 20.220.204.93:18267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/f35.php"] [unique_id "apK-jWjCPtor9NZ-byQIWwAABoU"]
[Sat Aug 29 05:12:13.115049 2026] [security2:error] [pid 11274:tid 11506] [client 52.139.37.240:15253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/wp-info.php"] [unique_id "apK-jWbX5DA3XO6e_qRjYAAAAUc"]
[Sat Aug 29 05:12:13.130340 2026] [security2:error] [pid 11274:tid 11497] [client 20.104.104.62:20714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/alfi.php"] [unique_id "apK-jWbX5DA3XO6e_qRjYwAAAT4"]
[Sat Aug 29 05:12:13.132782 2026] [security2:error] [pid 11274:tid 11450] [client 93.123.109.228:43426] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/erp/.env"] [unique_id "apK-jWbX5DA3XO6e_qRjZAAAARA"]
[Sat Aug 29 05:12:13.142641 2026] [security2:error] [pid 11274:tid 11461] [client 20.104.18.15:29632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/w3lls.php"] [unique_id "apK-jWbX5DA3XO6e_qRjZgAAARs"]
[Sat Aug 29 05:12:13.145119 2026] [security2:error] [pid 1321:tid 1574] [client 93.123.109.228:43800] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/etc/apache2/apache2.conf"] [unique_id "apK-jWjCPtor9NZ-byQIXQAABpE"]
[Sat Aug 29 05:12:13.149608 2026] [security2:error] [pid 11274:tid 11504] [client 20.48.250.41:24533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/error_log.php"] [unique_id "apK-jWbX5DA3XO6e_qRjaAAAAUU"]
[Sat Aug 29 05:12:13.166385 2026] [security2:error] [pid 11274:tid 11451] [client 93.123.109.228:43280] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/etc/boto.cfg"] [unique_id "apK-jWbX5DA3XO6e_qRjbAAAARE"]
[Sat Aug 29 05:12:13.177019 2026] [security2:error] [pid 1321:tid 1573] [client 20.48.250.41:39912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/a332.php"] [unique_id "apK-jWjCPtor9NZ-byQIYAAABpA"]
[Sat Aug 29 05:12:13.178137 2026] [security2:error] [pid 11274:tid 11552] [client 4.205.62.107:63008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/paths.php"] [unique_id "apK-jWbX5DA3XO6e_qRjcwAAAXQ"]
[Sat Aug 29 05:12:13.190918 2026] [security2:error] [pid 1321:tid 1516] [client 93.123.109.228:43400] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/fe/.env"] [unique_id "apK-jWjCPtor9NZ-byQIYQAABlg"]
[Sat Aug 29 05:12:13.190967 2026] [security2:error] [pid 1321:tid 1508] [client 158.158.54.35:1409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/term.php"] [unique_id "apK-jWjCPtor9NZ-byQIYgAABlA"]
[Sat Aug 29 05:12:13.205664 2026] [security2:error] [pid 11274:tid 11466] [client 4.205.62.107:28051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/xmy.php"] [unique_id "apK-jWbX5DA3XO6e_qRjeQAAASA"]
[Sat Aug 29 05:12:13.210432 2026] [security2:error] [pid 11274:tid 11518] [client 20.104.18.15:29650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/radio.php"] [unique_id "apK-jWbX5DA3XO6e_qRjfAAAAVM"]
[Sat Aug 29 05:12:13.213123 2026] [security2:error] [pid 11274:tid 11507] [client 68.155.159.216:64109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-mail.php"] [unique_id "apK-jWbX5DA3XO6e_qRjfQAAAUg"]
[Sat Aug 29 05:12:13.216398 2026] [security2:error] [pid 1321:tid 1550] [client 40.83.93.50:11810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/xmlrpc.php0"] [unique_id "apK-jWjCPtor9NZ-byQIYwAABnk"]
[Sat Aug 29 05:12:13.222826 2026] [security2:error] [pid 11274:tid 11498] [client 93.123.109.228:43662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/php-info.php"] [unique_id "apK-jWbX5DA3XO6e_qRjfwAAAT8"]
[Sat Aug 29 05:12:13.227941 2026] [security2:error] [pid 1321:tid 1566] [client 20.104.104.62:8249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/console.php"] [unique_id "apK-jWjCPtor9NZ-byQIZAAABok"]
[Sat Aug 29 05:12:13.228559 2026] [security2:error] [pid 1321:tid 1526] [client 158.158.54.35:15723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/deepseek_d.php"] [unique_id "apK-jWjCPtor9NZ-byQIZQAABmI"]
[Sat Aug 29 05:12:13.234124 2026] [security2:error] [pid 11274:tid 11468] [client 20.48.251.3:38207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/motu.php"] [unique_id "apK-jWbX5DA3XO6e_qRjhAAAASI"]
[Sat Aug 29 05:12:13.241967 2026] [security2:error] [pid 11274:tid 11338] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-admin/users.php"] [unique_id "apK-jWbX5DA3XO6e_qRjhwABPBk"]
[Sat Aug 29 05:12:13.253232 2026] [security2:error] [pid 11274:tid 11527] [client 93.123.109.228:42880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/php.php"] [unique_id "apK-jWbX5DA3XO6e_qRjiAAAAVw"]
[Sat Aug 29 05:12:13.259351 2026] [security2:error] [pid 1321:tid 1547] [client 20.52.41.200:5155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/num.php"] [unique_id "apK-jWjCPtor9NZ-byQIZgAABnY"]
[Sat Aug 29 05:12:13.271423 2026] [security2:error] [pid 11274:tid 11483] [client 93.123.109.228:43786] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/front/.env"] [unique_id "apK-jWbX5DA3XO6e_qRjiwAAATA"]
[Sat Aug 29 05:12:13.272499 2026] [security2:error] [pid 11274:tid 11536] [client 68.155.159.216:2004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK-jWbX5DA3XO6e_qRjjAAAAWU"]
[Sat Aug 29 05:12:13.283475 2026] [security2:error] [pid 11274:tid 11494] [client 93.123.109.228:43426] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/frontend/.env"] [unique_id "apK-jWbX5DA3XO6e_qRjjwAAATs"]
[Sat Aug 29 05:12:13.294543 2026] [security2:error] [pid 11274:tid 11529] [client 45.148.10.62:52566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "skycoatingsports.com"] [uri "/config.php"] [unique_id "apK-jWbX5DA3XO6e_qRjkgAAAV4"]
[Sat Aug 29 05:12:13.303487 2026] [security2:error] [pid 11274:tid 11559] [client 158.23.147.79:14253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK-jWbX5DA3XO6e_qRjkwAAAXs"]
[Sat Aug 29 05:12:13.305325 2026] [security2:error] [pid 1321:tid 1510] [client 20.104.18.15:29682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/fpwch.php"] [unique_id "apK-jWjCPtor9NZ-byQIaAAABlI"]
[Sat Aug 29 05:12:13.305626 2026] [security2:error] [pid 11274:tid 11501] [client 93.123.109.228:43108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/php_info.php"] [unique_id "apK-jWbX5DA3XO6e_qRjlQAAAUI"]
[Sat Aug 29 05:12:13.312719 2026] [security2:error] [pid 1321:tid 1502] [client 20.48.250.41:24488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/403.php"] [unique_id "apK-jWjCPtor9NZ-byQIagAABko"]
[Sat Aug 29 05:12:13.317396 2026] [security2:error] [pid 1321:tid 1553] [client 52.139.37.240:14524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/wp-wordfence-waf.php"] [unique_id "apK-jWjCPtor9NZ-byQIawAABnw"]
[Sat Aug 29 05:12:13.317432 2026] [security2:error] [pid 1321:tid 1529] [client 20.240.128.207:8141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/alfa-rex.php7"] [unique_id "apK-jWjCPtor9NZ-byQIbAAABmU"]
[Sat Aug 29 05:12:13.339511 2026] [security2:error] [pid 11274:tid 11545] [client 20.48.250.41:39888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/ws66.php"] [unique_id "apK-jWbX5DA3XO6e_qRjnQAAAW0"]
[Sat Aug 29 05:12:13.341350 2026] [security2:error] [pid 1321:tid 1531] [client 20.104.18.15:29124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/one.php"] [unique_id "apK-jWjCPtor9NZ-byQIbwAABmc"]
[Sat Aug 29 05:12:13.342300 2026] [security2:error] [pid 1321:tid 1555] [client 20.52.41.200:2688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/storage/rip.php"] [unique_id "apK-jWjCPtor9NZ-byQIcAAABn4"]
[Sat Aug 29 05:12:13.349924 2026] [security2:error] [pid 11274:tid 11380] [remote 45.148.10.62:52550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.zvi.buu.mybluehost.me"] [uri "/wp-login.php"] [unique_id "apK-jWbX5DA3XO6e_qRjmQABaUI"]
[Sat Aug 29 05:12:13.354749 2026] [security2:error] [pid 11274:tid 11503] [client 93.123.109.228:43446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/info.php"] [unique_id "apK-jWbX5DA3XO6e_qRjoQAAAUQ"]
[Sat Aug 29 05:12:13.366187 2026] [security2:error] [pid 11274:tid 11571] [client 93.123.109.228:43796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/infophp.php"] [unique_id "apK-jWbX5DA3XO6e_qRjowAAAYc"]
[Sat Aug 29 05:12:13.367508 2026] [security2:error] [pid 1321:tid 1586] [client 93.123.109.228:43692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/phpinfo.php"] [unique_id "apK-jWjCPtor9NZ-byQIcgAABp0"]
[Sat Aug 29 05:12:13.368064 2026] [security2:error] [pid 11274:tid 11524] [client 68.155.159.216:14091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sanko-mold-co-th.sankomold.com"] [uri "/first.php"] [unique_id "apK-jWbX5DA3XO6e_qRjpAAAAVk"]
[Sat Aug 29 05:12:13.369211 2026] [security2:error] [pid 1321:tid 1515] [client 158.23.147.79:6981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/makeasmtp.php"] [unique_id "apK-jWjCPtor9NZ-byQIcwAABlc"]
[Sat Aug 29 05:12:13.380948 2026] [security2:error] [pid 1321:tid 1597] [client 20.48.251.3:38174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/G-in.php"] [unique_id "apK-jWjCPtor9NZ-byQIdAAABqg"]
[Sat Aug 29 05:12:13.381983 2026] [security2:error] [pid 11274:tid 11467] [client 93.123.109.228:43560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/infos.php"] [unique_id "apK-jWbX5DA3XO6e_qRjqAAAASE"]
[Sat Aug 29 05:12:13.394637 2026] [security2:error] [pid 11274:tid 11444] [client 20.100.175.163:11222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-configs.php"] [unique_id "apK-jWbX5DA3XO6e_qRjqgAAAQo"]
[Sat Aug 29 05:12:13.394693 2026] [security2:error] [pid 11274:tid 11551] [client 20.104.104.62:48104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/blnux.php"] [unique_id "apK-jWbX5DA3XO6e_qRjqwAAAXM"]
[Sat Aug 29 05:12:13.398709 2026] [security2:error] [pid 11274:tid 11554] [client 93.123.109.228:43630] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/portal/.env"] [unique_id "apK-jWbX5DA3XO6e_qRjrAAAAXY"]
[Sat Aug 29 05:12:13.407310 2026] [security2:error] [pid 1321:tid 1581] [client 20.151.200.44:21819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/mh.php"] [unique_id "apK-jWjCPtor9NZ-byQIdQAABpg"]
[Sat Aug 29 05:12:13.413626 2026] [security2:error] [pid 11274:tid 11452] [client 20.197.61.180:1977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/alfanew.php7"] [unique_id "apK-jWbX5DA3XO6e_qRjsAAAARI"]
[Sat Aug 29 05:12:13.414698 2026] [security2:error] [pid 1321:tid 1542] [client 20.104.104.62:48665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/zoz.php"] [unique_id "apK-jWjCPtor9NZ-byQIdgAABnI"]
[Sat Aug 29 05:12:13.425081 2026] [security2:error] [pid 11274:tid 11461] [client 93.123.109.228:43524] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/prod/.env"] [unique_id "apK-jWbX5DA3XO6e_qRjtAAAARs"]
[Sat Aug 29 05:12:13.436654 2026] [security2:error] [pid 11274:tid 11493] [client 20.104.18.15:29160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/domvf.php"] [unique_id "apK-jWbX5DA3XO6e_qRjuAAAATo"]
[Sat Aug 29 05:12:13.444545 2026] [security2:error] [pid 11274:tid 11561] [client 20.48.250.41:24451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/cytyr.php"] [unique_id "apK-jWbX5DA3XO6e_qRjugAAAX0"]
[Sat Aug 29 05:12:13.453578 2026] [security2:error] [pid 11274:tid 11530] [client 20.240.128.207:2546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/gmo.php"] [unique_id "apK-jWbX5DA3XO6e_qRjvQAAAV8"]
[Sat Aug 29 05:12:13.461851 2026] [security2:error] [pid 1321:tid 1525] [client 93.123.109.228:43376] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/laravel/.env"] [unique_id "apK-jWjCPtor9NZ-byQIdwAABmE"]
[Sat Aug 29 05:12:13.472302 2026] [security2:error] [pid 11274:tid 11489] [client 20.104.18.15:29643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/503.php"] [unique_id "apK-jWbX5DA3XO6e_qRjvwAAATY"]
[Sat Aug 29 05:12:13.473709 2026] [security2:error] [pid 11274:tid 11572] [client 93.123.109.228:43534] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/product/.env"] [unique_id "apK-jWbX5DA3XO6e_qRjwAAAAYg"]
[Sat Aug 29 05:12:13.475839 2026] [security2:error] [pid 1321:tid 1592] [client 20.220.204.93:57430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/wen.php"] [unique_id "apK-jWjCPtor9NZ-byQIeAAABqM"]
[Sat Aug 29 05:12:13.477829 2026] [security2:error] [pid 1321:tid 1592] [client 93.123.109.228:43800] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/lms/.env"] [unique_id "apK-jWjCPtor9NZ-byQIegAABqM"]
[Sat Aug 29 05:12:13.478909 2026] [security2:error] [pid 11274:tid 11569] [client 60.243.207.176:64372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK-jWbX5DA3XO6e_qRjwQAAAYU"]
[Sat Aug 29 05:12:13.479041 2026] [security2:error] [pid 11274:tid 11569] [client 60.243.207.176:64372] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK-jWbX5DA3XO6e_qRjwQAAAYU"]
[Sat Aug 29 05:12:13.493389 2026] [security2:error] [pid 1321:tid 1383] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-admin/wp-cron.php"] [unique_id "apK-jWjCPtor9NZ-byQIewAGYxk"]
[Sat Aug 29 05:12:13.494688 2026] [security2:error] [pid 11274:tid 11466] [client 93.123.109.228:43682] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/production/.env"] [unique_id "apK-jWbX5DA3XO6e_qRjxAAAASA"]
[Sat Aug 29 05:12:13.501602 2026] [security2:error] [pid 1321:tid 1610] [client 93.123.109.228:42914] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/project/.env"] [unique_id "apK-jWjCPtor9NZ-byQIfAAABrU"]
[Sat Aug 29 05:12:13.505417 2026] [security2:error] [pid 11274:tid 11479] [client 93.123.109.228:43470] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/public/.env"] [unique_id "apK-jWbX5DA3XO6e_qRjyAAAASw"]
[Sat Aug 29 05:12:13.506646 2026] [security2:error] [pid 1321:tid 1580] [client 158.23.147.79:64428] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.pgrconsulting.ca"] [uri "/1.php"] [unique_id "apK-jWjCPtor9NZ-byQIfgAABpc"]
[Sat Aug 29 05:12:13.506738 2026] [security2:error] [pid 1321:tid 1580] [client 158.23.147.79:64428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/1.php"] [unique_id "apK-jWjCPtor9NZ-byQIfgAABpc"]
[Sat Aug 29 05:12:13.509580 2026] [security2:error] [pid 1321:tid 1507] [client 93.123.109.228:43492] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/public-api/.env"] [unique_id "apK-jWjCPtor9NZ-byQIfwAABk8"]
[Sat Aug 29 05:12:13.511059 2026] [security2:error] [pid 11274:tid 11534] [client 158.23.147.79:58880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-content/packed.php"] [unique_id "apK-jWbX5DA3XO6e_qRjygAAAWM"]
[Sat Aug 29 05:12:13.511807 2026] [security2:error] [pid 11274:tid 11538] [client 52.139.37.240:15250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/ws49.php"] [unique_id "apK-jWbX5DA3XO6e_qRjywAAAWc"]
[Sat Aug 29 05:12:13.514867 2026] [security2:error] [pid 11274:tid 11516] [client 20.48.251.3:38672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/classsmtps.php"] [unique_id "apK-jWbX5DA3XO6e_qRjzQAAAVE"]
[Sat Aug 29 05:12:13.517911 2026] [security2:error] [pid 11274:tid 11468] [client 93.123.109.228:43802] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/local/.env"] [unique_id "apK-jWbX5DA3XO6e_qRjzgAAASI"]
[Sat Aug 29 05:12:13.530931 2026] [security2:error] [pid 11274:tid 11536] [client 93.123.109.228:42992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/public/phpinfo.php"] [unique_id "apK-jWbX5DA3XO6e_qRj1AAAAWU"]
[Sat Aug 29 05:12:13.531973 2026] [security2:error] [pid 11274:tid 11513] [client 93.123.109.228:43782] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/market/.env"] [unique_id "apK-jWbX5DA3XO6e_qRj0wAAAU4"]
[Sat Aug 29 05:12:13.548543 2026] [security2:error] [pid 11274:tid 11343] [remote 74.7.227.154:55336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK-jWbX5DA3XO6e_qRj1gABVx4"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Finsert-headers-and-footers%2Fincludes%2Fgenerator
[Sat Aug 29 05:12:13.549468 2026] [security2:error] [pid 11274:tid 11476] [client 20.48.250.41:39930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/ws68.php"] [unique_id "apK-jWbX5DA3XO6e_qRj1wAAASo"]
[Sat Aug 29 05:12:13.551934 2026] [security2:error] [pid 11274:tid 11529] [client 4.205.62.107:63336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/ammika.php"] [unique_id "apK-jWbX5DA3XO6e_qRj2AAAAV4"]
[Sat Aug 29 05:12:13.562056 2026] [security2:error] [pid 11274:tid 11496] [client 20.104.104.62:40197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/DC.php"] [unique_id "apK-jWbX5DA3XO6e_qRj2wAAAT0"]
[Sat Aug 29 05:12:13.571456 2026] [security2:error] [pid 11274:tid 11501] [client 93.123.109.228:43714] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/marketing/.env"] [unique_id "apK-jWbX5DA3XO6e_qRj3AAAAUI"]
[Sat Aug 29 05:12:13.579058 2026] [security2:error] [pid 1321:tid 1500] [client 20.48.250.41:24525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/galer.php"] [unique_id "apK-jWjCPtor9NZ-byQIgQAABkg"]
[Sat Aug 29 05:12:13.582151 2026] [security2:error] [pid 11274:tid 11492] [client 20.104.104.62:46234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/pentest.php"] [unique_id "apK-jWbX5DA3XO6e_qRj3wAAATk"]
[Sat Aug 29 05:12:13.582731 2026] [security2:error] [pid 1321:tid 1536] [client 20.104.18.15:29137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/biufile.php"] [unique_id "apK-jWjCPtor9NZ-byQIggAABmw"]
[Sat Aug 29 05:12:13.583686 2026] [security2:error] [pid 11274:tid 11471] [client 20.104.104.62:48492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/mmm.php"] [unique_id "apK-jWbX5DA3XO6e_qRj4QAAASU"]
[Sat Aug 29 05:12:13.585275 2026] [security2:error] [pid 1321:tid 1536] [client 4.205.62.107:60331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/server_info.php"] [unique_id "apK-jWjCPtor9NZ-byQIgwAABmw"]
[Sat Aug 29 05:12:13.590725 2026] [security2:error] [pid 11274:tid 11545] [client 93.123.109.228:43716] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/media/.env"] [unique_id "apK-jWbX5DA3XO6e_qRj4gAAAW0"]
[Sat Aug 29 05:12:13.599145 2026] [security2:error] [pid 11274:tid 11540] [client 93.123.109.228:43630] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/public_html/.env"] [unique_id "apK-jWbX5DA3XO6e_qRj5QAAAWk"]
[Sat Aug 29 05:12:13.626948 2026] [security2:error] [pid 1321:tid 1496] [client 93.123.109.228:43800] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/new/.env"] [unique_id "apK-jWjCPtor9NZ-byQIiQAABkQ"]
[Sat Aug 29 05:12:13.629262 2026] [security2:error] [pid 11274:tid 11514] [client 93.123.109.228:43280] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/node-api/.env"] [unique_id "apK-jWbX5DA3XO6e_qRj6wAAAU8"]
[Sat Aug 29 05:12:13.645687 2026] [security2:error] [pid 11274:tid 11554] [client 20.48.251.3:38658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/tax.php"] [unique_id "apK-jWbX5DA3XO6e_qRj7QAAAXY"]
[Sat Aug 29 05:12:13.648030 2026] [security2:error] [pid 11274:tid 11541] [client 20.104.18.15:29657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/504.php"] [unique_id "apK-jWbX5DA3XO6e_qRj7gAAAWo"]
[Sat Aug 29 05:12:13.649115 2026] [security2:error] [pid 1321:tid 1422] [remote 162.55.89.48:63014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 48.89.55.162.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/wp-login.php"] [unique_id "apK-jWjCPtor9NZ-byQIigAGTEA"]
[Sat Aug 29 05:12:13.666339 2026] [security2:error] [pid 11274:tid 11560] [client 93.123.109.228:43802] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/node/.env"] [unique_id "apK-jWbX5DA3XO6e_qRj8gAAAXw"]
[Sat Aug 29 05:12:13.667005 2026] [security2:error] [pid 1321:tid 1519] [client 158.158.54.35:15085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/config.php"] [unique_id "apK-jWjCPtor9NZ-byQIjQAABls"]
[Sat Aug 29 05:12:13.674525 2026] [security2:error] [pid 1321:tid 1574] [client 68.155.159.216:56747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK-jWjCPtor9NZ-byQIjgAABpE"]
[Sat Aug 29 05:12:13.678005 2026] [security2:error] [pid 11274:tid 11561] [client 93.123.109.228:43782] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/node/backend/.env"] [unique_id "apK-jWbX5DA3XO6e_qRj9AAAAX0"]
[Sat Aug 29 05:12:13.678038 2026] [security2:error] [pid 11274:tid 11508] [client 93.123.109.228:43786] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/node/api/.env"] [unique_id "apK-jWbX5DA3XO6e_qRj9gAAAUk"]
[Sat Aug 29 05:12:13.684024 2026] [security2:error] [pid 1321:tid 1549] [client 93.123.109.228:43400] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/nodeapi/.env"] [unique_id "apK-jWjCPtor9NZ-byQIjwAABng"]
[Sat Aug 29 05:12:13.692397 2026] [proxy_http:error] [pid 1017536:tid 1017703] (70007)The timeout specified has expired: [client 127.0.0.1:24404] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:12:13.692426 2026] [proxy:error] [pid 1017536:tid 1017703] [client 127.0.0.1:24404] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:12:13.692899 2026] [security2:error] [pid 1321:tid 1573] [client 93.123.109.228:42914] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/qa/.env"] [unique_id "apK-jWjCPtor9NZ-byQIkgAABpA"]
[Sat Aug 29 05:12:13.694106 2026] [security2:error] [pid 11274:tid 11572] [client 93.123.109.228:43426] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/nodeweb/.env"] [unique_id "apK-jWbX5DA3XO6e_qRj_wAAAYg"]
[Sat Aug 29 05:12:13.699289 2026] [security2:error] [pid 1321:tid 1490] [client 40.83.93.50:14746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/content.php"] [unique_id "apK-jWjCPtor9NZ-byQIkwAABj4"]
[Sat Aug 29 05:12:13.704066 2026] [security2:error] [pid 11274:tid 11551] [client 52.139.37.240:15232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/xxx.php"] [unique_id "apK-jWbX5DA3XO6e_qRkAgAAAXM"]
[Sat Aug 29 05:12:13.716505 2026] [security2:error] [pid 1321:tid 1516] [client 20.220.204.93:59599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/inc.php"] [unique_id "apK-jWjCPtor9NZ-byQIlAAABlg"]
[Sat Aug 29 05:12:13.717647 2026] [core:error] [pid 11274:tid 11559] [client 20.52.41.200:5134] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:13.717663 2026] [core:error] [pid 11274:tid 11559] [client 20.52.41.200:5134] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:13.722789 2026] [security2:error] [pid 1321:tid 1508] [client 20.48.250.41:24532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/baixy.php"] [unique_id "apK-jWjCPtor9NZ-byQIlgAABlA"]
[Sat Aug 29 05:12:13.737935 2026] [security2:error] [pid 11274:tid 11534] [client 20.48.250.41:39825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/users.php"] [unique_id "apK-jWbX5DA3XO6e_qRkBwAAAWM"]
[Sat Aug 29 05:12:13.738173 2026] [security2:error] [pid 11274:tid 11495] [client 158.23.147.79:53955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK-jWbX5DA3XO6e_qRkCAAAATw"]
[Sat Aug 29 05:12:13.745467 2026] [security2:error] [pid 11274:tid 11364] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-admin/wp-links-opml.php"] [unique_id "apK-jWbX5DA3XO6e_qRkCwABejI"]
[Sat Aug 29 05:12:13.759726 2026] [security2:error] [pid 11274:tid 11498] [client 20.63.219.114:1898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/post.php"] [unique_id "apK-jWbX5DA3XO6e_qRkEwAAAT8"]
[Sat Aug 29 05:12:13.765237 2026] [security2:error] [pid 11274:tid 11464] [client 20.104.104.62:48084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/6y7t.php"] [unique_id "apK-jWbX5DA3XO6e_qRkFgAAAR4"]
[Sat Aug 29 05:12:13.777297 2026] [security2:error] [pid 11274:tid 11513] [client 20.48.251.3:38657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/themes.php"] [unique_id "apK-jWbX5DA3XO6e_qRkGAAAAU4"]
[Sat Aug 29 05:12:13.778887 2026] [security2:error] [pid 11274:tid 11570] [client 93.123.109.228:43280] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/old/.env"] [unique_id "apK-jWbX5DA3XO6e_qRkGQAAAYY"]
[Sat Aug 29 05:12:13.779385 2026] [security2:error] [pid 1321:tid 1560] [client 4.205.62.107:6126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/thui.php"] [unique_id "apK-jWjCPtor9NZ-byQImAAABoM"]
[Sat Aug 29 05:12:13.783365 2026] [security2:error] [pid 11274:tid 11494] [client 20.104.18.15:29686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/admin.php"] [unique_id "apK-jWbX5DA3XO6e_qRkGgAAATs"]
[Sat Aug 29 05:12:13.784432 2026] [security2:error] [pid 11274:tid 11472] [client 20.104.18.15:29174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/blacks.php"] [unique_id "apK-jWbX5DA3XO6e_qRkGwAAASY"]
[Sat Aug 29 05:12:13.792614 2026] [security2:error] [pid 11274:tid 11529] [client 93.123.109.228:43766] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/opt/.env"] [unique_id "apK-jWbX5DA3XO6e_qRkHAAAAV4"]
[Sat Aug 29 05:12:13.797700 2026] [security2:error] [pid 11274:tid 11444] [client 20.52.41.200:2668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/zoom1.php"] [unique_id "apK-jWbX5DA3XO6e_qRkHQAAAQo"]
[Sat Aug 29 05:12:13.813351 2026] [security2:error] [pid 1321:tid 1555] [client 68.155.159.216:43844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/file5.php"] [unique_id "apK-jWjCPtor9NZ-byQImwAABn4"]
[Sat Aug 29 05:12:13.827009 2026] [security2:error] [pid 11274:tid 11535] [client 20.240.128.207:2079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "apK-jWbX5DA3XO6e_qRkJQAAAWQ"]
[Sat Aug 29 05:12:13.837696 2026] [security2:error] [pid 11274:tid 11450] [client 20.104.104.62:48757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/advanced.php"] [unique_id "apK-jWbX5DA3XO6e_qRkKAAAARA"]
[Sat Aug 29 05:12:13.858400 2026] [security2:error] [pid 1321:tid 1590] [client 20.48.250.41:24392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/ava.php"] [unique_id "apK-jWjCPtor9NZ-byQIoAAABqE"]
[Sat Aug 29 05:12:13.885212 2026] [security2:error] [pid 11274:tid 11507] [client 45.148.10.62:60040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "skycoatingsports.com"] [uri "/config.php.bak"] [unique_id "apK-jWbX5DA3XO6e_qRkMwAAAUg"]
[Sat Aug 29 05:12:13.897216 2026] [security2:error] [pid 1321:tid 1517] [client 52.139.37.240:14520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/0x.php"] [unique_id "apK-jWjCPtor9NZ-byQIoQAABlk"]
[Sat Aug 29 05:12:13.908866 2026] [security2:error] [pid 1321:tid 1526] [client 20.100.175.163:11426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-includes/index.php"] [unique_id "apK-jWjCPtor9NZ-byQIogAABmI"]
[Sat Aug 29 05:12:13.911230 2026] [security2:error] [pid 1321:tid 1581] [client 158.158.54.35:22626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "apK-jWjCPtor9NZ-byQIowAABpg"]
[Sat Aug 29 05:12:13.912307 2026] [security2:error] [pid 11274:tid 11508] [client 20.48.251.3:38190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/tinyfilemanager.php"] [unique_id "apK-jWbX5DA3XO6e_qRkNwAAAUk"]
[Sat Aug 29 05:12:13.917957 2026] [security2:error] [pid 11274:tid 11451] [client 20.220.204.93:9532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/6bcwiqwj.php"] [unique_id "apK-jWbX5DA3XO6e_qRkOQAAARE"]
[Sat Aug 29 05:12:13.920426 2026] [security2:error] [pid 11274:tid 11506] [client 158.23.147.79:43279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK-jWbX5DA3XO6e_qRkOgAAAUc"]
[Sat Aug 29 05:12:13.934493 2026] [security2:error] [pid 11274:tid 11451] [client 20.104.18.15:29637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/ws85.php"] [unique_id "apK-jWbX5DA3XO6e_qRkPgAAARE"]
[Sat Aug 29 05:12:13.941304 2026] [security2:error] [pid 11274:tid 11496] [client 20.63.219.114:15773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/flower.php"] [unique_id "apK-jWbX5DA3XO6e_qRkQgAAAT0"]
[Sat Aug 29 05:12:13.955129 2026] [security2:error] [pid 1321:tid 1547] [client 20.240.128.207:2520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/classwithtostring.php"] [unique_id "apK-jWjCPtor9NZ-byQIpgAABnY"]
[Sat Aug 29 05:12:13.958938 2026] [security2:error] [pid 11274:tid 11543] [client 20.104.104.62:48097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/0xs.php"] [unique_id "apK-jWbX5DA3XO6e_qRkSQAAAWs"]
[Sat Aug 29 05:12:13.959641 2026] [security2:error] [pid 11274:tid 11489] [client 20.104.18.15:29121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/beck.php"] [unique_id "apK-jWbX5DA3XO6e_qRkSgAAATY"]
[Sat Aug 29 05:12:13.960718 2026] [security2:error] [pid 11274:tid 11555] [client 4.205.62.107:64911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK-jWbX5DA3XO6e_qRkSwAAAXc"]
[Sat Aug 29 05:12:13.994908 2026] [security2:error] [pid 1321:tid 1448] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-admin/wp-load.php"] [unique_id "apK-jWjCPtor9NZ-byQIqAAGn1k"]
[Sat Aug 29 05:12:14.008964 2026] [security2:error] [pid 1321:tid 1498] [client 20.104.104.62:48580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/blox.php"] [unique_id "apK-jmjCPtor9NZ-byQIqgAABkY"]
[Sat Aug 29 05:12:14.017496 2026] [security2:error] [pid 1321:tid 1604] [client 20.48.250.41:24516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/gdn.php"] [unique_id "apK-jmjCPtor9NZ-byQIqwAABq8"]
[Sat Aug 29 05:12:14.017761 2026] [security2:error] [pid 11274:tid 11553] [client 20.48.250.41:39808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/bzjdlofz.php"] [unique_id "apK-jmbX5DA3XO6e_qRkVgAAAXU"]
[Sat Aug 29 05:12:14.022057 2026] [security2:error] [pid 1321:tid 1563] [client 197.232.63.170:50784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 170.63.232.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK-jmjCPtor9NZ-byQIrAAABoY"]
[Sat Aug 29 05:12:14.022147 2026] [security2:error] [pid 1321:tid 1563] [client 197.232.63.170:50784] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK-jmjCPtor9NZ-byQIrAAABoY"]
[Sat Aug 29 05:12:14.029042 2026] [security2:error] [pid 11274:tid 11568] [client 61.9.8.62:21480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK-jmbX5DA3XO6e_qRkVQAAAYQ"]
[Sat Aug 29 05:12:14.029181 2026] [security2:error] [pid 11274:tid 11568] [client 61.9.8.62:21480] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK-jmbX5DA3XO6e_qRkVQAAAYQ"]
[Sat Aug 29 05:12:14.039990 2026] [security2:error] [pid 11274:tid 11501] [client 20.48.251.3:38703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/min.php"] [unique_id "apK-jmbX5DA3XO6e_qRkXQAAAUI"]
[Sat Aug 29 05:12:14.059183 2026] [security2:error] [pid 11274:tid 11477] [client 93.123.109.228:43554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/php-info.php"] [unique_id "apK-jmbX5DA3XO6e_qRkYwAAASs"]
[Sat Aug 29 05:12:14.074552 2026] [security2:error] [pid 11274:tid 11521] [client 20.104.18.15:29177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/ffs.php"] [unique_id "apK-jmbX5DA3XO6e_qRkZAAAAVY"]
[Sat Aug 29 05:12:14.091382 2026] [security2:error] [pid 1321:tid 1600] [client 52.139.37.240:14518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/CDX1.php"] [unique_id "apK-jmjCPtor9NZ-byQIrgAABqs"]
[Sat Aug 29 05:12:14.104010 2026] [security2:error] [pid 11274:tid 11466] [client 93.123.109.228:43416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/php.php"] [unique_id "apK-jmbX5DA3XO6e_qRkbAAAASA"]
[Sat Aug 29 05:12:14.111944 2026] [security2:error] [pid 1321:tid 1548] [client 20.104.18.15:29166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/t3.php"] [unique_id "apK-jmjCPtor9NZ-byQIrwAABnc"]
[Sat Aug 29 05:12:14.116876 2026] [security2:error] [pid 11274:tid 11565] [client 20.104.104.62:8885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/waf.php"] [unique_id "apK-jmbX5DA3XO6e_qRkbQAAAYE"]
[Sat Aug 29 05:12:14.118339 2026] [security2:error] [pid 11274:tid 11527] [client 93.123.109.228:36586] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/s3/.env.bak"] [unique_id "apK-jmbX5DA3XO6e_qRkbgAAAVw"]
[Sat Aug 29 05:12:14.119675 2026] [security2:error] [pid 11274:tid 11473] [client 158.158.54.35:20693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK-jmbX5DA3XO6e_qRkbwAAASc"]
[Sat Aug 29 05:12:14.121318 2026] [security2:error] [pid 1321:tid 1595] [client 93.123.109.228:43376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/php_info.php"] [unique_id "apK-jmjCPtor9NZ-byQIsQAABqY"]
[Sat Aug 29 05:12:14.135313 2026] [security2:error] [pid 11274:tid 11449] [client 20.151.200.44:21914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/f2r4.php"] [unique_id "apK-jmbX5DA3XO6e_qRkcgAAAQ8"]
[Sat Aug 29 05:12:14.136784 2026] [security2:error] [pid 11274:tid 11486] [client 158.23.147.79:24540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/about/function.php"] [unique_id "apK-jmbX5DA3XO6e_qRkcwAAATM"]
[Sat Aug 29 05:12:14.157503 2026] [security2:error] [pid 1321:tid 1593] [client 4.205.62.107:61696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/public/mah.php.php"] [unique_id "apK-jmjCPtor9NZ-byQItAAABqQ"]
[Sat Aug 29 05:12:14.159776 2026] [security2:error] [pid 11274:tid 11508] [client 93.123.109.228:43426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/phpinfo.php"] [unique_id "apK-jmbX5DA3XO6e_qRkdwAAAUk"]
[Sat Aug 29 05:12:14.166800 2026] [security2:error] [pid 1321:tid 1501] [client 93.123.109.228:43800] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/portal/.env"] [unique_id "apK-jmjCPtor9NZ-byQIuAAABkk"]
[Sat Aug 29 05:12:14.167923 2026] [security2:error] [pid 11274:tid 11560] [client 20.48.251.3:38680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/cache-compat.php"] [unique_id "apK-jmbX5DA3XO6e_qRkeQAAAXw"]
[Sat Aug 29 05:12:14.170659 2026] [core:error] [pid 11274:tid 11461] [client 20.52.41.200:4948] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:14.170674 2026] [core:error] [pid 11274:tid 11461] [client 20.52.41.200:4948] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:14.175416 2026] [security2:error] [pid 11274:tid 11472] [client 40.83.93.50:8599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/wxo.php"] [unique_id "apK-jmbX5DA3XO6e_qRkewAAASY"]
[Sat Aug 29 05:12:14.186667 2026] [security2:error] [pid 11274:tid 11515] [client 20.104.104.62:48749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/kcs.php"] [unique_id "apK-jmbX5DA3XO6e_qRkfQAAAVA"]
[Sat Aug 29 05:12:14.190029 2026] [security2:error] [pid 1321:tid 1609] [client 4.205.62.107:6905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/cu.php"] [unique_id "apK-jmjCPtor9NZ-byQIuQAABrQ"]
[Sat Aug 29 05:12:14.191116 2026] [security2:error] [pid 1321:tid 1561] [client 20.104.104.62:20679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-content/uploads/simple-file-list/DC.php"] [unique_id "apK-jmjCPtor9NZ-byQIugAABoQ"]
[Sat Aug 29 05:12:14.195147 2026] [security2:error] [pid 11274:tid 11492] [client 93.123.109.228:43782] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/prod/.env"] [unique_id "apK-jmbX5DA3XO6e_qRkgAAAATk"]
[Sat Aug 29 05:12:14.199529 2026] [security2:error] [pid 11274:tid 11475] [client 68.155.159.216:38273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-login.php"] [unique_id "apK-jmbX5DA3XO6e_qRkdgAAASk"]
[Sat Aug 29 05:12:14.204581 2026] [ssl:error] [pid 11274:tid 11480] [client 18.235.110.182:19175] AH02032: Hostname host2038.hostmonster.com (default host as no SNI was provided) and hostname webmail.carmenroberts.carmenroberts.com provided via HTTP have no compatible SSL setup for policy 'secure'
[Sat Aug 29 05:12:14.207686 2026] [security2:error] [pid 11274:tid 11493] [client 20.104.18.15:29183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/nano.php"] [unique_id "apK-jmbX5DA3XO6e_qRkhAAAATo"]
[Sat Aug 29 05:12:14.211171 2026] [security2:error] [pid 1321:tid 1594] [client 20.197.61.180:1393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/xmlrpc.php0"] [unique_id "apK-jmjCPtor9NZ-byQItgAABqU"]
[Sat Aug 29 05:12:14.216497 2026] [security2:error] [pid 1321:tid 1504] [client 20.48.250.41:39813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/selesai.php"] [unique_id "apK-jmjCPtor9NZ-byQIvAAABkw"]
[Sat Aug 29 05:12:14.232778 2026] [security2:error] [pid 1321:tid 1514] [client 93.123.109.228:43750] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/product/.env"] [unique_id "apK-jmjCPtor9NZ-byQIvQAABlY"]
[Sat Aug 29 05:12:14.240977 2026] [security2:error] [pid 1321:tid 1430] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-admin/wp-mail.php"] [unique_id "apK-jmjCPtor9NZ-byQIvgAGkEg"]
[Sat Aug 29 05:12:14.255288 2026] [security2:error] [pid 11274:tid 11485] [client 93.123.109.228:43736] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/production/.env"] [unique_id "apK-jmbX5DA3XO6e_qRkjwAAATI"]
[Sat Aug 29 05:12:14.259977 2026] [security2:error] [pid 1321:tid 1516] [client 20.104.104.62:46240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/bnnof6.php"] [unique_id "apK-jmjCPtor9NZ-byQIvwAABlg"]
[Sat Aug 29 05:12:14.263246 2026] [security2:error] [pid 11274:tid 11467] [client 20.52.41.200:2717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/txets.php"] [unique_id "apK-jmbX5DA3XO6e_qRkkQAAASE"]
[Sat Aug 29 05:12:14.274507 2026] [security2:error] [pid 1321:tid 1508] [client 20.104.18.15:29161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/wp.php"] [unique_id "apK-jmjCPtor9NZ-byQIwAAABlA"]
[Sat Aug 29 05:12:14.281134 2026] [security2:error] [pid 11274:tid 11553] [client 20.220.204.93:36708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/easy.php"] [unique_id "apK-jmbX5DA3XO6e_qRklQAAAXU"]
[Sat Aug 29 05:12:14.293480 2026] [security2:error] [pid 11274:tid 11444] [client 158.23.147.79:50148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/hehehehe.php"] [unique_id "apK-jmbX5DA3XO6e_qRkmAAAAQo"]
[Sat Aug 29 05:12:14.299867 2026] [security2:error] [pid 11274:tid 11438] [remote 93.123.109.228:33242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/test.php"] [unique_id "apK-jmbX5DA3XO6e_qRkmgABTHs"]
[Sat Aug 29 05:12:14.306568 2026] [security2:error] [pid 11274:tid 11526] [client 93.123.109.228:36586] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/server/.env"] [unique_id "apK-jmbX5DA3XO6e_qRknwAAAVs"]
[Sat Aug 29 05:12:14.308421 2026] [security2:error] [pid 11274:tid 11501] [client 20.48.251.3:38706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/fff.php"] [unique_id "apK-jmbX5DA3XO6e_qRkoAAAAUI"]
[Sat Aug 29 05:12:14.308661 2026] [security2:error] [pid 1321:tid 1574] [client 52.139.37.240:14491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/akcc.php"] [unique_id "apK-jmjCPtor9NZ-byQIwgAABpE"]
[Sat Aug 29 05:12:14.318188 2026] [security2:error] [pid 1321:tid 1612] [client 93.123.109.228:43800] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/project/.env"] [unique_id "apK-jmjCPtor9NZ-byQIwwAABrc"]
[Sat Aug 29 05:12:14.319673 2026] [security2:error] [pid 11274:tid 11496] [client 20.63.219.114:13973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/meta.php"] [unique_id "apK-jmbX5DA3XO6e_qRkogAAAT0"]
[Sat Aug 29 05:12:14.324791 2026] [security2:error] [pid 11274:tid 11516] [client 68.155.159.216:64079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/cgi-bin/index.php"] [unique_id "apK-jmbX5DA3XO6e_qRkowAAAVE"]
[Sat Aug 29 05:12:14.326881 2026] [security2:error] [pid 11274:tid 11541] [client 4.205.62.107:63028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/olfclass.php"] [unique_id "apK-jmbX5DA3XO6e_qRkpQAAAWo"]
[Sat Aug 29 05:12:14.327662 2026] [security2:error] [pid 1321:tid 1512] [client 20.240.128.207:2428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/upload.php"] [unique_id "apK-jmjCPtor9NZ-byQIxAAABlQ"]
[Sat Aug 29 05:12:14.335199 2026] [security2:error] [pid 1321:tid 1607] [client 93.123.109.228:43400] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/public-api/.env"] [unique_id "apK-jmjCPtor9NZ-byQIxQAABrI"]
[Sat Aug 29 05:12:14.341701 2026] [security2:error] [pid 11274:tid 11448] [client 93.123.109.228:43782] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/public/.env"] [unique_id "apK-jmbX5DA3XO6e_qRkqAAAAQ4"]
[Sat Aug 29 05:12:14.344060 2026] [security2:error] [pid 1321:tid 1529] [client 20.104.18.15:29144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/ano.php"] [unique_id "apK-jmjCPtor9NZ-byQIxgAABmU"]
[Sat Aug 29 05:12:14.346666 2026] [security2:error] [pid 11274:tid 11466] [client 4.205.62.107:59126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/ms-edit.php"] [unique_id "apK-jmbX5DA3XO6e_qRkqQAAASA"]
[Sat Aug 29 05:12:14.357098 2026] [security2:error] [pid 11274:tid 11507] [client 68.155.159.216:62721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/lock.php"] [unique_id "apK-jmbX5DA3XO6e_qRkqwAAAUg"]
[Sat Aug 29 05:12:14.359510 2026] [security2:error] [pid 11274:tid 11561] [client 20.104.104.62:48471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/wsz.php"] [unique_id "apK-jmbX5DA3XO6e_qRkrAAAAX0"]
[Sat Aug 29 05:12:14.364452 2026] [security2:error] [pid 11274:tid 11558] [client 93.123.109.228:43720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/public/phpinfo.php"] [unique_id "apK-jmbX5DA3XO6e_qRkrQAAAXo"]
[Sat Aug 29 05:12:14.365125 2026] [security2:error] [pid 1321:tid 1605] [client 93.123.109.228:36568] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/server/api/.env"] [unique_id "apK-jmjCPtor9NZ-byQIxwAABrA"]
[Sat Aug 29 05:12:14.378259 2026] [security2:error] [pid 11274:tid 11521] [client 34.169.171.101:9238] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.forensicengineernj.com"] [uri "/cgi-sys/404.html"] [unique_id "apK-jmbX5DA3XO6e_qRksgAAAVY"]
[Sat Aug 29 05:12:14.389438 2026] [security2:error] [pid 1321:tid 1582] [client 93.123.109.228:42914] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/server/backend/.env"] [unique_id "apK-jmjCPtor9NZ-byQI1AAABpk"]
[Sat Aug 29 05:12:14.390680 2026] [security2:error] [pid 11274:tid 11472] [client 68.155.159.216:1890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK-jmbX5DA3XO6e_qRkvAAAASY"]
[Sat Aug 29 05:12:14.393903 2026] [security2:error] [pid 1321:tid 1603] [client 34.169.171.101:9406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.171.169.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forensicengineernj.com"] [uri "/config/aws.php"] [unique_id "apK-jmjCPtor9NZ-byQI2gAABq4"]
[Sat Aug 29 05:12:14.394942 2026] [security2:error] [pid 11274:tid 11486] [client 34.169.171.101:9484] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/.aws/credentials.old"] [unique_id "apK-jmbX5DA3XO6e_qRkvwAAATM"]
[Sat Aug 29 05:12:14.396604 2026] [security2:error] [pid 11274:tid 11559] [client 34.169.171.101:9468] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "mail.forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-jmbX5DA3XO6e_qRkvQAAAXs"]
[Sat Aug 29 05:12:14.398973 2026] [security2:error] [pid 11274:tid 11449] [client 34.169.171.101:9458] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/.aws/credentials.bak"] [unique_id "apK-jmbX5DA3XO6e_qRkwQAAAQ8"]
[Sat Aug 29 05:12:14.399070 2026] [security2:error] [pid 11274:tid 11449] [client 34.169.171.101:9458] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "mail.forensicengineernj.com"] [uri "/.aws/credentials.bak"] [unique_id "apK-jmbX5DA3XO6e_qRkwQAAAQ8"]
[Sat Aug 29 05:12:14.399096 2026] [security2:error] [pid 1321:tid 1526] [client 34.169.171.101:9466] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/aws/.env"] [unique_id "apK-jmjCPtor9NZ-byQI3AAABmI"]
[Sat Aug 29 05:12:14.405571 2026] [security2:error] [pid 11274:tid 11451] [client 93.123.109.228:43736] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/public_html/.env"] [unique_id "apK-jmbX5DA3XO6e_qRkwwAAARE"]
[Sat Aug 29 05:12:14.408907 2026] [security2:error] [pid 1321:tid 1490] [client 20.100.175.163:21551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-admin/a.php"] [unique_id "apK-jmjCPtor9NZ-byQI3QAABj4"]
[Sat Aug 29 05:12:14.410188 2026] [security2:error] [pid 11274:tid 11492] [client 20.104.104.62:48090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/ah24.php"] [unique_id "apK-jmbX5DA3XO6e_qRkxQAAATk"]
[Sat Aug 29 05:12:14.411875 2026] [security2:error] [pid 1321:tid 1567] [client 158.23.147.79:14203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-admin/network/index.php"] [unique_id "apK-jmjCPtor9NZ-byQI3gAABoo"]
[Sat Aug 29 05:12:14.433071 2026] [security2:error] [pid 11274:tid 11489] [client 34.169.171.101:9468] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-jmbX5DA3XO6e_qRkzwAAATY"], referer: https://mail.forensicengineernj.com/aws/.env.production
[Sat Aug 29 05:12:14.437192 2026] [security2:error] [pid 11274:tid 11555] [client 20.48.251.3:38200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/sadd.php"] [unique_id "apK-jmbX5DA3XO6e_qRk0AAAAXc"]
[Sat Aug 29 05:12:14.439329 2026] [security2:error] [pid 11274:tid 11499] [client 202.71.25.11:50877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.25.71.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK-jmbX5DA3XO6e_qRk0QAAAUA"]
[Sat Aug 29 05:12:14.439462 2026] [security2:error] [pid 11274:tid 11499] [client 202.71.25.11:50877] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK-jmbX5DA3XO6e_qRk0QAAAUA"]
[Sat Aug 29 05:12:14.445586 2026] [security2:error] [pid 1321:tid 1548] [client 93.123.109.228:36620] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/qa/.env"] [unique_id "apK-jmjCPtor9NZ-byQI6wAABnc"]
[Sat Aug 29 05:12:14.449556 2026] [security2:error] [pid 11274:tid 11454] [client 20.220.204.93:9478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/fresh3.php"] [unique_id "apK-jmbX5DA3XO6e_qRk1AAAARQ"]
[Sat Aug 29 05:12:14.451161 2026] [security2:error] [pid 1321:tid 1491] [client 20.240.128.207:18312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/404.php"] [unique_id "apK-jmjCPtor9NZ-byQI7AAABj8"]
[Sat Aug 29 05:12:14.474263 2026] [security2:error] [pid 11274:tid 11485] [client 158.23.147.79:7110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK-jmbX5DA3XO6e_qRk3AAAATI"]
[Sat Aug 29 05:12:14.484697 2026] [security2:error] [pid 1321:tid 1580] [client 20.104.18.15:29164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/mgrr.php"] [unique_id "apK-jmjCPtor9NZ-byQI7wAABpc"]
[Sat Aug 29 05:12:14.486034 2026] [security2:error] [pid 1321:tid 1368] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-admin/wp-settings.php"] [unique_id "apK-jmjCPtor9NZ-byQI8AAGSAo"]
[Sat Aug 29 05:12:14.490280 2026] [security2:error] [pid 11274:tid 11514] [client 20.104.104.62:40243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-content/uploads/simple-file-list/shell.php"] [unique_id "apK-jmbX5DA3XO6e_qRk3wAAAU8"]
[Sat Aug 29 05:12:14.502916 2026] [security2:error] [pid 1321:tid 1610] [client 52.139.37.240:14915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK-jmjCPtor9NZ-byQI9AAABrU"]
[Sat Aug 29 05:12:14.513895 2026] [security2:error] [pid 1321:tid 1609] [client 20.104.18.15:29645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/abcd.php"] [unique_id "apK-jmjCPtor9NZ-byQI9wAABrQ"]
[Sat Aug 29 05:12:14.534648 2026] [security2:error] [pid 11274:tid 11501] [client 93.123.109.228:43048] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/service/.env"] [unique_id "apK-jmbX5DA3XO6e_qRk5gAAAUI"]
[Sat Aug 29 05:12:14.555498 2026] [security2:error] [pid 11274:tid 11505] [client 93.123.109.228:43534] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/services/.env"] [unique_id "apK-jmbX5DA3XO6e_qRk6QAAAUY"]
[Sat Aug 29 05:12:14.566122 2026] [security2:error] [pid 1321:tid 1499] [client 20.48.251.3:38673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/app_dev.php"] [unique_id "apK-jmjCPtor9NZ-byQI-wAABkc"]
[Sat Aug 29 05:12:14.575499 2026] [security2:error] [pid 11274:tid 11506] [client 20.104.104.62:46219] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/ztv.php"] [unique_id "apK-jmbX5DA3XO6e_qRk7gAAAUc"]
[Sat Aug 29 05:12:14.611070 2026] [security2:error] [pid 11274:tid 11538] [client 158.158.54.35:15090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wp-good.php"] [unique_id "apK-jmbX5DA3XO6e_qRk8wAAAWc"]
[Sat Aug 29 05:12:14.612127 2026] [security2:error] [pid 11274:tid 11487] [client 20.52.41.200:5289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "apK-jmbX5DA3XO6e_qRk9AAAATQ"]
[Sat Aug 29 05:12:14.630661 2026] [security2:error] [pid 1321:tid 1566] [client 158.23.147.79:64403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/ws.php"] [unique_id "apK-jmjCPtor9NZ-byQI_gAABok"]
[Sat Aug 29 05:12:14.637625 2026] [security2:error] [pid 11274:tid 11507] [client 158.23.147.79:55898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-l0gin.php"] [unique_id "apK-jmbX5DA3XO6e_qRk-gAAAUg"]
[Sat Aug 29 05:12:14.640195 2026] [security2:error] [pid 1321:tid 1560] [client 20.220.204.93:59630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/bgymj.php"] [unique_id "apK-jmjCPtor9NZ-byQJAAAABoM"]
[Sat Aug 29 05:12:14.644041 2026] [security2:error] [pid 11274:tid 11546] [client 20.104.18.15:29659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/mac.php"] [unique_id "apK-jmbX5DA3XO6e_qRk_QAAAW4"]
[Sat Aug 29 05:12:14.648707 2026] [security2:error] [pid 1321:tid 1512] [client 20.104.18.15:29122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/nofile.php"] [unique_id "apK-jmjCPtor9NZ-byQJAQAABlQ"]
[Sat Aug 29 05:12:14.652939 2026] [security2:error] [pid 1321:tid 1522] [client 20.104.104.62:48494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/msy.php"] [unique_id "apK-jmjCPtor9NZ-byQJAgAABl4"]
[Sat Aug 29 05:12:14.656491 2026] [security2:error] [pid 11274:tid 11467] [client 87.219.197.128:62506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK-jmbX5DA3XO6e_qRlAgAAASE"]
[Sat Aug 29 05:12:14.656642 2026] [security2:error] [pid 11274:tid 11467] [client 87.219.197.128:62506] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK-jmbX5DA3XO6e_qRlAgAAASE"]
[Sat Aug 29 05:12:14.658023 2026] [security2:error] [pid 11274:tid 11521] [client 20.104.49.130:63500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.timportlock.net"] [uri "/wp.php"] [unique_id "apK-jmbX5DA3XO6e_qRlAwAAAVY"]
[Sat Aug 29 05:12:14.659140 2026] [security2:error] [pid 1321:tid 1607] [client 93.123.109.228:43492] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/shared/.env"] [unique_id "apK-jmjCPtor9NZ-byQJAwAABrI"]
[Sat Aug 29 05:12:14.662436 2026] [security2:error] [pid 1321:tid 1496] [client 40.83.93.50:14780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/as.php"] [unique_id "apK-jmjCPtor9NZ-byQJBAAABkQ"]
[Sat Aug 29 05:12:14.686734 2026] [security2:error] [pid 1321:tid 1549] [client 20.63.219.114:15791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/randkeyword.php"] [unique_id "apK-jmjCPtor9NZ-byQJBgAABng"]
[Sat Aug 29 05:12:14.693041 2026] [security2:error] [pid 1321:tid 1542] [client 4.205.62.107:63327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/broadcasting.php"] [unique_id "apK-jmjCPtor9NZ-byQJBwAABnI"]
[Sat Aug 29 05:12:14.703159 2026] [security2:error] [pid 11274:tid 11519] [client 20.48.251.3:38671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/thui.php"] [unique_id "apK-jmbX5DA3XO6e_qRlCQAAAVQ"]
[Sat Aug 29 05:12:14.703232 2026] [security2:error] [pid 11274:tid 11512] [client 93.123.109.228:43048] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/shop/.env"] [unique_id "apK-jmbX5DA3XO6e_qRlBwAAAU0"]
[Sat Aug 29 05:12:14.707217 2026] [security2:error] [pid 1321:tid 1574] [client 52.139.37.240:14928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/s.php"] [unique_id "apK-jmjCPtor9NZ-byQJCQAABpE"]
[Sat Aug 29 05:12:14.723252 2026] [security2:error] [pid 11274:tid 11452] [client 4.205.62.107:59083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/hosty.php"] [unique_id "apK-jmbX5DA3XO6e_qRlDwAAARI"]
[Sat Aug 29 05:12:14.731847 2026] [security2:error] [pid 1321:tid 1433] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-admin/wp-signup.php"] [unique_id "apK-jmjCPtor9NZ-byQJDAAGqEs"]
[Sat Aug 29 05:12:14.732675 2026] [cgid:error] [pid 11274:tid 11470] [client 45.148.10.62:60042] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/skycoati/public_html/404.shtml
[Sat Aug 29 05:12:14.753407 2026] [security2:error] [pid 11274:tid 11492] [client 20.104.104.62:8960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/kure.php"] [unique_id "apK-jmbX5DA3XO6e_qRlFQAAATk"]
[Sat Aug 29 05:12:14.758371 2026] [security2:error] [pid 11274:tid 11534] [client 93.123.109.228:36586] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/src/.env"] [unique_id "apK-jmbX5DA3XO6e_qRlFgAAAWM"]
[Sat Aug 29 05:12:14.769122 2026] [security2:error] [pid 1321:tid 1603] [client 158.158.54.35:15699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-content/themes/pridmag/il.php"] [unique_id "apK-jmjCPtor9NZ-byQJDgAABq4"]
[Sat Aug 29 05:12:14.780889 2026] [security2:error] [pid 11274:tid 11493] [client 20.48.250.41:36414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK-jmbX5DA3XO6e_qRlGQAAATo"]
[Sat Aug 29 05:12:14.789750 2026] [security2:error] [pid 1321:tid 1606] [client 68.155.159.216:21494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-login.php"] [unique_id "apK-jmjCPtor9NZ-byQJDwAABrE"]
[Sat Aug 29 05:12:14.791709 2026] [security2:error] [pid 1321:tid 1584] [client 20.104.18.15:29150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/simple.php"] [unique_id "apK-jmjCPtor9NZ-byQJEAAABps"]
[Sat Aug 29 05:12:14.825213 2026] [security2:error] [pid 11274:tid 11456] [client 20.48.250.41:25573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/fs.php"] [unique_id "apK-jmbX5DA3XO6e_qRlIgAAARY"]
[Sat Aug 29 05:12:14.830498 2026] [security2:error] [pid 11274:tid 11471] [client 20.220.204.93:18735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/ws69.php"] [unique_id "apK-jmbX5DA3XO6e_qRlIwAAASU"]
[Sat Aug 29 05:12:14.831276 2026] [security2:error] [pid 1321:tid 1576] [client 20.48.251.3:38662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/session.php"] [unique_id "apK-jmjCPtor9NZ-byQJFQAABpM"]
[Sat Aug 29 05:12:14.845822 2026] [security2:error] [pid 11274:tid 11454] [client 20.151.200.44:22223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/sadis.php"] [unique_id "apK-jmbX5DA3XO6e_qRlJQAAARQ"]
[Sat Aug 29 05:12:14.866120 2026] [security2:error] [pid 1321:tid 1564] [client 20.104.18.15:29059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/run.php"] [unique_id "apK-jmjCPtor9NZ-byQJGAAABoc"]
[Sat Aug 29 05:12:14.878715 2026] [security2:error] [pid 1321:tid 1548] [client 158.23.147.79:60166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK-jmjCPtor9NZ-byQJGgAABnc"]
[Sat Aug 29 05:12:14.897014 2026] [security2:error] [pid 11274:tid 11383] [remote 93.123.109.228:33242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/wp-config.php"] [unique_id "apK-jmbX5DA3XO6e_qRlMQABTEU"]
[Sat Aug 29 05:12:14.903188 2026] [security2:error] [pid 1321:tid 1591] [client 52.139.37.240:15259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/sagax.php"] [unique_id "apK-jmjCPtor9NZ-byQJHAAABqI"]
[Sat Aug 29 05:12:14.904788 2026] [security2:error] [pid 11274:tid 11568] [client 20.104.104.62:48756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/siln.php"] [unique_id "apK-jmbX5DA3XO6e_qRlNAAAAYQ"]
[Sat Aug 29 05:12:14.910930 2026] [security2:error] [pid 11274:tid 11348] [remote 93.123.109.228:33242] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/wp-config.php.bak"] [unique_id "apK-jmbX5DA3XO6e_qRlNgABTCM"]
[Sat Aug 29 05:12:14.916531 2026] [security2:error] [pid 11274:tid 11488] [client 93.123.109.228:43280] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/s3/.env.bak"] [unique_id "apK-jmbX5DA3XO6e_qRlOAAAATU"]
[Sat Aug 29 05:12:14.920709 2026] [cgid:error] [pid 11274:tid 11475] [client 45.148.10.62:60042] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/skycoati/public_html/404.shtml
[Sat Aug 29 05:12:14.925883 2026] [core:error] [pid 11274:tid 11449] [client 20.100.175.163:23126] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:14.925904 2026] [core:error] [pid 11274:tid 11449] [client 20.100.175.163:23126] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:14.929987 2026] [security2:error] [pid 11274:tid 11494] [client 68.155.159.216:43916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/file88.php"] [unique_id "apK-jmbX5DA3XO6e_qRlPgAAATs"]
[Sat Aug 29 05:12:14.931785 2026] [security2:error] [pid 11274:tid 11340] [remote 93.123.109.228:33242] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/wp-config.php.new"] [unique_id "apK-jmbX5DA3XO6e_qRlPwABTBs"]
[Sat Aug 29 05:12:14.932075 2026] [security2:error] [pid 11274:tid 11340] [remote 93.123.109.228:33242] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/wp-config.php.old"] [unique_id "apK-jmbX5DA3XO6e_qRlQAABTBs"]
[Sat Aug 29 05:12:14.935651 2026] [security2:error] [pid 11274:tid 11552] [client 103.215.74.26:54410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.74.215.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.com"] [uri "/wp/index.php"] [unique_id "apK-jmbX5DA3XO6e_qRlQQAAAXQ"], referer: https://kglogisticsinc.com/wp/wp-admin/
[Sat Aug 29 05:12:14.943641 2026] [security2:error] [pid 1321:tid 1501] [client 20.104.18.15:29127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/xty.php"] [unique_id "apK-jmjCPtor9NZ-byQJIAAABkk"]
[Sat Aug 29 05:12:14.949608 2026] [security2:error] [pid 1321:tid 1547] [client 20.240.128.207:19341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/php.php"] [unique_id "apK-jmjCPtor9NZ-byQJIQAABnY"]
[Sat Aug 29 05:12:14.951636 2026] [security2:error] [pid 11274:tid 11507] [client 93.123.109.228:43002] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/srv/.env"] [unique_id "apK-jmbX5DA3XO6e_qRlRAAAAUg"]
[Sat Aug 29 05:12:14.959998 2026] [security2:error] [pid 1321:tid 1562] [client 20.48.251.3:38198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/saml.php"] [unique_id "apK-jmjCPtor9NZ-byQJIwAABoU"]
[Sat Aug 29 05:12:14.960422 2026] [security2:error] [pid 1321:tid 1608] [client 93.123.109.228:36568] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/stage/.env"] [unique_id "apK-jmjCPtor9NZ-byQJIgAABrM"]
[Sat Aug 29 05:12:14.963022 2026] [security2:error] [pid 1321:tid 1565] [client 4.205.62.107:5658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/lala.php"] [unique_id "apK-jmjCPtor9NZ-byQJJAAABog"]
[Sat Aug 29 05:12:14.965612 2026] [security2:error] [pid 11274:tid 11526] [client 20.104.49.130:60945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/about.php"] [unique_id "apK-jmbX5DA3XO6e_qRlSAAAAVs"]
[Sat Aug 29 05:12:14.965676 2026] [security2:error] [pid 11274:tid 11551] [client 20.48.250.41:25542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/ioxi.php"] [unique_id "apK-jmbX5DA3XO6e_qRlSQAAAXM"]
[Sat Aug 29 05:12:14.976794 2026] [security2:error] [pid 1321:tid 1471] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-blog-header.php"] [unique_id "apK-jmjCPtor9NZ-byQJJQAGW3A"]
[Sat Aug 29 05:12:14.988819 2026] [security2:error] [pid 11274:tid 11451] [client 20.197.61.180:1920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/content.php"] [unique_id "apK-jmbX5DA3XO6e_qRlTQAAARE"]
[Sat Aug 29 05:12:14.994207 2026] [security2:error] [pid 1321:tid 1522] [client 93.123.109.228:43492] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/staging/.env"] [unique_id "apK-jmjCPtor9NZ-byQJJgAABl4"]
[Sat Aug 29 05:12:15.005001 2026] [security2:error] [pid 1321:tid 1612] [client 20.104.18.15:29181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/new.php"] [unique_id "apK-j2jCPtor9NZ-byQJKAAABrc"]
[Sat Aug 29 05:12:15.014502 2026] [security2:error] [pid 11274:tid 11520] [client 20.52.41.200:2731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-content/themes/about.php"] [unique_id "apK-j2bX5DA3XO6e_qRlTwAAAVU"]
[Sat Aug 29 05:12:15.023286 2026] [security2:error] [pid 1321:tid 1529] [client 20.48.250.41:36132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/06.php"] [unique_id "apK-j2jCPtor9NZ-byQJKwAABmU"]
[Sat Aug 29 05:12:15.024999 2026] [security2:error] [pid 11274:tid 11470] [client 93.123.109.228:43346] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/server/.env"] [unique_id "apK-j2bX5DA3XO6e_qRlUgAAASQ"]
[Sat Aug 29 05:12:15.028482 2026] [security2:error] [pid 11274:tid 11498] [client 158.23.147.79:43264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-admin/images/about.php"] [unique_id "apK-j2bX5DA3XO6e_qRlUwAAAT8"]
[Sat Aug 29 05:12:15.064936 2026] [security2:error] [pid 11274:tid 11554] [client 158.158.54.35:1311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "apK-j2bX5DA3XO6e_qRlWAAAAXY"]
[Sat Aug 29 05:12:15.066422 2026] [security2:error] [pid 1321:tid 1542] [client 93.123.109.228:36664] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/server/api/.env"] [unique_id "apK-j2jCPtor9NZ-byQJLgAABnI"]
[Sat Aug 29 05:12:15.067225 2026] [security2:error] [pid 1321:tid 1506] [client 93.123.109.228:42914] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/stg/.env"] [unique_id "apK-j2jCPtor9NZ-byQJLwAABk4"]
[Sat Aug 29 05:12:15.071534 2026] [security2:error] [pid 1321:tid 1574] [client 68.155.159.216:21446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/ws.php"] [unique_id "apK-j2jCPtor9NZ-byQJMAAABpE"]
[Sat Aug 29 05:12:15.075253 2026] [security2:error] [pid 1321:tid 1500] [client 20.52.41.200:4974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "apK-j2jCPtor9NZ-byQJMQAABkg"]
[Sat Aug 29 05:12:15.080950 2026] [security2:error] [pid 1321:tid 1596] [client 20.104.18.15:29675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/sallu.php"] [unique_id "apK-j2jCPtor9NZ-byQJMgAABqc"]
[Sat Aug 29 05:12:15.085040 2026] [security2:error] [pid 11274:tid 11530] [client 20.220.204.93:58957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/ccs.php"] [unique_id "apK-j2bX5DA3XO6e_qRlWQAAAV8"]
[Sat Aug 29 05:12:15.089799 2026] [cgid:error] [pid 11274:tid 11479] [client 45.148.10.62:60042] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/skycoati/public_html/404.shtml
[Sat Aug 29 05:12:15.089819 2026] [security2:error] [pid 11274:tid 11555] [client 20.48.251.3:38191] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/aws_settings.php"] [unique_id "apK-j2bX5DA3XO6e_qRlXQAAAXc"]
[Sat Aug 29 05:12:15.100842 2026] [security2:error] [pid 1321:tid 1557] [client 93.123.109.228:43750] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/server/backend/.env"] [unique_id "apK-j2jCPtor9NZ-byQJMwAABoA"]
[Sat Aug 29 05:12:15.108903 2026] [security2:error] [pid 1321:tid 1555] [client 20.104.49.130:53543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pvillusions.com"] [uri "/yawa.php"] [unique_id "apK-j2jCPtor9NZ-byQJNgAABn4"]
[Sat Aug 29 05:12:15.108913 2026] [security2:error] [pid 1321:tid 1603] [client 4.205.62.107:64995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/myfile.php"] [unique_id "apK-j2jCPtor9NZ-byQJNwAABq4"]
[Sat Aug 29 05:12:15.123238 2026] [security2:error] [pid 1321:tid 1526] [client 20.48.250.41:25520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/bootstrap.php"] [unique_id "apK-j2jCPtor9NZ-byQJOAAABmI"]
[Sat Aug 29 05:12:15.152009 2026] [security2:error] [pid 1321:tid 1560] [client 40.83.93.50:14741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/room.php"] [unique_id "apK-j2jCPtor9NZ-byQJOwAABoM"]
[Sat Aug 29 05:12:15.159349 2026] [http2:warn] [pid 1041789:tid 1042021] [client 57.141.14.41:28286] h2_stream(1041789-372-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:12:15.169784 2026] [security2:error] [pid 11274:tid 11445] [client 93.123.109.228:36726] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK-j2bX5DA3XO6e_qRlZAAAAQs"]
[Sat Aug 29 05:12:15.182989 2026] [security2:error] [pid 1321:tid 1563] [client 20.104.18.15:29670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/inx.php"] [unique_id "apK-j2jCPtor9NZ-byQJPgAABoY"]
[Sat Aug 29 05:12:15.194348 2026] [security2:error] [pid 11274:tid 11571] [client 20.63.219.114:15767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/goods.php"] [unique_id "apK-j2bX5DA3XO6e_qRlagAAAYc"]
[Sat Aug 29 05:12:15.195399 2026] [security2:error] [pid 11274:tid 11488] [client 20.240.128.207:2111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-content/file.php"] [unique_id "apK-j2bX5DA3XO6e_qRlawAAATU"]
[Sat Aug 29 05:12:15.206790 2026] [security2:error] [pid 1321:tid 1592] [client 20.48.250.41:36833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/class.php"] [unique_id "apK-j2jCPtor9NZ-byQJQQAABqM"]
[Sat Aug 29 05:12:15.211517 2026] [security2:error] [pid 1321:tid 1577] [client 158.158.54.35:19343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/assets/images/doc.php"] [unique_id "apK-j2jCPtor9NZ-byQJQwAABpQ"]
[Sat Aug 29 05:12:15.212707 2026] [security2:error] [pid 1321:tid 1564] [client 93.123.109.228:36762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK-j2jCPtor9NZ-byQJQgAABoc"]
[Sat Aug 29 05:12:15.213001 2026] [security2:error] [pid 1321:tid 1527] [client 52.139.37.240:15257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/wp-content/plugins/ftde.php"] [unique_id "apK-j2jCPtor9NZ-byQJRAAABmM"]
[Sat Aug 29 05:12:15.221916 2026] [security2:error] [pid 1321:tid 1463] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-blogs.php"] [unique_id "apK-j2jCPtor9NZ-byQJRgAGWmg"]
[Sat Aug 29 05:12:15.223323 2026] [security2:error] [pid 11274:tid 11464] [client 93.123.109.228:36556] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/stripe/.env"] [unique_id "apK-j2bX5DA3XO6e_qRlbgAAAR4"]
[Sat Aug 29 05:12:15.226371 2026] [security2:error] [pid 1321:tid 1591] [client 20.48.251.3:38665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/aws-credentials.php"] [unique_id "apK-j2jCPtor9NZ-byQJSAAABqI"]
[Sat Aug 29 05:12:15.227513 2026] [security2:error] [pid 1321:tid 1491] [client 20.104.18.15:29166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/codex.php"] [unique_id "apK-j2jCPtor9NZ-byQJSQAABj8"]
[Sat Aug 29 05:12:15.250884 2026] [security2:error] [pid 1321:tid 1549] [client 114.119.132.85:36951] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "oldwestradio.com"] [uri "/station_bass_reeves.shtml"] [unique_id "apK-j2jCPtor9NZ-byQJTgAABng"], referer: https://oldwestradio.com/
[Sat Aug 29 05:12:15.256781 2026] [security2:error] [pid 11274:tid 11552] [client 45.148.10.62:60042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "skycoatingsports.com"] [uri "/phpinfo.php"] [unique_id "apK-j2bX5DA3XO6e_qRlcgAAAXQ"]
[Sat Aug 29 05:12:15.259312 2026] [security2:error] [pid 11274:tid 11522] [client 93.123.109.228:43716] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/service/.env"] [unique_id "apK-j2bX5DA3XO6e_qRlcwAAAVc"]
[Sat Aug 29 05:12:15.264580 2026] [security2:error] [pid 11274:tid 11509] [client 20.151.200.44:63768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/xcre1.php"] [unique_id "apK-j2bX5DA3XO6e_qRldAAAAUo"]
[Sat Aug 29 05:12:15.267338 2026] [security2:error] [pid 11274:tid 11444] [client 93.123.109.228:36816] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(\\\\/\\\\*\\\\!? ?(?:select|grant|delete|insert|drop|alter|replace|truncate|update|create|rename|describe|union|concat|group_concat))" at REQUEST_FILENAME. [file "/opt/mod_security/hg_rules.conf"] [line "1019"] [id "9000042"] [rev "2.2.2"] [msg "SQL Comment Sequence Detected."] [data "/*update"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/*update.cgi*"] [unique_id "apK-j2bX5DA3XO6e_qRldQAAAQo"]
[Sat Aug 29 05:12:15.298833 2026] [security2:error] [pid 11274:tid 11526] [client 93.123.109.228:43766] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/services/.env"] [unique_id "apK-j2bX5DA3XO6e_qRldwAAAVs"]
[Sat Aug 29 05:12:15.298887 2026] [security2:error] [pid 11274:tid 11551] [client 4.205.62.107:60597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/zaza.php"] [unique_id "apK-j2bX5DA3XO6e_qRleAAAAXM"]
[Sat Aug 29 05:12:15.318116 2026] [security2:error] [pid 11274:tid 11545] [client 20.104.18.15:29653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/vpn.php"] [unique_id "apK-j2bX5DA3XO6e_qRlegAAAW0"]
[Sat Aug 29 05:12:15.323896 2026] [security2:error] [pid 1321:tid 1532] [client 4.205.62.107:6851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/services.php"] [unique_id "apK-j2jCPtor9NZ-byQJUwAABmg"]
[Sat Aug 29 05:12:15.327972 2026] [security2:error] [pid 1321:tid 1489] [client 68.155.159.216:23408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK-j2jCPtor9NZ-byQJVAAABj0"]
[Sat Aug 29 05:12:15.329600 2026] [security2:error] [pid 1321:tid 1550] [client 93.123.109.228:43492] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/terraform.tfstate.backup"] [unique_id "apK-j2jCPtor9NZ-byQJVQAABnk"]
[Sat Aug 29 05:12:15.355406 2026] [security2:error] [pid 11274:tid 11527] [client 20.48.251.3:38158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/umgebung.php"] [unique_id "apK-j2bX5DA3XO6e_qRlgwAAAVw"]
[Sat Aug 29 05:12:15.359986 2026] [security2:error] [pid 11274:tid 11477] [client 20.220.204.93:18711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/mar.php"] [unique_id "apK-j2bX5DA3XO6e_qRlhAAAASs"]
[Sat Aug 29 05:12:15.361791 2026] [security2:error] [pid 1321:tid 1508] [client 20.104.18.15:29645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/5656.php"] [unique_id "apK-j2jCPtor9NZ-byQJWQAABlA"]
[Sat Aug 29 05:12:15.391565 2026] [security2:error] [pid 1321:tid 1555] [client 93.123.109.228:36750] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/.env"] [unique_id "apK-j2jCPtor9NZ-byQJWwAABn4"]
[Sat Aug 29 05:12:15.393900 2026] [security2:error] [pid 11274:tid 11479] [client 93.123.109.228:43524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/test.php"] [unique_id "apK-j2bX5DA3XO6e_qRligAAASw"]
[Sat Aug 29 05:12:15.400603 2026] [security2:error] [pid 1321:tid 1601] [client 93.123.109.228:42914] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/test/.env"] [unique_id "apK-j2jCPtor9NZ-byQJXAAABqw"]
[Sat Aug 29 05:12:15.402269 2026] [security2:error] [pid 11274:tid 11499] [client 20.104.49.130:56221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/wsd.php"] [unique_id "apK-j2bX5DA3XO6e_qRliwAAAUA"]
[Sat Aug 29 05:12:15.409150 2026] [security2:error] [pid 11274:tid 11512] [client 52.139.37.240:15245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/wp-content/uploads/admin.php"] [unique_id "apK-j2bX5DA3XO6e_qRljAAAAU0"]
[Sat Aug 29 05:12:15.410813 2026] [security2:error] [pid 11274:tid 11572] [client 93.123.109.228:43716] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/shared/.env"] [unique_id "apK-j2bX5DA3XO6e_qRljQAAAYg"]
[Sat Aug 29 05:12:15.414836 2026] [security2:error] [pid 1321:tid 1567] [client 64.89.161.160:61145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 160.161.89.64.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/assets/js/file-uploader/server/php/index.php"] [unique_id "apK-j2jCPtor9NZ-byQJXgAABoo"]
[Sat Aug 29 05:12:15.416248 2026] [security2:error] [pid 11274:tid 11549] [client 93.123.109.228:36816] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/laravel/app/.env"] [unique_id "apK-j2bX5DA3XO6e_qRljgAAAXE"]
[Sat Aug 29 05:12:15.417772 2026] [security2:error] [pid 11274:tid 11529] [client 93.123.109.228:43280] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/shop/.env"] [unique_id "apK-j2bX5DA3XO6e_qRlkAAAAV4"]
[Sat Aug 29 05:12:15.417891 2026] [security2:error] [pid 11274:tid 11480] [client 34.169.171.101:9516] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.forensicengineernj.com"] [uri "/@fs/app/.env"] [unique_id "apK-j2bX5DA3XO6e_qRlkQAAAS0"]
[Sat Aug 29 05:12:15.418250 2026] [security2:error] [pid 11274:tid 11561] [client 34.169.171.101:9500] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.forensicengineernj.com"] [uri "/@fs/.env"] [unique_id "apK-j2bX5DA3XO6e_qRlkgAAAX0"]
[Sat Aug 29 05:12:15.418961 2026] [security2:error] [pid 1321:tid 1496] [client 34.169.171.101:9562] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "www.forensicengineernj.com"] [uri "/@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ"] [unique_id "apK-j2jCPtor9NZ-byQJXwAABkQ"]
[Sat Aug 29 05:12:15.420617 2026] [security2:error] [pid 11274:tid 11506] [client 34.169.171.101:9520] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.forensicengineernj.com"] [uri "/@fs/src/.env"] [unique_id "apK-j2bX5DA3XO6e_qRllQAAAUc"]
[Sat Aug 29 05:12:15.420721 2026] [security2:error] [pid 11274:tid 11506] [client 34.169.171.101:9520] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.forensicengineernj.com"] [uri "/@fs/src/.env"] [unique_id "apK-j2bX5DA3XO6e_qRllQAAAUc"]
[Sat Aug 29 05:12:15.420972 2026] [security2:error] [pid 1321:tid 1581] [client 34.169.171.101:9554] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.forensicengineernj.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2fapp/.env"] [unique_id "apK-j2jCPtor9NZ-byQJYAAABpg"]
[Sat Aug 29 05:12:15.422271 2026] [security2:error] [pid 11274:tid 11487] [client 20.100.175.163:25969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK-j2bX5DA3XO6e_qRllgAAATQ"]
[Sat Aug 29 05:12:15.422604 2026] [security2:error] [pid 11274:tid 11540] [client 34.169.171.101:9618] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.forensicengineernj.com"] [uri "/@fs/root/.aws/credentials.backup"] [unique_id "apK-j2bX5DA3XO6e_qRllwAAAWk"]
[Sat Aug 29 05:12:15.423169 2026] [security2:error] [pid 11274:tid 11459] [client 34.169.171.101:9652] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "www.forensicengineernj.com"] [uri "/@fs/.env.production"] [unique_id "apK-j2bX5DA3XO6e_qRlmAAAARk"]
[Sat Aug 29 05:12:15.425199 2026] [security2:error] [pid 1321:tid 1529] [client 34.169.171.101:9564] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.forensicengineernj.com"] [uri "/.env"] [unique_id "apK-j2jCPtor9NZ-byQJYgAABmU"]
[Sat Aug 29 05:12:15.428330 2026] [security2:error] [pid 1321:tid 1506] [client 34.169.171.101:9508] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.forensicengineernj.com"] [uri "/@fs/root/.env"] [unique_id "apK-j2jCPtor9NZ-byQJagAABk4"]
[Sat Aug 29 05:12:15.428447 2026] [security2:error] [pid 1321:tid 1506] [client 34.169.171.101:9508] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.forensicengineernj.com"] [uri "/@fs/root/.env"] [unique_id "apK-j2jCPtor9NZ-byQJagAABk4"]
[Sat Aug 29 05:12:15.428834 2026] [security2:error] [pid 1321:tid 1574] [client 34.169.171.101:9630] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.forensicengineernj.com"] [uri "/@fs/root/.aws/credentials.bak"] [unique_id "apK-j2jCPtor9NZ-byQJaAAABpE"]
[Sat Aug 29 05:12:15.429665 2026] [core:error] [pid 1321:tid 1500] [client 34.169.171.101:9570] AH10244: invalid URI path (/@fs/../../.env?raw??)
[Sat Aug 29 05:12:15.431237 2026] [security2:error] [pid 1321:tid 1596] [client 34.169.171.101:9534] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "www.forensicengineernj.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK-j2jCPtor9NZ-byQJbgAABqc"]
[Sat Aug 29 05:12:15.432492 2026] [security2:error] [pid 1321:tid 1495] [client 34.169.171.101:9548] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.forensicengineernj.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2froot/.env"] [unique_id "apK-j2jCPtor9NZ-byQJcAAABkM"]
[Sat Aug 29 05:12:15.433590 2026] [security2:error] [pid 1321:tid 1500] [client 34.169.171.101:9570] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "www.forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-j2jCPtor9NZ-byQJbQAABkg"]
[Sat Aug 29 05:12:15.439049 2026] [security2:error] [pid 1321:tid 1590] [client 34.169.171.101:9658] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "www.forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-j2jCPtor9NZ-byQJeQAABqE"]
[Sat Aug 29 05:12:15.439459 2026] [security2:error] [pid 1321:tid 1526] [client 34.169.171.101:9726] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "www.forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-j2jCPtor9NZ-byQJeAAABmI"]
[Sat Aug 29 05:12:15.448175 2026] [security2:error] [pid 1321:tid 1514] [client 20.240.128.207:17655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/init.php"] [unique_id "apK-j2jCPtor9NZ-byQJfQAABlY"]
[Sat Aug 29 05:12:15.459020 2026] [security2:error] [pid 1321:tid 1507] [client 68.155.159.216:7161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK-j2jCPtor9NZ-byQJfwAABk8"]
[Sat Aug 29 05:12:15.468413 2026] [security2:error] [pid 1321:tid 1393] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-comments-post.php"] [unique_id "apK-j2jCPtor9NZ-byQJhQAGeCM"]
[Sat Aug 29 05:12:15.470750 2026] [security2:error] [pid 1321:tid 1491] [client 34.169.171.101:9508] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-j2jCPtor9NZ-byQJiAAABj8"], referer: https://www.forensicengineernj.com/@fs/../../.env?raw??
[Sat Aug 29 05:12:15.472503 2026] [security2:error] [pid 1321:tid 1615] [client 20.52.41.200:2236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK-j2jCPtor9NZ-byQJiwAABro"]
[Sat Aug 29 05:12:15.472533 2026] [security2:error] [pid 1321:tid 1594] [client 4.205.62.107:63256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/gnmlc.php"] [unique_id "apK-j2jCPtor9NZ-byQJigAABqU"]
[Sat Aug 29 05:12:15.472619 2026] [security2:error] [pid 1321:tid 1573] [client 20.104.18.15:29639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/shiny.php"] [unique_id "apK-j2jCPtor9NZ-byQJjAAABpA"]
[Sat Aug 29 05:12:15.475021 2026] [security2:error] [pid 1321:tid 1547] [client 68.155.159.216:62807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/index/function.php"] [unique_id "apK-j2jCPtor9NZ-byQJkAAABnY"]
[Sat Aug 29 05:12:15.475801 2026] [security2:error] [pid 1321:tid 1510] [client 34.169.171.101:9726] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-j2jCPtor9NZ-byQJjgAABlI"], referer: https://www.forensicengineernj.com/@fs/var/www/html/.aws/credentials?raw??
[Sat Aug 29 05:12:15.477219 2026] [security2:error] [pid 1321:tid 1532] [client 34.169.171.101:9658] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-j2jCPtor9NZ-byQJkgAABmg"], referer: https://www.forensicengineernj.com/@fs/root/.aws/config?raw??
[Sat Aug 29 05:12:15.477563 2026] [security2:error] [pid 1321:tid 1598] [client 93.123.109.228:43492] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/user/.env"] [unique_id "apK-j2jCPtor9NZ-byQJkwAABqk"]
[Sat Aug 29 05:12:15.482285 2026] [security2:error] [pid 11274:tid 11513] [client 93.123.109.228:43736] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/src/.env"] [unique_id "apK-j2bX5DA3XO6e_qRlowAAAU4"]
[Sat Aug 29 05:12:15.483289 2026] [security2:error] [pid 1321:tid 1499] [client 20.48.251.3:38660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/wp-content/db-status.php"] [unique_id "apK-j2jCPtor9NZ-byQJlgAABkc"]
[Sat Aug 29 05:12:15.485290 2026] [security2:error] [pid 1321:tid 1566] [client 93.123.109.228:36832] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK-j2jCPtor9NZ-byQJlwAABok"]
[Sat Aug 29 05:12:15.493707 2026] [security2:error] [pid 1321:tid 1508] [client 4.205.62.107:59089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/sys.php"] [unique_id "apK-j2jCPtor9NZ-byQJmAAABlA"]
[Sat Aug 29 05:12:15.503316 2026] [security2:error] [pid 1321:tid 1522] [client 20.104.18.15:29672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/w3lls.php"] [unique_id "apK-j2jCPtor9NZ-byQJmgAABl4"]
[Sat Aug 29 05:12:15.507755 2026] [security2:error] [pid 11274:tid 11520] [client 158.158.54.35:20689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/abcd.php"] [unique_id "apK-j2bX5DA3XO6e_qRlpgAAAVU"]
[Sat Aug 29 05:12:15.517584 2026] [security2:error] [pid 11274:tid 11476] [client 158.23.147.79:14250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK-j2bX5DA3XO6e_qRlpwAAASo"]
[Sat Aug 29 05:12:15.532103 2026] [security2:error] [pid 11274:tid 11553] [client 20.52.41.200:4663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/gifclass.php"] [unique_id "apK-j2bX5DA3XO6e_qRlqwAAAXU"]
[Sat Aug 29 05:12:15.551939 2026] [security2:error] [pid 1321:tid 1567] [client 93.123.109.228:36762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/.env.backup"] [unique_id "apK-j2jCPtor9NZ-byQJngAABoo"]
[Sat Aug 29 05:12:15.553102 2026] [security2:error] [pid 1321:tid 1576] [client 93.123.109.228:36750] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/.env.bak"] [unique_id "apK-j2jCPtor9NZ-byQJnwAABpM"]
[Sat Aug 29 05:12:15.580827 2026] [security2:error] [pid 11274:tid 11536] [client 158.23.147.79:7041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK-j2bX5DA3XO6e_qRltAAAAWU"]
[Sat Aug 29 05:12:15.583768 2026] [security2:error] [pid 11274:tid 11527] [client 93.123.109.228:43534] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/v1/.env"] [unique_id "apK-j2bX5DA3XO6e_qRltQAAAVw"]
[Sat Aug 29 05:12:15.585857 2026] [security2:error] [pid 1321:tid 1588] [client 20.63.219.114:12662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/hehe.php"] [unique_id "apK-j2jCPtor9NZ-byQJogAABp8"]
[Sat Aug 29 05:12:15.592144 2026] [security2:error] [pid 11274:tid 11469] [client 93.123.109.228:42948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/v3/.env"] [unique_id "apK-j2bX5DA3XO6e_qRltgAAASM"]
[Sat Aug 29 05:12:15.610780 2026] [security2:error] [pid 1321:tid 1542] [client 20.48.251.3:38661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/file59.php"] [unique_id "apK-j2jCPtor9NZ-byQJpgAABnI"]
[Sat Aug 29 05:12:15.616638 2026] [security2:error] [pid 1321:tid 1502] [client 20.151.200.44:21793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/motu.php"] [unique_id "apK-j2jCPtor9NZ-byQJqAAABko"]
[Sat Aug 29 05:12:15.620529 2026] [security2:error] [pid 11274:tid 11452] [client 93.123.109.228:43048] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/v2/.env"] [unique_id "apK-j2bX5DA3XO6e_qRltwAAARI"]
[Sat Aug 29 05:12:15.621206 2026] [security2:error] [pid 1321:tid 1495] [client 20.104.18.15:29635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/goods.php"] [unique_id "apK-j2jCPtor9NZ-byQJqQAABkM"]
[Sat Aug 29 05:12:15.633329 2026] [security2:error] [pid 11274:tid 11490] [client 20.104.18.15:29157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/fpwch.php"] [unique_id "apK-j2bX5DA3XO6e_qRluAAAATc"]
[Sat Aug 29 05:12:15.646507 2026] [security2:error] [pid 1321:tid 1512] [client 158.158.54.35:18514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/bgymj.php"] [unique_id "apK-j2jCPtor9NZ-byQJrQAABlQ"]
[Sat Aug 29 05:12:15.663535 2026] [security2:error] [pid 1321:tid 1610] [client 40.83.93.50:14749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/class-wp-cmd.php"] [unique_id "apK-j2jCPtor9NZ-byQJsQAABrU"]
[Sat Aug 29 05:12:15.678052 2026] [security2:error] [pid 1321:tid 1507] [client 20.104.49.130:45750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/red.php"] [unique_id "apK-j2jCPtor9NZ-byQJtwAABk8"]
[Sat Aug 29 05:12:15.687532 2026] [security2:error] [pid 1321:tid 1497] [client 20.220.204.93:36697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/ccu.php"] [unique_id "apK-j2jCPtor9NZ-byQJuQAABkU"]
[Sat Aug 29 05:12:15.693073 2026] [security2:error] [pid 11274:tid 11471] [client 93.123.109.228:43360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/stage/.env"] [unique_id "apK-j2bX5DA3XO6e_qRlwAAAASU"]
[Sat Aug 29 05:12:15.700425 2026] [security2:error] [pid 1321:tid 1595] [client 93.123.109.228:43800] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/srv/.env"] [unique_id "apK-j2jCPtor9NZ-byQJugAABqY"]
[Sat Aug 29 05:12:15.700914 2026] [security2:error] [pid 1321:tid 1549] [client 93.123.109.228:36762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/.env.old"] [unique_id "apK-j2jCPtor9NZ-byQJuwAABng"]
[Sat Aug 29 05:12:15.702944 2026] [security2:error] [pid 1321:tid 1608] [client 93.123.109.228:36750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/.env.php"] [unique_id "apK-j2jCPtor9NZ-byQJvAAABrM"]
[Sat Aug 29 05:12:15.705520 2026] [security2:error] [pid 1321:tid 1501] [client 52.139.37.240:14506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/z.php"] [unique_id "apK-j2jCPtor9NZ-byQJvgAABkk"]
[Sat Aug 29 05:12:15.705842 2026] [security2:error] [pid 1321:tid 1491] [client 93.123.109.228:36628] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/staging/.env"] [unique_id "apK-j2jCPtor9NZ-byQJvQAABj8"]
[Sat Aug 29 05:12:15.713032 2026] [security2:error] [pid 1321:tid 1609] [client 20.197.61.180:1597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/wxo.php"] [unique_id "apK-j2jCPtor9NZ-byQJvwAABrQ"]
[Sat Aug 29 05:12:15.713671 2026] [security2:error] [pid 11274:tid 11539] [client 213.202.253.4:50490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/wp-content/txets.php"] [unique_id "apK-j2bX5DA3XO6e_qRlwwAAAWg"], referer: www.google.com
[Sat Aug 29 05:12:15.722466 2026] [security2:error] [pid 1321:tid 1384] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-configs.php"] [unique_id "apK-j2jCPtor9NZ-byQJwAAGkBo"]
[Sat Aug 29 05:12:15.722550 2026] [security2:error] [pid 11274:tid 11461] [client 20.240.128.207:8178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/files.php"] [unique_id "apK-j2bX5DA3XO6e_qRlxgAAARs"]
[Sat Aug 29 05:12:15.738373 2026] [security2:error] [pid 11274:tid 11485] [client 158.23.147.79:64491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/wp-includes/css/index.php"] [unique_id "apK-j2bX5DA3XO6e_qRlxwAAATI"]
[Sat Aug 29 05:12:15.755300 2026] [security2:error] [pid 1321:tid 1593] [client 74.248.24.12:21412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/.trash7206/index.php"] [unique_id "apK-j2jCPtor9NZ-byQJxAAABqQ"]
[Sat Aug 29 05:12:15.755729 2026] [security2:error] [pid 1321:tid 1489] [client 20.48.251.3:38148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/time.php"] [unique_id "apK-j2jCPtor9NZ-byQJxQAABj0"]
[Sat Aug 29 05:12:15.755934 2026] [core:alert] [pid 1321:tid 1604] [client 66.249.92.203:61343] /home2/dhronnet/public_html/.htaccess: The specified network mask is invalid.
[Sat Aug 29 05:12:15.767514 2026] [security2:error] [pid 1321:tid 1543] [client 20.104.18.15:29121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/domvf.php"] [unique_id "apK-j2jCPtor9NZ-byQJyAAABnM"]
[Sat Aug 29 05:12:15.789855 2026] [security2:error] [pid 1321:tid 1519] [client 158.23.147.79:55291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK-j2jCPtor9NZ-byQJzAAABls"]
[Sat Aug 29 05:12:15.798753 2026] [security2:error] [pid 11274:tid 11495] [client 20.151.200.44:65214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/wefile.php"] [unique_id "apK-j2bX5DA3XO6e_qRl0gAAATw"]
[Sat Aug 29 05:12:15.801325 2026] [security2:error] [pid 11274:tid 11488] [client 93.123.109.228:36650] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/stg/.env"] [unique_id "apK-j2bX5DA3XO6e_qRl0wAAATU"]
[Sat Aug 29 05:12:15.813423 2026] [security2:error] [pid 1321:tid 1536] [client 93.123.109.228:36606] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/var/www/.env"] [unique_id "apK-j2jCPtor9NZ-byQJzgAABmw"]
[Sat Aug 29 05:12:15.831515 2026] [security2:error] [pid 1321:tid 1576] [client 4.205.62.107:63380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/aws_config.php"] [unique_id "apK-j2jCPtor9NZ-byQJ0AAABpM"]
[Sat Aug 29 05:12:15.836932 2026] [security2:error] [pid 1321:tid 1490] [client 20.104.18.15:29157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/alfa.php"] [unique_id "apK-j2jCPtor9NZ-byQJ0QAABj4"]
[Sat Aug 29 05:12:15.856163 2026] [security2:error] [pid 1321:tid 1542] [client 4.205.62.107:32558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/pass4.php"] [unique_id "apK-j2jCPtor9NZ-byQJ1AAABnI"]
[Sat Aug 29 05:12:15.865635 2026] [security2:error] [pid 1321:tid 1502] [client 93.123.109.228:43492] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/var/www/html/.env"] [unique_id "apK-j2jCPtor9NZ-byQJ1wAABko"]
[Sat Aug 29 05:12:15.879741 2026] [security2:error] [pid 1321:tid 1495] [client 93.123.109.228:36836] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/.env.swp"] [unique_id "apK-j2jCPtor9NZ-byQJ2AAABkM"]
[Sat Aug 29 05:12:15.882783 2026] [security2:error] [pid 11274:tid 11553] [client 20.48.251.3:38178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/old_phpinfo.php"] [unique_id "apK-j2bX5DA3XO6e_qRl3QAAAXU"]
[Sat Aug 29 05:12:15.883186 2026] [security2:error] [pid 11274:tid 11451] [client 93.123.109.228:36816] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/.env~"] [unique_id "apK-j2bX5DA3XO6e_qRl3AAAARE"]
[Sat Aug 29 05:12:15.892134 2026] [security2:error] [pid 1321:tid 1500] [client 93.123.109.228:43750] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/stripe/.env"] [unique_id "apK-j2jCPtor9NZ-byQJ2QAABkg"]
[Sat Aug 29 05:12:15.893873 2026] [security2:error] [pid 11274:tid 11511] [client 20.104.104.62:46246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/cafe.php"] [unique_id "apK-j2bX5DA3XO6e_qRl3wAAAUw"]
[Sat Aug 29 05:12:15.899207 2026] [security2:error] [pid 1321:tid 1563] [client 52.139.37.240:14502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/f35.php"] [unique_id "apK-j2jCPtor9NZ-byQJ2wAABoY"]
[Sat Aug 29 05:12:15.916496 2026] [security2:error] [pid 1321:tid 1603] [client 20.104.104.62:64761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-content/uploads/simple-file-list/fox.php"] [unique_id "apK-j2jCPtor9NZ-byQJ3gAABq4"]
[Sat Aug 29 05:12:15.916849 2026] [security2:error] [pid 11274:tid 11527] [client 158.23.147.79:50172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK-j2bX5DA3XO6e_qRl4gAAAVw"]
[Sat Aug 29 05:12:15.924929 2026] [security2:error] [pid 11274:tid 11554] [client 20.100.175.163:8568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 163.175.100.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eleanorandelliot.strangeworx.com"] [uri "/wp-admin.php"] [unique_id "apK-j2bX5DA3XO6e_qRl5AAAAXY"]
[Sat Aug 29 05:12:15.933471 2026] [security2:error] [pid 1321:tid 1522] [client 20.52.41.200:2793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-admin/index.php"] [unique_id "apK-j2jCPtor9NZ-byQJ4AAABl4"]
[Sat Aug 29 05:12:15.943216 2026] [security2:error] [pid 1321:tid 1561] [client 20.104.18.15:29662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/biufile.php"] [unique_id "apK-j2jCPtor9NZ-byQJ4QAABoQ"]
[Sat Aug 29 05:12:15.955600 2026] [security2:error] [pid 11274:tid 11504] [client 20.240.128.207:17661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "apK-j2bX5DA3XO6e_qRl6QAAAUU"]
[Sat Aug 29 05:12:15.956637 2026] [security2:error] [pid 11274:tid 11559] [client 93.123.109.228:43500] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/web/.env"] [unique_id "apK-j2bX5DA3XO6e_qRl6gAAAXs"]
[Sat Aug 29 05:12:15.957337 2026] [security2:error] [pid 1321:tid 1605] [client 158.158.54.35:15049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wp-access.php"] [unique_id "apK-j2jCPtor9NZ-byQJ5AAABrA"]
[Sat Aug 29 05:12:15.967422 2026] [security2:error] [pid 1321:tid 1405] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-conflg.php"] [unique_id "apK-j2jCPtor9NZ-byQJ5wAGSS8"]
[Sat Aug 29 05:12:15.976301 2026] [security2:error] [pid 11274:tid 11499] [client 20.104.18.15:29660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/33.php"] [unique_id "apK-j2bX5DA3XO6e_qRl7QAAAUA"]
[Sat Aug 29 05:12:15.988466 2026] [core:error] [pid 1321:tid 1506] [client 20.52.41.200:4359] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:15.988487 2026] [core:error] [pid 1321:tid 1506] [client 20.52.41.200:4359] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:15.997195 2026] [security2:error] [pid 1321:tid 1609] [client 93.123.109.228:36664] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/terraform.tfstate.backup"] [unique_id "apK-j2jCPtor9NZ-byQJ6gAABrQ"]
[Sat Aug 29 05:12:15.999781 2026] [security2:error] [pid 11274:tid 11461] [client 158.23.147.79:60174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK-j2bX5DA3XO6e_qRl9AAAARs"]
[Sat Aug 29 05:12:16.012337 2026] [security2:error] [pid 11274:tid 11485] [client 20.48.251.3:38199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/paths.php"] [unique_id "apK-kGbX5DA3XO6e_qRl9QAAATI"]
[Sat Aug 29 05:12:16.033088 2026] [security2:error] [pid 11274:tid 11494] [client 68.155.159.216:43922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/NewFile.php/"] [unique_id "apK-kGbX5DA3XO6e_qRl-QAAATs"]
[Sat Aug 29 05:12:16.033399 2026] [security2:error] [pid 11274:tid 11444] [client 20.63.219.114:13954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/wp-admin/class-db.php"] [unique_id "apK-kGbX5DA3XO6e_qRl-gAAAQo"]
[Sat Aug 29 05:12:16.043387 2026] [security2:error] [pid 11274:tid 11507] [client 20.104.104.62:8832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/eval.php"] [unique_id "apK-kGbX5DA3XO6e_qRl_AAAAUg"]
[Sat Aug 29 05:12:16.045708 2026] [security2:error] [pid 1321:tid 1591] [client 20.151.200.44:63781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/EM.php"] [unique_id "apK-kGjCPtor9NZ-byQJ7wAABqI"]
[Sat Aug 29 05:12:16.047713 2026] [security2:error] [pid 1321:tid 1594] [client 93.123.109.228:43750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/test.php"] [unique_id "apK-kGjCPtor9NZ-byQJ8AAABqU"]
[Sat Aug 29 05:12:16.069173 2026] [security2:error] [pid 11274:tid 11541] [client 158.23.184.117:34864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/wk/admin.php"] [unique_id "apK-kGbX5DA3XO6e_qRl_wAAAWo"]
[Sat Aug 29 05:12:16.071559 2026] [security2:error] [pid 11274:tid 11517] [client 20.220.204.93:59005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/ak.php"] [unique_id "apK-kGbX5DA3XO6e_qRmAgAAAVI"]
[Sat Aug 29 05:12:16.075451 2026] [security2:error] [pid 11274:tid 11529] [client 20.104.18.15:29157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/blacks.php"] [unique_id "apK-kGbX5DA3XO6e_qRmAwAAAV4"]
[Sat Aug 29 05:12:16.088215 2026] [security2:error] [pid 1321:tid 1507] [client 158.158.54.35:19365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK-kGjCPtor9NZ-byQJ9QAABk8"]
[Sat Aug 29 05:12:16.094091 2026] [security2:error] [pid 11274:tid 11563] [client 52.139.37.240:15263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/file61.php"] [unique_id "apK-kGbX5DA3XO6e_qRmBgAAAX8"]
[Sat Aug 29 05:12:16.097433 2026] [security2:error] [pid 1321:tid 1581] [client 93.123.109.228:36670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/test/.env"] [unique_id "apK-kGjCPtor9NZ-byQJ9wAABpg"]
[Sat Aug 29 05:12:16.107717 2026] [security2:error] [pid 11274:tid 11551] [client 4.205.62.107:5521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/public/bnn_.php.php"] [unique_id "apK-kGbX5DA3XO6e_qRmCgAAAXM"]
[Sat Aug 29 05:12:16.110490 2026] [security2:error] [pid 1321:tid 1529] [client 93.123.109.228:36784] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.bak"] [unique_id "apK-kGjCPtor9NZ-byQJ-AAABmU"]
[Sat Aug 29 05:12:16.118128 2026] [security2:error] [pid 1321:tid 1495] [client 20.104.18.15:29175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/133.php"] [unique_id "apK-kGjCPtor9NZ-byQJ-QAABkM"]
[Sat Aug 29 05:12:16.122647 2026] [security2:error] [pid 1321:tid 1500] [client 93.123.109.228:36804] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.old"] [unique_id "apK-kGjCPtor9NZ-byQJ-gAABkg"]
[Sat Aug 29 05:12:16.131670 2026] [security2:error] [pid 1321:tid 1577] [client 158.23.147.79:39146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK-kGjCPtor9NZ-byQJ-wAABpQ"]
[Sat Aug 29 05:12:16.132529 2026] [security2:error] [pid 11274:tid 11493] [client 40.83.93.50:14724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/disagreed.php"] [unique_id "apK-kGbX5DA3XO6e_qRmDAAAATo"]
[Sat Aug 29 05:12:16.141344 2026] [security2:error] [pid 1321:tid 1599] [client 20.48.251.3:38180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/css.php"] [unique_id "apK-kGjCPtor9NZ-byQJ_AAABqo"]
[Sat Aug 29 05:12:16.149154 2026] [security2:error] [pid 1321:tid 1492] [client 93.123.109.228:36796] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config~"] [unique_id "apK-kGjCPtor9NZ-byQJ_gAABkA"]
[Sat Aug 29 05:12:16.170690 2026] [security2:error] [pid 1321:tid 1592] [client 20.104.104.62:48671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/f-401.php"] [unique_id "apK-kGjCPtor9NZ-byQJ_wAABqM"]
[Sat Aug 29 05:12:16.171559 2026] [security2:error] [pid 1321:tid 1548] [client 68.155.159.216:21401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/wp-includes/css/index.php"] [unique_id "apK-kGjCPtor9NZ-byQKAAAABnc"]
[Sat Aug 29 05:12:16.178528 2026] [security2:error] [pid 1321:tid 1610] [client 93.123.109.228:36606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hitechgs.com"] [uri "/wp-config.php"] [unique_id "apK-kGjCPtor9NZ-byQKAQAABrU"]
[Sat Aug 29 05:12:16.179619 2026] [security2:error] [pid 11274:tid 11504] [client 93.123.109.228:43534] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.hitechgs.com"] [uri "/wp-config.php.bak"] [unique_id "apK-kGbX5DA3XO6e_qRmEAAAAUU"]
[Sat Aug 29 05:12:16.180786 2026] [security2:error] [pid 11274:tid 11497] [client 93.123.109.228:43480] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/website/.env"] [unique_id "apK-kGbX5DA3XO6e_qRmDwAAAT4"]
[Sat Aug 29 05:12:16.200416 2026] [security2:error] [pid 11274:tid 11499] [client 93.123.109.228:43766] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/user/.env"] [unique_id "apK-kGbX5DA3XO6e_qRmFgAAAUA"]
[Sat Aug 29 05:12:16.209242 2026] [security2:error] [pid 1321:tid 1497] [client 93.123.109.228:36628] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/v1/.env"] [unique_id "apK-kGjCPtor9NZ-byQKBwAABkU"]
[Sat Aug 29 05:12:16.212378 2026] [security2:error] [pid 1321:tid 1388] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-content.php"] [unique_id "apK-kGjCPtor9NZ-byQKCAAGTh4"]
[Sat Aug 29 05:12:16.212763 2026] [security2:error] [pid 11274:tid 11452] [client 158.23.184.117:34891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/admin.php"] [unique_id "apK-kGbX5DA3XO6e_qRmFwAAARI"]
[Sat Aug 29 05:12:16.218871 2026] [security2:error] [pid 11274:tid 11485] [client 20.104.18.15:29077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/beck.php"] [unique_id "apK-kGbX5DA3XO6e_qRmGAAAATI"]
[Sat Aug 29 05:12:16.219106 2026] [security2:error] [pid 11274:tid 11479] [client 93.123.109.228:43470] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.hitechgs.com"] [uri "/wp-config.php.new"] [unique_id "apK-kGbX5DA3XO6e_qRmGgAAASw"]
[Sat Aug 29 05:12:16.221197 2026] [security2:error] [pid 1321:tid 1583] [client 93.123.109.228:43492] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.hitechgs.com"] [uri "/wp-config.php.old"] [unique_id "apK-kGjCPtor9NZ-byQKCQAABpo"]
[Sat Aug 29 05:12:16.221882 2026] [security2:error] [pid 11274:tid 11506] [client 20.104.104.62:46212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/sao.php"] [unique_id "apK-kGbX5DA3XO6e_qRmGwAAAUc"]
[Sat Aug 29 05:12:16.224689 2026] [security2:error] [pid 11274:tid 11569] [client 20.220.204.93:18709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/lib.php"] [unique_id "apK-kGbX5DA3XO6e_qRmHAAAAYU"]
[Sat Aug 29 05:12:16.228440 2026] [security2:error] [pid 11274:tid 11487] [client 20.104.104.62:64766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-content/uploads/simple-file-list/fw.php"] [unique_id "apK-kGbX5DA3XO6e_qRmHQAAATQ"]
[Sat Aug 29 05:12:16.232726 2026] [security2:error] [pid 1321:tid 1531] [client 20.240.128.207:1235] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/o.php"] [unique_id "apK-kGjCPtor9NZ-byQKCgAABmc"]
[Sat Aug 29 05:12:16.238573 2026] [security2:error] [pid 11274:tid 11445] [client 4.205.62.107:65015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/lm15.php"] [unique_id "apK-kGbX5DA3XO6e_qRmIQAAAQs"]
[Sat Aug 29 05:12:16.269982 2026] [security2:error] [pid 1321:tid 1600] [client 93.123.109.228:36670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/v2/.env"] [unique_id "apK-kGjCPtor9NZ-byQKDgAABqs"]
[Sat Aug 29 05:12:16.270733 2026] [security2:error] [pid 11274:tid 11521] [client 20.48.251.3:38150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/erty.php"] [unique_id "apK-kGbX5DA3XO6e_qRmIwAAAVY"]
[Sat Aug 29 05:12:16.276105 2026] [security2:error] [pid 11274:tid 11515] [client 93.123.109.228:43716] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/v3/.env"] [unique_id "apK-kGbX5DA3XO6e_qRmJAAAAVA"]
[Sat Aug 29 05:12:16.280136 2026] [security2:error] [pid 11274:tid 11549] [client 74.248.24.12:35628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/wk/index.php"] [unique_id "apK-kGbX5DA3XO6e_qRmJQAAAXE"]
[Sat Aug 29 05:12:16.285569 2026] [security2:error] [pid 11274:tid 11467] [client 52.139.37.240:14521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/mah.php"] [unique_id "apK-kGbX5DA3XO6e_qRmJgAAASE"]
[Sat Aug 29 05:12:16.292454 2026] [security2:error] [pid 11274:tid 11503] [client 158.23.147.79:24573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK-kGbX5DA3XO6e_qRmKQAAAUQ"]
[Sat Aug 29 05:12:16.292485 2026] [security2:error] [pid 11274:tid 11517] [client 20.151.200.44:65188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/ca4.php"] [unique_id "apK-kGbX5DA3XO6e_qRmKgAAAVI"]
[Sat Aug 29 05:12:16.302833 2026] [security2:error] [pid 11274:tid 11498] [client 20.104.18.15:29679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/sym.php"] [unique_id "apK-kGbX5DA3XO6e_qRmKwAAAT8"]
[Sat Aug 29 05:12:16.311139 2026] [security2:error] [pid 11274:tid 11551] [client 20.104.104.62:48648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/hq.php"] [unique_id "apK-kGbX5DA3XO6e_qRmLQAAAXM"]
[Sat Aug 29 05:12:16.324636 2026] [security2:error] [pid 1321:tid 1607] [client 103.215.74.26:8598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.74.215.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.com"] [uri "/wp/index.php"] [unique_id "apK-kGjCPtor9NZ-byQKEgAABrI"], referer: https://kglogisticsinc.com/wp/wp-admin/
[Sat Aug 29 05:12:16.327674 2026] [security2:error] [pid 11274:tid 11472] [client 93.123.109.228:36590] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "cpcontacts.hitechgs.com"] [uri "/___proxy_subdomain_cpcontacts/wp-content/mysql.sql"] [unique_id "apK-kGbX5DA3XO6e_qRmMgAAASY"]
[Sat Aug 29 05:12:16.333179 2026] [cgid:error] [pid 11274:tid 11367] [remote 45.148.10.62:60048] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/skycoati/public_html/404.shtml
[Sat Aug 29 05:12:16.350141 2026] [security2:error] [pid 11274:tid 11519] [client 68.155.159.216:61273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK-kGbX5DA3XO6e_qRmOQAAAVQ"]
[Sat Aug 29 05:12:16.356554 2026] [security2:error] [pid 11274:tid 11450] [client 158.23.184.117:34920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/goods.php"] [unique_id "apK-kGbX5DA3XO6e_qRmOgAAARA"]
[Sat Aug 29 05:12:16.359675 2026] [security2:error] [pid 11274:tid 11490] [client 20.104.18.15:29155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/t3.php"] [unique_id "apK-kGbX5DA3XO6e_qRmPAAAATc"]
[Sat Aug 29 05:12:16.369949 2026] [security2:error] [pid 11274:tid 11466] [client 20.104.104.62:8982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/uuu.php"] [unique_id "apK-kGbX5DA3XO6e_qRmPQAAASA"]
[Sat Aug 29 05:12:16.390767 2026] [security2:error] [pid 11274:tid 11444] [client 20.52.41.200:2219] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/radio.php"] [unique_id "apK-kGbX5DA3XO6e_qRmPgAAAQo"]
[Sat Aug 29 05:12:16.399627 2026] [security2:error] [pid 11274:tid 11484] [client 20.48.251.3:38545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/ws62.php"] [unique_id "apK-kGbX5DA3XO6e_qRmQAAAATE"]
[Sat Aug 29 05:12:16.407831 2026] [security2:error] [pid 11274:tid 11488] [client 158.158.54.35:15088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wp-content/uploads/min.php"] [unique_id "apK-kGbX5DA3XO6e_qRmQQAAATU"]
[Sat Aug 29 05:12:16.419969 2026] [security2:error] [pid 11274:tid 11513] [client 20.63.219.114:12638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/wp-contentt.php"] [unique_id "apK-kGbX5DA3XO6e_qRmRAAAAU4"]
[Sat Aug 29 05:12:16.430835 2026] [security2:error] [pid 11274:tid 11448] [client 20.197.61.180:1958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/as.php"] [unique_id "apK-kGbX5DA3XO6e_qRmRgAAAQ4"]
[Sat Aug 29 05:12:16.433603 2026] [security2:error] [pid 11274:tid 11479] [client 68.155.159.216:23517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK-kGbX5DA3XO6e_qRmSAAAASw"]
[Sat Aug 29 05:12:16.435554 2026] [security2:error] [pid 1321:tid 1597] [client 34.169.171.101:9644] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "www.forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-j2jCPtor9NZ-byQJawAABqg"]
[Sat Aug 29 05:12:16.435959 2026] [security2:error] [pid 11274:tid 11506] [client 20.104.18.15:29132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/8.php"] [unique_id "apK-kGbX5DA3XO6e_qRmSQAAAUc"]
[Sat Aug 29 05:12:16.437911 2026] [security2:error] [pid 11274:tid 11569] [client 20.220.204.93:18780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/wp-style.php"] [unique_id "apK-kGbX5DA3XO6e_qRmSgAAAYU"]
[Sat Aug 29 05:12:16.438343 2026] [security2:error] [pid 1321:tid 1580] [client 34.169.171.101:9672] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "www.forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-j2jCPtor9NZ-byQJdgAABpc"]
[Sat Aug 29 05:12:16.438384 2026] [proxy_http:error] [pid 1017536:tid 1017725] (70007)The timeout specified has expired: [client 127.0.0.1:47792] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:12:16.438400 2026] [proxy:error] [pid 1017536:tid 1017725] [client 127.0.0.1:47792] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:12:16.442587 2026] [security2:error] [pid 11274:tid 11541] [client 20.52.41.200:5177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK-kGbX5DA3XO6e_qRmSwAAAWo"]
[Sat Aug 29 05:12:16.452941 2026] [security2:error] [pid 1321:tid 1507] [client 4.205.62.107:63936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/u88.php"] [unique_id "apK-kGjCPtor9NZ-byQKHQAABk8"]
[Sat Aug 29 05:12:16.472041 2026] [autoindex:error] [pid 1321:tid 1356] [remote 20.197.61.180:0] AH01276: Cannot serve directory /home2/iosephos/public_html/wp-content/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:12:16.474472 2026] [security2:error] [pid 1321:tid 1567] [client 34.169.171.101:9644] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-kGjCPtor9NZ-byQKIAAABoo"], referer: https://www.forensicengineernj.com/@fs/home/node/.aws/credentials?raw??
[Sat Aug 29 05:12:16.475810 2026] [security2:error] [pid 1321:tid 1586] [client 34.169.171.101:9672] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-kGjCPtor9NZ-byQKIQAABp0"], referer: https://www.forensicengineernj.com/@fs/home/node/.aws/config?raw??
[Sat Aug 29 05:12:16.501511 2026] [security2:error] [pid 11274:tid 11502] [client 52.139.37.240:14519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/mini.php"] [unique_id "apK-kGbX5DA3XO6e_qRmTgAAAUM"]
[Sat Aug 29 05:12:16.505030 2026] [security2:error] [pid 1321:tid 1566] [client 158.23.184.117:34937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/w.php"] [unique_id "apK-kGjCPtor9NZ-byQKJgAABok"]
[Sat Aug 29 05:12:16.505450 2026] [security2:error] [pid 1321:tid 1581] [client 20.104.18.15:29674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/wp.php"] [unique_id "apK-kGjCPtor9NZ-byQKJwAABpg"]
[Sat Aug 29 05:12:16.507709 2026] [cgid:error] [pid 11274:tid 11373] [remote 45.148.10.62:60048] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/skycoati/public_html/404.shtml
[Sat Aug 29 05:12:16.519917 2026] [security2:error] [pid 11274:tid 11553] [client 20.104.104.62:8881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/private.php"] [unique_id "apK-kGbX5DA3XO6e_qRmUAAAAXU"]
[Sat Aug 29 05:12:16.526982 2026] [security2:error] [pid 11274:tid 11503] [client 4.205.62.107:6526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/filesystems.php"] [unique_id "apK-kGbX5DA3XO6e_qRmUQAAAUQ"]
[Sat Aug 29 05:12:16.528428 2026] [security2:error] [pid 1321:tid 1490] [client 20.48.251.3:38538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/wp-class.php"] [unique_id "apK-kGjCPtor9NZ-byQKKgAABj4"]
[Sat Aug 29 05:12:16.532707 2026] [security2:error] [pid 11274:tid 11486] [client 93.123.109.228:43736] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/var/www/.env"] [unique_id "apK-kGbX5DA3XO6e_qRmUwAAATM"]
[Sat Aug 29 05:12:16.542262 2026] [security2:error] [pid 11274:tid 11511] [client 68.155.159.216:1734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-includes/plugins.php"] [unique_id "apK-kGbX5DA3XO6e_qRmVgAAAUw"]
[Sat Aug 29 05:12:16.551607 2026] [security2:error] [pid 1321:tid 1542] [client 20.151.200.44:65195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/x0x.php"] [unique_id "apK-kGjCPtor9NZ-byQKLAAABnI"]
[Sat Aug 29 05:12:16.560682 2026] [security2:error] [pid 11274:tid 11538] [client 93.123.109.228:43360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/var/www/html/.env"] [unique_id "apK-kGbX5DA3XO6e_qRmWgAAAWc"]
[Sat Aug 29 05:12:16.564316 2026] [security2:error] [pid 11274:tid 11469] [client 68.155.159.216:64120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-includes/content.php"] [unique_id "apK-kGbX5DA3XO6e_qRmWwAAASM"]
[Sat Aug 29 05:12:16.573875 2026] [security2:error] [pid 11274:tid 11504] [client 20.104.104.62:20805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-content/uploads/simple-file-list/alfa.php"] [unique_id "apK-kGbX5DA3XO6e_qRmXAAAAUU"]
[Sat Aug 29 05:12:16.585551 2026] [security2:error] [pid 11274:tid 11552] [client 20.104.18.15:29640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/goods.php"] [unique_id "apK-kGbX5DA3XO6e_qRmXgAAAXQ"]
[Sat Aug 29 05:12:16.588539 2026] [security2:error] [pid 1321:tid 1500] [client 68.155.159.216:35805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/.well-known/content.php"] [unique_id "apK-kGjCPtor9NZ-byQKMAAABkg"]
[Sat Aug 29 05:12:16.589620 2026] [security2:error] [pid 1321:tid 1577] [client 93.123.109.228:36670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/web/.env"] [unique_id "apK-kGjCPtor9NZ-byQKLwAABpQ"]
[Sat Aug 29 05:12:16.613548 2026] [security2:error] [pid 1321:tid 1492] [client 4.205.62.107:60940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/koiy.php"] [unique_id "apK-kGjCPtor9NZ-byQKMgAABkA"]
[Sat Aug 29 05:12:16.620256 2026] [security2:error] [pid 1321:tid 1592] [client 20.220.204.93:57470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/browse.php"] [unique_id "apK-kGjCPtor9NZ-byQKMwAABqM"]
[Sat Aug 29 05:12:16.624559 2026] [security2:error] [pid 11274:tid 11560] [client 158.23.147.79:14313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/.well-knownold/index.php"] [unique_id "apK-kGbX5DA3XO6e_qRmZAAAAXw"]
[Sat Aug 29 05:12:16.636049 2026] [security2:error] [pid 1321:tid 1514] [client 4.205.62.107:32514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/phpsysinfo.php"] [unique_id "apK-kGjCPtor9NZ-byQKNgAABlY"]
[Sat Aug 29 05:12:16.641576 2026] [security2:error] [pid 11274:tid 11465] [client 40.83.93.50:8775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/class_api.php"] [unique_id "apK-kGbX5DA3XO6e_qRmZwAAAR8"]
[Sat Aug 29 05:12:16.645896 2026] [security2:error] [pid 1321:tid 1501] [client 20.104.18.15:29660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/abcd.php"] [unique_id "apK-kGjCPtor9NZ-byQKOAAABkk"]
[Sat Aug 29 05:12:16.648971 2026] [security2:error] [pid 11274:tid 11540] [client 158.23.184.117:34858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/new.php"] [unique_id "apK-kGbX5DA3XO6e_qRmaAAAAWk"]
[Sat Aug 29 05:12:16.674482 2026] [security2:error] [pid 11274:tid 11558] [client 20.48.251.3:38192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/hosty.php"] [unique_id "apK-kGbX5DA3XO6e_qRmbQAAAXo"]
[Sat Aug 29 05:12:16.674486 2026] [security2:error] [pid 11274:tid 11374] [remote 45.148.10.62:60048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "skycoatingsports.com"] [uri "/wp-login.php"] [unique_id "apK-kGbX5DA3XO6e_qRmbgABDzw"]
[Sat Aug 29 05:12:16.677072 2026] [security2:error] [pid 11274:tid 11375] [remote 198.187.29.15:59938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.29.187.198.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "thermoscan.co.th"] [uri "/wp-login.php"] [unique_id "apK-kGbX5DA3XO6e_qRmagABhD0"]
[Sat Aug 29 05:12:16.677722 2026] [security2:error] [pid 1321:tid 1484] [remote 198.187.29.15:59926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.29.187.198.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "thermoscan.co.th"] [uri "/wp-login.php"] [unique_id "apK-kGjCPtor9NZ-byQKOgAGRX0"]
[Sat Aug 29 05:12:16.683305 2026] [security2:error] [pid 1321:tid 1512] [client 20.104.104.62:48743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/mh.php"] [unique_id "apK-kGjCPtor9NZ-byQKPgAABlQ"]
[Sat Aug 29 05:12:16.687315 2026] [security2:error] [pid 1321:tid 1573] [client 158.23.147.79:7104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK-kGjCPtor9NZ-byQKPwAABpA"]
[Sat Aug 29 05:12:16.695324 2026] [security2:error] [pid 1321:tid 1561] [client 52.139.37.240:15269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/v.php"] [unique_id "apK-kGjCPtor9NZ-byQKQAAABoQ"]
[Sat Aug 29 05:12:16.719067 2026] [security2:error] [pid 11274:tid 11546] [client 20.104.18.15:29128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/ah.php"] [unique_id "apK-kGbX5DA3XO6e_qRmdQAAAW4"]
[Sat Aug 29 05:12:16.719706 2026] [security2:error] [pid 1321:tid 1357] [remote 20.197.61.180:0] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "iosephos.com"] [uri "/wp-content/1.php"] [unique_id "apK-kGjCPtor9NZ-byQKQgAGeAE"]
[Sat Aug 29 05:12:16.719829 2026] [security2:error] [pid 1321:tid 1357] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-content/1.php"] [unique_id "apK-kGjCPtor9NZ-byQKQgAGeAE"]
[Sat Aug 29 05:12:16.720684 2026] [security2:error] [pid 11274:tid 11515] [client 20.104.104.62:46258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/lfi.php"] [unique_id "apK-kGbX5DA3XO6e_qRmdgAAAVA"]
[Sat Aug 29 05:12:16.733533 2026] [security2:error] [pid 11274:tid 11470] [client 20.240.128.207:21480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/file2.php"] [unique_id "apK-kGbX5DA3XO6e_qRmeAAAASQ"]
[Sat Aug 29 05:12:16.749052 2026] [security2:error] [pid 11274:tid 11495] [client 93.123.109.228:43714] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/website/.env"] [unique_id "apK-kGbX5DA3XO6e_qRmeQAAATw"]
[Sat Aug 29 05:12:16.781772 2026] [security2:error] [pid 11274:tid 11535] [client 20.104.18.15:29673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/nofile.php"] [unique_id "apK-kGbX5DA3XO6e_qRmfQAAAWQ"]
[Sat Aug 29 05:12:16.784080 2026] [security2:error] [pid 11274:tid 11553] [client 93.123.109.228:43716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/wp-config.php"] [unique_id "apK-kGbX5DA3XO6e_qRmfgAAAXU"]
[Sat Aug 29 05:12:16.784809 2026] [security2:error] [pid 11274:tid 11524] [client 20.151.200.44:22147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.gmautorepairs.com"] [uri "/fesa.php"] [unique_id "apK-kGbX5DA3XO6e_qRmfwAAAVk"]
[Sat Aug 29 05:12:16.788904 2026] [security2:error] [pid 1321:tid 1594] [client 20.220.204.93:59647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/zoo.php"] [unique_id "apK-kGjCPtor9NZ-byQKSAAABqU"]
[Sat Aug 29 05:12:16.792912 2026] [security2:error] [pid 1321:tid 1560] [client 158.23.184.117:35363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/php8.php"] [unique_id "apK-kGjCPtor9NZ-byQKSQAABoM"]
[Sat Aug 29 05:12:16.799978 2026] [security2:error] [pid 11274:tid 11498] [client 20.240.128.207:3693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-content/admin.php"] [unique_id "apK-kGbX5DA3XO6e_qRmgQAAAT8"]
[Sat Aug 29 05:12:16.800234 2026] [security2:error] [pid 1321:tid 1548] [client 74.248.24.12:35620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/admin.php"] [unique_id "apK-kGjCPtor9NZ-byQKSwAABnc"]
[Sat Aug 29 05:12:16.804240 2026] [security2:error] [pid 11274:tid 11486] [client 20.48.251.3:38163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/temp.php"] [unique_id "apK-kGbX5DA3XO6e_qRmggAAATM"]
[Sat Aug 29 05:12:16.809843 2026] [security2:error] [pid 11274:tid 11476] [client 20.104.49.130:53661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "connectdotz.com"] [uri "/images.php"] [unique_id "apK-kGbX5DA3XO6e_qRmgwAAASo"]
[Sat Aug 29 05:12:16.826608 2026] [security2:error] [pid 1321:tid 1547] [client 93.123.109.228:36620] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/wp-config.php.new"] [unique_id "apK-kGjCPtor9NZ-byQKTQAABnY"]
[Sat Aug 29 05:12:16.830831 2026] [security2:error] [pid 11274:tid 11545] [client 93.123.109.228:43346] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/wp-config.php.old"] [unique_id "apK-kGbX5DA3XO6e_qRmhAAAAW0"]
[Sat Aug 29 05:12:16.833711 2026] [security2:error] [pid 11274:tid 11530] [client 93.123.109.228:43280] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/wp-config.php.bak"] [unique_id "apK-kGbX5DA3XO6e_qRmhQAAAV8"]
[Sat Aug 29 05:12:16.850603 2026] [security2:error] [pid 11274:tid 11518] [client 20.52.41.200:2200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/item.php"] [unique_id "apK-kGbX5DA3XO6e_qRmiAAAAVM"]
[Sat Aug 29 05:12:16.850667 2026] [security2:error] [pid 11274:tid 11456] [client 158.158.54.35:15097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK-kGbX5DA3XO6e_qRmiQAAARY"]
[Sat Aug 29 05:12:16.872929 2026] [security2:error] [pid 1321:tid 1591] [client 93.123.109.228:36628] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "cpcontacts.historiceasthampton.org"] [uri "/___proxy_subdomain_cpcontacts/wp-content/mysql.sql"] [unique_id "apK-kGjCPtor9NZ-byQKUgAABqI"]
[Sat Aug 29 05:12:16.876921 2026] [security2:error] [pid 11274:tid 11501] [client 20.63.219.114:12649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/theme.php"] [unique_id "apK-kGbX5DA3XO6e_qRmjgAAAUI"]
[Sat Aug 29 05:12:16.889651 2026] [security2:error] [pid 1321:tid 1499] [client 52.139.37.240:15272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/wp-admin/images/admin.php"] [unique_id "apK-kGjCPtor9NZ-byQKUwAABkc"]
[Sat Aug 29 05:12:16.899335 2026] [security2:error] [pid 1321:tid 1608] [client 20.52.41.200:5357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/css/index.php"] [unique_id "apK-kGjCPtor9NZ-byQKVQAABrM"]
[Sat Aug 29 05:12:16.917323 2026] [security2:error] [pid 11274:tid 11552] [client 20.104.104.62:8888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/quoys.php"] [unique_id "apK-kGbX5DA3XO6e_qRmkQAAAXQ"]
[Sat Aug 29 05:12:16.918675 2026] [security2:error] [pid 1321:tid 1604] [client 20.104.18.15:29644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/run.php"] [unique_id "apK-kGjCPtor9NZ-byQKVgAABq8"]
[Sat Aug 29 05:12:16.931713 2026] [security2:error] [pid 11274:tid 11444] [client 158.158.54.35:15735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-load.php"] [unique_id "apK-kGbX5DA3XO6e_qRmlAAAAQo"]
[Sat Aug 29 05:12:16.934517 2026] [security2:error] [pid 1321:tid 1612] [client 20.48.251.3:38149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/php-details.php"] [unique_id "apK-kGjCPtor9NZ-byQKWAAABrc"]
[Sat Aug 29 05:12:16.936556 2026] [security2:error] [pid 1321:tid 1586] [client 20.104.18.15:29155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/ws55.php"] [unique_id "apK-kGjCPtor9NZ-byQKWQAABp0"]
[Sat Aug 29 05:12:16.937672 2026] [security2:error] [pid 11274:tid 11497] [client 158.23.184.117:34859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/wp-content/themes/admin.php"] [unique_id "apK-kGbX5DA3XO6e_qRmlQAAAT4"]
[Sat Aug 29 05:12:16.965066 2026] [security2:error] [pid 1321:tid 1450] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-content/about.php"] [unique_id "apK-kGjCPtor9NZ-byQKXQAGiVs"]
[Sat Aug 29 05:12:16.971153 2026] [security2:error] [pid 1321:tid 1581] [client 4.205.62.107:63297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/dialog.php"] [unique_id "apK-kGjCPtor9NZ-byQKXgAABpg"]
[Sat Aug 29 05:12:16.983588 2026] [security2:error] [pid 11274:tid 11560] [client 158.23.147.79:55929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK-kGbX5DA3XO6e_qRmmgAAAXw"]
[Sat Aug 29 05:12:16.983612 2026] [security2:error] [pid 11274:tid 11507] [client 93.123.109.228:36720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/.wp-config.php.swp"] [unique_id "apK-kGbX5DA3XO6e_qRmmQAAAUg"]
[Sat Aug 29 05:12:16.999694 2026] [security2:error] [pid 1321:tid 1529] [client 4.205.62.107:27759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/cu.php"] [unique_id "apK-kGjCPtor9NZ-byQKYQAABmU"]
[Sat Aug 29 05:12:17.006086 2026] [security2:error] [pid 11274:tid 11506] [client 20.220.204.93:18802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/elp.php"] [unique_id "apK-kWbX5DA3XO6e_qRmnQAAAUc"]
[Sat Aug 29 05:12:17.011330 2026] [security2:error] [pid 11274:tid 11521] [client 103.185.242.143:65358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-kWbX5DA3XO6e_qRmngAAAVY"]
[Sat Aug 29 05:12:17.011461 2026] [security2:error] [pid 11274:tid 11521] [client 103.185.242.143:65358] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-kWbX5DA3XO6e_qRmngAAAVY"]
[Sat Aug 29 05:12:17.026633 2026] [security2:error] [pid 11274:tid 11572] [client 93.123.109.228:36846] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/API/.env"] [unique_id "apK-kWbX5DA3XO6e_qRmnwAAAYg"]
[Sat Aug 29 05:12:17.038917 2026] [security2:error] [pid 1321:tid 1563] [client 93.123.109.228:36796] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/ADMIN/.env"] [unique_id "apK-kWjCPtor9NZ-byQKYgAABoY"]
[Sat Aug 29 05:12:17.063867 2026] [security2:error] [pid 11274:tid 11570] [client 20.48.251.3:38667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/ms-edit.php"] [unique_id "apK-kWbX5DA3XO6e_qRmoQAAAYY"]
[Sat Aug 29 05:12:17.066488 2026] [security2:error] [pid 11274:tid 11558] [client 20.104.18.15:29658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/new.php"] [unique_id "apK-kWbX5DA3XO6e_qRmogAAAXo"]
[Sat Aug 29 05:12:17.069514 2026] [security2:error] [pid 11274:tid 11461] [client 20.104.18.15:29176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/drykl.php"] [unique_id "apK-kWbX5DA3XO6e_qRmowAAARs"]
[Sat Aug 29 05:12:17.079164 2026] [security2:error] [pid 11274:tid 11484] [client 20.104.104.62:48093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/vbbn.php"] [unique_id "apK-kWbX5DA3XO6e_qRmpAAAATE"]
[Sat Aug 29 05:12:17.082447 2026] [security2:error] [pid 1321:tid 1509] [client 158.23.184.117:34936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/txets.php"] [unique_id "apK-kWjCPtor9NZ-byQKYwAABlE"]
[Sat Aug 29 05:12:17.083256 2026] [security2:error] [pid 11274:tid 11464] [client 52.139.37.240:14523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "apK-kWbX5DA3XO6e_qRmpgAAAR4"]
[Sat Aug 29 05:12:17.094390 2026] [proxy_http:error] [pid 1017536:tid 1017742] (70007)The timeout specified has expired: [client 127.0.0.1:47850] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:12:17.094413 2026] [proxy:error] [pid 1017536:tid 1017742] [client 127.0.0.1:47850] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:12:17.132400 2026] [security2:error] [pid 11274:tid 11549] [client 158.23.147.79:49850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/wp-content/admin.php"] [unique_id "apK-kWbX5DA3XO6e_qRmpwAAAXE"]
[Sat Aug 29 05:12:17.132732 2026] [security2:error] [pid 11274:tid 11520] [client 68.155.159.216:43906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/dropdown.php"] [unique_id "apK-kWbX5DA3XO6e_qRmqAAAAVU"]
[Sat Aug 29 05:12:17.134738 2026] [security2:error] [pid 11274:tid 11555] [client 20.104.104.62:20719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/Ninja.php"] [unique_id "apK-kWbX5DA3XO6e_qRmqQAAAXc"]
[Sat Aug 29 05:12:17.139403 2026] [security2:error] [pid 1321:tid 1582] [client 93.123.109.228:36804] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/APP/.env"] [unique_id "apK-kWjCPtor9NZ-byQKZwAABpk"]
[Sat Aug 29 05:12:17.153745 2026] [security2:error] [pid 1321:tid 1512] [client 93.123.109.228:36784] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/Api/.env"] [unique_id "apK-kWjCPtor9NZ-byQKaQAABlQ"]
[Sat Aug 29 05:12:17.154172 2026] [security2:error] [pid 1321:tid 1550] [client 20.197.61.180:13463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/room.php"] [unique_id "apK-kWjCPtor9NZ-byQKagAABnk"]
[Sat Aug 29 05:12:17.165037 2026] [security2:error] [pid 11274:tid 11524] [client 93.123.109.228:36740] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/BACK/.env"] [unique_id "apK-kWbX5DA3XO6e_qRmrAAAAVk"]
[Sat Aug 29 05:12:17.170781 2026] [security2:error] [pid 11274:tid 11554] [client 20.220.204.93:36729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/666.php"] [unique_id "apK-kWbX5DA3XO6e_qRmrQAAAXY"]
[Sat Aug 29 05:12:17.176742 2026] [security2:error] [pid 11274:tid 11539] [client 93.123.109.228:36846] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/BACKEND/.env"] [unique_id "apK-kWbX5DA3XO6e_qRmrgAAAWg"]
[Sat Aug 29 05:12:17.192928 2026] [security2:error] [pid 11274:tid 11563] [client 20.48.251.3:38177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/requirements.php"] [unique_id "apK-kWbX5DA3XO6e_qRmrwAAAX8"]
[Sat Aug 29 05:12:17.194318 2026] [security2:error] [pid 1321:tid 1609] [client 93.123.109.228:36796] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/BE/.env"] [unique_id "apK-kWjCPtor9NZ-byQKawAABrQ"]
[Sat Aug 29 05:12:17.195352 2026] [security2:error] [pid 11274:tid 11498] [client 20.104.18.15:29137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/inx.php"] [unique_id "apK-kWbX5DA3XO6e_qRmsAAAAT8"]
[Sat Aug 29 05:12:17.210215 2026] [security2:error] [pid 1321:tid 1362] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-content/admin-header.php"] [unique_id "apK-kWjCPtor9NZ-byQKbAAGkAU"]
[Sat Aug 29 05:12:17.210431 2026] [security2:error] [pid 11274:tid 11541] [client 40.83.93.50:9060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/aksinet.php"] [unique_id "apK-kWbX5DA3XO6e_qRmsQAAAWo"]
[Sat Aug 29 05:12:17.216480 2026] [security2:error] [pid 1321:tid 1561] [client 20.104.18.15:29669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/backup.php"] [unique_id "apK-kWjCPtor9NZ-byQKbQAABoQ"]
[Sat Aug 29 05:12:17.225309 2026] [security2:error] [pid 11274:tid 11503] [client 158.23.184.117:34912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/adminfuns.php"] [unique_id "apK-kWbX5DA3XO6e_qRmswAAAUQ"]
[Sat Aug 29 05:12:17.234744 2026] [security2:error] [pid 11274:tid 11511] [client 20.104.104.62:48086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/rfi.php"] [unique_id "apK-kWbX5DA3XO6e_qRmtAAAAUw"]
[Sat Aug 29 05:12:17.245315 2026] [security2:error] [pid 1321:tid 1596] [client 20.240.128.207:8206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK-kWjCPtor9NZ-byQKbgAABqc"]
[Sat Aug 29 05:12:17.249629 2026] [security2:error] [pid 11274:tid 11522] [client 4.205.62.107:5504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/wsws.php"] [unique_id "apK-kWbX5DA3XO6e_qRmtgAAAVc"]
[Sat Aug 29 05:12:17.260538 2026] [security2:error] [pid 1321:tid 1549] [client 93.123.109.228:36832] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/Backend/.env"] [unique_id "apK-kWjCPtor9NZ-byQKcAAABng"]
[Sat Aug 29 05:12:17.260832 2026] [security2:error] [pid 11274:tid 11517] [client 93.123.109.228:36726] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/Be/.env"] [unique_id "apK-kWbX5DA3XO6e_qRmtwAAAVI"]
[Sat Aug 29 05:12:17.277532 2026] [security2:error] [pid 11274:tid 11445] [client 52.139.37.240:15262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-kWbX5DA3XO6e_qRmuAAAAQs"]
[Sat Aug 29 05:12:17.283910 2026] [security2:error] [pid 1321:tid 1497] [client 158.158.54.35:20726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/bthil.php"] [unique_id "apK-kWjCPtor9NZ-byQKcQAABkU"]
[Sat Aug 29 05:12:17.296682 2026] [security2:error] [pid 1321:tid 1583] [client 20.52.41.200:2687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/t.php"] [unique_id "apK-kWjCPtor9NZ-byQKdAAABpo"]
[Sat Aug 29 05:12:17.297131 2026] [security2:error] [pid 1321:tid 1504] [client 158.23.147.79:43358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-admin.php"] [unique_id "apK-kWjCPtor9NZ-byQKdQAABkw"]
[Sat Aug 29 05:12:17.303615 2026] [security2:error] [pid 11274:tid 11470] [client 20.240.128.207:11692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-configs.php"] [unique_id "apK-kWbX5DA3XO6e_qRmuwAAASQ"]
[Sat Aug 29 05:12:17.315112 2026] [security2:error] [pid 11274:tid 11527] [client 74.248.24.12:41734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/php8.php"] [unique_id "apK-kWbX5DA3XO6e_qRmvQAAAVw"]
[Sat Aug 29 05:12:17.323478 2026] [security2:error] [pid 11274:tid 11519] [client 20.48.251.3:38155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/hochladen.form.php"] [unique_id "apK-kWbX5DA3XO6e_qRmvwAAAVQ"]
[Sat Aug 29 05:12:17.337040 2026] [security2:error] [pid 1321:tid 1564] [client 20.63.219.114:18323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/alumni_reg.php"] [unique_id "apK-kWjCPtor9NZ-byQKeAAABoc"]
[Sat Aug 29 05:12:17.344154 2026] [security2:error] [pid 11274:tid 11571] [client 20.104.18.15:29149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/vpn.php"] [unique_id "apK-kWbX5DA3XO6e_qRmwgAAAYc"]
[Sat Aug 29 05:12:17.350820 2026] [security2:error] [pid 11274:tid 11486] [client 20.52.41.200:4758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-cron.php"] [unique_id "apK-kWbX5DA3XO6e_qRmwwAAATM"]
[Sat Aug 29 05:12:17.364423 2026] [security2:error] [pid 11274:tid 11499] [client 20.220.204.93:9512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/knmt.php"] [unique_id "apK-kWbX5DA3XO6e_qRmxAAAAUA"]
[Sat Aug 29 05:12:17.372029 2026] [security2:error] [pid 11274:tid 11501] [client 158.23.184.117:34901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/403.php"] [unique_id "apK-kWbX5DA3XO6e_qRmxQAAAUI"]
[Sat Aug 29 05:12:17.382041 2026] [security2:error] [pid 11274:tid 11497] [client 20.104.49.130:36061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/133.php"] [unique_id "apK-kWbX5DA3XO6e_qRmxgAAAT4"]
[Sat Aug 29 05:12:17.383468 2026] [security2:error] [pid 11274:tid 11452] [client 20.104.104.62:46215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/tajj.php"] [unique_id "apK-kWbX5DA3XO6e_qRmyAAAARI"]
[Sat Aug 29 05:12:17.384405 2026] [security2:error] [pid 11274:tid 11494] [client 4.205.62.107:64946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/test.config.php"] [unique_id "apK-kWbX5DA3XO6e_qRmyQAAATs"]
[Sat Aug 29 05:12:17.385897 2026] [security2:error] [pid 11274:tid 11485] [client 20.104.18.15:29141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/indo.php"] [unique_id "apK-kWbX5DA3XO6e_qRmygAAATI"]
[Sat Aug 29 05:12:17.409695 2026] [security2:error] [pid 11274:tid 11451] [client 158.23.147.79:24501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-admin/index.php"] [unique_id "apK-kWbX5DA3XO6e_qRmzgAAARE"]
[Sat Aug 29 05:12:17.452909 2026] [security2:error] [pid 11274:tid 11536] [client 20.48.251.3:38177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/asdf.php"] [unique_id "apK-kWbX5DA3XO6e_qRm0gAAAWU"]
[Sat Aug 29 05:12:17.456612 2026] [security2:error] [pid 1321:tid 1386] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-content/admin.php"] [unique_id "apK-kWjCPtor9NZ-byQKfgAGWhw"]
[Sat Aug 29 05:12:17.457395 2026] [proxy_http:error] [pid 1017536:tid 1017754] (70007)The timeout specified has expired: [client 127.0.0.1:47874] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:12:17.457417 2026] [proxy:error] [pid 1017536:tid 1017754] [client 127.0.0.1:47874] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:12:17.460244 2026] [security2:error] [pid 1321:tid 1547] [client 68.155.159.216:56550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-admin/images/about.php"] [unique_id "apK-kWjCPtor9NZ-byQKgAAABnY"]
[Sat Aug 29 05:12:17.465436 2026] [security2:error] [pid 1321:tid 1597] [client 195.178.110.247:4908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.marvelouswoodworking.com"] [uri "/index.php"] [unique_id "apK-kWjCPtor9NZ-byQKgQAABqg"]
[Sat Aug 29 05:12:17.484466 2026] [security2:error] [pid 1321:tid 1608] [client 20.104.18.15:29074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/shiny.php"] [unique_id "apK-kWjCPtor9NZ-byQKgwAABrM"]
[Sat Aug 29 05:12:17.498394 2026] [proxy_http:error] [pid 1017536:tid 1017660] (70007)The timeout specified has expired: [remote 57.141.14.63:59328] AH01102: error reading status line from remote server 127.0.0.1:8443
[Sat Aug 29 05:12:17.498417 2026] [proxy:error] [pid 1017536:tid 1017660] [remote 57.141.14.63:59328] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:12:17.507024 2026] [proxy_http:error] [pid 1034096:tid 1034272] (70007)The timeout specified has expired: [client 127.0.0.1:48384] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:12:17.507046 2026] [proxy:error] [pid 1034096:tid 1034272] [client 127.0.0.1:48384] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:12:17.517576 2026] [security2:error] [pid 11274:tid 11549] [client 20.104.104.62:48105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/grsiuk.php"] [unique_id "apK-kWbX5DA3XO6e_qRm2QAAAXE"]
[Sat Aug 29 05:12:17.521556 2026] [security2:error] [pid 11274:tid 11516] [client 20.104.18.15:29680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/sign.php"] [unique_id "apK-kWbX5DA3XO6e_qRm2gAAAVE"]
[Sat Aug 29 05:12:17.534807 2026] [security2:error] [pid 1321:tid 1499] [client 216.51.171.83:58543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 83.171.51.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-kWjCPtor9NZ-byQKiQAABkc"]
[Sat Aug 29 05:12:17.534921 2026] [security2:error] [pid 1321:tid 1499] [client 216.51.171.83:58543] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-kWjCPtor9NZ-byQKiQAABkc"]
[Sat Aug 29 05:12:17.550693 2026] [security2:error] [pid 1321:tid 1567] [client 68.155.159.216:23487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK-kWjCPtor9NZ-byQKigAABoo"]
[Sat Aug 29 05:12:17.581500 2026] [security2:error] [pid 11274:tid 11539] [client 20.104.104.62:48681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/f2r4.php"] [unique_id "apK-kWbX5DA3XO6e_qRm3gAAAWg"]
[Sat Aug 29 05:12:17.581501 2026] [security2:error] [pid 1321:tid 1498] [client 20.48.251.3:38702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/zz.php"] [unique_id "apK-kWjCPtor9NZ-byQKiwAABkY"]
[Sat Aug 29 05:12:17.594814 2026] [security2:error] [pid 11274:tid 11498] [client 52.139.37.240:14498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/wp-index.php"] [unique_id "apK-kWbX5DA3XO6e_qRm4AAAAT8"]
[Sat Aug 29 05:12:17.601225 2026] [security2:error] [pid 11274:tid 11503] [client 158.158.54.35:15734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/a.php"] [unique_id "apK-kWbX5DA3XO6e_qRm4QAAAUQ"]
[Sat Aug 29 05:12:17.605435 2026] [security2:error] [pid 1321:tid 1515] [client 158.23.184.117:34847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/.trash7206/index.php"] [unique_id "apK-kWjCPtor9NZ-byQKjgAABlc"]
[Sat Aug 29 05:12:17.611388 2026] [security2:error] [pid 1321:tid 1500] [client 158.23.147.79:64111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK-kWjCPtor9NZ-byQKjwAABkg"]
[Sat Aug 29 05:12:17.617949 2026] [security2:error] [pid 1321:tid 1577] [client 20.104.18.15:29089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/goods.php"] [unique_id "apK-kWjCPtor9NZ-byQKkAAABpQ"]
[Sat Aug 29 05:12:17.626002 2026] [security2:error] [pid 1321:tid 1580] [client 195.178.110.247:35966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.marvelouswoodworking.com"] [uri "/index.php"] [unique_id "apK-kWjCPtor9NZ-byQKkgAABpc"]
[Sat Aug 29 05:12:17.626040 2026] [security2:error] [pid 1321:tid 1525] [client 20.220.204.93:18763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/sbhu.php"] [unique_id "apK-kWjCPtor9NZ-byQKkwAABmE"]
[Sat Aug 29 05:12:17.637555 2026] [security2:error] [pid 1321:tid 1603] [client 93.123.109.228:36804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK-kWjCPtor9NZ-byQKlQAABq4"]
[Sat Aug 29 05:12:17.638976 2026] [security2:error] [pid 11274:tid 11476] [client 4.205.62.107:61752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/config/laravolt/css/index.php"] [unique_id "apK-kWbX5DA3XO6e_qRm4gAAASo"]
[Sat Aug 29 05:12:17.672765 2026] [security2:error] [pid 1321:tid 1514] [client 20.104.18.15:29162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/wnnjpsby.php"] [unique_id "apK-kWjCPtor9NZ-byQKmAAABlY"]
[Sat Aug 29 05:12:17.702064 2026] [security2:error] [pid 1321:tid 1412] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-content/autoload_classmap.php"] [unique_id "apK-kWjCPtor9NZ-byQKmgAGeTY"]
[Sat Aug 29 05:12:17.727756 2026] [security2:error] [pid 11274:tid 11480] [client 20.48.251.3:38675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/wp-konfig.php"] [unique_id "apK-kWbX5DA3XO6e_qRm6wAAAS0"]
[Sat Aug 29 05:12:17.728322 2026] [security2:error] [pid 1321:tid 1502] [client 20.63.219.114:1870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/colors.php"] [unique_id "apK-kWjCPtor9NZ-byQKngAABko"]
[Sat Aug 29 05:12:17.731732 2026] [security2:error] [pid 11274:tid 11469] [client 158.23.147.79:14261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK-kWbX5DA3XO6e_qRm7AAAASM"]
[Sat Aug 29 05:12:17.741003 2026] [security2:error] [pid 11274:tid 11571] [client 20.104.104.62:47609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-incleude.php"] [unique_id "apK-kWbX5DA3XO6e_qRm7gAAAYc"]
[Sat Aug 29 05:12:17.746136 2026] [security2:error] [pid 11274:tid 11554] [client 40.83.93.50:14728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/alfa-rex1.php"] [unique_id "apK-kWbX5DA3XO6e_qRm7wAAAXY"]
[Sat Aug 29 05:12:17.747946 2026] [security2:error] [pid 11274:tid 11534] [client 93.123.109.228:36770] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/admin-app/.env"] [unique_id "apK-kWbX5DA3XO6e_qRm8AAAAWM"]
[Sat Aug 29 05:12:17.748762 2026] [security2:error] [pid 1321:tid 1522] [client 20.52.41.200:2196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/i.php"] [unique_id "apK-kWjCPtor9NZ-byQKoAAABl4"]
[Sat Aug 29 05:12:17.756080 2026] [security2:error] [pid 11274:tid 11459] [client 158.23.184.117:34857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/.trash7206/admin.php"] [unique_id "apK-kWbX5DA3XO6e_qRm8gAAARk"]
[Sat Aug 29 05:12:17.756131 2026] [security2:error] [pid 11274:tid 11444] [client 4.205.62.107:61022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/w.php"] [unique_id "apK-kWbX5DA3XO6e_qRm8QAAAQo"]
[Sat Aug 29 05:12:17.758814 2026] [security2:error] [pid 11274:tid 11499] [client 20.104.18.15:29082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/alfa.php"] [unique_id "apK-kWbX5DA3XO6e_qRm8wAAAUA"]
[Sat Aug 29 05:12:17.768076 2026] [security2:error] [pid 11274:tid 11395] [remote 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK-kWbX5DA3XO6e_qRm9AABPVE"]
[Sat Aug 29 05:12:17.768256 2026] [security2:error] [pid 11274:tid 11496] [client 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK-kWbX5DA3XO6e_qRm9AABPVE"]
[Sat Aug 29 05:12:17.774031 2026] [security2:error] [pid 11274:tid 11541] [client 20.240.128.207:2427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/xda.php"] [unique_id "apK-kWbX5DA3XO6e_qRm9gAAAWo"]
[Sat Aug 29 05:12:17.774660 2026] [security2:error] [pid 11274:tid 11497] [client 4.205.62.107:32560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/sgd.php"] [unique_id "apK-kWbX5DA3XO6e_qRm9wAAAT4"]
[Sat Aug 29 05:12:17.795190 2026] [security2:error] [pid 11274:tid 11551] [client 20.240.128.207:7187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-includes/index.php"] [unique_id "apK-kWbX5DA3XO6e_qRm-QAAAXM"]
[Sat Aug 29 05:12:17.797017 2026] [security2:error] [pid 1321:tid 1573] [client 52.139.37.240:15292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/ww2.php"] [unique_id "apK-kWjCPtor9NZ-byQKowAABpA"]
[Sat Aug 29 05:12:17.797800 2026] [security2:error] [pid 1321:tid 1595] [client 158.23.147.79:7058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/wp-content/banners/about.php"] [unique_id "apK-kWjCPtor9NZ-byQKpAAABqY"]
[Sat Aug 29 05:12:17.807425 2026] [security2:error] [pid 11274:tid 11522] [client 20.52.41.200:4789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-block.php"] [unique_id "apK-kWbX5DA3XO6e_qRm-gAAAVc"]
[Sat Aug 29 05:12:17.808732 2026] [security2:error] [pid 11274:tid 11465] [client 20.220.204.93:9578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/a332.php"] [unique_id "apK-kWbX5DA3XO6e_qRm-wAAAR8"]
[Sat Aug 29 05:12:17.809351 2026] [autoindex:error] [pid 1321:tid 1542] [client 158.158.54.35:11752] AH01276: Cannot serve directory /home2/charlov7/public_html/dev/wp-admin/includes/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:12:17.820766 2026] [security2:error] [pid 1321:tid 1574] [client 103.48.146.148:55318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 148.146.48.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK-kWjCPtor9NZ-byQKpwAABpE"]
[Sat Aug 29 05:12:17.820920 2026] [security2:error] [pid 1321:tid 1574] [client 103.48.146.148:55318] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK-kWjCPtor9NZ-byQKpwAABpE"]
[Sat Aug 29 05:12:17.822252 2026] [security2:error] [pid 11274:tid 11479] [client 20.104.18.15:29127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/gigi.php"] [unique_id "apK-kWbX5DA3XO6e_qRm_AAAASw"]
[Sat Aug 29 05:12:17.829267 2026] [security2:error] [pid 1321:tid 1584] [client 103.240.76.112:42985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK-kWjCPtor9NZ-byQKqAAABps"]
[Sat Aug 29 05:12:17.829433 2026] [security2:error] [pid 1321:tid 1584] [client 103.240.76.112:42985] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK-kWjCPtor9NZ-byQKqAAABps"]
[Sat Aug 29 05:12:17.851463 2026] [security2:error] [pid 1321:tid 1607] [client 158.23.184.117:4736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/update/da222.php"] [unique_id "apK-kWjCPtor9NZ-byQKqwAABrI"]
[Sat Aug 29 05:12:17.861280 2026] [security2:error] [pid 1321:tid 1489] [client 20.48.251.3:38553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/brc.php"] [unique_id "apK-kWjCPtor9NZ-byQKrAAABj0"]
[Sat Aug 29 05:12:17.894712 2026] [security2:error] [pid 11274:tid 11461] [client 158.23.147.79:64401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK-kWbX5DA3XO6e_qRnAgAAARs"]
[Sat Aug 29 05:12:17.900241 2026] [security2:error] [pid 11274:tid 11568] [client 93.123.109.228:36770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/admin/phpinfo.php"] [unique_id "apK-kWbX5DA3XO6e_qRnAwAAAYQ"]
[Sat Aug 29 05:12:17.901492 2026] [security2:error] [pid 1321:tid 1605] [client 20.197.61.180:1975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/class-wp-cmd.php"] [unique_id "apK-kWjCPtor9NZ-byQKrwAABrA"]
[Sat Aug 29 05:12:17.906367 2026] [security2:error] [pid 1321:tid 1518] [client 20.104.18.15:29638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/33.php"] [unique_id "apK-kWjCPtor9NZ-byQKsAAABlo"]
[Sat Aug 29 05:12:17.915703 2026] [security2:error] [pid 11274:tid 11471] [client 68.155.159.216:21457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK-kWbX5DA3XO6e_qRnBwAAASU"]
[Sat Aug 29 05:12:17.921317 2026] [security2:error] [pid 1321:tid 1506] [client 158.23.184.117:34897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/wp-content/admin.php"] [unique_id "apK-kWjCPtor9NZ-byQKsQAABk4"]
[Sat Aug 29 05:12:17.951789 2026] [security2:error] [pid 1321:tid 1425] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-content/cache/min/1/wp-content/admin.php"] [unique_id "apK-kWjCPtor9NZ-byQKswAGc0M"]
[Sat Aug 29 05:12:17.955836 2026] [security2:error] [pid 1321:tid 1608] [client 158.158.54.35:11752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/cv.php"] [unique_id "apK-kWjCPtor9NZ-byQKtQAABrM"]
[Sat Aug 29 05:12:17.971678 2026] [security2:error] [pid 11274:tid 11495] [client 93.123.109.228:36726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/admin_phpinfo.php"] [unique_id "apK-kWbX5DA3XO6e_qRnCgAAATw"]
[Sat Aug 29 05:12:17.977169 2026] [security2:error] [pid 11274:tid 11524] [client 20.104.18.15:29149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/info.php/new.php"] [unique_id "apK-kWbX5DA3XO6e_qRnCwAAAVk"]
[Sat Aug 29 05:12:17.988829 2026] [security2:error] [pid 1321:tid 1612] [client 93.123.109.228:36836] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/administrator/.env"] [unique_id "apK-kWjCPtor9NZ-byQKtgAABrc"]
[Sat Aug 29 05:12:17.991979 2026] [security2:error] [pid 1321:tid 1507] [client 20.48.251.3:38172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/4563.php"] [unique_id "apK-kWjCPtor9NZ-byQKtwAABk8"]
[Sat Aug 29 05:12:17.995405 2026] [security2:error] [pid 11274:tid 11549] [client 52.139.37.240:15260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/7logs.php"] [unique_id "apK-kWbX5DA3XO6e_qRnDQAAAXE"]
[Sat Aug 29 05:12:18.002113 2026] [security2:error] [pid 11274:tid 11555] [client 158.23.184.117:50309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/xmr.php"] [unique_id "apK-kmbX5DA3XO6e_qRnDgAAAXc"]
[Sat Aug 29 05:12:18.011031 2026] [security2:error] [pid 1321:tid 1536] [client 93.123.109.228:36784] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/api-backend/.env"] [unique_id "apK-kmjCPtor9NZ-byQKuAAABmw"]
[Sat Aug 29 05:12:18.016986 2026] [security2:error] [pid 11274:tid 11467] [client 20.220.204.93:9792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/ws66.php"] [unique_id "apK-kmbX5DA3XO6e_qRnDwAAASE"]
[Sat Aug 29 05:12:18.021887 2026] [security2:error] [pid 1321:tid 1586] [client 93.123.109.228:36762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/api-node/.env"] [unique_id "apK-kmjCPtor9NZ-byQKuQAABp0"]
[Sat Aug 29 05:12:18.027207 2026] [security2:error] [pid 1321:tid 1499] [client 195.178.110.247:4912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.marykarpusfosterscholarship.com"] [uri "/index.php"] [unique_id "apK-kmjCPtor9NZ-byQKugAABkc"]
[Sat Aug 29 05:12:18.038753 2026] [security2:error] [pid 11274:tid 11561] [client 93.123.109.228:36740] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/api/.env"] [unique_id "apK-kmbX5DA3XO6e_qRnEQAAAX0"]
[Sat Aug 29 05:12:18.041911 2026] [security2:error] [pid 11274:tid 11445] [client 74.248.24.12:16388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/install.php"] [unique_id "apK-kmbX5DA3XO6e_qRnEgAAAQs"]
[Sat Aug 29 05:12:18.052553 2026] [security2:error] [pid 11274:tid 11483] [client 158.158.54.35:18513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/u.php"] [unique_id "apK-kmbX5DA3XO6e_qRnFAAAATA"]
[Sat Aug 29 05:12:18.058386 2026] [security2:error] [pid 11274:tid 11518] [client 20.104.18.15:29071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/133.php"] [unique_id "apK-kmbX5DA3XO6e_qRnFQAAAVM"]
[Sat Aug 29 05:12:18.068635 2026] [security2:error] [pid 11274:tid 11503] [client 158.23.184.117:34902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/wp-mail.php"] [unique_id "apK-kmbX5DA3XO6e_qRnFgAAAUQ"]
[Sat Aug 29 05:12:18.087325 2026] [security2:error] [pid 11274:tid 11508] [client 20.63.219.114:18827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/Js.php"] [unique_id "apK-kmbX5DA3XO6e_qRnFwAAAUk"]
[Sat Aug 29 05:12:18.104670 2026] [security2:error] [pid 11274:tid 11554] [client 158.23.147.79:55906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/ans.php"] [unique_id "apK-kmbX5DA3XO6e_qRnGQAAAXY"]
[Sat Aug 29 05:12:18.107735 2026] [security2:error] [pid 1321:tid 1577] [client 4.205.62.107:63392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/phpinfo01.php"] [unique_id "apK-kmjCPtor9NZ-byQKvAAABpQ"]
[Sat Aug 29 05:12:18.117826 2026] [security2:error] [pid 1321:tid 1606] [client 20.48.251.3:38203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/lala.php"] [unique_id "apK-kmjCPtor9NZ-byQKvgAABrE"]
[Sat Aug 29 05:12:18.123290 2026] [security2:error] [pid 1321:tid 1509] [client 20.151.200.44:55736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/alog.php"] [unique_id "apK-kmjCPtor9NZ-byQKwAAABlE"]
[Sat Aug 29 05:12:18.154425 2026] [security2:error] [pid 1321:tid 1514] [client 4.205.62.107:32520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/services.php"] [unique_id "apK-kmjCPtor9NZ-byQKxAAABlY"]
[Sat Aug 29 05:12:18.167009 2026] [security2:error] [pid 1321:tid 1603] [client 158.23.184.117:50305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK-kmjCPtor9NZ-byQKyAAABq4"]
[Sat Aug 29 05:12:18.187479 2026] [security2:error] [pid 11274:tid 11499] [client 52.139.37.240:15244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/ac.php"] [unique_id "apK-kmbX5DA3XO6e_qRnHgAAAUA"]
[Sat Aug 29 05:12:18.188811 2026] [security2:error] [pid 1321:tid 1561] [client 20.104.49.130:39076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bfcorrigan.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-kmjCPtor9NZ-byQKygAABoQ"]
[Sat Aug 29 05:12:18.190212 2026] [security2:error] [pid 11274:tid 11502] [client 195.178.110.247:35976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.marykarpusfosterscholarship.com"] [uri "/index.php"] [unique_id "apK-kmbX5DA3XO6e_qRnHwAAAUM"]
[Sat Aug 29 05:12:18.191443 2026] [security2:error] [pid 1321:tid 1576] [client 20.52.41.200:2202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/deepseek_d.php"] [unique_id "apK-kmjCPtor9NZ-byQKywAABpM"]
[Sat Aug 29 05:12:18.192977 2026] [security2:error] [pid 11274:tid 11560] [client 20.104.18.15:29087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/sym.php"] [unique_id "apK-kmbX5DA3XO6e_qRnIQAAAXw"]
[Sat Aug 29 05:12:18.196580 2026] [security2:error] [pid 1321:tid 1390] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-content/classwithtostring.php"] [unique_id "apK-kmjCPtor9NZ-byQKzQAGXiA"]
[Sat Aug 29 05:12:18.200128 2026] [security2:error] [pid 11274:tid 11509] [client 68.155.159.216:55073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.angelesforestranch.com"] [uri "/file88.php"] [unique_id "apK-kmbX5DA3XO6e_qRnIgAAAUo"]
[Sat Aug 29 05:12:18.247132 2026] [security2:error] [pid 1321:tid 1582] [client 20.48.251.3:38197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/sdsa.php"] [unique_id "apK-kmjCPtor9NZ-byQK0wAABpk"]
[Sat Aug 29 05:12:18.250468 2026] [security2:error] [pid 1321:tid 1542] [client 68.155.159.216:43910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/.well-known/index.php"] [unique_id "apK-kmjCPtor9NZ-byQK1AAABnI"]
[Sat Aug 29 05:12:18.257969 2026] [security2:error] [pid 1321:tid 1519] [client 20.240.128.207:4311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/theme.php"] [unique_id "apK-kmjCPtor9NZ-byQK1QAABls"]
[Sat Aug 29 05:12:18.265135 2026] [security2:error] [pid 1321:tid 1598] [client 158.23.184.117:34881] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/3.php"] [unique_id "apK-kmjCPtor9NZ-byQK1gAABqk"]
[Sat Aug 29 05:12:18.265395 2026] [security2:error] [pid 1321:tid 1563] [client 20.52.41.200:5160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-includes/fonts/admin.php"] [unique_id "apK-kmjCPtor9NZ-byQK1wAABoY"]
[Sat Aug 29 05:12:18.270717 2026] [security2:error] [pid 11274:tid 11527] [client 40.83.93.50:9036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/headerg.php"] [unique_id "apK-kmbX5DA3XO6e_qRnIwAAAVw"]
[Sat Aug 29 05:12:18.284370 2026] [security2:error] [pid 1321:tid 1532] [client 20.104.18.15:29664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/w.php"] [unique_id "apK-kmjCPtor9NZ-byQK2AAABmg"]
[Sat Aug 29 05:12:18.288099 2026] [security2:error] [pid 11274:tid 11479] [client 93.123.109.228:36846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/api/info.php"] [unique_id "apK-kmbX5DA3XO6e_qRnJAAAASw"]
[Sat Aug 29 05:12:18.292939 2026] [security2:error] [pid 1321:tid 1564] [client 57.141.14.60:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/page/46/"] [unique_id "apK-kmjCPtor9NZ-byQK2QAABoc"]
[Sat Aug 29 05:12:18.295768 2026] [security2:error] [pid 11274:tid 11496] [client 20.240.128.207:14596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-admin/a.php"] [unique_id "apK-kmbX5DA3XO6e_qRnJQAAAT0"]
[Sat Aug 29 05:12:18.296930 2026] [security2:error] [pid 11274:tid 11569] [client 158.23.147.79:50128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/xmlrpc.php"] [unique_id "apK-kmbX5DA3XO6e_qRnJgAAAYU"]
[Sat Aug 29 05:12:18.311331 2026] [security2:error] [pid 1321:tid 1584] [client 158.23.184.117:4444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/wp-act.php"] [unique_id "apK-kmjCPtor9NZ-byQK2wAABps"]
[Sat Aug 29 05:12:18.324339 2026] [security2:error] [pid 1321:tid 1548] [client 20.104.18.15:29133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/8.php"] [unique_id "apK-kmjCPtor9NZ-byQK3QAABnc"]
[Sat Aug 29 05:12:18.364991 2026] [security2:error] [pid 1321:tid 1604] [client 93.123.109.228:36784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/api/phpinfo.php"] [unique_id "apK-kmjCPtor9NZ-byQK3wAABq8"]
[Sat Aug 29 05:12:18.376413 2026] [security2:error] [pid 11274:tid 11570] [client 20.48.251.3:38546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/bengi.php"] [unique_id "apK-kmbX5DA3XO6e_qRnKwAAAYY"]
[Sat Aug 29 05:12:18.380314 2026] [security2:error] [pid 1321:tid 1605] [client 52.139.37.240:14515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/ctex1.php"] [unique_id "apK-kmjCPtor9NZ-byQK4AAABrA"]
[Sat Aug 29 05:12:18.384226 2026] [security2:error] [pid 1321:tid 1590] [client 4.205.62.107:5633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/localconf.php"] [unique_id "apK-kmjCPtor9NZ-byQK4QAABqE"]
[Sat Aug 29 05:12:18.387858 2026] [security2:error] [pid 1321:tid 1586] [client 20.104.49.130:60941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/ws78.php"] [unique_id "apK-kmjCPtor9NZ-byQK4gAABp0"]
[Sat Aug 29 05:12:18.396033 2026] [security2:error] [pid 1321:tid 1504] [client 158.158.54.35:1330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wp-content/packed.php"] [unique_id "apK-kmjCPtor9NZ-byQK5AAABkw"]
[Sat Aug 29 05:12:18.409676 2026] [security2:error] [pid 11274:tid 11572] [client 158.23.184.117:34852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "apK-kmbX5DA3XO6e_qRnLQAAAYg"]
[Sat Aug 29 05:12:18.443455 2026] [security2:error] [pid 1321:tid 1427] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-content/config.php"] [unique_id "apK-kmjCPtor9NZ-byQK5gAGSEU"]
[Sat Aug 29 05:12:18.457255 2026] [security2:error] [pid 1321:tid 1567] [client 158.23.184.117:4744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/fff.php"] [unique_id "apK-kmjCPtor9NZ-byQK5wAABoo"]
[Sat Aug 29 05:12:18.464321 2026] [security2:error] [pid 11274:tid 11448] [client 20.104.49.130:36051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/one.php"] [unique_id "apK-kmbX5DA3XO6e_qRnLwAAAQ4"]
[Sat Aug 29 05:12:18.475577 2026] [security2:error] [pid 11274:tid 11516] [client 20.104.18.15:29641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/goods.php"] [unique_id "apK-kmbX5DA3XO6e_qRnMAAAAVE"]
[Sat Aug 29 05:12:18.507077 2026] [security2:error] [pid 1321:tid 1610] [client 20.48.251.3:38171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/groceries/index.php"] [unique_id "apK-kmjCPtor9NZ-byQK6gAABrU"]
[Sat Aug 29 05:12:18.508779 2026] [security2:error] [pid 11274:tid 11505] [client 20.63.219.114:13969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/access.php"] [unique_id "apK-kmbX5DA3XO6e_qRnMQAAAUY"]
[Sat Aug 29 05:12:18.518136 2026] [security2:error] [pid 11274:tid 11477] [client 4.205.62.107:64275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/gecko-litespeed.php"] [unique_id "apK-kmbX5DA3XO6e_qRnMwAAASs"]
[Sat Aug 29 05:12:18.522440 2026] [security2:error] [pid 11274:tid 11487] [client 158.158.54.35:5935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/r.php"] [unique_id "apK-kmbX5DA3XO6e_qRnNAAAATQ"]
[Sat Aug 29 05:12:18.527065 2026] [security2:error] [pid 11274:tid 11495] [client 158.23.147.79:24569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK-kmbX5DA3XO6e_qRnNQAAATw"]
[Sat Aug 29 05:12:18.531109 2026] [security2:error] [pid 11274:tid 11524] [client 20.104.18.15:29085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/x.php"] [unique_id "apK-kmbX5DA3XO6e_qRnNgAAAVk"]
[Sat Aug 29 05:12:18.559074 2026] [security2:error] [pid 1321:tid 1523] [client 74.248.24.12:36548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/ioxi-o.php"] [unique_id "apK-kmjCPtor9NZ-byQK7QAABl8"]
[Sat Aug 29 05:12:18.576708 2026] [security2:error] [pid 1321:tid 1514] [client 52.139.37.240:14924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/defaults.php"] [unique_id "apK-kmjCPtor9NZ-byQK7gAABlY"]
[Sat Aug 29 05:12:18.581277 2026] [security2:error] [pid 11274:tid 11543] [client 68.155.159.216:38283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK-kmbX5DA3XO6e_qRnQgAAAWs"]
[Sat Aug 29 05:12:18.602554 2026] [security2:error] [pid 11274:tid 11498] [client 158.23.184.117:50306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/.tmb/dropdown.php"] [unique_id "apK-kmbX5DA3XO6e_qRnRAAAAT8"]
[Sat Aug 29 05:12:18.610300 2026] [security2:error] [pid 11274:tid 11503] [client 20.104.18.15:29692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/ah.php"] [unique_id "apK-kmbX5DA3XO6e_qRnRgAAAUQ"]
[Sat Aug 29 05:12:18.619320 2026] [security2:error] [pid 1321:tid 1536] [client 20.197.61.180:1151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/disagreed.php"] [unique_id "apK-kmjCPtor9NZ-byQK8QAABmw"]
[Sat Aug 29 05:12:18.624831 2026] [core:alert] [pid 11274:tid 11519] [client 66.249.92.39:64299] /home2/dhronnet/public_html/.htaccess: The specified network mask is invalid.
[Sat Aug 29 05:12:18.635848 2026] [security2:error] [pid 11274:tid 11554] [client 20.48.251.3:38693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/server-info.php"] [unique_id "apK-kmbX5DA3XO6e_qRnSQAAAXY"]
[Sat Aug 29 05:12:18.638007 2026] [security2:error] [pid 1321:tid 1576] [client 93.123.109.228:36836] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/apis/.env"] [unique_id "apK-kmjCPtor9NZ-byQK8wAABpM"]
[Sat Aug 29 05:12:18.657267 2026] [security2:error] [pid 11274:tid 11497] [client 68.155.159.216:23393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK-kmbX5DA3XO6e_qRnSwAAAT4"]
[Sat Aug 29 05:12:18.665866 2026] [security2:error] [pid 11274:tid 11552] [client 20.104.18.15:29143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/ssla.php"] [unique_id "apK-kmbX5DA3XO6e_qRnTAAAAXQ"]
[Sat Aug 29 05:12:18.666084 2026] [security2:error] [pid 11274:tid 11452] [client 158.23.184.117:34893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/wp-admin/css/admin.php"] [unique_id "apK-kmbX5DA3XO6e_qRnTQAAARI"]
[Sat Aug 29 05:12:18.688675 2026] [security2:error] [pid 1321:tid 1371] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-content/cong.php"] [unique_id "apK-kmjCPtor9NZ-byQK9AAGpw0"]
[Sat Aug 29 05:12:18.713196 2026] [security2:error] [pid 11274:tid 11445] [client 20.52.41.200:5356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/m.php"] [unique_id "apK-kmbX5DA3XO6e_qRnTwAAAQs"]
[Sat Aug 29 05:12:18.717279 2026] [security2:error] [pid 11274:tid 11507] [client 158.23.147.79:55923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK-kmbX5DA3XO6e_qRnUAAAAUg"]
[Sat Aug 29 05:12:18.719873 2026] [security2:error] [pid 1321:tid 1573] [client 68.155.159.216:64115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-admin/css/index.php"] [unique_id "apK-kmjCPtor9NZ-byQK9wAABpA"]
[Sat Aug 29 05:12:18.746905 2026] [security2:error] [pid 11274:tid 11522] [client 158.23.184.117:61532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/robots.php"] [unique_id "apK-kmbX5DA3XO6e_qRnUwAAAVc"]
[Sat Aug 29 05:12:18.753055 2026] [security2:error] [pid 11274:tid 11337] [remote 74.7.227.143:57326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.district3.ca"] [uri "/D3WEBfavs.php"] [unique_id "apK-kmbX5DA3XO6e_qRnVAABTRg"], referer: https://mail.district3.ca/
[Sat Aug 29 05:12:18.756454 2026] [security2:error] [pid 1321:tid 1502] [client 20.240.128.207:12489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/classwithtostring.php"] [unique_id "apK-kmjCPtor9NZ-byQK-AAABko"]
[Sat Aug 29 05:12:18.758418 2026] [security2:error] [pid 11274:tid 11506] [client 20.104.18.15:29142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/ws55.php"] [unique_id "apK-kmbX5DA3XO6e_qRnVQAAAUc"]
[Sat Aug 29 05:12:18.770876 2026] [security2:error] [pid 11274:tid 11538] [client 52.139.37.240:14512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/domains.php"] [unique_id "apK-kmbX5DA3XO6e_qRnVgAAAWc"]
[Sat Aug 29 05:12:18.778970 2026] [security2:error] [pid 11274:tid 11513] [client 20.48.251.3:38682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/xve22.php"] [unique_id "apK-kmbX5DA3XO6e_qRnVwAAAU4"]
[Sat Aug 29 05:12:18.786085 2026] [security2:error] [pid 1321:tid 1583] [client 93.123.109.228:36836] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/app/.env"] [unique_id "apK-kmjCPtor9NZ-byQK-wAABpo"]
[Sat Aug 29 05:12:18.787046 2026] [security2:error] [pid 11274:tid 11539] [client 4.205.62.107:61701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/87.php"] [unique_id "apK-kmbX5DA3XO6e_qRnWAAAAWg"]
[Sat Aug 29 05:12:18.799142 2026] [security2:error] [pid 11274:tid 11490] [client 20.52.41.200:2207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "apK-kmbX5DA3XO6e_qRnWQAAATc"]
[Sat Aug 29 05:12:18.800140 2026] [security2:error] [pid 1321:tid 1532] [client 20.151.200.44:27176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/lfi.php"] [unique_id "apK-kmjCPtor9NZ-byQK_AAABmg"]
[Sat Aug 29 05:12:18.808928 2026] [security2:error] [pid 1321:tid 1542] [client 158.23.184.117:34931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/bthil.php"] [unique_id "apK-kmjCPtor9NZ-byQK_gAABnI"]
[Sat Aug 29 05:12:18.827940 2026] [security2:error] [pid 11274:tid 11499] [client 40.83.93.50:9038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/meta.php"] [unique_id "apK-kmbX5DA3XO6e_qRnXAAAAUA"]
[Sat Aug 29 05:12:18.844762 2026] [security2:error] [pid 11274:tid 11449] [client 158.23.147.79:14230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK-kmbX5DA3XO6e_qRnXQAAAQ8"]
[Sat Aug 29 05:12:18.863785 2026] [security2:error] [pid 11274:tid 11493] [client 158.158.54.35:1341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wp-admin/js/index.php"] [unique_id "apK-kmbX5DA3XO6e_qRnXwAAATo"]
[Sat Aug 29 05:12:18.864527 2026] [security2:error] [pid 1321:tid 1595] [client 20.104.18.15:29667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "apK-kmjCPtor9NZ-byQLAwAABqY"]
[Sat Aug 29 05:12:18.893015 2026] [security2:error] [pid 1321:tid 1560] [client 4.205.62.107:63268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/btx25.php"] [unique_id "apK-kmjCPtor9NZ-byQLBgAABoM"]
[Sat Aug 29 05:12:18.894020 2026] [security2:error] [pid 11274:tid 11520] [client 158.23.184.117:61507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/.well-known/install.php"] [unique_id "apK-kmbX5DA3XO6e_qRnYgAAAVU"]
[Sat Aug 29 05:12:18.894757 2026] [security2:error] [pid 1321:tid 1580] [client 20.104.18.15:29670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/drykl.php"] [unique_id "apK-kmjCPtor9NZ-byQLBQAABpc"]
[Sat Aug 29 05:12:18.908271 2026] [security2:error] [pid 11274:tid 11514] [client 20.48.251.3:38543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/privacy.php"] [unique_id "apK-kmbX5DA3XO6e_qRnYwAAAU8"]
[Sat Aug 29 05:12:18.916161 2026] [security2:error] [pid 1321:tid 1593] [client 4.205.62.107:28045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/fleen.php"] [unique_id "apK-kmjCPtor9NZ-byQLBwAABqQ"]
[Sat Aug 29 05:12:18.936031 2026] [security2:error] [pid 1321:tid 1366] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-content/content.php"] [unique_id "apK-kmjCPtor9NZ-byQLCgAGswg"]
[Sat Aug 29 05:12:18.950887 2026] [security2:error] [pid 1321:tid 1599] [client 158.23.147.79:43313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK-kmjCPtor9NZ-byQLDAAABqo"]
[Sat Aug 29 05:12:18.957547 2026] [security2:error] [pid 11274:tid 11529] [client 158.23.184.117:34862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/file.php"] [unique_id "apK-kmbX5DA3XO6e_qRnZgAAAV4"]
[Sat Aug 29 05:12:18.963080 2026] [security2:error] [pid 1321:tid 1519] [client 20.63.219.114:18857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/classsmtps.php"] [unique_id "apK-kmjCPtor9NZ-byQLDQAABls"]
[Sat Aug 29 05:12:18.966472 2026] [security2:error] [pid 1321:tid 1506] [client 52.139.37.240:15252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/dropdown.php"] [unique_id "apK-kmjCPtor9NZ-byQLDgAABk4"]
[Sat Aug 29 05:12:18.983628 2026] [security2:error] [pid 1321:tid 1590] [client 20.240.128.207:3964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK-kmjCPtor9NZ-byQLDwAABqE"]
[Sat Aug 29 05:12:19.002013 2026] [security2:error] [pid 1321:tid 1489] [client 158.158.54.35:4388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-blog.php"] [unique_id "apK-k2jCPtor9NZ-byQLEAAABj0"]
[Sat Aug 29 05:12:19.030686 2026] [security2:error] [pid 11274:tid 11480] [client 20.104.18.15:29669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/backup.php"] [unique_id "apK-k2bX5DA3XO6e_qRnZwAAAS0"]
[Sat Aug 29 05:12:19.030870 2026] [security2:error] [pid 1321:tid 1500] [client 4.205.62.107:6517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/tax.php"] [unique_id "apK-k2jCPtor9NZ-byQLEgAABkg"]
[Sat Aug 29 05:12:19.030891 2026] [security2:error] [pid 1321:tid 1577] [client 20.104.18.15:29156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/wp-aothait.php"] [unique_id "apK-k2jCPtor9NZ-byQLFAAABpQ"]
[Sat Aug 29 05:12:19.036988 2026] [security2:error] [pid 1321:tid 1509] [client 20.48.251.3:38176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/zaza.php"] [unique_id "apK-k2jCPtor9NZ-byQLFgAABlE"]
[Sat Aug 29 05:12:19.051525 2026] [security2:error] [pid 1321:tid 1544] [client 68.155.159.216:56787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-admin/images/about.php"] [unique_id "apK-k2jCPtor9NZ-byQLFwAABnQ"]
[Sat Aug 29 05:12:19.074830 2026] [security2:error] [pid 1321:tid 1492] [client 34.169.171.101:45422] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.forensicengineernj.com"] [uri "/serverless.yml"] [unique_id "apK-k2jCPtor9NZ-byQLGwAABkA"]
[Sat Aug 29 05:12:19.081440 2026] [security2:error] [pid 11274:tid 11546] [client 34.169.171.101:45444] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/var/www/html/.env"] [unique_id "apK-k2bX5DA3XO6e_qRnbQAAAW4"]
[Sat Aug 29 05:12:19.083638 2026] [security2:error] [pid 1321:tid 1610] [client 34.169.171.101:45440] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/var/www/.env"] [unique_id "apK-k2jCPtor9NZ-byQLHQAABrU"]
[Sat Aug 29 05:12:19.089022 2026] [security2:error] [pid 11274:tid 11515] [client 20.151.200.44:55718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/adin.php"] [unique_id "apK-k2bX5DA3XO6e_qRnbwAAAVA"]
[Sat Aug 29 05:12:19.090590 2026] [security2:error] [pid 11274:tid 11552] [client 34.169.171.101:45402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/mail/.env"] [unique_id "apK-k2bX5DA3XO6e_qRncQAAAXQ"]
[Sat Aug 29 05:12:19.093099 2026] [security2:error] [pid 11274:tid 11517] [client 158.23.184.117:61521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/wp-admin/about.php"] [unique_id "apK-k2bX5DA3XO6e_qRncgAAAVI"]
[Sat Aug 29 05:12:19.093896 2026] [security2:error] [pid 11274:tid 11497] [client 34.169.171.101:45390] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "mail.forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-k2bX5DA3XO6e_qRncAAAAT4"]
[Sat Aug 29 05:12:19.096534 2026] [security2:error] [pid 11274:tid 11502] [client 20.151.200.44:27274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/quoys.php"] [unique_id "apK-k2bX5DA3XO6e_qRncwAAAUM"]
[Sat Aug 29 05:12:19.099519 2026] [security2:error] [pid 1321:tid 1508] [client 158.23.184.117:34846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/lock360.php"] [unique_id "apK-k2jCPtor9NZ-byQLHgAABlA"]
[Sat Aug 29 05:12:19.103984 2026] [security2:error] [pid 1321:tid 1603] [client 34.169.171.101:45516] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/email/.env"] [unique_id "apK-k2jCPtor9NZ-byQLIQAABq4"]
[Sat Aug 29 05:12:19.104060 2026] [security2:error] [pid 1321:tid 1603] [client 34.169.171.101:45516] ModSecurity: Warning. Matched phrase "Slackbot-LinkExpanding" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "mail.forensicengineernj.com"] [uri "/email/.env"] [unique_id "apK-k2jCPtor9NZ-byQLIQAABq4"]
[Sat Aug 29 05:12:19.106627 2026] [security2:error] [pid 1321:tid 1536] [client 34.169.171.101:45416] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/sendgrid/.env"] [unique_id "apK-k2jCPtor9NZ-byQLIgAABmw"]
[Sat Aug 29 05:12:19.107837 2026] [security2:error] [pid 11274:tid 11559] [client 34.169.171.101:45520] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/stripe/.env"] [unique_id "apK-k2bX5DA3XO6e_qRndwAAAXs"]
[Sat Aug 29 05:12:19.111766 2026] [security2:error] [pid 11274:tid 11508] [client 34.169.171.101:45508] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "mail.forensicengineernj.com"] [uri "/index.cgi"] [unique_id "apK-k2bX5DA3XO6e_qRneAAAAUk"]
[Sat Aug 29 05:12:19.115228 2026] [security2:error] [pid 1321:tid 1507] [client 107.145.13.164:54455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 164.13.145.107.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK-k2jCPtor9NZ-byQLKAAABk8"]
[Sat Aug 29 05:12:19.115330 2026] [security2:error] [pid 1321:tid 1507] [client 107.145.13.164:54455] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK-k2jCPtor9NZ-byQLKAAABk8"]
[Sat Aug 29 05:12:19.125087 2026] [security2:error] [pid 1321:tid 1548] [client 74.248.24.12:36547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/xmlrpc.php"] [unique_id "apK-k2jCPtor9NZ-byQLGgAABnc"]
[Sat Aug 29 05:12:19.130466 2026] [security2:error] [pid 11274:tid 11509] [client 34.169.171.101:45390] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-k2bX5DA3XO6e_qRnewAAAUo"], referer: https://mail.forensicengineernj.com/config/sendgrid.env
[Sat Aug 29 05:12:19.147888 2026] [security2:error] [pid 11274:tid 11496] [client 34.169.171.101:45508] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.forensicengineernj.com"] [uri "/404.html"] [unique_id "apK-k2bX5DA3XO6e_qRnfQAAAT0"], referer: https://mail.forensicengineernj.com/stripe.json
[Sat Aug 29 05:12:19.161386 2026] [security2:error] [pid 11274:tid 11512] [client 20.104.18.15:29663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/indo.php"] [unique_id "apK-k2bX5DA3XO6e_qRnfgAAAU0"]
[Sat Aug 29 05:12:19.163100 2026] [security2:error] [pid 11274:tid 11483] [client 20.52.41.200:4549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "apK-k2bX5DA3XO6e_qRnfwAAATA"]
[Sat Aug 29 05:12:19.166866 2026] [security2:error] [pid 11274:tid 11506] [client 20.48.251.3:38705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/wp-config.backup.php"] [unique_id "apK-k2bX5DA3XO6e_qRngAAAAUc"]
[Sat Aug 29 05:12:19.168754 2026] [security2:error] [pid 11274:tid 11551] [client 52.139.37.240:14495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/files/index.php"] [unique_id "apK-k2bX5DA3XO6e_qRngQAAAXM"]
[Sat Aug 29 05:12:19.187784 2026] [security2:error] [pid 1321:tid 1367] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-content/core.php"] [unique_id "apK-k2jCPtor9NZ-byQLKwAGsgk"]
[Sat Aug 29 05:12:19.206044 2026] [security2:error] [pid 11274:tid 11538] [client 158.23.147.79:55897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/worksec.php"] [unique_id "apK-k2bX5DA3XO6e_qRngwAAAWc"]
[Sat Aug 29 05:12:19.212363 2026] [security2:error] [pid 11274:tid 11570] [client 20.104.18.15:29668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/wp-includes/index.php"] [unique_id "apK-k2bX5DA3XO6e_qRnhAAAAYY"]
[Sat Aug 29 05:12:19.227011 2026] [security2:error] [pid 11274:tid 11539] [client 45.205.1.124:51882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 124.1.205.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hntransport.com"] [uri "/assets/plugins/file-uploader/server/php/index.php"] [unique_id "apK-k2bX5DA3XO6e_qRnhgAAAWg"]
[Sat Aug 29 05:12:19.230377 2026] [security2:error] [pid 11274:tid 11572] [client 68.155.159.216:1755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK-k2bX5DA3XO6e_qRnhwAAAYg"]
[Sat Aug 29 05:12:19.242369 2026] [security2:error] [pid 11274:tid 11494] [client 158.23.184.117:34821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/fpwch.php"] [unique_id "apK-k2bX5DA3XO6e_qRniAAAATs"]
[Sat Aug 29 05:12:19.244445 2026] [security2:error] [pid 11274:tid 11489] [client 4.205.62.107:63350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/cxc.php"] [unique_id "apK-k2bX5DA3XO6e_qRniQAAATY"]
[Sat Aug 29 05:12:19.287756 2026] [security2:error] [pid 1321:tid 1595] [client 93.123.109.228:36796] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/apps/.env"] [unique_id "apK-k2jCPtor9NZ-byQLLgAABqY"]
[Sat Aug 29 05:12:19.289726 2026] [security2:error] [pid 11274:tid 11484] [client 4.205.62.107:28061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/filesystems.php"] [unique_id "apK-k2bX5DA3XO6e_qRnjAAAATE"]
[Sat Aug 29 05:12:19.291862 2026] [security2:error] [pid 1321:tid 1547] [client 93.123.109.228:36836] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/application/.env"] [unique_id "apK-k2jCPtor9NZ-byQLLwAABnY"]
[Sat Aug 29 05:12:19.295496 2026] [security2:error] [pid 11274:tid 11505] [client 20.48.251.3:38685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/X57.php"] [unique_id "apK-k2bX5DA3XO6e_qRnjQAAAUY"]
[Sat Aug 29 05:12:19.304103 2026] [security2:error] [pid 11274:tid 11541] [client 40.83.93.50:14776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/dxc.php"] [unique_id "apK-k2bX5DA3XO6e_qRnjgAAAWo"]
[Sat Aug 29 05:12:19.304820 2026] [security2:error] [pid 11274:tid 11487] [client 68.155.159.216:55049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.angelesforestranch.com"] [uri "/NewFile.php/"] [unique_id "apK-k2bX5DA3XO6e_qRnjwAAATQ"]
[Sat Aug 29 05:12:19.313388 2026] [security2:error] [pid 11274:tid 11565] [client 68.155.159.216:21485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK-k2bX5DA3XO6e_qRnkAAAAYE"]
[Sat Aug 29 05:12:19.317812 2026] [security2:error] [pid 11274:tid 11522] [client 158.158.54.35:2013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/core.php"] [unique_id "apK-k2bX5DA3XO6e_qRnkQAAAVc"]
[Sat Aug 29 05:12:19.319916 2026] [security2:error] [pid 11274:tid 11461] [client 158.23.184.117:50313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/wp-content/backup.php"] [unique_id "apK-k2bX5DA3XO6e_qRnkgAAARs"]
[Sat Aug 29 05:12:19.328009 2026] [security2:error] [pid 11274:tid 11521] [client 20.240.128.207:12487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/news.php"] [unique_id "apK-k2bX5DA3XO6e_qRnkwAAAVY"]
[Sat Aug 29 05:12:19.332215 2026] [security2:error] [pid 1321:tid 1561] [client 20.104.18.15:29634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/sign.php"] [unique_id "apK-k2jCPtor9NZ-byQLNAAABoQ"]
[Sat Aug 29 05:12:19.361112 2026] [security2:error] [pid 11274:tid 11568] [client 52.139.37.240:14931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/flower.php"] [unique_id "apK-k2bX5DA3XO6e_qRnmwAAAYQ"]
[Sat Aug 29 05:12:19.379439 2026] [security2:error] [pid 11274:tid 11569] [client 20.197.61.180:1939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/class_api.php"] [unique_id "apK-k2bX5DA3XO6e_qRnngAAAYU"]
[Sat Aug 29 05:12:19.386930 2026] [security2:error] [pid 1321:tid 1608] [client 158.23.184.117:34908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/storage/index.php"] [unique_id "apK-k2jCPtor9NZ-byQLNwAABrM"]
[Sat Aug 29 05:12:19.391886 2026] [security2:error] [pid 1321:tid 1599] [client 68.155.159.216:43988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/wp-content/themes/too.php"] [unique_id "apK-k2jCPtor9NZ-byQLOAAABqo"]
[Sat Aug 29 05:12:19.412072 2026] [security2:error] [pid 11274:tid 11498] [client 20.52.41.200:2730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-content/themes/pridmag/il.php"] [unique_id "apK-k2bX5DA3XO6e_qRnogAAAT8"]
[Sat Aug 29 05:12:19.418309 2026] [security2:error] [pid 11274:tid 11534] [client 20.104.18.15:29139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/file31.php"] [unique_id "apK-k2bX5DA3XO6e_qRnpAAAAWM"]
[Sat Aug 29 05:12:19.422116 2026] [security2:error] [pid 1321:tid 1612] [client 158.23.147.79:7159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK-k2jCPtor9NZ-byQLOgAABrc"]
[Sat Aug 29 05:12:19.423100 2026] [security2:error] [pid 1321:tid 1591] [client 20.48.251.3:38554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/fucku.php"] [unique_id "apK-k2jCPtor9NZ-byQLOwAABqI"]
[Sat Aug 29 05:12:19.432798 2026] [security2:error] [pid 1321:tid 1446] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-content/db-status.php"] [unique_id "apK-k2jCPtor9NZ-byQLPAAGW1g"]
[Sat Aug 29 05:12:19.460221 2026] [security2:error] [pid 11274:tid 11485] [client 20.104.18.15:29663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/wnnjpsby.php"] [unique_id "apK-k2bX5DA3XO6e_qRnpwAAATI"]
[Sat Aug 29 05:12:19.464884 2026] [security2:error] [pid 11274:tid 11519] [client 158.23.184.117:61544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/.well-known/aa.php"] [unique_id "apK-k2bX5DA3XO6e_qRnqAAAAVQ"]
[Sat Aug 29 05:12:19.467546 2026] [security2:error] [pid 11274:tid 11555] [client 158.158.54.35:18518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/xxx.php"] [unique_id "apK-k2bX5DA3XO6e_qRnqQAAAXc"]
[Sat Aug 29 05:12:19.478365 2026] [security2:error] [pid 11274:tid 11520] [client 20.240.128.207:11651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/wp-admin.php"] [unique_id "apK-k2bX5DA3XO6e_qRnqgAAAVU"]
[Sat Aug 29 05:12:19.537931 2026] [security2:error] [pid 11274:tid 11539] [client 4.205.62.107:6096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/bengi.php"] [unique_id "apK-k2bX5DA3XO6e_qRnrwAAAWg"]
[Sat Aug 29 05:12:19.553732 2026] [security2:error] [pid 11274:tid 11490] [client 20.48.251.3:38711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/aws_config.php"] [unique_id "apK-k2bX5DA3XO6e_qRnsQAAATc"]
[Sat Aug 29 05:12:19.555113 2026] [security2:error] [pid 11274:tid 11473] [client 103.171.189.88:57018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-k2bX5DA3XO6e_qRnrgAAASc"]
[Sat Aug 29 05:12:19.555282 2026] [security2:error] [pid 11274:tid 11473] [client 103.171.189.88:57018] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-k2bX5DA3XO6e_qRnrgAAASc"]
[Sat Aug 29 05:12:19.584424 2026] [security2:error] [pid 11274:tid 11489] [client 158.23.184.117:34887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/wp-includes/blocks/search/index.php"] [unique_id "apK-k2bX5DA3XO6e_qRnsgAAATY"]
[Sat Aug 29 05:12:19.588464 2026] [security2:error] [pid 11274:tid 11558] [client 20.104.18.15:29654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/gigi.php"] [unique_id "apK-k2bX5DA3XO6e_qRntAAAAXo"]
[Sat Aug 29 05:12:19.609903 2026] [security2:error] [pid 11274:tid 11472] [client 158.23.184.117:61516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "apK-k2bX5DA3XO6e_qRntQAAASY"]
[Sat Aug 29 05:12:19.633393 2026] [security2:error] [pid 11274:tid 11452] [client 57.131.147.192:58009] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "vatecreative.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "apK-k2bX5DA3XO6e_qRntgAAARI"]
[Sat Aug 29 05:12:19.639255 2026] [security2:error] [pid 11274:tid 11477] [client 158.23.147.79:24493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/about.php"] [unique_id "apK-k2bX5DA3XO6e_qRntwAAASs"]
[Sat Aug 29 05:12:19.640784 2026] [security2:error] [pid 11274:tid 11559] [client 74.248.24.12:25111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/filemanager.php"] [unique_id "apK-k2bX5DA3XO6e_qRnuAAAAXs"]
[Sat Aug 29 05:12:19.654479 2026] [security2:error] [pid 11274:tid 11524] [client 4.205.62.107:64940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/goods.php"] [unique_id "apK-k2bX5DA3XO6e_qRnuQAAAVk"]
[Sat Aug 29 05:12:19.680043 2026] [security2:error] [pid 1321:tid 1457] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-content/disagrsxr.php"] [unique_id "apK-k2jCPtor9NZ-byQLRQAGRmI"]
[Sat Aug 29 05:12:19.681681 2026] [security2:error] [pid 1321:tid 1508] [client 20.48.251.3:38204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/fraro.php"] [unique_id "apK-k2jCPtor9NZ-byQLRgAABlA"]
[Sat Aug 29 05:12:19.685464 2026] [security2:error] [pid 11274:tid 11508] [client 20.63.219.114:1876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/contentloader1.php"] [unique_id "apK-k2bX5DA3XO6e_qRnuwAAAUk"]
[Sat Aug 29 05:12:19.699779 2026] [security2:error] [pid 1321:tid 1516] [client 68.155.159.216:62842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/cong.php"] [unique_id "apK-k2jCPtor9NZ-byQLSgAABlg"]
[Sat Aug 29 05:12:19.702137 2026] [security2:error] [pid 1321:tid 1499] [client 180.190.5.40:33342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.5.190.180.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK-k2jCPtor9NZ-byQLTAAABkc"]
[Sat Aug 29 05:12:19.702249 2026] [security2:error] [pid 1321:tid 1499] [client 180.190.5.40:33342] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK-k2jCPtor9NZ-byQLTAAABkc"]
[Sat Aug 29 05:12:19.722772 2026] [security2:error] [pid 1321:tid 1512] [client 20.104.18.15:29093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/info.php/new.php"] [unique_id "apK-k2jCPtor9NZ-byQLTgAABlQ"]
[Sat Aug 29 05:12:19.730734 2026] [security2:error] [pid 1321:tid 1498] [client 158.23.184.117:35328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/wp-signup.php"] [unique_id "apK-k2jCPtor9NZ-byQLTwAABkY"]
[Sat Aug 29 05:12:19.754527 2026] [security2:error] [pid 11274:tid 11461] [client 158.23.184.117:61548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/wp-content/plugins/alfa-rex.php"] [unique_id "apK-k2bX5DA3XO6e_qRnvwAAARs"]
[Sat Aug 29 05:12:19.759460 2026] [security2:error] [pid 11274:tid 11529] [client 68.155.159.216:23376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/packed.php"] [unique_id "apK-k2bX5DA3XO6e_qRnwAAAAV4"]
[Sat Aug 29 05:12:19.770506 2026] [security2:error] [pid 1321:tid 1544] [client 158.158.54.35:1509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/admin/function.php"] [unique_id "apK-k2jCPtor9NZ-byQLUQAABnQ"]
[Sat Aug 29 05:12:19.809968 2026] [security2:error] [pid 1321:tid 1496] [client 20.48.251.3:38156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/lm15.php"] [unique_id "apK-k2jCPtor9NZ-byQLVAAABkQ"]
[Sat Aug 29 05:12:19.823697 2026] [security2:error] [pid 1321:tid 1566] [client 158.23.147.79:62738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/packed.php"] [unique_id "apK-k2jCPtor9NZ-byQLVQAABok"]
[Sat Aug 29 05:12:19.827769 2026] [security2:error] [pid 1321:tid 1515] [client 20.240.128.207:8129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/about/function.php"] [unique_id "apK-k2jCPtor9NZ-byQLVgAABlc"]
[Sat Aug 29 05:12:19.839472 2026] [security2:error] [pid 11274:tid 11514] [client 40.83.93.50:9063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/wp-2019.php"] [unique_id "apK-k2bX5DA3XO6e_qRnwgAAAU8"]
[Sat Aug 29 05:12:19.849619 2026] [security2:error] [pid 11274:tid 11480] [client 20.196.209.81:1346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/post.php"] [unique_id "apK-k2bX5DA3XO6e_qRnwwAAAS0"]
[Sat Aug 29 05:12:19.853303 2026] [security2:error] [pid 1321:tid 1580] [client 68.155.159.216:7136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK-k2jCPtor9NZ-byQLVwAABpc"]
[Sat Aug 29 05:12:19.870174 2026] [security2:error] [pid 1321:tid 1523] [client 20.52.41.200:2666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/assets/images/doc.php"] [unique_id "apK-k2jCPtor9NZ-byQLWgAABl8"]
[Sat Aug 29 05:12:19.875482 2026] [security2:error] [pid 1321:tid 1600] [client 158.23.184.117:34883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/404.php"] [unique_id "apK-k2jCPtor9NZ-byQLXAAABqs"]
[Sat Aug 29 05:12:19.912548 2026] [security2:error] [pid 1321:tid 1519] [client 20.104.18.15:29090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/dk.php"] [unique_id "apK-k2jCPtor9NZ-byQLXgAABls"]
[Sat Aug 29 05:12:19.933033 2026] [security2:error] [pid 11274:tid 11459] [client 197.219.150.206:62422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK-k2bX5DA3XO6e_qRnxwAAARk"]
[Sat Aug 29 05:12:19.933209 2026] [security2:error] [pid 11274:tid 11459] [client 197.219.150.206:62422] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK-k2bX5DA3XO6e_qRnxwAAARk"]
[Sat Aug 29 05:12:19.934646 2026] [security2:error] [pid 1321:tid 1475] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-content/f35.php"] [unique_id "apK-k2jCPtor9NZ-byQLXwAGunQ"]
[Sat Aug 29 05:12:19.936259 2026] [security2:error] [pid 11274:tid 11459] [client 4.205.62.107:60516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/plss3.php"] [unique_id "apK-k2bX5DA3XO6e_qRnyAAAARk"]
[Sat Aug 29 05:12:19.943065 2026] [security2:error] [pid 1321:tid 1574] [client 20.104.18.15:29656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/w.php"] [unique_id "apK-k2jCPtor9NZ-byQLYwAABpE"]
[Sat Aug 29 05:12:19.948900 2026] [security2:error] [pid 1321:tid 1491] [client 158.23.147.79:14160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/images/index.php"] [unique_id "apK-k2jCPtor9NZ-byQLZQAABj8"]
[Sat Aug 29 05:12:19.956922 2026] [security2:error] [pid 1321:tid 1597] [client 158.23.184.117:50327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/test.php"] [unique_id "apK-k2jCPtor9NZ-byQLZgAABqg"]
[Sat Aug 29 05:12:19.975289 2026] [security2:error] [pid 1321:tid 1517] [client 158.23.147.79:49808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/atomlib.php"] [unique_id "apK-k2jCPtor9NZ-byQLZwAABlk"]
[Sat Aug 29 05:12:19.985349 2026] [security2:error] [pid 11274:tid 11497] [client 20.104.49.130:48808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/about.php"] [unique_id "apK-k2bX5DA3XO6e_qRnyQAAAT4"]
[Sat Aug 29 05:12:20.024642 2026] [security2:error] [pid 11274:tid 11552] [client 158.23.184.117:34845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/as.php"] [unique_id "apK-lGbX5DA3XO6e_qRnygAAAXQ"]
[Sat Aug 29 05:12:20.044662 2026] [security2:error] [pid 1321:tid 1550] [client 4.205.62.107:63244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/app_dev.php"] [unique_id "apK-lGjCPtor9NZ-byQLbAAABnk"]
[Sat Aug 29 05:12:20.045185 2026] [security2:error] [pid 1321:tid 1507] [client 93.123.109.228:36762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/back-end/.env"] [unique_id "apK-lGjCPtor9NZ-byQLawAABk8"]
[Sat Aug 29 05:12:20.048062 2026] [security2:error] [pid 11274:tid 11507] [client 93.123.109.228:36740] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/back-api/.env"] [unique_id "apK-lGbX5DA3XO6e_qRnywAAAUg"]
[Sat Aug 29 05:12:20.048929 2026] [security2:error] [pid 11274:tid 11496] [client 93.123.109.228:36730] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/back/.env"] [unique_id "apK-lGbX5DA3XO6e_qRnzQAAAT0"]
[Sat Aug 29 05:12:20.049242 2026] [security2:error] [pid 11274:tid 11512] [client 4.205.62.107:32568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/upload.form.php"] [unique_id "apK-lGbX5DA3XO6e_qRnzgAAAU0"]
[Sat Aug 29 05:12:20.050633 2026] [security2:error] [pid 1321:tid 1544] [client 93.123.109.228:36832] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/backend-api/.env"] [unique_id "apK-lGjCPtor9NZ-byQLbQAABnQ"]
[Sat Aug 29 05:12:20.064193 2026] [security2:error] [pid 11274:tid 11520] [client 34.169.171.101:45630] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.forensicengineernj.com"] [uri "/@fs/var/www/.env"] [unique_id "apK-lGbX5DA3XO6e_qRn0gAAAVU"]
[Sat Aug 29 05:12:20.064971 2026] [security2:error] [pid 11274:tid 11536] [client 20.104.18.15:29180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/ta.php"] [unique_id "apK-lGbX5DA3XO6e_qRn0wAAAWU"]
[Sat Aug 29 05:12:20.065889 2026] [security2:error] [pid 1321:tid 1508] [client 34.169.171.101:45594] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.forensicengineernj.com"] [uri "/@fs/home/ubuntu/.env"] [unique_id "apK-lGjCPtor9NZ-byQLcAAABlA"]
[Sat Aug 29 05:12:20.066999 2026] [security2:error] [pid 1321:tid 1583] [client 34.169.171.101:45646] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.forensicengineernj.com"] [uri "/@fs/var/www/html/.env"] [unique_id "apK-lGjCPtor9NZ-byQLcQAABpo"]
[Sat Aug 29 05:12:20.067086 2026] [security2:error] [pid 1321:tid 1583] [client 34.169.171.101:45646] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.forensicengineernj.com"] [uri "/@fs/var/www/html/.env"] [unique_id "apK-lGjCPtor9NZ-byQLcQAABpo"]
[Sat Aug 29 05:12:20.070162 2026] [security2:error] [pid 11274:tid 11500] [client 34.169.171.101:45658] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.forensicengineernj.com"] [uri "/@fs/usr/src/app/.env"] [unique_id "apK-lGbX5DA3XO6e_qRn1AAAAUE"]
[Sat Aug 29 05:12:20.081089 2026] [security2:error] [pid 1321:tid 1584] [client 20.197.61.180:1932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/aksinet.php"] [unique_id "apK-lGjCPtor9NZ-byQLcgAABps"]
[Sat Aug 29 05:12:20.081270 2026] [security2:error] [pid 11274:tid 11490] [client 20.104.18.15:29120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/x.php"] [unique_id "apK-lGbX5DA3XO6e_qRn1gAAATc"]
[Sat Aug 29 05:12:20.084228 2026] [security2:error] [pid 11274:tid 11540] [client 158.23.147.79:43327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/lock.php"] [unique_id "apK-lGbX5DA3XO6e_qRn1wAAAWk"]
[Sat Aug 29 05:12:20.088956 2026] [security2:error] [pid 11274:tid 11398] [remote 162.213.251.49:34890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.251.213.162.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mihpmovewell.com"] [uri "/wp-login.php"] [unique_id "apK-lGbX5DA3XO6e_qRn1QABIFQ"]
[Sat Aug 29 05:12:20.091621 2026] [security2:error] [pid 11274:tid 11560] [client 93.123.109.228:36816] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK-lGbX5DA3XO6e_qRn2AAAAXw"]
[Sat Aug 29 05:12:20.101860 2026] [security2:error] [pid 11274:tid 11483] [client 158.23.184.117:61558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/wp-includes/mani.php"] [unique_id "apK-lGbX5DA3XO6e_qRn3AAAATA"]
[Sat Aug 29 05:12:20.102265 2026] [security2:error] [pid 1321:tid 1527] [client 34.169.171.101:45646] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "www.forensicengineernj.com"] [uri "/@fs/app/.serverless/serverless-state.json"] [unique_id "apK-lGjCPtor9NZ-byQLdwAABmM"]
[Sat Aug 29 05:12:20.156017 2026] [security2:error] [pid 1321:tid 1504] [client 74.248.24.12:28590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/wp-content/themes/admin.php"] [unique_id "apK-lGjCPtor9NZ-byQLewAABkw"]
[Sat Aug 29 05:12:20.158840 2026] [security2:error] [pid 11274:tid 11508] [client 68.155.159.216:21464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK-lGbX5DA3XO6e_qRn5gAAAUk"]
[Sat Aug 29 05:12:20.169740 2026] [security2:error] [pid 1321:tid 1542] [client 158.23.184.117:34861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/php.php"] [unique_id "apK-lGjCPtor9NZ-byQLfQAABnI"]
[Sat Aug 29 05:12:20.180058 2026] [security2:error] [pid 1321:tid 1387] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-content/index.php"] [unique_id "apK-lGjCPtor9NZ-byQLgAAGdh0"]
[Sat Aug 29 05:12:20.181401 2026] [security2:error] [pid 1321:tid 1562] [client 4.205.62.107:6281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/linusadmin-phpinfo.php"] [unique_id "apK-lGjCPtor9NZ-byQLgQAABoU"]
[Sat Aug 29 05:12:20.197462 2026] [security2:error] [pid 1321:tid 1599] [client 20.48.251.3:38659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/nzv.php"] [unique_id "apK-lGjCPtor9NZ-byQLhQAABqo"]
[Sat Aug 29 05:12:20.214468 2026] [security2:error] [pid 11274:tid 11570] [client 158.158.54.35:20678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/admin/index.php"] [unique_id "apK-lGbX5DA3XO6e_qRn6gAAAYY"]
[Sat Aug 29 05:12:20.226071 2026] [security2:error] [pid 1321:tid 1565] [client 20.104.18.15:29058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/ssla.php"] [unique_id "apK-lGjCPtor9NZ-byQLhwAABog"]
[Sat Aug 29 05:12:20.246865 2026] [security2:error] [pid 1321:tid 1591] [client 20.104.18.15:29083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/bo.php"] [unique_id "apK-lGjCPtor9NZ-byQLiAAABqI"]
[Sat Aug 29 05:12:20.248588 2026] [security2:error] [pid 11274:tid 11561] [client 158.23.184.117:4746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/wp-includes/Test.php"] [unique_id "apK-lGbX5DA3XO6e_qRn7AAAAX0"]
[Sat Aug 29 05:12:20.250461 2026] [security2:error] [pid 1321:tid 1601] [client 20.196.209.81:20870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/flower.php"] [unique_id "apK-lGjCPtor9NZ-byQLiQAABqw"]
[Sat Aug 29 05:12:20.251987 2026] [security2:error] [pid 1321:tid 1497] [client 20.63.219.114:14005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/al.php"] [unique_id "apK-lGjCPtor9NZ-byQLigAABkU"]
[Sat Aug 29 05:12:20.306649 2026] [proxy_http:error] [pid 1017536:tid 1017688] (70007)The timeout specified has expired: [client 127.0.0.1:48340] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:12:20.306683 2026] [proxy:error] [pid 1017536:tid 1017688] [client 127.0.0.1:48340] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:12:20.313646 2026] [security2:error] [pid 1321:tid 1519] [client 158.23.184.117:34832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/term.php"] [unique_id "apK-lGjCPtor9NZ-byQLjAAABls"]
[Sat Aug 29 05:12:20.320015 2026] [security2:error] [pid 1321:tid 1574] [client 158.23.147.79:29603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/x.php"] [unique_id "apK-lGjCPtor9NZ-byQLjQAABpE"]
[Sat Aug 29 05:12:20.322661 2026] [security2:error] [pid 11274:tid 11522] [client 40.83.93.50:9044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/menu.php"] [unique_id "apK-lGbX5DA3XO6e_qRn7gAAAVc"]
[Sat Aug 29 05:12:20.322657 2026] [proxy_http:error] [pid 1017536:tid 1017555] (70007)The timeout specified has expired: [remote 57.141.14.73:47554] AH01102: error reading status line from remote server 127.0.0.1:8443
[Sat Aug 29 05:12:20.322689 2026] [proxy:error] [pid 1017536:tid 1017555] [remote 57.141.14.73:47554] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:12:20.328063 2026] [security2:error] [pid 1321:tid 1581] [client 20.48.251.3:38690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/pouhg.php"] [unique_id "apK-lGjCPtor9NZ-byQLkQAABpg"]
[Sat Aug 29 05:12:20.328080 2026] [security2:error] [pid 1321:tid 1595] [client 20.52.41.200:2207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/bgymj.php"] [unique_id "apK-lGjCPtor9NZ-byQLkAAABqY"]
[Sat Aug 29 05:12:20.329394 2026] [proxy_http:error] [pid 1034096:tid 1034356] (70007)The timeout specified has expired: [client 127.0.0.1:48546] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:12:20.329421 2026] [proxy:error] [pid 1034096:tid 1034356] [client 127.0.0.1:48546] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:12:20.329646 2026] [security2:error] [pid 1321:tid 1604] [client 57.131.147.192:65528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 192.147.131.57.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "vatecreative.com"] [uri "/xmlrpc.php"] [unique_id "apK-lGjCPtor9NZ-byQLjwAABq8"]
[Sat Aug 29 05:12:20.338478 2026] [security2:error] [pid 1321:tid 1517] [client 68.155.159.216:1911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/goat1.php"] [unique_id "apK-lGjCPtor9NZ-byQLkgAABlk"]
[Sat Aug 29 05:12:20.357639 2026] [security2:error] [pid 1321:tid 1606] [client 20.104.18.15:29070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "apK-lGjCPtor9NZ-byQLlgAABrE"]
[Sat Aug 29 05:12:20.369138 2026] [security2:error] [pid 1321:tid 1492] [client 93.123.109.228:36832] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/backup/.env"] [unique_id "apK-lGjCPtor9NZ-byQLlwAABkA"]
[Sat Aug 29 05:12:20.371975 2026] [security2:error] [pid 11274:tid 11464] [client 93.123.109.228:36730] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/be/.env"] [unique_id "apK-lGbX5DA3XO6e_qRn8QAAAR4"]
[Sat Aug 29 05:12:20.383270 2026] [security2:error] [pid 1321:tid 1489] [client 4.205.62.107:63340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/oiko6u.php"] [unique_id "apK-lGjCPtor9NZ-byQLmAAABj0"]
[Sat Aug 29 05:12:20.393075 2026] [security2:error] [pid 1321:tid 1529] [client 158.23.184.117:61519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/wp-includes/pomo.php"] [unique_id "apK-lGjCPtor9NZ-byQLmQAABmU"]
[Sat Aug 29 05:12:20.411978 2026] [security2:error] [pid 1321:tid 1498] [client 68.155.159.216:55134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.angelesforestranch.com"] [uri "/dropdown.php"] [unique_id "apK-lGjCPtor9NZ-byQLmwAABkY"]
[Sat Aug 29 05:12:20.412059 2026] [security2:error] [pid 11274:tid 11488] [client 93.123.109.228:36816] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/beta/.env"] [unique_id "apK-lGbX5DA3XO6e_qRn8gAAATU"]
[Sat Aug 29 05:12:20.424862 2026] [security2:error] [pid 1321:tid 1381] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-content/install.php"] [unique_id "apK-lGjCPtor9NZ-byQLnQAGUBc"]
[Sat Aug 29 05:12:20.439806 2026] [security2:error] [pid 1321:tid 1583] [client 68.155.159.216:56722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/wp-content/cong.php"] [unique_id "apK-lGjCPtor9NZ-byQLoAAABpo"]
[Sat Aug 29 05:12:20.453556 2026] [security2:error] [pid 1321:tid 1522] [client 20.104.18.15:29065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/44.php"] [unique_id "apK-lGjCPtor9NZ-byQLoQAABl4"]
[Sat Aug 29 05:12:20.455333 2026] [security2:error] [pid 1321:tid 1548] [client 20.48.251.3:38686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/environment.php"] [unique_id "apK-lGjCPtor9NZ-byQLogAABnc"]
[Sat Aug 29 05:12:20.459958 2026] [security2:error] [pid 1321:tid 1593] [client 158.23.184.117:34865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/Ov-Simple1.php"] [unique_id "apK-lGjCPtor9NZ-byQLowAABqQ"]
[Sat Aug 29 05:12:20.493055 2026] [security2:error] [pid 11274:tid 11475] [client 20.104.18.15:29661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/wp-aothait.php"] [unique_id "apK-lGbX5DA3XO6e_qRn9gAAASk"]
[Sat Aug 29 05:12:20.497015 2026] [security2:error] [pid 11274:tid 11476] [client 106.213.87.167:29505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.87.213.106.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK-lGbX5DA3XO6e_qRn9QAAASo"]
[Sat Aug 29 05:12:20.497181 2026] [security2:error] [pid 11274:tid 11476] [client 106.213.87.167:29505] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK-lGbX5DA3XO6e_qRn9QAAASo"]
[Sat Aug 29 05:12:20.522732 2026] [security2:error] [pid 11274:tid 11534] [client 20.240.128.207:6031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-includes/admin.php"] [unique_id "apK-lGbX5DA3XO6e_qRn-wAAAWM"]
[Sat Aug 29 05:12:20.528396 2026] [security2:error] [pid 11274:tid 11546] [client 158.23.147.79:7084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/asd.php"] [unique_id "apK-lGbX5DA3XO6e_qRn_AAAAW4"]
[Sat Aug 29 05:12:20.530999 2026] [security2:error] [pid 11274:tid 11459] [client 68.155.159.216:43907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/radio.php"] [unique_id "apK-lGbX5DA3XO6e_qRn_QAAARk"]
[Sat Aug 29 05:12:20.557275 2026] [security2:error] [pid 1321:tid 1510] [client 158.158.54.35:4365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/tool.php"] [unique_id "apK-lGjCPtor9NZ-byQLpwAABlI"]
[Sat Aug 29 05:12:20.581943 2026] [security2:error] [pid 11274:tid 11555] [client 20.48.251.3:38203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/koiy.php"] [unique_id "apK-lGbX5DA3XO6e_qRn_wAAAXc"]
[Sat Aug 29 05:12:20.605401 2026] [security2:error] [pid 11274:tid 11517] [client 158.23.184.117:34850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/atomlib.php"] [unique_id "apK-lGbX5DA3XO6e_qRoAAAAAVI"]
[Sat Aug 29 05:12:20.609036 2026] [security2:error] [pid 1321:tid 1600] [client 20.104.18.15:29095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/h2.php"] [unique_id "apK-lGjCPtor9NZ-byQLqgAABqs"]
[Sat Aug 29 05:12:20.630381 2026] [security2:error] [pid 1321:tid 1496] [client 20.52.41.200:5139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/222.php"] [unique_id "apK-lGjCPtor9NZ-byQLrAAABkQ"]
[Sat Aug 29 05:12:20.646455 2026] [security2:error] [pid 11274:tid 11551] [client 20.104.18.15:29678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/wp-includes/index.php"] [unique_id "apK-lGbX5DA3XO6e_qRoAwAAAXM"]
[Sat Aug 29 05:12:20.650459 2026] [security2:error] [pid 1321:tid 1562] [client 20.196.209.81:1371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/meta.php"] [unique_id "apK-lGjCPtor9NZ-byQLrQAABoU"]
[Sat Aug 29 05:12:20.662909 2026] [security2:error] [pid 11274:tid 11514] [client 158.158.54.35:37148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/storage/rip.php"] [unique_id "apK-lGbX5DA3XO6e_qRoBAAAAU8"]
[Sat Aug 29 05:12:20.670315 2026] [security2:error] [pid 1321:tid 1566] [client 74.248.24.12:39294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/wp-admin/css/admin.php"] [unique_id "apK-lGjCPtor9NZ-byQLrgAABok"]
[Sat Aug 29 05:12:20.671047 2026] [security2:error] [pid 1321:tid 1591] [client 158.23.184.117:61505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/wp-admin/link-add.php"] [unique_id "apK-lGjCPtor9NZ-byQLsAAABqI"]
[Sat Aug 29 05:12:20.673884 2026] [security2:error] [pid 1321:tid 1601] [client 93.123.109.228:36796] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/client/.env"] [unique_id "apK-lGjCPtor9NZ-byQLsQAABqw"]
[Sat Aug 29 05:12:20.674989 2026] [security2:error] [pid 11274:tid 11500] [client 20.104.104.62:46268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/ahy66.php"] [unique_id "apK-lGbX5DA3XO6e_qRoBQAAAUE"]
[Sat Aug 29 05:12:20.690111 2026] [security2:error] [pid 11274:tid 11490] [client 20.151.200.44:55640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/sf9.php"] [unique_id "apK-lGbX5DA3XO6e_qRoBwAAATc"]
[Sat Aug 29 05:12:20.698132 2026] [security2:error] [pid 1321:tid 1609] [client 20.63.219.114:1878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/global.php"] [unique_id "apK-lGjCPtor9NZ-byQLtAAABrQ"]
[Sat Aug 29 05:12:20.698226 2026] [security2:error] [pid 11274:tid 11466] [client 93.123.109.228:36730] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/cms/.env"] [unique_id "apK-lGbX5DA3XO6e_qRoCAAAASA"]
[Sat Aug 29 05:12:20.701248 2026] [security2:error] [pid 11274:tid 11560] [client 68.155.159.216:38565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-admin.php"] [unique_id "apK-lGbX5DA3XO6e_qRoCQAAAXw"]
[Sat Aug 29 05:12:20.702964 2026] [security2:error] [pid 11274:tid 11511] [client 20.220.204.93:9550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/ws68.php"] [unique_id "apK-lGbX5DA3XO6e_qRoCgAAAUw"]
[Sat Aug 29 05:12:20.706509 2026] [security2:error] [pid 11274:tid 11499] [client 4.205.62.107:6118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/i.php"] [unique_id "apK-lGbX5DA3XO6e_qRoCwAAAUA"]
[Sat Aug 29 05:12:20.710757 2026] [security2:error] [pid 11274:tid 11473] [client 20.48.251.3:38195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/gk.php"] [unique_id "apK-lGbX5DA3XO6e_qRoDAAAASc"]
[Sat Aug 29 05:12:20.752546 2026] [security2:error] [pid 11274:tid 11470] [client 158.23.184.117:34918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/edit.php"] [unique_id "apK-lGbX5DA3XO6e_qRoDgAAASQ"]
[Sat Aug 29 05:12:20.769728 2026] [security2:error] [pid 11274:tid 11535] [client 20.104.18.15:29687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/wp-content/mod/adminfuns.php"] [unique_id "apK-lGbX5DA3XO6e_qRoDwAAAWQ"]
[Sat Aug 29 05:12:20.782504 2026] [security2:error] [pid 1321:tid 1612] [client 20.52.41.200:2796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK-lGjCPtor9NZ-byQLtwAABrc"]
[Sat Aug 29 05:12:20.794251 2026] [security2:error] [pid 11274:tid 11518] [client 4.205.62.107:64990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/loxi-o.php"] [unique_id "apK-lGbX5DA3XO6e_qRoEAAAAVM"]
[Sat Aug 29 05:12:20.796850 2026] [security2:error] [pid 11274:tid 11538] [client 20.104.18.15:29152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/file31.php"] [unique_id "apK-lGbX5DA3XO6e_qRoEQAAAWc"]
[Sat Aug 29 05:12:20.800767 2026] [security2:error] [pid 11274:tid 11501] [client 40.83.93.50:14742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/alfa.php"] [unique_id "apK-lGbX5DA3XO6e_qRoEwAAAUI"]
[Sat Aug 29 05:12:20.817187 2026] [security2:error] [pid 11274:tid 11565] [client 158.23.184.117:4741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/wp-includes/Text.php"] [unique_id "apK-lGbX5DA3XO6e_qRoFQAAAYE"]
[Sat Aug 29 05:12:20.820155 2026] [security2:error] [pid 1321:tid 1595] [client 68.155.159.216:62800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-includes/js/index.php"] [unique_id "apK-lGjCPtor9NZ-byQLuQAABqY"]
[Sat Aug 29 05:12:20.840573 2026] [security2:error] [pid 11274:tid 11570] [client 20.48.251.3:38187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/services.php"] [unique_id "apK-lGbX5DA3XO6e_qRoFgAAAYY"]
[Sat Aug 29 05:12:20.849504 2026] [security2:error] [pid 11274:tid 11563] [client 93.123.109.228:36740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/config.php"] [unique_id "apK-lGbX5DA3XO6e_qRoFwAAAX8"]
[Sat Aug 29 05:12:20.866573 2026] [security2:error] [pid 1321:tid 1517] [client 68.155.159.216:23405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-content/packed.php"] [unique_id "apK-lGjCPtor9NZ-byQLuwAABlk"]
[Sat Aug 29 05:12:20.893648 2026] [security2:error] [pid 11274:tid 11554] [client 20.197.61.180:1103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/alfa-rex1.php"] [unique_id "apK-lGbX5DA3XO6e_qRoGwAAAXY"]
[Sat Aug 29 05:12:20.898891 2026] [security2:error] [pid 1321:tid 1491] [client 158.23.184.117:34837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/7.php"] [unique_id "apK-lGjCPtor9NZ-byQLvgAABj8"]
[Sat Aug 29 05:12:20.912806 2026] [security2:error] [pid 11274:tid 11530] [client 20.104.18.15:29663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/sao.php"] [unique_id "apK-lGbX5DA3XO6e_qRoHQAAAV8"]
[Sat Aug 29 05:12:20.921786 2026] [security2:error] [pid 1321:tid 1372] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK-lGjCPtor9NZ-byQLwAAGQA4"]
[Sat Aug 29 05:12:20.931921 2026] [security2:error] [pid 1321:tid 1567] [client 158.23.147.79:62747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-content/packed.php"] [unique_id "apK-lGjCPtor9NZ-byQLwQAABoo"]
[Sat Aug 29 05:12:20.934309 2026] [security2:error] [pid 1321:tid 1516] [client 20.104.18.15:29081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/dk.php"] [unique_id "apK-lGjCPtor9NZ-byQLwgAABlg"]
[Sat Aug 29 05:12:20.960119 2026] [security2:error] [pid 11274:tid 11468] [client 68.155.159.216:64050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-includes/index.php"] [unique_id "apK-lGbX5DA3XO6e_qRoHgAAASI"]
[Sat Aug 29 05:12:20.964868 2026] [security2:error] [pid 11274:tid 11464] [client 158.23.184.117:53601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/wp-trackback.php"] [unique_id "apK-lGbX5DA3XO6e_qRoHwAAAR4"]
[Sat Aug 29 05:12:20.968946 2026] [security2:error] [pid 11274:tid 11549] [client 20.48.251.3:38678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/log.php"] [unique_id "apK-lGbX5DA3XO6e_qRoIAAAAXE"]
[Sat Aug 29 05:12:20.996222 2026] [security2:error] [pid 11274:tid 11339] [remote 216.73.217.8:15439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 8.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo-store.sortthru.com"] [uri "/signs-and-displays/"] [unique_id "apK-lGbX5DA3XO6e_qRoIgABLRo"]
[Sat Aug 29 05:12:21.030185 2026] [security2:error] [pid 11274:tid 11479] [client 158.158.54.35:18523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/k.php"] [unique_id "apK-lWbX5DA3XO6e_qRoJQAAASw"]
[Sat Aug 29 05:12:21.034685 2026] [security2:error] [pid 1321:tid 1518] [client 43.172.196.130:51742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.196.172.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewforum.php"] [unique_id "apK-lWjCPtor9NZ-byQLxgAABlo"]
[Sat Aug 29 05:12:21.044976 2026] [security2:error] [pid 11274:tid 11459] [client 158.23.184.117:34899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/black.php"] [unique_id "apK-lWbX5DA3XO6e_qRoJwAAARk"]
[Sat Aug 29 05:12:21.076101 2026] [security2:error] [pid 11274:tid 11488] [client 20.52.41.200:4765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/mini.php"] [unique_id "apK-lWbX5DA3XO6e_qRoKwAAATU"]
[Sat Aug 29 05:12:21.079002 2026] [security2:error] [pid 11274:tid 11512] [client 4.205.62.107:61734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/aws.php"] [unique_id "apK-lWbX5DA3XO6e_qRoLAAAAU0"]
[Sat Aug 29 05:12:21.082060 2026] [security2:error] [pid 1321:tid 1522] [client 20.104.18.15:29682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/ta.php"] [unique_id "apK-lWjCPtor9NZ-byQLyQAABl4"]
[Sat Aug 29 05:12:21.086892 2026] [security2:error] [pid 1321:tid 1573] [client 93.123.109.228:36836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/config/aws.php"] [unique_id "apK-lWjCPtor9NZ-byQLygAABpA"]
[Sat Aug 29 05:12:21.098563 2026] [security2:error] [pid 1321:tid 1555] [client 20.48.251.3:38151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/btx25.php"] [unique_id "apK-lWjCPtor9NZ-byQLywAABn4"]
[Sat Aug 29 05:12:21.108723 2026] [security2:error] [pid 1321:tid 1527] [client 158.23.184.117:61545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/wp-admin/maint.php"] [unique_id "apK-lWjCPtor9NZ-byQLzAAABmM"]
[Sat Aug 29 05:12:21.111386 2026] [security2:error] [pid 1321:tid 1498] [client 158.158.54.35:15096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/zoom1.php"] [unique_id "apK-lWjCPtor9NZ-byQLzQAABkY"]
[Sat Aug 29 05:12:21.127670 2026] [security2:error] [pid 11274:tid 11534] [client 20.196.209.81:1404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/randkeyword.php"] [unique_id "apK-lWbX5DA3XO6e_qRoLwAAAWM"]
[Sat Aug 29 05:12:21.138401 2026] [security2:error] [pid 11274:tid 11492] [client 43.173.173.104:52292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 104.173.173.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewtopic.php"] [unique_id "apK-lWbX5DA3XO6e_qRoLQAAATk"]
[Sat Aug 29 05:12:21.158106 2026] [security2:error] [pid 1321:tid 1561] [client 20.104.18.15:29057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/dapa.php"] [unique_id "apK-lWjCPtor9NZ-byQL0AAABoQ"]
[Sat Aug 29 05:12:21.159304 2026] [security2:error] [pid 1321:tid 1599] [client 20.104.49.130:53710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/ws85.php"] [unique_id "apK-lWjCPtor9NZ-byQL0QAABqo"]
[Sat Aug 29 05:12:21.161389 2026] [security2:error] [pid 1321:tid 1509] [client 20.48.160.90:50374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/Hd.php"] [unique_id "apK-lWjCPtor9NZ-byQL0gAABlE"]
[Sat Aug 29 05:12:21.168495 2026] [security2:error] [pid 1321:tid 1466] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-content/languages/chosen.php"] [unique_id "apK-lWjCPtor9NZ-byQL0wAGc2s"]
[Sat Aug 29 05:12:21.177009 2026] [security2:error] [pid 11274:tid 11545] [client 20.63.219.114:1906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/update.php"] [unique_id "apK-lWbX5DA3XO6e_qRoMQAAAW0"]
[Sat Aug 29 05:12:21.179651 2026] [security2:error] [pid 1321:tid 1580] [client 158.23.147.79:50114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/lv.php"] [unique_id "apK-lWjCPtor9NZ-byQL1AAABpc"]
[Sat Aug 29 05:12:21.190922 2026] [security2:error] [pid 11274:tid 11483] [client 4.205.62.107:27721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/aws_auth.php"] [unique_id "apK-lWbX5DA3XO6e_qRoMgAAATA"]
[Sat Aug 29 05:12:21.192253 2026] [security2:error] [pid 1321:tid 1593] [client 158.23.184.117:34867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/wp-blog-header.php"] [unique_id "apK-lWjCPtor9NZ-byQL1QAABqQ"]
[Sat Aug 29 05:12:21.198273 2026] [security2:error] [pid 11274:tid 11519] [client 74.248.24.12:28544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/adminfuns.php"] [unique_id "apK-lWbX5DA3XO6e_qRoNAAAAVQ"]
[Sat Aug 29 05:12:21.205785 2026] [security2:error] [pid 11274:tid 11540] [client 158.23.147.79:39160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/index/function.php"] [unique_id "apK-lWbX5DA3XO6e_qRoNQAAAWk"]
[Sat Aug 29 05:12:21.211750 2026] [security2:error] [pid 1321:tid 1594] [client 20.48.160.90:31442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/ioxi.php"] [unique_id "apK-lWjCPtor9NZ-byQL1wAABqU"]
[Sat Aug 29 05:12:21.212395 2026] [security2:error] [pid 11274:tid 11505] [client 20.104.18.15:29169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/bo.php"] [unique_id "apK-lWbX5DA3XO6e_qRoNgAAAUY"]
[Sat Aug 29 05:12:21.217536 2026] [security2:error] [pid 1321:tid 1600] [client 93.123.109.228:36832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/config/config.inc.php"] [unique_id "apK-lWjCPtor9NZ-byQL2AAABqs"]
[Sat Aug 29 05:12:21.219959 2026] [security2:error] [pid 11274:tid 11541] [client 4.205.62.107:60958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/php-info.php"] [unique_id "apK-lWbX5DA3XO6e_qRoOAAAAWo"]
[Sat Aug 29 05:12:21.223514 2026] [security2:error] [pid 1321:tid 1499] [client 43.173.176.46:33202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.176.173.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewforum.php"] [unique_id "apK-lWjCPtor9NZ-byQL1gAABkc"]
[Sat Aug 29 05:12:21.225908 2026] [security2:error] [pid 11274:tid 11494] [client 20.240.128.207:4314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/lock360.php"] [unique_id "apK-lWbX5DA3XO6e_qRoOgAAATs"]
[Sat Aug 29 05:12:21.226677 2026] [security2:error] [pid 1321:tid 1591] [client 20.48.251.3:38183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/guk.php"] [unique_id "apK-lWjCPtor9NZ-byQL2QAABqI"]
[Sat Aug 29 05:12:21.231964 2026] [security2:error] [pid 1321:tid 1608] [client 93.123.109.228:36762] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/___proxy_subdomain_cpcontacts/config/.env"] [unique_id "apK-lWjCPtor9NZ-byQL2gAABrM"]
[Sat Aug 29 05:12:21.241082 2026] [security2:error] [pid 1321:tid 1532] [client 20.48.160.90:51791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/AxAo.php"] [unique_id "apK-lWjCPtor9NZ-byQL3AAABmg"]
[Sat Aug 29 05:12:21.243439 2026] [autoindex:error] [pid 1321:tid 1548] [client 20.52.41.200:2733] AH01276: Cannot serve directory /home3/jomoasso/public_html/slsug/images/: No matching DirectoryIndex (index.php,index.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:12:21.258118 2026] [security2:error] [pid 11274:tid 11511] [client 158.23.184.117:61554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/wp-includes/num.php"] [unique_id "apK-lWbX5DA3XO6e_qRoPAAAAUw"]
[Sat Aug 29 05:12:21.270828 2026] [security2:error] [pid 11274:tid 11476] [client 43.173.182.213:44690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 213.182.173.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewtopic.php"] [unique_id "apK-lWbX5DA3XO6e_qRoOwAAASo"]
[Sat Aug 29 05:12:21.274700 2026] [security2:error] [pid 11274:tid 11493] [client 20.48.250.41:24480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/f2.php"] [unique_id "apK-lWbX5DA3XO6e_qRoPQAAATo"]
[Sat Aug 29 05:12:21.292980 2026] [security2:error] [pid 1321:tid 1592] [client 68.155.159.216:56725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-admin.php"] [unique_id "apK-lWjCPtor9NZ-byQL3QAABqM"]
[Sat Aug 29 05:12:21.315879 2026] [security2:error] [pid 1321:tid 1612] [client 20.104.18.15:29074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/wp-content/l.php"] [unique_id "apK-lWjCPtor9NZ-byQL3wAABrc"]
[Sat Aug 29 05:12:21.318656 2026] [security2:error] [pid 11274:tid 11456] [client 4.205.62.107:6911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/app/Models/Hrm/Employee.php"] [unique_id "apK-lWbX5DA3XO6e_qRoPgAAARY"]
[Sat Aug 29 05:12:21.320931 2026] [security2:error] [pid 1321:tid 1574] [client 93.123.109.228:36796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/config/config.php"] [unique_id "apK-lWjCPtor9NZ-byQL4AAABpE"]
[Sat Aug 29 05:12:21.342305 2026] [security2:error] [pid 11274:tid 11504] [client 20.48.160.90:23759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/im.php"] [unique_id "apK-lWbX5DA3XO6e_qRoQAAAAUU"]
[Sat Aug 29 05:12:21.352773 2026] [security2:error] [pid 11274:tid 11471] [client 20.48.160.90:31365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/TNT.php"] [unique_id "apK-lWbX5DA3XO6e_qRoQgAAASU"]
[Sat Aug 29 05:12:21.353522 2026] [security2:error] [pid 11274:tid 11563] [client 20.48.251.3:38666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/7.php"] [unique_id "apK-lWbX5DA3XO6e_qRoQwAAAX8"]
[Sat Aug 29 05:12:21.357770 2026] [security2:error] [pid 11274:tid 11529] [client 20.104.18.15:29693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/44.php"] [unique_id "apK-lWbX5DA3XO6e_qRoRQAAAV4"]
[Sat Aug 29 05:12:21.380118 2026] [security2:error] [pid 1321:tid 1501] [client 20.48.160.90:51825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/class17.php"] [unique_id "apK-lWjCPtor9NZ-byQL5AAABkk"]
[Sat Aug 29 05:12:21.383003 2026] [security2:error] [pid 11274:tid 11472] [client 40.83.93.50:14779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/feed-rss2-queue.php"] [unique_id "apK-lWbX5DA3XO6e_qRoRwAAASY"]
[Sat Aug 29 05:12:21.393470 2026] [security2:error] [pid 1321:tid 1489] [client 20.52.41.200:2733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-load.php"] [unique_id "apK-lWjCPtor9NZ-byQL5gAABj0"]
[Sat Aug 29 05:12:21.400943 2026] [security2:error] [pid 1321:tid 1604] [client 158.23.184.117:61535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/identity.php"] [unique_id "apK-lWjCPtor9NZ-byQL6AAABq8"]
[Sat Aug 29 05:12:21.410284 2026] [security2:error] [pid 1321:tid 1536] [client 20.48.250.41:39928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/shlo.php"] [unique_id "apK-lWjCPtor9NZ-byQL6QAABmw"]
[Sat Aug 29 05:12:21.413749 2026] [security2:error] [pid 1321:tid 1429] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-content/languages/index.php"] [unique_id "apK-lWjCPtor9NZ-byQL6gAGVkc"]
[Sat Aug 29 05:12:21.420465 2026] [security2:error] [pid 1321:tid 1577] [client 158.23.147.79:29619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-content/x.php"] [unique_id "apK-lWjCPtor9NZ-byQL6wAABpQ"]
[Sat Aug 29 05:12:21.425909 2026] [security2:error] [pid 1321:tid 1550] [client 158.23.184.117:34829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/2.php"] [unique_id "apK-lWjCPtor9NZ-byQL7AAABnk"]
[Sat Aug 29 05:12:21.447614 2026] [security2:error] [pid 1321:tid 1518] [client 20.104.18.15:29665] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/wp-admin/w.php"] [unique_id "apK-lWjCPtor9NZ-byQL7QAABlo"]
[Sat Aug 29 05:12:21.464881 2026] [security2:error] [pid 11274:tid 11536] [client 213.202.253.4:61221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/wp-content/txets.php"] [unique_id "apK-lWbX5DA3XO6e_qRoSQAAAWU"], referer: www.google.com
[Sat Aug 29 05:12:21.481012 2026] [security2:error] [pid 1321:tid 1581] [client 158.158.54.35:22599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/root.php"] [unique_id "apK-lWjCPtor9NZ-byQL7gAABpg"]
[Sat Aug 29 05:12:21.481615 2026] [security2:error] [pid 1321:tid 1527] [client 20.48.250.41:24394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/grsiuk.php"] [unique_id "apK-lWjCPtor9NZ-byQL7wAABmM"]
[Sat Aug 29 05:12:21.482412 2026] [security2:error] [pid 11274:tid 11459] [client 20.48.251.3:38674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "apK-lWbX5DA3XO6e_qRoSgAAARk"]
[Sat Aug 29 05:12:21.487335 2026] [security2:error] [pid 11274:tid 11454] [client 20.48.160.90:52048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/cd.php"] [unique_id "apK-lWbX5DA3XO6e_qRoSwAAARQ"]
[Sat Aug 29 05:12:21.491673 2026] [security2:error] [pid 11274:tid 11488] [client 20.104.18.15:29147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/h2.php"] [unique_id "apK-lWbX5DA3XO6e_qRoTAAAATU"]
[Sat Aug 29 05:12:21.502197 2026] [security2:error] [pid 11274:tid 11551] [client 20.48.160.90:23744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/fc.php"] [unique_id "apK-lWbX5DA3XO6e_qRoTQAAAXM"]
[Sat Aug 29 05:12:21.511123 2026] [security2:error] [pid 11274:tid 11571] [client 20.48.160.90:61619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/okxoby.php"] [unique_id "apK-lWbX5DA3XO6e_qRoTgAAAYc"]
[Sat Aug 29 05:12:21.518638 2026] [security2:error] [pid 11274:tid 11514] [client 4.205.62.107:61352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/fraro.php"] [unique_id "apK-lWbX5DA3XO6e_qRoTwAAAU8"]
[Sat Aug 29 05:12:21.521459 2026] [security2:error] [pid 1321:tid 1598] [client 68.155.159.216:55076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.angelesforestranch.com"] [uri "/.well-known/index.php"] [unique_id "apK-lWjCPtor9NZ-byQL8QAABqk"]
[Sat Aug 29 05:12:21.533841 2026] [security2:error] [pid 11274:tid 11545] [client 20.104.49.130:60133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pvillusions.com"] [uri "/wp-css.php"] [unique_id "apK-lWbX5DA3XO6e_qRoUQAAAW0"]
[Sat Aug 29 05:12:21.534066 2026] [security2:error] [pid 11274:tid 11516] [client 20.52.41.200:5133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/aa.php"] [unique_id "apK-lWbX5DA3XO6e_qRoUgAAAVE"]
[Sat Aug 29 05:12:21.535516 2026] [security2:error] [pid 1321:tid 1516] [client 20.196.209.81:20915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/goods.php"] [unique_id "apK-lWjCPtor9NZ-byQL8wAABlg"]
[Sat Aug 29 05:12:21.564275 2026] [security2:error] [pid 1321:tid 1529] [client 158.158.54.35:1497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/txets.php"] [unique_id "apK-lWjCPtor9NZ-byQL9QAABmU"]
[Sat Aug 29 05:12:21.580672 2026] [security2:error] [pid 11274:tid 11486] [client 20.63.219.114:9237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/blog.php"] [unique_id "apK-lWbX5DA3XO6e_qRoVgAAATM"]
[Sat Aug 29 05:12:21.587440 2026] [security2:error] [pid 11274:tid 11466] [client 158.23.184.117:34820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/index/function.php"] [unique_id "apK-lWbX5DA3XO6e_qRoVwAAASA"]
[Sat Aug 29 05:12:21.591152 2026] [security2:error] [pid 11274:tid 11452] [client 20.104.18.15:29651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/wp-content/k.php"] [unique_id "apK-lWbX5DA3XO6e_qRoWAAAARI"]
[Sat Aug 29 05:12:21.601770 2026] [security2:error] [pid 11274:tid 11511] [client 20.48.250.41:39902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/asax.php"] [unique_id "apK-lWbX5DA3XO6e_qRoWQAAAUw"]
[Sat Aug 29 05:12:21.610961 2026] [security2:error] [pid 11274:tid 11465] [client 20.48.251.3:38715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/app.default.php"] [unique_id "apK-lWbX5DA3XO6e_qRoWgAAAR8"]
[Sat Aug 29 05:12:21.615013 2026] [security2:error] [pid 11274:tid 11493] [client 158.23.184.117:61524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/Radio.php"] [unique_id "apK-lWbX5DA3XO6e_qRoWwAAATo"]
[Sat Aug 29 05:12:21.624341 2026] [security2:error] [pid 11274:tid 11559] [client 20.104.18.15:29056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/wp-content/mod/adminfuns.php"] [unique_id "apK-lWbX5DA3XO6e_qRoXAAAAXs"]
[Sat Aug 29 05:12:21.624558 2026] [security2:error] [pid 11274:tid 11524] [client 20.48.160.90:52040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/luuf.php"] [unique_id "apK-lWbX5DA3XO6e_qRoXQAAAVk"]
[Sat Aug 29 05:12:21.634760 2026] [security2:error] [pid 11274:tid 11535] [client 158.23.147.79:6977] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcontacts.summerhill72.com"] [uri "/1.php"] [unique_id "apK-lWbX5DA3XO6e_qRoXgAAAWQ"]
[Sat Aug 29 05:12:21.634823 2026] [security2:error] [pid 11274:tid 11535] [client 158.23.147.79:6977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/1.php"] [unique_id "apK-lWbX5DA3XO6e_qRoXgAAAWQ"]
[Sat Aug 29 05:12:21.641466 2026] [security2:error] [pid 1321:tid 1607] [client 149.34.210.141:36723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-lWjCPtor9NZ-byQL9gAABrI"]
[Sat Aug 29 05:12:21.641539 2026] [security2:error] [pid 1321:tid 1607] [client 149.34.210.141:36723] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-lWjCPtor9NZ-byQL9gAABrI"]
[Sat Aug 29 05:12:21.651438 2026] [security2:error] [pid 1321:tid 1497] [client 20.197.61.180:1114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/headerg.php"] [unique_id "apK-lWjCPtor9NZ-byQL9wAABkU"]
[Sat Aug 29 05:12:21.655946 2026] [security2:error] [pid 11274:tid 11538] [client 20.48.160.90:61674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/esuutzzx.php"] [unique_id "apK-lWbX5DA3XO6e_qRoXwAAAWc"]
[Sat Aug 29 05:12:21.656637 2026] [security2:error] [pid 11274:tid 11456] [client 68.155.159.216:43972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK-lWbX5DA3XO6e_qRoYAAAARY"]
[Sat Aug 29 05:12:21.659217 2026] [security2:error] [pid 1321:tid 1415] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-content/languages/min.php"] [unique_id "apK-lWjCPtor9NZ-byQL-AAGVzk"]
[Sat Aug 29 05:12:21.671846 2026] [security2:error] [pid 11274:tid 11509] [client 106.216.114.82:65436] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "utahtsa.com"] [uri "/xmlrpc.php"] [unique_id "apK-lWbX5DA3XO6e_qRoUwAAAUo"]
[Sat Aug 29 05:12:21.699009 2026] [security2:error] [pid 11274:tid 11565] [client 20.48.160.90:50333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/ke.php"] [unique_id "apK-lWbX5DA3XO6e_qRoYwAAAYE"]
[Sat Aug 29 05:12:21.699103 2026] [security2:error] [pid 11274:tid 11526] [client 93.123.109.228:36730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/config/module.config.php"] [unique_id "apK-lWbX5DA3XO6e_qRoYgAAAVs"]
[Sat Aug 29 05:12:21.716865 2026] [security2:error] [pid 1321:tid 1599] [client 20.240.128.207:8150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-conflg.php"] [unique_id "apK-lWjCPtor9NZ-byQL-QAABqo"]
[Sat Aug 29 05:12:21.716866 2026] [security2:error] [pid 11274:tid 11483] [client 74.248.24.12:35645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/goods.php"] [unique_id "apK-lWbX5DA3XO6e_qRoZAAAATA"]
[Sat Aug 29 05:12:21.723250 2026] [security2:error] [pid 1321:tid 1565] [client 93.123.109.228:36762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/config/nexmo.php"] [unique_id "apK-lWjCPtor9NZ-byQL-gAABog"]
[Sat Aug 29 05:12:21.724550 2026] [security2:error] [pid 1321:tid 1600] [client 4.205.62.107:32552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/tax.php"] [unique_id "apK-lWjCPtor9NZ-byQL-wAABqs"]
[Sat Aug 29 05:12:21.732912 2026] [security2:error] [pid 11274:tid 11563] [client 158.23.184.117:35352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/wp-admin/maint/repair.php"] [unique_id "apK-lWbX5DA3XO6e_qRoZgAAAX8"]
[Sat Aug 29 05:12:21.740129 2026] [security2:error] [pid 11274:tid 11475] [client 20.48.251.3:38712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/8.php"] [unique_id "apK-lWbX5DA3XO6e_qRoZwAAASk"]
[Sat Aug 29 05:12:21.747346 2026] [security2:error] [pid 11274:tid 11496] [client 20.48.250.41:39922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/fetch.php"] [unique_id "apK-lWbX5DA3XO6e_qRoaAAAAT0"]
[Sat Aug 29 05:12:21.753881 2026] [security2:error] [pid 11274:tid 11546] [client 20.104.18.15:29636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/os.php"] [unique_id "apK-lWbX5DA3XO6e_qRoaQAAAW4"]
[Sat Aug 29 05:12:21.757619 2026] [security2:error] [pid 11274:tid 11480] [client 20.104.18.15:29594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/sao.php"] [unique_id "apK-lWbX5DA3XO6e_qRoagAAAS0"]
[Sat Aug 29 05:12:21.762884 2026] [security2:error] [pid 11274:tid 11497] [client 20.48.160.90:52066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/fex.php"] [unique_id "apK-lWbX5DA3XO6e_qRobAAAAT4"]
[Sat Aug 29 05:12:21.790567 2026] [security2:error] [pid 1321:tid 1566] [client 158.23.147.79:24472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK-lWjCPtor9NZ-byQL_AAABok"]
[Sat Aug 29 05:12:21.791646 2026] [security2:error] [pid 1321:tid 1601] [client 20.48.160.90:61685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/replace.php"] [unique_id "apK-lWjCPtor9NZ-byQL_QAABqw"]
[Sat Aug 29 05:12:21.806142 2026] [security2:error] [pid 11274:tid 11517] [client 68.155.159.216:56512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK-lWbX5DA3XO6e_qRobgAAAVI"]
[Sat Aug 29 05:12:21.814254 2026] [security2:error] [pid 11274:tid 11555] [client 158.23.184.117:61553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/wp-includes/Requests/Exception/file.php"] [unique_id "apK-lWbX5DA3XO6e_qRocAAAAXc"]
[Sat Aug 29 05:12:21.843145 2026] [security2:error] [pid 11274:tid 11551] [client 4.205.62.107:5668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/guk.php"] [unique_id "apK-lWbX5DA3XO6e_qRocgAAAXM"]
[Sat Aug 29 05:12:21.861206 2026] [security2:error] [pid 11274:tid 11554] [client 40.83.93.50:13999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/inputs.php"] [unique_id "apK-lWbX5DA3XO6e_qRocwAAAXY"]
[Sat Aug 29 05:12:21.868586 2026] [security2:error] [pid 1321:tid 1610] [client 20.48.251.3:38182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/agg.php"] [unique_id "apK-lWjCPtor9NZ-byQL_gAABrU"]
[Sat Aug 29 05:12:21.875946 2026] [security2:error] [pid 11274:tid 11514] [client 20.48.160.90:23726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/tf.php"] [unique_id "apK-lWbX5DA3XO6e_qRodAAAAU8"]
[Sat Aug 29 05:12:21.901540 2026] [security2:error] [pid 11274:tid 11505] [client 20.48.160.90:31438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/l.php"] [unique_id "apK-lWbX5DA3XO6e_qRodwAAAUY"]
[Sat Aug 29 05:12:21.904647 2026] [security2:error] [pid 1321:tid 1358] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-content/languages/pk.php"] [unique_id "apK-lWjCPtor9NZ-byQMAAAGkQI"]
[Sat Aug 29 05:12:21.909110 2026] [security2:error] [pid 1321:tid 1595] [client 20.104.18.15:29172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/dapa.php"] [unique_id "apK-lWjCPtor9NZ-byQMAQAABqY"]
[Sat Aug 29 05:12:21.926629 2026] [security2:error] [pid 1321:tid 1495] [client 20.48.160.90:61574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/gulu.php"] [unique_id "apK-lWjCPtor9NZ-byQMAgAABkM"]
[Sat Aug 29 05:12:21.931046 2026] [security2:error] [pid 11274:tid 11507] [client 158.158.54.35:5521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/p.php"] [unique_id "apK-lWbX5DA3XO6e_qRoeQAAAUg"]
[Sat Aug 29 05:12:21.933316 2026] [security2:error] [pid 1321:tid 1502] [client 68.155.159.216:62822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-content/index.php"] [unique_id "apK-lWjCPtor9NZ-byQMAwAABko"]
[Sat Aug 29 05:12:21.936697 2026] [security2:error] [pid 1321:tid 1502] [client 4.205.62.107:64967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/f35.php"] [unique_id "apK-lWjCPtor9NZ-byQMBAAABko"]
[Sat Aug 29 05:12:21.937230 2026] [security2:error] [pid 11274:tid 11492] [client 158.23.184.117:34914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK-lWbX5DA3XO6e_qRoewAAATk"]
[Sat Aug 29 05:12:21.939750 2026] [security2:error] [pid 11274:tid 11485] [client 20.104.18.15:29658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/htio.php"] [unique_id "apK-lWbX5DA3XO6e_qRofAAAATI"]
[Sat Aug 29 05:12:21.960162 2026] [security2:error] [pid 1321:tid 1608] [client 20.196.209.81:14739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/hehe.php"] [unique_id "apK-lWjCPtor9NZ-byQMBQAABrM"]
[Sat Aug 29 05:12:21.972205 2026] [security2:error] [pid 1321:tid 1532] [client 20.63.219.114:13993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/bypass.php"] [unique_id "apK-lWjCPtor9NZ-byQMBwAABmg"]
[Sat Aug 29 05:12:21.981484 2026] [security2:error] [pid 11274:tid 11489] [client 20.52.41.200:2797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/a.php"] [unique_id "apK-lWbX5DA3XO6e_qRofQAAATY"]
[Sat Aug 29 05:12:21.988327 2026] [security2:error] [pid 11274:tid 11476] [client 68.155.159.216:23417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-l0gin.php"] [unique_id "apK-lWbX5DA3XO6e_qRofgAAASo"]
[Sat Aug 29 05:12:21.990441 2026] [security2:error] [pid 1321:tid 1548] [client 20.52.41.200:5130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/c.php"] [unique_id "apK-lWjCPtor9NZ-byQMCAAABnc"]
[Sat Aug 29 05:12:21.992488 2026] [security2:error] [pid 11274:tid 11465] [client 20.48.250.41:39891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/vx.php"] [unique_id "apK-lWbX5DA3XO6e_qRofwAAAR8"]
[Sat Aug 29 05:12:21.997114 2026] [security2:error] [pid 11274:tid 11558] [client 20.48.251.3:38145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/cp2.php"] [unique_id "apK-lWbX5DA3XO6e_qRogAAAAXo"]
[Sat Aug 29 05:12:22.004527 2026] [security2:error] [pid 11274:tid 11477] [client 20.48.160.90:29166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/px.php"] [unique_id "apK-lmbX5DA3XO6e_qRoggAAASs"]
[Sat Aug 29 05:12:22.014703 2026] [security2:error] [pid 1321:tid 1507] [client 158.23.184.117:50323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/wp-admin/add.php"] [unique_id "apK-lmjCPtor9NZ-byQMCQAABk8"]
[Sat Aug 29 05:12:22.023659 2026] [security2:error] [pid 11274:tid 11524] [client 57.131.147.192:51030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 192.147.131.57.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "vatecreative.com"] [uri "/wp-login.php"] [unique_id "apK-lmbX5DA3XO6e_qRogwAAAVk"]
[Sat Aug 29 05:12:22.045514 2026] [security2:error] [pid 11274:tid 11518] [client 20.48.160.90:52036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/xr.php"] [unique_id "apK-lmbX5DA3XO6e_qRohAAAAVM"]
[Sat Aug 29 05:12:22.048441 2026] [security2:error] [pid 11274:tid 11538] [client 68.155.159.216:21482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK-lmbX5DA3XO6e_qRohQAAAWc"]
[Sat Aug 29 05:12:22.052563 2026] [security2:error] [pid 1321:tid 1557] [client 158.23.147.79:53996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-l0gin.php"] [unique_id "apK-lmjCPtor9NZ-byQMCwAABoA"]
[Sat Aug 29 05:12:22.053453 2026] [security2:error] [pid 11274:tid 11521] [client 20.104.49.130:58097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "coveryourauto.com"] [uri "/one.php"] [unique_id "apK-lmbX5DA3XO6e_qRohwAAAVY"]
[Sat Aug 29 05:12:22.058694 2026] [security2:error] [pid 11274:tid 11568] [client 20.48.160.90:37863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/gtghklk.php"] [unique_id "apK-lmbX5DA3XO6e_qRoiAAAAYQ"]
[Sat Aug 29 05:12:22.066311 2026] [security2:error] [pid 11274:tid 11471] [client 68.155.159.216:64035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/mah.php"] [unique_id "apK-lmbX5DA3XO6e_qRoiQAAASU"]
[Sat Aug 29 05:12:22.068377 2026] [security2:error] [pid 1321:tid 1526] [client 20.104.18.15:29168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/wp-content/l.php"] [unique_id "apK-lmjCPtor9NZ-byQMDAAABmI"]
[Sat Aug 29 05:12:22.069763 2026] [security2:error] [pid 1321:tid 1583] [client 20.104.18.15:29102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/dev.php"] [unique_id "apK-lmjCPtor9NZ-byQMDQAABpo"]
[Sat Aug 29 05:12:22.083602 2026] [security2:error] [pid 11274:tid 11495] [client 158.23.184.117:34924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/xda.php"] [unique_id "apK-lmbX5DA3XO6e_qRoigAAATw"]
[Sat Aug 29 05:12:22.127061 2026] [security2:error] [pid 11274:tid 11444] [client 20.48.251.3:38704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/error_log.php"] [unique_id "apK-lmbX5DA3XO6e_qRojAAAAQo"]
[Sat Aug 29 05:12:22.138241 2026] [security2:error] [pid 11274:tid 11480] [client 158.23.147.79:14159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK-lmbX5DA3XO6e_qRojQAAAS0"]
[Sat Aug 29 05:12:22.139209 2026] [security2:error] [pid 11274:tid 11498] [client 20.48.160.90:50383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/jg.php"] [unique_id "apK-lmbX5DA3XO6e_qRojgAAAT8"]
[Sat Aug 29 05:12:22.149949 2026] [security2:error] [pid 1321:tid 1370] [remote 20.197.61.180:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "iosephos.com"] [uri "/wp-content/languages/plugins/about.php"] [unique_id "apK-lmjCPtor9NZ-byQMDgAGWAw"]
[Sat Aug 29 05:12:22.163968 2026] [security2:error] [pid 1321:tid 1581] [client 158.23.184.117:4754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/wp-includes/assets/about.php"] [unique_id "apK-lmjCPtor9NZ-byQMDwAABpg"]
[Sat Aug 29 05:12:22.174733 2026] [security2:error] [pid 1321:tid 1576] [client 20.48.160.90:48331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/Q3.php"] [unique_id "apK-lmjCPtor9NZ-byQMEAAABpM"]
[Sat Aug 29 05:12:22.186836 2026] [security2:error] [pid 11274:tid 11451] [client 20.48.250.41:39909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/global.php"] [unique_id "apK-lmbX5DA3XO6e_qRojwAAARE"]
[Sat Aug 29 05:12:22.189569 2026] [security2:error] [pid 11274:tid 11479] [client 20.48.160.90:51733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/comand.php"] [unique_id "apK-lmbX5DA3XO6e_qRokAAAASw"]
[Sat Aug 29 05:12:22.195342 2026] [security2:error] [pid 11274:tid 11555] [client 20.104.18.15:29171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/wp-admin/w.php"] [unique_id "apK-lmbX5DA3XO6e_qRokQAAAXc"]
[Sat Aug 29 05:12:22.210713 2026] [security2:error] [pid 11274:tid 11459] [client 93.123.109.228:36816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hokkaidonp.com"] [uri "/config/stripe.php"] [unique_id "apK-lmbX5DA3XO6e_qRokgAAARk"]
[Sat Aug 29 05:12:22.226324 2026] [security2:error] [pid 1321:tid 1547] [client 158.23.184.117:34886] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "isasi.cloverleafsystems.com"] [uri "/1.php"] [unique_id "apK-lmjCPtor9NZ-byQMEgAABnY"]
[Sat Aug 29 05:12:22.226443 2026] [security2:error] [pid 1321:tid 1547] [client 158.23.184.117:34886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/1.php"] [unique_id "apK-lmjCPtor9NZ-byQMEgAABnY"]
[Sat Aug 29 05:12:22.233076 2026] [security2:error] [pid 11274:tid 11504] [client 74.248.24.12:25106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/css.php"] [unique_id "apK-lmbX5DA3XO6e_qRokwAAAUU"]
[Sat Aug 29 05:12:22.234539 2026] [security2:error] [pid 11274:tid 11487] [client 20.240.128.207:7495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/123.php"] [unique_id "apK-lmbX5DA3XO6e_qRolAAAATQ"]
[Sat Aug 29 05:12:22.256324 2026] [security2:error] [pid 1321:tid 1523] [client 20.48.251.3:38165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/config/laravolt/css/index.php"] [unique_id "apK-lmjCPtor9NZ-byQMEwAABl8"]
[Sat Aug 29 05:12:22.264456 2026] [security2:error] [pid 11274:tid 11554] [client 4.205.62.107:60599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/app.default.php"] [unique_id "apK-lmbX5DA3XO6e_qRolwAAAXY"]
[Sat Aug 29 05:12:22.279719 2026] [security2:error] [pid 11274:tid 11545] [client 20.104.49.130:63561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/ws58.php"] [unique_id "apK-lmbX5DA3XO6e_qRomgAAAW0"]
[Sat Aug 29 05:12:22.284226 2026] [security2:error] [pid 1321:tid 1543] [client 20.104.18.15:29082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/gos.php"] [unique_id "apK-lmjCPtor9NZ-byQMFAAABnM"]
[Sat Aug 29 05:12:22.294615 2026] [security2:error] [pid 1321:tid 1580] [client 20.48.160.90:50025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/yj.php"] [unique_id "apK-lmjCPtor9NZ-byQMFQAABpc"]
[Sat Aug 29 05:12:22.309130 2026] [security2:error] [pid 11274:tid 11500] [client 158.23.184.117:61540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/wp-content/themes/twentytwentythree.php"] [unique_id "apK-lmbX5DA3XO6e_qRomwAAAUE"]
[Sat Aug 29 05:12:22.309511 2026] [security2:error] [pid 11274:tid 11516] [client 20.48.160.90:31382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/Q1.php"] [unique_id "apK-lmbX5DA3XO6e_qRonAAAAVE"]
[Sat Aug 29 05:12:22.316297 2026] [security2:error] [pid 11274:tid 11488] [client 158.23.147.79:39144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/.well-known/content.php"] [unique_id "apK-lmbX5DA3XO6e_qRonQAAATU"]
[Sat Aug 29 05:12:22.317399 2026] [autoindex:error] [pid 11274:tid 11506] [client 158.158.54.35:20713] AH01276: Cannot serve directory /home2/charlov7/public_html/dev/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:12:22.326743 2026] [security2:error] [pid 11274:tid 11539] [client 20.48.160.90:61661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/wp_motu_myk3v.php"] [unique_id "apK-lmbX5DA3XO6e_qRongAAAWg"]
[Sat Aug 29 05:12:22.342506 2026] [security2:error] [pid 11274:tid 11505] [client 4.205.62.107:28076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/hiquido.com/index.php"] [unique_id "apK-lmbX5DA3XO6e_qRooAAAAUY"]
[Sat Aug 29 05:12:22.348960 2026] [security2:error] [pid 11274:tid 11541] [client 20.48.250.41:25555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/export.php"] [unique_id "apK-lmbX5DA3XO6e_qRooQAAAWo"]
[Sat Aug 29 05:12:22.354759 2026] [security2:error] [pid 11274:tid 11484] [client 20.48.250.41:39882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/fs.php"] [unique_id "apK-lmbX5DA3XO6e_qRoogAAATE"]
[Sat Aug 29 05:12:22.355137 2026] [security2:error] [pid 11274:tid 11473] [client 4.205.62.107:61000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/infos.php"] [unique_id "apK-lmbX5DA3XO6e_qRoowAAASc"]
[Sat Aug 29 05:12:22.358000 2026] [security2:error] [pid 11274:tid 11512] [client 20.196.209.81:1391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-admin/class-db.php"] [unique_id "apK-lmbX5DA3XO6e_qRopAAAAU0"]
[Sat Aug 29 05:12:22.361860 2026] [security2:error] [pid 11274:tid 11494] [client 20.104.18.15:29687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/wp-content/k.php"] [unique_id "apK-lmbX5DA3XO6e_qRopQAAATs"]
[Sat Aug 29 05:12:22.369748 2026] [security2:error] [pid 11274:tid 11490] [client 158.23.184.117:34863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK-lmbX5DA3XO6e_qRopgAAATc"]
[Sat Aug 29 05:12:22.377614 2026] [security2:error] [pid 11274:tid 11546] [client 20.197.61.180:13475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/meta.php"] [unique_id "apK-lmbX5DA3XO6e_qRopwAAAW4"]
[Sat Aug 29 05:12:22.380947 2026] [security2:error] [pid 1321:tid 1561] [client 158.158.54.35:18520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/a1.php"] [unique_id "apK-lmjCPtor9NZ-byQMFgAABoQ"]
[Sat Aug 29 05:12:22.381295 2026] [security2:error] [pid 11274:tid 11454] [client 40.83.93.50:14015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/class-walker-category-dropdown-class.php"] [unique_id "apK-lmbX5DA3XO6e_qRoqQAAARQ"]
[Sat Aug 29 05:12:22.384640 2026] [security2:error] [pid 11274:tid 11486] [client 20.48.251.3:38541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/database.php"] [unique_id "apK-lmbX5DA3XO6e_qRoqgAAATM"]
[Sat Aug 29 05:12:22.395808 2026] [security2:error] [pid 1321:tid 1607] [client 20.63.219.114:1889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/extractable-loader-head.php"] [unique_id "apK-lmjCPtor9NZ-byQMFwAABrI"]
[Sat Aug 29 05:12:22.403769 2026] [security2:error] [pid 11274:tid 11476] [client 20.48.250.41:36812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/8.php"] [unique_id "apK-lmbX5DA3XO6e_qRoqwAAASo"]
[Sat Aug 29 05:12:22.416214 2026] [security2:error] [pid 11274:tid 11477] [client 68.155.159.216:21475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK-lmbX5DA3XO6e_qRorAAAASs"]
[Sat Aug 29 05:12:22.435444 2026] [security2:error] [pid 1321:tid 1497] [client 20.52.41.200:2686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/u.php"] [unique_id "apK-lmjCPtor9NZ-byQMGAAABkU"]
[Sat Aug 29 05:12:22.438781 2026] [security2:error] [pid 11274:tid 11518] [client 20.48.160.90:29143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/zi.php"] [unique_id "apK-lmbX5DA3XO6e_qRorgAAAVM"]
[Sat Aug 29 05:12:22.439919 2026] [security2:error] [pid 11274:tid 11538] [client 20.48.160.90:31475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/nz.php"] [unique_id "apK-lmbX5DA3XO6e_qRorwAAAWc"]
[Sat Aug 29 05:12:22.447245 2026] [security2:error] [pid 11274:tid 11521] [client 4.205.62.107:6516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/agg.php"] [unique_id "apK-lmbX5DA3XO6e_qRosAAAAVY"]
[Sat Aug 29 05:12:22.448454 2026] [security2:error] [pid 1321:tid 1515] [client 20.52.41.200:4559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/f.php"] [unique_id "apK-lmjCPtor9NZ-byQMGQAABlc"]
[Sat Aug 29 05:12:22.460648 2026] [security2:error] [pid 11274:tid 11568] [client 20.48.160.90:61608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/wp_motu_ypdat.php"] [unique_id "apK-lmbX5DA3XO6e_qRosgAAAYQ"]
[Sat Aug 29 05:12:22.461072 2026] [security2:error] [pid 11274:tid 11570] [client 158.158.54.35:20713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wp-content/themes/about.php"] [unique_id "apK-lmbX5DA3XO6e_qRoswAAAYY"]
[Sat Aug 29 05:12:22.478221 2026] [security2:error] [pid 1321:tid 1566] [client 20.151.200.44:55558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/lte7.php"] [unique_id "apK-lmjCPtor9NZ-byQMGgAABok"]
[Sat Aug 29 05:12:22.505539 2026] [security2:error] [pid 11274:tid 11445] [client 20.48.250.41:25436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/gk.php"] [unique_id "apK-lmbX5DA3XO6e_qRotQAAAQs"]
[Sat Aug 29 05:12:22.510975 2026] [security2:error] [pid 1321:tid 1506] [client 20.48.251.3:38544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/png.php"] [unique_id "apK-lmjCPtor9NZ-byQMHQAABk4"]
[Sat Aug 29 05:12:22.515948 2026] [security2:error] [pid 11274:tid 11526] [client 158.23.184.117:50322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/wp-content/languages/themes/num.php"] [unique_id "apK-lmbX5DA3XO6e_qRotgAAAVs"]
[Sat Aug 29 05:12:22.524473 2026] [security2:error] [pid 11274:tid 11513] [client 20.48.250.41:39901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/ioxi.php"] [unique_id "apK-lmbX5DA3XO6e_qRotwAAAU4"]
[Sat Aug 29 05:12:22.524847 2026] [security2:error] [pid 11274:tid 11549] [client 158.23.147.79:55887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK-lmbX5DA3XO6e_qRouAAAAXE"]
[Sat Aug 29 05:12:22.535297 2026] [security2:error] [pid 1321:tid 1603] [client 20.48.250.41:24564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/wp-scr1pts.php"] [unique_id "apK-lmjCPtor9NZ-byQMHwAABq4"]
[Sat Aug 29 05:12:22.537246 2026] [security2:error] [pid 11274:tid 11571] [client 20.48.250.41:36821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/0x0x.php"] [unique_id "apK-lmbX5DA3XO6e_qRouQAAAYc"]
[Sat Aug 29 05:12:22.561057 2026] [security2:error] [pid 1321:tid 1605] [client 158.23.147.79:50144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-lmjCPtor9NZ-byQMIAAABrA"]
[Sat Aug 29 05:12:22.564790 2026] [security2:error] [pid 1321:tid 1596] [client 158.23.184.117:34840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/wp-includes/admin.php"] [unique_id "apK-lmjCPtor9NZ-byQMIQAABqc"]
[Sat Aug 29 05:12:22.572224 2026] [security2:error] [pid 11274:tid 11472] [client 20.48.160.90:50395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/ue.php"] [unique_id "apK-lmbX5DA3XO6e_qRovAAAASY"]
[Sat Aug 29 05:12:22.589731 2026] [security2:error] [pid 1321:tid 1491] [client 20.48.160.90:31446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/sg.php"] [unique_id "apK-lmjCPtor9NZ-byQMIgAABj8"]
[Sat Aug 29 05:12:22.594258 2026] [security2:error] [pid 11274:tid 11569] [client 20.48.160.90:51809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/edit.php"] [unique_id "apK-lmbX5DA3XO6e_qRovgAAAYU"]
[Sat Aug 29 05:12:22.639003 2026] [security2:error] [pid 1321:tid 1597] [client 20.48.251.3:38153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/wp-tem.php"] [unique_id "apK-lmjCPtor9NZ-byQMJAAABqg"]
[Sat Aug 29 05:12:22.642223 2026] [security2:error] [pid 11274:tid 11553] [client 68.155.159.216:55133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.angelesforestranch.com"] [uri "/wp-content/themes/too.php"] [unique_id "apK-lmbX5DA3XO6e_qRowAAAAXU"]
[Sat Aug 29 05:12:22.659808 2026] [security2:error] [pid 11274:tid 11555] [client 158.23.184.117:4745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/wp.php"] [unique_id "apK-lmbX5DA3XO6e_qRowQAAAXc"]
[Sat Aug 29 05:12:22.662344 2026] [security2:error] [pid 11274:tid 11514] [client 4.205.62.107:63416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/thui.php"] [unique_id "apK-lmbX5DA3XO6e_qRowgAAAU8"]
[Sat Aug 29 05:12:22.675387 2026] [security2:error] [pid 1321:tid 1542] [client 111.235.68.106:14547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK-lmjCPtor9NZ-byQMJQAABnI"]
[Sat Aug 29 05:12:22.675486 2026] [security2:error] [pid 1321:tid 1542] [client 111.235.68.106:14547] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK-lmjCPtor9NZ-byQMJQAABnI"]
[Sat Aug 29 05:12:22.705197 2026] [security2:error] [pid 11274:tid 11516] [client 20.48.250.41:39830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/bootstrap.php"] [unique_id "apK-lmbX5DA3XO6e_qRowwAAAVE"]
[Sat Aug 29 05:12:22.708661 2026] [security2:error] [pid 11274:tid 11534] [client 158.23.184.117:34922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/wp-themes.php"] [unique_id "apK-lmbX5DA3XO6e_qRoxAAAAWM"]
[Sat Aug 29 05:12:22.715283 2026] [security2:error] [pid 11274:tid 11506] [client 20.48.250.41:24563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/num.php"] [unique_id "apK-lmbX5DA3XO6e_qRoxQAAAUc"]
[Sat Aug 29 05:12:22.716589 2026] [security2:error] [pid 11274:tid 11539] [client 20.48.250.41:25489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/logs1.php"] [unique_id "apK-lmbX5DA3XO6e_qRoxgAAAWg"]
[Sat Aug 29 05:12:22.718382 2026] [security2:error] [pid 11274:tid 11515] [client 20.48.160.90:23797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/nv.php"] [unique_id "apK-lmbX5DA3XO6e_qRoxwAAAVA"]
[Sat Aug 29 05:12:22.719222 2026] [security2:error] [pid 11274:tid 11560] [client 20.48.250.41:36818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/166.php"] [unique_id "apK-lmbX5DA3XO6e_qRoyAAAAXw"]
[Sat Aug 29 05:12:22.720656 2026] [security2:error] [pid 1321:tid 1610] [client 20.240.128.207:5056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/yanz.php"] [unique_id "apK-lmjCPtor9NZ-byQMJgAABrU"]
[Sat Aug 29 05:12:22.722439 2026] [security2:error] [pid 11274:tid 11499] [client 20.48.160.90:37773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/tqkdqbbv.php"] [unique_id "apK-lmbX5DA3XO6e_qRoyQAAAUA"]
[Sat Aug 29 05:12:22.723165 2026] [security2:error] [pid 1321:tid 1604] [client 20.48.160.90:52077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/hypo.php"] [unique_id "apK-lmjCPtor9NZ-byQMJwAABq8"]
[Sat Aug 29 05:12:22.741001 2026] [cgid:error] [pid 1321:tid 1612] [client 74.248.24.12:35602] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/themysticalseven/404.shtml
[Sat Aug 29 05:12:22.742836 2026] [security2:error] [pid 11274:tid 11484] [client 158.23.147.79:7056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/ws.php"] [unique_id "apK-lmbX5DA3XO6e_qRoygAAATE"]
[Sat Aug 29 05:12:22.768696 2026] [security2:error] [pid 11274:tid 11512] [client 20.48.251.3:38704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/bootstrap.php"] [unique_id "apK-lmbX5DA3XO6e_qRoywAAAU0"]
[Sat Aug 29 05:12:22.771538 2026] [security2:error] [pid 11274:tid 11487] [client 20.196.209.81:1377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-contentt.php"] [unique_id "apK-lmbX5DA3XO6e_qRozAAAATQ"]
[Sat Aug 29 05:12:22.825495 2026] [security2:error] [pid 11274:tid 11545] [client 158.158.54.35:5538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-lmbX5DA3XO6e_qRozgAAAW0"]
[Sat Aug 29 05:12:22.836398 2026] [security2:error] [pid 11274:tid 11511] [client 20.48.250.41:39916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/export.php"] [unique_id "apK-lmbX5DA3XO6e_qRozwAAAUw"]
[Sat Aug 29 05:12:22.850670 2026] [security2:error] [pid 1321:tid 1577] [client 158.23.184.117:34866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/adminfuns.php/.well-known/acme-challenge/file.php"] [unique_id "apK-lmjCPtor9NZ-byQMKwAABpQ"]
[Sat Aug 29 05:12:22.852292 2026] [security2:error] [pid 11274:tid 11476] [client 68.155.159.216:43915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/makeasmtp.php"] [unique_id "apK-lmbX5DA3XO6e_qRo0AAAASo"]
[Sat Aug 29 05:12:22.854043 2026] [security2:error] [pid 1321:tid 1557] [client 20.48.160.90:52076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/Hd.php"] [unique_id "apK-lmjCPtor9NZ-byQMLAAABoA"]
[Sat Aug 29 05:12:22.858711 2026] [security2:error] [pid 11274:tid 11465] [client 20.48.160.90:50379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/jw.php"] [unique_id "apK-lmbX5DA3XO6e_qRo0QAAAR8"]
[Sat Aug 29 05:12:22.861274 2026] [security2:error] [pid 11274:tid 11493] [client 20.48.160.90:37848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/kjyehoxl.php"] [unique_id "apK-lmbX5DA3XO6e_qRo0gAAATo"]
[Sat Aug 29 05:12:22.861539 2026] [security2:error] [pid 11274:tid 11559] [client 4.205.62.107:32551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/linusadmin-phpinfo.php"] [unique_id "apK-lmbX5DA3XO6e_qRo0wAAAXs"]
[Sat Aug 29 05:12:22.864822 2026] [security2:error] [pid 1321:tid 1548] [client 158.23.184.117:4748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/xmlrpc.php"] [unique_id "apK-lmjCPtor9NZ-byQMKQAABnc"]
[Sat Aug 29 05:12:22.879607 2026] [security2:error] [pid 1321:tid 1518] [client 20.48.250.41:25477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/inege.php"] [unique_id "apK-lmjCPtor9NZ-byQMLQAABlo"]
[Sat Aug 29 05:12:22.888861 2026] [security2:error] [pid 11274:tid 11505] [client 40.83.93.50:10760] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "quickvolt.com"] [uri "/1.php7"] [unique_id "apK-lmbX5DA3XO6e_qRo1AAAAUY"]
[Sat Aug 29 05:12:22.888932 2026] [security2:error] [pid 11274:tid 11505] [client 40.83.93.50:10760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/1.php7"] [unique_id "apK-lmbX5DA3XO6e_qRo1AAAAUY"]
[Sat Aug 29 05:12:22.893654 2026] [security2:error] [pid 1321:tid 1499] [client 20.48.250.41:36374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/h2a2ck.php"] [unique_id "apK-lmjCPtor9NZ-byQMLgAABkc"]
[Sat Aug 29 05:12:22.895835 2026] [security2:error] [pid 1321:tid 1584] [client 20.48.251.3:38716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/wo.php"] [unique_id "apK-lmjCPtor9NZ-byQMMAAABps"]
[Sat Aug 29 05:12:22.895878 2026] [security2:error] [pid 1321:tid 1592] [client 20.48.250.41:24540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/a4.php"] [unique_id "apK-lmjCPtor9NZ-byQMLwAABqM"]
[Sat Aug 29 05:12:22.896635 2026] [security2:error] [pid 1321:tid 1522] [client 158.23.147.79:24556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/themes.php"] [unique_id "apK-lmjCPtor9NZ-byQMMQAABl4"]
[Sat Aug 29 05:12:22.901031 2026] [security2:error] [pid 1321:tid 1490] [client 20.52.41.200:2122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/r.php"] [unique_id "apK-lmjCPtor9NZ-byQMMgAABj4"]
[Sat Aug 29 05:12:22.902779 2026] [security2:error] [pid 11274:tid 11473] [client 20.52.41.200:4545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/av.php"] [unique_id "apK-lmbX5DA3XO6e_qRo1QAAASc"]
[Sat Aug 29 05:12:22.904352 2026] [security2:error] [pid 1321:tid 1536] [client 158.158.54.35:1434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK-lmjCPtor9NZ-byQMMwAABmw"]
[Sat Aug 29 05:12:22.919174 2026] [security2:error] [pid 1321:tid 1527] [client 68.155.159.216:38697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/lock.php"] [unique_id "apK-lmjCPtor9NZ-byQMNQAABmM"]
[Sat Aug 29 05:12:22.926099 2026] [cgid:error] [pid 1321:tid 1567] [client 74.248.24.12:35602] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/themysticalseven/404.shtml
[Sat Aug 29 05:12:22.982662 2026] [security2:error] [pid 11274:tid 11456] [client 4.205.62.107:6127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/config_dev.php"] [unique_id "apK-lmbX5DA3XO6e_qRo1wAAARY"]
[Sat Aug 29 05:12:22.983151 2026] [security2:error] [pid 1321:tid 1508] [client 20.63.219.114:18848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/defaults.php"] [unique_id "apK-lmjCPtor9NZ-byQMNwAABlA"]
[Sat Aug 29 05:12:22.987231 2026] [security2:error] [pid 11274:tid 11471] [client 20.48.160.90:52030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/im.php"] [unique_id "apK-lmbX5DA3XO6e_qRo2AAAASU"]
[Sat Aug 29 05:12:22.989784 2026] [security2:error] [pid 11274:tid 11561] [client 20.48.160.90:37850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/llyuxaqd.php"] [unique_id "apK-lmbX5DA3XO6e_qRo2wAAAX0"]
[Sat Aug 29 05:12:22.998156 2026] [security2:error] [pid 11274:tid 11565] [client 20.48.160.90:23736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/or.php"] [unique_id "apK-lmbX5DA3XO6e_qRo3AAAAYE"]
[Sat Aug 29 05:12:23.008717 2026] [security2:error] [pid 1321:tid 1582] [client 158.23.184.117:61547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/app.php"] [unique_id "apK-l2jCPtor9NZ-byQMOQAABpk"]
[Sat Aug 29 05:12:23.013497 2026] [security2:error] [pid 11274:tid 11526] [client 20.48.250.41:39880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/gk.php"] [unique_id "apK-l2bX5DA3XO6e_qRo3QAAAVs"]
[Sat Aug 29 05:12:23.024170 2026] [security2:error] [pid 11274:tid 11530] [client 20.48.251.3:38179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/xza.php"] [unique_id "apK-l2bX5DA3XO6e_qRo3gAAAV8"]
[Sat Aug 29 05:12:23.035152 2026] [security2:error] [pid 11274:tid 11513] [client 68.155.159.216:62819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/about/function.php"] [unique_id "apK-l2bX5DA3XO6e_qRo3wAAAU4"]
[Sat Aug 29 05:12:23.039099 2026] [security2:error] [pid 11274:tid 11549] [client 20.48.250.41:24571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/tfm.php"] [unique_id "apK-l2bX5DA3XO6e_qRo4AAAAXE"]
[Sat Aug 29 05:12:23.041103 2026] [security2:error] [pid 11274:tid 11571] [client 20.48.250.41:25562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/wp-link10.php"] [unique_id "apK-l2bX5DA3XO6e_qRo4QAAAYc"]
[Sat Aug 29 05:12:23.045945 2026] [security2:error] [pid 1321:tid 1510] [client 158.23.184.117:34942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "apK-l2jCPtor9NZ-byQMOgAABlI"]
[Sat Aug 29 05:12:23.068220 2026] [security2:error] [pid 11274:tid 11472] [client 4.205.62.107:64297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/api.php"] [unique_id "apK-l2bX5DA3XO6e_qRo4gAAASY"]
[Sat Aug 29 05:12:23.069310 2026] [security2:error] [pid 1321:tid 1594] [client 20.48.250.41:36159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/error_log.php"] [unique_id "apK-l2jCPtor9NZ-byQMOwAABqU"]
[Sat Aug 29 05:12:23.092775 2026] [security2:error] [pid 1321:tid 1599] [client 74.248.24.12:35602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/w.php"] [unique_id "apK-l2jCPtor9NZ-byQMPAAABqo"]
[Sat Aug 29 05:12:23.123945 2026] [security2:error] [pid 11274:tid 11554] [client 20.48.160.90:52091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/fc.php"] [unique_id "apK-l2bX5DA3XO6e_qRo4wAAAXY"]
[Sat Aug 29 05:12:23.123958 2026] [security2:error] [pid 11274:tid 11555] [client 20.48.160.90:61649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/nbwxolou.php"] [unique_id "apK-l2bX5DA3XO6e_qRo5AAAAXc"]
[Sat Aug 29 05:12:23.124372 2026] [security2:error] [pid 11274:tid 11514] [client 68.155.159.216:23493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK-l2bX5DA3XO6e_qRo5QAAAU8"]
[Sat Aug 29 05:12:23.131315 2026] [security2:error] [pid 11274:tid 11516] [client 20.48.160.90:50405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/ile56.php"] [unique_id "apK-l2bX5DA3XO6e_qRo5gAAAVE"]
[Sat Aug 29 05:12:23.135521 2026] [security2:error] [pid 1321:tid 1583] [client 20.197.61.180:13483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/dxc.php"] [unique_id "apK-l2jCPtor9NZ-byQMPQAABpo"]
[Sat Aug 29 05:12:23.140998 2026] [security2:error] [pid 11274:tid 11534] [client 20.104.49.130:36755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.timportlock.net"] [uri "/222.php"] [unique_id "apK-l2bX5DA3XO6e_qRo5wAAAWM"]
[Sat Aug 29 05:12:23.146339 2026] [security2:error] [pid 11274:tid 11515] [client 20.104.49.130:53781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bfcorrigan.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-l2bX5DA3XO6e_qRo6AAAAVA"]
[Sat Aug 29 05:12:23.151281 2026] [security2:error] [pid 11274:tid 11499] [client 20.48.251.3:38699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/var/www/wallet/index.php"] [unique_id "apK-l2bX5DA3XO6e_qRo6gAAAUA"]
[Sat Aug 29 05:12:23.151656 2026] [security2:error] [pid 11274:tid 11504] [client 158.23.184.117:4434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/aaa.php"] [unique_id "apK-l2bX5DA3XO6e_qRo6wAAAUU"]
[Sat Aug 29 05:12:23.158450 2026] [security2:error] [pid 1321:tid 1600] [client 68.155.159.216:21324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK-l2jCPtor9NZ-byQMPgAABqs"]
[Sat Aug 29 05:12:23.158483 2026] [security2:error] [pid 11274:tid 11541] [client 158.23.147.79:55912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK-l2bX5DA3XO6e_qRo7QAAAWo"]
[Sat Aug 29 05:12:23.170316 2026] [security2:error] [pid 1321:tid 1515] [client 20.48.250.41:39754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/logs1.php"] [unique_id "apK-l2jCPtor9NZ-byQMPwAABlc"]
[Sat Aug 29 05:12:23.171821 2026] [security2:error] [pid 1321:tid 1566] [client 68.155.159.216:7109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-blog-header.php"] [unique_id "apK-l2jCPtor9NZ-byQMQAAABok"]
[Sat Aug 29 05:12:23.172382 2026] [authz_core:error] [pid 11274:tid 11325] [remote 74.7.227.189:49634] AH01630: client denied by server configuration: /home4/horseweb/public_html/PF/include/phpmailer/error_log, referer: https://mail.pinnacleforms.com/include/
[Sat Aug 29 05:12:23.182893 2026] [security2:error] [pid 11274:tid 11563] [client 20.196.209.81:1347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/theme.php"] [unique_id "apK-l2bX5DA3XO6e_qRo7wAAAX8"]
[Sat Aug 29 05:12:23.183471 2026] [security2:error] [pid 11274:tid 11448] [client 20.48.250.41:24415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/Geforce.php"] [unique_id "apK-l2bX5DA3XO6e_qRo8AAAAQ4"]
[Sat Aug 29 05:12:23.187711 2026] [security2:error] [pid 11274:tid 11539] [client 158.23.184.117:34909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "isasi.cloverleafsystems.com"] [uri "/11.php"] [unique_id "apK-l2bX5DA3XO6e_qRo8QAAAWg"]
[Sat Aug 29 05:12:23.195986 2026] [security2:error] [pid 11274:tid 11490] [client 20.48.250.41:25515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/ww.php"] [unique_id "apK-l2bX5DA3XO6e_qRo8gAAATc"]
[Sat Aug 29 05:12:23.205861 2026] [security2:error] [pid 11274:tid 11503] [client 20.48.250.41:36802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/403.php"] [unique_id "apK-l2bX5DA3XO6e_qRo8wAAAUQ"]
[Sat Aug 29 05:12:23.209889 2026] [proxy_http:error] [pid 1018003:tid 1018257] (70007)The timeout specified has expired: [client 127.0.0.1:49850] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:12:23.209907 2026] [proxy:error] [pid 1018003:tid 1018257] [client 127.0.0.1:49850] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:12:23.221768 2026] [security2:error] [pid 11274:tid 11572] [client 20.240.128.207:7531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/autoload_classmap.php"] [unique_id "apK-l2bX5DA3XO6e_qRo9AAAAYg"]
[Sat Aug 29 05:12:23.253548 2026] [security2:error] [pid 1321:tid 1563] [client 20.48.160.90:61613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/nsxeubyv.php"] [unique_id "apK-l2jCPtor9NZ-byQMQgAABoY"]
[Sat Aug 29 05:12:23.256250 2026] [security2:error] [pid 11274:tid 11559] [client 20.48.160.90:31404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/ke.php"] [unique_id "apK-l2bX5DA3XO6e_qRo9gAAAXs"]
[Sat Aug 29 05:12:23.262687 2026] [security2:error] [pid 11274:tid 11551] [client 158.158.54.35:22620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/alfa-rex.php7"] [unique_id "apK-l2bX5DA3XO6e_qRo9wAAAXM"]
[Sat Aug 29 05:12:23.269002 2026] [security2:error] [pid 11274:tid 11477] [client 20.48.160.90:23706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/emmh.php"] [unique_id "apK-l2bX5DA3XO6e_qRo-AAAASs"]
[Sat Aug 29 05:12:23.280332 2026] [security2:error] [pid 11274:tid 11473] [client 20.48.251.3:38542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/xp.php"] [unique_id "apK-l2bX5DA3XO6e_qRo-QAAASc"]
[Sat Aug 29 05:12:23.319746 2026] [security2:error] [pid 11274:tid 11520] [client 20.48.250.41:24504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/click.php"] [unique_id "apK-l2bX5DA3XO6e_qRo_AAAAVU"]
[Sat Aug 29 05:12:23.333244 2026] [security2:error] [pid 11274:tid 11570] [client 20.48.250.41:36413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/cytyr.php"] [unique_id "apK-l2bX5DA3XO6e_qRo_QAAAYY"]
[Sat Aug 29 05:12:23.343448 2026] [security2:error] [pid 11274:tid 11456] [client 20.48.250.41:39920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/inege.php"] [unique_id "apK-l2bX5DA3XO6e_qRo_gAAARY"]
[Sat Aug 29 05:12:23.347252 2026] [fcgid:warn] [pid 11274:tid 11489] (70014)End of file found: [client 35.86.223.62:53983] mod_fcgid: can't get data from http client
[Sat Aug 29 05:12:23.348737 2026] [security2:error] [pid 11274:tid 11561] [client 20.151.200.44:27193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/vbbn.php"] [unique_id "apK-l2bX5DA3XO6e_qRpAAAAAX0"]
[Sat Aug 29 05:12:23.355014 2026] [security2:error] [pid 11274:tid 11565] [client 158.23.184.117:53589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/hehe.php"] [unique_id "apK-l2bX5DA3XO6e_qRpAQAAAYE"]
[Sat Aug 29 05:12:23.356685 2026] [security2:error] [pid 11274:tid 11454] [client 20.52.41.200:4944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/file.php"] [unique_id "apK-l2bX5DA3XO6e_qRpAgAAARQ"]
[Sat Aug 29 05:12:23.356758 2026] [security2:error] [pid 1321:tid 1591] [client 20.52.41.200:2674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-blog.php"] [unique_id "apK-l2jCPtor9NZ-byQMQwAABqI"]
[Sat Aug 29 05:12:23.358773 2026] [security2:error] [pid 1321:tid 1506] [client 158.158.54.35:15079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wp-admin/index.php"] [unique_id "apK-l2jCPtor9NZ-byQMRAAABk4"]
[Sat Aug 29 05:12:23.368024 2026] [security2:error] [pid 11274:tid 11526] [client 20.48.250.41:25476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/w1px.php"] [unique_id "apK-l2bX5DA3XO6e_qRpAwAAAVs"]
[Sat Aug 29 05:12:23.384886 2026] [security2:error] [pid 11274:tid 11524] [client 20.63.219.114:12625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/post.php"] [unique_id "apK-l2bX5DA3XO6e_qRpBAAAAVk"]
[Sat Aug 29 05:12:23.387527 2026] [security2:error] [pid 1321:tid 1609] [client 40.83.93.50:8593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/ds.php"] [unique_id "apK-l2jCPtor9NZ-byQMRQAABrQ"]
[Sat Aug 29 05:12:23.389082 2026] [security2:error] [pid 11274:tid 11513] [client 20.48.160.90:52094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/tf.php"] [unique_id "apK-l2bX5DA3XO6e_qRpBQAAAU4"]
[Sat Aug 29 05:12:23.394604 2026] [security2:error] [pid 11274:tid 11445] [client 20.48.160.90:61628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/zfqipfss.php"] [unique_id "apK-l2bX5DA3XO6e_qRpBgAAAQs"]
[Sat Aug 29 05:12:23.403113 2026] [security2:error] [pid 11274:tid 11444] [client 4.205.62.107:63892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/app_local.php"] [unique_id "apK-l2bX5DA3XO6e_qRpBwAAAQo"]
[Sat Aug 29 05:12:23.408100 2026] [security2:error] [pid 11274:tid 11449] [client 20.48.251.3:38159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/wp-konfig.backup.php"] [unique_id "apK-l2bX5DA3XO6e_qRpCAAAAQ8"]
[Sat Aug 29 05:12:23.416589 2026] [security2:error] [pid 11274:tid 11480] [client 20.48.160.90:50330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/em.php"] [unique_id "apK-l2bX5DA3XO6e_qRpCQAAAS0"]
[Sat Aug 29 05:12:23.420128 2026] [security2:error] [pid 1321:tid 1504] [client 106.222.207.18:15839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.207.222.106.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "doctoranddog.com"] [uri "/xmlrpc.php"] [unique_id "apK-l2jCPtor9NZ-byQMRwAABkw"]
[Sat Aug 29 05:12:23.420237 2026] [security2:error] [pid 1321:tid 1504] [client 106.222.207.18:15839] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "doctoranddog.com"] [uri "/xmlrpc.php"] [unique_id "apK-l2jCPtor9NZ-byQMRwAABkw"]
[Sat Aug 29 05:12:23.428429 2026] [security2:error] [pid 1321:tid 1525] [client 20.104.18.15:29101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/132.php"] [unique_id "apK-l2jCPtor9NZ-byQMSAAABmE"]
[Sat Aug 29 05:12:23.433828 2026] [security2:error] [pid 1321:tid 1502] [client 158.23.147.79:39159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/cong.php"] [unique_id "apK-l2jCPtor9NZ-byQMSQAABko"]
[Sat Aug 29 05:12:23.463907 2026] [security2:error] [pid 11274:tid 11569] [client 20.48.250.41:36122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/galer.php"] [unique_id "apK-l2bX5DA3XO6e_qRpCwAAAYU"]
[Sat Aug 29 05:12:23.477932 2026] [security2:error] [pid 1321:tid 1542] [client 20.48.250.41:24437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/ms.php"] [unique_id "apK-l2jCPtor9NZ-byQMSwAABnI"]
[Sat Aug 29 05:12:23.479430 2026] [security2:error] [pid 11274:tid 11500] [client 4.205.62.107:59094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/ws79.php"] [unique_id "apK-l2bX5DA3XO6e_qRpDAAAAUE"]
[Sat Aug 29 05:12:23.499448 2026] [security2:error] [pid 11274:tid 11506] [client 4.205.62.107:63012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/env.php"] [unique_id "apK-l2bX5DA3XO6e_qRpDgAAAUc"]
[Sat Aug 29 05:12:23.500333 2026] [security2:error] [pid 11274:tid 11517] [client 158.23.184.117:61546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/wp-includes/PHPMailer.php"] [unique_id "apK-l2bX5DA3XO6e_qRpDwAAAVI"]
[Sat Aug 29 05:12:23.506926 2026] [security2:error] [pid 11274:tid 11534] [client 20.104.18.15:29179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/os.php"] [unique_id "apK-l2bX5DA3XO6e_qRpEAAAAWM"]
[Sat Aug 29 05:12:23.522384 2026] [security2:error] [pid 11274:tid 11499] [client 68.155.159.216:56709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/lock.php"] [unique_id "apK-l2bX5DA3XO6e_qRpEQAAAUA"]
[Sat Aug 29 05:12:23.523472 2026] [security2:error] [pid 1321:tid 1532] [client 20.48.160.90:31427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/px.php"] [unique_id "apK-l2jCPtor9NZ-byQMTAAABmg"]
[Sat Aug 29 05:12:23.523749 2026] [security2:error] [pid 1321:tid 1610] [client 20.48.250.41:39886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/wp-link10.php"] [unique_id "apK-l2jCPtor9NZ-byQMTQAABrU"]
[Sat Aug 29 05:12:23.531622 2026] [security2:error] [pid 11274:tid 11504] [client 20.48.160.90:61632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.beginnergolfguide.net"] [uri "/zrjuyoos.php"] [unique_id "apK-l2bX5DA3XO6e_qRpEgAAAUU"]
[Sat Aug 29 05:12:23.533871 2026] [security2:error] [pid 11274:tid 11560] [client 20.48.251.3:38167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK-l2bX5DA3XO6e_qRpEwAAAXw"]
[Sat Aug 29 05:12:23.535538 2026] [security2:error] [pid 11274:tid 11541] [client 20.151.200.44:55735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/tanjiro.php"] [unique_id "apK-l2bX5DA3XO6e_qRpFAAAAWo"]
[Sat Aug 29 05:12:23.573644 2026] [security2:error] [pid 11274:tid 11464] [client 20.48.160.90:23761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/dvve.php"] [unique_id "apK-l2bX5DA3XO6e_qRpFQAAAR4"]
[Sat Aug 29 05:12:23.584087 2026] [security2:error] [pid 1321:tid 1557] [client 4.205.62.107:6888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/requirements.php"] [unique_id "apK-l2jCPtor9NZ-byQMTgAABoA"]
[Sat Aug 29 05:12:23.584537 2026] [security2:error] [pid 11274:tid 11546] [client 20.104.49.130:36768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.timportlock.net"] [uri "/k.php"] [unique_id "apK-l2bX5DA3XO6e_qRpFgAAAW4"]
[Sat Aug 29 05:12:23.597147 2026] [security2:error] [pid 11274:tid 11479] [client 20.196.209.81:2042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/alumni_reg.php"] [unique_id "apK-l2bX5DA3XO6e_qRpFwAAASw"]
[Sat Aug 29 05:12:23.597440 2026] [security2:error] [pid 1321:tid 1518] [client 20.48.250.41:25506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/to.php"] [unique_id "apK-l2jCPtor9NZ-byQMUAAABlo"]
[Sat Aug 29 05:12:23.607587 2026] [security2:error] [pid 11274:tid 11497] [client 74.248.24.12:39246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/ahax.php"] [unique_id "apK-l2bX5DA3XO6e_qRpGQAAAT4"]
[Sat Aug 29 05:12:23.615995 2026] [security2:error] [pid 1321:tid 1584] [client 20.48.250.41:36835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/baixy.php"] [unique_id "apK-l2jCPtor9NZ-byQMUQAABps"]
[Sat Aug 29 05:12:23.635471 2026] [security2:error] [pid 1321:tid 1522] [client 20.48.250.41:24511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/zxekqlxb.php"] [unique_id "apK-l2jCPtor9NZ-byQMUgAABl4"]
[Sat Aug 29 05:12:23.636222 2026] [security2:error] [pid 1321:tid 1490] [client 158.23.147.79:60204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/log-mama/function.php"] [unique_id "apK-l2jCPtor9NZ-byQMUwAABj4"]
[Sat Aug 29 05:12:23.644323 2026] [security2:error] [pid 1321:tid 1526] [client 158.23.184.117:61533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/wp-content/upgrade/alfanew.php7"] [unique_id "apK-l2jCPtor9NZ-byQMVAAABmI"]
[Sat Aug 29 05:12:23.655787 2026] [security2:error] [pid 1321:tid 1567] [client 68.155.159.216:1847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK-l2jCPtor9NZ-byQMVQAABoo"]
[Sat Aug 29 05:12:23.660459 2026] [security2:error] [pid 1321:tid 1516] [client 20.48.251.3:38710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/nlnub.php"] [unique_id "apK-l2jCPtor9NZ-byQMVwAABlg"]
[Sat Aug 29 05:12:23.696275 2026] [security2:error] [pid 11274:tid 11558] [client 20.48.160.90:48348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/jg.php"] [unique_id "apK-l2bX5DA3XO6e_qRpHQAAAXo"]
[Sat Aug 29 05:12:23.707651 2026] [security2:error] [pid 1321:tid 1612] [client 158.158.54.35:22598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "apK-l2jCPtor9NZ-byQMWAAABrc"]
[Sat Aug 29 05:12:23.711589 2026] [security2:error] [pid 11274:tid 11473] [client 20.48.250.41:39933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/ww.php"] [unique_id "apK-l2bX5DA3XO6e_qRpHwAAASc"]
[Sat Aug 29 05:12:23.719152 2026] [security2:error] [pid 11274:tid 11518] [client 20.48.160.90:28791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/doo.php"] [unique_id "apK-l2bX5DA3XO6e_qRpIAAAAVM"]
[Sat Aug 29 05:12:23.736652 2026] [security2:error] [pid 11274:tid 11487] [client 20.240.128.207:26331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/bi.php"] [unique_id "apK-l2bX5DA3XO6e_qRpIQAAATQ"]
[Sat Aug 29 05:12:23.768539 2026] [security2:error] [pid 1321:tid 1536] [client 20.63.219.114:14010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/csv.php"] [unique_id "apK-l2jCPtor9NZ-byQMWQAABmw"]
[Sat Aug 29 05:12:23.771551 2026] [security2:error] [pid 1321:tid 1510] [client 20.48.250.41:24428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/init.php"] [unique_id "apK-l2jCPtor9NZ-byQMWgAABlI"]
[Sat Aug 29 05:12:23.773057 2026] [security2:error] [pid 1321:tid 1543] [client 20.104.49.130:45759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/1xmomo.php"] [unique_id "apK-l2jCPtor9NZ-byQMWwAABnM"]
[Sat Aug 29 05:12:23.787836 2026] [security2:error] [pid 11274:tid 11471] [client 20.48.250.41:36390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/ava.php"] [unique_id "apK-l2bX5DA3XO6e_qRpIgAAASU"]
[Sat Aug 29 05:12:23.789669 2026] [security2:error] [pid 11274:tid 11495] [client 4.205.62.107:63342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/lala.php"] [unique_id "apK-l2bX5DA3XO6e_qRpIwAAATw"]
[Sat Aug 29 05:12:23.789869 2026] [security2:error] [pid 1321:tid 1593] [client 20.48.251.3:38670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/wpver.php"] [unique_id "apK-l2jCPtor9NZ-byQMXQAABqQ"]
[Sat Aug 29 05:12:23.791367 2026] [security2:error] [pid 11274:tid 11501] [client 158.23.184.117:50346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/admin/alfa-rex.php"] [unique_id "apK-l2bX5DA3XO6e_qRpJAAAAUI"]
[Sat Aug 29 05:12:23.795391 2026] [security2:error] [pid 11274:tid 11543] [client 20.48.250.41:25494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/thui.php"] [unique_id "apK-l2bX5DA3XO6e_qRpJQAAAWs"]
[Sat Aug 29 05:12:23.802670 2026] [security2:error] [pid 1321:tid 1527] [client 20.52.41.200:2176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/xxx.php"] [unique_id "apK-l2jCPtor9NZ-byQMXgAABmM"]
[Sat Aug 29 05:12:23.805276 2026] [security2:error] [pid 1321:tid 1498] [client 158.158.54.35:15063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/radio.php"] [unique_id "apK-l2jCPtor9NZ-byQMXwAABkY"]
[Sat Aug 29 05:12:23.824581 2026] [security2:error] [pid 1321:tid 1547] [client 20.52.41.200:4544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK-l2jCPtor9NZ-byQMYAAABnY"]
[Sat Aug 29 05:12:23.837517 2026] [security2:error] [pid 11274:tid 11565] [client 158.23.147.79:7123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/wp-includes/css/index.php"] [unique_id "apK-l2bX5DA3XO6e_qRpJgAAAYE"]
[Sat Aug 29 05:12:23.843989 2026] [security2:error] [pid 11274:tid 11526] [client 20.48.160.90:31360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/yj.php"] [unique_id "apK-l2bX5DA3XO6e_qRpJwAAAVs"]
[Sat Aug 29 05:12:23.855867 2026] [security2:error] [pid 11274:tid 11513] [client 20.48.160.90:23789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/adminer-4.6.6.php"] [unique_id "apK-l2bX5DA3XO6e_qRpKAAAAU4"]
[Sat Aug 29 05:12:23.866977 2026] [security2:error] [pid 1321:tid 1607] [client 20.104.104.62:8979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/gaje.php"] [unique_id "apK-l2jCPtor9NZ-byQMYgAABrI"]
[Sat Aug 29 05:12:23.876084 2026] [security2:error] [pid 11274:tid 11452] [client 20.197.61.180:10178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/wp-2019.php"] [unique_id "apK-l2bX5DA3XO6e_qRpKgAAARI"]
[Sat Aug 29 05:12:23.895857 2026] [security2:error] [pid 11274:tid 11540] [client 40.83.93.50:9043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/GOD.php"] [unique_id "apK-l2bX5DA3XO6e_qRpKwAAAWk"]
[Sat Aug 29 05:12:23.902941 2026] [security2:error] [pid 11274:tid 11480] [client 20.48.250.41:39923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/w1px.php"] [unique_id "apK-l2bX5DA3XO6e_qRpLAAAAS0"]
[Sat Aug 29 05:12:23.939802 2026] [security2:error] [pid 11274:tid 11555] [client 20.48.251.3:38535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/autogooey.php"] [unique_id "apK-l2bX5DA3XO6e_qRpMAAAAXc"]
[Sat Aug 29 05:12:23.946592 2026] [security2:error] [pid 11274:tid 11451] [client 34.169.171.101:45840] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/stage/.env"] [unique_id "apK-l2bX5DA3XO6e_qRpMgAAARE"]
[Sat Aug 29 05:12:23.946742 2026] [security2:error] [pid 1321:tid 1583] [client 34.169.171.101:45814] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/backend-api/.env"] [unique_id "apK-l2jCPtor9NZ-byQMZQAABpo"]
[Sat Aug 29 05:12:23.947217 2026] [security2:error] [pid 1321:tid 1515] [client 34.169.171.101:45790] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/back/.env"] [unique_id "apK-l2jCPtor9NZ-byQMZgAABlc"]
[Sat Aug 29 05:12:23.948725 2026] [security2:error] [pid 11274:tid 11449] [client 158.23.184.117:61522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/wp-content/export.php"] [unique_id "apK-l2bX5DA3XO6e_qRpMwAAAQ8"]
[Sat Aug 29 05:12:23.948766 2026] [security2:error] [pid 1321:tid 1609] [client 167.71.109.225:39010] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1609"] [id "900942"] [msg "Invalid WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.path=///"] [hostname "dev.strangeworx.com"] [uri "/"] [unique_id "apK-l2jCPtor9NZ-byQMYwAABrQ"]
[Sat Aug 29 05:12:23.950187 2026] [security2:error] [pid 11274:tid 11536] [client 34.169.171.101:45846] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/test/.env"] [unique_id "apK-l2bX5DA3XO6e_qRpNAAAAWU"]
[Sat Aug 29 05:12:23.950265 2026] [security2:error] [pid 11274:tid 11536] [client 34.169.171.101:45846] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "mail.forensicengineernj.com"] [uri "/test/.env"] [unique_id "apK-l2bX5DA3XO6e_qRpNAAAAWU"]
[Sat Aug 29 05:12:23.952058 2026] [security2:error] [pid 1321:tid 1574] [client 34.169.171.101:45910] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.forensicengineernj.com"] [uri "/backend/.env.local"] [unique_id "apK-l2jCPtor9NZ-byQMZwAABpE"]
[Sat Aug 29 05:12:23.953893 2026] [security2:error] [pid 1321:tid 1603] [client 34.169.171.101:45908] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/app/api/.env"] [unique_id "apK-l2jCPtor9NZ-byQMaAAABq4"]
[Sat Aug 29 05:12:23.956404 2026] [security2:error] [pid 11274:tid 11522] [client 34.169.171.101:45828] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.forensicengineernj.com"] [uri "/prod/.env"] [unique_id "apK-l2bX5DA3XO6e_qRpNQAAAVc"]
[Sat Aug 29 05:12:23.956876 2026] [security2:error] [pid 1321:tid 1564] [client 34.169.171.101:45888] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/internal/.env"] [unique_id "apK-l2jCPtor9NZ-byQMaQAABoc"]
[Sat Aug 29 05:12:23.958036 2026] [security2:error] [pid 1321:tid 1605] [client 34.169.171.101:45878] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/node/.env"] [unique_id "apK-l2jCPtor9NZ-byQMagAABrA"]
[Sat Aug 29 05:12:23.961821 2026] [security2:error] [pid 11274:tid 11466] [client 34.169.171.101:45932] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/backend/api/.env"] [unique_id "apK-l2bX5DA3XO6e_qRpNgAAASA"]
[Sat Aug 29 05:12:23.961903 2026] [security2:error] [pid 11274:tid 11466] [client 34.169.171.101:45932] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "mail.forensicengineernj.com"] [uri "/backend/api/.env"] [unique_id "apK-l2bX5DA3XO6e_qRpNgAAASA"]
[Sat Aug 29 05:12:23.962217 2026] [security2:error] [pid 1321:tid 1563] [client 34.169.171.101:45898] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.forensicengineernj.com"] [uri "/app/backend/.env"] [unique_id "apK-l2jCPtor9NZ-byQMawAABoY"]
[Sat Aug 29 05:12:23.964925 2026] [security2:error] [pid 1321:tid 1566] [client 34.169.171.101:45862] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.forensicengineernj.com"] [uri "/private/.env"] [unique_id "apK-l2jCPtor9NZ-byQMbAAABok"]
[Sat Aug 29 05:12:23.966693 2026] [security2:error] [pid 11274:tid 11469] [client 68.155.159.216:49141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK-l2bX5DA3XO6e_qRpOAAAASM"]
[Sat Aug 29 05:12:23.967437 2026] [security2:error] [pid 11274:tid 11554] [client 34.169.171.101:45986] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/src/api/.env"] [unique_id "apK-l2bX5DA3XO6e_qRpOQAAAXY"]
[Sat Aug 29 05:12:23.972009 2026] [security2:error] [pid 1321:tid 1615] [client 34.169.171.101:45786] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/development/.env"] [unique_id "apK-l2jCPtor9NZ-byQMbQAABro"]
[Sat Aug 29 05:12:23.972718 2026] [security2:error] [pid 11274:tid 11499] [client 20.48.250.41:24528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/term.php"] [unique_id "apK-l2bX5DA3XO6e_qRpOgAAAUA"]
[Sat Aug 29 05:12:23.980399 2026] [security2:error] [pid 1321:tid 1506] [client 34.169.171.101:45994] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.forensicengineernj.com"] [uri "/server/.env.local"] [unique_id "apK-l2jCPtor9NZ-byQMcwAABk4"]
[Sat Aug 29 05:12:23.981230 2026] [security2:error] [pid 1321:tid 1496] [client 34.169.171.101:45856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/services/.env"] [unique_id "apK-l2jCPtor9NZ-byQMcQAABkQ"]
[Sat Aug 29 05:12:23.981876 2026] [security2:error] [pid 1321:tid 1604] [client 34.169.171.101:45790] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/apps/api/.env"] [unique_id "apK-l2jCPtor9NZ-byQMdQAABq8"]
[Sat Aug 29 05:12:23.981887 2026] [security2:error] [pid 1321:tid 1532] [client 20.48.160.90:48341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/zi.php"] [unique_id "apK-l2jCPtor9NZ-byQMdgAABmg"]
[Sat Aug 29 05:12:23.982689 2026] [security2:error] [pid 1321:tid 1601] [client 34.169.171.101:45802] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/apps/backend/.env"] [unique_id "apK-l2jCPtor9NZ-byQMdwAABqw"]
[Sat Aug 29 05:12:23.985435 2026] [security2:error] [pid 11274:tid 11560] [client 34.169.171.101:45846] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.forensicengineernj.com"] [uri "/database/.env"] [unique_id "apK-l2bX5DA3XO6e_qRpPQAAAXw"]
[Sat Aug 29 05:12:23.990839 2026] [security2:error] [pid 11274:tid 11541] [client 20.48.250.41:36368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/gdn.php"] [unique_id "apK-l2bX5DA3XO6e_qRpPgAAAWo"]
[Sat Aug 29 05:12:24.002350 2026] [security2:error] [pid 1321:tid 1499] [client 4.205.62.107:27737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/app/Models/Hrm/Employee.php"] [unique_id "apK-mGjCPtor9NZ-byQMewAABkc"]
[Sat Aug 29 05:12:24.002609 2026] [security2:error] [pid 1321:tid 1584] [client 20.48.160.90:29160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/gelap1.php"] [unique_id "apK-mGjCPtor9NZ-byQMfAAABps"]
[Sat Aug 29 05:12:24.004019 2026] [security2:error] [pid 11274:tid 11514] [client 34.169.171.101:45986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.171.169.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.forensicengineernj.com"] [uri "/config/env.php"] [unique_id "apK-mGbX5DA3XO6e_qRpQAAAAU8"]
[Sat Aug 29 05:12:24.004115 2026] [security2:error] [pid 11274:tid 11514] [client 34.169.171.101:45986] ModSecurity: Warning. Matched phrase "Disco" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "409"] [hostname "mail.forensicengineernj.com"] [uri "/config/env.php"] [unique_id "apK-mGbX5DA3XO6e_qRpQAAAAU8"]
[Sat Aug 29 05:12:24.028795 2026] [security2:error] [pid 1321:tid 1519] [client 68.155.159.216:38545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/index/function.php"] [unique_id "apK-mGjCPtor9NZ-byQMgwAABls"]
[Sat Aug 29 05:12:24.033046 2026] [security2:error] [pid 1321:tid 1576] [client 167.71.109.225:39010] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^/(?![/\\\\x5c])" against "ARGS:requests.requests.path" required. [file "/opt/mod_security/hg_rules.conf"] [line "1609"] [id "900942"] [msg "Invalid WordPress REST batch path (rest_route)"] [data "ARGS:requests.requests.path=:"] [hostname "dev.strangeworx.com"] [uri "/"] [unique_id "apK-mGjCPtor9NZ-byQMhQAABpM"]
[Sat Aug 29 05:12:24.040537 2026] [security2:error] [pid 11274:tid 11490] [client 20.48.250.41:39847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/to.php"] [unique_id "apK-mGbX5DA3XO6e_qRpRgAAATc"]
[Sat Aug 29 05:12:24.041926 2026] [security2:error] [pid 11274:tid 11529] [client 20.48.250.41:25533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/Jcrop.php"] [unique_id "apK-mGbX5DA3XO6e_qRpRwAAAV4"]
[Sat Aug 29 05:12:24.066706 2026] [security2:error] [pid 11274:tid 11545] [client 20.48.251.3:38555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/aws_keys.php"] [unique_id "apK-mGbX5DA3XO6e_qRpSAAAAW0"]
[Sat Aug 29 05:12:24.076722 2026] [security2:error] [pid 1321:tid 1525] [client 20.196.209.81:2003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/colors.php"] [unique_id "apK-mGjCPtor9NZ-byQMhgAABmE"]
[Sat Aug 29 05:12:24.088232 2026] [security2:error] [pid 11274:tid 11511] [client 20.104.104.62:46217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/wp-admin/zwso.php"] [unique_id "apK-mGbX5DA3XO6e_qRpSQAAAUw"]
[Sat Aug 29 05:12:24.099016 2026] [security2:error] [pid 1321:tid 1536] [client 57.141.14.12:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/page/43/"] [unique_id "apK-mGjCPtor9NZ-byQMiQAABmw"]
[Sat Aug 29 05:12:24.100169 2026] [security2:error] [pid 1321:tid 1509] [client 158.23.184.117:61515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/new.php"] [unique_id "apK-mGjCPtor9NZ-byQMigAABlE"]
[Sat Aug 29 05:12:24.102670 2026] [security2:error] [pid 11274:tid 11445] [client 60.243.207.176:65013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK-mGbX5DA3XO6e_qRpSgAAAQs"]
[Sat Aug 29 05:12:24.102738 2026] [security2:error] [pid 11274:tid 11445] [client 60.243.207.176:65013] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK-mGbX5DA3XO6e_qRpSgAAAQs"]
[Sat Aug 29 05:12:24.118213 2026] [security2:error] [pid 11274:tid 11477] [client 4.205.62.107:6100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/aws_credentials.php"] [unique_id "apK-mGbX5DA3XO6e_qRpTAAAASs"]
[Sat Aug 29 05:12:24.119006 2026] [security2:error] [pid 1321:tid 1597] [client 74.248.24.12:31893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/shell.php"] [unique_id "apK-mGjCPtor9NZ-byQMiwAABqg"]
[Sat Aug 29 05:12:24.120308 2026] [security2:error] [pid 11274:tid 11558] [client 20.48.160.90:51976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/ue.php"] [unique_id "apK-mGbX5DA3XO6e_qRpTQAAAXo"]
[Sat Aug 29 05:12:24.124608 2026] [security2:error] [pid 11274:tid 11473] [client 103.215.74.26:8610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.74.215.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.com"] [uri "/wp/index.php"] [unique_id "apK-mGbX5DA3XO6e_qRpTgAAASc"], referer: https://kglogisticsinc.com/wp/wp-admin/
[Sat Aug 29 05:12:24.139942 2026] [security2:error] [pid 11274:tid 11520] [client 20.48.160.90:28736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/rsjlrria.php"] [unique_id "apK-mGbX5DA3XO6e_qRpTwAAAVU"]
[Sat Aug 29 05:12:24.146851 2026] [security2:error] [pid 11274:tid 11568] [client 20.48.250.41:24357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/aaa.php"] [unique_id "apK-mGbX5DA3XO6e_qRpUQAAAYQ"]
[Sat Aug 29 05:12:24.146875 2026] [security2:error] [pid 11274:tid 11456] [client 20.48.250.41:36126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/f2.php"] [unique_id "apK-mGbX5DA3XO6e_qRpUAAAARY"]
[Sat Aug 29 05:12:24.148829 2026] [security2:error] [pid 1321:tid 1547] [client 68.155.159.216:62773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK-mGjCPtor9NZ-byQMjAAABnY"]
[Sat Aug 29 05:12:24.152021 2026] [security2:error] [pid 1321:tid 1592] [client 158.158.54.35:5889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/upload.php"] [unique_id "apK-mGjCPtor9NZ-byQMjQAABqM"]
[Sat Aug 29 05:12:24.179382 2026] [http2:warn] [pid 1018003:tid 1018194] [client 57.141.14.53:57820] h2_stream(1018003-367-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:12:24.195758 2026] [security2:error] [pid 11274:tid 11489] [client 20.48.251.3:38539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/adminer-4.7.6-en.php"] [unique_id "apK-mGbX5DA3XO6e_qRpUgAAATY"]
[Sat Aug 29 05:12:24.207272 2026] [security2:error] [pid 11274:tid 11538] [client 4.205.62.107:64210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/temp.php"] [unique_id "apK-mGbX5DA3XO6e_qRpUwAAAWc"]
[Sat Aug 29 05:12:24.218795 2026] [security2:error] [pid 11274:tid 11483] [client 20.48.250.41:25485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/ws58.php"] [unique_id "apK-mGbX5DA3XO6e_qRpVAAAATA"]
[Sat Aug 29 05:12:24.225891 2026] [security2:error] [pid 1321:tid 1599] [client 20.48.250.41:39827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/thui.php"] [unique_id "apK-mGjCPtor9NZ-byQMjwAABqo"]
[Sat Aug 29 05:12:24.237390 2026] [security2:error] [pid 11274:tid 11572] [client 20.240.128.207:24845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/cc.php"] [unique_id "apK-mGbX5DA3XO6e_qRpVQAAAYg"]
[Sat Aug 29 05:12:24.245390 2026] [security2:error] [pid 11274:tid 11543] [client 158.23.184.117:61543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/wp-content/plugins/revslider/admin.php"] [unique_id "apK-mGbX5DA3XO6e_qRpVgAAAWs"]
[Sat Aug 29 05:12:24.253226 2026] [security2:error] [pid 11274:tid 11465] [client 158.158.54.35:1476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/item.php"] [unique_id "apK-mGbX5DA3XO6e_qRpVwAAAR8"]
[Sat Aug 29 05:12:24.254333 2026] [security2:error] [pid 1321:tid 1590] [client 20.63.219.114:12670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/fox.php"] [unique_id "apK-mGjCPtor9NZ-byQMkAAABqE"]
[Sat Aug 29 05:12:24.262430 2026] [security2:error] [pid 11274:tid 11559] [client 20.48.160.90:31415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/nv.php"] [unique_id "apK-mGbX5DA3XO6e_qRpWAAAAXs"]
[Sat Aug 29 05:12:24.265024 2026] [security2:error] [pid 11274:tid 11470] [client 20.52.41.200:5179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/gmo.php"] [unique_id "apK-mGbX5DA3XO6e_qRpWQAAASQ"]
[Sat Aug 29 05:12:24.279229 2026] [security2:error] [pid 1321:tid 1607] [client 20.48.160.90:23780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/AxAo.php"] [unique_id "apK-mGjCPtor9NZ-byQMkgAABrI"]
[Sat Aug 29 05:12:24.280257 2026] [security2:error] [pid 11274:tid 11540] [client 68.155.159.216:7116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK-mGbX5DA3XO6e_qRpWwAAAWk"]
[Sat Aug 29 05:12:24.283242 2026] [security2:error] [pid 1321:tid 1550] [client 68.155.159.216:23468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK-mGjCPtor9NZ-byQMkwAABnk"]
[Sat Aug 29 05:12:24.285406 2026] [security2:error] [pid 11274:tid 11461] [client 158.23.147.79:14175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK-mGbX5DA3XO6e_qRpXAAAARs"]
[Sat Aug 29 05:12:24.289304 2026] [security2:error] [pid 1321:tid 1504] [client 68.155.159.216:56790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK-mGjCPtor9NZ-byQMlAAABkw"]
[Sat Aug 29 05:12:24.291814 2026] [security2:error] [pid 1321:tid 1502] [client 20.48.250.41:36120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/grsiuk.php"] [unique_id "apK-mGjCPtor9NZ-byQMlQAABko"]
[Sat Aug 29 05:12:24.315783 2026] [security2:error] [pid 11274:tid 11472] [client 20.104.104.62:48092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/Contrller.php"] [unique_id "apK-mGbX5DA3XO6e_qRpXQAAASY"]
[Sat Aug 29 05:12:24.323807 2026] [security2:error] [pid 1321:tid 1542] [client 20.48.251.3:38157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/api.php"] [unique_id "apK-mGjCPtor9NZ-byQMmAAABnI"]
[Sat Aug 29 05:12:24.329030 2026] [security2:error] [pid 11274:tid 11488] [client 20.48.250.41:24477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/xsox.php"] [unique_id "apK-mGbX5DA3XO6e_qRpXgAAATU"]
[Sat Aug 29 05:12:24.378559 2026] [security2:error] [pid 11274:tid 11565] [client 40.83.93.50:8771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/ggfi.php"] [unique_id "apK-mGbX5DA3XO6e_qRpYgAAAYE"]
[Sat Aug 29 05:12:24.386573 2026] [security2:error] [pid 11274:tid 11459] [client 20.48.250.41:39910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/Jcrop.php"] [unique_id "apK-mGbX5DA3XO6e_qRpZAAAARk"]
[Sat Aug 29 05:12:24.392279 2026] [security2:error] [pid 11274:tid 11522] [client 158.23.184.117:50331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/wp-content/images/uploads/admin.php"] [unique_id "apK-mGbX5DA3XO6e_qRpZQAAAVc"]
[Sat Aug 29 05:12:24.399508 2026] [security2:error] [pid 11274:tid 11484] [client 20.48.160.90:48334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/jw.php"] [unique_id "apK-mGbX5DA3XO6e_qRpaAAAATE"]
[Sat Aug 29 05:12:24.404173 2026] [security2:error] [pid 11274:tid 11563] [client 20.48.250.41:25545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/xs.php"] [unique_id "apK-mGbX5DA3XO6e_qRpaQAAAX8"]
[Sat Aug 29 05:12:24.437303 2026] [security2:error] [pid 11274:tid 11492] [client 20.48.250.41:36738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/wp-scr1pts.php"] [unique_id "apK-mGbX5DA3XO6e_qRpagAAATk"]
[Sat Aug 29 05:12:24.438204 2026] [security2:error] [pid 11274:tid 11494] [client 20.48.160.90:28757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/class17.php"] [unique_id "apK-mGbX5DA3XO6e_qRpawAAATs"]
[Sat Aug 29 05:12:24.452212 2026] [security2:error] [pid 11274:tid 11515] [client 20.48.251.3:38532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/txets.php"] [unique_id "apK-mGbX5DA3XO6e_qRpbAAAAVA"]
[Sat Aug 29 05:12:24.456856 2026] [security2:error] [pid 1321:tid 1601] [client 20.151.200.44:55727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/Rk41.php"] [unique_id "apK-mGjCPtor9NZ-byQMngAABqw"]
[Sat Aug 29 05:12:24.463645 2026] [security2:error] [pid 1321:tid 1492] [client 20.48.250.41:24552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/lkui.php"] [unique_id "apK-mGjCPtor9NZ-byQMnwAABkA"]
[Sat Aug 29 05:12:24.464957 2026] [security2:error] [pid 1321:tid 1491] [client 20.104.104.62:8990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/Zeiss.php"] [unique_id "apK-mGjCPtor9NZ-byQMoAAABj8"]
[Sat Aug 29 05:12:24.499348 2026] [security2:error] [pid 1321:tid 1615] [client 20.196.209.81:2038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/Js.php"] [unique_id "apK-mGjCPtor9NZ-byQMoQAABro"]
[Sat Aug 29 05:12:24.537622 2026] [security2:error] [pid 11274:tid 11479] [client 158.23.184.117:4759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/tools.php"] [unique_id "apK-mGbX5DA3XO6e_qRpbwAAASw"]
[Sat Aug 29 05:12:24.537724 2026] [security2:error] [pid 1321:tid 1600] [client 197.232.63.170:51980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 170.63.232.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK-mGjCPtor9NZ-byQMogAABqs"]
[Sat Aug 29 05:12:24.537827 2026] [security2:error] [pid 1321:tid 1600] [client 197.232.63.170:51980] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK-mGjCPtor9NZ-byQMogAABqs"]
[Sat Aug 29 05:12:24.551483 2026] [security2:error] [pid 11274:tid 11473] [client 4.205.62.107:61705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/ws62.php"] [unique_id "apK-mGbX5DA3XO6e_qRpcgAAASc"]
[Sat Aug 29 05:12:24.554480 2026] [security2:error] [pid 11274:tid 11493] [client 20.48.160.90:31482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/or.php"] [unique_id "apK-mGbX5DA3XO6e_qRpcwAAATo"]
[Sat Aug 29 05:12:24.565169 2026] [security2:error] [pid 1321:tid 1507] [client 20.52.41.200:2739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/tool.php"] [unique_id "apK-mGjCPtor9NZ-byQMowAABk8"]
[Sat Aug 29 05:12:24.575044 2026] [security2:error] [pid 11274:tid 11568] [client 20.48.250.41:36105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/num.php"] [unique_id "apK-mGbX5DA3XO6e_qRpdAAAAYQ"]
[Sat Aug 29 05:12:24.580579 2026] [security2:error] [pid 1321:tid 1518] [client 20.48.251.3:37977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/public/mah.php.php"] [unique_id "apK-mGjCPtor9NZ-byQMpAAABlo"]
[Sat Aug 29 05:12:24.589492 2026] [security2:error] [pid 11274:tid 11495] [client 20.48.250.41:39887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/ws58.php"] [unique_id "apK-mGbX5DA3XO6e_qRpdQAAATw"]
[Sat Aug 29 05:12:24.590611 2026] [security2:error] [pid 11274:tid 11501] [client 20.48.160.90:23796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/okxoby.php"] [unique_id "apK-mGbX5DA3XO6e_qRpdgAAAUI"]
[Sat Aug 29 05:12:24.598231 2026] [security2:error] [pid 11274:tid 11489] [client 20.104.18.15:29183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/v22.php"] [unique_id "apK-mGbX5DA3XO6e_qRpeAAAATY"]
[Sat Aug 29 05:12:24.612653 2026] [security2:error] [pid 1321:tid 1499] [client 20.48.250.41:24527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "apK-mGjCPtor9NZ-byQMpgAABkc"]
[Sat Aug 29 05:12:24.612757 2026] [security2:error] [pid 11274:tid 11466] [client 20.197.61.180:12872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/menu.php"] [unique_id "apK-mGbX5DA3XO6e_qRpegAAASA"]
[Sat Aug 29 05:12:24.614984 2026] [security2:error] [pid 11274:tid 11452] [client 61.9.8.103:23302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK-mGbX5DA3XO6e_qRpeQAAARI"]
[Sat Aug 29 05:12:24.615080 2026] [security2:error] [pid 11274:tid 11452] [client 61.9.8.103:23302] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK-mGbX5DA3XO6e_qRpeQAAARI"]
[Sat Aug 29 05:12:24.616115 2026] [security2:error] [pid 1321:tid 1584] [client 4.205.62.107:27724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/public/wp-blog.php"] [unique_id "apK-mGjCPtor9NZ-byQMpwAABps"]
[Sat Aug 29 05:12:24.616961 2026] [security2:error] [pid 1321:tid 1490] [client 20.48.250.41:25498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/zu.php"] [unique_id "apK-mGjCPtor9NZ-byQMqAAABj4"]
[Sat Aug 29 05:12:24.617743 2026] [security2:error] [pid 1321:tid 1501] [client 20.104.49.130:60745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/classwithtostring.php"] [unique_id "apK-mGjCPtor9NZ-byQMqQAABkk"]
[Sat Aug 29 05:12:24.624061 2026] [security2:error] [pid 11274:tid 11509] [client 74.248.24.12:36888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/elp.php"] [unique_id "apK-mGbX5DA3XO6e_qRpewAAAUo"]
[Sat Aug 29 05:12:24.627332 2026] [security2:error] [pid 11274:tid 11483] [client 68.155.159.216:56708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/index/function.php"] [unique_id "apK-mGbX5DA3XO6e_qRpfAAAATA"]
[Sat Aug 29 05:12:24.640433 2026] [security2:error] [pid 11274:tid 11572] [client 20.104.104.62:46257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/ww2.php"] [unique_id "apK-mGbX5DA3XO6e_qRpfQAAAYg"]
[Sat Aug 29 05:12:24.647966 2026] [security2:error] [pid 11274:tid 11543] [client 20.104.18.15:29095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/htio.php"] [unique_id "apK-mGbX5DA3XO6e_qRpfgAAAWs"]
[Sat Aug 29 05:12:24.652578 2026] [security2:error] [pid 11274:tid 11513] [client 4.205.62.107:63020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/xve22.php"] [unique_id "apK-mGbX5DA3XO6e_qRpfwAAAU4"]
[Sat Aug 29 05:12:24.657331 2026] [security2:error] [pid 11274:tid 11551] [client 20.63.219.114:1907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/disagraeosc.php"] [unique_id "apK-mGbX5DA3XO6e_qRpgAAAAXM"]
[Sat Aug 29 05:12:24.675921 2026] [security2:error] [pid 1321:tid 1529] [client 20.151.200.44:27637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/rfi.php"] [unique_id "apK-mGjCPtor9NZ-byQMrAAABmU"]
[Sat Aug 29 05:12:24.682517 2026] [security2:error] [pid 11274:tid 11526] [client 158.23.184.117:61529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/wp-content/uploads/my.php"] [unique_id "apK-mGbX5DA3XO6e_qRpgQAAAVs"]
[Sat Aug 29 05:12:24.708202 2026] [security2:error] [pid 1321:tid 1509] [client 20.48.251.3:38567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/linusadmin-phpinfo.php"] [unique_id "apK-mGjCPtor9NZ-byQMrQAABlE"]
[Sat Aug 29 05:12:24.714860 2026] [security2:error] [pid 11274:tid 11521] [client 158.158.54.35:1413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/t.php"] [unique_id "apK-mGbX5DA3XO6e_qRpggAAAVY"]
[Sat Aug 29 05:12:24.716420 2026] [security2:error] [pid 1321:tid 1560] [client 4.205.62.107:6815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/var/www/wallet/index.php"] [unique_id "apK-mGjCPtor9NZ-byQMrwAABoM"]
[Sat Aug 29 05:12:24.717571 2026] [security2:error] [pid 11274:tid 11520] [client 20.52.41.200:4736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/classwithtostring.php"] [unique_id "apK-mGbX5DA3XO6e_qRpgwAAAVU"]
[Sat Aug 29 05:12:24.725762 2026] [security2:error] [pid 11274:tid 11506] [client 20.48.160.90:28783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/esuutzzx.php"] [unique_id "apK-mGbX5DA3XO6e_qRphAAAAUc"]
[Sat Aug 29 05:12:24.736788 2026] [security2:error] [pid 11274:tid 11570] [client 20.240.128.207:8170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/files/index.php"] [unique_id "apK-mGbX5DA3XO6e_qRphQAAAYY"]
[Sat Aug 29 05:12:24.738606 2026] [security2:error] [pid 1321:tid 1547] [client 20.48.160.90:51969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/ile56.php"] [unique_id "apK-mGjCPtor9NZ-byQMsAAABnY"]
[Sat Aug 29 05:12:24.741027 2026] [security2:error] [pid 1321:tid 1599] [client 20.48.250.41:36861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/a4.php"] [unique_id "apK-mGjCPtor9NZ-byQMsQAABqo"]
[Sat Aug 29 05:12:24.750135 2026] [security2:error] [pid 11274:tid 11536] [client 20.104.49.130:57722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/002.php"] [unique_id "apK-mGbX5DA3XO6e_qRphgAAAWU"]
[Sat Aug 29 05:12:24.756331 2026] [security2:error] [pid 11274:tid 11554] [client 158.23.147.79:53994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/bk/index.php"] [unique_id "apK-mGbX5DA3XO6e_qRphwAAAXY"]
[Sat Aug 29 05:12:24.764161 2026] [security2:error] [pid 11274:tid 11459] [client 68.155.159.216:1926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-admin/network/index.php"] [unique_id "apK-mGbX5DA3XO6e_qRpiAAAARk"]
[Sat Aug 29 05:12:24.765709 2026] [security2:error] [pid 11274:tid 11522] [client 20.48.250.41:24491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/motu.php"] [unique_id "apK-mGbX5DA3XO6e_qRpiQAAAVc"]
[Sat Aug 29 05:12:24.779884 2026] [security2:error] [pid 11274:tid 11524] [client 45.83.178.43:57023] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "goodtogo.store"] [uri "/webapp/xmlrpc.php"] [unique_id "apK-mGbX5DA3XO6e_qRpRAAAAVk"]
[Sat Aug 29 05:12:24.786426 2026] [security2:error] [pid 1321:tid 1504] [client 20.104.104.62:46244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/anz.php"] [unique_id "apK-mGjCPtor9NZ-byQMsgAABkw"]
[Sat Aug 29 05:12:24.796431 2026] [security2:error] [pid 1321:tid 1562] [client 158.23.147.79:43335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-includes/js/index.php"] [unique_id "apK-mGjCPtor9NZ-byQMswAABoU"]
[Sat Aug 29 05:12:24.804057 2026] [security2:error] [pid 11274:tid 11492] [client 20.48.250.41:25560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/lanka.php"] [unique_id "apK-mGbX5DA3XO6e_qRpigAAATk"]
[Sat Aug 29 05:12:24.811609 2026] [security2:error] [pid 1321:tid 1542] [client 20.104.18.15:29690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/wp-activate.php"] [unique_id "apK-mGjCPtor9NZ-byQMtAAABnI"]
[Sat Aug 29 05:12:24.829043 2026] [security2:error] [pid 1321:tid 1517] [client 158.23.184.117:61528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/wp-includes/themes/uploads/config.php"] [unique_id "apK-mGjCPtor9NZ-byQMtQAABlk"]
[Sat Aug 29 05:12:24.831879 2026] [security2:error] [pid 11274:tid 11498] [client 20.48.250.41:39839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/xs.php"] [unique_id "apK-mGbX5DA3XO6e_qRpjAAAAT8"]
[Sat Aug 29 05:12:24.832852 2026] [security2:error] [pid 11274:tid 11485] [client 20.104.49.130:56193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/abcd.php"] [unique_id "apK-mGbX5DA3XO6e_qRpjQAAATI"]
[Sat Aug 29 05:12:24.836462 2026] [security2:error] [pid 11274:tid 11529] [client 20.48.251.3:38572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/routes.php"] [unique_id "apK-mGbX5DA3XO6e_qRpjgAAAV4"]
[Sat Aug 29 05:12:24.866817 2026] [security2:error] [pid 1321:tid 1510] [client 40.83.93.50:9070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/alfa-rex.php"] [unique_id "apK-mGjCPtor9NZ-byQMtgAABlI"]
[Sat Aug 29 05:12:24.870484 2026] [security2:error] [pid 11274:tid 11445] [client 20.48.160.90:31428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/emmh.php"] [unique_id "apK-mGbX5DA3XO6e_qRpjwAAAQs"]
[Sat Aug 29 05:12:24.881161 2026] [security2:error] [pid 11274:tid 11558] [client 20.220.204.93:18290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/users.php"] [unique_id "apK-mGbX5DA3XO6e_qRpkAAAAXo"]
[Sat Aug 29 05:12:24.887201 2026] [security2:error] [pid 1321:tid 1532] [client 20.48.160.90:28778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/replace.php"] [unique_id "apK-mGjCPtor9NZ-byQMtwAABmg"]
[Sat Aug 29 05:12:24.898403 2026] [security2:error] [pid 11274:tid 11499] [client 20.196.209.81:2007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/access.php"] [unique_id "apK-mGbX5DA3XO6e_qRpkQAAAUA"]
[Sat Aug 29 05:12:24.905163 2026] [security2:error] [pid 11274:tid 11504] [client 20.48.250.41:24386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/Ov-Simple1.php"] [unique_id "apK-mGbX5DA3XO6e_qRpkgAAAUU"]
[Sat Aug 29 05:12:24.918758 2026] [security2:error] [pid 11274:tid 11560] [client 4.205.62.107:63338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/public/bnn_.php.php"] [unique_id "apK-mGbX5DA3XO6e_qRpkwAAAXw"]
[Sat Aug 29 05:12:24.935223 2026] [security2:error] [pid 1321:tid 1601] [client 20.104.104.62:8846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/bge.php"] [unique_id "apK-mGjCPtor9NZ-byQMuAAABqw"]
[Sat Aug 29 05:12:24.964995 2026] [security2:error] [pid 11274:tid 11501] [client 20.48.251.3:38700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/fm.php"] [unique_id "apK-mGbX5DA3XO6e_qRplAAAAUI"]
[Sat Aug 29 05:12:24.970974 2026] [security2:error] [pid 11274:tid 11466] [client 20.48.250.41:36158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/tfm.php"] [unique_id "apK-mGbX5DA3XO6e_qRplQAAASA"]
[Sat Aug 29 05:12:24.977236 2026] [security2:error] [pid 11274:tid 11568] [client 158.23.184.117:50345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/av.php"] [unique_id "apK-mGbX5DA3XO6e_qRplgAAAYQ"]
[Sat Aug 29 05:12:24.986413 2026] [security2:error] [pid 1321:tid 1591] [client 202.71.25.11:51664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.25.71.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK-mGjCPtor9NZ-byQMuwAABqI"]
[Sat Aug 29 05:12:24.987725 2026] [security2:error] [pid 1321:tid 1591] [client 202.71.25.11:51664] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK-mGjCPtor9NZ-byQMuwAABqI"]
[Sat Aug 29 05:12:24.997080 2026] [security2:error] [pid 1321:tid 1615] [client 158.23.147.79:24489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-mail.php"] [unique_id "apK-mGjCPtor9NZ-byQMvAAABro"]
[Sat Aug 29 05:12:25.000426 2026] [security2:error] [pid 11274:tid 11509] [client 20.48.160.90:31412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/em.php"] [unique_id "apK-mGbX5DA3XO6e_qRpmAAAAUo"]
[Sat Aug 29 05:12:25.008823 2026] [security2:error] [pid 11274:tid 11454] [client 20.48.250.41:25551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/gettest.php"] [unique_id "apK-mWbX5DA3XO6e_qRpmQAAARQ"]
[Sat Aug 29 05:12:25.013103 2026] [security2:error] [pid 11274:tid 11483] [client 20.48.160.90:29163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/gulu.php"] [unique_id "apK-mWbX5DA3XO6e_qRpmgAAATA"]
[Sat Aug 29 05:12:25.027851 2026] [security2:error] [pid 11274:tid 11477] [client 20.52.41.200:2694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/root.php"] [unique_id "apK-mWbX5DA3XO6e_qRpnQAAASs"]
[Sat Aug 29 05:12:25.049704 2026] [security2:error] [pid 1321:tid 1515] [client 20.63.219.114:12634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/about.php525"] [unique_id "apK-mWjCPtor9NZ-byQMvQAABlc"]
[Sat Aug 29 05:12:25.067459 2026] [security2:error] [pid 11274:tid 11444] [client 68.155.159.216:43923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK-mWbX5DA3XO6e_qRpnwAAAQo"]
[Sat Aug 29 05:12:25.093450 2026] [security2:error] [pid 11274:tid 11521] [client 20.48.251.3:38530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/pinfo.php"] [unique_id "apK-mWbX5DA3XO6e_qRpoAAAAVY"]
[Sat Aug 29 05:12:25.097523 2026] [security2:error] [pid 11274:tid 11520] [client 20.104.104.62:8876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/wp-ana.php"] [unique_id "apK-mWbX5DA3XO6e_qRpoQAAAVU"]
[Sat Aug 29 05:12:25.103318 2026] [security2:error] [pid 1321:tid 1577] [client 20.48.250.41:36134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/Geforce.php"] [unique_id "apK-mWjCPtor9NZ-byQMvgAABpQ"]
[Sat Aug 29 05:12:25.120623 2026] [security2:error] [pid 11274:tid 11555] [client 68.155.159.216:44021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.theenprogroup.com"] [uri "/simple.php"] [unique_id "apK-mWbX5DA3XO6e_qRpogAAAXc"]
[Sat Aug 29 05:12:25.138658 2026] [security2:error] [pid 1321:tid 1495] [client 74.248.24.12:38707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/wp-content/cong.php"] [unique_id "apK-mWjCPtor9NZ-byQMvwAABkM"]
[Sat Aug 29 05:12:25.139554 2026] [security2:error] [pid 11274:tid 11570] [client 20.48.160.90:48362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/dvve.php"] [unique_id "apK-mWbX5DA3XO6e_qRpowAAAYY"]
[Sat Aug 29 05:12:25.141017 2026] [security2:error] [pid 1321:tid 1507] [client 68.155.159.216:56529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/.well-known/content.php"] [unique_id "apK-mWjCPtor9NZ-byQMwAAABk8"]
[Sat Aug 29 05:12:25.155648 2026] [security2:error] [pid 11274:tid 11449] [client 4.205.62.107:59085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/agg.php"] [unique_id "apK-mWbX5DA3XO6e_qRppAAAAQ8"]
[Sat Aug 29 05:12:25.162593 2026] [security2:error] [pid 11274:tid 11554] [client 20.48.160.90:50318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/gtghklk.php"] [unique_id "apK-mWbX5DA3XO6e_qRppQAAAXY"]
[Sat Aug 29 05:12:25.164897 2026] [security2:error] [pid 11274:tid 11530] [client 158.158.54.35:1421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/i.php"] [unique_id "apK-mWbX5DA3XO6e_qRppgAAAV8"]
[Sat Aug 29 05:12:25.166176 2026] [security2:error] [pid 1321:tid 1499] [client 158.158.54.35:5510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-content/file.php"] [unique_id "apK-mWjCPtor9NZ-byQMwQAABkc"]
[Sat Aug 29 05:12:25.173129 2026] [security2:error] [pid 11274:tid 11465] [client 20.52.41.200:5125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/404.php"] [unique_id "apK-mWbX5DA3XO6e_qRppwAAAR8"]
[Sat Aug 29 05:12:25.183827 2026] [security2:error] [pid 11274:tid 11534] [client 87.219.197.128:63094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK-mWbX5DA3XO6e_qRpqAAAAWM"]
[Sat Aug 29 05:12:25.183926 2026] [security2:error] [pid 11274:tid 11534] [client 87.219.197.128:63094] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK-mWbX5DA3XO6e_qRpqAAAAWM"]
[Sat Aug 29 05:12:25.221800 2026] [security2:error] [pid 11274:tid 11448] [client 20.48.251.3:38181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/admin-ajax.php"] [unique_id "apK-mWbX5DA3XO6e_qRpqQAAAQ4"]
[Sat Aug 29 05:12:25.233488 2026] [security2:error] [pid 11274:tid 11329] [remote 40.77.167.78:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.167.77.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantsfans.net"] [uri "/message_board/index.php"] [unique_id "apK-mWbX5DA3XO6e_qRpqgABVxA"]
[Sat Aug 29 05:12:25.249210 2026] [security2:error] [pid 11274:tid 11535] [client 68.155.159.216:62750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-admin/index.php"] [unique_id "apK-mWbX5DA3XO6e_qRpqwAAAWQ"]
[Sat Aug 29 05:12:25.250058 2026] [security2:error] [pid 11274:tid 11496] [client 20.240.128.207:24836] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/1.php7"] [unique_id "apK-mWbX5DA3XO6e_qRprAAAAT0"]
[Sat Aug 29 05:12:25.250150 2026] [security2:error] [pid 11274:tid 11496] [client 20.240.128.207:24836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/1.php7"] [unique_id "apK-mWbX5DA3XO6e_qRprAAAAT0"]
[Sat Aug 29 05:12:25.255739 2026] [security2:error] [pid 1321:tid 1574] [client 158.23.184.117:61506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/wp-includes/ID3/file.php"] [unique_id "apK-mWjCPtor9NZ-byQMwwAABpE"]
[Sat Aug 29 05:12:25.272361 2026] [security2:error] [pid 11274:tid 11514] [client 20.48.160.90:31421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/doo.php"] [unique_id "apK-mWbX5DA3XO6e_qRprQAAAU8"]
[Sat Aug 29 05:12:25.273858 2026] [security2:error] [pid 1321:tid 1566] [client 4.205.62.107:5654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/aws-credentials.php"] [unique_id "apK-mWjCPtor9NZ-byQMxAAABok"]
[Sat Aug 29 05:12:25.278273 2026] [security2:error] [pid 11274:tid 11507] [client 20.104.104.62:48125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/secret.php"] [unique_id "apK-mWbX5DA3XO6e_qRprgAAAUg"]
[Sat Aug 29 05:12:25.282124 2026] [security2:error] [pid 11274:tid 11515] [client 158.23.147.79:49796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/content.php"] [unique_id "apK-mWbX5DA3XO6e_qRprwAAAVA"]
[Sat Aug 29 05:12:25.305155 2026] [security2:error] [pid 11274:tid 11490] [client 20.48.160.90:49941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/comand.php"] [unique_id "apK-mWbX5DA3XO6e_qRpsAAAATc"]
[Sat Aug 29 05:12:25.328508 2026] [security2:error] [pid 1321:tid 1600] [client 20.197.61.180:13187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/alfa.php"] [unique_id "apK-mWjCPtor9NZ-byQMxQAABqs"]
[Sat Aug 29 05:12:25.346310 2026] [security2:error] [pid 1321:tid 1523] [client 4.205.62.107:64916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/fm.php"] [unique_id "apK-mWjCPtor9NZ-byQMxwAABl8"]
[Sat Aug 29 05:12:25.350540 2026] [security2:error] [pid 11274:tid 11545] [client 20.48.251.3:38576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/wdf.php"] [unique_id "apK-mWbX5DA3XO6e_qRpsQAAAW0"]
[Sat Aug 29 05:12:25.374945 2026] [security2:error] [pid 11274:tid 11494] [client 20.196.209.81:1994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/classsmtps.php"] [unique_id "apK-mWbX5DA3XO6e_qRpsgAAATs"]
[Sat Aug 29 05:12:25.381466 2026] [security2:error] [pid 11274:tid 11558] [client 68.155.159.216:23540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/ans.php"] [unique_id "apK-mWbX5DA3XO6e_qRpswAAAXo"]
[Sat Aug 29 05:12:25.386879 2026] [security2:error] [pid 11274:tid 11499] [client 68.155.159.216:7156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK-mWbX5DA3XO6e_qRptAAAAUA"]
[Sat Aug 29 05:12:25.398077 2026] [security2:error] [pid 11274:tid 11493] [client 158.23.147.79:14113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK-mWbX5DA3XO6e_qRptQAAATo"]
[Sat Aug 29 05:12:25.399863 2026] [security2:error] [pid 11274:tid 11511] [client 158.23.184.117:50345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.linear-active.com"] [uri "/wp-admin/css/fff.php"] [unique_id "apK-mWbX5DA3XO6e_qRptgAAAUw"]
[Sat Aug 29 05:12:25.408257 2026] [security2:error] [pid 11274:tid 11487] [client 20.48.160.90:31453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/adminer-4.6.6.php"] [unique_id "apK-mWbX5DA3XO6e_qRptwAAATQ"]
[Sat Aug 29 05:12:25.411702 2026] [security2:error] [pid 11274:tid 11504] [client 20.104.104.62:8847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/pro.php"] [unique_id "apK-mWbX5DA3XO6e_qRpuAAAAUU"]
[Sat Aug 29 05:12:25.412446 2026] [security2:error] [pid 1321:tid 1526] [client 20.63.219.114:13960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/spip.php"] [unique_id "apK-mWjCPtor9NZ-byQMyAAABmI"]
[Sat Aug 29 05:12:25.464111 2026] [security2:error] [pid 11274:tid 11489] [client 20.48.160.90:29140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/wp_motu_myk3v.php"] [unique_id "apK-mWbX5DA3XO6e_qRpugAAATY"]
[Sat Aug 29 05:12:25.480541 2026] [security2:error] [pid 11274:tid 11509] [client 158.23.147.79:42090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK-mWbX5DA3XO6e_qRpuwAAAUo"]
[Sat Aug 29 05:12:25.481129 2026] [security2:error] [pid 1321:tid 1543] [client 20.48.251.3:38584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/snq.php"] [unique_id "apK-mWjCPtor9NZ-byQMygAABnM"]
[Sat Aug 29 05:12:25.492890 2026] [security2:error] [pid 1321:tid 1529] [client 20.52.41.200:2707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/p.php"] [unique_id "apK-mWjCPtor9NZ-byQMywAABmU"]
[Sat Aug 29 05:12:25.496466 2026] [security2:error] [pid 11274:tid 11454] [client 20.151.200.44:55637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/7logs.php"] [unique_id "apK-mWbX5DA3XO6e_qRpvAAAARQ"]
[Sat Aug 29 05:12:25.506926 2026] [security2:error] [pid 1321:tid 1576] [client 40.83.93.50:9040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/cookie.php"] [unique_id "apK-mWjCPtor9NZ-byQMzAAABpM"]
[Sat Aug 29 05:12:25.520689 2026] [security2:error] [pid 11274:tid 11572] [client 20.104.104.62:48695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/sadis.php"] [unique_id "apK-mWbX5DA3XO6e_qRpvQAAAYg"]
[Sat Aug 29 05:12:25.527541 2026] [security2:error] [pid 11274:tid 11538] [client 20.104.49.130:63598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/ws45.php"] [unique_id "apK-mWbX5DA3XO6e_qRpvgAAAWc"]
[Sat Aug 29 05:12:25.541740 2026] [security2:error] [pid 1321:tid 1593] [client 20.48.160.90:52059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/gelap1.php"] [unique_id "apK-mWjCPtor9NZ-byQMzQAABqQ"]
[Sat Aug 29 05:12:25.545555 2026] [security2:error] [pid 11274:tid 11477] [client 20.104.104.62:48076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/999.php"] [unique_id "apK-mWbX5DA3XO6e_qRpvwAAASs"]
[Sat Aug 29 05:12:25.609170 2026] [security2:error] [pid 11274:tid 11486] [client 103.215.74.26:8062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.74.215.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.com"] [uri "/wp/index.php"] [unique_id "apK-mWbX5DA3XO6e_qRpwAAAATM"], referer: https://kglogisticsinc.com/wp/wp-admin/
[Sat Aug 29 05:12:25.610631 2026] [security2:error] [pid 1321:tid 1547] [client 20.48.251.3:38550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/aws_credentials.php"] [unique_id "apK-mWjCPtor9NZ-byQMzgAABnY"]
[Sat Aug 29 05:12:25.615636 2026] [security2:error] [pid 11274:tid 11561] [client 158.158.54.35:1327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/deepseek_d.php"] [unique_id "apK-mWbX5DA3XO6e_qRpwQAAAX0"]
[Sat Aug 29 05:12:25.620879 2026] [security2:error] [pid 1321:tid 1536] [client 158.158.54.35:15824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/files.php"] [unique_id "apK-mWjCPtor9NZ-byQMzwAABmw"]
[Sat Aug 29 05:12:25.632217 2026] [security2:error] [pid 1321:tid 1582] [client 20.52.41.200:5369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/php.php"] [unique_id "apK-mWjCPtor9NZ-byQM0AAABpk"]
[Sat Aug 29 05:12:25.647261 2026] [security2:error] [pid 1321:tid 1561] [client 20.48.160.90:23720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/wp_motu_ypdat.php"] [unique_id "apK-mWjCPtor9NZ-byQM0QAABoQ"]
[Sat Aug 29 05:12:25.651397 2026] [security2:error] [pid 11274:tid 11452] [client 74.248.24.12:31922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/wp-admin/images/admin.php"] [unique_id "apK-mWbX5DA3XO6e_qRpwgAAARI"]
[Sat Aug 29 05:12:25.651470 2026] [proxy_http:error] [pid 1017536:tid 1017722] (70007)The timeout specified has expired: [client 127.0.0.1:26574] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:12:25.651501 2026] [proxy:error] [pid 1017536:tid 1017722] [client 127.0.0.1:26574] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:12:25.678728 2026] [security2:error] [pid 1321:tid 1550] [client 4.205.62.107:61667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/grsiuk.php"] [unique_id "apK-mWjCPtor9NZ-byQM0gAABnk"]
[Sat Aug 29 05:12:25.708024 2026] [security2:error] [pid 11274:tid 11472] [client 20.48.160.90:31387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/rsjlrria.php"] [unique_id "apK-mWbX5DA3XO6e_qRpwwAAASY"]
[Sat Aug 29 05:12:25.718327 2026] [security2:error] [pid 11274:tid 11521] [client 20.104.104.62:46226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/sef.php"] [unique_id "apK-mWbX5DA3XO6e_qRpxAAAAVY"]
[Sat Aug 29 05:12:25.738471 2026] [security2:error] [pid 1321:tid 1502] [client 20.48.251.3:38196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/v1.php"] [unique_id "apK-mWjCPtor9NZ-byQM0wAABko"]
[Sat Aug 29 05:12:25.739844 2026] [security2:error] [pid 11274:tid 11520] [client 68.155.159.216:55057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.angelesforestranch.com"] [uri "/radio.php"] [unique_id "apK-mWbX5DA3XO6e_qRpxQAAAVU"]
[Sat Aug 29 05:12:25.748974 2026] [security2:error] [pid 1321:tid 1592] [client 20.240.128.207:2088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/disagraeosc.php"] [unique_id "apK-mWjCPtor9NZ-byQM1AAABqM"]
[Sat Aug 29 05:12:25.758162 2026] [security2:error] [pid 11274:tid 11512] [client 68.155.159.216:21484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/.well-known/content.php"] [unique_id "apK-mWbX5DA3XO6e_qRpyAAAAU0"]
[Sat Aug 29 05:12:25.760366 2026] [security2:error] [pid 11274:tid 11506] [client 4.205.62.107:28114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/php-details.php"] [unique_id "apK-mWbX5DA3XO6e_qRpyQAAAUc"]
[Sat Aug 29 05:12:25.780474 2026] [security2:error] [pid 1321:tid 1590] [client 20.196.209.81:10699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/contentloader1.php"] [unique_id "apK-mWjCPtor9NZ-byQM1QAABqE"]
[Sat Aug 29 05:12:25.784833 2026] [security2:error] [pid 11274:tid 11488] [client 20.104.18.15:29695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/dev.php"] [unique_id "apK-mWbX5DA3XO6e_qRpygAAATU"]
[Sat Aug 29 05:12:25.794025 2026] [security2:error] [pid 11274:tid 11476] [client 20.48.160.90:50342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/edit.php"] [unique_id "apK-mWbX5DA3XO6e_qRpywAAASo"]
[Sat Aug 29 05:12:25.798613 2026] [security2:error] [pid 11274:tid 11500] [client 4.205.62.107:63003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/06.php"] [unique_id "apK-mWbX5DA3XO6e_qRpzAAAAUE"]
[Sat Aug 29 05:12:25.823443 2026] [security2:error] [pid 11274:tid 11480] [client 20.63.219.114:1089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/backup.php"] [unique_id "apK-mWbX5DA3XO6e_qRpzQAAAS0"]
[Sat Aug 29 05:12:25.842105 2026] [security2:error] [pid 1321:tid 1563] [client 20.48.160.90:52060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/AxAo.php"] [unique_id "apK-mWjCPtor9NZ-byQM1gAABoY"]
[Sat Aug 29 05:12:25.860772 2026] [security2:error] [pid 1321:tid 1596] [client 158.23.147.79:53998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.robotdanceparty.org"] [uri "/first.php"] [unique_id "apK-mWjCPtor9NZ-byQM1wAABqc"]
[Sat Aug 29 05:12:25.865136 2026] [security2:error] [pid 1321:tid 1510] [client 20.48.251.3:37969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/olfclass.php"] [unique_id "apK-mWjCPtor9NZ-byQM2AAABlI"]
[Sat Aug 29 05:12:25.869606 2026] [security2:error] [pid 11274:tid 11524] [client 20.104.49.130:63526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.timportlock.net"] [uri "/media.php"] [unique_id "apK-mWbX5DA3XO6e_qRpzwAAAVk"]
[Sat Aug 29 05:12:25.877147 2026] [security2:error] [pid 1321:tid 1512] [client 4.205.62.107:6791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/124.php"] [unique_id "apK-mWjCPtor9NZ-byQM2QAABlQ"]
[Sat Aug 29 05:12:25.890405 2026] [security2:error] [pid 1321:tid 1609] [client 20.104.104.62:48595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/xcre1.php"] [unique_id "apK-mWjCPtor9NZ-byQM2gAABrQ"]
[Sat Aug 29 05:12:25.918826 2026] [security2:error] [pid 1321:tid 1591] [client 20.104.18.15:29079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/gos.php"] [unique_id "apK-mWjCPtor9NZ-byQM2wAABqI"]
[Sat Aug 29 05:12:25.922007 2026] [security2:error] [pid 1321:tid 1615] [client 20.220.204.93:59598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/bzjdlofz.php"] [unique_id "apK-mWjCPtor9NZ-byQM3AAABro"]
[Sat Aug 29 05:12:25.931927 2026] [security2:error] [pid 1321:tid 1514] [client 20.104.104.62:48123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/admin123.php"] [unique_id "apK-mWjCPtor9NZ-byQM3QAABlY"]
[Sat Aug 29 05:12:25.935499 2026] [security2:error] [pid 1321:tid 1610] [client 68.155.159.216:1835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK-mWjCPtor9NZ-byQM3gAABrU"]
[Sat Aug 29 05:12:25.948409 2026] [proxy_http:error] [pid 1018003:tid 1018042] (70007)The timeout specified has expired: [remote 57.141.14.38:38056] AH01102: error reading status line from remote server 127.0.0.1:8443
[Sat Aug 29 05:12:25.948442 2026] [proxy:error] [pid 1018003:tid 1018042] [remote 57.141.14.38:38056] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:12:25.949772 2026] [security2:error] [pid 1321:tid 1557] [client 158.23.147.79:7049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK-mWjCPtor9NZ-byQM3wAABoA"]
[Sat Aug 29 05:12:25.949796 2026] [security2:error] [pid 1321:tid 1542] [client 20.52.41.200:2206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/a1.php"] [unique_id "apK-mWjCPtor9NZ-byQM4AAABnI"]
[Sat Aug 29 05:12:25.956389 2026] [proxy_http:error] [pid 1041789:tid 1042036] (70007)The timeout specified has expired: [client 127.0.0.1:48264] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:12:25.956409 2026] [proxy:error] [pid 1041789:tid 1042036] [client 127.0.0.1:48264] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:12:25.963023 2026] [security2:error] [pid 1321:tid 1577] [client 20.48.160.90:28759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/tqkdqbbv.php"] [unique_id "apK-mWjCPtor9NZ-byQM4QAABpQ"]
[Sat Aug 29 05:12:25.975416 2026] [security2:error] [pid 1321:tid 1548] [client 20.48.160.90:52064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/class17.php"] [unique_id "apK-mWjCPtor9NZ-byQM4gAABnc"]
[Sat Aug 29 05:12:25.978503 2026] [security2:error] [pid 11274:tid 11536] [client 40.83.93.50:11538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/NewFile.php"] [unique_id "apK-mWbX5DA3XO6e_qRp0AAAAWU"]
[Sat Aug 29 05:12:26.037448 2026] [security2:error] [pid 11274:tid 11563] [client 52.139.37.240:8498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.coveryourauto.com"] [uri "/aged.php"] [unique_id "apK-mmbX5DA3XO6e_qRp0wAAAX8"]
[Sat Aug 29 05:12:26.039849 2026] [security2:error] [pid 11274:tid 11570] [client 20.197.61.180:13480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/feed-rss2-queue.php"] [unique_id "apK-mmbX5DA3XO6e_qRp1AAAAYY"]
[Sat Aug 29 05:12:26.050410 2026] [proxy_http:error] [pid 1018003:tid 1018235] (70007)The timeout specified has expired: [client 127.0.0.1:26892] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:12:26.050445 2026] [proxy:error] [pid 1018003:tid 1018235] [client 127.0.0.1:26892] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:12:26.054644 2026] [security2:error] [pid 11274:tid 11522] [client 4.205.62.107:63385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/wsws.php"] [unique_id "apK-mmbX5DA3XO6e_qRp1QAAAVc"]
[Sat Aug 29 05:12:26.079520 2026] [security2:error] [pid 11274:tid 11516] [client 158.158.54.35:15838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/o.php"] [unique_id "apK-mmbX5DA3XO6e_qRp1gAAAVE"]
[Sat Aug 29 05:12:26.085104 2026] [security2:error] [pid 11274:tid 11484] [client 20.52.41.200:4976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/init.php"] [unique_id "apK-mmbX5DA3XO6e_qRp1wAAATE"]
[Sat Aug 29 05:12:26.091859 2026] [security2:error] [pid 11274:tid 11514] [client 20.48.250.41:24572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/wp-blogs.php"] [unique_id "apK-mmbX5DA3XO6e_qRp2AAAAU8"]
[Sat Aug 29 05:12:26.095639 2026] [security2:error] [pid 1321:tid 1543] [client 20.104.104.62:48585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/motu.php"] [unique_id "apK-mmjCPtor9NZ-byQM6QAABnM"]
[Sat Aug 29 05:12:26.098334 2026] [security2:error] [pid 1321:tid 1529] [client 20.48.160.90:23680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/kjyehoxl.php"] [unique_id "apK-mmjCPtor9NZ-byQM6gAABmU"]
[Sat Aug 29 05:12:26.099982 2026] [security2:error] [pid 1321:tid 1576] [client 20.151.200.44:55689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/sf.php"] [unique_id "apK-mmjCPtor9NZ-byQM6wAABpM"]
[Sat Aug 29 05:12:26.102799 2026] [autoindex:error] [pid 1321:tid 1508] [client 158.158.54.35:0] AH01276: Cannot serve directory /home2/charlov7/public_html/dev/wp-includes/fonts/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:12:26.107841 2026] [security2:error] [pid 1321:tid 1544] [client 20.104.104.62:48107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/7h.php"] [unique_id "apK-mmjCPtor9NZ-byQM7QAABnQ"]
[Sat Aug 29 05:12:26.107873 2026] [security2:error] [pid 1321:tid 1560] [client 20.48.160.90:52035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/okxoby.php"] [unique_id "apK-mmjCPtor9NZ-byQM7AAABoM"]
[Sat Aug 29 05:12:26.140065 2026] [security2:error] [pid 11274:tid 11503] [client 20.48.250.41:25492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/35.php"] [unique_id "apK-mmbX5DA3XO6e_qRp2QAAAUQ"]
[Sat Aug 29 05:12:26.152863 2026] [security2:error] [pid 1321:tid 1584] [client 74.248.24.12:39627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/wp-mail.php"] [unique_id "apK-mmjCPtor9NZ-byQM7gAABps"]
[Sat Aug 29 05:12:26.174744 2026] [security2:error] [pid 1321:tid 1588] [client 68.155.159.216:43993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK-mmjCPtor9NZ-byQM7wAABp8"]
[Sat Aug 29 05:12:26.176700 2026] [security2:error] [pid 1321:tid 1598] [client 20.196.209.81:1352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/al.php"] [unique_id "apK-mmjCPtor9NZ-byQM8AAABqk"]
[Sat Aug 29 05:12:26.222633 2026] [security2:error] [pid 11274:tid 11445] [client 68.155.159.216:43994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.theenprogroup.com"] [uri "/wp-admin/about.php"] [unique_id "apK-mmbX5DA3XO6e_qRp2wAAAQs"]
[Sat Aug 29 05:12:26.230577 2026] [security2:error] [pid 11274:tid 11494] [client 20.48.250.41:39833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/zu.php"] [unique_id "apK-mmbX5DA3XO6e_qRp3AAAATs"]
[Sat Aug 29 05:12:26.232350 2026] [security2:error] [pid 1321:tid 1594] [client 52.139.37.240:8629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.coveryourauto.com"] [uri "/essexec.php"] [unique_id "apK-mmjCPtor9NZ-byQM8QAABqU"]
[Sat Aug 29 05:12:26.232958 2026] [security2:error] [pid 11274:tid 11473] [client 20.48.160.90:50028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/llyuxaqd.php"] [unique_id "apK-mmbX5DA3XO6e_qRp3QAAASc"]
[Sat Aug 29 05:12:26.237189 2026] [security2:error] [pid 11274:tid 11499] [client 20.48.160.90:52056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/esuutzzx.php"] [unique_id "apK-mmbX5DA3XO6e_qRp3gAAAUA"]
[Sat Aug 29 05:12:26.239570 2026] [security2:error] [pid 11274:tid 11496] [client 20.240.128.207:2107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-logs.php"] [unique_id "apK-mmbX5DA3XO6e_qRp3wAAAT0"]
[Sat Aug 29 05:12:26.242843 2026] [security2:error] [pid 1321:tid 1506] [client 20.63.219.114:11587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/haiterus.php"] [unique_id "apK-mmjCPtor9NZ-byQM8wAABk4"]
[Sat Aug 29 05:12:26.247858 2026] [security2:error] [pid 11274:tid 11493] [client 20.48.250.41:24322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/mini.php"] [unique_id "apK-mmbX5DA3XO6e_qRp4QAAATo"]
[Sat Aug 29 05:12:26.248346 2026] [security2:error] [pid 1321:tid 1561] [client 158.158.54.35:15066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "apK-mmjCPtor9NZ-byQM9AAABoQ"]
[Sat Aug 29 05:12:26.255879 2026] [security2:error] [pid 11274:tid 11333] [remote 192.250.232.93:56882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.232.250.192.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "acovib.com"] [uri "/wp-login.php"] [unique_id "apK-mmbX5DA3XO6e_qRp4AABSRQ"]
[Sat Aug 29 05:12:26.263619 2026] [security2:error] [pid 11274:tid 11504] [client 20.48.251.3:38188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/abcd.php"] [unique_id "apK-mmbX5DA3XO6e_qRp4wAAAUU"]
[Sat Aug 29 05:12:26.265934 2026] [security2:error] [pid 11274:tid 11560] [client 20.104.104.62:48116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/wp-gzone.php"] [unique_id "apK-mmbX5DA3XO6e_qRp5QAAAXw"]
[Sat Aug 29 05:12:26.275678 2026] [security2:error] [pid 11274:tid 11501] [client 20.48.250.41:36369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/click.php"] [unique_id "apK-mmbX5DA3XO6e_qRp5gAAAUI"]
[Sat Aug 29 05:12:26.286089 2026] [security2:error] [pid 11274:tid 11568] [client 4.205.62.107:28036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/requirements.php"] [unique_id "apK-mmbX5DA3XO6e_qRp5wAAAYQ"]
[Sat Aug 29 05:12:26.356073 2026] [security2:error] [pid 11274:tid 11471] [client 68.155.159.216:62806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK-mmbX5DA3XO6e_qRp6QAAASU"]
[Sat Aug 29 05:12:26.364998 2026] [security2:error] [pid 1321:tid 1502] [client 20.48.250.41:39911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/lanka.php"] [unique_id "apK-mmjCPtor9NZ-byQM9QAABko"]
[Sat Aug 29 05:12:26.372327 2026] [security2:error] [pid 1321:tid 1496] [client 20.48.160.90:48351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/replace.php"] [unique_id "apK-mmjCPtor9NZ-byQM9gAABkQ"]
[Sat Aug 29 05:12:26.390539 2026] [security2:error] [pid 11274:tid 11571] [client 20.48.250.41:24550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/amp.php"] [unique_id "apK-mmbX5DA3XO6e_qRp6gAAAYc"]
[Sat Aug 29 05:12:26.393294 2026] [security2:error] [pid 1321:tid 1592] [client 20.48.251.3:38205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/userfuns.php"] [unique_id "apK-mmjCPtor9NZ-byQM9wAABqM"]
[Sat Aug 29 05:12:26.399442 2026] [security2:error] [pid 1321:tid 1590] [client 20.48.160.90:28795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/nbwxolou.php"] [unique_id "apK-mmjCPtor9NZ-byQM-AAABqE"]
[Sat Aug 29 05:12:26.406530 2026] [security2:error] [pid 11274:tid 11511] [client 20.52.41.200:2661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-mmbX5DA3XO6e_qRp6wAAAUw"]
[Sat Aug 29 05:12:26.406551 2026] [security2:error] [pid 11274:tid 11561] [client 20.48.250.41:25574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/maraz.php"] [unique_id "apK-mmbX5DA3XO6e_qRp7AAAAX0"]
[Sat Aug 29 05:12:26.412720 2026] [security2:error] [pid 1321:tid 1603] [client 4.205.62.107:5533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/4563.php"] [unique_id "apK-mmjCPtor9NZ-byQM-gAABq4"]
[Sat Aug 29 05:12:26.425481 2026] [security2:error] [pid 1321:tid 1517] [client 20.104.104.62:48523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/wefile.php"] [unique_id "apK-mmjCPtor9NZ-byQM-wAABlk"]
[Sat Aug 29 05:12:26.428105 2026] [security2:error] [pid 11274:tid 11551] [client 52.139.37.240:8460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.coveryourauto.com"] [uri "/fw.php"] [unique_id "apK-mmbX5DA3XO6e_qRp7gAAAXM"]
[Sat Aug 29 05:12:26.432773 2026] [security2:error] [pid 11274:tid 11472] [client 20.48.250.41:36357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/ms.php"] [unique_id "apK-mmbX5DA3XO6e_qRp7wAAASY"]
[Sat Aug 29 05:12:26.442414 2026] [security2:error] [pid 11274:tid 11520] [client 20.104.104.62:46249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/str.php"] [unique_id "apK-mmbX5DA3XO6e_qRp8AAAAVU"]
[Sat Aug 29 05:12:26.479204 2026] [security2:error] [pid 1321:tid 1527] [client 40.83.93.50:14772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/config.php"] [unique_id "apK-mmjCPtor9NZ-byQM_QAABmM"]
[Sat Aug 29 05:12:26.479652 2026] [security2:error] [pid 1321:tid 1492] [client 4.205.62.107:61835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/tinyfilemanager.php"] [unique_id "apK-mmjCPtor9NZ-byQM_gAABkA"]
[Sat Aug 29 05:12:26.505278 2026] [security2:error] [pid 1321:tid 1615] [client 20.48.160.90:52079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/gulu.php"] [unique_id "apK-mmjCPtor9NZ-byQM_wAABro"]
[Sat Aug 29 05:12:26.524421 2026] [security2:error] [pid 11274:tid 11549] [client 158.158.54.35:18498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/file2.php"] [unique_id "apK-mmbX5DA3XO6e_qRp9AAAAXE"]
[Sat Aug 29 05:12:26.534467 2026] [security2:error] [pid 11274:tid 11565] [client 20.48.251.3:38559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/register.php"] [unique_id "apK-mmbX5DA3XO6e_qRp8wAAAYE"]
[Sat Aug 29 05:12:26.539535 2026] [security2:error] [pid 11274:tid 11486] [client 20.52.41.200:4550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "apK-mmbX5DA3XO6e_qRp9QAAATM"]
[Sat Aug 29 05:12:26.584780 2026] [security2:error] [pid 11274:tid 11553] [client 20.48.250.41:36397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/zxekqlxb.php"] [unique_id "apK-mmbX5DA3XO6e_qRp9gAAAXU"]
[Sat Aug 29 05:12:26.587154 2026] [security2:error] [pid 11274:tid 11559] [client 20.104.104.62:46260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/mega.php"] [unique_id "apK-mmbX5DA3XO6e_qRp9wAAAXs"]
[Sat Aug 29 05:12:26.587682 2026] [security2:error] [pid 11274:tid 11524] [client 158.23.147.79:55914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/ans.php"] [unique_id "apK-mmbX5DA3XO6e_qRp-AAAAVk"]
[Sat Aug 29 05:12:26.610077 2026] [security2:error] [pid 1321:tid 1609] [client 20.196.209.81:1364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/global.php"] [unique_id "apK-mmjCPtor9NZ-byQNAQAABrQ"]
[Sat Aug 29 05:12:26.616538 2026] [security2:error] [pid 11274:tid 11448] [client 20.48.250.41:39915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/gettest.php"] [unique_id "apK-mmbX5DA3XO6e_qRp-QAAAQ4"]
[Sat Aug 29 05:12:26.631403 2026] [security2:error] [pid 11274:tid 11465] [client 52.139.37.240:63978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.coveryourauto.com"] [uri "/zwso.php"] [unique_id "apK-mmbX5DA3XO6e_qRp-gAAAR8"]
[Sat Aug 29 05:12:26.638057 2026] [security2:error] [pid 1321:tid 1499] [client 20.48.160.90:31456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/gtghklk.php"] [unique_id "apK-mmjCPtor9NZ-byQNAwAABkc"]
[Sat Aug 29 05:12:26.642819 2026] [security2:error] [pid 11274:tid 11522] [client 20.48.160.90:50397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/nsxeubyv.php"] [unique_id "apK-mmbX5DA3XO6e_qRp_AAAAVc"]
[Sat Aug 29 05:12:26.660705 2026] [security2:error] [pid 1321:tid 1501] [client 20.104.104.62:48723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/EM.php"] [unique_id "apK-mmjCPtor9NZ-byQNBAAABkk"]
[Sat Aug 29 05:12:26.662139 2026] [security2:error] [pid 1321:tid 1518] [client 20.48.251.3:38695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/php-info.php"] [unique_id "apK-mmjCPtor9NZ-byQNBQAABlo"]
[Sat Aug 29 05:12:26.663804 2026] [security2:error] [pid 1321:tid 1595] [client 74.248.24.12:40242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/wp-content.php"] [unique_id "apK-mmjCPtor9NZ-byQNBgAABqY"]
[Sat Aug 29 05:12:26.699565 2026] [security2:error] [pid 11274:tid 11555] [client 20.220.204.93:9528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/selesai.php"] [unique_id "apK-mmbX5DA3XO6e_qRp_wAAAXc"]
[Sat Aug 29 05:12:26.717256 2026] [security2:error] [pid 1321:tid 1577] [client 20.63.219.114:1861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/go.php"] [unique_id "apK-mmjCPtor9NZ-byQNCAAABpQ"]
[Sat Aug 29 05:12:26.727794 2026] [security2:error] [pid 11274:tid 11490] [client 20.104.104.62:46266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/ww3.php"] [unique_id "apK-mmbX5DA3XO6e_qRqAgAAATc"]
[Sat Aug 29 05:12:26.755183 2026] [security2:error] [pid 11274:tid 11494] [client 68.155.159.216:56505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/cong.php"] [unique_id "apK-mmbX5DA3XO6e_qRqBwAAATs"]
[Sat Aug 29 05:12:26.759999 2026] [security2:error] [pid 11274:tid 11449] [client 20.197.61.180:13487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/inputs.php"] [unique_id "apK-mmbX5DA3XO6e_qRqCQAAAQ8"]
[Sat Aug 29 05:12:26.766970 2026] [security2:error] [pid 11274:tid 11536] [client 20.240.128.207:7499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-admin/css/about.php"] [unique_id "apK-mmbX5DA3XO6e_qRqCgAAAWU"]
[Sat Aug 29 05:12:26.767878 2026] [autoindex:error] [pid 1321:tid 1580] [client 158.158.54.35:1437] AH01276: Cannot serve directory /home2/charlov7/public_html/dev/wp-admin/css/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:12:26.780206 2026] [security2:error] [pid 11274:tid 11493] [client 20.48.160.90:28750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/zfqipfss.php"] [unique_id "apK-mmbX5DA3XO6e_qRqCwAAATo"]
[Sat Aug 29 05:12:26.789529 2026] [security2:error] [pid 1321:tid 1519] [client 20.48.160.90:31363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/comand.php"] [unique_id "apK-mmjCPtor9NZ-byQNCQAABls"]
[Sat Aug 29 05:12:26.790752 2026] [security2:error] [pid 11274:tid 11508] [client 20.48.251.3:38566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/xin1.php"] [unique_id "apK-mmbX5DA3XO6e_qRqDAAAAUk"]
[Sat Aug 29 05:12:26.819826 2026] [security2:error] [pid 1321:tid 1523] [client 4.205.62.107:61664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/paypal.php"] [unique_id "apK-mmjCPtor9NZ-byQNCgAABl8"]
[Sat Aug 29 05:12:26.824164 2026] [security2:error] [pid 11274:tid 11473] [client 52.139.37.240:8476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.coveryourauto.com"] [uri "/admin/function.php"] [unique_id "apK-mmbX5DA3XO6e_qRqDwAAASc"]
[Sat Aug 29 05:12:26.864504 2026] [security2:error] [pid 11274:tid 11503] [client 20.52.41.200:2719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/alfa-rex.php7"] [unique_id "apK-mmbX5DA3XO6e_qRqEAAAAUQ"]
[Sat Aug 29 05:12:26.885125 2026] [security2:error] [pid 11274:tid 11477] [client 20.104.104.62:8194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/sko.php"] [unique_id "apK-mmbX5DA3XO6e_qRqEQAAASs"]
[Sat Aug 29 05:12:26.910397 2026] [security2:error] [pid 1321:tid 1508] [client 4.205.62.107:32513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/routes.php"] [unique_id "apK-mmjCPtor9NZ-byQNCwAABlA"]
[Sat Aug 29 05:12:26.914049 2026] [security2:error] [pid 1321:tid 1593] [client 158.158.54.35:1437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wp-content/themes/pridmag/il.php"] [unique_id "apK-mmjCPtor9NZ-byQNDQAABqQ"]
[Sat Aug 29 05:12:26.922521 2026] [security2:error] [pid 11274:tid 11452] [client 20.48.251.3:38698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/adminfus.php"] [unique_id "apK-mmbX5DA3XO6e_qRqFAAAARI"]
[Sat Aug 29 05:12:26.930344 2026] [security2:error] [pid 1321:tid 1532] [client 20.151.200.44:27177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/tajj.php"] [unique_id "apK-mmjCPtor9NZ-byQNDgAABmg"]
[Sat Aug 29 05:12:26.931915 2026] [security2:error] [pid 1321:tid 1532] [client 20.48.160.90:23775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.jarritosmexico.com"] [uri "/zrjuyoos.php"] [unique_id "apK-mmjCPtor9NZ-byQNDwAABmg"]
[Sat Aug 29 05:12:26.936423 2026] [security2:error] [pid 1321:tid 1544] [client 20.48.160.90:52045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/wp_motu_myk3v.php"] [unique_id "apK-mmjCPtor9NZ-byQNEQAABnQ"]
[Sat Aug 29 05:12:26.938701 2026] [security2:error] [pid 1321:tid 1597] [client 4.205.62.107:63266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/xin1.php"] [unique_id "apK-mmjCPtor9NZ-byQNEgAABqg"]
[Sat Aug 29 05:12:26.957395 2026] [security2:error] [pid 11274:tid 11497] [client 40.83.93.50:20463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/22.php"] [unique_id "apK-mmbX5DA3XO6e_qRqGgAAAT4"]
[Sat Aug 29 05:12:26.969923 2026] [security2:error] [pid 11274:tid 11568] [client 158.158.54.35:4347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK-mmbX5DA3XO6e_qRqGwAAAYQ"]
[Sat Aug 29 05:12:26.988913 2026] [core:error] [pid 1321:tid 1526] [client 20.52.41.200:4940] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:26.988928 2026] [core:error] [pid 1321:tid 1526] [client 20.52.41.200:4940] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:26.991747 2026] [security2:error] [pid 11274:tid 11454] [client 195.178.110.101:4750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "naturalkneads.com"] [uri "/wp/index.php"] [unique_id "apK-mmbX5DA3XO6e_qRqHAAAARQ"], referer: https://naturalkneads.com/wp/wp-admin/
[Sat Aug 29 05:12:27.020513 2026] [security2:error] [pid 1321:tid 1509] [client 20.196.209.81:2000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/update.php"] [unique_id "apK-m2jCPtor9NZ-byQNFgAABlE"]
[Sat Aug 29 05:12:27.021744 2026] [security2:error] [pid 1321:tid 1498] [client 52.139.37.240:8578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.coveryourauto.com"] [uri "/zoom1.php"] [unique_id "apK-m2jCPtor9NZ-byQNFwAABkY"]
[Sat Aug 29 05:12:27.023556 2026] [security2:error] [pid 1321:tid 1583] [client 4.205.62.107:6284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/test1.php"] [unique_id "apK-m2jCPtor9NZ-byQNGAAABpo"]
[Sat Aug 29 05:12:27.038969 2026] [security2:error] [pid 11274:tid 11459] [client 68.155.159.216:2008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/.well-knownold/index.php"] [unique_id "apK-m2bX5DA3XO6e_qRqHQAAARk"]
[Sat Aug 29 05:12:27.050241 2026] [security2:error] [pid 11274:tid 11554] [client 20.48.251.3:38689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/env.php"] [unique_id "apK-m2bX5DA3XO6e_qRqHgAAAXY"]
[Sat Aug 29 05:12:27.052028 2026] [security2:error] [pid 1321:tid 1504] [client 158.23.147.79:50149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK-m2jCPtor9NZ-byQNGQAABkw"]
[Sat Aug 29 05:12:27.065001 2026] [security2:error] [pid 1321:tid 1562] [client 20.104.18.15:29084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/132.php"] [unique_id "apK-m2jCPtor9NZ-byQNGgAABoU"]
[Sat Aug 29 05:12:27.067272 2026] [security2:error] [pid 1321:tid 1592] [client 158.23.147.79:39264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-content/index.php"] [unique_id "apK-m2jCPtor9NZ-byQNGwAABqM"]
[Sat Aug 29 05:12:27.070766 2026] [security2:error] [pid 1321:tid 1581] [client 20.48.160.90:52000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/wp_motu_ypdat.php"] [unique_id "apK-m2jCPtor9NZ-byQNHAAABpg"]
[Sat Aug 29 05:12:27.073605 2026] [security2:error] [pid 1321:tid 1603] [client 20.104.104.62:8205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/zoz.php"] [unique_id "apK-m2jCPtor9NZ-byQNHQAABq4"]
[Sat Aug 29 05:12:27.102284 2026] [security2:error] [pid 11274:tid 11465] [client 158.23.147.79:24425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/cgi-bin/index.php"] [unique_id "apK-m2bX5DA3XO6e_qRqIgAAAR8"]
[Sat Aug 29 05:12:27.106512 2026] [security2:error] [pid 1321:tid 1510] [client 68.155.159.216:49037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/wp-content/radio.php"] [unique_id "apK-m2jCPtor9NZ-byQNHgAABlI"]
[Sat Aug 29 05:12:27.117179 2026] [security2:error] [pid 11274:tid 11512] [client 62.60.130.128:62026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.130.60.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "faap1940.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "apK-m2bX5DA3XO6e_qRqIwAAAU0"]
[Sat Aug 29 05:12:27.126318 2026] [security2:error] [pid 11274:tid 11535] [client 20.151.200.44:55695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/super.php"] [unique_id "apK-m2bX5DA3XO6e_qRqJAAAAWQ"]
[Sat Aug 29 05:12:27.147948 2026] [security2:error] [pid 1321:tid 1594] [client 20.63.219.114:18863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/gecko-new.php"] [unique_id "apK-m2jCPtor9NZ-byQNHwAABqU"]
[Sat Aug 29 05:12:27.155102 2026] [security2:error] [pid 11274:tid 11515] [client 20.104.104.62:20649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/fpebr.php"] [unique_id "apK-m2bX5DA3XO6e_qRqJgAAAVA"]
[Sat Aug 29 05:12:27.158977 2026] [security2:error] [pid 11274:tid 11464] [client 20.104.104.62:48621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/ca4.php"] [unique_id "apK-m2bX5DA3XO6e_qRqJwAAAR4"]
[Sat Aug 29 05:12:27.177885 2026] [security2:error] [pid 1321:tid 1610] [client 20.48.251.3:38010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/ms-edit.php"] [unique_id "apK-m2jCPtor9NZ-byQNIQAABrU"]
[Sat Aug 29 05:12:27.178098 2026] [security2:error] [pid 1321:tid 1582] [client 74.248.24.12:24400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "apK-m2jCPtor9NZ-byQNIAAABpk"]
[Sat Aug 29 05:12:27.181883 2026] [security2:error] [pid 11274:tid 11468] [client 4.205.62.107:63354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/localconf.php"] [unique_id "apK-m2bX5DA3XO6e_qRqKQAAASI"]
[Sat Aug 29 05:12:27.195333 2026] [security2:error] [pid 11274:tid 11494] [client 20.104.18.15:29153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/v22.php"] [unique_id "apK-m2bX5DA3XO6e_qRqKgAAATs"]
[Sat Aug 29 05:12:27.199116 2026] [security2:error] [pid 1321:tid 1557] [client 20.48.160.90:31440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/edit.php"] [unique_id "apK-m2jCPtor9NZ-byQNIgAABoA"]
[Sat Aug 29 05:12:27.235958 2026] [security2:error] [pid 1321:tid 1497] [client 20.104.104.62:8870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/mmm.php"] [unique_id "apK-m2jCPtor9NZ-byQNJAAABkU"]
[Sat Aug 29 05:12:27.239297 2026] [security2:error] [pid 11274:tid 11555] [client 52.139.37.240:8474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.coveryourauto.com"] [uri "/about.php7"] [unique_id "apK-m2bX5DA3XO6e_qRqLAAAAXc"]
[Sat Aug 29 05:12:27.261908 2026] [security2:error] [pid 11274:tid 11448] [client 20.240.128.207:24886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/system_log.php"] [unique_id "apK-m2bX5DA3XO6e_qRqLgAAAQ4"]
[Sat Aug 29 05:12:27.294506 2026] [security2:error] [pid 11274:tid 11509] [client 68.155.159.216:43970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/wp-content/languages/about.php"] [unique_id "apK-m2bX5DA3XO6e_qRqMAAAAUo"]
[Sat Aug 29 05:12:27.297060 2026] [security2:error] [pid 11274:tid 11558] [client 20.220.204.93:18789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/shlo.php"] [unique_id "apK-m2bX5DA3XO6e_qRqMQAAAXo"]
[Sat Aug 29 05:12:27.304550 2026] [security2:error] [pid 1321:tid 1490] [client 20.48.251.3:38681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/avim.php"] [unique_id "apK-m2jCPtor9NZ-byQNJgAABj4"]
[Sat Aug 29 05:12:27.309266 2026] [security2:error] [pid 11274:tid 11569] [client 20.52.41.200:2143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "apK-m2bX5DA3XO6e_qRqMgAAAYU"]
[Sat Aug 29 05:12:27.329894 2026] [security2:error] [pid 11274:tid 11479] [client 68.155.159.216:43912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.theenprogroup.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK-m2bX5DA3XO6e_qRqMwAAASw"]
[Sat Aug 29 05:12:27.333179 2026] [security2:error] [pid 11274:tid 11545] [client 20.48.160.90:31478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/tqkdqbbv.php"] [unique_id "apK-m2bX5DA3XO6e_qRqNAAAAW0"]
[Sat Aug 29 05:12:27.339383 2026] [security2:error] [pid 11274:tid 11469] [client 20.104.18.15:29064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/wp-activate.php"] [unique_id "apK-m2bX5DA3XO6e_qRqNQAAASM"]
[Sat Aug 29 05:12:27.359172 2026] [security2:error] [pid 11274:tid 11449] [client 158.158.54.35:1466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/assets/images/doc.php"] [unique_id "apK-m2bX5DA3XO6e_qRqNgAAAQ8"]
[Sat Aug 29 05:12:27.376022 2026] [security2:error] [pid 11274:tid 11538] [client 20.104.104.62:8871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/advanced.php"] [unique_id "apK-m2bX5DA3XO6e_qRqOAAAAWc"]
[Sat Aug 29 05:12:27.408777 2026] [security2:error] [pid 11274:tid 11560] [client 158.158.54.35:15814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/xda.php"] [unique_id "apK-m2bX5DA3XO6e_qRqOgAAAXw"]
[Sat Aug 29 05:12:27.430984 2026] [security2:error] [pid 11274:tid 11513] [client 52.139.37.240:9101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.coveryourauto.com"] [uri "/cron.php"] [unique_id "apK-m2bX5DA3XO6e_qRqOwAAAU4"]
[Sat Aug 29 05:12:27.431555 2026] [security2:error] [pid 11274:tid 11473] [client 20.196.209.81:11315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/blog.php"] [unique_id "apK-m2bX5DA3XO6e_qRqPAAAASc"]
[Sat Aug 29 05:12:27.432090 2026] [security2:error] [pid 11274:tid 11492] [client 20.48.251.3:38698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/file21.php"] [unique_id "apK-m2bX5DA3XO6e_qRqPQAAATk"]
[Sat Aug 29 05:12:27.446293 2026] [security2:error] [pid 11274:tid 11518] [client 4.205.62.107:28035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/var/www/wallet/index.php"] [unique_id "apK-m2bX5DA3XO6e_qRqPgAAAVM"]
[Sat Aug 29 05:12:27.447535 2026] [security2:error] [pid 11274:tid 11571] [client 20.197.61.180:3356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-admin/network/xmrlpc.php"] [unique_id "apK-m2bX5DA3XO6e_qRqPwAAAYc"]
[Sat Aug 29 05:12:27.452700 2026] [core:error] [pid 11274:tid 11504] [client 20.52.41.200:4658] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:27.452724 2026] [core:error] [pid 11274:tid 11504] [client 20.52.41.200:4658] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:27.456874 2026] [security2:error] [pid 11274:tid 11501] [client 40.83.93.50:14736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/bak.phps"] [unique_id "apK-m2bX5DA3XO6e_qRqQQAAAUI"]
[Sat Aug 29 05:12:27.457440 2026] [security2:error] [pid 11274:tid 11530] [client 213.202.253.4:59775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/filefuns.php"] [unique_id "apK-m2bX5DA3XO6e_qRqQgAAAV8"], referer: www.google.com
[Sat Aug 29 05:12:27.461940 2026] [security2:error] [pid 11274:tid 11451] [client 20.48.160.90:48352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/kjyehoxl.php"] [unique_id "apK-m2bX5DA3XO6e_qRqQwAAARE"]
[Sat Aug 29 05:12:27.479198 2026] [security2:error] [pid 11274:tid 11506] [client 68.155.159.216:62836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/about.php"] [unique_id "apK-m2bX5DA3XO6e_qRqRAAAAUc"]
[Sat Aug 29 05:12:27.484752 2026] [security2:error] [pid 1321:tid 1515] [client 20.197.61.180:1596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/class-walker-category-dropdown-class.php"] [unique_id "apK-m2jCPtor9NZ-byQNJwAABlc"]
[Sat Aug 29 05:12:27.495764 2026] [security2:error] [pid 11274:tid 11461] [client 20.104.49.130:50579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/100.php"] [unique_id "apK-m2bX5DA3XO6e_qRqRQAAARs"]
[Sat Aug 29 05:12:27.501646 2026] [security2:error] [pid 11274:tid 11500] [client 158.23.147.79:14155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK-m2bX5DA3XO6e_qRqRwAAAUE"]
[Sat Aug 29 05:12:27.530011 2026] [security2:error] [pid 11274:tid 11459] [client 20.104.104.62:48099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/blox.php"] [unique_id "apK-m2bX5DA3XO6e_qRqSQAAARk"]
[Sat Aug 29 05:12:27.550951 2026] [security2:error] [pid 1321:tid 1567] [client 68.155.159.216:23397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/worksec.php"] [unique_id "apK-m2jCPtor9NZ-byQNKAAABoo"]
[Sat Aug 29 05:12:27.557074 2026] [security2:error] [pid 11274:tid 11465] [client 68.155.159.216:7151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-includes/plugins.php"] [unique_id "apK-m2bX5DA3XO6e_qRqTAAAAR8"]
[Sat Aug 29 05:12:27.559120 2026] [security2:error] [pid 11274:tid 11522] [client 20.48.251.3:38166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/wsws.php"] [unique_id "apK-m2bX5DA3XO6e_qRqTQAAAVc"]
[Sat Aug 29 05:12:27.566362 2026] [security2:error] [pid 11274:tid 11535] [client 4.205.62.107:6142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/cp2.php"] [unique_id "apK-m2bX5DA3XO6e_qRqTgAAAWQ"]
[Sat Aug 29 05:12:27.592630 2026] [security2:error] [pid 11274:tid 11507] [client 20.48.250.41:24481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/cc13.php"] [unique_id "apK-m2bX5DA3XO6e_qRqTwAAAUg"]
[Sat Aug 29 05:12:27.597340 2026] [security2:error] [pid 11274:tid 11484] [client 20.48.160.90:31395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/llyuxaqd.php"] [unique_id "apK-m2bX5DA3XO6e_qRqUAAAATE"]
[Sat Aug 29 05:12:27.625390 2026] [security2:error] [pid 11274:tid 11499] [client 4.205.62.107:64957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/05.php"] [unique_id "apK-m2bX5DA3XO6e_qRqUQAAAUA"]
[Sat Aug 29 05:12:27.626342 2026] [security2:error] [pid 11274:tid 11505] [client 52.139.37.240:8479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.coveryourauto.com"] [uri "/wp-2019.php"] [unique_id "apK-m2bX5DA3XO6e_qRqUgAAAUY"]
[Sat Aug 29 05:12:27.637216 2026] [security2:error] [pid 11274:tid 11534] [client 103.185.242.143:49548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-m2bX5DA3XO6e_qRqUwAAAWM"]
[Sat Aug 29 05:12:27.637336 2026] [security2:error] [pid 11274:tid 11534] [client 103.185.242.143:49548] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-m2bX5DA3XO6e_qRqUwAAAWM"]
[Sat Aug 29 05:12:27.645426 2026] [security2:error] [pid 11274:tid 11536] [client 20.151.200.44:55687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/lufix1.php"] [unique_id "apK-m2bX5DA3XO6e_qRqVAAAAWU"]
[Sat Aug 29 05:12:27.652549 2026] [security2:error] [pid 1321:tid 1523] [client 20.48.250.41:25543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/kbfr.php"] [unique_id "apK-m2jCPtor9NZ-byQNKgAABl8"]
[Sat Aug 29 05:12:27.681266 2026] [security2:error] [pid 11274:tid 11448] [client 20.104.104.62:8196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/kcs.php"] [unique_id "apK-m2bX5DA3XO6e_qRqVQAAAQ4"]
[Sat Aug 29 05:12:27.687319 2026] [security2:error] [pid 1321:tid 1612] [client 20.48.251.3:38663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/ebahvhhh.php"] [unique_id "apK-m2jCPtor9NZ-byQNLAAABrc"]
[Sat Aug 29 05:12:27.694543 2026] [security2:error] [pid 11274:tid 11486] [client 74.248.24.12:38717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/css/wp-login.php"] [unique_id "apK-m2bX5DA3XO6e_qRqVwAAATM"]
[Sat Aug 29 05:12:27.694878 2026] [security2:error] [pid 11274:tid 11558] [client 158.23.147.79:62838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/worksec.php"] [unique_id "apK-m2bX5DA3XO6e_qRqWAAAAXo"]
[Sat Aug 29 05:12:27.717364 2026] [security2:error] [pid 11274:tid 11563] [client 20.63.219.114:1910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/wp-admin.php"] [unique_id "apK-m2bX5DA3XO6e_qRqWQAAAX8"]
[Sat Aug 29 05:12:27.753826 2026] [security2:error] [pid 11274:tid 11469] [client 20.48.160.90:52044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/nbwxolou.php"] [unique_id "apK-m2bX5DA3XO6e_qRqWwAAASM"]
[Sat Aug 29 05:12:27.754161 2026] [security2:error] [pid 11274:tid 11516] [client 20.240.128.207:21442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/24.php"] [unique_id "apK-m2bX5DA3XO6e_qRqXAAAAVE"]
[Sat Aug 29 05:12:27.767241 2026] [security2:error] [pid 11274:tid 11449] [client 20.48.250.41:36850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/init.php"] [unique_id "apK-m2bX5DA3XO6e_qRqXQAAAQ8"]
[Sat Aug 29 05:12:27.769431 2026] [security2:error] [pid 1321:tid 1519] [client 20.52.41.200:2671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/upload.php"] [unique_id "apK-m2jCPtor9NZ-byQNLQAABls"]
[Sat Aug 29 05:12:27.787371 2026] [security2:error] [pid 11274:tid 11470] [client 20.48.250.41:24403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/aa.php"] [unique_id "apK-m2bX5DA3XO6e_qRqXgAAASQ"]
[Sat Aug 29 05:12:27.805029 2026] [security2:error] [pid 11274:tid 11496] [client 158.158.54.35:31912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/bgymj.php"] [unique_id "apK-m2bX5DA3XO6e_qRqYAAAAT0"]
[Sat Aug 29 05:12:27.815564 2026] [security2:error] [pid 1321:tid 1544] [client 20.48.251.3:38562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/bthil.php"] [unique_id "apK-m2jCPtor9NZ-byQNLwAABnQ"]
[Sat Aug 29 05:12:27.836299 2026] [security2:error] [pid 1321:tid 1593] [client 52.139.37.240:8593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.coveryourauto.com"] [uri "/gecko-new.php"] [unique_id "apK-m2jCPtor9NZ-byQNMAAABqQ"]
[Sat Aug 29 05:12:27.837298 2026] [security2:error] [pid 1321:tid 1597] [client 20.104.104.62:48717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/x0x.php"] [unique_id "apK-m2jCPtor9NZ-byQNMQAABqg"]
[Sat Aug 29 05:12:27.839440 2026] [security2:error] [pid 1321:tid 1548] [client 20.104.104.62:8212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/wsz.php"] [unique_id "apK-m2jCPtor9NZ-byQNMgAABnc"]
[Sat Aug 29 05:12:27.858624 2026] [security2:error] [pid 1321:tid 1547] [client 68.155.159.216:56548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-includes/js/index.php"] [unique_id "apK-m2jCPtor9NZ-byQNNAAABnY"]
[Sat Aug 29 05:12:27.858909 2026] [security2:error] [pid 11274:tid 11483] [client 158.158.54.35:8403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/theme.php"] [unique_id "apK-m2bX5DA3XO6e_qRqYwAAATA"]
[Sat Aug 29 05:12:27.870866 2026] [security2:error] [pid 11274:tid 11492] [client 20.48.250.41:39883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/35.php"] [unique_id "apK-m2bX5DA3XO6e_qRqZAAAATk"]
[Sat Aug 29 05:12:27.873952 2026] [security2:error] [pid 11274:tid 11492] [client 20.48.250.41:25426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/wp-act.php"] [unique_id "apK-m2bX5DA3XO6e_qRqZgAAATk"]
[Sat Aug 29 05:12:27.882839 2026] [security2:error] [pid 1321:tid 1536] [client 20.151.200.44:27169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/grsiuk.php"] [unique_id "apK-m2jCPtor9NZ-byQNNgAABmw"]
[Sat Aug 29 05:12:27.884421 2026] [security2:error] [pid 11274:tid 11476] [client 20.48.160.90:31481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/nsxeubyv.php"] [unique_id "apK-m2bX5DA3XO6e_qRqZwAAASo"]
[Sat Aug 29 05:12:27.916757 2026] [security2:error] [pid 11274:tid 11456] [client 20.52.41.200:4658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-content/admin.php"] [unique_id "apK-m2bX5DA3XO6e_qRqaQAAARY"]
[Sat Aug 29 05:12:27.935933 2026] [security2:error] [pid 11274:tid 11506] [client 68.155.159.216:21479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/cong.php"] [unique_id "apK-m2bX5DA3XO6e_qRqbAAAAUc"]
[Sat Aug 29 05:12:27.944673 2026] [security2:error] [pid 11274:tid 11500] [client 20.48.251.3:38154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/aws_auth.php"] [unique_id "apK-m2bX5DA3XO6e_qRqbgAAAUE"]
[Sat Aug 29 05:12:27.956117 2026] [security2:error] [pid 11274:tid 11444] [client 4.205.62.107:63930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/userfuns.php"] [unique_id "apK-m2bX5DA3XO6e_qRqbwAAAQo"]
[Sat Aug 29 05:12:27.958097 2026] [security2:error] [pid 11274:tid 11466] [client 20.196.209.81:1396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/bypass.php"] [unique_id "apK-m2bX5DA3XO6e_qRqcAAAASA"]
[Sat Aug 29 05:12:27.973824 2026] [security2:error] [pid 11274:tid 11522] [client 20.104.104.62:8836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/msy.php"] [unique_id "apK-m2bX5DA3XO6e_qRqcgAAAVc"]
[Sat Aug 29 05:12:27.974646 2026] [security2:error] [pid 1321:tid 1516] [client 45.83.178.43:57785] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "goodtogo.store"] [uri "/webapp/xmlrpc.php"] [unique_id "apK-m2jCPtor9NZ-byQNIwAABlg"]
[Sat Aug 29 05:12:27.980785 2026] [security2:error] [pid 11274:tid 11445] [client 40.83.93.50:13961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/install.php"] [unique_id "apK-m2bX5DA3XO6e_qRqcwAAAQs"]
[Sat Aug 29 05:12:28.003152 2026] [security2:error] [pid 11274:tid 11535] [client 20.104.18.15:29694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/wp-trackback.php"] [unique_id "apK-nGbX5DA3XO6e_qRqdAAAAWQ"]
[Sat Aug 29 05:12:28.023459 2026] [security2:error] [pid 11274:tid 11464] [client 20.48.160.90:52041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/zfqipfss.php"] [unique_id "apK-nGbX5DA3XO6e_qRqdQAAAR4"]
[Sat Aug 29 05:12:28.030553 2026] [security2:error] [pid 11274:tid 11465] [client 52.139.37.240:8585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.coveryourauto.com"] [uri "/add_actualites.php"] [unique_id "apK-nGbX5DA3XO6e_qRqdgAAAR8"]
[Sat Aug 29 05:12:28.048374 2026] [security2:error] [pid 11274:tid 11540] [client 4.205.62.107:32570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/aww.php"] [unique_id "apK-nGbX5DA3XO6e_qRqdwAAAWk"]
[Sat Aug 29 05:12:28.063220 2026] [security2:error] [pid 11274:tid 11499] [client 158.23.147.79:7156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/wp-content/cong.php"] [unique_id "apK-nGbX5DA3XO6e_qRqeAAAAUA"]
[Sat Aug 29 05:12:28.073783 2026] [security2:error] [pid 11274:tid 11508] [client 20.48.251.3:38560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/queue.php"] [unique_id "apK-nGbX5DA3XO6e_qRqeQAAAUk"]
[Sat Aug 29 05:12:28.094572 2026] [security2:error] [pid 11274:tid 11563] [client 4.205.62.107:60995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/sadd.php"] [unique_id "apK-nGbX5DA3XO6e_qRqegAAAX8"]
[Sat Aug 29 05:12:28.117698 2026] [security2:error] [pid 1321:tid 1502] [client 20.104.104.62:46230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/siln.php"] [unique_id "apK-nGjCPtor9NZ-byQNNwAABko"]
[Sat Aug 29 05:12:28.118088 2026] [security2:error] [pid 11274:tid 11526] [client 20.63.219.114:18856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/wp-configs.php"] [unique_id "apK-nGbX5DA3XO6e_qRqewAAAVs"]
[Sat Aug 29 05:12:28.146790 2026] [security2:error] [pid 1321:tid 1576] [client 68.155.159.216:1833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK-nGjCPtor9NZ-byQNOAAABpM"]
[Sat Aug 29 05:12:28.157292 2026] [security2:error] [pid 11274:tid 11511] [client 20.48.160.90:31374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.160.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.ourloveeverlasting.com"] [uri "/zrjuyoos.php"] [unique_id "apK-nGbX5DA3XO6e_qRqfQAAAUw"]
[Sat Aug 29 05:12:28.171386 2026] [security2:error] [pid 11274:tid 11469] [client 52.139.37.240:55751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/aged.php"] [unique_id "apK-nGbX5DA3XO6e_qRqfgAAASM"]
[Sat Aug 29 05:12:28.172228 2026] [security2:error] [pid 1321:tid 1592] [client 158.23.147.79:50042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/goat.php"] [unique_id "apK-nGjCPtor9NZ-byQNOQAABqM"]
[Sat Aug 29 05:12:28.173448 2026] [security2:error] [pid 11274:tid 11553] [client 20.104.18.15:29084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/pri.php"] [unique_id "apK-nGbX5DA3XO6e_qRqgAAAAXU"]
[Sat Aug 29 05:12:28.179720 2026] [security2:error] [pid 11274:tid 11497] [client 20.197.61.180:3819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-admin/options-general.php"] [unique_id "apK-nGbX5DA3XO6e_qRqggAAAT4"]
[Sat Aug 29 05:12:28.187207 2026] [security2:error] [pid 11274:tid 11473] [client 4.205.62.107:6907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/bigdump.php"] [unique_id "apK-nGbX5DA3XO6e_qRqgwAAASc"]
[Sat Aug 29 05:12:28.188138 2026] [security2:error] [pid 1321:tid 1581] [client 158.23.147.79:43711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/about/function.php"] [unique_id "apK-nGjCPtor9NZ-byQNOgAABpg"]
[Sat Aug 29 05:12:28.190902 2026] [security2:error] [pid 11274:tid 11496] [client 216.51.171.83:59098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 83.171.51.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-nGbX5DA3XO6e_qRqhAAAAT0"]
[Sat Aug 29 05:12:28.190972 2026] [security2:error] [pid 11274:tid 11496] [client 216.51.171.83:59098] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-nGbX5DA3XO6e_qRqhAAAAT0"]
[Sat Aug 29 05:12:28.199840 2026] [security2:error] [pid 11274:tid 11468] [client 74.248.24.12:38695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/images/index.php"] [unique_id "apK-nGbX5DA3XO6e_qRqhQAAASI"]
[Sat Aug 29 05:12:28.200824 2026] [security2:error] [pid 11274:tid 11495] [client 20.48.251.3:38684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/plss3.php"] [unique_id "apK-nGbX5DA3XO6e_qRqhgAAATw"]
[Sat Aug 29 05:12:28.202541 2026] [security2:error] [pid 11274:tid 11559] [client 20.197.61.180:1951] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/1.php7"] [unique_id "apK-nGbX5DA3XO6e_qRqhwAAAXs"]
[Sat Aug 29 05:12:28.202613 2026] [security2:error] [pid 11274:tid 11559] [client 20.197.61.180:1951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/1.php7"] [unique_id "apK-nGbX5DA3XO6e_qRqhwAAAXs"]
[Sat Aug 29 05:12:28.204437 2026] [security2:error] [pid 1321:tid 1603] [client 68.155.159.216:49105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/wp-admin/dropdown.php"] [unique_id "apK-nGjCPtor9NZ-byQNOwAABq4"]
[Sat Aug 29 05:12:28.205210 2026] [security2:error] [pid 11274:tid 11504] [client 158.23.147.79:24465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK-nGbX5DA3XO6e_qRqiAAAAUU"]
[Sat Aug 29 05:12:28.225332 2026] [security2:error] [pid 1321:tid 1562] [client 52.139.37.240:8624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.coveryourauto.com"] [uri "/browse.php"] [unique_id "apK-nGjCPtor9NZ-byQNPAAABoU"]
[Sat Aug 29 05:12:28.269031 2026] [security2:error] [pid 1321:tid 1532] [client 103.240.76.112:42845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK-nGjCPtor9NZ-byQNPQAABmg"]
[Sat Aug 29 05:12:28.269174 2026] [security2:error] [pid 1321:tid 1532] [client 103.240.76.112:42845] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK-nGjCPtor9NZ-byQNPQAABmg"]
[Sat Aug 29 05:12:28.272968 2026] [security2:error] [pid 11274:tid 11549] [client 20.104.104.62:8223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/f-401.php"] [unique_id "apK-nGbX5DA3XO6e_qRqjgAAAXE"]
[Sat Aug 29 05:12:28.277037 2026] [security2:error] [pid 1321:tid 1504] [client 158.158.54.35:15057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK-nGjCPtor9NZ-byQNPgAABkw"]
[Sat Aug 29 05:12:28.305698 2026] [security2:error] [pid 11274:tid 11480] [client 20.104.104.62:48449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.dreamworkcarpentry.com"] [uri "/fesa.php"] [unique_id "apK-nGbX5DA3XO6e_qRqjwAAAS0"]
[Sat Aug 29 05:12:28.313957 2026] [security2:error] [pid 1321:tid 1601] [client 4.205.62.107:63357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/bengi.php"] [unique_id "apK-nGjCPtor9NZ-byQNPwAABqw"]
[Sat Aug 29 05:12:28.315076 2026] [security2:error] [pid 11274:tid 11483] [client 158.158.54.35:8442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/classwithtostring.php"] [unique_id "apK-nGbX5DA3XO6e_qRqkAAAATA"]
[Sat Aug 29 05:12:28.329061 2026] [security2:error] [pid 11274:tid 11489] [client 20.48.251.3:38697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/configuration.php"] [unique_id "apK-nGbX5DA3XO6e_qRqkwAAATY"]
[Sat Aug 29 05:12:28.336132 2026] [security2:error] [pid 11274:tid 11538] [client 103.48.146.148:55919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 148.146.48.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK-nGbX5DA3XO6e_qRqlAAAAWc"]
[Sat Aug 29 05:12:28.336213 2026] [security2:error] [pid 11274:tid 11538] [client 103.48.146.148:55919] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK-nGbX5DA3XO6e_qRqlAAAAWc"]
[Sat Aug 29 05:12:28.357395 2026] [proxy_http:error] [pid 1041789:tid 1041989] (70007)The timeout specified has expired: [client 127.0.0.1:48416] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:12:28.357395 2026] [proxy_http:error] [pid 1041789:tid 1041805] (70007)The timeout specified has expired: [remote 57.141.14.41:57682] AH01102: error reading status line from remote server 127.0.0.1:8443
[Sat Aug 29 05:12:28.357444 2026] [proxy:error] [pid 1041789:tid 1041989] [client 127.0.0.1:48416] AH00898: Error reading from remote server returned by /shop/
[Sat Aug 29 05:12:28.357444 2026] [proxy:error] [pid 1041789:tid 1041805] [remote 57.141.14.41:57682] AH00898: Error reading from remote server returned by /shop/
[Sat Aug 29 05:12:28.368972 2026] [security2:error] [pid 1321:tid 1510] [client 52.139.37.240:55752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/essexec.php"] [unique_id "apK-nGjCPtor9NZ-byQNQwAABlI"]
[Sat Aug 29 05:12:28.381766 2026] [security2:error] [pid 11274:tid 11515] [client 20.220.204.93:59600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/asax.php"] [unique_id "apK-nGbX5DA3XO6e_qRqmQAAAVA"]
[Sat Aug 29 05:12:28.382625 2026] [security2:error] [pid 11274:tid 11539] [client 20.151.200.44:55708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/hack.php"] [unique_id "apK-nGbX5DA3XO6e_qRqmgAAAWg"]
[Sat Aug 29 05:12:28.386942 2026] [security2:error] [pid 11274:tid 11568] [client 20.52.41.200:4964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-configs.php"] [unique_id "apK-nGbX5DA3XO6e_qRqnAAAAYQ"]
[Sat Aug 29 05:12:28.419302 2026] [security2:error] [pid 11274:tid 11518] [client 20.240.128.207:13725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK-nGbX5DA3XO6e_qRqnQAAAVM"]
[Sat Aug 29 05:12:28.419937 2026] [security2:error] [pid 11274:tid 11524] [client 52.139.37.240:8634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.coveryourauto.com"] [uri "/contentloader1.php"] [unique_id "apK-nGbX5DA3XO6e_qRqngAAAVk"]
[Sat Aug 29 05:12:28.421809 2026] [security2:error] [pid 11274:tid 11494] [client 68.155.159.216:43969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/wp-content/banners/about.php"] [unique_id "apK-nGbX5DA3XO6e_qRqnwAAATs"]
[Sat Aug 29 05:12:28.424304 2026] [security2:error] [pid 11274:tid 11541] [client 20.104.18.15:29657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/wp_blog_footer.php"] [unique_id "apK-nGbX5DA3XO6e_qRqoAAAAWo"]
[Sat Aug 29 05:12:28.434402 2026] [security2:error] [pid 11274:tid 11498] [client 20.104.104.62:46263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/hq.php"] [unique_id "apK-nGbX5DA3XO6e_qRqoQAAAT8"]
[Sat Aug 29 05:12:28.434638 2026] [security2:error] [pid 11274:tid 11505] [client 68.155.159.216:43845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.theenprogroup.com"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK-nGbX5DA3XO6e_qRqogAAAUY"]
[Sat Aug 29 05:12:28.436661 2026] [security2:error] [pid 1321:tid 1512] [client 20.196.209.81:2004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/extractable-loader-head.php"] [unique_id "apK-nGjCPtor9NZ-byQNRAAABlQ"]
[Sat Aug 29 05:12:28.457687 2026] [security2:error] [pid 11274:tid 11534] [client 20.48.251.3:37953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/public/rip.php.php"] [unique_id "apK-nGbX5DA3XO6e_qRqowAAAWM"]
[Sat Aug 29 05:12:28.492691 2026] [security2:error] [pid 11274:tid 11342] [remote 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK-nGbX5DA3XO6e_qRqpgABCh0"]
[Sat Aug 29 05:12:28.492838 2026] [security2:error] [pid 11274:tid 11444] [client 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK-nGbX5DA3XO6e_qRqpgABCh0"]
[Sat Aug 29 05:12:28.504343 2026] [security2:error] [pid 11274:tid 11470] [client 20.104.18.15:29143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/wp-trackback.php"] [unique_id "apK-nGbX5DA3XO6e_qRqqAAAASQ"]
[Sat Aug 29 05:12:28.504840 2026] [security2:error] [pid 11274:tid 11526] [client 213.180.203.84:48232] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Mozilla\\\\/5\\\\.0 \\\$compatible; YandexBot\\\\/3\\\\.0; \\\\+http:\\\\/\\\\/yandex\\\\.com\\\\/bots\\\$" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/othercrawler.conf"] [line "3"] [id "901008"] [msg "Yandex Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.cloud9walkers.com"] [uri "/robots.txt"] [unique_id "apK-nGbX5DA3XO6e_qRqpwAAAVs"]
[Sat Aug 29 05:12:28.519962 2026] [security2:error] [pid 11274:tid 11484] [client 20.63.219.114:1884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/essexec.php"] [unique_id "apK-nGbX5DA3XO6e_qRqqQAAATE"]
[Sat Aug 29 05:12:28.529945 2026] [security2:error] [pid 11274:tid 11553] [client 20.52.41.200:2740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-content/file.php"] [unique_id "apK-nGbX5DA3XO6e_qRqqgAAAXU"]
[Sat Aug 29 05:12:28.565423 2026] [security2:error] [pid 11274:tid 11543] [client 52.139.37.240:6734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/fw.php"] [unique_id "apK-nGbX5DA3XO6e_qRqrAAAAWs"]
[Sat Aug 29 05:12:28.576177 2026] [security2:error] [pid 1321:tid 1563] [client 40.83.93.50:11826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/colour.php"] [unique_id "apK-nGjCPtor9NZ-byQNRQAABoY"]
[Sat Aug 29 05:12:28.584830 2026] [security2:error] [pid 1321:tid 1522] [client 20.48.251.3:38548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/h.php"] [unique_id "apK-nGjCPtor9NZ-byQNRgAABl4"]
[Sat Aug 29 05:12:28.594295 2026] [security2:error] [pid 1321:tid 1577] [client 4.205.62.107:28046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/124.php"] [unique_id "apK-nGjCPtor9NZ-byQNRwAABpQ"]
[Sat Aug 29 05:12:28.595533 2026] [security2:error] [pid 1321:tid 1574] [client 20.104.18.15:29574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/sushi.php"] [unique_id "apK-nGjCPtor9NZ-byQNSAAABpE"]
[Sat Aug 29 05:12:28.602738 2026] [security2:error] [pid 1321:tid 1515] [client 20.151.200.44:27326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/ahy66.php"] [unique_id "apK-nGjCPtor9NZ-byQNSQAABlc"]
[Sat Aug 29 05:12:28.605926 2026] [security2:error] [pid 1321:tid 1567] [client 158.23.147.79:14183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/nf_tracking.php"] [unique_id "apK-nGjCPtor9NZ-byQNSgAABoo"]
[Sat Aug 29 05:12:28.606109 2026] [security2:error] [pid 1321:tid 1580] [client 20.104.104.62:46253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/mh.php"] [unique_id "apK-nGjCPtor9NZ-byQNSwAABpc"]
[Sat Aug 29 05:12:28.617318 2026] [security2:error] [pid 11274:tid 11496] [client 52.139.37.240:8614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.coveryourauto.com"] [uri "/upfile.php"] [unique_id "apK-nGbX5DA3XO6e_qRqrQAAAT0"]
[Sat Aug 29 05:12:28.628392 2026] [proxy_http:error] [pid 1017536:tid 1017617] (70007)The timeout specified has expired: [remote 57.141.14.14:64940] AH01102: error reading status line from remote server 127.0.0.1:8443
[Sat Aug 29 05:12:28.628412 2026] [proxy:error] [pid 1017536:tid 1017617] [remote 57.141.14.14:64940] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:12:28.636385 2026] [proxy_http:error] [pid 1041789:tid 1042012] (70007)The timeout specified has expired: [client 127.0.0.1:48424] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:12:28.636486 2026] [proxy:error] [pid 1041789:tid 1042012] [client 127.0.0.1:48424] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:12:28.637275 2026] [security2:error] [pid 1321:tid 1543] [client 20.104.18.15:29088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/pri.php"] [unique_id "apK-nGjCPtor9NZ-byQNTAAABnM"]
[Sat Aug 29 05:12:28.638372 2026] [proxy_http:error] [pid 1017536:tid 1017747] (70007)The timeout specified has expired: [client 127.0.0.1:27600] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:12:28.638383 2026] [proxy:error] [pid 1017536:tid 1017747] [client 127.0.0.1:27600] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:12:28.651252 2026] [security2:error] [pid 1321:tid 1544] [client 68.155.159.216:23494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/x.php"] [unique_id "apK-nGjCPtor9NZ-byQNTgAABnQ"]
[Sat Aug 29 05:12:28.657948 2026] [security2:error] [pid 1321:tid 1597] [client 68.155.159.216:64040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK-nGjCPtor9NZ-byQNTwAABqg"]
[Sat Aug 29 05:12:28.711449 2026] [security2:error] [pid 1321:tid 1607] [client 20.48.251.3:38561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/mamzi.php"] [unique_id "apK-nGjCPtor9NZ-byQNUgAABrI"]
[Sat Aug 29 05:12:28.712826 2026] [security2:error] [pid 1321:tid 1566] [client 4.205.62.107:6114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/xda.php"] [unique_id "apK-nGjCPtor9NZ-byQNUwAABok"]
[Sat Aug 29 05:12:28.727948 2026] [security2:error] [pid 1321:tid 1509] [client 20.104.18.15:29146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/manga.php"] [unique_id "apK-nGjCPtor9NZ-byQNVQAABlE"]
[Sat Aug 29 05:12:28.745005 2026] [cgid:error] [pid 1321:tid 1586] [client 74.248.24.12:24387] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/themysticalseven/404.shtml
[Sat Aug 29 05:12:28.746616 2026] [security2:error] [pid 1321:tid 1498] [client 20.104.104.62:8230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/f2r4.php"] [unique_id "apK-nGjCPtor9NZ-byQNWAAABkY"]
[Sat Aug 29 05:12:28.760507 2026] [security2:error] [pid 1321:tid 1536] [client 52.139.37.240:52645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/zwso.php"] [unique_id "apK-nGjCPtor9NZ-byQNWgAABmw"]
[Sat Aug 29 05:12:28.764861 2026] [security2:error] [pid 1321:tid 1612] [client 158.158.54.35:24353] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/news.php"] [unique_id "apK-nGjCPtor9NZ-byQNWwAABrc"]
[Sat Aug 29 05:12:28.769478 2026] [security2:error] [pid 1321:tid 1590] [client 20.104.18.15:29062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/wp_blog_footer.php"] [unique_id "apK-nGjCPtor9NZ-byQNXAAABqE"]
[Sat Aug 29 05:12:28.784101 2026] [security2:error] [pid 1321:tid 1532] [client 4.205.62.107:64974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/wp-blog.php"] [unique_id "apK-nGjCPtor9NZ-byQNYAAABmg"]
[Sat Aug 29 05:12:28.820853 2026] [security2:error] [pid 1321:tid 1576] [client 52.139.37.240:8451] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.coveryourauto.com"] [uri "/form.php"] [unique_id "apK-nGjCPtor9NZ-byQNZAAABpM"]
[Sat Aug 29 05:12:28.835699 2026] [security2:error] [pid 1321:tid 1598] [client 20.196.209.81:10723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/defaults.php"] [unique_id "apK-nGjCPtor9NZ-byQNZwAABqk"]
[Sat Aug 29 05:12:28.849732 2026] [security2:error] [pid 1321:tid 1497] [client 20.48.251.3:38531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/admin.php"] [unique_id "apK-nGjCPtor9NZ-byQNaAAABkU"]
[Sat Aug 29 05:12:28.852670 2026] [security2:error] [pid 1321:tid 1560] [client 20.52.41.200:5127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-includes/index.php"] [unique_id "apK-nGjCPtor9NZ-byQNagAABoM"]
[Sat Aug 29 05:12:28.882785 2026] [security2:error] [pid 1321:tid 1508] [client 20.197.61.180:3838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-admin/options.php"] [unique_id "apK-nGjCPtor9NZ-byQNbgAABlA"]
[Sat Aug 29 05:12:28.893899 2026] [security2:error] [pid 1321:tid 1563] [client 20.104.18.15:29584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/asdfghj.php"] [unique_id "apK-nGjCPtor9NZ-byQNbwAABoY"]
[Sat Aug 29 05:12:28.894857 2026] [security2:error] [pid 1321:tid 1526] [client 81.208.175.87:59952] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "gcomradio.com"] [uri "/"] [unique_id "apK-nGjCPtor9NZ-byQNcAAABmI"]
[Sat Aug 29 05:12:28.903489 2026] [security2:error] [pid 1321:tid 1522] [client 20.104.18.15:29690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/sushi.php"] [unique_id "apK-nGjCPtor9NZ-byQNcgAABl4"]
[Sat Aug 29 05:12:28.910200 2026] [security2:error] [pid 1321:tid 1574] [client 20.48.250.41:36355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/term.php"] [unique_id "apK-nGjCPtor9NZ-byQNdAAABpE"]
[Sat Aug 29 05:12:28.917702 2026] [security2:error] [pid 1321:tid 1567] [client 74.248.24.12:24387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/inputs.php"] [unique_id "apK-nGjCPtor9NZ-byQNdQAABoo"]
[Sat Aug 29 05:12:28.929101 2026] [security2:error] [pid 1321:tid 1523] [client 20.104.104.62:46261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/sadis.php"] [unique_id "apK-nGjCPtor9NZ-byQNdwAABl8"]
[Sat Aug 29 05:12:28.957961 2026] [security2:error] [pid 1321:tid 1548] [client 68.155.159.216:38659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-content/index.php"] [unique_id "apK-nGjCPtor9NZ-byQNeQAABnc"]
[Sat Aug 29 05:12:28.959813 2026] [security2:error] [pid 1321:tid 1491] [client 52.139.37.240:55755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/admin/function.php"] [unique_id "apK-nGjCPtor9NZ-byQNegAABj8"]
[Sat Aug 29 05:12:28.979076 2026] [security2:error] [pid 1321:tid 1555] [client 20.48.250.41:24460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/s1.php"] [unique_id "apK-nGjCPtor9NZ-byQNewAABn4"]
[Sat Aug 29 05:12:28.979552 2026] [security2:error] [pid 1321:tid 1588] [client 20.48.251.3:38688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/g3.php"] [unique_id "apK-nGjCPtor9NZ-byQNfAAABp8"]
[Sat Aug 29 05:12:28.990406 2026] [security2:error] [pid 1321:tid 1610] [client 20.52.41.200:2718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/files.php"] [unique_id "apK-nGjCPtor9NZ-byQNfQAABrU"]
[Sat Aug 29 05:12:29.005199 2026] [security2:error] [pid 1321:tid 1592] [client 20.197.61.180:1105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/ds.php"] [unique_id "apK-nWjCPtor9NZ-byQNfgAABqM"]
[Sat Aug 29 05:12:29.011124 2026] [security2:error] [pid 1321:tid 1584] [client 158.158.54.35:1289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wp-load.php"] [unique_id "apK-nWjCPtor9NZ-byQNfwAABps"]
[Sat Aug 29 05:12:29.016045 2026] [security2:error] [pid 1321:tid 1544] [client 52.139.37.240:8482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.coveryourauto.com"] [uri "/wp-sigunq.php"] [unique_id "apK-nWjCPtor9NZ-byQNgAAABnQ"]
[Sat Aug 29 05:12:29.040335 2026] [security2:error] [pid 1321:tid 1536] [client 68.155.159.216:56765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-includes/js/index.php"] [unique_id "apK-nWjCPtor9NZ-byQNgQAABmw"]
[Sat Aug 29 05:12:29.052835 2026] [security2:error] [pid 1321:tid 1581] [client 20.48.250.41:25501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/24.php"] [unique_id "apK-nWjCPtor9NZ-byQNggAABpg"]
[Sat Aug 29 05:12:29.068138 2026] [security2:error] [pid 1321:tid 1510] [client 20.104.18.15:29689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/manga.php"] [unique_id "apK-nWjCPtor9NZ-byQNhAAABlI"]
[Sat Aug 29 05:12:29.073756 2026] [security2:error] [pid 1321:tid 1604] [client 158.23.147.79:31701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carpevictoriam.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-nWjCPtor9NZ-byQNhQAABq8"]
[Sat Aug 29 05:12:29.074536 2026] [security2:error] [pid 1321:tid 1598] [client 20.104.18.15:29582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/dragonshell.php"] [unique_id "apK-nWjCPtor9NZ-byQNhgAABqk"]
[Sat Aug 29 05:12:29.091957 2026] [security2:error] [pid 1321:tid 1560] [client 20.48.250.41:36149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/aaa.php"] [unique_id "apK-nWjCPtor9NZ-byQNhwAABoM"]
[Sat Aug 29 05:12:29.093158 2026] [security2:error] [pid 1321:tid 1512] [client 4.205.62.107:61646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/mamzi.php"] [unique_id "apK-nWjCPtor9NZ-byQNiAAABlQ"]
[Sat Aug 29 05:12:29.106250 2026] [security2:error] [pid 1321:tid 1514] [client 20.48.251.3:37973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/cloud.php"] [unique_id "apK-nWjCPtor9NZ-byQNiQAABlY"]
[Sat Aug 29 05:12:29.115239 2026] [security2:error] [pid 1321:tid 1490] [client 20.63.219.114:1877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/hello.php"] [unique_id "apK-nWjCPtor9NZ-byQNiwAABj4"]
[Sat Aug 29 05:12:29.122814 2026] [security2:error] [pid 1321:tid 1596] [client 20.104.104.62:48095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/xcre1.php"] [unique_id "apK-nWjCPtor9NZ-byQNjQAABqc"]
[Sat Aug 29 05:12:29.123347 2026] [security2:error] [pid 1321:tid 1519] [client 40.83.93.50:14773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/OK.php"] [unique_id "apK-nWjCPtor9NZ-byQNjgAABls"]
[Sat Aug 29 05:12:29.156540 2026] [security2:error] [pid 1321:tid 1497] [client 52.139.37.240:6728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/zoom1.php"] [unique_id "apK-nWjCPtor9NZ-byQNjwAABkU"]
[Sat Aug 29 05:12:29.157412 2026] [security2:error] [pid 1321:tid 1548] [client 20.48.250.41:24472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/0byte.php"] [unique_id "apK-nWjCPtor9NZ-byQNkAAABnc"]
[Sat Aug 29 05:12:29.162413 2026] [security2:error] [pid 1321:tid 1588] [client 20.48.250.41:39832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/maraz.php"] [unique_id "apK-nWjCPtor9NZ-byQNkQAABp8"]
[Sat Aug 29 05:12:29.175784 2026] [security2:error] [pid 1321:tid 1610] [client 158.23.147.79:7067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK-nWjCPtor9NZ-byQNkgAABrU"]
[Sat Aug 29 05:12:29.183244 2026] [security2:error] [pid 1321:tid 1506] [client 4.205.62.107:60328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/maxro.php"] [unique_id "apK-nWjCPtor9NZ-byQNkwAABk4"]
[Sat Aug 29 05:12:29.193297 2026] [security2:error] [pid 1321:tid 1509] [client 20.104.18.15:29110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/asdfghj.php"] [unique_id "apK-nWjCPtor9NZ-byQNlQAABlE"]
[Sat Aug 29 05:12:29.208005 2026] [security2:error] [pid 1321:tid 1532] [client 158.158.54.35:35867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/about/function.php"] [unique_id "apK-nWjCPtor9NZ-byQNmAAABmg"]
[Sat Aug 29 05:12:29.209015 2026] [security2:error] [pid 1321:tid 1523] [client 52.139.37.240:8461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.coveryourauto.com"] [uri "/07.php"] [unique_id "apK-nWjCPtor9NZ-byQNmQAABl8"]
[Sat Aug 29 05:12:29.232765 2026] [security2:error] [pid 1321:tid 1499] [client 4.205.62.107:63233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/application.config.php"] [unique_id "apK-nWjCPtor9NZ-byQNnQAABkc"]
[Sat Aug 29 05:12:29.233865 2026] [security2:error] [pid 1321:tid 1603] [client 20.48.251.3:38570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/f35.php"] [unique_id "apK-nWjCPtor9NZ-byQNngAABq4"]
[Sat Aug 29 05:12:29.234576 2026] [security2:error] [pid 1321:tid 1542] [client 20.104.18.15:29070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/wp-safe.php"] [unique_id "apK-nWjCPtor9NZ-byQNnwAABnI"]
[Sat Aug 29 05:12:29.240863 2026] [security2:error] [pid 1321:tid 1527] [client 20.196.209.81:2015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/post.php"] [unique_id "apK-nWjCPtor9NZ-byQNoAAABmM"]
[Sat Aug 29 05:12:29.252424 2026] [security2:error] [pid 1321:tid 1590] [client 20.48.250.41:36142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/xsox.php"] [unique_id "apK-nWjCPtor9NZ-byQNoQAABqE"]
[Sat Aug 29 05:12:29.269348 2026] [security2:error] [pid 1321:tid 1507] [client 81.208.175.87:60005] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "gcomradio.com"] [uri "/"] [unique_id "apK-nWjCPtor9NZ-byQNogAABk8"]
[Sat Aug 29 05:12:29.278707 2026] [security2:error] [pid 1321:tid 1576] [client 20.48.250.41:25547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/155.php"] [unique_id "apK-nWjCPtor9NZ-byQNowAABpM"]
[Sat Aug 29 05:12:29.279388 2026] [security2:error] [pid 1321:tid 1604] [client 20.240.128.207:2094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK-nWjCPtor9NZ-byQNpAAABq8"]
[Sat Aug 29 05:12:29.280089 2026] [security2:error] [pid 1321:tid 1598] [client 195.178.110.247:53722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.massmoldremoval.com"] [uri "/index.php"] [unique_id "apK-nWjCPtor9NZ-byQNpQAABqk"]
[Sat Aug 29 05:12:29.297078 2026] [security2:error] [pid 1321:tid 1560] [client 20.48.250.41:39776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/kbfr.php"] [unique_id "apK-nWjCPtor9NZ-byQNqAAABoM"]
[Sat Aug 29 05:12:29.309135 2026] [security2:error] [pid 1321:tid 1518] [client 158.23.147.79:62784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/x.php"] [unique_id "apK-nWjCPtor9NZ-byQNqgAABlo"]
[Sat Aug 29 05:12:29.310745 2026] [security2:error] [pid 1321:tid 1555] [client 20.52.41.200:5163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-admin/a.php"] [unique_id "apK-nWjCPtor9NZ-byQNqwAABn4"]
[Sat Aug 29 05:12:29.311281 2026] [security2:error] [pid 1321:tid 1563] [client 68.155.159.216:49091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/login.php"] [unique_id "apK-nWjCPtor9NZ-byQNrAAABoY"]
[Sat Aug 29 05:12:29.317750 2026] [security2:error] [pid 1321:tid 1504] [client 20.48.250.41:24542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/xr.php"] [unique_id "apK-nWjCPtor9NZ-byQNrQAABkw"]
[Sat Aug 29 05:12:29.322545 2026] [security2:error] [pid 1321:tid 1490] [client 20.104.104.62:8837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/motu.php"] [unique_id "apK-nWjCPtor9NZ-byQNrgAABj4"]
[Sat Aug 29 05:12:29.336695 2026] [security2:error] [pid 1321:tid 1522] [client 4.205.62.107:6306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/wdf.php"] [unique_id "apK-nWjCPtor9NZ-byQNrwAABl4"]
[Sat Aug 29 05:12:29.342727 2026] [security2:error] [pid 1321:tid 1596] [client 158.23.147.79:43377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK-nWjCPtor9NZ-byQNsAAABqc"]
[Sat Aug 29 05:12:29.349236 2026] [security2:error] [pid 1321:tid 1516] [client 52.139.37.240:55796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/about.php7"] [unique_id "apK-nWjCPtor9NZ-byQNsQAABlg"]
[Sat Aug 29 05:12:29.365683 2026] [security2:error] [pid 1321:tid 1597] [client 20.48.251.3:38202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/params.php"] [unique_id "apK-nWjCPtor9NZ-byQNsgAABqg"]
[Sat Aug 29 05:12:29.377110 2026] [security2:error] [pid 1321:tid 1491] [client 20.104.18.15:29103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/dragonshell.php"] [unique_id "apK-nWjCPtor9NZ-byQNswAABj8"]
[Sat Aug 29 05:12:29.377138 2026] [security2:error] [pid 1321:tid 1548] [client 20.104.18.15:29117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/gjewuagf.php"] [unique_id "apK-nWjCPtor9NZ-byQNtAAABnc"]
[Sat Aug 29 05:12:29.406128 2026] [security2:error] [pid 1321:tid 1526] [client 52.139.37.240:8469] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.coveryourauto.com"] [uri "/c99.php"] [unique_id "apK-nWjCPtor9NZ-byQNtQAABmI"]
[Sat Aug 29 05:12:29.406518 2026] [security2:error] [pid 1321:tid 1523] [client 68.155.159.216:21470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/wp-content/radio.php"] [unique_id "apK-nWjCPtor9NZ-byQNtgAABl8"]
[Sat Aug 29 05:12:29.410996 2026] [security2:error] [pid 1321:tid 1544] [client 20.48.250.41:36829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/lkui.php"] [unique_id "apK-nWjCPtor9NZ-byQNtwAABnQ"]
[Sat Aug 29 05:12:29.428675 2026] [security2:error] [pid 1321:tid 1564] [client 20.48.250.41:39835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/wp-act.php"] [unique_id "apK-nWjCPtor9NZ-byQNugAABoc"]
[Sat Aug 29 05:12:29.430679 2026] [security2:error] [pid 1321:tid 1565] [client 74.7.228.40:50646] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mail.christopherfournier.com"] [uri "/robots.txt"] [unique_id "apK-nWjCPtor9NZ-byQNuQAGiCY"]
[Sat Aug 29 05:12:29.433340 2026] [security2:error] [pid 1321:tid 1601] [client 74.248.24.12:36615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/alfa.php"] [unique_id "apK-nWjCPtor9NZ-byQNuwAABqw"]
[Sat Aug 29 05:12:29.435368 2026] [security2:error] [pid 1321:tid 1583] [client 195.178.110.247:15176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.massmoldremoval.com"] [uri "/index.php"] [unique_id "apK-nWjCPtor9NZ-byQNvAAABpo"]
[Sat Aug 29 05:12:29.439730 2026] [security2:error] [pid 1321:tid 1603] [client 158.23.147.79:49828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK-nWjCPtor9NZ-byQNvQAABq4"]
[Sat Aug 29 05:12:29.445667 2026] [security2:error] [pid 1321:tid 1557] [client 20.52.41.200:2699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/o.php"] [unique_id "apK-nWjCPtor9NZ-byQNvgAABoA"]
[Sat Aug 29 05:12:29.457992 2026] [security2:error] [pid 1321:tid 1598] [client 4.205.62.107:63367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/i.php"] [unique_id "apK-nWjCPtor9NZ-byQNwgAABqk"]
[Sat Aug 29 05:12:29.464155 2026] [security2:error] [pid 1321:tid 1514] [client 20.104.104.62:8227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/wefile.php"] [unique_id "apK-nWjCPtor9NZ-byQNwwAABlY"]
[Sat Aug 29 05:12:29.489666 2026] [autoindex:error] [pid 1321:tid 1562] [client 158.158.54.35:0] AH01276: Cannot serve directory /home2/charlov7/public_html/dev/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:12:29.493078 2026] [security2:error] [pid 1321:tid 1490] [client 20.48.251.3:38528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/debug.php"] [unique_id "apK-nWjCPtor9NZ-byQNxQAABj4"]
[Sat Aug 29 05:12:29.533415 2026] [security2:error] [pid 1321:tid 1517] [client 68.155.159.216:43946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.theenprogroup.com"] [uri "/chosen.php"] [unique_id "apK-nWjCPtor9NZ-byQNxwAABlk"]
[Sat Aug 29 05:12:29.535224 2026] [security2:error] [pid 1321:tid 1497] [client 68.155.159.216:43986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/wp-includes/Text/about.php"] [unique_id "apK-nWjCPtor9NZ-byQNyAAABkU"]
[Sat Aug 29 05:12:29.544242 2026] [security2:error] [pid 1321:tid 1508] [client 52.139.37.240:52616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/cron.php"] [unique_id "apK-nWjCPtor9NZ-byQNyQAABlA"]
[Sat Aug 29 05:12:29.546443 2026] [security2:error] [pid 1321:tid 1525] [client 20.63.219.114:11602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/fi2.php"] [unique_id "apK-nWjCPtor9NZ-byQNygAABmE"]
[Sat Aug 29 05:12:29.552668 2026] [security2:error] [pid 1321:tid 1566] [client 20.104.18.15:29680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/wp-safe.php"] [unique_id "apK-nWjCPtor9NZ-byQNywAABok"]
[Sat Aug 29 05:12:29.584395 2026] [security2:error] [pid 1321:tid 1453] [remote 68.65.123.228:45432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.123.65.68.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ovprecast.com"] [uri "/wp-login.php"] [unique_id "apK-nWjCPtor9NZ-byQNzAAGd14"]
[Sat Aug 29 05:12:29.585259 2026] [security2:error] [pid 1321:tid 1501] [client 20.104.18.15:29568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/tnglzqmv.php"] [unique_id "apK-nWjCPtor9NZ-byQNzQAABkk"]
[Sat Aug 29 05:12:29.597342 2026] [security2:error] [pid 1321:tid 1567] [client 20.197.61.180:3358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-admin/panel.php"] [unique_id "apK-nWjCPtor9NZ-byQNzgAABoo"]
[Sat Aug 29 05:12:29.601409 2026] [security2:error] [pid 1321:tid 1491] [client 52.139.37.240:8462] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.coveryourauto.com"] [uri "/c99.php"] [unique_id "apK-nWjCPtor9NZ-byQNzwAABj8"]
[Sat Aug 29 05:12:29.601912 2026] [security2:error] [pid 1321:tid 1612] [client 20.104.104.62:8889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/EM.php"] [unique_id "apK-nWjCPtor9NZ-byQN0AAABrc"]
[Sat Aug 29 05:12:29.605620 2026] [security2:error] [pid 1321:tid 1581] [client 40.83.93.50:8777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.93.83.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "quickvolt.com"] [uri "/aaa.php"] [unique_id "apK-nWjCPtor9NZ-byQN0QAABpg"]
[Sat Aug 29 05:12:29.620168 2026] [security2:error] [pid 1321:tid 1583] [client 20.48.251.3:37952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/dialog.php"] [unique_id "apK-nWjCPtor9NZ-byQN0gAABpo"]
[Sat Aug 29 05:12:29.642614 2026] [security2:error] [pid 1321:tid 1527] [client 158.158.54.35:33678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/a.php"] [unique_id "apK-nWjCPtor9NZ-byQN1AAABmM"]
[Sat Aug 29 05:12:29.650462 2026] [security2:error] [pid 1321:tid 1599] [client 20.151.200.44:27592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/gaje.php"] [unique_id "apK-nWjCPtor9NZ-byQN1QAABqo"]
[Sat Aug 29 05:12:29.661646 2026] [security2:error] [pid 1321:tid 1590] [client 68.155.159.216:62736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK-nWjCPtor9NZ-byQN1wAABqE"]
[Sat Aug 29 05:12:29.683548 2026] [security2:error] [pid 1321:tid 1598] [client 20.104.18.15:29118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/gjewuagf.php"] [unique_id "apK-nWjCPtor9NZ-byQN2AAABqk"]
[Sat Aug 29 05:12:29.712638 2026] [security2:error] [pid 1321:tid 1563] [client 20.104.18.15:29171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/wefile.php"] [unique_id "apK-nWjCPtor9NZ-byQN2wAABoY"]
[Sat Aug 29 05:12:29.727800 2026] [security2:error] [pid 1321:tid 1512] [client 20.197.61.180:1593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/GOD.php"] [unique_id "apK-nWjCPtor9NZ-byQN3gAABlQ"]
[Sat Aug 29 05:12:29.739316 2026] [security2:error] [pid 1321:tid 1615] [client 4.205.62.107:32553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/test1.php"] [unique_id "apK-nWjCPtor9NZ-byQN4AAABro"]
[Sat Aug 29 05:12:29.740454 2026] [security2:error] [pid 1321:tid 1576] [client 52.139.37.240:55770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-2019.php"] [unique_id "apK-nWjCPtor9NZ-byQN4QAABpM"]
[Sat Aug 29 05:12:29.749292 2026] [security2:error] [pid 1321:tid 1609] [client 20.104.104.62:8203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/ca4.php"] [unique_id "apK-nWjCPtor9NZ-byQN4gAABrQ"]
[Sat Aug 29 05:12:29.754541 2026] [security2:error] [pid 1321:tid 1596] [client 20.48.251.3:38677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/doc.php"] [unique_id "apK-nWjCPtor9NZ-byQN4wAABqc"]
[Sat Aug 29 05:12:29.759481 2026] [security2:error] [pid 1321:tid 1584] [client 68.155.159.216:23413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-content/x.php"] [unique_id "apK-nWjCPtor9NZ-byQN5QAABps"]
[Sat Aug 29 05:12:29.759570 2026] [security2:error] [pid 1321:tid 1522] [client 57.141.14.28:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/cart/"] [unique_id "apK-nWjCPtor9NZ-byQN5AAABl4"]
[Sat Aug 29 05:12:29.765910 2026] [security2:error] [pid 1321:tid 1580] [client 68.155.159.216:64068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/goat1.php"] [unique_id "apK-nWjCPtor9NZ-byQN5wAABpc"]
[Sat Aug 29 05:12:29.767744 2026] [core:error] [pid 1321:tid 1601] [client 20.52.41.200:4973] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:29.767757 2026] [core:error] [pid 1321:tid 1601] [client 20.52.41.200:4973] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:29.775617 2026] [security2:error] [pid 1321:tid 1542] [client 20.196.209.81:1380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/csv.php"] [unique_id "apK-nWjCPtor9NZ-byQN6AAABnI"]
[Sat Aug 29 05:12:29.780861 2026] [security2:error] [pid 1321:tid 1499] [client 20.240.128.207:24886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/num.php"] [unique_id "apK-nWjCPtor9NZ-byQN6QAABkc"]
[Sat Aug 29 05:12:29.793034 2026] [security2:error] [pid 1321:tid 1573] [client 52.139.37.240:8621] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.coveryourauto.com"] [uri "/c99.php"] [unique_id "apK-nWjCPtor9NZ-byQN6gAABpA"]
[Sat Aug 29 05:12:29.823069 2026] [security2:error] [pid 1321:tid 1610] [client 158.23.147.79:24529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-includes/content.php"] [unique_id "apK-nWjCPtor9NZ-byQN7AAABrU"]
[Sat Aug 29 05:12:29.831935 2026] [security2:error] [pid 1321:tid 1588] [client 20.104.18.15:29688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/tnglzqmv.php"] [unique_id "apK-nWjCPtor9NZ-byQN7QAABp8"]
[Sat Aug 29 05:12:29.845694 2026] [security2:error] [pid 1321:tid 1548] [client 4.205.62.107:5516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/pinfo.php"] [unique_id "apK-nWjCPtor9NZ-byQN7gAABnc"]
[Sat Aug 29 05:12:29.867590 2026] [http2:info] [pid 60333:tid 60333] h2_workers: created with min=128 max=192 idle_ms=600000
[Sat Aug 29 05:12:29.869332 2026] [security2:error] [pid 1321:tid 1577] [client 20.104.18.15:29144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/blog.php"] [unique_id "apK-nWjCPtor9NZ-byQN7wAABpQ"]
[Sat Aug 29 05:12:29.882829 2026] [security2:error] [pid 1321:tid 1592] [client 20.48.251.3:38534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/atex1.php"] [unique_id "apK-nWjCPtor9NZ-byQN8AAABqM"]
[Sat Aug 29 05:12:29.889770 2026] [security2:error] [pid 1321:tid 1523] [client 20.104.104.62:8877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/x0x.php"] [unique_id "apK-nWjCPtor9NZ-byQN8QAABl8"]
[Sat Aug 29 05:12:29.898984 2026] [security2:error] [pid 1321:tid 1544] [client 158.158.54.35:16391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-includes/admin.php"] [unique_id "apK-nWjCPtor9NZ-byQN8gAABnQ"]
[Sat Aug 29 05:12:29.907428 2026] [security2:error] [pid 1321:tid 1516] [client 20.52.41.200:2214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/file2.php"] [unique_id "apK-nWjCPtor9NZ-byQN8wAABlg"]
[Sat Aug 29 05:12:29.938024 2026] [security2:error] [pid 1321:tid 1532] [client 52.139.37.240:6747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/gecko-new.php"] [unique_id "apK-nWjCPtor9NZ-byQN9QAABmg"]
[Sat Aug 29 05:12:29.945398 2026] [security2:error] [pid 60333:tid 60469] [client 4.205.62.107:64303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/erty.php"] [unique_id "apK-nTwSHPvvQcBSRbsaVAAAAY8"]
[Sat Aug 29 05:12:29.945616 2026] [security2:error] [pid 1321:tid 1536] [client 20.151.200.44:55660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/155.php"] [unique_id "apK-nWjCPtor9NZ-byQN9gAABmw"]
[Sat Aug 29 05:12:29.952277 2026] [security2:error] [pid 1321:tid 1502] [client 74.248.24.12:31890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/403.php"] [unique_id "apK-nWjCPtor9NZ-byQN9wAABko"]
[Sat Aug 29 05:12:29.963719 2026] [security2:error] [pid 1321:tid 1506] [client 20.63.219.114:1897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/1p.php"] [unique_id "apK-nWjCPtor9NZ-byQN-AAABk4"]
[Sat Aug 29 05:12:29.968349 2026] [security2:error] [pid 1321:tid 1557] [client 20.104.18.15:29078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/wefile.php"] [unique_id "apK-nWjCPtor9NZ-byQN-gAABoA"]
[Sat Aug 29 05:12:30.014362 2026] [security2:error] [pid 1321:tid 1560] [client 103.171.189.88:57572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-nmjCPtor9NZ-byQN-wAABoM"]
[Sat Aug 29 05:12:30.014493 2026] [security2:error] [pid 1321:tid 1560] [client 103.171.189.88:57572] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-nmjCPtor9NZ-byQN-wAABoM"]
[Sat Aug 29 05:12:30.019021 2026] [security2:error] [pid 1321:tid 1564] [client 52.139.37.240:8580] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "webdisk.coveryourauto.com"] [uri "/c99.php"] [unique_id "apK-nmjCPtor9NZ-byQN_AAABoc"]
[Sat Aug 29 05:12:30.026964 2026] [security2:error] [pid 1321:tid 1604] [client 20.104.104.62:48070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.showerdoorsdubuque.com"] [uri "/fesa.php"] [unique_id "apK-nmjCPtor9NZ-byQN_QAABq8"]
[Sat Aug 29 05:12:30.030570 2026] [security2:error] [pid 60333:tid 60473] [client 20.104.18.15:29061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/wp-admin/js/wp-load.php"] [unique_id "apK-njwSHPvvQcBSRbsaVgAAAZM"]
[Sat Aug 29 05:12:30.030616 2026] [security2:error] [pid 60333:tid 60472] [client 20.48.251.3:38004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/product.php"] [unique_id "apK-njwSHPvvQcBSRbsaVQAAAZI"]
[Sat Aug 29 05:12:30.058605 2026] [security2:error] [pid 1321:tid 1529] [client 68.155.159.216:56536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/about/function.php"] [unique_id "apK-nmjCPtor9NZ-byQN_gAABmU"]
[Sat Aug 29 05:12:30.087883 2026] [security2:error] [pid 1321:tid 1576] [client 20.220.204.93:36672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/fetch.php"] [unique_id "apK-nmjCPtor9NZ-byQN_wAABpM"]
[Sat Aug 29 05:12:30.107627 2026] [security2:error] [pid 60333:tid 60470] [client 158.158.54.35:1988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/u.php"] [unique_id "apK-njwSHPvvQcBSRbsaVwAAAZA"]
[Sat Aug 29 05:12:30.109623 2026] [security2:error] [pid 1321:tid 1519] [client 20.104.18.15:29681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/blog.php"] [unique_id "apK-nmjCPtor9NZ-byQOAAAABls"]
[Sat Aug 29 05:12:30.122266 2026] [security2:error] [pid 60333:tid 60480] [client 20.104.49.130:64175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/load.php"] [unique_id "apK-njwSHPvvQcBSRbsaWAAAAZo"]
[Sat Aug 29 05:12:30.138632 2026] [security2:error] [pid 1321:tid 1512] [client 52.139.37.240:52638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/add_actualites.php"] [unique_id "apK-nmjCPtor9NZ-byQOAQAABlQ"]
[Sat Aug 29 05:12:30.159189 2026] [security2:error] [pid 1321:tid 1515] [client 20.48.251.3:38534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/public/wp-blog.php"] [unique_id "apK-nmjCPtor9NZ-byQOAgAABlc"]
[Sat Aug 29 05:12:30.172731 2026] [security2:error] [pid 60333:tid 60474] [client 20.196.209.81:10711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/fox.php"] [unique_id "apK-njwSHPvvQcBSRbsaWgAAAZQ"]
[Sat Aug 29 05:12:30.172990 2026] [security2:error] [pid 60333:tid 60483] [client 158.23.147.79:31693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carpevictoriam.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-njwSHPvvQcBSRbsaWwAAAZ0"]
[Sat Aug 29 05:12:30.203875 2026] [security2:error] [pid 60333:tid 60482] [client 20.104.49.130:58056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/wp-login.php"] [unique_id "apK-njwSHPvvQcBSRbsaWQAAAZw"]
[Sat Aug 29 05:12:30.205646 2026] [security2:error] [pid 1321:tid 1586] [client 158.23.147.79:14277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wzy.php"] [unique_id "apK-nmjCPtor9NZ-byQOBQAABp0"]
[Sat Aug 29 05:12:30.231667 2026] [security2:error] [pid 60333:tid 60487] [client 4.205.62.107:61698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/public/rip.php.php"] [unique_id "apK-njwSHPvvQcBSRbsaXAAAAaE"]
[Sat Aug 29 05:12:30.240583 2026] [security2:error] [pid 60333:tid 60476] [client 20.52.41.200:4786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK-njwSHPvvQcBSRbsaXQAAAZY"]
[Sat Aug 29 05:12:30.252907 2026] [security2:error] [pid 60333:tid 60489] [client 20.104.49.130:43063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bfcorrigan.com"] [uri "/coffexium.php"] [unique_id "apK-njwSHPvvQcBSRbsaXgAAAaM"]
[Sat Aug 29 05:12:30.287730 2026] [security2:error] [pid 60333:tid 60493] [client 20.48.251.3:38186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/test.php"] [unique_id "apK-njwSHPvvQcBSRbsaYAAAAac"]
[Sat Aug 29 05:12:30.288096 2026] [security2:error] [pid 1321:tid 1596] [client 107.145.13.164:55049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 164.13.145.107.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK-nmjCPtor9NZ-byQOCAAABqc"]
[Sat Aug 29 05:12:30.288211 2026] [security2:error] [pid 1321:tid 1596] [client 107.145.13.164:55049] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK-nmjCPtor9NZ-byQOCAAABqc"]
[Sat Aug 29 05:12:30.297627 2026] [security2:error] [pid 1321:tid 1517] [client 158.23.147.79:7054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK-nmjCPtor9NZ-byQOBwAABlk"]
[Sat Aug 29 05:12:30.311061 2026] [security2:error] [pid 60333:tid 60498] [client 20.151.200.44:27164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/wp-admin/zwso.php"] [unique_id "apK-njwSHPvvQcBSRbsaYgAAAaw"]
[Sat Aug 29 05:12:30.313098 2026] [security2:error] [pid 60333:tid 60475] [client 20.197.61.180:3824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-admin/pk.php"] [unique_id "apK-njwSHPvvQcBSRbsaYwAAAZU"]
[Sat Aug 29 05:12:30.320131 2026] [security2:error] [pid 1321:tid 1525] [client 4.205.62.107:28041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/brc.php"] [unique_id "apK-nmjCPtor9NZ-byQOCgAABmE"]
[Sat Aug 29 05:12:30.333672 2026] [security2:error] [pid 60333:tid 60491] [client 52.139.37.240:55801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/browse.php"] [unique_id "apK-njwSHPvvQcBSRbsaZAAAAaU"]
[Sat Aug 29 05:12:30.335654 2026] [security2:error] [pid 60333:tid 60500] [client 20.104.18.15:29156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/wp-admin/js/wp-load.php"] [unique_id "apK-njwSHPvvQcBSRbsaZQAAAa4"]
[Sat Aug 29 05:12:30.337143 2026] [security2:error] [pid 1321:tid 1573] [client 20.104.18.15:29075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/robot.php"] [unique_id "apK-nmjCPtor9NZ-byQOCwAABpA"]
[Sat Aug 29 05:12:30.370408 2026] [security2:error] [pid 1321:tid 1561] [client 20.52.41.200:2215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK-nmjCPtor9NZ-byQODQAABoQ"]
[Sat Aug 29 05:12:30.376382 2026] [security2:error] [pid 60333:tid 60504] [client 4.205.62.107:63280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/xp.php"] [unique_id "apK-njwSHPvvQcBSRbsaZwAAAbI"]
[Sat Aug 29 05:12:30.414887 2026] [security2:error] [pid 1321:tid 1588] [client 158.23.147.79:58936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-content/x.php"] [unique_id "apK-nmjCPtor9NZ-byQODwAABp8"]
[Sat Aug 29 05:12:30.415734 2026] [security2:error] [pid 60333:tid 60511] [client 20.48.251.3:38683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/txets.php"] [unique_id "apK-njwSHPvvQcBSRbsaaQAAAbk"]
[Sat Aug 29 05:12:30.430115 2026] [security2:error] [pid 60333:tid 60514] [client 68.155.159.216:48968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/hehehehe.php"] [unique_id "apK-njwSHPvvQcBSRbsaagAAAbw"]
[Sat Aug 29 05:12:30.440133 2026] [security2:error] [pid 60333:tid 60488] [client 20.63.219.114:18854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/Njima.php"] [unique_id "apK-njwSHPvvQcBSRbsaawAAAaI"]
[Sat Aug 29 05:12:30.443208 2026] [security2:error] [pid 60333:tid 60485] [client 20.197.61.180:1946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/ggfi.php"] [unique_id "apK-njwSHPvvQcBSRbsabQAAAZ8"]
[Sat Aug 29 05:12:30.469958 2026] [security2:error] [pid 60333:tid 60494] [client 74.248.24.12:38705] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/1.php"] [unique_id "apK-njwSHPvvQcBSRbsacAAAAag"]
[Sat Aug 29 05:12:30.470133 2026] [security2:error] [pid 60333:tid 60494] [client 74.248.24.12:38705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/1.php"] [unique_id "apK-njwSHPvvQcBSRbsacAAAAag"]
[Sat Aug 29 05:12:30.472862 2026] [security2:error] [pid 60333:tid 60521] [client 4.205.62.107:6856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/bb.php"] [unique_id "apK-njwSHPvvQcBSRbsacQAAAcM"]
[Sat Aug 29 05:12:30.483552 2026] [security2:error] [pid 1321:tid 1492] [client 20.104.18.15:29688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/revo.php"] [unique_id "apK-nmjCPtor9NZ-byQOEQAABkA"]
[Sat Aug 29 05:12:30.500558 2026] [security2:error] [pid 60333:tid 60524] [client 20.48.250.41:24507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/h02ugyh.php"] [unique_id "apK-njwSHPvvQcBSRbsacgAAAcY"]
[Sat Aug 29 05:12:30.511154 2026] [security2:error] [pid 1321:tid 1496] [client 68.155.159.216:56785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/wp-admin/dropdown.php"] [unique_id "apK-nmjCPtor9NZ-byQOEgAABkQ"]
[Sat Aug 29 05:12:30.525838 2026] [security2:error] [pid 60333:tid 60525] [client 20.104.18.15:29635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/robot.php"] [unique_id "apK-njwSHPvvQcBSRbsacwAAAcc"]
[Sat Aug 29 05:12:30.530224 2026] [security2:error] [pid 1321:tid 1548] [client 52.139.37.240:55803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/contentloader1.php"] [unique_id "apK-nmjCPtor9NZ-byQOEwAABnc"]
[Sat Aug 29 05:12:30.539217 2026] [security2:error] [pid 11274:tid 11423] [remote 13.140.187.88:53794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.187.140.13.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mihp.net"] [uri "/wp-login.php"] [unique_id "apK-nmbX5DA3XO6e_qRqrgABT20"]
[Sat Aug 29 05:12:30.543418 2026] [security2:error] [pid 1321:tid 1567] [client 20.48.251.3:38534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/cxc.php"] [unique_id "apK-nmjCPtor9NZ-byQOFAAABoo"]
[Sat Aug 29 05:12:30.547654 2026] [security2:error] [pid 60333:tid 60529] [client 158.23.147.79:49830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apK-njwSHPvvQcBSRbsadAAAAcs"]
[Sat Aug 29 05:12:30.553308 2026] [security2:error] [pid 60333:tid 60532] [client 20.48.250.41:25529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/file.php"] [unique_id "apK-njwSHPvvQcBSRbsadgAAAc4"]
[Sat Aug 29 05:12:30.553333 2026] [security2:error] [pid 60333:tid 60510] [client 158.158.54.35:20701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/r.php"] [unique_id "apK-njwSHPvvQcBSRbsadQAAAbg"]
[Sat Aug 29 05:12:30.570232 2026] [security2:error] [pid 60333:tid 60516] [client 20.196.209.81:10740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/disagraeosc.php"] [unique_id "apK-njwSHPvvQcBSRbsadwAAAb4"]
[Sat Aug 29 05:12:30.573671 2026] [security2:error] [pid 1321:tid 1612] [client 158.158.54.35:8409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/lock360.php"] [unique_id "apK-nmjCPtor9NZ-byQOFQAABrc"]
[Sat Aug 29 05:12:30.577674 2026] [security2:error] [pid 60333:tid 60534] [client 20.48.250.41:39934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/24.php"] [unique_id "apK-njwSHPvvQcBSRbsaeAAAAdA"]
[Sat Aug 29 05:12:30.582739 2026] [security2:error] [pid 60333:tid 60507] [client 180.190.5.40:50524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.5.190.180.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK-njwSHPvvQcBSRbsaeQAAAbU"]
[Sat Aug 29 05:12:30.582852 2026] [security2:error] [pid 60333:tid 60507] [client 180.190.5.40:50524] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK-njwSHPvvQcBSRbsaeQAAAbU"]
[Sat Aug 29 05:12:30.590497 2026] [security2:error] [pid 60333:tid 60537] [client 4.205.62.107:63305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/guk.php"] [unique_id "apK-njwSHPvvQcBSRbsaegAAAdM"]
[Sat Aug 29 05:12:30.601049 2026] [security2:error] [pid 60333:tid 60541] [client 158.23.147.79:43282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-admin/index.php"] [unique_id "apK-njwSHPvvQcBSRbsaewAAAdc"]
[Sat Aug 29 05:12:30.613549 2026] [security2:error] [pid 60333:tid 60542] [client 20.240.128.207:13758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "apK-njwSHPvvQcBSRbsafAAAAdg"]
[Sat Aug 29 05:12:30.619423 2026] [security2:error] [pid 60333:tid 60543] [client 20.104.18.15:29086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/birrs.php"] [unique_id "apK-njwSHPvvQcBSRbsafQAAAdk"]
[Sat Aug 29 05:12:30.630340 2026] [security2:error] [pid 60333:tid 60545] [client 20.48.250.41:24421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/xxw.php"] [unique_id "apK-njwSHPvvQcBSRbsafgAAAds"]
[Sat Aug 29 05:12:30.634962 2026] [security2:error] [pid 1321:tid 1502] [client 20.48.250.41:36156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "apK-nmjCPtor9NZ-byQOFgAABko"]
[Sat Aug 29 05:12:30.650774 2026] [security2:error] [pid 60333:tid 60552] [client 68.155.159.216:56758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-content/index.php"] [unique_id "apK-njwSHPvvQcBSRbsafwAAAeI"]
[Sat Aug 29 05:12:30.660882 2026] [security2:error] [pid 60333:tid 60557] [client 68.155.159.216:43974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.theenprogroup.com"] [uri "/goods.php"] [unique_id "apK-njwSHPvvQcBSRbsagAAAAec"]
[Sat Aug 29 05:12:30.661469 2026] [security2:error] [pid 60333:tid 60558] [client 68.155.159.216:43968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/asd.php"] [unique_id "apK-njwSHPvvQcBSRbsagQAAAeg"]
[Sat Aug 29 05:12:30.673640 2026] [security2:error] [pid 1321:tid 1603] [client 20.48.251.3:38691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/gjm.php"] [unique_id "apK-nmjCPtor9NZ-byQOFwAABq4"]
[Sat Aug 29 05:12:30.693808 2026] [security2:error] [pid 60333:tid 60528] [client 20.52.41.200:5312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "arklestonpiping.strangeworx.com"] [uri "/wp-admin.php"] [unique_id "apK-njwSHPvvQcBSRbsaggAAAco"]
[Sat Aug 29 05:12:30.702912 2026] [security2:error] [pid 60333:tid 60567] [client 20.48.250.41:25497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK-njwSHPvvQcBSRbsahAAAAfE"]
[Sat Aug 29 05:12:30.725071 2026] [security2:error] [pid 60333:tid 60556] [client 52.139.37.240:55780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/upfile.php"] [unique_id "apK-njwSHPvvQcBSRbsahgAAAeY"]
[Sat Aug 29 05:12:30.760621 2026] [security2:error] [pid 1321:tid 1590] [client 20.104.18.15:29572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/revo.php"] [unique_id "apK-nmjCPtor9NZ-byQOGgAABqE"]
[Sat Aug 29 05:12:30.781956 2026] [security2:error] [pid 1321:tid 1594] [client 68.155.159.216:62760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/themes.php"] [unique_id "apK-nmjCPtor9NZ-byQOGwAABqU"]
[Sat Aug 29 05:12:30.804718 2026] [security2:error] [pid 1321:tid 1514] [client 20.104.18.15:29079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/sss.php"] [unique_id "apK-nmjCPtor9NZ-byQOHAAABlY"]
[Sat Aug 29 05:12:30.805052 2026] [security2:error] [pid 1321:tid 1604] [client 20.48.251.3:37954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/app/Models/Hrm/Employee.php"] [unique_id "apK-nmjCPtor9NZ-byQOHQAABq8"]
[Sat Aug 29 05:12:30.824150 2026] [security2:error] [pid 1321:tid 1506] [client 20.52.41.200:2752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/xda.php"] [unique_id "apK-nmjCPtor9NZ-byQOHgAABk4"]
[Sat Aug 29 05:12:30.829051 2026] [security2:error] [pid 60333:tid 60581] [client 68.155.159.216:1910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK-njwSHPvvQcBSRbsaiQAAAf8"]
[Sat Aug 29 05:12:30.840247 2026] [security2:error] [pid 1321:tid 1529] [client 20.220.204.93:9581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/vx.php"] [unique_id "apK-nmjCPtor9NZ-byQOHwAABmU"]
[Sat Aug 29 05:12:30.868193 2026] [security2:error] [pid 1321:tid 1574] [client 20.151.200.44:27304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/Contrller.php"] [unique_id "apK-nmjCPtor9NZ-byQOIAAABpE"]
[Sat Aug 29 05:12:30.874582 2026] [security2:error] [pid 1321:tid 1584] [client 4.205.62.107:59087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/bigdump.php"] [unique_id "apK-nmjCPtor9NZ-byQOIQAABps"]
[Sat Aug 29 05:12:30.878097 2026] [http2:warn] [pid 1028675:tid 1028913] [client 57.141.14.3:24616] h2_stream(1028675-217-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:12:30.884001 2026] [security2:error] [pid 1321:tid 1410] [remote 74.7.227.143:47070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.district3.ca"] [uri "/D3WEBnew.php"] [unique_id "apK-nmjCPtor9NZ-byQOIgAGujQ"], referer: https://mail.district3.ca/
[Sat Aug 29 05:12:30.885149 2026] [security2:error] [pid 60333:tid 60587] [client 68.155.159.216:7113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK-njwSHPvvQcBSRbsajAAAAgU"]
[Sat Aug 29 05:12:30.888568 2026] [security2:error] [pid 60333:tid 60588] [client 68.155.159.216:23500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK-njwSHPvvQcBSRbsajQAAAgY"]
[Sat Aug 29 05:12:30.903085 2026] [security2:error] [pid 60333:tid 60591] [client 20.63.219.114:18835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/post.php"] [unique_id "apK-njwSHPvvQcBSRbsakAAAAgk"]
[Sat Aug 29 05:12:30.903117 2026] [security2:error] [pid 60333:tid 60590] [client 20.104.18.15:29092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/birrs.php"] [unique_id "apK-njwSHPvvQcBSRbsajwAAAgg"]
[Sat Aug 29 05:12:30.925876 2026] [security2:error] [pid 1321:tid 1609] [client 52.139.37.240:55759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/form.php"] [unique_id "apK-nmjCPtor9NZ-byQOJAAABrQ"]
[Sat Aug 29 05:12:30.926661 2026] [security2:error] [pid 60333:tid 60593] [client 158.23.147.79:24430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-admin/css/index.php"] [unique_id "apK-njwSHPvvQcBSRbsakQAAAgs"]
[Sat Aug 29 05:12:30.944622 2026] [security2:error] [pid 1321:tid 1586] [client 20.48.251.3:38529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/bigdump.php"] [unique_id "apK-nmjCPtor9NZ-byQOJgAABp0"]
[Sat Aug 29 05:12:30.987143 2026] [security2:error] [pid 60333:tid 60473] [client 4.205.62.107:5554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/X57.php"] [unique_id "apK-njwSHPvvQcBSRbsakgAAAZM"]
[Sat Aug 29 05:12:30.990477 2026] [cgid:error] [pid 1321:tid 1564] [client 74.248.24.12:38667] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/themysticalseven/404.shtml
[Sat Aug 29 05:12:30.993814 2026] [security2:error] [pid 60333:tid 60583] [client 20.196.209.81:1348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/about.php525"] [unique_id "apK-njwSHPvvQcBSRbsalAAAAgE"]
[Sat Aug 29 05:12:30.997274 2026] [security2:error] [pid 60333:tid 60582] [client 158.158.54.35:15067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wp-blog.php"] [unique_id "apK-njwSHPvvQcBSRbsalQAAAgA"]
[Sat Aug 29 05:12:31.006947 2026] [security2:error] [pid 1321:tid 1519] [client 158.158.54.35:5431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-conflg.php"] [unique_id "apK-n2jCPtor9NZ-byQOKwAABls"]
[Sat Aug 29 05:12:31.008608 2026] [security2:error] [pid 1321:tid 1507] [client 43.173.177.153:38002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 153.177.173.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewtopic.php"] [unique_id "apK-n2jCPtor9NZ-byQOLAAABk8"]
[Sat Aug 29 05:12:31.032087 2026] [security2:error] [pid 1321:tid 1595] [client 20.197.61.180:3367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-admin/plugin-install.php"] [unique_id "apK-n2jCPtor9NZ-byQOLwAABqY"]
[Sat Aug 29 05:12:31.035805 2026] [security2:error] [pid 1321:tid 1490] [client 43.173.174.159:42870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 159.174.173.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewforum.php"] [unique_id "apK-n2jCPtor9NZ-byQOLgAABj4"]
[Sat Aug 29 05:12:31.044869 2026] [security2:error] [pid 60333:tid 60470] [client 20.104.18.15:29068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/sss.php"] [unique_id "apK-nzwSHPvvQcBSRbsalwAAAZA"]
[Sat Aug 29 05:12:31.069091 2026] [security2:error] [pid 60333:tid 60486] [client 20.104.18.15:29146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/wp-includes/ID3/moon.php"] [unique_id "apK-nzwSHPvvQcBSRbsamAAAAaA"]
[Sat Aug 29 05:12:31.072346 2026] [security2:error] [pid 60333:tid 60487] [client 20.48.251.3:38537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/channels.php"] [unique_id "apK-nzwSHPvvQcBSRbsamQAAAaE"]
[Sat Aug 29 05:12:31.078408 2026] [authz_core:error] [pid 1321:tid 1561] [client 100.61.245.67:0] AH01630: client denied by server configuration: /home3/wseproje/public_html/westonandsampson/php.ini
[Sat Aug 29 05:12:31.079701 2026] [security2:error] [pid 60333:tid 60476] [client 20.151.200.44:27303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/Zeiss.php"] [unique_id "apK-nzwSHPvvQcBSRbsamgAAAZY"]
[Sat Aug 29 05:12:31.084740 2026] [security2:error] [pid 1321:tid 1543] [client 4.205.62.107:64211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/wp-config.backup.php"] [unique_id "apK-n2jCPtor9NZ-byQOMQAABnM"]
[Sat Aug 29 05:12:31.102229 2026] [security2:error] [pid 60333:tid 60469] [client 20.63.219.114:1862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/configs.php"] [unique_id "apK-nzwSHPvvQcBSRbsamwAAAY8"]
[Sat Aug 29 05:12:31.107183 2026] [security2:error] [pid 1321:tid 1598] [client 43.173.180.11:42364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.180.173.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewforum.php"] [unique_id "apK-n2jCPtor9NZ-byQOMwAABqk"]
[Sat Aug 29 05:12:31.121807 2026] [security2:error] [pid 60333:tid 60484] [client 52.139.37.240:52618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/wp-sigunq.php"] [unique_id "apK-nzwSHPvvQcBSRbsanAAAAZ4"]
[Sat Aug 29 05:12:31.129278 2026] [security2:error] [pid 1321:tid 1499] [client 20.240.128.207:2074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "apK-n2jCPtor9NZ-byQONAAABkc"]
[Sat Aug 29 05:12:31.143604 2026] [security2:error] [pid 60333:tid 60498] [client 20.104.49.130:51133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/classwithtostring.php"] [unique_id "apK-nzwSHPvvQcBSRbsangAAAaw"]
[Sat Aug 29 05:12:31.160418 2026] [security2:error] [pid 1321:tid 1542] [client 74.248.24.12:38667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/s.php"] [unique_id "apK-n2jCPtor9NZ-byQONQAABnI"]
[Sat Aug 29 05:12:31.164684 2026] [security2:error] [pid 1321:tid 1592] [client 68.155.159.216:38578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK-n2jCPtor9NZ-byQONgAABqM"]
[Sat Aug 29 05:12:31.191100 2026] [security2:error] [pid 60333:tid 60592] [client 20.197.61.180:1923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/alfa-rex.php"] [unique_id "apK-nzwSHPvvQcBSRbsanwAAAgo"]
[Sat Aug 29 05:12:31.199882 2026] [security2:error] [pid 60333:tid 60501] [client 20.48.251.3:38583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/ws79.php"] [unique_id "apK-nzwSHPvvQcBSRbsaoQAAAa8"]
[Sat Aug 29 05:12:31.208706 2026] [security2:error] [pid 60333:tid 60506] [client 20.104.18.15:29167] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/xmini4.php"] [unique_id "apK-nzwSHPvvQcBSRbsaowAAAbQ"]
[Sat Aug 29 05:12:31.233739 2026] [security2:error] [pid 60333:tid 60503] [client 114.119.130.178:63557] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.classiclightingusa.com"] [uri "/catalog/product_reviews_write.php/products_id/683/osCsid/c804igdio21qd054kceqskq0h4"] [unique_id "apK-nzwSHPvvQcBSRbsapwAAAbE"], referer: http://www.classiclightingusa.com/catalog/product_reviews.php/products_id/683/osCsid/c804igdio21qd054kceqskq0h4
[Sat Aug 29 05:12:31.276968 2026] [security2:error] [pid 60333:tid 60519] [client 20.104.18.15:29101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/wp-includes/ID3/moon.php"] [unique_id "apK-nzwSHPvvQcBSRbsaqQAAAcE"]
[Sat Aug 29 05:12:31.286693 2026] [security2:error] [pid 1321:tid 1597] [client 20.52.41.200:2237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/theme.php"] [unique_id "apK-n2jCPtor9NZ-byQOOQAABqg"]
[Sat Aug 29 05:12:31.315065 2026] [security2:error] [pid 60333:tid 60499] [client 20.63.219.114:12623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/flower.php"] [unique_id "apK-nzwSHPvvQcBSRbsaqgAAAa0"]
[Sat Aug 29 05:12:31.332208 2026] [security2:error] [pid 60333:tid 60518] [client 52.139.37.240:55754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.lapoutine.co.uk"] [uri "/07.php"] [unique_id "apK-nzwSHPvvQcBSRbsaqwAAAcA"]
[Sat Aug 29 05:12:31.340125 2026] [security2:error] [pid 1321:tid 1565] [client 20.48.251.3:38578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/sys.php"] [unique_id "apK-n2jCPtor9NZ-byQOOwAABog"]
[Sat Aug 29 05:12:31.372041 2026] [security2:error] [pid 1321:tid 1536] [client 4.205.62.107:63915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/environment.php"] [unique_id "apK-n2jCPtor9NZ-byQOPQAABmw"]
[Sat Aug 29 05:12:31.375450 2026] [security2:error] [pid 1321:tid 1502] [client 158.23.147.79:31743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carpevictoriam.com"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK-n2jCPtor9NZ-byQOPgAABko"]
[Sat Aug 29 05:12:31.381797 2026] [security2:error] [pid 1321:tid 1588] [client 43.173.180.249:58668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 249.180.173.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewtopic.php"] [unique_id "apK-n2jCPtor9NZ-byQOPAAABp8"]
[Sat Aug 29 05:12:31.388659 2026] [security2:error] [pid 60333:tid 60524] [client 20.104.18.15:29100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/gulu.php"] [unique_id "apK-nzwSHPvvQcBSRbsargAAAcY"]
[Sat Aug 29 05:12:31.393626 2026] [security2:error] [pid 60333:tid 60488] [client 20.196.209.81:14752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/spip.php"] [unique_id "apK-nzwSHPvvQcBSRbsasAAAAaI"]
[Sat Aug 29 05:12:31.404926 2026] [security2:error] [pid 60333:tid 60531] [client 158.23.147.79:6976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK-nzwSHPvvQcBSRbsasQAAAc0"]
[Sat Aug 29 05:12:31.445266 2026] [security2:error] [pid 60333:tid 60494] [client 158.158.54.35:1281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/xxx.php"] [unique_id "apK-nzwSHPvvQcBSRbsasgAAAag"]
[Sat Aug 29 05:12:31.450613 2026] [security2:error] [pid 60333:tid 60533] [client 20.104.18.15:29649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/xmini4.php"] [unique_id "apK-nzwSHPvvQcBSRbsaswAAAc8"]
[Sat Aug 29 05:12:31.457305 2026] [security2:error] [pid 1321:tid 1547] [client 158.158.54.35:5380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/123.php"] [unique_id "apK-n2jCPtor9NZ-byQOPwAABnY"]
[Sat Aug 29 05:12:31.460761 2026] [security2:error] [pid 1321:tid 1510] [client 4.205.62.107:28050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/vx.php"] [unique_id "apK-n2jCPtor9NZ-byQOQAAABlI"]
[Sat Aug 29 05:12:31.466723 2026] [security2:error] [pid 60333:tid 60502] [client 20.48.251.3:38563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/dragonshell.php"] [unique_id "apK-nzwSHPvvQcBSRbsatAAAAbA"]
[Sat Aug 29 05:12:31.518049 2026] [security2:error] [pid 60333:tid 60542] [client 158.23.147.79:55925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK-nzwSHPvvQcBSRbsatwAAAdg"]
[Sat Aug 29 05:12:31.523173 2026] [security2:error] [pid 60333:tid 60544] [client 4.205.62.107:60992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/g3.php"] [unique_id "apK-nzwSHPvvQcBSRbsauQAAAdo"]
[Sat Aug 29 05:12:31.528005 2026] [security2:error] [pid 1321:tid 1514] [client 52.139.37.240:52614] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "cpanel.lapoutine.co.uk"] [uri "/c99.php"] [unique_id "apK-n2jCPtor9NZ-byQOQgAABlY"]
[Sat Aug 29 05:12:31.529436 2026] [security2:error] [pid 60333:tid 60546] [client 20.151.200.44:27155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/ww2.php"] [unique_id "apK-nzwSHPvvQcBSRbsaugAAAdw"]
[Sat Aug 29 05:12:31.539450 2026] [security2:error] [pid 1321:tid 1563] [client 68.155.159.216:49035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK-n2jCPtor9NZ-byQORAAABoY"]
[Sat Aug 29 05:12:31.559022 2026] [core:error] [pid 60333:tid 60553] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:31.559040 2026] [core:error] [pid 60333:tid 60553] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:31.582295 2026] [security2:error] [pid 60333:tid 60560] [client 20.104.49.130:52496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "coveryourauto.com"] [uri "/abcd.php"] [unique_id "apK-nzwSHPvvQcBSRbsavgAAAeo"]
[Sat Aug 29 05:12:31.595507 2026] [security2:error] [pid 60333:tid 60564] [client 20.48.251.3:37955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/ws61.php"] [unique_id "apK-nzwSHPvvQcBSRbsavwAAAe4"]
[Sat Aug 29 05:12:31.597823 2026] [security2:error] [pid 1321:tid 1574] [client 20.104.18.15:29104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/gulu.php"] [unique_id "apK-n2jCPtor9NZ-byQORQAABpE"]
[Sat Aug 29 05:12:31.609256 2026] [security2:error] [pid 1321:tid 1584] [client 4.205.62.107:6520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/file59.php"] [unique_id "apK-n2jCPtor9NZ-byQORgAABps"]
[Sat Aug 29 05:12:31.616198 2026] [security2:error] [pid 60333:tid 60569] [client 68.155.159.216:56826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/login.php"] [unique_id "apK-nzwSHPvvQcBSRbsawAAAAfM"]
[Sat Aug 29 05:12:31.618155 2026] [security2:error] [pid 60333:tid 60570] [client 20.104.18.15:29633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/replace.php"] [unique_id "apK-nzwSHPvvQcBSRbsawQAAAfQ"]
[Sat Aug 29 05:12:31.627504 2026] [security2:error] [pid 1321:tid 1604] [client 20.240.128.207:2375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/gifclass.php"] [unique_id "apK-n2jCPtor9NZ-byQORwAABq8"]
[Sat Aug 29 05:12:31.672817 2026] [security2:error] [pid 60333:tid 60536] [client 74.248.24.12:33520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/test1.php"] [unique_id "apK-nzwSHPvvQcBSRbsawgAAAdI"]
[Sat Aug 29 05:12:31.699758 2026] [security2:error] [pid 60333:tid 60561] [client 20.63.219.114:11599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/disagraeed.php"] [unique_id "apK-nzwSHPvvQcBSRbsawwAAAes"]
[Sat Aug 29 05:12:31.709006 2026] [security2:error] [pid 1321:tid 1497] [client 158.23.147.79:50174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK-n2jCPtor9NZ-byQOSgAABkU"]
[Sat Aug 29 05:12:31.713158 2026] [security2:error] [pid 1321:tid 1596] [client 20.104.49.130:36741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.timportlock.net"] [uri "/zoo2.php"] [unique_id "apK-n2jCPtor9NZ-byQOSwAABqc"]
[Sat Aug 29 05:12:31.717745 2026] [security2:error] [pid 60333:tid 60566] [client 20.63.219.114:12612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/meta.php"] [unique_id "apK-nzwSHPvvQcBSRbsaxAAAAfA"]
[Sat Aug 29 05:12:31.725330 2026] [security2:error] [pid 60333:tid 60577] [client 158.23.147.79:39315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK-nzwSHPvvQcBSRbsaxQAAAfs"]
[Sat Aug 29 05:12:31.726679 2026] [security2:error] [pid 1321:tid 1519] [client 4.205.62.107:63422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/config_dev.php"] [unique_id "apK-n2jCPtor9NZ-byQOTAAABls"]
[Sat Aug 29 05:12:31.731933 2026] [security2:error] [pid 1321:tid 1573] [client 20.104.18.15:29664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/replace.php"] [unique_id "apK-n2jCPtor9NZ-byQOTgAABpA"]
[Sat Aug 29 05:12:31.732617 2026] [security2:error] [pid 60333:tid 60578] [client 20.48.251.3:38152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/w.php"] [unique_id "apK-nzwSHPvvQcBSRbsaxgAAAfw"]
[Sat Aug 29 05:12:31.740036 2026] [security2:error] [pid 1321:tid 1562] [client 52.139.37.240:55806] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "cpanel.lapoutine.co.uk"] [uri "/c99.php"] [unique_id "apK-n2jCPtor9NZ-byQOTwAABoU"]
[Sat Aug 29 05:12:31.740283 2026] [security2:error] [pid 60333:tid 60528] [client 20.52.41.200:2756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/classwithtostring.php"] [unique_id "apK-nzwSHPvvQcBSRbsaxwAAAco"]
[Sat Aug 29 05:12:31.745099 2026] [security2:error] [pid 1321:tid 1595] [client 20.104.18.15:29573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/c4.php"] [unique_id "apK-n2jCPtor9NZ-byQOUAAABqY"]
[Sat Aug 29 05:12:31.757163 2026] [security2:error] [pid 60333:tid 60540] [client 20.197.61.180:3684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-admin/plugins/img/themes/plugins/maintenance.php"] [unique_id "apK-nzwSHPvvQcBSRbsayQAAAdY"]
[Sat Aug 29 05:12:31.770950 2026] [security2:error] [pid 1321:tid 1607] [client 68.155.159.216:44028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.theenprogroup.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK-n2jCPtor9NZ-byQOUgAABrI"]
[Sat Aug 29 05:12:31.771102 2026] [security2:error] [pid 1321:tid 1583] [client 68.155.159.216:43847] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.dubuqueglass.info"] [uri "/1.php"] [unique_id "apK-n2jCPtor9NZ-byQOUwAABpo"]
[Sat Aug 29 05:12:31.771182 2026] [security2:error] [pid 1321:tid 1583] [client 68.155.159.216:43847] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/1.php"] [unique_id "apK-n2jCPtor9NZ-byQOUwAABpo"]
[Sat Aug 29 05:12:31.772476 2026] [core:error] [pid 1321:tid 1599] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:31.772488 2026] [core:error] [pid 1321:tid 1599] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:31.774996 2026] [security2:error] [pid 1321:tid 1561] [client 68.155.159.216:21467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/about/function.php"] [unique_id "apK-n2jCPtor9NZ-byQOVAAABoQ"]
[Sat Aug 29 05:12:31.807309 2026] [security2:error] [pid 1321:tid 1580] [client 20.196.209.81:2019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/backup.php"] [unique_id "apK-n2jCPtor9NZ-byQOWAAABpc"]
[Sat Aug 29 05:12:31.856533 2026] [security2:error] [pid 1321:tid 1496] [client 20.151.200.44:27139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/anz.php"] [unique_id "apK-n2jCPtor9NZ-byQOWQAABkQ"]
[Sat Aug 29 05:12:31.861772 2026] [security2:error] [pid 1321:tid 1544] [client 20.104.18.15:29653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/c4.php"] [unique_id "apK-n2jCPtor9NZ-byQOWgAABnQ"]
[Sat Aug 29 05:12:31.871240 2026] [security2:error] [pid 60333:tid 60583] [client 20.48.251.3:38708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/u88.php"] [unique_id "apK-nzwSHPvvQcBSRbsaywAAAgE"]
[Sat Aug 29 05:12:31.886580 2026] [security2:error] [pid 1321:tid 1597] [client 68.155.159.216:62740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-mail.php"] [unique_id "apK-n2jCPtor9NZ-byQOWwAABqg"]
[Sat Aug 29 05:12:31.889785 2026] [security2:error] [pid 1321:tid 1507] [client 158.158.54.35:35848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/yanz.php"] [unique_id "apK-n2jCPtor9NZ-byQOXQAABk8"]
[Sat Aug 29 05:12:31.889806 2026] [security2:error] [pid 1321:tid 1612] [client 158.23.147.79:64404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/wp-content/cong.php"] [unique_id "apK-n2jCPtor9NZ-byQOXAAABrc"]
[Sat Aug 29 05:12:31.909389 2026] [proxy_http:error] [pid 1018003:tid 1018082] (70007)The timeout specified has expired: [remote 57.141.14.32:35046] AH01102: error reading status line from remote server 127.0.0.1:8443
[Sat Aug 29 05:12:31.909421 2026] [proxy:error] [pid 1018003:tid 1018082] [remote 57.141.14.32:35046] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:12:31.916486 2026] [proxy_http:error] [pid 1041789:tid 1042004] (70007)The timeout specified has expired: [client 127.0.0.1:48622] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:12:31.916515 2026] [proxy:error] [pid 1041789:tid 1042004] [client 127.0.0.1:48622] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:12:31.924469 2026] [proxy_http:error] [pid 1017536:tid 1017769] (70007)The timeout specified has expired: [client 127.0.0.1:27980] AH01102: error reading status line from remote server 50.6.92.44:8443
[Sat Aug 29 05:12:31.924499 2026] [proxy:error] [pid 1017536:tid 1017769] [client 127.0.0.1:27980] AH00898: Error reading from remote server returned by /502.shtml
[Sat Aug 29 05:12:31.935491 2026] [security2:error] [pid 60333:tid 60470] [client 68.155.159.216:1778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/images/index.php"] [unique_id "apK-nzwSHPvvQcBSRbsazQAAAZA"]
[Sat Aug 29 05:12:31.937352 2026] [security2:error] [pid 60333:tid 60473] [client 52.139.37.240:6766] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "cpanel.lapoutine.co.uk"] [uri "/c99.php"] [unique_id "apK-nzwSHPvvQcBSRbsazgAAAZM"]
[Sat Aug 29 05:12:31.963758 2026] [security2:error] [pid 1321:tid 1400] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-admin/network/xmrlpc.php"] [unique_id "apK-n2jCPtor9NZ-byQOYAAGoyo"]
[Sat Aug 29 05:12:31.966820 2026] [security2:error] [pid 1321:tid 1508] [client 20.197.61.180:12924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/cookie.php"] [unique_id "apK-n2jCPtor9NZ-byQOYQAABlA"]
[Sat Aug 29 05:12:31.976103 2026] [security2:error] [pid 1321:tid 1588] [client 20.104.18.15:29659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/rxr.php"] [unique_id "apK-n2jCPtor9NZ-byQOYwAABp8"]
[Sat Aug 29 05:12:32.001347 2026] [security2:error] [pid 1321:tid 1526] [client 20.48.251.3:38573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/mcebraed.php"] [unique_id "apK-oGjCPtor9NZ-byQOZQAABmI"]
[Sat Aug 29 05:12:32.007427 2026] [core:error] [pid 60333:tid 60487] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:32.007443 2026] [core:error] [pid 60333:tid 60487] [client 52.139.37.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:32.022016 2026] [security2:error] [pid 1321:tid 1594] [client 20.104.18.15:29122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/rxr.php"] [unique_id "apK-oGjCPtor9NZ-byQOZgAABqU"]
[Sat Aug 29 05:12:32.029049 2026] [security2:error] [pid 60333:tid 60489] [client 4.205.62.107:60319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/wdf.php"] [unique_id "apK-oDwSHPvvQcBSRbsa0QAAAaM"]
[Sat Aug 29 05:12:32.047138 2026] [security2:error] [pid 60333:tid 60493] [client 68.155.159.216:23483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/log-mama/function.php"] [unique_id "apK-oDwSHPvvQcBSRbsa1AAAAac"]
[Sat Aug 29 05:12:32.073127 2026] [security2:error] [pid 60333:tid 60585] [client 20.63.219.114:13980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/randkeyword.php"] [unique_id "apK-oDwSHPvvQcBSRbsa2AAAAgM"]
[Sat Aug 29 05:12:32.111505 2026] [security2:error] [pid 60333:tid 60584] [client 20.63.219.114:12666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/add_actualites.php"] [unique_id "apK-oDwSHPvvQcBSRbsa3QAAAgI"]
[Sat Aug 29 05:12:32.116799 2026] [security2:error] [pid 1321:tid 1486] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-admin/options-general.php"] [unique_id "apK-oGjCPtor9NZ-byQObQAGtH8"]
[Sat Aug 29 05:12:32.123098 2026] [security2:error] [pid 1321:tid 1515] [client 20.104.18.15:29107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.buckaroos.us"] [uri "/reviall.php"] [unique_id "apK-oGjCPtor9NZ-byQObgAABlc"]
[Sat Aug 29 05:12:32.128634 2026] [security2:error] [pid 1321:tid 1586] [client 20.48.251.3:38696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/verox.php"] [unique_id "apK-oGjCPtor9NZ-byQObwAABp0"]
[Sat Aug 29 05:12:32.151975 2026] [security2:error] [pid 1321:tid 1525] [client 149.34.210.141:55625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-oGjCPtor9NZ-byQOcQAABmE"]
[Sat Aug 29 05:12:32.152103 2026] [security2:error] [pid 1321:tid 1525] [client 149.34.210.141:55625] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-oGjCPtor9NZ-byQOcQAABmE"]
[Sat Aug 29 05:12:32.156860 2026] [security2:error] [pid 60333:tid 60592] [client 4.205.62.107:5506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/register.php"] [unique_id "apK-oDwSHPvvQcBSRbsa3gAAAgo"]
[Sat Aug 29 05:12:32.162422 2026] [security2:error] [pid 1321:tid 1497] [client 20.220.204.93:18265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/global.php"] [unique_id "apK-oGjCPtor9NZ-byQOcgAABkU"]
[Sat Aug 29 05:12:32.182391 2026] [security2:error] [pid 60333:tid 60490] [client 74.248.24.12:36611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/ws.php"] [unique_id "apK-oDwSHPvvQcBSRbsa5AAAAaQ"]
[Sat Aug 29 05:12:32.189300 2026] [security2:error] [pid 60333:tid 60513] [client 20.104.18.15:29072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.dchangdesigns.com"] [uri "/reviall.php"] [unique_id "apK-oDwSHPvvQcBSRbsa5gAAAbs"]
[Sat Aug 29 05:12:32.191657 2026] [security2:error] [pid 60333:tid 60484] [client 20.52.41.200:2675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/news.php"] [unique_id "apK-oDwSHPvvQcBSRbsa5wAAAZ4"]
[Sat Aug 29 05:12:32.203446 2026] [security2:error] [pid 60333:tid 60522] [client 149.57.191.28:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/mon-compte"] [unique_id "apK-oDwSHPvvQcBSRbsa6AAAAcQ"]
[Sat Aug 29 05:12:32.213555 2026] [security2:error] [pid 1321:tid 1555] [client 20.196.209.81:20867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/haiterus.php"] [unique_id "apK-oGjCPtor9NZ-byQOdgAABn4"]
[Sat Aug 29 05:12:32.222134 2026] [security2:error] [pid 1321:tid 1543] [client 4.205.62.107:61879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/edit.php"] [unique_id "apK-oGjCPtor9NZ-byQOdwAABnM"]
[Sat Aug 29 05:12:32.258170 2026] [security2:error] [pid 60333:tid 60494] [client 20.48.251.3:37964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/localconf.php"] [unique_id "apK-oDwSHPvvQcBSRbsa6wAAAag"]
[Sat Aug 29 05:12:32.264963 2026] [security2:error] [pid 1321:tid 1424] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-admin/options.php"] [unique_id "apK-oGjCPtor9NZ-byQOeAAGtUI"]
[Sat Aug 29 05:12:32.270973 2026] [security2:error] [pid 60333:tid 60534] [client 68.155.159.216:38277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-admin/index.php"] [unique_id "apK-oDwSHPvvQcBSRbsa7QAAAdA"]
[Sat Aug 29 05:12:32.306050 2026] [security2:error] [pid 1321:tid 1598] [client 158.23.147.79:14215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK-oGjCPtor9NZ-byQOeQAABqk"]
[Sat Aug 29 05:12:32.335741 2026] [security2:error] [pid 60333:tid 60503] [client 158.158.54.35:23080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/autoload_classmap.php"] [unique_id "apK-oDwSHPvvQcBSRbsa7gAAAbE"]
[Sat Aug 29 05:12:32.361789 2026] [security2:error] [pid 1321:tid 1580] [client 20.151.200.44:27095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/bge.php"] [unique_id "apK-oGjCPtor9NZ-byQOegAABpc"]
[Sat Aug 29 05:12:32.385094 2026] [security2:error] [pid 1321:tid 1576] [client 20.48.251.3:38173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/xa.php"] [unique_id "apK-oGjCPtor9NZ-byQOfAAABpM"]
[Sat Aug 29 05:12:32.419110 2026] [security2:error] [pid 1321:tid 1566] [client 20.240.128.207:7540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK-oGjCPtor9NZ-byQOfgAABok"]
[Sat Aug 29 05:12:32.420679 2026] [security2:error] [pid 60333:tid 60545] [client 158.158.54.35:21732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/tool.php"] [unique_id "apK-oDwSHPvvQcBSRbsa8wAAAds"]
[Sat Aug 29 05:12:32.421859 2026] [security2:error] [pid 1321:tid 1444] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-admin/panel.php"] [unique_id "apK-oGjCPtor9NZ-byQOfwAGTFY"]
[Sat Aug 29 05:12:32.430926 2026] [security2:error] [pid 60333:tid 60548] [client 115.133.163.86:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutihomes.com"] [uri "/boats"] [unique_id "apK-oDwSHPvvQcBSRbsa9QAAAd4"]
[Sat Aug 29 05:12:32.432980 2026] [security2:error] [pid 60333:tid 60507] [client 20.63.219.114:14014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/goods.php"] [unique_id "apK-oDwSHPvvQcBSRbsa9gAAAbU"]
[Sat Aug 29 05:12:32.472202 2026] [security2:error] [pid 60333:tid 60559] [client 158.23.147.79:31617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carpevictoriam.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK-oDwSHPvvQcBSRbsa9wAAAek"]
[Sat Aug 29 05:12:32.483465 2026] [security2:error] [pid 60333:tid 60532] [client 20.197.61.180:3363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-admin/security.php"] [unique_id "apK-oDwSHPvvQcBSRbsa-AAAAc4"]
[Sat Aug 29 05:12:32.511669 2026] [security2:error] [pid 1321:tid 1565] [client 4.205.62.107:61658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/aws_secret_config.php"] [unique_id "apK-oGjCPtor9NZ-byQOgwAABog"]
[Sat Aug 29 05:12:32.513411 2026] [security2:error] [pid 60333:tid 60565] [client 20.48.251.3:37997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/maxro.php"] [unique_id "apK-oDwSHPvvQcBSRbsa-wAAAe8"]
[Sat Aug 29 05:12:32.544138 2026] [security2:error] [pid 1321:tid 1582] [client 20.104.49.130:51126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/wp-the.php"] [unique_id "apK-oGjCPtor9NZ-byQOhgAABpk"]
[Sat Aug 29 05:12:32.568507 2026] [security2:error] [pid 60333:tid 60536] [client 20.151.200.44:55675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/mcd.php"] [unique_id "apK-oDwSHPvvQcBSRbsa_QAAAdI"]
[Sat Aug 29 05:12:32.571262 2026] [security2:error] [pid 1321:tid 1382] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-admin/pk.php"] [unique_id "apK-oGjCPtor9NZ-byQOhwAGnxg"]
[Sat Aug 29 05:12:32.610984 2026] [security2:error] [pid 60333:tid 60560] [client 20.196.209.81:14758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/go.php"] [unique_id "apK-oDwSHPvvQcBSRbsa_gAAAeo"]
[Sat Aug 29 05:12:32.615273 2026] [security2:error] [pid 60333:tid 60578] [client 4.205.62.107:32555] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/ty.php"] [unique_id "apK-oDwSHPvvQcBSRbsbAAAAAfw"]
[Sat Aug 29 05:12:32.627272 2026] [security2:error] [pid 1321:tid 1594] [client 158.23.147.79:62769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/log-mama/function.php"] [unique_id "apK-oGjCPtor9NZ-byQOiQAABqU"]
[Sat Aug 29 05:12:32.633887 2026] [security2:error] [pid 60333:tid 60541] [client 20.52.41.200:2705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/about/function.php"] [unique_id "apK-oDwSHPvvQcBSRbsbAgAAAdc"]
[Sat Aug 29 05:12:32.642391 2026] [security2:error] [pid 1321:tid 1564] [client 20.48.251.3:37959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/phina.php"] [unique_id "apK-oGjCPtor9NZ-byQOigAABoc"]
[Sat Aug 29 05:12:32.645913 2026] [security2:error] [pid 1321:tid 1547] [client 103.215.74.26:8072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.74.215.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.com"] [uri "/wp/index.php"] [unique_id "apK-oGjCPtor9NZ-byQOiwAABnY"], referer: https://kglogisticsinc.com/wp/wp-admin/
[Sat Aug 29 05:12:32.661152 2026] [security2:error] [pid 60333:tid 60549] [client 20.197.61.180:12888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/NewFile.php"] [unique_id "apK-oDwSHPvvQcBSRbsbBAAAAd8"]
[Sat Aug 29 05:12:32.677277 2026] [security2:error] [pid 1321:tid 1419] [remote 97.74.87.194:49812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 194.87.74.97.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "theshoemakerstore.andresortega.org"] [uri "/wp-login.php"] [unique_id "apK-oGjCPtor9NZ-byQOjAAGsT0"]
[Sat Aug 29 05:12:32.688143 2026] [security2:error] [pid 1321:tid 1560] [client 4.205.62.107:62987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/wp-konfig.php"] [unique_id "apK-oGjCPtor9NZ-byQOjQAABoM"]
[Sat Aug 29 05:12:32.696870 2026] [security2:error] [pid 60333:tid 60576] [client 20.63.219.114:18851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/alfanew.php7"] [unique_id "apK-oDwSHPvvQcBSRbsbBQAAAfo"]
[Sat Aug 29 05:12:32.698102 2026] [security2:error] [pid 60333:tid 60569] [client 74.248.24.12:38701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/wp-themes.php"] [unique_id "apK-oDwSHPvvQcBSRbsbBgAAAfM"]
[Sat Aug 29 05:12:32.720688 2026] [security2:error] [pid 1321:tid 1452] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-admin/plugin-install.php"] [unique_id "apK-oGjCPtor9NZ-byQOkAAGXl0"]
[Sat Aug 29 05:12:32.727070 2026] [security2:error] [pid 60333:tid 60594] [client 20.151.200.44:27598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/wp-ana.php"] [unique_id "apK-oDwSHPvvQcBSRbsbBwAAAgw"]
[Sat Aug 29 05:12:32.733252 2026] [security2:error] [pid 60333:tid 60596] [client 68.155.159.216:21490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/hehehehe.php"] [unique_id "apK-oDwSHPvvQcBSRbsbCAAAAg4"]
[Sat Aug 29 05:12:32.748631 2026] [security2:error] [pid 1321:tid 1609] [client 4.205.62.107:6335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/cli_bootstrap.php"] [unique_id "apK-oGjCPtor9NZ-byQOkQAABrQ"]
[Sat Aug 29 05:12:32.768019 2026] [security2:error] [pid 1321:tid 1586] [client 20.48.251.3:38575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/aws_secret_config.php"] [unique_id "apK-oGjCPtor9NZ-byQOkwAABp0"]
[Sat Aug 29 05:12:32.769725 2026] [security2:error] [pid 1321:tid 1432] [remote 57.129.136.36:43822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 36.136.129.57.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "healthysmilestoday.com"] [uri "/wp-login.php"] [unique_id "apK-oGjCPtor9NZ-byQOkgAGbEo"]
[Sat Aug 29 05:12:32.781986 2026] [security2:error] [pid 60333:tid 60579] [client 158.158.54.35:17009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/bi.php"] [unique_id "apK-oDwSHPvvQcBSRbsbCgAAAf0"]
[Sat Aug 29 05:12:32.790733 2026] [security2:error] [pid 60333:tid 60588] [client 20.63.219.114:18867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/hehe.php"] [unique_id "apK-oDwSHPvvQcBSRbsbDAAAAgY"]
[Sat Aug 29 05:12:32.832576 2026] [security2:error] [pid 60333:tid 60482] [client 158.23.147.79:39333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/about.php"] [unique_id "apK-oDwSHPvvQcBSRbsbDQAAAZw"]
[Sat Aug 29 05:12:32.858376 2026] [security2:error] [pid 1321:tid 1615] [client 158.158.54.35:33691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/k.php"] [unique_id "apK-oGjCPtor9NZ-byQOlAAABro"]
[Sat Aug 29 05:12:32.867126 2026] [security2:error] [pid 1321:tid 1439] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-admin/plugins/img/themes/plugins/maintenance.php"] [unique_id "apK-oGjCPtor9NZ-byQOlQAGW1E"]
[Sat Aug 29 05:12:32.867132 2026] [security2:error] [pid 60333:tid 60554] [client 4.205.62.107:63333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/aws_credentials.php"] [unique_id "apK-oDwSHPvvQcBSRbsbDgAAAeQ"]
[Sat Aug 29 05:12:32.881922 2026] [security2:error] [pid 60333:tid 60562] [client 68.155.159.216:21481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK-oDwSHPvvQcBSRbsbDwAAAew"]
[Sat Aug 29 05:12:32.885863 2026] [security2:error] [pid 60333:tid 60473] [client 68.155.159.216:43973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.theenprogroup.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK-oDwSHPvvQcBSRbsbEAAAAZM"]
[Sat Aug 29 05:12:32.886646 2026] [security2:error] [pid 60333:tid 60489] [client 158.23.147.79:50129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/dropdown.php"] [unique_id "apK-oDwSHPvvQcBSRbsbEQAAAaM"]
[Sat Aug 29 05:12:32.896513 2026] [security2:error] [pid 60333:tid 60575] [client 20.48.251.3:37965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/greem_res.php"] [unique_id "apK-oDwSHPvvQcBSRbsbEgAAAfk"]
[Sat Aug 29 05:12:32.896966 2026] [security2:error] [pid 60333:tid 60585] [client 45.205.1.124:57849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 124.1.205.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "scentsofmagic.store"] [uri "/assets/plugins/file-uploader/server/php/index.php"] [unique_id "apK-oDwSHPvvQcBSRbsbEwAAAgM"]
[Sat Aug 29 05:12:32.919473 2026] [security2:error] [pid 60333:tid 60471] [client 20.240.128.207:8188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/css/index.php"] [unique_id "apK-oDwSHPvvQcBSRbsbFAAAAZE"]
[Sat Aug 29 05:12:32.941974 2026] [security2:error] [pid 60333:tid 60469] [client 68.155.159.216:44020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/ws.php"] [unique_id "apK-oDwSHPvvQcBSRbsbFQAAAY8"]
[Sat Aug 29 05:12:32.957275 2026] [autoindex:error] [pid 60333:tid 60495] [client 34.46.77.128:46376] AH01276: Cannot serve directory /home3/xemxvnmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:12:32.989821 2026] [security2:error] [pid 60333:tid 60513] [client 158.23.147.79:64502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK-oDwSHPvvQcBSRbsbFwAAAbs"]
[Sat Aug 29 05:12:32.997744 2026] [security2:error] [pid 1321:tid 1514] [client 106.216.114.82:49372] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "utahtsa.com"] [uri "/xmlrpc.php"] [unique_id "apK-oGjCPtor9NZ-byQOlgAABlY"]
[Sat Aug 29 05:12:33.010393 2026] [security2:error] [pid 60333:tid 60476] [client 20.196.209.81:15210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/gecko-new.php"] [unique_id "apK-oTwSHPvvQcBSRbsbGAAAAZY"]
[Sat Aug 29 05:12:33.023138 2026] [security2:error] [pid 1321:tid 1379] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-admin/security.php"] [unique_id "apK-oWjCPtor9NZ-byQOlwAGfhU"]
[Sat Aug 29 05:12:33.024777 2026] [security2:error] [pid 60333:tid 60484] [client 20.48.251.3:38168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/app/Helpers/bladeHelpers.php"] [unique_id "apK-oTwSHPvvQcBSRbsbGQAAAZ4"]
[Sat Aug 29 05:12:33.034213 2026] [security2:error] [pid 60333:tid 60518] [client 68.155.159.216:2008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK-oTwSHPvvQcBSRbsbGgAAAcA"]
[Sat Aug 29 05:12:33.059172 2026] [security2:error] [pid 60333:tid 60524] [client 68.155.159.216:64009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-admin/network/index.php"] [unique_id "apK-oTwSHPvvQcBSRbsbGwAAAcY"]
[Sat Aug 29 05:12:33.069154 2026] [security2:error] [pid 1321:tid 1604] [client 195.178.110.247:12490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/index.php"] [unique_id "apK-oWjCPtor9NZ-byQOmAAABq8"]
[Sat Aug 29 05:12:33.118146 2026] [security2:error] [pid 60333:tid 60531] [client 158.23.147.79:24469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK-oTwSHPvvQcBSRbsbHQAAAc0"]
[Sat Aug 29 05:12:33.126295 2026] [security2:error] [pid 60333:tid 60515] [client 20.63.219.114:1859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/xmlrpc.php0"] [unique_id "apK-oTwSHPvvQcBSRbsbHAAAAb0"]
[Sat Aug 29 05:12:33.152341 2026] [security2:error] [pid 60333:tid 60498] [client 20.48.251.3:38580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/wp-jufsis.php"] [unique_id "apK-oTwSHPvvQcBSRbsbHgAAAaw"]
[Sat Aug 29 05:12:33.166753 2026] [security2:error] [pid 60333:tid 60534] [client 4.205.62.107:28040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/bb.php"] [unique_id "apK-oTwSHPvvQcBSRbsbHwAAAdA"]
[Sat Aug 29 05:12:33.172443 2026] [security2:error] [pid 1321:tid 1543] [client 20.63.219.114:18865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/wp-admin/class-db.php"] [unique_id "apK-oWjCPtor9NZ-byQOmgAABnM"]
[Sat Aug 29 05:12:33.172824 2026] [security2:error] [pid 1321:tid 1411] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-admin/setup-config.php"] [unique_id "apK-oWjCPtor9NZ-byQOmwAGWTU"]
[Sat Aug 29 05:12:33.181140 2026] [security2:error] [pid 60333:tid 60478] [client 20.197.61.180:3362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK-oTwSHPvvQcBSRbsbIgAAAZg"]
[Sat Aug 29 05:12:33.210612 2026] [security2:error] [pid 60333:tid 60522] [client 74.248.24.12:16859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/wp-trackback.php"] [unique_id "apK-oTwSHPvvQcBSRbsbJQAAAcQ"]
[Sat Aug 29 05:12:33.228066 2026] [security2:error] [pid 1321:tid 1506] [client 111.235.68.106:36828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK-oWjCPtor9NZ-byQOnwAABk4"]
[Sat Aug 29 05:12:33.228155 2026] [security2:error] [pid 1321:tid 1506] [client 111.235.68.106:36828] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK-oWjCPtor9NZ-byQOnwAABk4"]
[Sat Aug 29 05:12:33.230414 2026] [security2:error] [pid 1321:tid 1584] [client 158.158.54.35:18759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/cc.php"] [unique_id "apK-oWjCPtor9NZ-byQOoAAABps"]
[Sat Aug 29 05:12:33.234858 2026] [security2:error] [pid 1321:tid 1561] [client 195.178.110.247:11304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.com"] [uri "/index.php"] [unique_id "apK-oWjCPtor9NZ-byQOoQAABoQ"]
[Sat Aug 29 05:12:33.241338 2026] [security2:error] [pid 1321:tid 1580] [client 20.52.41.200:2722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-includes/admin.php"] [unique_id "apK-oWjCPtor9NZ-byQOogAABpc"]
[Sat Aug 29 05:12:33.280842 2026] [security2:error] [pid 60333:tid 60505] [client 20.48.251.3:38603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/wp-content/admin.php"] [unique_id "apK-oTwSHPvvQcBSRbsbKAAAAbM"]
[Sat Aug 29 05:12:33.289966 2026] [security2:error] [pid 60333:tid 60538] [client 4.205.62.107:6110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/xqq.php"] [unique_id "apK-oTwSHPvvQcBSRbsbKQAAAdQ"]
[Sat Aug 29 05:12:33.321778 2026] [security2:error] [pid 1321:tid 1428] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-admin/system.php"] [unique_id "apK-oWjCPtor9NZ-byQOowAGdEY"]
[Sat Aug 29 05:12:33.326396 2026] [security2:error] [pid 60333:tid 60472] [client 158.158.54.35:37159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/root.php"] [unique_id "apK-oTwSHPvvQcBSRbsbLQAAAZI"]
[Sat Aug 29 05:12:33.359780 2026] [security2:error] [pid 60333:tid 60551] [client 4.205.62.107:64952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/8.php"] [unique_id "apK-oTwSHPvvQcBSRbsbLgAAAeE"]
[Sat Aug 29 05:12:33.378523 2026] [security2:error] [pid 1321:tid 1612] [client 68.155.159.216:38332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK-oWjCPtor9NZ-byQOpAAABrc"]
[Sat Aug 29 05:12:33.397085 2026] [security2:error] [pid 60333:tid 60497] [client 20.197.61.180:1930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/config.php"] [unique_id "apK-oTwSHPvvQcBSRbsbLwAAAas"]
[Sat Aug 29 05:12:33.397279 2026] [security2:error] [pid 60333:tid 60553] [client 20.220.204.93:36691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/fs.php"] [unique_id "apK-oTwSHPvvQcBSRbsbMAAAAeM"]
[Sat Aug 29 05:12:33.407853 2026] [security2:error] [pid 1321:tid 1605] [client 20.48.251.3:37970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/124.php"] [unique_id "apK-oWjCPtor9NZ-byQOpQAABrA"]
[Sat Aug 29 05:12:33.417127 2026] [security2:error] [pid 1321:tid 1489] [client 20.240.128.207:4300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-cron.php"] [unique_id "apK-oWjCPtor9NZ-byQOpgAABj0"]
[Sat Aug 29 05:12:33.433873 2026] [security2:error] [pid 1321:tid 1576] [client 20.196.209.81:14754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-admin.php"] [unique_id "apK-oWjCPtor9NZ-byQOpwAABpM"]
[Sat Aug 29 05:12:33.448778 2026] [security2:error] [pid 1321:tid 1510] [client 197.219.150.206:63021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK-oWjCPtor9NZ-byQOqAAABlI"]
[Sat Aug 29 05:12:33.448872 2026] [security2:error] [pid 1321:tid 1510] [client 197.219.150.206:63021] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK-oWjCPtor9NZ-byQOqAAABlI"]
[Sat Aug 29 05:12:33.467383 2026] [security2:error] [pid 1321:tid 1476] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-admin/test.php"] [unique_id "apK-oWjCPtor9NZ-byQOqQAGinU"]
[Sat Aug 29 05:12:33.487681 2026] [security2:error] [pid 1321:tid 1597] [client 20.63.219.114:13988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/content.php"] [unique_id "apK-oWjCPtor9NZ-byQOqgAABqg"]
[Sat Aug 29 05:12:33.509847 2026] [security2:error] [pid 60333:tid 60550] [client 213.202.253.4:60343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/filefuns.php"] [unique_id "apK-oTwSHPvvQcBSRbsbMQAAAeA"], referer: www.google.com
[Sat Aug 29 05:12:33.536065 2026] [security2:error] [pid 60333:tid 60564] [client 20.48.251.3:37961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/cu.php"] [unique_id "apK-oTwSHPvvQcBSRbsbMgAAAe4"]
[Sat Aug 29 05:12:33.583176 2026] [security2:error] [pid 1321:tid 1582] [client 20.63.219.114:9242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/wp-contentt.php"] [unique_id "apK-oWjCPtor9NZ-byQOqwAABpk"]
[Sat Aug 29 05:12:33.603964 2026] [security2:error] [pid 60333:tid 60570] [client 158.23.147.79:31732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carpevictoriam.com"] [uri "/simple.php"] [unique_id "apK-oTwSHPvvQcBSRbsbMwAAAfQ"]
[Sat Aug 29 05:12:33.643717 2026] [security2:error] [pid 60333:tid 60573] [client 4.205.62.107:63984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/snq.php"] [unique_id "apK-oTwSHPvvQcBSRbsbNAAAAfc"]
[Sat Aug 29 05:12:33.657990 2026] [security2:error] [pid 60333:tid 60574] [client 68.155.159.216:49040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/wp-content/admin.php"] [unique_id "apK-oTwSHPvvQcBSRbsbNQAAAfg"]
[Sat Aug 29 05:12:33.663545 2026] [security2:error] [pid 60333:tid 60572] [client 20.48.251.3:38571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/ok.php"] [unique_id "apK-oTwSHPvvQcBSRbsbNgAAAfY"]
[Sat Aug 29 05:12:33.705891 2026] [security2:error] [pid 60333:tid 60567] [client 158.158.54.35:33821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/files/index.php"] [unique_id "apK-oTwSHPvvQcBSRbsbNwAAAfE"]
[Sat Aug 29 05:12:33.725148 2026] [cgid:error] [pid 1321:tid 1557] [client 74.248.24.12:33527] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/themysticalseven/404.shtml
[Sat Aug 29 05:12:33.735032 2026] [security2:error] [pid 1321:tid 1560] [client 158.23.147.79:60178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/bk/index.php"] [unique_id "apK-oWjCPtor9NZ-byQOsAAABoM"]
[Sat Aug 29 05:12:33.751790 2026] [security2:error] [pid 60333:tid 60520] [client 4.205.62.107:32556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/adminer-4.7.6-en.php"] [unique_id "apK-oTwSHPvvQcBSRbsbOgAAAcI"]
[Sat Aug 29 05:12:33.771870 2026] [security2:error] [pid 1321:tid 1547] [client 158.158.54.35:1447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/p.php"] [unique_id "apK-oWjCPtor9NZ-byQOsgAABnY"]
[Sat Aug 29 05:12:33.789850 2026] [security2:error] [pid 1321:tid 1536] [client 20.48.251.3:37970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/test.config.php"] [unique_id "apK-oWjCPtor9NZ-byQOswAABmw"]
[Sat Aug 29 05:12:33.838778 2026] [security2:error] [pid 60333:tid 60578] [client 20.63.219.114:12651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/wxo.php"] [unique_id "apK-oTwSHPvvQcBSRbsbPQAAAfw"]
[Sat Aug 29 05:12:33.844939 2026] [security2:error] [pid 1321:tid 1525] [client 68.155.159.216:56714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK-oWjCPtor9NZ-byQOtAAABmE"]
[Sat Aug 29 05:12:33.845651 2026] [security2:error] [pid 1321:tid 1497] [client 4.205.62.107:61018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/25.php"] [unique_id "apK-oWjCPtor9NZ-byQOtQAABkU"]
[Sat Aug 29 05:12:33.853537 2026] [security2:error] [pid 1321:tid 1615] [client 20.52.41.200:2218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/lock360.php"] [unique_id "apK-oWjCPtor9NZ-byQOtgAABro"]
[Sat Aug 29 05:12:33.889004 2026] [security2:error] [pid 1321:tid 1516] [client 20.196.209.81:14780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-configs.php"] [unique_id "apK-oWjCPtor9NZ-byQOuAAABlg"]
[Sat Aug 29 05:12:33.893204 2026] [security2:error] [pid 1321:tid 1607] [client 74.248.24.12:33527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/222.php"] [unique_id "apK-oWjCPtor9NZ-byQOuQAABrI"]
[Sat Aug 29 05:12:33.902569 2026] [security2:error] [pid 1321:tid 1604] [client 158.23.147.79:14186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK-oWjCPtor9NZ-byQOuwAABq8"]
[Sat Aug 29 05:12:33.903592 2026] [security2:error] [pid 60333:tid 60596] [client 4.205.62.107:6902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/dd.php"] [unique_id "apK-oTwSHPvvQcBSRbsbQAAAAg4"]
[Sat Aug 29 05:12:33.918528 2026] [security2:error] [pid 1321:tid 1601] [client 20.197.61.180:3328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-admin/system.php"] [unique_id "apK-oWjCPtor9NZ-byQOvwAABqw"]
[Sat Aug 29 05:12:33.921224 2026] [security2:error] [pid 1321:tid 1502] [client 20.48.251.3:37988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/apikeys.php"] [unique_id "apK-oWjCPtor9NZ-byQOwAAABko"]
[Sat Aug 29 05:12:33.934666 2026] [security2:error] [pid 1321:tid 1609] [client 20.240.128.207:24888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-block.php"] [unique_id "apK-oWjCPtor9NZ-byQOwgAABrQ"]
[Sat Aug 29 05:12:33.942075 2026] [security2:error] [pid 60333:tid 60557] [client 106.222.207.18:16720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.207.222.106.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "doctoranddog.com"] [uri "/xmlrpc.php"] [unique_id "apK-oTwSHPvvQcBSRbsbQgAAAec"]
[Sat Aug 29 05:12:33.942208 2026] [security2:error] [pid 60333:tid 60557] [client 106.222.207.18:16720] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "doctoranddog.com"] [uri "/xmlrpc.php"] [unique_id "apK-oTwSHPvvQcBSRbsbQgAAAec"]
[Sat Aug 29 05:12:33.949001 2026] [security2:error] [pid 60333:tid 60514] [client 158.23.147.79:43268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK-oTwSHPvvQcBSRbsbQwAAAbw"]
[Sat Aug 29 05:12:33.994884 2026] [security2:error] [pid 1321:tid 1561] [client 20.220.204.93:9525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/ioxi.php"] [unique_id "apK-oWjCPtor9NZ-byQOxAAABoQ"]
[Sat Aug 29 05:12:34.005084 2026] [security2:error] [pid 60333:tid 60579] [client 4.205.62.107:63364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/aws-credentials.php"] [unique_id "apK-ojwSHPvvQcBSRbsbRAAAAf0"]
[Sat Aug 29 05:12:34.016977 2026] [security2:error] [pid 1321:tid 1610] [client 158.23.147.79:49854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/sad/about.php"] [unique_id "apK-omjCPtor9NZ-byQOxQAABrU"]
[Sat Aug 29 05:12:34.024709 2026] [security2:error] [pid 60333:tid 60582] [client 68.155.159.216:44023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.theenprogroup.com"] [uri "/file.php"] [unique_id "apK-ojwSHPvvQcBSRbsbRQAAAgA"]
[Sat Aug 29 05:12:34.034540 2026] [security2:error] [pid 1321:tid 1562] [client 20.63.219.114:13991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/theme.php"] [unique_id "apK-omjCPtor9NZ-byQOxgAABoU"]
[Sat Aug 29 05:12:34.035121 2026] [security2:error] [pid 1321:tid 1529] [client 195.178.110.247:12492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.stellarstaffingca.info"] [uri "/index.php"] [unique_id "apK-omjCPtor9NZ-byQOxwAABmU"]
[Sat Aug 29 05:12:34.048672 2026] [security2:error] [pid 60333:tid 60588] [client 20.48.251.3:38656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/god.php"] [unique_id "apK-ojwSHPvvQcBSRbsbRgAAAgY"]
[Sat Aug 29 05:12:34.109009 2026] [security2:error] [pid 1321:tid 1510] [client 158.23.147.79:64481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK-omjCPtor9NZ-byQOygAABlI"]
[Sat Aug 29 05:12:34.137211 2026] [security2:error] [pid 1321:tid 1596] [client 20.197.61.180:13469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/22.php"] [unique_id "apK-omjCPtor9NZ-byQOywAABqc"]
[Sat Aug 29 05:12:34.140720 2026] [security2:error] [pid 1321:tid 1577] [client 158.158.54.35:33747] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "ebichili-org.juntoohki.com"] [uri "/1.php7"] [unique_id "apK-omjCPtor9NZ-byQOzAAABpQ"]
[Sat Aug 29 05:12:34.140793 2026] [security2:error] [pid 1321:tid 1577] [client 158.158.54.35:33747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/1.php7"] [unique_id "apK-omjCPtor9NZ-byQOzAAABpQ"]
[Sat Aug 29 05:12:34.141215 2026] [security2:error] [pid 60333:tid 60585] [client 68.155.159.216:1969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK-ojwSHPvvQcBSRbsbSAAAAgM"]
[Sat Aug 29 05:12:34.160315 2026] [security2:error] [pid 60333:tid 60475] [client 20.197.61.180:3801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thatsaturdaythang.lifesosweet.com"] [uri "/wp-admin/network/xmrlpc.php"] [unique_id "apK-ojwSHPvvQcBSRbsbSQAAAZU"]
[Sat Aug 29 05:12:34.176494 2026] [security2:error] [pid 60333:tid 60479] [client 68.155.159.216:7135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK-ojwSHPvvQcBSRbsbSgAAAZk"]
[Sat Aug 29 05:12:34.176585 2026] [security2:error] [pid 1321:tid 1527] [client 20.48.251.3:37960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/fleen.php"] [unique_id "apK-omjCPtor9NZ-byQOzQAABmM"]
[Sat Aug 29 05:12:34.184345 2026] [security2:error] [pid 1321:tid 1590] [client 20.220.204.93:9538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/bootstrap.php"] [unique_id "apK-omjCPtor9NZ-byQOzgAABqE"]
[Sat Aug 29 05:12:34.199543 2026] [security2:error] [pid 60333:tid 60496] [client 195.178.110.247:11316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stellarstaffingca.stellarstaffingca.info"] [uri "/index.php"] [unique_id "apK-ojwSHPvvQcBSRbsbSwAAAao"]
[Sat Aug 29 05:12:34.220376 2026] [security2:error] [pid 60333:tid 60554] [client 158.158.54.35:34666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/a1.php"] [unique_id "apK-ojwSHPvvQcBSRbsbTAAAAeQ"]
[Sat Aug 29 05:12:34.232188 2026] [security2:error] [pid 60333:tid 60469] [client 158.23.147.79:24482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-includes/index.php"] [unique_id "apK-ojwSHPvvQcBSRbsbTQAAAY8"]
[Sat Aug 29 05:12:34.240980 2026] [security2:error] [pid 60333:tid 60351] [remote 40.77.167.78:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.167.77.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantsfans.net"] [uri "/message_board/index.php"] [unique_id "apK-ojwSHPvvQcBSRbsbTwABkQ0"]
[Sat Aug 29 05:12:34.274107 2026] [security2:error] [pid 60333:tid 60493] [client 20.63.219.114:13989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/as.php"] [unique_id "apK-ojwSHPvvQcBSRbsbUAAAAac"]
[Sat Aug 29 05:12:34.288295 2026] [security2:error] [pid 1321:tid 1542] [client 20.196.209.81:1384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/essexec.php"] [unique_id "apK-omjCPtor9NZ-byQO0QAABnI"]
[Sat Aug 29 05:12:34.303726 2026] [security2:error] [pid 1321:tid 1536] [client 20.48.251.3:38668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/phpinfo01.php"] [unique_id "apK-omjCPtor9NZ-byQO0wAABmw"]
[Sat Aug 29 05:12:34.306654 2026] [security2:error] [pid 1321:tid 1526] [client 20.52.41.200:2631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-conflg.php"] [unique_id "apK-omjCPtor9NZ-byQO1AAABmI"]
[Sat Aug 29 05:12:34.310279 2026] [security2:error] [pid 60333:tid 60513] [client 4.205.62.107:32571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/file59.php"] [unique_id "apK-ojwSHPvvQcBSRbsbUQAAAbs"]
[Sat Aug 29 05:12:34.365974 2026] [security2:error] [pid 60333:tid 60486] [client 20.220.204.93:18796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/export.php"] [unique_id "apK-ojwSHPvvQcBSRbsbUgAAAaA"]
[Sat Aug 29 05:12:34.406293 2026] [security2:error] [pid 60333:tid 60495] [client 74.248.24.12:40251] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/x.php"] [unique_id "apK-ojwSHPvvQcBSRbsbUwAAAak"]
[Sat Aug 29 05:12:34.429912 2026] [security2:error] [pid 60333:tid 60508] [client 4.205.62.107:6098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/a1vx.php"] [unique_id "apK-ojwSHPvvQcBSRbsbVAAAAbY"]
[Sat Aug 29 05:12:34.430459 2026] [security2:error] [pid 1321:tid 1547] [client 20.240.128.207:24854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-includes/fonts/admin.php"] [unique_id "apK-omjCPtor9NZ-byQO1gAABnY"]
[Sat Aug 29 05:12:34.431343 2026] [security2:error] [pid 60333:tid 60523] [client 20.48.251.3:37995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/wp-info.php"] [unique_id "apK-ojwSHPvvQcBSRbsbVQAAAcU"]
[Sat Aug 29 05:12:34.451626 2026] [security2:error] [pid 1321:tid 1490] [client 20.104.49.130:39062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bfcorrigan.com"] [uri "/simple.php"] [unique_id "apK-omjCPtor9NZ-byQO1wAABj4"]
[Sat Aug 29 05:12:34.455541 2026] [security2:error] [pid 1321:tid 1512] [client 34.234.197.175:63265] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "tbcflorida.com"] [uri "/robots.txt"] [unique_id "apK-omjCPtor9NZ-byQO2AAABlQ"]
[Sat Aug 29 05:12:34.466543 2026] [security2:error] [pid 60333:tid 60571] [client 20.104.49.130:57657] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/jp.php"] [unique_id "apK-ojwSHPvvQcBSRbsbVwAAAfU"]
[Sat Aug 29 05:12:34.472751 2026] [security2:error] [pid 60333:tid 60484] [client 20.63.219.114:1864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/alumni_reg.php"] [unique_id "apK-ojwSHPvvQcBSRbsbWAAAAZ4"]
[Sat Aug 29 05:12:34.481762 2026] [security2:error] [pid 1321:tid 1502] [client 68.155.159.216:56488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/about.php"] [unique_id "apK-omjCPtor9NZ-byQO2QAABko"]
[Sat Aug 29 05:12:34.496677 2026] [security2:error] [pid 60333:tid 60534] [client 4.205.62.107:64939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/thui.php"] [unique_id "apK-ojwSHPvvQcBSRbsbWQAAAdA"]
[Sat Aug 29 05:12:34.501413 2026] [security2:error] [pid 60333:tid 60478] [client 20.220.204.93:9594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/gk.php"] [unique_id "apK-ojwSHPvvQcBSRbsbWgAAAZg"]
[Sat Aug 29 05:12:34.558317 2026] [security2:error] [pid 60333:tid 60517] [client 20.48.251.3:38669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/infos.php"] [unique_id "apK-ojwSHPvvQcBSRbsbWwAAAb8"]
[Sat Aug 29 05:12:34.562692 2026] [security2:error] [pid 1321:tid 1465] [remote 57.129.136.36:43822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 36.136.129.57.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "healthysmilestoday.com"] [uri "/wp-login.php"] [unique_id "apK-omjCPtor9NZ-byQO2gAGTGo"], referer: https://healthysmilestoday.com/wp-login.php
[Sat Aug 29 05:12:34.588969 2026] [security2:error] [pid 60333:tid 60530] [client 158.158.54.35:33840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/disagraeosc.php"] [unique_id "apK-ojwSHPvvQcBSRbsbXAAAAcw"]
[Sat Aug 29 05:12:34.631791 2026] [security2:error] [pid 60333:tid 60531] [client 81.208.175.87:60403] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "ncaltech.com"] [uri "/"] [unique_id "apK-ojwSHPvvQcBSRbsbXgAAAc0"]
[Sat Aug 29 05:12:34.636806 2026] [security2:error] [pid 1321:tid 1615] [client 20.197.61.180:8784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-admin/test.php"] [unique_id "apK-omjCPtor9NZ-byQO2wAABro"]
[Sat Aug 29 05:12:34.661955 2026] [security2:error] [pid 60333:tid 60522] [client 158.158.54.35:1339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-ojwSHPvvQcBSRbsbXwAAAcQ"]
[Sat Aug 29 05:12:34.668163 2026] [security2:error] [pid 1321:tid 1609] [client 20.63.219.114:11612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/room.php"] [unique_id "apK-omjCPtor9NZ-byQO3AAABrQ"]
[Sat Aug 29 05:12:34.680010 2026] [security2:error] [pid 60333:tid 60515] [client 60.243.207.176:49234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK-ojwSHPvvQcBSRbsbYAAAAb0"]
[Sat Aug 29 05:12:34.680099 2026] [security2:error] [pid 60333:tid 60515] [client 60.243.207.176:49234] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK-ojwSHPvvQcBSRbsbYAAAAb0"]
[Sat Aug 29 05:12:34.685546 2026] [security2:error] [pid 60333:tid 60558] [client 20.48.251.3:37956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/vx.php"] [unique_id "apK-ojwSHPvvQcBSRbsbYQAAAeg"]
[Sat Aug 29 05:12:34.707305 2026] [security2:error] [pid 1321:tid 1461] [remote 160.16.208.110:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.208.16.160.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "chaiyomuaythai.com"] [uri "/xmlrpc.php"] [unique_id "apK-omjCPtor9NZ-byQO3gAGZWY"]
[Sat Aug 29 05:12:34.707452 2026] [security2:error] [pid 1321:tid 1529] [client 160.16.208.110:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "chaiyomuaythai.com"] [uri "/xmlrpc.php"] [unique_id "apK-omjCPtor9NZ-byQO3gAGZWY"]
[Sat Aug 29 05:12:34.712132 2026] [security2:error] [pid 1321:tid 1517] [client 158.23.147.79:31743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carpevictoriam.com"] [uri "/wp-admin/about.php"] [unique_id "apK-omjCPtor9NZ-byQO4AAABlk"]
[Sat Aug 29 05:12:34.745525 2026] [security2:error] [pid 60333:tid 60503] [client 20.196.209.81:14725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/hello.php"] [unique_id "apK-ojwSHPvvQcBSRbsbZgAAAbE"]
[Sat Aug 29 05:12:34.748304 2026] [security2:error] [pid 1321:tid 1544] [client 20.52.41.200:2233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/123.php"] [unique_id "apK-omjCPtor9NZ-byQO4QAABnQ"]
[Sat Aug 29 05:12:34.765418 2026] [security2:error] [pid 60333:tid 60573] [client 68.155.159.216:49039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/xmlrpc.php"] [unique_id "apK-ojwSHPvvQcBSRbsbaQAAAfc"]
[Sat Aug 29 05:12:34.805276 2026] [security2:error] [pid 1321:tid 1522] [client 4.205.62.107:60563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/wp-access.php"] [unique_id "apK-omjCPtor9NZ-byQO5AAABl4"]
[Sat Aug 29 05:12:34.814940 2026] [security2:error] [pid 60333:tid 60561] [client 20.48.251.3:37971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/radio.php"] [unique_id "apK-ojwSHPvvQcBSRbsbagAAAes"]
[Sat Aug 29 05:12:34.832182 2026] [security2:error] [pid 60333:tid 60535] [client 20.63.219.114:1904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/colors.php"] [unique_id "apK-ojwSHPvvQcBSRbsbbAAAAdE"]
[Sat Aug 29 05:12:34.836855 2026] [security2:error] [pid 1321:tid 1492] [client 103.215.74.26:62172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.74.215.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.com"] [uri "/wp/index.php"] [unique_id "apK-omjCPtor9NZ-byQO5QAABkA"], referer: https://kglogisticsinc.com/wp/wp-admin/
[Sat Aug 29 05:12:34.838812 2026] [security2:error] [pid 60333:tid 60560] [client 158.23.147.79:55917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.condo4maui.com"] [uri "/first.php"] [unique_id "apK-ojwSHPvvQcBSRbsbbQAAAeo"]
[Sat Aug 29 05:12:34.844575 2026] [security2:error] [pid 60333:tid 60549] [client 20.220.204.93:9530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/logs1.php"] [unique_id "apK-ojwSHPvvQcBSRbsbbgAAAd8"]
[Sat Aug 29 05:12:34.867654 2026] [security2:error] [pid 60333:tid 60547] [client 20.197.61.180:3827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thatsaturdaythang.lifesosweet.com"] [uri "/wp-admin/options-general.php"] [unique_id "apK-ojwSHPvvQcBSRbsbbwAAAd0"]
[Sat Aug 29 05:12:34.869625 2026] [security2:error] [pid 60333:tid 60507] [client 20.197.61.180:11724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/bak.phps"] [unique_id "apK-ojwSHPvvQcBSRbsbcAAAAbU"]
[Sat Aug 29 05:12:34.890117 2026] [security2:error] [pid 60333:tid 60593] [client 4.205.62.107:28047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/phpi.php"] [unique_id "apK-ojwSHPvvQcBSRbsbcQAAAgs"]
[Sat Aug 29 05:12:34.918765 2026] [security2:error] [pid 60333:tid 60568] [client 20.240.128.207:2389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/m.php"] [unique_id "apK-ojwSHPvvQcBSRbsbcgAAAfI"]
[Sat Aug 29 05:12:34.920560 2026] [security2:error] [pid 60333:tid 60526] [client 74.248.24.12:40198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/new.php"] [unique_id "apK-ojwSHPvvQcBSRbsbcwAAAcg"]
[Sat Aug 29 05:12:34.943714 2026] [security2:error] [pid 60333:tid 60557] [client 20.48.251.3:38147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/BDKR28WP.php"] [unique_id "apK-ojwSHPvvQcBSRbsbdAAAAec"]
[Sat Aug 29 05:12:34.956530 2026] [security2:error] [pid 1321:tid 1480] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-admin/user/f35.php"] [unique_id "apK-omjCPtor9NZ-byQO5gAGUnk"]
[Sat Aug 29 05:12:34.988101 2026] [security2:error] [pid 1321:tid 1577] [client 4.205.62.107:63023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/nlnub.php"] [unique_id "apK-omjCPtor9NZ-byQO5wAABpQ"]
[Sat Aug 29 05:12:35.001084 2026] [security2:error] [pid 60333:tid 60591] [client 68.155.159.216:62745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/cgi-bin/index.php"] [unique_id "apK-ojwSHPvvQcBSRbsbdQAAAgk"]
[Sat Aug 29 05:12:35.003387 2026] [security2:error] [pid 60333:tid 60583] [client 81.208.175.87:60436] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "ncaltech.com"] [uri "/"] [unique_id "apK-ozwSHPvvQcBSRbsbdgAAAgE"]
[Sat Aug 29 05:12:35.008956 2026] [security2:error] [pid 1321:tid 1588] [client 20.151.200.44:27172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/secret.php"] [unique_id "apK-o2jCPtor9NZ-byQO6QAABp8"]
[Sat Aug 29 05:12:35.038575 2026] [security2:error] [pid 60333:tid 60589] [client 68.155.159.216:43967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/wp-includes/css/index.php"] [unique_id "apK-ozwSHPvvQcBSRbsbdwAAAgc"]
[Sat Aug 29 05:12:35.039143 2026] [security2:error] [pid 60333:tid 60578] [client 158.158.54.35:16720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-logs.php"] [unique_id "apK-ozwSHPvvQcBSRbsbeAAAAfw"]
[Sat Aug 29 05:12:35.039862 2026] [security2:error] [pid 1321:tid 1499] [client 68.155.159.216:21386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-admin/index.php"] [unique_id "apK-o2jCPtor9NZ-byQO6gAABkc"]
[Sat Aug 29 05:12:35.040491 2026] [security2:error] [pid 60333:tid 60588] [client 4.205.62.107:6816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/wp-tem.php"] [unique_id "apK-ozwSHPvvQcBSRbsbegAAAgY"]
[Sat Aug 29 05:12:35.076249 2026] [security2:error] [pid 1321:tid 1527] [client 20.48.251.3:38590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/_js.jpg..bk.php"] [unique_id "apK-o2jCPtor9NZ-byQO7AAABmM"]
[Sat Aug 29 05:12:35.090711 2026] [security2:error] [pid 60333:tid 60556] [client 61.9.8.35:26868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK-ozwSHPvvQcBSRbsbewAAAeY"]
[Sat Aug 29 05:12:35.090807 2026] [security2:error] [pid 60333:tid 60556] [client 61.9.8.35:26868] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK-ozwSHPvvQcBSRbsbewAAAeY"]
[Sat Aug 29 05:12:35.108982 2026] [security2:error] [pid 1321:tid 1543] [client 158.158.54.35:29806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/alfa-rex.php7"] [unique_id "apK-o2jCPtor9NZ-byQO7QAABnM"]
[Sat Aug 29 05:12:35.110057 2026] [security2:error] [pid 1321:tid 1375] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-admin/user/min.php"] [unique_id "apK-o2jCPtor9NZ-byQO7gAGTxE"]
[Sat Aug 29 05:12:35.125388 2026] [security2:error] [pid 60333:tid 60475] [client 20.220.204.93:18810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/inege.php"] [unique_id "apK-ozwSHPvvQcBSRbsbfwAAAZU"]
[Sat Aug 29 05:12:35.126313 2026] [security2:error] [pid 60333:tid 60579] [client 20.63.219.114:11596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/class-wp-cmd.php"] [unique_id "apK-ozwSHPvvQcBSRbsbgAAAAf0"]
[Sat Aug 29 05:12:35.130919 2026] [security2:error] [pid 1321:tid 1515] [client 158.23.147.79:50055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/admin.php"] [unique_id "apK-o2jCPtor9NZ-byQO7wAABlc"]
[Sat Aug 29 05:12:35.131920 2026] [security2:error] [pid 60333:tid 60479] [client 68.155.159.216:23370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/bk/index.php"] [unique_id "apK-ozwSHPvvQcBSRbsbgQAAAZk"]
[Sat Aug 29 05:12:35.138125 2026] [security2:error] [pid 60333:tid 60584] [client 68.155.159.216:44017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.theenprogroup.com"] [uri "/file17.php"] [unique_id "apK-ozwSHPvvQcBSRbsbggAAAgI"]
[Sat Aug 29 05:12:35.142003 2026] [security2:error] [pid 60333:tid 60592] [client 4.205.62.107:63405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/4563.php"] [unique_id "apK-ozwSHPvvQcBSRbsbgwAAAgo"]
[Sat Aug 29 05:12:35.145807 2026] [security2:error] [pid 60333:tid 60582] [client 20.196.209.81:11316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/fi2.php"] [unique_id "apK-ozwSHPvvQcBSRbsbhAAAAgA"]
[Sat Aug 29 05:12:35.173560 2026] [security2:error] [pid 1321:tid 1561] [client 197.232.63.170:53184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 170.63.232.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK-o2jCPtor9NZ-byQO8wAABoQ"]
[Sat Aug 29 05:12:35.173674 2026] [security2:error] [pid 1321:tid 1561] [client 197.232.63.170:53184] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK-o2jCPtor9NZ-byQO8wAABoQ"]
[Sat Aug 29 05:12:35.191248 2026] [security2:error] [pid 60333:tid 60580] [client 20.63.219.114:12645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/Js.php"] [unique_id "apK-ozwSHPvvQcBSRbsbhQAAAf4"]
[Sat Aug 29 05:12:35.192798 2026] [security2:error] [pid 1321:tid 1497] [client 57.141.14.54:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/"] [unique_id "apK-o2jCPtor9NZ-byQO9AAABkU"]
[Sat Aug 29 05:12:35.205057 2026] [security2:error] [pid 1321:tid 1516] [client 20.48.251.3:38540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/setup-config.php"] [unique_id "apK-o2jCPtor9NZ-byQO9QAABlg"]
[Sat Aug 29 05:12:35.214401 2026] [security2:error] [pid 60333:tid 60480] [client 20.52.41.200:2643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/yanz.php"] [unique_id "apK-ozwSHPvvQcBSRbsbhgAAAZo"]
[Sat Aug 29 05:12:35.229324 2026] [security2:error] [pid 60333:tid 60513] [client 158.23.147.79:64498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK-ozwSHPvvQcBSRbsbhwAAAbs"]
[Sat Aug 29 05:12:35.262001 2026] [security2:error] [pid 1321:tid 1601] [client 20.104.18.15:17031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-o2jCPtor9NZ-byQO-AAABqw"]
[Sat Aug 29 05:12:35.277894 2026] [security2:error] [pid 1321:tid 1391] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-admin/users.php"] [unique_id "apK-o2jCPtor9NZ-byQO-gAGqiE"]
[Sat Aug 29 05:12:35.282191 2026] [security2:error] [pid 1321:tid 1598] [client 68.155.159.216:64032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/.well-knownold/index.php"] [unique_id "apK-o2jCPtor9NZ-byQO-wAABqk"]
[Sat Aug 29 05:12:35.333547 2026] [security2:error] [pid 1321:tid 1523] [client 20.48.251.3:38549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/phpversion.php"] [unique_id "apK-o2jCPtor9NZ-byQO_AAABl8"]
[Sat Aug 29 05:12:35.335969 2026] [security2:error] [pid 60333:tid 60484] [client 158.23.147.79:24439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/mah.php"] [unique_id "apK-ozwSHPvvQcBSRbsbigAAAZ4"]
[Sat Aug 29 05:12:35.341238 2026] [security2:error] [pid 60333:tid 60510] [client 20.220.204.93:18264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/wp-link10.php"] [unique_id "apK-ozwSHPvvQcBSRbsbiwAAAbg"]
[Sat Aug 29 05:12:35.389315 2026] [security2:error] [pid 1321:tid 1491] [client 20.104.18.15:17040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-o2jCPtor9NZ-byQO_gAABj8"]
[Sat Aug 29 05:12:35.420702 2026] [security2:error] [pid 60333:tid 60524] [client 74.248.24.12:39656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/menu.php"] [unique_id "apK-ozwSHPvvQcBSRbsbjgAAAcY"]
[Sat Aug 29 05:12:35.437663 2026] [security2:error] [pid 1321:tid 1376] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-admin/wp-cron.php"] [unique_id "apK-o2jCPtor9NZ-byQPAQAGfhI"]
[Sat Aug 29 05:12:35.441952 2026] [security2:error] [pid 60333:tid 60517] [client 4.205.62.107:27739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/cli_bootstrap.php"] [unique_id "apK-ozwSHPvvQcBSRbsbkAAAAb8"]
[Sat Aug 29 05:12:35.461714 2026] [security2:error] [pid 1321:tid 1583] [client 20.48.251.3:37967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/hiquido.com/index.php"] [unique_id "apK-o2jCPtor9NZ-byQPAgAABpo"]
[Sat Aug 29 05:12:35.471753 2026] [security2:error] [pid 1321:tid 1512] [client 20.240.128.207:2391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "apK-o2jCPtor9NZ-byQPAAAABlQ"]
[Sat Aug 29 05:12:35.485453 2026] [security2:error] [pid 60333:tid 60571] [client 158.158.54.35:16713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-admin/css/about.php"] [unique_id "apK-ozwSHPvvQcBSRbsbkQAAAfU"]
[Sat Aug 29 05:12:35.502450 2026] [security2:error] [pid 60333:tid 60538] [client 158.23.147.79:14322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK-ozwSHPvvQcBSRbsbkgAAAdQ"]
[Sat Aug 29 05:12:35.525136 2026] [security2:error] [pid 1321:tid 1544] [client 20.104.18.15:17108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/ap.php"] [unique_id "apK-o2jCPtor9NZ-byQPAwAABnQ"]
[Sat Aug 29 05:12:35.545053 2026] [security2:error] [pid 1321:tid 1586] [client 158.158.54.35:1453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "apK-o2jCPtor9NZ-byQPBAAABp0"]
[Sat Aug 29 05:12:35.545053 2026] [security2:error] [pid 60333:tid 60534] [client 20.196.209.81:20872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/1p.php"] [unique_id "apK-ozwSHPvvQcBSRbsbkwAAAdA"]
[Sat Aug 29 05:12:35.564894 2026] [security2:error] [pid 1321:tid 1522] [client 4.205.62.107:5518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/public/vx.php"] [unique_id "apK-o2jCPtor9NZ-byQPBgAABl4"]
[Sat Aug 29 05:12:35.589467 2026] [security2:error] [pid 1321:tid 1564] [client 20.48.251.3:38557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/app_local.php"] [unique_id "apK-o2jCPtor9NZ-byQPBwAABoc"]
[Sat Aug 29 05:12:35.589935 2026] [security2:error] [pid 1321:tid 1448] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-admin/wp-links-opml.php"] [unique_id "apK-o2jCPtor9NZ-byQPCAAGsFk"]
[Sat Aug 29 05:12:35.590906 2026] [security2:error] [pid 1321:tid 1580] [client 20.197.61.180:3820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thatsaturdaythang.lifesosweet.com"] [uri "/wp-admin/options.php"] [unique_id "apK-o2jCPtor9NZ-byQPCQAABpc"]
[Sat Aug 29 05:12:35.607276 2026] [security2:error] [pid 1321:tid 1573] [client 20.197.61.180:3808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-admin/user/f35.php"] [unique_id "apK-o2jCPtor9NZ-byQPCwAABpA"]
[Sat Aug 29 05:12:35.608103 2026] [security2:error] [pid 1321:tid 1489] [client 20.220.204.93:59629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/ww.php"] [unique_id "apK-o2jCPtor9NZ-byQPDAAABj0"]
[Sat Aug 29 05:12:35.613774 2026] [security2:error] [pid 1321:tid 1576] [client 20.104.49.130:43032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bfcorrigan.com"] [uri "/chosen.php"] [unique_id "apK-o2jCPtor9NZ-byQPDQAABpM"]
[Sat Aug 29 05:12:35.614020 2026] [security2:error] [pid 60333:tid 60494] [client 20.63.219.114:1857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/disagreed.php"] [unique_id "apK-ozwSHPvvQcBSRbsblQAAAag"]
[Sat Aug 29 05:12:35.619319 2026] [security2:error] [pid 60333:tid 60505] [client 20.63.219.114:14002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/access.php"] [unique_id "apK-ozwSHPvvQcBSRbsblgAAAbM"]
[Sat Aug 29 05:12:35.625523 2026] [security2:error] [pid 1321:tid 1566] [client 20.197.61.180:13473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/install.php"] [unique_id "apK-o2jCPtor9NZ-byQPDgAABok"]
[Sat Aug 29 05:12:35.647577 2026] [security2:error] [pid 60333:tid 60497] [client 4.205.62.107:65008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/file21.php"] [unique_id "apK-ozwSHPvvQcBSRbsblwAAAas"]
[Sat Aug 29 05:12:35.653914 2026] [security2:error] [pid 1321:tid 1594] [client 202.71.25.11:52347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.25.71.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK-o2jCPtor9NZ-byQPDwAABqU"]
[Sat Aug 29 05:12:35.654004 2026] [security2:error] [pid 1321:tid 1594] [client 202.71.25.11:52347] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK-o2jCPtor9NZ-byQPDwAABqU"]
[Sat Aug 29 05:12:35.657918 2026] [security2:error] [pid 1321:tid 1508] [client 20.104.18.15:17092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/media.php"] [unique_id "apK-o2jCPtor9NZ-byQPEAAABlA"]
[Sat Aug 29 05:12:35.672371 2026] [security2:error] [pid 1321:tid 1529] [client 20.52.41.200:2193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/autoload_classmap.php"] [unique_id "apK-o2jCPtor9NZ-byQPEQAABmU"]
[Sat Aug 29 05:12:35.723738 2026] [security2:error] [pid 60333:tid 60546] [client 87.219.197.128:63694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK-ozwSHPvvQcBSRbsbmQAAAdw"]
[Sat Aug 29 05:12:35.723828 2026] [security2:error] [pid 60333:tid 60546] [client 87.219.197.128:63694] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK-ozwSHPvvQcBSRbsbmQAAAdw"]
[Sat Aug 29 05:12:35.729681 2026] [security2:error] [pid 60333:tid 60573] [client 20.48.251.3:38206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/xqq.php"] [unique_id "apK-ozwSHPvvQcBSRbsbmgAAAfc"]
[Sat Aug 29 05:12:35.742434 2026] [security2:error] [pid 1321:tid 1368] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-admin/wp-load.php"] [unique_id "apK-o2jCPtor9NZ-byQPFQAGoQo"]
[Sat Aug 29 05:12:35.786280 2026] [security2:error] [pid 1321:tid 1515] [client 20.104.18.15:17118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/adminfuns.php"] [unique_id "apK-o2jCPtor9NZ-byQPFgAABlc"]
[Sat Aug 29 05:12:35.839133 2026] [security2:error] [pid 1321:tid 1608] [client 158.23.147.79:31556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carpevictoriam.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK-o2jCPtor9NZ-byQPFwAABrM"]
[Sat Aug 29 05:12:35.855720 2026] [security2:error] [pid 60333:tid 60566] [client 20.48.251.3:38189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/or.php"] [unique_id "apK-ozwSHPvvQcBSRbsbmwAAAfA"]
[Sat Aug 29 05:12:35.871066 2026] [security2:error] [pid 1321:tid 1519] [client 68.155.159.216:49114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/atomlib.php"] [unique_id "apK-o2jCPtor9NZ-byQPGAAABls"]
[Sat Aug 29 05:12:35.894892 2026] [security2:error] [pid 1321:tid 1455] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-admin/wp-mail.php"] [unique_id "apK-o2jCPtor9NZ-byQPGQAGWGA"]
[Sat Aug 29 05:12:35.916168 2026] [security2:error] [pid 1321:tid 1600] [client 20.220.204.93:18295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/w1px.php"] [unique_id "apK-o2jCPtor9NZ-byQPGgAABqs"]
[Sat Aug 29 05:12:35.923907 2026] [security2:error] [pid 1321:tid 1507] [client 158.158.54.35:28123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/system_log.php"] [unique_id "apK-o2jCPtor9NZ-byQPGwAABk8"]
[Sat Aug 29 05:12:35.930199 2026] [security2:error] [pid 1321:tid 1601] [client 20.104.18.15:17024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/classwithtostring.php"] [unique_id "apK-o2jCPtor9NZ-byQPHAAABqw"]
[Sat Aug 29 05:12:35.935191 2026] [security2:error] [pid 1321:tid 1543] [client 74.248.24.12:40217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK-o2jCPtor9NZ-byQPHQAABnM"]
[Sat Aug 29 05:12:35.946096 2026] [security2:error] [pid 60333:tid 60561] [client 20.196.209.81:2034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/Njima.php"] [unique_id "apK-ozwSHPvvQcBSRbsbnAAAAes"]
[Sat Aug 29 05:12:35.958805 2026] [security2:error] [pid 1321:tid 1502] [client 4.205.62.107:61688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/otuz1.php"] [unique_id "apK-o2jCPtor9NZ-byQPHgAABko"]
[Sat Aug 29 05:12:35.967715 2026] [security2:error] [pid 60333:tid 60536] [client 20.240.128.207:8186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/222.php"] [unique_id "apK-ozwSHPvvQcBSRbsbnQAAAdI"]
[Sat Aug 29 05:12:35.973629 2026] [security2:error] [pid 60333:tid 60532] [client 20.63.219.114:12624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/classsmtps.php"] [unique_id "apK-ozwSHPvvQcBSRbsbngAAAc4"]
[Sat Aug 29 05:12:35.986586 2026] [security2:error] [pid 60333:tid 60540] [client 20.48.251.3:37962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/i.php"] [unique_id "apK-ozwSHPvvQcBSRbsbnwAAAdY"]
[Sat Aug 29 05:12:36.028444 2026] [security2:error] [pid 60333:tid 60586] [client 4.205.62.107:28085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK-pDwSHPvvQcBSRbsbogAAAgQ"]
[Sat Aug 29 05:12:36.041707 2026] [security2:error] [pid 1321:tid 1536] [client 158.158.54.35:1487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/upload.php"] [unique_id "apK-pGjCPtor9NZ-byQPHwAABmw"]
[Sat Aug 29 05:12:36.046744 2026] [security2:error] [pid 1321:tid 1433] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-admin/wp-settings.php"] [unique_id "apK-pGjCPtor9NZ-byQPIAAGtEs"]
[Sat Aug 29 05:12:36.067679 2026] [security2:error] [pid 1321:tid 1517] [client 158.23.147.79:43298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/themes.php"] [unique_id "apK-pGjCPtor9NZ-byQPIgAABlk"]
[Sat Aug 29 05:12:36.070314 2026] [security2:error] [pid 60333:tid 60576] [client 20.104.18.15:17026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK-pDwSHPvvQcBSRbsbpgAAAfo"]
[Sat Aug 29 05:12:36.089981 2026] [security2:error] [pid 60333:tid 60567] [client 20.63.219.114:18877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/class_api.php"] [unique_id "apK-pDwSHPvvQcBSRbsbpwAAAfE"]
[Sat Aug 29 05:12:36.106721 2026] [security2:error] [pid 1321:tid 1514] [client 68.155.159.216:62832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK-pGjCPtor9NZ-byQPIwAABlY"]
[Sat Aug 29 05:12:36.114520 2026] [security2:error] [pid 1321:tid 1565] [client 20.48.251.3:37976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/aww.php"] [unique_id "apK-pGjCPtor9NZ-byQPJAAABog"]
[Sat Aug 29 05:12:36.123679 2026] [security2:error] [pid 1321:tid 1557] [client 20.52.41.200:2180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/bi.php"] [unique_id "apK-pGjCPtor9NZ-byQPJQAABoA"]
[Sat Aug 29 05:12:36.136231 2026] [security2:error] [pid 60333:tid 60514] [client 4.205.62.107:60933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/mga.php"] [unique_id "apK-pDwSHPvvQcBSRbsbqQAAAbw"]
[Sat Aug 29 05:12:36.179209 2026] [security2:error] [pid 60333:tid 60528] [client 4.205.62.107:6818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/txets.php"] [unique_id "apK-pDwSHPvvQcBSRbsbqgAAAco"]
[Sat Aug 29 05:12:36.196382 2026] [security2:error] [pid 60333:tid 60555] [client 20.104.18.15:17045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/5PJcpMFsD8B.php"] [unique_id "apK-pDwSHPvvQcBSRbsbqwAAAeU"]
[Sat Aug 29 05:12:36.200132 2026] [security2:error] [pid 1321:tid 1471] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-admin/wp-signup.php"] [unique_id "apK-pGjCPtor9NZ-byQPJwAGl3A"]
[Sat Aug 29 05:12:36.229736 2026] [http2:warn] [pid 1041789:tid 1041984] [client 57.141.14.41:57682] h2_stream(1041789-123-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:12:36.243710 2026] [security2:error] [pid 1321:tid 1489] [client 20.48.251.3:37981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/sgd.php"] [unique_id "apK-pGjCPtor9NZ-byQPKAAABj0"]
[Sat Aug 29 05:12:36.255368 2026] [security2:error] [pid 1321:tid 1576] [client 20.220.204.93:59618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/to.php"] [unique_id "apK-pGjCPtor9NZ-byQPKQAABpM"]
[Sat Aug 29 05:12:36.272834 2026] [security2:error] [pid 60333:tid 60556] [client 68.155.159.216:23443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.steeldrumflavor.com"] [uri "/first.php"] [unique_id "apK-pDwSHPvvQcBSRbsbrgAAAeY"]
[Sat Aug 29 05:12:36.279399 2026] [security2:error] [pid 1321:tid 1510] [client 4.205.62.107:63417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/cp2.php"] [unique_id "apK-pGjCPtor9NZ-byQPKgAABlI"]
[Sat Aug 29 05:12:36.308094 2026] [security2:error] [pid 1321:tid 1509] [client 20.197.61.180:3333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-admin/user/min.php"] [unique_id "apK-pGjCPtor9NZ-byQPKwAABlE"]
[Sat Aug 29 05:12:36.313613 2026] [security2:error] [pid 1321:tid 1604] [client 20.197.61.180:8774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thatsaturdaythang.lifesosweet.com"] [uri "/wp-admin/panel.php"] [unique_id "apK-pGjCPtor9NZ-byQPLAAABq8"]
[Sat Aug 29 05:12:36.331377 2026] [security2:error] [pid 60333:tid 60562] [client 20.104.49.130:60991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/666.php"] [unique_id "apK-pDwSHPvvQcBSRbsbrwAAAew"]
[Sat Aug 29 05:12:36.332233 2026] [security2:error] [pid 1321:tid 1594] [client 20.104.18.15:17033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK-pGjCPtor9NZ-byQPLQAABqU"]
[Sat Aug 29 05:12:36.334492 2026] [security2:error] [pid 60333:tid 60473] [client 158.23.147.79:64413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/wp-content/radio.php"] [unique_id "apK-pDwSHPvvQcBSRbsbsAAAAZM"]
[Sat Aug 29 05:12:36.347764 2026] [security2:error] [pid 60333:tid 60588] [client 20.63.219.114:18867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/contentloader1.php"] [unique_id "apK-pDwSHPvvQcBSRbsbsQAAAgY"]
[Sat Aug 29 05:12:36.352154 2026] [security2:error] [pid 1321:tid 1463] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-blog-header.php"] [unique_id "apK-pGjCPtor9NZ-byQPLgAGhWg"]
[Sat Aug 29 05:12:36.355417 2026] [security2:error] [pid 60333:tid 60590] [client 158.158.54.35:25820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/24.php"] [unique_id "apK-pDwSHPvvQcBSRbsbsgAAAgg"]
[Sat Aug 29 05:12:36.369560 2026] [security2:error] [pid 60333:tid 60585] [client 20.48.251.3:38606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/gecko-litespeed.php"] [unique_id "apK-pDwSHPvvQcBSRbsbswAAAgM"]
[Sat Aug 29 05:12:36.384373 2026] [security2:error] [pid 1321:tid 1522] [client 20.197.61.180:1092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/colour.php"] [unique_id "apK-pGjCPtor9NZ-byQPLwAABl4"]
[Sat Aug 29 05:12:36.387598 2026] [security2:error] [pid 60333:tid 60579] [client 68.155.159.216:7001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK-pDwSHPvvQcBSRbsbtAAAAf0"]
[Sat Aug 29 05:12:36.413562 2026] [http2:warn] [pid 1034096:tid 1034259] [client 74.7.241.38:45352] h2_stream(1034096-93-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:12:36.413586 2026] [http2:warn] [pid 1034096:tid 1034259] [client 74.7.241.38:45352] h2_stream(1034096-93-3,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:12:36.414144 2026] [security2:error] [pid 60333:tid 60482] [client 20.196.209.81:20877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/configs.php"] [unique_id "apK-pDwSHPvvQcBSRbsbtwAAAZw"]
[Sat Aug 29 05:12:36.451982 2026] [cgid:error] [pid 1321:tid 1567] [client 74.248.24.12:24446] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/themysticalseven/404.shtml
[Sat Aug 29 05:12:36.467576 2026] [security2:error] [pid 60333:tid 60519] [client 20.104.18.15:17044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/wsd.php"] [unique_id "apK-pDwSHPvvQcBSRbsbuAAAAcE"]
[Sat Aug 29 05:12:36.490352 2026] [security2:error] [pid 60333:tid 60499] [client 158.23.147.79:24418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-blog-header.php"] [unique_id "apK-pDwSHPvvQcBSRbsbuQAAAa0"]
[Sat Aug 29 05:12:36.496194 2026] [security2:error] [pid 60333:tid 60480] [client 20.48.251.3:38589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/motu.php"] [unique_id "apK-pDwSHPvvQcBSRbsbugAAAZo"]
[Sat Aug 29 05:12:36.501881 2026] [security2:error] [pid 60333:tid 60489] [client 20.240.128.207:8224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/mini.php"] [unique_id "apK-pDwSHPvvQcBSRbsbuwAAAaM"]
[Sat Aug 29 05:12:36.502684 2026] [security2:error] [pid 60333:tid 60481] [client 20.104.49.130:56230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/82.php"] [unique_id "apK-pDwSHPvvQcBSRbsbvAAAAZs"]
[Sat Aug 29 05:12:36.504575 2026] [security2:error] [pid 1321:tid 1393] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-blogs.php"] [unique_id "apK-pGjCPtor9NZ-byQPMgAGQCM"]
[Sat Aug 29 05:12:36.541176 2026] [security2:error] [pid 60333:tid 60575] [client 20.63.219.114:12671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/aksinet.php"] [unique_id "apK-pDwSHPvvQcBSRbsbwAAAAfk"]
[Sat Aug 29 05:12:36.550615 2026] [autoindex:error] [pid 60333:tid 60529] [client 158.158.54.35:0] AH01276: Cannot serve directory /home2/charlov7/public_html/dev/wp-includes/ID3/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:12:36.565043 2026] [security2:error] [pid 60333:tid 60554] [client 20.52.41.200:2126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/cc.php"] [unique_id "apK-pDwSHPvvQcBSRbsbwgAAAeQ"]
[Sat Aug 29 05:12:36.580348 2026] [security2:error] [pid 1321:tid 1590] [client 4.205.62.107:28066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/dd.php"] [unique_id "apK-pGjCPtor9NZ-byQPNAAABqE"]
[Sat Aug 29 05:12:36.601499 2026] [security2:error] [pid 1321:tid 1561] [client 20.104.18.15:17150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/bulet.php"] [unique_id "apK-pGjCPtor9NZ-byQPNwAABoQ"]
[Sat Aug 29 05:12:36.620011 2026] [security2:error] [pid 1321:tid 1497] [client 74.248.24.12:24446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/lite.php"] [unique_id "apK-pGjCPtor9NZ-byQPOQAABkU"]
[Sat Aug 29 05:12:36.623295 2026] [security2:error] [pid 1321:tid 1526] [client 20.48.251.3:38164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/rpk.php"] [unique_id "apK-pGjCPtor9NZ-byQPOgAABmI"]
[Sat Aug 29 05:12:36.623544 2026] [security2:error] [pid 60333:tid 60511] [client 52.139.37.240:2602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.squaretrap.com"] [uri "/aged.php"] [unique_id "apK-pDwSHPvvQcBSRbsbxAAAAbk"]
[Sat Aug 29 05:12:36.637426 2026] [security2:error] [pid 1321:tid 1547] [client 68.155.159.216:38275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK-pGjCPtor9NZ-byQPOwAABnY"]
[Sat Aug 29 05:12:36.638070 2026] [security2:error] [pid 1321:tid 1516] [client 68.155.159.216:43954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/cgi-bin/wp-login.php"] [unique_id "apK-pGjCPtor9NZ-byQPPAAABlg"]
[Sat Aug 29 05:12:36.649287 2026] [security2:error] [pid 60333:tid 60504] [client 68.155.159.216:21501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK-pDwSHPvvQcBSRbsbxQAAAbI"]
[Sat Aug 29 05:12:36.658167 2026] [security2:error] [pid 1321:tid 1384] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-comments-post.php"] [unique_id "apK-pGjCPtor9NZ-byQPPQAGTxo"]
[Sat Aug 29 05:12:36.662392 2026] [proxy_http:error] [pid 1041789:tid 1041955] (70007)The timeout specified has expired: [client 127.0.0.1:39124] AH01102: error reading status line from remote server 50.6.92.44:8443, referer: https://guraonline.com/shop/?orderby=price-desc&product_brand=locobase,la-roche-posay,possess,the-one,aco,dr-ceuracle,versace,scope
[Sat Aug 29 05:12:36.662408 2026] [proxy:error] [pid 1041789:tid 1041955] [client 127.0.0.1:39124] AH00898: Error reading from remote server returned by /shop/, referer: https://guraonline.com/shop/?orderby=price-desc&product_brand=locobase,la-roche-posay,possess,the-one,aco,dr-ceuracle,versace,scope
[Sat Aug 29 05:12:36.686376 2026] [proxy_http:error] [pid 1041789:tid 1041857] (70007)The timeout specified has expired: [remote 74.7.241.38:37586] AH01102: error reading status line from remote server 127.0.0.1:8443, referer: https://guraonline.com/shop/?orderby=price-desc&product_brand=locobase,la-roche-posay,possess,the-one,aco,dr-ceuracle,versace,scope
[Sat Aug 29 05:12:36.686397 2026] [proxy:error] [pid 1041789:tid 1041857] [remote 74.7.241.38:37586] AH00898: Error reading from remote server returned by /shop/, referer: https://guraonline.com/shop/?orderby=price-desc&product_brand=locobase,la-roche-posay,possess,the-one,aco,dr-ceuracle,versace,scope
[Sat Aug 29 05:12:36.704517 2026] [security2:error] [pid 60333:tid 60506] [client 4.205.62.107:5528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/log.php"] [unique_id "apK-pDwSHPvvQcBSRbsbygAAAbQ"]
[Sat Aug 29 05:12:36.736985 2026] [security2:error] [pid 1321:tid 1523] [client 20.104.18.15:17119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/av.php"] [unique_id "apK-pGjCPtor9NZ-byQPQgAABl8"]
[Sat Aug 29 05:12:36.740348 2026] [security2:error] [pid 1321:tid 1563] [client 20.63.219.114:14013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/al.php"] [unique_id "apK-pGjCPtor9NZ-byQPQwAABoY"]
[Sat Aug 29 05:12:36.743782 2026] [security2:error] [pid 60333:tid 60530] [client 20.220.204.93:57413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/thui.php"] [unique_id "apK-pDwSHPvvQcBSRbsbzAAAAcw"]
[Sat Aug 29 05:12:36.744448 2026] [autoindex:error] [pid 1321:tid 1584] [client 158.158.54.35:0] AH01276: Cannot serve directory /home2/charlov7/public_html/dev/wp-includes/Text/Diff/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:12:36.751512 2026] [security2:error] [pid 1321:tid 1504] [client 20.48.251.3:37999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/ms.php"] [unique_id "apK-pGjCPtor9NZ-byQPRAAABkw"]
[Sat Aug 29 05:12:36.788675 2026] [security2:error] [pid 60333:tid 60531] [client 4.205.62.107:61836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/mcebraed.php"] [unique_id "apK-pDwSHPvvQcBSRbsbzQAAAc0"]
[Sat Aug 29 05:12:36.808616 2026] [security2:error] [pid 1321:tid 1601] [client 20.196.209.81:20900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/disagraeed.php"] [unique_id "apK-pGjCPtor9NZ-byQPRgAABqw"]
[Sat Aug 29 05:12:36.815936 2026] [security2:error] [pid 1321:tid 1443] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-configs.php"] [unique_id "apK-pGjCPtor9NZ-byQPRwAGRlU"]
[Sat Aug 29 05:12:36.819269 2026] [security2:error] [pid 60333:tid 60551] [client 52.139.37.240:61654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.squaretrap.com"] [uri "/essexec.php"] [unique_id "apK-pDwSHPvvQcBSRbsbzgAAAeE"]
[Sat Aug 29 05:12:36.876220 2026] [security2:error] [pid 60333:tid 60503] [client 20.104.18.15:17147] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/images.php"] [unique_id "apK-pDwSHPvvQcBSRbsb0AAAAbE"]
[Sat Aug 29 05:12:36.879900 2026] [security2:error] [pid 60333:tid 60492] [client 20.48.251.3:38611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/ccou.php"] [unique_id "apK-pDwSHPvvQcBSRbsb0QAAAaY"]
[Sat Aug 29 05:12:36.888785 2026] [security2:error] [pid 60333:tid 60546] [client 158.158.54.35:15103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wp-content/file.php"] [unique_id "apK-pDwSHPvvQcBSRbsb0gAAAdw"]
[Sat Aug 29 05:12:36.898691 2026] [security2:error] [pid 1321:tid 1564] [client 20.151.200.44:27302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/pro.php"] [unique_id "apK-pGjCPtor9NZ-byQPTAAABoc"]
[Sat Aug 29 05:12:36.931960 2026] [security2:error] [pid 60333:tid 60564] [client 68.155.159.216:21388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/wp-content/admin.php"] [unique_id "apK-pDwSHPvvQcBSRbsb0wAAAe4"]
[Sat Aug 29 05:12:36.957272 2026] [security2:error] [pid 1321:tid 1580] [client 20.220.204.93:18718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/Jcrop.php"] [unique_id "apK-pGjCPtor9NZ-byQPTQAABpc"]
[Sat Aug 29 05:12:36.963222 2026] [security2:error] [pid 1321:tid 1573] [client 158.23.147.79:31725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carpevictoriam.com"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK-pGjCPtor9NZ-byQPTgAABpA"]
[Sat Aug 29 05:12:36.968616 2026] [security2:error] [pid 1321:tid 1356] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-conflg.php"] [unique_id "apK-pGjCPtor9NZ-byQPTwAGPQA"]
[Sat Aug 29 05:12:36.978063 2026] [security2:error] [pid 1321:tid 1610] [client 68.155.159.216:49100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/lv.php"] [unique_id "apK-pGjCPtor9NZ-byQPUAAABrU"]
[Sat Aug 29 05:12:36.989418 2026] [security2:error] [pid 1321:tid 1615] [client 20.240.128.207:7530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/aa.php"] [unique_id "apK-pGjCPtor9NZ-byQPUQAABro"]
[Sat Aug 29 05:12:36.998900 2026] [security2:error] [pid 1321:tid 1499] [client 20.197.61.180:3342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-admin/users.php"] [unique_id "apK-pGjCPtor9NZ-byQPUgAABkc"]
[Sat Aug 29 05:12:37.001446 2026] [security2:error] [pid 1321:tid 1576] [client 158.158.54.35:28120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK-pGjCPtor9NZ-byQPUwAABpM"]
[Sat Aug 29 05:12:37.004378 2026] [security2:error] [pid 60333:tid 60565] [client 20.104.18.15:17120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/ops.php"] [unique_id "apK-pTwSHPvvQcBSRbsb1AAAAe8"]
[Sat Aug 29 05:12:37.007754 2026] [security2:error] [pid 1321:tid 1566] [client 20.48.251.3:38587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/66.php"] [unique_id "apK-pWjCPtor9NZ-byQPVAAABok"]
[Sat Aug 29 05:12:37.012435 2026] [security2:error] [pid 1321:tid 1555] [client 20.197.61.180:3338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thatsaturdaythang.lifesosweet.com"] [uri "/wp-admin/pk.php"] [unique_id "apK-pWjCPtor9NZ-byQPVQAABn4"]
[Sat Aug 29 05:12:37.012715 2026] [security2:error] [pid 1321:tid 1565] [client 20.52.41.200:2115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/files/index.php"] [unique_id "apK-pWjCPtor9NZ-byQPVgAABog"]
[Sat Aug 29 05:12:37.015585 2026] [security2:error] [pid 60333:tid 60542] [client 52.139.37.240:54904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.squaretrap.com"] [uri "/fw.php"] [unique_id "apK-pTwSHPvvQcBSRbsb1QAAAdg"]
[Sat Aug 29 05:12:37.091497 2026] [security2:error] [pid 1321:tid 1567] [client 4.205.62.107:60544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/update.php"] [unique_id "apK-pWjCPtor9NZ-byQPWgAABoo"]
[Sat Aug 29 05:12:37.105036 2026] [security2:error] [pid 1321:tid 1512] [client 20.63.219.114:13979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/alfa-rex1.php"] [unique_id "apK-pWjCPtor9NZ-byQPXAAABlQ"]
[Sat Aug 29 05:12:37.112630 2026] [security2:error] [pid 60333:tid 60547] [client 158.23.147.79:14258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK-pTwSHPvvQcBSRbsb2AAAAd0"]
[Sat Aug 29 05:12:37.120940 2026] [security2:error] [pid 1321:tid 1454] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-content.php"] [unique_id "apK-pWjCPtor9NZ-byQPXQAGQF8"]
[Sat Aug 29 05:12:37.124243 2026] [security2:error] [pid 1321:tid 1506] [client 20.220.204.93:18715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/ws58.php"] [unique_id "apK-pWjCPtor9NZ-byQPXgAABk4"]
[Sat Aug 29 05:12:37.125930 2026] [security2:error] [pid 60333:tid 60570] [client 20.63.219.114:1911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/global.php"] [unique_id "apK-pTwSHPvvQcBSRbsb2gAAAfQ"]
[Sat Aug 29 05:12:37.132923 2026] [security2:error] [pid 60333:tid 60569] [client 20.104.18.15:17133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/coffexium.php"] [unique_id "apK-pTwSHPvvQcBSRbsb2wAAAfM"]
[Sat Aug 29 05:12:37.134604 2026] [security2:error] [pid 1321:tid 1596] [client 20.48.251.3:37958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/wp-act.php"] [unique_id "apK-pWjCPtor9NZ-byQPXwAABqc"]
[Sat Aug 29 05:12:37.134715 2026] [security2:error] [pid 60333:tid 60566] [client 74.248.24.12:24402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/term.php"] [unique_id "apK-pTwSHPvvQcBSRbsb3AAAAfA"]
[Sat Aug 29 05:12:37.174260 2026] [security2:error] [pid 1321:tid 1608] [client 4.205.62.107:62761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/myfile.php"] [unique_id "apK-pWjCPtor9NZ-byQPYQAABrM"]
[Sat Aug 29 05:12:37.199066 2026] [security2:error] [pid 60333:tid 60572] [client 20.197.61.180:8406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/OK.php"] [unique_id "apK-pTwSHPvvQcBSRbsb3wAAAfY"]
[Sat Aug 29 05:12:37.204852 2026] [security2:error] [pid 60333:tid 60544] [client 158.23.147.79:43296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-mail.php"] [unique_id "apK-pTwSHPvvQcBSRbsb4AAAAdo"]
[Sat Aug 29 05:12:37.209075 2026] [security2:error] [pid 60333:tid 60586] [client 20.196.209.81:20886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/add_actualites.php"] [unique_id "apK-pTwSHPvvQcBSRbsb4QAAAgQ"]
[Sat Aug 29 05:12:37.214285 2026] [security2:error] [pid 60333:tid 60557] [client 68.155.159.216:62841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-includes/content.php"] [unique_id "apK-pTwSHPvvQcBSRbsb4wAAAec"]
[Sat Aug 29 05:12:37.244256 2026] [security2:error] [pid 60333:tid 60596] [client 52.139.37.240:54910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.squaretrap.com"] [uri "/zwso.php"] [unique_id "apK-pTwSHPvvQcBSRbsb5AAAAg4"]
[Sat Aug 29 05:12:37.261936 2026] [security2:error] [pid 60333:tid 60520] [client 20.48.251.3:38144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/samll.php"] [unique_id "apK-pTwSHPvvQcBSRbsb5QAAAcI"]
[Sat Aug 29 05:12:37.263968 2026] [security2:error] [pid 60333:tid 60552] [client 20.104.18.15:27615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/BDKR28WP.php"] [unique_id "apK-pTwSHPvvQcBSRbsb5gAAAeI"]
[Sat Aug 29 05:12:37.278239 2026] [security2:error] [pid 1321:tid 1548] [client 4.205.62.107:63039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/ccou.php"] [unique_id "apK-pWjCPtor9NZ-byQPaQAABnc"]
[Sat Aug 29 05:12:37.320453 2026] [security2:error] [pid 60333:tid 60556] [client 4.205.62.107:6933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/time.php"] [unique_id "apK-pTwSHPvvQcBSRbsb6AAAAeY"]
[Sat Aug 29 05:12:37.347531 2026] [security2:error] [pid 1321:tid 1497] [client 158.158.54.35:11756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/files.php"] [unique_id "apK-pWjCPtor9NZ-byQPbAAABkU"]
[Sat Aug 29 05:12:37.351453 2026] [security2:error] [pid 1321:tid 1386] [remote 13.140.187.88:44248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.187.140.13.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mihp.net"] [uri "/wp-login.php"] [unique_id "apK-pWjCPtor9NZ-byQPbQAGaBw"], referer: https://mihp.net/wp-login.php
[Sat Aug 29 05:12:37.356813 2026] [security2:error] [pid 60333:tid 60584] [client 20.220.204.93:57446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/xs.php"] [unique_id "apK-pTwSHPvvQcBSRbsb6wAAAgI"]
[Sat Aug 29 05:12:37.389244 2026] [security2:error] [pid 60333:tid 60471] [client 20.48.251.3:38536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/pass4.php"] [unique_id "apK-pTwSHPvvQcBSRbsb7QAAAZE"]
[Sat Aug 29 05:12:37.413067 2026] [security2:error] [pid 60333:tid 60493] [client 20.151.200.44:27146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/999.php"] [unique_id "apK-pTwSHPvvQcBSRbsb7gAAAac"]
[Sat Aug 29 05:12:37.417058 2026] [security2:error] [pid 1321:tid 1489] [client 20.104.18.15:17116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/sf.php"] [unique_id "apK-pWjCPtor9NZ-byQPbgAABj0"]
[Sat Aug 29 05:12:37.417065 2026] [security2:error] [pid 60333:tid 60519] [client 4.205.62.107:63372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/xda.php"] [unique_id "apK-pTwSHPvvQcBSRbsb7wAAAcE"]
[Sat Aug 29 05:12:37.440370 2026] [security2:error] [pid 1321:tid 1412] [remote 20.196.209.81:0] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "sungrove.org"] [uri "/wp-content/1.php"] [unique_id "apK-pWjCPtor9NZ-byQPbwAGkzY"]
[Sat Aug 29 05:12:37.440449 2026] [security2:error] [pid 1321:tid 1412] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-content/1.php"] [unique_id "apK-pWjCPtor9NZ-byQPbwAGkzY"]
[Sat Aug 29 05:12:37.441919 2026] [security2:error] [pid 60333:tid 60482] [client 52.139.37.240:2899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.squaretrap.com"] [uri "/admin/function.php"] [unique_id "apK-pTwSHPvvQcBSRbsb8AAAAZw"]
[Sat Aug 29 05:12:37.442461 2026] [security2:error] [pid 1321:tid 1566] [client 158.23.147.79:64422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/wp-admin/dropdown.php"] [unique_id "apK-pWjCPtor9NZ-byQPcAAABok"]
[Sat Aug 29 05:12:37.455377 2026] [security2:error] [pid 60333:tid 60589] [client 20.104.49.130:46165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "connectdotz.com"] [uri "/mac.php"] [unique_id "apK-pTwSHPvvQcBSRbsb8QAAAgc"]
[Sat Aug 29 05:12:37.469543 2026] [security2:error] [pid 1321:tid 1490] [client 20.52.41.200:2827] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "sls-ug.jomoassociates.com"] [uri "/1.php7"] [unique_id "apK-pWjCPtor9NZ-byQPcwAABj4"]
[Sat Aug 29 05:12:37.469636 2026] [security2:error] [pid 1321:tid 1490] [client 20.52.41.200:2827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/1.php7"] [unique_id "apK-pWjCPtor9NZ-byQPcwAABj4"]
[Sat Aug 29 05:12:37.478238 2026] [security2:error] [pid 60333:tid 60577] [client 20.104.49.130:57601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/about.php"] [unique_id "apK-pTwSHPvvQcBSRbsb8gAAAfs"]
[Sat Aug 29 05:12:37.499542 2026] [security2:error] [pid 1321:tid 1564] [client 20.240.128.207:24681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/c.php"] [unique_id "apK-pWjCPtor9NZ-byQPdQAABoc"]
[Sat Aug 29 05:12:37.518555 2026] [security2:error] [pid 60333:tid 60575] [client 20.48.251.3:37996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/dd.php"] [unique_id "apK-pTwSHPvvQcBSRbsb8wAAAfk"]
[Sat Aug 29 05:12:37.534692 2026] [security2:error] [pid 60333:tid 60488] [client 20.220.204.93:57424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/zu.php"] [unique_id "apK-pTwSHPvvQcBSRbsb9AAAAaI"]
[Sat Aug 29 05:12:37.569627 2026] [security2:error] [pid 60333:tid 60490] [client 20.104.18.15:17146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/k.php"] [unique_id "apK-pTwSHPvvQcBSRbsb9QAAAaQ"]
[Sat Aug 29 05:12:37.592902 2026] [security2:error] [pid 1321:tid 1425] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-content/about.php"] [unique_id "apK-pWjCPtor9NZ-byQPdwAGpUM"]
[Sat Aug 29 05:12:37.608476 2026] [security2:error] [pid 1321:tid 1499] [client 20.63.219.114:12656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/update.php"] [unique_id "apK-pWjCPtor9NZ-byQPeAAABkc"]
[Sat Aug 29 05:12:37.621131 2026] [security2:error] [pid 1321:tid 1609] [client 158.23.147.79:24413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK-pWjCPtor9NZ-byQPeQAABrQ"]
[Sat Aug 29 05:12:37.639824 2026] [security2:error] [pid 60333:tid 60533] [client 52.139.37.240:2884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.squaretrap.com"] [uri "/zoom1.php"] [unique_id "apK-pTwSHPvvQcBSRbsb9wAAAc8"]
[Sat Aug 29 05:12:37.642660 2026] [security2:error] [pid 1321:tid 1597] [client 20.104.49.130:63424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/read.php"] [unique_id "apK-pWjCPtor9NZ-byQPegAABqg"]
[Sat Aug 29 05:12:37.647908 2026] [security2:error] [pid 60333:tid 60476] [client 74.248.24.12:33518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/config.php"] [unique_id "apK-pTwSHPvvQcBSRbsb-AAAAZY"]
[Sat Aug 29 05:12:37.651712 2026] [security2:error] [pid 60333:tid 60509] [client 20.63.219.114:1100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/headerg.php"] [unique_id "apK-pTwSHPvvQcBSRbsb-QAAAbc"]
[Sat Aug 29 05:12:37.653549 2026] [security2:error] [pid 1321:tid 1492] [client 20.48.251.3:37975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/doc.php"] [unique_id "apK-pWjCPtor9NZ-byQPewAABkA"]
[Sat Aug 29 05:12:37.711233 2026] [security2:error] [pid 60333:tid 60587] [client 20.196.209.81:20917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/alfanew.php7"] [unique_id "apK-pTwSHPvvQcBSRbsb-wAAAgU"]
[Sat Aug 29 05:12:37.716968 2026] [security2:error] [pid 60333:tid 60486] [client 20.197.61.180:3384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-admin/wp-cron.php"] [unique_id "apK-pTwSHPvvQcBSRbsb_AAAAaA"]
[Sat Aug 29 05:12:37.717810 2026] [security2:error] [pid 60333:tid 60534] [client 20.104.18.15:17142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/82.php"] [unique_id "apK-pTwSHPvvQcBSRbsb_QAAAdA"]
[Sat Aug 29 05:12:37.718866 2026] [security2:error] [pid 60333:tid 60595] [client 4.205.62.107:60334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/wp-tem.php"] [unique_id "apK-pTwSHPvvQcBSRbsb_gAAAg0"]
[Sat Aug 29 05:12:37.726620 2026] [security2:error] [pid 1321:tid 1561] [client 20.196.209.81:5029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/post.php"] [unique_id "apK-pWjCPtor9NZ-byQPfQAABoQ"]
[Sat Aug 29 05:12:37.744464 2026] [security2:error] [pid 60333:tid 60481] [client 20.197.61.180:8777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thatsaturdaythang.lifesosweet.com"] [uri "/wp-admin/plugin-install.php"] [unique_id "apK-pTwSHPvvQcBSRbscAAAAAZs"]
[Sat Aug 29 05:12:37.746152 2026] [security2:error] [pid 1321:tid 1468] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-content/admin-header.php"] [unique_id "apK-pWjCPtor9NZ-byQPfgAGcm0"]
[Sat Aug 29 05:12:37.749207 2026] [security2:error] [pid 60333:tid 60494] [client 68.155.159.216:21502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/about.php"] [unique_id "apK-pTwSHPvvQcBSRbscAQAAAag"]
[Sat Aug 29 05:12:37.756466 2026] [security2:error] [pid 60333:tid 60531] [client 20.220.204.93:57467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/lanka.php"] [unique_id "apK-pTwSHPvvQcBSRbscAwAAAc0"]
[Sat Aug 29 05:12:37.782263 2026] [security2:error] [pid 60333:tid 60472] [client 20.48.251.3:38557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/fun.php"] [unique_id "apK-pTwSHPvvQcBSRbscBAAAAZI"]
[Sat Aug 29 05:12:37.790223 2026] [security2:error] [pid 60333:tid 60558] [client 20.48.250.41:36119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/motu.php"] [unique_id "apK-pTwSHPvvQcBSRbscBQAAAeg"]
[Sat Aug 29 05:12:37.804412 2026] [security2:error] [pid 60333:tid 60550] [client 20.48.250.41:24479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/bolt.php"] [unique_id "apK-pTwSHPvvQcBSRbscBgAAAeA"]
[Sat Aug 29 05:12:37.809017 2026] [security2:error] [pid 1321:tid 1512] [client 158.158.54.35:37165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/o.php"] [unique_id "apK-pWjCPtor9NZ-byQPfwAABlQ"]
[Sat Aug 29 05:12:37.836169 2026] [security2:error] [pid 60333:tid 60553] [client 52.139.37.240:61668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.squaretrap.com"] [uri "/about.php7"] [unique_id "apK-pTwSHPvvQcBSRbscBwAAAeM"]
[Sat Aug 29 05:12:37.846114 2026] [security2:error] [pid 60333:tid 60574] [client 4.205.62.107:5513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/ebahvhhh.php"] [unique_id "apK-pTwSHPvvQcBSRbscCAAAAfg"]
[Sat Aug 29 05:12:37.848352 2026] [security2:error] [pid 60333:tid 60542] [client 20.104.49.130:53854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bfcorrigan.com"] [uri "/ops.php"] [unique_id "apK-pTwSHPvvQcBSRbscCQAAAdg"]
[Sat Aug 29 05:12:37.856378 2026] [security2:error] [pid 60333:tid 60561] [client 20.104.18.15:17099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/dex.php"] [unique_id "apK-pTwSHPvvQcBSRbscCgAAAes"]
[Sat Aug 29 05:12:37.871129 2026] [security2:error] [pid 60333:tid 60522] [client 20.48.250.41:25431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/06.php"] [unique_id "apK-pTwSHPvvQcBSRbscDAAAAcQ"]
[Sat Aug 29 05:12:37.899144 2026] [security2:error] [pid 1321:tid 1380] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-content/admin.php"] [unique_id "apK-pWjCPtor9NZ-byQPggAGWBY"]
[Sat Aug 29 05:12:37.903028 2026] [security2:error] [pid 60333:tid 60549] [client 52.138.0.157:42329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bctcoffee.com"] [uri "/sm.php"] [unique_id "apK-pTwSHPvvQcBSRbscDgAAAd8"]
[Sat Aug 29 05:12:37.914274 2026] [security2:error] [pid 60333:tid 60594] [client 20.48.251.3:38146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/bb.php"] [unique_id "apK-pTwSHPvvQcBSRbscDwAAAgw"]
[Sat Aug 29 05:12:37.918245 2026] [security2:error] [pid 60333:tid 60538] [client 20.197.61.180:11720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.fevahmovie.wanderlustpictures.com"] [uri "/aaa.php"] [unique_id "apK-pTwSHPvvQcBSRbscEAAAAdQ"]
[Sat Aug 29 05:12:37.924844 2026] [security2:error] [pid 60333:tid 60551] [client 20.52.41.200:2188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/disagraeosc.php"] [unique_id "apK-pTwSHPvvQcBSRbscEQAAAeE"]
[Sat Aug 29 05:12:37.929390 2026] [security2:error] [pid 60333:tid 60544] [client 4.205.62.107:64299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/server-info.php"] [unique_id "apK-pTwSHPvvQcBSRbscEgAAAdo"]
[Sat Aug 29 05:12:37.966968 2026] [security2:error] [pid 60333:tid 60514] [client 20.48.250.41:24566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/rtx.php"] [unique_id "apK-pTwSHPvvQcBSRbscEwAAAbw"]
[Sat Aug 29 05:12:37.970611 2026] [security2:error] [pid 60333:tid 60477] [client 20.220.204.93:57411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/gettest.php"] [unique_id "apK-pTwSHPvvQcBSRbscFQAAAZc"]
[Sat Aug 29 05:12:37.977010 2026] [security2:error] [pid 1321:tid 1598] [client 20.48.250.41:36364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/Ov-Simple1.php"] [unique_id "apK-pWjCPtor9NZ-byQPhAAABqk"]
[Sat Aug 29 05:12:37.978699 2026] [security2:error] [pid 1321:tid 1563] [client 20.48.250.41:39905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/155.php"] [unique_id "apK-pWjCPtor9NZ-byQPhQAABoY"]
[Sat Aug 29 05:12:38.002409 2026] [security2:error] [pid 1321:tid 1548] [client 20.104.18.15:17052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/inso.php"] [unique_id "apK-pmjCPtor9NZ-byQPhwAABnc"]
[Sat Aug 29 05:12:38.014517 2026] [security2:error] [pid 60333:tid 60547] [client 20.63.219.114:18829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/meta.php"] [unique_id "apK-pjwSHPvvQcBSRbscFgAAAd0"]
[Sat Aug 29 05:12:38.014957 2026] [security2:error] [pid 1321:tid 1515] [client 20.240.128.207:8183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/f.php"] [unique_id "apK-pmjCPtor9NZ-byQPiQAABlc"]
[Sat Aug 29 05:12:38.042609 2026] [security2:error] [pid 60333:tid 60473] [client 52.138.0.157:42358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bctcoffee.com"] [uri "/shell.php"] [unique_id "apK-pjwSHPvvQcBSRbscFwAAAZM"]
[Sat Aug 29 05:12:38.042609 2026] [security2:error] [pid 1321:tid 1562] [client 20.63.219.114:12647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/blog.php"] [unique_id "apK-pmjCPtor9NZ-byQPigAABoU"]
[Sat Aug 29 05:12:38.048372 2026] [security2:error] [pid 1321:tid 1613] [client 68.155.159.216:56798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/xmlrpc.php"] [unique_id "apK-pmjCPtor9NZ-byQPiwAABrg"]
[Sat Aug 29 05:12:38.051225 2026] [security2:error] [pid 1321:tid 1605] [client 20.48.251.3:38701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/06.php"] [unique_id "apK-pmjCPtor9NZ-byQPjQAABrA"]
[Sat Aug 29 05:12:38.051520 2026] [security2:error] [pid 1321:tid 1427] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-content/autoload_classmap.php"] [unique_id "apK-pmjCPtor9NZ-byQPjgAGpkU"]
[Sat Aug 29 05:12:38.055040 2026] [security2:error] [pid 60333:tid 60591] [client 52.139.37.240:2883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.squaretrap.com"] [uri "/cron.php"] [unique_id "apK-pjwSHPvvQcBSRbscGAAAAgk"]
[Sat Aug 29 05:12:38.068440 2026] [security2:error] [pid 60333:tid 60584] [client 158.23.147.79:31621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carpevictoriam.com"] [uri "/chosen.php"] [unique_id "apK-pjwSHPvvQcBSRbscGQAAAgI"]
[Sat Aug 29 05:12:38.084639 2026] [security2:error] [pid 60333:tid 60493] [client 20.48.250.41:25597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/class.php"] [unique_id "apK-pjwSHPvvQcBSRbscGgAAAac"]
[Sat Aug 29 05:12:38.090049 2026] [security2:error] [pid 1321:tid 1532] [client 158.158.54.35:25814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK-pmjCPtor9NZ-byQPkAAABmg"]
[Sat Aug 29 05:12:38.116898 2026] [security2:error] [pid 1321:tid 1610] [client 20.48.250.41:24465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/ckk.php"] [unique_id "apK-pmjCPtor9NZ-byQPkgAABrU"]
[Sat Aug 29 05:12:38.144794 2026] [security2:error] [pid 1321:tid 1566] [client 20.104.18.15:17137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/aa.php"] [unique_id "apK-pmjCPtor9NZ-byQPkwAABok"]
[Sat Aug 29 05:12:38.152425 2026] [security2:error] [pid 60333:tid 60489] [client 20.48.250.41:36824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/wp-blogs.php"] [unique_id "apK-pjwSHPvvQcBSRbscGwAAAaM"]
[Sat Aug 29 05:12:38.153430 2026] [security2:error] [pid 60333:tid 60552] [client 20.196.209.81:15118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/flower.php"] [unique_id "apK-pjwSHPvvQcBSRbscHAAAAeI"]
[Sat Aug 29 05:12:38.157031 2026] [security2:error] [pid 1321:tid 1584] [client 20.196.209.81:1403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/xmlrpc.php0"] [unique_id "apK-pmjCPtor9NZ-byQPkQAABps"]
[Sat Aug 29 05:12:38.165377 2026] [security2:error] [pid 1321:tid 1504] [client 74.248.24.12:33530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK-pmjCPtor9NZ-byQPlAAABkw"]
[Sat Aug 29 05:12:38.180265 2026] [security2:error] [pid 1321:tid 1564] [client 20.48.251.3:38690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/otuz1.php"] [unique_id "apK-pmjCPtor9NZ-byQPlQAABoc"]
[Sat Aug 29 05:12:38.203987 2026] [security2:error] [pid 1321:tid 1366] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-content/cache/min/1/wp-content/admin.php"] [unique_id "apK-pmjCPtor9NZ-byQPlwAGdgg"]
[Sat Aug 29 05:12:38.211706 2026] [security2:error] [pid 1321:tid 1522] [client 103.185.242.143:50127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-pmjCPtor9NZ-byQPmAAABl4"]
[Sat Aug 29 05:12:38.211800 2026] [security2:error] [pid 1321:tid 1522] [client 103.185.242.143:50127] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-pmjCPtor9NZ-byQPmAAABl4"]
[Sat Aug 29 05:12:38.215553 2026] [security2:error] [pid 60333:tid 60508] [client 20.48.250.41:25486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/8.php"] [unique_id "apK-pjwSHPvvQcBSRbscHwAAAbY"]
[Sat Aug 29 05:12:38.216988 2026] [security2:error] [pid 60333:tid 60523] [client 158.23.147.79:14182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK-pjwSHPvvQcBSRbscIAAAAcU"]
[Sat Aug 29 05:12:38.229109 2026] [security2:error] [pid 1321:tid 1501] [client 20.104.49.130:51357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/users.php"] [unique_id "apK-pmjCPtor9NZ-byQPmQAABkk"]
[Sat Aug 29 05:12:38.235864 2026] [security2:error] [pid 60333:tid 60488] [client 68.155.159.216:43966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/wp-content/cong.php"] [unique_id "apK-pjwSHPvvQcBSRbscIQAAAaI"]
[Sat Aug 29 05:12:38.236909 2026] [security2:error] [pid 60333:tid 60510] [client 68.155.159.216:38679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/themes.php"] [unique_id "apK-pjwSHPvvQcBSRbscIgAAAbg"]
[Sat Aug 29 05:12:38.237127 2026] [security2:error] [pid 60333:tid 60582] [client 52.138.0.157:1269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bctcoffee.com"] [uri "/simple.php"] [unique_id "apK-pjwSHPvvQcBSRbscIwAAAgA"]
[Sat Aug 29 05:12:38.241123 2026] [security2:error] [pid 60333:tid 60490] [client 4.205.62.107:61681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/channels.php"] [unique_id "apK-pjwSHPvvQcBSRbscJAAAAaQ"]
[Sat Aug 29 05:12:38.255680 2026] [security2:error] [pid 1321:tid 1489] [client 158.158.54.35:20696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/file2.php"] [unique_id "apK-pmjCPtor9NZ-byQPmgAABj0"]
[Sat Aug 29 05:12:38.257825 2026] [security2:error] [pid 60333:tid 60554] [client 158.23.147.79:50058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/wp-admin/admin.php"] [unique_id "apK-pjwSHPvvQcBSRbscJgAAAeQ"]
[Sat Aug 29 05:12:38.266146 2026] [security2:error] [pid 60333:tid 60496] [client 52.139.37.240:2903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.squaretrap.com"] [uri "/wp-2019.php"] [unique_id "apK-pjwSHPvvQcBSRbscJwAAAao"]
[Sat Aug 29 05:12:38.284083 2026] [security2:error] [pid 1321:tid 1574] [client 68.155.159.216:44027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.theenprogroup.com"] [uri "/file5.php"] [unique_id "apK-pmjCPtor9NZ-byQPnQAABpE"]
[Sat Aug 29 05:12:38.288342 2026] [security2:error] [pid 60333:tid 60511] [client 20.48.250.41:36851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/mini.php"] [unique_id "apK-pjwSHPvvQcBSRbscKgAAAbk"]
[Sat Aug 29 05:12:38.304077 2026] [security2:error] [pid 60333:tid 60517] [client 4.205.62.107:62912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/lm15.php"] [unique_id "apK-pjwSHPvvQcBSRbscKwAAAb8"]
[Sat Aug 29 05:12:38.308350 2026] [security2:error] [pid 1321:tid 1529] [client 20.48.251.3:37957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/filesystems.php"] [unique_id "apK-pmjCPtor9NZ-byQPngAABmU"]
[Sat Aug 29 05:12:38.313255 2026] [security2:error] [pid 60333:tid 60476] [client 158.23.147.79:43710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/cgi-bin/index.php"] [unique_id "apK-pjwSHPvvQcBSRbscLAAAAZY"]
[Sat Aug 29 05:12:38.313994 2026] [security2:error] [pid 60333:tid 60506] [client 20.48.250.41:24448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.realestatetrifecta.com"] [uri "/R57.php"] [unique_id "apK-pjwSHPvvQcBSRbscLQAAAbQ"]
[Sat Aug 29 05:12:38.319076 2026] [security2:error] [pid 1321:tid 1609] [client 68.155.159.216:62821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-admin/css/index.php"] [unique_id "apK-pmjCPtor9NZ-byQPnwAABrQ"]
[Sat Aug 29 05:12:38.325816 2026] [security2:error] [pid 1321:tid 1567] [client 20.220.204.93:18724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/35.php"] [unique_id "apK-pmjCPtor9NZ-byQPoAAABoo"]
[Sat Aug 29 05:12:38.357831 2026] [security2:error] [pid 1321:tid 1367] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-content/classwithtostring.php"] [unique_id "apK-pmjCPtor9NZ-byQPoQAGQAk"]
[Sat Aug 29 05:12:38.361807 2026] [security2:error] [pid 60333:tid 60486] [client 20.104.18.15:17097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/img.php"] [unique_id "apK-pjwSHPvvQcBSRbscMAAAAaA"]
[Sat Aug 29 05:12:38.378787 2026] [security2:error] [pid 60333:tid 60531] [client 20.48.250.41:25414] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/0x0x.php"] [unique_id "apK-pjwSHPvvQcBSRbscMgAAAc0"]
[Sat Aug 29 05:12:38.381916 2026] [security2:error] [pid 60333:tid 60575] [client 20.52.41.200:2733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-logs.php"] [unique_id "apK-pjwSHPvvQcBSRbscMwAAAfk"]
[Sat Aug 29 05:12:38.422304 2026] [security2:error] [pid 1321:tid 1608] [client 4.205.62.107:63010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/rum.or.php"] [unique_id "apK-pmjCPtor9NZ-byQPpAAABrM"]
[Sat Aug 29 05:12:38.423404 2026] [security2:error] [pid 1321:tid 1498] [client 20.63.219.114:1914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/dxc.php"] [unique_id "apK-pmjCPtor9NZ-byQPpQAABkY"]
[Sat Aug 29 05:12:38.429304 2026] [security2:error] [pid 1321:tid 1557] [client 20.63.219.114:14006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/bypass.php"] [unique_id "apK-pmjCPtor9NZ-byQPpgAABoA"]
[Sat Aug 29 05:12:38.433032 2026] [security2:error] [pid 1321:tid 1550] [client 52.138.0.157:1302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bctcoffee.com"] [uri "/wp-admin.php"] [unique_id "apK-pmjCPtor9NZ-byQPpwAABnk"]
[Sat Aug 29 05:12:38.436044 2026] [security2:error] [pid 60333:tid 60515] [client 20.48.251.3:38591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/server_info.php"] [unique_id "apK-pjwSHPvvQcBSRbscNQAAAb0"]
[Sat Aug 29 05:12:38.440317 2026] [security2:error] [pid 60333:tid 60526] [client 20.197.61.180:3701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-admin/wp-links-opml.php"] [unique_id "apK-pjwSHPvvQcBSRbscNgAAAcg"]
[Sat Aug 29 05:12:38.447794 2026] [security2:error] [pid 1321:tid 1526] [client 20.48.250.41:36115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/amp.php"] [unique_id "apK-pmjCPtor9NZ-byQPqAAABmI"]
[Sat Aug 29 05:12:38.455568 2026] [security2:error] [pid 60333:tid 60503] [client 4.205.62.107:6901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/doc.php"] [unique_id "apK-pjwSHPvvQcBSRbscNwAAAbE"]
[Sat Aug 29 05:12:38.465909 2026] [security2:error] [pid 60333:tid 60495] [client 52.139.37.240:61658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.squaretrap.com"] [uri "/gecko-new.php"] [unique_id "apK-pjwSHPvvQcBSRbscOQAAAak"]
[Sat Aug 29 05:12:38.471860 2026] [security2:error] [pid 60333:tid 60487] [client 20.197.61.180:8793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thatsaturdaythang.lifesosweet.com"] [uri "/wp-admin/plugins/img/themes/plugins/maintenance.php"] [unique_id "apK-pjwSHPvvQcBSRbscOgAAAaE"]
[Sat Aug 29 05:12:38.497262 2026] [security2:error] [pid 1321:tid 1563] [client 20.104.49.130:58083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/ohct.php"] [unique_id "apK-pmjCPtor9NZ-byQPqgAABoY"]
[Sat Aug 29 05:12:38.504139 2026] [security2:error] [pid 60333:tid 60521] [client 20.104.18.15:17036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/222.php"] [unique_id "apK-pjwSHPvvQcBSRbscOwAAAcM"]
[Sat Aug 29 05:12:38.509695 2026] [security2:error] [pid 1321:tid 1473] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-content/config.php"] [unique_id "apK-pmjCPtor9NZ-byQPqwAGhXI"]
[Sat Aug 29 05:12:38.541925 2026] [security2:error] [pid 1321:tid 1586] [client 20.48.250.41:25482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/166.php"] [unique_id "apK-pmjCPtor9NZ-byQPrAAABp0"]
[Sat Aug 29 05:12:38.547665 2026] [security2:error] [pid 1321:tid 1590] [client 158.158.54.35:25835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/num.php"] [unique_id "apK-pmjCPtor9NZ-byQPrQAABqE"]
[Sat Aug 29 05:12:38.557120 2026] [security2:error] [pid 1321:tid 1497] [client 68.155.159.216:64071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK-pmjCPtor9NZ-byQPrwAABkU"]
[Sat Aug 29 05:12:38.557395 2026] [security2:error] [pid 60333:tid 60494] [client 20.240.128.207:2423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/av.php"] [unique_id "apK-pjwSHPvvQcBSRbscPAAAAag"]
[Sat Aug 29 05:12:38.563541 2026] [security2:error] [pid 60333:tid 60485] [client 4.205.62.107:63384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/pinfo.php"] [unique_id "apK-pjwSHPvvQcBSRbscPQAAAZ8"]
[Sat Aug 29 05:12:38.564322 2026] [security2:error] [pid 60333:tid 60536] [client 20.48.251.3:38604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/87.php"] [unique_id "apK-pjwSHPvvQcBSRbscPgAAAdI"]
[Sat Aug 29 05:12:38.580764 2026] [security2:error] [pid 1321:tid 1525] [client 20.196.209.81:1407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/content.php"] [unique_id "apK-pmjCPtor9NZ-byQPsQAABmE"]
[Sat Aug 29 05:12:38.586280 2026] [security2:error] [pid 60333:tid 60570] [client 20.48.250.41:36117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/cc13.php"] [unique_id "apK-pjwSHPvvQcBSRbscQAAAAfQ"]
[Sat Aug 29 05:12:38.590585 2026] [security2:error] [pid 60333:tid 60492] [client 20.196.209.81:4998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/meta.php"] [unique_id "apK-pjwSHPvvQcBSRbscQQAAAaY"]
[Sat Aug 29 05:12:38.628911 2026] [security2:error] [pid 60333:tid 60538] [client 20.48.250.41:39860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/file.php"] [unique_id "apK-pjwSHPvvQcBSRbscQgAAAdQ"]
[Sat Aug 29 05:12:38.629442 2026] [security2:error] [pid 60333:tid 60561] [client 52.138.0.157:42357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bctcoffee.com"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "apK-pjwSHPvvQcBSRbscQwAAAes"]
[Sat Aug 29 05:12:38.634478 2026] [security2:error] [pid 1321:tid 1507] [client 20.104.18.15:27585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/key.php"] [unique_id "apK-pmjCPtor9NZ-byQPsgAABk8"]
[Sat Aug 29 05:12:38.658692 2026] [security2:error] [pid 60333:tid 60569] [client 52.139.37.240:54914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.squaretrap.com"] [uri "/add_actualites.php"] [unique_id "apK-pjwSHPvvQcBSRbscRAAAAfM"]
[Sat Aug 29 05:12:38.663224 2026] [security2:error] [pid 1321:tid 1377] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-content/cong.php"] [unique_id "apK-pmjCPtor9NZ-byQPswAGiRM"]
[Sat Aug 29 05:12:38.679377 2026] [security2:error] [pid 1321:tid 1601] [client 74.248.24.12:16837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/wp-good.php"] [unique_id "apK-pmjCPtor9NZ-byQPtAAABqw"]
[Sat Aug 29 05:12:38.692854 2026] [security2:error] [pid 1321:tid 1592] [client 20.48.251.3:38694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/kedi.php"] [unique_id "apK-pmjCPtor9NZ-byQPtQAABqM"]
[Sat Aug 29 05:12:38.698565 2026] [security2:error] [pid 1321:tid 1605] [client 158.158.54.35:15095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "apK-pmjCPtor9NZ-byQPtgAABrA"]
[Sat Aug 29 05:12:38.735876 2026] [security2:error] [pid 60333:tid 60596] [client 158.23.147.79:24402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK-pjwSHPvvQcBSRbscSAAAAg4"]
[Sat Aug 29 05:12:38.741539 2026] [security2:error] [pid 60333:tid 60484] [client 103.240.76.112:43068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK-pjwSHPvvQcBSRbscSgAAAZ4"]
[Sat Aug 29 05:12:38.741641 2026] [security2:error] [pid 60333:tid 60484] [client 103.240.76.112:43068] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK-pjwSHPvvQcBSRbscSgAAAZ4"]
[Sat Aug 29 05:12:38.752297 2026] [security2:error] [pid 60333:tid 60512] [client 20.48.250.41:36382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/aa.php"] [unique_id "apK-pjwSHPvvQcBSRbscSwAAAbo"]
[Sat Aug 29 05:12:38.768845 2026] [security2:error] [pid 60333:tid 60507] [client 20.104.18.15:17124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/chosen.php"] [unique_id "apK-pjwSHPvvQcBSRbscTgAAAbU"]
[Sat Aug 29 05:12:38.806845 2026] [security2:error] [pid 1321:tid 1517] [client 103.48.146.148:56516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 148.146.48.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK-pmjCPtor9NZ-byQPvgAABlk"]
[Sat Aug 29 05:12:38.806958 2026] [security2:error] [pid 1321:tid 1517] [client 103.48.146.148:56516] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK-pmjCPtor9NZ-byQPvgAABlk"]
[Sat Aug 29 05:12:38.817013 2026] [security2:error] [pid 1321:tid 1378] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-content/content.php"] [unique_id "apK-pmjCPtor9NZ-byQPvwAGUhQ"]
[Sat Aug 29 05:12:38.821908 2026] [security2:error] [pid 1321:tid 1612] [client 20.48.251.3:38009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/wp-content/maintenance.php"] [unique_id "apK-pmjCPtor9NZ-byQPwAAABrc"]
[Sat Aug 29 05:12:38.822894 2026] [security2:error] [pid 60333:tid 60541] [client 20.63.219.114:18477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/extractable-loader-head.php"] [unique_id "apK-pjwSHPvvQcBSRbscUAAAAdc"]
[Sat Aug 29 05:12:38.827245 2026] [security2:error] [pid 60333:tid 60547] [client 52.138.0.157:1216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bctcoffee.com"] [uri "/wp-admin/includes/about.php"] [unique_id "apK-pjwSHPvvQcBSRbscUQAAAd0"]
[Sat Aug 29 05:12:38.841770 2026] [security2:error] [pid 60333:tid 60586] [client 20.52.41.200:2198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-admin/css/about.php"] [unique_id "apK-pjwSHPvvQcBSRbscUgAAAgQ"]
[Sat Aug 29 05:12:38.844432 2026] [security2:error] [pid 60333:tid 60482] [client 20.220.204.93:59615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/maraz.php"] [unique_id "apK-pjwSHPvvQcBSRbscUwAAAZw"]
[Sat Aug 29 05:12:38.853667 2026] [security2:error] [pid 1321:tid 1502] [client 52.139.37.240:61684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.squaretrap.com"] [uri "/browse.php"] [unique_id "apK-pmjCPtor9NZ-byQPwQAABko"]
[Sat Aug 29 05:12:38.861486 2026] [security2:error] [pid 60333:tid 60489] [client 68.155.159.216:56710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "apK-pjwSHPvvQcBSRbscVAAAAaM"]
[Sat Aug 29 05:12:38.866473 2026] [security2:error] [pid 60333:tid 60470] [client 20.48.250.41:25481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/h2a2ck.php"] [unique_id "apK-pjwSHPvvQcBSRbscVQAAAZA"]
[Sat Aug 29 05:12:38.869811 2026] [security2:error] [pid 1321:tid 1522] [client 216.51.171.83:59654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 83.171.51.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-pmjCPtor9NZ-byQPwgAABl4"]
[Sat Aug 29 05:12:38.869938 2026] [security2:error] [pid 1321:tid 1522] [client 216.51.171.83:59654] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-pmjCPtor9NZ-byQPwgAABl4"]
[Sat Aug 29 05:12:38.873320 2026] [security2:error] [pid 1321:tid 1508] [client 4.205.62.107:27756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/txets.php"] [unique_id "apK-pmjCPtor9NZ-byQPwwAABlA"]
[Sat Aug 29 05:12:38.898107 2026] [security2:error] [pid 60333:tid 60488] [client 20.104.18.15:17051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/file1221.php"] [unique_id "apK-pjwSHPvvQcBSRbscVwAAAaI"]
[Sat Aug 29 05:12:38.903995 2026] [security2:error] [pid 60333:tid 60363] [remote 198.54.126.68:40768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.126.54.198.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "healthysmilestoday.com"] [uri "/wp-login.php"] [unique_id "apK-pjwSHPvvQcBSRbscWAABuBk"]
[Sat Aug 29 05:12:38.905596 2026] [security2:error] [pid 60333:tid 60364] [remote 198.54.126.68:40754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.126.54.198.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "healthysmilestoday.com"] [uri "/wp-login.php"] [unique_id "apK-pjwSHPvvQcBSRbscWQABpBo"]
[Sat Aug 29 05:12:38.932885 2026] [security2:error] [pid 60333:tid 60584] [client 20.63.219.114:13959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/wp-2019.php"] [unique_id "apK-pjwSHPvvQcBSRbscWwAAAgI"]
[Sat Aug 29 05:12:38.949574 2026] [security2:error] [pid 1321:tid 1608] [client 20.48.251.3:38687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/upload.form.php"] [unique_id "apK-pmjCPtor9NZ-byQPxwAABrM"]
[Sat Aug 29 05:12:38.972127 2026] [security2:error] [pid 1321:tid 1475] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-content/core.php"] [unique_id "apK-pmjCPtor9NZ-byQPyAAGVHQ"]
[Sat Aug 29 05:12:38.982770 2026] [security2:error] [pid 60333:tid 60486] [client 20.48.250.41:36806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/s1.php"] [unique_id "apK-pjwSHPvvQcBSRbscXAAAAaA"]
[Sat Aug 29 05:12:38.983965 2026] [security2:error] [pid 60333:tid 60534] [client 4.205.62.107:6109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/asa.php"] [unique_id "apK-pjwSHPvvQcBSRbscXQAAAdA"]
[Sat Aug 29 05:12:38.996759 2026] [security2:error] [pid 60333:tid 60552] [client 20.196.209.81:5018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/randkeyword.php"] [unique_id "apK-pjwSHPvvQcBSRbscXgAAAeI"]
[Sat Aug 29 05:12:39.008868 2026] [security2:error] [pid 60333:tid 60529] [client 20.196.209.81:20890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wxo.php"] [unique_id "apK-pzwSHPvvQcBSRbscYAAAAcs"]
[Sat Aug 29 05:12:39.012767 2026] [security2:error] [pid 60333:tid 60504] [client 20.48.250.41:25484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/error_log.php"] [unique_id "apK-pzwSHPvvQcBSRbscYQAAAbI"]
[Sat Aug 29 05:12:39.022785 2026] [security2:error] [pid 60333:tid 60506] [client 52.138.0.157:10526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bctcoffee.com"] [uri "/wp-admin/js/index.php"] [unique_id "apK-pzwSHPvvQcBSRbscYgAAAbQ"]
[Sat Aug 29 05:12:39.023864 2026] [security2:error] [pid 60333:tid 60472] [client 20.48.250.41:39927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK-pzwSHPvvQcBSRbscYwAAAZI"]
[Sat Aug 29 05:12:39.035374 2026] [security2:error] [pid 60333:tid 60515] [client 20.104.18.15:17061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/nox.php"] [unique_id "apK-pzwSHPvvQcBSRbscZAAAAb0"]
[Sat Aug 29 05:12:39.049731 2026] [security2:error] [pid 60333:tid 60499] [client 52.139.37.240:2585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.squaretrap.com"] [uri "/contentloader1.php"] [unique_id "apK-pzwSHPvvQcBSRbscZQAAAa0"]
[Sat Aug 29 05:12:39.054692 2026] [security2:error] [pid 1321:tid 1567] [client 20.240.128.207:2392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/file.php"] [unique_id "apK-p2jCPtor9NZ-byQPyQAABoo"]
[Sat Aug 29 05:12:39.064757 2026] [security2:error] [pid 60333:tid 60509] [client 4.205.62.107:64285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/gk.php"] [unique_id "apK-pzwSHPvvQcBSRbscZgAAAbc"]
[Sat Aug 29 05:12:39.076269 2026] [security2:error] [pid 1321:tid 1548] [client 20.48.251.3:38709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/v3.php"] [unique_id "apK-p2jCPtor9NZ-byQPywAABnc"]
[Sat Aug 29 05:12:39.093874 2026] [security2:error] [pid 1321:tid 1515] [client 20.220.204.93:18254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/kbfr.php"] [unique_id "apK-p2jCPtor9NZ-byQPzAAABlc"]
[Sat Aug 29 05:12:39.111575 2026] [security2:error] [pid 1321:tid 1387] [remote 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK-p2jCPtor9NZ-byQPzQAGhB0"]
[Sat Aug 29 05:12:39.111717 2026] [security2:error] [pid 1321:tid 1561] [client 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK-p2jCPtor9NZ-byQPzQAGhB0"]
[Sat Aug 29 05:12:39.125246 2026] [security2:error] [pid 1321:tid 1397] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-content/db-status.php"] [unique_id "apK-p2jCPtor9NZ-byQPzgAGhSc"]
[Sat Aug 29 05:12:39.134430 2026] [security2:error] [pid 60333:tid 60565] [client 68.155.159.216:48980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-pzwSHPvvQcBSRbscaQAAAe8"]
[Sat Aug 29 05:12:39.147718 2026] [autoindex:error] [pid 60333:tid 60595] [client 45.148.10.64:38942] AH01276: Cannot serve directory /home3/cbgtvpmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:12:39.157438 2026] [security2:error] [pid 1321:tid 1506] [client 20.197.61.180:3365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-admin/wp-load.php"] [unique_id "apK-p2jCPtor9NZ-byQPzwAABk4"]
[Sat Aug 29 05:12:39.157527 2026] [security2:error] [pid 60333:tid 60575] [client 158.158.54.35:15074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/xda.php"] [unique_id "apK-pzwSHPvvQcBSRbscawAAAfk"]
[Sat Aug 29 05:12:39.159228 2026] [security2:error] [pid 1321:tid 1590] [client 68.155.159.216:21379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/atomlib.php"] [unique_id "apK-p2jCPtor9NZ-byQP0AAABqE"]
[Sat Aug 29 05:12:39.169302 2026] [security2:error] [pid 60333:tid 60536] [client 20.48.250.41:36370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/0byte.php"] [unique_id "apK-pzwSHPvvQcBSRbscbAAAAdI"]
[Sat Aug 29 05:12:39.170715 2026] [security2:error] [pid 1321:tid 1560] [client 20.104.18.15:17140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/akismet.php"] [unique_id "apK-p2jCPtor9NZ-byQP0QAABoM"]
[Sat Aug 29 05:12:39.174063 2026] [security2:error] [pid 60333:tid 60522] [client 158.23.147.79:31624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carpevictoriam.com"] [uri "/goods.php"] [unique_id "apK-pzwSHPvvQcBSRbscbQAAAcQ"]
[Sat Aug 29 05:12:39.186016 2026] [security2:error] [pid 1321:tid 1497] [client 20.151.200.44:27189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/sef.php"] [unique_id "apK-p2jCPtor9NZ-byQP0gAABkU"]
[Sat Aug 29 05:12:39.189329 2026] [security2:error] [pid 60333:tid 60570] [client 20.48.250.41:25513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/403.php"] [unique_id "apK-pzwSHPvvQcBSRbscbgAAAfQ"]
[Sat Aug 29 05:12:39.192237 2026] [security2:error] [pid 60333:tid 60476] [client 20.197.61.180:3373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thatsaturdaythang.lifesosweet.com"] [uri "/wp-admin/security.php"] [unique_id "apK-pzwSHPvvQcBSRbscbwAAAZY"]
[Sat Aug 29 05:12:39.194125 2026] [security2:error] [pid 1321:tid 1514] [client 20.63.219.114:11585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/defaults.php"] [unique_id "apK-p2jCPtor9NZ-byQP0wAABlY"]
[Sat Aug 29 05:12:39.195106 2026] [security2:error] [pid 60333:tid 60492] [client 20.104.104.62:20711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/snd21.php"] [unique_id "apK-pzwSHPvvQcBSRbsccAAAAaY"]
[Sat Aug 29 05:12:39.202010 2026] [security2:error] [pid 60333:tid 60549] [client 20.48.251.3:38714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/sale.php"] [unique_id "apK-pzwSHPvvQcBSRbsccQAAAd8"]
[Sat Aug 29 05:12:39.213952 2026] [security2:error] [pid 60333:tid 60539] [client 74.248.24.12:31902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "apK-pzwSHPvvQcBSRbsccwAAAdU"]
[Sat Aug 29 05:12:39.247080 2026] [security2:error] [pid 1321:tid 1598] [client 52.139.37.240:2380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.squaretrap.com"] [uri "/upfile.php"] [unique_id "apK-p2jCPtor9NZ-byQP1QAABqk"]
[Sat Aug 29 05:12:39.263606 2026] [security2:error] [pid 60333:tid 60532] [client 20.48.250.41:39914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/06.php"] [unique_id "apK-pzwSHPvvQcBSRbsceAAAAc4"]
[Sat Aug 29 05:12:39.282792 2026] [security2:error] [pid 1321:tid 1385] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-content/disagrsxr.php"] [unique_id "apK-p2jCPtor9NZ-byQP1wAGTxs"]
[Sat Aug 29 05:12:39.287370 2026] [security2:error] [pid 60333:tid 60542] [client 20.52.41.200:2810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/system_log.php"] [unique_id "apK-pzwSHPvvQcBSRbsceQAAAdg"]
[Sat Aug 29 05:12:39.292365 2026] [security2:error] [pid 60333:tid 60477] [client 52.138.0.157:22732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bctcoffee.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK-pzwSHPvvQcBSRbscegAAAZc"]
[Sat Aug 29 05:12:39.300116 2026] [security2:error] [pid 1321:tid 1592] [client 20.48.250.41:36838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/xr.php"] [unique_id "apK-p2jCPtor9NZ-byQP2AAABqM"]
[Sat Aug 29 05:12:39.312716 2026] [security2:error] [pid 1321:tid 1565] [client 20.104.18.15:17027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/ajax.php"] [unique_id "apK-p2jCPtor9NZ-byQP2gAABog"]
[Sat Aug 29 05:12:39.323305 2026] [security2:error] [pid 60333:tid 60484] [client 20.48.250.41:25564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/cytyr.php"] [unique_id "apK-pzwSHPvvQcBSRbscfAAAAZ4"]
[Sat Aug 29 05:12:39.326560 2026] [security2:error] [pid 1321:tid 1504] [client 158.23.147.79:14152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/packed.php"] [unique_id "apK-p2jCPtor9NZ-byQP2wAABkw"]
[Sat Aug 29 05:12:39.328706 2026] [security2:error] [pid 1321:tid 1555] [client 20.48.251.3:38585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/wp-content/themes/luJMF.php"] [unique_id "apK-p2jCPtor9NZ-byQP3AAABn4"]
[Sat Aug 29 05:12:39.334042 2026] [security2:error] [pid 1321:tid 1576] [client 68.155.159.216:38308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-mail.php"] [unique_id "apK-p2jCPtor9NZ-byQP3QAABpM"]
[Sat Aug 29 05:12:39.342789 2026] [security2:error] [pid 60333:tid 60512] [client 68.155.159.216:44015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/wp-admin/classwithtostring.php"] [unique_id "apK-pzwSHPvvQcBSRbscfQAAAbo"]
[Sat Aug 29 05:12:39.365967 2026] [security2:error] [pid 60333:tid 60561] [client 20.63.219.114:18833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/menu.php"] [unique_id "apK-pzwSHPvvQcBSRbscfgAAAes"]
[Sat Aug 29 05:12:39.367726 2026] [security2:error] [pid 60333:tid 60527] [client 145.239.10.137:35677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.10.239.145.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "greenglobalmall.com"] [uri "/mah.php"] [unique_id "apK-pzwSHPvvQcBSRbscfwAAAck"], referer: http://greenglobalmall.com/mah.php?p=
[Sat Aug 29 05:12:39.380866 2026] [security2:error] [pid 1321:tid 1509] [client 4.205.62.107:61758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/zz.php"] [unique_id "apK-p2jCPtor9NZ-byQP3gAABlE"]
[Sat Aug 29 05:12:39.415050 2026] [security2:error] [pid 60333:tid 60540] [client 20.196.209.81:20878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/as.php"] [unique_id "apK-pzwSHPvvQcBSRbscgAAAAdY"]
[Sat Aug 29 05:12:39.419065 2026] [security2:error] [pid 1321:tid 1566] [client 20.196.209.81:17897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/goods.php"] [unique_id "apK-p2jCPtor9NZ-byQP3wAABok"]
[Sat Aug 29 05:12:39.421151 2026] [security2:error] [pid 60333:tid 60568] [client 158.23.147.79:43671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK-pzwSHPvvQcBSRbscgQAAAfI"]
[Sat Aug 29 05:12:39.425095 2026] [security2:error] [pid 1321:tid 1522] [client 68.155.159.216:35815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK-p2jCPtor9NZ-byQP4QAABl4"]
[Sat Aug 29 05:12:39.428725 2026] [security2:error] [pid 1321:tid 1508] [client 158.23.147.79:50153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK-p2jCPtor9NZ-byQP4gAABlA"]
[Sat Aug 29 05:12:39.434490 2026] [security2:error] [pid 1321:tid 1381] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-content/f35.php"] [unique_id "apK-p2jCPtor9NZ-byQP4wAGZRc"]
[Sat Aug 29 05:12:39.441402 2026] [security2:error] [pid 1321:tid 1609] [client 4.205.62.107:32529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/test.config.php"] [unique_id "apK-p2jCPtor9NZ-byQP5AAABrQ"]
[Sat Aug 29 05:12:39.441962 2026] [security2:error] [pid 60333:tid 60556] [client 52.139.37.240:2615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.squaretrap.com"] [uri "/form.php"] [unique_id "apK-pzwSHPvvQcBSRbscggAAAeY"]
[Sat Aug 29 05:12:39.455955 2026] [security2:error] [pid 1321:tid 1608] [client 20.48.251.3:38556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/packed.php"] [unique_id "apK-p2jCPtor9NZ-byQP5QAABrM"]
[Sat Aug 29 05:12:39.458197 2026] [security2:error] [pid 1321:tid 1542] [client 20.48.250.41:39811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/class.php"] [unique_id "apK-p2jCPtor9NZ-byQP5gAABnI"]
[Sat Aug 29 05:12:39.468481 2026] [security2:error] [pid 60333:tid 60497] [client 20.48.250.41:36103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/h02ugyh.php"] [unique_id "apK-pzwSHPvvQcBSRbscgwAAAas"]
[Sat Aug 29 05:12:39.475586 2026] [security2:error] [pid 60333:tid 60471] [client 20.104.18.15:17148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/atomlib.php"] [unique_id "apK-pzwSHPvvQcBSRbschAAAAZE"]
[Sat Aug 29 05:12:39.477949 2026] [security2:error] [pid 1321:tid 1532] [client 20.104.49.130:48601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/ortasekerli1.php"] [unique_id "apK-p2jCPtor9NZ-byQP6AAABmg"]
[Sat Aug 29 05:12:39.478033 2026] [security2:error] [pid 1321:tid 1557] [client 20.48.250.41:25535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/galer.php"] [unique_id "apK-p2jCPtor9NZ-byQP5wAABoA"]
[Sat Aug 29 05:12:39.488778 2026] [security2:error] [pid 60333:tid 60474] [client 52.138.0.157:1288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bctcoffee.com"] [uri "/wp-admin/network/admin.php"] [unique_id "apK-pzwSHPvvQcBSRbschQAAAZQ"]
[Sat Aug 29 05:12:39.509866 2026] [security2:error] [pid 1321:tid 1492] [client 52.139.37.240:8024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ilikeart.com"] [uri "/aged.php"] [unique_id "apK-p2jCPtor9NZ-byQP6QAABkA"]
[Sat Aug 29 05:12:39.544158 2026] [security2:error] [pid 1321:tid 1594] [client 20.220.204.93:58989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/wp-act.php"] [unique_id "apK-p2jCPtor9NZ-byQP6gAABqU"]
[Sat Aug 29 05:12:39.553417 2026] [security2:error] [pid 60333:tid 60473] [client 20.240.128.207:2374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK-pzwSHPvvQcBSRbschgAAAZM"]
[Sat Aug 29 05:12:39.561452 2026] [security2:error] [pid 1321:tid 1519] [client 4.205.62.107:62978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/xmy.php"] [unique_id "apK-p2jCPtor9NZ-byQP6wAABls"]
[Sat Aug 29 05:12:39.573536 2026] [security2:error] [pid 1321:tid 1527] [client 20.63.219.114:18879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/post.php"] [unique_id "apK-p2jCPtor9NZ-byQP7AAABmM"]
[Sat Aug 29 05:12:39.581078 2026] [security2:error] [pid 60333:tid 60488] [client 158.23.147.79:64397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/login.php"] [unique_id "apK-pzwSHPvvQcBSRbschwAAAaI"]
[Sat Aug 29 05:12:39.582180 2026] [security2:error] [pid 60333:tid 60510] [client 20.48.251.3:37979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/phpi.php"] [unique_id "apK-pzwSHPvvQcBSRbsciAAAAbg"]
[Sat Aug 29 05:12:39.586387 2026] [security2:error] [pid 1321:tid 1409] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-content/index.php"] [unique_id "apK-p2jCPtor9NZ-byQP7QAGXzM"]
[Sat Aug 29 05:12:39.592921 2026] [security2:error] [pid 60333:tid 60582] [client 4.205.62.107:6796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/classsmtps.php"] [unique_id "apK-pzwSHPvvQcBSRbsciQAAAgA"]
[Sat Aug 29 05:12:39.604735 2026] [security2:error] [pid 60333:tid 60490] [client 158.158.54.35:12073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "apK-pzwSHPvvQcBSRbscigAAAaQ"]
[Sat Aug 29 05:12:39.623513 2026] [security2:error] [pid 60333:tid 60579] [client 158.158.54.35:20677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/theme.php"] [unique_id "apK-pzwSHPvvQcBSRbsciwAAAf0"]
[Sat Aug 29 05:12:39.624617 2026] [security2:error] [pid 1321:tid 1543] [client 20.48.250.41:39877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/8.php"] [unique_id "apK-p2jCPtor9NZ-byQP7gAABnM"]
[Sat Aug 29 05:12:39.627711 2026] [security2:error] [pid 60333:tid 60496] [client 20.104.18.15:17111] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.christianintimacyexperts.com"] [uri "/1.php"] [unique_id "apK-pzwSHPvvQcBSRbscjAAAAao"]
[Sat Aug 29 05:12:39.627771 2026] [security2:error] [pid 60333:tid 60496] [client 20.104.18.15:17111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/1.php"] [unique_id "apK-pzwSHPvvQcBSRbscjAAAAao"]
[Sat Aug 29 05:12:39.633072 2026] [security2:error] [pid 1321:tid 1515] [client 20.48.250.41:25493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/baixy.php"] [unique_id "apK-p2jCPtor9NZ-byQP7wAABlc"]
[Sat Aug 29 05:12:39.635689 2026] [security2:error] [pid 60333:tid 60589] [client 52.139.37.240:61678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.squaretrap.com"] [uri "/wp-sigunq.php"] [unique_id "apK-pzwSHPvvQcBSRbscjQAAAgc"]
[Sat Aug 29 05:12:39.636765 2026] [security2:error] [pid 60333:tid 60580] [client 20.104.49.130:36764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pvillusions.com"] [uri "/well.php"] [unique_id "apK-pzwSHPvvQcBSRbscjgAAAf4"]
[Sat Aug 29 05:12:39.676667 2026] [security2:error] [pid 60333:tid 60518] [client 68.155.159.216:64091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/images/index.php"] [unique_id "apK-pzwSHPvvQcBSRbsckAAAAcA"]
[Sat Aug 29 05:12:39.677283 2026] [autoindex:error] [pid 1321:tid 1466] [remote 45.148.10.64:38958] AH01276: Cannot serve directory /home3/cbgtvpmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:12:39.682612 2026] [security2:error] [pid 60333:tid 60554] [client 52.138.0.157:42090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bctcoffee.com"] [uri "/wp-conflg/function.php"] [unique_id "apK-pzwSHPvvQcBSRbsckgAAAeQ"]
[Sat Aug 29 05:12:39.694083 2026] [security2:error] [pid 1321:tid 1563] [client 4.205.62.107:63366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/X57.php"] [unique_id "apK-p2jCPtor9NZ-byQP8wAABoY"]
[Sat Aug 29 05:12:39.694277 2026] [security2:error] [pid 1321:tid 1562] [client 20.48.250.41:36116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/xxw.php"] [unique_id "apK-p2jCPtor9NZ-byQP9AAABoU"]
[Sat Aug 29 05:12:39.699709 2026] [security2:error] [pid 60333:tid 60581] [client 57.141.14.79:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/cart/"] [unique_id "apK-pzwSHPvvQcBSRbsckwAAAf8"]
[Sat Aug 29 05:12:39.707880 2026] [security2:error] [pid 60333:tid 60584] [client 52.139.37.240:8021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ilikeart.com"] [uri "/essexec.php"] [unique_id "apK-pzwSHPvvQcBSRbsclAAAAgI"]
[Sat Aug 29 05:12:39.710252 2026] [security2:error] [pid 60333:tid 60531] [client 20.48.251.3:37972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/config_dev.php"] [unique_id "apK-pzwSHPvvQcBSRbsclQAAAc0"]
[Sat Aug 29 05:12:39.736282 2026] [security2:error] [pid 60333:tid 60523] [client 74.248.24.12:40216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/abcd.php"] [unique_id "apK-pzwSHPvvQcBSRbscmAAAAcU"]
[Sat Aug 29 05:12:39.739459 2026] [security2:error] [pid 1321:tid 1358] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-content/install.php"] [unique_id "apK-p2jCPtor9NZ-byQP9gAGVgI"]
[Sat Aug 29 05:12:39.739642 2026] [security2:error] [pid 60333:tid 60577] [client 20.52.41.200:2178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/24.php"] [unique_id "apK-pzwSHPvvQcBSRbscmQAAAfs"]
[Sat Aug 29 05:12:39.782675 2026] [security2:error] [pid 1321:tid 1615] [client 20.196.209.81:2010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/post.php"] [unique_id "apK-p2jCPtor9NZ-byQP9wAABro"]
[Sat Aug 29 05:12:39.785105 2026] [security2:error] [pid 60333:tid 60590] [client 20.104.18.15:27616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/samll.php"] [unique_id "apK-pzwSHPvvQcBSRbscmwAAAgg"]
[Sat Aug 29 05:12:39.797594 2026] [security2:error] [pid 60333:tid 60480] [client 20.48.250.41:39927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/0x0x.php"] [unique_id "apK-pzwSHPvvQcBSRbscnAAAAZo"]
[Sat Aug 29 05:12:39.818607 2026] [security2:error] [pid 60333:tid 60564] [client 20.48.250.41:25519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/ava.php"] [unique_id "apK-pzwSHPvvQcBSRbscnQAAAe4"]
[Sat Aug 29 05:12:39.830840 2026] [security2:error] [pid 1321:tid 1610] [client 20.48.250.41:36781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/bolt.php"] [unique_id "apK-p2jCPtor9NZ-byQP-QAABrU"]
[Sat Aug 29 05:12:39.832839 2026] [security2:error] [pid 60333:tid 60558] [client 52.139.37.240:61669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.squaretrap.com"] [uri "/07.php"] [unique_id "apK-pzwSHPvvQcBSRbscoQAAAeg"]
[Sat Aug 29 05:12:39.838143 2026] [security2:error] [pid 1321:tid 1490] [client 158.23.147.79:24397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-includes/plugins.php"] [unique_id "apK-p2jCPtor9NZ-byQP-gAABj4"]
[Sat Aug 29 05:12:39.838681 2026] [security2:error] [pid 60333:tid 60535] [client 20.48.251.3:38586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/oc460l3x.php"] [unique_id "apK-pzwSHPvvQcBSRbscogAAAdE"]
[Sat Aug 29 05:12:39.841696 2026] [security2:error] [pid 60333:tid 60515] [client 20.63.219.114:12636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/alfa.php"] [unique_id "apK-pzwSHPvvQcBSRbscowAAAb0"]
[Sat Aug 29 05:12:39.855798 2026] [security2:error] [pid 60333:tid 60498] [client 20.196.209.81:20919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/room.php"] [unique_id "apK-pzwSHPvvQcBSRbscpAAAAaw"]
[Sat Aug 29 05:12:39.856168 2026] [security2:error] [pid 60333:tid 60552] [client 20.196.209.81:17871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/hehe.php"] [unique_id "apK-pzwSHPvvQcBSRbscpQAAAeI"]
[Sat Aug 29 05:12:39.877310 2026] [security2:error] [pid 60333:tid 60546] [client 52.138.0.157:42066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bctcoffee.com"] [uri "/wp-content/classwithtostring.php"] [unique_id "apK-pzwSHPvvQcBSRbscpgAAAdw"]
[Sat Aug 29 05:12:39.890016 2026] [security2:error] [pid 60333:tid 60478] [client 20.197.61.180:3816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-admin/wp-mail.php"] [unique_id "apK-pzwSHPvvQcBSRbscqAAAAZg"]
[Sat Aug 29 05:12:39.900543 2026] [security2:error] [pid 60333:tid 60553] [client 52.139.37.240:7413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ilikeart.com"] [uri "/fw.php"] [unique_id "apK-pzwSHPvvQcBSRbscqQAAAeM"]
[Sat Aug 29 05:12:39.917899 2026] [security2:error] [pid 60333:tid 60517] [client 20.197.61.180:3835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thatsaturdaythang.lifesosweet.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK-pzwSHPvvQcBSRbscqgAAAb8"]
[Sat Aug 29 05:12:39.924060 2026] [security2:error] [pid 60333:tid 60538] [client 20.104.18.15:17136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/she11.php"] [unique_id "apK-pzwSHPvvQcBSRbscqwAAAdQ"]
[Sat Aug 29 05:12:39.931166 2026] [security2:error] [pid 60333:tid 60469] [client 213.202.253.4:57604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/wp-content/postnews.php"] [unique_id "apK-pzwSHPvvQcBSRbscrAAAAY8"], referer: www.google.com
[Sat Aug 29 05:12:39.941532 2026] [access_compat:error] [pid 60333:tid 60544] [client 67.20.76.220:27680] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:12:39.942740 2026] [security2:error] [pid 60333:tid 60521] [client 127.0.0.1:36308] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "127.0.0.1"] [uri "/cgi-sys/autoconfig.cgi"] [unique_id "apK-pzwSHPvvQcBSRbscoAAAAcM"]
[Sat Aug 29 05:12:39.942784 2026] [security2:error] [pid 60333:tid 60573] [client 127.0.0.1:36292] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "autoconfig.bxv.lgj.mybluehost.me"] [uri "/cgi-sys/autoconfig.cgi"] [unique_id "apK-pzwSHPvvQcBSRbscnwAAAfc"]
[Sat Aug 29 05:12:39.943124 2026] [security2:error] [pid 60333:tid 60559] [client 20.151.200.44:55729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/waw.php"] [unique_id "apK-pzwSHPvvQcBSRbscrgAAAek"]
[Sat Aug 29 05:12:39.943156 2026] [security2:error] [pid 60333:tid 60495] [client 74.7.241.144:60414] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "autoconfig.bxv.lgj.mybluehost.me"] [uri "/robots.txt"] [unique_id "apK-pzwSHPvvQcBSRbscngABqRw"]
[Sat Aug 29 05:12:39.949516 2026] [access_compat:error] [pid 60333:tid 60569] [client 67.20.76.220:27664] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:12:39.965616 2026] [security2:error] [pid 60333:tid 60572] [client 20.48.251.3:38692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/wp-content/plugin-install.php"] [unique_id "apK-pzwSHPvvQcBSRbscsQAAAfY"]
[Sat Aug 29 05:12:39.981414 2026] [security2:error] [pid 1321:tid 1608] [client 20.220.204.93:58950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/24.php"] [unique_id "apK-p2jCPtor9NZ-byQQBQAABrM"]
[Sat Aug 29 05:12:39.984491 2026] [security2:error] [pid 60333:tid 60555] [client 20.48.250.41:36376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/rtx.php"] [unique_id "apK-pzwSHPvvQcBSRbscsgAAAeU"]
[Sat Aug 29 05:12:39.985820 2026] [security2:error] [pid 60333:tid 60484] [client 68.155.159.216:21440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/themes.php"] [unique_id "apK-pzwSHPvvQcBSRbscswAAAZ4"]
[Sat Aug 29 05:12:39.985877 2026] [security2:error] [pid 60333:tid 60578] [client 20.48.250.41:25591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/gdn.php"] [unique_id "apK-pzwSHPvvQcBSRbsctAAAAfw"]
[Sat Aug 29 05:12:39.996639 2026] [security2:error] [pid 60333:tid 60494] [client 20.63.219.114:18875] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/csv.php"] [unique_id "apK-pzwSHPvvQcBSRbsctgAAAag"]
[Sat Aug 29 05:12:39.999805 2026] [security2:error] [pid 60333:tid 60562] [client 20.48.250.41:39907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/166.php"] [unique_id "apK-pzwSHPvvQcBSRbsctwAAAew"]
[Sat Aug 29 05:12:40.016702 2026] [security2:error] [pid 60333:tid 60540] [client 4.205.62.107:32512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/time.php"] [unique_id "apK-qDwSHPvvQcBSRbscuAAAAdY"]
[Sat Aug 29 05:12:40.021473 2026] [fcgid:warn] [pid 1321:tid 1595] (70014)End of file found: [client 66.132.172.182:8276] mod_fcgid: can't get data from http client
[Sat Aug 29 05:12:40.028835 2026] [security2:error] [pid 1321:tid 1508] [client 52.139.37.240:2905] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "autodiscover.squaretrap.com"] [uri "/c99.php"] [unique_id "apK-qGjCPtor9NZ-byQQBwAABlA"]
[Sat Aug 29 05:12:40.041903 2026] [security2:error] [pid 1321:tid 1565] [client 20.240.128.207:24867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/gmo.php"] [unique_id "apK-qGjCPtor9NZ-byQQCQAABog"]
[Sat Aug 29 05:12:40.069161 2026] [security2:error] [pid 1321:tid 1547] [client 20.104.18.15:17069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/kerang.php"] [unique_id "apK-qGjCPtor9NZ-byQQCwAABnY"]
[Sat Aug 29 05:12:40.073569 2026] [security2:error] [pid 1321:tid 1564] [client 158.158.54.35:33913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/classwithtostring.php"] [unique_id "apK-qGjCPtor9NZ-byQQDAAABoc"]
[Sat Aug 29 05:12:40.073851 2026] [security2:error] [pid 60333:tid 60541] [client 20.104.104.62:40232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/olu.php"] [unique_id "apK-qDwSHPvvQcBSRbscuwAAAdc"]
[Sat Aug 29 05:12:40.094974 2026] [security2:error] [pid 60333:tid 60586] [client 20.48.251.3:38598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/paypal.php"] [unique_id "apK-qDwSHPvvQcBSRbscvgAAAgQ"]
[Sat Aug 29 05:12:40.096272 2026] [security2:error] [pid 60333:tid 60475] [client 52.139.37.240:7376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ilikeart.com"] [uri "/zwso.php"] [unique_id "apK-qDwSHPvvQcBSRbscvwAAAZU"]
[Sat Aug 29 05:12:40.107649 2026] [security2:error] [pid 60333:tid 60505] [client 158.158.54.35:14577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "apK-qDwSHPvvQcBSRbscwAAAAbM"]
[Sat Aug 29 05:12:40.108499 2026] [security2:error] [pid 60333:tid 60482] [client 20.104.49.130:43022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bfcorrigan.com"] [uri "/av.php"] [unique_id "apK-qDwSHPvvQcBSRbscwQAAAZw"]
[Sat Aug 29 05:12:40.115340 2026] [security2:error] [pid 60333:tid 60470] [client 20.48.250.41:25511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/f2.php"] [unique_id "apK-qDwSHPvvQcBSRbscwgAAAZA"]
[Sat Aug 29 05:12:40.120916 2026] [security2:error] [pid 60333:tid 60473] [client 4.205.62.107:6130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/radio.php"] [unique_id "apK-qDwSHPvvQcBSRbscwwAAAZM"]
[Sat Aug 29 05:12:40.134672 2026] [security2:error] [pid 60333:tid 60582] [client 173.252.95.51:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/ingredient/piment-vert/"] [unique_id "apK-qDwSHPvvQcBSRbscxQAAAgA"]
[Sat Aug 29 05:12:40.142445 2026] [security2:error] [pid 60333:tid 60579] [client 52.138.0.157:22783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bctcoffee.com"] [uri "/wp-content/themes/fitnessbase/404.php"] [unique_id "apK-qDwSHPvvQcBSRbscxgAAAf0"]
[Sat Aug 29 05:12:40.148312 2026] [security2:error] [pid 60333:tid 60496] [client 20.48.250.41:36100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/ckk.php"] [unique_id "apK-qDwSHPvvQcBSRbscxwAAAao"]
[Sat Aug 29 05:12:40.175773 2026] [security2:error] [pid 60333:tid 60481] [client 20.48.250.41:39870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/h2a2ck.php"] [unique_id "apK-qDwSHPvvQcBSRbscyAAAAZs"]
[Sat Aug 29 05:12:40.190795 2026] [security2:error] [pid 1321:tid 1359] [remote 45.148.10.64:38958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 64.10.148.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cbg.tvp.mybluehost.me"] [uri "/wp-login.php"] [unique_id "apK-qGjCPtor9NZ-byQQDwAGqAM"]
[Sat Aug 29 05:12:40.206566 2026] [security2:error] [pid 60333:tid 60531] [client 4.205.62.107:64259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/god.php"] [unique_id "apK-qDwSHPvvQcBSRbscywAAAc0"]
[Sat Aug 29 05:12:40.207830 2026] [security2:error] [pid 60333:tid 60506] [client 20.104.18.15:17087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/m.php"] [unique_id "apK-qDwSHPvvQcBSRbsczAAAAbQ"]
[Sat Aug 29 05:12:40.211163 2026] [security2:error] [pid 1321:tid 1512] [client 20.196.209.81:1372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/flower.php"] [unique_id "apK-qGjCPtor9NZ-byQQEwAABlQ"]
[Sat Aug 29 05:12:40.222486 2026] [security2:error] [pid 60333:tid 60577] [client 20.48.251.3:38619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/chosen.php"] [unique_id "apK-qDwSHPvvQcBSRbsczgAAAfs"]
[Sat Aug 29 05:12:40.226247 2026] [security2:error] [pid 60333:tid 60518] [client 52.139.37.240:61665] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "autodiscover.squaretrap.com"] [uri "/c99.php"] [unique_id "apK-qDwSHPvvQcBSRbsczwAAAcA"]
[Sat Aug 29 05:12:40.262697 2026] [security2:error] [pid 60333:tid 60590] [client 68.155.159.216:56793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/lv.php"] [unique_id "apK-qDwSHPvvQcBSRbsc0QAAAgg"]
[Sat Aug 29 05:12:40.265146 2026] [security2:error] [pid 60333:tid 60513] [client 74.248.24.12:38670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/wp-access.php"] [unique_id "apK-qDwSHPvvQcBSRbsc0gAAAbs"]
[Sat Aug 29 05:12:40.276386 2026] [security2:error] [pid 60333:tid 60524] [client 20.196.209.81:1344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/class-wp-cmd.php"] [unique_id "apK-qDwSHPvvQcBSRbsc0wAAAcY"]
[Sat Aug 29 05:12:40.277948 2026] [security2:error] [pid 60333:tid 60515] [client 20.48.250.41:25567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/grsiuk.php"] [unique_id "apK-qDwSHPvvQcBSRbsc1AAAAb0"]
[Sat Aug 29 05:12:40.282042 2026] [security2:error] [pid 60333:tid 60574] [client 158.23.147.79:31681] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carpevictoriam.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "apK-qDwSHPvvQcBSRbsc1QAAAfg"]
[Sat Aug 29 05:12:40.283984 2026] [security2:error] [pid 1321:tid 1543] [client 20.48.250.41:36814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lukejensen-org.mossmanphoto.com"] [uri "/R57.php"] [unique_id "apK-qGjCPtor9NZ-byQQFwAABnM"]
[Sat Aug 29 05:12:40.287920 2026] [security2:error] [pid 60333:tid 60479] [client 20.196.209.81:15133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/wp-admin/class-db.php"] [unique_id "apK-qDwSHPvvQcBSRbsc1gAAAZk"]
[Sat Aug 29 05:12:40.304235 2026] [security2:error] [pid 60333:tid 60514] [client 52.139.37.240:7370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ilikeart.com"] [uri "/admin/function.php"] [unique_id "apK-qDwSHPvvQcBSRbsc2AAAAbw"]
[Sat Aug 29 05:12:40.330061 2026] [security2:error] [pid 60333:tid 60530] [client 20.63.219.114:9255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/feed-rss2-queue.php"] [unique_id "apK-qDwSHPvvQcBSRbsc2wAAAcw"]
[Sat Aug 29 05:12:40.336193 2026] [security2:error] [pid 60333:tid 60585] [client 20.52.41.200:2221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK-qDwSHPvvQcBSRbsc3AAAAgM"]
[Sat Aug 29 05:12:40.337444 2026] [security2:error] [pid 60333:tid 60492] [client 20.104.18.15:17065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/fling.php"] [unique_id "apK-qDwSHPvvQcBSRbsc3QAAAaY"]
[Sat Aug 29 05:12:40.339046 2026] [security2:error] [pid 60333:tid 60535] [client 52.138.0.157:42054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bctcoffee.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK-qDwSHPvvQcBSRbsc3gAAAdE"]
[Sat Aug 29 05:12:40.350707 2026] [security2:error] [pid 60333:tid 60549] [client 20.48.251.3:37974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/rum.or.php"] [unique_id "apK-qDwSHPvvQcBSRbsc3wAAAd8"]
[Sat Aug 29 05:12:40.363639 2026] [security2:error] [pid 60333:tid 60519] [client 20.63.219.114:1896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/fox.php"] [unique_id "apK-qDwSHPvvQcBSRbsc4AAAAcE"]
[Sat Aug 29 05:12:40.419732 2026] [security2:error] [pid 60333:tid 60594] [client 52.139.37.240:2897] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "autodiscover.squaretrap.com"] [uri "/c99.php"] [unique_id "apK-qDwSHPvvQcBSRbsc5gAAAgw"]
[Sat Aug 29 05:12:40.430871 2026] [security2:error] [pid 1321:tid 1613] [client 158.23.147.79:14172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-content/packed.php"] [unique_id "apK-qGjCPtor9NZ-byQQIgAABrg"]
[Sat Aug 29 05:12:40.442531 2026] [security2:error] [pid 60333:tid 60484] [client 68.155.159.216:38709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/cgi-bin/index.php"] [unique_id "apK-qDwSHPvvQcBSRbsc6AAAAZ4"]
[Sat Aug 29 05:12:40.457770 2026] [security2:error] [pid 60333:tid 60544] [client 20.48.250.41:39770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/error_log.php"] [unique_id "apK-qDwSHPvvQcBSRbsc6QAAAdo"]
[Sat Aug 29 05:12:40.459810 2026] [security2:error] [pid 60333:tid 60520] [client 20.220.204.93:58965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/155.php"] [unique_id "apK-qDwSHPvvQcBSRbsc6gAAAcI"]
[Sat Aug 29 05:12:40.464694 2026] [security2:error] [pid 1321:tid 1506] [client 20.48.250.41:25514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/wp-scr1pts.php"] [unique_id "apK-qGjCPtor9NZ-byQQIwAABk4"]
[Sat Aug 29 05:12:40.479402 2026] [security2:error] [pid 1321:tid 1560] [client 20.48.251.3:38639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/loxi-o.php"] [unique_id "apK-qGjCPtor9NZ-byQQJAAABoM"]
[Sat Aug 29 05:12:40.483097 2026] [security2:error] [pid 1321:tid 1509] [client 103.171.189.88:58160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-qGjCPtor9NZ-byQQJQAABlE"]
[Sat Aug 29 05:12:40.483195 2026] [security2:error] [pid 1321:tid 1509] [client 103.171.189.88:58160] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-qGjCPtor9NZ-byQQJQAABlE"]
[Sat Aug 29 05:12:40.489138 2026] [security2:error] [pid 1321:tid 1514] [client 20.104.18.15:17032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/btyuio.php"] [unique_id "apK-qGjCPtor9NZ-byQQJgAABlY"]
[Sat Aug 29 05:12:40.498578 2026] [security2:error] [pid 1321:tid 1586] [client 52.139.37.240:7386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ilikeart.com"] [uri "/zoom1.php"] [unique_id "apK-qGjCPtor9NZ-byQQJwAABp0"]
[Sat Aug 29 05:12:40.517039 2026] [security2:error] [pid 60333:tid 60517] [client 158.158.54.35:33684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/news.php"] [unique_id "apK-qDwSHPvvQcBSRbsc6wAAAb8"]
[Sat Aug 29 05:12:40.519861 2026] [security2:error] [pid 60333:tid 60517] [client 4.205.62.107:61643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/test.php"] [unique_id "apK-qDwSHPvvQcBSRbsc7AAAAb8"]
[Sat Aug 29 05:12:40.533769 2026] [security2:error] [pid 60333:tid 60561] [client 52.138.0.157:42081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bctcoffee.com"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "apK-qDwSHPvvQcBSRbsc7QAAAes"]
[Sat Aug 29 05:12:40.533789 2026] [security2:error] [pid 60333:tid 60568] [client 68.155.159.216:35787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-includes/index.php"] [unique_id "apK-qDwSHPvvQcBSRbsc7gAAAfI"]
[Sat Aug 29 05:12:40.541336 2026] [security2:error] [pid 60333:tid 60573] [client 20.240.128.207:24850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/classwithtostring.php"] [unique_id "apK-qDwSHPvvQcBSRbsc7wAAAfc"]
[Sat Aug 29 05:12:40.542527 2026] [security2:error] [pid 60333:tid 60477] [client 158.158.54.35:14810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/gifclass.php"] [unique_id "apK-qDwSHPvvQcBSRbsc8AAAAZc"]
[Sat Aug 29 05:12:40.554186 2026] [security2:error] [pid 1321:tid 1598] [client 158.23.147.79:43266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-includes/content.php"] [unique_id "apK-qGjCPtor9NZ-byQQKAAABqk"]
[Sat Aug 29 05:12:40.578695 2026] [security2:error] [pid 60333:tid 60497] [client 4.205.62.107:32526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/gecko-litespeed.php"] [unique_id "apK-qDwSHPvvQcBSRbsc8QAAAas"]
[Sat Aug 29 05:12:40.598452 2026] [security2:error] [pid 60333:tid 60541] [client 158.23.147.79:50100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/classwithtostring.php"] [unique_id "apK-qDwSHPvvQcBSRbsc8gAAAdc"]
[Sat Aug 29 05:12:40.609492 2026] [security2:error] [pid 1321:tid 1490] [client 20.48.251.3:38630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/luJMF.php"] [unique_id "apK-qGjCPtor9NZ-byQQKQAABj4"]
[Sat Aug 29 05:12:40.610026 2026] [security2:error] [pid 60333:tid 60501] [client 20.48.250.41:25446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/num.php"] [unique_id "apK-qDwSHPvvQcBSRbsc8wAAAa8"]
[Sat Aug 29 05:12:40.619122 2026] [security2:error] [pid 1321:tid 1605] [client 20.104.104.62:64736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/tuco.php"] [unique_id "apK-qGjCPtor9NZ-byQQKgAABrA"]
[Sat Aug 29 05:12:40.619542 2026] [security2:error] [pid 60333:tid 60542] [client 20.197.61.180:3345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-admin/wp-settings.php"] [unique_id "apK-qDwSHPvvQcBSRbsc9AAAAdg"]
[Sat Aug 29 05:12:40.631594 2026] [security2:error] [pid 60333:tid 60505] [client 20.104.18.15:27603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/dehnl.php"] [unique_id "apK-qDwSHPvvQcBSRbsc9QAAAbM"]
[Sat Aug 29 05:12:40.637847 2026] [security2:error] [pid 60333:tid 60576] [client 20.48.250.41:39764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/403.php"] [unique_id "apK-qDwSHPvvQcBSRbsc9gAAAfo"]
[Sat Aug 29 05:12:40.639440 2026] [security2:error] [pid 1321:tid 1604] [client 20.197.61.180:3817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thatsaturdaythang.lifesosweet.com"] [uri "/wp-admin/system.php"] [unique_id "apK-qGjCPtor9NZ-byQQKwAABq8"]
[Sat Aug 29 05:12:40.683862 2026] [security2:error] [pid 1321:tid 1612] [client 158.23.147.79:64504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/hehehehe.php"] [unique_id "apK-qGjCPtor9NZ-byQQLQAABrc"]
[Sat Aug 29 05:12:40.690017 2026] [security2:error] [pid 60333:tid 60527] [client 52.139.37.240:63343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ilikeart.com"] [uri "/about.php7"] [unique_id "apK-qDwSHPvvQcBSRbsc-AAAAck"]
[Sat Aug 29 05:12:40.690657 2026] [security2:error] [pid 60333:tid 60526] [client 20.196.209.81:1984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/meta.php"] [unique_id "apK-qDwSHPvvQcBSRbsc-QAAAcg"]
[Sat Aug 29 05:12:40.693246 2026] [security2:error] [pid 1321:tid 1606] [client 20.196.209.81:17911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/wp-contentt.php"] [unique_id "apK-qGjCPtor9NZ-byQQLwAABrE"]
[Sat Aug 29 05:12:40.700704 2026] [security2:error] [pid 1321:tid 1529] [client 4.205.62.107:61049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/ms-edit.php"] [unique_id "apK-qGjCPtor9NZ-byQQMAAABmU"]
[Sat Aug 29 05:12:40.730270 2026] [security2:error] [pid 1321:tid 1577] [client 52.138.0.157:1264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bctcoffee.com"] [uri "/wp-content/uploads/de_fb_uploads/b.php"] [unique_id "apK-qGjCPtor9NZ-byQQMwAABpQ"]
[Sat Aug 29 05:12:40.730690 2026] [security2:error] [pid 1321:tid 1582] [client 4.205.62.107:6327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/cache-compat.php"] [unique_id "apK-qGjCPtor9NZ-byQQNAAABpk"]
[Sat Aug 29 05:12:40.736523 2026] [security2:error] [pid 60333:tid 60493] [client 20.196.209.81:1365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/disagreed.php"] [unique_id "apK-qDwSHPvvQcBSRbsc-wAAAac"]
[Sat Aug 29 05:12:40.746022 2026] [security2:error] [pid 60333:tid 60496] [client 20.48.251.3:38588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/drykl.php"] [unique_id "apK-qDwSHPvvQcBSRbsc_AAAAao"]
[Sat Aug 29 05:12:40.750906 2026] [security2:error] [pid 60333:tid 60586] [client 20.63.219.114:18849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/disagraeosc.php"] [unique_id "apK-qDwSHPvvQcBSRbsc_QAAAgQ"]
[Sat Aug 29 05:12:40.757260 2026] [security2:error] [pid 1321:tid 1510] [client 68.155.159.216:55105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.angelesforestranch.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK-qGjCPtor9NZ-byQQNgAABlI"]
[Sat Aug 29 05:12:40.767789 2026] [security2:error] [pid 60333:tid 60580] [client 20.104.18.15:17141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/zoo2.php"] [unique_id "apK-qDwSHPvvQcBSRbsc_gAAAf4"]
[Sat Aug 29 05:12:40.786859 2026] [security2:error] [pid 1321:tid 1501] [client 68.155.159.216:7121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK-qGjCPtor9NZ-byQQNwAABkk"]
[Sat Aug 29 05:12:40.793794 2026] [security2:error] [pid 60333:tid 60560] [client 20.48.250.41:39838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/cytyr.php"] [unique_id "apK-qDwSHPvvQcBSRbsdAAAAAeo"]
[Sat Aug 29 05:12:40.799806 2026] [security2:error] [pid 60333:tid 60475] [client 74.248.24.12:36074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/wp-content/uploads/min.php"] [unique_id "apK-qDwSHPvvQcBSRbsdAQAAAZU"]
[Sat Aug 29 05:12:40.807247 2026] [security2:error] [pid 60333:tid 60563] [client 20.48.250.41:25479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/a4.php"] [unique_id "apK-qDwSHPvvQcBSRbsdAgAAAe0"]
[Sat Aug 29 05:12:40.815132 2026] [security2:error] [pid 1321:tid 1517] [client 20.63.219.114:9250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/inputs.php"] [unique_id "apK-qGjCPtor9NZ-byQQOQAABlk"]
[Sat Aug 29 05:12:40.828643 2026] [security2:error] [pid 60333:tid 60533] [client 4.205.62.107:63299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/register.php"] [unique_id "apK-qDwSHPvvQcBSRbsdAwAAAc8"]
[Sat Aug 29 05:12:40.830310 2026] [security2:error] [pid 1321:tid 1395] [remote 34.138.144.127:57610] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "cpcalendars.scubaetcfl.com"] [uri "/static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ"] [unique_id "apK-qGjCPtor9NZ-byQQPQAGkCU"]
[Sat Aug 29 05:12:40.876588 2026] [security2:error] [pid 1321:tid 1508] [client 20.48.251.3:37989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/aws.php"] [unique_id "apK-qGjCPtor9NZ-byQQPgAABlA"]
[Sat Aug 29 05:12:40.908291 2026] [security2:error] [pid 1321:tid 1492] [client 52.139.37.240:63300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ilikeart.com"] [uri "/cron.php"] [unique_id "apK-qGjCPtor9NZ-byQQPwAABkA"]
[Sat Aug 29 05:12:40.913538 2026] [security2:error] [pid 60333:tid 60504] [client 20.104.18.15:17082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/zoo1.php"] [unique_id "apK-qDwSHPvvQcBSRbsdBAAAAbI"]
[Sat Aug 29 05:12:40.913783 2026] [access_compat:error] [pid 1321:tid 1596] [client 67.20.76.220:27682] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:12:40.930744 2026] [security2:error] [pid 60333:tid 60584] [client 52.138.0.157:10544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bctcoffee.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK-qDwSHPvvQcBSRbsdBgAAAgI"]
[Sat Aug 29 05:12:40.951184 2026] [security2:error] [pid 60333:tid 60509] [client 20.48.250.41:39767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/galer.php"] [unique_id "apK-qDwSHPvvQcBSRbsdCAAAAbc"]
[Sat Aug 29 05:12:40.955542 2026] [security2:error] [pid 60333:tid 60480] [client 68.155.159.216:43904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apK-qDwSHPvvQcBSRbsdCQAAAZo"]
[Sat Aug 29 05:12:40.955767 2026] [security2:error] [pid 1321:tid 1567] [client 20.48.250.41:25499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/tfm.php"] [unique_id "apK-qGjCPtor9NZ-byQQQgAABoo"]
[Sat Aug 29 05:12:40.986068 2026] [security2:error] [pid 60333:tid 60498] [client 20.104.49.130:53748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/155.php"] [unique_id "apK-qDwSHPvvQcBSRbsdDAAAAaw"]
[Sat Aug 29 05:12:40.990650 2026] [security2:error] [pid 60333:tid 60486] [client 158.158.54.35:1411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/about/function.php"] [unique_id "apK-qDwSHPvvQcBSRbsdDQAAAaA"]
[Sat Aug 29 05:12:41.003207 2026] [security2:error] [pid 60333:tid 60536] [client 20.48.251.3:38547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/05.php"] [unique_id "apK-qTwSHPvvQcBSRbsdDwAAAdI"]
[Sat Aug 29 05:12:41.009465 2026] [security2:error] [pid 1321:tid 1407] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-content/languages/about.php"] [unique_id "apK-qWjCPtor9NZ-byQQQwAGWDE"]
[Sat Aug 29 05:12:41.039767 2026] [security2:error] [pid 60333:tid 60529] [client 20.240.128.207:24703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/404.php"] [unique_id "apK-qTwSHPvvQcBSRbsdEwAAAcs"]
[Sat Aug 29 05:12:41.055436 2026] [security2:error] [pid 60333:tid 60549] [client 20.104.18.15:27588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/radio.php"] [unique_id "apK-qTwSHPvvQcBSRbsdFQAAAd8"]
[Sat Aug 29 05:12:41.057764 2026] [security2:error] [pid 1321:tid 1613] [client 20.104.104.62:40247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/ice.php"] [unique_id "apK-qWjCPtor9NZ-byQQRgAABrg"]
[Sat Aug 29 05:12:41.082886 2026] [security2:error] [pid 60333:tid 60469] [client 20.104.49.130:36392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/gecko-new.php"] [unique_id "apK-qTwSHPvvQcBSRbsdFgAAAY8"]
[Sat Aug 29 05:12:41.090624 2026] [security2:error] [pid 60333:tid 60495] [client 20.52.41.200:2695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK-qTwSHPvvQcBSRbsdFwAAAak"]
[Sat Aug 29 05:12:41.091354 2026] [security2:error] [pid 60333:tid 60564] [client 20.196.209.81:14745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/randkeyword.php"] [unique_id "apK-qTwSHPvvQcBSRbsdGAAAAe4"]
[Sat Aug 29 05:12:41.095869 2026] [security2:error] [pid 60333:tid 60521] [client 20.151.200.44:55634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/x23.php"] [unique_id "apK-qTwSHPvvQcBSRbsdGQAAAcM"]
[Sat Aug 29 05:12:41.100874 2026] [security2:error] [pid 60333:tid 60558] [client 20.196.209.81:10027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/theme.php"] [unique_id "apK-qTwSHPvvQcBSRbsdGgAAAeg"]
[Sat Aug 29 05:12:41.103819 2026] [security2:error] [pid 60333:tid 60551] [client 20.220.204.93:9503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/file.php"] [unique_id "apK-qTwSHPvvQcBSRbsdGwAAAeE"]
[Sat Aug 29 05:12:41.106443 2026] [security2:error] [pid 60333:tid 60479] [client 20.63.219.114:13997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/about.php525"] [unique_id "apK-qTwSHPvvQcBSRbsdHAAAAZk"]
[Sat Aug 29 05:12:41.116465 2026] [security2:error] [pid 1321:tid 1560] [client 20.48.250.41:25418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/Geforce.php"] [unique_id "apK-qWjCPtor9NZ-byQQSAAABoM"]
[Sat Aug 29 05:12:41.120329 2026] [security2:error] [pid 1321:tid 1414] [remote 162.55.89.48:33802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 48.89.55.162.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "compropolis.mx"] [uri "/wp-login.php"] [unique_id "apK-qWjCPtor9NZ-byQQSQAGRzg"]
[Sat Aug 29 05:12:41.121105 2026] [security2:error] [pid 60333:tid 60492] [client 52.139.37.240:7389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ilikeart.com"] [uri "/wp-2019.php"] [unique_id "apK-qTwSHPvvQcBSRbsdHQAAAaY"]
[Sat Aug 29 05:12:41.124724 2026] [security2:error] [pid 1321:tid 1563] [client 52.138.0.157:42354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bctcoffee.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK-qWjCPtor9NZ-byQQSgAABoY"]
[Sat Aug 29 05:12:41.137041 2026] [security2:error] [pid 60333:tid 60572] [client 20.48.250.41:39926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/baixy.php"] [unique_id "apK-qTwSHPvvQcBSRbsdHgAAAfY"]
[Sat Aug 29 05:12:41.140788 2026] [security2:error] [pid 1321:tid 1509] [client 20.48.251.3:38718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/xmy.php"] [unique_id "apK-qWjCPtor9NZ-byQQSwAABlE"]
[Sat Aug 29 05:12:41.143754 2026] [security2:error] [pid 60333:tid 60478] [client 20.196.209.81:20880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/class_api.php"] [unique_id "apK-qTwSHPvvQcBSRbsdHwAAAZg"]
[Sat Aug 29 05:12:41.148668 2026] [security2:error] [pid 60333:tid 60569] [client 4.205.62.107:32543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/doc.php"] [unique_id "apK-qTwSHPvvQcBSRbsdIAAAAfM"]
[Sat Aug 29 05:12:41.160556 2026] [security2:error] [pid 60333:tid 60520] [client 158.158.54.35:25805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK-qTwSHPvvQcBSRbsdIQAAAcI"]
[Sat Aug 29 05:12:41.161451 2026] [security2:error] [pid 1321:tid 1410] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-content/languages/chosen.php"] [unique_id "apK-qWjCPtor9NZ-byQQTAAGhTQ"]
[Sat Aug 29 05:12:41.176257 2026] [security2:error] [pid 1321:tid 1581] [client 20.63.219.114:18690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/class-walker-category-dropdown-class.php"] [unique_id "apK-qWjCPtor9NZ-byQQTQAABpg"]
[Sat Aug 29 05:12:41.186375 2026] [security2:error] [pid 1321:tid 1580] [client 20.104.18.15:17072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/one.php"] [unique_id "apK-qWjCPtor9NZ-byQQTgAABpc"]
[Sat Aug 29 05:12:41.246706 2026] [security2:error] [pid 1321:tid 1490] [client 68.155.159.216:49127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/content.php"] [unique_id "apK-qWjCPtor9NZ-byQQVAAABj4"]
[Sat Aug 29 05:12:41.247395 2026] [security2:error] [pid 60333:tid 60592] [client 20.104.49.130:53523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.timportlock.net"] [uri "/btyuio.php"] [unique_id "apK-qTwSHPvvQcBSRbsdJAAAAgo"]
[Sat Aug 29 05:12:41.253077 2026] [security2:error] [pid 1321:tid 1561] [client 43.172.197.135:53550] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.197.172.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewforum.php"] [unique_id "apK-qWjCPtor9NZ-byQQUwAABoQ"]
[Sat Aug 29 05:12:41.261119 2026] [security2:error] [pid 60333:tid 60497] [client 4.205.62.107:5703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/xa.php"] [unique_id "apK-qTwSHPvvQcBSRbsdJQAAAas"]
[Sat Aug 29 05:12:41.262174 2026] [security2:error] [pid 60333:tid 60483] [client 20.48.250.41:25537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/click.php"] [unique_id "apK-qTwSHPvvQcBSRbsdJgAAAZ0"]
[Sat Aug 29 05:12:41.273265 2026] [security2:error] [pid 1321:tid 1576] [client 20.48.251.3:38579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/wp-blog.php"] [unique_id "apK-qWjCPtor9NZ-byQQVQAABpM"]
[Sat Aug 29 05:12:41.293318 2026] [security2:error] [pid 1321:tid 1529] [client 158.23.184.117:1714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/update/da222.php"] [unique_id "apK-qWjCPtor9NZ-byQQVgAABmU"]
[Sat Aug 29 05:12:41.293789 2026] [security2:error] [pid 1321:tid 1498] [client 20.48.250.41:39879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/ava.php"] [unique_id "apK-qWjCPtor9NZ-byQQVwAABkY"]
[Sat Aug 29 05:12:41.313468 2026] [security2:error] [pid 1321:tid 1401] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-content/languages/index.php"] [unique_id "apK-qWjCPtor9NZ-byQQWQAGlCs"]
[Sat Aug 29 05:12:41.318210 2026] [security2:error] [pid 60333:tid 60588] [client 52.138.0.157:20431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bctcoffee.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "apK-qTwSHPvvQcBSRbsdKQAAAgY"]
[Sat Aug 29 05:12:41.318682 2026] [security2:error] [pid 60333:tid 60573] [client 52.139.37.240:8031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ilikeart.com"] [uri "/gecko-new.php"] [unique_id "apK-qTwSHPvvQcBSRbsdKgAAAfc"]
[Sat Aug 29 05:12:41.318888 2026] [security2:error] [pid 1321:tid 1514] [client 74.248.24.12:38675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK-qWjCPtor9NZ-byQQWgAABlY"]
[Sat Aug 29 05:12:41.321164 2026] [security2:error] [pid 1321:tid 1506] [client 43.173.181.69:34214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.181.173.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewtopic.php"] [unique_id "apK-qWjCPtor9NZ-byQQWAAABk4"]
[Sat Aug 29 05:12:41.332093 2026] [security2:error] [pid 60333:tid 60489] [client 20.104.18.15:17075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/503.php"] [unique_id "apK-qTwSHPvvQcBSRbsdKwAAAaM"]
[Sat Aug 29 05:12:41.343545 2026] [security2:error] [pid 1321:tid 1607] [client 20.197.61.180:3377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-admin/wp-signup.php"] [unique_id "apK-qWjCPtor9NZ-byQQWwAABrI"]
[Sat Aug 29 05:12:41.345787 2026] [security2:error] [pid 1321:tid 1590] [client 20.197.61.180:3778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thatsaturdaythang.lifesosweet.com"] [uri "/wp-admin/test.php"] [unique_id "apK-qWjCPtor9NZ-byQQXAAABqE"]
[Sat Aug 29 05:12:41.353352 2026] [security2:error] [pid 60333:tid 60510] [client 4.205.62.107:61884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/fff.php"] [unique_id "apK-qTwSHPvvQcBSRbsdLQAAAbg"]
[Sat Aug 29 05:12:41.364395 2026] [security2:error] [pid 1321:tid 1525] [client 62.60.130.128:49458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.130.60.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abprinter.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "apK-qWjCPtor9NZ-byQQXQAABmE"]
[Sat Aug 29 05:12:41.368840 2026] [security2:error] [pid 1321:tid 1501] [client 68.155.159.216:21499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-qWjCPtor9NZ-byQQXgAABkk"]
[Sat Aug 29 05:12:41.369952 2026] [security2:error] [pid 60333:tid 60559] [client 180.190.5.40:50576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.5.190.180.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK-qTwSHPvvQcBSRbsdLgAAAek"]
[Sat Aug 29 05:12:41.370067 2026] [security2:error] [pid 60333:tid 60559] [client 180.190.5.40:50576] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK-qTwSHPvvQcBSRbsdLgAAAek"]
[Sat Aug 29 05:12:41.400134 2026] [security2:error] [pid 60333:tid 60589] [client 68.155.159.216:43937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.theenprogroup.com"] [uri "/file88.php"] [unique_id "apK-qTwSHPvvQcBSRbsdLwAAAgc"]
[Sat Aug 29 05:12:41.402390 2026] [security2:error] [pid 1321:tid 1517] [client 20.48.251.3:38582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/update.php"] [unique_id "apK-qWjCPtor9NZ-byQQYAAABlk"]
[Sat Aug 29 05:12:41.403281 2026] [security2:error] [pid 1321:tid 1547] [client 158.23.147.79:31714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carpevictoriam.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "apK-qWjCPtor9NZ-byQQYQAABnY"]
[Sat Aug 29 05:12:41.437522 2026] [security2:error] [pid 60333:tid 60560] [client 20.48.250.41:25540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/ms.php"] [unique_id "apK-qTwSHPvvQcBSRbsdMAAAAeo"]
[Sat Aug 29 05:12:41.438520 2026] [security2:error] [pid 60333:tid 60532] [client 158.23.184.117:1683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/xmr.php"] [unique_id "apK-qTwSHPvvQcBSRbsdMgAAAc4"]
[Sat Aug 29 05:12:41.442957 2026] [security2:error] [pid 60333:tid 60475] [client 20.48.250.41:39864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/gdn.php"] [unique_id "apK-qTwSHPvvQcBSRbsdMwAAAZU"]
[Sat Aug 29 05:12:41.465745 2026] [security2:error] [pid 1321:tid 1392] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-content/languages/min.php"] [unique_id "apK-qWjCPtor9NZ-byQQYwAGQCI"]
[Sat Aug 29 05:12:41.465992 2026] [security2:error] [pid 60333:tid 60508] [client 20.63.219.114:18822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/spip.php"] [unique_id "apK-qTwSHPvvQcBSRbsdNwAAAbY"]
[Sat Aug 29 05:12:41.501426 2026] [security2:error] [pid 1321:tid 1557] [client 20.196.209.81:1387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/goods.php"] [unique_id "apK-qWjCPtor9NZ-byQQZAAABoA"]
[Sat Aug 29 05:12:41.515345 2026] [security2:error] [pid 60333:tid 60481] [client 52.139.37.240:63341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ilikeart.com"] [uri "/add_actualites.php"] [unique_id "apK-qTwSHPvvQcBSRbsdPQAAAZs"]
[Sat Aug 29 05:12:41.517905 2026] [security2:error] [pid 1321:tid 1510] [client 107.145.13.164:55650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 164.13.145.107.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK-qWjCPtor9NZ-byQQZgAABlI"]
[Sat Aug 29 05:12:41.518080 2026] [security2:error] [pid 1321:tid 1510] [client 107.145.13.164:55650] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK-qWjCPtor9NZ-byQQZgAABlI"]
[Sat Aug 29 05:12:41.522352 2026] [security2:error] [pid 60333:tid 60490] [client 20.196.209.81:10010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/alumni_reg.php"] [unique_id "apK-qTwSHPvvQcBSRbsdPgAAAaQ"]
[Sat Aug 29 05:12:41.527307 2026] [security2:error] [pid 60333:tid 60504] [client 20.104.18.15:17129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/504.php"] [unique_id "apK-qTwSHPvvQcBSRbsdPwAAAbI"]
[Sat Aug 29 05:12:41.532139 2026] [security2:error] [pid 1321:tid 1512] [client 20.48.251.3:37993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/fns.php"] [unique_id "apK-qWjCPtor9NZ-byQQZwAABlQ"]
[Sat Aug 29 05:12:41.541498 2026] [security2:error] [pid 60333:tid 60582] [client 20.52.41.200:2142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/num.php"] [unique_id "apK-qTwSHPvvQcBSRbsdQAAAAgA"]
[Sat Aug 29 05:12:41.547096 2026] [security2:error] [pid 1321:tid 1595] [client 20.240.128.207:24883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/php.php"] [unique_id "apK-qWjCPtor9NZ-byQQaQAABqY"]
[Sat Aug 29 05:12:41.561199 2026] [security2:error] [pid 60333:tid 60547] [client 20.196.209.81:20891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/aksinet.php"] [unique_id "apK-qTwSHPvvQcBSRbsdQQAAAd0"]
[Sat Aug 29 05:12:41.581560 2026] [security2:error] [pid 1321:tid 1527] [client 158.23.184.117:1673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK-qWjCPtor9NZ-byQQagAABmM"]
[Sat Aug 29 05:12:41.583720 2026] [security2:error] [pid 60333:tid 60513] [client 52.138.0.157:42080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bctcoffee.com"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "apK-qTwSHPvvQcBSRbsdQgAAAbs"]
[Sat Aug 29 05:12:41.590794 2026] [security2:error] [pid 60333:tid 60480] [client 20.48.250.41:39884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/f2.php"] [unique_id "apK-qTwSHPvvQcBSRbsdQwAAAZo"]
[Sat Aug 29 05:12:41.606790 2026] [security2:error] [pid 60333:tid 60581] [client 158.158.54.35:24471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/css/index.php"] [unique_id "apK-qTwSHPvvQcBSRbsdRAAAAf8"]
[Sat Aug 29 05:12:41.616881 2026] [security2:error] [pid 60333:tid 60515] [client 20.48.250.41:25559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/zxekqlxb.php"] [unique_id "apK-qTwSHPvvQcBSRbsdRQAAAb0"]
[Sat Aug 29 05:12:41.618337 2026] [security2:error] [pid 1321:tid 1400] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-content/languages/pk.php"] [unique_id "apK-qWjCPtor9NZ-byQQawAGUSo"]
[Sat Aug 29 05:12:41.630551 2026] [security2:error] [pid 1321:tid 1586] [client 68.155.159.216:62846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/mah.php"] [unique_id "apK-qWjCPtor9NZ-byQQbAAABp0"]
[Sat Aug 29 05:12:41.655829 2026] [security2:error] [pid 1321:tid 1615] [client 20.220.204.93:9473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apK-qWjCPtor9NZ-byQQbQAABro"]
[Sat Aug 29 05:12:41.657797 2026] [security2:error] [pid 60333:tid 60522] [client 4.205.62.107:63951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/cloud.php"] [unique_id "apK-qTwSHPvvQcBSRbsdRgAAAcQ"]
[Sat Aug 29 05:12:41.660274 2026] [security2:error] [pid 60333:tid 60536] [client 20.48.251.3:38002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/25.php"] [unique_id "apK-qTwSHPvvQcBSRbsdRwAAAdI"]
[Sat Aug 29 05:12:41.664724 2026] [security2:error] [pid 60333:tid 60587] [client 20.104.18.15:17055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/admin.php"] [unique_id "apK-qTwSHPvvQcBSRbsdSAAAAgU"]
[Sat Aug 29 05:12:41.679050 2026] [security2:error] [pid 60333:tid 60574] [client 158.23.147.79:39927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-admin/css/index.php"] [unique_id "apK-qTwSHPvvQcBSRbsdSQAAAfg"]
[Sat Aug 29 05:12:41.691751 2026] [security2:error] [pid 60333:tid 60554] [client 20.104.104.62:20684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/codeboy1877x.php"] [unique_id "apK-qTwSHPvvQcBSRbsdSgAAAeQ"]
[Sat Aug 29 05:12:41.695011 2026] [security2:error] [pid 1321:tid 1543] [client 20.63.219.114:9274] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.juntoohki.com"] [uri "/1.php7"] [unique_id "apK-qWjCPtor9NZ-byQQcAAABnM"]
[Sat Aug 29 05:12:41.695085 2026] [security2:error] [pid 1321:tid 1543] [client 20.63.219.114:9274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/1.php7"] [unique_id "apK-qWjCPtor9NZ-byQQcAAABnM"]
[Sat Aug 29 05:12:41.711961 2026] [security2:error] [pid 60333:tid 60539] [client 4.205.62.107:28054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/goods.php"] [unique_id "apK-qTwSHPvvQcBSRbsdSwAAAdU"]
[Sat Aug 29 05:12:41.715247 2026] [security2:error] [pid 60333:tid 60552] [client 52.139.37.240:60900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ilikeart.com"] [uri "/browse.php"] [unique_id "apK-qTwSHPvvQcBSRbsdTAAAAeI"]
[Sat Aug 29 05:12:41.715811 2026] [security2:error] [pid 1321:tid 1555] [client 158.23.147.79:49845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/install.php"] [unique_id "apK-qWjCPtor9NZ-byQQcQAABn4"]
[Sat Aug 29 05:12:41.720563 2026] [security2:error] [pid 60333:tid 60469] [client 158.158.54.35:2037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wp-includes/admin.php"] [unique_id "apK-qTwSHPvvQcBSRbsdTgAAAY8"]
[Sat Aug 29 05:12:41.723062 2026] [security2:error] [pid 60333:tid 60495] [client 20.48.250.41:39799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/grsiuk.php"] [unique_id "apK-qTwSHPvvQcBSRbsdTwAAAak"]
[Sat Aug 29 05:12:41.725867 2026] [security2:error] [pid 60333:tid 60595] [client 158.23.184.117:1707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/wp-act.php"] [unique_id "apK-qTwSHPvvQcBSRbsdUAAAAg0"]
[Sat Aug 29 05:12:41.761001 2026] [security2:error] [pid 60333:tid 60572] [client 20.48.250.41:25473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/init.php"] [unique_id "apK-qTwSHPvvQcBSRbsdVQAAAfY"]
[Sat Aug 29 05:12:41.772180 2026] [security2:error] [pid 1321:tid 1398] [remote 20.196.209.81:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sungrove.org"] [uri "/wp-content/languages/plugins/about.php"] [unique_id "apK-qWjCPtor9NZ-byQQdQAGVig"]
[Sat Aug 29 05:12:41.778741 2026] [security2:error] [pid 1321:tid 1561] [client 52.138.0.157:10530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bctcoffee.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-qWjCPtor9NZ-byQQdgAABoQ"]
[Sat Aug 29 05:12:41.789234 2026] [security2:error] [pid 60333:tid 60562] [client 158.23.147.79:64392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK-qTwSHPvvQcBSRbsdVwAAAew"]
[Sat Aug 29 05:12:41.790002 2026] [security2:error] [pid 60333:tid 60540] [client 20.48.251.3:38533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/public/vx.php"] [unique_id "apK-qTwSHPvvQcBSRbsdWAAAAdY"]
[Sat Aug 29 05:12:41.796484 2026] [security2:error] [pid 60333:tid 60568] [client 20.104.18.15:17107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/ws85.php"] [unique_id "apK-qTwSHPvvQcBSRbsdWQAAAfI"]
[Sat Aug 29 05:12:41.824139 2026] [security2:error] [pid 60333:tid 60503] [client 20.63.219.114:1894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/backup.php"] [unique_id "apK-qTwSHPvvQcBSRbsdXQAAAbE"]
[Sat Aug 29 05:12:41.831279 2026] [security2:error] [pid 60333:tid 60542] [client 4.205.62.107:60952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/sys.php"] [unique_id "apK-qTwSHPvvQcBSRbsdXwAAAdg"]
[Sat Aug 29 05:12:41.838141 2026] [security2:error] [pid 60333:tid 60514] [client 74.248.24.12:16878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/bthil.php"] [unique_id "apK-qTwSHPvvQcBSRbsdYgAAAbw"]
[Sat Aug 29 05:12:41.857400 2026] [security2:error] [pid 1321:tid 1532] [client 20.48.250.41:39842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/wp-scr1pts.php"] [unique_id "apK-qWjCPtor9NZ-byQQeAAABmg"]
[Sat Aug 29 05:12:41.868457 2026] [security2:error] [pid 1321:tid 1501] [client 68.155.159.216:55166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.angelesforestranch.com"] [uri "/makeasmtp.php"] [unique_id "apK-qWjCPtor9NZ-byQQegAABkk"]
[Sat Aug 29 05:12:41.871909 2026] [security2:error] [pid 60333:tid 60497] [client 158.23.184.117:1664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/fff.php"] [unique_id "apK-qTwSHPvvQcBSRbsdYwAAAas"]
[Sat Aug 29 05:12:41.874336 2026] [security2:error] [pid 60333:tid 60527] [client 4.205.62.107:6826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/aws_keys.php"] [unique_id "apK-qTwSHPvvQcBSRbsdZAAAAck"]
[Sat Aug 29 05:12:41.901017 2026] [security2:error] [pid 1321:tid 1582] [client 20.196.209.81:1609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/hehe.php"] [unique_id "apK-qWjCPtor9NZ-byQQewAABpk"]
[Sat Aug 29 05:12:41.924200 2026] [security2:error] [pid 60333:tid 60474] [client 20.48.251.3:38650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/333.php"] [unique_id "apK-qTwSHPvvQcBSRbsdaQAAAZQ"]
[Sat Aug 29 05:12:41.927992 2026] [security2:error] [pid 60333:tid 60591] [client 20.48.250.41:25435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/term.php"] [unique_id "apK-qTwSHPvvQcBSRbsdagAAAgk"]
[Sat Aug 29 05:12:41.930784 2026] [security2:error] [pid 60333:tid 60517] [client 20.196.209.81:10046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/colors.php"] [unique_id "apK-qTwSHPvvQcBSRbsdawAAAb8"]
[Sat Aug 29 05:12:41.932136 2026] [security2:error] [pid 60333:tid 60580] [client 20.104.18.15:17144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/ffs.php"] [unique_id "apK-qTwSHPvvQcBSRbsdbAAAAf4"]
[Sat Aug 29 05:12:41.940085 2026] [security2:error] [pid 60333:tid 60593] [client 52.139.37.240:63338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ilikeart.com"] [uri "/contentloader1.php"] [unique_id "apK-qTwSHPvvQcBSRbsdbQAAAgs"]
[Sat Aug 29 05:12:41.953275 2026] [security2:error] [pid 60333:tid 60508] [client 68.155.159.216:64094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK-qTwSHPvvQcBSRbsdbgAAAbY"]
[Sat Aug 29 05:12:41.964904 2026] [security2:error] [pid 1321:tid 1508] [client 4.205.62.107:61496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/xqq.php"] [unique_id "apK-qWjCPtor9NZ-byQQfQAABlA"]
[Sat Aug 29 05:12:41.978488 2026] [security2:error] [pid 60333:tid 60488] [client 20.196.209.81:2024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/alfa-rex1.php"] [unique_id "apK-qTwSHPvvQcBSRbsdcQAAAaI"]
[Sat Aug 29 05:12:41.992753 2026] [security2:error] [pid 60333:tid 60523] [client 158.23.184.117:37152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/wk/admin.php"] [unique_id "apK-qTwSHPvvQcBSRbsdcgAAAcU"]
[Sat Aug 29 05:12:42.019388 2026] [security2:error] [pid 60333:tid 60556] [client 158.23.184.117:1703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/.tmb/dropdown.php"] [unique_id "apK-qjwSHPvvQcBSRbsddAAAAeY"]
[Sat Aug 29 05:12:42.040478 2026] [security2:error] [pid 60333:tid 60561] [client 158.23.184.117:63452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/admin.php"] [unique_id "apK-qjwSHPvvQcBSRbsddQAAAes"]
[Sat Aug 29 05:12:42.044476 2026] [security2:error] [pid 60333:tid 60499] [client 52.138.0.157:20458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bctcoffee.com"] [uri "/wp-includes/blocks/buttons/index.php"] [unique_id "apK-qjwSHPvvQcBSRbsddgAAAa0"]
[Sat Aug 29 05:12:42.047375 2026] [security2:error] [pid 60333:tid 60590] [client 20.48.250.41:39890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/num.php"] [unique_id "apK-qjwSHPvvQcBSRbsddwAAAgg"]
[Sat Aug 29 05:12:42.054124 2026] [security2:error] [pid 1321:tid 1596] [client 20.48.251.3:38000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/a1vx.php"] [unique_id "apK-qmjCPtor9NZ-byQQgwAABqc"]
[Sat Aug 29 05:12:42.054842 2026] [security2:error] [pid 1321:tid 1550] [client 52.139.37.240:1916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.sf-andrei.com"] [uri "/aged.php"] [unique_id "apK-qmjCPtor9NZ-byQQhAAABnk"]
[Sat Aug 29 05:12:42.062998 2026] [security2:error] [pid 1321:tid 1510] [client 68.155.159.216:43951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/wp-includes/Requests/network.php"] [unique_id "apK-qmjCPtor9NZ-byQQhQAABlI"]
[Sat Aug 29 05:12:42.066083 2026] [security2:error] [pid 1321:tid 1547] [client 158.158.54.35:18222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-cron.php"] [unique_id "apK-qmjCPtor9NZ-byQQhgAABnY"]
[Sat Aug 29 05:12:42.069692 2026] [security2:error] [pid 60333:tid 60581] [client 20.104.18.15:17131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/nano.php"] [unique_id "apK-qjwSHPvvQcBSRbsdegAAAf8"]
[Sat Aug 29 05:12:42.075829 2026] [security2:error] [pid 60333:tid 60588] [client 20.197.61.180:8771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-blog-header.php"] [unique_id "apK-qjwSHPvvQcBSRbsdfAAAAgY"]
[Sat Aug 29 05:12:42.078461 2026] [security2:error] [pid 1321:tid 1497] [client 20.240.128.207:4320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/init.php"] [unique_id "apK-qmjCPtor9NZ-byQQhwAABkU"]
[Sat Aug 29 05:12:42.092422 2026] [security2:error] [pid 1321:tid 1567] [client 20.48.250.41:25544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/aaa.php"] [unique_id "apK-qmjCPtor9NZ-byQQiAAABoo"]
[Sat Aug 29 05:12:42.136126 2026] [security2:error] [pid 60333:tid 60571] [client 20.63.219.114:13983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/ds.php"] [unique_id "apK-qjwSHPvvQcBSRbsdgQAAAfU"]
[Sat Aug 29 05:12:42.141034 2026] [security2:error] [pid 1321:tid 1509] [client 68.155.159.216:21476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-mail.php"] [unique_id "apK-qmjCPtor9NZ-byQQjQAABlE"]
[Sat Aug 29 05:12:42.151735 2026] [security2:error] [pid 1321:tid 1601] [client 52.139.37.240:63297] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ilikeart.com"] [uri "/upfile.php"] [unique_id "apK-qmjCPtor9NZ-byQQjgAABqw"]
[Sat Aug 29 05:12:42.165416 2026] [security2:error] [pid 1321:tid 1523] [client 158.23.184.117:1439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/robots.php"] [unique_id "apK-qmjCPtor9NZ-byQQkAAABl8"]
[Sat Aug 29 05:12:42.184309 2026] [security2:error] [pid 1321:tid 1563] [client 158.23.184.117:50690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/goods.php"] [unique_id "apK-qmjCPtor9NZ-byQQkQAABoY"]
[Sat Aug 29 05:12:42.199470 2026] [security2:error] [pid 1321:tid 1588] [client 20.48.251.3:38653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/phpsysinfo.php"] [unique_id "apK-qmjCPtor9NZ-byQQlAAABp8"]
[Sat Aug 29 05:12:42.203195 2026] [security2:error] [pid 60333:tid 60554] [client 20.48.250.41:39865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/a4.php"] [unique_id "apK-qjwSHPvvQcBSRbsdggAAAeQ"]
[Sat Aug 29 05:12:42.211002 2026] [security2:error] [pid 1321:tid 1548] [client 20.104.18.15:17110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/ano.php"] [unique_id "apK-qmjCPtor9NZ-byQQlgAABnc"]
[Sat Aug 29 05:12:42.231397 2026] [autoindex:error] [pid 60333:tid 60539] [client 158.158.54.35:0] AH01276: Cannot serve directory /home2/charlov7/public_html/dev/wp-includes/images/media/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:12:42.239072 2026] [security2:error] [pid 1321:tid 1615] [client 52.138.0.157:22735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bctcoffee.com"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "apK-qmjCPtor9NZ-byQQmAAABro"]
[Sat Aug 29 05:12:42.252734 2026] [security2:error] [pid 1321:tid 1560] [client 20.63.219.114:11618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/haiterus.php"] [unique_id "apK-qmjCPtor9NZ-byQQmQAABoM"]
[Sat Aug 29 05:12:42.253491 2026] [security2:error] [pid 60333:tid 60469] [client 20.48.250.41:25578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/xsox.php"] [unique_id "apK-qjwSHPvvQcBSRbsdhwAAAY8"]
[Sat Aug 29 05:12:42.254002 2026] [security2:error] [pid 1321:tid 1598] [client 52.139.37.240:1620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.sf-andrei.com"] [uri "/essexec.php"] [unique_id "apK-qmjCPtor9NZ-byQQmgAABqk"]
[Sat Aug 29 05:12:42.291592 2026] [security2:error] [pid 60333:tid 60528] [client 4.205.62.107:62741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/classsmtps.php"] [unique_id "apK-qjwSHPvvQcBSRbsdigAAAco"]
[Sat Aug 29 05:12:42.292145 2026] [security2:error] [pid 1321:tid 1498] [client 20.104.49.130:45716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "coveryourauto.com"] [uri "/100.php"] [unique_id "apK-qmjCPtor9NZ-byQQnQAABkY"]
[Sat Aug 29 05:12:42.301161 2026] [security2:error] [pid 60333:tid 60548] [client 20.197.61.180:3364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thatsaturdaythang.lifesosweet.com"] [uri "/wp-admin/user/f35.php"] [unique_id "apK-qjwSHPvvQcBSRbsdjQAAAd4"]
[Sat Aug 29 05:12:42.307115 2026] [security2:error] [pid 1321:tid 1582] [client 20.52.41.200:2716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "apK-qmjCPtor9NZ-byQQngAABpk"]
[Sat Aug 29 05:12:42.309551 2026] [security2:error] [pid 1321:tid 1489] [client 158.23.184.117:1694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/.well-known/install.php"] [unique_id "apK-qmjCPtor9NZ-byQQnwAABj0"]
[Sat Aug 29 05:12:42.326693 2026] [security2:error] [pid 60333:tid 60558] [client 158.23.184.117:37155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/w.php"] [unique_id "apK-qjwSHPvvQcBSRbsdjwAAAeg"]
[Sat Aug 29 05:12:42.329296 2026] [security2:error] [pid 60333:tid 60494] [client 20.48.251.3:38632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/koiy.php"] [unique_id "apK-qjwSHPvvQcBSRbsdkQAAAag"]
[Sat Aug 29 05:12:42.330697 2026] [security2:error] [pid 60333:tid 60594] [client 20.104.18.15:27546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/mgrr.php"] [unique_id "apK-qjwSHPvvQcBSRbsdkgAAAgw"]
[Sat Aug 29 05:12:42.331623 2026] [security2:error] [pid 60333:tid 60579] [client 20.196.209.81:1993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/wp-admin/class-db.php"] [unique_id "apK-qjwSHPvvQcBSRbsdlAAAAf0"]
[Sat Aug 29 05:12:42.345219 2026] [security2:error] [pid 60333:tid 60595] [client 52.139.37.240:63321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ilikeart.com"] [uri "/form.php"] [unique_id "apK-qjwSHPvvQcBSRbsdlQAAAg0"]
[Sat Aug 29 05:12:42.355939 2026] [security2:error] [pid 60333:tid 60552] [client 20.196.209.81:15110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/Js.php"] [unique_id "apK-qjwSHPvvQcBSRbsdmwAAAeI"]
[Sat Aug 29 05:12:42.357230 2026] [cgid:error] [pid 60333:tid 60574] [client 74.248.24.12:16856] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/themysticalseven/404.shtml
[Sat Aug 29 05:12:42.379332 2026] [security2:error] [pid 60333:tid 60489] [client 20.48.250.41:39921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/tfm.php"] [unique_id "apK-qjwSHPvvQcBSRbsdngAAAaM"]
[Sat Aug 29 05:12:42.383634 2026] [security2:error] [pid 1321:tid 1506] [client 20.196.209.81:1354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/headerg.php"] [unique_id "apK-qmjCPtor9NZ-byQQpwAABk4"]
[Sat Aug 29 05:12:42.389451 2026] [security2:error] [pid 1321:tid 1550] [client 158.158.54.35:33721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/lock360.php"] [unique_id "apK-qmjCPtor9NZ-byQQqAAABnk"]
[Sat Aug 29 05:12:42.399848 2026] [security2:error] [pid 60333:tid 60527] [client 4.205.62.107:5520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/ws61.php"] [unique_id "apK-qjwSHPvvQcBSRbsdoQAAAck"]
[Sat Aug 29 05:12:42.416721 2026] [security2:error] [pid 60333:tid 60557] [client 20.48.250.41:25411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/lkui.php"] [unique_id "apK-qjwSHPvvQcBSRbsdowAAAec"]
[Sat Aug 29 05:12:42.448108 2026] [security2:error] [pid 60333:tid 60484] [client 52.139.37.240:1890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.sf-andrei.com"] [uri "/fw.php"] [unique_id "apK-qjwSHPvvQcBSRbsdpQAAAZ4"]
[Sat Aug 29 05:12:42.457183 2026] [security2:error] [pid 1321:tid 1567] [client 20.48.251.3:38713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/test1.php"] [unique_id "apK-qmjCPtor9NZ-byQQqgAABoo"]
[Sat Aug 29 05:12:42.461004 2026] [security2:error] [pid 60333:tid 60493] [client 20.104.18.15:17077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/mac.php"] [unique_id "apK-qjwSHPvvQcBSRbsdpwAAAac"]
[Sat Aug 29 05:12:42.468476 2026] [security2:error] [pid 60333:tid 60507] [client 20.104.49.130:43641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bfcorrigan.com"] [uri "/sym.php"] [unique_id "apK-qjwSHPvvQcBSRbsdqAAAAbU"]
[Sat Aug 29 05:12:42.468476 2026] [security2:error] [pid 1321:tid 1547] [client 158.23.184.117:50724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/new.php"] [unique_id "apK-qmjCPtor9NZ-byQQrAAABnY"]
[Sat Aug 29 05:12:42.475345 2026] [security2:error] [pid 60333:tid 60475] [client 68.155.159.216:21497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/content.php"] [unique_id "apK-qjwSHPvvQcBSRbsdqQAAAZU"]
[Sat Aug 29 05:12:42.483921 2026] [security2:error] [pid 60333:tid 60474] [client 52.139.37.240:32184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/ahax.php"] [unique_id "apK-qjwSHPvvQcBSRbsdqgAAAZQ"]
[Sat Aug 29 05:12:42.490103 2026] [security2:error] [pid 60333:tid 60560] [client 20.104.104.62:20673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wsanon.php"] [unique_id "apK-qjwSHPvvQcBSRbsdqwAAAeo"]
[Sat Aug 29 05:12:42.499149 2026] [security2:error] [pid 60333:tid 60477] [client 158.158.54.35:13080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-block.php"] [unique_id "apK-qjwSHPvvQcBSRbsdrQAAAZc"]
[Sat Aug 29 05:12:42.508777 2026] [security2:error] [pid 1321:tid 1565] [client 68.155.159.216:43860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.theenprogroup.com"] [uri "/NewFile.php/"] [unique_id "apK-qmjCPtor9NZ-byQQrQAABog"]
[Sat Aug 29 05:12:42.508794 2026] [security2:error] [pid 60333:tid 60534] [client 158.23.184.117:1716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/wp-admin/about.php"] [unique_id "apK-qjwSHPvvQcBSRbsdrgAAAdA"]
[Sat Aug 29 05:12:42.510987 2026] [security2:error] [pid 1321:tid 1566] [client 4.205.62.107:64965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/autogooey.php"] [unique_id "apK-qmjCPtor9NZ-byQQrgAABok"]
[Sat Aug 29 05:12:42.517241 2026] [security2:error] [pid 60333:tid 60508] [client 52.138.0.157:5136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bctcoffee.com"] [uri "/wp-includes/index.php"] [unique_id "apK-qjwSHPvvQcBSRbsdsAAAAbY"]
[Sat Aug 29 05:12:42.525658 2026] [security2:error] [pid 60333:tid 60472] [client 74.248.24.12:16856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/cv.php"] [unique_id "apK-qjwSHPvvQcBSRbsdsQAAAZI"]
[Sat Aug 29 05:12:42.541228 2026] [security2:error] [pid 1321:tid 1608] [client 52.139.37.240:8056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ilikeart.com"] [uri "/wp-sigunq.php"] [unique_id "apK-qmjCPtor9NZ-byQQrwAABrM"]
[Sat Aug 29 05:12:42.544234 2026] [security2:error] [pid 1321:tid 1510] [client 20.63.219.114:11628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/GOD.php"] [unique_id "apK-qmjCPtor9NZ-byQQsAAABlI"]
[Sat Aug 29 05:12:42.582960 2026] [security2:error] [pid 60333:tid 60476] [client 20.240.128.207:1223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "apK-qjwSHPvvQcBSRbsdswAAAZY"]
[Sat Aug 29 05:12:42.585650 2026] [security2:error] [pid 1321:tid 1581] [client 20.48.251.3:37982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/lmfi2.php"] [unique_id "apK-qmjCPtor9NZ-byQQsgAABpg"]
[Sat Aug 29 05:12:42.602184 2026] [security2:error] [pid 60333:tid 60584] [client 20.220.204.93:18775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/06.php"] [unique_id "apK-qjwSHPvvQcBSRbsdtAAAAgI"]
[Sat Aug 29 05:12:42.605885 2026] [security2:error] [pid 60333:tid 60550] [client 20.48.250.41:25500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "apK-qjwSHPvvQcBSRbsdtQAAAeA"]
[Sat Aug 29 05:12:42.611928 2026] [security2:error] [pid 60333:tid 60490] [client 158.23.184.117:37156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/php8.php"] [unique_id "apK-qjwSHPvvQcBSRbsdtgAAAaQ"]
[Sat Aug 29 05:12:42.614619 2026] [security2:error] [pid 1321:tid 1586] [client 20.104.18.15:17114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/simple.php"] [unique_id "apK-qmjCPtor9NZ-byQQswAABp0"]
[Sat Aug 29 05:12:42.622448 2026] [security2:error] [pid 60333:tid 60592] [client 20.63.219.114:1139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/go.php"] [unique_id "apK-qjwSHPvvQcBSRbsdtwAAAgo"]
[Sat Aug 29 05:12:42.624628 2026] [security2:error] [pid 1321:tid 1523] [client 20.104.49.130:43807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/log.php"] [unique_id "apK-qmjCPtor9NZ-byQQtAAABl8"]
[Sat Aug 29 05:12:42.643034 2026] [security2:error] [pid 1321:tid 1509] [client 52.139.37.240:1908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.sf-andrei.com"] [uri "/zwso.php"] [unique_id "apK-qmjCPtor9NZ-byQQtQAABlE"]
[Sat Aug 29 05:12:42.650633 2026] [security2:error] [pid 1321:tid 1601] [client 158.23.184.117:1445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/wp-content/backup.php"] [unique_id "apK-qmjCPtor9NZ-byQQtwAABqw"]
[Sat Aug 29 05:12:42.677006 2026] [security2:error] [pid 60333:tid 60516] [client 52.139.37.240:32162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/breads1.php"] [unique_id "apK-qjwSHPvvQcBSRbsduQAAAb4"]
[Sat Aug 29 05:12:42.697120 2026] [security2:error] [pid 60333:tid 60513] [client 20.48.250.41:39924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/Geforce.php"] [unique_id "apK-qjwSHPvvQcBSRbsduwAAAbs"]
[Sat Aug 29 05:12:42.704990 2026] [security2:error] [pid 1321:tid 1592] [client 149.34.210.141:11882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-qmjCPtor9NZ-byQQuQAABqM"]
[Sat Aug 29 05:12:42.705065 2026] [security2:error] [pid 1321:tid 1592] [client 149.34.210.141:11882] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-qmjCPtor9NZ-byQQuQAABqM"]
[Sat Aug 29 05:12:42.710927 2026] [security2:error] [pid 1321:tid 1588] [client 52.138.0.157:1710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bctcoffee.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK-qmjCPtor9NZ-byQQugAABp8"]
[Sat Aug 29 05:12:42.712688 2026] [security2:error] [pid 1321:tid 1525] [client 20.48.251.3:38574] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/aws_sdk_settings.php"] [unique_id "apK-qmjCPtor9NZ-byQQuwAABmE"]
[Sat Aug 29 05:12:42.729646 2026] [security2:error] [pid 60333:tid 60547] [client 68.155.159.216:35820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-blog-header.php"] [unique_id "apK-qjwSHPvvQcBSRbsdvgAAAd0"]
[Sat Aug 29 05:12:42.737389 2026] [security2:error] [pid 1321:tid 1576] [client 52.139.37.240:7362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ilikeart.com"] [uri "/07.php"] [unique_id "apK-qmjCPtor9NZ-byQQvgAABpM"]
[Sat Aug 29 05:12:42.751899 2026] [security2:error] [pid 60333:tid 60541] [client 20.104.18.15:17054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/xty.php"] [unique_id "apK-qjwSHPvvQcBSRbsdvwAAAdc"]
[Sat Aug 29 05:12:42.756489 2026] [security2:error] [pid 60333:tid 60509] [client 20.196.209.81:10016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/access.php"] [unique_id "apK-qjwSHPvvQcBSRbsdwgAAAbc"]
[Sat Aug 29 05:12:42.757510 2026] [security2:error] [pid 1321:tid 1590] [client 158.23.184.117:37123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/wp-content/themes/admin.php"] [unique_id "apK-qmjCPtor9NZ-byQQvwAABqE"]
[Sat Aug 29 05:12:42.760062 2026] [security2:error] [pid 60333:tid 60556] [client 20.196.209.81:1647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/wp-contentt.php"] [unique_id "apK-qjwSHPvvQcBSRbsdwwAAAeY"]
[Sat Aug 29 05:12:42.760404 2026] [security2:error] [pid 60333:tid 60566] [client 20.52.41.200:2670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "apK-qjwSHPvvQcBSRbsdxAAAAfA"]
[Sat Aug 29 05:12:42.789367 2026] [security2:error] [pid 60333:tid 60505] [client 20.197.61.180:3666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-blogs.php"] [unique_id "apK-qjwSHPvvQcBSRbsdxgAAAbM"]
[Sat Aug 29 05:12:42.795395 2026] [security2:error] [pid 1321:tid 1604] [client 4.205.62.107:61636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/asdf.php"] [unique_id "apK-qmjCPtor9NZ-byQQwAAABq8"]
[Sat Aug 29 05:12:42.800835 2026] [security2:error] [pid 60333:tid 60539] [client 20.48.250.41:25508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/motu.php"] [unique_id "apK-qjwSHPvvQcBSRbsdxwAAAdU"]
[Sat Aug 29 05:12:42.811964 2026] [security2:error] [pid 60333:tid 60571] [client 158.23.184.117:1720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/.well-known/aa.php"] [unique_id "apK-qjwSHPvvQcBSRbsdyAAAAfU"]
[Sat Aug 29 05:12:42.822840 2026] [security2:error] [pid 1321:tid 1615] [client 20.196.209.81:2001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/meta.php"] [unique_id "apK-qmjCPtor9NZ-byQQwQAABro"]
[Sat Aug 29 05:12:42.838564 2026] [security2:error] [pid 1321:tid 1514] [client 158.158.54.35:15083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wp-conflg.php"] [unique_id "apK-qmjCPtor9NZ-byQQwgAABlY"]
[Sat Aug 29 05:12:42.840466 2026] [security2:error] [pid 60333:tid 60495] [client 20.48.251.3:37990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/mga.php"] [unique_id "apK-qjwSHPvvQcBSRbsdygAAAak"]
[Sat Aug 29 05:12:42.845936 2026] [security2:error] [pid 60333:tid 60479] [client 158.23.147.79:50133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/wp-content/x/index.php"] [unique_id "apK-qjwSHPvvQcBSRbsdywAAAZk"]
[Sat Aug 29 05:12:42.850131 2026] [security2:error] [pid 60333:tid 60528] [client 158.23.147.79:43305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK-qjwSHPvvQcBSRbsdzAAAAco"]
[Sat Aug 29 05:12:42.850853 2026] [security2:error] [pid 60333:tid 60565] [client 52.139.37.240:1364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.sf-andrei.com"] [uri "/admin/function.php"] [unique_id "apK-qjwSHPvvQcBSRbsdzQAAAe8"]
[Sat Aug 29 05:12:42.853949 2026] [security2:error] [pid 60333:tid 60492] [client 4.205.62.107:62956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/loxi-o.php"] [unique_id "apK-qjwSHPvvQcBSRbsdzgAAAaY"]
[Sat Aug 29 05:12:42.874556 2026] [security2:error] [pid 60333:tid 60519] [client 52.139.37.240:32176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/must.php"] [unique_id "apK-qjwSHPvvQcBSRbsd0QAAAcE"]
[Sat Aug 29 05:12:42.898094 2026] [security2:error] [pid 60333:tid 60494] [client 158.23.147.79:64458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/wp-content/admin.php"] [unique_id "apK-qjwSHPvvQcBSRbsd1gAAAag"]
[Sat Aug 29 05:12:42.901559 2026] [security2:error] [pid 60333:tid 60555] [client 158.23.184.117:50740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/txets.php"] [unique_id "apK-qjwSHPvvQcBSRbsd1wAAAeU"]
[Sat Aug 29 05:12:42.902118 2026] [security2:error] [pid 60333:tid 60572] [client 20.104.18.15:17080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/sallu.php"] [unique_id "apK-qjwSHPvvQcBSRbsd2AAAAfY"]
[Sat Aug 29 05:12:42.913404 2026] [security2:error] [pid 60333:tid 60564] [client 52.138.0.157:10524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bctcoffee.com"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "apK-qjwSHPvvQcBSRbsd2QAAAe4"]
[Sat Aug 29 05:12:42.918494 2026] [security2:error] [pid 60333:tid 60574] [client 20.104.104.62:20849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/Alfa.php"] [unique_id "apK-qjwSHPvvQcBSRbsd2gAAAfg"]
[Sat Aug 29 05:12:42.943723 2026] [security2:error] [pid 1321:tid 1582] [client 158.158.54.35:4494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-includes/fonts/admin.php"] [unique_id "apK-qmjCPtor9NZ-byQQwwAABpk"]
[Sat Aug 29 05:12:42.947181 2026] [security2:error] [pid 1321:tid 1557] [client 52.139.37.240:8004] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "ilikeart.com"] [uri "/c99.php"] [unique_id "apK-qmjCPtor9NZ-byQQxAAABoA"]
[Sat Aug 29 05:12:42.957381 2026] [security2:error] [pid 60333:tid 60485] [client 158.23.184.117:1685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "apK-qjwSHPvvQcBSRbsd2wAAAZ8"]
[Sat Aug 29 05:12:42.961790 2026] [security2:error] [pid 60333:tid 60569] [client 158.23.147.79:24428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK-qjwSHPvvQcBSRbsd3AAAAfM"]
[Sat Aug 29 05:12:42.970159 2026] [security2:error] [pid 60333:tid 60470] [client 20.48.251.3:38551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/konfig.php"] [unique_id "apK-qjwSHPvvQcBSRbsd3QAAAZA"]
[Sat Aug 29 05:12:42.974721 2026] [security2:error] [pid 60333:tid 60496] [client 68.155.159.216:55046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.angelesforestranch.com"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK-qjwSHPvvQcBSRbsd3gAAAao"]
[Sat Aug 29 05:12:42.976141 2026] [security2:error] [pid 60333:tid 60568] [client 4.205.62.107:63011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/phpsysinfo.php"] [unique_id "apK-qjwSHPvvQcBSRbsd3wAAAfI"]
[Sat Aug 29 05:12:42.991018 2026] [security2:error] [pid 1321:tid 1522] [client 20.48.250.41:39854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/click.php"] [unique_id "apK-qmjCPtor9NZ-byQQxQAABl4"]
[Sat Aug 29 05:12:42.999989 2026] [security2:error] [pid 1321:tid 1542] [client 20.104.49.130:53664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/users.php"] [unique_id "apK-qmjCPtor9NZ-byQQxgAABnI"]
[Sat Aug 29 05:12:43.007152 2026] [security2:error] [pid 60333:tid 60517] [client 4.205.62.107:6226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/umgebung.php"] [unique_id "apK-qzwSHPvvQcBSRbsd4QAAAb8"]
[Sat Aug 29 05:12:43.022090 2026] [security2:error] [pid 1321:tid 1497] [client 20.151.200.44:27181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/admin123.php"] [unique_id "apK-q2jCPtor9NZ-byQQyAAABkU"]
[Sat Aug 29 05:12:43.022295 2026] [security2:error] [pid 60333:tid 60531] [client 20.197.61.180:3834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thatsaturdaythang.lifesosweet.com"] [uri "/wp-admin/user/min.php"] [unique_id "apK-qzwSHPvvQcBSRbsd4gAAAc0"]
[Sat Aug 29 05:12:43.035216 2026] [security2:error] [pid 60333:tid 60532] [client 20.104.18.15:17132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/codex.php"] [unique_id "apK-qzwSHPvvQcBSRbsd4wAAAc4"]
[Sat Aug 29 05:12:43.040927 2026] [security2:error] [pid 60333:tid 60578] [client 74.248.24.12:36632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/wp-content/packed.php"] [unique_id "apK-qzwSHPvvQcBSRbsd5AAAAfw"]
[Sat Aug 29 05:12:43.044483 2026] [security2:error] [pid 60333:tid 60557] [client 52.139.37.240:1895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.sf-andrei.com"] [uri "/zoom1.php"] [unique_id "apK-qzwSHPvvQcBSRbsd5QAAAec"]
[Sat Aug 29 05:12:43.048487 2026] [security2:error] [pid 60333:tid 60591] [client 158.23.184.117:37143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/adminfuns.php"] [unique_id "apK-qzwSHPvvQcBSRbsd5gAAAgk"]
[Sat Aug 29 05:12:43.055265 2026] [security2:error] [pid 1321:tid 1569] [client 20.48.250.41:25430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/Ov-Simple1.php"] [unique_id "apK-q2jCPtor9NZ-byQQyQAABow"]
[Sat Aug 29 05:12:43.059167 2026] [security2:error] [pid 60333:tid 60534] [client 68.155.159.216:7142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK-qzwSHPvvQcBSRbsd5wAAAdA"]
[Sat Aug 29 05:12:43.071113 2026] [security2:error] [pid 60333:tid 60484] [client 52.139.37.240:32115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/up.php"] [unique_id "apK-qzwSHPvvQcBSRbsd6AAAAZ4"]
[Sat Aug 29 05:12:43.077125 2026] [security2:error] [pid 60333:tid 60562] [client 20.63.219.114:12611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/gecko-new.php"] [unique_id "apK-qzwSHPvvQcBSRbsd6QAAAew"]
[Sat Aug 29 05:12:43.096700 2026] [security2:error] [pid 60333:tid 60567] [client 20.48.251.3:37998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/nw.php"] [unique_id "apK-qzwSHPvvQcBSRbsd7AAAAfE"]
[Sat Aug 29 05:12:43.101299 2026] [security2:error] [pid 60333:tid 60577] [client 4.205.62.107:63365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/a1vx.php"] [unique_id "apK-qzwSHPvvQcBSRbsd7QAAAfs"]
[Sat Aug 29 05:12:43.102014 2026] [security2:error] [pid 60333:tid 60471] [client 158.23.184.117:1438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/wp-content/plugins/alfa-rex.php"] [unique_id "apK-qzwSHPvvQcBSRbsd7gAAAZE"]
[Sat Aug 29 05:12:43.128020 2026] [security2:error] [pid 60333:tid 60481] [client 20.220.204.93:9966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/class.php"] [unique_id "apK-qzwSHPvvQcBSRbsd8QAAAZs"]
[Sat Aug 29 05:12:43.132538 2026] [security2:error] [pid 1321:tid 1419] [remote 74.7.227.189:50226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 189.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pinnacleforms.com"] [uri "/tmpMktbReplace.php"] [unique_id "apK-q2jCPtor9NZ-byQQywAGiD0"], referer: https://mail.pinnacleforms.com/
[Sat Aug 29 05:12:43.142260 2026] [security2:error] [pid 60333:tid 60589] [client 52.139.37.240:8025] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "ilikeart.com"] [uri "/c99.php"] [unique_id "apK-qzwSHPvvQcBSRbsd8gAAAgc"]
[Sat Aug 29 05:12:43.157317 2026] [security2:error] [pid 60333:tid 60580] [client 20.196.209.81:2026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/theme.php"] [unique_id "apK-qzwSHPvvQcBSRbsd9AAAAf4"]
[Sat Aug 29 05:12:43.162999 2026] [security2:error] [pid 1321:tid 1610] [client 20.63.219.114:18465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/ggfi.php"] [unique_id "apK-q2jCPtor9NZ-byQQzAAABrU"]
[Sat Aug 29 05:12:43.163720 2026] [security2:error] [pid 60333:tid 60551] [client 20.196.209.81:9321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/classsmtps.php"] [unique_id "apK-qzwSHPvvQcBSRbsd9QAAAeE"]
[Sat Aug 29 05:12:43.165765 2026] [security2:error] [pid 60333:tid 60490] [client 68.155.159.216:43930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/wp-content/radio.php"] [unique_id "apK-qzwSHPvvQcBSRbsd9gAAAaQ"]
[Sat Aug 29 05:12:43.168539 2026] [security2:error] [pid 60333:tid 60592] [client 20.104.18.15:17127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/5656.php"] [unique_id "apK-qzwSHPvvQcBSRbsd9wAAAgo"]
[Sat Aug 29 05:12:43.171722 2026] [security2:error] [pid 60333:tid 60561] [client 20.48.250.41:39867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/ms.php"] [unique_id "apK-qzwSHPvvQcBSRbsd-AAAAes"]
[Sat Aug 29 05:12:43.179720 2026] [security2:error] [pid 60333:tid 60590] [client 52.138.0.157:1669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bctcoffee.com"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "apK-qzwSHPvvQcBSRbsd-QAAAgg"]
[Sat Aug 29 05:12:43.194860 2026] [security2:error] [pid 1321:tid 1613] [client 158.23.184.117:37178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/403.php"] [unique_id "apK-q2jCPtor9NZ-byQQzQAABrg"]
[Sat Aug 29 05:12:43.212371 2026] [security2:error] [pid 60333:tid 60518] [client 20.52.41.200:2843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/gifclass.php"] [unique_id "apK-qzwSHPvvQcBSRbsd-gAAAcA"]
[Sat Aug 29 05:12:43.219265 2026] [security2:error] [pid 60333:tid 60506] [client 20.48.250.41:25503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/wp-blogs.php"] [unique_id "apK-qzwSHPvvQcBSRbsd_QAAAbQ"]
[Sat Aug 29 05:12:43.224279 2026] [security2:error] [pid 1321:tid 1561] [client 20.48.251.3:38596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/myfile.php"] [unique_id "apK-q2jCPtor9NZ-byQQzwAABoQ"]
[Sat Aug 29 05:12:43.240739 2026] [security2:error] [pid 60333:tid 60499] [client 52.139.37.240:1350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.sf-andrei.com"] [uri "/about.php7"] [unique_id "apK-qzwSHPvvQcBSRbsd_gAAAa0"]
[Sat Aug 29 05:12:43.250445 2026] [security2:error] [pid 1321:tid 1566] [client 20.196.209.81:1401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/dxc.php"] [unique_id "apK-q2jCPtor9NZ-byQQ0AAABok"]
[Sat Aug 29 05:12:43.277567 2026] [security2:error] [pid 1321:tid 1597] [client 20.104.104.62:64728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-admin/includes/mailer.php.php"] [unique_id "apK-q2jCPtor9NZ-byQQ0gAABqg"]
[Sat Aug 29 05:12:43.284520 2026] [security2:error] [pid 1321:tid 1507] [client 158.158.54.35:31133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/123.php"] [unique_id "apK-q2jCPtor9NZ-byQQ0wAABk8"]
[Sat Aug 29 05:12:43.304866 2026] [security2:error] [pid 60333:tid 60469] [client 20.104.18.15:17076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/w3lls.php"] [unique_id "apK-qzwSHPvvQcBSRbseAwAAAY8"]
[Sat Aug 29 05:12:43.309963 2026] [security2:error] [pid 60333:tid 60528] [client 158.23.184.117:1683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/test.php"] [unique_id "apK-qzwSHPvvQcBSRbseBQAAAco"]
[Sat Aug 29 05:12:43.325105 2026] [security2:error] [pid 60333:tid 60492] [client 20.48.250.41:39787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/zxekqlxb.php"] [unique_id "apK-qzwSHPvvQcBSRbseBgAAAaY"]
[Sat Aug 29 05:12:43.340784 2026] [security2:error] [pid 60333:tid 60587] [client 52.139.37.240:8002] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "ilikeart.com"] [uri "/c99.php"] [unique_id "apK-qzwSHPvvQcBSRbseBwAAAgU"]
[Sat Aug 29 05:12:43.349828 2026] [security2:error] [pid 60333:tid 60519] [client 52.139.37.240:32114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/wp-content/155.php"] [unique_id "apK-qzwSHPvvQcBSRbseCAAAAcE"]
[Sat Aug 29 05:12:43.352629 2026] [security2:error] [pid 60333:tid 60558] [client 20.48.251.3:37998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/thui.php"] [unique_id "apK-qzwSHPvvQcBSRbseCgAAAeg"]
[Sat Aug 29 05:12:43.353092 2026] [security2:error] [pid 60333:tid 60544] [client 20.104.18.15:16611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-qzwSHPvvQcBSRbseCwAAAdo"]
[Sat Aug 29 05:12:43.389992 2026] [security2:error] [pid 60333:tid 60499] [client 158.158.54.35:7032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/m.php"] [unique_id "apK-qzwSHPvvQcBSRbseDwAAAa0"]
[Sat Aug 29 05:12:43.410805 2026] [security2:error] [pid 60333:tid 60574] [client 20.48.250.41:25525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/mini.php"] [unique_id "apK-qzwSHPvvQcBSRbseEAAAAfg"]
[Sat Aug 29 05:12:43.415577 2026] [security2:error] [pid 60333:tid 60546] [client 20.240.128.207:2710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-content/admin.php"] [unique_id "apK-qzwSHPvvQcBSRbseEQAAAdw"]
[Sat Aug 29 05:12:43.424165 2026] [security2:error] [pid 60333:tid 60497] [client 158.23.184.117:37137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/.trash7206/index.php"] [unique_id "apK-qzwSHPvvQcBSRbseEgAAAas"]
[Sat Aug 29 05:12:43.437428 2026] [security2:error] [pid 60333:tid 60526] [client 20.104.18.15:27590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/fpwch.php"] [unique_id "apK-qzwSHPvvQcBSRbseEwAAAcg"]
[Sat Aug 29 05:12:43.438658 2026] [security2:error] [pid 1321:tid 1563] [client 4.205.62.107:28056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/cache-compat.php"] [unique_id "apK-q2jCPtor9NZ-byQQ1QAABoY"]
[Sat Aug 29 05:12:43.442505 2026] [security2:error] [pid 1321:tid 1526] [client 52.139.37.240:1861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.sf-andrei.com"] [uri "/cron.php"] [unique_id "apK-q2jCPtor9NZ-byQQ1gAABmI"]
[Sat Aug 29 05:12:43.463282 2026] [security2:error] [pid 60333:tid 60576] [client 158.23.184.117:1684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/wp-includes/mani.php"] [unique_id "apK-qzwSHPvvQcBSRbseFQAAAfo"]
[Sat Aug 29 05:12:43.470487 2026] [security2:error] [pid 60333:tid 60548] [client 195.178.110.101:24030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 101.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "naturalkneads.com"] [uri "/wp/index.php"] [unique_id "apK-qzwSHPvvQcBSRbseFgAAAd4"], referer: https://naturalkneads.com/wp/wp-admin/
[Sat Aug 29 05:12:43.480896 2026] [security2:error] [pid 60333:tid 60535] [client 20.48.251.3:37983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/public/bnn_.php.php"] [unique_id "apK-qzwSHPvvQcBSRbseFwAAAdE"]
[Sat Aug 29 05:12:43.491654 2026] [security2:error] [pid 1321:tid 1606] [client 20.48.250.41:39821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/init.php"] [unique_id "apK-q2jCPtor9NZ-byQQ1wAABrE"]
[Sat Aug 29 05:12:43.492703 2026] [security2:error] [pid 60333:tid 60568] [client 20.104.18.15:16533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-qzwSHPvvQcBSRbseGAAAAfI"]
[Sat Aug 29 05:12:43.495428 2026] [security2:error] [pid 1321:tid 1581] [client 20.63.219.114:1916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/wp-admin.php"] [unique_id "apK-q2jCPtor9NZ-byQQ2AAABpg"]
[Sat Aug 29 05:12:43.514959 2026] [security2:error] [pid 60333:tid 60596] [client 52.138.0.157:10557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bctcoffee.com"] [uri "/wp-links-opml.php"] [unique_id "apK-qzwSHPvvQcBSRbseGQAAAg4"]
[Sat Aug 29 05:12:43.519139 2026] [security2:error] [pid 60333:tid 60505] [client 20.197.61.180:3794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-comments-post.php"] [unique_id "apK-qzwSHPvvQcBSRbseGgAAAbM"]
[Sat Aug 29 05:12:43.526842 2026] [security2:error] [pid 60333:tid 60573] [client 20.63.219.114:11615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/alfa-rex.php"] [unique_id "apK-qzwSHPvvQcBSRbseGwAAAfc"]
[Sat Aug 29 05:12:43.535200 2026] [security2:error] [pid 1321:tid 1555] [client 52.139.37.240:7407] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "ilikeart.com"] [uri "/c99.php"] [unique_id "apK-q2jCPtor9NZ-byQQ2QAABn4"]
[Sat Aug 29 05:12:43.538714 2026] [security2:error] [pid 1321:tid 1525] [client 4.205.62.107:5514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/xza.php"] [unique_id "apK-q2jCPtor9NZ-byQQ2gAABmE"]
[Sat Aug 29 05:12:43.544511 2026] [security2:error] [pid 1321:tid 1601] [client 52.139.37.240:32153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/wp-update.php"] [unique_id "apK-q2jCPtor9NZ-byQQ2wAABqw"]
[Sat Aug 29 05:12:43.551162 2026] [security2:error] [pid 1321:tid 1523] [client 74.248.24.12:38687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/wp-admin/js/index.php"] [unique_id "apK-q2jCPtor9NZ-byQQ3AAABl8"]
[Sat Aug 29 05:12:43.553796 2026] [security2:error] [pid 60333:tid 60559] [client 20.196.209.81:2029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/alumni_reg.php"] [unique_id "apK-qzwSHPvvQcBSRbseHAAAAek"]
[Sat Aug 29 05:12:43.562668 2026] [security2:error] [pid 1321:tid 1501] [client 158.23.147.79:14084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-l0gin.php"] [unique_id "apK-q2jCPtor9NZ-byQQ3QAABkk"]
[Sat Aug 29 05:12:43.568025 2026] [security2:error] [pid 1321:tid 1598] [client 158.23.184.117:37127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/.trash7206/admin.php"] [unique_id "apK-q2jCPtor9NZ-byQQ3gAABqk"]
[Sat Aug 29 05:12:43.574743 2026] [security2:error] [pid 60333:tid 60493] [client 20.104.18.15:17088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/domvf.php"] [unique_id "apK-qzwSHPvvQcBSRbseHQAAAac"]
[Sat Aug 29 05:12:43.580956 2026] [security2:error] [pid 1321:tid 1609] [client 68.155.159.216:56749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK-q2jCPtor9NZ-byQQ3wAABrQ"]
[Sat Aug 29 05:12:43.608958 2026] [security2:error] [pid 60333:tid 60527] [client 20.196.209.81:10004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/contentloader1.php"] [unique_id "apK-qzwSHPvvQcBSRbseHgAAAck"]
[Sat Aug 29 05:12:43.608983 2026] [security2:error] [pid 60333:tid 60475] [client 20.48.251.3:38707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/php_info.php"] [unique_id "apK-qzwSHPvvQcBSRbseHwAAAZU"]
[Sat Aug 29 05:12:43.611045 2026] [security2:error] [pid 60333:tid 60474] [client 68.155.159.216:43956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.theenprogroup.com"] [uri "/dropdown.php"] [unique_id "apK-qzwSHPvvQcBSRbseIAAAAZQ"]
[Sat Aug 29 05:12:43.612751 2026] [security2:error] [pid 1321:tid 1590] [client 158.23.184.117:51087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/wp-includes/Test.php"] [unique_id "apK-q2jCPtor9NZ-byQQ4AAABqE"]
[Sat Aug 29 05:12:43.621429 2026] [security2:error] [pid 1321:tid 1514] [client 20.48.250.41:25504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/amp.php"] [unique_id "apK-q2jCPtor9NZ-byQQ4QAABlY"]
[Sat Aug 29 05:12:43.623273 2026] [security2:error] [pid 1321:tid 1605] [client 20.104.18.15:16617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/ap.php"] [unique_id "apK-q2jCPtor9NZ-byQQ4wAABrA"]
[Sat Aug 29 05:12:43.632133 2026] [security2:error] [pid 1321:tid 1582] [client 20.48.250.41:39904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/term.php"] [unique_id "apK-q2jCPtor9NZ-byQQ5AAABpk"]
[Sat Aug 29 05:12:43.635548 2026] [security2:error] [pid 60333:tid 60542] [client 52.139.37.240:1899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.sf-andrei.com"] [uri "/wp-2019.php"] [unique_id "apK-qzwSHPvvQcBSRbseIQAAAdg"]
[Sat Aug 29 05:12:43.641631 2026] [security2:error] [pid 60333:tid 60591] [client 20.104.18.15:5075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-qzwSHPvvQcBSRbseIgAAAgk"]
[Sat Aug 29 05:12:43.652028 2026] [security2:error] [pid 1321:tid 1557] [client 4.205.62.107:64214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/sdsa.php"] [unique_id "apK-q2jCPtor9NZ-byQQ5QAABoA"]
[Sat Aug 29 05:12:43.674166 2026] [security2:error] [pid 1321:tid 1588] [client 20.196.209.81:1356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/wp-2019.php"] [unique_id "apK-q2jCPtor9NZ-byQQ5wAABp8"]
[Sat Aug 29 05:12:43.700492 2026] [security2:error] [pid 60333:tid 60562] [client 20.104.18.15:17064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/biufile.php"] [unique_id "apK-qzwSHPvvQcBSRbseJQAAAew"]
[Sat Aug 29 05:12:43.701767 2026] [security2:error] [pid 1321:tid 1492] [client 65.21.113.248:39270] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.babyboomerscare.com"] [uri "/robots.txt"] [unique_id "apK-q2jCPtor9NZ-byQQ6AAABkA"]
[Sat Aug 29 05:12:43.707364 2026] [security2:error] [pid 1321:tid 1439] [remote 74.7.227.154:46308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK-q2jCPtor9NZ-byQQ6QAGWVE"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Ffont-awesome%2Fadmin%2Fviews
[Sat Aug 29 05:12:43.708412 2026] [security2:error] [pid 1321:tid 1516] [client 52.138.0.157:10534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bctcoffee.com"] [uri "/wp-signup.php"] [unique_id "apK-q2jCPtor9NZ-byQQ6gAABlg"]
[Sat Aug 29 05:12:43.710367 2026] [security2:error] [pid 1321:tid 1564] [client 158.23.184.117:50718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/wp-content/admin.php"] [unique_id "apK-q2jCPtor9NZ-byQQ6wAABoc"]
[Sat Aug 29 05:12:43.736545 2026] [security2:error] [pid 60333:tid 60507] [client 158.158.54.35:1343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/yanz.php"] [unique_id "apK-qzwSHPvvQcBSRbseKAAAAbU"]
[Sat Aug 29 05:12:43.737044 2026] [security2:error] [pid 1321:tid 1532] [client 20.48.251.3:38162] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/broadcasting.php"] [unique_id "apK-q2jCPtor9NZ-byQQ7AAABmg"]
[Sat Aug 29 05:12:43.738691 2026] [security2:error] [pid 60333:tid 60533] [client 52.139.37.240:32182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/xmrlpc.php"] [unique_id "apK-qzwSHPvvQcBSRbseKQAAAc8"]
[Sat Aug 29 05:12:43.745862 2026] [security2:error] [pid 1321:tid 1519] [client 20.197.61.180:8778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thatsaturdaythang.lifesosweet.com"] [uri "/wp-admin/users.php"] [unique_id "apK-q2jCPtor9NZ-byQQ7QAABls"]
[Sat Aug 29 05:12:43.755325 2026] [security2:error] [pid 1321:tid 1510] [client 111.235.68.106:47482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK-q2jCPtor9NZ-byQQ7gAABlI"]
[Sat Aug 29 05:12:43.755433 2026] [security2:error] [pid 1321:tid 1510] [client 111.235.68.106:47482] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK-q2jCPtor9NZ-byQQ7gAABlI"]
[Sat Aug 29 05:12:43.755786 2026] [security2:error] [pid 1321:tid 1610] [client 68.155.159.216:21493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/cgi-bin/index.php"] [unique_id "apK-q2jCPtor9NZ-byQQ7wAABrU"]
[Sat Aug 29 05:12:43.756914 2026] [security2:error] [pid 1321:tid 1613] [client 20.104.18.15:16624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/media.php"] [unique_id "apK-q2jCPtor9NZ-byQQ8AAABrg"]
[Sat Aug 29 05:12:43.758139 2026] [security2:error] [pid 1321:tid 1577] [client 158.23.184.117:1471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/wp-includes/pomo.php"] [unique_id "apK-q2jCPtor9NZ-byQQ8QAABpQ"]
[Sat Aug 29 05:12:43.775958 2026] [security2:error] [pid 1321:tid 1597] [client 20.104.18.15:5008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-q2jCPtor9NZ-byQQ9QAABqg"]
[Sat Aug 29 05:12:43.817959 2026] [security2:error] [pid 1321:tid 1548] [client 20.52.41.200:2690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK-q2jCPtor9NZ-byQQ-AAABnc"]
[Sat Aug 29 05:12:43.827096 2026] [security2:error] [pid 1321:tid 1606] [client 20.104.104.62:40223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-admin/maint/mailer.php.php"] [unique_id "apK-q2jCPtor9NZ-byQQ-wAABrE"]
[Sat Aug 29 05:12:43.829374 2026] [security2:error] [pid 60333:tid 60508] [client 158.158.54.35:19342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "apK-qzwSHPvvQcBSRbseKgAAAbY"]
[Sat Aug 29 05:12:43.834883 2026] [security2:error] [pid 1321:tid 1594] [client 20.48.250.41:25556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/cc13.php"] [unique_id "apK-q2jCPtor9NZ-byQQ_QAABqU"]
[Sat Aug 29 05:12:43.834897 2026] [security2:error] [pid 1321:tid 1529] [client 68.155.159.216:62784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK-q2jCPtor9NZ-byQQ_AAABmU"]
[Sat Aug 29 05:12:43.846547 2026] [security2:error] [pid 1321:tid 1490] [client 52.139.37.240:1893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.sf-andrei.com"] [uri "/gecko-new.php"] [unique_id "apK-q2jCPtor9NZ-byQQ_gAABj4"]
[Sat Aug 29 05:12:43.854690 2026] [security2:error] [pid 1321:tid 1509] [client 158.23.184.117:50743] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/wp-mail.php"] [unique_id "apK-q2jCPtor9NZ-byQQ_wAABlE"]
[Sat Aug 29 05:12:43.857171 2026] [security2:error] [pid 1321:tid 1576] [client 20.104.18.15:27522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/blacks.php"] [unique_id "apK-q2jCPtor9NZ-byQRAAAABpM"]
[Sat Aug 29 05:12:43.858939 2026] [security2:error] [pid 1321:tid 1515] [client 20.63.219.114:1858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/wp-configs.php"] [unique_id "apK-q2jCPtor9NZ-byQRAQAABlc"]
[Sat Aug 29 05:12:43.863091 2026] [security2:error] [pid 1321:tid 1501] [client 20.48.251.3:37966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/v4.php"] [unique_id "apK-q2jCPtor9NZ-byQRAgAABkk"]
[Sat Aug 29 05:12:43.891114 2026] [security2:error] [pid 1321:tid 1590] [client 20.104.18.15:16589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/adminfuns.php"] [unique_id "apK-q2jCPtor9NZ-byQRAwAABqE"]
[Sat Aug 29 05:12:43.905719 2026] [security2:error] [pid 60333:tid 60511] [client 20.104.18.15:5101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/ap.php"] [unique_id "apK-qzwSHPvvQcBSRbseKwAAAbk"]
[Sat Aug 29 05:12:43.916274 2026] [security2:error] [pid 60333:tid 60580] [client 20.48.250.41:39778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/aaa.php"] [unique_id "apK-qzwSHPvvQcBSRbseLAAAAf4"]
[Sat Aug 29 05:12:43.918579 2026] [security2:error] [pid 1321:tid 1565] [client 20.240.128.207:21458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-configs.php"] [unique_id "apK-q2jCPtor9NZ-byQRBgAABog"]
[Sat Aug 29 05:12:43.926745 2026] [security2:error] [pid 1321:tid 1560] [client 52.138.0.157:5156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bctcoffee.com"] [uri "/xmlrpc.php"] [unique_id "apK-q2jCPtor9NZ-byQRBQAABoM"]
[Sat Aug 29 05:12:43.932777 2026] [security2:error] [pid 1321:tid 1598] [client 52.139.37.240:32101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/about/function.php"] [unique_id "apK-q2jCPtor9NZ-byQRCAAABqk"]
[Sat Aug 29 05:12:43.936424 2026] [security2:error] [pid 60333:tid 60584] [client 4.205.62.107:63938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/app/Helpers/bladeHelpers.php"] [unique_id "apK-qzwSHPvvQcBSRbseLQAAAgI"]
[Sat Aug 29 05:12:43.936879 2026] [security2:error] [pid 60333:tid 60538] [client 20.220.204.93:58949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/8.php"] [unique_id "apK-qzwSHPvvQcBSRbseLgAAAdQ"]
[Sat Aug 29 05:12:43.944923 2026] [security2:error] [pid 1321:tid 1580] [client 20.63.219.114:18393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/cookie.php"] [unique_id "apK-q2jCPtor9NZ-byQRCQAABpc"]
[Sat Aug 29 05:12:43.959286 2026] [security2:error] [pid 1321:tid 1581] [client 20.196.209.81:1645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/colors.php"] [unique_id "apK-q2jCPtor9NZ-byQRCwAABpg"]
[Sat Aug 29 05:12:43.988977 2026] [security2:error] [pid 1321:tid 1542] [client 20.104.18.15:17135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/beck.php"] [unique_id "apK-q2jCPtor9NZ-byQRDAAABnI"]
[Sat Aug 29 05:12:43.990626 2026] [security2:error] [pid 60333:tid 60561] [client 20.48.251.3:37986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/debuggen.php"] [unique_id "apK-qzwSHPvvQcBSRbseLwAAAes"]
[Sat Aug 29 05:12:43.992993 2026] [security2:error] [pid 1321:tid 1516] [client 4.205.62.107:62739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/f35.php"] [unique_id "apK-q2jCPtor9NZ-byQRDQAABlg"]
[Sat Aug 29 05:12:43.997953 2026] [security2:error] [pid 60333:tid 60590] [client 20.48.250.41:25502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/aa.php"] [unique_id "apK-qzwSHPvvQcBSRbseMAAAAgg"]
[Sat Aug 29 05:12:44.011325 2026] [security2:error] [pid 1321:tid 1532] [client 158.23.184.117:51088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/wp-admin/link-add.php"] [unique_id "apK-rGjCPtor9NZ-byQRDwAABmg"]
[Sat Aug 29 05:12:44.018894 2026] [security2:error] [pid 1321:tid 1519] [client 158.23.147.79:64511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/xmlrpc.php"] [unique_id "apK-rGjCPtor9NZ-byQREAAABls"]
[Sat Aug 29 05:12:44.021086 2026] [security2:error] [pid 1321:tid 1604] [client 20.196.209.81:9337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/al.php"] [unique_id "apK-rGjCPtor9NZ-byQREQAABq8"]
[Sat Aug 29 05:12:44.044663 2026] [security2:error] [pid 1321:tid 1566] [client 158.23.184.117:37149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/3.php"] [unique_id "apK-rGjCPtor9NZ-byQREgAABok"]
[Sat Aug 29 05:12:44.044947 2026] [security2:error] [pid 1321:tid 1569] [client 20.104.18.15:5057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/media.php"] [unique_id "apK-rGjCPtor9NZ-byQREwAABow"]
[Sat Aug 29 05:12:44.053496 2026] [security2:error] [pid 1321:tid 1491] [client 20.104.18.15:16608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/classwithtostring.php"] [unique_id "apK-rGjCPtor9NZ-byQRFAAABj8"]
[Sat Aug 29 05:12:44.058634 2026] [security2:error] [pid 1321:tid 1564] [client 52.139.37.240:1868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.sf-andrei.com"] [uri "/add_actualites.php"] [unique_id "apK-rGjCPtor9NZ-byQRFQAABoc"]
[Sat Aug 29 05:12:44.064082 2026] [security2:error] [pid 60333:tid 60541] [client 158.23.147.79:24388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/goat1.php"] [unique_id "apK-rDwSHPvvQcBSRbseMQAAAdc"]
[Sat Aug 29 05:12:44.064185 2026] [security2:error] [pid 1321:tid 1573] [client 158.23.147.79:43355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-includes/index.php"] [unique_id "apK-rGjCPtor9NZ-byQRFgAABpA"]
[Sat Aug 29 05:12:44.066952 2026] [security2:error] [pid 1321:tid 1504] [client 74.248.24.12:31886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/core.php"] [unique_id "apK-rGjCPtor9NZ-byQRFwAABkw"]
[Sat Aug 29 05:12:44.075340 2026] [security2:error] [pid 1321:tid 1543] [client 68.155.159.216:55060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.angelesforestranch.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK-rGjCPtor9NZ-byQRGAAABnM"]
[Sat Aug 29 05:12:44.077969 2026] [security2:error] [pid 1321:tid 1502] [client 20.196.209.81:1608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/menu.php"] [unique_id "apK-rGjCPtor9NZ-byQRGQAABko"]
[Sat Aug 29 05:12:44.111157 2026] [security2:error] [pid 1321:tid 1499] [client 4.205.62.107:63258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/sgd.php"] [unique_id "apK-rGjCPtor9NZ-byQRGgAABkc"]
[Sat Aug 29 05:12:44.117847 2026] [security2:error] [pid 1321:tid 1601] [client 20.48.251.3:38012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/wp-admin/sc.php"] [unique_id "apK-rGjCPtor9NZ-byQRGwAABqw"]
[Sat Aug 29 05:12:44.122605 2026] [security2:error] [pid 1321:tid 1583] [client 52.138.0.157:22767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.0.138.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bctcoffee.com"] [uri "/yas.php"] [unique_id "apK-rGjCPtor9NZ-byQRHQAABpo"]
[Sat Aug 29 05:12:44.128077 2026] [security2:error] [pid 60333:tid 60556] [client 20.48.250.41:25568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/s1.php"] [unique_id "apK-rDwSHPvvQcBSRbseMgAAAeY"]
[Sat Aug 29 05:12:44.130455 2026] [security2:error] [pid 1321:tid 1501] [client 20.104.18.15:17025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/t3.php"] [unique_id "apK-rGjCPtor9NZ-byQRHgAABkk"]
[Sat Aug 29 05:12:44.137303 2026] [security2:error] [pid 60333:tid 60581] [client 158.23.147.79:49984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "apK-rDwSHPvvQcBSRbseMwAAAf8"]
[Sat Aug 29 05:12:44.140370 2026] [security2:error] [pid 1321:tid 1612] [client 52.139.37.240:32112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/an.php"] [unique_id "apK-rGjCPtor9NZ-byQRIAAABrc"]
[Sat Aug 29 05:12:44.142205 2026] [security2:error] [pid 1321:tid 1584] [client 4.205.62.107:6302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/old_phpinfo.php"] [unique_id "apK-rGjCPtor9NZ-byQRIQAABps"]
[Sat Aug 29 05:12:44.152567 2026] [security2:error] [pid 60333:tid 60509] [client 158.23.184.117:1420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/wp-includes/Text.php"] [unique_id "apK-rDwSHPvvQcBSRbseNAAAAbc"]
[Sat Aug 29 05:12:44.154169 2026] [security2:error] [pid 1321:tid 1565] [client 20.48.250.41:39836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/xsox.php"] [unique_id "apK-rGjCPtor9NZ-byQRIgAABog"]
[Sat Aug 29 05:12:44.180217 2026] [security2:error] [pid 1321:tid 1613] [client 158.158.54.35:1307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/autoload_classmap.php"] [unique_id "apK-rGjCPtor9NZ-byQRJAAABrg"]
[Sat Aug 29 05:12:44.184410 2026] [security2:error] [pid 60333:tid 60539] [client 20.104.18.15:5111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/adminfuns.php"] [unique_id "apK-rDwSHPvvQcBSRbseNQAAAdU"]
[Sat Aug 29 05:12:44.188583 2026] [security2:error] [pid 1321:tid 1596] [client 68.155.159.216:64041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK-rGjCPtor9NZ-byQRKAAABqc"]
[Sat Aug 29 05:12:44.188686 2026] [security2:error] [pid 1321:tid 1523] [client 158.23.184.117:50699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "apK-rGjCPtor9NZ-byQRKQAABl8"]
[Sat Aug 29 05:12:44.201779 2026] [security2:error] [pid 60333:tid 60528] [client 20.104.18.15:16583] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK-rDwSHPvvQcBSRbseNwAAAco"]
[Sat Aug 29 05:12:44.239460 2026] [security2:error] [pid 1321:tid 1527] [client 4.205.62.107:63382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/public/vx.php"] [unique_id "apK-rGjCPtor9NZ-byQRLAAABmM"]
[Sat Aug 29 05:12:44.239479 2026] [security2:error] [pid 1321:tid 1507] [client 20.63.219.114:18839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/essexec.php"] [unique_id "apK-rGjCPtor9NZ-byQRKwAABk8"]
[Sat Aug 29 05:12:44.245403 2026] [security2:error] [pid 1321:tid 1610] [client 20.48.251.3:38599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/application.config.php"] [unique_id "apK-rGjCPtor9NZ-byQRLQAABrU"]
[Sat Aug 29 05:12:44.246062 2026] [security2:error] [pid 1321:tid 1512] [client 20.197.61.180:19754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-config.php"] [unique_id "apK-rGjCPtor9NZ-byQRLgAABlQ"]
[Sat Aug 29 05:12:44.255525 2026] [security2:error] [pid 1321:tid 1550] [client 52.139.37.240:1372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.sf-andrei.com"] [uri "/browse.php"] [unique_id "apK-rGjCPtor9NZ-byQRLwAABnk"]
[Sat Aug 29 05:12:44.261108 2026] [security2:error] [pid 60333:tid 60594] [client 20.104.18.15:17041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/wp.php"] [unique_id "apK-rDwSHPvvQcBSRbseOgAAAgw"]
[Sat Aug 29 05:12:44.264061 2026] [security2:error] [pid 60333:tid 60472] [client 68.155.159.216:44002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/wp-admin/dropdown.php"] [unique_id "apK-rDwSHPvvQcBSRbseOwAAAZI"]
[Sat Aug 29 05:12:44.274090 2026] [security2:error] [pid 60333:tid 60566] [client 20.52.41.200:2708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/css/index.php"] [unique_id "apK-rDwSHPvvQcBSRbsePAAAAfA"]
[Sat Aug 29 05:12:44.284720 2026] [security2:error] [pid 1321:tid 1508] [client 158.158.54.35:6978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/222.php"] [unique_id "apK-rGjCPtor9NZ-byQRMQAABlA"]
[Sat Aug 29 05:12:44.286189 2026] [security2:error] [pid 60333:tid 60518] [client 65.21.113.248:41752] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.babyboomerscare.com"] [uri "/index.php"] [unique_id "apK-rDwSHPvvQcBSRbseNgAAAcA"]
[Sat Aug 29 05:12:44.288392 2026] [security2:error] [pid 60333:tid 60494] [client 20.48.250.41:25408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/0byte.php"] [unique_id "apK-rDwSHPvvQcBSRbsePgAAAag"]
[Sat Aug 29 05:12:44.289143 2026] [security2:error] [pid 1321:tid 1597] [client 20.48.250.41:39761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/lkui.php"] [unique_id "apK-rGjCPtor9NZ-byQRMgAABqg"]
[Sat Aug 29 05:12:44.297220 2026] [security2:error] [pid 60333:tid 60519] [client 158.23.184.117:1437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/wp-trackback.php"] [unique_id "apK-rDwSHPvvQcBSRbseQAAAAcE"]
[Sat Aug 29 05:12:44.320492 2026] [security2:error] [pid 1321:tid 1428] [remote 40.77.167.78:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 78.167.77.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantsfans.net"] [uri "/message_board/index.php"] [unique_id "apK-rGjCPtor9NZ-byQRMwAGiUY"]
[Sat Aug 29 05:12:44.331979 2026] [security2:error] [pid 60333:tid 60576] [client 195.178.110.247:27774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.matsuvaccinecoalition.org"] [uri "/index.php"] [unique_id "apK-rDwSHPvvQcBSRbseQgAAAfo"]
[Sat Aug 29 05:12:44.333842 2026] [security2:error] [pid 1321:tid 1529] [client 20.104.18.15:16598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/5PJcpMFsD8B.php"] [unique_id "apK-rGjCPtor9NZ-byQRNAAABmU"]
[Sat Aug 29 05:12:44.334701 2026] [security2:error] [pid 60333:tid 60555] [client 52.139.37.240:32168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/asw.php"] [unique_id "apK-rDwSHPvvQcBSRbseQwAAAeU"]
[Sat Aug 29 05:12:44.343090 2026] [security2:error] [pid 1321:tid 1557] [client 20.63.219.114:18837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/NewFile.php"] [unique_id "apK-rGjCPtor9NZ-byQRNQAABoA"]
[Sat Aug 29 05:12:44.353989 2026] [security2:error] [pid 60333:tid 60587] [client 20.196.209.81:1397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/Js.php"] [unique_id "apK-rDwSHPvvQcBSRbseRwAAAgU"]
[Sat Aug 29 05:12:44.357825 2026] [security2:error] [pid 1321:tid 1499] [client 20.104.18.15:5096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/classwithtostring.php"] [unique_id "apK-rGjCPtor9NZ-byQRNgAABkc"]
[Sat Aug 29 05:12:44.374118 2026] [security2:error] [pid 1321:tid 1561] [client 20.48.251.3:38615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/v2.php"] [unique_id "apK-rGjCPtor9NZ-byQRNwAABoQ"]
[Sat Aug 29 05:12:44.396649 2026] [security2:error] [pid 60333:tid 60596] [client 20.104.18.15:17030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/abcd.php"] [unique_id "apK-rDwSHPvvQcBSRbseSAAAAg4"]
[Sat Aug 29 05:12:44.414230 2026] [security2:error] [pid 60333:tid 60558] [client 20.240.128.207:25581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-includes/index.php"] [unique_id "apK-rDwSHPvvQcBSRbseSwAAAeg"]
[Sat Aug 29 05:12:44.448334 2026] [security2:error] [pid 60333:tid 60512] [client 52.139.37.240:1900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.sf-andrei.com"] [uri "/contentloader1.php"] [unique_id "apK-rDwSHPvvQcBSRbseUAAAAbo"]
[Sat Aug 29 05:12:44.464873 2026] [security2:error] [pid 60333:tid 60482] [client 20.104.18.15:16619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK-rDwSHPvvQcBSRbseUQAAAZw"]
[Sat Aug 29 05:12:44.467336 2026] [security2:error] [pid 1321:tid 1565] [client 20.48.250.41:25352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/xr.php"] [unique_id "apK-rGjCPtor9NZ-byQROQAABog"]
[Sat Aug 29 05:12:44.468110 2026] [security2:error] [pid 1321:tid 1547] [client 20.197.61.180:19714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thatsaturdaythang.lifesosweet.com"] [uri "/wp-admin/wp-cron.php"] [unique_id "apK-rGjCPtor9NZ-byQROgAABnY"]
[Sat Aug 29 05:12:44.468413 2026] [security2:error] [pid 60333:tid 60559] [client 158.23.184.117:51080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/wp-admin/maint.php"] [unique_id "apK-rDwSHPvvQcBSRbseUgAAAek"]
[Sat Aug 29 05:12:44.478288 2026] [security2:error] [pid 1321:tid 1594] [client 20.196.209.81:20894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/alfa.php"] [unique_id "apK-rGjCPtor9NZ-byQRPQAABqU"]
[Sat Aug 29 05:12:44.479566 2026] [security2:error] [pid 60333:tid 60568] [client 20.196.209.81:9317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/global.php"] [unique_id "apK-rDwSHPvvQcBSRbseWAAAAfI"]
[Sat Aug 29 05:12:44.481044 2026] [security2:error] [pid 1321:tid 1490] [client 20.48.250.41:39919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "apK-rGjCPtor9NZ-byQRPgAABj4"]
[Sat Aug 29 05:12:44.485184 2026] [security2:error] [pid 1321:tid 1517] [client 106.222.207.18:16087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.207.222.106.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "doctoranddog.com"] [uri "/xmlrpc.php"] [unique_id "apK-rGjCPtor9NZ-byQRQQAABlk"]
[Sat Aug 29 05:12:44.485296 2026] [security2:error] [pid 1321:tid 1517] [client 106.222.207.18:16087] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "doctoranddog.com"] [uri "/xmlrpc.php"] [unique_id "apK-rGjCPtor9NZ-byQRQQAABlk"]
[Sat Aug 29 05:12:44.493044 2026] [security2:error] [pid 1321:tid 1502] [client 195.178.110.247:58822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.matsuvaccinecoalition.org"] [uri "/index.php"] [unique_id "apK-rGjCPtor9NZ-byQRQwAABko"]
[Sat Aug 29 05:12:44.511501 2026] [security2:error] [pid 60333:tid 60591] [client 20.104.104.62:21412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-admin/css/mailer.php.php"] [unique_id "apK-rDwSHPvvQcBSRbseXQAAAgk"]
[Sat Aug 29 05:12:44.514676 2026] [security2:error] [pid 60333:tid 60477] [client 20.48.251.3:38552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/cli_bootstrap.php"] [unique_id "apK-rDwSHPvvQcBSRbseXgAAAZc"]
[Sat Aug 29 05:12:44.515264 2026] [security2:error] [pid 1321:tid 1489] [client 197.219.150.206:63601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK-rGjCPtor9NZ-byQRRAAABj0"]
[Sat Aug 29 05:12:44.515345 2026] [security2:error] [pid 1321:tid 1489] [client 197.219.150.206:63601] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK-rGjCPtor9NZ-byQRRAAABj0"]
[Sat Aug 29 05:12:44.521423 2026] [security2:error] [pid 60333:tid 60567] [client 20.104.49.130:63614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/t.php"] [unique_id "apK-rDwSHPvvQcBSRbseXwAAAfE"]
[Sat Aug 29 05:12:44.523601 2026] [security2:error] [pid 60333:tid 60484] [client 20.104.18.15:5059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apK-rDwSHPvvQcBSRbseYAAAAZ4"]
[Sat Aug 29 05:12:44.526437 2026] [security2:error] [pid 60333:tid 60531] [client 52.139.37.240:32094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/item.php"] [unique_id "apK-rDwSHPvvQcBSRbseYQAAAc0"]
[Sat Aug 29 05:12:44.528572 2026] [security2:error] [pid 60333:tid 60523] [client 20.104.18.15:17095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/nofile.php"] [unique_id "apK-rDwSHPvvQcBSRbseYgAAAcU"]
[Sat Aug 29 05:12:44.550397 2026] [security2:error] [pid 60333:tid 60533] [client 158.23.147.79:31692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carpevictoriam.com"] [uri "/file.php"] [unique_id "apK-rDwSHPvvQcBSRbseYwAAAc8"]
[Sat Aug 29 05:12:44.573615 2026] [security2:error] [pid 60333:tid 60521] [client 74.248.24.12:31914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/admin/function.php"] [unique_id "apK-rDwSHPvvQcBSRbseZAAAAcM"]
[Sat Aug 29 05:12:44.578805 2026] [security2:error] [pid 1321:tid 1598] [client 4.205.62.107:59116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/aws_keys.php"] [unique_id "apK-rGjCPtor9NZ-byQRRgAABqk"]
[Sat Aug 29 05:12:44.602797 2026] [security2:error] [pid 1321:tid 1580] [client 20.151.200.44:27296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/7h.php"] [unique_id "apK-rGjCPtor9NZ-byQRRwAABpc"]
[Sat Aug 29 05:12:44.604395 2026] [security2:error] [pid 60333:tid 60582] [client 106.216.114.82:35146] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "utahtsa.com"] [uri "/xmlrpc.php"] [unique_id "apK-rDwSHPvvQcBSRbseWwAAAgA"]
[Sat Aug 29 05:12:44.604463 2026] [security2:error] [pid 1321:tid 1506] [client 20.104.18.15:16581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/wsd.php"] [unique_id "apK-rGjCPtor9NZ-byQRSAAABk4"]
[Sat Aug 29 05:12:44.605021 2026] [security2:error] [pid 60333:tid 60584] [client 158.23.184.117:37133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/wp-admin/css/admin.php"] [unique_id "apK-rDwSHPvvQcBSRbseZQAAAgI"]
[Sat Aug 29 05:12:44.611367 2026] [security2:error] [pid 1321:tid 1596] [client 65.21.113.248:39286] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.babyboomerscare.com"] [uri "/"] [unique_id "apK-rGjCPtor9NZ-byQRSQAABqc"]
[Sat Aug 29 05:12:44.615936 2026] [security2:error] [pid 60333:tid 60475] [client 158.158.54.35:37176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/bi.php"] [unique_id "apK-rDwSHPvvQcBSRbseZwAAAZU"]
[Sat Aug 29 05:12:44.615955 2026] [security2:error] [pid 60333:tid 60577] [client 158.23.184.117:1462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/wp-includes/num.php"] [unique_id "apK-rDwSHPvvQcBSRbseaAAAAfs"]
[Sat Aug 29 05:12:44.618847 2026] [security2:error] [pid 1321:tid 1523] [client 20.151.200.44:55680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/ws66.php"] [unique_id "apK-rGjCPtor9NZ-byQRSgAABl8"]
[Sat Aug 29 05:12:44.627725 2026] [security2:error] [pid 60333:tid 60592] [client 20.48.250.41:25410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/h02ugyh.php"] [unique_id "apK-rDwSHPvvQcBSRbseaQAAAgo"]
[Sat Aug 29 05:12:44.633344 2026] [security2:error] [pid 60333:tid 60590] [client 20.48.250.41:39892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/motu.php"] [unique_id "apK-rDwSHPvvQcBSRbsebAAAAgg"]
[Sat Aug 29 05:12:44.639043 2026] [security2:error] [pid 1321:tid 1609] [client 68.155.159.216:38099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK-rGjCPtor9NZ-byQRSwAABrQ"]
[Sat Aug 29 05:12:44.644642 2026] [security2:error] [pid 1321:tid 1542] [client 20.48.251.3:38627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/wander.php"] [unique_id "apK-rGjCPtor9NZ-byQRTAAABnI"]
[Sat Aug 29 05:12:44.649489 2026] [security2:error] [pid 1321:tid 1497] [client 20.104.18.15:5002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/5PJcpMFsD8B.php"] [unique_id "apK-rGjCPtor9NZ-byQRTQAABkU"]
[Sat Aug 29 05:12:44.660590 2026] [security2:error] [pid 60333:tid 60511] [client 52.139.37.240:1886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.sf-andrei.com"] [uri "/upfile.php"] [unique_id "apK-rDwSHPvvQcBSRbsecQAAAbk"]
[Sat Aug 29 05:12:44.666379 2026] [security2:error] [pid 1321:tid 1582] [client 158.23.147.79:14099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK-rGjCPtor9NZ-byQRUAAABpk"]
[Sat Aug 29 05:12:44.671898 2026] [security2:error] [pid 1321:tid 1519] [client 4.205.62.107:6112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/ms-edit.php"] [unique_id "apK-rGjCPtor9NZ-byQRUQAABls"]
[Sat Aug 29 05:12:44.685991 2026] [security2:error] [pid 60333:tid 60501] [client 20.104.18.15:17042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/run.php"] [unique_id "apK-rDwSHPvvQcBSRbsecwAAAa8"]
[Sat Aug 29 05:12:44.716213 2026] [security2:error] [pid 1321:tid 1508] [client 20.220.204.93:18693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/0x0x.php"] [unique_id "apK-rGjCPtor9NZ-byQRUwAABlA"]
[Sat Aug 29 05:12:44.717129 2026] [security2:error] [pid 60333:tid 60513] [client 52.139.37.240:32068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/jga.php"] [unique_id "apK-rDwSHPvvQcBSRbsedQAAAbs"]
[Sat Aug 29 05:12:44.731419 2026] [security2:error] [pid 60333:tid 60514] [client 158.158.54.35:24311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/mini.php"] [unique_id "apK-rDwSHPvvQcBSRbsedgAAAbw"]
[Sat Aug 29 05:12:44.735501 2026] [security2:error] [pid 60333:tid 60481] [client 20.52.41.200:2726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-cron.php"] [unique_id "apK-rDwSHPvvQcBSRbsedwAAAZs"]
[Sat Aug 29 05:12:44.738185 2026] [security2:error] [pid 60333:tid 60553] [client 68.155.159.216:43927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.theenprogroup.com"] [uri "/.well-known/index.php"] [unique_id "apK-rDwSHPvvQcBSRbseeAAAAeM"]
[Sat Aug 29 05:12:44.744395 2026] [security2:error] [pid 60333:tid 60479] [client 20.104.18.15:16535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/bulet.php"] [unique_id "apK-rDwSHPvvQcBSRbseeQAAAZk"]
[Sat Aug 29 05:12:44.761542 2026] [security2:error] [pid 1321:tid 1610] [client 158.23.184.117:1455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/identity.php"] [unique_id "apK-rGjCPtor9NZ-byQRVAAABrU"]
[Sat Aug 29 05:12:44.770008 2026] [security2:error] [pid 1321:tid 1491] [client 158.23.184.117:63440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/bthil.php"] [unique_id "apK-rGjCPtor9NZ-byQRVQAABj8"]
[Sat Aug 29 05:12:44.773254 2026] [security2:error] [pid 60333:tid 60472] [client 20.48.251.3:37980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.251.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sonoranspeed.com"] [uri "/ah25.php"] [unique_id "apK-rDwSHPvvQcBSRbsefQAAAZI"]
[Sat Aug 29 05:12:44.782384 2026] [security2:error] [pid 60333:tid 60566] [client 4.205.62.107:64958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/sale.php"] [unique_id "apK-rDwSHPvvQcBSRbsefgAAAfA"]
[Sat Aug 29 05:12:44.786820 2026] [security2:error] [pid 1321:tid 1566] [client 20.48.250.41:25592] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/xxw.php"] [unique_id "apK-rGjCPtor9NZ-byQRVgAABok"]
[Sat Aug 29 05:12:44.799115 2026] [security2:error] [pid 60333:tid 60547] [client 20.196.209.81:20909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/access.php"] [unique_id "apK-rDwSHPvvQcBSRbseggAAAd0"]
[Sat Aug 29 05:12:44.810003 2026] [security2:error] [pid 1321:tid 1555] [client 20.104.49.130:63303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/x1da.php"] [unique_id "apK-rGjCPtor9NZ-byQRWgAABn4"]
[Sat Aug 29 05:12:44.819020 2026] [security2:error] [pid 60333:tid 60541] [client 20.63.219.114:11644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/hello.php"] [unique_id "apK-rDwSHPvvQcBSRbsehgAAAdc"]
[Sat Aug 29 05:12:44.822550 2026] [security2:error] [pid 60333:tid 60555] [client 20.104.18.15:27602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/new.php"] [unique_id "apK-rDwSHPvvQcBSRbseiAAAAeU"]
[Sat Aug 29 05:12:44.826195 2026] [security2:error] [pid 1321:tid 1563] [client 20.63.219.114:11584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/config.php"] [unique_id "apK-rGjCPtor9NZ-byQRXQAABoY"]
[Sat Aug 29 05:12:44.831618 2026] [security2:error] [pid 1321:tid 1501] [client 20.104.18.15:5009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apK-rGjCPtor9NZ-byQRXgAABkk"]
[Sat Aug 29 05:12:44.854428 2026] [security2:error] [pid 60333:tid 60494] [client 52.139.37.240:1407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.sf-andrei.com"] [uri "/form.php"] [unique_id "apK-rDwSHPvvQcBSRbsejAAAAag"]
[Sat Aug 29 05:12:44.861528 2026] [security2:error] [pid 1321:tid 1584] [client 20.104.49.130:55136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mcerta.com"] [uri "/dehnl.php"] [unique_id "apK-rGjCPtor9NZ-byQRXwAABps"]
[Sat Aug 29 05:12:44.872479 2026] [security2:error] [pid 60333:tid 60520] [client 68.155.159.216:21463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK-rDwSHPvvQcBSRbsejQAAAcI"]
[Sat Aug 29 05:12:44.877526 2026] [security2:error] [pid 1321:tid 1615] [client 20.104.18.15:16637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/av.php"] [unique_id "apK-rGjCPtor9NZ-byQRYAAABro"]
[Sat Aug 29 05:12:44.908840 2026] [security2:error] [pid 1321:tid 1526] [client 20.196.209.81:9311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/update.php"] [unique_id "apK-rGjCPtor9NZ-byQRYQAABmI"]
[Sat Aug 29 05:12:44.909351 2026] [security2:error] [pid 60333:tid 60569] [client 52.139.37.240:32102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/mac.php"] [unique_id "apK-rDwSHPvvQcBSRbsekAAAAfM"]
[Sat Aug 29 05:12:44.909569 2026] [access_compat:error] [pid 60333:tid 60476] [client 67.20.76.220:38462] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:12:44.914170 2026] [security2:error] [pid 60333:tid 60487] [client 20.240.128.207:2095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-admin/a.php"] [unique_id "apK-rDwSHPvvQcBSRbsekQAAAaE"]
[Sat Aug 29 05:12:44.917132 2026] [security2:error] [pid 60333:tid 60558] [client 158.23.184.117:50727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/file.php"] [unique_id "apK-rDwSHPvvQcBSRbsekgAAAeg"]
[Sat Aug 29 05:12:44.938211 2026] [security2:error] [pid 1321:tid 1573] [client 20.48.250.41:25467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/bolt.php"] [unique_id "apK-rGjCPtor9NZ-byQRYwAABpA"]
[Sat Aug 29 05:12:44.945053 2026] [security2:error] [pid 1321:tid 1525] [client 20.196.209.81:20892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/feed-rss2-queue.php"] [unique_id "apK-rGjCPtor9NZ-byQRZAAABmE"]
[Sat Aug 29 05:12:44.949386 2026] [security2:error] [pid 60333:tid 60474] [client 20.48.250.41:39863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/Ov-Simple1.php"] [unique_id "apK-rDwSHPvvQcBSRbselAAAAZQ"]
[Sat Aug 29 05:12:44.962868 2026] [security2:error] [pid 60333:tid 60585] [client 20.104.18.15:17100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/inx.php"] [unique_id "apK-rDwSHPvvQcBSRbselgAAAgM"]
[Sat Aug 29 05:12:44.977335 2026] [security2:error] [pid 1321:tid 1595] [client 20.197.61.180:8780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-configs.php"] [unique_id "apK-rGjCPtor9NZ-byQRZgAABqY"]
[Sat Aug 29 05:12:44.977791 2026] [security2:error] [pid 60333:tid 60557] [client 20.104.18.15:5098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/wsd.php"] [unique_id "apK-rDwSHPvvQcBSRbsemAAAAec"]
[Sat Aug 29 05:12:44.979758 2026] [security2:error] [pid 60333:tid 60560] [client 158.23.184.117:51095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/Radio.php"] [unique_id "apK-rDwSHPvvQcBSRbsemQAAAeo"]
[Sat Aug 29 05:12:44.996627 2026] [security2:error] [pid 60333:tid 60429] [remote 34.138.144.127:57618] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "cpcalendars.scubaetcfl.com"] [uri "/@fs/proc/self/environ"] [unique_id "apK-rDwSHPvvQcBSRbsemwABzFo"]
[Sat Aug 29 05:12:45.029752 2026] [security2:error] [pid 60333:tid 60588] [client 20.104.18.15:16633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/images.php"] [unique_id "apK-rTwSHPvvQcBSRbsengAAAgY"]
[Sat Aug 29 05:12:45.047843 2026] [security2:error] [pid 1321:tid 1543] [client 52.139.37.240:1394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.sf-andrei.com"] [uri "/wp-sigunq.php"] [unique_id "apK-rWjCPtor9NZ-byQRZwAABnM"]
[Sat Aug 29 05:12:45.051819 2026] [security2:error] [pid 1321:tid 1613] [client 20.104.104.62:40233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-includes/css/mailer.php.php"] [unique_id "apK-rWjCPtor9NZ-byQRaAAABrg"]
[Sat Aug 29 05:12:45.062800 2026] [security2:error] [pid 60333:tid 60591] [client 158.23.184.117:52565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/lock360.php"] [unique_id "apK-rTwSHPvvQcBSRbsenwAAAgk"]
[Sat Aug 29 05:12:45.063133 2026] [security2:error] [pid 60333:tid 60574] [client 158.158.54.35:20703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/cc.php"] [unique_id "apK-rTwSHPvvQcBSRbseoAAAAfg"]
[Sat Aug 29 05:12:45.070590 2026] [security2:error] [pid 60333:tid 60489] [client 20.48.250.41:25579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/rtx.php"] [unique_id "apK-rTwSHPvvQcBSRbseoQAAAaM"]
[Sat Aug 29 05:12:45.082030 2026] [security2:error] [pid 60333:tid 60559] [client 74.248.24.12:36037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/admin/index.php"] [unique_id "apK-rTwSHPvvQcBSRbseogAAAek"]
[Sat Aug 29 05:12:45.094874 2026] [security2:error] [pid 60333:tid 60567] [client 20.104.18.15:27563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/vpn.php"] [unique_id "apK-rTwSHPvvQcBSRbseowAAAfE"]
[Sat Aug 29 05:12:45.103656 2026] [security2:error] [pid 60333:tid 60484] [client 4.205.62.107:61713] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/hochladen.form.php"] [unique_id "apK-rTwSHPvvQcBSRbsepAAAAZ4"]
[Sat Aug 29 05:12:45.113408 2026] [security2:error] [pid 60333:tid 60488] [client 52.139.37.240:32074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/wp-admin/images/index.php"] [unique_id "apK-rTwSHPvvQcBSRbsepgAAAaI"]
[Sat Aug 29 05:12:45.114207 2026] [security2:error] [pid 1321:tid 1609] [client 20.48.250.41:39856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/wp-blogs.php"] [unique_id "apK-rWjCPtor9NZ-byQRagAABrQ"]
[Sat Aug 29 05:12:45.138163 2026] [security2:error] [pid 1321:tid 1522] [client 4.205.62.107:60322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/api.php"] [unique_id "apK-rWjCPtor9NZ-byQRbAAABl4"]
[Sat Aug 29 05:12:45.161998 2026] [security2:error] [pid 60333:tid 60492] [client 158.23.147.79:64439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/atomlib.php"] [unique_id "apK-rTwSHPvvQcBSRbseqAAAAaY"]
[Sat Aug 29 05:12:45.174239 2026] [security2:error] [pid 1321:tid 1497] [client 158.23.147.79:39150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/mah.php"] [unique_id "apK-rWjCPtor9NZ-byQRbgAABkU"]
[Sat Aug 29 05:12:45.178380 2026] [security2:error] [pid 60333:tid 60570] [client 158.23.147.79:24558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK-rTwSHPvvQcBSRbseqQAAAfQ"]
[Sat Aug 29 05:12:45.178987 2026] [security2:error] [pid 1321:tid 1590] [client 158.23.184.117:1429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/wp-includes/Requests/Exception/file.php"] [unique_id "apK-rWjCPtor9NZ-byQRbwAABqE"]
[Sat Aug 29 05:12:45.179638 2026] [security2:error] [pid 1321:tid 1498] [client 158.158.54.35:22443] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/aa.php"] [unique_id "apK-rWjCPtor9NZ-byQRcAAABkY"]
[Sat Aug 29 05:12:45.180709 2026] [security2:error] [pid 60333:tid 60549] [client 20.104.18.15:16605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/ops.php"] [unique_id "apK-rTwSHPvvQcBSRbseqgAAAd8"]
[Sat Aug 29 05:12:45.182188 2026] [security2:error] [pid 60333:tid 60571] [client 20.197.61.180:3331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thatsaturdaythang.lifesosweet.com"] [uri "/wp-admin/wp-links-opml.php"] [unique_id "apK-rTwSHPvvQcBSRbseqwAAAfU"]
[Sat Aug 29 05:12:45.186331 2026] [security2:error] [pid 60333:tid 60550] [client 68.155.159.216:55052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.angelesforestranch.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK-rTwSHPvvQcBSRbserAAAAeA"]
[Sat Aug 29 05:12:45.193512 2026] [security2:error] [pid 1321:tid 1598] [client 20.196.209.81:2002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/classsmtps.php"] [unique_id "apK-rWjCPtor9NZ-byQRcQAABqk"]
[Sat Aug 29 05:12:45.193732 2026] [security2:error] [pid 1321:tid 1489] [client 20.52.41.200:2161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-block.php"] [unique_id "apK-rWjCPtor9NZ-byQRcgAABj0"]
[Sat Aug 29 05:12:45.210132 2026] [security2:error] [pid 60333:tid 60563] [client 158.23.184.117:50750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/fpwch.php"] [unique_id "apK-rTwSHPvvQcBSRbserQAAAe0"]
[Sat Aug 29 05:12:45.213209 2026] [security2:error] [pid 60333:tid 60538] [client 20.151.200.44:27156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/wp-gzone.php"] [unique_id "apK-rTwSHPvvQcBSRbsergAAAdQ"]
[Sat Aug 29 05:12:45.214395 2026] [security2:error] [pid 60333:tid 60477] [client 20.63.219.114:1879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/22.php"] [unique_id "apK-rTwSHPvvQcBSRbserwAAAZc"]
[Sat Aug 29 05:12:45.231615 2026] [security2:error] [pid 1321:tid 1597] [client 20.48.250.41:25598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/ckk.php"] [unique_id "apK-rWjCPtor9NZ-byQRdwAABqg"]
[Sat Aug 29 05:12:45.243730 2026] [security2:error] [pid 60333:tid 60589] [client 52.139.37.240:51286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.sf-andrei.com"] [uri "/07.php"] [unique_id "apK-rTwSHPvvQcBSRbsesAAAAgc"]
[Sat Aug 29 05:12:45.244646 2026] [security2:error] [pid 60333:tid 60590] [client 20.104.18.15:27600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/shiny.php"] [unique_id "apK-rTwSHPvvQcBSRbsesQAAAgg"]
[Sat Aug 29 05:12:45.245627 2026] [security2:error] [pid 60333:tid 60507] [client 20.63.219.114:1902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/fi2.php"] [unique_id "apK-rTwSHPvvQcBSRbsesgAAAbU"]
[Sat Aug 29 05:12:45.250942 2026] [security2:error] [pid 60333:tid 60486] [client 20.220.204.93:9737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/166.php"] [unique_id "apK-rTwSHPvvQcBSRbseswAAAaA"]
[Sat Aug 29 05:12:45.255396 2026] [security2:error] [pid 60333:tid 60561] [client 4.205.62.107:63286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/fleen.php"] [unique_id "apK-rTwSHPvvQcBSRbsetAAAAes"]
[Sat Aug 29 05:12:45.255894 2026] [security2:error] [pid 60333:tid 60501] [client 20.48.250.41:39777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/mini.php"] [unique_id "apK-rTwSHPvvQcBSRbsetQAAAa8"]
[Sat Aug 29 05:12:45.285084 2026] [security2:error] [pid 1321:tid 1610] [client 4.205.62.107:6798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "azntrack.nlvn.net"] [uri "/wp-act.php"] [unique_id "apK-rWjCPtor9NZ-byQRewAABrU"]
[Sat Aug 29 05:12:45.306425 2026] [security2:error] [pid 1321:tid 1548] [client 20.104.49.130:46199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.jacintoastiazaran.com"] [uri "/fs.php"] [unique_id "apK-rWjCPtor9NZ-byQRfAAABnc"]
[Sat Aug 29 05:12:45.308902 2026] [security2:error] [pid 60333:tid 60551] [client 52.139.37.240:32148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/wp-admin/includes/index.php"] [unique_id "apK-rTwSHPvvQcBSRbsetgAAAeE"]
[Sat Aug 29 05:12:45.309525 2026] [security2:error] [pid 60333:tid 60539] [client 158.23.147.79:50138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/wp-admin/includes/index.php"] [unique_id "apK-rTwSHPvvQcBSRbsetwAAAdU"]
[Sat Aug 29 05:12:45.318822 2026] [security2:error] [pid 60333:tid 60469] [client 20.104.18.15:16615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/coffexium.php"] [unique_id "apK-rTwSHPvvQcBSRbseuAAAAY8"]
[Sat Aug 29 05:12:45.321224 2026] [security2:error] [pid 60333:tid 60580] [client 20.196.209.81:10002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/blog.php"] [unique_id "apK-rTwSHPvvQcBSRbseuQAAAf4"]
[Sat Aug 29 05:12:45.329232 2026] [security2:error] [pid 60333:tid 60495] [client 20.104.18.15:5015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/bulet.php"] [unique_id "apK-rTwSHPvvQcBSRbseuwAAAak"]
[Sat Aug 29 05:12:45.332869 2026] [security2:error] [pid 1321:tid 1581] [client 60.243.207.176:49833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK-rWjCPtor9NZ-byQRfgAABpg"]
[Sat Aug 29 05:12:45.332986 2026] [security2:error] [pid 1321:tid 1581] [client 60.243.207.176:49833] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK-rWjCPtor9NZ-byQRfgAABpg"]
[Sat Aug 29 05:12:45.337570 2026] [security2:error] [pid 60333:tid 60594] [client 68.155.159.216:64073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/nf_tracking.php"] [unique_id "apK-rTwSHPvvQcBSRbsevAAAAgw"]
[Sat Aug 29 05:12:45.344639 2026] [security2:error] [pid 1321:tid 1507] [client 20.196.209.81:1382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/inputs.php"] [unique_id "apK-rWjCPtor9NZ-byQRfwAABk8"]
[Sat Aug 29 05:12:45.358492 2026] [security2:error] [pid 60333:tid 60509] [client 158.23.184.117:50712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/storage/index.php"] [unique_id "apK-rTwSHPvvQcBSRbsevQAAAbc"]
[Sat Aug 29 05:12:45.361566 2026] [security2:error] [pid 60333:tid 60546] [client 65.21.113.248:41758] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.babyboomerscare.com"] [uri "/index.php"] [unique_id "apK-rTwSHPvvQcBSRbsepQAAAdw"]
[Sat Aug 29 05:12:45.365842 2026] [security2:error] [pid 60333:tid 60547] [client 68.155.159.216:43911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/login.php"] [unique_id "apK-rTwSHPvvQcBSRbsevgAAAd0"]
[Sat Aug 29 05:12:45.378698 2026] [security2:error] [pid 60333:tid 60497] [client 20.104.18.15:17035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/goods.php"] [unique_id "apK-rTwSHPvvQcBSRbsevwAAAas"]
[Sat Aug 29 05:12:45.378731 2026] [security2:error] [pid 60333:tid 60499] [client 4.205.62.107:63412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/log.php"] [unique_id "apK-rTwSHPvvQcBSRbsewAAAAa0"]
[Sat Aug 29 05:12:45.380728 2026] [security2:error] [pid 60333:tid 60575] [client 158.23.184.117:1459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/wp-admin/add.php"] [unique_id "apK-rTwSHPvvQcBSRbsewQAAAfk"]
[Sat Aug 29 05:12:45.382993 2026] [security2:error] [pid 1321:tid 1499] [client 20.48.250.41:25439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bookclubbin.com"] [uri "/R57.php"] [unique_id "apK-rWjCPtor9NZ-byQRgQAABkc"]
[Sat Aug 29 05:12:45.451044 2026] [security2:error] [pid 1321:tid 1516] [client 20.104.104.62:20815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-admin/mailer.php"] [unique_id "apK-rWjCPtor9NZ-byQRhAAABlg"]
[Sat Aug 29 05:12:45.455918 2026] [security2:error] [pid 60333:tid 60564] [client 52.139.37.240:1355] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "cpanel.sf-andrei.com"] [uri "/c99.php"] [unique_id "apK-rTwSHPvvQcBSRbsexAAAAe4"]
[Sat Aug 29 05:12:45.456696 2026] [security2:error] [pid 60333:tid 60493] [client 20.48.250.41:39786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/amp.php"] [unique_id "apK-rTwSHPvvQcBSRbsexQAAAac"]
[Sat Aug 29 05:12:45.461585 2026] [security2:error] [pid 60333:tid 60487] [client 20.104.18.15:4949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/av.php"] [unique_id "apK-rTwSHPvvQcBSRbsexgAAAaE"]
[Sat Aug 29 05:12:45.482664 2026] [security2:error] [pid 60333:tid 60552] [client 20.104.18.15:16638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/BDKR28WP.php"] [unique_id "apK-rTwSHPvvQcBSRbsexwAAAeI"]
[Sat Aug 29 05:12:45.490396 2026] [fcgid:warn] [pid 1321:tid 1547] (70014)End of file found: [client 66.132.186.159:24212] mod_fcgid: can't get data from http client
[Sat Aug 29 05:12:45.511497 2026] [security2:error] [pid 60333:tid 60518] [client 158.158.54.35:5071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/files/index.php"] [unique_id "apK-rTwSHPvvQcBSRbseyQAAAcA"]
[Sat Aug 29 05:12:45.516136 2026] [security2:error] [pid 1321:tid 1563] [client 52.139.37.240:32089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/zafir1.php"] [unique_id "apK-rWjCPtor9NZ-byQRhgAABoY"]
[Sat Aug 29 05:12:45.523441 2026] [security2:error] [pid 1321:tid 1573] [client 20.104.18.15:17048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/alfa.php"] [unique_id "apK-rWjCPtor9NZ-byQRhwAABpA"]
[Sat Aug 29 05:12:45.526112 2026] [security2:error] [pid 1321:tid 1584] [client 158.23.184.117:1460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/wp-includes/assets/about.php"] [unique_id "apK-rWjCPtor9NZ-byQRiAAABps"]
[Sat Aug 29 05:12:45.551703 2026] [security2:error] [pid 60333:tid 60498] [client 20.220.204.93:59643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/h2a2ck.php"] [unique_id "apK-rTwSHPvvQcBSRbseywAAAaw"]
[Sat Aug 29 05:12:45.558469 2026] [security2:error] [pid 60333:tid 60470] [client 158.23.184.117:63445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/wp-includes/blocks/search/index.php"] [unique_id "apK-rTwSHPvvQcBSRbsezAAAAZA"]
[Sat Aug 29 05:12:45.580760 2026] [security2:error] [pid 60333:tid 60534] [client 20.240.128.207:24678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK-rTwSHPvvQcBSRbsezwAAAdA"]
[Sat Aug 29 05:12:45.588097 2026] [security2:error] [pid 60333:tid 60430] [remote 198.54.126.98:42736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.126.54.198.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "strangeworx.com"] [uri "/wp-login.php"] [unique_id "apK-rTwSHPvvQcBSRbsezgABn1s"]
[Sat Aug 29 05:12:45.591088 2026] [security2:error] [pid 60333:tid 60569] [client 20.196.209.81:1378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/contentloader1.php"] [unique_id "apK-rTwSHPvvQcBSRbse1AAAAfM"]
[Sat Aug 29 05:12:45.596081 2026] [security2:error] [pid 1321:tid 1596] [client 195.178.110.247:27778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mattburlick.com"] [uri "/index.php"] [unique_id "apK-rWjCPtor9NZ-byQRkAAABqc"]
[Sat Aug 29 05:12:45.598567 2026] [security2:error] [pid 1321:tid 1576] [client 74.248.24.12:31909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/storage/rip.php"] [unique_id "apK-rWjCPtor9NZ-byQRkQAABpM"]
[Sat Aug 29 05:12:45.601801 2026] [security2:error] [pid 1321:tid 1592] [client 20.104.18.15:5104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/images.php"] [unique_id "apK-rWjCPtor9NZ-byQRkgAABqM"]
[Sat Aug 29 05:12:45.615106 2026] [security2:error] [pid 1321:tid 1565] [client 20.63.219.114:1151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/bak.phps"] [unique_id "apK-rWjCPtor9NZ-byQRkwAABog"]
[Sat Aug 29 05:12:45.615689 2026] [security2:error] [pid 60333:tid 60573] [client 20.63.219.114:13990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/1p.php"] [unique_id "apK-rTwSHPvvQcBSRbse1wAAAfc"]
[Sat Aug 29 05:12:45.615837 2026] [security2:error] [pid 1321:tid 1501] [client 158.158.54.35:22006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/c.php"] [unique_id "apK-rWjCPtor9NZ-byQRlAAABkk"]
[Sat Aug 29 05:12:45.620693 2026] [security2:error] [pid 60333:tid 60559] [client 20.104.18.15:16612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/sf.php"] [unique_id "apK-rTwSHPvvQcBSRbse2AAAAek"]
[Sat Aug 29 05:12:45.647600 2026] [security2:error] [pid 1321:tid 1526] [client 20.52.41.200:2217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-includes/fonts/admin.php"] [unique_id "apK-rWjCPtor9NZ-byQRlgAABmI"]
[Sat Aug 29 05:12:45.647770 2026] [security2:error] [pid 60333:tid 60591] [client 52.139.37.240:1904] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "cpanel.sf-andrei.com"] [uri "/c99.php"] [unique_id "apK-rTwSHPvvQcBSRbse2gAAAgk"]
[Sat Aug 29 05:12:45.669271 2026] [security2:error] [pid 60333:tid 60521] [client 20.104.18.15:27614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/33.php"] [unique_id "apK-rTwSHPvvQcBSRbse2wAAAcM"]
[Sat Aug 29 05:12:45.674096 2026] [security2:error] [pid 1321:tid 1582] [client 158.23.147.79:31625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carpevictoriam.com"] [uri "/file17.php"] [unique_id "apK-rWjCPtor9NZ-byQRmgAABpk"]
[Sat Aug 29 05:12:45.676294 2026] [security2:error] [pid 1321:tid 1489] [client 20.48.250.41:39788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/cc13.php"] [unique_id "apK-rWjCPtor9NZ-byQRnAAABj0"]
[Sat Aug 29 05:12:45.689865 2026] [security2:error] [pid 1321:tid 1583] [client 20.197.61.180:3658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-conflg.php"] [unique_id "apK-rWjCPtor9NZ-byQRngAABpo"]
[Sat Aug 29 05:12:45.704660 2026] [security2:error] [pid 60333:tid 60492] [client 158.23.184.117:50711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/wp-signup.php"] [unique_id "apK-rTwSHPvvQcBSRbse5gAAAaY"]
[Sat Aug 29 05:12:45.715107 2026] [security2:error] [pid 60333:tid 60533] [client 52.139.37.240:32093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/abc.php"] [unique_id "apK-rTwSHPvvQcBSRbse5wAAAc8"]
[Sat Aug 29 05:12:45.717768 2026] [security2:error] [pid 60333:tid 60577] [client 4.205.62.107:27731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/umgebung.php"] [unique_id "apK-rTwSHPvvQcBSRbse6AAAAfs"]
[Sat Aug 29 05:12:45.720287 2026] [security2:error] [pid 60333:tid 60562] [client 197.232.63.170:54388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 170.63.232.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK-rTwSHPvvQcBSRbse6QAAAew"]
[Sat Aug 29 05:12:45.720351 2026] [security2:error] [pid 60333:tid 60562] [client 197.232.63.170:54388] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK-rTwSHPvvQcBSRbse6QAAAew"]
[Sat Aug 29 05:12:45.723532 2026] [security2:error] [pid 1321:tid 1532] [client 158.23.184.117:1410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/wp-content/themes/twentytwentythree.php"] [unique_id "apK-rWjCPtor9NZ-byQRnwAABmg"]
[Sat Aug 29 05:12:45.727998 2026] [security2:error] [pid 1321:tid 1580] [client 20.196.209.81:5055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/bypass.php"] [unique_id "apK-rWjCPtor9NZ-byQRoAAABpc"]
[Sat Aug 29 05:12:45.735928 2026] [security2:error] [pid 60333:tid 60477] [client 20.104.18.15:5030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/ops.php"] [unique_id "apK-rTwSHPvvQcBSRbse6wAAAZc"]
[Sat Aug 29 05:12:45.737690 2026] [security2:error] [pid 60333:tid 60555] [client 61.9.8.139:32593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK-rTwSHPvvQcBSRbse6gAAAeU"]
[Sat Aug 29 05:12:45.737861 2026] [security2:error] [pid 60333:tid 60555] [client 61.9.8.139:32593] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK-rTwSHPvvQcBSRbse6gAAAeU"]
[Sat Aug 29 05:12:45.745974 2026] [security2:error] [pid 60333:tid 60574] [client 195.178.110.247:58838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.110.178.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mattburlick.com"] [uri "/index.php"] [unique_id "apK-rTwSHPvvQcBSRbse7AAAAfg"]
[Sat Aug 29 05:12:45.752063 2026] [security2:error] [pid 60333:tid 60589] [client 20.104.18.15:16522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/k.php"] [unique_id "apK-rTwSHPvvQcBSRbse7QAAAgc"]
[Sat Aug 29 05:12:45.757563 2026] [security2:error] [pid 60333:tid 60507] [client 68.155.159.216:38317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-includes/content.php"] [unique_id "apK-rTwSHPvvQcBSRbse7gAAAbU"]
[Sat Aug 29 05:12:45.768072 2026] [security2:error] [pid 1321:tid 1609] [client 20.196.209.81:2022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/class-walker-category-dropdown-class.php"] [unique_id "apK-rWjCPtor9NZ-byQRoQAABrQ"]
[Sat Aug 29 05:12:45.809824 2026] [security2:error] [pid 60333:tid 60514] [client 20.104.18.15:27594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/133.php"] [unique_id "apK-rTwSHPvvQcBSRbse7wAAAbw"]
[Sat Aug 29 05:12:45.813684 2026] [security2:error] [pid 60333:tid 60481] [client 4.205.62.107:5505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/lmfi2.php"] [unique_id "apK-rTwSHPvvQcBSRbse8AAAAZs"]
[Sat Aug 29 05:12:45.832912 2026] [security2:error] [pid 1321:tid 1581] [client 67.20.76.220:38488] ModSecurity: Warning. Matched phrase "Harvest" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "harvesthouse.ph"] [uri "/wp-cron.php"] [unique_id "apK-rWjCPtor9NZ-byQRowAABpg"]
[Sat Aug 29 05:12:45.834712 2026] [security2:error] [pid 1321:tid 1507] [client 158.23.147.79:14252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "apK-rWjCPtor9NZ-byQRpQAABk8"]
[Sat Aug 29 05:12:45.844367 2026] [security2:error] [pid 60333:tid 60431] [remote 198.54.126.98:42738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.126.54.198.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "strangeworx.com"] [uri "/wp-login.php"] [unique_id "apK-rTwSHPvvQcBSRbse8QAB1Vw"]
[Sat Aug 29 05:12:45.848227 2026] [security2:error] [pid 60333:tid 60553] [client 68.155.159.216:43996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.theenprogroup.com"] [uri "/wp-content/themes/too.php"] [unique_id "apK-rTwSHPvvQcBSRbse8gAAAeM"]
[Sat Aug 29 05:12:45.851705 2026] [security2:error] [pid 60333:tid 60581] [client 158.23.184.117:50739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/404.php"] [unique_id "apK-rTwSHPvvQcBSRbse8wAAAf8"]
[Sat Aug 29 05:12:45.876308 2026] [security2:error] [pid 60333:tid 60531] [client 20.197.61.180:3798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thatsaturdaythang.lifesosweet.com"] [uri "/wp-admin/wp-load.php"] [unique_id "apK-rTwSHPvvQcBSRbse9QAAAc0"]
[Sat Aug 29 05:12:45.880961 2026] [security2:error] [pid 1321:tid 1516] [client 20.104.18.15:5116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/coffexium.php"] [unique_id "apK-rWjCPtor9NZ-byQRpwAABlg"]
[Sat Aug 29 05:12:45.890953 2026] [access_compat:error] [pid 60333:tid 60483] [client 67.20.76.220:38494] AH01797: client denied by server configuration: /home2/voicexne/public_html/ajayreddy.com/wp-cron.php
[Sat Aug 29 05:12:45.893676 2026] [security2:error] [pid 1321:tid 1615] [client 20.104.18.15:16539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/82.php"] [unique_id "apK-rWjCPtor9NZ-byQRqAAABro"]
[Sat Aug 29 05:12:45.896597 2026] [security2:error] [pid 60333:tid 60501] [client 52.139.37.240:1881] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "cpanel.sf-andrei.com"] [uri "/c99.php"] [unique_id "apK-rTwSHPvvQcBSRbse9wAAAa8"]
[Sat Aug 29 05:12:45.909697 2026] [security2:error] [pid 60333:tid 60547] [client 20.104.49.130:53533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pvillusions.com"] [uri "/forum.php"] [unique_id "apK-rTwSHPvvQcBSRbse-AAAAd0"]
[Sat Aug 29 05:12:45.921570 2026] [access_compat:error] [pid 1321:tid 1563] [client 67.20.76.220:38486] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:12:45.925104 2026] [security2:error] [pid 1321:tid 1561] [client 52.139.37.240:32158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/c1.php"] [unique_id "apK-rWjCPtor9NZ-byQRqwAABoQ"]
[Sat Aug 29 05:12:45.926676 2026] [security2:error] [pid 1321:tid 1502] [client 158.23.184.117:1279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/wp-content/languages/themes/num.php"] [unique_id "apK-rWjCPtor9NZ-byQRrAAABko"]
[Sat Aug 29 05:12:45.926982 2026] [security2:error] [pid 60333:tid 60503] [client 4.205.62.107:64282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/wp-class.php"] [unique_id "apK-rTwSHPvvQcBSRbse-QAAAbE"]
[Sat Aug 29 05:12:45.934248 2026] [security2:error] [pid 1321:tid 1560] [client 20.220.204.93:59606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/error_log.php"] [unique_id "apK-rWjCPtor9NZ-byQRrgAABoM"]
[Sat Aug 29 05:12:45.961238 2026] [security2:error] [pid 1321:tid 1517] [client 20.104.18.15:17060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/sym.php"] [unique_id "apK-rWjCPtor9NZ-byQRrwAABlk"]
[Sat Aug 29 05:12:45.962747 2026] [security2:error] [pid 60333:tid 60554] [client 158.158.54.35:1325] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "dev.charlottevazquez.com"] [uri "/1.php7"] [unique_id "apK-rTwSHPvvQcBSRbse_AAAAeQ"]
[Sat Aug 29 05:12:45.962848 2026] [security2:error] [pid 60333:tid 60554] [client 158.158.54.35:1325] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/1.php7"] [unique_id "apK-rTwSHPvvQcBSRbse_AAAAeQ"]
[Sat Aug 29 05:12:45.977279 2026] [security2:error] [pid 60333:tid 60496] [client 20.151.200.44:27163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/str.php"] [unique_id "apK-rTwSHPvvQcBSRbse_QAAAao"]
[Sat Aug 29 05:12:45.980491 2026] [security2:error] [pid 1321:tid 1523] [client 68.155.159.216:21454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-includes/content.php"] [unique_id "apK-rWjCPtor9NZ-byQRsQAABl8"]
[Sat Aug 29 05:12:45.995915 2026] [security2:error] [pid 1321:tid 1525] [client 158.23.184.117:63439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/as.php"] [unique_id "apK-rWjCPtor9NZ-byQRsgAABmE"]
[Sat Aug 29 05:12:45.999372 2026] [security2:error] [pid 1321:tid 1499] [client 20.196.209.81:14732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/al.php"] [unique_id "apK-rWjCPtor9NZ-byQRswAABkc"]
[Sat Aug 29 05:12:46.023250 2026] [security2:error] [pid 1321:tid 1601] [client 20.104.18.15:16614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/dex.php"] [unique_id "apK-rmjCPtor9NZ-byQRtQAABqw"]
[Sat Aug 29 05:12:46.026450 2026] [security2:error] [pid 60333:tid 60432] [remote 216.73.217.8:40808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 8.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo-store.sortthru.com"] [uri "/signs-and-displays/"] [unique_id "apK-rjwSHPvvQcBSRbse_gABqF0"]
[Sat Aug 29 05:12:46.035866 2026] [security2:error] [pid 60333:tid 60472] [client 20.63.219.114:13961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/Njima.php"] [unique_id "apK-rjwSHPvvQcBSRbse_wAAAZI"]
[Sat Aug 29 05:12:46.043003 2026] [security2:error] [pid 1321:tid 1582] [client 20.151.200.44:55621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/Cok.php"] [unique_id "apK-rmjCPtor9NZ-byQRtwAABpk"]
[Sat Aug 29 05:12:46.045970 2026] [security2:error] [pid 60333:tid 60517] [client 20.104.18.15:5073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/BDKR28WP.php"] [unique_id "apK-rjwSHPvvQcBSRbsfAAAAAb8"]
[Sat Aug 29 05:12:46.048983 2026] [security2:error] [pid 1321:tid 1519] [client 158.23.184.117:44354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/wk/admin.php"] [unique_id "apK-rmjCPtor9NZ-byQRuQAABls"]
[Sat Aug 29 05:12:46.061864 2026] [security2:error] [pid 1321:tid 1573] [client 158.158.54.35:24292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/f.php"] [unique_id "apK-rmjCPtor9NZ-byQRugAABpA"]
[Sat Aug 29 05:12:46.079377 2026] [security2:error] [pid 1321:tid 1526] [client 158.23.184.117:51079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/wp.php"] [unique_id "apK-rmjCPtor9NZ-byQRuwAABmI"]
[Sat Aug 29 05:12:46.082077 2026] [security2:error] [pid 1321:tid 1577] [client 20.240.128.207:25578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.128.240.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.greenfieldperformanceinc.com"] [uri "/wp-admin.php"] [unique_id "apK-rmjCPtor9NZ-byQRvAAABpQ"]
[Sat Aug 29 05:12:46.084303 2026] [access_compat:error] [pid 60333:tid 60482] [client 67.20.76.220:38512] AH01797: client denied by server configuration: /home2/voicexne/public_html/ajayreddy.com/wp-cron.php
[Sat Aug 29 05:12:46.092182 2026] [security2:error] [pid 60333:tid 60505] [client 52.139.37.240:1914] ModSecurity: Access denied with connection close (phase 1). Pattern match "c99\\\\.php|r57shell\\\\.php|r57\\\\.php|c99\\\\.txt" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1164"] [id "900010"] [rev "1"] [msg "c99 variant "] [severity "CRITICAL"] [hostname "cpanel.sf-andrei.com"] [uri "/c99.php"] [unique_id "apK-rjwSHPvvQcBSRbsfAgAAAbM"]
[Sat Aug 29 05:12:46.092544 2026] [security2:error] [pid 60333:tid 60552] [client 20.104.18.15:27632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/8.php"] [unique_id "apK-rjwSHPvvQcBSRbsfBAAAAeI"]
[Sat Aug 29 05:12:46.095654 2026] [security2:error] [pid 60333:tid 60575] [client 20.52.41.200:2749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/m.php"] [unique_id "apK-rjwSHPvvQcBSRbsfBQAAAfk"]
[Sat Aug 29 05:12:46.096469 2026] [security2:error] [pid 1321:tid 1566] [client 158.23.184.117:44504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/admin.php"] [unique_id "apK-rmjCPtor9NZ-byQRvQAABok"]
[Sat Aug 29 05:12:46.100999 2026] [security2:error] [pid 1321:tid 1508] [client 20.48.250.41:39752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/aa.php"] [unique_id "apK-rmjCPtor9NZ-byQRvgAABlA"]
[Sat Aug 29 05:12:46.101660 2026] [security2:error] [pid 1321:tid 1550] [client 20.104.49.130:63589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/echkm.php"] [unique_id "apK-rmjCPtor9NZ-byQRvwAABnk"]
[Sat Aug 29 05:12:46.106133 2026] [security2:error] [pid 60333:tid 60497] [client 74.248.24.12:40205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/zoom1.php"] [unique_id "apK-rjwSHPvvQcBSRbsfBgAAAas"]
[Sat Aug 29 05:12:46.121329 2026] [security2:error] [pid 1321:tid 1583] [client 52.139.37.240:32070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/index.php/feed/atom/"] [unique_id "apK-rmjCPtor9NZ-byQRwgAABpo"]
[Sat Aug 29 05:12:46.126877 2026] [security2:error] [pid 60333:tid 60586] [client 20.196.209.81:5009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/extractable-loader-head.php"] [unique_id "apK-rjwSHPvvQcBSRbsfCAAAAgQ"]
[Sat Aug 29 05:12:46.138807 2026] [security2:error] [pid 60333:tid 60510] [client 158.23.184.117:37130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/php.php"] [unique_id "apK-rjwSHPvvQcBSRbsfCQAAAbg"]
[Sat Aug 29 05:12:46.168132 2026] [security2:error] [pid 1321:tid 1610] [client 20.104.18.15:16523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/inso.php"] [unique_id "apK-rmjCPtor9NZ-byQRxAAABrU"]
[Sat Aug 29 05:12:46.183101 2026] [security2:error] [pid 1321:tid 1613] [client 20.63.219.114:9257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/install.php"] [unique_id "apK-rmjCPtor9NZ-byQRxQAABrg"]
[Sat Aug 29 05:12:46.198842 2026] [security2:error] [pid 1321:tid 1581] [client 20.104.18.15:5000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/sf.php"] [unique_id "apK-rmjCPtor9NZ-byQRxgAABpg"]
[Sat Aug 29 05:12:46.204340 2026] [security2:error] [pid 60333:tid 60560] [client 20.104.104.62:20831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-content/mailer.php"] [unique_id "apK-rjwSHPvvQcBSRbsfDAAAAeo"]
[Sat Aug 29 05:12:46.225830 2026] [security2:error] [pid 60333:tid 60485] [client 158.23.184.117:51075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/xmlrpc.php"] [unique_id "apK-rjwSHPvvQcBSRbsfEAAAAZ8"]
[Sat Aug 29 05:12:46.241275 2026] [security2:error] [pid 60333:tid 60478] [client 20.104.18.15:17059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/goods.php"] [unique_id "apK-rjwSHPvvQcBSRbsfEgAAAZg"]
[Sat Aug 29 05:12:46.242785 2026] [security2:error] [pid 60333:tid 60527] [client 20.196.209.81:14783] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "wagnerfarmscbd.com"] [uri "/1.php7"] [unique_id "apK-rjwSHPvvQcBSRbsfEwAAAck"]
[Sat Aug 29 05:12:46.242853 2026] [security2:error] [pid 60333:tid 60527] [client 20.196.209.81:14783] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/1.php7"] [unique_id "apK-rjwSHPvvQcBSRbsfEwAAAck"]
[Sat Aug 29 05:12:46.244131 2026] [security2:error] [pid 60333:tid 60557] [client 158.23.184.117:44521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/goods.php"] [unique_id "apK-rjwSHPvvQcBSRbsfFAAAAec"]
[Sat Aug 29 05:12:46.247152 2026] [security2:error] [pid 1321:tid 1606] [client 4.205.62.107:63897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/debuggen.php"] [unique_id "apK-rmjCPtor9NZ-byQRyQAABrE"]
[Sat Aug 29 05:12:46.274034 2026] [security2:error] [pid 60333:tid 60484] [client 20.48.250.41:39800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/s1.php"] [unique_id "apK-rjwSHPvvQcBSRbsfFgAAAZ4"]
[Sat Aug 29 05:12:46.281128 2026] [security2:error] [pid 60333:tid 60529] [client 158.23.147.79:64402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/lv.php"] [unique_id "apK-rjwSHPvvQcBSRbsfFwAAAcs"]
[Sat Aug 29 05:12:46.283026 2026] [security2:error] [pid 60333:tid 60536] [client 158.23.184.117:50692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/term.php"] [unique_id "apK-rjwSHPvvQcBSRbsfGAAAAdI"]
[Sat Aug 29 05:12:46.288243 2026] [security2:error] [pid 1321:tid 1584] [client 4.205.62.107:27733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/temp.php"] [unique_id "apK-rmjCPtor9NZ-byQRywAABps"]
[Sat Aug 29 05:12:46.299372 2026] [security2:error] [pid 60333:tid 60504] [client 158.23.147.79:24545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-admin/network/index.php"] [unique_id "apK-rjwSHPvvQcBSRbsfGQAAAbI"]
[Sat Aug 29 05:12:46.305387 2026] [security2:error] [pid 60333:tid 60508] [client 20.104.18.15:16542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/aa.php"] [unique_id "apK-rjwSHPvvQcBSRbsfGgAAAbY"]
[Sat Aug 29 05:12:46.306380 2026] [security2:error] [pid 1321:tid 1514] [client 158.23.147.79:43660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-blog-header.php"] [unique_id "apK-rmjCPtor9NZ-byQRzgAABlY"]
[Sat Aug 29 05:12:46.315105 2026] [security2:error] [pid 60333:tid 60595] [client 52.139.37.240:32099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/root.php"] [unique_id "apK-rjwSHPvvQcBSRbsfGwAAAg0"]
[Sat Aug 29 05:12:46.318654 2026] [security2:error] [pid 60333:tid 60486] [client 202.71.25.11:52965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.25.71.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK-rjwSHPvvQcBSRbsfHAAAAaA"]
[Sat Aug 29 05:12:46.318759 2026] [security2:error] [pid 60333:tid 60486] [client 202.71.25.11:52965] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK-rjwSHPvvQcBSRbsfHAAAAaA"]
[Sat Aug 29 05:12:46.320585 2026] [security2:error] [pid 60333:tid 60550] [client 20.151.200.44:27624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/mega.php"] [unique_id "apK-rjwSHPvvQcBSRbsfHQAAAeA"]
[Sat Aug 29 05:12:46.331373 2026] [security2:error] [pid 60333:tid 60577] [client 20.104.18.15:5012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/k.php"] [unique_id "apK-rjwSHPvvQcBSRbsfHgAAAfs"]
[Sat Aug 29 05:12:46.337633 2026] [core:error] [pid 1321:tid 1490] [client 74.7.230.60:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:46.337651 2026] [core:error] [pid 1321:tid 1490] [client 74.7.230.60:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:46.337801 2026] [security2:error] [pid 1321:tid 1490] [client 74.7.230.60:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "webmail.twrebar.com"] [uri "/___proxy_subdomain_webmail/index.php"] [unique_id "apK-rmjCPtor9NZ-byQRzwAABj4"]
[Sat Aug 29 05:12:46.340542 2026] [security2:error] [pid 1321:tid 1555] [client 74.7.230.60:51872] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "webmail.twrebar.com"] [uri "/___proxy_subdomain_webmail/robots.txt"] [unique_id "apK-rmjCPtor9NZ-byQRzAAGflk"]
[Sat Aug 29 05:12:46.365555 2026] [security2:error] [pid 60333:tid 60568] [client 87.219.197.128:64319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK-rjwSHPvvQcBSRbsfHwAAAfI"]
[Sat Aug 29 05:12:46.365679 2026] [security2:error] [pid 60333:tid 60568] [client 87.219.197.128:64319] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK-rjwSHPvvQcBSRbsfHwAAAfI"]
[Sat Aug 29 05:12:46.372024 2026] [security2:error] [pid 60333:tid 60582] [client 158.23.184.117:51078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/app.php"] [unique_id "apK-rjwSHPvvQcBSRbsfIQAAAgA"]
[Sat Aug 29 05:12:46.384587 2026] [security2:error] [pid 60333:tid 60511] [client 20.104.18.15:17105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/ah.php"] [unique_id "apK-rjwSHPvvQcBSRbsfIwAAAbk"]
[Sat Aug 29 05:12:46.388273 2026] [security2:error] [pid 1321:tid 1596] [client 4.205.62.107:63031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/upload.form.php"] [unique_id "apK-rmjCPtor9NZ-byQR0QAABqc"]
[Sat Aug 29 05:12:46.389816 2026] [security2:error] [pid 60333:tid 60562] [client 158.23.184.117:44528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/w.php"] [unique_id "apK-rjwSHPvvQcBSRbsfJQAAAew"]
[Sat Aug 29 05:12:46.390792 2026] [security2:error] [pid 1321:tid 1615] [client 20.63.219.114:14003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/configs.php"] [unique_id "apK-rmjCPtor9NZ-byQR0gAABro"]
[Sat Aug 29 05:12:46.396935 2026] [security2:error] [pid 60333:tid 60551] [client 20.220.204.93:59620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/403.php"] [unique_id "apK-rjwSHPvvQcBSRbsfJgAAAeE"]
[Sat Aug 29 05:12:46.400247 2026] [security2:error] [pid 1321:tid 1516] [client 20.196.209.81:11298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/global.php"] [unique_id "apK-rmjCPtor9NZ-byQR0wAABlg"]
[Sat Aug 29 05:12:46.403717 2026] [security2:error] [pid 1321:tid 1368] [remote 34.138.144.127:57632] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "cpcalendars.scubaetcfl.com"] [uri "/_image"] [unique_id "apK-rmjCPtor9NZ-byQR1AAGkwo"]
[Sat Aug 29 05:12:46.405573 2026] [security2:error] [pid 60333:tid 60567] [client 158.158.54.35:2016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/disagraeosc.php"] [unique_id "apK-rjwSHPvvQcBSRbsfJwAAAfE"]
[Sat Aug 29 05:12:46.408041 2026] [security2:error] [pid 60333:tid 60588] [client 20.197.61.180:8782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-content.php"] [unique_id "apK-rjwSHPvvQcBSRbsfKAAAAgY"]
[Sat Aug 29 05:12:46.426949 2026] [security2:error] [pid 1321:tid 1563] [client 158.23.147.79:6979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/wp-content/radio.php"] [unique_id "apK-rmjCPtor9NZ-byQR2gAABoY"]
[Sat Aug 29 05:12:46.427568 2026] [security2:error] [pid 60333:tid 60589] [client 158.23.184.117:63448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/Ov-Simple1.php"] [unique_id "apK-rjwSHPvvQcBSRbsfKgAAAgc"]
[Sat Aug 29 05:12:46.442563 2026] [security2:error] [pid 60333:tid 60542] [client 158.23.147.79:50068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/wp-login.php"] [unique_id "apK-rjwSHPvvQcBSRbsfKwAAAdg"]
[Sat Aug 29 05:12:46.442587 2026] [security2:error] [pid 60333:tid 60469] [client 158.23.184.117:12507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ccfinancialaccounting.com"] [uri "/update/da222.php"] [unique_id "apK-rjwSHPvvQcBSRbsfLAAAAY8"]
[Sat Aug 29 05:12:46.446938 2026] [security2:error] [pid 60333:tid 60540] [client 213.202.253.4:58706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/wp-content/postnews.php"] [unique_id "apK-rjwSHPvvQcBSRbsfLQAAAdY"], referer: www.google.com
[Sat Aug 29 05:12:46.453049 2026] [security2:error] [pid 1321:tid 1525] [client 20.104.18.15:16518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/img.php"] [unique_id "apK-rmjCPtor9NZ-byQR3QAABmE"]
[Sat Aug 29 05:12:46.464379 2026] [security2:error] [pid 1321:tid 1547] [client 20.104.18.15:5078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/82.php"] [unique_id "apK-rmjCPtor9NZ-byQR3gAABnY"]
[Sat Aug 29 05:12:46.467601 2026] [security2:error] [pid 1321:tid 1506] [client 68.155.159.216:7141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wzy.php"] [unique_id "apK-rmjCPtor9NZ-byQR3wAABk4"]
[Sat Aug 29 05:12:46.503799 2026] [security2:error] [pid 1321:tid 1607] [client 158.158.54.35:23327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/av.php"] [unique_id "apK-rmjCPtor9NZ-byQR4gAABrI"]
[Sat Aug 29 05:12:46.504565 2026] [security2:error] [pid 60333:tid 60547] [client 68.155.159.216:43957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/hehehehe.php"] [unique_id "apK-rjwSHPvvQcBSRbsfMAAAAd0"]
[Sat Aug 29 05:12:46.509953 2026] [security2:error] [pid 60333:tid 60580] [client 52.139.37.240:32130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/shell.php"] [unique_id "apK-rjwSHPvvQcBSRbsfMQAAAf4"]
[Sat Aug 29 05:12:46.511633 2026] [security2:error] [pid 60333:tid 60503] [client 4.205.62.107:63411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/ebahvhhh.php"] [unique_id "apK-rjwSHPvvQcBSRbsfMgAAAbE"]
[Sat Aug 29 05:12:46.514213 2026] [security2:error] [pid 60333:tid 60576] [client 20.104.18.15:27604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/ws55.php"] [unique_id "apK-rjwSHPvvQcBSRbsfMwAAAfo"]
[Sat Aug 29 05:12:46.516837 2026] [security2:error] [pid 60333:tid 60572] [client 158.23.184.117:51083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/aaa.php"] [unique_id "apK-rjwSHPvvQcBSRbsfNQAAAfY"]
[Sat Aug 29 05:12:46.518230 2026] [security2:error] [pid 60333:tid 60554] [client 57.141.14.102:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/acheter/page/29/"] [unique_id "apK-rjwSHPvvQcBSRbsfNAAAAeQ"]
[Sat Aug 29 05:12:46.523978 2026] [security2:error] [pid 60333:tid 60480] [client 20.196.209.81:9339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/defaults.php"] [unique_id "apK-rjwSHPvvQcBSRbsfNgAAAZo"]
[Sat Aug 29 05:12:46.535438 2026] [security2:error] [pid 60333:tid 60528] [client 158.23.184.117:44367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/new.php"] [unique_id "apK-rjwSHPvvQcBSRbsfNwAAAco"]
[Sat Aug 29 05:12:46.549829 2026] [security2:error] [pid 60333:tid 60514] [client 20.52.41.200:2124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "apK-rjwSHPvvQcBSRbsfOQAAAbw"]
[Sat Aug 29 05:12:46.572896 2026] [security2:error] [pid 60333:tid 60524] [client 158.23.184.117:63433] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/atomlib.php"] [unique_id "apK-rjwSHPvvQcBSRbsfPAAAAcY"]
[Sat Aug 29 05:12:46.578311 2026] [security2:error] [pid 60333:tid 60505] [client 20.104.18.15:16634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/222.php"] [unique_id "apK-rjwSHPvvQcBSRbsfPgAAAbM"]
[Sat Aug 29 05:12:46.582288 2026] [security2:error] [pid 60333:tid 60497] [client 20.220.204.93:9511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/cytyr.php"] [unique_id "apK-rjwSHPvvQcBSRbsfPwAAAas"]
[Sat Aug 29 05:12:46.594932 2026] [security2:error] [pid 60333:tid 60495] [client 20.63.219.114:13974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/colour.php"] [unique_id "apK-rjwSHPvvQcBSRbsfQAAAAak"]
[Sat Aug 29 05:12:46.602222 2026] [security2:error] [pid 60333:tid 60475] [client 20.197.61.180:3833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thatsaturdaythang.lifesosweet.com"] [uri "/wp-admin/wp-mail.php"] [unique_id "apK-rjwSHPvvQcBSRbsfQQAAAZU"]
[Sat Aug 29 05:12:46.609229 2026] [security2:error] [pid 60333:tid 60585] [client 20.104.104.62:64754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/wp-includes/mailer.php"] [unique_id "apK-rjwSHPvvQcBSRbsfQwAAAgM"]
[Sat Aug 29 05:12:46.615062 2026] [security2:error] [pid 1321:tid 1566] [client 20.104.18.15:5077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/dex.php"] [unique_id "apK-rmjCPtor9NZ-byQR5AAABok"]
[Sat Aug 29 05:12:46.622463 2026] [security2:error] [pid 60333:tid 60526] [client 158.23.184.117:12519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ccfinancialaccounting.com"] [uri "/xmr.php"] [unique_id "apK-rjwSHPvvQcBSRbsfRAAAAcg"]
[Sat Aug 29 05:12:46.628551 2026] [security2:error] [pid 60333:tid 60594] [client 74.248.24.12:36076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/txets.php"] [unique_id "apK-rjwSHPvvQcBSRbsfRQAAAgw"]
[Sat Aug 29 05:12:46.642822 2026] [security2:error] [pid 60333:tid 60501] [client 20.196.209.81:11267] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/ds.php"] [unique_id "apK-rjwSHPvvQcBSRbsfRgAAAa8"]
[Sat Aug 29 05:12:46.655184 2026] [security2:error] [pid 60333:tid 60559] [client 20.104.18.15:17081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/drykl.php"] [unique_id "apK-rjwSHPvvQcBSRbsfSQAAAek"]
[Sat Aug 29 05:12:46.682625 2026] [security2:error] [pid 60333:tid 60476] [client 158.23.184.117:44500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/php8.php"] [unique_id "apK-rjwSHPvvQcBSRbsfSwAAAZY"]
[Sat Aug 29 05:12:46.710140 2026] [security2:error] [pid 60333:tid 60504] [client 20.104.18.15:16631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/key.php"] [unique_id "apK-rjwSHPvvQcBSRbsfTAAAAbI"]
[Sat Aug 29 05:12:46.713678 2026] [security2:error] [pid 60333:tid 60527] [client 52.139.37.240:32122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/wp-admin/user/index.php"] [unique_id "apK-rjwSHPvvQcBSRbsfTQAAAck"]
[Sat Aug 29 05:12:46.715997 2026] [security2:error] [pid 1321:tid 1550] [client 158.23.184.117:37159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/edit.php"] [unique_id "apK-rmjCPtor9NZ-byQR5wAABnk"]
[Sat Aug 29 05:12:46.726238 2026] [security2:error] [pid 1321:tid 1564] [client 158.23.184.117:51086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/hehe.php"] [unique_id "apK-rmjCPtor9NZ-byQR6AAABoc"]
[Sat Aug 29 05:12:46.762694 2026] [security2:error] [pid 60333:tid 60569] [client 20.63.219.114:1872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/disagraeed.php"] [unique_id "apK-rjwSHPvvQcBSRbsfTgAAAfM"]
[Sat Aug 29 05:12:46.765306 2026] [security2:error] [pid 60333:tid 60549] [client 158.23.184.117:12516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ccfinancialaccounting.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK-rjwSHPvvQcBSRbsfTwAAAd8"]
[Sat Aug 29 05:12:46.768425 2026] [security2:error] [pid 60333:tid 60477] [client 20.104.18.15:5087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/inso.php"] [unique_id "apK-rjwSHPvvQcBSRbsfUAAAAZc"]
[Sat Aug 29 05:12:46.796417 2026] [security2:error] [pid 60333:tid 60507] [client 158.23.147.79:31691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carpevictoriam.com"] [uri "/file5.php"] [unique_id "apK-rjwSHPvvQcBSRbsfUQAAAbU"]
[Sat Aug 29 05:12:46.801169 2026] [security2:error] [pid 60333:tid 60511] [client 20.104.18.15:27628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/backup.php"] [unique_id "apK-rjwSHPvvQcBSRbsfUgAAAbk"]
[Sat Aug 29 05:12:46.814325 2026] [security2:error] [pid 60333:tid 60488] [client 20.48.250.41:39841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/0byte.php"] [unique_id "apK-rjwSHPvvQcBSRbsfUwAAAaI"]
[Sat Aug 29 05:12:46.821202 2026] [security2:error] [pid 60333:tid 60513] [client 20.220.204.93:57460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/galer.php"] [unique_id "apK-rjwSHPvvQcBSRbsfVAAAAbs"]
[Sat Aug 29 05:12:46.826217 2026] [security2:error] [pid 60333:tid 60487] [client 158.23.184.117:44406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/wp-content/themes/admin.php"] [unique_id "apK-rjwSHPvvQcBSRbsfVQAAAaE"]
[Sat Aug 29 05:12:46.840258 2026] [security2:error] [pid 1321:tid 1557] [client 20.104.18.15:16512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/chosen.php"] [unique_id "apK-rmjCPtor9NZ-byQR6wAABoA"]
[Sat Aug 29 05:12:46.846056 2026] [security2:error] [pid 60333:tid 60484] [client 158.158.54.35:2019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wp-logs.php"] [unique_id "apK-rjwSHPvvQcBSRbsfWAAAAZ4"]
[Sat Aug 29 05:12:46.848307 2026] [security2:error] [pid 60333:tid 60593] [client 20.196.209.81:14756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/update.php"] [unique_id "apK-rjwSHPvvQcBSRbsfWQAAAgs"]
[Sat Aug 29 05:12:46.853833 2026] [security2:error] [pid 1321:tid 1581] [client 4.205.62.107:32573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/old_phpinfo.php"] [unique_id "apK-rmjCPtor9NZ-byQR7AAABpg"]
[Sat Aug 29 05:12:46.858677 2026] [security2:error] [pid 1321:tid 1608] [client 68.155.159.216:56571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-admin/css/index.php"] [unique_id "apK-rmjCPtor9NZ-byQR7QAABrM"]
[Sat Aug 29 05:12:46.858931 2026] [security2:error] [pid 60333:tid 60563] [client 158.23.184.117:37169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/7.php"] [unique_id "apK-rjwSHPvvQcBSRbsfWgAAAe0"]
[Sat Aug 29 05:12:46.883120 2026] [security2:error] [pid 60333:tid 60522] [client 158.23.184.117:51094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/wp-includes/PHPMailer.php"] [unique_id "apK-rjwSHPvvQcBSRbsfXAAAAcQ"]
[Sat Aug 29 05:12:46.907494 2026] [security2:error] [pid 60333:tid 60553] [client 52.139.37.240:32711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/wp-content/plugins/linkpreview/il.php"] [unique_id "apK-rjwSHPvvQcBSRbsfXgAAAeM"]
[Sat Aug 29 05:12:46.912447 2026] [access_compat:error] [pid 60333:tid 60499] [client 67.20.76.220:38498] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:12:46.912766 2026] [security2:error] [pid 1321:tid 1515] [client 158.23.184.117:12480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ccfinancialaccounting.com"] [uri "/wp-act.php"] [unique_id "apK-rmjCPtor9NZ-byQR8gAABlc"]
[Sat Aug 29 05:12:46.940073 2026] [security2:error] [pid 60333:tid 60516] [client 158.158.54.35:21956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/file.php"] [unique_id "apK-rjwSHPvvQcBSRbsfYgAAAb4"]
[Sat Aug 29 05:12:46.942543 2026] [security2:error] [pid 1321:tid 1492] [client 20.104.18.15:17029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/indo.php"] [unique_id "apK-rmjCPtor9NZ-byQR9QAABkA"]
[Sat Aug 29 05:12:46.942915 2026] [access_compat:error] [pid 1321:tid 1543] [client 67.20.76.220:38540] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:12:46.944186 2026] [security2:error] [pid 60333:tid 60580] [client 158.23.147.79:14211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/ans.php"] [unique_id "apK-rjwSHPvvQcBSRbsfYwAAAf4"]
[Sat Aug 29 05:12:46.958059 2026] [security2:error] [pid 60333:tid 60554] [client 4.205.62.107:6143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/wpver.php"] [unique_id "apK-rjwSHPvvQcBSRbsfZgAAAeQ"]
[Sat Aug 29 05:12:46.973071 2026] [security2:error] [pid 60333:tid 60548] [client 20.104.18.15:5093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/aa.php"] [unique_id "apK-rjwSHPvvQcBSRbsfaAAAAd4"]
[Sat Aug 29 05:12:46.982400 2026] [security2:error] [pid 60333:tid 60596] [client 20.104.18.15:16629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/file1221.php"] [unique_id "apK-rjwSHPvvQcBSRbsfagAAAg4"]
[Sat Aug 29 05:12:46.982475 2026] [security2:error] [pid 60333:tid 60520] [client 68.155.159.216:62748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK-rjwSHPvvQcBSRbsfaQAAAcI"]
[Sat Aug 29 05:12:46.985777 2026] [security2:error] [pid 60333:tid 60556] [client 158.23.184.117:44533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/txets.php"] [unique_id "apK-rjwSHPvvQcBSRbsfawAAAeY"]
[Sat Aug 29 05:12:47.001889 2026] [security2:error] [pid 1321:tid 1555] [client 158.23.184.117:37164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/black.php"] [unique_id "apK-r2jCPtor9NZ-byQR9gAABn4"]
[Sat Aug 29 05:12:47.006594 2026] [security2:error] [pid 60333:tid 60592] [client 20.52.41.200:2232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/222.php"] [unique_id "apK-rzwSHPvvQcBSRbsfbAAAAgo"]
[Sat Aug 29 05:12:47.006931 2026] [security2:error] [pid 1321:tid 1529] [client 20.196.209.81:9995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/post.php"] [unique_id "apK-r2jCPtor9NZ-byQR9wAABmU"]
[Sat Aug 29 05:12:47.029054 2026] [security2:error] [pid 1321:tid 1596] [client 158.23.184.117:1463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/wp-content/upgrade/alfanew.php7"] [unique_id "apK-r2jCPtor9NZ-byQR-AAABqc"]
[Sat Aug 29 05:12:47.039018 2026] [security2:error] [pid 60333:tid 60498] [client 20.151.200.44:55635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/X7T6.php"] [unique_id "apK-rzwSHPvvQcBSRbsfbQAAAaw"]
[Sat Aug 29 05:12:47.052300 2026] [security2:error] [pid 60333:tid 60506] [client 20.48.250.41:39862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/xr.php"] [unique_id "apK-rzwSHPvvQcBSRbsfbgAAAbQ"]
[Sat Aug 29 05:12:47.053312 2026] [security2:error] [pid 60333:tid 60519] [client 20.196.209.81:2018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/GOD.php"] [unique_id "apK-rzwSHPvvQcBSRbsfbwAAAcE"]
[Sat Aug 29 05:12:47.057446 2026] [security2:error] [pid 60333:tid 60515] [client 158.23.184.117:12543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ccfinancialaccounting.com"] [uri "/fff.php"] [unique_id "apK-rzwSHPvvQcBSRbsfcgAAAb0"]
[Sat Aug 29 05:12:47.066322 2026] [security2:error] [pid 1321:tid 1501] [client 4.205.62.107:64994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/database.php"] [unique_id "apK-r2jCPtor9NZ-byQR-QAABkk"]
[Sat Aug 29 05:12:47.088867 2026] [security2:error] [pid 60333:tid 60478] [client 20.104.18.15:17113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/sign.php"] [unique_id "apK-rzwSHPvvQcBSRbsfegAAAZg"]
[Sat Aug 29 05:12:47.092176 2026] [security2:error] [pid 1321:tid 1490] [client 20.63.219.114:13955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/OK.php"] [unique_id "apK-r2jCPtor9NZ-byQR-wAABj4"]
[Sat Aug 29 05:12:47.101476 2026] [security2:error] [pid 1321:tid 1516] [client 52.139.37.240:32079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/wp-header-json.php"] [unique_id "apK-r2jCPtor9NZ-byQR_AAABlg"]
[Sat Aug 29 05:12:47.102285 2026] [core:error] [pid 60333:tid 60559] [client 74.7.230.16:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:47.102295 2026] [core:error] [pid 60333:tid 60559] [client 74.7.230.16:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:47.102408 2026] [security2:error] [pid 60333:tid 60559] [client 74.7.230.16:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "webmail.swumc.com"] [uri "/___proxy_subdomain_webmail/index.php"] [unique_id "apK-rzwSHPvvQcBSRbsfewAAAek"]
[Sat Aug 29 05:12:47.103912 2026] [security2:error] [pid 60333:tid 60585] [client 74.7.230.16:60318] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "webmail.swumc.com"] [uri "/___proxy_subdomain_webmail/robots.txt"] [unique_id "apK-rzwSHPvvQcBSRbsfdgACA2s"]
[Sat Aug 29 05:12:47.131065 2026] [security2:error] [pid 60333:tid 60501] [client 158.23.184.117:44511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/adminfuns.php"] [unique_id "apK-rzwSHPvvQcBSRbsffQAAAa8"]
[Sat Aug 29 05:12:47.132076 2026] [security2:error] [pid 1321:tid 1605] [client 20.104.18.15:4930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/img.php"] [unique_id "apK-r2jCPtor9NZ-byQR_QAABrA"]
[Sat Aug 29 05:12:47.134124 2026] [security2:error] [pid 60333:tid 60505] [client 20.63.219.114:13971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/add_actualites.php"] [unique_id "apK-rzwSHPvvQcBSRbsffgAAAbM"]
[Sat Aug 29 05:12:47.143373 2026] [security2:error] [pid 1321:tid 1576] [client 20.104.18.15:16593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/nox.php"] [unique_id "apK-r2jCPtor9NZ-byQR_gAABpM"]
[Sat Aug 29 05:12:47.145762 2026] [security2:error] [pid 60333:tid 60471] [client 158.23.184.117:50694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/wp-blog-header.php"] [unique_id "apK-rzwSHPvvQcBSRbsfgQAAAZE"]
[Sat Aug 29 05:12:47.150116 2026] [cgid:error] [pid 60333:tid 60528] [client 74.248.24.12:36063] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/themysticalseven/404.shtml
[Sat Aug 29 05:12:47.175266 2026] [security2:error] [pid 60333:tid 60474] [client 158.23.184.117:51096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/admin/alfa-rex.php"] [unique_id "apK-rzwSHPvvQcBSRbsfggAAAZQ"]
[Sat Aug 29 05:12:47.201915 2026] [security2:error] [pid 60333:tid 60517] [client 158.23.184.117:12526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ccfinancialaccounting.com"] [uri "/.tmb/dropdown.php"] [unique_id "apK-rzwSHPvvQcBSRbsfgwAAAb8"]
[Sat Aug 29 05:12:47.218063 2026] [security2:error] [pid 60333:tid 60577] [client 20.151.200.44:27275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/ww3.php"] [unique_id "apK-rzwSHPvvQcBSRbsfhAAAAfs"]
[Sat Aug 29 05:12:47.223832 2026] [security2:error] [pid 60333:tid 60510] [client 20.104.18.15:17101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/wnnjpsby.php"] [unique_id "apK-rzwSHPvvQcBSRbsfhQAAAbg"]
[Sat Aug 29 05:12:47.230828 2026] [security2:error] [pid 60333:tid 60569] [client 20.220.204.93:9497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/baixy.php"] [unique_id "apK-rzwSHPvvQcBSRbsfhgAAAfM"]
[Sat Aug 29 05:12:47.233106 2026] [security2:error] [pid 60333:tid 60549] [client 20.48.250.41:39763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/h02ugyh.php"] [unique_id "apK-rzwSHPvvQcBSRbsfhwAAAd8"]
[Sat Aug 29 05:12:47.271505 2026] [security2:error] [pid 60333:tid 60538] [client 158.23.184.117:44526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/403.php"] [unique_id "apK-rzwSHPvvQcBSRbsfiAAAAdQ"]
[Sat Aug 29 05:12:47.278504 2026] [security2:error] [pid 1321:tid 1577] [client 20.104.18.15:16559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/akismet.php"] [unique_id "apK-r2jCPtor9NZ-byQSAAAABpQ"]
[Sat Aug 29 05:12:47.289894 2026] [security2:error] [pid 60333:tid 60486] [client 20.196.209.81:14720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/blog.php"] [unique_id "apK-rzwSHPvvQcBSRbsfiQAAAaA"]
[Sat Aug 29 05:12:47.299851 2026] [security2:error] [pid 1321:tid 1525] [client 20.197.61.180:3349] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thatsaturdaythang.lifesosweet.com"] [uri "/wp-admin/wp-settings.php"] [unique_id "apK-r2jCPtor9NZ-byQSAQAABmE"]
[Sat Aug 29 05:12:47.302072 2026] [security2:error] [pid 60333:tid 60508] [client 158.158.54.35:31292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wp-admin/css/about.php"] [unique_id "apK-rzwSHPvvQcBSRbsfjAAAAbY"]
[Sat Aug 29 05:12:47.314396 2026] [security2:error] [pid 1321:tid 1573] [client 52.139.37.240:32084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/zup.php"] [unique_id "apK-r2jCPtor9NZ-byQSAgAABpA"]
[Sat Aug 29 05:12:47.321745 2026] [cgid:error] [pid 60333:tid 60513] [client 74.248.24.12:36063] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/themysticalseven/404.shtml
[Sat Aug 29 05:12:47.322711 2026] [security2:error] [pid 1321:tid 1526] [client 158.23.184.117:1425] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/wp-content/export.php"] [unique_id "apK-r2jCPtor9NZ-byQSAwAABmI"]
[Sat Aug 29 05:12:47.354114 2026] [security2:error] [pid 1321:tid 1512] [client 158.23.184.117:12515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ccfinancialaccounting.com"] [uri "/robots.php"] [unique_id "apK-r2jCPtor9NZ-byQSBgAABlQ"]
[Sat Aug 29 05:12:47.356438 2026] [security2:error] [pid 1321:tid 1588] [client 20.104.18.15:17029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/gigi.php"] [unique_id "apK-r2jCPtor9NZ-byQSCAAABp8"]
[Sat Aug 29 05:12:47.358582 2026] [security2:error] [pid 60333:tid 60493] [client 20.104.104.62:20678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/ym.php"] [unique_id "apK-rzwSHPvvQcBSRbsfjwAAAac"]
[Sat Aug 29 05:12:47.376169 2026] [security2:error] [pid 60333:tid 60484] [client 158.23.184.117:37138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/2.php"] [unique_id "apK-rzwSHPvvQcBSRbsfkAAAAZ4"]
[Sat Aug 29 05:12:47.378809 2026] [security2:error] [pid 1321:tid 1581] [client 4.205.62.107:61733] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/pouhg.php"] [unique_id "apK-r2jCPtor9NZ-byQSCQAABpg"]
[Sat Aug 29 05:12:47.381878 2026] [security2:error] [pid 60333:tid 60563] [client 20.197.61.180:8772] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-content/1.php"] [unique_id "apK-rzwSHPvvQcBSRbsfkQAAAe0"]
[Sat Aug 29 05:12:47.381945 2026] [security2:error] [pid 60333:tid 60563] [client 20.197.61.180:8772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-content/1.php"] [unique_id "apK-rzwSHPvvQcBSRbsfkQAAAe0"]
[Sat Aug 29 05:12:47.393390 2026] [security2:error] [pid 60333:tid 60581] [client 158.23.147.79:64492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-rzwSHPvvQcBSRbsfkgAAAf8"]
[Sat Aug 29 05:12:47.397204 2026] [security2:error] [pid 1321:tid 1519] [client 158.158.54.35:17647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK-r2jCPtor9NZ-byQSCgAABls"]
[Sat Aug 29 05:12:47.409340 2026] [security2:error] [pid 1321:tid 1609] [client 20.104.18.15:16630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/ajax.php"] [unique_id "apK-r2jCPtor9NZ-byQSCwAABrQ"]
[Sat Aug 29 05:12:47.441101 2026] [security2:error] [pid 60333:tid 60531] [client 20.48.250.41:39853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/xxw.php"] [unique_id "apK-rzwSHPvvQcBSRbsflAAAAc0"]
[Sat Aug 29 05:12:47.455561 2026] [security2:error] [pid 60333:tid 60553] [client 4.205.62.107:28088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/fm.php"] [unique_id "apK-rzwSHPvvQcBSRbsflgAAAeM"]
[Sat Aug 29 05:12:47.459494 2026] [security2:error] [pid 60333:tid 60511] [client 20.52.41.200:2701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/mini.php"] [unique_id "apK-rzwSHPvvQcBSRbsfmAAAAbk"]
[Sat Aug 29 05:12:47.470761 2026] [security2:error] [pid 1321:tid 1515] [client 158.23.184.117:1424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/new.php"] [unique_id "apK-r2jCPtor9NZ-byQSDAAABlc"]
[Sat Aug 29 05:12:47.472246 2026] [security2:error] [pid 60333:tid 60516] [client 158.23.184.117:44363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/.trash7206/index.php"] [unique_id "apK-rzwSHPvvQcBSRbsfmQAAAb4"]
[Sat Aug 29 05:12:47.473007 2026] [security2:error] [pid 1321:tid 1504] [client 20.196.209.81:5049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/csv.php"] [unique_id "apK-r2jCPtor9NZ-byQSDQAABkw"]
[Sat Aug 29 05:12:47.493243 2026] [security2:error] [pid 60333:tid 60503] [client 74.248.24.12:36063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/wp-content/themes/about.php"] [unique_id "apK-rzwSHPvvQcBSRbsfmgAAAbE"]
[Sat Aug 29 05:12:47.496263 2026] [security2:error] [pid 60333:tid 60547] [client 20.104.18.15:17112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/info.php/new.php"] [unique_id "apK-rzwSHPvvQcBSRbsfnAAAAd0"]
[Sat Aug 29 05:12:47.499138 2026] [security2:error] [pid 60333:tid 60483] [client 158.23.184.117:13202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ccfinancialaccounting.com"] [uri "/.well-known/install.php"] [unique_id "apK-rzwSHPvvQcBSRbsfnQAAAZ0"]
[Sat Aug 29 05:12:47.500396 2026] [security2:error] [pid 60333:tid 60572] [client 158.23.147.79:24504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK-rzwSHPvvQcBSRbsfngAAAfY"]
[Sat Aug 29 05:12:47.506685 2026] [security2:error] [pid 1321:tid 1517] [client 20.104.18.15:4874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/222.php"] [unique_id "apK-r2jCPtor9NZ-byQSDwAABlk"]
[Sat Aug 29 05:12:47.517777 2026] [security2:error] [pid 60333:tid 60450] [remote 198.54.126.98:42744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.126.54.198.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "strangeworx.com"] [uri "/wp-login.php"] [unique_id "apK-rzwSHPvvQcBSRbsfnwAB-G8"]
[Sat Aug 29 05:12:47.519057 2026] [security2:error] [pid 60333:tid 60522] [client 52.139.37.240:32086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/a9.php"] [unique_id "apK-rzwSHPvvQcBSRbsfoAAAAcQ"]
[Sat Aug 29 05:12:47.520198 2026] [security2:error] [pid 60333:tid 60580] [client 158.23.184.117:37153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/index/function.php"] [unique_id "apK-rzwSHPvvQcBSRbsfoQAAAf4"]
[Sat Aug 29 05:12:47.523138 2026] [security2:error] [pid 1321:tid 1543] [client 4.205.62.107:63257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/aws_auth.php"] [unique_id "apK-r2jCPtor9NZ-byQSEAAABnM"]
[Sat Aug 29 05:12:47.525995 2026] [security2:error] [pid 60333:tid 60494] [client 20.196.209.81:20893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/ggfi.php"] [unique_id "apK-rzwSHPvvQcBSRbsfogAAAag"]
[Sat Aug 29 05:12:47.546020 2026] [security2:error] [pid 1321:tid 1596] [client 158.23.147.79:7051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/wp-admin/dropdown.php"] [unique_id "apK-r2jCPtor9NZ-byQSEwAABqc"]
[Sat Aug 29 05:12:47.553518 2026] [security2:error] [pid 60333:tid 60509] [client 20.104.18.15:16538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/atomlib.php"] [unique_id "apK-rzwSHPvvQcBSRbsfpQAAAbc"]
[Sat Aug 29 05:12:47.572471 2026] [http2:warn] [pid 1321:tid 1589] [client 149.22.85.133:3725] h2_stream(1321-285-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:12:47.581218 2026] [security2:error] [pid 1321:tid 1499] [client 68.155.159.216:7076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK-r2jCPtor9NZ-byQSFgAABkc"]
[Sat Aug 29 05:12:47.617145 2026] [security2:error] [pid 1321:tid 1592] [client 158.23.184.117:1411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/wp-content/plugins/revslider/admin.php"] [unique_id "apK-r2jCPtor9NZ-byQSFwAABqM"]
[Sat Aug 29 05:12:47.618136 2026] [security2:error] [pid 60333:tid 60514] [client 158.23.184.117:44389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/.trash7206/admin.php"] [unique_id "apK-rzwSHPvvQcBSRbsfqgAAAbw"]
[Sat Aug 29 05:12:47.621301 2026] [security2:error] [pid 60333:tid 60512] [client 20.48.250.41:39802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/bolt.php"] [unique_id "apK-rzwSHPvvQcBSRbsfqwAAAbo"]
[Sat Aug 29 05:12:47.643343 2026] [security2:error] [pid 1321:tid 1598] [client 158.23.147.79:49851] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "apK-r2jCPtor9NZ-byQSGAAABqk"]
[Sat Aug 29 05:12:47.656013 2026] [security2:error] [pid 60333:tid 60546] [client 4.205.62.107:63332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/asa.php"] [unique_id "apK-rzwSHPvvQcBSRbsfrQAAAdw"]
[Sat Aug 29 05:12:47.662011 2026] [http2:warn] [pid 1321:tid 1520] [client 38.54.81.114:44655] h2_stream(1321-293-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:12:47.665526 2026] [security2:error] [pid 60333:tid 60526] [client 20.104.49.130:51346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/1xmomo.php"] [unique_id "apK-rzwSHPvvQcBSRbsfrgAAAcg"]
[Sat Aug 29 05:12:47.665918 2026] [security2:error] [pid 1321:tid 1586] [client 158.23.184.117:37121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/wp-admin/maint/repair.php"] [unique_id "apK-r2jCPtor9NZ-byQSGQAABp0"]
[Sat Aug 29 05:12:47.671954 2026] [security2:error] [pid 1321:tid 1601] [client 68.155.159.216:44031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK-r2jCPtor9NZ-byQSGgAABqw"]
[Sat Aug 29 05:12:47.685019 2026] [security2:error] [pid 60333:tid 60557] [client 20.104.18.15:16521] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webmail.moderntechservices.com"] [uri "/1.php"] [unique_id "apK-rzwSHPvvQcBSRbsfsQAAAec"]
[Sat Aug 29 05:12:47.685119 2026] [security2:error] [pid 60333:tid 60557] [client 20.104.18.15:16521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/1.php"] [unique_id "apK-rzwSHPvvQcBSRbsfsQAAAec"]
[Sat Aug 29 05:12:47.685888 2026] [security2:error] [pid 1321:tid 1606] [client 20.196.209.81:2044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/bypass.php"] [unique_id "apK-r2jCPtor9NZ-byQSGwAABrE"]
[Sat Aug 29 05:12:47.689926 2026] [security2:error] [pid 1321:tid 1555] [client 20.63.219.114:13999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/alfanew.php7"] [unique_id "apK-r2jCPtor9NZ-byQSHAAABn4"]
[Sat Aug 29 05:12:47.699234 2026] [security2:error] [pid 60333:tid 60585] [client 158.23.184.117:12508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ccfinancialaccounting.com"] [uri "/wp-admin/about.php"] [unique_id "apK-rzwSHPvvQcBSRbsftAAAAgM"]
[Sat Aug 29 05:12:47.701175 2026] [security2:error] [pid 60333:tid 60570] [client 20.104.18.15:5118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/key.php"] [unique_id "apK-rzwSHPvvQcBSRbsftQAAAfQ"]
[Sat Aug 29 05:12:47.712149 2026] [security2:error] [pid 1321:tid 1497] [client 52.139.37.240:32098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/admin/index.php"] [unique_id "apK-r2jCPtor9NZ-byQSHgAABkU"]
[Sat Aug 29 05:12:47.750791 2026] [security2:error] [pid 1321:tid 1491] [client 158.158.54.35:33344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/system_log.php"] [unique_id "apK-r2jCPtor9NZ-byQSIAAABj8"]
[Sat Aug 29 05:12:47.754282 2026] [security2:error] [pid 1321:tid 1560] [client 20.63.219.114:1869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.juntoohki.com"] [uri "/aaa.php"] [unique_id "apK-r2jCPtor9NZ-byQSIQAABoM"]
[Sat Aug 29 05:12:47.764053 2026] [security2:error] [pid 60333:tid 60527] [client 158.23.184.117:44509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/wp-content/admin.php"] [unique_id "apK-rzwSHPvvQcBSRbsfvwAAAck"]
[Sat Aug 29 05:12:47.765771 2026] [security2:error] [pid 1321:tid 1566] [client 158.23.184.117:51097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/wp-content/images/uploads/admin.php"] [unique_id "apK-r2jCPtor9NZ-byQSIgAABok"]
[Sat Aug 29 05:12:47.803935 2026] [security2:error] [pid 60333:tid 60576] [client 65.21.113.248:41758] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.babyboomerscare.com"] [uri "/index.php"] [unique_id "apK-rzwSHPvvQcBSRbsfpgAAAfo"]
[Sat Aug 29 05:12:47.817593 2026] [security2:error] [pid 60333:tid 60591] [client 20.48.250.41:39932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/rtx.php"] [unique_id "apK-rzwSHPvvQcBSRbsfwAAAAgk"]
[Sat Aug 29 05:12:47.827866 2026] [security2:error] [pid 60333:tid 60577] [client 20.104.18.15:16578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/samll.php"] [unique_id "apK-rzwSHPvvQcBSRbsfwQAAAfs"]
[Sat Aug 29 05:12:47.844324 2026] [security2:error] [pid 60333:tid 60504] [client 158.158.54.35:17579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/gmo.php"] [unique_id "apK-rzwSHPvvQcBSRbsfwgAAAbI"]
[Sat Aug 29 05:12:47.850426 2026] [security2:error] [pid 60333:tid 60573] [client 20.220.204.93:9566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/ava.php"] [unique_id "apK-rzwSHPvvQcBSRbsfwwAAAfc"]
[Sat Aug 29 05:12:47.859160 2026] [security2:error] [pid 60333:tid 60584] [client 158.23.184.117:12512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ccfinancialaccounting.com"] [uri "/wp-content/backup.php"] [unique_id "apK-rzwSHPvvQcBSRbsfxAAAAgI"]
[Sat Aug 29 05:12:47.866045 2026] [security2:error] [pid 1321:tid 1612] [client 158.23.184.117:50911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/wp-content/themes/index.php"] [unique_id "apK-r2jCPtor9NZ-byQSJAAABrc"]
[Sat Aug 29 05:12:47.884985 2026] [security2:error] [pid 60333:tid 60555] [client 20.104.18.15:5088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/chosen.php"] [unique_id "apK-rzwSHPvvQcBSRbsfzgAAAeU"]
[Sat Aug 29 05:12:47.908365 2026] [security2:error] [pid 1321:tid 1608] [client 52.139.37.240:32069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/makeasmtp.php"] [unique_id "apK-r2jCPtor9NZ-byQSJwAABrM"]
[Sat Aug 29 05:12:47.908932 2026] [security2:error] [pid 60333:tid 60575] [client 20.52.41.200:2696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/aa.php"] [unique_id "apK-rzwSHPvvQcBSRbsf1QAAAfk"]
[Sat Aug 29 05:12:47.910550 2026] [security2:error] [pid 1321:tid 1512] [client 20.196.209.81:10011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/fox.php"] [unique_id "apK-r2jCPtor9NZ-byQSKAAABlQ"]
[Sat Aug 29 05:12:47.924137 2026] [security2:error] [pid 60333:tid 60510] [client 158.23.184.117:44388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/wp-mail.php"] [unique_id "apK-rzwSHPvvQcBSRbsf1wAAAbg"]
[Sat Aug 29 05:12:47.924533 2026] [security2:error] [pid 60333:tid 60595] [client 20.196.209.81:11273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/alfa-rex.php"] [unique_id "apK-rzwSHPvvQcBSRbsf2AAAAg0"]
[Sat Aug 29 05:12:47.928200 2026] [security2:error] [pid 1321:tid 1532] [client 158.23.184.117:1421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/tools.php"] [unique_id "apK-r2jCPtor9NZ-byQSKQAABmg"]
[Sat Aug 29 05:12:47.928932 2026] [security2:error] [pid 60333:tid 60561] [client 158.23.147.79:31706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carpevictoriam.com"] [uri "/file88.php"] [unique_id "apK-rzwSHPvvQcBSRbsf2gAAAes"]
[Sat Aug 29 05:12:47.957114 2026] [security2:error] [pid 60333:tid 60567] [client 20.104.104.62:47559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/alfa1.php"] [unique_id "apK-rzwSHPvvQcBSRbsf5AAAAfE"]
[Sat Aug 29 05:12:47.963987 2026] [security2:error] [pid 60333:tid 60588] [client 20.104.18.15:16513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/she11.php"] [unique_id "apK-rzwSHPvvQcBSRbsf5gAAAgY"]
[Sat Aug 29 05:12:47.965580 2026] [security2:error] [pid 60333:tid 60476] [client 68.155.159.216:56544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK-rzwSHPvvQcBSRbsf5wAAAZY"]
[Sat Aug 29 05:12:47.993383 2026] [security2:error] [pid 60333:tid 60581] [client 4.205.62.107:32515] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "testing.pushpinmedia.net"] [uri "/wp-act.php"] [unique_id "apK-rzwSHPvvQcBSRbsf6AAAAf8"]
[Sat Aug 29 05:12:47.999231 2026] [security2:error] [pid 60333:tid 60551] [client 158.23.184.117:12487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ccfinancialaccounting.com"] [uri "/.well-known/aa.php"] [unique_id "apK-rzwSHPvvQcBSRbsf6QAAAeE"]
[Sat Aug 29 05:12:48.010058 2026] [security2:error] [pid 1321:tid 1523] [client 158.23.184.117:37124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/xda.php"] [unique_id "apK-sGjCPtor9NZ-byQSKgAABl8"]
[Sat Aug 29 05:12:48.013199 2026] [security2:error] [pid 1321:tid 1519] [client 74.248.24.12:40210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK-sGjCPtor9NZ-byQSLAAABls"]
[Sat Aug 29 05:12:48.019533 2026] [security2:error] [pid 1321:tid 1564] [client 20.197.61.180:8794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thatsaturdaythang.lifesosweet.com"] [uri "/wp-admin/wp-signup.php"] [unique_id "apK-sGjCPtor9NZ-byQSLQAABoc"]
[Sat Aug 29 05:12:48.035549 2026] [security2:error] [pid 60333:tid 60579] [client 20.48.250.41:39846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/ckk.php"] [unique_id "apK-sDwSHPvvQcBSRbsf6wAAAf0"]
[Sat Aug 29 05:12:48.058875 2026] [security2:error] [pid 60333:tid 60590] [client 20.63.219.114:11616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/xmlrpc.php0"] [unique_id "apK-sDwSHPvvQcBSRbsf7QAAAgg"]
[Sat Aug 29 05:12:48.085075 2026] [security2:error] [pid 60333:tid 60470] [client 20.196.209.81:2031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/extractable-loader-head.php"] [unique_id "apK-sDwSHPvvQcBSRbsf9gAAAZA"]
[Sat Aug 29 05:12:48.095639 2026] [security2:error] [pid 1321:tid 1499] [client 158.23.184.117:51119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/wp-content/uploads/my.php"] [unique_id "apK-sGjCPtor9NZ-byQSMQAABkc"]
[Sat Aug 29 05:12:48.104715 2026] [security2:error] [pid 60333:tid 60549] [client 20.197.61.180:3350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-content/about.php"] [unique_id "apK-sDwSHPvvQcBSRbsf9wAAAd8"]
[Sat Aug 29 05:12:48.114918 2026] [security2:error] [pid 60333:tid 60587] [client 52.139.37.240:32085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/paku.php"] [unique_id "apK-sDwSHPvvQcBSRbsf-AAAAgU"]
[Sat Aug 29 05:12:48.122241 2026] [security2:error] [pid 60333:tid 60541] [client 158.23.184.117:44369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/3.php"] [unique_id "apK-sDwSHPvvQcBSRbsf-gAAAdc"]
[Sat Aug 29 05:12:48.123482 2026] [security2:error] [pid 1321:tid 1576] [client 4.205.62.107:5666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/ah25.php"] [unique_id "apK-sGjCPtor9NZ-byQSMgAABpM"]
403 (Forbidden): 403 Forbidden
Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Sat Aug 29 05:12:48.138638 2026] [security2:error] [pid 60333:tid 60522] [client 74.7.241.173:60106] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.knq.fbj.mybluehost.me"] [uri "/robots.txt"] [unique_id "apK-sDwSHPvvQcBSRbsf_QABxB0"]
[Sat Aug 29 05:12:48.141562 2026] [security2:error] [pid 60333:tid 60509] [client 20.151.200.44:55725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/see.php"] [unique_id "apK-sDwSHPvvQcBSRbsf_gAAAbc"]
[Sat Aug 29 05:12:48.141853 2026] [security2:error] [pid 60333:tid 60580] [client 158.23.184.117:12514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ccfinancialaccounting.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "apK-sDwSHPvvQcBSRbsf_wAAAf4"]
[Sat Aug 29 05:12:48.154879 2026] [security2:error] [pid 1321:tid 1490] [client 158.23.184.117:37125] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/1.php"] [unique_id "apK-sGjCPtor9NZ-byQSMwAABj4"]
[Sat Aug 29 05:12:48.154969 2026] [security2:error] [pid 1321:tid 1490] [client 158.23.184.117:37125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/1.php"] [unique_id "apK-sGjCPtor9NZ-byQSMwAABj4"]
[Sat Aug 29 05:12:48.167218 2026] [security2:error] [pid 1321:tid 1582] [client 20.104.49.130:43015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bfcorrigan.com"] [uri "/samll.php"] [unique_id "apK-sGjCPtor9NZ-byQSNAAABpk"]
[Sat Aug 29 05:12:48.198087 2026] [security2:error] [pid 60333:tid 60511] [client 158.158.54.35:33714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/24.php"] [unique_id "apK-sDwSHPvvQcBSRbsgBgAAAbk"]
[Sat Aug 29 05:12:48.198557 2026] [security2:error] [pid 60333:tid 60512] [client 20.104.18.15:17149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/w.php"] [unique_id "apK-sDwSHPvvQcBSRbsgBwAAAbo"]
[Sat Aug 29 05:12:48.204628 2026] [security2:error] [pid 1321:tid 1563] [client 4.205.62.107:64898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/atex1.php"] [unique_id "apK-sGjCPtor9NZ-byQSNgAABoY"]
[Sat Aug 29 05:12:48.205240 2026] [security2:error] [pid 60333:tid 60497] [client 20.48.250.41:39756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.vancouverphotobooth.com"] [uri "/R57.php"] [unique_id "apK-sDwSHPvvQcBSRbsgCQAAAas"]
[Sat Aug 29 05:12:48.240861 2026] [security2:error] [pid 1321:tid 1489] [client 158.23.184.117:1465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/wp-includes/themes/uploads/config.php"] [unique_id "apK-sGjCPtor9NZ-byQSNwAABj0"]
[Sat Aug 29 05:12:48.280034 2026] [security2:error] [pid 60333:tid 60498] [client 158.23.184.117:44512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/wp-includes/fonts/index.php"] [unique_id "apK-sDwSHPvvQcBSRbsgDQAAAaw"]
[Sat Aug 29 05:12:48.283799 2026] [security2:error] [pid 60333:tid 60589] [client 158.23.184.117:13211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ccfinancialaccounting.com"] [uri "/wp-content/plugins/alfa-rex.php"] [unique_id "apK-sDwSHPvvQcBSRbsgDgAAAgc"]
[Sat Aug 29 05:12:48.291821 2026] [security2:error] [pid 60333:tid 60520] [client 158.158.54.35:10188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/classwithtostring.php"] [unique_id "apK-sDwSHPvvQcBSRbsgEAAAAcI"]
[Sat Aug 29 05:12:48.302326 2026] [security2:error] [pid 60333:tid 60546] [client 158.23.184.117:57921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK-sDwSHPvvQcBSRbsgEgAAAdw"]
[Sat Aug 29 05:12:48.305023 2026] [security2:error] [pid 60333:tid 60382] [remote 93.123.109.228:58030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/.env.php"] [unique_id "apK-sDwSHPvvQcBSRbsgEwABrSs"]
[Sat Aug 29 05:12:48.308275 2026] [security2:error] [pid 1321:tid 1548] [client 68.155.159.216:55066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.angelesforestranch.com"] [uri "/wp-content/banners/about.php"] [unique_id "apK-sGjCPtor9NZ-byQSOwAABnc"]
[Sat Aug 29 05:12:48.310233 2026] [security2:error] [pid 60333:tid 60532] [client 52.139.37.240:51753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/rtx.php"] [unique_id "apK-sDwSHPvvQcBSRbsgFQAAAc4"]
[Sat Aug 29 05:12:48.323601 2026] [security2:error] [pid 1321:tid 1497] [client 20.196.209.81:11295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/cookie.php"] [unique_id "apK-sGjCPtor9NZ-byQSPQAABkU"]
[Sat Aug 29 05:12:48.339317 2026] [security2:error] [pid 60333:tid 60518] [client 20.196.209.81:17865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/disagraeosc.php"] [unique_id "apK-sDwSHPvvQcBSRbsgGQAAAcA"]
[Sat Aug 29 05:12:48.363883 2026] [security2:error] [pid 1321:tid 1550] [client 20.52.41.200:2150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/c.php"] [unique_id "apK-sGjCPtor9NZ-byQSPgAABnk"]
[Sat Aug 29 05:12:48.367302 2026] [security2:error] [pid 1321:tid 1557] [client 158.23.147.79:24346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.paulroyce.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-sGjCPtor9NZ-byQSPwAABoA"]
[Sat Aug 29 05:12:48.384463 2026] [security2:error] [pid 60333:tid 60526] [client 127.0.0.1:43922] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "apK-sDwSHPvvQcBSRbsgFAAAAcg"]
[Sat Aug 29 05:12:48.384506 2026] [security2:error] [pid 1321:tid 1542] [client 74.7.241.130:60812] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.cwg.fbj.mybluehost.me"] [uri "/robots.txt"] [unique_id "apK-sGjCPtor9NZ-byQSOgAGcgQ"]
[Sat Aug 29 05:12:48.387158 2026] [security2:error] [pid 1321:tid 1501] [client 158.23.184.117:51132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/av.php"] [unique_id "apK-sGjCPtor9NZ-byQSQAAABkk"]
[Sat Aug 29 05:12:48.419773 2026] [autoindex:error] [pid 60333:tid 60388] [remote 74.7.227.20:34622] AH01276: Cannot serve directory /home3/knqfbjmy/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:12:48.423175 2026] [security2:error] [pid 1321:tid 1577] [client 158.23.147.79:43310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK-sGjCPtor9NZ-byQSQQAABpQ"]
[Sat Aug 29 05:12:48.465154 2026] [security2:error] [pid 60333:tid 60492] [client 20.104.104.62:20717] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/159.php"] [unique_id "apK-sDwSHPvvQcBSRbsgKAAAAaY"]
[Sat Aug 29 05:12:48.484839 2026] [security2:error] [pid 1321:tid 1512] [client 158.23.184.117:12542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ccfinancialaccounting.com"] [uri "/test.php"] [unique_id "apK-sGjCPtor9NZ-byQSRAAABlQ"]
[Sat Aug 29 05:12:48.491957 2026] [security2:error] [pid 60333:tid 60556] [client 20.196.209.81:11326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/defaults.php"] [unique_id "apK-sDwSHPvvQcBSRbsgLAAAAeY"]
[Sat Aug 29 05:12:48.502479 2026] [security2:error] [pid 60333:tid 60591] [client 158.23.184.117:50916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/wp-includes/admin.php"] [unique_id "apK-sDwSHPvvQcBSRbsgLQAAAgk"]
[Sat Aug 29 05:12:48.511526 2026] [security2:error] [pid 1321:tid 1522] [client 20.63.219.114:13953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/content.php"] [unique_id "apK-sGjCPtor9NZ-byQSRQAABl4"]
[Sat Aug 29 05:12:48.524097 2026] [security2:error] [pid 60333:tid 60474] [client 52.139.37.240:32172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/update/da222.php"] [unique_id "apK-sDwSHPvvQcBSRbsgLwAAAZQ"]
[Sat Aug 29 05:12:48.531327 2026] [security2:error] [pid 1321:tid 1527] [client 4.205.62.107:53507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/phpversion.php"] [unique_id "apK-sGjCPtor9NZ-byQSRgAABmM"]
[Sat Aug 29 05:12:48.533481 2026] [security2:error] [pid 1321:tid 1532] [client 158.23.147.79:64407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/content.php"] [unique_id "apK-sGjCPtor9NZ-byQSRwAABmg"]
[Sat Aug 29 05:12:48.534740 2026] [security2:error] [pid 60333:tid 60534] [client 74.248.24.12:16861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/wp-admin/index.php"] [unique_id "apK-sDwSHPvvQcBSRbsgMAAAAdA"]
[Sat Aug 29 05:12:48.534953 2026] [security2:error] [pid 60333:tid 60504] [client 20.220.204.93:18294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/gdn.php"] [unique_id "apK-sDwSHPvvQcBSRbsgMQAAAbI"]
[Sat Aug 29 05:12:48.590864 2026] [security2:error] [pid 1321:tid 1564] [client 158.23.184.117:1454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/wp-includes/ID3/file.php"] [unique_id "apK-sGjCPtor9NZ-byQSTAAABoc"]
[Sat Aug 29 05:12:48.593931 2026] [security2:error] [pid 60333:tid 60582] [client 20.151.200.44:55734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/horeg.php"] [unique_id "apK-sDwSHPvvQcBSRbsgMwAAAgA"]
[Sat Aug 29 05:12:48.610303 2026] [security2:error] [pid 1321:tid 1499] [client 4.205.62.107:62924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/tinyfilemanager.php"] [unique_id "apK-sGjCPtor9NZ-byQSTQAABkc"]
[Sat Aug 29 05:12:48.613510 2026] [security2:error] [pid 1321:tid 1516] [client 158.23.184.117:44503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/wp-admin/css/admin.php"] [unique_id "apK-sGjCPtor9NZ-byQSTgAABlg"]
[Sat Aug 29 05:12:48.631390 2026] [security2:error] [pid 1321:tid 1523] [client 158.23.184.117:12536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ccfinancialaccounting.com"] [uri "/wp-includes/mani.php"] [unique_id "apK-sGjCPtor9NZ-byQSUQAABl8"]
[Sat Aug 29 05:12:48.653840 2026] [security2:error] [pid 60333:tid 60595] [client 158.23.147.79:7053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/login.php"] [unique_id "apK-sDwSHPvvQcBSRbsgQgAAAg0"]
[Sat Aug 29 05:12:48.661098 2026] [security2:error] [pid 1321:tid 1613] [client 158.23.184.117:57925] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/wp-themes.php"] [unique_id "apK-sGjCPtor9NZ-byQSUwAABrg"]
[Sat Aug 29 05:12:48.661957 2026] [security2:error] [pid 60333:tid 60487] [client 4.205.62.107:63237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/hiquido.com/index.php"] [unique_id "apK-sDwSHPvvQcBSRbsgRAAAAaE"]
[Sat Aug 29 05:12:48.695195 2026] [autoindex:error] [pid 60333:tid 60501] [client 158.158.54.35:1523] AH01276: Cannot serve directory /home2/charlov7/public_html/dev/wp-admin/maint/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:12:48.733827 2026] [security2:error] [pid 60333:tid 60508] [client 20.196.209.81:11324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/NewFile.php"] [unique_id "apK-sDwSHPvvQcBSRbsgUwAAAbY"]
[Sat Aug 29 05:12:48.739714 2026] [security2:error] [pid 1321:tid 1586] [client 68.155.159.216:21262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/goat.php"] [unique_id "apK-sGjCPtor9NZ-byQSVgAABp0"]
[Sat Aug 29 05:12:48.741752 2026] [security2:error] [pid 1321:tid 1606] [client 103.185.242.143:50707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-sGjCPtor9NZ-byQSVwAABrE"]
[Sat Aug 29 05:12:48.741845 2026] [security2:error] [pid 1321:tid 1606] [client 103.185.242.143:50707] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-sGjCPtor9NZ-byQSVwAABrE"]
[Sat Aug 29 05:12:48.744281 2026] [security2:error] [pid 60333:tid 60555] [client 158.158.54.35:18039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/404.php"] [unique_id "apK-sDwSHPvvQcBSRbsgVAAAAeU"]
[Sat Aug 29 05:12:48.745775 2026] [security2:error] [pid 1321:tid 1504] [client 20.197.61.180:3348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thatsaturdaythang.lifesosweet.com"] [uri "/wp-blog-header.php"] [unique_id "apK-sGjCPtor9NZ-byQSWAAABkw"]
[Sat Aug 29 05:12:48.757533 2026] [security2:error] [pid 60333:tid 60567] [client 158.23.184.117:51123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.carolinaclosingattorney.com"] [uri "/wp-admin/css/fff.php"] [unique_id "apK-sDwSHPvvQcBSRbsgVQAAAfE"]
[Sat Aug 29 05:12:48.760266 2026] [security2:error] [pid 60333:tid 60485] [client 158.23.184.117:44487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/bthil.php"] [unique_id "apK-sDwSHPvvQcBSRbsgVgAAAZ8"]
[Sat Aug 29 05:12:48.776706 2026] [security2:error] [pid 1321:tid 1555] [client 158.23.184.117:12506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ccfinancialaccounting.com"] [uri "/wp-includes/Test.php"] [unique_id "apK-sGjCPtor9NZ-byQSWQAABn4"]
[Sat Aug 29 05:12:48.787799 2026] [security2:error] [pid 60333:tid 60562] [client 20.196.209.81:5001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/about.php525"] [unique_id "apK-sDwSHPvvQcBSRbsgWQAAAew"]
[Sat Aug 29 05:12:48.792477 2026] [security2:error] [pid 1321:tid 1510] [client 4.205.62.107:63396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/radio.php"] [unique_id "apK-sGjCPtor9NZ-byQSWgAABlI"]
[Sat Aug 29 05:12:48.798657 2026] [security2:error] [pid 1321:tid 1506] [client 52.139.37.240:32161] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/wp-admin/min.php"] [unique_id "apK-sGjCPtor9NZ-byQSWwAABk4"]
[Sat Aug 29 05:12:48.808666 2026] [security2:error] [pid 1321:tid 1525] [client 158.23.184.117:62022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/adminfuns.php/.well-known/acme-challenge/file.php"] [unique_id "apK-sGjCPtor9NZ-byQSXAAABmE"]
[Sat Aug 29 05:12:48.812819 2026] [security2:error] [pid 60333:tid 60489] [client 20.197.61.180:3683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-content/admin-header.php"] [unique_id "apK-sDwSHPvvQcBSRbsgXgAAAaM"]
[Sat Aug 29 05:12:48.817800 2026] [security2:error] [pid 60333:tid 60530] [client 20.52.41.200:2158] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/f.php"] [unique_id "apK-sDwSHPvvQcBSRbsgYQAAAcw"]
[Sat Aug 29 05:12:48.829392 2026] [security2:error] [pid 1321:tid 1560] [client 68.155.159.216:43867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/wp-content/admin.php"] [unique_id "apK-sGjCPtor9NZ-byQSXQAABoM"]
[Sat Aug 29 05:12:48.842050 2026] [security2:error] [pid 60333:tid 60590] [client 158.158.54.35:1523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK-sDwSHPvvQcBSRbsgYwAAAgg"]
[Sat Aug 29 05:12:48.865257 2026] [security2:error] [pid 60333:tid 60574] [client 158.23.147.79:49811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/wp-admin/images/about.php"] [unique_id "apK-sDwSHPvvQcBSRbsgZQAAAfg"]
[Sat Aug 29 05:12:48.898281 2026] [security2:error] [pid 1321:tid 1583] [client 20.196.209.81:14770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/post.php"] [unique_id "apK-sGjCPtor9NZ-byQSXgAABpo"]
[Sat Aug 29 05:12:48.906947 2026] [security2:error] [pid 60333:tid 60535] [client 158.23.184.117:44405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/file.php"] [unique_id "apK-sDwSHPvvQcBSRbsgaAAAAdE"]
[Sat Aug 29 05:12:48.930894 2026] [security2:error] [pid 1321:tid 1563] [client 20.63.219.114:11627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/wxo.php"] [unique_id "apK-sGjCPtor9NZ-byQSYAAABoY"]
[Sat Aug 29 05:12:48.944638 2026] [access_compat:error] [pid 1321:tid 1557] [client 67.20.76.220:38558] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:12:48.968160 2026] [security2:error] [pid 60333:tid 60479] [client 158.23.184.117:12530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ccfinancialaccounting.com"] [uri "/wp-includes/pomo.php"] [unique_id "apK-sDwSHPvvQcBSRbsgcwAAAZk"]
[Sat Aug 29 05:12:48.999232 2026] [security2:error] [pid 60333:tid 60580] [client 52.139.37.240:32136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/wp-admin/wp-fileesx-449.php"] [unique_id "apK-sDwSHPvvQcBSRbsgdwAAAf4"]
[Sat Aug 29 05:12:49.009621 2026] [security2:error] [pid 60333:tid 60586] [client 158.23.184.117:57924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "apK-sTwSHPvvQcBSRbsgeQAAAgQ"]
[Sat Aug 29 05:12:49.039589 2026] [security2:error] [pid 60333:tid 60520] [client 20.151.200.44:55683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/basic.php"] [unique_id "apK-sTwSHPvvQcBSRbsgfAAAAcI"]
[Sat Aug 29 05:12:49.041407 2026] [security2:error] [pid 1321:tid 1612] [client 20.104.104.62:64734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/tesla1.php"] [unique_id "apK-sWjCPtor9NZ-byQSZAAABrc"]
[Sat Aug 29 05:12:49.051327 2026] [security2:error] [pid 60333:tid 60544] [client 158.23.184.117:44284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/lock360.php"] [unique_id "apK-sTwSHPvvQcBSRbsggAAAAdo"]
[Sat Aug 29 05:12:49.051346 2026] [security2:error] [pid 60333:tid 60554] [client 74.248.24.12:24392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/radio.php"] [unique_id "apK-sTwSHPvvQcBSRbsggQAAAeQ"]
[Sat Aug 29 05:12:49.070789 2026] [security2:error] [pid 60333:tid 60519] [client 68.155.159.216:38699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-includes/index.php"] [unique_id "apK-sTwSHPvvQcBSRbsghgAAAcE"]
[Sat Aug 29 05:12:49.103393 2026] [security2:error] [pid 60333:tid 60585] [client 20.220.204.93:57458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/f2.php"] [unique_id "apK-sTwSHPvvQcBSRbsghwAAAgM"]
[Sat Aug 29 05:12:49.119227 2026] [security2:error] [pid 60333:tid 60596] [client 158.23.147.79:24557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/.well-knownold/index.php"] [unique_id "apK-sTwSHPvvQcBSRbsgjAAAAg4"]
[Sat Aug 29 05:12:49.120531 2026] [security2:error] [pid 1321:tid 1610] [client 158.23.147.79:14244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/worksec.php"] [unique_id "apK-sWjCPtor9NZ-byQSZgAABrU"]
[Sat Aug 29 05:12:49.133093 2026] [security2:error] [pid 60333:tid 60512] [client 20.196.209.81:2020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/config.php"] [unique_id "apK-sTwSHPvvQcBSRbsgjQAAAbo"]
[Sat Aug 29 05:12:49.153128 2026] [security2:error] [pid 60333:tid 60570] [client 158.23.184.117:37149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "indianheadmtn-arrrhouse.com"] [uri "/11.php"] [unique_id "apK-sTwSHPvvQcBSRbsglQAAAfQ"]
[Sat Aug 29 05:12:49.159015 2026] [security2:error] [pid 60333:tid 60526] [client 68.155.159.216:2035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK-sTwSHPvvQcBSRbsglgAAAcg"]
[Sat Aug 29 05:12:49.186768 2026] [security2:error] [pid 60333:tid 60499] [client 20.196.209.81:5014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/spip.php"] [unique_id "apK-sTwSHPvvQcBSRbsgmAAAAa0"]
[Sat Aug 29 05:12:49.191823 2026] [security2:error] [pid 1321:tid 1526] [client 20.104.49.130:60953] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/wp-good.php"] [unique_id "apK-sWjCPtor9NZ-byQSaQAABmI"]
[Sat Aug 29 05:12:49.197584 2026] [security2:error] [pid 60333:tid 60553] [client 158.23.184.117:44278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/fpwch.php"] [unique_id "apK-sTwSHPvvQcBSRbsgnAAAAeM"]
[Sat Aug 29 05:12:49.200905 2026] [security2:error] [pid 60333:tid 60471] [client 52.139.37.240:32190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/wp-content/themes/min.php"] [unique_id "apK-sTwSHPvvQcBSRbsgnQAAAZE"]
[Sat Aug 29 05:12:49.227717 2026] [security2:error] [pid 1321:tid 1565] [client 158.23.184.117:12337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ccfinancialaccounting.com"] [uri "/wp-admin/link-add.php"] [unique_id "apK-sWjCPtor9NZ-byQSagAABog"]
[Sat Aug 29 05:12:49.251866 2026] [security2:error] [pid 1321:tid 1584] [client 158.158.54.35:17637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/php.php"] [unique_id "apK-sWjCPtor9NZ-byQSbAAABps"]
[Sat Aug 29 05:12:49.259977 2026] [security2:error] [pid 1321:tid 1573] [client 103.240.76.112:42787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK-sWjCPtor9NZ-byQSbQAABpA"]
[Sat Aug 29 05:12:49.260124 2026] [security2:error] [pid 1321:tid 1573] [client 103.240.76.112:42787] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK-sWjCPtor9NZ-byQSbQAABpA"]
[Sat Aug 29 05:12:49.261232 2026] [security2:error] [pid 60333:tid 60540] [client 4.205.62.107:5531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/groceries/index.php"] [unique_id "apK-sTwSHPvvQcBSRbsgpwAAAdY"]
[Sat Aug 29 05:12:49.277945 2026] [security2:error] [pid 60333:tid 60572] [client 20.52.41.200:2703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/av.php"] [unique_id "apK-sTwSHPvvQcBSRbsgqgAAAfY"]
[Sat Aug 29 05:12:49.292529 2026] [security2:error] [pid 60333:tid 60505] [client 20.196.209.81:20912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/csv.php"] [unique_id "apK-sTwSHPvvQcBSRbsgrQAAAbM"]
[Sat Aug 29 05:12:49.326437 2026] [security2:error] [pid 60333:tid 60465] [remote 93.123.109.228:58030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/.wp-config.php.swp"] [unique_id "apK-sTwSHPvvQcBSRbsgrwACAH4"]
[Sat Aug 29 05:12:49.330249 2026] [security2:error] [pid 60333:tid 60513] [client 20.151.200.44:27604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/sko.php"] [unique_id "apK-sTwSHPvvQcBSRbsgsQAAAbs"]
[Sat Aug 29 05:12:49.342536 2026] [security2:error] [pid 60333:tid 60523] [client 4.205.62.107:64231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/aws_sdk_settings.php"] [unique_id "apK-sTwSHPvvQcBSRbsgtAAAAcU"]
[Sat Aug 29 05:12:49.343735 2026] [security2:error] [pid 60333:tid 60534] [client 158.23.184.117:44525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/storage/index.php"] [unique_id "apK-sTwSHPvvQcBSRbsgtQAAAdA"]
[Sat Aug 29 05:12:49.347400 2026] [security2:error] [pid 1321:tid 1498] [client 20.63.219.114:18843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/as.php"] [unique_id "apK-sWjCPtor9NZ-byQSbgAABkY"]
[Sat Aug 29 05:12:49.372123 2026] [security2:error] [pid 60333:tid 60490] [client 158.23.184.117:13206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ccfinancialaccounting.com"] [uri "/wp-includes/Text.php"] [unique_id "apK-sTwSHPvvQcBSRbsguAAAAaQ"]
[Sat Aug 29 05:12:49.405351 2026] [security2:error] [pid 1321:tid 1508] [client 52.139.37.240:51735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/wp-content/themes/x/bypass.php"] [unique_id "apK-sWjCPtor9NZ-byQScAAABlA"]
[Sat Aug 29 05:12:49.420387 2026] [security2:error] [pid 1321:tid 1567] [client 68.155.159.216:55109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.angelesforestranch.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK-sWjCPtor9NZ-byQScQAABoo"]
[Sat Aug 29 05:12:49.444536 2026] [security2:error] [pid 1321:tid 1564] [client 20.197.61.180:3369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thatsaturdaythang.lifesosweet.com"] [uri "/wp-blogs.php"] [unique_id "apK-sWjCPtor9NZ-byQScgAABoc"]
[Sat Aug 29 05:12:49.491526 2026] [security2:error] [pid 60333:tid 60531] [client 158.23.147.79:24519] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.paulroyce.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-sTwSHPvvQcBSRbsgxQAAAc0"]
[Sat Aug 29 05:12:49.500530 2026] [security2:error] [pid 60333:tid 60482] [client 103.48.146.148:57137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 148.146.48.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK-sTwSHPvvQcBSRbsgxgAAAZw"]
[Sat Aug 29 05:12:49.500661 2026] [security2:error] [pid 60333:tid 60482] [client 103.48.146.148:57137] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK-sTwSHPvvQcBSRbsgxgAAAZw"]
[Sat Aug 29 05:12:49.517967 2026] [security2:error] [pid 60333:tid 60485] [client 158.23.184.117:12491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ccfinancialaccounting.com"] [uri "/wp-trackback.php"] [unique_id "apK-sTwSHPvvQcBSRbsgyAAAAZ8"]
[Sat Aug 29 05:12:49.525053 2026] [security2:error] [pid 1321:tid 1560] [client 20.220.204.93:18764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/grsiuk.php"] [unique_id "apK-sWjCPtor9NZ-byQSdAAABoM"]
[Sat Aug 29 05:12:49.539000 2026] [security2:error] [pid 1321:tid 1569] [client 158.23.184.117:44493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/wp-includes/blocks/search/index.php"] [unique_id "apK-sWjCPtor9NZ-byQSdwAABow"]
[Sat Aug 29 05:12:49.539450 2026] [security2:error] [pid 1321:tid 1590] [client 20.197.61.180:3782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-content/admin.php"] [unique_id "apK-sWjCPtor9NZ-byQSeAAABqE"]
[Sat Aug 29 05:12:49.560170 2026] [security2:error] [pid 1321:tid 1601] [client 20.196.209.81:1985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/22.php"] [unique_id "apK-sWjCPtor9NZ-byQSeQAABqw"]
[Sat Aug 29 05:12:49.561634 2026] [security2:error] [pid 1321:tid 1489] [client 216.51.171.83:60208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 83.171.51.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-sWjCPtor9NZ-byQSegAABj0"]
[Sat Aug 29 05:12:49.561718 2026] [security2:error] [pid 1321:tid 1489] [client 216.51.171.83:60208] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-sWjCPtor9NZ-byQSegAABj0"]
[Sat Aug 29 05:12:49.568732 2026] [security2:error] [pid 60333:tid 60538] [client 74.248.24.12:40248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/item.php"] [unique_id "apK-sTwSHPvvQcBSRbsg1gAAAdQ"]
[Sat Aug 29 05:12:49.587635 2026] [security2:error] [pid 1321:tid 1504] [client 20.196.209.81:5045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/backup.php"] [unique_id "apK-sWjCPtor9NZ-byQSfAAABkw"]
[Sat Aug 29 05:12:49.613522 2026] [autoindex:error] [pid 1321:tid 1550] [client 158.158.54.35:0] AH01276: Cannot serve directory /home2/charlov7/public_html/dev/wp-includes/css/dist/widgets/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:12:49.631899 2026] [security2:error] [pid 60333:tid 60567] [client 65.21.113.248:41758] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.babyboomerscare.com"] [uri "/index.php"] [unique_id "apK-sTwSHPvvQcBSRbsgvQAAAfE"]
[Sat Aug 29 05:12:49.669764 2026] [security2:error] [pid 1321:tid 1509] [client 158.23.184.117:13208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ccfinancialaccounting.com"] [uri "/wp-admin/maint.php"] [unique_id "apK-sWjCPtor9NZ-byQSggAABlE"]
[Sat Aug 29 05:12:49.672167 2026] [security2:error] [pid 60333:tid 60558] [client 4.205.62.107:61740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/adminfus.php"] [unique_id "apK-sTwSHPvvQcBSRbsg3AAAAeg"]
[Sat Aug 29 05:12:49.673590 2026] [security2:error] [pid 60333:tid 60522] [client 20.104.104.62:64711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/shadowx.php"] [unique_id "apK-sTwSHPvvQcBSRbsg2wAAAcQ"]
[Sat Aug 29 05:12:49.684811 2026] [security2:error] [pid 60333:tid 60550] [client 158.23.184.117:44239] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/wp-signup.php"] [unique_id "apK-sTwSHPvvQcBSRbsg3wAAAeA"]
[Sat Aug 29 05:12:49.689386 2026] [security2:error] [pid 1321:tid 1523] [client 52.139.37.240:32072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "apK-sWjCPtor9NZ-byQShwAABl8"]
[Sat Aug 29 05:12:49.693809 2026] [security2:error] [pid 1321:tid 1584] [client 158.23.147.79:64485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK-sWjCPtor9NZ-byQSiAAABps"]
[Sat Aug 29 05:12:49.694048 2026] [security2:error] [pid 1321:tid 1548] [client 20.196.209.81:20899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/fox.php"] [unique_id "apK-sWjCPtor9NZ-byQSiQAABnc"]
[Sat Aug 29 05:12:49.708674 2026] [security2:error] [pid 1321:tid 1529] [client 20.63.219.114:9264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/room.php"] [unique_id "apK-sWjCPtor9NZ-byQSigAABmU"]
[Sat Aug 29 05:12:49.717041 2026] [security2:error] [pid 1321:tid 1497] [client 158.158.54.35:7306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/init.php"] [unique_id "apK-sWjCPtor9NZ-byQSiwAABkU"]
[Sat Aug 29 05:12:49.737277 2026] [security2:error] [pid 1321:tid 1547] [client 20.52.41.200:2944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/file.php"] [unique_id "apK-sWjCPtor9NZ-byQSjAAABnY"]
[Sat Aug 29 05:12:49.758417 2026] [security2:error] [pid 60333:tid 60586] [client 68.155.159.216:64020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK-sTwSHPvvQcBSRbsg7QAAAgQ"]
[Sat Aug 29 05:12:49.765723 2026] [security2:error] [pid 1321:tid 1469] [remote 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK-sWjCPtor9NZ-byQSjQAGmm4"]
[Sat Aug 29 05:12:49.767546 2026] [security2:error] [pid 1321:tid 1583] [client 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK-sWjCPtor9NZ-byQSjQAGmm4"]
[Sat Aug 29 05:12:49.776458 2026] [security2:error] [pid 1321:tid 1597] [client 4.205.62.107:32539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/05.php"] [unique_id "apK-sWjCPtor9NZ-byQSjgAABqg"]
[Sat Aug 29 05:12:49.807486 2026] [security2:error] [pid 60333:tid 60585] [client 158.158.54.35:33404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK-sTwSHPvvQcBSRbsg9AAAAgM"]
[Sat Aug 29 05:12:49.812962 2026] [security2:error] [pid 60333:tid 60472] [client 4.205.62.107:63242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/ws79.php"] [unique_id "apK-sTwSHPvvQcBSRbsg9QAAAZI"]
[Sat Aug 29 05:12:49.816242 2026] [security2:error] [pid 60333:tid 60589] [client 158.23.184.117:12529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ccfinancialaccounting.com"] [uri "/wp-includes/num.php"] [unique_id "apK-sTwSHPvvQcBSRbsg9gAAAgc"]
[Sat Aug 29 05:12:49.816624 2026] [security2:error] [pid 60333:tid 60560] [client 114.119.152.221:20441] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.classiclightingusa.com"] [uri "/catalog/product_reviews.php/products_id/1131/osCsid/f9ru1hduvmshu21llecja4bd61"] [unique_id "apK-sTwSHPvvQcBSRbsg9wAAAeo"], referer: http://www.classiclightingusa.com/catalog/product_info.php/products_id/1131/osCsid/f9ru1hduvmshu21llecja4bd61
[Sat Aug 29 05:12:49.824700 2026] [security2:error] [pid 60333:tid 60497] [client 20.220.204.93:18799] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/wp-scr1pts.php"] [unique_id "apK-sTwSHPvvQcBSRbsg-AAAAas"]
[Sat Aug 29 05:12:49.832828 2026] [security2:error] [pid 60333:tid 60520] [client 158.23.184.117:44540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/404.php"] [unique_id "apK-sTwSHPvvQcBSRbsg-gAAAcI"]
[Sat Aug 29 05:12:49.887623 2026] [security2:error] [pid 60333:tid 60498] [client 52.139.37.240:51731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/wp-info.php"] [unique_id "apK-sTwSHPvvQcBSRbsg_wAAAaw"]
[Sat Aug 29 05:12:49.909855 2026] [security2:error] [pid 60333:tid 60546] [client 35.86.223.62:34474] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "TRACE" at REQUEST_METHOD. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "52"] [id "340002"] [rev "3"] [msg "Atomicorp.com WAF Rules: TRACE/TRACK method denied"] [severity "CRITICAL"] [hostname "host2038.hostmonster.com"] [uri "/"] [unique_id "apK-sTwSHPvvQcBSRbshAQAAAdw"]
[Sat Aug 29 05:12:49.931427 2026] [security2:error] [pid 60333:tid 60591] [client 4.205.62.107:61446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/xa.php"] [unique_id "apK-sTwSHPvvQcBSRbshAwAAAgk"]
[Sat Aug 29 05:12:49.937462 2026] [security2:error] [pid 1321:tid 1563] [client 68.155.159.216:43921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/xmlrpc.php"] [unique_id "apK-sWjCPtor9NZ-byQSkQAABoY"]
[Sat Aug 29 05:12:49.967476 2026] [security2:error] [pid 60333:tid 60492] [client 158.23.184.117:13187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ccfinancialaccounting.com"] [uri "/identity.php"] [unique_id "apK-sTwSHPvvQcBSRbshBQAAAaY"]
[Sat Aug 29 05:12:49.982483 2026] [security2:error] [pid 60333:tid 60594] [client 158.23.184.117:44490] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/as.php"] [unique_id "apK-sTwSHPvvQcBSRbshCAAAAgw"]
[Sat Aug 29 05:12:50.046140 2026] [security2:error] [pid 60333:tid 60417] [remote 93.123.109.228:58030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK-sjwSHPvvQcBSRbshDwABlE4"]
[Sat Aug 29 05:12:50.051205 2026] [security2:error] [pid 60333:tid 60551] [client 158.23.147.79:50121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "apK-sjwSHPvvQcBSRbshEQAAAeE"]
[Sat Aug 29 05:12:50.057411 2026] [security2:error] [pid 60333:tid 60576] [client 20.196.209.81:9334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/haiterus.php"] [unique_id "apK-sjwSHPvvQcBSRbshFAAAAfo"]
[Sat Aug 29 05:12:50.071502 2026] [security2:error] [pid 60333:tid 60542] [client 20.104.104.62:20617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/hexor.php"] [unique_id "apK-sjwSHPvvQcBSRbshGAAAAdg"]
[Sat Aug 29 05:12:50.072480 2026] [security2:error] [pid 60333:tid 60517] [client 35.86.223.62:31084] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "TRACE" at REQUEST_METHOD. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "52"] [id "340002"] [rev "3"] [msg "Atomicorp.com WAF Rules: TRACE/TRACK method denied"] [severity "CRITICAL"] [hostname "gavirestaurant.com"] [uri "/"] [unique_id "apK-sjwSHPvvQcBSRbshGQAAAb8"]
[Sat Aug 29 05:12:50.083436 2026] [security2:error] [pid 1321:tid 1507] [client 158.23.147.79:31708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carpevictoriam.com"] [uri "/NewFile.php/"] [unique_id "apK-smjCPtor9NZ-byQSlAAABk8"]
[Sat Aug 29 05:12:50.090320 2026] [security2:error] [pid 60333:tid 60563] [client 52.139.37.240:32081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/wp-wordfence-waf.php"] [unique_id "apK-sjwSHPvvQcBSRbshHAAAAe0"]
[Sat Aug 29 05:12:50.090969 2026] [security2:error] [pid 60333:tid 60531] [client 20.104.49.130:52298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/bdroot.php"] [unique_id "apK-sjwSHPvvQcBSRbshHQAAAc0"]
[Sat Aug 29 05:12:50.098373 2026] [security2:error] [pid 1321:tid 1543] [client 74.248.24.12:16884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/t.php"] [unique_id "apK-smjCPtor9NZ-byQSlgAABnM"]
[Sat Aug 29 05:12:50.104370 2026] [security2:error] [pid 60333:tid 60529] [client 20.196.209.81:1992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/disagraeosc.php"] [unique_id "apK-sjwSHPvvQcBSRbshHgAAAcs"]
[Sat Aug 29 05:12:50.121071 2026] [security2:error] [pid 60333:tid 60477] [client 20.63.219.114:1873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/class-wp-cmd.php"] [unique_id "apK-sjwSHPvvQcBSRbshHwAAAZc"]
[Sat Aug 29 05:12:50.125858 2026] [security2:error] [pid 60333:tid 60510] [client 158.23.184.117:44489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/php.php"] [unique_id "apK-sjwSHPvvQcBSRbshIAAAAbg"]
[Sat Aug 29 05:12:50.155808 2026] [security2:error] [pid 60333:tid 60481] [client 20.104.49.130:53518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pvillusions.com"] [uri "/sxxb.php"] [unique_id "apK-sjwSHPvvQcBSRbshJAAAAZs"]
[Sat Aug 29 05:12:50.167565 2026] [security2:error] [pid 60333:tid 60540] [client 20.197.61.180:8776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thatsaturdaythang.lifesosweet.com"] [uri "/wp-comments-post.php"] [unique_id "apK-sjwSHPvvQcBSRbshJwAAAdY"]
[Sat Aug 29 05:12:50.178244 2026] [security2:error] [pid 60333:tid 60486] [client 158.158.54.35:10305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "apK-sjwSHPvvQcBSRbshKAAAAaA"]
[Sat Aug 29 05:12:50.183148 2026] [security2:error] [pid 60333:tid 60488] [client 20.220.204.93:18258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/num.php"] [unique_id "apK-sjwSHPvvQcBSRbshKQAAAaI"]
[Sat Aug 29 05:12:50.187727 2026] [security2:error] [pid 60333:tid 60555] [client 20.52.41.200:2736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK-sjwSHPvvQcBSRbshKgAAAeU"]
[Sat Aug 29 05:12:50.203207 2026] [security2:error] [pid 60333:tid 60561] [client 20.196.209.81:11264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/bak.phps"] [unique_id "apK-sjwSHPvvQcBSRbshLgAAAes"]
[Sat Aug 29 05:12:50.211733 2026] [security2:error] [pid 60333:tid 60503] [client 158.23.184.117:13189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ccfinancialaccounting.com"] [uri "/Radio.php"] [unique_id "apK-sjwSHPvvQcBSRbshMAAAAbE"]
[Sat Aug 29 05:12:50.232224 2026] [security2:error] [pid 60333:tid 60582] [client 158.23.147.79:14265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/x.php"] [unique_id "apK-sjwSHPvvQcBSRbshMQAAAgA"]
[Sat Aug 29 05:12:50.245485 2026] [security2:error] [pid 60333:tid 60482] [client 158.158.54.35:1291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/num.php"] [unique_id "apK-sjwSHPvvQcBSRbshMgAAAZw"]
[Sat Aug 29 05:12:50.250907 2026] [security2:error] [pid 60333:tid 60484] [client 20.197.61.180:8796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-content/autoload_classmap.php"] [unique_id "apK-sjwSHPvvQcBSRbshMwAAAZ4"]
[Sat Aug 29 05:12:50.252470 2026] [security2:error] [pid 60333:tid 60549] [client 158.23.147.79:24523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK-sjwSHPvvQcBSRbshNAAAAd8"]
[Sat Aug 29 05:12:50.265772 2026] [security2:error] [pid 60333:tid 60480] [client 68.155.159.216:2017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK-sjwSHPvvQcBSRbshNQAAAZo"]
[Sat Aug 29 05:12:50.270701 2026] [security2:error] [pid 60333:tid 60516] [client 158.23.184.117:44393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/term.php"] [unique_id "apK-sjwSHPvvQcBSRbshNgAAAb4"]
[Sat Aug 29 05:12:50.296094 2026] [security2:error] [pid 60333:tid 60470] [client 52.139.37.240:32075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/ws49.php"] [unique_id "apK-sjwSHPvvQcBSRbshPgAAAZA"]
[Sat Aug 29 05:12:50.298870 2026] [security2:error] [pid 60333:tid 60436] [remote 93.123.109.228:58030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/admin/phpinfo.php"] [unique_id "apK-sjwSHPvvQcBSRbshPwABtWE"]
[Sat Aug 29 05:12:50.303734 2026] [security2:error] [pid 60333:tid 60469] [client 68.155.159.216:49027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK-sjwSHPvvQcBSRbshQQAAAY8"]
[Sat Aug 29 05:12:50.315746 2026] [security2:error] [pid 60333:tid 60439] [remote 93.123.109.228:58030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/admin_phpinfo.php"] [unique_id "apK-sjwSHPvvQcBSRbshQwABtWQ"]
[Sat Aug 29 05:12:50.398310 2026] [security2:error] [pid 60333:tid 60589] [client 4.205.62.107:6123] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/konfig.php"] [unique_id "apK-sjwSHPvvQcBSRbshUAAAAgc"]
[Sat Aug 29 05:12:50.413249 2026] [security2:error] [pid 60333:tid 60596] [client 158.23.184.117:13205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.ccfinancialaccounting.com"] [uri "/wp-includes/Requests/Exception/file.php"] [unique_id "apK-sjwSHPvvQcBSRbshUQAAAg4"]
[Sat Aug 29 05:12:50.428953 2026] [security2:error] [pid 60333:tid 60568] [client 20.104.104.62:20615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/leaf.php"] [unique_id "apK-sjwSHPvvQcBSRbshUwAAAfI"]
[Sat Aug 29 05:12:50.430226 2026] [security2:error] [pid 1321:tid 1367] [remote 13.140.187.88:34876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.187.140.13.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "goodgriefshakespeare.com"] [uri "/wp-login.php"] [unique_id "apK-smjCPtor9NZ-byQSlwAGuAk"]
[Sat Aug 29 05:12:50.459342 2026] [security2:error] [pid 1321:tid 1517] [client 20.220.204.93:36693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/a4.php"] [unique_id "apK-smjCPtor9NZ-byQSmAAABlk"]
[Sat Aug 29 05:12:50.477638 2026] [security2:error] [pid 60333:tid 60527] [client 4.205.62.107:64296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/setup-config.php"] [unique_id "apK-sjwSHPvvQcBSRbshWAAAAck"]
[Sat Aug 29 05:12:50.490436 2026] [security2:error] [pid 60333:tid 60496] [client 20.196.209.81:10020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/go.php"] [unique_id "apK-sjwSHPvvQcBSRbshYAAAAao"]
[Sat Aug 29 05:12:50.497471 2026] [security2:error] [pid 60333:tid 60497] [client 52.139.37.240:32766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/xxx.php"] [unique_id "apK-sjwSHPvvQcBSRbshYQAAAas"]
[Sat Aug 29 05:12:50.515016 2026] [security2:error] [pid 60333:tid 60472] [client 20.63.219.114:1101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/disagreed.php"] [unique_id "apK-sjwSHPvvQcBSRbshYwAAAZI"]
[Sat Aug 29 05:12:50.531529 2026] [security2:error] [pid 60333:tid 60554] [client 20.196.209.81:20906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/about.php525"] [unique_id "apK-sjwSHPvvQcBSRbshZgAAAeQ"]
[Sat Aug 29 05:12:50.532177 2026] [security2:error] [pid 60333:tid 60463] [remote 93.123.109.228:58030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/api/info.php"] [unique_id "apK-sjwSHPvvQcBSRbshZwABrXw"]
[Sat Aug 29 05:12:50.538579 2026] [security2:error] [pid 60333:tid 60547] [client 68.155.159.216:55106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.angelesforestranch.com"] [uri "/asd.php"] [unique_id "apK-sjwSHPvvQcBSRbshaAAAAd0"]
[Sat Aug 29 05:12:50.557255 2026] [ssl:error] [pid 60333:tid 60536] [client 98.84.1.175:38809] AH02032: Hostname host2038.hostmonster.com (default host as no SNI was provided) and hostname kwf.fiz.mybluehost.me provided via HTTP have no compatible SSL setup for policy 'secure'
[Sat Aug 29 05:12:50.596771 2026] [security2:error] [pid 1321:tid 1562] [client 158.23.147.79:39249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK-smjCPtor9NZ-byQSnAAABoU"]
[Sat Aug 29 05:12:50.598035 2026] [security2:error] [pid 1321:tid 1580] [client 20.196.209.81:14728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/install.php"] [unique_id "apK-smjCPtor9NZ-byQSnQAABpc"]
[Sat Aug 29 05:12:50.612280 2026] [security2:error] [pid 1321:tid 1609] [client 74.248.24.12:38691] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/i.php"] [unique_id "apK-smjCPtor9NZ-byQSngAABrQ"]
[Sat Aug 29 05:12:50.638563 2026] [security2:error] [pid 60333:tid 60553] [client 20.52.41.200:2703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/gmo.php"] [unique_id "apK-sjwSHPvvQcBSRbshdAAAAeM"]
[Sat Aug 29 05:12:50.645036 2026] [security2:error] [pid 60333:tid 60346] [remote 93.123.109.228:58030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/api/phpinfo.php"] [unique_id "apK-sjwSHPvvQcBSRbshdgACDQg"]
[Sat Aug 29 05:12:50.659248 2026] [security2:error] [pid 1321:tid 1605] [client 158.23.147.79:24527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.paulroyce.com"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "apK-smjCPtor9NZ-byQSnwAABrA"]
[Sat Aug 29 05:12:50.672613 2026] [security2:error] [pid 1321:tid 1526] [client 20.220.204.93:64644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/tfm.php"] [unique_id "apK-smjCPtor9NZ-byQSoAAABmI"]
[Sat Aug 29 05:12:50.682400 2026] [core:error] [pid 1321:tid 1565] [client 20.52.41.200:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:50.682421 2026] [core:error] [pid 1321:tid 1565] [client 20.52.41.200:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:50.710082 2026] [security2:error] [pid 60333:tid 60487] [client 52.139.37.240:32719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/0x.php"] [unique_id "apK-sjwSHPvvQcBSRbshfAAAAaE"]
[Sat Aug 29 05:12:50.746471 2026] [autoindex:error] [pid 60333:tid 60498] [client 158.158.54.35:1429] AH01276: Cannot serve directory /home2/charlov7/public_html/dev/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:12:50.793698 2026] [security2:error] [pid 1321:tid 1577] [client 20.48.250.41:50277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-smjCPtor9NZ-byQSogAABpQ"]
[Sat Aug 29 05:12:50.805118 2026] [security2:error] [pid 60333:tid 60556] [client 158.23.147.79:64421] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/goat.php"] [unique_id "apK-sjwSHPvvQcBSRbshiAAAAeY"]
[Sat Aug 29 05:12:50.806088 2026] [security2:error] [pid 60333:tid 60582] [client 20.48.250.41:45983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-sjwSHPvvQcBSRbshiQAAAgA"]
[Sat Aug 29 05:12:50.809363 2026] [security2:error] [pid 60333:tid 60574] [client 4.205.62.107:63974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/avim.php"] [unique_id "apK-sjwSHPvvQcBSRbshigAAAfg"]
[Sat Aug 29 05:12:50.854114 2026] [security2:error] [pid 60333:tid 60549] [client 68.155.159.216:21447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK-sjwSHPvvQcBSRbshjQAAAd8"]
[Sat Aug 29 05:12:50.869139 2026] [security2:error] [pid 1321:tid 1550] [client 68.155.159.216:64107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK-smjCPtor9NZ-byQSowAABnk"]
[Sat Aug 29 05:12:50.876778 2026] [security2:error] [pid 60333:tid 60541] [client 20.104.104.62:64752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/FoxWSOv1.php"] [unique_id "apK-sjwSHPvvQcBSRbshkAAAAdc"]
[Sat Aug 29 05:12:50.888865 2026] [authz_core:error] [pid 60333:tid 60494] [client 158.158.54.35:0] AH01630: client denied by server configuration: /home3/juntoohk/public_html/ebichili/wp-includes/Requests/library/error_log
[Sat Aug 29 05:12:50.890325 2026] [security2:error] [pid 1321:tid 1555] [client 20.197.61.180:8768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thatsaturdaythang.lifesosweet.com"] [uri "/wp-config.php"] [unique_id "apK-smjCPtor9NZ-byQSpgAABn4"]
[Sat Aug 29 05:12:50.893613 2026] [security2:error] [pid 60333:tid 60488] [client 20.196.209.81:14565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/gecko-new.php"] [unique_id "apK-sjwSHPvvQcBSRbshkgAAAaI"]
[Sat Aug 29 05:12:50.906470 2026] [security2:error] [pid 1321:tid 1501] [client 52.139.37.240:32181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/CDX1.php"] [unique_id "apK-smjCPtor9NZ-byQSpwAABkk"]
[Sat Aug 29 05:12:50.921007 2026] [security2:error] [pid 60333:tid 60483] [client 20.151.200.44:55654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/monso.php"] [unique_id "apK-sjwSHPvvQcBSRbshlQAAAZ0"]
[Sat Aug 29 05:12:50.930824 2026] [security2:error] [pid 1321:tid 1615] [client 4.205.62.107:62923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/wp-blog.php"] [unique_id "apK-smjCPtor9NZ-byQSqAAABro"]
[Sat Aug 29 05:12:50.931880 2026] [security2:error] [pid 1321:tid 1601] [client 20.63.219.114:1867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/class_api.php"] [unique_id "apK-smjCPtor9NZ-byQSqQAABqw"]
[Sat Aug 29 05:12:50.935334 2026] [security2:error] [pid 60333:tid 60565] [client 20.196.209.81:4512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/spip.php"] [unique_id "apK-sjwSHPvvQcBSRbshlwAAAe8"]
[Sat Aug 29 05:12:50.938019 2026] [security2:error] [pid 1321:tid 1581] [client 20.48.250.41:45964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-smjCPtor9NZ-byQSqwAABpg"]
[Sat Aug 29 05:12:50.939452 2026] [security2:error] [pid 60333:tid 60586] [client 20.220.204.93:9508] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/Geforce.php"] [unique_id "apK-sjwSHPvvQcBSRbshmAAAAgQ"]
[Sat Aug 29 05:12:50.944365 2026] [security2:error] [pid 1321:tid 1514] [client 20.48.250.41:49163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-smjCPtor9NZ-byQSrQAABlY"]
[Sat Aug 29 05:12:50.956383 2026] [security2:error] [pid 60333:tid 60532] [client 4.205.62.107:63247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/public/wp-blog.php"] [unique_id "apK-sjwSHPvvQcBSRbshnAAAAc4"]
[Sat Aug 29 05:12:50.971197 2026] [security2:error] [pid 1321:tid 1566] [client 103.171.189.88:58724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-smjCPtor9NZ-byQSrgAABok"]
[Sat Aug 29 05:12:50.971309 2026] [security2:error] [pid 1321:tid 1566] [client 103.171.189.88:58724] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-smjCPtor9NZ-byQSrgAABok"]
[Sat Aug 29 05:12:50.973102 2026] [security2:error] [pid 60333:tid 60581] [client 20.197.61.180:3344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-content/cache/min/1/wp-content/admin.php"] [unique_id "apK-sjwSHPvvQcBSRbshnQAAAf8"]
[Sat Aug 29 05:12:50.995237 2026] [security2:error] [pid 60333:tid 60480] [client 20.196.209.81:4527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/colour.php"] [unique_id "apK-sjwSHPvvQcBSRbshpwAAAZo"]
[Sat Aug 29 05:12:51.002023 2026] [security2:error] [pid 60333:tid 60513] [client 65.21.113.248:41758] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.babyboomerscare.com"] [uri "/index.php"] [unique_id "apK-sjwSHPvvQcBSRbshkQAAAbs"]
[Sat Aug 29 05:12:51.005108 2026] [access_compat:error] [pid 60333:tid 60562] [client 67.20.76.220:0] AH01797: client denied by server configuration: /home4/eastacar/public_html/djiboutihomes/wp-content/themes/wprentals/pins.txt
[Sat Aug 29 05:12:51.061896 2026] [security2:error] [pid 60333:tid 60592] [client 158.158.54.35:9742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-content/admin.php"] [unique_id "apK-szwSHPvvQcBSRbshrwAAAgo"]
[Sat Aug 29 05:12:51.066850 2026] [security2:error] [pid 60333:tid 60478] [client 4.205.62.107:63301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/ws61.php"] [unique_id "apK-szwSHPvvQcBSRbshsAAAAZg"]
[Sat Aug 29 05:12:51.082558 2026] [security2:error] [pid 60333:tid 60511] [client 20.52.41.200:2189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/classwithtostring.php"] [unique_id "apK-szwSHPvvQcBSRbshtwAAAbk"]
[Sat Aug 29 05:12:51.097244 2026] [security2:error] [pid 1321:tid 1557] [client 20.48.250.41:50233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/ff1.php"] [unique_id "apK-s2jCPtor9NZ-byQSsQAABoA"]
[Sat Aug 29 05:12:51.102186 2026] [security2:error] [pid 60333:tid 60547] [client 68.155.159.216:21429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-admin/css/index.php"] [unique_id "apK-szwSHPvvQcBSRbshuAAAAd0"]
[Sat Aug 29 05:12:51.106005 2026] [security2:error] [pid 60333:tid 60520] [client 20.48.250.41:46045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/ff1.php"] [unique_id "apK-szwSHPvvQcBSRbshuQAAAcI"]
[Sat Aug 29 05:12:51.107751 2026] [security2:error] [pid 1321:tid 1492] [client 52.139.37.240:32169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/akcc.php"] [unique_id "apK-s2jCPtor9NZ-byQSsgAABkA"]
[Sat Aug 29 05:12:51.126570 2026] [security2:error] [pid 60333:tid 60544] [client 74.248.24.12:31878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/deepseek_d.php"] [unique_id "apK-szwSHPvvQcBSRbshvAAAAdo"]
[Sat Aug 29 05:12:51.169983 2026] [security2:error] [pid 1321:tid 1580] [client 20.220.204.93:9595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/click.php"] [unique_id "apK-s2jCPtor9NZ-byQStAAABpc"]
[Sat Aug 29 05:12:51.172194 2026] [security2:error] [pid 60333:tid 60495] [client 158.23.147.79:49812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/wp-admin.php"] [unique_id "apK-szwSHPvvQcBSRbshvwAAAak"]
[Sat Aug 29 05:12:51.183325 2026] [security2:error] [pid 60333:tid 60515] [client 158.158.54.35:1429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "apK-szwSHPvvQcBSRbshwQAAAb0"]
[Sat Aug 29 05:12:51.196218 2026] [security2:error] [pid 60333:tid 60475] [client 20.104.104.62:40249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/foxwsov1.php"] [unique_id "apK-szwSHPvvQcBSRbshwgAAAZU"]
[Sat Aug 29 05:12:51.219815 2026] [security2:error] [pid 60333:tid 60596] [client 43.172.196.90:46824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.196.172.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewforum.php"] [unique_id "apK-szwSHPvvQcBSRbshwwAAAg4"]
[Sat Aug 29 05:12:51.221615 2026] [security2:error] [pid 60333:tid 60594] [client 158.23.147.79:31726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carpevictoriam.com"] [uri "/dropdown.php"] [unique_id "apK-szwSHPvvQcBSRbshxgAAAgw"]
[Sat Aug 29 05:12:51.231466 2026] [security2:error] [pid 60333:tid 60501] [client 68.155.159.216:38314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/mah.php"] [unique_id "apK-szwSHPvvQcBSRbshxwAAAa8"]
[Sat Aug 29 05:12:51.232902 2026] [security2:error] [pid 60333:tid 60588] [client 20.48.250.41:50229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/t.php"] [unique_id "apK-szwSHPvvQcBSRbshyQAAAgY"]
[Sat Aug 29 05:12:51.264325 2026] [security2:error] [pid 60333:tid 60575] [client 20.48.250.41:45956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/t.php"] [unique_id "apK-szwSHPvvQcBSRbshzwAAAfk"]
[Sat Aug 29 05:12:51.303190 2026] [security2:error] [pid 1321:tid 1583] [client 52.139.37.240:32131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK-s2jCPtor9NZ-byQStQAABpo"]
[Sat Aug 29 05:12:51.306550 2026] [security2:error] [pid 1321:tid 1576] [client 20.196.209.81:9331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/wp-admin.php"] [unique_id "apK-s2jCPtor9NZ-byQStgAABpM"]
[Sat Aug 29 05:12:51.313352 2026] [security2:error] [pid 60333:tid 60542] [client 20.104.49.130:53547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pvillusions.com"] [uri "/3.php"] [unique_id "apK-szwSHPvvQcBSRbsh1QAAAdg"]
[Sat Aug 29 05:12:51.330056 2026] [security2:error] [pid 60333:tid 60591] [client 43.172.197.200:53352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.197.172.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewforum.php"] [unique_id "apK-szwSHPvvQcBSRbsh1gAAAgk"]
[Sat Aug 29 05:12:51.339076 2026] [security2:error] [pid 60333:tid 60563] [client 158.23.147.79:14247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-content/x.php"] [unique_id "apK-szwSHPvvQcBSRbsh2wAAAe0"]
[Sat Aug 29 05:12:51.352766 2026] [security2:error] [pid 60333:tid 60490] [client 20.63.219.114:1127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/aksinet.php"] [unique_id "apK-szwSHPvvQcBSRbsh3gAAAaQ"]
[Sat Aug 29 05:12:51.357231 2026] [security2:error] [pid 60333:tid 60524] [client 20.220.204.93:9546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/ms.php"] [unique_id "apK-szwSHPvvQcBSRbsh3wAAAcY"]
[Sat Aug 29 05:12:51.384738 2026] [security2:error] [pid 60333:tid 60485] [client 68.155.159.216:1843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/nf_tracking.php"] [unique_id "apK-szwSHPvvQcBSRbsh4QAAAZ8"]
[Sat Aug 29 05:12:51.386552 2026] [security2:error] [pid 60333:tid 60476] [client 20.196.209.81:20922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/backup.php"] [unique_id "apK-szwSHPvvQcBSRbsh4gAAAZY"]
[Sat Aug 29 05:12:51.393177 2026] [security2:error] [pid 1321:tid 1548] [client 43.173.175.203:50140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 203.175.173.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "abantiquo.aldergate.net"] [uri "/viewforum.php"] [unique_id "apK-s2jCPtor9NZ-byQSuAAABnc"]
[Sat Aug 29 05:12:51.402018 2026] [security2:error] [pid 60333:tid 60481] [client 20.48.250.41:50270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/erty.php"] [unique_id "apK-szwSHPvvQcBSRbsh5AAAAZs"]
[Sat Aug 29 05:12:51.406599 2026] [security2:error] [pid 1321:tid 1605] [client 20.48.250.41:46050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/erty.php"] [unique_id "apK-s2jCPtor9NZ-byQSugAABrA"]
[Sat Aug 29 05:12:51.410659 2026] [security2:error] [pid 1321:tid 1499] [client 68.155.159.216:49085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/goat.php"] [unique_id "apK-s2jCPtor9NZ-byQSuwAABkc"]
[Sat Aug 29 05:12:51.444891 2026] [security2:error] [pid 60333:tid 60504] [client 20.196.209.81:4528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/OK.php"] [unique_id "apK-szwSHPvvQcBSRbsh6QAAAbI"]
[Sat Aug 29 05:12:51.450485 2026] [security2:error] [pid 1321:tid 1607] [client 158.23.147.79:24516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK-s2jCPtor9NZ-byQSvAAABrI"]
[Sat Aug 29 05:12:51.474204 2026] [security2:error] [pid 60333:tid 60409] [remote 34.138.144.127:57644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 127.144.138.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.scubaetcfl.com"] [uri "/info.php"] [unique_id "apK-szwSHPvvQcBSRbsh7AAB8UY"]
[Sat Aug 29 05:12:51.474949 2026] [security2:error] [pid 60333:tid 60410] [remote 34.138.144.127:57644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 127.144.138.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.scubaetcfl.com"] [uri "/test.php"] [unique_id "apK-szwSHPvvQcBSRbsh7QAB8Uc"]
[Sat Aug 29 05:12:51.491211 2026] [security2:error] [pid 60333:tid 60412] [remote 34.138.144.127:57644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 127.144.138.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.scubaetcfl.com"] [uri "/phpinfo.php"] [unique_id "apK-szwSHPvvQcBSRbsh8AAB30k"]
[Sat Aug 29 05:12:51.492130 2026] [security2:error] [pid 60333:tid 60411] [remote 34.138.144.127:57644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 127.144.138.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.scubaetcfl.com"] [uri "/pi.php"] [unique_id "apK-szwSHPvvQcBSRbsh8QAB30g"]
[Sat Aug 29 05:12:51.501394 2026] [security2:error] [pid 60333:tid 60555] [client 52.139.37.240:32709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/s.php"] [unique_id "apK-szwSHPvvQcBSRbsh8gAAAeU"]
[Sat Aug 29 05:12:51.531792 2026] [security2:error] [pid 60333:tid 60414] [remote 34.138.144.127:57644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 127.144.138.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.scubaetcfl.com"] [uri "/i.php"] [unique_id "apK-szwSHPvvQcBSRbsh9AAB1Es"]
[Sat Aug 29 05:12:51.535257 2026] [security2:error] [pid 60333:tid 60487] [client 158.158.54.35:10350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-configs.php"] [unique_id "apK-szwSHPvvQcBSRbsh9QAAAaE"]
[Sat Aug 29 05:12:51.539437 2026] [security2:error] [pid 60333:tid 60469] [client 68.155.159.216:43979] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/atomlib.php"] [unique_id "apK-szwSHPvvQcBSRbsh9gAAAY8"]
[Sat Aug 29 05:12:51.545184 2026] [security2:error] [pid 1321:tid 1532] [client 20.52.41.200:2698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/404.php"] [unique_id "apK-s2jCPtor9NZ-byQSvQAABmg"]
[Sat Aug 29 05:12:51.548203 2026] [security2:error] [pid 60333:tid 60494] [client 20.104.104.62:20631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/FoxWSOv2.php"] [unique_id "apK-szwSHPvvQcBSRbsh9wAAAag"]
[Sat Aug 29 05:12:51.550274 2026] [security2:error] [pid 60333:tid 60488] [client 68.155.159.216:43940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.theenprogroup.com"] [uri "/radio.php"] [unique_id "apK-szwSHPvvQcBSRbsh-AAAAaI"]
[Sat Aug 29 05:12:51.552971 2026] [security2:error] [pid 1321:tid 1525] [client 4.205.62.107:6099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/paths.php"] [unique_id "apK-s2jCPtor9NZ-byQSvgAABmE"]
[Sat Aug 29 05:12:51.562045 2026] [security2:error] [pid 1321:tid 1569] [client 20.48.250.41:46009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/0x.php"] [unique_id "apK-s2jCPtor9NZ-byQSvwAABow"]
[Sat Aug 29 05:12:51.578403 2026] [security2:error] [pid 60333:tid 60484] [client 20.48.250.41:50187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/0x.php"] [unique_id "apK-szwSHPvvQcBSRbsh-gAAAZ4"]
[Sat Aug 29 05:12:51.589428 2026] [security2:error] [pid 60333:tid 60508] [client 20.197.61.180:3366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thatsaturdaythang.lifesosweet.com"] [uri "/wp-configs.php"] [unique_id "apK-szwSHPvvQcBSRbsiAAAAAbY"]
[Sat Aug 29 05:12:51.590820 2026] [http2:warn] [pid 1321:tid 1572] [client 57.141.14.63:49242] h2_stream(1321-113-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:12:51.607824 2026] [security2:error] [pid 60333:tid 60532] [client 20.220.204.93:57438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/zxekqlxb.php"] [unique_id "apK-szwSHPvvQcBSRbsiBAAAAc4"]
[Sat Aug 29 05:12:51.623612 2026] [security2:error] [pid 60333:tid 60522] [client 4.205.62.107:64219] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/wp-admin/sc.php"] [unique_id "apK-szwSHPvvQcBSRbsiCQAAAcQ"]
[Sat Aug 29 05:12:51.626377 2026] [security2:error] [pid 1321:tid 1506] [client 158.158.54.35:33668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "apK-s2jCPtor9NZ-byQSwQAABk4"]
[Sat Aug 29 05:12:51.645534 2026] [cgid:error] [pid 60333:tid 60574] [client 74.248.24.12:40225] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/themysticalseven/404.shtml
[Sat Aug 29 05:12:51.674811 2026] [security2:error] [pid 60333:tid 60589] [client 57.141.14.21:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/cart/"] [unique_id "apK-szwSHPvvQcBSRbsiDwAAAgc"]
[Sat Aug 29 05:12:51.694402 2026] [security2:error] [pid 60333:tid 60592] [client 20.48.250.41:45914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/66.php"] [unique_id "apK-szwSHPvvQcBSRbsiEQAAAgo"]
[Sat Aug 29 05:12:51.703647 2026] [security2:error] [pid 60333:tid 60527] [client 158.23.147.79:39352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-includes/plugins.php"] [unique_id "apK-szwSHPvvQcBSRbsiEwAAAck"]
[Sat Aug 29 05:12:51.708024 2026] [security2:error] [pid 60333:tid 60582] [client 20.197.61.180:3788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-content/classwithtostring.php"] [unique_id "apK-szwSHPvvQcBSRbsiFQAAAgA"]
[Sat Aug 29 05:12:51.712264 2026] [security2:error] [pid 60333:tid 60431] [remote 34.138.144.127:57644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 127.144.138.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.scubaetcfl.com"] [uri "/app_dev.php/_profiler"] [unique_id "apK-szwSHPvvQcBSRbsiFgABmFw"]
[Sat Aug 29 05:12:51.712285 2026] [security2:error] [pid 60333:tid 60435] [remote 34.138.144.127:57644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 127.144.138.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.scubaetcfl.com"] [uri "/app_dev.php"] [unique_id "apK-szwSHPvvQcBSRbsiFwABmGA"]
[Sat Aug 29 05:12:51.712749 2026] [security2:error] [pid 60333:tid 60572] [client 20.196.209.81:9329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/wp-configs.php"] [unique_id "apK-szwSHPvvQcBSRbsiGAAAAfY"]
[Sat Aug 29 05:12:51.715837 2026] [security2:error] [pid 60333:tid 60514] [client 20.63.219.114:13978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/alfa-rex1.php"] [unique_id "apK-szwSHPvvQcBSRbsiGwAAAbw"]
[Sat Aug 29 05:12:51.717566 2026] [security2:error] [pid 60333:tid 60539] [client 52.139.37.240:32189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/sagax.php"] [unique_id "apK-szwSHPvvQcBSRbsiHAAAAdU"]
[Sat Aug 29 05:12:51.760242 2026] [security2:error] [pid 60333:tid 60496] [client 20.48.250.41:49223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/66.php"] [unique_id "apK-szwSHPvvQcBSRbsiHwAAAao"]
[Sat Aug 29 05:12:51.770558 2026] [security2:error] [pid 60333:tid 60559] [client 158.23.147.79:7059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/hehehehe.php"] [unique_id "apK-szwSHPvvQcBSRbsiIwAAAek"]
[Sat Aug 29 05:12:51.780120 2026] [security2:error] [pid 60333:tid 60554] [client 158.23.147.79:24410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.paulroyce.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apK-szwSHPvvQcBSRbsiJwAAAeQ"]
[Sat Aug 29 05:12:51.780717 2026] [security2:error] [pid 60333:tid 60562] [client 20.196.209.81:4511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/haiterus.php"] [unique_id "apK-szwSHPvvQcBSRbsiKAAAAew"]
[Sat Aug 29 05:12:51.816007 2026] [security2:error] [pid 60333:tid 60520] [client 74.248.24.12:40225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "apK-szwSHPvvQcBSRbsiLAAAAcI"]
[Sat Aug 29 05:12:51.834510 2026] [security2:error] [pid 1321:tid 1377] [remote 13.140.187.88:34876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.187.140.13.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "goodgriefshakespeare.com"] [uri "/wp-login.php"] [unique_id "apK-s2jCPtor9NZ-byQSwwAGTxM"], referer: https://goodgriefshakespeare.com/wp-login.php
[Sat Aug 29 05:12:51.845995 2026] [security2:error] [pid 1321:tid 1501] [client 20.196.209.81:2011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wagnerfarmscbd.com"] [uri "/aaa.php"] [unique_id "apK-s2jCPtor9NZ-byQSxAAABkk"]
[Sat Aug 29 05:12:51.857952 2026] [security2:error] [pid 60333:tid 60596] [client 20.48.250.41:45364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/f35.php"] [unique_id "apK-szwSHPvvQcBSRbsiMwAAAg4"]
[Sat Aug 29 05:12:51.884207 2026] [security2:error] [pid 60333:tid 60501] [client 20.104.104.62:20672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/foxwsov2.php"] [unique_id "apK-szwSHPvvQcBSRbsiNQAAAa8"]
[Sat Aug 29 05:12:51.910075 2026] [security2:error] [pid 60333:tid 60595] [client 20.48.250.41:49253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/f35.php"] [unique_id "apK-szwSHPvvQcBSRbsiOAAAAg0"]
[Sat Aug 29 05:12:51.987026 2026] [security2:error] [pid 60333:tid 60529] [client 68.155.159.216:7083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK-szwSHPvvQcBSRbsiRAAAAcs"]
[Sat Aug 29 05:12:51.992223 2026] [security2:error] [pid 60333:tid 60515] [client 158.158.54.35:22082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-includes/index.php"] [unique_id "apK-szwSHPvvQcBSRbsiRwAAAb0"]
[Sat Aug 29 05:12:51.994423 2026] [security2:error] [pid 60333:tid 60573] [client 4.205.62.107:63902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/nw.php"] [unique_id "apK-szwSHPvvQcBSRbsiSQAAAfc"]
[Sat Aug 29 05:12:51.995014 2026] [security2:error] [pid 60333:tid 60476] [client 20.48.250.41:46075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/wen.php"] [unique_id "apK-szwSHPvvQcBSRbsiSgAAAZY"]
[Sat Aug 29 05:12:52.007835 2026] [security2:error] [pid 60333:tid 60534] [client 20.52.41.200:2119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/php.php"] [unique_id "apK-tDwSHPvvQcBSRbsiSwAAAdA"]
[Sat Aug 29 05:12:52.011037 2026] [security2:error] [pid 60333:tid 60593] [client 52.139.37.240:32739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/wp-content/plugins/ftde.php"] [unique_id "apK-tDwSHPvvQcBSRbsiTAAAAgs"]
[Sat Aug 29 05:12:52.070024 2026] [security2:error] [pid 60333:tid 60561] [client 4.205.62.107:62937] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/erty.php"] [unique_id "apK-tDwSHPvvQcBSRbsiWAAAAes"]
[Sat Aug 29 05:12:52.077009 2026] [security2:error] [pid 60333:tid 60551] [client 158.158.54.35:33869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/gifclass.php"] [unique_id "apK-tDwSHPvvQcBSRbsiWQAAAeE"]
[Sat Aug 29 05:12:52.079602 2026] [security2:error] [pid 60333:tid 60590] [client 20.48.250.41:50237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/wen.php"] [unique_id "apK-tDwSHPvvQcBSRbsiWgAAAgg"]
[Sat Aug 29 05:12:52.094374 2026] [security2:error] [pid 60333:tid 60556] [client 4.205.62.107:63279] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/php-details.php"] [unique_id "apK-tDwSHPvvQcBSRbsiWwAAAeY"]
[Sat Aug 29 05:12:52.101832 2026] [security2:error] [pid 1321:tid 1566] [client 20.220.204.93:9556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/init.php"] [unique_id "apK-tGjCPtor9NZ-byQSywAABok"]
[Sat Aug 29 05:12:52.110695 2026] [security2:error] [pid 60333:tid 60531] [client 20.196.209.81:9315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/essexec.php"] [unique_id "apK-tDwSHPvvQcBSRbsiXAAAAc0"]
[Sat Aug 29 05:12:52.119493 2026] [security2:error] [pid 60333:tid 60339] [remote 93.123.109.228:58030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/config.php"] [unique_id "apK-tDwSHPvvQcBSRbsiXwACAQE"]
[Sat Aug 29 05:12:52.126502 2026] [security2:error] [pid 60333:tid 60567] [client 68.155.159.216:62746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-includes/plugins.php"] [unique_id "apK-tDwSHPvvQcBSRbsiYgAAAfE"]
[Sat Aug 29 05:12:52.132499 2026] [security2:error] [pid 60333:tid 60505] [client 20.104.49.130:43796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/talkxkej.php"] [unique_id "apK-tDwSHPvvQcBSRbsiZQAAAbM"]
[Sat Aug 29 05:12:52.138686 2026] [security2:error] [pid 60333:tid 60549] [client 20.48.250.41:46057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/inc.php"] [unique_id "apK-tDwSHPvvQcBSRbsiZwAAAd8"]
[Sat Aug 29 05:12:52.197479 2026] [security2:error] [pid 60333:tid 60579] [client 20.196.209.81:14729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/go.php"] [unique_id "apK-tDwSHPvvQcBSRbsibQAAAf0"]
[Sat Aug 29 05:12:52.205884 2026] [security2:error] [pid 60333:tid 60508] [client 4.205.62.107:63359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/xza.php"] [unique_id "apK-tDwSHPvvQcBSRbsibgAAAbY"]
[Sat Aug 29 05:12:52.209549 2026] [security2:error] [pid 60333:tid 60516] [client 52.139.37.240:32149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/wp-content/uploads/admin.php"] [unique_id "apK-tDwSHPvvQcBSRbsibwAAAb4"]
[Sat Aug 29 05:12:52.214003 2026] [security2:error] [pid 60333:tid 60368] [remote 93.123.109.228:58030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/config/aws.php"] [unique_id "apK-tDwSHPvvQcBSRbsicQACAR0"]
[Sat Aug 29 05:12:52.228006 2026] [security2:error] [pid 1321:tid 1491] [client 68.155.159.216:21459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-admin/images/index.php"] [unique_id "apK-tGjCPtor9NZ-byQSzQAABj8"]
[Sat Aug 29 05:12:52.271263 2026] [security2:error] [pid 1321:tid 1613] [client 20.48.250.41:45972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/6bcwiqwj.php"] [unique_id "apK-tGjCPtor9NZ-byQSzgAABrg"]
[Sat Aug 29 05:12:52.278786 2026] [security2:error] [pid 60333:tid 60361] [remote 93.123.109.228:58030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/config/config.inc.php"] [unique_id "apK-tDwSHPvvQcBSRbsicwABuxc"]
[Sat Aug 29 05:12:52.284801 2026] [security2:error] [pid 1321:tid 1612] [client 20.104.49.130:65220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/reviall.php"] [unique_id "apK-tGjCPtor9NZ-byQSzwAABrc"]
[Sat Aug 29 05:12:52.309531 2026] [security2:error] [pid 60333:tid 60486] [client 20.197.61.180:3380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thatsaturdaythang.lifesosweet.com"] [uri "/wp-conflg.php"] [unique_id "apK-tDwSHPvvQcBSRbsidgAAAaA"]
[Sat Aug 29 05:12:52.314199 2026] [security2:error] [pid 1321:tid 1596] [client 180.190.5.40:33282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.5.190.180.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK-tGjCPtor9NZ-byQS0AAABqc"]
[Sat Aug 29 05:12:52.314292 2026] [security2:error] [pid 1321:tid 1596] [client 180.190.5.40:33282] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mcrl.tech"] [uri "/xmlrpc.php"] [unique_id "apK-tGjCPtor9NZ-byQS0AAABqc"]
[Sat Aug 29 05:12:52.327940 2026] [security2:error] [pid 60333:tid 60558] [client 158.23.147.79:31695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carpevictoriam.com"] [uri "/.well-known/index.php"] [unique_id "apK-tDwSHPvvQcBSRbsidwAAAeg"]
[Sat Aug 29 05:12:52.335633 2026] [cgid:error] [pid 60333:tid 60470] [client 74.248.24.12:36622] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/themysticalseven/404.shtml
[Sat Aug 29 05:12:52.335793 2026] [security2:error] [pid 1321:tid 1529] [client 20.48.250.41:50217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/inc.php"] [unique_id "apK-tGjCPtor9NZ-byQS0gAABmU"]
[Sat Aug 29 05:12:52.349048 2026] [security2:error] [pid 60333:tid 60374] [remote 93.123.109.228:58030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/config/config.php"] [unique_id "apK-tDwSHPvvQcBSRbsifAACCiM"]
[Sat Aug 29 05:12:52.360114 2026] [security2:error] [pid 1321:tid 1497] [client 68.155.159.216:56557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-blog-header.php"] [unique_id "apK-tGjCPtor9NZ-byQS0wAABkU"]
[Sat Aug 29 05:12:52.379930 2026] [security2:error] [pid 60333:tid 60377] [remote 93.123.109.228:58030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/config/env.php"] [unique_id "apK-tDwSHPvvQcBSRbsigQABwCY"]
[Sat Aug 29 05:12:52.390708 2026] [security2:error] [pid 60333:tid 60514] [client 20.220.204.93:57428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/term.php"] [unique_id "apK-tDwSHPvvQcBSRbsigwAAAbw"]
[Sat Aug 29 05:12:52.417790 2026] [security2:error] [pid 60333:tid 60478] [client 20.104.104.62:40250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/shellx.php"] [unique_id "apK-tDwSHPvvQcBSRbsihQAAAZg"]
[Sat Aug 29 05:12:52.437759 2026] [security2:error] [pid 60333:tid 60482] [client 20.48.250.41:46069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/easy.php"] [unique_id "apK-tDwSHPvvQcBSRbsihgAAAZw"]
[Sat Aug 29 05:12:52.439547 2026] [security2:error] [pid 1321:tid 1557] [client 158.158.54.35:32904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-admin/a.php"] [unique_id "apK-tGjCPtor9NZ-byQS1gAABoA"]
[Sat Aug 29 05:12:52.440926 2026] [security2:error] [pid 60333:tid 60488] [client 20.197.61.180:3377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-content/config.php"] [unique_id "apK-tDwSHPvvQcBSRbsihwAAAaI"]
[Sat Aug 29 05:12:52.440926 2026] [security2:error] [pid 1321:tid 1608] [client 20.63.219.114:1886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/headerg.php"] [unique_id "apK-tGjCPtor9NZ-byQS1wAABrM"]
[Sat Aug 29 05:12:52.440966 2026] [security2:error] [pid 60333:tid 60373] [remote 93.123.109.228:58030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/config/module.config.php"] [unique_id "apK-tDwSHPvvQcBSRbsiiAABuCI"]
[Sat Aug 29 05:12:52.445251 2026] [security2:error] [pid 60333:tid 60381] [remote 93.123.109.228:58030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/config/nexmo.php"] [unique_id "apK-tDwSHPvvQcBSRbsiiQAB6So"]
[Sat Aug 29 05:12:52.450019 2026] [security2:error] [pid 1321:tid 1490] [client 158.23.147.79:14311] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "apK-tGjCPtor9NZ-byQS2AAABj4"]
[Sat Aug 29 05:12:52.462428 2026] [security2:error] [pid 1321:tid 1492] [client 20.52.41.200:2684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/init.php"] [unique_id "apK-tGjCPtor9NZ-byQS2QAABkA"]
[Sat Aug 29 05:12:52.472551 2026] [security2:error] [pid 60333:tid 60562] [client 20.48.250.41:49218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/6bcwiqwj.php"] [unique_id "apK-tDwSHPvvQcBSRbsijQAAAew"]
[Sat Aug 29 05:12:52.476264 2026] [security2:error] [pid 1321:tid 1567] [client 52.139.37.240:32082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/z.php"] [unique_id "apK-tGjCPtor9NZ-byQS2gAABoo"]
[Sat Aug 29 05:12:52.494950 2026] [security2:error] [pid 1321:tid 1564] [client 20.104.104.62:62493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.baybrookbetterspeech.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-tGjCPtor9NZ-byQS2wAABoc"]
[Sat Aug 29 05:12:52.508055 2026] [security2:error] [pid 60333:tid 60548] [client 158.23.147.79:50130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apK-tDwSHPvvQcBSRbsikQAAAd4"]
[Sat Aug 29 05:12:52.516046 2026] [security2:error] [pid 60333:tid 60544] [client 20.104.49.130:60785] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.hatchigan.com"] [uri "/amax.php"] [unique_id "apK-tDwSHPvvQcBSRbsikwAAAdo"]
[Sat Aug 29 05:12:52.519015 2026] [security2:error] [pid 60333:tid 60571] [client 68.155.159.216:1862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wzy.php"] [unique_id "apK-tDwSHPvvQcBSRbsilQAAAfU"]
[Sat Aug 29 05:12:52.521836 2026] [security2:error] [pid 60333:tid 60380] [remote 93.123.109.228:58030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/config/stripe.php"] [unique_id "apK-tDwSHPvvQcBSRbsilgAB5yk"]
[Sat Aug 29 05:12:52.527656 2026] [security2:error] [pid 60333:tid 60577] [client 74.248.24.12:36622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/wp-content/themes/pridmag/il.php"] [unique_id "apK-tDwSHPvvQcBSRbsimAAAAfs"]
[Sat Aug 29 05:12:52.533454 2026] [security2:error] [pid 60333:tid 60539] [client 20.196.209.81:5012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/hello.php"] [unique_id "apK-tDwSHPvvQcBSRbsimQAAAdU"]
[Sat Aug 29 05:12:52.535611 2026] [security2:error] [pid 60333:tid 60495] [client 68.155.159.216:49047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK-tDwSHPvvQcBSRbsimgAAAak"]
[Sat Aug 29 05:12:52.538167 2026] [security2:error] [pid 60333:tid 60523] [client 20.220.204.93:9582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/aaa.php"] [unique_id "apK-tDwSHPvvQcBSRbsimwAAAcU"]
[Sat Aug 29 05:12:52.546032 2026] [security2:error] [pid 60333:tid 60582] [client 107.145.13.164:56244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 164.13.145.107.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK-tDwSHPvvQcBSRbsinwAAAgA"]
[Sat Aug 29 05:12:52.549453 2026] [security2:error] [pid 60333:tid 60582] [client 107.145.13.164:56244] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "culturapopular.cl"] [uri "/xmlrpc.php"] [unique_id "apK-tDwSHPvvQcBSRbsinwAAAgA"]
[Sat Aug 29 05:12:52.585083 2026] [autoindex:error] [pid 1321:tid 1526] [client 158.158.54.35:0] AH01276: Cannot serve directory /home2/charlov7/public_html/dev/wp-includes/certificates/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Aug 29 05:12:52.587618 2026] [security2:error] [pid 60333:tid 60547] [client 65.21.113.248:41758] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.babyboomerscare.com"] [uri "/index.php"] [unique_id "apK-tDwSHPvvQcBSRbsijAAAAd0"]
[Sat Aug 29 05:12:52.596797 2026] [security2:error] [pid 1321:tid 1588] [client 20.48.250.41:45348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/fresh3.php"] [unique_id "apK-tGjCPtor9NZ-byQS4QAABp8"]
[Sat Aug 29 05:12:52.602248 2026] [security2:error] [pid 1321:tid 1586] [client 20.48.250.41:50226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/easy.php"] [unique_id "apK-tGjCPtor9NZ-byQS4gAABp0"]
[Sat Aug 29 05:12:52.674066 2026] [security2:error] [pid 60333:tid 60570] [client 68.155.159.216:43955] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.theenprogroup.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK-tDwSHPvvQcBSRbsirgAAAfQ"]
[Sat Aug 29 05:12:52.691183 2026] [security2:error] [pid 60333:tid 60584] [client 4.205.62.107:6086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/olfclass.php"] [unique_id "apK-tDwSHPvvQcBSRbsisAAAAgI"]
[Sat Aug 29 05:12:52.692172 2026] [security2:error] [pid 60333:tid 60501] [client 52.139.37.240:32134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/f35.php"] [unique_id "apK-tDwSHPvvQcBSRbsisQAAAa8"]
[Sat Aug 29 05:12:52.717094 2026] [security2:error] [pid 60333:tid 60529] [client 20.220.204.93:36714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/xsox.php"] [unique_id "apK-tDwSHPvvQcBSRbsitwAAAcs"]
[Sat Aug 29 05:12:52.732742 2026] [security2:error] [pid 60333:tid 60477] [client 20.48.250.41:50225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/fresh3.php"] [unique_id "apK-tDwSHPvvQcBSRbsiuAAAAZc"]
[Sat Aug 29 05:12:52.734683 2026] [security2:error] [pid 1321:tid 1555] [client 158.158.54.35:30052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apK-tGjCPtor9NZ-byQS5QAABn4"]
[Sat Aug 29 05:12:52.748499 2026] [security2:error] [pid 60333:tid 60573] [client 20.48.250.41:46067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/bgymj.php"] [unique_id "apK-tDwSHPvvQcBSRbsiuQAAAfc"]
[Sat Aug 29 05:12:52.752090 2026] [security2:error] [pid 1321:tid 1525] [client 20.196.209.81:1991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/gecko-new.php"] [unique_id "apK-tGjCPtor9NZ-byQS6QAABmE"]
[Sat Aug 29 05:12:52.770095 2026] [security2:error] [pid 60333:tid 60540] [client 4.205.62.107:64903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/debug.php"] [unique_id "apK-tDwSHPvvQcBSRbsivAAAAdY"]
[Sat Aug 29 05:12:52.835008 2026] [core:error] [pid 1321:tid 1560] [client 57.141.14.21:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:52.835025 2026] [core:error] [pid 1321:tid 1560] [client 57.141.14.21:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:52.837860 2026] [security2:error] [pid 60333:tid 60524] [client 20.63.219.114:18841] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/meta.php"] [unique_id "apK-tDwSHPvvQcBSRbsiyAAAAcY"]
[Sat Aug 29 05:12:52.858152 2026] [security2:error] [pid 60333:tid 60541] [client 20.104.104.62:20855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/1index.php"] [unique_id "apK-tDwSHPvvQcBSRbsiywAAAdc"]
[Sat Aug 29 05:12:52.877782 2026] [security2:error] [pid 60333:tid 60487] [client 158.23.147.79:7119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "apK-tDwSHPvvQcBSRbsizwAAAaE"]
[Sat Aug 29 05:12:52.907050 2026] [security2:error] [pid 60333:tid 60535] [client 52.139.37.240:32708] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/file61.php"] [unique_id "apK-tDwSHPvvQcBSRbsi1AAAAdE"]
[Sat Aug 29 05:12:52.908054 2026] [security2:error] [pid 1321:tid 1612] [client 20.48.250.41:46004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/ws69.php"] [unique_id "apK-tGjCPtor9NZ-byQS8AAABrc"]
[Sat Aug 29 05:12:52.920080 2026] [security2:error] [pid 60333:tid 60481] [client 20.52.41.200:2117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "apK-tDwSHPvvQcBSRbsi1gAAAZs"]
[Sat Aug 29 05:12:52.935929 2026] [security2:error] [pid 1321:tid 1609] [client 158.23.147.79:24536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.paulroyce.com"] [uri "/simple.php"] [unique_id "apK-tGjCPtor9NZ-byQS8gAABrQ"]
[Sat Aug 29 05:12:52.937854 2026] [security2:error] [pid 1321:tid 1542] [client 20.196.209.81:14567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/fi2.php"] [unique_id "apK-tGjCPtor9NZ-byQS8wAABnI"]
[Sat Aug 29 05:12:52.943863 2026] [security2:error] [pid 1321:tid 1515] [client 20.48.250.41:49228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/bgymj.php"] [unique_id "apK-tGjCPtor9NZ-byQS9AAABlc"]
[Sat Aug 29 05:12:52.944149 2026] [security2:error] [pid 1321:tid 1497] [client 20.220.204.93:9791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/lkui.php"] [unique_id "apK-tGjCPtor9NZ-byQS9QAABkU"]
[Sat Aug 29 05:12:52.946062 2026] [security2:error] [pid 60333:tid 60484] [client 158.23.147.79:64461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK-tDwSHPvvQcBSRbsi1wAAAZ4"]
[Sat Aug 29 05:12:52.951964 2026] [authz_core:error] [pid 1321:tid 1517] [client 158.158.54.35:0] AH01630: client denied by server configuration: /home3/juntoohk/public_html/ebichili/wp-includes/sitemaps/providers/error_log
[Sat Aug 29 05:12:53.021138 2026] [security2:error] [pid 60333:tid 60503] [client 20.197.61.180:3793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thatsaturdaythang.lifesosweet.com"] [uri "/wp-content.php"] [unique_id "apK-tTwSHPvvQcBSRbsi3QAAAbE"]
[Sat Aug 29 05:12:53.027167 2026] [security2:error] [pid 1321:tid 1608] [client 68.155.159.216:56737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apK-tWjCPtor9NZ-byQS-AAABrM"]
[Sat Aug 29 05:12:53.045297 2026] [security2:error] [pid 60333:tid 60538] [client 74.248.24.12:36049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/assets/images/doc.php"] [unique_id "apK-tTwSHPvvQcBSRbsi4AAAAdQ"]
[Sat Aug 29 05:12:53.082237 2026] [security2:error] [pid 60333:tid 60480] [client 68.155.159.216:64070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK-tTwSHPvvQcBSRbsi4wAAAZo"]
[Sat Aug 29 05:12:53.089602 2026] [security2:error] [pid 60333:tid 60558] [client 20.48.250.41:46010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/ccs.php"] [unique_id "apK-tTwSHPvvQcBSRbsi5gAAAeg"]
[Sat Aug 29 05:12:53.105862 2026] [security2:error] [pid 60333:tid 60489] [client 52.139.37.240:32179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/mah.php"] [unique_id "apK-tTwSHPvvQcBSRbsi6QAAAaM"]
[Sat Aug 29 05:12:53.105865 2026] [security2:error] [pid 1321:tid 1510] [client 158.158.54.35:9784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK-tWjCPtor9NZ-byQS-wAABlI"]
[Sat Aug 29 05:12:53.127676 2026] [security2:error] [pid 1321:tid 1561] [client 20.48.250.41:50211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/ws69.php"] [unique_id "apK-tWjCPtor9NZ-byQS_QAABoQ"]
[Sat Aug 29 05:12:53.133287 2026] [security2:error] [pid 60333:tid 60527] [client 4.205.62.107:60591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/product.php"] [unique_id "apK-tTwSHPvvQcBSRbsi7AAAAck"]
[Sat Aug 29 05:12:53.149671 2026] [security2:error] [pid 60333:tid 60569] [client 20.196.209.81:1967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/wp-admin.php"] [unique_id "apK-tTwSHPvvQcBSRbsi7QAAAfM"]
[Sat Aug 29 05:12:53.165435 2026] [security2:error] [pid 1321:tid 1562] [client 20.197.61.180:3806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-content/cong.php"] [unique_id "apK-tWjCPtor9NZ-byQS_gAABoU"]
[Sat Aug 29 05:12:53.179198 2026] [security2:error] [pid 60333:tid 60505] [client 149.34.210.141:63728] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.210.34.149.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-tTwSHPvvQcBSRbsi7wAAAbM"]
[Sat Aug 29 05:12:53.179327 2026] [security2:error] [pid 60333:tid 60505] [client 149.34.210.141:63728] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-tTwSHPvvQcBSRbsi7wAAAbM"]
[Sat Aug 29 05:12:53.182647 2026] [security2:error] [pid 60333:tid 60510] [client 20.104.49.130:53676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.greatvalleyplants.com"] [uri "/amax.php"] [unique_id "apK-tTwSHPvvQcBSRbsi8AAAAbg"]
[Sat Aug 29 05:12:53.191467 2026] [security2:error] [pid 60333:tid 60552] [client 158.158.54.35:33664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/css/index.php"] [unique_id "apK-tTwSHPvvQcBSRbsi8QAAAeI"]
[Sat Aug 29 05:12:53.209732 2026] [security2:error] [pid 60333:tid 60562] [client 4.205.62.107:62760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/wp-config.backup.php"] [unique_id "apK-tTwSHPvvQcBSRbsi9QAAAew"]
[Sat Aug 29 05:12:53.231184 2026] [security2:error] [pid 60333:tid 60539] [client 4.205.62.107:63238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/routes.php"] [unique_id "apK-tTwSHPvvQcBSRbsi-gAAAdU"]
[Sat Aug 29 05:12:53.231340 2026] [security2:error] [pid 1321:tid 1527] [client 20.63.219.114:1091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/dxc.php"] [unique_id "apK-tWjCPtor9NZ-byQTBQAABmM"]
[Sat Aug 29 05:12:53.240663 2026] [security2:error] [pid 60333:tid 60495] [client 68.155.159.216:35796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK-tTwSHPvvQcBSRbsi_QAAAak"]
[Sat Aug 29 05:12:53.250509 2026] [security2:error] [pid 60333:tid 60560] [client 20.104.104.62:47573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/2index.php"] [unique_id "apK-tTwSHPvvQcBSRbsjAAAAAeo"]
[Sat Aug 29 05:12:53.256547 2026] [security2:error] [pid 1321:tid 1532] [client 20.48.250.41:46000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/mar.php"] [unique_id "apK-tWjCPtor9NZ-byQTBwAABmg"]
[Sat Aug 29 05:12:53.299948 2026] [security2:error] [pid 60333:tid 60497] [client 158.23.147.79:43307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK-tTwSHPvvQcBSRbsjBgAAAas"]
[Sat Aug 29 05:12:53.301660 2026] [security2:error] [pid 60333:tid 60475] [client 52.139.37.240:32092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/mini.php"] [unique_id "apK-tTwSHPvvQcBSRbsjCAAAAZU"]
[Sat Aug 29 05:12:53.331310 2026] [security2:error] [pid 60333:tid 60493] [client 20.196.209.81:16198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "core.highpointlogic.com"] [uri "/post.php"] [unique_id "apK-tTwSHPvvQcBSRbsjDQAAAac"]
[Sat Aug 29 05:12:53.343086 2026] [security2:error] [pid 60333:tid 60550] [client 4.205.62.107:61327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/ms-edit.php"] [unique_id "apK-tTwSHPvvQcBSRbsjDgAAAeA"]
[Sat Aug 29 05:12:53.343949 2026] [security2:error] [pid 60333:tid 60520] [client 68.155.159.216:56738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-includes/index.php"] [unique_id "apK-tTwSHPvvQcBSRbsjDwAAAcI"]
[Sat Aug 29 05:12:53.347005 2026] [security2:error] [pid 60333:tid 60483] [client 20.196.209.81:9283] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/1p.php"] [unique_id "apK-tTwSHPvvQcBSRbsjEAAAAZ0"]
[Sat Aug 29 05:12:53.351749 2026] [security2:error] [pid 1321:tid 1577] [client 20.48.250.41:50240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/ccs.php"] [unique_id "apK-tWjCPtor9NZ-byQTCgAABpQ"]
[Sat Aug 29 05:12:53.362904 2026] [security2:error] [pid 60333:tid 60533] [client 20.220.204.93:9575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "apK-tTwSHPvvQcBSRbsjEQAAAc8"]
[Sat Aug 29 05:12:53.385140 2026] [security2:error] [pid 60333:tid 60454] [remote 93.123.109.228:58030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/info.php"] [unique_id "apK-tTwSHPvvQcBSRbsjEgAB6XM"]
[Sat Aug 29 05:12:53.432203 2026] [security2:error] [pid 60333:tid 60585] [client 20.48.250.41:45952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/ccu.php"] [unique_id "apK-tTwSHPvvQcBSRbsjFQAAAgM"]
[Sat Aug 29 05:12:53.440519 2026] [security2:error] [pid 60333:tid 60458] [remote 93.123.109.228:58030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/infos.php"] [unique_id "apK-tTwSHPvvQcBSRbsjFgACAnc"]
[Sat Aug 29 05:12:53.440546 2026] [security2:error] [pid 60333:tid 60457] [remote 93.123.109.228:58030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/infophp.php"] [unique_id "apK-tTwSHPvvQcBSRbsjFwACAnY"]
[Sat Aug 29 05:12:53.447150 2026] [security2:error] [pid 1321:tid 1615] [client 158.23.147.79:31699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carpevictoriam.com"] [uri "/wp-content/themes/too.php"] [unique_id "apK-tWjCPtor9NZ-byQTDAAABro"]
[Sat Aug 29 05:12:53.465335 2026] [security2:error] [pid 60333:tid 60476] [client 68.155.159.216:38335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK-tTwSHPvvQcBSRbsjHwAAAZY"]
[Sat Aug 29 05:12:53.488471 2026] [access_compat:error] [pid 60333:tid 60464] [remote 20.245.83.144:0] AH01797: client denied by server configuration: /home1/giantsfa/public_html/message_board/index.php
[Sat Aug 29 05:12:53.493227 2026] [security2:error] [pid 60333:tid 60561] [client 20.48.250.41:49232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/mar.php"] [unique_id "apK-tTwSHPvvQcBSRbsjJAAAAes"]
[Sat Aug 29 05:12:53.516665 2026] [security2:error] [pid 60333:tid 60529] [client 52.139.37.240:32071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/v.php"] [unique_id "apK-tTwSHPvvQcBSRbsjJgAAAcs"]
[Sat Aug 29 05:12:53.527226 2026] [access_compat:error] [pid 60333:tid 60341] [remote 20.245.83.144:0] AH01797: client denied by server configuration: /home1/giantsfa/public_html/message_board/index.php
[Sat Aug 29 05:12:53.529902 2026] [security2:error] [pid 1321:tid 1512] [client 213.202.253.4:59175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/postnews.php"] [unique_id "apK-tWjCPtor9NZ-byQTDQAABlQ"], referer: www.google.com
[Sat Aug 29 05:12:53.545277 2026] [security2:error] [pid 1321:tid 1555] [client 158.158.54.35:7320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ebichili-org.juntoohki.com"] [uri "/wp-admin.php"] [unique_id "apK-tWjCPtor9NZ-byQTEAAABn4"]
[Sat Aug 29 05:12:53.556507 2026] [security2:error] [pid 60333:tid 60570] [client 20.196.209.81:1924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/wp-configs.php"] [unique_id "apK-tTwSHPvvQcBSRbsjKwAAAfQ"]
[Sat Aug 29 05:12:53.559181 2026] [access_compat:error] [pid 60333:tid 60466] [remote 20.245.83.144:0] AH01797: client denied by server configuration: /home1/giantsfa/public_html/message_board/index.php
[Sat Aug 29 05:12:53.583708 2026] [security2:error] [pid 60333:tid 60496] [client 74.248.24.12:16844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/bgymj.php"] [unique_id "apK-tTwSHPvvQcBSRbsjLgAAAao"]
[Sat Aug 29 05:12:53.598469 2026] [security2:error] [pid 1321:tid 1543] [client 20.48.250.41:45919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/ak.php"] [unique_id "apK-tWjCPtor9NZ-byQTFQAABnM"]
[Sat Aug 29 05:12:53.629154 2026] [security2:error] [pid 60333:tid 60557] [client 158.158.54.35:1337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wp-cron.php"] [unique_id "apK-tTwSHPvvQcBSRbsjNAAAAec"]
[Sat Aug 29 05:12:53.640534 2026] [security2:error] [pid 60333:tid 60587] [client 20.48.250.41:50269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/ccu.php"] [unique_id "apK-tTwSHPvvQcBSRbsjNgAAAgU"]
[Sat Aug 29 05:12:53.643212 2026] [cgid:error] [pid 1321:tid 1408] [remote 74.7.241.174:42750] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/freeadob/public_html/bryankwilliams/404.shtml
[Sat Aug 29 05:12:53.643421 2026] [security2:error] [pid 1321:tid 1566] [client 74.7.241.174:42750] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.bryankwilliams.com"] [uri "/404.shtml"] [unique_id "apK-tWjCPtor9NZ-byQTGQAGiTI"]
[Sat Aug 29 05:12:53.646893 2026] [security2:error] [pid 60333:tid 60494] [client 20.104.49.130:60947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/as.php"] [unique_id "apK-tTwSHPvvQcBSRbsjOAAAAag"]
[Sat Aug 29 05:12:53.648450 2026] [security2:error] [pid 1321:tid 1613] [client 68.155.159.216:1994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apK-tWjCPtor9NZ-byQTGwAABrg"]
[Sat Aug 29 05:12:53.655619 2026] [security2:error] [pid 1321:tid 1529] [client 68.155.159.216:43909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/lv.php"] [unique_id "apK-tWjCPtor9NZ-byQTHAAABmU"]
[Sat Aug 29 05:12:53.675110 2026] [security2:error] [pid 60333:tid 60524] [client 20.63.219.114:18821] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/wp-2019.php"] [unique_id "apK-tTwSHPvvQcBSRbsjPAAAAcY"]
[Sat Aug 29 05:12:53.683943 2026] [security2:error] [pid 1321:tid 1515] [client 20.52.41.200:2633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-content/admin.php"] [unique_id "apK-tWjCPtor9NZ-byQTHQAABlc"]
[Sat Aug 29 05:12:53.701027 2026] [security2:error] [pid 60333:tid 60484] [client 20.151.200.44:55622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/rce.php"] [unique_id "apK-tTwSHPvvQcBSRbsjPgAAAZ4"]
[Sat Aug 29 05:12:53.705739 2026] [access_compat:error] [pid 60333:tid 60354] [remote 20.245.83.144:0] AH01797: client denied by server configuration: /home1/giantsfa/public_html/message_board/index.php
[Sat Aug 29 05:12:53.713813 2026] [security2:error] [pid 1321:tid 1581] [client 52.139.37.240:32163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/wp-admin/images/admin.php"] [unique_id "apK-tWjCPtor9NZ-byQTHgAABpg"]
[Sat Aug 29 05:12:53.743630 2026] [security2:error] [pid 60333:tid 60515] [client 20.196.209.81:14568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/Njima.php"] [unique_id "apK-tTwSHPvvQcBSRbsjRgAAAb0"]
[Sat Aug 29 05:12:53.759515 2026] [security2:error] [pid 60333:tid 60522] [client 20.48.250.41:45356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/lib.php"] [unique_id "apK-tTwSHPvvQcBSRbsjSwAAAcQ"]
[Sat Aug 29 05:12:53.759540 2026] [security2:error] [pid 60333:tid 60581] [client 20.220.204.93:57441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/motu.php"] [unique_id "apK-tTwSHPvvQcBSRbsjSgAAAf8"]
[Sat Aug 29 05:12:53.769872 2026] [security2:error] [pid 60333:tid 60574] [client 20.104.104.62:20638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/3index.php"] [unique_id "apK-tTwSHPvvQcBSRbsjTQAAAfg"]
[Sat Aug 29 05:12:53.781921 2026] [security2:error] [pid 60333:tid 60513] [client 68.155.159.216:43962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.theenprogroup.com"] [uri "/makeasmtp.php"] [unique_id "apK-tTwSHPvvQcBSRbsjTwAAAbs"]
[Sat Aug 29 05:12:53.798911 2026] [security2:error] [pid 1321:tid 1598] [client 20.48.250.41:49238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/ak.php"] [unique_id "apK-tWjCPtor9NZ-byQTJgAABqk"]
[Sat Aug 29 05:12:53.829108 2026] [security2:error] [pid 60333:tid 60489] [client 4.205.62.107:6083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/gnmlc.php"] [unique_id "apK-tTwSHPvvQcBSRbsjVAAAAaM"]
[Sat Aug 29 05:12:53.832755 2026] [security2:error] [pid 60333:tid 60578] [client 20.196.209.81:15364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "core.highpointlogic.com"] [uri "/flower.php"] [unique_id "apK-tTwSHPvvQcBSRbsjVQAAAfw"]
[Sat Aug 29 05:12:53.889650 2026] [security2:error] [pid 60333:tid 60514] [client 20.48.250.41:46064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/wp-style.php"] [unique_id "apK-tTwSHPvvQcBSRbsjWwAAAbw"]
[Sat Aug 29 05:12:53.893534 2026] [security2:error] [pid 60333:tid 60579] [client 20.197.61.180:8770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-content/content.php"] [unique_id "apK-tTwSHPvvQcBSRbsjXAAAAf0"]
[Sat Aug 29 05:12:53.910927 2026] [security2:error] [pid 1321:tid 1582] [client 52.139.37.240:32097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "apK-tWjCPtor9NZ-byQTKgAABpk"]
[Sat Aug 29 05:12:53.917835 2026] [security2:error] [pid 60333:tid 60478] [client 4.205.62.107:64278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/nzv.php"] [unique_id "apK-tTwSHPvvQcBSRbsjXQAAAZg"]
[Sat Aug 29 05:12:53.946685 2026] [access_compat:error] [pid 1321:tid 1508] [client 67.20.76.220:54210] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:12:53.981666 2026] [security2:error] [pid 60333:tid 60479] [client 20.48.250.41:50244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/lib.php"] [unique_id "apK-tTwSHPvvQcBSRbsjZAAAAZk"]
[Sat Aug 29 05:12:53.996802 2026] [security2:error] [pid 60333:tid 60548] [client 158.23.147.79:7065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/wp-content/admin.php"] [unique_id "apK-tTwSHPvvQcBSRbsjZgAAAd4"]
[Sat Aug 29 05:12:54.007845 2026] [security2:error] [pid 60333:tid 60382] [remote 199.188.201.221:42304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 221.201.188.199.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "printingbyjoe.com"] [uri "/wp-login.php"] [unique_id "apK-tTwSHPvvQcBSRbsjZQABkis"]
[Sat Aug 29 05:12:54.012098 2026] [security2:error] [pid 60333:tid 60495] [client 20.220.204.93:9477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/Ov-Simple1.php"] [unique_id "apK-tjwSHPvvQcBSRbsjZwAAAak"]
[Sat Aug 29 05:12:54.021964 2026] [security2:error] [pid 60333:tid 60506] [client 20.48.250.41:45973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/browse.php"] [unique_id "apK-tjwSHPvvQcBSRbsjawAAAbQ"]
[Sat Aug 29 05:12:54.025397 2026] [security2:error] [pid 1321:tid 1597] [client 20.197.61.180:3383] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "www.thatsaturdaythang.lifesosweet.com"] [uri "/wp-content/1.php"] [unique_id "apK-tmjCPtor9NZ-byQTMQAABqg"]
[Sat Aug 29 05:12:54.025516 2026] [security2:error] [pid 1321:tid 1597] [client 20.197.61.180:3383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thatsaturdaythang.lifesosweet.com"] [uri "/wp-content/1.php"] [unique_id "apK-tmjCPtor9NZ-byQTMQAABqg"]
[Sat Aug 29 05:12:54.038895 2026] [security2:error] [pid 60333:tid 60388] [remote 93.123.109.228:58030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/php.php"] [unique_id "apK-tjwSHPvvQcBSRbsjbAACADE"]
[Sat Aug 29 05:12:54.038952 2026] [security2:error] [pid 60333:tid 60383] [remote 93.123.109.228:58030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/php-info.php"] [unique_id "apK-tjwSHPvvQcBSRbsjbQACACw"]
[Sat Aug 29 05:12:54.040194 2026] [security2:error] [pid 60333:tid 60386] [remote 93.123.109.228:58030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/php_info.php"] [unique_id "apK-tjwSHPvvQcBSRbsjbgACAC8"]
[Sat Aug 29 05:12:54.041972 2026] [security2:error] [pid 60333:tid 60596] [client 158.23.147.79:24483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.paulroyce.com"] [uri "/wp-admin/about.php"] [unique_id "apK-tjwSHPvvQcBSRbsjbwAAAg4"]
[Sat Aug 29 05:12:54.044998 2026] [security2:error] [pid 60333:tid 60565] [client 20.104.49.130:36736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pvillusions.com"] [uri "/df.php"] [unique_id "apK-tjwSHPvvQcBSRbsjcAAAAe8"]
[Sat Aug 29 05:12:54.073709 2026] [security2:error] [pid 60333:tid 60505] [client 20.196.209.81:4487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/essexec.php"] [unique_id "apK-tjwSHPvvQcBSRbsjcwAAAbM"]
[Sat Aug 29 05:12:54.082798 2026] [security2:error] [pid 60333:tid 60482] [client 158.158.54.35:15048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wp-block.php"] [unique_id "apK-tjwSHPvvQcBSRbsjdAAAAZw"]
[Sat Aug 29 05:12:54.101082 2026] [security2:error] [pid 60333:tid 60518] [client 74.248.24.12:36921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "apK-tjwSHPvvQcBSRbsjdQAAAcA"]
[Sat Aug 29 05:12:54.112482 2026] [security2:error] [pid 60333:tid 60550] [client 52.139.37.240:32138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-tjwSHPvvQcBSRbsjdgAAAeA"]
[Sat Aug 29 05:12:54.125215 2026] [security2:error] [pid 60333:tid 60542] [client 20.48.250.41:50206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/wp-style.php"] [unique_id "apK-tjwSHPvvQcBSRbsjdwAAAdg"]
[Sat Aug 29 05:12:54.141652 2026] [security2:error] [pid 1321:tid 1586] [client 68.155.159.216:56771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK-tmjCPtor9NZ-byQTOAAABp0"]
[Sat Aug 29 05:12:54.143043 2026] [security2:error] [pid 60333:tid 60571] [client 20.52.41.200:2693] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-configs.php"] [unique_id "apK-tjwSHPvvQcBSRbsjeAAAAfU"]
[Sat Aug 29 05:12:54.150041 2026] [security2:error] [pid 1321:tid 1606] [client 20.63.219.114:1863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/menu.php"] [unique_id "apK-tmjCPtor9NZ-byQTOQAABrE"]
[Sat Aug 29 05:12:54.158628 2026] [security2:error] [pid 60333:tid 60568] [client 20.48.250.41:45365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/zoo.php"] [unique_id "apK-tjwSHPvvQcBSRbsjeQAAAfI"]
[Sat Aug 29 05:12:54.176924 2026] [security2:error] [pid 60333:tid 60591] [client 68.155.159.216:49080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apK-tjwSHPvvQcBSRbsjegAAAgk"]
[Sat Aug 29 05:12:54.198581 2026] [security2:error] [pid 60333:tid 60387] [remote 93.123.109.228:58030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/phpinfo.php"] [unique_id "apK-tjwSHPvvQcBSRbsjfQABljA"]
[Sat Aug 29 05:12:54.215876 2026] [security2:error] [pid 60333:tid 60497] [client 20.196.209.81:5004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/configs.php"] [unique_id "apK-tjwSHPvvQcBSRbsjfgAAAas"]
[Sat Aug 29 05:12:54.232700 2026] [security2:error] [pid 60333:tid 60561] [client 20.220.204.93:36680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/wp-blogs.php"] [unique_id "apK-tjwSHPvvQcBSRbsjfwAAAes"]
[Sat Aug 29 05:12:54.239942 2026] [security2:error] [pid 60333:tid 60577] [client 20.196.209.81:16192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "core.highpointlogic.com"] [uri "/meta.php"] [unique_id "apK-tjwSHPvvQcBSRbsjgAAAAfs"]
[Sat Aug 29 05:12:54.260928 2026] [security2:error] [pid 60333:tid 60529] [client 20.104.49.130:58236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "coveryourauto.com"] [uri "/load.php"] [unique_id "apK-tjwSHPvvQcBSRbsjgQAAAcs"]
[Sat Aug 29 05:12:54.269478 2026] [security2:error] [pid 60333:tid 60508] [client 111.235.68.106:52916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.68.235.111.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK-tjwSHPvvQcBSRbsjggAAAbY"]
[Sat Aug 29 05:12:54.269637 2026] [security2:error] [pid 60333:tid 60508] [client 111.235.68.106:52916] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "harvesthouse.ph"] [uri "/xmlrpc.php"] [unique_id "apK-tjwSHPvvQcBSRbsjggAAAbY"]
[Sat Aug 29 05:12:54.287166 2026] [security2:error] [pid 60333:tid 60547] [client 4.205.62.107:61655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/fun.php"] [unique_id "apK-tjwSHPvvQcBSRbsjhAAAAd0"]
[Sat Aug 29 05:12:54.304077 2026] [security2:error] [pid 60333:tid 60492] [client 20.48.250.41:46051] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/elp.php"] [unique_id "apK-tjwSHPvvQcBSRbsjhgAAAaY"]
[Sat Aug 29 05:12:54.332887 2026] [security2:error] [pid 60333:tid 60471] [client 20.48.250.41:49255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/browse.php"] [unique_id "apK-tjwSHPvvQcBSRbsjigAAAZE"]
[Sat Aug 29 05:12:54.363346 2026] [security2:error] [pid 60333:tid 60481] [client 4.205.62.107:28052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/edit.php"] [unique_id "apK-tjwSHPvvQcBSRbsjlAAAAZs"]
[Sat Aug 29 05:12:54.375828 2026] [security2:error] [pid 60333:tid 60477] [client 65.21.113.248:41758] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.babyboomerscare.com"] [uri "/index.php"] [unique_id "apK-tjwSHPvvQcBSRbsjewAAAZc"]
[Sat Aug 29 05:12:54.383641 2026] [security2:error] [pid 60333:tid 60553] [client 4.205.62.107:63261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/aww.php"] [unique_id "apK-tjwSHPvvQcBSRbsjmgAAAeM"]
[Sat Aug 29 05:12:54.385346 2026] [security2:error] [pid 60333:tid 60530] [client 20.104.104.62:40208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/4index.php"] [unique_id "apK-tjwSHPvvQcBSRbsjmwAAAcw"]
[Sat Aug 29 05:12:54.390873 2026] [security2:error] [pid 60333:tid 60515] [client 52.139.37.240:32090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/wp-index.php"] [unique_id "apK-tjwSHPvvQcBSRbsjnAAAAb0"]
[Sat Aug 29 05:12:54.417598 2026] [security2:error] [pid 60333:tid 60402] [remote 93.123.109.228:58030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/public/phpinfo.php"] [unique_id "apK-tjwSHPvvQcBSRbsjnQABzT8"]
[Sat Aug 29 05:12:54.424776 2026] [security2:error] [pid 60333:tid 60507] [client 158.23.147.79:43309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/goat1.php"] [unique_id "apK-tjwSHPvvQcBSRbsjoAAAAbU"]
[Sat Aug 29 05:12:54.463323 2026] [security2:error] [pid 60333:tid 60480] [client 20.48.250.41:45352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/666.php"] [unique_id "apK-tjwSHPvvQcBSRbsjoQAAAZo"]
[Sat Aug 29 05:12:54.472434 2026] [security2:error] [pid 60333:tid 60558] [client 20.48.250.41:50180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/zoo.php"] [unique_id "apK-tjwSHPvvQcBSRbsjogAAAeg"]
[Sat Aug 29 05:12:54.473957 2026] [security2:error] [pid 60333:tid 60494] [client 20.196.209.81:1970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/hello.php"] [unique_id "apK-tjwSHPvvQcBSRbsjowAAAag"]
[Sat Aug 29 05:12:54.479218 2026] [security2:error] [pid 1321:tid 1543] [client 4.205.62.107:63346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/lmfi2.php"] [unique_id "apK-tmjCPtor9NZ-byQTRgAABnM"]
[Sat Aug 29 05:12:54.498418 2026] [access_compat:error] [pid 60333:tid 60398] [remote 20.245.83.144:0] AH01797: client denied by server configuration: /home1/giantsfa/public_html/message_board/index.php
[Sat Aug 29 05:12:54.501675 2026] [access_compat:error] [pid 60333:tid 60406] [remote 20.245.83.144:0] AH01797: client denied by server configuration: /home1/giantsfa/public_html/message_board/index.php
[Sat Aug 29 05:12:54.513570 2026] [security2:error] [pid 60333:tid 60527] [client 20.220.204.93:9591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/mini.php"] [unique_id "apK-tjwSHPvvQcBSRbsjpgAAAck"]
[Sat Aug 29 05:12:54.535180 2026] [security2:error] [pid 60333:tid 60581] [client 20.63.219.114:1860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/alfa.php"] [unique_id "apK-tjwSHPvvQcBSRbsjqAAAAf8"]
[Sat Aug 29 05:12:54.557300 2026] [security2:error] [pid 60333:tid 60521] [client 158.23.147.79:14150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/log-mama/function.php"] [unique_id "apK-tjwSHPvvQcBSRbsjrAAAAcM"]
[Sat Aug 29 05:12:54.559348 2026] [security2:error] [pid 60333:tid 60564] [client 158.158.54.35:37130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wp-includes/fonts/admin.php"] [unique_id "apK-tjwSHPvvQcBSRbsjrQAAAe4"]
[Sat Aug 29 05:12:54.564112 2026] [security2:error] [pid 60333:tid 60562] [client 158.23.147.79:24458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/images/index.php"] [unique_id "apK-tjwSHPvvQcBSRbsjrwAAAew"]
[Sat Aug 29 05:12:54.573290 2026] [security2:error] [pid 1321:tid 1529] [client 68.155.159.216:38707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-admin/user/index.php"] [unique_id "apK-tmjCPtor9NZ-byQTSAAABmU"]
[Sat Aug 29 05:12:54.581931 2026] [security2:error] [pid 60333:tid 60580] [client 52.139.37.240:32110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/ww2.php"] [unique_id "apK-tjwSHPvvQcBSRbsjsgAAAf4"]
[Sat Aug 29 05:12:54.596016 2026] [security2:error] [pid 1321:tid 1596] [client 20.48.250.41:46008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/knmt.php"] [unique_id "apK-tmjCPtor9NZ-byQTSQAABqc"]
[Sat Aug 29 05:12:54.601125 2026] [security2:error] [pid 60333:tid 60532] [client 20.52.41.200:2744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-includes/index.php"] [unique_id "apK-tjwSHPvvQcBSRbsjswAAAc4"]
[Sat Aug 29 05:12:54.611276 2026] [cgid:error] [pid 60333:tid 60503] [client 74.248.24.12:36072] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/themysticalseven/404.shtml
[Sat Aug 29 05:12:54.621492 2026] [security2:error] [pid 1321:tid 1509] [client 20.197.61.180:3379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-content/core.php"] [unique_id "apK-tmjCPtor9NZ-byQTTAAABlE"]
[Sat Aug 29 05:12:54.644175 2026] [security2:error] [pid 1321:tid 1515] [client 20.48.250.41:49258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/elp.php"] [unique_id "apK-tmjCPtor9NZ-byQTTwAABlc"]
[Sat Aug 29 05:12:54.646347 2026] [security2:error] [pid 60333:tid 60528] [client 20.196.209.81:16741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "core.highpointlogic.com"] [uri "/randkeyword.php"] [unique_id "apK-tjwSHPvvQcBSRbsjtgAAAco"]
[Sat Aug 29 05:12:54.698902 2026] [security2:error] [pid 60333:tid 60510] [client 20.196.209.81:14578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/disagraeed.php"] [unique_id "apK-tjwSHPvvQcBSRbsjugAAAbg"]
[Sat Aug 29 05:12:54.730743 2026] [security2:error] [pid 60333:tid 60523] [client 20.48.250.41:45990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/sbhu.php"] [unique_id "apK-tjwSHPvvQcBSRbsjwgAAAcU"]
[Sat Aug 29 05:12:54.733231 2026] [security2:error] [pid 60333:tid 60592] [client 20.197.61.180:3807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thatsaturdaythang.lifesosweet.com"] [uri "/wp-content/about.php"] [unique_id "apK-tjwSHPvvQcBSRbsjwwAAAgo"]
[Sat Aug 29 05:12:54.736983 2026] [security2:error] [pid 60333:tid 60422] [remote 52.167.144.172:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "giantsfans.net"] [uri "/message_board/index.php"] [unique_id "apK-tjwSHPvvQcBSRbsjxAABp1M"]
[Sat Aug 29 05:12:54.749206 2026] [security2:error] [pid 60333:tid 60526] [client 68.155.159.216:1837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-content/themes/themes/Cyb3r.php"] [unique_id "apK-tjwSHPvvQcBSRbsjxgAAAcg"]
[Sat Aug 29 05:12:54.756568 2026] [security2:error] [pid 60333:tid 60533] [client 68.155.159.216:44010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-tjwSHPvvQcBSRbsjyAAAAc8"]
[Sat Aug 29 05:12:54.777943 2026] [security2:error] [pid 60333:tid 60588] [client 52.139.37.240:32722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/7logs.php"] [unique_id "apK-tjwSHPvvQcBSRbsjyQAAAgY"]
[Sat Aug 29 05:12:54.778650 2026] [security2:error] [pid 60333:tid 60554] [client 74.248.24.12:36072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/wp-load.php"] [unique_id "apK-tjwSHPvvQcBSRbsjygAAAeQ"]
[Sat Aug 29 05:12:54.786601 2026] [access_compat:error] [pid 60333:tid 60424] [remote 20.245.83.144:0] AH01797: client denied by server configuration: /home1/giantsfa/public_html/message_board/index.php
[Sat Aug 29 05:12:54.790738 2026] [security2:error] [pid 60333:tid 60546] [client 20.48.250.41:49260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/666.php"] [unique_id "apK-tjwSHPvvQcBSRbsj0AAAAdw"]
[Sat Aug 29 05:12:54.862148 2026] [security2:error] [pid 60333:tid 60497] [client 20.48.250.41:45903] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/a332.php"] [unique_id "apK-tjwSHPvvQcBSRbsj1AAAAas"]
[Sat Aug 29 05:12:54.872869 2026] [security2:error] [pid 60333:tid 60482] [client 20.196.209.81:4495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/fi2.php"] [unique_id "apK-tjwSHPvvQcBSRbsj1QAAAZw"]
[Sat Aug 29 05:12:54.901932 2026] [security2:error] [pid 60333:tid 60518] [client 20.63.219.114:18831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/feed-rss2-queue.php"] [unique_id "apK-tjwSHPvvQcBSRbsj2QAAAcA"]
[Sat Aug 29 05:12:54.918781 2026] [access_compat:error] [pid 1321:tid 1567] [client 67.20.76.220:54194] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:12:54.935929 2026] [security2:error] [pid 1321:tid 1598] [client 20.48.250.41:49242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/knmt.php"] [unique_id "apK-tmjCPtor9NZ-byQTUgAABqk"]
[Sat Aug 29 05:12:54.970820 2026] [security2:error] [pid 60333:tid 60541] [client 4.205.62.107:5529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/koiy.php"] [unique_id "apK-tjwSHPvvQcBSRbsj5gAAAdc"]
[Sat Aug 29 05:12:54.973251 2026] [security2:error] [pid 60333:tid 60529] [client 52.139.37.240:32118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/ac.php"] [unique_id "apK-tjwSHPvvQcBSRbsj5wAAAcs"]
[Sat Aug 29 05:12:54.979220 2026] [security2:error] [pid 60333:tid 60469] [client 20.220.204.93:36706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/amp.php"] [unique_id "apK-tjwSHPvvQcBSRbsj6AAAAY8"]
[Sat Aug 29 05:12:55.012225 2026] [security2:error] [pid 60333:tid 60593] [client 158.158.54.35:1294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/m.php"] [unique_id "apK-tzwSHPvvQcBSRbsj7AAAAgs"]
[Sat Aug 29 05:12:55.014106 2026] [security2:error] [pid 60333:tid 60516] [client 197.219.150.206:64197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.150.219.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK-tzwSHPvvQcBSRbsj7QAAAb4"]
[Sat Aug 29 05:12:55.014211 2026] [security2:error] [pid 60333:tid 60516] [client 197.219.150.206:64197] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "brunas.coach"] [uri "/xmlrpc.php"] [unique_id "apK-tzwSHPvvQcBSRbsj7QAAAb4"]
[Sat Aug 29 05:12:55.039730 2026] [security2:error] [pid 60333:tid 60524] [client 20.48.250.41:45328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/ws66.php"] [unique_id "apK-tzwSHPvvQcBSRbsj8AAAAcY"]
[Sat Aug 29 05:12:55.043978 2026] [security2:error] [pid 1321:tid 1613] [client 106.222.207.18:9318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.207.222.106.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "doctoranddog.com"] [uri "/xmlrpc.php"] [unique_id "apK-t2jCPtor9NZ-byQTVgAABrg"]
[Sat Aug 29 05:12:55.044098 2026] [security2:error] [pid 1321:tid 1613] [client 106.222.207.18:9318] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "doctoranddog.com"] [uri "/xmlrpc.php"] [unique_id "apK-t2jCPtor9NZ-byQTVgAABrg"]
[Sat Aug 29 05:12:55.046674 2026] [security2:error] [pid 1321:tid 1489] [client 20.196.209.81:3797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "core.highpointlogic.com"] [uri "/goods.php"] [unique_id "apK-t2jCPtor9NZ-byQTVwAABj0"]
[Sat Aug 29 05:12:55.058770 2026] [security2:error] [pid 1321:tid 1467] [remote 74.7.227.154:46308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "goodtogo.store"] [uri "/sitemap_index.xml"] [unique_id "apK-t2jCPtor9NZ-byQTWQAGs2w"], referer: https://goodtogo.store/sitemap_index.xml?p=%2Fhome4%2Fsortthru%2Fpublic_html%2Fgoodtogo%2Fwebapp%2Fwp-content%2Fplugins%2Finsert-headers-and-footers%2Fincludes%2Fgenerator
[Sat Aug 29 05:12:55.063486 2026] [security2:error] [pid 1321:tid 1580] [client 4.205.62.107:61831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/66.php"] [unique_id "apK-t2jCPtor9NZ-byQTWgAABpc"]
[Sat Aug 29 05:12:55.065365 2026] [security2:error] [pid 60333:tid 60477] [client 20.104.18.15:5079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/file1221.php"] [unique_id "apK-tzwSHPvvQcBSRbsj8QAAAZc"]
[Sat Aug 29 05:12:55.069213 2026] [security2:error] [pid 60333:tid 60563] [client 20.52.41.200:2136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-admin/a.php"] [unique_id "apK-tzwSHPvvQcBSRbsj8gAAAe0"]
[Sat Aug 29 05:12:55.070083 2026] [security2:error] [pid 60333:tid 60530] [client 158.23.147.79:64410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/wp-content/uploads/about.php"] [unique_id "apK-tzwSHPvvQcBSRbsj8wAAAcw"]
[Sat Aug 29 05:12:55.106429 2026] [security2:error] [pid 1321:tid 1605] [client 103.215.74.26:62174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.74.215.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.com"] [uri "/wordpress/index.php"] [unique_id "apK-t2jCPtor9NZ-byQTXQAABrA"]
[Sat Aug 29 05:12:55.111508 2026] [security2:error] [pid 60333:tid 60538] [client 20.48.250.41:49261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/sbhu.php"] [unique_id "apK-tzwSHPvvQcBSRbsj9wAAAdQ"]
[Sat Aug 29 05:12:55.120575 2026] [security2:error] [pid 60333:tid 60551] [client 158.23.147.79:7163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/xmlrpc.php"] [unique_id "apK-tzwSHPvvQcBSRbsj-gAAAeE"]
[Sat Aug 29 05:12:55.134091 2026] [security2:error] [pid 1321:tid 1573] [client 20.196.209.81:14575] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/add_actualites.php"] [unique_id "apK-t2jCPtor9NZ-byQTXgAABpA"]
[Sat Aug 29 05:12:55.156782 2026] [security2:error] [pid 60333:tid 60558] [client 20.104.18.15:16596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/kerang.php"] [unique_id "apK-tzwSHPvvQcBSRbsj_AAAAeg"]
[Sat Aug 29 05:12:55.170791 2026] [security2:error] [pid 60333:tid 60573] [client 52.139.37.240:32088] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/ctex1.php"] [unique_id "apK-tzwSHPvvQcBSRbsj_QAAAfc"]
[Sat Aug 29 05:12:55.179000 2026] [security2:error] [pid 60333:tid 60487] [client 20.48.250.41:46066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/ws68.php"] [unique_id "apK-tzwSHPvvQcBSRbsj_wAAAaE"]
[Sat Aug 29 05:12:55.199418 2026] [security2:error] [pid 60333:tid 60581] [client 68.155.159.216:7145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/packed.php"] [unique_id "apK-tzwSHPvvQcBSRbskAQAAAf8"]
[Sat Aug 29 05:12:55.200155 2026] [security2:error] [pid 60333:tid 60519] [client 20.104.18.15:5035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/nox.php"] [unique_id "apK-tzwSHPvvQcBSRbskAgAAAcE"]
[Sat Aug 29 05:12:55.207341 2026] [security2:error] [pid 1321:tid 1562] [client 20.104.104.62:47588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/5index.php"] [unique_id "apK-t2jCPtor9NZ-byQTXwAABoU"]
[Sat Aug 29 05:12:55.285710 2026] [cgid:error] [pid 60333:tid 60486] [client 74.248.24.12:36081] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/themysticalseven/404.shtml
[Sat Aug 29 05:12:55.295646 2026] [security2:error] [pid 60333:tid 60503] [client 20.104.18.15:16628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/m.php"] [unique_id "apK-tzwSHPvvQcBSRbskBQAAAbE"]
[Sat Aug 29 05:12:55.306914 2026] [access_compat:error] [pid 60333:tid 60450] [remote 20.245.83.144:0] AH01797: client denied by server configuration: /home1/giantsfa/public_html/message_board/index.php
[Sat Aug 29 05:12:55.307612 2026] [security2:error] [pid 60333:tid 60584] [client 20.48.250.41:45996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/users.php"] [unique_id "apK-tzwSHPvvQcBSRbskBwAAAgI"]
[Sat Aug 29 05:12:55.313429 2026] [security2:error] [pid 60333:tid 60472] [client 20.48.250.41:28609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/a332.php"] [unique_id "apK-tzwSHPvvQcBSRbskCAAAAZI"]
[Sat Aug 29 05:12:55.315394 2026] [security2:error] [pid 60333:tid 60531] [client 20.63.219.114:14009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/inputs.php"] [unique_id "apK-tzwSHPvvQcBSRbskCQAAAc0"]
[Sat Aug 29 05:12:55.318648 2026] [security2:error] [pid 60333:tid 60578] [client 20.196.209.81:11319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/1p.php"] [unique_id "apK-tzwSHPvvQcBSRbskCgAAAfw"]
[Sat Aug 29 05:12:55.320329 2026] [security2:error] [pid 60333:tid 60528] [client 20.151.200.44:55701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/exec.php"] [unique_id "apK-tzwSHPvvQcBSRbskCwAAAco"]
[Sat Aug 29 05:12:55.325835 2026] [security2:error] [pid 60333:tid 60596] [client 68.155.159.216:62730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/goat1.php"] [unique_id "apK-tzwSHPvvQcBSRbskDAAAAg4"]
[Sat Aug 29 05:12:55.350383 2026] [security2:error] [pid 60333:tid 60507] [client 20.197.61.180:3784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-content/db-status.php"] [unique_id "apK-tzwSHPvvQcBSRbskEQAAAbU"]
[Sat Aug 29 05:12:55.366329 2026] [security2:error] [pid 60333:tid 60583] [client 52.139.37.240:32154] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/defaults.php"] [unique_id "apK-tzwSHPvvQcBSRbskEwAAAgE"]
[Sat Aug 29 05:12:55.379637 2026] [security2:error] [pid 60333:tid 60526] [client 20.104.18.15:27633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/x.php"] [unique_id "apK-tzwSHPvvQcBSRbskFgAAAcg"]
[Sat Aug 29 05:12:55.379793 2026] [security2:error] [pid 1321:tid 1506] [client 20.104.18.15:5086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/akismet.php"] [unique_id "apK-t2jCPtor9NZ-byQTYgAABk4"]
[Sat Aug 29 05:12:55.431992 2026] [security2:error] [pid 60333:tid 60512] [client 20.104.18.15:16565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/fling.php"] [unique_id "apK-tzwSHPvvQcBSRbskHwAAAbo"]
[Sat Aug 29 05:12:55.432961 2026] [security2:error] [pid 1321:tid 1504] [client 4.205.62.107:60564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/kedi.php"] [unique_id "apK-t2jCPtor9NZ-byQTZgAABkw"]
[Sat Aug 29 05:12:55.437048 2026] [security2:error] [pid 60333:tid 60542] [client 68.155.159.216:21468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/mah.php"] [unique_id "apK-tzwSHPvvQcBSRbskIQAAAdg"]
[Sat Aug 29 05:12:55.439007 2026] [security2:error] [pid 60333:tid 60565] [client 20.48.250.41:46029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/bzjdlofz.php"] [unique_id "apK-tzwSHPvvQcBSRbskIgAAAe8"]
[Sat Aug 29 05:12:55.445881 2026] [security2:error] [pid 60333:tid 60499] [client 20.48.250.41:50208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/ws66.php"] [unique_id "apK-tzwSHPvvQcBSRbskIwAAAa0"]
[Sat Aug 29 05:12:55.450775 2026] [security2:error] [pid 1321:tid 1564] [client 20.197.61.180:3334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thatsaturdaythang.lifesosweet.com"] [uri "/wp-content/admin-header.php"] [unique_id "apK-t2jCPtor9NZ-byQTZwAABoc"]
[Sat Aug 29 05:12:55.451124 2026] [security2:error] [pid 60333:tid 60571] [client 74.248.24.12:36081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/a.php"] [unique_id "apK-tzwSHPvvQcBSRbskJAAAAfU"]
[Sat Aug 29 05:12:55.453801 2026] [security2:error] [pid 60333:tid 60475] [client 20.196.209.81:16730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "core.highpointlogic.com"] [uri "/hehe.php"] [unique_id "apK-tzwSHPvvQcBSRbskJQAAAZU"]
[Sat Aug 29 05:12:55.454130 2026] [security2:error] [pid 60333:tid 60560] [client 158.158.54.35:35462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "apK-tzwSHPvvQcBSRbskJgAAAeo"]
[Sat Aug 29 05:12:55.470507 2026] [core:error] [pid 1321:tid 1439] [remote 74.7.230.7:42290] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:55.470527 2026] [core:error] [pid 1321:tid 1439] [remote 74.7.230.7:42290] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:55.470676 2026] [security2:error] [pid 1321:tid 1592] [client 74.7.230.7:42290] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "www.susanavillasacapulco.com"] [uri "/index.php"] [unique_id "apK-t2jCPtor9NZ-byQTaAAGo1E"]
[Sat Aug 29 05:12:55.501746 2026] [security2:error] [pid 60333:tid 60476] [client 4.205.62.107:62746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/8.php"] [unique_id "apK-tzwSHPvvQcBSRbskKAAAAZY"]
[Sat Aug 29 05:12:55.504947 2026] [security2:error] [pid 1321:tid 1516] [client 20.220.204.93:36679] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/cc13.php"] [unique_id "apK-t2jCPtor9NZ-byQTaQAABlg"]
[Sat Aug 29 05:12:55.510021 2026] [security2:error] [pid 1321:tid 1548] [client 20.104.18.15:17058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/ssla.php"] [unique_id "apK-t2jCPtor9NZ-byQTagAABnc"]
[Sat Aug 29 05:12:55.511124 2026] [security2:error] [pid 1321:tid 1615] [client 20.104.49.130:52331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.stellarstaffingca.info"] [uri "/run.php"] [unique_id "apK-t2jCPtor9NZ-byQTawAABro"]
[Sat Aug 29 05:12:55.513947 2026] [security2:error] [pid 60333:tid 60585] [client 20.104.18.15:5095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/ajax.php"] [unique_id "apK-tzwSHPvvQcBSRbskKgAAAgM"]
[Sat Aug 29 05:12:55.525588 2026] [security2:error] [pid 60333:tid 60482] [client 4.205.62.107:63029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/maxro.php"] [unique_id "apK-tzwSHPvvQcBSRbskLgAAAZw"]
[Sat Aug 29 05:12:55.540522 2026] [security2:error] [pid 60333:tid 60554] [client 20.196.209.81:14540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/alfanew.php7"] [unique_id "apK-tzwSHPvvQcBSRbskMAAAAeQ"]
[Sat Aug 29 05:12:55.541179 2026] [security2:error] [pid 1321:tid 1501] [client 158.23.147.79:43658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK-t2jCPtor9NZ-byQTbAAABkk"]
[Sat Aug 29 05:12:55.562343 2026] [security2:error] [pid 60333:tid 60591] [client 52.139.37.240:32731] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/domains.php"] [unique_id "apK-tzwSHPvvQcBSRbskNQAAAgk"]
[Sat Aug 29 05:12:55.569618 2026] [security2:error] [pid 60333:tid 60517] [client 20.104.18.15:16585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/btyuio.php"] [unique_id "apK-tzwSHPvvQcBSRbskNgAAAb8"]
[Sat Aug 29 05:12:55.580227 2026] [security2:error] [pid 60333:tid 60508] [client 20.48.250.41:38904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kiwimediaworks.glenncoad.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-tzwSHPvvQcBSRbskNwAAAbY"]
[Sat Aug 29 05:12:55.587910 2026] [security2:error] [pid 60333:tid 60590] [client 20.48.250.41:49222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/ws68.php"] [unique_id "apK-tzwSHPvvQcBSRbskOAAAAgg"]
[Sat Aug 29 05:12:55.589828 2026] [security2:error] [pid 60333:tid 60547] [client 20.48.250.41:45994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/selesai.php"] [unique_id "apK-tzwSHPvvQcBSRbskOQAAAd0"]
[Sat Aug 29 05:12:55.615739 2026] [security2:error] [pid 60333:tid 60469] [client 4.205.62.107:63409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/wpver.php"] [unique_id "apK-tzwSHPvvQcBSRbskQQAAAY8"]
[Sat Aug 29 05:12:55.646705 2026] [security2:error] [pid 1321:tid 1596] [client 20.104.18.15:17039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "apK-t2jCPtor9NZ-byQTcAAABqc"]
[Sat Aug 29 05:12:55.655110 2026] [security2:error] [pid 60333:tid 60535] [client 158.23.147.79:50098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/lock.php"] [unique_id "apK-tzwSHPvvQcBSRbskQgAAAdE"]
[Sat Aug 29 05:12:55.669256 2026] [security2:error] [pid 60333:tid 60540] [client 20.52.41.200:2948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK-tzwSHPvvQcBSRbskRAAAAdY"]
[Sat Aug 29 05:12:55.670051 2026] [security2:error] [pid 60333:tid 60484] [client 158.23.147.79:14294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/bk/index.php"] [unique_id "apK-tzwSHPvvQcBSRbskRQAAAZ4"]
[Sat Aug 29 05:12:55.674816 2026] [security2:error] [pid 1321:tid 1601] [client 20.63.219.114:13976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/class-walker-category-dropdown-class.php"] [unique_id "apK-t2jCPtor9NZ-byQTcQAABqw"]
[Sat Aug 29 05:12:55.678597 2026] [security2:error] [pid 60333:tid 60553] [client 68.155.159.216:61304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-includes/plugins.php"] [unique_id "apK-tzwSHPvvQcBSRbskRgAAAeM"]
[Sat Aug 29 05:12:55.685408 2026] [security2:error] [pid 1321:tid 1542] [client 158.23.147.79:24565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "apK-t2jCPtor9NZ-byQTcgAABnI"]
[Sat Aug 29 05:12:55.686286 2026] [security2:error] [pid 60333:tid 60477] [client 20.104.18.15:5082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/atomlib.php"] [unique_id "apK-tzwSHPvvQcBSRbskRwAAAZc"]
[Sat Aug 29 05:12:55.699681 2026] [security2:error] [pid 60333:tid 60530] [client 20.104.18.15:16572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/dehnl.php"] [unique_id "apK-tzwSHPvvQcBSRbskSAAAAcw"]
[Sat Aug 29 05:12:55.722976 2026] [security2:error] [pid 1321:tid 1590] [client 20.196.209.81:1983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/Njima.php"] [unique_id "apK-t2jCPtor9NZ-byQTcwAABqE"]
[Sat Aug 29 05:12:55.724551 2026] [security2:error] [pid 1321:tid 1584] [client 20.48.250.41:45319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/shlo.php"] [unique_id "apK-t2jCPtor9NZ-byQTdAAABps"]
[Sat Aug 29 05:12:55.727438 2026] [security2:error] [pid 1321:tid 1515] [client 20.48.250.41:49257] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/users.php"] [unique_id "apK-t2jCPtor9NZ-byQTdQAABlc"]
[Sat Aug 29 05:12:55.745913 2026] [security2:error] [pid 60333:tid 60557] [client 103.215.74.26:44682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 26.74.215.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kglogisticsinc.com"] [uri "/wordpress/index.php"] [unique_id "apK-tzwSHPvvQcBSRbskTwAAAec"]
[Sat Aug 29 05:12:55.758107 2026] [security2:error] [pid 60333:tid 60563] [client 52.139.37.240:32120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/dropdown.php"] [unique_id "apK-tzwSHPvvQcBSRbskUAAAAe0"]
[Sat Aug 29 05:12:55.811817 2026] [security2:error] [pid 60333:tid 60470] [client 20.104.18.15:17057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/wp-aothait.php"] [unique_id "apK-tzwSHPvvQcBSRbskVQAAAZA"]
[Sat Aug 29 05:12:55.821442 2026] [security2:error] [pid 60333:tid 60581] [client 20.48.250.41:38876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kiwimediaworks.glenncoad.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apK-tzwSHPvvQcBSRbskVwAAAf8"]
[Sat Aug 29 05:12:55.826413 2026] [security2:error] [pid 60333:tid 60519] [client 20.220.204.93:9580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/aa.php"] [unique_id "apK-tzwSHPvvQcBSRbskWAAAAcE"]
[Sat Aug 29 05:12:55.832593 2026] [security2:error] [pid 60333:tid 60564] [client 20.104.18.15:16530] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/zoo2.php"] [unique_id "apK-tzwSHPvvQcBSRbskWQAAAe4"]
[Sat Aug 29 05:12:55.859009 2026] [security2:error] [pid 60333:tid 60562] [client 68.155.159.216:1749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-content/plugins/plugins/Cyb3r.php"] [unique_id "apK-tzwSHPvvQcBSRbskXAAAAew"]
[Sat Aug 29 05:12:55.863869 2026] [security2:error] [pid 60333:tid 60479] [client 68.155.159.216:44022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/content.php"] [unique_id "apK-tzwSHPvvQcBSRbskXgAAAZk"]
[Sat Aug 29 05:12:55.870262 2026] [security2:error] [pid 60333:tid 60580] [client 20.48.250.41:49265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/bzjdlofz.php"] [unique_id "apK-tzwSHPvvQcBSRbskYQAAAf4"]
[Sat Aug 29 05:12:55.879153 2026] [security2:error] [pid 1321:tid 1567] [client 20.48.250.41:45997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/asax.php"] [unique_id "apK-t2jCPtor9NZ-byQTdwAABoo"]
[Sat Aug 29 05:12:55.887349 2026] [security2:error] [pid 1321:tid 1612] [client 20.196.209.81:16765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "core.highpointlogic.com"] [uri "/wp-admin/class-db.php"] [unique_id "apK-t2jCPtor9NZ-byQTeAAABrc"]
[Sat Aug 29 05:12:55.916134 2026] [access_compat:error] [pid 1321:tid 1583] [client 67.20.76.220:54222] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:12:55.925850 2026] [security2:error] [pid 60333:tid 60584] [client 68.155.159.216:44001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.theenprogroup.com"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK-tzwSHPvvQcBSRbskYwAAAgI"]
[Sat Aug 29 05:12:55.928096 2026] [access_compat:error] [pid 1321:tid 1576] [client 67.20.76.220:54238] AH01797: client denied by server configuration: /home4/eastacar/public_html/djiboutihomes/wp-cron.php
[Sat Aug 29 05:12:55.928121 2026] [security2:error] [pid 60333:tid 60572] [client 158.158.54.35:2006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/222.php"] [unique_id "apK-tzwSHPvvQcBSRbskZQAAAfY"]
[Sat Aug 29 05:12:55.954467 2026] [security2:error] [pid 60333:tid 60515] [client 52.139.37.240:32762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/files/index.php"] [unique_id "apK-tzwSHPvvQcBSRbskaQAAAb0"]
[Sat Aug 29 05:12:55.961805 2026] [security2:error] [pid 60333:tid 60510] [client 20.104.18.15:27608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/wp-includes/index.php"] [unique_id "apK-tzwSHPvvQcBSRbskbQAAAbg"]
[Sat Aug 29 05:12:55.965821 2026] [security2:error] [pid 60333:tid 60494] [client 74.248.24.12:36634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/u.php"] [unique_id "apK-tzwSHPvvQcBSRbskbwAAAag"]
[Sat Aug 29 05:12:55.967508 2026] [security2:error] [pid 1321:tid 1514] [client 60.243.207.176:50429] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 176.207.243.60.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK-t2jCPtor9NZ-byQTfgAABlY"]
[Sat Aug 29 05:12:55.967620 2026] [security2:error] [pid 1321:tid 1514] [client 60.243.207.176:50429] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "lindamcvayart.com"] [uri "/xmlrpc.php"] [unique_id "apK-t2jCPtor9NZ-byQTfgAABlY"]
[Sat Aug 29 05:12:55.979467 2026] [security2:error] [pid 60333:tid 60566] [client 20.104.18.15:16541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/zoo1.php"] [unique_id "apK-tzwSHPvvQcBSRbskdwAAAfA"]
[Sat Aug 29 05:12:55.996867 2026] [security2:error] [pid 60333:tid 60565] [client 20.104.18.15:4997] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.my-dbo.com"] [uri "/1.php"] [unique_id "apK-tzwSHPvvQcBSRbskegAAAe8"]
[Sat Aug 29 05:12:55.996965 2026] [security2:error] [pid 60333:tid 60565] [client 20.104.18.15:4997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/1.php"] [unique_id "apK-tzwSHPvvQcBSRbskegAAAe8"]
[Sat Aug 29 05:12:55.999519 2026] [security2:error] [pid 60333:tid 60544] [client 20.104.104.62:20852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/6index.php"] [unique_id "apK-tzwSHPvvQcBSRbskewAAAdo"]
[Sat Aug 29 05:12:56.012437 2026] [security2:error] [pid 1321:tid 1523] [client 20.48.250.41:49173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/selesai.php"] [unique_id "apK-uGjCPtor9NZ-byQTfwAABl8"]
[Sat Aug 29 05:12:56.026492 2026] [security2:error] [pid 60333:tid 60567] [client 20.196.209.81:9998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/xmlrpc.php0"] [unique_id "apK-uDwSHPvvQcBSRbskfgAAAfE"]
[Sat Aug 29 05:12:56.033991 2026] [security2:error] [pid 60333:tid 60560] [client 20.48.250.41:45944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/fetch.php"] [unique_id "apK-uDwSHPvvQcBSRbskfwAAAeo"]
[Sat Aug 29 05:12:56.067411 2026] [security2:error] [pid 60333:tid 60513] [client 20.197.61.180:8790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-content/disagrsxr.php"] [unique_id "apK-uDwSHPvvQcBSRbskhQAAAbs"]
[Sat Aug 29 05:12:56.077076 2026] [security2:error] [pid 1321:tid 1605] [client 20.48.250.41:38863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kiwimediaworks.glenncoad.com"] [uri "/ff1.php"] [unique_id "apK-uGjCPtor9NZ-byQThAAABrA"]
[Sat Aug 29 05:12:56.078198 2026] [security2:error] [pid 1321:tid 1445] [remote 34.74.253.19:52086] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "cpcontacts.harnessenergycr.com"] [uri "/@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ"] [unique_id "apK-uGjCPtor9NZ-byQThQAGQFc"]
[Sat Aug 29 05:12:56.092789 2026] [security2:error] [pid 60333:tid 60582] [client 20.104.18.15:17091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/file31.php"] [unique_id "apK-uDwSHPvvQcBSRbskhwAAAgA"]
[Sat Aug 29 05:12:56.107888 2026] [security2:error] [pid 60333:tid 60542] [client 20.63.219.114:13962] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/1.php7"] [unique_id "apK-uDwSHPvvQcBSRbskiQAAAdg"]
[Sat Aug 29 05:12:56.108306 2026] [security2:error] [pid 60333:tid 60542] [client 20.63.219.114:13962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/1.php7"] [unique_id "apK-uDwSHPvvQcBSRbskiQAAAdg"]
[Sat Aug 29 05:12:56.110435 2026] [security2:error] [pid 60333:tid 60520] [client 4.205.62.107:5544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/w.php"] [unique_id "apK-uDwSHPvvQcBSRbskigAAAcI"]
[Sat Aug 29 05:12:56.122377 2026] [security2:error] [pid 60333:tid 60592] [client 20.52.41.200:2141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.41.52.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sls-ug.jomoassociates.com"] [uri "/wp-admin.php"] [unique_id "apK-uDwSHPvvQcBSRbskjAAAAgo"]
[Sat Aug 29 05:12:56.136576 2026] [security2:error] [pid 60333:tid 60547] [client 20.104.18.15:16588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/radio.php"] [unique_id "apK-uDwSHPvvQcBSRbskkAAAAd0"]
[Sat Aug 29 05:12:56.145577 2026] [security2:error] [pid 1321:tid 1561] [client 52.139.37.240:32155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.37.139.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.elysefairweather.net"] [uri "/flower.php"] [unique_id "apK-uGjCPtor9NZ-byQThgAABoQ"]
[Sat Aug 29 05:12:56.147208 2026] [security2:error] [pid 60333:tid 60549] [client 20.48.250.41:50178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/shlo.php"] [unique_id "apK-uDwSHPvvQcBSRbskkQAAAd8"]
[Sat Aug 29 05:12:56.153967 2026] [security2:error] [pid 60333:tid 60577] [client 65.21.113.248:49218] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.babyboomerscare.com"] [uri "/senior-living/"] [unique_id "apK-uDwSHPvvQcBSRbskkgAAAfs"]
[Sat Aug 29 05:12:56.166983 2026] [security2:error] [pid 60333:tid 60469] [client 20.104.18.15:5007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/samll.php"] [unique_id "apK-uDwSHPvvQcBSRbsklAAAAY8"]
[Sat Aug 29 05:12:56.174644 2026] [security2:error] [pid 1321:tid 1490] [client 20.196.209.81:4537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/configs.php"] [unique_id "apK-uGjCPtor9NZ-byQThwAABj4"]
[Sat Aug 29 05:12:56.175910 2026] [security2:error] [pid 60333:tid 60593] [client 158.23.147.79:64468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/wp-admin/maint/index.php"] [unique_id "apK-uDwSHPvvQcBSRbsklQAAAgs"]
[Sat Aug 29 05:12:56.180277 2026] [security2:error] [pid 1321:tid 1613] [client 20.197.61.180:3802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thatsaturdaythang.lifesosweet.com"] [uri "/wp-content/admin.php"] [unique_id "apK-uGjCPtor9NZ-byQTiAAABrg"]
[Sat Aug 29 05:12:56.186574 2026] [security2:error] [pid 1321:tid 1610] [client 20.48.250.41:45899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/vx.php"] [unique_id "apK-uGjCPtor9NZ-byQTiQAABrU"]
[Sat Aug 29 05:12:56.203584 2026] [security2:error] [pid 60333:tid 60471] [client 4.205.62.107:64307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/admin.php"] [unique_id "apK-uDwSHPvvQcBSRbsklgAAAZE"]
[Sat Aug 29 05:12:56.224215 2026] [security2:error] [pid 60333:tid 60533] [client 158.23.147.79:7140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/atomlib.php"] [unique_id "apK-uDwSHPvvQcBSRbsklwAAAc8"]
[Sat Aug 29 05:12:56.224232 2026] [security2:error] [pid 60333:tid 60587] [client 158.23.147.79:24468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.paulroyce.com"] [uri "/wp-content/uploads/index.php"] [unique_id "apK-uDwSHPvvQcBSRbskmAAAAgU"]
[Sat Aug 29 05:12:56.239450 2026] [security2:error] [pid 60333:tid 60570] [client 20.48.250.41:38798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kiwimediaworks.glenncoad.com"] [uri "/t.php"] [unique_id "apK-uDwSHPvvQcBSRbskmwAAAfQ"]
[Sat Aug 29 05:12:56.258662 2026] [security2:error] [pid 60333:tid 60586] [client 68.155.159.216:21465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/dropdown.php"] [unique_id "apK-uDwSHPvvQcBSRbskngAAAgQ"]
[Sat Aug 29 05:12:56.265795 2026] [security2:error] [pid 60333:tid 60498] [client 20.104.18.15:48100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/one.php"] [unique_id "apK-uDwSHPvvQcBSRbsknwAAAaw"]
[Sat Aug 29 05:12:56.272659 2026] [security2:error] [pid 60333:tid 60530] [client 20.220.204.93:59585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/s1.php"] [unique_id "apK-uDwSHPvvQcBSRbskoAAAAcw"]
[Sat Aug 29 05:12:56.286605 2026] [security2:error] [pid 1321:tid 1562] [client 20.196.209.81:16200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "core.highpointlogic.com"] [uri "/wp-contentt.php"] [unique_id "apK-uGjCPtor9NZ-byQTigAABoU"]
[Sat Aug 29 05:12:56.291877 2026] [security2:error] [pid 1321:tid 1508] [client 20.104.49.130:52322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "coveryourauto.com"] [uri "/82.php"] [unique_id "apK-uGjCPtor9NZ-byQTjAAABlA"]
[Sat Aug 29 05:12:56.297293 2026] [security2:error] [pid 1321:tid 1594] [client 20.104.18.15:27606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/dk.php"] [unique_id "apK-uGjCPtor9NZ-byQTjQAABqU"]
[Sat Aug 29 05:12:56.303257 2026] [security2:error] [pid 60333:tid 60561] [client 20.48.250.41:50231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/asax.php"] [unique_id "apK-uDwSHPvvQcBSRbskogAAAes"]
[Sat Aug 29 05:12:56.324050 2026] [security2:error] [pid 1321:tid 1532] [client 20.104.18.15:5058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/she11.php"] [unique_id "apK-uGjCPtor9NZ-byQTjgAABmg"]
[Sat Aug 29 05:12:56.324152 2026] [security2:error] [pid 1321:tid 1506] [client 20.48.250.41:45998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/global.php"] [unique_id "apK-uGjCPtor9NZ-byQTjwAABk4"]
[Sat Aug 29 05:12:56.340668 2026] [security2:error] [pid 60333:tid 60573] [client 68.155.159.216:7126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-content/packed.php"] [unique_id "apK-uDwSHPvvQcBSRbskpwAAAfc"]
[Sat Aug 29 05:12:56.359163 2026] [security2:error] [pid 60333:tid 60527] [client 20.104.49.130:60766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/pfm.php"] [unique_id "apK-uDwSHPvvQcBSRbskqgAAAck"]
[Sat Aug 29 05:12:56.360686 2026] [security2:error] [pid 60333:tid 60478] [client 61.9.8.35:27984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.8.9.61.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK-uDwSHPvvQcBSRbskqQAAAZg"]
[Sat Aug 29 05:12:56.360774 2026] [security2:error] [pid 60333:tid 60478] [client 61.9.8.35:27984] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "yustorres.com"] [uri "/xmlrpc.php"] [unique_id "apK-uDwSHPvvQcBSRbskqQAAAZg"]
[Sat Aug 29 05:12:56.390740 2026] [security2:error] [pid 1321:tid 1566] [client 197.232.63.170:55586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 170.63.232.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK-uGjCPtor9NZ-byQTkAAABok"]
[Sat Aug 29 05:12:56.390855 2026] [security2:error] [pid 1321:tid 1566] [client 197.232.63.170:55586] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "fieldssketchbook.com"] [uri "/xmlrpc.php"] [unique_id "apK-uGjCPtor9NZ-byQTkAAABok"]
[Sat Aug 29 05:12:56.391097 2026] [security2:error] [pid 1321:tid 1564] [client 20.104.104.62:20724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/7index.php"] [unique_id "apK-uGjCPtor9NZ-byQTkQAABoc"]
[Sat Aug 29 05:12:56.394052 2026] [security2:error] [pid 60333:tid 60574] [client 20.48.250.41:38898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kiwimediaworks.glenncoad.com"] [uri "/erty.php"] [unique_id "apK-uDwSHPvvQcBSRbskqwAAAfg"]
[Sat Aug 29 05:12:56.404029 2026] [security2:error] [pid 60333:tid 60479] [client 20.104.18.15:16591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/503.php"] [unique_id "apK-uDwSHPvvQcBSRbskrgAAAZk"]
[Sat Aug 29 05:12:56.416182 2026] [security2:error] [pid 60333:tid 60406] [remote 93.123.109.228:58030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/test.php"] [unique_id "apK-uDwSHPvvQcBSRbsktgAB7EM"]
[Sat Aug 29 05:12:56.417168 2026] [security2:error] [pid 60333:tid 60553] [client 158.158.54.35:1320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/mini.php"] [unique_id "apK-uDwSHPvvQcBSRbskuAAAAeM"]
[Sat Aug 29 05:12:56.422011 2026] [security2:error] [pid 60333:tid 60538] [client 20.196.209.81:9314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/content.php"] [unique_id "apK-uDwSHPvvQcBSRbskugAAAdQ"]
[Sat Aug 29 05:12:56.429010 2026] [security2:error] [pid 60333:tid 60541] [client 20.104.18.15:27537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/ta.php"] [unique_id "apK-uDwSHPvvQcBSRbskvQAAAdc"]
[Sat Aug 29 05:12:56.432957 2026] [security2:error] [pid 1321:tid 1525] [client 68.155.159.216:62738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK-uGjCPtor9NZ-byQTkgAABmE"]
[Sat Aug 29 05:12:56.456320 2026] [security2:error] [pid 1321:tid 1595] [client 20.48.250.41:45924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/fs.php"] [unique_id "apK-uGjCPtor9NZ-byQTlQAABqY"]
[Sat Aug 29 05:12:56.467362 2026] [security2:error] [pid 60333:tid 60503] [client 20.48.250.41:49195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/fetch.php"] [unique_id "apK-uDwSHPvvQcBSRbskvwAAAbE"]
[Sat Aug 29 05:12:56.483220 2026] [security2:error] [pid 1321:tid 1526] [client 74.248.24.12:16864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/r.php"] [unique_id "apK-uGjCPtor9NZ-byQTmgAABmI"]
[Sat Aug 29 05:12:56.488785 2026] [security2:error] [pid 60333:tid 60558] [client 65.21.113.248:41758] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.babyboomerscare.com"] [uri "/index.php"] [unique_id "apK-uDwSHPvvQcBSRbskpAAAAeg"]
[Sat Aug 29 05:12:56.490596 2026] [security2:error] [pid 60333:tid 60581] [client 20.63.219.114:13984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/ds.php"] [unique_id "apK-uDwSHPvvQcBSRbskwwAAAf8"]
[Sat Aug 29 05:12:56.560275 2026] [security2:error] [pid 1321:tid 1565] [client 68.155.159.216:21391] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-blog-header.php"] [unique_id "apK-uGjCPtor9NZ-byQTnAAABog"]
[Sat Aug 29 05:12:56.568856 2026] [security2:error] [pid 60333:tid 60495] [client 4.205.62.107:63887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/oc460l3x.php"] [unique_id "apK-uDwSHPvvQcBSRbskxQAAAak"]
[Sat Aug 29 05:12:56.570340 2026] [security2:error] [pid 1321:tid 1499] [client 158.23.147.79:31689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carpevictoriam.com"] [uri "/radio.php"] [unique_id "apK-uGjCPtor9NZ-byQTngAABkc"]
[Sat Aug 29 05:12:56.581531 2026] [security2:error] [pid 1321:tid 1516] [client 20.196.209.81:4517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/disagraeed.php"] [unique_id "apK-uGjCPtor9NZ-byQTnwAABlg"]
[Sat Aug 29 05:12:56.595477 2026] [core:error] [pid 1321:tid 1375] [remote 34.74.253.19:52096] AH10244: invalid URI path (/%2e%2e/.env)
[Sat Aug 29 05:12:56.602877 2026] [security2:error] [pid 1321:tid 1569] [client 20.48.250.41:49225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/vx.php"] [unique_id "apK-uGjCPtor9NZ-byQTowAABow"]
[Sat Aug 29 05:12:56.621999 2026] [security2:error] [pid 60333:tid 60550] [client 20.48.250.41:46068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/ioxi.php"] [unique_id "apK-uDwSHPvvQcBSRbskyQAAAeA"]
[Sat Aug 29 05:12:56.637248 2026] [security2:error] [pid 60333:tid 60544] [client 4.205.62.107:59125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/thui.php"] [unique_id "apK-uDwSHPvvQcBSRbskywAAAdo"]
[Sat Aug 29 05:12:56.646183 2026] [http2:warn] [pid 1041789:tid 1042039] [client 57.141.14.98:61724] h2_stream(1041789-34-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:12:56.650396 2026] [security2:error] [pid 60333:tid 60475] [client 57.141.14.114:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.djiboutifresh.com"] [uri "/categorie-produit/fruits/page/4/"] [unique_id "apK-uDwSHPvvQcBSRbskzAAAAZU"]
[Sat Aug 29 05:12:56.663292 2026] [security2:error] [pid 1321:tid 1542] [client 20.104.49.130:43035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.bfcorrigan.com"] [uri "/images.php"] [unique_id "apK-uGjCPtor9NZ-byQTqQAABnI"]
[Sat Aug 29 05:12:56.665369 2026] [security2:error] [pid 1321:tid 1542] [client 20.104.104.62:20698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/8index.php"] [unique_id "apK-uGjCPtor9NZ-byQTqgAABnI"]
[Sat Aug 29 05:12:56.667581 2026] [security2:error] [pid 60333:tid 60507] [client 4.205.62.107:63032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/brc.php"] [unique_id "apK-uDwSHPvvQcBSRbsk0QAAAbU"]
[Sat Aug 29 05:12:56.670902 2026] [security2:error] [pid 60333:tid 60476] [client 20.220.204.93:18774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/0byte.php"] [unique_id "apK-uDwSHPvvQcBSRbsk0gAAAZY"]
[Sat Aug 29 05:12:56.749934 2026] [security2:error] [pid 60333:tid 60546] [client 20.196.209.81:16751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "core.highpointlogic.com"] [uri "/theme.php"] [unique_id "apK-uDwSHPvvQcBSRbsk2QAAAdw"]
[Sat Aug 29 05:12:56.750838 2026] [security2:error] [pid 60333:tid 60511] [client 20.48.250.41:49222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/global.php"] [unique_id "apK-uDwSHPvvQcBSRbsk2gAAAbk"]
[Sat Aug 29 05:12:56.751588 2026] [security2:error] [pid 60333:tid 60542] [client 4.205.62.107:63415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/ah25.php"] [unique_id "apK-uDwSHPvvQcBSRbsk2wAAAdg"]
[Sat Aug 29 05:12:56.775534 2026] [security2:error] [pid 60333:tid 60592] [client 158.23.147.79:14189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.deargabriel.com"] [uri "/first.php"] [unique_id "apK-uDwSHPvvQcBSRbsk3QAAAgo"]
[Sat Aug 29 05:12:56.785677 2026] [security2:error] [pid 60333:tid 60517] [client 68.155.159.216:56540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "apK-uDwSHPvvQcBSRbsk3gAAAb8"]
[Sat Aug 29 05:12:56.785866 2026] [security2:error] [pid 1321:tid 1491] [client 20.48.250.41:45993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/bootstrap.php"] [unique_id "apK-uGjCPtor9NZ-byQTqwAABj8"]
[Sat Aug 29 05:12:56.790502 2026] [security2:error] [pid 60333:tid 60482] [client 158.23.147.79:24329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "apK-uDwSHPvvQcBSRbsk3wAAAZw"]
[Sat Aug 29 05:12:56.794768 2026] [security2:error] [pid 60333:tid 60596] [client 20.197.61.180:3685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-content/f35.php"] [unique_id "apK-uDwSHPvvQcBSRbsk4AAAAg4"]
[Sat Aug 29 05:12:56.818600 2026] [security2:error] [pid 60333:tid 60497] [client 20.196.209.81:5000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/wxo.php"] [unique_id "apK-uDwSHPvvQcBSRbsk4gAAAas"]
[Sat Aug 29 05:12:56.831906 2026] [security2:error] [pid 60333:tid 60549] [client 158.23.147.79:49993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/index/function.php"] [unique_id "apK-uDwSHPvvQcBSRbsk4wAAAd8"]
[Sat Aug 29 05:12:56.841851 2026] [security2:error] [pid 60333:tid 60534] [client 87.219.197.128:64961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 128.197.219.87.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK-uDwSHPvvQcBSRbsk5QAAAdA"]
[Sat Aug 29 05:12:56.841940 2026] [security2:error] [pid 60333:tid 60534] [client 87.219.197.128:64961] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "bomchecker.net"] [uri "/xmlrpc.php"] [unique_id "apK-uDwSHPvvQcBSRbsk5QAAAdA"]
[Sat Aug 29 05:12:56.845831 2026] [security2:error] [pid 60333:tid 60469] [client 20.48.250.41:38885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kiwimediaworks.glenncoad.com"] [uri "/0x.php"] [unique_id "apK-uDwSHPvvQcBSRbsk5gAAAY8"]
[Sat Aug 29 05:12:56.857222 2026] [security2:error] [pid 60333:tid 60593] [client 20.151.200.44:27186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/zoz.php"] [unique_id "apK-uDwSHPvvQcBSRbsk5wAAAgs"]
[Sat Aug 29 05:12:56.864600 2026] [security2:error] [pid 60333:tid 60513] [client 158.158.54.35:31127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/aa.php"] [unique_id "apK-uDwSHPvvQcBSRbsk6AAAAbs"]
[Sat Aug 29 05:12:56.884046 2026] [security2:error] [pid 60333:tid 60591] [client 20.63.219.114:1871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/GOD.php"] [unique_id "apK-uDwSHPvvQcBSRbsk6QAAAgk"]
[Sat Aug 29 05:12:56.902101 2026] [security2:error] [pid 60333:tid 60535] [client 20.48.250.41:49278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/fs.php"] [unique_id "apK-uDwSHPvvQcBSRbsk7AAAAdE"]
[Sat Aug 29 05:12:56.902675 2026] [security2:error] [pid 1321:tid 1601] [client 20.197.61.180:3790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thatsaturdaythang.lifesosweet.com"] [uri "/wp-content/autoload_classmap.php"] [unique_id "apK-uGjCPtor9NZ-byQTrAAABqw"]
[Sat Aug 29 05:12:56.923952 2026] [security2:error] [pid 1321:tid 1612] [client 20.48.250.41:45355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/export.php"] [unique_id "apK-uGjCPtor9NZ-byQTrQAABrc"]
[Sat Aug 29 05:12:56.932549 2026] [security2:error] [pid 60333:tid 60521] [client 202.71.25.11:53571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.25.71.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK-uDwSHPvvQcBSRbsk8wAAAcM"]
[Sat Aug 29 05:12:56.932710 2026] [security2:error] [pid 60333:tid 60521] [client 202.71.25.11:53571] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "nutritionclinicny.com"] [uri "/xmlrpc.php"] [unique_id "apK-uDwSHPvvQcBSRbsk8wAAAcM"]
[Sat Aug 29 05:12:56.948481 2026] [access_compat:error] [pid 1321:tid 1576] [client 67.20.76.220:54246] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:12:56.970919 2026] [security2:error] [pid 60333:tid 60477] [client 68.155.159.216:43944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK-uDwSHPvvQcBSRbsk_AAAAZc"]
[Sat Aug 29 05:12:56.994310 2026] [security2:error] [pid 60333:tid 60576] [client 20.196.209.81:1981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/add_actualites.php"] [unique_id "apK-uDwSHPvvQcBSRbsk_gAAAfo"]
[Sat Aug 29 05:12:56.996087 2026] [security2:error] [pid 1321:tid 1523] [client 68.155.159.216:2043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "apK-uGjCPtor9NZ-byQTswAABl8"]
[Sat Aug 29 05:12:56.999417 2026] [security2:error] [pid 60333:tid 60485] [client 74.248.24.12:16850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/wp-blog.php"] [unique_id "apK-uDwSHPvvQcBSRbsk_wAAAZ8"]
[Sat Aug 29 05:12:57.040180 2026] [security2:error] [pid 1321:tid 1580] [client 68.155.159.216:44013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.theenprogroup.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK-uWjCPtor9NZ-byQTtAAABpc"]
[Sat Aug 29 05:12:57.060783 2026] [security2:error] [pid 60333:tid 60527] [client 20.48.250.41:46043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/gk.php"] [unique_id "apK-uTwSHPvvQcBSRbslAQAAAck"]
[Sat Aug 29 05:12:57.061854 2026] [security2:error] [pid 60333:tid 60478] [client 20.48.250.41:50238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/ioxi.php"] [unique_id "apK-uTwSHPvvQcBSRbslAgAAAZg"]
[Sat Aug 29 05:12:57.088844 2026] [security2:error] [pid 1321:tid 1605] [client 20.48.250.41:38885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kiwimediaworks.glenncoad.com"] [uri "/66.php"] [unique_id "apK-uWjCPtor9NZ-byQTtQAABrA"]
[Sat Aug 29 05:12:57.124646 2026] [security2:error] [pid 60333:tid 60553] [client 20.220.204.93:9542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/xr.php"] [unique_id "apK-uTwSHPvvQcBSRbslCgAAAeM"]
[Sat Aug 29 05:12:57.142010 2026] [security2:error] [pid 60333:tid 60454] [remote 93.123.109.228:58030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/wp-config.php"] [unique_id "apK-uTwSHPvvQcBSRbslCwABwXM"]
[Sat Aug 29 05:12:57.155817 2026] [security2:error] [pid 60333:tid 60450] [remote 93.123.109.228:58030] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/wp-config.php.bak"] [unique_id "apK-uTwSHPvvQcBSRbslDQABsW8"]
[Sat Aug 29 05:12:57.177707 2026] [security2:error] [pid 60333:tid 60453] [remote 93.123.109.228:58030] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/wp-config.php.new"] [unique_id "apK-uTwSHPvvQcBSRbslDwAB3nI"]
[Sat Aug 29 05:12:57.183720 2026] [security2:error] [pid 60333:tid 60483] [client 20.196.209.81:3794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "core.highpointlogic.com"] [uri "/alumni_reg.php"] [unique_id "apK-uTwSHPvvQcBSRbslEAAAAZ0"]
[Sat Aug 29 05:12:57.192237 2026] [security2:error] [pid 60333:tid 60528] [client 20.151.200.44:55631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/dbc.php"] [unique_id "apK-uTwSHPvvQcBSRbslEQAAAco"]
[Sat Aug 29 05:12:57.192920 2026] [security2:error] [pid 60333:tid 60536] [client 20.48.250.41:46011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/logs1.php"] [unique_id "apK-uTwSHPvvQcBSRbslEgAAAdI"]
[Sat Aug 29 05:12:57.197684 2026] [security2:error] [pid 60333:tid 60458] [remote 93.123.109.228:58030] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/wp-config.php.old"] [unique_id "apK-uTwSHPvvQcBSRbslEwACB3c"]
[Sat Aug 29 05:12:57.217140 2026] [security2:error] [pid 60333:tid 60574] [client 20.196.209.81:4993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/as.php"] [unique_id "apK-uTwSHPvvQcBSRbslFAAAAfg"]
[Sat Aug 29 05:12:57.227055 2026] [security2:error] [pid 60333:tid 60564] [client 20.48.250.41:50247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/bootstrap.php"] [unique_id "apK-uTwSHPvvQcBSRbslFgAAAe4"]
[Sat Aug 29 05:12:57.242988 2026] [security2:error] [pid 60333:tid 60495] [client 4.205.62.107:6129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/btx25.php"] [unique_id "apK-uTwSHPvvQcBSRbslGgAAAak"]
[Sat Aug 29 05:12:57.260120 2026] [security2:error] [pid 60333:tid 60562] [client 20.104.104.62:47570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/9index.php"] [unique_id "apK-uTwSHPvvQcBSRbslHQAAAew"]
[Sat Aug 29 05:12:57.283724 2026] [security2:error] [pid 60333:tid 60499] [client 20.48.250.41:38857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kiwimediaworks.glenncoad.com"] [uri "/f35.php"] [unique_id "apK-uTwSHPvvQcBSRbslIQAAAa0"]
[Sat Aug 29 05:12:57.291739 2026] [security2:error] [pid 60333:tid 60558] [client 20.63.219.114:1866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/ggfi.php"] [unique_id "apK-uTwSHPvvQcBSRbslIwAAAeg"]
[Sat Aug 29 05:12:57.304689 2026] [security2:error] [pid 60333:tid 60560] [client 158.23.147.79:64408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/dropdown.php"] [unique_id "apK-uTwSHPvvQcBSRbslJAAAAeo"]
[Sat Aug 29 05:12:57.325914 2026] [security2:error] [pid 60333:tid 60567] [client 20.48.250.41:45336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/inege.php"] [unique_id "apK-uTwSHPvvQcBSRbslJQAAAfE"]
[Sat Aug 29 05:12:57.329628 2026] [security2:error] [pid 60333:tid 60595] [client 158.23.147.79:24568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.paulroyce.com"] [uri "/wp-content/plugins/zwso.php"] [unique_id "apK-uTwSHPvvQcBSRbslKAAAAg0"]
[Sat Aug 29 05:12:57.333082 2026] [security2:error] [pid 60333:tid 60554] [client 158.23.147.79:7135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/lv.php"] [unique_id "apK-uTwSHPvvQcBSRbslKQAAAeQ"]
[Sat Aug 29 05:12:57.340338 2026] [security2:error] [pid 60333:tid 60546] [client 4.205.62.107:64993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/png.php"] [unique_id "apK-uTwSHPvvQcBSRbslKgAAAdw"]
[Sat Aug 29 05:12:57.354997 2026] [security2:error] [pid 1321:tid 1490] [client 158.158.54.35:15076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/c.php"] [unique_id "apK-uWjCPtor9NZ-byQTtwAABj4"]
[Sat Aug 29 05:12:57.364282 2026] [security2:error] [pid 60333:tid 60517] [client 20.220.204.93:9488] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/h02ugyh.php"] [unique_id "apK-uTwSHPvvQcBSRbslKwAAAb8"]
[Sat Aug 29 05:12:57.374616 2026] [security2:error] [pid 60333:tid 60482] [client 68.155.159.216:56807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/sad/about.php"] [unique_id "apK-uTwSHPvvQcBSRbslLAAAAZw"]
[Sat Aug 29 05:12:57.385687 2026] [security2:error] [pid 60333:tid 60497] [client 20.48.250.41:49277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/export.php"] [unique_id "apK-uTwSHPvvQcBSRbslLQAAAas"]
[Sat Aug 29 05:12:57.394449 2026] [security2:error] [pid 60333:tid 60550] [client 20.196.209.81:1968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/alfanew.php7"] [unique_id "apK-uTwSHPvvQcBSRbslLwAAAeA"]
[Sat Aug 29 05:12:57.441175 2026] [security2:error] [pid 60333:tid 60529] [client 93.123.109.228:34628] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK-uTwSHPvvQcBSRbslMQAAAcs"]
[Sat Aug 29 05:12:57.459216 2026] [security2:error] [pid 60333:tid 60524] [client 20.48.250.41:38803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kiwimediaworks.glenncoad.com"] [uri "/wen.php"] [unique_id "apK-uTwSHPvvQcBSRbslNQAAAcY"]
[Sat Aug 29 05:12:57.459256 2026] [security2:error] [pid 60333:tid 60513] [client 20.48.250.41:46034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/wp-link10.php"] [unique_id "apK-uTwSHPvvQcBSRbslNAAAAbs"]
[Sat Aug 29 05:12:57.469029 2026] [security2:error] [pid 60333:tid 60570] [client 93.123.109.228:34654] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/___proxy_subdomain_cpcontacts/backend/.env"] [unique_id "apK-uTwSHPvvQcBSRbslOQAAAfQ"]
[Sat Aug 29 05:12:57.477660 2026] [security2:error] [pid 60333:tid 60500] [client 20.104.18.15:5071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/kerang.php"] [unique_id "apK-uTwSHPvvQcBSRbslOgAAAa4"]
[Sat Aug 29 05:12:57.501425 2026] [security2:error] [pid 60333:tid 60566] [client 20.197.61.180:3329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-content/index.php"] [unique_id "apK-uTwSHPvvQcBSRbslPwAAAfA"]
[Sat Aug 29 05:12:57.512062 2026] [security2:error] [pid 60333:tid 60511] [client 74.248.24.12:31934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/xxx.php"] [unique_id "apK-uTwSHPvvQcBSRbslQAAAAbk"]
[Sat Aug 29 05:12:57.527423 2026] [security2:error] [pid 60333:tid 60576] [client 20.48.250.41:49256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/gk.php"] [unique_id "apK-uTwSHPvvQcBSRbslQwAAAfo"]
[Sat Aug 29 05:12:57.527928 2026] [security2:error] [pid 60333:tid 60586] [client 93.123.109.228:34676] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(\\\\/\\\\*\\\\!? ?(?:select|grant|delete|insert|drop|alter|replace|truncate|update|create|rename|describe|union|concat|group_concat))" at REQUEST_FILENAME. [file "/opt/mod_security/hg_rules.conf"] [line "1019"] [id "9000042"] [rev "2.2.2"] [msg "SQL Comment Sequence Detected."] [data "/*update"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/___proxy_subdomain_cpcontacts/*update.cgi*"] [unique_id "apK-uTwSHPvvQcBSRbslQgAAAgQ"]
[Sat Aug 29 05:12:57.541411 2026] [security2:error] [pid 60333:tid 60563] [client 68.155.159.216:35811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-admin/network/index.php"] [unique_id "apK-uTwSHPvvQcBSRbslRAAAAe0"]
[Sat Aug 29 05:12:57.543225 2026] [security2:error] [pid 60333:tid 60487] [client 20.104.18.15:16549] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/504.php"] [unique_id "apK-uTwSHPvvQcBSRbslRQAAAaE"]
[Sat Aug 29 05:12:57.584241 2026] [security2:error] [pid 60333:tid 60479] [client 20.220.204.93:59586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/xxw.php"] [unique_id "apK-uTwSHPvvQcBSRbslTgAAAZk"]
[Sat Aug 29 05:12:57.592346 2026] [security2:error] [pid 60333:tid 60587] [client 20.196.209.81:3781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "core.highpointlogic.com"] [uri "/colors.php"] [unique_id "apK-uTwSHPvvQcBSRbslUAAAAgU"]
[Sat Aug 29 05:12:57.594668 2026] [security2:error] [pid 60333:tid 60541] [client 20.48.250.41:46007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/ww.php"] [unique_id "apK-uTwSHPvvQcBSRbslUQAAAdc"]
[Sat Aug 29 05:12:57.599080 2026] [security2:error] [pid 60333:tid 60518] [client 20.48.250.41:38882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kiwimediaworks.glenncoad.com"] [uri "/inc.php"] [unique_id "apK-uTwSHPvvQcBSRbslUgAAAcA"]
[Sat Aug 29 05:12:57.618456 2026] [security2:error] [pid 60333:tid 60582] [client 20.197.61.180:3813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thatsaturdaythang.lifesosweet.com"] [uri "/wp-content/cache/min/1/wp-content/admin.php"] [unique_id "apK-uTwSHPvvQcBSRbslVgAAAgA"]
[Sat Aug 29 05:12:57.621652 2026] [security2:error] [pid 60333:tid 60481] [client 20.196.209.81:15151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/room.php"] [unique_id "apK-uTwSHPvvQcBSRbslVwAAAZs"]
[Sat Aug 29 05:12:57.629810 2026] [security2:error] [pid 60333:tid 60548] [client 93.123.109.228:34620] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/.env"] [unique_id "apK-uTwSHPvvQcBSRbslXwAAAd4"]
[Sat Aug 29 05:12:57.634555 2026] [security2:error] [pid 60333:tid 60584] [client 93.123.109.228:34654] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/___proxy_subdomain_cpcontacts/.docker/laravel/app/.env"] [unique_id "apK-uTwSHPvvQcBSRbslYQAAAgI"]
[Sat Aug 29 05:12:57.658455 2026] [security2:error] [pid 60333:tid 60572] [client 93.123.109.228:34714] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "apK-uTwSHPvvQcBSRbslZAAAAfY"]
[Sat Aug 29 05:12:57.665641 2026] [security2:error] [pid 60333:tid 60536] [client 68.155.159.216:21444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyeu.com"] [uri "/wp-content/plugins/ioxi/alfa-ioxi.php"] [unique_id "apK-uTwSHPvvQcBSRbslZwAAAdI"]
[Sat Aug 29 05:12:57.670651 2026] [security2:error] [pid 60333:tid 60494] [client 20.48.250.41:50284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/logs1.php"] [unique_id "apK-uTwSHPvvQcBSRbslaAAAAag"]
[Sat Aug 29 05:12:57.670683 2026] [security2:error] [pid 60333:tid 60589] [client 158.23.147.79:31632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carpevictoriam.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "apK-uTwSHPvvQcBSRbslaQAAAgc"]
[Sat Aug 29 05:12:57.687585 2026] [security2:error] [pid 60333:tid 60495] [client 93.123.109.228:34670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/___proxy_subdomain_cpcontacts/.env.backup"] [unique_id "apK-uTwSHPvvQcBSRbslagAAAak"]
[Sat Aug 29 05:12:57.708023 2026] [security2:error] [pid 60333:tid 60532] [client 4.205.62.107:61724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/drykl.php"] [unique_id "apK-uTwSHPvvQcBSRbslbAAAAc4"]
[Sat Aug 29 05:12:57.709221 2026] [security2:error] [pid 60333:tid 60562] [client 158.23.147.79:43389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-admin/network/index.php"] [unique_id "apK-uTwSHPvvQcBSRbslbQAAAew"]
[Sat Aug 29 05:12:57.720016 2026] [security2:error] [pid 60333:tid 60526] [client 20.151.200.44:27633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/mmm.php"] [unique_id "apK-uTwSHPvvQcBSRbslbwAAAcg"]
[Sat Aug 29 05:12:57.728739 2026] [security2:error] [pid 60333:tid 60346] [remote 34.74.253.19:52108] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "cpcontacts.harnessenergycr.com"] [uri "/public/plugins/alertlist/../../../../../../../../proc/self/environ"] [unique_id "apK-uTwSHPvvQcBSRbslcAABlQg"]
[Sat Aug 29 05:12:57.732133 2026] [security2:error] [pid 60333:tid 60545] [client 20.48.250.41:46042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/w1px.php"] [unique_id "apK-uTwSHPvvQcBSRbslcQAAAds"]
[Sat Aug 29 05:12:57.751073 2026] [security2:error] [pid 60333:tid 60559] [client 20.48.250.41:38896] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kiwimediaworks.glenncoad.com"] [uri "/6bcwiqwj.php"] [unique_id "apK-uTwSHPvvQcBSRbslcgAAAek"]
[Sat Aug 29 05:12:57.756340 2026] [security2:error] [pid 60333:tid 60558] [client 93.123.109.228:34704] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/___proxy_subdomain_cpcontacts/.env.bak"] [unique_id "apK-uTwSHPvvQcBSRbslcwAAAeg"]
[Sat Aug 29 05:12:57.775456 2026] [security2:error] [pid 60333:tid 60476] [client 4.205.62.107:60291] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/file21.php"] [unique_id "apK-uTwSHPvvQcBSRbsldAAAAZY"]
[Sat Aug 29 05:12:57.783728 2026] [security2:error] [pid 60333:tid 60546] [client 20.104.104.62:20732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/index4.php"] [unique_id "apK-uTwSHPvvQcBSRbsldwAAAdw"]
[Sat Aug 29 05:12:57.802073 2026] [security2:error] [pid 60333:tid 60508] [client 4.205.62.107:61042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/vx.php"] [unique_id "apK-uTwSHPvvQcBSRbslegAAAbY"]
[Sat Aug 29 05:12:57.807329 2026] [security2:error] [pid 60333:tid 60523] [client 20.196.209.81:4531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/xmlrpc.php0"] [unique_id "apK-uTwSHPvvQcBSRbslfAAAAcU"]
[Sat Aug 29 05:12:57.809555 2026] [security2:error] [pid 60333:tid 60578] [client 158.158.54.35:31260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/f.php"] [unique_id "apK-uTwSHPvvQcBSRbslfgAAAfw"]
[Sat Aug 29 05:12:57.810962 2026] [security2:error] [pid 60333:tid 60574] [client 20.63.219.114:11634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/alfa-rex.php"] [unique_id "apK-uTwSHPvvQcBSRbslfwAAAfg"]
[Sat Aug 29 05:12:57.820014 2026] [security2:error] [pid 60333:tid 60590] [client 20.48.250.41:49210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/inege.php"] [unique_id "apK-uTwSHPvvQcBSRbslggAAAgg"]
[Sat Aug 29 05:12:57.848695 2026] [security2:error] [pid 60333:tid 60529] [client 93.123.109.228:34666] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/___proxy_subdomain_cpcontacts/.env.old"] [unique_id "apK-uTwSHPvvQcBSRbslhQAAAcs"]
[Sat Aug 29 05:12:57.860962 2026] [security2:error] [pid 60333:tid 60565] [client 93.123.109.228:34716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/.env.php"] [unique_id "apK-uTwSHPvvQcBSRbslhgAAAe8"]
[Sat Aug 29 05:12:57.880159 2026] [security2:error] [pid 60333:tid 60512] [client 20.48.250.41:46019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/to.php"] [unique_id "apK-uTwSHPvvQcBSRbsliQAAAbo"]
[Sat Aug 29 05:12:57.880965 2026] [security2:error] [pid 60333:tid 60566] [client 20.48.250.41:38893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kiwimediaworks.glenncoad.com"] [uri "/easy.php"] [unique_id "apK-uTwSHPvvQcBSRbsligAAAfA"]
[Sat Aug 29 05:12:57.892414 2026] [security2:error] [pid 60333:tid 60540] [client 20.220.204.93:18747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/bolt.php"] [unique_id "apK-uTwSHPvvQcBSRbsljAAAAdY"]
[Sat Aug 29 05:12:57.893311 2026] [security2:error] [pid 60333:tid 60530] [client 4.205.62.107:61441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/groceries/index.php"] [unique_id "apK-uTwSHPvvQcBSRbsljQAAAcw"]
[Sat Aug 29 05:12:57.917559 2026] [http2:warn] [pid 1041789:tid 1042008] [client 57.141.14.71:47512] h2_stream(1041789-37-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:12:57.921109 2026] [security2:error] [pid 60333:tid 60586] [client 158.23.147.79:24401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "apK-uTwSHPvvQcBSRbsljwAAAgQ"]
[Sat Aug 29 05:12:57.930517 2026] [access_compat:error] [pid 60333:tid 60576] [client 67.20.76.220:54244] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:12:57.939289 2026] [access_compat:error] [pid 60333:tid 60477] [client 67.20.76.220:54278] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:12:57.944117 2026] [access_compat:error] [pid 60333:tid 60500] [client 67.20.76.220:54294] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:12:57.969220 2026] [security2:error] [pid 60333:tid 60556] [client 93.123.109.228:34710] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/___proxy_subdomain_cpcontacts/.env.swp"] [unique_id "apK-uTwSHPvvQcBSRbslmwAAAeY"]
[Sat Aug 29 05:12:57.995535 2026] [security2:error] [pid 60333:tid 60483] [client 20.48.250.41:50248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/wp-link10.php"] [unique_id "apK-uTwSHPvvQcBSRbslpQAAAZ0"]
[Sat Aug 29 05:12:58.006030 2026] [security2:error] [pid 60333:tid 60471] [client 20.196.209.81:3811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "core.highpointlogic.com"] [uri "/Js.php"] [unique_id "apK-ujwSHPvvQcBSRbslpgAAAZE"]
[Sat Aug 29 05:12:58.018336 2026] [cgid:error] [pid 60333:tid 60505] [client 74.248.24.12:37132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/themysticalseven/404.shtml
[Sat Aug 29 05:12:58.023824 2026] [security2:error] [pid 60333:tid 60528] [client 20.48.250.41:46022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/thui.php"] [unique_id "apK-ujwSHPvvQcBSRbslqgAAAco"]
[Sat Aug 29 05:12:58.025571 2026] [security2:error] [pid 60333:tid 60499] [client 93.123.109.228:34666] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/___proxy_subdomain_cpcontacts/.env~"] [unique_id "apK-ujwSHPvvQcBSRbslrAAAAa0"]
[Sat Aug 29 05:12:58.033634 2026] [security2:error] [pid 60333:tid 60544] [client 158.23.147.79:50097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/.well-known/content.php"] [unique_id "apK-ujwSHPvvQcBSRbslrQAAAdo"]
[Sat Aug 29 05:12:58.037498 2026] [security2:error] [pid 60333:tid 60537] [client 20.196.209.81:14580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/class-wp-cmd.php"] [unique_id "apK-ujwSHPvvQcBSRbslsAAAAdM"]
[Sat Aug 29 05:12:58.039521 2026] [security2:error] [pid 60333:tid 60340] [remote 34.74.253.19:52112] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "cpcontacts.harnessenergycr.com"] [uri "/icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ"] [unique_id "apK-ujwSHPvvQcBSRbslsQAB9QI"]
[Sat Aug 29 05:12:58.078145 2026] [security2:error] [pid 60333:tid 60568] [client 68.155.159.216:43857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/goat.php"] [unique_id "apK-ujwSHPvvQcBSRbsltAAAAfI"]
[Sat Aug 29 05:12:58.146876 2026] [security2:error] [pid 60333:tid 60514] [client 65.21.113.248:41758] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.babyboomerscare.com"] [uri "/index.php"] [unique_id "apK-uTwSHPvvQcBSRbslmAAAAbw"]
[Sat Aug 29 05:12:58.149854 2026] [security2:error] [pid 60333:tid 60554] [client 20.48.250.41:38791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kiwimediaworks.glenncoad.com"] [uri "/fresh3.php"] [unique_id "apK-ujwSHPvvQcBSRbsluQAAAeQ"]
[Sat Aug 29 05:12:58.165584 2026] [security2:error] [pid 60333:tid 60508] [client 20.48.250.41:50232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/ww.php"] [unique_id "apK-ujwSHPvvQcBSRbslvAAAAbY"]
[Sat Aug 29 05:12:58.166281 2026] [security2:error] [pid 60333:tid 60595] [client 93.123.109.228:34642] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.bak"] [unique_id "apK-ujwSHPvvQcBSRbsluwAAAg0"]
[Sat Aug 29 05:12:58.172790 2026] [security2:error] [pid 60333:tid 60574] [client 20.104.104.62:20705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/index5.php"] [unique_id "apK-ujwSHPvvQcBSRbslvQAAAfg"]
[Sat Aug 29 05:12:58.181577 2026] [security2:error] [pid 60333:tid 60590] [client 93.123.109.228:34648] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config.old"] [unique_id "apK-ujwSHPvvQcBSRbslvwAAAgg"]
[Sat Aug 29 05:12:58.182640 2026] [security2:error] [pid 60333:tid 60561] [client 20.151.200.44:27182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/advanced.php"] [unique_id "apK-ujwSHPvvQcBSRbslwAAAAes"]
[Sat Aug 29 05:12:58.188874 2026] [cgid:error] [pid 60333:tid 60517] [client 74.248.24.12:37132] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/wanderl1/public_html/themysticalseven/404.shtml
[Sat Aug 29 05:12:58.193823 2026] [security2:error] [pid 60333:tid 60555] [client 93.123.109.228:34654] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked -  Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/___proxy_subdomain_cpcontacts/.git/config~"] [unique_id "apK-ujwSHPvvQcBSRbslwgAAAeU"]
[Sat Aug 29 05:12:58.216130 2026] [security2:error] [pid 60333:tid 60493] [client 20.197.61.180:3776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-content/install.php"] [unique_id "apK-ujwSHPvvQcBSRbslxAAAAac"]
[Sat Aug 29 05:12:58.235919 2026] [security2:error] [pid 60333:tid 60496] [client 20.48.250.41:45374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/Jcrop.php"] [unique_id "apK-ujwSHPvvQcBSRbslxQAAAao"]
[Sat Aug 29 05:12:58.242729 2026] [security2:error] [pid 60333:tid 60591] [client 20.220.204.93:18299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/rtx.php"] [unique_id "apK-ujwSHPvvQcBSRbslxgAAAgk"]
[Sat Aug 29 05:12:58.246822 2026] [security2:error] [pid 60333:tid 60486] [client 20.196.209.81:20874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/content.php"] [unique_id "apK-ujwSHPvvQcBSRbslxwAAAaA"]
[Sat Aug 29 05:12:58.306515 2026] [security2:error] [pid 60333:tid 60566] [client 20.48.250.41:38874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kiwimediaworks.glenncoad.com"] [uri "/bgymj.php"] [unique_id "apK-ujwSHPvvQcBSRbslzgAAAfA"]
[Sat Aug 29 05:12:58.325201 2026] [security2:error] [pid 60333:tid 60497] [client 158.158.54.35:1295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/av.php"] [unique_id "apK-ujwSHPvvQcBSRbslzwAAAas"]
[Sat Aug 29 05:12:58.333953 2026] [security2:error] [pid 60333:tid 60557] [client 20.48.250.41:49227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/w1px.php"] [unique_id "apK-ujwSHPvvQcBSRbsl0gAAAec"]
[Sat Aug 29 05:12:58.342768 2026] [security2:error] [pid 60333:tid 60507] [client 20.197.61.180:3696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thatsaturdaythang.lifesosweet.com"] [uri "/wp-content/classwithtostring.php"] [unique_id "apK-ujwSHPvvQcBSRbsl1AAAAbU"]
[Sat Aug 29 05:12:58.364797 2026] [security2:error] [pid 60333:tid 60569] [client 74.248.24.12:37132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/tool.php"] [unique_id "apK-ujwSHPvvQcBSRbsl1QAAAfM"]
[Sat Aug 29 05:12:58.365459 2026] [security2:error] [pid 60333:tid 60506] [client 20.48.250.41:45318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/ws58.php"] [unique_id "apK-ujwSHPvvQcBSRbsl1gAAAbQ"]
[Sat Aug 29 05:12:58.375890 2026] [security2:error] [pid 60333:tid 60524] [client 20.63.219.114:1103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/cookie.php"] [unique_id "apK-ujwSHPvvQcBSRbsl2QAAAcY"]
[Sat Aug 29 05:12:58.383873 2026] [security2:error] [pid 60333:tid 60518] [client 4.205.62.107:6136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/app_dev.php"] [unique_id "apK-ujwSHPvvQcBSRbsl3AAAAcA"]
[Sat Aug 29 05:12:58.395943 2026] [security2:error] [pid 60333:tid 60489] [client 20.151.200.44:55632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/wp-wlx.php"] [unique_id "apK-ujwSHPvvQcBSRbsl3QAAAaM"]
[Sat Aug 29 05:12:58.442501 2026] [security2:error] [pid 60333:tid 60583] [client 158.23.147.79:7071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-ujwSHPvvQcBSRbsl4wAAAgE"]
[Sat Aug 29 05:12:58.443846 2026] [security2:error] [pid 60333:tid 60484] [client 20.196.209.81:16722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "core.highpointlogic.com"] [uri "/access.php"] [unique_id "apK-ujwSHPvvQcBSRbsl5AAAAZ4"]
[Sat Aug 29 05:12:58.457737 2026] [security2:error] [pid 60333:tid 60589] [client 20.48.250.41:38871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kiwimediaworks.glenncoad.com"] [uri "/ws69.php"] [unique_id "apK-ujwSHPvvQcBSRbsl5wAAAgc"]
[Sat Aug 29 05:12:58.469210 2026] [security2:error] [pid 60333:tid 60501] [client 68.155.159.216:21413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/admin.php"] [unique_id "apK-ujwSHPvvQcBSRbsl7gAAAa8"]
[Sat Aug 29 05:12:58.482214 2026] [security2:error] [pid 60333:tid 60495] [client 4.205.62.107:61829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/chosen.php"] [unique_id "apK-ujwSHPvvQcBSRbsl8QAAAak"]
[Sat Aug 29 05:12:58.488281 2026] [security2:error] [pid 60333:tid 60479] [client 20.48.250.41:50197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/to.php"] [unique_id "apK-ujwSHPvvQcBSRbsl8wAAAZk"]
[Sat Aug 29 05:12:58.491930 2026] [security2:error] [pid 60333:tid 60526] [client 68.155.159.216:64021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-l0gin.php"] [unique_id "apK-ujwSHPvvQcBSRbsl9AAAAcg"]
[Sat Aug 29 05:12:58.498075 2026] [security2:error] [pid 60333:tid 60503] [client 20.48.250.41:46040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/xs.php"] [unique_id "apK-ujwSHPvvQcBSRbsl9QAAAbE"]
[Sat Aug 29 05:12:58.550733 2026] [security2:error] [pid 60333:tid 60515] [client 20.196.209.81:13654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/disagreed.php"] [unique_id "apK-ujwSHPvvQcBSRbsl_AAAAb0"]
[Sat Aug 29 05:12:58.613860 2026] [security2:error] [pid 60333:tid 60517] [client 20.220.204.93:36711] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/ckk.php"] [unique_id "apK-ujwSHPvvQcBSRbsmCQAAAb8"]
[Sat Aug 29 05:12:58.673643 2026] [security2:error] [pid 60333:tid 60594] [client 20.196.209.81:11328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/wxo.php"] [unique_id "apK-ujwSHPvvQcBSRbsmDgAAAgw"]
[Sat Aug 29 05:12:58.700833 2026] [security2:error] [pid 60333:tid 60596] [client 20.104.18.15:16545] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/admin.php"] [unique_id "apK-ujwSHPvvQcBSRbsmEgAAAg4"]
[Sat Aug 29 05:12:58.706263 2026] [security2:error] [pid 60333:tid 60592] [client 20.196.209.81:10041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.don.devi.to"] [uri "/post.php"] [unique_id "apK-ujwSHPvvQcBSRbsmEwAAAgo"]
[Sat Aug 29 05:12:58.710149 2026] [security2:error] [pid 60333:tid 60535] [client 20.104.18.15:5069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/m.php"] [unique_id "apK-ujwSHPvvQcBSRbsmFAAAAdE"]
[Sat Aug 29 05:12:58.741052 2026] [security2:error] [pid 60333:tid 60357] [remote 34.74.253.19:52118] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.harnessenergycr.com"] [uri "/wp-config.php.bak"] [unique_id "apK-ujwSHPvvQcBSRbsmGQABnxM"]
[Sat Aug 29 05:12:58.741462 2026] [security2:error] [pid 60333:tid 60352] [remote 34.74.253.19:52118] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.harnessenergycr.com"] [uri "/wp-config.php.old"] [unique_id "apK-ujwSHPvvQcBSRbsmGgABnw4"]
[Sat Aug 29 05:12:58.742418 2026] [security2:error] [pid 60333:tid 60555] [client 20.63.219.114:1138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/NewFile.php"] [unique_id "apK-ujwSHPvvQcBSRbsmHAAAAeU"]
[Sat Aug 29 05:12:58.779162 2026] [security2:error] [pid 60333:tid 60492] [client 158.23.147.79:31687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carpevictoriam.com"] [uri "/makeasmtp.php"] [unique_id "apK-ujwSHPvvQcBSRbsmJQAAAaY"]
[Sat Aug 29 05:12:58.834022 2026] [security2:error] [pid 60333:tid 60548] [client 20.104.104.62:47561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/index6.php"] [unique_id "apK-ujwSHPvvQcBSRbsmLwAAAd4"]
[Sat Aug 29 05:12:58.839093 2026] [security2:error] [pid 60333:tid 60472] [client 20.104.18.15:48089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/ws85.php"] [unique_id "apK-ujwSHPvvQcBSRbsmMgAAAZI"]
[Sat Aug 29 05:12:58.840633 2026] [core:error] [pid 60333:tid 60484] [client 45.148.10.166:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:58.840650 2026] [core:error] [pid 60333:tid 60484] [client 45.148.10.166:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sat Aug 29 05:12:58.848640 2026] [security2:error] [pid 60333:tid 60562] [client 158.23.147.79:43328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK-ujwSHPvvQcBSRbsmMwAAAew"]
[Sat Aug 29 05:12:58.856298 2026] [security2:error] [pid 60333:tid 60527] [client 93.123.109.228:34796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/.wp-config.php.swp"] [unique_id "apK-ujwSHPvvQcBSRbsmNQAAAck"]
[Sat Aug 29 05:12:58.856369 2026] [security2:error] [pid 60333:tid 60495] [client 4.205.62.107:61726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/rpk.php"] [unique_id "apK-ujwSHPvvQcBSRbsmNAAAAak"]
[Sat Aug 29 05:12:58.859505 2026] [security2:error] [pid 60333:tid 60493] [client 114.119.136.245:50625] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.calibercourtservices.com"] [uri "/customer-login.html"] [unique_id "apK-ujwSHPvvQcBSRbsmNgAAAac"], referer: https://www.calibercourtservices.com/
[Sat Aug 29 05:12:58.862700 2026] [security2:error] [pid 60333:tid 60550] [client 158.158.54.35:31111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/file.php"] [unique_id "apK-ujwSHPvvQcBSRbsmNwAAAeA"]
[Sat Aug 29 05:12:58.863926 2026] [security2:error] [pid 60333:tid 60479] [client 20.104.18.15:5112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/fling.php"] [unique_id "apK-ujwSHPvvQcBSRbsmOAAAAZk"]
[Sat Aug 29 05:12:58.870906 2026] [security2:error] [pid 60333:tid 60530] [client 20.196.209.81:3838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "core.highpointlogic.com"] [uri "/classsmtps.php"] [unique_id "apK-ujwSHPvvQcBSRbsmOgAAAcw"]
[Sat Aug 29 05:12:58.882172 2026] [security2:error] [pid 60333:tid 60538] [client 93.123.109.228:34628] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/___proxy_subdomain_cpcontacts/ADMIN/.env"] [unique_id "apK-ujwSHPvvQcBSRbsmPAAAAdQ"]
[Sat Aug 29 05:12:58.883579 2026] [security2:error] [pid 60333:tid 60490] [client 74.248.24.12:36056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/k.php"] [unique_id "apK-ujwSHPvvQcBSRbsmPQAAAaQ"]
[Sat Aug 29 05:12:58.900650 2026] [security2:error] [pid 60333:tid 60475] [client 93.123.109.228:34704] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/___proxy_subdomain_cpcontacts/API/.env"] [unique_id "apK-ujwSHPvvQcBSRbsmPwAAAZU"]
[Sat Aug 29 05:12:58.911842 2026] [access_compat:error] [pid 60333:tid 60563] [client 67.20.76.220:54296] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:12:58.921857 2026] [security2:error] [pid 60333:tid 60515] [client 4.205.62.107:27746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/mcebraed.php"] [unique_id "apK-ujwSHPvvQcBSRbsmQwAAAb0"]
[Sat Aug 29 05:12:58.941020 2026] [access_compat:error] [pid 60333:tid 60564] [client 67.20.76.220:54298] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:12:58.945479 2026] [security2:error] [pid 60333:tid 60508] [client 20.220.204.93:36684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 93.204.220.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mytaccounts.com"] [uri "/R57.php"] [unique_id "apK-ujwSHPvvQcBSRbsmSwAAAbY"]
[Sat Aug 29 05:12:58.947411 2026] [security2:error] [pid 60333:tid 60558] [client 4.205.62.107:63285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/ty.php"] [unique_id "apK-ujwSHPvvQcBSRbsmTAAAAeg"]
[Sat Aug 29 05:12:58.947488 2026] [access_compat:error] [pid 60333:tid 60567] [client 67.20.76.220:54304] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:12:58.947620 2026] [access_compat:error] [pid 60333:tid 60542] [client 67.20.76.220:54306] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:12:58.952766 2026] [security2:error] [pid 60333:tid 60580] [client 20.196.209.81:17884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/class_api.php"] [unique_id "apK-ujwSHPvvQcBSRbsmUAAAAf4"]
[Sat Aug 29 05:12:58.973836 2026] [security2:error] [pid 60333:tid 60577] [client 20.104.18.15:48068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/ffs.php"] [unique_id "apK-ujwSHPvvQcBSRbsmVQAAAfs"]
[Sat Aug 29 05:12:58.985167 2026] [security2:error] [pid 60333:tid 60596] [client 20.104.49.130:36770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pvillusions.com"] [uri "/xwpg.php"] [unique_id "apK-ujwSHPvvQcBSRbsmWgAAAg4"]
[Sat Aug 29 05:12:59.002083 2026] [security2:error] [pid 60333:tid 60561] [client 93.123.109.228:34664] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/___proxy_subdomain_cpcontacts/APP/.env"] [unique_id "apK-ujwSHPvvQcBSRbsmWwAAAes"]
[Sat Aug 29 05:12:59.017478 2026] [security2:error] [pid 60333:tid 60533] [client 158.23.147.79:64469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/sad/about.php"] [unique_id "apK-uzwSHPvvQcBSRbsmXwAAAc8"]
[Sat Aug 29 05:12:59.027770 2026] [security2:error] [pid 60333:tid 60566] [client 93.123.109.228:34766] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/___proxy_subdomain_cpcontacts/Api/.env"] [unique_id "apK-uzwSHPvvQcBSRbsmYAAAAfA"]
[Sat Aug 29 05:12:59.029945 2026] [security2:error] [pid 60333:tid 60557] [client 4.205.62.107:63401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/konfig.php"] [unique_id "apK-uzwSHPvvQcBSRbsmYgAAAec"]
[Sat Aug 29 05:12:59.046209 2026] [security2:error] [pid 60333:tid 60519] [client 20.197.61.180:3792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thatsaturdaythang.lifesosweet.com"] [uri "/wp-content/config.php"] [unique_id "apK-uzwSHPvvQcBSRbsmYwAAAcE"]
[Sat Aug 29 05:12:59.051354 2026] [security2:error] [pid 60333:tid 60531] [client 93.123.109.228:34742] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/___proxy_subdomain_cpcontacts/BACKEND/.env"] [unique_id "apK-uzwSHPvvQcBSRbsmZAAAAc0"]
[Sat Aug 29 05:12:59.052098 2026] [security2:error] [pid 60333:tid 60507] [client 93.123.109.228:34628] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/___proxy_subdomain_cpcontacts/BACK/.env"] [unique_id "apK-uzwSHPvvQcBSRbsmZQAAAbU"]
[Sat Aug 29 05:12:59.055214 2026] [security2:error] [pid 60333:tid 60470] [client 93.123.109.228:34620] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/___proxy_subdomain_cpcontacts/BE/.env"] [unique_id "apK-uzwSHPvvQcBSRbsmZgAAAZA"]
[Sat Aug 29 05:12:59.056057 2026] [security2:error] [pid 60333:tid 60485] [client 20.151.200.44:27264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/blox.php"] [unique_id "apK-uzwSHPvvQcBSRbsmZwAAAZ8"]
[Sat Aug 29 05:12:59.067594 2026] [security2:error] [pid 60333:tid 60518] [client 20.104.18.15:5099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/btyuio.php"] [unique_id "apK-uzwSHPvvQcBSRbsmagAAAcA"]
[Sat Aug 29 05:12:59.069201 2026] [security2:error] [pid 60333:tid 60506] [client 20.151.200.44:55671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/attack.php"] [unique_id "apK-uzwSHPvvQcBSRbsmawAAAbQ"]
[Sat Aug 29 05:12:59.073027 2026] [security2:error] [pid 60333:tid 60505] [client 93.123.109.228:34794] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/___proxy_subdomain_cpcontacts/Backend/.env"] [unique_id "apK-uzwSHPvvQcBSRbsmbAAAAbM"]
[Sat Aug 29 05:12:59.077210 2026] [security2:error] [pid 60333:tid 60541] [client 20.104.49.130:60761] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepsychicintuitive.allgooddays.org"] [uri "/albin.php"] [unique_id "apK-uzwSHPvvQcBSRbsmbQAAAdc"]
[Sat Aug 29 05:12:59.080100 2026] [security2:error] [pid 60333:tid 60546] [client 20.196.209.81:11356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/as.php"] [unique_id "apK-uzwSHPvvQcBSRbsmbgAAAdw"]
[Sat Aug 29 05:12:59.083238 2026] [security2:error] [pid 60333:tid 60583] [client 93.123.109.228:34670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/___proxy_subdomain_cpcontacts/Be/.env"] [unique_id "apK-uzwSHPvvQcBSRbsmbwAAAgE"]
[Sat Aug 29 05:12:59.097633 2026] [security2:error] [pid 60333:tid 60363] [remote 198.55.100.167:42581] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.jobindjibouti.com"] [uri "/wp-content/plugins/wp-job-manager-embeddable-job-widget/assets/js/embed.js"] [unique_id "apK-uzwSHPvvQcBSRbsmcAABkhk"], referer: https://www.djiboutihomes.com/
[Sat Aug 29 05:12:59.104004 2026] [security2:error] [pid 60333:tid 60547] [client 20.63.219.114:1150] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/config.php"] [unique_id "apK-uzwSHPvvQcBSRbsmcwAAAd0"]
[Sat Aug 29 05:12:59.104791 2026] [security2:error] [pid 60333:tid 60585] [client 20.196.209.81:14571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.don.devi.to"] [uri "/flower.php"] [unique_id "apK-uzwSHPvvQcBSRbsmdAAAAgM"]
[Sat Aug 29 05:12:59.144479 2026] [security2:error] [pid 60333:tid 60440] [remote 74.7.227.189:34956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 189.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pinnacleforms.com"] [uri "/isxed17.php"] [unique_id "apK-uzwSHPvvQcBSRbsmdwABl2U"], referer: https://mail.pinnacleforms.com/
[Sat Aug 29 05:12:59.145547 2026] [security2:error] [pid 60333:tid 60550] [client 158.23.147.79:50120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/cong.php"] [unique_id "apK-uzwSHPvvQcBSRbsmeAAAAeA"]
[Sat Aug 29 05:12:59.145585 2026] [security2:error] [pid 60333:tid 60493] [client 20.104.18.15:16635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/nano.php"] [unique_id "apK-uzwSHPvvQcBSRbsmeQAAAac"]
[Sat Aug 29 05:12:59.162394 2026] [security2:error] [pid 60333:tid 60538] [client 68.155.159.216:43929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.theenprogroup.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK-uzwSHPvvQcBSRbsmewAAAdQ"]
[Sat Aug 29 05:12:59.171022 2026] [security2:error] [pid 60333:tid 60474] [client 68.155.159.216:2031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "apK-uzwSHPvvQcBSRbsmfAAAAZQ"]
[Sat Aug 29 05:12:59.182119 2026] [security2:error] [pid 60333:tid 60475] [client 20.197.61.180:3663] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-content/languages/about.php"] [unique_id "apK-uzwSHPvvQcBSRbsmfQAAAZU"]
[Sat Aug 29 05:12:59.210155 2026] [security2:error] [pid 60333:tid 60504] [client 20.104.18.15:5083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/dehnl.php"] [unique_id "apK-uzwSHPvvQcBSRbsmhgAAAbI"]
[Sat Aug 29 05:12:59.235384 2026] [security2:error] [pid 60333:tid 60517] [client 68.155.159.216:43842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "apK-uzwSHPvvQcBSRbsmigAAAb8"]
[Sat Aug 29 05:12:59.271613 2026] [security2:error] [pid 60333:tid 60540] [client 103.185.242.143:51275] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 143.242.185.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-uzwSHPvvQcBSRbsmjwAAAdY"]
[Sat Aug 29 05:12:59.271714 2026] [security2:error] [pid 60333:tid 60540] [client 103.185.242.143:51275] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-uzwSHPvvQcBSRbsmjwAAAdY"]
[Sat Aug 29 05:12:59.275304 2026] [security2:error] [pid 60333:tid 60510] [client 20.196.209.81:16217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "core.highpointlogic.com"] [uri "/contentloader1.php"] [unique_id "apK-uzwSHPvvQcBSRbsmkQAAAbg"]
[Sat Aug 29 05:12:59.276214 2026] [security2:error] [pid 60333:tid 60496] [client 20.104.104.62:20704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/index7.php"] [unique_id "apK-uzwSHPvvQcBSRbsmkgAAAao"]
[Sat Aug 29 05:12:59.298215 2026] [authz_core:error] [pid 60333:tid 60480] [client 203.145.36.215:0] AH01630: client denied by server configuration: /home4/jarritos/public_html/wp-includes/sodium_compat/namespaced/error_log, referer: https://jarritosmexico.com
[Sat Aug 29 05:12:59.304794 2026] [security2:error] [pid 60333:tid 60514] [client 20.104.18.15:16544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/ano.php"] [unique_id "apK-uzwSHPvvQcBSRbsmlgAAAbw"]
[Sat Aug 29 05:12:59.347465 2026] [security2:error] [pid 60333:tid 60486] [client 20.104.18.15:5115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/zoo2.php"] [unique_id "apK-uzwSHPvvQcBSRbsmlwAAAaA"]
[Sat Aug 29 05:12:59.358179 2026] [security2:error] [pid 60333:tid 60580] [client 20.196.209.81:9281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/aksinet.php"] [unique_id "apK-uzwSHPvvQcBSRbsmmAAAAf4"]
[Sat Aug 29 05:12:59.404066 2026] [security2:error] [pid 60333:tid 60563] [client 74.248.24.12:36059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/root.php"] [unique_id "apK-uzwSHPvvQcBSRbsmmwAAAe0"]
[Sat Aug 29 05:12:59.463194 2026] [security2:error] [pid 60333:tid 60596] [client 158.158.54.35:20700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wp-includes/customize/index.php"] [unique_id "apK-uzwSHPvvQcBSRbsmnQAAAg4"]
[Sat Aug 29 05:12:59.465529 2026] [security2:error] [pid 60333:tid 60561] [client 20.63.219.114:9224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/22.php"] [unique_id "apK-uzwSHPvvQcBSRbsmngAAAes"]
[Sat Aug 29 05:12:59.473756 2026] [security2:error] [pid 60333:tid 60518] [client 20.104.18.15:16623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/mgrr.php"] [unique_id "apK-uzwSHPvvQcBSRbsmoAAAAcA"]
[Sat Aug 29 05:12:59.476464 2026] [security2:error] [pid 60333:tid 60591] [client 20.196.209.81:1939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/room.php"] [unique_id "apK-uzwSHPvvQcBSRbsmogAAAgk"]
[Sat Aug 29 05:12:59.496556 2026] [security2:error] [pid 60333:tid 60587] [client 20.104.18.15:5024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/zoo1.php"] [unique_id "apK-uzwSHPvvQcBSRbsmpgAAAgU"]
[Sat Aug 29 05:12:59.513208 2026] [security2:error] [pid 60333:tid 60478] [client 20.196.209.81:14552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.don.devi.to"] [uri "/meta.php"] [unique_id "apK-uzwSHPvvQcBSRbsmpwAAAZg"]
[Sat Aug 29 05:12:59.520584 2026] [security2:error] [pid 60333:tid 60541] [client 4.205.62.107:6125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/php-info.php"] [unique_id "apK-uzwSHPvvQcBSRbsmqAAAAdc"]
[Sat Aug 29 05:12:59.560249 2026] [security2:error] [pid 60333:tid 60374] [remote 34.74.253.19:52118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.253.74.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harnessenergycr.com"] [uri "/config/.env.php"] [unique_id "apK-uzwSHPvvQcBSRbsmrAABniM"]
[Sat Aug 29 05:12:59.571677 2026] [security2:error] [pid 60333:tid 60364] [remote 34.74.253.19:52118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.253.74.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harnessenergycr.com"] [uri "/config.php.bak"] [unique_id "apK-uzwSHPvvQcBSRbsmrQABnho"]
[Sat Aug 29 05:12:59.579213 2026] [security2:error] [pid 60333:tid 60589] [client 68.155.159.216:56760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/wp-admin/admin.php"] [unique_id "apK-uzwSHPvvQcBSRbsmrgAAAgc"]
[Sat Aug 29 05:12:59.598323 2026] [security2:error] [pid 60333:tid 60501] [client 20.104.18.15:17083] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/bo.php"] [unique_id "apK-uzwSHPvvQcBSRbsmsAAAAa8"]
[Sat Aug 29 05:12:59.605185 2026] [security2:error] [pid 60333:tid 60576] [client 20.48.250.41:38747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kiwimediaworks.glenncoad.com"] [uri "/ccs.php"] [unique_id "apK-uzwSHPvvQcBSRbsmsgAAAfo"]
[Sat Aug 29 05:12:59.614199 2026] [security2:error] [pid 60333:tid 60555] [client 20.104.18.15:16586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/mac.php"] [unique_id "apK-uzwSHPvvQcBSRbsmswAAAeU"]
[Sat Aug 29 05:12:59.614214 2026] [security2:error] [pid 60333:tid 60479] [client 4.205.62.107:64968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/admin-ajax.php"] [unique_id "apK-uzwSHPvvQcBSRbsmtAAAAZk"]
[Sat Aug 29 05:12:59.644982 2026] [security2:error] [pid 60333:tid 60474] [client 20.48.250.41:45327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/zu.php"] [unique_id "apK-uzwSHPvvQcBSRbsmtgAAAZQ"]
[Sat Aug 29 05:12:59.645438 2026] [security2:error] [pid 60333:tid 60530] [client 20.48.250.41:50224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/thui.php"] [unique_id "apK-uzwSHPvvQcBSRbsmtwAAAcw"]
[Sat Aug 29 05:12:59.677910 2026] [security2:error] [pid 60333:tid 60504] [client 20.104.18.15:4999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/radio.php"] [unique_id "apK-uzwSHPvvQcBSRbsmuAAAAbI"]
[Sat Aug 29 05:12:59.710304 2026] [security2:error] [pid 60333:tid 60362] [remote 34.74.253.19:52118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.253.74.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harnessenergycr.com"] [uri "/.env.php.bak"] [unique_id "apK-uzwSHPvvQcBSRbsmuQAB4hg"]
[Sat Aug 29 05:12:59.725636 2026] [security2:error] [pid 60333:tid 60517] [client 20.104.18.15:17103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/44.php"] [unique_id "apK-uzwSHPvvQcBSRbsmvAAAAb8"]
[Sat Aug 29 05:12:59.743664 2026] [security2:error] [pid 60333:tid 60568] [client 20.197.61.180:8791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thatsaturdaythang.lifesosweet.com"] [uri "/wp-content/cong.php"] [unique_id "apK-uzwSHPvvQcBSRbsmwAAAAfI"]
[Sat Aug 29 05:12:59.744195 2026] [security2:error] [pid 60333:tid 60595] [client 20.104.18.15:16537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/simple.php"] [unique_id "apK-uzwSHPvvQcBSRbsmwQAAAg0"]
[Sat Aug 29 05:12:59.760788 2026] [security2:error] [pid 60333:tid 60503] [client 213.202.253.4:56879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.253.202.213.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "alcorn-clan.org"] [uri "/postnews.php"] [unique_id "apK-uzwSHPvvQcBSRbsmwwAAAbE"], referer: www.google.com
[Sat Aug 29 05:12:59.762190 2026] [security2:error] [pid 60333:tid 60499] [client 57.141.14.60:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.jobindjibouti.com"] [uri "/sitemap-1.xml"] [unique_id "apK-uzwSHPvvQcBSRbsmwgAAAa0"]
[Sat Aug 29 05:12:59.778682 2026] [security2:error] [pid 60333:tid 60496] [client 20.48.250.41:50228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/Jcrop.php"] [unique_id "apK-uzwSHPvvQcBSRbsmxQAAAao"]
[Sat Aug 29 05:12:59.782416 2026] [security2:error] [pid 60333:tid 60542] [client 20.48.250.41:45358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/lanka.php"] [unique_id "apK-uzwSHPvvQcBSRbsmxgAAAdg"]
[Sat Aug 29 05:12:59.797733 2026] [security2:error] [pid 60333:tid 60480] [client 20.48.250.41:38899] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kiwimediaworks.glenncoad.com"] [uri "/mar.php"] [unique_id "apK-uzwSHPvvQcBSRbsmxwAAAZo"]
[Sat Aug 29 05:12:59.805228 2026] [security2:error] [pid 60333:tid 60509] [client 20.196.209.81:10031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/alfa-rex1.php"] [unique_id "apK-uzwSHPvvQcBSRbsmyQAAAbc"]
[Sat Aug 29 05:12:59.809061 2026] [security2:error] [pid 60333:tid 60508] [client 20.196.209.81:3351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "core.highpointlogic.com"] [uri "/al.php"] [unique_id "apK-uzwSHPvvQcBSRbsmygAAAbY"]
[Sat Aug 29 05:12:59.813209 2026] [security2:error] [pid 60333:tid 60551] [client 103.240.76.112:42651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 112.76.240.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK-uzwSHPvvQcBSRbsmywAAAeE"]
[Sat Aug 29 05:12:59.813306 2026] [security2:error] [pid 60333:tid 60551] [client 103.240.76.112:42651] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "philadelphialawworks.org"] [uri "/xmlrpc.php"] [unique_id "apK-uzwSHPvvQcBSRbsmywAAAeE"]
[Sat Aug 29 05:12:59.828051 2026] [security2:error] [pid 60333:tid 60580] [client 158.23.184.117:45092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fivetownselc.net"] [uri "/wk/admin.php"] [unique_id "apK-uzwSHPvvQcBSRbsmzgAAAf4"]
[Sat Aug 29 05:12:59.849018 2026] [security2:error] [pid 60333:tid 60373] [remote 34.74.253.19:52118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 19.253.74.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.harnessenergycr.com"] [uri "/configuration.php.bak"] [unique_id "apK-uzwSHPvvQcBSRbsm0QABuyI"]
[Sat Aug 29 05:12:59.864625 2026] [security2:error] [pid 60333:tid 60566] [client 20.104.18.15:17134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/h2.php"] [unique_id "apK-uzwSHPvvQcBSRbsm0gAAAfA"]
[Sat Aug 29 05:12:59.867235 2026] [security2:error] [pid 60333:tid 60527] [client 20.63.219.114:1144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/bak.phps"] [unique_id "apK-uzwSHPvvQcBSRbsm1AAAAck"]
[Sat Aug 29 05:12:59.869744 2026] [security2:error] [pid 60333:tid 60531] [client 20.104.18.15:4996] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/one.php"] [unique_id "apK-uzwSHPvvQcBSRbsm1QAAAc0"]
[Sat Aug 29 05:12:59.871692 2026] [security2:error] [pid 60333:tid 60507] [client 20.104.18.15:48090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/xty.php"] [unique_id "apK-uzwSHPvvQcBSRbsm1gAAAbU"]
[Sat Aug 29 05:12:59.898398 2026] [security2:error] [pid 60333:tid 60583] [client 68.155.159.216:38702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/goat1.php"] [unique_id "apK-uzwSHPvvQcBSRbsm2gAAAgE"]
[Sat Aug 29 05:12:59.899912 2026] [security2:error] [pid 60333:tid 60472] [client 158.23.147.79:31729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carpevictoriam.com"] [uri "/wp-content/uploads/makeasmtp.php"] [unique_id "apK-uzwSHPvvQcBSRbsm2wAAAZI"]
[Sat Aug 29 05:12:59.904687 2026] [security2:error] [pid 60333:tid 60545] [client 20.197.61.180:3340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-content/languages/chosen.php"] [unique_id "apK-uzwSHPvvQcBSRbsm3AAAAds"]
[Sat Aug 29 05:12:59.908905 2026] [security2:error] [pid 60333:tid 60510] [client 20.196.209.81:4521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/class-wp-cmd.php"] [unique_id "apK-uzwSHPvvQcBSRbsm3QAAAbg"]
[Sat Aug 29 05:12:59.920528 2026] [security2:error] [pid 60333:tid 60564] [client 74.248.24.12:24424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/p.php"] [unique_id "apK-uzwSHPvvQcBSRbsm3wAAAe4"]
[Sat Aug 29 05:12:59.921226 2026] [security2:error] [pid 60333:tid 60585] [client 20.48.250.41:45347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "rampage38express.enproftp.com"] [uri "/gettest.php"] [unique_id "apK-uzwSHPvvQcBSRbsm4AAAAgM"]
[Sat Aug 29 05:12:59.929523 2026] [security2:error] [pid 60333:tid 60512] [client 158.158.54.35:1449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/gmo.php"] [unique_id "apK-uzwSHPvvQcBSRbsm4gAAAbo"]
[Sat Aug 29 05:12:59.941323 2026] [security2:error] [pid 60333:tid 60535] [client 20.104.104.62:20694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/index8.php"] [unique_id "apK-uzwSHPvvQcBSRbsm5gAAAdE"]
[Sat Aug 29 05:12:59.955134 2026] [security2:error] [pid 60333:tid 60522] [client 20.48.250.41:50260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.eeeaudio.com"] [uri "/ws58.php"] [unique_id "apK-uzwSHPvvQcBSRbsm6QAAAcQ"]
[Sat Aug 29 05:12:59.956937 2026] [security2:error] [pid 60333:tid 60538] [client 158.23.147.79:39129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/.well-knownold/index.php"] [unique_id "apK-uzwSHPvvQcBSRbsm6gAAAdQ"]
[Sat Aug 29 05:12:59.964401 2026] [security2:error] [pid 60333:tid 60574] [client 20.196.209.81:9330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.don.devi.to"] [uri "/randkeyword.php"] [unique_id "apK-uzwSHPvvQcBSRbsm7QAAAfg"]
[Sat Aug 29 05:12:59.973323 2026] [security2:error] [pid 60333:tid 60519] [client 158.23.184.117:62915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fivetownselc.net"] [uri "/admin.php"] [unique_id "apK-uzwSHPvvQcBSRbsm7gAAAcE"]
[Sat Aug 29 05:13:00.004455 2026] [security2:error] [pid 60333:tid 60474] [client 20.104.18.15:17145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/wp-content/mod/adminfuns.php"] [unique_id "apK-vDwSHPvvQcBSRbsm8QAAAZQ"]
[Sat Aug 29 05:13:00.005561 2026] [security2:error] [pid 60333:tid 60475] [client 20.104.18.15:16594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/sallu.php"] [unique_id "apK-vDwSHPvvQcBSRbsm8gAAAZU"]
[Sat Aug 29 05:13:00.007748 2026] [security2:error] [pid 60333:tid 60530] [client 4.205.62.107:63890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/saml.php"] [unique_id "apK-vDwSHPvvQcBSRbsm9AAAAcw"]
[Sat Aug 29 05:13:00.026551 2026] [security2:error] [pid 60333:tid 60523] [client 20.48.250.41:38813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kiwimediaworks.glenncoad.com"] [uri "/ccu.php"] [unique_id "apK-vDwSHPvvQcBSRbsm9wAAAcU"]
[Sat Aug 29 05:13:00.027451 2026] [security2:error] [pid 60333:tid 60549] [client 20.104.18.15:5107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/503.php"] [unique_id "apK-vDwSHPvvQcBSRbsm-AAAAd8"]
[Sat Aug 29 05:13:00.039456 2026] [security2:error] [pid 60333:tid 60391] [remote 34.74.253.19:52118] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.harnessenergycr.com"] [uri "/wp-config.php.swp"] [unique_id "apK-vDwSHPvvQcBSRbsm_QAB4jQ"]
[Sat Aug 29 05:13:00.042046 2026] [security2:error] [pid 60333:tid 60517] [client 20.48.250.41:45939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.250.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.infrared.in.th"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apK-vDwSHPvvQcBSRbsm_gAAAb8"]
[Sat Aug 29 05:13:00.043498 2026] [security2:error] [pid 60333:tid 60573] [client 103.48.146.148:57725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 148.146.48.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK-vDwSHPvvQcBSRbsm-QAAAfc"]
[Sat Aug 29 05:13:00.043625 2026] [security2:error] [pid 60333:tid 60573] [client 103.48.146.148:57725] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "gmyerdesign.com"] [uri "/xmlrpc.php"] [unique_id "apK-vDwSHPvvQcBSRbsm-QAAAfc"]
[Sat Aug 29 05:13:00.054202 2026] [security2:error] [pid 60333:tid 60558] [client 4.205.62.107:62744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/server-info.php"] [unique_id "apK-vDwSHPvvQcBSRbsm_wAAAeg"]
[Sat Aug 29 05:13:00.062523 2026] [security2:error] [pid 60333:tid 60521] [client 158.23.147.79:24495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "apK-vDwSHPvvQcBSRbsnAAAAAcM"]
[Sat Aug 29 05:13:00.094029 2026] [security2:error] [pid 60333:tid 60554] [client 4.205.62.107:63013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/adminer-4.7.6-en.php"] [unique_id "apK-vDwSHPvvQcBSRbsnAQAAAeQ"]
[Sat Aug 29 05:13:00.116004 2026] [security2:error] [pid 60333:tid 60569] [client 158.23.184.117:62957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fivetownselc.net"] [uri "/goods.php"] [unique_id "apK-vDwSHPvvQcBSRbsnAgAAAfM"]
[Sat Aug 29 05:13:00.129770 2026] [security2:error] [pid 60333:tid 60485] [client 158.23.147.79:64471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/admin.php"] [unique_id "apK-vDwSHPvvQcBSRbsnAwAAAZ8"]
[Sat Aug 29 05:13:00.133855 2026] [security2:error] [pid 60333:tid 60480] [client 20.104.18.15:17079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/sao.php"] [unique_id "apK-vDwSHPvvQcBSRbsnBAAAAZo"]
[Sat Aug 29 05:13:00.141095 2026] [security2:error] [pid 60333:tid 60544] [client 20.104.18.15:16540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/codex.php"] [unique_id "apK-vDwSHPvvQcBSRbsnBQAAAdo"]
[Sat Aug 29 05:13:00.160850 2026] [security2:error] [pid 60333:tid 60508] [client 20.104.18.15:5084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/504.php"] [unique_id "apK-vDwSHPvvQcBSRbsnBwAAAbY"]
[Sat Aug 29 05:13:00.168025 2026] [security2:error] [pid 60333:tid 60578] [client 4.205.62.107:63419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/paths.php"] [unique_id "apK-vDwSHPvvQcBSRbsnCAAAAfw"]
[Sat Aug 29 05:13:00.188957 2026] [security2:error] [pid 60333:tid 60514] [client 216.51.171.83:60766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 83.171.51.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-vDwSHPvvQcBSRbsnCgAAAbw"]
[Sat Aug 29 05:13:00.189029 2026] [security2:error] [pid 60333:tid 60514] [client 216.51.171.83:60766] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jamwestcon.com"] [uri "/xmlrpc.php"] [unique_id "apK-vDwSHPvvQcBSRbsnCgAAAbw"]
[Sat Aug 29 05:13:00.205671 2026] [security2:error] [pid 60333:tid 60520] [client 20.196.209.81:16753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "core.highpointlogic.com"] [uri "/global.php"] [unique_id "apK-vDwSHPvvQcBSRbsnDQAAAcI"]
[Sat Aug 29 05:13:00.206206 2026] [security2:error] [pid 60333:tid 60527] [client 93.123.109.228:34620] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/___proxy_subdomain_cpcontacts/admin-app/.env"] [unique_id "apK-vDwSHPvvQcBSRbsnDgAAAck"]
[Sat Aug 29 05:13:00.212026 2026] [security2:error] [pid 60333:tid 60584] [client 20.196.209.81:15138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/headerg.php"] [unique_id "apK-vDwSHPvvQcBSRbsnEQAAAgI"]
[Sat Aug 29 05:13:00.258223 2026] [security2:error] [pid 60333:tid 60513] [client 158.23.184.117:45108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fivetownselc.net"] [uri "/w.php"] [unique_id "apK-vDwSHPvvQcBSRbsnFgAAAbs"]
[Sat Aug 29 05:13:00.259107 2026] [security2:error] [pid 60333:tid 60548] [client 68.155.159.216:43840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.theenprogroup.com"] [uri "/wp-content/banners/about.php"] [unique_id "apK-vDwSHPvvQcBSRbsnFwAAAd4"]
[Sat Aug 29 05:13:00.261585 2026] [security2:error] [pid 60333:tid 60472] [client 158.23.147.79:49793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/wp-includes/js/index.php"] [unique_id "apK-vDwSHPvvQcBSRbsnGAAAAZI"]
[Sat Aug 29 05:13:00.272702 2026] [security2:error] [pid 60333:tid 60565] [client 20.63.219.114:13981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 114.219.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.gocreativesolar.hawesinc.com"] [uri "/install.php"] [unique_id "apK-vDwSHPvvQcBSRbsnGQAAAe8"]
[Sat Aug 29 05:13:00.279910 2026] [security2:error] [pid 60333:tid 60547] [client 20.104.18.15:17136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/dapa.php"] [unique_id "apK-vDwSHPvvQcBSRbsnGgAAAd0"]
[Sat Aug 29 05:13:00.290124 2026] [security2:error] [pid 60333:tid 60389] [remote 34.74.253.19:52118] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "cpcontacts.harnessenergycr.com"] [uri "/wp-config.php~"] [unique_id "apK-vDwSHPvvQcBSRbsnHQABnjI"]
[Sat Aug 29 05:13:00.292466 2026] [security2:error] [pid 60333:tid 60529] [client 20.104.18.15:5040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/admin.php"] [unique_id "apK-vDwSHPvvQcBSRbsnHgAAAcs"]
[Sat Aug 29 05:13:00.312318 2026] [security2:error] [pid 60333:tid 60501] [client 20.104.18.15:16534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/5656.php"] [unique_id "apK-vDwSHPvvQcBSRbsnIQAAAa8"]
[Sat Aug 29 05:13:00.315785 2026] [security2:error] [pid 60333:tid 60572] [client 93.123.109.228:34666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/_profiler/phpinfo.php"] [unique_id "apK-vDwSHPvvQcBSRbsnIgAAAfY"]
[Sat Aug 29 05:13:00.316158 2026] [security2:error] [pid 60333:tid 60557] [client 20.196.209.81:1947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/disagreed.php"] [unique_id "apK-vDwSHPvvQcBSRbsnIwAAAec"]
[Sat Aug 29 05:13:00.336456 2026] [security2:error] [pid 60333:tid 60522] [client 68.155.159.216:44026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.dubuqueglass.info"] [uri "/wp-content/uploads/about.php"] [unique_id "apK-vDwSHPvvQcBSRbsnJwAAAcQ"]
[Sat Aug 29 05:13:00.351370 2026] [security2:error] [pid 60333:tid 60406] [remote 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK-vDwSHPvvQcBSRbsnKwABz0M"]
[Sat Aug 29 05:13:00.351504 2026] [security2:error] [pid 60333:tid 60533] [client 2804:d59:ad19:6200:dd9f:6cc7:2ea4:88c1:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "sungrove.org"] [uri "/xmlrpc.php"] [unique_id "apK-vDwSHPvvQcBSRbsnKwABz0M"]
[Sat Aug 29 05:13:00.359851 2026] [security2:error] [pid 60333:tid 60546] [client 20.196.209.81:10039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.don.devi.to"] [uri "/goods.php"] [unique_id "apK-vDwSHPvvQcBSRbsnLAAAAdw"]
[Sat Aug 29 05:13:00.369820 2026] [security2:error] [pid 60333:tid 60470] [client 158.158.54.35:31253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/classwithtostring.php"] [unique_id "apK-vDwSHPvvQcBSRbsnLQAAAZA"]
[Sat Aug 29 05:13:00.402731 2026] [security2:error] [pid 60333:tid 60500] [client 158.23.184.117:62951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fivetownselc.net"] [uri "/new.php"] [unique_id "apK-vDwSHPvvQcBSRbsnMAAAAa4"]
[Sat Aug 29 05:13:00.407730 2026] [security2:error] [pid 60333:tid 60523] [client 20.104.18.15:27584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/wp-content/l.php"] [unique_id "apK-vDwSHPvvQcBSRbsnMQAAAcU"]
[Sat Aug 29 05:13:00.431915 2026] [security2:error] [pid 60333:tid 60583] [client 74.248.24.12:40243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/a1.php"] [unique_id "apK-vDwSHPvvQcBSRbsnMwAAAgE"]
[Sat Aug 29 05:13:00.432540 2026] [security2:error] [pid 60333:tid 60556] [client 20.151.200.44:27281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.familiebon.com"] [uri "/kcs.php"] [unique_id "apK-vDwSHPvvQcBSRbsnNAAAAeY"]
[Sat Aug 29 05:13:00.456467 2026] [security2:error] [pid 60333:tid 60559] [client 20.104.18.15:16639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/w3lls.php"] [unique_id "apK-vDwSHPvvQcBSRbsnOQAAAek"]
[Sat Aug 29 05:13:00.464813 2026] [security2:error] [pid 60333:tid 60561] [client 20.197.61.180:3385] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thatsaturdaythang.lifesosweet.com"] [uri "/wp-content/content.php"] [unique_id "apK-vDwSHPvvQcBSRbsnOgAAAes"]
[Sat Aug 29 05:13:00.476024 2026] [security2:error] [pid 60333:tid 60562] [client 158.23.147.79:24547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.paulroyce.com"] [uri "/chosen.php"] [unique_id "apK-vDwSHPvvQcBSRbsnPAAAAew"]
[Sat Aug 29 05:13:00.479733 2026] [security2:error] [pid 60333:tid 60503] [client 20.104.18.15:5085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/ws85.php"] [unique_id "apK-vDwSHPvvQcBSRbsnPQAAAbE"]
[Sat Aug 29 05:13:00.547801 2026] [security2:error] [pid 60333:tid 60587] [client 158.23.184.117:62959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fivetownselc.net"] [uri "/php8.php"] [unique_id "apK-vDwSHPvvQcBSRbsnQgAAAgU"]
[Sat Aug 29 05:13:00.550759 2026] [security2:error] [pid 60333:tid 60553] [client 20.104.18.15:27524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/wp-admin/w.php"] [unique_id "apK-vDwSHPvvQcBSRbsnQwAAAeM"]
[Sat Aug 29 05:13:00.573950 2026] [security2:error] [pid 60333:tid 60495] [client 158.23.147.79:7057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/content.php"] [unique_id "apK-vDwSHPvvQcBSRbsnRgAAAak"]
[Sat Aug 29 05:13:00.588107 2026] [security2:error] [pid 60333:tid 60569] [client 20.104.104.62:20816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/index9.php"] [unique_id "apK-vDwSHPvvQcBSRbsnRwAAAfM"]
[Sat Aug 29 05:13:00.591866 2026] [security2:error] [pid 60333:tid 60485] [client 20.104.18.15:16526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/fpwch.php"] [unique_id "apK-vDwSHPvvQcBSRbsnSAAAAZ8"]
[Sat Aug 29 05:13:00.615785 2026] [security2:error] [pid 60333:tid 60552] [client 20.196.209.81:9302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/meta.php"] [unique_id "apK-vDwSHPvvQcBSRbsnTgAAAeI"]
[Sat Aug 29 05:13:00.616339 2026] [security2:error] [pid 60333:tid 60581] [client 20.197.61.180:3832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-content/languages/index.php"] [unique_id "apK-vDwSHPvvQcBSRbsnTwAAAf8"]
[Sat Aug 29 05:13:00.635824 2026] [security2:error] [pid 60333:tid 60486] [client 93.123.109.228:34624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/admin_phpinfo.php"] [unique_id "apK-vDwSHPvvQcBSRbsnUQAAAaA"]
[Sat Aug 29 05:13:00.641014 2026] [security2:error] [pid 60333:tid 60469] [client 20.196.209.81:3807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "core.highpointlogic.com"] [uri "/update.php"] [unique_id "apK-vDwSHPvvQcBSRbsnUgAAAY8"]
[Sat Aug 29 05:13:00.655584 2026] [security2:error] [pid 60333:tid 60563] [client 4.205.62.107:6133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/infos.php"] [unique_id "apK-vDwSHPvvQcBSRbsnUwAAAe0"]
[Sat Aug 29 05:13:00.663544 2026] [security2:error] [pid 60333:tid 60399] [remote 34.74.253.19:52118] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "cpcontacts.harnessenergycr.com"] [uri "/static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ"] [unique_id "apK-vDwSHPvvQcBSRbsnVAACAjw"]
[Sat Aug 29 05:13:00.664405 2026] [security2:error] [pid 60333:tid 60527] [client 20.104.18.15:5011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/ffs.php"] [unique_id "apK-vDwSHPvvQcBSRbsnVQAAAck"]
[Sat Aug 29 05:13:00.665656 2026] [security2:error] [pid 60333:tid 60596] [client 93.123.109.228:34654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/admin/phpinfo.php"] [unique_id "apK-vDwSHPvvQcBSRbsnVwAAAg4"]
[Sat Aug 29 05:13:00.687865 2026] [security2:error] [pid 60333:tid 60514] [client 158.23.184.117:45073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fivetownselc.net"] [uri "/wp-content/themes/admin.php"] [unique_id "apK-vDwSHPvvQcBSRbsnWAAAAbw"]
[Sat Aug 29 05:13:00.701048 2026] [security2:error] [pid 60333:tid 60531] [client 20.104.18.15:17056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/wp-content/k.php"] [unique_id "apK-vDwSHPvvQcBSRbsnWQAAAc0"]
[Sat Aug 29 05:13:00.719648 2026] [security2:error] [pid 60333:tid 60529] [client 93.123.109.228:34670] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/___proxy_subdomain_cpcontacts/api-backend/.env"] [unique_id "apK-vDwSHPvvQcBSRbsnWgAAAcs"]
[Sat Aug 29 05:13:00.720692 2026] [security2:error] [pid 60333:tid 60510] [client 20.104.18.15:48108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/domvf.php"] [unique_id "apK-vDwSHPvvQcBSRbsnWwAAAbg"]
[Sat Aug 29 05:13:00.726644 2026] [security2:error] [pid 60333:tid 60501] [client 93.123.109.228:34742] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/___proxy_subdomain_cpcontacts/api-node/.env"] [unique_id "apK-vDwSHPvvQcBSRbsnXAAAAa8"]
[Sat Aug 29 05:13:00.727565 2026] [security2:error] [pid 60333:tid 60528] [client 20.196.209.81:16384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/class_api.php"] [unique_id "apK-vDwSHPvvQcBSRbsnXQAAAco"]
[Sat Aug 29 05:13:00.756876 2026] [security2:error] [pid 60333:tid 60535] [client 4.205.62.107:64938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/ms.php"] [unique_id "apK-vDwSHPvvQcBSRbsnYAAAAdE"]
[Sat Aug 29 05:13:00.763969 2026] [security2:error] [pid 60333:tid 60580] [client 20.196.209.81:15106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.don.devi.to"] [uri "/hehe.php"] [unique_id "apK-vDwSHPvvQcBSRbsnYgAAAf4"]
[Sat Aug 29 05:13:00.778044 2026] [security2:error] [pid 60333:tid 60574] [client 20.104.49.130:47952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.marketingmagicsecrets.com"] [uri "/666.php"] [unique_id "apK-vDwSHPvvQcBSRbsnYwAAAfg"]
[Sat Aug 29 05:13:00.820814 2026] [security2:error] [pid 60333:tid 60474] [client 93.123.109.228:34628] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/___proxy_subdomain_cpcontacts/administrator/.env"] [unique_id "apK-vDwSHPvvQcBSRbsnZQAAAZQ"]
[Sat Aug 29 05:13:00.823131 2026] [security2:error] [pid 60333:tid 60475] [client 93.123.109.228:34676] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/___proxy_subdomain_cpcontacts/api/.env"] [unique_id "apK-vDwSHPvvQcBSRbsnZgAAAZU"]
[Sat Aug 29 05:13:00.828235 2026] [security2:error] [pid 60333:tid 60484] [client 158.23.184.117:45086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fivetownselc.net"] [uri "/txets.php"] [unique_id "apK-vDwSHPvvQcBSRbsnZwAAAZ4"]
[Sat Aug 29 05:13:00.833449 2026] [security2:error] [pid 60333:tid 60518] [client 158.158.54.35:33698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/404.php"] [unique_id "apK-vDwSHPvvQcBSRbsnaAAAAcA"]
[Sat Aug 29 05:13:00.834511 2026] [security2:error] [pid 60333:tid 60490] [client 20.104.18.15:17139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/os.php"] [unique_id "apK-vDwSHPvvQcBSRbsnaQAAAaQ"]
[Sat Aug 29 05:13:00.847578 2026] [security2:error] [pid 60333:tid 60471] [client 20.104.18.15:5027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/nano.php"] [unique_id "apK-vDwSHPvvQcBSRbsncAAAAZE"]
[Sat Aug 29 05:13:00.857381 2026] [security2:error] [pid 60333:tid 60526] [client 20.104.18.15:16621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/biufile.php"] [unique_id "apK-vDwSHPvvQcBSRbsndwAAAcg"]
[Sat Aug 29 05:13:00.881338 2026] [security2:error] [pid 60333:tid 60549] [client 20.104.104.62:20677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/indeex.php"] [unique_id "apK-vDwSHPvvQcBSRbsneAAAAd8"]
[Sat Aug 29 05:13:00.910589 2026] [access_compat:error] [pid 60333:tid 60588] [client 67.20.76.220:54344] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:13:00.927325 2026] [access_compat:error] [pid 60333:tid 60558] [client 67.20.76.220:54354] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:13:00.947929 2026] [security2:error] [pid 60333:tid 60522] [client 74.248.24.12:31917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apK-vDwSHPvvQcBSRbsnhQAAAcQ"]
[Sat Aug 29 05:13:00.966044 2026] [security2:error] [pid 60333:tid 60479] [client 20.104.18.15:17050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/htio.php"] [unique_id "apK-vDwSHPvvQcBSRbsniAAAAZk"]
[Sat Aug 29 05:13:00.990697 2026] [security2:error] [pid 60333:tid 60589] [client 158.23.184.117:45058] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fivetownselc.net"] [uri "/adminfuns.php"] [unique_id "apK-vDwSHPvvQcBSRbsniwAAAgc"]
[Sat Aug 29 05:13:00.991828 2026] [security2:error] [pid 60333:tid 60590] [client 20.104.18.15:16625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/blacks.php"] [unique_id "apK-vDwSHPvvQcBSRbsnjAAAAgg"]
[Sat Aug 29 05:13:01.004698 2026] [security2:error] [pid 60333:tid 60476] [client 68.155.159.216:38718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "apK-vTwSHPvvQcBSRbsnjQAAAZY"]
[Sat Aug 29 05:13:01.006065 2026] [security2:error] [pid 60333:tid 60569] [client 20.104.18.15:5100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/ano.php"] [unique_id "apK-vTwSHPvvQcBSRbsnjgAAAfM"]
[Sat Aug 29 05:13:01.016025 2026] [security2:error] [pid 60333:tid 60480] [client 93.123.109.228:34676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/api/info.php"] [unique_id "apK-vTwSHPvvQcBSRbsnkQAAAZo"]
[Sat Aug 29 05:13:01.077458 2026] [security2:error] [pid 60333:tid 60520] [client 158.23.147.79:43329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-includes/js/crop/index.php"] [unique_id "apK-vTwSHPvvQcBSRbsnmgAAAcI"]
[Sat Aug 29 05:13:01.088317 2026] [security2:error] [pid 60333:tid 60573] [client 20.196.209.81:14546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/dxc.php"] [unique_id "apK-vTwSHPvvQcBSRbsnnAAAAfc"]
[Sat Aug 29 05:13:01.097791 2026] [security2:error] [pid 60333:tid 60514] [client 20.104.18.15:17093] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/dev.php"] [unique_id "apK-vTwSHPvvQcBSRbsnnQAAAbw"]
[Sat Aug 29 05:13:01.119737 2026] [security2:error] [pid 60333:tid 60509] [client 63.183.132.225:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.jobindjibouti.com"] [uri "/jobs/"] [unique_id "apK-vTwSHPvvQcBSRbsnoAAAAbc"]
[Sat Aug 29 05:13:01.122133 2026] [security2:error] [pid 60333:tid 60585] [client 20.151.200.44:55741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/file66.php"] [unique_id "apK-vTwSHPvvQcBSRbsnogAAAgM"]
[Sat Aug 29 05:13:01.140566 2026] [security2:error] [pid 60333:tid 60596] [client 158.23.184.117:45095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fivetownselc.net"] [uri "/403.php"] [unique_id "apK-vTwSHPvvQcBSRbsnqwAAAg4"]
[Sat Aug 29 05:13:01.140676 2026] [security2:error] [pid 60333:tid 60495] [client 20.196.209.81:11363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/aksinet.php"] [unique_id "apK-vTwSHPvvQcBSRbsnrAAAAak"]
[Sat Aug 29 05:13:01.143401 2026] [security2:error] [pid 60333:tid 60537] [client 20.104.18.15:16567] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/beck.php"] [unique_id "apK-vTwSHPvvQcBSRbsnsAAAAdM"]
[Sat Aug 29 05:13:01.146398 2026] [security2:error] [pid 60333:tid 60574] [client 20.104.18.15:5017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/mgrr.php"] [unique_id "apK-vTwSHPvvQcBSRbsnsgAAAfg"]
[Sat Aug 29 05:13:01.147958 2026] [security2:error] [pid 60333:tid 60534] [client 4.205.62.107:61759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/aws_settings.php"] [unique_id "apK-vTwSHPvvQcBSRbsnswAAAdA"]
[Sat Aug 29 05:13:01.169812 2026] [security2:error] [pid 60333:tid 60533] [client 158.23.147.79:24424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/nf_tracking.php"] [unique_id "apK-vTwSHPvvQcBSRbsntQAAAc8"]
[Sat Aug 29 05:13:01.184315 2026] [security2:error] [pid 60333:tid 60496] [client 20.197.61.180:3787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thatsaturdaythang.lifesosweet.com"] [uri "/wp-content/core.php"] [unique_id "apK-vTwSHPvvQcBSRbsntgAAAao"]
[Sat Aug 29 05:13:01.190733 2026] [security2:error] [pid 60333:tid 60470] [client 4.205.62.107:62723] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/gk.php"] [unique_id "apK-vTwSHPvvQcBSRbsntwAAAZA"]
[Sat Aug 29 05:13:01.191333 2026] [security2:error] [pid 60333:tid 60486] [client 20.196.209.81:3828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "core.highpointlogic.com"] [uri "/blog.php"] [unique_id "apK-vTwSHPvvQcBSRbsnuAAAAaA"]
[Sat Aug 29 05:13:01.227018 2026] [security2:error] [pid 60333:tid 60584] [client 20.196.209.81:10019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.don.devi.to"] [uri "/wp-admin/class-db.php"] [unique_id "apK-vTwSHPvvQcBSRbsnugAAAgI"]
[Sat Aug 29 05:13:01.235747 2026] [security2:error] [pid 60333:tid 60539] [client 158.23.147.79:64387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/wp-admin/admin.php"] [unique_id "apK-vTwSHPvvQcBSRbsnvAAAAdU"]
[Sat Aug 29 05:13:01.240502 2026] [security2:error] [pid 60333:tid 60545] [client 4.205.62.107:62976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/phpi.php"] [unique_id "apK-vTwSHPvvQcBSRbsnvQAAAds"]
[Sat Aug 29 05:13:01.244038 2026] [security2:error] [pid 60333:tid 60565] [client 20.104.18.15:17078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/gos.php"] [unique_id "apK-vTwSHPvvQcBSRbsnvgAAAe8"]
[Sat Aug 29 05:13:01.261140 2026] [security2:error] [pid 60333:tid 60500] [client 93.123.109.228:34714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.109.123.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/api/phpinfo.php"] [unique_id "apK-vTwSHPvvQcBSRbsnyAAAAa4"]
[Sat Aug 29 05:13:01.263506 2026] [security2:error] [pid 60333:tid 60583] [client 20.104.104.62:20618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/jindex.php"] [unique_id "apK-vTwSHPvvQcBSRbsnyQAAAgE"]
[Sat Aug 29 05:13:01.283958 2026] [security2:error] [pid 60333:tid 60506] [client 20.104.18.15:48064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/t3.php"] [unique_id "apK-vTwSHPvvQcBSRbsnzwAAAbQ"]
[Sat Aug 29 05:13:01.306176 2026] [security2:error] [pid 60333:tid 60532] [client 158.158.54.35:5827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/php.php"] [unique_id "apK-vTwSHPvvQcBSRbsn0wAAAc4"]
[Sat Aug 29 05:13:01.307148 2026] [security2:error] [pid 60333:tid 60542] [client 68.155.159.216:49122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apK-vTwSHPvvQcBSRbsn1QAAAdg"]
[Sat Aug 29 05:13:01.307297 2026] [security2:error] [pid 60333:tid 60587] [client 4.205.62.107:61440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.landonrian.com"] [uri "/olfclass.php"] [unique_id "apK-vTwSHPvvQcBSRbsn1AAAAgU"]
[Sat Aug 29 05:13:01.311877 2026] [http2:warn] [pid 11274:tid 11491] [client 57.141.14.101:38962] h2_stream(11274-348-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:13:01.331662 2026] [security2:error] [pid 60333:tid 60558] [client 158.23.184.117:45118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fivetownselc.net"] [uri "/.trash7206/index.php"] [unique_id "apK-vTwSHPvvQcBSRbsn1wAAAeg"]
[Sat Aug 29 05:13:01.333419 2026] [security2:error] [pid 60333:tid 60566] [client 20.197.61.180:3837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-content/languages/min.php"] [unique_id "apK-vTwSHPvvQcBSRbsn2QAAAfA"]
[Sat Aug 29 05:13:01.343180 2026] [security2:error] [pid 60333:tid 60553] [client 68.155.159.216:1939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.soldierbear.com"] [uri "/packed.php"] [unique_id "apK-vTwSHPvvQcBSRbsn5gAAAeM"]
[Sat Aug 29 05:13:01.369404 2026] [security2:error] [pid 60333:tid 60536] [client 158.23.147.79:49853] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.rocworx.com"] [uri "/wp-content/index.php"] [unique_id "apK-vTwSHPvvQcBSRbsn_gAAAdI"]
[Sat Aug 29 05:13:01.376503 2026] [security2:error] [pid 60333:tid 60594] [client 20.104.18.15:17062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/132.php"] [unique_id "apK-vTwSHPvvQcBSRbsn_wAAAgw"]
[Sat Aug 29 05:13:01.380589 2026] [security2:error] [pid 60333:tid 60560] [client 68.155.159.216:44005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.theenprogroup.com"] [uri "/wp-includes/Text/about.php"] [unique_id "apK-vTwSHPvvQcBSRbsoAAAAAeo"]
[Sat Aug 29 05:13:01.415580 2026] [security2:error] [pid 60333:tid 60573] [client 20.104.18.15:4945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/mac.php"] [unique_id "apK-vTwSHPvvQcBSRbsoBQAAAfc"]
[Sat Aug 29 05:13:01.422436 2026] [security2:error] [pid 60333:tid 60529] [client 20.104.18.15:16569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/wp.php"] [unique_id "apK-vTwSHPvvQcBSRbsoBgAAAcs"]
[Sat Aug 29 05:13:01.425782 2026] [security2:error] [pid 60333:tid 60576] [client 93.123.109.228:34766] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/___proxy_subdomain_cpcontacts/apis/.env"] [unique_id "apK-vTwSHPvvQcBSRbsoCAAAAfo"]
[Sat Aug 29 05:13:01.462076 2026] [security2:error] [pid 60333:tid 60593] [client 74.248.24.12:16855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/alfa-rex.php7"] [unique_id "apK-vTwSHPvvQcBSRbsoCwAAAgs"]
[Sat Aug 29 05:13:01.466055 2026] [security2:error] [pid 60333:tid 60559] [client 103.171.189.88:59305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 88.189.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-vTwSHPvvQcBSRbsoDQAAAek"]
[Sat Aug 29 05:13:01.466207 2026] [security2:error] [pid 60333:tid 60559] [client 103.171.189.88:59305] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "playandlearntherapy.com"] [uri "/xmlrpc.php"] [unique_id "apK-vTwSHPvvQcBSRbsoDQAAAek"]
[Sat Aug 29 05:13:01.493548 2026] [security2:error] [pid 60333:tid 60492] [client 158.23.184.117:45107] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fivetownselc.net"] [uri "/.trash7206/admin.php"] [unique_id "apK-vTwSHPvvQcBSRbsoEgAAAaY"]
[Sat Aug 29 05:13:01.497992 2026] [security2:error] [pid 60333:tid 60475] [client 20.104.49.130:65174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spiritofamericatour.org"] [uri "/mh.php"] [unique_id "apK-vTwSHPvvQcBSRbsoEwAAAZU"]
[Sat Aug 29 05:13:01.500861 2026] [security2:error] [pid 60333:tid 60480] [client 20.196.209.81:10022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/wp-2019.php"] [unique_id "apK-vTwSHPvvQcBSRbsoFAAAAZo"]
[Sat Aug 29 05:13:01.506948 2026] [security2:error] [pid 60333:tid 60533] [client 20.104.18.15:27618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/v22.php"] [unique_id "apK-vTwSHPvvQcBSRbsoFQAAAc8"]
[Sat Aug 29 05:13:01.525060 2026] [security2:error] [pid 60333:tid 60544] [client 158.23.147.79:31647] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "carpevictoriam.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "apK-vTwSHPvvQcBSRbsoFgAAAdo"]
[Sat Aug 29 05:13:01.540052 2026] [security2:error] [pid 60333:tid 60563] [client 20.196.209.81:11374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/alfa-rex1.php"] [unique_id "apK-vTwSHPvvQcBSRbsoFwAAAe0"]
[Sat Aug 29 05:13:01.549956 2026] [security2:error] [pid 60333:tid 60487] [client 20.104.18.15:48077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/abcd.php"] [unique_id "apK-vTwSHPvvQcBSRbsoGQAAAaE"]
[Sat Aug 29 05:13:01.559628 2026] [security2:error] [pid 60333:tid 60471] [client 20.104.18.15:5004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/simple.php"] [unique_id "apK-vTwSHPvvQcBSRbsoGgAAAZE"]
[Sat Aug 29 05:13:01.581414 2026] [security2:error] [pid 60333:tid 60472] [client 158.23.147.79:24491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.paulroyce.com"] [uri "/goods.php"] [unique_id "apK-vTwSHPvvQcBSRbsoHAAAAZI"]
[Sat Aug 29 05:13:01.602808 2026] [security2:error] [pid 60333:tid 60526] [client 68.155.159.216:64103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "burlingtonyaroslavl.com"] [uri "/wp-content/plugins/google-seo-rank/module.php"] [unique_id "apK-vTwSHPvvQcBSRbsoHwAAAcg"]
[Sat Aug 29 05:13:01.637573 2026] [security2:error] [pid 60333:tid 60545] [client 158.23.184.117:62946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fivetownselc.net"] [uri "/wp-content/admin.php"] [unique_id "apK-vTwSHPvvQcBSRbsoIQAAAds"]
[Sat Aug 29 05:13:01.643335 2026] [security2:error] [pid 60333:tid 60506] [client 20.104.18.15:17122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/wp-activate.php"] [unique_id "apK-vTwSHPvvQcBSRbsoIwAAAbQ"]
[Sat Aug 29 05:13:01.645790 2026] [security2:error] [pid 60333:tid 60508] [client 20.196.209.81:14541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.don.devi.to"] [uri "/wp-contentt.php"] [unique_id "apK-vTwSHPvvQcBSRbsoJAAAAbY"]
[Sat Aug 29 05:13:01.677101 2026] [security2:error] [pid 60333:tid 60538] [client 20.196.209.81:16755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "core.highpointlogic.com"] [uri "/bypass.php"] [unique_id "apK-vTwSHPvvQcBSRbsoJQAAAdQ"]
[Sat Aug 29 05:13:01.677134 2026] [security2:error] [pid 60333:tid 60532] [client 20.104.18.15:48064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/nofile.php"] [unique_id "apK-vTwSHPvvQcBSRbsoJgAAAc4"]
[Sat Aug 29 05:13:01.682254 2026] [security2:error] [pid 60333:tid 60588] [client 158.23.147.79:7063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.summerhill72.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "apK-vTwSHPvvQcBSRbsoJwAAAgY"]
[Sat Aug 29 05:13:01.702496 2026] [security2:error] [pid 60333:tid 60540] [client 20.104.18.15:5106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/xty.php"] [unique_id "apK-vTwSHPvvQcBSRbsoKQAAAdY"]
[Sat Aug 29 05:13:01.725605 2026] [security2:error] [pid 60333:tid 60541] [client 68.155.159.216:56795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "harnessenergyasia.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK-vTwSHPvvQcBSRbsoKgAAAdc"]
[Sat Aug 29 05:13:01.725705 2026] [security2:error] [pid 60333:tid 60577] [client 68.155.159.216:62771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.enveso.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "apK-vTwSHPvvQcBSRbsoKwAAAfs"]
[Sat Aug 29 05:13:01.741346 2026] [security2:error] [pid 60333:tid 60565] [client 158.158.54.35:33346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/init.php"] [unique_id "apK-vTwSHPvvQcBSRbsoLAAAAe8"]
[Sat Aug 29 05:13:01.783157 2026] [security2:error] [pid 60333:tid 60566] [client 158.23.184.117:62974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fivetownselc.net"] [uri "/wp-mail.php"] [unique_id "apK-vTwSHPvvQcBSRbsoLwAAAfA"]
[Sat Aug 29 05:13:01.796766 2026] [security2:error] [pid 60333:tid 60594] [client 4.205.62.107:5534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.carmenroberts.net"] [uri "/env.php"] [unique_id "apK-vTwSHPvvQcBSRbsoMAAAAgw"]
[Sat Aug 29 05:13:01.801873 2026] [security2:error] [pid 60333:tid 60581] [client 185.104.184.230:45080] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "webdisk.wsv.vev.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "apK-vTwSHPvvQcBSRbsoMgAAAf8"]
[Sat Aug 29 05:13:01.806452 2026] [security2:error] [pid 60333:tid 60514] [client 20.104.18.15:17028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/wp-trackback.php"] [unique_id "apK-vTwSHPvvQcBSRbsoNAAAAbw"]
[Sat Aug 29 05:13:01.810025 2026] [security2:error] [pid 60333:tid 60481] [client 20.104.18.15:16536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/run.php"] [unique_id "apK-vTwSHPvvQcBSRbsoNQAAAZs"]
[Sat Aug 29 05:13:01.815148 2026] [security2:error] [pid 60333:tid 60573] [client 93.123.109.228:34758] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/___proxy_subdomain_cpcontacts/app/.env"] [unique_id "apK-vTwSHPvvQcBSRbsoNgAAAfc"]
[Sat Aug 29 05:13:01.851993 2026] [access_compat:error] [pid 60333:tid 60444] [remote 3.85.141.163:0] AH01797: client denied by server configuration: /home1/giantsfa/public_html/message_board/index.php
[Sat Aug 29 05:13:01.878597 2026] [security2:error] [pid 60333:tid 60548] [client 20.104.18.15:5102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/sallu.php"] [unique_id "apK-vTwSHPvvQcBSRbsoOwAAAd4"]
[Sat Aug 29 05:13:01.890504 2026] [security2:error] [pid 60333:tid 60495] [client 4.205.62.107:64951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.biking.4callum.net"] [uri "/fucku.php"] [unique_id "apK-vTwSHPvvQcBSRbsoPgAAAak"]
[Sat Aug 29 05:13:01.899993 2026] [security2:error] [pid 60333:tid 60561] [client 20.197.61.180:8815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.thatsaturdaythang.lifesosweet.com"] [uri "/wp-content/db-status.php"] [unique_id "apK-vTwSHPvvQcBSRbsoQAAAAes"]
[Sat Aug 29 05:13:01.912195 2026] [security2:error] [pid 60333:tid 60521] [client 20.196.209.81:17907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/menu.php"] [unique_id "apK-vTwSHPvvQcBSRbsoQwAAAcM"]
[Sat Aug 29 05:13:01.914039 2026] [access_compat:error] [pid 60333:tid 60488] [client 67.20.76.220:54366] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:13:01.932724 2026] [access_compat:error] [pid 60333:tid 60537] [client 67.20.76.220:54376] AH01797: client denied by server configuration: /home4/eastacar/public_html/djiboutifresh/wp-cron.php
[Sat Aug 29 05:13:01.945526 2026] [access_compat:error] [pid 60333:tid 60475] [client 67.20.76.220:54390] AH01797: client denied by server configuration: /home4/eastacar/public_html/guraonline.com/wp-cron.php
[Sat Aug 29 05:13:01.945834 2026] [security2:error] [pid 60333:tid 60496] [client 20.104.18.15:48075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/new.php"] [unique_id "apK-vTwSHPvvQcBSRbsoUAAAAao"]
[Sat Aug 29 05:13:01.947599 2026] [security2:error] [pid 60333:tid 60490] [client 20.151.200.44:55655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.200.151.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.lifes-finance.com"] [uri "/zafir1.php"] [unique_id "apK-vTwSHPvvQcBSRbsoUQAAAaQ"]
[Sat Aug 29 05:13:01.952706 2026] [http2:warn] [pid 11274:tid 11523] [client 57.141.14.27:47396] h2_stream(11274-351-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0
[Sat Aug 29 05:13:01.962261 2026] [security2:error] [pid 60333:tid 60498] [client 20.104.18.15:17109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/pri.php"] [unique_id "apK-vTwSHPvvQcBSRbsoVwAAAaw"]
[Sat Aug 29 05:13:01.966600 2026] [security2:error] [pid 60333:tid 60469] [client 20.196.209.81:11337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.utahvalleyinterfaith.thewaltongroupinc.com"] [uri "/headerg.php"] [unique_id "apK-vTwSHPvvQcBSRbsoWgAAAY8"]
[Sat Aug 29 05:13:01.976372 2026] [security2:error] [pid 60333:tid 60569] [client 74.248.24.12:38714] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.24.248.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themysticalseven.wanderlustpictures.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "apK-vTwSHPvvQcBSRbsoYQAAAfM"]
[Sat Aug 29 05:13:01.996308 2026] [security2:error] [pid 60333:tid 60582] [client 158.23.184.117:62913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fivetownselc.net"] [uri "/3.php"] [unique_id "apK-vTwSHPvvQcBSRbsoZAAAAgA"]
[Sat Aug 29 05:13:02.020472 2026] [access_compat:error] [pid 60333:tid 60522] [client 57.141.14.52:0] AH01797: client denied by server configuration: /home4/eastacar/public_html/djiboutifresh/categorie-produit
[Sat Aug 29 05:13:02.053829 2026] [security2:error] [pid 60333:tid 60492] [client 20.196.209.81:10043] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.don.devi.to"] [uri "/theme.php"] [unique_id "apK-vjwSHPvvQcBSRbsoagAAAaY"]
[Sat Aug 29 05:13:02.065245 2026] [security2:error] [pid 60333:tid 60527] [client 20.197.61.180:19760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 180.61.197.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.discover-york-info.glowt-shirt.com"] [uri "/wp-content/languages/pk.php"] [unique_id "apK-vjwSHPvvQcBSRbsobAAAAck"]
[Sat Aug 29 05:13:02.076236 2026] [security2:error] [pid 60333:tid 60577] [client 20.104.18.15:5070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/codex.php"] [unique_id "apK-vjwSHPvvQcBSRbsobwAAAfs"]
[Sat Aug 29 05:13:02.088600 2026] [security2:error] [pid 60333:tid 60499] [client 20.104.18.15:48069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/inx.php"] [unique_id "apK-vjwSHPvvQcBSRbsocAAAAa0"]
[Sat Aug 29 05:13:02.090595 2026] [security2:error] [pid 60333:tid 60546] [client 20.196.209.81:16719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "core.highpointlogic.com"] [uri "/extractable-loader-head.php"] [unique_id "apK-vjwSHPvvQcBSRbsocQAAAdw"]
[Sat Aug 29 05:13:02.102794 2026] [security2:error] [pid 60333:tid 60565] [client 185.104.184.230:45094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.184.104.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "webdisk.wsv.vev.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "apK-vjwSHPvvQcBSRbsocwAAAe8"]
[Sat Aug 29 05:13:02.104943 2026] [security2:error] [pid 60333:tid 60589] [client 20.104.18.15:27551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/wp_blog_footer.php"] [unique_id "apK-vjwSHPvvQcBSRbsodAAAAgc"]
[Sat Aug 29 05:13:02.110302 2026] [security2:error] [pid 60333:tid 60482] [client 68.155.159.216:38660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.mgbeats.com"] [uri "/wp-admin/network/index.php"] [unique_id "apK-vjwSHPvvQcBSRbsodQAAAZw"]
[Sat Aug 29 05:13:02.139971 2026] [security2:error] [pid 60333:tid 60575] [client 158.23.184.117:62922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fivetownselc.net"] [uri "/wp-includes/fonts/index.php"] [unique_id "apK-vjwSHPvvQcBSRbsoeAAAAfk"]
[Sat Aug 29 05:13:02.201564 2026] [security2:error] [pid 60333:tid 60479] [client 158.158.54.35:31285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.54.158.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.charlottevazquez.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "apK-vjwSHPvvQcBSRbsogAAAAZk"]
[Sat Aug 29 05:13:02.207901 2026] [security2:error] [pid 60333:tid 60477] [client 20.104.104.62:20650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.104.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.motherssandals.com"] [uri "/p0wny-shell.php"] [unique_id "apK-vjwSHPvvQcBSRbsogQAAAZc"]
[Sat Aug 29 05:13:02.219645 2026] [security2:error] [pid 60333:tid 60547] [client 20.104.18.15:16613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/vpn.php"] [unique_id "apK-vjwSHPvvQcBSRbsogwAAAd0"]
[Sat Aug 29 05:13:02.234867 2026] [security2:error] [pid 60333:tid 60530] [client 158.23.147.79:39151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.darwinsfox.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "apK-vjwSHPvvQcBSRbsohAAAAcw"]
[Sat Aug 29 05:13:02.239813 2026] [security2:error] [pid 60333:tid 60548] [client 20.104.18.15:17096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/sushi.php"] [unique_id "apK-vjwSHPvvQcBSRbsohgAAAd4"]
[Sat Aug 29 05:13:02.251741 2026] [security2:error] [pid 60333:tid 60574] [client 20.104.18.15:5065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.my-dbo.com"] [uri "/5656.php"] [unique_id "apK-vjwSHPvvQcBSRbsojQAAAfg"]
[Sat Aug 29 05:13:02.287227 2026] [security2:error] [pid 60333:tid 60494] [client 93.123.109.228:34758] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/___proxy_subdomain_cpcontacts/application/.env"] [unique_id "apK-vjwSHPvvQcBSRbsokQAAAag"]
[Sat Aug 29 05:13:02.293365 2026] [security2:error] [pid 60333:tid 60486] [client 158.23.147.79:24506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.naturesfragrancelabs.com"] [uri "/wzy.php"] [unique_id "apK-vjwSHPvvQcBSRbsokgAAAaA"]
[Sat Aug 29 05:13:02.312144 2026] [security2:error] [pid 60333:tid 60523] [client 20.196.209.81:9293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.209.196.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.driversity.co.uk"] [uri "/alfa.php"] [unique_id "apK-vjwSHPvvQcBSRbsolQAAAcU"]
[Sat Aug 29 05:13:02.315475 2026] [security2:error] [pid 60333:tid 60513] [client 4.205.62.107:60514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mihpmovewell.mihp.net"] [uri "/wp-konfig.backup.php"] [unique_id "apK-vjwSHPvvQcBSRbsolgAAAbs"]
[Sat Aug 29 05:13:02.328367 2026] [security2:error] [pid 60333:tid 60570] [client 4.205.62.107:62755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.capturedart.net"] [uri "/god.php"] [unique_id "apK-vjwSHPvvQcBSRbsomQAAAfQ"]
[Sat Aug 29 05:13:02.332452 2026] [security2:error] [pid 60333:tid 60507] [client 93.123.109.228:34642] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.hyannisportclub.com"] [uri "/___proxy_subdomain_cpcontacts/apps/.env"] [unique_id "apK-vjwSHPvvQcBSRbsomgAAAbU"]
[Sat Aug 29 05:13:02.340422 2026] [security2:error] [pid 60333:tid 60526] [client 158.23.147.79:64417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.147.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.pgrconsulting.ca"] [uri "/wp-includes/IXR/index.php"] [unique_id "apK-vjwSHPvvQcBSRbsomwAAAcg"]
[Sat Aug 29 05:13:02.345113 2026] [security2:error] [pid 60333:tid 60500] [client 158.23.184.117:62940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fivetownselc.net"] [uri "/wp-admin/css/admin.php"] [unique_id "apK-vjwSHPvvQcBSRbsongAAAa4"]
[Sat Aug 29 05:13:02.348212 2026] [security2:error] [pid 60333:tid 60470] [client 20.104.49.130:63491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.49.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.pvillusions.com"] [uri "/kerang.php"] [unique_id "apK-vjwSHPvvQcBSRbsonwAAAZA"]
[Sat Aug 29 05:13:02.348232 2026] [security2:error] [pid 60333:tid 60556] [client 158.23.184.117:43831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.184.23.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dbarc.net"] [uri "/wk/admin.php"] [unique_id "apK-vjwSHPvvQcBSRbsooAAAAeY"]
[Sat Aug 29 05:13:02.363499 2026] [security2:error] [pid 60333:tid 60488] [client 20.104.18.15:16601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.moderntechservices.com"] [uri "/shiny.php"] [unique_id "apK-vjwSHPvvQcBSRbsoowAAAaI"]
[Sat Aug 29 05:13:02.372889 2026] [security2:error] [pid 60333:tid 60472] [client 4.205.62.107:63001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.205.4.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "beginnergolfguide.net"] [uri "/wp-admin/css/bolt.php"] [unique_id "apK-vjwSHPvvQcBSRbsopgAAAZI"]
[Sat Aug 29 05:13:02.384551 2026] [security2:error] [pid 60333:tid 60508] [client 20.104.18.15:17106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.104.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.christianintimacyexperts.com"] [uri "/manga.php"] [unique_id "apK-vjwSHPvvQcBSRbsorQAAAbY"]
[Sat Aug 29 05:13:02.421791 2026] [security2:error] [pid 60333:tid 60549] [client 68.155.159.216:49145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 216.159.155.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1566"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.ourstemclass.com"] [uri "/dropdown.php"] [unique_id "apK-vjwSHPvvQcBSRbsotAAAAd8"]

Cancel